diff --git a/Readme.md b/Readme.md
index 19ac917..0336e43 100644
--- a/Readme.md
+++ b/Readme.md
@@ -3,924 +3,995 @@
- 因Github Readme显示行数有限, 当前页面显示的为不完整版, 只显示了星数最高的前1000个工具. [点击查看完整版](https://github.com/alphaSeclab/sec-tool-list/blob/master/Readme_full.md)
# 工具列表
-- [**34521**星][14d] [C++] [x64dbg/x64dbg](https://github.com/x64dbg/x64dbg) Windows平台x32/x64调试器
-- [**33781**星][8d] [Py] [minimaxir/big-list-of-naughty-strings](https://github.com/minimaxir/big-list-of-naughty-strings) “淘气”的字符串列表,当作为用户输入时很容易引发问题
-- [**32724**星][2m] [hack-with-github/awesome-hacking](https://github.com/hack-with-github/awesome-hacking) A collection of various awesome lists for hackers, pentesters and security researchers
-- [**30396**星][12d] [Go] [fatedier/frp](https://github.com/fatedier/frp) 快速的反向代理, 将NAT或防火墙之后的本地服务器暴露到公网
-- [**25942**星][7d] [Py] [certbot/certbot](https://github.com/certbot/certbot) Certbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any other CA that uses the ACME protocol.
-- [**25522**星][26d] [Swift] [shadowsocks/shadowsocksx-ng](https://github.com/shadowsocks/shadowsocksx-ng) Next Generation of ShadowsocksX
-- [**25087**星][13d] [Go] [v2ray/v2ray-core](https://github.com/v2ray/v2ray-core) A platform for building proxies to bypass network restrictions.
-- [**24589**星][7d] [trimstray/the-book-of-secret-knowledge](https://github.com/trimstray/the-book-of-secret-knowledge) A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.
-- [**22517**星][12d] [Shell] [mathiasbynens/dotfiles](https://github.com/mathiasbynens/dotfiles)
-- [**21751**星][7d] [PHP] [danielmiessler/seclists](https://github.com/danielmiessler/seclists) 多种类型资源收集:用户名、密码、URL、敏感数据类型、Fuzzing Payload、WebShell等
-- [**21668**星][10d] [Go] [filosottile/mkcert](https://github.com/filosottile/mkcert) A simple zero-config tool to make locally trusted development certificates with any names you'd like.
-- [**20619**星][9d] [Java] [skylot/jadx](https://github.com/skylot/jadx) dex 转 java 的反编译器
-- [**20089**星][2m] [Shell] [streisandeffect/streisand](https://github.com/StreisandEffect/streisand) Streisand sets up a new server running your choice of WireGuard, OpenConnect, OpenSSH, OpenVPN, Shadowsocks, sslh, Stunnel, or a Tor bridge. It also generates custom instructions for all of these services. At the end of the run you are given an HTML file with instructions that can be shared with friends, family members, and fellow activists.
-- [**19651**星][2m] [Jupyter Notebook] [camdavidsonpilon/probabilistic-programming-and-bayesian-methods-for-hackers](https://github.com/camdavidsonpilon/probabilistic-programming-and-bayesian-methods-for-hackers) aka "Bayesian Methods for Hackers": An introduction to Bayesian methods + probabilistic programming with a computation/understanding-first, mathematics-second point of view. All in pure Python ;)
-- [**18996**星][7d] [Ruby] [rapid7/metasploit-framework](https://github.com/rapid7/metasploit-framework) Metasploit Framework
-- [**18648**星][3y] [fallibleinc/security-guide-for-developers](https://github.com/fallibleinc/security-guide-for-developers) Security Guide for Developers (实用性开发人员安全须知)
-- [**18381**星][7d] [Java] [nationalsecurityagency/ghidra](https://github.com/nationalsecurityagency/ghidra) 软件逆向框架
-- [**18220**星][8d] [Java] [alibaba/arthas](https://github.com/alibaba/arthas) Alibaba Java诊断利器Arthas
-- [**17555**星][4y] [Go] [inconshreveable/ngrok](https://github.com/inconshreveable/ngrok) 反向代理,在公网终端和本地服务之间创建安全的隧道
-- [**16951**星][14d] [Py] [mitmproxy/mitmproxy](https://github.com/mitmproxy/mitmproxy) An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
-- [**16681**星][7d] [C#] [powershell/powershell](https://github.com/powershell/powershell) PowerShell for every system!
-- [**15756**星][8d] [Py] [sqlmapproject/sqlmap](https://github.com/sqlmapproject/sqlmap) Automatic SQL injection and database takeover tool
-- [**15694**星][9m] [micropoor/micro8](https://github.com/micropoor/micro8) 从业10年渗透笔记
-- [**15627**星][7d] [C] [curl/curl](https://github.com/curl/curl) A command line tool and library for transferring data with URL syntax, supporting HTTP, HTTPS, FTP, FTPS, GOPHER, TFTP, SCP, SFTP, SMB, TELNET, DICT, LDAP, LDAPS, FILE, IMAP, SMTP, POP3, RTSP and RTMP. libcurl offers a myriad of powerful features
-- [**14661**星][1m] [gfwlist/gfwlist](https://github.com/gfwlist/gfwlist) gfwlist
-- [**14478**星][26d] [Java] [tencent/tinker](https://github.com/tencent/tinker) Tinker is a hot-fix solution library for Android, it supports dex, library and resources update without reinstall apk.
-- [**13627**星][9m] [JS] [bannedbook/fanqiang](https://github.com/bannedbook/fanqiang) 翻墙-科学上网
-- [**13183**星][26d] [Py] [corentinj/real-time-voice-cloning](https://github.com/corentinj/real-time-voice-cloning) Clone a voice in 5 seconds to generate arbitrary speech in real-time
-- [**13081**星][17d] [Go] [jesseduffield/lazydocker](https://github.com/jesseduffield/lazydocker) The lazier way to manage everything docker
-- [**12920**星][10d] [Py] [cool-rr/pysnooper](https://github.com/cool-rr/pysnooper) Never use print for debugging again
-- [**12641**星][9d] [C] [shadowsocks/shadowsocks-libev](https://github.com/shadowsocks/shadowsocks-libev) libev port of shadowsocks
-- [**12453**星][7d] [C#] [0xd4d/dnspy](https://github.com/0xd4d/dnspy) .NET debugger and assembly editor
-- [**12203**星][14d] [Java] [signalapp/signal-android](https://github.com/signalapp/Signal-Android) A private messenger for Android.
-- [**11935**星][1m] [Go] [buger/goreplay](https://github.com/buger/goreplay) 实时捕获HTTP流量并输入测试环境,以便持续使用真实数据测试你的系统
-- [**11829**星][17d] [C] [openssl/openssl](https://github.com/openssl/openssl) TLS/SSL and crypto library
-- [**11490**星][7d] [C] [radareorg/radare2](https://github.com/radareorg/radare2) unix-like reverse engineering framework and commandline tools
-- [**11361**星][3m] [C] [robertdavidgraham/masscan](https://github.com/robertdavidgraham/masscan) masscan:世界上最快的互联网端口扫描器,号称可6分钟内扫描整个互联网
-- [**11246**星][1m] [facert/awesome-spider](https://github.com/facert/awesome-spider) 爬虫集合
-- [**11225**星][13d] [getlantern/download](https://github.com/getlantern/download) Lantern官方版本下载 蓝灯 翻墙 科学上网 外网 加速器 梯子 路由
-- [**11174**星][7d] [Java] [oracle/graal](https://github.com/oracle/graal) Run Programs Faster Anywhere
-- [**11106**星][2m] [Jupyter Notebook] [selfteaching/the-craft-of-selfteaching](https://github.com/selfteaching/the-craft-of-selfteaching) One has no future if one couldn't teach themself.
-- [**11047**星][7d] [Py] [swisskyrepo/payloadsallthethings](https://github.com/swisskyrepo/payloadsallthethings) A list of useful payloads and bypass for Web Application Security and Pentest/CTF
-- [**11013**星][2y] [Objective-C] [bang590/jspatch](https://github.com/bang590/jspatch) JSPatch bridge Objective-C and Javascript using the Objective-C runtime. You can call any Objective-C class and method in JavaScript by just including a small engine. JSPatch is generally used to hotfix iOS App.
-- [**11008**星][8d] [Py] [owasp/cheatsheetseries](https://github.com/owasp/cheatsheetseries) The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
-- [**10902**星][12d] [Objective-C] [flipboard/flex](https://github.com/flipboard/flex) An in-app debugging and exploration tool for iOS
-- [**10886**星][2m] [CSS] [hacker0x01/hacker101](https://github.com/hacker0x01/hacker101) Hacker101
-- [**10761**星][2y] [CoffeeScript] [dropbox/zxcvbn](https://github.com/dropbox/zxcvbn) Low-Budget Password Strength Estimation
-- [**10742**星][13d] [enaqx/awesome-pentest](https://github.com/enaqx/awesome-pentest) 渗透测试资源/工具集
-- [**10738**星][17d] [Java] [konloch/bytecode-viewer](https://github.com/konloch/bytecode-viewer) A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)
-- [**10107**星][8d] [Go] [goharbor/harbor](https://github.com/goharbor/harbor) An open source trusted cloud native registry project that stores, signs, and scans content.
-- [**9844**星][11d] [ruanyf/weekly](https://github.com/ruanyf/weekly) 科技爱好者周刊,每周五发布
-- [**9804**星][8m] [imthenachoman/how-to-secure-a-linux-server](https://github.com/imthenachoman/how-to-secure-a-linux-server) An evolving how-to guide for securing a Linux server.
-- [**9349**星][12d] [Ruby] [postalhq/postal](https://github.com/postalhq/postal) 全功能邮件服务器
-- [**9229**星][3m] [JS] [localtunnel/localtunnel](https://github.com/localtunnel/localtunnel) expose yourself
-- [**9182**星][8d] [Go] [cnlh/nps](https://github.com/cnlh/nps) 一款轻量级、功能强大的内网穿透代理服务器。支持tcp、udp流量转发,支持内网http代理、内网socks5代理,同时支持snappy压缩、站点保护、加密传输、多路复用、header修改等。支持web图形化管理,集成多用户模式。
-- [**9178**星][10d] [Java] [ibotpeaches/apktool](https://github.com/ibotpeaches/apktool) A tool for reverse engineering Android apk files
-- [**9141**星][8d] [C#] [icsharpcode/ilspy](https://github.com/icsharpcode/ilspy) .NET Decompiler
-- [**9064**星][27d] [JS] [valve/fingerprintjs2](https://github.com/valve/fingerprintjs2) Modern & flexible browser fingerprinting library
-- [**9003**星][9d] [PowerShell] [lukesampson/scoop](https://github.com/lukesampson/scoop) A command-line installer for Windows.
-- [**8995**星][2m] [vitalysim/awesome-hacking-resources](https://github.com/vitalysim/awesome-hacking-resources) A collection of hacking / penetration testing resources to make you better!
-- [**8988**星][9d] [Py] [sherlock-project/sherlock](https://github.com/sherlock-project/sherlock) Find Usernames Across Social Networks
-- [**8847**星][6m] [Go] [rkt/rkt](https://github.com/rkt/rkt) rkt is a pod-native container engine for Linux. It is composable, secure, and built on standards.
-- [**8712**星][15d] [C] [gentilkiwi/mimikatz](https://github.com/gentilkiwi/mimikatz) A little tool to play with Windows security
-- [**8597**星][26d] [Java] [android-hacker/virtualxposed](https://github.com/android-hacker/virtualxposed) A simple app to use Xposed without root, unlock the bootloader or modify system image, etc.
-- [**8495**星][1m] [microsoft/wsl](https://github.com/microsoft/WSL) Issues found on WSL
-- [**8408**星][2y] [brannondorsey/wifi-cracking](https://github.com/brannondorsey/wifi-cracking) 破解WPA/WPA2 Wi-Fi 路由器
-- [**8399**星][27d] [Py] [wifiphisher/wifiphisher](https://github.com/wifiphisher/wifiphisher) 流氓AP框架, 用于RedTeam和Wi-Fi安全测试
-- [**8033**星][7d] [trimstray/the-practical-linux-hardening-guide](https://github.com/trimstray/the-practical-linux-hardening-guide) This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).
-- [**7992**星][2m] [Py] [facebook/chisel](https://github.com/facebook/chisel) Chisel is a collection of LLDB commands to assist debugging iOS apps.
-- [**7952**星][3y] [Go] [cyfdecyf/cow](https://github.com/cyfdecyf/cow) HTTP proxy written in Go. COW can automatically identify blocked sites and use parent proxies to access.
-- [**7936**星][4y] [Objective-C] [shadowsocks/shadowsocks-ios](https://github.com/shadowsocks/shadowsocks-ios) Removed according to regulations.
-- [**7806**星][3m] [C++] [shiqiyu/libfacedetection](https://github.com/shiqiyu/libfacedetection) An open source library for face detection in images. The face detection speed can reach 1500FPS.
-- [**7696**星][7d] [JS] [gchq/cyberchef](https://github.com/gchq/cyberchef) The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis
-- [**7685**星][7d] [Go] [git-lfs/git-lfs](https://github.com/git-lfs/git-lfs) Git extension for versioning large files
-- [**7628**星][22d] [Java] [java-decompiler/jd-gui](https://github.com/java-decompiler/jd-gui) A standalone Java Decompiler GUI
-- [**7498**星][27d] [Py] [threat9/routersploit](https://github.com/threat9/routersploit) Exploitation Framework for Embedded Devices
-- [**7371**星][12d] [Go] [snail007/goproxy](https://github.com/snail007/goproxy) Proxy是高性能全功能的http代理、https代理、socks5代理、内网穿透、内网穿透p2p、内网穿透代理、内网穿透反向代理、内网穿透服务器、Websocket代理、TCP代理、UDP代理、DNS代理、DNS加密代理,代理API认证,全能跨平台代理服务器。
-- [**7365**星][1m] [Py] [s0md3v/xsstrike](https://github.com/s0md3v/XSStrike) Most advanced XSS scanner.
-- [**7205**星][17d] [Java] [lionsoul2014/ip2region](https://github.com/lionsoul2014/ip2region) Ip2region is a offline IP location library with accuracy rate of 99.9% and 0.0x millseconds searching performance. DB file is less then 5Mb with all ip address stored. binding for Java,PHP,C,Python,Nodejs,Golang,C#,lua. Binary,B-tree,Memory searching algorithm
-- [**7174**星][7m] [Shell] [teddysun/shadowsocks_install](https://github.com/teddysun/shadowsocks_install) Auto Install Shadowsocks Server for CentOS/Debian/Ubuntu
-- [**6994**星][14d] [Go] [future-architect/vuls](https://github.com/future-architect/vuls) 针对Linux/FreeBSD 编写的漏洞扫描器. Go 语言编写
-- [**6968**星][2m] [JS] [cs01/gdbgui](https://github.com/cs01/gdbgui) Browser-based frontend to gdb (gnu debugger). Add breakpoints, view the stack, visualize data structures, and more in C, C++, Go, Rust, and Fortran. Run gdbgui from the terminal and a new tab will open in your browser.
-- [**6956**星][10d] [C] [hashcat/hashcat](https://github.com/hashcat/hashcat) 世界上最快最先进的密码恢复工具
-- [**6954**星][13d] [Go] [nats-io/nats-server](https://github.com/nats-io/nats-server) High-Performance server for NATS, the cloud native messaging system.
-- [**6950**星][9d] [greatfire/wiki](https://github.com/greatfire/wiki) 自由浏览
-- [**6917**星][3m] [Java] [pxb1988/dex2jar](https://github.com/pxb1988/dex2jar) Tools to work with android .dex and java .class files
-- [**6844**星][2m] [Go] [sqshq/sampler](https://github.com/sqshq/sampler) A tool for shell commands execution, visualization and alerting. Configured with a simple YAML file.
-- [**6788**星][17d] [Shell] [awslabs/git-secrets](https://github.com/awslabs/git-secrets) Prevents you from committing secrets and credentials into git repositories
-- [**6708**星][9m] [Java] [amitshekhariitbhu/android-debug-database](https://github.com/amitshekhariitbhu/android-debug-database) A library for debugging android databases and shared preferences - Make Debugging Great Again
-- [**6678**星][3y] [C++] [alibaba/andfix](https://github.com/alibaba/andfix) AndFix is a library that offer hot-fix for Android App.
-- [**6639**星][9d] [Java] [zaproxy/zaproxy](https://github.com/zaproxy/zaproxy) 在开发和测试Web App时自动发现安全漏洞
-- [**6557**星][11d] [Py] [networkx/networkx](https://github.com/networkx/networkx) 用于创建、操纵和研究复杂网络的结构,Python包
-- [**6455**星][1m] [Py] [h2y/shadowrocket-adblock-rules](https://github.com/h2y/shadowrocket-adblock-rules) 提供多款 Shadowrocket 规则,带广告过滤功能。用于 iOS 未越狱设备选择性地自动翻墙。
-- [**6449**星][11d] [Shell] [cisofy/lynis](https://github.com/cisofy/lynis) Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
-- [**6440**星][9m] [HTML] [open-power-workgroup/hospital](https://github.com/open-power-workgroup/hospital) OpenPower工作组收集汇总的医院开放数据
-- [**6413**星][15d] [Go] [bettercap/bettercap](https://github.com/bettercap/bettercap) 新版的bettercap, Go 编写. bettercap 是强大的、模块化、可移植且易于扩展的 MITM 框架, 旧版用 Ruby 编写
-- [**6284**星][27d] [Py] [seatgeek/fuzzywuzzy](https://github.com/seatgeek/fuzzywuzzy) Fuzzy String Matching in Python
-- [**6182**星][2m] [Py] [yandex/gixy](https://github.com/yandex/gixy) Nginx 配置静态分析工具,防止配置错误导致安全问题,自动化错误配置检测
-- [**6170**星][6m] [rmerl/asuswrt-merlin](https://github.com/rmerl/asuswrt-merlin) Enhanced version of Asus's router firmware (Asuswrt) (legacy code base)
-- [**6158**星][3y] [PowerShell] [powershellmafia/powersploit](https://github.com/PowerShellMafia/PowerSploit) PowerSploit - A PowerShell Post-Exploitation Framework
-- [**6130**星][1y] [Hack] [facebook/fbctf](https://github.com/facebook/fbctf) Platform to host Capture the Flag competitions
-- [**6124**星][9m] [Py] [schollz/howmanypeoplearearound](https://github.com/schollz/howmanypeoplearearound) 检测 Wifi 信号统计你周围的人数
-- [**6100**星][7d] [JS] [avwo/whistle](https://github.com/avwo/whistle) 基于Node实现的跨平台抓包调试代理工具(HTTP, HTTP2, HTTPS, Websocket)
-- [**6061**星][2y] [C] [jgamblin/mirai-source-code](https://github.com/jgamblin/mirai-source-code) Leaked Mirai Source Code for Research/IoC Development Purposes
-- [**6025**星][14d] [Go] [quay/clair](https://github.com/quay/clair) Vulnerability Static Analysis for Containers
-- [**6025**星][14d] [Go] [quay/clair](https://github.com/quay/clair) clair:容器(appc、docker)漏洞静态分析工具。
-- [**6002**星][11d] [Py] [cyrus-and/gdb-dashboard](https://github.com/cyrus-and/gdb-dashboard) Modular visual interface for GDB in Python
-- [**5996**星][20d] [berzerk0/probable-wordlists](https://github.com/berzerk0/probable-wordlists) Version 2 is live! Wordlists sorted by probability originally created for password generation and testing - make sure your passwords aren't popular!
-- [**5948**星][2m] [Java] [google/android-classyshark](https://github.com/google/android-classyshark) 分析基于Android/Java的App或游戏
-- [**5935**星][29d] [Py] [gallopsled/pwntools](https://github.com/gallopsled/pwntools) CTF framework and exploit development library
-- [**5870**星][6m] [JS] [haotian-wang/google-access-helper](https://github.com/haotian-wang/google-access-helper) 谷歌访问助手破解版
-- [**5850**星][8d] [C++] [radareorg/cutter](https://github.com/radareorg/cutter) 逆向框架 radare2的Qt界面,iaito的升级版
-- [**5845**星][2m] [Gnuplot] [nasa-jpl/open-source-rover](https://github.com/nasa-jpl/open-source-rover) A build-it-yourself, 6-wheel rover based on the rovers on Mars!
-- [**5811**星][7m] [JS] [sindresorhus/fkill-cli](https://github.com/sindresorhus/fkill-cli) Fabulously kill processes. Cross-platform.
-- [**5764**星][3m] [Objective-C] [square/ponydebugger](https://github.com/square/ponydebugger) Remote network and data debugging for your native iOS app using Chrome Developer Tools
-- [**5738**星][1y] [qinyuhang/shadowsocksx-ng-r](https://github.com/qinyuhang/shadowsocksx-ng-r) Next Generation of ShadowsocksX
-- [**5738**星][2y] [Py] [newsapps/beeswithmachineguns](https://github.com/newsapps/beeswithmachineguns) 创建多个micro EC2实例, 攻击指定Web App
-- [**5719**星][2m] [C] [spacehuhn/esp8266_deauther](https://github.com/spacehuhn/esp8266_deauther) 使用ESP8266 制作Wifi干扰器
-- [**5715**星][8m] [C] [xoreaxeaxeax/movfuscator](https://github.com/xoreaxeaxeax/movfuscator) C编译器,编译的二进制文件只有1个代码块。
-- [**5674**星][22d] [JS] [swagger-api/swagger-editor](https://github.com/swagger-api/swagger-editor) Swagger Editor
-- [**5653**星][16d] [Go] [casbin/casbin](https://github.com/casbin/casbin) An authorization library that supports access control models like ACL, RBAC, ABAC in Golang
-- [**5605**星][1m] [C] [rofl0r/proxychains-ng](https://github.com/rofl0r/proxychains-ng) proxychains ng (new generation) - a preloader which hooks calls to sockets in dynamically linked programs and redirects it through one or more socks/http proxies. continuation of the unmaintained proxychains project. the sf.net page is currently not updated, use releases from github release page instead.
-- [**5578**星][8d] [Ruby] [presidentbeef/brakeman](https://github.com/presidentbeef/brakeman) ROR程序的静态分析工具
-- [**5521**星][18d] [rshipp/awesome-malware-analysis](https://github.com/rshipp/awesome-malware-analysis) A curated list of awesome malware analysis tools and resources.
-- [**5517**星][27d] [Roff] [max2max/freess](https://github.com/max2max/freess) 免费ss账号 免费shadowsocks账号 免费v2ray账号 (长期更新)
-- [**5456**星][8m] [carpedm20/awesome-hacking](https://github.com/carpedm20/awesome-hacking) Hacking教程、工具和资源
-- [**5417**星][2y] [Rust] [autumnai/leaf](https://github.com/autumnai/leaf) Open Machine Intelligence Framework for Hackers. (GPU/CPU)
-- [**5392**星][2m] [Py] [axi0mx/ipwndfu](https://github.com/axi0mx/ipwndfu) open-source jailbreaking tool for many iOS devices
-- [**5353**星][5m] [C] [pwn20wndstuff/undecimus](https://github.com/pwn20wndstuff/undecimus) unc0ver jailbreak for iOS 11.0 - 12.4
-- [**5317**星][7d] [Py] [mlflow/mlflow](https://github.com/mlflow/mlflow) Open source platform for the machine learning lifecycle
-- [**5307**星][9d] [Go] [zricethezav/gitleaks](https://github.com/zricethezav/gitleaks) Audit git repos for secrets
-- [**5207**星][7m] [Py] [usarmyresearchlab/dshell](https://github.com/usarmyresearchlab/dshell) 网络审计分析
-- [**5165**星][1m] [Py] [refirmlabs/binwalk](https://github.com/ReFirmLabs/binwalk) 固件分析工具(命令行+IDA插件)
+- [**45523**星][11d] [C#] [shadowsocks/shadowsocks-windows](https://github.com/shadowsocks/shadowsocks-windows) If you want to keep a secret, you must also hide it from yourself.
+- [**34554**星][16d] [C++] [x64dbg/x64dbg](https://github.com/x64dbg/x64dbg) Windows平台x32/x64调试器
+- [**33926**星][10d] [Py] [minimaxir/big-list-of-naughty-strings](https://github.com/minimaxir/big-list-of-naughty-strings) “淘气”的字符串列表,当作为用户输入时很容易引发问题
+- [**32844**星][2m] [hack-with-github/awesome-hacking](https://github.com/hack-with-github/awesome-hacking) A collection of various awesome lists for hackers, pentesters and security researchers
+- [**32022**星][4y] [Py] [shadowsocks/shadowsocks](https://github.com/shadowsocks/shadowsocks)
+- [**30689**星][14d] [Go] [fatedier/frp](https://github.com/fatedier/frp) 快速的反向代理, 将NAT或防火墙之后的本地服务器暴露到公网
+- [**27836**星][2d] [Kotlin] [shadowsocks/shadowsocks-android](https://github.com/shadowsocks/shadowsocks-android) A shadowsocks client for Android
+- [**25977**星][2d] [Py] [certbot/certbot](https://github.com/certbot/certbot) Certbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any other CA that uses the ACME protocol.
+- [**25643**星][28d] [Swift] [shadowsocks/shadowsocksx-ng](https://github.com/shadowsocks/shadowsocksx-ng) Next Generation of ShadowsocksX
+- [**25330**星][3d] [Go] [v2ray/v2ray-core](https://github.com/v2ray/v2ray-core) A platform for building proxies to bypass network restrictions.
+- [**24826**星][2d] [xitu/gold-miner](https://github.com/xitu/gold-miner)
+- [**24727**星][5d] [trimstray/the-book-of-secret-knowledge](https://github.com/trimstray/the-book-of-secret-knowledge) A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.
+- [**22556**星][14d] [Shell] [mathiasbynens/dotfiles](https://github.com/mathiasbynens/dotfiles)
+- [**21874**星][9d] [PHP] [danielmiessler/seclists](https://github.com/danielmiessler/seclists) 多种类型资源收集:用户名、密码、URL、敏感数据类型、Fuzzing Payload、WebShell等
+- [**21778**星][12d] [Go] [filosottile/mkcert](https://github.com/filosottile/mkcert) A simple zero-config tool to make locally trusted development certificates with any names you'd like.
+- [**20680**星][5d] [Java] [skylot/jadx](https://github.com/skylot/jadx) dex 转 java 的反编译器
+- [**20159**星][5d] [Shell] [streisandeffect/streisand](https://github.com/StreisandEffect/streisand) Streisand sets up a new server running your choice of WireGuard, OpenConnect, OpenSSH, OpenVPN, Shadowsocks, sslh, Stunnel, or a Tor bridge. It also generates custom instructions for all of these services. At the end of the run you are given an HTML file with instructions that can be shared with friends, family members, and fellow activists.
+- [**19692**星][2m] [Jupyter Notebook] [camdavidsonpilon/probabilistic-programming-and-bayesian-methods-for-hackers](https://github.com/camdavidsonpilon/probabilistic-programming-and-bayesian-methods-for-hackers) aka "Bayesian Methods for Hackers": An introduction to Bayesian methods + probabilistic programming with a computation/understanding-first, mathematics-second point of view. All in pure Python ;)
+- [**19212**星][1y] [alvin9999/new-pac](https://github.com/alvin9999/new-pac) 科学/自由上网,免费ss/ssr/v2ray/goflyway账号,搭建教程
+- [**19076**星][2d] [Ruby] [rapid7/metasploit-framework](https://github.com/rapid7/metasploit-framework) Metasploit Framework
+- [**18676**星][3y] [fallibleinc/security-guide-for-developers](https://github.com/fallibleinc/security-guide-for-developers) Security Guide for Developers (实用性开发人员安全须知)
+- [**18476**星][2d] [Java] [nationalsecurityagency/ghidra](https://github.com/nationalsecurityagency/ghidra) 软件逆向框架
+- [**18390**星][3d] [Java] [alibaba/arthas](https://github.com/alibaba/arthas) Alibaba Java诊断利器Arthas
+- [**17641**星][4y] [Go] [inconshreveable/ngrok](https://github.com/inconshreveable/ngrok) 反向代理,在公网终端和本地服务之间创建安全的隧道
+- [**17069**星][6d] [Py] [mitmproxy/mitmproxy](https://github.com/mitmproxy/mitmproxy) An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
+- [**16769**星][2d] [C#] [powershell/powershell](https://github.com/powershell/powershell) PowerShell for every system!
+- [**15824**星][2d] [Py] [sqlmapproject/sqlmap](https://github.com/sqlmapproject/sqlmap) Automatic SQL injection and database takeover tool
+- [**15731**星][9m] [micropoor/micro8](https://github.com/micropoor/micro8) 从业10年渗透笔记
+- [**15718**星][3d] [C] [curl/curl](https://github.com/curl/curl) A command line tool and library for transferring data with URL syntax, supporting HTTP, HTTPS, FTP, FTPS, GOPHER, TFTP, SCP, SFTP, SMB, TELNET, DICT, LDAP, LDAPS, FILE, IMAP, SMTP, POP3, RTSP and RTMP. libcurl offers a myriad of powerful features
+- [**15363**星][21d] [Py] [drduh/macos-security-and-privacy-guide](https://github.com/drduh/macOS-Security-and-Privacy-Guide) Guide to securing and improving privacy on macOS
+- [**14744**星][1m] [gfwlist/gfwlist](https://github.com/gfwlist/gfwlist) gfwlist
+- [**14518**星][7d] [Java] [tencent/tinker](https://github.com/tencent/tinker) Tinker is a hot-fix solution library for Android, it supports dex, library and resources update without reinstall apk.
+- [**13736**星][9m] [JS] [bannedbook/fanqiang](https://github.com/bannedbook/fanqiang) 翻墙-科学上网
+- [**13548**星][28d] [Py] [corentinj/real-time-voice-cloning](https://github.com/corentinj/real-time-voice-cloning) Clone a voice in 5 seconds to generate arbitrary speech in real-time
+- [**13241**星][19d] [Go] [jesseduffield/lazydocker](https://github.com/jesseduffield/lazydocker) The lazier way to manage everything docker
+- [**12966**星][12d] [Py] [cool-rr/pysnooper](https://github.com/cool-rr/pysnooper) Never use print for debugging again
+- [**12742**星][3d] [Vue] [liyasthomas/postwoman](https://github.com/liyasthomas/postwoman)
+- [**12693**星][8d] [C] [shadowsocks/shadowsocks-libev](https://github.com/shadowsocks/shadowsocks-libev) libev port of shadowsocks
+- [**12544**星][9d] [C#] [0xd4d/dnspy](https://github.com/0xd4d/dnspy) .NET debugger and assembly editor
+- [**12325**星][2m] [Ruby] [diaspora/diaspora](https://github.com/diaspora/diaspora) A privacy-aware, distributed, open source social network.
+- [**12241**星][5d] [Java] [signalapp/signal-android](https://github.com/signalapp/Signal-Android) A private messenger for Android.
+- [**11977**星][1m] [Go] [buger/goreplay](https://github.com/buger/goreplay) 实时捕获HTTP流量并输入测试环境,以便持续使用真实数据测试你的系统
+- [**11890**星][6d] [C] [openssl/openssl](https://github.com/openssl/openssl) TLS/SSL and crypto library
+- [**11530**星][2d] [C] [radareorg/radare2](https://github.com/radareorg/radare2) unix-like reverse engineering framework and commandline tools
+- [**11418**星][3m] [C] [robertdavidgraham/masscan](https://github.com/robertdavidgraham/masscan) masscan:世界上最快的互联网端口扫描器,号称可6分钟内扫描整个互联网
+- [**11404**星][2d] [getlantern/download](https://github.com/getlantern/download) Lantern官方版本下载 蓝灯 翻墙 科学上网 外网 加速器 梯子 路由
+- [**11342**星][1m] [facert/awesome-spider](https://github.com/facert/awesome-spider) 爬虫集合
+- [**11278**星][2d] [Java] [oracle/graal](https://github.com/oracle/graal) Run Programs Faster Anywhere
+- [**11200**星][5d] [Py] [swisskyrepo/payloadsallthethings](https://github.com/swisskyrepo/payloadsallthethings) A list of useful payloads and bypass for Web Application Security and Pentest/CTF
+- [**11143**星][2m] [Jupyter Notebook] [selfteaching/the-craft-of-selfteaching](https://github.com/selfteaching/the-craft-of-selfteaching) One has no future if one couldn't teach themself.
+- [**11110**星][5d] [Py] [owasp/cheatsheetseries](https://github.com/owasp/cheatsheetseries) The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
+- [**11016**星][2y] [ObjC] [bang590/jspatch](https://github.com/bang590/jspatch) JSPatch bridge Objective-C and Javascript using the Objective-C runtime. You can call any Objective-C class and method in JavaScript by just including a small engine. JSPatch is generally used to hotfix iOS App.
+- [**10925**星][2d] [ObjC] [flipboard/flex](https://github.com/flipboard/flex) An in-app debugging and exploration tool for iOS
+- [**10907**星][2m] [CSS] [hacker0x01/hacker101](https://github.com/hacker0x01/hacker101) Hacker101
+- [**10830**星][15d] [enaqx/awesome-pentest](https://github.com/enaqx/awesome-pentest) 渗透测试资源/工具集
+- [**10780**星][2y] [CoffeeScript] [dropbox/zxcvbn](https://github.com/dropbox/zxcvbn) Low-Budget Password Strength Estimation
+- [**10757**星][19d] [Java] [konloch/bytecode-viewer](https://github.com/konloch/bytecode-viewer) A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)
+- [**10318**星][5d] [ruanyf/weekly](https://github.com/ruanyf/weekly) 科技爱好者周刊,每周五发布
+- [**10226**星][3d] [Go] [goharbor/harbor](https://github.com/goharbor/harbor) An open source trusted cloud native registry project that stores, signs, and scans content.
+- [**9830**星][8m] [imthenachoman/how-to-secure-a-linux-server](https://github.com/imthenachoman/how-to-secure-a-linux-server) An evolving how-to guide for securing a Linux server.
+- [**9613**星][4d] [Py] [sherlock-project/sherlock](https://github.com/sherlock-project/sherlock) Find Usernames Across Social Networks
+- [**9389**星][3d] [Go] [cnlh/nps](https://github.com/cnlh/nps) 一款轻量级、功能强大的内网穿透代理服务器。支持tcp、udp流量转发,支持内网http代理、内网socks5代理,同时支持snappy压缩、站点保护、加密传输、多路复用、header修改等。支持web图形化管理,集成多用户模式。
+- [**9358**星][6d] [Ruby] [postalhq/postal](https://github.com/postalhq/postal) 全功能邮件服务器
+- [**9266**星][3m] [JS] [localtunnel/localtunnel](https://github.com/localtunnel/localtunnel) expose yourself
+- [**9229**星][12d] [Java] [ibotpeaches/apktool](https://github.com/ibotpeaches/apktool) A tool for reverse engineering Android apk files
+- [**9185**星][2d] [C#] [icsharpcode/ilspy](https://github.com/icsharpcode/ilspy) .NET Decompiler
+- [**9148**星][29d] [JS] [valve/fingerprintjs2](https://github.com/valve/fingerprintjs2) Modern & flexible browser fingerprinting library
+- [**9069**星][11d] [PS] [lukesampson/scoop](https://github.com/lukesampson/scoop) A command-line installer for Windows.
+- [**9015**星][2m] [vitalysim/awesome-hacking-resources](https://github.com/vitalysim/awesome-hacking-resources) A collection of hacking / penetration testing resources to make you better!
+- [**8854**星][6m] [Go] [rkt/rkt](https://github.com/rkt/rkt) rkt is a pod-native container engine for Linux. It is composable, secure, and built on standards.
+- [**8739**星][17d] [C] [gentilkiwi/mimikatz](https://github.com/gentilkiwi/mimikatz) A little tool to play with Windows security
+- [**8646**星][28d] [Java] [android-hacker/virtualxposed](https://github.com/android-hacker/virtualxposed) A simple app to use Xposed without root, unlock the bootloader or modify system image, etc.
+- [**8525**星][1m] [microsoft/wsl](https://github.com/microsoft/WSL) Issues found on WSL
+- [**8443**星][7m] [Shell] [233boy/v2ray](https://github.com/233boy/v2ray) 最好用的 V2Ray 一键安装脚本 & 管理脚本
+- [**8424**星][2d] [Py] [wifiphisher/wifiphisher](https://github.com/wifiphisher/wifiphisher) 流氓AP框架, 用于RedTeam和Wi-Fi安全测试
+- [**8420**星][2y] [brannondorsey/wifi-cracking](https://github.com/brannondorsey/wifi-cracking) 破解WPA/WPA2 Wi-Fi 路由器
+- [**8044**星][9d] [trimstray/the-practical-linux-hardening-guide](https://github.com/trimstray/the-practical-linux-hardening-guide) This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).
+- [**8002**星][2m] [Py] [facebook/chisel](https://github.com/facebook/chisel) Chisel is a collection of LLDB commands to assist debugging iOS apps.
+- [**7986**星][1m] [Py] [mailpile/mailpile](https://github.com/mailpile/mailpile) A free & open modern, fast email client with user-friendly encryption and privacy features
+- [**7965**星][3y] [Go] [cyfdecyf/cow](https://github.com/cyfdecyf/cow) HTTP proxy written in Go. COW can automatically identify blocked sites and use parent proxies to access.
+- [**7945**星][4y] [ObjC] [shadowsocks/shadowsocks-ios](https://github.com/shadowsocks/shadowsocks-ios) Removed according to regulations.
+- [**7840**星][6d] [C++] [shiqiyu/libfacedetection](https://github.com/shiqiyu/libfacedetection) An open source library for face detection in images. The face detection speed can reach 1500FPS.
+- [**7731**星][3d] [JS] [gchq/cyberchef](https://github.com/gchq/cyberchef) The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis
+- [**7712**星][2d] [Go] [git-lfs/git-lfs](https://github.com/git-lfs/git-lfs) Git extension for versioning large files
+- [**7670**星][24d] [Java] [java-decompiler/jd-gui](https://github.com/java-decompiler/jd-gui) A standalone Java Decompiler GUI
+- [**7524**星][29d] [Py] [threat9/routersploit](https://github.com/threat9/routersploit) Exploitation Framework for Embedded Devices
+- [**7474**星][9d] [Go] [snail007/goproxy](https://github.com/snail007/goproxy) Proxy是高性能全功能的http代理、https代理、socks5代理、内网穿透、内网穿透p2p、内网穿透代理、内网穿透反向代理、内网穿透服务器、Websocket代理、TCP代理、UDP代理、DNS代理、DNS加密代理,代理API认证,全能跨平台代理服务器。
+- [**7412**星][1m] [C++] [shadowsocks/shadowsocks-qt5](https://github.com/shadowsocks/shadowsocks-qt5) A cross-platform shadowsocks GUI client
+- [**7397**星][1m] [Py] [s0md3v/xsstrike](https://github.com/s0md3v/XSStrike) Most advanced XSS scanner.
+- [**7246**星][19d] [Java] [lionsoul2014/ip2region](https://github.com/lionsoul2014/ip2region) Ip2region is a offline IP location library with accuracy rate of 99.9% and 0.0x millseconds searching performance. DB file is less then 5Mb with all ip address stored. binding for Java,PHP,C,Python,Nodejs,Golang,C#,lua. Binary,B-tree,Memory searching algorithm
+- [**7186**星][7m] [Shell] [teddysun/shadowsocks_install](https://github.com/teddysun/shadowsocks_install) Auto Install Shadowsocks Server for CentOS/Debian/Ubuntu
+- [**7017**星][16d] [Go] [future-architect/vuls](https://github.com/future-architect/vuls) 针对Linux/FreeBSD 编写的漏洞扫描器. Go 语言编写
+- [**6989**星][5d] [C] [hashcat/hashcat](https://github.com/hashcat/hashcat) 世界上最快最先进的密码恢复工具
+- [**6984**星][2d] [Go] [nats-io/nats-server](https://github.com/nats-io/nats-server) High-Performance server for NATS, the cloud native messaging system.
+- [**6984**星][2m] [JS] [cs01/gdbgui](https://github.com/cs01/gdbgui) Browser-based frontend to gdb (gnu debugger). Add breakpoints, view the stack, visualize data structures, and more in C, C++, Go, Rust, and Fortran. Run gdbgui from the terminal and a new tab will open in your browser.
+- [**6957**星][11d] [greatfire/wiki](https://github.com/greatfire/wiki) 自由浏览
+- [**6949**星][3m] [Java] [pxb1988/dex2jar](https://github.com/pxb1988/dex2jar) Tools to work with android .dex and java .class files
+- [**6869**星][2m] [Go] [sqshq/sampler](https://github.com/sqshq/sampler) A tool for shell commands execution, visualization and alerting. Configured with a simple YAML file.
+- [**6812**星][19d] [Shell] [awslabs/git-secrets](https://github.com/awslabs/git-secrets) Prevents you from committing secrets and credentials into git repositories
+- [**6732**星][9m] [Java] [amitshekhariitbhu/android-debug-database](https://github.com/amitshekhariitbhu/android-debug-database) A library for debugging android databases and shared preferences - Make Debugging Great Again
+- [**6683**星][3d] [Java] [zaproxy/zaproxy](https://github.com/zaproxy/zaproxy) 在开发和测试Web App时自动发现安全漏洞
+- [**6682**星][3y] [C++] [alibaba/andfix](https://github.com/alibaba/andfix) AndFix is a library that offer hot-fix for Android App.
+- [**6668**星][12d] [C++] [keepassxreboot/keepassxc](https://github.com/keepassxreboot/keepassxc) KeePassXC is a cross-platform community-driven port of the Windows application “Keepass Password Safe”.
+- [**6595**星][3d] [Py] [networkx/networkx](https://github.com/networkx/networkx) 用于创建、操纵和研究复杂网络的结构,Python包
+- [**6555**星][6m] [Go] [shadowsocks/shadowsocks-go](https://github.com/shadowsocks/shadowsocks-go) go port of shadowsocks (Deprecated)
+- [**6518**星][1m] [Py] [h2y/shadowrocket-adblock-rules](https://github.com/h2y/shadowrocket-adblock-rules) 提供多款 Shadowrocket 规则,带广告过滤功能。用于 iOS 未越狱设备选择性地自动翻墙。
+- [**6462**星][5d] [Shell] [cisofy/lynis](https://github.com/cisofy/lynis) Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
+- [**6451**星][17d] [Go] [bettercap/bettercap](https://github.com/bettercap/bettercap) 新版的bettercap, Go 编写. bettercap 是强大的、模块化、可移植且易于扩展的 MITM 框架, 旧版用 Ruby 编写
+- [**6448**星][9m] [HTML] [open-power-workgroup/hospital](https://github.com/open-power-workgroup/hospital) OpenPower工作组收集汇总的医院开放数据
+- [**6310**星][29d] [Py] [seatgeek/fuzzywuzzy](https://github.com/seatgeek/fuzzywuzzy) Fuzzy String Matching in Python
+- [**6197**星][2m] [ObjC] [johnno1962/injectionforxcode](https://github.com/johnno1962/injectionforxcode) Runtime Code Injection for Objective-C & Swift
+- [**6194**星][3y] [PS] [powershellmafia/powersploit](https://github.com/PowerShellMafia/PowerSploit) PowerSploit - A PowerShell Post-Exploitation Framework
+- [**6192**星][2m] [Py] [yandex/gixy](https://github.com/yandex/gixy) Nginx 配置静态分析工具,防止配置错误导致安全问题,自动化错误配置检测
+- [**6187**星][6m] [rmerl/asuswrt-merlin](https://github.com/rmerl/asuswrt-merlin) Enhanced version of Asus's router firmware (Asuswrt) (legacy code base)
+- [**6146**星][2d] [JS] [avwo/whistle](https://github.com/avwo/whistle) 基于Node实现的跨平台抓包调试代理工具(HTTP, HTTP2, HTTPS, Websocket)
+- [**6137**星][1y] [Hack] [facebook/fbctf](https://github.com/facebook/fbctf) Platform to host Capture the Flag competitions
+- [**6128**星][9m] [Py] [schollz/howmanypeoplearearound](https://github.com/schollz/howmanypeoplearearound) 检测 Wifi 信号统计你周围的人数
+- [**6092**星][15d] [Go] [usefathom/fathom](https://github.com/usefathom/fathom) Fathom Lite. Simple, privacy-focused website analytics. Built with Golang & Preact.
+- [**6074**星][16d] [Go] [quay/clair](https://github.com/quay/clair) Vulnerability Static Analysis for Containers
+- [**6074**星][16d] [Go] [quay/clair](https://github.com/quay/clair) clair:容器(appc、docker)漏洞静态分析工具。
+- [**6073**星][5m] [Java] [qihoo360/replugin](https://github.com/qihoo360/replugin) RePlugin - A flexible, stable, easy-to-use Android Plug-in Framework
+- [**6070**星][2y] [C] [jgamblin/mirai-source-code](https://github.com/jgamblin/mirai-source-code) Leaked Mirai Source Code for Research/IoC Development Purposes
+- [**6021**星][3d] [Py] [cyrus-and/gdb-dashboard](https://github.com/cyrus-and/gdb-dashboard) Modular visual interface for GDB in Python
+- [**6017**星][7d] [berzerk0/probable-wordlists](https://github.com/berzerk0/probable-wordlists) Version 2 is live! Wordlists sorted by probability originally created for password generation and testing - make sure your passwords aren't popular!
+- [**5972**星][2m] [Java] [google/android-classyshark](https://github.com/google/android-classyshark) 分析基于Android/Java的App或游戏
+- [**5968**星][2d] [Py] [gallopsled/pwntools](https://github.com/gallopsled/pwntools) CTF framework and exploit development library
+- [**5942**星][6m] [JS] [haotian-wang/google-access-helper](https://github.com/haotian-wang/google-access-helper) 谷歌访问助手破解版
+- [**5888**星][2d] [Py] [asciimoo/searx](https://github.com/asciimoo/searx) searx:网络元数据搜索引擎。汇总70 多个搜索引擎的搜素结果,避免用户被追踪或者被分析。可与 Tor 结合使用
+- [**5879**星][2d] [C++] [radareorg/cutter](https://github.com/radareorg/cutter) 逆向框架 radare2的Qt界面,iaito的升级版
+- [**5871**星][2m] [Gnuplot] [nasa-jpl/open-source-rover](https://github.com/nasa-jpl/open-source-rover) A build-it-yourself, 6-wheel rover based on the rovers on Mars!
+- [**5815**星][7m] [JS] [sindresorhus/fkill-cli](https://github.com/sindresorhus/fkill-cli) Fabulously kill processes. Cross-platform.
+- [**5773**星][1y] [qinyuhang/shadowsocksx-ng-r](https://github.com/qinyuhang/shadowsocksx-ng-r) Next Generation of ShadowsocksX
+- [**5766**星][3m] [ObjC] [square/ponydebugger](https://github.com/square/ponydebugger) Remote network and data debugging for your native iOS app using Chrome Developer Tools
+- [**5762**星][2m] [C] [spacehuhn/esp8266_deauther](https://github.com/spacehuhn/esp8266_deauther) 使用ESP8266 制作Wifi干扰器
+- [**5742**星][2y] [Py] [newsapps/beeswithmachineguns](https://github.com/newsapps/beeswithmachineguns) 创建多个micro EC2实例, 攻击指定Web App
+- [**5740**星][8m] [C] [xoreaxeaxeax/movfuscator](https://github.com/xoreaxeaxeax/movfuscator) C编译器,编译的二进制文件只有1个代码块。
+- [**5694**星][9d] [JS] [swagger-api/swagger-editor](https://github.com/swagger-api/swagger-editor) Swagger Editor
+- [**5693**星][2d] [Go] [casbin/casbin](https://github.com/casbin/casbin) An authorization library that supports access control models like ACL, RBAC, ABAC in Golang
+- [**5626**星][1m] [C] [rofl0r/proxychains-ng](https://github.com/rofl0r/proxychains-ng) proxychains ng (new generation) - a preloader which hooks calls to sockets in dynamically linked programs and redirects it through one or more socks/http proxies. continuation of the unmaintained proxychains project. the sf.net page is currently not updated, use releases from github release page instead.
+- [**5593**星][10d] [Ruby] [presidentbeef/brakeman](https://github.com/presidentbeef/brakeman) ROR程序的静态分析工具
+- [**5565**星][29d] [Roff] [max2max/freess](https://github.com/max2max/freess) 免费ss账号 免费shadowsocks账号 免费v2ray账号 (长期更新)
+- [**5540**星][20d] [rshipp/awesome-malware-analysis](https://github.com/rshipp/awesome-malware-analysis) A curated list of awesome malware analysis tools and resources.
+- [**5476**星][8m] [carpedm20/awesome-hacking](https://github.com/carpedm20/awesome-hacking) Hacking教程、工具和资源
+- [**5417**星][2m] [Py] [axi0mx/ipwndfu](https://github.com/axi0mx/ipwndfu) open-source jailbreaking tool for many iOS devices
+- [**5413**星][2y] [Rust] [autumnai/leaf](https://github.com/autumnai/leaf) Open Machine Intelligence Framework for Hackers. (GPU/CPU)
+- [**5371**星][5m] [C] [pwn20wndstuff/undecimus](https://github.com/pwn20wndstuff/undecimus) unc0ver jailbreak for iOS 11.0 - 12.4
+- [**5371**星][2d] [Py] [mlflow/mlflow](https://github.com/mlflow/mlflow) Open source platform for the machine learning lifecycle
+- [**5324**星][4d] [Go] [zricethezav/gitleaks](https://github.com/zricethezav/gitleaks) Audit git repos for secrets
+- [**5205**星][7m] [Py] [usarmyresearchlab/dshell](https://github.com/usarmyresearchlab/dshell) 网络审计分析
+- [**5196**星][3m] [Py] [ytisf/thezoo](https://github.com/ytisf/thezoo) A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.
+- [**5192**星][1m] [Py] [refirmlabs/binwalk](https://github.com/ReFirmLabs/binwalk) 固件分析工具(命令行+IDA插件)
- [IDA插件](https://github.com/ReFirmLabs/binwalk/tree/master/src/scripts)
- [binwalk](https://github.com/ReFirmLabs/binwalk/tree/master/src/binwalk)
-- [**5165**星][1y] [JS] [samyk/poisontap](https://github.com/samyk/poisontap) Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.
-- [**5163**星][3m] [Py] [ytisf/thezoo](https://github.com/ytisf/thezoo) A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.
-- [**5121**星][13d] [PHP] [tennc/webshell](https://github.com/tennc/webshell) webshell收集
-- [**5111**星][18d] [Shell] [vulhub/vulhub](https://github.com/vulhub/vulhub) Pre-Built Vulnerable Environments Based on Docker-Compose
-- [**5096**星][4m] [Py] [n1nj4sec/pupy](https://github.com/n1nj4sec/pupy) Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) remote administration and post-exploitation tool mainly written in python
-- [**5092**星][19d] [C++] [avast/retdec](https://github.com/avast/retdec) 基于 LLVM 的可重定位机器码反编译器, 可检测壳、检测和重构C++类继承、重构函数/类型/结构体等、可反编译为 C 或 Python 2种高级语言格式
-- [**5067**星][2m] [sbilly/awesome-security](https://github.com/sbilly/awesome-security) 与安全相关的软件、库、文档、书籍、资源和工具等收集
-- [**5054**星][2m] [Shell] [stackexchange/blackbox](https://github.com/stackexchange/blackbox) 文件使用PGP加密后隐藏在Git/Mercurial/Subversion
-- [**5036**星][8d] [Go] [dnscrypt/dnscrypt-proxy](https://github.com/DNSCrypt/dnscrypt-proxy) 灵活的DNS代理,支持现代的加密DNS协议,例如:DNS protocols such as DNSCrypt v2, DNS-over-HTTPS and Anonymized DNSCrypt.
-- [**5028**星][1m] [Java] [meituan-dianping/walle](https://github.com/meituan-dianping/walle) Android Signature V2 Scheme签名下的新一代渠道包打包神器
-- [**5026**星][4y] [Py] [shadowsocksr-backup/shadowsocksr](https://github.com/shadowsocksr-backup/shadowsocksr) Python port of ShadowsocksR
-- [**5023**星][4m] [PowerShell] [empireproject/empire](https://github.com/EmpireProject/Empire) 后渗透框架. Windows客户端用PowerShell, Linux/OSX用Python. 之前PowerShell Empire和Python EmPyre的组合
-- [**5010**星][15d] [HTML] [owasp/owasp-mstg](https://github.com/owasp/owasp-mstg) 关于移动App安全开发、测试和逆向的相近手册
-- [**4990**星][1m] [Py] [snare/voltron](https://github.com/snare/voltron) A hacky debugger UI for hackers
-- [**4941**星][10d] [Go] [inlets/inlets](https://github.com/inlets/inlets) Expose your local endpoints to the Internet
-- [**4928**星][13d] [ASP] [hq450/fancyss](https://github.com/hq450/fancyss) fancyss is a project providing tools to across the GFW on asuswrt/merlin based router.
-- [**4924**星][20d] [Py] [trustedsec/social-engineer-toolkit](https://github.com/trustedsec/social-engineer-toolkit) The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.
-- [**4909**星][1y] [Go] [yinghuocho/firefly-proxy](https://github.com/yinghuocho/firefly-proxy) A proxy software to help circumventing the Great Firewall.
-- [**4892**星][11m] [Go] [bitly/oauth2_proxy](https://github.com/bitly/oauth2_proxy) 反向代理,静态文件服务器,提供Providers(Google/Github)认证
-- [**4872**星][2m] [Rust] [sharkdp/hexyl](https://github.com/sharkdp/hexyl) 命令行中查看hex
-- [**4872**星][7m] [Java] [guardianproject/haven](https://github.com/guardianproject/haven) 通过Android应用和设备上的传感器保护自己的个人空间和财产而又不损害
-- [**4868**星][9d] [Shell] [denisidoro/navi](https://github.com/denisidoro/navi) An interactive cheatsheet tool for the command-line
-- [**4862**星][7d] [JS] [mobsf/mobile-security-framework-mobsf](https://github.com/MobSF/Mobile-Security-Framework-MobSF) Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
-- [**4838**星][10d] [Go] [gcla/termshark](https://github.com/gcla/termshark) A terminal UI for tshark, inspired by Wireshark
-- [**4835**星][8d] [Py] [alessandroz/lazagne](https://github.com/alessandroz/lazagne) Credentials recovery project
-- [**4816**星][10d] [C] [offensive-security/exploitdb](https://github.com/offensive-security/exploitdb) The official Exploit Database repository
-- [**4793**星][8m] [Py] [10se1ucgo/disablewintracking](https://github.com/10se1ucgo/disablewintracking) Uses some known methods that attempt to minimize tracking in Windows 10
-- [**4771**星][7d] [C] [google/oss-fuzz](https://github.com/google/oss-fuzz) 开源软件fuzzing
-- [**4752**星][7d] [C++] [facebook/redex](https://github.com/facebook/redex) Android App字节码优化器
-- [**4717**星][7d] [Swift] [yanue/v2rayu](https://github.com/yanue/v2rayu) V2rayU,基于v2ray核心的mac版客户端,用于科学上网,使用swift编写,支持vmess,shadowsocks,socks5等服务协议,支持订阅, 支持二维码,剪贴板导入,手动配置,二维码分享等
-- [**4710**星][8d] [C++] [paddlepaddle/paddle-lite](https://github.com/PaddlePaddle/Paddle-Lite) Multi-platform high performance deep learning inference engine (『飞桨』多平台高性能深度学习预测引擎)
-- [**4675**星][7d] [C++] [coatisoftware/sourcetrail](https://github.com/coatisoftware/sourcetrail) Sourcetrail - free and open-source interactive source explorer
-- [**4651**星][7d] [Py] [manisso/fsociety](https://github.com/manisso/fsociety) fsociety Hacking Tools Pack – A Penetration Testing Framework
-- [**4630**星][6m] [powershell/win32-openssh](https://github.com/powershell/win32-openssh) Win32 port of OpenSSH
-- [**4627**星][16d] [C] [google/ios-webkit-debug-proxy](https://github.com/google/ios-webkit-debug-proxy) A DevTools proxy (Chrome Remote Debugging Protocol) for iOS devices (Safari Remote Web Inspector).
-- [**4616**星][8d] [JS] [beefproject/beef](https://github.com/beefproject/beef) The Browser Exploitation Framework Project
-- [**4611**星][19d] [Py] [secdev/scapy](https://github.com/secdev/scapy) 交互式数据包操作, Python, 命令行+库
-- [**4575**星][11m] [Py] [ecthros/uncaptcha2](https://github.com/ecthros/uncaptcha2) defeating the latest version of ReCaptcha with 91% accuracy
-- [**4574**星][10d] [Go] [ginuerzh/gost](https://github.com/ginuerzh/gost) GO语言实现的安全隧道
-- [**4551**星][1y] [C] [upx/upx](https://github.com/upx/upx) UPX - the Ultimate Packer for eXecutables
-- [**4549**星][8d] [C++] [mozilla/rr](https://github.com/mozilla/rr) 记录与重放App的调试执行过程
-- [**4526**星][10d] [Ruby] [wpscanteam/wpscan](https://github.com/wpscanteam/wpscan) WPScan is a free, for non-commercial use, black box WordPress Vulnerability Scanner written for security professionals and blog maintainers to test the security of their WordPress websites.
-- [**4523**星][12d] [C] [jedisct1/dsvpn](https://github.com/jedisct1/dsvpn) A Dead Simple VPN.
-- [**4485**星][18d] [TypeScript] [apis-guru/graphql-voyager](https://github.com/apis-guru/graphql-voyager)
-- [**4454**星][1y] [Go] [wallix/awless](https://github.com/wallix/awless) A Mighty CLI for AWS
-- [**4444**星][16d] [Py] [jopohl/urh](https://github.com/jopohl/urh) Universal Radio Hacker: investigate wireless protocols like a boss
-- [**4426**星][22d] [Py] [jofpin/trape](https://github.com/jofpin/trape) 学习在互联网上跟踪别人,获取其详细信息,并避免被别人跟踪
-- [**4398**星][9d] [Makefile] [frida/frida](https://github.com/frida/frida) Clone this repo to build Frida
-- [**4387**星][2m] [Shell] [zardus/ctf-tools](https://github.com/zardus/ctf-tools) Some setup scripts for security research tools.
-- [**4343**星][13d] [Swift] [signalapp/signal-ios](https://github.com/signalapp/Signal-iOS) A private messenger for iOS.
-- [**4339**星][12m] [Py] [lennylxx/ipv6-hosts](https://github.com/lennylxx/ipv6-hosts) Fork of
-- [**4310**星][29d] [JS] [cure53/dompurify](https://github.com/cure53/dompurify) a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
-- [**4307**星][5m] [Py] [diafygi/acme-tiny](https://github.com/diafygi/acme-tiny) A tiny script to issue and renew TLS certs from Let's Encrypt
-- [**4262**星][1m] [Py] [tensorflow/cleverhans](https://github.com/tensorflow/cleverhans) Python库,基准测试(benchmark)机器学习系统的漏洞生成(to)对抗样本(adversarial examples)
-- [**4261**星][1m] [Shell] [ashishb/android-security-awesome](https://github.com/ashishb/android-security-awesome) A collection of android security related resources
-- [**4256**星][11m] [JS] [butterproject/butter-desktop](https://github.com/butterproject/butter-desktop) All the free parts of Popcorn Time
-- [**4243**星][9d] [Rust] [timvisee/ffsend](https://github.com/timvisee/ffsend) Easily and securely share files from the command line
-- [**4210**星][4m] [Py] [dxa4481/trufflehog](https://github.com/dxa4481/trufflehog) Searches through git repositories for high entropy strings and secrets, digging deep into commit history
-- [**4195**星][16d] [Go] [gophish/gophish](https://github.com/gophish/gophish) 网络钓鱼工具包
-- [**4195**星][2m] [Py] [evilsocket/opensnitch](https://github.com/evilsocket/opensnitch) opensnitch:Little Snitch 应用程序防火墙的 GNU/Linux 版本。(Little Snitch:Mac操作系统的应用程序防火墙,能防止应用程序在你不知道的情况下自动访问网络)
-- [**4190**星][7m] [Objective-C] [alonemonkey/monkeydev](https://github.com/alonemonkey/monkeydev) CaptainHook Tweak、Logos Tweak and Command-line Tool、Patch iOS Apps, Without Jailbreak.
-- [**4186**星][9d] [qazbnm456/awesome-web-security](https://github.com/qazbnm456/awesome-web-security) web 安全资源列表
-- [**4183**星][1y] [Go] [michenriksen/gitrob](https://github.com/michenriksen/gitrob) 查找push到公开的Github repo中的敏感信息
-- [**4175**星][11d] [we5ter/scanners-box](https://github.com/we5ter/scanners-box) 安全行业从业者自研开源扫描器合辑
-- [**4165**星][2y] [forter/security-101-for-saas-startups](https://github.com/forter/security-101-for-saas-startups) 初学者安全小窍门
-- [**4148**星][12m] [JS] [kdzwinel/betwixt](https://github.com/kdzwinel/betwixt) Betwixt will help you analyze web traffic outside the browser using familiar Chrome DevTools interface.
-- [**4105**星][5m] [Py] [spiderclub/haipproxy](https://github.com/spiderclub/haipproxy)
-- [**4092**星][2m] [Py] [aboul3la/sublist3r](https://github.com/aboul3la/sublist3r) Fast subdomains enumeration tool for penetration testers
-- [**4091**星][7d] [Java] [spring-projects/spring-security](https://github.com/spring-projects/spring-security) Spring Security
-- [**4083**星][2y] [Py] [xoreaxeaxeax/sandsifter](https://github.com/xoreaxeaxeax/sandsifter) sandsifter:x86 处理器 Fuzzer,查找 Intel 的隐藏指令和 CPU bug
-- [**4069**星][9m] [wtsxdev/reverse-engineering](https://github.com/wtsxdev/reverse-engineering) List of awesome reverse engineering resources
-- [**4039**星][1m] [JS] [sigalor/whatsapp-web-reveng](https://github.com/sigalor/whatsapp-web-reveng) WhatsApp Web API逆向与重新实现
-- [**4033**星][7d] [Py] [google/clusterfuzz](https://github.com/google/clusterfuzz) Scalable fuzzing infrastructure.
-- [**4023**星][2m] [Java] [jesusfreke/smali](https://github.com/jesusfreke/smali) smali/baksmali
-- [**4015**星][3m] [JS] [cuckoosandbox/cuckoo](https://github.com/cuckoosandbox/cuckoo) Cuckoo Sandbox is an automated dynamic malware analysis system
-- [**3989**星][1y] [JS] [travist/jsencrypt](https://github.com/travist/jsencrypt) A Javascript library to perform OpenSSL RSA Encryption, Decryption, and Key Generation.
-- [**3985**星][20d] [drduh/yubikey-guide](https://github.com/drduh/yubikey-guide) Guide to using YubiKey for GPG and SSH
-- [**3955**星][3m] [Py] [nullarray/autosploit](https://github.com/nullarray/autosploit) Automated Mass Exploiter
-- [**3936**星][13d] [Go] [dexidp/dex](https://github.com/dexidp/dex) OpenID Connect Identity (OIDC) and OAuth 2.0 Provider with Pluggable Connectors
-- [**3929**星][2m] [JS] [apsdehal/awesome-ctf](https://github.com/apsdehal/awesome-ctf) A curated list of CTF frameworks, libraries, resources and softwares
-- [**3929**星][2m] [JS] [apsdehal/awesome-ctf](https://github.com/apsdehal/awesome-ctf) A curated list of CTF frameworks, libraries, resources and softwares
-- [**3925**星][4m] [PHP] [paragonie/awesome-appsec](https://github.com/paragonie/awesome-appsec) A curated list of resources for learning about application security
-- [**3916**星][7d] [Py] [angr/angr](https://github.com/angr/angr) A powerful and user-friendly binary analysis platform!
-- [**3908**星][14d] [Rust] [svenstaro/genact](https://github.com/svenstaro/genact) a nonsense activity generator
-- [**3907**星][1m] [C] [aquynh/capstone](https://github.com/aquynh/capstone) Capstone disassembly/disassembler framework: Core (Arm, Arm64, BPF, EVM, M68K, M680X, MOS65xx, Mips, PPC, RISCV, Sparc, SystemZ, TMS320C64x, Web Assembly, X86, X86_64, XCore) + bindings.
-- [**3896**星][2y] [C#] [shadowsocksr-backup/shadowsocksr-csharp](https://github.com/shadowsocksr-backup/shadowsocksr-csharp)
-- [**3876**星][7d] [C++] [baldurk/renderdoc](https://github.com/baldurk/renderdoc) RenderDoc is a stand-alone graphics debugging tool.
-- [**3856**星][2m] [PHP] [fuzzdb-project/fuzzdb](https://github.com/fuzzdb-project/fuzzdb) 通过动态App安全测试来查找App安全漏洞, 算是不带扫描器的漏洞扫描器
-- [**3841**星][8m] [Go] [eranyanay/1m-go-websockets](https://github.com/eranyanay/1m-go-websockets) handling 1M websockets connections in Go
-- [**3837**星][15d] [JS] [shadowsocks/shadowsocks-manager](https://github.com/shadowsocks/shadowsocks-manager) A shadowsocks manager tool for multi user and traffic control.
-- [**3836**星][11d] [Py] [secureauthcorp/impacket](https://github.com/SecureAuthCorp/impacket) Python类收集, 用于与网络协议交互
-- [**3832**星][2m] [Objective-C] [sveinbjornt/sloth](https://github.com/sveinbjornt/sloth) Mac app that shows all open files, directories and sockets in use by all running processes. Nice GUI for lsof.
-- [**3825**星][4y] [iosre/iosappreverseengineering](https://github.com/iosre/iosappreverseengineering) The world’s 1st book of very detailed iOS App reverse engineering skills :)
-- [**3781**星][13d] [hq450/fancyss_history_package](https://github.com/hq450/fancyss_history_package) 科学上网插件的离线安装包储存在这里
-- [**3770**星][30d] [jivoi/awesome-osint](https://github.com/jivoi/awesome-osint) OSINT资源收集
-- [**3763**星][5y] [shadowsocksr-backup/shadowsocks-rss](https://github.com/shadowsocksr-backup/shadowsocks-rss) ShadowsocksR update rss, SSR organization
-- [**3754**星][10m] [Py] [longld/peda](https://github.com/longld/peda) Python Exploit Development Assistance for GDB
-- [**3749**星][2m] [Go] [microsoft/ethr](https://github.com/microsoft/ethr) Ethr is a Network Performance Measurement Tool for TCP, UDP & HTTP.
-- [**3739**星][2m] [PHP] [ethicalhack3r/dvwa](https://github.com/ethicalhack3r/DVWA) Damn Vulnerable Web Application (DVWA)
-- [**3739**星][2m] [Py] [paralax/awesome-honeypots](https://github.com/paralax/awesome-honeypots) an awesome list of honeypot resources
-- [**3731**星][1m] [C] [iaik/meltdown](https://github.com/iaik/meltdown) This repository contains several applications, demonstrating the Meltdown bug.
-- [**3731**星][13d] [Go] [hashicorp/consul-template](https://github.com/hashicorp/consul-template) Template rendering, notifier, and supervisor for
-- [**3718**星][4m] [Py] [malwaredllc/byob](https://github.com/malwaredllc/byob) BYOB (Build Your Own Botnet)
-- [**3681**星][11d] [jjqqkk/chromium](https://github.com/jjqqkk/chromium) Chromium browser with SSL VPN. Use this browser to unblock websites.
-- [**3679**星][2y] [JS] [samyk/evercookie](https://github.com/samyk/evercookie) JavaScript API,在浏览器中创建超级顽固的cookie,在标准Cookie、Flask Cookie等被清除之后依然能够识别客户端
-- [**3675**星][8d] [HTML] [hamukazu/lets-get-arrested](https://github.com/hamukazu/lets-get-arrested) This project is intended to protest against the police in Japan
-- [**3660**星][1y] [Py] [misterch0c/shadowbroker](https://github.com/misterch0c/shadowbroker) 方程式最新泄露
-- [**3653**星][4m] [C] [facebook/fishhook](https://github.com/facebook/fishhook) A library that enables dynamically rebinding symbols in Mach-O binaries running on iOS.
-- [**3647**星][8d] [JS] [lesspass/lesspass](https://github.com/lesspass/lesspass)
-- [**3645**星][26d] [C#] [0xd4d/de4dot](https://github.com/0xd4d/de4dot) .NET deobfuscator and unpacker.
-- [**3640**星][4m] [C] [secwiki/windows-kernel-exploits](https://github.com/secwiki/windows-kernel-exploits) windows-kernel-exploits Windows平台提权漏洞集合
-- [**3639**星][2y] [Py] [qiyeboy/ipproxypool](https://github.com/qiyeboy/ipproxypool) IPProxyPool代理池项目,提供代理ip
-- [**3624**星][29d] [acl4ssr/acl4ssr](https://github.com/acl4ssr/acl4ssr) SSR 去广告ACL规则/SS完整GFWList规则,Telegram频道订阅地址
-- [**3621**星][2m] [C] [atmosphere-nx/atmosphere](https://github.com/atmosphere-nx/atmosphere) Atmosphère is a work-in-progress customized firmware for the Nintendo Switch.
-- [**3615**星][5y] [C#] [brandonlw/psychson](https://github.com/brandonlw/Psychson) Phison 2251-03 (2303) Custom Firmware & Existing Firmware Patches (BadUSB)
-- [**3612**星][17d] [HTML] [consensys/smart-contract-best-practices](https://github.com/consensys/smart-contract-best-practices) A guide to smart contract security best practices
-- [**3598**星][8d] [TypeScript] [javascript-obfuscator/javascript-obfuscator](https://github.com/javascript-obfuscator/javascript-obfuscator) A powerful obfuscator for JavaScript and Node.js
+- [**5167**星][20d] [Shell] [vulhub/vulhub](https://github.com/vulhub/vulhub) Pre-Built Vulnerable Environments Based on Docker-Compose
+- [**5167**星][1y] [JS] [samyk/poisontap](https://github.com/samyk/poisontap) Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.
+- [**5148**星][6d] [PHP] [tennc/webshell](https://github.com/tennc/webshell) webshell收集
+- [**5123**星][21d] [C++] [avast/retdec](https://github.com/avast/retdec) 基于 LLVM 的可重定位机器码反编译器, 可检测壳、检测和重构C++类继承、重构函数/类型/结构体等、可反编译为 C 或 Python 2种高级语言格式
+- [**5118**星][15d] [ObjC] [macpass/macpass](https://github.com/MacPass/MacPass) A native OS X KeePass client
+- [**5118**星][4m] [Py] [n1nj4sec/pupy](https://github.com/n1nj4sec/pupy) Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) remote administration and post-exploitation tool mainly written in python
+- [**5089**星][2d] [Go] [dnscrypt/dnscrypt-proxy](https://github.com/DNSCrypt/dnscrypt-proxy) 灵活的DNS代理,支持现代的加密DNS协议,例如:DNS protocols such as DNSCrypt v2, DNS-over-HTTPS and Anonymized DNSCrypt.
+- [**5082**星][2m] [sbilly/awesome-security](https://github.com/sbilly/awesome-security) 与安全相关的软件、库、文档、书籍、资源和工具等收集
+- [**5065**星][2m] [Shell] [stackexchange/blackbox](https://github.com/stackexchange/blackbox) 文件使用PGP加密后隐藏在Git/Mercurial/Subversion
+- [**5059**星][1m] [Java] [meituan-dianping/walle](https://github.com/meituan-dianping/walle) Android Signature V2 Scheme签名下的新一代渠道包打包神器
+- [**5054**星][4y] [Py] [shadowsocksr-backup/shadowsocksr](https://github.com/shadowsocksr-backup/shadowsocksr) Python port of ShadowsocksR
+- [**5042**星][2d] [HTML] [owasp/owasp-mstg](https://github.com/owasp/owasp-mstg) 关于移动App安全开发、测试和逆向的相近手册
+- [**5037**星][4m] [PS] [empireproject/empire](https://github.com/EmpireProject/Empire) 后渗透框架. Windows客户端用PowerShell, Linux/OSX用Python. 之前PowerShell Empire和Python EmPyre的组合
+- [**5021**星][2d] [Py] [mobsf/mobile-security-framework-mobsf](https://github.com/MobSF/Mobile-Security-Framework-MobSF) Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
+- [**5005**星][2d] [C++] [coatisoftware/sourcetrail](https://github.com/coatisoftware/sourcetrail) Sourcetrail - free and open-source interactive source explorer
+- [**4996**星][2d] [ASP] [hq450/fancyss](https://github.com/hq450/fancyss) fancyss is a project providing tools to across the GFW on asuswrt/merlin based router.
+- [**4996**星][6d] [Go] [inlets/inlets](https://github.com/inlets/inlets) Expose your local endpoints to the Internet
+- [**4994**星][1m] [Py] [snare/voltron](https://github.com/snare/voltron) A hacky debugger UI for hackers
+- [**4953**星][22d] [Py] [trustedsec/social-engineer-toolkit](https://github.com/trustedsec/social-engineer-toolkit) The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.
+- [**4920**星][2d] [TS] [jigsaw-code/outline-client](https://github.com/jigsaw-code/outline-client) Outline clients, developed by Jigsaw. The Outline clients use the popular Shadowsocks protocol, and lean on the Cordova and Electron frameworks to support Windows, Android / ChromeOS, Linux, iOS and macOS.
+- [**4913**星][1y] [Go] [yinghuocho/firefly-proxy](https://github.com/yinghuocho/firefly-proxy) A proxy software to help circumventing the Great Firewall.
+- [**4909**星][2d] [Shell] [denisidoro/navi](https://github.com/denisidoro/navi) An interactive cheatsheet tool for the command-line
+- [**4897**星][11m] [Go] [bitly/oauth2_proxy](https://github.com/bitly/oauth2_proxy) 反向代理,静态文件服务器,提供Providers(Google/Github)认证
+- [**4883**星][2m] [Rust] [sharkdp/hexyl](https://github.com/sharkdp/hexyl) 命令行中查看hex
+- [**4881**星][5d] [Java] [guardianproject/haven](https://github.com/guardianproject/haven) 通过Android应用和设备上的传感器保护自己的个人空间和财产而又不损害
+- [**4869**星][2d] [Swift] [yanue/v2rayu](https://github.com/yanue/v2rayu) V2rayU,基于v2ray核心的mac版客户端,用于科学上网,使用swift编写,支持vmess,shadowsocks,socks5等服务协议,支持订阅, 支持二维码,剪贴板导入,手动配置,二维码分享等
+- [**4867**星][10d] [Py] [alessandroz/lazagne](https://github.com/alessandroz/lazagne) Credentials recovery project
+- [**4847**星][3d] [Go] [gcla/termshark](https://github.com/gcla/termshark) A terminal UI for tshark, inspired by Wireshark
+- [**4841**星][2d] [C] [offensive-security/exploitdb](https://github.com/offensive-security/exploitdb) The official Exploit Database repository
+- [**4803**星][8m] [Py] [10se1ucgo/disablewintracking](https://github.com/10se1ucgo/disablewintracking) Uses some known methods that attempt to minimize tracking in Windows 10
+- [**4782**星][2d] [C] [google/oss-fuzz](https://github.com/google/oss-fuzz) 开源软件fuzzing
+- [**4761**星][2d] [C++] [facebook/redex](https://github.com/facebook/redex) Android App字节码优化器
+- [**4724**星][2d] [C++] [paddlepaddle/paddle-lite](https://github.com/PaddlePaddle/Paddle-Lite) Multi-platform high performance deep learning inference engine (『飞桨』多平台高性能深度学习预测引擎)
+- [**4691**星][9d] [Py] [manisso/fsociety](https://github.com/manisso/fsociety) fsociety Hacking Tools Pack – A Penetration Testing Framework
+- [**4639**星][3d] [Py] [secdev/scapy](https://github.com/secdev/scapy) 交互式数据包操作, Python, 命令行+库
+- [**4638**星][18d] [C] [google/ios-webkit-debug-proxy](https://github.com/google/ios-webkit-debug-proxy) A DevTools proxy (Chrome Remote Debugging Protocol) for iOS devices (Safari Remote Web Inspector).
+- [**4637**星][6m] [powershell/win32-openssh](https://github.com/powershell/win32-openssh) Win32 port of OpenSSH
+- [**4633**星][2d] [JS] [beefproject/beef](https://github.com/beefproject/beef) The Browser Exploitation Framework Project
+- [**4615**星][12d] [Go] [ginuerzh/gost](https://github.com/ginuerzh/gost) GO语言实现的安全隧道
+- [**4589**星][11m] [Py] [ecthros/uncaptcha2](https://github.com/ecthros/uncaptcha2) defeating the latest version of ReCaptcha with 91% accuracy
+- [**4583**星][1y] [C] [upx/upx](https://github.com/upx/upx) UPX - the Ultimate Packer for eXecutables
+- [**4575**星][4d] [C++] [mozilla/rr](https://github.com/mozilla/rr) 记录与重放App的调试执行过程
+- [**4543**星][4d] [Ruby] [wpscanteam/wpscan](https://github.com/wpscanteam/wpscan) WPScan is a free, for non-commercial use, black box WordPress Vulnerability Scanner written for security professionals and blog maintainers to test the security of their WordPress websites.
+- [**4529**星][6d] [C] [jedisct1/dsvpn](https://github.com/jedisct1/dsvpn) A Dead Simple VPN.
+- [**4498**星][6d] [TS] [apis-guru/graphql-voyager](https://github.com/apis-guru/graphql-voyager)
+- [**4459**星][8d] [Py] [jopohl/urh](https://github.com/jopohl/urh) Universal Radio Hacker: investigate wireless protocols like a boss
+- [**4458**星][1y] [Go] [wallix/awless](https://github.com/wallix/awless) A Mighty CLI for AWS
+- [**4449**星][3d] [Go] [dragonflyoss/dragonfly](https://github.com/dragonflyoss/Dragonfly) Dragonfly is an intelligent P2P based image and file distribution system.
+- [**4446**星][2d] [Makefile] [frida/frida](https://github.com/frida/frida) Clone this repo to build Frida
+- [**4443**星][24d] [Py] [jofpin/trape](https://github.com/jofpin/trape) 学习在互联网上跟踪别人,获取其详细信息,并避免被别人跟踪
+- [**4411**星][2m] [Shell] [zardus/ctf-tools](https://github.com/zardus/ctf-tools) Some setup scripts for security research tools.
+- [**4359**星][6d] [Swift] [signalapp/signal-ios](https://github.com/signalapp/Signal-iOS) A private messenger for iOS.
+- [**4346**星][1m] [JS] [cure53/dompurify](https://github.com/cure53/dompurify) a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
+- [**4344**星][12m] [Py] [lennylxx/ipv6-hosts](https://github.com/lennylxx/ipv6-hosts) Fork of
+- [**4313**星][5m] [Py] [diafygi/acme-tiny](https://github.com/diafygi/acme-tiny) A tiny script to issue and renew TLS certs from Let's Encrypt
+- [**4283**星][7d] [Py] [tensorflow/cleverhans](https://github.com/tensorflow/cleverhans) Python库,基准测试(benchmark)机器学习系统的漏洞生成(to)对抗样本(adversarial examples)
+- [**4280**星][1m] [Shell] [ashishb/android-security-awesome](https://github.com/ashishb/android-security-awesome) A collection of android security related resources
+- [**4261**星][5d] [Rust] [timvisee/ffsend](https://github.com/timvisee/ffsend) Easily and securely share files from the command line
+- [**4258**星][11m] [JS] [butterproject/butter-desktop](https://github.com/butterproject/butter-desktop) All the free parts of Popcorn Time
+- [**4244**星][2y] [imeiji/shadowsocks_install](https://github.com/imeiji/shadowsocks_install) Auto install shadowsocks server,thanks 秋水逸冰
+- [**4241**星][4m] [Py] [dxa4481/trufflehog](https://github.com/dxa4481/trufflehog) Searches through git repositories for high entropy strings and secrets, digging deep into commit history
+- [**4215**星][7m] [ObjC] [alonemonkey/monkeydev](https://github.com/alonemonkey/monkeydev) CaptainHook Tweak、Logos Tweak and Command-line Tool、Patch iOS Apps, Without Jailbreak.
+- [**4211**星][9d] [Go] [gophish/gophish](https://github.com/gophish/gophish) 网络钓鱼工具包
+- [**4205**星][11d] [qazbnm456/awesome-web-security](https://github.com/qazbnm456/awesome-web-security) web 安全资源列表
+- [**4204**星][1y] [Go] [michenriksen/gitrob](https://github.com/michenriksen/gitrob) 查找push到公开的Github repo中的敏感信息
+- [**4202**星][2m] [Py] [evilsocket/opensnitch](https://github.com/evilsocket/opensnitch) opensnitch:Little Snitch 应用程序防火墙的 GNU/Linux 版本。(Little Snitch:Mac操作系统的应用程序防火墙,能防止应用程序在你不知道的情况下自动访问网络)
+- [**4198**星][2d] [Py] [openmined/pysyft](https://github.com/openmined/pysyft) A library for encrypted, privacy preserving machine learning
+- [**4190**星][13d] [we5ter/scanners-box](https://github.com/we5ter/scanners-box) 安全行业从业者自研开源扫描器合辑
+- [**4171**星][2y] [forter/security-101-for-saas-startups](https://github.com/forter/security-101-for-saas-startups) 初学者安全小窍门
+- [**4149**星][12m] [JS] [kdzwinel/betwixt](https://github.com/kdzwinel/betwixt) Betwixt will help you analyze web traffic outside the browser using familiar Chrome DevTools interface.
+- [**4131**星][5d] [Java] [spring-projects/spring-security](https://github.com/spring-projects/spring-security) Spring Security
+- [**4120**星][5m] [Py] [spiderclub/haipproxy](https://github.com/spiderclub/haipproxy)
+- [**4120**星][2m] [Py] [aboul3la/sublist3r](https://github.com/aboul3la/sublist3r) Fast subdomains enumeration tool for penetration testers
+- [**4096**星][2y] [Py] [xoreaxeaxeax/sandsifter](https://github.com/xoreaxeaxeax/sandsifter) sandsifter:x86 处理器 Fuzzer,查找 Intel 的隐藏指令和 CPU bug
+- [**4092**星][9m] [wtsxdev/reverse-engineering](https://github.com/wtsxdev/reverse-engineering) List of awesome reverse engineering resources
+- [**4046**星][1m] [JS] [sigalor/whatsapp-web-reveng](https://github.com/sigalor/whatsapp-web-reveng) WhatsApp Web API逆向与重新实现
+- [**4045**星][2m] [Java] [jesusfreke/smali](https://github.com/jesusfreke/smali) smali/baksmali
+- [**4044**星][2d] [Py] [google/clusterfuzz](https://github.com/google/clusterfuzz) Scalable fuzzing infrastructure.
+- [**4022**星][22d] [drduh/yubikey-guide](https://github.com/drduh/yubikey-guide) Guide to using YubiKey for GPG and SSH
+- [**4021**星][3m] [JS] [cuckoosandbox/cuckoo](https://github.com/cuckoosandbox/cuckoo) Cuckoo Sandbox is an automated dynamic malware analysis system
+- [**4000**星][1y] [JS] [travist/jsencrypt](https://github.com/travist/jsencrypt) A Javascript library to perform OpenSSL RSA Encryption, Decryption, and Key Generation.
+- [**3967**星][3m] [Py] [nullarray/autosploit](https://github.com/nullarray/autosploit) Automated Mass Exploiter
+- [**3961**星][5d] [Go] [dexidp/dex](https://github.com/dexidp/dex) OpenID Connect Identity (OIDC) and OAuth 2.0 Provider with Pluggable Connectors
+- [**3953**星][2m] [JS] [apsdehal/awesome-ctf](https://github.com/apsdehal/awesome-ctf) A curated list of CTF frameworks, libraries, resources and softwares
+- [**3953**星][2m] [JS] [apsdehal/awesome-ctf](https://github.com/apsdehal/awesome-ctf) A curated list of CTF frameworks, libraries, resources and softwares
+- [**3937**星][3d] [Py] [angr/angr](https://github.com/angr/angr) A powerful and user-friendly binary analysis platform!
+- [**3935**星][4m] [PHP] [paragonie/awesome-appsec](https://github.com/paragonie/awesome-appsec) A curated list of resources for learning about application security
+- [**3933**星][8m] [Go] [eranyanay/1m-go-websockets](https://github.com/eranyanay/1m-go-websockets) handling 1M websockets connections in Go
+- [**3923**星][1m] [C] [aquynh/capstone](https://github.com/aquynh/capstone) Capstone disassembly/disassembler framework: Core (Arm, Arm64, BPF, EVM, M68K, M680X, MOS65xx, Mips, PPC, RISCV, Sparc, SystemZ, TMS320C64x, Web Assembly, X86, X86_64, XCore) + bindings.
+- [**3920**星][2y] [C#] [shadowsocksr-backup/shadowsocksr-csharp](https://github.com/shadowsocksr-backup/shadowsocksr-csharp)
+- [**3915**星][16d] [Rust] [svenstaro/genact](https://github.com/svenstaro/genact) a nonsense activity generator
+- [**3893**星][2d] [C++] [baldurk/renderdoc](https://github.com/baldurk/renderdoc) RenderDoc is a stand-alone graphics debugging tool.
+- [**3878**星][2m] [PHP] [fuzzdb-project/fuzzdb](https://github.com/fuzzdb-project/fuzzdb) 通过动态App安全测试来查找App安全漏洞, 算是不带扫描器的漏洞扫描器
+- [**3869**星][2d] [Py] [secureauthcorp/impacket](https://github.com/SecureAuthCorp/impacket) Python类收集, 用于与网络协议交互
+- [**3848**星][7d] [JS] [shadowsocks/shadowsocks-manager](https://github.com/shadowsocks/shadowsocks-manager) A shadowsocks manager tool for multi user and traffic control.
+- [**3845**星][2d] [hq450/fancyss_history_package](https://github.com/hq450/fancyss_history_package) 科学上网插件的离线安装包储存在这里
+- [**3838**星][2m] [ObjC] [sveinbjornt/sloth](https://github.com/sveinbjornt/sloth) Mac app that shows all open files, directories and sockets in use by all running processes. Nice GUI for lsof.
+- [**3831**星][4y] [iosre/iosappreverseengineering](https://github.com/iosre/iosappreverseengineering) The world’s 1st book of very detailed iOS App reverse engineering skills :)
+- [**3813**星][1m] [jivoi/awesome-osint](https://github.com/jivoi/awesome-osint) OSINT资源收集
+- [**3799**星][5y] [shadowsocksr-backup/shadowsocks-rss](https://github.com/shadowsocksr-backup/shadowsocks-rss) ShadowsocksR update rss, SSR organization
+- [**3767**星][10m] [Py] [longld/peda](https://github.com/longld/peda) Python Exploit Development Assistance for GDB
+- [**3763**星][2m] [Py] [paralax/awesome-honeypots](https://github.com/paralax/awesome-honeypots) an awesome list of honeypot resources
+- [**3755**星][2m] [PHP] [ethicalhack3r/dvwa](https://github.com/ethicalhack3r/DVWA) Damn Vulnerable Web Application (DVWA)
+- [**3752**星][2m] [Go] [microsoft/ethr](https://github.com/microsoft/ethr) Ethr is a Network Performance Measurement Tool for TCP, UDP & HTTP.
+- [**3736**星][8d] [Go] [hashicorp/consul-template](https://github.com/hashicorp/consul-template) Template rendering, notifier, and supervisor for
+- [**3733**星][2m] [C] [iaik/meltdown](https://github.com/iaik/meltdown) This repository contains several applications, demonstrating the Meltdown bug.
+- [**3730**星][4m] [Py] [malwaredllc/byob](https://github.com/malwaredllc/byob) BYOB (Build Your Own Botnet)
+- [**3719**星][6d] [jjqqkk/chromium](https://github.com/jjqqkk/chromium) Chromium browser with SSL VPN. Use this browser to unblock websites.
+- [**3713**星][2d] [C] [atmosphere-nx/atmosphere](https://github.com/atmosphere-nx/atmosphere) Atmosphère is a work-in-progress customized firmware for the Nintendo Switch.
+- [**3684**星][2y] [JS] [samyk/evercookie](https://github.com/samyk/evercookie) JavaScript API,在浏览器中创建超级顽固的cookie,在标准Cookie、Flask Cookie等被清除之后依然能够识别客户端
+- [**3682**星][10d] [HTML] [hamukazu/lets-get-arrested](https://github.com/hamukazu/lets-get-arrested) This project is intended to protest against the police in Japan
+- [**3670**星][2d] [JS] [lesspass/lesspass](https://github.com/lesspass/lesspass)
+- [**3668**星][8d] [C#] [0xd4d/de4dot](https://github.com/0xd4d/de4dot) .NET deobfuscator and unpacker.
+- [**3667**星][1y] [Py] [misterch0c/shadowbroker](https://github.com/misterch0c/shadowbroker) 方程式最新泄露
+- [**3666**星][5m] [C] [secwiki/windows-kernel-exploits](https://github.com/secwiki/windows-kernel-exploits) windows-kernel-exploits Windows平台提权漏洞集合
+- [**3663**星][4m] [C] [facebook/fishhook](https://github.com/facebook/fishhook) A library that enables dynamically rebinding symbols in Mach-O binaries running on iOS.
+- [**3652**星][4d] [acl4ssr/acl4ssr](https://github.com/acl4ssr/acl4ssr) SSR 去广告ACL规则/SS完整GFWList规则,Telegram频道订阅地址
+- [**3647**星][2y] [Py] [qiyeboy/ipproxypool](https://github.com/qiyeboy/ipproxypool) IPProxyPool代理池项目,提供代理ip
+- [**3622**星][6d] [TS] [javascript-obfuscator/javascript-obfuscator](https://github.com/javascript-obfuscator/javascript-obfuscator) A powerful obfuscator for JavaScript and Node.js
+- [**3621**星][7d] [HTML] [consensys/smart-contract-best-practices](https://github.com/consensys/smart-contract-best-practices) A guide to smart contract security best practices
+- [**3619**星][5y] [C#] [brandonlw/psychson](https://github.com/brandonlw/Psychson) Phison 2251-03 (2303) Custom Firmware & Existing Firmware Patches (BadUSB)
+- [**3611**星][2m] [Java] [ffay/lanproxy](https://github.com/ffay/lanproxy) lanproxy是一个将局域网个人电脑、服务器代理到公网的内网穿透工具,支持tcp流量转发,可支持任何tcp上层协议(访问内网网站、本地支付接口调试、ssh访问、远程桌面...)。目前市面上提供类似服务的有花生壳、TeamView、GoToMyCloud等等,但要使用第三方的公网服务器就必须为第三方付费,并且这些服务都有各种各样的限制,此外,由于数据包会流经第三方,因此对数据安全也是一大隐患。技术交流QQ群 946273429
+- [**3604**星][8d] [PS] [bloodhoundad/bloodhound](https://github.com/BloodHoundAD/BloodHound) a single page Javascript web application, uses graph theory to reveal the hidden and often unintended relationships within an Active Directory environment.
+- [**3598**星][26d] [C++] [anbox/anbox](https://github.com/anbox/anbox) 在常规GNU / Linux系统上引导完整的Android系统,基于容器
- [**3597**星][1y] [C#] [nummer/destroy-windows-10-spying](https://github.com/nummer/destroy-windows-10-spying) Destroy Windows Spying tool
-- [**3594**星][2m] [Java] [ffay/lanproxy](https://github.com/ffay/lanproxy) lanproxy是一个将局域网个人电脑、服务器代理到公网的内网穿透工具,支持tcp流量转发,可支持任何tcp上层协议(访问内网网站、本地支付接口调试、ssh访问、远程桌面...)。目前市面上提供类似服务的有花生壳、TeamView、GoToMyCloud等等,但要使用第三方的公网服务器就必须为第三方付费,并且这些服务都有各种各样的限制,此外,由于数据包会流经第三方,因此对数据安全也是一大隐患。技术交流QQ群 946273429
-- [**3591**星][3y] [Perl] [x0rz/eqgrp](https://github.com/x0rz/eqgrp) Decrypted content of eqgrp-auction-file.tar.xz
-- [**3587**星][2m] [PowerShell] [bloodhoundad/bloodhound](https://github.com/BloodHoundAD/BloodHound) a single page Javascript web application, uses graph theory to reveal the hidden and often unintended relationships within an Active Directory environment.
-- [**3578**星][24d] [C++] [anbox/anbox](https://github.com/anbox/anbox) 在常规GNU / Linux系统上引导完整的Android系统,基于容器
-- [**3565**星][7d] [Shell] [drwetter/testssl.sh](https://github.com/drwetter/testssl.sh) 检查服务器任意端口对 TLS/SSL 的支持、协议以及一些加密缺陷,命令行工具
-- [**3560**星][17d] [C] [nmap/nmap](https://github.com/nmap/nmap) Nmap
-- [**3544**星][6y] [R] [johnmyleswhite/ml_for_hackers](https://github.com/johnmyleswhite/ml_for_hackers) 《Machine Learning for Hackers》随书代码
+- [**3595**星][3y] [Perl] [x0rz/eqgrp](https://github.com/x0rz/eqgrp) Decrypted content of eqgrp-auction-file.tar.xz
+- [**3583**星][3d] [Shell] [drwetter/testssl.sh](https://github.com/drwetter/testssl.sh) 检查服务器任意端口对 TLS/SSL 的支持、协议以及一些加密缺陷,命令行工具
+- [**3580**星][5d] [C] [nmap/nmap](https://github.com/nmap/nmap) Nmap
+- [**3562**星][5d] [Pascal] [cheat-engine/cheat-engine](https://github.com/cheat-engine/cheat-engine) Cheat Engine. A development environment focused on modding
+- [**3542**星][6y] [R] [johnmyleswhite/ml_for_hackers](https://github.com/johnmyleswhite/ml_for_hackers) 《Machine Learning for Hackers》随书代码
+- [**3540**星][6d] [blacckhathaceekr/pentesting-bible](https://github.com/blacckhathaceekr/pentesting-bible) links reaches 10000 links & 10000 pdf files .Learn Ethical Hacking and penetration testing .hundreds of ethical hacking & penetration testing & red team & cyber security & computer science resources.
- [**3538**星][4m] [Shell] [chengr28/revokechinacerts](https://github.com/chengr28/revokechinacerts) Revoke Chinese certificates.
-- [**3525**星][8d] [Pascal] [cheat-engine/cheat-engine](https://github.com/cheat-engine/cheat-engine) Cheat Engine. A development environment focused on modding
-- [**3503**星][14d] [JS] [aol/moloch](https://github.com/aol/moloch) 数据包捕获、索引工具,支持数据库
-- [**3494**星][8m] [Go] [fanpei91/torsniff](https://github.com/fanpei91/torsniff) torsniff - a sniffer that sniffs torrents from BitTorrent network
-- [**3494**星][8m] [Go] [fanpei91/torsniff](https://github.com/fanpei91/torsniff) 从BitTorrent网络嗅探种子
-- [**3493**星][3y] [C] [hak5darren/usb-rubber-ducky](https://github.com/hak5darren/usb-rubber-ducky)
-- [**3482**星][9m] [C] [rpisec/mbe](https://github.com/rpisec/mbe) Course materials for Modern Binary Exploitation by RPISEC
-- [**3481**星][13d] [blacckhathaceekr/pentesting-bible](https://github.com/blacckhathaceekr/pentesting-bible) links reaches 10000 links & 10000 pdf files .Learn Ethical Hacking and penetration testing .hundreds of ethical hacking & penetration testing & red team & cyber security & computer science resources.
-- [**3468**星][5m] [PHP] [hanc00l/wooyun_public](https://github.com/hanc00l/wooyun_public) This repo is archived. Thanks for wooyun! 乌云公开漏洞、知识库爬虫和搜索 crawl and search for wooyun.org public bug(vulnerability) and drops
-- [**3464**星][15d] [C] [cyan4973/xxhash](https://github.com/cyan4973/xxhash) Extremely fast non-cryptographic hash algorithm
-- [**3436**星][7d] [C] [shellphish/how2heap](https://github.com/shellphish/how2heap) 学习各种堆利用技巧的repo
-- [**3431**星][13d] [Java] [meituan-dianping/robust](https://github.com/meituan-dianping/robust) Robust is an Android HotFix solution with high compatibility and high stability. Robust can fix bugs immediately without a reboot.
-- [**3421**星][13d] [Perl] [sullo/nikto](https://github.com/sullo/nikto) Nikto web server scanner
-- [**3412**星][25d] [icodesign/potatso](https://github.com/icodesign/Potatso) Potatso is an iOS client that implements different proxies with the leverage of NetworkExtension framework in iOS 10+.
-- [**3392**星][5m] [Go] [jpillora/chisel](https://github.com/jpillora/chisel) 基于HTTP的快速 TCP 隧道
-- [**3387**星][2y] [shadowsocksrr/shadowsocks-rss](https://github.com/shadowsocksrr/shadowsocks-rss) ShadowsocksR update rss, SSR organization
-- [**3383**星][22d] [PowerShell] [samratashok/nishang](https://github.com/samratashok/nishang) 渗透框架,脚本和Payload收集,主要是PowerShell,涵盖渗透的各个阶段
-- [**3326**星][13d] [Py] [google/grr](https://github.com/google/grr) remote live forensics for incident response
-- [**3325**星][5m] [C++] [wangyu-/udp2raw-tunnel](https://github.com/wangyu-/udp2raw-tunnel) udp 打洞。通过raw socket给UDP包加上TCP或ICMP header,进而绕过UDP屏蔽或QoS,或在UDP不稳定的环境下提升稳定性
-- [**3325**星][7d] [jivoi/awesome-ml-for-cybersecurity](https://github.com/jivoi/awesome-ml-for-cybersecurity) 针对网络安全的机器学习资源列表
-- [**3317**星][7d] [Py] [stamparm/maltrail](https://github.com/stamparm/maltrail) 恶意网络流量检测系统
-- [**3317**星][2y] [scanate/ethlist](https://github.com/scanate/ethlist) The Comprehensive Ethereum Reading List
-- [**3316**星][2m] [C] [screetsec/thefatrat](https://github.com/screetsec/thefatrat) Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV softw…
-- [**3282**星][8d] [Smarty] [anankke/sspanel-uim](https://github.com/anankke/sspanel-uim) 专为 Shadowsocks / ShadowsocksR / V2Ray 设计的多用户管理面板
-- [**3280**星][2m] [Swift] [yagiz/bagel](https://github.com/yagiz/bagel) a little native network debugging tool for iOS
-- [**3280**星][20d] [C] [vanhauser-thc/thc-hydra](https://github.com/vanhauser-thc/thc-hydra) 网络登录破解,支持多种服务
-- [**3269**星][27d] [C] [microsoft/windows-driver-samples](https://github.com/microsoft/windows-driver-samples) This repo contains driver samples prepared for use with Microsoft Visual Studio and the Windows Driver Kit (WDK). It contains both Universal Windows Driver and desktop-only driver samples.
-- [**3267**星][3m] [C] [nbs-system/naxsi](https://github.com/nbs-system/naxsi) NAXSI is an open-source, high performance, low rules maintenance WAF for NGINX
-- [**3266**星][12d] [C] [virustotal/yara](https://github.com/virustotal/yara) The pattern matching swiss knife
-- [**3258**星][2m] [Py] [volatilityfoundation/volatility](https://github.com/volatilityfoundation/volatility) An advanced memory forensics framework
-- [**3258**星][5y] [C++] [google/lmctfy](https://github.com/google/lmctfy) lmctfy is the open source version of Google’s container stack, which provides Linux application containers.
-- [**3255**星][7d] [C] [mikebrady/shairport-sync](https://github.com/mikebrady/shairport-sync) AirPlay audio player. Shairport Sync adds multi-room capability with Audio Synchronisation
-- [**3253**星][7m] [JS] [sindresorhus/speed-test](https://github.com/sindresorhus/speed-test) Test your internet connection speed and ping using speedtest.net from the CLI
-- [**3234**星][8d] [Java] [oldmanpushcart/greys-anatomy](https://github.com/oldmanpushcart/greys-anatomy) Java诊断工具
+- [**3533**星][14d] [C] [tencent/tencentos-tiny](https://github.com/tencent/tencentos-tiny) 腾讯物联网终端操作系统
+- [**3514**星][3y] [C] [hak5darren/usb-rubber-ducky](https://github.com/hak5darren/usb-rubber-ducky)
+- [**3510**星][2d] [JS] [aol/moloch](https://github.com/aol/moloch) 数据包捕获、索引工具,支持数据库
+- [**3501**星][8m] [Go] [fanpei91/torsniff](https://github.com/fanpei91/torsniff) torsniff - a sniffer that sniffs torrents from BitTorrent network
+- [**3501**星][8m] [Go] [fanpei91/torsniff](https://github.com/fanpei91/torsniff) 从BitTorrent网络嗅探种子
+- [**3493**星][9m] [C] [rpisec/mbe](https://github.com/rpisec/mbe) Course materials for Modern Binary Exploitation by RPISEC
+- [**3485**星][5m] [PHP] [hanc00l/wooyun_public](https://github.com/hanc00l/wooyun_public) This repo is archived. Thanks for wooyun! 乌云公开漏洞、知识库爬虫和搜索 crawl and search for wooyun.org public bug(vulnerability) and drops
+- [**3481**星][8d] [C] [cyan4973/xxhash](https://github.com/cyan4973/xxhash) Extremely fast non-cryptographic hash algorithm
+- [**3471**星][2m] [C++] [trojan-gfw/trojan](https://github.com/trojan-gfw/trojan) An unidentifiable mechanism that helps you bypass GFW.
+- [**3442**星][9d] [C] [shellphish/how2heap](https://github.com/shellphish/how2heap) 学习各种堆利用技巧的repo
+- [**3442**星][8d] [Java] [meituan-dianping/robust](https://github.com/meituan-dianping/robust) Robust is an Android HotFix solution with high compatibility and high stability. Robust can fix bugs immediately without a reboot.
+- [**3441**星][15d] [Perl] [sullo/nikto](https://github.com/sullo/nikto) Nikto web server scanner
+- [**3419**星][9d] [C] [mikebrady/shairport-sync](https://github.com/mikebrady/shairport-sync) AirPlay audio player. Shairport Sync adds multi-room capability with Audio Synchronisation
+- [**3412**星][27d] [icodesign/potatso](https://github.com/icodesign/Potatso) Potatso is an iOS client that implements different proxies with the leverage of NetworkExtension framework in iOS 10+.
+- [**3410**星][5m] [Go] [jpillora/chisel](https://github.com/jpillora/chisel) 基于HTTP的快速 TCP 隧道
+- [**3408**星][24d] [PS] [samratashok/nishang](https://github.com/samratashok/nishang) 渗透框架,脚本和Payload收集,主要是PowerShell,涵盖渗透的各个阶段
+- [**3397**星][2y] [shadowsocksrr/shadowsocks-rss](https://github.com/shadowsocksrr/shadowsocks-rss) ShadowsocksR update rss, SSR organization
+- [**3344**星][2d] [jivoi/awesome-ml-for-cybersecurity](https://github.com/jivoi/awesome-ml-for-cybersecurity) 针对网络安全的机器学习资源列表
+- [**3343**星][6d] [C] [screetsec/thefatrat](https://github.com/screetsec/thefatrat) Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV softw…
+- [**3340**星][5m] [C++] [wangyu-/udp2raw-tunnel](https://github.com/wangyu-/udp2raw-tunnel) udp 打洞。通过raw socket给UDP包加上TCP或ICMP header,进而绕过UDP屏蔽或QoS,或在UDP不稳定的环境下提升稳定性
+- [**3334**星][10d] [Smarty] [anankke/sspanel-uim](https://github.com/anankke/sspanel-uim) 专为 Shadowsocks / ShadowsocksR / V2Ray 设计的多用户管理面板
+- [**3331**星][15d] [Py] [google/grr](https://github.com/google/grr) remote live forensics for incident response
+- [**3330**星][2d] [Py] [stamparm/maltrail](https://github.com/stamparm/maltrail) 恶意网络流量检测系统
+- [**3319**星][2y] [scanate/ethlist](https://github.com/scanate/ethlist) The Comprehensive Ethereum Reading List
+- [**3303**星][22d] [C] [vanhauser-thc/thc-hydra](https://github.com/vanhauser-thc/thc-hydra) 网络登录破解,支持多种服务
+- [**3301**星][2m] [Swift] [yagiz/bagel](https://github.com/yagiz/bagel) a little native network debugging tool for iOS
+- [**3298**星][9d] [C++] [fireice-uk/xmr-stak](https://github.com/fireice-uk/xmr-stak) Free Monero RandomX Miner and unified CryptoNight miner
+- [**3285**星][7d] [C] [microsoft/windows-driver-samples](https://github.com/microsoft/windows-driver-samples) This repo contains driver samples prepared for use with Microsoft Visual Studio and the Windows Driver Kit (WDK). It contains both Universal Windows Driver and desktop-only driver samples.
+- [**3278**星][6d] [C] [virustotal/yara](https://github.com/virustotal/yara) The pattern matching swiss knife
+- [**3276**星][3m] [C] [nbs-system/naxsi](https://github.com/nbs-system/naxsi) NAXSI is an open-source, high performance, low rules maintenance WAF for NGINX
+- [**3263**星][10d] [Java] [oldmanpushcart/greys-anatomy](https://github.com/oldmanpushcart/greys-anatomy) Java诊断工具
+- [**3262**星][2m] [Py] [volatilityfoundation/volatility](https://github.com/volatilityfoundation/volatility) An advanced memory forensics framework
+- [**3260**星][8d] [Shell] [toniblyx/my-arsenal-of-aws-security-tools](https://github.com/toniblyx/my-arsenal-of-aws-security-tools) List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.
+- [**3260**星][5y] [C++] [google/lmctfy](https://github.com/google/lmctfy) lmctfy is the open source version of Google’s container stack, which provides Linux application containers.
+- [**3259**星][7m] [JS] [sindresorhus/speed-test](https://github.com/sindresorhus/speed-test) Test your internet connection speed and ping using speedtest.net from the CLI
+- [**3255**星][4d] [ObjC] [objective-see/lulu](https://github.com/objective-see/lulu) LuLu is the free macOS firewall
+- [**3247**星][29d] [JS] [koenkk/zigbee2mqtt](https://github.com/koenkk/zigbee2mqtt) Zigbee
+- [**3242**星][16d] [Py] [laramies/theharvester](https://github.com/laramies/theharvester) E-mails, subdomains and names Harvester - OSINT
+- [**3238**星][2d] [TS] [jigsaw-code/outline-server](https://github.com/jigsaw-code/outline-server) Outline Manager, developed by Jigsaw. The Outline Manager application creates and manages Outline servers, powered by Shadowsocks. It uses the Electron framework to offer support for Windows, macOS and Linux.
+- [**3236**星][5m] [Go] [meshbird/meshbird](https://github.com/meshbird/meshbird) cloud-native multi-region multi-cloud decentralized private networking
- [**3234**星][2y] [CSS] [jbtronics/crookedstylesheets](https://github.com/jbtronics/crookedstylesheets) 使用纯CSS收集网页/用户信息
-- [**3232**星][5m] [Go] [meshbird/meshbird](https://github.com/meshbird/meshbird) cloud-native multi-region multi-cloud decentralized private networking
-- [**3230**星][2m] [Objective-C] [objective-see/lulu](https://github.com/objective-see/lulu) LuLu is the free macOS firewall
-- [**3225**星][18d] [Shell] [toniblyx/my-arsenal-of-aws-security-tools](https://github.com/toniblyx/my-arsenal-of-aws-security-tools) List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.
-- [**3216**星][14d] [Py] [laramies/theharvester](https://github.com/laramies/theharvester) E-mails, subdomains and names Harvester - OSINT
-- [**3215**星][27d] [JS] [koenkk/zigbee2mqtt](https://github.com/koenkk/zigbee2mqtt) Zigbee
-- [**3214**星][4y] [C] [shadowsocks/chinadns](https://github.com/shadowsocks/chinadns) Protect yourself against DNS poisoning in China.
-- [**3214**星][2m] [Go] [dvyukov/go-fuzz](https://github.com/dvyukov/go-fuzz) Randomized testing for Go
-- [**3210**星][11d] [C] [tmate-io/tmate](https://github.com/tmate-io/tmate) Instant Terminal Sharing
-- [**3210**星][1m] [TypeScript] [google/incremental-dom](https://github.com/google/incremental-dom) An in-place DOM diffing library
-- [**3209**星][8d] [C] [betaflight/betaflight](https://github.com/betaflight/betaflight) Open Source Flight Controller Firmware
-- [**3205**星][2m] [Shell] [gfw-breaker/ssr-accounts](https://github.com/gfw-breaker/ssr-accounts) 一键部署Shadowsocks服务;免费Shadowsocks账号分享;免费SS账号分享; 翻墙;无界,自由门,SquirrelVPN
-- [**3202**星][4m] [Objective-C] [naituw/ipapatch](https://github.com/naituw/ipapatch) Patch iOS Apps, The Easy Way, Without Jailbreak.
-- [**3201**星][7m] [HTML] [leizongmin/js-xss](https://github.com/leizongmin/js-xss) Sanitize untrusted HTML (to prevent XSS) with a configuration specified by a Whitelist
-- [**3184**星][7d] [Go] [mozilla/sops](https://github.com/mozilla/sops) Simple and flexible tool for managing secrets
-- [**3182**星][3m] [C] [yarrick/iodine](https://github.com/yarrick/iodine) 通过DNS服务器传输(tunnel)IPV4数据
-- [**3182**星][1y] [Py] [kootenpv/whereami](https://github.com/kootenpv/whereami) 使用Wifi信号和机器学习预测你的位置,精确度2-10米
-- [**3180**星][13d] [Py] [maurosoria/dirsearch](https://github.com/maurosoria/dirsearch) Web path scanner
-- [**3174**星][8d] [Rich Text Format] [the-art-of-hacking/h4cker](https://github.com/The-Art-of-Hacking/h4cker) 资源收集:hacking、渗透、数字取证、事件响应、漏洞研究、漏洞开发、逆向
-- [**3168**星][1m] [C++] [spiderlabs/modsecurity](https://github.com/spiderlabs/modsecurity) ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analys…
-- [**3164**星][6m] [hslatman/awesome-threat-intelligence](https://github.com/hslatman/awesome-threat-intelligence) A curated list of Awesome Threat Intelligence resources
-- [**3163**星][24d] [C] [magnumripper/johntheripper](https://github.com/magnumripper/johntheripper) This is the official repo for John the Ripper, "Jumbo" version. The "bleeding-jumbo" branch is based on 1.9.0-Jumbo-1 which was released on May 14, 2019. An import of the "core" version of john this jumbo was based on (or newer) is found in the "master" branch (CVS:
-- [**3156**星][1m] [C] [valdikss/goodbyedpi](https://github.com/valdikss/goodbyedpi) GoodbyeDPI—Passive Deep Packet Inspection blocker and Active DPI circumvention utility (for Windows)
-- [**3145**星][1y] [Shell] [toyodadoubi/doubi](https://github.com/toyodadoubi/doubi) 一个逗比写的各种逗比脚本~
-- [**3128**星][2y] [shadowsocksr-backup/shadowsocksr-android](https://github.com/shadowsocksr-backup/shadowsocksr-android) A ShadowsocksR client for Android
-- [**3120**星][10d] [C] [meetecho/janus-gateway](https://github.com/meetecho/janus-gateway) Janus WebRTC Server
-- [**3113**星][28d] [CSS] [readthedocs/sphinx_rtd_theme](https://github.com/readthedocs/sphinx_rtd_theme) Sphinx theme for readthedocs.org
-- [**3112**星][2m] [C++] [trojan-gfw/trojan](https://github.com/trojan-gfw/trojan) An unidentifiable mechanism that helps you bypass GFW.
-- [**3109**星][7d] [Shell] [speed47/spectre-meltdown-checker](https://github.com/speed47/spectre-meltdown-checker) 检查 Linux 主机是否受处理器漏洞Spectre & Meltdown 的影响
-- [**3109**星][2m] [PowerShell] [fireeye/commando-vm](https://github.com/fireeye/commando-vm) Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@fireeye.com
-- [**3108**星][4m] [C++] [px4/firmware](https://github.com/px4/firmware) PX4 Autopilot Software
-- [**3106**星][7d] [C] [qemu/qemu](https://github.com/qemu/qemu) Official QEMU mirror. Please see
-- [**3103**星][16d] [Shell] [1n3/sn1per](https://github.com/1n3/sn1per) 自动化渗透测试框架
-- [**3102**星][7d] [JS] [duo-labs/cloudmapper](https://github.com/duo-labs/cloudmapper) 生成AWS环境的网络拓扑图
-- [**3096**星][28d] [meirwah/awesome-incident-response](https://github.com/meirwah/awesome-incident-response) A curated list of tools for incident response
-- [**3094**星][2m] [Py] [byt3bl33d3r/crackmapexec](https://github.com/byt3bl33d3r/crackmapexec) 后渗透工具,自动化评估大型Active Directory网络的安全性
-- [**3091**星][1m] [Java] [deathmarine/luyten](https://github.com/deathmarine/luyten) An Open Source Java Decompiler Gui for Procyon
-- [**3085**星][10d] [Shell] [trimstray/htrace.sh](https://github.com/trimstray/htrace.sh) My simple Swiss Army knife for http/https troubleshooting and profiling.
-- [**3084**星][11d] [Py] [tribler/tribler](https://github.com/tribler/tribler) Privacy enhanced BitTorrent client with P2P content discovery
-- [**3084**星][8d] [Shell] [softwaredownload/openwrt-fanqiang](https://github.com/softwaredownload/openwrt-fanqiang) 最好的路由器翻墙、科学上网教程—OpenWrt—shadowsocks
-- [**3069**星][9m] [JS] [jipegit/osxauditor](https://github.com/jipegit/osxauditor) OS X Auditor is a free Mac OS X computer forensics tool
-- [**3066**星][3m] [C] [zmap/zmap](https://github.com/zmap/zmap) ZMap is a fast single packet network scanner designed for Internet-wide network surveys.
-- [**3065**星][9d] [Go] [tencent/bk-cmdb](https://github.com/tencent/bk-cmdb) 蓝鲸智云配置平台(BlueKing CMDB)
-- [**3062**星][1y] [Swift] [zhuhaow/spechtlite](https://github.com/zhuhaow/spechtlite) A rule-based proxy for macOS
-- [**3061**星][20d] [C] [unicorn-engine/unicorn](https://github.com/unicorn-engine/unicorn) Unicorn CPU emulator framework (ARM, AArch64, M68K, Mips, Sparc, X86)
-- [**3059**星][1m] [Java] [calebfenton/simplify](https://github.com/calebfenton/simplify) Generic Android Deobfuscator
-- [**3058**星][7m] [Go] [michenriksen/aquatone](https://github.com/michenriksen/aquatone) 子域名枚举工具。除了经典的爆破枚举之外,还利用多种开源工具和在线服务大幅度增加发现子域名的数量。
-- [**3046**星][4m] [C++] [google/robotstxt](https://github.com/google/robotstxt) The repository contains Google's robots.txt parser and matcher as a C++ library (compliant to C++11).
-- [**3041**星][2m] [JS] [valve/fingerprintjs](https://github.com/valve/fingerprintjs) Anonymous browser fingerprint
-- [**3039**星][3m] [Py] [spiderlabs/responder](https://github.com/spiderlabs/responder) LLMNR/NBT-NS/MDNS投毒,内置HTTP/SMB/MSSQL/FTP/LDAP认证服务器, 支持NTLMv1/NTLMv2/LMv2
-- [**3007**星][9m] [C] [secwiki/linux-kernel-exploits](https://github.com/secwiki/linux-kernel-exploits) linux-kernel-exploits Linux平台提权漏洞集合
-- [**2991**星][1y] [PHP] [owner888/phpspider](https://github.com/owner888/phpspider) 《我用爬虫一天时间“偷了”知乎一百万用户,只为证明PHP是世界上最好的语言 》所使用的程序
-- [**2983**星][2m] [Go] [gwuhaolin/lightsocks](https://github.com/gwuhaolin/lightsocks) 轻量级网络混淆代理,基于 SOCKS5 协议,可用来代替 Shadowsocks
-- [**2982**星][7d] [Lua] [ntop/ntopng](https://github.com/ntop/ntopng) 基于Web的流量监控工具
-- [**2978**星][7d] [Py] [guardicore/monkey](https://github.com/guardicore/monkey) 自动化渗透测试工具, 测试数据中心的弹性, 以防范周边(perimeter)泄漏和内部服务器感染
-- [**2962**星][14d] [Objective-C] [google/santa](https://github.com/google/santa) 用于Mac系统的二进制文件白名单/黑名单系统
-- [**2947**星][27d] [Go] [cookiey/yearning](https://github.com/cookiey/yearning) A most popular sql audit platform for mysql
-- [**2937**星][13d] [JS] [webgoat/webgoat](https://github.com/webgoat/webgoat) 带漏洞WebApp
-- [**2937**星][2y] [phith0n/mind-map](https://github.com/phith0n/mind-map) 各种安全相关思维导图整理收集
-- [**2936**星][1m] [Py] [andresriancho/w3af](https://github.com/andresriancho/w3af) Web App安全扫描器, 辅助开发者和渗透测试人员识别和利用Web App中的漏洞
-- [**2935**星][19d] [Py] [cowrie/cowrie](https://github.com/cowrie/cowrie) 中型/交互型 SSH/Telnet 蜜罐,
-- [**2930**星][1y] [Py] [danmcinerney/wifijammer](https://github.com/danmcinerney/wifijammer) 持续劫持范围内的Wifi客户端和AP
-- [**2930**星][11m] [Shell] [91yun/serverspeeder](https://github.com/91yun/serverspeeder) 锐速破解版
-- [**2927**星][7d] [Zeek] [zeek/zeek](https://github.com/zeek/zeek) Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.
-- [**2916**星][15d] [Py] [twintproject/twint](https://github.com/twintproject/twint) An advanced Twitter scraping & OSINT tool written in Python that doesn't use Twitter's API, allowing you to scrape a user's followers, following, Tweets and more while evading most API limitations.
-- [**2912**星][2m] [Dockerfile] [thinkdevelop/free-ss-ssr](https://github.com/thinkdevelop/free-ss-ssr) SS账号、SSR账号、V2Ray账号
-- [**2907**星][21d] [Go] [securego/gosec](https://github.com/securego/gosec) Golang security checker
-- [**2897**星][1y] [Py] [byt3bl33d3r/mitmf](https://github.com/byt3bl33d3r/mitmf) Framework for Man-In-The-Middle attacks
-- [**2895**星][10d] [C] [libfuse/sshfs](https://github.com/libfuse/sshfs) A network filesystem client to connect to SSH servers
-- [**2892**星][11d] [secfigo/awesome-fuzzing](https://github.com/secfigo/awesome-fuzzing) A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Development like root cause analysis.
-- [**2891**星][20d] [Py] [trustedsec/ptf](https://github.com/trustedsec/ptf) 创建基于Debian/Ubuntu/ArchLinux的渗透测试环境
-- [**2876**星][7m] [C] [p-h-c/phc-winner-argon2](https://github.com/p-h-c/phc-winner-argon2) The password hash Argon2, winner of PHC
-- [**2874**星][4y] [Objective-C] [maciekish/iresign](https://github.com/maciekish/iresign) iReSign allows iDevice app bundles (.ipa) files to be signed or resigned with a digital certificate from Apple for distribution. This tool is aimed at enterprises users, for enterprise deployment, when the person signing the app is different than the person(s) developing it.
-- [**2851**星][10d] [JS] [evilsocket/pwnagotchi](https://github.com/evilsocket/pwnagotchi) 深度学习+Bettercap,基于A2C,从周围的WiFi环境中学习,以最大程度地利用捕获的WPA关键信息
-- [**2850**星][8d] [C] [lxc/lxc](https://github.com/lxc/lxc) LXC - Linux Containers
-- [**2840**星][5m] [Py] [instantbox/instantbox](https://github.com/instantbox/instantbox) Get a clean, ready-to-go Linux box in seconds.
-- [**2838**星][11d] [Objective-C] [facebook/idb](https://github.com/facebook/idb) idb is a flexible command line interface for automating iOS simulators and devices
-- [**2834**星][8m] [C++] [wangyu-/udpspeeder](https://github.com/wangyu-/udpspeeder) A Tunnel which Improves your Network Quality on a High-latency Lossy Link by using Forward Error Correction,for All Traffics(TCP/UDP/ICMP)
-- [**2830**星][9d] [HTML] [ctf-wiki/ctf-wiki](https://github.com/ctf-wiki/ctf-wiki) CTF Wiki Online. Come and join us, we need you!
-- [**2829**星][21d] [C] [ossec/ossec-hids](https://github.com/ossec/ossec-hids) 入侵检测系统
-- [**2825**星][15d] [Py] [espressif/esptool](https://github.com/espressif/esptool) ESP8266 and ESP32 serial bootloader utility
-- [**2825**星][8m] [Shell] [goreliu/wsl-terminal](https://github.com/goreliu/wsl-terminal) Terminal emulator for Windows Subsystem for Linux (WSL)
-- [**2823**星][12d] [Go] [99designs/aws-vault](https://github.com/99designs/aws-vault) A vault for securely storing and accessing AWS credentials in development environments
-- [**2820**星][1m] [Assembly] [cirosantilli/x86-bare-metal-examples](https://github.com/cirosantilli/x86-bare-metal-examples) 几十个用于学习 x86 系统编程的小型操作系统
-- [**2819**星][2y] [CSS] [maxchehab/css-keylogging](https://github.com/maxchehab/css-keylogging) Chrome extension and Express server that exploits keylogging abilities of CSS.
-- [**2815**星][4m] [C] [juliocesarfort/public-pentesting-reports](https://github.com/juliocesarfort/public-pentesting-reports) Curated list of public penetration test reports released by several consulting firms and academic security groups
-- [**2810**星][28d] [C] [tmk/tmk_keyboard](https://github.com/tmk/tmk_keyboard) Atmel AVR 和 Cortex-M键盘固件收集
-- [**2810**星][2m] [infosecn1nja/red-teaming-toolkit](https://github.com/infosecn1nja/red-teaming-toolkit) A collection of open source and commercial tools that aid in red team operations.
-- [**2805**星][1m] [paulsec/awesome-sec-talks](https://github.com/paulsec/awesome-sec-talks) A collected list of awesome security talks
-- [**2804**星][8m] [C#] [quasar/quasarrat](https://github.com/quasar/quasarrat) Remote Administration Tool for Windows
-- [**2802**星][9m] [Py] [plasma-disassembler/plasma](https://github.com/plasma-disassembler/plasma) Plasma is an interactive disassembler for x86/ARM/MIPS. It can generates indented pseudo-code with colored syntax.
-- [**2787**星][17d] [Py] [androguard/androguard](https://github.com/androguard/androguard) Reverse engineering, Malware and goodware analysis of Android applications ... and more (ninja !)
-- [**2783**星][2y] [C] [seclab-ucr/intang](https://github.com/seclab-ucr/intang) research project for circumventing the "TCP reset attack" from the Great Firewall of China (GFW) by disrupting/desynchronizing the TCP Control Block (TCB) on the censorship devices.
-- [**2779**星][28d] [Makefile] [shadowsocks/openwrt-shadowsocks](https://github.com/shadowsocks/openwrt-shadowsocks) Shadowsocks-libev for OpenWrt/LEDE
-- [**2776**星][4y] [Lua] [loveshell/ngx_lua_waf](https://github.com/loveshell/ngx_lua_waf) ngx_lua_waf是一个基于lua-nginx-module(openresty)的web应用防火墙
-- [**2767**星][2m] [Go] [kgretzky/evilginx2](https://github.com/kgretzky/evilginx2) 独立的MITM攻击工具,用于登录凭证钓鱼,可绕过双因素认证
-- [**2763**星][1m] [JS] [trufflesuite/ganache-cli](https://github.com/trufflesuite/ganache-cli) Fast Ethereum RPC client for testing and development
-- [**2761**星][10d] [Py] [jrohy/multi-v2ray](https://github.com/jrohy/multi-v2ray) v2ray easy delpoy & manage tool, support multiple user & protocol manage
-- [**2755**星][7d] [C++] [qtox/qtox](https://github.com/qtox/qtox) qTox is a chat, voice, video, and file transfer IM client using the encrypted peer-to-peer Tox protocol.
-- [**2746**星][8d] [C] [processhacker/processhacker](https://github.com/processhacker/processhacker) A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware.
-- [**2736**星][8m] [Py] [p0cl4bs/wifi-pumpkin](https://github.com/P0cL4bs/WiFi-Pumpkin) AP攻击框架, 创建虚假网络, 取消验证攻击、请求和凭证监控、透明代理、Windows更新攻击、钓鱼管理、ARP投毒、DNS嗅探、Pumpkin代理、动态图片捕获等
-- [**2736**星][1y] [C] [vanhoefm/krackattacks-scripts](https://github.com/vanhoefm/krackattacks-scripts) 检测客户端和AP是否受KRACK漏洞影响
-- [**2735**星][7d] [TypeScript] [webhintio/hint](https://github.com/webhintio/hint)
-- [**2731**星][22d] [Makefile] [theos/theos](https://github.com/theos/theos) A cross-platform suite of tools for building and deploying software for iOS and other platforms.
-- [**2727**星][2m] [secwiki/sec-chart](https://github.com/secwiki/sec-chart) 安全思维导图集合
-- [**2727**星][3y] [Py] [hephaest0s/usbkill](https://github.com/hephaest0s/usbkill) 反取证开关. 监控USB端口变化, 有变化时立即关闭计算机
-- [**2726**星][16d] [JS] [cyu/rack-cors](https://github.com/cyu/rack-cors) Rack Middleware for handling Cross-Origin Resource Sharing (CORS), which makes cross-origin AJAX possible.
-- [**2715**星][21d] [JS] [s0md3v/awesomexss](https://github.com/s0md3v/AwesomeXSS) Awesome XSS stuff
-- [**2701**星][3y] [Eagle] [samyk/magspoof](https://github.com/samyk/magspoof) 信用卡/磁条欺骗
-- [**2700**星][1m] [C] [taviso/loadlibrary](https://github.com/taviso/loadlibrary) 使 Linux系统加载并调用 Windows DLL
-- [**2683**星][4m] [Objective-C] [dantheman827/ios-app-signer](https://github.com/dantheman827/ios-app-signer) This is an app for OS X that can (re)sign apps and bundle them into ipa files that are ready to be installed on an iOS device.
-- [**2681**星][1m] [Objective-C] [kjcracks/clutch](https://github.com/kjcracks/clutch) Fast iOS executable dumper
-- [**2665**星][7d] [Go] [google/syzkaller](https://github.com/google/syzkaller) 一个unsupervised、以 coverage 为导向的Linux 系统调用fuzzer
-- [**2660**星][7d] [PowerShell] [redcanaryco/atomic-red-team](https://github.com/redcanaryco/atomic-red-team) Small and highly portable detection tests based on MITRE's ATT&CK.
-- [**2660**星][1y] [Py] [mame82/p4wnp1](https://github.com/mame82/p4wnp1) 基于Raspberry Pi Zero 或 Raspberry Pi Zero W 的USB攻击平台, 高度的可定制性
-- [**2658**星][12d] [Go] [aquasecurity/trivy](https://github.com/aquasecurity/trivy) A Simple and Comprehensive Vulnerability Scanner for Containers, Suitable for CI
-- [**2648**星][3m] [Py] [drivendata/cookiecutter-data-science](https://github.com/drivendata/cookiecutter-data-science) A logical, reasonably standardized, but flexible project structure for doing and sharing data science work.
-- [**2643**星][2m] [rmusser01/infosec_reference](https://github.com/rmusser01/infosec_reference) An Information Security Reference That Doesn't Suck
-- [**2638**星][3m] [Java] [frohoff/ysoserial](https://github.com/frohoff/ysoserial) 生成会利用不安全的Java对象反序列化的Payload
-- [**2634**星][2m] [xairy/linux-kernel-exploitation](https://github.com/xairy/linux-kernel-exploitation) Linux 内核 Fuzz 和漏洞利用的资源收集
-- [**2633**星][3m] [Java] [teevity/ice](https://github.com/teevity/ice) AWS Usage Tool
-- [**2633**星][1y] [HTML] [chybeta/web-security-learning](https://github.com/chybeta/web-security-learning) Web-Security-Learning
-- [**2622**星][15d] [JS] [bkimminich/juice-shop](https://github.com/bkimminich/juice-shop) OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
-- [**2619**星][8m] [leandromoreira/linux-network-performance-parameters](https://github.com/leandromoreira/linux-network-performance-parameters) Learn where some of the network sysctl variables fit into the Linux/Kernel network flow
-- [**2610**星][2m] [Swift] [zhuhaow/nekit](https://github.com/zhuhaow/nekit) A toolkit for Network Extension Framework
-- [**2601**星][3y] [Ruby] [arachni/arachni](https://github.com/arachni/arachni) Web Application Security Scanner Framework
-- [**2600**星][21d] [JS] [knownsec/kcon](https://github.com/knownsec/kcon) KCon is a famous Hacker Con powered by Knownsec Team.
-- [**2598**星][8d] [JS] [popcorn-official/popcorn-desktop](https://github.com/popcorn-official/popcorn-desktop) Popcorn Time is a multi-platform, free software BitTorrent client that includes an integrated media player. Desktop ( Windows / Mac / Linux ) a Butter-Project Fork
-- [**2589**星][19d] [C++] [fanout/pushpin](https://github.com/fanout/pushpin) Reverse proxy for realtime web services
-- [**2588**星][1m] [pditommaso/awesome-pipeline](https://github.com/pditommaso/awesome-pipeline) A curated list of awesome pipeline toolkits inspired by Awesome Sysadmin
-- [**2570**星][2m] [C] [huntergregal/mimipenguin](https://github.com/huntergregal/mimipenguin) dump 当前Linux用户的登录密码
-- [**2565**星][1m] [Shell] [medicean/vulapps](https://github.com/medicean/vulapps) 快速搭建各种漏洞环境(Various vulnerability environment)
-- [**2564**星][8y] [C] [id-software/quake](https://github.com/id-software/quake) Quake GPL Source Release
-- [**2563**星][5m] [Java] [google/binnavi](https://github.com/google/binnavi) 二进制分析IDE, 对反汇编代码的控制流程图和调用图进行探查/导航/编辑/注释.(IDA插件的作用是导出反汇编)
-- [**2555**星][1m] [C] [esnet/iperf](https://github.com/esnet/iperf) A TCP, UDP, and SCTP network bandwidth measurement tool
-- [**2554**星][2y] [evilsocket/bettercap](https://github.com/evilsocket/bettercap) 中间人攻击框架,功能完整,模块化设计,轻便且易于扩展。
-- [**2547**星][3m] [Py] [greenwolf/social_mapper](https://github.com/Greenwolf/social_mapper) 对多个社交网站的用户Profile图片进行大规模的人脸识别
-- [**2537**星][6m] [C] [geohot/qira](https://github.com/geohot/qira) QEMU Interactive Runtime Analyser
+- [**3233**星][9d] [Go] [mozilla/sops](https://github.com/mozilla/sops) Simple and flexible tool for managing secrets
+- [**3228**星][2d] [C] [betaflight/betaflight](https://github.com/betaflight/betaflight) Open Source Flight Controller Firmware
+- [**3223**星][2m] [Shell] [gfw-breaker/ssr-accounts](https://github.com/gfw-breaker/ssr-accounts) 一键部署Shadowsocks服务;免费Shadowsocks账号分享;免费SS账号分享; 翻墙;无界,自由门,SquirrelVPN
+- [**3222**星][6d] [C] [tmate-io/tmate](https://github.com/tmate-io/tmate) Instant Terminal Sharing
+- [**3222**星][6d] [Go] [dvyukov/go-fuzz](https://github.com/dvyukov/go-fuzz) Randomized testing for Go
+- [**3221**星][4y] [C] [shadowsocks/chinadns](https://github.com/shadowsocks/chinadns) Protect yourself against DNS poisoning in China.
+- [**3213**星][1m] [TS] [google/incremental-dom](https://github.com/google/incremental-dom) An in-place DOM diffing library
+- [**3210**星][7m] [HTML] [leizongmin/js-xss](https://github.com/leizongmin/js-xss) Sanitize untrusted HTML (to prevent XSS) with a configuration specified by a Whitelist
+- [**3209**星][5m] [ObjC] [naituw/ipapatch](https://github.com/naituw/ipapatch) Patch iOS Apps, The Easy Way, Without Jailbreak.
+- [**3208**星][4m] [C] [yarrick/iodine](https://github.com/yarrick/iodine) 通过DNS服务器传输(tunnel)IPV4数据
+- [**3205**星][15d] [Py] [maurosoria/dirsearch](https://github.com/maurosoria/dirsearch) Web path scanner
+- [**3202**星][10d] [Rich Text Format] [the-art-of-hacking/h4cker](https://github.com/The-Art-of-Hacking/h4cker) 资源收集:hacking、渗透、数字取证、事件响应、漏洞研究、漏洞开发、逆向
+- [**3187**星][1y] [Py] [kootenpv/whereami](https://github.com/kootenpv/whereami) 使用Wifi信号和机器学习预测你的位置,精确度2-10米
+- [**3187**星][6m] [hslatman/awesome-threat-intelligence](https://github.com/hslatman/awesome-threat-intelligence) A curated list of Awesome Threat Intelligence resources
+- [**3186**星][1m] [C++] [spiderlabs/modsecurity](https://github.com/spiderlabs/modsecurity) ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analys…
+- [**3180**星][27d] [C] [magnumripper/johntheripper](https://github.com/magnumripper/johntheripper) This is the official repo for John the Ripper, "Jumbo" version. The "bleeding-jumbo" branch is based on 1.9.0-Jumbo-1 which was released on May 14, 2019. An import of the "core" version of john this jumbo was based on (or newer) is found in the "master" branch (CVS:
+- [**3169**星][1m] [C] [valdikss/goodbyedpi](https://github.com/valdikss/goodbyedpi) GoodbyeDPI—Passive Deep Packet Inspection blocker and Active DPI circumvention utility (for Windows)
+- [**3162**星][1y] [Shell] [toyodadoubi/doubi](https://github.com/toyodadoubi/doubi) 一个逗比写的各种逗比脚本~
+- [**3159**星][3d] [JS] [minbrowser/min](https://github.com/minbrowser/min) A fast, minimal browser that protects your privacy
+- [**3140**星][6d] [C] [meetecho/janus-gateway](https://github.com/meetecho/janus-gateway) Janus WebRTC Server
+- [**3137**星][2y] [shadowsocksr-backup/shadowsocksr-android](https://github.com/shadowsocksr-backup/shadowsocksr-android) A ShadowsocksR client for Android
+- [**3134**星][2d] [C++] [px4/firmware](https://github.com/px4/firmware) PX4 Autopilot Software
+- [**3125**星][3d] [Shell] [1n3/sn1per](https://github.com/1n3/sn1per) 自动化渗透测试框架
+- [**3123**星][30d] [meirwah/awesome-incident-response](https://github.com/meirwah/awesome-incident-response) A curated list of tools for incident response
+- [**3123**星][2m] [PS] [fireeye/commando-vm](https://github.com/fireeye/commando-vm) Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@fireeye.com
+- [**3122**星][5d] [Go] [uber/kraken](https://github.com/uber/kraken) P2P Docker registry capable of distributing TBs of data in seconds
+- [**3121**星][30d] [CSS] [readthedocs/sphinx_rtd_theme](https://github.com/readthedocs/sphinx_rtd_theme) Sphinx theme for readthedocs.org
+- [**3121**星][8d] [JS] [duo-labs/cloudmapper](https://github.com/duo-labs/cloudmapper) 生成AWS环境的网络拓扑图
+- [**3118**星][3d] [Shell] [speed47/spectre-meltdown-checker](https://github.com/speed47/spectre-meltdown-checker) 检查 Linux 主机是否受处理器漏洞Spectre & Meltdown 的影响
+- [**3113**星][2d] [C] [qemu/qemu](https://github.com/qemu/qemu) Official QEMU mirror. Please see
+- [**3107**星][2m] [Py] [byt3bl33d3r/crackmapexec](https://github.com/byt3bl33d3r/crackmapexec) 后渗透工具,自动化评估大型Active Directory网络的安全性
+- [**3106**星][7d] [Java] [deathmarine/luyten](https://github.com/deathmarine/luyten) An Open Source Java Decompiler Gui for Procyon
+- [**3105**星][10d] [Shell] [softwaredownload/openwrt-fanqiang](https://github.com/softwaredownload/openwrt-fanqiang) 最好的路由器翻墙、科学上网教程—OpenWrt—shadowsocks
+- [**3088**星][9d] [Shell] [trimstray/htrace.sh](https://github.com/trimstray/htrace.sh) My simple Swiss Army knife for http/https troubleshooting and profiling.
+- [**3087**星][3d] [Py] [tribler/tribler](https://github.com/tribler/tribler) Privacy enhanced BitTorrent client with P2P content discovery
+- [**3085**星][11d] [Go] [tencent/bk-cmdb](https://github.com/tencent/bk-cmdb) 蓝鲸智云配置平台(BlueKing CMDB)
+- [**3084**星][22d] [C] [unicorn-engine/unicorn](https://github.com/unicorn-engine/unicorn) Unicorn CPU emulator framework (ARM, AArch64, M68K, Mips, Sparc, X86)
+- [**3080**星][3m] [C] [zmap/zmap](https://github.com/zmap/zmap) ZMap is a fast single packet network scanner designed for Internet-wide network surveys.
+- [**3076**星][7m] [Go] [michenriksen/aquatone](https://github.com/michenriksen/aquatone) 子域名枚举工具。除了经典的爆破枚举之外,还利用多种开源工具和在线服务大幅度增加发现子域名的数量。
+- [**3071**星][9m] [JS] [jipegit/osxauditor](https://github.com/jipegit/osxauditor) OS X Auditor is a free Mac OS X computer forensics tool
+- [**3065**星][1m] [Java] [calebfenton/simplify](https://github.com/calebfenton/simplify) Generic Android Deobfuscator
+- [**3063**星][1y] [Swift] [zhuhaow/spechtlite](https://github.com/zhuhaow/spechtlite) A rule-based proxy for macOS
+- [**3052**星][2m] [JS] [valve/fingerprintjs](https://github.com/valve/fingerprintjs) Anonymous browser fingerprint
+- [**3049**星][4m] [C++] [google/robotstxt](https://github.com/google/robotstxt) The repository contains Google's robots.txt parser and matcher as a C++ library (compliant to C++11).
+- [**3043**星][3m] [Py] [spiderlabs/responder](https://github.com/spiderlabs/responder) LLMNR/NBT-NS/MDNS投毒,内置HTTP/SMB/MSSQL/FTP/LDAP认证服务器, 支持NTLMv1/NTLMv2/LMv2
+- [**3029**星][2m] [Go] [gwuhaolin/lightsocks](https://github.com/gwuhaolin/lightsocks) 轻量级网络混淆代理,基于 SOCKS5 协议,可用来代替 Shadowsocks
+- [**3027**星][9m] [C] [secwiki/linux-kernel-exploits](https://github.com/secwiki/linux-kernel-exploits) linux-kernel-exploits Linux平台提权漏洞集合
+- [**3001**星][1y] [PHP] [owner888/phpspider](https://github.com/owner888/phpspider) 《我用爬虫一天时间“偷了”知乎一百万用户,只为证明PHP是世界上最好的语言 》所使用的程序
+- [**2991**星][2d] [JS] [ntop/ntopng](https://github.com/ntop/ntopng) 基于Web的流量监控工具
+- [**2986**星][7d] [Py] [guardicore/monkey](https://github.com/guardicore/monkey) 自动化渗透测试工具, 测试数据中心的弹性, 以防范周边(perimeter)泄漏和内部服务器感染
+- [**2969**星][29d] [Go] [cookiey/yearning](https://github.com/cookiey/yearning) A most popular sql audit platform for mysql
+- [**2968**星][2d] [ObjC] [google/santa](https://github.com/google/santa) 用于Mac系统的二进制文件白名单/黑名单系统
+- [**2955**星][4d] [Py] [twintproject/twint](https://github.com/twintproject/twint) An advanced Twitter scraping & OSINT tool written in Python that doesn't use Twitter's API, allowing you to scrape a user's followers, following, Tweets and more while evading most API limitations.
+- [**2955**星][11d] [Go] [dominikh/go-tools](https://github.com/dominikh/go-tools) Staticcheck – a collection of static analysis tools for working with Go code
+- [**2949**星][8d] [JS] [webgoat/webgoat](https://github.com/webgoat/webgoat) 带漏洞WebApp
+- [**2948**星][2m] [Dockerfile] [thinkdevelop/free-ss-ssr](https://github.com/thinkdevelop/free-ss-ssr) SS账号、SSR账号、V2Ray账号
+- [**2947**星][1m] [Py] [andresriancho/w3af](https://github.com/andresriancho/w3af) Web App安全扫描器, 辅助开发者和渗透测试人员识别和利用Web App中的漏洞
+- [**2945**星][2y] [phith0n/mind-map](https://github.com/phith0n/mind-map) 各种安全相关思维导图整理收集
+- [**2942**星][21d] [Py] [cowrie/cowrie](https://github.com/cowrie/cowrie) 中型/交互型 SSH/Telnet 蜜罐,
+- [**2936**星][1y] [Py] [danmcinerney/wifijammer](https://github.com/danmcinerney/wifijammer) 持续劫持范围内的Wifi客户端和AP
+- [**2933**星][2d] [Zeek] [zeek/zeek](https://github.com/zeek/zeek) Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.
+- [**2932**星][11m] [Shell] [91yun/serverspeeder](https://github.com/91yun/serverspeeder) 锐速破解版
+- [**2920**星][23d] [Go] [securego/gosec](https://github.com/securego/gosec) Golang security checker
+- [**2916**星][2d] [JS] [evilsocket/pwnagotchi](https://github.com/evilsocket/pwnagotchi) 深度学习+Bettercap,基于A2C,从周围的WiFi环境中学习,以最大程度地利用捕获的WPA关键信息
+- [**2915**星][12d] [C] [libfuse/sshfs](https://github.com/libfuse/sshfs) A network filesystem client to connect to SSH servers
+- [**2909**星][2d] [Py] [trustedsec/ptf](https://github.com/trustedsec/ptf) 创建基于Debian/Ubuntu/ArchLinux的渗透测试环境
+- [**2901**星][1y] [Py] [byt3bl33d3r/mitmf](https://github.com/byt3bl33d3r/mitmf) Framework for Man-In-The-Middle attacks
+- [**2897**星][3d] [secfigo/awesome-fuzzing](https://github.com/secfigo/awesome-fuzzing) A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Development like root cause analysis.
+- [**2883**星][7m] [C] [p-h-c/phc-winner-argon2](https://github.com/p-h-c/phc-winner-argon2) The password hash Argon2, winner of PHC
+- [**2877**星][4y] [ObjC] [maciekish/iresign](https://github.com/maciekish/iresign) iReSign allows iDevice app bundles (.ipa) files to be signed or resigned with a digital certificate from Apple for distribution. This tool is aimed at enterprises users, for enterprise deployment, when the person signing the app is different than the person(s) developing it.
+- [**2858**星][2d] [C] [lxc/lxc](https://github.com/lxc/lxc) LXC - Linux Containers
+- [**2850**星][2d] [HTML] [ctf-wiki/ctf-wiki](https://github.com/ctf-wiki/ctf-wiki) CTF Wiki Online. Come and join us, we need you!
+- [**2850**星][4d] [Go] [99designs/aws-vault](https://github.com/99designs/aws-vault) A vault for securely storing and accessing AWS credentials in development environments
+- [**2845**星][2d] [ObjC] [facebook/idb](https://github.com/facebook/idb) idb is a flexible command line interface for automating iOS simulators and devices
+- [**2842**星][5m] [Py] [instantbox/instantbox](https://github.com/instantbox/instantbox) Get a clean, ready-to-go Linux box in seconds.
+- [**2840**星][23d] [C] [ossec/ossec-hids](https://github.com/ossec/ossec-hids) 入侵检测系统
+- [**2840**星][2m] [infosecn1nja/red-teaming-toolkit](https://github.com/infosecn1nja/red-teaming-toolkit) A collection of open source and commercial tools that aid in red team operations.
+- [**2839**星][8m] [C++] [wangyu-/udpspeeder](https://github.com/wangyu-/udpspeeder) A Tunnel which Improves your Network Quality on a High-latency Lossy Link by using Forward Error Correction,for All Traffics(TCP/UDP/ICMP)
+- [**2837**星][17d] [Py] [espressif/esptool](https://github.com/espressif/esptool) ESP8266 and ESP32 serial bootloader utility
+- [**2834**星][8m] [Shell] [goreliu/wsl-terminal](https://github.com/goreliu/wsl-terminal) Terminal emulator for Windows Subsystem for Linux (WSL)
+- [**2829**星][4m] [C] [juliocesarfort/public-pentesting-reports](https://github.com/juliocesarfort/public-pentesting-reports) Curated list of public penetration test reports released by several consulting firms and academic security groups
+- [**2829**星][1m] [Assembly] [cirosantilli/x86-bare-metal-examples](https://github.com/cirosantilli/x86-bare-metal-examples) 几十个用于学习 x86 系统编程的小型操作系统
+- [**2823**星][2y] [CSS] [maxchehab/css-keylogging](https://github.com/maxchehab/css-keylogging) Chrome extension and Express server that exploits keylogging abilities of CSS.
+- [**2820**星][7d] [C] [tmk/tmk_keyboard](https://github.com/tmk/tmk_keyboard) Atmel AVR 和 Cortex-M键盘固件收集
+- [**2814**星][8m] [C#] [quasar/quasarrat](https://github.com/quasar/quasarrat) Remote Administration Tool for Windows
+- [**2814**星][5d] [Py] [jrohy/multi-v2ray](https://github.com/jrohy/multi-v2ray) v2ray easy delpoy & manage tool, support multiple user & protocol manage
+- [**2808**星][2m] [paulsec/awesome-sec-talks](https://github.com/paulsec/awesome-sec-talks) A collected list of awesome security talks
+- [**2803**星][9m] [Py] [plasma-disassembler/plasma](https://github.com/plasma-disassembler/plasma) Plasma is an interactive disassembler for x86/ARM/MIPS. It can generates indented pseudo-code with colored syntax.
+- [**2798**星][19d] [Py] [androguard/androguard](https://github.com/androguard/androguard) Reverse engineering, Malware and goodware analysis of Android applications ... and more (ninja !)
+- [**2793**星][6d] [C] [klange/toaruos](https://github.com/klange/toaruos) A completely-from-scratch hobby operating system: bootloader, kernel, drivers, C library, and userspace including a composited graphical UI, dynamic linker, syntax-highlighting text editor, network stack, etc.
+- [**2793**星][2m] [Go] [kgretzky/evilginx2](https://github.com/kgretzky/evilginx2) 独立的MITM攻击工具,用于登录凭证钓鱼,可绕过双因素认证
+- [**2791**星][7d] [C++] [xmrig/xmrig](https://github.com/xmrig/xmrig) xmrig: 门罗币挖矿代码 CPU 版
+- [**2789**星][4y] [Lua] [loveshell/ngx_lua_waf](https://github.com/loveshell/ngx_lua_waf) ngx_lua_waf是一个基于lua-nginx-module(openresty)的web应用防火墙
+- [**2783**星][30d] [Makefile] [shadowsocks/openwrt-shadowsocks](https://github.com/shadowsocks/openwrt-shadowsocks) Shadowsocks-libev for OpenWrt/LEDE
+- [**2782**星][2y] [C] [seclab-ucr/intang](https://github.com/seclab-ucr/intang) research project for circumventing the "TCP reset attack" from the Great Firewall of China (GFW) by disrupting/desynchronizing the TCP Control Block (TCB) on the censorship devices.
+- [**2777**星][9d] [C++] [qtox/qtox](https://github.com/qtox/qtox) qTox is a chat, voice, video, and file transfer IM client using the encrypted peer-to-peer Tox protocol.
+- [**2769**星][4d] [C] [processhacker/processhacker](https://github.com/processhacker/processhacker) A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware.
+- [**2766**星][1m] [JS] [trufflesuite/ganache-cli](https://github.com/trufflesuite/ganache-cli) Fast Ethereum RPC client for testing and development
+- [**2756**星][2m] [secwiki/sec-chart](https://github.com/secwiki/sec-chart) 安全思维导图集合
+- [**2742**星][5d] [TS] [webhintio/hint](https://github.com/webhintio/hint)
+- [**2742**星][24d] [Makefile] [theos/theos](https://github.com/theos/theos) A cross-platform suite of tools for building and deploying software for iOS and other platforms.
+- [**2741**星][8m] [Py] [p0cl4bs/wifi-pumpkin](https://github.com/P0cL4bs/WiFi-Pumpkin) AP攻击框架, 创建虚假网络, 取消验证攻击、请求和凭证监控、透明代理、Windows更新攻击、钓鱼管理、ARP投毒、DNS嗅探、Pumpkin代理、动态图片捕获等
+- [**2739**星][23d] [JS] [s0md3v/awesomexss](https://github.com/s0md3v/AwesomeXSS) Awesome XSS stuff
+- [**2737**星][1y] [C] [vanhoefm/krackattacks-scripts](https://github.com/vanhoefm/krackattacks-scripts) 检测客户端和AP是否受KRACK漏洞影响
+- [**2735**星][18d] [JS] [cyu/rack-cors](https://github.com/cyu/rack-cors) Rack Middleware for handling Cross-Origin Resource Sharing (CORS), which makes cross-origin AJAX possible.
+- [**2730**星][3y] [Py] [hephaest0s/usbkill](https://github.com/hephaest0s/usbkill) 反取证开关. 监控USB端口变化, 有变化时立即关闭计算机
+- [**2717**星][2d] [PS] [redcanaryco/atomic-red-team](https://github.com/redcanaryco/atomic-red-team) Small and highly portable detection tests based on MITRE's ATT&CK.
+- [**2713**星][1m] [C] [taviso/loadlibrary](https://github.com/taviso/loadlibrary) 使 Linux系统加载并调用 Windows DLL
+- [**2703**星][3y] [Eagle] [samyk/magspoof](https://github.com/samyk/magspoof) 信用卡/磁条欺骗
+- [**2701**星][3d] [Go] [aquasecurity/trivy](https://github.com/aquasecurity/trivy) A Simple and Comprehensive Vulnerability Scanner for Containers, Suitable for CI
+- [**2698**星][7d] [ObjC] [dantheman827/ios-app-signer](https://github.com/dantheman827/ios-app-signer) This is an app for OS X that can (re)sign apps and bundle them into ipa files that are ready to be installed on an iOS device.
+- [**2690**星][1m] [ObjC] [kjcracks/clutch](https://github.com/kjcracks/clutch) Fast iOS executable dumper
+- [**2682**星][22d] [Go] [google/syzkaller](https://github.com/google/syzkaller) 一个unsupervised、以 coverage 为导向的Linux 系统调用fuzzer
+- [**2681**星][1y] [Py] [mame82/p4wnp1](https://github.com/mame82/p4wnp1) 基于Raspberry Pi Zero 或 Raspberry Pi Zero W 的USB攻击平台, 高度的可定制性
+- [**2674**星][3m] [Py] [drivendata/cookiecutter-data-science](https://github.com/drivendata/cookiecutter-data-science) A logical, reasonably standardized, but flexible project structure for doing and sharing data science work.
+- [**2662**星][2m] [rmusser01/infosec_reference](https://github.com/rmusser01/infosec_reference) An Information Security Reference That Doesn't Suck
+- [**2654**星][17d] [JS] [bkimminich/juice-shop](https://github.com/bkimminich/juice-shop) OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
+- [**2652**星][3m] [Java] [frohoff/ysoserial](https://github.com/frohoff/ysoserial) 生成会利用不安全的Java对象反序列化的Payload
+- [**2645**星][2m] [xairy/linux-kernel-exploitation](https://github.com/xairy/linux-kernel-exploitation) Linux 内核 Fuzz 和漏洞利用的资源收集
+- [**2645**星][1y] [HTML] [chybeta/web-security-learning](https://github.com/chybeta/web-security-learning) Web-Security-Learning
+- [**2641**星][1y] [C] [ckolivas/cgminer](https://github.com/ckolivas/cgminer) ASIC and FPGA miner in c for bitcoin
+- [**2640**星][2d] [Go] [slackhq/nebula](https://github.com/slackhq/nebula) A scalable overlay networking tool with a focus on performance, simplicity and security
+- [**2637**星][4m] [Java] [teevity/ice](https://github.com/teevity/ice) AWS Usage Tool
+- [**2625**星][8m] [leandromoreira/linux-network-performance-parameters](https://github.com/leandromoreira/linux-network-performance-parameters) Learn where some of the network sysctl variables fit into the Linux/Kernel network flow
+- [**2615**星][2m] [Swift] [zhuhaow/nekit](https://github.com/zhuhaow/nekit) A toolkit for Network Extension Framework
+- [**2612**星][4d] [JS] [popcorn-official/popcorn-desktop](https://github.com/popcorn-official/popcorn-desktop) Popcorn Time is a multi-platform, free software BitTorrent client that includes an integrated media player. Desktop ( Windows / Mac / Linux ) a Butter-Project Fork
+- [**2607**星][3y] [Ruby] [arachni/arachni](https://github.com/arachni/arachni) Web Application Security Scanner Framework
+- [**2603**星][23d] [JS] [knownsec/kcon](https://github.com/knownsec/kcon) KCon is a famous Hacker Con powered by Knownsec Team.
+- [**2601**星][1m] [pditommaso/awesome-pipeline](https://github.com/pditommaso/awesome-pipeline) A curated list of awesome pipeline toolkits inspired by Awesome Sysadmin
+- [**2596**星][21d] [C++] [fanout/pushpin](https://github.com/fanout/pushpin) Reverse proxy for realtime web services
+- [**2581**星][3d] [Go] [adguardteam/adguardhome](https://github.com/adguardteam/adguardhome) Network-wide ads & trackers blocking DNS server
+- [**2581**星][1m] [Shell] [medicean/vulapps](https://github.com/medicean/vulapps) 快速搭建各种漏洞环境(Various vulnerability environment)
+- [**2575**星][2m] [C] [huntergregal/mimipenguin](https://github.com/huntergregal/mimipenguin) dump 当前Linux用户的登录密码
+- [**2574**星][8y] [C] [id-software/quake](https://github.com/id-software/quake) Quake GPL Source Release
+- [**2568**星][1m] [C] [esnet/iperf](https://github.com/esnet/iperf) A TCP, UDP, and SCTP network bandwidth measurement tool
+- [**2566**星][2d] [C++] [danmar/cppcheck](https://github.com/danmar/cppcheck) static analysis of C/C++ code
+- [**2565**星][5m] [Java] [google/binnavi](https://github.com/google/binnavi) 二进制分析IDE, 对反汇编代码的控制流程图和调用图进行探查/导航/编辑/注释.(IDA插件的作用是导出反汇编)
+- [**2562**星][3m] [Py] [greenwolf/social_mapper](https://github.com/Greenwolf/social_mapper) 对多个社交网站的用户Profile图片进行大规模的人脸识别
+- [**2553**星][2y] [evilsocket/bettercap](https://github.com/evilsocket/bettercap) 中间人攻击框架,功能完整,模块化设计,轻便且易于扩展。
+- [**2551**星][9d] [Py] [cloudflare/flan](https://github.com/cloudflare/flan) A pretty sweet vulnerability scanner
+- [**2549**星][6m] [C] [geohot/qira](https://github.com/geohot/qira) QEMU Interactive Runtime Analyser
+- [**2543**星][19d] [Py] [hugsy/gef](https://github.com/hugsy/gef) gdb增强工具,使用Python API,用于漏洞开发和逆向分析。
+- [**2542**星][23d] [Go] [drk1wi/modlishka](https://github.com/drk1wi/modlishka) Modlishka. Reverse Proxy.
+- [**2533**星][8m] [offensive-security/kali-nethunter](https://github.com/offensive-security/kali-nethunter) The Kali NetHunter Project
- [**2533**星][2y] [Py] [google/nogotofail](https://github.com/google/nogotofail) 网络安全测试, 辅助定位和修复弱TLS/SSL连接和敏感明文流量
-- [**2532**星][8m] [offensive-security/kali-nethunter](https://github.com/offensive-security/kali-nethunter) The Kali NetHunter Project
-- [**2530**星][17d] [Py] [hugsy/gef](https://github.com/hugsy/gef) gdb增强工具,使用Python API,用于漏洞开发和逆向分析。
-- [**2521**星][21d] [Go] [drk1wi/modlishka](https://github.com/drk1wi/modlishka) Modlishka. Reverse Proxy.
-- [**2520**星][3y] [HTML] [dirtycow/dirtycow.github.io](https://github.com/dirtycow/dirtycow.github.io) Dirty COW
-- [**2515**星][24d] [C] [yrutschle/sslh](https://github.com/yrutschle/sslh) Applicative Protocol Multiplexer (e.g. share SSH and HTTPS on the same port)
-- [**2510**星][11d] [Shell] [teddysun/across](https://github.com/teddysun/across) This is a shell script for configure and start WireGuard VPN server
-- [**2505**星][3m] [kbandla/aptnotes](https://github.com/kbandla/aptnotes) Various public documents, whitepapers and articles about APT campaigns
-- [**2505**星][3y] [C] [dhavalkapil/icmptunnel](https://github.com/dhavalkapil/icmptunnel) Transparently tunnel your IP traffic through ICMP echo and reply packets.
+- [**2526**星][2d] [Shell] [teddysun/across](https://github.com/teddysun/across) This is a shell script for configure and start WireGuard VPN server
+- [**2525**星][3y] [HTML] [dirtycow/dirtycow.github.io](https://github.com/dirtycow/dirtycow.github.io) Dirty COW
+- [**2522**星][26d] [C] [yrutschle/sslh](https://github.com/yrutschle/sslh) Applicative Protocol Multiplexer (e.g. share SSH and HTTPS on the same port)
+- [**2516**星][3m] [kbandla/aptnotes](https://github.com/kbandla/aptnotes) Various public documents, whitepapers and articles about APT campaigns
+- [**2508**星][5m] [Go] [oj/gobuster](https://github.com/oj/gobuster) Directory/File, DNS and VHost busting tool written in Go
+- [**2507**星][2m] [Java] [jboss-javassist/javassist](https://github.com/jboss-javassist/javassist) Java bytecode engineering toolkit
+- [**2507**星][3y] [C] [dhavalkapil/icmptunnel](https://github.com/dhavalkapil/icmptunnel) Transparently tunnel your IP traffic through ICMP echo and reply packets.
- [**2503**星][7m] [C++] [chengr28/pcap_dnsproxy](https://github.com/chengr28/pcap_dnsproxy) Pcap_DNSProxy, a local DNS server based on packet capturing
-- [**2495**星][2m] [Java] [jboss-javassist/javassist](https://github.com/jboss-javassist/javassist) Java bytecode engineering toolkit
-- [**2488**星][1y] [onlurking/awesome-infosec](https://github.com/onlurking/awesome-infosec) A curated list of awesome infosec courses and training resources.
-- [**2486**星][26d] [Py] [ysrc/xunfeng](https://github.com/ysrc/xunfeng) 巡风是一款适用于企业内网的漏洞快速应急,巡航扫描系统。
-- [**2481**星][5m] [Go] [oj/gobuster](https://github.com/oj/gobuster) Directory/File, DNS and VHost busting tool written in Go
-- [**2480**星][8d] [Go] [adguardteam/adguardhome](https://github.com/adguardteam/adguardhome) Network-wide ads & trackers blocking DNS server
+- [**2501**星][28d] [Py] [ysrc/xunfeng](https://github.com/ysrc/xunfeng) 巡风是一款适用于企业内网的漏洞快速应急,巡航扫描系统。
+- [**2498**星][6m] [taichi-framework/taichi](https://github.com/taichi-framework/taichi) A framework to use Xposed module with or without Root/Unlock bootloader, supportting Android 5.0 ~ 10.0
+- [**2497**星][6d] [onlurking/awesome-infosec](https://github.com/onlurking/awesome-infosec) A curated list of awesome infosec courses and training resources.
+- [**2488**星][5y] [PHP] [audi-1/sqli-labs](https://github.com/audi-1/sqli-labs) SQLI labs to test error based, Blind boolean based, Time based.
- [**2480**星][2y] [Py] [feross/spoofmac](https://github.com/feross/spoofmac) 伪造MAC地址(OS X, Windows, Linux)
-- [**2473**星][5y] [PHP] [audi-1/sqli-labs](https://github.com/audi-1/sqli-labs) SQLI labs to test error based, Blind boolean based, Time based.
-- [**2472**星][11m] [JS] [weixin/miaow](https://github.com/weixin/Miaow) A set of plugins for Sketch include drawing links & marks, UI Kit & Color sync, font & text replacing.
-- [**2470**星][6m] [taichi-framework/taichi](https://github.com/taichi-framework/taichi) A framework to use Xposed module with or without Root/Unlock bootloader, supportting Android 5.0 ~ 10.0
-- [**2463**星][13d] [JS] [vitaly-t/pg-promise](https://github.com/vitaly-t/pg-promise) PostgreSQL interface for Node.js
-- [**2458**星][3m] [C] [martin-ger/esp_wifi_repeater](https://github.com/martin-ger/esp_wifi_repeater) A full functional WiFi Repeater (correctly: a WiFi NAT Router)
-- [**2456**星][4m] [Go] [ne0nd0g/merlin](https://github.com/ne0nd0g/merlin) Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.
-- [**2454**星][24d] [C++] [pavel-odintsov/fastnetmon](https://github.com/pavel-odintsov/fastnetmon) 快速 DDoS 检测/分析工具,支持 sflow/netflow/mirror
-- [**2453**星][11m] [C#] [yck1509/confuserex](https://github.com/yck1509/confuserex) An open-source, free protector for .NET applications
+- [**2476**星][11m] [JS] [weixin/miaow](https://github.com/weixin/Miaow) A set of plugins for Sketch include drawing links & marks, UI Kit & Color sync, font & text replacing.
+- [**2476**星][4m] [Go] [ne0nd0g/merlin](https://github.com/ne0nd0g/merlin) Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.
+- [**2469**星][6d] [JS] [vitaly-t/pg-promise](https://github.com/vitaly-t/pg-promise) PostgreSQL interface for Node.js
+- [**2466**星][30d] [Py] [smicallef/spiderfoot](https://github.com/smicallef/spiderfoot) 自动收集指定目标的信息:IP、域名、主机名、网络子网、ASN、邮件地址、用户名
+- [**2464**星][3m] [C] [martin-ger/esp_wifi_repeater](https://github.com/martin-ger/esp_wifi_repeater) A full functional WiFi Repeater (correctly: a WiFi NAT Router)
+- [**2461**星][11m] [C#] [yck1509/confuserex](https://github.com/yck1509/confuserex) An open-source, free protector for .NET applications
+- [**2461**星][26d] [C++] [pavel-odintsov/fastnetmon](https://github.com/pavel-odintsov/fastnetmon) 快速 DDoS 检测/分析工具,支持 sflow/netflow/mirror
+- [**2454**星][21d] [Shell] [rebootuser/linenum](https://github.com/rebootuser/linenum) Scripted Local Linux Enumeration & Privilege Escalation Checks
- [**2451**星][3y] [Py] [google/enjarify](https://github.com/google/enjarify) 将Dalvik字节码转换为对应的Java字节码
-- [**2441**星][28d] [Py] [smicallef/spiderfoot](https://github.com/smicallef/spiderfoot) 自动收集指定目标的信息:IP、域名、主机名、网络子网、ASN、邮件地址、用户名
-- [**2424**星][7d] [PHP] [misp/misp](https://github.com/misp/misp) MISP (core software) - Open Source Threat Intelligence and Sharing Platform (formely known as Malware Information Sharing Platform)
-- [**2420**星][19d] [Shell] [rebootuser/linenum](https://github.com/rebootuser/linenum) Scripted Local Linux Enumeration & Privilege Escalation Checks
-- [**2415**星][1m] [Py] [0xinfection/awesome-waf](https://github.com/0xinfection/awesome-waf)
-- [**2412**星][23d] [Py] [pwndbg/pwndbg](https://github.com/pwndbg/pwndbg) GDB插件,辅助漏洞开发和逆向
-- [**2411**星][3y] [Py] [arthepsy/ssh-audit](https://github.com/arthepsy/ssh-audit) SSH server auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)
-- [**2407**星][1m] [TSQL] [rapid7/metasploitable3](https://github.com/rapid7/metasploitable3) Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities.
-- [**2404**星][24d] [Py] [infobyte/faraday](https://github.com/infobyte/faraday) 渗透测试和漏洞管理平台
-- [**2399**星][3y] [rpisec/malware](https://github.com/rpisec/malware) Course materials for Malware Analysis by RPISEC
+- [**2444**星][2d] [PHP] [misp/misp](https://github.com/misp/misp) MISP (core software) - Open Source Threat Intelligence and Sharing Platform (formely known as Malware Information Sharing Platform)
+- [**2429**星][1m] [Py] [0xinfection/awesome-waf](https://github.com/0xinfection/awesome-waf)
+- [**2423**星][2d] [Py] [pwndbg/pwndbg](https://github.com/pwndbg/pwndbg) GDB插件,辅助漏洞开发和逆向
+- [**2420**星][1m] [TSQL] [rapid7/metasploitable3](https://github.com/rapid7/metasploitable3) Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities.
+- [**2417**星][26d] [Py] [infobyte/faraday](https://github.com/infobyte/faraday) 渗透测试和漏洞管理平台
+- [**2416**星][3y] [Py] [arthepsy/ssh-audit](https://github.com/arthepsy/ssh-audit) SSH server auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)
+- [**2411**星][26d] [Py] [xmendez/wfuzz](https://github.com/xmendez/wfuzz) Web application fuzzer
+- [**2410**星][8m] [Py] [lionsec/katoolin](https://github.com/lionsec/katoolin) Automatically install all Kali linux tools
+- [**2407**星][3y] [rpisec/malware](https://github.com/rpisec/malware) Course materials for Malware Analysis by RPISEC
+- [**2404**星][20d] [Java] [m66b/netguard](https://github.com/m66b/netguard) A simple way to block access to the internet per app
- [**2395**星][3y] [OCaml] [facebookarchive/pfff](https://github.com/facebookarchive/pfff) 一堆工具的集合,用于执行静态分析、代码可视化、代码导航、保持格式的源码转换(例如:源码重构)。完美支持C、Java、JS、PHP,后续将支持其他一大堆语言。
-- [**2395**星][24d] [Py] [xmendez/wfuzz](https://github.com/xmendez/wfuzz) Web application fuzzer
-- [**2391**星][8m] [Py] [lionsec/katoolin](https://github.com/lionsec/katoolin) Automatically install all Kali linux tools
-- [**2381**星][2y] [Py] [secretsquirrel/the-backdoor-factory](https://github.com/secretsquirrel/the-backdoor-factory) 为PE, ELF, Mach-O二进制文件添加Shellcode后门
-- [**2375**星][1y] [Py] [danmcinerney/lans.py](https://github.com/danmcinerney/lans.py) Inject code and spy on wifi users
+- [**2392**星][1m] [Go] [xtaci/kcp-go](https://github.com/xtaci/kcp-go) provide a smooth, resilient, ordered, error-checked and anonymous delivery of streams over UDP packets,
+- [**2389**星][8d] [C] [wireshark/wireshark](https://github.com/wireshark/wireshark) Read-only mirror of Wireshark's Git repository. GitHub won't let us disable pull requests. ☞ THEY WILL BE IGNORED HERE ☜ Please upload them at
+- [**2386**星][2y] [Py] [secretsquirrel/the-backdoor-factory](https://github.com/secretsquirrel/the-backdoor-factory) 为PE, ELF, Mach-O二进制文件添加Shellcode后门
+- [**2384**星][2d] [Go] [owasp/amass](https://github.com/owasp/amass) In-depth Attack Surface Mapping and Asset Discovery
+- [**2381**星][11m] [C] [haad/proxychains](https://github.com/haad/proxychains) a tool that forces any TCP connection made by any given application to follow through proxy like TOR or any other SOCKS4, SOCKS5 or HTTP(S) proxy. Supported auth-types: "user/pass" for SOCKS4/5, "basic" for HTTP.
+- [**2376**星][2d] [Java] [mock-server/mockserver](https://github.com/mock-server/mockserver) MockServer enables easy mocking of any system you integrate with via HTTP or HTTPS with clients written in Java, JavaScript and Ruby. MockServer also includes a proxy that introspects all proxied traffic including encrypted SSL traffic and supports Port Forwarding, Web Proxying (i.e. HTTP proxy), HTTPS Tunneling Proxying (using HTTP CONNECT) and…
+- [**2376**星][1y] [Py] [danmcinerney/lans.py](https://github.com/danmcinerney/lans.py) Inject code and spy on wifi users
+- [**2369**星][7d] [security-onion-solutions/security-onion](https://github.com/security-onion-solutions/security-onion) Linux distro for intrusion detection, enterprise security monitoring, and log management
- [**2369**星][2m] [TeX] [crypto101/book](https://github.com/crypto101/book) Crypto 101, the introductory book on cryptography.
-- [**2368**星][7d] [C] [wireshark/wireshark](https://github.com/wireshark/wireshark) Read-only mirror of Wireshark's Git repository. GitHub won't let us disable pull requests. ☞ THEY WILL BE IGNORED HERE ☜ Please upload them at
-- [**2366**星][7d] [Java] [mock-server/mockserver](https://github.com/mock-server/mockserver) MockServer enables easy mocking of any system you integrate with via HTTP or HTTPS with clients written in Java, JavaScript and Ruby. MockServer also includes a proxy that introspects all proxied traffic including encrypted SSL traffic and supports Port Forwarding, Web Proxying (i.e. HTTP proxy), HTTPS Tunneling Proxying (using HTTP CONNECT) and…
-- [**2366**星][11m] [C] [haad/proxychains](https://github.com/haad/proxychains) a tool that forces any TCP connection made by any given application to follow through proxy like TOR or any other SOCKS4, SOCKS5 or HTTP(S) proxy. Supported auth-types: "user/pass" for SOCKS4/5, "basic" for HTTP.
-- [**2359**星][1m] [Lua] [snabbco/snabb](https://github.com/snabbco/snabb) Simple and fast packet networking
-- [**2359**星][13d] [security-onion-solutions/security-onion](https://github.com/security-onion-solutions/security-onion) Linux distro for intrusion detection, enterprise security monitoring, and log management
-- [**2359**星][4m] [Go] [mlabouardy/komiser](https://github.com/mlabouardy/komiser)
-- [**2351**星][8d] [C] [domoticz/domoticz](https://github.com/domoticz/domoticz) monitor and configure various devices like: Lights, Switches, various sensors/meters like Temperature, Rain, Wind, UV, Electra, Gas, Water and much more
-- [**2350**星][1m] [Py] [ab77/netflix-proxy](https://github.com/ab77/netflix-proxy) Smart DNS proxy to watch Netflix
+- [**2366**星][4m] [Go] [mlabouardy/komiser](https://github.com/mlabouardy/komiser)
+- [**2364**星][2m] [Py] [ab77/netflix-proxy](https://github.com/ab77/netflix-proxy) Smart DNS proxy to watch Netflix
+- [**2362**星][1m] [Lua] [snabbco/snabb](https://github.com/snabbco/snabb) Simple and fast packet networking
+- [**2357**星][2d] [C] [domoticz/domoticz](https://github.com/domoticz/domoticz) monitor and configure various devices like: Lights, Switches, various sensors/meters like Temperature, Rain, Wind, UV, Electra, Gas, Water and much more
+- [**2352**星][1m] [Py] [ctfd/ctfd](https://github.com/CTFd/CTFd) CTFs as you need them
+- [**2349**星][11m] [hack-with-github/free-security-ebooks](https://github.com/hack-with-github/free-security-ebooks) Free Security and Hacking eBooks
- [**2342**星][3m] [Go] [vuvuzela/vuvuzela](https://github.com/vuvuzela/vuvuzela) Private messaging system that hides metadata
-- [**2342**星][12d] [Go] [owasp/amass](https://github.com/owasp/amass) In-depth Attack Surface Mapping and Asset Discovery
-- [**2338**星][6y] [C] [stefanesser/dumpdecrypted](https://github.com/stefanesser/dumpdecrypted) Dumps decrypted mach-o files from encrypted iPhone applications from memory to disk. This tool is necessary for security researchers to be able to look under the hood of encryption.
-- [**2335**星][11m] [hack-with-github/free-security-ebooks](https://github.com/hack-with-github/free-security-ebooks) Free Security and Hacking eBooks
-- [**2332**星][1m] [Py] [ctfd/ctfd](https://github.com/CTFd/CTFd) CTFs as you need them
-- [**2330**星][1m] [JS] [pa11y/pa11y](https://github.com/pa11y/pa11y) Pa11y is your automated accessibility testing pal
-- [**2324**星][30d] [C] [hfiref0x/uacme](https://github.com/hfiref0x/uacme) Defeating Windows User Account Control
-- [**2317**星][10d] [C] [tsl0922/ttyd](https://github.com/tsl0922/ttyd) Share your terminal over the web
-- [**2316**星][5y] [C] [abrasive/shairport](https://github.com/abrasive/shairport) Airtunes emulator! Shairport is no longer maintained.
-- [**2302**星][11m] [yeyintminthuhtut/awesome-red-teaming](https://github.com/yeyintminthuhtut/awesome-red-teaming) List of Awesome Red Teaming Resources
-- [**2302**星][1y] [Java] [csploit/android](https://github.com/csploit/android) cSploit - The most complete and advanced IT security professional toolkit on Android.
-- [**2291**星][3y] [Py] [lmacken/pyrasite](https://github.com/lmacken/pyrasite) 向运行中的 Python进程注入代码
-- [**2277**星][3m] [JS] [retirejs/retire.js](https://github.com/retirejs/retire.js) scanner detecting the use of JavaScript libraries with known vulnerabilities
-- [**2272**星][3y] [Py] [therook/subbrute](https://github.com/therook/subbrute) A DNS meta-query spider that enumerates DNS records, and subdomains.
-- [**2272**星][1m] [C] [moby/hyperkit](https://github.com/moby/hyperkit) A toolkit for embedding hypervisor capabilities in your application
-- [**2271**星][22d] [JS] [talkingdata/inmap](https://github.com/talkingdata/inmap) 大数据地理可视化
-- [**2271**星][2y] [Py] [rootphantomer/blasting_dictionary](https://github.com/rootphantomer/blasting_dictionary) 爆破字典
-- [**2267**星][1m] [C] [aurorawright/luma3ds](https://github.com/aurorawright/luma3ds) Noob-proof (N)3DS "Custom Firmware"
-- [**2246**星][16d] [dumb-password-rules/dumb-password-rules](https://github.com/dumb-password-rules/dumb-password-rules) Shaming sites with dumb password rules.
-- [**2244**星][2y] [Go] [mehrdadrad/mylg](https://github.com/mehrdadrad/mylg) 网络诊断工具
-- [**2242**星][1m] [Shell] [v1s1t0r1sh3r3/airgeddon](https://github.com/v1s1t0r1sh3r3/airgeddon) This is a multi-use bash script for Linux systems to audit wireless networks.
-- [**2241**星][13d] [HTML] [tikam02/devops-guide](https://github.com/tikam02/devops-guide) DevOps Guide from basic to advanced with Interview Questions and Notes
-- [**2241**星][3m] [Py] [novnc/websockify](https://github.com/novnc/websockify) Websockify is a WebSocket to TCP proxy/bridge. This allows a browser to connect to any application/server/service. Implementations in Python, C, Node.js and Ruby.
-- [**2235**星][1m] [Shell] [eliaskotlyar/xiaomi-dafang-hacks](https://github.com/eliaskotlyar/xiaomi-dafang-hacks)
+- [**2340**星][6y] [C] [stefanesser/dumpdecrypted](https://github.com/stefanesser/dumpdecrypted) Dumps decrypted mach-o files from encrypted iPhone applications from memory to disk. This tool is necessary for security researchers to be able to look under the hood of encryption.
+- [**2340**星][1m] [C] [hfiref0x/uacme](https://github.com/hfiref0x/uacme) Defeating Windows User Account Control
+- [**2337**星][1m] [JS] [pa11y/pa11y](https://github.com/pa11y/pa11y) Pa11y is your automated accessibility testing pal
+- [**2335**星][3d] [C] [tsl0922/ttyd](https://github.com/tsl0922/ttyd) Share your terminal over the web
+- [**2323**星][3d] [C#] [netchx/netch](https://github.com/netchx/netch) Game accelerator. Support Socks5, Shadowsocks, ShadowsocksR, V2Ray protocol. UDP NAT FullCone
+- [**2321**星][11m] [yeyintminthuhtut/awesome-red-teaming](https://github.com/yeyintminthuhtut/awesome-red-teaming) List of Awesome Red Teaming Resources
+- [**2318**星][5y] [C] [abrasive/shairport](https://github.com/abrasive/shairport) Airtunes emulator! Shairport is no longer maintained.
+- [**2304**星][1y] [Java] [csploit/android](https://github.com/csploit/android) cSploit - The most complete and advanced IT security professional toolkit on Android.
+- [**2301**星][15d] [HTML] [tikam02/devops-guide](https://github.com/tikam02/devops-guide) DevOps Guide from basic to advanced with Interview Questions and Notes
+- [**2295**星][3y] [Py] [lmacken/pyrasite](https://github.com/lmacken/pyrasite) 向运行中的 Python进程注入代码
+- [**2287**星][2y] [Py] [rootphantomer/blasting_dictionary](https://github.com/rootphantomer/blasting_dictionary) 爆破字典
+- [**2284**星][1m] [C] [moby/hyperkit](https://github.com/moby/hyperkit) A toolkit for embedding hypervisor capabilities in your application
+- [**2283**星][5m] [Py] [guohongze/adminset](https://github.com/guohongze/adminset) 自动化运维平台:CMDB、CD、DevOps、资产管理、任务编排、持续交付、系统监控、运维管理、配置管理
+- [**2282**星][3y] [Py] [therook/subbrute](https://github.com/therook/subbrute) A DNS meta-query spider that enumerates DNS records, and subdomains.
+- [**2281**星][3m] [JS] [retirejs/retire.js](https://github.com/retirejs/retire.js) scanner detecting the use of JavaScript libraries with known vulnerabilities
+- [**2276**星][24d] [JS] [talkingdata/inmap](https://github.com/talkingdata/inmap) 大数据地理可视化
+- [**2274**星][1m] [Shell] [v1s1t0r1sh3r3/airgeddon](https://github.com/v1s1t0r1sh3r3/airgeddon) This is a multi-use bash script for Linux systems to audit wireless networks.
+- [**2270**星][1m] [C] [aurorawright/luma3ds](https://github.com/aurorawright/luma3ds) Noob-proof (N)3DS "Custom Firmware"
+- [**2255**星][3m] [Py] [novnc/websockify](https://github.com/novnc/websockify) Websockify is a WebSocket to TCP proxy/bridge. This allows a browser to connect to any application/server/service. Implementations in Python, C, Node.js and Ruby.
+- [**2252**星][18d] [dumb-password-rules/dumb-password-rules](https://github.com/dumb-password-rules/dumb-password-rules) Shaming sites with dumb password rules.
+- [**2252**星][1m] [Shell] [eliaskotlyar/xiaomi-dafang-hacks](https://github.com/eliaskotlyar/xiaomi-dafang-hacks)
+- [**2248**星][12d] [PS] [k8gege/k8tools](https://github.com/k8gege/k8tools) K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)
+- [**2245**星][2y] [Go] [mehrdadrad/mylg](https://github.com/mehrdadrad/mylg) 网络诊断工具
- [**2226**星][5y] [Go] [filosottile/heartbleed](https://github.com/filosottile/heartbleed) A checker (site and tool) for CVE-2014-0160
-- [**2222**星][8d] [C#] [netchx/netch](https://github.com/netchx/netch) Game accelerator. Support Socks5, Shadowsocks, ShadowsocksR, V2Ray protocol. UDP NAT FullCone
-- [**2218**星][7d] [Py] [cloudflare/flan](https://github.com/cloudflare/flan) A pretty sweet vulnerability scanner
+- [**2217**星][1y] [JS] [cure53/h5sc](https://github.com/cure53/h5sc) HTML5 Security Cheatsheet - A collection of HTML5 related XSS attack vectors
- [**2215**星][6y] [C++] [codebutler/firesheep](https://github.com/codebutler/firesheep) 演示HTTP会话劫持攻击的Firefox扩展
-- [**2211**星][1y] [JS] [cure53/h5sc](https://github.com/cure53/h5sc) HTML5 Security Cheatsheet - A collection of HTML5 related XSS attack vectors
-- [**2204**星][10d] [PowerShell] [k8gege/k8tools](https://github.com/k8gege/k8tools) K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)
-- [**2203**星][1m] [C] [texane/stlink](https://github.com/texane/stlink) stm32 discovery line linux programmer
-- [**2201**星][11d] [Go] [google/mtail](https://github.com/google/mtail) extract whitebox monitoring data from application logs for collection in a timeseries database
-- [**2187**星][21d] [C++] [google/bloaty](https://github.com/google/bloaty) Bloaty McBloatface: a size profiler for binaries
+- [**2213**星][2d] [Go] [aquasecurity/kube-bench](https://github.com/aquasecurity/kube-bench) Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark
+- [**2211**星][1m] [C] [texane/stlink](https://github.com/texane/stlink) stm32 discovery line linux programmer
+- [**2211**星][6d] [Go] [google/mtail](https://github.com/google/mtail) extract whitebox monitoring data from application logs for collection in a timeseries database
+- [**2209**星][22d] [Rust] [cloudflare/boringtun](https://github.com/cloudflare/boringtun) an implementation of the WireGuard® protocol designed for portability and speed.
+- [**2192**星][23d] [C++] [google/bloaty](https://github.com/google/bloaty) Bloaty McBloatface: a size profiler for binaries
+- [**2189**星][1m] [sobolevn/awesome-cryptography](https://github.com/sobolevn/awesome-cryptography) A curated list of cryptography resources and links.
+- [**2187**星][7d] [getlantern/lantern-binaries](https://github.com/getlantern/lantern-binaries) Lantern installers binary downloads.
+- [**2186**星][1y] [Py] [datasploit/datasploit](https://github.com/DataSploit/datasploit) 对指定目标执行多种侦查技术:企业、人、电话号码、比特币地址等
- [**2184**星][3y] [enddo/awesome-windows-exploitation](https://github.com/enddo/awesome-windows-exploitation) A curated list of awesome Windows Exploitation resources, and shiny things. Inspired by awesom
-- [**2182**星][1y] [Py] [datasploit/datasploit](https://github.com/DataSploit/datasploit) 对指定目标执行多种侦查技术:企业、人、电话号码、比特币地址等
-- [**2177**星][1m] [JS] [secgroundzero/warberry](https://github.com/secgroundzero/warberry) WarBerryPi - Tactical Exploitation
-- [**2171**星][14d] [C] [armmbed/mbedtls](https://github.com/armmbed/mbedtls) An open source, portable, easy to use, readable and flexible SSL library
-- [**2168**星][16d] [getlantern/lantern-binaries](https://github.com/getlantern/lantern-binaries) Lantern installers binary downloads.
-- [**2167**星][29d] [sobolevn/awesome-cryptography](https://github.com/sobolevn/awesome-cryptography) A curated list of cryptography resources and links.
-- [**2158**星][2m] [Go] [mmatczuk/go-http-tunnel](https://github.com/mmatczuk/go-http-tunnel) Fast and secure tunnels over HTTP/2
-- [**2156**星][1m] [C] [conorpp/u2f-zero](https://github.com/conorpp/u2f-zero) U2F USB token optimized for physical security, affordability, and style
-- [**2155**星][1y] [C++] [maestron/botnets](https://github.com/maestron/botnets) This is a collection of #botnet source codes, unorganized. For EDUCATIONAL PURPOSES ONLY
+- [**2183**星][2d] [C] [armmbed/mbedtls](https://github.com/armmbed/mbedtls) An open source, portable, easy to use, readable and flexible SSL library
+- [**2179**星][1m] [JS] [secgroundzero/warberry](https://github.com/secgroundzero/warberry) WarBerryPi - Tactical Exploitation
+- [**2173**星][1y] [JS] [iam4x/pokemongo-webspoof](https://github.com/iam4x/pokemongo-webspoof)
+- [**2163**星][2m] [Go] [mmatczuk/go-http-tunnel](https://github.com/mmatczuk/go-http-tunnel) Fast and secure tunnels over HTTP/2
+- [**2162**星][1y] [C++] [maestron/botnets](https://github.com/maestron/botnets) This is a collection of #botnet source codes, unorganized. For EDUCATIONAL PURPOSES ONLY
+- [**2159**星][1m] [Py] [commixproject/commix](https://github.com/commixproject/commix) Automated All-in-One OS command injection and exploitation tool.
+- [**2158**星][9m] [exakat/php-static-analysis-tools](https://github.com/exakat/php-static-analysis-tools) A reviewed list of useful PHP static analysis tools
+- [**2158**星][1m] [C] [conorpp/u2f-zero](https://github.com/conorpp/u2f-zero) U2F USB token optimized for physical security, affordability, and style
+- [**2158**星][2m] [PHP] [antonioribeiro/tracker](https://github.com/antonioribeiro/tracker) Tracker gathers a lot of information from your requests to identify and store
- [**2153**星][6y] [Ruby] [plamoni/siriproxy](https://github.com/plamoni/siriproxy) A (tampering) proxy server for Apple's Siri
-- [**2152**星][29d] [Py] [commixproject/commix](https://github.com/commixproject/commix) Automated All-in-One OS command injection and exploitation tool.
-- [**2151**星][9m] [exakat/php-static-analysis-tools](https://github.com/exakat/php-static-analysis-tools) A reviewed list of useful PHP static analysis tools
-- [**2146**星][14d] [Java] [google/wycheproof](https://github.com/google/wycheproof) Project Wycheproof tests crypto libraries against known attacks.
-- [**2127**星][1m] [Py] [jonathansalwan/ropgadget](https://github.com/jonathansalwan/ropgadget) This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC and MIPS architectures.
-- [**2124**星][2m] [Py] [trustedsec/unicorn](https://github.com/trustedsec/unicorn) 通过PowerShell降级攻击, 直接将Shellcode注入到内存
-- [**2123**星][16d] [Assembly] [pret/pokered](https://github.com/pret/pokered) disassembly of Pokémon Red/Blue
-- [**2114**星][7m] [Py] [calebmadrigal/trackerjacker](https://github.com/calebmadrigal/trackerjacker) 映射你没连接到的Wifi网络, 类似于NMap, 另外可以追踪设备
-- [**2112**星][1y] [Py] [rub-nds/pret](https://github.com/rub-nds/pret) Printer Exploitation Toolkit - The tool that made dumpster diving obsolete.
+- [**2149**星][8d] [Java] [google/wycheproof](https://github.com/google/wycheproof) Project Wycheproof tests crypto libraries against known attacks.
+- [**2138**星][2m] [Py] [trustedsec/unicorn](https://github.com/trustedsec/unicorn) 通过PowerShell降级攻击, 直接将Shellcode注入到内存
+- [**2132**星][1m] [Py] [jonathansalwan/ropgadget](https://github.com/jonathansalwan/ropgadget) This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC and MIPS architectures.
+- [**2127**星][18d] [Assembly] [pret/pokered](https://github.com/pret/pokered) disassembly of Pokémon Red/Blue
+- [**2122**星][2y] [Py] [rub-nds/pret](https://github.com/rub-nds/pret) Printer Exploitation Toolkit - The tool that made dumpster diving obsolete.
+- [**2118**星][4d] [goq/telegram-list](https://github.com/goq/telegram-list) List of telegram groups, channels & bots // Список интересных групп, каналов и ботов телеграма // Список чатов для программистов
+- [**2117**星][1m] [Py] [elceef/dnstwist](https://github.com/elceef/dnstwist) 域名置换引擎,用于检测打字错误,网络钓鱼和企业间谍活动
+- [**2116**星][7m] [Py] [calebmadrigal/trackerjacker](https://github.com/calebmadrigal/trackerjacker) 映射你没连接到的Wifi网络, 类似于NMap, 另外可以追踪设备
+- [**2115**星][2d] [Py] [fortynorthsecurity/eyewitness](https://github.com/FortyNorthSecurity/EyeWitness) 给网站做快照,提供服务器Header信息,识别默认凭证等
+- [**2114**星][7y] [C++] [lloyd/node-memwatch](https://github.com/lloyd/node-memwatch) A NodeJS library to keep an eye on your memory usage, and discover and isolate leaks.
- [**2107**星][4y] [C] [hashcat/hashcat-legacy](https://github.com/hashcat/hashcat-legacy) Advanced CPU-based password recovery utility
-- [**2105**星][7d] [goq/telegram-list](https://github.com/goq/telegram-list) List of telegram groups, channels & bots // Список интересных групп, каналов и ботов телеграма // Список чатов для программистов
-- [**2105**星][1m] [Py] [elceef/dnstwist](https://github.com/elceef/dnstwist) 域名置换引擎,用于检测打字错误,网络钓鱼和企业间谍活动
-- [**2103**星][8m] [Py] [linkedin/qark](https://github.com/linkedin/qark) 查找Android App的漏洞, 支持源码或APK文件
-- [**2098**星][19d] [Py] [fortynorthsecurity/eyewitness](https://github.com/FortyNorthSecurity/EyeWitness) 给网站做快照,提供服务器Header信息,识别默认凭证等
-- [**2098**星][21d] [infoslack/awesome-web-hacking](https://github.com/infoslack/awesome-web-hacking) A list of web application security
-- [**2090**星][3m] [yeahhub/hacking-security-ebooks](https://github.com/yeahhub/hacking-security-ebooks) Top 100 Hacking & Security E-Books (Free Download)
-- [**2081**星][8d] [C] [flatpak/flatpak](https://github.com/flatpak/flatpak) Linux application sandboxing and distribution framework
-- [**2071**星][30d] [Go] [theupdateframework/notary](https://github.com/theupdateframework/notary) Notary is a project that allows anyone to have trust over arbitrary collections of data
-- [**2069**星][20d] [Ruby] [urbanadventurer/whatweb](https://github.com/urbanadventurer/whatweb) Next generation web scanner
-- [**2062**星][9m] [jermic/android-crack-tool](https://github.com/jermic/android-crack-tool)
-- [**2051**星][4m] [Py] [whaleshark-team/cobra](https://github.com/WhaleShark-Team/cobra) Source Code Security Audit (源代码安全审计)
-- [**2049**星][1y] [bluscreenofjeff/red-team-infrastructure-wiki](https://github.com/bluscreenofjeff/red-team-infrastructure-wiki) Wiki to collect Red Team infrastructure hardening resources
-- [**2047**星][6m] [Go] [maxmcd/webtty](https://github.com/maxmcd/webtty) Share a terminal session over WebRTC
-- [**2041**星][2y] [Py] [derv82/wifite](https://github.com/derv82/wifite) 自动化无线攻击工具
-- [**2037**星][10d] [Py] [nabla-c0d3/sslyze](https://github.com/nabla-c0d3/sslyze) SSL/TLS服务器扫描
-- [**2036**星][2m] [C++] [lordnoteworthy/al-khaser](https://github.com/lordnoteworthy/al-khaser) Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.
-- [**2035**星][2m] [tanprathan/mobileapp-pentest-cheatsheet](https://github.com/tanprathan/mobileapp-pentest-cheatsheet) The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.
-- [**2035**星][8m] [Shell] [foospidy/payloads](https://github.com/foospidy/payloads) web 攻击 Payload 集合
-- [**2032**星][7d] [C++] [openthread/openthread](https://github.com/openthread/openthread) OpenThread released by Google is an open-source implementation of the Thread networking protocol
-- [**2032**星][1m] [edoverflow/bugbounty-cheatsheet](https://github.com/edoverflow/bugbounty-cheatsheet) A list of interesting payloads, tips and tricks for bug bounty hunters.
-- [**2024**星][5y] [CoffeeScript] [shadowsocks/shadowsocks-gui](https://github.com/shadowsocks/shadowsocks-gui) Shadowsocks GUI client
-- [**2020**星][20d] [Objective-C] [ios-control/ios-deploy](https://github.com/ios-control/ios-deploy) Install and debug iPhone apps from the command line, without using Xcode
-- [**2017**星][3m] [C++] [darthton/blackbone](https://github.com/darthton/blackbone) Windows memory hacking library
-- [**2016**星][3y] [Swift] [urinx/iosapphook](https://github.com/urinx/iosapphook) 专注于非越狱环境下iOS应用逆向研究,从dylib注入,应用重签名到App Hook
-- [**2014**星][8d] [Py] [sensepost/objection](https://github.com/sensepost/objection) runtimemobile exploration
-- [**2012**星][1y] [C] [xoreaxeaxeax/rosenbridge](https://github.com/xoreaxeaxeax/rosenbridge) Hardware backdoors in some x86 CPUs
-- [**2006**星][9m] [C] [dekunukem/nintendo_switch_reverse_engineering](https://github.com/dekunukem/nintendo_switch_reverse_engineering) A look at inner workings of Joycon and Nintendo Switch
-- [**2004**星][4y] [C] [probablycorey/wax](https://github.com/probablycorey/wax) Wax is now being maintained by alibaba
-- [**1999**星][8d] [Java] [jeremylong/dependencycheck](https://github.com/jeremylong/dependencycheck) OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
-- [**1998**星][13d] [Shell] [wulabing/v2ray_ws-tls_bash_onekey](https://github.com/wulabing/v2ray_ws-tls_bash_onekey) V2Ray Nginx+vmess+ws+tls/ http2 over tls 一键安装脚本
-- [**1992**星][25d] [Swift] [github/softu2f](https://github.com/github/softu2f) Software U2F authenticator for macOS
-- [**1991**星][29d] [qazbnm456/awesome-cve-poc](https://github.com/qazbnm456/awesome-cve-poc) CVE PoC列表
-- [**1990**星][4m] [swiftonsecurity/sysmon-config](https://github.com/swiftonsecurity/sysmon-config) Sysmon configuration file template with default high-quality event tracing
-- [**1988**星][4y] [Go] [yahoo/gryffin](https://github.com/yahoo/gryffin) Gryffin is a large scale web security scanning platform.
-- [**1987**星][7m] [Py] [fsecurelabs/drozer](https://github.com/FSecureLABS/drozer) The Leading Security Assessment Framework for Android.
-- [**1983**星][2y] [dloss/python-pentest-tools](https://github.com/dloss/python-pentest-tools) 可用于渗透测试的Python工具收集
-- [**1983**星][2m] [C++] [asmjit/asmjit](https://github.com/asmjit/asmjit) Complete x86/x64 JIT and AOT Assembler for C++
-- [**1976**星][3m] [infosecn1nja/ad-attack-defense](https://github.com/infosecn1nja/ad-attack-defense) Attack and defend active directory using modern post exploitation adversary tradecraft activity
-- [**1967**星][26d] [Java] [genymobile/gnirehtet](https://github.com/genymobile/gnirehtet) Gnirehtet provides reverse tethering for Android
-- [**1965**星][9m] [JS] [weichiachang/stacks-cli](https://github.com/weichiachang/stacks-cli) Check website stack from the terminal
-- [**1963**星][11d] [HTML] [gtfobins/gtfobins.github.io](https://github.com/gtfobins/gtfobins.github.io) Curated list of Unix binaries that can be exploited to bypass system security restrictions
-- [**1963**星][27d] [Java] [elderdrivers/edxposed](https://github.com/elderdrivers/edxposed) Elder driver Xposed Framework.
-- [**1962**星][1m] [Py] [momosecurity/aswan](https://github.com/momosecurity/aswan) 陌陌风控系统静态规则引擎,零基础简易便捷的配置多种复杂规则,实时高效管控用户异常行为。
-- [**1958**星][26d] [C#] [mathewsachin/captura](https://github.com/mathewsachin/captura) Capture Screen, Audio, Cursor, Mouse Clicks and Keystrokes
-- [**1957**星][9d] [Go] [ullaakut/cameradar](https://github.com/Ullaakut/cameradar) Cameradar hacks its way into RTSP videosurveillance cameras
-- [**1954**星][1y] [BitBake] [1n3/intruderpayloads](https://github.com/1n3/intruderpayloads) A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.
-- [**1946**星][2y] [obfuscator-llvm/obfuscator](https://github.com/obfuscator-llvm/obfuscator) Obfuscator-LLVM
-- [**1945**星][7d] [Perl] [spiderlabs/owasp-modsecurity-crs](https://github.com/spiderlabs/owasp-modsecurity-crs) OWASP ModSecurity Core Rule Set (CRS) Project (Official Repository)
-- [**1940**星][3y] [C#] [lazocoder/windows-hacks](https://github.com/lazocoder/windows-hacks) Creative and unusual things that can be done with the Windows API.
-- [**1939**星][2m] [C] [microsoft/procdump-for-linux](https://github.com/microsoft/procdump-for-linux) Linux 版本的 ProcDump
-- [**1938**星][27d] [Py] [nixawk/pentest-wiki](https://github.com/nixawk/pentest-wiki) PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.
-- [**1938**星][14d] [Py] [cea-sec/miasm](https://github.com/cea-sec/miasm) Reverse engineering framework in Python
-- [**1926**星][17d] [Go] [mpolden/echoip](https://github.com/mpolden/echoip) IP address lookup service
-- [**1913**星][5m] [C] [darkk/redsocks](https://github.com/darkk/redsocks) transparent TCP-to-proxy redirector
-- [**1912**星][3m] [toolswatch/blackhat-arsenal-tools](https://github.com/toolswatch/blackhat-arsenal-tools) Black Hat 武器库
-- [**1911**星][3y] [Py] [aoncyberlabs/windows-exploit-suggester](https://github.com/AonCyberLabs/Windows-Exploit-Suggester) This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules available for the missing bulletins.
-- [**1911**星][8d] [C] [ntop/ndpi](https://github.com/ntop/ndpi) Open Source Deep Packet Inspection Software Toolkit
-- [**1909**星][3d] [Go] [projectdiscovery/subfinder](https://github.com/projectdiscovery/subfinder) Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.
-- [**1909**星][9d] [Py] [j3ssie/osmedeus](https://github.com/j3ssie/osmedeus) Fully automated offensive security framework for reconnaissance and vulnerability scanning
-- [**1908**星][7d] [C++] [powerdns/pdns](https://github.com/powerdns/pdns) PowerDNS
-- [**1907**星][16d] [Py] [lanjelot/patator](https://github.com/lanjelot/patator) Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.
-- [**1906**星][13d] [CSS] [cyb3rward0g/helk](https://github.com/cyb3rward0g/helk) 对ELK栈进行分析,具备多种高级功能,例如SQL声明性语言,图形,结构化流,机器学习等
-- [**1902**星][7d] [Go] [solo-io/gloo](https://github.com/solo-io/gloo) An Envoy-Powered API Gateway
-- [**1901**星][3m] [Go] [minishift/minishift](https://github.com/minishift/minishift) Run OpenShift 3.x locally
-- [**1892**星][19d] [C] [chipsec/chipsec](https://github.com/chipsec/chipsec) 分析PC平台的安全性, 包括硬件、系统固件(BIOS/UEFI)和平台组件
-- [**1891**星][7d] [Py] [mozilla/mozdef](https://github.com/mozilla/mozdef) Mozilla Enterprise Defense Platform
-- [**1886**星][8d] [Go] [chaitin/xray](https://github.com/chaitin/xray) xray 安全评估工具 | 使用之前务必先阅读文档
-- [**1880**星][14d] [C++] [mhammond/pywin32](https://github.com/mhammond/pywin32) Python for Windows (pywin32) Extensions
-- [**1878**星][4m] [C] [shadowsocks/simple-obfs](https://github.com/shadowsocks/simple-obfs) A simple obfuscating tool (Deprecated)
-- [**1876**星][7d] [Shell] [toniblyx/prowler](https://github.com/toniblyx/prowler) AWS Security Best Practices Assessment, Auditing, Hardening and Forensics Readiness Tool. It follows guidelines of the CIS Amazon Web Services Foundations Benchmark and DOZENS of additional checks including GDPR and HIPAA (+100). Official CIS for AWS guide:
-- [**1876**星][5y] [C++] [tum-vision/lsd_slam](https://github.com/tum-vision/lsd_slam) LSD-SLAM
-- [**1876**星][4m] [Py] [python-security/pyt](https://github.com/python-security/pyt) Python Web App 安全漏洞检测和静态分析工具
-- [**1876**星][6m] [Java] [fuzion24/justtrustme](https://github.com/fuzion24/justtrustme) An xposed module that disables SSL certificate checking for the purposes of auditing an app with cert pinning
-- [**1876**星][1y] [Py] [aploium/zmirror](https://github.com/aploium/zmirror) The next-gen reverse proxy for full site mirroring
-- [**1869**星][13d] [YARA] [yara-rules/rules](https://github.com/yara-rules/rules) Repository of yara rules
-- [**1868**星][1y] [Py] [derv82/wifite2](https://github.com/derv82/wifite2) 无线网络审计工具wifite 的升级版/重制版
-- [**1867**星][2m] [Py] [pycqa/bandit](https://github.com/pycqa/bandit) 在Python代码中查找常见的安全问题
-- [**1864**星][7d] [C] [merbanan/rtl_433](https://github.com/merbanan/rtl_433) Program to decode traffic from Devices that are broadcasting on 433.9 MHz like temperature sensors
-- [**1863**星][4y] [Objective-C] [xcodeghostsource/xcodeghost](https://github.com/xcodeghostsource/xcodeghost) "XcodeGhost" Source
-- [**1861**星][10m] [PHP] [bartblaze/php-backdoors](https://github.com/bartblaze/php-backdoors) A collection of PHP backdoors. For educational or testing purposes only.
-- [**1861**星][4m] [Java] [adoptopenjdk/jitwatch](https://github.com/adoptopenjdk/jitwatch) Log analyser / visualiser for Java HotSpot JIT compiler. Inspect inlining decisions, hot methods, bytecode, and assembly. View results in the JavaFX user interface.
-- [**1858**星][10d] [Py] [aquasecurity/kube-hunter](https://github.com/aquasecurity/kube-hunter) Hunt for security weaknesses in Kubernetes clusters
-- [**1857**星][21d] [C] [tinyproxy/tinyproxy](https://github.com/tinyproxy/tinyproxy) a light-weight HTTP/HTTPS proxy daemon for POSIX operating systems
-- [**1857**星][7d] [olivierlaflamme/cheatsheet-god](https://github.com/olivierlaflamme/cheatsheet-god) Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet
-- [**1849**星][11m] [C++] [googlecreativelab/open-nsynth-super](https://github.com/googlecreativelab/open-nsynth-super) Open NSynth Super is an experimental physical interface for the NSynth algorithm
-- [**1848**星][29d] [C] [github/glb-director](https://github.com/github/glb-director) GitHub Load Balancer Director and supporting tooling.
-- [**1846**星][8m] [Py] [netflix-skunkworks/stethoscope](https://github.com/Netflix-Skunkworks/stethoscope) Personalized, user-focused recommendations for employee information security.
-- [**1845**星][2m] [Py] [pwnlandia/mhn](https://github.com/pwnlandia/mhn) 蜜罐网络
-- [**1844**星][8d] [TypeScript] [snyk/snyk](https://github.com/snyk/snyk) CLI and build-time tool to find & fix known vulnerabilities in open-source dependencies
-- [**1842**星][1y] [Java] [jindrapetrik/jpexs-decompiler](https://github.com/jindrapetrik/jpexs-decompiler) JPEXS Free Flash Decompiler
-- [**1841**星][13d] [C++] [acidanthera/lilu](https://github.com/acidanthera/Lilu) Arbitrary kext and process patching on macOS
+- [**2105**星][8m] [Py] [linkedin/qark](https://github.com/linkedin/qark) 查找Android App的漏洞, 支持源码或APK文件
+- [**2103**星][3m] [yeahhub/hacking-security-ebooks](https://github.com/yeahhub/hacking-security-ebooks) Top 100 Hacking & Security E-Books (Free Download)
+- [**2103**星][23d] [infoslack/awesome-web-hacking](https://github.com/infoslack/awesome-web-hacking) A list of web application security
+- [**2095**星][2d] [C] [wireguard/wireguard](https://github.com/wireguard/wireguard) fast, modern, secure kernel VPN tunnel
+- [**2093**星][22d] [Ruby] [urbanadventurer/whatweb](https://github.com/urbanadventurer/whatweb) Next generation web scanner
+- [**2084**星][5d] [C] [flatpak/flatpak](https://github.com/flatpak/flatpak) Linux application sandboxing and distribution framework
+- [**2078**星][1m] [Go] [theupdateframework/notary](https://github.com/theupdateframework/notary) Notary is a project that allows anyone to have trust over arbitrary collections of data
+- [**2071**星][15d] [Shell] [wulabing/v2ray_ws-tls_bash_onekey](https://github.com/wulabing/v2ray_ws-tls_bash_onekey) V2Ray Nginx+vmess+ws+tls/ http2 over tls 一键安装脚本
+- [**2066**星][9m] [jermic/android-crack-tool](https://github.com/jermic/android-crack-tool)
+- [**2058**星][4m] [Py] [whaleshark-team/cobra](https://github.com/WhaleShark-Team/cobra) Source Code Security Audit (源代码安全审计)
+- [**2057**星][1y] [bluscreenofjeff/red-team-infrastructure-wiki](https://github.com/bluscreenofjeff/red-team-infrastructure-wiki) Wiki to collect Red Team infrastructure hardening resources
+- [**2054**星][7d] [swiftonsecurity/sysmon-config](https://github.com/swiftonsecurity/sysmon-config) Sysmon configuration file template with default high-quality event tracing
+- [**2051**星][2m] [tanprathan/mobileapp-pentest-cheatsheet](https://github.com/tanprathan/mobileapp-pentest-cheatsheet) The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.
+- [**2048**星][6m] [Go] [maxmcd/webtty](https://github.com/maxmcd/webtty) Share a terminal session over WebRTC
+- [**2047**星][1m] [edoverflow/bugbounty-cheatsheet](https://github.com/edoverflow/bugbounty-cheatsheet) A list of interesting payloads, tips and tricks for bug bounty hunters.
+- [**2045**星][2m] [C++] [lordnoteworthy/al-khaser](https://github.com/lordnoteworthy/al-khaser) 在野恶意软件使用的技术:虚拟机,仿真,调试器,沙盒检测。
+- [**2045**星][8m] [Shell] [foospidy/payloads](https://github.com/foospidy/payloads) web 攻击 Payload 集合
+- [**2043**星][12d] [Py] [nabla-c0d3/sslyze](https://github.com/nabla-c0d3/sslyze) SSL/TLS服务器扫描
+- [**2042**星][2y] [Py] [derv82/wifite](https://github.com/derv82/wifite) 自动化无线攻击工具
+- [**2039**星][5d] [C++] [openthread/openthread](https://github.com/openthread/openthread) OpenThread released by Google is an open-source implementation of the Thread networking protocol
+- [**2033**星][2d] [ObjC] [ios-control/ios-deploy](https://github.com/ios-control/ios-deploy) Install and debug iPhone apps from the command line, without using Xcode
+- [**2033**星][2d] [Py] [sensepost/objection](https://github.com/sensepost/objection) runtimemobile exploration
+- [**2029**星][3d] [Go] [goodrain/rainbond](https://github.com/goodrain/rainbond) Enterprise application cloud operating system(企业应用云操作系统)
+- [**2025**星][5y] [CoffeeScript] [shadowsocks/shadowsocks-gui](https://github.com/shadowsocks/shadowsocks-gui) Shadowsocks GUI client
+- [**2024**星][2d] [C++] [darthton/blackbone](https://github.com/darthton/blackbone) Windows memory hacking library
+- [**2017**星][3y] [Swift] [urinx/iosapphook](https://github.com/urinx/iosapphook) 专注于非越狱环境下iOS应用逆向研究,从dylib注入,应用重签名到App Hook
+- [**2016**星][23d] [Java] [genymobile/gnirehtet](https://github.com/genymobile/gnirehtet) Gnirehtet provides reverse tethering for Android
+- [**2016**星][9m] [C] [dekunukem/nintendo_switch_reverse_engineering](https://github.com/dekunukem/nintendo_switch_reverse_engineering) A look at inner workings of Joycon and Nintendo Switch
+- [**2014**星][1y] [C] [xoreaxeaxeax/rosenbridge](https://github.com/xoreaxeaxeax/rosenbridge) Hardware backdoors in some x86 CPUs
+- [**2014**星][5d] [Java] [jeremylong/dependencycheck](https://github.com/jeremylong/dependencycheck) OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
+- [**2005**星][4y] [C] [probablycorey/wax](https://github.com/probablycorey/wax) Wax is now being maintained by alibaba
+- [**2003**星][2m] [Go] [skynetservices/skydns](https://github.com/skynetservices/skydns) DNS service discovery for etcd
+- [**2000**星][1m] [qazbnm456/awesome-cve-poc](https://github.com/qazbnm456/awesome-cve-poc) CVE PoC列表
+- [**1996**星][29d] [Java] [elderdrivers/edxposed](https://github.com/elderdrivers/edxposed) Elder driver Xposed Framework.
+- [**1994**星][7m] [Py] [fsecurelabs/drozer](https://github.com/FSecureLABS/drozer) The Leading Security Assessment Framework for Android.
+- [**1994**星][3m] [infosecn1nja/ad-attack-defense](https://github.com/infosecn1nja/ad-attack-defense) Attack and defend active directory using modern post exploitation adversary tradecraft activity
+- [**1994**星][27d] [Swift] [github/softu2f](https://github.com/github/softu2f) Software U2F authenticator for macOS
+- [**1992**星][5d] [C#] [mathewsachin/captura](https://github.com/mathewsachin/captura) Capture Screen, Audio, Cursor, Mouse Clicks and Keystrokes
+- [**1990**星][8d] [HTML] [gtfobins/gtfobins.github.io](https://github.com/gtfobins/gtfobins.github.io) Curated list of Unix binaries that can be exploited to bypass system security restrictions
+- [**1989**星][4y] [Go] [yahoo/gryffin](https://github.com/yahoo/gryffin) Gryffin is a large scale web security scanning platform.
+- [**1989**星][2m] [C++] [asmjit/asmjit](https://github.com/asmjit/asmjit) Complete x86/x64 JIT and AOT Assembler for C++
+- [**1987**星][2y] [dloss/python-pentest-tools](https://github.com/dloss/python-pentest-tools) 可用于渗透测试的Python工具收集
+- [**1977**星][5d] [Go] [projectdiscovery/subfinder](https://github.com/projectdiscovery/subfinder) Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.
+- [**1977**星][5d] [Go] [projectdiscovery/subfinder](https://github.com/projectdiscovery/subfinder) 使用Passive Sources, Search Engines, Pastebins, Internet Archives等查找子域名
+- [**1972**星][1m] [Py] [momosecurity/aswan](https://github.com/momosecurity/aswan) 陌陌风控系统静态规则引擎,零基础简易便捷的配置多种复杂规则,实时高效管控用户异常行为。
+- [**1971**星][5d] [Py] [j3ssie/osmedeus](https://github.com/j3ssie/osmedeus) Fully automated offensive security framework for reconnaissance and vulnerability scanning
+- [**1966**星][11d] [Go] [ullaakut/cameradar](https://github.com/Ullaakut/cameradar) Cameradar hacks its way into RTSP videosurveillance cameras
+- [**1966**星][9m] [JS] [weichiachang/stacks-cli](https://github.com/weichiachang/stacks-cli) Check website stack from the terminal
+- [**1966**星][1y] [BitBake] [1n3/intruderpayloads](https://github.com/1n3/intruderpayloads) A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.
+- [**1955**星][7d] [Perl] [spiderlabs/owasp-modsecurity-crs](https://github.com/spiderlabs/owasp-modsecurity-crs) OWASP ModSecurity Core Rule Set (CRS) Project (Official Repository)
+- [**1953**星][2y] [obfuscator-llvm/obfuscator](https://github.com/obfuscator-llvm/obfuscator) Obfuscator-LLVM
+- [**1952**星][1y] [Go] [hyperhq/hyperd](https://github.com/hyperhq/hyperd) HyperContainer Daemon
+- [**1951**星][8d] [Py] [cea-sec/miasm](https://github.com/cea-sec/miasm) Reverse engineering framework in Python
+- [**1947**星][29d] [Py] [nixawk/pentest-wiki](https://github.com/nixawk/pentest-wiki) PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.
+- [**1945**星][5d] [C] [microsoft/procdump-for-linux](https://github.com/microsoft/procdump-for-linux) Linux 版本的 ProcDump
+- [**1942**星][3y] [C#] [lazocoder/windows-hacks](https://github.com/lazocoder/windows-hacks) Creative and unusual things that can be done with the Windows API.
+- [**1938**星][4m] [C] [meituan-dianping/logan](https://github.com/meituan-dianping/logan) Logan is a lightweight case logging system based on mobile platform.
+- [**1938**星][7d] [Go] [zalando/skipper](https://github.com/zalando/skipper) An HTTP router and reverse proxy for service composition, including use cases like Kubernetes Ingress
+- [**1935**星][19d] [Go] [mpolden/echoip](https://github.com/mpolden/echoip) IP address lookup service
+- [**1933**星][5m] [C] [darkk/redsocks](https://github.com/darkk/redsocks) transparent TCP-to-proxy redirector
+- [**1923**星][3y] [Py] [aoncyberlabs/windows-exploit-suggester](https://github.com/AonCyberLabs/Windows-Exploit-Suggester) This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules available for the missing bulletins.
+- [**1920**星][4y] [Py] [ziggear/shadowsocks](https://github.com/ziggear/shadowsocks) backup of
+- [**1920**星][2d] [C++] [powerdns/pdns](https://github.com/powerdns/pdns) PowerDNS
+- [**1920**星][9d] [CSS] [cyb3rward0g/helk](https://github.com/cyb3rward0g/helk) 对ELK栈进行分析,具备多种高级功能,例如SQL声明性语言,图形,结构化流,机器学习等
+- [**1918**星][3m] [toolswatch/blackhat-arsenal-tools](https://github.com/toolswatch/blackhat-arsenal-tools) Black Hat 武器库
+- [**1917**星][2d] [C] [ntop/ndpi](https://github.com/ntop/ndpi) Open Source Deep Packet Inspection Software Toolkit
+- [**1915**星][18d] [Py] [lanjelot/patator](https://github.com/lanjelot/patator) Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.
+- [**1914**星][7d] [Go] [solo-io/gloo](https://github.com/solo-io/gloo) An Envoy-Powered API Gateway
+- [**1914**星][2d] [chaitin/xray](https://github.com/chaitin/xray) xray 安全评估工具 | 使用之前务必先阅读文档
+- [**1903**星][3m] [Go] [minishift/minishift](https://github.com/minishift/minishift) Run OpenShift 3.x locally
+- [**1901**星][9d] [C] [chipsec/chipsec](https://github.com/chipsec/chipsec) 分析PC平台的安全性, 包括硬件、系统固件(BIOS/UEFI)和平台组件
+- [**1900**星][1y] [Py] [derv82/wifite2](https://github.com/derv82/wifite2) 无线网络审计工具wifite 的升级版/重制版
+- [**1898**星][3d] [C++] [mhammond/pywin32](https://github.com/mhammond/pywin32) Python for Windows (pywin32) Extensions
+- [**1896**星][7d] [Shell] [toniblyx/prowler](https://github.com/toniblyx/prowler) AWS Security Best Practices Assessment, Auditing, Hardening and Forensics Readiness Tool. It follows guidelines of the CIS Amazon Web Services Foundations Benchmark and DOZENS of additional checks including GDPR and HIPAA (+100). Official CIS for AWS guide:
+- [**1893**星][6d] [Py] [mozilla/mozdef](https://github.com/mozilla/mozdef) Mozilla Enterprise Defense Platform
+- [**1893**星][6m] [Java] [fuzion24/justtrustme](https://github.com/fuzion24/justtrustme) An xposed module that disables SSL certificate checking for the purposes of auditing an app with cert pinning
+- [**1886**星][4m] [C] [shadowsocks/simple-obfs](https://github.com/shadowsocks/simple-obfs) A simple obfuscating tool (Deprecated)
+- [**1884**星][1y] [Py] [aploium/zmirror](https://github.com/aploium/zmirror) The next-gen reverse proxy for full site mirroring
+- [**1880**星][4m] [Py] [python-security/pyt](https://github.com/python-security/pyt) Python Web App 安全漏洞检测和静态分析工具
+- [**1878**星][16d] [YARA] [yara-rules/rules](https://github.com/yara-rules/rules) Repository of yara rules
+- [**1878**星][5y] [C++] [tum-vision/lsd_slam](https://github.com/tum-vision/lsd_slam) LSD-SLAM
+- [**1878**星][2m] [Py] [pycqa/bandit](https://github.com/pycqa/bandit) 在Python代码中查找常见的安全问题
+- [**1877**星][2d] [C] [merbanan/rtl_433](https://github.com/merbanan/rtl_433) Program to decode traffic from Devices that are broadcasting on 433.9 MHz like temperature sensors
+- [**1876**星][9d] [olivierlaflamme/cheatsheet-god](https://github.com/olivierlaflamme/cheatsheet-god) Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet
+- [**1876**星][27d] [hmaverickadams/beginner-network-pentesting](https://github.com/hmaverickadams/beginner-network-pentesting) Notes for Beginner Network Pentesting Course
+- [**1873**星][12d] [Py] [aquasecurity/kube-hunter](https://github.com/aquasecurity/kube-hunter) Hunt for security weaknesses in Kubernetes clusters
+- [**1870**星][5d] [C#] [hmbsbige/shadowsocksr-windows](https://github.com/hmbsbige/shadowsocksr-windows) 【自用】Bug-Oriented Programming
+- [**1869**星][6d] [Java] [adoptopenjdk/jitwatch](https://github.com/adoptopenjdk/jitwatch) Log analyser / visualiser for Java HotSpot JIT compiler. Inspect inlining decisions, hot methods, bytecode, and assembly. View results in the JavaFX user interface.
+- [**1865**星][6d] [C++] [acidanthera/lilu](https://github.com/acidanthera/Lilu) Arbitrary kext and process patching on macOS
+- [**1865**星][10m] [PHP] [bartblaze/php-backdoors](https://github.com/bartblaze/php-backdoors) A collection of PHP backdoors. For educational or testing purposes only.
+- [**1864**星][23d] [C] [tinyproxy/tinyproxy](https://github.com/tinyproxy/tinyproxy) a light-weight HTTP/HTTPS proxy daemon for POSIX operating systems
+- [**1862**星][4y] [ObjC] [xcodeghostsource/xcodeghost](https://github.com/xcodeghostsource/xcodeghost) "XcodeGhost" Source
+- [**1860**星][9d] [Lua] [vulnerscom/nmap-vulners](https://github.com/vulnerscom/nmap-vulners) NSE script based on Vulners.com API
+- [**1857**星][5m] [bypass007/emergency-response-notes](https://github.com/bypass007/emergency-response-notes) 应急响应实战笔记,一个安全工程师的自我修养。
+- [**1855**星][2m] [Py] [pwnlandia/mhn](https://github.com/pwnlandia/mhn) 蜜罐网络
+- [**1854**星][5d] [TS] [snyk/snyk](https://github.com/snyk/snyk) CLI and build-time tool to find & fix known vulnerabilities in open-source dependencies
+- [**1854**星][11m] [C++] [googlecreativelab/open-nsynth-super](https://github.com/googlecreativelab/open-nsynth-super) Open NSynth Super is an experimental physical interface for the NSynth algorithm
+- [**1853**星][2d] [Py] [bregman-arie/devops-interview-questions](https://github.com/bregman-arie/devops-interview-questions) Linux, Jenkins, AWS, SRE, Prometheus, Docker, Python, Ansible, Git, Kubernetes, Terraform, OpenStack, SQL, NoSQL, Azure, GCP, DNS, Elastic
+- [**1853**星][4m] [Shell] [arismelachroinos/lscript](https://github.com/arismelachroinos/lscript) 自动化无线渗透和Hacking 任务的脚本
+- [**1852**星][3d] [C] [github/glb-director](https://github.com/github/glb-director) GitHub Load Balancer Director and supporting tooling.
+- [**1851**星][1y] [Java] [jindrapetrik/jpexs-decompiler](https://github.com/jindrapetrik/jpexs-decompiler) JPEXS Free Flash Decompiler
+- [**1848**星][6m] [Assembly] [pooler/cpuminer](https://github.com/pooler/cpuminer) cpuminer:莱特币和比特币的多线程 CPU 矿机
+- [**1847**星][8m] [Py] [netflix-skunkworks/stethoscope](https://github.com/Netflix-Skunkworks/stethoscope) Personalized, user-focused recommendations for employee information security.
+- [**1842**星][1m] [Jupyter Notebook] [hunters-forge/threathunter-playbook](https://github.com/hunters-forge/ThreatHunter-Playbook) A Threat hunter's playbook to aid the development of techniques and hypothesis for hunting campaigns.
+- [**1842**星][1y] [Java] [yeriomin/yalpstore](https://github.com/yeriomin/yalpstore) Download apks from Google Play Store
+- [**1842**星][2d] [C++] [pytorch/glow](https://github.com/pytorch/glow) Compiler for Neural Network hardware accelerators
- [**1841**星][2m] [C] [retroplasma/earth-reverse-engineering](https://github.com/retroplasma/earth-reverse-engineering) Reversing Google's 3D satellite mode
-- [**1839**星][4m] [bypass007/emergency-response-notes](https://github.com/bypass007/emergency-response-notes) 应急响应实战笔记,一个安全工程师的自我修养。
-- [**1837**星][4m] [Lua] [vulnerscom/nmap-vulners](https://github.com/vulnerscom/nmap-vulners) NSE script based on Vulners.com API
-- [**1836**星][3y] [Java] [chora10/cknife](https://github.com/chora10/cknife) Cknife
-- [**1835**星][1y] [Java] [yeriomin/yalpstore](https://github.com/yeriomin/yalpstore) Download apks from Google Play Store
-- [**1833**星][25d] [hmaverickadams/beginner-network-pentesting](https://github.com/hmaverickadams/beginner-network-pentesting) Notes for Beginner Network Pentesting Course
-- [**1832**星][4m] [Shell] [arismelachroinos/lscript](https://github.com/arismelachroinos/lscript) 自动化无线渗透和Hacking 任务的脚本
-- [**1830**星][7d] [C++] [pytorch/glow](https://github.com/pytorch/glow) Compiler for Neural Network hardware accelerators
-- [**1829**星][1y] [Py] [jinnlynn/genpac](https://github.com/jinnlynn/genpac) PAC/Dnsmasq/Wingy file Generator, working with gfwlist, support custom rules.
-- [**1827**星][1m] [Jupyter Notebook] [hunters-forge/threathunter-playbook](https://github.com/hunters-forge/ThreatHunter-Playbook) A Threat hunter's playbook to aid the development of techniques and hypothesis for hunting campaigns.
-- [**1827**星][2m] [Go] [influxdata/kapacitor](https://github.com/influxdata/kapacitor) Open source framework for processing, monitoring, and alerting on time series data
-- [**1827**星][1y] [CSS] [ctfs/write-ups-2015](https://github.com/ctfs/write-ups-2015) Wiki-like CTF write-ups repository, maintained by the community. 2015
-- [**1819**星][13d] [Py] [trailofbits/manticore](https://github.com/trailofbits/manticore) 动态二进制分析工具,支持符号执行(symbolic execution)、污点分析(taint analysis)、运行时修改。
-- [**1816**星][19d] [C] [mgba-emu/mgba](https://github.com/mgba-emu/mgba) mGBA Game Boy Advance Emulator
-- [**1814**星][7d] [Py] [bregman-arie/devops-interview-questions](https://github.com/bregman-arie/devops-interview-questions) Linux, Jenkins, AWS, SRE, Prometheus, Docker, Python, Ansible, Git, Kubernetes, Terraform, OpenStack, SQL, NoSQL, Azure, GCP, DNS, Elastic
-- [**1808**星][6m] [C++] [iagox86/dnscat2](https://github.com/iagox86/dnscat2) 在 DNS 协议上创建加密的 C&C channel
-- [**1806**星][5m] [Py] [veil-framework/veil](https://github.com/veil-framework/veil) generate metasploit payloads that bypass common anti-virus solutions
-- [**1801**星][3y] [Objective-C] [kpwn/yalu102](https://github.com/kpwn/yalu102) incomplete iOS 10.2 jailbreak for 64 bit devices by qwertyoruiopz and marcograssi
-- [**1801**星][2m] [djadmin/awesome-bug-bounty](https://github.com/djadmin/awesome-bug-bounty) A comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.
-- [**1788**星][28d] [Go] [gdamore/tcell](https://github.com/gdamore/tcell) Tcell is an alternate terminal package, similar in some ways to termbox, but better in others.
-- [**1785**星][11m] [Py] [ctfs/write-ups-2017](https://github.com/ctfs/write-ups-2017) Wiki-like CTF write-ups repository, maintained by the community. 2017
-- [**1784**星][7d] [C#] [hmbsbige/shadowsocksr-windows](https://github.com/hmbsbige/shadowsocksr-windows) 【自用】Bug-Oriented Programming
-- [**1783**星][7m] [Py] [lijiejie/subdomainsbrute](https://github.com/lijiejie/subdomainsbrute) 子域名爆破
-- [**1777**星][18d] [PHP] [ezyang/htmlpurifier](https://github.com/ezyang/htmlpurifier) Standards compliant HTML filter written in PHP
-- [**1776**星][13d] [C++] [apitrace/apitrace](https://github.com/apitrace/apitrace) Tools for tracing OpenGL, Direct3D, and other graphics APIs
-- [**1775**星][4y] [caesar0301/awesome-pcaptools](https://github.com/caesar0301/awesome-pcaptools) A collection of tools developed by other researchers in the Computer Science area to process network traces. All the right reserved for the original authors.
-- [**1774**星][1y] [aozhimin/ios-monitor-platform](https://github.com/aozhimin/ios-monitor-platform)
-- [**1770**星][3y] [Objective-C] [alibaba/wax](https://github.com/alibaba/wax) Wax is a framework that lets you write native iPhone apps in Lua.
-- [**1768**星][13d] [Shell] [leebaird/discover](https://github.com/leebaird/discover) 自定义的bash脚本, 用于自动化多个渗透测试任务, 包括: 侦查、扫描、解析、在Metasploit中创建恶意Payload和Listener
-- [**1764**星][3m] [Py] [epinna/weevely3](https://github.com/epinna/weevely3) Weaponized web shell
-- [**1759**星][12d] [C] [google/wuffs](https://github.com/google/wuffs) Wrangling Untrusted File Formats Safely
-- [**1757**星][7m] [C++] [wrbug/dumpdex](https://github.com/wrbug/dumpdex) Android脱壳
-- [**1757**星][2y] [CSS] [b374k/b374k](https://github.com/b374k/b374k) PHP Webshell with handy features
-- [**1749**星][2m] [onethawt/idaplugins-list](https://github.com/onethawt/idaplugins-list) IDA插件收集
-- [**1747**星][8d] [17mon/china_ip_list](https://github.com/17mon/china_ip_list)
-- [**1743**星][12m] [JS] [puppeteer/examples](https://github.com/puppeteer/examples) Use case-driven examples for using Puppeteer and headless chrome
-- [**1740**星][8d] [PHP] [wordpress/wordpress-coding-standards](https://github.com/wordpress/wordpress-coding-standards) PHP_CodeSniffer rules (sniffs) to enforce WordPress coding conventions
+- [**1839**星][3y] [Java] [chora10/cknife](https://github.com/chora10/cknife) Cknife
+- [**1838**星][1y] [Py] [jinnlynn/genpac](https://github.com/jinnlynn/genpac) PAC/Dnsmasq/Wingy file Generator, working with gfwlist, support custom rules.
+- [**1830**星][2m] [Go] [influxdata/kapacitor](https://github.com/influxdata/kapacitor) Open source framework for processing, monitoring, and alerting on time series data
+- [**1828**星][3m] [JS] [coreybutler/node-windows](https://github.com/coreybutler/node-windows) Windows support for Node.JS scripts (daemons, eventlog, UAC, etc).
+- [**1828**星][1y] [CSS] [ctfs/write-ups-2015](https://github.com/ctfs/write-ups-2015) Wiki-like CTF write-ups repository, maintained by the community. 2015
+- [**1824**星][5d] [Py] [trailofbits/manticore](https://github.com/trailofbits/manticore) 动态二进制分析工具,支持符号执行(symbolic execution)、污点分析(taint analysis)、运行时修改。
+- [**1819**星][6d] [C] [mgba-emu/mgba](https://github.com/mgba-emu/mgba) mGBA Game Boy Advance Emulator
+- [**1818**星][2m] [djadmin/awesome-bug-bounty](https://github.com/djadmin/awesome-bug-bounty) A comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.
+- [**1815**星][5m] [Py] [veil-framework/veil](https://github.com/veil-framework/veil) generate metasploit payloads that bypass common anti-virus solutions
+- [**1814**星][6m] [C++] [iagox86/dnscat2](https://github.com/iagox86/dnscat2) 在 DNS 协议上创建加密的 C&C channel
+- [**1804**星][10d] [Go] [gdamore/tcell](https://github.com/gdamore/tcell) Tcell is an alternate terminal package, similar in some ways to termbox, but better in others.
+- [**1801**星][12m] [Go] [intelsdi-x/snap](https://github.com/intelsdi-x/snap) an open telemetry framework designed to simplify the collection, processing and publishing of system data through a single API.
+- [**1800**星][3y] [ObjC] [kpwn/yalu102](https://github.com/kpwn/yalu102) incomplete iOS 10.2 jailbreak for 64 bit devices by qwertyoruiopz and marcograssi
+- [**1795**星][7m] [Py] [lijiejie/subdomainsbrute](https://github.com/lijiejie/subdomainsbrute) 子域名爆破
+- [**1790**星][12m] [Py] [ctfs/write-ups-2017](https://github.com/ctfs/write-ups-2017) Wiki-like CTF write-ups repository, maintained by the community. 2017
+- [**1785**星][1y] [aozhimin/ios-monitor-platform](https://github.com/aozhimin/ios-monitor-platform)
+- [**1784**星][16d] [Shell] [pirate/wireguard-docs](https://github.com/pirate/wireguard-docs)
+- [**1781**星][15d] [Shell] [leebaird/discover](https://github.com/leebaird/discover) 自定义的bash脚本, 用于自动化多个渗透测试任务, 包括: 侦查、扫描、解析、在Metasploit中创建恶意Payload和Listener
+- [**1779**星][4y] [caesar0301/awesome-pcaptools](https://github.com/caesar0301/awesome-pcaptools) A collection of tools developed by other researchers in the Computer Science area to process network traces. All the right reserved for the original authors.
+- [**1778**星][15d] [C++] [apitrace/apitrace](https://github.com/apitrace/apitrace) Tools for tracing OpenGL, Direct3D, and other graphics APIs
+- [**1777**星][7m] [C++] [wrbug/dumpdex](https://github.com/wrbug/dumpdex) Android脱壳
+- [**1777**星][7d] [PHP] [ezyang/htmlpurifier](https://github.com/ezyang/htmlpurifier) Standards compliant HTML filter written in PHP
+- [**1777**星][5d] [Go] [convox/rack](https://github.com/convox/rack) Private PaaS built on native AWS services for maximum privacy and minimum upkeep
+- [**1774**星][3y] [ObjC] [tapwork/heapinspector-for-ios](https://github.com/tapwork/heapinspector-for-ios) Find memory issues & leaks in your iOS app without instruments
+- [**1774**星][3m] [Py] [epinna/weevely3](https://github.com/epinna/weevely3) Weaponized web shell
+- [**1772**星][2y] [JS] [cazala/coin-hive](https://github.com/cazala/coin-hive) CoinHive cryptocurrency miner for node.js
+- [**1770**星][3y] [ObjC] [alibaba/wax](https://github.com/alibaba/wax) Wax is a framework that lets you write native iPhone apps in Lua.
+- [**1761**星][6d] [C] [google/wuffs](https://github.com/google/wuffs) Wrangling Untrusted File Formats Safely
+- [**1761**星][2y] [CSS] [b374k/b374k](https://github.com/b374k/b374k) PHP Webshell with handy features
+- [**1760**星][3y] [Go] [elastic/logstash-forwarder](https://github.com/elastic/logstash-forwarder) An experiment to cut logs in preparation for processing elsewhere. Replaced by Filebeat:
+- [**1758**星][12m] [JS] [puppeteer/examples](https://github.com/puppeteer/examples) Use case-driven examples for using Puppeteer and headless chrome
+- [**1756**星][10d] [17mon/china_ip_list](https://github.com/17mon/china_ip_list)
+- [**1754**星][2m] [onethawt/idaplugins-list](https://github.com/onethawt/idaplugins-list) IDA插件收集
+- [**1747**星][2d] [PHP] [wordpress/wordpress-coding-standards](https://github.com/wordpress/wordpress-coding-standards) PHP_CodeSniffer rules (sniffs) to enforce WordPress coding conventions
+- [**1745**星][1y] [PS] [fuzzysecurity/powershell-suite](https://github.com/fuzzysecurity/powershell-suite) My musings with PowerShell
+- [**1744**星][1y] [coreb1t/awesome-pentest-cheat-sheets](https://github.com/coreb1t/awesome-pentest-cheat-sheets) Collection of the cheat sheets useful for pentesting
+- [**1742**星][3m] [tunz/js-vuln-db](https://github.com/tunz/js-vuln-db) A collection of JavaScript engine CVEs with PoCs
+- [**1739**星][21d] [ngalongc/bug-bounty-reference](https://github.com/ngalongc/bug-bounty-reference) Inspired by
- [**1738**星][2y] [Go] [vzex/dog-tunnel](https://github.com/vzex/dog-tunnel) p2p tunnel,(udp mode work with kcp,
-- [**1734**星][3m] [tunz/js-vuln-db](https://github.com/tunz/js-vuln-db) A collection of JavaScript engine CVEs with PoCs
-- [**1732**星][1y] [coreb1t/awesome-pentest-cheat-sheets](https://github.com/coreb1t/awesome-pentest-cheat-sheets) Collection of the cheat sheets useful for pentesting
-- [**1727**星][2m] [PHP] [orangetw/my-ctf-web-challenges](https://github.com/orangetw/my-ctf-web-challenges) Collection of CTF Web challenges I made
-- [**1726**星][3y] [Go] [s-rah/onionscan](https://github.com/s-rah/onionscan) OnionScan is a free and open source tool for investigating the Dark Web.
-- [**1723**星][6m] [Smali] [ahmyth/ahmyth-android-rat](https://github.com/ahmyth/ahmyth-android-rat) Android Remote Administration Tool
-- [**1722**星][1y] [PowerShell] [fuzzysecurity/powershell-suite](https://github.com/fuzzysecurity/powershell-suite) My musings with PowerShell
-- [**1720**星][19d] [ngalongc/bug-bounty-reference](https://github.com/ngalongc/bug-bounty-reference) Inspired by
-- [**1718**星][1m] [PowerShell] [fireeye/flare-vm](https://github.com/fireeye/flare-vm) 火眼发布用于 Windows 恶意代码分析的虚拟机:FLARE VM
-- [**1717**星][7d] [C] [google/honggfuzz](https://github.com/google/honggfuzz) Security oriented fuzzer with powerful analysis options. Supports evolutionary, feedback-driven fuzzing based on code coverage (software- and hardware-based)
-- [**1714**星][2m] [Go] [subfinder/subfinder](https://github.com/subfinder/subfinder) 使用Passive Sources, Search Engines, Pastebins, Internet Archives等查找子域名
-- [**1709**星][9m] [Py] [constverum/proxybroker](https://github.com/constverum/proxybroker) Proxy [Finder | Checker | Server]. HTTP(S) & SOCKS
-- [**1708**星][10d] [Ruby] [cliffe/secgen](https://github.com/cliffe/secgen) Create randomly insecure VMs
-- [**1705**星][4m] [Py] [lgandx/responder](https://github.com/lgandx/responder) Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.
-- [**1702**星][1y] [Java] [ac-pm/inspeckage](https://github.com/ac-pm/inspeckage) Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)
-- [**1695**星][1m] [Go] [eth0izzle/shhgit](https://github.com/eth0izzle/shhgit) 监听Github Event API,实时查找Github代码和Gist中的secret和敏感文件
-- [**1694**星][3m] [PHP] [xtr4nge/fruitywifi](https://github.com/xtr4nge/fruitywifi) FruityWiFi is a wireless network auditing tool. The application can be installed in any Debian based system (Jessie) adding the extra packages. Tested in Debian, Kali Linux, Kali Linux ARM (Raspberry Pi), Raspbian (Raspberry Pi), Pwnpi (Raspberry Pi), Bugtraq, NetHunter.
-- [**1694**星][3y] [CoffeeScript] [okturtles/dnschain](https://github.com/okturtles/dnschain) A blockchain-based DNS + HTTP server that fixes HTTPS security, and more!
-- [**1694**星][1y] [Swift] [haxpor/potatso](https://github.com/haxpor/potatso) Potatso is an iOS client that implements Shadowsocks proxy with the leverage of NetworkExtension framework. ***This project is unmaintained, try taking a look at this fork
-- [**1694**星][14d] [Go] [hashicorp/memberlist](https://github.com/hashicorp/memberlist) Golang package for gossip based membership and failure detection
-- [**1693**星][8m] [Py] [guelfoweb/knock](https://github.com/guelfoweb/knock) 使用 Wordlist 枚举子域名
-- [**1693**星][7d] [TSQL] [brentozarultd/sql-server-first-responder-kit](https://github.com/brentozarultd/sql-server-first-responder-kit) sp_Blitz, sp_BlitzCache, sp_BlitzFirst, sp_BlitzIndex, and other SQL Server scripts for health checks and performance tuning.
-- [**1693**星][3m] [Py] [anorov/cloudflare-scrape](https://github.com/anorov/cloudflare-scrape) A Python module to bypass Cloudflare's anti-bot page.
-- [**1691**星][6m] [Py] [yelp/osxcollector](https://github.com/yelp/osxcollector) A forensic evidence collection & analysis toolkit for OS X
-- [**1687**星][4m] [JS] [expressjs/csurf](https://github.com/expressjs/csurf) CSRF token middleware
-- [**1685**星][5m] [C] [networkprotocol/netcode.io](https://github.com/networkprotocol/netcode.io) A protocol for secure client/server connections over UDP
-- [**1682**星][8m] [Makefile] [raspberrypi/noobs](https://github.com/raspberrypi/noobs) NOOBS (New Out Of Box Software) - An easy Operating System install manager for the Raspberry Pi
-- [**1682**星][1y] [owasp/devguide](https://github.com/owasp/devguide) The OWASP Guide
-- [**1681**星][13d] [HTML] [chromium/badssl.com](https://github.com/chromium/badssl.com)
-- [**1681**星][9m] [CSS] [bagder/http2-explained](https://github.com/bagder/http2-explained) A detailed document explaining and documenting HTTP/2, the successor to the widely popular HTTP/1.1 protocol
-- [**1676**星][28d] [Swift] [pmusolino/wormholy](https://github.com/pmusolino/wormholy) iOS network debugging, like a wizard 🧙♂️
-- [**1675**星][4m] [R] [briatte/awesome-network-analysis](https://github.com/briatte/awesome-network-analysis) A curated list of awesome network analysis resources.
-- [**1674**星][2m] [Py] [rootm0s/winpwnage](https://github.com/rootm0s/winpwnage) UAC bypass, Elevate, Persistence and Execution methods
-- [**1668**星][7m] [C++] [yegord/snowman](https://github.com/yegord/snowman) Snowman反编译器,支持x86, AMD64, ARM。有独立的GUI工具、命令行工具、IDA/Radare2/x64dbg插件,也可以作为库使用
+- [**1735**星][2m] [PHP] [orangetw/my-ctf-web-challenges](https://github.com/orangetw/my-ctf-web-challenges) Collection of CTF Web challenges I made
+- [**1731**星][1m] [PS] [fireeye/flare-vm](https://github.com/fireeye/flare-vm) 火眼发布用于 Windows 恶意代码分析的虚拟机:FLARE VM
+- [**1730**星][3y] [Go] [s-rah/onionscan](https://github.com/s-rah/onionscan) OnionScan is a free and open source tool for investigating the Dark Web.
+- [**1730**星][6m] [Smali] [ahmyth/ahmyth-android-rat](https://github.com/ahmyth/ahmyth-android-rat) Android Remote Administration Tool
+- [**1723**星][14d] [selierlin/share-ssr-v2ray](https://github.com/selierlin/share-ssr-v2ray)
+- [**1719**星][4d] [C] [google/honggfuzz](https://github.com/google/honggfuzz) Security oriented fuzzer with powerful analysis options. Supports evolutionary, feedback-driven fuzzing based on code coverage (software- and hardware-based)
+- [**1718**星][9m] [Py] [constverum/proxybroker](https://github.com/constverum/proxybroker) Proxy [Finder | Checker | Server]. HTTP(S) & SOCKS
+- [**1717**星][4m] [Py] [lgandx/responder](https://github.com/lgandx/responder) Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.
+- [**1714**星][5d] [Ruby] [cliffe/secgen](https://github.com/cliffe/secgen) Create randomly insecure VMs
+- [**1710**星][1m] [Go] [eth0izzle/shhgit](https://github.com/eth0izzle/shhgit) 监听Github Event API,实时查找Github代码和Gist中的secret和敏感文件
+- [**1709**星][3m] [Py] [anorov/cloudflare-scrape](https://github.com/anorov/cloudflare-scrape) A Python module to bypass Cloudflare's anti-bot page.
+- [**1709**星][1y] [Java] [ac-pm/inspeckage](https://github.com/ac-pm/inspeckage) Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)
+- [**1707**星][3d] [TSQL] [brentozarultd/sql-server-first-responder-kit](https://github.com/brentozarultd/sql-server-first-responder-kit) sp_Blitz, sp_BlitzCache, sp_BlitzFirst, sp_BlitzIndex, and other SQL Server scripts for health checks and performance tuning.
+- [**1706**星][16d] [Go] [hashicorp/memberlist](https://github.com/hashicorp/memberlist) Golang package for gossip based membership and failure detection
+- [**1700**星][8m] [Py] [guelfoweb/knock](https://github.com/guelfoweb/knock) 使用 Wordlist 枚举子域名
+- [**1697**星][9m] [CSS] [bagder/http2-explained](https://github.com/bagder/http2-explained) A detailed document explaining and documenting HTTP/2, the successor to the widely popular HTTP/1.1 protocol
+- [**1696**星][3m] [PHP] [xtr4nge/fruitywifi](https://github.com/xtr4nge/fruitywifi) FruityWiFi is a wireless network auditing tool. The application can be installed in any Debian based system (Jessie) adding the extra packages. Tested in Debian, Kali Linux, Kali Linux ARM (Raspberry Pi), Raspbian (Raspberry Pi), Pwnpi (Raspberry Pi), Bugtraq, NetHunter.
+- [**1696**星][1y] [Swift] [haxpor/potatso](https://github.com/haxpor/potatso) Potatso is an iOS client that implements Shadowsocks proxy with the leverage of NetworkExtension framework. ***This project is unmaintained, try taking a look at this fork
+- [**1695**星][6m] [Py] [yelp/osxcollector](https://github.com/yelp/osxcollector) A forensic evidence collection & analysis toolkit for OS X
+- [**1695**星][3y] [CoffeeScript] [okturtles/dnschain](https://github.com/okturtles/dnschain) A blockchain-based DNS + HTTP server that fixes HTTPS security, and more!
+- [**1689**星][5m] [C] [networkprotocol/netcode.io](https://github.com/networkprotocol/netcode.io) A protocol for secure client/server connections over UDP
+- [**1687**星][5m] [JS] [expressjs/csurf](https://github.com/expressjs/csurf) CSRF token middleware
+- [**1687**星][15d] [HTML] [chromium/badssl.com](https://github.com/chromium/badssl.com)
+- [**1686**星][8m] [Makefile] [raspberrypi/noobs](https://github.com/raspberrypi/noobs) NOOBS (New Out Of Box Software) - An easy Operating System install manager for the Raspberry Pi
+- [**1685**星][4m] [R] [briatte/awesome-network-analysis](https://github.com/briatte/awesome-network-analysis) A curated list of awesome network analysis resources.
+- [**1683**星][1y] [owasp/devguide](https://github.com/owasp/devguide) The OWASP Guide
+- [**1682**星][3m] [Py] [rootm0s/winpwnage](https://github.com/rootm0s/winpwnage) UAC bypass, Elevate, Persistence and Execution methods
+- [**1677**星][30d] [Swift] [pmusolino/wormholy](https://github.com/pmusolino/wormholy) iOS network debugging, like a wizard 🧙♂️
+- [**1674**星][2d] [C++] [microsoft/detours](https://github.com/microsoft/detours) Detours is a software package for monitoring and instrumenting API calls on Windows. It is distributed in source code form.
+- [**1671**星][7m] [C++] [yegord/snowman](https://github.com/yegord/snowman) Snowman反编译器,支持x86, AMD64, ARM。有独立的GUI工具、命令行工具、IDA/Radare2/x64dbg插件,也可以作为库使用
- [IDA插件](https://github.com/yegord/snowman/tree/master/src/ida-plugin)
- [snowman](https://github.com/yegord/snowman/tree/master/src/snowman) QT界面
- [nocode](https://github.com/yegord/snowman/tree/master/src/nocode) 命令行工具
- [nc](https://github.com/yegord/snowman/tree/master/src/nc) 核心代码,可作为库使用
-- [**1665**星][6m] [C++] [microsoft/detours](https://github.com/microsoft/detours) Detours is a software package for monitoring and instrumenting API calls on Windows. It is distributed in source code form.
-- [**1662**星][12d] [selierlin/share-ssr-v2ray](https://github.com/selierlin/share-ssr-v2ray)
-- [**1662**星][4y] [Java] [dodola/hotfix](https://github.com/dodola/hotfix) 安卓App热补丁动态修复框架
-- [**1659**星][7d] [Java] [apache/geode](https://github.com/apache/geode) Apache Geode
-- [**1655**星][6m] [C] [easyhook/easyhook](https://github.com/easyhook/easyhook) The reinvention of Windows API Hooking
-- [**1654**星][3m] [JS] [tylerbrock/mongo-hacker](https://github.com/tylerbrock/mongo-hacker) MongoDB Shell Enhancements for Hackers
-- [**1653**星][2m] [NSIS] [angryip/ipscan](https://github.com/angryip/ipscan) Angry IP Scanner - fast and friendly network scanner
-- [**1651**星][7d] [Py] [cea-sec/ivre](https://github.com/cea-sec/ivre) Network recon framework.
-- [**1650**星][2y] [Shell] [juude/droidreverse](https://github.com/juude/droidreverse) android 逆向工程工具集
-- [**1649**星][10m] [JS] [evilcos/xssor2](https://github.com/evilcos/xssor2) XSS'OR - Hack with JavaScript.
-- [**1647**星][3m] [Py] [boppreh/keyboard](https://github.com/boppreh/keyboard) Hook and simulate global keyboard events on Windows and Linux.
-- [**1646**星][8d] [roave/securityadvisories](https://github.com/roave/securityadvisories) ensures that your application doesn't have installed dependencies with known security vulnerabilities
-- [**1646**星][8d] [JS] [ghacksuserjs/ghacks-user.js](https://github.com/ghacksuserjs/ghacks-user.js) An ongoing comprehensive user.js template for configuring and hardening Firefox privacy, security and anti-fingerprinting
+- [**1668**星][2m] [NSIS] [angryip/ipscan](https://github.com/angryip/ipscan) Angry IP Scanner - fast and friendly network scanner
+- [**1666**星][2d] [Java] [apache/geode](https://github.com/apache/geode) Apache Geode
+- [**1663**星][4y] [Java] [dodola/hotfix](https://github.com/dodola/hotfix) 安卓App热补丁动态修复框架
+- [**1661**星][6m] [C] [easyhook/easyhook](https://github.com/easyhook/easyhook) The reinvention of Windows API Hooking
+- [**1661**星][2d] [Py] [cea-sec/ivre](https://github.com/cea-sec/ivre) Network recon framework.
+- [**1659**星][10d] [roave/securityadvisories](https://github.com/roave/securityadvisories) ensures that your application doesn't have installed dependencies with known security vulnerabilities
+- [**1656**星][6d] [JS] [tylerbrock/mongo-hacker](https://github.com/tylerbrock/mongo-hacker) MongoDB Shell Enhancements for Hackers
+- [**1655**星][3m] [Py] [boppreh/keyboard](https://github.com/boppreh/keyboard) Hook and simulate global keyboard events on Windows and Linux.
+- [**1654**星][2d] [JS] [ghacksuserjs/ghacks-user.js](https://github.com/ghacksuserjs/ghacks-user.js) An ongoing comprehensive user.js template for configuring and hardening Firefox privacy, security and anti-fingerprinting
+- [**1652**星][2y] [Shell] [juude/droidreverse](https://github.com/juude/droidreverse) android 逆向工程工具集
+- [**1652**星][7m] [dsasmblr/game-hacking](https://github.com/dsasmblr/game-hacking) Tutorials, tools, and more as related to reverse engineering video games.
+- [**1651**星][10m] [JS] [evilcos/xssor2](https://github.com/evilcos/xssor2) XSS'OR - Hack with JavaScript.
+- [**1650**星][1m] [Py] [ehco1996/django-sspanel](https://github.com/ehco1996/django-sspanel) 用diango开发的全新的shadowsocks网络面板
+- [**1650**星][7d] [HTML] [clong/detectionlab](https://github.com/clong/detectionlab) Vagrant & Packer scripts to build a lab environment complete with security tooling and logging best practices
+- [**1649**星][1y] [Py] [evyatarmeged/raccoon](https://github.com/evyatarmeged/raccoon) 高性能的侦查和漏洞扫描工具
+- [**1648**星][2d] [C#] [jbevain/cecil](https://github.com/jbevain/cecil) C#库, 探查/修改/生成 .NET App/库
- [**1645**星][3y] [JS] [camwiegert/baffle](https://github.com/camwiegert/baffle) A tiny javascript library for obfuscating and revealing text in DOM elements.
-- [**1643**星][1m] [C#] [jbevain/cecil](https://github.com/jbevain/cecil) C#库, 探查/修改/生成 .NET App/库
-- [**1641**星][1y] [Py] [evyatarmeged/raccoon](https://github.com/evyatarmeged/raccoon) 高性能的侦查和漏洞扫描工具
-- [**1641**星][6m] [dsasmblr/game-hacking](https://github.com/dsasmblr/game-hacking) Tutorials, tools, and more as related to reverse engineering video games.
-- [**1639**星][1m] [Py] [ehco1996/django-sspanel](https://github.com/ehco1996/django-sspanel) 用diango开发的全新的shadowsocks网络面板
-- [**1637**星][13d] [HTML] [clong/detectionlab](https://github.com/clong/detectionlab) Vagrant & Packer scripts to build a lab environment complete with security tooling and logging best practices
-- [**1636**星][11m] [Java] [fesh0r/fernflower](https://github.com/fesh0r/fernflower) Unofficial mirror of FernFlower Java decompiler (All pulls should be submitted upstream)
-- [**1635**星][4y] [Py] [ctfs/write-ups-2014](https://github.com/ctfs/write-ups-2014) Wiki-like CTF write-ups repository, maintained by the community. 2014
-- [**1635**星][4m] [Java] [jaredrummler/androidprocesses](https://github.com/jaredrummler/androidprocesses) DEPRECATED
-- [**1635**星][4y] [Py] [ctfs/write-ups-2014](https://github.com/ctfs/write-ups-2014) Wiki-like CTF write-ups repository, maintained by the community. 2014
-- [**1629**星][9m] [tylerha97/awesome-reversing](https://github.com/tylerha97/awesome-reversing) A curated list of awesome reversing resources
-- [**1627**星][12d] [Go] [awnumar/memguard](https://github.com/awnumar/memguard) 处理内存中敏感的值,纯Go语言编写。
-- [**1627**星][9d] [sarojaba/awesome-devblog](https://github.com/sarojaba/awesome-devblog) 어썸데브블로그. 국내 개발 블로그 모음(only 실명으로).
-- [**1620**星][14d] [JS] [efforg/privacybadger](https://github.com/efforg/privacybadger) Privacy Badger is a browser extension that automatically learns to block invisible trackers.
-- [**1616**星][2y] [jhaddix/tbhm](https://github.com/jhaddix/tbhm) The Bug Hunters Methodology
-- [**1614**星][2m] [Shell] [internetwache/gittools](https://github.com/internetwache/gittools) find websites with their .git repository available to the public
-- [**1612**星][4m] [CSS] [functionclub/v2ray.fun](https://github.com/functionclub/v2ray.fun) 正在开发的全新 V2ray.Fun
-- [**1611**星][2m] [Go] [ysrc/yulong-hids](https://github.com/ysrc/yulong-hids) 一款由 YSRC 开源的主机入侵检测系统
-- [**1610**星][7m] [Go] [sipt/shuttle](https://github.com/sipt/shuttle) A web proxy in Golang with amazing features.
-- [**1608**星][2y] [JS] [addyosmani/a11y](https://github.com/addyosmani/a11y) Accessibility audit tooling for the web (beta)
-- [**1607**星][3y] [Makefile] [drizzlerisk/drizzledumper](https://github.com/drizzlerisk/drizzledumper) 是一款基于内存搜索的Android脱壳工具。
-- [**1605**星][27d] [PHP] [c0ny1/upload-labs](https://github.com/c0ny1/upload-labs) 一个帮你总结所有类型的上传漏洞的靶场
-- [**1604**星][10m] [C] [nmikhailov/validity90](https://github.com/nmikhailov/validity90) Reverse engineering of Validity/Synaptics 138a:0090, 138a:0094, 138a:0097, 06cb:0081, 06cb:009a fingerprint readers protocol
-- [**1602**星][1y] [Py] [nccgroup/scout2](https://github.com/nccgroup/Scout2) Security auditing tool for AWS environments
+- [**1643**星][9m] [tylerha97/awesome-reversing](https://github.com/tylerha97/awesome-reversing) A curated list of awesome reversing resources
+- [**1643**星][11m] [Java] [fesh0r/fernflower](https://github.com/fesh0r/fernflower) Unofficial mirror of FernFlower Java decompiler (All pulls should be submitted upstream)
+- [**1638**星][4y] [Py] [ctfs/write-ups-2014](https://github.com/ctfs/write-ups-2014) Wiki-like CTF write-ups repository, maintained by the community. 2014
+- [**1638**星][11m] [C] [dlundquist/sniproxy](https://github.com/dlundquist/sniproxy) Proxies incoming HTTP and TLS connections based on the hostname contained in the initial request of the TCP session.
+- [**1638**星][4y] [Py] [ctfs/write-ups-2014](https://github.com/ctfs/write-ups-2014) Wiki-like CTF write-ups repository, maintained by the community. 2014
+- [**1636**星][4m] [Java] [jaredrummler/androidprocesses](https://github.com/jaredrummler/androidprocesses) DEPRECATED
+- [**1634**星][14d] [Go] [awnumar/memguard](https://github.com/awnumar/memguard) 处理内存中敏感的值,纯Go语言编写。
+- [**1631**星][6m] [Objective-C++] [tencent/oomdetector](https://github.com/tencent/oomdetector) OOMDetector is a memory monitoring component for iOS which provides you with OOM monitoring, memory allocation monitoring, memory leak detection and other functions.
+- [**1630**星][6d] [JS] [efforg/privacybadger](https://github.com/efforg/privacybadger) Privacy Badger is a browser extension that automatically learns to block invisible trackers.
+- [**1630**星][29d] [PHP] [c0ny1/upload-labs](https://github.com/c0ny1/upload-labs) 一个帮你总结所有类型的上传漏洞的靶场
+- [**1629**星][5d] [sarojaba/awesome-devblog](https://github.com/sarojaba/awesome-devblog) 어썸데브블로그. 국내 개발 블로그 모음(only 실명으로).
+- [**1624**星][2y] [jhaddix/tbhm](https://github.com/jhaddix/tbhm) The Bug Hunters Methodology
+- [**1624**星][4m] [CSS] [functionclub/v2ray.fun](https://github.com/functionclub/v2ray.fun) 正在开发的全新 V2ray.Fun
+- [**1621**星][2m] [Shell] [internetwache/gittools](https://github.com/internetwache/gittools) find websites with their .git repository available to the public
+- [**1618**星][28d] [Java] [tiann/epic](https://github.com/tiann/epic) Dynamic java method AOP hook for Android(continution of Dexposed on ART), Supporting 4.0~10.0
+- [**1615**星][2y] [JS] [addyosmani/a11y](https://github.com/addyosmani/a11y) Accessibility audit tooling for the web (beta)
+- [**1614**星][2m] [Go] [ysrc/yulong-hids](https://github.com/ysrc/yulong-hids) 一款由 YSRC 开源的主机入侵检测系统
+- [**1614**星][7m] [Go] [sipt/shuttle](https://github.com/sipt/shuttle) A web proxy in Golang with amazing features.
+- [**1612**星][3y] [Makefile] [drizzlerisk/drizzledumper](https://github.com/drizzlerisk/drizzledumper) 是一款基于内存搜索的Android脱壳工具。
+- [**1608**星][9m] [JS] [localtunnel/server](https://github.com/localtunnel/server) server for localtunnel.me
+- [**1608**星][10m] [C] [nmikhailov/validity90](https://github.com/nmikhailov/validity90) Reverse engineering of Validity/Synaptics 138a:0090, 138a:0094, 138a:0097, 06cb:0081, 06cb:009a fingerprint readers protocol
+- [**1606**星][2d] [C++] [lief-project/lief](https://github.com/lief-project/lief) Library to Instrument Executable Formats
- [**1602**星][6m] [Py] [w1109790800/penetration](https://github.com/w1109790800/penetration) 渗透 超全面的渗透资料
-- [**1600**星][8d] [C++] [lief-project/lief](https://github.com/lief-project/lief) Library to Instrument Executable Formats
-- [**1599**星][9m] [JS] [localtunnel/server](https://github.com/localtunnel/server) server for localtunnel.me
-- [**1596**星][5m] [Py] [mozilla/cipherscan](https://github.com/mozilla/cipherscan) 查找指定目标支持的SSL ciphersuites
-- [**1596**星][3m] [Py] [knownsec/pocsuite](https://github.com/knownsec/pocsuite) This project has stopped to maintenance, please to
-- [**1593**星][26d] [Java] [tiann/epic](https://github.com/tiann/epic) Dynamic java method AOP hook for Android(continution of Dexposed on ART), Supporting 4.0~10.0
-- [**1588**星][13d] [Java] [spotbugs/spotbugs](https://github.com/spotbugs/spotbugs) SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.
-- [**1583**星][6m] [Ruby] [brunofacca/zen-rails-security-checklist](https://github.com/brunofacca/zen-rails-security-checklist) Checklist of security precautions for Ruby on Rails applications.
-- [**1580**星][1y] [C] [qihoo360/phptrace](https://github.com/qihoo360/phptrace) A tracing and troubleshooting tool for PHP scripts.
-- [**1580**星][7d] [Go] [bitnami-labs/sealed-secrets](https://github.com/bitnami-labs/sealed-secrets) A Kubernetes controller and tool for one-way encrypted Secrets
-- [**1577**星][4y] [l3m0n/pentest_study](https://github.com/l3m0n/pentest_study) 从零开始内网渗透学习
-- [**1577**星][1m] [Objective-C] [ealeksandrov/provisionql](https://github.com/ealeksandrov/provisionql) Quick Look plugin for apps and provisioning profile files
-- [**1575**星][26d] [C] [ntop/n2n](https://github.com/ntop/n2n) Peer-to-peer VPN
-- [**1574**星][22d] [ivrodriguezca/re-ios-apps](https://github.com/ivrodriguezca/re-ios-apps) A completely free, open source and online course about Reverse Engineering iOS Applications.
-- [**1563**星][2y] [C] [samyk/pwnat](https://github.com/samyk/pwnat) The only tool and technique to punch holes through firewalls/NATs where both clients and server can be behind separate NATs without any 3rd party involvement. Pwnat uses a newly developed technique, exploiting a property of NAT translation tables, with no 3rd party, port forwarding, DMZ, router administrative requirements, STUN/TURN/UPnP/ICE, or…
-- [**1563**星][12d] [C] [codahale/bcrypt-ruby](https://github.com/codahale/bcrypt-ruby) Ruby binding for the OpenBSD bcrypt() password hashing algorithm, allowing you to easily store a secure hash of your users' passwords.
-- [**1562**星][17d] [C] [p-gen/smenu](https://github.com/p-gen/smenu) Terminal utility that reads words from standard input or from a file and creates an interactive selection window just below the cursor. The selected word(s) are sent to standard output for further processing.
-- [**1560**星][14d] [Java] [gchq/gaffer](https://github.com/gchq/Gaffer) A large-scale entity and relation database supporting aggregation of properties
-- [**1557**星][2m] [C] [firmianay/ctf-all-in-one](https://github.com/firmianay/ctf-all-in-one) CTF竞赛入门指南
-- [**1556**星][12d] [Go] [caffix/amass](https://github.com/caffix/amass) 子域名枚举, 搜索互联网数据源, 使用机器学习猜测子域名. Go语言
-- [**1555**星][1y] [Py] [unkl4b/gitminer](https://github.com/unkl4b/gitminer) Github内容挖掘
-- [**1552**星][12d] [Py] [k4m4/kickthemout](https://github.com/k4m4/kickthemout) 使用ARP欺骗,将设备从网络中踢出去
-- [**1550**星][8m] [Py] [m4ll0k/wascan](https://github.com/m4ll0k/WAScan) WAScan - Web Application Scanner
-- [**1547**星][1y] [C] [ctfs/write-ups-2016](https://github.com/ctfs/write-ups-2016) Wiki-like CTF write-ups repository, maintained by the community. 2016
-- [**1545**星][6y] [Py] [google/pyringe](https://github.com/google/pyringe) Debugger capable of attaching to and injecting code into python processes.
-- [**1544**星][1m] [Shell] [mzet-/linux-exploit-suggester](https://github.com/mzet-/linux-exploit-suggester) Linux privilege escalation auditing tool
-- [**1544**星][3m] [PHP] [mewebstudio/captcha](https://github.com/mewebstudio/captcha) Captcha for Laravel 5 & 6
-- [**1542**星][1m] [Py] [joxeankoret/diaphora](https://github.com/joxeankoret/diaphora) program diffing
+- [**1601**星][1y] [Py] [nccgroup/scout2](https://github.com/nccgroup/Scout2) Security auditing tool for AWS environments
+- [**1601**星][5m] [Py] [mozilla/cipherscan](https://github.com/mozilla/cipherscan) 查找指定目标支持的SSL ciphersuites
+- [**1600**星][5d] [Go] [bitnami-labs/sealed-secrets](https://github.com/bitnami-labs/sealed-secrets) A Kubernetes controller and tool for one-way encrypted Secrets
+- [**1599**星][2y] [JS] [keraf/nocoin](https://github.com/keraf/nocoin) No Coin is a tiny browser extension aiming to block coin miners such as Coinhive.
+- [**1598**星][15d] [Java] [spotbugs/spotbugs](https://github.com/spotbugs/spotbugs) SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.
+- [**1597**星][3m] [Py] [knownsec/pocsuite](https://github.com/knownsec/pocsuite) This project has stopped to maintenance, please to
+- [**1591**星][28d] [C] [ntop/n2n](https://github.com/ntop/n2n) Peer-to-peer VPN
+- [**1591**星][24d] [ivrodriguezca/re-ios-apps](https://github.com/ivrodriguezca/re-ios-apps) A completely free, open source and online course about Reverse Engineering iOS Applications.
+- [**1584**星][6m] [Ruby] [brunofacca/zen-rails-security-checklist](https://github.com/brunofacca/zen-rails-security-checklist) Checklist of security precautions for Ruby on Rails applications.
+- [**1583**星][4y] [l3m0n/pentest_study](https://github.com/l3m0n/pentest_study) 从零开始内网渗透学习
+- [**1582**星][1m] [ObjC] [ealeksandrov/provisionql](https://github.com/ealeksandrov/provisionql) Quick Look plugin for apps and provisioning profile files
+- [**1581**星][1y] [C] [qihoo360/phptrace](https://github.com/qihoo360/phptrace) A tracing and troubleshooting tool for PHP scripts.
+- [**1570**星][2m] [C] [firmianay/ctf-all-in-one](https://github.com/firmianay/ctf-all-in-one) CTF竞赛入门指南
+- [**1569**星][2y] [C] [samyk/pwnat](https://github.com/samyk/pwnat) The only tool and technique to punch holes through firewalls/NATs where both clients and server can be behind separate NATs without any 3rd party involvement. Pwnat uses a newly developed technique, exploiting a property of NAT translation tables, with no 3rd party, port forwarding, DMZ, router administrative requirements, STUN/TURN/UPnP/ICE, or…
+- [**1569**星][29d] [Py] [opendevops-cn/opendevops](https://github.com/opendevops-cn/opendevops) CODO是一款为用户提供企业多混合云、一站式DevOps、自动化运维、完全开源的云管理平台、自动化运维平台
+- [**1566**星][14d] [C] [codahale/bcrypt-ruby](https://github.com/codahale/bcrypt-ruby) Ruby binding for the OpenBSD bcrypt() password hashing algorithm, allowing you to easily store a secure hash of your users' passwords.
+- [**1565**星][17d] [Go] [sofastack/sofa-mosn](https://github.com/sofastack/sofa-mosn) 使用 Go 语言开发的网络代理软件,作为云原生的网络数据平面,旨在为服务提供多协议,模块化,智能化,安全的代理能力
+- [**1562**星][19d] [C] [p-gen/smenu](https://github.com/p-gen/smenu) Terminal utility that reads words from standard input or from a file and creates an interactive selection window just below the cursor. The selected word(s) are sent to standard output for further processing.
+- [**1562**星][14d] [Py] [k4m4/kickthemout](https://github.com/k4m4/kickthemout) 使用ARP欺骗,将设备从网络中踢出去
+- [**1561**星][16d] [Java] [gchq/gaffer](https://github.com/gchq/Gaffer) A large-scale entity and relation database supporting aggregation of properties
+- [**1560**星][1y] [Py] [unkl4b/gitminer](https://github.com/unkl4b/gitminer) Github内容挖掘
+- [**1560**星][6d] [Go] [caffix/amass](https://github.com/caffix/amass) 子域名枚举, 搜索互联网数据源, 使用机器学习猜测子域名. Go语言
+- [**1557**星][8m] [Py] [m4ll0k/wascan](https://github.com/m4ll0k/WAScan) WAScan - Web Application Scanner
+- [**1556**星][15d] [Go] [eolinker/goku-api-gateway](https://github.com/eolinker/goku-api-gateway) A Powerful HTTP API Gateway in pure golang!Goku API Gateway (中文名:悟空 API 网关)是一个基于 Golang开发的微服务网关,能够实现高性能 HTTP API 转发、服务编排、多租户管理、API 访问权限控制等目的,拥有强大的自定义插件系统可以自行扩展,并且提供友好的图形化配置界面,能够快速帮助企业进行 API 服务治理、提高 API 服务的稳定性和安全性。
+- [**1555**星][1m] [Shell] [mzet-/linux-exploit-suggester](https://github.com/mzet-/linux-exploit-suggester) Linux privilege escalation auditing tool
+- [**1549**星][7d] [PHP] [mewebstudio/captcha](https://github.com/mewebstudio/captcha) Captcha for Laravel 5 & 6
+- [**1549**星][1m] [Py] [joxeankoret/diaphora](https://github.com/joxeankoret/diaphora) program diffing
+- [**1548**星][1y] [C] [ctfs/write-ups-2016](https://github.com/ctfs/write-ups-2016) Wiki-like CTF write-ups repository, maintained by the community. 2016
+- [**1544**星][15d] [C] [raspberrypi/userland](https://github.com/raspberrypi/userland) Source code for ARM side libraries for interfacing to Raspberry Pi GPU.
+- [**1544**星][6y] [Py] [google/pyringe](https://github.com/google/pyringe) Debugger capable of attaching to and injecting code into python processes.
+- [**1543**星][2d] [Go] [juju/juju](https://github.com/juju/juju) Simple, secure devops tooling built to manage today's complex applications wherever you run your software.
+- [**1541**星][2y] [Py] [awolfly9/ipproxytool](https://github.com/awolfly9/ipproxytool) python ip proxy tool scrapy crawl. 抓取大量免费代理 ip,提取有效 ip 使用
- [**1540**星][2y] [C++] [hteso/iaito](https://github.com/hteso/iaito) Radare2 GUI,使用Qt和C++
-- [**1536**星][2y] [Py] [awolfly9/ipproxytool](https://github.com/awolfly9/ipproxytool) python ip proxy tool scrapy crawl. 抓取大量免费代理 ip,提取有效 ip 使用
-- [**1533**星][2y] [C] [ezlippi/webbench](https://github.com/ezlippi/webbench) Webbench是Radim Kolar在1997年写的一个在linux下使用的非常简单的网站压测工具。它使用fork()模拟多个客户端同时访问我们设定的URL,测试网站在压力下工作的性能,最多可以模拟3万个并发连接去测试网站的负载能力。官网地址:
-- [**1532**星][13d] [C] [raspberrypi/userland](https://github.com/raspberrypi/userland) Source code for ARM side libraries for interfacing to Raspberry Pi GPU.
-- [**1531**星][7d] [Py] [lifting-bits/mcsema](https://github.com/lifting-bits/mcsema) 将x86, amd64, aarch64二进制文件转换成LLVM字节码
+- [**1539**星][2y] [C] [ezlippi/webbench](https://github.com/ezlippi/webbench) Webbench是Radim Kolar在1997年写的一个在linux下使用的非常简单的网站压测工具。它使用fork()模拟多个客户端同时访问我们设定的URL,测试网站在压力下工作的性能,最多可以模拟3万个并发连接去测试网站的负载能力。官网地址:
+- [**1537**星][9d] [Py] [lifting-bits/mcsema](https://github.com/lifting-bits/mcsema) 将x86, amd64, aarch64二进制文件转换成LLVM字节码
- [IDA7插件](https://github.com/lifting-bits/mcsema/tree/master/tools/mcsema_disass/ida7) 用于反汇编二进制文件并生成控制流程图
- [IDA插件](https://github.com/lifting-bits/mcsema/tree/master/tools/mcsema_disass/ida) 用于反汇编二进制文件并生成控制流程图
- [Binja插件](https://github.com/lifting-bits/mcsema/tree/master/tools/mcsema_disass/binja) 用于反汇编二进制文件并生成控制流程图
- [mcsema](https://github.com/lifting-bits/mcsema/tree/master/mcsema)
-- [**1530**星][7d] [Go] [juju/juju](https://github.com/juju/juju) Simple, secure devops tooling built to manage today's complex applications wherever you run your software.
-- [**1528**星][3y] [Py] [x0rz/eqgrp_lost_in_translation](https://github.com/x0rz/eqgrp_lost_in_translation) ShadowBrokers泄漏
-- [**1527**星][11d] [emijrp/awesome-awesome](https://github.com/emijrp/awesome-awesome) A curated list of awesome curated lists of many topics.
-- [**1525**星][10d] [Java] [ukanth/afwall](https://github.com/ukanth/afwall) AFWall+ (Android Firewall +) - iptables based firewall for Android
-- [**1521**星][1y] [HTML] [qiwihui/hiwifi-ss](https://github.com/qiwihui/hiwifi-ss) 极路由+ss配置
-- [**1520**星][4m] [TypeScript] [spring-guides/tut-spring-security-and-angular-js](https://github.com/spring-guides/tut-spring-security-and-angular-js) Spring Security and Angular:: A tutorial on how to use Spring Security with a single page application with various backend architectures, ranging from a simple single server to an API gateway with OAuth2 authentication.
-- [**1520**星][20d] [C++] [nmap/npcap](https://github.com/nmap/npcap) Nmap Project's packet sniffing library for Windows, based on WinPcap/Libpcap improved with NDIS 6 and LWF.
-- [**1519**星][10m] [PowerShell] [joefitzgerald/packer-windows](https://github.com/joefitzgerald/packer-windows) 使用Packer创建Vagrant boxes的模板
-- [**1516**星][9m] [Py] [google/rekall](https://github.com/google/rekall) Rekall Memory Forensic Framework
+- [**1536**星][4d] [Java] [ukanth/afwall](https://github.com/ukanth/afwall) AFWall+ (Android Firewall +) - iptables based firewall for Android
+- [**1533**星][13d] [emijrp/awesome-awesome](https://github.com/emijrp/awesome-awesome) A curated list of awesome curated lists of many topics.
+- [**1532**星][3y] [Py] [x0rz/eqgrp_lost_in_translation](https://github.com/x0rz/eqgrp_lost_in_translation) ShadowBrokers泄漏
+- [**1526**星][2d] [C++] [nmap/npcap](https://github.com/nmap/npcap) Nmap Project's packet sniffing library for Windows, based on WinPcap/Libpcap improved with NDIS 6 and LWF.
+- [**1522**星][1y] [HTML] [qiwihui/hiwifi-ss](https://github.com/qiwihui/hiwifi-ss) 极路由+ss配置
+- [**1521**星][4m] [TS] [spring-guides/tut-spring-security-and-angular-js](https://github.com/spring-guides/tut-spring-security-and-angular-js) Spring Security and Angular:: A tutorial on how to use Spring Security with a single page application with various backend architectures, ranging from a simple single server to an API gateway with OAuth2 authentication.
+- [**1521**星][3d] [C] [jiangwenyuan/nuster](https://github.com/jiangwenyuan/nuster) A high performance HTTP proxy cache server and RESTful NoSQL cache server based on HAProxy
+- [**1519**星][10m] [PS] [joefitzgerald/packer-windows](https://github.com/joefitzgerald/packer-windows) 使用Packer创建Vagrant boxes的模板
+- [**1518**星][9m] [Py] [google/rekall](https://github.com/google/rekall) Rekall Memory Forensic Framework
+- [**1517**星][8d] [Py] [zerosum0x0/koadic](https://github.com/zerosum0x0/koadic) 类似于Meterpreter、Powershell Empire 的post-exploitation rootkit,区别在于其大多数操作都是由 Windows 脚本主机 JScript/VBScript 执行
+- [**1516**星][5m] [snowming04/the-hacker-playbook-3-translation](https://github.com/snowming04/the-hacker-playbook-3-translation) 对 The Hacker Playbook 3 的翻译。
+- [**1514**星][3y] [Py] [sensepost/regeorg](https://github.com/sensepost/regeorg) The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.
- [**1510**星][1y] [dripcap/dripcap](https://github.com/dripcap/dripcap)
-- [**1509**星][21d] [Py] [zerosum0x0/koadic](https://github.com/zerosum0x0/koadic) 类似于Meterpreter、Powershell Empire 的post-exploitation rootkit,区别在于其大多数操作都是由 Windows 脚本主机 JScript/VBScript 执行
-- [**1506**星][3y] [Py] [sensepost/regeorg](https://github.com/sensepost/regeorg) The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.
-- [**1504**星][5m] [snowming04/the-hacker-playbook-3-translation](https://github.com/snowming04/the-hacker-playbook-3-translation) 对 The Hacker Playbook 3 的翻译。
-- [**1503**星][2y] [Py] [eldraco/domain_analyzer](https://github.com/eldraco/domain_analyzer) 通过查找所有能够查找的信息,来分析任意域名的安全性
-- [**1501**星][25d] [Py] [hannob/snallygaster](https://github.com/hannob/snallygaster) Python脚本, 扫描HTTP服务器"秘密文件"
-- [**1500**星][2m] [Shell] [haugene/docker-transmission-openvpn](https://github.com/haugene/docker-transmission-openvpn) Docker container running Transmission torrent client with WebUI over an OpenVPN tunnel
-- [**1491**星][4m] [Py] [epinna/tplmap](https://github.com/epinna/tplmap) 代码注入和服务器端模板注入(Server-Side Template Injection)漏洞利用,若干沙箱逃逸技巧。
-- [**1490**星][10d] [YARA] [cybermonitor/apt_cybercriminal_campagin_collections](https://github.com/cybermonitor/apt_cybercriminal_campagin_collections) APT & CyberCriminal Campaign Collection
-- [**1487**星][7m] [Py] [ahupp/python-magic](https://github.com/ahupp/python-magic) A python wrapper for libmagic
-- [**1485**星][2y] [Kotlin] [gh0u1l5/wechatmagician](https://github.com/gh0u1l5/wechatmagician) WechatMagician is a Xposed module written in Kotlin, that allows you to completely control your Wechat.
-- [**1482**星][7m] [C++] [wangyu-/tinyfecvpn](https://github.com/wangyu-/tinyfecvpn) A VPN Designed for Lossy Links, with Build-in Forward Error Correction(FEC) Support. Improves your Network Quality on a High-latency Lossy Link.
-- [**1478**星][7d] [C] [sleuthkit/sleuthkit](https://github.com/sleuthkit/sleuthkit) The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.
-- [**1475**星][12d] [Py] [bitsadmin/wesng](https://github.com/bitsadmin/wesng) Windows Exploit Suggester - Next Generation
-- [**1474**星][1y] [C++] [f1xpl/openauto](https://github.com/f1xpl/openauto) AndroidAuto headunit emulator
-- [**1472**星][7d] [Shell] [blackarch/blackarch](https://github.com/blackarch/blackarch) BlackArch Linux is an Arch Linux-based distribution for penetration testers and security researchers.
-- [**1468**星][16d] [Go] [google/keytransparency](https://github.com/google/keytransparency) A transparent and secure way to look up public keys.
-- [**1468**星][3m] [C] [iqiyi/xhook](https://github.com/iqiyi/xhook) a PLT (Procedure Linkage Table) hook library for Android native ELF
-- [**1466**星][2m] [C++] [jmpews/hookzz](https://github.com/jmpews/hookzz) a hook framework for arm/arm64/ios/android, and [dev] branch is being refactored.
-- [**1465**星][3y] [Py] [veil-framework/veil-evasion](https://github.com/Veil-Framework/Veil-Evasion) a tool designed to generate metasploit payloads that bypass common anti-virus solutions.
-- [**1465**星][25d] [minimaxir/hacker-news-undocumented](https://github.com/minimaxir/hacker-news-undocumented) Some of the hidden norms about Hacker News not otherwise covered in the Guidelines and the FAQ.
-- [**1462**星][6y] [C] [alibaba/lvs](https://github.com/alibaba/lvs) A distribution of Linux Virtual Server with some advanced features. It introduces a new packet forwarding method - FULLNAT other than NAT/Tunneling/DirectRouting, and defense mechanism against synflooding attack - SYNPROXY.
-- [**1460**星][14d] [C] [ufrisk/pcileech](https://github.com/ufrisk/pcileech) 直接内存访问(DMA:Direct Memory Access)攻击工具。通过 PCIe 硬件设备使用 DMA,直接读写目标系统的内存。目标系统不需要安装驱动。
-- [**1457**星][1y] [C++] [acaudwell/logstalgia](https://github.com/acaudwell/logstalgia) a visualization tool that replays or streams web server access logs as a retro arcade game simulation.
-- [**1456**星][27d] [Go] [neex/phuip-fpizdam](https://github.com/neex/phuip-fpizdam) Exploit for CVE-2019-11043
-- [**1450**星][1y] [Py] [d4vinci/cr3dov3r](https://github.com/d4vinci/cr3dov3r) Know the dangers of credential reuse attacks.
-- [**1448**星][6m] [Py] [enablesecurity/wafw00f](https://github.com/enablesecurity/wafw00f) 识别保护网站的WAF产品
-- [**1447**星][3m] [edoverflow/can-i-take-over-xyz](https://github.com/edoverflow/can-i-take-over-xyz) "Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.
-- [**1446**星][11d] [C++] [srslte/srslte](https://github.com/srslte/srslte) Open source SDR LTE software suite from Software Radio Systems (SRS)
-- [**1442**星][6m] [Py] [oros42/imsi-catcher](https://github.com/oros42/imsi-catcher) This program show you IMSI numbers of cellphones around you.
-- [**1441**星][19d] [C] [tianocore/edk2](https://github.com/tianocore/edk2) A modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications
-- [**1441**星][1m] [C] [ctcaer/hekate](https://github.com/ctcaer/hekate) Nintendo Switch Bootloader - CTCaer mod
-- [**1439**星][3y] [tiancode/learn-hacking](https://github.com/tiancode/learn-hacking) 开始学习Kali Linux 各种破解教程 渗透测试 逆向工程 HackThisSite挑战问题解答
-- [**1439**星][3y] [tiancode/learn-hacking](https://github.com/tiancode/learn-hacking) 开始学习Kali Linux 各种破解教程 渗透测试 逆向工程 HackThisSite挑战问题解答
-- [**1438**星][3m] [C++] [vaibhavpandeyvpz/apkstudio](https://github.com/vaibhavpandeyvpz/apkstudio) Open-source, cross platform Qt based IDE for reverse-engineering Android application packages.
-- [**1433**星][18d] [Go] [skydive-project/skydive](https://github.com/skydive-project/skydive) An open source real-time network topology and protocols analyzer
-- [**1433**星][1y] [TypeScript] [pedronauck/reworm](https://github.com/pedronauck/reworm)
-- [**1433**星][12d] [C++] [microsoft/seal](https://github.com/microsoft/seal) Microsoft SEAL is an easy-to-use and powerful homomorphic encryption library.
-- [**1430**星][7d] [Go] [google/gapid](https://github.com/google/gapid) Graphics API Debugger
-- [**1428**星][7d] [Py] [rocky/python-uncompyle6](https://github.com/rocky/python-uncompyle6) Python反编译器,跨平台
-- [**1427**星][6m] [C++] [x64dbg/scyllahide](https://github.com/x64dbg/scyllahide) Advanced usermode anti-anti-debugger
+- [**1508**星][2m] [Shell] [haugene/docker-transmission-openvpn](https://github.com/haugene/docker-transmission-openvpn) Docker container running Transmission torrent client with WebUI over an OpenVPN tunnel
+- [**1505**星][2y] [Py] [eldraco/domain_analyzer](https://github.com/eldraco/domain_analyzer) 通过查找所有能够查找的信息,来分析任意域名的安全性
+- [**1504**星][27d] [Py] [hannob/snallygaster](https://github.com/hannob/snallygaster) Python脚本, 扫描HTTP服务器"秘密文件"
+- [**1499**星][5d] [YARA] [cybermonitor/apt_cybercriminal_campagin_collections](https://github.com/cybermonitor/apt_cybercriminal_campagin_collections) APT & CyberCriminal Campaign Collection
+- [**1497**星][4m] [Py] [epinna/tplmap](https://github.com/epinna/tplmap) 代码注入和服务器端模板注入(Server-Side Template Injection)漏洞利用,若干沙箱逃逸技巧。
+- [**1489**星][5d] [Py] [ahupp/python-magic](https://github.com/ahupp/python-magic) A python wrapper for libmagic
+- [**1486**星][2y] [Kotlin] [gh0u1l5/wechatmagician](https://github.com/gh0u1l5/wechatmagician) WechatMagician is a Xposed module written in Kotlin, that allows you to completely control your Wechat.
+- [**1485**星][7m] [C++] [wangyu-/tinyfecvpn](https://github.com/wangyu-/tinyfecvpn) A VPN Designed for Lossy Links, with Build-in Forward Error Correction(FEC) Support. Improves your Network Quality on a High-latency Lossy Link.
+- [**1482**星][7d] [Py] [bitsadmin/wesng](https://github.com/bitsadmin/wesng) Windows Exploit Suggester - Next Generation
+- [**1481**星][2d] [C] [sleuthkit/sleuthkit](https://github.com/sleuthkit/sleuthkit) The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.
+- [**1480**星][1y] [C++] [f1xpl/openauto](https://github.com/f1xpl/openauto) AndroidAuto headunit emulator
+- [**1479**星][3d] [C] [ctcaer/hekate](https://github.com/ctcaer/hekate) Nintendo Switch Bootloader - CTCaer mod
+- [**1478**星][8d] [C] [iqiyi/xhook](https://github.com/iqiyi/xhook) a PLT (Procedure Linkage Table) hook library for Android native ELF
+- [**1477**星][2d] [Shell] [blackarch/blackarch](https://github.com/blackarch/blackarch) BlackArch Linux is an Arch Linux-based distribution for penetration testers and security researchers.
+- [**1476**星][2m] [C++] [jmpews/hookzz](https://github.com/jmpews/hookzz) a hook framework for arm/arm64/ios/android, and [dev] branch is being refactored.
+- [**1471**星][27d] [minimaxir/hacker-news-undocumented](https://github.com/minimaxir/hacker-news-undocumented) Some of the hidden norms about Hacker News not otherwise covered in the Guidelines and the FAQ.
+- [**1470**星][3y] [Py] [veil-framework/veil-evasion](https://github.com/Veil-Framework/Veil-Evasion) a tool designed to generate metasploit payloads that bypass common anti-virus solutions.
+- [**1470**星][2d] [Go] [google/keytransparency](https://github.com/google/keytransparency) A transparent and secure way to look up public keys.
+- [**1469**星][6y] [C] [alibaba/lvs](https://github.com/alibaba/lvs) A distribution of Linux Virtual Server with some advanced features. It introduces a new packet forwarding method - FULLNAT other than NAT/Tunneling/DirectRouting, and defense mechanism against synflooding attack - SYNPROXY.
+- [**1466**星][29d] [Go] [neex/phuip-fpizdam](https://github.com/neex/phuip-fpizdam) Exploit for CVE-2019-11043
+- [**1464**星][6m] [Py] [oros42/imsi-catcher](https://github.com/oros42/imsi-catcher) This program show you IMSI numbers of cellphones around you.
+- [**1463**星][7d] [C] [ufrisk/pcileech](https://github.com/ufrisk/pcileech) DMA攻击工具。通过 PCIe 硬件设备使用 DMA,直接读写目标系统的内存。目标系统不需要安装驱动。
+- [**1462**星][9d] [edoverflow/can-i-take-over-xyz](https://github.com/edoverflow/can-i-take-over-xyz) "Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.
+- [**1459**星][3d] [Py] [enablesecurity/wafw00f](https://github.com/enablesecurity/wafw00f) 识别保护网站的WAF产品
+- [**1458**星][1y] [C++] [acaudwell/logstalgia](https://github.com/acaudwell/logstalgia) a visualization tool that replays or streams web server access logs as a retro arcade game simulation.
+- [**1455**星][1y] [Py] [d4vinci/cr3dov3r](https://github.com/d4vinci/cr3dov3r) Know the dangers of credential reuse attacks.
+- [**1453**星][13d] [C++] [srslte/srslte](https://github.com/srslte/srslte) Open source SDR LTE software suite from Software Radio Systems (SRS)
+- [**1451**星][2d] [Py] [rocky/python-uncompyle6](https://github.com/rocky/python-uncompyle6) Python反编译器,跨平台
+- [**1447**星][3y] [tiancode/learn-hacking](https://github.com/tiancode/learn-hacking) 开始学习Kali Linux 各种破解教程 渗透测试 逆向工程 HackThisSite挑战问题解答
+- [**1447**星][3y] [tiancode/learn-hacking](https://github.com/tiancode/learn-hacking) 开始学习Kali Linux 各种破解教程 渗透测试 逆向工程 HackThisSite挑战问题解答
+- [**1447**星][2m] [Py] [neo23x0/loki](https://github.com/neo23x0/loki) Loki - Simple IOC and Incident Response Scanner
+- [**1446**星][5d] [C] [tianocore/edk2](https://github.com/tianocore/edk2) A modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications
+- [**1446**星][20d] [Go] [skydive-project/skydive](https://github.com/skydive-project/skydive) An open source real-time network topology and protocols analyzer
+- [**1446**星][14d] [C++] [microsoft/seal](https://github.com/microsoft/seal) Microsoft SEAL is an easy-to-use and powerful homomorphic encryption library.
+- [**1445**星][3m] [C++] [vaibhavpandeyvpz/apkstudio](https://github.com/vaibhavpandeyvpz/apkstudio) Open-source, cross platform Qt based IDE for reverse-engineering Android application packages.
+- [**1437**星][5d] [Go] [google/gapid](https://github.com/google/gapid) Graphics API Debugger
+- [**1436**星][20d] [Kotlin] [cypherpunkarmory/userland](https://github.com/cypherpunkarmory/userland) The easiest way to run a Linux distribution or application on Android
+- [**1433**星][11m] [C] [tpruvot/ccminer](https://github.com/tpruvot/ccminer) CUDA Open Source miner project, for most nvidia cards
+- [**1433**星][1y] [TS] [pedronauck/reworm](https://github.com/pedronauck/reworm)
+- [**1432**星][6m] [C++] [x64dbg/scyllahide](https://github.com/x64dbg/scyllahide) Advanced usermode anti-anti-debugger
+- [**1432**星][2m] [C] [feralinteractive/gamemode](https://github.com/feralinteractive/gamemode) Optimise Linux system performance on demand
+- [**1429**星][5y] [C++] [gdbinit/machoview](https://github.com/gdbinit/machoview) MachOView fork
+- [**1427**星][9d] [ObjC] [nabla-c0d3/ssl-kill-switch2](https://github.com/nabla-c0d3/ssl-kill-switch2) Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS and OS X Apps
+- [**1426**星][20d] [C++] [plasma-umass/coz](https://github.com/plasma-umass/coz) Finding Code that Counts with Causal Profiling
+- [**1426**星][4y] [C++] [aappleby/smhasher](https://github.com/aappleby/smhasher) Automatically exported from code.google.com/p/smhasher
- [**1425**星][3m] [Go] [google/stenographer](https://github.com/google/stenographer) Stenographer is a packet capture solution which aims to quickly spool all packets to disk, then provide simple, fast access to subsets of those packets. Discussion/announcements at stenographer@googlegroups.com
-- [**1423**星][8y] [Py] [moxie0/sslstrip](https://github.com/moxie0/sslstrip) A tool for exploiting Moxie Marlinspike's SSL "stripping" attack.
-- [**1423**星][18d] [Kotlin] [cypherpunkarmory/userland](https://github.com/cypherpunkarmory/userland) The easiest way to run a Linux distribution or application on Android
-- [**1422**星][2m] [C] [feralinteractive/gamemode](https://github.com/feralinteractive/gamemode) Optimise Linux system performance on demand
-- [**1421**星][3y] [mandatoryprogrammer/northkoreadnsleak](https://github.com/mandatoryprogrammer/northkoreadnsleak) Snapshot of North Korea's DNS data taken from zone transfers.
-- [**1421**星][4y] [C++] [aappleby/smhasher](https://github.com/aappleby/smhasher) Automatically exported from code.google.com/p/smhasher
-- [**1420**星][10m] [Java] [aslody/legend](https://github.com/aslody/legend) (Android)无需Root即可Hook Java方法的框架, 支持Dalvik和Art环境
-- [**1419**星][2m] [Py] [neo23x0/loki](https://github.com/neo23x0/loki) Loki - Simple IOC and Incident Response Scanner
-- [**1419**星][3y] [Py] [nathanlopez/stitch](https://github.com/nathanlopez/stitch) Python Remote Administration Tool (RAT)
-- [**1419**星][12d] [Go] [google/google-ctf](https://github.com/google/google-ctf) Google CTF
-- [**1419**星][5y] [C++] [gdbinit/machoview](https://github.com/gdbinit/machoview) MachOView fork
-- [**1417**星][1m] [Py] [xdavidhu/mitmap](https://github.com/xdavidhu/mitmap)
-- [**1417**星][5m] [PHP] [s4n7h0/xvwa](https://github.com/s4n7h0/xvwa) XVWA is a badly coded web application written in PHP/MySQL that helps security enthusiasts to learn application security.
-- [**1416**星][1m] [Go] [barnybug/cli53](https://github.com/barnybug/cli53) Command line tool for Amazon Route 53
-- [**1415**星][3y] [C] [antirez/dump1090](https://github.com/antirez/dump1090) Dump1090 is a simple Mode S decoder for RTLSDR devices
-- [**1413**星][7m] [Objective-C] [nabla-c0d3/ssl-kill-switch2](https://github.com/nabla-c0d3/ssl-kill-switch2) Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS and OS X Apps
-- [**1411**星][11d] [C] [ettercap/ettercap](https://github.com/ettercap/ettercap) Ettercap Project
-- [**1410**星][8d] [Go] [cosmos72/gomacro](https://github.com/cosmos72/gomacro) Interactive Go interpreter and debugger with REPL, Eval, generics and Lisp-like macros
-- [**1409**星][4m] [yadox666/the-hackers-hardware-toolkit](https://github.com/yadox666/the-hackers-hardware-toolkit) The best hacker's gadgets for Red Team pentesters and security researchers.
-- [**1408**星][22d] [Java] [chrisk44/hijacker](https://github.com/chrisk44/hijacker) Aircrack, Airodump, Aireplay, MDK3 and Reaver GUI Application for Android
-- [**1407**星][7d] [C] [namhyung/uftrace](https://github.com/namhyung/uftrace) Function (graph) tracer for user-space
-- [**1406**星][1m] [C++] [google/nsjail](https://github.com/google/nsjail) A light-weight process isolation tool, making use of Linux namespaces and seccomp-bpf syscall filters (with help of the kafel bpf language)
-- [**1402**星][5m] [gitguardian/apisecuritybestpractices](https://github.com/gitguardian/apisecuritybestpractices) Resources to help you keep secrets (API keys, database credentials, certificates, ...) out of source code and remediate the issue in case of a leaked API key. Made available by GitGuardian.
-- [**1402**星][7d] [C++] [eteran/edb-debugger](https://github.com/eteran/edb-debugger) edb is a cross platform AArch32/x86/x86-64 debugger.
+- [**1424**星][8y] [Py] [moxie0/sslstrip](https://github.com/moxie0/sslstrip) A tool for exploiting Moxie Marlinspike's SSL "stripping" attack.
+- [**1424**星][11m] [Java] [aslody/legend](https://github.com/aslody/legend) (Android)无需Root即可Hook Java方法的框架, 支持Dalvik和Art环境
+- [**1423**星][14d] [Go] [google/google-ctf](https://github.com/google/google-ctf) Google CTF
+- [**1422**星][3y] [Py] [nathanlopez/stitch](https://github.com/nathanlopez/stitch) Python Remote Administration Tool (RAT)
+- [**1422**星][3y] [mandatoryprogrammer/northkoreadnsleak](https://github.com/mandatoryprogrammer/northkoreadnsleak) Snapshot of North Korea's DNS data taken from zone transfers.
+- [**1419**星][1m] [Py] [xdavidhu/mitmap](https://github.com/xdavidhu/mitmap)
+- [**1419**星][3y] [C] [antirez/dump1090](https://github.com/antirez/dump1090) Dump1090 is a simple Mode S decoder for RTLSDR devices
+- [**1418**星][5m] [PHP] [s4n7h0/xvwa](https://github.com/s4n7h0/xvwa) XVWA is a badly coded web application written in PHP/MySQL that helps security enthusiasts to learn application security.
+- [**1417**星][4m] [yadox666/the-hackers-hardware-toolkit](https://github.com/yadox666/the-hackers-hardware-toolkit) 用于Red Team、渗透、安全研究的最佳硬件产品集合
+- [**1417**星][4d] [Rust] [shadowsocks/shadowsocks-rust](https://github.com/shadowsocks/shadowsocks-rust) A Rust port of shadowsocks
+- [**1417**星][1m] [Go] [barnybug/cli53](https://github.com/barnybug/cli53) Command line tool for Amazon Route 53
+- [**1415**星][7d] [C] [z3apa3a/3proxy](https://github.com/z3apa3a/3proxy) 3proxy - tiny free proxy server
+- [**1414**星][8d] [C] [ettercap/ettercap](https://github.com/ettercap/ettercap) Ettercap Project
+- [**1413**星][24d] [XSLT] [lolbas-project/lolbas](https://github.com/lolbas-project/lolbas) Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
+- [**1413**星][24d] [Java] [chrisk44/hijacker](https://github.com/chrisk44/hijacker) Aircrack, Airodump, Aireplay, MDK3 and Reaver GUI Application for Android
+- [**1412**星][9d] [C] [namhyung/uftrace](https://github.com/namhyung/uftrace) Function (graph) tracer for user-space
+- [**1412**星][5m] [gitguardian/apisecuritybestpractices](https://github.com/gitguardian/apisecuritybestpractices) Resources to help you keep secrets (API keys, database credentials, certificates, ...) out of source code and remediate the issue in case of a leaked API key. Made available by GitGuardian.
+- [**1411**星][7d] [C++] [eteran/edb-debugger](https://github.com/eteran/edb-debugger) edb is a cross platform AArch32/x86/x86-64 debugger.
+- [**1411**星][3d] [Go] [cosmos72/gomacro](https://github.com/cosmos72/gomacro) Interactive Go interpreter and debugger with REPL, Eval, generics and Lisp-like macros
+- [**1410**星][3m] [Go] [hellogcc/100-gdb-tips](https://github.com/hellogcc/100-gdb-tips) A collection of gdb tips. 100 maybe just mean many here.
+- [**1408**星][3m] [HTML] [owasp/top10](https://github.com/owasp/top10) Official OWASP Top 10 Document Repository
+- [**1407**星][4d] [C++] [google/nsjail](https://github.com/google/nsjail) A light-weight process isolation tool, making use of Linux namespaces and seccomp-bpf syscall filters (with help of the kafel bpf language)
+- [**1405**星][1y] [HTML] [gwuhaolin/blog](https://github.com/gwuhaolin/blog) 浩麟的技术博客
+- [**1405**星][1y] [C++] [dotnet/llilc](https://github.com/dotnet/llilc) This repo contains LLILC, an LLVM based compiler for .NET Core. It includes a set of cross-platform .NET code generation tools that enables compilation of MSIL byte code to LLVM supported platforms.
+- [**1404**星][7d] [Java] [chinashiyu/gfw.press](https://github.com/chinashiyu/gfw.press) GFW.Press新一代军用级高强度加密抗干扰网络数据高速传输软件
+- [**1403**星][2d] [Go] [crazy-max/windowsspyblocker](https://github.com/crazy-max/windowsspyblocker)
- [**1401**星][9m] [JS] [anttiviljami/browser-autofill-phishing](https://github.com/anttiviljami/browser-autofill-phishing) A simple demo of phishing by abusing the browser autofill feature
-- [**1400**星][3m] [HTML] [owasp/top10](https://github.com/owasp/top10) Official OWASP Top 10 Document Repository
-- [**1400**星][1y] [C++] [dotnet/llilc](https://github.com/dotnet/llilc) This repo contains LLILC, an LLVM based compiler for .NET Core. It includes a set of cross-platform .NET code generation tools that enables compilation of MSIL byte code to LLVM supported platforms.
-- [**1399**星][25d] [Go] [crazy-max/windowsspyblocker](https://github.com/crazy-max/windowsspyblocker)
-- [**1399**星][7d] [Java] [chinashiyu/gfw.press](https://github.com/chinashiyu/gfw.press) GFW.Press新一代军用级高强度加密抗干扰网络数据高速传输软件
-- [**1397**星][7d] [Rust] [shadowsocks/shadowsocks-rust](https://github.com/shadowsocks/shadowsocks-rust) A Rust port of shadowsocks
-- [**1395**星][1y] [Go] [filosottile/whosthere](https://github.com/filosottile/whosthere) A ssh server that knows who you are
-- [**1393**星][25d] [C] [quiet/org.quietmodem.quiet](https://github.com/quiet/org.quietmodem.quiet) Quiet for Android - TCP over sound
-- [**1393**星][3y] [PowerShell] [putterpanda/mimikittenz](https://github.com/putterpanda/mimikittenz) A post-exploitation powershell tool for extracting juicy info from memory.
-- [**1391**星][22d] [XSLT] [lolbas-project/lolbas](https://github.com/lolbas-project/lolbas) Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
-- [**1388**星][14d] [Swift] [johnno1962/injectioniii](https://github.com/johnno1962/injectioniii) Re-write of Injection for Xcode in (mostly) Swift4
-- [**1387**星][1y] [HTML] [gwuhaolin/blog](https://github.com/gwuhaolin/blog) 浩麟的技术博客
-- [**1387**星][2y] [JS] [sqren/fb-sleep-stats](https://github.com/sqren/fb-sleep-stats) 使用Facebook追踪用户的睡觉习惯
-- [**1386**星][18d] [C++] [plasma-umass/coz](https://github.com/plasma-umass/coz) Finding Code that Counts with Causal Profiling
-- [**1384**星][4y] [PHP] [johntroony/php-webshells](https://github.com/johntroony/php-webshells) Common php webshells. Do not host the file(s) on your server!
-- [**1383**星][14d] [C++] [jonathansalwan/triton](https://github.com/jonathansalwan/triton) Triton is a Dynamic Binary Analysis (DBA) framework. It provides internal components like a Dynamic Symbolic Execution (DSE) engine, a dynamic taint engine, AST representations of the x86, x86-64 and AArch64 Instructions Set Architecture (ISA), SMT simplification passes, an SMT solver interface and, the last but not least, Python bindings.
-- [**1383**星][8d] [Py] [ekultek/whatwaf](https://github.com/ekultek/whatwaf) Detect and bypass web application firewalls and protection systems
-- [**1381**星][11m] [Py] [eth0izzle/bucket-stream](https://github.com/eth0izzle/bucket-stream) 通过certstream 监控多种证书 transparency 日志, 进而查找有趣的 Amazon S3 Buckets
-- [**1380**星][2m] [C] [z3apa3a/3proxy](https://github.com/z3apa3a/3proxy) 3proxy - tiny free proxy server
-- [**1380**星][11d] [Shell] [drduh/pwd.sh](https://github.com/drduh/pwd.sh) GPG symmetric password manager
-- [**1377**星][11d] [OCaml] [mirage/mirage](https://github.com/mirage/mirage) MirageOS is a library operating system that constructs unikernels
-- [**1376**星][6m] [Py] [almandin/fuxploider](https://github.com/almandin/fuxploider) 文件上传漏洞扫描和利用工具
-- [**1375**星][10m] [JS] [intika/librefox](https://github.com/intika/librefox) Firefox with privacy enhancements
+- [**1399**星][16d] [Swift] [johnno1962/injectioniii](https://github.com/johnno1962/injectioniii) Re-write of Injection for Xcode in (mostly) Swift4
+- [**1397**星][1y] [Go] [filosottile/whosthere](https://github.com/filosottile/whosthere) A ssh server that knows who you are
+- [**1396**星][3y] [PS] [putterpanda/mimikittenz](https://github.com/putterpanda/mimikittenz) A post-exploitation powershell tool for extracting juicy info from memory.
+- [**1395**星][27d] [C] [quiet/org.quietmodem.quiet](https://github.com/quiet/org.quietmodem.quiet) Quiet for Android - TCP over sound
+- [**1393**星][4d] [atarity/deploy-your-own-saas](https://github.com/atarity/deploy-your-own-saas) List of "only yours" cloud services for everyday needs
+- [**1393**星][9d] [Py] [ekultek/whatwaf](https://github.com/ekultek/whatwaf) 检测并绕过WAF和保护系统
+- [**1392**星][16d] [C++] [jonathansalwan/triton](https://github.com/jonathansalwan/triton) Triton is a Dynamic Binary Analysis (DBA) framework. It provides internal components like a Dynamic Symbolic Execution (DSE) engine, a dynamic taint engine, AST representations of the x86, x86-64 and AArch64 Instructions Set Architecture (ISA), SMT simplification passes, an SMT solver interface and, the last but not least, Python bindings.
+- [**1388**星][4y] [PHP] [johntroony/php-webshells](https://github.com/johntroony/php-webshells) Common php webshells. Do not host the file(s) on your server!
+- [**1387**星][11m] [Py] [eth0izzle/bucket-stream](https://github.com/eth0izzle/bucket-stream) 通过certstream 监控多种证书 transparency 日志, 进而查找有趣的 Amazon S3 Buckets
+- [**1386**星][2y] [JS] [sqren/fb-sleep-stats](https://github.com/sqren/fb-sleep-stats) 使用Facebook追踪用户的睡觉习惯
+- [**1384**星][5d] [JS] [ix64/unlock-music](https://github.com/ix64/unlock-music) Unlock encrypted music file in browser. 在浏览器中解锁加密的音乐文件。
+- [**1381**星][6m] [Py] [almandin/fuxploider](https://github.com/almandin/fuxploider) 文件上传漏洞扫描和利用工具
+- [**1380**星][15d] [C] [dynamorio/drmemory](https://github.com/dynamorio/drmemory) Memory Debugger for Windows, Linux, Mac, and Android
+- [**1380**星][13d] [Shell] [drduh/pwd.sh](https://github.com/drduh/pwd.sh) GPG symmetric password manager
+- [**1378**星][13d] [OCaml] [mirage/mirage](https://github.com/mirage/mirage) MirageOS is a library operating system that constructs unikernels
+- [**1378**星][2d] [JS] [lockfale/osint-framework](https://github.com/lockfale/osint-framework) OSINT Framework
+- [**1375**星][15d] [Go] [unrolled/secure](https://github.com/unrolled/secure) HTTP middleware for Go that facilitates some quick security wins.
+- [**1375**星][11m] [JS] [intika/librefox](https://github.com/intika/librefox) Firefox with privacy enhancements
- [**1374**星][4y] [C++] [valvesoftware/vogl](https://github.com/valvesoftware/vogl) OpenGL capture / playback debugger.
-- [**1373**星][13d] [C] [dynamorio/drmemory](https://github.com/dynamorio/drmemory) Memory Debugger for Windows, Linux, Mac, and Android
-- [**1365**星][9m] [PowerShell] [danielbohannon/invoke-obfuscation](https://github.com/danielbohannon/invoke-obfuscation) PowerShell Obfuscator
-- [**1364**星][5m] [Py] [s0md3v/striker](https://github.com/s0md3v/Striker) Striker is an offensive information and vulnerability scanner.
-- [**1363**星][29d] [C] [zyantific/zydis](https://github.com/zyantific/zydis) 快速的轻量级x86/x86-64 反汇编库
-- [**1361**星][3y] [C++] [aslody/turbodex](https://github.com/aslody/turbodex) 在内存中快速加载dex
-- [**1360**星][6m] [Py] [vulnerscom/getsploit](https://github.com/vulnerscom/getsploit) Command line utility for searching and downloading exploits
-- [**1360**星][2m] [Py] [fireeye/flare-floss](https://github.com/fireeye/flare-floss) 自动从恶意代码中提取反混淆后的字符串
+- [**1373**星][5m] [Py] [s0md3v/striker](https://github.com/s0md3v/Striker) Striker is an offensive information and vulnerability scanner.
+- [**1373**星][9m] [PS] [danielbohannon/invoke-obfuscation](https://github.com/danielbohannon/invoke-obfuscation) PowerShell Obfuscator
+- [**1371**星][1m] [C] [zyantific/zydis](https://github.com/zyantific/zydis) 快速的轻量级x86/x86-64 反汇编库
+- [**1365**星][9d] [Go] [cortesi/modd](https://github.com/cortesi/modd) A flexible developer tool that runs processes and responds to filesystem changes
+- [**1363**星][2m] [Py] [fireeye/flare-floss](https://github.com/fireeye/flare-floss) 自动从恶意代码中提取反混淆后的字符串
- [floss](https://github.com/fireeye/flare-floss/tree/master/floss)
- [IDA插件](https://github.com/fireeye/flare-floss/blob/master/scripts/idaplugin.py)
-- [**1358**星][7d] [Go] [cortesi/modd](https://github.com/cortesi/modd) A flexible developer tool that runs processes and responds to filesystem changes
-- [**1357**星][24d] [JS] [lockfale/osint-framework](https://github.com/lockfale/osint-framework) OSINT Framework
-- [**1355**星][6m] [C++] [phpv8/v8js](https://github.com/phpv8/v8js) V8 Javascript Engine for PHP — This PHP extension embeds the Google V8 Javascript Engine
-- [**1355**星][1m] [grrrdog/java-deserialization-cheat-sheet](https://github.com/grrrdog/java-deserialization-cheat-sheet) The cheat sheet about Java Deserialization vulnerabilities
-- [**1355**星][2m] [C] [googleprojectzero/winafl](https://github.com/googleprojectzero/winafl) A fork of AFL for fuzzing Windows binaries
-- [**1348**星][23d] [C] [x64dbg/x64dbgpy](https://github.com/x64dbg/x64dbgpy) Automating x64dbg using Python, Snapshots:
-- [**1348**星][4m] [C] [taviso/ctftool](https://github.com/taviso/ctftool) Interactive CTF Exploration Tool
-- [**1348**星][3y] [Py] [joaomatosf/jexboss](https://github.com/joaomatosf/jexboss) Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool
-- [**1347**星][13d] [Go] [unrolled/secure](https://github.com/unrolled/secure) HTTP middleware for Go that facilitates some quick security wins.
-- [**1347**星][3m] [C++] [raspberrypi/tools](https://github.com/raspberrypi/tools)
+- [**1363**星][3y] [C++] [aslody/turbodex](https://github.com/aslody/turbodex) 在内存中快速加载dex
+- [**1362**星][1m] [grrrdog/java-deserialization-cheat-sheet](https://github.com/grrrdog/java-deserialization-cheat-sheet) The cheat sheet about Java Deserialization vulnerabilities
+- [**1361**星][7m] [Py] [vulnerscom/getsploit](https://github.com/vulnerscom/getsploit) Command line utility for searching and downloading exploits
+- [**1361**星][6m] [C++] [phpv8/v8js](https://github.com/phpv8/v8js) V8 Javascript Engine for PHP — This PHP extension embeds the Google V8 Javascript Engine
+- [**1359**星][2m] [C] [googleprojectzero/winafl](https://github.com/googleprojectzero/winafl) A fork of AFL for fuzzing Windows binaries
+- [**1355**星][10m] [HTML] [thelinuxchoice/blackeye](https://github.com/thelinuxchoice/blackeye) The most complete Phishing Tool, with 32 templates +1 customizable
+- [**1354**星][2d] [Py] [mitre/caldera](https://github.com/mitre/caldera) 自动化 adversary emulation 系统
+- [**1352**星][3y] [Py] [joaomatosf/jexboss](https://github.com/joaomatosf/jexboss) Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool
+- [**1351**星][3m] [C++] [raspberrypi/tools](https://github.com/raspberrypi/tools)
+- [**1350**星][4m] [C] [taviso/ctftool](https://github.com/taviso/ctftool) Interactive CTF Exploration Tool
+- [**1349**星][3y] [Py] [ddevault/evilpass](https://github.com/ddevault/evilpass) Slightly evil password strength checker
+- [**1349**星][19d] [C++] [rikkaapps/riru](https://github.com/rikkaapps/riru) Inject zygote process by replace libmemtrack
+- [**1349**星][5m] [Py] [lijiejie/githack](https://github.com/lijiejie/githack) git泄露利用脚本,通过泄露的.git文件夹下的文件,重建还原工程源代码
+- [**1348**星][10m] [rebeyond/behinder](https://github.com/rebeyond/behinder) “冰蝎”动态二进制加密网站管理客户端
- [**1347**星][11m] [Rust] [das-labor/panopticon](https://github.com/das-labor/panopticon) A libre cross-platform disassembler.
-- [**1346**星][3y] [Py] [ddevault/evilpass](https://github.com/ddevault/evilpass) Slightly evil password strength checker
- [**1346**星][2y] [HTML] [daxeel/blockshell](https://github.com/daxeel/blockshell) 用于学习区块链技术概念的命令行工具, 例如 likechaining, mining,proof of work 等
-- [**1344**星][10m] [HTML] [thelinuxchoice/blackeye](https://github.com/thelinuxchoice/blackeye) The most complete Phishing Tool, with 32 templates +1 customizable
-- [**1343**星][5m] [Py] [lijiejie/githack](https://github.com/lijiejie/githack) git泄露利用脚本,通过泄露的.git文件夹下的文件,重建还原工程源代码
-- [**1343**星][3m] [Go] [hellogcc/100-gdb-tips](https://github.com/hellogcc/100-gdb-tips) A collection of gdb tips. 100 maybe just mean many here.
-- [**1342**星][7d] [Py] [mitre/caldera](https://github.com/mitre/caldera) 自动化 adversary emulation 系统
-- [**1341**星][10d] [Go] [securitywithoutborders/hardentools](https://github.com/securitywithoutborders/hardentools) 禁用许多有危险的Windows功能
-- [**1341**星][2m] [Go] [davrodpin/mole](https://github.com/davrodpin/mole) cli app to create ssh tunnels
-- [**1339**星][21d] [Py] [s0md3v/arjun](https://github.com/s0md3v/Arjun) HTTP parameter discovery suite.
-- [**1339**星][12m] [XSLT] [api0cradle/lolbas](https://github.com/api0cradle/lolbas) Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
-- [**1338**星][21d] [Go] [microcosm-cc/bluemonday](https://github.com/microcosm-cc/bluemonday) a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS
-- [**1338**星][7m] [Py] [feeicn/gsil](https://github.com/feeicn/gsil) GitHub敏感信息泄露监控,几乎实时监控,发送警告
-- [**1337**星][1y] [Py] [carmaa/inception](https://github.com/carmaa/inception) 利用基于PCI的DMA实现物理内存的操纵与Hacking,可以攻击FireWire,Thunderbolt,ExpressCard,PC Card和任何其他PCI / PCIe硬件接口
-- [**1336**星][6y] [Perl] [intelisecurelabs/linux_exploit_suggester](https://github.com/InteliSecureLabs/Linux_Exploit_Suggester) Linux Exploit Suggester; based on operating system release number
-- [**1336**星][3m] [Py] [maratyszcza/peachpy](https://github.com/maratyszcza/peachpy) x86-64 assembler embedded in Python
-- [**1333**星][17d] [C++] [rikkaapps/riru](https://github.com/rikkaapps/riru) Inject zygote process by replace libmemtrack
-- [**1331**星][2m] [C++] [mfontanini/libtins](https://github.com/mfontanini/libtins) High-level, multiplatform C++ network packet sniffing and crafting library.
-- [**1331**星][1y] [C] [gamelinux/passivedns](https://github.com/gamelinux/passivedns) A network sniffer that logs all DNS server replies for use in a passive DNS setup
-- [**1329**星][1m] [CSS] [undeadsec/socialfish](https://github.com/undeadsec/socialfish) 网络钓鱼培训与信息收集
-- [**1329**星][10m] [rebeyond/behinder](https://github.com/rebeyond/behinder) “冰蝎”动态二进制加密网站管理客户端
-- [**1329**星][1y] [kirikira/vtemplate](https://github.com/kirikira/vtemplate) v2ray的模板们
-- [**1328**星][1y] [C] [madeye/proxydroid](https://github.com/madeye/proxydroid) Global Proxy for Android
-- [**1326**星][11d] [C++] [purplei2p/i2pd](https://github.com/purplei2p/i2pd) a full-featured C++ implementation of I2P client
-- [**1324**星][2y] [CoffeeScript] [atmos/camo](https://github.com/atmos/camo) all about making insecure assets look secure
-- [**1323**星][1y] [Py] [marten4n6/evilosx](https://github.com/marten4n6/evilosx) An evil RAT (Remote Administration Tool) for macOS / OS X.
-- [**1322**星][3m] [HTML] [thehive-project/thehive](https://github.com/thehive-project/thehive) a Scalable, Open Source and Free Security Incident Response Platform
-- [**1321**星][6m] [Go] [ssllabs/ssllabs-scan](https://github.com/ssllabs/ssllabs-scan) A command-line reference-implementation client for SSL Labs APIs, designed for automated and/or bulk testing.
-- [**1321**星][1y] [C++] [rehints/hexrayscodexplorer](https://github.com/rehints/hexrayscodexplorer) 反编译插件, 多功能
+- [**1345**星][25d] [C] [x64dbg/x64dbgpy](https://github.com/x64dbg/x64dbgpy) Automating x64dbg using Python, Snapshots:
+- [**1345**星][12d] [Go] [securitywithoutborders/hardentools](https://github.com/securitywithoutborders/hardentools) 禁用许多有危险的Windows功能
+- [**1344**星][23d] [Go] [microcosm-cc/bluemonday](https://github.com/microcosm-cc/bluemonday) a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS
+- [**1343**星][23d] [Py] [s0md3v/arjun](https://github.com/s0md3v/Arjun) HTTP parameter discovery suite.
+- [**1342**星][12m] [C] [luke-jr/bfgminer](https://github.com/luke-jr/bfgminer) Modular ASIC/FPGA miner written in C, featuring overclocking, monitoring, fan speed control and remote interface capabilities.
+- [**1342**星][2m] [Go] [davrodpin/mole](https://github.com/davrodpin/mole) cli app to create ssh tunnels
+- [**1342**星][1y] [Py] [carmaa/inception](https://github.com/carmaa/inception) 利用基于PCI的DMA实现物理内存的操纵与Hacking,可以攻击FireWire,Thunderbolt,ExpressCard,PC Card和任何其他PCI / PCIe硬件接口
+- [**1341**星][3m] [Py] [maratyszcza/peachpy](https://github.com/maratyszcza/peachpy) x86-64 assembler embedded in Python
+- [**1341**星][1y] [XSLT] [api0cradle/lolbas](https://github.com/api0cradle/lolbas) Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
+- [**1340**星][1y] [kirikira/vtemplate](https://github.com/kirikira/vtemplate) v2ray的模板们
+- [**1340**星][7m] [Py] [feeicn/gsil](https://github.com/feeicn/gsil) GitHub敏感信息泄露监控,几乎实时监控,发送警告
+- [**1339**星][6y] [Perl] [intelisecurelabs/linux_exploit_suggester](https://github.com/InteliSecureLabs/Linux_Exploit_Suggester) Linux Exploit Suggester; based on operating system release number
+- [**1338**星][1m] [CSS] [undeadsec/socialfish](https://github.com/undeadsec/socialfish) 网络钓鱼培训与信息收集
+- [**1337**星][1y] [C] [madeye/proxydroid](https://github.com/madeye/proxydroid) Global Proxy for Android
+- [**1336**星][3m] [HTML] [thehive-project/thehive](https://github.com/thehive-project/thehive) a Scalable, Open Source and Free Security Incident Response Platform
+- [**1335**星][2m] [C++] [mfontanini/libtins](https://github.com/mfontanini/libtins) High-level, multiplatform C++ network packet sniffing and crafting library.
+- [**1334**星][4y] [mengskysama/shadowsocks](https://github.com/mengskysama/shadowsocks) A fast tunnel proxy that helps you bypass firewalls
+- [**1333**星][1y] [C] [gamelinux/passivedns](https://github.com/gamelinux/passivedns) A network sniffer that logs all DNS server replies for use in a passive DNS setup
+- [**1328**星][2d] [C++] [purplei2p/i2pd](https://github.com/purplei2p/i2pd) a full-featured C++ implementation of I2P client
+- [**1328**星][1y] [Py] [marten4n6/evilosx](https://github.com/marten4n6/evilosx) An evil RAT (Remote Administration Tool) for macOS / OS X.
+- [**1328**星][2y] [CoffeeScript] [atmos/camo](https://github.com/atmos/camo) all about making insecure assets look secure
+- [**1327**星][7m] [Go] [ssllabs/ssllabs-scan](https://github.com/ssllabs/ssllabs-scan) A command-line reference-implementation client for SSL Labs APIs, designed for automated and/or bulk testing.
+- [**1327**星][3d] [C] [intel/haxm](https://github.com/intel/haxm) Intel 开源的英特尔硬件加速执行管理器,通过硬件辅助的虚拟化引擎,加速 Windows/macOS 主机上的 IA emulation((x86/ x86_64) )
+- [**1327**星][10m] [C#] [cenmrev/v2rayw](https://github.com/cenmrev/v2rayw) GUI for v2ray-core on Windows
+- [**1325**星][21d] [C] [dtag-dev-sec/tpotce](https://github.com/dtag-dev-sec/tpotce) 创建多蜜罐平台T-Pot ISO 镜像
+- [**1324**星][1y] [C++] [rehints/hexrayscodexplorer](https://github.com/rehints/hexrayscodexplorer) 反编译插件, 多功能
查看详情
@@ -932,97 +1003,26 @@
-- [**1318**星][2m] [jaredthecoder/awesome-vehicle-security](https://github.com/jaredthecoder/awesome-vehicle-security)
-- [**1315**星][1y] [mortenoir1/virtualbox_e1000_0day](https://github.com/mortenoir1/virtualbox_e1000_0day) VirtualBox E1000 Guest-to-Host Escape
-- [**1312**星][12d] [C] [oisf/suricata](https://github.com/OISF/suricata) a network IDS, IPS and NSM engine
-- [**1311**星][2y] [Py] [worawit/ms17-010](https://github.com/worawit/ms17-010) MS17-010
-- [**1311**星][18d] [C] [intel/haxm](https://github.com/intel/haxm) Intel 开源的英特尔硬件加速执行管理器,通过硬件辅助的虚拟化引擎,加速 Windows/macOS 主机上的 IA emulation((x86/ x86_64) )
-- [**1310**星][3m] [PowerShell] [peewpw/invoke-psimage](https://github.com/peewpw/invoke-psimage) Encodes a PowerShell script in the pixels of a PNG file and generates a oneliner to execute
-- [**1310**星][10m] [C] [fancycode/memorymodule](https://github.com/fancycode/memorymodule) Library to load a DLL from memory.
-- [**1309**星][10m] [C#] [cenmrev/v2rayw](https://github.com/cenmrev/v2rayw) GUI for v2ray-core on Windows
-- [**1305**星][12m] [Py] [xyntax/poc-t](https://github.com/xyntax/poc-t) 脚本调用框架,用于渗透测试中 采集|爬虫|爆破|批量PoC 等需要并发的任务
-- [**1305**星][3m] [Lua] [scipag/vulscan](https://github.com/scipag/vulscan) Nmap 模块,将 Nmap 转化为高级漏洞扫描器
-- [**1305**星][18d] [C] [dtag-dev-sec/tpotce](https://github.com/dtag-dev-sec/tpotce) 创建多蜜罐平台T-Pot ISO 镜像
-- [**1303**星][17d] [Py] [consensys/mythril](https://github.com/ConsenSys/mythril) Security analysis tool for EVM bytecode. Supports smart contracts built for Ethereum, Quorum, Vechain, Roostock, Tron and other EVM-compatible blockchains.
-- [**1303**星][15d] [nikitavoloboev/privacy-respecting](https://github.com/nikitavoloboev/privacy-respecting) PrivacyRespecting 服务和软件列表
+- [**1323**星][2d] [Go] [xiaoming2028/freenet](https://github.com/xiaoming2028/freenet) 科学上网/梯子/自由上网/翻墙 SS/SSR/V2Ray/Brook 搭建教程
+- [**1323**星][2m] [jaredthecoder/awesome-vehicle-security](https://github.com/jaredthecoder/awesome-vehicle-security)
+- [**1322**星][3d] [C] [oisf/suricata](https://github.com/OISF/suricata) a network IDS, IPS and NSM engine
+- [**1319**星][2y] [Py] [worawit/ms17-010](https://github.com/worawit/ms17-010) MS17-010
+- [**1317**星][1y] [mortenoir1/virtualbox_e1000_0day](https://github.com/mortenoir1/virtualbox_e1000_0day) VirtualBox E1000 Guest-to-Host Escape
+- [**1316**星][3m] [PS] [peewpw/invoke-psimage](https://github.com/peewpw/invoke-psimage) Encodes a PowerShell script in the pixels of a PNG file and generates a oneliner to execute
+- [**1314**星][10m] [C] [fancycode/memorymodule](https://github.com/fancycode/memorymodule) Library to load a DLL from memory.
+- [**1311**星][1m] [C++] [shadowsocks/libqtshadowsocks](https://github.com/shadowsocks/libqtshadowsocks) A lightweight and ultra-fast shadowsocks library written in C++14 with Qt framework
+- [**1309**星][12m] [Py] [xyntax/poc-t](https://github.com/xyntax/poc-t) 脚本调用框架,用于渗透测试中 采集|爬虫|爆破|批量PoC 等需要并发的任务
+- [**1309**星][3m] [Lua] [scipag/vulscan](https://github.com/scipag/vulscan) Nmap 模块,将 Nmap 转化为高级漏洞扫描器
+- [**1307**星][19d] [Py] [consensys/mythril](https://github.com/ConsenSys/mythril) Security analysis tool for EVM bytecode. Supports smart contracts built for Ethereum, Quorum, Vechain, Roostock, Tron and other EVM-compatible blockchains.
+- [**1307**星][27d] [C] [boywhp/fcn](https://github.com/boywhp/fcn) free connect your private network from anywhere
+- [**1304**星][17d] [nikitavoloboev/privacy-respecting](https://github.com/nikitavoloboev/privacy-respecting) PrivacyRespecting 服务和软件列表
+- [**1304**星][7d] [C] [cisco-talos/pyrebox](https://github.com/cisco-talos/pyrebox) 逆向沙箱,基于QEMU,Python Scriptable
- [**1303**星][4m] [C++] [klee/klee](https://github.com/klee/klee) 基于 LLVM 的 symbolic 虚拟机
-- [**1300**星][18d] [C] [cisco-talos/pyrebox](https://github.com/cisco-talos/pyrebox) 逆向沙箱,基于QEMU,Python Scriptable
-- [**1297**星][1y] [Go] [evilsocket/xray](https://github.com/evilsocket/xray) 自动化执行一些信息收集、网络映射的初始化工作
-- [**1293**星][1y] [Shell] [dana-at-cp/backdoor-apk](https://github.com/dana-at-cp/backdoor-apk) backdoor-apk is a shell script that simplifies the process of adding a backdoor to any Android APK file. Users of this shell script should have working knowledge of Linux, Bash, Metasploit, Apktool, the Android SDK, smali, etc. This shell script is provided as-is without warranty of any kind and is intended for educational purposes only.
-- [**1291**星][27d] [Java] [android-hacker/exposed](https://github.com/android-hacker/exposed) A library to use Xposed without root or recovery(or modify system image etc..).
-- [**1290**星][2y] [Go] [malfunkt/hyperfox](https://github.com/malfunkt/hyperfox) 在局域网上代理和记录 HTTP 和 HTTPs 通信
-- [**1289**星][2m] [C] [traviscross/mtr](https://github.com/traviscross/mtr) Official repository for mtr, a network diagnostic tool
-- [**1288**星][4y] [C++] [microsoft/microsoft-pdb](https://github.com/microsoft/microsoft-pdb) Microsoft提供的有关PDB格式的信息
-- [**1287**星][19d] [JS] [icymind/vrouter](https://github.com/icymind/vrouter) 一个基于 VirtualBox 和 openwrt 构建的项目, 旨在实现 macOS / Windows 平台的透明代理.
-- [**1284**星][2m] [Py] [virtualabs/btlejack](https://github.com/virtualabs/btlejack) Bluetooth Low Energy Swiss-army knife
-- [**1284**星][5m] [JS] [feross/spoof](https://github.com/feross/spoof) Easily spoof your MAC address in macOS, Windows, & Linux!
-- [**1278**星][9m] [michalmalik/linux-re-101](https://github.com/michalmalik/linux-re-101) Linux逆向资源收集
-- [**1278**星][4y] [Py] [elvanderb/tcp-32764](https://github.com/elvanderb/tcp-32764) some codes and notes about the backdoor listening on TCP-32764 in linksys WAG200G.
-- [**1277**星][10d] [PHP] [friendsofphp/security-advisories](https://github.com/friendsofphp/security-advisories) A database of PHP security advisories
-- [**1277**星][27d] [Go] [dreadl0ck/netcap](https://github.com/dreadl0ck/netcap) A framework for secure and scalable network traffic analysis -
-- [**1275**星][24d] [Py] [viper-framework/viper](https://github.com/viper-framework/viper) Binary analysis and management framework
-- [**1273**星][1m] [Py] [pyauth/pyotp](https://github.com/pyauth/pyotp) Python One-Time Password Library
-- [**1273**星][2m] [Py] [codingo/reconnoitre](https://github.com/codingo/reconnoitre) A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.
-- [**1272**星][1y] [JS] [sakurity/securelogin](https://github.com/sakurity/securelogin) 针对网站和App的去中心化的认证协议
-- [**1270**星][2m] [C] [seemoo-lab/nexmon](https://github.com/seemoo-lab/nexmon) The C-based Firmware Patching Framework for Broadcom/Cypress WiFi Chips that enables Monitor Mode, Frame Injection and much more
-- [**1270**星][1y] [PowerShell] [dafthack/mailsniper](https://github.com/dafthack/mailsniper) 在Microsoft Exchange环境中搜索邮件中包含的指定内容:密码、insider intel、网络架构信息等
-- [**1270**星][1m] [Py] [bethgelab/foolbox](https://github.com/bethgelab/foolbox) Python toolbox to create adversarial examples that fool neural networks in PyTorch, TensorFlow, Keras, …
-- [**1268**星][2m] [Java] [googlearchive/android-runtimepermissions](https://github.com/googlearchive/android-RuntimePermissions) This sample has been deprecated/archived. Check this repo for related samples:
-- [**1268**星][1y] [Py] [ethereum/pyethapp](https://github.com/ethereum/pyethapp)
-- [**1266**星][2m] [Py] [ganapati/rsactftool](https://github.com/ganapati/rsactftool) RSA攻击工具,主要用于CTF,从弱公钥和/或uncipher数据中回复私钥
-- [**1265**星][9d] [Shell] [firehol/blocklist-ipsets](https://github.com/firehol/blocklist-ipsets) ipsets dynamically updated with firehol's update-ipsets.sh script
-- [**1265**星][9d] [Shell] [firehol/blocklist-ipsets](https://github.com/firehol/blocklist-ipsets) ipsets dynamically updated with firehol's update-ipsets.sh script
-- [**1262**星][3m] [Go] [solo-io/squash](https://github.com/solo-io/squash) The debugger for microservices
-- [**1261**星][3m] [Py] [alessandroz/beroot](https://github.com/alessandroz/beroot) Privilege Escalation Project - Windows / Linux / Mac
-- [**1259**星][11m] [Py] [unapibageek/ctfr](https://github.com/unapibageek/ctfr) Abusing Certificate Transparency logs for getting HTTPS websites subdomains.
-- [**1255**星][7m] [PHP] [ganlvtech/down_52pojie_cn](https://github.com/ganlvtech/down_52pojie_cn) A single page file explorer that can be hosted on static website. 吾爱破解论坛 爱盘
-- [**1255**星][13d] [C] [aircrack-ng/aircrack-ng](https://github.com/aircrack-ng/aircrack-ng) WiFi security auditing tools suite
-- [**1253**星][2y] [JS] [samyk/skyjack](https://github.com/samyk/skyjack) A drone engineered to autonomously seek out, hack, and wirelessly take full control over any other Parrot or 3DR drones within wireless or flying distance, creating an army of zombie drones under your control.
-- [**1250**星][1m] [PowerShell] [hak5/bashbunny-payloads](https://github.com/hak5/bashbunny-payloads) The Official Bash Bunny Payload Repository
-- [**1248**星][2y] [Py] [vaguileradiaz/tinfoleak](https://github.com/vaguileradiaz/tinfoleak) Twitter 智能分析工具
-- [**1248**星][4m] [JS] [bubenshchykov/ngrok](https://github.com/bubenshchykov/ngrok) Expose your localhost to the web. Node wrapper for ngrok.
-- [**1245**星][2m] [Go] [xiaoming2028/freenet](https://github.com/xiaoming2028/freenet) 科学上网/梯子/自由上网/翻墙 SSR/V2Ray/Brook 最全搭建教程
-- [**1245**星][15d] [JS] [archerysec/archerysec](https://github.com/archerysec/archerysec) Centralize Vulnerability Assessment and Management for DevSecOps Team
-- [**1244**星][2y] [Objective-C] [krausefx/detect.location](https://github.com/krausefx/detect.location) An easy way to access the user's iOS location data without actually having access
-- [**1242**星][4y] [firesuncn/bluelotus_xssreceiver](https://github.com/firesuncn/bluelotus_xssreceiver) XSS平台 CTF工具 Web安全工具
-- [**1242**星][1m] [Vue] [chaitin/passionfruit](https://github.com/chaitin/passionfruit) iOSapp 黑盒评估工具。功能丰富,自带基于web的 GUI
-- [**1241**星][1y] [Ruby] [eliotsykes/rails-security-checklist](https://github.com/eliotsykes/rails-security-checklist)
-- [**1240**星][10m] [C] [a0rtega/pafish](https://github.com/a0rtega/pafish) Pafish is a demonstration tool that employs several techniques to detect sandboxes and analysis environments in the same way as malware families do.
-- [**1239**星][2m] [michalmalik/osx-re-101](https://github.com/michalmalik/osx-re-101) OSX/iOS逆向资源收集
-- [**1235**星][1m] [Go] [hacklcx/hfish](https://github.com/hacklcx/hfish) 扩展企业安全测试主动诱导型开源蜜罐框架系统,记录黑客攻击手段
-- [**1235**星][2m] [Go] [google/martian](https://github.com/google/martian) Martian is a library for building custom HTTP/S proxies
-- [**1232**星][3m] [Shell] [rootsongjc/kubernetes-vagrant-centos-cluster](https://github.com/rootsongjc/kubernetes-vagrant-centos-cluster) Setting up a distributed Kubernetes cluster along with Istio service mesh locally with Vagrant and VirtualBox, only PoC or Demo use.
-- [**1231**星][3y] [Py] [desaster/kippo](https://github.com/desaster/kippo) Kippo - SSH Honeypot
-- [**1230**星][7d] [Shell] [mitchellkrogza/nginx-ultimate-bad-bot-blocker](https://github.com/mitchellkrogza/nginx-ultimate-bad-bot-blocker) Nginx Block Bad Bots, Spam Referrer Blocker, Vulnerability Scanners, User-Agents, Malware, Adware, Ransomware, Malicious Sites, with anti-DDOS, Wordpress Theme Detector Blocking and Fail2Ban Jail for Repeat Offenders
-- [**1230**星][5m] [chalker/notes](https://github.com/chalker/notes) Some public notes
-- [**1228**星][1y] [Kotlin] [gh0u1l5/wechatspellbook](https://github.com/gh0u1l5/wechatspellbook) 一个使用Kotlin编写的开源微信插件框架,底层需要 Xposed 或 VirtualXposed 等Hooking框架的支持,而顶层可以轻松对接Java、Kotlin、Scala等JVM系语言。让程序员能够在几分钟内编写出简单的微信插件,随意揉捏微信的内部逻辑。
-- [**1228**星][8m] [Py] [flipkart-incubator/astra](https://github.com/flipkart-incubator/astra) 自动化的REST API安全测试脚本
-- [**1224**星][1m] [C] [datatheorem/trustkit](https://github.com/datatheorem/trustkit) Easy SSL pinning validation and reporting for iOS, macOS, tvOS and watchOS.
-- [**1223**星][3y] [CoffeeScript] [shadowsocks/shadowsocks-nodejs](https://github.com/shadowsocks/shadowsocks-nodejs)
-- [**1222**星][3y] [C] [tsudakageyu/minhook](https://github.com/tsudakageyu/minhook) The Minimalistic x86/x64 API Hooking Library for Windows
-- [**1222**星][27d] [C++] [nasa-sw-vnv/ikos](https://github.com/nasa-sw-vnv/ikos) Static analyzer for C/C++ based on the theory of Abstract Interpretation.
-- [**1222**星][1y] [Py] [danmcinerney/net-creds](https://github.com/danmcinerney/net-creds) Sniffs sensitive data from interface or pcap
-- [**1220**星][1y] [Go] [cloudflare/redoctober](https://github.com/cloudflare/redoctober) Go server for two-man rule style file encryption and decryption.
-- [**1219**星][5y] [cure53/xsschallengewiki](https://github.com/cure53/XSSChallengeWiki) Welcome to the XSS Challenge Wiki!
-- [**1219**星][4m] [Py] [owtf/owtf](https://github.com/owtf/owtf) 进攻性 Web 测试框架。着重于 OWASP + PTES,尝试统合强大的工具,提高渗透测试的效率。大部分以Python 编写
-- [**1218**星][11d] [Py] [google/timesketch](https://github.com/google/timesketch) Collaborative forensic timeline analysis
-- [**1218**星][26d] [Java] [find-sec-bugs/find-sec-bugs](https://github.com/find-sec-bugs/find-sec-bugs) The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)
-- [**1218**星][5y] [cure53/xsschallengewiki](https://github.com/cure53/xsschallengewiki) Welcome to the XSS Challenge Wiki!
-- [**1217**星][1y] [C#] [cn33liz/p0wnedshell](https://github.com/cn33liz/p0wnedshell) PowerShell Runspace Post Exploitation Toolkit
-- [**1216**星][26d] [Go] [jsha/minica](https://github.com/jsha/minica) minica is a small, simple CA intended for use in situations where the CA operator also operates each host where a certificate will be used.
-- [**1212**星][10d] [C] [dynamorio/dynamorio](https://github.com/dynamorio/dynamorio) Dynamic Instrumentation Tool Platform
-- [**1207**星][8d] [JS] [jpcertcc/logontracer](https://github.com/jpcertcc/logontracer) 通过可视化和分析Windows事件日志来调查恶意的Windows登录
-- [**1205**星][3m] [Java] [javiersantos/piracychecker](https://github.com/javiersantos/piracychecker) An Android library that prevents your app from being pirated / cracked using Google Play Licensing (LVL), APK signature protection and more. API 14+ required.
-- [**1204**星][7d] [Objective-C] [onionbrowser/onionbrowser](https://github.com/onionbrowser/onionbrowser) An open-source, privacy-enhancing web browser for iOS, utilizing the Tor anonymity network
-- [**1204**星][3m] [JS] [davidbau/seedrandom](https://github.com/davidbau/seedrandom) seeded random number generator for Javascript
-- [**1203**星][30d] [Py] [codingo/nosqlmap](https://github.com/codingo/NoSQLMap) Automated NoSQL database enumeration and web application exploitation tool.
-- [**1201**星][7d] [Java] [linkedin/dexmaker](https://github.com/linkedin/dexmaker) A utility for doing compile or runtime code generation targeting Android's Dalvik VM
-- [**1200**星][3m] [C] [droe/sslsplit](https://github.com/droe/sslsplit) 透明SSL/TLS拦截
-- [**1199**星][1y] [felixgr/secure-ios-app-dev](https://github.com/felixgr/secure-ios-app-dev) iOSApp 最常见漏洞收集
-- [**1198**星][24d] [Py] [thekingofduck/fuzzdicts](https://github.com/thekingofduck/fuzzdicts) Web Pentesting Fuzz 字典,一个就够了。
-- [**1196**星][1y] [Go] [rancher/convoy](https://github.com/rancher/convoy) A Docker volume plugin, managing persistent container volumes.
-- [**1194**星][2y] [C] [saminiir/level-ip](https://github.com/saminiir/level-ip) a Linux userspace TCP/IP stack, implemented with TUN/TAP devices.
-- [**1194**星][7m] [riusksk/secbook](https://github.com/riusksk/secbook) 信息安全从业者书单推荐
-- [**1193**星][18d] [Py] [cve-search/cve-search](https://github.com/cve-search/cve-search) 导入CVE/CPE 到本地 MongoDB 数据库,以便后续在本地进行搜索和处理
-- [**1192**星][17d] [YARA] [horsicq/detect-it-easy](https://github.com/horsicq/detect-it-easy) Program for determining types of files for Windows, Linux and MacOS.
-- [**1191**星][6y] [gdbinit/gdbinit](https://github.com/gdbinit/gdbinit) Gdbinit for OS X, iOS and others - x86, x86_64 and ARM
\ No newline at end of file
+- [**1300**星][1y] [Shell] [dana-at-cp/backdoor-apk](https://github.com/dana-at-cp/backdoor-apk) backdoor-apk is a shell script that simplifies the process of adding a backdoor to any Android APK file. Users of this shell script should have working knowledge of Linux, Bash, Metasploit, Apktool, the Android SDK, smali, etc. This shell script is provided as-is without warranty of any kind and is intended for educational purposes only.
+- [**1299**星][6d] [Go] [hacklcx/hfish](https://github.com/hacklcx/hfish) 扩展企业安全测试主动诱导型开源蜜罐框架系统,记录黑客攻击手段
+- [**1298**星][1y] [Go] [evilsocket/xray](https://github.com/evilsocket/xray) 自动化执行一些信息收集、网络映射的初始化工作
+- [**1293**星][4y] [C++] [microsoft/microsoft-pdb](https://github.com/microsoft/microsoft-pdb) Microsoft提供的有关PDB格式的信息
+- [**1293**星][5m] [JS] [feross/spoof](https://github.com/feross/spoof) Easily spoof your MAC address in macOS, Windows, & Linux!
+- [**1293**星][29d] [Java] [android-hacker/exposed](https://github.com/android-hacker/exposed) A library to use Xposed without root or recovery(or modify system image etc..).
+- [**1291**星][6d] [C] [traviscross/mtr](https://github.com/traviscross/mtr) Official repository for mtr, a network diagnostic tool
+- [**1291**星][2y] [Go] [malfunkt/hyperfox](https://github.com/malfunkt/hyperfox) 在局域网上代理和记录 HTTP 和 HTTPs 通信
\ No newline at end of file
diff --git a/Readme_en.md b/Readme_en.md
index ed65ea5..f6b74df 100644
--- a/Readme_en.md
+++ b/Readme_en.md
@@ -3,924 +3,995 @@
- Because Github can not show all lines, this page only show the first 1000 tools sorted by star count. [Read Full Version Here](https://github.com/alphaSeclab/sec-tool-list/blob/master/Readme_full_en.md)
# Tool List
-- [**34521**Star][14d] [C++] [x64dbg/x64dbg](https://github.com/x64dbg/x64dbg) An open-source x64/x32 debugger for windows.
-- [**33781**Star][8d] [Py] [minimaxir/big-list-of-naughty-strings](https://github.com/minimaxir/big-list-of-naughty-strings) The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.
-- [**32724**Star][2m] [hack-with-github/awesome-hacking](https://github.com/hack-with-github/awesome-hacking) A collection of various awesome lists for hackers, pentesters and security researchers
-- [**30396**Star][12d] [Go] [fatedier/frp](https://github.com/fatedier/frp) A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.
-- [**25942**Star][7d] [Py] [certbot/certbot](https://github.com/certbot/certbot) Certbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any other CA that uses the ACME protocol.
-- [**25522**Star][26d] [Swift] [shadowsocks/shadowsocksx-ng](https://github.com/shadowsocks/shadowsocksx-ng) Next Generation of ShadowsocksX
-- [**25087**Star][13d] [Go] [v2ray/v2ray-core](https://github.com/v2ray/v2ray-core) A platform for building proxies to bypass network restrictions.
-- [**24589**Star][7d] [trimstray/the-book-of-secret-knowledge](https://github.com/trimstray/the-book-of-secret-knowledge) A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.
-- [**22517**Star][12d] [Shell] [mathiasbynens/dotfiles](https://github.com/mathiasbynens/dotfiles)
-- [**21751**Star][7d] [PHP] [danielmiessler/seclists](https://github.com/danielmiessler/seclists) SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
-- [**21668**Star][10d] [Go] [filosottile/mkcert](https://github.com/filosottile/mkcert) A simple zero-config tool to make locally trusted development certificates with any names you'd like.
-- [**20619**Star][9d] [Java] [skylot/jadx](https://github.com/skylot/jadx) Dex to Java decompiler
-- [**20089**Star][2m] [Shell] [streisandeffect/streisand](https://github.com/StreisandEffect/streisand) Streisand sets up a new server running your choice of WireGuard, OpenConnect, OpenSSH, OpenVPN, Shadowsocks, sslh, Stunnel, or a Tor bridge. It also generates custom instructions for all of these services. At the end of the run you are given an HTML file with instructions that can be shared with friends, family members, and fellow activists.
-- [**19651**Star][2m] [Jupyter Notebook] [camdavidsonpilon/probabilistic-programming-and-bayesian-methods-for-hackers](https://github.com/camdavidsonpilon/probabilistic-programming-and-bayesian-methods-for-hackers) aka "Bayesian Methods for Hackers": An introduction to Bayesian methods + probabilistic programming with a computation/understanding-first, mathematics-second point of view. All in pure Python ;)
-- [**18996**Star][7d] [Ruby] [rapid7/metasploit-framework](https://github.com/rapid7/metasploit-framework) Metasploit Framework
-- [**18648**Star][3y] [fallibleinc/security-guide-for-developers](https://github.com/fallibleinc/security-guide-for-developers) Security Guide for Developers (实用性开发人员安全须知)
-- [**18381**Star][7d] [Java] [nationalsecurityagency/ghidra](https://github.com/nationalsecurityagency/ghidra) Ghidra is a software reverse engineering (SRE) framework
-- [**18220**Star][8d] [Java] [alibaba/arthas](https://github.com/alibaba/arthas) Alibaba Java Diagnostic Tool Arthas
-- [**17555**Star][4y] [Go] [inconshreveable/ngrok](https://github.com/inconshreveable/ngrok) Introspected tunnels to localhost
-- [**16951**Star][14d] [Py] [mitmproxy/mitmproxy](https://github.com/mitmproxy/mitmproxy) An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
-- [**16681**Star][7d] [C#] [powershell/powershell](https://github.com/powershell/powershell) PowerShell for every system!
-- [**15756**Star][8d] [Py] [sqlmapproject/sqlmap](https://github.com/sqlmapproject/sqlmap) Automatic SQL injection and database takeover tool
-- [**15694**Star][9m] [micropoor/micro8](https://github.com/micropoor/micro8) Gitbook
-- [**15627**Star][7d] [C] [curl/curl](https://github.com/curl/curl) A command line tool and library for transferring data with URL syntax, supporting HTTP, HTTPS, FTP, FTPS, GOPHER, TFTP, SCP, SFTP, SMB, TELNET, DICT, LDAP, LDAPS, FILE, IMAP, SMTP, POP3, RTSP and RTMP. libcurl offers a myriad of powerful features
-- [**14661**Star][1m] [gfwlist/gfwlist](https://github.com/gfwlist/gfwlist) gfwlist
-- [**14478**Star][26d] [Java] [tencent/tinker](https://github.com/tencent/tinker) Tinker is a hot-fix solution library for Android, it supports dex, library and resources update without reinstall apk.
-- [**13627**Star][9m] [JS] [bannedbook/fanqiang](https://github.com/bannedbook/fanqiang) 翻墙-科学上网
-- [**13183**Star][26d] [Py] [corentinj/real-time-voice-cloning](https://github.com/corentinj/real-time-voice-cloning) Clone a voice in 5 seconds to generate arbitrary speech in real-time
-- [**13081**Star][17d] [Go] [jesseduffield/lazydocker](https://github.com/jesseduffield/lazydocker) The lazier way to manage everything docker
-- [**12920**Star][10d] [Py] [cool-rr/pysnooper](https://github.com/cool-rr/pysnooper) Never use print for debugging again
-- [**12641**Star][9d] [C] [shadowsocks/shadowsocks-libev](https://github.com/shadowsocks/shadowsocks-libev) libev port of shadowsocks
-- [**12453**Star][7d] [C#] [0xd4d/dnspy](https://github.com/0xd4d/dnspy) .NET debugger and assembly editor
-- [**12203**Star][14d] [Java] [signalapp/signal-android](https://github.com/signalapp/Signal-Android) A private messenger for Android.
-- [**11935**Star][1m] [Go] [buger/goreplay](https://github.com/buger/goreplay) capturing and replaying live HTTP traffic into a test environment in order to continuously test your system with real data. It can be used to increase confidence in code deployments, configuration changes and infrastructure changes.
-- [**11829**Star][17d] [C] [openssl/openssl](https://github.com/openssl/openssl) TLS/SSL and crypto library
-- [**11490**Star][7d] [C] [radareorg/radare2](https://github.com/radareorg/radare2) unix-like reverse engineering framework and commandline tools
-- [**11361**Star][3m] [C] [robertdavidgraham/masscan](https://github.com/robertdavidgraham/masscan) TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.
-- [**11246**Star][1m] [facert/awesome-spider](https://github.com/facert/awesome-spider) 爬虫集合
-- [**11225**Star][13d] [getlantern/download](https://github.com/getlantern/download) Lantern官方版本下载 蓝灯 翻墙 科学上网 外网 加速器 梯子 路由
-- [**11174**Star][7d] [Java] [oracle/graal](https://github.com/oracle/graal) Run Programs Faster Anywhere
-- [**11106**Star][2m] [Jupyter Notebook] [selfteaching/the-craft-of-selfteaching](https://github.com/selfteaching/the-craft-of-selfteaching) One has no future if one couldn't teach themself.
-- [**11047**Star][7d] [Py] [swisskyrepo/payloadsallthethings](https://github.com/swisskyrepo/payloadsallthethings) A list of useful payloads and bypass for Web Application Security and Pentest/CTF
-- [**11013**Star][2y] [Objective-C] [bang590/jspatch](https://github.com/bang590/jspatch) JSPatch bridge Objective-C and Javascript using the Objective-C runtime. You can call any Objective-C class and method in JavaScript by just including a small engine. JSPatch is generally used to hotfix iOS App.
-- [**11008**Star][8d] [Py] [owasp/cheatsheetseries](https://github.com/owasp/cheatsheetseries) The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
-- [**10902**Star][12d] [Objective-C] [flipboard/flex](https://github.com/flipboard/flex) An in-app debugging and exploration tool for iOS
-- [**10886**Star][2m] [CSS] [hacker0x01/hacker101](https://github.com/hacker0x01/hacker101) Hacker101
-- [**10761**Star][2y] [CoffeeScript] [dropbox/zxcvbn](https://github.com/dropbox/zxcvbn) Low-Budget Password Strength Estimation
-- [**10742**Star][13d] [enaqx/awesome-pentest](https://github.com/enaqx/awesome-pentest) A collection of awesome penetration testing resources, tools and other shiny things
-- [**10738**Star][17d] [Java] [konloch/bytecode-viewer](https://github.com/konloch/bytecode-viewer) A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)
-- [**10107**Star][8d] [Go] [goharbor/harbor](https://github.com/goharbor/harbor) An open source trusted cloud native registry project that stores, signs, and scans content.
-- [**9844**Star][11d] [ruanyf/weekly](https://github.com/ruanyf/weekly) 科技爱好者周刊,每周五发布
-- [**9804**Star][8m] [imthenachoman/how-to-secure-a-linux-server](https://github.com/imthenachoman/how-to-secure-a-linux-server) An evolving how-to guide for securing a Linux server.
-- [**9349**Star][12d] [Ruby] [postalhq/postal](https://github.com/postalhq/postal) complete and fully featured mail server for use by websites & web servers
-- [**9229**Star][3m] [JS] [localtunnel/localtunnel](https://github.com/localtunnel/localtunnel) expose yourself
-- [**9182**Star][8d] [Go] [cnlh/nps](https://github.com/cnlh/nps) 一款轻量级、功能强大的内网穿透代理服务器。支持tcp、udp流量转发,支持内网http代理、内网socks5代理,同时支持snappy压缩、站点保护、加密传输、多路复用、header修改等。支持web图形化管理,集成多用户模式。
-- [**9178**Star][10d] [Java] [ibotpeaches/apktool](https://github.com/ibotpeaches/apktool) A tool for reverse engineering Android apk files
-- [**9141**Star][8d] [C#] [icsharpcode/ilspy](https://github.com/icsharpcode/ilspy) .NET Decompiler
-- [**9064**Star][27d] [JS] [valve/fingerprintjs2](https://github.com/valve/fingerprintjs2) Modern & flexible browser fingerprinting library
-- [**9003**Star][9d] [PowerShell] [lukesampson/scoop](https://github.com/lukesampson/scoop) A command-line installer for Windows.
-- [**8995**Star][2m] [vitalysim/awesome-hacking-resources](https://github.com/vitalysim/awesome-hacking-resources) A collection of hacking / penetration testing resources to make you better!
-- [**8988**Star][9d] [Py] [sherlock-project/sherlock](https://github.com/sherlock-project/sherlock) Find Usernames Across Social Networks
-- [**8847**Star][6m] [Go] [rkt/rkt](https://github.com/rkt/rkt) rkt is a pod-native container engine for Linux. It is composable, secure, and built on standards.
-- [**8712**Star][15d] [C] [gentilkiwi/mimikatz](https://github.com/gentilkiwi/mimikatz) A little tool to play with Windows security
-- [**8597**Star][26d] [Java] [android-hacker/virtualxposed](https://github.com/android-hacker/virtualxposed) A simple app to use Xposed without root, unlock the bootloader or modify system image, etc.
-- [**8495**Star][1m] [microsoft/wsl](https://github.com/microsoft/WSL) Issues found on WSL
-- [**8408**Star][2y] [brannondorsey/wifi-cracking](https://github.com/brannondorsey/wifi-cracking) Crack WPA/WPA2 Wi-Fi Routers with Airodump-ng and Aircrack-ng/Hashcat
-- [**8399**Star][27d] [Py] [wifiphisher/wifiphisher](https://github.com/wifiphisher/wifiphisher) 流氓AP框架, 用于RedTeam和Wi-Fi安全测试
-- [**8033**Star][7d] [trimstray/the-practical-linux-hardening-guide](https://github.com/trimstray/the-practical-linux-hardening-guide) This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).
-- [**7992**Star][2m] [Py] [facebook/chisel](https://github.com/facebook/chisel) Chisel is a collection of LLDB commands to assist debugging iOS apps.
-- [**7952**Star][3y] [Go] [cyfdecyf/cow](https://github.com/cyfdecyf/cow) HTTP proxy written in Go. COW can automatically identify blocked sites and use parent proxies to access.
-- [**7936**Star][4y] [Objective-C] [shadowsocks/shadowsocks-ios](https://github.com/shadowsocks/shadowsocks-ios) Removed according to regulations.
-- [**7806**Star][3m] [C++] [shiqiyu/libfacedetection](https://github.com/shiqiyu/libfacedetection) An open source library for face detection in images. The face detection speed can reach 1500FPS.
-- [**7696**Star][7d] [JS] [gchq/cyberchef](https://github.com/gchq/cyberchef) The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis
-- [**7685**Star][7d] [Go] [git-lfs/git-lfs](https://github.com/git-lfs/git-lfs) Git extension for versioning large files
-- [**7628**Star][22d] [Java] [java-decompiler/jd-gui](https://github.com/java-decompiler/jd-gui) A standalone Java Decompiler GUI
-- [**7498**Star][27d] [Py] [threat9/routersploit](https://github.com/threat9/routersploit) Exploitation Framework for Embedded Devices
-- [**7371**Star][12d] [Go] [snail007/goproxy](https://github.com/snail007/goproxy) Proxy是高性能全功能的http代理、https代理、socks5代理、内网穿透、内网穿透p2p、内网穿透代理、内网穿透反向代理、内网穿透服务器、Websocket代理、TCP代理、UDP代理、DNS代理、DNS加密代理,代理API认证,全能跨平台代理服务器。
-- [**7365**Star][1m] [Py] [s0md3v/xsstrike](https://github.com/s0md3v/XSStrike) Most advanced XSS scanner.
-- [**7205**Star][17d] [Java] [lionsoul2014/ip2region](https://github.com/lionsoul2014/ip2region) Ip2region is a offline IP location library with accuracy rate of 99.9% and 0.0x millseconds searching performance. DB file is less then 5Mb with all ip address stored. binding for Java,PHP,C,Python,Nodejs,Golang,C#,lua. Binary,B-tree,Memory searching algorithm
-- [**7174**Star][7m] [Shell] [teddysun/shadowsocks_install](https://github.com/teddysun/shadowsocks_install) Auto Install Shadowsocks Server for CentOS/Debian/Ubuntu
-- [**6994**Star][14d] [Go] [future-architect/vuls](https://github.com/future-architect/vuls) Agent-less vulnerability scanner for Linux, FreeBSD, Container Image, Running Container, WordPress, Programming language libraries, Network devices
-- [**6968**Star][2m] [JS] [cs01/gdbgui](https://github.com/cs01/gdbgui) Browser-based frontend to gdb (gnu debugger). Add breakpoints, view the stack, visualize data structures, and more in C, C++, Go, Rust, and Fortran. Run gdbgui from the terminal and a new tab will open in your browser.
-- [**6956**Star][10d] [C] [hashcat/hashcat](https://github.com/hashcat/hashcat) World's fastest and most advanced password recovery utility
-- [**6954**Star][13d] [Go] [nats-io/nats-server](https://github.com/nats-io/nats-server) High-Performance server for NATS, the cloud native messaging system.
-- [**6950**Star][9d] [greatfire/wiki](https://github.com/greatfire/wiki) 自由浏览
-- [**6917**Star][3m] [Java] [pxb1988/dex2jar](https://github.com/pxb1988/dex2jar) Tools to work with android .dex and java .class files
-- [**6844**Star][2m] [Go] [sqshq/sampler](https://github.com/sqshq/sampler) A tool for shell commands execution, visualization and alerting. Configured with a simple YAML file.
-- [**6788**Star][17d] [Shell] [awslabs/git-secrets](https://github.com/awslabs/git-secrets) Prevents you from committing secrets and credentials into git repositories
-- [**6708**Star][9m] [Java] [amitshekhariitbhu/android-debug-database](https://github.com/amitshekhariitbhu/android-debug-database) A library for debugging android databases and shared preferences - Make Debugging Great Again
-- [**6678**Star][3y] [C++] [alibaba/andfix](https://github.com/alibaba/andfix) AndFix is a library that offer hot-fix for Android App.
-- [**6639**Star][9d] [Java] [zaproxy/zaproxy](https://github.com/zaproxy/zaproxy) The OWASP ZAP core project
-- [**6557**Star][11d] [Py] [networkx/networkx](https://github.com/networkx/networkx) Official NetworkX source code repository.
-- [**6455**Star][1m] [Py] [h2y/shadowrocket-adblock-rules](https://github.com/h2y/shadowrocket-adblock-rules) 提供多款 Shadowrocket 规则,带广告过滤功能。用于 iOS 未越狱设备选择性地自动翻墙。
-- [**6449**Star][11d] [Shell] [cisofy/lynis](https://github.com/cisofy/lynis) Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
-- [**6440**Star][9m] [HTML] [open-power-workgroup/hospital](https://github.com/open-power-workgroup/hospital) OpenPower工作组收集汇总的医院开放数据
-- [**6413**Star][15d] [Go] [bettercap/bettercap](https://github.com/bettercap/bettercap) The Swiss Army knife for 802.11, BLE and Ethernet networks reconnaissance and MITM attacks.
-- [**6284**Star][27d] [Py] [seatgeek/fuzzywuzzy](https://github.com/seatgeek/fuzzywuzzy) Fuzzy String Matching in Python
-- [**6182**Star][2m] [Py] [yandex/gixy](https://github.com/yandex/gixy) Nginx configuration static analyzer
-- [**6170**Star][6m] [rmerl/asuswrt-merlin](https://github.com/rmerl/asuswrt-merlin) Enhanced version of Asus's router firmware (Asuswrt) (legacy code base)
-- [**6158**Star][3y] [PowerShell] [powershellmafia/powersploit](https://github.com/PowerShellMafia/PowerSploit) PowerSploit - A PowerShell Post-Exploitation Framework
-- [**6130**Star][1y] [Hack] [facebook/fbctf](https://github.com/facebook/fbctf) Platform to host Capture the Flag competitions
-- [**6124**Star][9m] [Py] [schollz/howmanypeoplearearound](https://github.com/schollz/howmanypeoplearearound) Count the number of people around you
-- [**6100**Star][7d] [JS] [avwo/whistle](https://github.com/avwo/whistle) HTTP, HTTP2, HTTPS, Websocket debugging proxy
-- [**6061**Star][2y] [C] [jgamblin/mirai-source-code](https://github.com/jgamblin/mirai-source-code) Leaked Mirai Source Code for Research/IoC Development Purposes
-- [**6025**Star][14d] [Go] [quay/clair](https://github.com/quay/clair) Vulnerability Static Analysis for Containers
-- [**6025**Star][14d] [Go] [quay/clair](https://github.com/quay/clair) Vulnerability Static Analysis for Containers
-- [**6002**Star][11d] [Py] [cyrus-and/gdb-dashboard](https://github.com/cyrus-and/gdb-dashboard) Modular visual interface for GDB in Python
-- [**5996**Star][20d] [berzerk0/probable-wordlists](https://github.com/berzerk0/probable-wordlists) Version 2 is live! Wordlists sorted by probability originally created for password generation and testing - make sure your passwords aren't popular!
-- [**5948**Star][2m] [Java] [google/android-classyshark](https://github.com/google/android-classyshark) Analyze any Android/Java based app or game
-- [**5935**Star][29d] [Py] [gallopsled/pwntools](https://github.com/gallopsled/pwntools) CTF framework and exploit development library
-- [**5870**Star][6m] [JS] [haotian-wang/google-access-helper](https://github.com/haotian-wang/google-access-helper) 谷歌访问助手破解版
-- [**5850**Star][8d] [C++] [radareorg/cutter](https://github.com/radareorg/cutter) Reverse Engineering Platform powered by radare2
-- [**5845**Star][2m] [Gnuplot] [nasa-jpl/open-source-rover](https://github.com/nasa-jpl/open-source-rover) A build-it-yourself, 6-wheel rover based on the rovers on Mars!
-- [**5811**Star][7m] [JS] [sindresorhus/fkill-cli](https://github.com/sindresorhus/fkill-cli) Fabulously kill processes. Cross-platform.
-- [**5764**Star][3m] [Objective-C] [square/ponydebugger](https://github.com/square/ponydebugger) Remote network and data debugging for your native iOS app using Chrome Developer Tools
-- [**5738**Star][1y] [qinyuhang/shadowsocksx-ng-r](https://github.com/qinyuhang/shadowsocksx-ng-r) Next Generation of ShadowsocksX
-- [**5738**Star][2y] [Py] [newsapps/beeswithmachineguns](https://github.com/newsapps/beeswithmachineguns) A utility for arming (creating) many bees (micro EC2 instances) to attack (load test) targets (web applications).
-- [**5719**Star][2m] [C] [spacehuhn/esp8266_deauther](https://github.com/spacehuhn/esp8266_deauther) Cheap WiFi hacks
-- [**5715**Star][8m] [C] [xoreaxeaxeax/movfuscator](https://github.com/xoreaxeaxeax/movfuscator) The single instruction C compiler
-- [**5674**Star][22d] [JS] [swagger-api/swagger-editor](https://github.com/swagger-api/swagger-editor) Swagger Editor
-- [**5653**Star][16d] [Go] [casbin/casbin](https://github.com/casbin/casbin) An authorization library that supports access control models like ACL, RBAC, ABAC in Golang
-- [**5605**Star][1m] [C] [rofl0r/proxychains-ng](https://github.com/rofl0r/proxychains-ng) proxychains ng (new generation) - a preloader which hooks calls to sockets in dynamically linked programs and redirects it through one or more socks/http proxies. continuation of the unmaintained proxychains project. the sf.net page is currently not updated, use releases from github release page instead.
-- [**5578**Star][8d] [Ruby] [presidentbeef/brakeman](https://github.com/presidentbeef/brakeman) A static analysis security vulnerability scanner for Ruby on Rails applications
-- [**5521**Star][18d] [rshipp/awesome-malware-analysis](https://github.com/rshipp/awesome-malware-analysis) A curated list of awesome malware analysis tools and resources.
-- [**5517**Star][27d] [Roff] [max2max/freess](https://github.com/max2max/freess) 免费ss账号 免费shadowsocks账号 免费v2ray账号 (长期更新)
-- [**5456**Star][8m] [carpedm20/awesome-hacking](https://github.com/carpedm20/awesome-hacking) A curated list of awesome Hacking tutorials, tools and resources
-- [**5417**Star][2y] [Rust] [autumnai/leaf](https://github.com/autumnai/leaf) Open Machine Intelligence Framework for Hackers. (GPU/CPU)
-- [**5392**Star][2m] [Py] [axi0mx/ipwndfu](https://github.com/axi0mx/ipwndfu) open-source jailbreaking tool for many iOS devices
-- [**5353**Star][5m] [C] [pwn20wndstuff/undecimus](https://github.com/pwn20wndstuff/undecimus) unc0ver jailbreak for iOS 11.0 - 12.4
-- [**5317**Star][7d] [Py] [mlflow/mlflow](https://github.com/mlflow/mlflow) Open source platform for the machine learning lifecycle
-- [**5307**Star][9d] [Go] [zricethezav/gitleaks](https://github.com/zricethezav/gitleaks) Audit git repos for secrets
-- [**5207**Star][7m] [Py] [usarmyresearchlab/dshell](https://github.com/usarmyresearchlab/dshell) Dshell is a network forensic analysis framework.
-- [**5165**Star][1m] [Py] [refirmlabs/binwalk](https://github.com/ReFirmLabs/binwalk) a fast, easy to use tool for analyzing, reverse engineering, and extracting firmware images.
+- [**45523**Star][11d] [C#] [shadowsocks/shadowsocks-windows](https://github.com/shadowsocks/shadowsocks-windows) If you want to keep a secret, you must also hide it from yourself.
+- [**34554**Star][16d] [C++] [x64dbg/x64dbg](https://github.com/x64dbg/x64dbg) An open-source x64/x32 debugger for windows.
+- [**33926**Star][10d] [Py] [minimaxir/big-list-of-naughty-strings](https://github.com/minimaxir/big-list-of-naughty-strings) The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.
+- [**32844**Star][2m] [hack-with-github/awesome-hacking](https://github.com/hack-with-github/awesome-hacking) A collection of various awesome lists for hackers, pentesters and security researchers
+- [**32022**Star][4y] [Py] [shadowsocks/shadowsocks](https://github.com/shadowsocks/shadowsocks)
+- [**30689**Star][14d] [Go] [fatedier/frp](https://github.com/fatedier/frp) A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.
+- [**27836**Star][2d] [Kotlin] [shadowsocks/shadowsocks-android](https://github.com/shadowsocks/shadowsocks-android) A shadowsocks client for Android
+- [**25977**Star][2d] [Py] [certbot/certbot](https://github.com/certbot/certbot) Certbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any other CA that uses the ACME protocol.
+- [**25643**Star][28d] [Swift] [shadowsocks/shadowsocksx-ng](https://github.com/shadowsocks/shadowsocksx-ng) Next Generation of ShadowsocksX
+- [**25330**Star][3d] [Go] [v2ray/v2ray-core](https://github.com/v2ray/v2ray-core) A platform for building proxies to bypass network restrictions.
+- [**24826**Star][2d] [xitu/gold-miner](https://github.com/xitu/gold-miner)
+- [**24727**Star][5d] [trimstray/the-book-of-secret-knowledge](https://github.com/trimstray/the-book-of-secret-knowledge) A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.
+- [**22556**Star][14d] [Shell] [mathiasbynens/dotfiles](https://github.com/mathiasbynens/dotfiles)
+- [**21874**Star][9d] [PHP] [danielmiessler/seclists](https://github.com/danielmiessler/seclists) SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
+- [**21778**Star][12d] [Go] [filosottile/mkcert](https://github.com/filosottile/mkcert) A simple zero-config tool to make locally trusted development certificates with any names you'd like.
+- [**20680**Star][5d] [Java] [skylot/jadx](https://github.com/skylot/jadx) Dex to Java decompiler
+- [**20159**Star][5d] [Shell] [streisandeffect/streisand](https://github.com/StreisandEffect/streisand) Streisand sets up a new server running your choice of WireGuard, OpenConnect, OpenSSH, OpenVPN, Shadowsocks, sslh, Stunnel, or a Tor bridge. It also generates custom instructions for all of these services. At the end of the run you are given an HTML file with instructions that can be shared with friends, family members, and fellow activists.
+- [**19692**Star][2m] [Jupyter Notebook] [camdavidsonpilon/probabilistic-programming-and-bayesian-methods-for-hackers](https://github.com/camdavidsonpilon/probabilistic-programming-and-bayesian-methods-for-hackers) aka "Bayesian Methods for Hackers": An introduction to Bayesian methods + probabilistic programming with a computation/understanding-first, mathematics-second point of view. All in pure Python ;)
+- [**19212**Star][1y] [alvin9999/new-pac](https://github.com/alvin9999/new-pac) 科学/自由上网,免费ss/ssr/v2ray/goflyway账号,搭建教程
+- [**19076**Star][2d] [Ruby] [rapid7/metasploit-framework](https://github.com/rapid7/metasploit-framework) Metasploit Framework
+- [**18676**Star][3y] [fallibleinc/security-guide-for-developers](https://github.com/fallibleinc/security-guide-for-developers) Security Guide for Developers (实用性开发人员安全须知)
+- [**18476**Star][2d] [Java] [nationalsecurityagency/ghidra](https://github.com/nationalsecurityagency/ghidra) Ghidra is a software reverse engineering (SRE) framework
+- [**18390**Star][3d] [Java] [alibaba/arthas](https://github.com/alibaba/arthas) Alibaba Java Diagnostic Tool Arthas
+- [**17641**Star][4y] [Go] [inconshreveable/ngrok](https://github.com/inconshreveable/ngrok) Introspected tunnels to localhost
+- [**17069**Star][6d] [Py] [mitmproxy/mitmproxy](https://github.com/mitmproxy/mitmproxy) An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
+- [**16769**Star][2d] [C#] [powershell/powershell](https://github.com/powershell/powershell) PowerShell for every system!
+- [**15824**Star][2d] [Py] [sqlmapproject/sqlmap](https://github.com/sqlmapproject/sqlmap) Automatic SQL injection and database takeover tool
+- [**15731**Star][9m] [micropoor/micro8](https://github.com/micropoor/micro8) Gitbook
+- [**15718**Star][3d] [C] [curl/curl](https://github.com/curl/curl) A command line tool and library for transferring data with URL syntax, supporting HTTP, HTTPS, FTP, FTPS, GOPHER, TFTP, SCP, SFTP, SMB, TELNET, DICT, LDAP, LDAPS, FILE, IMAP, SMTP, POP3, RTSP and RTMP. libcurl offers a myriad of powerful features
+- [**15363**Star][21d] [Py] [drduh/macos-security-and-privacy-guide](https://github.com/drduh/macOS-Security-and-Privacy-Guide) Guide to securing and improving privacy on macOS
+- [**14744**Star][1m] [gfwlist/gfwlist](https://github.com/gfwlist/gfwlist) gfwlist
+- [**14518**Star][7d] [Java] [tencent/tinker](https://github.com/tencent/tinker) Tinker is a hot-fix solution library for Android, it supports dex, library and resources update without reinstall apk.
+- [**13736**Star][9m] [JS] [bannedbook/fanqiang](https://github.com/bannedbook/fanqiang) 翻墙-科学上网
+- [**13548**Star][28d] [Py] [corentinj/real-time-voice-cloning](https://github.com/corentinj/real-time-voice-cloning) Clone a voice in 5 seconds to generate arbitrary speech in real-time
+- [**13241**Star][19d] [Go] [jesseduffield/lazydocker](https://github.com/jesseduffield/lazydocker) The lazier way to manage everything docker
+- [**12966**Star][12d] [Py] [cool-rr/pysnooper](https://github.com/cool-rr/pysnooper) Never use print for debugging again
+- [**12742**Star][3d] [Vue] [liyasthomas/postwoman](https://github.com/liyasthomas/postwoman)
+- [**12693**Star][8d] [C] [shadowsocks/shadowsocks-libev](https://github.com/shadowsocks/shadowsocks-libev) libev port of shadowsocks
+- [**12544**Star][9d] [C#] [0xd4d/dnspy](https://github.com/0xd4d/dnspy) .NET debugger and assembly editor
+- [**12325**Star][2m] [Ruby] [diaspora/diaspora](https://github.com/diaspora/diaspora) A privacy-aware, distributed, open source social network.
+- [**12241**Star][5d] [Java] [signalapp/signal-android](https://github.com/signalapp/Signal-Android) A private messenger for Android.
+- [**11977**Star][1m] [Go] [buger/goreplay](https://github.com/buger/goreplay) capturing and replaying live HTTP traffic into a test environment in order to continuously test your system with real data. It can be used to increase confidence in code deployments, configuration changes and infrastructure changes.
+- [**11890**Star][6d] [C] [openssl/openssl](https://github.com/openssl/openssl) TLS/SSL and crypto library
+- [**11530**Star][2d] [C] [radareorg/radare2](https://github.com/radareorg/radare2) unix-like reverse engineering framework and commandline tools
+- [**11418**Star][3m] [C] [robertdavidgraham/masscan](https://github.com/robertdavidgraham/masscan) TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.
+- [**11404**Star][2d] [getlantern/download](https://github.com/getlantern/download) Lantern官方版本下载 蓝灯 翻墙 科学上网 外网 加速器 梯子 路由
+- [**11342**Star][1m] [facert/awesome-spider](https://github.com/facert/awesome-spider) 爬虫集合
+- [**11278**Star][2d] [Java] [oracle/graal](https://github.com/oracle/graal) Run Programs Faster Anywhere
+- [**11200**Star][5d] [Py] [swisskyrepo/payloadsallthethings](https://github.com/swisskyrepo/payloadsallthethings) A list of useful payloads and bypass for Web Application Security and Pentest/CTF
+- [**11143**Star][2m] [Jupyter Notebook] [selfteaching/the-craft-of-selfteaching](https://github.com/selfteaching/the-craft-of-selfteaching) One has no future if one couldn't teach themself.
+- [**11110**Star][5d] [Py] [owasp/cheatsheetseries](https://github.com/owasp/cheatsheetseries) The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
+- [**11016**Star][2y] [ObjC] [bang590/jspatch](https://github.com/bang590/jspatch) JSPatch bridge Objective-C and Javascript using the Objective-C runtime. You can call any Objective-C class and method in JavaScript by just including a small engine. JSPatch is generally used to hotfix iOS App.
+- [**10925**Star][2d] [ObjC] [flipboard/flex](https://github.com/flipboard/flex) An in-app debugging and exploration tool for iOS
+- [**10907**Star][2m] [CSS] [hacker0x01/hacker101](https://github.com/hacker0x01/hacker101) Hacker101
+- [**10830**Star][15d] [enaqx/awesome-pentest](https://github.com/enaqx/awesome-pentest) A collection of awesome penetration testing resources, tools and other shiny things
+- [**10780**Star][2y] [CoffeeScript] [dropbox/zxcvbn](https://github.com/dropbox/zxcvbn) Low-Budget Password Strength Estimation
+- [**10757**Star][19d] [Java] [konloch/bytecode-viewer](https://github.com/konloch/bytecode-viewer) A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)
+- [**10318**Star][5d] [ruanyf/weekly](https://github.com/ruanyf/weekly) 科技爱好者周刊,每周五发布
+- [**10226**Star][3d] [Go] [goharbor/harbor](https://github.com/goharbor/harbor) An open source trusted cloud native registry project that stores, signs, and scans content.
+- [**9830**Star][8m] [imthenachoman/how-to-secure-a-linux-server](https://github.com/imthenachoman/how-to-secure-a-linux-server) An evolving how-to guide for securing a Linux server.
+- [**9613**Star][4d] [Py] [sherlock-project/sherlock](https://github.com/sherlock-project/sherlock) Find Usernames Across Social Networks
+- [**9389**Star][3d] [Go] [cnlh/nps](https://github.com/cnlh/nps) 一款轻量级、功能强大的内网穿透代理服务器。支持tcp、udp流量转发,支持内网http代理、内网socks5代理,同时支持snappy压缩、站点保护、加密传输、多路复用、header修改等。支持web图形化管理,集成多用户模式。
+- [**9358**Star][6d] [Ruby] [postalhq/postal](https://github.com/postalhq/postal) complete and fully featured mail server for use by websites & web servers
+- [**9266**Star][3m] [JS] [localtunnel/localtunnel](https://github.com/localtunnel/localtunnel) expose yourself
+- [**9229**Star][12d] [Java] [ibotpeaches/apktool](https://github.com/ibotpeaches/apktool) A tool for reverse engineering Android apk files
+- [**9185**Star][2d] [C#] [icsharpcode/ilspy](https://github.com/icsharpcode/ilspy) .NET Decompiler
+- [**9148**Star][29d] [JS] [valve/fingerprintjs2](https://github.com/valve/fingerprintjs2) Modern & flexible browser fingerprinting library
+- [**9069**Star][11d] [PS] [lukesampson/scoop](https://github.com/lukesampson/scoop) A command-line installer for Windows.
+- [**9015**Star][2m] [vitalysim/awesome-hacking-resources](https://github.com/vitalysim/awesome-hacking-resources) A collection of hacking / penetration testing resources to make you better!
+- [**8854**Star][6m] [Go] [rkt/rkt](https://github.com/rkt/rkt) rkt is a pod-native container engine for Linux. It is composable, secure, and built on standards.
+- [**8739**Star][17d] [C] [gentilkiwi/mimikatz](https://github.com/gentilkiwi/mimikatz) A little tool to play with Windows security
+- [**8646**Star][28d] [Java] [android-hacker/virtualxposed](https://github.com/android-hacker/virtualxposed) A simple app to use Xposed without root, unlock the bootloader or modify system image, etc.
+- [**8525**Star][1m] [microsoft/wsl](https://github.com/microsoft/WSL) Issues found on WSL
+- [**8443**Star][7m] [Shell] [233boy/v2ray](https://github.com/233boy/v2ray) 最好用的 V2Ray 一键安装脚本 & 管理脚本
+- [**8424**Star][2d] [Py] [wifiphisher/wifiphisher](https://github.com/wifiphisher/wifiphisher) 流氓AP框架, 用于RedTeam和Wi-Fi安全测试
+- [**8420**Star][2y] [brannondorsey/wifi-cracking](https://github.com/brannondorsey/wifi-cracking) Crack WPA/WPA2 Wi-Fi Routers with Airodump-ng and Aircrack-ng/Hashcat
+- [**8044**Star][9d] [trimstray/the-practical-linux-hardening-guide](https://github.com/trimstray/the-practical-linux-hardening-guide) This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).
+- [**8002**Star][2m] [Py] [facebook/chisel](https://github.com/facebook/chisel) Chisel is a collection of LLDB commands to assist debugging iOS apps.
+- [**7986**Star][1m] [Py] [mailpile/mailpile](https://github.com/mailpile/mailpile) A free & open modern, fast email client with user-friendly encryption and privacy features
+- [**7965**Star][3y] [Go] [cyfdecyf/cow](https://github.com/cyfdecyf/cow) HTTP proxy written in Go. COW can automatically identify blocked sites and use parent proxies to access.
+- [**7945**Star][4y] [ObjC] [shadowsocks/shadowsocks-ios](https://github.com/shadowsocks/shadowsocks-ios) Removed according to regulations.
+- [**7840**Star][6d] [C++] [shiqiyu/libfacedetection](https://github.com/shiqiyu/libfacedetection) An open source library for face detection in images. The face detection speed can reach 1500FPS.
+- [**7731**Star][3d] [JS] [gchq/cyberchef](https://github.com/gchq/cyberchef) The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis
+- [**7712**Star][2d] [Go] [git-lfs/git-lfs](https://github.com/git-lfs/git-lfs) Git extension for versioning large files
+- [**7670**Star][24d] [Java] [java-decompiler/jd-gui](https://github.com/java-decompiler/jd-gui) A standalone Java Decompiler GUI
+- [**7524**Star][29d] [Py] [threat9/routersploit](https://github.com/threat9/routersploit) Exploitation Framework for Embedded Devices
+- [**7474**Star][9d] [Go] [snail007/goproxy](https://github.com/snail007/goproxy) Proxy是高性能全功能的http代理、https代理、socks5代理、内网穿透、内网穿透p2p、内网穿透代理、内网穿透反向代理、内网穿透服务器、Websocket代理、TCP代理、UDP代理、DNS代理、DNS加密代理,代理API认证,全能跨平台代理服务器。
+- [**7412**Star][1m] [C++] [shadowsocks/shadowsocks-qt5](https://github.com/shadowsocks/shadowsocks-qt5) A cross-platform shadowsocks GUI client
+- [**7397**Star][1m] [Py] [s0md3v/xsstrike](https://github.com/s0md3v/XSStrike) Most advanced XSS scanner.
+- [**7246**Star][19d] [Java] [lionsoul2014/ip2region](https://github.com/lionsoul2014/ip2region) Ip2region is a offline IP location library with accuracy rate of 99.9% and 0.0x millseconds searching performance. DB file is less then 5Mb with all ip address stored. binding for Java,PHP,C,Python,Nodejs,Golang,C#,lua. Binary,B-tree,Memory searching algorithm
+- [**7186**Star][7m] [Shell] [teddysun/shadowsocks_install](https://github.com/teddysun/shadowsocks_install) Auto Install Shadowsocks Server for CentOS/Debian/Ubuntu
+- [**7017**Star][16d] [Go] [future-architect/vuls](https://github.com/future-architect/vuls) Agent-less vulnerability scanner for Linux, FreeBSD, Container Image, Running Container, WordPress, Programming language libraries, Network devices
+- [**6989**Star][5d] [C] [hashcat/hashcat](https://github.com/hashcat/hashcat) World's fastest and most advanced password recovery utility
+- [**6984**Star][2d] [Go] [nats-io/nats-server](https://github.com/nats-io/nats-server) High-Performance server for NATS, the cloud native messaging system.
+- [**6984**Star][2m] [JS] [cs01/gdbgui](https://github.com/cs01/gdbgui) Browser-based frontend to gdb (gnu debugger). Add breakpoints, view the stack, visualize data structures, and more in C, C++, Go, Rust, and Fortran. Run gdbgui from the terminal and a new tab will open in your browser.
+- [**6957**Star][11d] [greatfire/wiki](https://github.com/greatfire/wiki) 自由浏览
+- [**6949**Star][3m] [Java] [pxb1988/dex2jar](https://github.com/pxb1988/dex2jar) Tools to work with android .dex and java .class files
+- [**6869**Star][2m] [Go] [sqshq/sampler](https://github.com/sqshq/sampler) A tool for shell commands execution, visualization and alerting. Configured with a simple YAML file.
+- [**6812**Star][19d] [Shell] [awslabs/git-secrets](https://github.com/awslabs/git-secrets) Prevents you from committing secrets and credentials into git repositories
+- [**6732**Star][9m] [Java] [amitshekhariitbhu/android-debug-database](https://github.com/amitshekhariitbhu/android-debug-database) A library for debugging android databases and shared preferences - Make Debugging Great Again
+- [**6683**Star][3d] [Java] [zaproxy/zaproxy](https://github.com/zaproxy/zaproxy) The OWASP ZAP core project
+- [**6682**Star][3y] [C++] [alibaba/andfix](https://github.com/alibaba/andfix) AndFix is a library that offer hot-fix for Android App.
+- [**6668**Star][12d] [C++] [keepassxreboot/keepassxc](https://github.com/keepassxreboot/keepassxc) KeePassXC is a cross-platform community-driven port of the Windows application “Keepass Password Safe”.
+- [**6595**Star][3d] [Py] [networkx/networkx](https://github.com/networkx/networkx) Official NetworkX source code repository.
+- [**6555**Star][6m] [Go] [shadowsocks/shadowsocks-go](https://github.com/shadowsocks/shadowsocks-go) go port of shadowsocks (Deprecated)
+- [**6518**Star][1m] [Py] [h2y/shadowrocket-adblock-rules](https://github.com/h2y/shadowrocket-adblock-rules) 提供多款 Shadowrocket 规则,带广告过滤功能。用于 iOS 未越狱设备选择性地自动翻墙。
+- [**6462**Star][5d] [Shell] [cisofy/lynis](https://github.com/cisofy/lynis) Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
+- [**6451**Star][17d] [Go] [bettercap/bettercap](https://github.com/bettercap/bettercap) The Swiss Army knife for 802.11, BLE and Ethernet networks reconnaissance and MITM attacks.
+- [**6448**Star][9m] [HTML] [open-power-workgroup/hospital](https://github.com/open-power-workgroup/hospital) OpenPower工作组收集汇总的医院开放数据
+- [**6310**Star][29d] [Py] [seatgeek/fuzzywuzzy](https://github.com/seatgeek/fuzzywuzzy) Fuzzy String Matching in Python
+- [**6197**Star][2m] [ObjC] [johnno1962/injectionforxcode](https://github.com/johnno1962/injectionforxcode) Runtime Code Injection for Objective-C & Swift
+- [**6194**Star][3y] [PS] [powershellmafia/powersploit](https://github.com/PowerShellMafia/PowerSploit) PowerSploit - A PowerShell Post-Exploitation Framework
+- [**6192**Star][2m] [Py] [yandex/gixy](https://github.com/yandex/gixy) Nginx configuration static analyzer
+- [**6187**Star][6m] [rmerl/asuswrt-merlin](https://github.com/rmerl/asuswrt-merlin) Enhanced version of Asus's router firmware (Asuswrt) (legacy code base)
+- [**6146**Star][2d] [JS] [avwo/whistle](https://github.com/avwo/whistle) HTTP, HTTP2, HTTPS, Websocket debugging proxy
+- [**6137**Star][1y] [Hack] [facebook/fbctf](https://github.com/facebook/fbctf) Platform to host Capture the Flag competitions
+- [**6128**Star][9m] [Py] [schollz/howmanypeoplearearound](https://github.com/schollz/howmanypeoplearearound) Count the number of people around you
+- [**6092**Star][15d] [Go] [usefathom/fathom](https://github.com/usefathom/fathom) Fathom Lite. Simple, privacy-focused website analytics. Built with Golang & Preact.
+- [**6074**Star][16d] [Go] [quay/clair](https://github.com/quay/clair) Vulnerability Static Analysis for Containers
+- [**6074**Star][16d] [Go] [quay/clair](https://github.com/quay/clair) Vulnerability Static Analysis for Containers
+- [**6073**Star][5m] [Java] [qihoo360/replugin](https://github.com/qihoo360/replugin) RePlugin - A flexible, stable, easy-to-use Android Plug-in Framework
+- [**6070**Star][2y] [C] [jgamblin/mirai-source-code](https://github.com/jgamblin/mirai-source-code) Leaked Mirai Source Code for Research/IoC Development Purposes
+- [**6021**Star][3d] [Py] [cyrus-and/gdb-dashboard](https://github.com/cyrus-and/gdb-dashboard) Modular visual interface for GDB in Python
+- [**6017**Star][7d] [berzerk0/probable-wordlists](https://github.com/berzerk0/probable-wordlists) Version 2 is live! Wordlists sorted by probability originally created for password generation and testing - make sure your passwords aren't popular!
+- [**5972**Star][2m] [Java] [google/android-classyshark](https://github.com/google/android-classyshark) Analyze any Android/Java based app or game
+- [**5968**Star][2d] [Py] [gallopsled/pwntools](https://github.com/gallopsled/pwntools) CTF framework and exploit development library
+- [**5942**Star][6m] [JS] [haotian-wang/google-access-helper](https://github.com/haotian-wang/google-access-helper) 谷歌访问助手破解版
+- [**5888**Star][2d] [Py] [asciimoo/searx](https://github.com/asciimoo/searx) searx:网络元数据搜索引擎。汇总70 多个搜索引擎的搜素结果,避免用户被追踪或者被分析。可与 Tor 结合使用
+- [**5879**Star][2d] [C++] [radareorg/cutter](https://github.com/radareorg/cutter) Reverse Engineering Platform powered by radare2
+- [**5871**Star][2m] [Gnuplot] [nasa-jpl/open-source-rover](https://github.com/nasa-jpl/open-source-rover) A build-it-yourself, 6-wheel rover based on the rovers on Mars!
+- [**5815**Star][7m] [JS] [sindresorhus/fkill-cli](https://github.com/sindresorhus/fkill-cli) Fabulously kill processes. Cross-platform.
+- [**5773**Star][1y] [qinyuhang/shadowsocksx-ng-r](https://github.com/qinyuhang/shadowsocksx-ng-r) Next Generation of ShadowsocksX
+- [**5766**Star][3m] [ObjC] [square/ponydebugger](https://github.com/square/ponydebugger) Remote network and data debugging for your native iOS app using Chrome Developer Tools
+- [**5762**Star][2m] [C] [spacehuhn/esp8266_deauther](https://github.com/spacehuhn/esp8266_deauther) Cheap WiFi hacks
+- [**5742**Star][2y] [Py] [newsapps/beeswithmachineguns](https://github.com/newsapps/beeswithmachineguns) A utility for arming (creating) many bees (micro EC2 instances) to attack (load test) targets (web applications).
+- [**5740**Star][8m] [C] [xoreaxeaxeax/movfuscator](https://github.com/xoreaxeaxeax/movfuscator) The single instruction C compiler
+- [**5694**Star][9d] [JS] [swagger-api/swagger-editor](https://github.com/swagger-api/swagger-editor) Swagger Editor
+- [**5693**Star][2d] [Go] [casbin/casbin](https://github.com/casbin/casbin) An authorization library that supports access control models like ACL, RBAC, ABAC in Golang
+- [**5626**Star][1m] [C] [rofl0r/proxychains-ng](https://github.com/rofl0r/proxychains-ng) proxychains ng (new generation) - a preloader which hooks calls to sockets in dynamically linked programs and redirects it through one or more socks/http proxies. continuation of the unmaintained proxychains project. the sf.net page is currently not updated, use releases from github release page instead.
+- [**5593**Star][10d] [Ruby] [presidentbeef/brakeman](https://github.com/presidentbeef/brakeman) A static analysis security vulnerability scanner for Ruby on Rails applications
+- [**5565**Star][29d] [Roff] [max2max/freess](https://github.com/max2max/freess) 免费ss账号 免费shadowsocks账号 免费v2ray账号 (长期更新)
+- [**5540**Star][20d] [rshipp/awesome-malware-analysis](https://github.com/rshipp/awesome-malware-analysis) A curated list of awesome malware analysis tools and resources.
+- [**5476**Star][8m] [carpedm20/awesome-hacking](https://github.com/carpedm20/awesome-hacking) A curated list of awesome Hacking tutorials, tools and resources
+- [**5417**Star][2m] [Py] [axi0mx/ipwndfu](https://github.com/axi0mx/ipwndfu) open-source jailbreaking tool for many iOS devices
+- [**5413**Star][2y] [Rust] [autumnai/leaf](https://github.com/autumnai/leaf) Open Machine Intelligence Framework for Hackers. (GPU/CPU)
+- [**5371**Star][5m] [C] [pwn20wndstuff/undecimus](https://github.com/pwn20wndstuff/undecimus) unc0ver jailbreak for iOS 11.0 - 12.4
+- [**5371**Star][2d] [Py] [mlflow/mlflow](https://github.com/mlflow/mlflow) Open source platform for the machine learning lifecycle
+- [**5324**Star][4d] [Go] [zricethezav/gitleaks](https://github.com/zricethezav/gitleaks) Audit git repos for secrets
+- [**5205**Star][7m] [Py] [usarmyresearchlab/dshell](https://github.com/usarmyresearchlab/dshell) Dshell is a network forensic analysis framework.
+- [**5196**Star][3m] [Py] [ytisf/thezoo](https://github.com/ytisf/thezoo) A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.
+- [**5192**Star][1m] [Py] [refirmlabs/binwalk](https://github.com/ReFirmLabs/binwalk) a fast, easy to use tool for analyzing, reverse engineering, and extracting firmware images.
- [IDA插件](https://github.com/ReFirmLabs/binwalk/tree/master/src/scripts)
- [binwalk](https://github.com/ReFirmLabs/binwalk/tree/master/src/binwalk)
-- [**5165**Star][1y] [JS] [samyk/poisontap](https://github.com/samyk/poisontap) Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.
-- [**5163**Star][3m] [Py] [ytisf/thezoo](https://github.com/ytisf/thezoo) A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.
-- [**5121**Star][13d] [PHP] [tennc/webshell](https://github.com/tennc/webshell) This is a webshell open source project
-- [**5111**Star][18d] [Shell] [vulhub/vulhub](https://github.com/vulhub/vulhub) Pre-Built Vulnerable Environments Based on Docker-Compose
-- [**5096**Star][4m] [Py] [n1nj4sec/pupy](https://github.com/n1nj4sec/pupy) Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) remote administration and post-exploitation tool mainly written in python
-- [**5092**Star][19d] [C++] [avast/retdec](https://github.com/avast/retdec) RetDec is a retargetable machine-code decompiler based on LLVM.
-- [**5067**Star][2m] [sbilly/awesome-security](https://github.com/sbilly/awesome-security) A collection of awesome software, libraries, documents, books, resources and cools stuffs about security.
-- [**5054**Star][2m] [Shell] [stackexchange/blackbox](https://github.com/stackexchange/blackbox) Safely store secrets in Git/Mercurial/Subversion
-- [**5036**Star][8d] [Go] [dnscrypt/dnscrypt-proxy](https://github.com/DNSCrypt/dnscrypt-proxy) dnscrypt-proxy 2 - A flexible DNS proxy, with support for encrypted DNS protocols.
-- [**5028**Star][1m] [Java] [meituan-dianping/walle](https://github.com/meituan-dianping/walle) Android Signature V2 Scheme签名下的新一代渠道包打包神器
-- [**5026**Star][4y] [Py] [shadowsocksr-backup/shadowsocksr](https://github.com/shadowsocksr-backup/shadowsocksr) Python port of ShadowsocksR
-- [**5023**Star][4m] [PowerShell] [empireproject/empire](https://github.com/EmpireProject/Empire) 后渗透框架. Windows客户端用PowerShell, Linux/OSX用Python. 之前PowerShell Empire和Python EmPyre的组合
-- [**5010**Star][15d] [HTML] [owasp/owasp-mstg](https://github.com/owasp/owasp-mstg) The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security development, testing and reverse engineering.
-- [**4990**Star][1m] [Py] [snare/voltron](https://github.com/snare/voltron) A hacky debugger UI for hackers
-- [**4941**Star][10d] [Go] [inlets/inlets](https://github.com/inlets/inlets) Expose your local endpoints to the Internet
-- [**4928**Star][13d] [ASP] [hq450/fancyss](https://github.com/hq450/fancyss) fancyss is a project providing tools to across the GFW on asuswrt/merlin based router.
-- [**4924**Star][20d] [Py] [trustedsec/social-engineer-toolkit](https://github.com/trustedsec/social-engineer-toolkit) The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.
-- [**4909**Star][1y] [Go] [yinghuocho/firefly-proxy](https://github.com/yinghuocho/firefly-proxy) A proxy software to help circumventing the Great Firewall.
-- [**4892**Star][11m] [Go] [bitly/oauth2_proxy](https://github.com/bitly/oauth2_proxy) A reverse proxy that provides authentication with Google, Github or other provider
-- [**4872**Star][2m] [Rust] [sharkdp/hexyl](https://github.com/sharkdp/hexyl) A command-line hex viewer
-- [**4872**Star][7m] [Java] [guardianproject/haven](https://github.com/guardianproject/haven) Haven is for people who need a way to protect their personal spaces and possessions without compromising their own privacy, through an Android app and on-device sensors
-- [**4868**Star][9d] [Shell] [denisidoro/navi](https://github.com/denisidoro/navi) An interactive cheatsheet tool for the command-line
-- [**4862**Star][7d] [JS] [mobsf/mobile-security-framework-mobsf](https://github.com/MobSF/Mobile-Security-Framework-MobSF) Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
-- [**4838**Star][10d] [Go] [gcla/termshark](https://github.com/gcla/termshark) A terminal UI for tshark, inspired by Wireshark
-- [**4835**Star][8d] [Py] [alessandroz/lazagne](https://github.com/alessandroz/lazagne) Credentials recovery project
-- [**4816**Star][10d] [C] [offensive-security/exploitdb](https://github.com/offensive-security/exploitdb) The official Exploit Database repository
-- [**4793**Star][8m] [Py] [10se1ucgo/disablewintracking](https://github.com/10se1ucgo/disablewintracking) Uses some known methods that attempt to minimize tracking in Windows 10
-- [**4771**Star][7d] [C] [google/oss-fuzz](https://github.com/google/oss-fuzz) OSS-Fuzz - continuous fuzzing of open source software.
-- [**4752**Star][7d] [C++] [facebook/redex](https://github.com/facebook/redex) A bytecode optimizer for Android apps
-- [**4717**Star][7d] [Swift] [yanue/v2rayu](https://github.com/yanue/v2rayu) V2rayU,基于v2ray核心的mac版客户端,用于科学上网,使用swift编写,支持vmess,shadowsocks,socks5等服务协议,支持订阅, 支持二维码,剪贴板导入,手动配置,二维码分享等
-- [**4710**Star][8d] [C++] [paddlepaddle/paddle-lite](https://github.com/PaddlePaddle/Paddle-Lite) Multi-platform high performance deep learning inference engine (『飞桨』多平台高性能深度学习预测引擎)
-- [**4675**Star][7d] [C++] [coatisoftware/sourcetrail](https://github.com/coatisoftware/sourcetrail) Sourcetrail - free and open-source interactive source explorer
-- [**4651**Star][7d] [Py] [manisso/fsociety](https://github.com/manisso/fsociety) fsociety Hacking Tools Pack – A Penetration Testing Framework
-- [**4630**Star][6m] [powershell/win32-openssh](https://github.com/powershell/win32-openssh) Win32 port of OpenSSH
-- [**4627**Star][16d] [C] [google/ios-webkit-debug-proxy](https://github.com/google/ios-webkit-debug-proxy) A DevTools proxy (Chrome Remote Debugging Protocol) for iOS devices (Safari Remote Web Inspector).
-- [**4616**Star][8d] [JS] [beefproject/beef](https://github.com/beefproject/beef) The Browser Exploitation Framework Project
-- [**4611**Star][19d] [Py] [secdev/scapy](https://github.com/secdev/scapy) Scapy: the Python-based interactive packet manipulation program & library. Supports Python 2 & Python 3.
-- [**4575**Star][11m] [Py] [ecthros/uncaptcha2](https://github.com/ecthros/uncaptcha2) defeating the latest version of ReCaptcha with 91% accuracy
-- [**4574**Star][10d] [Go] [ginuerzh/gost](https://github.com/ginuerzh/gost) GO Simple Tunnel - a simple tunnel written in golang
-- [**4551**Star][1y] [C] [upx/upx](https://github.com/upx/upx) UPX - the Ultimate Packer for eXecutables
-- [**4549**Star][8d] [C++] [mozilla/rr](https://github.com/mozilla/rr) Record and Replay Framework
-- [**4526**Star][10d] [Ruby] [wpscanteam/wpscan](https://github.com/wpscanteam/wpscan) WPScan is a free, for non-commercial use, black box WordPress Vulnerability Scanner written for security professionals and blog maintainers to test the security of their WordPress websites.
-- [**4523**Star][12d] [C] [jedisct1/dsvpn](https://github.com/jedisct1/dsvpn) A Dead Simple VPN.
-- [**4485**Star][18d] [TypeScript] [apis-guru/graphql-voyager](https://github.com/apis-guru/graphql-voyager)
-- [**4454**Star][1y] [Go] [wallix/awless](https://github.com/wallix/awless) A Mighty CLI for AWS
-- [**4444**Star][16d] [Py] [jopohl/urh](https://github.com/jopohl/urh) Universal Radio Hacker: investigate wireless protocols like a boss
-- [**4426**Star][22d] [Py] [jofpin/trape](https://github.com/jofpin/trape) People tracker on the Internet: OSINT analysis and research tool by Jose Pino
-- [**4398**Star][9d] [Makefile] [frida/frida](https://github.com/frida/frida) Clone this repo to build Frida
-- [**4387**Star][2m] [Shell] [zardus/ctf-tools](https://github.com/zardus/ctf-tools) Some setup scripts for security research tools.
-- [**4343**Star][13d] [Swift] [signalapp/signal-ios](https://github.com/signalapp/Signal-iOS) A private messenger for iOS.
-- [**4339**Star][12m] [Py] [lennylxx/ipv6-hosts](https://github.com/lennylxx/ipv6-hosts) Fork of
-- [**4310**Star][29d] [JS] [cure53/dompurify](https://github.com/cure53/dompurify) a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
-- [**4307**Star][5m] [Py] [diafygi/acme-tiny](https://github.com/diafygi/acme-tiny) A tiny script to issue and renew TLS certs from Let's Encrypt
-- [**4262**Star][1m] [Py] [tensorflow/cleverhans](https://github.com/tensorflow/cleverhans) An adversarial example library for constructing attacks, building defenses, and benchmarking both
-- [**4261**Star][1m] [Shell] [ashishb/android-security-awesome](https://github.com/ashishb/android-security-awesome) A collection of android security related resources
-- [**4256**Star][11m] [JS] [butterproject/butter-desktop](https://github.com/butterproject/butter-desktop) All the free parts of Popcorn Time
-- [**4243**Star][9d] [Rust] [timvisee/ffsend](https://github.com/timvisee/ffsend) Easily and securely share files from the command line
-- [**4210**Star][4m] [Py] [dxa4481/trufflehog](https://github.com/dxa4481/trufflehog) Searches through git repositories for high entropy strings and secrets, digging deep into commit history
-- [**4195**Star][16d] [Go] [gophish/gophish](https://github.com/gophish/gophish) Open-Source Phishing Toolkit
-- [**4195**Star][2m] [Py] [evilsocket/opensnitch](https://github.com/evilsocket/opensnitch) a GNU/Linux port of the Little Snitch application firewall
-- [**4190**Star][7m] [Objective-C] [alonemonkey/monkeydev](https://github.com/alonemonkey/monkeydev) CaptainHook Tweak、Logos Tweak and Command-line Tool、Patch iOS Apps, Without Jailbreak.
-- [**4186**Star][9d] [qazbnm456/awesome-web-security](https://github.com/qazbnm456/awesome-web-security) Curated list of Web Security materials and resources
-- [**4183**Star][1y] [Go] [michenriksen/gitrob](https://github.com/michenriksen/gitrob) Reconnaissance tool for GitHub organizations
-- [**4175**Star][11d] [we5ter/scanners-box](https://github.com/we5ter/scanners-box) A powerful hacker toolkit collected more than 10 categories of open source scanners from Github - 安全行业从业者自研开源扫描器合辑
-- [**4165**Star][2y] [forter/security-101-for-saas-startups](https://github.com/forter/security-101-for-saas-startups) security tips for startups
-- [**4148**Star][12m] [JS] [kdzwinel/betwixt](https://github.com/kdzwinel/betwixt) Betwixt will help you analyze web traffic outside the browser using familiar Chrome DevTools interface.
-- [**4105**Star][5m] [Py] [spiderclub/haipproxy](https://github.com/spiderclub/haipproxy)
-- [**4092**Star][2m] [Py] [aboul3la/sublist3r](https://github.com/aboul3la/sublist3r) Fast subdomains enumeration tool for penetration testers
-- [**4091**Star][7d] [Java] [spring-projects/spring-security](https://github.com/spring-projects/spring-security) Spring Security
-- [**4083**Star][2y] [Py] [xoreaxeaxeax/sandsifter](https://github.com/xoreaxeaxeax/sandsifter) sandsifter:x86 处理器 Fuzzer,查找 Intel 的隐藏指令和 CPU bug
-- [**4069**Star][9m] [wtsxdev/reverse-engineering](https://github.com/wtsxdev/reverse-engineering) List of awesome reverse engineering resources
-- [**4039**Star][1m] [JS] [sigalor/whatsapp-web-reveng](https://github.com/sigalor/whatsapp-web-reveng) Reverse engineering WhatsApp Web.
-- [**4033**Star][7d] [Py] [google/clusterfuzz](https://github.com/google/clusterfuzz) Scalable fuzzing infrastructure.
-- [**4023**Star][2m] [Java] [jesusfreke/smali](https://github.com/jesusfreke/smali) smali/baksmali
-- [**4015**Star][3m] [JS] [cuckoosandbox/cuckoo](https://github.com/cuckoosandbox/cuckoo) Cuckoo Sandbox is an automated dynamic malware analysis system
-- [**3989**Star][1y] [JS] [travist/jsencrypt](https://github.com/travist/jsencrypt) A Javascript library to perform OpenSSL RSA Encryption, Decryption, and Key Generation.
-- [**3985**Star][20d] [drduh/yubikey-guide](https://github.com/drduh/yubikey-guide) Guide to using YubiKey for GPG and SSH
-- [**3955**Star][3m] [Py] [nullarray/autosploit](https://github.com/nullarray/autosploit) Automated Mass Exploiter
-- [**3936**Star][13d] [Go] [dexidp/dex](https://github.com/dexidp/dex) OpenID Connect Identity (OIDC) and OAuth 2.0 Provider with Pluggable Connectors
-- [**3929**Star][2m] [JS] [apsdehal/awesome-ctf](https://github.com/apsdehal/awesome-ctf) A curated list of CTF frameworks, libraries, resources and softwares
-- [**3929**Star][2m] [JS] [apsdehal/awesome-ctf](https://github.com/apsdehal/awesome-ctf) A curated list of CTF frameworks, libraries, resources and softwares
-- [**3925**Star][4m] [PHP] [paragonie/awesome-appsec](https://github.com/paragonie/awesome-appsec) A curated list of resources for learning about application security
-- [**3916**Star][7d] [Py] [angr/angr](https://github.com/angr/angr) A powerful and user-friendly binary analysis platform!
-- [**3908**Star][14d] [Rust] [svenstaro/genact](https://github.com/svenstaro/genact) a nonsense activity generator
-- [**3907**Star][1m] [C] [aquynh/capstone](https://github.com/aquynh/capstone) Capstone disassembly/disassembler framework: Core (Arm, Arm64, BPF, EVM, M68K, M680X, MOS65xx, Mips, PPC, RISCV, Sparc, SystemZ, TMS320C64x, Web Assembly, X86, X86_64, XCore) + bindings.
-- [**3896**Star][2y] [C#] [shadowsocksr-backup/shadowsocksr-csharp](https://github.com/shadowsocksr-backup/shadowsocksr-csharp)
-- [**3876**Star][7d] [C++] [baldurk/renderdoc](https://github.com/baldurk/renderdoc) RenderDoc is a stand-alone graphics debugging tool.
-- [**3856**Star][2m] [PHP] [fuzzdb-project/fuzzdb](https://github.com/fuzzdb-project/fuzzdb) Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
-- [**3841**Star][8m] [Go] [eranyanay/1m-go-websockets](https://github.com/eranyanay/1m-go-websockets) handling 1M websockets connections in Go
-- [**3837**Star][15d] [JS] [shadowsocks/shadowsocks-manager](https://github.com/shadowsocks/shadowsocks-manager) A shadowsocks manager tool for multi user and traffic control.
-- [**3836**Star][11d] [Py] [secureauthcorp/impacket](https://github.com/SecureAuthCorp/impacket) Impacket is a collection of Python classes for working with network protocols.
-- [**3832**Star][2m] [Objective-C] [sveinbjornt/sloth](https://github.com/sveinbjornt/sloth) Mac app that shows all open files, directories and sockets in use by all running processes. Nice GUI for lsof.
-- [**3825**Star][4y] [iosre/iosappreverseengineering](https://github.com/iosre/iosappreverseengineering) The world’s 1st book of very detailed iOS App reverse engineering skills :)
-- [**3781**Star][13d] [hq450/fancyss_history_package](https://github.com/hq450/fancyss_history_package) 科学上网插件的离线安装包储存在这里
-- [**3770**Star][30d] [jivoi/awesome-osint](https://github.com/jivoi/awesome-osint) A curated list of amazingly awesome open source intelligence tools and resources
-- [**3763**Star][5y] [shadowsocksr-backup/shadowsocks-rss](https://github.com/shadowsocksr-backup/shadowsocks-rss) ShadowsocksR update rss, SSR organization
-- [**3754**Star][10m] [Py] [longld/peda](https://github.com/longld/peda) Python Exploit Development Assistance for GDB
-- [**3749**Star][2m] [Go] [microsoft/ethr](https://github.com/microsoft/ethr) Ethr is a Network Performance Measurement Tool for TCP, UDP & HTTP.
-- [**3739**Star][2m] [PHP] [ethicalhack3r/dvwa](https://github.com/ethicalhack3r/DVWA) Damn Vulnerable Web Application (DVWA)
-- [**3739**Star][2m] [Py] [paralax/awesome-honeypots](https://github.com/paralax/awesome-honeypots) an awesome list of honeypot resources
-- [**3731**Star][1m] [C] [iaik/meltdown](https://github.com/iaik/meltdown) This repository contains several applications, demonstrating the Meltdown bug.
-- [**3731**Star][13d] [Go] [hashicorp/consul-template](https://github.com/hashicorp/consul-template) Template rendering, notifier, and supervisor for
-- [**3718**Star][4m] [Py] [malwaredllc/byob](https://github.com/malwaredllc/byob) BYOB (Build Your Own Botnet)
-- [**3681**Star][11d] [jjqqkk/chromium](https://github.com/jjqqkk/chromium) Chromium browser with SSL VPN. Use this browser to unblock websites.
-- [**3679**Star][2y] [JS] [samyk/evercookie](https://github.com/samyk/evercookie) Produces persistent, respawning "super" cookies in a browser, abusing over a dozen techniques. Its goal is to identify users after they've removed standard cookies and other privacy data such as Flash cookies (LSOs), HTML5 storage, SilverLight storage, and others.
-- [**3675**Star][8d] [HTML] [hamukazu/lets-get-arrested](https://github.com/hamukazu/lets-get-arrested) This project is intended to protest against the police in Japan
-- [**3660**Star][1y] [Py] [misterch0c/shadowbroker](https://github.com/misterch0c/shadowbroker) The Shadow Brokers "Lost In Translation" leak
-- [**3653**Star][4m] [C] [facebook/fishhook](https://github.com/facebook/fishhook) A library that enables dynamically rebinding symbols in Mach-O binaries running on iOS.
-- [**3647**Star][8d] [JS] [lesspass/lesspass](https://github.com/lesspass/lesspass)
-- [**3645**Star][26d] [C#] [0xd4d/de4dot](https://github.com/0xd4d/de4dot) .NET deobfuscator and unpacker.
-- [**3640**Star][4m] [C] [secwiki/windows-kernel-exploits](https://github.com/secwiki/windows-kernel-exploits) windows-kernel-exploits Windows平台提权漏洞集合
-- [**3639**Star][2y] [Py] [qiyeboy/ipproxypool](https://github.com/qiyeboy/ipproxypool) IPProxyPool代理池项目,提供代理ip
-- [**3624**Star][29d] [acl4ssr/acl4ssr](https://github.com/acl4ssr/acl4ssr) SSR 去广告ACL规则/SS完整GFWList规则,Telegram频道订阅地址
-- [**3621**Star][2m] [C] [atmosphere-nx/atmosphere](https://github.com/atmosphere-nx/atmosphere) Atmosphère is a work-in-progress customized firmware for the Nintendo Switch.
-- [**3615**Star][5y] [C#] [brandonlw/psychson](https://github.com/brandonlw/Psychson) Phison 2251-03 (2303) Custom Firmware & Existing Firmware Patches (BadUSB)
-- [**3612**Star][17d] [HTML] [consensys/smart-contract-best-practices](https://github.com/consensys/smart-contract-best-practices) A guide to smart contract security best practices
-- [**3598**Star][8d] [TypeScript] [javascript-obfuscator/javascript-obfuscator](https://github.com/javascript-obfuscator/javascript-obfuscator) A powerful obfuscator for JavaScript and Node.js
+- [**5167**Star][20d] [Shell] [vulhub/vulhub](https://github.com/vulhub/vulhub) Pre-Built Vulnerable Environments Based on Docker-Compose
+- [**5167**Star][1y] [JS] [samyk/poisontap](https://github.com/samyk/poisontap) Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.
+- [**5148**Star][6d] [PHP] [tennc/webshell](https://github.com/tennc/webshell) This is a webshell open source project
+- [**5123**Star][21d] [C++] [avast/retdec](https://github.com/avast/retdec) RetDec is a retargetable machine-code decompiler based on LLVM.
+- [**5118**Star][15d] [ObjC] [macpass/macpass](https://github.com/MacPass/MacPass) A native OS X KeePass client
+- [**5118**Star][4m] [Py] [n1nj4sec/pupy](https://github.com/n1nj4sec/pupy) Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) remote administration and post-exploitation tool mainly written in python
+- [**5089**Star][2d] [Go] [dnscrypt/dnscrypt-proxy](https://github.com/DNSCrypt/dnscrypt-proxy) dnscrypt-proxy 2 - A flexible DNS proxy, with support for encrypted DNS protocols.
+- [**5082**Star][2m] [sbilly/awesome-security](https://github.com/sbilly/awesome-security) A collection of awesome software, libraries, documents, books, resources and cools stuffs about security.
+- [**5065**Star][2m] [Shell] [stackexchange/blackbox](https://github.com/stackexchange/blackbox) Safely store secrets in Git/Mercurial/Subversion
+- [**5059**Star][1m] [Java] [meituan-dianping/walle](https://github.com/meituan-dianping/walle) Android Signature V2 Scheme签名下的新一代渠道包打包神器
+- [**5054**Star][4y] [Py] [shadowsocksr-backup/shadowsocksr](https://github.com/shadowsocksr-backup/shadowsocksr) Python port of ShadowsocksR
+- [**5042**Star][2d] [HTML] [owasp/owasp-mstg](https://github.com/owasp/owasp-mstg) The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security development, testing and reverse engineering.
+- [**5037**Star][4m] [PS] [empireproject/empire](https://github.com/EmpireProject/Empire) 后渗透框架. Windows客户端用PowerShell, Linux/OSX用Python. 之前PowerShell Empire和Python EmPyre的组合
+- [**5021**Star][2d] [Py] [mobsf/mobile-security-framework-mobsf](https://github.com/MobSF/Mobile-Security-Framework-MobSF) Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
+- [**5005**Star][2d] [C++] [coatisoftware/sourcetrail](https://github.com/coatisoftware/sourcetrail) Sourcetrail - free and open-source interactive source explorer
+- [**4996**Star][2d] [ASP] [hq450/fancyss](https://github.com/hq450/fancyss) fancyss is a project providing tools to across the GFW on asuswrt/merlin based router.
+- [**4996**Star][6d] [Go] [inlets/inlets](https://github.com/inlets/inlets) Expose your local endpoints to the Internet
+- [**4994**Star][1m] [Py] [snare/voltron](https://github.com/snare/voltron) A hacky debugger UI for hackers
+- [**4953**Star][22d] [Py] [trustedsec/social-engineer-toolkit](https://github.com/trustedsec/social-engineer-toolkit) The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.
+- [**4920**Star][2d] [TS] [jigsaw-code/outline-client](https://github.com/jigsaw-code/outline-client) Outline clients, developed by Jigsaw. The Outline clients use the popular Shadowsocks protocol, and lean on the Cordova and Electron frameworks to support Windows, Android / ChromeOS, Linux, iOS and macOS.
+- [**4913**Star][1y] [Go] [yinghuocho/firefly-proxy](https://github.com/yinghuocho/firefly-proxy) A proxy software to help circumventing the Great Firewall.
+- [**4909**Star][2d] [Shell] [denisidoro/navi](https://github.com/denisidoro/navi) An interactive cheatsheet tool for the command-line
+- [**4897**Star][11m] [Go] [bitly/oauth2_proxy](https://github.com/bitly/oauth2_proxy) A reverse proxy that provides authentication with Google, Github or other provider
+- [**4883**Star][2m] [Rust] [sharkdp/hexyl](https://github.com/sharkdp/hexyl) A command-line hex viewer
+- [**4881**Star][5d] [Java] [guardianproject/haven](https://github.com/guardianproject/haven) Haven is for people who need a way to protect their personal spaces and possessions without compromising their own privacy, through an Android app and on-device sensors
+- [**4869**Star][2d] [Swift] [yanue/v2rayu](https://github.com/yanue/v2rayu) V2rayU,基于v2ray核心的mac版客户端,用于科学上网,使用swift编写,支持vmess,shadowsocks,socks5等服务协议,支持订阅, 支持二维码,剪贴板导入,手动配置,二维码分享等
+- [**4867**Star][10d] [Py] [alessandroz/lazagne](https://github.com/alessandroz/lazagne) Credentials recovery project
+- [**4847**Star][3d] [Go] [gcla/termshark](https://github.com/gcla/termshark) A terminal UI for tshark, inspired by Wireshark
+- [**4841**Star][2d] [C] [offensive-security/exploitdb](https://github.com/offensive-security/exploitdb) The official Exploit Database repository
+- [**4803**Star][8m] [Py] [10se1ucgo/disablewintracking](https://github.com/10se1ucgo/disablewintracking) Uses some known methods that attempt to minimize tracking in Windows 10
+- [**4782**Star][2d] [C] [google/oss-fuzz](https://github.com/google/oss-fuzz) OSS-Fuzz - continuous fuzzing of open source software.
+- [**4761**Star][2d] [C++] [facebook/redex](https://github.com/facebook/redex) A bytecode optimizer for Android apps
+- [**4724**Star][2d] [C++] [paddlepaddle/paddle-lite](https://github.com/PaddlePaddle/Paddle-Lite) Multi-platform high performance deep learning inference engine (『飞桨』多平台高性能深度学习预测引擎)
+- [**4691**Star][9d] [Py] [manisso/fsociety](https://github.com/manisso/fsociety) fsociety Hacking Tools Pack – A Penetration Testing Framework
+- [**4639**Star][3d] [Py] [secdev/scapy](https://github.com/secdev/scapy) Scapy: the Python-based interactive packet manipulation program & library. Supports Python 2 & Python 3.
+- [**4638**Star][18d] [C] [google/ios-webkit-debug-proxy](https://github.com/google/ios-webkit-debug-proxy) A DevTools proxy (Chrome Remote Debugging Protocol) for iOS devices (Safari Remote Web Inspector).
+- [**4637**Star][6m] [powershell/win32-openssh](https://github.com/powershell/win32-openssh) Win32 port of OpenSSH
+- [**4633**Star][2d] [JS] [beefproject/beef](https://github.com/beefproject/beef) The Browser Exploitation Framework Project
+- [**4615**Star][12d] [Go] [ginuerzh/gost](https://github.com/ginuerzh/gost) GO Simple Tunnel - a simple tunnel written in golang
+- [**4589**Star][11m] [Py] [ecthros/uncaptcha2](https://github.com/ecthros/uncaptcha2) defeating the latest version of ReCaptcha with 91% accuracy
+- [**4583**Star][1y] [C] [upx/upx](https://github.com/upx/upx) UPX - the Ultimate Packer for eXecutables
+- [**4575**Star][4d] [C++] [mozilla/rr](https://github.com/mozilla/rr) Record and Replay Framework
+- [**4543**Star][4d] [Ruby] [wpscanteam/wpscan](https://github.com/wpscanteam/wpscan) WPScan is a free, for non-commercial use, black box WordPress Vulnerability Scanner written for security professionals and blog maintainers to test the security of their WordPress websites.
+- [**4529**Star][6d] [C] [jedisct1/dsvpn](https://github.com/jedisct1/dsvpn) A Dead Simple VPN.
+- [**4498**Star][6d] [TS] [apis-guru/graphql-voyager](https://github.com/apis-guru/graphql-voyager)
+- [**4459**Star][8d] [Py] [jopohl/urh](https://github.com/jopohl/urh) Universal Radio Hacker: investigate wireless protocols like a boss
+- [**4458**Star][1y] [Go] [wallix/awless](https://github.com/wallix/awless) A Mighty CLI for AWS
+- [**4449**Star][3d] [Go] [dragonflyoss/dragonfly](https://github.com/dragonflyoss/Dragonfly) Dragonfly is an intelligent P2P based image and file distribution system.
+- [**4446**Star][2d] [Makefile] [frida/frida](https://github.com/frida/frida) Clone this repo to build Frida
+- [**4443**Star][24d] [Py] [jofpin/trape](https://github.com/jofpin/trape) People tracker on the Internet: OSINT analysis and research tool by Jose Pino
+- [**4411**Star][2m] [Shell] [zardus/ctf-tools](https://github.com/zardus/ctf-tools) Some setup scripts for security research tools.
+- [**4359**Star][6d] [Swift] [signalapp/signal-ios](https://github.com/signalapp/Signal-iOS) A private messenger for iOS.
+- [**4346**Star][1m] [JS] [cure53/dompurify](https://github.com/cure53/dompurify) a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
+- [**4344**Star][12m] [Py] [lennylxx/ipv6-hosts](https://github.com/lennylxx/ipv6-hosts) Fork of
+- [**4313**Star][5m] [Py] [diafygi/acme-tiny](https://github.com/diafygi/acme-tiny) A tiny script to issue and renew TLS certs from Let's Encrypt
+- [**4283**Star][7d] [Py] [tensorflow/cleverhans](https://github.com/tensorflow/cleverhans) An adversarial example library for constructing attacks, building defenses, and benchmarking both
+- [**4280**Star][1m] [Shell] [ashishb/android-security-awesome](https://github.com/ashishb/android-security-awesome) A collection of android security related resources
+- [**4261**Star][5d] [Rust] [timvisee/ffsend](https://github.com/timvisee/ffsend) Easily and securely share files from the command line
+- [**4258**Star][11m] [JS] [butterproject/butter-desktop](https://github.com/butterproject/butter-desktop) All the free parts of Popcorn Time
+- [**4244**Star][2y] [imeiji/shadowsocks_install](https://github.com/imeiji/shadowsocks_install) Auto install shadowsocks server,thanks 秋水逸冰
+- [**4241**Star][4m] [Py] [dxa4481/trufflehog](https://github.com/dxa4481/trufflehog) Searches through git repositories for high entropy strings and secrets, digging deep into commit history
+- [**4215**Star][7m] [ObjC] [alonemonkey/monkeydev](https://github.com/alonemonkey/monkeydev) CaptainHook Tweak、Logos Tweak and Command-line Tool、Patch iOS Apps, Without Jailbreak.
+- [**4211**Star][9d] [Go] [gophish/gophish](https://github.com/gophish/gophish) Open-Source Phishing Toolkit
+- [**4205**Star][11d] [qazbnm456/awesome-web-security](https://github.com/qazbnm456/awesome-web-security) Curated list of Web Security materials and resources
+- [**4204**Star][1y] [Go] [michenriksen/gitrob](https://github.com/michenriksen/gitrob) Reconnaissance tool for GitHub organizations
+- [**4202**Star][2m] [Py] [evilsocket/opensnitch](https://github.com/evilsocket/opensnitch) a GNU/Linux port of the Little Snitch application firewall
+- [**4198**Star][2d] [Py] [openmined/pysyft](https://github.com/openmined/pysyft) A library for encrypted, privacy preserving machine learning
+- [**4190**Star][13d] [we5ter/scanners-box](https://github.com/we5ter/scanners-box) A powerful hacker toolkit collected more than 10 categories of open source scanners from Github - 安全行业从业者自研开源扫描器合辑
+- [**4171**Star][2y] [forter/security-101-for-saas-startups](https://github.com/forter/security-101-for-saas-startups) security tips for startups
+- [**4149**Star][12m] [JS] [kdzwinel/betwixt](https://github.com/kdzwinel/betwixt) Betwixt will help you analyze web traffic outside the browser using familiar Chrome DevTools interface.
+- [**4131**Star][5d] [Java] [spring-projects/spring-security](https://github.com/spring-projects/spring-security) Spring Security
+- [**4120**Star][5m] [Py] [spiderclub/haipproxy](https://github.com/spiderclub/haipproxy)
+- [**4120**Star][2m] [Py] [aboul3la/sublist3r](https://github.com/aboul3la/sublist3r) Fast subdomains enumeration tool for penetration testers
+- [**4096**Star][2y] [Py] [xoreaxeaxeax/sandsifter](https://github.com/xoreaxeaxeax/sandsifter) sandsifter:x86 处理器 Fuzzer,查找 Intel 的隐藏指令和 CPU bug
+- [**4092**Star][9m] [wtsxdev/reverse-engineering](https://github.com/wtsxdev/reverse-engineering) List of awesome reverse engineering resources
+- [**4046**Star][1m] [JS] [sigalor/whatsapp-web-reveng](https://github.com/sigalor/whatsapp-web-reveng) Reverse engineering WhatsApp Web.
+- [**4045**Star][2m] [Java] [jesusfreke/smali](https://github.com/jesusfreke/smali) smali/baksmali
+- [**4044**Star][2d] [Py] [google/clusterfuzz](https://github.com/google/clusterfuzz) Scalable fuzzing infrastructure.
+- [**4022**Star][22d] [drduh/yubikey-guide](https://github.com/drduh/yubikey-guide) Guide to using YubiKey for GPG and SSH
+- [**4021**Star][3m] [JS] [cuckoosandbox/cuckoo](https://github.com/cuckoosandbox/cuckoo) Cuckoo Sandbox is an automated dynamic malware analysis system
+- [**4000**Star][1y] [JS] [travist/jsencrypt](https://github.com/travist/jsencrypt) A Javascript library to perform OpenSSL RSA Encryption, Decryption, and Key Generation.
+- [**3967**Star][3m] [Py] [nullarray/autosploit](https://github.com/nullarray/autosploit) Automated Mass Exploiter
+- [**3961**Star][5d] [Go] [dexidp/dex](https://github.com/dexidp/dex) OpenID Connect Identity (OIDC) and OAuth 2.0 Provider with Pluggable Connectors
+- [**3953**Star][2m] [JS] [apsdehal/awesome-ctf](https://github.com/apsdehal/awesome-ctf) A curated list of CTF frameworks, libraries, resources and softwares
+- [**3953**Star][2m] [JS] [apsdehal/awesome-ctf](https://github.com/apsdehal/awesome-ctf) A curated list of CTF frameworks, libraries, resources and softwares
+- [**3937**Star][3d] [Py] [angr/angr](https://github.com/angr/angr) A powerful and user-friendly binary analysis platform!
+- [**3935**Star][4m] [PHP] [paragonie/awesome-appsec](https://github.com/paragonie/awesome-appsec) A curated list of resources for learning about application security
+- [**3933**Star][8m] [Go] [eranyanay/1m-go-websockets](https://github.com/eranyanay/1m-go-websockets) handling 1M websockets connections in Go
+- [**3923**Star][1m] [C] [aquynh/capstone](https://github.com/aquynh/capstone) Capstone disassembly/disassembler framework: Core (Arm, Arm64, BPF, EVM, M68K, M680X, MOS65xx, Mips, PPC, RISCV, Sparc, SystemZ, TMS320C64x, Web Assembly, X86, X86_64, XCore) + bindings.
+- [**3920**Star][2y] [C#] [shadowsocksr-backup/shadowsocksr-csharp](https://github.com/shadowsocksr-backup/shadowsocksr-csharp)
+- [**3915**Star][16d] [Rust] [svenstaro/genact](https://github.com/svenstaro/genact) a nonsense activity generator
+- [**3893**Star][2d] [C++] [baldurk/renderdoc](https://github.com/baldurk/renderdoc) RenderDoc is a stand-alone graphics debugging tool.
+- [**3878**Star][2m] [PHP] [fuzzdb-project/fuzzdb](https://github.com/fuzzdb-project/fuzzdb) Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
+- [**3869**Star][2d] [Py] [secureauthcorp/impacket](https://github.com/SecureAuthCorp/impacket) Impacket is a collection of Python classes for working with network protocols.
+- [**3848**Star][7d] [JS] [shadowsocks/shadowsocks-manager](https://github.com/shadowsocks/shadowsocks-manager) A shadowsocks manager tool for multi user and traffic control.
+- [**3845**Star][2d] [hq450/fancyss_history_package](https://github.com/hq450/fancyss_history_package) 科学上网插件的离线安装包储存在这里
+- [**3838**Star][2m] [ObjC] [sveinbjornt/sloth](https://github.com/sveinbjornt/sloth) Mac app that shows all open files, directories and sockets in use by all running processes. Nice GUI for lsof.
+- [**3831**Star][4y] [iosre/iosappreverseengineering](https://github.com/iosre/iosappreverseengineering) The world’s 1st book of very detailed iOS App reverse engineering skills :)
+- [**3813**Star][1m] [jivoi/awesome-osint](https://github.com/jivoi/awesome-osint) A curated list of amazingly awesome open source intelligence tools and resources
+- [**3799**Star][5y] [shadowsocksr-backup/shadowsocks-rss](https://github.com/shadowsocksr-backup/shadowsocks-rss) ShadowsocksR update rss, SSR organization
+- [**3767**Star][10m] [Py] [longld/peda](https://github.com/longld/peda) Python Exploit Development Assistance for GDB
+- [**3763**Star][2m] [Py] [paralax/awesome-honeypots](https://github.com/paralax/awesome-honeypots) an awesome list of honeypot resources
+- [**3755**Star][2m] [PHP] [ethicalhack3r/dvwa](https://github.com/ethicalhack3r/DVWA) Damn Vulnerable Web Application (DVWA)
+- [**3752**Star][2m] [Go] [microsoft/ethr](https://github.com/microsoft/ethr) Ethr is a Network Performance Measurement Tool for TCP, UDP & HTTP.
+- [**3736**Star][8d] [Go] [hashicorp/consul-template](https://github.com/hashicorp/consul-template) Template rendering, notifier, and supervisor for
+- [**3733**Star][2m] [C] [iaik/meltdown](https://github.com/iaik/meltdown) This repository contains several applications, demonstrating the Meltdown bug.
+- [**3730**Star][4m] [Py] [malwaredllc/byob](https://github.com/malwaredllc/byob) BYOB (Build Your Own Botnet)
+- [**3719**Star][6d] [jjqqkk/chromium](https://github.com/jjqqkk/chromium) Chromium browser with SSL VPN. Use this browser to unblock websites.
+- [**3713**Star][2d] [C] [atmosphere-nx/atmosphere](https://github.com/atmosphere-nx/atmosphere) Atmosphère is a work-in-progress customized firmware for the Nintendo Switch.
+- [**3684**Star][2y] [JS] [samyk/evercookie](https://github.com/samyk/evercookie) Produces persistent, respawning "super" cookies in a browser, abusing over a dozen techniques. Its goal is to identify users after they've removed standard cookies and other privacy data such as Flash cookies (LSOs), HTML5 storage, SilverLight storage, and others.
+- [**3682**Star][10d] [HTML] [hamukazu/lets-get-arrested](https://github.com/hamukazu/lets-get-arrested) This project is intended to protest against the police in Japan
+- [**3670**Star][2d] [JS] [lesspass/lesspass](https://github.com/lesspass/lesspass)
+- [**3668**Star][8d] [C#] [0xd4d/de4dot](https://github.com/0xd4d/de4dot) .NET deobfuscator and unpacker.
+- [**3667**Star][1y] [Py] [misterch0c/shadowbroker](https://github.com/misterch0c/shadowbroker) The Shadow Brokers "Lost In Translation" leak
+- [**3666**Star][5m] [C] [secwiki/windows-kernel-exploits](https://github.com/secwiki/windows-kernel-exploits) windows-kernel-exploits Windows平台提权漏洞集合
+- [**3663**Star][4m] [C] [facebook/fishhook](https://github.com/facebook/fishhook) A library that enables dynamically rebinding symbols in Mach-O binaries running on iOS.
+- [**3652**Star][4d] [acl4ssr/acl4ssr](https://github.com/acl4ssr/acl4ssr) SSR 去广告ACL规则/SS完整GFWList规则,Telegram频道订阅地址
+- [**3647**Star][2y] [Py] [qiyeboy/ipproxypool](https://github.com/qiyeboy/ipproxypool) IPProxyPool代理池项目,提供代理ip
+- [**3622**Star][6d] [TS] [javascript-obfuscator/javascript-obfuscator](https://github.com/javascript-obfuscator/javascript-obfuscator) A powerful obfuscator for JavaScript and Node.js
+- [**3621**Star][7d] [HTML] [consensys/smart-contract-best-practices](https://github.com/consensys/smart-contract-best-practices) A guide to smart contract security best practices
+- [**3619**Star][5y] [C#] [brandonlw/psychson](https://github.com/brandonlw/Psychson) Phison 2251-03 (2303) Custom Firmware & Existing Firmware Patches (BadUSB)
+- [**3611**Star][2m] [Java] [ffay/lanproxy](https://github.com/ffay/lanproxy) lanproxy是一个将局域网个人电脑、服务器代理到公网的内网穿透工具,支持tcp流量转发,可支持任何tcp上层协议(访问内网网站、本地支付接口调试、ssh访问、远程桌面...)。目前市面上提供类似服务的有花生壳、TeamView、GoToMyCloud等等,但要使用第三方的公网服务器就必须为第三方付费,并且这些服务都有各种各样的限制,此外,由于数据包会流经第三方,因此对数据安全也是一大隐患。技术交流QQ群 946273429
+- [**3604**Star][8d] [PS] [bloodhoundad/bloodhound](https://github.com/BloodHoundAD/BloodHound) a single page Javascript web application, uses graph theory to reveal the hidden and often unintended relationships within an Active Directory environment.
+- [**3598**Star][26d] [C++] [anbox/anbox](https://github.com/anbox/anbox) a container-based approach to boot a full Android system on a regular GNU/Linux system
- [**3597**Star][1y] [C#] [nummer/destroy-windows-10-spying](https://github.com/nummer/destroy-windows-10-spying) Destroy Windows Spying tool
-- [**3594**Star][2m] [Java] [ffay/lanproxy](https://github.com/ffay/lanproxy) lanproxy是一个将局域网个人电脑、服务器代理到公网的内网穿透工具,支持tcp流量转发,可支持任何tcp上层协议(访问内网网站、本地支付接口调试、ssh访问、远程桌面...)。目前市面上提供类似服务的有花生壳、TeamView、GoToMyCloud等等,但要使用第三方的公网服务器就必须为第三方付费,并且这些服务都有各种各样的限制,此外,由于数据包会流经第三方,因此对数据安全也是一大隐患。技术交流QQ群 946273429
-- [**3591**Star][3y] [Perl] [x0rz/eqgrp](https://github.com/x0rz/eqgrp) Decrypted content of eqgrp-auction-file.tar.xz
-- [**3587**Star][2m] [PowerShell] [bloodhoundad/bloodhound](https://github.com/BloodHoundAD/BloodHound) a single page Javascript web application, uses graph theory to reveal the hidden and often unintended relationships within an Active Directory environment.
-- [**3578**Star][24d] [C++] [anbox/anbox](https://github.com/anbox/anbox) a container-based approach to boot a full Android system on a regular GNU/Linux system
-- [**3565**Star][7d] [Shell] [drwetter/testssl.sh](https://github.com/drwetter/testssl.sh) Testing TLS/SSL encryption anywhere on any port
-- [**3560**Star][17d] [C] [nmap/nmap](https://github.com/nmap/nmap) Nmap - the Network Mapper. Github mirror of official SVN repository.
-- [**3544**Star][6y] [R] [johnmyleswhite/ml_for_hackers](https://github.com/johnmyleswhite/ml_for_hackers) Code accompanying the book "Machine Learning for Hackers"
+- [**3595**Star][3y] [Perl] [x0rz/eqgrp](https://github.com/x0rz/eqgrp) Decrypted content of eqgrp-auction-file.tar.xz
+- [**3583**Star][3d] [Shell] [drwetter/testssl.sh](https://github.com/drwetter/testssl.sh) Testing TLS/SSL encryption anywhere on any port
+- [**3580**Star][5d] [C] [nmap/nmap](https://github.com/nmap/nmap) Nmap - the Network Mapper. Github mirror of official SVN repository.
+- [**3562**Star][5d] [Pascal] [cheat-engine/cheat-engine](https://github.com/cheat-engine/cheat-engine) Cheat Engine. A development environment focused on modding
+- [**3542**Star][6y] [R] [johnmyleswhite/ml_for_hackers](https://github.com/johnmyleswhite/ml_for_hackers) Code accompanying the book "Machine Learning for Hackers"
+- [**3540**Star][6d] [blacckhathaceekr/pentesting-bible](https://github.com/blacckhathaceekr/pentesting-bible) links reaches 10000 links & 10000 pdf files .Learn Ethical Hacking and penetration testing .hundreds of ethical hacking & penetration testing & red team & cyber security & computer science resources.
- [**3538**Star][4m] [Shell] [chengr28/revokechinacerts](https://github.com/chengr28/revokechinacerts) Revoke Chinese certificates.
-- [**3525**Star][8d] [Pascal] [cheat-engine/cheat-engine](https://github.com/cheat-engine/cheat-engine) Cheat Engine. A development environment focused on modding
-- [**3503**Star][14d] [JS] [aol/moloch](https://github.com/aol/moloch) large scale, full packet capturing, indexing, and database system.
-- [**3494**Star][8m] [Go] [fanpei91/torsniff](https://github.com/fanpei91/torsniff) torsniff - a sniffer that sniffs torrents from BitTorrent network
-- [**3494**Star][8m] [Go] [fanpei91/torsniff](https://github.com/fanpei91/torsniff) a sniffer that sniffs torrents from BitTorrent network
-- [**3493**Star][3y] [C] [hak5darren/usb-rubber-ducky](https://github.com/hak5darren/usb-rubber-ducky)
-- [**3482**Star][9m] [C] [rpisec/mbe](https://github.com/rpisec/mbe) Course materials for Modern Binary Exploitation by RPISEC
-- [**3481**Star][13d] [blacckhathaceekr/pentesting-bible](https://github.com/blacckhathaceekr/pentesting-bible) links reaches 10000 links & 10000 pdf files .Learn Ethical Hacking and penetration testing .hundreds of ethical hacking & penetration testing & red team & cyber security & computer science resources.
-- [**3468**Star][5m] [PHP] [hanc00l/wooyun_public](https://github.com/hanc00l/wooyun_public) This repo is archived. Thanks for wooyun! 乌云公开漏洞、知识库爬虫和搜索 crawl and search for wooyun.org public bug(vulnerability) and drops
-- [**3464**Star][15d] [C] [cyan4973/xxhash](https://github.com/cyan4973/xxhash) Extremely fast non-cryptographic hash algorithm
-- [**3436**Star][7d] [C] [shellphish/how2heap](https://github.com/shellphish/how2heap) A repository for learning various heap exploitation techniques.
-- [**3431**Star][13d] [Java] [meituan-dianping/robust](https://github.com/meituan-dianping/robust) Robust is an Android HotFix solution with high compatibility and high stability. Robust can fix bugs immediately without a reboot.
-- [**3421**Star][13d] [Perl] [sullo/nikto](https://github.com/sullo/nikto) Nikto web server scanner
-- [**3412**Star][25d] [icodesign/potatso](https://github.com/icodesign/Potatso) Potatso is an iOS client that implements different proxies with the leverage of NetworkExtension framework in iOS 10+.
-- [**3392**Star][5m] [Go] [jpillora/chisel](https://github.com/jpillora/chisel) A fast TCP tunnel over HTTP
-- [**3387**Star][2y] [shadowsocksrr/shadowsocks-rss](https://github.com/shadowsocksrr/shadowsocks-rss) ShadowsocksR update rss, SSR organization
-- [**3383**Star][22d] [PowerShell] [samratashok/nishang](https://github.com/samratashok/nishang) Offensive PowerShell for red team, penetration testing and offensive security.
-- [**3326**Star][13d] [Py] [google/grr](https://github.com/google/grr) remote live forensics for incident response
-- [**3325**Star][5m] [C++] [wangyu-/udp2raw-tunnel](https://github.com/wangyu-/udp2raw-tunnel) A Tunnel which Turns UDP Traffic into Encrypted UDP/FakeTCP/ICMP Traffic by using Raw Socket,helps you Bypass UDP FireWalls(or Unstable UDP Environment)
-- [**3325**Star][7d] [jivoi/awesome-ml-for-cybersecurity](https://github.com/jivoi/awesome-ml-for-cybersecurity) Awesome Machine Learning for Cyber Security
-- [**3317**Star][7d] [Py] [stamparm/maltrail](https://github.com/stamparm/maltrail) Malicious traffic detection system
-- [**3317**Star][2y] [scanate/ethlist](https://github.com/scanate/ethlist) The Comprehensive Ethereum Reading List
-- [**3316**Star][2m] [C] [screetsec/thefatrat](https://github.com/screetsec/thefatrat) Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV softw…
-- [**3282**Star][8d] [Smarty] [anankke/sspanel-uim](https://github.com/anankke/sspanel-uim) Across the Great Wall we can reach every corner in the world
-- [**3280**Star][2m] [Swift] [yagiz/bagel](https://github.com/yagiz/bagel) a little native network debugging tool for iOS
-- [**3280**Star][20d] [C] [vanhauser-thc/thc-hydra](https://github.com/vanhauser-thc/thc-hydra) hydra
-- [**3269**Star][27d] [C] [microsoft/windows-driver-samples](https://github.com/microsoft/windows-driver-samples) This repo contains driver samples prepared for use with Microsoft Visual Studio and the Windows Driver Kit (WDK). It contains both Universal Windows Driver and desktop-only driver samples.
-- [**3267**Star][3m] [C] [nbs-system/naxsi](https://github.com/nbs-system/naxsi) NAXSI is an open-source, high performance, low rules maintenance WAF for NGINX
-- [**3266**Star][12d] [C] [virustotal/yara](https://github.com/virustotal/yara) The pattern matching swiss knife
-- [**3258**Star][2m] [Py] [volatilityfoundation/volatility](https://github.com/volatilityfoundation/volatility) An advanced memory forensics framework
-- [**3258**Star][5y] [C++] [google/lmctfy](https://github.com/google/lmctfy) lmctfy is the open source version of Google’s container stack, which provides Linux application containers.
-- [**3255**Star][7d] [C] [mikebrady/shairport-sync](https://github.com/mikebrady/shairport-sync) AirPlay audio player. Shairport Sync adds multi-room capability with Audio Synchronisation
-- [**3253**Star][7m] [JS] [sindresorhus/speed-test](https://github.com/sindresorhus/speed-test) Test your internet connection speed and ping using speedtest.net from the CLI
-- [**3234**Star][8d] [Java] [oldmanpushcart/greys-anatomy](https://github.com/oldmanpushcart/greys-anatomy) Java诊断工具
+- [**3533**Star][14d] [C] [tencent/tencentos-tiny](https://github.com/tencent/tencentos-tiny) 腾讯物联网终端操作系统
+- [**3514**Star][3y] [C] [hak5darren/usb-rubber-ducky](https://github.com/hak5darren/usb-rubber-ducky)
+- [**3510**Star][2d] [JS] [aol/moloch](https://github.com/aol/moloch) large scale, full packet capturing, indexing, and database system.
+- [**3501**Star][8m] [Go] [fanpei91/torsniff](https://github.com/fanpei91/torsniff) torsniff - a sniffer that sniffs torrents from BitTorrent network
+- [**3501**Star][8m] [Go] [fanpei91/torsniff](https://github.com/fanpei91/torsniff) a sniffer that sniffs torrents from BitTorrent network
+- [**3493**Star][9m] [C] [rpisec/mbe](https://github.com/rpisec/mbe) Course materials for Modern Binary Exploitation by RPISEC
+- [**3485**Star][5m] [PHP] [hanc00l/wooyun_public](https://github.com/hanc00l/wooyun_public) This repo is archived. Thanks for wooyun! 乌云公开漏洞、知识库爬虫和搜索 crawl and search for wooyun.org public bug(vulnerability) and drops
+- [**3481**Star][8d] [C] [cyan4973/xxhash](https://github.com/cyan4973/xxhash) Extremely fast non-cryptographic hash algorithm
+- [**3471**Star][2m] [C++] [trojan-gfw/trojan](https://github.com/trojan-gfw/trojan) An unidentifiable mechanism that helps you bypass GFW.
+- [**3442**Star][9d] [C] [shellphish/how2heap](https://github.com/shellphish/how2heap) A repository for learning various heap exploitation techniques.
+- [**3442**Star][8d] [Java] [meituan-dianping/robust](https://github.com/meituan-dianping/robust) Robust is an Android HotFix solution with high compatibility and high stability. Robust can fix bugs immediately without a reboot.
+- [**3441**Star][15d] [Perl] [sullo/nikto](https://github.com/sullo/nikto) Nikto web server scanner
+- [**3419**Star][9d] [C] [mikebrady/shairport-sync](https://github.com/mikebrady/shairport-sync) AirPlay audio player. Shairport Sync adds multi-room capability with Audio Synchronisation
+- [**3412**Star][27d] [icodesign/potatso](https://github.com/icodesign/Potatso) Potatso is an iOS client that implements different proxies with the leverage of NetworkExtension framework in iOS 10+.
+- [**3410**Star][5m] [Go] [jpillora/chisel](https://github.com/jpillora/chisel) A fast TCP tunnel over HTTP
+- [**3408**Star][24d] [PS] [samratashok/nishang](https://github.com/samratashok/nishang) Offensive PowerShell for red team, penetration testing and offensive security.
+- [**3397**Star][2y] [shadowsocksrr/shadowsocks-rss](https://github.com/shadowsocksrr/shadowsocks-rss) ShadowsocksR update rss, SSR organization
+- [**3344**Star][2d] [jivoi/awesome-ml-for-cybersecurity](https://github.com/jivoi/awesome-ml-for-cybersecurity) Awesome Machine Learning for Cyber Security
+- [**3343**Star][6d] [C] [screetsec/thefatrat](https://github.com/screetsec/thefatrat) Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV softw…
+- [**3340**Star][5m] [C++] [wangyu-/udp2raw-tunnel](https://github.com/wangyu-/udp2raw-tunnel) A Tunnel which Turns UDP Traffic into Encrypted UDP/FakeTCP/ICMP Traffic by using Raw Socket,helps you Bypass UDP FireWalls(or Unstable UDP Environment)
+- [**3334**Star][10d] [Smarty] [anankke/sspanel-uim](https://github.com/anankke/sspanel-uim) Across the Great Wall we can reach every corner in the world
+- [**3331**Star][15d] [Py] [google/grr](https://github.com/google/grr) remote live forensics for incident response
+- [**3330**Star][2d] [Py] [stamparm/maltrail](https://github.com/stamparm/maltrail) Malicious traffic detection system
+- [**3319**Star][2y] [scanate/ethlist](https://github.com/scanate/ethlist) The Comprehensive Ethereum Reading List
+- [**3303**Star][22d] [C] [vanhauser-thc/thc-hydra](https://github.com/vanhauser-thc/thc-hydra) hydra
+- [**3301**Star][2m] [Swift] [yagiz/bagel](https://github.com/yagiz/bagel) a little native network debugging tool for iOS
+- [**3298**Star][9d] [C++] [fireice-uk/xmr-stak](https://github.com/fireice-uk/xmr-stak) Free Monero RandomX Miner and unified CryptoNight miner
+- [**3285**Star][7d] [C] [microsoft/windows-driver-samples](https://github.com/microsoft/windows-driver-samples) This repo contains driver samples prepared for use with Microsoft Visual Studio and the Windows Driver Kit (WDK). It contains both Universal Windows Driver and desktop-only driver samples.
+- [**3278**Star][6d] [C] [virustotal/yara](https://github.com/virustotal/yara) The pattern matching swiss knife
+- [**3276**Star][3m] [C] [nbs-system/naxsi](https://github.com/nbs-system/naxsi) NAXSI is an open-source, high performance, low rules maintenance WAF for NGINX
+- [**3263**Star][10d] [Java] [oldmanpushcart/greys-anatomy](https://github.com/oldmanpushcart/greys-anatomy) Java诊断工具
+- [**3262**Star][2m] [Py] [volatilityfoundation/volatility](https://github.com/volatilityfoundation/volatility) An advanced memory forensics framework
+- [**3260**Star][8d] [Shell] [toniblyx/my-arsenal-of-aws-security-tools](https://github.com/toniblyx/my-arsenal-of-aws-security-tools) List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.
+- [**3260**Star][5y] [C++] [google/lmctfy](https://github.com/google/lmctfy) lmctfy is the open source version of Google’s container stack, which provides Linux application containers.
+- [**3259**Star][7m] [JS] [sindresorhus/speed-test](https://github.com/sindresorhus/speed-test) Test your internet connection speed and ping using speedtest.net from the CLI
+- [**3255**Star][4d] [ObjC] [objective-see/lulu](https://github.com/objective-see/lulu) LuLu is the free macOS firewall
+- [**3247**Star][29d] [JS] [koenkk/zigbee2mqtt](https://github.com/koenkk/zigbee2mqtt) Zigbee
+- [**3242**Star][16d] [Py] [laramies/theharvester](https://github.com/laramies/theharvester) E-mails, subdomains and names Harvester - OSINT
+- [**3238**Star][2d] [TS] [jigsaw-code/outline-server](https://github.com/jigsaw-code/outline-server) Outline Manager, developed by Jigsaw. The Outline Manager application creates and manages Outline servers, powered by Shadowsocks. It uses the Electron framework to offer support for Windows, macOS and Linux.
+- [**3236**Star][5m] [Go] [meshbird/meshbird](https://github.com/meshbird/meshbird) cloud-native multi-region multi-cloud decentralized private networking
- [**3234**Star][2y] [CSS] [jbtronics/crookedstylesheets](https://github.com/jbtronics/crookedstylesheets) Webpage tracking only using CSS (and no JS)
-- [**3232**Star][5m] [Go] [meshbird/meshbird](https://github.com/meshbird/meshbird) cloud-native multi-region multi-cloud decentralized private networking
-- [**3230**Star][2m] [Objective-C] [objective-see/lulu](https://github.com/objective-see/lulu) LuLu is the free macOS firewall
-- [**3225**Star][18d] [Shell] [toniblyx/my-arsenal-of-aws-security-tools](https://github.com/toniblyx/my-arsenal-of-aws-security-tools) List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.
-- [**3216**Star][14d] [Py] [laramies/theharvester](https://github.com/laramies/theharvester) E-mails, subdomains and names Harvester - OSINT
-- [**3215**Star][27d] [JS] [koenkk/zigbee2mqtt](https://github.com/koenkk/zigbee2mqtt) Zigbee
-- [**3214**Star][4y] [C] [shadowsocks/chinadns](https://github.com/shadowsocks/chinadns) Protect yourself against DNS poisoning in China.
-- [**3214**Star][2m] [Go] [dvyukov/go-fuzz](https://github.com/dvyukov/go-fuzz) Randomized testing for Go
-- [**3210**Star][11d] [C] [tmate-io/tmate](https://github.com/tmate-io/tmate) Instant Terminal Sharing
-- [**3210**Star][1m] [TypeScript] [google/incremental-dom](https://github.com/google/incremental-dom) An in-place DOM diffing library
-- [**3209**Star][8d] [C] [betaflight/betaflight](https://github.com/betaflight/betaflight) Open Source Flight Controller Firmware
-- [**3205**Star][2m] [Shell] [gfw-breaker/ssr-accounts](https://github.com/gfw-breaker/ssr-accounts) 一键部署Shadowsocks服务;免费Shadowsocks账号分享;免费SS账号分享; 翻墙;无界,自由门,SquirrelVPN
-- [**3202**Star][4m] [Objective-C] [naituw/ipapatch](https://github.com/naituw/ipapatch) Patch iOS Apps, The Easy Way, Without Jailbreak.
-- [**3201**Star][7m] [HTML] [leizongmin/js-xss](https://github.com/leizongmin/js-xss) Sanitize untrusted HTML (to prevent XSS) with a configuration specified by a Whitelist
-- [**3184**Star][7d] [Go] [mozilla/sops](https://github.com/mozilla/sops) Simple and flexible tool for managing secrets
-- [**3182**Star][3m] [C] [yarrick/iodine](https://github.com/yarrick/iodine) Official git repo for iodine dns tunnel
-- [**3182**Star][1y] [Py] [kootenpv/whereami](https://github.com/kootenpv/whereami) Uses WiFi signals and machine learning (sklearn's RandomForest) to predict where you are.
-- [**3180**Star][13d] [Py] [maurosoria/dirsearch](https://github.com/maurosoria/dirsearch) Web path scanner
-- [**3174**Star][8d] [Rich Text Format] [the-art-of-hacking/h4cker](https://github.com/The-Art-of-Hacking/h4cker) 资源收集:hacking、渗透、数字取证、事件响应、漏洞研究、漏洞开发、逆向
-- [**3168**Star][1m] [C++] [spiderlabs/modsecurity](https://github.com/spiderlabs/modsecurity) ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analys…
-- [**3164**Star][6m] [hslatman/awesome-threat-intelligence](https://github.com/hslatman/awesome-threat-intelligence) A curated list of Awesome Threat Intelligence resources
-- [**3163**Star][24d] [C] [magnumripper/johntheripper](https://github.com/magnumripper/johntheripper) This is the official repo for John the Ripper, "Jumbo" version. The "bleeding-jumbo" branch is based on 1.9.0-Jumbo-1 which was released on May 14, 2019. An import of the "core" version of john this jumbo was based on (or newer) is found in the "master" branch (CVS:
-- [**3156**Star][1m] [C] [valdikss/goodbyedpi](https://github.com/valdikss/goodbyedpi) GoodbyeDPI—Passive Deep Packet Inspection blocker and Active DPI circumvention utility (for Windows)
-- [**3145**Star][1y] [Shell] [toyodadoubi/doubi](https://github.com/toyodadoubi/doubi) 一个逗比写的各种逗比脚本~
-- [**3128**Star][2y] [shadowsocksr-backup/shadowsocksr-android](https://github.com/shadowsocksr-backup/shadowsocksr-android) A ShadowsocksR client for Android
-- [**3120**Star][10d] [C] [meetecho/janus-gateway](https://github.com/meetecho/janus-gateway) Janus WebRTC Server
-- [**3113**Star][28d] [CSS] [readthedocs/sphinx_rtd_theme](https://github.com/readthedocs/sphinx_rtd_theme) Sphinx theme for readthedocs.org
-- [**3112**Star][2m] [C++] [trojan-gfw/trojan](https://github.com/trojan-gfw/trojan) An unidentifiable mechanism that helps you bypass GFW.
-- [**3109**Star][7d] [Shell] [speed47/spectre-meltdown-checker](https://github.com/speed47/spectre-meltdown-checker) Spectre, Meltdown, Foreshadow, Fallout, RIDL, ZombieLoad vulnerability/mitigation checker for Linux & BSD
-- [**3109**Star][2m] [PowerShell] [fireeye/commando-vm](https://github.com/fireeye/commando-vm) Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@fireeye.com
-- [**3108**Star][4m] [C++] [px4/firmware](https://github.com/px4/firmware) PX4 Autopilot Software
-- [**3106**Star][7d] [C] [qemu/qemu](https://github.com/qemu/qemu) Official QEMU mirror. Please see
-- [**3103**Star][16d] [Shell] [1n3/sn1per](https://github.com/1n3/sn1per) Automated pentest framework for offensive security experts
-- [**3102**Star][7d] [JS] [duo-labs/cloudmapper](https://github.com/duo-labs/cloudmapper) CloudMapper helps you analyze your Amazon Web Services (AWS) environments.
-- [**3096**Star][28d] [meirwah/awesome-incident-response](https://github.com/meirwah/awesome-incident-response) A curated list of tools for incident response
-- [**3094**Star][2m] [Py] [byt3bl33d3r/crackmapexec](https://github.com/byt3bl33d3r/crackmapexec) A swiss army knife for pentesting networks
-- [**3091**Star][1m] [Java] [deathmarine/luyten](https://github.com/deathmarine/luyten) An Open Source Java Decompiler Gui for Procyon
-- [**3085**Star][10d] [Shell] [trimstray/htrace.sh](https://github.com/trimstray/htrace.sh) My simple Swiss Army knife for http/https troubleshooting and profiling.
-- [**3084**Star][11d] [Py] [tribler/tribler](https://github.com/tribler/tribler) Privacy enhanced BitTorrent client with P2P content discovery
-- [**3084**Star][8d] [Shell] [softwaredownload/openwrt-fanqiang](https://github.com/softwaredownload/openwrt-fanqiang) 最好的路由器翻墙、科学上网教程—OpenWrt—shadowsocks
-- [**3069**Star][9m] [JS] [jipegit/osxauditor](https://github.com/jipegit/osxauditor) OS X Auditor is a free Mac OS X computer forensics tool
-- [**3066**Star][3m] [C] [zmap/zmap](https://github.com/zmap/zmap) ZMap is a fast single packet network scanner designed for Internet-wide network surveys.
-- [**3065**Star][9d] [Go] [tencent/bk-cmdb](https://github.com/tencent/bk-cmdb) 蓝鲸智云配置平台(BlueKing CMDB)
-- [**3062**Star][1y] [Swift] [zhuhaow/spechtlite](https://github.com/zhuhaow/spechtlite) A rule-based proxy for macOS
-- [**3061**Star][20d] [C] [unicorn-engine/unicorn](https://github.com/unicorn-engine/unicorn) Unicorn CPU emulator framework (ARM, AArch64, M68K, Mips, Sparc, X86)
-- [**3059**Star][1m] [Java] [calebfenton/simplify](https://github.com/calebfenton/simplify) Generic Android Deobfuscator
-- [**3058**Star][7m] [Go] [michenriksen/aquatone](https://github.com/michenriksen/aquatone) A Tool for Domain Flyovers
-- [**3046**Star][4m] [C++] [google/robotstxt](https://github.com/google/robotstxt) The repository contains Google's robots.txt parser and matcher as a C++ library (compliant to C++11).
-- [**3041**Star][2m] [JS] [valve/fingerprintjs](https://github.com/valve/fingerprintjs) Anonymous browser fingerprint
-- [**3039**Star][3m] [Py] [spiderlabs/responder](https://github.com/spiderlabs/responder) a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.
-- [**3007**Star][9m] [C] [secwiki/linux-kernel-exploits](https://github.com/secwiki/linux-kernel-exploits) linux-kernel-exploits Linux平台提权漏洞集合
-- [**2991**Star][1y] [PHP] [owner888/phpspider](https://github.com/owner888/phpspider) 《我用爬虫一天时间“偷了”知乎一百万用户,只为证明PHP是世界上最好的语言 》所使用的程序
-- [**2983**Star][2m] [Go] [gwuhaolin/lightsocks](https://github.com/gwuhaolin/lightsocks) lightweight network obfuscate proxy, based on socks5, to replace shadowsocks
-- [**2982**Star][7d] [Lua] [ntop/ntopng](https://github.com/ntop/ntopng) Web-based Traffic and Security Network Traffic Monitoring
-- [**2978**Star][7d] [Py] [guardicore/monkey](https://github.com/guardicore/monkey) Infection Monkey - An automated pentest tool
-- [**2962**Star][14d] [Objective-C] [google/santa](https://github.com/google/santa) A binary whitelisting/blacklisting system for macOS
-- [**2947**Star][27d] [Go] [cookiey/yearning](https://github.com/cookiey/yearning) A most popular sql audit platform for mysql
-- [**2937**Star][13d] [JS] [webgoat/webgoat](https://github.com/webgoat/webgoat) A deliberately insecure Web Application
-- [**2937**Star][2y] [phith0n/mind-map](https://github.com/phith0n/mind-map) 各种安全相关思维导图整理收集
-- [**2936**Star][1m] [Py] [andresriancho/w3af](https://github.com/andresriancho/w3af) web application attack and audit framework, the open source web vulnerability scanner.
-- [**2935**Star][19d] [Py] [cowrie/cowrie](https://github.com/cowrie/cowrie) Cowrie SSH/Telnet Honeypot
-- [**2930**Star][1y] [Py] [danmcinerney/wifijammer](https://github.com/danmcinerney/wifijammer) Continuously jam all wifi clients/routers
-- [**2930**Star][11m] [Shell] [91yun/serverspeeder](https://github.com/91yun/serverspeeder) 锐速破解版
-- [**2927**Star][7d] [Zeek] [zeek/zeek](https://github.com/zeek/zeek) Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.
-- [**2916**Star][15d] [Py] [twintproject/twint](https://github.com/twintproject/twint) An advanced Twitter scraping & OSINT tool written in Python that doesn't use Twitter's API, allowing you to scrape a user's followers, following, Tweets and more while evading most API limitations.
-- [**2912**Star][2m] [Dockerfile] [thinkdevelop/free-ss-ssr](https://github.com/thinkdevelop/free-ss-ssr) SS账号、SSR账号、V2Ray账号
-- [**2907**Star][21d] [Go] [securego/gosec](https://github.com/securego/gosec) Golang security checker
-- [**2897**Star][1y] [Py] [byt3bl33d3r/mitmf](https://github.com/byt3bl33d3r/mitmf) Framework for Man-In-The-Middle attacks
-- [**2895**Star][10d] [C] [libfuse/sshfs](https://github.com/libfuse/sshfs) A network filesystem client to connect to SSH servers
-- [**2892**Star][11d] [secfigo/awesome-fuzzing](https://github.com/secfigo/awesome-fuzzing) A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Development like root cause analysis.
-- [**2891**Star][20d] [Py] [trustedsec/ptf](https://github.com/trustedsec/ptf) a way for modular support for up-to-date tools.
-- [**2876**Star][7m] [C] [p-h-c/phc-winner-argon2](https://github.com/p-h-c/phc-winner-argon2) The password hash Argon2, winner of PHC
-- [**2874**Star][4y] [Objective-C] [maciekish/iresign](https://github.com/maciekish/iresign) iReSign allows iDevice app bundles (.ipa) files to be signed or resigned with a digital certificate from Apple for distribution. This tool is aimed at enterprises users, for enterprise deployment, when the person signing the app is different than the person(s) developing it.
-- [**2851**Star][10d] [JS] [evilsocket/pwnagotchi](https://github.com/evilsocket/pwnagotchi) Deep Reinforcement Learning instrumenting bettercap for WiFi pwning.
-- [**2850**Star][8d] [C] [lxc/lxc](https://github.com/lxc/lxc) LXC - Linux Containers
-- [**2840**Star][5m] [Py] [instantbox/instantbox](https://github.com/instantbox/instantbox) Get a clean, ready-to-go Linux box in seconds.
-- [**2838**Star][11d] [Objective-C] [facebook/idb](https://github.com/facebook/idb) idb is a flexible command line interface for automating iOS simulators and devices
-- [**2834**Star][8m] [C++] [wangyu-/udpspeeder](https://github.com/wangyu-/udpspeeder) A Tunnel which Improves your Network Quality on a High-latency Lossy Link by using Forward Error Correction,for All Traffics(TCP/UDP/ICMP)
-- [**2830**Star][9d] [HTML] [ctf-wiki/ctf-wiki](https://github.com/ctf-wiki/ctf-wiki) CTF Wiki Online. Come and join us, we need you!
-- [**2829**Star][21d] [C] [ossec/ossec-hids](https://github.com/ossec/ossec-hids) Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.
-- [**2825**Star][15d] [Py] [espressif/esptool](https://github.com/espressif/esptool) ESP8266 and ESP32 serial bootloader utility
-- [**2825**Star][8m] [Shell] [goreliu/wsl-terminal](https://github.com/goreliu/wsl-terminal) Terminal emulator for Windows Subsystem for Linux (WSL)
-- [**2823**Star][12d] [Go] [99designs/aws-vault](https://github.com/99designs/aws-vault) A vault for securely storing and accessing AWS credentials in development environments
-- [**2820**Star][1m] [Assembly] [cirosantilli/x86-bare-metal-examples](https://github.com/cirosantilli/x86-bare-metal-examples) Dozens of minimal operating systems to learn x86 system programming. Tested on Ubuntu 17.10 host in QEMU 2.10 and real hardware. Userland cheat at:
-- [**2819**Star][2y] [CSS] [maxchehab/css-keylogging](https://github.com/maxchehab/css-keylogging) Chrome extension and Express server that exploits keylogging abilities of CSS.
-- [**2815**Star][4m] [C] [juliocesarfort/public-pentesting-reports](https://github.com/juliocesarfort/public-pentesting-reports) Curated list of public penetration test reports released by several consulting firms and academic security groups
-- [**2810**Star][28d] [C] [tmk/tmk_keyboard](https://github.com/tmk/tmk_keyboard) Keyboard firmwares for Atmel AVR and Cortex-M
-- [**2810**Star][2m] [infosecn1nja/red-teaming-toolkit](https://github.com/infosecn1nja/red-teaming-toolkit) A collection of open source and commercial tools that aid in red team operations.
-- [**2805**Star][1m] [paulsec/awesome-sec-talks](https://github.com/paulsec/awesome-sec-talks) A collected list of awesome security talks
-- [**2804**Star][8m] [C#] [quasar/quasarrat](https://github.com/quasar/quasarrat) Remote Administration Tool for Windows
-- [**2802**Star][9m] [Py] [plasma-disassembler/plasma](https://github.com/plasma-disassembler/plasma) Plasma is an interactive disassembler for x86/ARM/MIPS. It can generates indented pseudo-code with colored syntax.
-- [**2787**Star][17d] [Py] [androguard/androguard](https://github.com/androguard/androguard) Reverse engineering, Malware and goodware analysis of Android applications ... and more (ninja !)
-- [**2783**Star][2y] [C] [seclab-ucr/intang](https://github.com/seclab-ucr/intang) research project for circumventing the "TCP reset attack" from the Great Firewall of China (GFW) by disrupting/desynchronizing the TCP Control Block (TCB) on the censorship devices.
-- [**2779**Star][28d] [Makefile] [shadowsocks/openwrt-shadowsocks](https://github.com/shadowsocks/openwrt-shadowsocks) Shadowsocks-libev for OpenWrt/LEDE
-- [**2776**Star][4y] [Lua] [loveshell/ngx_lua_waf](https://github.com/loveshell/ngx_lua_waf) ngx_lua_waf是一个基于lua-nginx-module(openresty)的web应用防火墙
-- [**2767**Star][2m] [Go] [kgretzky/evilginx2](https://github.com/kgretzky/evilginx2) Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication
-- [**2763**Star][1m] [JS] [trufflesuite/ganache-cli](https://github.com/trufflesuite/ganache-cli) Fast Ethereum RPC client for testing and development
-- [**2761**Star][10d] [Py] [jrohy/multi-v2ray](https://github.com/jrohy/multi-v2ray) v2ray easy delpoy & manage tool, support multiple user & protocol manage
-- [**2755**Star][7d] [C++] [qtox/qtox](https://github.com/qtox/qtox) qTox is a chat, voice, video, and file transfer IM client using the encrypted peer-to-peer Tox protocol.
-- [**2746**Star][8d] [C] [processhacker/processhacker](https://github.com/processhacker/processhacker) A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware.
-- [**2736**Star][8m] [Py] [p0cl4bs/wifi-pumpkin](https://github.com/P0cL4bs/WiFi-Pumpkin) Framework for Rogue Wi-Fi Access Point Attack
-- [**2736**Star][1y] [C] [vanhoefm/krackattacks-scripts](https://github.com/vanhoefm/krackattacks-scripts) test if clients or access points (APs) are affected by the KRACK attack against WPA2
-- [**2735**Star][7d] [TypeScript] [webhintio/hint](https://github.com/webhintio/hint)
-- [**2731**Star][22d] [Makefile] [theos/theos](https://github.com/theos/theos) A cross-platform suite of tools for building and deploying software for iOS and other platforms.
-- [**2727**Star][2m] [secwiki/sec-chart](https://github.com/secwiki/sec-chart) 安全思维导图集合
-- [**2727**Star][3y] [Py] [hephaest0s/usbkill](https://github.com/hephaest0s/usbkill) an anti-forensic kill-switch that waits for a change on your USB ports and then immediately shuts down your computer.
-- [**2726**Star][16d] [JS] [cyu/rack-cors](https://github.com/cyu/rack-cors) Rack Middleware for handling Cross-Origin Resource Sharing (CORS), which makes cross-origin AJAX possible.
-- [**2715**Star][21d] [JS] [s0md3v/awesomexss](https://github.com/s0md3v/AwesomeXSS) Awesome XSS stuff
-- [**2701**Star][3y] [Eagle] [samyk/magspoof](https://github.com/samyk/magspoof) A portable device that can spoof/emulate any magnetic stripe, credit card or hotel card "wirelessly", even on standard magstripe (non-NFC/RFID) readers. It can disable Chip&PIN and predict AMEX card numbers with 100% accuracy.
-- [**2700**Star][1m] [C] [taviso/loadlibrary](https://github.com/taviso/loadlibrary) Porting Windows Dynamic Link Libraries to Linux
-- [**2683**Star][4m] [Objective-C] [dantheman827/ios-app-signer](https://github.com/dantheman827/ios-app-signer) This is an app for OS X that can (re)sign apps and bundle them into ipa files that are ready to be installed on an iOS device.
-- [**2681**Star][1m] [Objective-C] [kjcracks/clutch](https://github.com/kjcracks/clutch) Fast iOS executable dumper
-- [**2665**Star][7d] [Go] [google/syzkaller](https://github.com/google/syzkaller) syzkaller is an unsupervised coverage-guided kernel fuzzer
-- [**2660**Star][7d] [PowerShell] [redcanaryco/atomic-red-team](https://github.com/redcanaryco/atomic-red-team) Small and highly portable detection tests based on MITRE's ATT&CK.
-- [**2660**Star][1y] [Py] [mame82/p4wnp1](https://github.com/mame82/p4wnp1) P4wnP1 is a highly customizable USB attack platform, based on a low cost Raspberry Pi Zero or Raspberry Pi Zero W.
-- [**2658**Star][12d] [Go] [aquasecurity/trivy](https://github.com/aquasecurity/trivy) A Simple and Comprehensive Vulnerability Scanner for Containers, Suitable for CI
-- [**2648**Star][3m] [Py] [drivendata/cookiecutter-data-science](https://github.com/drivendata/cookiecutter-data-science) A logical, reasonably standardized, but flexible project structure for doing and sharing data science work.
-- [**2643**Star][2m] [rmusser01/infosec_reference](https://github.com/rmusser01/infosec_reference) An Information Security Reference That Doesn't Suck
-- [**2638**Star][3m] [Java] [frohoff/ysoserial](https://github.com/frohoff/ysoserial) A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
-- [**2634**Star][2m] [xairy/linux-kernel-exploitation](https://github.com/xairy/linux-kernel-exploitation) A bunch of links related to Linux kernel exploitation
-- [**2633**Star][3m] [Java] [teevity/ice](https://github.com/teevity/ice) AWS Usage Tool
-- [**2633**Star][1y] [HTML] [chybeta/web-security-learning](https://github.com/chybeta/web-security-learning) Web-Security-Learning
-- [**2622**Star][15d] [JS] [bkimminich/juice-shop](https://github.com/bkimminich/juice-shop) OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
-- [**2619**Star][8m] [leandromoreira/linux-network-performance-parameters](https://github.com/leandromoreira/linux-network-performance-parameters) Learn where some of the network sysctl variables fit into the Linux/Kernel network flow
-- [**2610**Star][2m] [Swift] [zhuhaow/nekit](https://github.com/zhuhaow/nekit) A toolkit for Network Extension Framework
-- [**2601**Star][3y] [Ruby] [arachni/arachni](https://github.com/arachni/arachni) Web Application Security Scanner Framework
-- [**2600**Star][21d] [JS] [knownsec/kcon](https://github.com/knownsec/kcon) KCon is a famous Hacker Con powered by Knownsec Team.
-- [**2598**Star][8d] [JS] [popcorn-official/popcorn-desktop](https://github.com/popcorn-official/popcorn-desktop) Popcorn Time is a multi-platform, free software BitTorrent client that includes an integrated media player. Desktop ( Windows / Mac / Linux ) a Butter-Project Fork
-- [**2589**Star][19d] [C++] [fanout/pushpin](https://github.com/fanout/pushpin) Reverse proxy for realtime web services
-- [**2588**Star][1m] [pditommaso/awesome-pipeline](https://github.com/pditommaso/awesome-pipeline) A curated list of awesome pipeline toolkits inspired by Awesome Sysadmin
-- [**2570**Star][2m] [C] [huntergregal/mimipenguin](https://github.com/huntergregal/mimipenguin) dump 当前Linux用户的登录密码
-- [**2565**Star][1m] [Shell] [medicean/vulapps](https://github.com/medicean/vulapps) 快速搭建各种漏洞环境(Various vulnerability environment)
-- [**2564**Star][8y] [C] [id-software/quake](https://github.com/id-software/quake) Quake GPL Source Release
-- [**2563**Star][5m] [Java] [google/binnavi](https://github.com/google/binnavi) a binary analysis IDE that allows to inspect, navigate, edit and annotate control flow graphs and call graphs of disassembled code.
-- [**2555**Star][1m] [C] [esnet/iperf](https://github.com/esnet/iperf) A TCP, UDP, and SCTP network bandwidth measurement tool
-- [**2554**Star][2y] [evilsocket/bettercap](https://github.com/evilsocket/bettercap) DEPRECATED, bettercap developement moved here:
-- [**2547**Star][3m] [Py] [greenwolf/social_mapper](https://github.com/Greenwolf/social_mapper) 对多个社交网站的用户Profile图片进行大规模的人脸识别
-- [**2537**Star][6m] [C] [geohot/qira](https://github.com/geohot/qira) QEMU Interactive Runtime Analyser
+- [**3233**Star][9d] [Go] [mozilla/sops](https://github.com/mozilla/sops) Simple and flexible tool for managing secrets
+- [**3228**Star][2d] [C] [betaflight/betaflight](https://github.com/betaflight/betaflight) Open Source Flight Controller Firmware
+- [**3223**Star][2m] [Shell] [gfw-breaker/ssr-accounts](https://github.com/gfw-breaker/ssr-accounts) 一键部署Shadowsocks服务;免费Shadowsocks账号分享;免费SS账号分享; 翻墙;无界,自由门,SquirrelVPN
+- [**3222**Star][6d] [C] [tmate-io/tmate](https://github.com/tmate-io/tmate) Instant Terminal Sharing
+- [**3222**Star][6d] [Go] [dvyukov/go-fuzz](https://github.com/dvyukov/go-fuzz) Randomized testing for Go
+- [**3221**Star][4y] [C] [shadowsocks/chinadns](https://github.com/shadowsocks/chinadns) Protect yourself against DNS poisoning in China.
+- [**3213**Star][1m] [TS] [google/incremental-dom](https://github.com/google/incremental-dom) An in-place DOM diffing library
+- [**3210**Star][7m] [HTML] [leizongmin/js-xss](https://github.com/leizongmin/js-xss) Sanitize untrusted HTML (to prevent XSS) with a configuration specified by a Whitelist
+- [**3209**Star][5m] [ObjC] [naituw/ipapatch](https://github.com/naituw/ipapatch) Patch iOS Apps, The Easy Way, Without Jailbreak.
+- [**3208**Star][4m] [C] [yarrick/iodine](https://github.com/yarrick/iodine) Official git repo for iodine dns tunnel
+- [**3205**Star][15d] [Py] [maurosoria/dirsearch](https://github.com/maurosoria/dirsearch) Web path scanner
+- [**3202**Star][10d] [Rich Text Format] [the-art-of-hacking/h4cker](https://github.com/The-Art-of-Hacking/h4cker) 资源收集:hacking、渗透、数字取证、事件响应、漏洞研究、漏洞开发、逆向
+- [**3187**Star][1y] [Py] [kootenpv/whereami](https://github.com/kootenpv/whereami) Uses WiFi signals and machine learning (sklearn's RandomForest) to predict where you are.
+- [**3187**Star][6m] [hslatman/awesome-threat-intelligence](https://github.com/hslatman/awesome-threat-intelligence) A curated list of Awesome Threat Intelligence resources
+- [**3186**Star][1m] [C++] [spiderlabs/modsecurity](https://github.com/spiderlabs/modsecurity) ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analys…
+- [**3180**Star][27d] [C] [magnumripper/johntheripper](https://github.com/magnumripper/johntheripper) This is the official repo for John the Ripper, "Jumbo" version. The "bleeding-jumbo" branch is based on 1.9.0-Jumbo-1 which was released on May 14, 2019. An import of the "core" version of john this jumbo was based on (or newer) is found in the "master" branch (CVS:
+- [**3169**Star][1m] [C] [valdikss/goodbyedpi](https://github.com/valdikss/goodbyedpi) GoodbyeDPI—Passive Deep Packet Inspection blocker and Active DPI circumvention utility (for Windows)
+- [**3162**Star][1y] [Shell] [toyodadoubi/doubi](https://github.com/toyodadoubi/doubi) 一个逗比写的各种逗比脚本~
+- [**3159**Star][3d] [JS] [minbrowser/min](https://github.com/minbrowser/min) A fast, minimal browser that protects your privacy
+- [**3140**Star][6d] [C] [meetecho/janus-gateway](https://github.com/meetecho/janus-gateway) Janus WebRTC Server
+- [**3137**Star][2y] [shadowsocksr-backup/shadowsocksr-android](https://github.com/shadowsocksr-backup/shadowsocksr-android) A ShadowsocksR client for Android
+- [**3134**Star][2d] [C++] [px4/firmware](https://github.com/px4/firmware) PX4 Autopilot Software
+- [**3125**Star][3d] [Shell] [1n3/sn1per](https://github.com/1n3/sn1per) Automated pentest framework for offensive security experts
+- [**3123**Star][30d] [meirwah/awesome-incident-response](https://github.com/meirwah/awesome-incident-response) A curated list of tools for incident response
+- [**3123**Star][2m] [PS] [fireeye/commando-vm](https://github.com/fireeye/commando-vm) Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@fireeye.com
+- [**3122**Star][5d] [Go] [uber/kraken](https://github.com/uber/kraken) P2P Docker registry capable of distributing TBs of data in seconds
+- [**3121**Star][30d] [CSS] [readthedocs/sphinx_rtd_theme](https://github.com/readthedocs/sphinx_rtd_theme) Sphinx theme for readthedocs.org
+- [**3121**Star][8d] [JS] [duo-labs/cloudmapper](https://github.com/duo-labs/cloudmapper) CloudMapper helps you analyze your Amazon Web Services (AWS) environments.
+- [**3118**Star][3d] [Shell] [speed47/spectre-meltdown-checker](https://github.com/speed47/spectre-meltdown-checker) Spectre, Meltdown, Foreshadow, Fallout, RIDL, ZombieLoad vulnerability/mitigation checker for Linux & BSD
+- [**3113**Star][2d] [C] [qemu/qemu](https://github.com/qemu/qemu) Official QEMU mirror. Please see
+- [**3107**Star][2m] [Py] [byt3bl33d3r/crackmapexec](https://github.com/byt3bl33d3r/crackmapexec) A swiss army knife for pentesting networks
+- [**3106**Star][7d] [Java] [deathmarine/luyten](https://github.com/deathmarine/luyten) An Open Source Java Decompiler Gui for Procyon
+- [**3105**Star][10d] [Shell] [softwaredownload/openwrt-fanqiang](https://github.com/softwaredownload/openwrt-fanqiang) 最好的路由器翻墙、科学上网教程—OpenWrt—shadowsocks
+- [**3088**Star][9d] [Shell] [trimstray/htrace.sh](https://github.com/trimstray/htrace.sh) My simple Swiss Army knife for http/https troubleshooting and profiling.
+- [**3087**Star][3d] [Py] [tribler/tribler](https://github.com/tribler/tribler) Privacy enhanced BitTorrent client with P2P content discovery
+- [**3085**Star][11d] [Go] [tencent/bk-cmdb](https://github.com/tencent/bk-cmdb) 蓝鲸智云配置平台(BlueKing CMDB)
+- [**3084**Star][22d] [C] [unicorn-engine/unicorn](https://github.com/unicorn-engine/unicorn) Unicorn CPU emulator framework (ARM, AArch64, M68K, Mips, Sparc, X86)
+- [**3080**Star][3m] [C] [zmap/zmap](https://github.com/zmap/zmap) ZMap is a fast single packet network scanner designed for Internet-wide network surveys.
+- [**3076**Star][7m] [Go] [michenriksen/aquatone](https://github.com/michenriksen/aquatone) A Tool for Domain Flyovers
+- [**3071**Star][9m] [JS] [jipegit/osxauditor](https://github.com/jipegit/osxauditor) OS X Auditor is a free Mac OS X computer forensics tool
+- [**3065**Star][1m] [Java] [calebfenton/simplify](https://github.com/calebfenton/simplify) Generic Android Deobfuscator
+- [**3063**Star][1y] [Swift] [zhuhaow/spechtlite](https://github.com/zhuhaow/spechtlite) A rule-based proxy for macOS
+- [**3052**Star][2m] [JS] [valve/fingerprintjs](https://github.com/valve/fingerprintjs) Anonymous browser fingerprint
+- [**3049**Star][4m] [C++] [google/robotstxt](https://github.com/google/robotstxt) The repository contains Google's robots.txt parser and matcher as a C++ library (compliant to C++11).
+- [**3043**Star][3m] [Py] [spiderlabs/responder](https://github.com/spiderlabs/responder) a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.
+- [**3029**Star][2m] [Go] [gwuhaolin/lightsocks](https://github.com/gwuhaolin/lightsocks) lightweight network obfuscate proxy, based on socks5, to replace shadowsocks
+- [**3027**Star][9m] [C] [secwiki/linux-kernel-exploits](https://github.com/secwiki/linux-kernel-exploits) linux-kernel-exploits Linux平台提权漏洞集合
+- [**3001**Star][1y] [PHP] [owner888/phpspider](https://github.com/owner888/phpspider) 《我用爬虫一天时间“偷了”知乎一百万用户,只为证明PHP是世界上最好的语言 》所使用的程序
+- [**2991**Star][2d] [JS] [ntop/ntopng](https://github.com/ntop/ntopng) Web-based Traffic and Security Network Traffic Monitoring
+- [**2986**Star][7d] [Py] [guardicore/monkey](https://github.com/guardicore/monkey) Infection Monkey - An automated pentest tool
+- [**2969**Star][29d] [Go] [cookiey/yearning](https://github.com/cookiey/yearning) A most popular sql audit platform for mysql
+- [**2968**Star][2d] [ObjC] [google/santa](https://github.com/google/santa) A binary whitelisting/blacklisting system for macOS
+- [**2955**Star][4d] [Py] [twintproject/twint](https://github.com/twintproject/twint) An advanced Twitter scraping & OSINT tool written in Python that doesn't use Twitter's API, allowing you to scrape a user's followers, following, Tweets and more while evading most API limitations.
+- [**2955**Star][11d] [Go] [dominikh/go-tools](https://github.com/dominikh/go-tools) Staticcheck – a collection of static analysis tools for working with Go code
+- [**2949**Star][8d] [JS] [webgoat/webgoat](https://github.com/webgoat/webgoat) A deliberately insecure Web Application
+- [**2948**Star][2m] [Dockerfile] [thinkdevelop/free-ss-ssr](https://github.com/thinkdevelop/free-ss-ssr) SS账号、SSR账号、V2Ray账号
+- [**2947**Star][1m] [Py] [andresriancho/w3af](https://github.com/andresriancho/w3af) web application attack and audit framework, the open source web vulnerability scanner.
+- [**2945**Star][2y] [phith0n/mind-map](https://github.com/phith0n/mind-map) 各种安全相关思维导图整理收集
+- [**2942**Star][21d] [Py] [cowrie/cowrie](https://github.com/cowrie/cowrie) Cowrie SSH/Telnet Honeypot
+- [**2936**Star][1y] [Py] [danmcinerney/wifijammer](https://github.com/danmcinerney/wifijammer) Continuously jam all wifi clients/routers
+- [**2933**Star][2d] [Zeek] [zeek/zeek](https://github.com/zeek/zeek) Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.
+- [**2932**Star][11m] [Shell] [91yun/serverspeeder](https://github.com/91yun/serverspeeder) 锐速破解版
+- [**2920**Star][23d] [Go] [securego/gosec](https://github.com/securego/gosec) Golang security checker
+- [**2916**Star][2d] [JS] [evilsocket/pwnagotchi](https://github.com/evilsocket/pwnagotchi) Deep Reinforcement Learning instrumenting bettercap for WiFi pwning.
+- [**2915**Star][12d] [C] [libfuse/sshfs](https://github.com/libfuse/sshfs) A network filesystem client to connect to SSH servers
+- [**2909**Star][2d] [Py] [trustedsec/ptf](https://github.com/trustedsec/ptf) a way for modular support for up-to-date tools.
+- [**2901**Star][1y] [Py] [byt3bl33d3r/mitmf](https://github.com/byt3bl33d3r/mitmf) Framework for Man-In-The-Middle attacks
+- [**2897**Star][3d] [secfigo/awesome-fuzzing](https://github.com/secfigo/awesome-fuzzing) A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Development like root cause analysis.
+- [**2883**Star][7m] [C] [p-h-c/phc-winner-argon2](https://github.com/p-h-c/phc-winner-argon2) The password hash Argon2, winner of PHC
+- [**2877**Star][4y] [ObjC] [maciekish/iresign](https://github.com/maciekish/iresign) iReSign allows iDevice app bundles (.ipa) files to be signed or resigned with a digital certificate from Apple for distribution. This tool is aimed at enterprises users, for enterprise deployment, when the person signing the app is different than the person(s) developing it.
+- [**2858**Star][2d] [C] [lxc/lxc](https://github.com/lxc/lxc) LXC - Linux Containers
+- [**2850**Star][2d] [HTML] [ctf-wiki/ctf-wiki](https://github.com/ctf-wiki/ctf-wiki) CTF Wiki Online. Come and join us, we need you!
+- [**2850**Star][4d] [Go] [99designs/aws-vault](https://github.com/99designs/aws-vault) A vault for securely storing and accessing AWS credentials in development environments
+- [**2845**Star][2d] [ObjC] [facebook/idb](https://github.com/facebook/idb) idb is a flexible command line interface for automating iOS simulators and devices
+- [**2842**Star][5m] [Py] [instantbox/instantbox](https://github.com/instantbox/instantbox) Get a clean, ready-to-go Linux box in seconds.
+- [**2840**Star][23d] [C] [ossec/ossec-hids](https://github.com/ossec/ossec-hids) Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.
+- [**2840**Star][2m] [infosecn1nja/red-teaming-toolkit](https://github.com/infosecn1nja/red-teaming-toolkit) A collection of open source and commercial tools that aid in red team operations.
+- [**2839**Star][8m] [C++] [wangyu-/udpspeeder](https://github.com/wangyu-/udpspeeder) A Tunnel which Improves your Network Quality on a High-latency Lossy Link by using Forward Error Correction,for All Traffics(TCP/UDP/ICMP)
+- [**2837**Star][17d] [Py] [espressif/esptool](https://github.com/espressif/esptool) ESP8266 and ESP32 serial bootloader utility
+- [**2834**Star][8m] [Shell] [goreliu/wsl-terminal](https://github.com/goreliu/wsl-terminal) Terminal emulator for Windows Subsystem for Linux (WSL)
+- [**2829**Star][4m] [C] [juliocesarfort/public-pentesting-reports](https://github.com/juliocesarfort/public-pentesting-reports) Curated list of public penetration test reports released by several consulting firms and academic security groups
+- [**2829**Star][1m] [Assembly] [cirosantilli/x86-bare-metal-examples](https://github.com/cirosantilli/x86-bare-metal-examples) Dozens of minimal operating systems to learn x86 system programming. Tested on Ubuntu 17.10 host in QEMU 2.10 and real hardware. Userland cheat at:
+- [**2823**Star][2y] [CSS] [maxchehab/css-keylogging](https://github.com/maxchehab/css-keylogging) Chrome extension and Express server that exploits keylogging abilities of CSS.
+- [**2820**Star][7d] [C] [tmk/tmk_keyboard](https://github.com/tmk/tmk_keyboard) Keyboard firmwares for Atmel AVR and Cortex-M
+- [**2814**Star][8m] [C#] [quasar/quasarrat](https://github.com/quasar/quasarrat) Remote Administration Tool for Windows
+- [**2814**Star][5d] [Py] [jrohy/multi-v2ray](https://github.com/jrohy/multi-v2ray) v2ray easy delpoy & manage tool, support multiple user & protocol manage
+- [**2808**Star][2m] [paulsec/awesome-sec-talks](https://github.com/paulsec/awesome-sec-talks) A collected list of awesome security talks
+- [**2803**Star][9m] [Py] [plasma-disassembler/plasma](https://github.com/plasma-disassembler/plasma) Plasma is an interactive disassembler for x86/ARM/MIPS. It can generates indented pseudo-code with colored syntax.
+- [**2798**Star][19d] [Py] [androguard/androguard](https://github.com/androguard/androguard) Reverse engineering, Malware and goodware analysis of Android applications ... and more (ninja !)
+- [**2793**Star][6d] [C] [klange/toaruos](https://github.com/klange/toaruos) A completely-from-scratch hobby operating system: bootloader, kernel, drivers, C library, and userspace including a composited graphical UI, dynamic linker, syntax-highlighting text editor, network stack, etc.
+- [**2793**Star][2m] [Go] [kgretzky/evilginx2](https://github.com/kgretzky/evilginx2) Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication
+- [**2791**Star][7d] [C++] [xmrig/xmrig](https://github.com/xmrig/xmrig) xmrig: 门罗币挖矿代码 CPU 版
+- [**2789**Star][4y] [Lua] [loveshell/ngx_lua_waf](https://github.com/loveshell/ngx_lua_waf) ngx_lua_waf是一个基于lua-nginx-module(openresty)的web应用防火墙
+- [**2783**Star][30d] [Makefile] [shadowsocks/openwrt-shadowsocks](https://github.com/shadowsocks/openwrt-shadowsocks) Shadowsocks-libev for OpenWrt/LEDE
+- [**2782**Star][2y] [C] [seclab-ucr/intang](https://github.com/seclab-ucr/intang) research project for circumventing the "TCP reset attack" from the Great Firewall of China (GFW) by disrupting/desynchronizing the TCP Control Block (TCB) on the censorship devices.
+- [**2777**Star][9d] [C++] [qtox/qtox](https://github.com/qtox/qtox) qTox is a chat, voice, video, and file transfer IM client using the encrypted peer-to-peer Tox protocol.
+- [**2769**Star][4d] [C] [processhacker/processhacker](https://github.com/processhacker/processhacker) A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware.
+- [**2766**Star][1m] [JS] [trufflesuite/ganache-cli](https://github.com/trufflesuite/ganache-cli) Fast Ethereum RPC client for testing and development
+- [**2756**Star][2m] [secwiki/sec-chart](https://github.com/secwiki/sec-chart) 安全思维导图集合
+- [**2742**Star][5d] [TS] [webhintio/hint](https://github.com/webhintio/hint)
+- [**2742**Star][24d] [Makefile] [theos/theos](https://github.com/theos/theos) A cross-platform suite of tools for building and deploying software for iOS and other platforms.
+- [**2741**Star][8m] [Py] [p0cl4bs/wifi-pumpkin](https://github.com/P0cL4bs/WiFi-Pumpkin) Framework for Rogue Wi-Fi Access Point Attack
+- [**2739**Star][23d] [JS] [s0md3v/awesomexss](https://github.com/s0md3v/AwesomeXSS) Awesome XSS stuff
+- [**2737**Star][1y] [C] [vanhoefm/krackattacks-scripts](https://github.com/vanhoefm/krackattacks-scripts) test if clients or access points (APs) are affected by the KRACK attack against WPA2
+- [**2735**Star][18d] [JS] [cyu/rack-cors](https://github.com/cyu/rack-cors) Rack Middleware for handling Cross-Origin Resource Sharing (CORS), which makes cross-origin AJAX possible.
+- [**2730**Star][3y] [Py] [hephaest0s/usbkill](https://github.com/hephaest0s/usbkill) an anti-forensic kill-switch that waits for a change on your USB ports and then immediately shuts down your computer.
+- [**2717**Star][2d] [PS] [redcanaryco/atomic-red-team](https://github.com/redcanaryco/atomic-red-team) Small and highly portable detection tests based on MITRE's ATT&CK.
+- [**2713**Star][1m] [C] [taviso/loadlibrary](https://github.com/taviso/loadlibrary) Porting Windows Dynamic Link Libraries to Linux
+- [**2703**Star][3y] [Eagle] [samyk/magspoof](https://github.com/samyk/magspoof) A portable device that can spoof/emulate any magnetic stripe, credit card or hotel card "wirelessly", even on standard magstripe (non-NFC/RFID) readers. It can disable Chip&PIN and predict AMEX card numbers with 100% accuracy.
+- [**2701**Star][3d] [Go] [aquasecurity/trivy](https://github.com/aquasecurity/trivy) A Simple and Comprehensive Vulnerability Scanner for Containers, Suitable for CI
+- [**2698**Star][7d] [ObjC] [dantheman827/ios-app-signer](https://github.com/dantheman827/ios-app-signer) This is an app for OS X that can (re)sign apps and bundle them into ipa files that are ready to be installed on an iOS device.
+- [**2690**Star][1m] [ObjC] [kjcracks/clutch](https://github.com/kjcracks/clutch) Fast iOS executable dumper
+- [**2682**Star][22d] [Go] [google/syzkaller](https://github.com/google/syzkaller) syzkaller is an unsupervised coverage-guided kernel fuzzer
+- [**2681**Star][1y] [Py] [mame82/p4wnp1](https://github.com/mame82/p4wnp1) P4wnP1 is a highly customizable USB attack platform, based on a low cost Raspberry Pi Zero or Raspberry Pi Zero W.
+- [**2674**Star][3m] [Py] [drivendata/cookiecutter-data-science](https://github.com/drivendata/cookiecutter-data-science) A logical, reasonably standardized, but flexible project structure for doing and sharing data science work.
+- [**2662**Star][2m] [rmusser01/infosec_reference](https://github.com/rmusser01/infosec_reference) An Information Security Reference That Doesn't Suck
+- [**2654**Star][17d] [JS] [bkimminich/juice-shop](https://github.com/bkimminich/juice-shop) OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
+- [**2652**Star][3m] [Java] [frohoff/ysoserial](https://github.com/frohoff/ysoserial) A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
+- [**2645**Star][2m] [xairy/linux-kernel-exploitation](https://github.com/xairy/linux-kernel-exploitation) A bunch of links related to Linux kernel exploitation
+- [**2645**Star][1y] [HTML] [chybeta/web-security-learning](https://github.com/chybeta/web-security-learning) Web-Security-Learning
+- [**2641**Star][1y] [C] [ckolivas/cgminer](https://github.com/ckolivas/cgminer) ASIC and FPGA miner in c for bitcoin
+- [**2640**Star][2d] [Go] [slackhq/nebula](https://github.com/slackhq/nebula) A scalable overlay networking tool with a focus on performance, simplicity and security
+- [**2637**Star][4m] [Java] [teevity/ice](https://github.com/teevity/ice) AWS Usage Tool
+- [**2625**Star][8m] [leandromoreira/linux-network-performance-parameters](https://github.com/leandromoreira/linux-network-performance-parameters) Learn where some of the network sysctl variables fit into the Linux/Kernel network flow
+- [**2615**Star][2m] [Swift] [zhuhaow/nekit](https://github.com/zhuhaow/nekit) A toolkit for Network Extension Framework
+- [**2612**Star][4d] [JS] [popcorn-official/popcorn-desktop](https://github.com/popcorn-official/popcorn-desktop) Popcorn Time is a multi-platform, free software BitTorrent client that includes an integrated media player. Desktop ( Windows / Mac / Linux ) a Butter-Project Fork
+- [**2607**Star][3y] [Ruby] [arachni/arachni](https://github.com/arachni/arachni) Web Application Security Scanner Framework
+- [**2603**Star][23d] [JS] [knownsec/kcon](https://github.com/knownsec/kcon) KCon is a famous Hacker Con powered by Knownsec Team.
+- [**2601**Star][1m] [pditommaso/awesome-pipeline](https://github.com/pditommaso/awesome-pipeline) A curated list of awesome pipeline toolkits inspired by Awesome Sysadmin
+- [**2596**Star][21d] [C++] [fanout/pushpin](https://github.com/fanout/pushpin) Reverse proxy for realtime web services
+- [**2581**Star][3d] [Go] [adguardteam/adguardhome](https://github.com/adguardteam/adguardhome) Network-wide ads & trackers blocking DNS server
+- [**2581**Star][1m] [Shell] [medicean/vulapps](https://github.com/medicean/vulapps) 快速搭建各种漏洞环境(Various vulnerability environment)
+- [**2575**Star][2m] [C] [huntergregal/mimipenguin](https://github.com/huntergregal/mimipenguin) dump 当前Linux用户的登录密码
+- [**2574**Star][8y] [C] [id-software/quake](https://github.com/id-software/quake) Quake GPL Source Release
+- [**2568**Star][1m] [C] [esnet/iperf](https://github.com/esnet/iperf) A TCP, UDP, and SCTP network bandwidth measurement tool
+- [**2566**Star][2d] [C++] [danmar/cppcheck](https://github.com/danmar/cppcheck) static analysis of C/C++ code
+- [**2565**Star][5m] [Java] [google/binnavi](https://github.com/google/binnavi) a binary analysis IDE that allows to inspect, navigate, edit and annotate control flow graphs and call graphs of disassembled code.
+- [**2562**Star][3m] [Py] [greenwolf/social_mapper](https://github.com/Greenwolf/social_mapper) 对多个社交网站的用户Profile图片进行大规模的人脸识别
+- [**2553**Star][2y] [evilsocket/bettercap](https://github.com/evilsocket/bettercap) DEPRECATED, bettercap developement moved here:
+- [**2551**Star][9d] [Py] [cloudflare/flan](https://github.com/cloudflare/flan) A pretty sweet vulnerability scanner
+- [**2549**Star][6m] [C] [geohot/qira](https://github.com/geohot/qira) QEMU Interactive Runtime Analyser
+- [**2543**Star][19d] [Py] [hugsy/gef](https://github.com/hugsy/gef) GDB Enhanced Features for exploit devs & reversers
+- [**2542**Star][23d] [Go] [drk1wi/modlishka](https://github.com/drk1wi/modlishka) Modlishka. Reverse Proxy.
+- [**2533**Star][8m] [offensive-security/kali-nethunter](https://github.com/offensive-security/kali-nethunter) The Kali NetHunter Project
- [**2533**Star][2y] [Py] [google/nogotofail](https://github.com/google/nogotofail) An on-path blackbox network traffic security testing tool
-- [**2532**Star][8m] [offensive-security/kali-nethunter](https://github.com/offensive-security/kali-nethunter) The Kali NetHunter Project
-- [**2530**Star][17d] [Py] [hugsy/gef](https://github.com/hugsy/gef) GDB Enhanced Features for exploit devs & reversers
-- [**2521**Star][21d] [Go] [drk1wi/modlishka](https://github.com/drk1wi/modlishka) Modlishka. Reverse Proxy.
-- [**2520**Star][3y] [HTML] [dirtycow/dirtycow.github.io](https://github.com/dirtycow/dirtycow.github.io) Dirty COW
-- [**2515**Star][24d] [C] [yrutschle/sslh](https://github.com/yrutschle/sslh) Applicative Protocol Multiplexer (e.g. share SSH and HTTPS on the same port)
-- [**2510**Star][11d] [Shell] [teddysun/across](https://github.com/teddysun/across) This is a shell script for configure and start WireGuard VPN server
-- [**2505**Star][3m] [kbandla/aptnotes](https://github.com/kbandla/aptnotes) Various public documents, whitepapers and articles about APT campaigns
-- [**2505**Star][3y] [C] [dhavalkapil/icmptunnel](https://github.com/dhavalkapil/icmptunnel) Transparently tunnel your IP traffic through ICMP echo and reply packets.
+- [**2526**Star][2d] [Shell] [teddysun/across](https://github.com/teddysun/across) This is a shell script for configure and start WireGuard VPN server
+- [**2525**Star][3y] [HTML] [dirtycow/dirtycow.github.io](https://github.com/dirtycow/dirtycow.github.io) Dirty COW
+- [**2522**Star][26d] [C] [yrutschle/sslh](https://github.com/yrutschle/sslh) Applicative Protocol Multiplexer (e.g. share SSH and HTTPS on the same port)
+- [**2516**Star][3m] [kbandla/aptnotes](https://github.com/kbandla/aptnotes) Various public documents, whitepapers and articles about APT campaigns
+- [**2508**Star][5m] [Go] [oj/gobuster](https://github.com/oj/gobuster) Directory/File, DNS and VHost busting tool written in Go
+- [**2507**Star][2m] [Java] [jboss-javassist/javassist](https://github.com/jboss-javassist/javassist) Java bytecode engineering toolkit
+- [**2507**Star][3y] [C] [dhavalkapil/icmptunnel](https://github.com/dhavalkapil/icmptunnel) Transparently tunnel your IP traffic through ICMP echo and reply packets.
- [**2503**Star][7m] [C++] [chengr28/pcap_dnsproxy](https://github.com/chengr28/pcap_dnsproxy) Pcap_DNSProxy, a local DNS server based on packet capturing
-- [**2495**Star][2m] [Java] [jboss-javassist/javassist](https://github.com/jboss-javassist/javassist) Java bytecode engineering toolkit
-- [**2488**Star][1y] [onlurking/awesome-infosec](https://github.com/onlurking/awesome-infosec) A curated list of awesome infosec courses and training resources.
-- [**2486**Star][26d] [Py] [ysrc/xunfeng](https://github.com/ysrc/xunfeng) 巡风是一款适用于企业内网的漏洞快速应急,巡航扫描系统。
-- [**2481**Star][5m] [Go] [oj/gobuster](https://github.com/oj/gobuster) Directory/File, DNS and VHost busting tool written in Go
-- [**2480**Star][8d] [Go] [adguardteam/adguardhome](https://github.com/adguardteam/adguardhome) Network-wide ads & trackers blocking DNS server
+- [**2501**Star][28d] [Py] [ysrc/xunfeng](https://github.com/ysrc/xunfeng) 巡风是一款适用于企业内网的漏洞快速应急,巡航扫描系统。
+- [**2498**Star][6m] [taichi-framework/taichi](https://github.com/taichi-framework/taichi) A framework to use Xposed module with or without Root/Unlock bootloader, supportting Android 5.0 ~ 10.0
+- [**2497**Star][6d] [onlurking/awesome-infosec](https://github.com/onlurking/awesome-infosec) A curated list of awesome infosec courses and training resources.
+- [**2488**Star][5y] [PHP] [audi-1/sqli-labs](https://github.com/audi-1/sqli-labs) SQLI labs to test error based, Blind boolean based, Time based.
- [**2480**Star][2y] [Py] [feross/spoofmac](https://github.com/feross/spoofmac) Spoof your MAC address
-- [**2473**Star][5y] [PHP] [audi-1/sqli-labs](https://github.com/audi-1/sqli-labs) SQLI labs to test error based, Blind boolean based, Time based.
-- [**2472**Star][11m] [JS] [weixin/miaow](https://github.com/weixin/Miaow) A set of plugins for Sketch include drawing links & marks, UI Kit & Color sync, font & text replacing.
-- [**2470**Star][6m] [taichi-framework/taichi](https://github.com/taichi-framework/taichi) A framework to use Xposed module with or without Root/Unlock bootloader, supportting Android 5.0 ~ 10.0
-- [**2463**Star][13d] [JS] [vitaly-t/pg-promise](https://github.com/vitaly-t/pg-promise) PostgreSQL interface for Node.js
-- [**2458**Star][3m] [C] [martin-ger/esp_wifi_repeater](https://github.com/martin-ger/esp_wifi_repeater) A full functional WiFi Repeater (correctly: a WiFi NAT Router)
-- [**2456**Star][4m] [Go] [ne0nd0g/merlin](https://github.com/ne0nd0g/merlin) Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.
-- [**2454**Star][24d] [C++] [pavel-odintsov/fastnetmon](https://github.com/pavel-odintsov/fastnetmon) very fast DDoS analyzer with sflow/netflow/mirror support
-- [**2453**Star][11m] [C#] [yck1509/confuserex](https://github.com/yck1509/confuserex) An open-source, free protector for .NET applications
+- [**2476**Star][11m] [JS] [weixin/miaow](https://github.com/weixin/Miaow) A set of plugins for Sketch include drawing links & marks, UI Kit & Color sync, font & text replacing.
+- [**2476**Star][4m] [Go] [ne0nd0g/merlin](https://github.com/ne0nd0g/merlin) Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.
+- [**2469**Star][6d] [JS] [vitaly-t/pg-promise](https://github.com/vitaly-t/pg-promise) PostgreSQL interface for Node.js
+- [**2466**Star][30d] [Py] [smicallef/spiderfoot](https://github.com/smicallef/spiderfoot) SpiderFoot, the most complete OSINT collection and reconnaissance tool.
+- [**2464**Star][3m] [C] [martin-ger/esp_wifi_repeater](https://github.com/martin-ger/esp_wifi_repeater) A full functional WiFi Repeater (correctly: a WiFi NAT Router)
+- [**2461**Star][11m] [C#] [yck1509/confuserex](https://github.com/yck1509/confuserex) An open-source, free protector for .NET applications
+- [**2461**Star][26d] [C++] [pavel-odintsov/fastnetmon](https://github.com/pavel-odintsov/fastnetmon) very fast DDoS analyzer with sflow/netflow/mirror support
+- [**2454**Star][21d] [Shell] [rebootuser/linenum](https://github.com/rebootuser/linenum) Scripted Local Linux Enumeration & Privilege Escalation Checks
- [**2451**Star][3y] [Py] [google/enjarify](https://github.com/google/enjarify) a tool for translating Dalvik bytecode to equivalent Java bytecode.
-- [**2441**Star][28d] [Py] [smicallef/spiderfoot](https://github.com/smicallef/spiderfoot) SpiderFoot, the most complete OSINT collection and reconnaissance tool.
-- [**2424**Star][7d] [PHP] [misp/misp](https://github.com/misp/misp) MISP (core software) - Open Source Threat Intelligence and Sharing Platform (formely known as Malware Information Sharing Platform)
-- [**2420**Star][19d] [Shell] [rebootuser/linenum](https://github.com/rebootuser/linenum) Scripted Local Linux Enumeration & Privilege Escalation Checks
-- [**2415**Star][1m] [Py] [0xinfection/awesome-waf](https://github.com/0xinfection/awesome-waf)
-- [**2412**Star][23d] [Py] [pwndbg/pwndbg](https://github.com/pwndbg/pwndbg) Exploit Development and Reverse Engineering with GDB Made Easy
-- [**2411**Star][3y] [Py] [arthepsy/ssh-audit](https://github.com/arthepsy/ssh-audit) SSH server auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)
-- [**2407**Star][1m] [TSQL] [rapid7/metasploitable3](https://github.com/rapid7/metasploitable3) Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities.
-- [**2404**Star][24d] [Py] [infobyte/faraday](https://github.com/infobyte/faraday) Collaborative Penetration Test and Vulnerability Management Platform
-- [**2399**Star][3y] [rpisec/malware](https://github.com/rpisec/malware) Course materials for Malware Analysis by RPISEC
+- [**2444**Star][2d] [PHP] [misp/misp](https://github.com/misp/misp) MISP (core software) - Open Source Threat Intelligence and Sharing Platform (formely known as Malware Information Sharing Platform)
+- [**2429**Star][1m] [Py] [0xinfection/awesome-waf](https://github.com/0xinfection/awesome-waf)
+- [**2423**Star][2d] [Py] [pwndbg/pwndbg](https://github.com/pwndbg/pwndbg) Exploit Development and Reverse Engineering with GDB Made Easy
+- [**2420**Star][1m] [TSQL] [rapid7/metasploitable3](https://github.com/rapid7/metasploitable3) Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities.
+- [**2417**Star][26d] [Py] [infobyte/faraday](https://github.com/infobyte/faraday) Collaborative Penetration Test and Vulnerability Management Platform
+- [**2416**Star][3y] [Py] [arthepsy/ssh-audit](https://github.com/arthepsy/ssh-audit) SSH server auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)
+- [**2411**Star][26d] [Py] [xmendez/wfuzz](https://github.com/xmendez/wfuzz) Web application fuzzer
+- [**2410**Star][8m] [Py] [lionsec/katoolin](https://github.com/lionsec/katoolin) Automatically install all Kali linux tools
+- [**2407**Star][3y] [rpisec/malware](https://github.com/rpisec/malware) Course materials for Malware Analysis by RPISEC
+- [**2404**Star][20d] [Java] [m66b/netguard](https://github.com/m66b/netguard) A simple way to block access to the internet per app
- [**2395**Star][3y] [OCaml] [facebookarchive/pfff](https://github.com/facebookarchive/pfff) Tools for code analysis, visualizations, or style-preserving source transformation.
-- [**2395**Star][24d] [Py] [xmendez/wfuzz](https://github.com/xmendez/wfuzz) Web application fuzzer
-- [**2391**Star][8m] [Py] [lionsec/katoolin](https://github.com/lionsec/katoolin) Automatically install all Kali linux tools
-- [**2381**Star][2y] [Py] [secretsquirrel/the-backdoor-factory](https://github.com/secretsquirrel/the-backdoor-factory) Patch PE, ELF, Mach-O binaries with shellcode (NOT Supported)
-- [**2375**Star][1y] [Py] [danmcinerney/lans.py](https://github.com/danmcinerney/lans.py) Inject code and spy on wifi users
+- [**2392**Star][1m] [Go] [xtaci/kcp-go](https://github.com/xtaci/kcp-go) A Crypto-Secure, Production-Grade Reliable-UDP Library for golang with FEC
+- [**2389**Star][8d] [C] [wireshark/wireshark](https://github.com/wireshark/wireshark) Read-only mirror of Wireshark's Git repository. GitHub won't let us disable pull requests. ☞ THEY WILL BE IGNORED HERE ☜ Please upload them at
+- [**2386**Star][2y] [Py] [secretsquirrel/the-backdoor-factory](https://github.com/secretsquirrel/the-backdoor-factory) Patch PE, ELF, Mach-O binaries with shellcode (NOT Supported)
+- [**2384**Star][2d] [Go] [owasp/amass](https://github.com/owasp/amass) In-depth Attack Surface Mapping and Asset Discovery
+- [**2381**Star][11m] [C] [haad/proxychains](https://github.com/haad/proxychains) a tool that forces any TCP connection made by any given application to follow through proxy like TOR or any other SOCKS4, SOCKS5 or HTTP(S) proxy. Supported auth-types: "user/pass" for SOCKS4/5, "basic" for HTTP.
+- [**2376**Star][2d] [Java] [mock-server/mockserver](https://github.com/mock-server/mockserver) MockServer enables easy mocking of any system you integrate with via HTTP or HTTPS with clients written in Java, JavaScript and Ruby. MockServer also includes a proxy that introspects all proxied traffic including encrypted SSL traffic and supports Port Forwarding, Web Proxying (i.e. HTTP proxy), HTTPS Tunneling Proxying (using HTTP CONNECT) and…
+- [**2376**Star][1y] [Py] [danmcinerney/lans.py](https://github.com/danmcinerney/lans.py) Inject code and spy on wifi users
+- [**2369**Star][7d] [security-onion-solutions/security-onion](https://github.com/security-onion-solutions/security-onion) Linux distro for intrusion detection, enterprise security monitoring, and log management
- [**2369**Star][2m] [TeX] [crypto101/book](https://github.com/crypto101/book) Crypto 101, the introductory book on cryptography.
-- [**2368**Star][7d] [C] [wireshark/wireshark](https://github.com/wireshark/wireshark) Read-only mirror of Wireshark's Git repository. GitHub won't let us disable pull requests. ☞ THEY WILL BE IGNORED HERE ☜ Please upload them at
-- [**2366**Star][7d] [Java] [mock-server/mockserver](https://github.com/mock-server/mockserver) MockServer enables easy mocking of any system you integrate with via HTTP or HTTPS with clients written in Java, JavaScript and Ruby. MockServer also includes a proxy that introspects all proxied traffic including encrypted SSL traffic and supports Port Forwarding, Web Proxying (i.e. HTTP proxy), HTTPS Tunneling Proxying (using HTTP CONNECT) and…
-- [**2366**Star][11m] [C] [haad/proxychains](https://github.com/haad/proxychains) a tool that forces any TCP connection made by any given application to follow through proxy like TOR or any other SOCKS4, SOCKS5 or HTTP(S) proxy. Supported auth-types: "user/pass" for SOCKS4/5, "basic" for HTTP.
-- [**2359**Star][1m] [Lua] [snabbco/snabb](https://github.com/snabbco/snabb) Simple and fast packet networking
-- [**2359**Star][13d] [security-onion-solutions/security-onion](https://github.com/security-onion-solutions/security-onion) Linux distro for intrusion detection, enterprise security monitoring, and log management
-- [**2359**Star][4m] [Go] [mlabouardy/komiser](https://github.com/mlabouardy/komiser)
-- [**2351**Star][8d] [C] [domoticz/domoticz](https://github.com/domoticz/domoticz) monitor and configure various devices like: Lights, Switches, various sensors/meters like Temperature, Rain, Wind, UV, Electra, Gas, Water and much more
-- [**2350**Star][1m] [Py] [ab77/netflix-proxy](https://github.com/ab77/netflix-proxy) Smart DNS proxy to watch Netflix
+- [**2366**Star][4m] [Go] [mlabouardy/komiser](https://github.com/mlabouardy/komiser)
+- [**2364**Star][2m] [Py] [ab77/netflix-proxy](https://github.com/ab77/netflix-proxy) Smart DNS proxy to watch Netflix
+- [**2362**Star][1m] [Lua] [snabbco/snabb](https://github.com/snabbco/snabb) Simple and fast packet networking
+- [**2357**Star][2d] [C] [domoticz/domoticz](https://github.com/domoticz/domoticz) monitor and configure various devices like: Lights, Switches, various sensors/meters like Temperature, Rain, Wind, UV, Electra, Gas, Water and much more
+- [**2352**Star][1m] [Py] [ctfd/ctfd](https://github.com/CTFd/CTFd) CTFs as you need them
+- [**2349**Star][11m] [hack-with-github/free-security-ebooks](https://github.com/hack-with-github/free-security-ebooks) Free Security and Hacking eBooks
- [**2342**Star][3m] [Go] [vuvuzela/vuvuzela](https://github.com/vuvuzela/vuvuzela) Private messaging system that hides metadata
-- [**2342**Star][12d] [Go] [owasp/amass](https://github.com/owasp/amass) In-depth Attack Surface Mapping and Asset Discovery
-- [**2338**Star][6y] [C] [stefanesser/dumpdecrypted](https://github.com/stefanesser/dumpdecrypted) Dumps decrypted mach-o files from encrypted iPhone applications from memory to disk. This tool is necessary for security researchers to be able to look under the hood of encryption.
-- [**2335**Star][11m] [hack-with-github/free-security-ebooks](https://github.com/hack-with-github/free-security-ebooks) Free Security and Hacking eBooks
-- [**2332**Star][1m] [Py] [ctfd/ctfd](https://github.com/CTFd/CTFd) CTFs as you need them
-- [**2330**Star][1m] [JS] [pa11y/pa11y](https://github.com/pa11y/pa11y) Pa11y is your automated accessibility testing pal
-- [**2324**Star][30d] [C] [hfiref0x/uacme](https://github.com/hfiref0x/uacme) Defeating Windows User Account Control
-- [**2317**Star][10d] [C] [tsl0922/ttyd](https://github.com/tsl0922/ttyd) Share your terminal over the web
-- [**2316**Star][5y] [C] [abrasive/shairport](https://github.com/abrasive/shairport) Airtunes emulator! Shairport is no longer maintained.
-- [**2302**Star][11m] [yeyintminthuhtut/awesome-red-teaming](https://github.com/yeyintminthuhtut/awesome-red-teaming) List of Awesome Red Teaming Resources
-- [**2302**Star][1y] [Java] [csploit/android](https://github.com/csploit/android) cSploit - The most complete and advanced IT security professional toolkit on Android.
-- [**2291**Star][3y] [Py] [lmacken/pyrasite](https://github.com/lmacken/pyrasite) Inject code into running Python processes
-- [**2277**Star][3m] [JS] [retirejs/retire.js](https://github.com/retirejs/retire.js) scanner detecting the use of JavaScript libraries with known vulnerabilities
-- [**2272**Star][3y] [Py] [therook/subbrute](https://github.com/therook/subbrute) A DNS meta-query spider that enumerates DNS records, and subdomains.
-- [**2272**Star][1m] [C] [moby/hyperkit](https://github.com/moby/hyperkit) A toolkit for embedding hypervisor capabilities in your application
-- [**2271**Star][22d] [JS] [talkingdata/inmap](https://github.com/talkingdata/inmap) 大数据地理可视化
-- [**2271**Star][2y] [Py] [rootphantomer/blasting_dictionary](https://github.com/rootphantomer/blasting_dictionary) 爆破字典
-- [**2267**Star][1m] [C] [aurorawright/luma3ds](https://github.com/aurorawright/luma3ds) Noob-proof (N)3DS "Custom Firmware"
-- [**2246**Star][16d] [dumb-password-rules/dumb-password-rules](https://github.com/dumb-password-rules/dumb-password-rules) Shaming sites with dumb password rules.
-- [**2244**Star][2y] [Go] [mehrdadrad/mylg](https://github.com/mehrdadrad/mylg) Network Diagnostic Tool
-- [**2242**Star][1m] [Shell] [v1s1t0r1sh3r3/airgeddon](https://github.com/v1s1t0r1sh3r3/airgeddon) This is a multi-use bash script for Linux systems to audit wireless networks.
-- [**2241**Star][13d] [HTML] [tikam02/devops-guide](https://github.com/tikam02/devops-guide) DevOps Guide from basic to advanced with Interview Questions and Notes
-- [**2241**Star][3m] [Py] [novnc/websockify](https://github.com/novnc/websockify) Websockify is a WebSocket to TCP proxy/bridge. This allows a browser to connect to any application/server/service. Implementations in Python, C, Node.js and Ruby.
-- [**2235**Star][1m] [Shell] [eliaskotlyar/xiaomi-dafang-hacks](https://github.com/eliaskotlyar/xiaomi-dafang-hacks)
+- [**2340**Star][6y] [C] [stefanesser/dumpdecrypted](https://github.com/stefanesser/dumpdecrypted) Dumps decrypted mach-o files from encrypted iPhone applications from memory to disk. This tool is necessary for security researchers to be able to look under the hood of encryption.
+- [**2340**Star][1m] [C] [hfiref0x/uacme](https://github.com/hfiref0x/uacme) Defeating Windows User Account Control
+- [**2337**Star][1m] [JS] [pa11y/pa11y](https://github.com/pa11y/pa11y) Pa11y is your automated accessibility testing pal
+- [**2335**Star][3d] [C] [tsl0922/ttyd](https://github.com/tsl0922/ttyd) Share your terminal over the web
+- [**2323**Star][3d] [C#] [netchx/netch](https://github.com/netchx/netch) Game accelerator. Support Socks5, Shadowsocks, ShadowsocksR, V2Ray protocol. UDP NAT FullCone
+- [**2321**Star][11m] [yeyintminthuhtut/awesome-red-teaming](https://github.com/yeyintminthuhtut/awesome-red-teaming) List of Awesome Red Teaming Resources
+- [**2318**Star][5y] [C] [abrasive/shairport](https://github.com/abrasive/shairport) Airtunes emulator! Shairport is no longer maintained.
+- [**2304**Star][1y] [Java] [csploit/android](https://github.com/csploit/android) cSploit - The most complete and advanced IT security professional toolkit on Android.
+- [**2301**Star][15d] [HTML] [tikam02/devops-guide](https://github.com/tikam02/devops-guide) DevOps Guide from basic to advanced with Interview Questions and Notes
+- [**2295**Star][3y] [Py] [lmacken/pyrasite](https://github.com/lmacken/pyrasite) Inject code into running Python processes
+- [**2287**Star][2y] [Py] [rootphantomer/blasting_dictionary](https://github.com/rootphantomer/blasting_dictionary) 爆破字典
+- [**2284**Star][1m] [C] [moby/hyperkit](https://github.com/moby/hyperkit) A toolkit for embedding hypervisor capabilities in your application
+- [**2283**Star][5m] [Py] [guohongze/adminset](https://github.com/guohongze/adminset) 自动化运维平台:CMDB、CD、DevOps、资产管理、任务编排、持续交付、系统监控、运维管理、配置管理
+- [**2282**Star][3y] [Py] [therook/subbrute](https://github.com/therook/subbrute) A DNS meta-query spider that enumerates DNS records, and subdomains.
+- [**2281**Star][3m] [JS] [retirejs/retire.js](https://github.com/retirejs/retire.js) scanner detecting the use of JavaScript libraries with known vulnerabilities
+- [**2276**Star][24d] [JS] [talkingdata/inmap](https://github.com/talkingdata/inmap) 大数据地理可视化
+- [**2274**Star][1m] [Shell] [v1s1t0r1sh3r3/airgeddon](https://github.com/v1s1t0r1sh3r3/airgeddon) This is a multi-use bash script for Linux systems to audit wireless networks.
+- [**2270**Star][1m] [C] [aurorawright/luma3ds](https://github.com/aurorawright/luma3ds) Noob-proof (N)3DS "Custom Firmware"
+- [**2255**Star][3m] [Py] [novnc/websockify](https://github.com/novnc/websockify) Websockify is a WebSocket to TCP proxy/bridge. This allows a browser to connect to any application/server/service. Implementations in Python, C, Node.js and Ruby.
+- [**2252**Star][18d] [dumb-password-rules/dumb-password-rules](https://github.com/dumb-password-rules/dumb-password-rules) Shaming sites with dumb password rules.
+- [**2252**Star][1m] [Shell] [eliaskotlyar/xiaomi-dafang-hacks](https://github.com/eliaskotlyar/xiaomi-dafang-hacks)
+- [**2248**Star][12d] [PS] [k8gege/k8tools](https://github.com/k8gege/k8tools) K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)
+- [**2245**Star][2y] [Go] [mehrdadrad/mylg](https://github.com/mehrdadrad/mylg) Network Diagnostic Tool
- [**2226**Star][5y] [Go] [filosottile/heartbleed](https://github.com/filosottile/heartbleed) A checker (site and tool) for CVE-2014-0160
-- [**2222**Star][8d] [C#] [netchx/netch](https://github.com/netchx/netch) Game accelerator. Support Socks5, Shadowsocks, ShadowsocksR, V2Ray protocol. UDP NAT FullCone
-- [**2218**Star][7d] [Py] [cloudflare/flan](https://github.com/cloudflare/flan) A pretty sweet vulnerability scanner
+- [**2217**Star][1y] [JS] [cure53/h5sc](https://github.com/cure53/h5sc) HTML5 Security Cheatsheet - A collection of HTML5 related XSS attack vectors
- [**2215**Star][6y] [C++] [codebutler/firesheep](https://github.com/codebutler/firesheep) A Firefox extension that demonstrates HTTP session hijacking attacks.
-- [**2211**Star][1y] [JS] [cure53/h5sc](https://github.com/cure53/h5sc) HTML5 Security Cheatsheet - A collection of HTML5 related XSS attack vectors
-- [**2204**Star][10d] [PowerShell] [k8gege/k8tools](https://github.com/k8gege/k8tools) K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)
-- [**2203**Star][1m] [C] [texane/stlink](https://github.com/texane/stlink) stm32 discovery line linux programmer
-- [**2201**Star][11d] [Go] [google/mtail](https://github.com/google/mtail) extract whitebox monitoring data from application logs for collection in a timeseries database
-- [**2187**Star][21d] [C++] [google/bloaty](https://github.com/google/bloaty) Bloaty McBloatface: a size profiler for binaries
+- [**2213**Star][2d] [Go] [aquasecurity/kube-bench](https://github.com/aquasecurity/kube-bench) Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark
+- [**2211**Star][1m] [C] [texane/stlink](https://github.com/texane/stlink) stm32 discovery line linux programmer
+- [**2211**Star][6d] [Go] [google/mtail](https://github.com/google/mtail) extract whitebox monitoring data from application logs for collection in a timeseries database
+- [**2209**Star][22d] [Rust] [cloudflare/boringtun](https://github.com/cloudflare/boringtun) an implementation of the WireGuard® protocol designed for portability and speed.
+- [**2192**Star][23d] [C++] [google/bloaty](https://github.com/google/bloaty) Bloaty McBloatface: a size profiler for binaries
+- [**2189**Star][1m] [sobolevn/awesome-cryptography](https://github.com/sobolevn/awesome-cryptography) A curated list of cryptography resources and links.
+- [**2187**Star][7d] [getlantern/lantern-binaries](https://github.com/getlantern/lantern-binaries) Lantern installers binary downloads.
+- [**2186**Star][1y] [Py] [datasploit/datasploit](https://github.com/DataSploit/datasploit) 对指定目标执行多种侦查技术:企业、人、电话号码、比特币地址等
- [**2184**Star][3y] [enddo/awesome-windows-exploitation](https://github.com/enddo/awesome-windows-exploitation) A curated list of awesome Windows Exploitation resources, and shiny things. Inspired by awesom
-- [**2182**Star][1y] [Py] [datasploit/datasploit](https://github.com/DataSploit/datasploit) 对指定目标执行多种侦查技术:企业、人、电话号码、比特币地址等
-- [**2177**Star][1m] [JS] [secgroundzero/warberry](https://github.com/secgroundzero/warberry) WarBerryPi - Tactical Exploitation
-- [**2171**Star][14d] [C] [armmbed/mbedtls](https://github.com/armmbed/mbedtls) An open source, portable, easy to use, readable and flexible SSL library
-- [**2168**Star][16d] [getlantern/lantern-binaries](https://github.com/getlantern/lantern-binaries) Lantern installers binary downloads.
-- [**2167**Star][29d] [sobolevn/awesome-cryptography](https://github.com/sobolevn/awesome-cryptography) A curated list of cryptography resources and links.
-- [**2158**Star][2m] [Go] [mmatczuk/go-http-tunnel](https://github.com/mmatczuk/go-http-tunnel) Fast and secure tunnels over HTTP/2
-- [**2156**Star][1m] [C] [conorpp/u2f-zero](https://github.com/conorpp/u2f-zero) U2F USB token optimized for physical security, affordability, and style
-- [**2155**Star][1y] [C++] [maestron/botnets](https://github.com/maestron/botnets) This is a collection of #botnet source codes, unorganized. For EDUCATIONAL PURPOSES ONLY
+- [**2183**Star][2d] [C] [armmbed/mbedtls](https://github.com/armmbed/mbedtls) An open source, portable, easy to use, readable and flexible SSL library
+- [**2179**Star][1m] [JS] [secgroundzero/warberry](https://github.com/secgroundzero/warberry) WarBerryPi - Tactical Exploitation
+- [**2173**Star][1y] [JS] [iam4x/pokemongo-webspoof](https://github.com/iam4x/pokemongo-webspoof)
+- [**2163**Star][2m] [Go] [mmatczuk/go-http-tunnel](https://github.com/mmatczuk/go-http-tunnel) Fast and secure tunnels over HTTP/2
+- [**2162**Star][1y] [C++] [maestron/botnets](https://github.com/maestron/botnets) This is a collection of #botnet source codes, unorganized. For EDUCATIONAL PURPOSES ONLY
+- [**2159**Star][1m] [Py] [commixproject/commix](https://github.com/commixproject/commix) Automated All-in-One OS command injection and exploitation tool.
+- [**2158**Star][9m] [exakat/php-static-analysis-tools](https://github.com/exakat/php-static-analysis-tools) A reviewed list of useful PHP static analysis tools
+- [**2158**Star][1m] [C] [conorpp/u2f-zero](https://github.com/conorpp/u2f-zero) U2F USB token optimized for physical security, affordability, and style
+- [**2158**Star][2m] [PHP] [antonioribeiro/tracker](https://github.com/antonioribeiro/tracker) Tracker gathers a lot of information from your requests to identify and store
- [**2153**Star][6y] [Ruby] [plamoni/siriproxy](https://github.com/plamoni/siriproxy) A (tampering) proxy server for Apple's Siri
-- [**2152**Star][29d] [Py] [commixproject/commix](https://github.com/commixproject/commix) Automated All-in-One OS command injection and exploitation tool.
-- [**2151**Star][9m] [exakat/php-static-analysis-tools](https://github.com/exakat/php-static-analysis-tools) A reviewed list of useful PHP static analysis tools
-- [**2146**Star][14d] [Java] [google/wycheproof](https://github.com/google/wycheproof) Project Wycheproof tests crypto libraries against known attacks.
-- [**2127**Star][1m] [Py] [jonathansalwan/ropgadget](https://github.com/jonathansalwan/ropgadget) This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC and MIPS architectures.
-- [**2124**Star][2m] [Py] [trustedsec/unicorn](https://github.com/trustedsec/unicorn) Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.
-- [**2123**Star][16d] [Assembly] [pret/pokered](https://github.com/pret/pokered) disassembly of Pokémon Red/Blue
-- [**2114**Star][7m] [Py] [calebmadrigal/trackerjacker](https://github.com/calebmadrigal/trackerjacker) Like nmap for mapping wifi networks you're not connected to, plus device tracking
-- [**2112**Star][1y] [Py] [rub-nds/pret](https://github.com/rub-nds/pret) Printer Exploitation Toolkit - The tool that made dumpster diving obsolete.
+- [**2149**Star][8d] [Java] [google/wycheproof](https://github.com/google/wycheproof) Project Wycheproof tests crypto libraries against known attacks.
+- [**2138**Star][2m] [Py] [trustedsec/unicorn](https://github.com/trustedsec/unicorn) Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.
+- [**2132**Star][1m] [Py] [jonathansalwan/ropgadget](https://github.com/jonathansalwan/ropgadget) This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC and MIPS architectures.
+- [**2127**Star][18d] [Assembly] [pret/pokered](https://github.com/pret/pokered) disassembly of Pokémon Red/Blue
+- [**2122**Star][2y] [Py] [rub-nds/pret](https://github.com/rub-nds/pret) Printer Exploitation Toolkit - The tool that made dumpster diving obsolete.
+- [**2118**Star][4d] [goq/telegram-list](https://github.com/goq/telegram-list) List of telegram groups, channels & bots // Список интересных групп, каналов и ботов телеграма // Список чатов для программистов
+- [**2117**Star][1m] [Py] [elceef/dnstwist](https://github.com/elceef/dnstwist) Domain name permutation engine for detecting typo squatting, phishing and corporate espionage
+- [**2116**Star][7m] [Py] [calebmadrigal/trackerjacker](https://github.com/calebmadrigal/trackerjacker) Like nmap for mapping wifi networks you're not connected to, plus device tracking
+- [**2115**Star][2d] [Py] [fortynorthsecurity/eyewitness](https://github.com/FortyNorthSecurity/EyeWitness) EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.
+- [**2114**Star][7y] [C++] [lloyd/node-memwatch](https://github.com/lloyd/node-memwatch) A NodeJS library to keep an eye on your memory usage, and discover and isolate leaks.
- [**2107**Star][4y] [C] [hashcat/hashcat-legacy](https://github.com/hashcat/hashcat-legacy) Advanced CPU-based password recovery utility
-- [**2105**Star][7d] [goq/telegram-list](https://github.com/goq/telegram-list) List of telegram groups, channels & bots // Список интересных групп, каналов и ботов телеграма // Список чатов для программистов
-- [**2105**Star][1m] [Py] [elceef/dnstwist](https://github.com/elceef/dnstwist) Domain name permutation engine for detecting typo squatting, phishing and corporate espionage
-- [**2103**Star][8m] [Py] [linkedin/qark](https://github.com/linkedin/qark) Tool to look for several security related Android application vulnerabilities
-- [**2098**Star][19d] [Py] [fortynorthsecurity/eyewitness](https://github.com/FortyNorthSecurity/EyeWitness) EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.
-- [**2098**Star][21d] [infoslack/awesome-web-hacking](https://github.com/infoslack/awesome-web-hacking) A list of web application security
-- [**2090**Star][3m] [yeahhub/hacking-security-ebooks](https://github.com/yeahhub/hacking-security-ebooks) Top 100 Hacking & Security E-Books (Free Download)
-- [**2081**Star][8d] [C] [flatpak/flatpak](https://github.com/flatpak/flatpak) Linux application sandboxing and distribution framework
-- [**2071**Star][30d] [Go] [theupdateframework/notary](https://github.com/theupdateframework/notary) Notary is a project that allows anyone to have trust over arbitrary collections of data
-- [**2069**Star][20d] [Ruby] [urbanadventurer/whatweb](https://github.com/urbanadventurer/whatweb) Next generation web scanner
-- [**2062**Star][9m] [jermic/android-crack-tool](https://github.com/jermic/android-crack-tool)
-- [**2051**Star][4m] [Py] [whaleshark-team/cobra](https://github.com/WhaleShark-Team/cobra) Source Code Security Audit (源代码安全审计)
-- [**2049**Star][1y] [bluscreenofjeff/red-team-infrastructure-wiki](https://github.com/bluscreenofjeff/red-team-infrastructure-wiki) Wiki to collect Red Team infrastructure hardening resources
-- [**2047**Star][6m] [Go] [maxmcd/webtty](https://github.com/maxmcd/webtty) Share a terminal session over WebRTC
-- [**2041**Star][2y] [Py] [derv82/wifite](https://github.com/derv82/wifite) an automated wireless attack tool.
-- [**2037**Star][10d] [Py] [nabla-c0d3/sslyze](https://github.com/nabla-c0d3/sslyze) Fast and powerful SSL/TLS server scanning library.
-- [**2036**Star][2m] [C++] [lordnoteworthy/al-khaser](https://github.com/lordnoteworthy/al-khaser) Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.
-- [**2035**Star][2m] [tanprathan/mobileapp-pentest-cheatsheet](https://github.com/tanprathan/mobileapp-pentest-cheatsheet) The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.
-- [**2035**Star][8m] [Shell] [foospidy/payloads](https://github.com/foospidy/payloads) Git All the Payloads! A collection of web attack payloads.
-- [**2032**Star][7d] [C++] [openthread/openthread](https://github.com/openthread/openthread) OpenThread released by Google is an open-source implementation of the Thread networking protocol
-- [**2032**Star][1m] [edoverflow/bugbounty-cheatsheet](https://github.com/edoverflow/bugbounty-cheatsheet) A list of interesting payloads, tips and tricks for bug bounty hunters.
-- [**2024**Star][5y] [CoffeeScript] [shadowsocks/shadowsocks-gui](https://github.com/shadowsocks/shadowsocks-gui) Shadowsocks GUI client
-- [**2020**Star][20d] [Objective-C] [ios-control/ios-deploy](https://github.com/ios-control/ios-deploy) Install and debug iPhone apps from the command line, without using Xcode
-- [**2017**Star][3m] [C++] [darthton/blackbone](https://github.com/darthton/blackbone) Windows memory hacking library
-- [**2016**Star][3y] [Swift] [urinx/iosapphook](https://github.com/urinx/iosapphook) 专注于非越狱环境下iOS应用逆向研究,从dylib注入,应用重签名到App Hook
-- [**2014**Star][8d] [Py] [sensepost/objection](https://github.com/sensepost/objection) runtimemobile exploration
-- [**2012**Star][1y] [C] [xoreaxeaxeax/rosenbridge](https://github.com/xoreaxeaxeax/rosenbridge) Hardware backdoors in some x86 CPUs
-- [**2006**Star][9m] [C] [dekunukem/nintendo_switch_reverse_engineering](https://github.com/dekunukem/nintendo_switch_reverse_engineering) A look at inner workings of Joycon and Nintendo Switch
-- [**2004**Star][4y] [C] [probablycorey/wax](https://github.com/probablycorey/wax) Wax is now being maintained by alibaba
-- [**1999**Star][8d] [Java] [jeremylong/dependencycheck](https://github.com/jeremylong/dependencycheck) OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
-- [**1998**Star][13d] [Shell] [wulabing/v2ray_ws-tls_bash_onekey](https://github.com/wulabing/v2ray_ws-tls_bash_onekey) V2Ray Nginx+vmess+ws+tls/ http2 over tls 一键安装脚本
-- [**1992**Star][25d] [Swift] [github/softu2f](https://github.com/github/softu2f) Software U2F authenticator for macOS
-- [**1991**Star][29d] [qazbnm456/awesome-cve-poc](https://github.com/qazbnm456/awesome-cve-poc) A curated list of CVE PoCs.
-- [**1990**Star][4m] [swiftonsecurity/sysmon-config](https://github.com/swiftonsecurity/sysmon-config) Sysmon configuration file template with default high-quality event tracing
-- [**1988**Star][4y] [Go] [yahoo/gryffin](https://github.com/yahoo/gryffin) Gryffin is a large scale web security scanning platform.
-- [**1987**Star][7m] [Py] [fsecurelabs/drozer](https://github.com/FSecureLABS/drozer) The Leading Security Assessment Framework for Android.
-- [**1983**Star][2y] [dloss/python-pentest-tools](https://github.com/dloss/python-pentest-tools) Python tools for penetration testers
-- [**1983**Star][2m] [C++] [asmjit/asmjit](https://github.com/asmjit/asmjit) Complete x86/x64 JIT and AOT Assembler for C++
-- [**1976**Star][3m] [infosecn1nja/ad-attack-defense](https://github.com/infosecn1nja/ad-attack-defense) Attack and defend active directory using modern post exploitation adversary tradecraft activity
-- [**1967**Star][26d] [Java] [genymobile/gnirehtet](https://github.com/genymobile/gnirehtet) Gnirehtet provides reverse tethering for Android
-- [**1965**Star][9m] [JS] [weichiachang/stacks-cli](https://github.com/weichiachang/stacks-cli) Check website stack from the terminal
-- [**1963**Star][11d] [HTML] [gtfobins/gtfobins.github.io](https://github.com/gtfobins/gtfobins.github.io) Curated list of Unix binaries that can be exploited to bypass system security restrictions
-- [**1963**Star][27d] [Java] [elderdrivers/edxposed](https://github.com/elderdrivers/edxposed) Elder driver Xposed Framework.
-- [**1962**Star][1m] [Py] [momosecurity/aswan](https://github.com/momosecurity/aswan) 陌陌风控系统静态规则引擎,零基础简易便捷的配置多种复杂规则,实时高效管控用户异常行为。
-- [**1958**Star][26d] [C#] [mathewsachin/captura](https://github.com/mathewsachin/captura) Capture Screen, Audio, Cursor, Mouse Clicks and Keystrokes
-- [**1957**Star][9d] [Go] [ullaakut/cameradar](https://github.com/Ullaakut/cameradar) Cameradar hacks its way into RTSP videosurveillance cameras
-- [**1954**Star][1y] [BitBake] [1n3/intruderpayloads](https://github.com/1n3/intruderpayloads) A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.
-- [**1946**Star][2y] [obfuscator-llvm/obfuscator](https://github.com/obfuscator-llvm/obfuscator) Obfuscator-LLVM
-- [**1945**Star][7d] [Perl] [spiderlabs/owasp-modsecurity-crs](https://github.com/spiderlabs/owasp-modsecurity-crs) OWASP ModSecurity Core Rule Set (CRS) Project (Official Repository)
-- [**1940**Star][3y] [C#] [lazocoder/windows-hacks](https://github.com/lazocoder/windows-hacks) Creative and unusual things that can be done with the Windows API.
-- [**1939**Star][2m] [C] [microsoft/procdump-for-linux](https://github.com/microsoft/procdump-for-linux) A Linux version of the ProcDump Sysinternals tool
-- [**1938**Star][27d] [Py] [nixawk/pentest-wiki](https://github.com/nixawk/pentest-wiki) PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.
-- [**1938**Star][14d] [Py] [cea-sec/miasm](https://github.com/cea-sec/miasm) Reverse engineering framework in Python
-- [**1926**Star][17d] [Go] [mpolden/echoip](https://github.com/mpolden/echoip) IP address lookup service
-- [**1913**Star][5m] [C] [darkk/redsocks](https://github.com/darkk/redsocks) transparent TCP-to-proxy redirector
-- [**1912**Star][3m] [toolswatch/blackhat-arsenal-tools](https://github.com/toolswatch/blackhat-arsenal-tools) Official Black Hat Arsenal Security Tools Repository
-- [**1911**Star][3y] [Py] [aoncyberlabs/windows-exploit-suggester](https://github.com/AonCyberLabs/Windows-Exploit-Suggester) This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules available for the missing bulletins.
-- [**1911**Star][8d] [C] [ntop/ndpi](https://github.com/ntop/ndpi) Open Source Deep Packet Inspection Software Toolkit
-- [**1909**Star][3d] [Go] [projectdiscovery/subfinder](https://github.com/projectdiscovery/subfinder) Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.
-- [**1909**Star][9d] [Py] [j3ssie/osmedeus](https://github.com/j3ssie/osmedeus) Fully automated offensive security framework for reconnaissance and vulnerability scanning
-- [**1908**Star][7d] [C++] [powerdns/pdns](https://github.com/powerdns/pdns) PowerDNS
-- [**1907**Star][16d] [Py] [lanjelot/patator](https://github.com/lanjelot/patator) Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.
-- [**1906**Star][13d] [CSS] [cyb3rward0g/helk](https://github.com/cyb3rward0g/helk) The Hunting ELK
-- [**1902**Star][7d] [Go] [solo-io/gloo](https://github.com/solo-io/gloo) An Envoy-Powered API Gateway
-- [**1901**Star][3m] [Go] [minishift/minishift](https://github.com/minishift/minishift) Run OpenShift 3.x locally
-- [**1892**Star][19d] [C] [chipsec/chipsec](https://github.com/chipsec/chipsec) Platform Security Assessment Framework
-- [**1891**Star][7d] [Py] [mozilla/mozdef](https://github.com/mozilla/mozdef) Mozilla Enterprise Defense Platform
-- [**1886**Star][8d] [Go] [chaitin/xray](https://github.com/chaitin/xray) xray 安全评估工具 | 使用之前务必先阅读文档
-- [**1880**Star][14d] [C++] [mhammond/pywin32](https://github.com/mhammond/pywin32) Python for Windows (pywin32) Extensions
-- [**1878**Star][4m] [C] [shadowsocks/simple-obfs](https://github.com/shadowsocks/simple-obfs) A simple obfuscating tool (Deprecated)
-- [**1876**Star][7d] [Shell] [toniblyx/prowler](https://github.com/toniblyx/prowler) AWS Security Best Practices Assessment, Auditing, Hardening and Forensics Readiness Tool. It follows guidelines of the CIS Amazon Web Services Foundations Benchmark and DOZENS of additional checks including GDPR and HIPAA (+100). Official CIS for AWS guide:
-- [**1876**Star][5y] [C++] [tum-vision/lsd_slam](https://github.com/tum-vision/lsd_slam) LSD-SLAM
-- [**1876**Star][4m] [Py] [python-security/pyt](https://github.com/python-security/pyt) A Static Analysis Tool for Detecting Security Vulnerabilities in Python Web Applications
-- [**1876**Star][6m] [Java] [fuzion24/justtrustme](https://github.com/fuzion24/justtrustme) An xposed module that disables SSL certificate checking for the purposes of auditing an app with cert pinning
-- [**1876**Star][1y] [Py] [aploium/zmirror](https://github.com/aploium/zmirror) The next-gen reverse proxy for full site mirroring
-- [**1869**Star][13d] [YARA] [yara-rules/rules](https://github.com/yara-rules/rules) Repository of yara rules
-- [**1868**Star][1y] [Py] [derv82/wifite2](https://github.com/derv82/wifite2) Rewrite of the popular wireless network auditor, "wifite"
-- [**1867**Star][2m] [Py] [pycqa/bandit](https://github.com/pycqa/bandit) find common security issues in Python code.
-- [**1864**Star][7d] [C] [merbanan/rtl_433](https://github.com/merbanan/rtl_433) Program to decode traffic from Devices that are broadcasting on 433.9 MHz like temperature sensors
-- [**1863**Star][4y] [Objective-C] [xcodeghostsource/xcodeghost](https://github.com/xcodeghostsource/xcodeghost) "XcodeGhost" Source
-- [**1861**Star][10m] [PHP] [bartblaze/php-backdoors](https://github.com/bartblaze/php-backdoors) A collection of PHP backdoors. For educational or testing purposes only.
-- [**1861**Star][4m] [Java] [adoptopenjdk/jitwatch](https://github.com/adoptopenjdk/jitwatch) Log analyser / visualiser for Java HotSpot JIT compiler. Inspect inlining decisions, hot methods, bytecode, and assembly. View results in the JavaFX user interface.
-- [**1858**Star][10d] [Py] [aquasecurity/kube-hunter](https://github.com/aquasecurity/kube-hunter) Hunt for security weaknesses in Kubernetes clusters
-- [**1857**Star][21d] [C] [tinyproxy/tinyproxy](https://github.com/tinyproxy/tinyproxy) a light-weight HTTP/HTTPS proxy daemon for POSIX operating systems
-- [**1857**Star][7d] [olivierlaflamme/cheatsheet-god](https://github.com/olivierlaflamme/cheatsheet-god) Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet
-- [**1849**Star][11m] [C++] [googlecreativelab/open-nsynth-super](https://github.com/googlecreativelab/open-nsynth-super) Open NSynth Super is an experimental physical interface for the NSynth algorithm
-- [**1848**Star][29d] [C] [github/glb-director](https://github.com/github/glb-director) GitHub Load Balancer Director and supporting tooling.
-- [**1846**Star][8m] [Py] [netflix-skunkworks/stethoscope](https://github.com/Netflix-Skunkworks/stethoscope) Personalized, user-focused recommendations for employee information security.
-- [**1845**Star][2m] [Py] [pwnlandia/mhn](https://github.com/pwnlandia/mhn) Modern Honey Network
-- [**1844**Star][8d] [TypeScript] [snyk/snyk](https://github.com/snyk/snyk) CLI and build-time tool to find & fix known vulnerabilities in open-source dependencies
-- [**1842**Star][1y] [Java] [jindrapetrik/jpexs-decompiler](https://github.com/jindrapetrik/jpexs-decompiler) JPEXS Free Flash Decompiler
-- [**1841**Star][13d] [C++] [acidanthera/lilu](https://github.com/acidanthera/Lilu) Arbitrary kext and process patching on macOS
+- [**2105**Star][8m] [Py] [linkedin/qark](https://github.com/linkedin/qark) Tool to look for several security related Android application vulnerabilities
+- [**2103**Star][3m] [yeahhub/hacking-security-ebooks](https://github.com/yeahhub/hacking-security-ebooks) Top 100 Hacking & Security E-Books (Free Download)
+- [**2103**Star][23d] [infoslack/awesome-web-hacking](https://github.com/infoslack/awesome-web-hacking) A list of web application security
+- [**2095**Star][2d] [C] [wireguard/wireguard](https://github.com/wireguard/wireguard) fast, modern, secure kernel VPN tunnel
+- [**2093**Star][22d] [Ruby] [urbanadventurer/whatweb](https://github.com/urbanadventurer/whatweb) Next generation web scanner
+- [**2084**Star][5d] [C] [flatpak/flatpak](https://github.com/flatpak/flatpak) Linux application sandboxing and distribution framework
+- [**2078**Star][1m] [Go] [theupdateframework/notary](https://github.com/theupdateframework/notary) Notary is a project that allows anyone to have trust over arbitrary collections of data
+- [**2071**Star][15d] [Shell] [wulabing/v2ray_ws-tls_bash_onekey](https://github.com/wulabing/v2ray_ws-tls_bash_onekey) V2Ray Nginx+vmess+ws+tls/ http2 over tls 一键安装脚本
+- [**2066**Star][9m] [jermic/android-crack-tool](https://github.com/jermic/android-crack-tool)
+- [**2058**Star][4m] [Py] [whaleshark-team/cobra](https://github.com/WhaleShark-Team/cobra) Source Code Security Audit (源代码安全审计)
+- [**2057**Star][1y] [bluscreenofjeff/red-team-infrastructure-wiki](https://github.com/bluscreenofjeff/red-team-infrastructure-wiki) Wiki to collect Red Team infrastructure hardening resources
+- [**2054**Star][7d] [swiftonsecurity/sysmon-config](https://github.com/swiftonsecurity/sysmon-config) Sysmon configuration file template with default high-quality event tracing
+- [**2051**Star][2m] [tanprathan/mobileapp-pentest-cheatsheet](https://github.com/tanprathan/mobileapp-pentest-cheatsheet) The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.
+- [**2048**Star][6m] [Go] [maxmcd/webtty](https://github.com/maxmcd/webtty) Share a terminal session over WebRTC
+- [**2047**Star][1m] [edoverflow/bugbounty-cheatsheet](https://github.com/edoverflow/bugbounty-cheatsheet) A list of interesting payloads, tips and tricks for bug bounty hunters.
+- [**2045**Star][2m] [C++] [lordnoteworthy/al-khaser](https://github.com/lordnoteworthy/al-khaser) Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.
+- [**2045**Star][8m] [Shell] [foospidy/payloads](https://github.com/foospidy/payloads) Git All the Payloads! A collection of web attack payloads.
+- [**2043**Star][12d] [Py] [nabla-c0d3/sslyze](https://github.com/nabla-c0d3/sslyze) Fast and powerful SSL/TLS server scanning library.
+- [**2042**Star][2y] [Py] [derv82/wifite](https://github.com/derv82/wifite) an automated wireless attack tool.
+- [**2039**Star][5d] [C++] [openthread/openthread](https://github.com/openthread/openthread) OpenThread released by Google is an open-source implementation of the Thread networking protocol
+- [**2033**Star][2d] [ObjC] [ios-control/ios-deploy](https://github.com/ios-control/ios-deploy) Install and debug iPhone apps from the command line, without using Xcode
+- [**2033**Star][2d] [Py] [sensepost/objection](https://github.com/sensepost/objection) runtimemobile exploration
+- [**2029**Star][3d] [Go] [goodrain/rainbond](https://github.com/goodrain/rainbond) Enterprise application cloud operating system(企业应用云操作系统)
+- [**2025**Star][5y] [CoffeeScript] [shadowsocks/shadowsocks-gui](https://github.com/shadowsocks/shadowsocks-gui) Shadowsocks GUI client
+- [**2024**Star][2d] [C++] [darthton/blackbone](https://github.com/darthton/blackbone) Windows memory hacking library
+- [**2017**Star][3y] [Swift] [urinx/iosapphook](https://github.com/urinx/iosapphook) 专注于非越狱环境下iOS应用逆向研究,从dylib注入,应用重签名到App Hook
+- [**2016**Star][23d] [Java] [genymobile/gnirehtet](https://github.com/genymobile/gnirehtet) Gnirehtet provides reverse tethering for Android
+- [**2016**Star][9m] [C] [dekunukem/nintendo_switch_reverse_engineering](https://github.com/dekunukem/nintendo_switch_reverse_engineering) A look at inner workings of Joycon and Nintendo Switch
+- [**2014**Star][1y] [C] [xoreaxeaxeax/rosenbridge](https://github.com/xoreaxeaxeax/rosenbridge) Hardware backdoors in some x86 CPUs
+- [**2014**Star][5d] [Java] [jeremylong/dependencycheck](https://github.com/jeremylong/dependencycheck) OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
+- [**2005**Star][4y] [C] [probablycorey/wax](https://github.com/probablycorey/wax) Wax is now being maintained by alibaba
+- [**2003**Star][2m] [Go] [skynetservices/skydns](https://github.com/skynetservices/skydns) DNS service discovery for etcd
+- [**2000**Star][1m] [qazbnm456/awesome-cve-poc](https://github.com/qazbnm456/awesome-cve-poc) A curated list of CVE PoCs.
+- [**1996**Star][29d] [Java] [elderdrivers/edxposed](https://github.com/elderdrivers/edxposed) Elder driver Xposed Framework.
+- [**1994**Star][7m] [Py] [fsecurelabs/drozer](https://github.com/FSecureLABS/drozer) The Leading Security Assessment Framework for Android.
+- [**1994**Star][3m] [infosecn1nja/ad-attack-defense](https://github.com/infosecn1nja/ad-attack-defense) Attack and defend active directory using modern post exploitation adversary tradecraft activity
+- [**1994**Star][27d] [Swift] [github/softu2f](https://github.com/github/softu2f) Software U2F authenticator for macOS
+- [**1992**Star][5d] [C#] [mathewsachin/captura](https://github.com/mathewsachin/captura) Capture Screen, Audio, Cursor, Mouse Clicks and Keystrokes
+- [**1990**Star][8d] [HTML] [gtfobins/gtfobins.github.io](https://github.com/gtfobins/gtfobins.github.io) Curated list of Unix binaries that can be exploited to bypass system security restrictions
+- [**1989**Star][4y] [Go] [yahoo/gryffin](https://github.com/yahoo/gryffin) Gryffin is a large scale web security scanning platform.
+- [**1989**Star][2m] [C++] [asmjit/asmjit](https://github.com/asmjit/asmjit) Complete x86/x64 JIT and AOT Assembler for C++
+- [**1987**Star][2y] [dloss/python-pentest-tools](https://github.com/dloss/python-pentest-tools) Python tools for penetration testers
+- [**1977**Star][5d] [Go] [projectdiscovery/subfinder](https://github.com/projectdiscovery/subfinder) Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.
+- [**1977**Star][5d] [Go] [projectdiscovery/subfinder](https://github.com/projectdiscovery/subfinder) 使用Passive Sources, Search Engines, Pastebins, Internet Archives等查找子域名
+- [**1972**Star][1m] [Py] [momosecurity/aswan](https://github.com/momosecurity/aswan) 陌陌风控系统静态规则引擎,零基础简易便捷的配置多种复杂规则,实时高效管控用户异常行为。
+- [**1971**Star][5d] [Py] [j3ssie/osmedeus](https://github.com/j3ssie/osmedeus) Fully automated offensive security framework for reconnaissance and vulnerability scanning
+- [**1966**Star][11d] [Go] [ullaakut/cameradar](https://github.com/Ullaakut/cameradar) Cameradar hacks its way into RTSP videosurveillance cameras
+- [**1966**Star][9m] [JS] [weichiachang/stacks-cli](https://github.com/weichiachang/stacks-cli) Check website stack from the terminal
+- [**1966**Star][1y] [BitBake] [1n3/intruderpayloads](https://github.com/1n3/intruderpayloads) A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.
+- [**1955**Star][7d] [Perl] [spiderlabs/owasp-modsecurity-crs](https://github.com/spiderlabs/owasp-modsecurity-crs) OWASP ModSecurity Core Rule Set (CRS) Project (Official Repository)
+- [**1953**Star][2y] [obfuscator-llvm/obfuscator](https://github.com/obfuscator-llvm/obfuscator) Obfuscator-LLVM
+- [**1952**Star][1y] [Go] [hyperhq/hyperd](https://github.com/hyperhq/hyperd) HyperContainer Daemon
+- [**1951**Star][8d] [Py] [cea-sec/miasm](https://github.com/cea-sec/miasm) Reverse engineering framework in Python
+- [**1947**Star][29d] [Py] [nixawk/pentest-wiki](https://github.com/nixawk/pentest-wiki) PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.
+- [**1945**Star][5d] [C] [microsoft/procdump-for-linux](https://github.com/microsoft/procdump-for-linux) A Linux version of the ProcDump Sysinternals tool
+- [**1942**Star][3y] [C#] [lazocoder/windows-hacks](https://github.com/lazocoder/windows-hacks) Creative and unusual things that can be done with the Windows API.
+- [**1938**Star][4m] [C] [meituan-dianping/logan](https://github.com/meituan-dianping/logan) Logan is a lightweight case logging system based on mobile platform.
+- [**1938**Star][7d] [Go] [zalando/skipper](https://github.com/zalando/skipper) An HTTP router and reverse proxy for service composition, including use cases like Kubernetes Ingress
+- [**1935**Star][19d] [Go] [mpolden/echoip](https://github.com/mpolden/echoip) IP address lookup service
+- [**1933**Star][5m] [C] [darkk/redsocks](https://github.com/darkk/redsocks) transparent TCP-to-proxy redirector
+- [**1923**Star][3y] [Py] [aoncyberlabs/windows-exploit-suggester](https://github.com/AonCyberLabs/Windows-Exploit-Suggester) This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules available for the missing bulletins.
+- [**1920**Star][4y] [Py] [ziggear/shadowsocks](https://github.com/ziggear/shadowsocks) backup of
+- [**1920**Star][2d] [C++] [powerdns/pdns](https://github.com/powerdns/pdns) PowerDNS
+- [**1920**Star][9d] [CSS] [cyb3rward0g/helk](https://github.com/cyb3rward0g/helk) The Hunting ELK
+- [**1918**Star][3m] [toolswatch/blackhat-arsenal-tools](https://github.com/toolswatch/blackhat-arsenal-tools) Official Black Hat Arsenal Security Tools Repository
+- [**1917**Star][2d] [C] [ntop/ndpi](https://github.com/ntop/ndpi) Open Source Deep Packet Inspection Software Toolkit
+- [**1915**Star][18d] [Py] [lanjelot/patator](https://github.com/lanjelot/patator) Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.
+- [**1914**Star][7d] [Go] [solo-io/gloo](https://github.com/solo-io/gloo) An Envoy-Powered API Gateway
+- [**1914**Star][2d] [chaitin/xray](https://github.com/chaitin/xray) xray 安全评估工具 | 使用之前务必先阅读文档
+- [**1903**Star][3m] [Go] [minishift/minishift](https://github.com/minishift/minishift) Run OpenShift 3.x locally
+- [**1901**Star][9d] [C] [chipsec/chipsec](https://github.com/chipsec/chipsec) Platform Security Assessment Framework
+- [**1900**Star][1y] [Py] [derv82/wifite2](https://github.com/derv82/wifite2) Rewrite of the popular wireless network auditor, "wifite"
+- [**1898**Star][3d] [C++] [mhammond/pywin32](https://github.com/mhammond/pywin32) Python for Windows (pywin32) Extensions
+- [**1896**Star][7d] [Shell] [toniblyx/prowler](https://github.com/toniblyx/prowler) AWS Security Best Practices Assessment, Auditing, Hardening and Forensics Readiness Tool. It follows guidelines of the CIS Amazon Web Services Foundations Benchmark and DOZENS of additional checks including GDPR and HIPAA (+100). Official CIS for AWS guide:
+- [**1893**Star][6d] [Py] [mozilla/mozdef](https://github.com/mozilla/mozdef) Mozilla Enterprise Defense Platform
+- [**1893**Star][6m] [Java] [fuzion24/justtrustme](https://github.com/fuzion24/justtrustme) An xposed module that disables SSL certificate checking for the purposes of auditing an app with cert pinning
+- [**1886**Star][4m] [C] [shadowsocks/simple-obfs](https://github.com/shadowsocks/simple-obfs) A simple obfuscating tool (Deprecated)
+- [**1884**Star][1y] [Py] [aploium/zmirror](https://github.com/aploium/zmirror) The next-gen reverse proxy for full site mirroring
+- [**1880**Star][4m] [Py] [python-security/pyt](https://github.com/python-security/pyt) A Static Analysis Tool for Detecting Security Vulnerabilities in Python Web Applications
+- [**1878**Star][16d] [YARA] [yara-rules/rules](https://github.com/yara-rules/rules) Repository of yara rules
+- [**1878**Star][5y] [C++] [tum-vision/lsd_slam](https://github.com/tum-vision/lsd_slam) LSD-SLAM
+- [**1878**Star][2m] [Py] [pycqa/bandit](https://github.com/pycqa/bandit) find common security issues in Python code.
+- [**1877**Star][2d] [C] [merbanan/rtl_433](https://github.com/merbanan/rtl_433) Program to decode traffic from Devices that are broadcasting on 433.9 MHz like temperature sensors
+- [**1876**Star][9d] [olivierlaflamme/cheatsheet-god](https://github.com/olivierlaflamme/cheatsheet-god) Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet
+- [**1876**Star][27d] [hmaverickadams/beginner-network-pentesting](https://github.com/hmaverickadams/beginner-network-pentesting) Notes for Beginner Network Pentesting Course
+- [**1873**Star][12d] [Py] [aquasecurity/kube-hunter](https://github.com/aquasecurity/kube-hunter) Hunt for security weaknesses in Kubernetes clusters
+- [**1870**Star][5d] [C#] [hmbsbige/shadowsocksr-windows](https://github.com/hmbsbige/shadowsocksr-windows) 【自用】Bug-Oriented Programming
+- [**1869**Star][6d] [Java] [adoptopenjdk/jitwatch](https://github.com/adoptopenjdk/jitwatch) Log analyser / visualiser for Java HotSpot JIT compiler. Inspect inlining decisions, hot methods, bytecode, and assembly. View results in the JavaFX user interface.
+- [**1865**Star][6d] [C++] [acidanthera/lilu](https://github.com/acidanthera/Lilu) Arbitrary kext and process patching on macOS
+- [**1865**Star][10m] [PHP] [bartblaze/php-backdoors](https://github.com/bartblaze/php-backdoors) A collection of PHP backdoors. For educational or testing purposes only.
+- [**1864**Star][23d] [C] [tinyproxy/tinyproxy](https://github.com/tinyproxy/tinyproxy) a light-weight HTTP/HTTPS proxy daemon for POSIX operating systems
+- [**1862**Star][4y] [ObjC] [xcodeghostsource/xcodeghost](https://github.com/xcodeghostsource/xcodeghost) "XcodeGhost" Source
+- [**1860**Star][9d] [Lua] [vulnerscom/nmap-vulners](https://github.com/vulnerscom/nmap-vulners) NSE script based on Vulners.com API
+- [**1857**Star][5m] [bypass007/emergency-response-notes](https://github.com/bypass007/emergency-response-notes) 应急响应实战笔记,一个安全工程师的自我修养。
+- [**1855**Star][2m] [Py] [pwnlandia/mhn](https://github.com/pwnlandia/mhn) Modern Honey Network
+- [**1854**Star][5d] [TS] [snyk/snyk](https://github.com/snyk/snyk) CLI and build-time tool to find & fix known vulnerabilities in open-source dependencies
+- [**1854**Star][11m] [C++] [googlecreativelab/open-nsynth-super](https://github.com/googlecreativelab/open-nsynth-super) Open NSynth Super is an experimental physical interface for the NSynth algorithm
+- [**1853**Star][2d] [Py] [bregman-arie/devops-interview-questions](https://github.com/bregman-arie/devops-interview-questions) Linux, Jenkins, AWS, SRE, Prometheus, Docker, Python, Ansible, Git, Kubernetes, Terraform, OpenStack, SQL, NoSQL, Azure, GCP, DNS, Elastic
+- [**1853**Star][4m] [Shell] [arismelachroinos/lscript](https://github.com/arismelachroinos/lscript) The LAZY script will make your life easier, and of course faster.
+- [**1852**Star][3d] [C] [github/glb-director](https://github.com/github/glb-director) GitHub Load Balancer Director and supporting tooling.
+- [**1851**Star][1y] [Java] [jindrapetrik/jpexs-decompiler](https://github.com/jindrapetrik/jpexs-decompiler) JPEXS Free Flash Decompiler
+- [**1848**Star][6m] [Assembly] [pooler/cpuminer](https://github.com/pooler/cpuminer) cpuminer:莱特币和比特币的多线程 CPU 矿机
+- [**1847**Star][8m] [Py] [netflix-skunkworks/stethoscope](https://github.com/Netflix-Skunkworks/stethoscope) Personalized, user-focused recommendations for employee information security.
+- [**1842**Star][1m] [Jupyter Notebook] [hunters-forge/threathunter-playbook](https://github.com/hunters-forge/ThreatHunter-Playbook) A Threat hunter's playbook to aid the development of techniques and hypothesis for hunting campaigns.
+- [**1842**Star][1y] [Java] [yeriomin/yalpstore](https://github.com/yeriomin/yalpstore) Download apks from Google Play Store
+- [**1842**Star][2d] [C++] [pytorch/glow](https://github.com/pytorch/glow) Compiler for Neural Network hardware accelerators
- [**1841**Star][2m] [C] [retroplasma/earth-reverse-engineering](https://github.com/retroplasma/earth-reverse-engineering) Reversing Google's 3D satellite mode
-- [**1839**Star][4m] [bypass007/emergency-response-notes](https://github.com/bypass007/emergency-response-notes) 应急响应实战笔记,一个安全工程师的自我修养。
-- [**1837**Star][4m] [Lua] [vulnerscom/nmap-vulners](https://github.com/vulnerscom/nmap-vulners) NSE script based on Vulners.com API
-- [**1836**Star][3y] [Java] [chora10/cknife](https://github.com/chora10/cknife) Cknife
-- [**1835**Star][1y] [Java] [yeriomin/yalpstore](https://github.com/yeriomin/yalpstore) Download apks from Google Play Store
-- [**1833**Star][25d] [hmaverickadams/beginner-network-pentesting](https://github.com/hmaverickadams/beginner-network-pentesting) Notes for Beginner Network Pentesting Course
-- [**1832**Star][4m] [Shell] [arismelachroinos/lscript](https://github.com/arismelachroinos/lscript) The LAZY script will make your life easier, and of course faster.
-- [**1830**Star][7d] [C++] [pytorch/glow](https://github.com/pytorch/glow) Compiler for Neural Network hardware accelerators
-- [**1829**Star][1y] [Py] [jinnlynn/genpac](https://github.com/jinnlynn/genpac) PAC/Dnsmasq/Wingy file Generator, working with gfwlist, support custom rules.
-- [**1827**Star][1m] [Jupyter Notebook] [hunters-forge/threathunter-playbook](https://github.com/hunters-forge/ThreatHunter-Playbook) A Threat hunter's playbook to aid the development of techniques and hypothesis for hunting campaigns.
-- [**1827**Star][2m] [Go] [influxdata/kapacitor](https://github.com/influxdata/kapacitor) Open source framework for processing, monitoring, and alerting on time series data
-- [**1827**Star][1y] [CSS] [ctfs/write-ups-2015](https://github.com/ctfs/write-ups-2015) Wiki-like CTF write-ups repository, maintained by the community. 2015
-- [**1819**Star][13d] [Py] [trailofbits/manticore](https://github.com/trailofbits/manticore) Symbolic execution tool
-- [**1816**Star][19d] [C] [mgba-emu/mgba](https://github.com/mgba-emu/mgba) mGBA Game Boy Advance Emulator
-- [**1814**Star][7d] [Py] [bregman-arie/devops-interview-questions](https://github.com/bregman-arie/devops-interview-questions) Linux, Jenkins, AWS, SRE, Prometheus, Docker, Python, Ansible, Git, Kubernetes, Terraform, OpenStack, SQL, NoSQL, Azure, GCP, DNS, Elastic
-- [**1808**Star][6m] [C++] [iagox86/dnscat2](https://github.com/iagox86/dnscat2) create an encrypted command-and-control (C&C) channel over the DNS protocol, which is an effective tunnel out of almost every network.
-- [**1806**Star][5m] [Py] [veil-framework/veil](https://github.com/veil-framework/veil) generate metasploit payloads that bypass common anti-virus solutions
-- [**1801**Star][3y] [Objective-C] [kpwn/yalu102](https://github.com/kpwn/yalu102) incomplete iOS 10.2 jailbreak for 64 bit devices by qwertyoruiopz and marcograssi
-- [**1801**Star][2m] [djadmin/awesome-bug-bounty](https://github.com/djadmin/awesome-bug-bounty) A comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.
-- [**1788**Star][28d] [Go] [gdamore/tcell](https://github.com/gdamore/tcell) Tcell is an alternate terminal package, similar in some ways to termbox, but better in others.
-- [**1785**Star][11m] [Py] [ctfs/write-ups-2017](https://github.com/ctfs/write-ups-2017) Wiki-like CTF write-ups repository, maintained by the community. 2017
-- [**1784**Star][7d] [C#] [hmbsbige/shadowsocksr-windows](https://github.com/hmbsbige/shadowsocksr-windows) 【自用】Bug-Oriented Programming
-- [**1783**Star][7m] [Py] [lijiejie/subdomainsbrute](https://github.com/lijiejie/subdomainsbrute) A fast sub domain brute tool for pentesters
-- [**1777**Star][18d] [PHP] [ezyang/htmlpurifier](https://github.com/ezyang/htmlpurifier) Standards compliant HTML filter written in PHP
-- [**1776**Star][13d] [C++] [apitrace/apitrace](https://github.com/apitrace/apitrace) Tools for tracing OpenGL, Direct3D, and other graphics APIs
-- [**1775**Star][4y] [caesar0301/awesome-pcaptools](https://github.com/caesar0301/awesome-pcaptools) A collection of tools developed by other researchers in the Computer Science area to process network traces. All the right reserved for the original authors.
-- [**1774**Star][1y] [aozhimin/ios-monitor-platform](https://github.com/aozhimin/ios-monitor-platform)
-- [**1770**Star][3y] [Objective-C] [alibaba/wax](https://github.com/alibaba/wax) Wax is a framework that lets you write native iPhone apps in Lua.
-- [**1768**Star][13d] [Shell] [leebaird/discover](https://github.com/leebaird/discover) Custom bash scripts used to automate various penetration testing tasks including recon, scanning, parsing, and creating malicious payloads and listeners with Metasploit.
-- [**1764**Star][3m] [Py] [epinna/weevely3](https://github.com/epinna/weevely3) Weaponized web shell
-- [**1759**Star][12d] [C] [google/wuffs](https://github.com/google/wuffs) Wrangling Untrusted File Formats Safely
-- [**1757**Star][7m] [C++] [wrbug/dumpdex](https://github.com/wrbug/dumpdex) Android unpack
-- [**1757**Star][2y] [CSS] [b374k/b374k](https://github.com/b374k/b374k) PHP Webshell with handy features
-- [**1749**Star][2m] [onethawt/idaplugins-list](https://github.com/onethawt/idaplugins-list) A list of IDA Plugins
-- [**1747**Star][8d] [17mon/china_ip_list](https://github.com/17mon/china_ip_list)
-- [**1743**Star][12m] [JS] [puppeteer/examples](https://github.com/puppeteer/examples) Use case-driven examples for using Puppeteer and headless chrome
-- [**1740**Star][8d] [PHP] [wordpress/wordpress-coding-standards](https://github.com/wordpress/wordpress-coding-standards) PHP_CodeSniffer rules (sniffs) to enforce WordPress coding conventions
+- [**1839**Star][3y] [Java] [chora10/cknife](https://github.com/chora10/cknife) Cknife
+- [**1838**Star][1y] [Py] [jinnlynn/genpac](https://github.com/jinnlynn/genpac) PAC/Dnsmasq/Wingy file Generator, working with gfwlist, support custom rules.
+- [**1830**Star][2m] [Go] [influxdata/kapacitor](https://github.com/influxdata/kapacitor) Open source framework for processing, monitoring, and alerting on time series data
+- [**1828**Star][3m] [JS] [coreybutler/node-windows](https://github.com/coreybutler/node-windows) Windows support for Node.JS scripts (daemons, eventlog, UAC, etc).
+- [**1828**Star][1y] [CSS] [ctfs/write-ups-2015](https://github.com/ctfs/write-ups-2015) Wiki-like CTF write-ups repository, maintained by the community. 2015
+- [**1824**Star][5d] [Py] [trailofbits/manticore](https://github.com/trailofbits/manticore) Symbolic execution tool
+- [**1819**Star][6d] [C] [mgba-emu/mgba](https://github.com/mgba-emu/mgba) mGBA Game Boy Advance Emulator
+- [**1818**Star][2m] [djadmin/awesome-bug-bounty](https://github.com/djadmin/awesome-bug-bounty) A comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.
+- [**1815**Star][5m] [Py] [veil-framework/veil](https://github.com/veil-framework/veil) generate metasploit payloads that bypass common anti-virus solutions
+- [**1814**Star][6m] [C++] [iagox86/dnscat2](https://github.com/iagox86/dnscat2) create an encrypted command-and-control (C&C) channel over the DNS protocol, which is an effective tunnel out of almost every network.
+- [**1804**Star][10d] [Go] [gdamore/tcell](https://github.com/gdamore/tcell) Tcell is an alternate terminal package, similar in some ways to termbox, but better in others.
+- [**1801**Star][12m] [Go] [intelsdi-x/snap](https://github.com/intelsdi-x/snap) an open telemetry framework designed to simplify the collection, processing and publishing of system data through a single API.
+- [**1800**Star][3y] [ObjC] [kpwn/yalu102](https://github.com/kpwn/yalu102) incomplete iOS 10.2 jailbreak for 64 bit devices by qwertyoruiopz and marcograssi
+- [**1795**Star][7m] [Py] [lijiejie/subdomainsbrute](https://github.com/lijiejie/subdomainsbrute) A fast sub domain brute tool for pentesters
+- [**1790**Star][12m] [Py] [ctfs/write-ups-2017](https://github.com/ctfs/write-ups-2017) Wiki-like CTF write-ups repository, maintained by the community. 2017
+- [**1785**Star][1y] [aozhimin/ios-monitor-platform](https://github.com/aozhimin/ios-monitor-platform)
+- [**1784**Star][16d] [Shell] [pirate/wireguard-docs](https://github.com/pirate/wireguard-docs)
+- [**1781**Star][15d] [Shell] [leebaird/discover](https://github.com/leebaird/discover) Custom bash scripts used to automate various penetration testing tasks including recon, scanning, parsing, and creating malicious payloads and listeners with Metasploit.
+- [**1779**Star][4y] [caesar0301/awesome-pcaptools](https://github.com/caesar0301/awesome-pcaptools) A collection of tools developed by other researchers in the Computer Science area to process network traces. All the right reserved for the original authors.
+- [**1778**Star][15d] [C++] [apitrace/apitrace](https://github.com/apitrace/apitrace) Tools for tracing OpenGL, Direct3D, and other graphics APIs
+- [**1777**Star][7m] [C++] [wrbug/dumpdex](https://github.com/wrbug/dumpdex) Android unpack
+- [**1777**Star][7d] [PHP] [ezyang/htmlpurifier](https://github.com/ezyang/htmlpurifier) Standards compliant HTML filter written in PHP
+- [**1777**Star][5d] [Go] [convox/rack](https://github.com/convox/rack) Private PaaS built on native AWS services for maximum privacy and minimum upkeep
+- [**1774**Star][3y] [ObjC] [tapwork/heapinspector-for-ios](https://github.com/tapwork/heapinspector-for-ios) Find memory issues & leaks in your iOS app without instruments
+- [**1774**Star][3m] [Py] [epinna/weevely3](https://github.com/epinna/weevely3) Weaponized web shell
+- [**1772**Star][2y] [JS] [cazala/coin-hive](https://github.com/cazala/coin-hive) CoinHive cryptocurrency miner for node.js
+- [**1770**Star][3y] [ObjC] [alibaba/wax](https://github.com/alibaba/wax) Wax is a framework that lets you write native iPhone apps in Lua.
+- [**1761**Star][6d] [C] [google/wuffs](https://github.com/google/wuffs) Wrangling Untrusted File Formats Safely
+- [**1761**Star][2y] [CSS] [b374k/b374k](https://github.com/b374k/b374k) PHP Webshell with handy features
+- [**1760**Star][3y] [Go] [elastic/logstash-forwarder](https://github.com/elastic/logstash-forwarder) An experiment to cut logs in preparation for processing elsewhere. Replaced by Filebeat:
+- [**1758**Star][12m] [JS] [puppeteer/examples](https://github.com/puppeteer/examples) Use case-driven examples for using Puppeteer and headless chrome
+- [**1756**Star][10d] [17mon/china_ip_list](https://github.com/17mon/china_ip_list)
+- [**1754**Star][2m] [onethawt/idaplugins-list](https://github.com/onethawt/idaplugins-list) A list of IDA Plugins
+- [**1747**Star][2d] [PHP] [wordpress/wordpress-coding-standards](https://github.com/wordpress/wordpress-coding-standards) PHP_CodeSniffer rules (sniffs) to enforce WordPress coding conventions
+- [**1745**Star][1y] [PS] [fuzzysecurity/powershell-suite](https://github.com/fuzzysecurity/powershell-suite) My musings with PowerShell
+- [**1744**Star][1y] [coreb1t/awesome-pentest-cheat-sheets](https://github.com/coreb1t/awesome-pentest-cheat-sheets) Collection of the cheat sheets useful for pentesting
+- [**1742**Star][3m] [tunz/js-vuln-db](https://github.com/tunz/js-vuln-db) A collection of JavaScript engine CVEs with PoCs
+- [**1739**Star][21d] [ngalongc/bug-bounty-reference](https://github.com/ngalongc/bug-bounty-reference) Inspired by
- [**1738**Star][2y] [Go] [vzex/dog-tunnel](https://github.com/vzex/dog-tunnel) p2p tunnel,(udp mode work with kcp,
-- [**1734**Star][3m] [tunz/js-vuln-db](https://github.com/tunz/js-vuln-db) A collection of JavaScript engine CVEs with PoCs
-- [**1732**Star][1y] [coreb1t/awesome-pentest-cheat-sheets](https://github.com/coreb1t/awesome-pentest-cheat-sheets) Collection of the cheat sheets useful for pentesting
-- [**1727**Star][2m] [PHP] [orangetw/my-ctf-web-challenges](https://github.com/orangetw/my-ctf-web-challenges) Collection of CTF Web challenges I made
-- [**1726**Star][3y] [Go] [s-rah/onionscan](https://github.com/s-rah/onionscan) OnionScan is a free and open source tool for investigating the Dark Web.
-- [**1723**Star][6m] [Smali] [ahmyth/ahmyth-android-rat](https://github.com/ahmyth/ahmyth-android-rat) Android Remote Administration Tool
-- [**1722**Star][1y] [PowerShell] [fuzzysecurity/powershell-suite](https://github.com/fuzzysecurity/powershell-suite) My musings with PowerShell
-- [**1720**Star][19d] [ngalongc/bug-bounty-reference](https://github.com/ngalongc/bug-bounty-reference) Inspired by
-- [**1718**Star][1m] [PowerShell] [fireeye/flare-vm](https://github.com/fireeye/flare-vm) FireEye Labs Advanced Reverse Engineering
-- [**1717**Star][7d] [C] [google/honggfuzz](https://github.com/google/honggfuzz) Security oriented fuzzer with powerful analysis options. Supports evolutionary, feedback-driven fuzzing based on code coverage (software- and hardware-based)
-- [**1714**Star][2m] [Go] [subfinder/subfinder](https://github.com/subfinder/subfinder) 使用Passive Sources, Search Engines, Pastebins, Internet Archives等查找子域名
-- [**1709**Star][9m] [Py] [constverum/proxybroker](https://github.com/constverum/proxybroker) Proxy [Finder | Checker | Server]. HTTP(S) & SOCKS
-- [**1708**Star][10d] [Ruby] [cliffe/secgen](https://github.com/cliffe/secgen) Create randomly insecure VMs
-- [**1705**Star][4m] [Py] [lgandx/responder](https://github.com/lgandx/responder) Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.
-- [**1702**Star][1y] [Java] [ac-pm/inspeckage](https://github.com/ac-pm/inspeckage) Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)
-- [**1695**Star][1m] [Go] [eth0izzle/shhgit](https://github.com/eth0izzle/shhgit) Find GitHub secrets in real time
-- [**1694**Star][3m] [PHP] [xtr4nge/fruitywifi](https://github.com/xtr4nge/fruitywifi) FruityWiFi is a wireless network auditing tool. The application can be installed in any Debian based system (Jessie) adding the extra packages. Tested in Debian, Kali Linux, Kali Linux ARM (Raspberry Pi), Raspbian (Raspberry Pi), Pwnpi (Raspberry Pi), Bugtraq, NetHunter.
-- [**1694**Star][3y] [CoffeeScript] [okturtles/dnschain](https://github.com/okturtles/dnschain) A blockchain-based DNS + HTTP server that fixes HTTPS security, and more!
-- [**1694**Star][1y] [Swift] [haxpor/potatso](https://github.com/haxpor/potatso) Potatso is an iOS client that implements Shadowsocks proxy with the leverage of NetworkExtension framework. ***This project is unmaintained, try taking a look at this fork
-- [**1694**Star][14d] [Go] [hashicorp/memberlist](https://github.com/hashicorp/memberlist) Golang package for gossip based membership and failure detection
-- [**1693**Star][8m] [Py] [guelfoweb/knock](https://github.com/guelfoweb/knock) Knock Subdomain Scan
-- [**1693**Star][7d] [TSQL] [brentozarultd/sql-server-first-responder-kit](https://github.com/brentozarultd/sql-server-first-responder-kit) sp_Blitz, sp_BlitzCache, sp_BlitzFirst, sp_BlitzIndex, and other SQL Server scripts for health checks and performance tuning.
-- [**1693**Star][3m] [Py] [anorov/cloudflare-scrape](https://github.com/anorov/cloudflare-scrape) A Python module to bypass Cloudflare's anti-bot page.
-- [**1691**Star][6m] [Py] [yelp/osxcollector](https://github.com/yelp/osxcollector) A forensic evidence collection & analysis toolkit for OS X
-- [**1687**Star][4m] [JS] [expressjs/csurf](https://github.com/expressjs/csurf) CSRF token middleware
-- [**1685**Star][5m] [C] [networkprotocol/netcode.io](https://github.com/networkprotocol/netcode.io) A protocol for secure client/server connections over UDP
-- [**1682**Star][8m] [Makefile] [raspberrypi/noobs](https://github.com/raspberrypi/noobs) NOOBS (New Out Of Box Software) - An easy Operating System install manager for the Raspberry Pi
-- [**1682**Star][1y] [owasp/devguide](https://github.com/owasp/devguide) The OWASP Guide
-- [**1681**Star][13d] [HTML] [chromium/badssl.com](https://github.com/chromium/badssl.com)
-- [**1681**Star][9m] [CSS] [bagder/http2-explained](https://github.com/bagder/http2-explained) A detailed document explaining and documenting HTTP/2, the successor to the widely popular HTTP/1.1 protocol
-- [**1676**Star][28d] [Swift] [pmusolino/wormholy](https://github.com/pmusolino/wormholy) iOS network debugging, like a wizard 🧙♂️
-- [**1675**Star][4m] [R] [briatte/awesome-network-analysis](https://github.com/briatte/awesome-network-analysis) A curated list of awesome network analysis resources.
-- [**1674**Star][2m] [Py] [rootm0s/winpwnage](https://github.com/rootm0s/winpwnage) UAC bypass, Elevate, Persistence and Execution methods
-- [**1668**Star][7m] [C++] [yegord/snowman](https://github.com/yegord/snowman) a native code to C/C++ decompiler, supporting x86, AMD64, and ARM architectures
+- [**1735**Star][2m] [PHP] [orangetw/my-ctf-web-challenges](https://github.com/orangetw/my-ctf-web-challenges) Collection of CTF Web challenges I made
+- [**1731**Star][1m] [PS] [fireeye/flare-vm](https://github.com/fireeye/flare-vm) FireEye Labs Advanced Reverse Engineering
+- [**1730**Star][3y] [Go] [s-rah/onionscan](https://github.com/s-rah/onionscan) OnionScan is a free and open source tool for investigating the Dark Web.
+- [**1730**Star][6m] [Smali] [ahmyth/ahmyth-android-rat](https://github.com/ahmyth/ahmyth-android-rat) Android Remote Administration Tool
+- [**1723**Star][14d] [selierlin/share-ssr-v2ray](https://github.com/selierlin/share-ssr-v2ray)
+- [**1719**Star][4d] [C] [google/honggfuzz](https://github.com/google/honggfuzz) Security oriented fuzzer with powerful analysis options. Supports evolutionary, feedback-driven fuzzing based on code coverage (software- and hardware-based)
+- [**1718**Star][9m] [Py] [constverum/proxybroker](https://github.com/constverum/proxybroker) Proxy [Finder | Checker | Server]. HTTP(S) & SOCKS
+- [**1717**Star][4m] [Py] [lgandx/responder](https://github.com/lgandx/responder) Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.
+- [**1714**Star][5d] [Ruby] [cliffe/secgen](https://github.com/cliffe/secgen) Create randomly insecure VMs
+- [**1710**Star][1m] [Go] [eth0izzle/shhgit](https://github.com/eth0izzle/shhgit) Find GitHub secrets in real time
+- [**1709**Star][3m] [Py] [anorov/cloudflare-scrape](https://github.com/anorov/cloudflare-scrape) A Python module to bypass Cloudflare's anti-bot page.
+- [**1709**Star][1y] [Java] [ac-pm/inspeckage](https://github.com/ac-pm/inspeckage) Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)
+- [**1707**Star][3d] [TSQL] [brentozarultd/sql-server-first-responder-kit](https://github.com/brentozarultd/sql-server-first-responder-kit) sp_Blitz, sp_BlitzCache, sp_BlitzFirst, sp_BlitzIndex, and other SQL Server scripts for health checks and performance tuning.
+- [**1706**Star][16d] [Go] [hashicorp/memberlist](https://github.com/hashicorp/memberlist) Golang package for gossip based membership and failure detection
+- [**1700**Star][8m] [Py] [guelfoweb/knock](https://github.com/guelfoweb/knock) Knock Subdomain Scan
+- [**1697**Star][9m] [CSS] [bagder/http2-explained](https://github.com/bagder/http2-explained) A detailed document explaining and documenting HTTP/2, the successor to the widely popular HTTP/1.1 protocol
+- [**1696**Star][3m] [PHP] [xtr4nge/fruitywifi](https://github.com/xtr4nge/fruitywifi) FruityWiFi is a wireless network auditing tool. The application can be installed in any Debian based system (Jessie) adding the extra packages. Tested in Debian, Kali Linux, Kali Linux ARM (Raspberry Pi), Raspbian (Raspberry Pi), Pwnpi (Raspberry Pi), Bugtraq, NetHunter.
+- [**1696**Star][1y] [Swift] [haxpor/potatso](https://github.com/haxpor/potatso) Potatso is an iOS client that implements Shadowsocks proxy with the leverage of NetworkExtension framework. ***This project is unmaintained, try taking a look at this fork
+- [**1695**Star][6m] [Py] [yelp/osxcollector](https://github.com/yelp/osxcollector) A forensic evidence collection & analysis toolkit for OS X
+- [**1695**Star][3y] [CoffeeScript] [okturtles/dnschain](https://github.com/okturtles/dnschain) A blockchain-based DNS + HTTP server that fixes HTTPS security, and more!
+- [**1689**Star][5m] [C] [networkprotocol/netcode.io](https://github.com/networkprotocol/netcode.io) A protocol for secure client/server connections over UDP
+- [**1687**Star][5m] [JS] [expressjs/csurf](https://github.com/expressjs/csurf) CSRF token middleware
+- [**1687**Star][15d] [HTML] [chromium/badssl.com](https://github.com/chromium/badssl.com)
+- [**1686**Star][8m] [Makefile] [raspberrypi/noobs](https://github.com/raspberrypi/noobs) NOOBS (New Out Of Box Software) - An easy Operating System install manager for the Raspberry Pi
+- [**1685**Star][4m] [R] [briatte/awesome-network-analysis](https://github.com/briatte/awesome-network-analysis) A curated list of awesome network analysis resources.
+- [**1683**Star][1y] [owasp/devguide](https://github.com/owasp/devguide) The OWASP Guide
+- [**1682**Star][3m] [Py] [rootm0s/winpwnage](https://github.com/rootm0s/winpwnage) UAC bypass, Elevate, Persistence and Execution methods
+- [**1677**Star][30d] [Swift] [pmusolino/wormholy](https://github.com/pmusolino/wormholy) iOS network debugging, like a wizard 🧙♂️
+- [**1674**Star][2d] [C++] [microsoft/detours](https://github.com/microsoft/detours) Detours is a software package for monitoring and instrumenting API calls on Windows. It is distributed in source code form.
+- [**1671**Star][7m] [C++] [yegord/snowman](https://github.com/yegord/snowman) a native code to C/C++ decompiler, supporting x86, AMD64, and ARM architectures
- [IDA插件](https://github.com/yegord/snowman/tree/master/src/ida-plugin)
- [snowman](https://github.com/yegord/snowman/tree/master/src/snowman) QT界面
- [nocode](https://github.com/yegord/snowman/tree/master/src/nocode) 命令行工具
- [nc](https://github.com/yegord/snowman/tree/master/src/nc) 核心代码,可作为库使用
-- [**1665**Star][6m] [C++] [microsoft/detours](https://github.com/microsoft/detours) Detours is a software package for monitoring and instrumenting API calls on Windows. It is distributed in source code form.
-- [**1662**Star][12d] [selierlin/share-ssr-v2ray](https://github.com/selierlin/share-ssr-v2ray)
-- [**1662**Star][4y] [Java] [dodola/hotfix](https://github.com/dodola/hotfix) 安卓App热补丁动态修复框架
-- [**1659**Star][7d] [Java] [apache/geode](https://github.com/apache/geode) Apache Geode
-- [**1655**Star][6m] [C] [easyhook/easyhook](https://github.com/easyhook/easyhook) The reinvention of Windows API Hooking
-- [**1654**Star][3m] [JS] [tylerbrock/mongo-hacker](https://github.com/tylerbrock/mongo-hacker) MongoDB Shell Enhancements for Hackers
-- [**1653**Star][2m] [NSIS] [angryip/ipscan](https://github.com/angryip/ipscan) Angry IP Scanner - fast and friendly network scanner
-- [**1651**Star][7d] [Py] [cea-sec/ivre](https://github.com/cea-sec/ivre) Network recon framework.
-- [**1650**Star][2y] [Shell] [juude/droidreverse](https://github.com/juude/droidreverse) reverse engineering tools for android
-- [**1649**Star][10m] [JS] [evilcos/xssor2](https://github.com/evilcos/xssor2) XSS'OR - Hack with JavaScript.
-- [**1647**Star][3m] [Py] [boppreh/keyboard](https://github.com/boppreh/keyboard) Hook and simulate global keyboard events on Windows and Linux.
-- [**1646**Star][8d] [roave/securityadvisories](https://github.com/roave/securityadvisories) ensures that your application doesn't have installed dependencies with known security vulnerabilities
-- [**1646**Star][8d] [JS] [ghacksuserjs/ghacks-user.js](https://github.com/ghacksuserjs/ghacks-user.js) An ongoing comprehensive user.js template for configuring and hardening Firefox privacy, security and anti-fingerprinting
+- [**1668**Star][2m] [NSIS] [angryip/ipscan](https://github.com/angryip/ipscan) Angry IP Scanner - fast and friendly network scanner
+- [**1666**Star][2d] [Java] [apache/geode](https://github.com/apache/geode) Apache Geode
+- [**1663**Star][4y] [Java] [dodola/hotfix](https://github.com/dodola/hotfix) 安卓App热补丁动态修复框架
+- [**1661**Star][6m] [C] [easyhook/easyhook](https://github.com/easyhook/easyhook) The reinvention of Windows API Hooking
+- [**1661**Star][2d] [Py] [cea-sec/ivre](https://github.com/cea-sec/ivre) Network recon framework.
+- [**1659**Star][10d] [roave/securityadvisories](https://github.com/roave/securityadvisories) ensures that your application doesn't have installed dependencies with known security vulnerabilities
+- [**1656**Star][6d] [JS] [tylerbrock/mongo-hacker](https://github.com/tylerbrock/mongo-hacker) MongoDB Shell Enhancements for Hackers
+- [**1655**Star][3m] [Py] [boppreh/keyboard](https://github.com/boppreh/keyboard) Hook and simulate global keyboard events on Windows and Linux.
+- [**1654**Star][2d] [JS] [ghacksuserjs/ghacks-user.js](https://github.com/ghacksuserjs/ghacks-user.js) An ongoing comprehensive user.js template for configuring and hardening Firefox privacy, security and anti-fingerprinting
+- [**1652**Star][2y] [Shell] [juude/droidreverse](https://github.com/juude/droidreverse) reverse engineering tools for android
+- [**1652**Star][7m] [dsasmblr/game-hacking](https://github.com/dsasmblr/game-hacking) Tutorials, tools, and more as related to reverse engineering video games.
+- [**1651**Star][10m] [JS] [evilcos/xssor2](https://github.com/evilcos/xssor2) XSS'OR - Hack with JavaScript.
+- [**1650**Star][1m] [Py] [ehco1996/django-sspanel](https://github.com/ehco1996/django-sspanel) 用diango开发的全新的shadowsocks网络面板
+- [**1650**Star][7d] [HTML] [clong/detectionlab](https://github.com/clong/detectionlab) Vagrant & Packer scripts to build a lab environment complete with security tooling and logging best practices
+- [**1649**Star][1y] [Py] [evyatarmeged/raccoon](https://github.com/evyatarmeged/raccoon) A high performance offensive security tool for reconnaissance and vulnerability scanning
+- [**1648**Star][2d] [C#] [jbevain/cecil](https://github.com/jbevain/cecil) Cecil is a library to inspect, modify and create .NET programs and libraries.
- [**1645**Star][3y] [JS] [camwiegert/baffle](https://github.com/camwiegert/baffle) A tiny javascript library for obfuscating and revealing text in DOM elements.
-- [**1643**Star][1m] [C#] [jbevain/cecil](https://github.com/jbevain/cecil) Cecil is a library to inspect, modify and create .NET programs and libraries.
-- [**1641**Star][1y] [Py] [evyatarmeged/raccoon](https://github.com/evyatarmeged/raccoon) A high performance offensive security tool for reconnaissance and vulnerability scanning
-- [**1641**Star][6m] [dsasmblr/game-hacking](https://github.com/dsasmblr/game-hacking) Tutorials, tools, and more as related to reverse engineering video games.
-- [**1639**Star][1m] [Py] [ehco1996/django-sspanel](https://github.com/ehco1996/django-sspanel) 用diango开发的全新的shadowsocks网络面板
-- [**1637**Star][13d] [HTML] [clong/detectionlab](https://github.com/clong/detectionlab) Vagrant & Packer scripts to build a lab environment complete with security tooling and logging best practices
-- [**1636**Star][11m] [Java] [fesh0r/fernflower](https://github.com/fesh0r/fernflower) Unofficial mirror of FernFlower Java decompiler (All pulls should be submitted upstream)
-- [**1635**Star][4y] [Py] [ctfs/write-ups-2014](https://github.com/ctfs/write-ups-2014) Wiki-like CTF write-ups repository, maintained by the community. 2014
-- [**1635**Star][4m] [Java] [jaredrummler/androidprocesses](https://github.com/jaredrummler/androidprocesses) DEPRECATED
-- [**1635**Star][4y] [Py] [ctfs/write-ups-2014](https://github.com/ctfs/write-ups-2014) Wiki-like CTF write-ups repository, maintained by the community. 2014
-- [**1629**Star][9m] [tylerha97/awesome-reversing](https://github.com/tylerha97/awesome-reversing) A curated list of awesome reversing resources
-- [**1627**Star][12d] [Go] [awnumar/memguard](https://github.com/awnumar/memguard) Secure software enclave for storage of sensitive information in memory.
-- [**1627**Star][9d] [sarojaba/awesome-devblog](https://github.com/sarojaba/awesome-devblog) 어썸데브블로그. 국내 개발 블로그 모음(only 실명으로).
-- [**1620**Star][14d] [JS] [efforg/privacybadger](https://github.com/efforg/privacybadger) Privacy Badger is a browser extension that automatically learns to block invisible trackers.
-- [**1616**Star][2y] [jhaddix/tbhm](https://github.com/jhaddix/tbhm) The Bug Hunters Methodology
-- [**1614**Star][2m] [Shell] [internetwache/gittools](https://github.com/internetwache/gittools) find websites with their .git repository available to the public
-- [**1612**Star][4m] [CSS] [functionclub/v2ray.fun](https://github.com/functionclub/v2ray.fun) 正在开发的全新 V2ray.Fun
-- [**1611**Star][2m] [Go] [ysrc/yulong-hids](https://github.com/ysrc/yulong-hids) 一款由 YSRC 开源的主机入侵检测系统
-- [**1610**Star][7m] [Go] [sipt/shuttle](https://github.com/sipt/shuttle) A web proxy in Golang with amazing features.
-- [**1608**Star][2y] [JS] [addyosmani/a11y](https://github.com/addyosmani/a11y) Accessibility audit tooling for the web (beta)
-- [**1607**Star][3y] [Makefile] [drizzlerisk/drizzledumper](https://github.com/drizzlerisk/drizzledumper) a memory-search-based Android unpack tool.
-- [**1605**Star][27d] [PHP] [c0ny1/upload-labs](https://github.com/c0ny1/upload-labs) 一个帮你总结所有类型的上传漏洞的靶场
-- [**1604**Star][10m] [C] [nmikhailov/validity90](https://github.com/nmikhailov/validity90) Reverse engineering of Validity/Synaptics 138a:0090, 138a:0094, 138a:0097, 06cb:0081, 06cb:009a fingerprint readers protocol
-- [**1602**Star][1y] [Py] [nccgroup/scout2](https://github.com/nccgroup/Scout2) Security auditing tool for AWS environments
+- [**1643**Star][9m] [tylerha97/awesome-reversing](https://github.com/tylerha97/awesome-reversing) A curated list of awesome reversing resources
+- [**1643**Star][11m] [Java] [fesh0r/fernflower](https://github.com/fesh0r/fernflower) Unofficial mirror of FernFlower Java decompiler (All pulls should be submitted upstream)
+- [**1638**Star][4y] [Py] [ctfs/write-ups-2014](https://github.com/ctfs/write-ups-2014) Wiki-like CTF write-ups repository, maintained by the community. 2014
+- [**1638**Star][11m] [C] [dlundquist/sniproxy](https://github.com/dlundquist/sniproxy) Proxies incoming HTTP and TLS connections based on the hostname contained in the initial request of the TCP session.
+- [**1638**Star][4y] [Py] [ctfs/write-ups-2014](https://github.com/ctfs/write-ups-2014) Wiki-like CTF write-ups repository, maintained by the community. 2014
+- [**1636**Star][4m] [Java] [jaredrummler/androidprocesses](https://github.com/jaredrummler/androidprocesses) DEPRECATED
+- [**1634**Star][14d] [Go] [awnumar/memguard](https://github.com/awnumar/memguard) Secure software enclave for storage of sensitive information in memory.
+- [**1631**Star][6m] [Objective-C++] [tencent/oomdetector](https://github.com/tencent/oomdetector) OOMDetector is a memory monitoring component for iOS which provides you with OOM monitoring, memory allocation monitoring, memory leak detection and other functions.
+- [**1630**Star][6d] [JS] [efforg/privacybadger](https://github.com/efforg/privacybadger) Privacy Badger is a browser extension that automatically learns to block invisible trackers.
+- [**1630**Star][29d] [PHP] [c0ny1/upload-labs](https://github.com/c0ny1/upload-labs) 一个帮你总结所有类型的上传漏洞的靶场
+- [**1629**Star][5d] [sarojaba/awesome-devblog](https://github.com/sarojaba/awesome-devblog) 어썸데브블로그. 국내 개발 블로그 모음(only 실명으로).
+- [**1624**Star][2y] [jhaddix/tbhm](https://github.com/jhaddix/tbhm) The Bug Hunters Methodology
+- [**1624**Star][4m] [CSS] [functionclub/v2ray.fun](https://github.com/functionclub/v2ray.fun) 正在开发的全新 V2ray.Fun
+- [**1621**Star][2m] [Shell] [internetwache/gittools](https://github.com/internetwache/gittools) find websites with their .git repository available to the public
+- [**1618**Star][28d] [Java] [tiann/epic](https://github.com/tiann/epic) Dynamic java method AOP hook for Android(continution of Dexposed on ART), Supporting 4.0~10.0
+- [**1615**Star][2y] [JS] [addyosmani/a11y](https://github.com/addyosmani/a11y) Accessibility audit tooling for the web (beta)
+- [**1614**Star][2m] [Go] [ysrc/yulong-hids](https://github.com/ysrc/yulong-hids) 一款由 YSRC 开源的主机入侵检测系统
+- [**1614**Star][7m] [Go] [sipt/shuttle](https://github.com/sipt/shuttle) A web proxy in Golang with amazing features.
+- [**1612**Star][3y] [Makefile] [drizzlerisk/drizzledumper](https://github.com/drizzlerisk/drizzledumper) a memory-search-based Android unpack tool.
+- [**1608**Star][9m] [JS] [localtunnel/server](https://github.com/localtunnel/server) server for localtunnel.me
+- [**1608**Star][10m] [C] [nmikhailov/validity90](https://github.com/nmikhailov/validity90) Reverse engineering of Validity/Synaptics 138a:0090, 138a:0094, 138a:0097, 06cb:0081, 06cb:009a fingerprint readers protocol
+- [**1606**Star][2d] [C++] [lief-project/lief](https://github.com/lief-project/lief) Library to Instrument Executable Formats
- [**1602**Star][6m] [Py] [w1109790800/penetration](https://github.com/w1109790800/penetration) 渗透 超全面的渗透资料
-- [**1600**Star][8d] [C++] [lief-project/lief](https://github.com/lief-project/lief) Library to Instrument Executable Formats
-- [**1599**Star][9m] [JS] [localtunnel/server](https://github.com/localtunnel/server) server for localtunnel.me
-- [**1596**Star][5m] [Py] [mozilla/cipherscan](https://github.com/mozilla/cipherscan) A very simple way to find out which SSL ciphersuites are supported by a target.
-- [**1596**Star][3m] [Py] [knownsec/pocsuite](https://github.com/knownsec/pocsuite) This project has stopped to maintenance, please to
-- [**1593**Star][26d] [Java] [tiann/epic](https://github.com/tiann/epic) Dynamic java method AOP hook for Android(continution of Dexposed on ART), Supporting 4.0~10.0
-- [**1588**Star][13d] [Java] [spotbugs/spotbugs](https://github.com/spotbugs/spotbugs) SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.
-- [**1583**Star][6m] [Ruby] [brunofacca/zen-rails-security-checklist](https://github.com/brunofacca/zen-rails-security-checklist) Checklist of security precautions for Ruby on Rails applications.
-- [**1580**Star][1y] [C] [qihoo360/phptrace](https://github.com/qihoo360/phptrace) A tracing and troubleshooting tool for PHP scripts.
-- [**1580**Star][7d] [Go] [bitnami-labs/sealed-secrets](https://github.com/bitnami-labs/sealed-secrets) A Kubernetes controller and tool for one-way encrypted Secrets
-- [**1577**Star][4y] [l3m0n/pentest_study](https://github.com/l3m0n/pentest_study) 从零开始内网渗透学习
-- [**1577**Star][1m] [Objective-C] [ealeksandrov/provisionql](https://github.com/ealeksandrov/provisionql) Quick Look plugin for apps and provisioning profile files
-- [**1575**Star][26d] [C] [ntop/n2n](https://github.com/ntop/n2n) Peer-to-peer VPN
-- [**1574**Star][22d] [ivrodriguezca/re-ios-apps](https://github.com/ivrodriguezca/re-ios-apps) A completely free, open source and online course about Reverse Engineering iOS Applications.
-- [**1563**Star][2y] [C] [samyk/pwnat](https://github.com/samyk/pwnat) The only tool and technique to punch holes through firewalls/NATs where both clients and server can be behind separate NATs without any 3rd party involvement. Pwnat uses a newly developed technique, exploiting a property of NAT translation tables, with no 3rd party, port forwarding, DMZ, router administrative requirements, STUN/TURN/UPnP/ICE, or…
-- [**1563**Star][12d] [C] [codahale/bcrypt-ruby](https://github.com/codahale/bcrypt-ruby) Ruby binding for the OpenBSD bcrypt() password hashing algorithm, allowing you to easily store a secure hash of your users' passwords.
-- [**1562**Star][17d] [C] [p-gen/smenu](https://github.com/p-gen/smenu) Terminal utility that reads words from standard input or from a file and creates an interactive selection window just below the cursor. The selected word(s) are sent to standard output for further processing.
-- [**1560**Star][14d] [Java] [gchq/gaffer](https://github.com/gchq/Gaffer) A large-scale entity and relation database supporting aggregation of properties
-- [**1557**Star][2m] [C] [firmianay/ctf-all-in-one](https://github.com/firmianay/ctf-all-in-one) CTF竞赛入门指南
-- [**1556**Star][12d] [Go] [caffix/amass](https://github.com/caffix/amass) In-depth Attack Surface Mapping and Asset Discovery
-- [**1555**Star][1y] [Py] [unkl4b/gitminer](https://github.com/unkl4b/gitminer) Tool for advanced mining for content on Github
-- [**1552**Star][12d] [Py] [k4m4/kickthemout](https://github.com/k4m4/kickthemout) kick devices out of your network and enjoy all the bandwidth for yourself.
-- [**1550**Star][8m] [Py] [m4ll0k/wascan](https://github.com/m4ll0k/WAScan) WAScan - Web Application Scanner
-- [**1547**Star][1y] [C] [ctfs/write-ups-2016](https://github.com/ctfs/write-ups-2016) Wiki-like CTF write-ups repository, maintained by the community. 2016
-- [**1545**Star][6y] [Py] [google/pyringe](https://github.com/google/pyringe) Debugger capable of attaching to and injecting code into python processes.
-- [**1544**Star][1m] [Shell] [mzet-/linux-exploit-suggester](https://github.com/mzet-/linux-exploit-suggester) Linux privilege escalation auditing tool
-- [**1544**Star][3m] [PHP] [mewebstudio/captcha](https://github.com/mewebstudio/captcha) Captcha for Laravel 5 & 6
-- [**1542**Star][1m] [Py] [joxeankoret/diaphora](https://github.com/joxeankoret/diaphora) program diffing
+- [**1601**Star][1y] [Py] [nccgroup/scout2](https://github.com/nccgroup/Scout2) Security auditing tool for AWS environments
+- [**1601**Star][5m] [Py] [mozilla/cipherscan](https://github.com/mozilla/cipherscan) A very simple way to find out which SSL ciphersuites are supported by a target.
+- [**1600**Star][5d] [Go] [bitnami-labs/sealed-secrets](https://github.com/bitnami-labs/sealed-secrets) A Kubernetes controller and tool for one-way encrypted Secrets
+- [**1599**Star][2y] [JS] [keraf/nocoin](https://github.com/keraf/nocoin) No Coin is a tiny browser extension aiming to block coin miners such as Coinhive.
+- [**1598**Star][15d] [Java] [spotbugs/spotbugs](https://github.com/spotbugs/spotbugs) SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.
+- [**1597**Star][3m] [Py] [knownsec/pocsuite](https://github.com/knownsec/pocsuite) This project has stopped to maintenance, please to
+- [**1591**Star][28d] [C] [ntop/n2n](https://github.com/ntop/n2n) Peer-to-peer VPN
+- [**1591**Star][24d] [ivrodriguezca/re-ios-apps](https://github.com/ivrodriguezca/re-ios-apps) A completely free, open source and online course about Reverse Engineering iOS Applications.
+- [**1584**Star][6m] [Ruby] [brunofacca/zen-rails-security-checklist](https://github.com/brunofacca/zen-rails-security-checklist) Checklist of security precautions for Ruby on Rails applications.
+- [**1583**Star][4y] [l3m0n/pentest_study](https://github.com/l3m0n/pentest_study) 从零开始内网渗透学习
+- [**1582**Star][1m] [ObjC] [ealeksandrov/provisionql](https://github.com/ealeksandrov/provisionql) Quick Look plugin for apps and provisioning profile files
+- [**1581**Star][1y] [C] [qihoo360/phptrace](https://github.com/qihoo360/phptrace) A tracing and troubleshooting tool for PHP scripts.
+- [**1570**Star][2m] [C] [firmianay/ctf-all-in-one](https://github.com/firmianay/ctf-all-in-one) CTF竞赛入门指南
+- [**1569**Star][2y] [C] [samyk/pwnat](https://github.com/samyk/pwnat) The only tool and technique to punch holes through firewalls/NATs where both clients and server can be behind separate NATs without any 3rd party involvement. Pwnat uses a newly developed technique, exploiting a property of NAT translation tables, with no 3rd party, port forwarding, DMZ, router administrative requirements, STUN/TURN/UPnP/ICE, or…
+- [**1569**Star][29d] [Py] [opendevops-cn/opendevops](https://github.com/opendevops-cn/opendevops) CODO是一款为用户提供企业多混合云、一站式DevOps、自动化运维、完全开源的云管理平台、自动化运维平台
+- [**1566**Star][14d] [C] [codahale/bcrypt-ruby](https://github.com/codahale/bcrypt-ruby) Ruby binding for the OpenBSD bcrypt() password hashing algorithm, allowing you to easily store a secure hash of your users' passwords.
+- [**1565**Star][17d] [Go] [sofastack/sofa-mosn](https://github.com/sofastack/sofa-mosn) MOSN is a modular observable smart network which can be used in service mesh deployed as a data plane sidecar.
+- [**1562**Star][19d] [C] [p-gen/smenu](https://github.com/p-gen/smenu) Terminal utility that reads words from standard input or from a file and creates an interactive selection window just below the cursor. The selected word(s) are sent to standard output for further processing.
+- [**1562**Star][14d] [Py] [k4m4/kickthemout](https://github.com/k4m4/kickthemout) kick devices out of your network and enjoy all the bandwidth for yourself.
+- [**1561**Star][16d] [Java] [gchq/gaffer](https://github.com/gchq/Gaffer) A large-scale entity and relation database supporting aggregation of properties
+- [**1560**Star][1y] [Py] [unkl4b/gitminer](https://github.com/unkl4b/gitminer) Tool for advanced mining for content on Github
+- [**1560**Star][6d] [Go] [caffix/amass](https://github.com/caffix/amass) In-depth Attack Surface Mapping and Asset Discovery
+- [**1557**Star][8m] [Py] [m4ll0k/wascan](https://github.com/m4ll0k/WAScan) WAScan - Web Application Scanner
+- [**1556**Star][15d] [Go] [eolinker/goku-api-gateway](https://github.com/eolinker/goku-api-gateway) A Powerful HTTP API Gateway in pure golang!Goku API Gateway (中文名:悟空 API 网关)是一个基于 Golang开发的微服务网关,能够实现高性能 HTTP API 转发、服务编排、多租户管理、API 访问权限控制等目的,拥有强大的自定义插件系统可以自行扩展,并且提供友好的图形化配置界面,能够快速帮助企业进行 API 服务治理、提高 API 服务的稳定性和安全性。
+- [**1555**Star][1m] [Shell] [mzet-/linux-exploit-suggester](https://github.com/mzet-/linux-exploit-suggester) Linux privilege escalation auditing tool
+- [**1549**Star][7d] [PHP] [mewebstudio/captcha](https://github.com/mewebstudio/captcha) Captcha for Laravel 5 & 6
+- [**1549**Star][1m] [Py] [joxeankoret/diaphora](https://github.com/joxeankoret/diaphora) program diffing
+- [**1548**Star][1y] [C] [ctfs/write-ups-2016](https://github.com/ctfs/write-ups-2016) Wiki-like CTF write-ups repository, maintained by the community. 2016
+- [**1544**Star][15d] [C] [raspberrypi/userland](https://github.com/raspberrypi/userland) Source code for ARM side libraries for interfacing to Raspberry Pi GPU.
+- [**1544**Star][6y] [Py] [google/pyringe](https://github.com/google/pyringe) Debugger capable of attaching to and injecting code into python processes.
+- [**1543**Star][2d] [Go] [juju/juju](https://github.com/juju/juju) Simple, secure devops tooling built to manage today's complex applications wherever you run your software.
+- [**1541**Star][2y] [Py] [awolfly9/ipproxytool](https://github.com/awolfly9/ipproxytool) python ip proxy tool scrapy crawl. 抓取大量免费代理 ip,提取有效 ip 使用
- [**1540**Star][2y] [C++] [hteso/iaito](https://github.com/hteso/iaito) A Qt and C++ GUI for radare2 reverse engineering framework
-- [**1536**Star][2y] [Py] [awolfly9/ipproxytool](https://github.com/awolfly9/ipproxytool) python ip proxy tool scrapy crawl. 抓取大量免费代理 ip,提取有效 ip 使用
-- [**1533**Star][2y] [C] [ezlippi/webbench](https://github.com/ezlippi/webbench) Webbench是Radim Kolar在1997年写的一个在linux下使用的非常简单的网站压测工具。它使用fork()模拟多个客户端同时访问我们设定的URL,测试网站在压力下工作的性能,最多可以模拟3万个并发连接去测试网站的负载能力。官网地址:
-- [**1532**Star][13d] [C] [raspberrypi/userland](https://github.com/raspberrypi/userland) Source code for ARM side libraries for interfacing to Raspberry Pi GPU.
-- [**1531**Star][7d] [Py] [lifting-bits/mcsema](https://github.com/lifting-bits/mcsema) Framework for lifting x86, amd64, and aarch64 program binaries to LLVM bitcode
+- [**1539**Star][2y] [C] [ezlippi/webbench](https://github.com/ezlippi/webbench) Webbench是Radim Kolar在1997年写的一个在linux下使用的非常简单的网站压测工具。它使用fork()模拟多个客户端同时访问我们设定的URL,测试网站在压力下工作的性能,最多可以模拟3万个并发连接去测试网站的负载能力。官网地址:
+- [**1537**Star][9d] [Py] [lifting-bits/mcsema](https://github.com/lifting-bits/mcsema) Framework for lifting x86, amd64, and aarch64 program binaries to LLVM bitcode
- [IDA7插件](https://github.com/lifting-bits/mcsema/tree/master/tools/mcsema_disass/ida7) 用于反汇编二进制文件并生成控制流程图
- [IDA插件](https://github.com/lifting-bits/mcsema/tree/master/tools/mcsema_disass/ida) 用于反汇编二进制文件并生成控制流程图
- [Binja插件](https://github.com/lifting-bits/mcsema/tree/master/tools/mcsema_disass/binja) 用于反汇编二进制文件并生成控制流程图
- [mcsema](https://github.com/lifting-bits/mcsema/tree/master/mcsema)
-- [**1530**Star][7d] [Go] [juju/juju](https://github.com/juju/juju) Simple, secure devops tooling built to manage today's complex applications wherever you run your software.
-- [**1528**Star][3y] [Py] [x0rz/eqgrp_lost_in_translation](https://github.com/x0rz/eqgrp_lost_in_translation) Decrypted content of odd.tar.xz.gpg, swift.tar.xz.gpg and windows.tar.xz.gpg
-- [**1527**Star][11d] [emijrp/awesome-awesome](https://github.com/emijrp/awesome-awesome) A curated list of awesome curated lists of many topics.
-- [**1525**Star][10d] [Java] [ukanth/afwall](https://github.com/ukanth/afwall) AFWall+ (Android Firewall +) - iptables based firewall for Android
-- [**1521**Star][1y] [HTML] [qiwihui/hiwifi-ss](https://github.com/qiwihui/hiwifi-ss) 极路由+ss配置
-- [**1520**Star][4m] [TypeScript] [spring-guides/tut-spring-security-and-angular-js](https://github.com/spring-guides/tut-spring-security-and-angular-js) Spring Security and Angular:: A tutorial on how to use Spring Security with a single page application with various backend architectures, ranging from a simple single server to an API gateway with OAuth2 authentication.
-- [**1520**Star][20d] [C++] [nmap/npcap](https://github.com/nmap/npcap) Nmap Project's packet sniffing library for Windows, based on WinPcap/Libpcap improved with NDIS 6 and LWF.
-- [**1519**Star][10m] [PowerShell] [joefitzgerald/packer-windows](https://github.com/joefitzgerald/packer-windows) Windows templates that can be used to create boxes for Vagrant using Packer
-- [**1516**Star][9m] [Py] [google/rekall](https://github.com/google/rekall) Rekall Memory Forensic Framework
+- [**1536**Star][4d] [Java] [ukanth/afwall](https://github.com/ukanth/afwall) AFWall+ (Android Firewall +) - iptables based firewall for Android
+- [**1533**Star][13d] [emijrp/awesome-awesome](https://github.com/emijrp/awesome-awesome) A curated list of awesome curated lists of many topics.
+- [**1532**Star][3y] [Py] [x0rz/eqgrp_lost_in_translation](https://github.com/x0rz/eqgrp_lost_in_translation) Decrypted content of odd.tar.xz.gpg, swift.tar.xz.gpg and windows.tar.xz.gpg
+- [**1526**Star][2d] [C++] [nmap/npcap](https://github.com/nmap/npcap) Nmap Project's packet sniffing library for Windows, based on WinPcap/Libpcap improved with NDIS 6 and LWF.
+- [**1522**Star][1y] [HTML] [qiwihui/hiwifi-ss](https://github.com/qiwihui/hiwifi-ss) 极路由+ss配置
+- [**1521**Star][4m] [TS] [spring-guides/tut-spring-security-and-angular-js](https://github.com/spring-guides/tut-spring-security-and-angular-js) Spring Security and Angular:: A tutorial on how to use Spring Security with a single page application with various backend architectures, ranging from a simple single server to an API gateway with OAuth2 authentication.
+- [**1521**Star][3d] [C] [jiangwenyuan/nuster](https://github.com/jiangwenyuan/nuster) A high performance HTTP proxy cache server and RESTful NoSQL cache server based on HAProxy
+- [**1519**Star][10m] [PS] [joefitzgerald/packer-windows](https://github.com/joefitzgerald/packer-windows) Windows templates that can be used to create boxes for Vagrant using Packer
+- [**1518**Star][9m] [Py] [google/rekall](https://github.com/google/rekall) Rekall Memory Forensic Framework
+- [**1517**Star][8d] [Py] [zerosum0x0/koadic](https://github.com/zerosum0x0/koadic) Koadic C3 COM Command & Control - JScript RAT
+- [**1516**Star][5m] [snowming04/the-hacker-playbook-3-translation](https://github.com/snowming04/the-hacker-playbook-3-translation) 对 The Hacker Playbook 3 的翻译。
+- [**1514**Star][3y] [Py] [sensepost/regeorg](https://github.com/sensepost/regeorg) The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.
- [**1510**Star][1y] [dripcap/dripcap](https://github.com/dripcap/dripcap)
-- [**1509**Star][21d] [Py] [zerosum0x0/koadic](https://github.com/zerosum0x0/koadic) Koadic C3 COM Command & Control - JScript RAT
-- [**1506**Star][3y] [Py] [sensepost/regeorg](https://github.com/sensepost/regeorg) The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.
-- [**1504**Star][5m] [snowming04/the-hacker-playbook-3-translation](https://github.com/snowming04/the-hacker-playbook-3-translation) 对 The Hacker Playbook 3 的翻译。
-- [**1503**Star][2y] [Py] [eldraco/domain_analyzer](https://github.com/eldraco/domain_analyzer) Analyze the security of any domain by finding all the information possible. Made in python.
-- [**1501**Star][25d] [Py] [hannob/snallygaster](https://github.com/hannob/snallygaster) Tool to scan for secret files on HTTP servers
-- [**1500**Star][2m] [Shell] [haugene/docker-transmission-openvpn](https://github.com/haugene/docker-transmission-openvpn) Docker container running Transmission torrent client with WebUI over an OpenVPN tunnel
-- [**1491**Star][4m] [Py] [epinna/tplmap](https://github.com/epinna/tplmap) Server-Side Template Injection and Code Injection Detection and Exploitation Tool
-- [**1490**Star][10d] [YARA] [cybermonitor/apt_cybercriminal_campagin_collections](https://github.com/cybermonitor/apt_cybercriminal_campagin_collections) APT & CyberCriminal Campaign Collection
-- [**1487**Star][7m] [Py] [ahupp/python-magic](https://github.com/ahupp/python-magic) A python wrapper for libmagic
-- [**1485**Star][2y] [Kotlin] [gh0u1l5/wechatmagician](https://github.com/gh0u1l5/wechatmagician) WechatMagician is a Xposed module written in Kotlin, that allows you to completely control your Wechat.
-- [**1482**Star][7m] [C++] [wangyu-/tinyfecvpn](https://github.com/wangyu-/tinyfecvpn) A VPN Designed for Lossy Links, with Build-in Forward Error Correction(FEC) Support. Improves your Network Quality on a High-latency Lossy Link.
-- [**1478**Star][7d] [C] [sleuthkit/sleuthkit](https://github.com/sleuthkit/sleuthkit) The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.
-- [**1475**Star][12d] [Py] [bitsadmin/wesng](https://github.com/bitsadmin/wesng) Windows Exploit Suggester - Next Generation
-- [**1474**Star][1y] [C++] [f1xpl/openauto](https://github.com/f1xpl/openauto) AndroidAuto headunit emulator
-- [**1472**Star][7d] [Shell] [blackarch/blackarch](https://github.com/blackarch/blackarch) BlackArch Linux is an Arch Linux-based distribution for penetration testers and security researchers.
-- [**1468**Star][16d] [Go] [google/keytransparency](https://github.com/google/keytransparency) A transparent and secure way to look up public keys.
-- [**1468**Star][3m] [C] [iqiyi/xhook](https://github.com/iqiyi/xhook) a PLT (Procedure Linkage Table) hook library for Android native ELF
-- [**1466**Star][2m] [C++] [jmpews/hookzz](https://github.com/jmpews/hookzz) a hook framework for arm/arm64/ios/android, and [dev] branch is being refactored.
-- [**1465**Star][3y] [Py] [veil-framework/veil-evasion](https://github.com/Veil-Framework/Veil-Evasion) a tool designed to generate metasploit payloads that bypass common anti-virus solutions.
-- [**1465**Star][25d] [minimaxir/hacker-news-undocumented](https://github.com/minimaxir/hacker-news-undocumented) Some of the hidden norms about Hacker News not otherwise covered in the Guidelines and the FAQ.
-- [**1462**Star][6y] [C] [alibaba/lvs](https://github.com/alibaba/lvs) A distribution of Linux Virtual Server with some advanced features. It introduces a new packet forwarding method - FULLNAT other than NAT/Tunneling/DirectRouting, and defense mechanism against synflooding attack - SYNPROXY.
-- [**1460**Star][14d] [C] [ufrisk/pcileech](https://github.com/ufrisk/pcileech) Direct Memory Access (DMA) Attack Software
-- [**1457**Star][1y] [C++] [acaudwell/logstalgia](https://github.com/acaudwell/logstalgia) a visualization tool that replays or streams web server access logs as a retro arcade game simulation.
-- [**1456**Star][27d] [Go] [neex/phuip-fpizdam](https://github.com/neex/phuip-fpizdam) Exploit for CVE-2019-11043
-- [**1450**Star][1y] [Py] [d4vinci/cr3dov3r](https://github.com/d4vinci/cr3dov3r) Know the dangers of credential reuse attacks.
-- [**1448**Star][6m] [Py] [enablesecurity/wafw00f](https://github.com/enablesecurity/wafw00f) identify and fingerprint Web Application Firewall (WAF) products protecting a website.
-- [**1447**Star][3m] [edoverflow/can-i-take-over-xyz](https://github.com/edoverflow/can-i-take-over-xyz) "Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.
-- [**1446**Star][11d] [C++] [srslte/srslte](https://github.com/srslte/srslte) Open source SDR LTE software suite from Software Radio Systems (SRS)
-- [**1442**Star][6m] [Py] [oros42/imsi-catcher](https://github.com/oros42/imsi-catcher) This program show you IMSI numbers of cellphones around you.
-- [**1441**Star][19d] [C] [tianocore/edk2](https://github.com/tianocore/edk2) A modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications
-- [**1441**Star][1m] [C] [ctcaer/hekate](https://github.com/ctcaer/hekate) Nintendo Switch Bootloader - CTCaer mod
-- [**1439**Star][3y] [tiancode/learn-hacking](https://github.com/tiancode/learn-hacking) 开始学习Kali Linux 各种破解教程 渗透测试 逆向工程 HackThisSite挑战问题解答
-- [**1439**Star][3y] [tiancode/learn-hacking](https://github.com/tiancode/learn-hacking) 开始学习Kali Linux 各种破解教程 渗透测试 逆向工程 HackThisSite挑战问题解答
-- [**1438**Star][3m] [C++] [vaibhavpandeyvpz/apkstudio](https://github.com/vaibhavpandeyvpz/apkstudio) Open-source, cross platform Qt based IDE for reverse-engineering Android application packages.
-- [**1433**Star][18d] [Go] [skydive-project/skydive](https://github.com/skydive-project/skydive) An open source real-time network topology and protocols analyzer
-- [**1433**Star][1y] [TypeScript] [pedronauck/reworm](https://github.com/pedronauck/reworm)
-- [**1433**Star][12d] [C++] [microsoft/seal](https://github.com/microsoft/seal) Microsoft SEAL is an easy-to-use and powerful homomorphic encryption library.
-- [**1430**Star][7d] [Go] [google/gapid](https://github.com/google/gapid) Graphics API Debugger
-- [**1428**Star][7d] [Py] [rocky/python-uncompyle6](https://github.com/rocky/python-uncompyle6) A cross-version Python bytecode decompiler
-- [**1427**Star][6m] [C++] [x64dbg/scyllahide](https://github.com/x64dbg/scyllahide) Advanced usermode anti-anti-debugger
+- [**1508**Star][2m] [Shell] [haugene/docker-transmission-openvpn](https://github.com/haugene/docker-transmission-openvpn) Docker container running Transmission torrent client with WebUI over an OpenVPN tunnel
+- [**1505**Star][2y] [Py] [eldraco/domain_analyzer](https://github.com/eldraco/domain_analyzer) Analyze the security of any domain by finding all the information possible. Made in python.
+- [**1504**Star][27d] [Py] [hannob/snallygaster](https://github.com/hannob/snallygaster) Tool to scan for secret files on HTTP servers
+- [**1499**Star][5d] [YARA] [cybermonitor/apt_cybercriminal_campagin_collections](https://github.com/cybermonitor/apt_cybercriminal_campagin_collections) APT & CyberCriminal Campaign Collection
+- [**1497**Star][4m] [Py] [epinna/tplmap](https://github.com/epinna/tplmap) Server-Side Template Injection and Code Injection Detection and Exploitation Tool
+- [**1489**Star][5d] [Py] [ahupp/python-magic](https://github.com/ahupp/python-magic) A python wrapper for libmagic
+- [**1486**Star][2y] [Kotlin] [gh0u1l5/wechatmagician](https://github.com/gh0u1l5/wechatmagician) WechatMagician is a Xposed module written in Kotlin, that allows you to completely control your Wechat.
+- [**1485**Star][7m] [C++] [wangyu-/tinyfecvpn](https://github.com/wangyu-/tinyfecvpn) A VPN Designed for Lossy Links, with Build-in Forward Error Correction(FEC) Support. Improves your Network Quality on a High-latency Lossy Link.
+- [**1482**Star][7d] [Py] [bitsadmin/wesng](https://github.com/bitsadmin/wesng) Windows Exploit Suggester - Next Generation
+- [**1481**Star][2d] [C] [sleuthkit/sleuthkit](https://github.com/sleuthkit/sleuthkit) The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.
+- [**1480**Star][1y] [C++] [f1xpl/openauto](https://github.com/f1xpl/openauto) AndroidAuto headunit emulator
+- [**1479**Star][3d] [C] [ctcaer/hekate](https://github.com/ctcaer/hekate) Nintendo Switch Bootloader - CTCaer mod
+- [**1478**Star][8d] [C] [iqiyi/xhook](https://github.com/iqiyi/xhook) a PLT (Procedure Linkage Table) hook library for Android native ELF
+- [**1477**Star][2d] [Shell] [blackarch/blackarch](https://github.com/blackarch/blackarch) BlackArch Linux is an Arch Linux-based distribution for penetration testers and security researchers.
+- [**1476**Star][2m] [C++] [jmpews/hookzz](https://github.com/jmpews/hookzz) a hook framework for arm/arm64/ios/android, and [dev] branch is being refactored.
+- [**1471**Star][27d] [minimaxir/hacker-news-undocumented](https://github.com/minimaxir/hacker-news-undocumented) Some of the hidden norms about Hacker News not otherwise covered in the Guidelines and the FAQ.
+- [**1470**Star][3y] [Py] [veil-framework/veil-evasion](https://github.com/Veil-Framework/Veil-Evasion) a tool designed to generate metasploit payloads that bypass common anti-virus solutions.
+- [**1470**Star][2d] [Go] [google/keytransparency](https://github.com/google/keytransparency) A transparent and secure way to look up public keys.
+- [**1469**Star][6y] [C] [alibaba/lvs](https://github.com/alibaba/lvs) A distribution of Linux Virtual Server with some advanced features. It introduces a new packet forwarding method - FULLNAT other than NAT/Tunneling/DirectRouting, and defense mechanism against synflooding attack - SYNPROXY.
+- [**1466**Star][29d] [Go] [neex/phuip-fpizdam](https://github.com/neex/phuip-fpizdam) Exploit for CVE-2019-11043
+- [**1464**Star][6m] [Py] [oros42/imsi-catcher](https://github.com/oros42/imsi-catcher) This program show you IMSI numbers of cellphones around you.
+- [**1463**Star][7d] [C] [ufrisk/pcileech](https://github.com/ufrisk/pcileech) Direct Memory Access (DMA) Attack Software
+- [**1462**Star][9d] [edoverflow/can-i-take-over-xyz](https://github.com/edoverflow/can-i-take-over-xyz) "Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.
+- [**1459**Star][3d] [Py] [enablesecurity/wafw00f](https://github.com/enablesecurity/wafw00f) identify and fingerprint Web Application Firewall (WAF) products protecting a website.
+- [**1458**Star][1y] [C++] [acaudwell/logstalgia](https://github.com/acaudwell/logstalgia) a visualization tool that replays or streams web server access logs as a retro arcade game simulation.
+- [**1455**Star][1y] [Py] [d4vinci/cr3dov3r](https://github.com/d4vinci/cr3dov3r) Know the dangers of credential reuse attacks.
+- [**1453**Star][13d] [C++] [srslte/srslte](https://github.com/srslte/srslte) Open source SDR LTE software suite from Software Radio Systems (SRS)
+- [**1451**Star][2d] [Py] [rocky/python-uncompyle6](https://github.com/rocky/python-uncompyle6) A cross-version Python bytecode decompiler
+- [**1447**Star][3y] [tiancode/learn-hacking](https://github.com/tiancode/learn-hacking) 开始学习Kali Linux 各种破解教程 渗透测试 逆向工程 HackThisSite挑战问题解答
+- [**1447**Star][3y] [tiancode/learn-hacking](https://github.com/tiancode/learn-hacking) 开始学习Kali Linux 各种破解教程 渗透测试 逆向工程 HackThisSite挑战问题解答
+- [**1447**Star][2m] [Py] [neo23x0/loki](https://github.com/neo23x0/loki) Loki - Simple IOC and Incident Response Scanner
+- [**1446**Star][5d] [C] [tianocore/edk2](https://github.com/tianocore/edk2) A modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications
+- [**1446**Star][20d] [Go] [skydive-project/skydive](https://github.com/skydive-project/skydive) An open source real-time network topology and protocols analyzer
+- [**1446**Star][14d] [C++] [microsoft/seal](https://github.com/microsoft/seal) Microsoft SEAL is an easy-to-use and powerful homomorphic encryption library.
+- [**1445**Star][3m] [C++] [vaibhavpandeyvpz/apkstudio](https://github.com/vaibhavpandeyvpz/apkstudio) Open-source, cross platform Qt based IDE for reverse-engineering Android application packages.
+- [**1437**Star][5d] [Go] [google/gapid](https://github.com/google/gapid) Graphics API Debugger
+- [**1436**Star][20d] [Kotlin] [cypherpunkarmory/userland](https://github.com/cypherpunkarmory/userland) The easiest way to run a Linux distribution or application on Android
+- [**1433**Star][11m] [C] [tpruvot/ccminer](https://github.com/tpruvot/ccminer) CUDA Open Source miner project, for most nvidia cards
+- [**1433**Star][1y] [TS] [pedronauck/reworm](https://github.com/pedronauck/reworm)
+- [**1432**Star][6m] [C++] [x64dbg/scyllahide](https://github.com/x64dbg/scyllahide) Advanced usermode anti-anti-debugger
+- [**1432**Star][2m] [C] [feralinteractive/gamemode](https://github.com/feralinteractive/gamemode) Optimise Linux system performance on demand
+- [**1429**Star][5y] [C++] [gdbinit/machoview](https://github.com/gdbinit/machoview) MachOView fork
+- [**1427**Star][9d] [ObjC] [nabla-c0d3/ssl-kill-switch2](https://github.com/nabla-c0d3/ssl-kill-switch2) Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS and OS X Apps
+- [**1426**Star][20d] [C++] [plasma-umass/coz](https://github.com/plasma-umass/coz) Finding Code that Counts with Causal Profiling
+- [**1426**Star][4y] [C++] [aappleby/smhasher](https://github.com/aappleby/smhasher) Automatically exported from code.google.com/p/smhasher
- [**1425**Star][3m] [Go] [google/stenographer](https://github.com/google/stenographer) Stenographer is a packet capture solution which aims to quickly spool all packets to disk, then provide simple, fast access to subsets of those packets. Discussion/announcements at stenographer@googlegroups.com
-- [**1423**Star][8y] [Py] [moxie0/sslstrip](https://github.com/moxie0/sslstrip) A tool for exploiting Moxie Marlinspike's SSL "stripping" attack.
-- [**1423**Star][18d] [Kotlin] [cypherpunkarmory/userland](https://github.com/cypherpunkarmory/userland) The easiest way to run a Linux distribution or application on Android
-- [**1422**Star][2m] [C] [feralinteractive/gamemode](https://github.com/feralinteractive/gamemode) Optimise Linux system performance on demand
-- [**1421**Star][3y] [mandatoryprogrammer/northkoreadnsleak](https://github.com/mandatoryprogrammer/northkoreadnsleak) Snapshot of North Korea's DNS data taken from zone transfers.
-- [**1421**Star][4y] [C++] [aappleby/smhasher](https://github.com/aappleby/smhasher) Automatically exported from code.google.com/p/smhasher
-- [**1420**Star][10m] [Java] [aslody/legend](https://github.com/aslody/legend) A framework for hook java methods.
-- [**1419**Star][2m] [Py] [neo23x0/loki](https://github.com/neo23x0/loki) Loki - Simple IOC and Incident Response Scanner
-- [**1419**Star][3y] [Py] [nathanlopez/stitch](https://github.com/nathanlopez/stitch) Python Remote Administration Tool (RAT)
-- [**1419**Star][12d] [Go] [google/google-ctf](https://github.com/google/google-ctf) Google CTF
-- [**1419**Star][5y] [C++] [gdbinit/machoview](https://github.com/gdbinit/machoview) MachOView fork
-- [**1417**Star][1m] [Py] [xdavidhu/mitmap](https://github.com/xdavidhu/mitmap)
-- [**1417**Star][5m] [PHP] [s4n7h0/xvwa](https://github.com/s4n7h0/xvwa) XVWA is a badly coded web application written in PHP/MySQL that helps security enthusiasts to learn application security.
-- [**1416**Star][1m] [Go] [barnybug/cli53](https://github.com/barnybug/cli53) Command line tool for Amazon Route 53
-- [**1415**Star][3y] [C] [antirez/dump1090](https://github.com/antirez/dump1090) Dump1090 is a simple Mode S decoder for RTLSDR devices
-- [**1413**Star][7m] [Objective-C] [nabla-c0d3/ssl-kill-switch2](https://github.com/nabla-c0d3/ssl-kill-switch2) Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS and OS X Apps
-- [**1411**Star][11d] [C] [ettercap/ettercap](https://github.com/ettercap/ettercap) Ettercap Project
-- [**1410**Star][8d] [Go] [cosmos72/gomacro](https://github.com/cosmos72/gomacro) Interactive Go interpreter and debugger with REPL, Eval, generics and Lisp-like macros
-- [**1409**Star][4m] [yadox666/the-hackers-hardware-toolkit](https://github.com/yadox666/the-hackers-hardware-toolkit) The best hacker's gadgets for Red Team pentesters and security researchers.
-- [**1408**Star][22d] [Java] [chrisk44/hijacker](https://github.com/chrisk44/hijacker) Aircrack, Airodump, Aireplay, MDK3 and Reaver GUI Application for Android
-- [**1407**Star][7d] [C] [namhyung/uftrace](https://github.com/namhyung/uftrace) Function (graph) tracer for user-space
-- [**1406**Star][1m] [C++] [google/nsjail](https://github.com/google/nsjail) A light-weight process isolation tool, making use of Linux namespaces and seccomp-bpf syscall filters (with help of the kafel bpf language)
-- [**1402**Star][5m] [gitguardian/apisecuritybestpractices](https://github.com/gitguardian/apisecuritybestpractices) Resources to help you keep secrets (API keys, database credentials, certificates, ...) out of source code and remediate the issue in case of a leaked API key. Made available by GitGuardian.
-- [**1402**Star][7d] [C++] [eteran/edb-debugger](https://github.com/eteran/edb-debugger) edb is a cross platform AArch32/x86/x86-64 debugger.
+- [**1424**Star][8y] [Py] [moxie0/sslstrip](https://github.com/moxie0/sslstrip) A tool for exploiting Moxie Marlinspike's SSL "stripping" attack.
+- [**1424**Star][11m] [Java] [aslody/legend](https://github.com/aslody/legend) A framework for hook java methods.
+- [**1423**Star][14d] [Go] [google/google-ctf](https://github.com/google/google-ctf) Google CTF
+- [**1422**Star][3y] [Py] [nathanlopez/stitch](https://github.com/nathanlopez/stitch) Python Remote Administration Tool (RAT)
+- [**1422**Star][3y] [mandatoryprogrammer/northkoreadnsleak](https://github.com/mandatoryprogrammer/northkoreadnsleak) Snapshot of North Korea's DNS data taken from zone transfers.
+- [**1419**Star][1m] [Py] [xdavidhu/mitmap](https://github.com/xdavidhu/mitmap)
+- [**1419**Star][3y] [C] [antirez/dump1090](https://github.com/antirez/dump1090) Dump1090 is a simple Mode S decoder for RTLSDR devices
+- [**1418**Star][5m] [PHP] [s4n7h0/xvwa](https://github.com/s4n7h0/xvwa) XVWA is a badly coded web application written in PHP/MySQL that helps security enthusiasts to learn application security.
+- [**1417**Star][4m] [yadox666/the-hackers-hardware-toolkit](https://github.com/yadox666/the-hackers-hardware-toolkit) The best hacker's gadgets for Red Team pentesters and security researchers.
+- [**1417**Star][4d] [Rust] [shadowsocks/shadowsocks-rust](https://github.com/shadowsocks/shadowsocks-rust) A Rust port of shadowsocks
+- [**1417**Star][1m] [Go] [barnybug/cli53](https://github.com/barnybug/cli53) Command line tool for Amazon Route 53
+- [**1415**Star][7d] [C] [z3apa3a/3proxy](https://github.com/z3apa3a/3proxy) 3proxy - tiny free proxy server
+- [**1414**Star][8d] [C] [ettercap/ettercap](https://github.com/ettercap/ettercap) Ettercap Project
+- [**1413**Star][24d] [XSLT] [lolbas-project/lolbas](https://github.com/lolbas-project/lolbas) Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
+- [**1413**Star][24d] [Java] [chrisk44/hijacker](https://github.com/chrisk44/hijacker) Aircrack, Airodump, Aireplay, MDK3 and Reaver GUI Application for Android
+- [**1412**Star][9d] [C] [namhyung/uftrace](https://github.com/namhyung/uftrace) Function (graph) tracer for user-space
+- [**1412**Star][5m] [gitguardian/apisecuritybestpractices](https://github.com/gitguardian/apisecuritybestpractices) Resources to help you keep secrets (API keys, database credentials, certificates, ...) out of source code and remediate the issue in case of a leaked API key. Made available by GitGuardian.
+- [**1411**Star][7d] [C++] [eteran/edb-debugger](https://github.com/eteran/edb-debugger) edb is a cross platform AArch32/x86/x86-64 debugger.
+- [**1411**Star][3d] [Go] [cosmos72/gomacro](https://github.com/cosmos72/gomacro) Interactive Go interpreter and debugger with REPL, Eval, generics and Lisp-like macros
+- [**1410**Star][3m] [Go] [hellogcc/100-gdb-tips](https://github.com/hellogcc/100-gdb-tips) A collection of gdb tips. 100 maybe just mean many here.
+- [**1408**Star][3m] [HTML] [owasp/top10](https://github.com/owasp/top10) Official OWASP Top 10 Document Repository
+- [**1407**Star][4d] [C++] [google/nsjail](https://github.com/google/nsjail) A light-weight process isolation tool, making use of Linux namespaces and seccomp-bpf syscall filters (with help of the kafel bpf language)
+- [**1405**Star][1y] [HTML] [gwuhaolin/blog](https://github.com/gwuhaolin/blog) 浩麟的技术博客
+- [**1405**Star][1y] [C++] [dotnet/llilc](https://github.com/dotnet/llilc) This repo contains LLILC, an LLVM based compiler for .NET Core. It includes a set of cross-platform .NET code generation tools that enables compilation of MSIL byte code to LLVM supported platforms.
+- [**1404**Star][7d] [Java] [chinashiyu/gfw.press](https://github.com/chinashiyu/gfw.press) GFW.Press新一代军用级高强度加密抗干扰网络数据高速传输软件
+- [**1403**Star][2d] [Go] [crazy-max/windowsspyblocker](https://github.com/crazy-max/windowsspyblocker)
- [**1401**Star][9m] [JS] [anttiviljami/browser-autofill-phishing](https://github.com/anttiviljami/browser-autofill-phishing) A simple demo of phishing by abusing the browser autofill feature
-- [**1400**Star][3m] [HTML] [owasp/top10](https://github.com/owasp/top10) Official OWASP Top 10 Document Repository
-- [**1400**Star][1y] [C++] [dotnet/llilc](https://github.com/dotnet/llilc) This repo contains LLILC, an LLVM based compiler for .NET Core. It includes a set of cross-platform .NET code generation tools that enables compilation of MSIL byte code to LLVM supported platforms.
-- [**1399**Star][25d] [Go] [crazy-max/windowsspyblocker](https://github.com/crazy-max/windowsspyblocker)
-- [**1399**Star][7d] [Java] [chinashiyu/gfw.press](https://github.com/chinashiyu/gfw.press) GFW.Press新一代军用级高强度加密抗干扰网络数据高速传输软件
-- [**1397**Star][7d] [Rust] [shadowsocks/shadowsocks-rust](https://github.com/shadowsocks/shadowsocks-rust) A Rust port of shadowsocks
-- [**1395**Star][1y] [Go] [filosottile/whosthere](https://github.com/filosottile/whosthere) A ssh server that knows who you are
-- [**1393**Star][25d] [C] [quiet/org.quietmodem.quiet](https://github.com/quiet/org.quietmodem.quiet) Quiet for Android - TCP over sound
-- [**1393**Star][3y] [PowerShell] [putterpanda/mimikittenz](https://github.com/putterpanda/mimikittenz) A post-exploitation powershell tool for extracting juicy info from memory.
-- [**1391**Star][22d] [XSLT] [lolbas-project/lolbas](https://github.com/lolbas-project/lolbas) Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
-- [**1388**Star][14d] [Swift] [johnno1962/injectioniii](https://github.com/johnno1962/injectioniii) Re-write of Injection for Xcode in (mostly) Swift4
-- [**1387**Star][1y] [HTML] [gwuhaolin/blog](https://github.com/gwuhaolin/blog) 浩麟的技术博客
-- [**1387**Star][2y] [JS] [sqren/fb-sleep-stats](https://github.com/sqren/fb-sleep-stats) Use Facebook to track your friends’ sleeping habits
-- [**1386**Star][18d] [C++] [plasma-umass/coz](https://github.com/plasma-umass/coz) Finding Code that Counts with Causal Profiling
-- [**1384**Star][4y] [PHP] [johntroony/php-webshells](https://github.com/johntroony/php-webshells) Common php webshells. Do not host the file(s) on your server!
-- [**1383**Star][14d] [C++] [jonathansalwan/triton](https://github.com/jonathansalwan/triton) Triton is a Dynamic Binary Analysis (DBA) framework. It provides internal components like a Dynamic Symbolic Execution (DSE) engine, a dynamic taint engine, AST representations of the x86, x86-64 and AArch64 Instructions Set Architecture (ISA), SMT simplification passes, an SMT solver interface and, the last but not least, Python bindings.
-- [**1383**Star][8d] [Py] [ekultek/whatwaf](https://github.com/ekultek/whatwaf) Detect and bypass web application firewalls and protection systems
-- [**1381**Star][11m] [Py] [eth0izzle/bucket-stream](https://github.com/eth0izzle/bucket-stream) Find interesting Amazon S3 Buckets by watching certificate transparency logs.
-- [**1380**Star][2m] [C] [z3apa3a/3proxy](https://github.com/z3apa3a/3proxy) 3proxy - tiny free proxy server
-- [**1380**Star][11d] [Shell] [drduh/pwd.sh](https://github.com/drduh/pwd.sh) GPG symmetric password manager
-- [**1377**Star][11d] [OCaml] [mirage/mirage](https://github.com/mirage/mirage) MirageOS is a library operating system that constructs unikernels
-- [**1376**Star][6m] [Py] [almandin/fuxploider](https://github.com/almandin/fuxploider) File upload vulnerability scanner and exploitation tool.
-- [**1375**Star][10m] [JS] [intika/librefox](https://github.com/intika/librefox) Firefox with privacy enhancements
+- [**1399**Star][16d] [Swift] [johnno1962/injectioniii](https://github.com/johnno1962/injectioniii) Re-write of Injection for Xcode in (mostly) Swift4
+- [**1397**Star][1y] [Go] [filosottile/whosthere](https://github.com/filosottile/whosthere) A ssh server that knows who you are
+- [**1396**Star][3y] [PS] [putterpanda/mimikittenz](https://github.com/putterpanda/mimikittenz) A post-exploitation powershell tool for extracting juicy info from memory.
+- [**1395**Star][27d] [C] [quiet/org.quietmodem.quiet](https://github.com/quiet/org.quietmodem.quiet) Quiet for Android - TCP over sound
+- [**1393**Star][4d] [atarity/deploy-your-own-saas](https://github.com/atarity/deploy-your-own-saas) List of "only yours" cloud services for everyday needs
+- [**1393**Star][9d] [Py] [ekultek/whatwaf](https://github.com/ekultek/whatwaf) Detect and bypass web application firewalls and protection systems
+- [**1392**Star][16d] [C++] [jonathansalwan/triton](https://github.com/jonathansalwan/triton) Triton is a Dynamic Binary Analysis (DBA) framework. It provides internal components like a Dynamic Symbolic Execution (DSE) engine, a dynamic taint engine, AST representations of the x86, x86-64 and AArch64 Instructions Set Architecture (ISA), SMT simplification passes, an SMT solver interface and, the last but not least, Python bindings.
+- [**1388**Star][4y] [PHP] [johntroony/php-webshells](https://github.com/johntroony/php-webshells) Common php webshells. Do not host the file(s) on your server!
+- [**1387**Star][11m] [Py] [eth0izzle/bucket-stream](https://github.com/eth0izzle/bucket-stream) Find interesting Amazon S3 Buckets by watching certificate transparency logs.
+- [**1386**Star][2y] [JS] [sqren/fb-sleep-stats](https://github.com/sqren/fb-sleep-stats) Use Facebook to track your friends’ sleeping habits
+- [**1384**Star][5d] [JS] [ix64/unlock-music](https://github.com/ix64/unlock-music) Unlock encrypted music file in browser. 在浏览器中解锁加密的音乐文件。
+- [**1381**Star][6m] [Py] [almandin/fuxploider](https://github.com/almandin/fuxploider) File upload vulnerability scanner and exploitation tool.
+- [**1380**Star][15d] [C] [dynamorio/drmemory](https://github.com/dynamorio/drmemory) Memory Debugger for Windows, Linux, Mac, and Android
+- [**1380**Star][13d] [Shell] [drduh/pwd.sh](https://github.com/drduh/pwd.sh) GPG symmetric password manager
+- [**1378**Star][13d] [OCaml] [mirage/mirage](https://github.com/mirage/mirage) MirageOS is a library operating system that constructs unikernels
+- [**1378**Star][2d] [JS] [lockfale/osint-framework](https://github.com/lockfale/osint-framework) OSINT Framework
+- [**1375**Star][15d] [Go] [unrolled/secure](https://github.com/unrolled/secure) HTTP middleware for Go that facilitates some quick security wins.
+- [**1375**Star][11m] [JS] [intika/librefox](https://github.com/intika/librefox) Firefox with privacy enhancements
- [**1374**Star][4y] [C++] [valvesoftware/vogl](https://github.com/valvesoftware/vogl) OpenGL capture / playback debugger.
-- [**1373**Star][13d] [C] [dynamorio/drmemory](https://github.com/dynamorio/drmemory) Memory Debugger for Windows, Linux, Mac, and Android
-- [**1365**Star][9m] [PowerShell] [danielbohannon/invoke-obfuscation](https://github.com/danielbohannon/invoke-obfuscation) PowerShell Obfuscator
-- [**1364**Star][5m] [Py] [s0md3v/striker](https://github.com/s0md3v/Striker) Striker is an offensive information and vulnerability scanner.
-- [**1363**Star][29d] [C] [zyantific/zydis](https://github.com/zyantific/zydis) Fast and lightweight x86/x86-64 disassembler library
-- [**1361**Star][3y] [C++] [aslody/turbodex](https://github.com/aslody/turbodex) fast load dex in memory.
-- [**1360**Star][6m] [Py] [vulnerscom/getsploit](https://github.com/vulnerscom/getsploit) Command line utility for searching and downloading exploits
-- [**1360**Star][2m] [Py] [fireeye/flare-floss](https://github.com/fireeye/flare-floss) Automatically extract obfuscated strings from malware.
+- [**1373**Star][5m] [Py] [s0md3v/striker](https://github.com/s0md3v/Striker) Striker is an offensive information and vulnerability scanner.
+- [**1373**Star][9m] [PS] [danielbohannon/invoke-obfuscation](https://github.com/danielbohannon/invoke-obfuscation) PowerShell Obfuscator
+- [**1371**Star][1m] [C] [zyantific/zydis](https://github.com/zyantific/zydis) Fast and lightweight x86/x86-64 disassembler library
+- [**1365**Star][9d] [Go] [cortesi/modd](https://github.com/cortesi/modd) A flexible developer tool that runs processes and responds to filesystem changes
+- [**1363**Star][2m] [Py] [fireeye/flare-floss](https://github.com/fireeye/flare-floss) Automatically extract obfuscated strings from malware.
- [floss](https://github.com/fireeye/flare-floss/tree/master/floss)
- [IDA插件](https://github.com/fireeye/flare-floss/blob/master/scripts/idaplugin.py)
-- [**1358**Star][7d] [Go] [cortesi/modd](https://github.com/cortesi/modd) A flexible developer tool that runs processes and responds to filesystem changes
-- [**1357**Star][24d] [JS] [lockfale/osint-framework](https://github.com/lockfale/osint-framework) OSINT Framework
-- [**1355**Star][6m] [C++] [phpv8/v8js](https://github.com/phpv8/v8js) V8 Javascript Engine for PHP — This PHP extension embeds the Google V8 Javascript Engine
-- [**1355**Star][1m] [grrrdog/java-deserialization-cheat-sheet](https://github.com/grrrdog/java-deserialization-cheat-sheet) The cheat sheet about Java Deserialization vulnerabilities
-- [**1355**Star][2m] [C] [googleprojectzero/winafl](https://github.com/googleprojectzero/winafl) A fork of AFL for fuzzing Windows binaries
-- [**1348**Star][23d] [C] [x64dbg/x64dbgpy](https://github.com/x64dbg/x64dbgpy) Automating x64dbg using Python, Snapshots:
-- [**1348**Star][4m] [C] [taviso/ctftool](https://github.com/taviso/ctftool) Interactive CTF Exploration Tool
-- [**1348**Star][3y] [Py] [joaomatosf/jexboss](https://github.com/joaomatosf/jexboss) Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool
-- [**1347**Star][13d] [Go] [unrolled/secure](https://github.com/unrolled/secure) HTTP middleware for Go that facilitates some quick security wins.
-- [**1347**Star][3m] [C++] [raspberrypi/tools](https://github.com/raspberrypi/tools)
+- [**1363**Star][3y] [C++] [aslody/turbodex](https://github.com/aslody/turbodex) fast load dex in memory.
+- [**1362**Star][1m] [grrrdog/java-deserialization-cheat-sheet](https://github.com/grrrdog/java-deserialization-cheat-sheet) The cheat sheet about Java Deserialization vulnerabilities
+- [**1361**Star][7m] [Py] [vulnerscom/getsploit](https://github.com/vulnerscom/getsploit) Command line utility for searching and downloading exploits
+- [**1361**Star][6m] [C++] [phpv8/v8js](https://github.com/phpv8/v8js) V8 Javascript Engine for PHP — This PHP extension embeds the Google V8 Javascript Engine
+- [**1359**Star][2m] [C] [googleprojectzero/winafl](https://github.com/googleprojectzero/winafl) A fork of AFL for fuzzing Windows binaries
+- [**1355**Star][10m] [HTML] [thelinuxchoice/blackeye](https://github.com/thelinuxchoice/blackeye) The most complete Phishing Tool, with 32 templates +1 customizable
+- [**1354**Star][2d] [Py] [mitre/caldera](https://github.com/mitre/caldera) Automated Adversary Emulation
+- [**1352**Star][3y] [Py] [joaomatosf/jexboss](https://github.com/joaomatosf/jexboss) Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool
+- [**1351**Star][3m] [C++] [raspberrypi/tools](https://github.com/raspberrypi/tools)
+- [**1350**Star][4m] [C] [taviso/ctftool](https://github.com/taviso/ctftool) Interactive CTF Exploration Tool
+- [**1349**Star][3y] [Py] [ddevault/evilpass](https://github.com/ddevault/evilpass) Slightly evil password strength checker
+- [**1349**Star][19d] [C++] [rikkaapps/riru](https://github.com/rikkaapps/riru) Inject zygote process by replace libmemtrack
+- [**1349**Star][5m] [Py] [lijiejie/githack](https://github.com/lijiejie/githack) A `.git` folder disclosure exploit
+- [**1348**Star][10m] [rebeyond/behinder](https://github.com/rebeyond/behinder) “冰蝎”动态二进制加密网站管理客户端
- [**1347**Star][11m] [Rust] [das-labor/panopticon](https://github.com/das-labor/panopticon) A libre cross-platform disassembler.
-- [**1346**Star][3y] [Py] [ddevault/evilpass](https://github.com/ddevault/evilpass) Slightly evil password strength checker
- [**1346**Star][2y] [HTML] [daxeel/blockshell](https://github.com/daxeel/blockshell) A command line utility for learning Blockchain technical concepts likechaining, mining, proof of work etc.
-- [**1344**Star][10m] [HTML] [thelinuxchoice/blackeye](https://github.com/thelinuxchoice/blackeye) The most complete Phishing Tool, with 32 templates +1 customizable
-- [**1343**Star][5m] [Py] [lijiejie/githack](https://github.com/lijiejie/githack) A `.git` folder disclosure exploit
-- [**1343**Star][3m] [Go] [hellogcc/100-gdb-tips](https://github.com/hellogcc/100-gdb-tips) A collection of gdb tips. 100 maybe just mean many here.
-- [**1342**Star][7d] [Py] [mitre/caldera](https://github.com/mitre/caldera) Automated Adversary Emulation
-- [**1341**Star][10d] [Go] [securitywithoutborders/hardentools](https://github.com/securitywithoutborders/hardentools) Hardentools is a utility that disables a number of risky Windows features.
-- [**1341**Star][2m] [Go] [davrodpin/mole](https://github.com/davrodpin/mole) cli app to create ssh tunnels
-- [**1339**Star][21d] [Py] [s0md3v/arjun](https://github.com/s0md3v/Arjun) HTTP parameter discovery suite.
-- [**1339**Star][12m] [XSLT] [api0cradle/lolbas](https://github.com/api0cradle/lolbas) Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
-- [**1338**Star][21d] [Go] [microcosm-cc/bluemonday](https://github.com/microcosm-cc/bluemonday) a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS
-- [**1338**Star][7m] [Py] [feeicn/gsil](https://github.com/feeicn/gsil) GitHub Sensitive Information Leakage
-- [**1337**Star][1y] [Py] [carmaa/inception](https://github.com/carmaa/inception) a physical memory manipulation and hacking tool exploiting PCI-based DMA. The tool can attack over FireWire, Thunderbolt, ExpressCard, PC Card and any other PCI/PCIe interfaces.
-- [**1336**Star][6y] [Perl] [intelisecurelabs/linux_exploit_suggester](https://github.com/InteliSecureLabs/Linux_Exploit_Suggester) Linux Exploit Suggester; based on operating system release number
-- [**1336**Star][3m] [Py] [maratyszcza/peachpy](https://github.com/maratyszcza/peachpy) x86-64 assembler embedded in Python
-- [**1333**Star][17d] [C++] [rikkaapps/riru](https://github.com/rikkaapps/riru) Inject zygote process by replace libmemtrack
-- [**1331**Star][2m] [C++] [mfontanini/libtins](https://github.com/mfontanini/libtins) High-level, multiplatform C++ network packet sniffing and crafting library.
-- [**1331**Star][1y] [C] [gamelinux/passivedns](https://github.com/gamelinux/passivedns) A network sniffer that logs all DNS server replies for use in a passive DNS setup
-- [**1329**Star][1m] [CSS] [undeadsec/socialfish](https://github.com/undeadsec/socialfish) Educational Phishing Tool & Information Collector
-- [**1329**Star][10m] [rebeyond/behinder](https://github.com/rebeyond/behinder) “冰蝎”动态二进制加密网站管理客户端
-- [**1329**Star][1y] [kirikira/vtemplate](https://github.com/kirikira/vtemplate) v2ray的模板们
-- [**1328**Star][1y] [C] [madeye/proxydroid](https://github.com/madeye/proxydroid) Global Proxy for Android
-- [**1326**Star][11d] [C++] [purplei2p/i2pd](https://github.com/purplei2p/i2pd) a full-featured C++ implementation of I2P client
-- [**1324**Star][2y] [CoffeeScript] [atmos/camo](https://github.com/atmos/camo) all about making insecure assets look secure
-- [**1323**Star][1y] [Py] [marten4n6/evilosx](https://github.com/marten4n6/evilosx) An evil RAT (Remote Administration Tool) for macOS / OS X.
-- [**1322**Star][3m] [HTML] [thehive-project/thehive](https://github.com/thehive-project/thehive) a Scalable, Open Source and Free Security Incident Response Platform
-- [**1321**Star][6m] [Go] [ssllabs/ssllabs-scan](https://github.com/ssllabs/ssllabs-scan) A command-line reference-implementation client for SSL Labs APIs, designed for automated and/or bulk testing.
-- [**1321**Star][1y] [C++] [rehints/hexrayscodexplorer](https://github.com/rehints/hexrayscodexplorer) Hex-Rays Decompiler plugin for better code navigation
+- [**1345**Star][25d] [C] [x64dbg/x64dbgpy](https://github.com/x64dbg/x64dbgpy) Automating x64dbg using Python, Snapshots:
+- [**1345**Star][12d] [Go] [securitywithoutborders/hardentools](https://github.com/securitywithoutborders/hardentools) Hardentools is a utility that disables a number of risky Windows features.
+- [**1344**Star][23d] [Go] [microcosm-cc/bluemonday](https://github.com/microcosm-cc/bluemonday) a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS
+- [**1343**Star][23d] [Py] [s0md3v/arjun](https://github.com/s0md3v/Arjun) HTTP parameter discovery suite.
+- [**1342**Star][12m] [C] [luke-jr/bfgminer](https://github.com/luke-jr/bfgminer) Modular ASIC/FPGA miner written in C, featuring overclocking, monitoring, fan speed control and remote interface capabilities.
+- [**1342**Star][2m] [Go] [davrodpin/mole](https://github.com/davrodpin/mole) cli app to create ssh tunnels
+- [**1342**Star][1y] [Py] [carmaa/inception](https://github.com/carmaa/inception) a physical memory manipulation and hacking tool exploiting PCI-based DMA. The tool can attack over FireWire, Thunderbolt, ExpressCard, PC Card and any other PCI/PCIe interfaces.
+- [**1341**Star][3m] [Py] [maratyszcza/peachpy](https://github.com/maratyszcza/peachpy) x86-64 assembler embedded in Python
+- [**1341**Star][1y] [XSLT] [api0cradle/lolbas](https://github.com/api0cradle/lolbas) Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
+- [**1340**Star][1y] [kirikira/vtemplate](https://github.com/kirikira/vtemplate) v2ray的模板们
+- [**1340**Star][7m] [Py] [feeicn/gsil](https://github.com/feeicn/gsil) GitHub Sensitive Information Leakage
+- [**1339**Star][6y] [Perl] [intelisecurelabs/linux_exploit_suggester](https://github.com/InteliSecureLabs/Linux_Exploit_Suggester) Linux Exploit Suggester; based on operating system release number
+- [**1338**Star][1m] [CSS] [undeadsec/socialfish](https://github.com/undeadsec/socialfish) Educational Phishing Tool & Information Collector
+- [**1337**Star][1y] [C] [madeye/proxydroid](https://github.com/madeye/proxydroid) Global Proxy for Android
+- [**1336**Star][3m] [HTML] [thehive-project/thehive](https://github.com/thehive-project/thehive) a Scalable, Open Source and Free Security Incident Response Platform
+- [**1335**Star][2m] [C++] [mfontanini/libtins](https://github.com/mfontanini/libtins) High-level, multiplatform C++ network packet sniffing and crafting library.
+- [**1334**Star][4y] [mengskysama/shadowsocks](https://github.com/mengskysama/shadowsocks) A fast tunnel proxy that helps you bypass firewalls
+- [**1333**Star][1y] [C] [gamelinux/passivedns](https://github.com/gamelinux/passivedns) A network sniffer that logs all DNS server replies for use in a passive DNS setup
+- [**1328**Star][2d] [C++] [purplei2p/i2pd](https://github.com/purplei2p/i2pd) a full-featured C++ implementation of I2P client
+- [**1328**Star][1y] [Py] [marten4n6/evilosx](https://github.com/marten4n6/evilosx) An evil RAT (Remote Administration Tool) for macOS / OS X.
+- [**1328**Star][2y] [CoffeeScript] [atmos/camo](https://github.com/atmos/camo) all about making insecure assets look secure
+- [**1327**Star][7m] [Go] [ssllabs/ssllabs-scan](https://github.com/ssllabs/ssllabs-scan) A command-line reference-implementation client for SSL Labs APIs, designed for automated and/or bulk testing.
+- [**1327**Star][3d] [C] [intel/haxm](https://github.com/intel/haxm) cross-platform hardware-assisted virtualization engine (hypervisor), widely used as an accelerator for Android Emulator and QEMU
+- [**1327**Star][10m] [C#] [cenmrev/v2rayw](https://github.com/cenmrev/v2rayw) GUI for v2ray-core on Windows
+- [**1325**Star][21d] [C] [dtag-dev-sec/tpotce](https://github.com/dtag-dev-sec/tpotce) 创建多蜜罐平台T-Pot ISO 镜像
+- [**1324**Star][1y] [C++] [rehints/hexrayscodexplorer](https://github.com/rehints/hexrayscodexplorer) Hex-Rays Decompiler plugin for better code navigation
View Details
@@ -932,97 +1003,26 @@
-- [**1318**Star][2m] [jaredthecoder/awesome-vehicle-security](https://github.com/jaredthecoder/awesome-vehicle-security)
-- [**1315**Star][1y] [mortenoir1/virtualbox_e1000_0day](https://github.com/mortenoir1/virtualbox_e1000_0day) VirtualBox E1000 Guest-to-Host Escape
-- [**1312**Star][12d] [C] [oisf/suricata](https://github.com/OISF/suricata) a network IDS, IPS and NSM engine
-- [**1311**Star][2y] [Py] [worawit/ms17-010](https://github.com/worawit/ms17-010) MS17-010
-- [**1311**Star][18d] [C] [intel/haxm](https://github.com/intel/haxm) cross-platform hardware-assisted virtualization engine (hypervisor), widely used as an accelerator for Android Emulator and QEMU
-- [**1310**Star][3m] [PowerShell] [peewpw/invoke-psimage](https://github.com/peewpw/invoke-psimage) Encodes a PowerShell script in the pixels of a PNG file and generates a oneliner to execute
-- [**1310**Star][10m] [C] [fancycode/memorymodule](https://github.com/fancycode/memorymodule) Library to load a DLL from memory.
-- [**1309**Star][10m] [C#] [cenmrev/v2rayw](https://github.com/cenmrev/v2rayw) GUI for v2ray-core on Windows
-- [**1305**Star][12m] [Py] [xyntax/poc-t](https://github.com/xyntax/poc-t) remote vulnerability PoC/EXP framework
-- [**1305**Star][3m] [Lua] [scipag/vulscan](https://github.com/scipag/vulscan) Advanced vulnerability scanning with Nmap NSE
-- [**1305**Star][18d] [C] [dtag-dev-sec/tpotce](https://github.com/dtag-dev-sec/tpotce) 创建多蜜罐平台T-Pot ISO 镜像
-- [**1303**Star][17d] [Py] [consensys/mythril](https://github.com/ConsenSys/mythril) Security analysis tool for EVM bytecode. Supports smart contracts built for Ethereum, Quorum, Vechain, Roostock, Tron and other EVM-compatible blockchains.
-- [**1303**Star][15d] [nikitavoloboev/privacy-respecting](https://github.com/nikitavoloboev/privacy-respecting) Curated List of Privacy Respecting Services and Software
+- [**1323**Star][2d] [Go] [xiaoming2028/freenet](https://github.com/xiaoming2028/freenet) 科学上网/梯子/自由上网/翻墙 SS/SSR/V2Ray/Brook 搭建教程
+- [**1323**Star][2m] [jaredthecoder/awesome-vehicle-security](https://github.com/jaredthecoder/awesome-vehicle-security)
+- [**1322**Star][3d] [C] [oisf/suricata](https://github.com/OISF/suricata) a network IDS, IPS and NSM engine
+- [**1319**Star][2y] [Py] [worawit/ms17-010](https://github.com/worawit/ms17-010) MS17-010
+- [**1317**Star][1y] [mortenoir1/virtualbox_e1000_0day](https://github.com/mortenoir1/virtualbox_e1000_0day) VirtualBox E1000 Guest-to-Host Escape
+- [**1316**Star][3m] [PS] [peewpw/invoke-psimage](https://github.com/peewpw/invoke-psimage) Encodes a PowerShell script in the pixels of a PNG file and generates a oneliner to execute
+- [**1314**Star][10m] [C] [fancycode/memorymodule](https://github.com/fancycode/memorymodule) Library to load a DLL from memory.
+- [**1311**Star][1m] [C++] [shadowsocks/libqtshadowsocks](https://github.com/shadowsocks/libqtshadowsocks) A lightweight and ultra-fast shadowsocks library written in C++14 with Qt framework
+- [**1309**Star][12m] [Py] [xyntax/poc-t](https://github.com/xyntax/poc-t) remote vulnerability PoC/EXP framework
+- [**1309**Star][3m] [Lua] [scipag/vulscan](https://github.com/scipag/vulscan) Advanced vulnerability scanning with Nmap NSE
+- [**1307**Star][19d] [Py] [consensys/mythril](https://github.com/ConsenSys/mythril) Security analysis tool for EVM bytecode. Supports smart contracts built for Ethereum, Quorum, Vechain, Roostock, Tron and other EVM-compatible blockchains.
+- [**1307**Star][27d] [C] [boywhp/fcn](https://github.com/boywhp/fcn) free connect your private network from anywhere
+- [**1304**Star][17d] [nikitavoloboev/privacy-respecting](https://github.com/nikitavoloboev/privacy-respecting) Curated List of Privacy Respecting Services and Software
+- [**1304**Star][7d] [C] [cisco-talos/pyrebox](https://github.com/cisco-talos/pyrebox) Python scriptable Reverse Engineering Sandbox, a Virtual Machine instrumentation and inspection framework based on QEMU
- [**1303**Star][4m] [C++] [klee/klee](https://github.com/klee/klee) KLEE Symbolic Execution Engine
-- [**1300**Star][18d] [C] [cisco-talos/pyrebox](https://github.com/cisco-talos/pyrebox) Python scriptable Reverse Engineering Sandbox, a Virtual Machine instrumentation and inspection framework based on QEMU
-- [**1297**Star][1y] [Go] [evilsocket/xray](https://github.com/evilsocket/xray) XRay is a tool for recon, mapping and OSINT gathering from public networks.
-- [**1293**Star][1y] [Shell] [dana-at-cp/backdoor-apk](https://github.com/dana-at-cp/backdoor-apk) backdoor-apk is a shell script that simplifies the process of adding a backdoor to any Android APK file. Users of this shell script should have working knowledge of Linux, Bash, Metasploit, Apktool, the Android SDK, smali, etc. This shell script is provided as-is without warranty of any kind and is intended for educational purposes only.
-- [**1291**Star][27d] [Java] [android-hacker/exposed](https://github.com/android-hacker/exposed) A library to use Xposed without root or recovery(or modify system image etc..).
-- [**1290**Star][2y] [Go] [malfunkt/hyperfox](https://github.com/malfunkt/hyperfox) HTTP/HTTPs MITM proxy and traffic recorder with on-the-fly TLS cert generation.
-- [**1289**Star][2m] [C] [traviscross/mtr](https://github.com/traviscross/mtr) Official repository for mtr, a network diagnostic tool
-- [**1288**Star][4y] [C++] [microsoft/microsoft-pdb](https://github.com/microsoft/microsoft-pdb) Information from Microsoft about the PDB format. We'll try to keep this up to date. Just trying to help the CLANG/LLVM community get onto Windows.
-- [**1287**Star][19d] [JS] [icymind/vrouter](https://github.com/icymind/vrouter) 一个基于 VirtualBox 和 openwrt 构建的项目, 旨在实现 macOS / Windows 平台的透明代理.
-- [**1284**Star][2m] [Py] [virtualabs/btlejack](https://github.com/virtualabs/btlejack) Bluetooth Low Energy Swiss-army knife
-- [**1284**Star][5m] [JS] [feross/spoof](https://github.com/feross/spoof) Easily spoof your MAC address in macOS, Windows, & Linux!
-- [**1278**Star][9m] [michalmalik/linux-re-101](https://github.com/michalmalik/linux-re-101) A collection of resources for linux reverse engineering
-- [**1278**Star][4y] [Py] [elvanderb/tcp-32764](https://github.com/elvanderb/tcp-32764) some codes and notes about the backdoor listening on TCP-32764 in linksys WAG200G.
-- [**1277**Star][10d] [PHP] [friendsofphp/security-advisories](https://github.com/friendsofphp/security-advisories) A database of PHP security advisories
-- [**1277**Star][27d] [Go] [dreadl0ck/netcap](https://github.com/dreadl0ck/netcap) A framework for secure and scalable network traffic analysis -
-- [**1275**Star][24d] [Py] [viper-framework/viper](https://github.com/viper-framework/viper) Binary analysis and management framework
-- [**1273**Star][1m] [Py] [pyauth/pyotp](https://github.com/pyauth/pyotp) Python One-Time Password Library
-- [**1273**Star][2m] [Py] [codingo/reconnoitre](https://github.com/codingo/reconnoitre) A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.
-- [**1272**Star][1y] [JS] [sakurity/securelogin](https://github.com/sakurity/securelogin) a decentralized authentication protocol for websites and apps
-- [**1270**Star][2m] [C] [seemoo-lab/nexmon](https://github.com/seemoo-lab/nexmon) The C-based Firmware Patching Framework for Broadcom/Cypress WiFi Chips that enables Monitor Mode, Frame Injection and much more
-- [**1270**Star][1y] [PowerShell] [dafthack/mailsniper](https://github.com/dafthack/mailsniper) a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.
-- [**1270**Star][1m] [Py] [bethgelab/foolbox](https://github.com/bethgelab/foolbox) Python toolbox to create adversarial examples that fool neural networks in PyTorch, TensorFlow, Keras, …
-- [**1268**Star][2m] [Java] [googlearchive/android-runtimepermissions](https://github.com/googlearchive/android-RuntimePermissions) This sample has been deprecated/archived. Check this repo for related samples:
-- [**1268**Star][1y] [Py] [ethereum/pyethapp](https://github.com/ethereum/pyethapp)
-- [**1266**Star][2m] [Py] [ganapati/rsactftool](https://github.com/ganapati/rsactftool) RSA attack tool (mainly for ctf) - retreive private key from weak public key and/or uncipher data
-- [**1265**Star][9d] [Shell] [firehol/blocklist-ipsets](https://github.com/firehol/blocklist-ipsets) ipsets dynamically updated with firehol's update-ipsets.sh script
-- [**1265**Star][9d] [Shell] [firehol/blocklist-ipsets](https://github.com/firehol/blocklist-ipsets) ipsets dynamically updated with firehol's update-ipsets.sh script
-- [**1262**Star][3m] [Go] [solo-io/squash](https://github.com/solo-io/squash) The debugger for microservices
-- [**1261**Star][3m] [Py] [alessandroz/beroot](https://github.com/alessandroz/beroot) Privilege Escalation Project - Windows / Linux / Mac
-- [**1259**Star][11m] [Py] [unapibageek/ctfr](https://github.com/unapibageek/ctfr) Abusing Certificate Transparency logs for getting HTTPS websites subdomains.
-- [**1255**Star][7m] [PHP] [ganlvtech/down_52pojie_cn](https://github.com/ganlvtech/down_52pojie_cn) A single page file explorer that can be hosted on static website. 吾爱破解论坛 爱盘
-- [**1255**Star][13d] [C] [aircrack-ng/aircrack-ng](https://github.com/aircrack-ng/aircrack-ng) WiFi security auditing tools suite
-- [**1253**Star][2y] [JS] [samyk/skyjack](https://github.com/samyk/skyjack) A drone engineered to autonomously seek out, hack, and wirelessly take full control over any other Parrot or 3DR drones within wireless or flying distance, creating an army of zombie drones under your control.
-- [**1250**Star][1m] [PowerShell] [hak5/bashbunny-payloads](https://github.com/hak5/bashbunny-payloads) The Official Bash Bunny Payload Repository
-- [**1248**Star][2y] [Py] [vaguileradiaz/tinfoleak](https://github.com/vaguileradiaz/tinfoleak) The most complete open-source tool for Twitter intelligence analysis
-- [**1248**Star][4m] [JS] [bubenshchykov/ngrok](https://github.com/bubenshchykov/ngrok) Expose your localhost to the web. Node wrapper for ngrok.
-- [**1245**Star][2m] [Go] [xiaoming2028/freenet](https://github.com/xiaoming2028/freenet) 科学上网/梯子/自由上网/翻墙 SSR/V2Ray/Brook 最全搭建教程
-- [**1245**Star][15d] [JS] [archerysec/archerysec](https://github.com/archerysec/archerysec) Centralize Vulnerability Assessment and Management for DevSecOps Team
-- [**1244**Star][2y] [Objective-C] [krausefx/detect.location](https://github.com/krausefx/detect.location) An easy way to access the user's iOS location data without actually having access
-- [**1242**Star][4y] [firesuncn/bluelotus_xssreceiver](https://github.com/firesuncn/bluelotus_xssreceiver) XSS平台 CTF工具 Web安全工具
-- [**1242**Star][1m] [Vue] [chaitin/passionfruit](https://github.com/chaitin/passionfruit) [WIP] Crappy iOS app analyzer
-- [**1241**Star][1y] [Ruby] [eliotsykes/rails-security-checklist](https://github.com/eliotsykes/rails-security-checklist)
-- [**1240**Star][10m] [C] [a0rtega/pafish](https://github.com/a0rtega/pafish) Pafish is a demonstration tool that employs several techniques to detect sandboxes and analysis environments in the same way as malware families do.
-- [**1239**Star][2m] [michalmalik/osx-re-101](https://github.com/michalmalik/osx-re-101) A collection of resources for OSX/iOS reverse engineering.
-- [**1235**Star][1m] [Go] [hacklcx/hfish](https://github.com/hacklcx/hfish) Extend the enterprise security test open source honeypot system , Record hacker attacks. 扩展企业安全测试主动诱导型开源蜜罐框架系统,记录黑客攻击手段
-- [**1235**Star][2m] [Go] [google/martian](https://github.com/google/martian) Martian is a library for building custom HTTP/S proxies
-- [**1232**Star][3m] [Shell] [rootsongjc/kubernetes-vagrant-centos-cluster](https://github.com/rootsongjc/kubernetes-vagrant-centos-cluster) Setting up a distributed Kubernetes cluster along with Istio service mesh locally with Vagrant and VirtualBox, only PoC or Demo use.
-- [**1231**Star][3y] [Py] [desaster/kippo](https://github.com/desaster/kippo) Kippo - SSH Honeypot
-- [**1230**Star][7d] [Shell] [mitchellkrogza/nginx-ultimate-bad-bot-blocker](https://github.com/mitchellkrogza/nginx-ultimate-bad-bot-blocker) Nginx Block Bad Bots, Spam Referrer Blocker, Vulnerability Scanners, User-Agents, Malware, Adware, Ransomware, Malicious Sites, with anti-DDOS, Wordpress Theme Detector Blocking and Fail2Ban Jail for Repeat Offenders
-- [**1230**Star][5m] [chalker/notes](https://github.com/chalker/notes) Some public notes
-- [**1228**Star][1y] [Kotlin] [gh0u1l5/wechatspellbook](https://github.com/gh0u1l5/wechatspellbook) 使用Kotlin编写的开源微信插件框架,底层需要 Xposed 或 VirtualXposed 等Hooking框架的支持,而顶层可以轻松对接Java、Kotlin、Scala等JVM系语言。让程序员能够在几分钟内编写出简单的微信插件,随意揉捏微信的内部逻辑。
-- [**1228**Star][8m] [Py] [flipkart-incubator/astra](https://github.com/flipkart-incubator/astra) Automated Security Testing For REST API's
-- [**1224**Star][1m] [C] [datatheorem/trustkit](https://github.com/datatheorem/trustkit) Easy SSL pinning validation and reporting for iOS, macOS, tvOS and watchOS.
-- [**1223**Star][3y] [CoffeeScript] [shadowsocks/shadowsocks-nodejs](https://github.com/shadowsocks/shadowsocks-nodejs)
-- [**1222**Star][3y] [C] [tsudakageyu/minhook](https://github.com/tsudakageyu/minhook) The Minimalistic x86/x64 API Hooking Library for Windows
-- [**1222**Star][27d] [C++] [nasa-sw-vnv/ikos](https://github.com/nasa-sw-vnv/ikos) Static analyzer for C/C++ based on the theory of Abstract Interpretation.
-- [**1222**Star][1y] [Py] [danmcinerney/net-creds](https://github.com/danmcinerney/net-creds) Sniffs sensitive data from interface or pcap
-- [**1220**Star][1y] [Go] [cloudflare/redoctober](https://github.com/cloudflare/redoctober) Go server for two-man rule style file encryption and decryption.
-- [**1219**Star][5y] [cure53/xsschallengewiki](https://github.com/cure53/XSSChallengeWiki) Welcome to the XSS Challenge Wiki!
-- [**1219**Star][4m] [Py] [owtf/owtf](https://github.com/owtf/owtf) a framework which tries to unite great tools and make pen testing more efficient
-- [**1218**Star][11d] [Py] [google/timesketch](https://github.com/google/timesketch) Collaborative forensic timeline analysis
-- [**1218**Star][26d] [Java] [find-sec-bugs/find-sec-bugs](https://github.com/find-sec-bugs/find-sec-bugs) The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)
-- [**1218**Star][5y] [cure53/xsschallengewiki](https://github.com/cure53/xsschallengewiki) Welcome to the XSS Challenge Wiki!
-- [**1217**Star][1y] [C#] [cn33liz/p0wnedshell](https://github.com/cn33liz/p0wnedshell) PowerShell Runspace Post Exploitation Toolkit
-- [**1216**Star][26d] [Go] [jsha/minica](https://github.com/jsha/minica) minica is a small, simple CA intended for use in situations where the CA operator also operates each host where a certificate will be used.
-- [**1212**Star][10d] [C] [dynamorio/dynamorio](https://github.com/dynamorio/dynamorio) Dynamic Instrumentation Tool Platform
-- [**1207**Star][8d] [JS] [jpcertcc/logontracer](https://github.com/jpcertcc/logontracer) Investigate malicious Windows logon by visualizing and analyzing Windows event log
-- [**1205**Star][3m] [Java] [javiersantos/piracychecker](https://github.com/javiersantos/piracychecker) An Android library that prevents your app from being pirated / cracked using Google Play Licensing (LVL), APK signature protection and more. API 14+ required.
-- [**1204**Star][7d] [Objective-C] [onionbrowser/onionbrowser](https://github.com/onionbrowser/onionbrowser) An open-source, privacy-enhancing web browser for iOS, utilizing the Tor anonymity network
-- [**1204**Star][3m] [JS] [davidbau/seedrandom](https://github.com/davidbau/seedrandom) seeded random number generator for Javascript
-- [**1203**Star][30d] [Py] [codingo/nosqlmap](https://github.com/codingo/NoSQLMap) Automated NoSQL database enumeration and web application exploitation tool.
-- [**1201**Star][7d] [Java] [linkedin/dexmaker](https://github.com/linkedin/dexmaker) A utility for doing compile or runtime code generation targeting Android's Dalvik VM
-- [**1200**Star][3m] [C] [droe/sslsplit](https://github.com/droe/sslsplit) Transparent SSL/TLS interception
-- [**1199**Star][1y] [felixgr/secure-ios-app-dev](https://github.com/felixgr/secure-ios-app-dev) Collection of the most common vulnerabilities found in iOS applications
-- [**1198**Star][24d] [Py] [thekingofduck/fuzzdicts](https://github.com/thekingofduck/fuzzdicts) Web Pentesting Fuzz 字典,一个就够了。
-- [**1196**Star][1y] [Go] [rancher/convoy](https://github.com/rancher/convoy) A Docker volume plugin, managing persistent container volumes.
-- [**1194**Star][2y] [C] [saminiir/level-ip](https://github.com/saminiir/level-ip) a Linux userspace TCP/IP stack, implemented with TUN/TAP devices.
-- [**1194**Star][7m] [riusksk/secbook](https://github.com/riusksk/secbook) 信息安全从业者书单推荐
-- [**1193**Star][18d] [Py] [cve-search/cve-search](https://github.com/cve-search/cve-search) perform local searches for known vulnerabilities
-- [**1192**Star][17d] [YARA] [horsicq/detect-it-easy](https://github.com/horsicq/detect-it-easy) Program for determining types of files for Windows, Linux and MacOS.
-- [**1191**Star][6y] [gdbinit/gdbinit](https://github.com/gdbinit/gdbinit) Gdbinit for OS X, iOS and others - x86, x86_64 and ARM
\ No newline at end of file
+- [**1300**Star][1y] [Shell] [dana-at-cp/backdoor-apk](https://github.com/dana-at-cp/backdoor-apk) backdoor-apk is a shell script that simplifies the process of adding a backdoor to any Android APK file. Users of this shell script should have working knowledge of Linux, Bash, Metasploit, Apktool, the Android SDK, smali, etc. This shell script is provided as-is without warranty of any kind and is intended for educational purposes only.
+- [**1299**Star][6d] [Go] [hacklcx/hfish](https://github.com/hacklcx/hfish) Extend the enterprise security test open source honeypot system , Record hacker attacks. 扩展企业安全测试主动诱导型开源蜜罐框架系统,记录黑客攻击手段
+- [**1298**Star][1y] [Go] [evilsocket/xray](https://github.com/evilsocket/xray) XRay is a tool for recon, mapping and OSINT gathering from public networks.
+- [**1293**Star][4y] [C++] [microsoft/microsoft-pdb](https://github.com/microsoft/microsoft-pdb) Information from Microsoft about the PDB format. We'll try to keep this up to date. Just trying to help the CLANG/LLVM community get onto Windows.
+- [**1293**Star][5m] [JS] [feross/spoof](https://github.com/feross/spoof) Easily spoof your MAC address in macOS, Windows, & Linux!
+- [**1293**Star][29d] [Java] [android-hacker/exposed](https://github.com/android-hacker/exposed) A library to use Xposed without root or recovery(or modify system image etc..).
+- [**1291**Star][6d] [C] [traviscross/mtr](https://github.com/traviscross/mtr) Official repository for mtr, a network diagnostic tool
+- [**1291**Star][2y] [Go] [malfunkt/hyperfox](https://github.com/malfunkt/hyperfox) HTTP/HTTPs MITM proxy and traffic recorder with on-the-fly TLS cert generation.
\ No newline at end of file
diff --git a/Readme_full.md b/Readme_full.md
index c23bd1e..68eaced 100644
--- a/Readme_full.md
+++ b/Readme_full.md
@@ -2,926 +2,996 @@
- [英文版本](https://github.com/alphaSeclab/sec-tool-list/blob/master/Readme_en.md)
- 因Github Readme显示行数有限, 当前页面显示的为不完整版, 只显示了星数最高的前1000个工具. [点击查看完整版](https://github.com/alphaSeclab/sec-tool-list/blob/master/Readme_full.md)
-
# 工具列表
-- [**34521**星][14d] [C++] [x64dbg/x64dbg](https://github.com/x64dbg/x64dbg) Windows平台x32/x64调试器
-- [**33781**星][8d] [Py] [minimaxir/big-list-of-naughty-strings](https://github.com/minimaxir/big-list-of-naughty-strings) “淘气”的字符串列表,当作为用户输入时很容易引发问题
-- [**32724**星][2m] [hack-with-github/awesome-hacking](https://github.com/hack-with-github/awesome-hacking) A collection of various awesome lists for hackers, pentesters and security researchers
-- [**30396**星][12d] [Go] [fatedier/frp](https://github.com/fatedier/frp) 快速的反向代理, 将NAT或防火墙之后的本地服务器暴露到公网
-- [**25942**星][7d] [Py] [certbot/certbot](https://github.com/certbot/certbot) Certbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any other CA that uses the ACME protocol.
-- [**25522**星][26d] [Swift] [shadowsocks/shadowsocksx-ng](https://github.com/shadowsocks/shadowsocksx-ng) Next Generation of ShadowsocksX
-- [**25087**星][13d] [Go] [v2ray/v2ray-core](https://github.com/v2ray/v2ray-core) A platform for building proxies to bypass network restrictions.
-- [**24589**星][7d] [trimstray/the-book-of-secret-knowledge](https://github.com/trimstray/the-book-of-secret-knowledge) A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.
-- [**22517**星][12d] [Shell] [mathiasbynens/dotfiles](https://github.com/mathiasbynens/dotfiles)
-- [**21751**星][7d] [PHP] [danielmiessler/seclists](https://github.com/danielmiessler/seclists) 多种类型资源收集:用户名、密码、URL、敏感数据类型、Fuzzing Payload、WebShell等
-- [**21668**星][10d] [Go] [filosottile/mkcert](https://github.com/filosottile/mkcert) A simple zero-config tool to make locally trusted development certificates with any names you'd like.
-- [**20619**星][9d] [Java] [skylot/jadx](https://github.com/skylot/jadx) dex 转 java 的反编译器
-- [**20089**星][2m] [Shell] [streisandeffect/streisand](https://github.com/StreisandEffect/streisand) Streisand sets up a new server running your choice of WireGuard, OpenConnect, OpenSSH, OpenVPN, Shadowsocks, sslh, Stunnel, or a Tor bridge. It also generates custom instructions for all of these services. At the end of the run you are given an HTML file with instructions that can be shared with friends, family members, and fellow activists.
-- [**19651**星][2m] [Jupyter Notebook] [camdavidsonpilon/probabilistic-programming-and-bayesian-methods-for-hackers](https://github.com/camdavidsonpilon/probabilistic-programming-and-bayesian-methods-for-hackers) aka "Bayesian Methods for Hackers": An introduction to Bayesian methods + probabilistic programming with a computation/understanding-first, mathematics-second point of view. All in pure Python ;)
-- [**18996**星][7d] [Ruby] [rapid7/metasploit-framework](https://github.com/rapid7/metasploit-framework) Metasploit Framework
-- [**18648**星][3y] [fallibleinc/security-guide-for-developers](https://github.com/fallibleinc/security-guide-for-developers) Security Guide for Developers (实用性开发人员安全须知)
-- [**18381**星][7d] [Java] [nationalsecurityagency/ghidra](https://github.com/nationalsecurityagency/ghidra) 软件逆向框架
-- [**18220**星][8d] [Java] [alibaba/arthas](https://github.com/alibaba/arthas) Alibaba Java诊断利器Arthas
-- [**17555**星][4y] [Go] [inconshreveable/ngrok](https://github.com/inconshreveable/ngrok) 反向代理,在公网终端和本地服务之间创建安全的隧道
-- [**16951**星][14d] [Py] [mitmproxy/mitmproxy](https://github.com/mitmproxy/mitmproxy) An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
-- [**16681**星][7d] [C#] [powershell/powershell](https://github.com/powershell/powershell) PowerShell for every system!
-- [**15756**星][8d] [Py] [sqlmapproject/sqlmap](https://github.com/sqlmapproject/sqlmap) Automatic SQL injection and database takeover tool
-- [**15694**星][9m] [micropoor/micro8](https://github.com/micropoor/micro8) 从业10年渗透笔记
-- [**15627**星][7d] [C] [curl/curl](https://github.com/curl/curl) A command line tool and library for transferring data with URL syntax, supporting HTTP, HTTPS, FTP, FTPS, GOPHER, TFTP, SCP, SFTP, SMB, TELNET, DICT, LDAP, LDAPS, FILE, IMAP, SMTP, POP3, RTSP and RTMP. libcurl offers a myriad of powerful features
-- [**14661**星][1m] [gfwlist/gfwlist](https://github.com/gfwlist/gfwlist) gfwlist
-- [**14478**星][26d] [Java] [tencent/tinker](https://github.com/tencent/tinker) Tinker is a hot-fix solution library for Android, it supports dex, library and resources update without reinstall apk.
-- [**13627**星][9m] [JS] [bannedbook/fanqiang](https://github.com/bannedbook/fanqiang) 翻墙-科学上网
-- [**13183**星][26d] [Py] [corentinj/real-time-voice-cloning](https://github.com/corentinj/real-time-voice-cloning) Clone a voice in 5 seconds to generate arbitrary speech in real-time
-- [**13081**星][17d] [Go] [jesseduffield/lazydocker](https://github.com/jesseduffield/lazydocker) The lazier way to manage everything docker
-- [**12920**星][10d] [Py] [cool-rr/pysnooper](https://github.com/cool-rr/pysnooper) Never use print for debugging again
-- [**12641**星][9d] [C] [shadowsocks/shadowsocks-libev](https://github.com/shadowsocks/shadowsocks-libev) libev port of shadowsocks
-- [**12453**星][7d] [C#] [0xd4d/dnspy](https://github.com/0xd4d/dnspy) .NET debugger and assembly editor
-- [**12203**星][14d] [Java] [signalapp/signal-android](https://github.com/signalapp/Signal-Android) A private messenger for Android.
-- [**11935**星][1m] [Go] [buger/goreplay](https://github.com/buger/goreplay) 实时捕获HTTP流量并输入测试环境,以便持续使用真实数据测试你的系统
-- [**11829**星][17d] [C] [openssl/openssl](https://github.com/openssl/openssl) TLS/SSL and crypto library
-- [**11490**星][7d] [C] [radareorg/radare2](https://github.com/radareorg/radare2) unix-like reverse engineering framework and commandline tools
-- [**11361**星][3m] [C] [robertdavidgraham/masscan](https://github.com/robertdavidgraham/masscan) masscan:世界上最快的互联网端口扫描器,号称可6分钟内扫描整个互联网
-- [**11246**星][1m] [facert/awesome-spider](https://github.com/facert/awesome-spider) 爬虫集合
-- [**11225**星][13d] [getlantern/download](https://github.com/getlantern/download) Lantern官方版本下载 蓝灯 翻墙 科学上网 外网 加速器 梯子 路由
-- [**11174**星][7d] [Java] [oracle/graal](https://github.com/oracle/graal) Run Programs Faster Anywhere
-- [**11106**星][2m] [Jupyter Notebook] [selfteaching/the-craft-of-selfteaching](https://github.com/selfteaching/the-craft-of-selfteaching) One has no future if one couldn't teach themself.
-- [**11047**星][7d] [Py] [swisskyrepo/payloadsallthethings](https://github.com/swisskyrepo/payloadsallthethings) A list of useful payloads and bypass for Web Application Security and Pentest/CTF
-- [**11013**星][2y] [Objective-C] [bang590/jspatch](https://github.com/bang590/jspatch) JSPatch bridge Objective-C and Javascript using the Objective-C runtime. You can call any Objective-C class and method in JavaScript by just including a small engine. JSPatch is generally used to hotfix iOS App.
-- [**11008**星][8d] [Py] [owasp/cheatsheetseries](https://github.com/owasp/cheatsheetseries) The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
-- [**10902**星][12d] [Objective-C] [flipboard/flex](https://github.com/flipboard/flex) An in-app debugging and exploration tool for iOS
-- [**10886**星][2m] [CSS] [hacker0x01/hacker101](https://github.com/hacker0x01/hacker101) Hacker101
-- [**10761**星][2y] [CoffeeScript] [dropbox/zxcvbn](https://github.com/dropbox/zxcvbn) Low-Budget Password Strength Estimation
-- [**10742**星][13d] [enaqx/awesome-pentest](https://github.com/enaqx/awesome-pentest) 渗透测试资源/工具集
-- [**10738**星][17d] [Java] [konloch/bytecode-viewer](https://github.com/konloch/bytecode-viewer) A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)
-- [**10107**星][8d] [Go] [goharbor/harbor](https://github.com/goharbor/harbor) An open source trusted cloud native registry project that stores, signs, and scans content.
-- [**9844**星][11d] [ruanyf/weekly](https://github.com/ruanyf/weekly) 科技爱好者周刊,每周五发布
-- [**9804**星][8m] [imthenachoman/how-to-secure-a-linux-server](https://github.com/imthenachoman/how-to-secure-a-linux-server) An evolving how-to guide for securing a Linux server.
-- [**9349**星][12d] [Ruby] [postalhq/postal](https://github.com/postalhq/postal) 全功能邮件服务器
-- [**9229**星][3m] [JS] [localtunnel/localtunnel](https://github.com/localtunnel/localtunnel) expose yourself
-- [**9182**星][8d] [Go] [cnlh/nps](https://github.com/cnlh/nps) 一款轻量级、功能强大的内网穿透代理服务器。支持tcp、udp流量转发,支持内网http代理、内网socks5代理,同时支持snappy压缩、站点保护、加密传输、多路复用、header修改等。支持web图形化管理,集成多用户模式。
-- [**9178**星][10d] [Java] [ibotpeaches/apktool](https://github.com/ibotpeaches/apktool) A tool for reverse engineering Android apk files
-- [**9141**星][8d] [C#] [icsharpcode/ilspy](https://github.com/icsharpcode/ilspy) .NET Decompiler
-- [**9064**星][27d] [JS] [valve/fingerprintjs2](https://github.com/valve/fingerprintjs2) Modern & flexible browser fingerprinting library
-- [**9003**星][9d] [PowerShell] [lukesampson/scoop](https://github.com/lukesampson/scoop) A command-line installer for Windows.
-- [**8995**星][2m] [vitalysim/awesome-hacking-resources](https://github.com/vitalysim/awesome-hacking-resources) A collection of hacking / penetration testing resources to make you better!
-- [**8988**星][9d] [Py] [sherlock-project/sherlock](https://github.com/sherlock-project/sherlock) Find Usernames Across Social Networks
-- [**8847**星][6m] [Go] [rkt/rkt](https://github.com/rkt/rkt) rkt is a pod-native container engine for Linux. It is composable, secure, and built on standards.
-- [**8712**星][15d] [C] [gentilkiwi/mimikatz](https://github.com/gentilkiwi/mimikatz) A little tool to play with Windows security
-- [**8597**星][26d] [Java] [android-hacker/virtualxposed](https://github.com/android-hacker/virtualxposed) A simple app to use Xposed without root, unlock the bootloader or modify system image, etc.
-- [**8495**星][1m] [microsoft/wsl](https://github.com/microsoft/WSL) Issues found on WSL
-- [**8408**星][2y] [brannondorsey/wifi-cracking](https://github.com/brannondorsey/wifi-cracking) 破解WPA/WPA2 Wi-Fi 路由器
-- [**8399**星][27d] [Py] [wifiphisher/wifiphisher](https://github.com/wifiphisher/wifiphisher) 流氓AP框架, 用于RedTeam和Wi-Fi安全测试
-- [**8033**星][7d] [trimstray/the-practical-linux-hardening-guide](https://github.com/trimstray/the-practical-linux-hardening-guide) This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).
-- [**7992**星][2m] [Py] [facebook/chisel](https://github.com/facebook/chisel) Chisel is a collection of LLDB commands to assist debugging iOS apps.
-- [**7952**星][3y] [Go] [cyfdecyf/cow](https://github.com/cyfdecyf/cow) HTTP proxy written in Go. COW can automatically identify blocked sites and use parent proxies to access.
-- [**7936**星][4y] [Objective-C] [shadowsocks/shadowsocks-ios](https://github.com/shadowsocks/shadowsocks-ios) Removed according to regulations.
-- [**7806**星][3m] [C++] [shiqiyu/libfacedetection](https://github.com/shiqiyu/libfacedetection) An open source library for face detection in images. The face detection speed can reach 1500FPS.
-- [**7696**星][7d] [JS] [gchq/cyberchef](https://github.com/gchq/cyberchef) The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis
-- [**7685**星][7d] [Go] [git-lfs/git-lfs](https://github.com/git-lfs/git-lfs) Git extension for versioning large files
-- [**7628**星][22d] [Java] [java-decompiler/jd-gui](https://github.com/java-decompiler/jd-gui) A standalone Java Decompiler GUI
-- [**7498**星][27d] [Py] [threat9/routersploit](https://github.com/threat9/routersploit) Exploitation Framework for Embedded Devices
-- [**7371**星][12d] [Go] [snail007/goproxy](https://github.com/snail007/goproxy) Proxy是高性能全功能的http代理、https代理、socks5代理、内网穿透、内网穿透p2p、内网穿透代理、内网穿透反向代理、内网穿透服务器、Websocket代理、TCP代理、UDP代理、DNS代理、DNS加密代理,代理API认证,全能跨平台代理服务器。
-- [**7365**星][1m] [Py] [s0md3v/xsstrike](https://github.com/s0md3v/XSStrike) Most advanced XSS scanner.
-- [**7205**星][17d] [Java] [lionsoul2014/ip2region](https://github.com/lionsoul2014/ip2region) Ip2region is a offline IP location library with accuracy rate of 99.9% and 0.0x millseconds searching performance. DB file is less then 5Mb with all ip address stored. binding for Java,PHP,C,Python,Nodejs,Golang,C#,lua. Binary,B-tree,Memory searching algorithm
-- [**7174**星][7m] [Shell] [teddysun/shadowsocks_install](https://github.com/teddysun/shadowsocks_install) Auto Install Shadowsocks Server for CentOS/Debian/Ubuntu
-- [**6994**星][14d] [Go] [future-architect/vuls](https://github.com/future-architect/vuls) 针对Linux/FreeBSD 编写的漏洞扫描器. Go 语言编写
-- [**6968**星][2m] [JS] [cs01/gdbgui](https://github.com/cs01/gdbgui) Browser-based frontend to gdb (gnu debugger). Add breakpoints, view the stack, visualize data structures, and more in C, C++, Go, Rust, and Fortran. Run gdbgui from the terminal and a new tab will open in your browser.
-- [**6956**星][10d] [C] [hashcat/hashcat](https://github.com/hashcat/hashcat) 世界上最快最先进的密码恢复工具
-- [**6954**星][13d] [Go] [nats-io/nats-server](https://github.com/nats-io/nats-server) High-Performance server for NATS, the cloud native messaging system.
-- [**6950**星][9d] [greatfire/wiki](https://github.com/greatfire/wiki) 自由浏览
-- [**6917**星][3m] [Java] [pxb1988/dex2jar](https://github.com/pxb1988/dex2jar) Tools to work with android .dex and java .class files
-- [**6844**星][2m] [Go] [sqshq/sampler](https://github.com/sqshq/sampler) A tool for shell commands execution, visualization and alerting. Configured with a simple YAML file.
-- [**6788**星][17d] [Shell] [awslabs/git-secrets](https://github.com/awslabs/git-secrets) Prevents you from committing secrets and credentials into git repositories
-- [**6708**星][9m] [Java] [amitshekhariitbhu/android-debug-database](https://github.com/amitshekhariitbhu/android-debug-database) A library for debugging android databases and shared preferences - Make Debugging Great Again
-- [**6678**星][3y] [C++] [alibaba/andfix](https://github.com/alibaba/andfix) AndFix is a library that offer hot-fix for Android App.
-- [**6639**星][9d] [Java] [zaproxy/zaproxy](https://github.com/zaproxy/zaproxy) 在开发和测试Web App时自动发现安全漏洞
-- [**6557**星][11d] [Py] [networkx/networkx](https://github.com/networkx/networkx) 用于创建、操纵和研究复杂网络的结构,Python包
-- [**6455**星][1m] [Py] [h2y/shadowrocket-adblock-rules](https://github.com/h2y/shadowrocket-adblock-rules) 提供多款 Shadowrocket 规则,带广告过滤功能。用于 iOS 未越狱设备选择性地自动翻墙。
-- [**6449**星][11d] [Shell] [cisofy/lynis](https://github.com/cisofy/lynis) Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
-- [**6440**星][9m] [HTML] [open-power-workgroup/hospital](https://github.com/open-power-workgroup/hospital) OpenPower工作组收集汇总的医院开放数据
-- [**6413**星][15d] [Go] [bettercap/bettercap](https://github.com/bettercap/bettercap) 新版的bettercap, Go 编写. bettercap 是强大的、模块化、可移植且易于扩展的 MITM 框架, 旧版用 Ruby 编写
-- [**6284**星][27d] [Py] [seatgeek/fuzzywuzzy](https://github.com/seatgeek/fuzzywuzzy) Fuzzy String Matching in Python
-- [**6182**星][2m] [Py] [yandex/gixy](https://github.com/yandex/gixy) Nginx 配置静态分析工具,防止配置错误导致安全问题,自动化错误配置检测
-- [**6170**星][6m] [rmerl/asuswrt-merlin](https://github.com/rmerl/asuswrt-merlin) Enhanced version of Asus's router firmware (Asuswrt) (legacy code base)
-- [**6158**星][3y] [PowerShell] [powershellmafia/powersploit](https://github.com/PowerShellMafia/PowerSploit) PowerSploit - A PowerShell Post-Exploitation Framework
-- [**6130**星][1y] [Hack] [facebook/fbctf](https://github.com/facebook/fbctf) Platform to host Capture the Flag competitions
-- [**6124**星][9m] [Py] [schollz/howmanypeoplearearound](https://github.com/schollz/howmanypeoplearearound) 检测 Wifi 信号统计你周围的人数
-- [**6100**星][7d] [JS] [avwo/whistle](https://github.com/avwo/whistle) 基于Node实现的跨平台抓包调试代理工具(HTTP, HTTP2, HTTPS, Websocket)
-- [**6061**星][2y] [C] [jgamblin/mirai-source-code](https://github.com/jgamblin/mirai-source-code) Leaked Mirai Source Code for Research/IoC Development Purposes
-- [**6025**星][14d] [Go] [quay/clair](https://github.com/quay/clair) Vulnerability Static Analysis for Containers
-- [**6025**星][14d] [Go] [quay/clair](https://github.com/quay/clair) clair:容器(appc、docker)漏洞静态分析工具。
-- [**6002**星][11d] [Py] [cyrus-and/gdb-dashboard](https://github.com/cyrus-and/gdb-dashboard) Modular visual interface for GDB in Python
-- [**5996**星][20d] [berzerk0/probable-wordlists](https://github.com/berzerk0/probable-wordlists) Version 2 is live! Wordlists sorted by probability originally created for password generation and testing - make sure your passwords aren't popular!
-- [**5948**星][2m] [Java] [google/android-classyshark](https://github.com/google/android-classyshark) 分析基于Android/Java的App或游戏
-- [**5935**星][29d] [Py] [gallopsled/pwntools](https://github.com/gallopsled/pwntools) CTF framework and exploit development library
-- [**5870**星][6m] [JS] [haotian-wang/google-access-helper](https://github.com/haotian-wang/google-access-helper) 谷歌访问助手破解版
-- [**5850**星][8d] [C++] [radareorg/cutter](https://github.com/radareorg/cutter) 逆向框架 radare2的Qt界面,iaito的升级版
-- [**5845**星][2m] [Gnuplot] [nasa-jpl/open-source-rover](https://github.com/nasa-jpl/open-source-rover) A build-it-yourself, 6-wheel rover based on the rovers on Mars!
-- [**5811**星][7m] [JS] [sindresorhus/fkill-cli](https://github.com/sindresorhus/fkill-cli) Fabulously kill processes. Cross-platform.
-- [**5764**星][3m] [Objective-C] [square/ponydebugger](https://github.com/square/ponydebugger) Remote network and data debugging for your native iOS app using Chrome Developer Tools
-- [**5738**星][1y] [qinyuhang/shadowsocksx-ng-r](https://github.com/qinyuhang/shadowsocksx-ng-r) Next Generation of ShadowsocksX
-- [**5738**星][2y] [Py] [newsapps/beeswithmachineguns](https://github.com/newsapps/beeswithmachineguns) 创建多个micro EC2实例, 攻击指定Web App
-- [**5719**星][2m] [C] [spacehuhn/esp8266_deauther](https://github.com/spacehuhn/esp8266_deauther) 使用ESP8266 制作Wifi干扰器
-- [**5715**星][8m] [C] [xoreaxeaxeax/movfuscator](https://github.com/xoreaxeaxeax/movfuscator) C编译器,编译的二进制文件只有1个代码块。
-- [**5674**星][22d] [JS] [swagger-api/swagger-editor](https://github.com/swagger-api/swagger-editor) Swagger Editor
-- [**5653**星][16d] [Go] [casbin/casbin](https://github.com/casbin/casbin) An authorization library that supports access control models like ACL, RBAC, ABAC in Golang
-- [**5605**星][1m] [C] [rofl0r/proxychains-ng](https://github.com/rofl0r/proxychains-ng) proxychains ng (new generation) - a preloader which hooks calls to sockets in dynamically linked programs and redirects it through one or more socks/http proxies. continuation of the unmaintained proxychains project. the sf.net page is currently not updated, use releases from github release page instead.
-- [**5578**星][8d] [Ruby] [presidentbeef/brakeman](https://github.com/presidentbeef/brakeman) ROR程序的静态分析工具
-- [**5521**星][18d] [rshipp/awesome-malware-analysis](https://github.com/rshipp/awesome-malware-analysis) A curated list of awesome malware analysis tools and resources.
-- [**5517**星][27d] [Roff] [max2max/freess](https://github.com/max2max/freess) 免费ss账号 免费shadowsocks账号 免费v2ray账号 (长期更新)
-- [**5456**星][8m] [carpedm20/awesome-hacking](https://github.com/carpedm20/awesome-hacking) Hacking教程、工具和资源
-- [**5417**星][2y] [Rust] [autumnai/leaf](https://github.com/autumnai/leaf) Open Machine Intelligence Framework for Hackers. (GPU/CPU)
-- [**5392**星][2m] [Py] [axi0mx/ipwndfu](https://github.com/axi0mx/ipwndfu) open-source jailbreaking tool for many iOS devices
-- [**5353**星][5m] [C] [pwn20wndstuff/undecimus](https://github.com/pwn20wndstuff/undecimus) unc0ver jailbreak for iOS 11.0 - 12.4
-- [**5317**星][7d] [Py] [mlflow/mlflow](https://github.com/mlflow/mlflow) Open source platform for the machine learning lifecycle
-- [**5307**星][9d] [Go] [zricethezav/gitleaks](https://github.com/zricethezav/gitleaks) Audit git repos for secrets
-- [**5207**星][7m] [Py] [usarmyresearchlab/dshell](https://github.com/usarmyresearchlab/dshell) 网络审计分析
-- [**5165**星][1m] [Py] [refirmlabs/binwalk](https://github.com/ReFirmLabs/binwalk) 固件分析工具(命令行+IDA插件)
+- [**45523**星][11d] [C#] [shadowsocks/shadowsocks-windows](https://github.com/shadowsocks/shadowsocks-windows) If you want to keep a secret, you must also hide it from yourself.
+- [**34554**星][16d] [C++] [x64dbg/x64dbg](https://github.com/x64dbg/x64dbg) Windows平台x32/x64调试器
+- [**33926**星][10d] [Py] [minimaxir/big-list-of-naughty-strings](https://github.com/minimaxir/big-list-of-naughty-strings) “淘气”的字符串列表,当作为用户输入时很容易引发问题
+- [**32844**星][2m] [hack-with-github/awesome-hacking](https://github.com/hack-with-github/awesome-hacking) A collection of various awesome lists for hackers, pentesters and security researchers
+- [**32022**星][4y] [Py] [shadowsocks/shadowsocks](https://github.com/shadowsocks/shadowsocks)
+- [**30689**星][14d] [Go] [fatedier/frp](https://github.com/fatedier/frp) 快速的反向代理, 将NAT或防火墙之后的本地服务器暴露到公网
+- [**27836**星][2d] [Kotlin] [shadowsocks/shadowsocks-android](https://github.com/shadowsocks/shadowsocks-android) A shadowsocks client for Android
+- [**25977**星][2d] [Py] [certbot/certbot](https://github.com/certbot/certbot) Certbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any other CA that uses the ACME protocol.
+- [**25643**星][28d] [Swift] [shadowsocks/shadowsocksx-ng](https://github.com/shadowsocks/shadowsocksx-ng) Next Generation of ShadowsocksX
+- [**25330**星][3d] [Go] [v2ray/v2ray-core](https://github.com/v2ray/v2ray-core) A platform for building proxies to bypass network restrictions.
+- [**24826**星][2d] [xitu/gold-miner](https://github.com/xitu/gold-miner)
+- [**24727**星][5d] [trimstray/the-book-of-secret-knowledge](https://github.com/trimstray/the-book-of-secret-knowledge) A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.
+- [**22556**星][14d] [Shell] [mathiasbynens/dotfiles](https://github.com/mathiasbynens/dotfiles)
+- [**21874**星][9d] [PHP] [danielmiessler/seclists](https://github.com/danielmiessler/seclists) 多种类型资源收集:用户名、密码、URL、敏感数据类型、Fuzzing Payload、WebShell等
+- [**21778**星][12d] [Go] [filosottile/mkcert](https://github.com/filosottile/mkcert) A simple zero-config tool to make locally trusted development certificates with any names you'd like.
+- [**20680**星][5d] [Java] [skylot/jadx](https://github.com/skylot/jadx) dex 转 java 的反编译器
+- [**20159**星][5d] [Shell] [streisandeffect/streisand](https://github.com/StreisandEffect/streisand) Streisand sets up a new server running your choice of WireGuard, OpenConnect, OpenSSH, OpenVPN, Shadowsocks, sslh, Stunnel, or a Tor bridge. It also generates custom instructions for all of these services. At the end of the run you are given an HTML file with instructions that can be shared with friends, family members, and fellow activists.
+- [**19692**星][2m] [Jupyter Notebook] [camdavidsonpilon/probabilistic-programming-and-bayesian-methods-for-hackers](https://github.com/camdavidsonpilon/probabilistic-programming-and-bayesian-methods-for-hackers) aka "Bayesian Methods for Hackers": An introduction to Bayesian methods + probabilistic programming with a computation/understanding-first, mathematics-second point of view. All in pure Python ;)
+- [**19212**星][1y] [alvin9999/new-pac](https://github.com/alvin9999/new-pac) 科学/自由上网,免费ss/ssr/v2ray/goflyway账号,搭建教程
+- [**19076**星][2d] [Ruby] [rapid7/metasploit-framework](https://github.com/rapid7/metasploit-framework) Metasploit Framework
+- [**18676**星][3y] [fallibleinc/security-guide-for-developers](https://github.com/fallibleinc/security-guide-for-developers) Security Guide for Developers (实用性开发人员安全须知)
+- [**18476**星][2d] [Java] [nationalsecurityagency/ghidra](https://github.com/nationalsecurityagency/ghidra) 软件逆向框架
+- [**18390**星][3d] [Java] [alibaba/arthas](https://github.com/alibaba/arthas) Alibaba Java诊断利器Arthas
+- [**17641**星][4y] [Go] [inconshreveable/ngrok](https://github.com/inconshreveable/ngrok) 反向代理,在公网终端和本地服务之间创建安全的隧道
+- [**17069**星][6d] [Py] [mitmproxy/mitmproxy](https://github.com/mitmproxy/mitmproxy) An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
+- [**16769**星][2d] [C#] [powershell/powershell](https://github.com/powershell/powershell) PowerShell for every system!
+- [**15824**星][2d] [Py] [sqlmapproject/sqlmap](https://github.com/sqlmapproject/sqlmap) Automatic SQL injection and database takeover tool
+- [**15731**星][9m] [micropoor/micro8](https://github.com/micropoor/micro8) 从业10年渗透笔记
+- [**15718**星][3d] [C] [curl/curl](https://github.com/curl/curl) A command line tool and library for transferring data with URL syntax, supporting HTTP, HTTPS, FTP, FTPS, GOPHER, TFTP, SCP, SFTP, SMB, TELNET, DICT, LDAP, LDAPS, FILE, IMAP, SMTP, POP3, RTSP and RTMP. libcurl offers a myriad of powerful features
+- [**15363**星][21d] [Py] [drduh/macos-security-and-privacy-guide](https://github.com/drduh/macOS-Security-and-Privacy-Guide) Guide to securing and improving privacy on macOS
+- [**14744**星][1m] [gfwlist/gfwlist](https://github.com/gfwlist/gfwlist) gfwlist
+- [**14518**星][7d] [Java] [tencent/tinker](https://github.com/tencent/tinker) Tinker is a hot-fix solution library for Android, it supports dex, library and resources update without reinstall apk.
+- [**13736**星][9m] [JS] [bannedbook/fanqiang](https://github.com/bannedbook/fanqiang) 翻墙-科学上网
+- [**13548**星][28d] [Py] [corentinj/real-time-voice-cloning](https://github.com/corentinj/real-time-voice-cloning) Clone a voice in 5 seconds to generate arbitrary speech in real-time
+- [**13241**星][19d] [Go] [jesseduffield/lazydocker](https://github.com/jesseduffield/lazydocker) The lazier way to manage everything docker
+- [**12966**星][12d] [Py] [cool-rr/pysnooper](https://github.com/cool-rr/pysnooper) Never use print for debugging again
+- [**12742**星][3d] [Vue] [liyasthomas/postwoman](https://github.com/liyasthomas/postwoman)
+- [**12693**星][8d] [C] [shadowsocks/shadowsocks-libev](https://github.com/shadowsocks/shadowsocks-libev) libev port of shadowsocks
+- [**12544**星][9d] [C#] [0xd4d/dnspy](https://github.com/0xd4d/dnspy) .NET debugger and assembly editor
+- [**12325**星][2m] [Ruby] [diaspora/diaspora](https://github.com/diaspora/diaspora) A privacy-aware, distributed, open source social network.
+- [**12241**星][5d] [Java] [signalapp/signal-android](https://github.com/signalapp/Signal-Android) A private messenger for Android.
+- [**11977**星][1m] [Go] [buger/goreplay](https://github.com/buger/goreplay) 实时捕获HTTP流量并输入测试环境,以便持续使用真实数据测试你的系统
+- [**11890**星][6d] [C] [openssl/openssl](https://github.com/openssl/openssl) TLS/SSL and crypto library
+- [**11530**星][2d] [C] [radareorg/radare2](https://github.com/radareorg/radare2) unix-like reverse engineering framework and commandline tools
+- [**11418**星][3m] [C] [robertdavidgraham/masscan](https://github.com/robertdavidgraham/masscan) masscan:世界上最快的互联网端口扫描器,号称可6分钟内扫描整个互联网
+- [**11404**星][2d] [getlantern/download](https://github.com/getlantern/download) Lantern官方版本下载 蓝灯 翻墙 科学上网 外网 加速器 梯子 路由
+- [**11342**星][1m] [facert/awesome-spider](https://github.com/facert/awesome-spider) 爬虫集合
+- [**11278**星][2d] [Java] [oracle/graal](https://github.com/oracle/graal) Run Programs Faster Anywhere
+- [**11200**星][5d] [Py] [swisskyrepo/payloadsallthethings](https://github.com/swisskyrepo/payloadsallthethings) A list of useful payloads and bypass for Web Application Security and Pentest/CTF
+- [**11143**星][2m] [Jupyter Notebook] [selfteaching/the-craft-of-selfteaching](https://github.com/selfteaching/the-craft-of-selfteaching) One has no future if one couldn't teach themself.
+- [**11110**星][5d] [Py] [owasp/cheatsheetseries](https://github.com/owasp/cheatsheetseries) The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
+- [**11016**星][2y] [ObjC] [bang590/jspatch](https://github.com/bang590/jspatch) JSPatch bridge Objective-C and Javascript using the Objective-C runtime. You can call any Objective-C class and method in JavaScript by just including a small engine. JSPatch is generally used to hotfix iOS App.
+- [**10925**星][2d] [ObjC] [flipboard/flex](https://github.com/flipboard/flex) An in-app debugging and exploration tool for iOS
+- [**10907**星][2m] [CSS] [hacker0x01/hacker101](https://github.com/hacker0x01/hacker101) Hacker101
+- [**10830**星][15d] [enaqx/awesome-pentest](https://github.com/enaqx/awesome-pentest) 渗透测试资源/工具集
+- [**10780**星][2y] [CoffeeScript] [dropbox/zxcvbn](https://github.com/dropbox/zxcvbn) Low-Budget Password Strength Estimation
+- [**10757**星][19d] [Java] [konloch/bytecode-viewer](https://github.com/konloch/bytecode-viewer) A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)
+- [**10318**星][5d] [ruanyf/weekly](https://github.com/ruanyf/weekly) 科技爱好者周刊,每周五发布
+- [**10226**星][3d] [Go] [goharbor/harbor](https://github.com/goharbor/harbor) An open source trusted cloud native registry project that stores, signs, and scans content.
+- [**9830**星][8m] [imthenachoman/how-to-secure-a-linux-server](https://github.com/imthenachoman/how-to-secure-a-linux-server) An evolving how-to guide for securing a Linux server.
+- [**9613**星][4d] [Py] [sherlock-project/sherlock](https://github.com/sherlock-project/sherlock) Find Usernames Across Social Networks
+- [**9389**星][3d] [Go] [cnlh/nps](https://github.com/cnlh/nps) 一款轻量级、功能强大的内网穿透代理服务器。支持tcp、udp流量转发,支持内网http代理、内网socks5代理,同时支持snappy压缩、站点保护、加密传输、多路复用、header修改等。支持web图形化管理,集成多用户模式。
+- [**9358**星][6d] [Ruby] [postalhq/postal](https://github.com/postalhq/postal) 全功能邮件服务器
+- [**9266**星][3m] [JS] [localtunnel/localtunnel](https://github.com/localtunnel/localtunnel) expose yourself
+- [**9229**星][12d] [Java] [ibotpeaches/apktool](https://github.com/ibotpeaches/apktool) A tool for reverse engineering Android apk files
+- [**9185**星][2d] [C#] [icsharpcode/ilspy](https://github.com/icsharpcode/ilspy) .NET Decompiler
+- [**9148**星][29d] [JS] [valve/fingerprintjs2](https://github.com/valve/fingerprintjs2) Modern & flexible browser fingerprinting library
+- [**9069**星][11d] [PS] [lukesampson/scoop](https://github.com/lukesampson/scoop) A command-line installer for Windows.
+- [**9015**星][2m] [vitalysim/awesome-hacking-resources](https://github.com/vitalysim/awesome-hacking-resources) A collection of hacking / penetration testing resources to make you better!
+- [**8854**星][6m] [Go] [rkt/rkt](https://github.com/rkt/rkt) rkt is a pod-native container engine for Linux. It is composable, secure, and built on standards.
+- [**8739**星][17d] [C] [gentilkiwi/mimikatz](https://github.com/gentilkiwi/mimikatz) A little tool to play with Windows security
+- [**8646**星][28d] [Java] [android-hacker/virtualxposed](https://github.com/android-hacker/virtualxposed) A simple app to use Xposed without root, unlock the bootloader or modify system image, etc.
+- [**8525**星][1m] [microsoft/wsl](https://github.com/microsoft/WSL) Issues found on WSL
+- [**8443**星][7m] [Shell] [233boy/v2ray](https://github.com/233boy/v2ray) 最好用的 V2Ray 一键安装脚本 & 管理脚本
+- [**8424**星][2d] [Py] [wifiphisher/wifiphisher](https://github.com/wifiphisher/wifiphisher) 流氓AP框架, 用于RedTeam和Wi-Fi安全测试
+- [**8420**星][2y] [brannondorsey/wifi-cracking](https://github.com/brannondorsey/wifi-cracking) 破解WPA/WPA2 Wi-Fi 路由器
+- [**8044**星][9d] [trimstray/the-practical-linux-hardening-guide](https://github.com/trimstray/the-practical-linux-hardening-guide) This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).
+- [**8002**星][2m] [Py] [facebook/chisel](https://github.com/facebook/chisel) Chisel is a collection of LLDB commands to assist debugging iOS apps.
+- [**7986**星][1m] [Py] [mailpile/mailpile](https://github.com/mailpile/mailpile) A free & open modern, fast email client with user-friendly encryption and privacy features
+- [**7965**星][3y] [Go] [cyfdecyf/cow](https://github.com/cyfdecyf/cow) HTTP proxy written in Go. COW can automatically identify blocked sites and use parent proxies to access.
+- [**7945**星][4y] [ObjC] [shadowsocks/shadowsocks-ios](https://github.com/shadowsocks/shadowsocks-ios) Removed according to regulations.
+- [**7840**星][6d] [C++] [shiqiyu/libfacedetection](https://github.com/shiqiyu/libfacedetection) An open source library for face detection in images. The face detection speed can reach 1500FPS.
+- [**7731**星][3d] [JS] [gchq/cyberchef](https://github.com/gchq/cyberchef) The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis
+- [**7712**星][2d] [Go] [git-lfs/git-lfs](https://github.com/git-lfs/git-lfs) Git extension for versioning large files
+- [**7670**星][24d] [Java] [java-decompiler/jd-gui](https://github.com/java-decompiler/jd-gui) A standalone Java Decompiler GUI
+- [**7524**星][29d] [Py] [threat9/routersploit](https://github.com/threat9/routersploit) Exploitation Framework for Embedded Devices
+- [**7474**星][9d] [Go] [snail007/goproxy](https://github.com/snail007/goproxy) Proxy是高性能全功能的http代理、https代理、socks5代理、内网穿透、内网穿透p2p、内网穿透代理、内网穿透反向代理、内网穿透服务器、Websocket代理、TCP代理、UDP代理、DNS代理、DNS加密代理,代理API认证,全能跨平台代理服务器。
+- [**7412**星][1m] [C++] [shadowsocks/shadowsocks-qt5](https://github.com/shadowsocks/shadowsocks-qt5) A cross-platform shadowsocks GUI client
+- [**7397**星][1m] [Py] [s0md3v/xsstrike](https://github.com/s0md3v/XSStrike) Most advanced XSS scanner.
+- [**7246**星][19d] [Java] [lionsoul2014/ip2region](https://github.com/lionsoul2014/ip2region) Ip2region is a offline IP location library with accuracy rate of 99.9% and 0.0x millseconds searching performance. DB file is less then 5Mb with all ip address stored. binding for Java,PHP,C,Python,Nodejs,Golang,C#,lua. Binary,B-tree,Memory searching algorithm
+- [**7186**星][7m] [Shell] [teddysun/shadowsocks_install](https://github.com/teddysun/shadowsocks_install) Auto Install Shadowsocks Server for CentOS/Debian/Ubuntu
+- [**7017**星][16d] [Go] [future-architect/vuls](https://github.com/future-architect/vuls) 针对Linux/FreeBSD 编写的漏洞扫描器. Go 语言编写
+- [**6989**星][5d] [C] [hashcat/hashcat](https://github.com/hashcat/hashcat) 世界上最快最先进的密码恢复工具
+- [**6984**星][2d] [Go] [nats-io/nats-server](https://github.com/nats-io/nats-server) High-Performance server for NATS, the cloud native messaging system.
+- [**6984**星][2m] [JS] [cs01/gdbgui](https://github.com/cs01/gdbgui) Browser-based frontend to gdb (gnu debugger). Add breakpoints, view the stack, visualize data structures, and more in C, C++, Go, Rust, and Fortran. Run gdbgui from the terminal and a new tab will open in your browser.
+- [**6957**星][11d] [greatfire/wiki](https://github.com/greatfire/wiki) 自由浏览
+- [**6949**星][3m] [Java] [pxb1988/dex2jar](https://github.com/pxb1988/dex2jar) Tools to work with android .dex and java .class files
+- [**6869**星][2m] [Go] [sqshq/sampler](https://github.com/sqshq/sampler) A tool for shell commands execution, visualization and alerting. Configured with a simple YAML file.
+- [**6812**星][19d] [Shell] [awslabs/git-secrets](https://github.com/awslabs/git-secrets) Prevents you from committing secrets and credentials into git repositories
+- [**6732**星][9m] [Java] [amitshekhariitbhu/android-debug-database](https://github.com/amitshekhariitbhu/android-debug-database) A library for debugging android databases and shared preferences - Make Debugging Great Again
+- [**6683**星][3d] [Java] [zaproxy/zaproxy](https://github.com/zaproxy/zaproxy) 在开发和测试Web App时自动发现安全漏洞
+- [**6682**星][3y] [C++] [alibaba/andfix](https://github.com/alibaba/andfix) AndFix is a library that offer hot-fix for Android App.
+- [**6668**星][12d] [C++] [keepassxreboot/keepassxc](https://github.com/keepassxreboot/keepassxc) KeePassXC is a cross-platform community-driven port of the Windows application “Keepass Password Safe”.
+- [**6595**星][3d] [Py] [networkx/networkx](https://github.com/networkx/networkx) 用于创建、操纵和研究复杂网络的结构,Python包
+- [**6555**星][6m] [Go] [shadowsocks/shadowsocks-go](https://github.com/shadowsocks/shadowsocks-go) go port of shadowsocks (Deprecated)
+- [**6518**星][1m] [Py] [h2y/shadowrocket-adblock-rules](https://github.com/h2y/shadowrocket-adblock-rules) 提供多款 Shadowrocket 规则,带广告过滤功能。用于 iOS 未越狱设备选择性地自动翻墙。
+- [**6462**星][5d] [Shell] [cisofy/lynis](https://github.com/cisofy/lynis) Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
+- [**6451**星][17d] [Go] [bettercap/bettercap](https://github.com/bettercap/bettercap) 新版的bettercap, Go 编写. bettercap 是强大的、模块化、可移植且易于扩展的 MITM 框架, 旧版用 Ruby 编写
+- [**6448**星][9m] [HTML] [open-power-workgroup/hospital](https://github.com/open-power-workgroup/hospital) OpenPower工作组收集汇总的医院开放数据
+- [**6310**星][29d] [Py] [seatgeek/fuzzywuzzy](https://github.com/seatgeek/fuzzywuzzy) Fuzzy String Matching in Python
+- [**6197**星][2m] [ObjC] [johnno1962/injectionforxcode](https://github.com/johnno1962/injectionforxcode) Runtime Code Injection for Objective-C & Swift
+- [**6194**星][3y] [PS] [powershellmafia/powersploit](https://github.com/PowerShellMafia/PowerSploit) PowerSploit - A PowerShell Post-Exploitation Framework
+- [**6192**星][2m] [Py] [yandex/gixy](https://github.com/yandex/gixy) Nginx 配置静态分析工具,防止配置错误导致安全问题,自动化错误配置检测
+- [**6187**星][6m] [rmerl/asuswrt-merlin](https://github.com/rmerl/asuswrt-merlin) Enhanced version of Asus's router firmware (Asuswrt) (legacy code base)
+- [**6146**星][2d] [JS] [avwo/whistle](https://github.com/avwo/whistle) 基于Node实现的跨平台抓包调试代理工具(HTTP, HTTP2, HTTPS, Websocket)
+- [**6137**星][1y] [Hack] [facebook/fbctf](https://github.com/facebook/fbctf) Platform to host Capture the Flag competitions
+- [**6128**星][9m] [Py] [schollz/howmanypeoplearearound](https://github.com/schollz/howmanypeoplearearound) 检测 Wifi 信号统计你周围的人数
+- [**6092**星][15d] [Go] [usefathom/fathom](https://github.com/usefathom/fathom) Fathom Lite. Simple, privacy-focused website analytics. Built with Golang & Preact.
+- [**6074**星][16d] [Go] [quay/clair](https://github.com/quay/clair) Vulnerability Static Analysis for Containers
+- [**6074**星][16d] [Go] [quay/clair](https://github.com/quay/clair) clair:容器(appc、docker)漏洞静态分析工具。
+- [**6073**星][5m] [Java] [qihoo360/replugin](https://github.com/qihoo360/replugin) RePlugin - A flexible, stable, easy-to-use Android Plug-in Framework
+- [**6070**星][2y] [C] [jgamblin/mirai-source-code](https://github.com/jgamblin/mirai-source-code) Leaked Mirai Source Code for Research/IoC Development Purposes
+- [**6021**星][3d] [Py] [cyrus-and/gdb-dashboard](https://github.com/cyrus-and/gdb-dashboard) Modular visual interface for GDB in Python
+- [**6017**星][7d] [berzerk0/probable-wordlists](https://github.com/berzerk0/probable-wordlists) Version 2 is live! Wordlists sorted by probability originally created for password generation and testing - make sure your passwords aren't popular!
+- [**5972**星][2m] [Java] [google/android-classyshark](https://github.com/google/android-classyshark) 分析基于Android/Java的App或游戏
+- [**5968**星][2d] [Py] [gallopsled/pwntools](https://github.com/gallopsled/pwntools) CTF framework and exploit development library
+- [**5942**星][6m] [JS] [haotian-wang/google-access-helper](https://github.com/haotian-wang/google-access-helper) 谷歌访问助手破解版
+- [**5888**星][2d] [Py] [asciimoo/searx](https://github.com/asciimoo/searx) searx:网络元数据搜索引擎。汇总70 多个搜索引擎的搜素结果,避免用户被追踪或者被分析。可与 Tor 结合使用
+- [**5879**星][2d] [C++] [radareorg/cutter](https://github.com/radareorg/cutter) 逆向框架 radare2的Qt界面,iaito的升级版
+- [**5871**星][2m] [Gnuplot] [nasa-jpl/open-source-rover](https://github.com/nasa-jpl/open-source-rover) A build-it-yourself, 6-wheel rover based on the rovers on Mars!
+- [**5815**星][7m] [JS] [sindresorhus/fkill-cli](https://github.com/sindresorhus/fkill-cli) Fabulously kill processes. Cross-platform.
+- [**5773**星][1y] [qinyuhang/shadowsocksx-ng-r](https://github.com/qinyuhang/shadowsocksx-ng-r) Next Generation of ShadowsocksX
+- [**5766**星][3m] [ObjC] [square/ponydebugger](https://github.com/square/ponydebugger) Remote network and data debugging for your native iOS app using Chrome Developer Tools
+- [**5762**星][2m] [C] [spacehuhn/esp8266_deauther](https://github.com/spacehuhn/esp8266_deauther) 使用ESP8266 制作Wifi干扰器
+- [**5742**星][2y] [Py] [newsapps/beeswithmachineguns](https://github.com/newsapps/beeswithmachineguns) 创建多个micro EC2实例, 攻击指定Web App
+- [**5740**星][8m] [C] [xoreaxeaxeax/movfuscator](https://github.com/xoreaxeaxeax/movfuscator) C编译器,编译的二进制文件只有1个代码块。
+- [**5694**星][9d] [JS] [swagger-api/swagger-editor](https://github.com/swagger-api/swagger-editor) Swagger Editor
+- [**5693**星][2d] [Go] [casbin/casbin](https://github.com/casbin/casbin) An authorization library that supports access control models like ACL, RBAC, ABAC in Golang
+- [**5626**星][1m] [C] [rofl0r/proxychains-ng](https://github.com/rofl0r/proxychains-ng) proxychains ng (new generation) - a preloader which hooks calls to sockets in dynamically linked programs and redirects it through one or more socks/http proxies. continuation of the unmaintained proxychains project. the sf.net page is currently not updated, use releases from github release page instead.
+- [**5593**星][10d] [Ruby] [presidentbeef/brakeman](https://github.com/presidentbeef/brakeman) ROR程序的静态分析工具
+- [**5565**星][29d] [Roff] [max2max/freess](https://github.com/max2max/freess) 免费ss账号 免费shadowsocks账号 免费v2ray账号 (长期更新)
+- [**5540**星][20d] [rshipp/awesome-malware-analysis](https://github.com/rshipp/awesome-malware-analysis) A curated list of awesome malware analysis tools and resources.
+- [**5476**星][8m] [carpedm20/awesome-hacking](https://github.com/carpedm20/awesome-hacking) Hacking教程、工具和资源
+- [**5417**星][2m] [Py] [axi0mx/ipwndfu](https://github.com/axi0mx/ipwndfu) open-source jailbreaking tool for many iOS devices
+- [**5413**星][2y] [Rust] [autumnai/leaf](https://github.com/autumnai/leaf) Open Machine Intelligence Framework for Hackers. (GPU/CPU)
+- [**5371**星][5m] [C] [pwn20wndstuff/undecimus](https://github.com/pwn20wndstuff/undecimus) unc0ver jailbreak for iOS 11.0 - 12.4
+- [**5371**星][2d] [Py] [mlflow/mlflow](https://github.com/mlflow/mlflow) Open source platform for the machine learning lifecycle
+- [**5324**星][4d] [Go] [zricethezav/gitleaks](https://github.com/zricethezav/gitleaks) Audit git repos for secrets
+- [**5205**星][7m] [Py] [usarmyresearchlab/dshell](https://github.com/usarmyresearchlab/dshell) 网络审计分析
+- [**5196**星][3m] [Py] [ytisf/thezoo](https://github.com/ytisf/thezoo) A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.
+- [**5192**星][1m] [Py] [refirmlabs/binwalk](https://github.com/ReFirmLabs/binwalk) 固件分析工具(命令行+IDA插件)
- [IDA插件](https://github.com/ReFirmLabs/binwalk/tree/master/src/scripts)
- [binwalk](https://github.com/ReFirmLabs/binwalk/tree/master/src/binwalk)
-- [**5165**星][1y] [JS] [samyk/poisontap](https://github.com/samyk/poisontap) Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.
-- [**5163**星][3m] [Py] [ytisf/thezoo](https://github.com/ytisf/thezoo) A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.
-- [**5121**星][13d] [PHP] [tennc/webshell](https://github.com/tennc/webshell) webshell收集
-- [**5111**星][18d] [Shell] [vulhub/vulhub](https://github.com/vulhub/vulhub) Pre-Built Vulnerable Environments Based on Docker-Compose
-- [**5096**星][4m] [Py] [n1nj4sec/pupy](https://github.com/n1nj4sec/pupy) Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) remote administration and post-exploitation tool mainly written in python
-- [**5092**星][19d] [C++] [avast/retdec](https://github.com/avast/retdec) 基于 LLVM 的可重定位机器码反编译器, 可检测壳、检测和重构C++类继承、重构函数/类型/结构体等、可反编译为 C 或 Python 2种高级语言格式
-- [**5067**星][2m] [sbilly/awesome-security](https://github.com/sbilly/awesome-security) 与安全相关的软件、库、文档、书籍、资源和工具等收集
-- [**5054**星][2m] [Shell] [stackexchange/blackbox](https://github.com/stackexchange/blackbox) 文件使用PGP加密后隐藏在Git/Mercurial/Subversion
-- [**5036**星][8d] [Go] [dnscrypt/dnscrypt-proxy](https://github.com/DNSCrypt/dnscrypt-proxy) 灵活的DNS代理,支持现代的加密DNS协议,例如:DNS protocols such as DNSCrypt v2, DNS-over-HTTPS and Anonymized DNSCrypt.
-- [**5028**星][1m] [Java] [meituan-dianping/walle](https://github.com/meituan-dianping/walle) Android Signature V2 Scheme签名下的新一代渠道包打包神器
-- [**5026**星][4y] [Py] [shadowsocksr-backup/shadowsocksr](https://github.com/shadowsocksr-backup/shadowsocksr) Python port of ShadowsocksR
-- [**5023**星][4m] [PowerShell] [empireproject/empire](https://github.com/EmpireProject/Empire) 后渗透框架. Windows客户端用PowerShell, Linux/OSX用Python. 之前PowerShell Empire和Python EmPyre的组合
-- [**5010**星][15d] [HTML] [owasp/owasp-mstg](https://github.com/owasp/owasp-mstg) 关于移动App安全开发、测试和逆向的相近手册
-- [**4990**星][1m] [Py] [snare/voltron](https://github.com/snare/voltron) A hacky debugger UI for hackers
-- [**4941**星][10d] [Go] [inlets/inlets](https://github.com/inlets/inlets) Expose your local endpoints to the Internet
-- [**4928**星][13d] [ASP] [hq450/fancyss](https://github.com/hq450/fancyss) fancyss is a project providing tools to across the GFW on asuswrt/merlin based router.
-- [**4924**星][20d] [Py] [trustedsec/social-engineer-toolkit](https://github.com/trustedsec/social-engineer-toolkit) The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.
-- [**4909**星][1y] [Go] [yinghuocho/firefly-proxy](https://github.com/yinghuocho/firefly-proxy) A proxy software to help circumventing the Great Firewall.
-- [**4892**星][11m] [Go] [bitly/oauth2_proxy](https://github.com/bitly/oauth2_proxy) 反向代理,静态文件服务器,提供Providers(Google/Github)认证
-- [**4872**星][2m] [Rust] [sharkdp/hexyl](https://github.com/sharkdp/hexyl) 命令行中查看hex
-- [**4872**星][7m] [Java] [guardianproject/haven](https://github.com/guardianproject/haven) 通过Android应用和设备上的传感器保护自己的个人空间和财产而又不损害
-- [**4868**星][9d] [Shell] [denisidoro/navi](https://github.com/denisidoro/navi) An interactive cheatsheet tool for the command-line
-- [**4862**星][7d] [JS] [mobsf/mobile-security-framework-mobsf](https://github.com/MobSF/Mobile-Security-Framework-MobSF) Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
-- [**4838**星][10d] [Go] [gcla/termshark](https://github.com/gcla/termshark) A terminal UI for tshark, inspired by Wireshark
-- [**4835**星][8d] [Py] [alessandroz/lazagne](https://github.com/alessandroz/lazagne) Credentials recovery project
-- [**4816**星][10d] [C] [offensive-security/exploitdb](https://github.com/offensive-security/exploitdb) The official Exploit Database repository
-- [**4793**星][8m] [Py] [10se1ucgo/disablewintracking](https://github.com/10se1ucgo/disablewintracking) Uses some known methods that attempt to minimize tracking in Windows 10
-- [**4771**星][7d] [C] [google/oss-fuzz](https://github.com/google/oss-fuzz) 开源软件fuzzing
-- [**4752**星][7d] [C++] [facebook/redex](https://github.com/facebook/redex) Android App字节码优化器
-- [**4717**星][7d] [Swift] [yanue/v2rayu](https://github.com/yanue/v2rayu) V2rayU,基于v2ray核心的mac版客户端,用于科学上网,使用swift编写,支持vmess,shadowsocks,socks5等服务协议,支持订阅, 支持二维码,剪贴板导入,手动配置,二维码分享等
-- [**4710**星][8d] [C++] [paddlepaddle/paddle-lite](https://github.com/PaddlePaddle/Paddle-Lite) Multi-platform high performance deep learning inference engine (『飞桨』多平台高性能深度学习预测引擎)
-- [**4675**星][7d] [C++] [coatisoftware/sourcetrail](https://github.com/coatisoftware/sourcetrail) Sourcetrail - free and open-source interactive source explorer
-- [**4651**星][7d] [Py] [manisso/fsociety](https://github.com/manisso/fsociety) fsociety Hacking Tools Pack – A Penetration Testing Framework
-- [**4630**星][6m] [powershell/win32-openssh](https://github.com/powershell/win32-openssh) Win32 port of OpenSSH
-- [**4627**星][16d] [C] [google/ios-webkit-debug-proxy](https://github.com/google/ios-webkit-debug-proxy) A DevTools proxy (Chrome Remote Debugging Protocol) for iOS devices (Safari Remote Web Inspector).
-- [**4616**星][8d] [JS] [beefproject/beef](https://github.com/beefproject/beef) The Browser Exploitation Framework Project
-- [**4611**星][19d] [Py] [secdev/scapy](https://github.com/secdev/scapy) 交互式数据包操作, Python, 命令行+库
-- [**4575**星][11m] [Py] [ecthros/uncaptcha2](https://github.com/ecthros/uncaptcha2) defeating the latest version of ReCaptcha with 91% accuracy
-- [**4574**星][10d] [Go] [ginuerzh/gost](https://github.com/ginuerzh/gost) GO语言实现的安全隧道
-- [**4551**星][1y] [C] [upx/upx](https://github.com/upx/upx) UPX - the Ultimate Packer for eXecutables
-- [**4549**星][8d] [C++] [mozilla/rr](https://github.com/mozilla/rr) 记录与重放App的调试执行过程
-- [**4526**星][10d] [Ruby] [wpscanteam/wpscan](https://github.com/wpscanteam/wpscan) WPScan is a free, for non-commercial use, black box WordPress Vulnerability Scanner written for security professionals and blog maintainers to test the security of their WordPress websites.
-- [**4523**星][12d] [C] [jedisct1/dsvpn](https://github.com/jedisct1/dsvpn) A Dead Simple VPN.
-- [**4485**星][18d] [TypeScript] [apis-guru/graphql-voyager](https://github.com/apis-guru/graphql-voyager)
-- [**4454**星][1y] [Go] [wallix/awless](https://github.com/wallix/awless) A Mighty CLI for AWS
-- [**4444**星][16d] [Py] [jopohl/urh](https://github.com/jopohl/urh) Universal Radio Hacker: investigate wireless protocols like a boss
-- [**4426**星][22d] [Py] [jofpin/trape](https://github.com/jofpin/trape) 学习在互联网上跟踪别人,获取其详细信息,并避免被别人跟踪
-- [**4398**星][9d] [Makefile] [frida/frida](https://github.com/frida/frida) Clone this repo to build Frida
-- [**4387**星][2m] [Shell] [zardus/ctf-tools](https://github.com/zardus/ctf-tools) Some setup scripts for security research tools.
-- [**4343**星][13d] [Swift] [signalapp/signal-ios](https://github.com/signalapp/Signal-iOS) A private messenger for iOS.
-- [**4339**星][12m] [Py] [lennylxx/ipv6-hosts](https://github.com/lennylxx/ipv6-hosts) Fork of
-- [**4310**星][29d] [JS] [cure53/dompurify](https://github.com/cure53/dompurify) a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
-- [**4307**星][5m] [Py] [diafygi/acme-tiny](https://github.com/diafygi/acme-tiny) A tiny script to issue and renew TLS certs from Let's Encrypt
-- [**4262**星][1m] [Py] [tensorflow/cleverhans](https://github.com/tensorflow/cleverhans) Python库,基准测试(benchmark)机器学习系统的漏洞生成(to)对抗样本(adversarial examples)
-- [**4261**星][1m] [Shell] [ashishb/android-security-awesome](https://github.com/ashishb/android-security-awesome) A collection of android security related resources
-- [**4256**星][11m] [JS] [butterproject/butter-desktop](https://github.com/butterproject/butter-desktop) All the free parts of Popcorn Time
-- [**4243**星][9d] [Rust] [timvisee/ffsend](https://github.com/timvisee/ffsend) Easily and securely share files from the command line
-- [**4210**星][4m] [Py] [dxa4481/trufflehog](https://github.com/dxa4481/trufflehog) Searches through git repositories for high entropy strings and secrets, digging deep into commit history
-- [**4195**星][16d] [Go] [gophish/gophish](https://github.com/gophish/gophish) 网络钓鱼工具包
-- [**4195**星][2m] [Py] [evilsocket/opensnitch](https://github.com/evilsocket/opensnitch) opensnitch:Little Snitch 应用程序防火墙的 GNU/Linux 版本。(Little Snitch:Mac操作系统的应用程序防火墙,能防止应用程序在你不知道的情况下自动访问网络)
-- [**4190**星][7m] [Objective-C] [alonemonkey/monkeydev](https://github.com/alonemonkey/monkeydev) CaptainHook Tweak、Logos Tweak and Command-line Tool、Patch iOS Apps, Without Jailbreak.
-- [**4186**星][9d] [qazbnm456/awesome-web-security](https://github.com/qazbnm456/awesome-web-security) web 安全资源列表
-- [**4183**星][1y] [Go] [michenriksen/gitrob](https://github.com/michenriksen/gitrob) 查找push到公开的Github repo中的敏感信息
-- [**4175**星][11d] [we5ter/scanners-box](https://github.com/we5ter/scanners-box) 安全行业从业者自研开源扫描器合辑
-- [**4165**星][2y] [forter/security-101-for-saas-startups](https://github.com/forter/security-101-for-saas-startups) 初学者安全小窍门
-- [**4148**星][12m] [JS] [kdzwinel/betwixt](https://github.com/kdzwinel/betwixt) Betwixt will help you analyze web traffic outside the browser using familiar Chrome DevTools interface.
-- [**4105**星][5m] [Py] [spiderclub/haipproxy](https://github.com/spiderclub/haipproxy)
-- [**4092**星][2m] [Py] [aboul3la/sublist3r](https://github.com/aboul3la/sublist3r) Fast subdomains enumeration tool for penetration testers
-- [**4091**星][7d] [Java] [spring-projects/spring-security](https://github.com/spring-projects/spring-security) Spring Security
-- [**4083**星][2y] [Py] [xoreaxeaxeax/sandsifter](https://github.com/xoreaxeaxeax/sandsifter) sandsifter:x86 处理器 Fuzzer,查找 Intel 的隐藏指令和 CPU bug
-- [**4069**星][9m] [wtsxdev/reverse-engineering](https://github.com/wtsxdev/reverse-engineering) List of awesome reverse engineering resources
-- [**4039**星][1m] [JS] [sigalor/whatsapp-web-reveng](https://github.com/sigalor/whatsapp-web-reveng) WhatsApp Web API逆向与重新实现
-- [**4033**星][7d] [Py] [google/clusterfuzz](https://github.com/google/clusterfuzz) Scalable fuzzing infrastructure.
-- [**4023**星][2m] [Java] [jesusfreke/smali](https://github.com/jesusfreke/smali) smali/baksmali
-- [**4015**星][3m] [JS] [cuckoosandbox/cuckoo](https://github.com/cuckoosandbox/cuckoo) Cuckoo Sandbox is an automated dynamic malware analysis system
-- [**3989**星][1y] [JS] [travist/jsencrypt](https://github.com/travist/jsencrypt) A Javascript library to perform OpenSSL RSA Encryption, Decryption, and Key Generation.
-- [**3985**星][20d] [drduh/yubikey-guide](https://github.com/drduh/yubikey-guide) Guide to using YubiKey for GPG and SSH
-- [**3955**星][3m] [Py] [nullarray/autosploit](https://github.com/nullarray/autosploit) Automated Mass Exploiter
-- [**3936**星][13d] [Go] [dexidp/dex](https://github.com/dexidp/dex) OpenID Connect Identity (OIDC) and OAuth 2.0 Provider with Pluggable Connectors
-- [**3929**星][2m] [JS] [apsdehal/awesome-ctf](https://github.com/apsdehal/awesome-ctf) A curated list of CTF frameworks, libraries, resources and softwares
-- [**3929**星][2m] [JS] [apsdehal/awesome-ctf](https://github.com/apsdehal/awesome-ctf) A curated list of CTF frameworks, libraries, resources and softwares
-- [**3925**星][4m] [PHP] [paragonie/awesome-appsec](https://github.com/paragonie/awesome-appsec) A curated list of resources for learning about application security
-- [**3916**星][7d] [Py] [angr/angr](https://github.com/angr/angr) A powerful and user-friendly binary analysis platform!
-- [**3908**星][14d] [Rust] [svenstaro/genact](https://github.com/svenstaro/genact) a nonsense activity generator
-- [**3907**星][1m] [C] [aquynh/capstone](https://github.com/aquynh/capstone) Capstone disassembly/disassembler framework: Core (Arm, Arm64, BPF, EVM, M68K, M680X, MOS65xx, Mips, PPC, RISCV, Sparc, SystemZ, TMS320C64x, Web Assembly, X86, X86_64, XCore) + bindings.
-- [**3896**星][2y] [C#] [shadowsocksr-backup/shadowsocksr-csharp](https://github.com/shadowsocksr-backup/shadowsocksr-csharp)
-- [**3876**星][7d] [C++] [baldurk/renderdoc](https://github.com/baldurk/renderdoc) RenderDoc is a stand-alone graphics debugging tool.
-- [**3856**星][2m] [PHP] [fuzzdb-project/fuzzdb](https://github.com/fuzzdb-project/fuzzdb) 通过动态App安全测试来查找App安全漏洞, 算是不带扫描器的漏洞扫描器
-- [**3841**星][8m] [Go] [eranyanay/1m-go-websockets](https://github.com/eranyanay/1m-go-websockets) handling 1M websockets connections in Go
-- [**3837**星][15d] [JS] [shadowsocks/shadowsocks-manager](https://github.com/shadowsocks/shadowsocks-manager) A shadowsocks manager tool for multi user and traffic control.
-- [**3836**星][11d] [Py] [secureauthcorp/impacket](https://github.com/SecureAuthCorp/impacket) Python类收集, 用于与网络协议交互
-- [**3832**星][2m] [Objective-C] [sveinbjornt/sloth](https://github.com/sveinbjornt/sloth) Mac app that shows all open files, directories and sockets in use by all running processes. Nice GUI for lsof.
-- [**3825**星][4y] [iosre/iosappreverseengineering](https://github.com/iosre/iosappreverseengineering) The world’s 1st book of very detailed iOS App reverse engineering skills :)
-- [**3781**星][13d] [hq450/fancyss_history_package](https://github.com/hq450/fancyss_history_package) 科学上网插件的离线安装包储存在这里
-- [**3770**星][30d] [jivoi/awesome-osint](https://github.com/jivoi/awesome-osint) OSINT资源收集
-- [**3763**星][5y] [shadowsocksr-backup/shadowsocks-rss](https://github.com/shadowsocksr-backup/shadowsocks-rss) ShadowsocksR update rss, SSR organization
-- [**3754**星][10m] [Py] [longld/peda](https://github.com/longld/peda) Python Exploit Development Assistance for GDB
-- [**3749**星][2m] [Go] [microsoft/ethr](https://github.com/microsoft/ethr) Ethr is a Network Performance Measurement Tool for TCP, UDP & HTTP.
-- [**3739**星][2m] [PHP] [ethicalhack3r/dvwa](https://github.com/ethicalhack3r/DVWA) Damn Vulnerable Web Application (DVWA)
-- [**3739**星][2m] [Py] [paralax/awesome-honeypots](https://github.com/paralax/awesome-honeypots) an awesome list of honeypot resources
-- [**3731**星][1m] [C] [iaik/meltdown](https://github.com/iaik/meltdown) This repository contains several applications, demonstrating the Meltdown bug.
-- [**3731**星][13d] [Go] [hashicorp/consul-template](https://github.com/hashicorp/consul-template) Template rendering, notifier, and supervisor for
-- [**3718**星][4m] [Py] [malwaredllc/byob](https://github.com/malwaredllc/byob) BYOB (Build Your Own Botnet)
-- [**3681**星][11d] [jjqqkk/chromium](https://github.com/jjqqkk/chromium) Chromium browser with SSL VPN. Use this browser to unblock websites.
-- [**3679**星][2y] [JS] [samyk/evercookie](https://github.com/samyk/evercookie) JavaScript API,在浏览器中创建超级顽固的cookie,在标准Cookie、Flask Cookie等被清除之后依然能够识别客户端
-- [**3675**星][8d] [HTML] [hamukazu/lets-get-arrested](https://github.com/hamukazu/lets-get-arrested) This project is intended to protest against the police in Japan
-- [**3660**星][1y] [Py] [misterch0c/shadowbroker](https://github.com/misterch0c/shadowbroker) 方程式最新泄露
-- [**3653**星][4m] [C] [facebook/fishhook](https://github.com/facebook/fishhook) A library that enables dynamically rebinding symbols in Mach-O binaries running on iOS.
-- [**3647**星][8d] [JS] [lesspass/lesspass](https://github.com/lesspass/lesspass)
-- [**3645**星][26d] [C#] [0xd4d/de4dot](https://github.com/0xd4d/de4dot) .NET deobfuscator and unpacker.
-- [**3640**星][4m] [C] [secwiki/windows-kernel-exploits](https://github.com/secwiki/windows-kernel-exploits) windows-kernel-exploits Windows平台提权漏洞集合
-- [**3639**星][2y] [Py] [qiyeboy/ipproxypool](https://github.com/qiyeboy/ipproxypool) IPProxyPool代理池项目,提供代理ip
-- [**3624**星][29d] [acl4ssr/acl4ssr](https://github.com/acl4ssr/acl4ssr) SSR 去广告ACL规则/SS完整GFWList规则,Telegram频道订阅地址
-- [**3621**星][2m] [C] [atmosphere-nx/atmosphere](https://github.com/atmosphere-nx/atmosphere) Atmosphère is a work-in-progress customized firmware for the Nintendo Switch.
-- [**3615**星][5y] [C#] [brandonlw/psychson](https://github.com/brandonlw/Psychson) Phison 2251-03 (2303) Custom Firmware & Existing Firmware Patches (BadUSB)
-- [**3612**星][17d] [HTML] [consensys/smart-contract-best-practices](https://github.com/consensys/smart-contract-best-practices) A guide to smart contract security best practices
-- [**3598**星][8d] [TypeScript] [javascript-obfuscator/javascript-obfuscator](https://github.com/javascript-obfuscator/javascript-obfuscator) A powerful obfuscator for JavaScript and Node.js
+- [**5167**星][20d] [Shell] [vulhub/vulhub](https://github.com/vulhub/vulhub) Pre-Built Vulnerable Environments Based on Docker-Compose
+- [**5167**星][1y] [JS] [samyk/poisontap](https://github.com/samyk/poisontap) Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.
+- [**5148**星][6d] [PHP] [tennc/webshell](https://github.com/tennc/webshell) webshell收集
+- [**5123**星][21d] [C++] [avast/retdec](https://github.com/avast/retdec) 基于 LLVM 的可重定位机器码反编译器, 可检测壳、检测和重构C++类继承、重构函数/类型/结构体等、可反编译为 C 或 Python 2种高级语言格式
+- [**5118**星][15d] [ObjC] [macpass/macpass](https://github.com/MacPass/MacPass) A native OS X KeePass client
+- [**5118**星][4m] [Py] [n1nj4sec/pupy](https://github.com/n1nj4sec/pupy) Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) remote administration and post-exploitation tool mainly written in python
+- [**5089**星][2d] [Go] [dnscrypt/dnscrypt-proxy](https://github.com/DNSCrypt/dnscrypt-proxy) 灵活的DNS代理,支持现代的加密DNS协议,例如:DNS protocols such as DNSCrypt v2, DNS-over-HTTPS and Anonymized DNSCrypt.
+- [**5082**星][2m] [sbilly/awesome-security](https://github.com/sbilly/awesome-security) 与安全相关的软件、库、文档、书籍、资源和工具等收集
+- [**5065**星][2m] [Shell] [stackexchange/blackbox](https://github.com/stackexchange/blackbox) 文件使用PGP加密后隐藏在Git/Mercurial/Subversion
+- [**5059**星][1m] [Java] [meituan-dianping/walle](https://github.com/meituan-dianping/walle) Android Signature V2 Scheme签名下的新一代渠道包打包神器
+- [**5054**星][4y] [Py] [shadowsocksr-backup/shadowsocksr](https://github.com/shadowsocksr-backup/shadowsocksr) Python port of ShadowsocksR
+- [**5042**星][2d] [HTML] [owasp/owasp-mstg](https://github.com/owasp/owasp-mstg) 关于移动App安全开发、测试和逆向的相近手册
+- [**5037**星][4m] [PS] [empireproject/empire](https://github.com/EmpireProject/Empire) 后渗透框架. Windows客户端用PowerShell, Linux/OSX用Python. 之前PowerShell Empire和Python EmPyre的组合
+- [**5021**星][2d] [Py] [mobsf/mobile-security-framework-mobsf](https://github.com/MobSF/Mobile-Security-Framework-MobSF) Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
+- [**5005**星][2d] [C++] [coatisoftware/sourcetrail](https://github.com/coatisoftware/sourcetrail) Sourcetrail - free and open-source interactive source explorer
+- [**4996**星][2d] [ASP] [hq450/fancyss](https://github.com/hq450/fancyss) fancyss is a project providing tools to across the GFW on asuswrt/merlin based router.
+- [**4996**星][6d] [Go] [inlets/inlets](https://github.com/inlets/inlets) Expose your local endpoints to the Internet
+- [**4994**星][1m] [Py] [snare/voltron](https://github.com/snare/voltron) A hacky debugger UI for hackers
+- [**4953**星][22d] [Py] [trustedsec/social-engineer-toolkit](https://github.com/trustedsec/social-engineer-toolkit) The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.
+- [**4920**星][2d] [TS] [jigsaw-code/outline-client](https://github.com/jigsaw-code/outline-client) Outline clients, developed by Jigsaw. The Outline clients use the popular Shadowsocks protocol, and lean on the Cordova and Electron frameworks to support Windows, Android / ChromeOS, Linux, iOS and macOS.
+- [**4913**星][1y] [Go] [yinghuocho/firefly-proxy](https://github.com/yinghuocho/firefly-proxy) A proxy software to help circumventing the Great Firewall.
+- [**4909**星][2d] [Shell] [denisidoro/navi](https://github.com/denisidoro/navi) An interactive cheatsheet tool for the command-line
+- [**4897**星][11m] [Go] [bitly/oauth2_proxy](https://github.com/bitly/oauth2_proxy) 反向代理,静态文件服务器,提供Providers(Google/Github)认证
+- [**4883**星][2m] [Rust] [sharkdp/hexyl](https://github.com/sharkdp/hexyl) 命令行中查看hex
+- [**4881**星][5d] [Java] [guardianproject/haven](https://github.com/guardianproject/haven) 通过Android应用和设备上的传感器保护自己的个人空间和财产而又不损害
+- [**4869**星][2d] [Swift] [yanue/v2rayu](https://github.com/yanue/v2rayu) V2rayU,基于v2ray核心的mac版客户端,用于科学上网,使用swift编写,支持vmess,shadowsocks,socks5等服务协议,支持订阅, 支持二维码,剪贴板导入,手动配置,二维码分享等
+- [**4867**星][10d] [Py] [alessandroz/lazagne](https://github.com/alessandroz/lazagne) Credentials recovery project
+- [**4847**星][3d] [Go] [gcla/termshark](https://github.com/gcla/termshark) A terminal UI for tshark, inspired by Wireshark
+- [**4841**星][2d] [C] [offensive-security/exploitdb](https://github.com/offensive-security/exploitdb) The official Exploit Database repository
+- [**4803**星][8m] [Py] [10se1ucgo/disablewintracking](https://github.com/10se1ucgo/disablewintracking) Uses some known methods that attempt to minimize tracking in Windows 10
+- [**4782**星][2d] [C] [google/oss-fuzz](https://github.com/google/oss-fuzz) 开源软件fuzzing
+- [**4761**星][2d] [C++] [facebook/redex](https://github.com/facebook/redex) Android App字节码优化器
+- [**4724**星][2d] [C++] [paddlepaddle/paddle-lite](https://github.com/PaddlePaddle/Paddle-Lite) Multi-platform high performance deep learning inference engine (『飞桨』多平台高性能深度学习预测引擎)
+- [**4691**星][9d] [Py] [manisso/fsociety](https://github.com/manisso/fsociety) fsociety Hacking Tools Pack – A Penetration Testing Framework
+- [**4639**星][3d] [Py] [secdev/scapy](https://github.com/secdev/scapy) 交互式数据包操作, Python, 命令行+库
+- [**4638**星][18d] [C] [google/ios-webkit-debug-proxy](https://github.com/google/ios-webkit-debug-proxy) A DevTools proxy (Chrome Remote Debugging Protocol) for iOS devices (Safari Remote Web Inspector).
+- [**4637**星][6m] [powershell/win32-openssh](https://github.com/powershell/win32-openssh) Win32 port of OpenSSH
+- [**4633**星][2d] [JS] [beefproject/beef](https://github.com/beefproject/beef) The Browser Exploitation Framework Project
+- [**4615**星][12d] [Go] [ginuerzh/gost](https://github.com/ginuerzh/gost) GO语言实现的安全隧道
+- [**4589**星][11m] [Py] [ecthros/uncaptcha2](https://github.com/ecthros/uncaptcha2) defeating the latest version of ReCaptcha with 91% accuracy
+- [**4583**星][1y] [C] [upx/upx](https://github.com/upx/upx) UPX - the Ultimate Packer for eXecutables
+- [**4575**星][4d] [C++] [mozilla/rr](https://github.com/mozilla/rr) 记录与重放App的调试执行过程
+- [**4543**星][4d] [Ruby] [wpscanteam/wpscan](https://github.com/wpscanteam/wpscan) WPScan is a free, for non-commercial use, black box WordPress Vulnerability Scanner written for security professionals and blog maintainers to test the security of their WordPress websites.
+- [**4529**星][6d] [C] [jedisct1/dsvpn](https://github.com/jedisct1/dsvpn) A Dead Simple VPN.
+- [**4498**星][6d] [TS] [apis-guru/graphql-voyager](https://github.com/apis-guru/graphql-voyager)
+- [**4459**星][8d] [Py] [jopohl/urh](https://github.com/jopohl/urh) Universal Radio Hacker: investigate wireless protocols like a boss
+- [**4458**星][1y] [Go] [wallix/awless](https://github.com/wallix/awless) A Mighty CLI for AWS
+- [**4449**星][3d] [Go] [dragonflyoss/dragonfly](https://github.com/dragonflyoss/Dragonfly) Dragonfly is an intelligent P2P based image and file distribution system.
+- [**4446**星][2d] [Makefile] [frida/frida](https://github.com/frida/frida) Clone this repo to build Frida
+- [**4443**星][24d] [Py] [jofpin/trape](https://github.com/jofpin/trape) 学习在互联网上跟踪别人,获取其详细信息,并避免被别人跟踪
+- [**4411**星][2m] [Shell] [zardus/ctf-tools](https://github.com/zardus/ctf-tools) Some setup scripts for security research tools.
+- [**4359**星][6d] [Swift] [signalapp/signal-ios](https://github.com/signalapp/Signal-iOS) A private messenger for iOS.
+- [**4346**星][1m] [JS] [cure53/dompurify](https://github.com/cure53/dompurify) a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
+- [**4344**星][12m] [Py] [lennylxx/ipv6-hosts](https://github.com/lennylxx/ipv6-hosts) Fork of
+- [**4313**星][5m] [Py] [diafygi/acme-tiny](https://github.com/diafygi/acme-tiny) A tiny script to issue and renew TLS certs from Let's Encrypt
+- [**4283**星][7d] [Py] [tensorflow/cleverhans](https://github.com/tensorflow/cleverhans) Python库,基准测试(benchmark)机器学习系统的漏洞生成(to)对抗样本(adversarial examples)
+- [**4280**星][1m] [Shell] [ashishb/android-security-awesome](https://github.com/ashishb/android-security-awesome) A collection of android security related resources
+- [**4261**星][5d] [Rust] [timvisee/ffsend](https://github.com/timvisee/ffsend) Easily and securely share files from the command line
+- [**4258**星][11m] [JS] [butterproject/butter-desktop](https://github.com/butterproject/butter-desktop) All the free parts of Popcorn Time
+- [**4244**星][2y] [imeiji/shadowsocks_install](https://github.com/imeiji/shadowsocks_install) Auto install shadowsocks server,thanks 秋水逸冰
+- [**4241**星][4m] [Py] [dxa4481/trufflehog](https://github.com/dxa4481/trufflehog) Searches through git repositories for high entropy strings and secrets, digging deep into commit history
+- [**4215**星][7m] [ObjC] [alonemonkey/monkeydev](https://github.com/alonemonkey/monkeydev) CaptainHook Tweak、Logos Tweak and Command-line Tool、Patch iOS Apps, Without Jailbreak.
+- [**4211**星][9d] [Go] [gophish/gophish](https://github.com/gophish/gophish) 网络钓鱼工具包
+- [**4205**星][11d] [qazbnm456/awesome-web-security](https://github.com/qazbnm456/awesome-web-security) web 安全资源列表
+- [**4204**星][1y] [Go] [michenriksen/gitrob](https://github.com/michenriksen/gitrob) 查找push到公开的Github repo中的敏感信息
+- [**4202**星][2m] [Py] [evilsocket/opensnitch](https://github.com/evilsocket/opensnitch) opensnitch:Little Snitch 应用程序防火墙的 GNU/Linux 版本。(Little Snitch:Mac操作系统的应用程序防火墙,能防止应用程序在你不知道的情况下自动访问网络)
+- [**4198**星][2d] [Py] [openmined/pysyft](https://github.com/openmined/pysyft) A library for encrypted, privacy preserving machine learning
+- [**4190**星][13d] [we5ter/scanners-box](https://github.com/we5ter/scanners-box) 安全行业从业者自研开源扫描器合辑
+- [**4171**星][2y] [forter/security-101-for-saas-startups](https://github.com/forter/security-101-for-saas-startups) 初学者安全小窍门
+- [**4149**星][12m] [JS] [kdzwinel/betwixt](https://github.com/kdzwinel/betwixt) Betwixt will help you analyze web traffic outside the browser using familiar Chrome DevTools interface.
+- [**4131**星][5d] [Java] [spring-projects/spring-security](https://github.com/spring-projects/spring-security) Spring Security
+- [**4120**星][5m] [Py] [spiderclub/haipproxy](https://github.com/spiderclub/haipproxy)
+- [**4120**星][2m] [Py] [aboul3la/sublist3r](https://github.com/aboul3la/sublist3r) Fast subdomains enumeration tool for penetration testers
+- [**4096**星][2y] [Py] [xoreaxeaxeax/sandsifter](https://github.com/xoreaxeaxeax/sandsifter) sandsifter:x86 处理器 Fuzzer,查找 Intel 的隐藏指令和 CPU bug
+- [**4092**星][9m] [wtsxdev/reverse-engineering](https://github.com/wtsxdev/reverse-engineering) List of awesome reverse engineering resources
+- [**4046**星][1m] [JS] [sigalor/whatsapp-web-reveng](https://github.com/sigalor/whatsapp-web-reveng) WhatsApp Web API逆向与重新实现
+- [**4045**星][2m] [Java] [jesusfreke/smali](https://github.com/jesusfreke/smali) smali/baksmali
+- [**4044**星][2d] [Py] [google/clusterfuzz](https://github.com/google/clusterfuzz) Scalable fuzzing infrastructure.
+- [**4022**星][22d] [drduh/yubikey-guide](https://github.com/drduh/yubikey-guide) Guide to using YubiKey for GPG and SSH
+- [**4021**星][3m] [JS] [cuckoosandbox/cuckoo](https://github.com/cuckoosandbox/cuckoo) Cuckoo Sandbox is an automated dynamic malware analysis system
+- [**4000**星][1y] [JS] [travist/jsencrypt](https://github.com/travist/jsencrypt) A Javascript library to perform OpenSSL RSA Encryption, Decryption, and Key Generation.
+- [**3967**星][3m] [Py] [nullarray/autosploit](https://github.com/nullarray/autosploit) Automated Mass Exploiter
+- [**3961**星][5d] [Go] [dexidp/dex](https://github.com/dexidp/dex) OpenID Connect Identity (OIDC) and OAuth 2.0 Provider with Pluggable Connectors
+- [**3953**星][2m] [JS] [apsdehal/awesome-ctf](https://github.com/apsdehal/awesome-ctf) A curated list of CTF frameworks, libraries, resources and softwares
+- [**3953**星][2m] [JS] [apsdehal/awesome-ctf](https://github.com/apsdehal/awesome-ctf) A curated list of CTF frameworks, libraries, resources and softwares
+- [**3937**星][3d] [Py] [angr/angr](https://github.com/angr/angr) A powerful and user-friendly binary analysis platform!
+- [**3935**星][4m] [PHP] [paragonie/awesome-appsec](https://github.com/paragonie/awesome-appsec) A curated list of resources for learning about application security
+- [**3933**星][8m] [Go] [eranyanay/1m-go-websockets](https://github.com/eranyanay/1m-go-websockets) handling 1M websockets connections in Go
+- [**3923**星][1m] [C] [aquynh/capstone](https://github.com/aquynh/capstone) Capstone disassembly/disassembler framework: Core (Arm, Arm64, BPF, EVM, M68K, M680X, MOS65xx, Mips, PPC, RISCV, Sparc, SystemZ, TMS320C64x, Web Assembly, X86, X86_64, XCore) + bindings.
+- [**3920**星][2y] [C#] [shadowsocksr-backup/shadowsocksr-csharp](https://github.com/shadowsocksr-backup/shadowsocksr-csharp)
+- [**3915**星][16d] [Rust] [svenstaro/genact](https://github.com/svenstaro/genact) a nonsense activity generator
+- [**3893**星][2d] [C++] [baldurk/renderdoc](https://github.com/baldurk/renderdoc) RenderDoc is a stand-alone graphics debugging tool.
+- [**3878**星][2m] [PHP] [fuzzdb-project/fuzzdb](https://github.com/fuzzdb-project/fuzzdb) 通过动态App安全测试来查找App安全漏洞, 算是不带扫描器的漏洞扫描器
+- [**3869**星][2d] [Py] [secureauthcorp/impacket](https://github.com/SecureAuthCorp/impacket) Python类收集, 用于与网络协议交互
+- [**3848**星][7d] [JS] [shadowsocks/shadowsocks-manager](https://github.com/shadowsocks/shadowsocks-manager) A shadowsocks manager tool for multi user and traffic control.
+- [**3845**星][2d] [hq450/fancyss_history_package](https://github.com/hq450/fancyss_history_package) 科学上网插件的离线安装包储存在这里
+- [**3838**星][2m] [ObjC] [sveinbjornt/sloth](https://github.com/sveinbjornt/sloth) Mac app that shows all open files, directories and sockets in use by all running processes. Nice GUI for lsof.
+- [**3831**星][4y] [iosre/iosappreverseengineering](https://github.com/iosre/iosappreverseengineering) The world’s 1st book of very detailed iOS App reverse engineering skills :)
+- [**3813**星][1m] [jivoi/awesome-osint](https://github.com/jivoi/awesome-osint) OSINT资源收集
+- [**3799**星][5y] [shadowsocksr-backup/shadowsocks-rss](https://github.com/shadowsocksr-backup/shadowsocks-rss) ShadowsocksR update rss, SSR organization
+- [**3767**星][10m] [Py] [longld/peda](https://github.com/longld/peda) Python Exploit Development Assistance for GDB
+- [**3763**星][2m] [Py] [paralax/awesome-honeypots](https://github.com/paralax/awesome-honeypots) an awesome list of honeypot resources
+- [**3755**星][2m] [PHP] [ethicalhack3r/dvwa](https://github.com/ethicalhack3r/DVWA) Damn Vulnerable Web Application (DVWA)
+- [**3752**星][2m] [Go] [microsoft/ethr](https://github.com/microsoft/ethr) Ethr is a Network Performance Measurement Tool for TCP, UDP & HTTP.
+- [**3736**星][8d] [Go] [hashicorp/consul-template](https://github.com/hashicorp/consul-template) Template rendering, notifier, and supervisor for
+- [**3733**星][2m] [C] [iaik/meltdown](https://github.com/iaik/meltdown) This repository contains several applications, demonstrating the Meltdown bug.
+- [**3730**星][4m] [Py] [malwaredllc/byob](https://github.com/malwaredllc/byob) BYOB (Build Your Own Botnet)
+- [**3719**星][6d] [jjqqkk/chromium](https://github.com/jjqqkk/chromium) Chromium browser with SSL VPN. Use this browser to unblock websites.
+- [**3713**星][2d] [C] [atmosphere-nx/atmosphere](https://github.com/atmosphere-nx/atmosphere) Atmosphère is a work-in-progress customized firmware for the Nintendo Switch.
+- [**3684**星][2y] [JS] [samyk/evercookie](https://github.com/samyk/evercookie) JavaScript API,在浏览器中创建超级顽固的cookie,在标准Cookie、Flask Cookie等被清除之后依然能够识别客户端
+- [**3682**星][10d] [HTML] [hamukazu/lets-get-arrested](https://github.com/hamukazu/lets-get-arrested) This project is intended to protest against the police in Japan
+- [**3670**星][2d] [JS] [lesspass/lesspass](https://github.com/lesspass/lesspass)
+- [**3668**星][8d] [C#] [0xd4d/de4dot](https://github.com/0xd4d/de4dot) .NET deobfuscator and unpacker.
+- [**3667**星][1y] [Py] [misterch0c/shadowbroker](https://github.com/misterch0c/shadowbroker) 方程式最新泄露
+- [**3666**星][5m] [C] [secwiki/windows-kernel-exploits](https://github.com/secwiki/windows-kernel-exploits) windows-kernel-exploits Windows平台提权漏洞集合
+- [**3663**星][4m] [C] [facebook/fishhook](https://github.com/facebook/fishhook) A library that enables dynamically rebinding symbols in Mach-O binaries running on iOS.
+- [**3652**星][4d] [acl4ssr/acl4ssr](https://github.com/acl4ssr/acl4ssr) SSR 去广告ACL规则/SS完整GFWList规则,Telegram频道订阅地址
+- [**3647**星][2y] [Py] [qiyeboy/ipproxypool](https://github.com/qiyeboy/ipproxypool) IPProxyPool代理池项目,提供代理ip
+- [**3622**星][6d] [TS] [javascript-obfuscator/javascript-obfuscator](https://github.com/javascript-obfuscator/javascript-obfuscator) A powerful obfuscator for JavaScript and Node.js
+- [**3621**星][7d] [HTML] [consensys/smart-contract-best-practices](https://github.com/consensys/smart-contract-best-practices) A guide to smart contract security best practices
+- [**3619**星][5y] [C#] [brandonlw/psychson](https://github.com/brandonlw/Psychson) Phison 2251-03 (2303) Custom Firmware & Existing Firmware Patches (BadUSB)
+- [**3611**星][2m] [Java] [ffay/lanproxy](https://github.com/ffay/lanproxy) lanproxy是一个将局域网个人电脑、服务器代理到公网的内网穿透工具,支持tcp流量转发,可支持任何tcp上层协议(访问内网网站、本地支付接口调试、ssh访问、远程桌面...)。目前市面上提供类似服务的有花生壳、TeamView、GoToMyCloud等等,但要使用第三方的公网服务器就必须为第三方付费,并且这些服务都有各种各样的限制,此外,由于数据包会流经第三方,因此对数据安全也是一大隐患。技术交流QQ群 946273429
+- [**3604**星][8d] [PS] [bloodhoundad/bloodhound](https://github.com/BloodHoundAD/BloodHound) a single page Javascript web application, uses graph theory to reveal the hidden and often unintended relationships within an Active Directory environment.
+- [**3598**星][26d] [C++] [anbox/anbox](https://github.com/anbox/anbox) 在常规GNU / Linux系统上引导完整的Android系统,基于容器
- [**3597**星][1y] [C#] [nummer/destroy-windows-10-spying](https://github.com/nummer/destroy-windows-10-spying) Destroy Windows Spying tool
-- [**3594**星][2m] [Java] [ffay/lanproxy](https://github.com/ffay/lanproxy) lanproxy是一个将局域网个人电脑、服务器代理到公网的内网穿透工具,支持tcp流量转发,可支持任何tcp上层协议(访问内网网站、本地支付接口调试、ssh访问、远程桌面...)。目前市面上提供类似服务的有花生壳、TeamView、GoToMyCloud等等,但要使用第三方的公网服务器就必须为第三方付费,并且这些服务都有各种各样的限制,此外,由于数据包会流经第三方,因此对数据安全也是一大隐患。技术交流QQ群 946273429
-- [**3591**星][3y] [Perl] [x0rz/eqgrp](https://github.com/x0rz/eqgrp) Decrypted content of eqgrp-auction-file.tar.xz
-- [**3587**星][2m] [PowerShell] [bloodhoundad/bloodhound](https://github.com/BloodHoundAD/BloodHound) a single page Javascript web application, uses graph theory to reveal the hidden and often unintended relationships within an Active Directory environment.
-- [**3578**星][24d] [C++] [anbox/anbox](https://github.com/anbox/anbox) 在常规GNU / Linux系统上引导完整的Android系统,基于容器
-- [**3565**星][7d] [Shell] [drwetter/testssl.sh](https://github.com/drwetter/testssl.sh) 检查服务器任意端口对 TLS/SSL 的支持、协议以及一些加密缺陷,命令行工具
-- [**3560**星][17d] [C] [nmap/nmap](https://github.com/nmap/nmap) Nmap
-- [**3544**星][6y] [R] [johnmyleswhite/ml_for_hackers](https://github.com/johnmyleswhite/ml_for_hackers) 《Machine Learning for Hackers》随书代码
+- [**3595**星][3y] [Perl] [x0rz/eqgrp](https://github.com/x0rz/eqgrp) Decrypted content of eqgrp-auction-file.tar.xz
+- [**3583**星][3d] [Shell] [drwetter/testssl.sh](https://github.com/drwetter/testssl.sh) 检查服务器任意端口对 TLS/SSL 的支持、协议以及一些加密缺陷,命令行工具
+- [**3580**星][5d] [C] [nmap/nmap](https://github.com/nmap/nmap) Nmap
+- [**3562**星][5d] [Pascal] [cheat-engine/cheat-engine](https://github.com/cheat-engine/cheat-engine) Cheat Engine. A development environment focused on modding
+- [**3542**星][6y] [R] [johnmyleswhite/ml_for_hackers](https://github.com/johnmyleswhite/ml_for_hackers) 《Machine Learning for Hackers》随书代码
+- [**3540**星][6d] [blacckhathaceekr/pentesting-bible](https://github.com/blacckhathaceekr/pentesting-bible) links reaches 10000 links & 10000 pdf files .Learn Ethical Hacking and penetration testing .hundreds of ethical hacking & penetration testing & red team & cyber security & computer science resources.
- [**3538**星][4m] [Shell] [chengr28/revokechinacerts](https://github.com/chengr28/revokechinacerts) Revoke Chinese certificates.
-- [**3525**星][8d] [Pascal] [cheat-engine/cheat-engine](https://github.com/cheat-engine/cheat-engine) Cheat Engine. A development environment focused on modding
-- [**3503**星][14d] [JS] [aol/moloch](https://github.com/aol/moloch) 数据包捕获、索引工具,支持数据库
-- [**3494**星][8m] [Go] [fanpei91/torsniff](https://github.com/fanpei91/torsniff) torsniff - a sniffer that sniffs torrents from BitTorrent network
-- [**3494**星][8m] [Go] [fanpei91/torsniff](https://github.com/fanpei91/torsniff) 从BitTorrent网络嗅探种子
-- [**3493**星][3y] [C] [hak5darren/usb-rubber-ducky](https://github.com/hak5darren/usb-rubber-ducky)
-- [**3482**星][9m] [C] [rpisec/mbe](https://github.com/rpisec/mbe) Course materials for Modern Binary Exploitation by RPISEC
-- [**3481**星][13d] [blacckhathaceekr/pentesting-bible](https://github.com/blacckhathaceekr/pentesting-bible) links reaches 10000 links & 10000 pdf files .Learn Ethical Hacking and penetration testing .hundreds of ethical hacking & penetration testing & red team & cyber security & computer science resources.
-- [**3468**星][5m] [PHP] [hanc00l/wooyun_public](https://github.com/hanc00l/wooyun_public) This repo is archived. Thanks for wooyun! 乌云公开漏洞、知识库爬虫和搜索 crawl and search for wooyun.org public bug(vulnerability) and drops
-- [**3464**星][15d] [C] [cyan4973/xxhash](https://github.com/cyan4973/xxhash) Extremely fast non-cryptographic hash algorithm
-- [**3436**星][7d] [C] [shellphish/how2heap](https://github.com/shellphish/how2heap) 学习各种堆利用技巧的repo
-- [**3431**星][13d] [Java] [meituan-dianping/robust](https://github.com/meituan-dianping/robust) Robust is an Android HotFix solution with high compatibility and high stability. Robust can fix bugs immediately without a reboot.
-- [**3421**星][13d] [Perl] [sullo/nikto](https://github.com/sullo/nikto) Nikto web server scanner
-- [**3412**星][25d] [icodesign/potatso](https://github.com/icodesign/Potatso) Potatso is an iOS client that implements different proxies with the leverage of NetworkExtension framework in iOS 10+.
-- [**3392**星][5m] [Go] [jpillora/chisel](https://github.com/jpillora/chisel) 基于HTTP的快速 TCP 隧道
-- [**3387**星][2y] [shadowsocksrr/shadowsocks-rss](https://github.com/shadowsocksrr/shadowsocks-rss) ShadowsocksR update rss, SSR organization
-- [**3383**星][22d] [PowerShell] [samratashok/nishang](https://github.com/samratashok/nishang) 渗透框架,脚本和Payload收集,主要是PowerShell,涵盖渗透的各个阶段
-- [**3326**星][13d] [Py] [google/grr](https://github.com/google/grr) remote live forensics for incident response
-- [**3325**星][5m] [C++] [wangyu-/udp2raw-tunnel](https://github.com/wangyu-/udp2raw-tunnel) udp 打洞。通过raw socket给UDP包加上TCP或ICMP header,进而绕过UDP屏蔽或QoS,或在UDP不稳定的环境下提升稳定性
-- [**3325**星][7d] [jivoi/awesome-ml-for-cybersecurity](https://github.com/jivoi/awesome-ml-for-cybersecurity) 针对网络安全的机器学习资源列表
-- [**3317**星][7d] [Py] [stamparm/maltrail](https://github.com/stamparm/maltrail) 恶意网络流量检测系统
-- [**3317**星][2y] [scanate/ethlist](https://github.com/scanate/ethlist) The Comprehensive Ethereum Reading List
-- [**3316**星][2m] [C] [screetsec/thefatrat](https://github.com/screetsec/thefatrat) Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV softw…
-- [**3282**星][8d] [Smarty] [anankke/sspanel-uim](https://github.com/anankke/sspanel-uim) 专为 Shadowsocks / ShadowsocksR / V2Ray 设计的多用户管理面板
-- [**3280**星][2m] [Swift] [yagiz/bagel](https://github.com/yagiz/bagel) a little native network debugging tool for iOS
-- [**3280**星][20d] [C] [vanhauser-thc/thc-hydra](https://github.com/vanhauser-thc/thc-hydra) 网络登录破解,支持多种服务
-- [**3269**星][27d] [C] [microsoft/windows-driver-samples](https://github.com/microsoft/windows-driver-samples) This repo contains driver samples prepared for use with Microsoft Visual Studio and the Windows Driver Kit (WDK). It contains both Universal Windows Driver and desktop-only driver samples.
-- [**3267**星][3m] [C] [nbs-system/naxsi](https://github.com/nbs-system/naxsi) NAXSI is an open-source, high performance, low rules maintenance WAF for NGINX
-- [**3266**星][12d] [C] [virustotal/yara](https://github.com/virustotal/yara) The pattern matching swiss knife
-- [**3258**星][2m] [Py] [volatilityfoundation/volatility](https://github.com/volatilityfoundation/volatility) An advanced memory forensics framework
-- [**3258**星][5y] [C++] [google/lmctfy](https://github.com/google/lmctfy) lmctfy is the open source version of Google’s container stack, which provides Linux application containers.
-- [**3255**星][7d] [C] [mikebrady/shairport-sync](https://github.com/mikebrady/shairport-sync) AirPlay audio player. Shairport Sync adds multi-room capability with Audio Synchronisation
-- [**3253**星][7m] [JS] [sindresorhus/speed-test](https://github.com/sindresorhus/speed-test) Test your internet connection speed and ping using speedtest.net from the CLI
-- [**3234**星][8d] [Java] [oldmanpushcart/greys-anatomy](https://github.com/oldmanpushcart/greys-anatomy) Java诊断工具
+- [**3533**星][14d] [C] [tencent/tencentos-tiny](https://github.com/tencent/tencentos-tiny) 腾讯物联网终端操作系统
+- [**3514**星][3y] [C] [hak5darren/usb-rubber-ducky](https://github.com/hak5darren/usb-rubber-ducky)
+- [**3510**星][2d] [JS] [aol/moloch](https://github.com/aol/moloch) 数据包捕获、索引工具,支持数据库
+- [**3501**星][8m] [Go] [fanpei91/torsniff](https://github.com/fanpei91/torsniff) torsniff - a sniffer that sniffs torrents from BitTorrent network
+- [**3501**星][8m] [Go] [fanpei91/torsniff](https://github.com/fanpei91/torsniff) 从BitTorrent网络嗅探种子
+- [**3493**星][9m] [C] [rpisec/mbe](https://github.com/rpisec/mbe) Course materials for Modern Binary Exploitation by RPISEC
+- [**3485**星][5m] [PHP] [hanc00l/wooyun_public](https://github.com/hanc00l/wooyun_public) This repo is archived. Thanks for wooyun! 乌云公开漏洞、知识库爬虫和搜索 crawl and search for wooyun.org public bug(vulnerability) and drops
+- [**3481**星][8d] [C] [cyan4973/xxhash](https://github.com/cyan4973/xxhash) Extremely fast non-cryptographic hash algorithm
+- [**3471**星][2m] [C++] [trojan-gfw/trojan](https://github.com/trojan-gfw/trojan) An unidentifiable mechanism that helps you bypass GFW.
+- [**3442**星][9d] [C] [shellphish/how2heap](https://github.com/shellphish/how2heap) 学习各种堆利用技巧的repo
+- [**3442**星][8d] [Java] [meituan-dianping/robust](https://github.com/meituan-dianping/robust) Robust is an Android HotFix solution with high compatibility and high stability. Robust can fix bugs immediately without a reboot.
+- [**3441**星][15d] [Perl] [sullo/nikto](https://github.com/sullo/nikto) Nikto web server scanner
+- [**3419**星][9d] [C] [mikebrady/shairport-sync](https://github.com/mikebrady/shairport-sync) AirPlay audio player. Shairport Sync adds multi-room capability with Audio Synchronisation
+- [**3412**星][27d] [icodesign/potatso](https://github.com/icodesign/Potatso) Potatso is an iOS client that implements different proxies with the leverage of NetworkExtension framework in iOS 10+.
+- [**3410**星][5m] [Go] [jpillora/chisel](https://github.com/jpillora/chisel) 基于HTTP的快速 TCP 隧道
+- [**3408**星][24d] [PS] [samratashok/nishang](https://github.com/samratashok/nishang) 渗透框架,脚本和Payload收集,主要是PowerShell,涵盖渗透的各个阶段
+- [**3397**星][2y] [shadowsocksrr/shadowsocks-rss](https://github.com/shadowsocksrr/shadowsocks-rss) ShadowsocksR update rss, SSR organization
+- [**3344**星][2d] [jivoi/awesome-ml-for-cybersecurity](https://github.com/jivoi/awesome-ml-for-cybersecurity) 针对网络安全的机器学习资源列表
+- [**3343**星][6d] [C] [screetsec/thefatrat](https://github.com/screetsec/thefatrat) Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV softw…
+- [**3340**星][5m] [C++] [wangyu-/udp2raw-tunnel](https://github.com/wangyu-/udp2raw-tunnel) udp 打洞。通过raw socket给UDP包加上TCP或ICMP header,进而绕过UDP屏蔽或QoS,或在UDP不稳定的环境下提升稳定性
+- [**3334**星][10d] [Smarty] [anankke/sspanel-uim](https://github.com/anankke/sspanel-uim) 专为 Shadowsocks / ShadowsocksR / V2Ray 设计的多用户管理面板
+- [**3331**星][15d] [Py] [google/grr](https://github.com/google/grr) remote live forensics for incident response
+- [**3330**星][2d] [Py] [stamparm/maltrail](https://github.com/stamparm/maltrail) 恶意网络流量检测系统
+- [**3319**星][2y] [scanate/ethlist](https://github.com/scanate/ethlist) The Comprehensive Ethereum Reading List
+- [**3303**星][22d] [C] [vanhauser-thc/thc-hydra](https://github.com/vanhauser-thc/thc-hydra) 网络登录破解,支持多种服务
+- [**3301**星][2m] [Swift] [yagiz/bagel](https://github.com/yagiz/bagel) a little native network debugging tool for iOS
+- [**3298**星][9d] [C++] [fireice-uk/xmr-stak](https://github.com/fireice-uk/xmr-stak) Free Monero RandomX Miner and unified CryptoNight miner
+- [**3285**星][7d] [C] [microsoft/windows-driver-samples](https://github.com/microsoft/windows-driver-samples) This repo contains driver samples prepared for use with Microsoft Visual Studio and the Windows Driver Kit (WDK). It contains both Universal Windows Driver and desktop-only driver samples.
+- [**3278**星][6d] [C] [virustotal/yara](https://github.com/virustotal/yara) The pattern matching swiss knife
+- [**3276**星][3m] [C] [nbs-system/naxsi](https://github.com/nbs-system/naxsi) NAXSI is an open-source, high performance, low rules maintenance WAF for NGINX
+- [**3263**星][10d] [Java] [oldmanpushcart/greys-anatomy](https://github.com/oldmanpushcart/greys-anatomy) Java诊断工具
+- [**3262**星][2m] [Py] [volatilityfoundation/volatility](https://github.com/volatilityfoundation/volatility) An advanced memory forensics framework
+- [**3260**星][8d] [Shell] [toniblyx/my-arsenal-of-aws-security-tools](https://github.com/toniblyx/my-arsenal-of-aws-security-tools) List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.
+- [**3260**星][5y] [C++] [google/lmctfy](https://github.com/google/lmctfy) lmctfy is the open source version of Google’s container stack, which provides Linux application containers.
+- [**3259**星][7m] [JS] [sindresorhus/speed-test](https://github.com/sindresorhus/speed-test) Test your internet connection speed and ping using speedtest.net from the CLI
+- [**3255**星][4d] [ObjC] [objective-see/lulu](https://github.com/objective-see/lulu) LuLu is the free macOS firewall
+- [**3247**星][29d] [JS] [koenkk/zigbee2mqtt](https://github.com/koenkk/zigbee2mqtt) Zigbee
+- [**3242**星][16d] [Py] [laramies/theharvester](https://github.com/laramies/theharvester) E-mails, subdomains and names Harvester - OSINT
+- [**3238**星][2d] [TS] [jigsaw-code/outline-server](https://github.com/jigsaw-code/outline-server) Outline Manager, developed by Jigsaw. The Outline Manager application creates and manages Outline servers, powered by Shadowsocks. It uses the Electron framework to offer support for Windows, macOS and Linux.
+- [**3236**星][5m] [Go] [meshbird/meshbird](https://github.com/meshbird/meshbird) cloud-native multi-region multi-cloud decentralized private networking
- [**3234**星][2y] [CSS] [jbtronics/crookedstylesheets](https://github.com/jbtronics/crookedstylesheets) 使用纯CSS收集网页/用户信息
-- [**3232**星][5m] [Go] [meshbird/meshbird](https://github.com/meshbird/meshbird) cloud-native multi-region multi-cloud decentralized private networking
-- [**3230**星][2m] [Objective-C] [objective-see/lulu](https://github.com/objective-see/lulu) LuLu is the free macOS firewall
-- [**3225**星][18d] [Shell] [toniblyx/my-arsenal-of-aws-security-tools](https://github.com/toniblyx/my-arsenal-of-aws-security-tools) List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.
-- [**3216**星][14d] [Py] [laramies/theharvester](https://github.com/laramies/theharvester) E-mails, subdomains and names Harvester - OSINT
-- [**3215**星][27d] [JS] [koenkk/zigbee2mqtt](https://github.com/koenkk/zigbee2mqtt) Zigbee
-- [**3214**星][4y] [C] [shadowsocks/chinadns](https://github.com/shadowsocks/chinadns) Protect yourself against DNS poisoning in China.
-- [**3214**星][2m] [Go] [dvyukov/go-fuzz](https://github.com/dvyukov/go-fuzz) Randomized testing for Go
-- [**3210**星][11d] [C] [tmate-io/tmate](https://github.com/tmate-io/tmate) Instant Terminal Sharing
-- [**3210**星][1m] [TypeScript] [google/incremental-dom](https://github.com/google/incremental-dom) An in-place DOM diffing library
-- [**3209**星][8d] [C] [betaflight/betaflight](https://github.com/betaflight/betaflight) Open Source Flight Controller Firmware
-- [**3205**星][2m] [Shell] [gfw-breaker/ssr-accounts](https://github.com/gfw-breaker/ssr-accounts) 一键部署Shadowsocks服务;免费Shadowsocks账号分享;免费SS账号分享; 翻墙;无界,自由门,SquirrelVPN
-- [**3202**星][4m] [Objective-C] [naituw/ipapatch](https://github.com/naituw/ipapatch) Patch iOS Apps, The Easy Way, Without Jailbreak.
-- [**3201**星][7m] [HTML] [leizongmin/js-xss](https://github.com/leizongmin/js-xss) Sanitize untrusted HTML (to prevent XSS) with a configuration specified by a Whitelist
-- [**3184**星][7d] [Go] [mozilla/sops](https://github.com/mozilla/sops) Simple and flexible tool for managing secrets
-- [**3182**星][3m] [C] [yarrick/iodine](https://github.com/yarrick/iodine) 通过DNS服务器传输(tunnel)IPV4数据
-- [**3182**星][1y] [Py] [kootenpv/whereami](https://github.com/kootenpv/whereami) 使用Wifi信号和机器学习预测你的位置,精确度2-10米
-- [**3180**星][13d] [Py] [maurosoria/dirsearch](https://github.com/maurosoria/dirsearch) Web path scanner
-- [**3174**星][8d] [Rich Text Format] [the-art-of-hacking/h4cker](https://github.com/The-Art-of-Hacking/h4cker) 资源收集:hacking、渗透、数字取证、事件响应、漏洞研究、漏洞开发、逆向
-- [**3168**星][1m] [C++] [spiderlabs/modsecurity](https://github.com/spiderlabs/modsecurity) ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analys…
-- [**3164**星][6m] [hslatman/awesome-threat-intelligence](https://github.com/hslatman/awesome-threat-intelligence) A curated list of Awesome Threat Intelligence resources
-- [**3163**星][24d] [C] [magnumripper/johntheripper](https://github.com/magnumripper/johntheripper) This is the official repo for John the Ripper, "Jumbo" version. The "bleeding-jumbo" branch is based on 1.9.0-Jumbo-1 which was released on May 14, 2019. An import of the "core" version of john this jumbo was based on (or newer) is found in the "master" branch (CVS:
-- [**3156**星][1m] [C] [valdikss/goodbyedpi](https://github.com/valdikss/goodbyedpi) GoodbyeDPI—Passive Deep Packet Inspection blocker and Active DPI circumvention utility (for Windows)
-- [**3145**星][1y] [Shell] [toyodadoubi/doubi](https://github.com/toyodadoubi/doubi) 一个逗比写的各种逗比脚本~
-- [**3128**星][2y] [shadowsocksr-backup/shadowsocksr-android](https://github.com/shadowsocksr-backup/shadowsocksr-android) A ShadowsocksR client for Android
-- [**3120**星][10d] [C] [meetecho/janus-gateway](https://github.com/meetecho/janus-gateway) Janus WebRTC Server
-- [**3113**星][28d] [CSS] [readthedocs/sphinx_rtd_theme](https://github.com/readthedocs/sphinx_rtd_theme) Sphinx theme for readthedocs.org
-- [**3112**星][2m] [C++] [trojan-gfw/trojan](https://github.com/trojan-gfw/trojan) An unidentifiable mechanism that helps you bypass GFW.
-- [**3109**星][7d] [Shell] [speed47/spectre-meltdown-checker](https://github.com/speed47/spectre-meltdown-checker) 检查 Linux 主机是否受处理器漏洞Spectre & Meltdown 的影响
-- [**3109**星][2m] [PowerShell] [fireeye/commando-vm](https://github.com/fireeye/commando-vm) Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@fireeye.com
-- [**3108**星][4m] [C++] [px4/firmware](https://github.com/px4/firmware) PX4 Autopilot Software
-- [**3106**星][7d] [C] [qemu/qemu](https://github.com/qemu/qemu) Official QEMU mirror. Please see
-- [**3103**星][16d] [Shell] [1n3/sn1per](https://github.com/1n3/sn1per) 自动化渗透测试框架
-- [**3102**星][7d] [JS] [duo-labs/cloudmapper](https://github.com/duo-labs/cloudmapper) 生成AWS环境的网络拓扑图
-- [**3096**星][28d] [meirwah/awesome-incident-response](https://github.com/meirwah/awesome-incident-response) A curated list of tools for incident response
-- [**3094**星][2m] [Py] [byt3bl33d3r/crackmapexec](https://github.com/byt3bl33d3r/crackmapexec) 后渗透工具,自动化评估大型Active Directory网络的安全性
-- [**3091**星][1m] [Java] [deathmarine/luyten](https://github.com/deathmarine/luyten) An Open Source Java Decompiler Gui for Procyon
-- [**3085**星][10d] [Shell] [trimstray/htrace.sh](https://github.com/trimstray/htrace.sh) My simple Swiss Army knife for http/https troubleshooting and profiling.
-- [**3084**星][11d] [Py] [tribler/tribler](https://github.com/tribler/tribler) Privacy enhanced BitTorrent client with P2P content discovery
-- [**3084**星][8d] [Shell] [softwaredownload/openwrt-fanqiang](https://github.com/softwaredownload/openwrt-fanqiang) 最好的路由器翻墙、科学上网教程—OpenWrt—shadowsocks
-- [**3069**星][9m] [JS] [jipegit/osxauditor](https://github.com/jipegit/osxauditor) OS X Auditor is a free Mac OS X computer forensics tool
-- [**3066**星][3m] [C] [zmap/zmap](https://github.com/zmap/zmap) ZMap is a fast single packet network scanner designed for Internet-wide network surveys.
-- [**3065**星][9d] [Go] [tencent/bk-cmdb](https://github.com/tencent/bk-cmdb) 蓝鲸智云配置平台(BlueKing CMDB)
-- [**3062**星][1y] [Swift] [zhuhaow/spechtlite](https://github.com/zhuhaow/spechtlite) A rule-based proxy for macOS
-- [**3061**星][20d] [C] [unicorn-engine/unicorn](https://github.com/unicorn-engine/unicorn) Unicorn CPU emulator framework (ARM, AArch64, M68K, Mips, Sparc, X86)
-- [**3059**星][1m] [Java] [calebfenton/simplify](https://github.com/calebfenton/simplify) Generic Android Deobfuscator
-- [**3058**星][7m] [Go] [michenriksen/aquatone](https://github.com/michenriksen/aquatone) 子域名枚举工具。除了经典的爆破枚举之外,还利用多种开源工具和在线服务大幅度增加发现子域名的数量。
-- [**3046**星][4m] [C++] [google/robotstxt](https://github.com/google/robotstxt) The repository contains Google's robots.txt parser and matcher as a C++ library (compliant to C++11).
-- [**3041**星][2m] [JS] [valve/fingerprintjs](https://github.com/valve/fingerprintjs) Anonymous browser fingerprint
-- [**3039**星][3m] [Py] [spiderlabs/responder](https://github.com/spiderlabs/responder) LLMNR/NBT-NS/MDNS投毒,内置HTTP/SMB/MSSQL/FTP/LDAP认证服务器, 支持NTLMv1/NTLMv2/LMv2
-- [**3007**星][9m] [C] [secwiki/linux-kernel-exploits](https://github.com/secwiki/linux-kernel-exploits) linux-kernel-exploits Linux平台提权漏洞集合
-- [**2991**星][1y] [PHP] [owner888/phpspider](https://github.com/owner888/phpspider) 《我用爬虫一天时间“偷了”知乎一百万用户,只为证明PHP是世界上最好的语言 》所使用的程序
-- [**2983**星][2m] [Go] [gwuhaolin/lightsocks](https://github.com/gwuhaolin/lightsocks) 轻量级网络混淆代理,基于 SOCKS5 协议,可用来代替 Shadowsocks
-- [**2982**星][7d] [Lua] [ntop/ntopng](https://github.com/ntop/ntopng) 基于Web的流量监控工具
-- [**2978**星][7d] [Py] [guardicore/monkey](https://github.com/guardicore/monkey) 自动化渗透测试工具, 测试数据中心的弹性, 以防范周边(perimeter)泄漏和内部服务器感染
-- [**2962**星][14d] [Objective-C] [google/santa](https://github.com/google/santa) 用于Mac系统的二进制文件白名单/黑名单系统
-- [**2947**星][27d] [Go] [cookiey/yearning](https://github.com/cookiey/yearning) A most popular sql audit platform for mysql
-- [**2937**星][13d] [JS] [webgoat/webgoat](https://github.com/webgoat/webgoat) 带漏洞WebApp
-- [**2937**星][2y] [phith0n/mind-map](https://github.com/phith0n/mind-map) 各种安全相关思维导图整理收集
-- [**2936**星][1m] [Py] [andresriancho/w3af](https://github.com/andresriancho/w3af) Web App安全扫描器, 辅助开发者和渗透测试人员识别和利用Web App中的漏洞
-- [**2935**星][19d] [Py] [cowrie/cowrie](https://github.com/cowrie/cowrie) 中型/交互型 SSH/Telnet 蜜罐,
-- [**2930**星][1y] [Py] [danmcinerney/wifijammer](https://github.com/danmcinerney/wifijammer) 持续劫持范围内的Wifi客户端和AP
-- [**2930**星][11m] [Shell] [91yun/serverspeeder](https://github.com/91yun/serverspeeder) 锐速破解版
-- [**2927**星][7d] [Zeek] [zeek/zeek](https://github.com/zeek/zeek) Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.
-- [**2916**星][15d] [Py] [twintproject/twint](https://github.com/twintproject/twint) An advanced Twitter scraping & OSINT tool written in Python that doesn't use Twitter's API, allowing you to scrape a user's followers, following, Tweets and more while evading most API limitations.
-- [**2912**星][2m] [Dockerfile] [thinkdevelop/free-ss-ssr](https://github.com/thinkdevelop/free-ss-ssr) SS账号、SSR账号、V2Ray账号
-- [**2907**星][21d] [Go] [securego/gosec](https://github.com/securego/gosec) Golang security checker
-- [**2897**星][1y] [Py] [byt3bl33d3r/mitmf](https://github.com/byt3bl33d3r/mitmf) Framework for Man-In-The-Middle attacks
-- [**2895**星][10d] [C] [libfuse/sshfs](https://github.com/libfuse/sshfs) A network filesystem client to connect to SSH servers
-- [**2892**星][11d] [secfigo/awesome-fuzzing](https://github.com/secfigo/awesome-fuzzing) A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Development like root cause analysis.
-- [**2891**星][20d] [Py] [trustedsec/ptf](https://github.com/trustedsec/ptf) 创建基于Debian/Ubuntu/ArchLinux的渗透测试环境
-- [**2876**星][7m] [C] [p-h-c/phc-winner-argon2](https://github.com/p-h-c/phc-winner-argon2) The password hash Argon2, winner of PHC
-- [**2874**星][4y] [Objective-C] [maciekish/iresign](https://github.com/maciekish/iresign) iReSign allows iDevice app bundles (.ipa) files to be signed or resigned with a digital certificate from Apple for distribution. This tool is aimed at enterprises users, for enterprise deployment, when the person signing the app is different than the person(s) developing it.
-- [**2851**星][10d] [JS] [evilsocket/pwnagotchi](https://github.com/evilsocket/pwnagotchi) 深度学习+Bettercap,基于A2C,从周围的WiFi环境中学习,以最大程度地利用捕获的WPA关键信息
-- [**2850**星][8d] [C] [lxc/lxc](https://github.com/lxc/lxc) LXC - Linux Containers
-- [**2840**星][5m] [Py] [instantbox/instantbox](https://github.com/instantbox/instantbox) Get a clean, ready-to-go Linux box in seconds.
-- [**2838**星][11d] [Objective-C] [facebook/idb](https://github.com/facebook/idb) idb is a flexible command line interface for automating iOS simulators and devices
-- [**2834**星][8m] [C++] [wangyu-/udpspeeder](https://github.com/wangyu-/udpspeeder) A Tunnel which Improves your Network Quality on a High-latency Lossy Link by using Forward Error Correction,for All Traffics(TCP/UDP/ICMP)
-- [**2830**星][9d] [HTML] [ctf-wiki/ctf-wiki](https://github.com/ctf-wiki/ctf-wiki) CTF Wiki Online. Come and join us, we need you!
-- [**2829**星][21d] [C] [ossec/ossec-hids](https://github.com/ossec/ossec-hids) 入侵检测系统
-- [**2825**星][15d] [Py] [espressif/esptool](https://github.com/espressif/esptool) ESP8266 and ESP32 serial bootloader utility
-- [**2825**星][8m] [Shell] [goreliu/wsl-terminal](https://github.com/goreliu/wsl-terminal) Terminal emulator for Windows Subsystem for Linux (WSL)
-- [**2823**星][12d] [Go] [99designs/aws-vault](https://github.com/99designs/aws-vault) A vault for securely storing and accessing AWS credentials in development environments
-- [**2820**星][1m] [Assembly] [cirosantilli/x86-bare-metal-examples](https://github.com/cirosantilli/x86-bare-metal-examples) 几十个用于学习 x86 系统编程的小型操作系统
-- [**2819**星][2y] [CSS] [maxchehab/css-keylogging](https://github.com/maxchehab/css-keylogging) Chrome extension and Express server that exploits keylogging abilities of CSS.
-- [**2815**星][4m] [C] [juliocesarfort/public-pentesting-reports](https://github.com/juliocesarfort/public-pentesting-reports) Curated list of public penetration test reports released by several consulting firms and academic security groups
-- [**2810**星][28d] [C] [tmk/tmk_keyboard](https://github.com/tmk/tmk_keyboard) Atmel AVR 和 Cortex-M键盘固件收集
-- [**2810**星][2m] [infosecn1nja/red-teaming-toolkit](https://github.com/infosecn1nja/red-teaming-toolkit) A collection of open source and commercial tools that aid in red team operations.
-- [**2805**星][1m] [paulsec/awesome-sec-talks](https://github.com/paulsec/awesome-sec-talks) A collected list of awesome security talks
-- [**2804**星][8m] [C#] [quasar/quasarrat](https://github.com/quasar/quasarrat) Remote Administration Tool for Windows
-- [**2802**星][9m] [Py] [plasma-disassembler/plasma](https://github.com/plasma-disassembler/plasma) Plasma is an interactive disassembler for x86/ARM/MIPS. It can generates indented pseudo-code with colored syntax.
-- [**2787**星][17d] [Py] [androguard/androguard](https://github.com/androguard/androguard) Reverse engineering, Malware and goodware analysis of Android applications ... and more (ninja !)
-- [**2783**星][2y] [C] [seclab-ucr/intang](https://github.com/seclab-ucr/intang) research project for circumventing the "TCP reset attack" from the Great Firewall of China (GFW) by disrupting/desynchronizing the TCP Control Block (TCB) on the censorship devices.
-- [**2779**星][28d] [Makefile] [shadowsocks/openwrt-shadowsocks](https://github.com/shadowsocks/openwrt-shadowsocks) Shadowsocks-libev for OpenWrt/LEDE
-- [**2776**星][4y] [Lua] [loveshell/ngx_lua_waf](https://github.com/loveshell/ngx_lua_waf) ngx_lua_waf是一个基于lua-nginx-module(openresty)的web应用防火墙
-- [**2767**星][2m] [Go] [kgretzky/evilginx2](https://github.com/kgretzky/evilginx2) 独立的MITM攻击工具,用于登录凭证钓鱼,可绕过双因素认证
-- [**2763**星][1m] [JS] [trufflesuite/ganache-cli](https://github.com/trufflesuite/ganache-cli) Fast Ethereum RPC client for testing and development
-- [**2761**星][10d] [Py] [jrohy/multi-v2ray](https://github.com/jrohy/multi-v2ray) v2ray easy delpoy & manage tool, support multiple user & protocol manage
-- [**2755**星][7d] [C++] [qtox/qtox](https://github.com/qtox/qtox) qTox is a chat, voice, video, and file transfer IM client using the encrypted peer-to-peer Tox protocol.
-- [**2746**星][8d] [C] [processhacker/processhacker](https://github.com/processhacker/processhacker) A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware.
-- [**2736**星][8m] [Py] [p0cl4bs/wifi-pumpkin](https://github.com/P0cL4bs/WiFi-Pumpkin) AP攻击框架, 创建虚假网络, 取消验证攻击、请求和凭证监控、透明代理、Windows更新攻击、钓鱼管理、ARP投毒、DNS嗅探、Pumpkin代理、动态图片捕获等
-- [**2736**星][1y] [C] [vanhoefm/krackattacks-scripts](https://github.com/vanhoefm/krackattacks-scripts) 检测客户端和AP是否受KRACK漏洞影响
-- [**2735**星][7d] [TypeScript] [webhintio/hint](https://github.com/webhintio/hint)
-- [**2731**星][22d] [Makefile] [theos/theos](https://github.com/theos/theos) A cross-platform suite of tools for building and deploying software for iOS and other platforms.
-- [**2727**星][2m] [secwiki/sec-chart](https://github.com/secwiki/sec-chart) 安全思维导图集合
-- [**2727**星][3y] [Py] [hephaest0s/usbkill](https://github.com/hephaest0s/usbkill) 反取证开关. 监控USB端口变化, 有变化时立即关闭计算机
-- [**2726**星][16d] [JS] [cyu/rack-cors](https://github.com/cyu/rack-cors) Rack Middleware for handling Cross-Origin Resource Sharing (CORS), which makes cross-origin AJAX possible.
-- [**2715**星][21d] [JS] [s0md3v/awesomexss](https://github.com/s0md3v/AwesomeXSS) Awesome XSS stuff
-- [**2701**星][3y] [Eagle] [samyk/magspoof](https://github.com/samyk/magspoof) 信用卡/磁条欺骗
-- [**2700**星][1m] [C] [taviso/loadlibrary](https://github.com/taviso/loadlibrary) 使 Linux系统加载并调用 Windows DLL
-- [**2683**星][4m] [Objective-C] [dantheman827/ios-app-signer](https://github.com/dantheman827/ios-app-signer) This is an app for OS X that can (re)sign apps and bundle them into ipa files that are ready to be installed on an iOS device.
-- [**2681**星][1m] [Objective-C] [kjcracks/clutch](https://github.com/kjcracks/clutch) Fast iOS executable dumper
-- [**2665**星][7d] [Go] [google/syzkaller](https://github.com/google/syzkaller) 一个unsupervised、以 coverage 为导向的Linux 系统调用fuzzer
-- [**2660**星][7d] [PowerShell] [redcanaryco/atomic-red-team](https://github.com/redcanaryco/atomic-red-team) Small and highly portable detection tests based on MITRE's ATT&CK.
-- [**2660**星][1y] [Py] [mame82/p4wnp1](https://github.com/mame82/p4wnp1) 基于Raspberry Pi Zero 或 Raspberry Pi Zero W 的USB攻击平台, 高度的可定制性
-- [**2658**星][12d] [Go] [aquasecurity/trivy](https://github.com/aquasecurity/trivy) A Simple and Comprehensive Vulnerability Scanner for Containers, Suitable for CI
-- [**2648**星][3m] [Py] [drivendata/cookiecutter-data-science](https://github.com/drivendata/cookiecutter-data-science) A logical, reasonably standardized, but flexible project structure for doing and sharing data science work.
-- [**2643**星][2m] [rmusser01/infosec_reference](https://github.com/rmusser01/infosec_reference) An Information Security Reference That Doesn't Suck
-- [**2638**星][3m] [Java] [frohoff/ysoserial](https://github.com/frohoff/ysoserial) 生成会利用不安全的Java对象反序列化的Payload
-- [**2634**星][2m] [xairy/linux-kernel-exploitation](https://github.com/xairy/linux-kernel-exploitation) Linux 内核 Fuzz 和漏洞利用的资源收集
-- [**2633**星][3m] [Java] [teevity/ice](https://github.com/teevity/ice) AWS Usage Tool
-- [**2633**星][1y] [HTML] [chybeta/web-security-learning](https://github.com/chybeta/web-security-learning) Web-Security-Learning
-- [**2622**星][15d] [JS] [bkimminich/juice-shop](https://github.com/bkimminich/juice-shop) OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
-- [**2619**星][8m] [leandromoreira/linux-network-performance-parameters](https://github.com/leandromoreira/linux-network-performance-parameters) Learn where some of the network sysctl variables fit into the Linux/Kernel network flow
-- [**2610**星][2m] [Swift] [zhuhaow/nekit](https://github.com/zhuhaow/nekit) A toolkit for Network Extension Framework
-- [**2601**星][3y] [Ruby] [arachni/arachni](https://github.com/arachni/arachni) Web Application Security Scanner Framework
-- [**2600**星][21d] [JS] [knownsec/kcon](https://github.com/knownsec/kcon) KCon is a famous Hacker Con powered by Knownsec Team.
-- [**2598**星][8d] [JS] [popcorn-official/popcorn-desktop](https://github.com/popcorn-official/popcorn-desktop) Popcorn Time is a multi-platform, free software BitTorrent client that includes an integrated media player. Desktop ( Windows / Mac / Linux ) a Butter-Project Fork
-- [**2589**星][19d] [C++] [fanout/pushpin](https://github.com/fanout/pushpin) Reverse proxy for realtime web services
-- [**2588**星][1m] [pditommaso/awesome-pipeline](https://github.com/pditommaso/awesome-pipeline) A curated list of awesome pipeline toolkits inspired by Awesome Sysadmin
-- [**2570**星][2m] [C] [huntergregal/mimipenguin](https://github.com/huntergregal/mimipenguin) dump 当前Linux用户的登录密码
-- [**2565**星][1m] [Shell] [medicean/vulapps](https://github.com/medicean/vulapps) 快速搭建各种漏洞环境(Various vulnerability environment)
-- [**2564**星][8y] [C] [id-software/quake](https://github.com/id-software/quake) Quake GPL Source Release
-- [**2563**星][5m] [Java] [google/binnavi](https://github.com/google/binnavi) 二进制分析IDE, 对反汇编代码的控制流程图和调用图进行探查/导航/编辑/注释.(IDA插件的作用是导出反汇编)
-- [**2555**星][1m] [C] [esnet/iperf](https://github.com/esnet/iperf) A TCP, UDP, and SCTP network bandwidth measurement tool
-- [**2554**星][2y] [evilsocket/bettercap](https://github.com/evilsocket/bettercap) 中间人攻击框架,功能完整,模块化设计,轻便且易于扩展。
-- [**2547**星][3m] [Py] [greenwolf/social_mapper](https://github.com/Greenwolf/social_mapper) 对多个社交网站的用户Profile图片进行大规模的人脸识别
-- [**2537**星][6m] [C] [geohot/qira](https://github.com/geohot/qira) QEMU Interactive Runtime Analyser
+- [**3233**星][9d] [Go] [mozilla/sops](https://github.com/mozilla/sops) Simple and flexible tool for managing secrets
+- [**3228**星][2d] [C] [betaflight/betaflight](https://github.com/betaflight/betaflight) Open Source Flight Controller Firmware
+- [**3223**星][2m] [Shell] [gfw-breaker/ssr-accounts](https://github.com/gfw-breaker/ssr-accounts) 一键部署Shadowsocks服务;免费Shadowsocks账号分享;免费SS账号分享; 翻墙;无界,自由门,SquirrelVPN
+- [**3222**星][6d] [C] [tmate-io/tmate](https://github.com/tmate-io/tmate) Instant Terminal Sharing
+- [**3222**星][6d] [Go] [dvyukov/go-fuzz](https://github.com/dvyukov/go-fuzz) Randomized testing for Go
+- [**3221**星][4y] [C] [shadowsocks/chinadns](https://github.com/shadowsocks/chinadns) Protect yourself against DNS poisoning in China.
+- [**3213**星][1m] [TS] [google/incremental-dom](https://github.com/google/incremental-dom) An in-place DOM diffing library
+- [**3210**星][7m] [HTML] [leizongmin/js-xss](https://github.com/leizongmin/js-xss) Sanitize untrusted HTML (to prevent XSS) with a configuration specified by a Whitelist
+- [**3209**星][5m] [ObjC] [naituw/ipapatch](https://github.com/naituw/ipapatch) Patch iOS Apps, The Easy Way, Without Jailbreak.
+- [**3208**星][4m] [C] [yarrick/iodine](https://github.com/yarrick/iodine) 通过DNS服务器传输(tunnel)IPV4数据
+- [**3205**星][15d] [Py] [maurosoria/dirsearch](https://github.com/maurosoria/dirsearch) Web path scanner
+- [**3202**星][10d] [Rich Text Format] [the-art-of-hacking/h4cker](https://github.com/The-Art-of-Hacking/h4cker) 资源收集:hacking、渗透、数字取证、事件响应、漏洞研究、漏洞开发、逆向
+- [**3187**星][1y] [Py] [kootenpv/whereami](https://github.com/kootenpv/whereami) 使用Wifi信号和机器学习预测你的位置,精确度2-10米
+- [**3187**星][6m] [hslatman/awesome-threat-intelligence](https://github.com/hslatman/awesome-threat-intelligence) A curated list of Awesome Threat Intelligence resources
+- [**3186**星][1m] [C++] [spiderlabs/modsecurity](https://github.com/spiderlabs/modsecurity) ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analys…
+- [**3180**星][27d] [C] [magnumripper/johntheripper](https://github.com/magnumripper/johntheripper) This is the official repo for John the Ripper, "Jumbo" version. The "bleeding-jumbo" branch is based on 1.9.0-Jumbo-1 which was released on May 14, 2019. An import of the "core" version of john this jumbo was based on (or newer) is found in the "master" branch (CVS:
+- [**3169**星][1m] [C] [valdikss/goodbyedpi](https://github.com/valdikss/goodbyedpi) GoodbyeDPI—Passive Deep Packet Inspection blocker and Active DPI circumvention utility (for Windows)
+- [**3162**星][1y] [Shell] [toyodadoubi/doubi](https://github.com/toyodadoubi/doubi) 一个逗比写的各种逗比脚本~
+- [**3159**星][3d] [JS] [minbrowser/min](https://github.com/minbrowser/min) A fast, minimal browser that protects your privacy
+- [**3140**星][6d] [C] [meetecho/janus-gateway](https://github.com/meetecho/janus-gateway) Janus WebRTC Server
+- [**3137**星][2y] [shadowsocksr-backup/shadowsocksr-android](https://github.com/shadowsocksr-backup/shadowsocksr-android) A ShadowsocksR client for Android
+- [**3134**星][2d] [C++] [px4/firmware](https://github.com/px4/firmware) PX4 Autopilot Software
+- [**3125**星][3d] [Shell] [1n3/sn1per](https://github.com/1n3/sn1per) 自动化渗透测试框架
+- [**3123**星][30d] [meirwah/awesome-incident-response](https://github.com/meirwah/awesome-incident-response) A curated list of tools for incident response
+- [**3123**星][2m] [PS] [fireeye/commando-vm](https://github.com/fireeye/commando-vm) Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@fireeye.com
+- [**3122**星][5d] [Go] [uber/kraken](https://github.com/uber/kraken) P2P Docker registry capable of distributing TBs of data in seconds
+- [**3121**星][30d] [CSS] [readthedocs/sphinx_rtd_theme](https://github.com/readthedocs/sphinx_rtd_theme) Sphinx theme for readthedocs.org
+- [**3121**星][8d] [JS] [duo-labs/cloudmapper](https://github.com/duo-labs/cloudmapper) 生成AWS环境的网络拓扑图
+- [**3118**星][3d] [Shell] [speed47/spectre-meltdown-checker](https://github.com/speed47/spectre-meltdown-checker) 检查 Linux 主机是否受处理器漏洞Spectre & Meltdown 的影响
+- [**3113**星][2d] [C] [qemu/qemu](https://github.com/qemu/qemu) Official QEMU mirror. Please see
+- [**3107**星][2m] [Py] [byt3bl33d3r/crackmapexec](https://github.com/byt3bl33d3r/crackmapexec) 后渗透工具,自动化评估大型Active Directory网络的安全性
+- [**3106**星][7d] [Java] [deathmarine/luyten](https://github.com/deathmarine/luyten) An Open Source Java Decompiler Gui for Procyon
+- [**3105**星][10d] [Shell] [softwaredownload/openwrt-fanqiang](https://github.com/softwaredownload/openwrt-fanqiang) 最好的路由器翻墙、科学上网教程—OpenWrt—shadowsocks
+- [**3088**星][9d] [Shell] [trimstray/htrace.sh](https://github.com/trimstray/htrace.sh) My simple Swiss Army knife for http/https troubleshooting and profiling.
+- [**3087**星][3d] [Py] [tribler/tribler](https://github.com/tribler/tribler) Privacy enhanced BitTorrent client with P2P content discovery
+- [**3085**星][11d] [Go] [tencent/bk-cmdb](https://github.com/tencent/bk-cmdb) 蓝鲸智云配置平台(BlueKing CMDB)
+- [**3084**星][22d] [C] [unicorn-engine/unicorn](https://github.com/unicorn-engine/unicorn) Unicorn CPU emulator framework (ARM, AArch64, M68K, Mips, Sparc, X86)
+- [**3080**星][3m] [C] [zmap/zmap](https://github.com/zmap/zmap) ZMap is a fast single packet network scanner designed for Internet-wide network surveys.
+- [**3076**星][7m] [Go] [michenriksen/aquatone](https://github.com/michenriksen/aquatone) 子域名枚举工具。除了经典的爆破枚举之外,还利用多种开源工具和在线服务大幅度增加发现子域名的数量。
+- [**3071**星][9m] [JS] [jipegit/osxauditor](https://github.com/jipegit/osxauditor) OS X Auditor is a free Mac OS X computer forensics tool
+- [**3065**星][1m] [Java] [calebfenton/simplify](https://github.com/calebfenton/simplify) Generic Android Deobfuscator
+- [**3063**星][1y] [Swift] [zhuhaow/spechtlite](https://github.com/zhuhaow/spechtlite) A rule-based proxy for macOS
+- [**3052**星][2m] [JS] [valve/fingerprintjs](https://github.com/valve/fingerprintjs) Anonymous browser fingerprint
+- [**3049**星][4m] [C++] [google/robotstxt](https://github.com/google/robotstxt) The repository contains Google's robots.txt parser and matcher as a C++ library (compliant to C++11).
+- [**3043**星][3m] [Py] [spiderlabs/responder](https://github.com/spiderlabs/responder) LLMNR/NBT-NS/MDNS投毒,内置HTTP/SMB/MSSQL/FTP/LDAP认证服务器, 支持NTLMv1/NTLMv2/LMv2
+- [**3029**星][2m] [Go] [gwuhaolin/lightsocks](https://github.com/gwuhaolin/lightsocks) 轻量级网络混淆代理,基于 SOCKS5 协议,可用来代替 Shadowsocks
+- [**3027**星][9m] [C] [secwiki/linux-kernel-exploits](https://github.com/secwiki/linux-kernel-exploits) linux-kernel-exploits Linux平台提权漏洞集合
+- [**3001**星][1y] [PHP] [owner888/phpspider](https://github.com/owner888/phpspider) 《我用爬虫一天时间“偷了”知乎一百万用户,只为证明PHP是世界上最好的语言 》所使用的程序
+- [**2991**星][2d] [JS] [ntop/ntopng](https://github.com/ntop/ntopng) 基于Web的流量监控工具
+- [**2986**星][7d] [Py] [guardicore/monkey](https://github.com/guardicore/monkey) 自动化渗透测试工具, 测试数据中心的弹性, 以防范周边(perimeter)泄漏和内部服务器感染
+- [**2969**星][29d] [Go] [cookiey/yearning](https://github.com/cookiey/yearning) A most popular sql audit platform for mysql
+- [**2968**星][2d] [ObjC] [google/santa](https://github.com/google/santa) 用于Mac系统的二进制文件白名单/黑名单系统
+- [**2955**星][4d] [Py] [twintproject/twint](https://github.com/twintproject/twint) An advanced Twitter scraping & OSINT tool written in Python that doesn't use Twitter's API, allowing you to scrape a user's followers, following, Tweets and more while evading most API limitations.
+- [**2955**星][11d] [Go] [dominikh/go-tools](https://github.com/dominikh/go-tools) Staticcheck – a collection of static analysis tools for working with Go code
+- [**2949**星][8d] [JS] [webgoat/webgoat](https://github.com/webgoat/webgoat) 带漏洞WebApp
+- [**2948**星][2m] [Dockerfile] [thinkdevelop/free-ss-ssr](https://github.com/thinkdevelop/free-ss-ssr) SS账号、SSR账号、V2Ray账号
+- [**2947**星][1m] [Py] [andresriancho/w3af](https://github.com/andresriancho/w3af) Web App安全扫描器, 辅助开发者和渗透测试人员识别和利用Web App中的漏洞
+- [**2945**星][2y] [phith0n/mind-map](https://github.com/phith0n/mind-map) 各种安全相关思维导图整理收集
+- [**2942**星][21d] [Py] [cowrie/cowrie](https://github.com/cowrie/cowrie) 中型/交互型 SSH/Telnet 蜜罐,
+- [**2936**星][1y] [Py] [danmcinerney/wifijammer](https://github.com/danmcinerney/wifijammer) 持续劫持范围内的Wifi客户端和AP
+- [**2933**星][2d] [Zeek] [zeek/zeek](https://github.com/zeek/zeek) Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.
+- [**2932**星][11m] [Shell] [91yun/serverspeeder](https://github.com/91yun/serverspeeder) 锐速破解版
+- [**2920**星][23d] [Go] [securego/gosec](https://github.com/securego/gosec) Golang security checker
+- [**2916**星][2d] [JS] [evilsocket/pwnagotchi](https://github.com/evilsocket/pwnagotchi) 深度学习+Bettercap,基于A2C,从周围的WiFi环境中学习,以最大程度地利用捕获的WPA关键信息
+- [**2915**星][12d] [C] [libfuse/sshfs](https://github.com/libfuse/sshfs) A network filesystem client to connect to SSH servers
+- [**2909**星][2d] [Py] [trustedsec/ptf](https://github.com/trustedsec/ptf) 创建基于Debian/Ubuntu/ArchLinux的渗透测试环境
+- [**2901**星][1y] [Py] [byt3bl33d3r/mitmf](https://github.com/byt3bl33d3r/mitmf) Framework for Man-In-The-Middle attacks
+- [**2897**星][3d] [secfigo/awesome-fuzzing](https://github.com/secfigo/awesome-fuzzing) A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Development like root cause analysis.
+- [**2883**星][7m] [C] [p-h-c/phc-winner-argon2](https://github.com/p-h-c/phc-winner-argon2) The password hash Argon2, winner of PHC
+- [**2877**星][4y] [ObjC] [maciekish/iresign](https://github.com/maciekish/iresign) iReSign allows iDevice app bundles (.ipa) files to be signed or resigned with a digital certificate from Apple for distribution. This tool is aimed at enterprises users, for enterprise deployment, when the person signing the app is different than the person(s) developing it.
+- [**2858**星][2d] [C] [lxc/lxc](https://github.com/lxc/lxc) LXC - Linux Containers
+- [**2850**星][2d] [HTML] [ctf-wiki/ctf-wiki](https://github.com/ctf-wiki/ctf-wiki) CTF Wiki Online. Come and join us, we need you!
+- [**2850**星][4d] [Go] [99designs/aws-vault](https://github.com/99designs/aws-vault) A vault for securely storing and accessing AWS credentials in development environments
+- [**2845**星][2d] [ObjC] [facebook/idb](https://github.com/facebook/idb) idb is a flexible command line interface for automating iOS simulators and devices
+- [**2842**星][5m] [Py] [instantbox/instantbox](https://github.com/instantbox/instantbox) Get a clean, ready-to-go Linux box in seconds.
+- [**2840**星][23d] [C] [ossec/ossec-hids](https://github.com/ossec/ossec-hids) 入侵检测系统
+- [**2840**星][2m] [infosecn1nja/red-teaming-toolkit](https://github.com/infosecn1nja/red-teaming-toolkit) A collection of open source and commercial tools that aid in red team operations.
+- [**2839**星][8m] [C++] [wangyu-/udpspeeder](https://github.com/wangyu-/udpspeeder) A Tunnel which Improves your Network Quality on a High-latency Lossy Link by using Forward Error Correction,for All Traffics(TCP/UDP/ICMP)
+- [**2837**星][17d] [Py] [espressif/esptool](https://github.com/espressif/esptool) ESP8266 and ESP32 serial bootloader utility
+- [**2834**星][8m] [Shell] [goreliu/wsl-terminal](https://github.com/goreliu/wsl-terminal) Terminal emulator for Windows Subsystem for Linux (WSL)
+- [**2829**星][4m] [C] [juliocesarfort/public-pentesting-reports](https://github.com/juliocesarfort/public-pentesting-reports) Curated list of public penetration test reports released by several consulting firms and academic security groups
+- [**2829**星][1m] [Assembly] [cirosantilli/x86-bare-metal-examples](https://github.com/cirosantilli/x86-bare-metal-examples) 几十个用于学习 x86 系统编程的小型操作系统
+- [**2823**星][2y] [CSS] [maxchehab/css-keylogging](https://github.com/maxchehab/css-keylogging) Chrome extension and Express server that exploits keylogging abilities of CSS.
+- [**2820**星][7d] [C] [tmk/tmk_keyboard](https://github.com/tmk/tmk_keyboard) Atmel AVR 和 Cortex-M键盘固件收集
+- [**2814**星][8m] [C#] [quasar/quasarrat](https://github.com/quasar/quasarrat) Remote Administration Tool for Windows
+- [**2814**星][5d] [Py] [jrohy/multi-v2ray](https://github.com/jrohy/multi-v2ray) v2ray easy delpoy & manage tool, support multiple user & protocol manage
+- [**2808**星][2m] [paulsec/awesome-sec-talks](https://github.com/paulsec/awesome-sec-talks) A collected list of awesome security talks
+- [**2803**星][9m] [Py] [plasma-disassembler/plasma](https://github.com/plasma-disassembler/plasma) Plasma is an interactive disassembler for x86/ARM/MIPS. It can generates indented pseudo-code with colored syntax.
+- [**2798**星][19d] [Py] [androguard/androguard](https://github.com/androguard/androguard) Reverse engineering, Malware and goodware analysis of Android applications ... and more (ninja !)
+- [**2793**星][6d] [C] [klange/toaruos](https://github.com/klange/toaruos) A completely-from-scratch hobby operating system: bootloader, kernel, drivers, C library, and userspace including a composited graphical UI, dynamic linker, syntax-highlighting text editor, network stack, etc.
+- [**2793**星][2m] [Go] [kgretzky/evilginx2](https://github.com/kgretzky/evilginx2) 独立的MITM攻击工具,用于登录凭证钓鱼,可绕过双因素认证
+- [**2791**星][7d] [C++] [xmrig/xmrig](https://github.com/xmrig/xmrig) xmrig: 门罗币挖矿代码 CPU 版
+- [**2789**星][4y] [Lua] [loveshell/ngx_lua_waf](https://github.com/loveshell/ngx_lua_waf) ngx_lua_waf是一个基于lua-nginx-module(openresty)的web应用防火墙
+- [**2783**星][30d] [Makefile] [shadowsocks/openwrt-shadowsocks](https://github.com/shadowsocks/openwrt-shadowsocks) Shadowsocks-libev for OpenWrt/LEDE
+- [**2782**星][2y] [C] [seclab-ucr/intang](https://github.com/seclab-ucr/intang) research project for circumventing the "TCP reset attack" from the Great Firewall of China (GFW) by disrupting/desynchronizing the TCP Control Block (TCB) on the censorship devices.
+- [**2777**星][9d] [C++] [qtox/qtox](https://github.com/qtox/qtox) qTox is a chat, voice, video, and file transfer IM client using the encrypted peer-to-peer Tox protocol.
+- [**2769**星][4d] [C] [processhacker/processhacker](https://github.com/processhacker/processhacker) A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware.
+- [**2766**星][1m] [JS] [trufflesuite/ganache-cli](https://github.com/trufflesuite/ganache-cli) Fast Ethereum RPC client for testing and development
+- [**2756**星][2m] [secwiki/sec-chart](https://github.com/secwiki/sec-chart) 安全思维导图集合
+- [**2742**星][5d] [TS] [webhintio/hint](https://github.com/webhintio/hint)
+- [**2742**星][24d] [Makefile] [theos/theos](https://github.com/theos/theos) A cross-platform suite of tools for building and deploying software for iOS and other platforms.
+- [**2741**星][8m] [Py] [p0cl4bs/wifi-pumpkin](https://github.com/P0cL4bs/WiFi-Pumpkin) AP攻击框架, 创建虚假网络, 取消验证攻击、请求和凭证监控、透明代理、Windows更新攻击、钓鱼管理、ARP投毒、DNS嗅探、Pumpkin代理、动态图片捕获等
+- [**2739**星][23d] [JS] [s0md3v/awesomexss](https://github.com/s0md3v/AwesomeXSS) Awesome XSS stuff
+- [**2737**星][1y] [C] [vanhoefm/krackattacks-scripts](https://github.com/vanhoefm/krackattacks-scripts) 检测客户端和AP是否受KRACK漏洞影响
+- [**2735**星][18d] [JS] [cyu/rack-cors](https://github.com/cyu/rack-cors) Rack Middleware for handling Cross-Origin Resource Sharing (CORS), which makes cross-origin AJAX possible.
+- [**2730**星][3y] [Py] [hephaest0s/usbkill](https://github.com/hephaest0s/usbkill) 反取证开关. 监控USB端口变化, 有变化时立即关闭计算机
+- [**2717**星][2d] [PS] [redcanaryco/atomic-red-team](https://github.com/redcanaryco/atomic-red-team) Small and highly portable detection tests based on MITRE's ATT&CK.
+- [**2713**星][1m] [C] [taviso/loadlibrary](https://github.com/taviso/loadlibrary) 使 Linux系统加载并调用 Windows DLL
+- [**2703**星][3y] [Eagle] [samyk/magspoof](https://github.com/samyk/magspoof) 信用卡/磁条欺骗
+- [**2701**星][3d] [Go] [aquasecurity/trivy](https://github.com/aquasecurity/trivy) A Simple and Comprehensive Vulnerability Scanner for Containers, Suitable for CI
+- [**2698**星][7d] [ObjC] [dantheman827/ios-app-signer](https://github.com/dantheman827/ios-app-signer) This is an app for OS X that can (re)sign apps and bundle them into ipa files that are ready to be installed on an iOS device.
+- [**2690**星][1m] [ObjC] [kjcracks/clutch](https://github.com/kjcracks/clutch) Fast iOS executable dumper
+- [**2682**星][22d] [Go] [google/syzkaller](https://github.com/google/syzkaller) 一个unsupervised、以 coverage 为导向的Linux 系统调用fuzzer
+- [**2681**星][1y] [Py] [mame82/p4wnp1](https://github.com/mame82/p4wnp1) 基于Raspberry Pi Zero 或 Raspberry Pi Zero W 的USB攻击平台, 高度的可定制性
+- [**2674**星][3m] [Py] [drivendata/cookiecutter-data-science](https://github.com/drivendata/cookiecutter-data-science) A logical, reasonably standardized, but flexible project structure for doing and sharing data science work.
+- [**2662**星][2m] [rmusser01/infosec_reference](https://github.com/rmusser01/infosec_reference) An Information Security Reference That Doesn't Suck
+- [**2654**星][17d] [JS] [bkimminich/juice-shop](https://github.com/bkimminich/juice-shop) OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
+- [**2652**星][3m] [Java] [frohoff/ysoserial](https://github.com/frohoff/ysoserial) 生成会利用不安全的Java对象反序列化的Payload
+- [**2645**星][2m] [xairy/linux-kernel-exploitation](https://github.com/xairy/linux-kernel-exploitation) Linux 内核 Fuzz 和漏洞利用的资源收集
+- [**2645**星][1y] [HTML] [chybeta/web-security-learning](https://github.com/chybeta/web-security-learning) Web-Security-Learning
+- [**2641**星][1y] [C] [ckolivas/cgminer](https://github.com/ckolivas/cgminer) ASIC and FPGA miner in c for bitcoin
+- [**2640**星][2d] [Go] [slackhq/nebula](https://github.com/slackhq/nebula) A scalable overlay networking tool with a focus on performance, simplicity and security
+- [**2637**星][4m] [Java] [teevity/ice](https://github.com/teevity/ice) AWS Usage Tool
+- [**2625**星][8m] [leandromoreira/linux-network-performance-parameters](https://github.com/leandromoreira/linux-network-performance-parameters) Learn where some of the network sysctl variables fit into the Linux/Kernel network flow
+- [**2615**星][2m] [Swift] [zhuhaow/nekit](https://github.com/zhuhaow/nekit) A toolkit for Network Extension Framework
+- [**2612**星][4d] [JS] [popcorn-official/popcorn-desktop](https://github.com/popcorn-official/popcorn-desktop) Popcorn Time is a multi-platform, free software BitTorrent client that includes an integrated media player. Desktop ( Windows / Mac / Linux ) a Butter-Project Fork
+- [**2607**星][3y] [Ruby] [arachni/arachni](https://github.com/arachni/arachni) Web Application Security Scanner Framework
+- [**2603**星][23d] [JS] [knownsec/kcon](https://github.com/knownsec/kcon) KCon is a famous Hacker Con powered by Knownsec Team.
+- [**2601**星][1m] [pditommaso/awesome-pipeline](https://github.com/pditommaso/awesome-pipeline) A curated list of awesome pipeline toolkits inspired by Awesome Sysadmin
+- [**2596**星][21d] [C++] [fanout/pushpin](https://github.com/fanout/pushpin) Reverse proxy for realtime web services
+- [**2581**星][3d] [Go] [adguardteam/adguardhome](https://github.com/adguardteam/adguardhome) Network-wide ads & trackers blocking DNS server
+- [**2581**星][1m] [Shell] [medicean/vulapps](https://github.com/medicean/vulapps) 快速搭建各种漏洞环境(Various vulnerability environment)
+- [**2575**星][2m] [C] [huntergregal/mimipenguin](https://github.com/huntergregal/mimipenguin) dump 当前Linux用户的登录密码
+- [**2574**星][8y] [C] [id-software/quake](https://github.com/id-software/quake) Quake GPL Source Release
+- [**2568**星][1m] [C] [esnet/iperf](https://github.com/esnet/iperf) A TCP, UDP, and SCTP network bandwidth measurement tool
+- [**2566**星][2d] [C++] [danmar/cppcheck](https://github.com/danmar/cppcheck) static analysis of C/C++ code
+- [**2565**星][5m] [Java] [google/binnavi](https://github.com/google/binnavi) 二进制分析IDE, 对反汇编代码的控制流程图和调用图进行探查/导航/编辑/注释.(IDA插件的作用是导出反汇编)
+- [**2562**星][3m] [Py] [greenwolf/social_mapper](https://github.com/Greenwolf/social_mapper) 对多个社交网站的用户Profile图片进行大规模的人脸识别
+- [**2553**星][2y] [evilsocket/bettercap](https://github.com/evilsocket/bettercap) 中间人攻击框架,功能完整,模块化设计,轻便且易于扩展。
+- [**2551**星][9d] [Py] [cloudflare/flan](https://github.com/cloudflare/flan) A pretty sweet vulnerability scanner
+- [**2549**星][6m] [C] [geohot/qira](https://github.com/geohot/qira) QEMU Interactive Runtime Analyser
+- [**2543**星][19d] [Py] [hugsy/gef](https://github.com/hugsy/gef) gdb增强工具,使用Python API,用于漏洞开发和逆向分析。
+- [**2542**星][23d] [Go] [drk1wi/modlishka](https://github.com/drk1wi/modlishka) Modlishka. Reverse Proxy.
+- [**2533**星][8m] [offensive-security/kali-nethunter](https://github.com/offensive-security/kali-nethunter) The Kali NetHunter Project
- [**2533**星][2y] [Py] [google/nogotofail](https://github.com/google/nogotofail) 网络安全测试, 辅助定位和修复弱TLS/SSL连接和敏感明文流量
-- [**2532**星][8m] [offensive-security/kali-nethunter](https://github.com/offensive-security/kali-nethunter) The Kali NetHunter Project
-- [**2530**星][17d] [Py] [hugsy/gef](https://github.com/hugsy/gef) gdb增强工具,使用Python API,用于漏洞开发和逆向分析。
-- [**2521**星][21d] [Go] [drk1wi/modlishka](https://github.com/drk1wi/modlishka) Modlishka. Reverse Proxy.
-- [**2520**星][3y] [HTML] [dirtycow/dirtycow.github.io](https://github.com/dirtycow/dirtycow.github.io) Dirty COW
-- [**2515**星][24d] [C] [yrutschle/sslh](https://github.com/yrutschle/sslh) Applicative Protocol Multiplexer (e.g. share SSH and HTTPS on the same port)
-- [**2510**星][11d] [Shell] [teddysun/across](https://github.com/teddysun/across) This is a shell script for configure and start WireGuard VPN server
-- [**2505**星][3m] [kbandla/aptnotes](https://github.com/kbandla/aptnotes) Various public documents, whitepapers and articles about APT campaigns
-- [**2505**星][3y] [C] [dhavalkapil/icmptunnel](https://github.com/dhavalkapil/icmptunnel) Transparently tunnel your IP traffic through ICMP echo and reply packets.
+- [**2526**星][2d] [Shell] [teddysun/across](https://github.com/teddysun/across) This is a shell script for configure and start WireGuard VPN server
+- [**2525**星][3y] [HTML] [dirtycow/dirtycow.github.io](https://github.com/dirtycow/dirtycow.github.io) Dirty COW
+- [**2522**星][26d] [C] [yrutschle/sslh](https://github.com/yrutschle/sslh) Applicative Protocol Multiplexer (e.g. share SSH and HTTPS on the same port)
+- [**2516**星][3m] [kbandla/aptnotes](https://github.com/kbandla/aptnotes) Various public documents, whitepapers and articles about APT campaigns
+- [**2508**星][5m] [Go] [oj/gobuster](https://github.com/oj/gobuster) Directory/File, DNS and VHost busting tool written in Go
+- [**2507**星][2m] [Java] [jboss-javassist/javassist](https://github.com/jboss-javassist/javassist) Java bytecode engineering toolkit
+- [**2507**星][3y] [C] [dhavalkapil/icmptunnel](https://github.com/dhavalkapil/icmptunnel) Transparently tunnel your IP traffic through ICMP echo and reply packets.
- [**2503**星][7m] [C++] [chengr28/pcap_dnsproxy](https://github.com/chengr28/pcap_dnsproxy) Pcap_DNSProxy, a local DNS server based on packet capturing
-- [**2495**星][2m] [Java] [jboss-javassist/javassist](https://github.com/jboss-javassist/javassist) Java bytecode engineering toolkit
-- [**2488**星][1y] [onlurking/awesome-infosec](https://github.com/onlurking/awesome-infosec) A curated list of awesome infosec courses and training resources.
-- [**2486**星][26d] [Py] [ysrc/xunfeng](https://github.com/ysrc/xunfeng) 巡风是一款适用于企业内网的漏洞快速应急,巡航扫描系统。
-- [**2481**星][5m] [Go] [oj/gobuster](https://github.com/oj/gobuster) Directory/File, DNS and VHost busting tool written in Go
-- [**2480**星][8d] [Go] [adguardteam/adguardhome](https://github.com/adguardteam/adguardhome) Network-wide ads & trackers blocking DNS server
+- [**2501**星][28d] [Py] [ysrc/xunfeng](https://github.com/ysrc/xunfeng) 巡风是一款适用于企业内网的漏洞快速应急,巡航扫描系统。
+- [**2498**星][6m] [taichi-framework/taichi](https://github.com/taichi-framework/taichi) A framework to use Xposed module with or without Root/Unlock bootloader, supportting Android 5.0 ~ 10.0
+- [**2497**星][6d] [onlurking/awesome-infosec](https://github.com/onlurking/awesome-infosec) A curated list of awesome infosec courses and training resources.
+- [**2488**星][5y] [PHP] [audi-1/sqli-labs](https://github.com/audi-1/sqli-labs) SQLI labs to test error based, Blind boolean based, Time based.
- [**2480**星][2y] [Py] [feross/spoofmac](https://github.com/feross/spoofmac) 伪造MAC地址(OS X, Windows, Linux)
-- [**2473**星][5y] [PHP] [audi-1/sqli-labs](https://github.com/audi-1/sqli-labs) SQLI labs to test error based, Blind boolean based, Time based.
-- [**2472**星][11m] [JS] [weixin/miaow](https://github.com/weixin/Miaow) A set of plugins for Sketch include drawing links & marks, UI Kit & Color sync, font & text replacing.
-- [**2470**星][6m] [taichi-framework/taichi](https://github.com/taichi-framework/taichi) A framework to use Xposed module with or without Root/Unlock bootloader, supportting Android 5.0 ~ 10.0
-- [**2463**星][13d] [JS] [vitaly-t/pg-promise](https://github.com/vitaly-t/pg-promise) PostgreSQL interface for Node.js
-- [**2458**星][3m] [C] [martin-ger/esp_wifi_repeater](https://github.com/martin-ger/esp_wifi_repeater) A full functional WiFi Repeater (correctly: a WiFi NAT Router)
-- [**2456**星][4m] [Go] [ne0nd0g/merlin](https://github.com/ne0nd0g/merlin) Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.
-- [**2454**星][24d] [C++] [pavel-odintsov/fastnetmon](https://github.com/pavel-odintsov/fastnetmon) 快速 DDoS 检测/分析工具,支持 sflow/netflow/mirror
-- [**2453**星][11m] [C#] [yck1509/confuserex](https://github.com/yck1509/confuserex) An open-source, free protector for .NET applications
+- [**2476**星][11m] [JS] [weixin/miaow](https://github.com/weixin/Miaow) A set of plugins for Sketch include drawing links & marks, UI Kit & Color sync, font & text replacing.
+- [**2476**星][4m] [Go] [ne0nd0g/merlin](https://github.com/ne0nd0g/merlin) Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.
+- [**2469**星][6d] [JS] [vitaly-t/pg-promise](https://github.com/vitaly-t/pg-promise) PostgreSQL interface for Node.js
+- [**2466**星][30d] [Py] [smicallef/spiderfoot](https://github.com/smicallef/spiderfoot) 自动收集指定目标的信息:IP、域名、主机名、网络子网、ASN、邮件地址、用户名
+- [**2464**星][3m] [C] [martin-ger/esp_wifi_repeater](https://github.com/martin-ger/esp_wifi_repeater) A full functional WiFi Repeater (correctly: a WiFi NAT Router)
+- [**2461**星][11m] [C#] [yck1509/confuserex](https://github.com/yck1509/confuserex) An open-source, free protector for .NET applications
+- [**2461**星][26d] [C++] [pavel-odintsov/fastnetmon](https://github.com/pavel-odintsov/fastnetmon) 快速 DDoS 检测/分析工具,支持 sflow/netflow/mirror
+- [**2454**星][21d] [Shell] [rebootuser/linenum](https://github.com/rebootuser/linenum) Scripted Local Linux Enumeration & Privilege Escalation Checks
- [**2451**星][3y] [Py] [google/enjarify](https://github.com/google/enjarify) 将Dalvik字节码转换为对应的Java字节码
-- [**2441**星][28d] [Py] [smicallef/spiderfoot](https://github.com/smicallef/spiderfoot) 自动收集指定目标的信息:IP、域名、主机名、网络子网、ASN、邮件地址、用户名
-- [**2424**星][7d] [PHP] [misp/misp](https://github.com/misp/misp) MISP (core software) - Open Source Threat Intelligence and Sharing Platform (formely known as Malware Information Sharing Platform)
-- [**2420**星][19d] [Shell] [rebootuser/linenum](https://github.com/rebootuser/linenum) Scripted Local Linux Enumeration & Privilege Escalation Checks
-- [**2415**星][1m] [Py] [0xinfection/awesome-waf](https://github.com/0xinfection/awesome-waf)
-- [**2412**星][23d] [Py] [pwndbg/pwndbg](https://github.com/pwndbg/pwndbg) GDB插件,辅助漏洞开发和逆向
-- [**2411**星][3y] [Py] [arthepsy/ssh-audit](https://github.com/arthepsy/ssh-audit) SSH server auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)
-- [**2407**星][1m] [TSQL] [rapid7/metasploitable3](https://github.com/rapid7/metasploitable3) Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities.
-- [**2404**星][24d] [Py] [infobyte/faraday](https://github.com/infobyte/faraday) 渗透测试和漏洞管理平台
-- [**2399**星][3y] [rpisec/malware](https://github.com/rpisec/malware) Course materials for Malware Analysis by RPISEC
+- [**2444**星][2d] [PHP] [misp/misp](https://github.com/misp/misp) MISP (core software) - Open Source Threat Intelligence and Sharing Platform (formely known as Malware Information Sharing Platform)
+- [**2429**星][1m] [Py] [0xinfection/awesome-waf](https://github.com/0xinfection/awesome-waf)
+- [**2423**星][2d] [Py] [pwndbg/pwndbg](https://github.com/pwndbg/pwndbg) GDB插件,辅助漏洞开发和逆向
+- [**2420**星][1m] [TSQL] [rapid7/metasploitable3](https://github.com/rapid7/metasploitable3) Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities.
+- [**2417**星][26d] [Py] [infobyte/faraday](https://github.com/infobyte/faraday) 渗透测试和漏洞管理平台
+- [**2416**星][3y] [Py] [arthepsy/ssh-audit](https://github.com/arthepsy/ssh-audit) SSH server auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)
+- [**2411**星][26d] [Py] [xmendez/wfuzz](https://github.com/xmendez/wfuzz) Web application fuzzer
+- [**2410**星][8m] [Py] [lionsec/katoolin](https://github.com/lionsec/katoolin) Automatically install all Kali linux tools
+- [**2407**星][3y] [rpisec/malware](https://github.com/rpisec/malware) Course materials for Malware Analysis by RPISEC
+- [**2404**星][20d] [Java] [m66b/netguard](https://github.com/m66b/netguard) A simple way to block access to the internet per app
- [**2395**星][3y] [OCaml] [facebookarchive/pfff](https://github.com/facebookarchive/pfff) 一堆工具的集合,用于执行静态分析、代码可视化、代码导航、保持格式的源码转换(例如:源码重构)。完美支持C、Java、JS、PHP,后续将支持其他一大堆语言。
-- [**2395**星][24d] [Py] [xmendez/wfuzz](https://github.com/xmendez/wfuzz) Web application fuzzer
-- [**2391**星][8m] [Py] [lionsec/katoolin](https://github.com/lionsec/katoolin) Automatically install all Kali linux tools
-- [**2381**星][2y] [Py] [secretsquirrel/the-backdoor-factory](https://github.com/secretsquirrel/the-backdoor-factory) 为PE, ELF, Mach-O二进制文件添加Shellcode后门
-- [**2375**星][1y] [Py] [danmcinerney/lans.py](https://github.com/danmcinerney/lans.py) Inject code and spy on wifi users
+- [**2392**星][1m] [Go] [xtaci/kcp-go](https://github.com/xtaci/kcp-go) provide a smooth, resilient, ordered, error-checked and anonymous delivery of streams over UDP packets,
+- [**2389**星][8d] [C] [wireshark/wireshark](https://github.com/wireshark/wireshark) Read-only mirror of Wireshark's Git repository. GitHub won't let us disable pull requests. ☞ THEY WILL BE IGNORED HERE ☜ Please upload them at
+- [**2386**星][2y] [Py] [secretsquirrel/the-backdoor-factory](https://github.com/secretsquirrel/the-backdoor-factory) 为PE, ELF, Mach-O二进制文件添加Shellcode后门
+- [**2384**星][2d] [Go] [owasp/amass](https://github.com/owasp/amass) In-depth Attack Surface Mapping and Asset Discovery
+- [**2381**星][11m] [C] [haad/proxychains](https://github.com/haad/proxychains) a tool that forces any TCP connection made by any given application to follow through proxy like TOR or any other SOCKS4, SOCKS5 or HTTP(S) proxy. Supported auth-types: "user/pass" for SOCKS4/5, "basic" for HTTP.
+- [**2376**星][2d] [Java] [mock-server/mockserver](https://github.com/mock-server/mockserver) MockServer enables easy mocking of any system you integrate with via HTTP or HTTPS with clients written in Java, JavaScript and Ruby. MockServer also includes a proxy that introspects all proxied traffic including encrypted SSL traffic and supports Port Forwarding, Web Proxying (i.e. HTTP proxy), HTTPS Tunneling Proxying (using HTTP CONNECT) and…
+- [**2376**星][1y] [Py] [danmcinerney/lans.py](https://github.com/danmcinerney/lans.py) Inject code and spy on wifi users
+- [**2369**星][7d] [security-onion-solutions/security-onion](https://github.com/security-onion-solutions/security-onion) Linux distro for intrusion detection, enterprise security monitoring, and log management
- [**2369**星][2m] [TeX] [crypto101/book](https://github.com/crypto101/book) Crypto 101, the introductory book on cryptography.
-- [**2368**星][7d] [C] [wireshark/wireshark](https://github.com/wireshark/wireshark) Read-only mirror of Wireshark's Git repository. GitHub won't let us disable pull requests. ☞ THEY WILL BE IGNORED HERE ☜ Please upload them at
-- [**2366**星][7d] [Java] [mock-server/mockserver](https://github.com/mock-server/mockserver) MockServer enables easy mocking of any system you integrate with via HTTP or HTTPS with clients written in Java, JavaScript and Ruby. MockServer also includes a proxy that introspects all proxied traffic including encrypted SSL traffic and supports Port Forwarding, Web Proxying (i.e. HTTP proxy), HTTPS Tunneling Proxying (using HTTP CONNECT) and…
-- [**2366**星][11m] [C] [haad/proxychains](https://github.com/haad/proxychains) a tool that forces any TCP connection made by any given application to follow through proxy like TOR or any other SOCKS4, SOCKS5 or HTTP(S) proxy. Supported auth-types: "user/pass" for SOCKS4/5, "basic" for HTTP.
-- [**2359**星][1m] [Lua] [snabbco/snabb](https://github.com/snabbco/snabb) Simple and fast packet networking
-- [**2359**星][13d] [security-onion-solutions/security-onion](https://github.com/security-onion-solutions/security-onion) Linux distro for intrusion detection, enterprise security monitoring, and log management
-- [**2359**星][4m] [Go] [mlabouardy/komiser](https://github.com/mlabouardy/komiser)
-- [**2351**星][8d] [C] [domoticz/domoticz](https://github.com/domoticz/domoticz) monitor and configure various devices like: Lights, Switches, various sensors/meters like Temperature, Rain, Wind, UV, Electra, Gas, Water and much more
-- [**2350**星][1m] [Py] [ab77/netflix-proxy](https://github.com/ab77/netflix-proxy) Smart DNS proxy to watch Netflix
+- [**2366**星][4m] [Go] [mlabouardy/komiser](https://github.com/mlabouardy/komiser)
+- [**2364**星][2m] [Py] [ab77/netflix-proxy](https://github.com/ab77/netflix-proxy) Smart DNS proxy to watch Netflix
+- [**2362**星][1m] [Lua] [snabbco/snabb](https://github.com/snabbco/snabb) Simple and fast packet networking
+- [**2357**星][2d] [C] [domoticz/domoticz](https://github.com/domoticz/domoticz) monitor and configure various devices like: Lights, Switches, various sensors/meters like Temperature, Rain, Wind, UV, Electra, Gas, Water and much more
+- [**2352**星][1m] [Py] [ctfd/ctfd](https://github.com/CTFd/CTFd) CTFs as you need them
+- [**2349**星][11m] [hack-with-github/free-security-ebooks](https://github.com/hack-with-github/free-security-ebooks) Free Security and Hacking eBooks
- [**2342**星][3m] [Go] [vuvuzela/vuvuzela](https://github.com/vuvuzela/vuvuzela) Private messaging system that hides metadata
-- [**2342**星][12d] [Go] [owasp/amass](https://github.com/owasp/amass) In-depth Attack Surface Mapping and Asset Discovery
-- [**2338**星][6y] [C] [stefanesser/dumpdecrypted](https://github.com/stefanesser/dumpdecrypted) Dumps decrypted mach-o files from encrypted iPhone applications from memory to disk. This tool is necessary for security researchers to be able to look under the hood of encryption.
-- [**2335**星][11m] [hack-with-github/free-security-ebooks](https://github.com/hack-with-github/free-security-ebooks) Free Security and Hacking eBooks
-- [**2332**星][1m] [Py] [ctfd/ctfd](https://github.com/CTFd/CTFd) CTFs as you need them
-- [**2330**星][1m] [JS] [pa11y/pa11y](https://github.com/pa11y/pa11y) Pa11y is your automated accessibility testing pal
-- [**2324**星][30d] [C] [hfiref0x/uacme](https://github.com/hfiref0x/uacme) Defeating Windows User Account Control
-- [**2317**星][10d] [C] [tsl0922/ttyd](https://github.com/tsl0922/ttyd) Share your terminal over the web
-- [**2316**星][5y] [C] [abrasive/shairport](https://github.com/abrasive/shairport) Airtunes emulator! Shairport is no longer maintained.
-- [**2302**星][11m] [yeyintminthuhtut/awesome-red-teaming](https://github.com/yeyintminthuhtut/awesome-red-teaming) List of Awesome Red Teaming Resources
-- [**2302**星][1y] [Java] [csploit/android](https://github.com/csploit/android) cSploit - The most complete and advanced IT security professional toolkit on Android.
-- [**2291**星][3y] [Py] [lmacken/pyrasite](https://github.com/lmacken/pyrasite) 向运行中的 Python进程注入代码
-- [**2277**星][3m] [JS] [retirejs/retire.js](https://github.com/retirejs/retire.js) scanner detecting the use of JavaScript libraries with known vulnerabilities
-- [**2272**星][3y] [Py] [therook/subbrute](https://github.com/therook/subbrute) A DNS meta-query spider that enumerates DNS records, and subdomains.
-- [**2272**星][1m] [C] [moby/hyperkit](https://github.com/moby/hyperkit) A toolkit for embedding hypervisor capabilities in your application
-- [**2271**星][22d] [JS] [talkingdata/inmap](https://github.com/talkingdata/inmap) 大数据地理可视化
-- [**2271**星][2y] [Py] [rootphantomer/blasting_dictionary](https://github.com/rootphantomer/blasting_dictionary) 爆破字典
-- [**2267**星][1m] [C] [aurorawright/luma3ds](https://github.com/aurorawright/luma3ds) Noob-proof (N)3DS "Custom Firmware"
-- [**2246**星][16d] [dumb-password-rules/dumb-password-rules](https://github.com/dumb-password-rules/dumb-password-rules) Shaming sites with dumb password rules.
-- [**2244**星][2y] [Go] [mehrdadrad/mylg](https://github.com/mehrdadrad/mylg) 网络诊断工具
-- [**2242**星][1m] [Shell] [v1s1t0r1sh3r3/airgeddon](https://github.com/v1s1t0r1sh3r3/airgeddon) This is a multi-use bash script for Linux systems to audit wireless networks.
-- [**2241**星][13d] [HTML] [tikam02/devops-guide](https://github.com/tikam02/devops-guide) DevOps Guide from basic to advanced with Interview Questions and Notes
-- [**2241**星][3m] [Py] [novnc/websockify](https://github.com/novnc/websockify) Websockify is a WebSocket to TCP proxy/bridge. This allows a browser to connect to any application/server/service. Implementations in Python, C, Node.js and Ruby.
-- [**2235**星][1m] [Shell] [eliaskotlyar/xiaomi-dafang-hacks](https://github.com/eliaskotlyar/xiaomi-dafang-hacks)
+- [**2340**星][6y] [C] [stefanesser/dumpdecrypted](https://github.com/stefanesser/dumpdecrypted) Dumps decrypted mach-o files from encrypted iPhone applications from memory to disk. This tool is necessary for security researchers to be able to look under the hood of encryption.
+- [**2340**星][1m] [C] [hfiref0x/uacme](https://github.com/hfiref0x/uacme) Defeating Windows User Account Control
+- [**2337**星][1m] [JS] [pa11y/pa11y](https://github.com/pa11y/pa11y) Pa11y is your automated accessibility testing pal
+- [**2335**星][3d] [C] [tsl0922/ttyd](https://github.com/tsl0922/ttyd) Share your terminal over the web
+- [**2323**星][3d] [C#] [netchx/netch](https://github.com/netchx/netch) Game accelerator. Support Socks5, Shadowsocks, ShadowsocksR, V2Ray protocol. UDP NAT FullCone
+- [**2321**星][11m] [yeyintminthuhtut/awesome-red-teaming](https://github.com/yeyintminthuhtut/awesome-red-teaming) List of Awesome Red Teaming Resources
+- [**2318**星][5y] [C] [abrasive/shairport](https://github.com/abrasive/shairport) Airtunes emulator! Shairport is no longer maintained.
+- [**2304**星][1y] [Java] [csploit/android](https://github.com/csploit/android) cSploit - The most complete and advanced IT security professional toolkit on Android.
+- [**2301**星][15d] [HTML] [tikam02/devops-guide](https://github.com/tikam02/devops-guide) DevOps Guide from basic to advanced with Interview Questions and Notes
+- [**2295**星][3y] [Py] [lmacken/pyrasite](https://github.com/lmacken/pyrasite) 向运行中的 Python进程注入代码
+- [**2287**星][2y] [Py] [rootphantomer/blasting_dictionary](https://github.com/rootphantomer/blasting_dictionary) 爆破字典
+- [**2284**星][1m] [C] [moby/hyperkit](https://github.com/moby/hyperkit) A toolkit for embedding hypervisor capabilities in your application
+- [**2283**星][5m] [Py] [guohongze/adminset](https://github.com/guohongze/adminset) 自动化运维平台:CMDB、CD、DevOps、资产管理、任务编排、持续交付、系统监控、运维管理、配置管理
+- [**2282**星][3y] [Py] [therook/subbrute](https://github.com/therook/subbrute) A DNS meta-query spider that enumerates DNS records, and subdomains.
+- [**2281**星][3m] [JS] [retirejs/retire.js](https://github.com/retirejs/retire.js) scanner detecting the use of JavaScript libraries with known vulnerabilities
+- [**2276**星][24d] [JS] [talkingdata/inmap](https://github.com/talkingdata/inmap) 大数据地理可视化
+- [**2274**星][1m] [Shell] [v1s1t0r1sh3r3/airgeddon](https://github.com/v1s1t0r1sh3r3/airgeddon) This is a multi-use bash script for Linux systems to audit wireless networks.
+- [**2270**星][1m] [C] [aurorawright/luma3ds](https://github.com/aurorawright/luma3ds) Noob-proof (N)3DS "Custom Firmware"
+- [**2255**星][3m] [Py] [novnc/websockify](https://github.com/novnc/websockify) Websockify is a WebSocket to TCP proxy/bridge. This allows a browser to connect to any application/server/service. Implementations in Python, C, Node.js and Ruby.
+- [**2252**星][18d] [dumb-password-rules/dumb-password-rules](https://github.com/dumb-password-rules/dumb-password-rules) Shaming sites with dumb password rules.
+- [**2252**星][1m] [Shell] [eliaskotlyar/xiaomi-dafang-hacks](https://github.com/eliaskotlyar/xiaomi-dafang-hacks)
+- [**2248**星][12d] [PS] [k8gege/k8tools](https://github.com/k8gege/k8tools) K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)
+- [**2245**星][2y] [Go] [mehrdadrad/mylg](https://github.com/mehrdadrad/mylg) 网络诊断工具
- [**2226**星][5y] [Go] [filosottile/heartbleed](https://github.com/filosottile/heartbleed) A checker (site and tool) for CVE-2014-0160
-- [**2222**星][8d] [C#] [netchx/netch](https://github.com/netchx/netch) Game accelerator. Support Socks5, Shadowsocks, ShadowsocksR, V2Ray protocol. UDP NAT FullCone
-- [**2218**星][7d] [Py] [cloudflare/flan](https://github.com/cloudflare/flan) A pretty sweet vulnerability scanner
+- [**2217**星][1y] [JS] [cure53/h5sc](https://github.com/cure53/h5sc) HTML5 Security Cheatsheet - A collection of HTML5 related XSS attack vectors
- [**2215**星][6y] [C++] [codebutler/firesheep](https://github.com/codebutler/firesheep) 演示HTTP会话劫持攻击的Firefox扩展
-- [**2211**星][1y] [JS] [cure53/h5sc](https://github.com/cure53/h5sc) HTML5 Security Cheatsheet - A collection of HTML5 related XSS attack vectors
-- [**2204**星][10d] [PowerShell] [k8gege/k8tools](https://github.com/k8gege/k8tools) K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)
-- [**2203**星][1m] [C] [texane/stlink](https://github.com/texane/stlink) stm32 discovery line linux programmer
-- [**2201**星][11d] [Go] [google/mtail](https://github.com/google/mtail) extract whitebox monitoring data from application logs for collection in a timeseries database
-- [**2187**星][21d] [C++] [google/bloaty](https://github.com/google/bloaty) Bloaty McBloatface: a size profiler for binaries
+- [**2213**星][2d] [Go] [aquasecurity/kube-bench](https://github.com/aquasecurity/kube-bench) Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark
+- [**2211**星][1m] [C] [texane/stlink](https://github.com/texane/stlink) stm32 discovery line linux programmer
+- [**2211**星][6d] [Go] [google/mtail](https://github.com/google/mtail) extract whitebox monitoring data from application logs for collection in a timeseries database
+- [**2209**星][22d] [Rust] [cloudflare/boringtun](https://github.com/cloudflare/boringtun) an implementation of the WireGuard® protocol designed for portability and speed.
+- [**2192**星][23d] [C++] [google/bloaty](https://github.com/google/bloaty) Bloaty McBloatface: a size profiler for binaries
+- [**2189**星][1m] [sobolevn/awesome-cryptography](https://github.com/sobolevn/awesome-cryptography) A curated list of cryptography resources and links.
+- [**2187**星][7d] [getlantern/lantern-binaries](https://github.com/getlantern/lantern-binaries) Lantern installers binary downloads.
+- [**2186**星][1y] [Py] [datasploit/datasploit](https://github.com/DataSploit/datasploit) 对指定目标执行多种侦查技术:企业、人、电话号码、比特币地址等
- [**2184**星][3y] [enddo/awesome-windows-exploitation](https://github.com/enddo/awesome-windows-exploitation) A curated list of awesome Windows Exploitation resources, and shiny things. Inspired by awesom
-- [**2182**星][1y] [Py] [datasploit/datasploit](https://github.com/DataSploit/datasploit) 对指定目标执行多种侦查技术:企业、人、电话号码、比特币地址等
-- [**2177**星][1m] [JS] [secgroundzero/warberry](https://github.com/secgroundzero/warberry) WarBerryPi - Tactical Exploitation
-- [**2171**星][14d] [C] [armmbed/mbedtls](https://github.com/armmbed/mbedtls) An open source, portable, easy to use, readable and flexible SSL library
-- [**2168**星][16d] [getlantern/lantern-binaries](https://github.com/getlantern/lantern-binaries) Lantern installers binary downloads.
-- [**2167**星][29d] [sobolevn/awesome-cryptography](https://github.com/sobolevn/awesome-cryptography) A curated list of cryptography resources and links.
-- [**2158**星][2m] [Go] [mmatczuk/go-http-tunnel](https://github.com/mmatczuk/go-http-tunnel) Fast and secure tunnels over HTTP/2
-- [**2156**星][1m] [C] [conorpp/u2f-zero](https://github.com/conorpp/u2f-zero) U2F USB token optimized for physical security, affordability, and style
-- [**2155**星][1y] [C++] [maestron/botnets](https://github.com/maestron/botnets) This is a collection of #botnet source codes, unorganized. For EDUCATIONAL PURPOSES ONLY
+- [**2183**星][2d] [C] [armmbed/mbedtls](https://github.com/armmbed/mbedtls) An open source, portable, easy to use, readable and flexible SSL library
+- [**2179**星][1m] [JS] [secgroundzero/warberry](https://github.com/secgroundzero/warberry) WarBerryPi - Tactical Exploitation
+- [**2173**星][1y] [JS] [iam4x/pokemongo-webspoof](https://github.com/iam4x/pokemongo-webspoof)
+- [**2163**星][2m] [Go] [mmatczuk/go-http-tunnel](https://github.com/mmatczuk/go-http-tunnel) Fast and secure tunnels over HTTP/2
+- [**2162**星][1y] [C++] [maestron/botnets](https://github.com/maestron/botnets) This is a collection of #botnet source codes, unorganized. For EDUCATIONAL PURPOSES ONLY
+- [**2159**星][1m] [Py] [commixproject/commix](https://github.com/commixproject/commix) Automated All-in-One OS command injection and exploitation tool.
+- [**2158**星][9m] [exakat/php-static-analysis-tools](https://github.com/exakat/php-static-analysis-tools) A reviewed list of useful PHP static analysis tools
+- [**2158**星][1m] [C] [conorpp/u2f-zero](https://github.com/conorpp/u2f-zero) U2F USB token optimized for physical security, affordability, and style
+- [**2158**星][2m] [PHP] [antonioribeiro/tracker](https://github.com/antonioribeiro/tracker) Tracker gathers a lot of information from your requests to identify and store
- [**2153**星][6y] [Ruby] [plamoni/siriproxy](https://github.com/plamoni/siriproxy) A (tampering) proxy server for Apple's Siri
-- [**2152**星][29d] [Py] [commixproject/commix](https://github.com/commixproject/commix) Automated All-in-One OS command injection and exploitation tool.
-- [**2151**星][9m] [exakat/php-static-analysis-tools](https://github.com/exakat/php-static-analysis-tools) A reviewed list of useful PHP static analysis tools
-- [**2146**星][14d] [Java] [google/wycheproof](https://github.com/google/wycheproof) Project Wycheproof tests crypto libraries against known attacks.
-- [**2127**星][1m] [Py] [jonathansalwan/ropgadget](https://github.com/jonathansalwan/ropgadget) This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC and MIPS architectures.
-- [**2124**星][2m] [Py] [trustedsec/unicorn](https://github.com/trustedsec/unicorn) 通过PowerShell降级攻击, 直接将Shellcode注入到内存
-- [**2123**星][16d] [Assembly] [pret/pokered](https://github.com/pret/pokered) disassembly of Pokémon Red/Blue
-- [**2114**星][7m] [Py] [calebmadrigal/trackerjacker](https://github.com/calebmadrigal/trackerjacker) 映射你没连接到的Wifi网络, 类似于NMap, 另外可以追踪设备
-- [**2112**星][1y] [Py] [rub-nds/pret](https://github.com/rub-nds/pret) Printer Exploitation Toolkit - The tool that made dumpster diving obsolete.
+- [**2149**星][8d] [Java] [google/wycheproof](https://github.com/google/wycheproof) Project Wycheproof tests crypto libraries against known attacks.
+- [**2138**星][2m] [Py] [trustedsec/unicorn](https://github.com/trustedsec/unicorn) 通过PowerShell降级攻击, 直接将Shellcode注入到内存
+- [**2132**星][1m] [Py] [jonathansalwan/ropgadget](https://github.com/jonathansalwan/ropgadget) This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC and MIPS architectures.
+- [**2127**星][18d] [Assembly] [pret/pokered](https://github.com/pret/pokered) disassembly of Pokémon Red/Blue
+- [**2122**星][2y] [Py] [rub-nds/pret](https://github.com/rub-nds/pret) Printer Exploitation Toolkit - The tool that made dumpster diving obsolete.
+- [**2118**星][4d] [goq/telegram-list](https://github.com/goq/telegram-list) List of telegram groups, channels & bots // Список интересных групп, каналов и ботов телеграма // Список чатов для программистов
+- [**2117**星][1m] [Py] [elceef/dnstwist](https://github.com/elceef/dnstwist) 域名置换引擎,用于检测打字错误,网络钓鱼和企业间谍活动
+- [**2116**星][7m] [Py] [calebmadrigal/trackerjacker](https://github.com/calebmadrigal/trackerjacker) 映射你没连接到的Wifi网络, 类似于NMap, 另外可以追踪设备
+- [**2115**星][2d] [Py] [fortynorthsecurity/eyewitness](https://github.com/FortyNorthSecurity/EyeWitness) 给网站做快照,提供服务器Header信息,识别默认凭证等
+- [**2114**星][7y] [C++] [lloyd/node-memwatch](https://github.com/lloyd/node-memwatch) A NodeJS library to keep an eye on your memory usage, and discover and isolate leaks.
- [**2107**星][4y] [C] [hashcat/hashcat-legacy](https://github.com/hashcat/hashcat-legacy) Advanced CPU-based password recovery utility
-- [**2105**星][7d] [goq/telegram-list](https://github.com/goq/telegram-list) List of telegram groups, channels & bots // Список интересных групп, каналов и ботов телеграма // Список чатов для программистов
-- [**2105**星][1m] [Py] [elceef/dnstwist](https://github.com/elceef/dnstwist) 域名置换引擎,用于检测打字错误,网络钓鱼和企业间谍活动
-- [**2103**星][8m] [Py] [linkedin/qark](https://github.com/linkedin/qark) 查找Android App的漏洞, 支持源码或APK文件
-- [**2098**星][19d] [Py] [fortynorthsecurity/eyewitness](https://github.com/FortyNorthSecurity/EyeWitness) 给网站做快照,提供服务器Header信息,识别默认凭证等
-- [**2098**星][21d] [infoslack/awesome-web-hacking](https://github.com/infoslack/awesome-web-hacking) A list of web application security
-- [**2090**星][3m] [yeahhub/hacking-security-ebooks](https://github.com/yeahhub/hacking-security-ebooks) Top 100 Hacking & Security E-Books (Free Download)
-- [**2081**星][8d] [C] [flatpak/flatpak](https://github.com/flatpak/flatpak) Linux application sandboxing and distribution framework
-- [**2071**星][30d] [Go] [theupdateframework/notary](https://github.com/theupdateframework/notary) Notary is a project that allows anyone to have trust over arbitrary collections of data
-- [**2069**星][20d] [Ruby] [urbanadventurer/whatweb](https://github.com/urbanadventurer/whatweb) Next generation web scanner
-- [**2062**星][9m] [jermic/android-crack-tool](https://github.com/jermic/android-crack-tool)
-- [**2051**星][4m] [Py] [whaleshark-team/cobra](https://github.com/WhaleShark-Team/cobra) Source Code Security Audit (源代码安全审计)
-- [**2049**星][1y] [bluscreenofjeff/red-team-infrastructure-wiki](https://github.com/bluscreenofjeff/red-team-infrastructure-wiki) Wiki to collect Red Team infrastructure hardening resources
-- [**2047**星][6m] [Go] [maxmcd/webtty](https://github.com/maxmcd/webtty) Share a terminal session over WebRTC
-- [**2041**星][2y] [Py] [derv82/wifite](https://github.com/derv82/wifite) 自动化无线攻击工具
-- [**2037**星][10d] [Py] [nabla-c0d3/sslyze](https://github.com/nabla-c0d3/sslyze) SSL/TLS服务器扫描
-- [**2036**星][2m] [C++] [lordnoteworthy/al-khaser](https://github.com/lordnoteworthy/al-khaser) Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.
-- [**2035**星][2m] [tanprathan/mobileapp-pentest-cheatsheet](https://github.com/tanprathan/mobileapp-pentest-cheatsheet) The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.
-- [**2035**星][8m] [Shell] [foospidy/payloads](https://github.com/foospidy/payloads) web 攻击 Payload 集合
-- [**2032**星][7d] [C++] [openthread/openthread](https://github.com/openthread/openthread) OpenThread released by Google is an open-source implementation of the Thread networking protocol
-- [**2032**星][1m] [edoverflow/bugbounty-cheatsheet](https://github.com/edoverflow/bugbounty-cheatsheet) A list of interesting payloads, tips and tricks for bug bounty hunters.
-- [**2024**星][5y] [CoffeeScript] [shadowsocks/shadowsocks-gui](https://github.com/shadowsocks/shadowsocks-gui) Shadowsocks GUI client
-- [**2020**星][20d] [Objective-C] [ios-control/ios-deploy](https://github.com/ios-control/ios-deploy) Install and debug iPhone apps from the command line, without using Xcode
-- [**2017**星][3m] [C++] [darthton/blackbone](https://github.com/darthton/blackbone) Windows memory hacking library
-- [**2016**星][3y] [Swift] [urinx/iosapphook](https://github.com/urinx/iosapphook) 专注于非越狱环境下iOS应用逆向研究,从dylib注入,应用重签名到App Hook
-- [**2014**星][8d] [Py] [sensepost/objection](https://github.com/sensepost/objection) runtimemobile exploration
-- [**2012**星][1y] [C] [xoreaxeaxeax/rosenbridge](https://github.com/xoreaxeaxeax/rosenbridge) Hardware backdoors in some x86 CPUs
-- [**2006**星][9m] [C] [dekunukem/nintendo_switch_reverse_engineering](https://github.com/dekunukem/nintendo_switch_reverse_engineering) A look at inner workings of Joycon and Nintendo Switch
-- [**2004**星][4y] [C] [probablycorey/wax](https://github.com/probablycorey/wax) Wax is now being maintained by alibaba
-- [**1999**星][8d] [Java] [jeremylong/dependencycheck](https://github.com/jeremylong/dependencycheck) OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
-- [**1998**星][13d] [Shell] [wulabing/v2ray_ws-tls_bash_onekey](https://github.com/wulabing/v2ray_ws-tls_bash_onekey) V2Ray Nginx+vmess+ws+tls/ http2 over tls 一键安装脚本
-- [**1992**星][25d] [Swift] [github/softu2f](https://github.com/github/softu2f) Software U2F authenticator for macOS
-- [**1991**星][29d] [qazbnm456/awesome-cve-poc](https://github.com/qazbnm456/awesome-cve-poc) CVE PoC列表
-- [**1990**星][4m] [swiftonsecurity/sysmon-config](https://github.com/swiftonsecurity/sysmon-config) Sysmon configuration file template with default high-quality event tracing
-- [**1988**星][4y] [Go] [yahoo/gryffin](https://github.com/yahoo/gryffin) Gryffin is a large scale web security scanning platform.
-- [**1987**星][7m] [Py] [fsecurelabs/drozer](https://github.com/FSecureLABS/drozer) The Leading Security Assessment Framework for Android.
-- [**1983**星][2y] [dloss/python-pentest-tools](https://github.com/dloss/python-pentest-tools) 可用于渗透测试的Python工具收集
-- [**1983**星][2m] [C++] [asmjit/asmjit](https://github.com/asmjit/asmjit) Complete x86/x64 JIT and AOT Assembler for C++
-- [**1976**星][3m] [infosecn1nja/ad-attack-defense](https://github.com/infosecn1nja/ad-attack-defense) Attack and defend active directory using modern post exploitation adversary tradecraft activity
-- [**1967**星][26d] [Java] [genymobile/gnirehtet](https://github.com/genymobile/gnirehtet) Gnirehtet provides reverse tethering for Android
-- [**1965**星][9m] [JS] [weichiachang/stacks-cli](https://github.com/weichiachang/stacks-cli) Check website stack from the terminal
-- [**1963**星][11d] [HTML] [gtfobins/gtfobins.github.io](https://github.com/gtfobins/gtfobins.github.io) Curated list of Unix binaries that can be exploited to bypass system security restrictions
-- [**1963**星][27d] [Java] [elderdrivers/edxposed](https://github.com/elderdrivers/edxposed) Elder driver Xposed Framework.
-- [**1962**星][1m] [Py] [momosecurity/aswan](https://github.com/momosecurity/aswan) 陌陌风控系统静态规则引擎,零基础简易便捷的配置多种复杂规则,实时高效管控用户异常行为。
-- [**1958**星][26d] [C#] [mathewsachin/captura](https://github.com/mathewsachin/captura) Capture Screen, Audio, Cursor, Mouse Clicks and Keystrokes
-- [**1957**星][9d] [Go] [ullaakut/cameradar](https://github.com/Ullaakut/cameradar) Cameradar hacks its way into RTSP videosurveillance cameras
-- [**1954**星][1y] [BitBake] [1n3/intruderpayloads](https://github.com/1n3/intruderpayloads) A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.
-- [**1946**星][2y] [obfuscator-llvm/obfuscator](https://github.com/obfuscator-llvm/obfuscator) Obfuscator-LLVM
-- [**1945**星][7d] [Perl] [spiderlabs/owasp-modsecurity-crs](https://github.com/spiderlabs/owasp-modsecurity-crs) OWASP ModSecurity Core Rule Set (CRS) Project (Official Repository)
-- [**1940**星][3y] [C#] [lazocoder/windows-hacks](https://github.com/lazocoder/windows-hacks) Creative and unusual things that can be done with the Windows API.
-- [**1939**星][2m] [C] [microsoft/procdump-for-linux](https://github.com/microsoft/procdump-for-linux) Linux 版本的 ProcDump
-- [**1938**星][27d] [Py] [nixawk/pentest-wiki](https://github.com/nixawk/pentest-wiki) PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.
-- [**1938**星][14d] [Py] [cea-sec/miasm](https://github.com/cea-sec/miasm) Reverse engineering framework in Python
-- [**1926**星][17d] [Go] [mpolden/echoip](https://github.com/mpolden/echoip) IP address lookup service
-- [**1913**星][5m] [C] [darkk/redsocks](https://github.com/darkk/redsocks) transparent TCP-to-proxy redirector
-- [**1912**星][3m] [toolswatch/blackhat-arsenal-tools](https://github.com/toolswatch/blackhat-arsenal-tools) Black Hat 武器库
-- [**1911**星][3y] [Py] [aoncyberlabs/windows-exploit-suggester](https://github.com/AonCyberLabs/Windows-Exploit-Suggester) This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules available for the missing bulletins.
-- [**1911**星][8d] [C] [ntop/ndpi](https://github.com/ntop/ndpi) Open Source Deep Packet Inspection Software Toolkit
-- [**1909**星][3d] [Go] [projectdiscovery/subfinder](https://github.com/projectdiscovery/subfinder) Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.
-- [**1909**星][9d] [Py] [j3ssie/osmedeus](https://github.com/j3ssie/osmedeus) Fully automated offensive security framework for reconnaissance and vulnerability scanning
-- [**1908**星][7d] [C++] [powerdns/pdns](https://github.com/powerdns/pdns) PowerDNS
-- [**1907**星][16d] [Py] [lanjelot/patator](https://github.com/lanjelot/patator) Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.
-- [**1906**星][13d] [CSS] [cyb3rward0g/helk](https://github.com/cyb3rward0g/helk) 对ELK栈进行分析,具备多种高级功能,例如SQL声明性语言,图形,结构化流,机器学习等
-- [**1902**星][7d] [Go] [solo-io/gloo](https://github.com/solo-io/gloo) An Envoy-Powered API Gateway
-- [**1901**星][3m] [Go] [minishift/minishift](https://github.com/minishift/minishift) Run OpenShift 3.x locally
-- [**1892**星][19d] [C] [chipsec/chipsec](https://github.com/chipsec/chipsec) 分析PC平台的安全性, 包括硬件、系统固件(BIOS/UEFI)和平台组件
-- [**1891**星][7d] [Py] [mozilla/mozdef](https://github.com/mozilla/mozdef) Mozilla Enterprise Defense Platform
-- [**1886**星][8d] [Go] [chaitin/xray](https://github.com/chaitin/xray) xray 安全评估工具 | 使用之前务必先阅读文档
-- [**1880**星][14d] [C++] [mhammond/pywin32](https://github.com/mhammond/pywin32) Python for Windows (pywin32) Extensions
-- [**1878**星][4m] [C] [shadowsocks/simple-obfs](https://github.com/shadowsocks/simple-obfs) A simple obfuscating tool (Deprecated)
-- [**1876**星][7d] [Shell] [toniblyx/prowler](https://github.com/toniblyx/prowler) AWS Security Best Practices Assessment, Auditing, Hardening and Forensics Readiness Tool. It follows guidelines of the CIS Amazon Web Services Foundations Benchmark and DOZENS of additional checks including GDPR and HIPAA (+100). Official CIS for AWS guide:
-- [**1876**星][5y] [C++] [tum-vision/lsd_slam](https://github.com/tum-vision/lsd_slam) LSD-SLAM
-- [**1876**星][4m] [Py] [python-security/pyt](https://github.com/python-security/pyt) Python Web App 安全漏洞检测和静态分析工具
-- [**1876**星][6m] [Java] [fuzion24/justtrustme](https://github.com/fuzion24/justtrustme) An xposed module that disables SSL certificate checking for the purposes of auditing an app with cert pinning
-- [**1876**星][1y] [Py] [aploium/zmirror](https://github.com/aploium/zmirror) The next-gen reverse proxy for full site mirroring
-- [**1869**星][13d] [YARA] [yara-rules/rules](https://github.com/yara-rules/rules) Repository of yara rules
-- [**1868**星][1y] [Py] [derv82/wifite2](https://github.com/derv82/wifite2) 无线网络审计工具wifite 的升级版/重制版
-- [**1867**星][2m] [Py] [pycqa/bandit](https://github.com/pycqa/bandit) 在Python代码中查找常见的安全问题
-- [**1864**星][7d] [C] [merbanan/rtl_433](https://github.com/merbanan/rtl_433) Program to decode traffic from Devices that are broadcasting on 433.9 MHz like temperature sensors
-- [**1863**星][4y] [Objective-C] [xcodeghostsource/xcodeghost](https://github.com/xcodeghostsource/xcodeghost) "XcodeGhost" Source
-- [**1861**星][10m] [PHP] [bartblaze/php-backdoors](https://github.com/bartblaze/php-backdoors) A collection of PHP backdoors. For educational or testing purposes only.
-- [**1861**星][4m] [Java] [adoptopenjdk/jitwatch](https://github.com/adoptopenjdk/jitwatch) Log analyser / visualiser for Java HotSpot JIT compiler. Inspect inlining decisions, hot methods, bytecode, and assembly. View results in the JavaFX user interface.
-- [**1858**星][10d] [Py] [aquasecurity/kube-hunter](https://github.com/aquasecurity/kube-hunter) Hunt for security weaknesses in Kubernetes clusters
-- [**1857**星][21d] [C] [tinyproxy/tinyproxy](https://github.com/tinyproxy/tinyproxy) a light-weight HTTP/HTTPS proxy daemon for POSIX operating systems
-- [**1857**星][7d] [olivierlaflamme/cheatsheet-god](https://github.com/olivierlaflamme/cheatsheet-god) Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet
-- [**1849**星][11m] [C++] [googlecreativelab/open-nsynth-super](https://github.com/googlecreativelab/open-nsynth-super) Open NSynth Super is an experimental physical interface for the NSynth algorithm
-- [**1848**星][29d] [C] [github/glb-director](https://github.com/github/glb-director) GitHub Load Balancer Director and supporting tooling.
-- [**1846**星][8m] [Py] [netflix-skunkworks/stethoscope](https://github.com/Netflix-Skunkworks/stethoscope) Personalized, user-focused recommendations for employee information security.
-- [**1845**星][2m] [Py] [pwnlandia/mhn](https://github.com/pwnlandia/mhn) 蜜罐网络
-- [**1844**星][8d] [TypeScript] [snyk/snyk](https://github.com/snyk/snyk) CLI and build-time tool to find & fix known vulnerabilities in open-source dependencies
-- [**1842**星][1y] [Java] [jindrapetrik/jpexs-decompiler](https://github.com/jindrapetrik/jpexs-decompiler) JPEXS Free Flash Decompiler
-- [**1841**星][13d] [C++] [acidanthera/lilu](https://github.com/acidanthera/Lilu) Arbitrary kext and process patching on macOS
+- [**2105**星][8m] [Py] [linkedin/qark](https://github.com/linkedin/qark) 查找Android App的漏洞, 支持源码或APK文件
+- [**2103**星][3m] [yeahhub/hacking-security-ebooks](https://github.com/yeahhub/hacking-security-ebooks) Top 100 Hacking & Security E-Books (Free Download)
+- [**2103**星][23d] [infoslack/awesome-web-hacking](https://github.com/infoslack/awesome-web-hacking) A list of web application security
+- [**2095**星][2d] [C] [wireguard/wireguard](https://github.com/wireguard/wireguard) fast, modern, secure kernel VPN tunnel
+- [**2093**星][22d] [Ruby] [urbanadventurer/whatweb](https://github.com/urbanadventurer/whatweb) Next generation web scanner
+- [**2084**星][5d] [C] [flatpak/flatpak](https://github.com/flatpak/flatpak) Linux application sandboxing and distribution framework
+- [**2078**星][1m] [Go] [theupdateframework/notary](https://github.com/theupdateframework/notary) Notary is a project that allows anyone to have trust over arbitrary collections of data
+- [**2071**星][15d] [Shell] [wulabing/v2ray_ws-tls_bash_onekey](https://github.com/wulabing/v2ray_ws-tls_bash_onekey) V2Ray Nginx+vmess+ws+tls/ http2 over tls 一键安装脚本
+- [**2066**星][9m] [jermic/android-crack-tool](https://github.com/jermic/android-crack-tool)
+- [**2058**星][4m] [Py] [whaleshark-team/cobra](https://github.com/WhaleShark-Team/cobra) Source Code Security Audit (源代码安全审计)
+- [**2057**星][1y] [bluscreenofjeff/red-team-infrastructure-wiki](https://github.com/bluscreenofjeff/red-team-infrastructure-wiki) Wiki to collect Red Team infrastructure hardening resources
+- [**2054**星][7d] [swiftonsecurity/sysmon-config](https://github.com/swiftonsecurity/sysmon-config) Sysmon configuration file template with default high-quality event tracing
+- [**2051**星][2m] [tanprathan/mobileapp-pentest-cheatsheet](https://github.com/tanprathan/mobileapp-pentest-cheatsheet) The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.
+- [**2048**星][6m] [Go] [maxmcd/webtty](https://github.com/maxmcd/webtty) Share a terminal session over WebRTC
+- [**2047**星][1m] [edoverflow/bugbounty-cheatsheet](https://github.com/edoverflow/bugbounty-cheatsheet) A list of interesting payloads, tips and tricks for bug bounty hunters.
+- [**2045**星][2m] [C++] [lordnoteworthy/al-khaser](https://github.com/lordnoteworthy/al-khaser) 在野恶意软件使用的技术:虚拟机,仿真,调试器,沙盒检测。
+- [**2045**星][8m] [Shell] [foospidy/payloads](https://github.com/foospidy/payloads) web 攻击 Payload 集合
+- [**2043**星][12d] [Py] [nabla-c0d3/sslyze](https://github.com/nabla-c0d3/sslyze) SSL/TLS服务器扫描
+- [**2042**星][2y] [Py] [derv82/wifite](https://github.com/derv82/wifite) 自动化无线攻击工具
+- [**2039**星][5d] [C++] [openthread/openthread](https://github.com/openthread/openthread) OpenThread released by Google is an open-source implementation of the Thread networking protocol
+- [**2033**星][2d] [ObjC] [ios-control/ios-deploy](https://github.com/ios-control/ios-deploy) Install and debug iPhone apps from the command line, without using Xcode
+- [**2033**星][2d] [Py] [sensepost/objection](https://github.com/sensepost/objection) runtimemobile exploration
+- [**2029**星][3d] [Go] [goodrain/rainbond](https://github.com/goodrain/rainbond) Enterprise application cloud operating system(企业应用云操作系统)
+- [**2025**星][5y] [CoffeeScript] [shadowsocks/shadowsocks-gui](https://github.com/shadowsocks/shadowsocks-gui) Shadowsocks GUI client
+- [**2024**星][2d] [C++] [darthton/blackbone](https://github.com/darthton/blackbone) Windows memory hacking library
+- [**2017**星][3y] [Swift] [urinx/iosapphook](https://github.com/urinx/iosapphook) 专注于非越狱环境下iOS应用逆向研究,从dylib注入,应用重签名到App Hook
+- [**2016**星][23d] [Java] [genymobile/gnirehtet](https://github.com/genymobile/gnirehtet) Gnirehtet provides reverse tethering for Android
+- [**2016**星][9m] [C] [dekunukem/nintendo_switch_reverse_engineering](https://github.com/dekunukem/nintendo_switch_reverse_engineering) A look at inner workings of Joycon and Nintendo Switch
+- [**2014**星][1y] [C] [xoreaxeaxeax/rosenbridge](https://github.com/xoreaxeaxeax/rosenbridge) Hardware backdoors in some x86 CPUs
+- [**2014**星][5d] [Java] [jeremylong/dependencycheck](https://github.com/jeremylong/dependencycheck) OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
+- [**2005**星][4y] [C] [probablycorey/wax](https://github.com/probablycorey/wax) Wax is now being maintained by alibaba
+- [**2003**星][2m] [Go] [skynetservices/skydns](https://github.com/skynetservices/skydns) DNS service discovery for etcd
+- [**2000**星][1m] [qazbnm456/awesome-cve-poc](https://github.com/qazbnm456/awesome-cve-poc) CVE PoC列表
+- [**1996**星][29d] [Java] [elderdrivers/edxposed](https://github.com/elderdrivers/edxposed) Elder driver Xposed Framework.
+- [**1994**星][7m] [Py] [fsecurelabs/drozer](https://github.com/FSecureLABS/drozer) The Leading Security Assessment Framework for Android.
+- [**1994**星][3m] [infosecn1nja/ad-attack-defense](https://github.com/infosecn1nja/ad-attack-defense) Attack and defend active directory using modern post exploitation adversary tradecraft activity
+- [**1994**星][27d] [Swift] [github/softu2f](https://github.com/github/softu2f) Software U2F authenticator for macOS
+- [**1992**星][5d] [C#] [mathewsachin/captura](https://github.com/mathewsachin/captura) Capture Screen, Audio, Cursor, Mouse Clicks and Keystrokes
+- [**1990**星][8d] [HTML] [gtfobins/gtfobins.github.io](https://github.com/gtfobins/gtfobins.github.io) Curated list of Unix binaries that can be exploited to bypass system security restrictions
+- [**1989**星][4y] [Go] [yahoo/gryffin](https://github.com/yahoo/gryffin) Gryffin is a large scale web security scanning platform.
+- [**1989**星][2m] [C++] [asmjit/asmjit](https://github.com/asmjit/asmjit) Complete x86/x64 JIT and AOT Assembler for C++
+- [**1987**星][2y] [dloss/python-pentest-tools](https://github.com/dloss/python-pentest-tools) 可用于渗透测试的Python工具收集
+- [**1977**星][5d] [Go] [projectdiscovery/subfinder](https://github.com/projectdiscovery/subfinder) Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.
+- [**1977**星][5d] [Go] [projectdiscovery/subfinder](https://github.com/projectdiscovery/subfinder) 使用Passive Sources, Search Engines, Pastebins, Internet Archives等查找子域名
+- [**1972**星][1m] [Py] [momosecurity/aswan](https://github.com/momosecurity/aswan) 陌陌风控系统静态规则引擎,零基础简易便捷的配置多种复杂规则,实时高效管控用户异常行为。
+- [**1971**星][5d] [Py] [j3ssie/osmedeus](https://github.com/j3ssie/osmedeus) Fully automated offensive security framework for reconnaissance and vulnerability scanning
+- [**1966**星][11d] [Go] [ullaakut/cameradar](https://github.com/Ullaakut/cameradar) Cameradar hacks its way into RTSP videosurveillance cameras
+- [**1966**星][9m] [JS] [weichiachang/stacks-cli](https://github.com/weichiachang/stacks-cli) Check website stack from the terminal
+- [**1966**星][1y] [BitBake] [1n3/intruderpayloads](https://github.com/1n3/intruderpayloads) A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.
+- [**1955**星][7d] [Perl] [spiderlabs/owasp-modsecurity-crs](https://github.com/spiderlabs/owasp-modsecurity-crs) OWASP ModSecurity Core Rule Set (CRS) Project (Official Repository)
+- [**1953**星][2y] [obfuscator-llvm/obfuscator](https://github.com/obfuscator-llvm/obfuscator) Obfuscator-LLVM
+- [**1952**星][1y] [Go] [hyperhq/hyperd](https://github.com/hyperhq/hyperd) HyperContainer Daemon
+- [**1951**星][8d] [Py] [cea-sec/miasm](https://github.com/cea-sec/miasm) Reverse engineering framework in Python
+- [**1947**星][29d] [Py] [nixawk/pentest-wiki](https://github.com/nixawk/pentest-wiki) PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.
+- [**1945**星][5d] [C] [microsoft/procdump-for-linux](https://github.com/microsoft/procdump-for-linux) Linux 版本的 ProcDump
+- [**1942**星][3y] [C#] [lazocoder/windows-hacks](https://github.com/lazocoder/windows-hacks) Creative and unusual things that can be done with the Windows API.
+- [**1938**星][4m] [C] [meituan-dianping/logan](https://github.com/meituan-dianping/logan) Logan is a lightweight case logging system based on mobile platform.
+- [**1938**星][7d] [Go] [zalando/skipper](https://github.com/zalando/skipper) An HTTP router and reverse proxy for service composition, including use cases like Kubernetes Ingress
+- [**1935**星][19d] [Go] [mpolden/echoip](https://github.com/mpolden/echoip) IP address lookup service
+- [**1933**星][5m] [C] [darkk/redsocks](https://github.com/darkk/redsocks) transparent TCP-to-proxy redirector
+- [**1923**星][3y] [Py] [aoncyberlabs/windows-exploit-suggester](https://github.com/AonCyberLabs/Windows-Exploit-Suggester) This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules available for the missing bulletins.
+- [**1920**星][4y] [Py] [ziggear/shadowsocks](https://github.com/ziggear/shadowsocks) backup of
+- [**1920**星][2d] [C++] [powerdns/pdns](https://github.com/powerdns/pdns) PowerDNS
+- [**1920**星][9d] [CSS] [cyb3rward0g/helk](https://github.com/cyb3rward0g/helk) 对ELK栈进行分析,具备多种高级功能,例如SQL声明性语言,图形,结构化流,机器学习等
+- [**1918**星][3m] [toolswatch/blackhat-arsenal-tools](https://github.com/toolswatch/blackhat-arsenal-tools) Black Hat 武器库
+- [**1917**星][2d] [C] [ntop/ndpi](https://github.com/ntop/ndpi) Open Source Deep Packet Inspection Software Toolkit
+- [**1915**星][18d] [Py] [lanjelot/patator](https://github.com/lanjelot/patator) Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.
+- [**1914**星][7d] [Go] [solo-io/gloo](https://github.com/solo-io/gloo) An Envoy-Powered API Gateway
+- [**1914**星][2d] [chaitin/xray](https://github.com/chaitin/xray) xray 安全评估工具 | 使用之前务必先阅读文档
+- [**1903**星][3m] [Go] [minishift/minishift](https://github.com/minishift/minishift) Run OpenShift 3.x locally
+- [**1901**星][9d] [C] [chipsec/chipsec](https://github.com/chipsec/chipsec) 分析PC平台的安全性, 包括硬件、系统固件(BIOS/UEFI)和平台组件
+- [**1900**星][1y] [Py] [derv82/wifite2](https://github.com/derv82/wifite2) 无线网络审计工具wifite 的升级版/重制版
+- [**1898**星][3d] [C++] [mhammond/pywin32](https://github.com/mhammond/pywin32) Python for Windows (pywin32) Extensions
+- [**1896**星][7d] [Shell] [toniblyx/prowler](https://github.com/toniblyx/prowler) AWS Security Best Practices Assessment, Auditing, Hardening and Forensics Readiness Tool. It follows guidelines of the CIS Amazon Web Services Foundations Benchmark and DOZENS of additional checks including GDPR and HIPAA (+100). Official CIS for AWS guide:
+- [**1893**星][6d] [Py] [mozilla/mozdef](https://github.com/mozilla/mozdef) Mozilla Enterprise Defense Platform
+- [**1893**星][6m] [Java] [fuzion24/justtrustme](https://github.com/fuzion24/justtrustme) An xposed module that disables SSL certificate checking for the purposes of auditing an app with cert pinning
+- [**1886**星][4m] [C] [shadowsocks/simple-obfs](https://github.com/shadowsocks/simple-obfs) A simple obfuscating tool (Deprecated)
+- [**1884**星][1y] [Py] [aploium/zmirror](https://github.com/aploium/zmirror) The next-gen reverse proxy for full site mirroring
+- [**1880**星][4m] [Py] [python-security/pyt](https://github.com/python-security/pyt) Python Web App 安全漏洞检测和静态分析工具
+- [**1878**星][16d] [YARA] [yara-rules/rules](https://github.com/yara-rules/rules) Repository of yara rules
+- [**1878**星][5y] [C++] [tum-vision/lsd_slam](https://github.com/tum-vision/lsd_slam) LSD-SLAM
+- [**1878**星][2m] [Py] [pycqa/bandit](https://github.com/pycqa/bandit) 在Python代码中查找常见的安全问题
+- [**1877**星][2d] [C] [merbanan/rtl_433](https://github.com/merbanan/rtl_433) Program to decode traffic from Devices that are broadcasting on 433.9 MHz like temperature sensors
+- [**1876**星][9d] [olivierlaflamme/cheatsheet-god](https://github.com/olivierlaflamme/cheatsheet-god) Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet
+- [**1876**星][27d] [hmaverickadams/beginner-network-pentesting](https://github.com/hmaverickadams/beginner-network-pentesting) Notes for Beginner Network Pentesting Course
+- [**1873**星][12d] [Py] [aquasecurity/kube-hunter](https://github.com/aquasecurity/kube-hunter) Hunt for security weaknesses in Kubernetes clusters
+- [**1870**星][5d] [C#] [hmbsbige/shadowsocksr-windows](https://github.com/hmbsbige/shadowsocksr-windows) 【自用】Bug-Oriented Programming
+- [**1869**星][6d] [Java] [adoptopenjdk/jitwatch](https://github.com/adoptopenjdk/jitwatch) Log analyser / visualiser for Java HotSpot JIT compiler. Inspect inlining decisions, hot methods, bytecode, and assembly. View results in the JavaFX user interface.
+- [**1865**星][6d] [C++] [acidanthera/lilu](https://github.com/acidanthera/Lilu) Arbitrary kext and process patching on macOS
+- [**1865**星][10m] [PHP] [bartblaze/php-backdoors](https://github.com/bartblaze/php-backdoors) A collection of PHP backdoors. For educational or testing purposes only.
+- [**1864**星][23d] [C] [tinyproxy/tinyproxy](https://github.com/tinyproxy/tinyproxy) a light-weight HTTP/HTTPS proxy daemon for POSIX operating systems
+- [**1862**星][4y] [ObjC] [xcodeghostsource/xcodeghost](https://github.com/xcodeghostsource/xcodeghost) "XcodeGhost" Source
+- [**1860**星][9d] [Lua] [vulnerscom/nmap-vulners](https://github.com/vulnerscom/nmap-vulners) NSE script based on Vulners.com API
+- [**1857**星][5m] [bypass007/emergency-response-notes](https://github.com/bypass007/emergency-response-notes) 应急响应实战笔记,一个安全工程师的自我修养。
+- [**1855**星][2m] [Py] [pwnlandia/mhn](https://github.com/pwnlandia/mhn) 蜜罐网络
+- [**1854**星][5d] [TS] [snyk/snyk](https://github.com/snyk/snyk) CLI and build-time tool to find & fix known vulnerabilities in open-source dependencies
+- [**1854**星][11m] [C++] [googlecreativelab/open-nsynth-super](https://github.com/googlecreativelab/open-nsynth-super) Open NSynth Super is an experimental physical interface for the NSynth algorithm
+- [**1853**星][2d] [Py] [bregman-arie/devops-interview-questions](https://github.com/bregman-arie/devops-interview-questions) Linux, Jenkins, AWS, SRE, Prometheus, Docker, Python, Ansible, Git, Kubernetes, Terraform, OpenStack, SQL, NoSQL, Azure, GCP, DNS, Elastic
+- [**1853**星][4m] [Shell] [arismelachroinos/lscript](https://github.com/arismelachroinos/lscript) 自动化无线渗透和Hacking 任务的脚本
+- [**1852**星][3d] [C] [github/glb-director](https://github.com/github/glb-director) GitHub Load Balancer Director and supporting tooling.
+- [**1851**星][1y] [Java] [jindrapetrik/jpexs-decompiler](https://github.com/jindrapetrik/jpexs-decompiler) JPEXS Free Flash Decompiler
+- [**1848**星][6m] [Assembly] [pooler/cpuminer](https://github.com/pooler/cpuminer) cpuminer:莱特币和比特币的多线程 CPU 矿机
+- [**1847**星][8m] [Py] [netflix-skunkworks/stethoscope](https://github.com/Netflix-Skunkworks/stethoscope) Personalized, user-focused recommendations for employee information security.
+- [**1842**星][1m] [Jupyter Notebook] [hunters-forge/threathunter-playbook](https://github.com/hunters-forge/ThreatHunter-Playbook) A Threat hunter's playbook to aid the development of techniques and hypothesis for hunting campaigns.
+- [**1842**星][1y] [Java] [yeriomin/yalpstore](https://github.com/yeriomin/yalpstore) Download apks from Google Play Store
+- [**1842**星][2d] [C++] [pytorch/glow](https://github.com/pytorch/glow) Compiler for Neural Network hardware accelerators
- [**1841**星][2m] [C] [retroplasma/earth-reverse-engineering](https://github.com/retroplasma/earth-reverse-engineering) Reversing Google's 3D satellite mode
-- [**1839**星][4m] [bypass007/emergency-response-notes](https://github.com/bypass007/emergency-response-notes) 应急响应实战笔记,一个安全工程师的自我修养。
-- [**1837**星][4m] [Lua] [vulnerscom/nmap-vulners](https://github.com/vulnerscom/nmap-vulners) NSE script based on Vulners.com API
-- [**1836**星][3y] [Java] [chora10/cknife](https://github.com/chora10/cknife) Cknife
-- [**1835**星][1y] [Java] [yeriomin/yalpstore](https://github.com/yeriomin/yalpstore) Download apks from Google Play Store
-- [**1833**星][25d] [hmaverickadams/beginner-network-pentesting](https://github.com/hmaverickadams/beginner-network-pentesting) Notes for Beginner Network Pentesting Course
-- [**1832**星][4m] [Shell] [arismelachroinos/lscript](https://github.com/arismelachroinos/lscript) 自动化无线渗透和Hacking 任务的脚本
-- [**1830**星][7d] [C++] [pytorch/glow](https://github.com/pytorch/glow) Compiler for Neural Network hardware accelerators
-- [**1829**星][1y] [Py] [jinnlynn/genpac](https://github.com/jinnlynn/genpac) PAC/Dnsmasq/Wingy file Generator, working with gfwlist, support custom rules.
-- [**1827**星][1m] [Jupyter Notebook] [hunters-forge/threathunter-playbook](https://github.com/hunters-forge/ThreatHunter-Playbook) A Threat hunter's playbook to aid the development of techniques and hypothesis for hunting campaigns.
-- [**1827**星][2m] [Go] [influxdata/kapacitor](https://github.com/influxdata/kapacitor) Open source framework for processing, monitoring, and alerting on time series data
-- [**1827**星][1y] [CSS] [ctfs/write-ups-2015](https://github.com/ctfs/write-ups-2015) Wiki-like CTF write-ups repository, maintained by the community. 2015
-- [**1819**星][13d] [Py] [trailofbits/manticore](https://github.com/trailofbits/manticore) 动态二进制分析工具,支持符号执行(symbolic execution)、污点分析(taint analysis)、运行时修改。
-- [**1816**星][19d] [C] [mgba-emu/mgba](https://github.com/mgba-emu/mgba) mGBA Game Boy Advance Emulator
-- [**1814**星][7d] [Py] [bregman-arie/devops-interview-questions](https://github.com/bregman-arie/devops-interview-questions) Linux, Jenkins, AWS, SRE, Prometheus, Docker, Python, Ansible, Git, Kubernetes, Terraform, OpenStack, SQL, NoSQL, Azure, GCP, DNS, Elastic
-- [**1808**星][6m] [C++] [iagox86/dnscat2](https://github.com/iagox86/dnscat2) 在 DNS 协议上创建加密的 C&C channel
-- [**1806**星][5m] [Py] [veil-framework/veil](https://github.com/veil-framework/veil) generate metasploit payloads that bypass common anti-virus solutions
-- [**1801**星][3y] [Objective-C] [kpwn/yalu102](https://github.com/kpwn/yalu102) incomplete iOS 10.2 jailbreak for 64 bit devices by qwertyoruiopz and marcograssi
-- [**1801**星][2m] [djadmin/awesome-bug-bounty](https://github.com/djadmin/awesome-bug-bounty) A comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.
-- [**1788**星][28d] [Go] [gdamore/tcell](https://github.com/gdamore/tcell) Tcell is an alternate terminal package, similar in some ways to termbox, but better in others.
-- [**1785**星][11m] [Py] [ctfs/write-ups-2017](https://github.com/ctfs/write-ups-2017) Wiki-like CTF write-ups repository, maintained by the community. 2017
-- [**1784**星][7d] [C#] [hmbsbige/shadowsocksr-windows](https://github.com/hmbsbige/shadowsocksr-windows) 【自用】Bug-Oriented Programming
-- [**1783**星][7m] [Py] [lijiejie/subdomainsbrute](https://github.com/lijiejie/subdomainsbrute) 子域名爆破
-- [**1777**星][18d] [PHP] [ezyang/htmlpurifier](https://github.com/ezyang/htmlpurifier) Standards compliant HTML filter written in PHP
-- [**1776**星][13d] [C++] [apitrace/apitrace](https://github.com/apitrace/apitrace) Tools for tracing OpenGL, Direct3D, and other graphics APIs
-- [**1775**星][4y] [caesar0301/awesome-pcaptools](https://github.com/caesar0301/awesome-pcaptools) A collection of tools developed by other researchers in the Computer Science area to process network traces. All the right reserved for the original authors.
-- [**1774**星][1y] [aozhimin/ios-monitor-platform](https://github.com/aozhimin/ios-monitor-platform)
-- [**1770**星][3y] [Objective-C] [alibaba/wax](https://github.com/alibaba/wax) Wax is a framework that lets you write native iPhone apps in Lua.
-- [**1768**星][13d] [Shell] [leebaird/discover](https://github.com/leebaird/discover) 自定义的bash脚本, 用于自动化多个渗透测试任务, 包括: 侦查、扫描、解析、在Metasploit中创建恶意Payload和Listener
-- [**1764**星][3m] [Py] [epinna/weevely3](https://github.com/epinna/weevely3) Weaponized web shell
-- [**1759**星][12d] [C] [google/wuffs](https://github.com/google/wuffs) Wrangling Untrusted File Formats Safely
-- [**1757**星][7m] [C++] [wrbug/dumpdex](https://github.com/wrbug/dumpdex) Android脱壳
-- [**1757**星][2y] [CSS] [b374k/b374k](https://github.com/b374k/b374k) PHP Webshell with handy features
-- [**1749**星][2m] [onethawt/idaplugins-list](https://github.com/onethawt/idaplugins-list) IDA插件收集
-- [**1747**星][8d] [17mon/china_ip_list](https://github.com/17mon/china_ip_list)
-- [**1743**星][12m] [JS] [puppeteer/examples](https://github.com/puppeteer/examples) Use case-driven examples for using Puppeteer and headless chrome
-- [**1740**星][8d] [PHP] [wordpress/wordpress-coding-standards](https://github.com/wordpress/wordpress-coding-standards) PHP_CodeSniffer rules (sniffs) to enforce WordPress coding conventions
+- [**1839**星][3y] [Java] [chora10/cknife](https://github.com/chora10/cknife) Cknife
+- [**1838**星][1y] [Py] [jinnlynn/genpac](https://github.com/jinnlynn/genpac) PAC/Dnsmasq/Wingy file Generator, working with gfwlist, support custom rules.
+- [**1830**星][2m] [Go] [influxdata/kapacitor](https://github.com/influxdata/kapacitor) Open source framework for processing, monitoring, and alerting on time series data
+- [**1828**星][3m] [JS] [coreybutler/node-windows](https://github.com/coreybutler/node-windows) Windows support for Node.JS scripts (daemons, eventlog, UAC, etc).
+- [**1828**星][1y] [CSS] [ctfs/write-ups-2015](https://github.com/ctfs/write-ups-2015) Wiki-like CTF write-ups repository, maintained by the community. 2015
+- [**1824**星][5d] [Py] [trailofbits/manticore](https://github.com/trailofbits/manticore) 动态二进制分析工具,支持符号执行(symbolic execution)、污点分析(taint analysis)、运行时修改。
+- [**1819**星][6d] [C] [mgba-emu/mgba](https://github.com/mgba-emu/mgba) mGBA Game Boy Advance Emulator
+- [**1818**星][2m] [djadmin/awesome-bug-bounty](https://github.com/djadmin/awesome-bug-bounty) A comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.
+- [**1815**星][5m] [Py] [veil-framework/veil](https://github.com/veil-framework/veil) generate metasploit payloads that bypass common anti-virus solutions
+- [**1814**星][6m] [C++] [iagox86/dnscat2](https://github.com/iagox86/dnscat2) 在 DNS 协议上创建加密的 C&C channel
+- [**1804**星][10d] [Go] [gdamore/tcell](https://github.com/gdamore/tcell) Tcell is an alternate terminal package, similar in some ways to termbox, but better in others.
+- [**1801**星][12m] [Go] [intelsdi-x/snap](https://github.com/intelsdi-x/snap) an open telemetry framework designed to simplify the collection, processing and publishing of system data through a single API.
+- [**1800**星][3y] [ObjC] [kpwn/yalu102](https://github.com/kpwn/yalu102) incomplete iOS 10.2 jailbreak for 64 bit devices by qwertyoruiopz and marcograssi
+- [**1795**星][7m] [Py] [lijiejie/subdomainsbrute](https://github.com/lijiejie/subdomainsbrute) 子域名爆破
+- [**1790**星][12m] [Py] [ctfs/write-ups-2017](https://github.com/ctfs/write-ups-2017) Wiki-like CTF write-ups repository, maintained by the community. 2017
+- [**1785**星][1y] [aozhimin/ios-monitor-platform](https://github.com/aozhimin/ios-monitor-platform)
+- [**1784**星][16d] [Shell] [pirate/wireguard-docs](https://github.com/pirate/wireguard-docs)
+- [**1781**星][15d] [Shell] [leebaird/discover](https://github.com/leebaird/discover) 自定义的bash脚本, 用于自动化多个渗透测试任务, 包括: 侦查、扫描、解析、在Metasploit中创建恶意Payload和Listener
+- [**1779**星][4y] [caesar0301/awesome-pcaptools](https://github.com/caesar0301/awesome-pcaptools) A collection of tools developed by other researchers in the Computer Science area to process network traces. All the right reserved for the original authors.
+- [**1778**星][15d] [C++] [apitrace/apitrace](https://github.com/apitrace/apitrace) Tools for tracing OpenGL, Direct3D, and other graphics APIs
+- [**1777**星][7m] [C++] [wrbug/dumpdex](https://github.com/wrbug/dumpdex) Android脱壳
+- [**1777**星][7d] [PHP] [ezyang/htmlpurifier](https://github.com/ezyang/htmlpurifier) Standards compliant HTML filter written in PHP
+- [**1777**星][5d] [Go] [convox/rack](https://github.com/convox/rack) Private PaaS built on native AWS services for maximum privacy and minimum upkeep
+- [**1774**星][3y] [ObjC] [tapwork/heapinspector-for-ios](https://github.com/tapwork/heapinspector-for-ios) Find memory issues & leaks in your iOS app without instruments
+- [**1774**星][3m] [Py] [epinna/weevely3](https://github.com/epinna/weevely3) Weaponized web shell
+- [**1772**星][2y] [JS] [cazala/coin-hive](https://github.com/cazala/coin-hive) CoinHive cryptocurrency miner for node.js
+- [**1770**星][3y] [ObjC] [alibaba/wax](https://github.com/alibaba/wax) Wax is a framework that lets you write native iPhone apps in Lua.
+- [**1761**星][6d] [C] [google/wuffs](https://github.com/google/wuffs) Wrangling Untrusted File Formats Safely
+- [**1761**星][2y] [CSS] [b374k/b374k](https://github.com/b374k/b374k) PHP Webshell with handy features
+- [**1760**星][3y] [Go] [elastic/logstash-forwarder](https://github.com/elastic/logstash-forwarder) An experiment to cut logs in preparation for processing elsewhere. Replaced by Filebeat:
+- [**1758**星][12m] [JS] [puppeteer/examples](https://github.com/puppeteer/examples) Use case-driven examples for using Puppeteer and headless chrome
+- [**1756**星][10d] [17mon/china_ip_list](https://github.com/17mon/china_ip_list)
+- [**1754**星][2m] [onethawt/idaplugins-list](https://github.com/onethawt/idaplugins-list) IDA插件收集
+- [**1747**星][2d] [PHP] [wordpress/wordpress-coding-standards](https://github.com/wordpress/wordpress-coding-standards) PHP_CodeSniffer rules (sniffs) to enforce WordPress coding conventions
+- [**1745**星][1y] [PS] [fuzzysecurity/powershell-suite](https://github.com/fuzzysecurity/powershell-suite) My musings with PowerShell
+- [**1744**星][1y] [coreb1t/awesome-pentest-cheat-sheets](https://github.com/coreb1t/awesome-pentest-cheat-sheets) Collection of the cheat sheets useful for pentesting
+- [**1742**星][3m] [tunz/js-vuln-db](https://github.com/tunz/js-vuln-db) A collection of JavaScript engine CVEs with PoCs
+- [**1739**星][21d] [ngalongc/bug-bounty-reference](https://github.com/ngalongc/bug-bounty-reference) Inspired by
- [**1738**星][2y] [Go] [vzex/dog-tunnel](https://github.com/vzex/dog-tunnel) p2p tunnel,(udp mode work with kcp,
-- [**1734**星][3m] [tunz/js-vuln-db](https://github.com/tunz/js-vuln-db) A collection of JavaScript engine CVEs with PoCs
-- [**1732**星][1y] [coreb1t/awesome-pentest-cheat-sheets](https://github.com/coreb1t/awesome-pentest-cheat-sheets) Collection of the cheat sheets useful for pentesting
-- [**1727**星][2m] [PHP] [orangetw/my-ctf-web-challenges](https://github.com/orangetw/my-ctf-web-challenges) Collection of CTF Web challenges I made
-- [**1726**星][3y] [Go] [s-rah/onionscan](https://github.com/s-rah/onionscan) OnionScan is a free and open source tool for investigating the Dark Web.
-- [**1723**星][6m] [Smali] [ahmyth/ahmyth-android-rat](https://github.com/ahmyth/ahmyth-android-rat) Android Remote Administration Tool
-- [**1722**星][1y] [PowerShell] [fuzzysecurity/powershell-suite](https://github.com/fuzzysecurity/powershell-suite) My musings with PowerShell
-- [**1720**星][19d] [ngalongc/bug-bounty-reference](https://github.com/ngalongc/bug-bounty-reference) Inspired by
-- [**1718**星][1m] [PowerShell] [fireeye/flare-vm](https://github.com/fireeye/flare-vm) 火眼发布用于 Windows 恶意代码分析的虚拟机:FLARE VM
-- [**1717**星][7d] [C] [google/honggfuzz](https://github.com/google/honggfuzz) Security oriented fuzzer with powerful analysis options. Supports evolutionary, feedback-driven fuzzing based on code coverage (software- and hardware-based)
-- [**1714**星][2m] [Go] [subfinder/subfinder](https://github.com/subfinder/subfinder) 使用Passive Sources, Search Engines, Pastebins, Internet Archives等查找子域名
-- [**1709**星][9m] [Py] [constverum/proxybroker](https://github.com/constverum/proxybroker) Proxy [Finder | Checker | Server]. HTTP(S) & SOCKS
-- [**1708**星][10d] [Ruby] [cliffe/secgen](https://github.com/cliffe/secgen) Create randomly insecure VMs
-- [**1705**星][4m] [Py] [lgandx/responder](https://github.com/lgandx/responder) Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.
-- [**1702**星][1y] [Java] [ac-pm/inspeckage](https://github.com/ac-pm/inspeckage) Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)
-- [**1695**星][1m] [Go] [eth0izzle/shhgit](https://github.com/eth0izzle/shhgit) 监听Github Event API,实时查找Github代码和Gist中的secret和敏感文件
-- [**1694**星][3m] [PHP] [xtr4nge/fruitywifi](https://github.com/xtr4nge/fruitywifi) FruityWiFi is a wireless network auditing tool. The application can be installed in any Debian based system (Jessie) adding the extra packages. Tested in Debian, Kali Linux, Kali Linux ARM (Raspberry Pi), Raspbian (Raspberry Pi), Pwnpi (Raspberry Pi), Bugtraq, NetHunter.
-- [**1694**星][3y] [CoffeeScript] [okturtles/dnschain](https://github.com/okturtles/dnschain) A blockchain-based DNS + HTTP server that fixes HTTPS security, and more!
-- [**1694**星][1y] [Swift] [haxpor/potatso](https://github.com/haxpor/potatso) Potatso is an iOS client that implements Shadowsocks proxy with the leverage of NetworkExtension framework. ***This project is unmaintained, try taking a look at this fork
-- [**1694**星][14d] [Go] [hashicorp/memberlist](https://github.com/hashicorp/memberlist) Golang package for gossip based membership and failure detection
-- [**1693**星][8m] [Py] [guelfoweb/knock](https://github.com/guelfoweb/knock) 使用 Wordlist 枚举子域名
-- [**1693**星][7d] [TSQL] [brentozarultd/sql-server-first-responder-kit](https://github.com/brentozarultd/sql-server-first-responder-kit) sp_Blitz, sp_BlitzCache, sp_BlitzFirst, sp_BlitzIndex, and other SQL Server scripts for health checks and performance tuning.
-- [**1693**星][3m] [Py] [anorov/cloudflare-scrape](https://github.com/anorov/cloudflare-scrape) A Python module to bypass Cloudflare's anti-bot page.
-- [**1691**星][6m] [Py] [yelp/osxcollector](https://github.com/yelp/osxcollector) A forensic evidence collection & analysis toolkit for OS X
-- [**1687**星][4m] [JS] [expressjs/csurf](https://github.com/expressjs/csurf) CSRF token middleware
-- [**1685**星][5m] [C] [networkprotocol/netcode.io](https://github.com/networkprotocol/netcode.io) A protocol for secure client/server connections over UDP
-- [**1682**星][8m] [Makefile] [raspberrypi/noobs](https://github.com/raspberrypi/noobs) NOOBS (New Out Of Box Software) - An easy Operating System install manager for the Raspberry Pi
-- [**1682**星][1y] [owasp/devguide](https://github.com/owasp/devguide) The OWASP Guide
-- [**1681**星][13d] [HTML] [chromium/badssl.com](https://github.com/chromium/badssl.com)
-- [**1681**星][9m] [CSS] [bagder/http2-explained](https://github.com/bagder/http2-explained) A detailed document explaining and documenting HTTP/2, the successor to the widely popular HTTP/1.1 protocol
-- [**1676**星][28d] [Swift] [pmusolino/wormholy](https://github.com/pmusolino/wormholy) iOS network debugging, like a wizard 🧙♂️
-- [**1675**星][4m] [R] [briatte/awesome-network-analysis](https://github.com/briatte/awesome-network-analysis) A curated list of awesome network analysis resources.
-- [**1674**星][2m] [Py] [rootm0s/winpwnage](https://github.com/rootm0s/winpwnage) UAC bypass, Elevate, Persistence and Execution methods
-- [**1668**星][7m] [C++] [yegord/snowman](https://github.com/yegord/snowman) Snowman反编译器,支持x86, AMD64, ARM。有独立的GUI工具、命令行工具、IDA/Radare2/x64dbg插件,也可以作为库使用
+- [**1735**星][2m] [PHP] [orangetw/my-ctf-web-challenges](https://github.com/orangetw/my-ctf-web-challenges) Collection of CTF Web challenges I made
+- [**1731**星][1m] [PS] [fireeye/flare-vm](https://github.com/fireeye/flare-vm) 火眼发布用于 Windows 恶意代码分析的虚拟机:FLARE VM
+- [**1730**星][3y] [Go] [s-rah/onionscan](https://github.com/s-rah/onionscan) OnionScan is a free and open source tool for investigating the Dark Web.
+- [**1730**星][6m] [Smali] [ahmyth/ahmyth-android-rat](https://github.com/ahmyth/ahmyth-android-rat) Android Remote Administration Tool
+- [**1723**星][14d] [selierlin/share-ssr-v2ray](https://github.com/selierlin/share-ssr-v2ray)
+- [**1719**星][4d] [C] [google/honggfuzz](https://github.com/google/honggfuzz) Security oriented fuzzer with powerful analysis options. Supports evolutionary, feedback-driven fuzzing based on code coverage (software- and hardware-based)
+- [**1718**星][9m] [Py] [constverum/proxybroker](https://github.com/constverum/proxybroker) Proxy [Finder | Checker | Server]. HTTP(S) & SOCKS
+- [**1717**星][4m] [Py] [lgandx/responder](https://github.com/lgandx/responder) Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.
+- [**1714**星][5d] [Ruby] [cliffe/secgen](https://github.com/cliffe/secgen) Create randomly insecure VMs
+- [**1710**星][1m] [Go] [eth0izzle/shhgit](https://github.com/eth0izzle/shhgit) 监听Github Event API,实时查找Github代码和Gist中的secret和敏感文件
+- [**1709**星][3m] [Py] [anorov/cloudflare-scrape](https://github.com/anorov/cloudflare-scrape) A Python module to bypass Cloudflare's anti-bot page.
+- [**1709**星][1y] [Java] [ac-pm/inspeckage](https://github.com/ac-pm/inspeckage) Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)
+- [**1707**星][3d] [TSQL] [brentozarultd/sql-server-first-responder-kit](https://github.com/brentozarultd/sql-server-first-responder-kit) sp_Blitz, sp_BlitzCache, sp_BlitzFirst, sp_BlitzIndex, and other SQL Server scripts for health checks and performance tuning.
+- [**1706**星][16d] [Go] [hashicorp/memberlist](https://github.com/hashicorp/memberlist) Golang package for gossip based membership and failure detection
+- [**1700**星][8m] [Py] [guelfoweb/knock](https://github.com/guelfoweb/knock) 使用 Wordlist 枚举子域名
+- [**1697**星][9m] [CSS] [bagder/http2-explained](https://github.com/bagder/http2-explained) A detailed document explaining and documenting HTTP/2, the successor to the widely popular HTTP/1.1 protocol
+- [**1696**星][3m] [PHP] [xtr4nge/fruitywifi](https://github.com/xtr4nge/fruitywifi) FruityWiFi is a wireless network auditing tool. The application can be installed in any Debian based system (Jessie) adding the extra packages. Tested in Debian, Kali Linux, Kali Linux ARM (Raspberry Pi), Raspbian (Raspberry Pi), Pwnpi (Raspberry Pi), Bugtraq, NetHunter.
+- [**1696**星][1y] [Swift] [haxpor/potatso](https://github.com/haxpor/potatso) Potatso is an iOS client that implements Shadowsocks proxy with the leverage of NetworkExtension framework. ***This project is unmaintained, try taking a look at this fork
+- [**1695**星][6m] [Py] [yelp/osxcollector](https://github.com/yelp/osxcollector) A forensic evidence collection & analysis toolkit for OS X
+- [**1695**星][3y] [CoffeeScript] [okturtles/dnschain](https://github.com/okturtles/dnschain) A blockchain-based DNS + HTTP server that fixes HTTPS security, and more!
+- [**1689**星][5m] [C] [networkprotocol/netcode.io](https://github.com/networkprotocol/netcode.io) A protocol for secure client/server connections over UDP
+- [**1687**星][5m] [JS] [expressjs/csurf](https://github.com/expressjs/csurf) CSRF token middleware
+- [**1687**星][15d] [HTML] [chromium/badssl.com](https://github.com/chromium/badssl.com)
+- [**1686**星][8m] [Makefile] [raspberrypi/noobs](https://github.com/raspberrypi/noobs) NOOBS (New Out Of Box Software) - An easy Operating System install manager for the Raspberry Pi
+- [**1685**星][4m] [R] [briatte/awesome-network-analysis](https://github.com/briatte/awesome-network-analysis) A curated list of awesome network analysis resources.
+- [**1683**星][1y] [owasp/devguide](https://github.com/owasp/devguide) The OWASP Guide
+- [**1682**星][3m] [Py] [rootm0s/winpwnage](https://github.com/rootm0s/winpwnage) UAC bypass, Elevate, Persistence and Execution methods
+- [**1677**星][30d] [Swift] [pmusolino/wormholy](https://github.com/pmusolino/wormholy) iOS network debugging, like a wizard 🧙♂️
+- [**1674**星][2d] [C++] [microsoft/detours](https://github.com/microsoft/detours) Detours is a software package for monitoring and instrumenting API calls on Windows. It is distributed in source code form.
+- [**1671**星][7m] [C++] [yegord/snowman](https://github.com/yegord/snowman) Snowman反编译器,支持x86, AMD64, ARM。有独立的GUI工具、命令行工具、IDA/Radare2/x64dbg插件,也可以作为库使用
- [IDA插件](https://github.com/yegord/snowman/tree/master/src/ida-plugin)
- [snowman](https://github.com/yegord/snowman/tree/master/src/snowman) QT界面
- [nocode](https://github.com/yegord/snowman/tree/master/src/nocode) 命令行工具
- [nc](https://github.com/yegord/snowman/tree/master/src/nc) 核心代码,可作为库使用
-- [**1665**星][6m] [C++] [microsoft/detours](https://github.com/microsoft/detours) Detours is a software package for monitoring and instrumenting API calls on Windows. It is distributed in source code form.
-- [**1662**星][12d] [selierlin/share-ssr-v2ray](https://github.com/selierlin/share-ssr-v2ray)
-- [**1662**星][4y] [Java] [dodola/hotfix](https://github.com/dodola/hotfix) 安卓App热补丁动态修复框架
-- [**1659**星][7d] [Java] [apache/geode](https://github.com/apache/geode) Apache Geode
-- [**1655**星][6m] [C] [easyhook/easyhook](https://github.com/easyhook/easyhook) The reinvention of Windows API Hooking
-- [**1654**星][3m] [JS] [tylerbrock/mongo-hacker](https://github.com/tylerbrock/mongo-hacker) MongoDB Shell Enhancements for Hackers
-- [**1653**星][2m] [NSIS] [angryip/ipscan](https://github.com/angryip/ipscan) Angry IP Scanner - fast and friendly network scanner
-- [**1651**星][7d] [Py] [cea-sec/ivre](https://github.com/cea-sec/ivre) Network recon framework.
-- [**1650**星][2y] [Shell] [juude/droidreverse](https://github.com/juude/droidreverse) android 逆向工程工具集
-- [**1649**星][10m] [JS] [evilcos/xssor2](https://github.com/evilcos/xssor2) XSS'OR - Hack with JavaScript.
-- [**1647**星][3m] [Py] [boppreh/keyboard](https://github.com/boppreh/keyboard) Hook and simulate global keyboard events on Windows and Linux.
-- [**1646**星][8d] [roave/securityadvisories](https://github.com/roave/securityadvisories) ensures that your application doesn't have installed dependencies with known security vulnerabilities
-- [**1646**星][8d] [JS] [ghacksuserjs/ghacks-user.js](https://github.com/ghacksuserjs/ghacks-user.js) An ongoing comprehensive user.js template for configuring and hardening Firefox privacy, security and anti-fingerprinting
+- [**1668**星][2m] [NSIS] [angryip/ipscan](https://github.com/angryip/ipscan) Angry IP Scanner - fast and friendly network scanner
+- [**1666**星][2d] [Java] [apache/geode](https://github.com/apache/geode) Apache Geode
+- [**1663**星][4y] [Java] [dodola/hotfix](https://github.com/dodola/hotfix) 安卓App热补丁动态修复框架
+- [**1661**星][6m] [C] [easyhook/easyhook](https://github.com/easyhook/easyhook) The reinvention of Windows API Hooking
+- [**1661**星][2d] [Py] [cea-sec/ivre](https://github.com/cea-sec/ivre) Network recon framework.
+- [**1659**星][10d] [roave/securityadvisories](https://github.com/roave/securityadvisories) ensures that your application doesn't have installed dependencies with known security vulnerabilities
+- [**1656**星][6d] [JS] [tylerbrock/mongo-hacker](https://github.com/tylerbrock/mongo-hacker) MongoDB Shell Enhancements for Hackers
+- [**1655**星][3m] [Py] [boppreh/keyboard](https://github.com/boppreh/keyboard) Hook and simulate global keyboard events on Windows and Linux.
+- [**1654**星][2d] [JS] [ghacksuserjs/ghacks-user.js](https://github.com/ghacksuserjs/ghacks-user.js) An ongoing comprehensive user.js template for configuring and hardening Firefox privacy, security and anti-fingerprinting
+- [**1652**星][2y] [Shell] [juude/droidreverse](https://github.com/juude/droidreverse) android 逆向工程工具集
+- [**1652**星][7m] [dsasmblr/game-hacking](https://github.com/dsasmblr/game-hacking) Tutorials, tools, and more as related to reverse engineering video games.
+- [**1651**星][10m] [JS] [evilcos/xssor2](https://github.com/evilcos/xssor2) XSS'OR - Hack with JavaScript.
+- [**1650**星][1m] [Py] [ehco1996/django-sspanel](https://github.com/ehco1996/django-sspanel) 用diango开发的全新的shadowsocks网络面板
+- [**1650**星][7d] [HTML] [clong/detectionlab](https://github.com/clong/detectionlab) Vagrant & Packer scripts to build a lab environment complete with security tooling and logging best practices
+- [**1649**星][1y] [Py] [evyatarmeged/raccoon](https://github.com/evyatarmeged/raccoon) 高性能的侦查和漏洞扫描工具
+- [**1648**星][2d] [C#] [jbevain/cecil](https://github.com/jbevain/cecil) C#库, 探查/修改/生成 .NET App/库
- [**1645**星][3y] [JS] [camwiegert/baffle](https://github.com/camwiegert/baffle) A tiny javascript library for obfuscating and revealing text in DOM elements.
-- [**1643**星][1m] [C#] [jbevain/cecil](https://github.com/jbevain/cecil) C#库, 探查/修改/生成 .NET App/库
-- [**1641**星][1y] [Py] [evyatarmeged/raccoon](https://github.com/evyatarmeged/raccoon) 高性能的侦查和漏洞扫描工具
-- [**1641**星][6m] [dsasmblr/game-hacking](https://github.com/dsasmblr/game-hacking) Tutorials, tools, and more as related to reverse engineering video games.
-- [**1639**星][1m] [Py] [ehco1996/django-sspanel](https://github.com/ehco1996/django-sspanel) 用diango开发的全新的shadowsocks网络面板
-- [**1637**星][13d] [HTML] [clong/detectionlab](https://github.com/clong/detectionlab) Vagrant & Packer scripts to build a lab environment complete with security tooling and logging best practices
-- [**1636**星][11m] [Java] [fesh0r/fernflower](https://github.com/fesh0r/fernflower) Unofficial mirror of FernFlower Java decompiler (All pulls should be submitted upstream)
-- [**1635**星][4y] [Py] [ctfs/write-ups-2014](https://github.com/ctfs/write-ups-2014) Wiki-like CTF write-ups repository, maintained by the community. 2014
-- [**1635**星][4m] [Java] [jaredrummler/androidprocesses](https://github.com/jaredrummler/androidprocesses) DEPRECATED
-- [**1635**星][4y] [Py] [ctfs/write-ups-2014](https://github.com/ctfs/write-ups-2014) Wiki-like CTF write-ups repository, maintained by the community. 2014
-- [**1629**星][9m] [tylerha97/awesome-reversing](https://github.com/tylerha97/awesome-reversing) A curated list of awesome reversing resources
-- [**1627**星][12d] [Go] [awnumar/memguard](https://github.com/awnumar/memguard) 处理内存中敏感的值,纯Go语言编写。
-- [**1627**星][9d] [sarojaba/awesome-devblog](https://github.com/sarojaba/awesome-devblog) 어썸데브블로그. 국내 개발 블로그 모음(only 실명으로).
-- [**1620**星][14d] [JS] [efforg/privacybadger](https://github.com/efforg/privacybadger) Privacy Badger is a browser extension that automatically learns to block invisible trackers.
-- [**1616**星][2y] [jhaddix/tbhm](https://github.com/jhaddix/tbhm) The Bug Hunters Methodology
-- [**1614**星][2m] [Shell] [internetwache/gittools](https://github.com/internetwache/gittools) find websites with their .git repository available to the public
-- [**1612**星][4m] [CSS] [functionclub/v2ray.fun](https://github.com/functionclub/v2ray.fun) 正在开发的全新 V2ray.Fun
-- [**1611**星][2m] [Go] [ysrc/yulong-hids](https://github.com/ysrc/yulong-hids) 一款由 YSRC 开源的主机入侵检测系统
-- [**1610**星][7m] [Go] [sipt/shuttle](https://github.com/sipt/shuttle) A web proxy in Golang with amazing features.
-- [**1608**星][2y] [JS] [addyosmani/a11y](https://github.com/addyosmani/a11y) Accessibility audit tooling for the web (beta)
-- [**1607**星][3y] [Makefile] [drizzlerisk/drizzledumper](https://github.com/drizzlerisk/drizzledumper) 是一款基于内存搜索的Android脱壳工具。
-- [**1605**星][27d] [PHP] [c0ny1/upload-labs](https://github.com/c0ny1/upload-labs) 一个帮你总结所有类型的上传漏洞的靶场
-- [**1604**星][10m] [C] [nmikhailov/validity90](https://github.com/nmikhailov/validity90) Reverse engineering of Validity/Synaptics 138a:0090, 138a:0094, 138a:0097, 06cb:0081, 06cb:009a fingerprint readers protocol
-- [**1602**星][1y] [Py] [nccgroup/scout2](https://github.com/nccgroup/Scout2) Security auditing tool for AWS environments
+- [**1643**星][9m] [tylerha97/awesome-reversing](https://github.com/tylerha97/awesome-reversing) A curated list of awesome reversing resources
+- [**1643**星][11m] [Java] [fesh0r/fernflower](https://github.com/fesh0r/fernflower) Unofficial mirror of FernFlower Java decompiler (All pulls should be submitted upstream)
+- [**1638**星][4y] [Py] [ctfs/write-ups-2014](https://github.com/ctfs/write-ups-2014) Wiki-like CTF write-ups repository, maintained by the community. 2014
+- [**1638**星][11m] [C] [dlundquist/sniproxy](https://github.com/dlundquist/sniproxy) Proxies incoming HTTP and TLS connections based on the hostname contained in the initial request of the TCP session.
+- [**1638**星][4y] [Py] [ctfs/write-ups-2014](https://github.com/ctfs/write-ups-2014) Wiki-like CTF write-ups repository, maintained by the community. 2014
+- [**1636**星][4m] [Java] [jaredrummler/androidprocesses](https://github.com/jaredrummler/androidprocesses) DEPRECATED
+- [**1634**星][14d] [Go] [awnumar/memguard](https://github.com/awnumar/memguard) 处理内存中敏感的值,纯Go语言编写。
+- [**1631**星][6m] [Objective-C++] [tencent/oomdetector](https://github.com/tencent/oomdetector) OOMDetector is a memory monitoring component for iOS which provides you with OOM monitoring, memory allocation monitoring, memory leak detection and other functions.
+- [**1630**星][6d] [JS] [efforg/privacybadger](https://github.com/efforg/privacybadger) Privacy Badger is a browser extension that automatically learns to block invisible trackers.
+- [**1630**星][29d] [PHP] [c0ny1/upload-labs](https://github.com/c0ny1/upload-labs) 一个帮你总结所有类型的上传漏洞的靶场
+- [**1629**星][5d] [sarojaba/awesome-devblog](https://github.com/sarojaba/awesome-devblog) 어썸데브블로그. 국내 개발 블로그 모음(only 실명으로).
+- [**1624**星][2y] [jhaddix/tbhm](https://github.com/jhaddix/tbhm) The Bug Hunters Methodology
+- [**1624**星][4m] [CSS] [functionclub/v2ray.fun](https://github.com/functionclub/v2ray.fun) 正在开发的全新 V2ray.Fun
+- [**1621**星][2m] [Shell] [internetwache/gittools](https://github.com/internetwache/gittools) find websites with their .git repository available to the public
+- [**1618**星][28d] [Java] [tiann/epic](https://github.com/tiann/epic) Dynamic java method AOP hook for Android(continution of Dexposed on ART), Supporting 4.0~10.0
+- [**1615**星][2y] [JS] [addyosmani/a11y](https://github.com/addyosmani/a11y) Accessibility audit tooling for the web (beta)
+- [**1614**星][2m] [Go] [ysrc/yulong-hids](https://github.com/ysrc/yulong-hids) 一款由 YSRC 开源的主机入侵检测系统
+- [**1614**星][7m] [Go] [sipt/shuttle](https://github.com/sipt/shuttle) A web proxy in Golang with amazing features.
+- [**1612**星][3y] [Makefile] [drizzlerisk/drizzledumper](https://github.com/drizzlerisk/drizzledumper) 是一款基于内存搜索的Android脱壳工具。
+- [**1608**星][9m] [JS] [localtunnel/server](https://github.com/localtunnel/server) server for localtunnel.me
+- [**1608**星][10m] [C] [nmikhailov/validity90](https://github.com/nmikhailov/validity90) Reverse engineering of Validity/Synaptics 138a:0090, 138a:0094, 138a:0097, 06cb:0081, 06cb:009a fingerprint readers protocol
+- [**1606**星][2d] [C++] [lief-project/lief](https://github.com/lief-project/lief) Library to Instrument Executable Formats
- [**1602**星][6m] [Py] [w1109790800/penetration](https://github.com/w1109790800/penetration) 渗透 超全面的渗透资料
-- [**1600**星][8d] [C++] [lief-project/lief](https://github.com/lief-project/lief) Library to Instrument Executable Formats
-- [**1599**星][9m] [JS] [localtunnel/server](https://github.com/localtunnel/server) server for localtunnel.me
-- [**1596**星][5m] [Py] [mozilla/cipherscan](https://github.com/mozilla/cipherscan) 查找指定目标支持的SSL ciphersuites
-- [**1596**星][3m] [Py] [knownsec/pocsuite](https://github.com/knownsec/pocsuite) This project has stopped to maintenance, please to
-- [**1593**星][26d] [Java] [tiann/epic](https://github.com/tiann/epic) Dynamic java method AOP hook for Android(continution of Dexposed on ART), Supporting 4.0~10.0
-- [**1588**星][13d] [Java] [spotbugs/spotbugs](https://github.com/spotbugs/spotbugs) SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.
-- [**1583**星][6m] [Ruby] [brunofacca/zen-rails-security-checklist](https://github.com/brunofacca/zen-rails-security-checklist) Checklist of security precautions for Ruby on Rails applications.
-- [**1580**星][1y] [C] [qihoo360/phptrace](https://github.com/qihoo360/phptrace) A tracing and troubleshooting tool for PHP scripts.
-- [**1580**星][7d] [Go] [bitnami-labs/sealed-secrets](https://github.com/bitnami-labs/sealed-secrets) A Kubernetes controller and tool for one-way encrypted Secrets
-- [**1577**星][4y] [l3m0n/pentest_study](https://github.com/l3m0n/pentest_study) 从零开始内网渗透学习
-- [**1577**星][1m] [Objective-C] [ealeksandrov/provisionql](https://github.com/ealeksandrov/provisionql) Quick Look plugin for apps and provisioning profile files
-- [**1575**星][26d] [C] [ntop/n2n](https://github.com/ntop/n2n) Peer-to-peer VPN
-- [**1574**星][22d] [ivrodriguezca/re-ios-apps](https://github.com/ivrodriguezca/re-ios-apps) A completely free, open source and online course about Reverse Engineering iOS Applications.
-- [**1563**星][2y] [C] [samyk/pwnat](https://github.com/samyk/pwnat) The only tool and technique to punch holes through firewalls/NATs where both clients and server can be behind separate NATs without any 3rd party involvement. Pwnat uses a newly developed technique, exploiting a property of NAT translation tables, with no 3rd party, port forwarding, DMZ, router administrative requirements, STUN/TURN/UPnP/ICE, or…
-- [**1563**星][12d] [C] [codahale/bcrypt-ruby](https://github.com/codahale/bcrypt-ruby) Ruby binding for the OpenBSD bcrypt() password hashing algorithm, allowing you to easily store a secure hash of your users' passwords.
-- [**1562**星][17d] [C] [p-gen/smenu](https://github.com/p-gen/smenu) Terminal utility that reads words from standard input or from a file and creates an interactive selection window just below the cursor. The selected word(s) are sent to standard output for further processing.
-- [**1560**星][14d] [Java] [gchq/gaffer](https://github.com/gchq/Gaffer) A large-scale entity and relation database supporting aggregation of properties
-- [**1557**星][2m] [C] [firmianay/ctf-all-in-one](https://github.com/firmianay/ctf-all-in-one) CTF竞赛入门指南
-- [**1556**星][12d] [Go] [caffix/amass](https://github.com/caffix/amass) 子域名枚举, 搜索互联网数据源, 使用机器学习猜测子域名. Go语言
-- [**1555**星][1y] [Py] [unkl4b/gitminer](https://github.com/unkl4b/gitminer) Github内容挖掘
-- [**1552**星][12d] [Py] [k4m4/kickthemout](https://github.com/k4m4/kickthemout) 使用ARP欺骗,将设备从网络中踢出去
-- [**1550**星][8m] [Py] [m4ll0k/wascan](https://github.com/m4ll0k/WAScan) WAScan - Web Application Scanner
-- [**1547**星][1y] [C] [ctfs/write-ups-2016](https://github.com/ctfs/write-ups-2016) Wiki-like CTF write-ups repository, maintained by the community. 2016
-- [**1545**星][6y] [Py] [google/pyringe](https://github.com/google/pyringe) Debugger capable of attaching to and injecting code into python processes.
-- [**1544**星][1m] [Shell] [mzet-/linux-exploit-suggester](https://github.com/mzet-/linux-exploit-suggester) Linux privilege escalation auditing tool
-- [**1544**星][3m] [PHP] [mewebstudio/captcha](https://github.com/mewebstudio/captcha) Captcha for Laravel 5 & 6
-- [**1542**星][1m] [Py] [joxeankoret/diaphora](https://github.com/joxeankoret/diaphora) program diffing
+- [**1601**星][1y] [Py] [nccgroup/scout2](https://github.com/nccgroup/Scout2) Security auditing tool for AWS environments
+- [**1601**星][5m] [Py] [mozilla/cipherscan](https://github.com/mozilla/cipherscan) 查找指定目标支持的SSL ciphersuites
+- [**1600**星][5d] [Go] [bitnami-labs/sealed-secrets](https://github.com/bitnami-labs/sealed-secrets) A Kubernetes controller and tool for one-way encrypted Secrets
+- [**1599**星][2y] [JS] [keraf/nocoin](https://github.com/keraf/nocoin) No Coin is a tiny browser extension aiming to block coin miners such as Coinhive.
+- [**1598**星][15d] [Java] [spotbugs/spotbugs](https://github.com/spotbugs/spotbugs) SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.
+- [**1597**星][3m] [Py] [knownsec/pocsuite](https://github.com/knownsec/pocsuite) This project has stopped to maintenance, please to
+- [**1591**星][28d] [C] [ntop/n2n](https://github.com/ntop/n2n) Peer-to-peer VPN
+- [**1591**星][24d] [ivrodriguezca/re-ios-apps](https://github.com/ivrodriguezca/re-ios-apps) A completely free, open source and online course about Reverse Engineering iOS Applications.
+- [**1584**星][6m] [Ruby] [brunofacca/zen-rails-security-checklist](https://github.com/brunofacca/zen-rails-security-checklist) Checklist of security precautions for Ruby on Rails applications.
+- [**1583**星][4y] [l3m0n/pentest_study](https://github.com/l3m0n/pentest_study) 从零开始内网渗透学习
+- [**1582**星][1m] [ObjC] [ealeksandrov/provisionql](https://github.com/ealeksandrov/provisionql) Quick Look plugin for apps and provisioning profile files
+- [**1581**星][1y] [C] [qihoo360/phptrace](https://github.com/qihoo360/phptrace) A tracing and troubleshooting tool for PHP scripts.
+- [**1570**星][2m] [C] [firmianay/ctf-all-in-one](https://github.com/firmianay/ctf-all-in-one) CTF竞赛入门指南
+- [**1569**星][2y] [C] [samyk/pwnat](https://github.com/samyk/pwnat) The only tool and technique to punch holes through firewalls/NATs where both clients and server can be behind separate NATs without any 3rd party involvement. Pwnat uses a newly developed technique, exploiting a property of NAT translation tables, with no 3rd party, port forwarding, DMZ, router administrative requirements, STUN/TURN/UPnP/ICE, or…
+- [**1569**星][29d] [Py] [opendevops-cn/opendevops](https://github.com/opendevops-cn/opendevops) CODO是一款为用户提供企业多混合云、一站式DevOps、自动化运维、完全开源的云管理平台、自动化运维平台
+- [**1566**星][14d] [C] [codahale/bcrypt-ruby](https://github.com/codahale/bcrypt-ruby) Ruby binding for the OpenBSD bcrypt() password hashing algorithm, allowing you to easily store a secure hash of your users' passwords.
+- [**1565**星][17d] [Go] [sofastack/sofa-mosn](https://github.com/sofastack/sofa-mosn) 使用 Go 语言开发的网络代理软件,作为云原生的网络数据平面,旨在为服务提供多协议,模块化,智能化,安全的代理能力
+- [**1562**星][19d] [C] [p-gen/smenu](https://github.com/p-gen/smenu) Terminal utility that reads words from standard input or from a file and creates an interactive selection window just below the cursor. The selected word(s) are sent to standard output for further processing.
+- [**1562**星][14d] [Py] [k4m4/kickthemout](https://github.com/k4m4/kickthemout) 使用ARP欺骗,将设备从网络中踢出去
+- [**1561**星][16d] [Java] [gchq/gaffer](https://github.com/gchq/Gaffer) A large-scale entity and relation database supporting aggregation of properties
+- [**1560**星][1y] [Py] [unkl4b/gitminer](https://github.com/unkl4b/gitminer) Github内容挖掘
+- [**1560**星][6d] [Go] [caffix/amass](https://github.com/caffix/amass) 子域名枚举, 搜索互联网数据源, 使用机器学习猜测子域名. Go语言
+- [**1557**星][8m] [Py] [m4ll0k/wascan](https://github.com/m4ll0k/WAScan) WAScan - Web Application Scanner
+- [**1556**星][15d] [Go] [eolinker/goku-api-gateway](https://github.com/eolinker/goku-api-gateway) A Powerful HTTP API Gateway in pure golang!Goku API Gateway (中文名:悟空 API 网关)是一个基于 Golang开发的微服务网关,能够实现高性能 HTTP API 转发、服务编排、多租户管理、API 访问权限控制等目的,拥有强大的自定义插件系统可以自行扩展,并且提供友好的图形化配置界面,能够快速帮助企业进行 API 服务治理、提高 API 服务的稳定性和安全性。
+- [**1555**星][1m] [Shell] [mzet-/linux-exploit-suggester](https://github.com/mzet-/linux-exploit-suggester) Linux privilege escalation auditing tool
+- [**1549**星][7d] [PHP] [mewebstudio/captcha](https://github.com/mewebstudio/captcha) Captcha for Laravel 5 & 6
+- [**1549**星][1m] [Py] [joxeankoret/diaphora](https://github.com/joxeankoret/diaphora) program diffing
+- [**1548**星][1y] [C] [ctfs/write-ups-2016](https://github.com/ctfs/write-ups-2016) Wiki-like CTF write-ups repository, maintained by the community. 2016
+- [**1544**星][15d] [C] [raspberrypi/userland](https://github.com/raspberrypi/userland) Source code for ARM side libraries for interfacing to Raspberry Pi GPU.
+- [**1544**星][6y] [Py] [google/pyringe](https://github.com/google/pyringe) Debugger capable of attaching to and injecting code into python processes.
+- [**1543**星][2d] [Go] [juju/juju](https://github.com/juju/juju) Simple, secure devops tooling built to manage today's complex applications wherever you run your software.
+- [**1541**星][2y] [Py] [awolfly9/ipproxytool](https://github.com/awolfly9/ipproxytool) python ip proxy tool scrapy crawl. 抓取大量免费代理 ip,提取有效 ip 使用
- [**1540**星][2y] [C++] [hteso/iaito](https://github.com/hteso/iaito) Radare2 GUI,使用Qt和C++
-- [**1536**星][2y] [Py] [awolfly9/ipproxytool](https://github.com/awolfly9/ipproxytool) python ip proxy tool scrapy crawl. 抓取大量免费代理 ip,提取有效 ip 使用
-- [**1533**星][2y] [C] [ezlippi/webbench](https://github.com/ezlippi/webbench) Webbench是Radim Kolar在1997年写的一个在linux下使用的非常简单的网站压测工具。它使用fork()模拟多个客户端同时访问我们设定的URL,测试网站在压力下工作的性能,最多可以模拟3万个并发连接去测试网站的负载能力。官网地址:
-- [**1532**星][13d] [C] [raspberrypi/userland](https://github.com/raspberrypi/userland) Source code for ARM side libraries for interfacing to Raspberry Pi GPU.
-- [**1531**星][7d] [Py] [lifting-bits/mcsema](https://github.com/lifting-bits/mcsema) 将x86, amd64, aarch64二进制文件转换成LLVM字节码
+- [**1539**星][2y] [C] [ezlippi/webbench](https://github.com/ezlippi/webbench) Webbench是Radim Kolar在1997年写的一个在linux下使用的非常简单的网站压测工具。它使用fork()模拟多个客户端同时访问我们设定的URL,测试网站在压力下工作的性能,最多可以模拟3万个并发连接去测试网站的负载能力。官网地址:
+- [**1537**星][9d] [Py] [lifting-bits/mcsema](https://github.com/lifting-bits/mcsema) 将x86, amd64, aarch64二进制文件转换成LLVM字节码
- [IDA7插件](https://github.com/lifting-bits/mcsema/tree/master/tools/mcsema_disass/ida7) 用于反汇编二进制文件并生成控制流程图
- [IDA插件](https://github.com/lifting-bits/mcsema/tree/master/tools/mcsema_disass/ida) 用于反汇编二进制文件并生成控制流程图
- [Binja插件](https://github.com/lifting-bits/mcsema/tree/master/tools/mcsema_disass/binja) 用于反汇编二进制文件并生成控制流程图
- [mcsema](https://github.com/lifting-bits/mcsema/tree/master/mcsema)
-- [**1530**星][7d] [Go] [juju/juju](https://github.com/juju/juju) Simple, secure devops tooling built to manage today's complex applications wherever you run your software.
-- [**1528**星][3y] [Py] [x0rz/eqgrp_lost_in_translation](https://github.com/x0rz/eqgrp_lost_in_translation) ShadowBrokers泄漏
-- [**1527**星][11d] [emijrp/awesome-awesome](https://github.com/emijrp/awesome-awesome) A curated list of awesome curated lists of many topics.
-- [**1525**星][10d] [Java] [ukanth/afwall](https://github.com/ukanth/afwall) AFWall+ (Android Firewall +) - iptables based firewall for Android
-- [**1521**星][1y] [HTML] [qiwihui/hiwifi-ss](https://github.com/qiwihui/hiwifi-ss) 极路由+ss配置
-- [**1520**星][4m] [TypeScript] [spring-guides/tut-spring-security-and-angular-js](https://github.com/spring-guides/tut-spring-security-and-angular-js) Spring Security and Angular:: A tutorial on how to use Spring Security with a single page application with various backend architectures, ranging from a simple single server to an API gateway with OAuth2 authentication.
-- [**1520**星][20d] [C++] [nmap/npcap](https://github.com/nmap/npcap) Nmap Project's packet sniffing library for Windows, based on WinPcap/Libpcap improved with NDIS 6 and LWF.
-- [**1519**星][10m] [PowerShell] [joefitzgerald/packer-windows](https://github.com/joefitzgerald/packer-windows) 使用Packer创建Vagrant boxes的模板
-- [**1516**星][9m] [Py] [google/rekall](https://github.com/google/rekall) Rekall Memory Forensic Framework
+- [**1536**星][4d] [Java] [ukanth/afwall](https://github.com/ukanth/afwall) AFWall+ (Android Firewall +) - iptables based firewall for Android
+- [**1533**星][13d] [emijrp/awesome-awesome](https://github.com/emijrp/awesome-awesome) A curated list of awesome curated lists of many topics.
+- [**1532**星][3y] [Py] [x0rz/eqgrp_lost_in_translation](https://github.com/x0rz/eqgrp_lost_in_translation) ShadowBrokers泄漏
+- [**1526**星][2d] [C++] [nmap/npcap](https://github.com/nmap/npcap) Nmap Project's packet sniffing library for Windows, based on WinPcap/Libpcap improved with NDIS 6 and LWF.
+- [**1522**星][1y] [HTML] [qiwihui/hiwifi-ss](https://github.com/qiwihui/hiwifi-ss) 极路由+ss配置
+- [**1521**星][4m] [TS] [spring-guides/tut-spring-security-and-angular-js](https://github.com/spring-guides/tut-spring-security-and-angular-js) Spring Security and Angular:: A tutorial on how to use Spring Security with a single page application with various backend architectures, ranging from a simple single server to an API gateway with OAuth2 authentication.
+- [**1521**星][3d] [C] [jiangwenyuan/nuster](https://github.com/jiangwenyuan/nuster) A high performance HTTP proxy cache server and RESTful NoSQL cache server based on HAProxy
+- [**1519**星][10m] [PS] [joefitzgerald/packer-windows](https://github.com/joefitzgerald/packer-windows) 使用Packer创建Vagrant boxes的模板
+- [**1518**星][9m] [Py] [google/rekall](https://github.com/google/rekall) Rekall Memory Forensic Framework
+- [**1517**星][8d] [Py] [zerosum0x0/koadic](https://github.com/zerosum0x0/koadic) 类似于Meterpreter、Powershell Empire 的post-exploitation rootkit,区别在于其大多数操作都是由 Windows 脚本主机 JScript/VBScript 执行
+- [**1516**星][5m] [snowming04/the-hacker-playbook-3-translation](https://github.com/snowming04/the-hacker-playbook-3-translation) 对 The Hacker Playbook 3 的翻译。
+- [**1514**星][3y] [Py] [sensepost/regeorg](https://github.com/sensepost/regeorg) The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.
- [**1510**星][1y] [dripcap/dripcap](https://github.com/dripcap/dripcap)
-- [**1509**星][21d] [Py] [zerosum0x0/koadic](https://github.com/zerosum0x0/koadic) 类似于Meterpreter、Powershell Empire 的post-exploitation rootkit,区别在于其大多数操作都是由 Windows 脚本主机 JScript/VBScript 执行
-- [**1506**星][3y] [Py] [sensepost/regeorg](https://github.com/sensepost/regeorg) The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.
-- [**1504**星][5m] [snowming04/the-hacker-playbook-3-translation](https://github.com/snowming04/the-hacker-playbook-3-translation) 对 The Hacker Playbook 3 的翻译。
-- [**1503**星][2y] [Py] [eldraco/domain_analyzer](https://github.com/eldraco/domain_analyzer) 通过查找所有能够查找的信息,来分析任意域名的安全性
-- [**1501**星][25d] [Py] [hannob/snallygaster](https://github.com/hannob/snallygaster) Python脚本, 扫描HTTP服务器"秘密文件"
-- [**1500**星][2m] [Shell] [haugene/docker-transmission-openvpn](https://github.com/haugene/docker-transmission-openvpn) Docker container running Transmission torrent client with WebUI over an OpenVPN tunnel
-- [**1491**星][4m] [Py] [epinna/tplmap](https://github.com/epinna/tplmap) 代码注入和服务器端模板注入(Server-Side Template Injection)漏洞利用,若干沙箱逃逸技巧。
-- [**1490**星][10d] [YARA] [cybermonitor/apt_cybercriminal_campagin_collections](https://github.com/cybermonitor/apt_cybercriminal_campagin_collections) APT & CyberCriminal Campaign Collection
-- [**1487**星][7m] [Py] [ahupp/python-magic](https://github.com/ahupp/python-magic) A python wrapper for libmagic
-- [**1485**星][2y] [Kotlin] [gh0u1l5/wechatmagician](https://github.com/gh0u1l5/wechatmagician) WechatMagician is a Xposed module written in Kotlin, that allows you to completely control your Wechat.
-- [**1482**星][7m] [C++] [wangyu-/tinyfecvpn](https://github.com/wangyu-/tinyfecvpn) A VPN Designed for Lossy Links, with Build-in Forward Error Correction(FEC) Support. Improves your Network Quality on a High-latency Lossy Link.
-- [**1478**星][7d] [C] [sleuthkit/sleuthkit](https://github.com/sleuthkit/sleuthkit) The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.
-- [**1475**星][12d] [Py] [bitsadmin/wesng](https://github.com/bitsadmin/wesng) Windows Exploit Suggester - Next Generation
-- [**1474**星][1y] [C++] [f1xpl/openauto](https://github.com/f1xpl/openauto) AndroidAuto headunit emulator
-- [**1472**星][7d] [Shell] [blackarch/blackarch](https://github.com/blackarch/blackarch) BlackArch Linux is an Arch Linux-based distribution for penetration testers and security researchers.
-- [**1468**星][16d] [Go] [google/keytransparency](https://github.com/google/keytransparency) A transparent and secure way to look up public keys.
-- [**1468**星][3m] [C] [iqiyi/xhook](https://github.com/iqiyi/xhook) a PLT (Procedure Linkage Table) hook library for Android native ELF
-- [**1466**星][2m] [C++] [jmpews/hookzz](https://github.com/jmpews/hookzz) a hook framework for arm/arm64/ios/android, and [dev] branch is being refactored.
-- [**1465**星][3y] [Py] [veil-framework/veil-evasion](https://github.com/Veil-Framework/Veil-Evasion) a tool designed to generate metasploit payloads that bypass common anti-virus solutions.
-- [**1465**星][25d] [minimaxir/hacker-news-undocumented](https://github.com/minimaxir/hacker-news-undocumented) Some of the hidden norms about Hacker News not otherwise covered in the Guidelines and the FAQ.
-- [**1462**星][6y] [C] [alibaba/lvs](https://github.com/alibaba/lvs) A distribution of Linux Virtual Server with some advanced features. It introduces a new packet forwarding method - FULLNAT other than NAT/Tunneling/DirectRouting, and defense mechanism against synflooding attack - SYNPROXY.
-- [**1460**星][14d] [C] [ufrisk/pcileech](https://github.com/ufrisk/pcileech) 直接内存访问(DMA:Direct Memory Access)攻击工具。通过 PCIe 硬件设备使用 DMA,直接读写目标系统的内存。目标系统不需要安装驱动。
-- [**1457**星][1y] [C++] [acaudwell/logstalgia](https://github.com/acaudwell/logstalgia) a visualization tool that replays or streams web server access logs as a retro arcade game simulation.
-- [**1456**星][27d] [Go] [neex/phuip-fpizdam](https://github.com/neex/phuip-fpizdam) Exploit for CVE-2019-11043
-- [**1450**星][1y] [Py] [d4vinci/cr3dov3r](https://github.com/d4vinci/cr3dov3r) Know the dangers of credential reuse attacks.
-- [**1448**星][6m] [Py] [enablesecurity/wafw00f](https://github.com/enablesecurity/wafw00f) 识别保护网站的WAF产品
-- [**1447**星][3m] [edoverflow/can-i-take-over-xyz](https://github.com/edoverflow/can-i-take-over-xyz) "Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.
-- [**1446**星][11d] [C++] [srslte/srslte](https://github.com/srslte/srslte) Open source SDR LTE software suite from Software Radio Systems (SRS)
-- [**1442**星][6m] [Py] [oros42/imsi-catcher](https://github.com/oros42/imsi-catcher) This program show you IMSI numbers of cellphones around you.
-- [**1441**星][19d] [C] [tianocore/edk2](https://github.com/tianocore/edk2) A modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications
-- [**1441**星][1m] [C] [ctcaer/hekate](https://github.com/ctcaer/hekate) Nintendo Switch Bootloader - CTCaer mod
-- [**1439**星][3y] [tiancode/learn-hacking](https://github.com/tiancode/learn-hacking) 开始学习Kali Linux 各种破解教程 渗透测试 逆向工程 HackThisSite挑战问题解答
-- [**1439**星][3y] [tiancode/learn-hacking](https://github.com/tiancode/learn-hacking) 开始学习Kali Linux 各种破解教程 渗透测试 逆向工程 HackThisSite挑战问题解答
-- [**1438**星][3m] [C++] [vaibhavpandeyvpz/apkstudio](https://github.com/vaibhavpandeyvpz/apkstudio) Open-source, cross platform Qt based IDE for reverse-engineering Android application packages.
-- [**1433**星][18d] [Go] [skydive-project/skydive](https://github.com/skydive-project/skydive) An open source real-time network topology and protocols analyzer
-- [**1433**星][1y] [TypeScript] [pedronauck/reworm](https://github.com/pedronauck/reworm)
-- [**1433**星][12d] [C++] [microsoft/seal](https://github.com/microsoft/seal) Microsoft SEAL is an easy-to-use and powerful homomorphic encryption library.
-- [**1430**星][7d] [Go] [google/gapid](https://github.com/google/gapid) Graphics API Debugger
-- [**1428**星][7d] [Py] [rocky/python-uncompyle6](https://github.com/rocky/python-uncompyle6) Python反编译器,跨平台
-- [**1427**星][6m] [C++] [x64dbg/scyllahide](https://github.com/x64dbg/scyllahide) Advanced usermode anti-anti-debugger
+- [**1508**星][2m] [Shell] [haugene/docker-transmission-openvpn](https://github.com/haugene/docker-transmission-openvpn) Docker container running Transmission torrent client with WebUI over an OpenVPN tunnel
+- [**1505**星][2y] [Py] [eldraco/domain_analyzer](https://github.com/eldraco/domain_analyzer) 通过查找所有能够查找的信息,来分析任意域名的安全性
+- [**1504**星][27d] [Py] [hannob/snallygaster](https://github.com/hannob/snallygaster) Python脚本, 扫描HTTP服务器"秘密文件"
+- [**1499**星][5d] [YARA] [cybermonitor/apt_cybercriminal_campagin_collections](https://github.com/cybermonitor/apt_cybercriminal_campagin_collections) APT & CyberCriminal Campaign Collection
+- [**1497**星][4m] [Py] [epinna/tplmap](https://github.com/epinna/tplmap) 代码注入和服务器端模板注入(Server-Side Template Injection)漏洞利用,若干沙箱逃逸技巧。
+- [**1489**星][5d] [Py] [ahupp/python-magic](https://github.com/ahupp/python-magic) A python wrapper for libmagic
+- [**1486**星][2y] [Kotlin] [gh0u1l5/wechatmagician](https://github.com/gh0u1l5/wechatmagician) WechatMagician is a Xposed module written in Kotlin, that allows you to completely control your Wechat.
+- [**1485**星][7m] [C++] [wangyu-/tinyfecvpn](https://github.com/wangyu-/tinyfecvpn) A VPN Designed for Lossy Links, with Build-in Forward Error Correction(FEC) Support. Improves your Network Quality on a High-latency Lossy Link.
+- [**1482**星][7d] [Py] [bitsadmin/wesng](https://github.com/bitsadmin/wesng) Windows Exploit Suggester - Next Generation
+- [**1481**星][2d] [C] [sleuthkit/sleuthkit](https://github.com/sleuthkit/sleuthkit) The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.
+- [**1480**星][1y] [C++] [f1xpl/openauto](https://github.com/f1xpl/openauto) AndroidAuto headunit emulator
+- [**1479**星][3d] [C] [ctcaer/hekate](https://github.com/ctcaer/hekate) Nintendo Switch Bootloader - CTCaer mod
+- [**1478**星][8d] [C] [iqiyi/xhook](https://github.com/iqiyi/xhook) a PLT (Procedure Linkage Table) hook library for Android native ELF
+- [**1477**星][2d] [Shell] [blackarch/blackarch](https://github.com/blackarch/blackarch) BlackArch Linux is an Arch Linux-based distribution for penetration testers and security researchers.
+- [**1476**星][2m] [C++] [jmpews/hookzz](https://github.com/jmpews/hookzz) a hook framework for arm/arm64/ios/android, and [dev] branch is being refactored.
+- [**1471**星][27d] [minimaxir/hacker-news-undocumented](https://github.com/minimaxir/hacker-news-undocumented) Some of the hidden norms about Hacker News not otherwise covered in the Guidelines and the FAQ.
+- [**1470**星][3y] [Py] [veil-framework/veil-evasion](https://github.com/Veil-Framework/Veil-Evasion) a tool designed to generate metasploit payloads that bypass common anti-virus solutions.
+- [**1470**星][2d] [Go] [google/keytransparency](https://github.com/google/keytransparency) A transparent and secure way to look up public keys.
+- [**1469**星][6y] [C] [alibaba/lvs](https://github.com/alibaba/lvs) A distribution of Linux Virtual Server with some advanced features. It introduces a new packet forwarding method - FULLNAT other than NAT/Tunneling/DirectRouting, and defense mechanism against synflooding attack - SYNPROXY.
+- [**1466**星][29d] [Go] [neex/phuip-fpizdam](https://github.com/neex/phuip-fpizdam) Exploit for CVE-2019-11043
+- [**1464**星][6m] [Py] [oros42/imsi-catcher](https://github.com/oros42/imsi-catcher) This program show you IMSI numbers of cellphones around you.
+- [**1463**星][7d] [C] [ufrisk/pcileech](https://github.com/ufrisk/pcileech) DMA攻击工具。通过 PCIe 硬件设备使用 DMA,直接读写目标系统的内存。目标系统不需要安装驱动。
+- [**1462**星][9d] [edoverflow/can-i-take-over-xyz](https://github.com/edoverflow/can-i-take-over-xyz) "Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.
+- [**1459**星][3d] [Py] [enablesecurity/wafw00f](https://github.com/enablesecurity/wafw00f) 识别保护网站的WAF产品
+- [**1458**星][1y] [C++] [acaudwell/logstalgia](https://github.com/acaudwell/logstalgia) a visualization tool that replays or streams web server access logs as a retro arcade game simulation.
+- [**1455**星][1y] [Py] [d4vinci/cr3dov3r](https://github.com/d4vinci/cr3dov3r) Know the dangers of credential reuse attacks.
+- [**1453**星][13d] [C++] [srslte/srslte](https://github.com/srslte/srslte) Open source SDR LTE software suite from Software Radio Systems (SRS)
+- [**1451**星][2d] [Py] [rocky/python-uncompyle6](https://github.com/rocky/python-uncompyle6) Python反编译器,跨平台
+- [**1447**星][3y] [tiancode/learn-hacking](https://github.com/tiancode/learn-hacking) 开始学习Kali Linux 各种破解教程 渗透测试 逆向工程 HackThisSite挑战问题解答
+- [**1447**星][3y] [tiancode/learn-hacking](https://github.com/tiancode/learn-hacking) 开始学习Kali Linux 各种破解教程 渗透测试 逆向工程 HackThisSite挑战问题解答
+- [**1447**星][2m] [Py] [neo23x0/loki](https://github.com/neo23x0/loki) Loki - Simple IOC and Incident Response Scanner
+- [**1446**星][5d] [C] [tianocore/edk2](https://github.com/tianocore/edk2) A modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications
+- [**1446**星][20d] [Go] [skydive-project/skydive](https://github.com/skydive-project/skydive) An open source real-time network topology and protocols analyzer
+- [**1446**星][14d] [C++] [microsoft/seal](https://github.com/microsoft/seal) Microsoft SEAL is an easy-to-use and powerful homomorphic encryption library.
+- [**1445**星][3m] [C++] [vaibhavpandeyvpz/apkstudio](https://github.com/vaibhavpandeyvpz/apkstudio) Open-source, cross platform Qt based IDE for reverse-engineering Android application packages.
+- [**1437**星][5d] [Go] [google/gapid](https://github.com/google/gapid) Graphics API Debugger
+- [**1436**星][20d] [Kotlin] [cypherpunkarmory/userland](https://github.com/cypherpunkarmory/userland) The easiest way to run a Linux distribution or application on Android
+- [**1433**星][11m] [C] [tpruvot/ccminer](https://github.com/tpruvot/ccminer) CUDA Open Source miner project, for most nvidia cards
+- [**1433**星][1y] [TS] [pedronauck/reworm](https://github.com/pedronauck/reworm)
+- [**1432**星][6m] [C++] [x64dbg/scyllahide](https://github.com/x64dbg/scyllahide) Advanced usermode anti-anti-debugger
+- [**1432**星][2m] [C] [feralinteractive/gamemode](https://github.com/feralinteractive/gamemode) Optimise Linux system performance on demand
+- [**1429**星][5y] [C++] [gdbinit/machoview](https://github.com/gdbinit/machoview) MachOView fork
+- [**1427**星][9d] [ObjC] [nabla-c0d3/ssl-kill-switch2](https://github.com/nabla-c0d3/ssl-kill-switch2) Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS and OS X Apps
+- [**1426**星][20d] [C++] [plasma-umass/coz](https://github.com/plasma-umass/coz) Finding Code that Counts with Causal Profiling
+- [**1426**星][4y] [C++] [aappleby/smhasher](https://github.com/aappleby/smhasher) Automatically exported from code.google.com/p/smhasher
- [**1425**星][3m] [Go] [google/stenographer](https://github.com/google/stenographer) Stenographer is a packet capture solution which aims to quickly spool all packets to disk, then provide simple, fast access to subsets of those packets. Discussion/announcements at stenographer@googlegroups.com
-- [**1423**星][8y] [Py] [moxie0/sslstrip](https://github.com/moxie0/sslstrip) A tool for exploiting Moxie Marlinspike's SSL "stripping" attack.
-- [**1423**星][18d] [Kotlin] [cypherpunkarmory/userland](https://github.com/cypherpunkarmory/userland) The easiest way to run a Linux distribution or application on Android
-- [**1422**星][2m] [C] [feralinteractive/gamemode](https://github.com/feralinteractive/gamemode) Optimise Linux system performance on demand
-- [**1421**星][3y] [mandatoryprogrammer/northkoreadnsleak](https://github.com/mandatoryprogrammer/northkoreadnsleak) Snapshot of North Korea's DNS data taken from zone transfers.
-- [**1421**星][4y] [C++] [aappleby/smhasher](https://github.com/aappleby/smhasher) Automatically exported from code.google.com/p/smhasher
-- [**1420**星][10m] [Java] [aslody/legend](https://github.com/aslody/legend) (Android)无需Root即可Hook Java方法的框架, 支持Dalvik和Art环境
-- [**1419**星][2m] [Py] [neo23x0/loki](https://github.com/neo23x0/loki) Loki - Simple IOC and Incident Response Scanner
-- [**1419**星][3y] [Py] [nathanlopez/stitch](https://github.com/nathanlopez/stitch) Python Remote Administration Tool (RAT)
-- [**1419**星][12d] [Go] [google/google-ctf](https://github.com/google/google-ctf) Google CTF
-- [**1419**星][5y] [C++] [gdbinit/machoview](https://github.com/gdbinit/machoview) MachOView fork
-- [**1417**星][1m] [Py] [xdavidhu/mitmap](https://github.com/xdavidhu/mitmap)
-- [**1417**星][5m] [PHP] [s4n7h0/xvwa](https://github.com/s4n7h0/xvwa) XVWA is a badly coded web application written in PHP/MySQL that helps security enthusiasts to learn application security.
-- [**1416**星][1m] [Go] [barnybug/cli53](https://github.com/barnybug/cli53) Command line tool for Amazon Route 53
-- [**1415**星][3y] [C] [antirez/dump1090](https://github.com/antirez/dump1090) Dump1090 is a simple Mode S decoder for RTLSDR devices
-- [**1413**星][7m] [Objective-C] [nabla-c0d3/ssl-kill-switch2](https://github.com/nabla-c0d3/ssl-kill-switch2) Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS and OS X Apps
-- [**1411**星][11d] [C] [ettercap/ettercap](https://github.com/ettercap/ettercap) Ettercap Project
-- [**1410**星][8d] [Go] [cosmos72/gomacro](https://github.com/cosmos72/gomacro) Interactive Go interpreter and debugger with REPL, Eval, generics and Lisp-like macros
-- [**1409**星][4m] [yadox666/the-hackers-hardware-toolkit](https://github.com/yadox666/the-hackers-hardware-toolkit) The best hacker's gadgets for Red Team pentesters and security researchers.
-- [**1408**星][22d] [Java] [chrisk44/hijacker](https://github.com/chrisk44/hijacker) Aircrack, Airodump, Aireplay, MDK3 and Reaver GUI Application for Android
-- [**1407**星][7d] [C] [namhyung/uftrace](https://github.com/namhyung/uftrace) Function (graph) tracer for user-space
-- [**1406**星][1m] [C++] [google/nsjail](https://github.com/google/nsjail) A light-weight process isolation tool, making use of Linux namespaces and seccomp-bpf syscall filters (with help of the kafel bpf language)
-- [**1402**星][5m] [gitguardian/apisecuritybestpractices](https://github.com/gitguardian/apisecuritybestpractices) Resources to help you keep secrets (API keys, database credentials, certificates, ...) out of source code and remediate the issue in case of a leaked API key. Made available by GitGuardian.
-- [**1402**星][7d] [C++] [eteran/edb-debugger](https://github.com/eteran/edb-debugger) edb is a cross platform AArch32/x86/x86-64 debugger.
+- [**1424**星][8y] [Py] [moxie0/sslstrip](https://github.com/moxie0/sslstrip) A tool for exploiting Moxie Marlinspike's SSL "stripping" attack.
+- [**1424**星][11m] [Java] [aslody/legend](https://github.com/aslody/legend) (Android)无需Root即可Hook Java方法的框架, 支持Dalvik和Art环境
+- [**1423**星][14d] [Go] [google/google-ctf](https://github.com/google/google-ctf) Google CTF
+- [**1422**星][3y] [Py] [nathanlopez/stitch](https://github.com/nathanlopez/stitch) Python Remote Administration Tool (RAT)
+- [**1422**星][3y] [mandatoryprogrammer/northkoreadnsleak](https://github.com/mandatoryprogrammer/northkoreadnsleak) Snapshot of North Korea's DNS data taken from zone transfers.
+- [**1419**星][1m] [Py] [xdavidhu/mitmap](https://github.com/xdavidhu/mitmap)
+- [**1419**星][3y] [C] [antirez/dump1090](https://github.com/antirez/dump1090) Dump1090 is a simple Mode S decoder for RTLSDR devices
+- [**1418**星][5m] [PHP] [s4n7h0/xvwa](https://github.com/s4n7h0/xvwa) XVWA is a badly coded web application written in PHP/MySQL that helps security enthusiasts to learn application security.
+- [**1417**星][4m] [yadox666/the-hackers-hardware-toolkit](https://github.com/yadox666/the-hackers-hardware-toolkit) 用于Red Team、渗透、安全研究的最佳硬件产品集合
+- [**1417**星][4d] [Rust] [shadowsocks/shadowsocks-rust](https://github.com/shadowsocks/shadowsocks-rust) A Rust port of shadowsocks
+- [**1417**星][1m] [Go] [barnybug/cli53](https://github.com/barnybug/cli53) Command line tool for Amazon Route 53
+- [**1415**星][7d] [C] [z3apa3a/3proxy](https://github.com/z3apa3a/3proxy) 3proxy - tiny free proxy server
+- [**1414**星][8d] [C] [ettercap/ettercap](https://github.com/ettercap/ettercap) Ettercap Project
+- [**1413**星][24d] [XSLT] [lolbas-project/lolbas](https://github.com/lolbas-project/lolbas) Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
+- [**1413**星][24d] [Java] [chrisk44/hijacker](https://github.com/chrisk44/hijacker) Aircrack, Airodump, Aireplay, MDK3 and Reaver GUI Application for Android
+- [**1412**星][9d] [C] [namhyung/uftrace](https://github.com/namhyung/uftrace) Function (graph) tracer for user-space
+- [**1412**星][5m] [gitguardian/apisecuritybestpractices](https://github.com/gitguardian/apisecuritybestpractices) Resources to help you keep secrets (API keys, database credentials, certificates, ...) out of source code and remediate the issue in case of a leaked API key. Made available by GitGuardian.
+- [**1411**星][7d] [C++] [eteran/edb-debugger](https://github.com/eteran/edb-debugger) edb is a cross platform AArch32/x86/x86-64 debugger.
+- [**1411**星][3d] [Go] [cosmos72/gomacro](https://github.com/cosmos72/gomacro) Interactive Go interpreter and debugger with REPL, Eval, generics and Lisp-like macros
+- [**1410**星][3m] [Go] [hellogcc/100-gdb-tips](https://github.com/hellogcc/100-gdb-tips) A collection of gdb tips. 100 maybe just mean many here.
+- [**1408**星][3m] [HTML] [owasp/top10](https://github.com/owasp/top10) Official OWASP Top 10 Document Repository
+- [**1407**星][4d] [C++] [google/nsjail](https://github.com/google/nsjail) A light-weight process isolation tool, making use of Linux namespaces and seccomp-bpf syscall filters (with help of the kafel bpf language)
+- [**1405**星][1y] [HTML] [gwuhaolin/blog](https://github.com/gwuhaolin/blog) 浩麟的技术博客
+- [**1405**星][1y] [C++] [dotnet/llilc](https://github.com/dotnet/llilc) This repo contains LLILC, an LLVM based compiler for .NET Core. It includes a set of cross-platform .NET code generation tools that enables compilation of MSIL byte code to LLVM supported platforms.
+- [**1404**星][7d] [Java] [chinashiyu/gfw.press](https://github.com/chinashiyu/gfw.press) GFW.Press新一代军用级高强度加密抗干扰网络数据高速传输软件
+- [**1403**星][2d] [Go] [crazy-max/windowsspyblocker](https://github.com/crazy-max/windowsspyblocker)
- [**1401**星][9m] [JS] [anttiviljami/browser-autofill-phishing](https://github.com/anttiviljami/browser-autofill-phishing) A simple demo of phishing by abusing the browser autofill feature
-- [**1400**星][3m] [HTML] [owasp/top10](https://github.com/owasp/top10) Official OWASP Top 10 Document Repository
-- [**1400**星][1y] [C++] [dotnet/llilc](https://github.com/dotnet/llilc) This repo contains LLILC, an LLVM based compiler for .NET Core. It includes a set of cross-platform .NET code generation tools that enables compilation of MSIL byte code to LLVM supported platforms.
-- [**1399**星][25d] [Go] [crazy-max/windowsspyblocker](https://github.com/crazy-max/windowsspyblocker)
-- [**1399**星][7d] [Java] [chinashiyu/gfw.press](https://github.com/chinashiyu/gfw.press) GFW.Press新一代军用级高强度加密抗干扰网络数据高速传输软件
-- [**1397**星][7d] [Rust] [shadowsocks/shadowsocks-rust](https://github.com/shadowsocks/shadowsocks-rust) A Rust port of shadowsocks
-- [**1395**星][1y] [Go] [filosottile/whosthere](https://github.com/filosottile/whosthere) A ssh server that knows who you are
-- [**1393**星][25d] [C] [quiet/org.quietmodem.quiet](https://github.com/quiet/org.quietmodem.quiet) Quiet for Android - TCP over sound
-- [**1393**星][3y] [PowerShell] [putterpanda/mimikittenz](https://github.com/putterpanda/mimikittenz) A post-exploitation powershell tool for extracting juicy info from memory.
-- [**1391**星][22d] [XSLT] [lolbas-project/lolbas](https://github.com/lolbas-project/lolbas) Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
-- [**1388**星][14d] [Swift] [johnno1962/injectioniii](https://github.com/johnno1962/injectioniii) Re-write of Injection for Xcode in (mostly) Swift4
-- [**1387**星][1y] [HTML] [gwuhaolin/blog](https://github.com/gwuhaolin/blog) 浩麟的技术博客
-- [**1387**星][2y] [JS] [sqren/fb-sleep-stats](https://github.com/sqren/fb-sleep-stats) 使用Facebook追踪用户的睡觉习惯
-- [**1386**星][18d] [C++] [plasma-umass/coz](https://github.com/plasma-umass/coz) Finding Code that Counts with Causal Profiling
-- [**1384**星][4y] [PHP] [johntroony/php-webshells](https://github.com/johntroony/php-webshells) Common php webshells. Do not host the file(s) on your server!
-- [**1383**星][14d] [C++] [jonathansalwan/triton](https://github.com/jonathansalwan/triton) Triton is a Dynamic Binary Analysis (DBA) framework. It provides internal components like a Dynamic Symbolic Execution (DSE) engine, a dynamic taint engine, AST representations of the x86, x86-64 and AArch64 Instructions Set Architecture (ISA), SMT simplification passes, an SMT solver interface and, the last but not least, Python bindings.
-- [**1383**星][8d] [Py] [ekultek/whatwaf](https://github.com/ekultek/whatwaf) Detect and bypass web application firewalls and protection systems
-- [**1381**星][11m] [Py] [eth0izzle/bucket-stream](https://github.com/eth0izzle/bucket-stream) 通过certstream 监控多种证书 transparency 日志, 进而查找有趣的 Amazon S3 Buckets
-- [**1380**星][2m] [C] [z3apa3a/3proxy](https://github.com/z3apa3a/3proxy) 3proxy - tiny free proxy server
-- [**1380**星][11d] [Shell] [drduh/pwd.sh](https://github.com/drduh/pwd.sh) GPG symmetric password manager
-- [**1377**星][11d] [OCaml] [mirage/mirage](https://github.com/mirage/mirage) MirageOS is a library operating system that constructs unikernels
-- [**1376**星][6m] [Py] [almandin/fuxploider](https://github.com/almandin/fuxploider) 文件上传漏洞扫描和利用工具
-- [**1375**星][10m] [JS] [intika/librefox](https://github.com/intika/librefox) Firefox with privacy enhancements
+- [**1399**星][16d] [Swift] [johnno1962/injectioniii](https://github.com/johnno1962/injectioniii) Re-write of Injection for Xcode in (mostly) Swift4
+- [**1397**星][1y] [Go] [filosottile/whosthere](https://github.com/filosottile/whosthere) A ssh server that knows who you are
+- [**1396**星][3y] [PS] [putterpanda/mimikittenz](https://github.com/putterpanda/mimikittenz) A post-exploitation powershell tool for extracting juicy info from memory.
+- [**1395**星][27d] [C] [quiet/org.quietmodem.quiet](https://github.com/quiet/org.quietmodem.quiet) Quiet for Android - TCP over sound
+- [**1393**星][4d] [atarity/deploy-your-own-saas](https://github.com/atarity/deploy-your-own-saas) List of "only yours" cloud services for everyday needs
+- [**1393**星][9d] [Py] [ekultek/whatwaf](https://github.com/ekultek/whatwaf) 检测并绕过WAF和保护系统
+- [**1392**星][16d] [C++] [jonathansalwan/triton](https://github.com/jonathansalwan/triton) Triton is a Dynamic Binary Analysis (DBA) framework. It provides internal components like a Dynamic Symbolic Execution (DSE) engine, a dynamic taint engine, AST representations of the x86, x86-64 and AArch64 Instructions Set Architecture (ISA), SMT simplification passes, an SMT solver interface and, the last but not least, Python bindings.
+- [**1388**星][4y] [PHP] [johntroony/php-webshells](https://github.com/johntroony/php-webshells) Common php webshells. Do not host the file(s) on your server!
+- [**1387**星][11m] [Py] [eth0izzle/bucket-stream](https://github.com/eth0izzle/bucket-stream) 通过certstream 监控多种证书 transparency 日志, 进而查找有趣的 Amazon S3 Buckets
+- [**1386**星][2y] [JS] [sqren/fb-sleep-stats](https://github.com/sqren/fb-sleep-stats) 使用Facebook追踪用户的睡觉习惯
+- [**1384**星][5d] [JS] [ix64/unlock-music](https://github.com/ix64/unlock-music) Unlock encrypted music file in browser. 在浏览器中解锁加密的音乐文件。
+- [**1381**星][6m] [Py] [almandin/fuxploider](https://github.com/almandin/fuxploider) 文件上传漏洞扫描和利用工具
+- [**1380**星][15d] [C] [dynamorio/drmemory](https://github.com/dynamorio/drmemory) Memory Debugger for Windows, Linux, Mac, and Android
+- [**1380**星][13d] [Shell] [drduh/pwd.sh](https://github.com/drduh/pwd.sh) GPG symmetric password manager
+- [**1378**星][13d] [OCaml] [mirage/mirage](https://github.com/mirage/mirage) MirageOS is a library operating system that constructs unikernels
+- [**1378**星][2d] [JS] [lockfale/osint-framework](https://github.com/lockfale/osint-framework) OSINT Framework
+- [**1375**星][15d] [Go] [unrolled/secure](https://github.com/unrolled/secure) HTTP middleware for Go that facilitates some quick security wins.
+- [**1375**星][11m] [JS] [intika/librefox](https://github.com/intika/librefox) Firefox with privacy enhancements
- [**1374**星][4y] [C++] [valvesoftware/vogl](https://github.com/valvesoftware/vogl) OpenGL capture / playback debugger.
-- [**1373**星][13d] [C] [dynamorio/drmemory](https://github.com/dynamorio/drmemory) Memory Debugger for Windows, Linux, Mac, and Android
-- [**1365**星][9m] [PowerShell] [danielbohannon/invoke-obfuscation](https://github.com/danielbohannon/invoke-obfuscation) PowerShell Obfuscator
-- [**1364**星][5m] [Py] [s0md3v/striker](https://github.com/s0md3v/Striker) Striker is an offensive information and vulnerability scanner.
-- [**1363**星][29d] [C] [zyantific/zydis](https://github.com/zyantific/zydis) 快速的轻量级x86/x86-64 反汇编库
-- [**1361**星][3y] [C++] [aslody/turbodex](https://github.com/aslody/turbodex) 在内存中快速加载dex
-- [**1360**星][6m] [Py] [vulnerscom/getsploit](https://github.com/vulnerscom/getsploit) Command line utility for searching and downloading exploits
-- [**1360**星][2m] [Py] [fireeye/flare-floss](https://github.com/fireeye/flare-floss) 自动从恶意代码中提取反混淆后的字符串
+- [**1373**星][5m] [Py] [s0md3v/striker](https://github.com/s0md3v/Striker) Striker is an offensive information and vulnerability scanner.
+- [**1373**星][9m] [PS] [danielbohannon/invoke-obfuscation](https://github.com/danielbohannon/invoke-obfuscation) PowerShell Obfuscator
+- [**1371**星][1m] [C] [zyantific/zydis](https://github.com/zyantific/zydis) 快速的轻量级x86/x86-64 反汇编库
+- [**1365**星][9d] [Go] [cortesi/modd](https://github.com/cortesi/modd) A flexible developer tool that runs processes and responds to filesystem changes
+- [**1363**星][2m] [Py] [fireeye/flare-floss](https://github.com/fireeye/flare-floss) 自动从恶意代码中提取反混淆后的字符串
- [floss](https://github.com/fireeye/flare-floss/tree/master/floss)
- [IDA插件](https://github.com/fireeye/flare-floss/blob/master/scripts/idaplugin.py)
-- [**1358**星][7d] [Go] [cortesi/modd](https://github.com/cortesi/modd) A flexible developer tool that runs processes and responds to filesystem changes
-- [**1357**星][24d] [JS] [lockfale/osint-framework](https://github.com/lockfale/osint-framework) OSINT Framework
-- [**1355**星][6m] [C++] [phpv8/v8js](https://github.com/phpv8/v8js) V8 Javascript Engine for PHP — This PHP extension embeds the Google V8 Javascript Engine
-- [**1355**星][1m] [grrrdog/java-deserialization-cheat-sheet](https://github.com/grrrdog/java-deserialization-cheat-sheet) The cheat sheet about Java Deserialization vulnerabilities
-- [**1355**星][2m] [C] [googleprojectzero/winafl](https://github.com/googleprojectzero/winafl) A fork of AFL for fuzzing Windows binaries
-- [**1348**星][23d] [C] [x64dbg/x64dbgpy](https://github.com/x64dbg/x64dbgpy) Automating x64dbg using Python, Snapshots:
-- [**1348**星][4m] [C] [taviso/ctftool](https://github.com/taviso/ctftool) Interactive CTF Exploration Tool
-- [**1348**星][3y] [Py] [joaomatosf/jexboss](https://github.com/joaomatosf/jexboss) Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool
-- [**1347**星][13d] [Go] [unrolled/secure](https://github.com/unrolled/secure) HTTP middleware for Go that facilitates some quick security wins.
-- [**1347**星][3m] [C++] [raspberrypi/tools](https://github.com/raspberrypi/tools)
+- [**1363**星][3y] [C++] [aslody/turbodex](https://github.com/aslody/turbodex) 在内存中快速加载dex
+- [**1362**星][1m] [grrrdog/java-deserialization-cheat-sheet](https://github.com/grrrdog/java-deserialization-cheat-sheet) The cheat sheet about Java Deserialization vulnerabilities
+- [**1361**星][7m] [Py] [vulnerscom/getsploit](https://github.com/vulnerscom/getsploit) Command line utility for searching and downloading exploits
+- [**1361**星][6m] [C++] [phpv8/v8js](https://github.com/phpv8/v8js) V8 Javascript Engine for PHP — This PHP extension embeds the Google V8 Javascript Engine
+- [**1359**星][2m] [C] [googleprojectzero/winafl](https://github.com/googleprojectzero/winafl) A fork of AFL for fuzzing Windows binaries
+- [**1355**星][10m] [HTML] [thelinuxchoice/blackeye](https://github.com/thelinuxchoice/blackeye) The most complete Phishing Tool, with 32 templates +1 customizable
+- [**1354**星][2d] [Py] [mitre/caldera](https://github.com/mitre/caldera) 自动化 adversary emulation 系统
+- [**1352**星][3y] [Py] [joaomatosf/jexboss](https://github.com/joaomatosf/jexboss) Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool
+- [**1351**星][3m] [C++] [raspberrypi/tools](https://github.com/raspberrypi/tools)
+- [**1350**星][4m] [C] [taviso/ctftool](https://github.com/taviso/ctftool) Interactive CTF Exploration Tool
+- [**1349**星][3y] [Py] [ddevault/evilpass](https://github.com/ddevault/evilpass) Slightly evil password strength checker
+- [**1349**星][19d] [C++] [rikkaapps/riru](https://github.com/rikkaapps/riru) Inject zygote process by replace libmemtrack
+- [**1349**星][5m] [Py] [lijiejie/githack](https://github.com/lijiejie/githack) git泄露利用脚本,通过泄露的.git文件夹下的文件,重建还原工程源代码
+- [**1348**星][10m] [rebeyond/behinder](https://github.com/rebeyond/behinder) “冰蝎”动态二进制加密网站管理客户端
- [**1347**星][11m] [Rust] [das-labor/panopticon](https://github.com/das-labor/panopticon) A libre cross-platform disassembler.
-- [**1346**星][3y] [Py] [ddevault/evilpass](https://github.com/ddevault/evilpass) Slightly evil password strength checker
- [**1346**星][2y] [HTML] [daxeel/blockshell](https://github.com/daxeel/blockshell) 用于学习区块链技术概念的命令行工具, 例如 likechaining, mining,proof of work 等
-- [**1344**星][10m] [HTML] [thelinuxchoice/blackeye](https://github.com/thelinuxchoice/blackeye) The most complete Phishing Tool, with 32 templates +1 customizable
-- [**1343**星][5m] [Py] [lijiejie/githack](https://github.com/lijiejie/githack) git泄露利用脚本,通过泄露的.git文件夹下的文件,重建还原工程源代码
-- [**1343**星][3m] [Go] [hellogcc/100-gdb-tips](https://github.com/hellogcc/100-gdb-tips) A collection of gdb tips. 100 maybe just mean many here.
-- [**1342**星][7d] [Py] [mitre/caldera](https://github.com/mitre/caldera) 自动化 adversary emulation 系统
-- [**1341**星][10d] [Go] [securitywithoutborders/hardentools](https://github.com/securitywithoutborders/hardentools) 禁用许多有危险的Windows功能
-- [**1341**星][2m] [Go] [davrodpin/mole](https://github.com/davrodpin/mole) cli app to create ssh tunnels
-- [**1339**星][21d] [Py] [s0md3v/arjun](https://github.com/s0md3v/Arjun) HTTP parameter discovery suite.
-- [**1339**星][12m] [XSLT] [api0cradle/lolbas](https://github.com/api0cradle/lolbas) Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
-- [**1338**星][21d] [Go] [microcosm-cc/bluemonday](https://github.com/microcosm-cc/bluemonday) a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS
-- [**1338**星][7m] [Py] [feeicn/gsil](https://github.com/feeicn/gsil) GitHub敏感信息泄露监控,几乎实时监控,发送警告
-- [**1337**星][1y] [Py] [carmaa/inception](https://github.com/carmaa/inception) 利用基于PCI的DMA实现物理内存的操纵与Hacking,可以攻击FireWire,Thunderbolt,ExpressCard,PC Card和任何其他PCI / PCIe硬件接口
-- [**1336**星][6y] [Perl] [intelisecurelabs/linux_exploit_suggester](https://github.com/InteliSecureLabs/Linux_Exploit_Suggester) Linux Exploit Suggester; based on operating system release number
-- [**1336**星][3m] [Py] [maratyszcza/peachpy](https://github.com/maratyszcza/peachpy) x86-64 assembler embedded in Python
-- [**1333**星][17d] [C++] [rikkaapps/riru](https://github.com/rikkaapps/riru) Inject zygote process by replace libmemtrack
-- [**1331**星][2m] [C++] [mfontanini/libtins](https://github.com/mfontanini/libtins) High-level, multiplatform C++ network packet sniffing and crafting library.
-- [**1331**星][1y] [C] [gamelinux/passivedns](https://github.com/gamelinux/passivedns) A network sniffer that logs all DNS server replies for use in a passive DNS setup
-- [**1329**星][1m] [CSS] [undeadsec/socialfish](https://github.com/undeadsec/socialfish) 网络钓鱼培训与信息收集
-- [**1329**星][10m] [rebeyond/behinder](https://github.com/rebeyond/behinder) “冰蝎”动态二进制加密网站管理客户端
-- [**1329**星][1y] [kirikira/vtemplate](https://github.com/kirikira/vtemplate) v2ray的模板们
-- [**1328**星][1y] [C] [madeye/proxydroid](https://github.com/madeye/proxydroid) Global Proxy for Android
-- [**1326**星][11d] [C++] [purplei2p/i2pd](https://github.com/purplei2p/i2pd) a full-featured C++ implementation of I2P client
-- [**1324**星][2y] [CoffeeScript] [atmos/camo](https://github.com/atmos/camo) all about making insecure assets look secure
-- [**1323**星][1y] [Py] [marten4n6/evilosx](https://github.com/marten4n6/evilosx) An evil RAT (Remote Administration Tool) for macOS / OS X.
-- [**1322**星][3m] [HTML] [thehive-project/thehive](https://github.com/thehive-project/thehive) a Scalable, Open Source and Free Security Incident Response Platform
-- [**1321**星][6m] [Go] [ssllabs/ssllabs-scan](https://github.com/ssllabs/ssllabs-scan) A command-line reference-implementation client for SSL Labs APIs, designed for automated and/or bulk testing.
-- [**1321**星][1y] [C++] [rehints/hexrayscodexplorer](https://github.com/rehints/hexrayscodexplorer) 反编译插件, 多功能
+- [**1345**星][25d] [C] [x64dbg/x64dbgpy](https://github.com/x64dbg/x64dbgpy) Automating x64dbg using Python, Snapshots:
+- [**1345**星][12d] [Go] [securitywithoutborders/hardentools](https://github.com/securitywithoutborders/hardentools) 禁用许多有危险的Windows功能
+- [**1344**星][23d] [Go] [microcosm-cc/bluemonday](https://github.com/microcosm-cc/bluemonday) a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS
+- [**1343**星][23d] [Py] [s0md3v/arjun](https://github.com/s0md3v/Arjun) HTTP parameter discovery suite.
+- [**1342**星][12m] [C] [luke-jr/bfgminer](https://github.com/luke-jr/bfgminer) Modular ASIC/FPGA miner written in C, featuring overclocking, monitoring, fan speed control and remote interface capabilities.
+- [**1342**星][2m] [Go] [davrodpin/mole](https://github.com/davrodpin/mole) cli app to create ssh tunnels
+- [**1342**星][1y] [Py] [carmaa/inception](https://github.com/carmaa/inception) 利用基于PCI的DMA实现物理内存的操纵与Hacking,可以攻击FireWire,Thunderbolt,ExpressCard,PC Card和任何其他PCI / PCIe硬件接口
+- [**1341**星][3m] [Py] [maratyszcza/peachpy](https://github.com/maratyszcza/peachpy) x86-64 assembler embedded in Python
+- [**1341**星][1y] [XSLT] [api0cradle/lolbas](https://github.com/api0cradle/lolbas) Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
+- [**1340**星][1y] [kirikira/vtemplate](https://github.com/kirikira/vtemplate) v2ray的模板们
+- [**1340**星][7m] [Py] [feeicn/gsil](https://github.com/feeicn/gsil) GitHub敏感信息泄露监控,几乎实时监控,发送警告
+- [**1339**星][6y] [Perl] [intelisecurelabs/linux_exploit_suggester](https://github.com/InteliSecureLabs/Linux_Exploit_Suggester) Linux Exploit Suggester; based on operating system release number
+- [**1338**星][1m] [CSS] [undeadsec/socialfish](https://github.com/undeadsec/socialfish) 网络钓鱼培训与信息收集
+- [**1337**星][1y] [C] [madeye/proxydroid](https://github.com/madeye/proxydroid) Global Proxy for Android
+- [**1336**星][3m] [HTML] [thehive-project/thehive](https://github.com/thehive-project/thehive) a Scalable, Open Source and Free Security Incident Response Platform
+- [**1335**星][2m] [C++] [mfontanini/libtins](https://github.com/mfontanini/libtins) High-level, multiplatform C++ network packet sniffing and crafting library.
+- [**1334**星][4y] [mengskysama/shadowsocks](https://github.com/mengskysama/shadowsocks) A fast tunnel proxy that helps you bypass firewalls
+- [**1333**星][1y] [C] [gamelinux/passivedns](https://github.com/gamelinux/passivedns) A network sniffer that logs all DNS server replies for use in a passive DNS setup
+- [**1328**星][2d] [C++] [purplei2p/i2pd](https://github.com/purplei2p/i2pd) a full-featured C++ implementation of I2P client
+- [**1328**星][1y] [Py] [marten4n6/evilosx](https://github.com/marten4n6/evilosx) An evil RAT (Remote Administration Tool) for macOS / OS X.
+- [**1328**星][2y] [CoffeeScript] [atmos/camo](https://github.com/atmos/camo) all about making insecure assets look secure
+- [**1327**星][7m] [Go] [ssllabs/ssllabs-scan](https://github.com/ssllabs/ssllabs-scan) A command-line reference-implementation client for SSL Labs APIs, designed for automated and/or bulk testing.
+- [**1327**星][3d] [C] [intel/haxm](https://github.com/intel/haxm) Intel 开源的英特尔硬件加速执行管理器,通过硬件辅助的虚拟化引擎,加速 Windows/macOS 主机上的 IA emulation((x86/ x86_64) )
+- [**1327**星][10m] [C#] [cenmrev/v2rayw](https://github.com/cenmrev/v2rayw) GUI for v2ray-core on Windows
+- [**1325**星][21d] [C] [dtag-dev-sec/tpotce](https://github.com/dtag-dev-sec/tpotce) 创建多蜜罐平台T-Pot ISO 镜像
+- [**1324**星][1y] [C++] [rehints/hexrayscodexplorer](https://github.com/rehints/hexrayscodexplorer) 反编译插件, 多功能
查看详情
@@ -933,142 +1003,143 @@
-- [**1318**星][2m] [jaredthecoder/awesome-vehicle-security](https://github.com/jaredthecoder/awesome-vehicle-security)
-- [**1315**星][1y] [mortenoir1/virtualbox_e1000_0day](https://github.com/mortenoir1/virtualbox_e1000_0day) VirtualBox E1000 Guest-to-Host Escape
-- [**1312**星][12d] [C] [oisf/suricata](https://github.com/OISF/suricata) a network IDS, IPS and NSM engine
-- [**1311**星][2y] [Py] [worawit/ms17-010](https://github.com/worawit/ms17-010) MS17-010
-- [**1311**星][18d] [C] [intel/haxm](https://github.com/intel/haxm) Intel 开源的英特尔硬件加速执行管理器,通过硬件辅助的虚拟化引擎,加速 Windows/macOS 主机上的 IA emulation((x86/ x86_64) )
-- [**1310**星][3m] [PowerShell] [peewpw/invoke-psimage](https://github.com/peewpw/invoke-psimage) Encodes a PowerShell script in the pixels of a PNG file and generates a oneliner to execute
-- [**1310**星][10m] [C] [fancycode/memorymodule](https://github.com/fancycode/memorymodule) Library to load a DLL from memory.
-- [**1309**星][10m] [C#] [cenmrev/v2rayw](https://github.com/cenmrev/v2rayw) GUI for v2ray-core on Windows
-- [**1305**星][12m] [Py] [xyntax/poc-t](https://github.com/xyntax/poc-t) 脚本调用框架,用于渗透测试中 采集|爬虫|爆破|批量PoC 等需要并发的任务
-- [**1305**星][3m] [Lua] [scipag/vulscan](https://github.com/scipag/vulscan) Nmap 模块,将 Nmap 转化为高级漏洞扫描器
-- [**1305**星][18d] [C] [dtag-dev-sec/tpotce](https://github.com/dtag-dev-sec/tpotce) 创建多蜜罐平台T-Pot ISO 镜像
-- [**1303**星][17d] [Py] [consensys/mythril](https://github.com/ConsenSys/mythril) Security analysis tool for EVM bytecode. Supports smart contracts built for Ethereum, Quorum, Vechain, Roostock, Tron and other EVM-compatible blockchains.
-- [**1303**星][15d] [nikitavoloboev/privacy-respecting](https://github.com/nikitavoloboev/privacy-respecting) PrivacyRespecting 服务和软件列表
+- [**1323**星][2d] [Go] [xiaoming2028/freenet](https://github.com/xiaoming2028/freenet) 科学上网/梯子/自由上网/翻墙 SS/SSR/V2Ray/Brook 搭建教程
+- [**1323**星][2m] [jaredthecoder/awesome-vehicle-security](https://github.com/jaredthecoder/awesome-vehicle-security)
+- [**1322**星][3d] [C] [oisf/suricata](https://github.com/OISF/suricata) a network IDS, IPS and NSM engine
+- [**1319**星][2y] [Py] [worawit/ms17-010](https://github.com/worawit/ms17-010) MS17-010
+- [**1317**星][1y] [mortenoir1/virtualbox_e1000_0day](https://github.com/mortenoir1/virtualbox_e1000_0day) VirtualBox E1000 Guest-to-Host Escape
+- [**1316**星][3m] [PS] [peewpw/invoke-psimage](https://github.com/peewpw/invoke-psimage) Encodes a PowerShell script in the pixels of a PNG file and generates a oneliner to execute
+- [**1314**星][10m] [C] [fancycode/memorymodule](https://github.com/fancycode/memorymodule) Library to load a DLL from memory.
+- [**1311**星][1m] [C++] [shadowsocks/libqtshadowsocks](https://github.com/shadowsocks/libqtshadowsocks) A lightweight and ultra-fast shadowsocks library written in C++14 with Qt framework
+- [**1309**星][12m] [Py] [xyntax/poc-t](https://github.com/xyntax/poc-t) 脚本调用框架,用于渗透测试中 采集|爬虫|爆破|批量PoC 等需要并发的任务
+- [**1309**星][3m] [Lua] [scipag/vulscan](https://github.com/scipag/vulscan) Nmap 模块,将 Nmap 转化为高级漏洞扫描器
+- [**1307**星][19d] [Py] [consensys/mythril](https://github.com/ConsenSys/mythril) Security analysis tool for EVM bytecode. Supports smart contracts built for Ethereum, Quorum, Vechain, Roostock, Tron and other EVM-compatible blockchains.
+- [**1307**星][27d] [C] [boywhp/fcn](https://github.com/boywhp/fcn) free connect your private network from anywhere
+- [**1304**星][17d] [nikitavoloboev/privacy-respecting](https://github.com/nikitavoloboev/privacy-respecting) PrivacyRespecting 服务和软件列表
+- [**1304**星][7d] [C] [cisco-talos/pyrebox](https://github.com/cisco-talos/pyrebox) 逆向沙箱,基于QEMU,Python Scriptable
- [**1303**星][4m] [C++] [klee/klee](https://github.com/klee/klee) 基于 LLVM 的 symbolic 虚拟机
-- [**1300**星][18d] [C] [cisco-talos/pyrebox](https://github.com/cisco-talos/pyrebox) 逆向沙箱,基于QEMU,Python Scriptable
-- [**1297**星][1y] [Go] [evilsocket/xray](https://github.com/evilsocket/xray) 自动化执行一些信息收集、网络映射的初始化工作
-- [**1293**星][1y] [Shell] [dana-at-cp/backdoor-apk](https://github.com/dana-at-cp/backdoor-apk) backdoor-apk is a shell script that simplifies the process of adding a backdoor to any Android APK file. Users of this shell script should have working knowledge of Linux, Bash, Metasploit, Apktool, the Android SDK, smali, etc. This shell script is provided as-is without warranty of any kind and is intended for educational purposes only.
-- [**1291**星][27d] [Java] [android-hacker/exposed](https://github.com/android-hacker/exposed) A library to use Xposed without root or recovery(or modify system image etc..).
-- [**1290**星][2y] [Go] [malfunkt/hyperfox](https://github.com/malfunkt/hyperfox) 在局域网上代理和记录 HTTP 和 HTTPs 通信
-- [**1289**星][2m] [C] [traviscross/mtr](https://github.com/traviscross/mtr) Official repository for mtr, a network diagnostic tool
-- [**1288**星][4y] [C++] [microsoft/microsoft-pdb](https://github.com/microsoft/microsoft-pdb) Microsoft提供的有关PDB格式的信息
-- [**1287**星][19d] [JS] [icymind/vrouter](https://github.com/icymind/vrouter) 一个基于 VirtualBox 和 openwrt 构建的项目, 旨在实现 macOS / Windows 平台的透明代理.
-- [**1284**星][2m] [Py] [virtualabs/btlejack](https://github.com/virtualabs/btlejack) Bluetooth Low Energy Swiss-army knife
-- [**1284**星][5m] [JS] [feross/spoof](https://github.com/feross/spoof) Easily spoof your MAC address in macOS, Windows, & Linux!
-- [**1278**星][9m] [michalmalik/linux-re-101](https://github.com/michalmalik/linux-re-101) Linux逆向资源收集
-- [**1278**星][4y] [Py] [elvanderb/tcp-32764](https://github.com/elvanderb/tcp-32764) some codes and notes about the backdoor listening on TCP-32764 in linksys WAG200G.
-- [**1277**星][10d] [PHP] [friendsofphp/security-advisories](https://github.com/friendsofphp/security-advisories) A database of PHP security advisories
-- [**1277**星][27d] [Go] [dreadl0ck/netcap](https://github.com/dreadl0ck/netcap) A framework for secure and scalable network traffic analysis -
-- [**1275**星][24d] [Py] [viper-framework/viper](https://github.com/viper-framework/viper) Binary analysis and management framework
-- [**1273**星][1m] [Py] [pyauth/pyotp](https://github.com/pyauth/pyotp) Python One-Time Password Library
-- [**1273**星][2m] [Py] [codingo/reconnoitre](https://github.com/codingo/reconnoitre) A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.
-- [**1272**星][1y] [JS] [sakurity/securelogin](https://github.com/sakurity/securelogin) 针对网站和App的去中心化的认证协议
-- [**1270**星][2m] [C] [seemoo-lab/nexmon](https://github.com/seemoo-lab/nexmon) The C-based Firmware Patching Framework for Broadcom/Cypress WiFi Chips that enables Monitor Mode, Frame Injection and much more
-- [**1270**星][1y] [PowerShell] [dafthack/mailsniper](https://github.com/dafthack/mailsniper) 在Microsoft Exchange环境中搜索邮件中包含的指定内容:密码、insider intel、网络架构信息等
-- [**1270**星][1m] [Py] [bethgelab/foolbox](https://github.com/bethgelab/foolbox) Python toolbox to create adversarial examples that fool neural networks in PyTorch, TensorFlow, Keras, …
-- [**1268**星][2m] [Java] [googlearchive/android-runtimepermissions](https://github.com/googlearchive/android-RuntimePermissions) This sample has been deprecated/archived. Check this repo for related samples:
-- [**1268**星][1y] [Py] [ethereum/pyethapp](https://github.com/ethereum/pyethapp)
-- [**1266**星][2m] [Py] [ganapati/rsactftool](https://github.com/ganapati/rsactftool) RSA攻击工具,主要用于CTF,从弱公钥和/或uncipher数据中回复私钥
-- [**1265**星][9d] [Shell] [firehol/blocklist-ipsets](https://github.com/firehol/blocklist-ipsets) ipsets dynamically updated with firehol's update-ipsets.sh script
-- [**1265**星][9d] [Shell] [firehol/blocklist-ipsets](https://github.com/firehol/blocklist-ipsets) ipsets dynamically updated with firehol's update-ipsets.sh script
-- [**1262**星][3m] [Go] [solo-io/squash](https://github.com/solo-io/squash) The debugger for microservices
-- [**1261**星][3m] [Py] [alessandroz/beroot](https://github.com/alessandroz/beroot) Privilege Escalation Project - Windows / Linux / Mac
-- [**1259**星][11m] [Py] [unapibageek/ctfr](https://github.com/unapibageek/ctfr) Abusing Certificate Transparency logs for getting HTTPS websites subdomains.
-- [**1255**星][7m] [PHP] [ganlvtech/down_52pojie_cn](https://github.com/ganlvtech/down_52pojie_cn) A single page file explorer that can be hosted on static website. 吾爱破解论坛 爱盘
-- [**1255**星][13d] [C] [aircrack-ng/aircrack-ng](https://github.com/aircrack-ng/aircrack-ng) WiFi security auditing tools suite
-- [**1253**星][2y] [JS] [samyk/skyjack](https://github.com/samyk/skyjack) A drone engineered to autonomously seek out, hack, and wirelessly take full control over any other Parrot or 3DR drones within wireless or flying distance, creating an army of zombie drones under your control.
-- [**1250**星][1m] [PowerShell] [hak5/bashbunny-payloads](https://github.com/hak5/bashbunny-payloads) The Official Bash Bunny Payload Repository
-- [**1248**星][2y] [Py] [vaguileradiaz/tinfoleak](https://github.com/vaguileradiaz/tinfoleak) Twitter 智能分析工具
-- [**1248**星][4m] [JS] [bubenshchykov/ngrok](https://github.com/bubenshchykov/ngrok) Expose your localhost to the web. Node wrapper for ngrok.
-- [**1245**星][2m] [Go] [xiaoming2028/freenet](https://github.com/xiaoming2028/freenet) 科学上网/梯子/自由上网/翻墙 SSR/V2Ray/Brook 最全搭建教程
-- [**1245**星][15d] [JS] [archerysec/archerysec](https://github.com/archerysec/archerysec) Centralize Vulnerability Assessment and Management for DevSecOps Team
-- [**1244**星][2y] [Objective-C] [krausefx/detect.location](https://github.com/krausefx/detect.location) An easy way to access the user's iOS location data without actually having access
-- [**1242**星][4y] [firesuncn/bluelotus_xssreceiver](https://github.com/firesuncn/bluelotus_xssreceiver) XSS平台 CTF工具 Web安全工具
-- [**1242**星][1m] [Vue] [chaitin/passionfruit](https://github.com/chaitin/passionfruit) iOSapp 黑盒评估工具。功能丰富,自带基于web的 GUI
+- [**1300**星][1y] [Shell] [dana-at-cp/backdoor-apk](https://github.com/dana-at-cp/backdoor-apk) backdoor-apk is a shell script that simplifies the process of adding a backdoor to any Android APK file. Users of this shell script should have working knowledge of Linux, Bash, Metasploit, Apktool, the Android SDK, smali, etc. This shell script is provided as-is without warranty of any kind and is intended for educational purposes only.
+- [**1299**星][6d] [Go] [hacklcx/hfish](https://github.com/hacklcx/hfish) 扩展企业安全测试主动诱导型开源蜜罐框架系统,记录黑客攻击手段
+- [**1298**星][1y] [Go] [evilsocket/xray](https://github.com/evilsocket/xray) 自动化执行一些信息收集、网络映射的初始化工作
+- [**1293**星][4y] [C++] [microsoft/microsoft-pdb](https://github.com/microsoft/microsoft-pdb) Microsoft提供的有关PDB格式的信息
+- [**1293**星][5m] [JS] [feross/spoof](https://github.com/feross/spoof) Easily spoof your MAC address in macOS, Windows, & Linux!
+- [**1293**星][29d] [Java] [android-hacker/exposed](https://github.com/android-hacker/exposed) A library to use Xposed without root or recovery(or modify system image etc..).
+- [**1291**星][6d] [C] [traviscross/mtr](https://github.com/traviscross/mtr) Official repository for mtr, a network diagnostic tool
+- [**1291**星][2y] [Go] [malfunkt/hyperfox](https://github.com/malfunkt/hyperfox) 在局域网上代理和记录 HTTP 和 HTTPs 通信
+- [**1289**星][2m] [Py] [virtualabs/btlejack](https://github.com/virtualabs/btlejack) Bluetooth Low Energy Swiss-army knife
+- [**1289**星][21d] [JS] [icymind/vrouter](https://github.com/icymind/vrouter) 一个基于 VirtualBox 和 openwrt 构建的项目, 旨在实现 macOS / Windows 平台的透明代理.
+- [**1285**星][12d] [PHP] [friendsofphp/security-advisories](https://github.com/friendsofphp/security-advisories) A database of PHP security advisories
+- [**1283**星][9m] [michalmalik/linux-re-101](https://github.com/michalmalik/linux-re-101) Linux逆向资源收集
+- [**1283**星][2m] [Py] [codingo/reconnoitre](https://github.com/codingo/reconnoitre) A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.
+- [**1279**星][2m] [C] [seemoo-lab/nexmon](https://github.com/seemoo-lab/nexmon) The C-based Firmware Patching Framework for Broadcom/Cypress WiFi Chips that enables Monitor Mode, Frame Injection and much more
+- [**1279**星][9m] [Go] [perlin-network/noise](https://github.com/perlin-network/noise) A decentralized P2P networking stack written in Go.
+- [**1279**星][4y] [Py] [elvanderb/tcp-32764](https://github.com/elvanderb/tcp-32764) some codes and notes about the backdoor listening on TCP-32764 in linksys WAG200G.
+- [**1278**星][26d] [Py] [viper-framework/viper](https://github.com/viper-framework/viper) Binary analysis and management framework
+- [**1277**星][4d] [Shell] [firehol/blocklist-ipsets](https://github.com/firehol/blocklist-ipsets) ipsets dynamically updated with firehol's update-ipsets.sh script
+- [**1277**星][8d] [Py] [pyauth/pyotp](https://github.com/pyauth/pyotp) Python One-Time Password Library
+- [**1277**星][4d] [Shell] [firehol/blocklist-ipsets](https://github.com/firehol/blocklist-ipsets) ipsets dynamically updated with firehol's update-ipsets.sh script
+- [**1277**星][29d] [Go] [dreadl0ck/netcap](https://github.com/dreadl0ck/netcap) A framework for secure and scalable network traffic analysis -
+- [**1277**星][1m] [Py] [bethgelab/foolbox](https://github.com/bethgelab/foolbox) Python toolbox to create adversarial examples that fool neural networks in PyTorch, TensorFlow, Keras, …
+- [**1273**星][1y] [PS] [dafthack/mailsniper](https://github.com/dafthack/mailsniper) 在Microsoft Exchange环境中搜索邮件中包含的指定内容:密码、insider intel、网络架构信息等
+- [**1271**星][1y] [JS] [sakurity/securelogin](https://github.com/sakurity/securelogin) 针对网站和App的去中心化的认证协议
+- [**1271**星][2m] [Py] [ganapati/rsactftool](https://github.com/ganapati/rsactftool) RSA攻击工具,主要用于CTF,从弱公钥和/或uncipher数据中回复私钥
+- [**1270**星][3m] [Py] [alessandroz/beroot](https://github.com/alessandroz/beroot) Privilege Escalation Project - Windows / Linux / Mac
+- [**1269**星][3m] [Java] [googlearchive/android-runtimepermissions](https://github.com/googlearchive/android-RuntimePermissions) This sample has been deprecated/archived. Check this repo for related samples:
+- [**1269**星][3m] [Go] [solo-io/squash](https://github.com/solo-io/squash) The debugger for microservices
+- [**1269**星][1y] [Py] [ethereum/pyethapp](https://github.com/ethereum/pyethapp)
+- [**1267**星][7m] [PHP] [ganlvtech/down_52pojie_cn](https://github.com/ganlvtech/down_52pojie_cn) A single page file explorer that can be hosted on static website. 吾爱破解论坛 爱盘
+- [**1267**星][2d] [C] [aircrack-ng/aircrack-ng](https://github.com/aircrack-ng/aircrack-ng) WiFi security auditing tools suite
+- [**1263**星][4d] [JS] [forwardemail/free-email-forwarding](https://github.com/forwardemail/free-email-forwarding)
+- [**1261**星][11m] [Py] [unapibageek/ctfr](https://github.com/unapibageek/ctfr) Abusing Certificate Transparency logs for getting HTTPS websites subdomains.
+- [**1260**星][12m] [PHP] [you2php/delete](https://github.com/you2php/delete) (迫于压力,本项目停止维护,请尽快fork代码。1月1日之后删除项目)[免翻墙工具]A free and open-source youtube video proxy script [Written in PHP]
+- [**1256**星][1m] [PS] [hak5/bashbunny-payloads](https://github.com/hak5/bashbunny-payloads) The Official Bash Bunny Payload Repository
+- [**1255**星][2y] [JS] [samyk/skyjack](https://github.com/samyk/skyjack) A drone engineered to autonomously seek out, hack, and wirelessly take full control over any other Parrot or 3DR drones within wireless or flying distance, creating an army of zombie drones under your control.
+- [**1253**星][4d] [JS] [archerysec/archerysec](https://github.com/archerysec/archerysec) Centralize Vulnerability Assessment and Management for DevSecOps Team
+- [**1253**星][4m] [JS] [bubenshchykov/ngrok](https://github.com/bubenshchykov/ngrok) Expose your localhost to the web. Node wrapper for ngrok.
+- [**1251**星][3d] [Shell] [mitchellkrogza/nginx-ultimate-bad-bot-blocker](https://github.com/mitchellkrogza/nginx-ultimate-bad-bot-blocker) Nginx Block Bad Bots, Spam Referrer Blocker, Vulnerability Scanners, User-Agents, Malware, Adware, Ransomware, Malicious Sites, with anti-DDOS, Wordpress Theme Detector Blocking and Fail2Ban Jail for Repeat Offenders
+- [**1250**星][2y] [Py] [vaguileradiaz/tinfoleak](https://github.com/vaguileradiaz/tinfoleak) Twitter 智能分析工具
+- [**1247**星][1m] [Vue] [chaitin/passionfruit](https://github.com/chaitin/passionfruit) iOSapp 黑盒评估工具。功能丰富,自带基于web的 GUI
+- [**1244**星][3m] [michalmalik/osx-re-101](https://github.com/michalmalik/osx-re-101) OSX/iOS逆向资源收集
+- [**1244**星][2y] [ObjC] [krausefx/detect.location](https://github.com/krausefx/detect.location) An easy way to access the user's iOS location data without actually having access
+- [**1243**星][3m] [Shell] [rootsongjc/kubernetes-vagrant-centos-cluster](https://github.com/rootsongjc/kubernetes-vagrant-centos-cluster) Setting up a distributed Kubernetes cluster along with Istio service mesh locally with Vagrant and VirtualBox, only PoC or Demo use.
+- [**1243**星][10m] [C] [a0rtega/pafish](https://github.com/a0rtega/pafish) Pafish is a demonstration tool that employs several techniques to detect sandboxes and analysis environments in the same way as malware families do.
+- [**1242**星][9d] [Py] [thekingofduck/fuzzdicts](https://github.com/thekingofduck/fuzzdicts) Web Pentesting Fuzz 字典,一个就够了。
+- [**1241**星][4y] [firesuncn/bluelotus_xssreceiver](https://github.com/firesuncn/bluelotus_xssreceiver) XSS平台 CTF工具 Web安全工具
- [**1241**星][1y] [Ruby] [eliotsykes/rails-security-checklist](https://github.com/eliotsykes/rails-security-checklist)
-- [**1240**星][10m] [C] [a0rtega/pafish](https://github.com/a0rtega/pafish) Pafish is a demonstration tool that employs several techniques to detect sandboxes and analysis environments in the same way as malware families do.
-- [**1239**星][2m] [michalmalik/osx-re-101](https://github.com/michalmalik/osx-re-101) OSX/iOS逆向资源收集
-- [**1235**星][1m] [Go] [hacklcx/hfish](https://github.com/hacklcx/hfish) 扩展企业安全测试主动诱导型开源蜜罐框架系统,记录黑客攻击手段
-- [**1235**星][2m] [Go] [google/martian](https://github.com/google/martian) Martian is a library for building custom HTTP/S proxies
-- [**1232**星][3m] [Shell] [rootsongjc/kubernetes-vagrant-centos-cluster](https://github.com/rootsongjc/kubernetes-vagrant-centos-cluster) Setting up a distributed Kubernetes cluster along with Istio service mesh locally with Vagrant and VirtualBox, only PoC or Demo use.
-- [**1231**星][3y] [Py] [desaster/kippo](https://github.com/desaster/kippo) Kippo - SSH Honeypot
-- [**1230**星][7d] [Shell] [mitchellkrogza/nginx-ultimate-bad-bot-blocker](https://github.com/mitchellkrogza/nginx-ultimate-bad-bot-blocker) Nginx Block Bad Bots, Spam Referrer Blocker, Vulnerability Scanners, User-Agents, Malware, Adware, Ransomware, Malicious Sites, with anti-DDOS, Wordpress Theme Detector Blocking and Fail2Ban Jail for Repeat Offenders
-- [**1230**星][5m] [chalker/notes](https://github.com/chalker/notes) Some public notes
-- [**1228**星][1y] [Kotlin] [gh0u1l5/wechatspellbook](https://github.com/gh0u1l5/wechatspellbook) 一个使用Kotlin编写的开源微信插件框架,底层需要 Xposed 或 VirtualXposed 等Hooking框架的支持,而顶层可以轻松对接Java、Kotlin、Scala等JVM系语言。让程序员能够在几分钟内编写出简单的微信插件,随意揉捏微信的内部逻辑。
-- [**1228**星][8m] [Py] [flipkart-incubator/astra](https://github.com/flipkart-incubator/astra) 自动化的REST API安全测试脚本
-- [**1224**星][1m] [C] [datatheorem/trustkit](https://github.com/datatheorem/trustkit) Easy SSL pinning validation and reporting for iOS, macOS, tvOS and watchOS.
-- [**1223**星][3y] [CoffeeScript] [shadowsocks/shadowsocks-nodejs](https://github.com/shadowsocks/shadowsocks-nodejs)
-- [**1222**星][3y] [C] [tsudakageyu/minhook](https://github.com/tsudakageyu/minhook) The Minimalistic x86/x64 API Hooking Library for Windows
-- [**1222**星][27d] [C++] [nasa-sw-vnv/ikos](https://github.com/nasa-sw-vnv/ikos) Static analyzer for C/C++ based on the theory of Abstract Interpretation.
-- [**1222**星][1y] [Py] [danmcinerney/net-creds](https://github.com/danmcinerney/net-creds) Sniffs sensitive data from interface or pcap
-- [**1220**星][1y] [Go] [cloudflare/redoctober](https://github.com/cloudflare/redoctober) Go server for two-man rule style file encryption and decryption.
-- [**1219**星][5y] [cure53/xsschallengewiki](https://github.com/cure53/XSSChallengeWiki) Welcome to the XSS Challenge Wiki!
-- [**1219**星][4m] [Py] [owtf/owtf](https://github.com/owtf/owtf) 进攻性 Web 测试框架。着重于 OWASP + PTES,尝试统合强大的工具,提高渗透测试的效率。大部分以Python 编写
-- [**1218**星][11d] [Py] [google/timesketch](https://github.com/google/timesketch) Collaborative forensic timeline analysis
-- [**1218**星][26d] [Java] [find-sec-bugs/find-sec-bugs](https://github.com/find-sec-bugs/find-sec-bugs) The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)
-- [**1218**星][5y] [cure53/xsschallengewiki](https://github.com/cure53/xsschallengewiki) Welcome to the XSS Challenge Wiki!
-- [**1217**星][1y] [C#] [cn33liz/p0wnedshell](https://github.com/cn33liz/p0wnedshell) PowerShell Runspace Post Exploitation Toolkit
-- [**1216**星][26d] [Go] [jsha/minica](https://github.com/jsha/minica) minica is a small, simple CA intended for use in situations where the CA operator also operates each host where a certificate will be used.
-- [**1212**星][10d] [C] [dynamorio/dynamorio](https://github.com/dynamorio/dynamorio) Dynamic Instrumentation Tool Platform
-- [**1207**星][8d] [JS] [jpcertcc/logontracer](https://github.com/jpcertcc/logontracer) 通过可视化和分析Windows事件日志来调查恶意的Windows登录
-- [**1205**星][3m] [Java] [javiersantos/piracychecker](https://github.com/javiersantos/piracychecker) An Android library that prevents your app from being pirated / cracked using Google Play Licensing (LVL), APK signature protection and more. API 14+ required.
-- [**1204**星][7d] [Objective-C] [onionbrowser/onionbrowser](https://github.com/onionbrowser/onionbrowser) An open-source, privacy-enhancing web browser for iOS, utilizing the Tor anonymity network
-- [**1204**星][3m] [JS] [davidbau/seedrandom](https://github.com/davidbau/seedrandom) seeded random number generator for Javascript
-- [**1203**星][30d] [Py] [codingo/nosqlmap](https://github.com/codingo/NoSQLMap) Automated NoSQL database enumeration and web application exploitation tool.
-- [**1201**星][7d] [Java] [linkedin/dexmaker](https://github.com/linkedin/dexmaker) A utility for doing compile or runtime code generation targeting Android's Dalvik VM
-- [**1200**星][3m] [C] [droe/sslsplit](https://github.com/droe/sslsplit) 透明SSL/TLS拦截
-- [**1199**星][1y] [felixgr/secure-ios-app-dev](https://github.com/felixgr/secure-ios-app-dev) iOSApp 最常见漏洞收集
-- [**1198**星][24d] [Py] [thekingofduck/fuzzdicts](https://github.com/thekingofduck/fuzzdicts) Web Pentesting Fuzz 字典,一个就够了。
-- [**1196**星][1y] [Go] [rancher/convoy](https://github.com/rancher/convoy) A Docker volume plugin, managing persistent container volumes.
-- [**1194**星][2y] [C] [saminiir/level-ip](https://github.com/saminiir/level-ip) a Linux userspace TCP/IP stack, implemented with TUN/TAP devices.
-- [**1194**星][7m] [riusksk/secbook](https://github.com/riusksk/secbook) 信息安全从业者书单推荐
-- [**1193**星][18d] [Py] [cve-search/cve-search](https://github.com/cve-search/cve-search) 导入CVE/CPE 到本地 MongoDB 数据库,以便后续在本地进行搜索和处理
-- [**1192**星][17d] [YARA] [horsicq/detect-it-easy](https://github.com/horsicq/detect-it-easy) Program for determining types of files for Windows, Linux and MacOS.
-- [**1191**星][6y] [gdbinit/gdbinit](https://github.com/gdbinit/gdbinit) Gdbinit for OS X, iOS and others - x86, x86_64 and ARM
-- [**1191**星][9m] [C] [f0rb1dd3n/reptile](https://github.com/f0rb1dd3n/reptile) LKM Linux rootkit
-- [**1190**星][3m] [Py] [jtesta/ssh-mitm](https://github.com/jtesta/ssh-mitm) SSH 中间人攻击工具
+- [**1240**星][2m] [Go] [google/martian](https://github.com/google/martian) Martian is a library for building custom HTTP/S proxies
+- [**1238**星][1y] [Kotlin] [gh0u1l5/wechatspellbook](https://github.com/gh0u1l5/wechatspellbook) 一个使用Kotlin编写的开源微信插件框架,底层需要 Xposed 或 VirtualXposed 等Hooking框架的支持,而顶层可以轻松对接Java、Kotlin、Scala等JVM系语言。让程序员能够在几分钟内编写出简单的微信插件,随意揉捏微信的内部逻辑。
+- [**1233**星][3y] [Py] [desaster/kippo](https://github.com/desaster/kippo) Kippo - SSH Honeypot
+- [**1230**星][8m] [Py] [flipkart-incubator/astra](https://github.com/flipkart-incubator/astra) 自动化的REST API安全测试脚本
+- [**1229**星][5m] [chalker/notes](https://github.com/chalker/notes) Some public notes
+- [**1228**星][3y] [C] [tsudakageyu/minhook](https://github.com/tsudakageyu/minhook) The Minimalistic x86/x64 API Hooking Library for Windows
+- [**1228**星][3d] [C++] [nasa-sw-vnv/ikos](https://github.com/nasa-sw-vnv/ikos) Static analyzer for C/C++ based on the theory of Abstract Interpretation.
+- [**1227**星][6d] [C] [datatheorem/trustkit](https://github.com/datatheorem/trustkit) Easy SSL pinning validation and reporting for iOS, macOS, tvOS and watchOS.
+- [**1227**星][1y] [Py] [danmcinerney/net-creds](https://github.com/danmcinerney/net-creds) Sniffs sensitive data from interface or pcap
+- [**1225**星][28d] [Java] [find-sec-bugs/find-sec-bugs](https://github.com/find-sec-bugs/find-sec-bugs) The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)
+- [**1224**星][3y] [CoffeeScript] [shadowsocks/shadowsocks-nodejs](https://github.com/shadowsocks/shadowsocks-nodejs)
+- [**1223**星][28d] [Go] [jsha/minica](https://github.com/jsha/minica) minica is a small, simple CA intended for use in situations where the CA operator also operates each host where a certificate will be used.
+- [**1222**星][5y] [cure53/xsschallengewiki](https://github.com/cure53/XSSChallengeWiki) Welcome to the XSS Challenge Wiki!
+- [**1222**星][4m] [Py] [owtf/owtf](https://github.com/owtf/owtf) 进攻性 Web 测试框架。着重于 OWASP + PTES,尝试统合强大的工具,提高渗透测试的效率。大部分以Python 编写
+- [**1222**星][5y] [cure53/xsschallengewiki](https://github.com/cure53/xsschallengewiki) Welcome to the XSS Challenge Wiki!
+- [**1221**星][5d] [Py] [harismuneer/ultimate-facebook-scraper](https://github.com/harismuneer/ultimate-facebook-scraper)
+- [**1221**星][13d] [Py] [google/timesketch](https://github.com/google/timesketch) Collaborative forensic timeline analysis
+- [**1221**星][1y] [Go] [cloudflare/redoctober](https://github.com/cloudflare/redoctober) Go server for two-man rule style file encryption and decryption.
+- [**1220**星][1y] [C#] [cn33liz/p0wnedshell](https://github.com/cn33liz/p0wnedshell) PowerShell Runspace Post Exploitation Toolkit
+- [**1215**星][6d] [C] [dynamorio/dynamorio](https://github.com/dynamorio/dynamorio) Dynamic Instrumentation Tool Platform
+- [**1213**星][10d] [JS] [jpcertcc/logontracer](https://github.com/jpcertcc/logontracer) 通过可视化和分析Windows事件日志来调查恶意的Windows登录
+- [**1209**星][1m] [Py] [codingo/nosqlmap](https://github.com/codingo/NoSQLMap) Automated NoSQL database enumeration and web application exploitation tool.
+- [**1208**星][6d] [ObjC] [onionbrowser/onionbrowser](https://github.com/onionbrowser/onionbrowser) An open-source, privacy-enhancing web browser for iOS, utilizing the Tor anonymity network
+- [**1207**星][7m] [riusksk/secbook](https://github.com/riusksk/secbook) 信息安全从业者书单推荐
+- [**1206**星][7d] [Java] [linkedin/dexmaker](https://github.com/linkedin/dexmaker) A utility for doing compile or runtime code generation targeting Android's Dalvik VM
+- [**1206**星][3m] [Java] [javiersantos/piracychecker](https://github.com/javiersantos/piracychecker) An Android library that prevents your app from being pirated / cracked using Google Play Licensing (LVL), APK signature protection and more. API 14+ required.
+- [**1206**星][3m] [JS] [davidbau/seedrandom](https://github.com/davidbau/seedrandom) seeded random number generator for Javascript
+- [**1205**星][4d] [YARA] [horsicq/detect-it-easy](https://github.com/horsicq/detect-it-easy) Program for determining types of files for Windows, Linux and MacOS.
+- [**1204**星][5d] [dweinstein/awesome-frida](https://github.com/dweinstein/awesome-frida) frida 资源列表
+- [**1202**星][1y] [felixgr/secure-ios-app-dev](https://github.com/felixgr/secure-ios-app-dev) iOSApp 最常见漏洞收集
+- [**1202**星][3m] [C] [droe/sslsplit](https://github.com/droe/sslsplit) 透明SSL/TLS拦截
+- [**1201**星][2y] [C] [saminiir/level-ip](https://github.com/saminiir/level-ip) a Linux userspace TCP/IP stack, implemented with TUN/TAP devices.
+- [**1201**星][3m] [C] [dgiese/dustcloud](https://github.com/dgiese/dustcloud) Xiaomi Smart Home Device Reverse Engineering and Hacking
+- [**1201**星][23d] [Py] [achillean/shodan-python](https://github.com/achillean/shodan-python) The official Python library for Shodan
+- [**1200**星][11m] [JS] [mame82/p4wnp1_aloa](https://github.com/mame82/p4wnp1_aloa) 将 Rapsberry Pi Zero W 转变成灵活的渗透平台
+- [**1198**星][1y] [Go] [rancher/convoy](https://github.com/rancher/convoy) A Docker volume plugin, managing persistent container volumes.
+- [**1198**星][8m] [joe-shenouda/awesome-cyber-skills](https://github.com/joe-shenouda/awesome-cyber-skills) A curated list of hacking environments where you can train your cyber skills legally and safely
+- [**1198**星][20d] [Py] [cve-search/cve-search](https://github.com/cve-search/cve-search) 导入CVE/CPE 到本地 MongoDB 数据库,以便后续在本地进行搜索和处理
+- [**1197**星][9m] [C] [f0rb1dd3n/reptile](https://github.com/f0rb1dd3n/reptile) LKM Linux rootkit
+- [**1192**星][1m] [Go] [smallstep/certificates](https://github.com/smallstep/certificates) 私有的证书颁发机构(X.509和SSH)和ACME服务器,用于安全的自动证书管理,因此您可以在SSH和SSO处使用TLS
+- [**1192**星][7y] [Py] [mothran/mongol](https://github.com/mothran/mongol) A simple python tool to pinpoint the IP addresses of machines working for the Great Firewall of China.
+- [**1192**星][6y] [gdbinit/gdbinit](https://github.com/gdbinit/gdbinit) Gdbinit for OS X, iOS and others - x86, x86_64 and ARM
+- [**1191**星][3m] [Py] [jtesta/ssh-mitm](https://github.com/jtesta/ssh-mitm) SSH 中间人攻击工具
- [**1189**星][3y] [Roff] [matiasinsaurralde/facebook-tunnel](https://github.com/matiasinsaurralde/facebook-tunnel) Tunneling Internet traffic over Facebook chat.
-- [**1189**星][8m] [joe-shenouda/awesome-cyber-skills](https://github.com/joe-shenouda/awesome-cyber-skills) A curated list of hacking environments where you can train your cyber skills legally and safely
-- [**1188**星][4m] [dweinstein/awesome-frida](https://github.com/dweinstein/awesome-frida) frida 资源列表
-- [**1187**星][7y] [Py] [mothran/mongol](https://github.com/mothran/mongol) A simple python tool to pinpoint the IP addresses of machines working for the Great Firewall of China.
-- [**1186**星][21d] [Py] [achillean/shodan-python](https://github.com/achillean/shodan-python) The official Python library for Shodan
-- [**1185**星][14d] [C] [luigirizzo/netmap](https://github.com/luigirizzo/netmap) an framework for very fast packet I/O from userspace
-- [**1182**星][3m] [C] [dgiese/dustcloud](https://github.com/dgiese/dustcloud) Xiaomi Smart Home Device Reverse Engineering and Hacking
-- [**1182**星][10m] [C] [blechschmidt/massdns](https://github.com/blechschmidt/massdns) A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)
-- [**1180**星][2y] [Java] [weexteam/hackernews-app-powered-by-apache-weex](https://github.com/weexteam/hackernews-App-powered-by-Apache-Weex) 首个使用 Weex 和 Vue 开发的 Hacker News 原生应用。
-- [**1180**星][7m] [ssrarchive/shadowsocks-rss](https://github.com/ssrarchive/shadowsocks-rss) Shadowsocksr project backup
-- [**1180**星][12d] [Py] [lyft/cartography](https://github.com/lyft/cartography) Cartography is a Python tool that consolidates infrastructure assets and the relationships between them in an intuitive graph view powered by a Neo4j database.
-- [**1179**星][2y] [C] [mubix/post-exploitation](https://github.com/mubix/post-exploitation) post-exploitation工具收集
-- [**1175**星][1m] [Go] [smallstep/certificates](https://github.com/smallstep/certificates) 私有的证书颁发机构(X.509和SSH)和ACME服务器,用于安全的自动证书管理,因此您可以在SSH和SSO处使用TLS
-- [**1174**星][2m] [jadagates/shadowsocksbio](https://github.com/jadagates/shadowsocksbio) 记录一下SS的前世今生,以及一个简单的教程总结
-- [**1174**星][5y] [Py] [hackappcom/ibrute](https://github.com/hackappcom/ibrute) AppleID bruteforce p0c
-- [**1174**星][23d] [Shell] [anudeepnd/whitelist](https://github.com/anudeepnd/whitelist) A simple tool to add commonly white listed domains to your Pi-Hole setup.
-- [**1172**星][12d] [C] [the-tcpdump-group/tcpdump](https://github.com/the-tcpdump-group/tcpdump) the TCPdump network dissector
-- [**1165**星][20d] [Go] [genuinetools/reg](https://github.com/genuinetools/reg) Docker registry v2 command line client and repo listing generator with security checks.
-- [**1165**星][26d] [Py] [cujanovic/ssrf-testing](https://github.com/cujanovic/ssrf-testing) SSRF (Server Side Request Forgery) testing resources
-- [**1163**星][15d] [Py] [programa-stic/barf-project](https://github.com/programa-stic/barf-project) A multiplatform open source Binary Analysis and Reverse engineering Framework
-- [**1158**星][6y] [PHP] [lucb1e/cookielesscookies](https://github.com/lucb1e/cookielesscookies) Demo of tracking using etags instead of cookies (or localstorage or anything else)
-- [**1155**星][4m] [C] [skeeto/endlessh](https://github.com/skeeto/endlessh) SSH tarpit that slowly sends an endless banner
-- [**1155**星][11m] [JS] [mame82/p4wnp1_aloa](https://github.com/mame82/p4wnp1_aloa) 将 Rapsberry Pi Zero W 转变成灵活的渗透平台
-- [**1154**星][3m] [Go] [mozilla/mig](https://github.com/mozilla/mig) 分布式实时数字取证和研究平台
-- [**1152**星][20d] [m4ll0k/awesome-hacking-tools](https://github.com/m4ll0k/awesome-hacking-tools) Awesome Hacking Tools
-- [**1151**星][8d] [JS] [lirantal/is-website-vulnerable](https://github.com/lirantal/is-website-vulnerable) finds publicly known security vulnerabilities in a website's frontend JavaScript libraries
-- [**1151**星][12d] [Py] [p4-team/ctf](https://github.com/p4-team/ctf) Ctf solutions from p4 team
-- [**1150**星][3m] [Go] [shadowsocks/v2ray-plugin](https://github.com/shadowsocks/v2ray-plugin) A SIP003 plugin based on v2ray
-- [**1150**星][24d] [JS] [alonemonkey/frida-ios-dump](https://github.com/alonemonkey/frida-ios-dump) pull decrypted ipa from jailbreak device
-- [**1149**星][7m] [Py] [mebus/cupp](https://github.com/mebus/cupp) Common User Passwords Profiler (CUPP)
-- [**1145**星][1y] [HTML] [nsacyber/windows-secure-host-baseline](https://github.com/nsacyber/Windows-Secure-Host-Baseline) Windows 10和Windows Server 2016 DoD 安全主机基准设置的配置指南
-- [**1145**星][13d] [Go] [pusher/oauth2_proxy](https://github.com/pusher/oauth2_proxy) A reverse proxy that provides authentication with Google, Github or other providers.
-- [**1142**星][4m] [C++] [cgdb/cgdb](https://github.com/cgdb/cgdb) Console front-end to the GNU debugger
-- [**1141**星][3y] [PowerShell] [powershellempire/powertools](https://github.com/powershellempire/powertools) PowerTools is a collection of PowerShell projects with a focus on offensive operations.
-- [**1140**星][2m] [HTML] [cure53/httpleaks](https://github.com/cure53/httpleaks) HTTPLeaks - All possible ways, a website can leak HTTP requests
-- [**1138**星][11m] [Py] [certsocietegenerale/fir](https://github.com/certsocietegenerale/fir) Fast Incident Response
-- [**1137**星][1m] [TypeScript] [mgechev/ngrev](https://github.com/mgechev/ngrev) Tool for reverse engineering of Angular applications
-- [**1136**星][7m] [hikariobfuscator/hikari](https://github.com/HikariObfuscator/Hikari) LLVM Obfuscator
-- [**1136**星][2y] [Py] [hackathonhackers/personal-sites](https://github.com/hackathonhackers/personal-sites) List of Hackathon Hackers' personal sites.
-- [**1134**星][20d] [Py] [13o-bbr-bbq/machine_learning_security](https://github.com/13o-bbr-bbq/machine_learning_security) 机器学习与安全的几个Topic
+- [**1189**星][10m] [C] [blechschmidt/massdns](https://github.com/blechschmidt/massdns) A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)
+- [**1189**星][25d] [Shell] [anudeepnd/whitelist](https://github.com/anudeepnd/whitelist) A simple tool to add commonly white listed domains to your Pi-Hole setup.
+- [**1188**星][2m] [jadagates/shadowsocksbio](https://github.com/jadagates/shadowsocksbio) 记录一下SS的前世今生,以及一个简单的教程总结
+- [**1187**星][6d] [Py] [lyft/cartography](https://github.com/lyft/cartography) Cartography is a Python tool that consolidates infrastructure assets and the relationships between them in an intuitive graph view powered by a Neo4j database.
+- [**1186**星][3d] [C] [luigirizzo/netmap](https://github.com/luigirizzo/netmap) an framework for very fast packet I/O from userspace
+- [**1185**星][2y] [C] [mubix/post-exploitation](https://github.com/mubix/post-exploitation) post-exploitation工具收集
+- [**1181**星][8d] [C] [the-tcpdump-group/tcpdump](https://github.com/the-tcpdump-group/tcpdump) the TCPdump network dissector
+- [**1179**星][2y] [Java] [weexteam/hackernews-app-powered-by-apache-weex](https://github.com/weexteam/hackernews-App-powered-by-Apache-Weex) 首个使用 Weex 和 Vue 开发的 Hacker News 原生应用。
+- [**1178**星][4m] [C] [ambrop72/badvpn](https://github.com/ambrop72/badvpn) NCD scripting language, tun2socks proxifier, P2P VPN
+- [**1177**星][7m] [ssrarchive/shadowsocks-rss](https://github.com/ssrarchive/shadowsocks-rss) Shadowsocksr project backup
+- [**1175**星][5y] [Py] [hackappcom/ibrute](https://github.com/hackappcom/ibrute) AppleID bruteforce p0c
+- [**1174**星][28d] [Py] [cujanovic/ssrf-testing](https://github.com/cujanovic/ssrf-testing) SSRF (Server Side Request Forgery) testing resources
+- [**1173**星][3m] [Go] [shadowsocks/v2ray-plugin](https://github.com/shadowsocks/v2ray-plugin) A SIP003 plugin based on v2ray
+- [**1171**星][6d] [JS] [lirantal/is-website-vulnerable](https://github.com/lirantal/is-website-vulnerable) finds publicly known security vulnerabilities in a website's frontend JavaScript libraries
+- [**1168**星][22d] [Go] [genuinetools/reg](https://github.com/genuinetools/reg) Docker registry v2 command line client and repo listing generator with security checks.
+- [**1166**星][1m] [Go] [shawn1m/overture](https://github.com/shawn1m/overture) A customized DNS forwarder written in Go
+- [**1165**星][26d] [JS] [alonemonkey/frida-ios-dump](https://github.com/alonemonkey/frida-ios-dump) pull decrypted ipa from jailbreak device
+- [**1164**星][17d] [Py] [programa-stic/barf-project](https://github.com/programa-stic/barf-project) A multiplatform open source Binary Analysis and Reverse engineering Framework
+- [**1164**星][4y] [Ruby] [cryptosphere/cryptosphere](https://github.com/cryptosphere/cryptosphere) Encrypted peer-to-peer web application platform for decentralized, privacy-preserving applications
+- [**1162**星][4m] [C] [skeeto/endlessh](https://github.com/skeeto/endlessh) SSH tarpit that slowly sends an endless banner
+- [**1162**星][15d] [Go] [pusher/oauth2_proxy](https://github.com/pusher/oauth2_proxy) A reverse proxy that provides authentication with Google, Github or other providers.
+- [**1162**星][1m] [TS] [mgechev/ngrev](https://github.com/mgechev/ngrev) Tool for reverse engineering of Angular applications
+- [**1159**星][6y] [PHP] [lucb1e/cookielesscookies](https://github.com/lucb1e/cookielesscookies) Demo of tracking using etags instead of cookies (or localstorage or anything else)
+- [**1158**星][22d] [m4ll0k/awesome-hacking-tools](https://github.com/m4ll0k/awesome-hacking-tools) Awesome Hacking Tools
+- [**1156**星][7d] [Py] [p4-team/ctf](https://github.com/p4-team/ctf) Ctf solutions from p4 team
+- [**1155**星][3m] [Go] [mozilla/mig](https://github.com/mozilla/mig) 分布式实时数字取证和研究平台
+- [**1151**星][8m] [Py] [mebus/cupp](https://github.com/mebus/cupp) Common User Passwords Profiler (CUPP)
+- [**1150**星][1y] [HTML] [nsacyber/windows-secure-host-baseline](https://github.com/nsacyber/Windows-Secure-Host-Baseline) Windows 10和Windows Server 2016 DoD 安全主机基准设置的配置指南
+- [**1147**星][1m] [Jupyter Notebook] [ibm/adversarial-robustness-toolbox](https://github.com/ibm/adversarial-robustness-toolbox) Python library for adversarial machine learning, attacks and defences for neural networks, logistic regression, decision trees, SVM, gradient boosted trees, Gaussian processes and more with multiple framework support
+- [**1145**星][22d] [Py] [13o-bbr-bbq/machine_learning_security](https://github.com/13o-bbr-bbq/machine_learning_security) 机器学习与安全的几个Topic
- [Security_and_MachineLearning](https://github.com/13o-bbr-bbq/machine_learning_security/tree/master/Security_and_MachineLearning) 网络安全与机器学习课程
- [Vulnerabilities_of_ML](https://github.com/13o-bbr-bbq/machine_learning_security/blob/master/Vulnerabilities_of_ML/) 机器学习漏洞的汇总
- [Analytics](https://github.com/13o-bbr-bbq/machine_learning_security/tree/master/Analytics) 使用k-means分析捕获的数据包
@@ -1077,97 +1148,113 @@
- [Generator](https://github.com/13o-bbr-bbq/machine_learning_security/tree/master/Generator) 使用遗传算法和生成对抗网络,全自动生成大量用于Web应用程序评估的注入代码。
- [Recommender](https://github.com/13o-bbr-bbq/machine_learning_security/tree/master/Recommender) 推荐用于检测Web应用程序漏洞的最佳注入代码。
- [Saivs](https://github.com/13o-bbr-bbq/machine_learning_security/tree/master/Saivs) 发现Web应用程序中的漏洞的AI
-- [**1133**星][10d] [C] [xroche/httrack](https://github.com/xroche/httrack) download a World Wide website from the Internet to a local directory, building recursively all directories, getting html, images, and other files from the server to your computer.
-- [**1133**星][19d] [Batchfile] [ckjbug/hacking](https://github.com/ckjbug/hacking)
+- [**1144**星][3y] [PS] [powershellempire/powertools](https://github.com/powershellempire/powertools) PowerShell项目的集合,重点是进攻性操作
+ - [PewPewPew](https://github.com/powershellempire/powertools/tree/master/PewPewPew) scripts that utilize a common pattern to host a script on a PowerShell webserver, invoke the IEX download cradle to download/execute the target code and post the results back to the server, and then post-process any results.
+ - [PowerBreach](https://github.com/powershellempire/powertools/tree/master/PowerBreach) a backdoor toolkit that aims to provide the user a wide variety of methods to backdoor a system.
+ - [PowerPick](https://github.com/powershellempire/powertools/tree/master/PowerPick) allowing the execution of Powershell functionality without the use of Powershell.exe
+- [**1143**星][2d] [C] [nethack/nethack](https://github.com/nethack/nethack) Official NetHack Git Repository
+- [**1143**星][4m] [C++] [cgdb/cgdb](https://github.com/cgdb/cgdb) Console front-end to the GNU debugger
+- [**1142**星][7m] [hikariobfuscator/hikari](https://github.com/HikariObfuscator/Hikari) LLVM Obfuscator
+- [**1140**星][5d] [w00t3k/awesome-cellular-hacking](https://github.com/w00t3k/awesome-cellular-hacking) Awesome-Cellular-Hacking
+- [**1140**星][2m] [HTML] [cure53/httpleaks](https://github.com/cure53/httpleaks) HTTPLeaks - All possible ways, a website can leak HTTP requests
+- [**1139**星][12d] [C] [xroche/httrack](https://github.com/xroche/httrack) download a World Wide website from the Internet to a local directory, building recursively all directories, getting html, images, and other files from the server to your computer.
+- [**1139**星][4m] [Py] [rhinosecuritylabs/pacu](https://github.com/rhinosecuritylabs/pacu) The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.
+- [**1139**星][21d] [Batchfile] [ckjbug/hacking](https://github.com/ckjbug/hacking)
+- [**1139**星][11m] [Py] [certsocietegenerale/fir](https://github.com/certsocietegenerale/fir) Fast Incident Response
+- [**1138**星][2d] [C] [shadowsocksr-live/shadowsocksr-native](https://github.com/shadowsocksr-live/shadowsocksr-native) 从容翻越党国敏感日 ShadowsocksR (SSR) native implementation for all platforms, GFW terminator
+- [**1138**星][2y] [Py] [hackathonhackers/personal-sites](https://github.com/hackathonhackers/personal-sites) List of Hackathon Hackers' personal sites.
+- [**1138**星][5d] [Py] [darkoperator/dnsrecon](https://github.com/darkoperator/dnsrecon) DNS 枚举脚本
+- [**1135**星][6m] [nebgnahz/awesome-iot-hacks](https://github.com/nebgnahz/awesome-iot-hacks) A Collection of Hacks in IoT Space so that we can address them (hopefully).
+- [**1134**星][4m] [Vue] [0xbug/hawkeye](https://github.com/0xbug/hawkeye) GitHub 泄露监控系统(GitHub Sensitive Information Leakage Monitor Spider)
- [**1132**星][2y] [C++] [x64dbg/gleebug](https://github.com/x64dbg/gleebug) Debugging Framework for Windows.
-- [**1132**星][6m] [nebgnahz/awesome-iot-hacks](https://github.com/nebgnahz/awesome-iot-hacks) A Collection of Hacks in IoT Space so that we can address them (hopefully).
-- [**1132**星][1m] [Jupyter Notebook] [ibm/adversarial-robustness-toolbox](https://github.com/ibm/adversarial-robustness-toolbox) Python library for adversarial machine learning, attacks and defences for neural networks, logistic regression, decision trees, SVM, gradient boosted trees, Gaussian processes and more with multiple framework support
-- [**1131**星][2y] [Py] [out0fmemory/goagent-always-available](https://github.com/out0fmemory/goagent-always-available) 一直可用的GoAgent,会定时扫描可用的google gae ip,提供可自动化获取ip运行的版本
-- [**1130**星][7d] [C] [nethack/nethack](https://github.com/nethack/nethack) Official NetHack Git Repository
-- [**1130**星][8m] [Py] [darkoperator/dnsrecon](https://github.com/darkoperator/dnsrecon) DNS 枚举脚本
-- [**1129**星][4m] [Py] [rhinosecuritylabs/pacu](https://github.com/rhinosecuritylabs/pacu) The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.
-- [**1128**星][5m] [Py] [qyriad/fusee-launcher](https://github.com/Qyriad/fusee-launcher) NVIDIA Tegra X1处理器Fusée Gelée漏洞exploit的launcher. (Fusée Gelée: 冷启动漏洞,允许在bootROM早期, 通过NVIDIA Tegra系列嵌入式处理器上的Tegra恢复模式(RCM)执行完整、未经验证的任意代码)
-- [**1125**星][2m] [Go] [mmcloughlin/avo](https://github.com/mmcloughlin/avo) Generate x86 Assembly with Go
-- [**1125**星][8m] [C++] [cppcon/cppcon2018](https://github.com/cppcon/cppcon2018) Slides and other materials from CppCon 2018
-- [**1124**星][20d] [HTML] [securitytxt/security-txt](https://github.com/securitytxt/security-txt) 网站定义安全策略的“标准”
-- [**1124**星][12d] [C++] [crosire/reshade](https://github.com/crosire/reshade) A generic post-processing injector for games and video software.
-- [**1124**星][4m] [Vue] [0xbug/hawkeye](https://github.com/0xbug/hawkeye) GitHub 泄露监控系统(GitHub Sensitive Information Leakage Monitor Spider)
-- [**1122**星][3m] [Py] [openai/neural-mmo](https://github.com/openai/neural-mmo) Code for the paper "Neural MMO: A Massively Multiagent Game Environment for Training and Evaluating Intelligent Agents"
-- [**1121**星][8m] [majikarp/awesome-programming-books](https://github.com/majikarp/awesome-programming-books)
-- [**1117**星][10m] [Py] [openrce/sulley](https://github.com/openrce/sulley) A pure-python fully automated and unattended fuzzing framework.
-- [**1117**星][10m] [evilsocket/bleah](https://github.com/evilsocket/bleah) 低功耗蓝牙扫描器
-- [**1116**星][3m] [Py] [thoughtfuldev/eagleeye](https://github.com/thoughtfuldev/eagleeye) Stalk your Friends. Find their Instagram, FB and Twitter Profiles using Image Recognition and Reverse Image Search.
-- [**1116**星][1m] [bo0om/fuzz.txt](https://github.com/bo0om/fuzz.txt) Potentially dangerous files
-- [**1114**星][1y] [Objective-C] [yulingtianxia/fishchat](https://github.com/yulingtianxia/fishchat) Hook WeChat.app on non-jailbroken devices.
-- [**1114**星][28d] [w00t3k/awesome-cellular-hacking](https://github.com/w00t3k/awesome-cellular-hacking) Awesome-Cellular-Hacking
-- [**1114**星][11d] [Java] [huangyz0918/androidwm](https://github.com/huangyz0918/androidwm) 一个支持不可见数字水印(隐写术)的android图像水印库。
-- [**1113**星][1y] [aoh/radamsa](https://github.com/aoh/radamsa) a general-purpose fuzzer
-- [**1111**星][5m] [Java] [manbanggroup/phantom](https://github.com/manbanggroup/phantom) 唯一零 Hook 稳定占坑类 Android 热更新插件化方案
-- [**1110**星][14d] [PowerShell] [microsoftdocs/virtualization-documentation](https://github.com/MicrosoftDocs/Virtualization-Documentation) Place to store our documentation, code samples, etc for public consumption.
-- [**1110**星][3y] [Objective-C] [dyci/dyci-main](https://github.com/dyci/dyci-main) Dynamic Code Injection Tool for Objective-C
-- [**1110**星][18d] [C] [blacksphere/blackmagic](https://github.com/blacksphere/blackmagic) In application debugger for ARM Cortex microcontrollers.
-- [**1109**星][18d] [C++] [keystone-engine/keystone](https://github.com/keystone-engine/keystone) Keystone assembler framework: Core (Arm, Arm64, Hexagon, Mips, PowerPC, Sparc, SystemZ & X86) + bindings
-- [**1109**星][2m] [Py] [john-kurkowski/tldextract](https://github.com/john-kurkowski/tldextract) Accurately separate the TLD from the registered domain and subdomains of a URL, using the Public Suffix List.
-- [**1109**星][3y] [Shell] [fritz-smh/yi-hack](https://github.com/fritz-smh/yi-hack) Xiaomi Yi Ants camera hack
+- [**1132**星][2y] [Py] [out0fmemory/goagent-always-available](https://github.com/out0fmemory/goagent-always-available) 一直可用的GoAgent,会定时扫描可用的google gae ip,提供可自动化获取ip运行的版本
+- [**1131**星][5m] [Py] [qyriad/fusee-launcher](https://github.com/Qyriad/fusee-launcher) NVIDIA Tegra X1处理器Fusée Gelée漏洞exploit的launcher. (Fusée Gelée: 冷启动漏洞,允许在bootROM早期, 通过NVIDIA Tegra系列嵌入式处理器上的Tegra恢复模式(RCM)执行完整、未经验证的任意代码)
+- [**1130**星][8m] [majikarp/awesome-programming-books](https://github.com/majikarp/awesome-programming-books)
+- [**1130**星][2d] [C++] [crosire/reshade](https://github.com/crosire/reshade) A generic post-processing injector for games and video software.
+- [**1129**星][22d] [HTML] [securitytxt/security-txt](https://github.com/securitytxt/security-txt) 网站定义安全策略的“标准”
+- [**1128**星][8m] [C++] [cppcon/cppcon2018](https://github.com/cppcon/cppcon2018) Slides and other materials from CppCon 2018
+- [**1127**星][3m] [Go] [mmcloughlin/avo](https://github.com/mmcloughlin/avo) Generate x86 Assembly with Go
+- [**1125**星][3m] [Py] [openai/neural-mmo](https://github.com/openai/neural-mmo) Code for the paper "Neural MMO: A Massively Multiagent Game Environment for Training and Evaluating Intelligent Agents"
+- [**1123**星][7d] [C#] [nicehash/nicehashminer](https://github.com/nicehash/NiceHashMiner) NiceHash Miner
+- [**1122**星][13d] [Java] [huangyz0918/androidwm](https://github.com/huangyz0918/androidwm) 一个支持不可见数字水印(隐写术)的android图像水印库。
+- [**1120**星][3m] [Py] [thoughtfuldev/eagleeye](https://github.com/thoughtfuldev/eagleeye) Stalk your Friends. Find their Instagram, FB and Twitter Profiles using Image Recognition and Reverse Image Search.
+- [**1120**星][2m] [bo0om/fuzz.txt](https://github.com/bo0om/fuzz.txt) Potentially dangerous files
+- [**1118**星][10m] [Py] [openrce/sulley](https://github.com/openrce/sulley) A pure-python fully automated and unattended fuzzing framework.
+- [**1117**星][1y] [paulsec/awesome-windows-domain-hardening](https://github.com/PaulSec/awesome-windows-domain-hardening) A curated list of awesome Security Hardening techniques for Windows.
+- [**1117**星][3d] [C] [blacksphere/blackmagic](https://github.com/blacksphere/blackmagic) In application debugger for ARM Cortex microcontrollers.
+- [**1116**星][6d] [PS] [microsoftdocs/virtualization-documentation](https://github.com/MicrosoftDocs/Virtualization-Documentation) Place to store our documentation, code samples, etc for public consumption.
+- [**1115**星][1y] [ObjC] [yulingtianxia/fishchat](https://github.com/yulingtianxia/fishchat) Hook WeChat.app on non-jailbroken devices.
+- [**1115**星][10m] [evilsocket/bleah](https://github.com/evilsocket/bleah) 低功耗蓝牙扫描器
+- [**1115**星][1y] [aoh/radamsa](https://github.com/aoh/radamsa) a general-purpose fuzzer
+- [**1114**星][3d] [Py] [hhyo/archery](https://github.com/hhyo/archery) SQL 审核查询平台
+- [**1113**星][5m] [Java] [manbanggroup/phantom](https://github.com/manbanggroup/phantom) 唯一零 Hook 稳定占坑类 Android 热更新插件化方案
+- [**1113**星][20d] [C++] [keystone-engine/keystone](https://github.com/keystone-engine/keystone) Keystone assembler framework: Core (Arm, Arm64, Hexagon, Mips, PowerPC, Sparc, SystemZ & X86) + bindings
+- [**1113**星][2m] [Py] [john-kurkowski/tldextract](https://github.com/john-kurkowski/tldextract) Accurately separate the TLD from the registered domain and subdomains of a URL, using the Public Suffix List.
+- [**1110**星][3y] [Shell] [fritz-smh/yi-hack](https://github.com/fritz-smh/yi-hack) Xiaomi Yi Ants camera hack
+- [**1110**星][3y] [ObjC] [dyci/dyci-main](https://github.com/dyci/dyci-main) Dynamic Code Injection Tool for Objective-C
+- [**1110**星][8m] [Py] [0x00-0x00/shellpop](https://github.com/0x00-0x00/shellpop) 在渗透中生产简易的/复杂的反向/绑定Shell
+- [**1109**星][1y] [Py] [wibiti/uncompyle2](https://github.com/wibiti/uncompyle2) Python 2.7 decompiler
+- [**1108**星][2d] [C++] [facebookincubator/oomd](https://github.com/facebookincubator/oomd) A userspace out-of-memory killer
- [**1108**星][1y] [Py] [byt3bl33d3r/gcat](https://github.com/byt3bl33d3r/gcat) A PoC backdoor that uses Gmail as a C&C server
-- [**1106**星][1y] [Py] [wibiti/uncompyle2](https://github.com/wibiti/uncompyle2) Python 2.7 decompiler
-- [**1104**星][7d] [C++] [facebookincubator/oomd](https://github.com/facebookincubator/oomd) A userspace out-of-memory killer
-- [**1102**星][21d] [slowmist/knowledge-base](https://github.com/slowmist/knowledge-base) Knowledge Base 慢雾安全团队知识库
-- [**1102**星][8d] [C++] [google/sandboxed-api](https://github.com/google/sandboxed-api) Sandboxed API automatically generates sandboxes for C/C++ libraries
-- [**1101**星][1y] [paulsec/awesome-windows-domain-hardening](https://github.com/PaulSec/awesome-windows-domain-hardening) A curated list of awesome Security Hardening techniques for Windows.
-- [**1101**星][8m] [Py] [0x00-0x00/shellpop](https://github.com/0x00-0x00/shellpop) 在渗透中生产简易的/复杂的反向/绑定Shell
-- [**1099**星][5m] [zbetcheckin/security_list](https://github.com/zbetcheckin/security_list) Great security list for fun and profit
-- [**1098**星][1y] [Objective-C] [neoneggplant/eggshell](https://github.com/neoneggplant/eggshell) iOS/macOS/Linux Remote Administration Tool
-- [**1097**星][1y] [Py] [bugcrowd/hunt](https://github.com/bugcrowd/HUNT) Burp和ZAP的扩展收集
-- [**1097**星][5m] [Py] [coffeehb/some-poc-or-exp](https://github.com/coffeehb/some-poc-or-exp) 各种漏洞poc、Exp的收集或编写
-- [**1096**星][2y] [Py] [ring04h/wydomain](https://github.com/ring04h/wydomain) to discover subdomains of your target domain
-- [**1095**星][2m] [PHP] [tuhinshubhra/red_hawk](https://github.com/tuhinshubhra/red_hawk) 信息收集、漏洞扫描、爬虫多合一
-- [**1094**星][8d] [C] [solokeys/solo](https://github.com/solokeys/solo) open security key supporting FIDO2 & U2F over USB + NFC
-- [**1094**星][17d] [Go] [sensepost/ruler](https://github.com/sensepost/ruler) 自动化利用Exchange 服务的repo
-- [**1093**星][1y] [PowerShell] [rasta-mouse/sherlock](https://github.com/rasta-mouse/sherlock) PowerShell script to quickly find missing software patches for local privilege escalation vulnerabilities.
-- [**1092**星][8m] [Ruby] [lionsec/xerosploit](https://github.com/lionsec/xerosploit) Efficient and advanced man in the middle framework
-- [**1092**星][18d] [OCaml] [binaryanalysisplatform/bap](https://github.com/binaryanalysisplatform/bap) Binary Analysis Platform
-- [**1087**星][10m] [Py] [secforce/sparta](https://github.com/secforce/sparta) 网络基础架构渗透测试
-- [**1084**星][13d] [C] [containers/bubblewrap](https://github.com/containers/bubblewrap) Unprivileged sandboxing tool
-- [**1083**星][11d] [Py] [gerbenjavado/linkfinder](https://github.com/gerbenjavado/linkfinder) A python script that finds endpoints in JavaScript files
-- [**1083**星][8d] [C++] [cxbx-reloaded/cxbx-reloaded](https://github.com/cxbx-reloaded/cxbx-reloaded) Xbox (Original) Emulator
-- [**1081**星][26d] [Go] [looterz/grimd](https://github.com/looterz/grimd) Fast dns proxy that can run anywhere, built to black-hole internet advertisements and malware servers.
-- [**1081**星][22d] [Verilog] [cliffordwolf/picorv32](https://github.com/cliffordwolf/picorv32) PicoRV32 - A Size-Optimized RISC-V CPU
-- [**1080**星][10d] [Py] [harismuneer/ultimate-facebook-scraper](https://github.com/harismuneer/ultimate-facebook-scraper)
-- [**1080**星][2m] [Go] [nadoo/glider](https://github.com/nadoo/glider) 正向代理,支持若干协议
-- [**1077**星][6y] [C] [stephenfewer/reflectivedllinjection](https://github.com/stephenfewer/reflectivedllinjection) Reflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process.
-- [**1076**星][1m] [snoopysecurity/awesome-burp-extensions](https://github.com/snoopysecurity/awesome-burp-extensions) Burp扩展收集
-- [**1075**星][3m] [Py] [storyyeller/krakatau](https://github.com/storyyeller/krakatau) Java decompiler, assembler, and disassembler
-- [**1074**星][8m] [Go] [sevlyar/go-daemon](https://github.com/sevlyar/go-daemon) A library for writing system daemons in golang.
-- [**1074**星][2m] [Py] [stampery/mongoaudit](https://github.com/stampery/mongoaudit)
-- [**1074**星][7d] [PHP] [automattic/jetpack](https://github.com/automattic/jetpack) Increase your traffic, view your stats, speed up your site, and protect yourself from hackers with Jetpack.
-- [**1073**星][2m] [PHP] [nbs-system/php-malware-finder](https://github.com/nbs-system/php-malware-finder) Detect potentially malicious PHP files
+- [**1105**星][5m] [zbetcheckin/security_list](https://github.com/zbetcheckin/security_list) Great security list for fun and profit
+- [**1103**星][10d] [C] [solokeys/solo](https://github.com/solokeys/solo) open security key supporting FIDO2 & U2F over USB + NFC
+- [**1103**星][23d] [slowmist/knowledge-base](https://github.com/slowmist/knowledge-base) Knowledge Base 慢雾安全团队知识库
+- [**1103**星][1y] [ObjC] [neoneggplant/eggshell](https://github.com/neoneggplant/eggshell) iOS/macOS/Linux Remote Administration Tool
+- [**1103**星][7d] [C++] [google/sandboxed-api](https://github.com/google/sandboxed-api) Sandboxed API automatically generates sandboxes for C/C++ libraries
+- [**1102**星][1y] [Py] [bugcrowd/hunt](https://github.com/bugcrowd/HUNT) Burp和ZAP的扩展收集
+- [**1100**星][13d] [Py] [gerbenjavado/linkfinder](https://github.com/gerbenjavado/linkfinder) A python script that finds endpoints in JavaScript files
+- [**1100**星][5m] [Py] [coffeehb/some-poc-or-exp](https://github.com/coffeehb/some-poc-or-exp) 各种漏洞poc、Exp的收集或编写
+- [**1099**星][19d] [Go] [sensepost/ruler](https://github.com/sensepost/ruler) 自动化利用Exchange 服务的repo
+- [**1097**星][2y] [Py] [ring04h/wydomain](https://github.com/ring04h/wydomain) to discover subdomains of your target domain
+- [**1097**星][7d] [OCaml] [binaryanalysisplatform/bap](https://github.com/binaryanalysisplatform/bap) Binary Analysis Platform
+- [**1097**星][9m] [C] [baoleiji/qilinbaoleiji](https://github.com/baoleiji/qilinbaoleiji) 堡垒机-麒麟堡垒机,集堡垒机、SSLVPN-堡垒机内置、动态口令-堡垒机内置、应用审计-堡垒机内置、数据库审计-堡垒机内置、CA证书-堡垒机内置-堡垒机内置、云桌面-堡垒机内置、密码自动修改为一体的堡垒机系统
+- [**1096**星][2m] [PHP] [tuhinshubhra/red_hawk](https://github.com/tuhinshubhra/red_hawk) 信息收集、漏洞扫描、爬虫多合一
+- [**1096**星][1y] [PS] [rasta-mouse/sherlock](https://github.com/rasta-mouse/sherlock) PowerShell script to quickly find missing software patches for local privilege escalation vulnerabilities.
+- [**1095**星][8m] [Ruby] [lionsec/xerosploit](https://github.com/lionsec/xerosploit) Efficient and advanced man in the middle framework
+- [**1092**星][10m] [Py] [secforce/sparta](https://github.com/secforce/sparta) 网络基础架构渗透测试
+- [**1091**星][3m] [JS] [leng-yue/lengyue-vcode](https://github.com/leng-yue/lengyue-vcode) 各种滑动验证码识别 [腾讯云] [易盾] [Vaptcha] [Geetest] [极验] 各种网站破解
+- [**1090**星][15d] [C] [containers/bubblewrap](https://github.com/containers/bubblewrap) Unprivileged sandboxing tool
+- [**1090**星][1m] [snoopysecurity/awesome-burp-extensions](https://github.com/snoopysecurity/awesome-burp-extensions) Burp扩展收集
+- [**1090**星][24d] [Verilog] [cliffordwolf/picorv32](https://github.com/cliffordwolf/picorv32) PicoRV32 - A Size-Optimized RISC-V CPU
+- [**1088**星][28d] [Go] [looterz/grimd](https://github.com/looterz/grimd) Fast dns proxy that can run anywhere, built to black-hole internet advertisements and malware servers.
+- [**1087**星][10d] [C++] [cxbx-reloaded/cxbx-reloaded](https://github.com/cxbx-reloaded/cxbx-reloaded) Xbox (Original) Emulator
+- [**1086**星][6y] [C] [stephenfewer/reflectivedllinjection](https://github.com/stephenfewer/reflectivedllinjection) Reflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process.
+- [**1084**星][2m] [Go] [nadoo/glider](https://github.com/nadoo/glider) 正向代理,支持若干协议
+- [**1083**星][3m] [Py] [landgrey/pydictor](https://github.com/landgrey/pydictor) A powerful and useful hacker dictionary builder for a brute-force attack
+- [**1082**星][8m] [Go] [sevlyar/go-daemon](https://github.com/sevlyar/go-daemon) A library for writing system daemons in golang.
+- [**1080**星][2m] [PHP] [nbs-system/php-malware-finder](https://github.com/nbs-system/php-malware-finder) Detect potentially malicious PHP files
+- [**1078**星][2d] [PHP] [automattic/jetpack](https://github.com/automattic/jetpack) Increase your traffic, view your stats, speed up your site, and protect yourself from hackers with Jetpack.
+- [**1077**星][3m] [Py] [storyyeller/krakatau](https://github.com/storyyeller/krakatau) Java decompiler, assembler, and disassembler
+- [**1076**星][2m] [Py] [stampery/mongoaudit](https://github.com/stampery/mongoaudit)
+- [**1075**星][3d] [Py] [offensive-security/exploitdb-bin-sploits](https://github.com/offensive-security/exploitdb-bin-sploits) Exploit Database binary exploits located in the /sploits directory
+- [**1073**星][3m] [C] [tpruvot/cpuminer-multi](https://github.com/tpruvot/cpuminer-multi) crypto cpuminer (linux + windows)
+- [**1073**星][1m] [guardrailsio/awesome-golang-security](https://github.com/guardrailsio/awesome-golang-security) Awesome Golang Security resources
+- [**1072**星][1m] [C++] [whitequark/unfork](https://github.com/whitequark/unfork) unfork(2) is the inverse of fork(2). sort of.
- [**1072**星][2y] [C++] [fireice-uk/xmr-stak-cpu](https://github.com/fireice-uk/xmr-stak-cpu) Monero CPU miner
-- [**1071**星][3m] [C] [tpruvot/cpuminer-multi](https://github.com/tpruvot/cpuminer-multi) crypto cpuminer (linux + windows)
-- [**1070**星][3m] [Py] [landgrey/pydictor](https://github.com/landgrey/pydictor) A powerful and useful hacker dictionary builder for a brute-force attack
+- [**1071**星][3d] [Py] [googleprojectzero/domato](https://github.com/googleprojectzero/domato) ProjectZero 开源的 DOM fuzzer
+- [**1071**星][6m] [C] [tcurdt/iproxy](https://github.com/tcurdt/iproxy) Let's you connect your laptop to the iPhone to surf the web.
+- [**1071**星][5m] [Py] [nccgroup/winpayloads](https://github.com/nccgroup/winpayloads) Undetectable Windows Payload Generation
+- [**1071**星][7m] [Py] [lucifer1993/struts-scan](https://github.com/lucifer1993/struts-scan) struts2漏洞全版本检测和利用工具
- [**1070**星][3y] [C] [citusdata/pg_shard](https://github.com/citusdata/pg_shard) ATTENTION: pg_shard is superseded by Citus, its more powerful replacement
-- [**1066**星][5m] [Py] [nccgroup/winpayloads](https://github.com/nccgroup/winpayloads) Undetectable Windows Payload Generation
-- [**1066**星][7m] [Py] [lucifer1993/struts-scan](https://github.com/lucifer1993/struts-scan) struts2漏洞全版本检测和利用工具
-- [**1065**星][1m] [C++] [whitequark/unfork](https://github.com/whitequark/unfork) unfork(2) is the inverse of fork(2). sort of.
-- [**1063**星][14d] [Py] [offensive-security/exploitdb-bin-sploits](https://github.com/offensive-security/exploitdb-bin-sploits) Exploit Database binary exploits located in the /sploits directory
-- [**1063**星][29d] [guardrailsio/awesome-golang-security](https://github.com/guardrailsio/awesome-golang-security) Awesome Golang Security resources
-- [**1062**星][3m] [C] [zerosum0x0/cve-2019-0708](https://github.com/zerosum0x0/cve-2019-0708) Scanner PoC for CVE-2019-0708 RDP RCE vuln
-- [**1060**星][2y] [wtsxdev/machine-learning-for-cyber-security](https://github.com/wtsxdev/machine-learning-for-cyber-security) Curated list of tools and resources related to the use of machine learning for cyber security
-- [**1060**星][11d] [C] [shadowsocksr-live/shadowsocksr-native](https://github.com/shadowsocksr-live/shadowsocksr-native) 从容翻越党国敏感日 ShadowsocksR (SSR) native implementation for all platforms, GFW terminator
-- [**1060**星][7m] [PowerShell] [nytrorst/netripper](https://github.com/nytrorst/netripper) 后渗透工具,针对Windows, 使用API Hooking拦截网络流量和加密相关函数, 可捕获明文和加密前后的内容
-- [**1059**星][2m] [Py] [googleprojectzero/domato](https://github.com/googleprojectzero/domato) ProjectZero 开源的 DOM fuzzer
-- [**1057**星][3m] [Py] [infosec-au/altdns](https://github.com/infosec-au/altdns) Generates permutations, alterations and mutations of subdomains and then resolves them
-- [**1055**星][25d] [C] [quiet/quiet](https://github.com/quiet/quiet) Transmit data with sound. Includes binaries for soundcards and .wav files.
-- [**1053**星][3y] [Perl] [samyk/usbdriveby](https://github.com/samyk/usbdriveby) USBdriveby exploits the trust of USB devices by emulating an HID keyboard and mouse, installing a cross-platform firewall-evading backdoor, and rerouting DNS within seconds of plugging it in.
-- [**1052**星][7d] [Py] [forseti-security/forseti-security](https://github.com/forseti-security/forseti-security) A community-driven collection of open source tools to improve the security of your Google Cloud Platform environments
-- [**1052**星][5m] [C] [tcurdt/iproxy](https://github.com/tcurdt/iproxy) Let's you connect your laptop to the iPhone to surf the web.
-- [**1052**星][20d] [Rust] [fgribreau/mailchecker](https://github.com/fgribreau/mailchecker) 邮件检测库,跨语言。覆盖33078虚假邮件提供者
-- [**1051**星][2m] [Kotlin] [ingokegel/jclasslib](https://github.com/ingokegel/jclasslib) jclasslib bytecode viewer is a tool that visualizes all aspects of compiled Java class files and the contained bytecode.
-- [**1051**星][7m] [C] [cr-marcstevens/sha1collisiondetection](https://github.com/cr-marcstevens/sha1collisiondetection) Library and command line tool to detect SHA-1 collision in a file
-- [**1049**星][13d] [C++] [simsong/tcpflow](https://github.com/simsong/tcpflow) TCP/IP packet demultiplexer. Download from:
-- [**1048**星][7d] [Py] [yelp/detect-secrets](https://github.com/yelp/detect-secrets) An enterprise friendly way of detecting and preventing secrets in code.
-- [**1046**星][1m] [Boo] [byt3bl33d3r/silenttrinity](https://github.com/byt3bl33d3r/silenttrinity) An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR
-- [**1044**星][13d] [Py] [fireeye/flare-ida](https://github.com/fireeye/flare-ida) 多工具
+- [**1068**星][5y] [Py] [observerss/textfilter](https://github.com/observerss/textfilter) 敏感词过滤的几种实现+某1w词敏感词库
+- [**1065**星][3m] [C] [zerosum0x0/cve-2019-0708](https://github.com/zerosum0x0/cve-2019-0708) Scanner PoC for CVE-2019-0708 RDP RCE vuln
+- [**1065**星][7m] [PS] [nytrorst/netripper](https://github.com/nytrorst/netripper) 后渗透工具,针对Windows, 使用API Hooking拦截网络流量和加密相关函数, 可捕获明文和加密前后的内容
+- [**1063**星][2y] [wtsxdev/machine-learning-for-cyber-security](https://github.com/wtsxdev/machine-learning-for-cyber-security) Curated list of tools and resources related to the use of machine learning for cyber security
+- [**1062**星][27d] [C] [quiet/quiet](https://github.com/quiet/quiet) Transmit data with sound. Includes binaries for soundcards and .wav files.
+- [**1061**星][3m] [Py] [infosec-au/altdns](https://github.com/infosec-au/altdns) Generates permutations, alterations and mutations of subdomains and then resolves them
+- [**1060**星][2d] [Py] [forseti-security/forseti-security](https://github.com/forseti-security/forseti-security) A community-driven collection of open source tools to improve the security of your Google Cloud Platform environments
+- [**1057**星][3y] [Perl] [samyk/usbdriveby](https://github.com/samyk/usbdriveby) USBdriveby exploits the trust of USB devices by emulating an HID keyboard and mouse, installing a cross-platform firewall-evading backdoor, and rerouting DNS within seconds of plugging it in.
+- [**1056**星][9d] [Py] [yelp/detect-secrets](https://github.com/yelp/detect-secrets) An enterprise friendly way of detecting and preventing secrets in code.
+- [**1056**星][9d] [Kotlin] [ingokegel/jclasslib](https://github.com/ingokegel/jclasslib) jclasslib bytecode viewer is a tool that visualizes all aspects of compiled Java class files and the contained bytecode.
+- [**1056**星][5d] [Rust] [fgribreau/mailchecker](https://github.com/fgribreau/mailchecker) 邮件检测库,跨语言。覆盖33078虚假邮件提供者
+- [**1054**星][9d] [C++] [simsong/tcpflow](https://github.com/simsong/tcpflow) TCP/IP packet demultiplexer. Download from:
+- [**1052**星][7m] [C] [cr-marcstevens/sha1collisiondetection](https://github.com/cr-marcstevens/sha1collisiondetection) Library and command line tool to detect SHA-1 collision in a file
+- [**1052**星][2m] [Boo] [byt3bl33d3r/silenttrinity](https://github.com/byt3bl33d3r/silenttrinity) An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR
+- [**1051**星][9d] [C++] [wavm/wavm](https://github.com/WAVM/WAVM) WebAssembly Virtual Machine
+- [**1051**星][27d] [Py] [sundowndev/phoneinfoga](https://github.com/sundowndev/phoneinfoga) Advanced information gathering & OSINT tool for phone numbers
+- [**1050**星][3d] [Rust] [zboxfs/zbox](https://github.com/zboxfs/zbox) Zero-details, privacy-focused in-app file system.
+- [**1049**星][14d] [Py] [yzddmr6/webshell-venom](https://github.com/yzddmr6/webshell-venom) 免杀webshell无限生成工具(利用随机异或无限免杀D盾)
+- [**1048**星][15d] [Py] [fireeye/flare-ida](https://github.com/fireeye/flare-ida) 多工具
- [StackStrings](https://github.com/fireeye/flare-ida/blob/master/plugins/stackstrings_plugin.py) 自动恢复手动构造的字符串
- [Struct Typer](https://github.com/fireeye/flare-ida/blob/master/plugins/struct_typer_plugin.py) implements the struct typing described [here](https://www.mandiant.com/blog/applying-function-types-structure-fields-ida/)
- [ApplyCalleeType](https://github.com/fireeye/flare-ida/blob/master/python/flare/apply_callee_type.py) specify or choose a function type for indirect calls as described [here](https://www.fireeye.com/blog/threat-research/2015/04/flare_ida_pro_script.html)
@@ -1177,497 +1264,526 @@
- [MSDN Annotations](https://github.com/fireeye/flare-ida/tree/master/python/flare/IDB_MSDN_Annotator) 从XML文件中提取MSDN信息,添加到IDB数据库中
- [ironstrings](https://github.com/fireeye/flare-ida/tree/master/python/flare/ironstrings) 使用代码模拟执行(flare-emu), 恢复构造的字符串
- [Shellcode Hashes](https://github.com/fireeye/flare-ida/tree/master/shellcode_hashes) 生成Hash数据库
-- [**1040**星][2m] [C] [trailofbits/ctf](https://github.com/trailofbits/ctf) CTF Field Guide
-- [**1039**星][12d] [C++] [wavm/wavm](https://github.com/WAVM/WAVM) WebAssembly Virtual Machine
-- [**1039**星][5m] [Py] [woj-ciech/kamerka](https://github.com/woj-ciech/kamerka) 利用Shodan构建交互式摄像头地图
-- [**1038**星][8m] [Py] [lucifer1993/angelsword](https://github.com/lucifer1993/angelsword) Python3编写的CMS漏洞检测框架
-- [**1038**星][9m] [Shell] [firehol/firehol](https://github.com/firehol/firehol) A firewall for humans...
-- [**1037**星][12d] [Py] [yzddmr6/webshell-venom](https://github.com/yzddmr6/webshell-venom) 免杀webshell无限生成工具(利用随机异或无限免杀D盾)
-- [**1035**星][1y] [Batchfile] [nextronsystems/aptsimulator](https://github.com/NextronSystems/APTSimulator) A toolset to make a system look as if it was the victim of an APT attack
-- [**1034**星][2m] [C] [xairy/kernel-exploits](https://github.com/xairy/kernel-exploits) My proof-of-concept exploits for the Linux kernel
-- [**1034**星][1m] [C] [t6x/reaver-wps-fork-t6x](https://github.com/t6x/reaver-wps-fork-t6x) 攻击 Wi-Fi Protected Setup (WPS), 恢复 WPA/WPA2 密码
-- [**1033**星][7m] [HTML] [sindresorhus/devtools-detect](https://github.com/sindresorhus/devtools-detect) Detect if DevTools is open and its orientation
-- [**1032**星][3m] [Py] [h4ckforjob/dirmap](https://github.com/h4ckforjob/dirmap) 一个高级web目录、文件扫描工具,功能将会强于DirBuster、Dirsearch、cansina、御剑。
-- [**1032**星][13d] [HTML] [defectdojo/django-defectdojo](https://github.com/defectdojo/django-defectdojo) DefectDojo is an open-source application vulnerability correlation and security orchestration tool.
-- [**1032**星][4y] [C] [crmulliner/adbi](https://github.com/crmulliner/adbi) Android Dynamic Binary Instrumentation Toolkit
-- [**1031**星][4m] [PowerShell] [kevin-robertson/inveigh](https://github.com/kevin-robertson/inveigh) Windows PowerShell ADIDNS/LLMNR/mDNS/NBNS spoofer/man-in-the-middle tool
-- [**1031**星][1y] [PowerShell] [danmcinerney/icebreaker](https://github.com/danmcinerney/icebreaker) Gets plaintext Active Directory credentials if you're on the internal network but outside the AD environment
-- [**1029**星][2y] [PowerShell] [nccgroup/redsnarf](https://github.com/nccgroup/redsnarf) 渗透测试工具,使用OpSec Safe 技术从 Windows 工作站,服务器和域控制器提取 hash 和凭据
-- [**1028**星][3y] [C++] [zyq8709/dexhunter](https://github.com/zyq8709/dexhunter) General Automatic Unpacking Tool for Android Dex Files
-- [**1024**星][2y] [Objective-C] [zhengmin1989/ios_ice_and_fire](https://github.com/zhengmin1989/ios_ice_and_fire) iOS冰与火之歌
-- [**1023**星][6m] [stephenturner/oneliners](https://github.com/stephenturner/oneliners) Useful bash one-liners for bioinformatics.
-- [**1022**星][5m] [C] [govolution/avet](https://github.com/govolution/avet) 免杀工具
-- [**1019**星][1y] [naetw/ctf-pwn-tips](https://github.com/naetw/ctf-pwn-tips) Here record some tips about pwn. Something is obsoleted and won't be updated. Sorry about that.
-- [**1019**星][3m] [Py] [byt3bl33d3r/deathstar](https://github.com/byt3bl33d3r/deathstar) 在Active Directory环境中使用Empire自动获取域管理员权限
-- [**1017**星][25d] [Py] [sundowndev/phoneinfoga](https://github.com/sundowndev/phoneinfoga) Advanced information gathering & OSINT tool for phone numbers
-- [**1015**星][29d] [C] [s0lst1c3/eaphammer](https://github.com/s0lst1c3/eaphammer) 针对WPA2-Enterprise 网络的定向双重攻击(evil twin attacks)
+- [**1046**星][20d] [denji/awesome-http-benchmark](https://github.com/denji/awesome-http-benchmark) HTTP(S) benchmark tools, testing/debugging, & restAPI (RESTful)
+- [**1045**星][5m] [Py] [woj-ciech/kamerka](https://github.com/woj-ciech/kamerka) 利用Shodan构建交互式摄像头地图
+- [**1044**星][9m] [Shell] [firehol/firehol](https://github.com/firehol/firehol) A firewall for humans...
+- [**1041**星][2m] [C] [trailofbits/ctf](https://github.com/trailofbits/ctf) CTF Field Guide
+- [**1041**星][3m] [Py] [h4ckforjob/dirmap](https://github.com/h4ckforjob/dirmap) 一个高级web目录、文件扫描工具,功能将会强于DirBuster、Dirsearch、cansina、御剑。
+- [**1040**星][8m] [Py] [lucifer1993/angelsword](https://github.com/lucifer1993/angelsword) Python3编写的CMS漏洞检测框架
+- [**1040**星][4m] [PS] [kevin-robertson/inveigh](https://github.com/kevin-robertson/inveigh) Windows PowerShell ADIDNS/LLMNR/mDNS/NBNS spoofer/man-in-the-middle tool
+- [**1040**星][2m] [JS] [freetubeapp/freetube](https://github.com/freetubeapp/freetube) An Open Source YouTube app for privacy
+- [**1040**星][1m] [Py] [ezaquarii/vpn-at-home](https://github.com/ezaquarii/vpn-at-home) 1-click, self-hosted deployment of OpenVPN with DNS ad blocking sinkhole
+- [**1039**星][1y] [Batchfile] [nextronsystems/aptsimulator](https://github.com/NextronSystems/APTSimulator) A toolset to make a system look as if it was the victim of an APT attack
+- [**1038**星][1m] [C] [t6x/reaver-wps-fork-t6x](https://github.com/t6x/reaver-wps-fork-t6x) 攻击 Wi-Fi Protected Setup (WPS), 恢复 WPA/WPA2 密码
+- [**1038**星][7m] [nanopool/claymore-dual-miner](https://github.com/nanopool/claymore-dual-miner) Claymore's Dual Ethereum+Decred_Siacoin_Lbry AMD+NVIDIA GPU Miner
+- [**1037**星][2m] [C] [xairy/kernel-exploits](https://github.com/xairy/kernel-exploits) My proof-of-concept exploits for the Linux kernel
+- [**1037**星][7m] [HTML] [sindresorhus/devtools-detect](https://github.com/sindresorhus/devtools-detect) Detect if DevTools is open and its orientation
+- [**1036**星][15d] [HTML] [defectdojo/django-defectdojo](https://github.com/defectdojo/django-defectdojo) DefectDojo is an open-source application vulnerability correlation and security orchestration tool.
+- [**1036**星][5y] [C] [crmulliner/adbi](https://github.com/crmulliner/adbi) Android Dynamic Binary Instrumentation Toolkit
+- [**1032**星][3y] [C++] [zyq8709/dexhunter](https://github.com/zyq8709/dexhunter) General Automatic Unpacking Tool for Android Dex Files
+- [**1032**星][1y] [PS] [danmcinerney/icebreaker](https://github.com/danmcinerney/icebreaker) Gets plaintext Active Directory credentials if you're on the internal network but outside the AD environment
+- [**1029**星][20d] [Py] [nccgroup/scoutsuite](https://github.com/nccgroup/scoutsuite) Multi-Cloud Security Auditing Tool
+- [**1029**星][2y] [PS] [nccgroup/redsnarf](https://github.com/nccgroup/redsnarf) 渗透测试工具,使用OpSec Safe 技术从 Windows 工作站,服务器和域控制器提取 hash 和凭据
+- [**1029**星][5m] [C] [govolution/avet](https://github.com/govolution/avet) 免杀工具
+- [**1029**星][29d] [denji/nginx-tuning](https://github.com/denji/nginx-tuning) NGINX tuning for best performance
+- [**1028**星][18d] [Py] [ct-open-source/tuya-convert](https://github.com/ct-open-source/tuya-convert) A collection of scripts to flash Tuya IoT devices to alternative firmwares
+- [**1025**星][6m] [stephenturner/oneliners](https://github.com/stephenturner/oneliners) Useful bash one-liners for bioinformatics.
+- [**1025**星][2y] [ObjC] [zhengmin1989/ios_ice_and_fire](https://github.com/zhengmin1989/ios_ice_and_fire) iOS冰与火之歌
+- [**1024**星][12m] [Go] [twitchyliquid64/subnet](https://github.com/twitchyliquid64/subnet) Simple, auditable & elegant VPN, built with TLS mutual authentication and TUN.
+- [**1024**星][1y] [naetw/ctf-pwn-tips](https://github.com/naetw/ctf-pwn-tips) Here record some tips about pwn. Something is obsoleted and won't be updated. Sorry about that.
+- [**1021**星][3m] [Py] [byt3bl33d3r/deathstar](https://github.com/byt3bl33d3r/deathstar) 在Active Directory环境中使用Empire自动获取域管理员权限
+- [**1019**星][27d] [Shell] [trimstray/sandmap](https://github.com/trimstray/sandmap) 使用NMap引擎, 辅助网络和系统侦查(reconnaissance)
+- [**1018**星][1m] [C] [s0lst1c3/eaphammer](https://github.com/s0lst1c3/eaphammer) 针对WPA2-Enterprise 网络的定向双重攻击(evil twin attacks)
+- [**1018**星][9m] [Go] [maliceio/malice](https://github.com/maliceio/malice) 开源版的VirusTotal
+- [**1014**星][3m] [HTML] [owasp/nodegoat](https://github.com/owasp/nodegoat) 学习OWASP安全威胁Top10如何应用到Web App的,以及如何处理
- [**1014**星][2y] [JS] [umpox/zero-width-detection](https://github.com/umpox/zero-width-detection) Fingerprinting小技巧
-- [**1014**星][18d] [Py] [nccgroup/scoutsuite](https://github.com/nccgroup/scoutsuite) Multi-Cloud Security Auditing Tool
+- [**1014**星][11d] [Py] [securestate/king-phisher](https://github.com/securestate/king-phisher) Phishing Campaign Toolkit
+- [**1014**星][5m] [C++] [everdox/infinityhook](https://github.com/everdox/infinityhook) Hook system calls, context switches, page faults and more.
+- [**1014**星][1y] [Py] [d4vinci/dr0p1t-framework](https://github.com/d4vinci/dr0p1t-framework) 创建免杀的Dropper
- [**1014**星][3y] [C++] [aguinet/wannakey](https://github.com/aguinet/wannakey) XP 系统从内存中恢复 Wanacry 最初使用 RSA 私钥(要求主机感染后未重启)
-- [**1012**星][25d] [Shell] [trimstray/sandmap](https://github.com/trimstray/sandmap) 使用NMap引擎, 辅助网络和系统侦查(reconnaissance)
-- [**1012**星][1y] [Py] [d4vinci/dr0p1t-framework](https://github.com/d4vinci/dr0p1t-framework) 创建免杀的Dropper
-- [**1011**星][3m] [HTML] [owasp/nodegoat](https://github.com/owasp/nodegoat) 学习OWASP安全威胁Top10如何应用到Web App的,以及如何处理
-- [**1010**星][9m] [Go] [maliceio/malice](https://github.com/maliceio/malice) 开源版的VirusTotal
-- [**1006**星][1m] [Go] [justinas/nosurf](https://github.com/justinas/nosurf) CSRF protection middleware for Go.
-- [**1005**星][1y] [JS] [0xsobky/hackvault](https://github.com/0xsobky/hackvault) A container repository for my public web hacks!
-- [**1004**星][9d] [Py] [securestate/king-phisher](https://github.com/securestate/king-phisher) Phishing Campaign Toolkit
-- [**1004**星][5m] [C++] [everdox/infinityhook](https://github.com/everdox/infinityhook) Hook system calls, context switches, page faults and more.
+- [**1011**星][8d] [Rich Text Format] [decalage2/oletools](https://github.com/decalage2/oletools) oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.
+- [**1009**星][1y] [C] [ionescu007/simplevisor](https://github.com/ionescu007/simplevisor) 英特尔VT-x虚拟机管理程序,简单、可移植。支持Windows和UEFI
+- [**1008**星][24d] [Swift] [rockbruno/swiftshield](https://github.com/rockbruno/swiftshield) wift/OBJ-C Obfuscator
+- [**1008**星][5d] [JS] [monzo/response](https://github.com/monzo/response) Monzo's real-time incident response and reporting tool
+- [**1008**星][1y] [JS] [0xsobky/hackvault](https://github.com/0xsobky/hackvault) A container repository for my public web hacks!
+- [**1007**星][1m] [Go] [justinas/nosurf](https://github.com/justinas/nosurf) CSRF protection middleware for Go.
- [**1004**星][1y] [Py] [entropy1337/infernal-twin](https://github.com/entropy1337/infernal-twin) 自动化无线Hack 工具
-- [**1003**星][1y] [C] [ionescu007/simplevisor](https://github.com/ionescu007/simplevisor) 英特尔VT-x虚拟机管理程序,简单、可移植。支持Windows和UEFI
-- [**1001**星][11m] [Batchfile] [sagishahar-zz/lpeworkshop](https://github.com/sagishahar-zz/lpeworkshop) Windows / Linux Local Privilege Escalation Workshop
+- [**1002**星][24d] [C] [hacksysteam/hacksysextremevulnerabledriver](https://github.com/hacksysteam/hacksysextremevulnerabledriver) HackSys Extreme Vulnerable Windows Driver
+- [**1002**星][1m] [C] [google/fuzzer-test-suite](https://github.com/google/fuzzer-test-suite) Set of tests for fuzzing engines
+- [**1001**星][7m] [sundowndev/hacker-roadmap](https://github.com/sundowndev/hacker-roadmap)
+- [**1001**星][9m] [onethawt/reverseengineering-reading-list](https://github.com/onethawt/reverseengineering-reading-list) A list of Reverse Engineering articles, books, and papers
+- [**1000**星][11m] [Batchfile] [sagishahar-zz/lpeworkshop](https://github.com/sagishahar-zz/lpeworkshop) Windows / Linux Local Privilege Escalation Workshop
- [**1000**星][5m] [adolfintel/windows10-privacy](https://github.com/adolfintel/windows10-privacy) Win10隐私指南
-- [**999**星][1m] [C] [google/fuzzer-test-suite](https://github.com/google/fuzzer-test-suite) Set of tests for fuzzing engines
-- [**999**星][16d] [Py] [ct-open-source/tuya-convert](https://github.com/ct-open-source/tuya-convert) A collection of scripts to flash Tuya IoT devices to alternative firmwares
+- [**999**星][28d] [C] [bt3gl/pentesting-toolkit](https://github.com/bt3gl/Pentesting-Toolkit) 渗透测试,CTF和战争游戏的工具收集
+- [**999**星][2m] [ObjC] [lmirosevic/gbdeviceinfo](https://github.com/lmirosevic/gbdeviceinfo) Detects the hardware, software and display of the current iOS or Mac OS X device at runtime.
- [**999**星][8m] [Go] [adtac/autovpn](https://github.com/adtac/autovpn) THIS PROJECT IS UNMAINTAINED.
-- [**997**星][5m] [Ruby] [mdp/rotp](https://github.com/mdp/rotp) Ruby One Time Password library
-- [**997**星][22d] [C] [hacksysteam/hacksysextremevulnerabledriver](https://github.com/hacksysteam/hacksysextremevulnerabledriver) HackSys Extreme Vulnerable Windows Driver
-- [**997**星][2y] [Py] [danmcinerney/xsscrapy](https://github.com/danmcinerney/xsscrapy) XSS spider - 66/66 wavsep XSS detected
-- [**996**星][2m] [Objective-C] [lmirosevic/gbdeviceinfo](https://github.com/lmirosevic/gbdeviceinfo) Detects the hardware, software and display of the current iOS or Mac OS X device at runtime.
-- [**994**星][9m] [Go] [gencebay/httplive](https://github.com/gencebay/httplive) HTTP Request & Response Service, Mock HTTP
-- [**993**星][1m] [Py] [x0rz/phishing_catcher](https://github.com/x0rz/phishing_catcher) 使用Certstream 捕获钓鱼域名
-- [**993**星][21d] [JS] [monzo/response](https://github.com/monzo/response) Monzo's real-time incident response and reporting tool
-- [**992**星][9m] [onethawt/reverseengineering-reading-list](https://github.com/onethawt/reverseengineering-reading-list) A list of Reverse Engineering articles, books, and papers
-- [**992**星][12m] [C#] [kenvix/usbcopyer](https://github.com/kenvix/usbcopyer) 插上U盘自动按需复制文件
-- [**990**星][3y] [JS] [yahooarchive/xss-filters](https://github.com/YahooArchive/xss-filters) Secure XSS Filters.
+- [**998**星][5m] [Ruby] [mdp/rotp](https://github.com/mdp/rotp) Ruby One Time Password library
+- [**998**星][12m] [C#] [kenvix/usbcopyer](https://github.com/kenvix/usbcopyer) 插上U盘自动按需复制文件
+- [**998**星][2y] [Py] [danmcinerney/xsscrapy](https://github.com/danmcinerney/xsscrapy) XSS spider - 66/66 wavsep XSS detected
+- [**997**星][12m] [PHP] [secwiki/cms-hunter](https://github.com/secwiki/cms-hunter) CMS漏洞测试用例集合
+- [**996**星][1m] [Py] [x0rz/phishing_catcher](https://github.com/x0rz/phishing_catcher) 使用Certstream 捕获钓鱼域名
+- [**995**星][9m] [Go] [gencebay/httplive](https://github.com/gencebay/httplive) HTTP Request & Response Service, Mock HTTP
+- [**992**星][4m] [C] [gsliepen/tinc](https://github.com/gsliepen/tinc) a VPN daemon
- [**990**星][1y] [Py] [tylous/sniffair](https://github.com/tylous/sniffair) 无线渗透框架. 解析被动收集的无线数据, 执行复杂的无线攻击
-- [**990**星][10d] [Rich Text Format] [decalage2/oletools](https://github.com/decalage2/oletools) oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.
-- [**989**星][12m] [PHP] [secwiki/cms-hunter](https://github.com/secwiki/cms-hunter) CMS漏洞测试用例集合
-- [**985**星][10m] [Py] [xiphosresearch/exploits](https://github.com/xiphosresearch/exploits) Miscellaneous exploit code
-- [**984**星][1m] [C] [wiire-a/pixiewps](https://github.com/wiire-a/pixiewps) An offline Wi-Fi Protected Setup brute-force utility
-- [**984**星][22d] [Swift] [rockbruno/swiftshield](https://github.com/rockbruno/swiftshield) wift/OBJ-C Obfuscator
-- [**983**星][1y] [HTML] [sensepost/mana](https://github.com/sensepost/mana) *DEPRECATED* mana toolkit for wifi rogue AP attacks and MitM
-- [**983**星][10d] [Py] [jekil/awesome-hacking](https://github.com/jekil/awesome-hacking) Awesome hacking is an awesome collection of hacking tools.
-- [**981**星][3m] [Py] [ekultek/bluekeep](https://github.com/ekultek/bluekeep) Proof of concept for CVE-2019-0708
-- [**980**星][7m] [sundowndev/hacker-roadmap](https://github.com/sundowndev/hacker-roadmap)
-- [**978**星][1m] [C] [zardus/preeny](https://github.com/zardus/preeny) Some helpful preload libraries for pwning stuff.
-- [**978**星][1m] [Py] [syss-research/seth](https://github.com/syss-research/seth) Perform a MitM attack and extract clear text credentials from RDP connections
-- [**977**星][1y] [Py] [fsecurelabs/needle](https://github.com/FSecureLABS/needle) The iOS Security Testing Framework
-- [**977**星][4m] [Go] [nosequeldeebee/blockchain-tutorial](https://github.com/nosequeldeebee/blockchain-tutorial) Write and publish your own blockchain in less than 200 lines of Go
-- [**976**星][21d] [JS] [lukechilds/reverse-shell](https://github.com/lukechilds/reverse-shell) Reverse Shell as a Service
+- [**988**星][3d] [C#] [k8gege/ladon](https://github.com/k8gege/ladon) 大型内网渗透扫描器&Cobalt Strike,包含信息收集/端口扫描/服务识别/网络资产/密码爆破/漏洞检测/漏洞利用。漏洞检测含MS17010、Weblogic、ActiveMQ、Tomcat等,密码口令爆破含(Mysql、Oracle、MSSQL)、FTP、SSH(Linux)、VNC、Windows(IPC、WMI、SMB)等,可高度自定义插件支持.NET程序集、DLL(C#/Delphi/VC)、PowerShell等语言编写的插件,支持通过配置INI批量调用任意外部程序或命令,EXP生成器一键生成Web漏洞POC,可快速扩展扫描或利用能力。支持Cobalt Strike插件化直接内存加载Ladon扫描快速拓展内网横向移动
+- [**988**星][3y] [JS] [yahooarchive/xss-filters](https://github.com/YahooArchive/xss-filters) Secure XSS Filters.
+- [**988**星][4m] [Go] [nosequeldeebee/blockchain-tutorial](https://github.com/nosequeldeebee/blockchain-tutorial) Write and publish your own blockchain in less than 200 lines of Go
+- [**987**星][10m] [Py] [xiphosresearch/exploits](https://github.com/xiphosresearch/exploits) Miscellaneous exploit code
+- [**987**星][3d] [Py] [jekil/awesome-hacking](https://github.com/jekil/awesome-hacking) Awesome hacking is an awesome collection of hacking tools.
+- [**986**星][1m] [C] [wiire-a/pixiewps](https://github.com/wiire-a/pixiewps) An offline Wi-Fi Protected Setup brute-force utility
+- [**986**星][1y] [HTML] [sensepost/mana](https://github.com/sensepost/mana) *DEPRECATED* mana toolkit for wifi rogue AP attacks and MitM
+- [**986**星][3m] [Py] [ekultek/bluekeep](https://github.com/ekultek/bluekeep) Proof of concept for CVE-2019-0708
+- [**981**星][1y] [Py] [fsecurelabs/needle](https://github.com/FSecureLABS/needle) The iOS Security Testing Framework
+- [**980**星][1m] [C] [zardus/preeny](https://github.com/zardus/preeny) Some helpful preload libraries for pwning stuff.
+- [**980**星][2m] [Py] [syss-research/seth](https://github.com/syss-research/seth) Perform a MitM attack and extract clear text credentials from RDP connections
+- [**979**星][1m] [hoshsadiq/adblock-nocoin-list](https://github.com/hoshsadiq/adblock-nocoin-list) Block lists to prevent JavaScript miners
+- [**978**星][23d] [JS] [lukechilds/reverse-shell](https://github.com/lukechilds/reverse-shell) Reverse Shell as a Service
+- [**978**星][12d] [Py] [kiminewt/pyshark](https://github.com/kiminewt/pyshark) Python wrapper for tshark, allowing python packet parsing using wireshark dissectors
+- [**978**星][2m] [Jupyter Notebook] [hyperparticle/one-pixel-attack-keras](https://github.com/hyperparticle/one-pixel-attack-keras) Keras implementation of "One pixel attack for fooling deep neural networks" using differential evolution on Cifar10 and ImageNet
+- [**978**星][3y] [Py] [dowsnature/dowsdns](https://github.com/dowsnature/dowsdns) 快速翻跃中国防火墙
+- [**978**星][26d] [Jupyter Notebook] [aarshayj/analytics_vidhya](https://github.com/aarshayj/analytics_vidhya) Codes related to activities on AV including articles, hackathons and discussions.
+- [**976**星][7m] [0x4d31/awesome-threat-detection](https://github.com/0x4d31/awesome-threat-detection) A curated list of awesome threat detection and hunting resources
+- [**975**星][3y] [Py] [synack/knockknock](https://github.com/synack/knockknock) displays persistent items (scripts, commands, binaries, etc.), that are set to execute automatically on OS X
- [**975**星][2y] [Py] [moosedojo/apt2](https://github.com/moosedojo/apt2) 自动化渗透测试工具包。执行NMap扫描, 或者导入Nexpose, Nessus, NMap扫描结果
-- [**975**星][24d] [Jupyter Notebook] [aarshayj/analytics_vidhya](https://github.com/aarshayj/analytics_vidhya) Codes related to activities on AV including articles, hackathons and discussions.
-- [**974**星][3y] [Py] [synack/knockknock](https://github.com/synack/knockknock) displays persistent items (scripts, commands, binaries, etc.), that are set to execute automatically on OS X
-- [**974**星][2m] [Jupyter Notebook] [hyperparticle/one-pixel-attack-keras](https://github.com/hyperparticle/one-pixel-attack-keras) Keras implementation of "One pixel attack for fooling deep neural networks" using differential evolution on Cifar10 and ImageNet
-- [**973**星][10d] [Py] [kiminewt/pyshark](https://github.com/kiminewt/pyshark) Python wrapper for tshark, allowing python packet parsing using wireshark dissectors
-- [**971**星][27d] [Py] [x64dbg/docs](https://github.com/x64dbg/docs) x64dbg文档
-- [**971**星][7m] [Py] [m57/dnsteal](https://github.com/m57/dnsteal) DNS Exfiltration tool for stealthily sending files over DNS requests.
-- [**969**星][1m] [HTML] [n0tr00t/sreg](https://github.com/n0tr00t/sreg) 可对使用者通过输入email、phone、username的返回用户注册的所有互联网护照信息。
-- [**969**星][3m] [ctfs/resources](https://github.com/ctfs/resources) A general collection of information, tools, and tips regarding CTFs and similar security competitions
-- [**968**星][7m] [0x4d31/awesome-threat-detection](https://github.com/0x4d31/awesome-threat-detection) A curated list of awesome threat detection and hunting resources
-- [**967**星][3y] [Java] [androidvts/android-vts](https://github.com/androidvts/android-vts) Android Vulnerability Test Suite - In the spirit of open data collection, and with the help of the community, let's take a pulse on the state of Android security. NowSecure presents an on-device app to test for recent device vulnerabilities.
-- [**966**星][2m] [Go] [vishvananda/netlink](https://github.com/vishvananda/netlink) Simple netlink library for go.
-- [**966**星][2m] [C] [olimex/olinuxino](https://github.com/olimex/olinuxino) OLINUXINO is Open Source / Open Hardware, low cost from EUR 24 Linux Industrial grade Single Board Computer capable to operate -25+85C
+- [**974**星][24d] [Rust] [sozu-proxy/sozu](https://github.com/sozu-proxy/sozu) Sōzu HTTP reverse proxy, configurable at runtime, fast and safe, built in Rust. It is awesome! Ping us on gitter to know more
+- [**973**星][2m] [Py] [ondyari/faceforensics](https://github.com/ondyari/faceforensics) Github of the FaceForensics dataset
+- [**973**星][1m] [HTML] [n0tr00t/sreg](https://github.com/n0tr00t/sreg) 可对使用者通过输入email、phone、username的返回用户注册的所有互联网护照信息。
+- [**973**星][7m] [Py] [m57/dnsteal](https://github.com/m57/dnsteal) DNS Exfiltration tool for stealthily sending files over DNS requests.
+- [**973**星][12m] [Java] [huolizhuminh/networkpacketcapture](https://github.com/huolizhuminh/networkpacketcapture) It is used to capture network packet via Android VPN.
+- [**972**星][6d] [C++] [herumi/xbyak](https://github.com/herumi/xbyak) a JIT assembler for x86(IA-32)/x64(AMD64, x86-64) MMX/SSE/SSE2/SSE3/SSSE3/SSE4/FPU/AVX/AVX2/AVX-512 by C++ header
+- [**971**星][29d] [Py] [x64dbg/docs](https://github.com/x64dbg/docs) x64dbg文档
+- [**971**星][27d] [Go] [vishvananda/netlink](https://github.com/vishvananda/netlink) Simple netlink library for go.
+- [**971**星][3m] [ctfs/resources](https://github.com/ctfs/resources) A general collection of information, tools, and tips regarding CTFs and similar security competitions
+- [**969**星][4m] [Assembly] [corkami/pocs](https://github.com/corkami/pocs) Proof of Concepts (PE, PDF...)
+- [**968**星][5m] [C] [rbsec/sslscan](https://github.com/rbsec/sslscan) 测试启用SSL/TLS的服务,发现其支持的cipher suites
+- [**968**星][2m] [C] [olimex/olinuxino](https://github.com/olimex/olinuxino) OLINUXINO is Open Source / Open Hardware, low cost from EUR 24 Linux Industrial grade Single Board Computer capable to operate -25+85C
+- [**967**星][8m] [Py] [selwin/python-user-agents](https://github.com/selwin/python-user-agents) A Python library that provides an easy way to identify devices like mobile phones, tablets and their capabilities by parsing (browser) user agent strings.
+- [**967**星][4m] [Go] [dominicbreuker/pspy](https://github.com/dominicbreuker/pspy) 一个命令行工具, 无需根权限就可以窥探Linux进程
- [**966**星][3y] [C] [cybellum/doubleagent](https://github.com/cybellum/doubleagent) Zero-Day Code Injection and Persistence Technique
-- [**966**星][4m] [Assembly] [corkami/pocs](https://github.com/corkami/pocs) Proof of Concepts (PE, PDF...)
-- [**965**星][5m] [C] [rbsec/sslscan](https://github.com/rbsec/sslscan) 测试启用SSL/TLS的服务,发现其支持的cipher suites
-- [**964**星][8m] [Py] [selwin/python-user-agents](https://github.com/selwin/python-user-agents) A Python library that provides an easy way to identify devices like mobile phones, tablets and their capabilities by parsing (browser) user agent strings.
-- [**963**星][11d] [C++] [herumi/xbyak](https://github.com/herumi/xbyak) a JIT assembler for x86(IA-32)/x64(AMD64, x86-64) MMX/SSE/SSE2/SSE3/SSSE3/SSE4/FPU/AVX/AVX2/AVX-512 by C++ header
-- [**963**星][4m] [Go] [dominicbreuker/pspy](https://github.com/dominicbreuker/pspy) Monitor linux processes without root permissions
-- [**961**星][19d] [C] [bt3gl/pentesting-toolkit](https://github.com/bt3gl/Pentesting-Toolkit) Tools for pentesting, CTFs & wargames.
+- [**966**星][3y] [Java] [androidvts/android-vts](https://github.com/androidvts/android-vts) Android Vulnerability Test Suite - In the spirit of open data collection, and with the help of the community, let's take a pulse on the state of Android security. NowSecure presents an on-device app to test for recent device vulnerabilities.
+- [**965**星][5d] [C++] [dvorka/mindforger](https://github.com/dvorka/mindforger) Thinking notebook and Markdown IDE.
+- [**965**星][1m] [C#] [cobbr/covenant](https://github.com/cobbr/covenant) Covenant is a collaborative .NET C2 framework for red teamers.
+- [**964**星][7m] [PHP] [jenssegers/optimus](https://github.com/jenssegers/optimus) id transformation With this library, you can transform your internal id's to obfuscated integers based on Knuth's integer has和
+- [**962**星][4m] [Py] [0xinfection/tidos-framework](https://github.com/0xInfection/TIDoS-Framework) Web App渗透测试框架, 攻击性, 手动
+- [**962**星][3d] [bromite/bromite](https://github.com/bromite/bromite) Bromite is Chromium plus ad blocking and privacy enhancements; take back your browser!
+- [**962**星][3y] [Py] [abatchy17/windowsexploits](https://github.com/abatchy17/windowsexploits) Windows exploits, mostly precompiled. Not being updated. Check
+- [**961**星][4y] [pillarjs/understanding-csrf](https://github.com/pillarjs/understanding-csrf) What are CSRF tokens and how do they work?
+- [**961**星][1m] [PS] [netspi/powerupsql](https://github.com/netspi/powerupsql) 攻击SQL服务器的PowerShell工具箱
- [**961**星][3y] [Go] [jaksi/sshesame](https://github.com/jaksi/sshesame) A fake SSH server that lets everyone in and logs their activity
-- [**960**星][7m] [PHP] [jenssegers/optimus](https://github.com/jenssegers/optimus) id transformation With this library, you can transform your internal id's to obfuscated integers based on Knuth's integer has和
-- [**960**星][9m] [C++] [dvorka/mindforger](https://github.com/dvorka/mindforger) Thinking notebook and Markdown IDE.
-- [**959**星][4y] [pillarjs/understanding-csrf](https://github.com/pillarjs/understanding-csrf) What are CSRF tokens and how do they work?
-- [**958**星][4m] [Py] [0xinfection/tidos-framework](https://github.com/0xInfection/TIDoS-Framework) Web App渗透测试框架, 攻击性, 手动
-- [**956**星][2m] [Py] [ondyari/faceforensics](https://github.com/ondyari/faceforensics) Github of the FaceForensics dataset
-- [**956**星][3y] [Py] [abatchy17/windowsexploits](https://github.com/abatchy17/windowsexploits) Windows exploits, mostly precompiled. Not being updated. Check
-- [**955**星][2m] [JS] [pillarjs/cookies](https://github.com/pillarjs/cookies) Signed and unsigned cookies based on Keygrip
+- [**957**星][2m] [JS] [pillarjs/cookies](https://github.com/pillarjs/cookies) Signed and unsigned cookies based on Keygrip
+- [**956**星][2d] [Py] [shmilylty/oneforall](https://github.com/shmilylty/oneforall) 子域收集工具
+- [**956**星][27d] [Py] [fireeye/flare-fakenet-ng](https://github.com/fireeye/flare-fakenet-ng) 下一代动态网络分析工具
+- [**955**星][7d] [C++] [hasherezade/pe-sieve](https://github.com/hasherezade/pe-sieve) Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).
- [**953**星][4m] [Py] [hatriot/zarp](https://github.com/hatriot/zarp) 网络攻击工具,主要是本地网络攻击
-- [**953**星][25d] [Py] [fireeye/flare-fakenet-ng](https://github.com/fireeye/flare-fakenet-ng) 下一代动态网络分析工具
-- [**952**星][1m] [PowerShell] [netspi/powerupsql](https://github.com/netspi/powerupsql) 攻击SQL服务器的PowerShell工具箱
-- [**952**星][1m] [C#] [cobbr/covenant](https://github.com/cobbr/covenant) Covenant is a collaborative .NET C2 framework for red teamers.
-- [**950**星][8d] [C++] [hasherezade/pe-sieve](https://github.com/hasherezade/pe-sieve) Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).
-- [**947**星][2y] [Py] [arnaucube/coffeeminer](https://github.com/arnaucube/coffeeMiner) collaborative (mitm) cryptocurrency mining pool in wifi networks
-- [**947**星][1y] [JS] [fabienvauchelles/scrapoxy](https://github.com/fabienvauchelles/scrapoxy) Scrapoxy hides your scraper behind a cloud. It starts a pool of proxies to send your requests. Now, you can crawl without thinking about blacklisting!
+- [**952**星][12d] [HTML] [sprov065/v2-ui](https://github.com/sprov065/v2-ui) 支持多协议多用户的 v2ray 面板,Support multi-protocol multi-user v2ray panel
+- [**952**星][1y] [JS] [fabienvauchelles/scrapoxy](https://github.com/fabienvauchelles/scrapoxy) Scrapoxy hides your scraper behind a cloud. It starts a pool of proxies to send your requests. Now, you can crawl without thinking about blacklisting!
+- [**951**星][8d] [Py] [mozilla/openwpm](https://github.com/mozilla/OpenWPM) A web privacy measurement framework
+- [**951**星][2y] [C] [fdiskyou/injectallthethings](https://github.com/fdiskyou/injectallthethings) Seven different DLL injection techniques in one single project.
+- [**950**星][2y] [Py] [trycatchhcf/cloakify](https://github.com/trycatchhcf/cloakify) CloakifyFactory - Data Exfiltration & Infiltration In Plain Sight; Convert any filetype into list of everyday strings, using Text-Based Steganography; Evade DLP/MLS Devices, Defeat Data Whitelisting Controls, Social Engineering of Analysts, Evade AV Detection
+- [**948**星][2y] [Py] [arnaucube/coffeeminer](https://github.com/arnaucube/coffeeMiner) collaborative (mitm) cryptocurrency mining pool in wifi networks
- [**947**星][6m] [C] [dhavalkapil/heap-exploitation](https://github.com/dhavalkapil/heap-exploitation) This book on heap exploitation is a guide to understanding the internals of glibc's heap and various attacks possible on the heap structure.
-- [**946**星][10d] [C#] [k8gege/ladon](https://github.com/k8gege/ladon) 大型内网渗透扫描器&Cobalt Strike,包含信息收集/端口扫描/服务识别/网络资产/密码爆破/漏洞检测/漏洞利用。漏洞检测含MS17010、Weblogic、ActiveMQ、Tomcat等,密码口令爆破含(Mysql、Oracle、MSSQL)、FTP、SSH(Linux)、VNC、Windows(IPC、WMI、SMB)等,可高度自定义插件支持.NET程序集、DLL(C#/Delphi/VC)、PowerShell等语言编写的插件,支持通过配置INI批量调用任意外部程序或命令,EXP生成器一键生成Web漏洞POC,可快速扩展扫描或利用能力。支持Cobalt Strike插件化直接内存加载Ladon扫描快速拓展内网横向移动
-- [**945**星][17d] [Py] [mozilla/openwpm](https://github.com/mozilla/OpenWPM) A web privacy measurement framework
-- [**945**星][2y] [Py] [trycatchhcf/cloakify](https://github.com/trycatchhcf/cloakify) CloakifyFactory - Data Exfiltration & Infiltration In Plain Sight; Convert any filetype into list of everyday strings, using Text-Based Steganography; Evade DLP/MLS Devices, Defeat Data Whitelisting Controls, Social Engineering of Analysts, Evade AV Detection
-- [**943**星][2y] [C] [fdiskyou/injectallthethings](https://github.com/fdiskyou/injectallthethings) Seven different DLL injection techniques in one single project.
-- [**942**星][4m] [Py] [intelxed/xed](https://github.com/intelxed/xed) x86 encoder decoder
-- [**942**星][9d] [bromite/bromite](https://github.com/bromite/bromite) Bromite is Chromium plus ad blocking and privacy enhancements; take back your browser!
+- [**947**星][8d] [HTML] [darksecdevelopers/hiddeneye](https://github.com/darksecdevelopers/hiddeneye) Modern Phishing Tool With Advanced Functionality And Multiple Tunnelling Services [ Android-Support-Available ]
+- [**946**星][9d] [Py] [sashs/ropper](https://github.com/sashs/ropper) Display information about files in different file formats and find gadgets to build rop chains for different architectures (x86/x86_64, ARM/ARM64, MIPS, PowerPC, SPARC64). For disassembly ropper uses the awesome Capstone Framework.
+- [**946**星][4d] [Go] [ffuf/ffuf](https://github.com/ffuf/ffuf) Fast web fuzzer written in Go
+- [**946**星][2m] [C] [basil00/divert](https://github.com/basil00/divert) 用户模式数据包拦截库,适用于Win 7/8/10
+- [**944**星][2m] [C++] [cisco-talos/clamav-devel](https://github.com/Cisco-Talos/clamav-devel) ClamAV Development - FAQ is here:
+- [**944**星][2y] [C#] [invoke-ir/powerforensics](https://github.com/invoke-ir/powerforensics) PowerForensics provides an all in one platform for live disk forensic analysis
+- [**944**星][4m] [Py] [intelxed/xed](https://github.com/intelxed/xed) x86 encoder decoder
+- [**943**星][13d] [Py] [theupdateframework/tuf](https://github.com/theupdateframework/tuf) A framework for securing software update systems
+- [**942**星][2y] [HTML] [chybeta/software-security-learning](https://github.com/chybeta/software-security-learning) Software-Security-Learning
+- [**941**星][3m] [zhaoweih/shadowsocks-tutorial](https://github.com/zhaoweih/shadowsocks-tutorial)
- [**940**星][5y] [Py] [mothran/bunny](https://github.com/mothran/bunny) Bunny is a wireless. meshing, darknet that uses 802.11 to hide its communications
-- [**940**星][28d] [Py] [sashs/ropper](https://github.com/sashs/ropper) Display information about files in different file formats and find gadgets to build rop chains for different architectures (x86/x86_64, ARM/ARM64, MIPS, PowerPC, SPARC64). For disassembly ropper uses the awesome Capstone Framework.
-- [**940**星][2y] [C#] [invoke-ir/powerforensics](https://github.com/invoke-ir/powerforensics) PowerForensics provides an all in one platform for live disk forensic analysis
-- [**940**星][2m] [C] [basil00/divert](https://github.com/basil00/divert) 用户模式数据包拦截库,适用于Win 7/8/10
+- [**940**星][10m] [Shell] [1n3/findsploit](https://github.com/1n3/findsploit) Find exploits in local and online databases instantly
- [**939**星][1y] [JS] [netflix-skunkworks/sleepy-puppy](https://github.com/Netflix-Skunkworks/sleepy-puppy) Sleepy Puppy XSS Payload Management Framework
-- [**939**星][3y] [Py] [countercept/doublepulsar-detection-script](https://github.com/countercept/doublepulsar-detection-script) python脚本,用于扫描网络中感染DOUBLEPULSAR的操作系统。
-- [**938**星][2m] [C++] [cisco-talos/clamav-devel](https://github.com/Cisco-Talos/clamav-devel) ClamAV Development - FAQ is here:
-- [**937**星][2y] [Perl] [infobyte/evilgrade](https://github.com/infobyte/evilgrade) 供应链攻击: 注入虚假的update
-- [**937**星][2y] [HTML] [chybeta/software-security-learning](https://github.com/chybeta/software-security-learning) Software-Security-Learning
-- [**936**星][11d] [Py] [theupdateframework/tuf](https://github.com/theupdateframework/tuf) A framework for securing software update systems
-- [**935**星][1y] [Java] [google/firing-range](https://github.com/google/firing-range) a test bed for web application security scanners, providing synthetic, wide coverage for an array of vulnerabilities.
-- [**935**星][3m] [Py] [christophetd/cloudflair](https://github.com/christophetd/cloudflair) a tool to find origin servers of websites protected by CloudFlare who are publicly exposed and don't restrict network access to the CloudFlare IP ranges as they should
-- [**935**星][10m] [Shell] [1n3/findsploit](https://github.com/1n3/findsploit) Find exploits in local and online databases instantly
-- [**933**星][9d] [Py] [shmilylty/oneforall](https://github.com/shmilylty/oneforall) 子域收集工具
-- [**933**星][12m] [Py] [gaasedelen/lighthouse](https://github.com/gaasedelen/lighthouse) 从DBI中收集代码覆盖情况,在IDA/Binja中映射、浏览、查看
+- [**939**星][12m] [Py] [gaasedelen/lighthouse](https://github.com/gaasedelen/lighthouse) 从DBI中收集代码覆盖情况,在IDA/Binja中映射、浏览、查看
- [coverage-frida](https://github.com/gaasedelen/lighthouse/blob/master/coverage/frida/README.md) 使用Frida收集信息
- [coverage-pin](https://github.com/gaasedelen/lighthouse/blob/master/coverage/pin/README.md) 使用Pin收集覆盖信息
- [插件](https://github.com/gaasedelen/lighthouse/blob/master/plugin/lighthouse_plugin.py) 支持IDA和BinNinja
-- [**932**星][2y] [C++] [securesocketfunneling/ssf](https://github.com/securesocketfunneling/ssf) 网络工具包:TCP 和 UDP 端口转发、SOCKS 代理、远程 shell,跨平台
-- [**931**星][2y] [deepspaceharbor/awesome-ai-security](https://github.com/DeepSpaceHarbor/Awesome-AI-Security)
-- [**931**星][2y] [Py] [tomchop/malcom](https://github.com/tomchop/malcom) Malcom - Malware Communications Analyzer
-- [**930**星][7d] [C++] [kde/heaptrack](https://github.com/kde/heaptrack) A heap memory profiler for Linux
-- [**930**星][2m] [Py] [d4vinci/one-lin3r](https://github.com/d4vinci/one-lin3r) 轻量级框架,提供在渗透测试中需要的所有one-liners
-- [**928**星][7m] [Py] [osirislab/hack-night](https://github.com/osirislab/Hack-Night) a sobering introduction to offensive security
+- [**939**星][3y] [Py] [countercept/doublepulsar-detection-script](https://github.com/countercept/doublepulsar-detection-script) python脚本,用于扫描网络中感染DOUBLEPULSAR的操作系统。
+- [**939**星][3m] [Py] [christophetd/cloudflair](https://github.com/christophetd/cloudflair) a tool to find origin servers of websites protected by CloudFlare who are publicly exposed and don't restrict network access to the CloudFlare IP ranges as they should
+- [**939**星][4m] [bugcrowd/bugcrowd_university](https://github.com/bugcrowd/bugcrowd_university) 研究者社区的教育内容
+- [**938**星][9m] [wtsxdev/penetration-testing](https://github.com/wtsxdev/penetration-testing) List of awesome penetration testing resources, tools and other shiny things
+- [**938**星][17d] [Py] [knownsec/pocsuite3](https://github.com/knownsec/pocsuite3) 远程漏洞测试与PoC开发框架
+- [**938**星][2y] [Perl] [infobyte/evilgrade](https://github.com/infobyte/evilgrade) 供应链攻击: 注入虚假的update
+- [**936**星][2y] [deepspaceharbor/awesome-ai-security](https://github.com/DeepSpaceHarbor/Awesome-AI-Security)
+- [**936**星][2y] [C++] [securesocketfunneling/ssf](https://github.com/securesocketfunneling/ssf) 网络工具包:TCP 和 UDP 端口转发、SOCKS 代理、远程 shell,跨平台
+- [**935**星][1y] [Java] [google/firing-range](https://github.com/google/firing-range) a test bed for web application security scanners, providing synthetic, wide coverage for an array of vulnerabilities.
+- [**935**星][2m] [Py] [d4vinci/one-lin3r](https://github.com/d4vinci/one-lin3r) 轻量级框架,提供在渗透测试中需要的所有one-liners
+- [**934**星][13d] [Ruby] [david942j/one_gadget](https://github.com/david942j/one_gadget) The best tool for finding one gadget RCE in libc.so.6
+- [**933**星][2y] [Py] [tomchop/malcom](https://github.com/tomchop/malcom) Malcom - Malware Communications Analyzer
+- [**931**星][30d] [Py] [nullsecuritynet/tools](https://github.com/nullsecuritynet/tools) Security and Hacking Tools, Exploits, Proof of Concepts, Shellcodes, Scripts.
+- [**930**星][5m] [threathuntingproject/threathunting](https://github.com/threathuntingproject/threathunting) An informational repo about hunting for adversaries in your IT environment.
+- [**930**星][7d] [C++] [kde/heaptrack](https://github.com/kde/heaptrack) Linux的堆内存分析器
+- [**930**星][6d] [OCaml] [airbus-seclab/bincat](https://github.com/airbus-seclab/bincat) 二进制代码静态分析工具。值分析(寄存器、内存)、污点分析、类型重建和传播(propagation)、前向/后向分析
+- [**929**星][7m] [Py] [osirislab/hack-night](https://github.com/osirislab/Hack-Night) a sobering introduction to offensive security
+- [**928**星][3y] [C] [tyilo/insert_dylib](https://github.com/tyilo/insert_dylib) Command line utility for inserting a dylib load command into a Mach-O binary
- [**928**星][9m] [C] [microsoft/windows-driver-frameworks](https://github.com/microsoft/windows-driver-frameworks) Windows驱动框架(WDF)
-- [**928**星][11d] [Ruby] [david942j/one_gadget](https://github.com/david942j/one_gadget) The best tool for finding one gadget RCE in libc.so.6
-- [**927**星][28d] [Py] [nullsecuritynet/tools](https://github.com/nullsecuritynet/tools) Security and Hacking Tools, Exploits, Proof of Concepts, Shellcodes, Scripts.
-- [**927**星][12d] [OCaml] [airbus-seclab/bincat](https://github.com/airbus-seclab/bincat) 二进制代码静态分析工具。值分析(寄存器、内存)、污点分析、类型重建和传播(propagation)、前向/后向分析
+- [**927**星][2y] [C++] [genoil/cpp-ethereum](https://github.com/genoil/cpp-ethereum) [Warning: Repo inactive] Ethereum GPU miner with OpenCL, CUDA and stratum support
+- [**927**星][1y] [Py] [m4n3dw0lf/pythem](https://github.com/m4n3dw0lf/pythem) 多功能渗透测试框架
- [**927**星][4m] [Py] [airbnb/binaryalert](https://github.com/airbnb/binaryalert) 实时恶意代码检测,无需服务器
-- [**926**星][4m] [threathuntingproject/threathunting](https://github.com/threathuntingproject/threathunting) An informational repo about hunting for adversaries in your IT environment.
-- [**925**星][9m] [wtsxdev/penetration-testing](https://github.com/wtsxdev/penetration-testing) List of awesome penetration testing resources, tools and other shiny things
-- [**924**星][3y] [C] [tyilo/insert_dylib](https://github.com/tyilo/insert_dylib) Command line utility for inserting a dylib load command into a Mach-O binary
-- [**924**星][1y] [Py] [m4n3dw0lf/pythem](https://github.com/m4n3dw0lf/pythem) 多功能渗透测试框架
-- [**923**星][3m] [zhaoweih/shadowsocks-tutorial](https://github.com/zhaoweih/shadowsocks-tutorial)
-- [**923**星][3y] [Eagle] [samyk/keysweeper](https://github.com/samyk/keysweeper) KeySweeper is a stealthy Arduino-based device, camouflaged as a functioning USB wall charger, that wirelessly and passively sniffs, decrypts, logs and reports back (over GSM) all keystrokes from any Microsoft wireless keyboard in the vicinity.
-- [**923**星][4m] [bugcrowd/bugcrowd_university](https://github.com/bugcrowd/bugcrowd_university) Open source education content for the researcher community
+- [**926**星][3y] [Eagle] [samyk/keysweeper](https://github.com/samyk/keysweeper) KeySweeper is a stealthy Arduino-based device, camouflaged as a functioning USB wall charger, that wirelessly and passively sniffs, decrypts, logs and reports back (over GSM) all keystrokes from any Microsoft wireless keyboard in the vicinity.
+- [**925**星][8m] [JS] [song-li/cross_browser](https://github.com/song-li/cross_browser) cross_browser_fingerprinting
+- [**924**星][5m] [PHP] [tidesec/wdscanner](https://github.com/tidesec/wdscanner) 分布式web漏洞扫描、客户管理、漏洞定期扫描、子域名枚举、端口扫描、网站爬虫、暗链检测、坏链检测、网站指纹搜集、专项漏洞检测、代理搜集及部署等功能。
+- [**924**星][1y] [C++] [miek/inspectrum](https://github.com/miek/inspectrum) analysing captured signals, primarily from software-defined radio receivers.
+- [**924**星][3d] [Py] [eliben/pyelftools](https://github.com/eliben/pyelftools) Parsing ELF and DWARF in Python
+- [**923**星][3m] [Ruby] [weppos/whois](https://github.com/weppos/whois) An intelligent — pure Ruby — WHOIS client and parser.
+- [**923**星][2m] [Py] [tuhinshubhra/cmseek](https://github.com/tuhinshubhra/cmseek) CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and over 170 other CMSs
+- [**923**星][3m] [Py] [sa7mon/s3scanner](https://github.com/sa7mon/s3scanner) Scan for open AWS S3 buckets and dump the contents
- [**922**星][1y] [Shell] [ywb94/openwrt-ssr](https://github.com/ywb94/openwrt-ssr) ShadowsocksR-libev for OpenWrt
-- [**922**星][8m] [JS] [song-li/cross_browser](https://github.com/song-li/cross_browser) cross_browser_fingerprinting
-- [**922**星][15d] [Py] [knownsec/pocsuite3](https://github.com/knownsec/pocsuite3) 远程漏洞测试与PoC开发框架
-- [**922**星][2y] [JS] [diracdeltas/sniffly](https://github.com/diracdeltas/sniffly) Sniffing browser history using HSTS
-- [**921**星][3m] [Ruby] [weppos/whois](https://github.com/weppos/whois) An intelligent — pure Ruby — WHOIS client and parser.
-- [**920**星][2m] [Py] [tuhinshubhra/cmseek](https://github.com/tuhinshubhra/cmseek) CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and over 170 other CMSs
-- [**920**星][2y] [HTML] [snorby/snorby](https://github.com/snorby/snorby) Ruby On Rails Application For Network Security Monitoring
-- [**919**星][2y] [C#] [jaredhaight/psattack](https://github.com/jaredhaight/psattack) 组合知名的PowerShell安全工具,生成自包含/自定义的PowerShell控制台,简化在渗透中PowerShell命令的使用。支持提权、侦查、数据渗透等。
-- [**919**星][17d] [HTML] [darksecdevelopers/hiddeneye](https://github.com/darksecdevelopers/hiddeneye) Modern Phishing Tool With Advanced Functionality And Multiple Tunnelling Services [ Android-Support-Available ]
-- [**918**星][6m] [JS] [reswitched/pegaswitch](https://github.com/reswitched/pegaswitch) PegaSwitch is an exploit toolkit for the Nintendo Switch
-- [**918**星][1m] [Py] [eliben/pyelftools](https://github.com/eliben/pyelftools) Parsing ELF and DWARF in Python
-- [**916**星][1y] [C++] [miek/inspectrum](https://github.com/miek/inspectrum) analysing captured signals, primarily from software-defined radio receivers.
-- [**915**星][1m] [Go] [opensec-cn/kunpeng](https://github.com/opensec-cn/kunpeng) Golang编写的开源POC框架/库,以动态链接库的形式提供各种语言调用,通过此项目可快速开发漏洞检测类的系统。
-- [**915**星][19d] [Go] [grafeas/grafeas](https://github.com/grafeas/grafeas) Artifact Metadata API
-- [**914**星][14d] [C#] [googleprojectzero/sandbox-attacksurface-analysis-tools](https://github.com/googleprojectzero/sandbox-attacksurface-analysis-tools) 沙箱攻击面(Attack Surface)分析工具,用于测试 Windows 上沙箱的各种属性
-- [**914**星][2m] [Py] [sa7mon/s3scanner](https://github.com/sa7mon/s3scanner) Scan for open AWS S3 buckets and dump the contents
-- [**914**星][7y] [designativedave/androrat](https://github.com/designativedave/androrat) Remote Administration Tool for Android devices
-- [**914**星][6m] [PowerShell] [api0cradle/ultimateapplockerbypasslist](https://github.com/api0cradle/ultimateapplockerbypasslist) The goal of this repository is to document the most common techniques to bypass AppLocker.
-- [**913**星][5m] [PHP] [tidesec/wdscanner](https://github.com/tidesec/wdscanner) 分布式web漏洞扫描、客户管理、漏洞定期扫描、子域名枚举、端口扫描、网站爬虫、暗链检测、坏链检测、网站指纹搜集、专项漏洞检测、代理搜集及部署等功能。
-- [**912**星][1m] [tom0li/collection-document](https://github.com/tom0li/collection-document) Collection of quality safety articles
-- [**912**星][8m] [C] [0x90/wifi-arsenal](https://github.com/0x90/wifi-arsenal) WiFi arsenal
-- [**911**星][2m] [TeX] [ethereum/yellowpaper](https://github.com/ethereum/yellowpaper) The "Yellow Paper": Ethereum's formal specification
-- [**911**星][18d] [C#] [elevenpaths/foca](https://github.com/elevenpaths/foca) Tool to find metadata and hidden information in the documents.
-- [**909**星][10d] [HTML] [sprov065/v2-ui](https://github.com/sprov065/v2-ui) 支持多协议多用户的 v2ray 面板,Support multi-protocol multi-user v2ray panel
+- [**922**星][2y] [C#] [jaredhaight/psattack](https://github.com/jaredhaight/psattack) 组合知名的PowerShell安全工具,生成自包含/自定义的PowerShell控制台,简化在渗透中PowerShell命令的使用。支持提权、侦查、数据渗透等。
+- [**921**星][2d] [Go] [grafeas/grafeas](https://github.com/grafeas/grafeas) Artifact Metadata API
+- [**921**星][2y] [JS] [diracdeltas/sniffly](https://github.com/diracdeltas/sniffly) Sniffing browser history using HSTS
+- [**919**星][2y] [HTML] [snorby/snorby](https://github.com/snorby/snorby) Ruby On Rails Application For Network Security Monitoring
+- [**918**星][2d] [C#] [googleprojectzero/sandbox-attacksurface-analysis-tools](https://github.com/googleprojectzero/sandbox-attacksurface-analysis-tools) 沙箱攻击面(Attack Surface)分析工具,用于测试 Windows 上沙箱的各种属性
+- [**918**星][1m] [Go] [opensec-cn/kunpeng](https://github.com/opensec-cn/kunpeng) Golang编写的开源POC框架/库,以动态链接库的形式提供各种语言调用,通过此项目可快速开发漏洞检测类的系统。
+- [**918**星][6m] [PS] [api0cradle/ultimateapplockerbypasslist](https://github.com/api0cradle/ultimateapplockerbypasslist) The goal of this repository is to document the most common techniques to bypass AppLocker.
+- [**917**星][1m] [tom0li/collection-document](https://github.com/tom0li/collection-document) Collection of quality safety articles
+- [**917**星][6m] [JS] [reswitched/pegaswitch](https://github.com/reswitched/pegaswitch) PegaSwitch is an exploit toolkit for the Nintendo Switch
+- [**916**星][7y] [designativedave/androrat](https://github.com/designativedave/androrat) Remote Administration Tool for Android devices
+- [**914**星][8m] [C] [0x90/wifi-arsenal](https://github.com/0x90/wifi-arsenal) WiFi arsenal
+- [**913**星][23d] [Go] [square/ghostunnel](https://github.com/square/ghostunnel) A simple SSL/TLS proxy with mutual authentication for securing non-TLS services
+- [**912**星][8m] [ObjC] [tobefuturer/restore-symbol](https://github.com/tobefuturer/restore-symbol) A reverse engineering tool to restore stripped symbol table for iOS app.
+- [**912**星][2m] [TeX] [ethereum/yellowpaper](https://github.com/ethereum/yellowpaper) The "Yellow Paper": Ethereum's formal specification
+- [**912**星][7d] [C#] [elevenpaths/foca](https://github.com/elevenpaths/foca) Tool to find metadata and hidden information in the documents.
+- [**912**星][3y] [Rust] [dagenix/rust-crypto](https://github.com/dagenix/rust-crypto) A (mostly) pure-Rust implementation of various cryptographic algorithms.
+- [**912**星][7m] [cn0xroot/rfsec-toolkit](https://github.com/cn0xroot/rfsec-toolkit) RFSec-ToolKit is a collection of Radio Frequency Communication Protocol Hacktools.无线通信协议相关的工具集,可借助SDR硬件+相关工具对无线通信进行研究。Collect with ♥ by HackSmith
+- [**910**星][8m] [HTML] [thelinuxchoice/shellphish](https://github.com/thelinuxchoice/shellphish) 针对18个社交媒体的钓鱼工具:Instagram, Facebook, Snapchat, Github, Twitter, Yahoo, Protonmail, Spotify, Netflix, Linkedin, Wordpress, Origin, Steam, Microsoft, InstaFollowers, Gitlab, Pinterest
+- [**910**星][9m] [Shell] [ivanilves/xiringuito](https://github.com/ivanilves/xiringuito) SSH-based "VPN for poors"
+- [**910**星][8d] [C] [arm-software/arm-trusted-firmware](https://github.com/arm-software/arm-trusted-firmware) Arm A-Profile体系结构(Armv8-A和Armv7-A)的安全世界软件的参考实现,其中包括Exception Level 3(EL3)安全监视器。
+- [**909**星][2y] [Py] [sweetsoftware/ares](https://github.com/sweetsoftware/ares) Python botnet and backdoor
- [**909**星][7y] [Java] [sonyxperiadev/apkanalyser](https://github.com/sonyxperiadev/apkanalyser)
-- [**909**星][6m] [cn0xroot/rfsec-toolkit](https://github.com/cn0xroot/rfsec-toolkit) RFSec-ToolKit is a collection of Radio Frequency Communication Protocol Hacktools.无线通信协议相关的工具集,可借助SDR硬件+相关工具对无线通信进行研究。Collect with ♥ by HackSmith
-- [**908**星][2y] [Py] [sweetsoftware/ares](https://github.com/sweetsoftware/ares) Python botnet and backdoor
-- [**908**星][1y] [Swift] [skreweverything/swift-keylogger](https://github.com/skreweverything/swift-keylogger) Keylogger for mac written in Swift using HID
-- [**907**星][5y] [Py] [pwnieexpress/raspberry_pwn](https://github.com/pwnieexpress/raspberry_pwn) 树莓派渗透测试套件
-- [**907**星][3y] [Rust] [dagenix/rust-crypto](https://github.com/dagenix/rust-crypto) A (mostly) pure-Rust implementation of various cryptographic algorithms.
+- [**909**星][1y] [Swift] [skreweverything/swift-keylogger](https://github.com/skreweverything/swift-keylogger) Keylogger for mac written in Swift using HID
+- [**908**星][5y] [Py] [pwnieexpress/raspberry_pwn](https://github.com/pwnieexpress/raspberry_pwn) 树莓派渗透测试套件
+- [**907**星][7y] [C] [jbangert/trapcc](https://github.com/jbangert/trapcc) Computing with traps
- [**906**星][7m] [C++] [dfhack/dfhack](https://github.com/DFHack/dfhack) Memory hacking library for Dwarf Fortress and a set of tools that use it
-- [**906**星][8m] [Objective-C] [tobefuturer/restore-symbol](https://github.com/tobefuturer/restore-symbol) A reverse engineering tool to restore stripped symbol table for iOS app.
-- [**906**星][7y] [C] [jbangert/trapcc](https://github.com/jbangert/trapcc) Computing with traps
-- [**906**星][11d] [C] [arm-software/arm-trusted-firmware](https://github.com/arm-software/arm-trusted-firmware) Read-only mirror of Trusted Firmware-A
-- [**904**星][3y] [Java] [summitt/burp-non-http-extension](https://github.com/summitt/burp-non-http-extension) Non-HTTP Protocol Extension (NoPE) Proxy and DNS for Burp Suite.
-- [**904**星][3m] [Objective-C] [ptoomey3/keychain-dumper](https://github.com/ptoomey3/keychain-dumper) A tool to check which keychain items are available to an attacker once an iOS device has been jailbroken
-- [**903**星][21d] [Go] [square/ghostunnel](https://github.com/square/ghostunnel) A simple SSL/TLS proxy with mutual authentication for securing non-TLS services
-- [**903**星][17d] [Py] [mschwager/fierce](https://github.com/mschwager/fierce) A DNS reconnaissance tool for locating non-contiguous IP space.
-- [**902**星][8m] [HTML] [thelinuxchoice/shellphish](https://github.com/thelinuxchoice/shellphish) 针对18个社交媒体的钓鱼工具:Instagram, Facebook, Snapchat, Github, Twitter, Yahoo, Protonmail, Spotify, Netflix, Linkedin, Wordpress, Origin, Steam, Microsoft, InstaFollowers, Gitlab, Pinterest
-- [**902**星][1y] [Go] [huacnlee/flora-kit](https://github.com/huacnlee/flora-kit) 基于 shadowsocks-go 做的完善实现,完全兼容 Surge 的配置文件
+- [**906**星][3y] [Java] [summitt/burp-non-http-extension](https://github.com/summitt/burp-non-http-extension) Non-HTTP Protocol Extension (NoPE) Proxy and DNS for Burp Suite.
+- [**906**星][19d] [Py] [mschwager/fierce](https://github.com/mschwager/fierce) A DNS reconnaissance tool for locating non-contiguous IP space.
+- [**906**星][5m] [Py] [m0rtem/cloudfail](https://github.com/m0rtem/cloudfail) 通过错误配置的DNS和老数据库,发现CloudFlare网络后面的隐藏IP
+- [**905**星][2d] [C++] [seladb/pcapplusplus](https://github.com/seladb/pcapplusplus) PcapPlusPlus is a multiplatform C++ library for capturing, parsing and crafting of network packets. It is designed to be efficient, powerful and easy to use. It provides C++ wrappers for the most popular packet processing engines such as libpcap, WinPcap, DPDK and PF_RING.
+- [**904**星][3m] [ObjC] [ptoomey3/keychain-dumper](https://github.com/ptoomey3/keychain-dumper) A tool to check which keychain items are available to an attacker once an iOS device has been jailbroken
+- [**904**星][1y] [Go] [huacnlee/flora-kit](https://github.com/huacnlee/flora-kit) 基于 shadowsocks-go 做的完善实现,完全兼容 Surge 的配置文件
+- [**903**星][6y] [C] [visgean/zeus](https://github.com/visgean/zeus) NOT MY CODE! Zeus trojan horse - leaked in 2011, I am not the author. I have created this repository to make the access for study as easy as possible.
+- [**903**星][6d] [C] [cossacklabs/themis](https://github.com/cossacklabs/themis) 用于存储或通信的加密库,可用于Swift, ObjC, Android, С++, JS, Python, Ruby, PHP, Go。
+- [**902**星][28d] [Go] [mehrdadrad/radvpn](https://github.com/mehrdadrad/radvpn) Decentralized VPN
+- [**901**星][8d] [Py] [hasecuritysolutions/vulnwhisperer](https://github.com/HASecuritySolutions/VulnWhisperer) Create actionable data from your Vulnerability Scans
- [**901**星][1y] [Py] [nixawk/labs](https://github.com/nixawk/labs) 漏洞分析实验室。包含若干CVE 漏洞(CVE-2016-6277、CVE-2017-5689…)
-- [**899**星][6y] [C] [visgean/zeus](https://github.com/visgean/zeus) NOT MY CODE! Zeus trojan horse - leaked in 2011, I am not the author. I have created this repository to make the access for study as easy as possible.
-- [**899**星][10d] [C] [cossacklabs/themis](https://github.com/cossacklabs/themis) 用于存储或通信的加密库,可用于Swift, ObjC, Android, С++, JS, Python, Ruby, PHP, Go。
-- [**897**星][3m] [Py] [hasecuritysolutions/vulnwhisperer](https://github.com/HASecuritySolutions/VulnWhisperer) Create actionable data from your Vulnerability Scans
- [**897**星][5y] [Java] [wszf/androrat](https://github.com/wszf/androrat) Remote Administration Tool for Android
-- [**896**星][2y] [Ruby] [whitewidowscanner/whitewidow](https://github.com/whitewidowscanner/whitewidow) SQL Vulnerability Scanner
-- [**896**星][5m] [Py] [m0rtem/cloudfail](https://github.com/m0rtem/cloudfail) 通过错误配置的DNS和老数据库,发现CloudFlare网络后面的隐藏IP
-- [**895**星][10m] [C++] [secrary/injectproc](https://github.com/secrary/injectproc) Process Injection Techniques [This project is not maintained anymore]
-- [**893**星][12d] [C++] [adafruit/adafruit_ssd1306](https://github.com/adafruit/adafruit_ssd1306) Arduino library for SSD1306 monochrome 128x64 and 128x32 OLEDs
-- [**892**星][1m] [Py] [woj-ciech/leaklooker](https://github.com/woj-ciech/leaklooker) Find open databases - Powered by Binaryedge.io
-- [**891**星][11m] [JS] [levskaya/jslinux-deobfuscated](https://github.com/levskaya/jslinux-deobfuscated) An old version of Mr. Bellard's JSLinux rewritten to be human readable, hand deobfuscated and annotated.
-- [**888**星][11d] [Shell] [dominicbreuker/stego-toolkit](https://github.com/dominicbreuker/stego-toolkit) Collection of steganography tools - helps with CTF challenges
+- [**897**星][13d] [Shell] [dominicbreuker/stego-toolkit](https://github.com/dominicbreuker/stego-toolkit) Collection of steganography tools - helps with CTF challenges
+- [**896**星][1m] [Py] [woj-ciech/leaklooker](https://github.com/woj-ciech/leaklooker) Find open databases - Powered by Binaryedge.io
+- [**896**星][10m] [C++] [secrary/injectproc](https://github.com/secrary/injectproc) Process Injection Techniques [This project is not maintained anymore]
+- [**896**星][14d] [C++] [adafruit/adafruit_ssd1306](https://github.com/adafruit/adafruit_ssd1306) Arduino library for SSD1306 monochrome 128x64 and 128x32 OLEDs
+- [**894**星][2y] [Ruby] [whitewidowscanner/whitewidow](https://github.com/whitewidowscanner/whitewidow) SQL Vulnerability Scanner
+- [**894**星][3m] [Py] [trustedsec/hate_crack](https://github.com/trustedsec/hate_crack) 使用HashCat 的自动哈希破解工具
+- [**893**星][11m] [JS] [levskaya/jslinux-deobfuscated](https://github.com/levskaya/jslinux-deobfuscated) An old version of Mr. Bellard's JSLinux rewritten to be human readable, hand deobfuscated and annotated.
+- [**891**星][4m] [derpopo/uabe](https://github.com/derpopo/uabe) Unity Assets Bundle Extractor
+- [**890**星][30d] [Go] [smallstep/cli](https://github.com/smallstep/cli) 🧰 A zero trust swiss army knife for working with X509, OAuth, JWT, OATH OTP, etc.
+- [**889**星][9d] [Py] [swisskyrepo/ssrfmap](https://github.com/swisskyrepo/ssrfmap) Automatic SSRF fuzzer and exploitation tool
+- [**888**星][11d] [C] [buserror/simavr](https://github.com/buserror/simavr) simavr is a lean, mean and hackable AVR simulator for linux & OSX
- [**887**星][12m] [Py] [rev3rsesecurity/webmap](https://github.com/rev3rsesecurity/webmap) Nmap Web Dashboard and Reporting
-- [**886**星][2m] [Py] [trustedsec/hate_crack](https://github.com/trustedsec/hate_crack) 使用HashCat 的自动哈希破解工具
+- [**887**星][2y] [Perl] [p0pr0ck5/lua-resty-waf](https://github.com/p0pr0ck5/lua-resty-waf) High-performance WAF built on the OpenResty stack
+- [**886**星][2y] [PS] [windowsexploits/exploits](https://github.com/windowsexploits/exploits) Windows Exploits
+- [**886**星][9d] [Py] [ajinabraham/nodejsscan](https://github.com/ajinabraham/nodejsscan) NodeJsScan is a static security code scanner for Node.js applications.
- [**885**星][4m] [C] [theofficialflow/h-encore](https://github.com/theofficialflow/h-encore) Fully chained kernel exploit for the PS Vita on firmwares 3.65-3.68
-- [**885**星][4m] [derpopo/uabe](https://github.com/derpopo/uabe) Unity Assets Bundle Extractor
+- [**885**星][5m] [JS] [dpnishant/appmon](https://github.com/dpnishant/appmon) 用于监视和篡改本地macOS,iOS和android应用程序的系统API调用的自动化框架。基于Frida。
- [**884**星][2y] [Py] [nsacyber/gosecure](https://github.com/nsacyber/goSecure) An easy to use and portable Virtual Private Network (VPN) system built with Linux and a Raspberry Pi. #nsacyber
-- [**884**星][8d] [C] [buserror/simavr](https://github.com/buserror/simavr) simavr is a lean, mean and hackable AVR simulator for linux & OSX
-- [**883**星][2y] [Perl] [p0pr0ck5/lua-resty-waf](https://github.com/p0pr0ck5/lua-resty-waf) High-performance WAF built on the OpenResty stack
-- [**882**星][28d] [Go] [smallstep/cli](https://github.com/smallstep/cli) 🧰 A zero trust swiss army knife for working with X509, OAuth, JWT, OATH OTP, etc.
-- [**881**星][2y] [PowerShell] [windowsexploits/exploits](https://github.com/windowsexploits/exploits) Windows Exploits
-- [**880**星][1m] [Py] [swisskyrepo/ssrfmap](https://github.com/swisskyrepo/ssrfmap) Automatic SSRF fuzzer and exploitation tool
-- [**880**星][5m] [JS] [dpnishant/appmon](https://github.com/dpnishant/appmon) Documentation:
-- [**880**星][7d] [Py] [ajinabraham/nodejsscan](https://github.com/ajinabraham/nodejsscan) NodeJsScan is a static security code scanner for Node.js applications.
-- [**877**星][25d] [C++] [whid-injector/whid](https://github.com/whid-injector/whid) WiFi HID Injector - An USB Rubberducky / BadUSB On Steroids.
+- [**884**星][27d] [C++] [whid-injector/whid](https://github.com/whid-injector/whid) WiFi HID Injector - An USB Rubberducky / BadUSB On Steroids.
+- [**882**星][4m] [Kotlin] [eycorsican/kitsunebi-android](https://github.com/eycorsican/kitsunebi-android) A fully-featured V2Ray client for Android.
+- [**879**星][5d] [Py] [derekselander/lldb](https://github.com/derekselander/lldb) A collection of LLDB aliases/regexes and Python scripts to aid in your debugging sessions
+- [**879**星][7d] [C] [apple/cups](https://github.com/apple/cups) a standards-based, open source printing system
+- [**878**星][3d] [JS] [opencti-platform/opencti](https://github.com/opencti-platform/opencti) Open Cyber Threat Intelligence Platform
+- [**878**星][3y] [bastilleresearch/mousejack](https://github.com/bastilleresearch/mousejack) MouseJack device discovery and research tools
+- [**878**星][21d] [aptnotes/data](https://github.com/aptnotes/data) APTnotes data
+- [**877**星][1m] [HTML] [hookmaster/frida-all-in-one](https://github.com/hookmaster/frida-all-in-one) 《FRIDA操作手册》by
+- [**877**星][2m] [C] [504ensicslabs/lime](https://github.com/504ensicslabs/lime) LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices, such as those powered by Android. The tool supports acquiring memory either to the file system of the device or over the network. LiME is unique in that it is the first tool that allows full memory captures f…
+- [**876**星][2d] [C] [u-boot/u-boot](https://github.com/u-boot/u-boot) "Das U-Boot" Source Tree
+- [**876**星][4m] [CSS] [outflanknl/redelk](https://github.com/outflanknl/redelk) 跟踪和警告Blue Team活动以及长期运营中的更高可用性
+- [**875**星][10m] [C++] [wisk/medusa](https://github.com/wisk/medusa) An open source interactive disassembler
+- [**875**星][2m] [Ruby] [w181496/web-ctf-cheatsheet](https://github.com/w181496/web-ctf-cheatsheet) Web CTF CheatSheet
- [**875**星][2y] [Py] [marcwebbie/passpie](https://github.com/marcwebbie/passpie) 命令行中管理密码
-- [**875**星][3y] [bastilleresearch/mousejack](https://github.com/bastilleresearch/mousejack) MouseJack device discovery and research tools
-- [**874**星][10m] [C++] [wisk/medusa](https://github.com/wisk/medusa) An open source interactive disassembler
-- [**873**星][2y] [C] [paboldin/meltdown-exploit](https://github.com/paboldin/meltdown-exploit) Meltdown exploit
-- [**873**星][4m] [CSS] [outflanknl/redelk](https://github.com/outflanknl/redelk) Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.
-- [**873**星][2m] [C] [504ensicslabs/lime](https://github.com/504ensicslabs/lime) LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices, such as those powered by Android. The tool supports acquiring memory either to the file system of the device or over the network. LiME is unique in that it is the first tool that allows full memory captures f…
-- [**872**星][12d] [C] [u-boot/u-boot](https://github.com/u-boot/u-boot) "Das U-Boot" Source Tree
-- [**872**星][7d] [JS] [opencti-platform/opencti](https://github.com/opencti-platform/opencti) Open Cyber Threat Intelligence Platform
-- [**872**星][7d] [C] [apple/cups](https://github.com/apple/cups) a standards-based, open source printing system
-- [**871**星][7m] [Py] [erocarrera/pefile](https://github.com/erocarrera/pefile) pefile is a Python module to read and work with PE (Portable Executable) files
-- [**871**星][19d] [aptnotes/data](https://github.com/aptnotes/data) APTnotes data
-- [**870**星][8m] [Py] [redacted/xkcd-password-generator](https://github.com/redacted/xkcd-password-generator) Generate secure multiword passwords/passphrases, inspired by XKCD
-- [**869**星][3m] [Py] [w-digital-scanner/w9scan](https://github.com/w-digital-scanner/w9scan) Plug-in type web vulnerability scanner
-- [**869**星][18d] [Go] [itchyny/bed](https://github.com/itchyny/bed) Binary editor written in Go
-- [**868**星][2y] [C] [aircrack-ng/aircrack-ng-archive](https://github.com/aircrack-ng/aircrack-ng-archive) Pre-migration repository. New repository ➙
-- [**868**星][5m] [Py] [derekselander/lldb](https://github.com/derekselander/lldb) A collection of LLDB aliases/regexes and Python scripts to aid in your debugging sessions
-- [**867**星][1m] [C] [cisco/joy](https://github.com/cisco/joy) 捕获和分析网络流数据和intraflow数据,用于网络研究、取证和安全监视
+- [**875**星][7m] [Py] [erocarrera/pefile](https://github.com/erocarrera/pefile) pefile is a Python module to read and work with PE (Portable Executable) files
+- [**874**星][3m] [Py] [w-digital-scanner/w9scan](https://github.com/w-digital-scanner/w9scan) Plug-in type web vulnerability scanner
+- [**874**星][8m] [Py] [redacted/xkcd-password-generator](https://github.com/redacted/xkcd-password-generator) Generate secure multiword passwords/passphrases, inspired by XKCD
+- [**872**星][1m] [C] [cisco/joy](https://github.com/cisco/joy) 捕获和分析网络流数据和intraflow数据,用于网络研究、取证和安全监视
+- [**871**星][2y] [C] [paboldin/meltdown-exploit](https://github.com/paboldin/meltdown-exploit) Meltdown exploit
+- [**871**星][3m] [escapingbug/awesome-browser-exploit](https://github.com/escapingbug/awesome-browser-exploit) awesome list of browser exploitation tutorials
+- [**870**星][1m] [C] [zhaojh329/rtty](https://github.com/zhaojh329/rtty) Access your device's terminal from anywhere via the web.
+- [**870**星][20d] [Go] [itchyny/bed](https://github.com/itchyny/bed) Binary editor written in Go
+- [**870**星][1m] [Py] [al0ne/vxscan](https://github.com/al0ne/vxscan) python3写的综合扫描工具,主要用来存活验证,敏感文件探测(目录扫描/js泄露接口/html注释泄露),WAF/CDN识别,端口扫描,指纹/服务识别,操作系统识别,POC扫描,SQL注入,绕过CDN,查询旁站等功能,主要用来甲方自测或乙方授权测试,请勿用来搞破坏。
+- [**870**星][6m] [Go] [40t/go-sniffer](https://github.com/40t/go-sniffer)
+- [**867**星][2y] [C] [aircrack-ng/aircrack-ng-archive](https://github.com/aircrack-ng/aircrack-ng-archive) Pre-migration repository. New repository ➙
- [**867**星][3m] [Java] [googlearchive/android-bluetoothlegatt](https://github.com/googlearchive/android-BluetoothLeGatt) Migrated:
-- [**867**星][1m] [HTML] [hookmaster/frida-all-in-one](https://github.com/hookmaster/frida-all-in-one) 《FRIDA操作手册》by
-- [**866**星][1m] [C] [zhaojh329/rtty](https://github.com/zhaojh329/rtty) Access your device's terminal from anywhere via the web.
-- [**865**星][2m] [Ruby] [w181496/web-ctf-cheatsheet](https://github.com/w181496/web-ctf-cheatsheet) Web CTF CheatSheet
-- [**864**星][2y] [C++] [illera88/ponce](https://github.com/illera88/ponce) 简化污点分析+符号执行
-- [**864**星][10m] [Shell] [esc0rtd3w/wifi-hacker](https://github.com/esc0rtd3w/wifi-hacker) Shell Script For Attacking Wireless Connections Using Built-In Kali Tools. Supports All Securities (WEP, WPS, WPA, WPA2)
-- [**863**星][8m] [C++] [google/security-research-pocs](https://github.com/google/security-research-pocs) Proof-of-concept codes created as part of security research done by Google Security Team.
-- [**863**星][4m] [Go] [fireeye/gocrack](https://github.com/fireeye/gocrack) 火眼开源的密码破解工具,可以跨多个 GPU 服务器执行任务
-- [**863**星][3m] [escapingbug/awesome-browser-exploit](https://github.com/escapingbug/awesome-browser-exploit) awesome list of browser exploitation tutorials
-- [**862**星][4m] [Kotlin] [eycorsican/kitsunebi-android](https://github.com/eycorsican/kitsunebi-android) A fully-featured V2Ray client for Android.
-- [**862**星][10m] [Visual Basic] [mdsecactivebreach/sharpshooter](https://github.com/mdsecactivebreach/sharpshooter) Payload Generation Framework
+- [**867**星][8m] [C++] [google/security-research-pocs](https://github.com/google/security-research-pocs) Proof-of-concept codes created as part of security research done by Google Security Team.
+- [**867**星][4m] [Go] [fireeye/gocrack](https://github.com/fireeye/gocrack) 火眼开源的密码破解工具,可以跨多个 GPU 服务器执行任务
+- [**866**星][10m] [Shell] [esc0rtd3w/wifi-hacker](https://github.com/esc0rtd3w/wifi-hacker) Shell Script For Attacking Wireless Connections Using Built-In Kali Tools. Supports All Securities (WEP, WPS, WPA, WPA2)
+- [**865**星][10m] [Visual Basic .NET] [mdsecactivebreach/sharpshooter](https://github.com/mdsecactivebreach/sharpshooter) Payload Generation Framework
+- [**865**星][2y] [C++] [illera88/ponce](https://github.com/illera88/ponce) 简化污点分析+符号执行
+- [**865**星][8d] [PHP] [ambionics/phpggc](https://github.com/ambionics/phpggc) PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.
+- [**863**星][9d] [Batchfile] [mr-xn/burpsuite-collections](https://github.com/mr-xn/burpsuite-collections) BurpSuite收集:包括不限于 Burp 文章、破解版、插件(非BApp Store)、汉化等相关教程,欢迎添砖加瓦---burpsuite-pro burpsuite-extender burpsuite cracked-version hackbar hacktools fuzzing fuzz-testing burp-plugin burp-extensions bapp-store brute-force-attacks brute-force-passwords waf sqlmap jar
+- [**863**星][15d] [Java] [lamster2018/easyprotector](https://github.com/lamster2018/easyprotector) 一行代码检测XP/调试/多开/模拟器/root
+- [**862**星][3d] [explife0011/awesome-windows-kernel-security-development](https://github.com/explife0011/awesome-windows-kernel-security-development) windows kernel security development
+- [**861**星][10d] [Py] [jimmy201602/webterminal](https://github.com/jimmy201602/webterminal) ssh rdp vnc telnet sftp bastion/jump web putty xshell terminal jumpserver audit realtime monitor rz/sz 堡垒机 云桌面 linux devops sftp websocket file management rz/sz 自动化运维 审计 录像 文件管理 sftp上传 实时监控 录像回放 网页版rz/sz上传下载 django
- [**860**星][2m] [jonascz/how-to-prevent-scraping](https://github.com/jonascz/how-to-prevent-scraping) The ultimate guide on preventing Website Scraping
-- [**859**星][6m] [Go] [40t/go-sniffer](https://github.com/40t/go-sniffer)
-- [**857**星][7m] [Py] [s0md3v/recondog](https://github.com/s0md3v/ReconDog) Reconnaissance Swiss Army Knife
-- [**857**星][1m] [Py] [al0ne/vxscan](https://github.com/al0ne/vxscan) python3写的综合扫描工具,主要用来存活验证,敏感文件探测(目录扫描/js泄露接口/html注释泄露),WAF/CDN识别,端口扫描,指纹/服务识别,操作系统识别,POC扫描,SQL注入,绕过CDN,查询旁站等功能,主要用来甲方自测或乙方授权测试,请勿用来搞破坏。
-- [**856**星][1y] [Ruby] [enjoiz/xxeinjector](https://github.com/enjoiz/xxeinjector) Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.
-- [**855**星][8d] [explife0011/awesome-windows-kernel-security-development](https://github.com/explife0011/awesome-windows-kernel-security-development) windows kernel security development
-- [**854**星][10m] [Shell] [shadowsocks/luci-app-shadowsocks](https://github.com/shadowsocks/luci-app-shadowsocks) OpenWrt/LEDE LuCI for Shadowsocks-libev
-- [**854**星][2y] [CoffeeScript] [onplus/shadowsocks-heroku](https://github.com/onplus/shadowsocks-heroku) 一键部署 Free Shadowsocks-Heroku
-- [**853**星][4m] [Py] [lijiejie/bbscan](https://github.com/lijiejie/bbscan) A vulnerability scanner focus on scanning large number of targets in short time with a minimal set of rules.
-- [**852**星][1m] [ignitetechnologies/privilege-escalation](https://github.com/ignitetechnologies/privilege-escalation) This cheasheet is aimed at the CTF Players and Beginners to help them understand the fundamentals of Privilege Escalation with examples.
-- [**852**星][7d] [Py] [circl/ail-framework](https://github.com/circl/ail-framework) AIL framework - Analysis Information Leak framework
+- [**860**星][7m] [Py] [s0md3v/recondog](https://github.com/s0md3v/ReconDog) Reconnaissance Swiss Army Knife
+- [**858**星][10m] [Shell] [shadowsocks/luci-app-shadowsocks](https://github.com/shadowsocks/luci-app-shadowsocks) OpenWrt/LEDE LuCI for Shadowsocks-libev
+- [**858**星][18d] [Py] [ticarpi/jwt_tool](https://github.com/ticarpi/jwt_tool) 测试,调整和破解JSON Web Token 的工具包
+- [**858**星][2m] [ignitetechnologies/privilege-escalation](https://github.com/ignitetechnologies/privilege-escalation) This cheasheet is aimed at the CTF Players and Beginners to help them understand the fundamentals of Privilege Escalation with examples.
+- [**858**星][1y] [Ruby] [enjoiz/xxeinjector](https://github.com/enjoiz/xxeinjector) Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.
+- [**857**星][4d] [JS] [mellow-io/mellow](https://github.com/mellow-io/mellow) Mellow is a rule-based global transparent proxy client for Windows, macOS and Linux.
+- [**857**星][2d] [Py] [circl/ail-framework](https://github.com/circl/ail-framework) AIL framework - Analysis Information Leak framework
+- [**856**星][4m] [Py] [lijiejie/bbscan](https://github.com/lijiejie/bbscan) A vulnerability scanner focus on scanning large number of targets in short time with a minimal set of rules.
+- [**855**星][2y] [CoffeeScript] [onplus/shadowsocks-heroku](https://github.com/onplus/shadowsocks-heroku) 一键部署 Free Shadowsocks-Heroku
+- [**855**星][3d] [C++] [google/uiforetw](https://github.com/google/uiforetw) User interface for recording and managing ETW traces
+- [**854**星][10m] [Shell] [thelinuxchoice/userrecon](https://github.com/thelinuxchoice/userrecon) Find usernames across over 75 social networks
+- [**854**星][3m] [Py] [649/memcrashed-ddos-exploit](https://github.com/649/memcrashed-ddos-exploit) DDoS attack tool for sending forged UDP packets to vulnerable Memcached servers obtained using Shodan API
+- [**853**星][2y] [PS] [curi0usjack/luckystrike](https://github.com/curi0usJack/luckystrike) A PowerShell based utility for the creation of malicious Office macro documents.
+- [**853**星][2m] [JS] [vksrc/github-monitor](https://github.com/vksrc/github-monitor) Github Sensitive Information Leakage Monitor(Github信息泄漏监控系统)
+- [**853**星][2m] [Go] [ukhomeoffice/repo-security-scanner](https://github.com/ukhomeoffice/repo-security-scanner) CLI tool that finds secrets accidentally committed to a git repo, eg passwords, private keys
+- [**853**星][7m] [Go] [misecurity/x-patrol](https://github.com/misecurity/x-patrol) github泄露扫描系统
+- [**852**星][2d] [C++] [henrypp/simplewall](https://github.com/henrypp/simplewall) 为Windows 过滤平台提供的配置界面
+- [**852**星][3y] [C++] [0vercl0k/rp](https://github.com/0vercl0k/rp) rp++ is a full-cpp written tool that aims to find ROP sequences in PE/Elf/Mach-O x86/x64 binaries. It is open-source and has been tested on several OS: Debian / Windows 8.1 / Mac OSX Lion (10.7.3). Moreover, it is x64 compatible and supports Intel syntax. Standalone executables can also be directly downloaded.
- [**851**星][1m] [Go] [sahilm/fuzzy](https://github.com/sahilm/fuzzy) Go library that provides fuzzy string matching optimized for filenames and code symbols in the style of Sublime Text, VSCode, IntelliJ IDEA et al.
-- [**851**星][7m] [Go] [misecurity/x-patrol](https://github.com/misecurity/x-patrol) github泄露扫描系统
-- [**851**星][3m] [Py] [649/memcrashed-ddos-exploit](https://github.com/649/memcrashed-ddos-exploit) DDoS attack tool for sending forged UDP packets to vulnerable Memcached servers obtained using Shodan API
-- [**850**星][2m] [Go] [ukhomeoffice/repo-security-scanner](https://github.com/ukhomeoffice/repo-security-scanner) CLI tool that finds secrets accidentally committed to a git repo, eg passwords, private keys
-- [**850**星][3y] [Py] [hubert3/isniff-gps](https://github.com/hubert3/isniff-gps) Passive sniffing tool for capturing and visualising WiFi location data disclosed by iOS devices
-- [**850**星][15d] [PHP] [ambionics/phpggc](https://github.com/ambionics/phpggc) PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.
-- [**849**星][2y] [PowerShell] [curi0usjack/luckystrike](https://github.com/curi0usJack/luckystrike) A PowerShell based utility for the creation of malicious Office macro documents.
-- [**849**星][10m] [Shell] [thelinuxchoice/userrecon](https://github.com/thelinuxchoice/userrecon) Find usernames across over 75 social networks
-- [**847**星][12m] [PHP] [walkor/shadowsocks-php](https://github.com/walkor/shadowsocks-php) A php port of shadowsocks based on workerman. A socks5 proxy written in PHP.
-- [**847**星][2m] [JS] [vksrc/github-monitor](https://github.com/vksrc/github-monitor) Github Sensitive Information Leakage Monitor(Github信息泄漏监控系统)
+- [**851**星][13d] [Py] [nil0x42/phpsploit](https://github.com/nil0x42/phpsploit) Stealth post-exploitation framework
+- [**851**星][3y] [Py] [hubert3/isniff-gps](https://github.com/hubert3/isniff-gps) Passive sniffing tool for capturing and visualising WiFi location data disclosed by iOS devices
+- [**851**星][7d] [JS] [cloudsploit/scans](https://github.com/cloudsploit/scans) Cloud security configuration checks
+- [**850**星][1m] [C] [spacehuhn/wifi_ducky](https://github.com/spacehuhn/wifi_ducky) Upload, save and run keystroke injection payloads with an ESP8266 + ATMEGA32U4
+- [**849**星][3d] [C] [zerbea/hcxtools](https://github.com/zerbea/hcxtools) Portable solution for capturing wlan traffic and conversion to hashcat formats (recommended by hashcat) and to John the Ripper formats. hcx: h = hash, c = capture, convert and calculate candidates, x = different hashtypes
+- [**849**星][29d] [Roff] [slimm609/checksec.sh](https://github.com/slimm609/checksec.sh) 检查可执行文件(PIE, RELRO, PaX, Canaries, ASLR, Fortify Source)属性的 bash 脚本
+- [**849**星][5d] [Py] [lylemi/learn-web-hacking](https://github.com/lylemi/learn-web-hacking) Web安全学习笔记
+- [**848**星][12m] [PHP] [walkor/shadowsocks-php](https://github.com/walkor/shadowsocks-php) A php port of shadowsocks based on workerman. A socks5 proxy written in PHP.
- [**847**星][4y] [utkusen/hidden-tear](https://github.com/utkusen/hidden-tear) an open source ransomware honeypot
-- [**846**星][11d] [Py] [nil0x42/phpsploit](https://github.com/nil0x42/phpsploit) Stealth post-exploitation framework
-- [**846**星][13d] [Java] [lamster2018/easyprotector](https://github.com/lamster2018/easyprotector) 一行代码检测XP/调试/多开/模拟器/root
-- [**846**星][17d] [JS] [cloudsploit/scans](https://github.com/cloudsploit/scans) Cloud security configuration checks
-- [**846**星][3y] [C++] [0vercl0k/rp](https://github.com/0vercl0k/rp) rp++ is a full-cpp written tool that aims to find ROP sequences in PE/Elf/Mach-O x86/x64 binaries. It is open-source and has been tested on several OS: Debian / Windows 8.1 / Mac OSX Lion (10.7.3). Moreover, it is x64 compatible and supports Intel syntax. Standalone executables can also be directly downloaded.
+- [**847**星][2y] [Py] [nccgroup/demiguise](https://github.com/nccgroup/demiguise) HTA加密
+- [**847**星][3m] [Py] [anorov/pysocks](https://github.com/anorov/pysocks) A SOCKS proxy client and wrapper for Python.
+- [**846**星][2d] [Shell] [firmadyne/firmadyne](https://github.com/firmadyne/firmadyne) Platform for emulation and dynamic analysis of Linux-based firmware
+- [**846**星][3y] [C] [examplecode/mproxy](https://github.com/examplecode/mproxy) c 语言实现的一个最小的http代理,支持翻墙
- [**845**星][1y] [Py] [kgretzky/evilginx](https://github.com/kgretzky/evilginx) man-in-the-middle attack framework used for phishing credentials and session cookies of any web service
-- [**845**星][3m] [Py] [anorov/pysocks](https://github.com/anorov/pysocks) A SOCKS proxy client and wrapper for Python.
-- [**844**星][2y] [Py] [nccgroup/demiguise](https://github.com/nccgroup/demiguise) HTA encryption tool for RedTeams
-- [**843**星][1m] [C] [spacehuhn/wifi_ducky](https://github.com/spacehuhn/wifi_ducky) Upload, save and run keystroke injection payloads with an ESP8266 + ATMEGA32U4
-- [**843**星][8m] [JS] [serpicoproject/serpico](https://github.com/serpicoproject/serpico) SimplE RePort wrIting and COllaboration tool
-- [**842**星][10d] [Py] [lylemi/learn-web-hacking](https://github.com/lylemi/learn-web-hacking) Study Notes For Web Hacking / Web安全学习笔记
+- [**844**星][3m] [Py] [x90skysn3k/brutespray](https://github.com/x90skysn3k/brutespray) 获取 nmapGNMAP 输出,自动调用 Medusa 使用默认证书爆破服务(brute-forces services)
+- [**844**星][8m] [JS] [serpicoproject/serpico](https://github.com/serpicoproject/serpico) 渗透测试报告生成和协作工具
+- [**844**星][3d] [C++] [openzwave/open-zwave](https://github.com/openzwave/open-zwave) a C++ library to control Z-Wave Networks via a USB Z-Wave Controller.
+- [**844**星][3d] [YARA] [neo23x0/signature-base](https://github.com/neo23x0/signature-base) Signature base for my scanner tools
+- [**843**星][6m] [C] [brendan-rius/c-jwt-cracker](https://github.com/brendan-rius/c-jwt-cracker) C 语言编写的 JWT 爆破工具
- [**842**星][3y] [Shell] [hellofwy/ss-bash](https://github.com/hellofwy/ss-bash) Shadowsocks流量管理脚本
-- [**842**星][30d] [C++] [google/uiforetw](https://github.com/google/uiforetw) User interface for recording and managing ETW traces
-- [**842**星][15d] [C] [emsec/chameleonmini](https://github.com/emsec/chameleonmini) The ChameleonMini is a versatile contactless smartcard emulator compliant to NFC. The ChameleonMini was developed by
-- [**841**星][27d] [Roff] [slimm609/checksec.sh](https://github.com/slimm609/checksec.sh) 检查可执行文件(PIE, RELRO, PaX, Canaries, ASLR, Fortify Source)属性的 bash 脚本
-- [**841**星][8d] [C++] [openzwave/open-zwave](https://github.com/openzwave/open-zwave) a C++ library to control Z-Wave Networks via a USB Z-Wave Controller.
-- [**841**星][3y] [C] [gurnec/hashcheck](https://github.com/gurnec/hashcheck) HashCheck Shell Extension for Windows with added SHA2, SHA3, and multithreading; originally from code.kliu.org
-- [**840**星][12d] [C++] [seladb/pcapplusplus](https://github.com/seladb/pcapplusplus) PcapPlusPlus is a multiplatform C++ library for capturing, parsing and crafting of network packets. It is designed to be efficient, powerful and easy to use. It provides C++ wrappers for the most popular packet processing engines such as libpcap, WinPcap, DPDK and PF_RING.
-- [**840**星][21d] [C++] [henrypp/simplewall](https://github.com/henrypp/simplewall) 为Windows 过滤平台提供的配置界面
-- [**840**星][3m] [Shell] [firmadyne/firmadyne](https://github.com/firmadyne/firmadyne) Platform for emulation and dynamic analysis of Linux-based firmware
-- [**838**星][26d] [YARA] [neo23x0/signature-base](https://github.com/neo23x0/signature-base) Signature base for my scanner tools
-- [**837**星][10d] [C] [zerbea/hcxtools](https://github.com/zerbea/hcxtools) Portable solution for capturing wlan traffic and conversion to hashcat formats (recommended by hashcat) and to John the Ripper formats. hcx: h = hash, c = capture, convert and calculate candidates, x = different hashtypes
-- [**837**星][3m] [Py] [x90skysn3k/brutespray](https://github.com/x90skysn3k/brutespray) 获取 nmapGNMAP 输出,自动调用 Medusa 使用默认证书爆破服务(brute-forces services)
-- [**837**星][2m] [Go] [henson/proxypool](https://github.com/henson/proxypool) Golang实现的IP代理池
-- [**836**星][1m] [C] [facebook/transform360](https://github.com/facebook/transform360) Transform360 is an equirectangular to cubemap transform for 360 video.
-- [**836**星][1y] [HTML] [ustayready/credsniper](https://github.com/ustayready/credsniper) CredSniper is a phishing framework written with the Python micro-framework Flask and Jinja2 templating which supports capturing 2FA tokens.
-- [**836**星][7d] [trimstray/iptables-essentials](https://github.com/trimstray/iptables-essentials) Common Firewall Rules and Commands.
-- [**836**星][16d] [Py] [ticarpi/jwt_tool](https://github.com/ticarpi/jwt_tool) 测试,调整和破解JSON Web Token 的工具包
-- [**835**星][7d] [Java] [sleuthkit/autopsy](https://github.com/sleuthkit/autopsy) Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by law enforcement, military, and corporate examiners to investigate what happened on a computer. You can even use it to recover photos from your camera's memory card.
-- [**835**星][3y] [Py] [ring04h/weakfilescan](https://github.com/ring04h/weakfilescan) 动态多线程敏感信息泄露检测工具
-- [**835**星][7m] [Shell] [niklasb/libc-database](https://github.com/niklasb/libc-database) Build a database of libc offsets to simplify exploitation
-- [**835**星][1y] [Shell] [kpwn/iosre](https://github.com/kpwn/iosre) iOS Reverse Engineering
-- [**835**星][13d] [Py] [jordanpotti/awsbucketdump](https://github.com/jordanpotti/awsbucketdump) 快速枚举 AWS S3 Buckets,查找感兴趣的文件。类似于子域名爆破,但针对S3 Bucket,有额外功能,例如下载文件等
-- [**834**星][25d] [PHP] [raikia/fiercephish](https://github.com/Raikia/FiercePhish) FiercePhish is a full-fledged phishing framework to manage all phishing engagements. It allows you to track separate phishing campaigns, schedule sending of emails, and much more.
-- [**834**星][6m] [C] [brendan-rius/c-jwt-cracker](https://github.com/brendan-rius/c-jwt-cracker) C 语言编写的 JWT 爆破工具
-- [**834**星][26d] [C#] [borntoberoot/networkmanager](https://github.com/borntoberoot/networkmanager) A powerful tool for managing networks and troubleshoot network problems!
-- [**833**星][7m] [Objective-C] [sevenbits/mac-linux-usb-loader](https://github.com/sevenbits/mac-linux-usb-loader) Boot Linux on your Mac, easily
-- [**833**星][5y] [Py] [pentestmonkey/windows-privesc-check](https://github.com/pentestmonkey/windows-privesc-check) 独立工具,查找Windows系统上可导致本地提权的错误配置
-- [**833**星][3m] [JS] [creditease-sec/insight](https://github.com/creditease-sec/insight) 洞察-宜信集应用系统资产管理、漏洞全生命周期管理、安全知识库管理三位一体的平台。
-- [**832**星][13d] [Haskell] [galoisinc/cryptol](https://github.com/galoisinc/cryptol) The Language of Cryptography
-- [**831**星][12d] [v33ru/iotsecurity101](https://github.com/v33ru/iotsecurity101) From IoT Pentesting to IoT Security
-- [**830**星][25d] [Batchfile] [mr-xn/burpsuite-collections](https://github.com/mr-xn/burpsuite-collections) BurpSuite收集:包括不限于 Burp 文章、破解版、插件(非BApp Store)、汉化等相关教程,欢迎添砖加瓦---burpsuite-pro burpsuite-extender burpsuite cracked-version hackbar hacktools fuzzing fuzz-testing burp-plugin burp-extensions bapp-store brute-force-attacks brute-force-passwords waf sqlmap jar
-- [**830**星][1m] [cugu/awesome-forensics](https://github.com/cugu/awesome-forensics) A curated list of awesome forensic analysis tools and resources
-- [**829**星][5m] [Py] [ma1co/sony-pmca-re](https://github.com/ma1co/sony-pmca-re) Reverse engineering Sony PlayMemories Camera Apps
+- [**842**星][3y] [C] [gurnec/hashcheck](https://github.com/gurnec/hashcheck) HashCheck Shell Extension for Windows with added SHA2, SHA3, and multithreading; originally from code.kliu.org
+- [**842**星][5d] [C] [emsec/chameleonmini](https://github.com/emsec/chameleonmini) The ChameleonMini is a versatile contactless smartcard emulator compliant to NFC. The ChameleonMini was developed by
+- [**841**星][9d] [trimstray/iptables-essentials](https://github.com/trimstray/iptables-essentials) Common Firewall Rules and Commands.
+- [**841**星][3y] [Py] [ring04h/weakfilescan](https://github.com/ring04h/weakfilescan) 动态多线程敏感信息泄露检测工具
+- [**840**星][2m] [Go] [henson/proxypool](https://github.com/henson/proxypool) Golang实现的IP代理池
+- [**840**星][5m] [Java] [dragonite-network/dragonite-java](https://github.com/dragonite-network/dragonite-java) A reliable application level data transport protocol based on UDP, highly optimized for lossy & unstable networks. (Java version)
+- [**840**星][28d] [C#] [borntoberoot/networkmanager](https://github.com/borntoberoot/networkmanager) A powerful tool for managing networks and troubleshoot network problems!
+- [**839**星][15d] [Py] [jordanpotti/awsbucketdump](https://github.com/jordanpotti/awsbucketdump) 快速枚举 AWS S3 Buckets,查找感兴趣的文件。类似于子域名爆破,但针对S3 Bucket,有额外功能,例如下载文件等
+- [**838**星][1m] [C] [facebook/transform360](https://github.com/facebook/transform360) Transform360 is an equirectangular to cubemap transform for 360 video.
+- [**838**星][1y] [HTML] [ustayready/credsniper](https://github.com/ustayready/credsniper) CredSniper is a phishing framework written with the Python micro-framework Flask and Jinja2 templating which supports capturing 2FA tokens.
+- [**837**星][27d] [PHP] [raikia/fiercephish](https://github.com/Raikia/FiercePhish) FiercePhish is a full-fledged phishing framework to manage all phishing engagements. It allows you to track separate phishing campaigns, schedule sending of emails, and much more.
+- [**837**星][5y] [Py] [pentestmonkey/windows-privesc-check](https://github.com/pentestmonkey/windows-privesc-check) 独立工具,查找Windows系统上可导致本地提权的错误配置
+- [**837**星][3m] [JS] [creditease-sec/insight](https://github.com/creditease-sec/insight) 洞察-宜信集应用系统资产管理、漏洞全生命周期管理、安全知识库管理三位一体的平台。
+- [**836**星][2d] [Java] [sleuthkit/autopsy](https://github.com/sleuthkit/autopsy) Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by law enforcement, military, and corporate examiners to investigate what happened on a computer. You can even use it to recover photos from your camera's memory card.
+- [**836**星][7m] [Shell] [niklasb/libc-database](https://github.com/niklasb/libc-database) Build a database of libc offsets to simplify exploitation
+- [**836**星][1y] [Shell] [kpwn/iosre](https://github.com/kpwn/iosre) iOS Reverse Engineering
+- [**833**星][14d] [v33ru/iotsecurity101](https://github.com/v33ru/iotsecurity101) From IoT Pentesting to IoT Security
+- [**833**星][7m] [ObjC] [sevenbits/mac-linux-usb-loader](https://github.com/sevenbits/mac-linux-usb-loader) Boot Linux on your Mac, easily
+- [**832**星][5d] [Haskell] [galoisinc/cryptol](https://github.com/galoisinc/cryptol) The Language of Cryptography
+- [**832**星][1m] [cugu/awesome-forensics](https://github.com/cugu/awesome-forensics) A curated list of awesome forensic analysis tools and resources
+- [**831**星][17d] [C#] [pwntester/ysoserial.net](https://github.com/pwntester/ysoserial.net) 生成Payload,恶意利用不安全的 .NET 对象反序列化
+- [**831**星][5m] [Py] [ma1co/sony-pmca-re](https://github.com/ma1co/sony-pmca-re) Reverse engineering Sony PlayMemories Camera Apps
+- [**830**星][2d] [C++] [tasvideos/bizhawk](https://github.com/tasvideos/bizhawk) BizHawk is a multi-system emulator written in C#. BizHawk provides nice features for casual gamers such as full screen, and joypad support in addition to full rerecording and debugging tools for all system cores.
+- [**830**星][24d] [redhuntlabs/redhunt-os](https://github.com/redhuntlabs/redhunt-os) Virtual Machine for Adversary Emulation and Threat Hunting
+- [**830**星][9m] [Py] [ietf-wg-acme/acme](https://github.com/ietf-wg-acme/acme) A protocol for automating certificate issuance
+- [**829**星][5y] [halfkiss/zjdroid](https://github.com/halfkiss/zjdroid) 基于Xposed Framewrok的动态逆向分析模块
+- [**828**星][4y] [etsy/midas](https://github.com/etsy/midas) Mac入侵检测分析系统
+- [**827**星][7m] [Go] [tiagorlampert/chaos](https://github.com/tiagorlampert/chaos) a PoC that allow generate payloads and control remote operating system
- [**827**星][11m] [sandboxescaper/randomrepo](https://github.com/sandboxescaper/randomrepo) Repo for random stuff
-- [**827**星][23d] [Go] [ffuf/ffuf](https://github.com/ffuf/ffuf) Fast web fuzzer written in Go
-- [**826**星][22d] [redhuntlabs/redhunt-os](https://github.com/redhuntlabs/redhunt-os) Virtual Machine for Adversary Emulation and Threat Hunting
-- [**826**星][4y] [etsy/midas](https://github.com/etsy/midas) Mac Intrusion Detection Analysis System
+- [**826**星][7m] [Batchfile] [kkkgo/kms_vl_all](https://github.com/kkkgo/kms_vl_all)
+- [**826**星][9d] [JS] [cypress-io/cypress-example-recipes](https://github.com/cypress-io/cypress-example-recipes) Various recipes for testing common scenarios with Cypress
- [**825**星][2y] [PHP] [zhufaner/shadowsocks-manage-system](https://github.com/zhufaner/shadowsocks-manage-system) 科学上网管理系统
-- [**824**星][27d] [Py] [salesforce/ja3](https://github.com/salesforce/ja3) SSL/TLS 客户端指纹,用于恶意代码检测
-- [**824**星][9m] [Py] [ietf-wg-acme/acme](https://github.com/ietf-wg-acme/acme) A protocol for automating certificate issuance
-- [**823**星][2m] [C++] [redasmorg/redasm](https://github.com/redasmorg/redasm) The OpenSource Disassembler
-- [**823**星][5y] [halfkiss/zjdroid](https://github.com/halfkiss/zjdroid) 基于Xposed Framewrok的动态逆向分析模块
-- [**822**星][7d] [C++] [tasvideos/bizhawk](https://github.com/tasvideos/bizhawk) BizHawk is a multi-system emulator written in C#. BizHawk provides nice features for casual gamers such as full screen, and joypad support in addition to full rerecording and debugging tools for all system cores.
-- [**822**星][4y] [PowerShell] [clymb3r/powershell](https://github.com/clymb3r/powershell) Useful PowerShell scripts
-- [**821**星][7m] [Go] [tiagorlampert/chaos](https://github.com/tiagorlampert/chaos) a PoC that allow generate payloads and control remote operating system
-- [**820**星][1m] [Py] [corelan/mona](https://github.com/corelan/mona) Corelan Repository for mona.py
-- [**819**星][6y] [Py] [ilektrojohn/creepy](https://github.com/ilektrojohn/creepy) A geolocation OSINT tool. Offers geolocation information gathering through social networking platforms.
-- [**819**星][16d] [Py] [yampelo/beagle](https://github.com/yampelo/beagle) Beagle is an incident response and digital forensics tool which transforms security logs and data into graphs.
-- [**819**星][7d] [GLSL] [khronosgroup/spirv-cross](https://github.com/khronosgroup/spirv-cross) a practical tool and library for performing reflection on SPIR-V and disassembling SPIR-V back to high level languages.
-- [**818**星][15d] [C#] [pwntester/ysoserial.net](https://github.com/pwntester/ysoserial.net) 生成Payload,恶意利用不安全的 .NET 对象反序列化
-- [**818**星][21d] [C] [emmericp/ixy](https://github.com/emmericp/ixy) Simple userspace packet processing for educational purposes
-- [**817**星][6m] [numirias/security](https://github.com/numirias/security) Some of my security stuff and vulnerabilities. Nothing advanced. More to come.
-- [**816**星][1m] [Java] [stealthcopter/androidnetworktools](https://github.com/stealthcopter/androidnetworktools) Set of useful android network tools
-- [**816**星][7d] [cveproject/cvelist](https://github.com/cveproject/cvelist) Pilot program for CVE submission through GitHub
-- [**815**星][2m] [Py] [jeffzh3ng/fuxi](https://github.com/jeffzh3ng/fuxi) Penetration Testing Platform
-- [**815**星][19d] [PHP] [symfony/security-csrf](https://github.com/symfony/security-csrf) The Security CSRF (cross-site request forgery) component provides a class CsrfTokenManager for generating and validating CSRF tokens.
-- [**815**星][27d] [Elixir] [nccgroup/sobelow](https://github.com/nccgroup/sobelow) Phoenix 框架安全方面的静态分析工具(Phoenix 框架:支持对webUI,接口, web性能,mobile app 或 mobile browser 进行自动化测试和监控的平台)
-- [**815**星][7d] [JS] [cypress-io/cypress-example-recipes](https://github.com/cypress-io/cypress-example-recipes) Various recipes for testing common scenarios with Cypress
-- [**815**星][2y] [PowerShell] [besimorhino/powercat](https://github.com/besimorhino/powercat) PowerShell实现的Netcat
-- [**814**星][27d] [C] [rust-fuzz/afl.rs](https://github.com/rust-fuzz/afl.rs)
+- [**825**星][21d] [PHP] [symfony/security-csrf](https://github.com/symfony/security-csrf) 一个CsrfTokenManager类,用于生成和验证CSRF令牌
+- [**825**星][29d] [Py] [salesforce/ja3](https://github.com/salesforce/ja3) SSL/TLS 客户端指纹,用于恶意代码检测
+- [**825**星][2m] [C++] [redasmorg/redasm](https://github.com/redasmorg/redasm) The OpenSource Disassembler
+- [**824**星][3d] [GLSL] [khronosgroup/spirv-cross](https://github.com/khronosgroup/spirv-cross) a practical tool and library for performing reflection on SPIR-V and disassembling SPIR-V back to high level languages.
+- [**824**星][5m] [Shell] [danielmiessler/robotsdisallowed](https://github.com/danielmiessler/robotsdisallowed) A curated list of the most common and most interesting robots.txt disallowed directories.
+- [**824**星][4y] [PS] [clymb3r/powershell](https://github.com/clymb3r/powershell) Useful PowerShell scripts
+- [**823**星][1m] [Py] [corelan/mona](https://github.com/corelan/mona) 用于Immunity Debugger的mona.py
+- [**823**星][2y] [PS] [besimorhino/powercat](https://github.com/besimorhino/powercat) PowerShell实现的Netcat
+- [**822**星][24d] [Shell] [zfl9/ss-tproxy](https://github.com/zfl9/ss-tproxy) SS/SSR/V2Ray/Socks5 透明代理 for Linux
+- [**822**星][2d] [Py] [kerlomz/captcha_trainer](https://github.com/kerlomz/captcha_trainer) 基于深度学习的图片验证码的解决方案
+- [**821**星][6y] [Py] [ilektrojohn/creepy](https://github.com/ilektrojohn/creepy) A geolocation OSINT tool. Offers geolocation information gathering through social networking platforms.
+- [**821**星][9d] [Py] [yampelo/beagle](https://github.com/yampelo/beagle) Beagle is an incident response and digital forensics tool which transforms security logs and data into graphs.
+- [**821**星][8d] [Elixir] [nccgroup/sobelow](https://github.com/nccgroup/sobelow) Phoenix 框架安全方面的静态分析工具(Phoenix 框架:支持对webUI,接口, web性能,mobile app 或 mobile browser 进行自动化测试和监控的平台)
+- [**821**星][2d] [cveproject/cvelist](https://github.com/cveproject/cvelist) Pilot program for CVE submission through GitHub
+- [**820**星][24d] [C] [emmericp/ixy](https://github.com/emmericp/ixy) Simple userspace packet processing for educational purposes
+- [**819**星][1m] [Java] [stealthcopter/androidnetworktools](https://github.com/stealthcopter/androidnetworktools) Set of useful android network tools
+- [**819**星][2m] [Py] [jeffzh3ng/fuxi](https://github.com/jeffzh3ng/fuxi) 渗透测试平台
+- [**819**星][2m] [AutoIt] [bioruebe/uniextract2](https://github.com/bioruebe/uniextract2) Universal Extractor 2 is an unofficial updated and extended version of the original UniExtract by Jared Breland. It brings several hundred changes including community-wanted ones such as a batch mode, auto-updater and scan-only-functionality.
+- [**818**星][6m] [numirias/security](https://github.com/numirias/security) Some of my security stuff and vulnerabilities. Nothing advanced. More to come.
+- [**817**星][2m] [Shell] [shr3ddersec/shr3dkit](https://github.com/shr3ddersec/shr3dkit) Red Team Tool Kit
+- [**816**星][29d] [C] [rust-fuzz/afl.rs](https://github.com/rust-fuzz/afl.rs)
- [**814**星][2y] [Py] [pirate/security-growler](https://github.com/pirate/security-growler)
-- [**813**星][5m] [Shell] [danielmiessler/robotsdisallowed](https://github.com/danielmiessler/robotsdisallowed) A curated list of the most common and most interesting robots.txt disallowed directories.
-- [**812**星][8d] [JS] [mellow-io/mellow](https://github.com/mellow-io/mellow) Mellow is a rule-based global transparent proxy client for Windows, macOS and Linux.
-- [**812**星][2y] [Ruby] [elevenpaths/eternalblue-doublepulsar-metasploit](https://github.com/elevenpaths/eternalblue-doublepulsar-metasploit) Module of Metasploit to exploit the vulnerability Eternalblue-Doublepulsar.
-- [**811**星][8m] [Py] [nccgroup/featherduster](https://github.com/nccgroup/featherduster) An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction
-- [**811**星][2m] [feeicn/security-ppt](https://github.com/feeicn/security-ppt) 大安全各领域各公司各会议分享的PPT
-- [**811**星][25d] [C] [dynup/kpatch](https://github.com/dynup/kpatch) live kernel patching
-- [**810**星][2m] [Shell] [shr3ddersec/shr3dkit](https://github.com/shr3ddersec/shr3dkit) Red Team Tool Kit
-- [**810**星][5y] [Objective-C] [isecpartners/ios-ssl-kill-switch](https://github.com/isecpartners/ios-ssl-kill-switch) Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS Apps
-- [**809**星][1y] [Py] [utkusen/leviathan](https://github.com/utkusen/leviathan) wide range mass audit toolkit
-- [**809**星][1y] [Py] [utkusen/leviathan](https://github.com/utkusen/leviathan) 多功能审计工具包,包括多种服务发现(FTP、SSH、Talnet、RDP、MYSQL)、爆破、远程命令执行、SQL注入扫描、指定漏洞利用,集成了Masscan、Ncrack、DSSS等工具。
-- [**809**星][2y] [C] [timwr/cve-2016-5195](https://github.com/timwr/cve-2016-5195) CVE-2016-5195 (dirtycow/dirtyc0w) proof of concept for Android
-- [**809**星][2m] [AutoIt] [bioruebe/uniextract2](https://github.com/bioruebe/uniextract2) Universal Extractor 2 is an unofficial updated and extended version of the original UniExtract by Jared Breland. It brings several hundred changes including community-wanted ones such as a batch mode, auto-updater and scan-only-functionality.
-- [**808**星][13d] [JS] [sindresorhus/is-online](https://github.com/sindresorhus/is-online) Check if the internet connection is up
-- [**808**星][7y] [C] [inquisb/icmpsh](https://github.com/inquisb/icmpsh) Simple reverse ICMP shell
-- [**807**星][22d] [Shell] [zfl9/ss-tproxy](https://github.com/zfl9/ss-tproxy) SS/SSR/V2Ray/Socks5 透明代理 for Linux
-- [**807**星][3m] [C] [strazzere/android-unpacker](https://github.com/strazzere/android-unpacker) Android Unpacker presented at Defcon 22: Android Hacker Protection Level 0
+- [**814**星][3m] [feeicn/security-ppt](https://github.com/feeicn/security-ppt) 大安全各领域各公司各会议分享的PPT
+- [**814**星][5d] [C] [dynup/kpatch](https://github.com/dynup/kpatch) live kernel patching
+- [**813**星][2y] [Ruby] [elevenpaths/eternalblue-doublepulsar-metasploit](https://github.com/elevenpaths/eternalblue-doublepulsar-metasploit) Module of Metasploit to exploit the vulnerability Eternalblue-Doublepulsar.
+- [**812**星][15d] [JS] [sindresorhus/is-online](https://github.com/sindresorhus/is-online) 检查互联网连接是否正常
+- [**811**星][1y] [Py] [utkusen/leviathan](https://github.com/utkusen/leviathan) wide range mass audit toolkit
+- [**811**星][1y] [Py] [utkusen/leviathan](https://github.com/utkusen/leviathan) 多功能审计工具包,包括多种服务发现(FTP、SSH、Talnet、RDP、MYSQL)、爆破、远程命令执行、SQL注入扫描、指定漏洞利用,集成了Masscan、Ncrack、DSSS等工具。
+- [**811**星][2y] [C] [timwr/cve-2016-5195](https://github.com/timwr/cve-2016-5195) CVE-2016-5195 (dirtycow/dirtyc0w) proof of concept for Android
+- [**811**星][5y] [ObjC] [isecpartners/ios-ssl-kill-switch](https://github.com/isecpartners/ios-ssl-kill-switch) Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS Apps
+- [**811**星][7y] [C] [inquisb/icmpsh](https://github.com/inquisb/icmpsh) Simple reverse ICMP shell
+- [**810**星][8m] [Py] [nccgroup/featherduster](https://github.com/nccgroup/featherduster) 自动化的密码分析工具,模块化
+- [**809**星][1y] [C++] [tencent/tscancode](https://github.com/tencent/tscancode) A static code analyzer for C++, C#, Lua
+- [**808**星][2y] [C#] [nicehash/nicehashminer-archived](https://github.com/nicehash/nicehashminer-archived) NiceHash easy to use CPU&GPU Miner
+- [**808**星][3m] [C] [strazzere/android-unpacker](https://github.com/strazzere/android-unpacker) Android Unpacker presented at Defcon 22: Android Hacker Protection Level 0
+- [**806**星][1m] [Swift] [googleprojectzero/fuzzilli](https://github.com/googleprojectzero/fuzzilli) A JavaScript Engine Fuzzer
+- [**806**星][3y] [Py] [fuzzbunch/fuzzbunch](https://github.com/fuzzbunch/fuzzbunch) NSA finest tool
- [**806**星][2y] [Ruby] [dmayer/idb](https://github.com/dmayer/idb) iOS 渗透和研究过程中简化一些常见的任务
-- [**804**星][3y] [Py] [fuzzbunch/fuzzbunch](https://github.com/fuzzbunch/fuzzbunch) NSA finest tool
-- [**803**星][3y] [shmilylty/awesome-hacking](https://github.com/shmilylty/awesome-hacking) awesome hacking chinese version
+- [**805**星][17d] [Ruby] [rastating/wordpress-exploit-framework](https://github.com/rastating/wordpress-exploit-framework) WordPress 漏洞利用框架
+- [**805**星][5m] [C++] [ptrkrysik/gr-gsm](https://github.com/ptrkrysik/gr-gsm) Gnuradio blocks and tools for receiving GSM transmissions
+- [**804**星][2y] [Swift] [zhuhaow/specht](https://github.com/zhuhaow/specht) A rule-based proxy app built with Network Extension for macOS
+- [**804**星][3y] [shmilylty/awesome-hacking](https://github.com/shmilylty/awesome-hacking) awesome hacking chinese version
+- [**804**星][6d] [Py] [jivoi/pentest](https://github.com/jivoi/pentest) 渗透测试工具
+- [**803**星][2m] [Py] [acmesec/ctfcracktools](https://github.com/Acmesec/CTFCrackTools) 中国国内首个CTF工具框架,旨在帮助CTFer快速攻克难关
- [**803**星][3y] [te-k/flexidie](https://github.com/te-k/flexidie) Source code and binaries of FlexiSpy from the Flexidie dump
-- [**802**星][15d] [Ruby] [rastating/wordpress-exploit-framework](https://github.com/rastating/wordpress-exploit-framework) WordPress 漏洞利用框架
-- [**801**星][5m] [C++] [ptrkrysik/gr-gsm](https://github.com/ptrkrysik/gr-gsm) Gnuradio blocks and tools for receiving GSM transmissions
+- [**803**星][2y] [Go] [schollz/find-lf](https://github.com/schollz/find-lf) Track the location of every Wi-Fi device (
+- [**802**星][3m] [Py] [techgaun/github-dorks](https://github.com/techgaun/github-dorks) 快速搜索Github repo中的敏感信息
+- [**802**星][3m] [Py] [secforce/tunna](https://github.com/secforce/tunna) Tunna is a set of tools which will wrap and tunnel any TCP communication over HTTP. It can be used to bypass network restrictions in fully firewalled environments.
+- [**802**星][2m] [Py] [hellman/xortool](https://github.com/hellman/xortool) 分析多字节异或密码
+- [**802**星][1m] [Shell] [andreyvit/create-dmg](https://github.com/andreyvit/create-dmg) 用于构建精美DMG的Shell脚本
+- [**801**星][2y] [vysecurity/redtips](https://github.com/vysecurity/RedTips) Red Team Tips as posted by
- [**801**星][3y] [C#] [netflix/fido](https://github.com/netflix/fido) an orchestration layer used to automate the incident response process by evaluating, assessing and responding to malware
-- [**800**星][2y] [vysecurity/redtips](https://github.com/vysecurity/RedTips) Red Team Tips as posted by
+- [**801**星][2d] [Py] [ericsson/codechecker](https://github.com/ericsson/codechecker) CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy
+- [**800**星][28d] [Rust] [edu4rdshl/findomain](https://github.com/edu4rdshl/findomain) The fastest and cross-platform subdomain enumerator, don't waste your time.
+- [**800**星][6d] [C++] [aslody/whale](https://github.com/aslody/whale) Hook Framework for Android/IOS/Linux/MacOS
- [**799**星][6y] [Pascal] [prof7bit/torchat](https://github.com/prof7bit/torchat) Decentralized anonymous instant messenger on top of Tor Hidden Services
-- [**798**星][2m] [Py] [acmesec/ctfcracktools](https://github.com/Acmesec/CTFCrackTools) 中国国内首个CTF工具框架,旨在帮助CTFer快速攻克难关
-- [**798**星][3m] [Py] [secforce/tunna](https://github.com/secforce/tunna) Tunna is a set of tools which will wrap and tunnel any TCP communication over HTTP. It can be used to bypass network restrictions in fully firewalled environments.
-- [**798**星][1y] [Objective-C] [igrsoft/kismac2](https://github.com/igrsoft/kismac2) KisMAC is a free, open source wireless stumbling and security tool for Mac OS X.
-- [**798**星][1m] [Shell] [andreyvit/create-dmg](https://github.com/andreyvit/create-dmg) A shell script to build fancy DMGs
-- [**797**星][2m] [Py] [hellman/xortool](https://github.com/hellman/xortool) A tool to analyze multi-byte xor cipher
-- [**797**星][1m] [Swift] [googleprojectzero/fuzzilli](https://github.com/googleprojectzero/fuzzilli) A JavaScript Engine Fuzzer
+- [**799**星][1y] [ObjC] [igrsoft/kismac2](https://github.com/igrsoft/kismac2) KisMAC is a free, open source wireless stumbling and security tool for Mac OS X.
+- [**799**星][3m] [Py] [awslabs/aws-config-rules](https://github.com/awslabs/aws-config-rules) [Node, Python, Java] Repository of sample Custom Rules for AWS Config.
+- [**798**星][3d] [Py] [complianceascode/content](https://github.com/ComplianceAsCode/content) Security compliance content in SCAP, Bash, Ansible, and other formats
+- [**798**星][8d] [proxymanapp/proxyman](https://github.com/proxymanapp/proxyman) Modern and Delightful HTTP Debugging Proxy for macOS, iOS and Android
+- [**798**星][11m] [Py] [mak-/parameth](https://github.com/mak-/parameth) 在文件中(例如PHP 文件)暴力搜索GET 和 POST 请求的参数
+- [**797**星][3y] [Go] [ryhanson/phishery](https://github.com/ryhanson/phishery) 启用 SSL 的 HTTP 服务器,首要目的是通过基本身份认证进行网络钓鱼,以获取凭证。自带将钓鱼url 注入 .docx Word 文档的功能,用户打开Word 文档时会向钓鱼 url 发送请求,并自动弹出认证对话框。
- [**797**星][3y] [Go] [codahale/sneaker](https://github.com/codahale/sneaker) A tool for securely storing secrets on S3 using Amazon KMS.
-- [**796**星][2y] [Go] [schollz/find-lf](https://github.com/schollz/find-lf) Track the location of every Wi-Fi device (
-- [**796**星][20d] [Py] [jivoi/pentest](https://github.com/jivoi/pentest)
-- [**796**星][8d] [Py] [ericsson/codechecker](https://github.com/ericsson/codechecker) CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy
- [**795**星][7m] [Py] [phaethon/kamene](https://github.com/phaethon/kamene) Network packet and pcap file crafting/sniffing/manipulation/visualization security tool. Originally forked from scapy in 2015 and providing python3 compatibility since then.
-- [**795**星][7m] [C++] [aslody/whale](https://github.com/aslody/whale) Hook Framework for Android/IOS/Linux/MacOS
-- [**794**星][11m] [Py] [mak-/parameth](https://github.com/mak-/parameth) 在文件中(例如PHP 文件)暴力搜索GET 和 POST 请求的参数
-- [**794**星][3m] [Py] [awslabs/aws-config-rules](https://github.com/awslabs/aws-config-rules) [Node, Python, Java] Repository of sample Custom Rules for AWS Config.
-- [**793**星][7d] [Py] [complianceascode/content](https://github.com/ComplianceAsCode/content) Security compliance content in SCAP, Bash, Ansible, and other formats
-- [**793**星][20d] [Py] [yeti-platform/yeti](https://github.com/yeti-platform/yeti) 情报威胁管理平台
-- [**793**星][3y] [Go] [ryhanson/phishery](https://github.com/ryhanson/phishery) 启用 SSL 的 HTTP 服务器,首要目的是通过基本身份认证进行网络钓鱼,以获取凭证。自带将钓鱼url 注入 .docx Word 文档的功能,用户打开Word 文档时会向钓鱼 url 发送请求,并自动弹出认证对话框。
-- [**791**星][3m] [Py] [techgaun/github-dorks](https://github.com/techgaun/github-dorks) 快速搜索Github repo中的敏感信息
-- [**791**星][3y] [Py] [empireproject/empyre](https://github.com/empireproject/empyre) A post-exploitation OS X/Linux agent written in Python 2.7
+- [**795**星][22d] [Py] [yeti-platform/yeti](https://github.com/yeti-platform/yeti) 情报威胁管理平台
+- [**794**星][2m] [sh4hin/androl4b](https://github.com/sh4hin/androl4b) 用于评估Android应用程序,逆向工程和恶意软件分析的虚拟机
+- [**793**星][3y] [Py] [empireproject/empyre](https://github.com/empireproject/empyre) A post-exploitation OS X/Linux agent written in Python 2.7
+- [**791**星][4m] [Py] [srinivas11789/pcapxray](https://github.com/srinivas11789/pcapxray) A Network Forensics Tool
- [**790**星][2y] [Go] [evilsocket/dnssearch](https://github.com/evilsocket/dnssearch) A subdomain enumeration tool.
-- [**789**星][2m] [sh4hin/androl4b](https://github.com/sh4hin/androl4b) 用于评估Android应用程序,逆向工程和恶意软件分析的虚拟机
-- [**789**星][26d] [Rust] [edu4rdshl/findomain](https://github.com/edu4rdshl/findomain) The fastest and cross-platform subdomain enumerator, don't waste your time.
-- [**789**星][3y] [C++] [bwall/hashpump](https://github.com/bwall/hashpump) A tool to exploit the hash length extension attack in various hashing algorithms
-- [**787**星][4m] [Py] [srinivas11789/pcapxray](https://github.com/srinivas11789/pcapxray) A Network Forensics Tool
+- [**790**星][3y] [C++] [bwall/hashpump](https://github.com/bwall/hashpump) A tool to exploit the hash length extension attack in various hashing algorithms
+- [**789**星][10m] [C#] [terminals-origin/terminals](https://github.com/terminals-origin/terminals) Terminals is a secure, multi tab terminal services/remote desktop client. It uses Terminal Services ActiveX Client (mstscax.dll). The project started from the need of controlling multiple connections simultaneously. It is a complete replacement for the mstsc.exe (Terminal Services) client. This is official source moved from Codeplex.
+- [**789**星][2d] [C] [fwupd/fwupd](https://github.com/fwupd/fwupd) A simple daemon to allow session software to update firmware
+- [**788**星][3d] [Java] [zstackio/zstack](https://github.com/zstackio/zstack) ZStack - the open-source IaaS software
+- [**787**星][1m] [CSS] [smartping/smartping](https://github.com/smartping/smartping) 综合性网络质量(PING)检测工具,支持正/反向PING绘图、互PING拓扑绘图与报警、全国PING延迟地图与在线检测工具等功能
- [**787**星][2y] [Shell] [screetsec/dracnmap](https://github.com/screetsec/dracnmap) Dracnmap is an open source program which is using to exploit the network and gathering information with nmap help. Nmap command comes with lots of options that can make the utility more robust and difficult to follow for new users. Hence Dracnmap is designed to perform fast scaning with the utilizing script engine of nmap and nmap can perform va…
-- [**784**星][2m] [C] [netsniff-ng/netsniff-ng](https://github.com/netsniff-ng/netsniff-ng) A Swiss army knife for your daily Linux network plumbing.
-- [**784**星][8d] [C] [fwupd/fwupd](https://github.com/fwupd/fwupd) A simple daemon to allow session software to update firmware
-- [**784**星][8d] [Java] [zstackio/zstack](https://github.com/zstackio/zstack) ZStack - the open-source IaaS software
-- [**783**星][4y] [Assembly] [xoreaxeaxeax/sinkhole](https://github.com/xoreaxeaxeax/sinkhole) Architectural privilege escalation on x86
-- [**783**星][8m] [Go] [parsiya/hacking-with-go](https://github.com/parsiya/hacking-with-go) Golang for Security Professionals
-- [**783**星][27d] [Ruby] [net-ssh/net-ssh](https://github.com/net-ssh/net-ssh) Pure Ruby implementation of an SSH (protocol 2) client
-- [**783**星][2y] [C] [jklmnn/imagejs](https://github.com/jklmnn/imagejs) Small tool to package javascript into a valid image file.
-- [**783**星][2m] [Go] [dreddsa5dies/gohacktools](https://github.com/dreddsa5dies/gohacktools) Hacker tools on Go (Golang)
+- [**787**星][2m] [Py] [numba/llvmlite](https://github.com/numba/llvmlite) A lightweight LLVM python binding for writing JIT compilers
+- [**787**星][1m] [microsoft/msrc-security-research](https://github.com/microsoft/msrc-security-research) Security Research from the Microsoft Security Response Center (MSRC)
+- [**786**星][2m] [Go] [dreddsa5dies/gohacktools](https://github.com/dreddsa5dies/gohacktools) Golang编写的多款Hacking工具
+- [**785**星][2m] [C] [netsniff-ng/netsniff-ng](https://github.com/netsniff-ng/netsniff-ng) A Swiss army knife for your daily Linux network plumbing.
+- [**785**星][12d] [Go] [rebuy-de/aws-nuke](https://github.com/rebuy-de/aws-nuke) Nuke a whole AWS account and delete all its resources.
+- [**785**星][2y] [C] [jklmnn/imagejs](https://github.com/jklmnn/imagejs) 将javascript打包到有效的图像文件。
+- [**784**星][4y] [Assembly] [xoreaxeaxeax/sinkhole](https://github.com/xoreaxeaxeax/sinkhole) Architectural privilege escalation on x86
+- [**784**星][5m] [TSQL] [threathunterx/nebula](https://github.com/threathunterx/nebula) "星云"业务风控系统,主工程
+- [**784**星][8m] [Go] [parsiya/hacking-with-go](https://github.com/parsiya/hacking-with-go) Golang for Security Professionals
+- [**784**星][7m] [Java] [blankeer/mdwechat](https://github.com/blankeer/mdwechat) 一个能让微信 Material Design 化的 Xposed 模块
+- [**784**星][2m] [Py] [bishopfox/gitgot](https://github.com/bishopfox/gitgot) Semi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets.
+- [**784**星][3y] [Go] [armon/go-socks5](https://github.com/armon/go-socks5) SOCKS5 server in Golang
+- [**782**星][11m] [v2-dev/awesome-social-engineering](https://github.com/v2-dev/awesome-social-engineering) 社会工程学资源集合
- [**782**星][3y] [Go] [summitroute/osxlockdown](https://github.com/summitroute/osxlockdown) [No longer maintained] Apple OS X tool to audit for, and remediate, security configuration settings.
-- [**782**星][7m] [Java] [blankeer/mdwechat](https://github.com/blankeer/mdwechat) 一个能让微信 Material Design 化的 Xposed 模块
-- [**781**星][5m] [TSQL] [threathunterx/nebula](https://github.com/threathunterx/nebula) "星云"业务风控系统,主工程
-- [**781**星][30d] [microsoft/msrc-security-research](https://github.com/microsoft/msrc-security-research) Security Research from the Microsoft Security Response Center (MSRC)
-- [**781**星][3y] [Go] [armon/go-socks5](https://github.com/armon/go-socks5) SOCKS5 server in Golang
+- [**782**星][29d] [Ruby] [net-ssh/net-ssh](https://github.com/net-ssh/net-ssh) Pure Ruby implementation of an SSH (protocol 2) client
+- [**782**星][1y] [PS] [kevin-robertson/invoke-thehash](https://github.com/kevin-robertson/invoke-thehash) 执行 pass the hash WMI 和 SMB 任务的PowerShell函数
+- [**780**星][2m] [C] [nixos/patchelf](https://github.com/nixos/patchelf) A small utility to modify the dynamic linker and RPATH of ELF executables
- [**780**星][4y] [C++] [denandz/keefarce](https://github.com/denandz/keefarce) Extracts passwords from a KeePass 2.x database, directly from memory.
- [**779**星][2y] [Py] [secretsquirrel/bdfproxy](https://github.com/secretsquirrel/bdfproxy) Patch Binaries via MITM: BackdoorFactory + mitmProxy. (NOT SUPPORTED)
-- [**779**星][2m] [Py] [numba/llvmlite](https://github.com/numba/llvmlite) A lightweight LLVM python binding for writing JIT compilers
-- [**779**星][1y] [PowerShell] [kevin-robertson/invoke-thehash](https://github.com/kevin-robertson/invoke-thehash) PowerShell Pass The Hash Utils
-- [**778**星][10d] [Go] [rebuy-de/aws-nuke](https://github.com/rebuy-de/aws-nuke) Nuke a whole AWS account and delete all its resources.
-- [**778**星][2m] [C] [nixos/patchelf](https://github.com/nixos/patchelf) A small utility to modify the dynamic linker and RPATH of ELF executables
-- [**777**星][11m] [v2-dev/awesome-social-engineering](https://github.com/v2-dev/awesome-social-engineering) 社会工程学资源集合
+- [**779**星][1m] [Py] [konradit/gopro-py-api](https://github.com/konradit/gopro-py-api) Unofficial GoPro API Library for Python - connect to GoPro via WiFi.
+- [**777**星][7d] [Go] [kolide/fleet](https://github.com/kolide/fleet) A flexible control server for osquery fleets
+- [**777**星][1m] [Py] [kevthehermit/ratdecoders](https://github.com/kevthehermit/ratdecoders) Python Decoders for Common Remote Access Trojans
+- [**777**星][8d] [C#] [justcoding121/titanium-web-proxy](https://github.com/justcoding121/titanium-web-proxy) A cross-platform asynchronous HTTP(S) proxy server in C#.
- [**777**星][2m] [Py] [gosecure/malboxes](https://github.com/gosecure/malboxes) Builds malware analysis Windows VMs so that you don't have to.
-- [**776**星][1m] [Py] [konradit/gopro-py-api](https://github.com/konradit/gopro-py-api) Unofficial GoPro API Library for Python - connect to GoPro via WiFi.
-- [**776**星][2m] [Py] [bishopfox/gitgot](https://github.com/bishopfox/gitgot) Semi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets.
-- [**775**星][1y] [C++] [polysync/oscc](https://github.com/polysync/oscc) Open Source Car Control
+- [**777**星][2y] [C++] [dor1s/libfuzzer-workshop](https://github.com/dor1s/libfuzzer-workshop) Repository for materials of "Modern fuzzing of C/C++ Projects" workshop.
+- [**777**星][15d] [Go] [bishopfox/sliver](https://github.com/bishopfox/sliver) 一个通用的跨平台植入程序框架,该框架C3支持Mutual-TLS,HTTP(S)和DNS
+- [**777**星][14d] [Shell] [aqzt/kjyw](https://github.com/aqzt/kjyw) 快捷运维,代号kjyw,项目基于shell、python,运维脚本工具库,收集各类运维常用工具脚本,实现快速安装nginx、mysql、php、redis、nagios、运维经常使用的脚本等等...
+- [**776**星][2y] [Py] [marvis/pytorch-caffe-darknet-convert](https://github.com/marvis/pytorch-caffe-darknet-convert) convert between pytorch, caffe prototxt/weights and darknet cfg/weights
+- [**776**星][1y] [C++] [polysync/oscc](https://github.com/polysync/oscc) Open Source Car Control
+- [**776**星][2m] [C++] [nodejs/llnode](https://github.com/nodejs/llnode) An lldb plugin for Node.js and V8, which enables inspection of JavaScript states for insights into Node.js processes and their core dumps.
+- [**775**星][12m] [HTML] [sense-of-security/adrecon](https://github.com/sense-of-security/adrecon) 收集Active Directory信息并生成报告
- [**775**星][2y] [Py] [dagrz/aws_pwn](https://github.com/dagrz/aws_pwn) A collection of AWS penetration testing junk
-- [**774**星][2m] [C++] [nodejs/llnode](https://github.com/nodejs/llnode) An lldb plugin for Node.js and V8, which enables inspection of JavaScript states for insights into Node.js processes and their core dumps.
-- [**774**星][2y] [C++] [dor1s/libfuzzer-workshop](https://github.com/dor1s/libfuzzer-workshop) Repository for materials of "Modern fuzzing of C/C++ Projects" workshop.
+- [**774**星][2y] [TS] [uwnetworkslab/uproxy-p2p](https://github.com/uwnetworkslab/uproxy-p2p) Internet without borders
- [**774**星][4y] [amq/firefox-debloat](https://github.com/amq/firefox-debloat) Stop Firefox leaking data about you
- [**773**星][2y] [Py] [viralmaniar/passhunt](https://github.com/viralmaniar/passhunt) Passhunt is a simple tool for searching of default credentials for network devices, web applications and more. Search through 523 vendors and their 2084 default passwords.
-- [**773**星][2y] [TypeScript] [uwnetworkslab/uproxy-p2p](https://github.com/uwnetworkslab/uproxy-p2p) Internet without borders
-- [**771**星][12m] [HTML] [sense-of-security/adrecon](https://github.com/sense-of-security/adrecon) 收集Active Directory信息并生成报告
-- [**771**星][20d] [Go] [kolide/fleet](https://github.com/kolide/fleet) A flexible control server for osquery fleets
-- [**771**星][1m] [Py] [kevthehermit/ratdecoders](https://github.com/kevthehermit/ratdecoders) Python Decoders for Common Remote Access Trojans
-- [**771**星][9d] [C#] [justcoding121/titanium-web-proxy](https://github.com/justcoding121/titanium-web-proxy) A cross-platform asynchronous HTTP(S) proxy server in C#.
-- [**771**星][4y] [C++] [google/rowhammer-test](https://github.com/google/rowhammer-test) Test DRAM for bit flips caused by the rowhammer problem
-- [**769**星][13d] [Go] [bishopfox/sliver](https://github.com/bishopfox/sliver) Implant framework
+- [**772**星][8d] [payloadbox/xss-payload-list](https://github.com/payloadbox/xss-payload-list) XSS 漏洞Payload列表
+- [**772**星][10d] [Go] [liamg/tfsec](https://github.com/liamg/tfsec)
+- [**771**星][4y] [C++] [google/rowhammer-test](https://github.com/google/rowhammer-test) 以正常的用户模式进程执行,检测rowhammer漏洞
+- [**769**星][2y] [HTML] [wi-fi-analyzer/fluxion](https://github.com/wi-fi-analyzer/fluxion) fluxion:linset 的重制版,兼容最新版 Kali
+- [**769**星][2d] [C++] [shekyan/slowhttptest](https://github.com/shekyan/slowhttptest) 应用层DoS攻击模拟器
+- [**769**星][2m] [HTML] [rewardone/oscprepo](https://github.com/rewardone/oscprepo) A list of commands, scripts, resources, and more that I have gathered and attempted to consolidate for use as OSCP (and more) study material. Commands in 'Usefulcommands' Keepnote. Bookmarks and reading material in 'BookmarkList' Keepnote. Reconscan in scripts folder.
+- [**769**星][2d] [Py] [jtpereyda/boofuzz](https://github.com/jtpereyda/boofuzz) 网络协议Fuzzing框架, sulley的继任者
+- [**769**星][4d] [C#] [damianh/proxykit](https://github.com/damianh/proxykit) A toolkit to create code-first HTTP reverse proxies on ASP.NET Core
- [**768**星][5y] [Py] [shadowsocks/chinadns-python](https://github.com/shadowsocks/chinadns-python) Protect yourself against DNS poisoning in China.
-- [**767**星][2m] [HTML] [rewardone/oscprepo](https://github.com/rewardone/oscprepo) A list of commands, scripts, resources, and more that I have gathered and attempted to consolidate for use as OSCP (and more) study material. Commands in 'Usefulcommands' Keepnote. Bookmarks and reading material in 'BookmarkList' Keepnote. Reconscan in scripts folder.
-- [**766**星][2y] [HTML] [wi-fi-analyzer/fluxion](https://github.com/wi-fi-analyzer/fluxion) fluxion:linset 的重制版,兼容最新版 Kali
-- [**766**星][1m] [Py] [vesche/scanless](https://github.com/vesche/scanless) 端口扫描器
-- [**766**星][12d] [Shell] [aqzt/kjyw](https://github.com/aqzt/kjyw) 快捷运维,代号kjyw,项目基于shell、python,运维脚本工具库,收集各类运维常用工具脚本,实现快速安装nginx、mysql、php、redis、nagios、运维经常使用的脚本等等...
+- [**768**星][1m] [Py] [vesche/scanless](https://github.com/vesche/scanless) 端口扫描器
+- [**768**星][2d] [Java] [tmobile/pacbot](https://github.com/tmobile/pacbot) PacBot (Policy as Code Bot)
+- [**767**星][2m] [daviddias/awesome-hacking-locations](https://github.com/daviddias/awesome-hacking-locations)
+- [**767**星][3d] [JS] [brianlovin/security-checklist](https://github.com/brianlovin/security-checklist) A checklist for staying safe on the internet
+- [**766**星][7d] [C++] [snort3/snort3](https://github.com/snort3/snort3) 下一代Snort IPS(入侵防御系统)。
- [**765**星][5y] [C#] [azzvx/gogotester](https://github.com/azzvx/gogotester)
-- [**765**星][2m] [daviddias/awesome-hacking-locations](https://github.com/daviddias/awesome-hacking-locations)
-- [**765**星][1m] [C++] [shekyan/slowhttptest](https://github.com/shekyan/slowhttptest) Application Layer DoS attack simulator
-- [**764**星][10d] [Py] [jtpereyda/boofuzz](https://github.com/jtpereyda/boofuzz) 网络协议Fuzzing框架, sulley的继任者
-- [**764**星][11d] [C#] [damianh/proxykit](https://github.com/damianh/proxykit) A toolkit to create code-first HTTP reverse proxies on ASP.NET Core
-- [**764**星][8d] [JS] [brianlovin/security-checklist](https://github.com/brianlovin/security-checklist) A checklist for staying safe on the internet
-- [**762**星][2m] [Java] [tmobile/pacbot](https://github.com/tmobile/pacbot) PacBot (Policy as Code Bot)
+- [**765**星][1y] [pfarb/awesome-crypto-papers](https://github.com/pfarb/awesome-crypto-papers) A curated list of cryptography papers, articles, tutorials and howtos.
+- [**765**星][15d] [axtmueller/windows-kernel-explorer](https://github.com/axtmueller/windows-kernel-explorer) Windows内核研究工具
+- [**764**星][7m] [Py] [gkbrk/slowloris](https://github.com/gkbrk/slowloris) HTTP DoS 服务攻击,主要影响多线程服务器
+- [**764**星][2m] [Py] [ashutosh1206/crypton](https://github.com/ashutosh1206/crypton) Library consisting of explanation and implementation of all the existing attacks on various Encryption Systems, Digital Signatures, Authentication methods along with example challenges from CTFs
+- [**763**星][1y] [Java] [mbechler/marshalsec](https://github.com/mbechler/marshalsec) Java解密器(Unmarshaller)安全 - 将数据转换为可执行的代码
+- [**763**星][10m] [Py] [hlldz/spookflare](https://github.com/hlldz/spookflare) Loader, dropper generator with multiple features for bypassing client-side and network-side countermeasures.
+- [**762**星][7y] [grugq/portal](https://github.com/grugq/portal) Personal Onion Router To Assure Liberty
- [**762**星][11m] [C++] [comaeio/porosity](https://github.com/comaeio/porosity) *UNMAINTAINED* Decompiler and Security Analysis tool for Blockchain-based Ethereum Smart-Contracts
-- [**761**星][10m] [Py] [hlldz/spookflare](https://github.com/hlldz/spookflare) Loader, dropper generator with multiple features for bypassing client-side and network-side countermeasures.
-- [**761**星][7y] [grugq/portal](https://github.com/grugq/portal) Personal Onion Router To Assure Liberty
-- [**760**星][17d] [C++] [snort3/snort3](https://github.com/snort3/snort3) Snort++
-- [**760**星][13d] [axtmueller/windows-kernel-explorer](https://github.com/axtmueller/windows-kernel-explorer) Windows内核研究工具
-- [**759**星][7d] [HTML] [payloadbox/xss-payload-list](https://github.com/payloadbox/xss-payload-list) XSS 漏洞Payload列表
-- [**759**星][1y] [Java] [mbechler/marshalsec](https://github.com/mbechler/marshalsec) Java解密器(Unmarshaller)安全 - 将数据转换为可执行的代码
-- [**758**星][4m] [Py] [s0md3v/hash-buster](https://github.com/s0md3v/Hash-Buster) Crack hashes in seconds.
-- [**758**星][1y] [pfarb/awesome-crypto-papers](https://github.com/pfarb/awesome-crypto-papers) A curated list of cryptography papers, articles, tutorials and howtos.
-- [**758**星][5m] [Py] [lgandx/pcredz](https://github.com/lgandx/pcredz) This tool extracts Credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, SMTP, FTP, IMAP, etc from a pcap file or from a live interface.
-- [**757**星][20d] [Go] [thoughtworks/talisman](https://github.com/thoughtworks/talisman) By hooking into the pre-push hook provided by Git, Talisman validates the outgoing changeset for things that look suspicious - such as authorization tokens and private keys.
-- [**757**星][1m] [Py] [snovvcrash/usbrip](https://github.com/snovvcrash/usbrip) Simple CLI forensics tool for tracking USB device artifacts (history of USB events) on GNU/Linux
-- [**757**星][18d] [Py] [mubix/shellshocker-pocs](https://github.com/mubix/shellshocker-pocs) Collection of Proof of Concepts and Potential Targets for #ShellShocker
-- [**756**星][8m] [Py] [misterbianco/boopsuite](https://github.com/MisterBianco/BoopSuite) 无线审计与安全测试
-- [**756**星][2m] [Py] [ashutosh1206/crypton](https://github.com/ashutosh1206/crypton) Library consisting of explanation and implementation of all the existing attacks on various Encryption Systems, Digital Signatures, Authentication methods along with example challenges from CTFs
-- [**755**星][3y] [masatokinugawa/filterbypass](https://github.com/masatokinugawa/filterbypass) 浏览器XSS 过滤绕过清单
-- [**754**星][1y] [Py] [greatsct/greatsct](https://github.com/greatsct/greatsct) The project is called Great SCT (Great Scott). Great SCT is an open source project to generate application white list bypasses. This tool is intended for BOTH red and blue team.
-- [**754**星][3y] [Py] [eastee/rebreakcaptcha](https://github.com/eastee/rebreakcaptcha) A logic vulnerability, dubbed ReBreakCaptcha, which lets you easily bypass Google's ReCaptcha v2 anywhere on the web
+- [**761**星][20d] [Py] [mubix/shellshocker-pocs](https://github.com/mubix/shellshocker-pocs) Collection of Proof of Concepts and Potential Targets for #ShellShocker
+- [**761**星][3m] [jakejarvis/awesome-shodan-queries](https://github.com/jakejarvis/awesome-shodan-queries)
+- [**760**星][4m] [Py] [s0md3v/hash-buster](https://github.com/s0md3v/Hash-Buster) Crack hashes in seconds.
+- [**760**星][8m] [Py] [misterbianco/boopsuite](https://github.com/MisterBianco/BoopSuite) 无线审计与安全测试
+- [**760**星][22d] [Go] [thoughtworks/talisman](https://github.com/thoughtworks/talisman) By hooking into the pre-push hook provided by Git, Talisman validates the outgoing changeset for things that look suspicious - such as authorization tokens and private keys.
+- [**760**星][1m] [Py] [snovvcrash/usbrip](https://github.com/snovvcrash/usbrip) Simple CLI forensics tool for tracking USB device artifacts (history of USB events) on GNU/Linux
+- [**760**星][5m] [Py] [lgandx/pcredz](https://github.com/lgandx/pcredz) This tool extracts Credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, SMTP, FTP, IMAP, etc from a pcap file or from a live interface.
+- [**760**星][4m] [Go] [haccer/subjack](https://github.com/haccer/subjack) 异步多线程扫描子域列表,识别能够被劫持的子域。Go 编写
+- [**759**星][3y] [masatokinugawa/filterbypass](https://github.com/masatokinugawa/filterbypass) 浏览器XSS 过滤绕过清单
+- [**756**星][1m] [Py] [nekmo/dirhunt](https://github.com/nekmo/dirhunt) Web爬虫, 针对搜索和分析路径做了优化
+- [**756**星][1y] [Py] [greatsct/greatsct](https://github.com/greatsct/greatsct) 生成绕过常见防病毒解决方案和应用程序白名单解决方案的metasploit payload
+- [**755**星][3y] [Py] [eastee/rebreakcaptcha](https://github.com/eastee/rebreakcaptcha) A logic vulnerability, dubbed ReBreakCaptcha, which lets you easily bypass Google's ReCaptcha v2 anywhere on the web
+- [**755**星][2d] [Go] [banzaicloud/bank-vaults](https://github.com/banzaicloud/bank-vaults) A Vault swiss-army knife: a K8s operator, Go client with automatic token renewal, automatic configuration, multiple unseal options and more. A CLI tool to init, unseal and configure Vault (auth methods, secret engines). Direct secret injection into Pods.
+- [**754**星][6d] [Ruby] [rubysec/ruby-advisory-db](https://github.com/rubysec/ruby-advisory-db) A database of vulnerable Ruby Gems
+- [**753**星][4m] [Py] [threatexpress/domainhunter](https://github.com/threatexpress/domainhunter) Checks expired domains for categorization/reputation and Archive.org history to determine good candidates for phishing and C2 domain names
- [**753**星][2y] [Py] [redballoonshenanigans/monitordarkly](https://github.com/redballoonshenanigans/monitordarkly) Poc, Presentation of Monitor OSD Exploitation, and shenanigans of high quality.
-- [**752**星][7m] [Py] [gkbrk/slowloris](https://github.com/gkbrk/slowloris) Low bandwidth DoS tool. Slowloris rewrite in Python.
-- [**751**星][1m] [Py] [nekmo/dirhunt](https://github.com/nekmo/dirhunt) Web爬虫, 针对搜索和分析路径做了优化
-- [**751**星][17d] [Py] [korcankaraokcu/pince](https://github.com/korcankaraokcu/pince) A reverse engineering tool that'll supply the place of Cheat Engine for linux
-- [**751**星][10m] [PowerShell] [davehull/kansa](https://github.com/davehull/kansa) A Powershell incident response framework
-- [**750**星][22d] [Ruby] [rubysec/ruby-advisory-db](https://github.com/rubysec/ruby-advisory-db) A database of vulnerable Ruby Gems
+- [**753**星][4m] [Shell] [nahamsec/lazyrecon](https://github.com/nahamsec/lazyrecon) 侦查(reconnaissance)过程自动化脚本, 可自动使用Sublist3r/certspotter获取子域名, 调用nmap/dirsearch等
+- [**753**星][19d] [Py] [korcankaraokcu/pince](https://github.com/korcankaraokcu/pince) A reverse engineering tool that'll supply the place of Cheat Engine for linux
+- [**752**星][5d] [C] [wolfssl/wolfssl](https://github.com/wolfssl/wolfssl) wolfSSL (formerly CyaSSL) is a small, fast, portable implementation of TLS/SSL for embedded devices to the cloud. wolfSSL supports up to TLS 1.3!
+- [**752**星][10m] [PS] [davehull/kansa](https://github.com/davehull/kansa) A Powershell incident response framework
+- [**751**星][2d] [Py] [rajkumrdusad/tool-x](https://github.com/rajkumrdusad/tool-x) Tool-X is a kali linux hacking Tool installer. Tool-X developed for termux and other android terminals. using Tool-X you can install almost 370+ hacking tools in termux app and other linux based distributions.
+- [**751**星][23d] [Java] [owasp/securityshepherd](https://github.com/owasp/securityshepherd) Web and mobile application security training platform
+- [**749**星][15d] [HTML] [tennc/fuzzdb](https://github.com/tennc/fuzzdb) 一个fuzzdb扩展库
- [**749**星][2y] [PHP] [sektioneins/pcc](https://github.com/sektioneins/pcc) PHP 安全配置检查器
-- [**749**星][8d] [Go] [liamg/tfsec](https://github.com/liamg/tfsec)
-- [**748**星][4m] [Py] [threatexpress/domainhunter](https://github.com/threatexpress/domainhunter) Checks expired domains for categorization/reputation and Archive.org history to determine good candidates for phishing and C2 domain names
+- [**748**星][2y] [Go] [pforemski/dingo](https://github.com/pforemski/dingo) A DNS client in Go that supports Google DNS over HTTPS
- [**748**星][2y] [Py] [d35m0nd142/lfisuite](https://github.com/d35m0nd142/lfisuite) Totally Automatic LFI Exploiter (+ Reverse Shell) and Scanner
-- [**747**星][2y] [Go] [pforemski/dingo](https://github.com/pforemski/dingo) A DNS client in Go that supports Google DNS over HTTPS
-- [**747**星][21d] [Java] [owasp/securityshepherd](https://github.com/owasp/securityshepherd) Web and mobile application security training platform
+- [**748**星][2m] [Py] [buffer/thug](https://github.com/buffer/thug) Python low-interaction honeyclient
- [**747**星][11m] [Py] [infobyte/spoilerwall](https://github.com/infobyte/spoilerwall) Spoilerwall introduces a brand new concept in the field of network hardening. Avoid being scanned by spoiling movies on all your ports!
-- [**746**星][7d] [C] [wolfssl/wolfssl](https://github.com/wolfssl/wolfssl) wolfSSL (formerly CyaSSL) is a small, fast, portable implementation of TLS/SSL for embedded devices to the cloud. wolfSSL supports up to TLS 1.3!
-- [**746**星][13d] [HTML] [tennc/fuzzdb](https://github.com/tennc/fuzzdb) 一个fuzzdb扩展库
-- [**746**星][3m] [jakejarvis/awesome-shodan-queries](https://github.com/jakejarvis/awesome-shodan-queries)
-- [**746**星][4y] [fabiobaroni/awesome-exploit-development](https://github.com/fabiobaroni/awesome-exploit-development) A curated list of resources (books, tutorials, courses, tools and vulnerable applications) for learning about Exploit Development
-- [**745**星][4m] [Shell] [nahamsec/lazyrecon](https://github.com/nahamsec/lazyrecon) 侦查(reconnaissance)过程自动化脚本, 可自动使用Sublist3r/certspotter获取子域名, 调用nmap/dirsearch等
-- [**745**星][3y] [PHP] [googleinurl/scanner-inurlbr](https://github.com/googleinurl/scanner-inurlbr) Advanced search in search engines, enables analysis provided to exploit GET / POST capturing emails & urls, with an internal custom validation junction for each target / url found.
-- [**745**星][2m] [Py] [buffer/thug](https://github.com/buffer/thug) Python low-interaction honeyclient
+- [**747**星][4y] [fabiobaroni/awesome-exploit-development](https://github.com/fabiobaroni/awesome-exploit-development) A curated list of resources (books, tutorials, courses, tools and vulnerable applications) for learning about Exploit Development
+- [**747**星][6m] [Go] [cbeuw/goquiet](https://github.com/cbeuw/goquiet) A Shadowsocks obfuscation plugin utilising domain fronting to evade deep packet inspection
+- [**747**星][4m] [aleenzz/cobalt_strike_wiki](https://github.com/aleenzz/cobalt_strike_wiki) Cobalt Strike系列
+- [**746**星][3y] [PHP] [googleinurl/scanner-inurlbr](https://github.com/googleinurl/scanner-inurlbr) Advanced search in search engines, enables analysis provided to exploit GET / POST capturing emails & urls, with an internal custom validation junction for each target / url found.
+- [**745**星][1y] [Py] [oddcod3/phantom-evasion](https://github.com/oddcod3/phantom-evasion) Python AV evasion tool capable to generate FUD executable even with the most common 32 bit metasploit payload(exe/elf/dmg/apk)
- [**744**星][5y] [C++] [zerovm/zerovm](https://github.com/zerovm/zerovm) Open-source lightweight virtualization platform
-- [**744**星][7d] [Go] [banzaicloud/bank-vaults](https://github.com/banzaicloud/bank-vaults) A Vault swiss-army knife: a K8s operator, Go client with automatic token renewal, automatic configuration, multiple unseal options and more. A CLI tool to init, unseal and configure Vault (auth methods, secret engines). Direct secret injection into Pods.
-- [**742**星][25d] [Go] [activecm/rita](https://github.com/activecm/rita) Real Intelligence Threat Analytics
-- [**741**星][9d] [Py] [rajkumrdusad/tool-x](https://github.com/rajkumrdusad/tool-x) Tool-X is a kali linux hacking Tool installer. Tool-X developed for termux and other android terminals. using Tool-X you can install almost 263 hacking tools in termux app and other linux based distributions.
-- [**741**星][1y] [Py] [oddcod3/phantom-evasion](https://github.com/oddcod3/phantom-evasion) Python AV evasion tool capable to generate FUD executable even with the most common 32 bit metasploit payload(exe/elf/dmg/apk)
-- [**741**星][5m] [C] [neurobin/shc](https://github.com/neurobin/shc) Shell script compiler
-- [**741**星][6m] [Go] [cbeuw/goquiet](https://github.com/cbeuw/goquiet) A Shadowsocks obfuscation plugin utilising domain fronting to evade deep packet inspection
+- [**744**星][1y] [Perl] [moham3driahi/th3inspector](https://github.com/moham3driahi/th3inspector) 多合一信息收集工具
+- [**744**星][8d] [Go] [activecm/rita](https://github.com/activecm/rita) Real Intelligence Threat Analytics
+- [**743**星][5m] [C] [neurobin/shc](https://github.com/neurobin/shc) Shell script compiler
+- [**743**星][27d] [HTML] [m4cs/babysploit](https://github.com/m4cs/babysploit) 渗透测试工具包,旨在使您轻松学习如何使用更大,更复杂的框架(例如Metasploit)
+- [**743**星][11d] [Py] [jendrikseipp/vulture](https://github.com/jendrikseipp/vulture) Find dead Python code
+- [**742**星][1m] [Py] [khast3x/h8mail](https://github.com/khast3x/h8mail) Password Breach Hunting and Email OSINT tool, locally or using premium services. Supports chasing down related email
+- [**741**星][9d] [trimstray/linux-hardening-checklist](https://github.com/trimstray/linux-hardening-checklist) Simple checklist to help you deploying the most important areas of the GNU/Linux production systems - work in progress.
+- [**741**星][4y] [ObjC] [kjcracks/yololib](https://github.com/kjcracks/yololib) dylib injector for mach-o binaries
+- [**741**星][3y] [C] [gentilkiwi/wanakiwi](https://github.com/gentilkiwi/wanakiwi) wanakiwi
+- [**741**星][3d] [C++] [csmith-project/creduce](https://github.com/csmith-project/creduce) C-Reduce, a C program reducer
- [**740**星][1m] [C] [yrp604/rappel](https://github.com/yrp604/rappel) A linux-based assembly REPL for x86, amd64, armv7, and armv8
- [**740**星][6m] [Go] [talkingdata/owl](https://github.com/talkingdata/owl) 企业级分布式监控告警系
-- [**740**星][2y] [C] [gentilkiwi/wanakiwi](https://github.com/gentilkiwi/wanakiwi) wanakiwi
-- [**739**星][20d] [Py] [ricterz/genpass](https://github.com/ricterz/genpass) 中国特色的弱口令生成器
+- [**740**星][1y] [C#] [eladshamir/internal-monologue](https://github.com/eladshamir/internal-monologue) 在不接触LSASS的情况下提取NTLM hash
+- [**739**星][22d] [Py] [ricterz/genpass](https://github.com/ricterz/genpass) 中国特色的弱口令生成器
- [**739**星][2y] [Swift] [novatecconsulting/facerecognition-in-arkit](https://github.com/novatecconsulting/facerecognition-in-arkit) Detects faces using the Vision-API and runs the extracted face through a CoreML-model to identiy the specific persons.
-- [**739**星][4m] [aleenzz/cobalt_strike_wiki](https://github.com/aleenzz/cobalt_strike_wiki) Cobalt Strike系列
-- [**738**星][5m] [PowerShell] [hausec/adape-script](https://github.com/hausec/adape-script) Active Directory Assessment and Privilege Escalation Script
-- [**738**星][30d] [C++] [csmith-project/creduce](https://github.com/csmith-project/creduce) C-Reduce, a C program reducer
-- [**737**星][7d] [trimstray/linux-hardening-checklist](https://github.com/trimstray/linux-hardening-checklist) Simple checklist to help you deploying the most important areas of the GNU/Linux production systems - work in progress.
-- [**737**星][1y] [Perl] [moham3driahi/th3inspector](https://github.com/moham3driahi/th3inspector) All in one tool for Information Gathering
-- [**736**星][25d] [HTML] [m4cs/babysploit](https://github.com/m4cs/babysploit)
-- [**736**星][4y] [Objective-C] [kjcracks/yololib](https://github.com/kjcracks/yololib) dylib injector for mach-o binaries
-- [**735**星][1y] [Py] [uber-common/metta](https://github.com/uber-common/metta) An information security preparedness tool to do adversarial simulation.
-- [**735**星][7m] [sandboxescaper/polarbearrepo](https://github.com/sandboxescaper/polarbearrepo)
-- [**735**星][9d] [Py] [jendrikseipp/vulture](https://github.com/jendrikseipp/vulture) Find dead Python code
-- [**735**星][1y] [C#] [eladshamir/internal-monologue](https://github.com/eladshamir/internal-monologue) Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS
-- [**735**星][6m] [Py] [devttys0/ida](https://github.com/devttys0/ida) IDA插件/脚本/模块收集
+- [**739**星][5m] [PS] [hausec/adape-script](https://github.com/hausec/adape-script) Active Directory Assessment and Privilege Escalation Script
+- [**738**星][1y] [Py] [uber-common/metta](https://github.com/uber-common/metta) An information security preparedness tool to do adversarial simulation.
+- [**738**星][2y] [Py] [toolswatch/vfeed](https://github.com/toolswatch/vfeed) The Correlated CVE Vulnerability And Threat Intelligence Database API
+- [**738**星][15d] [Jupyter Notebook] [bukosabino/ta](https://github.com/bukosabino/ta) Technical Analysis Library using Pandas (Python)
+- [**737**星][3y] [HTML] [xyntax/1000php](https://github.com/xyntax/1000php) 1000个PHP代码审计案例(2016.7以前乌云公开漏洞)
+- [**737**星][5d] [C] [rapid7/metasploit-payloads](https://github.com/rapid7/metasploit-payloads) Unified repository for different Metasploit Framework payloads
+- [**736**星][6m] [C] [unamer/vmware_escape](https://github.com/unamer/vmware_escape) VMwareWorkStation 12.5.5 之前版本的逃逸 Exploit
+- [**736**星][6m] [Py] [devttys0/ida](https://github.com/devttys0/ida) IDA插件/脚本/模块收集
- [wpsearch](https://github.com/devttys0/ida/blob/master/scripts/wpsearch.py) 查找在MIPS WPS checksum实现中常见的立即数
- [md5hash](https://github.com/devttys0/ida/tree/master/modules/md5hash) 纯Python版的MD5 hash实现(IDA的hashlib有问题)
- [alleycat](https://github.com/devttys0/ida/tree/master/plugins/alleycat) 查找向指定的函数内代码块的路径、查找两个或多个函数之间的路径、生成交互式调用图、可编程
@@ -1678,333 +1794,354 @@
- [mipslocalvars](https://github.com/devttys0/ida/tree/master/plugins/mipslocalvars) 对栈上只用于存储寄存器的变量进行命名,简化栈数据分析(MISP)
- [mipsrop](https://github.com/devttys0/ida/tree/master/plugins/mipsrop) 在MIPS可执行代码中搜寻ROP。查找常见的ROP
- [rizzo](https://github.com/devttys0/ida/tree/master/plugins/rizzo) 对2个或多个IDB之间的函数进行识别和重命名,基于:函数签名、对唯一字符串/常量的引用、模糊签名、调用图
+- [**735**星][7m] [sandboxescaper/polarbearrepo](https://github.com/sandboxescaper/polarbearrepo)
+- [**735**星][6d] [C++] [google/shaderc](https://github.com/google/shaderc) A collection of tools, libraries, and tests for Vulkan shader compilation.
+- [**735**星][10d] [Shell] [dokku/dokku-letsencrypt](https://github.com/dokku/dokku-letsencrypt) BETA: Automatic Let's Encrypt TLS Certificate installation for dokku
- [**735**星][1y] [Py] [averagesecurityguy/scripts](https://github.com/averagesecurityguy/scripts) Scripts I use during pentest engagements.
-- [**733**星][6m] [C] [unamer/vmware_escape](https://github.com/unamer/vmware_escape) VMwareWorkStation 12.5.5 之前版本的逃逸 Exploit
-- [**733**星][2y] [Py] [toolswatch/vfeed](https://github.com/toolswatch/vfeed) The Correlated CVE Vulnerability And Threat Intelligence Database API
-- [**732**星][8d] [Shell] [dokku/dokku-letsencrypt](https://github.com/dokku/dokku-letsencrypt) BETA: Automatic Let's Encrypt TLS Certificate installation for dokku
-- [**731**星][27d] [C] [iaik/zombieload](https://github.com/iaik/zombieload) Proof-of-concept for the ZombieLoad attack
-- [**731**星][11d] [C++] [google/shaderc](https://github.com/google/shaderc) A collection of tools, libraries, and tests for Vulkan shader compilation.
+- [**734**星][3d] [TS] [casbin/node-casbin](https://github.com/casbin/node-casbin) An authorization library that supports access control models like ACL, RBAC, ABAC in Node.js
+- [**733**星][2y] [Java] [gcssloop/encrypt](https://github.com/gcssloop/encrypt) [暂停维护]Android 加密解密工具包。
+- [**732**星][3m] [C] [rdesktop/rdesktop](https://github.com/rdesktop/rdesktop) rdesktop is an open source UNIX client for connecting to Windows Remote Desktop Services, capably of natively speaking Remote Desktop Protocol (RDP) in order to present the user's Windows desktop. rdesktop is known to work with Windows server version ranging from NT 4 terminal server to Windows 2012 R2.
+- [**732**星][27d] [HTML] [pagerduty/incident-response-docs](https://github.com/pagerduty/incident-response-docs) PagerDuty's Incident Response Documentation.
+- [**731**星][2y] [JS] [xl7dev/burpsuite](https://github.com/xl7dev/burpsuite) BurpSuite using the document and some extensions
+- [**731**星][9m] [Py] [mr-un1k0d3r/dkmc](https://github.com/mr-un1k0d3r/dkmc) DKMC - Dont kill my cat - Malicious payload evasion tool
+- [**731**星][29d] [C] [iaik/zombieload](https://github.com/iaik/zombieload) ZombieLoad攻击PoC
- [**731**星][4m] [Lua] [cldrn/nmap-nse-scripts](https://github.com/cldrn/nmap-nse-scripts) My collection of nmap NSE scripts
-- [**731**星][13d] [Jupyter Notebook] [bukosabino/ta](https://github.com/bukosabino/ta) Technical Analysis Library using Pandas (Python)
- [**731**星][2y] [Py] [alex/letsencrypt-aws](https://github.com/alex/letsencrypt-aws)
+- [**730**星][2m] [JS] [mandatoryprogrammer/xsshunter](https://github.com/mandatoryprogrammer/xsshunter) The XSS Hunter service - a portable version of XSSHunter.com
- [**730**星][3y] [C++] [ionescu007/lxss](https://github.com/ionescu007/lxss) Win10 Linux 子系统相关
-- [**729**星][1m] [C] [rapid7/metasploit-payloads](https://github.com/rapid7/metasploit-payloads) Unified repository for different Metasploit Framework payloads
-- [**729**星][25d] [HTML] [pagerduty/incident-response-docs](https://github.com/pagerduty/incident-response-docs) PagerDuty's Incident Response Documentation.
+- [**729**星][3d] [C] [pmem/pmdk](https://github.com/pmem/pmdk) Persistent Memory Development Kit
- [**729**星][1y] [Ruby] [chaps-io/access-granted](https://github.com/chaps-io/access-granted) Multi-role and whitelist based authorization gem for Rails (and not only Rails!)
-- [**728**星][2y] [JS] [xl7dev/burpsuite](https://github.com/xl7dev/burpsuite) BurpSuite using the document and some extensions
-- [**727**星][6m] [Py] [ztgrace/changeme](https://github.com/ztgrace/changeme) 默认证书扫描器
-- [**727**星][1m] [C++] [stealth/sshttp](https://github.com/stealth/sshttp) SSH/HTTP(S) multiplexer. Run a webserver and a sshd on the same port w/o changes.
-- [**727**星][2m] [JS] [mandatoryprogrammer/xsshunter](https://github.com/mandatoryprogrammer/xsshunter) The XSS Hunter service - a portable version of XSSHunter.com
-- [**726**星][1y] [Py] [rfunix/pompem](https://github.com/rfunix/pompem) Find exploit tool
-- [**726**星][10m] [PowerShell] [l0ss/grouper](https://github.com/l0ss/grouper) A PowerShell script for helping to find vulnerable settings in AD Group Policy. (deprecated, use Grouper2 instead!)
-- [**726**星][1m] [Py] [khast3x/h8mail](https://github.com/khast3x/h8mail) Password Breach Hunting and Email OSINT tool, locally or using premium services. Supports chasing down related email
-- [**725**星][1y] [Py] [the-robot/sqliv](https://github.com/the-robot/sqliv) massive SQL injection vulnerability scanner
-- [**725**星][2m] [C] [jedisct1/minisign](https://github.com/jedisct1/minisign) A dead simple tool to sign files and verify digital signatures.
-- [**724**星][21d] [TypeScript] [casbin/node-casbin](https://github.com/casbin/node-casbin) An authorization library that supports access control models like ACL, RBAC, ABAC in Node.js
-- [**723**星][7d] [Py] [globaleaks/globaleaks](https://github.com/globaleaks/globaleaks) The Open-Source Whistleblowing Software
-- [**723**星][6m] [Assembly] [cirosantilli/x86-assembly-cheat](https://github.com/cirosantilli/x86-assembly-cheat) the bulk of the x86 instruction examples with assertions.
-- [**723**星][6m] [Go] [anshumanbh/git-all-secrets](https://github.com/anshumanbh/git-all-secrets) 结合多个开源 git 搜索工具实现的代码审计工具
-- [**722**星][8m] [C] [mempodippy/vlany](https://github.com/mempodippy/vlany) Linux LD_PRELOAD rootkit (x86 and x86_64 architectures)
-- [**721**星][8d] [Perl] [gouveaheitor/nipe](https://github.com/GouveaHeitor/nipe) Nipe is a script to make Tor Network your default gateway.
-- [**721**星][3y] [HTML] [xyntax/1000php](https://github.com/xyntax/1000php) 1000个PHP代码审计案例(2016.7以前乌云公开漏洞)
-- [**721**星][1m] [C++] [facebook/threatexchange](https://github.com/facebook/threatexchange) Share threat information with vetted partners
+- [**728**星][6m] [Py] [ztgrace/changeme](https://github.com/ztgrace/changeme) 默认证书扫描器
+- [**727**星][1y] [Py] [the-robot/sqliv](https://github.com/the-robot/sqliv) massive SQL injection vulnerability scanner
+- [**727**星][10m] [PS] [l0ss/grouper](https://github.com/l0ss/grouper) A PowerShell script for helping to find vulnerable settings in AD Group Policy. (deprecated, use Grouper2 instead!)
+- [**726**星][1m] [C++] [stealth/sshttp](https://github.com/stealth/sshttp) SSH/HTTP(S) multiplexer. Run a webserver and a sshd on the same port w/o changes.
+- [**726**星][2m] [C] [jedisct1/minisign](https://github.com/jedisct1/minisign) A dead simple tool to sign files and verify digital signatures.
+- [**726**星][5d] [Py] [anchore/anchore-engine](https://github.com/anchore/anchore-engine) A service that analyzes docker images and applies user-defined acceptance policies to allow automated container image validation and certification
+- [**725**星][1y] [Py] [rfunix/pompem](https://github.com/rfunix/pompem) Find exploit tool
+- [**725**星][3d] [Py] [globaleaks/globaleaks](https://github.com/globaleaks/globaleaks) The Open-Source Whistleblowing Software
+- [**725**星][6m] [Assembly] [cirosantilli/x86-assembly-cheat](https://github.com/cirosantilli/x86-assembly-cheat) the bulk of the x86 instruction examples with assertions.
+- [**725**星][2d] [Py] [abhinavsingh/proxy.py](https://github.com/abhinavsingh/proxy.py) ⚡⚡⚡Fast, Lightweight, Pluggable, TLS interception capable proxy server focused on Network monitoring, controls & Application development, testing, debugging
+- [**724**星][10d] [Perl] [gouveaheitor/nipe](https://github.com/GouveaHeitor/nipe) Nipe is a script to make Tor Network your default gateway.
+- [**724**星][3m] [Java] [isafeblue/trackray](https://github.com/isafeblue/trackray) 溯光 (TrackRay) 3 beta⚡渗透测试框架(资产扫描|指纹识别|暴力破解|网页爬虫|端口扫描|漏洞扫描|代码审计|AWVS|NMAP|Metasploit|SQLMap)
+- [**724**星][6m] [Go] [anshumanbh/git-all-secrets](https://github.com/anshumanbh/git-all-secrets) 结合多个开源 git 搜索工具实现的代码审计工具
+- [**723**星][8d] [C] [strace/strace](https://github.com/strace/strace) strace is a diagnostic, debugging and instructional userspace utility for Linux
+- [**723**星][8m] [C] [mempodippy/vlany](https://github.com/mempodippy/vlany) Linux LD_PRELOAD rootkit (x86 and x86_64 architectures)
+- [**722**星][2m] [Py] [shawndevans/smbmap](https://github.com/shawndevans/smbmap) SMB枚举
+- [**722**星][1y] [Py] [keystone-engine/keypatch](https://github.com/keystone-engine/keypatch) 汇编/补丁插件, 支持多架构, 基于Keystone引擎
+- [**722**星][1m] [C++] [facebook/threatexchange](https://github.com/facebook/threatexchange) Share threat information with vetted partners
+- [**722**星][3m] [Py] [cloudflare/bpftools](https://github.com/cloudflare/bpftools) BPF Tools - packet analyst toolkit
+- [**721**星][3d] [CSS] [w-digital-scanner/w12scan](https://github.com/w-digital-scanner/w12scan) a network asset discovery engine that can automatically aggregate related assets for analysis and use
+- [**721**星][2m] [JS] [kohgylw/kiftd](https://github.com/kohgylw/kiftd) sky driver & cloud driver open source server application : kiftd . welcome to the home page:
+- [**721**星][1m] [Py] [diyan/pywinrm](https://github.com/diyan/pywinrm) Python实现的WinRM客户端
- [**720**星][6m] [Py] [zyantific/idaskins](https://github.com/zyantific/idaskins) 皮肤插件
-- [**720**星][12m] [Py] [keystone-engine/keypatch](https://github.com/keystone-engine/keypatch) 汇编/补丁插件, 支持多架构, 基于Keystone引擎
-- [**719**星][7d] [C] [pmem/pmdk](https://github.com/pmem/pmdk) Persistent Memory Development Kit
-- [**719**星][9m] [Py] [mr-un1k0d3r/dkmc](https://github.com/mr-un1k0d3r/dkmc) DKMC - Dont kill my cat - Malicious payload evasion tool
-- [**719**星][3m] [Py] [cloudflare/bpftools](https://github.com/cloudflare/bpftools) BPF Tools - packet analyst toolkit
-- [**717**星][11d] [C] [strace/strace](https://github.com/strace/strace) strace is a diagnostic, debugging and instructional userspace utility for Linux
-- [**716**星][10m] [C] [ztane/python-levenshtein](https://github.com/ztane/python-levenshtein) The Levenshtein Python C extension module contains functions for fast computation of Levenshtein distance and string similarity
-- [**716**星][2m] [Py] [shawndevans/smbmap](https://github.com/shawndevans/smbmap) SMBMap is a handy SMB enumeration tool
+- [**720**星][10m] [C] [ztane/python-levenshtein](https://github.com/ztane/python-levenshtein) The Levenshtein Python C extension module contains functions for fast computation of Levenshtein distance and string similarity
+- [**719**星][7d] [Py] [skelsec/pypykatz](https://github.com/skelsec/pypykatz) 纯Python实现的Mimikatz
+- [**719**星][7m] [C] [meyerd/n2n](https://github.com/meyerd/n2n) A development branch of the n2n p2p vpn software
+- [**718**星][1y] [Shell] [c0ny1/vulstudy](https://github.com/c0ny1/vulstudy) 使用docker快速搭建各大漏洞学习平台,目前可以一键搭建12个平台。
+- [**717**星][1y] [JS] [melonproject/oyente](https://github.com/melonproject/oyente) An Analysis Tool for Smart Contracts
+- [**716**星][8d] [voorivex/pentest-guide](https://github.com/voorivex/pentest-guide) 基于OWASP的渗透测试指南,包括测试案例,资源和示例。
- [**716**星][2y] [Py] [madeye/sssniff](https://github.com/madeye/sssniff) sssniff:ShadowSocks流量嗅探
-- [**715**星][1y] [JS] [melonproject/oyente](https://github.com/melonproject/oyente) An Analysis Tool for Smart Contracts
+- [**715**星][1m] [streaak/keyhacks](https://github.com/streaak/keyhacks) Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.
- [**715**星][2y] [kristate/krackinfo](https://github.com/kristate/krackinfo) Vendor Response Matrix for KRACK WPA2 (Key Reinstallation Attack)
+- [**715**星][10d] [Py] [f-secure/see](https://github.com/f-secure/see) 在安全环境中构建测试自动化的框架
+- [**715**星][2m] [Java] [col-e/recaf](https://github.com/col-e/recaf) A modern Java bytecode editor
+- [**714**星][2m] [HTML] [j00ru/windows-syscalls](https://github.com/j00ru/windows-syscalls) Windows 系统调用表(NT/2000/XP/2003/Vista/2008/7/2012/8/10)
- [**714**星][11m] [PHP] [defuse/password-hashing](https://github.com/defuse/password-hashing) Password hashing code.
-- [**713**星][3m] [Java] [isafeblue/trackray](https://github.com/isafeblue/trackray) 溯光 (TrackRay) 3 beta⚡渗透测试框架(资产扫描|指纹识别|暴力破解|网页爬虫|端口扫描|漏洞扫描|代码审计|AWVS|NMAP|Metasploit|SQLMap)
-- [**713**星][7d] [Py] [anchore/anchore-engine](https://github.com/anchore/anchore-engine) A service that analyzes docker images and applies user-defined acceptance policies to allow automated container image validation and certification
+- [**714**星][1y] [Java] [d3vilbug/hackbar](https://github.com/d3vilbug/hackbar) HackBar plugin for Burpsuite
+- [**713**星][4m] [Py] [rhinosecuritylabs/security-research](https://github.com/rhinosecuritylabs/security-research) Exploits written by the Rhino Security Labs team
+- [**713**星][3d] [Py] [idapython/src](https://github.com/idapython/src) IDAPython源码
- [**713**星][5m] [Py] [adamlaurie/rfidiot](https://github.com/adamlaurie/rfidiot) python RFID / NFC library & tools
-- [**712**星][1y] [snifer/security-cheatsheets](https://github.com/snifer/security-cheatsheets) A collection of cheatsheets for various infosec tools and topics.
+- [**712**星][1y] [C#] [p3nt4/powershdll](https://github.com/p3nt4/powershdll) 使用rundll32执行PowerShell,绕过软件限制
+- [**712**星][9d] [C] [openvisualcloud/svt-av1](https://github.com/openvisualcloud/svt-av1) Welcome to the GitHub repo for the SVT-AV1! Help us grow the community by subscribing to our SVT-AV1 mailing list!
- [**712**星][3y] [JS] [mozilla/node-client-sessions](https://github.com/mozilla/node-client-sessions) secure sessions stored in cookies
-- [**712**星][2m] [HTML] [j00ru/windows-syscalls](https://github.com/j00ru/windows-syscalls) Windows 系统调用表(NT/2000/XP/2003/Vista/2008/7/2012/8/10)
-- [**712**星][1m] [Py] [diyan/pywinrm](https://github.com/diyan/pywinrm) Python实现的WinRM客户端
-- [**712**星][1y] [Java] [d3vilbug/hackbar](https://github.com/d3vilbug/hackbar) HackBar plugin for Burpsuite v1.0
-- [**712**星][2m] [Java] [col-e/recaf](https://github.com/col-e/recaf) A modern Java bytecode editor
-- [**712**星][7d] [Py] [abhinavsingh/proxy.py](https://github.com/abhinavsingh/proxy.py) ⚡⚡⚡Fast, Lightweight, Pluggable, TLS interception capable proxy server focused on Network monitoring, controls & Application development, testing, debugging
-- [**711**星][3m] [CSS] [w-digital-scanner/w12scan](https://github.com/w-digital-scanner/w12scan) a network asset discovery engine that can automatically aggregate related assets for analysis and use
-- [**711**星][4m] [Py] [rhinosecuritylabs/security-research](https://github.com/rhinosecuritylabs/security-research) Exploits written by the Rhino Security Labs team
+- [**712**星][2d] [Go] [gruntwork-io/cloud-nuke](https://github.com/gruntwork-io/cloud-nuke) 通过检查(删除)其中的所有资源来清理云帐户
+- [**712**星][3d] [C] [aircrack-ng/rtl8812au](https://github.com/aircrack-ng/rtl8812au) RTL8812AU/21AU and RTL8814AU driver with monitor mode and frame injection
+- [**711**星][4d] [C++] [tandasat/hyperplatform](https://github.com/tandasat/hyperplatform) 基于Intel VT-x的虚拟机管理程序,旨在在Windows上提供精简的VM-exit过滤平台
+- [**711**星][1y] [snifer/security-cheatsheets](https://github.com/snifer/security-cheatsheets) A collection of cheatsheets for various infosec tools and topics.
- [**711**星][3y] [C++] [nicehash/nheqminer](https://github.com/nicehash/nheqminer) Equihash miner for NiceHash
-- [**711**星][25d] [Py] [idapython/src](https://github.com/idapython/src) IDAPython源码
-- [**711**星][4m] [Go] [haccer/subjack](https://github.com/haccer/subjack) 异步多线程扫描子域列表,识别能够被劫持的子域。Go 编写
-- [**711**星][8d] [Py] [f-secure/see](https://github.com/f-secure/see) Sandboxed Execution Environment
-- [**710**星][14d] [voorivex/pentest-guide](https://github.com/voorivex/pentest-guide) Penetration tests guide based on OWASP including test cases, resources and examples.
-- [**710**星][7d] [Py] [skelsec/pypykatz](https://github.com/skelsec/pypykatz) 纯Python实现的Mimikatz
-- [**709**星][1y] [C#] [p3nt4/powershdll](https://github.com/p3nt4/powershdll) Run PowerShell with rundll32. Bypass software restrictions.
-- [**709**星][1m] [JS] [kohgylw/kiftd](https://github.com/kohgylw/kiftd) sky driver & cloud driver open source server application : kiftd . welcome to the home page:
-- [**708**星][17d] [Scala] [linkedin/photon-ml](https://github.com/linkedin/photon-ml) A scalable machine learning library on Apache Spark
-- [**708**星][3m] [C++] [tandasat/hyperplatform](https://github.com/tandasat/hyperplatform) 基于Intel VT-x的虚拟机管理程序,旨在在Windows上提供精简的VM-exit过滤平台
+- [**710**星][2y] [Java] [rover12421/shakaapktool](https://github.com/rover12421/shakaapktool) ShakaApktool
+- [**709**星][2y] [HTML] [rapid7/hackazon](https://github.com/rapid7/hackazon) A modern vulnerable web app
+- [**709**星][2m] [C] [nuand/bladerf](https://github.com/nuand/bladerf) bladeRF USB 3.0 Superspeed Software Defined Radio Source Code
+- [**709**星][2y] [Py] [google/ssl_logger](https://github.com/google/ssl_logger) 解密并记录进程的SSL 流程
+- [**709**星][4m] [bit4woo/python_sec](https://github.com/bit4woo/python_sec) python安全和代码审计相关资料收集 resource collection of python security and code review
+- [**708**星][2d] [ly0n/awesome-robotic-tooling](https://github.com/ly0n/awesome-robotic-tooling) Robotic resources and tools for professional robotic development with ROS in C++ and Python.
+- [**708**星][19d] [Scala] [linkedin/photon-ml](https://github.com/linkedin/photon-ml) A scalable machine learning library on Apache Spark
- [**708**星][2y] [Go] [sidkshatriya/dontbug](https://github.com/sidkshatriya/dontbug) Dontbug is a reverse debugger for PHP
-- [**708**星][2y] [Py] [google/ssl_logger](https://github.com/google/ssl_logger) 解密并记录进程的SSL 流程
-- [**708**星][1y] [Shell] [c0ny1/vulstudy](https://github.com/c0ny1/vulstudy) 使用docker快速搭建各大漏洞学习平台,目前可以一键搭建12个平台。
-- [**707**星][1m] [streaak/keyhacks](https://github.com/streaak/keyhacks) Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.
-- [**707**星][2y] [Java] [rover12421/shakaapktool](https://github.com/rover12421/shakaapktool) ShakaApktool
-- [**707**星][2y] [HTML] [rapid7/hackazon](https://github.com/rapid7/hackazon) A modern vulnerable web app
-- [**707**星][2m] [C] [nuand/bladerf](https://github.com/nuand/bladerf) bladeRF USB 3.0 Superspeed Software Defined Radio Source Code
+- [**708**星][7m] [Py] [giacomolaw/keylogger](https://github.com/giacomolaw/keylogger) A simple keylogger for Windows, Linux and Mac
+- [**707**星][5d] [Go] [pomerium/pomerium](https://github.com/pomerium/pomerium) Pomerium is an identity-aware access proxy.
+- [**707**星][3m] [Py] [sevagas/macro_pack](https://github.com/sevagas/macro_pack) 自动生成并混淆MS 文档, 用于渗透测试、演示、社会工程评估等
- [**707**星][11m] [HTML] [juansacco/exploitpack](https://github.com/juansacco/exploitpack) Exploit Pack -The next generation exploit framework
-- [**707**星][7m] [Py] [giacomolaw/keylogger](https://github.com/giacomolaw/keylogger) A simple keylogger for Windows, Linux and Mac
-- [**706**星][12d] [C] [openvisualcloud/svt-av1](https://github.com/openvisualcloud/svt-av1) Welcome to the GitHub repo for the SVT-AV1! Help us grow the community by subscribing to our SVT-AV1 mailing list!
-- [**706**星][21d] [Go] [gruntwork-io/cloud-nuke](https://github.com/gruntwork-io/cloud-nuke) A tool for cleaning up your cloud accounts by nuking (deleting) all resources within it
-- [**706**星][4m] [JS] [crits/crits](https://github.com/crits/crits) 恶意软件和威胁仓库,利用其他开源软件为分析师和安全专家构建威胁防御的统一工具
-- [**704**星][3y] [PowerShell] [gimini/powermemory](https://github.com/gimini/powermemory) Exploit the credentials present in files and memory
-- [**704**星][4m] [bit4woo/python_sec](https://github.com/bit4woo/python_sec) python安全和代码审计相关资料收集 resource collection of python security and code review
-- [**703**星][2y] [PowerShell] [samratashok/kautilya](https://github.com/samratashok/kautilya) Kautilya - Tool for easy use of Human Interface Devices for offensive security and penetration testing.
-- [**703**星][10d] [C] [aircrack-ng/rtl8812au](https://github.com/aircrack-ng/rtl8812au) RTL8812AU/21AU and RTL8814AU driver with monitor mode and frame injection
-- [**701**星][4y] [Py] [androbugs/androbugs_framework](https://github.com/androbugs/androbugs_framework) AndroBugs Framework is an efficient Android vulnerability scanner that helps developers or hackers find potential security vulnerabilities in Android applications. No need to install on Windows.
+- [**707**星][5m] [JS] [crits/crits](https://github.com/crits/crits) 恶意软件和威胁仓库,利用其他开源软件为分析师和安全专家构建威胁防御的统一工具
+- [**706**星][27d] [PHP] [ssl/ezxss](https://github.com/ssl/ezxss) ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.
+- [**705**星][3y] [PS] [gimini/powermemory](https://github.com/gimini/powermemory) Exploit the credentials present in files and memory
+- [**705**星][4y] [Py] [androbugs/androbugs_framework](https://github.com/androbugs/androbugs_framework) AndroBugs Framework is an efficient Android vulnerability scanner that helps developers or hackers find potential security vulnerabilities in Android applications. No need to install on Windows.
+- [**704**星][5d] [hackplayers/hackthebox-writeups](https://github.com/hackplayers/hackthebox-writeups) Writeups for HacktheBox 'boot2root' machines
+- [**704**星][2y] [PS] [samratashok/kautilya](https://github.com/samratashok/kautilya) 可为人机接口设备提供各种有效Payload,这可能有助于在渗透测试期间破坏计算机
+- [**704**星][9d] [Py] [mushorg/conpot](https://github.com/mushorg/conpot) ICS/SCADA honeypot
+- [**703**星][1y] [Jupyter Notebook] [anishathalye/obfuscated-gradients](https://github.com/anishathalye/obfuscated-gradients) Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples
+- [**702**星][4m] [C++] [darthton/xenos](https://github.com/darthton/xenos) Windows DLL 注入器
+- [**701**星][5y] [C] [malcolmrobb/dump1090](https://github.com/malcolmrobb/dump1090) Dump1090 is a simple Mode S decoder for RTLSDR devices
+- [**701**星][1m] [C++] [cmu-sei/pharos](https://github.com/cmu-sei/pharos) 二进制程序的自动化静态分析工具
- [**700**星][2y] [yichengchen/shadowsocksx-r](https://github.com/yichengchen/shadowsocksx-r) Next Generation of ShadowsocksX
-- [**700**星][3m] [Py] [sevagas/macro_pack](https://github.com/sevagas/macro_pack) 自动生成并混淆MS 文档, 用于渗透测试、演示、社会工程评估等
-- [**700**星][1m] [C++] [cmu-sei/pharos](https://github.com/cmu-sei/pharos) 二进制程序的自动化静态分析工具
-- [**699**星][5y] [C] [malcolmrobb/dump1090](https://github.com/malcolmrobb/dump1090) Dump1090 is a simple Mode S decoder for RTLSDR devices
-- [**699**星][8d] [Ruby] [intrigueio/intrigue-core](https://github.com/intrigueio/intrigue-core) 外部攻击面发现框架,自动化OSINT
-- [**699**星][4m] [C++] [darthton/xenos](https://github.com/darthton/xenos) Windows DLL 注入器
-- [**698**星][4y] [Py] [gunnery/gunnery](https://github.com/gunnery/gunnery) Remote task execution tool
-- [**698**星][1y] [Jupyter Notebook] [anishathalye/obfuscated-gradients](https://github.com/anishathalye/obfuscated-gradients) Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples
-- [**697**星][13d] [C#] [mganss/htmlsanitizer](https://github.com/mganss/htmlsanitizer) Cleans HTML to avoid XSS attacks
-- [**697**星][1y] [Py] [bugscanteam/dnslog](https://github.com/bugscanteam/dnslog) 监控 DNS 解析记录和 HTTP 访问记录
+- [**700**星][15d] [C#] [multipoolminer/multipoolminer](https://github.com/multipoolminer/multipoolminer) Monitors crypto mining pools in real-time in order to find the most profitable for your machine. Controls any miner that is available via command line.
+- [**699**星][8d] [C#] [mganss/htmlsanitizer](https://github.com/mganss/htmlsanitizer) Cleans HTML to avoid XSS attacks
+- [**699**星][10d] [Ruby] [intrigueio/intrigue-core](https://github.com/intrigueio/intrigue-core) 外部攻击面发现框架,自动化OSINT
+- [**699**星][4y] [Py] [gunnery/gunnery](https://github.com/gunnery/gunnery) Remote task execution tool
+- [**699**星][1y] [Py] [bugscanteam/dnslog](https://github.com/bugscanteam/dnslog) 监控 DNS 解析记录和 HTTP 访问记录
+- [**698**星][22d] [C] [scanmem/scanmem](https://github.com/scanmem/scanmem) memory scanner for Linux
+- [**698**星][2m] [Py] [mjg59/python-broadlink](https://github.com/mjg59/python-broadlink) Python模块,用于控制Broadlink RM2 / 3(Pro)遥控器、A1传感器平台和SP2 / 3智能插头
+- [**697**星][8m] [C] [hfiref0x/tdl](https://github.com/hfiref0x/tdl) Driver loader for bypassing Windows x64 Driver Signature Enforcement
- [**697**星][4m] [CSS] [ajinabraham/cmsscan](https://github.com/ajinabraham/cmsscan) Scan Wordpress, Drupal, Joomla, vBulletin websites for Security issues
-- [**696**星][25d] [PHP] [ssl/ezxss](https://github.com/ssl/ezxss) ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.
-- [**696**星][20d] [C] [scanmem/scanmem](https://github.com/scanmem/scanmem) memory scanner for Linux
-- [**696**星][8d] [Py] [mushorg/conpot](https://github.com/mushorg/conpot) ICS/SCADA honeypot
-- [**694**星][2y] [Py] [sensepost/det](https://github.com/sensepost/det) (extensible) Data Exfiltration Toolkit (DET)
-- [**694**星][2m] [Py] [mjg59/python-broadlink](https://github.com/mjg59/python-broadlink) Python module for controlling Broadlink RM2/3 (Pro) remote controls, A1 sensor platforms and SP2/3 smartplugs
-- [**694**星][8m] [C] [hfiref0x/tdl](https://github.com/hfiref0x/tdl) Driver loader for bypassing Windows x64 Driver Signature Enforcement
-- [**693**星][11d] [hackplayers/hackthebox-writeups](https://github.com/hackplayers/hackthebox-writeups) Writeups for HacktheBox 'boot2root' machines
-- [**693**星][5m] [C++] [stealth/opmsg](https://github.com/stealth/opmsg) opmsg message encryption
+- [**696**星][2m] [C#] [harleyqu1nn/aggressorscripts](https://github.com/harleyqu1nn/aggressorscripts) Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources
+- [**695**星][3m] [uknowsec/active-directory-pentest-notes](https://github.com/uknowsec/active-directory-pentest-notes) 个人域渗透学习笔记
+- [**695**星][5m] [C++] [stealth/opmsg](https://github.com/stealth/opmsg) opmsg message encryption
+- [**695**星][2y] [Py] [sensepost/det](https://github.com/sensepost/det) 可以同时使用单个或多个通道执行数据渗透的PoC
+- [**693**星][1m] [YARA] [rednaga/apkid](https://github.com/rednaga/apkid) Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android
- [**693**星][3m] [netflix/security-bulletins](https://github.com/netflix/security-bulletins) Security Bulletins that relate to Netflix Open Source
-- [**693**星][2m] [C#] [harleyqu1nn/aggressorscripts](https://github.com/harleyqu1nn/aggressorscripts) Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources
+- [**693**星][2m] [Go] [dliv3/venom](https://github.com/dliv3/venom) Venom - A Multi-hop Proxy for Penetration Testers
- [**692**星][3y] [Ruby] [phatworx/devise_security_extension](https://github.com/phatworx/devise_security_extension) An enterprise security extension for devise, trying to meet industrial standard security demands for web applications.
-- [**691**星][3m] [uknowsec/active-directory-pentest-notes](https://github.com/uknowsec/active-directory-pentest-notes) 个人域渗透学习笔记
-- [**691**星][8m] [JS] [zyfworks/steam-key](https://github.com/zyfworks/steam-key) Steam远程激活
-- [**691**星][1m] [YARA] [rednaga/apkid](https://github.com/rednaga/apkid) Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android
-- [**689**星][5m] [C++] [google/certificate-transparency](https://github.com/google/certificate-transparency) Auditing for TLS certificates.
-- [**688**星][5y] [C] [vmt/udis86](https://github.com/vmt/udis86) Disassembler Library for x86 and x86-64
+- [**692**星][3d] [HTML] [owasp/asvs](https://github.com/owasp/asvs) Application Security Verification Standard
+- [**691**星][15d] [C] [shadow/shadow](https://github.com/shadow/shadow) shadow:独特的离散事件(discrete-event)网络仿真器/模拟器,可以通过模拟互联网拓扑运行真正的应用程序,如 Tor 和 Bitcoin
+- [**691**星][5m] [C++] [google/certificate-transparency](https://github.com/google/certificate-transparency) Auditing for TLS certificates.
+- [**691**星][2m] [C++] [bareflank/hypervisor](https://github.com/bareflank/hypervisor) lightweight hypervisor SDK written in C++ with support for Windows, Linux and UEFI
+- [**690**星][8m] [JS] [zyfworks/steam-key](https://github.com/zyfworks/steam-key) Steam远程激活
+- [**690**星][5y] [C] [vmt/udis86](https://github.com/vmt/udis86) Disassembler Library for x86 and x86-64
+- [**690**星][2d] [C] [powershell/openssh-portable](https://github.com/powershell/openssh-portable) Portable OpenSSH, all Win32-OpenSSH releases and wiki are managed at
+- [**690**星][7m] [Py] [mr-un1k0d3r/powerlessshell](https://github.com/mr-un1k0d3r/powerlessshell) 依靠MSBuild.exe远程执行PowerShell脚本和命令
+- [**689**星][28d] [Java] [wrbug/developerhelper](https://github.com/wrbug/developerhelper) 帮助开发人员快速开发的工具
+- [**688**星][6m] [Py] [mobier/shadowsocksr-speed](https://github.com/mobier/shadowsocksr-speed) SSR 批量测试节点有效带宽
- [**688**星][7y] [Ruby] [juuso/bozocrack](https://github.com/juuso/bozocrack) A silly & effective MD5 cracker in Ruby
-- [**687**星][7m] [Py] [mr-un1k0d3r/powerlessshell](https://github.com/mr-un1k0d3r/powerlessshell) Run PowerShell command without invoking powershell.exe
-- [**687**星][2m] [Go] [dliv3/venom](https://github.com/dliv3/venom) Venom - A Multi-hop Proxy for Penetration Testers
-- [**686**星][21d] [OCaml] [moby/vpnkit](https://github.com/moby/vpnkit) A toolkit for embedding VPN capabilities in your application
-- [**686**星][7d] [C] [powershell/openssh-portable](https://github.com/powershell/openssh-portable) Portable OpenSSH, all Win32-OpenSSH releases and wiki are managed at
-- [**686**星][7d] [Java] [peergos/peergos](https://github.com/peergos/peergos) A decentralised, secure file storage and social network
-- [**686**星][8m] [Py] [kiorky/spynner](https://github.com/kiorky/spynner) Programmatic web browsing module with AJAX support for Python
-- [**685**星][2m] [C#] [cobbr/sharpsploit](https://github.com/cobbr/sharpsploit) SharpSploit is a .NET post-exploitation library written in C#
-- [**685**星][8m] [Shell] [1n3/brutex](https://github.com/1n3/brutex) Automatically brute force all services running on a target.
-- [**684**星][1y] [C] [saelo/pwn2own2018](https://github.com/saelo/pwn2own2018) Pwn2Own 2018 Safari+macOS 漏洞利用链
-- [**684**星][10m] [Py] [merrychap/shellen](https://github.com/merrychap/shellen) 交互式Shellcode开发环境
-- [**682**星][9m] [Shell] [dmarmor/epichrome](https://github.com/dmarmor/epichrome) An application (Epichrome.app) and Chrome extension (Epichrome Helper) to create and use Chrome-based SSBs on Mac OSX.
-- [**681**星][12m] [HTML] [zhengmin1989/myarticles](https://github.com/zhengmin1989/myarticles) 蒸米的文章(iOS冰与火之歌系列,一步一步学ROP系列,安卓动态调试七种武器系列等)
-- [**681**星][22d] [HTML] [owasp/asvs](https://github.com/owasp/asvs) Application Security Verification Standard
-- [**681**星][5m] [leezj9671/pentest_interview](https://github.com/leezj9671/pentest_interview) 个人准备渗透测试和安全面试的经验之谈,和去部分厂商的面试题,干货真的满满~
-- [**680**星][10m] [Objective-C] [unixpickle/jamwifi](https://github.com/unixpickle/jamwifi) A GUI, easy to use WiFi network jammer for Mac OS X
-- [**679**星][17d] [Py] [rurik/noriben](https://github.com/rurik/noriben) Portable, Simple, Malware Analysis Sandbox
-- [**679**星][1m] [Py] [iceyhexman/onlinetools](https://github.com/iceyhexman/onlinetools) 在线cms识别|信息泄露|工控|系统|物联网安全|cms漏洞扫描|nmap端口扫描|子域名获取|待续..
-- [**679**星][11d] [Py] [grayddq/gscan](https://github.com/grayddq/gscan) 本程序旨在为安全应急响应人员对Linux主机排查时提供便利,实现主机侧Checklist的自动全面化检测,根据检测结果自动数据聚合,进行黑客攻击路径溯源。
-- [**679**星][2m] [andrewjkerr/security-cheatsheets](https://github.com/andrewjkerr/security-cheatsheets)
-- [**678**星][2m] [Swift] [yenom/bitcoinkit](https://github.com/yenom/BitcoinKit) Bitcoin protocol toolkit for Swift
+- [**688**星][13d] [Py] [grayddq/gscan](https://github.com/grayddq/gscan) 本程序旨在为安全应急响应人员对Linux主机排查时提供便利,实现主机侧Checklist的自动全面化检测,根据检测结果自动数据聚合,进行黑客攻击路径溯源。
+- [**688**星][2m] [C#] [cobbr/sharpsploit](https://github.com/cobbr/sharpsploit) SharpSploit is a .NET post-exploitation library written in C#
+- [**687**星][2d] [Java] [peergos/peergos](https://github.com/peergos/peergos) A decentralised, secure file storage and social network
+- [**687**星][8m] [Py] [kiorky/spynner](https://github.com/kiorky/spynner) Programmatic web browsing module with AJAX support for Python
+- [**687**星][2y] [C] [1n3/privesc](https://github.com/1n3/privesc) A collection of Windows, Linux and MySQL privilege escalation scripts and exploits.
+- [**687**星][8m] [Shell] [1n3/brutex](https://github.com/1n3/brutex) Automatically brute force all services running on a target.
+- [**686**星][23d] [OCaml] [moby/vpnkit](https://github.com/moby/vpnkit) A toolkit for embedding VPN capabilities in your application
+- [**686**星][10m] [Py] [merrychap/shellen](https://github.com/merrychap/shellen) 交互式Shellcode开发环境
+- [**686**星][5m] [leezj9671/pentest_interview](https://github.com/leezj9671/pentest_interview) 个人准备渗透测试和安全面试的经验之谈,和去部分厂商的面试题,干货真的满满~
+- [**685**星][1y] [C] [saelo/pwn2own2018](https://github.com/saelo/pwn2own2018) Pwn2Own 2018 Safari+macOS 漏洞利用链
+- [**685**星][1m] [Py] [iceyhexman/onlinetools](https://github.com/iceyhexman/onlinetools) 在线cms识别|信息泄露|工控|系统|物联网安全|cms漏洞扫描|nmap端口扫描|子域名获取|待续..
+- [**683**星][12m] [HTML] [zhengmin1989/myarticles](https://github.com/zhengmin1989/myarticles) 蒸米的文章(iOS冰与火之歌系列,一步一步学ROP系列,安卓动态调试七种武器系列等)
+- [**683**星][5y] [C] [antirez/hping](https://github.com/antirez/hping) send custom TCP/IP packets and to display target replies like ping do with ICMP replies
+- [**683**星][2m] [JS] [animir/node-rate-limiter-flexible](https://github.com/animir/node-rate-limiter-flexible) Node.js rate limit requests by key with atomic increments. Protection from DDoS and Brute-Force attacks in process Memory, Redis, MongoDb, Memcached, MySQL, PostgreSQL, Cluster or PM
+- [**681**星][11m] [ObjC] [unixpickle/jamwifi](https://github.com/unixpickle/jamwifi) A GUI, easy to use WiFi network jammer for Mac OS X
+- [**681**星][19d] [Py] [rurik/noriben](https://github.com/rurik/noriben) Portable, Simple, Malware Analysis Sandbox
+- [**680**星][6m] [Py] [paranoidninja/carboncopy](https://github.com/paranoidninja/carboncopy) A tool which creates a spoofed certificate of any online website and signs an Executable for AV Evasion. Works for both Windows and Linux
+- [**680**星][9m] [Shell] [dmarmor/epichrome](https://github.com/dmarmor/epichrome) An application (Epichrome.app) and Chrome extension (Epichrome Helper) to create and use Chrome-based SSBs on Mac OSX.
+- [**680**星][2m] [andrewjkerr/security-cheatsheets](https://github.com/andrewjkerr/security-cheatsheets)
+- [**679**星][2m] [Swift] [yenom/bitcoinkit](https://github.com/yenom/BitcoinKit) Bitcoin protocol toolkit for Swift
+- [**679**星][1y] [PS] [arvanaghi/sessiongopher](https://github.com/Arvanaghi/SessionGopher) 使用WMI为远程访问工具(如WinSCP,PuTTY,SuperPuTTY,FileZilla和Microsoft远程桌面)提取保存的会话信息。PowerShell编写
+- [**678**星][2d] [Java] [ron190/jsql-injection](https://github.com/ron190/jsql-injection) Java编写的自动化 SQL 注入工具,跨平台
+- [**678**星][2m] [Go] [pquerna/otp](https://github.com/pquerna/otp) 一次性密码工具,Golang编写
+- [**678**星][2d] [Kotlin] [mygod/vpnhotspot](https://github.com/mygod/vpnhotspot) Share your VPN connection over hotspot or repeater! (root required)
- [**678**星][2y] [Py] [kkevsterrr/backdoorme](https://github.com/kkevsterrr/backdoorme) powerful auto-backdooring utility
-- [**677**星][5m] [Py] [mobier/shadowsocksr-speed](https://github.com/mobier/shadowsocksr-speed) SSR 批量测试节点有效带宽
-- [**676**星][8d] [Java] [ron190/jsql-injection](https://github.com/ron190/jsql-injection) Java编写的自动化 SQL 注入工具,跨平台
-- [**676**星][5y] [C] [antirez/hping](https://github.com/antirez/hping) send custom TCP/IP packets and to display target replies like ping do with ICMP replies
-- [**676**星][11d] [XSLT] [adon90/pentest_compilation](https://github.com/adon90/pentest_compilation) Compilation of commands, tips and scripts that helped me throughout Vulnhub, Hackthebox, OSCP and real scenarios
-- [**675**星][26d] [Java] [wrbug/developerhelper](https://github.com/wrbug/developerhelper) 帮助开发人员快速开发的工具
-- [**675**星][27d] [ptresearch/attackdetection](https://github.com/ptresearch/attackdetection) Attack Detection
-- [**674**星][7m] [PHP] [ircmaxell/php-compiler](https://github.com/ircmaxell/php-compiler) A compiler. For PHP
-- [**674**星][7m] [C] [google/boringssl](https://github.com/google/boringssl) Mirror of BoringSSL
-- [**673**星][1y] [PowerShell] [arvanaghi/sessiongopher](https://github.com/Arvanaghi/SessionGopher) SessionGopher is a PowerShell tool that uses WMI to extract saved session information for remote access tools such as WinSCP, PuTTY, SuperPuTTY, FileZilla, and Microsoft Remote Desktop. It can be run remotely or locally.
-- [**673**星][2m] [Go] [pquerna/otp](https://github.com/pquerna/otp) TOTP library for Go
+- [**678**星][3d] [Py] [kevthehermit/pastehunter](https://github.com/kevthehermit/pastehunter) Scanning pastebin with yara rules
+- [**677**星][29d] [ptresearch/attackdetection](https://github.com/ptresearch/attackdetection) 搜索新的漏洞和0day,进行服现并创建PoC exp,以了解这些安全漏洞的工作方式,以及如何在网络层上检测到相关的攻击
+- [**677**星][1m] [Go] [google/gofuzz](https://github.com/google/gofuzz) Fuzz testing for go.
+- [**677**星][13d] [XSLT] [adon90/pentest_compilation](https://github.com/adon90/pentest_compilation) Compilation of commands, tips and scripts that helped me throughout Vulnhub, Hackthebox, OSCP and real scenarios
+- [**676**星][10d] [C] [zerbea/hcxdumptool](https://github.com/zerbea/hcxdumptool) Small tool to capture packets from wlan devices.
+- [**676**星][5m] [C#] [outflanknl/evilclippy](https://github.com/outflanknl/evilclippy) A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows.
+- [**675**星][5d] [C] [google/boringssl](https://github.com/google/boringssl) Mirror of BoringSSL
+- [**674**星][7m] [Java] [pagalaxylab/yahfa](https://github.com/PAGalaxyLab/YAHFA) Yet Another Hook Framework for ART
+- [**674**星][3y] [PHP] [xl7dev/webshell](https://github.com/xl7dev/webshell) Webshell && Backdoor Collection
+- [**674**星][3y] [Batchfile] [ufologist/onekey-decompile-apk](https://github.com/ufologist/onekey-decompile-apk) 一步到位反编译apk工具(onekey decompile apk)
+- [**674**星][1y] [Py] [endgameinc/rta](https://github.com/endgameinc/rta) 根据MITER ATT&CK进行建模,针对恶意tradecraft测试其检测功能。脚本框架
+- [**674**星][1y] [C] [billy-ellis/exploit-challenges](https://github.com/billy-ellis/exploit-challenges) A collection of vulnerable ARM binaries for practicing exploit development
+- [**673**星][2y] [Py] [trycatchhcf/dumpsterfire](https://github.com/trycatchhcf/dumpsterfire) 用于构建自定义的、时间延迟的分布式安全事件,模块化、菜单驱动、跨平台。轻松为Blue&Red Team演习和传感器/警报映射创建自定义事件链。
- [**673**星][8m] [offensive-security/kali-arm-build-scripts](https://github.com/offensive-security/kali-arm-build-scripts) Kali Linux ARM build scripts
-- [**673**星][1m] [Kotlin] [mygod/vpnhotspot](https://github.com/mygod/vpnhotspot) Share your VPN connection over hotspot or repeater! (root required)
-- [**673**星][9d] [Py] [kevthehermit/pastehunter](https://github.com/kevthehermit/pastehunter) Scanning pastebin with yara rules
-- [**673**星][1y] [C] [billy-ellis/exploit-challenges](https://github.com/billy-ellis/exploit-challenges) A collection of vulnerable ARM binaries for practicing exploit development
-- [**672**星][3y] [PHP] [xl7dev/webshell](https://github.com/xl7dev/webshell) Webshell && Backdoor Collection
-- [**672**星][7m] [Go] [honeytrap/honeytrap](https://github.com/honeytrap/honeytrap) 高级蜜罐框架, 可以运行/监控/管理蜜罐. Go语言编写
-- [**671**星][3y] [Batchfile] [ufologist/onekey-decompile-apk](https://github.com/ufologist/onekey-decompile-apk) 一步到位反编译apk工具(onekey decompile apk)
-- [**671**星][6y] [C] [robertdavidgraham/heartleech](https://github.com/robertdavidgraham/heartleech) Demonstrates the "heartbleed" problem using full OpenSSL stack
-- [**671**星][1m] [Go] [google/gofuzz](https://github.com/google/gofuzz) Fuzz testing for go.
+- [**673**星][7m] [PHP] [ircmaxell/php-compiler](https://github.com/ircmaxell/php-compiler) A compiler. For PHP
+- [**673**星][7m] [Go] [honeytrap/honeytrap](https://github.com/honeytrap/honeytrap) 高级蜜罐框架, 可以运行/监控/管理蜜罐. Go语言编写
+- [**672**星][4m] [Py] [v3n0m-scanner/v3n0m-scanner](https://github.com/v3n0m-scanner/v3n0m-scanner) Popular Pentesting scanner in Python3.6 for SQLi/XSS/LFI/RFI and other Vulns
+- [**672**星][22d] [C#] [obfuscar/obfuscar](https://github.com/obfuscar/obfuscar) Open source obfuscation tool for .NET assemblies
+- [**672**星][2m] [Ruby] [mozilla/ssh_scan](https://github.com/mozilla/ssh_scan) A prototype SSH configuration and policy scanner (Blog:
+- [**672**星][7d] [Py] [blackorbird/apt_report](https://github.com/blackorbird/apt_report) Interesting apt report collection and some special ioc express
+- [**671**星][10m] [JS] [theori-io/pwnjs](https://github.com/theori-io/pwnjs) 辅助开发浏览器exploit 的 JS 模块
- [**671**星][5m] [bloodzer0/ossa](https://github.com/bloodzer0/ossa) Open-Source Security Architecture | 开源安全架构
-- [**670**星][7m] [Java] [pagalaxylab/yahfa](https://github.com/PAGalaxyLab/YAHFA) Yet Another Hook Framework for ART
-- [**670**星][2y] [Py] [trycatchhcf/dumpsterfire](https://github.com/trycatchhcf/dumpsterfire) "Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event s…
-- [**670**星][10m] [JS] [theori-io/pwnjs](https://github.com/theori-io/pwnjs) 辅助开发浏览器exploit 的 JS 模块
-- [**670**星][4m] [C#] [outflanknl/evilclippy](https://github.com/outflanknl/evilclippy) A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows.
+- [**670**星][4y] [praetorian-code/hob0rules](https://github.com/praetorian-code/Hob0Rules) Password cracking rules for Hashcat based on statistics and industry patterns
+- [**670**星][4d] [C#] [uxmal/reko](https://github.com/uxmal/reko) Reko is a binary decompiler.
+- [**670**星][6y] [C] [robertdavidgraham/heartleech](https://github.com/robertdavidgraham/heartleech) Demonstrates the "heartbleed" problem using full OpenSSL stack
- [**670**星][3y] [Py] [n1nj4sec/memorpy](https://github.com/n1nj4sec/memorpy) Python库, 使用ctypes搜索/编辑 Windows / Linux / macOS / SunOS 程序内存
-- [**670**星][2m] [Ruby] [mozilla/ssh_scan](https://github.com/mozilla/ssh_scan) A prototype SSH configuration and policy scanner (Blog:
-- [**670**星][1y] [Py] [endgameinc/rta](https://github.com/endgameinc/rta)
-- [**670**星][2m] [JS] [animir/node-rate-limiter-flexible](https://github.com/animir/node-rate-limiter-flexible) Node.js rate limit requests by key with atomic increments. Protection from DDoS and Brute-Force attacks in process Memory, Redis, MongoDb, Memcached, MySQL, PostgreSQL, Cluster or PM
-- [**670**星][2y] [C] [1n3/privesc](https://github.com/1n3/privesc) A collection of Windows, Linux and MySQL privilege escalation scripts and exploits.
-- [**669**星][4m] [Py] [v3n0m-scanner/v3n0m-scanner](https://github.com/v3n0m-scanner/v3n0m-scanner) Popular Pentesting scanner in Python3.6 for SQLi/XSS/LFI/RFI and other Vulns
-- [**669**星][7d] [C#] [uxmal/reko](https://github.com/uxmal/reko) Reko is a binary decompiler.
-- [**668**星][4y] [praetorian-code/hob0rules](https://github.com/praetorian-code/Hob0Rules) Password cracking rules for Hashcat based on statistics and industry patterns
-- [**666**星][20d] [C#] [obfuscar/obfuscar](https://github.com/obfuscar/obfuscar) Open source obfuscation tool for .NET assemblies
-- [**666**星][2y] [Py] [lijiejie/htpwdscan](https://github.com/lijiejie/htpwdscan) A python HTTP weak pass scanner
-- [**666**星][1m] [doridori/android-security-reference](https://github.com/doridori/android-security-reference) A W.I.P Android Security Ref
-- [**666**星][18d] [Py] [blackorbird/apt_report](https://github.com/blackorbird/apt_report) Interesting apt report collection and some special ioc express
-- [**664**星][8d] [C] [zerbea/hcxdumptool](https://github.com/zerbea/hcxdumptool) Small tool to capture packets from wlan devices.
-- [**664**星][6m] [Py] [paranoidninja/carboncopy](https://github.com/paranoidninja/carboncopy) A tool which creates a spoofed certificate of any online website and signs an Executable for AV Evasion. Works for both Windows and Linux
-- [**664**星][2y] [Py] [jhaddix/domain](https://github.com/jhaddix/domain) Setup script for Regon-ng
-- [**664**星][7y] [Java] [honeynet/apkinspector](https://github.com/honeynet/apkinspector) APKinspector is a powerful GUI tool for analysts to analyze the Android applications.
-- [**664**星][1y] [dsasmblr/hacking-online-games](https://github.com/dsasmblr/hacking-online-games) A curated list of tutorials/resources for hacking online games.
-- [**664**星][1y] [Go] [0x09al/raven](https://github.com/0x09al/raven) raven is a Linkedin information gathering tool that can be used by pentesters to gather information about an organization employees using Linkedin.
-- [**663**星][10m] [C++] [zrax/pycdc](https://github.com/zrax/pycdc) C++ python bytecode disassembler and decompiler
+- [**669**星][11d] [Shell] [wslutilities/wslu](https://github.com/wslutilities/wslu) A collection of utilities for Windows 10 Linux Subsystems
+- [**668**星][8d] [C++] [leggedrobotics/darknet_ros](https://github.com/leggedrobotics/darknet_ros) YOLO ROS: Real-Time Object Detection for ROS
+- [**668**星][23d] [HCL] [rhinosecuritylabs/cloudgoat](https://github.com/rhinosecuritylabs/cloudgoat) CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool
+- [**667**星][10m] [C++] [zrax/pycdc](https://github.com/zrax/pycdc) C++ python bytecode disassembler and decompiler
+- [**667**星][2y] [Py] [lijiejie/htpwdscan](https://github.com/lijiejie/htpwdscan) A python HTTP weak pass scanner
+- [**667**星][11d] [Py] [kbandla/dpkt](https://github.com/kbandla/dpkt) fast, simple packet creation / parsing, with definitions for the basic TCP/IP protocols
+- [**667**星][3m] [C#] [ghostpack/rubeus](https://github.com/ghostpack/rubeus) 原始Kerberos交互和滥用,C#编写
+- [**667**星][1y] [dsasmblr/hacking-online-games](https://github.com/dsasmblr/hacking-online-games) A curated list of tutorials/resources for hacking online games.
+- [**667**星][1m] [doridori/android-security-reference](https://github.com/doridori/android-security-reference) A W.I.P Android Security Ref
+- [**667**星][17d] [Py] [anouarbensaad/vulnx](https://github.com/anouarbensaad/vulnx) An Intelligent Bot Auto Shell Injector that detect vulnerabilities in multiple types of CMS
+- [**666**星][8m] [Py] [m4ll0k/wpseku](https://github.com/m4ll0k/wpseku) WPSeku - Wordpress Security Scanner
+- [**665**星][6m] [C] [robertdavidgraham/rdpscan](https://github.com/robertdavidgraham/rdpscan) A quick scanner for the CVE-2019-0708 "BlueKeep" vulnerability.
+- [**665**星][2y] [Py] [jhaddix/domain](https://github.com/jhaddix/domain) Setup script for Regon-ng
+- [**665**星][7y] [Java] [honeynet/apkinspector](https://github.com/honeynet/apkinspector) APKinspector is a powerful GUI tool for analysts to analyze the Android applications.
+- [**665**星][23d] [C] [google/afl](https://github.com/google/afl) american fuzzy lop - a security-oriented fuzzer
+- [**664**星][8d] [Py] [jazzband/django-axes](https://github.com/jazzband/django-axes) Keep track of failed login attempts in Django-powered sites.
+- [**664**星][7d] [Py] [gwen001/pentest-tools](https://github.com/gwen001/pentest-tools) 日常使用的渗透工具集合
+- [**664**星][6m] [Py] [droope/droopescan](https://github.com/droope/droopescan) A plugin-based scanner that aids security researchers in identifying issues with several CMSs, mainly Drupal & Silverstripe.
+- [**663**星][11m] [C#] [wwillv/godofhacker](https://github.com/wwillv/godofhacker) 由各种顶级黑客技术结合而成,基本功能覆盖面广,可满足大多数人的基本需求
- [**663**星][2y] [shadowsocksr-backup/shadowsocksx-ng](https://github.com/shadowsocksr-backup/shadowsocksx-ng) Next Generation of ShadowsocksX
-- [**663**星][8m] [Py] [m4ll0k/wpseku](https://github.com/m4ll0k/wpseku) WPSeku - Wordpress Security Scanner
-- [**663**星][6m] [Py] [droope/droopescan](https://github.com/droope/droopescan) A plugin-based scanner that aids security researchers in identifying issues with several CMSs, mainly Drupal & Silverstripe.
-- [**662**星][11m] [C#] [wwillv/godofhacker](https://github.com/wwillv/godofhacker) 黑客神器
-- [**662**星][3m] [C#] [ghostpack/rubeus](https://github.com/ghostpack/rubeus) Trying to tame the three-headed dog.
+- [**663**星][6m] [C++] [gossip-sjtu/armariris](https://github.com/gossip-sjtu/armariris) 孤挺花(Armariris) -- 由上海交通大学密码与计算机安全实验室维护的LLVM混淆框架
+- [**663**星][28d] [Java] [google/conscrypt](https://github.com/google/conscrypt) Conscrypt is a Java Security Provider that implements parts of the Java Cryptography Extension and Java Secure Socket Extension.
+- [**663**星][5m] [Py] [aploium/shootback](https://github.com/aploium/shootback) a reverse TCP tunnel let you access target behind NAT or firewall
+- [**663**星][1y] [Go] [0x09al/raven](https://github.com/0x09al/raven) raven is a Linkedin information gathering tool that can be used by pentesters to gather information about an organization employees using Linkedin.
+- [**662**星][9m] [C] [samdenty/wi-pwn](https://github.com/samdenty/Wi-PWN) performs deauth attacks on cheap Arduino boards
+- [**662**星][4d] [JS] [sadeghhayeri/greentunnel](https://github.com/sadeghhayeri/greentunnel) Green Tunnel is an anti-censorship utility designed to bypass DPI system that are put in place by various ISPs to block access to certain websites.
+- [**662**星][6m] [Py] [golismero/golismero](https://github.com/golismero/golismero) 安全测试框架,当前主要是Web安全,可轻松扩展到其他扫描
- [**661**星][2y] [Py] [ysrc/gourdscanv2](https://github.com/ysrc/gourdscanv2) 被动式漏洞扫描系统
-- [**661**星][6m] [C] [robertdavidgraham/rdpscan](https://github.com/robertdavidgraham/rdpscan) A quick scanner for the CVE-2019-0708 "BlueKeep" vulnerability.
-- [**661**星][5m] [Py] [aploium/shootback](https://github.com/aploium/shootback) a reverse TCP tunnel let you access target behind NAT or firewall
-- [**661**星][15d] [Py] [anouarbensaad/vulnx](https://github.com/anouarbensaad/vulnx) An Intelligent Bot Auto Shell Injector that detect vulnerabilities in multiple types of CMS
-- [**660**星][9d] [Shell] [wslutilities/wslu](https://github.com/wslutilities/wslu) A collection of utilities for Windows 10 Linux Subsystems
-- [**660**星][21d] [HCL] [rhinosecuritylabs/cloudgoat](https://github.com/rhinosecuritylabs/cloudgoat) CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool
- [**660**星][3y] [Ruby] [igrigorik/em-proxy](https://github.com/igrigorik/em-proxy) EventMachine Proxy DSL for writing high-performance transparent / intercepting proxies in Ruby
-- [**660**星][26d] [Java] [google/conscrypt](https://github.com/google/conscrypt) Conscrypt is a Java Security Provider that implements parts of the Java Cryptography Extension and Java Secure Socket Extension.
-- [**660**星][6m] [Py] [golismero/golismero](https://github.com/golismero/golismero) GoLismero - The Web Knife
- [**660**星][1y] [Py] [deepzec/bad-pdf](https://github.com/deepzec/bad-pdf) create malicious PDF file to steal NTLM(NTLMv1/NTLMv2) Hashes from windows machines
-- [**659**星][9d] [Py] [kbandla/dpkt](https://github.com/kbandla/dpkt) fast, simple packet creation / parsing, with definitions for the basic TCP/IP protocols
-- [**659**星][6m] [C++] [gossip-sjtu/armariris](https://github.com/gossip-sjtu/armariris) 孤挺花(Armariris) -- 由上海交通大学密码与计算机安全实验室维护的LLVM混淆框架
+- [**660**星][1y] [chybeta/code-audit-challenges](https://github.com/chybeta/code-audit-challenges) Code-Audit-Challenges
+- [**660**星][1m] [Kotlin] [chuckerteam/chucker](https://github.com/chuckerteam/chucker) simplifies the inspection of HTTP(S) requests/responses, and Throwables fired by your Android App
+- [**659**星][24d] [redhuntlabs/awesome-asset-discovery](https://github.com/redhuntlabs/awesome-asset-discovery) List of Awesome Asset Discovery Resources
- [**659**星][2y] [Py] [galkan/crowbar](https://github.com/galkan/crowbar) 渗透测试期间使用的暴力破解工具
+- [**658**星][2y] [Py] [travisfsmith/sweetsecurity](https://github.com/travisfsmith/sweetsecurity) Network Security Monitoring on Raspberry Pi type devices
+- [**658**星][8m] [Shell] [rfxn/linux-malware-detect](https://github.com/rfxn/linux-malware-detect) Linux Malware Detection (LMD)
+- [**658**星][8d] [Py] [igogo-x86/hexrayspytools](https://github.com/igogo-x86/hexrayspytools) 结构体和类重建插件
- [**658**星][6m] [TeX] [bettercrypto/applied-crypto-hardening](https://github.com/bettercrypto/applied-crypto-hardening) Best Current Practices regarding secure online communication and configuration of services using cryptography.
-- [**657**星][2y] [Py] [travisfsmith/sweetsecurity](https://github.com/travisfsmith/sweetsecurity) Network Security Monitoring on Raspberry Pi type devices
-- [**657**星][21d] [C] [google/afl](https://github.com/google/afl) american fuzzy lop - a security-oriented fuzzer
-- [**656**星][16d] [Py] [igogo-x86/hexrayspytools](https://github.com/igogo-x86/hexrayspytools) 结构体和类重建插件
-- [**656**星][1y] [Rust] [endgameinc/xori](https://github.com/endgameinc/xori) Xori is an automation-ready disassembly and static analysis library for PE32, 32+ and shellcode
-- [**656**星][1y] [chybeta/code-audit-challenges](https://github.com/chybeta/code-audit-challenges) Code-Audit-Challenges
-- [**654**星][9d] [the-akira/computer-science-resources](https://github.com/the-akira/Computer-Science-Resources) A list of resources in different fields of Computer Science (multiple languages)
-- [**654**星][8m] [C] [samdenty/wi-pwn](https://github.com/samdenty/Wi-PWN) performs deauth attacks on cheap Arduino boards
-- [**654**星][9m] [Java] [vulnerscom/burp-vulners-scanner](https://github.com/vulnerscom/burp-vulners-scanner) Vulnerability scanner based on vulners.com search API
-- [**654**星][8m] [Shell] [rfxn/linux-malware-detect](https://github.com/rfxn/linux-malware-detect) Linux Malware Detection (LMD)
-- [**654**星][1m] [Kotlin] [chuckerteam/chucker](https://github.com/chuckerteam/chucker) simplifies the inspection of HTTP(S) requests/responses, and Throwables fired by your Android App
-- [**653**星][9m] [Jupyter Notebook] [supercowpowers/data_hacking](https://github.com/SuperCowPowers/data_hacking) Data Hacking Project
-- [**653**星][6m] [Go] [yawning/obfs4](https://github.com/yawning/obfs4) The obfourscator (Courtesy mirror)
-- [**652**星][8m] [C] [wifidog/wifidog-gateway](https://github.com/wifidog/wifidog-gateway) Repository for the wifidog-gateway captive portal designed for embedded systems
-- [**652**星][4y] [Py] [praetorian-code/pentestly](https://github.com/praetorian-code/pentestly) Python and Powershell internal penetration testing framework
-- [**652**星][22d] [redhuntlabs/awesome-asset-discovery](https://github.com/redhuntlabs/awesome-asset-discovery) List of Awesome Asset Discovery Resources
+- [**657**星][2m] [Py] [tib3rius/autorecon](https://github.com/tib3rius/autorecon) AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.
+- [**657**星][5m] [Perl] [jondonas/linux-exploit-suggester-2](https://github.com/jondonas/linux-exploit-suggester-2) Next-Generation Linux Kernel Exploit Suggester
+- [**657**星][1y] [Rust] [endgameinc/xori](https://github.com/endgameinc/xori) Xori is an automation-ready disassembly and static analysis library for PE32, 32+ and shellcode
+- [**656**星][2d] [the-akira/computer-science-resources](https://github.com/the-akira/Computer-Science-Resources) A list of resources in different fields of Computer Science (multiple languages)
+- [**656**星][9m] [Java] [vulnerscom/burp-vulners-scanner](https://github.com/vulnerscom/burp-vulners-scanner) Vulnerability scanner based on vulners.com search API
+- [**656**星][2d] [Py] [quentinhardy/odat](https://github.com/quentinhardy/odat) Oracle Database Attacking Tool
+- [**655**星][9m] [Jupyter Notebook] [supercowpowers/data_hacking](https://github.com/SuperCowPowers/data_hacking) Data Hacking Project
+- [**655**星][6m] [Go] [yawning/obfs4](https://github.com/yawning/obfs4) The obfourscator (Courtesy mirror)
+- [**655**星][6m] [Perl] [moham3driahi/xattacker](https://github.com/moham3driahi/xattacker) X Attacker Tool ☣ Website Vulnerability Scanner & Auto Exploiter
+- [**654**星][6m] [Py] [rabbitmask/weblogicscan](https://github.com/rabbitmask/weblogicscan) Weblogic一键漏洞检测工具,V1.3
+- [**654**星][2m] [Py] [hisxo/gitgraber](https://github.com/hisxo/gitgraber) monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe...
+- [**654**星][18d] [Shell] [diego-treitos/linux-smart-enumeration](https://github.com/diego-treitos/linux-smart-enumeration) Linux enumeration tool for pentesting and CTFs with verbosity levels
+- [**653**星][8m] [C] [wifidog/wifidog-gateway](https://github.com/wifidog/wifidog-gateway) Repository for the wifidog-gateway captive portal designed for embedded systems
+- [**653**星][4y] [Py] [praetorian-code/pentestly](https://github.com/praetorian-code/pentestly) Python和Powershell内部渗透测试框架
+- [**653**星][2y] [C] [fail0verflow/shofel2](https://github.com/fail0verflow/shofel2) Tegra X1 bootrom exploit
+- [**653**星][20d] [Java] [dineshshetty/android-insecurebankv2](https://github.com/dineshshetty/android-insecurebankv2) Vulnerable Android application for developers and security enthusiasts to learn about Android insecurities
+- [**652**星][3y] [C] [rentzsch/mach_inject](https://github.com/rentzsch/mach_inject) interprocess code injection for Mac OS X
+- [**651**星][10m] [Roff] [palantir/windows-event-forwarding](https://github.com/palantir/windows-event-forwarding) 使用 Windows 事件转发实现网络事件监测和防御
- [**651**星][1y] [Py] [knownsec/rd_checklist](https://github.com/knownsec/rd_checklist) 知道创宇研发技能表
-- [**651**星][2y] [C] [fail0verflow/shofel2](https://github.com/fail0verflow/shofel2) Tegra X1 bootrom exploit
-- [**650**星][11d] [JS] [sadeghhayeri/greentunnel](https://github.com/sadeghhayeri/greentunnel) Green Tunnel is an anti-censorship utility designed to bypass DPI system that are put in place by various ISPs to block access to certain websites.
-- [**650**星][3y] [C] [rentzsch/mach_inject](https://github.com/rentzsch/mach_inject) interprocess code injection for Mac OS X
-- [**650**星][5m] [Perl] [jondonas/linux-exploit-suggester-2](https://github.com/jondonas/linux-exploit-suggester-2) Next-Generation Linux Kernel Exploit Suggester
-- [**649**星][2m] [Py] [quentinhardy/odat](https://github.com/quentinhardy/odat) Oracle Database Attacking Tool
-- [**649**星][2y] [C++] [nathancastle/bootshellcredentialprovider](https://github.com/nathancastle/bootshellcredentialprovider) Windows 10 Credential Provider intended to simplify the process of logging directly into alternative shells to Windows Explorer.
-- [**649**星][6m] [Perl] [moham3driahi/xattacker](https://github.com/moham3driahi/xattacker) X Attacker Tool ☣ Website Vulnerability Scanner & Auto Exploiter
-- [**649**星][18d] [Java] [dineshshetty/android-insecurebankv2](https://github.com/dineshshetty/android-insecurebankv2) Vulnerable Android application for developers and security enthusiasts to learn about Android insecurities
-- [**648**星][2y] [C] [eugnis/spectre-attack](https://github.com/eugnis/spectre-attack) Example of using revealed "Spectre" exploit (CVE-2017-5753 and CVE-2017-5715)
-- [**647**星][3y] [Objective-C] [isecpartners/introspy-ios](https://github.com/isecpartners/introspy-ios) Security profiling for blackbox iOS
-- [**647**星][16d] [Shell] [diego-treitos/linux-smart-enumeration](https://github.com/diego-treitos/linux-smart-enumeration) Linux enumeration tool for pentesting and CTFs with verbosity levels
+- [**650**星][4m] [C#] [shack2/snetcracker](https://github.com/shack2/snetcracker) 超级弱口令检查工具是一款Windows平台的弱口令审计工具,支持批量多线程检查,可快速发现弱密码、弱口令账号,密码支持和用户名结合进行检查,大大提高成功率,支持自定义服务端口和字典。
+- [**650**星][2y] [C++] [nathancastle/bootshellcredentialprovider](https://github.com/nathancastle/bootshellcredentialprovider) Windows 10 Credential Provider intended to simplify the process of logging directly into alternative shells to Windows Explorer.
+- [**649**星][1m] [Shell] [toutyrater/v2ray-guide](https://github.com/toutyrater/v2ray-guide)
+- [**649**星][6m] [PHP] [l3m0n/bypass_disable_functions_shell](https://github.com/l3m0n/bypass_disable_functions_shell) 一个各种方式突破Disable_functions达到命令执行的shell
+- [**649**星][2y] [C] [eugnis/spectre-attack](https://github.com/eugnis/spectre-attack) Example of using revealed "Spectre" exploit (CVE-2017-5753 and CVE-2017-5715)
+- [**649**星][15d] [YARA] [eset/malware-ioc](https://github.com/eset/malware-ioc) Indicators of Compromises (IOC) of our various investigations
+- [**648**星][3y] [ObjC] [isecpartners/introspy-ios](https://github.com/isecpartners/introspy-ios) Security profiling for blackbox iOS
+- [**647**星][1y] [Py] [simplysecurity/simplyemail](https://github.com/SimplySecurity/SimplyEmail) Email recon made fast and easy, with a framework to build on
+- [**647**星][9m] [ObjC] [chenxiancai/stcobfuscator](https://github.com/chenxiancai/stcobfuscator) iOS全局自动化 代码混淆 工具!支持cocoapod组件代码一并 混淆,完美避开hardcode方法、静态库方法和系统库方法!
- [**646**星][3y] [Java] [facebookarchive/proguard](https://github.com/facebookarchive/proguard) A fork of ProGuard.
-- [**646**星][10m] [Roff] [palantir/windows-event-forwarding](https://github.com/palantir/windows-event-forwarding) 使用 Windows 事件转发实现网络事件监测和防御
-- [**645**星][1y] [Py] [simplysecurity/simplyemail](https://github.com/SimplySecurity/SimplyEmail) Email recon made fast and easy, with a framework to build on
-- [**645**星][6m] [PHP] [l3m0n/bypass_disable_functions_shell](https://github.com/l3m0n/bypass_disable_functions_shell) 一个各种方式突破Disable_functions达到命令执行的shell
- [**645**星][5y] [Shell] [hannob/bashcheck](https://github.com/hannob/bashcheck) test script for shellshocker and related vulnerabilities
-- [**644**星][13d] [YARA] [eset/malware-ioc](https://github.com/eset/malware-ioc) Indicators of Compromises (IOC) of our various investigations
-- [**643**星][1m] [Py] [tib3rius/autorecon](https://github.com/tib3rius/autorecon) AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.
-- [**643**星][4m] [C#] [shack2/snetcracker](https://github.com/shack2/snetcracker) 超级弱口令检查工具是一款Windows平台的弱口令审计工具,支持批量多线程检查,可快速发现弱密码、弱口令账号,密码支持和用户名结合进行检查,大大提高成功率,支持自定义服务端口和字典。
+- [**645**星][1y] [Java] [faizann24/wifi-bruteforcer-fsecurify](https://github.com/faizann24/wifi-bruteforcer-fsecurify) Android app,无需 Root 即可爆破 Wifi 密码
+- [**644**星][5m] [C++] [eliboa/tegrarcmgui](https://github.com/eliboa/tegrarcmgui) C++ GUI for TegraRcmSmash (Fusée Gelée exploit for Nintendo Switch)
+- [**644**星][5m] [JS] [draios/sysdig-inspect](https://github.com/draios/sysdig-inspect) A powerful opensource interface for container troubleshooting and security investigation
+- [**643**星][3m] [Py] [gquere/pwn_jenkins](https://github.com/gquere/pwn_jenkins) 有关攻击Jenkins服务器的笔记
+- [**643**星][2y] [C] [coolstar/electra](https://github.com/coolstar/electra) iOS 11.0 - 11.1.2 越狱工具包, 基于 async_awake
+- [**642**星][22d] [C++] [thingpulse/esp8266-weather-station](https://github.com/ThingPulse/esp8266-weather-station) New version of the ESP8266 Weather Station
- [**642**星][4y] [Py] [paulsec/twittor](https://github.com/paulsec/twittor) A fully featured backdoor that uses Twitter as a C&C server
-- [**642**星][5m] [JS] [draios/sysdig-inspect](https://github.com/draios/sysdig-inspect) A powerful opensource interface for container troubleshooting and security investigation
-- [**642**星][2y] [C] [coolstar/electra](https://github.com/coolstar/electra) iOS 11.0 - 11.1.2 越狱工具包, 基于 async_awake
-- [**642**星][9m] [Objective-C] [chenxiancai/stcobfuscator](https://github.com/chenxiancai/stcobfuscator) iOS全局自动化 代码混淆 工具!支持cocoapod组件代码一并 混淆,完美避开hardcode方法、静态库方法和系统库方法!
+- [**642**星][5m] [PHP] [mattiasgeniar/php-exploit-scripts](https://github.com/mattiasgeniar/php-exploit-scripts) A collection of PHP exploit scripts, found when investigating hacked servers. These are stored for educational purposes and to test fuzzers and vulnerability scanners. Feel free to contribute.
+- [**642**星][10m] [Dockerfile] [aquasecurity/microscanner](https://github.com/aquasecurity/microscanner) Scan your container images for package vulnerabilities with Aqua Security
- [**641**星][5m] [Py] [pyupio/safety](https://github.com/pyupio/safety) 检查所有已安装 Python 包, 查找已知的安全漏洞
-- [**641**星][1y] [Java] [faizann24/wifi-bruteforcer-fsecurify](https://github.com/faizann24/wifi-bruteforcer-fsecurify) Android app,无需 Root 即可爆破 Wifi 密码
-- [**640**星][20d] [C++] [thingpulse/esp8266-weather-station](https://github.com/ThingPulse/esp8266-weather-station) New version of the ESP8266 Weather Station
+- [**641**星][2y] [harmj0y/cheatsheets](https://github.com/harmj0y/cheatsheets) Cheat sheets for various projects.
+- [**641**星][1y] [Go] [ga0/netgraph](https://github.com/ga0/netgraph) A cross platform http sniffer with a web UI
+- [**640**星][2y] [Shell] [kitten/setup-simple-ipsec-l2tp-vpn](https://github.com/kitten/setup-simple-ipsec-l2tp-vpn) Setup a simple IPSec/L2TP VPN Server for Ubuntu and Debian
- [**640**星][3m] [C++] [stevemk14ebr/polyhook](https://github.com/stevemk14ebr/polyhook) x86/x64 C++ Hooking Library
-- [**640**星][6m] [Py] [rabbitmask/weblogicscan](https://github.com/rabbitmask/weblogicscan) Weblogic一键漏洞检测工具,V1.3
-- [**640**星][5m] [PHP] [mattiasgeniar/php-exploit-scripts](https://github.com/mattiasgeniar/php-exploit-scripts) A collection of PHP exploit scripts, found when investigating hacked servers. These are stored for educational purposes and to test fuzzers and vulnerability scanners. Feel free to contribute.
-- [**640**星][2y] [harmj0y/cheatsheets](https://github.com/harmj0y/cheatsheets) Cheat sheets for various projects.
-- [**640**星][3m] [Py] [gquere/pwn_jenkins](https://github.com/gquere/pwn_jenkins) Notes about attacking Jenkins servers
-- [**640**星][1y] [Go] [ga0/netgraph](https://github.com/ga0/netgraph) A cross platform http sniffer with a web UI
+- [**640**星][3d] [Java] [ganyao114/sandhook](https://github.com/ganyao114/sandhook) Android ART Hook/Native Inline Hook/Single Instruction Hook - support 4.4 - 10.0 32/64 bit - Xposed API Compat
+- [**639**星][3d] [Go] [ullaakut/gorsair](https://github.com/ullaakut/gorsair) Gorsair hacks its way into remote docker containers that expose their APIs
+- [**639**星][7d] [Py] [thewhiteh4t/seeker](https://github.com/thewhiteh4t/seeker) Accurately Locate Smartphones using Social Engineering
- [**639**星][1y] [Py] [lmco/laikaboss](https://github.com/lmco/laikaboss) Laika BOSS: Object Scanning System
-- [**639**星][2m] [Py] [hisxo/gitgraber](https://github.com/hisxo/gitgraber) monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe...
-- [**639**星][5m] [C++] [eliboa/tegrarcmgui](https://github.com/eliboa/tegrarcmgui) C++ GUI for TegraRcmSmash (Fusée Gelée exploit for Nintendo Switch)
-- [**638**星][8d] [Go] [ullaakut/gorsair](https://github.com/ullaakut/gorsair) Gorsair hacks its way into remote docker containers that expose their APIs
-- [**638**星][8m] [cryptogenic/exploit-writeups](https://github.com/cryptogenic/exploit-writeups) A collection where my current and future writeups for exploits/CTF will go
+- [**639**星][8m] [Py] [klen/pylama](https://github.com/klen/pylama) Code audit tool for python.
+- [**639**星][23d] [C] [kernelslacker/trinity](https://github.com/kernelslacker/trinity) Linux system call fuzzer
+- [**639**星][8m] [cryptogenic/exploit-writeups](https://github.com/cryptogenic/exploit-writeups) A collection where my current and future writeups for exploits/CTF will go
- [**638**星][11m] [HTML] [bl4de/security_whitepapers](https://github.com/bl4de/security_whitepapers) Collection of misc IT Security related whitepapers, presentations, slides - hacking, bug bounty, web application security, XSS, CSRF, SQLi
-- [**637**星][4m] [smgorelik/windows-rce-exploits](https://github.com/smgorelik/windows-rce-exploits) The exploit samples database is a repository for **RCE** (remote code execution) exploits and Proof-of-Concepts for **WINDOWS**, the samples are uploaded for education purposes for red and blue teams.
-- [**637**星][21d] [C] [kernelslacker/trinity](https://github.com/kernelslacker/trinity) Linux system call fuzzer
-- [**636**星][1m] [Shell] [toutyrater/v2ray-guide](https://github.com/toutyrater/v2ray-guide)
-- [**636**星][8m] [Py] [klen/pylama](https://github.com/klen/pylama) Code audit tool for python.
-- [**636**星][1y] [JS] [alcuadrado/hieroglyphy](https://github.com/alcuadrado/hieroglyphy) Transform any javascript code to an equivalent sequence of ()[]{}!+ characters that runs in the browser!
-- [**635**星][2y] [C] [qihoo360/mysql-sniffer](https://github.com/qihoo360/mysql-sniffer) mysql-sniffer is a network traffic analyzer tool for mysql, it is developed by Qihoo DBA and infrastructure team
-- [**635**星][4m] [Jupyter Notebook] [parrt/lolviz](https://github.com/parrt/lolviz) A simple Python data-structure visualization tool for lists of lists, lists, dictionaries; primarily for use in Jupyter notebooks / presentations
+- [**637**星][1y] [Py] [floodsung/learningtocompare_fsl](https://github.com/floodsung/LearningToCompare_FSL) PyTorch code for CVPR 2018 paper: Learning to Compare: Relation Network for Few-Shot Learning (Few-Shot Learning part)
+- [**637**星][5m] [smgorelik/windows-rce-exploits](https://github.com/smgorelik/windows-rce-exploits) The exploit samples database is a repository for **RCE** (remote code execution) exploits and Proof-of-Concepts for **WINDOWS**, the samples are uploaded for education purposes for red and blue teams.
+- [**637**星][4m] [Jupyter Notebook] [parrt/lolviz](https://github.com/parrt/lolviz) A simple Python data-structure visualization tool for lists of lists, lists, dictionaries; primarily for use in Jupyter notebooks / presentations
+- [**637**星][26d] [Ruby] [markets/invisible_captcha](https://github.com/markets/invisible_captcha) Simple and flexible spam protection solution for Rails applications.
+
+- [**637**星][2y] [PHP] [duoergun0729/1book](https://github.com/duoergun0729/1book) 《Web安全之机器学习入门》
+- [**636**星][2y] [C] [qihoo360/mysql-sniffer](https://github.com/qihoo360/mysql-sniffer) mysql-sniffer is a network traffic analyzer tool for mysql, it is developed by Qihoo DBA and infrastructure team
+- [**636**星][3y] [PS] [hlldz/invoke-phant0m](https://github.com/hlldz/invoke-phant0m) Windows Event Log Killer
+- [**636**星][1y] [JS] [alcuadrado/hieroglyphy](https://github.com/alcuadrado/hieroglyphy) 将所有JavaScript代码转换为等价的()[] {}!+字符序列!,可在浏览器中运行
+- [**635**星][2m] [C++] [apple/swift-lldb](https://github.com/apple/swift-lldb) This is the version of LLDB that supports the Swift programming language & REPL.
+- [**635**星][15d] [webdigi/aws-vpn-server-setup](https://github.com/webdigi/aws-vpn-server-setup) Setup your own private, secure, free* VPN on the Amazon AWS Cloud in 10 minutes. CloudFormation
+- [**635**星][1y] [Swift] [phynet/ios-url-schemes](https://github.com/phynet/ios-url-schemes) a github solution from my gist of iOS list for urls schemes
+- [**635**星][6d] [C++] [nodejs/node-addon-api](https://github.com/nodejs/node-addon-api) Module for using N-API from C++
- [**635**星][2y] [Py] [mschwager/dhcpwn](https://github.com/mschwager/dhcpwn) testing DHCP IP exhaustion attacks, sniff local DHCP traffic
-- [**634**星][2m] [C++] [apple/swift-lldb](https://github.com/apple/swift-lldb) This is the version of LLDB that supports the Swift programming language & REPL.
-- [**634**星][1y] [Swift] [phynet/ios-url-schemes](https://github.com/phynet/ios-url-schemes) a github solution from my gist of iOS list for urls schemes
+- [**635**星][11d] [Py] [igio90/dwarf](https://github.com/igio90/dwarf) Full featured multi arch/os debugger built on top of PyQt5 and frida
+- [**635**星][10m] [Py] [dirkjanm/privexchange](https://github.com/dirkjanm/privexchange) 通过滥用Exchange交换您对Domain Admin privs的特权
+- [**634**星][4y] [PHP] [emposha/php-shell-detector](https://github.com/emposha/php-shell-detector) Web Shell Detector – is a php script that helps you find and identify php/cgi(perl)/asp/aspx shells. Web Shell Detector has a “web shells” signature database that helps to identify “web shell” up to 99%.
- [**633**星][6m] [C] [travisgoodspeed/md380tools](https://github.com/travisgoodspeed/md380tools) Python tools and patched firmware for the TYT-MD380
-- [**633**星][3y] [PowerShell] [hlldz/invoke-phant0m](https://github.com/hlldz/invoke-phant0m) Windows Event Log Killer
-- [**633**星][21d] [Java] [ganyao114/sandhook](https://github.com/ganyao114/sandhook) Android ART Hook/Native Inline Hook/Single Instruction Hook - support 4.4 - 10.0 32/64 bit - Xposed API Compat
-- [**633**星][4y] [PHP] [emposha/php-shell-detector](https://github.com/emposha/php-shell-detector) Web Shell Detector – is a php script that helps you find and identify php/cgi(perl)/asp/aspx shells. Web Shell Detector has a “web shells” signature database that helps to identify “web shell” up to 99%.
-- [**632**星][1y] [Py] [floodsung/learningtocompare_fsl](https://github.com/floodsung/LearningToCompare_FSL) PyTorch code for CVPR 2018 paper: Learning to Compare: Relation Network for Few-Shot Learning (Few-Shot Learning part)
-- [**632**星][9d] [Py] [igio90/dwarf](https://github.com/igio90/dwarf) Full featured multi arch/os debugger built on top of PyQt5 and frida
-- [**632**星][10m] [Py] [dirkjanm/privexchange](https://github.com/dirkjanm/privexchange) Exchange your privileges for Domain Admin privs by abusing Exchange
-- [**632**星][6m] [Py] [binarydefense/artillery](https://github.com/binarydefense/artillery) The Artillery Project is an open-source blue team tool designed to protect Linux and Windows operating systems through multiple methods.
+- [**633**星][6m] [Py] [binarydefense/artillery](https://github.com/binarydefense/artillery) The Artillery Project is an open-source blue team tool designed to protect Linux and Windows operating systems through multiple methods.
+- [**632**星][9m] [webbreacher/offensiveinterview](https://github.com/webbreacher/offensiveinterview) Interview questions to screen offensive (red team/pentest) candidates
- [**631**星][4y] [CoffeeScript] [shadowsocks/shadowsocks-chromeapp](https://github.com/shadowsocks/shadowsocks-chromeapp) Chrome client for shadowsocks
- [**631**星][10m] [Py] [mehulj94/braindamage](https://github.com/mehulj94/braindamage) Remote administration tool which uses Telegram as a C&C server
-- [**629**星][9m] [webbreacher/offensiveinterview](https://github.com/webbreacher/offensiveinterview) Interview questions to screen offensive (red team/pentest) candidates
-- [**629**星][10m] [Dockerfile] [aquasecurity/microscanner](https://github.com/aquasecurity/microscanner) Scan your container images for package vulnerabilities with Aqua Security
+- [**630**星][5m] [Go] [zmap/zgrab](https://github.com/zmap/zgrab) A Banner Grabber, in Go
+- [**629**星][8m] [Shell] [g0tmi1k/msfpc](https://github.com/g0tmi1k/msfpc) MSFvenom Payload Creator (MSFPC)
+- [**629**星][2y] [C] [client9/libinjection](https://github.com/client9/libinjection) SQL / SQLI tokenizer parser analyzer
+- [**629**星][5m] [ankane/secure_rails](https://github.com/ankane/secure_rails) Rails安全最佳实战
- [**629**星][4m] [3gstudent/pentest-and-development-tips](https://github.com/3gstudent/pentest-and-development-tips) A collection of pentest and development tips
-- [**628**星][8m] [Shell] [g0tmi1k/msfpc](https://github.com/g0tmi1k/msfpc) MSFvenom Payload Creator (MSFPC)
-- [**628**星][5m] [Go] [zmap/zgrab](https://github.com/zmap/zgrab) A Banner Grabber, in Go
-- [**626**星][13d] [PowerShell] [olafhartong/sysmon-modular](https://github.com/olafhartong/sysmon-modular) sysmon配置模块收集
-- [**626**星][2y] [C] [client9/libinjection](https://github.com/client9/libinjection) SQL / SQLI tokenizer parser analyzer
-- [**626**星][5m] [ankane/secure_rails](https://github.com/ankane/secure_rails) Rails security best practices
-- [**625**星][2y] [C++] [codilime/veles](https://github.com/codilime/veles) Binary data analysis and visualization tool
-- [**624**星][2y] [C] [shadowsocksr-backup/shadowsocksr-libev](https://github.com/shadowsocksr-backup/shadowsocksr-libev) libev port of ShadowsocksR
-- [**624**星][7m] [yeyintminthuhtut/awesome-advanced-windows-exploitation-references](https://github.com/yeyintminthuhtut/Awesome-Advanced-Windows-Exploitation-References) List of Awesome Advanced Windows Exploitation References
-- [**623**星][23d] [Ruby] [markets/invisible_captcha](https://github.com/markets/invisible_captcha) Simple and flexible spam protection solution for Rails applications.
-
-- [**623**星][4y] [jeanphorn/wordlist](https://github.com/jeanphorn/wordlist) Collection of some common wordlists such as RDP password, user name list, ssh password wordlist for brute force. IP Cameras Default Passwords.
-- [**623**星][3y] [C] [chokepoint/azazel](https://github.com/chokepoint/azazel) Azazel is a userland rootkit based off of the original LD_PRELOAD technique from Jynx rootkit. It is more robust and has additional features, and focuses heavily around anti-debugging and anti-detection.
-- [**622**星][2y] [C] [tgraf/bmon](https://github.com/tgraf/bmon) bandwidth monitor and rate estimator
-- [**622**星][1y] [C] [nfc-tools/mfoc](https://github.com/nfc-tools/mfoc) Mifare Classic Offline Cracker
-- [**622**星][2y] [Py] [0xbug/sqliscanner](https://github.com/0xbug/sqliscanner) Automatic SQL injection with Charles and sqlmap api
+- [**628**星][2d] [PS] [olafhartong/sysmon-modular](https://github.com/olafhartong/sysmon-modular) sysmon配置模块收集
+- [**628**星][2y] [C++] [codilime/veles](https://github.com/codilime/veles) Binary data analysis and visualization tool
+- [**627**星][7m] [yeyintminthuhtut/awesome-advanced-windows-exploitation-references](https://github.com/yeyintminthuhtut/Awesome-Advanced-Windows-Exploitation-References) List of Awesome Advanced Windows Exploitation References
+- [**626**星][1y] [C] [nfc-tools/mfoc](https://github.com/nfc-tools/mfoc) Mifare Classic Offline Cracker
+- [**626**星][4y] [jeanphorn/wordlist](https://github.com/jeanphorn/wordlist) Collection of some common wordlists such as RDP password, user name list, ssh password wordlist for brute force. IP Cameras Default Passwords.
+- [**625**星][2y] [C] [shadowsocksr-backup/shadowsocksr-libev](https://github.com/shadowsocksr-backup/shadowsocksr-libev) libev port of ShadowsocksR
+- [**625**星][11m] [C++] [ohpe/juicy-potato](https://github.com/ohpe/juicy-potato) A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM.
+- [**625**星][3y] [C] [chokepoint/azazel](https://github.com/chokepoint/azazel) Azazel is a userland rootkit based off of the original LD_PRELOAD technique from Jynx rootkit. It is more robust and has additional features, and focuses heavily around anti-debugging and anti-detection.
+- [**625**星][2m] [Py] [alichtman/stronghold](https://github.com/alichtman/stronghold) Easily configure macOS security settings from the terminal.
+- [**624**星][4y] [JS] [n0wa11/gfw_whitelist](https://github.com/n0wa11/gfw_whitelist) A Pac File of the Whitelisted Websites for the Great Firewall of China (GFW)
+- [**624**星][2d] [arkadiyt/bounty-targets-data](https://github.com/arkadiyt/bounty-targets-data) This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/etc) that are eligible for reports
+- [**623**星][2y] [C] [tgraf/bmon](https://github.com/tgraf/bmon) 带宽监控器和速率估计器
+- [**623**星][3m] [C] [gdabah/distorm](https://github.com/gdabah/distorm) Powerful Disassembler Library For x86/AMD64
+- [**622**星][9d] [Py] [virt-manager/virt-manager](https://github.com/virt-manager/virt-manager) Desktop tool for managing virtual machines via libvirt
+- [**622**星][6m] [Java] [sigploiter/sigploit](https://github.com/sigploiter/sigploit) Telecom Signaling Exploitation Framework - SS7, GTP, Diameter & SIP
+- [**622**星][3m] [PHP] [hongrisec/php-audit-labs](https://github.com/hongrisec/php-audit-labs) 一个关于PHP的代码审计项目
+- [**621**星][2y] [turbo/openftp4](https://github.com/turbo/openftp4) A list of all FTP servers in IPv4 that allow anonymous logins.
- [**621**星][3m] [Py] [3xp10it/xwaf](https://github.com/3xp10it/xwaf) waf 自动爆破(绕过)工具
-- [**621**星][6m] [Java] [sigploiter/sigploit](https://github.com/sigploiter/sigploit) Telecom Signaling Exploitation Framework - SS7, GTP, Diameter & SIP
-- [**621**星][3m] [C] [gdabah/distorm](https://github.com/gdabah/distorm) Powerful Disassembler Library For x86/AMD64
-- [**620**星][14d] [Py] [virt-manager/virt-manager](https://github.com/virt-manager/virt-manager) Desktop tool for managing virtual machines via libvirt
+- [**621**星][5m] [Py] [deibit/cansina](https://github.com/deibit/cansina) web 内容发现工具。发出各种请求并过滤回复,识别是否存在请求的资源。
+- [**621**星][2y] [Py] [0xbug/sqliscanner](https://github.com/0xbug/sqliscanner) Automatic SQL injection with Charles and sqlmap api
+- [**620**星][9m] [Py] [epsylon/ufonet](https://github.com/epsylon/ufonet) 用于发起DDoS和DoS攻击的工具包。
- [**620**星][5m] [JS] [derhuerst/tcp-over-websockets](https://github.com/derhuerst/tcp-over-websockets) Tunnel TCP through WebSockets.
-- [**619**星][19d] [C++] [nodejs/node-addon-api](https://github.com/nodejs/node-addon-api) Module for using N-API from C++
-- [**619**星][4y] [JS] [n0wa11/gfw_whitelist](https://github.com/n0wa11/gfw_whitelist) A Pac File of the Whitelisted Websites for the Great Firewall of China (GFW)
+- [**619**星][5y] [PHP] [pr0x13/idict](https://github.com/pr0x13/idict) iCloud Apple iD BruteForcer
+- [**619**星][10m] [PS] [mattifestation/powershellarsenal](https://github.com/mattifestation/powershellarsenal) A PowerShell Module Dedicated to Reverse Engineering
- [**619**星][4y] [Go] [leo-stone/hack-petya](https://github.com/leo-stone/hack-petya) 搜索key,恢复 petya 加密的 mft
-- [**619**星][2m] [Py] [alichtman/stronghold](https://github.com/alichtman/stronghold) Easily configure macOS security settings from the terminal.
-- [**618**星][10m] [PowerShell] [mattifestation/powershellarsenal](https://github.com/mattifestation/powershellarsenal) A PowerShell Module Dedicated to Reverse Engineering
-- [**618**星][2y] [PHP] [duoergun0729/1book](https://github.com/duoergun0729/1book) 《Web安全之机器学习入门》
-- [**618**星][5m] [Py] [deibit/cansina](https://github.com/deibit/cansina) web 内容发现工具。发出各种请求并过滤回复,识别是否存在请求的资源。
-- [**617**星][5y] [PHP] [pr0x13/idict](https://github.com/pr0x13/idict) iCloud Apple iD BruteForcer
-- [**617**星][11m] [C++] [ohpe/juicy-potato](https://github.com/ohpe/juicy-potato) A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM.
+- [**618**星][4m] [bypass007/safety-project-collection](https://github.com/bypass007/safety-project-collection) 收集一些比较优秀的开源安全项目,以帮助甲方安全从业人员构建企业安全能力。
+- [**617**星][1y] [Lua] [unixhot/waf](https://github.com/unixhot/waf) 使用Nginx+Lua实现的WAF(版本v1.0)
+- [**617**星][12d] [C] [thewover/donut](https://github.com/thewover/donut) Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters
- [**617**星][1y] [Go] [lunixbochs/usercorn](https://github.com/lunixbochs/usercorn) 通过模拟器对二进制文件进行动态分析
-- [**617**星][3m] [PHP] [hongrisec/php-audit-labs](https://github.com/hongrisec/php-audit-labs) 一个关于PHP的代码审计项目
-- [**617**星][9m] [Py] [epsylon/ufonet](https://github.com/epsylon/ufonet) UFONet - Denial of Service Toolkit
-- [**615**星][3m] [C] [matheus-garbelini/esp32_esp8266_attacks](https://github.com/matheus-garbelini/esp32_esp8266_attacks) Proof of Concept of ESP32/8266 Wi-Fi vulnerabilties (CVE-2019-12586, CVE-2019-12587, CVE-2019-12588)
-- [**614**星][1y] [Lua] [unixhot/waf](https://github.com/unixhot/waf) 使用Nginx+Lua实现的WAF(版本v1.0)
-- [**613**星][4m] [bypass007/safety-project-collection](https://github.com/bypass007/safety-project-collection) 收集一些比较优秀的开源安全项目,以帮助甲方安全从业人员构建企业安全能力。
-- [**613**星][9m] [Py] [al-azif/ps4-exploit-host](https://github.com/al-azif/ps4-exploit-host) Easy PS4 Exploit Hosting
-- [**613**星][1y] [Py] [adamcaudill/equationgroupleak](https://github.com/adamcaudill/equationgroupleak) Archive of leaked Equation Group materials
-- [**612**星][10d] [HTML] [v2ray/manual](https://github.com/v2ray/manual) Source code for
+- [**616**星][3d] [HTML] [v2ray/manual](https://github.com/v2ray/manual) Source code for
+- [**616**星][1y] [Shell] [wireghoul/htshells](https://github.com/wireghoul/htshells) 自包含的Web Shell和通过.htaccess文件进行的其他攻击。
+- [**616**星][3m] [C] [matheus-garbelini/esp32_esp8266_attacks](https://github.com/matheus-garbelini/esp32_esp8266_attacks) Proof of Concept of ESP32/8266 Wi-Fi vulnerabilties (CVE-2019-12586, CVE-2019-12587, CVE-2019-12588)
+- [**616**星][21d] [Go] [evilsocket/arc](https://github.com/evilsocket/arc) 可用于管理私密数据的工具. 后端是 Go 语言编写的 RESTful 服务器, 前台是Html + JavaScript
+- [**615**星][4m] [Lua] [jx-sec/jxwaf](https://github.com/jx-sec/jxwaf) JXWAF(锦衣盾)是一款基于openresty(nginx+lua)开发的web应用防火墙
+- [**615**星][1y] [jiangsir404/audit-learning](https://github.com/jiangsir404/audit-learning) 记录自己对《代码审计》的理解和总结,对危险函数的深入分析以及在p牛的博客和代码审计圈的收获
+- [**614**星][3y] [ObjC] [macmade/keychaincracker](https://github.com/macmade/keychaincracker) macOS keychain cracking tool
+- [**614**星][6y] [Assembly] [adriancable/8086tiny](https://github.com/adriancable/8086tiny) Official repository for 8086tiny: a tiny PC emulator/virtual machine
+- [**614**星][1y] [Py] [adamcaudill/equationgroupleak](https://github.com/adamcaudill/equationgroupleak) Archive of leaked Equation Group materials
+- [**613**星][1m] [C++] [acidanthera/virtualsmc](https://github.com/acidanthera/virtualsmc) SMC emulator layer
+- [**613**星][2m] [Py] [sourcelair/ceryx](https://github.com/sourcelair/ceryx) Dynamic reverse proxy based on NGINX OpenResty with an API
+- [**613**星][1y] [langyanduan/reborn](https://github.com/langyanduan/reborn) The missing proxy for macOS
+- [**613**星][2y] [Py] [fanhuaandluomu/geetest_break](https://github.com/fanhuaandluomu/geetest_break) 极验验证码破解-源码+手册
+- [**612**星][10m] [Py] [zdresearch/owasp-nettacker](https://github.com/zdresearch/OWASP-Nettacker) Automated Penetration Testing Framework
- [**612**星][1y] [Ruby] [thesp0nge/dawnscanner](https://github.com/thesp0nge/dawnscanner) Dawn is a static analysis security scanner for ruby written web applications. It supports Sinatra, Padrino and Ruby on Rails frameworks.
-- [**612**星][25d] [C] [quiet/quiet-lwip](https://github.com/quiet/quiet-lwip) create TCP and UDP connections over an audio channel
-- [**611**星][1y] [Shell] [wireghoul/htshells](https://github.com/wireghoul/htshells) Self contained htaccess shells and attacks
+- [**612**星][27d] [C] [quiet/quiet-lwip](https://github.com/quiet/quiet-lwip) create TCP and UDP connections over an audio channel
+- [**612**星][3m] [Py] [netflix/repokid](https://github.com/netflix/repokid) AWS Least Privilege for Distributed, High-Velocity Deployment
+- [**612**星][6m] [Py] [eliasgranderubio/dagda](https://github.com/eliasgranderubio/dagda) Docker安全套件
+- [**612**星][3m] [Go] [eldadru/ksniff](https://github.com/eldadru/ksniff) Kubectl plugin to ease sniffing on kubernetes pods using tcpdump and wireshark
+- [**612**星][3m] [Shell] [ashishb/osx-and-ios-security-awesome](https://github.com/ashishb/osx-and-ios-security-awesome) OSX and iOS related security tools
+- [**612**星][9m] [Py] [al-azif/ps4-exploit-host](https://github.com/al-azif/ps4-exploit-host) Easy PS4 Exploit Hosting
- [**611**星][4y] [Batchfile] [windowslies/blockwindows](https://github.com/windowslies/blockwindows) Stop Windows 10 Nagging and Spying. Works with Win7-10
-- [**611**星][3m] [Py] [netflix/repokid](https://github.com/netflix/repokid) AWS Least Privilege for Distributed, High-Velocity Deployment
-- [**611**星][3y] [Objective-C] [macmade/keychaincracker](https://github.com/macmade/keychaincracker) macOS keychain cracking tool
-- [**611**星][19d] [Go] [evilsocket/arc](https://github.com/evilsocket/arc) 可用于管理私密数据的工具. 后端是 Go 语言编写的 RESTful 服务器, 前台是Html + JavaScript
-- [**611**星][3m] [Shell] [ashishb/osx-and-ios-security-awesome](https://github.com/ashishb/osx-and-ios-security-awesome) OSX and iOS related security tools
-- [**610**星][4m] [Lua] [jx-sec/jxwaf](https://github.com/jx-sec/jxwaf) JXWAF(锦衣盾)是一款基于openresty(nginx+lua)开发的web应用防火墙
-- [**610**星][1y] [jiangsir404/audit-learning](https://github.com/jiangsir404/audit-learning) 记录自己对《代码审计》的理解和总结,对危险函数的深入分析以及在p牛的博客和代码审计圈的收获
-- [**610**星][2y] [Py] [fanhuaandluomu/geetest_break](https://github.com/fanhuaandluomu/geetest_break) 极验验证码破解-源码+手册
-- [**609**星][4m] [Py] [faizann24/xsspy](https://github.com/faizann24/xsspy) Web Application XSS Scanner
-- [**609**星][6m] [Py] [eliasgranderubio/dagda](https://github.com/eliasgranderubio/dagda) Docker安全套件
-- [**609**星][6y] [Assembly] [adriancable/8086tiny](https://github.com/adriancable/8086tiny) Official repository for 8086tiny: a tiny PC emulator/virtual machine
+- [**611**星][4m] [Py] [faizann24/xsspy](https://github.com/faizann24/xsspy) Web Application XSS Scanner
+- [**611**星][8m] [denji/golang-tls](https://github.com/denji/golang-tls) Simple Golang HTTPS/TLS Examples
- [**608**星][7m] [JS] [vincentcox/stacoan](https://github.com/vincentcox/stacoan) StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications.
-- [**608**星][12d] [Py] [thewhiteh4t/seeker](https://github.com/thewhiteh4t/seeker) Accurately Locate Smartphones using Social Engineering
-- [**606**星][7m] [denji/golang-tls](https://github.com/denji/golang-tls) Simple Golang HTTPS/TLS Examples
-- [**605**星][10d] [C] [thewover/donut](https://github.com/thewover/donut) Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters
-- [**604**星][3m] [Py] [matlink/gplaycli](https://github.com/matlink/gplaycli) Google Play Downloader via Command line
-- [**604**星][3m] [Py] [0xgalz/virtuailor](https://github.com/0xgalz/virtuailor) 利用IDA调试获取的信息,自动创建C++的虚表
+- [**607**星][24d] [PS] [farag2/windows-10-setup-script](https://github.com/farag2/windows-10-setup-script) Script to setup Windows 10 1903/1909
+- [**607**星][3m] [Py] [matlink/gplaycli](https://github.com/matlink/gplaycli) Google Play Downloader via Command line
+- [**607**星][8m] [Shell] [cokebar/gfwlist2dnsmasq](https://github.com/cokebar/gfwlist2dnsmasq) A shell script which convert gfwlist into dnsmasq rules. Python version:
+- [**607**星][1y] [C#] [bonesoul/coiniumserv](https://github.com/bonesoul/coiniumserv) Next-gen crypto currency mining pool software
+- [**606**星][2y] [PS] [peewpw/invoke-wcmdump](https://github.com/peewpw/invoke-wcmdump) PowerShell Script to Dump Windows Credentials from the Credential Manager
+- [**606**星][7m] [aleenzz/mysql_sql_bypass_wiki](https://github.com/aleenzz/mysql_sql_bypass_wiki) mysql注入,bypass的一些心得
+- [**606**星][9m] [C#] [0xbadjuju/tokenvator](https://github.com/0xbadjuju/tokenvator) A tool to elevate privilege with Windows Tokens
+- [**605**星][15d] [404notf0und/ai-for-security-learning](https://github.com/404notf0und/ai-for-security-learning) 安全场景、基于AI的安全算法和安全数据分析学习资料整理
+- [**605**星][3m] [Py] [0xgalz/virtuailor](https://github.com/0xgalz/virtuailor) 利用IDA调试获取的信息,自动创建C++的虚表
查看详情
@@ -2024,1273 +2161,1311 @@
-- [**603**星][10m] [Py] [zdresearch/owasp-nettacker](https://github.com/zdresearch/OWASP-Nettacker) Automated Penetration Testing Framework
-- [**603**星][2y] [PowerShell] [peewpw/invoke-wcmdump](https://github.com/peewpw/invoke-wcmdump) PowerShell Script to Dump Windows Credentials from the Credential Manager
-- [**603**星][3m] [Go] [eldadru/ksniff](https://github.com/eldadru/ksniff) Kubectl plugin to ease sniffing on kubernetes pods using tcpdump and wireshark
-- [**603**星][8m] [Shell] [cokebar/gfwlist2dnsmasq](https://github.com/cokebar/gfwlist2dnsmasq) A shell script which convert gfwlist into dnsmasq rules. Python version:
-- [**602**星][1y] [C] [scottybauer/android_kernel_cve_pocs](https://github.com/scottybauer/android_kernel_cve_pocs) A list of my CVE's with POCs
+- [**604**星][2m] [Swift] [gradients/gradients](https://github.com/Gradients/Gradients) A curated collection of 180 splendid gradients made in swift
+- [**604**星][10d] [Shell] [securityftw/cs-suite](https://github.com/securityftw/cs-suite) Cloud Security Suite - One stop tool for auditing the security posture of AWS/GCP/Azure infrastructure.
+- [**603**星][1y] [C] [scottybauer/android_kernel_cve_pocs](https://github.com/scottybauer/android_kernel_cve_pocs) A list of my CVE's with POCs
+- [**602**星][28d] [Max] [maktm/flirtdb](https://github.com/Maktm/FLIRTDB) A community driven collection of IDA FLIRT signature files
+- [**602**星][19d] [Py] [webrecorder/pywb](https://github.com/webrecorder/pywb) 重放和记录Web存档
+- [**602**星][6m] [C] [pelya/android-keyboard-gadget](https://github.com/pelya/android-keyboard-gadget) Convert your Android device into USB keyboard/mouse, control your PC from your Android device remotely, including BIOS/bootloader.
+- [**602**星][7y] [Py] [m0mchil/poclbm](https://github.com/m0mchil/poclbm) poclbm:比特币挖掘
- [**602**星][2y] [Py] [bhdresh/cve-2017-0199](https://github.com/bhdresh/cve-2017-0199) Exploit toolkit CVE-2017-0199 - v4.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft Office RCE. It could generate a malicious RTF/PPSX file and deliver metasploit / meterpreter / other payload to victim without any complex configuration.
-- [**602**星][7d] [arkadiyt/bounty-targets-data](https://github.com/arkadiyt/bounty-targets-data) This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/etc) that are eligible for reports
-- [**601**星][2m] [Swift] [gradients/gradients](https://github.com/Gradients/Gradients) A curated collection of 180 splendid gradients made in swift
- [**601**星][3y] [Py] [omriher/captipper](https://github.com/omriher/captipper) Malicious HTTP traffic explorer
-- [**601**星][7m] [aleenzz/mysql_sql_bypass_wiki](https://github.com/aleenzz/mysql_sql_bypass_wiki) mysql注入,bypass的一些心得
-- [**600**星][17d] [Py] [webrecorder/pywb](https://github.com/webrecorder/pywb) Core Python Web Archiving Toolkit for replay and recording of web archives
-- [**600**星][8d] [Shell] [securityftw/cs-suite](https://github.com/securityftw/cs-suite) Cloud Security Suite - One stop tool for auditing the security posture of AWS/GCP/Azure infrastructure.
-- [**600**星][4y] [Py] [hatriot/clusterd](https://github.com/hatriot/clusterd) application server attack toolkit
-- [**599**星][26d] [Max] [maktm/flirtdb](https://github.com/Maktm/FLIRTDB) A community driven collection of IDA FLIRT signature files
-- [**599**星][6m] [C] [pelya/android-keyboard-gadget](https://github.com/pelya/android-keyboard-gadget) Convert your Android device into USB keyboard/mouse, control your PC from your Android device remotely, including BIOS/bootloader.
-- [**599**星][13d] [404notf0und/ai-for-security-learning](https://github.com/404notf0und/ai-for-security-learning) 安全场景、基于AI的安全算法和安全数据分析学习资料整理
-- [**598**星][1y] [PowerShell] [fortynorthsecurity/wmimplant](https://github.com/FortyNorthSecurity/WMImplant) This is a PowerShell based tool that is designed to act like a RAT. Its interface is that of a shell where any command that is supported is translated into a WMI-equivalent for use on a network/remote machine. WMImplant is WMI based.
+- [**601**星][2d] [C#] [microsoft/clrmd](https://github.com/microsoft/clrmd) Microsoft.Diagnostics.Runtime is a set of APIs for introspecting processes and dumps.
+- [**601**星][2y] [HTML] [jiji262/wooyun_articles](https://github.com/jiji262/wooyun_articles) drops.wooyun.org 乌云Drops文章备份
+- [**601**星][4y] [Py] [hatriot/clusterd](https://github.com/hatriot/clusterd) 应用程序服务器攻击工具包
+- [**601**星][9m] [Java] [c0ny1/chunked-coding-converter](https://github.com/c0ny1/chunked-coding-converter) Burp suite 分块传输辅助插件
+- [**600**星][30d] [C++] [mdhiggins/esp8266-http-ir-blaster](https://github.com/mdhiggins/esp8266-http-ir-blaster) ESP8266 Compatible IR Blaster that accepts HTTP commands for use with services like Amazon Echo
+- [**599**星][3d] [Py] [witten/borgmatic](https://github.com/witten/borgmatic) Simple, configuration-driven backup software for servers and workstations
+- [**599**星][2y] [Py] [secretsquirrel/sigthief](https://github.com/secretsquirrel/sigthief) 一次窃取签名并制作一个无效签名
+- [**599**星][5d] [ntkernel/lantern](https://github.com/ntkernel/lantern) V2Ray配置文件,蓝灯(Lantern)破解,手机版+win版
+- [**598**星][1y] [PS] [fortynorthsecurity/wmimplant](https://github.com/FortyNorthSecurity/WMImplant) This is a PowerShell based tool that is designed to act like a RAT. Its interface is that of a shell where any command that is supported is translated into a WMI-equivalent for use on a network/remote machine. WMImplant is WMI based.
- [**598**星][1y] [Shell] [pires/kubernetes-vagrant-coreos-cluster](https://github.com/pires/kubernetes-vagrant-coreos-cluster) Kubernetes cluster (for testing purposes) made easy with Vagrant and CoreOS.
-- [**598**星][7d] [C#] [microsoft/clrmd](https://github.com/microsoft/clrmd) Microsoft.Diagnostics.Runtime is a set of APIs for introspecting processes and dumps.
-- [**597**星][2y] [Py] [secretsquirrel/sigthief](https://github.com/secretsquirrel/sigthief) Stealing Signatures and Making One Invalid Signature at a Time
-- [**597**星][28d] [C++] [mdhiggins/esp8266-http-ir-blaster](https://github.com/mdhiggins/esp8266-http-ir-blaster) ESP8266 Compatible IR Blaster that accepts HTTP commands for use with services like Amazon Echo
-- [**597**星][2y] [HTML] [jiji262/wooyun_articles](https://github.com/jiji262/wooyun_articles) drops.wooyun.org 乌云Drops文章备份
-- [**596**星][9m] [C#] [0xbadjuju/tokenvator](https://github.com/0xbadjuju/tokenvator) A tool to elevate privilege with Windows Tokens
-- [**595**星][9d] [Py] [witten/borgmatic](https://github.com/witten/borgmatic) Simple, configuration-driven backup software for servers and workstations
-- [**595**星][2m] [PowerShell] [ramblingcookiemonster/powershell](https://github.com/ramblingcookiemonster/powershell) Various PowerShell functions and scripts
-- [**595**星][6m] [C] [hashcat/hashcat-utils](https://github.com/hashcat/hashcat-utils) Small utilities that are useful in advanced password cracking
-- [**594**星][4y] [Makefile] [zhengmin1989/thesevenweapons](https://github.com/zhengmin1989/thesevenweapons) 安卓动态调试七种武器
+- [**597**星][18d] [Py] [nongiach/arm_now](https://github.com/nongiach/arm_now) 快速创建并运行不同CPU架构的虚拟机, 用于逆向分析或执行二进制文件. 基于QEMU
+- [**597**星][1m] [Py] [hslatman/awesome-industrial-control-system-security](https://github.com/hslatman/awesome-industrial-control-system-security) 工控系统安全资源列表
+- [**597**星][6m] [C] [hashcat/hashcat-utils](https://github.com/hashcat/hashcat-utils) Small utilities that are useful in advanced password cracking
+- [**597**星][3d] [YARA] [didierstevens/didierstevenssuite](https://github.com/didierstevens/didierstevenssuite) 工具、脚本列表
+- [**597**星][12d] [Go] [antoniomika/sish](https://github.com/antoniomika/sish) An open source serveo/ngrok alternative. HTTP(S)/WS(S)/TCP Tunnels to localhost using only SSH.
+- [**596**星][1m] [siguza/ios-resources](https://github.com/siguza/ios-resources) Useful resources for iOS hacking
+- [**596**星][2m] [PS] [ramblingcookiemonster/powershell](https://github.com/ramblingcookiemonster/powershell) 各种PowerShell函数和脚本
+- [**596**星][5d] [azure/aks](https://github.com/azure/aks) Azure Kubernetes Service
+- [**595**星][4y] [Makefile] [zhengmin1989/thesevenweapons](https://github.com/zhengmin1989/thesevenweapons) 安卓动态调试七种武器
+- [**595**星][16d] [C] [openvpn/openvpn-gui](https://github.com/openvpn/openvpn-gui) OpenVPN GUI is a graphical frontend for OpenVPN running on Windows XP / Vista / 7 / 8. It creates an icon in the notification area from which you can control OpenVPN to start/stop your VPN tunnels, view the log and do other useful things.
+- [**595**星][5m] [fabrimagic72/malware-samples](https://github.com/fabrimagic72/malware-samples) 恶意软件样本
+- [**595**星][7d] [Go] [cloudflare/cloudflared](https://github.com/cloudflare/cloudflared) Argo Tunnel client
+- [**595**星][1y] [Py] [brannondorsey/passgan](https://github.com/brannondorsey/passgan) A Deep Learning Approach for Password Guessing (
+- [**594**星][23d] [Py] [glasgowembedded/glasgow](https://github.com/GlasgowEmbedded/glasgow) Scots Army Knife for electronics
+- [**594**星][3m] [Py] [thewhiteh4t/pwnedornot](https://github.com/thewhiteh4t/pwnedornot) OSINT Tool for Finding Passwords of Compromised Email Addresses
+- [**594**星][6m] [Py] [dmpayton/django-admin-honeypot](https://github.com/dmpayton/django-admin-honeypot)
- [**594**星][3y] [C++] [breakingmalwareresearch/atom-bombing](https://github.com/breakingmalwareresearch/atom-bombing) Brand New Code Injection for Windows
-- [**593**星][16d] [Py] [nongiach/arm_now](https://github.com/nongiach/arm_now) 快速创建并运行不同CPU架构的虚拟机, 用于逆向分析或执行二进制文件. 基于QEMU
-- [**593**星][1m] [YARA] [didierstevens/didierstevenssuite](https://github.com/didierstevens/didierstevenssuite) Please no pull requests for this repository. Thanks!
-- [**593**星][1y] [Py] [brannondorsey/passgan](https://github.com/brannondorsey/passgan) A Deep Learning Approach for Password Guessing (
-- [**592**星][21d] [Py] [glasgowembedded/glasgow](https://github.com/GlasgowEmbedded/glasgow) Scots Army Knife for electronics
-- [**592**星][1m] [siguza/ios-resources](https://github.com/siguza/ios-resources) Useful resources for iOS hacking
-- [**592**星][14d] [C] [openvpn/openvpn-gui](https://github.com/openvpn/openvpn-gui) OpenVPN GUI is a graphical frontend for OpenVPN running on Windows XP / Vista / 7 / 8. It creates an icon in the notification area from which you can control OpenVPN to start/stop your VPN tunnels, view the log and do other useful things.
-- [**592**星][6m] [Py] [dmpayton/django-admin-honeypot](https://github.com/dmpayton/django-admin-honeypot)
-- [**592**星][9m] [Java] [c0ny1/chunked-coding-converter](https://github.com/c0ny1/chunked-coding-converter) Burp suite 分块传输辅助插件
-- [**591**星][3m] [Py] [thewhiteh4t/pwnedornot](https://github.com/thewhiteh4t/pwnedornot) OSINT Tool for Finding Passwords of Compromised Email Addresses
-- [**591**星][2m] [Py] [pwning/public-writeup](https://github.com/pwning/public-writeup) CTF write-ups by Plaid Parliament of Pwning
-- [**591**星][5m] [fabrimagic72/malware-samples](https://github.com/fabrimagic72/malware-samples) 恶意软件样本
-- [**591**星][18d] [azure/aks](https://github.com/azure/aks) Azure Kubernetes Service
+- [**593**星][18d] [PHP] [zhuifengshaonianhanlu/pikachu](https://github.com/zhuifengshaonianhanlu/pikachu) 一个好玩的Web安全-漏洞测试平台
+- [**593**星][8d] [Py] [trustedsec/trevorc2](https://github.com/trustedsec/trevorc2) 通过正常的可浏览的网站隐藏 C&C 指令的客户端/服务器模型,因为时间间隔不同,检测变得更加困难,并且获取主机数据时不会使用 POST 请求
+- [**593**星][6d] [C] [mrexodia/titanhide](https://github.com/mrexodia/titanhide) 用于隐藏某些进程调试器的驱动程序
+- [**592**星][2m] [Py] [pwning/public-writeup](https://github.com/pwning/public-writeup) CTF write-ups by Plaid Parliament of Pwning
+- [**592**星][1m] [HTML] [owasp/railsgoat](https://github.com/owasp/railsgoat) A vulnerable version of Rails that follows the OWASP Top 10
+- [**592**星][2y] [Go] [nim4/dbshield](https://github.com/nim4/dbshield) Database firewall written in Go
+- [**591**星][2y] [Py] [sc0tfree/mentalist](https://github.com/sc0tfree/mentalist) 自定义wordlist 生成器,带界面,可生成与 Hashcat、Johnthe Ripper 兼容的 wordlist
+- [**591**星][3m] [Go] [moul/sshportal](https://github.com/moul/sshportal) Transparent SSH bastion
- [**590**星][2y] [Go] [timest/goscan](https://github.com/timest/goscan) goscan is a simple and efficient IPv4 network scanner that discovers all active devices on local subnet.
- [**590**星][11m] [pandazheng/ioshackstudy](https://github.com/pandazheng/ioshackstudy) IOS安全学习资料汇总
-- [**590**星][1m] [HTML] [owasp/railsgoat](https://github.com/owasp/railsgoat) A vulnerable version of Rails that follows the OWASP Top 10
-- [**590**星][1m] [ntkernel/lantern](https://github.com/ntkernel/lantern) V2Ray配置文件,蓝灯(Lantern)破解,手机版+win版
-- [**590**星][2y] [Go] [nim4/dbshield](https://github.com/nim4/dbshield) Database firewall written in Go
-- [**590**星][30d] [Py] [hslatman/awesome-industrial-control-system-security](https://github.com/hslatman/awesome-industrial-control-system-security) 工控系统安全资源列表
+- [**590**星][2y] [Py] [eldraco/salamandra](https://github.com/eldraco/salamandra) Salamandra is a tool to find spy microphones that use radio freq to transmit. It uses SDR.
- [**590**星][7y] [Py] [dabeaz/bitey](https://github.com/dabeaz/bitey) Import LLVM bitcode directly into Python and use it as an extension module.
-- [**589**星][2y] [Py] [eldraco/salamandra](https://github.com/eldraco/salamandra) Salamandra is a tool to find spy microphones that use radio freq to transmit. It uses SDR.
-- [**588**星][20d] [Py] [trustedsec/trevorc2](https://github.com/trustedsec/trevorc2) 通过正常的可浏览的网站隐藏 C&C 指令的客户端/服务器模型,因为时间间隔不同,检测变得更加困难,并且获取主机数据时不会使用 POST 请求
-- [**588**星][14d] [Go] [cloudflare/cloudflared](https://github.com/cloudflare/cloudflared) Argo Tunnel client
-- [**588**星][6m] [Ruby] [bit4woo/summit_ppt](https://github.com/bit4woo/summit_ppt) 各种安全大会PPT PDF
+- [**590**星][6m] [Ruby] [bit4woo/summit_ppt](https://github.com/bit4woo/summit_ppt) 各种安全大会PPT PDF
+- [**589**星][3m] [Py] [pahaz/sshtunnel](https://github.com/pahaz/sshtunnel) SSH tunnels to remote server.
+- [**589**星][1y] [brunty/awesome-checker-services](https://github.com/brunty/awesome-checker-services) List of links to the various checkers out there on the web for sites, domains, security etc
+- [**589**星][1m] [Py] [1n3/blackwidow](https://github.com/1n3/blackwidow) A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.
+- [**588**星][28d] [Go] [nytimes/gziphandler](https://github.com/nytimes/gziphandler) Go middleware to gzip HTTP responses
+- [**587**星][13d] [C++] [lhy0403/qv2ray](https://github.com/lhy0403/qv2ray) v2ray linux Windows macOS GUI, 使用 Qt & c++, 支持 vmess ss socks,支持 vmess:// 扫描二维码,路由编辑,附带 Windows/Plasma 工具栏
- [**587**星][3y] [Perl 6] [rapid7/iotseeker](https://github.com/rapid7/iotseeker) scan a network for specific types of IoT devices to detect if they are using the default, factory set credentials.
-- [**587**星][26d] [Go] [nytimes/gziphandler](https://github.com/nytimes/gziphandler) Go middleware to gzip HTTP responses
-- [**587**星][2y] [Swift] [krisyu/swift14macosapps](https://github.com/krisyu/swift14macosapps) approaching macOS development using swift with 14 mini projects.
+- [**587**星][3y] [hack-with-github/windows](https://github.com/hack-with-github/windows) Awesome tools to exploit Windows !
- [**587**星][3y] [C] [cr4sh/thinkpwn](https://github.com/cr4sh/thinkpwn) Lenovo ThinkPad System Management Mode arbitrary code execution 0day exploit
-- [**586**星][3m] [Py] [pahaz/sshtunnel](https://github.com/pahaz/sshtunnel) SSH tunnels to remote server.
-- [**586**星][1m] [Py] [1n3/blackwidow](https://github.com/1n3/blackwidow) A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.
+- [**586**星][12d] [lirantal/awesome-nodejs-security](https://github.com/lirantal/awesome-nodejs-security) Awesome Node.js Security resources
+- [**586**星][2y] [Swift] [krisyu/swift14macosapps](https://github.com/krisyu/swift14macosapps) approaching macOS development using swift with 14 mini projects.
+- [**585**星][2m] [Py] [thinkst/opencanary](https://github.com/thinkst/opencanary) Modular and decentralised honeypot
- [**585**星][8m] [Java] [olacabs/jackhammer](https://github.com/olacabs/jackhammer) 安全漏洞评估和管理工具
-- [**585**星][3y] [hack-with-github/windows](https://github.com/hack-with-github/windows) Awesome tools to exploit Windows !
+- [**585**星][21d] [C++] [henrypp/memreduct](https://github.com/henrypp/memreduct) Lightweight real-time memory management application to monitor and clean system memory on your computer.
+- [**585**星][4y] [certsocietegenerale/irm](https://github.com/certsocietegenerale/irm) Incident Response Methodologies
- [**584**星][8m] [Py] [woj-ciech/danger-zone](https://github.com/woj-ciech/danger-zone) Correlate data between domains, IPs and email addresses, present it as a graph and store everything into Elasticsearch and JSON files.
- [**584**星][9m] [C++] [secrary/makin](https://github.com/secrary/makin) reveal anti-debugging and anti-VM tricks
-- [**584**星][2y] [Java] [findbugsproject/findbugs](https://github.com/findbugsproject/findbugs) The new home of the FindBugs project
-- [**584**星][4y] [certsocietegenerale/irm](https://github.com/certsocietegenerale/irm) Incident Response Methodologies
-- [**584**星][10d] [Go] [antoniomika/sish](https://github.com/antoniomika/sish) An open source serveo/ngrok alternative. HTTP(S)/WS(S)/TCP Tunnels to localhost using only SSH.
-- [**583**星][2y] [Py] [sc0tfree/mentalist](https://github.com/sc0tfree/mentalist) 自定义wordlist 生成器,带界面,可生成与 Hashcat、Johnthe Ripper 兼容的 wordlist
-- [**583**星][10d] [lirantal/awesome-nodejs-security](https://github.com/lirantal/awesome-nodejs-security) Awesome Node.js Security resources
+- [**584**星][1m] [PS] [monoxgas/srdi](https://github.com/monoxgas/srdi) Shellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode
+- [**584**星][2y] [Java] [findbugsproject/findbugs](https://github.com/findbugsproject/findbugs) 一个使用静态分析在Java代码中查找错误的程序
+- [**584**星][11d] [Ruby] [dev-sec/ansible-ssh-hardening](https://github.com/dev-sec/ansible-ssh-hardening) This Ansible role provides numerous security-related ssh configurations, providing all-round base protection.
+- [**583**星][2d] [Py] [vivisect/vivisect](https://github.com/vivisect/vivisect)
+- [**583**星][3y] [C] [ktap/ktap](https://github.com/ktap/ktap) a new scripting dynamic tracing tool for Linux
- [**583**星][5m] [d30sa1/rootkits-list-download](https://github.com/d30sa1/rootkits-list-download) Rootkit收集
-- [**582**星][16d] [PHP] [zhuifengshaonianhanlu/pikachu](https://github.com/zhuifengshaonianhanlu/pikachu) 一个好玩的Web安全-漏洞测试平台
-- [**582**星][7d] [Py] [vivisect/vivisect](https://github.com/vivisect/vivisect)
-- [**582**星][2m] [Py] [thinkst/opencanary](https://github.com/thinkst/opencanary) Modular and decentralised honeypot
-- [**582**星][17d] [C] [mrexodia/titanhide](https://github.com/mrexodia/titanhide) Hiding kernel-driver for x86/x64.
-- [**582**星][3y] [C] [ktap/ktap](https://github.com/ktap/ktap) a new scripting dynamic tracing tool for Linux
+- [**582**星][8d] [Py] [facebookincubator/weasel](https://github.com/facebookincubator/weasel) DNS covert channel implant for Red Teams.
+- [**582**星][1y] [Py] [softscheck/tplink-smartplug](https://github.com/softscheck/tplink-smartplug) TP-Link WiFi SmartPlug Client and Wireshark Dissector
+- [**582**星][7m] [Py] [ekultek/zeus-scanner](https://github.com/ekultek/zeus-scanner) Advanced reconnaissance utility
+- [**582**星][2m] [Go] [dimitarpetrov/stegify](https://github.com/dimitarpetrov/stegify) Go tool for LSB steganography, capable of hiding any file within an image.
+- [**581**星][1y] [Py] [spencerdodd/kernelpop](https://github.com/spencerdodd/kernelpop) 内核提权枚举和漏洞利用框架
+- [**581**星][2m] [C++] [secrary/andromeda](https://github.com/secrary/andromeda) Andromeda - Interactive Reverse Engineering Tool for Android Applications
+- [**581**星][9m] [Py] [romanz/amodem](https://github.com/romanz/amodem) 使用简单的耳机在两台计算机之间传输文件,实现真正的气密通信(通过扬声器和麦克风)或音频电缆(以提高传输速度)
- [**581**星][3y] [Py] [mlsecproject/combine](https://github.com/mlsecproject/combine) 从公开的资源中收集IOC
-- [**581**星][9d] [Ruby] [dev-sec/ansible-ssh-hardening](https://github.com/dev-sec/ansible-ssh-hardening) This Ansible role provides numerous security-related ssh configurations, providing all-round base protection.
+- [**581**星][24d] [Ruby] [hackplayers/evil-winrm](https://github.com/hackplayers/evil-winrm) 用户Hacking/渗透的终极WinRM shell
- [**581**星][1y] [JS] [cryptogenic/ps4-5.05-kernel-exploit](https://github.com/cryptogenic/ps4-5.05-kernel-exploit) A fully implemented kernel exploit for the PS4 on 5.05FW
-- [**580**星][1y] [Py] [spencerdodd/kernelpop](https://github.com/spencerdodd/kernelpop) 内核提权枚举和漏洞利用框架
+- [**581**星][3d] [clarketm/proxy-list](https://github.com/clarketm/proxy-list) A list of free, public, forward proxy servers. UPDATED DAILY!
- [**580**星][2m] [C] [pyca/bcrypt](https://github.com/pyca/bcrypt) Modern(-ish) password hashing for your software and your servers
-- [**580**星][19d] [C++] [henrypp/memreduct](https://github.com/henrypp/memreduct) Lightweight real-time memory management application to monitor and clean system memory on your computer.
-- [**580**星][13d] [Py] [gwen001/pentest-tools](https://github.com/gwen001/pentest-tools) Custom pentesting tools
-- [**580**星][7m] [Py] [ekultek/zeus-scanner](https://github.com/ekultek/zeus-scanner) Advanced reconnaissance utility
+- [**580**星][2y] [PHP] [pentestgeek/phishing-frenzy](https://github.com/pentestgeek/phishing-frenzy) Rubyon Rails 钓鱼框架
+- [**580**星][6m] [nshalabi/sysmontools](https://github.com/nshalabi/sysmontools) Utilities for Sysmon
+- [**580**星][7m] [Py] [googlecloudplatform/flask-talisman](https://github.com/googlecloudplatform/flask-talisman) HTTP security headers for Flask
- [**580**星][2y] [Py] [ant4g0nist/lisa.py](https://github.com/ant4g0nist/lisa.py) -An Exploit Dev Swiss Army Knife.
-- [**579**星][2y] [PHP] [pentestgeek/phishing-frenzy](https://github.com/pentestgeek/phishing-frenzy) Rubyon Rails 钓鱼框架
+- [**579**星][1y] [CSS] [functionclub/ssr-bash-python](https://github.com/functionclub/ssr-bash-python) 一个SSR多用户控制脚本
- [**579**星][1y] [Go] [manifoldco/torus-cli](https://github.com/manifoldco/torus-cli) A secure, shared workspace for secrets
+- [**579**星][1m] [C] [getdnsapi/stubby](https://github.com/getdnsapi/stubby) Stubby is the name given to a mode of using getdns which enables it to act as a local DNS Privacy stub resolver (using DNS-over-TLS).
+- [**579**星][1y] [Java] [federicodotta/brida](https://github.com/federicodotta/brida) The new bridge between Burp Suite and Frida!
- [**579**星][4y] [80vul/phpcodz](https://github.com/80vul/phpcodz) 在php源代码的基础上去分析容易导致php应用程序的一些安全问题的根本所在
-- [**578**星][9m] [Py] [romanz/amodem](https://github.com/romanz/amodem) transmit a file between 2 computers, using a simple headset, allowing true air-gapped communication (via a speaker and a microphone), or an audio cable (for higher transmission speed)
+- [**578**星][1y] [C#] [tyranid/dotnettojscript](https://github.com/tyranid/dotnettojscript) 创建从内存中加载.NET v2程序集的JScript文件
+- [**578**星][6m] [Py] [timthony/self_drive](https://github.com/timthony/self_drive) 基于树莓派的自动驾驶小车,利用树莓派和tensorflow实现小车在赛道的自动驾驶。(Self-driving car based on raspberry pi(tensorflow))
+- [**578**星][3y] [Pascal] [t-d-k/librecrypt](https://github.com/t-d-k/librecrypt) Windows的透明、即时磁盘加密,兼容LUKS
- [**578**星][10m] [mtivadar/windows10_ntfs_crash_dos](https://github.com/mtivadar/windows10_ntfs_crash_dos) Windows NTFS文件系统崩溃漏洞PoC
-- [**577**星][3y] [Pascal] [t-d-k/librecrypt](https://github.com/t-d-k/librecrypt) Windows的透明、即时磁盘加密,兼容LUKS
-- [**577**星][1y] [Py] [softscheck/tplink-smartplug](https://github.com/softscheck/tplink-smartplug) TP-Link WiFi SmartPlug Client and Wireshark Dissector
-- [**577**星][2m] [C++] [secrary/andromeda](https://github.com/secrary/andromeda) Andromeda - Interactive Reverse Engineering Tool for Android Applications
+- [**577**星][1y] [C++] [qbdi/qbdi](https://github.com/QBDI/QBDI) A Dynamic Binary Instrumentation framework based on LLVM.
- [**577**星][12m] [HTML] [r00t-3xp10it/morpheus](https://github.com/r00t-3xp10it/morpheus) Morpheus - Automating Ettercap TCP/IP (MITM-hijacking Tool)
-- [**577**星][2m] [Go] [dimitarpetrov/stegify](https://github.com/dimitarpetrov/stegify) Go tool for LSB steganography, capable of hiding any file within an image.
-- [**576**星][1y] [C#] [tyranid/dotnettojscript](https://github.com/tyranid/dotnettojscript) A tool to create a JScript file which loads a .NET v2 assembly from memory.
-- [**576**星][5m] [nshalabi/sysmontools](https://github.com/nshalabi/sysmontools) Utilities for Sysmon
-- [**576**星][7m] [Py] [googlecloudplatform/flask-talisman](https://github.com/googlecloudplatform/flask-talisman) HTTP security headers for Flask
+- [**576**星][24d] [PS] [threatexpress/red-team-scripts](https://github.com/threatexpress/red-team-scripts) A collection of Red Team focused tools, scripts, and notes
+- [**576**星][3d] [Go] [mysteriumnetwork/node](https://github.com/mysteriumnetwork/node) Mysterium Node - VPN server and client for Mysterium Network
+- [**576**星][3m] [Py] [jonluca/anubis](https://github.com/jonluca/anubis) Subdomain enumeration and information gathering tool
- [**576**星][2y] [Py] [dutchgraa/crackcoin](https://github.com/dutchgraa/crackcoin) Very basic blockchain-free cryptocurrency PoC in Python
-- [**575**星][1y] [CSS] [functionclub/ssr-bash-python](https://github.com/functionclub/ssr-bash-python) 一个SSR多用户控制脚本
-- [**575**星][1y] [C++] [qbdi/qbdi](https://github.com/QBDI/QBDI) A Dynamic Binary Instrumentation framework based on LLVM.
+- [**575**星][18d] [Go] [yggdrasil-network/yggdrasil-go](https://github.com/yggdrasil-network/yggdrasil-go) An experiment in scalable routing as an encrypted IPv6 overlay network
+- [**575**星][2m] [Go] [shopify/kubeaudit](https://github.com/shopify/kubeaudit) kubeaudit helps you audit your Kubernetes clusters against common security controls
- [**575**星][2y] [JS] [shadowsocks-plus/shadowsocks-plus](https://github.com/shadowsocks-plus/shadowsocks-plus)
-- [**575**星][3m] [Py] [jonluca/anubis](https://github.com/jonluca/anubis) Subdomain enumeration and information gathering tool
+- [**575**星][9m] [Py] [fox-it/mitm6](https://github.com/fox-it/mitm6) exploits the default configuration of Windows to take over the default DNS server
- [**574**星][1m] [Py] [nekmo/amazon-dash](https://github.com/nekmo/amazon-dash) Hack your Amazon Dash to run what you want.
-- [**574**星][22d] [PowerShell] [threatexpress/red-team-scripts](https://github.com/threatexpress/red-team-scripts) A collection of Red Team focused tools, scripts, and notes
+- [**574**星][6m] [PHP] [s3inlc/hashtopolis](https://github.com/s3inlc/hashtopolis) Hashcat wrapper, 用于跨平台分布式Hash破解
+- [**574**星][5m] [Py] [nidem/kerberoast](https://github.com/nidem/kerberoast) 一系列用于攻击MS Kerberos实现的工具
+- [**574**星][4m] [Py] [neo23x0/yargen](https://github.com/neo23x0/yargen) yarGen is a generator for YARA rules
+- [**574**星][3y] [C] [iagox86/hash_extender](https://github.com/iagox86/hash_extender)
+- [**574**星][4y] [C#] [elevenpaths/evilfoca](https://github.com/elevenpaths/evilfoca) Tool to analyze and test security in IPv4 and IPv6 data networks
+- [**574**星][14d] [Perl] [bollwarm/sectoolset](https://github.com/bollwarm/sectoolset) 安全项目工具集合
+- [**573**星][2y] [C++] [zneak/fcd](https://github.com/zneak/fcd) An optimizing decompiler
- [**573**星][4y] [C++] [microsoft/iediagnosticsadapter](https://github.com/microsoft/iediagnosticsadapter) IE Diagnostics Adapter is a standalone exe that enables tools to debug and diagnose IE11 using the Chrome remote debug protocol.
- [**573**星][3y] [C] [jgarzik/cpuminer](https://github.com/jgarzik/cpuminer) CPU miner for bitcoin
-- [**573**星][3y] [C] [iagox86/hash_extender](https://github.com/iagox86/hash_extender)
-- [**573**星][4y] [C#] [elevenpaths/evilfoca](https://github.com/elevenpaths/evilfoca) Tool to analyze and test security in IPv4 and IPv6 data networks
-- [**572**星][2y] [C++] [zneak/fcd](https://github.com/zneak/fcd) An optimizing decompiler
+- [**573**星][3m] [Perl] [alisamtechnology/atscan](https://github.com/alisamtechnology/atscan) Advanced dork Search & Mass Exploit Scanner
+- [**572**星][27d] [Py] [0kee-team/watchad](https://github.com/0kee-team/watchad) AD Security Intrusion Detection System
+- [**572**星][2y] [Py] [nnamon/linux-exploitation-course](https://github.com/nnamon/linux-exploitation-course) 中级 Linux 漏洞开发课程
+- [**572**星][2y] [hack-with-github/awesome-security-gists](https://github.com/hack-with-github/awesome-security-gists) Gist收集
- [**572**星][2m] [HTML] [gwillem/magento-malware-scanner](https://github.com/gwillem/magento-malware-scanner) 用于检测 Magento 恶意软件的规则/样本集合
-- [**572**星][1m] [C] [getdnsapi/stubby](https://github.com/getdnsapi/stubby) Stubby is the name given to a mode of using getdns which enables it to act as a local DNS Privacy stub resolver (using DNS-over-TLS).
-- [**572**星][8d] [clarketm/proxy-list](https://github.com/clarketm/proxy-list) A list of free, public, forward proxy servers. UPDATED DAILY!
-- [**572**星][3y] [HTML] [bitdust/wamacry](https://github.com/bitdust/wamacry) a fake WannaCry
+- [**572**星][16d] [Java] [alexzaitsev/apk-dependency-graph](https://github.com/alexzaitsev/apk-dependency-graph) Android class dependency visualizer. This tool helps to visualize the current state of the project.
+- [**571**星][10d] [Py] [nsacyber/walkoff](https://github.com/nsacyber/WALKOFF) A flexible, easy to use, automation framework allowing users to integrate their capabilities and devices to cut through the repetitive, tedious tasks slowing them down. #nsacyber
- [**571**星][11m] [Py] [ddevault/pass-rotate](https://github.com/ddevault/pass-rotate) A tool and library for rotating your password on online services
-- [**571**星][5m] [Py] [nidem/kerberoast](https://github.com/nidem/kerberoast) a series of tools for attacking MS Kerberos implementations
-- [**571**星][8m] [Py] [fox-it/mitm6](https://github.com/fox-it/mitm6) exploits the default configuration of Windows to take over the default DNS server
-- [**571**星][14d] [Java] [alexzaitsev/apk-dependency-graph](https://github.com/alexzaitsev/apk-dependency-graph) Android class dependency visualizer. This tool helps to visualize the current state of the project.
-- [**570**星][16d] [Go] [yggdrasil-network/yggdrasil-go](https://github.com/yggdrasil-network/yggdrasil-go) An experiment in scalable routing as an encrypted IPv6 overlay network
-- [**570**星][2y] [Py] [nnamon/linux-exploitation-course](https://github.com/nnamon/linux-exploitation-course) 中级 Linux 漏洞开发课程
-- [**570**星][1y] [Java] [federicodotta/brida](https://github.com/federicodotta/brida) The new bridge between Burp Suite and Frida!
-- [**570**星][12d] [Perl] [bollwarm/sectoolset](https://github.com/bollwarm/sectoolset) 安全项目工具集合
+- [**571**星][4y] [Go] [fzipp/gocyclo](https://github.com/fzipp/gocyclo) Calculate cyclomatic complexities of functions in Go source code.
+- [**571**星][3y] [HTML] [bitdust/wamacry](https://github.com/bitdust/wamacry) 假装自己是个病毒
+- [**570**星][2m] [Py] [tarunkant/gopherus](https://github.com/tarunkant/gopherus) This tool generates gopher link for exploiting SSRF and gaining RCE in various servers
+- [**570**星][23d] [C] [jhallen/joes-sandbox](https://github.com/jhallen/joes-sandbox)
+- [**570**星][18d] [Py] [graphenex/graphenex](https://github.com/graphenex/graphenex) Automated System Hardening Framework
+- [**570**星][2y] [PS] [411hall/jaws](https://github.com/411hall/jaws) JAWS - Just Another Windows (Enum) Script
+- [**569**星][7m] [ObjC] [rpetrich/captainhook](https://github.com/rpetrich/captainhook) Common hooking/monkey patching headers for Objective-C on Mac OS X and iPhone OS. MIT licensed
- [**569**星][4y] [Py] [musalbas/heartbleed-masstest](https://github.com/musalbas/heartbleed-masstest) Multi-threaded tool for scanning many hosts for CVE-2014-0160.
-- [**569**星][1m] [PowerShell] [monoxgas/srdi](https://github.com/monoxgas/srdi) Shellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode
-- [**569**星][2y] [hack-with-github/awesome-security-gists](https://github.com/hack-with-github/awesome-security-gists) Gist收集
-- [**569**星][10d] [Java] [guardianproject/netcipher](https://github.com/guardianproject/netcipher) a library for Android that provides multiple means to improve network security in mobile applications
-- [**569**星][16d] [Py] [graphenex/graphenex](https://github.com/graphenex/graphenex) Automated System Hardening Framework
-- [**569**星][1y] [C] [externalist/exploit_playground](https://github.com/externalist/exploit_playground) Analysis of public exploits or my 1day exploits
-- [**569**星][3m] [Perl] [alisamtechnology/atscan](https://github.com/alisamtechnology/atscan) Advanced dork Search & Mass Exploit Scanner
-- [**568**星][1y] [Solidity] [crytic/not-so-smart-contracts](https://github.com/crytic/not-so-smart-contracts) Examples of Solidity security issues
-- [**568**星][2m] [Go] [shopify/kubeaudit](https://github.com/shopify/kubeaudit) kubeaudit helps you audit your Kubernetes clusters against common security controls
-- [**568**星][7m] [Objective-C] [rpetrich/captainhook](https://github.com/rpetrich/captainhook) Common hooking/monkey patching headers for Objective-C on Mac OS X and iPhone OS. MIT licensed
-- [**568**星][21d] [C] [jhallen/joes-sandbox](https://github.com/jhallen/joes-sandbox)
-- [**568**星][2y] [PowerShell] [411hall/jaws](https://github.com/411hall/jaws) JAWS - Just Another Windows (Enum) Script
-- [**567**星][6m] [PHP] [s3inlc/hashtopolis](https://github.com/s3inlc/hashtopolis) Hashcat wrapper, 用于跨平台分布式Hash破解
-- [**567**星][4m] [Py] [neo23x0/yargen](https://github.com/neo23x0/yargen) yarGen is a generator for YARA rules
-- [**567**星][4y] [Go] [fzipp/gocyclo](https://github.com/fzipp/gocyclo) Calculate cyclomatic complexities of functions in Go source code.
-- [**566**星][8d] [Py] [nsacyber/walkoff](https://github.com/nsacyber/WALKOFF) A flexible, easy to use, automation framework allowing users to integrate their capabilities and devices to cut through the repetitive, tedious tasks slowing them down. #nsacyber
-- [**566**星][2m] [Py] [tarunkant/gopherus](https://github.com/tarunkant/gopherus) This tool generates gopher link for exploiting SSRF and gaining RCE in various servers
-- [**566**星][10m] [JS] [raineorshine/solgraph](https://github.com/raineorshine/solgraph) Visualize Solidity control flow for smart contract security analysis.
-- [**566**星][2y] [C] [matthijskooijman/arduino-lmic](https://github.com/matthijskooijman/arduino-lmic) LoraWAN-in-C library, adapted to run under the Arduino environment
-- [**565**星][6d] [Py] [facebookincubator/weasel](https://github.com/facebookincubator/weasel) DNS covert channel implant for Red Teams.
-- [**565**星][5m] [C++] [sgan81/apfs-fuse](https://github.com/sgan81/apfs-fuse) FUSE driver for APFS (Apple File System)
-- [**565**星][3m] [C++] [lowpowerlab/rfm69](https://github.com/lowpowerlab/rfm69) RFM69 library for RFM69W, RFM69HW, RFM69CW, RFM69HCW (semtech SX1231, SX1231H)
+- [**569**星][12d] [Java] [guardianproject/netcipher](https://github.com/guardianproject/netcipher) a library for Android that provides multiple means to improve network security in mobile applications
+- [**569**星][5m] [Py] [codingo/vhostscan](https://github.com/codingo/vhostscan) A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.
+- [**568**星][1y] [Solidity] [crytic/not-so-smart-contracts](https://github.com/crytic/not-so-smart-contracts) 常见的以太坊智能合约漏洞示例,包括来自真实智能合约的代码。
+- [**568**星][5m] [C++] [sgan81/apfs-fuse](https://github.com/sgan81/apfs-fuse) FUSE driver for APFS (Apple File System)
+- [**568**星][11m] [Py] [genetic-malware/ebowla](https://github.com/genetic-malware/ebowla) Framework for Making Environmental Keyed Payloads (NO LONGER SUPPORTED)
+- [**568**星][2d] [HTML] [fate0/proxylist](https://github.com/fate0/proxylist) proxylist, generate by fate0/getproxy project in every 15 minute
+- [**568**星][1y] [C] [externalist/exploit_playground](https://github.com/externalist/exploit_playground) Analysis of public exploits or my 1day exploits
+- [**567**星][2y] [Visual Basic .NET] [mdsecactivebreach/cactustorch](https://github.com/mdsecactivebreach/cactustorch) Payload Generation for Adversary Simulations
+- [**567**星][2y] [C] [matthijskooijman/arduino-lmic](https://github.com/matthijskooijman/arduino-lmic) LoraWAN-in-C library, adapted to run under the Arduino environment
+- [**567**星][3m] [C++] [lowpowerlab/rfm69](https://github.com/lowpowerlab/rfm69) RFM69 library for RFM69W, RFM69HW, RFM69CW, RFM69HCW (semtech SX1231, SX1231H)
+- [**566**星][11m] [JS] [raineorshine/solgraph](https://github.com/raineorshine/solgraph) Visualize Solidity control flow for smart contract security analysis.
+- [**566**星][10m] [C] [justinsteven/dostackbufferoverflowgood](https://github.com/justinsteven/dostackbufferoverflowgood) 跨站点脚本编写者的演示和教程,这些站点编写者不能很好地堆积缓冲区溢出,并且也想做其他事情
+- [**565**星][3y] [HTML] [salesforce/vulnreport](https://github.com/salesforce/vulnreport) 渗透测试管理和自动化平台
+- [**565**星][21d] [ObjC] [hdb-li/lldebugtool](https://github.com/hdb-li/lldebugtool) LLDebugTool is a debugging tool for developers and testers that can help you analyze and manipulate data in non-xcode situations.
- [**565**星][6m] [C#] [fremag/memoscope.net](https://github.com/fremag/memoscope.net) Dump and analyze .Net applications memory ( a gui for WinDbg and ClrMd )
- [**565**星][3y] [Py] [edwardz246003/iis_exploit](https://github.com/edwardz246003/iis_exploit) Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header beginning with "If: Port Knocking
-- [**510**星][3m] [Java] [megatronking/stringfog](https://github.com/megatronking/stringfog) 一款自动对字节码中的字符串进行加密Android插件工具
-- [**510**星][3y] [Py] [jesparza/peepdf](https://github.com/jesparza/peepdf) Powerful Python tool to analyze PDF documents
-- [**510**星][10m] [Py] [fbessez/tinder](https://github.com/fbessez/tinder) Official November 2019 Documentation for Tinder's API
-- [**509**星][11d] [C] [mohuihui/antispy](https://github.com/mohuihui/antispy) AntiSpy is a free but powerful anti virus and rootkits toolkit.It offers you the ability with the highest privileges that can detect,analyze and restore various kernel modifications and hooks.With its assistance,you can easily spot and neutralize malwares hidden from normal detectors.
+- [**511**星][5m] [C++] [shuax/greenchrome](https://github.com/shuax/greenchrome) 超好用的Chrome浏览器增强软件
+- [**511**星][30d] [Java] [rub-nds/tls-attacker](https://github.com/rub-nds/tls-attacker) TLS-Attacker is a Java-based framework for analyzing TLS libraries. It is developed by the Ruhr University Bochum (
+- [**511**星][2d] [C#] [michaelgrafnetter/dsinternals](https://github.com/michaelgrafnetter/dsinternals) Directory Services Internals (DSInternals) PowerShell Module and Framework
+- [**511**星][2y] [C] [larryli/putty](https://github.com/larryli/putty) PuTTY 中文版,原
+- [**510**星][29d] [no-github/digital-privacy](https://github.com/no-github/digital-privacy) 一个关于数字隐私搜集、保护、清理集一体的方案,外加开源信息收集(OSINT)对抗
+- [**510**星][3d] [Perl] [mrash/fwknop](https://github.com/mrash/fwknop) Single Packet Authorization > Port Knocking
+- [**510**星][9d] [C++] [miki151/keeperrl](https://github.com/miki151/keeperrl) Source code of KeeperRL
- [**509**星][2y] [Py] [robindavid/lsb-steganography](https://github.com/robindavid/lsb-steganography) Python program to steganography files into images using the Least Significant Bit.
- [**509**星][3y] [Py] [reyammer/shellnoob](https://github.com/reyammer/shellnoob) A shellcode writing toolkit
- [**509**星][5m] [C] [nurupo/rootkit](https://github.com/nurupo/rootkit) Linux rootkit,针对 Ubuntu 16.04 及 10.04 (Linux 内核 4.4.0/2.6.32), 支持 i386 和 amd64
-- [**508**星][5m] [C++] [shuax/greenchrome](https://github.com/shuax/greenchrome) 增强Chrome的工具
-- [**507**星][2y] [C] [samyk/opensesame](https://github.com/samyk/opensesame) OpenSesame attacks wireless garages and can open most fixed-code garages and gates in seconds using a Mattel toy
-- [**507**星][1m] [Py] [platomav/meanalyzer](https://github.com/platomav/meanalyzer) Intel Engine Firmware Analysis Tool
-- [**507**星][14d] [Py] [mozillasecurity/funfuzz](https://github.com/mozillasecurity/funfuzz) A collection of fuzzers in a harness for testing the SpiderMonkey JavaScript engine.
-- [**506**星][2y] [Py] [sjvasquez/web-traffic-forecasting](https://github.com/sjvasquez/web-traffic-forecasting) Kaggle | Web Traffic Forecasting
+- [**509**星][12m] [Go] [mthbernardes/gtrs](https://github.com/mthbernardes/gtrs) 使用Google翻译器作为代理将任意命令发送到受感染的计算机
+- [**508**星][3m] [C++] [xmrig/xmrig-nvidia](https://github.com/xmrig/xmrig-nvidia) xmrig-nvidia: 门罗币挖矿代码 N卡版本
+- [**508**星][2y] [Py] [sjvasquez/web-traffic-forecasting](https://github.com/sjvasquez/web-traffic-forecasting) Kaggle | Web Traffic Forecasting
+- [**508**星][2y] [C] [samyk/opensesame](https://github.com/samyk/opensesame) OpenSesame attacks wireless garages and can open most fixed-code garages and gates in seconds using a Mattel toy
+- [**508**星][1m] [Py] [platomav/meanalyzer](https://github.com/platomav/meanalyzer) Intel Engine Firmware Analysis Tool
+- [**508**星][2m] [Groovy] [bryansharp/hibeaver](https://github.com/bryansharp/hibeaver) Java字节码修改神器
+- [**507**星][11m] [Py] [idarlingteam/idarling](https://github.com/IDArlingTeam/IDArling) 多人协作插件
+- [**507**星][5d] [Py] [mozillasecurity/funfuzz](https://github.com/mozillasecurity/funfuzz) A collection of fuzzers in a harness for testing the SpiderMonkey JavaScript engine.
+- [**507**星][7d] [Py] [certtools/intelmq](https://github.com/certtools/intelmq) IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
- [**506**星][5m] [Py] [rabbitstack/fibratus](https://github.com/rabbitstack/fibratus) Windows内核探索和跟踪工具
-- [**506**星][26d] [no-github/digital-privacy](https://github.com/no-github/digital-privacy) 一个关于数字隐私搜集、保护、清理集一体的方案,外加开源信息收集(OSINT)对抗
-- [**506**星][2y] [C] [larryli/putty](https://github.com/larryli/putty) PuTTY 中文版,原
-- [**505**星][11m] [Py] [idarlingteam/idarling](https://github.com/IDArlingTeam/IDArling) 多人协作插件
-- [**505**星][11d] [Py] [certtools/intelmq](https://github.com/certtools/intelmq) IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
-- [**505**星][2m] [Groovy] [bryansharp/hibeaver](https://github.com/bryansharp/hibeaver) Java字节码修改神器
-- [**504**星][3y] [OCaml] [trustinsoft/tis-interpreter](https://github.com/trustinsoft/tis-interpreter) An interpreter for finding subtle bugs in programs written in standard C
-- [**504**星][4m] [PHP] [nettitude/xss_payloads](https://github.com/nettitude/xss_payloads) Exploitation for XSS
+- [**506**星][4m] [PHP] [nettitude/xss_payloads](https://github.com/nettitude/xss_payloads) Exploitation for XSS
+- [**506**星][7m] [C] [iovisor/ply](https://github.com/iovisor/ply) Dynamic Tracing in Linux
+- [**506**星][5m] [PHP] [delight-im/php-auth](https://github.com/delight-im/php-auth) Authentication for PHP. Simple, lightweight and secure.
+- [**505**星][5d] [Py] [theresafewconors/sooty](https://github.com/theresafewconors/sooty) The SOC Analysts all-in-one CLI tool to automate and speed up workflow.
+- [**505**星][8m] [JS] [mindedsecurity/jstillery](https://github.com/mindedsecurity/jstillery) Advanced JavaScript Deobfuscation via Partial Evaluation
+- [**505**星][4m] [Java] [happylishang/cacheemulatorchecker](https://github.com/happylishang/cacheemulatorchecker) Android模拟器检测,检测Android模拟器 ,获取相对真实的IMEI AndroidId 序列号 MAC地址等,作为DeviceID,应对防刷需求等
+- [**504**星][2d] [C] [greenbone/openvas](https://github.com/greenbone/openvas) Open Vulnerability Assessment Scanner
+- [**504**星][3y] [OCaml] [trustinsoft/tis-interpreter](https://github.com/trustinsoft/tis-interpreter) 在执行以传统方式编译的相同程序时,检测C程序中细微的错误,这些错误可能不会产生明显的影响。
+- [**504**星][3m] [Go] [timothyye/godns](https://github.com/timothyye/godns) A dynamic DNS client tool, supports AliDNS, Cloudflare, Google Domains, DNSPod, HE.net & DuckDNS, written in Go.
- [**504**星][3m] [mutability/dump1090](https://github.com/mutability/dump1090) Dump1090 is a simple Mode S decoder for RTLSDR devices
-- [**503**星][12d] [PowerShell] [s3cur3th1ssh1t/winpwn](https://github.com/S3cur3Th1sSh1t/WinPwn) Automation for internal Windows Penetrationtest / AD-Security
+- [**503**星][2y] [Java] [nsacyber/grassmarlin](https://github.com/nsacyber/GRASSMARLIN) Provides situational awareness of Industrial Control Systems (ICS) and Supervisory Control and Data Acquisition (SCADA) networks in support of network security assessments. #nsacyber
+- [**503**星][12m] [C] [google/ktsan](https://github.com/google/ktsan) 用于Linux内核的快速数据竞赛检测器
+- [**502**星][2y] [C++] [andrivet/advobfuscator](https://github.com/andrivet/advobfuscator) Obfuscation library based on C++11/14 and metaprogramming
- [**502**星][2y] [JS] [kevva/wifi-password](https://github.com/kevva/wifi-password) Get current wifi password
-- [**502**星][8m] [JS] [mindedsecurity/jstillery](https://github.com/mindedsecurity/jstillery) Advanced JavaScript Deobfuscation via Partial Evaluation
+- [**502**星][3m] [Go] [cyberark/summon](https://github.com/cyberark/summon) CLI that provides on-demand secrets access for common DevOps tools
+- [**502**星][1m] [Py] [storyyeller/enjarify](https://github.com/storyyeller/enjarify) 将Dalvik字节码转为对应的Java字节码(google Fork版)
- [**502**星][9m] [C#] [lowleveldesign/wtrace](https://github.com/lowleveldesign/wtrace) Command line tracing tool for Windows, based on ETW.
- [**502**星][7m] [Py] [lijiejie/ds_store_exp](https://github.com/lijiejie/ds_store_exp) A .DS_Store file disclosure exploit. It parses .DS_Store file and downloads files recursively.
-- [**502**星][7m] [C] [iovisor/ply](https://github.com/iovisor/ply) Dynamic Tracing in Linux
-- [**502**星][4m] [PHP] [delight-im/php-auth](https://github.com/delight-im/php-auth) Authentication for PHP. Simple, lightweight and secure.
-- [**501**星][2y] [Java] [nsacyber/grassmarlin](https://github.com/nsacyber/GRASSMARLIN) Provides situational awareness of Industrial Control Systems (ICS) and Supervisory Control and Data Acquisition (SCADA) networks in support of network security assessments. #nsacyber
-- [**501**星][3m] [Go] [cyberark/summon](https://github.com/cyberark/summon) CLI that provides on-demand secrets access for common DevOps tools
-- [**501**星][4m] [Java] [happylishang/cacheemulatorchecker](https://github.com/happylishang/cacheemulatorchecker) Android模拟器检测,检测Android模拟器 ,获取相对真实的IMEI AndroidId 序列号 MAC地址等,作为DeviceID,应对防刷需求等
-- [**501**星][2y] [Py] [chybeta/cmspoc](https://github.com/chybeta/cmspoc) CMS渗透测试框架
-- [**501**星][2m] [Py] [byt3bl33d3r/sprayingtoolkit](https://github.com/byt3bl33d3r/sprayingtoolkit) Scripts to make password spraying attacks against Lync/S4B & OWA a lot quicker, less painful and more efficient
-- [**500**星][2y] [C++] [andrivet/advobfuscator](https://github.com/andrivet/advobfuscator) Obfuscation library based on C++11/14 and metaprogramming
-- [**500**星][29d] [C#] [michaelgrafnetter/dsinternals](https://github.com/michaelgrafnetter/dsinternals) Directory Services Internals (DSInternals) PowerShell Module and Framework
-- [**500**星][12m] [C] [google/ktsan](https://github.com/google/ktsan) KernelThreadSanitizer, a fast data race detector for the Linux kernel
+- [**502**星][2y] [Py] [chybeta/cmspoc](https://github.com/chybeta/cmspoc) CMS渗透测试框架
+- [**502**星][2m] [Py] [byt3bl33d3r/sprayingtoolkit](https://github.com/byt3bl33d3r/sprayingtoolkit) Scripts to make password spraying attacks against Lync/S4B & OWA a lot quicker, less painful and more efficient
+- [**501**星][7d] [JS] [shadowsocks/shadowsocks-org](https://github.com/shadowsocks/shadowsocks-org)
+- [**501**星][20d] [owasp/wstg](https://github.com/owasp/wstg) The OWASP Web Security Testing Guide includes a "best practice" penetration testing framework which users can implement in their own organizations and a "low level" penetration testing guide that describes techniques for testing most common web application and web service security issues.
+- [**501**星][20d] [owasp/wstg](https://github.com/OWASP/wstg) The OWASP Web Security Testing Guide includes a "best practice" penetration testing framework which users can implement in their own organizations and a "low level" penetration testing guide that describes techniques for testing most common web application and web service security issues.
+- [**501**星][22d] [Go] [genuinetools/amicontained](https://github.com/genuinetools/amicontained) Container introspection tool. Find out what container runtime is being used as well as features available.
+- [**500**星][25d] [PS] [stefanscherer/packer-windows](https://github.com/stefanscherer/packer-windows) Windows Packer 模板:Win10, Server 2016, 1709, 1803, 1809, 2019, 1903, Insider with Docker
+- [**500**星][20d] [JS] [sindresorhus/public-ip](https://github.com/sindresorhus/public-ip) 快速获取外网IP地址
+- [**500**星][9m] [C] [nowsecure/fsmon](https://github.com/nowsecure/fsmon) monitor filesystem on iOS / OS X / Android / FirefoxOS / Linux
- [**500**星][3y] [C] [gaffe23/linux-inject](https://github.com/gaffe23/linux-inject) Tool for injecting a shared object into a Linux process
-- [**499**星][2m] [JS] [shadowsocks/shadowsocks-org](https://github.com/shadowsocks/shadowsocks-org)
-- [**499**星][1m] [Py] [storyyeller/enjarify](https://github.com/storyyeller/enjarify) 将Dalvik字节码转为对应的Java字节码(google Fork版)
+- [**499**星][2m] [JS] [acmesec/pocbox](https://github.com/Acmesec/PoCBox) 赏金猎人的脆弱性测试辅助平台
- [**499**星][3y] [C] [huawei/huawei_liteos_kernel](https://github.com/huawei/huawei_liteos_kernel)
-- [**499**星][7y] [C] [ghughes/fruitstrap](https://github.com/ghughes/fruitstrap) Install and debug iPhone apps from the command line, without using Xcode
+- [**499**星][8d] [Swift] [google/science-journal-ios](https://github.com/google/science-journal-ios) Use the sensors in your mobile devices to perform science experiments. Science doesn’t just happen in the classroom or lab—tools like Science Journal let you see how the world works with just your phone.
- [**499**星][7y] [Java] [chainsdd/superuser](https://github.com/chainsdd/superuser) Android superuser permissions app (from Zinx)
+- [**499**星][3m] [Py] [awslabs/aws-security-benchmark](https://github.com/awslabs/aws-security-benchmark) Open source demos, concept and guidance related to the AWS CIS Foundation framework.
+- [**498**星][17d] [xrkk/awesome-ida](https://github.com/xrkk/awesome-ida) moved to:
+- [**498**星][8m] [Py] [tp4a/teleport](https://github.com/tp4a/teleport) Teleport是一款简单易用的堡垒机系统。
- [**498**星][4y] [Assembly] [xoreaxeaxeax/repsych](https://github.com/xoreaxeaxeax/repsych) Psychological warfare in reverse engineering
- [**498**星][4y] [Py] [vector35/deprecated-binaryninja-python](https://github.com/vector35/deprecated-binaryninja-python) Deprecated Binary Ninja prototype written in Python
+- [**498**星][9m] [C++] [kirschju/demovfuscator](https://github.com/kirschju/demovfuscator) 对抗控制流线性化的工具,反混淆器。
- [**498**星][2m] [govolution/betterdefaultpasslist](https://github.com/govolution/betterdefaultpasslist)
-- [**498**星][25d] [Swift] [google/science-journal-ios](https://github.com/google/science-journal-ios) Use the sensors in your mobile devices to perform science experiments. Science doesn’t just happen in the classroom or lab—tools like Science Journal let you see how the world works with just your phone.
+- [**498**星][7y] [C] [ghughes/fruitstrap](https://github.com/ghughes/fruitstrap) Install and debug iPhone apps from the command line, without using Xcode
+- [**498**星][8m] [ernw/hardening](https://github.com/ernw/hardening) Repository of Hardening Guides
+- [**498**星][2y] [PS] [danielbohannon/invoke-cradlecrafter](https://github.com/danielbohannon/invoke-cradlecrafter) PowerShell Remote Download Cradle Generator & Obfuscator
- [**498**星][3y] [C] [android-rooting-tools/android_run_root_shell](https://github.com/android-rooting-tools/android_run_root_shell)
-- [**497**星][9m] [C++] [kirschju/demovfuscator](https://github.com/kirschju/demovfuscator) 对抗控制流线性化的工具,反混淆器。
-- [**496**星][8m] [Py] [tp4a/teleport](https://github.com/tp4a/teleport) Teleport是一款简单易用的堡垒机系统。
+- [**497**星][8m] [Shell] [stamusnetworks/selks](https://github.com/stamusnetworks/selks) A Suricata based IDS/IPS distro
+- [**497**星][2y] [C++] [rbei-etas/busmaster](https://github.com/rbei-etas/busmaster) 模拟,分析和测试数据总线系统,例如CAN。
+- [**497**星][6m] [Visual Basic .NET] [nyan-x-cat/lime-rat](https://github.com/nyan-x-cat/lime-rat) LimeRAT | Simple, yet powerful remote administration tool for Windows (RAT)
+- [**497**星][29d] [netbiosx/checklists](https://github.com/netbiosx/checklists) 参与的各种渗透测试的清单
+- [**497**星][2m] [C] [m0nad/diamorphine](https://github.com/m0nad/diamorphine) 适用于Linux Kernels 2.6.x / 3.x / 4.x(x86和x86_64)的LKM rootkit
+- [**497**星][7m] [ASP] [landgrey/webshell-detect-bypass](https://github.com/landgrey/webshell-detect-bypass) 绕过专业工具检测的Webshell研究文章和免杀的Webshell
+- [**496**星][24d] [C#] [akiver/csgo-demos-manager](https://github.com/akiver/csgo-demos-manager)
+- [**496**星][2m] [xairy/vmware-exploitation](https://github.com/xairy/vmware-exploitation) A bunch of links related to VMware escape exploits
- [**496**星][2y] [C] [triaquae/crazyeye](https://github.com/triaquae/crazyeye) OpenSource IT Automation Software
-- [**496**星][8m] [Shell] [stamusnetworks/selks](https://github.com/stamusnetworks/selks) A Suricata based IDS/IPS distro
- [**496**星][2y] [JS] [rptec/squid-pac](https://github.com/rptec/squid-pac) 利用国外VPS搭建多协议代理服务,squid PAC代理服务器,25端口翻墙 ....墙已加高,https网站已失效,普通站点仍可代理..建议使用ssr替代
-- [**496**星][6m] [Visual Basic] [nyan-x-cat/lime-rat](https://github.com/nyan-x-cat/lime-rat) LimeRAT | Simple, yet powerful remote administration tool for Windows (RAT)
-- [**496**星][9m] [C] [nowsecure/fsmon](https://github.com/nowsecure/fsmon) monitor filesystem on iOS / OS X / Android / FirefoxOS / Linux
-- [**496**星][12m] [PLpgSQL] [nologic/idaref](https://github.com/nologic/idaref) 指令参考插件.
-- [**496**星][20d] [Go] [genuinetools/amicontained](https://github.com/genuinetools/amicontained) Container introspection tool. Find out what container runtime is being used as well as features available.
-- [**496**星][8m] [ernw/hardening](https://github.com/ernw/hardening) Repository of Hardening Guides
-- [**496**星][2y] [PowerShell] [danielbohannon/invoke-cradlecrafter](https://github.com/danielbohannon/invoke-cradlecrafter) PowerShell Remote Download Cradle Generator & Obfuscator
-- [**495**星][22d] [C#] [akiver/csgo-demos-manager](https://github.com/akiver/csgo-demos-manager)
-- [**495**星][18d] [owasp/wstg](https://github.com/owasp/wstg) The OWASP Web Security Testing Guide includes a "best practice" penetration testing framework which users can implement in their own organizations and a "low level" penetration testing guide that describes techniques for testing most common web application and web service security issues.
-- [**495**星][18d] [owasp/wstg](https://github.com/OWASP/wstg) The OWASP Web Security Testing Guide includes a "best practice" penetration testing framework which users can implement in their own organizations and a "low level" penetration testing guide that describes techniques for testing most common web application and web service security issues.
-- [**495**星][1y] [XSLT] [honze-net/nmap-bootstrap-xsl](https://github.com/honze-net/nmap-bootstrap-xsl) A Nmap XSL implementation with Bootstrap.
-- [**494**星][2m] [Perl 6] [rezasp/joomscan](https://github.com/rezasp/joomscan) Perl语言编写的Joomla CMS漏洞扫描器
-- [**494**星][26d] [netbiosx/checklists](https://github.com/netbiosx/checklists) Pentesting checklists for various engagements
+- [**496**星][24d] [C] [r0hi7/binexp](https://github.com/r0hi7/binexp) Linux Binary Exploitation
+- [**496**星][1y] [PLpgSQL] [nologic/idaref](https://github.com/nologic/idaref) 指令参考插件.
+- [**496**星][1y] [XSLT] [honze-net/nmap-bootstrap-xsl](https://github.com/honze-net/nmap-bootstrap-xsl) A Nmap XSL implementation with Bootstrap.
+- [**496**星][5d] [C] [anestisb/vdexextractor](https://github.com/anestisb/vdexextractor) Tool to decompile & extract Android Dex bytecode from Vdex files
+- [**495**星][9m] [manoelt/50m_ctf_writeup](https://github.com/manoelt/50m_ctf_writeup) $50 Million CTF from Hackerone - Writeup
+- [**495**星][7m] [Py] [initstring/dirty_sock](https://github.com/initstring/dirty_sock) Linux privilege escalation exploit via snapd (CVE-2019-7304)
+- [**495**星][1y] [Py] [c0ny1/upload-fuzz-dic-builder](https://github.com/c0ny1/upload-fuzz-dic-builder) 上传漏洞fuzz字典生成脚本
+- [**494**星][2y] [tengzhangchao/sec-box](https://github.com/tengzhangchao/sec-box) information security Tools Box (信息安全工具以及资源集合)
+- [**494**星][2m] [PHP] [nzedb/nzedb](https://github.com/nzedb/nzedb) 自动扫描Usenet,类似于爬虫扫描互联网的方式
- [**494**星][2y] [Go] [evilsocket/sg1](https://github.com/evilsocket/sg1) 用于数据加密、提取和隐蔽通信的瑞士军刀
-- [**494**星][3m] [Py] [awslabs/aws-security-benchmark](https://github.com/awslabs/aws-security-benchmark) Open source demos, concept and guidance related to the AWS CIS Foundation framework.
-- [**493**星][8d] [C] [greenbone/openvas](https://github.com/greenbone/openvas) Open Vulnerability Assessment Scanner
-- [**493**星][2y] [C++] [rbei-etas/busmaster](https://github.com/rbei-etas/busmaster) BUSMASTER is an Open Source Software tool to simulate, analyze and test data bus systems such as CAN. BUSMASTER was conceptualized, designed and implemented by Robert Bosch Engineering and Business Solutions (RBEI). Presently it is a joint project of RBEI and ETAS GmbH.
-- [**493**星][5y] [Py] [offensivepython/nscan](https://github.com/offensivepython/nscan) Fast internet-wide scanner
-- [**493**星][7m] [Py] [initstring/dirty_sock](https://github.com/initstring/dirty_sock) Linux privilege escalation exploit via snapd (CVE-2019-7304)
-- [**492**星][2m] [JS] [acmesec/pocbox](https://github.com/Acmesec/PoCBox) 赏金猎人的脆弱性测试辅助平台
-- [**492**星][2y] [tengzhangchao/sec-box](https://github.com/tengzhangchao/sec-box) information security Tools Box (信息安全工具以及资源集合)
-- [**492**星][2m] [PHP] [nzedb/nzedb](https://github.com/nzedb/nzedb) a fork of nnplus(2011) | NNTP / Usenet / Newsgroup indexer.
-- [**492**星][2m] [C] [m0nad/diamorphine](https://github.com/m0nad/diamorphine) LKM rootkit for Linux Kernels 2.6.x/3.x/4.x (x86 and x86_64)
-- [**492**星][7m] [ASP] [landgrey/webshell-detect-bypass](https://github.com/landgrey/webshell-detect-bypass) 绕过专业工具检测的Webshell研究文章和免杀的Webshell
-- [**492**星][23d] [Go] [cossacklabs/acra](https://github.com/cossacklabs/acra) 数据库保护套件
-- [**491**星][2y] [sergey-pronin/awesome-vulnerability-research](https://github.com/sergey-pronin/Awesome-Vulnerability-Research)
-- [**491**星][7m] [Py] [danigargu/heap-viewer](https://github.com/danigargu/heap-viewer) 查看glibc堆, 主要用于漏洞开发
-- [**491**星][1y] [Py] [c0ny1/upload-fuzz-dic-builder](https://github.com/c0ny1/upload-fuzz-dic-builder) 上传漏洞fuzz字典生成脚本
-- [**490**星][18d] [JS] [sindresorhus/public-ip](https://github.com/sindresorhus/public-ip) Get your public IP address - very fast!
-- [**490**星][2y] [PowerShell] [powershellmafia/cimsweep](https://github.com/powershellmafia/cimsweep) CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.
-- [**490**星][4m] [Py] [maddiestone/idapythonembeddedtoolkit](https://github.com/maddiestone/idapythonembeddedtoolkit) 自动分析嵌入式设备的固件
-- [**490**星][2y] [b-mueller/android_app_security_checklist](https://github.com/b-mueller/android_app_security_checklist) Android App Security Checklist
-- [**489**星][2y] [C++] [turbo/kpti-poc-collection](https://github.com/turbo/kpti-poc-collection) Meltdown/Spectre PoC src collection.
-- [**489**星][4m] [PHP] [susers/writeups](https://github.com/susers/writeups) 国内各大CTF赛题及writeup整理
-- [**489**星][3y] [PowerShell] [secabstraction/powercat](https://github.com/secabstraction/powercat) A PowerShell TCP/IP swiss army knife.
-- [**489**星][18d] [Py] [scottbez1/splitflap](https://github.com/scottbez1/splitflap) DIY split-flap display
-- [**489**星][22d] [C] [r0hi7/binexp](https://github.com/r0hi7/binexp) Linux Binary Exploitation
-- [**489**星][9m] [manoelt/50m_ctf_writeup](https://github.com/manoelt/50m_ctf_writeup) $50 Million CTF from Hackerone - Writeup
-- [**489**星][1y] [Shell] [leonteale/pentestpackage](https://github.com/leonteale/pentestpackage) a package of Pentest scripts I have made or commonly use
-- [**488**星][15d] [xrkk/awesome-ida](https://github.com/xrkk/awesome-ida) Awesome IDA Pro resources collections: open source repos and blog posts. For Github Repos, extra info included: Star, Last Commit Time, Main Programming Language. For blog post, title/link and post time is included. Update Regularly!
-- [**488**星][13d] [Py] [wetw0rk/sickle](https://github.com/wetw0rk/sickle) Payload development tool
-- [**488**星][25d] [Shell] [trimstray/multitor](https://github.com/trimstray/multitor) Shell脚本, 创建多个Tor实例, 并使用HAProxy实现负载均衡
-- [**488**星][23d] [PowerShell] [stefanscherer/packer-windows](https://github.com/stefanscherer/packer-windows) Windows Packer 模板:Win10, Server 2016, 1709, 1803, 1809, 2019, 1903, Insider with Docker
-- [**488**星][1y] [C] [mikeryan/crackle](https://github.com/mikeryan/crackle) Crack and decrypt BLE encryption
-- [**488**星][29d] [C] [hasherezade/demos](https://github.com/hasherezade/demos) Demos of various injection techniques found in malware
+- [**494**星][5d] [Go] [cossacklabs/acra](https://github.com/cossacklabs/acra) 数据库保护套件
+- [**493**星][4m] [PHP] [susers/writeups](https://github.com/susers/writeups) 国内各大CTF赛题及writeup整理
+- [**493**星][2m] [Perl 6] [rezasp/joomscan](https://github.com/rezasp/joomscan) Perl语言编写的Joomla CMS漏洞扫描器
+- [**493**星][5y] [Py] [offensivepython/nscan](https://github.com/offensivepython/nscan) 由Masscan和Zmap启发而设计的快速网络扫描仪,该扫描仪针对Internet范围内的扫描目的进行了优化。
+- [**493**星][1m] [C] [hasherezade/demos](https://github.com/hasherezade/demos) Demos of various injection techniques found in malware
+- [**492**星][2y] [sergey-pronin/awesome-vulnerability-research](https://github.com/sergey-pronin/Awesome-Vulnerability-Research)
+- [**492**星][7m] [Py] [danigargu/heap-viewer](https://github.com/danigargu/heap-viewer) 查看glibc堆, 主要用于漏洞开发
+- [**491**星][9d] [nahamsec/resources-for-beginner-bug-bounty-hunters](https://github.com/nahamsec/resources-for-beginner-bug-bounty-hunters) A list of resources for those interested in getting started in bug bounties
+- [**491**星][11m] [C] [yangyangwithgnu/bypass_disablefunc_via_ld_preload](https://github.com/yangyangwithgnu/bypass_disablefunc_via_ld_preload) 通过LD_PRELOA绕过disable_functions(不需要/ usr / sbin / sendmail)
+- [**491**星][15d] [Py] [wetw0rk/sickle](https://github.com/wetw0rk/sickle) Payload development tool
+- [**491**星][20d] [Py] [scottbez1/splitflap](https://github.com/scottbez1/splitflap) DIY split-flap display
+- [**491**星][2y] [PS] [powershellmafia/cimsweep](https://github.com/powershellmafia/cimsweep) CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.
+- [**491**星][4m] [Py] [maddiestone/idapythonembeddedtoolkit](https://github.com/maddiestone/idapythonembeddedtoolkit) 自动分析嵌入式设备的固件
+- [**491**星][14d] [JS] [iddoeldor/frida-snippets](https://github.com/iddoeldor/frida-snippets) Hand-crafted Frida examples
+- [**490**星][16d] [Py] [typeerror/domained](https://github.com/TypeError/domained) Multi Tool Subdomain Enumeration
+- [**490**星][2y] [C++] [turbo/kpti-poc-collection](https://github.com/turbo/kpti-poc-collection) Meltdown/Spectre PoC src collection.
+- [**490**星][27d] [Shell] [trimstray/multitor](https://github.com/trimstray/multitor) Shell脚本, 创建多个Tor实例, 并使用HAProxy实现负载均衡
+- [**490**星][2m] [Ruby] [kaich/codeobscure](https://github.com/kaich/codeobscure) code obscure for object-c project. 方便强大的OC工程代码自动混淆工具
+- [**489**星][6y] [C] [bitly/simplehttp](https://github.com/bitly/simplehttp) a family of libraries and daemons for building scalable web infrastructure
+- [**489**星][3m] [Py] [yanxiu0614/subdomain3](https://github.com/yanxiu0614/subdomain3) 简单快速的子域名爆破工具。
+- [**489**星][26d] [C] [tihmstar/tsschecker](https://github.com/tihmstar/tsschecker) a powerfull tool to check tss signing status of various devices and firmwares
+- [**489**星][3y] [PS] [secabstraction/powercat](https://github.com/secabstraction/powercat) 可与Netcat和Ncat一起使用的PowerShell TCP / IP瑞士军刀
+- [**489**星][1y] [C] [mikeryan/crackle](https://github.com/mikeryan/crackle) Crack and decrypt BLE encryption
+- [**489**星][1y] [Shell] [leonteale/pentestpackage](https://github.com/leonteale/pentestpackage) 一整套我已经制作或经常使用的渗透脚本
+- [**489**星][15d] [C] [jiayy/android_vuln_poc-exp](https://github.com/jiayy/android_vuln_poc-exp) This project contains pocs and exploits for vulneribilities I found (mostly)
+- [**489**星][10m] [Py] [insecurityofthings/jackit](https://github.com/insecurityofthings/jackit) Exploit Code for Mousejack
+- [**489**星][2y] [b-mueller/android_app_security_checklist](https://github.com/b-mueller/android_app_security_checklist) Android App Security Checklist
+- [**489**星][10d] [Go] [arminc/clair-scanner](https://github.com/arminc/clair-scanner) Docker containers vulnerability scan
+- [**489**星][4d] [Py] [alexhude/uemu](https://github.com/alexhude/uemu) 基于Unicorn的模拟器插件
+- [**488**星][2d] [Py] [trailofbits/deepstate](https://github.com/trailofbits/deepstate) A unit test-like interface for fuzzing and symbolic execution
+- [**488**星][5y] [Py] [infodox/python-pty-shells](https://github.com/infodox/python-pty-shells) Python PTY backdoors - full PTY or nothing!
- [**488**星][2m] [Go] [gen2brain/cam2ip](https://github.com/gen2brain/cam2ip) 将任何网络摄像头转换为IP 摄像机
-- [**488**星][1y] [Py] [alexhude/uemu](https://github.com/alexhude/uemu) 基于Unicorn的模拟器插件
-- [**487**星][6y] [C] [bitly/simplehttp](https://github.com/bitly/simplehttp) a family of libraries and daemons for building scalable web infrastructure
-- [**487**星][2m] [xairy/vmware-exploitation](https://github.com/xairy/vmware-exploitation) A bunch of links related to VMware escape exploits
-- [**487**星][7d] [Py] [theresafewconors/sooty](https://github.com/theresafewconors/sooty) The SOC Analysts all-in-one CLI tool to automate and speed up workflow.
+- [**488**星][1y] [PS] [dafthack/domainpasswordspray](https://github.com/dafthack/domainpasswordspray) DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!
+- [**488**星][1y] [Py] [attify/firmware-analysis-toolkit](https://github.com/attify/firmware-analysis-toolkit) Toolkit to emulate firmware and analyse it for security vulnerabilities
+- [**487**星][10m] [Ruby] [sidaf/homebrew-pentest](https://github.com/sidaf/homebrew-pentest) 一个包含一些Homebrew formulas的Tap,包含与渗透测试相关的工具。
+- [**487**星][7d] [Go] [psiphon-labs/psiphon-tunnel-core](https://github.com/psiphon-labs/psiphon-tunnel-core) Psiphon client and server components implemented in Go. These components provides core tunnel functionality, handling all aspects of evading blocking and relaying traffic through Psiphon.
+- [**487**星][1y] [C] [nfc-tools/mfcuk](https://github.com/nfc-tools/mfcuk) MiFare Classic Universal toolKit (MFCUK)
- [**487**星][4y] [JS] [mandatoryprogrammer/sonar.js](https://github.com/mandatoryprogrammer/sonar.js) 通过 WebRTC IP 枚举,结合 WebSockets 和外部资源指纹,来识别内网主机的漏洞并发动攻击的框架
-- [**487**星][5y] [Py] [infodox/python-pty-shells](https://github.com/infodox/python-pty-shells) Python PTY backdoors - full PTY or nothing!
-- [**486**星][14d] [Py] [typeerror/domained](https://github.com/TypeError/domained) Multi Tool Subdomain Enumeration
-- [**486**星][11m] [C] [yangyangwithgnu/bypass_disablefunc_via_ld_preload](https://github.com/yangyangwithgnu/bypass_disablefunc_via_ld_preload) bypass disable_functions via LD_PRELOA (no need /usr/sbin/sendmail)
-- [**486**星][7d] [Py] [trailofbits/deepstate](https://github.com/trailofbits/deepstate) A unit test-like interface for fuzzing and symbolic execution
+- [**487**星][18d] [Rust] [kpcyrd/sn0int](https://github.com/kpcyrd/sn0int) Semi-automatic OSINT framework and package manager
+- [**487**星][13d] [Py] [ctxis/cape](https://github.com/ctxis/cape) Malware Configuration And Payload Extraction
+- [**487**星][6m] [PHP] [cfreal/exploits](https://github.com/cfreal/exploits) Some of my exploits.
+- [**486**星][5m] [PHP] [wonderkun/ctf_web](https://github.com/wonderkun/ctf_web) a project aim to collect CTF web practices .
- [**486**星][1y] [Py] [shawarkhanethicalhacker/brutexss](https://github.com/shawarkhanethicalhacker/brutexss) BruteXSS - Cross-Site Scripting Bruteforcer
-- [**486**星][7d] [Go] [psiphon-labs/psiphon-tunnel-core](https://github.com/psiphon-labs/psiphon-tunnel-core) Psiphon client and server components implemented in Go. These components provides core tunnel functionality, handling all aspects of evading blocking and relaying traffic through Psiphon.
-- [**486**星][1y] [C] [nfc-tools/mfcuk](https://github.com/nfc-tools/mfcuk) MiFare Classic Universal toolKit (MFCUK)
-- [**486**星][11m] [Go] [evanmiller/hecate](https://github.com/evanmiller/hecate) The Hex Editor From Hell
-- [**486**星][1y] [PowerShell] [dafthack/domainpasswordspray](https://github.com/dafthack/domainpasswordspray) DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!
-- [**485**星][2y] [Py] [xyuanmu/xx-mini](https://github.com/xyuanmu/xx-mini)
-- [**485**星][2y] [Py] [khalilbijjou/wafninja](https://github.com/khalilbijjou/wafninja) WAFNinja is a tool which contains two functions to attack Web Application Firewalls.
-- [**485**星][13d] [C] [jiayy/android_vuln_poc-exp](https://github.com/jiayy/android_vuln_poc-exp) This project contains pocs and exploits for vulneribilities I found (mostly)
-- [**485**星][10m] [Py] [insecurityofthings/jackit](https://github.com/insecurityofthings/jackit) Exploit Code for Mousejack
+- [**486**星][2y] [Py] [khalilbijjou/wafninja](https://github.com/khalilbijjou/wafninja) WAFNinja is a tool which contains two functions to attack Web Application Firewalls.
+- [**486**星][11m] [Go] [evanmiller/hecate](https://github.com/evanmiller/hecate) Hex编辑器
+- [**485**星][2m] [Py] [fcavallarin/htcap](https://github.com/fcavallarin/htcap) htcap is a web application scanner able to crawl single page application (SPA) recursively by intercepting ajax calls and DOM changes.
+- [**485**星][10m] [C] [theofficialflow/nonpdrm](https://github.com/theofficialflow/nonpdrm) A plugin that allows you to bypass DRM protection on any PS Vita content
+- [**485**星][1m] [radareorg/awesome-radare2](https://github.com/radareorg/awesome-radare2) A curated list of awesome projects, articles and the other materials powered by Radare2
+- [**485**星][10d] [C] [projectacrn/acrn-hypervisor](https://github.com/projectacrn/acrn-hypervisor) defines a device hypervisor reference stack and an architecture for running multiple software subsystems, managed securely, on a consolidated system by means of a virtual machine manager.
+- [**485**星][1y] [lmy375/awesome-vmp](https://github.com/lmy375/awesome-vmp) 虚拟机分析相关资料
+- [**485**星][1m] [hugetiny/awesome-vpn](https://github.com/hugetiny/awesome-vpn) A curated list of awesome free VPNs and proxies.免费的代理,科学上网,翻墙,梯子大集合
- [**484**星][2y] [Py] [zdresearch/owasp-zsc](https://github.com/zdresearch/OWASP-ZSC) Shellcode/Obfuscate Code Generator
-- [**484**星][6m] [PHP] [cfreal/exploits](https://github.com/cfreal/exploits) Some of my exploits.
-- [**484**星][8d] [Go] [arminc/clair-scanner](https://github.com/arminc/clair-scanner) Docker containers vulnerability scan
-- [**484**星][1y] [C] [anestisb/vdexextractor](https://github.com/anestisb/vdexextractor) Tool to decompile & extract Android Dex bytecode from Vdex files
-- [**483**星][10m] [C] [theofficialflow/nonpdrm](https://github.com/theofficialflow/nonpdrm) A plugin that allows you to bypass DRM protection on any PS Vita content
-- [**483**星][10m] [Ruby] [sidaf/homebrew-pentest](https://github.com/sidaf/homebrew-pentest) Homebrew Tap - Pen Test Tools
-- [**483**星][1m] [radareorg/awesome-radare2](https://github.com/radareorg/awesome-radare2) A curated list of awesome projects, articles and the other materials powered by Radare2
-- [**483**星][7m] [Py] [netflix-skunkworks/diffy](https://github.com/netflix-skunkworks/diffy) Diffy is a triage tool used during cloud-centric security incidents, to help digital forensics and incident response (DFIR) teams quickly identify suspicious hosts on which to focus their response.
-- [**483**星][2m] [Go] [gorilla/csrf](https://github.com/gorilla/csrf) gorilla/csrf provides Cross Site Request Forgery (CSRF) prevention middleware for Go web applications & services
+- [**484**星][2y] [Py] [xyuanmu/xx-mini](https://github.com/xyuanmu/xx-mini) XX-Net 精简版
+- [**484**星][8d] [Py] [netflix-skunkworks/diffy](https://github.com/netflix-skunkworks/diffy) Diffy is a triage tool used during cloud-centric security incidents, to help digital forensics and incident response (DFIR) teams quickly identify suspicious hosts on which to focus their response.
+- [**484**星][2m] [Go] [gorilla/csrf](https://github.com/gorilla/csrf) 为Go Web应用程序和服务提供CSRF预防中间件
+- [**483**星][15d] [C++] [ce-programming/cemu](https://github.com/CE-Programming/CEmu) Third-party TI-84 Plus CE / TI-83 Premium CE emulator, focused on developer features
- [**483**星][3y] [Py] [erevus-cn/pocscan](https://github.com/erevus-cn/pocscan) Will to be a niubility scan-framework
-- [**483**星][1y] [Py] [attify/firmware-analysis-toolkit](https://github.com/attify/firmware-analysis-toolkit) Toolkit to emulate firmware and analyse it for security vulnerabilities
-- [**482**星][2m] [Py] [fcavallarin/htcap](https://github.com/fcavallarin/htcap) htcap is a web application scanner able to crawl single page application (SPA) recursively by intercepting ajax calls and DOM changes.
-- [**482**星][5m] [PHP] [wonderkun/ctf_web](https://github.com/wonderkun/ctf_web) a project aim to collect CTF web practices .
+- [**483**星][1y] [JS] [emilbayes/secure-password](https://github.com/emilbayes/secure-password) Making Password storage safer for all
+- [**483**星][2y] [Py] [armissecurity/blueborne](https://github.com/armissecurity/blueborne) PoC scripts demonstrating the BlueBorne vulnerabilities
+- [**482**星][28d] [PHP] [zhuzhichao/ip-location-zh](https://github.com/zhuzhichao/ip-location-zh) 获取 IP 地址的真实地理位置
+- [**482**星][9m] [Py] [r35tart/rw_password](https://github.com/r35tart/rw_password) 此项目用来提取收集以往泄露的密码中符合条件的强弱密码
- [**482**星][3m] [C] [microsoft/symcrypt](https://github.com/microsoft/symcrypt) Cryptographic library
+- [**482**星][7d] [Py] [iti/ics-security-tools](https://github.com/iti/ics-security-tools) Tools, tips, tricks, and more for exploring ICS Security.
+- [**482**星][2y] [PS] [gofetchad/gofetch](https://github.com/gofetchad/gofetch) 自动执行BloodHound应用程序生成的攻击计划。
+- [**482**星][11m] [Shell] [craigz28/firmwalker](https://github.com/craigz28/firmwalker) 一个简单的bash脚本,用于搜索提取或安装的固件文件系统。
+- [**482**星][1y] [Java] [continuumsecurity/bdd-security](https://github.com/continuumsecurity/bdd-security) 一个安全测试框架,该框架使用“行为驱动开发”概念来创建自我验证的安全规范。
+- [**481**星][1m] [Py] [yassineaboukir/sublert](https://github.com/yassineaboukir/sublert) Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific organizations and issued TLS/SSL certificate.
- [**481**星][2y] [C] [realjtg/meltdown](https://github.com/realjtg/meltdown) Meltdown PoC for reading passwords from Google Chrome.
+- [**481**星][8m] [C] [nongiach/sudo_inject](https://github.com/nongiach/sudo_inject) [Linux] Two Privilege Escalation techniques abusing sudo token
- [**481**星][4m] [C] [limpkin/mooltipass](https://github.com/limpkin/mooltipass) Github repository dedicated to the mooltipass project
-- [**481**星][1m] [hugetiny/awesome-vpn](https://github.com/hugetiny/awesome-vpn) A curated list of awesome free VPNs and proxies.免费的代理,科学上网,翻墙,梯子大集合
-- [**481**星][1y] [JS] [emilbayes/secure-password](https://github.com/emilbayes/secure-password) Making Password storage safer for all
-- [**481**星][2y] [Py] [armissecurity/blueborne](https://github.com/armissecurity/blueborne) PoC scripts demonstrating the BlueBorne vulnerabilities
-- [**480**星][13d] [C++] [ce-programming/cemu](https://github.com/CE-Programming/CEmu) Third-party TI-84 Plus CE / TI-83 Premium CE emulator, focused on developer features
+- [**480**星][2m] [Java] [tornaco/x-apm](https://github.com/tornaco/x-apm) 应用管理 Xposed
- [**480**星][3y] [Py] [lgandx/poc](https://github.com/lgandx/poc) Various PoCs
-- [**480**星][16d] [Rust] [kpcyrd/sn0int](https://github.com/kpcyrd/sn0int) Semi-automatic OSINT framework and package manager
-- [**480**星][2y] [PowerShell] [gofetchad/gofetch](https://github.com/gofetchad/gofetch) GoFetch is a tool to automatically exercise an attack plan generated by the BloodHound application.
-- [**480**星][11m] [Shell] [craigz28/firmwalker](https://github.com/craigz28/firmwalker) Script for searching the extracted firmware file system for goodies!
-- [**480**星][1y] [Java] [continuumsecurity/bdd-security](https://github.com/continuumsecurity/bdd-security) BDD Automated Security Tests for Web Applications
+- [**480**星][2d] [Java] [joychou93/java-sec-code](https://github.com/joychou93/java-sec-code) Java Web Common Vulnerabilities and Security Code.
+- [**480**星][1y] [Swift] [icepa/icepa](https://github.com/icepa/icepa) iOS system-wide VPN based Tor client
+- [**480**星][2m] [C#] [chmorgan/sharppcap](https://github.com/chmorgan/sharppcap) Official repository - Fully managed, cross platform (Windows, Mac, Linux) .NET library for capturing packets
+- [**480**星][4d] [Batchfile] [chef-koch/regtweaks](https://github.com/chef-koch/regtweaks) Windows注册表调整(Win 7-Win 10)
- [**479**星][3y] [JS] [vincentchanx/shadowsocks-over-websocket](https://github.com/vincentchanx/shadowsocks-over-websocket) 免费使用 Heroku 部署 shadowsocks
-- [**479**星][1y] [lmy375/awesome-vmp](https://github.com/lmy375/awesome-vmp) 虚拟机分析相关资料
-- [**479**星][1y] [Swift] [icepa/icepa](https://github.com/icepa/icepa) iOS system-wide VPN based Tor client
-- [**479**星][7d] [Batchfile] [chef-koch/regtweaks](https://github.com/chef-koch/regtweaks) Windows注册表调整(Win 7-Win 10)
+- [**479**星][8m] [Java] [chengdedeng/waf](https://github.com/chengdedeng/waf)
+- [**479**星][2y] [Objective-C++] [bishopfox/bfinject](https://github.com/bishopfox/bfinject) Dylib injection for iOS 11.0 - 11.1.2 with LiberiOS and Electra jailbreaks
+- [**479**星][3m] [Py] [bashfuscator/bashfuscator](https://github.com/bashfuscator/bashfuscator) A fully configurable and extendable Bash obfuscation framework. This tool is intended to help both red team and blue team.
+- [**479**星][1m] [Py] [aoii103/darknet_chinesetrading](https://github.com/aoii103/darknet_chinesetrading) 暗网中文网监控实时爬虫
- [**478**星][2m] [C++] [opengenus/quark](https://github.com/opengenus/quark) Stay happy while offline | World's first offline search engine.
+- [**478**星][8m] [Dockerfile] [mikesplain/openvas-docker](https://github.com/mikesplain/openvas-docker) A Docker container for Openvas
- [**478**星][1y] [JS] [koto/xsschef](https://github.com/koto/xsschef) Chrome extension Exploitation Framework
-- [**478**星][12d] [JS] [iddoeldor/frida-snippets](https://github.com/iddoeldor/frida-snippets) Hand-crafted Frida examples
-- [**478**星][2m] [C#] [chmorgan/sharppcap](https://github.com/chmorgan/sharppcap) Official repository - Fully managed, cross platform (Windows, Mac, Linux) .NET library for capturing packets
-- [**478**星][2y] [Objective-C++] [bishopfox/bfinject](https://github.com/bishopfox/bfinject) Dylib injection for iOS 11.0 - 11.1.2 with LiberiOS and Electra jailbreaks
-- [**477**星][7d] [nahamsec/resources-for-beginner-bug-bounty-hunters](https://github.com/nahamsec/resources-for-beginner-bug-bounty-hunters) A list of resources for those interested in getting started in bug bounties
-- [**477**星][8m] [C] [nongiach/sudo_inject](https://github.com/nongiach/sudo_inject) [Linux] Two Privilege Escalation techniques abusing sudo token
-- [**477**星][1m] [Java] [joychou93/java-sec-code](https://github.com/joychou93/java-sec-code) Java common vulnerabilities and security code.
-- [**477**星][8m] [Java] [chengdedeng/waf](https://github.com/chengdedeng/waf)
+- [**477**星][1y] [C++] [tandasat/ddimon](https://github.com/tandasat/ddimon) Monitoring and controlling kernel API calls with stealth hook using EPT
+- [**477**星][2y] [Py] [pjlantz/droidbox](https://github.com/pjlantz/droidbox) Dynamic analysis of Android apps
+- [**477**星][5m] [JS] [ehrishirajsharma/swiftnessx](https://github.com/ehrishirajsharma/swiftnessx) A cross-platform note-taking & target-tracking app for penetration testers.
- [**476**星][1y] [Go] [yinqiwen/gsnova](https://github.com/yinqiwen/gsnova) Private proxy solution & network troubleshooting tool.
-- [**476**星][8m] [Dockerfile] [mikesplain/openvas-docker](https://github.com/mikesplain/openvas-docker) A Docker container for Openvas
-- [**476**星][2m] [Py] [iti/ics-security-tools](https://github.com/iti/ics-security-tools) Tools, tips, tricks, and more for exploring ICS Security.
-- [**475**星][1m] [Py] [yassineaboukir/sublert](https://github.com/yassineaboukir/sublert) Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific organizations and issued TLS/SSL certificate.
-- [**475**星][1m] [Java] [wagiro/burpbounty](https://github.com/wagiro/burpbounty) Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through a very intuitive graphical interface.
-- [**475**星][2m] [Java] [tornaco/x-apm](https://github.com/tornaco/x-apm) 应用管理 Xposed
+- [**476**星][4m] [Py] [xillwillx/skiptracer](https://github.com/xillwillx/skiptracer) OSINT python webscaping framework
+- [**476**星][1m] [xiangpasama/jdsrc-small-classroom](https://github.com/xiangpasama/jdsrc-small-classroom) 京东SRC小课堂系列文章
+- [**476**星][1m] [Java] [wagiro/burpbounty](https://github.com/wagiro/burpbounty) Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through a very intuitive graphical interface.
+- [**476**星][3y] [Lua] [viruscamp/luadec](https://github.com/viruscamp/luadec) Lua Decompiler for lua 5.1 , 5.2 and 5.3
+- [**476**星][1y] [ksluckow/awesome-symbolic-execution](https://github.com/ksluckow/awesome-symbolic-execution) A curated list of awesome symbolic execution resources including essential research papers, lectures, videos, and tools.
+- [**475**星][5d] [Py] [hunters-forge/mordor](https://github.com/hunters-forge/mordor) Re-play Adversarial Techniques
+- [**475**星][6y] [Ruby] [zed-0xff/zsteg](https://github.com/zed-0xff/zsteg) detect stegano-hidden data in PNG & BMP
- [**475**星][2y] [C#] [tlaster/yourav](https://github.com/tlaster/yourav) 宇宙级最轻量杀毒软件
-- [**475**星][1y] [C++] [tandasat/ddimon](https://github.com/tandasat/ddimon) Monitoring and controlling kernel API calls with stealth hook using EPT
-- [**475**星][2y] [Py] [pjlantz/droidbox](https://github.com/pjlantz/droidbox) Dynamic analysis of Android apps
+- [**475**星][2y] [Ruby] [ring0lab/catphish](https://github.com/ring0lab/catphish) 用于网络钓鱼及企业间谍活动。Ruby编写
- [**475**星][1y] [C] [nanshihui/scan-t](https://github.com/nanshihui/scan-t) a new crawler based on python with more function including Network fingerprint search
-- [**475**星][5m] [JS] [ehrishirajsharma/swiftnessx](https://github.com/ehrishirajsharma/swiftnessx) A cross-platform note-taking & target-tracking app for penetration testers.
+- [**475**星][2y] [C++] [jessek/hashdeep](https://github.com/jessek/hashdeep) 用于为任意数量的文件计算哈希或消息摘要,同时可以选择递归地挖掘目录结构,跨平台
- [**474**星][3y] [CoffeeScript] [rastapasta/pokemon-go-mitm](https://github.com/rastapasta/pokemon-go-mitm)
-- [**474**星][3y] [Lua] [viruscamp/luadec](https://github.com/viruscamp/luadec) Lua Decompiler for lua 5.1 , 5.2 and 5.3
-- [**474**星][2y] [Ruby] [ring0lab/catphish](https://github.com/ring0lab/catphish) 用于网络钓鱼及企业间谍活动。Ruby编写
-- [**474**星][8m] [Py] [r35tart/rw_password](https://github.com/r35tart/rw_password) 此项目用来提取收集以往泄露的密码中符合条件的强弱密码
+- [**474**星][3m] [Shell] [staz0t/hashcatch](https://github.com/staz0t/hashcatch) Capture handshakes of nearby WiFi networks automatically
- [**474**星][3y] [Py] [4w4k3/beelogger](https://github.com/4w4k3/beelogger) Generate Gmail Emailing Keyloggers to Windows.
-- [**473**星][6y] [Ruby] [zed-0xff/zsteg](https://github.com/zed-0xff/zsteg) detect stegano-hidden data in PNG & BMP
-- [**473**星][4m] [Py] [xillwillx/skiptracer](https://github.com/xillwillx/skiptracer) OSINT python webscaping framework
-- [**473**星][3m] [Shell] [staz0t/hashcatch](https://github.com/staz0t/hashcatch) Capture handshakes of nearby WiFi networks automatically
-- [**473**星][29d] [JS] [lyxhh/lxhtoolhttpdecrypt](https://github.com/lyxhh/lxhtoolhttpdecrypt) Simple Android/iOS protocol analysis and utilization tool
-- [**473**星][1m] [Py] [aoii103/darknet_chinesetrading](https://github.com/aoii103/darknet_chinesetrading)
-- [**472**星][1y] [ksluckow/awesome-symbolic-execution](https://github.com/ksluckow/awesome-symbolic-execution) A curated list of awesome symbolic execution resources including essential research papers, lectures, videos, and tools.
-- [**472**星][3m] [Py] [bashfuscator/bashfuscator](https://github.com/bashfuscator/bashfuscator) A fully configurable and extendable Bash obfuscation framework. This tool is intended to help both red team and blue team.
-- [**472**星][2y] [Ruby] [0xsauby/yasuo](https://github.com/0xsauby/yasuo) ruby 脚本,扫描网络中存在漏洞的第三方 web app
-- [**471**星][2y] [C++] [jessek/hashdeep](https://github.com/jessek/hashdeep)
-- [**471**星][8m] [Java] [alpha1e0/pentestdb](https://github.com/alpha1e0/pentestdb) WEB渗透测试数据库
-- [**470**星][14d] [C] [tklengyel/drakvuf](https://github.com/tklengyel/drakvuf) DRAKVUF Black-box Binary Analysis
-- [**470**星][2m] [Go] [square/certigo](https://github.com/square/certigo) A utility to examine and validate certificates in a variety of formats
-- [**470**星][9m] [Py] [aker-gateway/aker](https://github.com/aker-gateway/aker) SSH bastion/jump host/jumpserver
+- [**473**星][2m] [C#] [rasta-mouse/watson](https://github.com/rasta-mouse/watson) Enumerate missing KBs and suggest exploits for useful Privilege Escalation vulnerabilities
+- [**473**星][1m] [JS] [lyxhh/lxhtoolhttpdecrypt](https://github.com/lyxhh/lxhtoolhttpdecrypt) Simple Android/iOS protocol analysis and utilization tool
+- [**473**星][2y] [Ruby] [0xsauby/yasuo](https://github.com/0xsauby/yasuo) ruby 脚本,扫描网络中存在漏洞的第三方 web app
+- [**472**星][9d] [C] [tklengyel/drakvuf](https://github.com/tklengyel/drakvuf) DRAKVUF Black-box Binary Analysis
+- [**472**星][26d] [pixelcyber/thor](https://github.com/pixelcyber/thor) HTTP Sniffer/Capture on iOS for Network Debug & Inspect.
+- [**472**星][8m] [Java] [alpha1e0/pentestdb](https://github.com/alpha1e0/pentestdb) WEB渗透测试数据库
+- [**471**星][12m] [itrump/ssfree](https://github.com/itrump/ssfree) provide shadowsocks free tutorial and free account
+- [**471**星][1m] [TS] [mitre-attack/attack-navigator](https://github.com/mitre-attack/attack-navigator) 提供ATT&CK矩阵的基本导航和注释的Web App
+- [**471**星][6m] [palantir/osquery-configuration](https://github.com/palantir/osquery-configuration) 使用 osquery 做事件检测和响应
+- [**471**星][3m] [Py] [olafhartong/threathunting](https://github.com/olafhartong/threathunting) A Splunk app mapped to MITRE ATT&CK to guide your threat hunts
+- [**471**星][9m] [Py] [aker-gateway/aker](https://github.com/aker-gateway/aker) SSH bastion/jump host/jumpserver
+- [**470**星][11m] [Py] [wapiflapi/villoc](https://github.com/wapiflapi/villoc) Visualization of heap operations.
+- [**470**星][8m] [C++] [glmcdona/process-dump](https://github.com/glmcdona/process-dump) Windows tool for dumping malware PE files from memory back to disk for analysis.
+- [**470**星][5d] [JS] [codemanki/cloudscraper](https://github.com/codemanki/cloudscraper) Node.js library to bypass cloudflare's anti-ddos page
+- [**470**星][1m] [Py] [bit4woo/teemo](https://github.com/bit4woo/teemo) 域名和电子邮件地址收集工具
+- [**469**星][9d] [Py] [fportantier/habu](https://github.com/fportantier/habu) Hacking Toolkit
- [**469**星][5m] [Solidity] [provable-things/ethereum-api](https://github.com/provable-things/ethereum-api) Provable API for Ethereum smart contracts
-- [**469**星][29d] [xiangpasama/jdsrc-small-classroom](https://github.com/xiangpasama/jdsrc-small-classroom) 京东SRC小课堂系列文章
-- [**469**星][11m] [Py] [wapiflapi/villoc](https://github.com/wapiflapi/villoc) Visualization of heap operations.
+- [**469**星][2m] [Go] [square/certigo](https://github.com/square/certigo) A utility to examine and validate certificates in a variety of formats
+- [**469**星][2m] [Py] [netzob/netzob](https://github.com/netzob/netzob) Protocol Reverse Engineering, Modeling and Fuzzing
+- [**469**星][3y] [C] [lucyoa/kernel-exploits](https://github.com/lucyoa/kernel-exploits)
+- [**469**星][11m] [PHP] [l3m0n/pentest_tools](https://github.com/l3m0n/pentest_tools) 收集一些小型实用的工具
+- [**469**星][2d] [C] [jayddee/cpuminer-opt](https://github.com/jayddee/cpuminer-opt) Optimized multi algo CPU miner
+- [**469**星][1y] [hack-with-github/powerful-plugins](https://github.com/hack-with-github/powerful-plugins) Powerful plugins and add-ons for hackers
+- [**469**星][3y] [Shell] [g0tmi1k/os-scripts](https://github.com/g0tmi1k/os-scripts) Personal Collection of Operating Systems Scripts
+- [**469**星][8m] [C++] [everettjf/machoexplorer](https://github.com/everettjf/machoexplorer) MachO文件查看器,支持Windows和macOS
- [**469**星][4y] [Ruby] [crossref/pdfextract](https://github.com/crossref/pdfextract) MOVED TO
+- [**469**星][7d] [Go] [arvanaghi/checkplease](https://github.com/arvanaghi/checkplease) Sandbox evasion modules written in PowerShell, Python, Go, Ruby, C, C#, Perl, and Rust.
+- [**469**星][4d] [Py] [aidaho12/haproxy-wi](https://github.com/aidaho12/haproxy-wi) Web interface for managing Haproxy servers
+- [**469**星][2y] [adi0x90/attifyos](https://github.com/adi0x90/attifyos) IoT 安全评估/渗透测试工具包
+- [**468**星][10d] [C] [skeeto/enchive](https://github.com/skeeto/enchive) Encrypted personal archives
- [**468**星][2y] [Smali] [sensepost/kwetza](https://github.com/sensepost/kwetza) Python 脚本,将 Meterpreter payload 注入 Andorid App
+- [**468**星][9d] [Py] [fportantier/habu](https://github.com/fportantier/habu) Python 编写的网络工具工具包,主要用于教学/理解网络攻击中的一些概念
- [**468**星][4y] [JS] [philbooth/complexity-report](https://github.com/philbooth/complexity-report) [UNMAINTAINED] Software complexity analysis for JavaScript projects
-- [**468**星][8m] [C++] [everettjf/machoexplorer](https://github.com/everettjf/machoexplorer) MachO文件查看器,支持Windows和macOS
+- [**468**星][2d] [C] [libreswan/libreswan](https://github.com/libreswan/libreswan) an Internet Key Exchange (IKE) implementation for Linux.
+- [**468**星][2y] [C] [leurak/memz](https://github.com/leurak/memz) 为Danooct1的用户制作的恶意软件系列制作的木马。
+- [**468**星][7y] [Shell] [kosborn/p2p-adb](https://github.com/kosborn/p2p-adb) Phone to Phone Android Debug Bridge - A project for "debugging" phones... from other phones.
- [**468**星][4y] [Py] [dxa4481/wpa2-halfhandshake-crack](https://github.com/dxa4481/wpa2-halfhandshake-crack) This is a POC to show it is possible to capture enough of a handshake with a user from a fake AP to crack a WPA2 network without knowing the passphrase of the actual AP.
+- [**468**星][2m] [Py] [coleifer/micawber](https://github.com/coleifer/micawber) 用于从URL中提取丰富的内容库
- [**467**星][4y] [Py] [einstein-/decompiler](https://github.com/EiNSTeiN-/decompiler) 多后端的反编译器, 支持IDA和Capstone.
-- [**467**星][6m] [palantir/osquery-configuration](https://github.com/palantir/osquery-configuration) 使用 osquery 做事件检测和响应
-- [**467**星][3m] [Py] [olafhartong/threathunting](https://github.com/olafhartong/threathunting) A Splunk app mapped to MITRE ATT&CK to guide your threat hunts
-- [**467**星][2m] [Py] [netzob/netzob](https://github.com/netzob/netzob) Protocol Reverse Engineering, Modeling and Fuzzing
-- [**467**星][11m] [PHP] [l3m0n/pentest_tools](https://github.com/l3m0n/pentest_tools) 收集一些小型实用的工具
-- [**467**星][3y] [Shell] [g0tmi1k/os-scripts](https://github.com/g0tmi1k/os-scripts) Personal Collection of Operating Systems Scripts
-- [**467**星][2m] [Py] [coleifer/micawber](https://github.com/coleifer/micawber) a small library for extracting rich content from urls
-- [**467**星][2y] [adi0x90/attifyos](https://github.com/adi0x90/attifyos) IoT 安全评估/渗透测试工具包
+- [**467**星][3m] [Java] [strazzere/anti-emulator](https://github.com/strazzere/anti-emulator) Android Anti-Emulator
+- [**467**星][1y] [C] [laruence/taint](https://github.com/laruence/taint) Taint is a PHP extension, used for detecting XSS codes
+- [**467**星][5y] [Perl] [jbittel/httpry](https://github.com/jbittel/httpry) HTTP日志记录和信息检索工具
- [**466**星][3m] [miscreant/meta](https://github.com/miscreant/meta) 具备错误使用抗性的(Misuse-resistant )对称加密库,支持 AES-SIV (RFC5297) 和 CHAIN/STREAM
-- [**466**星][3m] [Java] [strazzere/anti-emulator](https://github.com/strazzere/anti-emulator) Android Anti-Emulator
-- [**466**星][2m] [C#] [rasta-mouse/watson](https://github.com/rasta-mouse/watson) Enumerate missing KBs and suggest exploits for useful Privilege Escalation vulnerabilities
-- [**466**星][24d] [pixelcyber/thor](https://github.com/pixelcyber/thor) HTTP Sniffer/Capture on iOS for Network Debug & Inspect.
-- [**466**星][7d] [C] [libreswan/libreswan](https://github.com/libreswan/libreswan) an Internet Key Exchange (IKE) implementation for Linux.
-- [**466**星][7y] [Shell] [kosborn/p2p-adb](https://github.com/kosborn/p2p-adb) Phone to Phone Android Debug Bridge - A project for "debugging" phones... from other phones.
-- [**466**星][1m] [Py] [bit4woo/teemo](https://github.com/bit4woo/teemo) A Domain Name & Email Address Collection Tool
-- [**466**星][10d] [Go] [arvanaghi/checkplease](https://github.com/arvanaghi/checkplease) Sandbox evasion modules written in PowerShell, Python, Go, Ruby, C, C#, Perl, and Rust.
+- [**466**星][21d] [Py] [k8gege/k8cscan](https://github.com/k8gege/k8cscan) 大型内网渗透自定义插件化扫描神器,包含信息收集、网络资产、漏洞扫描、密码爆破、漏洞利用,程序采用多线程批量扫描大型内网多个IP段C段主机,目前插件包含: C段旁注扫描、子域名扫描、Ftp密码爆破、Mysql密码爆破、Oracle密码爆破、MSSQL密码爆破、Windows/Linux系统密码爆破、存活主机扫描、端口扫描、Web信息探测、操作系统版本探测、Cisco思科设备扫描等,支持调用任意外部程序或脚本,支持Cobalt Strike联动
+- [**466**星][3m] [PS] [evotecit/pswinreporting](https://github.com/evotecit/pswinreporting) This PowerShell Module has multiple functionalities, but one of the signature features of this module is the ability to parse Security logs on Domain Controllers providing easy to use access to AD Events.
+- [**466**星][6d] [C] [bootleg/ret-sync](https://github.com/bootleg/ret-sync) 在反汇编工具和调试器之间同步调试会话
+ - [GDB插件](https://github.com/bootleg/ret-sync/tree/master/ext_gdb)
+ - [Ghidra插件](https://github.com/bootleg/ret-sync/tree/master/ext_ghidra)
+ - [IDA插件](https://github.com/bootleg/ret-sync/tree/master/ext_ida)
+ - [LLDB](https://github.com/bootleg/ret-sync/tree/master/ext_lldb)
+ - [OD](https://github.com/bootleg/ret-sync/tree/master/ext_olly1)
+ - [OD2](https://github.com/bootleg/ret-sync/tree/master/ext_olly2)
+ - [WinDgb](https://github.com/bootleg/ret-sync/tree/master/ext_windbg/sync)
+ - [x64dbg](https://github.com/bootleg/ret-sync/tree/master/ext_x64dbg)
+- [**466**星][26d] [C#] [akaion/bleak](https://github.com/akaion/bleak) A Windows native DLL injection library that supports several methods of injection.
+- [**465**星][3y] [Py] [trustedsec/meterssh](https://github.com/trustedsec/meterssh) MeterSSH is a way to take shellcode, inject it into memory then tunnel whatever port you want to over SSH to mask any type of communications as a normal SSH connection. The way it works is by injecting shellcode into memory, then wrapping a port spawned (meterpeter in this case) by the shellcode over SSH back to the attackers machine. Then conne…
- [**465**星][1y] [Py] [ptresearch/unme11](https://github.com/ptresearch/unme11) Intel ME 11.x Firmware Images Unpacker
-- [**465**星][3y] [C] [lucyoa/kernel-exploits](https://github.com/lucyoa/kernel-exploits)
-- [**465**星][2y] [C] [leurak/memz](https://github.com/leurak/memz) A trojan made for Danooct1's User Made Malware Series.
-- [**465**星][12m] [C] [laruence/taint](https://github.com/laruence/taint) Taint is a PHP extension, used for detecting XSS codes
-- [**465**星][1y] [hack-with-github/powerful-plugins](https://github.com/hack-with-github/powerful-plugins) Powerful plugins and add-ons for hackers
-- [**465**星][8m] [C++] [glmcdona/process-dump](https://github.com/glmcdona/process-dump) Windows tool for dumping malware PE files from memory back to disk for analysis.
-- [**465**星][2y] [Py] [firstlookmedia/pdf-redact-tools](https://github.com/firstlookmedia/pdf-redact-tools) a set of tools to help with securely redacting and stripping metadata from documents before publishing
-- [**464**星][1m] [TypeScript] [mitre-attack/attack-navigator](https://github.com/mitre-attack/attack-navigator) Web app that provides basic navigation and annotation of ATT&CK matrices
-- [**464**星][1m] [Py] [hunters-forge/mordor](https://github.com/hunters-forge/mordor) Re-play Adversarial Techniques
-- [**464**星][3y] [Py] [trustedsec/meterssh](https://github.com/trustedsec/meterssh) MeterSSH is a way to take shellcode, inject it into memory then tunnel whatever port you want to over SSH to mask any type of communications as a normal SSH connection. The way it works is by injecting shellcode into memory, then wrapping a port spawned (meterpeter in this case) by the shellcode over SSH back to the attackers machine. Then conne…
-- [**464**星][29d] [Py] [stamparm/dsvw](https://github.com/stamparm/dsvw) Damn Small Vulnerable Web
+- [**465**星][1m] [LLVM] [jonathansalwan/tigress_protection](https://github.com/jonathansalwan/tigress_protection) Playing with the Tigress binary protection. Break some of its protections and solve some of its challenges. Automatic deobfuscation using symbolic execution, taint analysis and LLVM.
+- [**465**星][1m] [Go] [gen0cide/gscript](https://github.com/gen0cide/gscript) 基于运行时参数,动态安装恶意软件
+- [**464**星][26d] [JS] [siujoeng-lau/workers-proxy](https://github.com/siujoeng-lau/workers-proxy) Lightweight reverse proxy implemented with Cloudflare Workers.
+- [**464**星][4m] [Py] [viralmaniar/powershell-rat](https://github.com/viralmaniar/powershell-rat) Python based backdoor that uses Gmail to exfiltrate data through attachment. This RAT will help during red team engagements to backdoor any Windows machines. It tracks the user activity using screen capture and sends it to an attacker as an e-mail attachment.
+- [**464**星][1m] [Py] [stamparm/dsvw](https://github.com/stamparm/dsvw) Damn Small Vulnerable Web
- [**464**星][2y] [C] [shinyquagsire23/switch-fightstick](https://github.com/shinyquagsire23/switch-fightstick) Proof-of-Concept LUFA Project for the Nintendo Switch. Pretends to be a HORI Pokken Pad which only prints Splatoon 2 Posts
-- [**464**星][1m] [LLVM] [jonathansalwan/tigress_protection](https://github.com/jonathansalwan/tigress_protection) Playing with the Tigress binary protection. Break some of its protections and solve some of its challenges. Automatic deobfuscation using symbolic execution, taint analysis and LLVM.
-- [**464**星][5y] [Perl] [jbittel/httpry](https://github.com/jbittel/httpry) HTTP logging and information retrieval tool
+- [**464**星][8m] [Java] [owasp/owasp-webscarab](https://github.com/owasp/owasp-webscarab) OWASP WebScarab
+- [**464**星][9d] [C] [irontec/sngrep](https://github.com/irontec/sngrep) Ncurses SIP Messages flow viewer
+- [**464**星][2y] [Py] [firstlookmedia/pdf-redact-tools](https://github.com/firstlookmedia/pdf-redact-tools) 在发布之前安全地编辑和剥离文档中的元数据
- [**464**星][6y] [Py] [bramcohen/dissidentx](https://github.com/bramcohen/dissidentx) Bram's steganographic framework
-- [**464**星][24d] [C#] [akaion/bleak](https://github.com/akaion/bleak) A Windows native DLL injection library that supports several methods of injection.
-- [**464**星][2y] [C++] [aimtuxofficial/aimtux](https://github.com/aimtuxofficial/aimtux) A large Linux csgo cheat/hack
-- [**464**星][8d] [Py] [aidaho12/haproxy-wi](https://github.com/aidaho12/haproxy-wi) Web interface for managing Haproxy servers
-- [**463**星][8d] [C] [skeeto/enchive](https://github.com/skeeto/enchive) Encrypted personal archives
- [**463**星][3y] [remath/literature_review](https://github.com/remath/literature_review) Survey of program analysis research with a focus on machine code
-- [**463**星][1m] [Go] [gen0cide/gscript](https://github.com/gen0cide/gscript) 基于运行时参数,动态安装恶意软件
-- [**462**星][8m] [Java] [owasp/owasp-webscarab](https://github.com/owasp/owasp-webscarab) OWASP WebScarab
+- [**463**星][5y] [pyrotek3/powershell-ad-recon](https://github.com/pyrotek3/powershell-ad-recon) PowerShell Scripts I find useful
+- [**463**星][8d] [C++] [mikesart/gpuvis](https://github.com/mikesart/gpuvis) GPU Trace Visualizer
+- [**463**星][6y] [C] [martona/mhook](https://github.com/martona/mhook) A Windows API hooking library
+- [**463**星][2y] [Py] [coalfire-research/java-deserialization-exploits](https://github.com/coalfire-research/java-deserialization-exploits) A collection of curated Java Deserialization Exploits
+- [**463**星][2y] [C++] [aimtuxofficial/aimtux](https://github.com/aimtuxofficial/aimtux) A large Linux csgo cheat/hack
+- [**462**星][3m] [C++] [fsecurelabs/c3](https://github.com/FSecureLABS/C3) 一个用于快速定制C2通道原型的框架,同时仍提供与现有攻击性工具包的集成。
+- [**462**星][17d] [Rust] [rust-fuzz/cargo-fuzz](https://github.com/rust-fuzz/cargo-fuzz) libFuzzer的wrapper
- [**462**星][7m] [C#] [microsoft/dbgshell](https://github.com/microsoft/dbgshell) PowerShell编写的Windows调试器引擎前端
-- [**462**星][3m] [PowerShell] [evotecit/pswinreporting](https://github.com/evotecit/pswinreporting) This PowerShell Module has multiple functionalities, but one of the signature features of this module is the ability to parse Security logs on Domain Controllers providing easy to use access to AD Events.
+- [**462**星][10d] [Java] [lennartkoopmann/nzyme](https://github.com/lennartkoopmann/nzyme) 直接收集空中的802.11 管理帧,并将其发送到 Graylog,用于WiFi IDS, 监控, 及事件响应。(Graylog:开源的日志管理系统)
+- [**462**星][24d] [C] [jkornev/hidden](https://github.com/jkornev/hidden) Windows驱动,带用户模式接口:隐藏文件系统和注册表对象、保护进程等
+- [**462**星][7m] [Shell] [jgmdev/ddos-deflate](https://github.com/jgmdev/ddos-deflate) Fork of DDoS Deflate with fixes, improvements and new features.
+- [**462**星][2y] [Go] [egebalci/hercules](https://github.com/egebalci/hercules) HERCULES is a special payload generator that can bypass antivirus softwares.
- [**462**星][2y] [Py] [dchrastil/scrapedin](https://github.com/dchrastil/scrapedin) A tool to scrape LinkedIn without API restrictions for data reconnaissance
-- [**462**星][2y] [Py] [coalfire-research/java-deserialization-exploits](https://github.com/coalfire-research/java-deserialization-exploits) A collection of curated Java Deserialization Exploits
-- [**461**星][3m] [C++] [fsecurelabs/c3](https://github.com/FSecureLABS/C3) Custom Command and Control (C3). A framework for rapid prototyping of custom C2 channels, while still providing integration with existing offensive toolkits.
- [**461**星][1y] [Py] [mehulj94/radium](https://github.com/mehulj94/Radium) Python keylogger with multiple features.
-- [**461**星][3m] [Py] [yanxiu0614/subdomain3](https://github.com/yanxiu0614/subdomain3) 简单快速的子域名爆破工具。
-- [**461**星][15d] [Rust] [rust-fuzz/cargo-fuzz](https://github.com/rust-fuzz/cargo-fuzz) libFuzzer的wrapper
-- [**461**星][5y] [pyrotek3/powershell-ad-recon](https://github.com/pyrotek3/powershell-ad-recon) PowerShell Scripts I find useful
-- [**461**星][5m] [C] [phoenhex/files](https://github.com/phoenhex/files)
-- [**461**星][4m] [C++] [mikesart/gpuvis](https://github.com/mikesart/gpuvis) GPU Trace Visualizer
-- [**461**星][8d] [Java] [lennartkoopmann/nzyme](https://github.com/lennartkoopmann/nzyme) 直接收集空中的802.11 管理帧,并将其发送到 Graylog,用于WiFi IDS, 监控, 及事件响应。(Graylog:开源的日志管理系统)
-- [**461**星][6m] [Shell] [jgmdev/ddos-deflate](https://github.com/jgmdev/ddos-deflate) Fork of DDoS Deflate with fixes, improvements and new features.
-- [**461**星][13d] [gradiuscypher/infosec_getting_started](https://github.com/gradiuscypher/infosec_getting_started) A collection of resources/documentation/links/etc to help people learn about Infosec and break into the field.
-- [**460**星][3m] [Py] [viralmaniar/powershell-rat](https://github.com/viralmaniar/powershell-rat) Python based backdoor that uses Gmail to exfiltrate data through attachment. This RAT will help during red team engagements to backdoor any Windows machines. It tracks the user activity using screen capture and sends it to an attacker as an e-mail attachment.
-- [**460**星][4m] [C++] [emoon/prodbg](https://github.com/emoon/prodbg) Debugging the way it's meant to be done
+- [**461**星][6m] [Shell] [vincentcox/bypass-firewalls-by-dns-history](https://github.com/vincentcox/bypass-firewalls-by-dns-history) Firewall bypass script based on DNS history records. This script will search for DNS A history records and check if the server replies for that domain. Handy for bugbounty hunters.
+- [**461**星][8m] [Py] [ustayready/fireprox](https://github.com/ustayready/fireprox) AWS API Gateway management tool for creating on the fly HTTP pass-through proxies for unique IP rotation
+- [**461**星][5m] [C] [phoenhex/files](https://github.com/phoenhex/files) Phoenhex 团队的exploits/POCs/presentation
+- [**461**星][15d] [gradiuscypher/infosec_getting_started](https://github.com/gradiuscypher/infosec_getting_started) A collection of resources/documentation/links/etc to help people learn about Infosec and break into the field.
+- [**461**星][4m] [C++] [emoon/prodbg](https://github.com/emoon/prodbg) Debugging the way it's meant to be done
+- [**461**星][16d] [Java] [dsheirer/sdrtrunk](https://github.com/dsheirer/sdrtrunk) A cross-platform java application for decoding, monitoring, recording and streaming trunked mobile and related radio protocols using Software Defined Radios (SDR). Website:
+- [**461**星][2y] [Py] [0xdeadbeefjerky/office-dde-payloads](https://github.com/0xdeadbeefjerky/office-dde-payloads) Collection of scripts and templates to generate Office documents embedded with the DDE, macro-less command execution technique.
+- [**460**星][2y] [Kotlin] [v2ray-android/actinium](https://github.com/v2ray-android/actinium) A 3rd party V2Ray client for Android
+- [**460**星][18d] [Py] [shellphish/rex](https://github.com/shellphish/rex) Shellphish's automated exploitation engine, originally created for the Cyber Grand Challenge.
+- [**460**星][2m] [Py] [savio-code/fern-wifi-cracker](https://github.com/savio-code/fern-wifi-cracker) 无线安全审计和攻击工具, 能破解/恢复 WEP/WPA/WPSkey等
+- [**460**星][10m] [Go] [netxfly/x-crack](https://github.com/netxfly/x-crack) Weak password scanner, Support: FTP/SSH/SNMP/MSSQL/MYSQL/PostGreSQL/REDIS/ElasticSearch/MONGODB
- [**460**星][4m] [C++] [comaeio/opcde](https://github.com/comaeio/opcde) OPCDE Cybersecurity Conference Materials
-- [**460**星][12d] [JS] [codemanki/cloudscraper](https://github.com/codemanki/cloudscraper) Node.js library to bypass cloudflare's anti-ddos page
-- [**459**星][2y] [Kotlin] [v2ray-android/actinium](https://github.com/v2ray-android/actinium) A 3rd party V2Ray client for Android
-- [**459**星][7d] [Py] [fportantier/habu](https://github.com/fportantier/habu) Python 编写的网络工具工具包,主要用于教学/理解网络攻击中的一些概念
+- [**460**星][9m] [C] [cofyc/dnscrypt-wrapper](https://github.com/cofyc/dnscrypt-wrapper) This is dnscrypt wrapper (server-side dnscrypt proxy), which helps to add dnscrypt support to any name resolver.
+- [**459**星][29d] [Shell] [wireghoul/graudit](https://github.com/wireghoul/graudit) 简单的脚本和签名集,进行源代码审计
+- [**459**星][6m] [Py] [threezh1/jsfinder](https://github.com/threezh1/jsfinder) JSFinder is a tool for quickly extracting URLs and subdomains from JS files on a website.
- [**459**星][1y] [C] [ntruchsess/arduino_uip](https://github.com/ntruchsess/arduino_uip) A plugin-replacement of the stock Arduino Ethernet library for ENC28J60 shields and breakout boards. Full support for persistent (streaming) TCP-connections and UDP (Client and Server each), ARP, ICMP, DHCP and DNS. Build around Adam Dunkels uIP Stack. Further developed version can be found on
-- [**459**星][22d] [C] [jkornev/hidden](https://github.com/jkornev/hidden) Windows驱动,带用户模式接口:隐藏文件系统和注册表对象、保护进程等
-- [**459**星][2y] [Go] [egebalci/hercules](https://github.com/egebalci/hercules) HERCULES is a special payload generator that can bypass antivirus softwares.
-- [**459**星][14d] [Java] [dsheirer/sdrtrunk](https://github.com/dsheirer/sdrtrunk) A cross-platform java application for decoding, monitoring, recording and streaming trunked mobile and related radio protocols using Software Defined Radios (SDR). Website:
-- [**459**星][2y] [Py] [0xdeadbeefjerky/office-dde-payloads](https://github.com/0xdeadbeefjerky/office-dde-payloads) Collection of scripts and templates to generate Office documents embedded with the DDE, macro-less command execution technique.
-- [**458**星][8m] [Py] [ustayready/fireprox](https://github.com/ustayready/fireprox) AWS API Gateway management tool for creating on the fly HTTP pass-through proxies for unique IP rotation
-- [**458**星][16d] [Py] [shellphish/rex](https://github.com/shellphish/rex) Shellphish's automated exploitation engine, originally created for the Cyber Grand Challenge.
-- [**458**星][2m] [Py] [savio-code/fern-wifi-cracker](https://github.com/savio-code/fern-wifi-cracker) 无线安全审计和攻击工具, 能破解/恢复 WEP/WPA/WPSkey等
+- [**459**星][1y] [HTML] [metnew/uxss-db](https://github.com/metnew/uxss-db)
+- [**459**星][1y] [Cycript] [codermjlee/mjcript](https://github.com/codermjlee/mjcript) 【越狱-逆向】基于Cycript实现的一些实用函数
+- [**459**星][9m] [Py] [christhecoolhut/zeratool](https://github.com/christhecoolhut/zeratool) Automatic Exploit Generation (AEG) and remote flag capture for exploitable CTF problems
+- [**458**星][4m] [mel0day/redteam-bcs](https://github.com/mel0day/redteam-bcs) BCS(北京网络安全大会)2019 红队行动会议重点内容
+
+- [**458**星][3y] [valvesoftware/csgo-osx-linux](https://github.com/ValveSoftware/csgo-osx-linux) 反恐精英全球攻势
+- [**458**星][8m] [C] [sandeepmistry/arduino-nrf5](https://github.com/sandeepmistry/arduino-nrf5) Arduino Core for Nordic Semiconductor nRF5 based boards
- [**458**星][3m] [PHP] [nette/latte](https://github.com/nette/latte) ☕ Latte: the intuitive and fast template engine for those who want the most secure PHP sites.
-- [**458**星][6y] [C] [martona/mhook](https://github.com/martona/mhook) A Windows API hooking library
-- [**458**星][19d] [Py] [k8gege/k8cscan](https://github.com/k8gege/k8cscan) 大型内网渗透自定义插件化扫描神器,包含信息收集、网络资产、漏洞扫描、密码爆破、漏洞利用,程序采用多线程批量扫描大型内网多个IP段C段主机,目前插件包含: C段旁注扫描、子域名扫描、Ftp密码爆破、Mysql密码爆破、Oracle密码爆破、MSSQL密码爆破、Windows/Linux系统密码爆破、存活主机扫描、端口扫描、Web信息探测、操作系统版本探测、Cisco思科设备扫描等,支持调用任意外部程序或脚本,支持Cobalt Strike联动
+- [**458**星][4y] [JS] [ghostwords/chameleon](https://github.com/ghostwords/chameleon) Browser fingerprinting protection for everybody.
+- [**458**星][2d] [C] [exim/exim](https://github.com/exim/exim) Exim Mail Transport Agent - source, testsuite and documentation
+- [**457**星][3y] [Py] [vpnguy-zz/ntpdos](https://github.com/vpnguy-zz/ntpdos) Create a DDOS attack using NTP servers
- [**457**星][3m] [Py] [blacknbunny/cve-2018-10933](https://github.com/blacknbunny/CVE-2018-10933) Spawn to shell without any credentials by using CVE-2018-10933 (LibSSH)
-- [**457**星][3y] [valvesoftware/csgo-osx-linux](https://github.com/ValveSoftware/csgo-osx-linux) Counter-Strike: Global Offensive
-- [**457**星][6m] [Shell] [vincentcox/bypass-firewalls-by-dns-history](https://github.com/vincentcox/bypass-firewalls-by-dns-history) Firewall bypass script based on DNS history records. This script will search for DNS A history records and check if the server replies for that domain. Handy for bugbounty hunters.
-- [**457**星][10m] [Go] [netxfly/x-crack](https://github.com/netxfly/x-crack) Weak password scanner, Support: FTP/SSH/SNMP/MSSQL/MYSQL/PostGreSQL/REDIS/ElasticSearch/MONGODB
-- [**457**星][4y] [JS] [ghostwords/chameleon](https://github.com/ghostwords/chameleon) Browser fingerprinting protection for everybody.
-- [**457**星][9m] [C] [cofyc/dnscrypt-wrapper](https://github.com/cofyc/dnscrypt-wrapper) This is dnscrypt wrapper (server-side dnscrypt proxy), which helps to add dnscrypt support to any name resolver.
-- [**457**星][9m] [Py] [christhecoolhut/zeratool](https://github.com/christhecoolhut/zeratool) Automatic Exploit Generation (AEG) and remote flag capture for exploitable CTF problems
-- [**457**星][8d] [C] [bootleg/ret-sync](https://github.com/bootleg/ret-sync) 在反汇编工具和调试器之间同步调试会话
- - [GDB插件](https://github.com/bootleg/ret-sync/tree/master/ext_gdb)
- - [Ghidra插件](https://github.com/bootleg/ret-sync/tree/master/ext_ghidra)
- - [IDA插件](https://github.com/bootleg/ret-sync/tree/master/ext_ida)
- - [LLDB](https://github.com/bootleg/ret-sync/tree/master/ext_lldb)
- - [OD](https://github.com/bootleg/ret-sync/tree/master/ext_olly1)
- - [OD2](https://github.com/bootleg/ret-sync/tree/master/ext_olly2)
- - [WinDgb](https://github.com/bootleg/ret-sync/tree/master/ext_windbg/sync)
- - [x64dbg](https://github.com/bootleg/ret-sync/tree/master/ext_x64dbg)
-- [**456**星][1y] [HTML] [metnew/uxss-db](https://github.com/metnew/uxss-db)
-- [**456**星][4m] [C] [jarun/keysniffer](https://github.com/jarun/keysniffer)
+- [**457**星][1m] [C#] [tyranid/oleviewdotnet](https://github.com/tyranid/oleviewdotnet) OLE/COM查看和检测工具,.NET语言编写
+- [**457**星][4m] [C] [jarun/keysniffer](https://github.com/jarun/keysniffer)
+- [**457**星][6m] [PHP] [flozz/p0wny-shell](https://github.com/flozz/p0wny-shell) Single-file PHP shell
+- [**456**星][26d] [PHP] [pk-fr/yakpro-po](https://github.com/pk-fr/yakpro-po) YAK Pro - Php Obfuscator
- [**456**星][3y] [C] [haka-security/haka](https://github.com/haka-security/haka) a collection of tools that allows capturing TCP/IP packets and filtering them based on Lua policy files.
-- [**456**星][6m] [PHP] [flozz/p0wny-shell](https://github.com/flozz/p0wny-shell) Single-file PHP shell
-- [**456**星][7d] [C] [exim/exim](https://github.com/exim/exim) Exim Mail Transport Agent - source, testsuite and documentation
-- [**456**星][1y] [Cycript] [codermjlee/mjcript](https://github.com/codermjlee/mjcript) 【越狱-逆向】基于Cycript实现的一些实用函数
-- [**455**星][3y] [Py] [vpnguy-zz/ntpdos](https://github.com/vpnguy-zz/ntpdos) Create a DDOS attack using NTP servers
-- [**455**星][2y] [Py] [yukinoshita47/yuki-chan-the-auto-pentest](https://github.com/yukinoshita47/yuki-chan-the-auto-pentest) Automate Pentest Tool
-- [**455**星][27d] [Shell] [wireghoul/graudit](https://github.com/wireghoul/graudit) 简单的脚本和签名集,进行源代码审计
-- [**455**星][24d] [PHP] [pk-fr/yakpro-po](https://github.com/pk-fr/yakpro-po) YAK Pro - Php Obfuscator
-- [**455**星][4y] [C] [lucasjones/cpuminer-multi](https://github.com/lucasjones/cpuminer-multi) Multi-algo CPUMiner & Reference Cryptonote Miner (JSON-RPC 2.0)
-- [**455**星][2y] [Py] [embedi/cve-2017-11882](https://github.com/embedi/cve-2017-11882) Proof-of-Concept exploits for CVE-2017-11882
-- [**454**星][2y] [Jupyter Notebook] [saurabhmathur96/clickbait-detector](https://github.com/saurabhmathur96/clickbait-detector) 使用深度学习检测clickbait headlines
-- [**454**星][8m] [C] [sandeepmistry/arduino-nrf5](https://github.com/sandeepmistry/arduino-nrf5) Arduino Core for Nordic Semiconductor nRF5 based boards
-- [**454**星][2m] [Py] [globaleaks/tor2web](https://github.com/globaleaks/tor2web) Tor2web is an HTTP proxy software that enables access to Tor Hidden Services by mean of common web browsers
-- [**453**星][6m] [Py] [threezh1/jsfinder](https://github.com/threezh1/jsfinder) JSFinder is a tool for quickly extracting URLs and subdomains from JS files on a website.
-- [**453**星][11d] [Py] [rabobank-cdc/dettect](https://github.com/rabobank-cdc/dettect) Detect Tactics, Techniques & Combat Threats
-- [**453**星][11m] [Py] [mandatoryprogrammer/tldr](https://github.com/mandatoryprogrammer/tldr) TLDR (TLD Records) is a continually updated DNS archive of zone transfer attempts again all existing TLD nameservers as well as the root servers.
-- [**453**星][2y] [Py] [idanr1986/cuckoo-droid](https://github.com/idanr1986/cuckoo-droid) Automated Android Malware Analysis with Cuckoo Sandbox.
-- [**453**星][6m] [Py] [dr0op/weblogicscan](https://github.com/dr0op/weblogicscan) 增强版WeblogicScan、检测结果更精确、插件化、添加CVE-2019-2618,CVE-2019-2729检测,Python3支持
+- [**456**星][2m] [Py] [globaleaks/tor2web](https://github.com/globaleaks/tor2web) Tor2web is an HTTP proxy software that enables access to Tor Hidden Services by mean of common web browsers
+- [**455**星][2y] [Py] [yukinoshita47/yuki-chan-the-auto-pentest](https://github.com/yukinoshita47/yuki-chan-the-auto-pentest) 一个自动渗透测试工具,该工具将为您审核所有标准安全性测试方法。
+- [**455**星][2y] [Jupyter Notebook] [saurabhmathur96/clickbait-detector](https://github.com/saurabhmathur96/clickbait-detector) 使用深度学习检测clickbait headlines
+- [**455**星][7d] [Py] [rabobank-cdc/dettect](https://github.com/rabobank-cdc/dettect) Detect Tactics, Techniques & Combat Threats
+- [**455**星][8d] [PS] [mr-un1k0d3r/redteampowershellscripts](https://github.com/mr-un1k0d3r/redteampowershellscripts) 在红队练习中可能会有用的各种PowerShell脚本
+- [**455**星][11m] [Py] [mandatoryprogrammer/tldr](https://github.com/mandatoryprogrammer/tldr) TLDR (TLD Records) is a continually updated DNS archive of zone transfer attempts again all existing TLD nameservers as well as the root servers.
+- [**455**星][2y] [Py] [idanr1986/cuckoo-droid](https://github.com/idanr1986/cuckoo-droid) Automated Android Malware Analysis with Cuckoo Sandbox.
+- [**455**星][6m] [Py] [dr0op/weblogicscan](https://github.com/dr0op/weblogicscan) 增强版WeblogicScan、检测结果更精确、插件化、添加CVE-2019-2618,CVE-2019-2729检测,Python3支持
+- [**454**星][3m] [JS] [sindresorhus/get-port](https://github.com/sindresorhus/get-port) Get an available port
+- [**454**星][4y] [C] [lucasjones/cpuminer-multi](https://github.com/lucasjones/cpuminer-multi) Multi-algo CPUMiner & Reference Cryptonote Miner (JSON-RPC 2.0)
+- [**454**星][2y] [Py] [embedi/cve-2017-11882](https://github.com/embedi/cve-2017-11882) Proof-of-Concept exploits for CVE-2017-11882
+- [**453**星][1y] [Go] [ncsa/ssh-auditor](https://github.com/ncsa/ssh-auditor) 扫描网络中的弱SSH密码
+- [**453**星][1y] [CSS] [fmstrat/diy-ipmi](https://github.com/fmstrat/diy-ipmi) A DIY IPMI / IP KVM system utilizing the Raspberry Pi
- [**453**星][2y] [C] [cr4sh/openreil](https://github.com/cr4sh/openreil) Open source library that implements translator and tools for REIL (Reverse Engineering Intermediate Language)
-- [**453**星][1y] [bfuzzy/auditd-attack](https://github.com/bfuzzy/auditd-attack) A Linux Auditd rule set mapped to MITRE's Attack Framework
-- [**452**星][4m] [mel0day/redteam-bcs](https://github.com/mel0day/redteam-bcs) BCS(北京网络安全大会)2019 红队行动会议重点内容
-- [**452**星][1y] [Go] [ncsa/ssh-auditor](https://github.com/ncsa/ssh-auditor) 扫描网络中的弱SSH密码
-- [**452**星][6m] [Py] [n1xbyte/cve-2019-0708](https://github.com/n1xbyte/cve-2019-0708) dump
+- [**453**星][7d] [Py] [census-instrumentation/opencensus-python](https://github.com/census-instrumentation/opencensus-python) A stats collection and distributed tracing framework
+- [**453**星][9m] [C++] [ahupowerdns/hello-dns](https://github.com/ahupowerdns/hello-dns) Hello and welcome to DNS!
+- [**452**星][3m] [PS] [rvrsh3ll/misc-powershell-scripts](https://github.com/rvrsh3ll/misc-powershell-scripts) PowerShell工具集
+- [**452**星][7m] [Py] [n1xbyte/cve-2019-0708](https://github.com/n1xbyte/cve-2019-0708) dump
+- [**452**星][10m] [C] [martinmarinov/tempestsdr](https://github.com/martinmarinov/tempestsdr) Remote video eavesdropping using a software-defined radio platform
- [**452**星][4y] [clowwindy/shadowsocks-libev](https://github.com/clowwindy/shadowsocks-libev)
-- [**452**星][9m] [C++] [ahupowerdns/hello-dns](https://github.com/ahupowerdns/hello-dns) Hello and welcome to DNS!
-- [**451**星][15d] [Py] [controlscanmdr/cyphon](https://github.com/controlscanmdr/cyphon) 事件管理和响应平台
+- [**452**星][1y] [bfuzzy/auditd-attack](https://github.com/bfuzzy/auditd-attack) A Linux Auditd rule set mapped to MITRE's Attack Framework
+- [**451**星][5d] [SystemVerilog] [lowrisc/opentitan](https://github.com/lowrisc/opentitan) Open source silicon root of trust
+- [**451**星][17d] [Py] [controlscanmdr/cyphon](https://github.com/controlscanmdr/cyphon) 事件管理和响应平台
+- [**451**星][2m] [Java] [windysha/xpatch](https://github.com/windysha/xpatch) 免Root实现app加载Xposed插件工具。This is a tool to repackage apk file, then the apk can load any xposed modules installed in the device. It is another way to hook an app without root device.
- [**451**星][3y] [C++] [vusec/drammer](https://github.com/vusec/drammer) Native binary for testing Android phones for the Rowhammer bug
-- [**451**星][1m] [C#] [tyranid/oleviewdotnet](https://github.com/tyranid/oleviewdotnet) OLE/COM查看和检测工具,.NET语言编写
-- [**451**星][3m] [JS] [sindresorhus/get-port](https://github.com/sindresorhus/get-port) Get an available port
-- [**451**星][8m] [C++] [rek7/mxtract](https://github.com/rek7/mxtract) Offensive Memory Extractor & Analyzer
-- [**451**星][7d] [Py] [census-instrumentation/opencensus-python](https://github.com/census-instrumentation/opencensus-python) A stats collection and distributed tracing framework
-- [**450**星][8y] [Perl] [aoncyberlabs/padbuster](https://github.com/AonCyberLabs/PadBuster) Automated script for performing Padding Oracle attacks
-- [**450**星][2y] [PowerShell] [spiderlabs/portia](https://github.com/spiderlabs/portia) Portia aims to automate a number of techniques commonly performed on internal network penetration tests after a low privileged account has been compromised.
+- [**451**星][2y] [PS] [spiderlabs/portia](https://github.com/spiderlabs/portia) Portia aims to automate a number of techniques commonly performed on internal network penetration tests after a low privileged account has been compromised.
+- [**451**星][8m] [C++] [rek7/mxtract](https://github.com/rek7/mxtract) 一个基于linux的开源工具,用于分析和转储内存。
+- [**451**星][8d] [meitar/awesome-cybersecurity-blueteam](https://github.com/meitar/awesome-cybersecurity-blueteam)
+- [**451**星][7d] [PHP] [akaunting/firewall](https://github.com/akaunting/firewall) Web Application Firewall (WAF) package for Laravel
+- [**450**星][2m] [Py] [scwuaptx/pwngdb](https://github.com/scwuaptx/pwngdb) gdb for pwn
+- [**450**星][8y] [Perl] [aoncyberlabs/padbuster](https://github.com/AonCyberLabs/PadBuster) 自动化执行Padding Oracle攻击的脚本
+- [**450**星][2m] [Py] [super-l/superl-url](https://github.com/super-l/superl-url) 根据关键词,对搜索引擎内容检索结果的网址内容进行采集的一款轻量级软程序。 程序主要运用于安全渗透测试项目,以及批量评估各类CMS系统0DAY的影响程度,同时也是批量采集自己获取感兴趣的网站的一个小程序~~ 可自动从搜索引擎采集相关网站的真实地址与标题等信息,可保存为文件,自动去除重复URL。同时,也可以自定义忽略多条域名等。
- [**450**星][4m] [Py] [s0md3v/goop](https://github.com/s0md3v/goop) Google Search Scraper
+- [**450**星][4m] [C++] [omerya/invisi-shell](https://github.com/omerya/invisi-shell) 隐藏您的Powershell脚本。绕过所有Powershell安全功能
- [**450**星][3y] [C] [nccgroup/triforceafl](https://github.com/nccgroup/triforceafl) AFL/QEMU fuzzing with full-system emulation.
- [**450**星][3m] [m1ghtym0/browser-pwn](https://github.com/m1ghtym0/browser-pwn) An updated collection of resources targeting browser-exploitation.
- [**450**星][4y] [Py] [alienvault-labs/alienvaultlabs](https://github.com/alienvault-labs/alienvaultlabs) Alienvault Labs Projects Random Stuff
-- [**449**星][3m] [PowerShell] [rvrsh3ll/misc-powershell-scripts](https://github.com/rvrsh3ll/misc-powershell-scripts) Random Tools
-- [**449**星][4m] [C++] [omerya/invisi-shell](https://github.com/omerya/invisi-shell) Hide your Powershell script in plain sight. Bypass all Powershell security features
+- [**449**星][11m] [Kotlin] [shadowsocks/kcptun-android](https://github.com/shadowsocks/kcptun-android) kcptun for Android.
+- [**449**星][2d] [PS] [mantvydasb/redteam-tactics-and-techniques](https://github.com/mantvydasb/RedTeam-Tactics-and-Techniques) Red Teaming Tactics and Techniques
+- [**449**星][3m] [Go] [stripe/safesql](https://github.com/stripe/safesql) Static analysis tool for Golang that protects against SQL injections
- [**449**星][5m] [PHP] [kasperskylab/klara](https://github.com/kasperskylab/klara) Kaspersky's GReAT KLara
-- [**449**星][11d] [Py] [ctxis/cape](https://github.com/ctxis/cape) Malware Configuration And Payload Extraction
-- [**448**星][2m] [Py] [scwuaptx/pwngdb](https://github.com/scwuaptx/pwngdb) gdb for pwn
-- [**448**星][10d] [PowerShell] [mr-un1k0d3r/redteampowershellscripts](https://github.com/mr-un1k0d3r/redteampowershellscripts) Various PowerShell scripts that may be useful during red team exercise
-- [**447**星][11m] [Kotlin] [shadowsocks/kcptun-android](https://github.com/shadowsocks/kcptun-android) kcptun for Android.
-- [**447**星][1m] [Py] [super-l/superl-url](https://github.com/super-l/superl-url) 根据关键词,对搜索引擎内容检索结果的网址内容进行采集的一款轻量级软程序。 程序主要运用于安全渗透测试项目,以及批量评估各类CMS系统0DAY的影响程度,同时也是批量采集自己获取感兴趣的网站的一个小程序~~ 可自动从搜索引擎采集相关网站的真实地址与标题等信息,可保存为文件,自动去除重复URL。同时,也可以自定义忽略多条域名等。
-- [**447**星][10m] [C] [martinmarinov/tempestsdr](https://github.com/martinmarinov/tempestsdr) Remote video eavesdropping using a software-defined radio platform
-- [**447**星][5m] [JS] [coalfire-research/npk](https://github.com/coalfire-research/npk) A mostly-serverless distributed hash cracking platform
-- [**447**星][2m] [PHP] [akaunting/firewall](https://github.com/akaunting/firewall) Web Application Firewall (WAF) package for Laravel
-- [**446**星][6y] [Go] [titanous/heartbleeder](https://github.com/titanous/heartbleeder) OpenSSL CVE-2014-0160 Heartbleed vulnerability test
-- [**446**星][3m] [Go] [stripe/safesql](https://github.com/stripe/safesql) Static analysis tool for Golang that protects against SQL injections
-- [**446**星][1y] [JS] [simonepri/upash](https://github.com/simonepri/upash)
-- [**446**星][2y] [POV-Ray SDL] [hzqst/syscall-monitor](https://github.com/hzqst/syscall-monitor) 使用Intel VT-X/EPT实现的系统调用追踪工具,类似于Sysinternal的Process Monitor,支持Win7+
-- [**446**星][5m] [Py] [cchio/deep-pwning](https://github.com/cchio/deep-pwning) 一个轻量级的框架,用于试验机器学习模型,目的是评估其对主动攻击者的鲁棒性
-- [**445**星][8m] [YARA] [ghidraninja/ghidra_scripts](https://github.com/ghidraninja/ghidra_scripts) Ghidra脚本
+- [**449**星][6m] [JS] [coalfire-research/npk](https://github.com/coalfire-research/npk) A mostly-serverless distributed hash cracking platform
+- [**448**星][14d] [Py] [s0md3v/corsy](https://github.com/s0md3v/corsy) CORS Misconfiguration Scanner
+- [**448**星][10d] [C++] [ondrejbudai/hidviz](https://github.com/ondrejbudai/hidviz) 深入分析 USB HID设备通信的工具
+- [**448**星][2m] [Shell] [l-n-s/wireguard-install](https://github.com/l-n-s/wireguard-install) WireGuard VPN server installer
+- [**448**星][8m] [YARA] [ghidraninja/ghidra_scripts](https://github.com/ghidraninja/ghidra_scripts) Ghidra脚本
- [binwalk](https://github.com/ghidraninja/ghidra_scripts/blob/master/binwalk.py) 对当前程序运行BinWalk, 标注找到的内容
- [yara](https://github.com/ghidraninja/ghidra_scripts/blob/master/yara.py) 使用Yara查找加密常量
- [swift_demangler](https://github.com/ghidraninja/ghidra_scripts/blob/master/swift_demangler.py) 自动demangle Swift函数名
- [golang_renamer](https://github.com/ghidraninja/ghidra_scripts/blob/master/golang_renamer.py) 恢复stripped Go二进制文件的函数名
-- [**444**星][19d] [Py] [sidechannelmarvels/deadpool](https://github.com/sidechannelmarvels/deadpool) Repository of various public white-box cryptographic implementations and their practical attacks.
-- [**444**星][5m] [PowerShell] [sans-blue-team/deepbluecli](https://github.com/sans-blue-team/deepbluecli) a PowerShell Module for Threat Hunting via Windows Event Logs
-- [**444**星][8y] [Py] [openrce/paimei](https://github.com/openrce/paimei) A reverse engineering framework written in Python.
-- [**444**星][11m] [C++] [ntquery/scylla](https://github.com/ntquery/scylla) Imports Reconstructor
-- [**444**星][12d] [C#] [malwareinfosec/ekfiddle](https://github.com/malwareinfosec/ekfiddle) A framework based on the Fiddler web debugger to study Exploit Kits, malvertising and malicious traffic in general.
+- [**447**星][3d] [Py] [sidechannelmarvels/deadpool](https://github.com/sidechannelmarvels/deadpool) Repository of various public white-box cryptographic implementations and their practical attacks.
+- [**447**星][5m] [PS] [sans-blue-team/deepbluecli](https://github.com/sans-blue-team/deepbluecli) a PowerShell Module for Threat Hunting via Windows Event Logs
+- [**447**星][11m] [C++] [ntquery/scylla](https://github.com/ntquery/scylla) Imports Reconstructor
+- [**447**星][7m] [HTML] [ctf-wiki/ctf-challenges](https://github.com/ctf-wiki/ctf-challenges)
+- [**447**星][3m] [C] [cloudflare/cloudflare-blog](https://github.com/cloudflare/cloudflare-blog) Cloudflare Blog code samples
+- [**447**星][5m] [Py] [cchio/deep-pwning](https://github.com/cchio/deep-pwning) 一个轻量级的框架,用于试验机器学习模型,目的是评估其对主动攻击者的鲁棒性
+- [**447**星][3y] [aptive/penetration-testing-tools](https://github.com/aptive/penetration-testing-tools) 为所有常用的渗透测试工具(通常是Kali或其他渗透测试发行版中不存在的工具)创建一个存储库。
+- [**447**星][4m] [C++] [alexhude/friend](https://github.com/alexhude/friend) 反汇编显示增强, 文档增强插件
+- [**446**星][6y] [Go] [titanous/heartbleeder](https://github.com/titanous/heartbleeder) OpenSSL CVE-2014-0160 Heartbleed vulnerability test
+- [**446**星][1y] [JS] [simonepri/upash](https://github.com/simonepri/upash) 允许您拥有一个干净且易于使用的API,以在您的应用程序中无缝使用任何密码哈希算法。
+- [**446**星][14d] [Py] [nsonaniya2010/subdomainizer](https://github.com/nsonaniya2010/subdomainizer) A tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github.
+- [**446**星][5d] [C++] [khronosgroup/spirv-tools](https://github.com/khronosgroup/spirv-tools) provides an API and commands for processing SPIR-V module
+- [**446**星][2y] [POV-Ray SDL] [hzqst/syscall-monitor](https://github.com/hzqst/syscall-monitor) 使用Intel VT-X/EPT实现的系统调用追踪工具,类似于Sysinternal的Process Monitor,支持Win7+
+- [**445**星][6m] [C] [riverloopsec/killerbee](https://github.com/riverloopsec/killerbee) IEEE 802.15.4/ZigBee Security Research Toolkit
+- [**444**星][5d] [Shell] [r00t-3xp10it/fakeimageexploiter](https://github.com/r00t-3xp10it/fakeimageexploiter) Use a Fake image.jpg to exploit targets (hide known file extensions)
+- [**444**星][6d] [C#] [malwareinfosec/ekfiddle](https://github.com/malwareinfosec/ekfiddle) A framework based on the Fiddler web debugger to study Exploit Kits, malvertising and malicious traffic in general.
- [**444**星][1y] [Rust] [ierror/ssh-permit-a38](https://github.com/ierror/ssh-permit-a38) SSH秘钥的中心化管理与部署
-- [**444**星][3y] [aptive/penetration-testing-tools](https://github.com/aptive/penetration-testing-tools) Penetration Testing tools - one repo to clone them all... containing latest pen testing tools
-- [**444**星][4m] [C++] [alexhude/friend](https://github.com/alexhude/friend) 反汇编显示增强, 文档增强插件
-- [**443**星][6m] [C] [riverloopsec/killerbee](https://github.com/riverloopsec/killerbee) IEEE 802.15.4/ZigBee Security Research Toolkit
+- [**444**星][2y] [ObjC] [aburgh/disk-arbitrator](https://github.com/aburgh/disk-arbitrator) A Mac OS X forensic utility which manages file system mounting in support of forensic procedures.
+- [**443**星][6m] [Go] [solo-io/sqoop](https://github.com/solo-io/sqoop) The GraphQL Engine powered by Gloo
+- [**443**星][8y] [Py] [openrce/paimei](https://github.com/openrce/paimei) A reverse engineering framework written in Python.
- [**443**星][7m] [jnusimba/miscsecnotes](https://github.com/jnusimba/miscsecnotes) some learning notes about Web/Cloud/Docker Security、 Penetration Test、 Security Building
-- [**443**星][3y] [Py] [jekyc/wig](https://github.com/jekyc/wig) WebApp 信息收集器,可识别多种内容管理系统和其他管理程序
- [**443**星][11m] [Batchfile] [ion-storm/sysmon-config](https://github.com/ion-storm/sysmon-config) Advanced Sysmon configuration, Installer & Auto Updater with high-quality event tracing
-- [**443**星][3m] [C] [cloudflare/cloudflare-blog](https://github.com/cloudflare/cloudflare-blog) Cloudflare Blog code samples
-- [**443**星][2y] [Objective-C] [aburgh/disk-arbitrator](https://github.com/aburgh/disk-arbitrator) A Mac OS X forensic utility which manages file system mounting in support of forensic procedures.
+- [**443**星][1m] [Py] [gameye98/lazymux](https://github.com/gameye98/lazymux) termux tool installer
+- [**443**星][3y] [Py] [brianwrf/hackutils](https://github.com/brianwrf/hackutils) 基于BeautifulSoup bs4模块的用于渗透测试和网络安全研究的黑客工具套件
+- [**443**星][6m] [Py] [albinowax/activescanplusplus](https://github.com/albinowax/activescanplusplus) ActiveScan++ Burp Suite Plugin
- [**442**星][6m] [C#] [sdrapkin/securitydriven.inferno](https://github.com/sdrapkin/securitydriven.inferno)
-- [**442**星][12d] [Py] [nsonaniya2010/subdomainizer](https://github.com/nsonaniya2010/subdomainizer) A tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github.
+- [**442**星][2m] [Go] [retroplasma/flyover-reverse-engineering](https://github.com/retroplasma/flyover-reverse-engineering) Reversing Apple's 3D satellite mode
- [**442**星][1y] [Py] [jfoote/exploitable](https://github.com/jfoote/exploitable) The 'exploitable' GDB plugin. I don't work at CERT anymore, but here is the original homepage:
-- [**442**星][7m] [HTML] [ctf-wiki/ctf-challenges](https://github.com/ctf-wiki/ctf-challenges)
-- [**442**星][3y] [Py] [brianwrf/hackutils](https://github.com/brianwrf/hackutils) It is a hack tool kit for pentest and web security research.
-- [**441**星][1y] [Go] [ice3man543/subover](https://github.com/ice3man543/subover) A Powerful Subdomain Takeover Tool
-- [**440**星][5m] [C++] [ajkhoury/reclassex](https://github.com/ajkhoury/ReClassEx) ReClassEx
-- [**440**星][6m] [Go] [solo-io/sqoop](https://github.com/solo-io/sqoop) The GraphQL Engine powered by Gloo
-- [**440**星][10m] [Shell] [r00t-3xp10it/fakeimageexploiter](https://github.com/r00t-3xp10it/fakeimageexploiter) Use a Fake image.jpg to exploit targets (hide known file extensions)
-- [**440**星][7d] [C++] [khronosgroup/spirv-tools](https://github.com/khronosgroup/spirv-tools) provides an API and commands for processing SPIR-V module
+- [**442**星][3y] [Py] [jekyc/wig](https://github.com/jekyc/wig) WebApp 信息收集器,可识别多种内容管理系统和其他管理程序
+- [**442**星][1y] [Go] [ice3man543/subover](https://github.com/ice3man543/subover) A Powerful Subdomain Takeover Tool
+- [**441**星][6m] [C++] [ajkhoury/reclassex](https://github.com/ajkhoury/ReClassEx) ReClassEx
+- [**441**星][1y] [C] [ryancdotorg/brainflayer](https://github.com/ryancdotorg/brainflayer) A proof-of-concept cracker for cryptocurrency brainwallets and other low entropy key alogrithms.
+- [**441**星][3y] [Py] [ring04h/wyproxy](https://github.com/ring04h/wyproxy) proxying and recording HTTP/HTTPs/Socks5 proxy flow, save to MYSQL database.
+- [**441**星][1m] [Go] [cbeuw/cloak](https://github.com/cbeuw/cloak) A universal pluggable transport utilising TLS domain fronting to evade deep packet inspection and active probing from state-level adversaries
+- [**441**星][6d] [Jupyter Notebook] [borealisai/advertorch](https://github.com/borealisai/advertorch) A Toolbox for Adversarial Robustness Research
- [**440**星][4y] [C#] [keepwn/altman](https://github.com/keepwn/altman) the cross platform webshell tool in .NET
-- [**440**星][1m] [Py] [gameye98/lazymux](https://github.com/gameye98/lazymux) termux tool installer
-- [**440**星][1y] [JS] [brannondorsey/whonow](https://github.com/brannondorsey/whonow) 恶意DNS服务器, 可动态执行DNS重绑定攻击
-- [**439**星][1y] [C] [ryancdotorg/brainflayer](https://github.com/ryancdotorg/brainflayer) A proof-of-concept cracker for cryptocurrency brainwallets and other low entropy key alogrithms.
-- [**439**星][3y] [Py] [ring04h/wyproxy](https://github.com/ring04h/wyproxy) proxying and recording HTTP/HTTPs/Socks5 proxy flow, save to MYSQL database.
+- [**440**星][2y] [JS] [brannondorsey/whonow](https://github.com/brannondorsey/whonow) 恶意DNS服务器, 可动态执行DNS重绑定攻击
- [**439**星][3m] [C++] [pstavirs/ostinato](https://github.com/pstavirs/ostinato) Packet/Traffic Generator and Analyzer
+- [**439**星][1m] [Py] [polymorf/findcrypt-yara](https://github.com/polymorf/findcrypt-yara) 使用Yara规则查找加密常量
+- [**439**星][4y] [Java] [payatu/diva-android](https://github.com/payatu/diva-android) DIVA Android - Damn Insecure and vulnerable App for Android
- [**439**星][4y] [Py] [nimia/public_drown_scanner](https://github.com/nimia/public_drown_scanner)
-- [**439**星][12d] [meitar/awesome-cybersecurity-blueteam](https://github.com/meitar/awesome-cybersecurity-blueteam)
-- [**439**星][3y] [CSS] [graniet/chromebackdoor](https://github.com/graniet/chromebackdoor) Chromebackdoor is a PoC of pentest tool, this tool use a MITB technique for generate a windows executable ".exe" after launch run a malicious extension or script on most popular browsers, and send all DOM datas on command and control.
+- [**439**星][2y] [magoo/redteam-plan](https://github.com/magoo/redteam-plan) 规划 redteam 练习时要考虑的问题
+- [**439**星][3y] [CSS] [graniet/chromebackdoor](https://github.com/graniet/chromebackdoor) 一个渗透测试工具PoC,使用MITB技术在启动后生成Windows可执行文件“ .exe”,并在大多数流行的浏览器上运行恶意扩展或脚本,并通过C&C发送所有DOM数据。
+- [**439**星][12d] [Py] [google/vulncode-db](https://github.com/google/vulncode-db) a database for vulnerabilities and their corresponding source code if available
+- [**439**星][2d] [C] [facebook/openbmc](https://github.com/facebook/openbmc) OpenBMC is an open software framework to build a complete Linux image for a Board Management Controller (BMC).
- [**439**星][1y] [JS] [digitalsecurity/btlejuice](https://github.com/digitalsecurity/btlejuice) BtleJuice Bluetooth Smart (LE) Man-in-the-Middle framework
-- [**439**星][6m] [Py] [albinowax/activescanplusplus](https://github.com/albinowax/activescanplusplus) ActiveScan++ Burp Suite Plugin
-- [**438**星][19d] [SystemVerilog] [lowrisc/opentitan](https://github.com/lowrisc/opentitan) Open source silicon root of trust
-- [**437**星][4y] [Java] [payatu/diva-android](https://github.com/payatu/diva-android) DIVA Android - Damn Insecure and vulnerable App for Android
-- [**437**星][7m] [maddiestone/androidappre](https://github.com/maddiestone/androidappre) Android App Reverse Engineering Workshop
-- [**437**星][7d] [C] [facebook/openbmc](https://github.com/facebook/openbmc) OpenBMC is an open software framework to build a complete Linux image for a Board Management Controller (BMC).
-- [**436**星][16d] [C++] [stevemk14ebr/polyhook_2_0](https://github.com/stevemk14ebr/polyhook_2_0) C++17, x86/x64 Hooking Libary v2.0
-- [**436**星][19d] [TypeScript] [fuzzitdev/jsfuzz](https://github.com/fuzzitdev/jsfuzz) coverage guided fuzz testing for javascript
-- [**436**星][8m] [PowerShell] [nsacyber/event-forwarding-guidance](https://github.com/nsacyber/Event-Forwarding-Guidance) 帮助管理员使用Windows事件转发(WEF)收集与安全相关的Windows事件日志
-- [**436**星][2y] [magoo/redteam-plan](https://github.com/magoo/redteam-plan) 规划 redteam 练习时要考虑的问题
+- [**439**星][1m] [Py] [brendan-w/python-obd](https://github.com/brendan-w/python-obd) OBD-II serial module for reading engine data
+- [**438**星][2d] [C++] [stevemk14ebr/polyhook_2_0](https://github.com/stevemk14ebr/polyhook_2_0) C++17, x86/x64 Hooking Libary v2.0
+- [**438**星][8m] [PS] [nsacyber/event-forwarding-guidance](https://github.com/nsacyber/Event-Forwarding-Guidance) 帮助管理员使用Windows事件转发(WEF)收集与安全相关的Windows事件日志
+- [**438**星][9d] [mitre/cti](https://github.com/mitre/cti) Cyber Threat Intelligence Repository expressed in STIX 2.0
+- [**438**星][4y] [Py] [laramies/metagoofil](https://github.com/laramies/metagoofil) 提取目标网站中可用的公共文档(pdf,doc,xls,ppt等)的元数据
+- [**438**星][24d] [Py] [j00ru/ctf-tasks](https://github.com/j00ru/ctf-tasks) An archive of low-level CTF challenges developed over the years
+- [**437**星][5m] [Java] [graxcode/jbytemod-beta](https://github.com/graxcode/jbytemod-beta) Java bytecode editor
+- [**437**星][2y] [PHP] [arrexel/phpbash](https://github.com/arrexel/phpbash) A semi-interactive PHP shell compressed into a single file.
+- [**436**星][1m] [TSQL] [404notf0und/security-data-analysis-and-visualization](https://github.com/404notf0und/security-data-analysis-and-visualization) 2018-2020青年安全圈-活跃技术博主/博客
+- [**436**星][3d] [TS] [fuzzitdev/jsfuzz](https://github.com/fuzzitdev/jsfuzz) coverage guided fuzz testing for javascript
+- [**436**星][2y] [Py] [undeadsec/evilurl](https://github.com/undeadsec/evilurl) 为IDN同形文字攻击生成unicode邪恶域,并对其进行检测。
+- [**436**星][2y] [Vim script] [tmhedberg/simpylfold](https://github.com/tmhedberg/simpylfold) No-BS Python code folding for Vim
+- [**436**星][2m] [Py] [romanzaikin/burpextension-whatsapp-decryption-checkpoint](https://github.com/romanzaikin/burpextension-whatsapp-decryption-checkpoint) This tool was created during our research at Checkpoint Software Technologies on Whatsapp Protocol (This repository will be updated after BlackHat 2019)
+- [**436**星][6d] [Py] [ionelmc/python-hunter](https://github.com/ionelmc/python-hunter) Hunter is a flexible code tracing toolkit.
- [**436**星][4y] [Py] [foxglovesec/javaunserializeexploits](https://github.com/foxglovesec/javaunserializeexploits)
-- [**436**星][3m] [Go] [ethereumproject/go-ethereum](https://github.com/ethereumproject/go-ethereum) Go language implementation of the original/classic design of the Ethereum protocol
-- [**436**星][1m] [Py] [brendan-w/python-obd](https://github.com/brendan-w/python-obd) OBD-II serial module for reading engine data
-- [**435**星][2y] [Vim script] [tmhedberg/simpylfold](https://github.com/tmhedberg/simpylfold) No-BS Python code folding for Vim
-- [**435**星][2m] [Py] [romanzaikin/burpextension-whatsapp-decryption-checkpoint](https://github.com/romanzaikin/burpextension-whatsapp-decryption-checkpoint) This tool was created during our research at Checkpoint Software Technologies on Whatsapp Protocol (This repository will be updated after BlackHat 2019)
+- [**436**星][4m] [Go] [ethereumproject/go-ethereum](https://github.com/ethereumproject/go-ethereum) Go language implementation of the original/classic design of the Ethereum protocol
+- [**436**星][2y] [PS] [danielbohannon/revoke-obfuscation](https://github.com/danielbohannon/revoke-obfuscation) PowerShell Obfuscation Detection Framework
+- [**436**星][4m] [ctftraining/ctftraining](https://github.com/ctftraining/ctftraining) CTF Training 经典赛题复现环境
+- [**436**星][2d] [JS] [ayms/node-tor](https://github.com/ayms/node-tor) Javascript implementation of the Tor (or Tor like) anonymizer project (The Onion Router)
+- [**436**星][2m] [Py] [admintony/prepare-for-awd](https://github.com/admintony/prepare-for-awd) AWD攻防赛脚本集合
+- [**436**星][1y] [Py] [0x4d31/honeylambda](https://github.com/0x4d31/honeylambda) honeyλ - a simple, serverless application designed to create and monitor fake HTTP endpoints (i.e. URL honeytokens) automatically, on top of AWS Lambda and Amazon API Gateway
- [**435**星][11m] [Py] [neohapsis/bbqsql](https://github.com/neohapsis/bbqsql) SQL Injection Exploitation Tool
- [**435**星][3y] [C] [mncoppola/suterusu](https://github.com/mncoppola/suterusu) An LKM rootkit targeting Linux 2.6/3.x on x86(_64), and ARM
-- [**435**星][4y] [Py] [laramies/metagoofil](https://github.com/laramies/metagoofil) Metadata harvester
-- [**435**星][25d] [Py] [ionelmc/python-hunter](https://github.com/ionelmc/python-hunter) Hunter is a flexible code tracing toolkit.
-- [**435**星][10d] [Py] [google/vulncode-db](https://github.com/google/vulncode-db) a database for vulnerabilities and their corresponding source code if available
-- [**435**星][1y] [Py] [0x4d31/honeylambda](https://github.com/0x4d31/honeylambda) honeyλ - a simple, serverless application designed to create and monitor fake HTTP endpoints (i.e. URL honeytokens) automatically, on top of AWS Lambda and Amazon API Gateway
- [**434**星][4m] [Py] [ridter/redis-rce](https://github.com/ridter/redis-rce) Redis 4.x/5.x RCE
-- [**434**星][7d] [mitre/cti](https://github.com/mitre/cti) Cyber Threat Intelligence Repository expressed in STIX 2.0
-- [**434**星][22d] [Py] [j00ru/ctf-tasks](https://github.com/j00ru/ctf-tasks) An archive of low-level CTF challenges developed over the years
+- [**434**星][4m] [Go] [coyim/coyim](https://github.com/coyim/coyim) a safe and secure chat client
- [**434**星][8m] [Go] [client9/ipcat](https://github.com/client9/ipcat) Categorization of IP Addresses
-- [**434**星][2y] [PHP] [arrexel/phpbash](https://github.com/arrexel/phpbash) A semi-interactive PHP shell compressed into a single file.
-- [**433**星][2y] [Py] [undeadsec/evilurl](https://github.com/undeadsec/evilurl) Generate unicode evil domains for IDN Homograph Attack and detect them.
-- [**433**星][5m] [Java] [graxcode/jbytemod-beta](https://github.com/graxcode/jbytemod-beta) Java bytecode editor
-- [**433**星][2y] [PowerShell] [danielbohannon/revoke-obfuscation](https://github.com/danielbohannon/revoke-obfuscation) PowerShell Obfuscation Detection Framework
-- [**433**星][4m] [Go] [coyim/coyim](https://github.com/coyim/coyim) a safe and secure chat client
-- [**433**星][1m] [JS] [ayms/node-tor](https://github.com/ayms/node-tor) Javascript implementation of the Tor (or Tor like) anonymizer project (The Onion Router)
-- [**432**星][3y] [Py] [secureworks/dcept](https://github.com/secureworks/dcept) A tool for deploying and detecting use of Active Directory honeytokens
-- [**432**星][8y] [C++] [moxie0/sslsniff](https://github.com/moxie0/sslsniff) A tool for automated MITM attacks on SSL connections.
-- [**432**星][1m] [Go] [gorilla/securecookie](https://github.com/gorilla/securecookie) Package gorilla/securecookie encodes and decodes authenticated and optionally encrypted cookie values for Go web applications.
+- [**433**星][3y] [Py] [secureworks/dcept](https://github.com/secureworks/dcept) A tool for deploying and detecting use of Active Directory honeytokens
+- [**433**星][8y] [C++] [moxie0/sslsniff](https://github.com/moxie0/sslsniff) A tool for automated MITM attacks on SSL connections.
+- [**432**星][8m] [Py] [aws-samples/aws-waf-sample](https://github.com/aws-samples/aws-waf-sample) This repository contains example scripts and sets of rules for the AWS WAF service. Please be aware that the applicability of these examples to specific workloads may vary.
+- [**432**星][7m] [Ruby] [tidesec/fuzzscanner](https://github.com/tidesec/fuzzscanner) 一个主要用于信息搜集的工具集,主要是用于对网站子域名、开放端口、端口指纹、c段地址、敏感目录等信息进行批量搜集。
+- [**432**星][7y] [C] [juuso/keychaindump](https://github.com/juuso/keychaindump) A proof-of-concept tool for reading OS X keychain passwords
+- [**432**星][12m] [Shell] [jactor-sue/deepin-apps-installation](https://github.com/jactor-sue/deepin-apps-installation) 本仓库介绍如何在基于Ubuntu的系统上安装Deepin移植的软件
+- [**432**星][2m] [Go] [gorilla/securecookie](https://github.com/gorilla/securecookie) Package gorilla/securecookie encodes and decodes authenticated and optionally encrypted cookie values for Go web applications.
- [**432**星][2m] [Ruby] [aderyabin/sniffer](https://github.com/aderyabin/sniffer) Log and Analyze Outgoing HTTP Requests
- [**431**星][1y] [HTML] [dnfwah/dnfwah](https://github.com/DNFWAH/DNFWAH) It's an ezine: DO NOT FUCK WITH A HACKER
-- [**431**星][1m] [Py] [polymorf/findcrypt-yara](https://github.com/polymorf/findcrypt-yara) 使用Yara规则查找加密常量
-- [**431**星][7y] [C] [juuso/keychaindump](https://github.com/juuso/keychaindump) A proof-of-concept tool for reading OS X keychain passwords
+- [**431**星][2m] [Py] [pan-unit42/public_tools](https://github.com/pan-unit42/public_tools)
+- [**431**星][9m] [Go] [amyangxyz/assassingo](https://github.com/amyangxyz/assassingo) 一个可扩展的并发信息收集和漏洞扫描框架,具有基于WebSocket的Web GUI。
- [**431**星][4y] [C] [alonho/pytrace](https://github.com/alonho/pytrace) pytrace is a fast python tracer. it records function calls, arguments and return values. can be used for debugging and profiling.
-- [**430**星][1m] [TSQL] [404notf0und/security-data-analysis-and-visualization](https://github.com/404notf0und/security-data-analysis-and-visualization) 2018-2020青年安全圈-活跃技术博主/博客
+- [**430**星][2d] [Py] [w-digital-scanner/w13scan](https://github.com/w-digital-scanner/w13scan) Passive Security Scanner (被动式安全扫描器)
+- [**430**星][26d] [C] [guardianproject/orbot](https://github.com/guardianproject/orbot) The Github home of Orbot: Tor on Android (Also available on gitlab!)
+- [**430**星][2m] [Py] [superhedgy/attacksurfacemapper](https://github.com/superhedgy/attacksurfacemapper) AttackSurfaceMapper is a tool that aims to automate the reconnaissance process.
- [**430**星][2y] [C] [siguza/iohideous](https://github.com/siguza/iohideous) IOHIDFamily 0day
-- [**430**星][4y] [JS] [mozilla/scanjs](https://github.com/mozilla/scanjs) [DEPRECATED] Static analysis tool for javascript code.
-- [**430**星][6m] [Pascal] [mojtabatajik/robber](https://github.com/mojtabatajik/robber) Robber is open source tool for finding executables prone to DLL hijacking
+- [**430**星][4y] [JS] [mozilla/scanjs](https://github.com/mozilla/scanjs) javascript代码的静态分析工具。
+- [**430**星][7m] [Pascal] [mojtabatajik/robber](https://github.com/mojtabatajik/robber) 查找易于发生DLL劫持的可执行文件
- [**430**星][1y] [meitar/awesome-lockpicking](https://github.com/meitar/awesome-lockpicking) 有关锁、保险箱、钥匙的指南、工具及其他资源的列表
- [**430**星][2y] [Py] [lightbulb-framework/lightbulb-framework](https://github.com/lightbulb-framework/lightbulb-framework) Web App 防火墙和过滤器的审计框架
-- [**430**星][2y] [Objective-C] [keith/hopper-swift-demangle](https://github.com/keith/hopper-swift-demangle) A Hopper plugin for demangle Swift symbols
+- [**430**星][2y] [ObjC] [keith/hopper-swift-demangle](https://github.com/keith/hopper-swift-demangle) A Hopper plugin for demangle Swift symbols
+- [**430**星][4m] [Py] [crocs-muni/roca](https://github.com/crocs-muni/roca) 测试公共 RSA 密钥是否存在某些漏洞
- [**430**星][11m] [captainarash/the_holy_book_of_x86](https://github.com/captainarash/the_holy_book_of_x86) A simple guide to x86 architecture, assembly, memory management, paging, segmentation, SMM, BIOS....
-- [**430**星][2m] [Py] [admintony/prepare-for-awd](https://github.com/admintony/prepare-for-awd) AWD攻防赛脚本集合
-- [**429**星][2m] [Java] [aosp-mirror/platform_dalvik](https://github.com/aosp-mirror/platform_dalvik)
-- [**429**星][8m] [Py] [aws-samples/aws-waf-sample](https://github.com/aws-samples/aws-waf-sample) This repository contains example scripts and sets of rules for the AWS WAF service. Please be aware that the applicability of these examples to specific workloads may vary.
-- [**429**星][26d] [Py] [stamparm/fetch-some-proxies](https://github.com/stamparm/fetch-some-proxies) Simple Python script for fetching "some" (usable) proxies
-- [**429**星][4m] [ctftraining/ctftraining](https://github.com/ctftraining/ctftraining) CTF Training 经典赛题复现环境
-- [**429**星][4m] [Py] [crocs-muni/roca](https://github.com/crocs-muni/roca) 测试公共 RSA 密钥是否存在某些漏洞
-- [**428**星][3m] [Perl] [wireghoul/dotdotpwn](https://github.com/wireghoul/dotdotpwn) DotDotPwn - The Directory Traversal Fuzzer
+- [**430**星][28d] [C#] [0xd4d/iced](https://github.com/0xd4d/iced) x86/x64 disassembler, instruction decoder & encoder
+- [**429**星][1m] [Java] [aosp-mirror/platform_dalvik](https://github.com/aosp-mirror/platform_dalvik)
+- [**429**星][28d] [Py] [stamparm/fetch-some-proxies](https://github.com/stamparm/fetch-some-proxies) Simple Python script for fetching "some" (usable) proxies
+- [**428**星][1m] [C] [sciresm/hactool](https://github.com/sciresm/hactool) hactool is a tool to view information about, decrypt, and extract common file formats for the Nintendo Switch, especially Nintendo Content Archives.
+- [**428**星][3d] [C++] [ridiculousfish/libdivide](https://github.com/ridiculousfish/libdivide) Official git repository for libdivide: optimized integer division
- [**428**星][3m] [Py] [payatu/tiredful-api](https://github.com/payatu/tiredful-api) An intentionally designed broken web application based on REST API.
-- [**428**星][2y] [Objective-C] [jackrex/fakewechatloc](https://github.com/jackrex/fakewechatloc) 手把手教你制作一款iOS越狱App
-- [**428**星][1m] [Go] [cbeuw/cloak](https://github.com/cbeuw/cloak) A universal pluggable transport utilising TLS domain fronting to evade deep packet inspection and active probing from state-level adversaries
-- [**428**星][1m] [Jupyter Notebook] [borealisai/advertorch](https://github.com/borealisai/advertorch) A Toolbox for Adversarial Robustness Research
-- [**427**星][1m] [C] [sciresm/hactool](https://github.com/sciresm/hactool) hactool is a tool to view information about, decrypt, and extract common file formats for the Nintendo Switch, especially Nintendo Content Archives.
-- [**427**星][2m] [Py] [obsidianforensics/hindsight](https://github.com/obsidianforensics/hindsight) Internet history forensics for Google Chrome/Chromium
-- [**427**星][26d] [C#] [0xd4d/iced](https://github.com/0xd4d/iced) x86/x64 disassembler, instruction decoder & encoder
-- [**426**星][7m] [Ruby] [tidesec/fuzzscanner](https://github.com/tidesec/fuzzscanner) 一个主要用于信息搜集的工具集,主要是用于对网站子域名、开放端口、端口指纹、c段地址、敏感目录等信息进行批量搜集。
-- [**426**星][1y] [C] [novicelive/research-rootkit](https://github.com/novicelive/research-rootkit) LibZeroEvil & the Research Rootkit project.
-- [**426**星][11m] [Shell] [jactor-sue/deepin-apps-installation](https://github.com/jactor-sue/deepin-apps-installation) 本仓库介绍如何在基于Ubuntu的系统上安装Deepin移植的软件
-- [**426**星][1y] [Py] [evilsocket/smali_emulator](https://github.com/evilsocket/smali_emulator) This software will emulate a smali source file generated by apktool.
-- [**426**星][7d] [Shell] [energizedprotection/block](https://github.com/energizedprotection/block) Let's make an annoyance free, better open internet, altogether!
-- [**426**星][10m] [Py] [appsecco/bugcrowd-levelup-subdomain-enumeration](https://github.com/appsecco/bugcrowd-levelup-subdomain-enumeration) This repository contains all the material from the talk "Esoteric sub-domain enumeration techniques" given at Bugcrowd LevelUp 2017 virtual conference
-- [**425**星][2m] [Py] [pan-unit42/public_tools](https://github.com/pan-unit42/public_tools)
-- [**425**星][2m] [Py] [nullhypothesis/exitmap](https://github.com/nullhypothesis/exitmap) A fast and modular scanner for Tor exit relays.
-- [**424**星][4y] [HTML] [praetorian-code/dvrf](https://github.com/praetorian-code/DVRF) The Damn Vulnerable Router Firmware Project
-- [**424**星][2m] [Py] [superhedgy/attacksurfacemapper](https://github.com/superhedgy/attacksurfacemapper) AttackSurfaceMapper is a tool that aims to automate the reconnaissance process.
-- [**424**星][2m] [C++] [ridiculousfish/libdivide](https://github.com/ridiculousfish/libdivide) Official git repository for libdivide: optimized integer division
-- [**424**星][7d] [C] [newaetech/chipwhisperer](https://github.com/newaetech/chipwhisperer) thecomplete open-source toolchain for side-channel power analysis and glitchingattacks
+- [**428**星][2m] [Py] [obsidianforensics/hindsight](https://github.com/obsidianforensics/hindsight) Internet history forensics for Google Chrome/Chromium
+- [**428**星][2y] [ObjC] [jackrex/fakewechatloc](https://github.com/jackrex/fakewechatloc) 手把手教你制作一款iOS越狱App
+- [**428**星][2y] [Py] [evilsocket/smali_emulator](https://github.com/evilsocket/smali_emulator) This software will emulate a smali source file generated by apktool.
+- [**428**星][2y] [JS] [bradoyler/xmr-miner](https://github.com/bradoyler/xmr-miner) Web-based Cryptocurrency miner, built with Vue.js
+- [**428**星][10m] [Py] [appsecco/bugcrowd-levelup-subdomain-enumeration](https://github.com/appsecco/bugcrowd-levelup-subdomain-enumeration) This repository contains all the material from the talk "Esoteric sub-domain enumeration techniques" given at Bugcrowd LevelUp 2017 virtual conference
+- [**427**星][3m] [Perl] [wireghoul/dotdotpwn](https://github.com/wireghoul/dotdotpwn) DotDotPwn - The Directory Traversal Fuzzer
+- [**427**星][1y] [C] [novicelive/research-rootkit](https://github.com/novicelive/research-rootkit) LibZeroEvil & the Research Rootkit project.
+- [**427**星][8d] [TeX] [corkami/docs](https://github.com/corkami/docs) documentations, slides decks...
+- [**426**星][2m] [Py] [nullhypothesis/exitmap](https://github.com/nullhypothesis/exitmap) A fast and modular scanner for Tor exit relays.
+- [**426**星][1y] [Py] [endgameinc/gym-malware](https://github.com/endgameinc/gym-malware) 基于OpenAI Gym 实现的恶意代码操作环境,其目标是实现可以学习如何修改 PE 文件以达到特定目的(例如绕过AV)的 agent。(OpenAIGym:开发和通过比较强化学习算法的工具包)
+- [**425**星][4y] [HTML] [praetorian-code/dvrf](https://github.com/praetorian-code/DVRF) The Damn Vulnerable Router Firmware Project
+- [**425**星][2y] [rsmudge/malleable-c2-profiles](https://github.com/rsmudge/malleable-c2-profiles) Malleable C2 is a domain specific language to redefine indicators in Beacon's communication. This repository is a collection of Malleable C2 profiles that you may use. These profiles work with Cobalt Strike 3.x.
+- [**425**星][11m] [Py] [lordamit/brightness](https://github.com/lordamit/brightness) Brightness Controller
+- [**424**星][7y] [C] [spinkham/skipfish](https://github.com/spinkham/skipfish) Web application security scanner created by lcamtuf for google - Unofficial Mirror
+- [**424**星][3m] [PS] [p3nt4/invoke-socksproxy](https://github.com/p3nt4/invoke-socksproxy) Socks proxy server using powershell. Supports local and reverse connections for pivoting.
+- [**424**星][3d] [Go] [openshift/odo](https://github.com/openshift/odo) OpenShift Do - Fast, iterative OpenShift development
+- [**424**星][9d] [C] [newaetech/chipwhisperer](https://github.com/newaetech/chipwhisperer) thecomplete open-source toolchain for side-channel power analysis and glitchingattacks
+- [**424**星][3m] [JS] [lolimay/shadowsocks-deepin](https://github.com/lolimay/shadowsocks-deepin)
+- [**424**星][3m] [Py] [jotygill/openpyn-nordvpn](https://github.com/jotygill/openpyn-nordvpn) Easily connect to and switch between, OpenVPN servers hosted by NordVPN on Linux (+patch leakes)
- [**424**星][4y] [C++] [jonathansalwan/pintools](https://github.com/jonathansalwan/pintools) Pintool example and PoC for dynamic binary analysis
-- [**423**星][7y] [C] [spinkham/skipfish](https://github.com/spinkham/skipfish) Web application security scanner created by lcamtuf for google - Unofficial Mirror
-- [**423**星][7d] [Go] [openshift/odo](https://github.com/openshift/odo) OpenShift Do - Fast, iterative OpenShift development
+- [**424**星][5m] [iovisor/bpf-docs](https://github.com/iovisor/bpf-docs) Presentations and docs
+- [**424**星][2d] [Shell] [energizedprotection/block](https://github.com/energizedprotection/block) Let's make an annoyance free, better open internet, altogether!
+- [**424**星][7d] [Java] [dependencytrack/dependency-track](https://github.com/dependencytrack/dependency-track) Dependency-Track is an intelligent Supply Chain Component Analysis platform that allows organizations to identify and reduce risk from the use of third-party and open source components.
+- [**423**星][1y] [PHP] [ysrc/webshell-sample](https://github.com/ysrc/webshell-sample) 收集自网络各处的 webshell 样本,用于测试 webshell 扫描器检测率。
+- [**423**星][3d] [xuanhun/hackingresource](https://github.com/xuanhun/hackingresource) “玄魂工作室--安全圈” 知识星球内资源汇总
+- [**423**星][1y] [ring04h/papers](https://github.com/ring04h/papers) my security summit papers
+- [**423**星][4m] [re4lity/hacking-with-golang](https://github.com/re4lity/hacking-with-golang) Golang安全资源合集
- [**423**星][3y] [Makefile] [mindmac/androideagleeye](https://github.com/mindmac/androideagleeye) An Xposed and adbi based module which is capable of hooking both Java and Native methods targeting Android OS.
-- [**423**星][11m] [Py] [lordamit/brightness](https://github.com/lordamit/brightness) Brightness Controller
- [**423**星][10m] [C] [hardenedlinux/linux-exploit-development-tutorial](https://github.com/hardenedlinux/linux-exploit-development-tutorial) a series tutorial for linux exploit development to newbie.
-- [**423**星][1y] [Py] [endgameinc/gym-malware](https://github.com/endgameinc/gym-malware) 基于OpenAI Gym 实现的恶意代码操作环境,其目标是实现可以学习如何修改 PE 文件以达到特定目的(例如绕过AV)的 agent。(OpenAIGym:开发和通过比较强化学习算法的工具包)
-- [**423**星][7d] [TeX] [corkami/docs](https://github.com/corkami/docs) documentations, slides decks...
-- [**422**星][7d] [PowerShell] [mantvydasb/redteam-tactics-and-techniques](https://github.com/mantvydasb/RedTeam-Tactics-and-Techniques) Red Teaming Tactics and Techniques
-- [**422**星][2m] [Py] [w-digital-scanner/w13scan](https://github.com/w-digital-scanner/w13scan) Passive Security Scanner (被动式安全扫描器)
+- [**423**星][4m] [Shell] [ashishb/android-malware](https://github.com/ashishb/android-malware) Collection of android malware samples
+- [**423**星][30d] [Awk] [alecmuffett/eotk](https://github.com/alecmuffett/eotk) Enterprise Onion Toolkit
+- [**422**星][2y] [fwgs/cs16-client](https://github.com/fwgs/cs16-client) Counter-Strike 1.6 rewritten client.dll. Without VGUI, ParticleMan and ecology friendy.
- [**422**星][1y] [Py] [shmilylty/cheetah](https://github.com/shmilylty/cheetah) a very fast brute force webshell password tool
-- [**422**星][2y] [Go] [subgraph/oz](https://github.com/subgraph/oz) a sandboxing system targeting everyday workstation applications
-- [**422**星][1y] [ring04h/papers](https://github.com/ring04h/papers) my security summit papers
-- [**422**星][3m] [PowerShell] [p3nt4/invoke-socksproxy](https://github.com/p3nt4/invoke-socksproxy) Socks proxy server using powershell. Supports local and reverse connections for pivoting.
-- [**422**星][3y] [Py] [mengskysama/shadowsocks-rm](https://github.com/mengskysama/shadowsocks-rm) A fast tunnel proxy that helps you bypass firewalls
+- [**422**星][4m] [Go] [yl2chen/cidranger](https://github.com/yl2chen/cidranger) Fast IP to CIDR lookup in Golang
+- [**422**星][2y] [Lua] [xsec-lab/x-waf](https://github.com/xsec-lab/x-waf) 适用于中小企业的云waf
- [**422**星][10m] [Py] [d4vinci/cuteit](https://github.com/d4vinci/cuteit) IP obfuscator made to make a malicious ip a bit cuter
-- [**422**星][4m] [Shell] [ashishb/android-malware](https://github.com/ashishb/android-malware) Collection of android malware samples
-- [**421**星][2y] [fwgs/cs16-client](https://github.com/fwgs/cs16-client) Counter-Strike 1.6 rewritten client.dll. Without VGUI, ParticleMan and ecology friendy.
-- [**421**星][28d] [Awk] [alecmuffett/eotk](https://github.com/alecmuffett/eotk) Enterprise Onion Toolkit
-- [**420**星][3y] [riusksk/vul_war](https://github.com/riusksk/vul_war) 《漏洞战争:软件漏洞分析精要》配套资料
-- [**420**星][1y] [PHP] [ysrc/webshell-sample](https://github.com/ysrc/webshell-sample) 收集自网络各处的 webshell 样本,用于测试 webshell 扫描器检测率。
-- [**420**星][4m] [Go] [yl2chen/cidranger](https://github.com/yl2chen/cidranger) Fast IP to CIDR lookup in Golang
-- [**420**星][2y] [Lua] [xsec-lab/x-waf](https://github.com/xsec-lab/x-waf) 适用于中小企业的云waf
-- [**420**星][2y] [C++] [unamer/cve-2018-8120](https://github.com/unamer/cve-2018-8120) CVE-2018-8120 Windows LPE exploit
-- [**420**星][13d] [Java] [dependencytrack/dependency-track](https://github.com/dependencytrack/dependency-track) Dependency-Track is an intelligent Supply Chain Component Analysis platform that allows organizations to identify and reduce risk from the use of third-party and open source components.
-- [**419**星][2y] [rsmudge/malleable-c2-profiles](https://github.com/rsmudge/malleable-c2-profiles) Malleable C2 is a domain specific language to redefine indicators in Beacon's communication. This repository is a collection of Malleable C2 profiles that you may use. These profiles work with Cobalt Strike 3.x.
-- [**419**星][3m] [JS] [lolimay/shadowsocks-deepin](https://github.com/lolimay/shadowsocks-deepin)
-- [**419**星][3m] [Shell] [jsamr/bootiso](https://github.com/jsamr/bootiso) A bash script to securely create a bootable USB device from one ISO file. Just curl it, chmod it and go!
-- [**419**星][5m] [iovisor/bpf-docs](https://github.com/iovisor/bpf-docs) Presentations and docs
-- [**419**星][4y] [Shell] [imagetragick/pocs](https://github.com/imagetragick/pocs) Proof of Concepts for CVE-2016–3714
-- [**419**星][1y] [JS] [ciscocsirt/gosint](https://github.com/ciscocsirt/gosint) 收集、处理、索引高质量IOC的框架
-- [**418**星][17d] [C] [mcgill-dmas/kam1n0-community](https://github.com/McGill-DMaS/Kam1n0-Community) 汇编代码管理与分析平台(独立工具+IDA插件)
+- [**421**星][19d] [C] [mcgill-dmas/kam1n0-community](https://github.com/McGill-DMaS/Kam1n0-Community) 汇编代码管理与分析平台(独立工具+IDA插件)
- [IDA插件](https://github.com/McGill-DMaS/Kam1n0-Community/tree/master2.x/kam1n0-clients/ida-plugin)
- [kam1n0](https://github.com/McGill-DMaS/Kam1n0-Community/tree/master2.x/kam1n0)
+- [**421**星][3y] [riusksk/vul_war](https://github.com/riusksk/vul_war) 《漏洞战争:软件漏洞分析精要》配套资料
+- [**421**星][11m] [Lua] [w3h/icsmaster](https://github.com/w3h/icsmaster) 整合工控安全相关资源
+- [**421**星][2y] [C++] [unamer/cve-2018-8120](https://github.com/unamer/cve-2018-8120) CVE-2018-8120 Windows LPE exploit
+- [**421**星][1y] [Py] [thehackingsage/hacktronian](https://github.com/thehackingsage/hacktronian) All in One Hacking Tool for Linux & Android
+- [**421**星][2y] [Go] [subgraph/oz](https://github.com/subgraph/oz) a sandboxing system targeting everyday workstation applications
+- [**421**星][3y] [Py] [mengskysama/shadowsocks-rm](https://github.com/mengskysama/shadowsocks-rm) A fast tunnel proxy that helps you bypass firewalls
+- [**421**星][2m] [Rust] [kpcyrd/sniffglue](https://github.com/kpcyrd/sniffglue) Secure multithreaded packet sniffer
+- [**421**星][1y] [JS] [ciscocsirt/gosint](https://github.com/ciscocsirt/gosint) 收集、处理、索引高质量IOC的框架
+- [**420**星][5m] [Java] [bit4woo/recaptcha](https://github.com/bit4woo/recaptcha) reCAPTCHA = REcognize CAPTCHA: A Burp Suite Extender that recognize CAPTCHA and use for intruder payload 自动识别图形验证码并用于burp intruder爆破模块的插件
+- [**420**星][3m] [Shell] [jsamr/bootiso](https://github.com/jsamr/bootiso) A bash script to securely create a bootable USB device from one ISO file. Just curl it, chmod it and go!
+- [**420**星][3m] [jack-liang/kalitools](https://github.com/jack-liang/kalitools) Kali Linux工具清单
+- [**420**星][2m] [C] [desowin/usbpcap](https://github.com/desowin/usbpcap) USB packet capture for Windows
+- [**419**星][4y] [Shell] [imagetragick/pocs](https://github.com/imagetragick/pocs) Proof of Concepts for CVE-2016–3714
+- [**419**星][1y] [Py] [ekultek/pybelt](https://github.com/ekultek/pybelt) 黑客工具
+- [**419**星][16d] [Perl] [chinarulezzz/pixload](https://github.com/chinarulezzz/pixload) Image Payload Creating/Injecting tools
+- [**419**星][4y] [ObjC] [asido/systemmonitor](https://github.com/asido/systemmonitor) iOS application providing you all information about your device - hardware, operating system, processor, memory, GPU, network interface, storage and battery, including OpenGL powered visual representation in real time.
+- [**419**星][5m] [C] [anssi-fr/ad-control-paths](https://github.com/anssi-fr/ad-control-paths) Active Directory Control Paths auditing and graphing tools
- [**418**星][2y] [opentechfund/secure-email](https://github.com/opentechfund/secure-email) Overview of projects working on next-generation secure email.
+- [**418**星][11m] [Shell] [nilotpalbiswas/auto-root-exploit](https://github.com/nilotpalbiswas/auto-root-exploit) Auto Root Exploit Tool
- [**418**星][3m] [Py] [misterch0c/malsploitbase](https://github.com/misterch0c/malsploitbase) Malware exploits
-- [**418**星][2m] [C] [desowin/usbpcap](https://github.com/desowin/usbpcap) USB packet capture for Windows
-- [**418**星][14d] [Perl] [chinarulezzz/pixload](https://github.com/chinarulezzz/pixload) Image Payload Creating/Injecting tools
-- [**418**星][4y] [Objective-C] [asido/systemmonitor](https://github.com/asido/systemmonitor) iOS application providing you all information about your device - hardware, operating system, processor, memory, GPU, network interface, storage and battery, including OpenGL powered visual representation in real time.
-- [**417**星][5m] [Java] [bit4woo/recaptcha](https://github.com/bit4woo/recaptcha) reCAPTCHA = REcognize CAPTCHA: A Burp Suite Extender that recognize CAPTCHA and use for intruder payload 自动识别图形验证码并用于burp intruder爆破模块的插件
-- [**417**星][11m] [Shell] [nilotpalbiswas/auto-root-exploit](https://github.com/nilotpalbiswas/auto-root-exploit) Auto Root Exploit Tool
-- [**417**星][1y] [Py] [ekultek/pybelt](https://github.com/ekultek/pybelt) The hackers tool belt
-- [**417**星][3m] [C] [deeponion/deeponion-legacy](https://github.com/deeponion/deeponion-legacy) Official Source Repo for DeepOnion - Anonymous Cryptocurrency on TOR Network (legacy)
+- [**418**星][1y] [Go] [kragniz/tor-controller](https://github.com/kragniz/tor-controller) Run Tor onion services on Kubernetes
+- [**418**星][11m] [C] [jpr5/ngrep](https://github.com/jpr5/ngrep) ngrep is like GNU grep applied to the network layer. It's a PCAP-based tool that allows you to specify an extended regular or hexadecimal expression to match against data payloads of packets. It understands many kinds of protocols, including IPv4/6, TCP, UDP, ICMPv4/6, IGMP and Raw, across a wide variety of interface types, and understands BPF f…
+- [**418**星][3m] [Py] [honeynet/droidbot](https://github.com/honeynet/droidbot) A lightweight test input generator for Android. Similar to Monkey, but with more intelligence and cool features!
+- [**418**星][10d] [dropsofzut/awesome-security-weixin-official-accounts](https://github.com/dropsofzut/awesome-security-weixin-official-accounts) 网络安全类公众号推荐,欢迎大家推荐
+- [**418**星][3y] [Py] [chishaxie/blindwatermark](https://github.com/chishaxie/blindwatermark) 盲水印 by python
+- [**418**星][7m] [7kbstorm/7kbscan-webpathbrute](https://github.com/7kbstorm/7kbscan-webpathbrute) 路径暴力探测工具
+- [**417**星][1m] [Kotlin] [hmbsbige/shadowsocksr-android](https://github.com/hmbsbige/shadowsocksr-android) A ShadowsocksR client for Android, written in Kotlin.
+- [**417**星][1y] [Py] [veekxt/v2ray-template](https://github.com/veekxt/v2ray-template) v2ray 模板,v2ray 配置生成工具
+- [**417**星][2m] [C] [openresty/luajit2](https://github.com/openresty/luajit2) OpenResty's Branch of LuaJIT 2
+- [**417**星][5m] [C] [mykter/afl-training](https://github.com/mykter/afl-training) Exercises to learn how to fuzz with American Fuzzy Lop
+- [**417**星][7d] [C++] [simonkagstrom/kcov](https://github.com/simonkagstrom/kcov) Code coverage tool for compiled programs, Python and Bash which uses debugging information to collect and report data without special compilation options
+- [**417**星][11m] [ObjC] [mxabc/devdatatool](https://github.com/mxabc/devdatatool) 编码转换、摘要(hash)、加解密(MD5、SHA、SHA3、SM3、HMAC、DES、3DES、AES、SM4)
+- [**417**星][14d] [PHP] [mm0r1/exploits](https://github.com/mm0r1/exploits) Pwn stuff.
+- [**417**星][3y] [C++] [malwares/botnet](https://github.com/malwares/botnet) Botnet
+- [**417**星][2d] [C] [deeponion/deeponion-legacy](https://github.com/deeponion/deeponion-legacy) Official Source Repo for DeepOnion - Anonymous Cryptocurrency on TOR Network (legacy)
+- [**417**星][1y] [JS] [chokcoco/httphijack](https://github.com/chokcoco/httphijack) 使用Javascript实现前端防御http劫持及防御XSS攻击,并且对可疑攻击进行上报
+- [**417**星][8m] [Py] [awslabs/aws-waf-security-automations](https://github.com/awslabs/aws-waf-security-automations) This solution automatically deploys a single web access control list (web ACL) with a set of AWS WAF rules designed to filter common web-based attacks.
- [**416**星][3m] [Rust] [exodusvpn/exodus](https://github.com/ExodusVPN/exodus) network proxy and tunnel (VPN)
-- [**416**星][20d] [xuanhun/hackingresource](https://github.com/xuanhun/hackingresource) “玄魂工作室--安全圈” 知识星球内资源汇总
-- [**416**星][3y] [C++] [malwares/botnet](https://github.com/malwares/botnet) Botnet
-- [**416**星][3m] [C] [frida/frida-python](https://github.com/frida/frida-python) Frida Python bindings
+- [**416**星][3y] [Py] [x3omdax/penbox](https://github.com/x3omdax/penbox) 渗透测试框架-包含所有工具的工具
+- [**416**星][10m] [Py] [powerscript/katanaframework](https://github.com/powerscript/katanaframework) 用于进行渗透测试的框架,基于一个简单而全面的结构,任何人都可以使用,修改和共享。Python编写
+- [**416**星][6d] [C] [frida/frida-python](https://github.com/frida/frida-python) Frida Python bindings
- [**416**星][2y] [JS] [evilcos/xssor](https://github.com/evilcos/xssor) XSSOR:方便XSS与CSRF的工具,
-- [**416**星][5m] [C] [anssi-fr/ad-control-paths](https://github.com/anssi-fr/ad-control-paths) Active Directory Control Paths auditing and graphing tools
- [**415**星][1y] [zhengmin1989/greatiosjailbreakmaterial](https://github.com/zhengmin1989/greatiosjailbreakmaterial) Great iOS Jailbreak Material! - I read hundreds of papers and PPTs. Only list the most useful materials here!
-- [**415**星][3y] [Py] [x3omdax/penbox](https://github.com/x3omdax/penbox) PenBox - A Penetration Testing Framework - The Tool With All The Tools , The Hacker's Repo
-- [**415**星][2m] [C++] [simonkagstrom/kcov](https://github.com/simonkagstrom/kcov) Code coverage tool for compiled programs, Python and Bash which uses debugging information to collect and report data without special compilation options
+- [**415**星][8m] [Shell] [sroberts/awesome-iocs](https://github.com/sroberts/awesome-iocs) A collection of sources of indicators of compromise.
- [**415**星][5m] [preos-security/awesome-firmware-security](https://github.com/preos-security/awesome-firmware-security) Awesome Firmware Security & Other Helpful Documents
-- [**415**星][10m] [Py] [powerscript/katanaframework](https://github.com/powerscript/katanaframework) The New Hacking Framework
-- [**415**星][12d] [PHP] [mm0r1/exploits](https://github.com/mm0r1/exploits) Pwn stuff.
-- [**415**星][14d] [C] [libvmi/libvmi](https://github.com/libvmi/libvmi) The official home of the LibVMI project is at
-- [**415**星][1y] [Go] [kragniz/tor-controller](https://github.com/kragniz/tor-controller) Run Tor onion services on Kubernetes
-- [**415**星][11m] [C] [jpr5/ngrep](https://github.com/jpr5/ngrep) ngrep is like GNU grep applied to the network layer. It's a PCAP-based tool that allows you to specify an extended regular or hexadecimal expression to match against data payloads of packets. It understands many kinds of protocols, including IPv4/6, TCP, UDP, ICMPv4/6, IGMP and Raw, across a wide variety of interface types, and understands BPF f…
-- [**415**星][3m] [Py] [honeynet/droidbot](https://github.com/honeynet/droidbot) A lightweight test input generator for Android. Similar to Monkey, but with more intelligence and cool features!
-- [**415**星][1y] [JS] [chokcoco/httphijack](https://github.com/chokcoco/httphijack) 使用Javascript实现前端防御http劫持及防御XSS攻击,并且对可疑攻击进行上报
-- [**415**星][7m] [Py] [awslabs/aws-waf-security-automations](https://github.com/awslabs/aws-waf-security-automations) This solution automatically deploys a single web access control list (web ACL) with a set of AWS WAF rules designed to filter common web-based attacks.
-- [**414**星][11m] [Lua] [w3h/icsmaster](https://github.com/w3h/icsmaster) 整合工控安全相关资源
-- [**414**星][2y] [Py] [kvasirsecurity/kvasir](https://github.com/kvasirsecurity/kvasir) Penetration Test Data Management
-- [**414**星][5y] [Java] [jeremyh/jbcrypt](https://github.com/jeremyh/jbcrypt) A Java implementation of OpenBSD's Blowfish password hashing code
-- [**414**星][8d] [dropsofzut/awesome-security-weixin-official-accounts](https://github.com/dropsofzut/awesome-security-weixin-official-accounts) 网络安全类公众号推荐,欢迎大家推荐
-- [**414**星][3y] [Py] [ciscocsirt/malspider](https://github.com/ciscocsirt/malspider) Malspider is a web spidering framework that detects characteristics of web compromises.
-- [**414**星][3y] [Py] [chishaxie/blindwatermark](https://github.com/chishaxie/blindwatermark) 盲水印 by python
-- [**413**星][11m] [TypeScript] [polymer/prpl-server](https://github.com/Polymer/prpl-server) An HTTP server for Node designed to serve PRPL apps in production.
-- [**413**星][5m] [C] [mykter/afl-training](https://github.com/mykter/afl-training) Exercises to learn how to fuzz with American Fuzzy Lop
-- [**413**星][1y] [Py] [thehackingsage/hacktronian](https://github.com/thehackingsage/hacktronian) All in One Hacking Tool for Linux & Android
+- [**415**星][3m] [C] [odzhan/injection](https://github.com/odzhan/injection) Windows process injection methods
+- [**415**星][3d] [C] [libvmi/libvmi](https://github.com/libvmi/libvmi) The official home of the LibVMI project is at
+- [**415**星][2d] [Py] [graalvm/graalpython](https://github.com/graalvm/graalpython) A Python 3 implementation built on GraalVM
+- [**415**星][2d] [Py] [forensicartifacts/artifacts](https://github.com/forensicartifacts/artifacts) Digital Forensics Artifact Repository
+- [**415**星][3y] [Py] [ciscocsirt/malspider](https://github.com/ciscocsirt/malspider) Malspider is a web spidering framework that detects characteristics of web compromises.
+- [**414**星][10m] [Py] [autocracy/python-ipy](https://github.com/autocracy/python-ipy) IPy are a Python class and tools for handling of IPv4 and IPv6 addresses and networks. It is similar to Net::IP Perl module.
+- [**414**星][11d] [hunters-forge/ossem](https://github.com/hunters-forge/OSSEM) Open Source Security Events Metadata (OSSEM)
+- [**414**星][3m] [Scala] [thehive-project/cortex](https://github.com/TheHive-Project/Cortex) a Powerful Observable Analysis and Active Response Engine
+- [**414**星][5d] [Shell] [thesecondsun/bashark](https://github.com/thesecondsun/bashark) Bash post exploitation toolkit
+- [**414**星][23d] [Py] [sibson/redbeat](https://github.com/sibson/redbeat) RedBeat is a Celery Beat Scheduler that stores the scheduled tasks and runtime metadata in Redis.
+- [**414**星][5d] [C] [samba-team/samba](https://github.com/samba-team/samba) 适用于Linux和Unix的标准Windows interoperability程序套件
+- [**414**星][2y] [Py] [ridter/cve-2017-11882](https://github.com/ridter/cve-2017-11882) CVE-2017-11882 from
+- [**414**星][3y] [pgaijin66/xss-payloads](https://github.com/pgaijin66/xss-payloads) List of advanced XSS payloads
+- [**414**星][5m] [Java] [nccgroup/freddy](https://github.com/nccgroup/freddy) 自动识别 Java/.NET 应用程序中的反序列化漏洞
+- [**414**星][2y] [Py] [kvasirsecurity/kvasir](https://github.com/kvasirsecurity/kvasir) 渗透测试数据管理
+- [**414**星][23d] [C#] [jbe2277/waf](https://github.com/jbe2277/waf) Win Application Framework (WAF) is a lightweight Framework that helps you to create well structured XAML Applications.
+- [**414**星][5d] [Py] [dashingsoft/pyarmor](https://github.com/dashingsoft/pyarmor) A tool used to obfuscate python scripts, bind obfuscated scripts to fixed machine or expire obfuscated scripts.
+- [**414**星][4d] [Py] [chef-koch/nsablocklist](https://github.com/chef-koch/nsablocklist) HOSTS file and research project to block all known NSA / GCHQ / C.I.A. / F.B.I. spying server
+- [**414**星][10m] [Py] [autocracy/python-ipy](https://github.com/autocracy/python-ipy) IPy are a Python class and tools for handling of IPv4 and IPv6 addresses and networks. It is similar to Net::IP Perl module.
+- [**413**星][25d] [Py] [epsylon/xsser](https://github.com/epsylon/xsser) Cross Site "Scripter" (aka XSSer) is an automatic -framework- to detect, exploit and report XSS vulnerabilities in web-based applications.
+- [**413**星][3m] [C++] [avast/retdec-idaplugin](https://github.com/avast/retdec-idaplugin) retdec 的 IDA 插件
+- [**413**星][1y] [PHP] [wupco/weblogger](https://github.com/wupco/weblogger) 针对ctf线下赛流量抓取(php)、真实环境流量抓取分析的工具
+- [**413**星][29d] [C++] [tenable/routeros](https://github.com/tenable/routeros) 对 MikroTik的RouterOS进行安全性研究时使用的各种工具和漏洞
+- [**413**星][5m] [Py] [stanislav-web/opendoor](https://github.com/stanislav-web/opendoor) OWASP WEB Directory Scanner
+- [**413**星][3y] [prife/virtualappdoc](https://github.com/prife/virtualappdoc)
- [**413**星][4y] [Py] [ngalongc/autolocalprivilegeescalation](https://github.com/ngalongc/autolocalprivilegeescalation) An automated script that download potential exploit for linux kernel from exploitdb, and compile them automatically
-- [**413**星][5m] [Java] [nccgroup/freddy](https://github.com/nccgroup/freddy) 自动识别 Java/.NET 应用程序中的反序列化漏洞
- [**413**星][4y] [Java] [lukefalsina/grab-n-run](https://github.com/lukefalsina/grab-n-run) Grab’n Run, a simple and effective Java Library for Android projects to secure dynamic code loading.
- [**413**星][2y] [Py] [kromtech/s3-inspector](https://github.com/kromtech/s3-inspector) 检查AWS S3 bucket权限
-- [**413**星][21d] [C#] [jbe2277/waf](https://github.com/jbe2277/waf) Win Application Framework (WAF) is a lightweight Framework that helps you to create well structured XAML Applications.
+- [**413**星][5y] [Java] [jeremyh/jbcrypt](https://github.com/jeremyh/jbcrypt) A Java implementation of OpenBSD's Blowfish password hashing code
- [**413**星][2y] [C] [henkaku/henkaku](https://github.com/henkaku/henkaku) Homebrew enabler for PS Vita
-- [**413**星][29d] [Py] [forensicartifacts/artifacts](https://github.com/forensicartifacts/artifacts) Digital Forensics Artifact Repository
- [**413**星][4y] [C++] [demi6od/smashing_the_browser](https://github.com/demi6od/smashing_the_browser) Smashing The Browser: From Vulnerability Discovery To Exploit
-- [**413**星][10m] [Py] [autocracy/python-ipy](https://github.com/autocracy/python-ipy) IPy are a Python class and tools for handling of IPv4 and IPv6 addresses and networks. It is similar to Net::IP Perl module.
-- [**412**星][3m] [Scala] [thehive-project/cortex](https://github.com/TheHive-Project/Cortex) a Powerful Observable Analysis and Active Response Engine
-- [**412**星][8m] [Shell] [sroberts/awesome-iocs](https://github.com/sroberts/awesome-iocs) A collection of sources of indicators of compromise.
-- [**412**星][20d] [Py] [sibson/redbeat](https://github.com/sibson/redbeat) RedBeat is a Celery Beat Scheduler that stores the scheduled tasks and runtime metadata in Redis.
-- [**412**星][2y] [Py] [ridter/cve-2017-11882](https://github.com/ridter/cve-2017-11882) CVE-2017-11882 from
-- [**411**星][23d] [Py] [epsylon/xsser](https://github.com/epsylon/xsser) Cross Site "Scripter" (aka XSSer) is an automatic -framework- to detect, exploit and report XSS vulnerabilities in web-based applications.
+- [**413**星][9d] [C] [aarond10/https_dns_proxy](https://github.com/aarond10/https_dns_proxy) A lightweight DNS-over-HTTPS proxy.
+- [**412**星][11m] [TS] [polymer/prpl-server](https://github.com/Polymer/prpl-server) An HTTP server for Node designed to serve PRPL apps in production.
+- [**412**星][2y] [vasanthk/web-security-basics](https://github.com/vasanthk/web-security-basics) web 安全基础
+- [**412**星][4m] [C] [hfiref0x/vboxhardenedloader](https://github.com/hfiref0x/vboxhardenedloader) VirtualBox VM detection mitigation loader
+- [**412**星][2d] [Java] [batfish/batfish](https://github.com/batfish/batfish) Batfish is a network configuration analysis tool that can find bugs and guarantee the correctness of (planned or current) network configurations. It enables network engineers to rapidly and safely evolve their network, without fear of outages or security breaches.
+- [**412**星][2y] [Py] [51x/whp](https://github.com/51x/whp) Micro$oft Windows Hacking Pack
+- [**411**星][5m] [Ruby] [praetorian-code/purple-team-attack-automation](https://github.com/praetorian-code/purple-team-attack-automation) Praetorian's public release of our Metasploit automation of MITRE ATT&CK™ TTPs
- [**411**星][7y] [Java] [wg/scrypt](https://github.com/wg/scrypt) Java implementation of scrypt
-- [**411**星][2y] [vasanthk/web-security-basics](https://github.com/vasanthk/web-security-basics) web 安全基础
-- [**411**星][5m] [Py] [stanislav-web/opendoor](https://github.com/stanislav-web/opendoor) OWASP WEB Directory Scanner
-- [**411**星][9d] [C] [samba-team/samba](https://github.com/samba-team/samba) 适用于Linux和Unix的标准Windows interoperability程序套件
-- [**411**星][3y] [prife/virtualappdoc](https://github.com/prife/virtualappdoc)
-- [**411**星][3m] [C] [odzhan/injection](https://github.com/odzhan/injection) Windows process injection methods
-- [**411**星][4m] [C] [hfiref0x/vboxhardenedloader](https://github.com/hfiref0x/vboxhardenedloader) VirtualBox VM detection mitigation loader
-- [**410**星][2m] [C] [openresty/luajit2](https://github.com/openresty/luajit2) OpenResty's Branch of LuaJIT 2
+- [**411**星][25d] [Py] [osnr/horrifying-pdf-experiments](https://github.com/osnr/horrifying-pdf-experiments)
+- [**411**星][2y] [Py] [operatorequals/covertutils](https://github.com/operatorequals/covertutils) Python2包,包含 N 多用于实现自定义后门的模块,从文件传输到自定义Shell,应有尽有
+- [**411**星][4m] [ObjC] [lavabit/libdime](https://github.com/lavabit/libdime) The DIME resolver library and command line utilities.
+- [**411**星][23d] [C++] [hoshimin/kernel-bridge](https://github.com/hoshimin/kernel-bridge) Windows kernel hacking framework, driver template, hypervisor and API written on C++
+- [**411**星][3m] [Pascal] [felipedaragon/sandcat](https://github.com/felipedaragon/sandcat) 为渗透测试和开发者准备的轻量级浏览器, 基于Chromium和Lua
+- [**411**星][9d] [Py] [corkami/collisions](https://github.com/corkami/collisions) Hash collisions and their exploitations
+- [**411**星][3y] [C] [0x27/linux.mirai](https://github.com/0x27/linux.mirai) Leaked Linux.Mirai Source Code for Research/IoC Development Purposes
- [**410**星][9m] [Assembly] [mewmew/dissection](https://github.com/mewmew/dissection) The dissection of a simple "hello world" ELF binary.
-- [**410**星][3m] [Objective-C] [lavabit/libdime](https://github.com/lavabit/libdime) The DIME resolver library and command line utilities.
-- [**410**星][21d] [C++] [hoshimin/kernel-bridge](https://github.com/hoshimin/kernel-bridge) Windows kernel hacking framework, driver template, hypervisor and API written on C++
-- [**410**星][2y] [Py] [cloudburst/libheap](https://github.com/cloudburst/libheap) python library to examine ptmalloc (the glibc userland heap implementation)
-- [**410**星][2y] [Py] [51x/whp](https://github.com/51x/whp) Micro$oft Windows Hacking Pack
-- [**410**星][3y] [C] [0x27/linux.mirai](https://github.com/0x27/linux.mirai) Leaked Linux.Mirai Source Code for Research/IoC Development Purposes
-- [**409**星][3y] [C] [robertyim/shadowsocksx](https://github.com/RobertYim/ShadowsocksX) Fork of shadowsocks-iOS
-- [**409**星][9d] [hunters-forge/ossem](https://github.com/hunters-forge/OSSEM) Open Source Security Events Metadata (OSSEM)
-- [**409**星][9m] [Py] [linklayer/pyvit](https://github.com/linklayer/pyvit) Python Vehicle Interface Toolkit
-- [**409**星][27d] [C++] [tenable/routeros](https://github.com/tenable/routeros) RouterOS Security Research Tooling and Proof of Concepts
-- [**409**星][23d] [Py] [osnr/horrifying-pdf-experiments](https://github.com/osnr/horrifying-pdf-experiments)
-- [**409**星][2y] [Py] [operatorequals/covertutils](https://github.com/operatorequals/covertutils) Python2包,包含 N 多用于实现自定义后门的模块,从文件传输到自定义Shell,应有尽有
+- [**410**星][11m] [C] [titansec/openwaf](https://github.com/titansec/openwaf) Web security protection system based on openresty
+- [**410**星][25d] [Go] [gcla/gowid](https://github.com/gcla/gowid) Compositional widgets for terminal user interfaces, written in Go, inspired by urwid.
+- [**410**星][6m] [Py] [dnsviz/dnsviz](https://github.com/dnsviz/dnsviz) s a tool suite for analysis and visualization of Domain Name System (DNS) behavior, including its security extensions (DNSSEC)
+- [**410**星][4m] [Shell] [d4rk007/redghost](https://github.com/d4rk007/redghost) Linux post exploitation framework written in bash designed to assist red teams in persistence, reconnaissance, privilege escalation and leaving no trace.
+- [**410**星][3m] [C++] [cobaltfusion/debugviewpp](https://github.com/cobaltfusion/debugviewpp) DebugView++, collects, views, filters your application logs, and highlights information that is important to you!
+- [**410**星][2y] [Py] [cloudburst/libheap](https://github.com/cloudburst/libheap) 用于检查ptmalloc的python库(glibc用户空间堆实现)
+- [**409**星][28d] [husnainfareed/awesome-ethical-hacking-resources](https://github.com/husnainfareed/Awesome-Ethical-Hacking-Resources)
+- [**409**星][9m] [Py] [linklayer/pyvit](https://github.com/linklayer/pyvit) 与汽车接口的工具包。它旨在实现汽车系统中使用的通用硬件接口和协议。
+- [**409**星][3m] [Py] [windsooon/cherry](https://github.com/Windsooon/cherry) text classification - no machine learning knowledge needed
+- [**409**星][2y] [zyfworks/ssr-backup](https://github.com/zyfworks/ssr-backup) ShadowsocksR backups
+- [**409**星][4d] [Py] [ytisf/pyexfil](https://github.com/ytisf/pyexfil) 用于数据渗透的Python包
- [**409**星][2y] [Py] [ojasookert/cve-2017-0785](https://github.com/ojasookert/cve-2017-0785) Blueborne CVE-2017-0785 Android information leak vulnerability
-- [**409**星][3m] [jack-liang/kalitools](https://github.com/jack-liang/kalitools) Kali Linux工具清单
-- [**409**星][23d] [Go] [gcla/gowid](https://github.com/gcla/gowid) Compositional widgets for terminal user interfaces, written in Go, inspired by urwid.
-- [**409**星][6m] [Py] [dnsviz/dnsviz](https://github.com/dnsviz/dnsviz) s a tool suite for analysis and visualization of Domain Name System (DNS) behavior, including its security extensions (DNSSEC)
-- [**409**星][9d] [Py] [chef-koch/nsablocklist](https://github.com/chef-koch/nsablocklist) HOSTS file and research project to block all known NSA / GCHQ / C.I.A. / F.B.I. spying server
-- [**408**星][26d] [husnainfareed/awesome-ethical-hacking-resources](https://github.com/husnainfareed/Awesome-Ethical-Hacking-Resources)
-- [**408**星][5m] [Ruby] [praetorian-code/purple-team-attack-automation](https://github.com/praetorian-code/purple-team-attack-automation) Praetorian's public release of our Metasploit automation of MITRE ATT&CK™ TTPs
-- [**408**星][3y] [pgaijin66/xss-payloads](https://github.com/pgaijin66/xss-payloads) List of advanced XSS payloads
+- [**409**星][2y] [Py] [nahamsec/jsparser](https://github.com/nahamsec/jsparser) using Tornado and JSBeautifier to parse relative URLs from JavaScript files
+- [**409**星][5m] [Py] [itayc0hen/a-journey-into-radare2](https://github.com/itayc0hen/a-journey-into-radare2) A series of tutorials about radare2 framework from
+- [**409**星][2m] [CSS] [angea/pocorgtfo](https://github.com/angea/pocorgtfo) a "PoC or GTFO" mirror with extra article index, direct links and clean PDFs.
+- [**408**星][5d] [JS] [0vercl0k/cve-2019-11708](https://github.com/0vercl0k/cve-2019-11708) Full exploit chain (CVE-2019-11708 & CVE-2019-9810) against Firefox on Windows 64-bit.
+- [**408**星][2y] [Py] [xapax/oscp](https://github.com/xapax/oscp)
+- [**408**星][3y] [C] [robertyim/shadowsocksx](https://github.com/RobertYim/ShadowsocksX) Fork of shadowsocks-iOS
+- [**408**星][7d] [C] [ufrisk/memprocfs](https://github.com/ufrisk/memprocfs) The Memory Process File System
+- [**408**星][29d] [C++] [souhardya/uboat](https://github.com/souhardya/uboat) HTTP Botnet Project
+- [**408**星][2y] [Py] [rub-syssec/kafl](https://github.com/rub-syssec/kafl) Code for the USENIX 2017 paper: kAFL: Hardware-Assisted Feedback Fuzzing for OS Kernels
- [**408**星][2y] [C++] [lyle-nel/siga](https://github.com/lyle-nel/siga) Population based metaheuristic for password cracking. Siga(Simple genetic algorithm)
-- [**408**星][8d] [Py] [graalvm/graalpython](https://github.com/graalvm/graalpython) A Python 3 implementation built on GraalVM
-- [**408**星][4m] [Shell] [d4rk007/redghost](https://github.com/d4rk007/redghost) Linux post exploitation framework written in bash designed to assist red teams in persistence, reconnaissance, privilege escalation and leaving no trace.
-- [**408**星][7d] [Go] [cloudfoundry/gorouter](https://github.com/cloudfoundry/gorouter) CF Router
-- [**408**星][2m] [CSS] [angea/pocorgtfo](https://github.com/angea/pocorgtfo) a "PoC or GTFO" mirror with extra article index, direct links and clean PDFs.
-- [**407**星][2y] [Py] [xapax/oscp](https://github.com/xapax/oscp)
-- [**407**星][2y] [zyfworks/ssr-backup](https://github.com/zyfworks/ssr-backup) ShadowsocksR backups
-- [**407**星][8d] [Py] [ytisf/pyexfil](https://github.com/ytisf/pyexfil) A Python Package for Data Exfiltration
-- [**407**星][5m] [Shell] [thesecondsun/bashark](https://github.com/thesecondsun/bashark) Bash post exploitation toolkit
-- [**407**星][2y] [Py] [nahamsec/jsparser](https://github.com/nahamsec/jsparser) using Tornado and JSBeautifier to parse relative URLs from JavaScript files
+- [**408**星][2y] [Java] [fourbrother/kstools](https://github.com/fourbrother/kstools) Android中自动爆破签名工具
+- [**408**星][2y] [C] [devshane/zork](https://github.com/devshane/zork) The DUNGEON (Zork I) source
+- [**408**星][8d] [Go] [cloudfoundry/gorouter](https://github.com/cloudfoundry/gorouter) CF Router
+- [**407**星][1y] [C] [ww9210/linux_kernel_exploits](https://github.com/ww9210/linux_kernel_exploits) Repo for FUZE project. I will also publish some Linux kernel LPE exploits for various real world kernel vulnerabilities here. the samples are uploaded for education purposes for red and blue teams.
+- [**407**星][15d] [Java] [spring-cloud/spring-cloud-security](https://github.com/spring-cloud/spring-cloud-security) Security concerns for distributed applications implemented in Spring
+- [**407**星][3m] [PS] [officedev/o365-investigationtooling](https://github.com/officedev/o365-investigationtooling)
+- [**407**星][7m] [Java] [nccgroup/burpsuitehttpsmuggler](https://github.com/nccgroup/burpsuitehttpsmuggler) A Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniques
+- [**407**星][3y] [PHP] [naneau/php-obfuscator](https://github.com/naneau/php-obfuscator) A parsing PHP obfuscator
- [**407**星][8m] [Py] [mitrecnd/chopshop](https://github.com/mitrecnd/chopshop) Protocol Analysis/Decoder Framework
-- [**407**星][5m] [Py] [itayc0hen/a-journey-into-radare2](https://github.com/itayc0hen/a-journey-into-radare2) A series of tutorials about radare2 framework from
-- [**407**星][2y] [Java] [fourbrother/kstools](https://github.com/fourbrother/kstools) Android中自动爆破签名工具
-- [**407**星][3m] [Pascal] [felipedaragon/sandcat](https://github.com/felipedaragon/sandcat) 为渗透测试和开发者准备的轻量级浏览器, 基于Chromium和Lua
-- [**407**星][7d] [Py] [dashingsoft/pyarmor](https://github.com/dashingsoft/pyarmor) A tool used to obfuscate python scripts, bind obfuscated scripts to fixed machine or expire obfuscated scripts.
-- [**406**星][1y] [Py] [veekxt/v2ray-template](https://github.com/veekxt/v2ray-template) v2ray 模板,v2ray 配置生成工具
-- [**406**星][3m] [C++] [avast/retdec-idaplugin](https://github.com/avast/retdec-idaplugin) retdec 的 IDA 插件
-- [**406**星][1y] [C] [ww9210/linux_kernel_exploits](https://github.com/ww9210/linux_kernel_exploits) Repo for FUZE project. I will also publish some Linux kernel LPE exploits for various real world kernel vulnerabilities here. the samples are uploaded for education purposes for red and blue teams.
-- [**406**星][1y] [PHP] [wupco/weblogger](https://github.com/wupco/weblogger) 针对ctf线下赛流量抓取(php)、真实环境流量抓取分析的工具
-- [**406**星][11m] [C] [titansec/openwaf](https://github.com/titansec/openwaf) Web security protection system based on openresty
-- [**406**星][8m] [kai5263499/osx-security-awesome](https://github.com/kai5263499/osx-security-awesome) A collection of OSX and iOS security resources
+- [**407**星][8m] [kai5263499/osx-security-awesome](https://github.com/kai5263499/osx-security-awesome) A collection of OSX and iOS security resources
+- [**407**星][18d] [Py] [bl4de/security-tools](https://github.com/bl4de/security-tools) Collection of small security tools created mostly in Python. CTFs, pentests and so on
+- [**407**星][1m] [Ruby] [arkadiyt/aws_public_ips](https://github.com/arkadiyt/aws_public_ips) Fetch all public IP addresses tied to your AWS account. Works with IPv4/IPv6, Classic/VPC networking, and across all AWS services
+- [**406**星][24d] [PHP] [spatie/ssl-certificate](https://github.com/spatie/ssl-certificate) A class to validate SSL certificates
+- [**406**星][17d] [Py] [jiangxufeng/v2rayl](https://github.com/jiangxufeng/v2rayl) v2ray linux GUI客户端,支持订阅、vemss、ss等协议,自动更新订阅、检查版本更新
+- [**406**星][1m] [C++] [wbenny/hvpp](https://github.com/wbenny/hvpp) hvpp is a lightweight Intel x64/VT-x hypervisor written in C++ focused primarily on virtualization of already running operating system
+- [**406**星][1y] [Java] [testwhat/smaliex](https://github.com/testwhat/smaliex) A wrapper to get de-optimized dex from odex/oat/vdex.
+- [**406**星][9d] [Rust] [m4b/goblin](https://github.com/m4b/goblin) An impish, cross-platform binary parsing crate, written in Rust
- [**406**星][1y] [Py] [fossfreedom/indicator-sysmonitor](https://github.com/fossfreedom/indicator-sysmonitor) Ubuntu application indicator to show various system parameters
-- [**406**星][2y] [C] [devshane/zork](https://github.com/devshane/zork) The DUNGEON (Zork I) source
-- [**405**星][1m] [C++] [wbenny/hvpp](https://github.com/wbenny/hvpp) hvpp is a lightweight Intel x64/VT-x hypervisor written in C++ focused primarily on virtualization of already running operating system
+- [**406**星][3y] [Py] [breenmachine/httpscreenshot](https://github.com/breenmachine/httpscreenshot)
+- [**405**星][1m] [Py] [lanmaster53/recon-ng](https://github.com/lanmaster53/recon-ng) Open Source Intelligence gathering tool aimed at reducing the time spent harvesting information from open sources.
+- [**405**星][29d] [Shell] [s0md3v/diggy](https://github.com/s0md3v/Diggy) Extract endpoints from apk files.
+- [**405**星][3d] [Py] [crytic/slither](https://github.com/crytic/slither) Static Analyzer for Solidity
+- [**405**星][3y] [Py] [xitu/macos-security-and-privacy-guide](https://github.com/xitu/macos-security-and-privacy-guide) A practical guide to securing macOS.
- [**405**星][1y] [C++] [vah13/extracttvpasswords](https://github.com/vah13/extracttvpasswords) tool to extract passwords from TeamViewer memory using Frida
-- [**405**星][2y] [Py] [rub-syssec/kafl](https://github.com/rub-syssec/kafl) Code for the USENIX 2017 paper: kAFL: Hardware-Assisted Feedback Fuzzing for OS Kernels
-- [**405**星][2m] [Go] [retroplasma/flyover-reverse-engineering](https://github.com/retroplasma/flyover-reverse-engineering) Reversing Apple's 3D satellite mode
-- [**405**星][4m] [re4lity/hacking-with-golang](https://github.com/re4lity/hacking-with-golang) Golang安全资源合集
+- [**405**星][3m] [C#] [shack2/supersqlinjectionv1](https://github.com/shack2/supersqlinjectionv1) 超级SQL注入工具(SSQLInjection)是一款基于HTTP协议自组包的SQL注入工具,采用C#开发,直接操作TCP会话来进行HTTP交互,支持出现在HTTP协议任意位置的SQL注入,支持各种类型的SQL注入,支持HTTPS模式注入;支持以盲注、错误显示、Union注入等方式来获取数据;支持Access/MySQL/SQLServer/Oracle/PostgreSQL/DB2/SQLite/Informix等数据库;支持手动灵活的进行SQL注入绕过,可自定义进行字符替换等绕过注入防护。本工具为渗透测试人员、信息安全工程师等掌握SQL注入技能的人员设计,需要使用人员对SQL注入有一定了解。
- [**405**星][5y] [Py] [paloaltonetworks/wirelurkerdetector](https://github.com/paloaltonetworks/wirelurkerdetector) Script for detecting the WireLurker malware family
-- [**405**星][3m] [PowerShell] [officedev/o365-investigationtooling](https://github.com/officedev/o365-investigationtooling)
-- [**405**星][3y] [PHP] [naneau/php-obfuscator](https://github.com/naneau/php-obfuscator) A parsing PHP obfuscator
-- [**405**星][5y] [Objective-C] [mp0w/ios-headers](https://github.com/mp0w/ios-headers) iOS 5.0/5.1/6.0/6.1/7.0/7.1/8.0/8.1 Headers of All Frameworks (private and not) + SpringBoard
-- [**405**星][7d] [Py] [corkami/collisions](https://github.com/corkami/collisions) Hash collisions and their exploitations
+- [**405**星][5y] [ObjC] [mp0w/ios-headers](https://github.com/mp0w/ios-headers) iOS 5.0/5.1/6.0/6.1/7.0/7.1/8.0/8.1 Headers of All Frameworks (private and not) + SpringBoard
- [**405**星][1y] [C] [coalfire-research/ios-11.1.2-15b202-jailbreak](https://github.com/coalfire-research/ios-11.1.2-15b202-jailbreak) iOS 11.1.2 (15B202) Jailbreak
-- [**405**星][3y] [Py] [breenmachine/httpscreenshot](https://github.com/breenmachine/httpscreenshot)
-- [**405**星][16d] [Py] [bl4de/security-tools](https://github.com/bl4de/security-tools) Collection of small security tools created mostly in Python. CTFs, pentests and so on
-- [**405**星][1m] [Ruby] [arkadiyt/aws_public_ips](https://github.com/arkadiyt/aws_public_ips) Fetch all public IP addresses tied to your AWS account. Works with IPv4/IPv6, Classic/VPC networking, and across all AWS services
-- [**404**星][3m] [Py] [windsooon/cherry](https://github.com/Windsooon/cherry) text classification - no machine learning knowledge needed
-- [**404**星][3y] [Py] [xitu/macos-security-and-privacy-guide](https://github.com/xitu/macos-security-and-privacy-guide) A practical guide to securing macOS.
- [**404**星][3m] [C] [thundercls/xanalyzer](https://github.com/thundercls/xanalyzer) xAnalyzer plugin for x64dbg
-- [**404**星][1y] [Java] [testwhat/smaliex](https://github.com/testwhat/smaliex) A wrapper to get de-optimized dex from odex/oat/vdex.
- [**404**星][5y] [Ruby] [svent/jsdetox](https://github.com/svent/jsdetox) A Javascript malware analysis tool
-- [**404**星][13d] [Java] [spring-cloud/spring-cloud-security](https://github.com/spring-cloud/spring-cloud-security) Security concerns for distributed applications implemented in Spring
+- [**404**星][3y] [C++] [iaik/rowhammerjs](https://github.com/iaik/rowhammerjs) JavaScript中的远程软件引发的故障攻击
+- [**404**星][17d] [Java] [google/closure-templates](https://github.com/google/closure-templates) A client- and server-side templating system that helps you dynamically build reusable HTML and UI elements
+- [**404**星][1y] [Go] [chaitin/cloudwalker](https://github.com/chaitin/cloudwalker) CloudWalker Platform
- [**404**星][2y] [JS] [cagataycali/xss-listener](https://github.com/cagataycali/xss-listener)
-- [**404**星][3y] [CSS] [710leo/zvuldrill](https://github.com/710leo/zvuldrill) Web漏洞演练平台
-- [**403**星][26d] [Shell] [s0md3v/diggy](https://github.com/s0md3v/Diggy) Extract endpoints from apk files.
-- [**403**星][17d] [Py] [crytic/slither](https://github.com/crytic/slither) Static Analyzer for Solidity
+- [**404**星][2y] [Makefile] [bettermanbao/openwrt-shadowsocksr-libev-full](https://github.com/bettermanbao/openwrt-shadowsocksr-libev-full) ShadowsocksR-libev-full for OpenWrt
+- [**403**星][2y] [Ruby] [fuzzapi/fuzzapi](https://github.com/Fuzzapi/fuzzapi) Fuzzapi is a tool used for REST API pentesting and uses API_Fuzzer gem
+- [**403**星][5y] [vk496/linset](https://github.com/vk496/linset) 双面恶魔攻击(EvilTwin Attack)bash 脚本
- [**403**星][2y] [C++] [rootm0s/injectors](https://github.com/rootm0s/injectors)
-- [**403**星][7m] [Java] [nccgroup/burpsuitehttpsmuggler](https://github.com/nccgroup/burpsuitehttpsmuggler) A Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniques
-- [**403**星][3y] [C++] [iaik/rowhammerjs](https://github.com/iaik/rowhammerjs) A Remote Software-Induced Fault Attack in JavaScript
-- [**403**星][10m] [Py] [christruncer/pentestscripts](https://github.com/christruncer/pentestscripts) Scripts that are useful for me on pen tests
-- [**403**星][2y] [Makefile] [bettermanbao/openwrt-shadowsocksr-libev-full](https://github.com/bettermanbao/openwrt-shadowsocksr-libev-full) ShadowsocksR-libev-full for OpenWrt
-- [**402**星][2y] [Ruby] [fuzzapi/fuzzapi](https://github.com/Fuzzapi/fuzzapi) Fuzzapi is a tool used for REST API pentesting and uses API_Fuzzer gem
-- [**402**星][5y] [vk496/linset](https://github.com/vk496/linset) 双面恶魔攻击(EvilTwin Attack)bash 脚本
+- [**403**星][23d] [Py] [nsmfoo/antivmdetection](https://github.com/nsmfoo/antivmdetection) Script to create templates to use with VirtualBox to make vm detection harder
+- [**403**星][9d] [JS] [handshake-org/hsd](https://github.com/handshake-org/hsd) Handshake Daemon & Full Node
+- [**403**星][9m] [C] [darthton/hyperbone](https://github.com/darthton/hyperbone) Minimalistic VT-x hypervisor with hooks
+- [**403**星][2y] [PS] [danielbohannon/invoke-dosfuscation](https://github.com/danielbohannon/invoke-dosfuscation) Cmd.exe Command Obfuscation Generator & Detection Test Harness
+- [**403**星][10m] [Py] [christruncer/pentestscripts](https://github.com/christruncer/pentestscripts) 渗透脚本
+- [**403**星][3y] [CSS] [710leo/zvuldrill](https://github.com/710leo/zvuldrill) Web漏洞演练平台
+- [**402**星][2m] [C] [liudf0716/xkcptun](https://github.com/liudf0716/xkcptun) xkcptun is kcp tunnel for OpenWRT&LEDE, implemented in c language
+- [**402**星][3y] [C#] [zenlulz/memorysharp](https://github.com/zenlulz/memorysharp) Windows程序内存编辑库,C#编写,可向远程进程注入输入和代码,或读取远程进程内存
- [**402**星][5y] [Py] [syworks/waidps](https://github.com/syworks/waidps) Wireless Auditing, Intrusion Detection & Prevention System
-- [**402**星][21d] [Py] [nsmfoo/antivmdetection](https://github.com/nsmfoo/antivmdetection) Script to create templates to use with VirtualBox to make vm detection harder
-- [**402**星][7d] [JS] [handshake-org/hsd](https://github.com/handshake-org/hsd) Handshake Daemon & Full Node
-- [**402**星][15d] [Java] [google/closure-templates](https://github.com/google/closure-templates) A client- and server-side templating system that helps you dynamically build reusable HTML and UI elements
-- [**402**星][2y] [PowerShell] [danielbohannon/invoke-dosfuscation](https://github.com/danielbohannon/invoke-dosfuscation) Cmd.exe Command Obfuscation Generator & Detection Test Harness
-- [**402**星][1y] [Go] [chaitin/cloudwalker](https://github.com/chaitin/cloudwalker) CloudWalker Platform
+- [**402**星][3y] [C++] [rwfpl/rewolf-wow64ext](https://github.com/rwfpl/rewolf-wow64ext) 在64位Windows系统上的WOW64 layer下运行x86程序
+- [**402**星][4m] [Java] [megatronking/netbare](https://github.com/megatronking/netbare) Net packets capture & injection library designed for Android
+- [**402**星][2y] [C] [fuzion24/androidkernelexploitationplayground](https://github.com/fuzion24/androidkernelexploitationplayground)
+- [**402**星][10m] [Go] [evilsocket/shellz](https://github.com/evilsocket/shellz) shellz is a small utility to track and control your ssh, telnet, web and custom shells and tunnels.
- [**402**星][4y] [Py] [1an0rmus/tekdefense-automater](https://github.com/1an0rmus/tekdefense-automater) Automater - IP URL and MD5 OSINT Analysis
-- [**401**星][3y] [C#] [zenlulz/memorysharp](https://github.com/zenlulz/memorysharp) Windows程序内存编辑库,C#编写,可向远程进程注入输入和代码,或读取远程进程内存
-- [**401**星][20d] [HTML] [w3c/webappsec](https://github.com/w3c/webappsec) Web Application Security Working Group repo
-- [**401**星][27d] [C++] [souhardya/uboat](https://github.com/souhardya/uboat) HTTP Botnet Project
-- [**401**星][3m] [C#] [shack2/supersqlinjectionv1](https://github.com/shack2/supersqlinjectionv1) 超级SQL注入工具(SSQLInjection)是一款基于HTTP协议自组包的SQL注入工具,采用C#开发,直接操作TCP会话来进行HTTP交互,支持出现在HTTP协议任意位置的SQL注入,支持各种类型的SQL注入,支持HTTPS模式注入;支持以盲注、错误显示、Union注入等方式来获取数据;支持Access/MySQL/SQLServer/Oracle/PostgreSQL/DB2/SQLite/Informix等数据库;支持手动灵活的进行SQL注入绕过,可自定义进行字符替换等绕过注入防护。本工具为渗透测试人员、信息安全工程师等掌握SQL注入技能的人员设计,需要使用人员对SQL注入有一定了解。
-- [**401**星][10m] [Go] [evilsocket/shellz](https://github.com/evilsocket/shellz) shellz is a small utility to track and control your ssh, telnet, web and custom shells and tunnels.
-- [**401**星][8m] [C] [darthton/hyperbone](https://github.com/darthton/hyperbone) Minimalistic VT-x hypervisor with hooks
-- [**401**星][9m] [Go] [amyangxyz/assassingo](https://github.com/amyangxyz/assassingo) An extensible and concurrency pentest framework in Go, also with WebGUI. Feel free to CONTRIBUTE!
-- [**400**星][1m] [Py] [fbngrm/matroschka](https://github.com/fbngrm/Matroschka) Python steganography tool to hide images or text in images
-- [**400**星][3y] [C++] [rwfpl/rewolf-wow64ext](https://github.com/rwfpl/rewolf-wow64ext) 在64位Windows系统上的WOW64 layer下运行x86程序
-- [**400**星][6y] [Java] [isecpartners/introspy-android](https://github.com/isecpartners/introspy-android) Security profiling for blackbox Android
-- [**400**星][2y] [C] [fuzion24/androidkernelexploitationplayground](https://github.com/fuzion24/androidkernelexploitationplayground)
-- [**399**星][19d] [Objective-C] [sap/macos-enterprise-privileges](https://github.com/sap/macos-enterprise-privileges) For Mac users in an Enterprise environment this app ensures secure environment and yet gives the User control over administration of their machine by elevating their level of access to Administrator privilege on macOS X. Users can set the time frame using Preferences to perform specific tasks such as install or remove an application.
+- [**401**星][22d] [HTML] [w3c/webappsec](https://github.com/w3c/webappsec) Web App安全工作组
+- [**401**星][4y] [Py] [sleventyeleven/linuxprivchecker](https://github.com/sleventyeleven/linuxprivchecker) Linux提权检查脚本
+- [**401**星][21d] [ObjC] [sap/macos-enterprise-privileges](https://github.com/sap/macos-enterprise-privileges) For Mac users in an Enterprise environment this app ensures secure environment and yet gives the User control over administration of their machine by elevating their level of access to Administrator privilege on macOS X. Users can set the time frame using Preferences to perform specific tasks such as install or remove an application.
+- [**401**星][6y] [Java] [isecpartners/introspy-android](https://github.com/isecpartners/introspy-android) Security profiling for blackbox Android
+- [**401**星][3d] [JS] [aztecprotocol/aztec](https://github.com/aztecprotocol/aztec) Public repository for the AZTEC protocol
+- [**400**星][1m] [Py] [fbngrm/matroschka](https://github.com/fbngrm/Matroschka) Python隐写术工具,可在图像中红隐藏文本或图像
+- [**400**星][5d] [Java] [spring-cloud/spring-cloud-gcp](https://github.com/spring-cloud/spring-cloud-gcp) Integration for Google Cloud Platform APIs with Spring
+- [**400**星][11m] [skyblueeternal/thinkphp-rce-poc-collection](https://github.com/skyblueeternal/thinkphp-rce-poc-collection) thinkphp v5.x 远程代码执行漏洞-POC集合
+- [**400**星][1y] [Py] [jpaulmora/pyrit](https://github.com/jpaulmora/pyrit) The famous WPA precomputed cracker, Migrated from Google.
+- [**400**星][12m] [Py] [dstmath/frida-unpack](https://github.com/dstmath/frida-unpack) 基于Frida的脱壳工具
+- [**399**星][6d] [C++] [lifting-bits/remill](https://github.com/lifting-bits/remill) Library for lifting of x86, amd64, and aarch64 machine code to LLVM bitcode
- [**399**星][2y] [Java] [pqpo/inputmethodholder](https://github.com/pqpo/inputmethodholder) A keyboard listener for Android which by hooking the InputMethodManager. 通过hook监听系统键盘显示
-- [**399**星][2m] [Rust] [kpcyrd/sniffglue](https://github.com/kpcyrd/sniffglue) Secure multithreaded packet sniffer
+- [**399**星][2y] [Py] [ezelf/cve-2018-9995_dvr_credentials](https://github.com/ezelf/cve-2018-9995_dvr_credentials) (CVE-2018-9995) Get DVR Credentials
- [**399**星][11m] [JS] [eviltik/evilscan](https://github.com/eviltik/evilscan) 大规模 IP/端口扫描器,Node.js 编写
-- [**399**星][3m] [C++] [cobaltfusion/debugviewpp](https://github.com/cobaltfusion/debugviewpp) DebugView++, collects, views, filters your application logs, and highlights information that is important to you!
+- [**399**星][4d] [Go] [dan-v/rattlesnakeos-stack](https://github.com/dan-v/rattlesnakeos-stack) Build your own privacy and security focused Android OS in the cloud on a continuous basis with OTA updates.
- [**399**星][5m] [Py] [cea-sec/sibyl](https://github.com/cea-sec/sibyl) A Miasm2 based function divination.
-- [**398**星][1m] [Py] [lanmaster53/recon-ng](https://github.com/lanmaster53/recon-ng) Open Source Intelligence gathering tool aimed at reducing the time spent harvesting information from open sources.
-- [**398**星][7d] [Java] [spring-cloud/spring-cloud-gcp](https://github.com/spring-cloud/spring-cloud-gcp) Integration for Google Cloud Platform APIs with Spring
-- [**398**星][11m] [skyblueeternal/thinkphp-rce-poc-collection](https://github.com/skyblueeternal/thinkphp-rce-poc-collection) thinkphp v5.x 远程代码执行漏洞-POC集合
-- [**398**星][8d] [C] [freifunk-gluon/gluon](https://github.com/freifunk-gluon/gluon) a modular framework for creating OpenWrt-based firmwares for wireless mesh nodes
-- [**398**星][2y] [Py] [ezelf/cve-2018-9995_dvr_credentials](https://github.com/ezelf/cve-2018-9995_dvr_credentials) (CVE-2018-9995) Get DVR Credentials
-- [**398**星][12m] [Py] [dstmath/frida-unpack](https://github.com/dstmath/frida-unpack) 基于Frida的脱壳工具
-- [**398**星][7d] [JS] [aztecprotocol/aztec](https://github.com/aztecprotocol/aztec) Public repository for the AZTEC protocol
+- [**399**星][3y] [Java] [ac-pm/sslunpinning_xposed](https://github.com/ac-pm/sslunpinning_xposed) Android Xposed Module to bypass SSL certificate validation (Certificate Pinning).
+- [**399**星][2y] [JS] [0xdea/frida-scripts](https://github.com/0xdea/frida-scripts) A collection of my Frida.re instrumentation scripts to facilitate reverse engineering of mobile apps.
+- [**398**星][3y] [Py] [sekoialab/fastir_collector](https://github.com/sekoialab/fastir_collector) 实时在Windows上收集不同的artefacts,并将结果记录在csv或json文件中。通过对这些artefacts的分析,可以发现较早的compromission
+- [**398**星][3y] [C] [kablaa/ctf-workshop](https://github.com/kablaa/ctf-workshop) Challenges for Binary Exploitation Workshop
+- [**398**星][1y] [Py] [grayddq/publicmonitors](https://github.com/grayddq/publicmonitors) 对公网IP列表进行端口服务扫描,发现周期内的端口服务变化情况和弱口令安全风险
+- [**398**星][4d] [C] [freifunk-gluon/gluon](https://github.com/freifunk-gluon/gluon) a modular framework for creating OpenWrt-based firmwares for wireless mesh nodes
+- [**398**星][4m] [PHP] [floedesigntechnologies/phpcs-security-audit](https://github.com/floedesigntechnologies/phpcs-security-audit) phpcs-security-audit is a set of PHP_CodeSniffer rules that finds vulnerabilities and weaknesses related to security in PHP code
+- [**398**星][3m] [Go] [cloudflare/mitmengine](https://github.com/cloudflare/mitmengine) A MITM (monster-in-the-middle) detection tool. Used to build MALCOLM:
- [**397**星][2m] [Py] [x899/chrome_password_grabber](https://github.com/x899/chrome_password_grabber) Get unencrypted 'Saved Password' from Google Chrome
-- [**397**星][7d] [C++] [lifting-bits/remill](https://github.com/lifting-bits/remill) Library for lifting of x86, amd64, and aarch64 machine code to LLVM bitcode
-- [**397**星][3y] [Py] [sekoialab/fastir_collector](https://github.com/sekoialab/fastir_collector)
+- [**397**星][2m] [HTML] [thinkst/canarytokens](https://github.com/thinkst/canarytokens) Canarytokens helps track activity and actions on your network.
- [**397**星][3y] [Scala] [philwantsfish/shard](https://github.com/philwantsfish/shard) A command line tool to detect shared passwords
-- [**397**星][3m] [Go] [cloudflare/mitmengine](https://github.com/cloudflare/mitmengine) A MITM (monster-in-the-middle) detection tool. Used to build MALCOLM:
-- [**397**星][7m] [7kbstorm/7kbscan-webpathbrute](https://github.com/7kbstorm/7kbscan-webpathbrute) 7kbscan-WebPathBrute Web路径暴力探测工具
-- [**397**星][2y] [JS] [0xdea/frida-scripts](https://github.com/0xdea/frida-scripts) A collection of my Frida.re instrumentation scripts to facilitate reverse engineering of mobile apps.
-- [**396**星][2m] [HTML] [thinkst/canarytokens](https://github.com/thinkst/canarytokens) Canarytokens helps track activity and actions on your network.
-- [**396**星][3m] [Py] [mushorg/glastopf](https://github.com/mushorg/glastopf) Web Application Honeypot
+- [**397**星][3m] [ph055a/osint-collection](https://github.com/ph055a/osint-collection) Maintained collection of OSINT related resources. (All Free & Actionable)
+- [**397**星][3m] [Py] [mushorg/glastopf](https://github.com/mushorg/glastopf) Web Application Honeypot
+- [**397**星][3m] [Py] [duo-labs/cloudtracker](https://github.com/duo-labs/cloudtracker) CloudTracker helps you find over-privileged IAM users and roles by comparing CloudTrail logs with current IAM policies.
+- [**396**星][14d] [Java] [spring-cloud/spring-cloud-aws](https://github.com/spring-cloud/spring-cloud-aws) Integration for Amazon Web Services APIs with Spring
+- [**396**星][2y] [Py] [se55i0n/dbscanner](https://github.com/se55i0n/dbscanner) 自动扫描内网常见sql、no-sql数据库脚本(mysql、mssql、oracle、postgresql、redis、mongodb、memcached、elasticsearch),包含未授权访问及常规弱口令检测
+- [**396**星][2y] [Java] [routerkeygen/routerkeygenandroid](https://github.com/routerkeygen/routerkeygenandroid) Router Keygen generate default WPA/WEP keys for several routers.
+- [**396**星][1y] [Go] [riobard/go-shadowsocks2](https://github.com/riobard/go-shadowsocks2) Experimental Shadowsocks in Go. Stable fork at
+- [**396**星][3d] [Py] [moloch--/rootthebox](https://github.com/moloch--/rootthebox) A Game of Hackers (CTF Scoreboard & Game Manager)
- [**396**星][6y] [Py] [milo2012/osintstalker](https://github.com/milo2012/osintstalker) osintstalker
-- [**396**星][3y] [C] [kablaa/ctf-workshop](https://github.com/kablaa/ctf-workshop) Challenges for Binary Exploitation Workshop
-- [**396**星][1y] [Py] [grayddq/publicmonitors](https://github.com/grayddq/publicmonitors) 对公网IP列表进行端口服务扫描,发现周期内的端口服务变化情况和弱口令安全风险
+- [**396**星][1m] [Logos] [limneos/classdump-dyld](https://github.com/limneos/classdump-dyld) Class-dump any Mach-o file without extracting it from dyld_shared_cache
+- [**396**星][3y] [Py] [ioactive/jdwp-shellifier](https://github.com/ioactive/jdwp-shellifier) 由测试人员针对活跃的JDWP服务使用,以获取远程执行代码。
- [**396**星][7m] [HTML] [gexos/hacking-tools-repository](https://github.com/gexos/hacking-tools-repository) A list of security/hacking tools that have been collected from the internet. Suggestions are welcomed.
-- [**396**星][19d] [Go] [dan-v/rattlesnakeos-stack](https://github.com/dan-v/rattlesnakeos-stack) Build your own privacy and security focused Android OS in the cloud on a continuous basis with OTA updates.
-- [**396**星][2y] [PowerShell] [cryps1s/darksurgeon](https://github.com/cryps1s/darksurgeon) DARKSURGEON is a Windows packer project to empower incident response, digital forensics, malware analysis, and network defense.
-- [**396**星][3y] [Java] [ac-pm/sslunpinning_xposed](https://github.com/ac-pm/sslunpinning_xposed) Android Xposed Module to bypass SSL certificate validation (Certificate Pinning).
-- [**395**星][1m] [Kotlin] [hmbsbige/shadowsocksr-android](https://github.com/hmbsbige/shadowsocksr-android) A ShadowsocksR client for Android, written in Kotlin.
-- [**395**星][12d] [Java] [spring-cloud/spring-cloud-aws](https://github.com/spring-cloud/spring-cloud-aws) Integration for Amazon Web Services APIs with Spring
-- [**395**星][3m] [ph055a/osint-collection](https://github.com/ph055a/osint-collection) Maintained collection of OSINT related resources. (All Free & Actionable)
-- [**395**星][9d] [Py] [moloch--/rootthebox](https://github.com/moloch--/rootthebox) A Game of Hackers (CTF Scoreboard & Game Manager)
-- [**395**星][2y] [C] [fireyfly/pixd](https://github.com/fireyfly/pixd) visualizing binary data using a colour palette
-- [**395**星][3m] [Py] [duo-labs/cloudtracker](https://github.com/duo-labs/cloudtracker) CloudTracker helps you find over-privileged IAM users and roles by comparing CloudTrail logs with current IAM policies.
-- [**395**星][10m] [Ruby] [dreadlocked/drupalgeddon2](https://github.com/dreadlocked/drupalgeddon2) Exploit for Drupal v7.x + v8.x (Drupalgeddon 2 / CVE-2018-7600 / SA-CORE-2018-002)
-- [**394**星][12d] [Py] [s0md3v/corsy](https://github.com/s0md3v/corsy) CORS Misconfiguration Scanner
+- [**396**星][2y] [C] [fireyfly/pixd](https://github.com/fireyfly/pixd) visualizing binary data using a colour palette
+- [**396**星][10m] [Ruby] [dreadlocked/drupalgeddon2](https://github.com/dreadlocked/drupalgeddon2) Exploit for Drupal v7.x + v8.x (Drupalgeddon 2 / CVE-2018-7600 / SA-CORE-2018-002)
+- [**396**星][2y] [PS] [cryps1s/darksurgeon](https://github.com/cryps1s/darksurgeon) DARKSURGEON is a Windows packer project to empower incident response, digital forensics, malware analysis, and network defense.
+- [**396**星][4m] [ansjdnakjdnajkd/ios](https://github.com/ansjdnakjdnajkd/ios) iOS渗透测试最有用的工具
+- [**395**星][2y] [C++] [hatriot/token-priv](https://github.com/hatriot/token-priv) Token Privilege Research
+- [**395**星][2d] [Go] [graniet/operative-framework](https://github.com/graniet/operative-framework) operative framework is a OSINT investigation framework, you can interact with multiple targets, execute multiple modules, create links with target, export rapport to PDF file, add note to target or results, interact with RESTFul API, write your own modules.
+- [**395**星][2y] [JS] [derjanb/hamiyoca](https://github.com/derjanb/hamiyoca) Hash me if you can - A Bitcoin miner that supports pure Javscript, WebWorker and WebGL mining.
+- [**395**星][4y] [PHP] [breakthenet/hackme-sql-injection-challenges](https://github.com/breakthenet/hackme-sql-injection-challenges) Pen test your "friend's" online MMORPG game - specific focus, sql injection opportunities
+- [**394**星][11d] [Makefile] [kuoruan/openwrt-v2ray](https://github.com/kuoruan/openwrt-v2ray) V2Ray for OpenWrt
+- [**394**星][6d] [Py] [eerkunt/terraform-compliance](https://github.com/eerkunt/terraform-compliance) a lightweight, security focused, BDD test framework against terraform.
- [**394**星][1y] [sweis/crypto-might-not-suck](https://github.com/sweis/crypto-might-not-suck) List of crypto projects that might not suck
-- [**394**星][4y] [Py] [sleventyeleven/linuxprivchecker](https://github.com/sleventyeleven/linuxprivchecker) Linux提权检查脚本
- [**394**星][4y] [C++] [sektioneins/suidguard](https://github.com/sektioneins/suidguard) SUIDGuard - a TrustedBSD Kernel Extension that adds mitigations to protect SUID/SGID processes a bit more
-- [**394**星][29d] [Logos] [limneos/classdump-dyld](https://github.com/limneos/classdump-dyld) Class-dump any Mach-o file without extracting it from dyld_shared_cache
-- [**394**星][1y] [Py] [jpaulmora/pyrit](https://github.com/jpaulmora/pyrit) The famous WPA precomputed cracker, Migrated from Google.
-- [**394**星][3y] [Py] [ioactive/jdwp-shellifier](https://github.com/ioactive/jdwp-shellifier)
-- [**394**星][4m] [PHP] [floedesigntechnologies/phpcs-security-audit](https://github.com/floedesigntechnologies/phpcs-security-audit) phpcs-security-audit is a set of PHP_CodeSniffer rules that finds vulnerabilities and weaknesses related to security in PHP code
-- [**394**星][4y] [PHP] [breakthenet/hackme-sql-injection-challenges](https://github.com/breakthenet/hackme-sql-injection-challenges) Pen test your "friend's" online MMORPG game - specific focus, sql injection opportunities
-- [**393**星][11m] [Swift] [ibm/mac-ibm-enrollment-app](https://github.com/ibm/mac-ibm-enrollment-app) The Mac@IBM enrollment app makes setting up macOS with Jamf Pro more intuitive for users and easier for IT. The application offers IT admins the ability to gather additional information about their users during setup, allows users to customize their enrollment by selecting apps or bundles of apps to install during setup, and provides users with …
-- [**393**星][1y] [hillbrad/u2freviews](https://github.com/hillbrad/u2freviews) Reviews of U2F devices
-- [**393**星][2y] [C++] [hatriot/token-priv](https://github.com/hatriot/token-priv) Token Privilege Research
-- [**393**星][3m] [Go] [graniet/operative-framework](https://github.com/graniet/operative-framework) operative framework is a OSINT investigation framework, you can interact with multiple targets, execute multiple modules, create links with target, export rapport to PDF file, add note to target or results, interact with RESTFul API, write your own modules.
-- [**393**星][1y] [Py] [cr4shcod3/pureblood](https://github.com/cr4shcod3/pureblood) A Penetration Testing Framework created for Hackers / Pentester / Bug Hunter
+- [**394**星][11m] [Swift] [ibm/mac-ibm-enrollment-app](https://github.com/ibm/mac-ibm-enrollment-app) The Mac@IBM enrollment app makes setting up macOS with Jamf Pro more intuitive for users and easier for IT. The application offers IT admins the ability to gather additional information about their users during setup, allows users to customize their enrollment by selecting apps or bundles of apps to install during setup, and provides users with …
+- [**394**星][1y] [hillbrad/u2freviews](https://github.com/hillbrad/u2freviews) Reviews of U2F devices
+- [**394**星][1y] [Py] [cr4shcod3/pureblood](https://github.com/cr4shcod3/pureblood) 为黑客/渗透测试/漏洞赏金创建的渗透测试框架
+- [**393**星][11m] [Py] [mitre/multiscanner](https://github.com/mitre/multiscanner) Modular file scanning/analysis framework
+- [**393**星][1y] [Go] [tomnomnom/waybackurls](https://github.com/tomnomnom/waybackurls) Fetch all the URLs that the Wayback Machine knows about for a domain
+- [**393**星][1y] [Shell] [killswitch-gui/cobaltstrike-toolkit](https://github.com/killswitch-gui/cobaltstrike-toolkit) Some useful scripts for CobaltStrike
+- [**393**星][1m] [YARA] [guelfoweb/peframe](https://github.com/guelfoweb/peframe) PEframe is a open source tool to perform static analysis on Portable Executable malware and malicious MS Office documents.
+- [**393**星][2y] [Java] [federicodotta/java-deserialization-scanner](https://github.com/federicodotta/java-deserialization-scanner) All-in-one plugin for Burp Suite for the detection and the exploitation of Java deserialization vulnerabilities
+- [**393**星][2y] [Py] [fate0/pychrome](https://github.com/fate0/pychrome) A Python Package for the Google Chrome Dev Protocol [threading base]
+- [**393**星][12m] [Py] [essandess/isp-data-pollution](https://github.com/essandess/isp-data-pollution) ISP Data Pollution to Protect Private Browsing History with Obfuscation
+- [**393**星][1m] [Py] [clr2of8/dpat](https://github.com/clr2of8/dpat) 域密码审核工具
- [**393**星][2y] [JS] [chpmrc/zero-width-chrome-extension](https://github.com/chpmrc/zero-width-chrome-extension) Chrome扩展, 将网页中可用于Fingerprinting的"零长度"字符替换为搞笑的表情
-- [**393**星][4m] [ansjdnakjdnajkd/ios](https://github.com/ansjdnakjdnajkd/ios) Most usable tools for iOS penetration testing
- [**392**星][4y] [Py] [zhengmin1989/rop_step_by_step](https://github.com/zhengmin1989/rop_step_by_step) 一步一步学ROP
-- [**392**星][11m] [Py] [mitre/multiscanner](https://github.com/mitre/multiscanner) Modular file scanning/analysis framework
- [**392**星][7m] [Py] [jm33-m0/mec](https://github.com/jm33-m0/mec) for concurrent exploiting
+- [**392**星][12m] [C++] [googleprojectzero/functionsimsearch](https://github.com/googleprojectzero/functionsimsearch) 基于 MinHash 的代码相似性搜索验证代码
+- [**392**星][1y] [C#] [squalr/squalr](https://github.com/squalr/squalr) 高性能的内存编辑软件,允许用户在Windows桌面游戏中创建和共享作弊文件
- [**392**星][7m] [Py] [savon-noir/python-libnmap](https://github.com/savon-noir/python-libnmap) libnmap is a python library to run nmap scans, parse and diff scan results. It supports python 2.6 up to 3.4. It's wonderful.
-- [**392**星][1y] [Go] [riobard/go-shadowsocks2](https://github.com/riobard/go-shadowsocks2) Experimental Shadowsocks in Go. Stable fork at
- [**392**星][7m] [Py] [repoog/gitprey](https://github.com/repoog/gitprey) Searching sensitive files and contents in GitHub associated to company name or other key words
-- [**392**星][10d] [Rust] [m4b/goblin](https://github.com/m4b/goblin) An impish, cross-platform binary parsing crate, written in Rust
-- [**392**星][1y] [Shell] [killswitch-gui/cobaltstrike-toolkit](https://github.com/killswitch-gui/cobaltstrike-toolkit) Some useful scripts for CobaltStrike
-- [**392**星][1m] [YARA] [guelfoweb/peframe](https://github.com/guelfoweb/peframe) PEframe is a open source tool to perform static analysis on Portable Executable malware and malicious MS Office documents.
-- [**392**星][2y] [Py] [fate0/pychrome](https://github.com/fate0/pychrome) A Python Package for the Google Chrome Dev Protocol [threading base]
-- [**392**星][12m] [Py] [essandess/isp-data-pollution](https://github.com/essandess/isp-data-pollution) ISP Data Pollution to Protect Private Browsing History with Obfuscation
-- [**392**星][1m] [Py] [clr2of8/dpat](https://github.com/clr2of8/dpat) Domain Password Audit Tool for Pentesters
-- [**391**星][12m] [C++] [googleprojectzero/functionsimsearch](https://github.com/googleprojectzero/functionsimsearch) 基于 MinHash 的代码相似性搜索验证代码
-- [**391**星][2y] [Py] [se55i0n/dbscanner](https://github.com/se55i0n/dbscanner) 自动扫描内网常见sql、no-sql数据库脚本(mysql、mssql、oracle、postgresql、redis、mongodb、memcached、elasticsearch),包含未授权访问及常规弱口令检测
+- [**392**星][1m] [Py] [nginxinc/nginx-ldap-auth](https://github.com/nginxinc/nginx-ldap-auth) Example of LDAP authentication using ngx_http_auth_request_module
+- [**392**星][3d] [Scala] [lihaoyi/utest](https://github.com/lihaoyi/utest) A simple testing framework for Scala
+- [**392**星][3y] [C#] [harmj0y/keethief](https://github.com/harmj0y/keethief) 从内存中提取KeePass 2.X密钥材料,以及KeePass触发系统的植入后门和枚举。
+- [**392**星][12d] [PS] [d0nkeys/redteam](https://github.com/d0nkeys/redteam) Red Team 脚本
+- [**392**星][12m] [C++] [cseagle/sk3wldbg](https://github.com/cseagle/sk3wldbg) 用Unicorn引擎做后端的调试插件
+- [**392**星][1y] [Py] [chrismaddalena/odin](https://github.com/chrismaddalena/odin) Automated network asset, email, and social media profile discovery and cataloguing.
+- [**391**星][9m] [Py] [williballenthin/python-evtx](https://github.com/williballenthin/python-evtx) 纯Python编写的Windows事件日志解析器
+- [**391**星][2y] [r0ysue/osg-translationteam](https://github.com/r0ysue/osg-translationteam) 看雪iOS安全小组的翻译团队作品集合,如有勘误,欢迎斧正!
- [**391**星][10m] [Go] [mozilla/masche](https://github.com/mozilla/masche) MIG Memory Forensic library
- [**391**星][1y] [Go] [mauri870/ransomware](https://github.com/mauri870/ransomware) A POC Windows crypto-ransomware (Academic)
-- [**391**星][12m] [C++] [cseagle/sk3wldbg](https://github.com/cseagle/sk3wldbg) 用Unicorn引擎做后端的调试插件
+- [**391**星][3y] [JS] [mandatoryprogrammer/judasdns](https://github.com/mandatoryprogrammer/judasdns) Nameserver DNS poisoning attacks made easy
+- [**391**星][7d] [C] [hasherezade/hollows_hunter](https://github.com/hasherezade/hollows_hunter) Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
- [**391**星][2y] [Py] [conorpp/btproxy](https://github.com/conorpp/btproxy) Man in the Middle analysis tool for Bluetooth.
-- [**390**星][1y] [Go] [tomnomnom/waybackurls](https://github.com/tomnomnom/waybackurls) Fetch all the URLs that the Wayback Machine knows about for a domain
+- [**391**星][6m] [JS] [capacitorset/box-js](https://github.com/capacitorset/box-js) A tool for studying JavaScript malware.
+- [**391**星][2m] [Py] [bitbrute/evillimiter](https://github.com/bitbrute/evillimiter) Tool that limits bandwidth of devices on the same network without access.
+- [**390**星][28d] [ym2011/securitymanagement](https://github.com/ym2011/securitymanagement) share with you some knowledge for Information Security Management,ISO27001,Information Security Class Protect ,SDLC,etc.
+- [**390**星][29d] [Shell] [yadominjinta/atilo](https://github.com/yadominjinta/atilo) Linux installer for termux
+- [**390**星][2y] [Shell] [und3rf10w/kali-anonsurf](https://github.com/und3rf10w/kali-anonsurf) A port of ParrotSec's stealth and anonsurf modules to Kali Linux
+- [**390**星][14d] [Shell] [th3xace/sudo_killer](https://github.com/th3xace/sudo_killer) A tool to identify and exploit sudo rules' misconfigurations and vulnerabilities within sudo
- [**390**星][2y] [C++] [swwwolf/wdbgark](https://github.com/swwwolf/wdbgark) WinDBG Anti-RootKit Extension
-- [**390**星][3y] [stamparm/eternalrocks](https://github.com/stamparm/eternalrocks) EternalRocks worm
-- [**390**星][1y] [C#] [squalr/squalr](https://github.com/squalr/squalr) Squalr Memory Editor - Game Hacking Tool Written in C#
+- [**390**星][3y] [stamparm/eternalrocks](https://github.com/stamparm/eternalrocks) EternalRocks蠕虫
- [**390**星][6y] [C++] [p0sixspwn/p0sixspwn](https://github.com/p0sixspwn/p0sixspwn) Released in accordance with GPL licensing.
-- [**390**星][1m] [Py] [nginxinc/nginx-ldap-auth](https://github.com/nginxinc/nginx-ldap-auth) Example of LDAP authentication using ngx_http_auth_request_module
-- [**390**星][4m] [Java] [megatronking/netbare](https://github.com/megatronking/netbare) Net packets capture & injection library designed for Android
-- [**390**星][3y] [JS] [mandatoryprogrammer/judasdns](https://github.com/mandatoryprogrammer/judasdns) Nameserver DNS poisoning attacks made easy
-- [**390**星][23d] [Scala] [lihaoyi/utest](https://github.com/lihaoyi/utest) A simple testing framework for Scala
- [**390**星][1y] [C] [laurelai/decompile-dump](https://github.com/laurelai/decompile-dump) stuxnet反编译的部分代码
-- [**390**星][3y] [C#] [harmj0y/keethief](https://github.com/harmj0y/keethief) Methods for attacking KeePass 2.X databases, including extracting of encryption key material from memory.
-- [**390**星][10d] [PowerShell] [d0nkeys/redteam](https://github.com/d0nkeys/redteam) Red Team Scripts by d0nkeys (ex SnadoTeam)
-- [**390**星][1y] [Py] [chrismaddalena/odin](https://github.com/chrismaddalena/odin) Automated network asset, email, and social media profile discovery and cataloguing.
-- [**390**星][6m] [JS] [capacitorset/box-js](https://github.com/capacitorset/box-js) A tool for studying JavaScript malware.
-- [**389**星][9m] [Py] [williballenthin/python-evtx](https://github.com/williballenthin/python-evtx) 纯Python编写的Windows事件日志解析器
-- [**389**星][2y] [r0ysue/osg-translationteam](https://github.com/r0ysue/osg-translationteam) 看雪iOS安全小组的翻译团队作品集合,如有勘误,欢迎斧正!
+- [**389**星][9m] [Shell] [microsoft/linux-vm-tools](https://github.com/microsoft/linux-vm-tools) Hyper-V Linux Guest VM Enhancements
+- [**389**星][10m] [Py] [rustyshackleford221/oscp-prep](https://github.com/rustyshackleford221/oscp-prep) A comprehensive guide/material for anyone looking to get into infosec or take the OSCP exam
+- [**389**星][26d] [Py] [paulgclark/waveconverter](https://github.com/paulgclark/waveconverter) An Open Source tool for RF reverse engineering.
- [**389**星][12m] [Shell] [mthbernardes/sshlooter](https://github.com/mthbernardes/sshlooter) Script to steal passwords from ssh.
-- [**389**星][4y] [Objective-C] [kpwn/tpwn](https://github.com/kpwn/tpwn) xnu local privilege escalation via cve-2015-???? & cve-2015-???? for 10.10.5, 0day at the time | poc or gtfo
-- [**389**星][21d] [JS] [joeferner/node-http-mitm-proxy](https://github.com/joeferner/node-http-mitm-proxy) HTTP Man In The Middle (MITM) Proxy
-- [**389**星][14d] [C] [hasherezade/hollows_hunter](https://github.com/hasherezade/hollows_hunter) Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
+- [**389**星][2m] [milabs/awesome-linux-rootkits](https://github.com/milabs/awesome-linux-rootkits) awesome-linux-rootkits
+- [**389**星][1y] [JS] [linushenze/webkit-regex-exploit](https://github.com/linushenze/webkit-regex-exploit)
+- [**389**星][4y] [ObjC] [kpwn/tpwn](https://github.com/kpwn/tpwn) xnu local privilege escalation via cve-2015-???? & cve-2015-???? for 10.10.5, 0day at the time | poc or gtfo
+- [**389**星][23d] [JS] [joeferner/node-http-mitm-proxy](https://github.com/joeferner/node-http-mitm-proxy) HTTP Man In The Middle (MITM) Proxy
+- [**389**星][16d] [Py] [idaholab/malcolm](https://github.com/idaholab/malcolm) Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files) and Zeek logs.
+- [**389**星][6m] [C++] [hasherezade/dll_to_exe](https://github.com/hasherezade/dll_to_exe) Converts a DLL into EXE
- [**389**星][3y] [Py] [gstarnberger/uncompyle](https://github.com/gstarnberger/uncompyle) Python decompiler
-- [**389**星][2y] [Java] [federicodotta/java-deserialization-scanner](https://github.com/federicodotta/java-deserialization-scanner) All-in-one plugin for Burp Suite for the detection and the exploitation of Java deserialization vulnerabilities
-- [**389**星][14d] [Py] [bdcht/amoco](https://github.com/bdcht/amoco) yet another tool for analysing binaries
+- [**389**星][25d] [C] [coolervoid/0d1n](https://github.com/coolervoid/0d1n) Web security tool to make fuzzing at HTTP/S, Beta
+- [**389**星][2d] [C#] [collinbarrett/filterlists](https://github.com/collinbarrett/filterlists) independent, comprehensive directory of filter and host lists for advertisements, trackers, malware, and annoyances.
+- [**389**星][16d] [Py] [bdcht/amoco](https://github.com/bdcht/amoco) yet another tool for analysing binaries
- [**389**星][3m] [Go] [alphasoc/flightsim](https://github.com/alphasoc/flightsim) A utility to generate malicious network traffic and evaluate controls
-- [**388**星][12d] [Shell] [th3xace/sudo_killer](https://github.com/th3xace/sudo_killer) A tool to identify and exploit sudo rules' misconfigurations and vulnerabilities within sudo
-- [**388**星][2y] [PowerShell] [shellntel/scripts](https://github.com/shellntel/scripts) A collection of scripts from the security professionals at www.shellntel.com.
+- [**388**星][2y] [PS] [shellntel/scripts](https://github.com/shellntel/scripts) A collection of scripts from the security professionals at www.shellntel.com.
- [**388**星][2y] [Perl] [rapid7/metasploit-vulnerability-emulator](https://github.com/rapid7/metasploit-vulnerability-emulator) Created by Jin Qian via the GitHub Connector
-- [**388**星][24d] [Py] [paulgclark/waveconverter](https://github.com/paulgclark/waveconverter) An Open Source tool for RF reverse engineering.
- [**388**星][2y] [Py] [mricon/rev-proxy-grapher](https://github.com/mricon/rev-proxy-grapher) Reverse proxy grapher
-- [**388**星][1y] [JS] [linushenze/webkit-regex-exploit](https://github.com/linushenze/webkit-regex-exploit)
-- [**388**星][6m] [C++] [hasherezade/dll_to_exe](https://github.com/hasherezade/dll_to_exe) Converts a DLL into EXE
-- [**388**星][3m] [Ruby] [elastic/puppet-elasticsearch](https://github.com/elastic/puppet-elasticsearch) Elasticsearch Puppet module
-- [**387**星][2y] [Shell] [und3rf10w/kali-anonsurf](https://github.com/und3rf10w/kali-anonsurf) A port of ParrotSec's stealth and anonsurf modules to Kali Linux
+- [**388**星][3y] [Py] [mandatoryprogrammer/cloudflare_enum](https://github.com/mandatoryprogrammer/cloudflare_enum) CloudFlare DNS枚举工具
+- [**387**星][3m] [PS] [cyberark/aclight](https://github.com/cyberark/ACLight) A script for advanced discovery of Privileged Accounts - includes Shadow Admins
- [**387**星][1m] [tobiasbueschel/awesome-pokemon](https://github.com/tobiasbueschel/awesome-pokemon) A curated list of awesome Pokémon & Pokémon GO resources, tools and more.
-- [**387**星][2m] [milabs/awesome-linux-rootkits](https://github.com/milabs/awesome-linux-rootkits) awesome-linux-rootkits
-- [**387**星][3y] [Py] [mandatoryprogrammer/cloudflare_enum](https://github.com/mandatoryprogrammer/cloudflare_enum) Cloudflare DNS Enumeration Tool for Pentesters
-- [**387**星][14d] [Py] [idaholab/malcolm](https://github.com/idaholab/malcolm) Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files) and Zeek logs.
+- [**387**星][1m] [Java] [tiagorlampert/saint](https://github.com/tiagorlampert/saint) a Spyware Generator for Windows systems written in Java
+- [**387**星][1m] [Py] [riotgames/cloud-inquisitor](https://github.com/riotgames/cloud-inquisitor) Enforce ownership and data security within AWS
+- [**387**星][3y] [Py] [funkandwagnalls/ranger](https://github.com/funkandwagnalls/ranger) A tool for security professionals to access and interact with remote Microsoft Windows based systems.
- [**387**星][2y] [Py] [frizb/vanquish](https://github.com/frizb/vanquish) Vanquish is Kali Linux based Enumeration Orchestrator. Vanquish leverages the opensource enumeration tools on Kali to perform multiple active information gathering phases.
-- [**387**星][11d] [Ruby] [digininja/cewl](https://github.com/digininja/cewl) CeWL is a Custom Word List Generator
-- [**386**星][3m] [PowerShell] [cyberark/aclight](https://github.com/cyberark/ACLight) A script for advanced discovery of Privileged Accounts - includes Shadow Admins
-- [**386**星][3y] [Objective-C] [kpwn/yalu](https://github.com/kpwn/yalu) incomplete ios 8.4.1 jailbreak by Kim Jong Cracks (8.4.1 codesign & sandbox bypass w/ LPE to root & untether)
+- [**387**星][4m] [Ruby] [elastic/puppet-elasticsearch](https://github.com/elastic/puppet-elasticsearch) Elasticsearch Puppet module
+- [**387**星][13d] [Ruby] [digininja/cewl](https://github.com/digininja/cewl) CeWL is a Custom Word List Generator
+- [**387**星][3m] [JS] [710leo/urlooker](https://github.com/710leo/urlooker) 企业级url监控
+- [**387**星][3y] [Py] [36hours/idaemu](https://github.com/36hours/idaemu) 基于Unicorn引擎的代码模拟插件
+- [**386**星][3y] [ObjC] [kpwn/yalu](https://github.com/kpwn/yalu) incomplete ios 8.4.1 jailbreak by Kim Jong Cracks (8.4.1 codesign & sandbox bypass w/ LPE to root & untether)
- [**386**星][2y] [Java] [irsdl/iis-shortname-scanner](https://github.com/irsdl/iis-shortname-scanner) latest version of scanners for IIS short filename (8.3) disclosure vulnerability
-- [**386**星][7d] [C#] [collinbarrett/filterlists](https://github.com/collinbarrett/filterlists) independent, comprehensive directory of filter and host lists for advertisements, trackers, malware, and annoyances.
-- [**386**星][3y] [Py] [36hours/idaemu](https://github.com/36hours/idaemu) 基于Unicorn引擎的代码模拟插件
-- [**385**星][9m] [Shell] [microsoft/linux-vm-tools](https://github.com/microsoft/linux-vm-tools) Hyper-V Linux Guest VM Enhancements
-- [**385**星][4m] [Py] [ynvb/die](https://github.com/ynvb/die) 使用IDA调试器收集动态运行信息, 辅助静态分析
+- [**386**星][12m] [Assembly] [hasherezade/pe_to_shellcode](https://github.com/hasherezade/pe_to_shellcode) Converts PE into a shellcode
+- [**386**星][7m] [Py] [google/upvote](https://github.com/google/upvote) A multi-platform binary whitelisting solution
+- [**386**星][15d] [HTML] [blabla1337/skf-flask](https://github.com/blabla1337/skf-flask) Security Knowledge Framework (SKF) Python Flask / Angular project
+- [**386**星][5m] [C#] [bitsadmin/nopowershell](https://github.com/bitsadmin/nopowershell) 使用C#"重写"的PowerShell, 支持执行与PowerShell类似的命令, 然而对所有的PowerShell日志机制都不可见
+- [**385**星][11d] [Haskell] [crytic/echidna](https://github.com/crytic/echidna) Ethereum fuzz testing framework
+- [**385**星][5m] [Py] [ynvb/die](https://github.com/ynvb/die) 使用IDA调试器收集动态运行信息, 辅助静态分析
+- [**385**星][9d] [Py] [maqp/tfc](https://github.com/maqp/tfc) Tinfoil Chat - Onion-routed, endpoint secure messaging system
- [**385**星][2y] [m0l1ce/wooyunallbugs](https://github.com/m0l1ce/wooyunallbugs) wooyun_all_bugs
-- [**385**星][3y] [Py] [funkandwagnalls/ranger](https://github.com/funkandwagnalls/ranger) A tool for security professionals to access and interact with remote Microsoft Windows based systems.
-- [**385**星][13d] [HTML] [blabla1337/skf-flask](https://github.com/blabla1337/skf-flask) Security Knowledge Framework (SKF) Python Flask / Angular project
-- [**385**星][5m] [C#] [bitsadmin/nopowershell](https://github.com/bitsadmin/nopowershell) 使用C#"重写"的PowerShell, 支持执行与PowerShell类似的命令, 然而对所有的PowerShell日志机制都不可见
-- [**384**星][26d] [ym2011/securitymanagement](https://github.com/ym2011/securitymanagement) share with you some knowledge for Information Security Management,ISO27001,Information Security Class Protect ,SDLC,etc.
-- [**384**星][27d] [Shell] [yadominjinta/atilo](https://github.com/yadominjinta/atilo) Linux installer for termux
-- [**384**星][1m] [Java] [tiagorlampert/saint](https://github.com/tiagorlampert/saint) a Spyware Generator for Windows systems written in Java
+- [**385**星][1y] [Ruby] [aphyr/tund](https://github.com/aphyr/tund) SSH reverse tunnel daemon
+- [**384**星][8m] [C] [zerosum0x0/smbdoor](https://github.com/zerosum0x0/smbdoor) Windows kernel backdoor via registering a malicious SMB handler
+- [**384**星][7m] [tidesec/tide](https://github.com/tidesec/tide) 目前实现了网络空间资产探测、指纹检索、漏洞检测、漏洞全生命周期管理、poc定向检测、暗链检测、挂马监测、敏感字检测、DNS监测、网站可用性监测、漏洞库管理、安全预警等等~
- [**384**星][1y] [C++] [stanfordpl/x64asm](https://github.com/stanfordpl/x64asm) x86-64 assembler library
- [**384**星][4y] [PHP] [spiderlabs/mcir](https://github.com/spiderlabs/mcir) The Magical Code Injection Rainbow! MCIR is a framework for building configurable vulnerability testbeds. MCIR is also a collection of configurable vulnerability testbeds.
-- [**384**星][1m] [Py] [riotgames/cloud-inquisitor](https://github.com/riotgames/cloud-inquisitor) Enforce ownership and data security within AWS
+- [**384**星][2y] [Assembly] [sgayou/kindle-5.6.5-jailbreak](https://github.com/sgayou/kindle-5.6.5-jailbreak) Kindle 5.6.5 exploitation tools.
+- [**384**星][3y] [Py] [sensepost/dns-shell](https://github.com/sensepost/dns-shell) DNS-Shell is an interactive Shell over DNS channel
+- [**384**星][1m] [C#] [microsoft/binskim](https://github.com/microsoft/binskim) 二进制静态分析工具,可为PE和ELF二进制格式提供安全性和正确性分析
+- [**384**星][2m] [C++] [llvm-mirror/lldb](https://github.com/llvm-mirror/lldb) Mirror of official lldb git repository located at
- [**384**星][9m] [Ruby] [hatbashbr/hatcloud](https://github.com/hatbashbr/hatcloud) discontinued
-- [**384**星][7m] [Py] [google/upvote](https://github.com/google/upvote) A multi-platform binary whitelisting solution
-- [**384**星][7m] [C] [coolervoid/0d1n](https://github.com/coolervoid/0d1n) Web security tool to make fuzzing at HTTP/S, Beta
-- [**383**星][2m] [C] [ufrisk/memprocfs](https://github.com/ufrisk/memprocfs) The Memory Process File System
+- [**384**星][2y] [C++] [equalitie/np1sec](https://github.com/equalitie/np1sec) 端对端加密的多用户通信协议
+- [**383**星][6d] [Makefile] [crifan/scientific_network_summary](https://github.com/crifan/scientific_network_summary) 总结关于科学上网的概念方法及工具
- [**383**星][3y] [Ruby] [stephenfewer/grinder](https://github.com/stephenfewer/grinder) Grinder is a system to automate the fuzzing of web browsers and the management of a large number of crashes.
-- [**383**星][2y] [Assembly] [sgayou/kindle-5.6.5-jailbreak](https://github.com/sgayou/kindle-5.6.5-jailbreak) Kindle 5.6.5 exploitation tools.
-- [**383**星][3y] [Py] [sensepost/dns-shell](https://github.com/sensepost/dns-shell) DNS-Shell is an interactive Shell over DNS channel
+- [**383**星][25d] [C++] [simsong/bulk_extractor](https://github.com/simsong/bulk_extractor) 取证工具
- [**383**星][1y] [JS] [securing/gattacker](https://github.com/securing/gattacker) A Node.js package for BLE (Bluetooth Low Energy) security assessment using Man-in-the-Middle and other attacks
- [**383**星][2m] [Py] [ptresearch/inteltxe-poc](https://github.com/ptresearch/inteltxe-poc) Intel Management Engine JTAG Proof of Concept
-- [**383**星][2m] [C++] [llvm-mirror/lldb](https://github.com/llvm-mirror/lldb) Mirror of official lldb git repository located at
-- [**383**星][2y] [C++] [equalitie/np1sec](https://github.com/equalitie/np1sec) 端对端加密的多用户通信协议
+- [**383**星][3m] [PHP] [msurguy/honeypot](https://github.com/msurguy/honeypot) 一种简单有效的方法,来阻止某些进入您网站的垃圾邮件机器人
+- [**383**星][1y] [HTML] [maestron/reverse-engineering-tutorials](https://github.com/maestron/reverse-engineering-tutorials) Reverse Engineering Tutorials
- [**383**星][1y] [Java] [davidbuchanan314/nxloader](https://github.com/davidbuchanan314/nxloader) My first Android app: Launch Fusée Gelée payloads from stock Android (CVE-2018-6242)
-- [**382**星][9d] [Haskell] [crytic/echidna](https://github.com/crytic/echidna) Ethereum fuzz testing framework
-- [**382**星][8m] [C] [zerosum0x0/smbdoor](https://github.com/zerosum0x0/smbdoor) Windows kernel backdoor via registering a malicious SMB handler
-- [**382**星][7m] [tidesec/tide](https://github.com/tidesec/tide) 目前实现了网络空间资产探测、指纹检索、漏洞检测、漏洞全生命周期管理、poc定向检测、暗链检测、挂马监测、敏感字检测、DNS监测、网站可用性监测、漏洞库管理、安全预警等等~
+- [**382**星][22d] [PHP] [terrylinooo/shieldon](https://github.com/terrylinooo/shieldon) Web Application Firewall (WAF) for PHP.
+- [**382**星][30d] [Py] [stamparm/dsss](https://github.com/stamparm/dsss) Damn Small SQLi Scanner
- [**382**星][2m] [Py] [sab0tag3d/siet](https://github.com/sab0tag3d/siet) Smart Install Exploitation Tool
-- [**382**星][10m] [Py] [rustyshackleford221/oscp-prep](https://github.com/rustyshackleford221/oscp-prep) A comprehensive guide/material for anyone looking to get into infosec or take the OSCP exam
-- [**382**星][3m] [PHP] [msurguy/honeypot](https://github.com/msurguy/honeypot) Simple spam prevention package for Laravel applications
-- [**382**星][1y] [HTML] [maestron/reverse-engineering-tutorials](https://github.com/maestron/reverse-engineering-tutorials) Reverse Engineering Tutorials
+- [**382**星][3m] [Py] [p1r06u3/opencanary_web](https://github.com/p1r06u3/opencanary_web) The web management platform of honeypot
+- [**382**星][2y] [Java] [nickstadb/barmie](https://github.com/nickstadb/barmie) 枚举和攻击Java RMI(远程方法调用)服务。
- [**382**星][2m] [Shell] [kabachook/k8s-security](https://github.com/kabachook/k8s-security) Kubernetes security notes and best practices
-- [**382**星][12m] [Assembly] [hasherezade/pe_to_shellcode](https://github.com/hasherezade/pe_to_shellcode) Converts PE into a shellcode
- [**382**星][2y] [Py] [fireeye/reelphish](https://github.com/fireeye/reelphish)
- [**382**星][1y] [Py] [ex0dus-0x/brut3k1t](https://github.com/ex0dus-0x/brut3k1t) security-oriented bruteforce framework
-- [**382**星][1y] [Ruby] [aphyr/tund](https://github.com/aphyr/tund) SSH reverse tunnel daemon
-- [**381**星][28d] [Py] [stamparm/dsss](https://github.com/stamparm/dsss) Damn Small SQLi Scanner
-- [**381**星][23d] [C++] [simsong/bulk_extractor](https://github.com/simsong/bulk_extractor) This is the development tree. For downloads please see:
-- [**381**星][4y] [Py] [sensepost/snoopy-ng](https://github.com/sensepost/snoopy-ng) Snoopy v2.0 - modular digital terrestrial tracking framework
-- [**381**星][11d] [Ruby] [puppetlabs/puppetlabs-mysql](https://github.com/puppetlabs/puppetlabs-mysql) MySQL Puppet Module / Manifests + Types & Providers
-- [**381**星][1m] [C#] [microsoft/binskim](https://github.com/microsoft/binskim) 二进制静态分析工具,可为PE和ELF二进制格式提供安全性和正确性分析
-- [**381**星][7d] [Py] [maqp/tfc](https://github.com/maqp/tfc) Tinfoil Chat - Onion-routed, endpoint secure messaging system
+- [**382**星][1m] [Go] [cretz/bine](https://github.com/cretz/bine) Go library for accessing and embedding Tor clients and servers
+- [**381**星][28d] [C++] [0x09al/rdpthief](https://github.com/0x09al/rdpthief) Extracting Clear Text Passwords from mstsc.exe using API Hooking.
+- [**381**星][2m] [thejambo/awesome-testing](https://github.com/thejambo/awesome-testing) A curated list of testing resources
+- [**381**星][4y] [Py] [sensepost/snoopy-ng](https://github.com/sensepost/snoopy-ng) 模块化数字terrestrial跟踪框架
+- [**381**星][28d] [JS] [nccgroup/tracy](https://github.com/nccgroup/tracy) 查找web app中所有的sinks and sources, 并以易于理解的方式显示这些结果
+- [**381**星][2m] [Jupyter Notebook] [microsoft/windowsdefenderatp-hunting-queries](https://github.com/microsoft/windowsdefenderatp-hunting-queries) 在MS Defender ATP中进行高级查询的示例
+- [**381**星][1y] [C] [markus-go/bonesi](https://github.com/markus-go/bonesi) BoNeSi - the DDoS Botnet Simulator
- [**381**星][5y] [JS] [le4f/pcap-analyzer](https://github.com/le4f/pcap-analyzer) online pcap forensic
-- [**380**星][5y] [Py] [mfrister/pushproxy](https://github.com/mfrister/pushproxy) A man-in-the-middle proxy for iOS and OS X device push connections
-- [**380**星][2m] [thejambo/awesome-testing](https://github.com/thejambo/awesome-testing) A curated list of testing resources
+- [**381**星][7m] [Py] [hurricanelabs/machinae](https://github.com/hurricanelabs/machinae) Machinae Security Intelligence Collector
+- [**381**星][10m] [Py] [hahwul/a2sv](https://github.com/hahwul/a2sv) 自动扫描并检测常见的和已知的SSL 漏洞
+- [**381**星][1y] [JS] [empireproject/empire-gui](https://github.com/empireproject/empire-gui) Empire开渗透框架的图形界面
+- [**381**星][2m] [dsopas/assessment-mindset](https://github.com/dsopas/assessment-mindset) 安全相关的思维导图, 可用于pentesting, bug bounty, red-teamassessments
+- [**381**星][4y] [Py] [deresz/funcap](https://github.com/deresz/funcap) 使用IDA调试时记录动态信息, 辅助静态分析
+- [**381**星][11m] [C] [coolstar/electra1131](https://github.com/coolstar/electra1131) electra1131: Electra for iOS 11.0 - 11.3.1
+- [**381**星][1m] [C#] [bloodhoundad/sharphound](https://github.com/bloodhoundad/sharphound) C#重写BloodHound Ingestor
+- [**381**星][4m] [C++] [bastibl/gr-ieee802-11](https://github.com/bastibl/gr-ieee802-11) IEEE 802.11 a/g/p Transceiver
+- [**380**星][12d] [TS] [shroudedcode/apk-mitm](https://github.com/shroudedcode/apk-mitm)
- [**380**星][2y] [C] [sandeepmistry/arduino-bleperipheral](https://github.com/sandeepmistry/arduino-bleperipheral) An Arduino library for creating custom BLE peripherals with Nordic Semiconductor's nRF8001 or nR51822.
+- [**380**星][10m] [C] [robertfisk/usg](https://github.com/robertfisk/usg) The USG is Good, not Bad
- [**380**星][3y] [JS] [risingstack/protect](https://github.com/risingstack/protect) 保护 Node.js 网页服务
-- [**380**星][21d] [C++] [msoos/cryptominisat](https://github.com/msoos/cryptominisat) An advanced SAT solver
+- [**380**星][2d] [Ruby] [puppetlabs/puppetlabs-mysql](https://github.com/puppetlabs/puppetlabs-mysql) MySQL Puppet Module / Manifests + Types & Providers
+- [**380**星][7d] [C++] [msoos/cryptominisat](https://github.com/msoos/cryptominisat) An advanced SAT solver
- [**380**星][3y] [C] [micrictor/stuxnet](https://github.com/micrictor/stuxnet) Open-source decompile of Stuxnet/myRTUs
-- [**380**星][10m] [Py] [hahwul/a2sv](https://github.com/hahwul/a2sv) 自动扫描并检测常见的和已知的SSL 漏洞
-- [**380**星][3m] [Py] [foospidy/honeypy](https://github.com/foospidy/honeypy) A low to medium interaction honeypot.
-- [**380**星][2m] [dsopas/assessment-mindset](https://github.com/dsopas/assessment-mindset) 安全相关的思维导图, 可用于pentesting, bug bounty, red-teamassessments
-- [**380**星][4y] [Py] [deresz/funcap](https://github.com/deresz/funcap) 使用IDA调试时记录动态信息, 辅助静态分析
-- [**380**星][11m] [C] [coolstar/electra1131](https://github.com/coolstar/electra1131) electra1131: Electra for iOS 11.0 - 11.3.1
-- [**380**星][4m] [C++] [bastibl/gr-ieee802-11](https://github.com/bastibl/gr-ieee802-11) IEEE 802.11 a/g/p Transceiver
+- [**380**星][4m] [Py] [foospidy/honeypy](https://github.com/foospidy/honeypy) A low to medium interaction honeypot.
+- [**380**星][3m] [Jupyter Notebook] [endgameinc/ember](https://github.com/endgameinc/ember) 110万PE文件的数据集合, 可用于训练相关模型. PE文件信息主要包括: SHA256/histogram(直方图)/byteentropy(字节熵)/字符串/PE头信息/段信息/导入表/导出表
+- [**379**星][5y] [Py] [mfrister/pushproxy](https://github.com/mfrister/pushproxy) A man-in-the-middle proxy for iOS and OS X device push connections
+- [**379**星][3y] [slyth11907/cheatsheets](https://github.com/slyth11907/cheatsheets) Helped during my OSCP lab days.
- [**379**星][1y] [Py] [rhinosecuritylabs/sleuthql](https://github.com/rhinosecuritylabs/sleuthql) Python3 Burp History parsing tool to discover potential SQL injection points. To be used in tandem with SQLmap.
-- [**379**星][2y] [Java] [nickstadb/barmie](https://github.com/nickstadb/barmie) Java RMI enumeration and attack tool.
-- [**379**星][26d] [JS] [nccgroup/tracy](https://github.com/nccgroup/tracy) 查找web app中所有的sinks and sources, 并以易于理解的方式显示这些结果
-- [**379**星][1m] [Jupyter Notebook] [microsoft/windowsdefenderatp-hunting-queries](https://github.com/microsoft/windowsdefenderatp-hunting-queries) 在MS Defender ATP中进行高级查询的示例
+- [**379**星][1y] [CSS] [nowsecure/secure-mobile-development](https://github.com/nowsecure/secure-mobile-development) A Collection of Secure Mobile Development Best Practices
- [**379**星][3m] [Rust] [microsoft/lain](https://github.com/microsoft/lain) A fuzzer framework built in Rust
-- [**379**星][7m] [Py] [hurricanelabs/machinae](https://github.com/hurricanelabs/machinae) Machinae Security Intelligence Collector
-- [**379**星][1y] [JS] [empireproject/empire-gui](https://github.com/empireproject/empire-gui) Empire client application
+- [**379**星][7m] [jnusimba/androidsecnotes](https://github.com/jnusimba/androidsecnotes) some learning notes about Android Security
+- [**379**星][7d] [C++] [google/binexport](https://github.com/google/binexport) 将反汇编以Protocol Buffer的形式导出为PostgreSQL数据库, 导入到BinNavi中使用
+- [**379**星][2y] [ObjC] [codermjlee/mjapptools](https://github.com/codermjlee/mjapptools) 【越狱-逆向】处理iOS APP信息的命令行工具
+- [**378**星][7m] [unprovable/pentesthardware](https://github.com/unprovable/pentesthardware) 公开笔记整理
- [**378**星][2y] [Shell] [screetsec/microsploit](https://github.com/screetsec/microsploit) Fast and easy create backdoor office exploitation using module metasploit packet , Microsoft Office , Open Office , Macro attack , Buffer Overflow
-- [**378**星][10m] [C] [robertfisk/usg](https://github.com/robertfisk/usg) The USG is Good, not Bad
-- [**378**星][3m] [Py] [p1r06u3/opencanary_web](https://github.com/p1r06u3/opencanary_web) The web management platform of honeypot
-- [**378**星][1y] [C] [markus-go/bonesi](https://github.com/markus-go/bonesi) BoNeSi - the DDoS Botnet Simulator
+- [**378**星][2y] [TeX] [mimoo/rsa-and-lll-attacks](https://github.com/mimoo/rsa-and-lll-attacks) attacking RSA via lattice reductions (LLL)
- [**378**星][9m] [Py] [k4m4/onioff](https://github.com/k4m4/onioff) url检测器,深度检测网页链接
-- [**378**星][1m] [C++] [google/binexport](https://github.com/google/binexport) 将反汇编以Protocol Buffer的形式导出为PostgreSQL数据库, 导入到BinNavi中使用
+- [**378**星][4m] [C] [hackgnar/ble_ctf](https://github.com/hackgnar/ble_ctf) A Bluetooth low energy capture the flag
+- [**378**星][1m] [C] [furrtek/portapack-havoc](https://github.com/furrtek/portapack-havoc) Custom firmware for the HackRF SDR + PortaPack H1 addon
+- [**378**星][13d] [Ruby] [david942j/seccomp-tools](https://github.com/david942j/seccomp-tools) 用于seccomp分析
- [**378**星][1y] [PHP] [bo0om/php_imap_open_exploit](https://github.com/bo0om/php_imap_open_exploit) Bypassing disabled exec functions in PHP (c) CRLF
-- [**377**星][12d] [Py] [eerkunt/terraform-compliance](https://github.com/eerkunt/terraform-compliance) a lightweight, security focused, BDD test framework against terraform.
-- [**377**星][6m] [unprovable/pentesthardware](https://github.com/unprovable/pentesthardware) Kinda useful notes collated together publicly
-- [**377**星][3y] [slyth11907/cheatsheets](https://github.com/slyth11907/cheatsheets) Helped during my OSCP lab days.
-- [**377**星][2y] [PowerShell] [gfoss/psrecon](https://github.com/gfoss/psrecon)
-- [**377**星][2y] [Objective-C] [codermjlee/mjapptools](https://github.com/codermjlee/mjapptools) 【越狱-逆向】处理iOS APP信息的命令行工具
+- [**378**星][1m] [Py] [0x4d31/fatt](https://github.com/0x4d31/fatt) FATT /fingerprintAllTheThings - a pyshark based script for extracting network metadata and fingerprints from pcap files and live network traffic
+- [**377**星][2y] [PS] [gfoss/psrecon](https://github.com/gfoss/psrecon) 使用PowerShell(v2或更高版本)从远程Windows主机收集数据,将数据组织到文件夹中,对所有提取的数据进行哈希处理,对PowerShell和各种系统属性进行哈希处理,然后将数据发送给安全团队
+- [**377**星][27d] [Py] [fox-it/bloodhound.py](https://github.com/fox-it/bloodhound.py) 基于Python的BloodHound Ingestor,基于Impacket
- [**377**星][1y] [ansible/ansible-lockdown](https://github.com/ansible/ansible-lockdown) Ansible playbook roles for security
-- [**376**星][9d] [Makefile] [kuoruan/openwrt-v2ray](https://github.com/kuoruan/openwrt-v2ray) V2Ray for OpenWrt
-- [**376**星][10m] [Py] [wyatu/cve-2018-20250](https://github.com/wyatu/cve-2018-20250) exp for
-- [**376**星][2y] [TeX] [mimoo/rsa-and-lll-attacks](https://github.com/mimoo/rsa-and-lll-attacks) attacking RSA via lattice reductions (LLL)
-- [**376**星][4m] [C] [hackgnar/ble_ctf](https://github.com/hackgnar/ble_ctf) A Bluetooth low energy capture the flag
-- [**376**星][1m] [Py] [0x4d31/fatt](https://github.com/0x4d31/fatt) FATT /fingerprintAllTheThings - a pyshark based script for extracting network metadata and fingerprints from pcap files and live network traffic
+- [**376**星][6m] [Ruby] [mdp/gibberish](https://github.com/mdp/gibberish) Simple Ruby encryption module
+- [**376**星][8m] [C] [ridter/pentest](https://github.com/ridter/pentest) 渗透工具
+- [**376**星][27d] [Py] [random-robbie/my-shodan-scripts](https://github.com/random-robbie/my-shodan-scripts) Collection of Scripts for shodan searching stuff.
+- [**376**星][1m] [HTML] [howsecureismypassword/hsimp](https://github.com/howsecureismypassword/hsimp) How Secure is My Password for your own website
+- [**376**星][4y] [C#] [goliate/hidden-tear](https://github.com/goliate/hidden-tear) 勒索软件
+- [**376**星][16d] [Ruby] [dradis/dradis-ce](https://github.com/dradis/dradis-ce) 面向信息安全团队的协作框架
+- [**376**星][2m] [Py] [dinotools/dionaea](https://github.com/dinotools/dionaea) Home of the dionaea honeypot
+- [**376**星][5y] [C++] [clymb3r/kdexploitme](https://github.com/clymb3r/kdexploitme) A kernel driver to practice writing exploits against, as well as some example exploits using public techniques.
+- [**376**星][2y] [Py] [0x4d31/burpa](https://github.com/0x4d31/burpa) Burp-Automator: A Burp Suite Automation Tool with Slack Integration. It can be used with Jenkins and Selenium to automate Dynamic Application Security Testing (DAST).
+- [**375**星][10m] [Py] [wyatu/cve-2018-20250](https://github.com/wyatu/cve-2018-20250) exp for
- [**375**星][3y] [C] [sensepost/usabuse](https://github.com/sensepost/usabuse) Universal Serial aBUSe is a project to demonstrate the risks of hardware bypasses of software security by Rogan Dawes at SensePost.
- [**375**星][7m] [Py] [secrary/ssma](https://github.com/secrary/ssma) SSMA - Simple Static Malware Analyzer [This project is not maintained anymore]
-- [**375**星][8m] [C] [ridter/pentest](https://github.com/ridter/pentest) tools
-- [**375**星][1y] [CSS] [nowsecure/secure-mobile-development](https://github.com/nowsecure/secure-mobile-development) A Collection of Secure Mobile Development Best Practices
+- [**375**星][1y] [Py] [rhynorater/cve-2018-15473-exploit](https://github.com/rhynorater/cve-2018-15473-exploit) Exploit written in Python for CVE-2018-15473 with threading and export formats
+- [**375**星][3y] [Go] [q3k/crowbar](https://github.com/q3k/crowbar) Tunnel TCP over a plain HTTP session (warning: mediocre Go code)
+- [**375**星][2m] [Java] [nccgroup/autorepeater](https://github.com/nccgroup/autorepeater) Automated HTTP Request Repeating With Burp Suite
+- [**375**星][2m] [Py] [maldevel/emailharvester](https://github.com/maldevel/emailharvester) Email addresses harvester
- [**375**星][1y] [C++] [liveoverflow/pwnadventure3](https://github.com/liveoverflow/pwnadventure3) PwnAdventure3 Server
- [**375**星][5y] [C] [jvns/kernel-module-fun](https://github.com/jvns/kernel-module-fun) Some fun things you can do with kernel modules (all "bad ideas")
- [**375**星][6y] [C] [heardrwt/revealloader](https://github.com/heardrwt/revealloader) Reveal Loader dynamically loads libReveal.dylib (Reveal.app support) into iOS apps on jailbroken devices.
-- [**375**星][4y] [C#] [goliate/hidden-tear](https://github.com/goliate/hidden-tear) 勒索软件
-- [**375**星][3m] [Jupyter Notebook] [endgameinc/ember](https://github.com/endgameinc/ember) 110万PE文件的数据集合, 可用于训练相关模型. PE文件信息主要包括: SHA256/histogram(直方图)/byteentropy(字节熵)/字符串/PE头信息/段信息/导入表/导出表
-- [**375**星][5y] [C++] [clymb3r/kdexploitme](https://github.com/clymb3r/kdexploitme) A kernel driver to practice writing exploits against, as well as some example exploits using public techniques.
+- [**375**星][3y] [C++] [evilsocket/arminject](https://github.com/evilsocket/arminject) An application to dynamically inject a shared object into a running process on ARM architectures.
+- [**375**星][2y] [aozhimin/ios-debug-hacks](https://github.com/aozhimin/ios-debug-hacks)
- [**375**星][2y] [Py] [1111joe1111/ida_ea](https://github.com/1111joe1111/ida_ea) 用于辅助漏洞开发和逆向
-- [**375**星][2y] [Py] [0x4d31/burpa](https://github.com/0x4d31/burpa) Burp-Automator: A Burp Suite Automation Tool with Slack Integration. It can be used with Jenkins and Selenium to automate Dynamic Application Security Testing (DAST).
-- [**374**星][3y] [Go] [q3k/crowbar](https://github.com/q3k/crowbar) Tunnel TCP over a plain HTTP session (warning: mediocre Go code)
-- [**374**星][2m] [Java] [nccgroup/autorepeater](https://github.com/nccgroup/autorepeater) Automated HTTP Request Repeating With Burp Suite
-- [**374**星][2m] [Py] [maldevel/emailharvester](https://github.com/maldevel/emailharvester) Email addresses harvester
-- [**374**星][7m] [jnusimba/androidsecnotes](https://github.com/jnusimba/androidsecnotes) some learning notes about Android Security
-- [**374**星][3y] [C++] [evilsocket/arminject](https://github.com/evilsocket/arminject) An application to dynamically inject a shared object into a running process on ARM architectures.
-- [**374**星][11d] [Ruby] [david942j/seccomp-tools](https://github.com/david942j/seccomp-tools) Provide powerful tools for seccomp analysis
-- [**374**星][1m] [C#] [bloodhoundad/sharphound](https://github.com/bloodhoundad/sharphound) The BloodHound C# Ingestor
+- [**374**星][4m] [Py] [xuanhun/pythonhackingbook1](https://github.com/xuanhun/pythonhackingbook1) Python黑客编程之极速入门
+
+- [**374**星][21d] [C++] [tihmstar/futurerestore](https://github.com/tihmstar/futurerestore) A hacked up idevicerestore wrapper, which allows specifying SEP and Baseband for restoring
+- [**374**星][21d] [Py] [skavngr/rapidscan](https://github.com/skavngr/rapidscan) | The Multi-Tool Web Vulnerability Scanner.
+- [**374**星][3m] [Shell] [screetsec/vegile](https://github.com/screetsec/vegile) This tool will setting up your backdoor/rootkits when backdoor already setup it will be hidden your spesisifc process,unlimited your session in metasploit and transparent. Even when it killed, it will re-run again. There always be a procces which while run another process,So we can assume that this procces is unstopable like a Ghost in The Shell
+- [**374**星][8m] [opencybertranslationproject/linux-basics-for-hackers](https://github.com/opencybertranslationproject/linux-basics-for-hackers) 书籍《Linux Basics for Hackers》2019版中文翻译版
+- [**374**星][14d] [Py] [fkie-cad/fact_core](https://github.com/fkie-cad/fact_core) Firmware Analysis and Comparison Tool
+- [**374**星][2m] [C++] [crypto2011/idr](https://github.com/crypto2011/idr) Interactive Delphi Reconstructor
+- [**373**星][6m] [Py] [vysecurity/domlink](https://github.com/vysecurity/DomLink) 一种将具有注册组织名称和电子邮件的域链接到其他域的工具。
- [**373**星][10m] [c] [cryptsetup/cryptsetup](https://gitlab.com/cryptsetup/cryptsetup)
-- [**373**星][1y] [Py] [rhynorater/cve-2018-15473-exploit](https://github.com/rhynorater/cve-2018-15473-exploit) Exploit written in Python for CVE-2018-15473 with threading and export formats
-- [**373**星][2m] [Py] [dinotools/dionaea](https://github.com/dinotools/dionaea) Home of the dionaea honeypot
-- [**373**星][2m] [C++] [crypto2011/idr](https://github.com/crypto2011/idr) Interactive Delphi Reconstructor
-- [**373**星][2y] [aozhimin/ios-debug-hacks](https://github.com/aozhimin/ios-debug-hacks)
-- [**372**星][2y] [PowerShell] [xorrior/remoterecon](https://github.com/xorrior/remoterecon) Remote Recon and Collection
-- [**372**星][19d] [C++] [tihmstar/futurerestore](https://github.com/tihmstar/futurerestore) A hacked up idevicerestore wrapper, which allows specifying SEP and Baseband for restoring
-- [**372**星][2m] [Shell] [screetsec/vegile](https://github.com/screetsec/vegile) This tool will setting up your backdoor/rootkits when backdoor already setup it will be hidden your spesisifc process,unlimited your session in metasploit and transparent. Even when it killed, it will re-run again. There always be a procces which while run another process,So we can assume that this procces is unstopable like a Ghost in The Shell
+- [**373**星][21d] [zer0yu/cybersecurityrss](https://github.com/zer0yu/cybersecurityrss) RSS: 优秀的个人情报来源
+- [**373**星][5m] [xtiankisutsa/awesome-mobile-ctf](https://github.com/xtiankisutsa/awesome-mobile-ctf) This is a curated list of mobile based CTFs, write-ups and vulnerable apps. Most of them are android based due to the popularity of the platform.
+- [**373**星][2y] [PS] [xorrior/remoterecon](https://github.com/xorrior/remoterecon) Remote Recon and Collection
+- [**373**星][8d] [JS] [nowsecure/r2frida](https://github.com/nowsecure/r2frida) Radare2 and Frida better together.
+- [**373**星][5d] [C++] [microsoft/llvm-mctoll](https://github.com/microsoft/llvm-mctoll) statically (AOT) translates (or raises) binaries to LLVM IR
- [**372**星][2y] [Elixir] [robinmonjo/coincoin](https://github.com/robinmonjo/coincoin) Blockchain based cryptocurrency proof-of-concept in Elixir. Feedback welcome
-- [**372**星][25d] [Py] [random-robbie/my-shodan-scripts](https://github.com/random-robbie/my-shodan-scripts) Collection of Scripts for shodan searching stuff.
-- [**372**星][3y] [georgiaw/smartphone-pentest-framework](https://github.com/georgiaw/smartphone-pentest-framework) Repository for the Smartphone Pentest Framework (SPF)
-- [**371**星][6m] [Py] [vysecurity/domlink](https://github.com/vysecurity/DomLink) A tool to link a domain with registered organisation names and emails, to other domains.
-- [**371**星][18d] [zer0yu/cybersecurityrss](https://github.com/zer0yu/cybersecurityrss) RSS: 优秀的个人情报来源
-- [**371**星][1y] [Shell] [ptb/mac-setup](https://github.com/ptb/mac-setup)
-- [**371**星][8m] [opencybertranslationproject/linux-basics-for-hackers](https://github.com/opencybertranslationproject/linux-basics-for-hackers) 书籍《Linux Basics for Hackers》2019版中文翻译版
-- [**371**星][24d] [JS] [nccgroup/singularity](https://github.com/nccgroup/singularity) A DNS rebinding attack framework.
+- [**372**星][1y] [Shell] [ptb/mac-setup](https://github.com/ptb/mac-setup)
+- [**372**星][2m] [Py] [pielco11/fav-up](https://github.com/pielco11/fav-up) IP lookup from favicon using Shodan
+- [**372**星][2d] [C++] [netis/packet-agent](https://github.com/netis/packet-agent) A toolset for network packet capture, forwarding and analysis via GRE/Cloud.
+- [**372**星][26d] [JS] [nccgroup/singularity](https://github.com/nccgroup/singularity) A DNS rebinding attack framework.
+- [**372**星][3d] [C++] [namecoin/namecoin-core](https://github.com/namecoin/namecoin-core) Reimplementation of Namecoin on top of the current Bitcoin Core codebase.
+- [**372**星][3y] [C++] [m00nrise/processhider](https://github.com/m00nrise/processhider) Post-exploitation tool for hiding processes from monitoring applications
+- [**372**星][2m] [AngelScript] [inquest/malware-samples](https://github.com/inquest/malware-samples) A collection of malware samples and relevant dissection information, most probably referenced from
+- [**372**星][10d] [hkbakke/bash-insulter](https://github.com/hkbakke/bash-insulter) Insults the user when typing wrong command
+- [**372**星][3y] [georgiaw/smartphone-pentest-framework](https://github.com/georgiaw/smartphone-pentest-framework) 智能手机渗透测试
+- [**372**星][2m] [Py] [dedsecinside/torbot](https://github.com/dedsecinside/torbot) Dark Web OSINT Tool
+- [**372**星][1y] [Go] [cardigann/cardigann](https://github.com/cardigann/cardigann) A proxy server for adding new indexers to Sonarr, SickRage and other media managers
+- [**371**星][21d] [cisco-talos/clamav-faq](https://github.com/cisco-talos/clamav-faq) ClamAV FAQ
+- [**371**星][3y] [PHP] [nikicat/web-malware-collection](https://github.com/nikicat/web-malware-collection) Clone of svn repository of
- [**371**星][6m] [Rust] [gamozolabs/orange_slice](https://github.com/gamozolabs/orange_slice) A research kernel and hypervisor attempting to get fully deterministic emulation with minimum performance cost
-- [**371**星][14d] [Ruby] [dradis/dradis-ce](https://github.com/dradis/dradis-ce) 面向信息安全团队的协作框架
-- [**370**星][2m] [renwax23/xss-payloads](https://github.com/renwax23/xss-payloads) List of XSS Vectors/Payloads
-- [**370**星][25d] [JS] [nowsecure/r2frida](https://github.com/nowsecure/r2frida) Radare2 and Frida better together.
-- [**370**星][3y] [PHP] [nikicat/web-malware-collection](https://github.com/nikicat/web-malware-collection) Clone of svn repository of
-- [**370**星][8d] [C++] [namecoin/namecoin-core](https://github.com/namecoin/namecoin-core) Reimplementation of Namecoin on top of the current Bitcoin Core codebase.
+- [**371**星][2y] [C] [cr4sh/windowsregistryrootkit](https://github.com/cr4sh/windowsregistryrootkit) Kernel rootkit, that lives inside the Windows registry values data
+- [**371**星][3y] [Py] [androidhooker/hooker](https://github.com/androidhooker/hooker) Hooker is an opensource project for dynamic analyses of Android applications. This project provides various tools and applications that can be use to automaticaly intercept and modify any API calls made by a targeted application.
+- [**371**星][4y] [JS] [allfro/burpkit](https://github.com/allfro/burpkit) Next-gen BurpSuite penetration testing tool
+- [**370**星][2m] [Dockerfile] [onplus/v2hero](https://github.com/onplus/v2hero) All Free . Deploy V2Ray to Heroku . v2ray学习参考
+- [**370**星][7m] [Py] [s0md3v/cloak](https://github.com/s0md3v/Cloak) Cloak can backdoor any python script with some tricks.
+- [**370**星][2m] [Py] [tmr232/sark](https://github.com/tmr232/sark) IDAPython的高级抽象
+- [**370**星][7m] [Py] [tidesec/tidefinger](https://github.com/tidesec/tidefinger) 指纹识别小工具,汲取整合了多个web指纹库,结合了多种指纹检测方法,让指纹检测更快捷、准确。
+- [**370**星][4y] [Py] [rrenaud/gibberish-detector](https://github.com/rrenaud/gibberish-detector) A small program to detect gibberish using a Markov Chain
+- [**370**星][3m] [renwax23/xss-payloads](https://github.com/renwax23/xss-payloads) List of XSS Vectors/Payloads
- [**370**星][2m] [Py] [lyft/metadataproxy](https://github.com/lyft/metadataproxy) A proxy for AWS's metadata service that gives out scoped IAM credentials from STS
-- [**370**星][12d] [Py] [fkie-cad/fact_core](https://github.com/fkie-cad/fact_core) Firmware Analysis and Comparison Tool
-- [**370**星][2y] [C] [cr4sh/windowsregistryrootkit](https://github.com/cr4sh/windowsregistryrootkit) Kernel rootkit, that lives inside the Windows registry values data
-- [**370**星][15d] [PHP] [blackarch/webshells](https://github.com/blackarch/webshells) Various webshells. We accept pull requests for additions to this collection.
-- [**370**星][3y] [Py] [androidhooker/hooker](https://github.com/androidhooker/hooker) Hooker is an opensource project for dynamic analyses of Android applications. This project provides various tools and applications that can be use to automaticaly intercept and modify any API calls made by a targeted application.
-- [**370**星][4y] [JS] [allfro/burpkit](https://github.com/allfro/burpkit) Next-gen BurpSuite penetration testing tool
+- [**370**星][2y] [C++] [breenmachine/rottenpotatong](https://github.com/breenmachine/rottenpotatong) New version of RottenPotato as a C++ DLL and standalone C++ binary - no need for meterpreter or other tools.
+- [**370**星][17d] [PHP] [blackarch/webshells](https://github.com/blackarch/webshells) Various webshells. We accept pull requests for additions to this collection.
+- [**370**星][1y] [C++] [alonemonkey/iosrebook](https://github.com/alonemonkey/iosrebook) 《iOS应用逆向与安全》随书源码
- [**369**星][5y] [Go] [vishvananda/wormhole](https://github.com/vishvananda/wormhole) A smart proxy to connect docker containers.
-- [**369**星][15d] [Py] [jiangxufeng/v2rayl](https://github.com/jiangxufeng/v2rayl) v2ray linux GUI客户端,支持订阅、vemss、ss等协议,自动更新订阅、检查版本更新
+- [**369**星][22d] [Py] [pdbpp/pdbpp](https://github.com/pdbpp/pdbpp) pdb++, a drop-in replacement for pdb (the Python debugger)
+- [**369**星][3m] [C++] [werkamsus/lilith](https://github.com/werkamsus/lilith) Lilith, The Open Source C++ Remote Administration Tool (RAT)
+- [**369**星][9d] [Shell] [trimstray/otseca](https://github.com/trimstray/otseca) 安全审计工具, 搜索并转储系统配置
+- [**369**星][9m] [Py] [sibears/idagolanghelper](https://github.com/sibears/idagolanghelper) 解析Go语言编译的二进制文件中的GoLang类型信息
+- [**369**星][4m] [Py] [p1sec/qcsuper](https://github.com/p1sec/qcsuper) QCSuper is a tool communicating with Qualcomm-based phones and modems, allowing to capture raw 2G/3G/4G radio frames, among other things.
- [**369**星][7y] [Py] [moxie0/knockknock](https://github.com/moxie0/knockknock) A simple, secure, and stealthy port knocking implementation that does not use libpcap or bind to a socket interface.
-- [**369**星][2m] [Py] [dedsecinside/torbot](https://github.com/dedsecinside/torbot) Dark Web OSINT Tool
-- [**369**星][1y] [C++] [alonemonkey/iosrebook](https://github.com/alonemonkey/iosrebook) 《iOS应用逆向与安全》随书源码
-- [**368**星][5m] [xtiankisutsa/awesome-mobile-ctf](https://github.com/xtiankisutsa/awesome-mobile-ctf) This is a curated list of mobile based CTFs, write-ups and vulnerable apps. Most of them are android based due to the popularity of the platform.
-- [**368**星][2m] [Py] [tmr232/sark](https://github.com/tmr232/sark) IDAPython的高级抽象
-- [**368**星][7y] [C++] [opensecurityresearch/dllinjector](https://github.com/opensecurityresearch/dllinjector) dll injection tool that implements various methods
+- [**369**星][5m] [C] [hzqst/vmwarehardenedloader](https://github.com/hzqst/vmwarehardenedloader) Vmware Hardened VM detection mitigation loader (anti anti-vm)
+- [**369**星][1m] [Py] [emtunc/slackpirate](https://github.com/emtunc/slackpirate) Slack枚举和提取工具-从Slack工作区中提取敏感信息
+- [**368**星][2y] [Java] [zc-zh-001/shadowsocks-share](https://github.com/zc-zh-001/shadowsocks-share) 示例站点
+- [**368**星][3m] [lcatro/source-and-fuzzing](https://github.com/lcatro/Source-and-Fuzzing) 一些阅读源码和Fuzzing 的经验,涵盖黑盒与白盒测试..
+- [**368**星][1y] [C] [battelle/afl-unicorn](https://github.com/Battelle/afl-unicorn) afl-unicorn lets you fuzz any piece of binary that can be emulated by Unicorn Engine.
+- [**368**星][8d] [Ruby] [winrb/winrm](https://github.com/winrb/winrm) 在Windows中使用WinRM的功能调用原生对象的SOAP库。Ruby编写
+- [**368**星][7y] [C++] [opensecurityresearch/dllinjector](https://github.com/opensecurityresearch/dllinjector) 实现各种方法的dll注入工具
- [**368**星][2y] [Py] [lightos/credmap](https://github.com/lightos/credmap) 在若干已知网站测试用户提供的认证信息,检查是否有密码重复使用
-- [**368**星][3y] [C++] [jlospinoso/gargoyle](https://github.com/jlospinoso/gargoyle) A memory scanning evasion technique
+- [**368**星][3y] [C++] [jlospinoso/gargoyle](https://github.com/jlospinoso/gargoyle) 躲避内存扫描的技术
- [**368**星][2y] [jaybosamiya/security-notes](https://github.com/jaybosamiya/security-notes)
-- [**368**星][25d] [Py] [fox-it/bloodhound.py](https://github.com/fox-it/bloodhound.py) A Python based ingestor for BloodHound
+- [**368**星][2y] [Shell] [functionclub/yankeebbr](https://github.com/functionclub/yankeebbr) 来自Loc大佬Yankee魔改的BBR的Debian一键安装包
- [**368**星][6m] [Swift] [evermeer/passportscanner](https://github.com/evermeer/passportscanner) Scan the MRZ code of a passport and extract the firstname, lastname, passport number, nationality, date of birth, expiration date and personal numer.
-- [**368**星][2y] [C++] [breenmachine/rottenpotatong](https://github.com/breenmachine/rottenpotatong) New version of RottenPotato as a C++ DLL and standalone C++ binary - no need for meterpreter or other tools.
-- [**367**星][2y] [Java] [zc-zh-001/shadowsocks-share](https://github.com/zc-zh-001/shadowsocks-share) 示例站点
-- [**367**星][1m] [Ruby] [winrb/winrm](https://github.com/winrb/winrm) 在Windows中使用WinRM的功能调用原生对象的SOAP库。Ruby编写
-- [**367**星][9m] [Py] [sibears/idagolanghelper](https://github.com/sibears/idagolanghelper) 解析Go语言编译的二进制文件中的GoLang类型信息
-- [**367**星][4y] [Py] [rrenaud/gibberish-detector](https://github.com/rrenaud/gibberish-detector) A small program to detect gibberish using a Markov Chain
-- [**367**星][2m] [Py] [pielco11/fav-up](https://github.com/pielco11/fav-up) IP lookup from favicon using Shodan
-- [**367**星][5m] [C] [hzqst/vmwarehardenedloader](https://github.com/hzqst/vmwarehardenedloader) Vmware Hardened VM detection mitigation loader (anti anti-vm)
-- [**367**星][8d] [hkbakke/bash-insulter](https://github.com/hkbakke/bash-insulter) Insults the user when typing wrong command
-- [**367**星][11m] [Py] [crypt0s/fakedns](https://github.com/crypt0s/fakedns) A regular-expression based python MITM DNS server with support for DNS Rebinding attacks
-- [**367**星][10y] [C] [brl/obfuscated-openssh](https://github.com/brl/obfuscated-openssh)
-- [**366**星][26d] [C++] [0x09al/rdpthief](https://github.com/0x09al/rdpthief) Extracting Clear Text Passwords from mstsc.exe using API Hooking.
-- [**366**星][7m] [Py] [s0md3v/cloak](https://github.com/s0md3v/Cloak) Cloak can backdoor any python script with some tricks.
-- [**366**星][3m] [lcatro/source-and-fuzzing](https://github.com/lcatro/Source-and-Fuzzing) 一些阅读源码和Fuzzing 的经验,涵盖黑盒与白盒测试..
-- [**366**星][2y] [Py] [vysecurity/morphhta](https://github.com/vysecurity/morphHTA) morphHTA - Morphing Cobalt Strike's evil.HTA
-- [**366**星][2y] [wtsxdev/malware-analysis](https://github.com/wtsxdev/malware-analysis) List of awesome malware analysis tools and resources
-- [**366**星][3y] [Java] [ssun125/lanmitm](https://github.com/ssun125/lanmitm) Android中间人攻击测试工具
-- [**366**星][12d] [C++] [microsoft/llvm-mctoll](https://github.com/microsoft/llvm-mctoll) statically (AOT) translates (or raises) binaries to LLVM IR
-- [**366**星][2m] [AngelScript] [inquest/malware-samples](https://github.com/inquest/malware-samples) A collection of malware samples and relevant dissection information, most probably referenced from
-- [**366**星][2y] [feicong/sec_skills](https://github.com/feicong/sec_skills) 软件安全工程师技能表
-- [**366**星][1m] [Py] [emtunc/slackpirate](https://github.com/emtunc/slackpirate) Slack Enumeration and Extraction Tool - extract sensitive information from a Slack Workspace
-- [**366**星][4m] [Ruby] [digininja/pipal](https://github.com/digininja/pipal) Pipal, THE password analyser
-- [**366**星][1y] [JS] [brannondorsey/dns-rebind-toolkit](https://github.com/brannondorsey/dns-rebind-toolkit) A front-end JavaScript toolkit for creating DNS rebinding attacks.
-- [**366**星][5y] [C] [arialdomartini/morris-worm](https://github.com/arialdomartini/morris-worm) The original Morris Worm source code
-- [**365**星][25d] [Shell] [trimstray/otseca](https://github.com/trimstray/otseca) 安全审计工具, 搜索并转储系统配置
-- [**365**星][7m] [Py] [tidesec/tidefinger](https://github.com/tidesec/tidefinger) TideFinger——指纹识别小工具,汲取整合了多个web指纹库,结合了多种指纹检测方法,让指纹检测更快捷、准确。
-- [**365**星][1y] [C++] [szechyjs/dsd](https://github.com/szechyjs/dsd) Digital Speech Decoder
-- [**365**星][4m] [Py] [p1sec/qcsuper](https://github.com/p1sec/qcsuper) QCSuper is a tool communicating with Qualcomm-based phones and modems, allowing to capture raw 2G/3G/4G radio frames, among other things.
-- [**365**星][2m] [Elm] [elm-community/elm-test](https://github.com/elm-community/elm-test) moved to elm-explorations/test
-- [**365**星][21d] [chenerlich/fcl](https://github.com/chenerlich/fcl) FCL (Fileless Command Lines) - Known command lines of fileless malicious executions
-- [**365**星][2y] [Py] [cclabsinc/rfcrack](https://github.com/cclabsinc/rfcrack) A Software Defined Radio Attack Tool
-- [**365**星][2y] [TypeScript] [cazala/coin-hive-stratum](https://github.com/cazala/coin-hive-stratum) use CoinHive's JavaScript miner on any stratum pool
-- [**365**星][6m] [Py] [carnal0wnage/weirdaal](https://github.com/carnal0wnage/weirdaal) WeirdAAL (AWS Attack Library)
-- [**365**星][10m] [Py] [awslabs/aws-security-automation](https://github.com/awslabs/aws-security-automation) Collection of scripts and resources for DevSecOps and Automated Incident Response Security
-- [**365**星][2y] [Py] [ajinabraham/owasp-xenotix-xss-exploit-framework](https://github.com/ajinabraham/owasp-xenotix-xss-exploit-framework) OWASP Xenotix XSS Exploit Framework is an advanced Cross Site Scripting (XSS) vulnerability detection and exploitation framework.
-- [**364**星][2m] [Dockerfile] [onplus/v2hero](https://github.com/onplus/v2hero) All Free . Deploy V2Ray to Heroku . v2ray学习参考
-- [**364**星][7d] [Java] [zaproxy/zap-extensions](https://github.com/zaproxy/zap-extensions) OWASP ZAP Add-ons
-- [**364**星][4y] [Py] [ywolf/f-nascan](https://github.com/ywolf/f-nascan) Scanning a network asset information script
-- [**364**星][3m] [C++] [werkamsus/lilith](https://github.com/werkamsus/lilith) Lilith, The Open Source C++ Remote Administration Tool (RAT)
-- [**364**星][1y] [PowerShell] [netspi/pesecurity](https://github.com/netspi/pesecurity) 检查PE(EXE/DLL)编译选项是否有:ASLR, DEP, SafeSEH, StrongNaming, Authenticode。PowerShell模块
-- [**364**星][2m] [Py] [l4ys/lazyida](https://github.com/l4ys/lazyida) 若干快速访问功能, 扫描字符串格式化漏洞
+- [**368**星][11m] [Py] [crypt0s/fakedns](https://github.com/crypt0s/fakedns) A regular-expression based python MITM DNS server with support for DNS Rebinding attacks
+- [**367**星][3y] [Java] [ssun125/lanmitm](https://github.com/ssun125/lanmitm) Android中间人攻击测试工具
+- [**367**星][5d] [Py] [realgam3/pymultitor](https://github.com/realgam3/pymultitor) pymultitor:Python 多线程 Tor 脚本
+- [**367**星][1m] [Py] [micahflee/torbrowser-launcher](https://github.com/micahflee/torbrowser-launcher) Securely and easily download, verify, install, and launch Tor Browser in Linux
+- [**367**星][2m] [Py] [l4ys/lazyida](https://github.com/l4ys/lazyida) 若干快速访问功能, 扫描字符串格式化漏洞
查看详情
@@ -3304,950 +3479,1002 @@
+- [**367**星][8m] [PS] [ferreirasc/oscp](https://github.com/ferreirasc/oscp) oscp study
+- [**367**星][2y] [feicong/sec_skills](https://github.com/feicong/sec_skills) 软件安全工程师技能表
+- [**367**星][11m] [Py] [enablesecurity/sipvicious](https://github.com/enablesecurity/sipvicious) SIPVicious suite is a set of security tools that can be used to audit SIP based VoIP systems.
+- [**367**星][4m] [Ruby] [digininja/pipal](https://github.com/digininja/pipal) Pipal, THE password analyser
+- [**367**星][2y] [Py] [cclabsinc/rfcrack](https://github.com/cclabsinc/rfcrack) A Software Defined Radio Attack Tool
+- [**367**星][10y] [C] [brl/obfuscated-openssh](https://github.com/brl/obfuscated-openssh)
+- [**367**星][2y] [JS] [brannondorsey/dns-rebind-toolkit](https://github.com/brannondorsey/dns-rebind-toolkit) A front-end JavaScript toolkit for creating DNS rebinding attacks.
+- [**367**星][11m] [Py] [awslabs/aws-security-automation](https://github.com/awslabs/aws-security-automation) Collection of scripts and resources for DevSecOps and Automated Incident Response Security
+- [**367**星][2y] [Py] [ajinabraham/owasp-xenotix-xss-exploit-framework](https://github.com/ajinabraham/owasp-xenotix-xss-exploit-framework) OWASP Xenotix XSS Exploit Framework is an advanced Cross Site Scripting (XSS) vulnerability detection and exploitation framework.
+- [**366**星][2y] [Py] [vysecurity/morphhta](https://github.com/vysecurity/morphHTA) morphHTA - Morphing Cobalt Strike's evil.HTA
+- [**366**星][5d] [Java] [zaproxy/zap-extensions](https://github.com/zaproxy/zap-extensions) OWASP ZAP Add-ons
+- [**366**星][4y] [Py] [ywolf/f-nascan](https://github.com/ywolf/f-nascan) Scanning a network asset information script
+- [**366**星][2y] [wtsxdev/malware-analysis](https://github.com/wtsxdev/malware-analysis) List of awesome malware analysis tools and resources
+- [**366**星][1y] [PS] [netspi/pesecurity](https://github.com/netspi/pesecurity) 检查PE(EXE/DLL)编译选项是否有:ASLR, DEP, SafeSEH, StrongNaming, Authenticode。PowerShell模块
+- [**366**星][3m] [Py] [neo23x0/munin](https://github.com/neo23x0/munin) Online hash checker for Virustotal and other services
+- [**366**星][2m] [PS] [gdedrouas/exchange-ad-privesc](https://github.com/gdedrouas/exchange-ad-privesc) Exchange privilege escalations to Active Directory
+- [**366**星][2y] [PHP] [attackercan/regexp-security-cheatsheet](https://github.com/attackercan/regexp-security-cheatsheet)
+- [**365**星][3m] [Py] [pageauc/pi-timolo](https://github.com/pageauc/pi-timolo) Raspberry PI-TIMOLO ( PI-TImelapse, MOtion, LOwLight ) uses RPI picamera and python for Remote Headless Security Monitoring & Auto Sync files with rclone remote storage services. Auto Twilight Transitions and Low Light Camera Settings. This project is featured on Awesome List
+- [**365**星][29d] [Shell] [matthewpierson/1033-ota-downgrader](https://github.com/matthewpierson/1033-ota-downgrader) First ever tool to downgrade ANY iPhone 5s, ANY iPad Air and (almost any) iPad Mini 2 to 10.3.3 with OTA blobs + checkm8!
+- [**365**星][1y] [hannob/vulns](https://github.com/hannob/vulns) Named vulnerabilities and their practical impact
+- [**365**星][2m] [Elm] [elm-community/elm-test](https://github.com/elm-community/elm-test) moved to elm-explorations/test
+- [**365**星][23d] [chenerlich/fcl](https://github.com/chenerlich/fcl) FCL (Fileless Command Lines) - Known command lines of fileless malicious executions
+- [**365**星][2y] [TS] [cazala/coin-hive-stratum](https://github.com/cazala/coin-hive-stratum) use CoinHive's JavaScript miner on any stratum pool
+- [**365**星][7m] [Py] [carnal0wnage/weirdaal](https://github.com/carnal0wnage/weirdaal) WeirdAAL (AWS Attack Library)
+- [**365**星][5y] [C] [arialdomartini/morris-worm](https://github.com/arialdomartini/morris-worm) The original Morris Worm source code
+- [**364**星][9m] [C++] [tripwire/tripwire-open-source](https://github.com/tripwire/tripwire-open-source) Open Source Tripwire®
+- [**364**星][1y] [C++] [szechyjs/dsd](https://github.com/szechyjs/dsd) Digital Speech Decoder
- [**364**星][2y] [C] [k0keoyo/kdriver-fuzzer](https://github.com/k0keoyo/kdriver-fuzzer)
-- [**364**星][8m] [PowerShell] [ferreirasc/oscp](https://github.com/ferreirasc/oscp) oscp study
-- [**364**星][11m] [Py] [enablesecurity/sipvicious](https://github.com/enablesecurity/sipvicious) SIPVicious suite is a set of security tools that can be used to audit SIP based VoIP systems.
-- [**364**星][2y] [PHP] [attackercan/regexp-security-cheatsheet](https://github.com/attackercan/regexp-security-cheatsheet)
-- [**363**星][1y] [C] [battelle/afl-unicorn](https://github.com/Battelle/afl-unicorn) afl-unicorn lets you fuzz any piece of binary that can be emulated by Unicorn Engine.
+- [**364**星][10m] [Go] [frichetten/cve-2019-5736-poc](https://github.com/frichetten/cve-2019-5736-poc) PoC for CVE-2019-5736
+- [**363**星][2y] [ObjC] [wzqcongcong/macsubstrate](https://github.com/wzqcongcong/macsubstrate) Substrate for macOS
+- [**363**星][1y] [Shell] [writeups/ios](https://github.com/writeups/ios) Here you can find write ups for iOS Vulnerabilities that have been released.
- [**363**星][10m] [C++] [thosakwe/t2b](https://github.com/thosakwe/t2b) A wicked-powerful text macro language for building binary files.
+- [**363**星][1m] [C++] [steven-michaud/hookcase](https://github.com/steven-michaud/hookcase) Tool for reverse engineering macOS/OS X
+- [**363**星][8d] [Go] [sslmate/certspotter](https://github.com/sslmate/certspotter) Certificate Transparency Log Monitor
+- [**363**星][14d] [C#] [security-code-scan/security-code-scan](https://github.com/security-code-scan/security-code-scan) Vulnerability Patterns Detector for C# and VB.NET
- [**363**星][2y] [Py] [rc0r/afl-utils](https://github.com/rc0r/afl-utils) Utilities for automated crash sample processing/analysis, easy afl-fuzz job management and corpus optimization
- [**363**星][2y] [petoolse/petools](https://github.com/petoolse/petools) PE Tools - Portable executable (PE) manipulation toolkit
-- [**363**星][3m] [Py] [pageauc/pi-timolo](https://github.com/pageauc/pi-timolo) Raspberry PI-TIMOLO ( PI-TImelapse, MOtion, LOwLight ) uses RPI picamera and python for Remote Headless Security Monitoring & Auto Sync files with rclone remote storage services. Auto Twilight Transitions and Low Light Camera Settings. This project is featured on Awesome List
-- [**363**星][3m] [Py] [neo23x0/munin](https://github.com/neo23x0/munin) Online hash checker for Virustotal and other services
-- [**363**星][1m] [Py] [micahflee/torbrowser-launcher](https://github.com/micahflee/torbrowser-launcher) Securely and easily download, verify, install, and launch Tor Browser in Linux
-- [**363**星][2m] [PowerShell] [gdedrouas/exchange-ad-privesc](https://github.com/gdedrouas/exchange-ad-privesc) Exchange privilege escalations to Active Directory
+- [**363**星][5y] [PHP] [onesourcecat/phpvulhunter](https://github.com/onesourcecat/phpvulhunter) A tool that can scan php vulnerabilities automatically using static analysis methods
+- [**363**星][2y] [Shell] [m4sc3r4n0/evil-droid](https://github.com/m4sc3r4n0/evil-droid) 创建和生成并嵌入APK Payload,用来渗透android平台
+- [**363**星][5d] [C++] [istio/proxy](https://github.com/istio/proxy) a microservice proxy that can be used on the client and server side, and forms a microservice mesh
+- [**363**星][2y] [Erlang] [ernw/ss7maper](https://github.com/ernw/ss7maper) 渗透测试工具包
+- [**363**星][1y] [Go] [alexkohler/prealloc](https://github.com/alexkohler/prealloc) prealloc is a Go static analysis tool to find slice declarations that could potentially be preallocated.
- [**363**星][11m] [Py] [ajinabraham/xenotix-python-keylogger](https://github.com/ajinabraham/xenotix-python-keylogger) Xenotix Python Keylogger for Windows.
-- [**362**星][4m] [Py] [xuanhun/pythonhackingbook1](https://github.com/xuanhun/pythonhackingbook1) Python黑客编程之极速入门
-- [**362**星][2y] [Objective-C] [wzqcongcong/macsubstrate](https://github.com/wzqcongcong/macsubstrate) Substrate for macOS
-- [**362**星][1y] [Shell] [writeups/ios](https://github.com/writeups/ios) Here you can find write ups for iOS Vulnerabilities that have been released.
-- [**362**星][9m] [C++] [tripwire/tripwire-open-source](https://github.com/tripwire/tripwire-open-source) Open Source Tripwire®
-- [**362**星][7d] [Go] [sslmate/certspotter](https://github.com/sslmate/certspotter) Certificate Transparency Log Monitor
-- [**362**星][19d] [Py] [skavngr/rapidscan](https://github.com/skavngr/rapidscan) | The Multi-Tool Web Vulnerability Scanner.
-- [**362**星][12d] [C#] [security-code-scan/security-code-scan](https://github.com/security-code-scan/security-code-scan) Vulnerability Patterns Detector for C# and VB.NET
+- [**362**星][4d] [CSS] [d2-projects/folder-explorer](https://github.com/d2-projects/folder-explorer) 分析文件目录,统计数据并以树形结构和图表的形式展示结果,也可以导出多种格式留存 | Analyse your folders and display the results in tree and statistical charts. If necessary, this software can help you export multiple file formats
+- [**362**星][10m] [Py] [secynic/ipwhois](https://github.com/secynic/ipwhois) 检索和解析IPv4和IPv6地址的Whois数据
- [**362**星][2y] [Py] [roglew/pappy-proxy](https://github.com/roglew/pappy-proxy) An intercepting proxy for web application testing
-- [**362**星][8d] [C++] [ondrejbudai/hidviz](https://github.com/ondrejbudai/hidviz) 深入分析 USB HID设备通信的工具
-- [**362**星][12m] [hannob/vulns](https://github.com/hannob/vulns) Named vulnerabilities and their practical impact
+- [**362**星][2m] [C] [rgov/thunderbolt3unblocker](https://github.com/rgov/thunderbolt3unblocker) Enable unsupported Thunderbolt 3 peripherals on macOS
- [**362**星][3y] [C] [gbrindisi/malware](https://github.com/gbrindisi/malware) malware source codes
-- [**362**星][10m] [Go] [frichetten/cve-2019-5736-poc](https://github.com/frichetten/cve-2019-5736-poc) PoC for CVE-2019-5736
-- [**362**星][2y] [Erlang] [ernw/ss7maper](https://github.com/ernw/ss7maper) SS7 MAP (pen-)testing toolkit. DISCONTINUED REPO, please use:
-- [**361**星][1m] [C++] [steven-michaud/hookcase](https://github.com/steven-michaud/hookcase) Tool for reverse engineering macOS/OS X
-- [**361**星][2m] [C] [rgov/thunderbolt3unblocker](https://github.com/rgov/thunderbolt3unblocker) Enable unsupported Thunderbolt 3 peripherals on macOS
-- [**361**星][2y] [Shell] [m4sc3r4n0/evil-droid](https://github.com/m4sc3r4n0/evil-droid)
+- [**362**星][9m] [fr0gger/awesome-ida-x64-olly-plugin](https://github.com/fr0gger/awesome-ida-x64-olly-plugin) IDA x64DBG OllyDBG 插件收集
+- [**362**星][5m] [Makefile] [crifan/android_app_security_crack](https://github.com/crifan/android_app_security_crack) 安卓应用的安全和破解
+- [**362**星][2y] [bluscreenofjeff/aggressorscripts](https://github.com/bluscreenofjeff/aggressorscripts) Aggressor scripts for use with Cobalt Strike 3.0+
+- [**361**星][4y] [Go] [inconshreveable/srvdir](https://github.com/inconshreveable/srvdir) Expose any folder as an HTTPS fileserver
+- [**361**星][3y] [C] [fsecurelabs/kernelfuzzer](https://github.com/FSecureLABS/KernelFuzzer) Cross Platform Kernel Fuzzer Framework
+- [**361**星][21d] [Py] [tenable/poc](https://github.com/tenable/poc) 漏洞PoC
+- [**361**星][9y] [C] [psgroove/psgroove](https://github.com/psgroove/psgroove) an open-source reimplementation of the psjailbreak exploit for AT90USB and related microcontrollers.
+- [**361**星][2m] [Java] [patrickfav/uber-apk-signer](https://github.com/patrickfav/uber-apk-signer) A cli tool that helps signing and zip aligning single or multiple Android application packages (APKs) with either debug or provided release certificates. It supports v1, v2 and v3 Android signing scheme has an embedded debug keystore and auto verifies after signing.
+- [**360**星][4m] [Py] [visipedia/inat_comp](https://github.com/visipedia/inat_comp) iNaturalist competition details
- [**360**星][3y] [C] [rafael-santiago/pig](https://github.com/rafael-santiago/pig) A Linux packet crafting tool.
-- [**360**星][4y] [mozilla/minion](https://github.com/mozilla/minion) a security testing framework built by Mozilla to bridge the gap between developers and security testers.
-- [**360**星][2y] [bluscreenofjeff/aggressorscripts](https://github.com/bluscreenofjeff/aggressorscripts) Aggressor scripts for use with Cobalt Strike 3.0+
+- [**360**星][7m] [Py] [orangetw/awesome-jenkins-rce-2019](https://github.com/orangetw/awesome-jenkins-rce-2019) There is no pre-auth RCE in Jenkins since May 2017, but this is the one!
+- [**360**星][1m] [Go] [optiopay/klar](https://github.com/optiopay/klar) Integration of Clair and Docker Registry
+- [**360**星][4y] [mozilla/minion](https://github.com/mozilla/minion) 由Mozilla构建的安全测试框架,用于弥合开发人员和安全测试人员之间的鸿沟。
+- [**360**星][10d] [Py] [davidtavarez/pwndb](https://github.com/davidtavarez/pwndb) Search for leaked credentials
+- [**360**星][14d] [Py] [checkpointsw/karta](https://github.com/checkpointsw/karta) source code assisted fast binary matching plugin for IDA
- [**360**星][2m] [Py] [a0rtega/metame](https://github.com/a0rtega/metame) metame is a metamorphic code engine for arbitrary executables
-- [**359**星][3y] [C] [fsecurelabs/kernelfuzzer](https://github.com/FSecureLABS/KernelFuzzer) Cross Platform Kernel Fuzzer Framework
+- [**359**星][3y] [C] [xiaoweime/wprotect](https://github.com/xiaoweime/wprotect) uses code-virtualization technic to protect binary from being reverse-engineered or unwanted modified.
- [**359**星][4m] [C++] [wbenny/pdbex](https://github.com/wbenny/pdbex) pdbex is a utility for reconstructing structures and unions from the PDB into compilable C headers
-- [**359**星][10m] [Py] [secynic/ipwhois](https://github.com/secynic/ipwhois) Retrieve and parse whois data for IPv4 and IPv6 addresses
+- [**359**星][2y] [udpsec/awesome-vpn](https://github.com/udpsec/awesome-vpn) 科学上网的有趣项目集锦,欢迎大家pr自己喜欢的项目到这里。
- [**359**星][4y] [HTML] [mubix/post-exploitation-wiki](https://github.com/mubix/post-exploitation-wiki) Post Exploitation Wiki
+- [**359**星][1m] [C#] [andrew-schofield/keepass2-haveibeenpwned](https://github.com/andrew-schofield/keepass2-haveibeenpwned) Simple Have I Been Pwned checker for KeePass
- [**358**星][4y] [Py] [bugscanteam/hackhttp](https://github.com/bugscanteam/hackhttp) Hackhttp is an HTTP library, written in Python.
-- [**358**星][3m] [C++] [googleprojectzero/brokentype](https://github.com/googleprojectzero/BrokenType) TrueType and OpenType font fuzzing toolset
-- [**358**星][2y] [udpsec/awesome-vpn](https://github.com/udpsec/awesome-vpn) 科学上网的有趣项目集锦,欢迎大家pr自己喜欢的项目到这里。
+- [**358**星][4m] [C++] [googleprojectzero/brokentype](https://github.com/googleprojectzero/BrokenType) TrueType and OpenType font fuzzing toolset
- [**358**星][4m] [C] [the-cracker-technology/andrax-mobile-pentest](https://github.com/the-cracker-technology/andrax-mobile-pentest) ANDRAX The first and unique Penetration Testing platform for Android smartphones
-- [**358**星][19d] [Py] [tenable/poc](https://github.com/tenable/poc) Proof of Concepts
-- [**358**星][7m] [Py] [orangetw/awesome-jenkins-rce-2019](https://github.com/orangetw/awesome-jenkins-rce-2019) There is no pre-auth RCE in Jenkins since May 2017, but this is the one!
-- [**358**星][9m] [fr0gger/awesome-ida-x64-olly-plugin](https://github.com/fr0gger/awesome-ida-x64-olly-plugin) IDA x64DBG OllyDBG 插件收集
-- [**358**星][7d] [fkromer/awesome-ros2](https://github.com/fkromer/awesome-ros2) The Robot Operating System Version 2.0 is awesome!
-- [**358**星][8d] [Py] [davidtavarez/pwndb](https://github.com/davidtavarez/pwndb) Search for leaked credentials
+- [**358**星][6m] [C#] [technitiumsoftware/dnsserver](https://github.com/technitiumsoftware/dnsserver) Technitium DNS Server
+- [**358**星][3d] [Java] [spring-cloud/spring-cloud-commons](https://github.com/spring-cloud/spring-cloud-commons) Common classes used in different Spring Cloud implementations
+- [**358**星][3y] [Py] [sangaline/advanced-web-scraping-tutorial](https://github.com/sangaline/advanced-web-scraping-tutorial) The Zipru scraper developed in the Advanced Web Scraping Tutorial.
- [**358**星][5y] [C] [crmulliner/ddi](https://github.com/crmulliner/ddi) Dynamic Dalvik Instrumentation Toolkit
-- [**358**星][12d] [Py] [checkpointsw/karta](https://github.com/checkpointsw/karta) source code assisted fast binary matching plugin for IDA
- [**358**星][2y] [C++] [can1357/cve-2018-8897](https://github.com/can1357/cve-2018-8897) Arbitrary code execution with kernel privileges using CVE-2018-8897.
-- [**357**星][4m] [Py] [visipedia/inat_comp](https://github.com/visipedia/inat_comp) iNaturalist competition details
-- [**357**星][3y] [Py] [spender-sandbox/cuckoo-modified](https://github.com/spender-sandbox/cuckoo-modified) Modified edition of cuckoo
-- [**357**星][8d] [C#] [sonarsource/sonar-dotnet](https://github.com/sonarsource/sonar-dotnet) Code analyzer for C# and VB.NET projects
-- [**357**星][21d] [Objective-C] [prateek147/dvia](https://github.com/prateek147/dvia) Damn Vulnerable iOS App (DVIA) is an iOS application that is damn vulnerable. Its main goal is to provide a platform to mobile security enthusiasts/professionals or students to test their iOS penetration testing skills in a legal environment. This application covers all the common vulnerabilities found in iOS applications (following OWASP top 10…
+- [**358**星][4y] [Py] [ahhh/reverse_dns_shell](https://github.com/ahhh/reverse_dns_shell) A python reverse shell that uses DNS as the c2 channel
+- [**357**星][23d] [JS] [saucxs/watermark-dom](https://github.com/saucxs/watermark-dom) watermark.js是网站的水印组件,降低数据泄密风险。1、版本,2、水印插件-使用,3、水印插件-testTool(测试工具),4、内置方法,5、支持各种属性配置使用,等等。欢迎访问:
+- [**357**星][3y] [Py] [spender-sandbox/cuckoo-modified](https://github.com/spender-sandbox/cuckoo-modified) cuckoo改版
+- [**357**星][6d] [C#] [sonarsource/sonar-dotnet](https://github.com/sonarsource/sonar-dotnet) 用于C#和VB.NET语言的静态代码分析器,用作SonarQube和SonarCloud平台的扩展。
+- [**357**星][11d] [C] [rfk/pyenchant](https://github.com/rfk/pyenchant) spellchecking library for python
+- [**357**星][23d] [ObjC] [prateek147/dvia](https://github.com/prateek147/dvia) Damn Vulnerable iOS App (DVIA) is an iOS application that is damn vulnerable. Its main goal is to provide a platform to mobile security enthusiasts/professionals or students to test their iOS penetration testing skills in a legal environment. This application covers all the common vulnerabilities found in iOS applications (following OWASP top 10…
+- [**357**星][14d] [Kotlin] [portswigger/turbo-intruder](https://github.com/portswigger/turbo-intruder) Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results.
- [**357**星][2y] [JS] [kamikat/tttfi](https://github.com/kamikat/tttfi) IFTTT 中间件。从 IFTTT webhook 中提取数据传递给脚本,并将脚本的输出发送回 IFTTT。脚本语言支持 Python/Perl/Go。
+- [**357**星][2m] [Java] [hubspot/jinjava](https://github.com/hubspot/jinjava) Jinja template engine for Java
+- [**357**星][3y] [C++] [gamehackingbook/gamehackingcode](https://github.com/gamehackingbook/gamehackingcode) 《游戏黑客:为在线游戏开发自主机器人》一书的代码。
+- [**357**星][9d] [fkromer/awesome-ros2](https://github.com/fkromer/awesome-ros2) The Robot Operating System Version 2.0 is awesome!
- [**357**星][7m] [PHP] [fate0/prvd](https://github.com/fate0/prvd) PHP Runtime Vulnerability Detection
- [**357**星][2m] [Py] [denyhosts/denyhosts](https://github.com/denyhosts/denyhosts) Automated host blocking from SSH brute force attacks
-- [**357**星][5m] [Makefile] [crifan/android_app_security_crack](https://github.com/crifan/android_app_security_crack) 安卓应用的安全和破解
+- [**357**星][5m] [Java] [bit4woo/domain_hunter](https://github.com/bit4woo/domain_hunter) A Burp Suite Extender that try to find sub-domain, similar-domain and related-domain of an organization, not only a domain! 利用burp收集整个企业、组织的域名(不仅仅是单个主域名)的插件
- [**357**星][4m] [Py] [a3sal0n/cyberthreathunting](https://github.com/a3sal0n/cyberthreathunting) A collection of resources for Threat Hunters
-- [**356**星][4y] [Py] [aoncyberlabs/evilabigail](https://github.com/AonCyberLabs/EvilAbigail) Automated Linux evil maid attack
-- [**356**星][3y] [C] [xiaoweime/wprotect](https://github.com/xiaoweime/wprotect) uses code-virtualization technic to protect binary from being reverse-engineered or unwanted modified.
+- [**356**星][4y] [Py] [mitmproxy/pathod](https://github.com/mitmproxy/pathod)
+- [**356**星][4y] [Py] [aoncyberlabs/evilabigail](https://github.com/AonCyberLabs/EvilAbigail) 自动化Linux evil maid 攻击
+- [**356**星][5m] [Py] [xtiankisutsa/mara_framework](https://github.com/xtiankisutsa/mara_framework) MARA is a Mobile Application Reverse engineering and Analysis Framework. It is a toolkit that puts together commonly used mobile application reverse engineering and analysis tools to assist in testing mobile applications against the OWASP mobile security threats.
- [**356**星][8m] [C] [vulnreproduction/linuxflaw](https://github.com/vulnreproduction/linuxflaw) This repo records all the vulnerabilities of linux software I have reproduced in my local workspace
-- [**356**星][1y] [C] [rhdunn/espeak](https://github.com/rhdunn/espeak) eSpeak NG is an open source speech synthesizer that supports 101 languages and accents.
-- [**356**星][9d] [C] [rfk/pyenchant](https://github.com/rfk/pyenchant) spellchecking library for python
-- [**356**星][2m] [Java] [patrickfav/uber-apk-signer](https://github.com/patrickfav/uber-apk-signer) A cli tool that helps signing and zip aligning single or multiple Android application packages (APKs) with either debug or provided release certificates. It supports v1, v2 and v3 Android signing scheme has an embedded debug keystore and auto verifies after signing.
+- [**356**星][2y] [Py] [ustayready/credking](https://github.com/ustayready/credking) Password spraying using AWS Lambda for IP rotation
+- [**356**星][5m] [C++] [trendmicro/tlsh](https://github.com/trendmicro/tlsh) a fuzzy matching library
+- [**356**星][8d] [C] [rhdunn/espeak](https://github.com/rhdunn/espeak) eSpeak NG is an open source speech synthesizer that supports 101 languages and accents.
- [**356**星][2y] [Makefile] [opensecurityresearch/hostapd-wpe](https://github.com/opensecurityresearch/hostapd-wpe) Modified hostapd to facilitate AP impersonation attacks
+- [**356**星][6m] [Go] [lukechampine/jsteg](https://github.com/lukechampine/jsteg) JPEG steganography
+- [**356**星][2m] [Py] [hell0w0rld0/github-hunter](https://github.com/hell0w0rld0/github-hunter) This tool is for sensitive information searching on Github - The Fast Version here:
+- [**356**星][1y] [C] [emptymonkey/revsh](https://github.com/emptymonkey/revsh) A reverse shell with terminal support, data tunneling, and advanced pivoting capabilities.
- [**356**星][5y] [Py] [ebranca/owasp-pysec](https://github.com/ebranca/owasp-pysec) OWASP Python Security Project
-- [**356**星][5m] [Java] [bit4woo/domain_hunter](https://github.com/bit4woo/domain_hunter) A Burp Suite Extender that try to find sub-domain, similar-domain and related-domain of an organization, not only a domain! 利用burp收集整个企业、组织的域名(不仅仅是单个主域名)的插件
-- [**356**星][1m] [C#] [andrew-schofield/keepass2-haveibeenpwned](https://github.com/andrew-schofield/keepass2-haveibeenpwned) Simple Have I Been Pwned checker for KeePass
-- [**356**星][4y] [Py] [ahhh/reverse_dns_shell](https://github.com/ahhh/reverse_dns_shell) A python reverse shell that uses DNS as the c2 channel
-- [**355**星][7d] [Java] [spring-cloud/spring-cloud-commons](https://github.com/spring-cloud/spring-cloud-commons) Common classes used in different Spring Cloud implementations
-- [**355**星][3m] [snyk/zip-slip-vulnerability](https://github.com/snyk/zip-slip-vulnerability) Zip Slip Vulnerability (Arbitrary file write through archive extraction)
+- [**356**星][2m] [Py] [chenjj/corscanner](https://github.com/chenjj/corscanner) Fast CORS misconfiguration vulnerabilities scanner
+- [**355**星][17d] [Shell] [dnscrypt/dnscrypt-server-docker](https://github.com/dnscrypt/dnscrypt-server-docker) A Docker image for a non-censoring, non-logging, DNSSEC-capable, DNSCrypt-enabled DNS resolver
+- [**355**星][17d] [Java] [wycm/selenium-geetest-crack](https://github.com/wycm/selenium-geetest-crack) selenium破解滑动验证码
- [**355**星][2y] [Py] [scalingexcellence/scrapybook](https://github.com/scalingexcellence/scrapybook) Scrapy Book Code
-- [**355**星][3y] [Py] [sangaline/advanced-web-scraping-tutorial](https://github.com/sangaline/advanced-web-scraping-tutorial) The Zipru scraper developed in the Advanced Web Scraping Tutorial.
-- [**355**星][5y] [PHP] [onesourcecat/phpvulhunter](https://github.com/onesourcecat/phpvulhunter) A tool that can scan php vulnerabilities automatically using static analysis methods
-- [**355**星][2m] [Py] [hell0w0rld0/github-hunter](https://github.com/hell0w0rld0/github-hunter) This tool is for sensitive information searching on Github - The Fast Version here:
-- [**355**星][1y] [C] [emptymonkey/revsh](https://github.com/emptymonkey/revsh) A reverse shell with terminal support, data tunneling, and advanced pivoting capabilities.
+- [**355**星][1m] [C++] [openvpn/openvpn3](https://github.com/openvpn/openvpn3) OpenVPN 3 is a C++ class library that implements the functionality of an OpenVPN client, and is protocol-compatible with the OpenVPN 2.x branch.
+- [**355**星][3y] [Py] [gallopsled/pwntools-write-ups](https://github.com/gallopsled/pwntools-write-ups) A colleciton of CTF write-ups all using pwntools
- [**355**星][3y] [JS] [antimalware/manul](https://github.com/antimalware/manul) Antimalware tool for websites
-- [**354**星][15d] [Shell] [dnscrypt/dnscrypt-server-docker](https://github.com/dnscrypt/dnscrypt-server-docker) A Docker image for a non-censoring, non-logging, DNSSEC-capable, DNSCrypt-enabled DNS resolver
-- [**354**星][5m] [Py] [xtiankisutsa/mara_framework](https://github.com/xtiankisutsa/mara_framework) MARA is a Mobile Application Reverse engineering and Analysis Framework. It is a toolkit that puts together commonly used mobile application reverse engineering and analysis tools to assist in testing mobile applications against the OWASP mobile security threats.
+- [**355**星][2m] [C#] [3f/dllexport](https://github.com/3f/dllexport) .NET DllExport
+- [**354**星][4m] [C] [intel/libipt](https://github.com/intel/libipt) libipt - an Intel(R) Processor Trace decoder library
+- [**354**星][7m] [PHP] [s0md3v/nano](https://github.com/s0md3v/nano) PHP Webshell家族
+- [**354**星][2m] [JS] [fsecurelabs/dref](https://github.com/FSecureLABS/dref) DNS 重绑定利用框架
- [**354**星][3y] [virajkulkarni14/webdevelopersecuritychecklist](https://github.com/virajkulkarni14/webdevelopersecuritychecklist) A checklist of important security issues you should consider when creating a web application.
-- [**354**星][2y] [Py] [ustayready/credking](https://github.com/ustayready/credking) Password spraying using AWS Lambda for IP rotation
-- [**354**星][5m] [C++] [trendmicro/tlsh](https://github.com/trendmicro/tlsh) a fuzzy matching library
+- [**354**星][3m] [snyk/zip-slip-vulnerability](https://github.com/snyk/zip-slip-vulnerability) Zip Slip Vulnerability (Arbitrary file write through archive extraction)
+- [**354**星][8y] [Py] [openrce/pydbg](https://github.com/openrce/pydbg) A pure-python win32 debugger interface.
+- [**354**星][2m] [C] [nccgroup/phantap](https://github.com/nccgroup/phantap) Phantom Tap (PhanTap) - an ‘invisible’ network tap aimed at red teams
+- [**354**星][8d] [Py] [lockgit/hacking](https://github.com/lockgit/hacking) Hacking工具收集
+- [**354**星][2y] [Shell] [koenbuyens/kalirouter](https://github.com/koenbuyens/kalirouter) 将 KaliLinux 主机转变为路由器,使用 Wireshark 记录所有的网络流量,同时将 HTTP/HTTPS 流量发送到其他主机的拦截代理(例如 BurpSuite)
- [**354**星][1y] [Py] [i3visio/osrframework](https://github.com/i3visio/osrframework) 开源研究框架,提供 API 和工具执行更加精确的在线研究,例如用户名检查、DNS lookup、信息泄露研究、深度 web 研究、正则表达式提取等。
-- [**354**星][2m] [Java] [hubspot/jinjava](https://github.com/hubspot/jinjava) Jinja template engine for Java
-- [**353**星][4m] [C] [intel/libipt](https://github.com/intel/libipt) libipt - an Intel(R) Processor Trace decoder library
-- [**353**星][8y] [Py] [openrce/pydbg](https://github.com/openrce/pydbg) A pure-python win32 debugger interface.
-- [**353**星][18d] [C] [liji32/sameboy](https://github.com/liji32/sameboy) Game Boy and Game Boy Color emulator written in C
+- [**354**星][2d] [C#] [digitalruby/ipban](https://github.com/digitalruby/ipban) 监视Windows/Linux系统的登录失败和不良行为,并封禁对应的IP地址。高度可配置,精简且功能强大。
+- [**354**星][3y] [C] [adtac/fssb](https://github.com/adtac/fssb) A filesystem sandbox for Linux using syscall intercepts.
+- [**353**星][16d] [Go] [quay/jwtproxy](https://github.com/quay/jwtproxy) An HTTP-Proxy that adds AuthN through JWTs
+- [**353**星][13d] [TeX] [vlsergey/infosec](https://github.com/vlsergey/infosec) MIPT无线电工程与控制系统部信息保护教科书
+- [**353**星][2d] [Java] [portswigger/http-request-smuggler](https://github.com/PortSwigger/http-request-smuggler) an extension for Burp Suite designed to help you launch HTTP Request Smuggling attack
+- [**353**星][2d] [Shell] [ukncsc/lme](https://github.com/ukncsc/lme) Logging Made Easy
- [**353**星][5m] [Py] [hasherezade/malware_analysis](https://github.com/hasherezade/malware_analysis) Various snippets created during malware analysis
+- [**353**星][15d] [Py] [gosecure/pyrdp](https://github.com/gosecure/pyrdp) RDP man-in-the-middle (mitm) and library for Python 3 with the ability to watch connections live or after the fact
- [**353**星][2y] [C++] [glsl-debugger/glsl-debugger](https://github.com/glsl-debugger/glsl-debugger) GLSL source level debugger.
-- [**353**星][3y] [Py] [gallopsled/pwntools-write-ups](https://github.com/gallopsled/pwntools-write-ups) A colleciton of CTF write-ups all using pwntools
- [**353**星][1m] [Ruby] [dev-sec/chef-os-hardening](https://github.com/dev-sec/chef-os-hardening) This chef cookbook provides numerous security-related configurations, providing all-round base protection.
-- [**353**星][3y] [C] [adtac/fssb](https://github.com/adtac/fssb) A filesystem sandbox for Linux using syscall intercepts.
+- [**353**星][7d] [Py] [depthsecurity/armory](https://github.com/depthsecurity/armory) Armory is a tool meant to take in a lot of external and discovery data from a lot of tools, add it to a database and correlate all of related information.
+- [**353**星][16d] [Go] [quay/jwtproxy](https://github.com/quay/jwtproxy) An HTTP-Proxy that adds AuthN through JWTs
- [**352**星][2m] [C] [tboox/vm86](https://github.com/tboox/vm86) a very simple and lightweight x86 virtual machine
-- [**352**星][7m] [PHP] [s0md3v/nano](https://github.com/s0md3v/nano) PHP Webshell家族
-- [**352**星][1m] [JS] [fsecurelabs/dref](https://github.com/FSecureLABS/dref) DNS 重绑定利用框架
-- [**352**星][11d] [Kotlin] [portswigger/turbo-intruder](https://github.com/portswigger/turbo-intruder) Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results.
-- [**352**星][2m] [C] [nccgroup/phantap](https://github.com/nccgroup/phantap) Phantom Tap (PhanTap) - an ‘invisible’ network tap aimed at red teams
-- [**352**星][3y] [Objective-C] [naituw/hackingfacebook](https://github.com/naituw/hackingfacebook) Kill Facebook for iOS's SSL Pinning
-- [**352**星][3m] [Shell] [maldevel/pentestkit](https://github.com/maldevel/pentestkit) Useful tools and scripts used during Penetration Tests.
-- [**352**星][6m] [Go] [lukechampine/jsteg](https://github.com/lukechampine/jsteg) JPEG steganography
-- [**352**星][2y] [Shell] [koenbuyens/kalirouter](https://github.com/koenbuyens/kalirouter) 将 KaliLinux 主机转变为路由器,使用 Wireshark 记录所有的网络流量,同时将 HTTP/HTTPS 流量发送到其他主机的拦截代理(例如 BurpSuite)
-- [**351**星][14d] [Go] [quay/jwtproxy](https://github.com/quay/jwtproxy) An HTTP-Proxy that adds AuthN through JWTs
+- [**352**星][2y] [C++] [zerosum0x0/winrepl](https://github.com/zerosum0x0/winrepl) 实现了“读取->执行->打印 循环”的Windows汇编代码,x86+x64
+- [**352**星][5m] [Makefile] [xdite/internet-security](https://github.com/xdite/internet-security) 互联网资安风控实战
+- [**352**星][2d] [wenzel/awesome-virtualization](https://github.com/wenzel/awesome-virtualization) Collection of resources about Virtualization
+- [**352**星][3y] [ObjC] [naituw/hackingfacebook](https://github.com/naituw/hackingfacebook) Kill Facebook for iOS's SSL Pinning
+- [**352**星][3m] [Shell] [maldevel/pentestkit](https://github.com/maldevel/pentestkit) 渗透脚本和工具
+- [**352**星][3d] [C#] [leaguesandbox/gameserver](https://github.com/leaguesandbox/gameserver) League Sandbox's Game Server
+- [**352**星][4y] [fireeye/iocs](https://github.com/fireeye/iocs) FireEye Publicly Shared Indicators of Compromise (IOCs)
+- [**351**星][2m] [Shell] [vitalysim/totalrecon](https://github.com/vitalysim/totalrecon) TotalRecon installs all the recon tools you need
+- [**351**星][10d] [hackerschoice/thc-tesla-powerwall2-hack](https://github.com/hackerschoice/thc-tesla-powerwall2-hack) TESLA PowerWall 2安全雪茄
+- [**351**星][2m] [C#] [vletoux/pingcastle](https://github.com/vletoux/pingcastle) Get Active Directory Security at 80% in 20% of the time
+- [**351**星][6m] [Java] [syvaidya/openstego](https://github.com/syvaidya/openstego) OpenStego is a steganography application that provides two functionalities: a) Data Hiding: It can hide any data within a cover file (e.g. images). b) Watermarking: Watermarking files (e.g. images) with an invisible signature. It can be used to detect unauthorized file copying.
+- [**351**星][1m] [C++] [sslab-gatech/qsym](https://github.com/sslab-gatech/qsym) A Practical Concolic Execution Engine Tailored for Hybrid Fuzzing
- [**351**星][6y] [C] [rentzsch/mach_override](https://github.com/rentzsch/mach_override) runtime function overriding for Mac OS X
- [**351**星][2y] [TeX] [plailect/keyshuffling](https://github.com/plailect/keyshuffling) Keyshuffling Attack for Persistent Early Code Execution in the Nintendo 3DS Secure Bootchain
- [**351**星][8m] [C] [p0cl4bs/kadimus](https://github.com/p0cl4bs/kadimus) Kadimus is a tool to check sites to lfi vulnerability , and also exploit it...
-- [**351**星][14d] [Py] [lockgit/hacking](https://github.com/lockgit/hacking) hacking is a kind of spirit !
-- [**351**星][11d] [C#] [leaguesandbox/gameserver](https://github.com/leaguesandbox/gameserver) League Sandbox's Game Server
-- [**351**星][13d] [Py] [gosecure/pyrdp](https://github.com/gosecure/pyrdp) RDP man-in-the-middle (mitm) and library for Python 3 with the ability to watch connections live or after the fact
-- [**351**星][3y] [C++] [gamehackingbook/gamehackingcode](https://github.com/gamehackingbook/gamehackingcode) Example code for the book
-- [**351**星][4y] [fireeye/iocs](https://github.com/fireeye/iocs) FireEye Publicly Shared Indicators of Compromise (IOCs)
-- [**351**星][23d] [Py] [depthsecurity/armory](https://github.com/depthsecurity/armory) Armory is a tool meant to take in a lot of external and discovery data from a lot of tools, add it to a database and correlate all of related information.
-- [**351**星][14d] [Go] [quay/jwtproxy](https://github.com/quay/jwtproxy) An HTTP-Proxy that adds AuthN through JWTs
-- [**351**星][2m] [Py] [chenjj/corscanner](https://github.com/chenjj/corscanner) Fast CORS misconfiguration vulnerabilities scanner
-- [**350**星][2m] [Shell] [vitalysim/totalrecon](https://github.com/vitalysim/totalrecon) TotalRecon installs all the recon tools you need
-- [**350**星][11d] [TeX] [vlsergey/infosec](https://github.com/vlsergey/infosec) Учебное пособие по защите информации кафедры радиотехники и систем управления МФТИ
-- [**350**星][2y] [C++] [zerosum0x0/winrepl](https://github.com/zerosum0x0/winrepl) 实现了“读取->执行->打印 循环”的Windows汇编代码,x86+x64
-- [**350**星][15d] [Java] [wycm/selenium-geetest-crack](https://github.com/wycm/selenium-geetest-crack) selenium破解滑动验证码
-- [**350**星][11d] [Shell] [ukncsc/lme](https://github.com/ukncsc/lme) Logging Made Easy
+- [**351**星][5m] [b3nac/android-reports-and-resources](https://github.com/b3nac/android-reports-and-resources) A big list of Android Hackerone disclosed reports and other resources.
+- [**351**星][12m] [Py] [aancw/belati](https://github.com/aancw/belati) The Traditional Swiss Army Knife for OSINT
+- [**350**星][7m] [C] [turing-technician/fasthook](https://github.com/turing-technician/fasthook) Android ART Hook
+- [**350**星][1m] [Go] [tomnomnom/httprobe](https://github.com/tomnomnom/httprobe) Take a list of domains and probe for working HTTP and HTTPS servers
+- [**350**星][2y] [notsosecure/password_cracking_rules](https://github.com/notsosecure/password_cracking_rules) One rule to crack all passwords. or atleast we hope so.
- [**350**星][2y] [Py] [mazen160/struts-pwn](https://github.com/mazen160/struts-pwn) Apache Struts CVE-2017-5638 漏洞利用
+- [**350**星][2y] [Shell] [mazen160/firefox-security-toolkit](https://github.com/mazen160/firefox-security-toolkit) A tool that transforms Firefox browsers into a penetration testing suite
+- [**350**星][2d] [Ruby] [jjyg/metasm](https://github.com/jjyg/metasm) This is the main repository for metasm, a free assembler / disassembler / compiler written in ruby
+- [**350**星][7m] [Py] [iphelix/pack](https://github.com/iphelix/pack) PACK (Password Analysis and Cracking Kit)
+- [**350**星][11d] [Shell] [fanyueciyuan/eazy-for-ss](https://github.com/fanyueciyuan/eazy-for-ss) A Bypassgfw Collection
- [**350**星][1m] [Py] [devrandom/gitian-builder](https://github.com/devrandom/gitian-builder) Build packages in a secure deterministic fashion inside a VM
-- [**350**星][12m] [Py] [aancw/belati](https://github.com/aancw/belati) The Traditional Swiss Army Knife for OSINT
-- [**349**星][6m] [Java] [syvaidya/openstego](https://github.com/syvaidya/openstego) OpenStego is a steganography application that provides two functionalities: a) Data Hiding: It can hide any data within a cover file (e.g. images). b) Watermarking: Watermarking files (e.g. images) with an invisible signature. It can be used to detect unauthorized file copying.
-- [**349**星][2y] [Shell] [mazen160/firefox-security-toolkit](https://github.com/mazen160/firefox-security-toolkit) A tool that transforms Firefox browsers into a penetration testing suite
+- [**349**星][2m] [JS] [whitequark/ipaddr.js](https://github.com/whitequark/ipaddr.js) IP address manipulation library in JavaScript
+- [**349**星][2d] [C] [vanhauser-thc/aflplusplus](https://github.com/vanhauser-thc/aflplusplus) 带社区补丁的afl 2.56b
+- [**349**星][4m] [Py] [tatanus/spf](https://github.com/tatanus/spf) SpeedPhishing Framework
+- [**349**星][5m] [Py] [swisskyrepo/wordpresscan](https://github.com/swisskyrepo/wordpresscan) WPScan rewritten in Python + some WPSeku ideas
+- [**349**星][20d] [C] [liji32/sameboy](https://github.com/liji32/sameboy) Game Boy and Game Boy Color emulator written in C
- [**349**星][7m] [Haskell] [jpmorganchase/constellation](https://github.com/jpmorganchase/constellation) Peer-to-peer encrypted message exchange
- [**349**星][2m] [C] [jedisct1/swift-sodium](https://github.com/jedisct1/swift-sodium) Safe and easy to use crypto for iOS and macOS
-- [**349**星][19d] [TeX] [haifengl/bigdata](https://github.com/haifengl/bigdata) Introduction to Big Data
-- [**349**星][9d] [Shell] [fanyueciyuan/eazy-for-ss](https://github.com/fanyueciyuan/eazy-for-ss) A Bypassgfw Collection
-- [**349**星][8d] [C#] [digitalruby/ipban](https://github.com/digitalruby/ipban) 监视Windows/Linux系统的登录失败和不良行为,并封禁对应的IP地址。高度可配置,精简且功能强大。
-- [**348**星][2m] [JS] [whitequark/ipaddr.js](https://github.com/whitequark/ipaddr.js) IP address manipulation library in JavaScript
-- [**348**星][15d] [wenzel/awesome-virtualization](https://github.com/wenzel/awesome-virtualization) Collection of resources about Virtualization
-- [**348**星][2m] [C#] [vletoux/pingcastle](https://github.com/vletoux/pingcastle) Get Active Directory Security at 80% in 20% of the time
-- [**348**星][4m] [Py] [tatanus/spf](https://github.com/tatanus/spf) SpeedPhishing Framework
-- [**348**星][1m] [C++] [sslab-gatech/qsym](https://github.com/sslab-gatech/qsym) A Practical Concolic Execution Engine Tailored for Hybrid Fuzzing
-- [**348**星][10d] [TypeScript] [shroudedcode/apk-mitm](https://github.com/shroudedcode/apk-mitm)
+- [**349**星][3m] [Brainfuck] [hexhive/printbf](https://github.com/hexhive/printbf) Brainfuck interpreter inside printf
+- [**349**星][21d] [TeX] [haifengl/bigdata](https://github.com/haifengl/bigdata) Introduction to Big Data
+- [**349**星][6m] [Shell] [hackplayers/4nonimizer](https://github.com/hackplayers/4nonimizer) A bash script for anonymizing the public IP used to browsing Internet, managing the connection to TOR network and to different VPNs providers (OpenVPN)
+- [**349**星][5d] [Py] [alecmuffett/real-world-onion-sites](https://github.com/alecmuffett/real-world-onion-sites) This is a list of substantial, commercial-or-social-good mainstream websites which provide onion services.
+- [**348**星][2m] [Java] [droidefense/engine](https://github.com/droidefense/engine) Droidefense: Advance Android Malware Analysis Framework
+- [**348**星][1m] [C] [seccomp/libseccomp](https://github.com/seccomp/libseccomp) an easy to use, platform independent, interface to the Linux Kernel's syscall filtering mechanism
+- [**348**星][1y] [PS] [rootclay/powershell-attack-guide](https://github.com/rootclay/powershell-attack-guide) Powershell攻击指南----黑客后渗透之道
+
- [**348**星][2y] [Py] [maldevel/gdog](https://github.com/maldevel/gdog) Python 编写的后门,使用 Gmail 做 C&C
-- [**348**星][21d] [Ruby] [jjyg/metasm](https://github.com/jjyg/metasm) This is the main repository for metasm, a free assembler / disassembler / compiler written in ruby
-- [**348**星][7m] [Py] [iphelix/pack](https://github.com/iphelix/pack) PACK (Password Analysis and Cracking Kit)
+- [**348**星][2y] [PS] [fuzzysecurity/pskernel-primitives](https://github.com/fuzzysecurity/pskernel-primitives) Exploit primitives for PowerShell
+- [**348**星][2m] [Java] [esapi/esapi-java-legacy](https://github.com/esapi/esapi-java-legacy) ESAPI (The OWASP Enterprise Security API) is a free, open source, web application security control library that makes it easier for programmers to write lower-risk applications.
- [**348**星][3y] [C] [cr4sh/smmbackdoor](https://github.com/cr4sh/smmbackdoor) System Management Mode backdoor for UEFI
- [**347**星][2m] [Shell] [orlikoski/skadi](https://github.com/orlikoski/Skadi) collection, processing and advanced analysis of forensic artifacts and images.
-- [**347**星][2m] [Java] [droidefense/engine](https://github.com/droidefense/engine) Droidefense: Advance Android Malware Analysis Framework
-- [**347**星][5m] [Makefile] [xdite/internet-security](https://github.com/xdite/internet-security) 互联网资安风控实战
+- [**347**星][10m] [C] [wapiflapi/exrs](https://github.com/wapiflapi/exrs) Exercises for learning Reverse Engineering and Exploitation.
- [**347**星][4y] [Java] [rsmudge/cortana-scripts](https://github.com/rsmudge/cortana-scripts) A collection of Cortana scripts that you may use with Armitage and Cobalt Strike 2.x. Cortana Scripts are not compatible with Cobalt Strike 3.x. Cobalt Strike 3.x uses a variant of Cortana called Aggressor Script.
-- [**347**星][1y] [PowerShell] [rootclay/powershell-attack-guide](https://github.com/rootclay/powershell-attack-guide) Powershell攻击指南----黑客后渗透之道
- [**347**星][1y] [Py] [quickbreach/smbetray](https://github.com/quickbreach/smbetray) SMB MiTM tool with a focus on attacking clients through file content swapping, lnk swapping, as well as compromising any data passed over the wire in cleartext.
-- [**347**星][2y] [notsosecure/password_cracking_rules](https://github.com/notsosecure/password_cracking_rules) One rule to crack all passwords. or atleast we hope so.
-- [**347**星][3y] [C++] [m00nrise/processhider](https://github.com/m00nrise/processhider) Post-exploitation tool for hiding processes from monitoring applications
+- [**347**星][2y] [Py] [nopernik/sshpry](https://github.com/nopernik/sshpry) Seamlessly spy on SSH session like it is your tty
+- [**347**星][2y] [Ruby] [jobertabma/virtual-host-discovery](https://github.com/jobertabma/virtual-host-discovery) 枚举服务器上的虚拟主机(Ruby脚本)
- [**347**星][5y] [C] [inquisb/shellcodeexec](https://github.com/inquisb/shellcodeexec) Script to execute in memory a sequence of opcodes
-- [**347**星][3m] [Brainfuck] [hexhive/printbf](https://github.com/hexhive/printbf) Brainfuck interpreter inside printf
-- [**347**星][2y] [PowerShell] [fuzzysecurity/pskernel-primitives](https://github.com/fuzzysecurity/pskernel-primitives) Exploit primitives for PowerShell
-- [**347**星][2m] [Java] [esapi/esapi-java-legacy](https://github.com/esapi/esapi-java-legacy) ESAPI (The OWASP Enterprise Security API) is a free, open source, web application security control library that makes it easier for programmers to write lower-risk applications.
- [**347**星][6m] [C] [earthquake/chw00t](https://github.com/earthquake/chw00t) Unices chroot breaking tool
-- [**346**星][9m] [C] [wapiflapi/exrs](https://github.com/wapiflapi/exrs) Exercises for learning Reverse Engineering and Exploitation.
-- [**346**星][4m] [Py] [swisskyrepo/wordpresscan](https://github.com/swisskyrepo/wordpresscan) WPScan rewritten in Python + some WPSeku ideas
-- [**346**星][1m] [C] [seccomp/libseccomp](https://github.com/seccomp/libseccomp) an easy to use, platform independent, interface to the Linux Kernel's syscall filtering mechanism
-- [**346**星][11m] [Py] [darkspiritz/darkspiritz](https://github.com/darkspiritz/darkspiritz) A penetration testing framework for Linux, MacOS, and Windows systems.
-- [**345**星][3m] [C#] [rasta-mouse/tikitorch](https://github.com/rasta-mouse/tikitorch) Process Injection
+- [**347**星][2y] [dostoevskylabs/dostoevsky-pentest-notes](https://github.com/dostoevskylabs/dostoevsky-pentest-notes) Notes for taking the OSCP in 2097. Read in book form on GitBook
+- [**347**星][4d] [Shell] [archstrike/archstrike](https://github.com/archstrike/archstrike) An Arch Linux repository for security professionals and enthusiasts. Done the Arch Way and optimized for i686, x86_64, ARMv6, ARMv7 and ARMv8.
+- [**346**星][1m] [Py] [ym2011/pest](https://github.com/ym2011/PEST) 渗透脚本
+- [**346**星][3m] [C#] [rasta-mouse/tikitorch](https://github.com/rasta-mouse/tikitorch) Process Injection
+- [**346**星][12d] [hongrisec/web-security-attack](https://github.com/hongrisec/web-security-attack) Web安全相关内容
+- [**346**星][25d] [C#] [fuzzysecurity/sharp-suite](https://github.com/fuzzysecurity/sharp-suite) My musings with C#
+- [**346**星][2y] [enzet/symbolic-execution](https://github.com/enzet/symbolic-execution) 图解符号执行进化史
+- [**346**星][11m] [Py] [darkspiritz/darkspiritz](https://github.com/darkspiritz/darkspiritz) 适用于Linux,MacOS和Windows系统的渗透测试框架。
+- [**346**星][1y] [C] [bretley/how2exploit_binary](https://github.com/bretley/how2exploit_binary) An in depth tutorial on how to do binary exploitation
- [**345**星][2y] [Go] [propervillain/moistpetal](https://github.com/propervillain/moistpetal) 模块化的 RedTeam 恶意代码框架
-- [**345**星][2y] [enzet/symbolic-execution](https://github.com/enzet/symbolic-execution) 图解符号执行进化史
-- [**345**星][7d] [Shell] [archstrike/archstrike](https://github.com/archstrike/archstrike) An Arch Linux repository for security professionals and enthusiasts. Done the Arch Way and optimized for i686, x86_64, ARMv6, ARMv7 and ARMv8.
+- [**345**星][4m] [Java] [google/graphicsfuzz](https://github.com/google/graphicsfuzz) A testing framework for automatically finding and simplifying bugs in graphics shader compilers.
+- [**345**星][1y] [C] [codermjlee/mjcodeobfuscation](https://github.com/codermjlee/mjcodeobfuscation) 一个用于代码混淆和字符串加密的Mac小Demo
- [**345**星][3y] [Py] [animeshshaw/hash-algorithm-identifier](https://github.com/animeshshaw/hash-algorithm-identifier) A python tool to identify different Hash Function Algorithms
-- [**344**星][30d] [Py] [ym2011/pest](https://github.com/ym2011/PEST) Here is some simple and useful scripts for penetration.
-- [**344**星][7m] [C] [turing-technician/fasthook](https://github.com/turing-technician/fasthook) Android ART Hook
-- [**344**星][2y] [Ruby] [jobertabma/virtual-host-discovery](https://github.com/jobertabma/virtual-host-discovery) 枚举服务器上的虚拟主机(Ruby脚本)
-- [**344**星][4m] [Java] [google/graphicsfuzz](https://github.com/google/graphicsfuzz) A testing framework for automatically finding and simplifying bugs in graphics shader compilers.
-- [**344**星][2y] [dostoevskylabs/dostoevsky-pentest-notes](https://github.com/dostoevskylabs/dostoevsky-pentest-notes) Notes for taking the OSCP in 2097. Read in book form on GitBook
-- [**344**星][1y] [C] [bretley/how2exploit_binary](https://github.com/bretley/how2exploit_binary) An in depth tutorial on how to do binary exploitation
-- [**344**星][5m] [b3nac/android-reports-and-resources](https://github.com/b3nac/android-reports-and-resources) A big list of Android Hackerone disclosed reports and other resources.
+- [**344**星][8d] [Perl] [keydet89/regripper2.8](https://github.com/keydet89/regripper2.8) 从注册表中提取/解析信息(键,值,数据)并将其呈现出来进行分析。
+- [**344**星][7y] [benvium/libimobiledevice-macosx](https://github.com/benvium/libimobiledevice-macosx) Binary distribution of the libimobiledevice library for Mac OS X
- [**344**星][5m] [Py] [adrianvollmer/powerhub](https://github.com/adrianvollmer/powerhub) A post exploitation tool based on a web application, focusing on bypassing endpoint protection and application whitelisting
-- [**343**星][2m] [Ruby] [sunitparekh/data-anonymization](https://github.com/sunitparekh/data-anonymization) Want to use production data for testing, data-anonymization can help you.
+- [**343**星][1y] [valvesoftware/source-1-games](https://github.com/valvesoftware/source-1-games) Source 1 based games such as TF2 and Counter-Strike: Source
+- [**343**星][2m] [Ruby] [sunitparekh/data-anonymization](https://github.com/sunitparekh/data-anonymization) 帮助您构建匿名的生产数据转储,可用于性能测试,安全性测试,调试和开发。
- [**343**星][1y] [Py] [theopolis/uefi-firmware-parser](https://github.com/theopolis/uefi-firmware-parser) Parse BIOS/Intel ME/UEFI firmware related structures: Volumes, FileSystems, Files, etc
+- [**343**星][6d] [C++] [nativescript/android-runtime](https://github.com/nativescript/android-runtime) Android runtime for NativeScript (based on V8)
+- [**343**星][2y] [leelikar/deepweb](https://github.com/leelikar/deepweb) 暗网网址大全TOR
- [**343**星][2y] [hannob/meltdownspectre-patches](https://github.com/hannob/meltdownspectre-patches) Summary of the patch status for Meltdown / Spectre
-- [**343**星][2y] [Py] [eplox/tcp-starvation](https://github.com/eplox/tcp-starvation)
-- [**343**星][1y] [C] [codermjlee/mjcodeobfuscation](https://github.com/codermjlee/mjcodeobfuscation) 一个用于代码混淆和字符串加密的Mac小Demo
+- [**343**星][2y] [Py] [eplox/tcp-starvation](https://github.com/eplox/tcp-starvation) TCP-Starvation 漏洞
+- [**343**星][2y] [C++] [ele7enxxh/poc-exp](https://github.com/ele7enxxh/poc-exp) 某些 Android 漏洞的poc/exp
+- [**343**星][12m] [Assembly] [egebalci/amber](https://github.com/egebalci/amber) 反射式PE加壳器,用于绕过安全产品和缓解措施
+- [**343**星][12m] [Ruby] [calebfenton/dex-oracle](https://github.com/calebfenton/dex-oracle) A pattern based Dalvik deobfuscator which uses limited execution to improve semantic analysis
- [**343**星][2y] [Shell] [brannondorsey/mitm-router](https://github.com/brannondorsey/mitm-router) mitm-router:将任何一台Linux 计算机转变成公开的 Wi-Fi 网络,并且默认Man-in-the-middle 所有 http 流量
-- [**343**星][7y] [benvium/libimobiledevice-macosx](https://github.com/benvium/libimobiledevice-macosx) Binary distribution of the libimobiledevice library for Mac OS X
-- [**343**星][7d] [Py] [alecmuffett/real-world-onion-sites](https://github.com/alecmuffett/real-world-onion-sites) This is a list of substantial, commercial-or-social-good mainstream websites which provide onion services.
-- [**342**星][1y] [valvesoftware/source-1-games](https://github.com/valvesoftware/source-1-games) Source 1 based games such as TF2 and Counter-Strike: Source
-- [**342**星][2y] [C++] [usb-tools/usbproxy-legacy](https://github.com/usb-tools/USBProxy-legacy) A proxy for USB devices, libUSB and gadgetFS - this project is unmaintained, try here:
-- [**342**星][8m] [Py] [skorov/ridrelay](https://github.com/skorov/ridrelay) Enumerate usernames on a domain where you have no creds by using SMB Relay with low priv.
+- [**342**星][1y] [Py] [varbaek/xsser](https://github.com/varbaek/xsser) From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017 + Extras
+- [**342**星][9d] [C++] [thezdi/poc](https://github.com/thezdi/poc) Proofs-of-concept
+- [**342**星][2m] [C#] [steamdatabase/valveresourceformat](https://github.com/steamdatabase/valveresourceformat) Valve's Source 2 resource file format (also known as Stupid Valve Format) parser and decompiler.
+- [**342**星][8m] [Py] [skorov/ridrelay](https://github.com/skorov/ridrelay) 通过使用具有低priv的SMB中继来枚举您没有信誉的域上的用户名。
+- [**342**星][4d] [Shell] [r00t-3xp10it/backdoorppt](https://github.com/r00t-3xp10it/backdoorppt) 将Exe格式Payload伪装成Doc(.ppt)
- [**342**星][5y] [Py] [neohapsis/neopi](https://github.com/neohapsis/neopi) a Python script that uses a variety of statistical methods to detect obfuscated and encrypted content within text/script files
-- [**342**星][13d] [C++] [nativescript/android-runtime](https://github.com/nativescript/android-runtime) Android runtime for NativeScript (based on V8)
-- [**342**星][2y] [leelikar/deepweb](https://github.com/leelikar/deepweb) 暗网网址大全TOR
-- [**342**星][17d] [Perl] [keydet89/regripper2.8](https://github.com/keydet89/regripper2.8) RegRipper version 2.8
-- [**342**星][22d] [Augeas] [hercules-team/augeas](https://github.com/hercules-team/augeas) A configuration editing tool and API
-- [**342**星][23d] [C#] [fuzzysecurity/sharp-suite](https://github.com/fuzzysecurity/sharp-suite) My musings with C#
-- [**342**星][2y] [C++] [ele7enxxh/poc-exp](https://github.com/ele7enxxh/poc-exp) 某些 Android 漏洞的poc/exp
-- [**342**星][12m] [Ruby] [calebfenton/dex-oracle](https://github.com/calebfenton/dex-oracle) A pattern based Dalvik deobfuscator which uses limited execution to improve semantic analysis
-- [**341**星][1y] [Py] [varbaek/xsser](https://github.com/varbaek/xsser) From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017 + Extras
+- [**342**星][4y] [Shell] [marshyski/quick-secure](https://github.com/marshyski/quick-secure) Quickly secure UNIX/Linux systems
+- [**342**星][24d] [Augeas] [hercules-team/augeas](https://github.com/hercules-team/augeas) A configuration editing tool and API
+- [**342**星][18d] [Py] [fgeek/pyfiscan](https://github.com/fgeek/pyfiscan) Web App 漏洞及版本扫描
+- [**341**星][1y] [Shell] [dylanbai8/onekey_caddy_php7_sqlite3](https://github.com/dylanbai8/onekey_caddy_php7_sqlite3) 小内存 VPS 一键搭建 Caddy+PHP7+Sqlite3 环境 (支持VPS最小内存64M),一键翻墙 caddy+web(php+sqlite3)+v2ray+bbr。
+- [**341**星][2y] [C++] [usb-tools/usbproxy-legacy](https://github.com/usb-tools/USBProxy-legacy) A proxy for USB devices, libUSB and gadgetFS - this project is unmaintained, try here:
+- [**341**星][6m] [C] [zeex/subhook](https://github.com/zeex/subhook) Simple hooking library for C/C++ (x86 only, 32/64-bit, no dependencies)
+- [**341**星][10m] [yarnpkg/rfcs](https://github.com/yarnpkg/rfcs) RFCs for changes to Yarn
+- [**341**星][2m] [Go] [wweir/sower](https://github.com/wweir/sower) Sower is a cross-platform intelligent transparent proxy solution.
- [**341**星][2y] [Py] [sslab-gatech/drk](https://github.com/sslab-gatech/drk) breaks kernel address space layout randomization (KASLR) by exploiting TLB and decoded i-cache side channel.
- [**341**星][2y] [Py] [sarfata/voodooprivacy](https://github.com/sarfata/voodooprivacy) Roll your own VPN server on Amazon EC2 and battle-ready firewall for OS X
-- [**341**星][11m] [Shell] [r00t-3xp10it/backdoorppt](https://github.com/r00t-3xp10it/backdoorppt) 将Exe格式Payload伪装成Doc(.ppt)
-- [**341**星][1m] [Py] [leitbogioro/ssr.go](https://github.com/leitbogioro/ssr.go) A new shadowsocksR config manager
+- [**341**星][8m] [Java] [portswigger/param-miner](https://github.com/portswigger/param-miner) identifies hidden, unlinked parameters. It's particularly useful for finding web cache poisoning vulnerabilities
+- [**341**星][4m] [Java] [portswigger/backslash-powered-scanner](https://github.com/portswigger/backslash-powered-scanner) Finds unknown classes of injection vulnerabilities
+- [**341**星][1m] [Shell] [nullarray/roothelper](https://github.com/nullarray/roothelper) 辅助在被攻克系统上的提权过程:自动枚举、下载、解压并执行提权脚本
- [**341**星][9m] [Py] [iphelix/dnschef](https://github.com/iphelix/dnschef) DNS 代理,用于渗透测试和恶意代码分析
- [**341**星][2y] [C] [hfiref0x/dsefix](https://github.com/hfiref0x/dsefix) Windows x64 Driver Signature Enforcement Overrider
- [**341**星][3y] [Py] [fengxuangit/fox-scan](https://github.com/fengxuangit/fox-scan) Fox-scan is a initiative and passive SQL Injection vulnerable Test tools.
-- [**341**星][11m] [C] [blendin/3snake](https://github.com/blendin/3snake) reads memory from sshd and sudo system calls that handle password based authentication
-- [**340**星][10m] [yarnpkg/rfcs](https://github.com/yarnpkg/rfcs) RFCs for changes to Yarn
+- [**341**星][5d] [Py] [darryllane/bluto](https://github.com/darryllane/bluto) DNS Recon | Brute Forcer | DNS Zone Transfer | DNS Wild Card Checks | DNS Wild Card Brute Forcer | Email Enumeration | Staff Enumeration | Compromised Account Checking
+- [**341**星][26d] [D] [cybershadow/rabcdasm](https://github.com/cybershadow/rabcdasm) Robust ABC (ActionScript Bytecode) [Dis-]Assembler
+- [**341**星][2y] [Py] [c0ny1/xxe-lab](https://github.com/c0ny1/xxe-lab) 一个包含php,java,python,C#等各种语言版本的XXE漏洞Demo
- [**340**星][1m] [veracode-research/solr-injection](https://github.com/veracode-research/solr-injection) Apache Solr Injection Research
- [**340**星][3m] [C] [thorkill/eresi](https://github.com/thorkill/eresi) The ERESI Reverse Engineering Software Interface
-- [**340**星][1m] [C#] [steamdatabase/valveresourceformat](https://github.com/steamdatabase/valveresourceformat) Valve's Source 2 resource file format (also known as Stupid Valve Format) parser and decompiler.
+- [**340**星][5m] [C] [theofficialflow/trinity](https://github.com/theofficialflow/trinity) Trinity Exploit - Emulator Escape
+- [**340**星][6m] [teoseller/osquery-attck](https://github.com/teoseller/osquery-attck) Mapping the MITRE ATT&CK Matrix with Osquery
+- [**340**星][4m] [Py] [stamusnetworks/scirius](https://github.com/stamusnetworks/scirius) Scirius is a web application for Suricata ruleset management.
+- [**340**星][2m] [softwareunderground/awesome-open-geoscience](https://github.com/softwareunderground/awesome-open-geoscience) Curated from repositories that make our lives as geoscientists, hackers and data wranglers easier or just more awesome
- [**340**星][2y] [slowmist/eos-bp-nodes-security-checklist](https://github.com/slowmist/eos-bp-nodes-security-checklist) EOS超级节点安全执行指南
+- [**340**星][2y] [Py] [securityinnovation/authmatrix](https://github.com/securityinnovation/authmatrix) AuthMatrix is a Burp Suite extension that provides a simple way to test authorization in web applications and web services.
+- [**340**星][2y] [Go] [rapidloop/vlan-nats](https://github.com/rapidloop/vlan-nats) 使用 NATS 创建的虚拟 LAN
+- [**340**星][2d] [Py] [qwj/python-proxy](https://github.com/qwj/python-proxy) HTTP/Socks4/Socks5/Shadowsocks/ShadowsocksR/SSH/Redirect/Pf TCP/UDP asynchronous tunnel proxy implemented in Python 3 asyncio.
+- [**340**星][2d] [Py] [qilingframework/qiling](https://github.com/qilingframework/qiling) Qiling Advanced Binary Emulation framework
- [**340**星][2y] [Py] [pathetiq/burpsmartbuster](https://github.com/pathetiq/burpsmartbuster) A Burp Suite content discovery plugin that add the smart into the Buster!
-- [**340**星][16d] [Py] [fgeek/pyfiscan](https://github.com/fgeek/pyfiscan) Web App 漏洞及版本扫描
-- [**340**星][12m] [Assembly] [egebalci/amber](https://github.com/egebalci/amber) Reflective PE packer.
-- [**340**星][2m] [Py] [darryllane/bluto](https://github.com/darryllane/bluto) DNS Recon | Brute Forcer | DNS Zone Transfer | DNS Wild Card Checks | DNS Wild Card Brute Forcer | Email Enumeration | Staff Enumeration | Compromised Account Checking
-- [**340**星][1m] [veracode-research/solr-injection](https://github.com/veracode-research/solr-injection) Apache Solr Injection Research
-- [**339**星][5m] [C] [zeex/subhook](https://github.com/zeex/subhook) Simple hooking library for C/C++ (x86 only, 32/64-bit, no dependencies)
+- [**340**星][1m] [Py] [leitbogioro/ssr.go](https://github.com/leitbogioro/ssr.go) A new shadowsocksR config manager
+- [**340**星][2m] [JS] [dns-oarc/packetq](https://github.com/dns-oarc/packetq) A tool that provides a basic SQL-frontend to PCAP-files
+- [**340**星][2y] [Py] [bugscanteam/githack](https://github.com/bugscanteam/githack) .git 泄漏利用工具,可还原历史版本
+- [**340**星][11m] [C] [blendin/3snake](https://github.com/blendin/3snake) reads memory from sshd and sudo system calls that handle password based authentication
+- [**340**星][1m] [veracode-research/solr-injection](https://github.com/veracode-research/solr-injection) Apache Solr注入研究
+- [**340**星][2m] [Ruby] [anaynayak/aws-security-viz](https://github.com/anaynayak/aws-security-viz) Visualize your aws security groups.
+- [**339**星][1y] [C++] [qax-a-team/eventcleaner](https://github.com/QAX-A-Team/EventCleaner) A tool mainly to erase specified records from Windows event logs, with additional functionalities.
- [**339**星][5y] [JS] [yndi/darkjpeg](https://github.com/yndi/darkjpeg) JPEG steganography web service
+- [**339**星][2m] [C] [trailofbits/cb-multios](https://github.com/trailofbits/cb-multios) DARPA Challenges Sets for Linux, Windows, and macOS
- [**339**星][1y] [Py] [tophanttechnology/osprey](https://github.com/tophanttechnology/osprey) 由TCC(斗象能力中心)出品并长期维护的开源漏洞检测框架
-- [**339**星][5m] [C] [theofficialflow/trinity](https://github.com/theofficialflow/trinity) Trinity Exploit - Emulator Escape
-- [**339**星][2y] [Go] [rapidloop/vlan-nats](https://github.com/rapidloop/vlan-nats) 使用 NATS 创建的虚拟 LAN
-- [**339**星][7m] [Java] [portswigger/param-miner](https://github.com/portswigger/param-miner) identifies hidden, unlinked parameters. It's particularly useful for finding web cache poisoning vulnerabilities
-- [**339**星][4m] [Java] [portswigger/backslash-powered-scanner](https://github.com/portswigger/backslash-powered-scanner) Finds unknown classes of injection vulnerabilities
-- [**339**星][1m] [Shell] [nullarray/roothelper](https://github.com/nullarray/roothelper) 辅助在被攻克系统上的提权过程:自动枚举、下载、解压并执行提权脚本
+- [**339**星][1y] [Java] [rub-nds/ws-attacker](https://github.com/rub-nds/ws-attacker) Web服务渗透测试框架,模块化。
+- [**339**星][11m] [Py] [joxeankoret/nightmare](https://github.com/joxeankoret/nightmare) A distributed fuzzing testing suite with web administration
- [**339**星][11m] [JS] [gabemarshall/brosec](https://github.com/gabemarshall/brosec) Brosec - An interactive reference tool to help security professionals utilize useful payloads and commands.
-- [**339**星][2y] [Py] [c0ny1/xxe-lab](https://github.com/c0ny1/xxe-lab) 一个包含php,java,python,C#等各种语言版本的XXE漏洞Demo
-- [**339**星][2y] [Py] [bugscanteam/githack](https://github.com/bugscanteam/githack) .git 泄漏利用工具,可还原历史版本
-- [**338**星][1y] [C++] [qax-a-team/eventcleaner](https://github.com/QAX-A-Team/EventCleaner) A tool mainly to erase specified records from Windows event logs, with additional functionalities.
-- [**338**星][7d] [C] [vanhauser-thc/aflplusplus](https://github.com/vanhauser-thc/aflplusplus) afl++ is afl 2.56b with community patches, AFLfast power schedules, qemu 3.1 upgrade + laf-intel support, MOpt mutators, InsTrim instrumentation, unicorn_mode and a lot more!
+- [**339**星][10d] [Py] [1120362990/vulnerability-list](https://github.com/1120362990/vulnerability-list) 在渗透测试中快速检测常见中间件、组件的高危漏洞。
+- [**338**星][2d] [Go] [v2ray/domain-list-community](https://github.com/v2ray/domain-list-community) Community managed domain list
+- [**338**星][28d] [Shell] [umputun/nginx-le](https://github.com/umputun/nginx-le) Nginx with automatic let's encrypt (docker image)
- [**338**星][1y] [Ruby] [srcclr/commit-watcher](https://github.com/srcclr/commit-watcher) Find interesting and potentially hazardous commits in git projects
-- [**338**星][4m] [Py] [qwj/python-proxy](https://github.com/qwj/python-proxy) HTTP/Socks4/Socks5/Shadowsocks/ShadowsocksR/SSH/Redirect/Pf TCP/UDP asynchronous tunnel proxy implemented in Python 3 asyncio.
+- [**338**星][2y] [Py] [pepitoh/vbad](https://github.com/pepitoh/vbad) VBA Obfuscation Tools combined with an MS office document generator
- [**338**星][2m] [PHP] [opsxcq/exploit-cve-2016-10033](https://github.com/opsxcq/exploit-cve-2016-10033) PHPMailer < 5.2.18 Remote Code Execution exploit and vulnerable container
-- [**338**星][4y] [PowerShell] [kevin-robertson/tater](https://github.com/kevin-robertson/tater) Tater is a PowerShell implementation of the Hot Potato Windows Privilege Escalation exploit from
-- [**338**星][11m] [Py] [joxeankoret/nightmare](https://github.com/joxeankoret/nightmare) A distributed fuzzing testing suite with web administration
+- [**338**星][2y] [C] [natebrune/silk-guardian](https://github.com/natebrune/silk-guardian) << Silk Guardian >> is an anti-forensic kill-switch that waits for a change on your usb ports and then wipes your ram, deletes precious files, and turns off your computer.
+- [**338**星][4y] [PS] [kevin-robertson/tater](https://github.com/kevin-robertson/tater) Tater is a PowerShell implementation of the Hot Potato Windows Privilege Escalation exploit from
- [**338**星][5m] [Py] [initstring/passphrase-wordlist](https://github.com/initstring/passphrase-wordlist) Passphrase wordlist and hashcat rules for offline cracking of long, complex passwords
-- [**337**星][1y] [Shell] [dylanbai8/onekey_caddy_php7_sqlite3](https://github.com/dylanbai8/onekey_caddy_php7_sqlite3) 小内存 VPS 一键搭建 Caddy+PHP7+Sqlite3 环境 (支持VPS最小内存64M),一键翻墙 caddy+web(php+sqlite3)+v2ray+bbr。
-- [**337**星][2m] [C] [trailofbits/cb-multios](https://github.com/trailofbits/cb-multios) DARPA Challenges Sets for Linux, Windows, and macOS
-- [**337**星][4m] [Py] [stamusnetworks/scirius](https://github.com/stamusnetworks/scirius) Scirius is a web application for Suricata ruleset management.
-- [**337**星][2y] [Py] [securityinnovation/authmatrix](https://github.com/securityinnovation/authmatrix) AuthMatrix is a Burp Suite extension that provides a simple way to test authorization in web applications and web services.
-- [**337**星][1y] [Java] [rub-nds/ws-attacker](https://github.com/rub-nds/ws-attacker) WS-Attacker is a modular framework for web services penetration testing. It is developed by the Chair of Network and Data Security, Ruhr University Bochum (
-- [**337**星][2y] [Py] [pepitoh/vbad](https://github.com/pepitoh/vbad) VBA Obfuscation Tools combined with an MS office document generator
-- [**337**星][2y] [C] [natebrune/silk-guardian](https://github.com/natebrune/silk-guardian) << Silk Guardian >> is an anti-forensic kill-switch that waits for a change on your usb ports and then wipes your ram, deletes precious files, and turns off your computer.
-- [**337**星][3y] [C#] [ben0xa/nps](https://github.com/ben0xa/nps) 不用PowerShell.exe执行PowerShell指令
-- [**337**星][2m] [Ruby] [anaynayak/aws-security-viz](https://github.com/anaynayak/aws-security-viz) Visualize your aws security groups.
-- [**336**星][20d] [Py] [pdbpp/pdbpp](https://github.com/pdbpp/pdbpp) pdb++, a drop-in replacement for pdb (the Python debugger)
-- [**336**星][2m] [softwareunderground/awesome-open-geoscience](https://github.com/softwareunderground/awesome-open-geoscience) Curated from repositories that make our lives as geoscientists, hackers and data wranglers easier or just more awesome
+- [**338**星][7m] [C] [git-hulk/tcpkit](https://github.com/git-hulk/tcpkit) A tool analyzes tcp packets with Lua
+- [**338**星][3d] [Ruby] [cyberark/conjur](https://github.com/cyberark/conjur) CyberArk Conjur automatically secures secrets used by privileged users and machine identities
+- [**338**星][3y] [C#] [ben0xa/nps](https://github.com/ben0xa/nps) 不用PowerShell.exe执行PowerShell指令
+- [**338**星][3m] [Py] [alexmojaki/snoop](https://github.com/alexmojaki/snoop) A powerful set of Python debugging tools, based on PySnooper
+- [**337**星][4m] [C] [merces/pev](https://github.com/merces/pev) The PE file analysis toolkit
+- [**337**星][2y] [C] [mbevand/silentarmy](https://github.com/mbevand/silentarmy) Zcash miner optimized for AMD & Nvidia GPUs
+- [**337**星][4d] [C] [lemire/code-used-on-daniel-lemire-s-blog](https://github.com/lemire/code-used-on-daniel-lemire-s-blog) This is a repository for the code posted on my blog
+- [**337**星][8m] [Py] [dirkjanm/ldapdomaindump](https://github.com/dirkjanm/ldapdomaindump) Active Directory information dumper via LDAP
+- [**336**星][6d] [Java] [sap/vulnerability-assessment-tool](https://github.com/sap/vulnerability-assessment-tool) Analyses your Java and Python applications for open-source dependencies with known vulnerabilities, using both static analysis and testing to determine code context and usage for greater accuracy.
- [**336**星][6y] [C] [orangetw/tsh](https://github.com/orangetw/tsh) Tiny SHell is an open-source UNIX backdoor.
-- [**336**星][4m] [C] [merces/pev](https://github.com/merces/pev) The PE file analysis toolkit
+- [**336**星][6m] [Py] [fbkcs/thunderdns](https://github.com/fbkcs/thunderdns) 使用DNS协议转发TCP流量. Python编写, 无需编译客户端, 支持socks5
- [**336**星][3m] [Java] [denimgroup/threadfix](https://github.com/denimgroup/threadfix) 软件漏洞汇总和管理系统,可帮助组织汇总漏洞数据,生成虚拟补丁,并与软件缺陷跟踪系统进行交互
- [**336**星][4y] [HTML] [cxxr/lostpass](https://github.com/cxxr/lostpass) Pixel-perfect LastPass phishing
-- [**336**星][1m] [Py] [codingo/interlace](https://github.com/codingo/interlace) Easily turn single threaded command line applications into a fast, multi-threaded application with CIDR and glob support.
- [**336**星][3y] [Shell] [0xm3r/cgpwn](https://github.com/0xm3r/cgpwn) A lightweight VM for hardware hacking, RE (fuzzing, symEx, exploiting etc) and wargaming tasks
-- [**335**星][11d] [C] [lemire/code-used-on-daniel-lemire-s-blog](https://github.com/lemire/code-used-on-daniel-lemire-s-blog) This is a repository for the code posted on my blog
-- [**335**星][6m] [Py] [fbkcs/thunderdns](https://github.com/fbkcs/thunderdns) 使用DNS协议转发TCP流量. Python编写, 无需编译客户端, 支持socks5
-- [**335**星][8m] [Py] [dirkjanm/ldapdomaindump](https://github.com/dirkjanm/ldapdomaindump) Active Directory information dumper via LDAP
-- [**335**星][13d] [Ruby] [cyberark/conjur](https://github.com/cyberark/conjur) CyberArk Conjur automatically secures secrets used by privileged users and machine identities
-- [**335**星][2y] [PowerShell] [arno0x/powershellscripts](https://github.com/arno0x/powershellscripts) Collection of PowerShell scripts
-- [**334**星][26d] [Shell] [umputun/nginx-le](https://github.com/umputun/nginx-le) Nginx with automatic let's encrypt (docker image)
-- [**334**星][7d] [C++] [thezdi/poc](https://github.com/thezdi/poc) Proofs-of-concept
-- [**334**星][6m] [teoseller/osquery-attck](https://github.com/teoseller/osquery-attck) Mapping the MITRE ATT&CK Matrix with Osquery
-- [**334**星][21d] [Java] [sap/vulnerability-assessment-tool](https://github.com/sap/vulnerability-assessment-tool) Analyses your Java and Python applications for open-source dependencies with known vulnerabilities, using both static analysis and testing to determine code context and usage for greater accuracy.
-- [**334**星][9d] [Py] [artisan-roaster-scope/artisan](https://github.com/artisan-roaster-scope/artisan) helps coffee roasters record, analyze, and control roast profiles
-- [**334**星][8d] [Py] [1120362990/vulnerability-list](https://github.com/1120362990/vulnerability-list) 在渗透测试中快速检测常见中间件、组件的高危漏洞。
-- [**333**星][7d] [Coq] [symbiflow/prjxray](https://github.com/symbiflow/prjxray) Documenting the Xilinx 7-series bit-stream format.
-- [**333**星][6m] [Dockerfile] [mykings/docker-vulnerability-environment](https://github.com/mykings/docker-vulnerability-environment) Use the docker to build a vulnerability environment
+- [**335**星][29d] [stardustsky/saidict](https://github.com/stardustsky/saidict) 弱口令,敏感目录,敏感文件等渗透测试常用攻击字典
+
+- [**335**星][4m] [Py] [chris408/ct-exposer](https://github.com/chris408/ct-exposer) An OSINT tool that discovers sub-domains by searching Certificate Transparency logs
+- [**335**星][3d] [Py] [artisan-roaster-scope/artisan](https://github.com/artisan-roaster-scope/artisan) helps coffee roasters record, analyze, and control roast profiles
+- [**335**星][2y] [PS] [arno0x/powershellscripts](https://github.com/arno0x/powershellscripts) Collection of PowerShell scripts
+- [**334**星][3m] [Py] [romanz/trezor-agent](https://github.com/romanz/trezor-agent) Hardware-based SSH/PGP agent
+- [**334**星][2m] [Py] [raikia/uhoh365](https://github.com/raikia/uhoh365) A script that can see if an email address is valid in Office365 (user/email enumeration). This does not perform any login attempts, is unthrottled, and is incredibly useful for social engineering assessments to find which emails exist and which don't.
+- [**334**星][3y] [Py] [nccgroup/abptts](https://github.com/nccgroup/abptts) TCP tunneling over HTTP/HTTPS for web application servers
+- [**334**星][3d] [JS] [meituan-dianping/lyrebird](https://github.com/meituan-dianping/lyrebird) 基于拦截以及模拟HTTP/HTTPS网络请求的面向移动应用的插件化测试工作台
+- [**334**星][2d] [Shell] [loyess/shell](https://github.com/loyess/shell) Shadowsocks-libev with plugins one-click installation. For example: v2ray-plugin, kcptun, simple-obfs, goquiet, cloak...
+- [**334**星][2y] [C#] [foxglovesec/rottenpotato](https://github.com/foxglovesec/rottenpotato) RottenPotato local privilege escalation from service account to SYSTEM
+- [**333**星][9d] [TeX] [radareorg/radare2book](https://github.com/radareorg/radare2book) Radare2 official book
+- [**333**星][2y] [HTML] [superkieran/wooyundrops](https://github.com/superkieran/wooyundrops) Wooyun知识库,乌云知识库,
+- [**333**星][1y] [C++] [rv8-io/rv8](https://github.com/rv8-io/rv8) RISC-V simulator for x86-64
+- [**333**星][8m] [Py] [rek7/fireelf](https://github.com/rek7/fireelf) Fileless Linux Malware Framework
+- [**333**星][4m] [Py] [rbsec/dnscan](https://github.com/rbsec/dnscan) a python wordlist-based DNS subdomain scanner.
+- [**333**星][7m] [Dockerfile] [mykings/docker-vulnerability-environment](https://github.com/mykings/docker-vulnerability-environment) Use the docker to build a vulnerability environment
+- [**333**星][9m] [JS] [mhzed/wstunnel](https://github.com/mhzed/wstunnel) tunnel over websocket
+- [**333**星][6d] [PS] [mgeeky/penetration-testing-tools](https://github.com/mgeeky/penetration-testing-tools) A collection of my Penetration Testing scripts, tools, cheatsheets collected over years, used during real-world assignments or collected from various good quality sources.
- [**333**星][12m] [Py] [mdsecactivebreach/linkedint](https://github.com/mdsecactivebreach/linkedint) A LinkedIn scraper for reconnaissance during adversary simulation
+- [**333**星][8d] [C] [mattiwatti/efiguard](https://github.com/mattiwatti/efiguard) Disable PatchGuard and DSE at boot time
- [**333**星][3y] [Py] [jandre/safe-commit-hook](https://github.com/jandre/safe-commit-hook) pre-commit hook for Git that checks for suspicious files.
-- [**333**星][10d] [hongrisec/web-security-attack](https://github.com/hongrisec/web-security-attack) Web安全相关内容
-- [**333**星][4m] [Py] [chris408/ct-exposer](https://github.com/chris408/ct-exposer) An OSINT tool that discovers sub-domains by searching Certificate Transparency logs
-- [**332**星][10d] [Go] [v2ray/domain-list-community](https://github.com/v2ray/domain-list-community) Community managed domain list
-- [**332**星][2y] [Py] [sgayou/medfusion-4000-research](https://github.com/sgayou/medfusion-4000-research) Medfusion 4000 security research & a MQX RCE.
-- [**332**星][1y] [C++] [rv8-io/rv8](https://github.com/rv8-io/rv8) RISC-V simulator for x86-64
+- [**332**星][1y] [Py] [leapsecurity/inspy](https://github.com/leapsecurity/InSpy) A python based LinkedIn enumeration tool
+- [**332**星][11d] [Go] [unixpickle/gobfuscate](https://github.com/unixpickle/gobfuscate) Obfuscate Go binaries and packages
+- [**332**星][2d] [Coq] [symbiflow/prjxray](https://github.com/symbiflow/prjxray) Documenting the Xilinx 7-series bit-stream format.
+- [**332**星][8m] [Py] [romanvm/python-web-pdb](https://github.com/romanvm/python-web-pdb) Web-based remote UI for Python's PDB debugger
- [**332**星][1y] [Ruby] [packetfu/packetfu](https://github.com/packetfu/packetfu) 数据包篡改工具。Ruby语言编写。
- [**332**星][7m] [offensive-security/kali-linux-recipes](https://github.com/offensive-security/kali-linux-recipes) Kali Linux Recipes
-- [**332**星][9m] [JS] [mhzed/wstunnel](https://github.com/mhzed/wstunnel) tunnel over websocket
-- [**332**星][11d] [PowerShell] [mgeeky/penetration-testing-tools](https://github.com/mgeeky/penetration-testing-tools) A collection of my Penetration Testing scripts, tools, cheatsheets collected over years, used during real-world assignments or collected from various good quality sources.
+- [**332**星][12m] [Py] [joxeankoret/pigaios](https://github.com/joxeankoret/pigaios) A tool for matching and diffing source codes directly against binaries.
- [**332**星][5y] [Py] [graydon/bors](https://github.com/graydon/bors) Integration robot for buildbot and github
-- [**332**星][2y] [C#] [foxglovesec/rottenpotato](https://github.com/foxglovesec/rottenpotato) RottenPotato local privilege escalation from service account to SYSTEM
-- [**332**星][24d] [D] [cybershadow/rabcdasm](https://github.com/cybershadow/rabcdasm) Robust ABC (ActionScript Bytecode) [Dis-]Assembler
+- [**332**星][6d] [Java] [datatheorem/trustkit-android](https://github.com/datatheorem/trustkit-android) Easy SSL pinning validation and reporting for Android.
- [**332**星][3y] [Logos] [bishopfox/ispy](https://github.com/bishopfox/ispy) A reverse engineering framework for iOS
-- [**331**星][1y] [Py] [leapsecurity/inspy](https://github.com/leapsecurity/InSpy) A python based LinkedIn enumeration tool
-- [**331**星][1y] [Py] [vmware/liota](https://github.com/vmware/liota)
-- [**331**星][2y] [HTML] [superkieran/wooyundrops](https://github.com/superkieran/wooyundrops) Wooyun知识库,乌云知识库,
+- [**332**星][11m] [c] [tildeslash/monit](https://bitbucket.org/tildeslash/monit)
+- [**331**星][7m] [Py] [s0md3v/jshell](https://github.com/s0md3v/JShell) JShell - Get a JavaScript shell with XSS.
+- [**331**星][7m] [C] [wbenny/injdrv](https://github.com/wbenny/injdrv) proof-of-concept Windows Driver for injecting DLL into user-mode processes using APC
+- [**331**星][6y] [JS] [toolness/security-adventure](https://github.com/toolness/security-adventure) Go on an educational Web security adventure!
+- [**331**星][5m] [Go] [sysdream/hershell](https://github.com/sysdream/hershell) Go 语言编写的反向 Shell
- [**331**星][1y] [snyk/vulnerabilitydb](https://github.com/snyk/vulnerabilitydb) Snyk's public vulnerability database
-- [**331**星][8m] [Py] [romanvm/python-web-pdb](https://github.com/romanvm/python-web-pdb) Web-based remote UI for Python's PDB debugger
-- [**331**星][8m] [Py] [rek7/fireelf](https://github.com/rek7/fireelf) Fileless Linux Malware Framework
-- [**331**星][30d] [C] [pwarren/rtl-entropy](https://github.com/pwarren/rtl-entropy) An entropy generator using SDR peripherals, including rtl-sdr and BladeRF
+- [**331**星][2y] [Py] [sgayou/medfusion-4000-research](https://github.com/sgayou/medfusion-4000-research) Medfusion 4000 security research & a MQX RCE.
+- [**331**星][1m] [C] [pwarren/rtl-entropy](https://github.com/pwarren/rtl-entropy) An entropy generator using SDR peripherals, including rtl-sdr and BladeRF
- [**331**星][9m] [C] [olimex/diy-laptop](https://github.com/olimex/diy-laptop) Do It Yourself Open Source Hardware and Software Modular Hacker's Friendly Laptop
- [**331**星][1m] [Java] [nationalsecurityagency/timely](https://github.com/nationalsecurityagency/timely) Accumulo backed time series database
- [**331**星][1y] [Py] [flipkart-incubator/rta](https://github.com/flipkart-incubator/rta) Red team Arsenal - An intelligent scanner to detect security vulnerabilities in company's layer 7 assets.
- [**331**星][7y] [Java] [brutall/brut.apktool](https://github.com/brutall/brut.apktool) A tool for reverse engineering Android apk files
-- [**330**星][7m] [Py] [s0md3v/jshell](https://github.com/s0md3v/JShell) JShell - Get a JavaScript shell with XSS.
+- [**331**星][29d] [Jupyter Notebook] [beeva/beeva-best-practices](https://github.com/beeva/beeva-best-practices) Best Practices and Style Guides in BEEVA
- [**330**星][3y] [C++] [xilun/cbwin](https://github.com/xilun/cbwin) Launch Windows programs from "Bash on Ubuntu on Windows" (WSL)
-- [**330**星][1m] [Go] [tomnomnom/httprobe](https://github.com/tomnomnom/httprobe) Take a list of domains and probe for working HTTP and HTTPS servers
-- [**330**星][5m] [Go] [sysdream/hershell](https://github.com/sysdream/hershell) Go 语言编写的反向 Shell
-- [**330**星][11d] [C] [spurious/sdl-mirror](https://github.com/spurious/sdl-mirror) An unofficial, automated SDL2 and SDL1.2 HG mirror.
-- [**330**星][4m] [Py] [rbsec/dnscan](https://github.com/rbsec/dnscan) a python wordlist-based DNS subdomain scanner.
-- [**330**星][2m] [C] [mattiwatti/efiguard](https://github.com/mattiwatti/efiguard) Disable PatchGuard and DSE at boot time
-- [**330**星][19d] [Shell] [loyess/shell](https://github.com/loyess/shell) Shadowsocks-libev with plugins one-click installation. For example: v2ray-plugin, kcptun, simple-obfs, goquiet, cloak...
-- [**330**星][12m] [Py] [joxeankoret/pigaios](https://github.com/joxeankoret/pigaios) A tool for matching and diffing source codes directly against binaries.
+- [**330**星][1y] [Py] [vmware/liota](https://github.com/vmware/liota)
+- [**330**星][2d] [C] [spurious/sdl-mirror](https://github.com/spurious/sdl-mirror) An unofficial, automated SDL2 and SDL1.2 HG mirror.
+- [**330**星][4m] [C++] [safebreach-labs/pinjectra](https://github.com/safebreach-labs/pinjectra) Pinjectra is a C/C++ OOP-like library that implements Process Injection techniques (with focus on Windows 10 64-bit)
+- [**330**星][7m] [Java] [jaegertracing/jaeger-kubernetes](https://github.com/jaegertracing/jaeger-kubernetes) Support for deploying Jaeger into Kubernetes
- [**330**星][10m] [C#] [ghostpack/sharpdump](https://github.com/ghostpack/sharpdump) SharpDump is a C# port of PowerSploit's Out-Minidump.ps1 functionality.
+- [**330**星][1m] [Py] [daniestevez/gr-satellites](https://github.com/daniestevez/gr-satellites) GNU Radio decoders for several Amateur satellites
+- [**330**星][2y] [Py] [cyberheartmi9/cve-2017-12617](https://github.com/cyberheartmi9/cve-2017-12617) Apache Tomcat < 9.0.1 (Beta) / < 8.5.23 / < 8.0.47 / < 7.0.8 - JSP Upload Bypass / Remote Code Execution
+- [**330**星][4m] [Go] [capsule8/capsule8](https://github.com/capsule8/capsule8) 对云本地,容器和传统的基于 Linux 的服务器执行高级的行为监控
- [**330**星][5y] [Py] [byt3bl33d3r/pth-toolkit](https://github.com/byt3bl33d3r/pth-toolkit) Modified version of the passing-the-hash tool collection made to work straight out of the box
-- [**329**星][11d] [TeX] [radareorg/radare2book](https://github.com/radareorg/radare2book) r1 book transcription to r2
-- [**329**星][6y] [JS] [toolness/security-adventure](https://github.com/toolness/security-adventure) Go on an educational Web security adventure!
+- [**330**星][15d] [JS] [auth0/repo-supervisor](https://github.com/auth0/repo-supervisor) Serverless工具,在pull请求中扫描源码,搜索密码及其他秘密
- [**329**星][3y] [Java] [seven456/safewebview](https://github.com/seven456/safewebview) Android Safe WebView、解决WebView的Js对象注入漏洞、支持网页将JS函数(function)传到Java层,方便回调;
-- [**329**星][3y] [Py] [nccgroup/abptts](https://github.com/nccgroup/abptts) TCP tunneling over HTTP/HTTPS for web application servers
-- [**329**星][8d] [JS] [meituan-dianping/lyrebird](https://github.com/meituan-dianping/lyrebird) 基于拦截以及模拟HTTP/HTTPS网络请求的面向移动应用的插件化测试工作台
+- [**329**星][1y] [C++] [polidea/siriusobfuscator](https://github.com/polidea/siriusobfuscator) a tool for performing source-to-source obfuscation of Swift projects
+- [**329**星][3m] [Py] [pfalcon/scratchabit](https://github.com/pfalcon/scratchabit) 交互式反汇编工具, 有与IDAPython兼容的插件API
- [**329**星][4y] [C#] [koczkatamas/cve-2016-0051](https://github.com/koczkatamas/cve-2016-0051) EoP (Win7) & BSoD (Win10) PoC for CVE-2016-0051 (MS-016)
- [**329**星][5m] [Py] [knipknap/exscript](https://github.com/knipknap/exscript) A Python module making Telnet and SSH easy
-- [**329**星][2y] [Py] [cyberheartmi9/cve-2017-12617](https://github.com/cyberheartmi9/cve-2017-12617) Apache Tomcat < 9.0.1 (Beta) / < 8.5.23 / < 8.0.47 / < 7.0.8 - JSP Upload Bypass / Remote Code Execution
-- [**328**星][7m] [C] [wbenny/injdrv](https://github.com/wbenny/injdrv) proof-of-concept Windows Driver for injecting DLL into user-mode processes using APC
-- [**328**星][9d] [Go] [unixpickle/gobfuscate](https://github.com/unixpickle/gobfuscate) Obfuscate Go binaries and packages
+- [**329**星][3y] [Visual Basic .NET] [khr0x40sh/macroshop](https://github.com/khr0x40sh/macroshop) Collection of scripts to aid in delivering payloads via Office Macros. Most are python. See
+- [**329**星][10m] [Py] [justicerage/freedomfighting](https://github.com/justicerage/freedomfighting) A collection of scripts which may come in handy during your freedom fighting activities.
+- [**329**星][5d] [Java] [jaegertracing/jaeger-client-java](https://github.com/jaegertracing/jaeger-client-java) Jaeger Bindings for Java OpenTracing API
+- [**329**星][2m] [CSS] [guyoung/captfencoder](https://github.com/guyoung/captfencoder) CaptfEncoder是一款跨平台网络安全工具套件,提供网络安全相关编码转换、古典密码、密码学、特殊编码等工具,并聚合各类在线工具。
+- [**329**星][2d] [Java] [bit4woo/knife](https://github.com/bit4woo/knife) A burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅
+- [**329**星][1y] [Shell] [1n3/goohak](https://github.com/1n3/goohak) Automatically Launch Google Hacking Queries Against A Target Domain
+- [**328**星][7m] [TS] [plasma-umass/bleak](https://github.com/plasma-umass/bleak) BLeak: Automatically Debugging Memory Leaks in Web Applications
+- [**328**星][2d] [stamparm/ipsum](https://github.com/stamparm/ipsum) Daily feed of bad IPs (with blacklist hit scores)
- [**328**星][1y] [JS] [shmakov/honeypot](https://github.com/shmakov/honeypot) Low interaction honeypot that displays real time attacks
-- [**328**星][4m] [C++] [safebreach-labs/pinjectra](https://github.com/safebreach-labs/pinjectra) Pinjectra is a C/C++ OOP-like library that implements Process Injection techniques (with focus on Windows 10 64-bit)
-- [**328**星][3m] [Py] [pfalcon/scratchabit](https://github.com/pfalcon/scratchabit) 交互式反汇编工具, 有与IDAPython兼容的插件API
- [**328**星][3y] [Pascal] [malwares/remote-access-trojan](https://github.com/malwares/remote-access-trojan) Windows Remote-Access-Trojan
- [**328**星][2y] [C#] [liberxue/wechatyunchart](https://github.com/liberxue/wechatyunchart) 微信多开多账号机器人 云客服系统 微商营销 系统web协议一键登录 非公众号微信机器人微信群管家 微信自动回复 微信定时发送消息 微信多账号登录 微信网页版本协议多开 一键登录 红包数量提醒 微信用户识别男女签名备注地理位置等,群发 自动发消息 定时发消息 群消息监控 机器人回复 ,定时回复,超时回复 聊天记录保存,聊天记录查看
-- [**328**星][10m] [Py] [justicerage/freedomfighting](https://github.com/justicerage/freedomfighting) A collection of scripts which may come in handy during your freedom fighting activities.
-- [**328**星][1m] [PowerShell] [joelgmsec/autordpwn](https://github.com/joelgmsec/autordpwn) The Shadow Attack Framework
-- [**328**星][10d] [Py] [efforg/starttls-everywhere](https://github.com/efforg/starttls-everywhere) A system for ensuring & authenticating STARTTLS encryption between mail servers
-- [**328**星][5m] [Java] [datatheorem/trustkit-android](https://github.com/datatheorem/trustkit-android) Easy SSL pinning validation and reporting for Android.
-- [**328**星][1m] [Py] [daniestevez/gr-satellites](https://github.com/daniestevez/gr-satellites) GNU Radio decoders for several Amateur satellites
-- [**328**星][4m] [Go] [capsule8/capsule8](https://github.com/capsule8/capsule8) 对云本地,容器和传统的基于 Linux 的服务器执行高级的行为监控
-- [**327**星][11d] [Java] [portswigger/http-request-smuggler](https://github.com/PortSwigger/http-request-smuggler) an extension for Burp Suite designed to help you launch HTTP Request Smuggling attack
-- [**327**星][7d] [stamparm/ipsum](https://github.com/stamparm/ipsum) Daily feed of bad IPs (with blacklist hit scores)
+- [**328**星][3y] [Py] [faizann24/fwaf-machine-learning-driven-web-application-firewall](https://github.com/faizann24/fwaf-machine-learning-driven-web-application-firewall) 机器学习驱动的WAF,可高精度检测恶意查询
+- [**328**星][12d] [Py] [efforg/starttls-everywhere](https://github.com/efforg/starttls-everywhere) A system for ensuring & authenticating STARTTLS encryption between mail servers
+- [**328**星][11m] [C] [e-ago/bitcracker](https://github.com/e-ago/bitcracker) BitLocker密码破解器
+- [**328**星][3m] [Py] [defaultnamehere/cookie_crimes](https://github.com/defaultnamehere/cookie_crimes) Read local Chrome cookies without root or decrypting
+- [**328**星][4m] [C] [csete/gpredict](https://github.com/csete/gpredict) a real time satellite tracking and orbit prediction program
+for the Linux desktop
+- [**328**星][1m] [TS] [algolia/hn-search](https://github.com/algolia/hn-search) Hacker News Search
+- [**327**星][16d] [Py] [datadriventests/ddt](https://github.com/datadriventests/ddt) Data-Driven Tests for Python Unittest
+- [**327**星][3m] [Shell] [vanhoefm/modwifi](https://github.com/vanhoefm/modwifi)
+- [**327**星][15d] [Java] [spring-cloud/spring-cloud-openfeign](https://github.com/spring-cloud/spring-cloud-openfeign) Support for using OpenFeign in Spring Cloud apps
+- [**327**星][1m] [C] [royhills/arp-scan](https://github.com/royhills/arp-scan) The ARP Scanner
- [**327**星][3y] [JS] [qgy18/pangolin](https://github.com/qgy18/pangolin) A light weight http tunnels to localhost.
- [**327**星][4y] [JS] [pwnsdx/randomdns](https://github.com/pwnsdx/randomdns) improve the security, privacy and anonymity of DNSCrypt
-- [**327**星][1y] [C++] [polidea/siriusobfuscator](https://github.com/polidea/siriusobfuscator) a tool for performing source-to-source obfuscation of Swift projects
-- [**327**星][7m] [Java] [jaegertracing/jaeger-kubernetes](https://github.com/jaegertracing/jaeger-kubernetes) Support for deploying Jaeger into Kubernetes
-- [**327**星][3y] [Py] [faizann24/fwaf-machine-learning-driven-web-application-firewall](https://github.com/faizann24/fwaf-machine-learning-driven-web-application-firewall) 机器学习驱动的WAF,可高精度检测恶意查询
-- [**327**星][11m] [C] [e-ago/bitcracker](https://github.com/e-ago/bitcracker) BitLocker密码破解器
-- [**327**星][3m] [Py] [defaultnamehere/cookie_crimes](https://github.com/defaultnamehere/cookie_crimes) Read local Chrome cookies without root or decrypting
+- [**327**星][6m] [Go] [nhoya/gosint](https://github.com/nhoya/gosint) OSINT Swiss Army Knife
+- [**327**星][30d] [Py] [m8r0wn/nullinux](https://github.com/m8r0wn/nullinux) SMB null 会话识别和枚举工具
+- [**327**星][2m] [PS] [joelgmsec/autordpwn](https://github.com/joelgmsec/autordpwn) The Shadow Attack Framework
+- [**327**星][9d] [Py] [fireeye/stringsifter](https://github.com/fireeye/stringsifter) A machine learning tool that automatically ranks strings based on their relevance for malware analysis.
- [**327**星][3y] [Ruby] [antisnatchor/phishlulz](https://github.com/antisnatchor/phishlulz)
-- [**327**星][1m] [TypeScript] [algolia/hn-search](https://github.com/algolia/hn-search) Hacker News Search
-- [**327**星][1y] [Shell] [1n3/goohak](https://github.com/1n3/goohak) Automatically Launch Google Hacking Queries Against A Target Domain
+- [**326**星][22d] [Go] [square/sharkey](https://github.com/square/sharkey) Sharkey is a service for managing certificates for use by OpenSSH
- [**326**星][10m] [Py] [samhaxr/hackbox](https://github.com/samhaxr/hackbox) 集合了某些Hacking工具和技巧的攻击工具
- [**326**星][9m] [pxlpnk/awesome-ruby-security](https://github.com/pxlpnk/awesome-ruby-security) Awesome Ruby Security resources
-- [**326**星][28d] [Py] [m8r0wn/nullinux](https://github.com/m8r0wn/nullinux) SMB null 会话识别和枚举工具
-- [**326**星][2m] [Java] [jaegertracing/jaeger-client-java](https://github.com/jaegertracing/jaeger-client-java) Jaeger Bindings for Java OpenTracing API
-- [**326**星][2m] [CSS] [guyoung/captfencoder](https://github.com/guyoung/captfencoder) CaptfEncoder是一款跨平台网络安全工具套件,提供网络安全相关编码转换、古典密码、密码学、特殊编码等工具,并聚合各类在线工具。
-- [**326**星][4m] [C] [csete/gpredict](https://github.com/csete/gpredict) a real time satellite tracking and orbit prediction program
-for the Linux desktop
+- [**326**星][2d] [Batchfile] [mitchellkrogza/ultimate.hosts.blacklist](https://github.com/mitchellkrogza/ultimate.hosts.blacklist) The Ultimate Unified Hosts file for protecting your network, computer, smartphones and Wi-Fi devices against millions of bad web sites. Protect your children and family from gaining access to bad web sites and protect your devices and pc from being infected with Malware or Ransomware.
+- [**326**星][2y] [Java] [mar-v-in/arthook](https://github.com/mar-v-in/arthook) Library for hooking on ART
+- [**326**星][3m] [Shell] [extremeshok/clamav-unofficial-sigs](https://github.com/extremeshok/clamav-unofficial-sigs) ClamAV Unofficial Signatures Updater maintained by eXtremeSHOK.com
+- [**326**星][6y] [C] [diegocr/netcat](https://github.com/diegocr/netcat) NetCat for Windows
+- [**326**星][4m] [C++] [cedarctic/digispark-scripts](https://github.com/cedarctic/digispark-scripts) USB Rubber Ducky type scripts written for the DigiSpark.
- [**326**星][2y] [Py] [baldassarrefe/deep-koalarization](https://github.com/baldassarrefe/deep-koalarization) Keras/Tensorflow implementation of our paper Grayscale Image Colorization using deep CNN and Inception-ResNet-v2 (
-- [**326**星][13d] [JS] [auth0/repo-supervisor](https://github.com/auth0/repo-supervisor) Serverless工具,在pull请求中扫描源码,搜索密码及其他秘密
-- [**325**星][14d] [Py] [datadriventests/ddt](https://github.com/datadriventests/ddt) Data-Driven Tests for Python Unittest
+- [**325**星][27d] [C++] [secure-software-engineering/phasar](https://github.com/secure-software-engineering/phasar) A LLVM-based static analysis framework.
+- [**325**星][2m] [C] [xelerance/xl2tpd](https://github.com/xelerance/xl2tpd) an implementation of the Layer 2 Tunnelling Protocol (RFC 2661)
- [**325**星][3m] [Py] [vulmon/vulmap](https://github.com/vulmon/vulmap) Vulmap Online Local Vulnerability Scanners Project
-- [**325**星][3m] [Shell] [vanhoefm/modwifi](https://github.com/vanhoefm/modwifi)
-- [**325**星][27d] [stardustsky/saidict](https://github.com/stardustsky/saidict) 弱口令,敏感目录,敏感文件等渗透测试常用攻击字典
-- [**325**星][20d] [Go] [square/sharkey](https://github.com/square/sharkey) Sharkey is a service for managing certificates for use by OpenSSH
-- [**325**星][13d] [PHP] [scheb/two-factor-bundle](https://github.com/scheb/two-factor-bundle) Two-factor authentication for Symfony applications
-- [**325**星][30d] [C] [royhills/arp-scan](https://github.com/royhills/arp-scan) The ARP Scanner
-- [**325**星][6m] [Go] [nhoya/gosint](https://github.com/nhoya/gosint) OSINT Swiss Army Knife
-- [**325**星][3y] [Visual Basic] [khr0x40sh/macroshop](https://github.com/khr0x40sh/macroshop) Collection of scripts to aid in delivering payloads via Office Macros. Most are python. See
+- [**325**星][3d] [PHP] [scheb/two-factor-bundle](https://github.com/scheb/two-factor-bundle) Two-factor authentication for Symfony applications
+- [**325**星][5m] [Go] [saturnsvoid/gobot2](https://github.com/saturnsvoid/gobot2) Second Version of The GoBot Botnet, But more advanced.
+- [**325**星][3y] [Shell] [nsakey/nsa-rules](https://github.com/nsakey/nsa-rules) Password cracking rules and masks for hashcat that I generated from cracked passwords.
+- [**325**星][3y] [mikesiko/practicalmalwareanalysis-labs](https://github.com/mikesiko/practicalmalwareanalysis-labs) Binaries for the book Practical Malware Analysis
- [**325**星][2y] [TeX] [ivyl/rootkit](https://github.com/ivyl/rootkit) Sample Rootkit for Linux
-- [**325**星][7d] [Py] [fireeye/stringsifter](https://github.com/fireeye/stringsifter) A machine learning tool that automatically ranks strings based on their relevance for malware analysis.
-- [**324**星][2m] [C] [xelerance/xl2tpd](https://github.com/xelerance/xl2tpd) an implementation of the Layer 2 Tunnelling Protocol (RFC 2661)
+- [**325**星][6d] [Py] [initstring/linkedin2username](https://github.com/initstring/linkedin2username) Generate username lists for companies on LinkedIn
+- [**324**星][1y] [Java] [ysrc/liudao](https://github.com/ysrc/liudao) “六道”实时业务风控系统
+- [**324**星][11m] [Py] [secwiki/office-exploits](https://github.com/secwiki/office-exploits) office-exploits Office漏洞集合
- [**324**星][2y] [Rust] [pravic/winapi-kmd-rs](https://github.com/pravic/winapi-kmd-rs) Rust编写的Windows内核模式驱动
-- [**324**星][3y] [Shell] [nsakey/nsa-rules](https://github.com/nsakey/nsa-rules) Password cracking rules and masks for hashcat that I generated from cracked passwords.
- [**324**星][1y] [JS] [nccgroup/wssip](https://github.com/nccgroup/wssip) 服务器和客户端之间通信时自定义 WebSocket 数据的捕获、修改和发送。
-- [**324**星][7d] [Batchfile] [mitchellkrogza/ultimate.hosts.blacklist](https://github.com/mitchellkrogza/ultimate.hosts.blacklist) The Ultimate Unified Hosts file for protecting your network, computer, smartphones and Wi-Fi devices against millions of bad web sites. Protect your children and family from gaining access to bad web sites and protect your devices and pc from being infected with Malware or Ransomware.
-- [**324**星][3y] [mikesiko/practicalmalwareanalysis-labs](https://github.com/mikesiko/practicalmalwareanalysis-labs) Binaries for the book Practical Malware Analysis
+- [**324**星][8m] [Py] [jasonstrimpel/volatility-trading](https://github.com/jasonstrimpel/volatility-trading) A complete set of volatility estimators based on Euan Sinclair's Volatility Trading
- [**324**星][5y] [C] [ioerror/tlsdate](https://github.com/ioerror/tlsdate) secure parasitic rdate replacement
-- [**324**星][6y] [C] [diegocr/netcat](https://github.com/diegocr/netcat) NetCat for Windows
+- [**324**星][5m] [JS] [hr/crypter](https://github.com/hr/crypter) An innovative, convenient and secure cross-platform encryption app
+- [**324**星][11m] [Py] [alessandroz/lazagneforensic](https://github.com/alessandroz/lazagneforensic) Windows passwords decryption from dump files
+- [**323**星][9d] [PS] [fortynorthsecurity/egress-assess](https://github.com/FortyNorthSecurity/Egress-Assess) Egress-Assess is a tool used to test egress data detection capabilities
+- [**323**星][29d] [Shell] [zmarch/orc](https://github.com/zmarch/orc) Orc is a post-exploitation framework for Linux written in Bash
- [**323**星][3y] [C] [vusec/revanc](https://github.com/vusec/revanc) Reverse Engineering Page Table Caches in Your Processor
-- [**323**星][13d] [Java] [spring-cloud/spring-cloud-openfeign](https://github.com/spring-cloud/spring-cloud-openfeign) Support for using OpenFeign in Spring Cloud apps
- [**323**星][10m] [QMake] [ncatlin/rgat](https://github.com/ncatlin/rgat) 指令追踪可视化, 辅助建立目标行为和代码之间的连接.
-- [**323**星][5m] [Py] [initstring/linkedin2username](https://github.com/initstring/linkedin2username) Generate username lists for companies on LinkedIn
-- [**323**星][5m] [JS] [hr/crypter](https://github.com/hr/crypter) An innovative, convenient and secure cross-platform encryption app
-- [**323**星][4m] [C++] [cedarctic/digispark-scripts](https://github.com/cedarctic/digispark-scripts) USB Rubber Ducky type scripts written for the DigiSpark.
-- [**323**星][4m] [Java] [bit4woo/knife](https://github.com/bit4woo/knife) A burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅
-- [**323**星][11m] [Py] [alessandroz/lazagneforensic](https://github.com/alessandroz/lazagneforensic) Windows passwords decryption from dump files
-- [**322**星][17d] [PowerShell] [fortynorthsecurity/egress-assess](https://github.com/FortyNorthSecurity/Egress-Assess) Egress-Assess is a tool used to test egress data detection capabilities
-- [**322**星][1y] [Java] [ysrc/liudao](https://github.com/ysrc/liudao) “六道”实时业务风控系统
-- [**322**星][2y] [Java] [mar-v-in/arthook](https://github.com/mar-v-in/arthook) Library for hooking on ART
-- [**322**星][3m] [Shell] [extremeshok/clamav-unofficial-sigs](https://github.com/extremeshok/clamav-unofficial-sigs) ClamAV Unofficial Signatures Updater maintained by eXtremeSHOK.com
-- [**322**星][2m] [Objective-C] [auth0/simplekeychain](https://github.com/auth0/simplekeychain) A Keychain helper for iOS to make it very simple to store/obtain values from iOS Keychain
-- [**321**星][25d] [C++] [secure-software-engineering/phasar](https://github.com/secure-software-engineering/phasar) A LLVM-based static analysis framework.
-- [**321**星][3m] [Solidity] [provable-things/ethereum-examples](https://github.com/provable-things/ethereum-examples) Code examples showing how to use the Provable API on Ethereum
+- [**323**星][3y] [Py] [ius/rsatool](https://github.com/ius/rsatool) rsatool can be used to calculate RSA and RSA-CRT parameters
+- [**323**星][21d] [Py] [atc-project/atomic-threat-coverage](https://github.com/atc-project/atomic-threat-coverage) Actionable analytics designed to combat threats based on MITRE's ATT&CK.
+- [**322**星][3d] [HTML] [tanjiti/sec_profile](https://github.com/tanjiti/sec_profile) 爬取secwiki和xuanwu.github.io/sec.today,分析安全信息站点、安全趋势、提取安全工作者账号(twitter,weixin,github等)
+- [**322**星][1y] [C] [smartdone/dexdump](https://github.com/smartdone/dexdump) 一个用来快速脱一代壳的工具(稍微改下就可以脱类抽取那种壳)(Android)
+- [**322**星][2m] [ObjC] [auth0/simplekeychain](https://github.com/auth0/simplekeychain) A Keychain helper for iOS to make it very simple to store/obtain values from iOS Keychain
+- [**322**星][1y] [C++] [alicanakyol/sems](https://github.com/alicanakyol/sems) Virtualbox, VirtualMachine, Cuckoo, Anubis, ThreatExpert, Sandboxie, QEMU, Analysis Tools Detection Tools
- [**321**星][4y] [Py] [ztrix/zio](https://github.com/ztrix/zio) easy-to-use io library for pwning development, supporting an unified interface for local process pwning and TCP socket io
-- [**321**星][27d] [Shell] [zmarch/orc](https://github.com/zmarch/orc) Orc is a post-exploitation framework for Linux written in Bash
- [**321**星][7m] [C#] [yalcinyolalan/wssat](https://github.com/yalcinyolalan/wssat) web service security scanning tool which provides a dynamic environment to add, update or delete vulnerabilities by just editing its configuration files
+- [**321**星][4y] [Perl] [truongkma/ctf-tools](https://github.com/truongkma/ctf-tools) tổng hợp tool ctf
+- [**321**星][1m] [Go] [tomnomnom/assetfinder](https://github.com/tomnomnom/assetfinder) Find domains and subdomains related to a given domain
- [**321**星][2y] [PHP] [tanjiti/webshellsample](https://github.com/tanjiti/webshellsample) webshell sample for WebShell Log Analysis
-- [**321**星][1y] [C] [smartdone/dexdump](https://github.com/smartdone/dexdump) 一个用来快速脱一代壳的工具(稍微改下就可以脱类抽取那种壳)(Android)
-- [**321**星][5m] [Go] [saturnsvoid/gobot2](https://github.com/saturnsvoid/gobot2) Second Version of The GoBot Botnet, But more advanced.
-- [**321**星][3m] [PowerShell] [kmkz/pentesting](https://github.com/kmkz/pentesting) Tricks for penetration testing
-- [**321**星][3y] [Py] [ius/rsatool](https://github.com/ius/rsatool) rsatool can be used to calculate RSA and RSA-CRT parameters
-- [**321**星][2m] [HTML] [coinbase/salus](https://github.com/coinbase/salus) Security scanner coordinator
-- [**321**星][1y] [C++] [alicanakyol/sems](https://github.com/alicanakyol/sems) Virtualbox, VirtualMachine, Cuckoo, Anubis, ThreatExpert, Sandboxie, QEMU, Analysis Tools Detection Tools
-- [**320**星][10d] [Py] [vector35/binaryninja-api](https://github.com/vector35/binaryninja-api) Public API, examples, documentation and issues for Binary Ninja
-- [**320**星][2y] [Kotlin] [ollide/intellij-java2smali](https://github.com/ollide/intellij-java2smali) A plugin for IntelliJ IDEA & Android Studio to easily compile Java & Kotlin files to smali.
-- [**320**星][11m] [cryin/paper](https://github.com/cryin/paper) Web Security Technology & Vulnerability Analysis Whitepapers
-- [**319**星][4y] [Perl] [truongkma/ctf-tools](https://github.com/truongkma/ctf-tools) tổng hợp tool ctf
-- [**319**星][7d] [HTML] [tanjiti/sec_profile](https://github.com/tanjiti/sec_profile) 爬取secwiki和xuanwu.github.io/sec.today,分析安全信息站点、安全趋势、提取安全工作者账号(twitter,weixin,github等)
-- [**319**星][25d] [C++] [silverf0x/rpcview](https://github.com/silverf0x/rpcview) RpcView is a free tool to explore and decompile Microsoft RPC interfaces
+- [**321**星][2y] [Kotlin] [ollide/intellij-java2smali](https://github.com/ollide/intellij-java2smali) A plugin for IntelliJ IDEA & Android Studio to easily compile Java & Kotlin files to smali.
+- [**321**星][3m] [PS] [kmkz/pentesting](https://github.com/kmkz/pentesting) 渗透测试技巧
+- [**321**星][8d] [C] [google/safeside](https://github.com/google/safeside) Understand and mitigate software-observable side-channels
+- [**321**星][24d] [C] [dyninst/dyninst](https://github.com/dyninst/dyninst) Tools for binary instrumentation, analysis, and modification.
+- [**320**星][22d] [Py] [mr-un1k0d3r/scshell](https://github.com/mr-un1k0d3r/scshell) Fileless lateral movement tool that relies on ChangeServiceConfigA to run command
+- [**320**星][3m] [Solidity] [provable-things/ethereum-examples](https://github.com/provable-things/ethereum-examples) Code examples showing how to use the Provable API on Ethereum
+- [**320**星][9m] [JS] [zyszys/awesome-captcha](https://github.com/zyszys/awesome-captcha)
+- [**320**星][2d] [Py] [vector35/binaryninja-api](https://github.com/vector35/binaryninja-api) Public API, examples, documentation and issues for Binary Ninja
+- [**320**星][2m] [Py] [owasp/owasp-vwad](https://github.com/owasp/owasp-vwad) The OWASP Vulnerable Web Applications Directory Project (VWAD) is a comprehensive and well maintained registry of all known vulnerable web applications currently available.
+- [**320**星][12m] [cryin/paper](https://github.com/cryin/paper) Web Security Technology & Vulnerability Analysis Whitepapers
+- [**320**星][2m] [HTML] [coinbase/salus](https://github.com/coinbase/salus) Security scanner coordinator
+- [**319**星][3m] [xsleaks/xsleaks](https://github.com/xsleaks/xsleaks) A collection of browser-based side channel attack vectors.
+- [**319**星][27d] [Go] [wangyihang/platypus](https://github.com/wangyihang/platypus) A modern multiple reverse shell sessions/clients manager via terminal written in go
+- [**319**星][7d] [C#] [tmoonlight/nsmartproxy](https://github.com/tmoonlight/nsmartproxy) NSmartProxy是一款开源免费的内网穿透工具。采用.NET CORE的全异步模式打造。(NSmartProxy is an open source reverse proxy tool that creates a secure tunnel from a public endpoint to a locally service.)
+- [**319**星][27d] [C++] [silverf0x/rpcview](https://github.com/silverf0x/rpcview) RpcView is a free tool to explore and decompile Microsoft RPC interfaces
+- [**319**星][1y] [Py] [securing/dumpsterdiver](https://github.com/securing/dumpsterdiver) Tool to search secrets in various filetypes.
- [**319**星][4m] [HTML] [intezer/linux-explorer](https://github.com/intezer/linux-explorer) 针对Linux 系统的现场取证工具箱. Web 界面, 简单易用
-- [**319**星][22d] [C] [dyninst/dyninst](https://github.com/dyninst/dyninst) Tools for binary instrumentation, analysis, and modification.
-- [**319**星][2y] [Objective-C] [doadam/ziva](https://github.com/doadam/ziva) An iOS kernel exploit designated to work on all iOS devices <= 10.3.1
+- [**319**星][1m] [C] [hfiref0x/syscalltables](https://github.com/hfiref0x/syscalltables) Windows NT x64系统调用表
+- [**319**星][2y] [ObjC] [doadam/ziva](https://github.com/doadam/ziva) An iOS kernel exploit designated to work on all iOS devices <= 10.3.1
+- [**319**星][13d] [cryptax/confsec](https://github.com/cryptax/confsec) Security, hacking conferences (list)
+- [**319**星][24d] [Py] [census/shadow](https://github.com/census/shadow) jemalloc heap exploitation framework
+- [**319**星][2m] [Py] [admintony/svnexploit](https://github.com/admintony/svnexploit) SvnExploit支持SVN源代码泄露全版本Dump源码
- [**319**星][9m] [Py] [a2u/cve-2018-7600](https://github.com/a2u/cve-2018-7600)
+- [**318**星][20d] [trustedsec/physical-docs](https://github.com/trustedsec/physical-docs) This is a collection of legal wording and documentation used for physical security assessments. The goal is to hopefully allow this as a template for other companies to use and to protect themselves when conducting physical security assessments.
- [**318**星][1y] [Ruby] [carletonstuberg/browser-backdoor](https://github.com/CarletonStuberg/browser-backdoor) BrowserBackdoor is an Electron Application with a JavaScript WebSocket Backdoor and a Ruby Command-Line Listener
-- [**318**星][9d] [Java] [wiglenet/wigle-wifi-wardriving](https://github.com/wiglenet/wigle-wifi-wardriving) Nethugging client for Android, from wigle.net
+- [**318**星][3d] [Java] [wiglenet/wigle-wifi-wardriving](https://github.com/wiglenet/wigle-wifi-wardriving) Nethugging client for Android, from wigle.net
- [**318**星][1y] [C#] [spiderlabs/dohc2](https://github.com/spiderlabs/dohc2) DoHC2 allows the ExternalC2 library from Ryan Hanson (
-- [**318**星][1y] [Py] [securing/dumpsterdiver](https://github.com/securing/dumpsterdiver) Tool to search secrets in various filetypes.
-- [**318**星][2m] [C] [rehints/publications](https://github.com/rehints/publications) Conference slides and White-papers
-- [**318**星][3y] [C++] [pipesocks/pipesocks](https://github.com/pipesocks/pipesocks) A pipe-like SOCKS5 tunnel system.
-- [**318**星][8m] [Py] [jasonstrimpel/volatility-trading](https://github.com/jasonstrimpel/volatility-trading) A complete set of volatility estimators based on Euan Sinclair's Volatility Trading
+- [**318**星][3m] [C] [rehints/publications](https://github.com/rehints/publications) Conference slides and White-papers
- [**318**星][3y] [Py] [j91321/rext](https://github.com/j91321/rext) Router EXploitation Toolkit - small toolkit for easy creation and usage of various python scripts that work with embedded devices.
+- [**318**星][18d] [C] [frida/frida-core](https://github.com/frida/frida-core) Frida core library intended for static linking into bindings
- [**318**星][2y] [C] [fireeye/rvmi](https://github.com/fireeye/rvmi) steroids 调试器,利用 VMI(Virtual Machine Introspection) 和内存取证来提供全面的系统分析
-- [**318**星][22d] [Py] [census/shadow](https://github.com/census/shadow) jemalloc heap exploitation framework
+- [**318**星][12m] [crazywa1ker/darthsidious-chinese](https://github.com/crazywa1ker/darthsidious-chinese) 从0开始你的域渗透之旅
+- [**318**星][10m] [Py] [cisco-sas/kitty](https://github.com/cisco-sas/kitty) Fuzzing framework written in python
+- [**318**星][7d] [JS] [chichou/bagbak](https://github.com/ChiChou/bagbak) Yet another frida based iOS dumpdecrypted, works on iOS 13 with checkra1n and supports decrypting app extensions
- [**318**星][2y] [C++] [bastilleresearch/gr-lora](https://github.com/bastilleresearch/gr-lora) GNU Radio OOT module implementing the LoRa PHY, based on
-- [**318**星][19d] [Py] [atc-project/atomic-threat-coverage](https://github.com/atc-project/atomic-threat-coverage) Actionable analytics designed to combat threats based on MITRE's ATT&CK.
-- [**317**星][2m] [Py] [raikia/uhoh365](https://github.com/raikia/uhoh365) A script that can see if an email address is valid in Office365 (user/email enumeration). This does not perform any login attempts, is unthrottled, and is incredibly useful for social engineering assessments to find which emails exist and which don't.
- [**317**星][2y] [ysrc/f-scrack](https://github.com/ysrc/f-scrack) F-Scrack is a single file bruteforcer supports multi-protocol
+- [**317**星][6m] [Py] [williballenthin/python-idb](https://github.com/williballenthin/python-idb) idb 文件解析和分析工具
+- [**317**星][4m] [JS] [vngkv123/asiagaming](https://github.com/vngkv123/asiagaming) Chrome, Safari Exploitation
+- [**317**星][5y] [shadowsocksr-rm/shadowsocks-rss](https://github.com/shadowsocksr-rm/shadowsocks-rss) ShadowsocksR update rss, SSR organization
- [**317**星][3y] [C] [sdhand/x11fs](https://github.com/sdhand/x11fs) 操作X windows
-- [**317**星][1m] [Py] [owasp/owasp-vwad](https://github.com/owasp/owasp-vwad) The OWASP Vulnerable Web Applications Directory Project (VWAD) is a comprehensive and well maintained registry of all known vulnerable web applications currently available.
-- [**317**星][7y] [Py] [moxie0/chapcrack](https://github.com/moxie0/chapcrack) A tool for parsing and decrypting MS-CHAPv2 network handshakes
+- [**317**星][4m] [push0ebp/sig-database](https://github.com/push0ebp/sig-database) IDA FLIRT Signature Database
+- [**317**星][13d] [JS] [privacypass/challenge-bypass-extension](https://github.com/privacypass/challenge-bypass-extension) 用于匿名认证的浏览器扩展
+- [**317**星][3y] [C++] [pipesocks/pipesocks](https://github.com/pipesocks/pipesocks) A pipe-like SOCKS5 tunnel system.
+- [**317**星][7d] [C] [phaag/nfdump](https://github.com/phaag/nfdump) Netflow processing tools
+- [**317**星][1m] [Visual Basic .NET] [nccgroup/vcg](https://github.com/nccgroup/vcg) Code security scanning tool.
- [**317**星][2y] [marcan/speculation-bugs](https://github.com/marcan/speculation-bugs) Docs and resources on CPU Speculative Execution bugs
-- [**317**星][11d] [cryptax/confsec](https://github.com/cryptax/confsec) Security, hacking conferences (list)
-- [**317**星][12m] [crazywa1ker/darthsidious-chinese](https://github.com/crazywa1ker/darthsidious-chinese) 从0开始你的域渗透之旅
-- [**316**星][6m] [Py] [williballenthin/python-idb](https://github.com/williballenthin/python-idb) idb 文件解析和分析工具
-- [**316**星][25d] [Go] [wangyihang/platypus](https://github.com/wangyihang/platypus) A modern multiple reverse shell sessions/clients manager via terminal written in go
-- [**316**星][12d] [C#] [tmoonlight/nsmartproxy](https://github.com/tmoonlight/nsmartproxy) NSmartProxy是一款开源免费的内网穿透工具。采用.NET CORE的全异步模式打造。(NSmartProxy is an open source reverse proxy tool that creates a secure tunnel from a public endpoint to a locally service.)
-- [**316**星][5y] [shadowsocksr-rm/shadowsocks-rss](https://github.com/shadowsocksr-rm/shadowsocks-rss) ShadowsocksR update rss, SSR organization
-- [**316**星][11m] [Py] [secwiki/office-exploits](https://github.com/secwiki/office-exploits) office-exploits Office漏洞集合
-- [**316**星][30d] [C] [hfiref0x/syscalltables](https://github.com/hfiref0x/syscalltables) Windows NT x64系统调用表
+- [**317**星][1y] [C++] [m0n0ph1/process-hollowing](https://github.com/m0n0ph1/process-hollowing) Great explanation of Process Hollowing (a Technique often used in Malware)
+- [**317**星][5y] [C++] [frida/cryptoshark](https://github.com/frida/cryptoshark) Self-optimizing cross-platform code tracer based on dynamic recompilation
+- [**317**星][2m] [HTML] [eugenekolo/sec-tools](https://github.com/eugenekolo/sec-tools) A set of security related tools
+- [**317**星][3y] [C] [chobits/tapip](https://github.com/chobits/tapip) user-mode TCP/IP stack based on linux tap device
+- [**316**星][6d] [PHP] [anonaddy/anonaddy](https://github.com/anonaddy/anonaddy) Anonymous email forwarding
+- [**316**星][5d] [Java] [spongepowered/mixin](https://github.com/spongepowered/mixin) Mixin is a trait/mixin and bytecode weaving framework for Java using ASM
+- [**316**星][3y] [C] [scumjr/dirtycow-vdso](https://github.com/scumjr/dirtycow-vdso) PoC for Dirty COW (CVE-2016-5195)
+- [**316**星][2m] [C] [ohjeongwook/darungrim](https://github.com/ohjeongwook/darungrim) 软件补丁分析工具
+ - [IDA插件](https://github.com/ohjeongwook/darungrim/tree/master/Src/IDAPlugin)
+ - [DGEngine](https://github.com/ohjeongwook/darungrim/tree/master/Src/DGEngine)
+- [**316**星][7y] [Py] [moxie0/chapcrack](https://github.com/moxie0/chapcrack) A tool for parsing and decrypting MS-CHAPv2 network handshakes
+- [**316**星][3d] [C++] [knxd/knxd](https://github.com/knxd/knxd) a very common building automation protocol which runs on dedicated 9600-baud wire as well as IP multicast
- [**316**星][1y] [PHP] [grt1st/wooyun_search](https://github.com/grt1st/wooyun_search) 乌云公开漏洞、知识库搜索 search from wooyun.org
-- [**316**星][12d] [C] [google/safeside](https://github.com/google/safeside) Understand and mitigate software-observable side-channels
-- [**316**星][16d] [C] [frida/frida-core](https://github.com/frida/frida-core) Frida core library intended for static linking into bindings
-- [**316**星][5y] [C++] [frida/cryptoshark](https://github.com/frida/cryptoshark) Self-optimizing cross-platform code tracer based on dynamic recompilation
+- [**316**星][2y] [Py] [ethventures/cryptotracker](https://github.com/ethventures/cryptotracker) A complete open source system for tracking and visualizing cryptocurrency price movements on leading exchanges
- [**316**星][8m] [HTML] [ethereum/ethereum-org](https://github.com/ethereum/ethereum-org) [ARCHIVED] Ethereum Foundation website from 2016-2019
-- [**316**星][3y] [C] [chobits/tapip](https://github.com/chobits/tapip) user-mode TCP/IP stack based on linux tap device
-- [**316**星][21d] [C] [ascii-boxes/boxes](https://github.com/ascii-boxes/boxes) Command line ASCII boxes unlimited!
+- [**316**星][24d] [C] [ascii-boxes/boxes](https://github.com/ascii-boxes/boxes) Command line ASCII boxes unlimited!
+- [**315**星][11d] [trimstray/technical-whitepapers](https://github.com/trimstray/technical-whitepapers) 收集:IT白皮书、PPT、PDF、Hacking、Web应用程序安全性、数据库、逆向等
- [**315**星][2y] [Py] [tnich/honssh](https://github.com/tnich/honssh) 记录客户端和服务器之间的所有 SSH 通信
- [**315**星][1y] [C] [tharina/blackhoodie-2018-workshop](https://github.com/tharina/blackhoodie-2018-workshop) Slides and challenges for my binary exploitation workshop at BlackHoodie 2018.
- [**315**星][5y] [C] [seastorm/puttyrider](https://github.com/seastorm/puttyrider) Hijack Putty sessions in order to sniff conversation and inject Linux commands.
-- [**315**星][11d] [JS] [privacypass/challenge-bypass-extension](https://github.com/privacypass/challenge-bypass-extension) 用于匿名认证的浏览器扩展
-- [**315**星][2m] [C] [ohjeongwook/darungrim](https://github.com/ohjeongwook/darungrim) 软件补丁分析工具
- - [IDA插件](https://github.com/ohjeongwook/darungrim/tree/master/Src/IDAPlugin)
- - [DGEngine](https://github.com/ohjeongwook/darungrim/tree/master/Src/DGEngine)
-- [**315**星][2m] [HTML] [eugenekolo/sec-tools](https://github.com/eugenekolo/sec-tools) A set of security related tools
-- [**315**星][2y] [Py] [ethventures/cryptotracker](https://github.com/ethventures/cryptotracker) A complete open source system for tracking and visualizing cryptocurrency price movements on leading exchanges
-- [**315**星][10m] [Py] [cisco-sas/kitty](https://github.com/cisco-sas/kitty) Fuzzing framework written in python
-- [**315**星][24d] [Py] [circl/lookyloo](https://github.com/circl/lookyloo) Lookyloo is a web interface allowing to scrape a website and then displays a tree of domains calling each other.
-- [**315**星][2m] [Py] [admintony/svnexploit](https://github.com/admintony/svnexploit) SvnExploit支持SVN源代码泄露全版本Dump源码
-- [**314**星][4m] [JS] [vngkv123/asiagaming](https://github.com/vngkv123/asiagaming) Chrome, Safari Exploitation
-- [**314**星][1m] [Go] [tomnomnom/assetfinder](https://github.com/tomnomnom/assetfinder) Find domains and subdomains related to a given domain
-- [**314**星][15d] [Java] [spongepowered/mixin](https://github.com/spongepowered/mixin) Mixin is a trait/mixin and bytecode weaving framework for Java using ASM
+- [**315**星][8m] [Py] [n0fate/chainbreaker](https://github.com/n0fate/chainbreaker) Mac OS X Keychain Forensic Tool
+- [**315**星][26d] [Py] [circl/lookyloo](https://github.com/circl/lookyloo) Lookyloo is a web interface allowing to scrape a website and then displays a tree of domains calling each other.
+- [**314**星][1y] [Go] [benjojo/bgp-battleships](https://github.com/benjojo/bgp-battleships) Play battleships using BGP
+- [**314**星][6m] [waylau/vpngate-mirrors](https://github.com/waylau/vpngate-mirrors) Here are the newset VPN Gate web site’s mirrors .With the VPN Gate, you can get through your government's firewall to browse restricted websites.提供最新的访问 VPN Gate 镜像网站,通过使用 VPN 自由访问互联网(翻墙)!
+- [**314**星][5d] [C++] [trailofbits/pe-parse](https://github.com/trailofbits/pe-parse) Principled, lightweight C/C++ PE parser
+- [**314**星][3y] [PHP] [snoopysecurity/dvws](https://github.com/snoopysecurity/dvws) Damn Vulnerable Web Services is an insecure web application with multiple vulnerable web service components that can be used to learn real world web service vulnerabilities.
- [**314**星][3y] [Py] [saelo/armpwn](https://github.com/saelo/armpwn) Repository to train/learn memory corruption on the ARM platform.
-- [**314**星][8d] [C++] [psi-rockin/dobiestation](https://github.com/psi-rockin/dobiestation) A dog-themed PS2 emulator
+- [**314**星][7d] [C++] [psi-rockin/dobiestation](https://github.com/psi-rockin/dobiestation) A dog-themed PS2 emulator
- [**314**星][2y] [PHP] [offensive-security/masscan-web-ui](https://github.com/offensive-security/masscan-web-ui) MASSCAN Web UI
-- [**314**星][1m] [Visual Basic] [nccgroup/vcg](https://github.com/nccgroup/vcg) Code security scanning tool.
-- [**314**星][8m] [Py] [n0fate/chainbreaker](https://github.com/n0fate/chainbreaker) Mac OS X Keychain Forensic Tool
+- [**314**星][5m] [Py] [mvrozanti/rat-via-telegram](https://github.com/mvrozanti/rat-via-telegram) Windows Remote Administration Tool via Telegram
+- [**314**星][12m] [Gherkin] [middleman/middleman-blog](https://github.com/middleman/middleman-blog) Blog Engine Extension
+- [**314**星][4y] [C] [jvinet/knock](https://github.com/jvinet/knock) A port-knocking daemon
+- [**314**星][8m] [JS] [jivesearch/jivesearch](https://github.com/jivesearch/jivesearch) A search engine that doesn't track you.
+- [**314**星][4m] [Py] [hash3lizer/wifibroot](https://github.com/hash3lizer/wifibroot) A WiFi Pentest Cracking tool for WPA/WPA2 (Handshake, PMKID, Cracking, EAPOL, Deauthentication)
+- [**314**星][2y] [PS] [dafthack/powermeta](https://github.com/dafthack/powermeta) PowerMeta searches for publicly available files hosted on various websites for a particular domain by using specially crafted Google, and Bing searches. It then allows for the download of those files from the target domain. After retrieving the files, the metadata associated with them can be analyzed by PowerMeta. Some interesting things commonl…
- [**314**星][1m] [Shell] [brainfucksec/kalitorify](https://github.com/brainfucksec/kalitorify) Transparent proxy through Tor for Kali Linux OS
-- [**313**星][1y] [Go] [benjojo/bgp-battleships](https://github.com/benjojo/bgp-battleships) Play battleships using BGP
-- [**313**星][3m] [xsleaks/xsleaks](https://github.com/xsleaks/xsleaks) A collection of browser-based side channel attack vectors.
+- [**314**星][5m] [Shell] [1n3/reverseapk](https://github.com/1n3/reverseapk) Quickly analyze and reverse engineer Android packages
- [**313**星][2y] [Py] [sebdah/scrapy-mongodb](https://github.com/sebdah/scrapy-mongodb) MongoDB pipeline for Scrapy. This module supports both MongoDB in standalone setups and replica sets. scrapy-mongodb will insert the items to MongoDB as soon as your spider finds data to extract.
-- [**313**星][3y] [C] [scumjr/dirtycow-vdso](https://github.com/scumjr/dirtycow-vdso) PoC for Dirty COW (CVE-2016-5195)
-- [**313**星][12m] [Gherkin] [middleman/middleman-blog](https://github.com/middleman/middleman-blog) Blog Engine Extension
-- [**313**星][14d] [Py] [google/turbinia](https://github.com/google/turbinia) Automation and Scaling of Digital Forensics Tools
-- [**313**星][2y] [PowerShell] [dafthack/powermeta](https://github.com/dafthack/powermeta) PowerMeta searches for publicly available files hosted on various websites for a particular domain by using specially crafted Google, and Bing searches. It then allows for the download of those files from the target domain. After retrieving the files, the metadata associated with them can be analyzed by PowerMeta. Some interesting things commonl…
-- [**313**星][10m] [PowerShell] [cyb3rward0g/invoke-attackapi](https://github.com/cyb3rward0g/invoke-attackapi) A PowerShell script to interact with the MITRE ATT&CK Framework via its own API
-- [**313**星][5m] [Shell] [1n3/reverseapk](https://github.com/1n3/reverseapk) Quickly analyze and reverse engineer Android packages
-- [**312**星][9d] [trimstray/technical-whitepapers](https://github.com/trimstray/technical-whitepapers) 收集:IT白皮书、PPT、PDF、Hacking、Web应用程序安全性、数据库、逆向等
-- [**312**星][4m] [HTML] [koutto/jok3r](https://github.com/koutto/jok3r) Jok3r v3 BETA 2 - Network and Web Pentest Automation Framework
+- [**313**星][2d] [Py] [google/turbinia](https://github.com/google/turbinia) Automation and Scaling of Digital Forensics Tools
+- [**313**星][5d] [Java] [erudika/para](https://github.com/erudika/para) Open source back-end server for web, mobile and IoT. The backend for busy developers. (self-hosted or hosted)
+- [**313**星][10m] [PS] [cyb3rward0g/invoke-attackapi](https://github.com/cyb3rward0g/invoke-attackapi) A PowerShell script to interact with the MITRE ATT&CK Framework via its own API
+- [**313**星][3y] [Py] [chinoogawa/fbht](https://github.com/chinoogawa/fbht) Facebook Hacking Tool
+- [**313**星][10d] [Shell] [al0ne/linuxcheck](https://github.com/al0ne/linuxcheck) linux信息收集/应急响应/常见后门检测脚本
+- [**312**星][3m] [Shell] [zw963/asuswrt-merlin-transparent-proxy](https://github.com/zw963/asuswrt-merlin-transparent-proxy) transparent proxy base on ss, v2ray, ipset, iptables, chinadns on asuswrt merlin.
+- [**312**星][5m] [Java] [shengqi158/fastjson-remote-code-execute-poc](https://github.com/shengqi158/fastjson-remote-code-execute-poc) 直接用intellij IDEA打开即可 首先编译得到Test.class,然后运行Poc.java
+- [**312**星][7m] [C] [pmem/syscall_intercept](https://github.com/pmem/syscall_intercept) Linux系统调用拦截框架,通过 hotpatching 进程标准C库的机器码实现。
+- [**312**星][3m] [Ruby] [owasp/glue](https://github.com/owasp/glue) Application Security Automation
+- [**312**星][2y] [Py] [nneonneo/sha1collider](https://github.com/nneonneo/sha1collider) Build two PDFs that have different content but identical SHA1 sums.
+- [**312**星][21d] [YARA] [needmorecowbell/hamburglar](https://github.com/needmorecowbell/hamburglar) collect useful information from urls, directories, and files
+- [**312**星][23d] [C#] [malware-dev/mdk-se](https://github.com/malware-dev/mdk-se) Malware's Development Kit for SE
+- [**312**星][3d] [Java] [leibnitz27/cfr](https://github.com/leibnitz27/cfr) This is the public repository for the CFR Java decompiler
+- [**312**星][4m] [HTML] [koutto/jok3r](https://github.com/koutto/jok3r) 一个Python3 CLI应用程序,旨在帮助渗透测试人员进行网络基础结构和Web黑盒安全性测试。
+- [**312**星][3y] [C++] [fdiskyou/hunter](https://github.com/fdiskyou/hunter) (l)user hunter using WinAPI calls only
- [**312**星][3m] [Py] [dpwe/audfprint](https://github.com/dpwe/audfprint) Landmark-based audio fingerprinting
-- [**312**星][3y] [Py] [chinoogawa/fbht](https://github.com/chinoogawa/fbht) Facebook Hacking Tool
+- [**312**星][5m] [Py] [cisco-talos/mutiny-fuzzer](https://github.com/cisco-talos/mutiny-fuzzer)
+- [**312**星][4m] [TeX] [chronaeon/beigepaper](https://github.com/chronaeon/beigepaper) Rewrite of the Yellowpaper in non-Yellowpaper syntax.
+- [**312**星][1y] [Py] [christophetd/censys-subdomain-finder](https://github.com/christophetd/censys-subdomain-finder) 利用搜索引擎 Censys 提供的 certificate transparency 日志, 实现子域名枚举. (Censys: 搜索联网设备信息的搜索引擎)
- [**312**星][2y] [C] [caseyscarborough/keylogger](https://github.com/caseyscarborough/keylogger) A no-frills keylogger for Mac OS X.
+- [**312**星][2y] [burntmybagel/oscp-prep](https://github.com/burntmybagel/oscp-prep) A list of the resources I use as I get ready for the exam
- [**312**星][3y] [Py] [blankwall/macheap](https://github.com/blankwall/macheap) OS X malloc introspection tool
-- [**311**星][23d] [C++] [trailofbits/pe-parse](https://github.com/trailofbits/pe-parse) Principled, lightweight C/C++ PE parser
-- [**311**星][3y] [PHP] [snoopysecurity/dvws](https://github.com/snoopysecurity/dvws) Damn Vulnerable Web Services is an insecure web application with multiple vulnerable web service components that can be used to learn real world web service vulnerabilities.
-- [**311**星][6m] [C] [pmem/syscall_intercept](https://github.com/pmem/syscall_intercept) Linux系统调用拦截框架,通过 hotpatching 进程标准C库的机器码实现。
-- [**311**星][3m] [Ruby] [owasp/glue](https://github.com/owasp/glue) Application Security Automation
-- [**311**星][5m] [Py] [mvrozanti/rat-via-telegram](https://github.com/mvrozanti/rat-via-telegram) Windows Remote Administration Tool via Telegram
+- [**311**星][6y] [Py] [shadowsocks/shadowdns](https://github.com/shadowsocks/shadowdns) A DNS forwarder using Shadowsocks as the server
+- [**311**星][3m] [PHP] [elfsundae/laravel-hashid](https://github.com/elfsundae/laravel-hashid) Obfuscate your data by generating reversible, non-sequential, URL-safe identifiers.
+- [**311**星][5y] [C] [jenssegers/rtl8188-hostapd](https://github.com/jenssegers/rtl8188-hostapd) hostapd for Realtek RTL8188
+- [**311**星][11d] [HTML] [vanhauser-thc/thc-archive](https://github.com/vanhauser-thc/thc-archive) All releases of the security research group (a.k.a. hackers) The Hacker's Choice
+- [**311**星][1y] [Py] [twelvesec/gasmask](https://github.com/twelvesec/gasmask) Information gathering tool - OSINT
+- [**311**星][8m] [C] [tomac/yersinia](https://github.com/tomac/yersinia) layer 2 攻击框架
+- [**311**星][1y] [Py] [stormshadow07/hacktheworld](https://github.com/stormshadow07/hacktheworld) An Python Script For Generating Payloads that Bypasses All Antivirus so far .
+- [**311**星][1y] [Py] [sharadkumar97/osint-spy](https://github.com/sharadkumar97/osint-spy) Performs OSINT scan on email/domain/ip_address/organization using OSINT-SPY. It can be used by Data Miners, Infosec Researchers, Penetration Testers and cyber crime investigator in order to find deep information about their target. If you want to ask something please feel free to reach out to me at sharad@osint-spy.com
+- [**311**星][8m] [Py] [screetsec/brutesploit](https://github.com/screetsec/brutesploit) BruteSploit is a collection of method for automated Generate, Bruteforce and Manipulation wordlist with interactive shell. That can be used during a penetration test to enumerate and maybe can be used in CTF for manipulation,combine,transform and permutation some words or file text :p
- [**311**星][2y] [Py] [munki/createosxinstallpkg](https://github.com/munki/createosxinstallpkg) Tools for packaging OS X installers
-- [**311**星][4y] [C] [jvinet/knock](https://github.com/jvinet/knock) A port-knocking daemon
-- [**311**星][3m] [Py] [circl/circlean](https://github.com/circl/circlean) USB key cleaner
-- [**311**星][4m] [TeX] [chronaeon/beigepaper](https://github.com/chronaeon/beigepaper) Rewrite of the Yellowpaper in non-Yellowpaper syntax.
-- [**310**星][5y] [Py] [shadowsocks/shadowdns](https://github.com/shadowsocks/shadowdns) A DNS forwarder using Shadowsocks as the server
-- [**310**星][18d] [trustedsec/physical-docs](https://github.com/trustedsec/physical-docs) This is a collection of legal wording and documentation used for physical security assessments. The goal is to hopefully allow this as a template for other companies to use and to protect themselves when conducting physical security assessments.
-- [**310**星][3m] [PHP] [elfsundae/laravel-hashid](https://github.com/elfsundae/laravel-hashid) Obfuscate your data by generating reversible, non-sequential, URL-safe identifiers.
-- [**310**星][5y] [C] [jenssegers/rtl8188-hostapd](https://github.com/jenssegers/rtl8188-hostapd) hostapd for Realtek RTL8188
-- [**310**星][5m] [Java] [shengqi158/fastjson-remote-code-execute-poc](https://github.com/shengqi158/fastjson-remote-code-execute-poc) 直接用intellij IDEA打开即可 首先编译得到Test.class,然后运行Poc.java
+- [**311**星][2y] [Shell] [milesrichardson/docker-onion-nmap](https://github.com/milesrichardson/docker-onion-nmap) 使用 nmap 扫描 Tor 隐藏网络的Docker 镜像。基于 alpine,使用proxychains 做 nmap 的包装
+- [**311**星][6y] [TeX] [alobbs/macchanger](https://github.com/alobbs/macchanger) makes the maniputation of MAC addresses of network interfaces easier.
- [**310**星][3y] [Shell] [screetsec/lalin](https://github.com/screetsec/lalin) this script automatically install any package for pentest with uptodate tools , and lazy command for run the tools like lazynmap , install another and update to new #actually for lazy people hahaha #and Lalin is remake the lazykali with fixed bugs , added new features and uptodate tools . It's compatible with the latest release of Kali (Rolling)
-- [**310**星][8m] [Py] [screetsec/brutesploit](https://github.com/screetsec/brutesploit) BruteSploit is a collection of method for automated Generate, Bruteforce and Manipulation wordlist with interactive shell. That can be used during a penetration test to enumerate and maybe can be used in CTF for manipulation,combine,transform and permutation some words or file text :p
- [**310**星][4m] [Py] [salesforce/hassh](https://github.com/salesforce/hassh) HASSH is a network fingerprinting standard which can be used to identify specific Client and Server SSH implementations. The fingerprints can be easily stored, searched and shared in the form of a small MD5 fingerprint.
-- [**310**星][2y] [Py] [nneonneo/sha1collider](https://github.com/nneonneo/sha1collider) Build two PDFs that have different content but identical SHA1 sums.
-- [**310**星][19d] [YARA] [needmorecowbell/hamburglar](https://github.com/needmorecowbell/hamburglar) collect useful information from urls, directories, and files
-- [**310**星][2y] [Shell] [milesrichardson/docker-onion-nmap](https://github.com/milesrichardson/docker-onion-nmap) 使用 nmap 扫描 Tor 隐藏网络的Docker 镜像。基于 alpine,使用proxychains 做 nmap 的包装
- [**310**星][3y] [OCaml] [microsoft/slayer](https://github.com/microsoft/slayer) SLAyer is an automatic formal verification tool that uses separation logic to verify memory safety of C programs.
-- [**310**星][21d] [C#] [malware-dev/mdk-se](https://github.com/malware-dev/mdk-se) Malware's Development Kit for SE
+- [**310**星][3m] [PS] [kevin-robertson/powermad](https://github.com/kevin-robertson/powermad) PowerShell MachineAccountQuota and DNS exploit tools
- [**310**星][2y] [Py] [ioactive/xdiff](https://github.com/ioactive/xdiff) Extended Differential Fuzzing Framework
-- [**310**星][4m] [Py] [hash3lizer/wifibroot](https://github.com/hash3lizer/wifibroot) A WiFi Pentest Cracking tool for WPA/WPA2 (Handshake, PMKID, Cracking, EAPOL, Deauthentication)
-- [**310**星][3y] [C++] [fdiskyou/hunter](https://github.com/fdiskyou/hunter) (l)user hunter using WinAPI calls only
-- [**310**星][12d] [Java] [erudika/para](https://github.com/erudika/para) Open source back-end server for web, mobile and IoT. The backend for busy developers. (self-hosted or hosted)
-- [**310**星][5m] [Py] [cisco-talos/mutiny-fuzzer](https://github.com/cisco-talos/mutiny-fuzzer)
-- [**310**星][1y] [Py] [christophetd/censys-subdomain-finder](https://github.com/christophetd/censys-subdomain-finder) 利用搜索引擎 Censys 提供的 certificate transparency 日志, 实现子域名枚举. (Censys: 搜索联网设备信息的搜索引擎)
-- [**309**星][3m] [Shell] [zw963/asuswrt-merlin-transparent-proxy](https://github.com/zw963/asuswrt-merlin-transparent-proxy) transparent proxy base on ss, v2ray, ipset, iptables, chinadns on asuswrt merlin.
-- [**309**星][8m] [C] [tomac/yersinia](https://github.com/tomac/yersinia) layer 2 攻击框架
+- [**310**星][2y] [C++] [exploitagency/esploitv2](https://github.com/exploitagency/esploitv2) WiFi Keystroke Injection Tool designed for an Atmega 32u4/ESP8266 Paired via Serial (Cactus WHID Firmware). Also features Serial, HTTP, and PASV FTP exfiltration methods and an integrated Credential Harvester Phishing tool called ESPortal.
+- [**310**星][5y] [C++] [dedis/dissent](https://github.com/dedis/dissent) Provably Anonymous Overlay
+- [**310**星][11m] [Ruby] [darkoperator/metasploit-plugins](https://github.com/darkoperator/metasploit-plugins) Plugins for Metasploit Framework
+- [**310**星][3m] [Py] [circl/circlean](https://github.com/circl/circlean) USB key cleaner
+- [**310**星][1y] [1522402210/2018-blackhat-tools-list](https://github.com/1522402210/2018-blackhat-tools-list) 2018 BlackHat Tools List
+- [**309**星][7m] [ring04h/pentest](https://github.com/ring04h/pentest) 渗透测试用到的东东
+
+- [**309**星][2y] [Shell] [kennyn510/wpa2-wordlists](https://github.com/kennyn510/wpa2-wordlists) A collection of wordlists dictionaries for password cracking
+- [**309**星][8m] [Py] [wangyihang/webshell-sniper](https://github.com/wangyihang/webshell-sniper) webshell管理器,命令行工具
+- [**309**星][1y] [Py] [tintinweb/scapy-ssl_tls](https://github.com/tintinweb/scapy-ssl_tls) SSL/TLS layers for scapy the interactive packet manipulation tool
- [**309**星][3y] [scadastrangelove/scadapass](https://github.com/scadastrangelove/scadapass) SCADA StrangeLove Default/Hardcoded Passwords List
- [**309**星][4y] [Py] [packetloop/packetpig](https://github.com/packetloop/packetpig) Open Source Big Data Security Analytics
-- [**309**星][19d] [PHP] [nakiami/mellivora](https://github.com/nakiami/mellivora) Mellivora is a CTF engine written in PHP
-- [**309**星][11d] [Java] [leibnitz27/cfr](https://github.com/leibnitz27/cfr) This is the public repository for the CFR Java decompiler
-- [**309**星][11m] [Ruby] [darkoperator/metasploit-plugins](https://github.com/darkoperator/metasploit-plugins) Plugins for Metasploit Framework
-- [**309**星][2y] [burntmybagel/oscp-prep](https://github.com/burntmybagel/oscp-prep) A list of the resources I use as I get ready for the exam
-- [**308**星][12d] [Py] [ym2011/poc-exp](https://github.com/ym2011/poc-exp) Collecting and writing PoC or EXP for vulnerabilities on some application
-- [**308**星][8m] [Py] [wangyihang/webshell-sniper](https://github.com/wangyihang/webshell-sniper) webshell管理器,命令行工具
-- [**308**星][1y] [Py] [tintinweb/scapy-ssl_tls](https://github.com/tintinweb/scapy-ssl_tls) SSL/TLS layers for scapy the interactive packet manipulation tool
+- [**309**星][7m] [HTML] [nccgroup/crosssitecontenthijacking](https://github.com/nccgroup/crosssitecontenthijacking) Content hijacking proof-of-concept using Flash, PDF and Silverlight
+- [**309**星][21d] [PHP] [nakiami/mellivora](https://github.com/nakiami/mellivora) Mellivora is a CTF engine written in PHP
+- [**309**星][1m] [C] [lordnoteworthy/cpu-internals](https://github.com/lordnoteworthy/cpu-internals) Intel / AMD CPU Internals
+- [**309**星][1y] [PHP] [helloxz/ipinfo](https://github.com/helloxz/ipinfo) 整合多接口的IP查询工具。
+- [**309**星][1y] [Java] [ebryx/aes-killer](https://github.com/ebryx/aes-killer) Burp plugin to decrypt AES Encrypted traffic of mobile apps on the fly
+- [**309**星][2y] [Py] [armbues/ioc_parser](https://github.com/armbues/ioc_parser) Tool to extract indicators of compromise from security reports in PDF format
+- [**308**星][14d] [Py] [ym2011/poc-exp](https://github.com/ym2011/poc-exp) Collecting and writing PoC or EXP for vulnerabilities on some application
- [**308**星][4y] [Py] [stripe/topmodel](https://github.com/stripe/topmodel) Standard evaluations for binary classifiers so you don't have to
-- [**308**星][1y] [Py] [stormshadow07/hacktheworld](https://github.com/stormshadow07/hacktheworld) An Python Script For Generating Payloads that Bypasses All Antivirus so far .
+- [**308**星][3d] [Nim] [status-im/nimbus](https://github.com/status-im/nimbus) an Ethereum 1.0 & 2.0 Client for Resource-Restricted Devices
- [**308**星][1y] [Java] [s4n7h0/halcyon](https://github.com/s4n7h0/halcyon) First IDE for Nmap Script (NSE) Development.
-- [**308**星][4m] [PowerShell] [enigma0x3/misc-powershell-stuff](https://github.com/enigma0x3/misc-powershell-stuff) random powershell goodness
-- [**308**星][1y] [Java] [ebryx/aes-killer](https://github.com/ebryx/aes-killer) Burp plugin to decrypt AES Encrypted traffic of mobile apps on the fly
+- [**308**星][1y] [C++] [nevermoe/unity_metadata_loader](https://github.com/nevermoe/unity_metadata_loader) 将global-metadata.dat中的字符串和方法/类名称加载到IDA
+- [**308**星][2y] [C++] [kirillkovalenko/nssm](https://github.com/kirillkovalenko/nssm) Non-Sucking Service Manager
+- [**308**星][4m] [PS] [enigma0x3/misc-powershell-stuff](https://github.com/enigma0x3/misc-powershell-stuff) random powershell goodness
+- [**308**星][25d] [C#] [ch0pin/aviator](https://github.com/ch0pin/aviator) Antivirus evasion project
+- [**308**星][21d] [PS] [canix1/adaclscanner](https://github.com/canix1/adaclscanner) Repo for ADACLScan.ps1 - Your number one script for ACL's in Active Directory
- [**308**星][3y] [Py] [bishopfox/spoofcheck](https://github.com/bishopfox/spoofcheck) Simple script that checks a domain for email protections
-- [**308**星][6y] [TeX] [alobbs/macchanger](https://github.com/alobbs/macchanger) makes the maniputation of MAC addresses of network interfaces easier.
-- [**307**星][20d] [Py] [mr-un1k0d3r/scshell](https://github.com/mr-un1k0d3r/scshell) Fileless lateral movement tool that relies on ChangeServiceConfigA to run command
-- [**307**星][2y] [Shell] [kennyn510/wpa2-wordlists](https://github.com/kennyn510/wpa2-wordlists) A collection of wordlists dictionaries for password cracking
-- [**307**星][9d] [HTML] [vanhauser-thc/thc-archive](https://github.com/vanhauser-thc/thc-archive) All releases of the security research group (a.k.a. hackers) The Hacker's Choice
-- [**307**星][1y] [Py] [twelvesec/gasmask](https://github.com/twelvesec/gasmask) Information gathering tool - OSINT
-- [**307**星][8d] [Nim] [status-im/nimbus](https://github.com/status-im/nimbus) an Ethereum 1.0 & 2.0 Client for Resource-Restricted Devices
+- [**308**星][4y] [Py] [arecker/bennedetto](https://github.com/arecker/bennedetto) the turn-based budget
+- [**308**星][5m] [Py] [algo7/bluekeep_cve-2019-0708_poc_to_exploit](https://github.com/algo7/bluekeep_cve-2019-0708_poc_to_exploit) Porting BlueKeep PoC from
- [**307**星][5m] [C] [sixstars/ctf](https://github.com/sixstars/ctf) A writeup summary for CTF competitions, problems.
-- [**307**星][1y] [Py] [sharadkumar97/osint-spy](https://github.com/sharadkumar97/osint-spy) Performs OSINT scan on email/domain/ip_address/organization using OSINT-SPY. It can be used by Data Miners, Infosec Researchers, Penetration Testers and cyber crime investigator in order to find deep information about their target. If you want to ask something please feel free to reach out to me at sharad@osint-spy.com
-- [**307**星][4m] [push0ebp/sig-database](https://github.com/push0ebp/sig-database) IDA FLIRT Signature Database
-- [**307**星][1y] [C++] [nevermoe/unity_metadata_loader](https://github.com/nevermoe/unity_metadata_loader) load strings and method/class names in global-metadata.dat to IDA
+- [**307**星][10d] [Swift] [securing/iossecuritysuite](https://github.com/securing/iossecuritysuite) iOS platform security & anti-tampering Swift library
+- [**307**星][9m] [ObjC] [qhd/anymethodlog](https://github.com/qhd/anymethodlog) Log any method call of object in Objective-C
- [**307**星][3y] [Ruby] [michenriksen/birdwatcher](https://github.com/michenriksen/birdwatcher) Data analysis and OSINT framework for Twitter
-- [**307**星][1y] [C++] [m0n0ph1/process-hollowing](https://github.com/m0n0ph1/process-hollowing) Great explanation of Process Hollowing (a Technique often used in Malware)
-- [**307**星][2y] [C++] [exploitagency/esploitv2](https://github.com/exploitagency/esploitv2) WiFi Keystroke Injection Tool designed for an Atmega 32u4/ESP8266 Paired via Serial (Cactus WHID Firmware). Also features Serial, HTTP, and PASV FTP exfiltration methods and an integrated Credential Harvester Phishing tool called ESPortal.
-- [**307**星][5m] [Py] [algo7/bluekeep_cve-2019-0708_poc_to_exploit](https://github.com/algo7/bluekeep_cve-2019-0708_poc_to_exploit) Porting BlueKeep PoC from
-- [**307**星][1y] [1522402210/2018-blackhat-tools-list](https://github.com/1522402210/2018-blackhat-tools-list) 2018 BlackHat Tools List
-- [**306**星][25d] [Java] [widdix/aws-s3-virusscan](https://github.com/widdix/aws-s3-virusscan) Free Antivirus for S3 Buckets
+- [**307**星][5m] [Batchfile] [frizb/windows-privilege-escalation](https://github.com/frizb/windows-privilege-escalation) Windows Privilege Escalation Techniques and Scripts
+- [**306**星][2d] [dnscrypt/dnscrypt-resolvers](https://github.com/dnscrypt/dnscrypt-resolvers) Lists of public DNSCrypt-enabled DNS resolvers
+- [**306**星][2y] [Go] [q2h1cg/dnsbrute](https://github.com/Q2h1Cg/dnsbrute) a fast domain brute tool
+- [**306**星][5m] [Py] [travitch/whole-program-llvm](https://github.com/travitch/whole-program-llvm) A wrapper script to build whole-program LLVM bitcode files
- [**306**星][2y] [C] [tomwimmenhove/subarufobrob](https://github.com/tomwimmenhove/subarufobrob) 劫持斯巴鲁汽车的钥匙(Subaru's key fob),偷得它连条裤子都不剩
- [**306**星][2y] [Py] [timsutton/python-macadmin-tools](https://github.com/timsutton/python-macadmin-tools) List of open-source Python-based Mac sysadmin tools
- [**306**星][2y] [Py] [p1kachu/v0lt](https://github.com/p1kachu/v0lt) Security CTF Toolkit (Not maintained anymore)
-- [**306**星][3m] [PowerShell] [kevin-robertson/powermad](https://github.com/kevin-robertson/powermad) PowerShell MachineAccountQuota and DNS exploit tools
-- [**306**星][1m] [PowerShell] [darkoperator/posh-secmod](https://github.com/darkoperator/posh-secmod) PowerShell Module with Security cmdlets for security work
-- [**306**星][2y] [Py] [armbues/ioc_parser](https://github.com/armbues/ioc_parser) Tool to extract indicators of compromise from security reports in PDF format
-- [**306**星][4y] [Py] [arecker/bennedetto](https://github.com/arecker/bennedetto) the turn-based budget
-- [**305**星][6m] [ring04h/pentest](https://github.com/ring04h/pentest) 渗透测试用到的东东
+- [**306**星][11d] [C#] [nyan-x-cat/asyncrat-c-sharp](https://github.com/nyan-x-cat/asyncrat-c-sharp) Open-Source Remote Administration Tool For Windows C# (RAT)
+- [**306**星][2y] [C] [nationalsecurityagency/dcp](https://github.com/nationalsecurityagency/dcp) Digest, stat, and copy files from one location to another in the same read pass
+- [**306**星][3m] [Ruby] [m0nad/hellraiser](https://github.com/m0nad/hellraiser) Vulnerability Scanner
+- [**306**星][20d] [C] [jhuisi/charm](https://github.com/jhuisi/charm) A Framework for Rapidly Prototyping Cryptosystems
+- [**306**星][5y] [C++] [draperlaboratory/fracture](https://github.com/draperlaboratory/fracture) an architecture-independent decompiler to LLVM IR
+- [**306**星][1m] [PS] [darkoperator/posh-secmod](https://github.com/darkoperator/posh-secmod) PowerShell Module with Security cmdlets for security work
+- [**306**星][2m] [Py] [coalfire-research/slackor](https://github.com/coalfire-research/slackor) A Golang implant that uses Slack as a command and control server
+- [**306**星][6d] [Py] [baderj/domain_generation_algorithms](https://github.com/baderj/domain_generation_algorithms) 域名生成算法
- [**305**星][2y] [PHP] [walkor/workerman-statistics](https://github.com/walkor/workerman-statistics) 一个分布式统计监控系统 包含PHP客户端 、服务端
-- [**305**星][2y] [Go] [q2h1cg/dnsbrute](https://github.com/Q2h1Cg/dnsbrute) a fast domain brute tool
-- [**305**星][5m] [Py] [travitch/whole-program-llvm](https://github.com/travitch/whole-program-llvm) A wrapper script to build whole-program LLVM bitcode files
-- [**305**星][7d] [Swift] [securing/iossecuritysuite](https://github.com/securing/iossecuritysuite) iOS platform security & anti-tampering Swift library
-- [**305**星][9m] [Objective-C] [qhd/anymethodlog](https://github.com/qhd/anymethodlog) Log any method call of object in Objective-C
-- [**305**星][2y] [C] [nationalsecurityagency/dcp](https://github.com/nationalsecurityagency/dcp) Digest, stat, and copy files from one location to another in the same read pass
-- [**305**星][2y] [C++] [kirillkovalenko/nssm](https://github.com/kirillkovalenko/nssm) Non-Sucking Service Manager
-- [**305**星][18d] [C] [jhuisi/charm](https://github.com/jhuisi/charm) A Framework for Rapidly Prototyping Cryptosystems
-- [**305**星][5m] [Batchfile] [frizb/windows-privilege-escalation](https://github.com/frizb/windows-privilege-escalation) Windows Privilege Escalation Techniques and Scripts
-- [**305**星][5y] [C++] [draperlaboratory/fracture](https://github.com/draperlaboratory/fracture) an architecture-independent decompiler to LLVM IR
-- [**305**星][2m] [Py] [coalfire-research/slackor](https://github.com/coalfire-research/slackor) A Golang implant that uses Slack as a command and control server
-- [**304**星][8d] [dnscrypt/dnscrypt-resolvers](https://github.com/dnscrypt/dnscrypt-resolvers) Lists of public DNSCrypt-enabled DNS resolvers
+- [**305**星][1y] [C#] [vmcall/loadlibrayy](https://github.com/vmcall/loadlibrayy) x64 manualmapper with kernel elevation and thread hijacking capabilities
+- [**305**星][2y] [Py] [wisedoge/proxypool](https://github.com/wisedoge/proxypool) 跨语言IP代理池,Python实现。
+- [**305**星][2d] [Java] [widdix/aws-s3-virusscan](https://github.com/widdix/aws-s3-virusscan) Free Antivirus for S3 Buckets
+- [**305**星][5m] [Batchfile] [lmc999/auto-add-routes](https://github.com/lmc999/auto-add-routes) China Route for VPN
+- [**305**星][1m] [CSS] [justinmeiners/lc3-vm](https://github.com/justinmeiners/lc3-vm) Write your own virtual machine for the LC-3 computer!
+- [**305**星][2y] [Java] [joaomatosf/javadeserh2hc](https://github.com/joaomatosf/javadeserh2hc) Sample codes written for the Hackers to Hackers Conference magazine 2017 (H2HC).
+- [**305**星][14d] [bigsinger/androididchanger](https://github.com/bigsinger/androididchanger) Xposed Module for Changing Android Device Info
+- [**305**星][11m] [Py] [basucert/winboxpoc](https://github.com/basucert/winboxpoc) Proof of Concept of Winbox Critical Vulnerability (CVE-2018-14847)
+- [**305**星][2y] [JS] [arno0x/dnsexfiltrator](https://github.com/arno0x/dnsexfiltrator) Data exfiltration over DNS request covert channel
+- [**304**星][2y] [Shell] [sirzdy/shadowsocks](https://github.com/sirzdy/shadowsocks) 与 ShadowSocks 有关的教程、文件等
+- [**304**星][1y] [Py] [fsecurelabs/win_driver_plugin](https://github.com/FSecureLABS/win_driver_plugin) A tool to help when dealing with Windows IOCTL codes or reversing Windows drivers.
+- [**304**星][2m] [Py] [hatching/vmcloak](https://github.com/hatching/vmcloak) Automated Virtual Machine Generation and Cloaking for Cuckoo Sandbox.
- [**304**星][2y] [Shell] [ugukkylbklaom/vultr-ss-firewall](https://github.com/ugukkylbklaom/vultr-ss-firewall) 一整套网络加速方案(SS),速度,安全,便捷 面面俱到,操作简单,适合非IT专业人士
+- [**304**星][10m] [PHP] [steverobbins/magescan](https://github.com/steverobbins/magescan) Scan a Magento site for information
- [**304**星][8m] [Ruby] [secgen/secgen](https://github.com/secgen/secgen) Generate vulnerable virtual machines on the fly (current team development is taking place in the cliffe/SecGen fork)
- [**304**星][3y] [Shell] [safebreach-labs/pwndsh](https://github.com/safebreach-labs/pwndsh) Post-exploitation framework (and an interactive shell) developed in Bash shell scripting
- [**304**星][3y] [C] [raspberrypi/maynard](https://github.com/raspberrypi/maynard) Desktop environment for Wayland
+- [**304**星][12m] [Py] [r3vn/badkarma](https://github.com/r3vn/badkarma) network reconnaissance toolkit
- [**304**星][7m] [Py] [nccgroup/cyber-defence](https://github.com/nccgroup/cyber-defence) Information released publicly by NCC Group's Cyber Defence team
+- [**304**星][1m] [C] [nagyd/sdlpop](https://github.com/nagyd/sdlpop) An open-source port of Prince of Persia, based on the disassembly of the DOS version.
- [**304**星][2y] [C++] [m0n0ph1/malware-1](https://github.com/m0n0ph1/malware-1) Malware source code samples leaked online uploaded to GitHub for those who want to analyze the code.
-- [**304**星][1m] [C] [lordnoteworthy/cpu-internals](https://github.com/lordnoteworthy/cpu-internals) Intel / AMD CPU Internals
- [**304**星][2y] [JS] [kristian-lange/net-glimpse](https://github.com/kristian-lange/net-glimpse) 1) Real-time visualization of network traffic (Ethernet and Internet), and 2) Streaming of header data from your network interfaces via WebSockets
-- [**304**星][1m] [CSS] [justinmeiners/lc3-vm](https://github.com/justinmeiners/lc3-vm) Write your own virtual machine for the LC-3 computer!
+- [**304**星][4m] [JS] [hynekpetrak/malware-jail](https://github.com/hynekpetrak/malware-jail) Sandbox for semi-automatic Javascript malware analysis, deobfuscation and payload extraction. Written for Node.js
+- [**304**星][21d] [JS] [ethereum/devp2p](https://github.com/ethereum/devp2p) Ethereum peer-to-peer networking specifications
- [**304**星][4y] [Py] [clusterhq/powerstrip](https://github.com/clusterhq/powerstrip) A tool for prototyping Docker extensions
-- [**304**星][19d] [PowerShell] [canix1/adaclscanner](https://github.com/canix1/adaclscanner) Repo for ADACLScan.ps1 - Your number one script for ACL's in Active Directory
-- [**304**星][2y] [JS] [arno0x/dnsexfiltrator](https://github.com/arno0x/dnsexfiltrator) Data exfiltration over DNS request covert channel
-- [**303**星][8d] [hackerschoice/thc-tesla-powerwall2-hack](https://github.com/hackerschoice/thc-tesla-powerwall2-hack) TESLA PowerWall 2 Security Shenanigans
-- [**303**星][1y] [Py] [fsecurelabs/win_driver_plugin](https://github.com/FSecureLABS/win_driver_plugin) A tool to help when dealing with Windows IOCTL codes or reversing Windows drivers.
-- [**303**星][2m] [Py] [hatching/vmcloak](https://github.com/hatching/vmcloak) Automated Virtual Machine Generation and Cloaking for Cuckoo Sandbox.
-- [**303**星][10m] [PHP] [steverobbins/magescan](https://github.com/steverobbins/magescan) Scan a Magento site for information
+- [**303**星][9m] [JS] [ning1022/sqlinjectionwiki](https://github.com/ning1022/SQLInjectionWiki) 一个专注于聚合和记录各种SQL注入方法的wiki
- [**303**星][2y] [Py] [spritz-research-group/skype-type](https://github.com/spritz-research-group/skype-type) Don't Skype & Type! Keyboard acoustic eavesdropping tool.
- [**303**星][1m] [Py] [salls/angrop](https://github.com/salls/angrop) a rop gadget finder and chain builder
- [**303**星][1m] [Py] [rhinosecuritylabs/cves](https://github.com/rhinosecuritylabs/cves) A collection of proof-of-concept exploit scripts written by the team at Rhino Security Labs for various CVEs.
-- [**303**星][7m] [HTML] [nccgroup/crosssitecontenthijacking](https://github.com/nccgroup/crosssitecontenthijacking) Content hijacking proof-of-concept using Flash, PDF and Silverlight
-- [**303**星][1m] [C] [nagyd/sdlpop](https://github.com/nagyd/sdlpop) An open-source port of Prince of Persia, based on the disassembly of the DOS version.
-- [**303**星][3m] [Ruby] [m0nad/hellraiser](https://github.com/m0nad/hellraiser) Vulnerability Scanner
- [**303**星][3y] [Perl] [julienbedard/browsersploit](https://github.com/julienbedard/browsersploit) BrowserExploit is an advanced browser exploit pack for doing internal and external pentesting, helping gaining access to internal computers.
-- [**303**星][2y] [Java] [joaomatosf/javadeserh2hc](https://github.com/joaomatosf/javadeserh2hc) Sample codes written for the Hackers to Hackers Conference magazine 2017 (H2HC).
- [**303**星][3m] [Ruby] [fozavci/viproy-voipkit](https://github.com/fozavci/viproy-voipkit) VoIP渗透测试工具和 Metasploit 框架
-- [**303**星][23d] [C#] [ch0pin/aviator](https://github.com/ch0pin/aviator) Antivirus evasion project
-- [**302**星][9m] [JS] [ning1022/sqlinjectionwiki](https://github.com/ning1022/SQLInjectionWiki) 一个专注于聚合和记录各种SQL注入方法的wiki
+- [**303**星][14d] [C#] [dynatrace/superdump](https://github.com/dynatrace/superdump) A service for automated crash-dump analysis
+- [**303**星][21d] [Py] [christhecoolhut/firmware_slap](https://github.com/christhecoolhut/firmware_slap) Discovering vulnerabilities in firmware through concolic analysis and function clustering.
+- [**303**星][2m] [Py] [3ndg4me/autoblue-ms17-010](https://github.com/3ndg4me/autoblue-ms17-010) This is just an semi-automated fully working, no-bs, non-metasploit version of the public exploit code for MS17-010
+- [**302**星][3m] [Py] [xinsss/conf-for-surge-shadowrocket](https://github.com/xinsss/conf-for-surge-shadowrocket) Surge Shadowrocket conf
+- [**302**星][4m] [Py] [zhaoweiho/securitymanageframwork](https://github.com/zhaoweiho/securitymanageframwork) Security Manage Framwork is a security management platform for enterprise intranet, which includes asset management, vulnerability management, account management, knowledge base management, security scanning automation function modules, and can be used for internal security management. This platform is designed to help Party A with fewer securit…
- [**302**星][1m] [Py] [xdavidhu/langhost](https://github.com/xdavidhu/langhost) A LAN dropbox chatbot controllable via Telegram
-- [**302**星][4m] [Py] [rootviii/proxy_requests](https://github.com/rootviii/proxy_requests) a class that uses scraped proxies to make an http GET/POST request (Python requests)
+- [**302**星][1m] [Shell] [vitaly-kamluk/bitscout](https://github.com/vitaly-kamluk/bitscout) 远程数据取证工具
+- [**302**星][10m] [Shell] [swoodford/aws](https://github.com/swoodford/aws) A collection of bash shell scripts for automating various tasks with Amazon Web Services using the AWS CLI and jq.
+- [**302**星][1y] [Dockerfile] [ston3o/docker-hacklab](https://github.com/ston3o/docker-hacklab) My personal hacklab, create your own.
+- [**302**星][2m] [JS] [robbendebiene/gesturefy](https://github.com/robbendebiene/gesturefy) Navigate, operate and browse faster with mouse gestures! A customizable Firefox mouse gesture add-on with a variety of different commands.
- [**302**星][4y] [Py] [lekensteyn/pacemaker](https://github.com/lekensteyn/pacemaker) Heartbleed (CVE-2014-0160) client exploit
+- [**302**星][3y] [C++] [kgretzky/obfusion](https://github.com/kgretzky/obfusion) bfusion - C++ X86 Code Obfuscation Library
- [**302**星][1y] [Shell] [jas502n/st2-057](https://github.com/jas502n/st2-057) St2-057 Poc Example
- [**302**星][7m] [Java] [ilmila/j2eescan](https://github.com/ilmila/j2eescan) J2EEScan is a plugin for Burp Suite Proxy. The goal of this plugin is to improve the test coverage during web application penetration tests on J2EE applications.
-- [**302**星][4m] [JS] [hynekpetrak/malware-jail](https://github.com/hynekpetrak/malware-jail) Sandbox for semi-automatic Javascript malware analysis, deobfuscation and payload extraction. Written for Node.js
- [**302**星][11m] [Assembly] [guitmz/virii](https://github.com/guitmz/virii) Collection of ancient computer virus source codes
-- [**302**星][12d] [bigsinger/androididchanger](https://github.com/bigsinger/androididchanger) Xposed Module for Changing Android Device Info
-- [**302**星][11m] [Py] [basucert/winboxpoc](https://github.com/basucert/winboxpoc) Proof of Concept of Winbox Critical Vulnerability (CVE-2018-14847)
-- [**302**星][14d] [Py] [baderj/domain_generation_algorithms](https://github.com/baderj/domain_generation_algorithms) 域名生成算法
-- [**302**星][2m] [Py] [3ndg4me/autoblue-ms17-010](https://github.com/3ndg4me/autoblue-ms17-010) This is just an semi-automated fully working, no-bs, non-metasploit version of the public exploit code for MS17-010
-- [**301**星][1y] [C#] [vmcall/loadlibrayy](https://github.com/vmcall/loadlibrayy) x64 manualmapper with kernel elevation and thread hijacking capabilities
+- [**302**星][6y] [Py] [astrand/pyobfuscate](https://github.com/astrand/pyobfuscate) a source code obfuscator
+- [**301**星][13d] [C#] [zodiacon/procmonx](https://github.com/zodiacon/procmonx) 通过Windows事件日志获取与Process Monitor显示的相同的信息,无需内核驱动
+- [**301**星][6d] [Py] [vmware/tern](https://github.com/vmware/tern) Open Source compliance for containers
- [**301**星][1y] [Py] [two06/inception](https://github.com/two06/inception) Provides In-memory compilation and reflective loading of C# apps for AV evasion.
-- [**301**星][10m] [Shell] [swoodford/aws](https://github.com/swoodford/aws) A collection of bash shell scripts for automating various tasks with Amazon Web Services using the AWS CLI and jq.
-- [**301**星][1y] [Dockerfile] [ston3o/docker-hacklab](https://github.com/ston3o/docker-hacklab) My personal hacklab, create your own.
-- [**301**星][19d] [JS] [ethereum/devp2p](https://github.com/ethereum/devp2p) Ethereum peer-to-peer networking specifications
-- [**301**星][12d] [C#] [dynatrace/superdump](https://github.com/dynatrace/superdump) A service for automated crash-dump analysis
-- [**301**星][6y] [Py] [astrand/pyobfuscate](https://github.com/astrand/pyobfuscate) a source code obfuscator
+- [**301**星][30d] [Py] [stamparm/dsxs](https://github.com/stamparm/dsxs) Damn Small XSS Scanner
+- [**301**星][4m] [Py] [rootviii/proxy_requests](https://github.com/rootviii/proxy_requests) a class that uses scraped proxies to make an http GET/POST request (Python requests)
+- [**301**星][3y] [Py] [ring04h/wyportmap](https://github.com/ring04h/wyportmap) 目标端口扫描+系统服务指纹识别
+- [**301**星][16d] [Py] [qubesos/qubes-secpack](https://github.com/qubesos/qubes-secpack) Qubes Security Pack
+- [**301**星][2m] [no-github/dork-admin](https://github.com/no-github/dork-admin) 盘点近年来的数据泄露、供应链污染事件
+- [**301**星][2m] [Go] [fairwindsops/rbac-lookup](https://github.com/fairwindsops/rbac-lookup) Easily find roles and cluster roles attached to any user, service account, or group name in your Kubernetes cluster
+- [**301**星][2m] [JS] [bettercap/caplets](https://github.com/bettercap/caplets) 使用.cap脚本, 自动化bettercap的交互式会话
+- [**301**星][13d] [PHP] [bepsvpt/secure-headers](https://github.com/bepsvpt/secure-headers) PHP Secure Headers
+- [**301**星][2m] [Py] [austin-taylor/flare](https://github.com/austin-taylor/flare) 网络流量和行为分析的分析框架
+- [**301**星][2m] [C] [9176324/shark](https://github.com/9176324/shark) Turn off PatchGuard in real time for win7 (7600) ~ win10 (18950).
- [**300**星][11m] [Py] [mr-un1k0d3r/catmyphish](https://github.com/Mr-Un1k0d3r/CatMyPhish) Search for categorized domain
-- [**300**星][2m] [Py] [skylined/bugid](https://github.com/skylined/bugid) Detect, analyze and uniquely identify crashes in Windows applications
-- [**300**星][2m] [JS] [robbendebiene/gesturefy](https://github.com/robbendebiene/gesturefy) Navigate, operate and browse faster with mouse gestures! A customizable Firefox mouse gesture add-on with a variety of different commands.
-- [**300**星][3y] [Py] [ring04h/wyportmap](https://github.com/ring04h/wyportmap) 目标端口扫描+系统服务指纹识别
+- [**300**星][5m] [Py] [wangyihang/githacker](https://github.com/wangyihang/githacker) a multiple threads tool to detect whether a site has git source leaks, and has the ability to download the site source to the local
+- [**300**星][9d] [Py] [skylined/bugid](https://github.com/skylined/bugid) Detect, analyze and uniquely identify crashes in Windows applications
- [**300**星][9m] [C] [raspberrypi/quake3](https://github.com/raspberrypi/quake3) provide a baseline Quake 3 which may be used
for further development
-- [**300**星][12m] [Py] [r3vn/badkarma](https://github.com/r3vn/badkarma) network reconnaissance toolkit
- [**300**星][3y] [Java] [nvisium/xssvalidator](https://github.com/nvisium/xssvalidator) This is a burp intruder extender that is designed for automation and validation of XSS vulnerabilities.
-- [**300**星][2m] [no-github/dork-admin](https://github.com/no-github/dork-admin) 盘点近年来的数据泄露、供应链污染事件
-- [**300**星][3y] [C++] [kgretzky/obfusion](https://github.com/kgretzky/obfusion) bfusion - C++ X86 Code Obfuscation Library
-- [**300**星][2m] [Py] [austin-taylor/flare](https://github.com/austin-taylor/flare) 网络流量和行为分析的分析框架
-- [**299**星][28d] [Py] [stamparm/dsxs](https://github.com/stamparm/dsxs) Damn Small XSS Scanner
-- [**299**星][14d] [Py] [qubesos/qubes-secpack](https://github.com/qubesos/qubes-secpack) Qubes Security Pack
-- [**299**星][1y] [C] [nektra/deviare2](https://github.com/nektra/deviare2) Deviare API Hook
+- [**300**星][1y] [C] [nektra/deviare2](https://github.com/nektra/deviare2) Deviare API Hook
+- [**300**星][2m] [Shell] [mitchellkrogza/apache-ultimate-bad-bot-blocker](https://github.com/mitchellkrogza/apache-ultimate-bad-bot-blocker) Apache Block Bad Bots, (Referer) Spam Referrer Blocker, Vulnerability Scanners, Malware, Adware, Ransomware, Malicious Sites, Wordpress Theme Detectors and Fail2Ban Jail for Repeat Offenders
+- [**300**星][7m] [Py] [0xacb/viewgen](https://github.com/0xacb/viewgen) viewgen is a ViewState tool capable of generating both signed and encrypted payloads with leaked validation keys
+- [**299**星][2m] [C] [vusec/vuzzer](https://github.com/vusec/vuzzer) depends heavily on a modeified version of DataTracker, which in turn depends on LibDFT pintool.
+- [**299**星][26d] [C] [tarsnap/scrypt](https://github.com/tarsnap/scrypt) The scrypt key derivation function was originally developed for use in the Tarsnap online backup system and is designed to be far more secure against hardware brute-force attacks than alternative functions such as PBKDF2 or bcrypt.
+- [**299**星][3m] [JS] [smartdone/frida-scripts](https://github.com/smartdone/frida-scripts) 一些frida脚本
+- [**299**星][9m] [C++] [secrary/idenlib](https://github.com/secrary/idenlib) Library Function Identification [prototype project - signatures might change in future releases]
+- [**299**星][2m] [C#] [ossindex/devaudit](https://github.com/ossindex/devaudit) Open-source, cross-platform, multi-purpose security auditing tool
- [**299**星][11m] [Py] [mseclab/pyjfuzz](https://github.com/mseclab/pyjfuzz) PyJFuzz - Python JSON Fuzzer
- [**299**星][3y] [C] [miohtama/python-levenshtein](https://github.com/miohtama/python-levenshtein) The Levenshtein Python C extension module contains functions for fast computation of Levenshtein distance and string similarity
+- [**299**星][2y] [Py] [hellman/libformatstr](https://github.com/hellman/libformatstr) Simplify format string exploitation.
- [**299**星][5y] [Perl] [fwaeytens/dnsenum](https://github.com/fwaeytens/dnsenum) dnsenum is a perl script that enumerates DNS information
-- [**299**星][19d] [Py] [christhecoolhut/firmware_slap](https://github.com/christhecoolhut/firmware_slap) Discovering vulnerabilities in firmware through concolic analysis and function clustering.
+- [**299**星][7m] [C++] [cyphunk/jtagenum](https://github.com/cyphunk/jtagenum) Given an Arduino compatible microcontroller or Raspberry PI (experimental), JTAGenum scans pins[] for basic JTAG functionality and can be used to enumerate the Instruction Register for undocumented instructions. Props to JTAG scanner and Arduinull which came before JTAGenum and forwhich much of the code and logic is based on. Feel free to branch…
+- [**299**星][4m] [Py] [cyberark/kubiscan](https://github.com/cyberark/kubiscan) A tool to scan Kubernetes cluster for risky permissions
- [**299**星][1y] [Py] [bhdresh/cve-2017-8759](https://github.com/bhdresh/cve-2017-8759) Exploit toolkit CVE-2017-8759 - v1.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft .NET Framework RCE. It could generate a malicious RTF file and deliver metasploit / meterpreter / other payload to victim without any complex configuration.
-- [**299**星][11d] [PHP] [bepsvpt/secure-headers](https://github.com/bepsvpt/secure-headers) PHP Secure Headers
+- [**299**星][2m] [Py] [alexandreborges/malwoverview](https://github.com/alexandreborges/malwoverview) Malwoverview.py is a first response tool to perform an initial and quick triage in a directory containing malware samples, specific malware sample, suspect URL and domains. Additionally, it allows to download and send samples to main online sandboxes.
- [**299**星][5m] [0xradi/owasp-web-checklist](https://github.com/0xradi/owasp-web-checklist) OWASP Web Application Security Testing Checklist
-- [**298**星][4m] [Py] [zhaoweiho/securitymanageframwork](https://github.com/zhaoweiho/securitymanageframwork) Security Manage Framwork is a security management platform for enterprise intranet, which includes asset management, vulnerability management, account management, knowledge base management, security scanning automation function modules, and can be used for internal security management. This platform is designed to help Party A with fewer securit…
-- [**298**星][1m] [C] [vusec/vuzzer](https://github.com/vusec/vuzzer) depends heavily on a modeified version of DataTracker, which in turn depends on LibDFT pintool.
-- [**298**星][4y] [samyk/proxygambit](https://github.com/samyk/proxygambit) Anonymize and fracture network traffic/Internet access over a point-to-point wireless link or through TCP->GSM->wifi tunnel (advanced resurrection of ProxyHam)
-- [**298**星][2m] [C#] [ossindex/devaudit](https://github.com/ossindex/devaudit) Open-source, cross-platform, multi-purpose security auditing tool
-- [**298**星][2m] [Shell] [mitchellkrogza/apache-ultimate-bad-bot-blocker](https://github.com/mitchellkrogza/apache-ultimate-bad-bot-blocker) Apache Block Bad Bots, (Referer) Spam Referrer Blocker, Vulnerability Scanners, Malware, Adware, Ransomware, Malicious Sites, Wordpress Theme Detectors and Fail2Ban Jail for Repeat Offenders
-- [**298**星][7m] [C++] [cyphunk/jtagenum](https://github.com/cyphunk/jtagenum) Given an Arduino compatible microcontroller or Raspberry PI (experimental), JTAGenum scans pins[] for basic JTAG functionality and can be used to enumerate the Instruction Register for undocumented instructions. Props to JTAG scanner and Arduinull which came before JTAGenum and forwhich much of the code and logic is based on. Feel free to branch…
+- [**299**星][2y] [Shell] [0x90/kali-scripts](https://github.com/0x90/kali-scripts) Some usefull scripts for KaliLinux
+- [**298**星][4y] [Py] [zer0h/httpscan](https://github.com/zer0h/httpscan) 一个爬虫式的网段Web主机发现小工具 # A HTTP Service detector with a crawler from IP/CIDR
+- [**298**星][1y] [Java] [vmware/burp-rest-api](https://github.com/vmware/burp-rest-api) REST/JSON API to the Burp Suite security tool.
+- [**298**星][2y] [C++] [rootm0s/protectors](https://github.com/rootm0s/protectors)
+- [**298**星][1y] [PS] [onelogicalmyth/zeroday-powershell](https://github.com/onelogicalmyth/zeroday-powershell) A PowerShell example of the Windows zero day priv esc
+- [**298**星][2y] [krausefx/steal.password](https://github.com/krausefx/steal.password) Easily get the user's Apple ID password, just by asking
+- [**298**星][2y] [C] [igrr/esptool-ck](https://github.com/igrr/esptool-ck) ESP8266 build/flash helper tool by Christian Klippel
+- [**298**星][4y] [Py] [emposha/shell-detector](https://github.com/emposha/shell-detector) Shell Detector – is a application that helps you find and identify php/cgi(perl)/asp/aspx shells. Shell Detector has a “web shells” signature database that helps to identify “web shell” up to 99%.
+- [**298**星][3m] [Py] [cisco-talos/ghida](https://github.com/cisco-talos/ghida) 在IDA中集成Ghidra反编译器
- [**298**星][2m] [Py] [christhecoolhut/pinctf](https://github.com/christhecoolhut/pinctf) Using Intel's PIN tool to solve CTF problems
-- [**298**星][29d] [JS] [chichou/bagbak](https://github.com/ChiChou/bagbak) Yet another frida based iOS dumpdecrypted
+- [**298**星][2m] [Py] [bishopfox/eyeballer](https://github.com/bishopfox/eyeballer) 用于大型网络渗透测试中需要从大量基于Web的主机中找到“有趣的”目标
+- [**298**星][2m] [HTML] [balsn/ctf_writeup](https://github.com/balsn/ctf_writeup) CTF writeups from Balsn
- [**298**星][6y] [Py] [andresriancho/nimbostratus](https://github.com/andresriancho/nimbostratus) Tools for fingerprinting and exploiting Amazon cloud infrastructures
-- [**298**星][2m] [Py] [alexandreborges/malwoverview](https://github.com/alexandreborges/malwoverview) Malwoverview.py is a first response tool to perform an initial and quick triage in a directory containing malware samples, specific malware sample, suspect URL and domains. Additionally, it allows to download and send samples to main online sandboxes.
-- [**298**星][7m] [Py] [0xacb/viewgen](https://github.com/0xacb/viewgen) viewgen is a ViewState tool capable of generating both signed and encrypted payloads with leaked validation keys
-- [**297**星][3m] [Py] [xinsss/conf-for-surge-shadowrocket](https://github.com/xinsss/conf-for-surge-shadowrocket) Surge Shadowrocket conf
-- [**297**星][4y] [Py] [zer0h/httpscan](https://github.com/zer0h/httpscan) 一个爬虫式的网段Web主机发现小工具 # A HTTP Service detector with a crawler from IP/CIDR
-- [**297**星][1m] [Shell] [vitaly-kamluk/bitscout](https://github.com/vitaly-kamluk/bitscout) 远程数据取证工具
-- [**297**星][24d] [C] [tarsnap/scrypt](https://github.com/tarsnap/scrypt) The scrypt key derivation function was originally developed for use in the Tarsnap online backup system and is designed to be far more secure against hardware brute-force attacks than alternative functions such as PBKDF2 or bcrypt.
-- [**297**星][3m] [Py] [saghul/aiodns](https://github.com/saghul/aiodns) Simple DNS resolver for asyncio
-- [**297**星][2y] [C++] [rootm0s/protectors](https://github.com/rootm0s/protectors)
+- [**297**星][2y] [C] [pwning/docs](https://github.com/pwning/docs) Tips, Tricks, and Suggestions for Running a CTF
+- [**297**星][9d] [JS] [w3c/webappsec-trusted-types](https://github.com/w3c/webappsec-trusted-types) A browser API to prevent DOM-Based Cross Site Scripting in modern web applications.
+- [**297**星][12m] [Shell] [yw9381/burp_suite_doc_zh_cn](https://github.com/yw9381/burp_suite_doc_zh_cn) 这是基于Burp Suite官方文档翻译而来的中文版文档
+- [**297**星][2y] [Py] [trustedsec/nps_payload](https://github.com/trustedsec/nps_payload) Python 脚本,生成能够绕过基础入侵检测的 payload
+- [**297**星][2d] [C++] [squalr/squally](https://github.com/squalr/squally) 2D Platformer Game for Teaching Game Hacking - C++/cocos2d-x
+- [**297**星][4d] [Java] [shred/acme4j](https://github.com/shred/acme4j) a protocol that a certificate authority (CA) and an applicant can use to automate the process of verification and certificate issuance
+- [**297**星][4y] [samyk/proxygambit](https://github.com/samyk/proxygambit) Anonymize and fracture network traffic/Internet access over a point-to-point wireless link or through TCP->GSM->wifi tunnel (advanced resurrection of ProxyHam)
+- [**297**星][18d] [Go] [ropnop/kerbrute](https://github.com/ropnop/kerbrute) A tool to perform Kerberos pre-auth bruteforcing
- [**297**星][4y] [Py] [orf/cyborg](https://github.com/orf/cyborg) Python web scraping framework
-- [**297**星][1y] [PowerShell] [onelogicalmyth/zeroday-powershell](https://github.com/onelogicalmyth/zeroday-powershell) A PowerShell example of the Windows zero day priv esc
-- [**297**星][2y] [krausefx/steal.password](https://github.com/krausefx/steal.password) Easily get the user's Apple ID password, just by asking
+- [**297**星][7d] [Py] [mozillasecurity/dharma](https://github.com/mozillasecurity/dharma) Generation-based, context-free grammar fuzzer.
- [**297**星][3y] [Go] [janeczku/rancher-letsencrypt](https://github.com/janeczku/rancher-letsencrypt) A Rancher service that obtains free SSL/TLS certificates from the Let's Encrypt CA, adds them to Rancher's certificate store and manages renewal and propagation of updated certificates to load balancer
- [**297**星][2y] [PHP] [interference-security/empire-web](https://github.com/interference-security/empire-web) PowerShell Empire 的Web界面,
-- [**297**星][2y] [C] [igrr/esptool-ck](https://github.com/igrr/esptool-ck) ESP8266 build/flash helper tool by Christian Klippel
-- [**297**星][2y] [Py] [hellman/libformatstr](https://github.com/hellman/libformatstr) Simplify format string exploitation.
-- [**297**星][1m] [HTML] [balsn/ctf_writeup](https://github.com/balsn/ctf_writeup) CTF writeups from Balsn
-- [**297**星][2y] [Shell] [0x90/kali-scripts](https://github.com/0x90/kali-scripts) Some usefull scripts for KaliLinux
-- [**296**星][2y] [C] [pwning/docs](https://github.com/pwning/docs) Tips, Tricks, and Suggestions for Running a CTF
-- [**296**星][12m] [Shell] [yw9381/burp_suite_doc_zh_cn](https://github.com/yw9381/burp_suite_doc_zh_cn) 这是基于Burp Suite官方文档翻译而来的中文版文档
-- [**296**星][1y] [Java] [vmware/burp-rest-api](https://github.com/vmware/burp-rest-api) REST/JSON API to the Burp Suite security tool.
-- [**296**星][2y] [Py] [trustedsec/nps_payload](https://github.com/trustedsec/nps_payload) Python 脚本,生成能够绕过基础入侵检测的 payload
-- [**296**星][8d] [C++] [squalr/squally](https://github.com/squalr/squally) 2D Platformer Game for Teaching Game Hacking - C++/cocos2d-x
-- [**296**星][5m] [Py] [mozillasecurity/dharma](https://github.com/mozillasecurity/dharma) Generation-based, context-free grammar fuzzer.
-- [**296**星][4y] [Py] [emposha/shell-detector](https://github.com/emposha/shell-detector) Shell Detector – is a application that helps you find and identify php/cgi(perl)/asp/aspx shells. Shell Detector has a “web shells” signature database that helps to identify “web shell” up to 99%.
-- [**296**星][3m] [Py] [cisco-talos/ghida](https://github.com/cisco-talos/ghida) 在IDA中集成Ghidra反编译器
-- [**296**星][2m] [JS] [bettercap/caplets](https://github.com/bettercap/caplets) 使用.cap脚本, 自动化bettercap的交互式会话
-- [**296**星][2m] [C] [9176324/shark](https://github.com/9176324/shark) Turn off PatchGuard in real time for win7 (7600) ~ win10 (18950).
+- [**297**星][2m] [C#] [fireeye/sharpersist](https://github.com/fireeye/sharpersist) Windows persistence toolkit
+- [**297**星][9m] [C] [basil00/reqrypt](https://github.com/basil00/reqrypt) HTTP 请求 tunneling 工具
+- [**297**星][2y] [Py] [allyshka/rogue-mysql-server](https://github.com/allyshka/rogue-mysql-server) MySQL fake server for read files of connected clients
+- [**296**星][8m] [C++] [wangyu-/udp2raw-multiplatform](https://github.com/wangyu-/udp2raw-multiplatform) multi-platform(cross-platform) version of udp2raw-tunnel, which supports Windows/Mac/BSD natively
+- [**296**星][2d] [ugvf2009/miles](https://github.com/ugvf2009/miles) 二爷翻墙,专注翻墙30年,但没有掌握核心科技^_^
+- [**296**星][2y] [C++] [sensepost/rattler](https://github.com/sensepost/rattler) 自动识别可用于 DLLpreloading 攻击的 DLL
+- [**296**星][3m] [Py] [saghul/aiodns](https://github.com/saghul/aiodns) Simple DNS resolver for asyncio
+- [**296**星][4m] [C++] [rolfrolles/hexraysdeob](https://github.com/rolfrolles/hexraysdeob) 利用Hex-Rays microcode API破解编译器级别的混淆
+- [**296**星][2d] [C++] [hasherezade/bearparser](https://github.com/hasherezade/bearparser) Portable Executable parsing library (from PE-bear)
+- [**296**星][7d] [Py] [govanguard/legion](https://github.com/govanguard/legion) Legion is an open source, easy-to-use, super-extensible and semi-automated network penetration testing tool that aids in discovery, reconnaissance and exploitation of information systems.
+- [**296**星][7m] [Py] [edent/bmw-i-remote](https://github.com/edent/bmw-i-remote) A reverse engineered interface for the BMW i3 Electric Car
+- [**296**星][2y] [Shell] [checkpointsw/android_unpacker](https://github.com/checkpointsw/android_unpacker) A (hopefully) generic unpacker for packed Android apps.
+- [**296**星][5m] [PLpgSQL] [amachanic/sp_whoisactive](https://github.com/amachanic/sp_whoisactive) sp_whoisactive
+- [**295**星][4d] [JS] [aws-samples/aws-serverless-security-workshop](https://github.com/aws-samples/aws-serverless-security-workshop) In this workshop, you will learn techniques to secure a serverless application built with AWS Lambda, Amazon API Gateway and RDS Aurora. We will cover AWS services and features you can leverage to improve the security of a serverless applications in 5 domains: identity & access management, code, data, infrastructure, logging & monitoring.
+- [**295**星][6m] [Java] [teamwalrus/walrus](https://github.com/TeamWalrus/Walrus) An Android app that lets you use your access control card cloning devices in the field.
- [**295**星][4m] [Shell] [anti-ddos/anti-ddos](https://github.com/anti-ddos/Anti-DDOS)
-- [**295**星][11d] [C#] [zodiacon/procmonx](https://github.com/zodiacon/procmonx) 通过Windows事件日志获取与Process Monitor显示的相同的信息,无需内核驱动
-- [**295**星][5m] [Py] [wangyihang/githacker](https://github.com/wangyihang/githacker) a multiple threads tool to detect whether a site has git source leaks, and has the ability to download the site source to the local
-- [**295**星][1m] [Java] [shred/acme4j](https://github.com/shred/acme4j) a protocol that a certificate authority (CA) and an applicant can use to automate the process of verification and certificate issuance
+- [**295**星][1y] [JS] [xxxily/fiddler-plus](https://github.com/xxxily/fiddler-plus) 自定义的Fiddler规则,多环境切换、解决跨域开发、快速调试线上代码必备|高效调试分析利器
+- [**295**星][2y] [swiftonsecurity/swiftfilter](https://github.com/swiftonsecurity/swiftfilter) Exchange Transport rules to detect and enable response to phishing
- [**295**星][1y] [Shell] [sevagas/swap_digger](https://github.com/sevagas/swap_digger) swap_digger is a tool used to automate Linux swap analysis during post-exploitation or forensics. It automates swap extraction and searches for Linux user credentials, web forms credentials, web forms emails, http basic authentication, Wifi SSID and keys, etc.
+- [**295**星][3y] [C] [s2e/s2e-old](https://github.com/s2e/s2e-old) This is the archived S2E 1.0 repo. We do not maintain it anymore.
- [**295**星][7m] [Py] [s0md3v/zen](https://github.com/s0md3v/zen) 查找Github用户的邮箱地址
- [**295**星][5m] [C#] [raikia/credninja](https://github.com/raikia/credninja) A multithreaded tool designed to identify if credentials are valid, invalid, or local admin valid credentials within a network at-scale via SMB, plus now with a user hunter
-- [**295**星][2y] [PowerShell] [outflanknl/invoke-adlabdeployer](https://github.com/outflanknl/invoke-adlabdeployer) Automated deployment of Windows and Active Directory test lab networks. Useful for red and blue teams.
+- [**295**星][2y] [PS] [outflanknl/invoke-adlabdeployer](https://github.com/outflanknl/invoke-adlabdeployer) Automated deployment of Windows and Active Directory test lab networks. Useful for red and blue teams.
+- [**295**星][4d] [C++] [hasherezade/libpeconv](https://github.com/hasherezade/libpeconv) 用于映射和取消映射PE 文件的库
- [**295**星][1y] [C#] [ghostpack/sharpup](https://github.com/ghostpack/sharpup) SharpUp is a C# port of various PowerUp functionality.
+- [**295**星][3d] [Shell] [fdiskyou/zines](https://github.com/fdiskyou/zines) Mirror of my favourite hacking Zines for the lulz, nostalgy, and reference
- [**295**星][1m] [JS] [doyensec/electronegativity](https://github.com/doyensec/electronegativity) Electronegativity is a tool to identify misconfigurations and security anti-patterns in Electron applications.
-- [**295**星][2y] [Shell] [checkpointsw/android_unpacker](https://github.com/checkpointsw/android_unpacker) A (hopefully) generic unpacker for packed Android apps.
-- [**295**星][9m] [C] [basil00/reqrypt](https://github.com/basil00/reqrypt) HTTP 请求 tunneling 工具
- [**295**星][3m] [Java] [amaembo/huntbugs](https://github.com/amaembo/huntbugs) Java bytecode static analyzer
-- [**294**星][8m] [C++] [wangyu-/udp2raw-multiplatform](https://github.com/wangyu-/udp2raw-multiplatform) multi-platform(cross-platform) version of udp2raw-tunnel, which supports Windows/Mac/BSD natively
-- [**294**星][6m] [Java] [teamwalrus/walrus](https://github.com/TeamWalrus/Walrus) An Android app that lets you use your access control card cloning devices in the field.
-- [**294**星][7d] [JS] [w3c/webappsec-trusted-types](https://github.com/w3c/webappsec-trusted-types) A browser API to prevent DOM-Based Cross Site Scripting in modern web applications.
-- [**294**星][1y] [JS] [xxxily/fiddler-plus](https://github.com/xxxily/fiddler-plus) 自定义的Fiddler规则,多环境切换、解决跨域开发、快速调试线上代码必备|高效调试分析利器
-- [**294**星][2y] [swiftonsecurity/swiftfilter](https://github.com/swiftonsecurity/swiftfilter) Exchange Transport rules to detect and enable response to phishing
-- [**294**星][2y] [C++] [sensepost/rattler](https://github.com/sensepost/rattler) 自动识别可用于 DLLpreloading 攻击的 DLL
-- [**294**星][9m] [C++] [secrary/idenlib](https://github.com/secrary/idenlib) Library Function Identification [prototype project - signatures might change in future releases]
+- [**294**星][3d] [C] [ebwi11/agentsmith-hids](https://github.com/EBWi11/AgentSmith-HIDS) Low performance loss and by LKM technology HIDS tool, from E_Bwill.
+- [**294**星][1y] [Py] [anasaboureada/penetration-testing-study-notes](https://github.com/AnasAboureada/Penetration-Testing-Study-Notes) Penetration Testing notes, resources and scripts
+- [**294**星][6y] [Py] [xiaomi-sa/smartdns](https://github.com/xiaomi-sa/smartdns) 基于Twisted实现的智能dns系统
+- [**294**星][2y] [Py] [ricmoo/pyaes](https://github.com/ricmoo/pyaes) Pure-Python implementation of AES block-cipher and common modes of operation.
+- [**294**星][9m] [C] [rhboot/shim](https://github.com/rhboot/shim) a trivial EFI application that, when run, attempts to open and execute another application
+- [**294**星][1m] [Lua] [pentesteracademy/patoolkit](https://github.com/pentesteracademy/patoolkit) 一组流量分析插件,用于将Wireshark的功能从微分析工具和协议解析器扩展到宏分析器和威胁猎人。
- [**294**星][3y] [Py] [n1nj4sec/pr0cks](https://github.com/n1nj4sec/pr0cks) python script setting up a transparent proxy to forward all TCP and DNS traffic through a SOCKS / SOCKS5 or HTTP(CONNECT) proxy using iptables -j REDIRECT target
+- [**294**星][2m] [Go] [mdsecactivebreach/o365-attack-toolkit](https://github.com/mdsecactivebreach/o365-attack-toolkit) A toolkit to attack Office365
+- [**294**星][7m] [HTML] [maaaaz/androwarn](https://github.com/maaaaz/androwarn) Yet another static code analyzer for malicious Android applications
- [**294**星][3y] [lucyoa/ctf-wiki](https://github.com/lucyoa/ctf-wiki) Hacking techniques useful during CTFs
-- [**294**星][6m] [Py] [edent/bmw-i-remote](https://github.com/edent/bmw-i-remote) A reverse engineered interface for the BMW i3 Electric Car
+- [**294**星][7m] [Shell] [eschultze/urlextractor](https://github.com/eschultze/urlextractor) Information gathering & website reconnaissance |
+- [**294**星][10m] [Shell] [ctf-wiki/ctf-tools](https://github.com/ctf-wiki/ctf-tools) CTF 工具集合
- [**294**星][1y] [Shell] [cryptolok/ghostinthenet](https://github.com/cryptolok/ghostinthenet) Ultimate Network Stealther that makes Linux a Ghost In The Net and protects from MITM/DOS/scan
-- [**294**星][2m] [Py] [bishopfox/eyeballer](https://github.com/bishopfox/eyeballer) 用于大型网络渗透测试中需要从大量基于Web的主机中找到“有趣的”目标
-- [**294**星][2y] [Py] [allyshka/rogue-mysql-server](https://github.com/allyshka/rogue-mysql-server) MySQL fake server for read files of connected clients
+- [**294**星][8m] [Py] [boy-hack/w8fuckcdn](https://github.com/boy-hack/w8fuckcdn) 通过扫描全网绕过CDN获取网站IP地址
+- [**294**星][1y] [CSS] [appsecco/dvna](https://github.com/appsecco/dvna) Damn Vulnerable NodeJS Application
+- [**294**星][12d] [TS] [acekyd/made-in-nigeria](https://github.com/acekyd/made-in-nigeria) It is rumored that Nigerians only know how to consume tools and not create them. Here is a curation of awesome tools built by Nigerians that can be used by anybody and from anywhere in the world.
- [**294**星][2y] [C] [aanarchyy/bully](https://github.com/aanarchyy/bully) a new implementation of the WPS brute force attack
-- [**293**星][1y] [Py] [anasaboureada/penetration-testing-study-notes](https://github.com/AnasAboureada/Penetration-Testing-Study-Notes) Penetration Testing notes, resources and scripts
-- [**293**星][3m] [JS] [smartdone/frida-scripts](https://github.com/smartdone/frida-scripts) 一些frida脚本
-- [**293**星][3y] [C] [s2e/s2e-old](https://github.com/s2e/s2e-old) This is the archived S2E 1.0 repo. We do not maintain it anymore.
-- [**293**星][4m] [C++] [rolfrolles/hexraysdeob](https://github.com/rolfrolles/hexraysdeob) 利用Hex-Rays microcode API破解编译器级别的混淆
-- [**293**星][8d] [qubesos/qubes-issues](https://github.com/qubesos/qubes-issues) The Qubes OS Project issue tracker
-- [**293**星][4m] [C] [pulkin/esp8266-injection-example](https://github.com/pulkin/esp8266-injection-example) Example project to demonstrate packet injection / sniffer capabilities of ESP8266 IC.
-- [**293**星][1m] [Lua] [pentesteracademy/patoolkit](https://github.com/pentesteracademy/patoolkit) PA Toolkit is a collection of traffic analysis plugins focused on security
-- [**293**星][9d] [C#] [nyan-x-cat/asyncrat-c-sharp](https://github.com/nyan-x-cat/asyncrat-c-sharp) Open-Source Remote Administration Tool For Windows C# (RAT)
+- [**293**星][4m] [C] [shadowsocks/simple-obfs-android](https://github.com/shadowsocks/simple-obfs-android) A simple obfuscating tool for Android
+- [**293**星][8m] [vysecurity/domainfrontinglists](https://github.com/vysecurity/DomainFrontingLists) A list of Domain Frontable Domains by CDN
+- [**293**星][14d] [C++] [xmrig/xmrig-proxy](https://github.com/xmrig/xmrig-proxy) Monero (XMR) Stratum protocol proxy
+- [**293**星][7m] [Py] [vulscanteam/vulscan](https://github.com/vulscanteam/vulscan) vulscan 扫描系统:最新的poc&exp漏洞扫描,redis未授权、敏感文件、java反序列化、tomcat命令执行及各种未授权扫描等...
+- [**293**星][4y] [trustedsec/artillery](https://github.com/trustedsec/artillery) The Artillery Project is an open-source blue team tool designed to protect Linux and Windows operating systems through multiple methods.
+- [**293**星][6m] [YARA] [supportintelligence/icewater](https://github.com/supportintelligence/icewater) 16,432 Free Yara rules created by
+- [**293**星][1m] [Py] [strazzere/golang_loader_assist](https://github.com/strazzere/golang_loader_assist) 辅助Go逆向
+- [**293**星][6m] [C] [skx/simple.vm](https://github.com/skx/simple.vm) Simple virtual machine which inteprets bytecode.
+- [**293**星][10m] [HTML] [s1gh/ctf-literature](https://github.com/s1gh/ctf-literature) Collection of free books, papers and articles related to CTF challenges.
+- [**293**星][10d] [qubesos/qubes-issues](https://github.com/qubesos/qubes-issues) The Qubes OS Project issue tracker
+- [**293**星][5m] [C] [pulkin/esp8266-injection-example](https://github.com/pulkin/esp8266-injection-example) Example project to demonstrate packet injection / sniffer capabilities of ESP8266 IC.
- [**293**星][2y] [C++] [minhaskamal/trojancockroach](https://github.com/minhaskamal/trojancockroach) A Stealthy Trojan Spyware (keylogger-spyware-malware-worm-spy-virus-fud-undetectable-computer-windows-pc-c-c++)
+- [**293**星][2m] [C] [mboehme/aflfast](https://github.com/mboehme/aflfast) AFLFast (extends AFL with Power Schedules)
- [**293**星][2m] [Scala] [jmcardon/tsec](https://github.com/jmcardon/tsec) Type-safe general-cryptography library -
+- [**293**星][15d] [Visual Basic .NET] [itm4n/vba-runpe](https://github.com/itm4n/vba-runpe) A VBA implementation of the RunPE technique or how to bypass application whitelisting.
- [**293**星][3y] [invoke-ir/forensicposters](https://github.com/invoke-ir/forensicposters)
-- [**293**星][9d] [C++] [hasherezade/bearparser](https://github.com/hasherezade/bearparser) Portable Executable parsing library (from PE-bear)
-- [**293**星][11d] [Shell] [fdiskyou/zines](https://github.com/fdiskyou/zines) Mirror of my favourite hacking Zines for the lulz, nostalgy, and reference
-- [**293**星][8m] [Py] [boy-hack/w8fuckcdn](https://github.com/boy-hack/w8fuckcdn) 通过扫描全网绕过CDN获取网站IP地址
-- [**293**星][1y] [CSS] [appsecco/dvna](https://github.com/appsecco/dvna) Damn Vulnerable NodeJS Application
-- [**292**星][8m] [vysecurity/domainfrontinglists](https://github.com/vysecurity/DomainFrontingLists) A list of Domain Frontable Domains by CDN
-- [**292**星][6y] [Py] [xiaomi-sa/smartdns](https://github.com/xiaomi-sa/smartdns) 基于Twisted实现的智能dns系统
-- [**292**星][7m] [Py] [vulscanteam/vulscan](https://github.com/vulscanteam/vulscan) vulscan 扫描系统:最新的poc&exp漏洞扫描,redis未授权、敏感文件、java反序列化、tomcat命令执行及各种未授权扫描等...
-- [**292**星][4y] [trustedsec/artillery](https://github.com/trustedsec/artillery) The Artillery Project is an open-source blue team tool designed to protect Linux and Windows operating systems through multiple methods.
-- [**292**星][1m] [Py] [strazzere/golang_loader_assist](https://github.com/strazzere/golang_loader_assist) 辅助Go逆向
+- [**293**星][8m] [C] [gianlucaborello/libprocesshider](https://github.com/gianlucaborello/libprocesshider) Hide a process under Linux using the ld preloader (
+- [**292**星][1m] [Py] [lucifer1993/tpscan](https://github.com/lucifer1993/tpscan) 一键ThinkPHP漏洞检测
- [**292**星][5y] [C++] [smartdec/smartdec](https://github.com/smartdec/smartdec) 反编译器, 带IDA插件(进阶版为snowman)
- [IDA插件](https://github.com/smartdec/smartdec/tree/master/src/ida-plugin)
- [nocode](https://github.com/smartdec/smartdec/tree/master/src/nocode) 命令行反编译器
- [smartdec](https://github.com/smartdec/smartdec/tree/master/src/smartdec) 带GUI界面的反编译器
- [nc](https://github.com/smartdec/smartdec/tree/master/src/nc) 反编译器的核心代码
-- [**292**星][6m] [C] [skx/simple.vm](https://github.com/skx/simple.vm) Simple virtual machine which inteprets bytecode.
-- [**292**星][8d] [Py] [qilingframework/qiling](https://github.com/qilingframework/qiling) Qiling Advanced Binary Emulation framework
-- [**292**星][8y] [Objective-C] [nst/spyphone](https://github.com/nst/spyphone) This project shows the kind of data a rogue iPhone application can collect.
-- [**292**星][2m] [Go] [mdsecactivebreach/o365-attack-toolkit](https://github.com/mdsecactivebreach/o365-attack-toolkit) A toolkit to attack Office365
-- [**292**星][2m] [C] [mboehme/aflfast](https://github.com/mboehme/aflfast) AFLFast (extends AFL with Power Schedules)
-- [**292**星][6m] [HTML] [maaaaz/androwarn](https://github.com/maaaaz/androwarn) Yet another static code analyzer for malicious Android applications
+- [**292**星][8y] [ObjC] [nst/spyphone](https://github.com/nst/spyphone) This project shows the kind of data a rogue iPhone application can collect.
+- [**292**星][4y] [Py] [northbit/metaphor](https://github.com/northbit/metaphor) Stagefright with ASLR bypass
+- [**292**星][2d] [Zeek] [mitre-attack/car](https://github.com/mitre-attack/car) Cyber Analytics Repository
- [**292**星][11m] [JS] [jeija/bluefluff](https://github.com/jeija/bluefluff) Reverse Engineering Furby Connect's Bluetooth Protocol and Update Format
-- [**292**星][13d] [Visual Basic] [itm4n/vba-runpe](https://github.com/itm4n/vba-runpe) A VBA implementation of the RunPE technique or how to bypass application whitelisting.
-- [**292**星][8m] [C] [gianlucaborello/libprocesshider](https://github.com/gianlucaborello/libprocesshider) Hide a process under Linux using the ld preloader (
-- [**292**星][10m] [Shell] [ctf-wiki/ctf-tools](https://github.com/ctf-wiki/ctf-tools) CTF 工具集合
+- [**292**星][16d] [Java] [ganyao114/sandvxposed](https://github.com/ganyao114/sandvxposed) Xposed environment without root (OS 5.0 - 10.0)
+- [**292**星][2m] [Py] [fplyth0ner-combie/bug-project-framework](https://github.com/fplyth0ner-combie/bug-project-framework) 漏洞利用框架模块分享仓库
+- [**292**星][1y] [findneo/newbie-security-list](https://github.com/findneo/newbie-security-list) 网络安全学习资料,欢迎补充
+- [**292**星][3d] [Java] [adjust/android_sdk](https://github.com/adjust/android_sdk) This is the Android SDK of Adjust
+- [**291**星][11m] [Shell] [cyb0r9/socialbox](https://github.com/Cyb0r9/SocialBox) SocialBox is a Bruteforce Attack Framework [ Facebook , Gmail , Instagram ,Twitter ] , Coded By Belahsan Ouerghi
+- [**291**星][5m] [enkomio/taipan](https://github.com/enkomio/Taipan) Web application vulnerability scanner
- [**291**星][2m] [Py] [vulnerscom/api](https://github.com/vulnerscom/api) Python 2/3 library for the Vulners Database
-- [**291**星][10m] [HTML] [s1gh/ctf-literature](https://github.com/s1gh/ctf-literature) Collection of free books, papers and articles related to CTF challenges.
-- [**291**星][16d] [Go] [ropnop/kerbrute](https://github.com/ropnop/kerbrute) A tool to perform Kerberos pre-auth bruteforcing
-- [**291**星][2y] [Py] [ricmoo/pyaes](https://github.com/ricmoo/pyaes) Pure-Python implementation of AES block-cipher and common modes of operation.
-- [**291**星][9m] [C] [rhboot/shim](https://github.com/rhboot/shim) a trivial EFI application that, when run, attempts to open and execute another application
-- [**291**星][4y] [Py] [northbit/metaphor](https://github.com/northbit/metaphor) Stagefright with ASLR bypass
+- [**291**星][3y] [Py] [ustwo/mastermind](https://github.com/ustwo/mastermind) Man in the middle testing
+- [**291**星][10d] [C++] [tevador/randomx](https://github.com/tevador/randomx) Proof of work algorithm based on random code execution
+- [**291**星][2y] [Py] [orangetw/tiny-url-fuzzer](https://github.com/orangetw/tiny-url-fuzzer) A tiny and cute URL fuzzer
+- [**291**星][4m] [C#] [mvelazc0/defcon27_csharp_workshop](https://github.com/mvelazc0/defcon27_csharp_workshop) Writing custom backdoor payloads with C# - Defcon 27
+- [**291**星][2y] [Java] [kingsollyu/appenv](https://github.com/kingsollyu/appenv) 应用变量
+- [**291**星][6m] [C] [kholia/dedrop](https://github.com/kholia/dedrop) Looking inside the (Drop) box. Security Analysis of Dropbox. Updated WOOT '13 paper and other goodies.
- [**291**星][3y] [Py] [kevthehermit/volutility](https://github.com/kevthehermit/volutility) Web App for Volatility framework
-- [**291**星][14d] [C++] [hasherezade/libpeconv](https://github.com/hasherezade/libpeconv) 用于映射和取消映射PE 文件的库
-- [**291**星][2m] [Py] [govanguard/legion](https://github.com/govanguard/legion) Legion is an open source, easy-to-use, super-extensible and semi-automated network penetration testing tool that aids in discovery, reconnaissance and exploitation of information systems.
-- [**291**星][2m] [Py] [fplyth0ner-combie/bug-project-framework](https://github.com/fplyth0ner-combie/bug-project-framework) 漏洞利用框架模块分享仓库
-- [**291**星][1y] [findneo/newbie-security-list](https://github.com/findneo/newbie-security-list) 网络安全学习资料,欢迎补充
+- [**291**星][2y] [JS] [ffay/proxygateway](https://github.com/ffay/proxygateway) Proxy Gateway基于openresty(nginx lua module)开发,可以作为接口网关(api gateway)使用,整合业务模块接口,微服务治理聚合,通过web配置界面,能够轻松进行代理配置管理,支持负载均衡,服务器状态检测等
- [**291**星][1y] [C] [fail0verflow/ps4-kexec](https://github.com/fail0verflow/ps4-kexec) Implementation of the kexec system call for PS4
-- [**291**星][7m] [Shell] [eschultze/urlextractor](https://github.com/eschultze/urlextractor) Information gathering & website reconnaissance |
-- [**291**星][4y] [Perl] [bishopfox/theos-jailed](https://github.com/bishopfox/theos-jailed) A version of Theos/CydiaSubstrate for non-jailbroken iOS devices
-- [**290**星][4m] [C] [shadowsocks/simple-obfs-android](https://github.com/shadowsocks/simple-obfs-android) A simple obfuscating tool for Android
-- [**290**星][3y] [Py] [cokebar/gfwlist2dnsmasq_python](https://github.com/cokebar/gfwlist2dnsmasq_python) Just another python script to auto-generate dnsmasq ipset rules using gfwlist. Shell script version:
-- [**290**星][6m] [YARA] [supportintelligence/icewater](https://github.com/supportintelligence/icewater) 16,432 Free Yara rules created by
-- [**290**星][2y] [Py] [orangetw/tiny-url-fuzzer](https://github.com/orangetw/tiny-url-fuzzer) A tiny and cute URL fuzzer
-- [**290**星][4m] [C#] [mvelazc0/defcon27_csharp_workshop](https://github.com/mvelazc0/defcon27_csharp_workshop) Writing custom backdoor payloads with C# - Defcon 27
-- [**290**星][4m] [C#] [l0ss/grouper2](https://github.com/l0ss/grouper2) Find vulnerabilities in AD Group Policy
-- [**290**星][2y] [Java] [kingsollyu/appenv](https://github.com/kingsollyu/appenv) 应用变量
-- [**290**星][6m] [C] [kholia/dedrop](https://github.com/kholia/dedrop) Looking inside the (Drop) box. Security Analysis of Dropbox. Updated WOOT '13 paper and other goodies.
-- [**290**星][1y] [Py] [flipkart-incubator/watchdog](https://github.com/flipkart-incubator/watchdog) 全面的安全扫描和漏洞管理工具
-- [**290**星][2m] [C#] [fireeye/sharpersist](https://github.com/fireeye/sharpersist) Windows persistence toolkit
-- [**290**星][2y] [HTML] [dxa4481/cssinjection](https://github.com/dxa4481/cssinjection) Stealing CSRF tokens with CSS injection (without iFrames)
-- [**290**星][4m] [PLpgSQL] [amachanic/sp_whoisactive](https://github.com/amachanic/sp_whoisactive) sp_whoisactive
-- [**290**星][25d] [Java] [adjust/android_sdk](https://github.com/adjust/android_sdk) This is the Android SDK of Adjust
-- [**290**星][10d] [TypeScript] [acekyd/made-in-nigeria](https://github.com/acekyd/made-in-nigeria) It is rumored that Nigerians only know how to consume tools and not create them. Here is a curation of awesome tools built by Nigerians that can be used by anybody and from anywhere in the world.
-- [**290**星][10m] [C] [a1ext/labeless](https://github.com/a1ext/labeless) 在IDA和调试器之间无缝同步Label/注释等
+- [**291**星][10m] [C] [a1ext/labeless](https://github.com/a1ext/labeless) 在IDA和调试器之间无缝同步Label/注释等
- [IDA插件](https://github.com/a1ext/labeless/tree/master/labeless_ida)
- [OD](https://github.com/a1ext/labeless/tree/master/labeless_olly)
- [OD2](https://github.com/a1ext/labeless/tree/master/labeless_olly2)
- [x64dbg](https://github.com/a1ext/labeless/tree/master/labeless_x64dbg)
-- [**289**星][3y] [PowerShell] [fortynorthsecurity/wmiops](https://github.com/FortyNorthSecurity/WMIOps) This repo is for WMIOps, a powershell script which uses WMI for various purposes across a network.
-- [**289**星][5m] [marcinguy/cve-2019-2107](https://github.com/marcinguy/cve-2019-2107) CVE-2019-2107
-- [**289**星][10m] [Py] [immunit/drupwn](https://github.com/immunit/drupwn) Drupal enumeration & exploitation tool
+- [**290**星][1y] [Py] [gallopsled/pwntools-tutorial](https://github.com/gallopsled/pwntools-tutorial) Tutorials for getting started with Pwntools
+- [**290**星][3y] [Py] [cokebar/gfwlist2dnsmasq_python](https://github.com/cokebar/gfwlist2dnsmasq_python) Just another python script to auto-generate dnsmasq ipset rules using gfwlist. Shell script version:
+- [**290**星][3m] [C++] [xmrig/xmrig-amd](https://github.com/xmrig/xmrig-amd) xmrig-amd: 门罗币挖矿代码 A卡版本
+- [**290**星][5m] [marcinguy/cve-2019-2107](https://github.com/marcinguy/cve-2019-2107) CVE-2019-2107
+- [**290**星][4m] [C#] [l0ss/grouper2](https://github.com/l0ss/grouper2) Find vulnerabilities in AD Group Policy
+- [**290**星][10m] [Py] [immunit/drupwn](https://github.com/immunit/drupwn) Drupal enumeration & exploitation tool
+- [**290**星][1y] [Py] [flipkart-incubator/watchdog](https://github.com/flipkart-incubator/watchdog) 全面的安全扫描和漏洞管理工具
+- [**290**星][2y] [HTML] [dxa4481/cssinjection](https://github.com/dxa4481/cssinjection) Stealing CSRF tokens with CSS injection (without iFrames)
+- [**290**星][1m] [Go] [decomp/decomp](https://github.com/decomp/decomp) Components of a decompilation pipeline.
+- [**290**星][4y] [Perl] [bishopfox/theos-jailed](https://github.com/bishopfox/theos-jailed) A version of Theos/CydiaSubstrate for non-jailbroken iOS devices
+- [**290**星][2m] [Py] [a1ext/auto_re](https://github.com/a1ext/auto_re) 自动化函数重命名
+- [**289**星][15d] [Roff] [ysurac/openmptcprouter](https://github.com/ysurac/openmptcprouter) OpenMPTCProuter is an open source solution to aggregate multiple internet connections using Multipath TCP (MPTCP) on OpenWrt
+- [**289**星][6m] [JS] [joshuaferrara/node-csgo](https://github.com/joshuaferrara/node-csgo) A node-steam plugin for Counter-Strike: Global Offensive.
+- [**289**星][3y] [PS] [fortynorthsecurity/wmiops](https://github.com/FortyNorthSecurity/WMIOps) This repo is for WMIOps, a powershell script which uses WMI for various purposes across a network.
+- [**289**星][4d] [PHP] [voku/anti-xss](https://github.com/voku/anti-xss)
+- [**289**星][7m] [Py] [ropnop/windapsearch](https://github.com/ropnop/windapsearch) Python script to enumerate users, groups and computers from a Windows domain through LDAP queries
+- [**289**星][2m] [JS] [pownjs/pown-recon](https://github.com/pownjs/pown-recon) A powerful target reconnaissance framework powered by graph theory.
+- [**289**星][5m] [Py] [opsdisk/pagodo](https://github.com/opsdisk/pagodo) pagodo (Passive Google Dork) - Automate Google Hacking Database scraping
+- [**289**星][3m] [JS] [kspearrin/ff-password-exporter](https://github.com/kspearrin/ff-password-exporter) Easily export your passwords from Firefox.
+- [**289**星][2y] [Py] [kootenpv/gittyleaks](https://github.com/kootenpv/gittyleaks) Discover where your sensitive data has been leaked.
- [**289**星][2y] [Py] [gbrindisi/xsssniper](https://github.com/gbrindisi/xsssniper) An automatic XSS discovery tool
-- [**289**星][14d] [Java] [ganyao114/sandvxposed](https://github.com/ganyao114/sandvxposed) Xposed environment without root (OS 5.0 - 10.0)
-- [**289**星][2m] [Py] [a1ext/auto_re](https://github.com/a1ext/auto_re) 自动化函数重命名
-- [**288**星][1y] [Py] [gallopsled/pwntools-tutorial](https://github.com/gallopsled/pwntools-tutorial) Tutorials for getting started with Pwntools
-- [**288**星][6m] [JS] [joshuaferrara/node-csgo](https://github.com/joshuaferrara/node-csgo) A node-steam plugin for Counter-Strike: Global Offensive.
-- [**288**星][11m] [Shell] [cyb0r9/socialbox](https://github.com/Cyb0r9/SocialBox) SocialBox is a Bruteforce Attack Framework [ Facebook , Gmail , Instagram ,Twitter ] , Coded By Belahsan Ouerghi
-- [**288**星][5m] [enkomio/taipan](https://github.com/enkomio/Taipan) Web application vulnerability scanner
+- [**289**星][2y] [C] [creaktive/tsh](https://github.com/creaktive/tsh) Tiny SHell - An open-source UNIX backdoor
+- [**289**星][4d] [Shell] [adferrand/docker-letsencrypt-dns](https://github.com/adferrand/docker-letsencrypt-dns) Docker with Certbot + Lexicon to provide Let's Encrypt SSL certificates validated by DNS challenges
+- [**288**星][1y] [Py] [zhl2008/awd-platform](https://github.com/zhl2008/awd-platform) a project to set up your awd environment(web challenges only) quickly
- [**288**星][7m] [Py] [williballenthin/python-registry](https://github.com/williballenthin/python-registry) 用于对Windows NT注册表文件进行纯读取访问的Python库
-- [**288**星][28d] [PHP] [voku/anti-xss](https://github.com/voku/anti-xss)
-- [**288**星][2m] [JS] [pownjs/pown-recon](https://github.com/pownjs/pown-recon) A powerful target reconnaissance framework powered by graph theory.
-- [**288**星][8d] [PHP] [phpmussel/phpmussel](https://github.com/phpmussel/phpmussel) PHP-based anti-virus anti-trojan anti-malware solution.
+- [**288**星][2y] [Py] [websploit/websploit](https://github.com/websploit/websploit) websploit is an advanced MITM framework
+- [**288**星][4d] [C] [troglobit/nemesis](https://github.com/troglobit/nemesis) 网络数据包构造和注入的命令行工具
+- [**288**星][2d] [Py] [sosreport/sos](https://github.com/sosreport/sos) A unified tool for collecting system logs and other debug information
+- [**288**星][5m] [C++] [rampagex/firmware-mod-kit](https://github.com/rampagex/firmware-mod-kit) Automatically exported from code.google.com/p/firmware-mod-kit
+- [**288**星][10d] [PHP] [phpmussel/phpmussel](https://github.com/phpmussel/phpmussel) PHP-based anti-virus anti-trojan anti-malware solution.
+- [**288**星][7m] [JS] [ma3k4h3d/papers](https://github.com/ma3k4h3d/papers) Some papers about cyber security
- [**288**星][12m] [Java] [indywidualny/faceslim](https://github.com/indywidualny/faceslim) Web App for Facebook. Lightweight, ad-free, chat support and modern look.
- [**288**星][3y] [Py] [dhilipsiva/webapp-checklist](https://github.com/dhilipsiva/webapp-checklist) Technical details that a programmer of a web application should consider before making the site public.
-- [**288**星][2y] [C] [creaktive/tsh](https://github.com/creaktive/tsh) Tiny SHell - An open-source UNIX backdoor
+- [**288**星][3y] [C++] [develbranch/tinyantivirus](https://github.com/develbranch/tinyantivirus) TinyAntivirus is an open source antivirus engine designed for detecting polymorphic virus and disinfecting it.
- [**288**星][3m] [Py] [covertcodes/multitun](https://github.com/covertcodes/multitun) Tunnel arbitrary traffic through an innocuous WebSocket. Clients can 'see' each other, resulting in a stealth WebSocket VPN.
-- [**287**星][8d] [C] [ebwi11/agentsmith-hids](https://github.com/EBWi11/AgentSmith-HIDS) Low performance loss and by LKM technology HIDS tool, from E_Bwill.
-- [**287**星][1y] [Py] [zhl2008/awd-platform](https://github.com/zhl2008/awd-platform) a project to set up your awd environment(web challenges only) quickly
+- [**288**星][10m] [C++] [anhkgg/superdllhijack](https://github.com/anhkgg/superdllhijack) SuperDllHijack:A general DLL hijack technology, don't need to manually export the same function interface of the DLL, so easy! 一种通用Dll劫持技术,不再需要手工导出Dll的函数接口了
+- [**287**星][6m] [Shell] [greenwolf/spray](https://github.com/Greenwolf/Spray) A Password Spraying tool for Active Directory Credentials by Jacob Wilkin(Greenwolf)
+- [**287**星][1y] [Py] [klsecservices/rpivot](https://github.com/klsecservices/rpivot) socks4 reverse proxy for penetration testing
+- [**287**星][8m] [C] [tangsilian/android-vuln](https://github.com/tangsilian/android-vuln) 安卓内核提权漏洞分析
- [**287**星][2m] [Py] [utiso/dorkbot](https://github.com/utiso/dorkbot) 扫描谷歌搜索返回的网页,查找网页漏洞
- [**287**星][2m] [Shell] [tehw0lf/airbash](https://github.com/tehw0lf/airbash) 全自动的WPAPSK握手包捕获脚本, 用于渗透测试
-- [**287**星][2m] [Py] [sosreport/sos](https://github.com/sosreport/sos) A unified tool for collecting system logs and other debug information
-- [**287**星][1y] [C++] [paranoidninja/pandoras-box](https://github.com/paranoidninja/pandoras-box) This repo contains my custom scripts for Penetration Testing and Red Team Assessments. I will keep on updating this repo as and when I get time.
-- [**287**星][1m] [Shell] [matthewpierson/1033-ota-downgrader](https://github.com/matthewpierson/1033-ota-downgrader) First ever tool to downgrade ANY iPhone 5s, ANY iPad Air and (almost any) iPad Mini 2 to 10.3.3 with OTA blobs + checkm8!
+- [**287**星][10m] [C] [samhocevar/zzuf](https://github.com/samhocevar/zzuf)
+- [**287**星][1y] [C++] [paranoidninja/pandoras-box](https://github.com/paranoidninja/pandoras-box) 渗透和Red Team脚本
+- [**287**星][23d] [HTML] [mozillasecurity/fuzzdata](https://github.com/mozillasecurity/fuzzdata) Fuzzing resources for feeding various fuzzers with input.
+- [**287**星][9d] [C#] [matterpreter/offensivecsharp](https://github.com/matterpreter/offensivecsharp) Collection of Offensive C# Tooling
- [**287**星][1y] [Py] [manwhoami/mmetokendecrypt](https://github.com/manwhoami/mmetokendecrypt) Decrypts and extracts iCloud and MMe authorization tokens on Apple macOS / OS X. No user authentication needed. 🏅🌩
-- [**287**星][2y] [Py] [kootenpv/gittyleaks](https://github.com/kootenpv/gittyleaks) Discover where your sensitive data has been leaked.
+- [**287**星][4m] [Py] [lufeirider/cve-2019-2725](https://github.com/lufeirider/cve-2019-2725) CVE-2019-2725 命令回显
+- [**287**星][2y] [C++] [godaddy/procfilter](https://github.com/godaddy/procfilter) Windows 进程过滤系统。可以使用 Yara 规则匹配进程模块,从而阻止匹配的进程启动
- [**287**星][11m] [C++] [gamozolabs/applepie](https://github.com/gamozolabs/applepie) A hypervisor for fuzzing built with WHVP and Bochs
- [**287**星][12m] [C] [dgoulet/torsocks](https://github.com/dgoulet/torsocks) Library to torify application - NOTE: upstream has been moved to
-- [**287**星][3y] [C++] [develbranch/tinyantivirus](https://github.com/develbranch/tinyantivirus) TinyAntivirus is an open source antivirus engine designed for detecting polymorphic virus and disinfecting it.
-- [**287**星][1m] [Go] [decomp/decomp](https://github.com/decomp/decomp) Components of a decompilation pipeline.
-- [**287**星][10m] [C++] [anhkgg/superdllhijack](https://github.com/anhkgg/superdllhijack) SuperDllHijack:A general DLL hijack technology, don't need to manually export the same function interface of the DLL, so easy! 一种通用Dll劫持技术,不再需要手工导出Dll的函数接口了
+- [**287**星][6m] [Shell] [0ki/mikrotik-tools](https://github.com/0ki/mikrotik-tools) Tools for Mikrotik devices - universal jailbreak tool
- [**286**星][1y] [C] [str8outtaheap/heapwn](https://github.com/str8outtaheap/heapwn) Linux Heap Exploitation Practice
+- [**286**星][21d] [Go] [zmap/zgrab2](https://github.com/zmap/zgrab2) Go Application Layer Scanner
- [**286**星][1m] [Py] [xdavidhu/portspider](https://github.com/xdavidhu/portspider) A lightning fast multithreaded network scanner framework with modules.
- [**286**星][1y] [Java] [webgoat/webgoat-legacy](https://github.com/webgoat/webgoat-legacy) Legacy WebGoat 6.0 - Deliberately insecure JavaEE application
-- [**286**星][7d] [C] [troglobit/nemesis](https://github.com/troglobit/nemesis) 网络数据包构造和注入的命令行工具
-- [**286**星][10m] [C] [samhocevar/zzuf](https://github.com/samhocevar/zzuf)
-- [**286**星][4m] [Py] [lufeirider/cve-2019-2725](https://github.com/lufeirider/cve-2019-2725) CVE-2019-2725 命令回显
-- [**286**星][3m] [JS] [kspearrin/ff-password-exporter](https://github.com/kspearrin/ff-password-exporter) Easily export your passwords from Firefox.
-- [**286**星][2y] [C++] [godaddy/procfilter](https://github.com/godaddy/procfilter) Windows 进程过滤系统。可以使用 Yara 规则匹配进程模块,从而阻止匹配的进程启动
+- [**286**星][4d] [Lua] [theherogac/autoplugin](https://github.com/theherogac/autoplugin) Autoplugin for PSVITA
+- [**286**星][7m] [C++] [mattiwatti/pplkiller](https://github.com/mattiwatti/pplkiller) Protected Processes Light Killer
+- [**286**星][2y] [ivmachiavelli/osint_team_links](https://github.com/ivmachiavelli/osint_team_links) Links for the OSINT Team
- [**286**星][3m] [Py] [feliam/pysymemu](https://github.com/feliam/pysymemu) An intel 64 symbolic emulator
+- [**286**星][7m] [Py] [cesar-rodriguez/terrascan](https://github.com/cesar-rodriguez/terrascan) Collection of security and best practice test for static code analysis of terraform templates
- [**286**星][5y] [Py] [aaronportnoy/toolbag](https://github.com/aaronportnoy/toolbag) 反编译强化插件
-- [**285**星][6m] [Shell] [greenwolf/spray](https://github.com/Greenwolf/Spray) A Password Spraying tool for Active Directory Credentials by Jacob Wilkin(Greenwolf)
-- [**285**星][1y] [Py] [klsecservices/rpivot](https://github.com/klsecservices/rpivot) socks4 reverse proxy for penetration testing
-- [**285**星][2y] [Py] [websploit/websploit](https://github.com/websploit/websploit) websploit is an advanced MITM framework
+- [**285**星][7m] [C] [thingpulse/esp8266-weather-station-color](https://github.com/ThingPulse/esp8266-weather-station-color) ESP8266 Weather Station in Color using ILI9341 TFT 240x320 display
+- [**285**星][10m] [wallarm/awesome-nginx-security](https://github.com/wallarm/awesome-nginx-security)
+- [**285**星][22d] [Shell] [petit-miner/blueberry-pi](https://github.com/petit-miner/blueberry-pi) Blueberry PI
+- [**285**星][10m] [ntruopensourceproject/ntru-crypto](https://github.com/ntruopensourceproject/ntru-crypto) Open Source NTRU Public Key Cryptography and Reference Code
- [**285**星][3y] [Py] [nanshihui/poccollect](https://github.com/nanshihui/poccollect) a plenty of poc based on python
-- [**285**星][21d] [HTML] [mozillasecurity/fuzzdata](https://github.com/mozillasecurity/fuzzdata) Fuzzing resources for feeding various fuzzers with input.
- [**285**星][5m] [JS] [mike-goodwin/owasp-threat-dragon](https://github.com/mike-goodwin/owasp-threat-dragon) An open source, online threat modelling tool from OWASP
-- [**285**星][7d] [C#] [matterpreter/offensivecsharp](https://github.com/matterpreter/offensivecsharp) Collection of Offensive C# Tooling
- [**285**星][3y] [Go] [longxboy/lunnel](https://github.com/longxboy/lunnel) fast reverse-proxy
- [**285**星][4y] [C++] [kennytm/miscellaneous](https://github.com/kennytm/miscellaneous) This repository contains stuff which would be helpful for jailbroken iOS development.
+- [**285**星][1y] [Py] [fox-it/aclpwn.py](https://github.com/fox-it/aclpwn.py) 与BloodHound交互, 识别并利用基于ACL的提权路径
- [**285**星][2y] [evilsocket/bettercap-proxy-modules](https://github.com/evilsocket/bettercap-proxy-modules) This repository contains some bettercap transparent proxy example modules.
- [**285**星][2y] [Py] [eik00d/cantoolz](https://github.com/eik00d/cantoolz) CANToolz - framework for black-box CAN network analysis
- [**285**星][2y] [C] [devio/walruss](https://github.com/devio/walruss) PC-Wahl 10 Hacking Tools
- [**285**星][1y] [Py] [code-scan/dzscan](https://github.com/code-scan/dzscan) Dzscan
- [**285**星][2y] [Java] [cnfree/eclipse-class-decompiler](https://github.com/cnfree/eclipse-class-decompiler) Eclipse Class Decompiler integrates JD, Jad, FernFlower, CFR, Procyon seamlessly with Eclipse and allows Java developers to debug class files without source code directly
- [**285**星][3m] [Py] [apache/incubator-spot](https://github.com/apache/incubator-spot) Mirror of Apache Spot
-- [**284**星][8m] [C] [tangsilian/android-vuln](https://github.com/tangsilian/android-vuln) 安卓内核提权漏洞分析
-- [**284**星][10m] [wallarm/awesome-nginx-security](https://github.com/wallarm/awesome-nginx-security)
+- [**284**星][1m] [JS] [agoric/ses](https://github.com/agoric/ses) SES (Secure EcmaScript) is a secure runtime for running third-party code safely
+- [**284**星][2m] [Py] [yzddmr6/webcrack](https://github.com/yzddmr6/webcrack) 网站后台弱口令/万能密码批量检测工具
- [**284**星][3y] [C] [unix-thrust/beurk](https://github.com/unix-thrust/beurk) BEURK Experimental Unix RootKit
-- [**284**星][5m] [C++] [rampagex/firmware-mod-kit](https://github.com/rampagex/firmware-mod-kit) Automatically exported from code.google.com/p/firmware-mod-kit
-- [**284**星][5m] [Py] [opsdisk/pagodo](https://github.com/opsdisk/pagodo) pagodo (Passive Google Dork) - Automate Google Hacking Database scraping
-- [**284**星][7m] [JS] [ma3k4h3d/papers](https://github.com/ma3k4h3d/papers) Some papers about cyber security
+- [**284**星][9d] [Py] [target/strelka](https://github.com/target/strelka) Real-time, container-based file scanning at enterprise scale
+- [**284**星][12m] [Py] [mrash/afl-cov](https://github.com/mrash/afl-cov) Produce code coverage results with gcov from afl-fuzz test cases
+- [**284**星][1m] [Py] [lorexxar/cobra-w](https://github.com/lorexxar/cobra-w) Cobra-W -> Cobra-White 白盒源代码审计工具-白帽子版
- [**284**星][2y] [Swift] [krausefx/watch.user](https://github.com/krausefx/watch.user) Every iOS app you ever gave permission to use your camera can record you any time it runs - without notice
+- [**284**星][12m] [Py] [justicerage/ffm](https://github.com/justicerage/ffm) Freedom Fighting Mode: open source hacking harness
+- [**284**星][2y] [Shell] [jobertabma/recon.sh](https://github.com/jobertabma/recon.sh) 跟踪,识别和存储侦查(reconnaissance)工具的输出
- [**284**星][1y] [Shell] [ha71/namechk](https://github.com/ha71/namechk) Osint tool based on namechk.com for checking usernames on more than 100 websites, forums and social networks.
- [**284**星][4y] [C] [firnsy/barnyard2](https://github.com/firnsy/barnyard2) Barnyard2 is a dedicated spooler for Snort's unified2 binary output format.
-- [**284**星][6m] [Shell] [0ki/mikrotik-tools](https://github.com/0ki/mikrotik-tools) Tools for Mikrotik devices - universal jailbreak tool
-- [**283**星][8d] [ugvf2009/miles](https://github.com/ugvf2009/miles) 二爷翻墙,专注翻墙30年,但没有掌握核心科技^_^
-- [**283**星][7m] [C] [thingpulse/esp8266-weather-station-color](https://github.com/ThingPulse/esp8266-weather-station-color) ESP8266 Weather Station in Color using ILI9341 TFT 240x320 display
-- [**283**星][9d] [Lua] [theherogac/autoplugin](https://github.com/theherogac/autoplugin) Autoplugin for PSVITA
-- [**283**星][7d] [Py] [target/strelka](https://github.com/target/strelka) Real-time, container-based file scanning at enterprise scale
+- [**284**星][5d] [Go] [cruise-automation/fwanalyzer](https://github.com/cruise-automation/fwanalyzer) a tool to analyze filesystem images for security
+- [**284**星][6m] [Go] [anshumanbh/tko-subs](https://github.com/anshumanbh/tko-subs) A tool that can help detect and takeover subdomains with dead DNS records
+- [**284**星][6m] [Py] [airbus-seclab/cpu_rec](https://github.com/airbus-seclab/cpu_rec) 在任意二进制文件中识别CPU 指令
+- [**283**星][3m] [C++] [yuanyuanxiang/simpleremoter](https://github.com/yuanyuanxiang/simpleremoter) 基于gh0st的远程控制器:实现了终端管理、进程管理、窗口管理、远程桌面、文件管理、语音管理、视频管理、服务管理、注册表管理等功能,优化全部代码及整理排版,修复内存泄漏缺陷,程序运行稳定。此项目初版见:
+- [**283**星][9d] [C] [tomb5/tomb5](https://github.com/tomb5/tomb5) Chronicles Disassembly translated to C source code.
+- [**283**星][4m] [tanprathan/owasp-testing-checklist](https://github.com/tanprathan/owasp-testing-checklist) OWASP based Web Application Security Testing Checklist is an Excel based checklist which helps you to track the status of completed and pending test cases.
+- [**283**星][5m] [Go] [suyashkumar/ssl-proxy](https://github.com/suyashkumar/ssl-proxy)
+- [**283**星][1y] [Rust] [superandroidanalyzer/super](https://github.com/superandroidanalyzer/super) Secure, Unified, Powerful and Extensible Rust Android Analyzer
- [**283**星][2y] [Java] [simbiose/encryption](https://github.com/simbiose/encryption) Encryption is a simple way to encrypt and decrypt strings on Android and Java project.
-- [**283**星][3m] [Py] [shenril/sitadel](https://github.com/shenril/sitadel) Web Application Security Scanner
-- [**283**星][12m] [Py] [mrash/afl-cov](https://github.com/mrash/afl-cov) Produce code coverage results with gcov from afl-fuzz test cases
-- [**283**星][7m] [C++] [mattiwatti/pplkiller](https://github.com/mattiwatti/pplkiller) Protected Processes Light Killer
+- [**283**星][4m] [Py] [shenril/sitadel](https://github.com/shenril/sitadel) Web Application Security Scanner
+- [**283**星][7d] [Py] [punch-cyber/stoq](https://github.com/punch-cyber/stoq) simplify the mundane and repetitive tasks an analyst is required to do
+- [**283**星][1y] [Py] [mazen160/struts-pwn_cve-2018-11776](https://github.com/mazen160/struts-pwn_cve-2018-11776) An exploit for Apache Struts CVE-2018-11776
+- [**283**星][3y] [C] [matt-wu/aes](https://github.com/matt-wu/aes) Understanding AES & Rijndael
- [**283**星][7m] [Java] [katjahahn/portex](https://github.com/katjahahn/portex) Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness
-- [**283**星][12m] [Py] [justicerage/ffm](https://github.com/justicerage/ffm) Freedom Fighting Mode: open source hacking harness
+- [**283**星][9m] [C] [jiaoxianjun/btle](https://github.com/jiaoxianjun/btle) Bluetooth Low Energy (BLE) packet sniffer and generator for both standard and non standard (raw bit).
- [**283**星][2y] [C++] [google/syzygy](https://github.com/google/syzygy) a suite of tools for the instrumentation of COFF object files and PE binaries
- [**283**星][1y] [Java] [elkokc/reflector](https://github.com/elkokc/reflector) Burp 插件,浏览网页时实时查找反射 XSS
-- [**283**星][7m] [Py] [cesar-rodriguez/terrascan](https://github.com/cesar-rodriguez/terrascan) Collection of security and best practice test for static code analysis of terraform templates
+- [**283**星][3y] [HTML] [buddhalabs/packetstorm-exploits](https://github.com/buddhalabs/packetstorm-exploits) Collection of publicly available exploits from Packetstorm
+- [**282**星][3y] [Go] [geohot/lolrecaptcha](https://github.com/geohot/lolrecaptcha) We try to break the recaptcha for the Merry Christmas for all!
- [**282**星][2y] [Py] [0xislamtaha/python-rootkit](https://github.com/0xIslamTaha/Python-Rootkit) Python Remote Administration Tool (RAT) to gain meterpreter session
+- [**282**星][9m] [C#] [nsacyber/windows-event-log-messages](https://github.com/nsacyber/Windows-Event-Log-Messages) 检索Windows二进制文件中嵌入的Windows事件日志消息的定义,并以discoverable的格式提供它们
- [**282**星][1y] [HTML] [googleprojectzero/p0tools](https://github.com/googleprojectzero/p0tools) Project Zero Docs and Tools
-- [**282**星][8d] [C++] [tevador/randomx](https://github.com/tevador/randomx) Proof of work algorithm based on random code execution
-- [**282**星][7m] [Py] [ropnop/windapsearch](https://github.com/ropnop/windapsearch) Python script to enumerate users, groups and computers from a Windows domain through LDAP queries
-- [**282**星][2y] [Shell] [jobertabma/recon.sh](https://github.com/jobertabma/recon.sh) 跟踪,识别和存储侦查(reconnaissance)工具的输出
-- [**282**星][2y] [ivmachiavelli/osint_team_links](https://github.com/ivmachiavelli/osint_team_links) Links for the OSINT Team
+- [**282**星][3d] [Py] [qiskit/qiskit-aqua](https://github.com/Qiskit/qiskit-aqua) Aqua provides a library and tools to build applications for noisy quantum computers.
+- [**282**星][3m] [Py] [thekingofduck/easyxsspayload](https://github.com/thekingofduck/easyxsspayload) XssPayload List . Usage:
+- [**282**星][2y] [Py] [ssooking/ctfdefense](https://github.com/ssooking/ctfdefense) Some tools for CTF off line
+- [**282**星][5m] [Perl] [shirkdog/pulledpork](https://github.com/shirkdog/pulledpork) Pulled Pork for Snort and Suricata rule management (from Google code)
+- [**282**星][8m] [Py] [phage-nz/ph0neutria](https://github.com/phage-nz/ph0neutria) ph0neutria is a malware zoo builder that sources samples straight from the wild. Everything is stored in Viper for ease of access and manageability.
+- [**282**星][5d] [PS] [nullbind/powershellery](https://github.com/nullbind/powershellery) This repo contains Powershell scripts used for general hackery.
+- [**282**星][3y] [C] [leaflabs/libmaple](https://github.com/leaflabs/libmaple) [INACTIVE] C and C++ library for STM32 ARM Cortex-M3 development boards.
+- [**282**星][3m] [Py] [joxeankoret/pyew](https://github.com/joxeankoret/pyew) Official repository for Pyew.
+- [**282**星][2m] [Java] [exalab/anlinux-app](https://github.com/exalab/anlinux-app) AnLinux allow you to run Linux on Android without root access.
+- [**282**星][22d] [drduh/debian-privacy-server-guide](https://github.com/drduh/debian-privacy-server-guide) Guide to using a remote Debian server for security and privacy services
- [**282**星][1y] [Ruby] [danmcinerney/pentest-machine](https://github.com/danmcinerney/pentest-machine) Automates some pentest jobs via nmap xml file
-- [**282**星][13d] [Go] [cruise-automation/fwanalyzer](https://github.com/cruise-automation/fwanalyzer) a tool to analyze filesystem images
- [**282**星][1y] [JS] [chrisallenlane/novahot](https://github.com/chrisallenlane/novahot) Webshell框架,实现了基于Json的API,可与任何语言编写的后门(默认支持PHP/Ruby/Python)进行通信。
-- [**281**星][1m] [JS] [agoric/ses](https://github.com/agoric/ses) SES (Secure EcmaScript) is a secure runtime for running third-party code safely
-- [**281**星][9m] [C#] [nsacyber/windows-event-log-messages](https://github.com/nsacyber/Windows-Event-Log-Messages) 检索Windows二进制文件中嵌入的Windows事件日志消息的定义,并以discoverable的格式提供它们
-- [**281**星][3m] [C++] [yuanyuanxiang/simpleremoter](https://github.com/yuanyuanxiang/simpleremoter) 基于gh0st的远程控制器:实现了终端管理、进程管理、窗口管理、远程桌面、文件管理、语音管理、视频管理、服务管理、注册表管理等功能,优化全部代码及整理排版,修复内存泄漏缺陷,程序运行稳定。此项目初版见:
-- [**281**星][7d] [C] [tomb5/tomb5](https://github.com/tomb5/tomb5) Chronicles Disassembly translated to C source code.
-- [**281**星][5m] [Go] [suyashkumar/ssl-proxy](https://github.com/suyashkumar/ssl-proxy)
-- [**281**星][1y] [Rust] [superandroidanalyzer/super](https://github.com/superandroidanalyzer/super) Secure, Unified, Powerful and Extensible Rust Android Analyzer
-- [**281**星][8m] [Py] [phage-nz/ph0neutria](https://github.com/phage-nz/ph0neutria) ph0neutria is a malware zoo builder that sources samples straight from the wild. Everything is stored in Viper for ease of access and manageability.
-- [**281**星][20d] [Shell] [petit-miner/blueberry-pi](https://github.com/petit-miner/blueberry-pi) Blueberry PI
+- [**282**星][2y] [Py] [bit4woo/passmaker](https://github.com/bit4woo/passmaker) 可以自定义规则的密码字典生成器,支持图形界面 A password-generator that base on the rules that you specified
+- [**282**星][2m] [C] [ayeks/sgx-hardware](https://github.com/ayeks/sgx-hardware) This is a list of hardware which is supports Intel SGX - Software Guard Extensions.
+- [**281**星][3y] [C++] [googleprojectzero/symboliclink-testing-tools](https://github.com/googleprojectzero/symboliclink-testing-tools) 用于测试Windows的各种符号链接类型的一套工具
+- [**281**星][1y] [CSS] [w-digital-scanner/w11scan](https://github.com/w-digital-scanner/w11scan) 分布式WEB指纹识别平台 Distributed WEB fingerprint identification platform
+- [**281**星][9y] [Py] [ptoomey3/evilarc](https://github.com/ptoomey3/evilarc) Create tar/zip archives that can exploit directory traversal vulnerabilities
- [**281**星][1y] [Py] [novicelive/bintut](https://github.com/novicelive/bintut) Teach you a binary exploitation for great good.
-- [**281**星][1y] [Py] [mazen160/struts-pwn_cve-2018-11776](https://github.com/mazen160/struts-pwn_cve-2018-11776) An exploit for Apache Struts CVE-2018-11776
-- [**281**星][3y] [C] [matt-wu/aes](https://github.com/matt-wu/aes) Understanding AES & Rijndael
+- [**281**星][3m] [PHP] [nico3333fr/csp-useful](https://github.com/nico3333fr/csp-useful) Collection of scripts, thoughts about CSP (Content Security Policy)
+- [**281**星][4y] [Py] [monnappa22/limon](https://github.com/monnappa22/limon) Limon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators of Linux malware. It allows one to inspect Linux malware before execution, during execution, and after execution (post-mortem analysis) by performing static, dynamic and memory analysis using open s…
+- [**281**星][8m] [Py] [micropyramid/forex-python](https://github.com/micropyramid/forex-python) Foreign exchange rates, Bitcoin price index and currency conversion using ratesapi.io
- [**281**星][4y] [Py] [mandatoryprogrammer/xssless](https://github.com/mandatoryprogrammer/xssless) An automated XSS payload generator written in python.
-- [**281**星][3y] [C] [leaflabs/libmaple](https://github.com/leaflabs/libmaple) [INACTIVE] C and C++ library for STM32 ARM Cortex-M3 development boards.
-- [**281**星][3m] [Py] [joxeankoret/pyew](https://github.com/joxeankoret/pyew) Official repository for Pyew.
-- [**281**星][1y] [Py] [fox-it/aclpwn.py](https://github.com/fox-it/aclpwn.py) 与BloodHound交互, 识别并利用基于ACL的提权路径
-- [**281**星][20d] [drduh/debian-privacy-server-guide](https://github.com/drduh/debian-privacy-server-guide) Guide to using a remote Debian server for security and privacy services
-- [**281**星][2m] [C] [ayeks/sgx-hardware](https://github.com/ayeks/sgx-hardware) This is a list of hardware which is supports Intel SGX - Software Guard Extensions.
-- [**280**星][1m] [Py] [lucifer1993/tpscan](https://github.com/lucifer1993/tpscan) 一键ThinkPHP漏洞检测
-- [**280**星][25d] [Shell] [trimstray/mkchain](https://github.com/trimstray/mkchain) 建立从根证书到最终用户证书的有效的SSL证书链, 修复不完整的证书链并下载所有缺少的CA证书
-- [**280**星][4m] [tanprathan/owasp-testing-checklist](https://github.com/tanprathan/owasp-testing-checklist) OWASP based Web Application Security Testing Checklist is an Excel based checklist which helps you to track the status of completed and pending test cases.
-- [**280**星][4m] [Perl] [shirkdog/pulledpork](https://github.com/shirkdog/pulledpork) Pulled Pork for Snort and Suricata rule management (from Google code)
+- [**281**星][10m] [maaaaz/impacket-examples-windows](https://github.com/maaaaz/impacket-examples-windows) The great impacket example scripts compiled for Windows
+- [**281**星][1m] [Py] [cwerling/psptool](https://github.com/cwerling/psptool) Display, extract, and manipulate PSP firmware inside UEFI images
+- [**281**星][9m] [Py] [chenjiandongx/async-proxy-pool](https://github.com/chenjiandongx/async-proxy-pool)
+- [**281**星][6m] [Shell] [chaifeng/ufw-docker](https://github.com/chaifeng/ufw-docker) To fix the Docker and UFW security flaw without disabling iptables
+- [**281**星][1m] [C] [aflsmart/aflsmart](https://github.com/aflsmart/aflsmart) Smart Greybox Fuzzing (
+- [**280**星][2y] [Go] [unixpickle/kahoot-hack](https://github.com/unixpickle/kahoot-hack) Reverse engineering kahoot.it
+- [**280**星][1m] [Py] [0xinfection/xsrfprobe](https://github.com/0xInfection/XSRFProbe) The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
+- [**280**星][27d] [Shell] [trimstray/mkchain](https://github.com/trimstray/mkchain) 建立从根证书到最终用户证书的有效的SSL证书链, 修复不完整的证书链并下载所有缺少的CA证书
+- [**280**星][2y] [Py] [xoreaxeaxeax/reductio](https://github.com/xoreaxeaxeax/reductio) An exploration of code homeomorphism
+- [**280**星][8d] [Py] [tomato42/tlsfuzzer](https://github.com/tomato42/tlsfuzzer) SSL and TLS protocol test suite and fuzzer
- [**280**星][2y] [C++] [sam-b/windows_kernel_address_leaks](https://github.com/sam-b/windows_kernel_address_leaks) Windows上从用户模式泄漏内核模式信息的示例
-- [**280**星][21d] [Py] [punch-cyber/stoq](https://github.com/punch-cyber/stoq) simplify the mundane and repetitive tasks an analyst is required to do
-- [**280**星][9y] [Py] [ptoomey3/evilarc](https://github.com/ptoomey3/evilarc) Create tar/zip archives that can exploit directory traversal vulnerabilities
-- [**280**星][20d] [PowerShell] [nullbind/powershellery](https://github.com/nullbind/powershellery) This repo contains Powershell scripts used for general hackery.
+- [**280**星][3m] [Py] [hacktoolspack/hack-tools](https://github.com/hacktoolspack/hack-tools) hack tools
- [**280**星][4y] [Py] [fuzzing/mffa](https://github.com/fuzzing/mffa) Media Fuzzing Framework for Android
-- [**280**星][24d] [Py] [facebook/fbkutils](https://github.com/facebook/fbkutils) A variety of utilities built and maintained by Facebook's Linux Kernel Team that we wish to share with the community.
-- [**280**星][9m] [Py] [chenjiandongx/async-proxy-pool](https://github.com/chenjiandongx/async-proxy-pool)
-- [**279**星][2y] [Go] [unixpickle/kahoot-hack](https://github.com/unixpickle/kahoot-hack) Reverse engineering kahoot.it
-- [**279**星][2y] [Py] [xoreaxeaxeax/reductio](https://github.com/xoreaxeaxeax/reductio) An exploration of code homeomorphism
-- [**279**星][1y] [CSS] [w-digital-scanner/w11scan](https://github.com/w-digital-scanner/w11scan) 分布式WEB指纹识别平台 Distributed WEB fingerprint identification platform
-- [**279**星][7d] [Py] [tomato42/tlsfuzzer](https://github.com/tomato42/tlsfuzzer) SSL and TLS protocol test suite and fuzzer
-- [**279**星][3m] [Py] [thekingofduck/easyxsspayload](https://github.com/thekingofduck/easyxsspayload) XssPayload List . Usage:
+- [**280**星][27d] [Py] [fireeye/flare-emu](https://github.com/fireeye/flare-emu) 结合Unicorn引擎, 简化模拟脚本的编写
+- [**280**星][26d] [Py] [facebook/fbkutils](https://github.com/facebook/fbkutils) A variety of utilities built and maintained by Facebook's Linux Kernel Team that we wish to share with the community.
+- [**280**星][12d] [Py] [ekultek/whatbreach](https://github.com/ekultek/whatbreach) OSINT tool to find breached emails, databases, pastes, and relevant information
+- [**280**星][1m] [C++] [changeofpace/viviennevmm](https://github.com/changeofpace/viviennevmm) VivienneVMM is a stealthy debugging framework implemented via an Intel VT-x hypervisor.
+- [**280**星][3y] [C] [andreafabrizi/prism](https://github.com/andreafabrizi/prism) PRISM is an user space stealth reverse shell backdoor, written in pure C.
+- [**280**星][7m] [aleenzz/mssql_sql_bypass_wiki](https://github.com/aleenzz/mssql_sql_bypass_wiki) MSSQL注入提权,bypass的一些总结
+- [**280**星][1m] [Py] [0xinfection/xsrfprobe](https://github.com/0xinfection/xsrfprobe) The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
+- [**280**星][2m] [C] [0xdea/exploits](https://github.com/0xdea/exploits) 研究员 0xdeadbeef 的公开exploits 收集
+- [**279**星][2m] [Py] [bennington-distributed-systems-2017/darkdarkgo](https://github.com/bennington-distributed-systems-2017/darkdarkgo) Modeled Google and Bing to build a distributed search engine for the dark web
+- [**279**星][1y] [Py] [rassec/pentester-fully-automatic-scanner](https://github.com/rassec/pentester-fully-automatic-scanner) DNS Subdomain● Brute force ● Web Spider ● Nmap Scan ● etc
+- [**279**星][1y] [Py] [rassec/pentester-fully-automatic-scanner](https://github.com/RASSec/pentestER-Fully-automatic-scanner) DNS Subdomain● Brute force ● Web Spider ● Nmap Scan ● etc
+- [**279**星][3d] [Shell] [wuseman/emagnet](https://github.com/wuseman/emagnet) Emagnet is a tool for find leaked databases with 97.1% accurate to grab mail + password together from pastebin leaks. Support for brute forcing spotify accounts, instagram accounts, ssh servers, microsoft rdp clients and gmail accounts
- [**279**星][2y] [C++] [rovo89/android_art](https://github.com/rovo89/android_art) Android ART with modifications for the Xposed framework.
- [**279**星][6m] [Py] [ridter/exchange2domain](https://github.com/ridter/exchange2domain) CVE-2018-8581
+- [**279**星][3y] [Py] [pmsosa/duckhunt](https://github.com/pmsosa/duckhunt) Prevent RubberDucky (or other keystroke injection) attacks
- [**279**星][2m] [Py] [pbiernat/ripr](https://github.com/pbiernat/ripr) Package Binary Code as a Python class using Binary Ninja and Unicorn Engine
-- [**279**星][4y] [Py] [monnappa22/limon](https://github.com/monnappa22/limon) Limon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators of Linux malware. It allows one to inspect Linux malware before execution, during execution, and after execution (post-mortem analysis) by performing static, dynamic and memory analysis using open s…
+- [**279**星][8m] [Py] [nightbringer21/fridump](https://github.com/nightbringer21/fridump) A universal memory dumper using Frida
+- [**279**星][6m] [Py] [mthbernardes/rsg](https://github.com/mthbernardes/rsg) 多种方式生成反向Shell
- [**279**星][5y] [ApacheConf] [micahflee/fixubuntu](https://github.com/micahflee/fixubuntu) This is the code that powers https://fixubuntu.com/.
-- [**279**星][9m] [C] [jiaoxianjun/btle](https://github.com/jiaoxianjun/btle) Bluetooth Low Energy (BLE) packet sniffer and generator for both standard and non standard (raw bit).
-- [**279**星][2m] [Py] [hacktoolspack/hack-tools](https://github.com/hacktoolspack/hack-tools) hack tools
+- [**279**星][3y] [Py] [maldevel/ipgeolocation](https://github.com/maldevel/ipgeolocation) Retrieve IP Geolocation information
+- [**279**星][5y] [JS] [fix-macosx/fix-macosx](https://github.com/fix-macosx/fix-macosx) This is the code that powers https://fix-macosx.com/.
+- [**279**星][3y] [C] [firefart/dirtycow](https://github.com/firefart/dirtycow)
- [**279**星][2m] [C#] [fireeye/silketw](https://github.com/fireeye/silketw) flexible C# wrappers for ETW
- [**279**星][1y] [C++] [fireeye/flare-wmi](https://github.com/fireeye/flare-wmi) 描述Windows管理规范(WMI)技术的各种文档和代码项目
-- [**279**星][25d] [Py] [fireeye/flare-emu](https://github.com/fireeye/flare-emu) 结合Unicorn引擎, 简化模拟脚本的编写
-- [**279**星][1m] [Py] [cwerling/psptool](https://github.com/cwerling/psptool) Display, extract, and manipulate PSP firmware inside UEFI images
-- [**279**星][1m] [C++] [changeofpace/viviennevmm](https://github.com/changeofpace/viviennevmm) VivienneVMM is a stealthy debugging framework implemented via an Intel VT-x hypervisor.
-- [**279**星][3y] [HTML] [buddhalabs/packetstorm-exploits](https://github.com/buddhalabs/packetstorm-exploits) Collection of publicly available exploits from Packetstorm
-- [**279**星][3y] [C] [andreafabrizi/prism](https://github.com/andreafabrizi/prism) PRISM is an user space stealth reverse shell backdoor, written in pure C.
-- [**279**星][6m] [Py] [airbus-seclab/cpu_rec](https://github.com/airbus-seclab/cpu_rec) 在任意二进制文件中识别CPU 指令
-- [**278**星][3d] [JS] [0vercl0k/cve-2019-11708](https://github.com/0vercl0k/cve-2019-11708) Full exploit chain (CVE-2019-11708 & CVE-2019-9810) against Firefox on Windows 64-bit.
-- [**278**星][1y] [Py] [rassec/pentester-fully-automatic-scanner](https://github.com/rassec/pentester-fully-automatic-scanner) DNS Subdomain● Brute force ● Web Spider ● Nmap Scan ● etc
-- [**278**星][1m] [Py] [0xinfection/xsrfprobe](https://github.com/0xInfection/XSRFProbe) The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
-- [**278**星][7d] [PowerShell] [microsoftdocs/windows-driver-docs](https://github.com/MicrosoftDocs/windows-driver-docs) 官方Windows驱动程序工具包文档
-- [**278**星][1y] [Py] [rassec/pentester-fully-automatic-scanner](https://github.com/RASSec/pentestER-Fully-automatic-scanner) DNS Subdomain● Brute force ● Web Spider ● Nmap Scan ● etc
-- [**278**星][9d] [Py] [qiskit/qiskit-aqua](https://github.com/Qiskit/qiskit-aqua) Aqua provides a library and tools to build applications for noisy quantum computers.
-- [**278**星][2y] [Py] [ssooking/ctfdefense](https://github.com/ssooking/ctfdefense) Some tools for CTF off line
-- [**278**星][8m] [Py] [nightbringer21/fridump](https://github.com/nightbringer21/fridump) A universal memory dumper using Frida
-- [**278**星][3m] [PHP] [nico3333fr/csp-useful](https://github.com/nico3333fr/csp-useful) Collection of scripts, thoughts about CSP (Content Security Policy)
-- [**278**星][6m] [Py] [mthbernardes/rsg](https://github.com/mthbernardes/rsg) 多种方式生成反向Shell
-- [**278**星][5y] [JS] [fix-macosx/fix-macosx](https://github.com/fix-macosx/fix-macosx) This is the code that powers https://fix-macosx.com/.
-- [**278**星][2m] [Java] [exalab/anlinux-app](https://github.com/exalab/anlinux-app) AnLinux allow you to run Linux on Android without root access.
+- [**279**星][23d] [C] [droberson/ssh-honeypot](https://github.com/droberson/ssh-honeypot) Fake sshd that logs ip addresses, usernames, and passwords.
+- [**279**星][2m] [Java] [appium/sign](https://github.com/appium/sign) Sign.jar automatically signs an apk with the Android test certificate.
+- [**279**星][1y] [C] [abeluck/stegdetect](https://github.com/abeluck/stegdetect) UNMAINTAINED. USE AT OWN RISK. Stegdetect is an automated tool for detecting steganographic content in images.
+- [**279**星][2d] [a2u/free-proxy-list](https://github.com/a2u/free-proxy-list)
+- [**278**星][2d] [PS] [microsoftdocs/windows-driver-docs](https://github.com/MicrosoftDocs/windows-driver-docs) 官方Windows驱动程序工具包文档
+- [**278**星][1y] [Py] [fsecurelabs/wepwnise](https://github.com/FSecureLABS/wePWNise) WePWNise generates architecture independent VBA code to be used in Office documents or templates and automates bypassing application control and exploit mitigation software.
+- [**278**星][3y] [JS] [wuchangming/https-mitm-proxy-handbook](https://github.com/wuchangming/https-mitm-proxy-handbook) 基于Node.js的HTTPS MITM(中间人)代理的原理和实现
+- [**278**星][11d] [Java] [optimatika/ojalgo](https://github.com/optimatika/ojalgo) Java code that has to do with mathematics, linear algebra and optimisation.
+- [**278**星][2m] [Py] [mcw0/poc](https://github.com/mcw0/poc) Issues has been disabled for these PoC's, as they are simply PoC, Public Domain and unsupported.
+- [**278**星][2y] [Py] [iniqua/plecost](https://github.com/iniqua/plecost) Wordpress 博客引擎的漏洞指纹识别和漏洞查找工具
+- [**278**星][18d] [Py] [hnfull/intensio-obfuscator](https://github.com/hnfull/intensio-obfuscator) Obfuscate a python code 2.x and 3.x
+- [**278**星][15d] [Py] [franccesco/getaltname](https://github.com/franccesco/getaltname) 直接从SSL证书中提取子域名或虚拟域名
- [**278**星][2y] [JS] [dpnishant/raptor](https://github.com/dpnishant/raptor) Web-based Source Code Vulnerability Scanner
-- [**278**星][10d] [C++] [crosire/d3d8to9](https://github.com/crosire/d3d8to9) A D3D8 pseudo-driver which converts API calls and bytecode shaders to equivalent D3D9 ones.
-- [**278**星][6m] [Shell] [chaifeng/ufw-docker](https://github.com/chaifeng/ufw-docker) To fix the Docker and UFW security flaw without disabling iptables
-- [**278**星][2y] [Py] [bit4woo/passmaker](https://github.com/bit4woo/passmaker) 可以自定义规则的密码字典生成器,支持图形界面 A password-generator that base on the rules that you specified
-- [**278**星][1y] [C] [abeluck/stegdetect](https://github.com/abeluck/stegdetect) UNMAINTAINED. USE AT OWN RISK. Stegdetect is an automated tool for detecting steganographic content in images.
-- [**278**星][7d] [a2u/free-proxy-list](https://github.com/a2u/free-proxy-list)
-- [**278**星][1m] [Py] [0xinfection/xsrfprobe](https://github.com/0xinfection/xsrfprobe) The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
-- [**278**星][2m] [C] [0xdea/exploits](https://github.com/0xdea/exploits) 研究员 0xdeadbeef 的公开exploits 收集
-- [**277**星][1y] [Py] [fsecurelabs/wepwnise](https://github.com/FSecureLABS/wePWNise) WePWNise generates architecture independent VBA code to be used in Office documents or templates and automates bypassing application control and exploit mitigation software.
-- [**277**星][3y] [C++] [googleprojectzero/symboliclink-testing-tools](https://github.com/googleprojectzero/symboliclink-testing-tools) 用于测试Windows的各种符号链接类型的一套工具
+- [**278**星][12d] [C++] [crosire/d3d8to9](https://github.com/crosire/d3d8to9) A D3D8 pseudo-driver which converts API calls and bytecode shaders to equivalent D3D9 ones.
+- [**278**星][10d] [HTML] [bl4de/ctf](https://github.com/bl4de/ctf) CTF (Capture The Flag) writeups, code snippets, notes, scripts
- [**277**星][3m] [Java] [ztosec/secscan-authcheck](https://github.com/ztosec/secscan-authcheck) 越权检测工具
- [**277**星][12m] [Py] [wyatu/cve-2018-8581](https://github.com/wyatu/cve-2018-8581) CVE-2018-8581 | Microsoft Exchange Server Elevation of Privilege Vulnerability
-- [**277**星][29d] [Py] [sneakerhax/runbooks](https://github.com/sneakerhax/runbooks) Command references, posts, and resources for different topics
+- [**277**星][2y] [Assembly] [tinysec/windows-syscall-table](https://github.com/tinysec/windows-syscall-table) Win XP 到 Win 10 的系统调用表,包括 SSDT 和 Shadow SSDT
+- [**277**星][1m] [Py] [sneakerhax/runbooks](https://github.com/sneakerhax/runbooks) Command references, posts, and resources for different topics
- [**277**星][7m] [C] [rieck/malheur](https://github.com/rieck/malheur) A Tool for Automatic Analysis of Malware Behavior
- [**277**星][6m] [Perl] [rezasp/vbscan](https://github.com/rezasp/vbscan) OWASP VBScan is a Black Box vBulletin Vulnerability Scanner
-- [**277**星][3y] [Py] [pmsosa/duckhunt](https://github.com/pmsosa/duckhunt) Prevent RubberDucky (or other keystroke injection) attacks
-- [**277**星][2m] [Py] [mcw0/poc](https://github.com/mcw0/poc) Issues has been disabled for these PoC's, as they are simply PoC, Public Domain and unsupported.
-- [**277**星][3y] [Py] [maldevel/ipgeolocation](https://github.com/maldevel/ipgeolocation) Retrieve IP Geolocation information
+- [**277**星][15d] [C] [o-gs/dji-firmware-tools](https://github.com/o-gs/dji-firmware-tools) Tools for handling firmwares of DJI products, with focus on quadcopters.
- [**277**星][2m] [C] [lfittl/libpg_query](https://github.com/lfittl/libpg_query) C library for accessing the PostgreSQL parser outside of the server environment
-- [**277**星][2y] [Py] [iniqua/plecost](https://github.com/iniqua/plecost) Wordpress 博客引擎的漏洞指纹识别和漏洞查找工具
-- [**277**星][10d] [Py] [ekultek/whatbreach](https://github.com/ekultek/whatbreach) OSINT tool to find breached emails, databases, pastes, and relevant information
-- [**277**星][21d] [C] [droberson/ssh-honeypot](https://github.com/droberson/ssh-honeypot) Fake sshd that logs ip addresses, usernames, and passwords.
-- [**277**星][12d] [disclose/disclose](https://github.com/disclose/disclose) Driving safety, simplicity, and standardization in vulnerability disclosure.
-- [**277**星][8d] [HTML] [bl4de/ctf](https://github.com/bl4de/ctf) CTF (Capture The Flag) writeups, code snippets, notes, scripts
-- [**277**星][1m] [C] [aflsmart/aflsmart](https://github.com/aflsmart/aflsmart) Smart Greybox Fuzzing (
-- [**276**星][19d] [Go] [zmap/zgrab2](https://github.com/zmap/zgrab2) Go Application Layer Scanner
-- [**276**星][2y] [Assembly] [tinysec/windows-syscall-table](https://github.com/tinysec/windows-syscall-table) Win XP 到 Win 10 的系统调用表,包括 SSDT 和 Shadow SSDT
+- [**277**星][12m] [C++] [jmmartinez/easy-just-in-time](https://github.com/jmmartinez/easy-just-in-time) LLVM Optimization to extract a function, embedded in its intermediate representation in the binary, and execute it using the LLVM Just-In-Time compiler.
+- [**277**星][15d] [Py] [hugsy/defcon_27_windbg_workshop](https://github.com/hugsy/defcon_27_windbg_workshop) DEFCON 27 workshop - Modern Debugging with WinDbg Preview
+- [**277**星][14d] [disclose/disclose](https://github.com/disclose/disclose) Driving safety, simplicity, and standardization in vulnerability disclosure.
+- [**277**星][20d] [Java] [c0ny1/fastjsonexploit](https://github.com/c0ny1/fastjsonexploit) Fastjson vulnerability quickly exploits the framework(fastjson漏洞快速利用框架)
+- [**276**星][11d] [C] [jedisct1/pure-ftpd](https://github.com/jedisct1/pure-ftpd) Pure FTP server
+- [**276**星][1m] [C] [grapheneos/hardened_malloc](https://github.com/GrapheneOS/hardened_malloc) Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability / integration over time.
+- [**276**星][5y] [C++] [tsiv/ccminer-cryptonight](https://github.com/tsiv/ccminer-cryptonight)
- [**276**星][2y] [C] [taviso/rbndr](https://github.com/taviso/rbndr) Simple DNS Rebinding Service
-- [**276**星][9d] [Java] [optimatika/ojalgo](https://github.com/optimatika/ojalgo) Java code that has to do with mathematics, linear algebra and optimisation.
-- [**276**星][8m] [Py] [micropyramid/forex-python](https://github.com/micropyramid/forex-python) Foreign exchange rates, Bitcoin price index and currency conversion using ratesapi.io
-- [**276**星][1m] [Py] [lorexxar/cobra-w](https://github.com/lorexxar/cobra-w) Cobra-W -> Cobra-White 白盒源代码审计工具-白帽子版
-- [**276**星][9d] [Py] [liuchangfreeman/c--compiler](https://github.com/liuchangfreeman/c--compiler) C--compiler which implements LL(1)\LR(0)\SLR\LR(1) and semantic analysis and MIPS generate
-- [**276**星][12m] [C++] [jmmartinez/easy-just-in-time](https://github.com/jmmartinez/easy-just-in-time) LLVM Optimization to extract a function, embedded in its intermediate representation in the binary, and execute it using the LLVM Just-In-Time compiler.
-- [**276**星][4y] [XSLT] [ironbee/ironbee](https://github.com/ironbee/ironbee) Universal web application security sensor intended for real-time monitoring and defense.
-- [**276**星][12m] [Py] [hongrisec/ctf-training](https://github.com/hongrisec/ctf-training) 收集各大比赛的题目和Writeup
-- [**276**星][5m] [geerlingguy/ansible-role-security](https://github.com/geerlingguy/ansible-role-security) Ansible Role - Security
-- [**276**星][3m] [Shell] [cryptolok/aslray](https://github.com/cryptolok/aslray) Linux ELF x32/x64 ASLR DEP/NX bypass exploit with stack-spraying
-- [**276**星][2m] [Java] [appium/sign](https://github.com/appium/sign) Sign.jar automatically signs an apk with the Android test certificate.
-- [**275**星][7d] [Shell] [wuseman/emagnet](https://github.com/wuseman/emagnet) Emagnet is a tool for find leaked databases with 97.1% accurate to grab mail + password together from pastebin leaks. Support for brute forcing spotify accounts, instagram accounts, ssh servers, microsoft rdp clients and gmail accounts
-- [**275**星][3m] [C] [sensepost/hostapd-mana](https://github.com/sensepost/hostapd-mana) SensePost's modified hostapd for wifi attacks.
-- [**275**星][1m] [Go] [rmikehodges/hidensneak](https://github.com/rmikehodges/hidensneak) a CLI for ephemeral penetration testing
-- [**275**星][7d] [Java] [nationalsecurityagency/datawave](https://github.com/nationalsecurityagency/datawave) DataWave is an ingest/query framework that leverages Apache Accumulo to provide fast, secure data access.
-- [**275**星][27d] [Go] [kubernetes-sigs/application](https://github.com/kubernetes-sigs/application) Application metadata descriptor CRD
-- [**275**星][13d] [Py] [hugsy/defcon_27_windbg_workshop](https://github.com/hugsy/defcon_27_windbg_workshop) DEFCON 27 workshop - Modern Debugging with WinDbg Preview
-- [**275**星][16d] [Py] [hnfull/intensio-obfuscator](https://github.com/hnfull/intensio-obfuscator) Obfuscate a python code 2.x and 3.x
-- [**275**星][13d] [Py] [franccesco/getaltname](https://github.com/franccesco/getaltname) 直接从SSL证书中提取子域名或虚拟域名
-- [**275**星][3y] [Java] [fourbrother/icodetools](https://github.com/fourbrother/icodetools) Android中动态自动插入代码到apk中工具
-- [**275**星][1y] [Java] [florent37/android-nosql](https://github.com/florent37/android-nosql) Lightweight, simple structured NoSQL database for Android
-- [**275**星][2y] [Java] [commonsguy/cwac-security](https://github.com/commonsguy/cwac-security) CWAC-Security: Helping You Help Your Users Defend Their Data
-- [**275**星][2y] [Py] [anssi-fr/polichombr](https://github.com/anssi-fr/polichombr) Collaborative malware analysis framework
-- [**275**星][8d] [Shell] [al0ne/linuxcheck](https://github.com/al0ne/linuxcheck) linux信息收集/应急响应/常见后门检测脚本
-- [**275**星][4m] [Py] [18f/domain-scan](https://github.com/18f/domain-scan) A lightweight pipeline, locally or in Lambda, for scanning things like HTTPS, third party service use, and web accessibility.
-- [**274**星][6m] [Py] [k8gege/cve-2019-0708](https://github.com/k8gege/cve-2019-0708) 3389远程桌面代码执行漏洞CVE-2019-0708批量检测工具(Rdpscan Bluekeep Check)
-- [**274**星][17d] [JS] [aws-samples/aws-serverless-security-workshop](https://github.com/aws-samples/aws-serverless-security-workshop) In this workshop, you will learn techniques to secure a serverless application built with AWS Lambda, Amazon API Gateway and RDS Aurora. We will cover AWS services and features you can leverage to improve the security of a serverless applications in 5 domains: identity & access management, code, data, infrastructure, logging & monitoring.
-- [**274**星][3m] [Vue] [zerx0r/kage](https://github.com/Zerx0r/Kage) Kage is Graphical User Interface for Metasploit Meterpreter and Session Handler
-- [**274**星][3y] [JS] [wuchangming/https-mitm-proxy-handbook](https://github.com/wuchangming/https-mitm-proxy-handbook) 基于Node.js的HTTPS MITM(中间人)代理的原理和实现
-- [**274**星][20d] [Go] [openzipkin/zipkin-go](https://github.com/openzipkin/zipkin-go) Zipkin tracer library for go
-- [**274**星][20d] [Go] [muraenateam/muraena](https://github.com/muraenateam/muraena) Muraena is an almost-transparent reverse proxy aimed at automating phishing and post-phishing activities.
-- [**274**星][10m] [maaaaz/impacket-examples-windows](https://github.com/maaaaz/impacket-examples-windows) The great impacket example scripts compiled for Windows
-- [**274**星][3m] [Py] [jpcertcc/aa-tools](https://github.com/jpcertcc/aa-tools) 多脚本
+- [**276**星][1m] [Go] [rmikehodges/hidensneak](https://github.com/rmikehodges/hidensneak) 通过提供快速部署,管理和关闭各种云服务的界面,协助管理渗透测试人员的攻击基础架构
+- [**276**星][2d] [Java] [nationalsecurityagency/datawave](https://github.com/nationalsecurityagency/datawave) DataWave is an ingest/query framework that leverages Apache Accumulo to provide fast, secure data access.
+- [**276**星][11d] [Py] [liuchangfreeman/c--compiler](https://github.com/liuchangfreeman/c--compiler) C--compiler which implements LL(1)\LR(0)\SLR\LR(1) and semantic analysis and MIPS generate
+- [**276**星][3m] [Py] [jpcertcc/aa-tools](https://github.com/jpcertcc/aa-tools) 多脚本
- [apt17scan.py](https://github.com/jpcertcc/aa-tools/blob/master/apt17scan.py) Volatility插件, 检测APT17相关的恶意代码并提取配置
- [emdivi_postdata_decoder](https://github.com/jpcertcc/aa-tools/blob/master/emdivi_postdata_decoder.py) 解码Emdivi post的数据
- [emdivi_string_decryptor](https://github.com/jpcertcc/aa-tools/blob/master/emdivi_string_decryptor.py) IDAPython脚本, 解密Emdivi内的字符串
@@ -4260,3089 +4487,3310 @@ for further development
- [wellmess_cookie_decode](https://github.com/jpcertcc/aa-tools/blob/master/wellmess_cookie_decode.py) Python script for decoding WellMess's cookie data (support Python2)
- [cobaltstrikescan](https://github.com/jpcertcc/aa-tools/blob/master/cobaltstrikescan.py) Volatility plugin for detecting Cobalt Strike Beacon and extracting its config
- [tscookie_data_decode](https://github.com/jpcertcc/aa-tools/blob/master/tscookie_data_decode.py) Python script for decrypting and parsing TSCookie configure data
-- [**274**星][3y] [C] [firefart/dirtycow](https://github.com/firefart/dirtycow)
+- [**276**星][4y] [XSLT] [ironbee/ironbee](https://github.com/ironbee/ironbee) Universal web application security sensor intended for real-time monitoring and defense.
+- [**276**星][12m] [Py] [hongrisec/ctf-training](https://github.com/hongrisec/ctf-training) 收集各大比赛的题目和Writeup
+- [**276**星][1y] [Java] [ewilded/shelling](https://github.com/ewilded/shelling) SHELLING - a comprehensive OS command injection payload generator
+- [**276**星][2y] [Py] [dirtyfilthy/freshonions-torscraper](https://github.com/dirtyfilthy/freshonions-torscraper) Fresh Onions is an open source TOR spider / hidden service onion crawler hosted at zlal32teyptf4tvi.onion
+- [**276**星][12d] [C#] [dahall/vanara](https://github.com/dahall/vanara) A set of .NET libraries for Windows implementing PInvoke calls to many native Windows APIs with supporting wrappers.
+- [**276**星][3m] [Shell] [cryptolok/aslray](https://github.com/cryptolok/aslray) Linux ELF x32/x64 ASLR DEP/NX bypass exploit with stack-spraying
+- [**276**星][2y] [Py] [anssi-fr/polichombr](https://github.com/anssi-fr/polichombr) Collaborative malware analysis framework
+- [**276**星][4m] [Py] [18f/domain-scan](https://github.com/18f/domain-scan) A lightweight pipeline, locally or in Lambda, for scanning things like HTTPS, third party service use, and web accessibility.
+- [**275**星][10d] [TS] [javascript-obfuscator/webpack-obfuscator](https://github.com/javascript-obfuscator/webpack-obfuscator) javascript-obfuscator plugin for Webpack
+- [**275**星][3m] [Vue] [zerx0r/kage](https://github.com/Zerx0r/Kage) Kage is Graphical User Interface for Metasploit Meterpreter and Session Handler
+- [**275**星][7m] [Shell] [venshine/decompile-apk](https://github.com/venshine/decompile-apk) APK 反编译
+- [**275**星][3m] [C] [sensepost/hostapd-mana](https://github.com/sensepost/hostapd-mana) SensePost's modified hostapd for wifi attacks.
+- [**275**星][7d] [Go] [openzipkin/zipkin-go](https://github.com/openzipkin/zipkin-go) Zipkin tracer library for go
+- [**275**星][5m] [geerlingguy/ansible-role-security](https://github.com/geerlingguy/ansible-role-security) Ansible Role - Security
+- [**275**星][3y] [Java] [fourbrother/icodetools](https://github.com/fourbrother/icodetools) Android中动态自动插入代码到apk中工具
+- [**275**星][1y] [Java] [florent37/android-nosql](https://github.com/florent37/android-nosql) Lightweight, simple structured NoSQL database for Android
+- [**275**星][2y] [Java] [commonsguy/cwac-security](https://github.com/commonsguy/cwac-security) CWAC-Security: Helping You Help Your Users Defend Their Data
+- [**274**星][6m] [Py] [k8gege/cve-2019-0708](https://github.com/k8gege/cve-2019-0708) 3389远程桌面代码执行漏洞CVE-2019-0708批量检测工具(Rdpscan Bluekeep Check)
+- [**274**星][8d] [C] [br101/horst](https://github.com/br101/horst) “horst” - lightweight IEEE802.11 wireless LAN analyzer with a text interface
+- [**274**星][3y] [Py] [ptr32void/ostrica](https://github.com/ptr32void/ostrica)
+- [**274**星][1y] [PHP] [psecio/parse](https://github.com/psecio/parse) Parse: A Static Security Scanner
+- [**274**星][3d] [Perl] [owasp/o-saft](https://github.com/owasp/o-saft) O-Saft - OWASP SSL advanced forensic tool
+- [**274**星][22d] [Go] [muraenateam/muraena](https://github.com/muraenateam/muraena) Muraena is an almost-transparent reverse proxy aimed at automating phishing and post-phishing activities.
+- [**274**星][2y] [Java] [mateuszk87/badintent](https://github.com/mateuszk87/badintent) Intercept, modify, repeat and attack Android's Binder transactions using Burp Suite
+- [**274**星][29d] [Go] [kubernetes-sigs/application](https://github.com/kubernetes-sigs/application) Application metadata descriptor CRD
+- [**274**星][12m] [C] [jmk-foofus/medusa](https://github.com/jmk-foofus/medusa) Medusa is a speedy, parallel, and modular, login brute-forcer.
+- [**274**星][3y] [C] [iaik/cjag](https://github.com/iaik/cjag) CJAG is an open-source implementation of our cache-based jamming agreement.
- [**274**星][1y] [C++] [dekimir/ramfuzz](https://github.com/dekimir/ramfuzz) Combining Unit Tests, Fuzzing, and AI
-- [**274**星][18d] [Java] [c0ny1/fastjsonexploit](https://github.com/c0ny1/fastjsonexploit) Fastjson vulnerability quickly exploits the framework(fastjson漏洞快速利用框架)
-- [**273**星][1m] [C] [grapheneos/hardened_malloc](https://github.com/GrapheneOS/hardened_malloc) Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability / integration over time.
-- [**273**星][3y] [Py] [ptr32void/ostrica](https://github.com/ptr32void/ostrica)
-- [**273**星][1y] [PHP] [psecio/parse](https://github.com/psecio/parse) Parse: A Static Security Scanner
-- [**273**星][13d] [C] [o-gs/dji-firmware-tools](https://github.com/o-gs/dji-firmware-tools) Tools for handling firmwares of DJI products, with focus on quadcopters.
+- [**274**星][21d] [C] [beckus/qemu_stm32](https://github.com/beckus/qemu_stm32) QEMU with an STM32 microcontroller implementation
+- [**274**星][7m] [C++] [aekras1a/updated-carbanak-source-with-plugins](https://github.com/aekras1a/updated-carbanak-source-with-plugins)
+- [**274**星][3d] [Py] [abhi-r3v0/adhrit](https://github.com/abhi-r3v0/adhrit) Android Security Suite for APK reversing, in-depth reconnaissance and static bytecode analysis based on Ghera benchmarks.
+- [**273**星][8m] [C] [rofl0r/microsocks](https://github.com/rofl0r/microsocks) tiny, portable SOCKS5 server with very moderate resource usage
+- [**273**星][4m] [Py] [mariovilas/winappdbg](https://github.com/mariovilas/winappdbg) WinAppDbg Debugger
- [**273**星][2y] [Go] [kisesy/gscan_quic](https://github.com/kisesy/gscan_quic) Google Quic 扫描工具
-- [**273**星][12m] [C] [jmk-foofus/medusa](https://github.com/jmk-foofus/medusa) Medusa is a speedy, parallel, and modular, login brute-forcer.
- [**273**星][2y] [C++] [isometric/bucketcompressiontrick](https://github.com/isometric/bucketcompressiontrick) Cool trick to store 4 5-bit values in one 16-bit value.
-- [**273**星][4m] [Py] [invernizzi/scapy-http](https://github.com/invernizzi/scapy-http) Support for HTTP in Scapy
-- [**273**星][3y] [C] [iaik/cjag](https://github.com/iaik/cjag) CJAG is an open-source implementation of our cache-based jamming agreement.
-- [**273**星][19d] [C] [beckus/qemu_stm32](https://github.com/beckus/qemu_stm32) QEMU with an STM32 microcontroller implementation
-- [**272**星][8m] [C] [rofl0r/microsocks](https://github.com/rofl0r/microsocks) tiny, portable SOCKS5 server with very moderate resource usage
+- [**272**星][2m] [C++] [windytan/redsea](https://github.com/windytan/redsea) A lightweight RDS to JSON decoder
+- [**272**星][16d] [C++] [steve-m/kalibrate-rtl](https://github.com/steve-m/kalibrate-rtl) fork of
- [**272**星][4y] [C] [robertdavidgraham/pemcrack](https://github.com/robertdavidgraham/pemcrack) Cracks SSL PEM files that hold encrypted private keys. Brute forces or dictionary cracks. This code is extraordinarily slow, DON'T JUDGE ME!!!
- [**272**星][3m] [Py] [pysmt/pysmt](https://github.com/pysmt/pysmt) A library for SMT formulae manipulation and solving
-- [**272**星][7d] [Perl] [owasp/o-saft](https://github.com/owasp/o-saft) O-Saft - OWASP SSL advanced forensic tool
-- [**272**星][2y] [Java] [mateuszk87/badintent](https://github.com/mateuszk87/badintent) Intercept, modify, repeat and attack Android's Binder transactions using Burp Suite
+- [**272**星][3d] [PS] [nettitude/poshc2](https://github.com/nettitude/PoshC2) Python Server for PoshC2
+- [**272**星][3d] [PS] [nettitude/poshc2](https://github.com/nettitude/poshc2) Python Server for PoshC2
+- [**272**星][8m] [Py] [mozillasecurity/peach](https://github.com/mozillasecurity/peach) Peach is a fuzzing framework which uses a DSL for building fuzzers and an observer based architecture to execute and monitor them.
- [**272**星][3y] [Py] [joxeankoret/multiav](https://github.com/joxeankoret/multiav) MultiAV scanner with Python and JSON API. Disclaimer: I don't maintain it any more.
+- [**272**星][1y] [Shell] [jgamblin/carhackingtools](https://github.com/jgamblin/carhackingtools) Install and Configure Common Car Hacking Tools.
+- [**272**星][4m] [Py] [invernizzi/scapy-http](https://github.com/invernizzi/scapy-http) Support for HTTP in Scapy
+- [**272**星][8d] [Py] [ghostop14/sparrow-wifi](https://github.com/ghostop14/sparrow-wifi) Next-Gen GUI-based WiFi and Bluetooth Analyzer for Linux
- [**272**星][2y] [C++] [gellin/teamviewer_permissions_hook_v1](https://github.com/gellin/teamviewer_permissions_hook_v1) A proof of concept injectable C++ dll, that uses naked inline hooking and direct memory modification to change your TeamViewer permissions.
- [**272**星][1y] [Py] [gbafana25/esp8266_honeypot](https://github.com/gbafana25/esp8266_honeypot) THE ESP8266 HONEYPOT: A PROJECT TO TRAP SCRIPT KIDDIES EVERYWHRE!!
-- [**272**星][2y] [Py] [dirtyfilthy/freshonions-torscraper](https://github.com/dirtyfilthy/freshonions-torscraper) Fresh Onions is an open source TOR spider / hidden service onion crawler hosted at zlal32teyptf4tvi.onion
- [**272**星][2y] [Java] [crowhawk/magictoe](https://github.com/crowhawk/magictoe) 基于webmagic + springboot + mybatis的Java爬虫,使用Echarts进行数据可视化分析,提供了从爬虫获取数据到数据持久化、数据可视化分析以及构建简单的代理池等一整套解决方案模板。
-- [**272**星][7m] [C++] [aekras1a/updated-carbanak-source-with-plugins](https://github.com/aekras1a/updated-carbanak-source-with-plugins)
-- [**272**星][8d] [Py] [abhi-r3v0/adhrit](https://github.com/abhi-r3v0/adhrit) Android Security Suite for Reversing, SCA and Reconnaissance.
-- [**271**星][8d] [TypeScript] [javascript-obfuscator/webpack-obfuscator](https://github.com/javascript-obfuscator/webpack-obfuscator) javascript-obfuscator plugin for Webpack
-- [**271**星][2m] [C++] [windytan/redsea](https://github.com/windytan/redsea) A lightweight RDS to JSON decoder
-- [**271**星][7m] [Shell] [venshine/decompile-apk](https://github.com/venshine/decompile-apk) APK 反编译
-- [**271**星][14d] [C++] [steve-m/kalibrate-rtl](https://github.com/steve-m/kalibrate-rtl) fork of
+- [**271**星][2y] [C] [bishopfox/bfdecrypt](https://github.com/bishopfox/bfdecrypt) Utility to decrypt App Store apps on jailbroken iOS 11.x
+- [**271**星][7m] [Py] [s0md3v/breacher](https://github.com/s0md3v/Breacher) An advanced multithreaded admin panel finder written in python.
+- [**271**星][2d] [Py] [shaypal5/cachier](https://github.com/shaypal5/cachier) Persistent, stale-free, local and cross-machine caching for Python functions.
+- [**271**星][7m] [s0md3v/mypapers](https://github.com/s0md3v/mypapers) Repository for hosting my research papers
- [**271**星][2y] [Java] [reoky/android-crackme-challenge](https://github.com/reoky/android-crackme-challenge) A collection of reverse engineering challenges for learning about the Android operating system and mobile security.
- [**271**星][3y] [Py] [quandyfactory/dicttoxml](https://github.com/quandyfactory/dicttoxml) Simple library to convert a Python dictionary or other native data type into a valid XML string.
+- [**271**星][23d] [Swift] [prateek147/dvia-v2](https://github.com/prateek147/dvia-v2) Damn Vulnerable iOS App (DVIA) is an iOS application that is damn vulnerable. Its main goal is to provide a platform to mobile security enthusiasts/professionals or students to test their iOS penetration testing skills in a legal environment. This project is developed and maintained by @prateekg147. The vulnerabilities and solutions covered in t…
+- [**271**星][10m] [Py] [pisupply/papirus](https://github.com/pisupply/papirus) Resources for PaPiRus ePaper eInk displays
- [**271**星][8m] [offensive-security/nethunter-lrt](https://github.com/offensive-security/nethunter-lrt) The Nethunter Linux Root Toolkit is a collection of bash scripts which install Nethunter onto a supported device.
-- [**271**星][8m] [Py] [mozillasecurity/peach](https://github.com/mozillasecurity/peach) Peach is a fuzzing framework which uses a DSL for building fuzzers and an observer based architecture to execute and monitor them.
+- [**271**星][10m] [Vala] [naxuroqa/venom](https://github.com/naxuroqa/venom) a modern Tox client for the GNU/Linux desktop
+- [**271**星][17d] [C#] [mkaring/confuserex](https://github.com/mkaring/confuserex) An open-source, free protector for .NET applications
+- [**271**星][3y] [Py] [lgandx/responder-windows](https://github.com/lgandx/responder-windows) Responder Windows Version Beta
- [**271**星][3y] [jinyu121/surgerule](https://github.com/jinyu121/surgerule) Deprecate since 2016
- [**271**星][3y] [Py] [inaz2/roputils](https://github.com/inaz2/roputils) A Return-oriented Programming toolkit
+- [**271**星][2m] [JS] [hynekpetrak/javascript-malware-collection](https://github.com/hynekpetrak/javascript-malware-collection) Collection of almost 40.000 javascript malware samples
- [**271**星][2y] [Py] [hadi999/nxcrypt](https://github.com/hadi999/nxcrypt) NXcrypt - 'python backdoor' framework
+- [**271**星][5y] [Scala] [fix-macosx/net-monitor](https://github.com/fix-macosx/net-monitor) Toolkit for auditing "phone home" behavior on Mac OS X Yosemite.
- [**271**星][3y] [C] [cisco-talos/mbrfilter](https://github.com/cisco-talos/mbrfilter) Cisco Talos MBR Filter Driver
- [**271**星][2y] [C] [can1357/theperfectinjector](https://github.com/can1357/theperfectinjector) Literally, the perfect injector.
- [**271**星][2y] [JS] [bugbountyforum/xss-radar](https://github.com/bugbountyforum/xss-radar)
-- [**270**星][7m] [Py] [s0md3v/breacher](https://github.com/s0md3v/Breacher) An advanced multithreaded admin panel finder written in python.
+- [**270**星][3m] [mattnotmax/cyberchef-recipes](https://github.com/mattnotmax/cyberchef-recipes) A list of cyber-chef recipes
+- [**270**星][2d] [HTML] [vernesong/openclash](https://github.com/vernesong/openclash) A Clash Client For OpenWrt
+- [**270**星][4y] [C++] [cisco-talos/moflow](https://github.com/Cisco-Talos/moflow) Release Branches for MoFlow
- [**270**星][1y] [Shell] [zephrfish/dockerattack](https://github.com/zephrfish/dockerattack) Various Tools and Docker Images
-- [**270**星][2m] [Objective-C] [veorq/siphash](https://github.com/veorq/siphash) High-speed pseudorandom function (reference code)
-- [**270**星][10m] [Py] [pisupply/papirus](https://github.com/pisupply/papirus) Resources for PaPiRus ePaper eInk displays
-- [**270**星][3y] [Py] [lgandx/responder-windows](https://github.com/lgandx/responder-windows) Responder Windows Version Beta
+- [**270**星][3m] [ObjC] [veorq/siphash](https://github.com/veorq/siphash) High-speed pseudorandom function (reference code)
+- [**270**星][12m] [Shell] [thelinuxchoice/instainsane](https://github.com/thelinuxchoice/instainsane) Multi-threaded Instagram Brute Forcer (100 attemps at once)
+- [**270**星][1y] [JS] [ropnop/serverless_toolkit](https://github.com/ropnop/serverless_toolkit) A collection of useful Serverless functions I use when pentesting
+- [**270**星][6y] [C] [robertdavidgraham/isowall](https://github.com/robertdavidgraham/isowall) This is a mini-firewall that completely isolates a target device from the local network.
+- [**270**星][6d] [JS] [protofire/solhint](https://github.com/protofire/solhint) Security and Style Guide validations.
+- [**270**星][16d] [PHP] [pan-unit42/iocs](https://github.com/pan-unit42/iocs) Indicators from Unit 42 Public Reports
+- [**270**星][1m] [Py] [nccgroup/pmapper](https://github.com/nccgroup/pmapper) A tool for quickly evaluating IAM permissions in AWS.
+- [**270**星][6m] [Java] [nationalsecurityagency/lemongrenade](https://github.com/nationalsecurityagency/lemongrenade) Data-driven automation platform
- [**270**星][5y] [leonardonve/sslstrip2](https://github.com/leonardonve/sslstrip2) SSLStrip version to defeat HSTS
-- [**270**星][5y] [Scala] [fix-macosx/net-monitor](https://github.com/fix-macosx/net-monitor) Toolkit for auditing "phone home" behavior on Mac OS X Yosemite.
+- [**270**星][3y] [C] [laginimaineb/extractkeymaster](https://github.com/laginimaineb/extractkeymaster) Exploit that extracts Qualcomm's KeyMaster keys using CVE-2015-6639 and CVE-2016-2431
- [**270**星][5y] [C] [conradev/dumpdecrypted](https://github.com/conradev/dumpdecrypted) Dumps decrypted mach-o files from encrypted iPhone applications from memory to disk. This tool is necessary for security researchers to be able to look under the hood of encryption.
-- [**269**星][6m] [Py] [abhisharma404/vault](https://github.com/abhisharma404/vault) swiss army knife for hackers
-- [**269**星][4y] [C++] [cisco-talos/moflow](https://github.com/Cisco-Talos/moflow) Release Branches for MoFlow
-- [**269**星][2m] [Py] [xfreed0m/rdpassspray](https://github.com/xfreed0m/rdpassspray) Python3 tool to perform password spraying using RDP
+- [**270**星][11m] [Py] [appsecco/the-art-of-subdomain-enumeration](https://github.com/appsecco/the-art-of-subdomain-enumeration) This repository contains all the supplement material for the book "The art of sub-domain enumeration"
+- [**269**星][10m] [Shell] [thelinuxchoice/instashell](https://github.com/thelinuxchoice/instashell) Multi-threaded Instagram Brute Forcer without password limit
+- [**269**星][18d] [Dockerfile] [pengchujin/v2raydocker](https://github.com/pengchujin/v2raydocker) 一键v2ray ws + tls 方便就完事了
+- [**269**星][4d] [Py] [abhisharma404/vault](https://github.com/abhisharma404/vault) swiss army knife for hackers
+- [**269**星][7d] [Py] [xfreed0m/rdpassspray](https://github.com/xfreed0m/rdpassspray) Python3 tool to perform password spraying using RDP
- [**269**星][2y] [Py] [toyakula/luna](https://github.com/toyakula/luna) luna webscanner
- [**269**星][2y] [sam-b/windows_kernel_resources](https://github.com/sam-b/windows_kernel_resources) Papers, blogposts, tutorials etc for learning about Windows kernel exploitation, internals and (r|b)ootkits
-- [**269**星][7m] [s0md3v/mypapers](https://github.com/s0md3v/mypapers) Repository for hosting my research papers
-- [**269**星][6y] [C] [robertdavidgraham/isowall](https://github.com/robertdavidgraham/isowall) This is a mini-firewall that completely isolates a target device from the local network.
- [**269**星][3y] [ptresearch/me-disablement](https://github.com/ptresearch/me-disablement)
-- [**269**星][2m] [JS] [protofire/solhint](https://github.com/protofire/solhint) Security and Style Guide validations.
-- [**269**星][1m] [Py] [nccgroup/pmapper](https://github.com/nccgroup/pmapper) A tool for quickly evaluating IAM permissions in AWS.
-- [**269**星][3m] [Py] [mariovilas/winappdbg](https://github.com/mariovilas/winappdbg) WinAppDbg Debugger
+- [**269**星][9d] [Rust] [nccgroup/dirble](https://github.com/nccgroup/dirble) Fast directory scanning and scraping tool
+- [**269**星][3m] [mattnotmax/cyberchef-recipes](https://github.com/mattnotmax/cyberchef-recipes) A list of cyber-chef recipes
- [**269**星][2y] [Py] [lunarca/simpleemailspoofer](https://github.com/lunarca/simpleemailspoofer) A simple Python CLI to spoof emails.
-- [**269**星][3y] [C] [laginimaineb/extractkeymaster](https://github.com/laginimaineb/extractkeymaster) Exploit that extracts Qualcomm's KeyMaster keys using CVE-2015-6639 and CVE-2016-2431
+- [**269**星][4m] [PHP] [lawrenceamer/0xsp-mongoose](https://github.com/lawrenceamer/0xsp-mongoose) Privilege Escalation Enumeration Toolkit (64/32 ) , fast , intelligent enumeration with Web API integration . Mastering Your Own Finding
- [**269**星][2y] [Py] [eth0izzle/needl](https://github.com/eth0izzle/needl) Take back your privacy. Lose yourself in the haystack.
-- [**269**星][10m] [Py] [appsecco/the-art-of-subdomain-enumeration](https://github.com/appsecco/the-art-of-subdomain-enumeration) This repository contains all the supplement material for the book "The art of sub-domain enumeration"
+- [**269**星][7m] [Go] [cloudfoundry/java-buildpack-memory-calculator](https://github.com/cloudfoundry/java-buildpack-memory-calculator) Cloud Foundry JVM Memory Calculator
- [**269**星][1y] [Shell] [abedalqaderswedan1/aswcrypter](https://github.com/abedalqaderswedan1/aswcrypter) An Bash&Python Script For Generating Payloads that Bypasses All Antivirus so far [FUD]
- [**269**星][11m] [Py] [LaNMaSteR53/recon-ng](https://bitbucket.org/lanmaster53/recon-ng)
+- [**268**星][6m] [Shell] [yangchuansheng/love-gfw](https://github.com/yangchuansheng/love-gfw)
- [**268**星][3y] [HTML] [xem/minix86](https://github.com/xem/minix86) x86 (MS-DOS) documentation, disassembler and emulator - WIP
+- [**268**星][10m] [C++] [wbenny/mini-tor](https://github.com/wbenny/mini-tor) 使用 MSCNG/CryptoAPI 实现的 Tor 协议
- [**268**星][1y] [Go] [tomsteele/blacksheepwall](https://github.com/tomsteele/blacksheepwall) blacksheepwall is a hostname reconnaissance tool
-- [**268**星][7d] [Py] [shaypal5/cachier](https://github.com/shaypal5/cachier) Persistent, stale-free, local and cross-machine caching for Python functions.
-- [**268**星][7d] [Rust] [nccgroup/dirble](https://github.com/nccgroup/dirble) Fast directory scanning and scraping tool
-- [**268**星][6m] [Java] [nationalsecurityagency/lemongrenade](https://github.com/nationalsecurityagency/lemongrenade) Data-driven automation platform
-- [**268**星][15d] [C#] [mkaring/confuserex](https://github.com/mkaring/confuserex) An open-source, free protector for .NET applications
+- [**268**星][22d] [Py] [peikexin9/deepxplore](https://github.com/peikexin9/deepxplore) DeepXplore code release
+- [**268**星][6d] [JS] [nodejs/security-wg](https://github.com/nodejs/security-wg) Node.js Security Working Group
- [**268**星][3y] [Java] [matthiaskaiser/jmet](https://github.com/matthiaskaiser/jmet) Java Message Exploitation Tool
- [**268**星][4y] [C] [leechristensen/unmanagedpowershell](https://github.com/leechristensen/unmanagedpowershell) Executes PowerShell from an unmanaged process
-- [**268**星][1m] [Py] [ledger-donjon/lascar](https://github.com/ledger-donjon/lascar) Ledger's Advanced Side-Channel Analysis Repository
+- [**268**星][8d] [Py] [ledger-donjon/lascar](https://github.com/ledger-donjon/lascar) Ledger's Advanced Side-Channel Analysis Repository
- [**268**星][6m] [Py] [juhakivekas/multidiff](https://github.com/juhakivekas/multidiff) Binary data diffing for multiple objects or streams of data
-- [**268**星][2m] [JS] [hynekpetrak/javascript-malware-collection](https://github.com/hynekpetrak/javascript-malware-collection) Collection of almost 40.000 javascript malware samples
-- [**268**星][4m] [Py] [den1al/jsshell](https://github.com/den1al/jsshell) An interactive multi-user web JS shell
+- [**268**星][4y] [Py] [jboone/tpms](https://github.com/jboone/tpms) Tire Pressure Monitoring System decoding tools.
+- [**268**星][6d] [Java] [jackofmosttrades/gadgetinspector](https://github.com/jackofmosttrades/gadgetinspector) A byte code analyzer for finding deserialization gadget chains in Java applications
+- [**268**星][11m] [Py] [ionelmc/python-manhole](https://github.com/ionelmc/python-manhole) Debugging manhole for python applications.
+- [**268**星][3y] [insidetrust/statistically-likely-usernames](https://github.com/insidetrust/statistically-likely-usernames) Wordlists for creating statistically likely username lists for use in password attacks and security testing
+- [**268**星][3y] [Py] [ghirensics/ghiro](https://github.com/ghirensics/ghiro) Automated image forensics tool
+- [**268**星][19d] [Py] [eset/ipyida](https://github.com/eset/ipyida) 集成IPython控制台
+- [**268**星][4d] [Py] [den1al/jsshell](https://github.com/den1al/jsshell) An interactive multi-user web JS shell
- [**268**星][1y] [Py] [c0rel0ader/east](https://github.com/c0rel0ader/east) Exploits and Security Tools Framework 2.0.1
-- [**267**星][7m] [C] [br101/horst](https://github.com/br101/horst) “horst” - lightweight IEEE802.11 wireless LAN analyzer with a text interface
-- [**267**星][10m] [C++] [wbenny/mini-tor](https://github.com/wbenny/mini-tor) 使用 MSCNG/CryptoAPI 实现的 Tor 协议
+- [**267**星][2m] [Java] [w296488320/nullproguard](https://github.com/w296488320/nullproguard) 空白混淆 源码
- [**267**星][3m] [Java] [vida-nyu/ache](https://github.com/vida-nyu/ache) ACHE is a web crawler for domain-specific search.
+- [**267**星][1y] [Py] [ucsb-seclab/bootstomp](https://github.com/ucsb-seclab/bootstomp) a bootloader vulnerability finder
- [**267**星][4y] [C] [samsung/adbi](https://github.com/samsung/adbi) Android Dynamic Binary Instrumentation tool for tracing Android native layer
-- [**267**星][3y] [Java] [rsmudge/armitage](https://github.com/rsmudge/armitage) a graphical cyber attack management tool for Metasploit that
-visualizes your targets, recommends exploits, and exposes the advanced
-capabilities of the framework.
-- [**267**星][1y] [JS] [ropnop/serverless_toolkit](https://github.com/ropnop/serverless_toolkit) A collection of useful Serverless functions I use when pentesting
-- [**267**星][13d] [JS] [nodejs/security-wg](https://github.com/nodejs/security-wg) Node.js Security Working Group
-- [**267**星][11m] [Py] [ionelmc/python-manhole](https://github.com/ionelmc/python-manhole) Debugging manhole for python applications.
+- [**267**星][1m] [Py] [quitten/autorize](https://github.com/quitten/autorize) Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application security people work and allow them perform an automatic authorization tests
+- [**267**星][2y] [Py] [hegusung/avsignseek](https://github.com/hegusung/avsignseek) Tool written in python3 to determine where the AV signature is located in a binary/payload
- [**267**星][1m] [Py] [google/grr-doc](https://github.com/google/grr-doc) Documentation for the GRR Rapid Reponse framework
-- [**267**星][3y] [Py] [ghirensics/ghiro](https://github.com/ghirensics/ghiro) Automated image forensics tool
-- [**267**星][17d] [Py] [eset/ipyida](https://github.com/eset/ipyida) 集成IPython控制台
- [**267**星][2y] [C] [cameronswinoga/yabfc](https://github.com/cameronswinoga/yabfc) Yet Another Brainfuck Compiler; No dependencies and from the ground up
- [**267**星][4y] [C] [blankwall/macdbg](https://github.com/blankwall/macdbg) Simple easy to use C and python debugging framework for OSX
-- [**266**星][2m] [Java] [w296488320/nullproguard](https://github.com/w296488320/nullproguard) 空白混淆 源码
-- [**266**星][1m] [Py] [quitten/autorize](https://github.com/quitten/autorize) Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application security people work and allow them perform an automatic authorization tests
-- [**266**星][20d] [Py] [peikexin9/deepxplore](https://github.com/peikexin9/deepxplore) DeepXplore code release
+- [**266**星][4d] [zodiacon/alltools](https://github.com/zodiacon/alltools) All reasonably stable tools
+- [**266**星][3y] [waylau/free-vpn](https://github.com/waylau/free-vpn) We Provide Newset Free VPN Service. PC, mobile phones and network appliances, no software installation. With the VPN Service,you can get through your government's firewall to browse restricted websites.提供最新的免费的 VPN 服务,通过使用 VPN 自由访问互联网(翻墙)!无论是PC端,移动端都无需安装客户端。
+- [**266**星][2y] [Shell] [superkojiman/pwnbox](https://github.com/superkojiman/pwnbox) 包含逆向和漏洞利用工具的Docker容器
+- [**266**星][3y] [Java] [subgraph/vega](https://github.com/subgraph/vega) Subgraph Vega
+- [**266**星][3y] [Java] [rsmudge/armitage](https://github.com/rsmudge/armitage) a graphical cyber attack management tool for Metasploit that
+visualizes your targets, recommends exploits, and exposes the advanced
+capabilities of the framework.
+- [**266**星][2y] [paloaltonetworks/minemeld](https://github.com/paloaltonetworks/minemeld) Main MineMeld documentation repo
+- [**266**星][5m] [C] [outflanknl/dumpert](https://github.com/outflanknl/dumpert) LSASS memory dumper using direct system calls and API unhooking.
- [**266**星][1y] [l1k/osxparanoia](https://github.com/l1k/osxparanoia) Preventing OS X from phoning home to Cupertino
-- [**266**星][1y] [Shell] [jgamblin/carhackingtools](https://github.com/jgamblin/carhackingtools) Install and Configure Common Car Hacking Tools.
-- [**266**星][4y] [Py] [jboone/tpms](https://github.com/jboone/tpms) Tire Pressure Monitoring System decoding tools.
-- [**266**星][2y] [Py] [hegusung/avsignseek](https://github.com/hegusung/avsignseek) Tool written in python3 to determine where the AV signature is located in a binary/payload
-- [**266**星][1y] [Java] [ewilded/shelling](https://github.com/ewilded/shelling) SHELLING - a comprehensive OS command injection payload generator
-- [**266**星][3y] [Visual Basic] [cn33liz/starfighters](https://github.com/cn33liz/starfighters) A JavaScript and VBScript Based Empire Launcher, which runs within their own embedded PowerShell Host.
+- [**266**星][3m] [Py] [kupferlauncher/kupfer](https://github.com/kupferlauncher/kupfer) kupfer, smart, quick launcher. `master' is kupfer's release branch.
+- [**266**星][2y] [TeX] [hjl-tools/x86-psabi](https://github.com/hjl-tools/x86-psabi) x86 psABI download
+- [**266**星][11m] [Py] [hakril/pythonforwindows](https://github.com/hakril/pythonforwindows) 简化Python与Windows操作系统交互的库
+- [**266**星][21d] [JS] [d3/d3-interpolate](https://github.com/d3/d3-interpolate) Interpolate numbers, colors, strings, arrays, objects, whatever!
+- [**266**星][9m] [Dockerfile] [cryptax/androidre](https://github.com/cryptax/androidre) 用于Android 逆向的 Docker 容器
+- [**266**星][3y] [Visual Basic .NET] [cn33liz/starfighters](https://github.com/cn33liz/starfighters) A JavaScript and VBScript Based Empire Launcher, which runs within their own embedded PowerShell Host.
- [**266**星][2y] [beahunt3r/windows-hunting](https://github.com/beahunt3r/windows-hunting) aid windows threat hunters to look for some common artifacts during their day to day operations
-- [**265**星][13d] [Py] [nucypher/nucypher](https://github.com/nucypher/nucypher) A decentralized network offering accessible, intuitive, and extensible cryptographic runtimes and interfaces for secrets management and dynamic access control.
-- [**265**星][1m] [Makefile] [pop-os/iso](https://github.com/pop-os/iso) ools necessary for building Pop!_OS ISOs.
-- [**265**星][1y] [Py] [ucsb-seclab/bootstomp](https://github.com/ucsb-seclab/bootstomp) a bootloader vulnerability finder
-- [**265**星][2y] [Shell] [superkojiman/pwnbox](https://github.com/superkojiman/pwnbox) 包含逆向和漏洞利用工具的Docker容器
+- [**266**星][4m] [C] [bcoles/kernel-exploits](https://github.com/bcoles/kernel-exploits) Various kernel exploits
+- [**265**星][2d] [Py] [nucypher/nucypher](https://github.com/nucypher/nucypher) A decentralized network offering accessible, intuitive, and extensible cryptographic runtimes and interfaces for secrets management and dynamic access control.
+- [**265**星][3m] [JS] [hawkeyesec/scanner-cli](https://github.com/hawkeyesec/scanner-cli) A project security/vulnerability/risk scanning tool
+- [**265**星][12m] [Py] [trycatchhcf/packetwhisper](https://github.com/trycatchhcf/packetwhisper) Stealthily exfiltrate data and defeat attribution using DNS queries and text-based steganography. Avoid the problems associated with typical DNS exfiltration methods. Transfer data between systems without the communicating devices directly connecting to each other or to a common endpoint. No need to control a DNS Name Server.
- [**265**星][2y] [PHP] [sqlmapproject/testenv](https://github.com/sqlmapproject/testenv) A collection of web pages vulnerable to SQL injection flaws
-- [**265**星][14d] [PHP] [pan-unit42/iocs](https://github.com/pan-unit42/iocs) Indicators from Unit 42 Public Reports
-- [**265**星][3m] [mattnotmax/cyberchef-recipes](https://github.com/mattnotmax/cyberchef-recipes) A list of cyber-chef recipes
-- [**265**星][1y] [Java] [jackofmosttrades/gadgetinspector](https://github.com/jackofmosttrades/gadgetinspector) A byte code analyzer for finding deserialization gadget chains in Java applications
-- [**265**星][9m] [Dockerfile] [cryptax/androidre](https://github.com/cryptax/androidre) 用于Android 逆向的 Docker 容器
+- [**265**星][3y] [Go] [pwaller/goupx](https://github.com/pwaller/goupx) Fix golang compiled binaries on x86_64 so that they can be packed with UPX
+- [**265**星][2m] [Assembly] [pret/pokeyellow](https://github.com/pret/pokeyellow) Disassembly of Pokemon Yellow
+- [**265**星][1y] [JS] [portswigger/hackability](https://github.com/portswigger/hackability) Probe a rendering engine for vulnerabilities and other features
+- [**265**星][2y] [PS] [invoke-ir/ace](https://github.com/invoke-ir/ace) Automated, Collection, and Enrichment Platform
+- [**265**星][2m] [C#] [hackplayers/salsa-tools](https://github.com/hackplayers/salsa-tools) Salsa Tools - ShellReverse TCP/UDP/ICMP/DNS/SSL/BINDTCP/Shellcode/SILENTTRINITY and AV bypass, AMSI patched
+- [**265**星][4m] [Py] [fwkz/riposte](https://github.com/fwkz/riposte) Python package for wrapping applications inside a tailored interactive shell
+- [**265**星][7d] [Py] [exodus-privacy/exodus](https://github.com/exodus-privacy/exodus) Platform to audit trackers used by Android application
+- [**265**星][3d] [Py] [earthquake/xfltreat](https://github.com/earthquake/xfltreat) XFLTReaT tunnelling framework
- [**265**星][4y] [C++] [breakingmalware/powerloaderex](https://github.com/breakingmalware/powerloaderex) Advanced Code Injection Technique for x32 / x64
+- [**265**星][7d] [Py] [armmbed/mbed-cli](https://github.com/armmbed/mbed-cli) Arm Mbed Command Line Interface
- [**265**星][2y] [Py] [antojoseph/frida-android-hooks](https://github.com/antojoseph/frida-android-hooks) Lets you hook Method Calls in Frida ( Android )
-- [**265**星][6m] [Go] [anshumanbh/tko-subs](https://github.com/anshumanbh/tko-subs) A tool that can help detect and takeover subdomains with dead DNS records
-- [**264**星][3m] [JS] [hawkeyesec/scanner-cli](https://github.com/hawkeyesec/scanner-cli) A project security/vulnerability/risk scanning tool
-- [**264**星][12m] [Shell] [thelinuxchoice/instainsane](https://github.com/thelinuxchoice/instainsane) Multi-threaded Instagram Brute Forcer (100 attemps at once)
+- [**265**星][7d] [Go] [adguardteam/dnsproxy](https://github.com/adguardteam/dnsproxy) Simple DNS proxy with DoH, DoT, and DNSCrypt support
+- [**264**星][1m] [Makefile] [pop-os/iso](https://github.com/pop-os/iso) ools necessary for building Pop!_OS ISOs.
+- [**264**星][2m] [C++] [theevilbit/injection](https://github.com/theevilbit/injection) various process injection technique
+- [**264**星][4m] [Go] [skx/tunneller](https://github.com/skx/tunneller) Allow internal services, running on localhost, to be accessed over the internet..
- [**264**星][4y] [Py] [rpp0/aggr-inject](https://github.com/rpp0/aggr-inject) Remote frame injection PoC by exploiting a standard compliant A-MPDU aggregation vulnerability in 802.11n networks.
-- [**264**星][3y] [Go] [pwaller/goupx](https://github.com/pwaller/goupx) Fix golang compiled binaries on x86_64 so that they can be packed with UPX
-- [**264**星][2m] [Assembly] [pret/pokeyellow](https://github.com/pret/pokeyellow) Disassembly of Pokemon Yellow
-- [**264**星][1y] [JS] [portswigger/hackability](https://github.com/portswigger/hackability) Probe a rendering engine for vulnerabilities and other features
+- [**264**星][3y] [C++] [professor-plum/reflective-driver-loader](https://github.com/professor-plum/reflective-driver-loader) injection technique base off Reflective DLL injection
- [**264**星][6y] [C] [pakt/ropc](https://github.com/pakt/ropc) A Turing complete ROP compiler
-- [**264**星][2y] [PowerShell] [invoke-ir/ace](https://github.com/invoke-ir/ace) Automated, Collection, and Enrichment Platform
-- [**264**星][11m] [Py] [hakril/pythonforwindows](https://github.com/hakril/pythonforwindows) 简化Python与Windows操作系统交互的库
-- [**264**星][4m] [Py] [fwkz/riposte](https://github.com/fwkz/riposte) Python package for wrapping applications inside a tailored interactive shell
-- [**264**星][7d] [Py] [exodus-privacy/exodus](https://github.com/exodus-privacy/exodus) Platform to audit trackers used by Android application
-- [**264**星][2y] [Py] [earthquake/xfltreat](https://github.com/earthquake/xfltreat) XFLTReaT tunnelling framework
-- [**264**星][19d] [JS] [d3/d3-interpolate](https://github.com/d3/d3-interpolate) Interpolate numbers, colors, strings, arrays, objects, whatever!
+- [**264**星][3y] [Py] [mame82/duck2spark](https://github.com/mame82/duck2spark) Converter for raw RubberDucky payloads to Digispark Arduino IDE Sketch source.
+- [**264**星][3m] [Go] [lightningnetwork/lightning-onion](https://github.com/lightningnetwork/lightning-onion) Onion Routed Micropayments for the Lightning Network
+- [**264**星][21d] [Py] [hubblestack/hubble](https://github.com/hubblestack/hubble) Hubble is a modular, open-source security compliance framework. The project provides on-demand profile-based auditing, real-time security event notifications, alerting, and reporting. HubbleStack is a free and open source project made possible by Adobe.
+- [**264**星][3d] [C] [eua/wxhexeditor](https://github.com/eua/wxhexeditor) wxHexEditor official GIT repo
- [**264**星][3y] [Java] [codewatchorg/bypasswaf](https://github.com/codewatchorg/bypasswaf) Add headers to all Burp requests to bypass some WAF products
-- [**264**星][4m] [C] [bcoles/kernel-exploits](https://github.com/bcoles/kernel-exploits) Various kernel exploits
-- [**263**星][30d] [zodiacon/alltools](https://github.com/zodiacon/alltools) All reasonably stable tools
-- [**263**星][12m] [Py] [trycatchhcf/packetwhisper](https://github.com/trycatchhcf/packetwhisper) Stealthily exfiltrate data and defeat attribution using DNS queries and text-based steganography. Avoid the problems associated with typical DNS exfiltration methods. Transfer data between systems without the communicating devices directly connecting to each other or to a common endpoint. No need to control a DNS Name Server.
-- [**263**星][3y] [Java] [subgraph/vega](https://github.com/subgraph/vega) Subgraph Vega
-- [**263**星][3y] [C++] [professor-plum/reflective-driver-loader](https://github.com/professor-plum/reflective-driver-loader) injection technique base off Reflective DLL injection
+- [**264**星][8d] [Py] [azure/azure-storage-python](https://github.com/azure/azure-storage-python) Microsoft Azure Storage Library for Python
+- [**264**星][3y] [C++] [antire-book/dont_panic](https://github.com/antire-book/dont_panic) Linux bind shell with anti-reverse engineering techniques
+- [**263**星][2y] [dloss/binary-parsing](https://github.com/dloss/binary-parsing) A list of generic tools for parsing binary data structures, such as file formats, network protocols or bitstreams
+- [**263**星][8m] [Shell] [thelinuxchoice/saycheese](https://github.com/thelinuxchoice/saycheese) Grab target's webcam shots by link
+- [**263**星][8m] [Java] [adonespitogo/adobot](https://github.com/adonespitogo/adobot) Open-source android spyware
+- [**263**星][8d] [C++] [souffle-lang/souffle](https://github.com/souffle-lang/souffle) Soufflé is a variant of Datalog for tool designers crafting analyses in Horn clauses. Soufflé synthesizes a native parallel C++ program from a logic specification.
- [**263**星][7m] [Py] [pe3zx/huawei-block-list](https://github.com/pe3zx/huawei-block-list) Captured DNS requests from Huawei P30 Pro to a block list
-- [**263**星][2y] [paloaltonetworks/minemeld](https://github.com/paloaltonetworks/minemeld) Main MineMeld documentation repo
-- [**263**星][7d] [PowerShell] [nettitude/poshc2](https://github.com/nettitude/PoshC2) Python Server for PoshC2
-- [**263**星][7d] [PowerShell] [nettitude/poshc2](https://github.com/nettitude/poshc2) Python Server for PoshC2
- [**263**星][2y] [Py] [lightos/panoptic](https://github.com/lightos/panoptic) Panoptic is an open source penetration testing tool that automates the process of search and retrieval of content for common log and config files through path traversal vulnerabilities.
-- [**263**星][3m] [Go] [lightningnetwork/lightning-onion](https://github.com/lightningnetwork/lightning-onion) Onion Routed Micropayments for the Lightning Network
-- [**263**星][3m] [Py] [kupferlauncher/kupfer](https://github.com/kupferlauncher/kupfer) kupfer, smart, quick launcher. `master' is kupfer's release branch.
-- [**263**星][19d] [Py] [hubblestack/hubble](https://github.com/hubblestack/hubble) Hubble is a modular, open-source security compliance framework. The project provides on-demand profile-based auditing, real-time security event notifications, alerting, and reporting. HubbleStack is a free and open source project made possible by Adobe.
-- [**263**星][2y] [TeX] [hjl-tools/x86-psabi](https://github.com/hjl-tools/x86-psabi) x86 psABI download
-- [**263**星][2y] [Py] [enddo/smod](https://github.com/enddo/smod) MODBUS Penetration Testing Framework
+- [**263**星][5m] [CSS] [l4wio/ctf-challenges-by-me](https://github.com/l4wio/ctf-challenges-by-me) Pwnable|Web Security|Cryptography CTF-style challenges
+- [**263**星][4d] [C++] [fransbouma/injectablegenericcamerasystem](https://github.com/fransbouma/injectablegenericcamerasystem) This is a generic camera system to be used as the base for cameras for taking screenshots within games. The main purpose of the system is to hijack the in-game 3D camera by overwriting values in its camera structure with our own values so we can control where the camera is located, it's pitch/yaw/roll values, its FoV and the camera's look vector.
+- [**263**星][9d] [Py] [firstlookmedia/gpgsync](https://github.com/firstlookmedia/gpgsync) let users always have up-to-date OpenPGP public keys for other members of their organization.
+- [**263**星][2y] [Py] [enddo/smod](https://github.com/enddo/smod) 一个模块化的框架,具有您可能需要的各种诊断和攻击功能,才能渗透到Modbus协议
+- [**263**星][2y] [Py] [dkovar/analyzemft](https://github.com/dkovar/analyzemft) fully parse the MFT file from an NTFS filesystem and present the results as accurately as possible in multiple format
- [**263**星][5m] [C++] [d35ha/callobfuscator](https://github.com/d35ha/callobfuscator) Obfuscate specific windows apis with different apis
-- [**263**星][21d] [Py] [armmbed/mbed-cli](https://github.com/armmbed/mbed-cli) Arm Mbed Command Line Interface
-- [**263**星][3y] [C++] [antire-book/dont_panic](https://github.com/antire-book/dont_panic) Linux bind shell with anti-reverse engineering techniques
-- [**263**星][8d] [Go] [adguardteam/dnsproxy](https://github.com/adguardteam/dnsproxy) Simple DNS proxy with DoH, DoT, and DNSCrypt support
- [**262**星][8m] [offensive-security/nethunter-app](https://github.com/offensive-security/nethunter-app) NetHunter android application
-- [**262**星][8m] [Java] [adonespitogo/adobot](https://github.com/adonespitogo/adobot) Open-source android spyware
- [**262**星][4y] [Py] [cisco-talos/ropmemu](https://github.com/Cisco-Talos/ROPMEMU) ROPMEMU is a framework to analyze, dissect and decompile complex code-reuse attacks.
- [**262**星][2m] [Go] [zmap/zdns](https://github.com/zmap/zdns) 快速DNS查找, 命令行工具
-- [**262**星][3m] [Go] [wanchain/go-wanchain](https://github.com/wanchain/go-wanchain) Wanchain Client Source Code
+- [**262**星][2y] [HTML] [wisec/domxsswiki](https://github.com/wisec/domxsswiki) Automatically exported from code.google.com/p/domxsswiki
- [**262**星][7y] [Py] [stripe-ctf/stripe-ctf-2.0](https://github.com/stripe-ctf/stripe-ctf-2.0) Capture the Flag: Web Edition
-- [**262**星][3m] [Py] [no0be/dnslivery](https://github.com/no0be/dnslivery) Easy files and payloads delivery over DNS
+- [**262**星][3m] [HTML] [sp1d3r/swf_json_csrf](https://github.com/sp1d3r/swf_json_csrf) 简化基于 SWF的 JSON CSRF exploitation
+- [**262**星][2m] [Go] [sensepost/godoh](https://github.com/sensepost/godoh) A DNS-over-HTTPS Command & Control Proof of Concept
+- [**262**星][4m] [C] [portcullislabs/linikatz](https://github.com/portcullislabs/linikatz) UNIX版本的Mimikatz
- [**262**星][8m] [Py] [needmorecowbell/sniff-paste](https://github.com/needmorecowbell/sniff-paste) Pastebin OSINT Harvester
-- [**262**星][5m] [CSS] [l4wio/ctf-challenges-by-me](https://github.com/l4wio/ctf-challenges-by-me) Pwnable|Web Security|Cryptography CTF-style challenges
-- [**262**星][2m] [C#] [hackplayers/salsa-tools](https://github.com/hackplayers/salsa-tools) Salsa Tools - ShellReverse TCP/UDP/ICMP/DNS/SSL/BINDTCP/Shellcode/SILENTTRINITY and AV bypass, AMSI patched
+- [**262**星][1y] [PHP] [mrsqar-ye/badmod](https://github.com/mrsqar-ye/badmod) CMS auto detect and exploit.
+- [**262**星][2y] [Java] [maxcamillo/android-keystore-password-recover](https://github.com/maxcamillo/android-keystore-password-recover) Automatically exported from code.google.com/p/android-keystore-password-recover
+- [**262**星][7m] [Shell] [lieanu/libcsearcher](https://github.com/lieanu/libcsearcher) glibc offset search for ctf.
+- [**262**星][1y] [PS] [fox-it/invoke-aclpwn](https://github.com/fox-it/invoke-aclpwn)
- [**262**星][1y] [Ruby] [evait-security/envizon](https://github.com/evait-security/envizon) 网络可视化工具, 在渗透测试中快速识别最可能的目标
-- [**262**星][2y] [Py] [dkovar/analyzemft](https://github.com/dkovar/analyzemft) fully parse the MFT file from an NTFS filesystem and present the results as accurately as possible in multiple format
+- [**262**星][6m] [Batchfile] [diogo-fernan/ir-rescue](https://github.com/diogo-fernan/ir-rescue) A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.
+- [**262**星][1y] [C++] [chadski/sharpneedle](https://github.com/chadski/sharpneedle) Inject C# code into a running process
- [**262**星][11m] [Py] [ant4g0nist/susanoo](https://github.com/ant4g0nist/susanoo) A REST API security testing framework.
-- [**261**星][2y] [dloss/binary-parsing](https://github.com/dloss/binary-parsing) A list of generic tools for parsing binary data structures, such as file formats, network protocols or bitstreams
+- [**262**星][1m] [C#] [airvpn/eddie](https://github.com/airvpn/eddie) OpenVPN UI
+- [**261**星][7y] [C++] [sin5678/gh0st](https://github.com/sin5678/gh0st) a open source remote administrator tool
+- [**261**星][2y] [Py] [zhangchenchen/proxyspider](https://github.com/zhangchenchen/proxyspider) 代理IP 采集程序
- [**261**星][1m] [Py] [xdavidhu/probesniffer](https://github.com/xdavidhu/probesniffer)
-- [**261**星][2y] [HTML] [wisec/domxsswiki](https://github.com/wisec/domxsswiki) Automatically exported from code.google.com/p/domxsswiki
-- [**261**星][2m] [C++] [theevilbit/injection](https://github.com/theevilbit/injection) various process injection technique
-- [**261**星][3m] [HTML] [sp1d3r/swf_json_csrf](https://github.com/sp1d3r/swf_json_csrf) 简化基于 SWF的 JSON CSRF exploitation
-- [**261**星][3m] [Objective-C] [preemptive/ppios-rename](https://github.com/preemptive/ppios-rename) Symbol obfuscator for iOS apps
-- [**261**星][4m] [C] [portcullislabs/linikatz](https://github.com/portcullislabs/linikatz) UNIX版本的Mimikatz
+- [**261**星][1y] [JS] [roccomuso/netcat](https://github.com/roccomuso/netcat) Netcat client and server modules written in pure Javascript for Node.j
+- [**261**星][7y] [C] [quarkslab/quarkspwdump](https://github.com/quarkslab/quarkspwdump) Dump various types of Windows credentials without injecting in any process.
+- [**261**星][3m] [ObjC] [preemptive/ppios-rename](https://github.com/preemptive/ppios-rename) Symbol obfuscator for iOS apps
- [**261**星][1y] [C] [pornin/cttk](https://github.com/pornin/cttk) Constant-Time Toolkit
- [**261**星][1y] [Dockerfile] [pgorczak/srslte-docker-emulated](https://github.com/pgorczak/srslte-docker-emulated) Minimal end-to-end LTE. Dockerized and emulated radio over shared memory.
+- [**261**星][3y] [Py] [pablocelayes/rsa-wiener-attack](https://github.com/pablocelayes/rsa-wiener-attack) A Python implementation of the Wiener attack on RSA public-key encryption scheme.
+- [**261**星][3m] [Py] [no0be/dnslivery](https://github.com/no0be/dnslivery) Easy files and payloads delivery over DNS
+- [**261**星][7d] [C++] [niemand-sec/anticheat-testing-framework](https://github.com/niemand-sec/anticheat-testing-framework) Framework to test any Anti-Cheat
- [**261**星][5y] [C] [mysql/mysql-proxy](https://github.com/mysql/mysql-proxy) MySQL Proxy is a simple program that sits between your client and MySQL server(s) and that can monitor, analyze or transform their communication. Its flexibility allows for a wide variety of uses, including load balancing, failover, query analysis, query filtering and modification, and many more.
-- [**261**星][1y] [PHP] [mrsqar-ye/badmod](https://github.com/mrsqar-ye/badmod) CMS auto detect and exploit.
-- [**261**星][2y] [Java] [maxcamillo/android-keystore-password-recover](https://github.com/maxcamillo/android-keystore-password-recover) Automatically exported from code.google.com/p/android-keystore-password-recover
-- [**261**星][3y] [Py] [mame82/duck2spark](https://github.com/mame82/duck2spark) Converter for raw RubberDucky payloads to Digispark Arduino IDE Sketch source.
+- [**261**星][9m] [C] [landhb/hideprocess](https://github.com/landhb/hideprocess) A basic Direct Kernel Object Manipulation rootkit that removes a process from the EPROCESS list, hiding it from the Task Manager
- [**261**星][3y] [jmpews/pwn2exploit](https://github.com/jmpews/pwn2exploit) all mine papers, pwn & exploit
-- [**261**星][1y] [PowerShell] [fox-it/invoke-aclpwn](https://github.com/fox-it/invoke-aclpwn)
-- [**261**星][7d] [Py] [firstlookmedia/gpgsync](https://github.com/firstlookmedia/gpgsync) let users always have up-to-date OpenPGP public keys for other members of their organization.
+- [**261**星][7m] [JS] [jesusprubio/strong-node](https://github.com/jesusprubio/strong-node)
- [**261**星][1m] [Py] [felixweyne/imaginaryc2](https://github.com/felixweyne/imaginaryc2) Imaginary C2 is a python tool which aims to help in the behavioral (network) analysis of malware. Imaginary C2 hosts a HTTP server which captures HTTP requests towards selectively chosen domains/IPs. Additionally, the tool aims to make it easy to replay captured Command-and-Control responses/served payloads.
-- [**261**星][24d] [C] [eua/wxhexeditor](https://github.com/eua/wxhexeditor) wxHexEditor official GIT repo
+- [**261**星][1y] [C++] [ewhitehats/invisiblepersistence](https://github.com/ewhitehats/invisiblepersistence) Persisting in the Windows registry "invisibly"
- [**261**星][3y] [Py] [ecthros/pina-colada](https://github.com/ecthros/pina-colada) A powerful and extensible wireless drop box
-- [**261**星][6m] [Batchfile] [diogo-fernan/ir-rescue](https://github.com/diogo-fernan/ir-rescue) A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.
-- [**261**星][7m] [Go] [cloudfoundry/java-buildpack-memory-calculator](https://github.com/cloudfoundry/java-buildpack-memory-calculator) Cloud Foundry JVM Memory Calculator
-- [**261**星][1y] [C++] [chadski/sharpneedle](https://github.com/chadski/sharpneedle) Inject C# code into a running process
-- [**261**星][4m] [Py] [azure/azure-storage-python](https://github.com/azure/azure-storage-python) Microsoft Azure Storage Library for Python
-- [**260**星][16d] [Dockerfile] [pengchujin/v2raydocker](https://github.com/pengchujin/v2raydocker) 一键v2ray ws + tls 方便就完事了
-- [**260**星][7y] [C++] [sin5678/gh0st](https://github.com/sin5678/gh0st) a open source remote administrator tool
-- [**260**星][2m] [Py] [yzddmr6/webcrack](https://github.com/yzddmr6/webcrack) 网站后台弱口令/万能密码批量检测工具
-- [**260**星][4m] [Go] [skx/tunneller](https://github.com/skx/tunneller) Allow internal services, running on localhost, to be accessed over the internet..
-- [**260**星][1y] [JS] [roccomuso/netcat](https://github.com/roccomuso/netcat) Netcat client and server modules written in pure Javascript for Node.j
-- [**260**星][7y] [C] [quarkslab/quarkspwdump](https://github.com/quarkslab/quarkspwdump) Dump various types of Windows credentials without injecting in any process.
-- [**260**星][5m] [C++] [niemand-sec/anticheat-testing-framework](https://github.com/niemand-sec/anticheat-testing-framework) Framework for testing any Anti-Cheat
+- [**261**星][3y] [Py] [dorneanu/smalisca](https://github.com/dorneanu/smalisca) Static Code Analysis for Smali files
+- [**261**星][6d] [Go] [carbonblack/binee](https://github.com/carbonblack/binee) binary emulation environment
+- [**261**星][3m] [Py] [amimo/dcc](https://github.com/amimo/dcc) DCC (Dex-to-C Compiler) is method-based aot compiler that can translate DEX code to C code.
+- [**260**星][2y] [C#] [v2ray/v2rayn](https://github.com/v2ray/v2rayn) A Windows GUI client for V2Ray.
+- [**260**星][11m] [Py] [hysnsec/devsecops-studio](https://github.com/hysnsec/DevSecOps-Studio) DevSecOps Distribution - Virtual Environment to learn DevSecOps
+- [**260**星][3m] [Py] [m4ll0k/konan](https://github.com/m4ll0k/Konan) Konan - Advanced Web Application Dir Scanner
+- [**260**星][4m] [payloadbox/command-injection-payload-list](https://github.com/payloadbox/command-injection-payload-list)
+- [**260**星][2d] [Go] [wanchain/go-wanchain](https://github.com/wanchain/go-wanchain) Wanchain Client Source Code
+- [**260**星][7m] [Py] [quitten/doser.py](https://github.com/quitten/doser.py) DoS tool for HTTP requests (inspired by hulk but has more functionalities)
- [**260**星][11m] [C] [nbulischeck/tyton](https://github.com/nbulischeck/tyton) Linux内核模式Rootkit Hunter. 可检测隐藏系统模块、系统调用表Hooking、网络协议Hooking等
-- [**260**星][7m] [Shell] [lieanu/libcsearcher](https://github.com/lieanu/libcsearcher) glibc offset search for ctf.
-- [**260**星][9m] [C] [landhb/hideprocess](https://github.com/landhb/hideprocess) A basic Direct Kernel Object Manipulation rootkit that removes a process from the EPROCESS list, hiding it from the Task Manager
-- [**260**星][3y] [insidetrust/statistically-likely-usernames](https://github.com/insidetrust/statistically-likely-usernames) Wordlists for creating statistically likely username lists for use in password attacks and security testing
-- [**260**星][1y] [C++] [ewhitehats/invisiblepersistence](https://github.com/ewhitehats/invisiblepersistence) Persisting in the Windows registry "invisibly"
-- [**260**星][2y] [Py] [cryptolok/morphaes](https://github.com/cryptolok/morphaes) IDPS & SandBox & AntiVirus STEALTH KILLER. MorphAES is the world's first polymorphic shellcode engine, with metamorphic properties and capability to bypass sandboxes, which makes it undetectable for an IDPS, it's cross-platform as well and library-independent.
+- [**260**星][3d] [Java] [mr-xn/penetration_testing_poc](https://github.com/mr-xn/penetration_testing_poc) 渗透测试有关的POC、EXP、脚本、提权、小工具等
- [**260**星][6m] [Py] [andsens/bootstrap-vz](https://github.com/andsens/bootstrap-vz) Bootstrap Debian images for virtualized environments
- [**260**星][1y] [C++] [alpha1ab/cve-2018-8120](https://github.com/alpha1ab/cve-2018-8120) CVE-2018-8120 Exploit for Win2003 Win2008 WinXP Win7
-- [**259**星][2y] [C#] [v2ray/v2rayn](https://github.com/v2ray/v2rayn) A Windows GUI client for V2Ray.
-- [**259**星][11m] [Py] [hysnsec/devsecops-studio](https://github.com/hysnsec/DevSecOps-Studio) DevSecOps Distribution - Virtual Environment to learn DevSecOps
-- [**259**星][3y] [Py] [pablocelayes/rsa-wiener-attack](https://github.com/pablocelayes/rsa-wiener-attack) A Python implementation of the Wiener attack on RSA public-key encryption scheme.
+- [**259**星][7m] [Py] [s0md3v/sqlmate](https://github.com/s0md3v/sqlmate) A friend of SQLmap which will do what you always expected from SQLmap.
+- [**259**星][1y] [Py] [wipi-hunter/pidense](https://github.com/wipi-hunter/pidense) Monitor illegal wireless network activities.
+- [**259**星][28d] [Ruby] [rapid7/recog](https://github.com/rapid7/recog) Pattern recognition for hosts, services, and content
+- [**259**星][3d] [Ruby] [puppetlabs/puppetlabs-firewall](https://github.com/puppetlabs/puppetlabs-firewall) Puppet Firewall Module
+- [**259**星][4y] [Py] [netxfly/passive_scan](https://github.com/netxfly/passive_scan) 基于http代理的web漏洞扫描器的实现
+- [**259**星][6m] [Py] [mbro95/portablecellnetwork](https://github.com/mbro95/portablecellnetwork) Utilize a Raspberry Pi and a Nuand BladeRF to generate your own portable local cell network
- [**259**星][4y] [Ruby] [lubyruffy/fofa](https://github.com/lubyruffy/fofa) 针对全球范围的最全的网站数据信息库,提供给网民(更多的是安全技术研究人员)进行查询
-- [**259**星][3m] [Py] [giantbranch/python-hacker-code](https://github.com/giantbranch/python-hacker-code) 《python黑帽子:黑客与渗透测试编程之道》代码及实验文件,字典等
-- [**259**星][11d] [C++] [fransbouma/injectablegenericcamerasystem](https://github.com/fransbouma/injectablegenericcamerasystem) This is a generic camera system to be used as the base for cameras for taking screenshots within games. The main purpose of the system is to hijack the in-game 3D camera by overwriting values in its camera structure with our own values so we can control where the camera is located, it's pitch/yaw/roll values, its FoV and the camera's look vector.
-- [**259**星][3m] [Smali] [bin4ry/deejayeye-modder](https://github.com/bin4ry/deejayeye-modder)
-- [**258**星][7m] [Py] [s0md3v/sqlmate](https://github.com/s0md3v/sqlmate) A friend of SQLmap which will do what you always expected from SQLmap.
-- [**258**星][26d] [Ruby] [rapid7/recog](https://github.com/rapid7/recog) Pattern recognition for hosts, services, and content
-- [**258**星][7m] [Py] [quitten/doser.py](https://github.com/quitten/doser.py) DoS tool for HTTP requests (inspired by hulk but has more functionalities)
-- [**258**星][4y] [Py] [netxfly/passive_scan](https://github.com/netxfly/passive_scan) 基于http代理的web漏洞扫描器的实现
-- [**258**星][6m] [Py] [mbro95/portablecellnetwork](https://github.com/mbro95/portablecellnetwork) Utilize a Raspberry Pi and a Nuand BladeRF to generate your own portable local cell network
-- [**258**星][4m] [PHP] [lawrenceamer/0xsp-mongoose](https://github.com/lawrenceamer/0xsp-mongoose) Privilege Escalation Enumeration Toolkit (64/32 ) , fast , intelligent enumeration with Web API integration . Mastering Your Own Finding
+- [**259**星][4m] [Py] [giantbranch/python-hacker-code](https://github.com/giantbranch/python-hacker-code) 《python黑帽子:黑客与渗透测试编程之道》代码及实验文件,字典等
+
+- [**259**星][8m] [Elixir] [elixiumnetwork/elixium_core](https://github.com/elixiumnetwork/elixium_core) A privacy-preserving decentralized application network
+- [**259**星][2y] [Py] [cryptolok/morphaes](https://github.com/cryptolok/morphaes) IDPS & SandBox & AntiVirus STEALTH KILLER. MorphAES is the world's first polymorphic shellcode engine, with metamorphic properties and capability to bypass sandboxes, which makes it undetectable for an IDPS, it's cross-platform as well and library-independent.
+- [**259**星][2y] [Py] [countercept/python-exe-unpacker](https://github.com/countercept/python-exe-unpacker) A helper script for unpacking and decompiling EXEs compiled from python code.
+- [**258**星][7y] [eugeneching/ida-consonance](https://github.com/eugeneching/ida-consonance) 黑色皮肤插件
+- [**258**星][1y] [Py] [pycqa/mccabe](https://github.com/pycqa/mccabe) McCabe complexity checker for Python
+- [**258**星][2y] [Go] [netxfly/xsec-ip-database](https://github.com/netxfly/xsec-ip-database) 恶意IP 和域名库。通过爬虫定期拉取网络中公开的恶意ip 库来获取恶意IP和域名,且支持与自有的其他安全产品联动(HIDS、WAF、蜜罐、防火墙等产品),实时更新IP库
- [**258**星][7y] [Java] [isecpartners/android-ssl-bypass](https://github.com/isecpartners/android-ssl-bypass) Black box tool to bypass SSL verification on Android, even when pinning is used.
- [**258**星][2m] [PHP] [incredibleindishell/ssrf_vulnerable_lab](https://github.com/incredibleindishell/ssrf_vulnerable_lab) This Lab contain the sample codes which are vulnerable to Server-Side Request Forgery attack
- [**258**星][3y] [Perl] [fuzyll/defcon-vm](https://github.com/fuzyll/defcon-vm) Files from my DEFCON CTF VM.
-- [**258**星][3y] [Java] [flankerhqd/jaadas](https://github.com/flankerhqd/jaadas) Joint Advanced Defect assEsment for android applications
-- [**258**星][27d] [Py] [diogo-fernan/malsub](https://github.com/diogo-fernan/malsub) A Python RESTful API framework for online malware analysis and threat intelligence services.
+- [**258**星][29d] [Py] [diogo-fernan/malsub](https://github.com/diogo-fernan/malsub) A Python RESTful API framework for online malware analysis and threat intelligence services.
- [**258**星][1y] [C++] [dga-mi-ssi/yaco](https://github.com/dga-mi-ssi/yaco) 利用Git版本控制,同步多人对相同二进制文件的修改
-- [**258**星][12d] [Go] [carbonblack/binee](https://github.com/carbonblack/binee) binary emulation environment
+- [**258**星][1m] [Py] [cedricbonhomme/stegano](https://github.com/cedricbonhomme/stegano) Stegano is a pure Python steganography module.
+- [**258**星][3y] [C#] [brandonprry/gray_hat_csharp_code](https://github.com/brandonprry/gray_hat_csharp_code) This repository contains full code examples from the book Gray Hat C#
+- [**258**星][3d] [Smali] [bin4ry/deejayeye-modder](https://github.com/bin4ry/deejayeye-modder)
+- [**258**星][2m] [C] [basil00/torwall](https://github.com/basil00/torwall) Tallow - Transparent Tor for Windows
+- [**258**星][30d] [anyeduke/enterprise-security-skill](https://github.com/anyeduke/enterprise-security-skill) 用于记录企业安全规划,建设,运营,攻防的相关资源
+
+- [**258**星][2d] [HTML] [ansible/community](https://github.com/ansible/community) This repository is for management of all Ansible community related initiatives.
+- [**257**星][21d] [C] [radareorg/r2dec-js](https://github.com/radareorg/r2dec-js) radare2 plugin - converts asm to pseudo-C code.
- [**257**星][2m] [C#] [orlikoski/cylr](https://github.com/orlikoski/CyLR) CyLR - Live Response Collection Tool
- [**257**星][3m] [Rust] [radareorg/radeco](https://github.com/radareorg/radeco) radare2-based decompiler and symbol executor
-- [**257**星][7y] [eugeneching/ida-consonance](https://github.com/eugeneching/ida-consonance) 黑色皮肤插件
+- [**257**星][2y] [Go] [zboya/gomitmproxy](https://github.com/zboya/gomitmproxy) gomitmproxy是想用golang语言实现[mitmproxy],实现http(s)代理
+- [**257**星][21d] [C] [radareorg/r2dec-js](https://github.com/radareorg/r2dec-js) radare2插件,将汇编代码反编译为C伪代码
+- [**257**星][2y] [voulnet/cve-2017-8759-exploit-sample](https://github.com/voulnet/cve-2017-8759-exploit-sample) Running CVE-2017-8759 exploit sample.
+- [**257**星][2y] [Py] [thetwitchy/xxer](https://github.com/thetwitchy/xxer) A blind XXE injection callback handler. Uses HTTP and FTP to extract information. Originally written in Ruby by ONsec-Lab.
- [**257**星][2m] [Go] [sachaos/tcpterm](https://github.com/sachaos/tcpterm) tcpterm is a packet visualizer in TUI.
-- [**257**星][18d] [rustsec/advisory-db](https://github.com/rustsec/advisory-db) Security advisory database for Rust crates published through crates.io
-- [**257**星][1y] [Py] [pycqa/mccabe](https://github.com/pycqa/mccabe) McCabe complexity checker for Python
+- [**257**星][20d] [rustsec/advisory-db](https://github.com/rustsec/advisory-db) Security advisory database for Rust crates published through crates.io
+- [**257**星][4m] [Py] [rrwick/basecalling-comparison](https://github.com/rrwick/basecalling-comparison) A comparison of different Oxford Nanopore basecallers
+- [**257**星][3y] [Py] [rolisoft/reconscan](https://github.com/rolisoft/reconscan) Network reconnaissance and vulnerability assessment tools.
+- [**257**星][3y] [Py] [rockymeza/wifi](https://github.com/rockymeza/wifi) [unmaintained] WiFi tools for linux
+- [**257**星][18d] [C++] [rob--/memoryjs](https://github.com/rob--/memoryjs) Read and write process memory in NodeJS (finally!)
- [**257**星][2m] [C++] [poweradminllc/paexec](https://github.com/poweradminllc/paexec) Remote execution, like PsExec
- [**257**星][5y] [Py] [pbartek/pyobd-pi](https://github.com/pbartek/pyobd-pi) Fixes to pyobd for Raspberry Pi / BeagleBone Black
- [**257**星][10m] [C] [p0f/p0f](https://github.com/p0f/p0f) p0f unofficial git repo
-- [**257**星][2y] [Go] [netxfly/xsec-ip-database](https://github.com/netxfly/xsec-ip-database) 恶意IP 和域名库。通过爬虫定期拉取网络中公开的恶意ip 库来获取恶意IP和域名,且支持与自有的其他安全产品联动(HIDS、WAF、蜜罐、防火墙等产品),实时更新IP库
-- [**257**星][27d] [Py] [frint0/email-enum](https://github.com/frint0/email-enum) Email-Enum searches mainstream websites and tells you if an email is registered! #DEPRECATED
-- [**257**星][2y] [Py] [countercept/python-exe-unpacker](https://github.com/countercept/python-exe-unpacker) A helper script for unpacking and decompiling EXEs compiled from python code.
-- [**257**星][1m] [Py] [cedricbonhomme/stegano](https://github.com/cedricbonhomme/stegano) Stegano is a pure Python steganography module.
-- [**257**星][3y] [C#] [brandonprry/gray_hat_csharp_code](https://github.com/brandonprry/gray_hat_csharp_code) This repository contains full code examples from the book Gray Hat C#
-- [**256**星][19d] [C] [radareorg/r2dec-js](https://github.com/radareorg/r2dec-js) radare2 plugin - converts asm to pseudo-C code.
-- [**256**星][3m] [Py] [m4ll0k/konan](https://github.com/m4ll0k/Konan) Konan - Advanced Web Application Dir Scanner
-- [**256**星][2y] [Go] [zboya/gomitmproxy](https://github.com/zboya/gomitmproxy) gomitmproxy是想用golang语言实现[mitmproxy],实现http(s)代理
-- [**256**星][19d] [C] [radareorg/r2dec-js](https://github.com/radareorg/r2dec-js) radare2插件,将汇编代码反编译为C伪代码
-- [**256**星][2y] [voulnet/cve-2017-8759-exploit-sample](https://github.com/voulnet/cve-2017-8759-exploit-sample) Running CVE-2017-8759 exploit sample.
+- [**257**星][2y] [Java] [l-jinbin/apksignaturekiller](https://github.com/l-jinbin/apksignaturekiller) 一键破解APK签名校验
+- [**257**星][12m] [Shell] [karek314/macos-home-call-drop](https://github.com/karek314/macos-home-call-drop) Simple shell script to fix macOS privacy issues and remove mostly useless macOS calls to cupertino
+- [**257**星][3y] [PHP] [hackademic/hackademic](https://github.com/hackademic/hackademic) the main hackademic code repository
+- [**257**星][14d] [Py] [guimaizi/get_domain](https://github.com/guimaizi/get_domain) 域名收集与监测
+- [**257**星][29d] [Py] [frint0/email-enum](https://github.com/frint0/email-enum) Email-Enum searches mainstream websites and tells you if an email is registered! #DEPRECATED
+- [**257**星][3y] [Java] [flankerhqd/jaadas](https://github.com/flankerhqd/jaadas) Joint Advanced Defect assEsment for android applications
+- [**257**星][1y] [Java] [danicuestasuarez/nmapgui](https://github.com/danicuestasuarez/nmapgui) Advanced Graphical User Interface for NMap
+- [**257**星][2y] [Py] [chrizator/netattack2](https://github.com/chrizator/netattack2) 网络扫描和攻击脚本
+- [**257**星][1y] [Py] [berzerk0/bewgor](https://github.com/berzerk0/bewgor) Bull's Eye Wordlist Generator - Does your password rely on predictable patterns of accessible info?
+- [**256**星][10m] [Py] [crytic/ethersplay](https://github.com/crytic/ethersplay) EVM dissassembler
+- [**256**星][7m] [Py] [xairy/easy-linux-pwn](https://github.com/xairy/easy-linux-pwn) A set of Linux binary exploitation tasks for beginners on various architectures
- [**256**星][2y] [Py] [unamer/cve-2017-11882](https://github.com/unamer/cve-2017-11882) CVE-2017-11882 Exploit accepts over 17k bytes long command/code in maximum.
-- [**256**星][2y] [TypeScript] [srar/memcachedos](https://github.com/srar/memcachedos) Memcache 反射DDOS攻击脚本经供学习参考使用
-- [**256**星][7d] [C++] [souffle-lang/souffle](https://github.com/souffle-lang/souffle) Soufflé is a variant of Datalog for tool designers crafting analyses in Horn clauses. Soufflé synthesizes a native parallel C++ program from a logic specification.
-- [**256**星][2m] [Go] [sensepost/godoh](https://github.com/sensepost/godoh) A DNS-over-HTTPS Command & Control Proof of Concept
+- [**256**星][3y] [Py] [thomastjdev/wmd](https://github.com/thomastjdev/wmd) Python framework for IT security tools
+- [**256**星][2y] [TS] [srar/memcachedos](https://github.com/srar/memcachedos) Memcache 反射DDOS攻击脚本经供学习参考使用
+- [**256**星][4y] [Py] [smaash/snitch](https://github.com/smaash/snitch) information gathering via dorks
- [**256**星][5m] [C] [rub-syssec/omen](https://github.com/rub-syssec/omen) Ordered Markov ENumerator - Password Guesser
-- [**256**星][4m] [Py] [rrwick/basecalling-comparison](https://github.com/rrwick/basecalling-comparison) A comparison of different Oxford Nanopore basecallers
-- [**256**星][2y] [Py] [rolisoft/reconscan](https://github.com/rolisoft/reconscan) Network reconnaissance and vulnerability assessment tools.
-- [**256**星][3y] [Py] [rockymeza/wifi](https://github.com/rockymeza/wifi) [unmaintained] WiFi tools for linux
-- [**256**星][12m] [Shell] [karek314/macos-home-call-drop](https://github.com/karek314/macos-home-call-drop) Simple shell script to fix macOS privacy issues and remove mostly useless macOS calls to cupertino
-- [**256**星][3y] [PHP] [hackademic/hackademic](https://github.com/hackademic/hackademic) the main hackademic code repository
-- [**256**星][1m] [Py] [ghostop14/sparrow-wifi](https://github.com/ghostop14/sparrow-wifi) Next-Gen GUI-based WiFi and Bluetooth Analyzer for Linux
-- [**256**星][3y] [Py] [dorneanu/smalisca](https://github.com/dorneanu/smalisca) Static Code Analysis for Smali files
-- [**256**星][1y] [Java] [danicuestasuarez/nmapgui](https://github.com/danicuestasuarez/nmapgui) Advanced Graphical User Interface for NMap
-- [**256**星][2m] [Shell] [cytoscape/cytoscape](https://github.com/cytoscape/cytoscape) an open source platform for network analysis and visualization
-- [**256**星][2y] [Py] [chrizator/netattack2](https://github.com/chrizator/netattack2) 网络扫描和攻击脚本
-- [**256**星][1y] [Py] [berzerk0/bewgor](https://github.com/berzerk0/bewgor) Bull's Eye Wordlist Generator - Does your password rely on predictable patterns of accessible info?
-- [**256**星][2m] [C] [basil00/torwall](https://github.com/basil00/torwall) Tallow - Transparent Tor for Windows
-- [**256**星][28d] [anyeduke/enterprise-security-skill](https://github.com/anyeduke/enterprise-security-skill) 用于记录企业安全规划,建设,运营,攻防的相关资源
-- [**255**星][11d] [HTML] [vernesong/openclash](https://github.com/vernesong/openclash) A Clash Client For OpenWrt
+- [**256**星][2d] [Java] [ripe-ncc/whois](https://github.com/ripe-ncc/whois) RIPE Database whois code repository
+- [**256**星][3m] [Py] [rhinosecuritylabs/iprotate_burp_extension](https://github.com/rhinosecuritylabs/iprotate_burp_extension) Extension for Burp Suite which uses AWS API Gateway to rotate your IP on every request.
+- [**256**星][10m] [C++] [ramadhanamizudin/malware](https://github.com/ramadhanamizudin/malware) Malware Samples. Uploaded to GitHub for those want to analyse the code. Code mostly from:
+- [**256**星][7d] [Py] [minio/minio-py](https://github.com/minio/minio-py) MinIO Client SDK for Python
+- [**256**星][1y] [Py] [m4ll0k/galileo](https://github.com/m4ll0k/galileo) Galileo - Web Application Audit Framework
+- [**256**星][9m] [Go] [erbbysam/dnsgrep](https://github.com/erbbysam/dnsgrep) Quickly Search Large DNS Datasets
+- [**256**星][3m] [Py] [clemfromspace/scrapy-selenium](https://github.com/clemfromspace/scrapy-selenium) Scrapy middleware to handle javascript pages using selenium
+- [**256**星][2y] [Ruby] [bcoles/ssrf_proxy](https://github.com/bcoles/ssrf_proxy) SSRF Proxy facilitates tunneling HTTP communications through servers vulnerable to Server-Side Request Forgery.
+- [**256**星][2m] [C] [a2nkf/macos-kernel-exploit](https://github.com/a2nkf/macos-kernel-exploit) macOS Kernel Exploit for CVE-2019-8781. Credit for the bug goes to
- [**255**星][6m] [nsacyber/hardware-and-firmware-security-guidance](https://github.com/nsacyber/Hardware-and-Firmware-Security-Guidance) Guidance for the Spectre, Meltdown, Speculative Store Bypass, Rogue System Register Read, Lazy FP State Restore, Bounds Check Bypass Store, TLBleed, and L1TF/Foreshadow vulnerabilities as well as general hardware and firmware security guidance. #nsacyber
- [**255**星][3m] [Py] [lorentzenman/sheepl](https://github.com/lorentzenman/sheepl) Creating realistic user behaviour for supporting tradecraft development within lab environments
-- [**255**星][10m] [Py] [crytic/ethersplay](https://github.com/crytic/ethersplay) EVM dissassembler
-- [**255**星][1y] [Py] [wipi-hunter/pidense](https://github.com/wipi-hunter/pidense) Monitor illegal wireless network activities.
+- [**255**星][5m] [zhaoweiho/web-sec-interview](https://github.com/zhaoweiho/web-sec-interview) Information Security (Web Security/Penetration Testing Direction) Interview Questions/Solutions 信息安全(Web安全/渗透测试方向)面试题/解题思路
- [**255**星][3y] [C] [w-shackleton/android-netspoof](https://github.com/w-shackleton/android-netspoof) Network Spoofer
-- [**255**星][3y] [Py] [thomastjdev/wmd](https://github.com/thomastjdev/wmd) Python framework for IT security tools
-- [**255**星][2y] [Py] [thetwitchy/xxer](https://github.com/thetwitchy/xxer) A blind XXE injection callback handler. Uses HTTP and FTP to extract information. Originally written in Ruby by ONsec-Lab.
- [**255**星][1y] [Py] [stephenmcd/hot-redis](https://github.com/stephenmcd/hot-redis) Rich Python data types for Redis
-- [**255**星][16d] [C++] [rob--/memoryjs](https://github.com/rob--/memoryjs) Read and write process memory in NodeJS (finally!)
+- [**255**星][16d] [Java] [spring-cloud/spring-cloud-task](https://github.com/spring-cloud/spring-cloud-task) Short lived microservices with Spring Batch
+- [**255**星][4y] [C] [roxas75/rxtools](https://github.com/roxas75/rxtools) a collection of hacking tools for Nintendo 3DS/3DSXL/2DS, compatible with all the system versions from 4.1 to 9.2
+- [**255**星][3m] [Py] [qunarcorp/open_dnsdb](https://github.com/qunarcorp/open_dnsdb) OpenDnsdb 是去哪儿网OPS团队开源的基于Python语言的DNS管理系统
+- [**255**星][3m] [HTML] [pagerduty/security-training](https://github.com/pagerduty/security-training) Public version of PagerDuty's employee security training courses.
- [**255**星][5y] [Vim script] [ngmy/vim-rubocop](https://github.com/ngmy/vim-rubocop) The Vim RuboCop plugin runs RuboCop and displays the results in Vim
-- [**255**星][28d] [Py] [minio/minio-py](https://github.com/minio/minio-py) MinIO Client SDK for Python
-- [**255**星][1y] [Py] [m4ll0k/galileo](https://github.com/m4ll0k/galileo) Galileo - Web Application Audit Framework
-- [**255**星][2y] [Java] [l-jinbin/apksignaturekiller](https://github.com/l-jinbin/apksignaturekiller) 一键破解APK签名校验
-- [**255**星][7m] [JS] [jesusprubio/strong-node](https://github.com/jesusprubio/strong-node)
-- [**255**星][2y] [Ruby] [bcoles/ssrf_proxy](https://github.com/bcoles/ssrf_proxy) SSRF Proxy facilitates tunneling HTTP communications through servers vulnerable to Server-Side Request Forgery.
-- [**255**星][2m] [C] [a2nkf/macos-kernel-exploit](https://github.com/a2nkf/macos-kernel-exploit) macOS Kernel Exploit for CVE-2019-8781. Credit for the bug goes to
-- [**254**星][2y] [PowerShell] [p3nt4/invoke-piper](https://github.com/p3nt4/Invoke-Piper) Forward local or remote tcp ports through SMB pipes.
-- [**254**星][4m] [payloadbox/command-injection-payload-list](https://github.com/payloadbox/command-injection-payload-list)
-- [**254**星][7m] [Py] [xairy/easy-linux-pwn](https://github.com/xairy/easy-linux-pwn) A set of Linux binary exploitation tasks for beginners on various architectures
-- [**254**星][14d] [Java] [spring-cloud/spring-cloud-task](https://github.com/spring-cloud/spring-cloud-task) Short lived microservices with Spring Batch
+- [**255**星][1y] [Shell] [m4ll0k/autonse](https://github.com/m4ll0k/autonse) Massive NSE (Nmap Scripting Engine) AutoSploit and AutoScanner
+- [**255**星][3y] [Py] [lijiejie/iis_shortname_scanner](https://github.com/lijiejie/iis_shortname_scanner) an IIS shortname Scanner
+- [**255**星][3m] [Jupyter Notebook] [jmartinezheras/2018-machinelearning-lectures-esa](https://github.com/jmartinezheras/2018-machinelearning-lectures-esa) Machine Learning Lectures at the European Space Agency (ESA) in 2018
+- [**255**星][2m] [Shell] [cytoscape/cytoscape](https://github.com/cytoscape/cytoscape) an open source platform for network analysis and visualization
+- [**255**星][3y] [Py] [airsage/petrel](https://github.com/airsage/petrel) Tools for writing, submitting, debugging, and monitoring Storm topologies in pure Python
+- [**254**星][2y] [PS] [p3nt4/invoke-piper](https://github.com/p3nt4/Invoke-Piper) Forward local or remote tcp ports through SMB pipes.
+- [**254**星][2y] [PS] [xorrior/randomps-scripts](https://github.com/xorrior/randomps-scripts) PowerShell Scripts focused on Post-Exploitation Capabilities
+- [**254**星][1y] [Py] [wenfengshi/ddos-dos-tools](https://github.com/wenfengshi/ddos-dos-tools) some sort of ddos-tools
+- [**254**星][4m] [Racket] [tyrchen/racket-book](https://github.com/tyrchen/racket-book) 关于racket的入门书
- [**254**星][7y] [Java] [sporst/swfretools](https://github.com/sporst/swfretools) SWF file reverse engineering tools
-- [**254**星][7d] [Java] [ripe-ncc/whois](https://github.com/ripe-ncc/whois) RIPE Database whois code repository
-- [**254**星][3m] [Py] [rhinosecuritylabs/iprotate_burp_extension](https://github.com/rhinosecuritylabs/iprotate_burp_extension) Extension for Burp Suite which uses AWS API Gateway to rotate your IP on every request.
-- [**254**星][3m] [HTML] [pagerduty/security-training](https://github.com/pagerduty/security-training) Public version of PagerDuty's employee security training courses.
-- [**254**星][3y] [Py] [lijiejie/iis_shortname_scanner](https://github.com/lijiejie/iis_shortname_scanner) an IIS shortname Scanner
+- [**254**星][3m] [Shell] [projectzeroindia/cve-2019-11510](https://github.com/projectzeroindia/cve-2019-11510) Exploit for Arbitrary File Read on Pulse Secure SSL VPN (CVE-2019-11510)
+- [**254**星][5m] [Go] [lesnuages/hershell](https://github.com/lesnuages/hershell) Multiplatform reverse shell generator
+- [**254**星][7m] [Go] [lavalamp-/ipv666](https://github.com/lavalamp-/ipv666) IPV6地址枚举工具. Go编写
- [**254**星][1y] [PHP] [interference-security/dvws](https://github.com/interference-security/dvws) OWSAP Damn Vulnerable Web Sockets (DVWS) is a vulnerable web application which works on web sockets for client-server communication.
+- [**254**星][22d] [Py] [google/docker-explorer](https://github.com/google/docker-explorer) A tool to help forensicate offline docker acquisitions
- [**254**星][3y] [Haskell] [galoisinc/haskell-tor](https://github.com/galoisinc/haskell-tor) A Haskell implementation of the Tor protocol.
- [**254**星][3m] [PHP] [dotboris/vuejs-serverside-template-xss](https://github.com/dotboris/vuejs-serverside-template-xss) Demo of a Vue.js app that mixes both clientside templates and serverside templates leading to an XSS vulnerability
-- [**254**星][3y] [Py] [airsage/petrel](https://github.com/airsage/petrel) Tools for writing, submitting, debugging, and monitoring Storm topologies in pure Python
- [**254**星][2y] [Py] [1n3/wordpress-xmlrpc-brute-force-exploit](https://github.com/1n3/wordpress-xmlrpc-brute-force-exploit) Wordpress XMLRPC System Multicall Brute Force Exploit (0day) by 1N3 @ CrowdShield
-- [**253**星][8m] [Shell] [thelinuxchoice/saycheese](https://github.com/thelinuxchoice/saycheese) Grab target's webcam shots by link
-- [**253**星][6m] [Shell] [ctfhacker/epictreasure](https://github.com/ctfhacker/EpicTreasure) Batteries included CTF VM
-- [**253**星][5m] [zhaoweiho/web-sec-interview](https://github.com/zhaoweiho/web-sec-interview) Information Security (Web Security/Penetration Testing Direction) Interview Questions/Solutions 信息安全(Web安全/渗透测试方向)面试题/解题思路
-- [**253**星][2y] [PowerShell] [xorrior/randomps-scripts](https://github.com/xorrior/randomps-scripts) PowerShell Scripts focused on Post-Exploitation Capabilities
-- [**253**星][4m] [Racket] [tyrchen/racket-book](https://github.com/tyrchen/racket-book) 关于racket的入门书
-- [**253**星][4y] [Py] [smaash/snitch](https://github.com/smaash/snitch) information gathering via dorks
-- [**253**星][14d] [C] [proftpd/proftpd](https://github.com/proftpd/proftpd) a highly configurable FTP daemon for Unix and Unix-like operating systems
-- [**253**星][26d] [C] [pbhogan/scrypt](https://github.com/pbhogan/scrypt) A Ruby gem with native C extension for the scrypt password hashing algorithm.
-- [**253**星][1y] [Shell] [m4ll0k/autonse](https://github.com/m4ll0k/autonse) Massive NSE (Nmap Scripting Engine) AutoSploit and AutoScanner
-- [**253**星][7m] [Go] [lavalamp-/ipv666](https://github.com/lavalamp-/ipv666) IPV6地址枚举工具. Go编写
-- [**253**星][3m] [Jupyter Notebook] [jmartinezheras/2018-machinelearning-lectures-esa](https://github.com/jmartinezheras/2018-machinelearning-lectures-esa) Machine Learning Lectures at the European Space Agency (ESA) in 2018
-- [**253**星][13d] [C] [icing/mod_md](https://github.com/icing/mod_md) Let's Encrypt (ACME) support for Apache httpd
-- [**253**星][20d] [Py] [google/docker-explorer](https://github.com/google/docker-explorer) A tool to help forensicate offline docker acquisitions
+- [**253**星][2m] [Go] [ihciah/rabbit-tcp](https://github.com/ihciah/rabbit-tcp) A multi-connection TCP forwarder/accelerator
+- [**253**星][9d] [PS] [bc-security/empire](https://github.com/bc-security/empire) Empire is a PowerShell and Python post-exploitation agent.
+- [**253**星][3m] [C] [seemoo-lab/owl](https://github.com/seemoo-lab/owl) An open Apple Wireless Direct Link (AWDL) implementation written in C
+- [**253**星][16d] [thelsa/cs-checklist](https://github.com/thelsa/cs-checklist) PC客户端(C-S架构)渗透测试checklist / Client side(C-S) penestration checklist
+- [**253**星][1m] [TS] [tensorflow/tfjs-tsne](https://github.com/tensorflow/tfjs-tsne) a improved tSNE implementation that runs in the browser.
+- [**253**星][3y] [Py] [rickey-g/fancybear](https://github.com/rickey-g/fancybear) Fancy Bear Source Code
+- [**253**星][5d] [C] [proftpd/proftpd](https://github.com/proftpd/proftpd) a highly configurable FTP daemon for Unix and Unix-like operating systems
+- [**253**星][28d] [C] [pbhogan/scrypt](https://github.com/pbhogan/scrypt) A Ruby gem with native C extension for the scrypt password hashing algorithm.
+- [**253**星][12m] [Java] [owasp/owasp-java-encoder](https://github.com/owasp/owasp-java-encoder) The OWASP Java Encoder is a Java 1.5+ simple-to-use drop-in high-performance encoder class with no dependencies and little baggage. This project will help Java web developers defend against Cross Site Scripting!
+- [**253**星][16d] [C] [icing/mod_md](https://github.com/icing/mod_md) Let's Encrypt (ACME) support for Apache httpd
+- [**253**星][5d] [Py] [duo-labs/dlint](https://github.com/duo-labs/dlint) Dlint is a tool for encouraging best coding practices and helping ensure we're writing secure Python code.
- [**253**星][4y] [Py] [danmcinerney/fakeap](https://github.com/danmcinerney/fakeap) Create fake AP in Kali with 1 command
+- [**253**星][21d] [Py] [cloudflare/python-cloudflare](https://github.com/cloudflare/python-cloudflare) Python wrapper for the Cloudflare Client API v4
- [**253**星][1y] [C] [benjamin-42/trident](https://github.com/benjamin-42/trident)
-- [**253**星][14d] [HTML] [ansible/community](https://github.com/ansible/community) This repository is for management of all Ansible community related initiatives.
-- [**253**星][3m] [Py] [amimo/dcc](https://github.com/amimo/dcc) DCC (Dex-to-C Compiler) is method-based aot compiler that can translate DEX code to C code.
-- [**252**星][3m] [Shell] [sprov065/sprov-ui](https://github.com/sprov065/sprov-ui) 一个支持多协议多用户的v2ray Web面板
-- [**252**星][12m] [C++] [comaeio/swishdbgext](https://github.com/comaeio/SwishDbgExt) Incident Response & Digital Forensics Debugging Extension
+- [**253**星][2m] [Py] [b16f00t/whapa](https://github.com/b16f00t/whapa) WhatsApp Parser Toolset v1.14
+- [**253**星][3d] [Jupyter Notebook] [aws-samples/aws-security-workshops](https://github.com/aws-samples/aws-security-workshops) A collection of the latest AWS Security workshops
+- [**252**星][6m] [Shell] [ctfhacker/epictreasure](https://github.com/ctfhacker/EpicTreasure) Batteries included CTF VM
+- [**252**星][1y] [C++] [comaeio/swishdbgext](https://github.com/comaeio/SwishDbgExt) Incident Response & Digital Forensics Debugging Extension
- [**252**星][4y] [Shell] [nccgroup/vlan-hopping---frogger](https://github.com/nccgroup/vlan-hopping---frogger) Simple VLAN enumeration and hopping script.
- [**252**星][1y] [C] [v-e-o/poc](https://github.com/v-e-o/poc) PoC of CVE/Exploit
-- [**252**星][3y] [Py] [rickey-g/fancybear](https://github.com/rickey-g/fancybear) Fancy Bear Source Code
-- [**252**星][10m] [C++] [ramadhanamizudin/malware](https://github.com/ramadhanamizudin/malware) Malware Samples. Uploaded to GitHub for those want to analyse the code. Code mostly from:
-- [**252**星][3m] [Py] [qunarcorp/open_dnsdb](https://github.com/qunarcorp/open_dnsdb) OpenDnsdb 是去哪儿网OPS团队开源的基于Python语言的DNS管理系统
-- [**252**星][11m] [Java] [owasp/owasp-java-encoder](https://github.com/owasp/owasp-java-encoder) The OWASP Java Encoder is a Java 1.5+ simple-to-use drop-in high-performance encoder class with no dependencies and little baggage. This project will help Java web developers defend against Cross Site Scripting!
-- [**252**星][14d] [Vue] [nluedtke/linux_kernel_cves](https://github.com/nluedtke/linux_kernel_cves) Tracking CVEs for the linux Kernel
+- [**252**星][4m] [Py] [thewhiteh4t/finalrecon](https://github.com/thewhiteh4t/finalrecon) OSINT Tool for All-In-One Web Reconnaissance
+- [**252**星][4d] [ObjC] [strongbox-password-safe/strongbox](https://github.com/strongbox-password-safe/strongbox) A KeePass/Password Safe Client for iOS and OS X
+- [**252**星][2d] [Vue] [nluedtke/linux_kernel_cves](https://github.com/nluedtke/linux_kernel_cves) Tracking CVEs for the linux Kernel
- [**252**星][6m] [HTML] [mikewest/http-state-tokens](https://github.com/mikewest/http-state-tokens) Incrementally better HTTP state management.
-- [**252**星][1y] [PowerShell] [mdsecresearch/lyncsniper](https://github.com/mdsecresearch/lyncsniper) A tool for penetration testing Skype for Business and Lync deployments
+- [**252**星][1y] [PS] [mdsecresearch/lyncsniper](https://github.com/mdsecresearch/lyncsniper) 用于渗透测试的工具,可在内部或Office 365中托管Lync和Skype for Business部署。
- [**252**星][10m] [jeffzh3ng/insectsawake](https://github.com/jeffzh3ng/insectsawake) Network Vulnerability Scanner
- [**252**星][5m] [Py] [jcesarstef/dotdotslash](https://github.com/jcesarstef/dotdotslash) Python脚本, 查找目录遍历漏洞
+- [**252**星][7m] [Py] [itskindred/procspy](https://github.com/itskindred/procspy) Python tool that monitors and logs user-run commands on a Linux system for either offensive or defensive purposes..
+- [**252**星][9m] [Visual Basic .NET] [houjingyi233/office-exploit-case-study](https://github.com/houjingyi233/office-exploit-case-study)
- [**252**星][2y] [C] [hfiref0x/cve-2015-1701](https://github.com/hfiref0x/cve-2015-1701) Win32k LPE vulnerability used in APT attack
-- [**252**星][9m] [Go] [erbbysam/dnsgrep](https://github.com/erbbysam/dnsgrep) Quickly Search Large DNS Datasets
-- [**252**星][19d] [Py] [cloudflare/python-cloudflare](https://github.com/cloudflare/python-cloudflare) Python wrapper for the Cloudflare Client API v4
-- [**252**星][3m] [Py] [clemfromspace/scrapy-selenium](https://github.com/clemfromspace/scrapy-selenium) Scrapy middleware to handle javascript pages using selenium
-- [**251**星][4y] [Py] [whitepacket/zib-trojan](https://github.com/whitepacket/zib-trojan) The Open Tor Botnet (ZIB); Python-based forever-FUD IRC Trojan
-- [**251**星][1m] [TypeScript] [tensorflow/tfjs-tsne](https://github.com/tensorflow/tfjs-tsne) a improved tSNE implementation that runs in the browser.
-- [**251**星][21d] [Swift] [prateek147/dvia-v2](https://github.com/prateek147/dvia-v2) Damn Vulnerable iOS App (DVIA) is an iOS application that is damn vulnerable. Its main goal is to provide a platform to mobile security enthusiasts/professionals or students to test their iOS penetration testing skills in a legal environment. This project is developed and maintained by @prateekg147. The vulnerabilities and solutions covered in t…
-- [**251**星][5m] [Go] [lesnuages/hershell](https://github.com/lesnuages/hershell) Multiplatform reverse shell generator
-- [**251**星][7m] [Py] [itskindred/procspy](https://github.com/itskindred/procspy) Python tool that monitors and logs user-run commands on a Linux system for either offensive or defensive purposes..
-- [**251**星][9m] [Visual Basic] [houjingyi233/office-exploit-case-study](https://github.com/houjingyi233/office-exploit-case-study)
-- [**251**星][12d] [Py] [guimaizi/get_domain](https://github.com/guimaizi/get_domain) 域名收集与监测
-- [**251**星][2y] [Objective-C] [feicong/macbook](https://github.com/feicong/macbook) 《macOS软件安全与逆向分析》随书源码
-- [**251**星][9m] [C] [chef-koch/android-vulnerabilities-overview](https://github.com/chef-koch/android-vulnerabilities-overview) An small overview of known Android vulnerabilities
+- [**252**星][2y] [Py] [deadpix3l/cryptsky](https://github.com/deadpix3l/cryptsky) A simple, fully python ransomware PoC
+- [**252**星][9m] [C] [chef-koch/android-vulnerabilities-overview](https://github.com/chef-koch/android-vulnerabilities-overview) An small overview of known Android vulnerabilities
+- [**252**星][5y] [Py] [allfro/sploitego](https://github.com/allfro/sploitego) a local pen-test transform package that uses the Canari Framework for local transform execution in Maltego.
+- [**251**星][6m] [isafeblue/mind-map](https://github.com/isafeblue/mind-map) 超详细的渗透测试思维导图
+- [**251**星][3m] [Shell] [sprov065/sprov-ui](https://github.com/sprov065/sprov-ui) 一个支持多协议多用户的v2ray Web面板
+- [**251**星][5m] [Shell] [thesecondsun/revssl](https://github.com/thesecondsun/revssl) A simple script that automates generation of OpenSSL reverse shells
+- [**251**星][30d] [Py] [rvrsh3ll/findfrontabledomains](https://github.com/rvrsh3ll/findfrontabledomains) Search for potential frontable domains
+- [**251**星][5m] [Py] [redteamoperations/pivotsuite](https://github.com/redteamoperations/pivotsuite) Network Pivoting Toolkit
+- [**251**星][1m] [Py] [platomav/mcextractor](https://github.com/platomav/mcextractor) Intel, AMD, VIA & Freescale Microcode Extraction Tool
+- [**251**星][2y] [Java] [panhongwei/tracereader](https://github.com/panhongwei/tracereader) android小工具,通过读取trace文件,回溯整个整个程序执行调用树。
+- [**251**星][5m] [Java] [nfcgate/nfcgate](https://github.com/nfcgate/nfcgate) An NFC relay application for Android
+- [**251**星][13d] [Swift] [netyouli/whc_scan](https://github.com/netyouli/whc_scan) 高效强大扫描分析iOS和Android项目里没有使用的类Mac开源工具,清理项目垃圾类,让项目结构干净清爽,升级维护得心应手. Efficient and powerful scanning analysis iOS and Android project no classes used in Mac open source tools, cleaning rubbish class project, make project structure clean and relaxed, upgrade maintenance
+- [**251**星][1y] [Py] [kootenpv/sky](https://github.com/kootenpv/sky) a web scraping framework
+- [**251**星][4m] [C#] [kevin-robertson/inveighzero](https://github.com/kevin-robertson/inveighzero) Windows C# LLMNR/mDNS/NBNS/DNS spoofer/man-in-the-middle tool
+- [**251**星][6d] [Py] [jaegertracing/jaeger-client-python](https://github.com/jaegertracing/jaeger-client-python) Jaeger Bindings for Python OpenTracing API
+- [**251**星][2y] [ObjC] [feicong/macbook](https://github.com/feicong/macbook) 《macOS软件安全与逆向分析》随书源码
+- [**251**星][2m] [Py] [cvandeplas/pystemon](https://github.com/cvandeplas/pystemon) Monitoring tool for PasteBin-alike sites written in Python. Inspired by pastemon
- [**251**星][1y] [C#] [brianhama/de4dot](https://github.com/brianhama/de4dot) .NET deobfuscator and unpacker.
-- [**251**星][5y] [Py] [allfro/sploitego](https://github.com/allfro/sploitego) Maltego Penetration Testing Transforms
-- [**250**星][7d] [PowerShell] [bc-security/empire](https://github.com/bc-security/empire) Empire is a PowerShell and Python post-exploitation agent.
-- [**250**星][3m] [C] [seemoo-lab/owl](https://github.com/seemoo-lab/owl) An open Apple Wireless Direct Link (AWDL) implementation written in C
-- [**250**星][6m] [isafeblue/mind-map](https://github.com/isafeblue/mind-map) 超详细的渗透测试思维导图
+- [**250**星][15d] [neo23x0/auditd](https://github.com/neo23x0/auditd) Best Practice Auditd Configuration
- [**250**星][3y] [Py] [prahladyeri/hotspotd](https://github.com/prahladyeri/hotspotd) Simple daemon to create a wifi hotspot on Linux
- [**250**星][11m] [crytic/awesome-ethereum-security](https://github.com/crytic/awesome-ethereum-security) A curated list of awesome Ethereum security references
-- [**250**星][9m] [Py] [wh0ale/src-experience](https://github.com/wh0ale/src-experience) 工欲善其事,必先利其器
-- [**250**星][5m] [Shell] [thesecondsun/revssl](https://github.com/thesecondsun/revssl) A simple script that automates generation of OpenSSL reverse shells
-- [**250**星][5m] [Py] [redteamoperations/pivotsuite](https://github.com/redteamoperations/pivotsuite) Network Pivoting Toolkit
-- [**250**星][2y] [Java] [panhongwei/tracereader](https://github.com/panhongwei/tracereader) android小工具,通过读取trace文件,回溯整个整个程序执行调用树。
-- [**250**星][2y] [PowerShell] [killswitch-gui/pentesting-scripts](https://github.com/killswitch-gui/pentesting-scripts) A ton of helpful tools
+- [**250**星][4y] [Py] [wooyun/tangscan](https://github.com/wooyun/tangscan) 企业在线安全平台
+- [**250**星][4y] [Py] [whitepacket/zib-trojan](https://github.com/whitepacket/zib-trojan) The Open Tor Botnet (ZIB); Python-based forever-FUD IRC Trojan
+- [**250**星][10m] [Py] [wh0ale/src-experience](https://github.com/wh0ale/src-experience) 工欲善其事,必先利其器
+- [**250**星][4y] [PHP] [phpwhois/phpwhois](https://github.com/phpwhois/phpwhois) phpWhois general repository
+- [**250**星][6d] [TS] [ninoseki/mitaka](https://github.com/ninoseki/mitaka) A browser extension for OSINT search
+- [**250**星][20d] [C] [nccgroup/sniffle](https://github.com/nccgroup/sniffle) A sniffer for Bluetooth 5 and 4.x LE
+- [**250**星][2y] [PS] [killswitch-gui/pentesting-scripts](https://github.com/killswitch-gui/pentesting-scripts) A ton of helpful tools
- [**250**星][1y] [Py] [igio90/frick](https://github.com/igio90/frick) aka the first debugger built on top of frida
-- [**250**星][2y] [Py] [deadpix3l/cryptsky](https://github.com/deadpix3l/cryptsky) A simple, fully python ransomware PoC
+- [**250**星][3y] [C] [guanchao/appprotect](https://github.com/guanchao/appprotect) 整理一些app常见的加固方法,包括java层、native层和资源文件加固等
+- [**250**星][4m] [Py] [fsgmhoward/shadowsocks-py-mu](https://github.com/fsgmhoward/shadowsocks-py-mu) A fast tunnel proxy server for multiple users
+- [**250**星][2y] [Py] [dbgx/lldb.nvim](https://github.com/dbgx/lldb.nvim) Debugger integration with a focus on ease-of-use.
- [**250**星][3y] [Py] [census/choronzon](https://github.com/census/choronzon) An evolutionary knowledge-based fuzzer
-- [**250**星][21d] [Jupyter Notebook] [aws-samples/aws-security-workshops](https://github.com/aws-samples/aws-security-workshops) A collection of the latest AWS Security workshops
- [**250**星][1y] [Py] [avramit/instahack](https://github.com/avramit/instahack) Instagram bruteforce tool
- [**250**星][3y] [Py] [asweigart/codebreaker](https://github.com/asweigart/codebreaker) "Hacking Secret Ciphers with Python" programs
-- [**249**星][4y] [Py] [wooyun/tangscan](https://github.com/wooyun/tangscan) 企业在线安全平台
-- [**249**星][28d] [Py] [rvrsh3ll/findfrontabledomains](https://github.com/rvrsh3ll/findfrontabledomains) Search for potential frontable domains
+- [**249**星][15d] [Py] [zephrfish/googd0rker](https://github.com/zephrfish/googd0rker) GoogD0rker is a tool for firing off google dorks against a target domain, it is purely for OSINT against a specific target domain. READ the readme before messaging or tweeting me.
+- [**249**星][16d] [Java] [xuxueli/xxl-excel](https://github.com/xuxueli/xxl-excel) A flexible tool for translating Java objects and Excel documents.(Java对象和Excel转换工具XXL-EXCEL)
+- [**249**星][6d] [C] [tpm2-software/tpm2-tools](https://github.com/tpm2-software/tpm2-tools) The source repository for the TPM (Trusted Platform Module) 2 tools
+- [**249**星][25d] [Py] [tipam/pi3d](https://github.com/tipam/pi3d) Simple, yet powerful, 3D Python graphics library for beginners and school children running on the Raspberry Pi.
- [**249**星][7y] [rentzsch/mach_star](https://github.com/rentzsch/mach_star) code injection and function overriding for Mac OS X
-- [**249**星][3m] [Shell] [projectzeroindia/cve-2019-11510](https://github.com/projectzeroindia/cve-2019-11510) Exploit for Arbitrary File Read on Pulse Secure SSL VPN (CVE-2019-11510)
-- [**249**星][4y] [PHP] [phpwhois/phpwhois](https://github.com/phpwhois/phpwhois) phpWhois general repository
-- [**249**星][1y] [Py] [kootenpv/sky](https://github.com/kootenpv/sky) a web scraping framework
-- [**249**星][4m] [C#] [kevin-robertson/inveighzero](https://github.com/kevin-robertson/inveighzero) Windows C# LLMNR/mDNS/NBNS/DNS spoofer/man-in-the-middle tool
+- [**249**星][2m] [owasp/api-security](https://github.com/owasp/api-security) OWASP API Security Project
+- [**249**星][3y] [Py] [livz/cloacked-pixel](https://github.com/livz/cloacked-pixel) LSB steganography and detection
+- [**249**星][2y] [Mask] [lcatro/fuzzing-imagemagick](https://github.com/lcatro/fuzzing-imagemagick) OpenSource My ImageMagick Fuzzer ..
- [**249**星][3y] [JS] [jesusprubio/bluebox-ng](https://github.com/jesusprubio/bluebox-ng) Pentesting framework using Node.js powers, focused in VoIP.
- [**249**星][8m] [C] [jakeajames/rootlessjb](https://github.com/jakeajames/rootlessjb)
- [**249**星][2y] [Py] [intezer/docker-ida](https://github.com/intezer/docker-ida) 在Docker容器中执行IDA, 以自动化/可扩展/分布式的方式执行IDAPython脚本
-- [**249**星][12d] [C] [gpg/gnupg](https://github.com/gpg/gnupg) The GNU Privacy Guard
-- [**249**星][4m] [Py] [fsgmhoward/shadowsocks-py-mu](https://github.com/fsgmhoward/shadowsocks-py-mu) A fast tunnel proxy server for multiple users
-- [**249**星][12d] [Py] [duo-labs/dlint](https://github.com/duo-labs/dlint) Dlint is a tool for encouraging best coding practices and helping ensure we're writing secure Python code.
-- [**249**星][2y] [Py] [dbgx/lldb.nvim](https://github.com/dbgx/lldb.nvim) Debugger integration with a focus on ease-of-use.
-- [**249**星][2m] [Py] [cvandeplas/pystemon](https://github.com/cvandeplas/pystemon) Monitoring tool for PasteBin-alike sites written in Python. Inspired by pastemon
+- [**249**星][2d] [C] [gpg/gnupg](https://github.com/gpg/gnupg) The GNU Privacy Guard
+- [**249**星][2y] [Java] [godlikewangjun/dexknife-wj](https://github.com/godlikewangjun/dexknife-wj) apk加固插件 带签名校验、dex加密、资源混淆
+- [**249**星][6d] [HTML] [gfw-breaker/open-proxy](https://github.com/gfw-breaker/open-proxy) 一键部署被墙网站反向代理; 免翻墙访问被禁网站
+- [**249**星][8m] [Py] [dirkjanm/adidnsdump](https://github.com/dirkjanm/adidnsdump) Active Directory Integrated DNS dumping by any authenticated user
- [**249**星][2y] [Py] [0x4d31/salt-scanner](https://github.com/0x4d31/salt-scanner) Linux vulnerability scanner based on Salt Open and Vulners audit API, with Slack notifications and JIRA integration
+- [**248**星][1m] [Rust] [falconre/falcon](https://github.com/falconre/falcon) Formal Binary Analysis Framework in Rust
- [**248**星][1y] [batchfile] [zerodot1/coinblockerlists](https://github.com/zerodot1/coinblockerlists) Simple lists that can help prevent cryptomining in the browser or other applications.
+- [**248**星][1m] [PS] [sdcampbell/internal-pentest-playbook](https://github.com/sdcampbell/internal-pentest-playbook) Internal Network Penetration Test Playbook
+- [**248**星][2y] [Py] [rxwx/cve-2018-0802](https://github.com/rxwx/cve-2018-0802) PoC Exploit for CVE-2018-0802 (and optionally CVE-2017-11882)
- [**248**星][1m] [Py] [quantopian/qdb](https://github.com/quantopian/qdb) Quantopian Remote Debugger for Python
- [**248**星][2y] [Java] [portswigger/collaborator-everywhere](https://github.com/portswigger/collaborator-everywhere) Burp Suite 扩展,通过注入非侵入性 headers 来增强代理流量,通过引起 Pingback 到 Burp Collaborator 来揭露后端系统
-- [**248**星][11d] [Swift] [netyouli/whc_scan](https://github.com/netyouli/whc_scan) 高效强大扫描分析iOS和Android项目里没有使用的类Mac开源工具,清理项目垃圾类,让项目结构干净清爽,升级维护得心应手. Efficient and powerful scanning analysis iOS and Android project no classes used in Mac open source tools, cleaning rubbish class project, make project structure clean and relaxed, upgrade maintenance
-- [**248**星][18d] [C] [nccgroup/sniffle](https://github.com/nccgroup/sniffle) A sniffer for Bluetooth 5 and 4.x LE
- [**248**星][2y] [C++] [minhaskamal/stupidkeylogger](https://github.com/minhaskamal/stupidkeylogger) A Terrific Keystroke Recorder (keylogger-key-logger-spyware-spy-trojan-simple-virus-for-windows-10-7-xp-smart-c-c++-cpp-code)
-- [**248**星][2y] [Mask] [lcatro/fuzzing-imagemagick](https://github.com/lcatro/fuzzing-imagemagick) OpenSource My ImageMagick Fuzzer ..
-- [**248**星][12d] [Py] [jaegertracing/jaeger-client-python](https://github.com/jaegertracing/jaeger-client-python) Jaeger Bindings for Python OpenTracing API
- [**248**星][5y] [Ruby] [hakirisec/hakiri_toolbelt](https://github.com/hakirisec/hakiri_toolbelt) Secure Ruby apps with Hakiri
-- [**248**星][3y] [C] [guanchao/appprotect](https://github.com/guanchao/appprotect) 整理一些app常见的加固方法,包括java层、native层和资源文件加固等
- [**248**星][2y] [C] [dosomder/iovyroot](https://github.com/dosomder/iovyroot) CVE-2015-1805 root tool
-- [**248**星][2m] [Py] [b16f00t/whapa](https://github.com/b16f00t/whapa) WhatsApp Parser Toolset v1.14
-- [**247**星][1m] [Rust] [falconre/falcon](https://github.com/falconre/falcon) Formal Binary Analysis Framework in Rust
-- [**247**星][13d] [Py] [zephrfish/googd0rker](https://github.com/zephrfish/googd0rker) GoogD0rker is a tool for firing off google dorks against a target domain, it is purely for OSINT against a specific target domain. READ the readme before messaging or tweeting me.
-- [**247**星][1y] [Py] [wenfengshi/ddos-dos-tools](https://github.com/wenfengshi/ddos-dos-tools) some sort of ddos-tools
+- [**247**星][1y] [Py] [warflop/cloudbunny](https://github.com/warflop/cloudbunny) CloudBunny is a tool to capture the real IP of the server that uses a WAF as a proxy or protection. In this tool we used three search engines to search domain information: Shodan, Censys and Zoomeye.
- [**247**星][5m] [C++] [tonychen56/hackertools](https://github.com/tonychen56/hackertools) 使用MFC编写的病毒技术合集
-- [**247**星][23d] [Py] [tipam/pi3d](https://github.com/tipam/pi3d) Simple, yet powerful, 3D Python graphics library for beginners and school children running on the Raspberry Pi.
-- [**247**星][2m] [Shell] [solomonsklash/chomp-scan](https://github.com/solomonsklash/chomp-scan) A scripted pipeline of tools to streamline the bug bounty/penetration test reconnaissance phase, so you can focus on chomping bugs.
-- [**247**星][5m] [Java] [nfcgate/nfcgate](https://github.com/nfcgate/nfcgate) An NFC relay application for Android
+- [**247**星][2y] [Py] [spaze/oprah-proxy](https://github.com/spaze/oprah-proxy) Generate credentials for Opera's "browser VPN"
+- [**247**星][3m] [Shell] [solomonsklash/chomp-scan](https://github.com/solomonsklash/chomp-scan) A scripted pipeline of tools to streamline the bug bounty/penetration test reconnaissance phase, so you can focus on chomping bugs.
- [**247**星][4y] [Py] [n0tr00t/beebeeto-framework](https://github.com/n0tr00t/beebeeto-framework) 规范化POC/EXP平台
-- [**247**星][3y] [Py] [livz/cloacked-pixel](https://github.com/livz/cloacked-pixel) LSB steganography and detection
-- [**247**星][2y] [PowerShell] [leoloobeek/lapstoolkit](https://github.com/leoloobeek/lapstoolkit) Tool to audit and attack LAPS environments
-- [**247**星][2m] [Py] [gildasio/h2t](https://github.com/gildasio/h2t) h2t (HTTP Hardening Tool) scans a website and suggests security headers to apply
+- [**247**星][1y] [Perl] [mrash/psad](https://github.com/mrash/psad) iptables 的入侵检测和日志分析
+- [**247**星][22d] [C] [mame82/logitacker](https://github.com/mame82/logitacker) Enumerate and test Logitech wireless input devices for vulnerabilities with a nRF52840 radio dongle.
+- [**247**星][5m] [JS] [lewisardern/bxss](https://github.com/lewisardern/bxss) bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.
+- [**247**星][2y] [PS] [leoloobeek/lapstoolkit](https://github.com/leoloobeek/lapstoolkit) Tool to audit and attack LAPS environments
+- [**247**星][1y] [Py] [hsury/geetest3-crack](https://github.com/hsury/geetest3-crack)
+- [**247**星][4m] [C] [gbps/gbhv](https://github.com/gbps/gbhv) Simple x86-64 VT-x Hypervisor with EPT Hooking
+- [**247**星][2y] [Shell] [freelancepentester/ddos-script](https://github.com/freelancepentester/ddos-script) All things to do after installing Kali Linux and Add more awesome hacking tools to your Kali Linux system
+- [**247**星][1m] [Java] [fanhua1994/dzfilter](https://github.com/fanhua1994/dzfilter) 【停止维护】使用DFA算法实现的内容安全,反垃圾,智能鉴黄,敏感词过滤,不良信息检测,文本校验,敏感词检测,包括关键词提取,过滤html标签等。
- [**247**星][2y] [Go] [dzonerzy/gowapt](https://github.com/dzonerzy/gowapt) Go Web Application Penetration Test
-- [**247**星][7m] [Py] [dirkjanm/adidnsdump](https://github.com/dirkjanm/adidnsdump) Active Directory Integrated DNS dumping by any authenticated user
-- [**246**星][14d] [Java] [xuxueli/xxl-excel](https://github.com/xuxueli/xxl-excel) A flexible tool for translating Java objects and Excel documents.(Java对象和Excel转换工具XXL-EXCEL)
-- [**246**星][1y] [Py] [warflop/cloudbunny](https://github.com/warflop/cloudbunny) CloudBunny is a tool to capture the real IP of the server that uses a WAF as a proxy or protection. In this tool we used three search engines to search domain information: Shodan, Censys and Zoomeye.
-- [**246**星][14d] [C] [tpm2-software/tpm2-tools](https://github.com/tpm2-software/tpm2-tools) The source repository for the TPM (Trusted Platform Module) 2 tools
+- [**247**星][3m] [Py] [corrad1nho/qomui](https://github.com/corrad1nho/qomui) Qomui (Qt OpenVPN Management UI)
+- [**246**星][1y] [Py] [boppreh/mouse](https://github.com/boppreh/mouse) Hook and simulate global mouse events in pure Python
+- [**246**星][1y] [Shell] [dylanbai8/v2ray_h2-tls_website_onekey](https://github.com/dylanbai8/v2ray_h2-tls_website_onekey) V2RAY 基于 CADDY 的 VMESS+H2+TLS+Website(Use Host)+Rinetd BBR 一键安装脚本
+- [**246**星][10d] [Shell] [bkuhlmann/mac_os-config](https://github.com/bkuhlmann/mac_os-config) Shell scripts for customized macOS machine setup and configuration.
+- [**246**星][17d] [Py] [susmithkrishnan/torghost](https://github.com/SusmithKrishnan/torghost) Tor anonimizer
+- [**246**星][6d] [Java] [nats-io/nats.java](https://github.com/nats-io/nats.java) Java client for NATS
- [**246**星][3y] [Py] [tcstool/fireaway](https://github.com/tcstool/fireaway) Next Generation Firewall Audit and Bypass Tool
-- [**246**星][2y] [Py] [spaze/oprah-proxy](https://github.com/spaze/oprah-proxy) Generate credentials for Opera's "browser VPN"
-- [**246**星][2y] [Py] [rxwx/cve-2018-0802](https://github.com/rxwx/cve-2018-0802) PoC Exploit for CVE-2018-0802 (and optionally CVE-2017-11882)
+- [**246**星][20d] [C++] [s0uthwest/futurerestore](https://github.com/s0uthwest/futurerestore) iOS upgrade and downgrade tool utilizing SHSH blobs
- [**246**星][1y] [Py] [rub-syssec/microcode](https://github.com/rub-syssec/microcode) Microcode Updates for the USENIX 2017 paper: Reverse Engineering x86 Processor Microcode
-- [**246**星][1m] [Py] [platomav/mcextractor](https://github.com/platomav/mcextractor) Intel, AMD, VIA & Freescale Microcode Extraction Tool
-- [**246**星][1y] [Perl] [mrash/psad](https://github.com/mrash/psad) iptables 的入侵检测和日志分析
-- [**246**星][12d] [Java] [mr-xn/penetration_testing_poc](https://github.com/mr-xn/penetration_testing_poc) 渗透测试有关的POC、EXP、脚本、提权、小工具等,欢迎补充、完善---About penetration-testing python-script poc html-poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce
- [**246**星][2y] [Py] [maian-tool/maian](https://github.com/maian-tool/maian) automatic tool for finding trace vulnerabilities in Ethereum smart contracts
-- [**246**星][5m] [JS] [lewisardern/bxss](https://github.com/lewisardern/bxss) bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.
- [**246**星][3y] [C] [jamesbarlow/icmptunnel](https://github.com/jamesbarlow/icmptunnel) Tunnel IP over ICMP.
-- [**246**星][2y] [Shell] [freelancepentester/ddos-script](https://github.com/freelancepentester/ddos-script) All things to do after installing Kali Linux and Add more awesome hacking tools to your Kali Linux system
+- [**246**星][4y] [Py] [jackgitgz/cnblogsspider](https://github.com/jackgitgz/cnblogsspider) 用scrapy采集cnblogs列表页爬虫
+- [**246**星][2m] [Py] [gildasio/h2t](https://github.com/gildasio/h2t) h2t (HTTP Hardening Tool) scans a website and suggests security headers to apply
+- [**246**星][2y] [Py] [gdelugre/ida-arm-system-highlight](https://github.com/gdelugre/ida-arm-system-highlight) 用于高亮和解码 ARM 系统指令
+- [**246**星][4m] [Py] [bontchev/pcodedmp](https://github.com/bontchev/pcodedmp) A VBA p-code disassembler
+- [**246**星][4y] [C] [begeekmyfriend/cuckoofilter](https://github.com/begeekmyfriend/cuckoofilter) Substitute for bloom filter.
- [**246**星][4m] [C] [ampotos/dynstruct](https://github.com/ampotos/dynstruct) Reverse engineering tool for automatic structure recovering and memory use analysis based on DynamoRIO and Capstone
- [**245**星][7y] [Ruby] [urbanesec/zackattack](https://github.com/urbanesec/ZackAttack) Unveiled at DEF CON 20, NTLM Relaying to ALL THE THINGS!
- [**245**星][2y] [ludiosarchive/unfixed-security-bugs](https://github.com/ludiosarchive/unfixed-security-bugs) 已公开但未修复的漏洞列表。包括Chrome、VirtualBox、WeeChat、Windows(7-10)等知名软件。
-- [**245**星][2y] [Py] [xyuanmu/checkiptools](https://github.com/xyuanmu/checkiptools) CheckIPTools 扫描谷歌IP以及实用IP转换小工具
-- [**245**星][1m] [PowerShell] [sdcampbell/internal-pentest-playbook](https://github.com/sdcampbell/internal-pentest-playbook) Internal Network Penetration Test Playbook
+- [**245**星][9d] [C++] [strazzere/android-scripts](https://github.com/strazzere/android-scripts) Android逆向脚本收集
+- [**245**星][2y] [C#] [sparkfunx/skimmer_scanner](https://github.com/sparkfunx/skimmer_scanner) A mobile app for detecting bluetooth gas pump credit card skimmers
- [**245**星][5m] [Shell] [peterpt/eternal_scanner](https://github.com/peterpt/eternal_scanner) 永恒之蓝漏洞的网络扫描器
- [**245**星][3y] [Java] [neophob/pixelcontroller](https://github.com/neophob/pixelcontroller) (LED) Matrix Control Software, supports various Hardware, Keywords: LED Matrix, OSC, Realtime, VJ, Arduino, Teensy, RPI
-- [**245**星][4y] [Py] [jackgitgz/cnblogsspider](https://github.com/jackgitgz/cnblogsspider) 用scrapy采集cnblogs列表页爬虫
+- [**245**星][4m] [PS] [nccgroup/azucar](https://github.com/nccgroup/azucar) Azure环境安全审计工具
- [**245**星][3m] [Py] [inquest/threatingestor](https://github.com/inquest/threatingestor) Extract and aggregate threat intelligence.
-- [**245**星][4m] [C] [gbps/gbhv](https://github.com/gbps/gbhv) Simple x86-64 VT-x Hypervisor with EPT Hooking
+- [**245**星][16d] [C++] [evpo/encryptpad](https://github.com/evpo/encryptpad) Minimalist secure text editor and binary encryptor that implements RFC 4880 Open PGP format: symmetrically encrypted, compressed and integrity protected. The editor can protect files with passwords, key files or both.
- [**245**星][7m] [ethicalhack3r/wordpress_plugin_security_testing_cheat_sheet](https://github.com/ethicalhack3r/wordpress_plugin_security_testing_cheat_sheet) WordPress插件安全测试备忘录。
+- [**245**星][2y] [PHP] [enygma/expose](https://github.com/enygma/expose) An Intrusion Detection System library loosely based on PHP IDS
- [**245**星][2y] [JS] [cryptogenic/ps4-4.55-kernel-exploit](https://github.com/cryptogenic/ps4-4.55-kernel-exploit) A fully implemented kernel exploit for the PS4 on 4.55FW
- [**245**星][12m] [Py] [crowdstrike/forensics](https://github.com/crowdstrike/forensics) Scripts and code referenced in CrowdStrike blog posts
-- [**245**星][4y] [C] [begeekmyfriend/cuckoofilter](https://github.com/begeekmyfriend/cuckoofilter) Substitute for bloom filter.
-- [**244**星][15d] [Py] [susmithkrishnan/torghost](https://github.com/SusmithKrishnan/torghost) Tor anonimizer
-- [**244**星][2m] [Java] [nats-io/nats.java](https://github.com/nats-io/nats.java) Java client for NATS
+- [**245**星][20d] [Java] [c0ny1/jsencrypter](https://github.com/c0ny1/jsencrypter) 一个用于加密传输爆破的Burp Suite插件
- [**244**星][2y] [C] [zer0mem0ry/kernelbhop](https://github.com/zer0mem0ry/kernelbhop) Cheat that uses a driver instead WinAPI for Reading / Writing memory.
+- [**244**星][2y] [Py] [xyuanmu/checkiptools](https://github.com/xyuanmu/checkiptools) CheckIPTools 扫描谷歌IP以及实用IP转换小工具
+- [**244**星][11d] [Py] [voulnet/barq](https://github.com/voulnet/barq) The AWS Cloud Post Exploitation framework!
- [**244**星][8m] [C++] [ucsb-seclab/difuze](https://github.com/ucsb-seclab/difuze) 针对 Linux 内核驱动的 Fuzzer
-- [**244**星][7d] [C++] [strazzere/android-scripts](https://github.com/strazzere/android-scripts) Android逆向脚本收集
-- [**244**星][18d] [C++] [s0uthwest/futurerestore](https://github.com/s0uthwest/futurerestore) iOS upgrade and downgrade tool utilizing SHSH blobs
- [**244**星][4m] [Java] [righettod/poc-graphql](https://github.com/righettod/poc-graphql) Research on GraphQL from an AppSec point of view.
+- [**244**星][1m] [platomav/cpumicrocodes](https://github.com/platomav/cpumicrocodes) Intel, AMD, VIA & Freescale CPU Microcode Repositories
+- [**244**星][2y] [Shell] [pentester-io/commonspeak](https://github.com/pentester-io/commonspeak) 利用谷歌BigQuery 平台的公共数据集生成 wordlist
+- [**244**星][2y] [Py] [neohapsis/creddump7](https://github.com/neohapsis/creddump7)
- [**244**星][3y] [misterch0c/awesome-hacking](https://github.com/misterch0c/awesome-hacking) A collection of various awesome lists for hackers, pentesters and security researchers
+- [**244**星][2m] [C++] [microsoft/krabsetw](https://github.com/microsoft/krabsetw) KrabsETW provides a modern C++ wrapper and a .NET wrapper around the low-level ETW trace consumption functions.
- [**244**星][4y] [Py] [metac0rtex/githarvester](https://github.com/metac0rtex/githarvester) harvesting information from GitHub
-- [**244**星][1y] [Py] [hsury/geetest3-crack](https://github.com/hsury/geetest3-crack)
-- [**244**星][2y] [Py] [gdelugre/ida-arm-system-highlight](https://github.com/gdelugre/ida-arm-system-highlight) 用于高亮和解码 ARM 系统指令
+- [**244**星][3m] [C] [leebrotherston/tls-fingerprinting](https://github.com/leebrotherston/tls-fingerprinting) TLS Fingerprinting
+- [**244**星][2y] [Py] [jakespringer/angr_ctf](https://github.com/jakespringer/angr_ctf)
+- [**244**星][4m] [Py] [initroot/burpjslinkfinder](https://github.com/initroot/burpjslinkfinder) Burp Extension for a passive scanning JS files for endpoint links.
+- [**244**星][2y] [hsis007/useful_websites_for_pentester](https://github.com/hsis007/useful_websites_for_pentester) This repository is to make life of the pentester easy as it is a collection of the websites that can be used by pentesters for day to day studies and to remain updated.
- [**244**星][5y] [C++] [gametutorials/tutorials](https://github.com/gametutorials/tutorials) This holds the tutorials for GameTutorials.com
-- [**244**星][14d] [C++] [evpo/encryptpad](https://github.com/evpo/encryptpad) Minimalist secure text editor and binary encryptor that implements RFC 4880 Open PGP format: symmetrically encrypted, compressed and integrity protected. The editor can protect files with passwords, key files or both.
-- [**244**星][30d] [Py] [cisco-config-analysis-tool/ccat](https://github.com/cisco-config-analysis-tool/ccat) Cisco Config Analysis Tool
-- [**244**星][4m] [Py] [bontchev/pcodedmp](https://github.com/bontchev/pcodedmp) A VBA p-code disassembler
+- [**244**星][2y] [C] [espressif/esp32-nesemu](https://github.com/espressif/esp32-nesemu) Proof-of-concept NES emulator for the ESP32
+- [**244**星][3y] [Py] [donnchac/onionbalance](https://github.com/donnchac/onionbalance) OnionBalance provides load-balancing and redundancy for Tor hidden services
+- [**244**星][8d] [Py] [cisco-config-analysis-tool/ccat](https://github.com/cisco-config-analysis-tool/ccat) Cisco Config Analysis Tool
- [**244**星][2y] [HTML] [arno0x/embedinhtml](https://github.com/arno0x/embedinhtml) Embed and hide any file in an HTML file
- [**244**星][9m] [Py] [antoniococo/sharpyshell](https://github.com/antoniococo/sharpyshell) ASP.NET webshell,小型,混淆,针对C# Web App
- [**244**星][1y] [C#] [0xbadjuju/wheresmyimplant](https://github.com/0xbadjuju/wheresmyimplant) A Bring Your Own Land Toolkit that Doubles as a WMI Provider
+- [**244**星][8m] [0x4d31/awesome-oscp](https://github.com/0x4d31/awesome-oscp) A curated list of awesome OSCP resources
+- [**243**星][23d] [Py] [0xeb-bp/bluekeep](https://github.com/0xeb-bp/bluekeep) Public work for CVE-2019-0708
+- [**243**星][13d] [Py] [orlikoski/cdqr](https://github.com/orlikoski/CDQR) The Cold Disk Quick Response (CDQR) tool is a fast and easy to use forensic artifact parsing tool that works on disk images, mounted drives and extracted artifacts from Windows, Linux, MacOS, and Android devices
+- [**243**星][3m] [Py] [usb-tools/facedancer](https://github.com/usb-tools/Facedancer) modern FaceDancer core for multiple devices-- including GreatFET
+- [**243**星][2d] [CSS] [steamdatabase/gametracking-dota2](https://github.com/steamdatabase/gametracking-dota2)
- [**243**星][3y] [Py] [sensepost/autodane](https://github.com/sensepost/autodane) Auto Domain Admin and Network Exploitation.
-- [**243**星][2y] [Py] [neohapsis/creddump7](https://github.com/neohapsis/creddump7)
+- [**243**星][4y] [Py] [rockerflower/shadowsocks](https://github.com/rockerflower/shadowsocks)
- [**243**星][4m] [C++] [nektra/deviare-inproc](https://github.com/nektra/deviare-inproc) Deviare In Process Instrumentation Engine
- [**243**星][2y] [Py] [mindpointgroup/cloudfrunt](https://github.com/mindpointgroup/cloudfrunt) A tool for identifying misconfigured CloudFront domains
-- [**243**星][2m] [C++] [microsoft/krabsetw](https://github.com/microsoft/krabsetw) KrabsETW provides a modern C++ wrapper and a .NET wrapper around the low-level ETW trace consumption functions.
-- [**243**星][2y] [Py] [jakespringer/angr_ctf](https://github.com/jakespringer/angr_ctf)
-- [**243**星][4m] [Py] [initroot/burpjslinkfinder](https://github.com/initroot/burpjslinkfinder) Burp Extension for a passive scanning JS files for endpoint links.
+- [**243**星][3m] [Shell] [leviathan36/kaboom](https://github.com/leviathan36/kaboom) An automated pentest tool
- [**243**星][3y] [C] [hyln9/vikiroot](https://github.com/hyln9/vikiroot) CVE-2016-5195 (Dirty COW) PoC for Android 6.0.1 Marshmallow
-- [**243**星][2y] [hsis007/useful_websites_for_pentester](https://github.com/hsis007/useful_websites_for_pentester) This repository is to make life of the pentester easy as it is a collection of the websites that can be used by pentesters for day to day studies and to remain updated.
- [**243**星][2y] [C++] [fireice-uk/xmr-stak-nvidia](https://github.com/fireice-uk/xmr-stak-nvidia) Monero NVIDIA miner
- [**243**星][3m] [JS] [antswordproject/ant](https://github.com/antswordproject/ant) 实时上线的 XSS 盲打平台
- [**242**星][4y] [C++] [piker-alpha/macosxbootloader](https://github.com/piker-alpha/macosxbootloader) Pike's bootloader
-- [**242**星][11d] [Py] [orlikoski/cdqr](https://github.com/orlikoski/CDQR) The Cold Disk Quick Response (CDQR) tool is a fast and easy to use forensic artifact parsing tool that works on disk images, mounted drives and extracted artifacts from Windows, Linux, MacOS, and Android devices
+- [**242**星][6d] [Go] [grafeas/kritis](https://github.com/grafeas/kritis) Deploy-time Policy Enforcer for Kubernetes applications
- [**242**星][9m] [C] [pegasuslab/ghosttunnel](https://github.com/PegasusLab/GhostTunnel) GhostTunnel is a covert backdoor transmission method that can be used in an isolated environment.
+- [**242**星][4m] [C] [pagalaxylab/unifuzzer](https://github.com/PAGalaxyLab/uniFuzzer) A fuzzing tool for closed-source binaries based on Unicorn and LibFuzzer
- [**242**星][10m] [C++] [revng/revng](https://github.com/revng/revng) 二进制分析工具,基于QEMU 和LLVM
+- [**242**星][12m] [xcsh/unity-game-hacking](https://github.com/xcsh/unity-game-hacking) A guide for hacking unity games
- [**242**星][3y] [PHP] [tdifg/webshell](https://github.com/tdifg/webshell) WebShell Collect
-- [**242**星][2y] [C#] [sparkfunx/skimmer_scanner](https://github.com/sparkfunx/skimmer_scanner) A mobile app for detecting bluetooth gas pump credit card skimmers
+- [**242**星][7m] [Lua] [rvn0xsy/nse_vuln](https://github.com/rvn0xsy/nse_vuln) Nmap扫描、漏洞利用脚本
- [**242**星][2y] [Py] [nirvik/iwant](https://github.com/nirvik/iwant) Commandline tool for searching and downloading files in LAN network, without any central server
- [**242**星][1y] [Go] [netspi/goddi](https://github.com/netspi/goddi) goddi (go dump domain info) dumps Active Directory domain information
-- [**242**星][20d] [C] [mame82/logitacker](https://github.com/mame82/logitacker) Enumerate and test Logitech wireless input devices for vulnerabilities with a nRF52840 radio dongle.
+- [**242**星][2y] [Py] [minhnhat93/tf-sndcgan](https://github.com/minhnhat93/tf-sndcgan) Tensorflow Implementation of the paper "Spectral Normalization for Generative Adversarial Networks" (ICML 2017 workshop)
+- [**242**星][4y] [C++] [meeloo/xspray](https://github.com/meeloo/xspray) A front end for lldb on OS X for Mac and iOS targets, with a twist
+- [**242**星][9m] [Py] [mazen160/bfac](https://github.com/mazen160/bfac) 自动化 web app 备份文件测试工具,可检测备份文件是否会泄露 web app 源代码
+- [**242**星][2m] [C] [llvm-mirror/compiler-rt](https://github.com/llvm-mirror/compiler-rt) Mirror of official compiler-rt git repository located at
- [**242**星][8m] [Py] [lionsec/wifresti](https://github.com/lionsec/wifresti) Find your wireless network password in Windows , Linux and Mac OS
-- [**242**星][3m] [C] [leebrotherston/tls-fingerprinting](https://github.com/leebrotherston/tls-fingerprinting) TLS Fingerprinting
+- [**242**星][2y] [C#] [jephthai/openpasswordfilter](https://github.com/jephthai/openpasswordfilter) An open source custom password filter DLL and userspace service to better protect / control Active Directory domain passwords.
- [**242**星][2y] [Shell] [h0nus/roguesploit](https://github.com/h0nus/roguesploit) Powerfull Wi-Fi trap!
-- [**242**星][2y] [C] [espressif/esp32-nesemu](https://github.com/espressif/esp32-nesemu) Proof-of-concept NES emulator for the ESP32
-- [**242**星][3y] [Py] [donnchac/onionbalance](https://github.com/donnchac/onionbalance) OnionBalance provides load-balancing and redundancy for Tor hidden services
+- [**242**星][28d] [cujanovic/open-redirect-payloads](https://github.com/cujanovic/open-redirect-payloads) Open Redirect Payloads
+- [**242**星][1m] [croqaz/awesome-decentralized](https://github.com/croqaz/awesome-decentralized)
+- [**242**星][2m] [Java] [c0ny1/passive-scan-client](https://github.com/c0ny1/passive-scan-client) Burp被动扫描流量转发插件
- [**242**星][3m] [Py] [atexio/mercure](https://github.com/atexio/mercure) 对员工进行网络钓鱼的培训
-- [**241**星][21d] [Py] [0xeb-bp/bluekeep](https://github.com/0xeb-bp/bluekeep) Public work for CVE-2019-0708
-- [**241**星][1y] [Shell] [dylanbai8/v2ray_h2-tls_website_onekey](https://github.com/dylanbai8/v2ray_h2-tls_website_onekey) V2RAY 基于 CADDY 的 VMESS+H2+TLS+Website(Use Host)+Rinetd BBR 一键安装脚本
-- [**241**星][4m] [C] [pagalaxylab/unifuzzer](https://github.com/PAGalaxyLab/uniFuzzer) A fuzzing tool for closed-source binaries based on Unicorn and LibFuzzer
+- [**241**星][9d] [Rust] [hippolot/anevicon](https://github.com/Hippolot/anevicon)
- [**241**星][6y] [Py] [zigoo0/webpwn3r](https://github.com/zigoo0/webpwn3r) WebPwn3r - Web Applications Security Scanner.
-- [**241**星][4m] [Py] [thewhiteh4t/finalrecon](https://github.com/thewhiteh4t/finalrecon) OSINT Tool for All-In-One Web Reconnaissance
-- [**241**星][7d] [CSS] [steamdatabase/gametracking-dota2](https://github.com/steamdatabase/gametracking-dota2)
-- [**241**星][2m] [owasp/api-security](https://github.com/owasp/api-security) OWASP API Security Project
-- [**241**星][2y] [Py] [minhnhat93/tf-sndcgan](https://github.com/minhnhat93/tf-sndcgan) Tensorflow Implementation of the paper "Spectral Normalization for Generative Adversarial Networks" (ICML 2017 workshop)
-- [**241**星][4y] [C++] [meeloo/xspray](https://github.com/meeloo/xspray) A front end for lldb on OS X for Mac and iOS targets, with a twist
-- [**241**星][3m] [Shell] [leviathan36/kaboom](https://github.com/leviathan36/kaboom) An automated pentest tool
+- [**241**星][6m] [JS] [we11cheng/wcshadowrocket](https://github.com/we11cheng/wcshadowrocket) iOS Shadowrocket(砸壳重签,仅供参考,添加节点存在问题)。另一个fq项目potatso源码参见:
+- [**241**星][7m] [C++] [smaffer/vgax](https://github.com/smaffer/vgax) VGA library for Arduino UNO
+- [**241**星][1y] [Java] [shiltemann/ctf-writeups-public](https://github.com/shiltemann/ctf-writeups-public) Writeups for infosec Capture the Flag events by team Galaxians
+- [**241**星][3m] [JS] [owasp/dvsa](https://github.com/owasp/dvsa) a Damn Vulnerable Serverless Application
+- [**241**星][8m] [Py] [openstack/syntribos](https://github.com/openstack/syntribos) 自动化的 API 安全测试工具
- [**241**星][2y] [Py] [leonardonve/dns2proxy](https://github.com/leonardonve/dns2proxy) Offensive DNS server
- [**241**星][1y] [kinimiwar/penetration-testing](https://github.com/kinimiwar/penetration-testing) List of awesome penetration testing resources, tools and other shiny things
+- [**241**星][1y] [Py] [hgascon/pulsar](https://github.com/hgascon/pulsar) 具有自动学习、模拟协议功能的网络 fuzzer
- [**241**星][5m] [C] [compsec-snu/razzer](https://github.com/compsec-snu/razzer) A Kernel fuzzer focusing on race bugs
-- [**241**星][17d] [Java] [c0ny1/jsencrypter](https://github.com/c0ny1/jsencrypter) 一个用于加密传输爆破的Burp Suite插件
-- [**240**星][7d] [Rust] [hippolot/anevicon](https://github.com/Hippolot/anevicon)
+- [**241**星][3y] [C] [astsam/rtl8812au](https://github.com/astsam/rtl8812au) RTL8812AU/21AU and RTL8814AU driver with monitor mode and frame injection
+- [**241**星][10m] [psiphon/psiphon-circumvention-system](https://bitbucket.org/psiphon/psiphon-circumvention-system)
+- [**240**星][3m] [JS] [mattcg/socks5-http-client](https://github.com/mattcg/socks5-http-client) SOCKS v5 HTTP client implementation in JavaScript for Node.js.
+- [**240**星][5m] [crytic/evm-opcodes](https://github.com/crytic/evm-opcodes) Ethereum opcodes and instruction reference
- [**240**星][1y] [C++] [woxihuannisja/bangcle](https://github.com/woxihuannisja/bangcle) The second generation Android Hardening Protection
-- [**240**星][7m] [C++] [smaffer/vgax](https://github.com/smaffer/vgax) VGA library for Arduino UNO
+- [**240**星][2y] [ObjC] [sticktron/g0blin](https://github.com/sticktron/g0blin) a work-in-progress jailbreak for iOS 10.3.x (A7-A9)
+- [**240**星][3y] [JS] [samsung/jalangi2](https://github.com/samsung/jalangi2) Dynamic analysis framework for JavaScript
- [**240**星][1y] [Ruby] [rastating/joomlavs](https://github.com/rastating/joomlavs) A black box, Ruby powered, Joomla vulnerability scanner
-- [**240**星][2y] [Shell] [pentester-io/commonspeak](https://github.com/pentester-io/commonspeak) 利用谷歌BigQuery 平台的公共数据集生成 wordlist
+- [**240**星][6m] [Java] [petercunha/jenkins-rce](https://github.com/petercunha/jenkins-rce)
- [**240**星][3y] [Py] [pcbje/gransk](https://github.com/pcbje/gransk) Document processing for investigations
-- [**240**星][8m] [Py] [openstack/syntribos](https://github.com/openstack/syntribos) 自动化的 API 安全测试工具
-- [**240**星][19d] [Py] [mez0cc/ms17-010-python](https://github.com/mez0cc/ms17-010-python) MS17-010: Python and Meterpreter
-- [**240**星][8m] [Py] [mazen160/bfac](https://github.com/mazen160/bfac) 自动化 web app 备份文件测试工具,可检测备份文件是否会泄露 web app 源代码
-- [**240**星][10d] [Py] [mandatoryprogrammer/trusttrees](https://github.com/mandatoryprogrammer/trusttrees) a script to recursively follow all the possible delegation paths for a target domain and graph the relationships between various nameservers along the way.
-- [**240**星][2m] [C] [llvm-mirror/compiler-rt](https://github.com/llvm-mirror/compiler-rt) Mirror of official compiler-rt git repository located at
-- [**240**星][2y] [C#] [jephthai/openpasswordfilter](https://github.com/jephthai/openpasswordfilter) An open source custom password filter DLL and userspace service to better protect / control Active Directory domain passwords.
+- [**240**星][5d] [JS] [myetherwallet/ethereum-lists](https://github.com/myetherwallet/ethereum-lists) A repository for maintaining lists of things like malicious URLs, fake token addresses, and so forth. We love lists.
+- [**240**星][8m] [C++] [mstfknn/malware-sample-library](https://github.com/mstfknn/malware-sample-library) Malware sample library.
+- [**240**星][21d] [Py] [mez0cc/ms17-010-python](https://github.com/mez0cc/ms17-010-python) MS17-010: Python and Meterpreter
+- [**240**星][12d] [Py] [mandatoryprogrammer/trusttrees](https://github.com/mandatoryprogrammer/trusttrees) a script to recursively follow all the possible delegation paths for a target domain and graph the relationships between various nameservers along the way.
+- [**240**星][2y] [C] [limneos/mobileminer](https://github.com/limneos/mobileminer) CPU Miner for ARM64 iOS Devices
+- [**240**星][2m] [Java] [kwart/jd-cmd](https://github.com/kwart/jd-cmd) Command line Java Decompiler
+- [**240**星][2y] [C] [jas502n/0day-security-software-vulnerability-analysis-technology](https://github.com/jas502n/0day-security-software-vulnerability-analysis-technology) 0day安全_软件漏洞分析技术
- [**240**星][3y] [Py] [intrepidusgroup/mallory](https://github.com/intrepidusgroup/mallory) Mallory - MiTM TCP and UDP Proxy
-- [**240**星][1y] [Py] [hgascon/pulsar](https://github.com/hgascon/pulsar) 具有自动学习、模拟协议功能的网络 fuzzer
- [**240**星][3y] [Shell] [g0tmi1k/debian-ssh](https://github.com/g0tmi1k/debian-ssh) Debian OpenSSL Predictable PRNG (CVE-2008-0166)
-- [**240**星][2y] [PowerShell] [dafthack/hostrecon](https://github.com/dafthack/hostrecon) This function runs a number of checks on a system to help provide situational awareness to a penetration tester during the reconnaissance phase. It gathers information about the local system, users, and domain information. It does not use any 'net', 'ipconfig', 'whoami', 'netstat', or other system commands to help avoid detection.
-- [**240**星][26d] [cujanovic/open-redirect-payloads](https://github.com/cujanovic/open-redirect-payloads) Open Redirect Payloads
-- [**240**星][3y] [C] [astsam/rtl8812au](https://github.com/astsam/rtl8812au) RTL8812AU/21AU and RTL8814AU driver with monitor mode and frame injection
-- [**240**星][1m] [Py] [a3sal0n/falcongate](https://github.com/a3sal0n/falcongate) A smart gateway to stop hackers and Malware attacks
-- [**239**星][5m] [crytic/evm-opcodes](https://github.com/crytic/evm-opcodes) Ethereum opcodes and instruction reference
+- [**240**星][9m] [JS] [exodusintel/cve-2019-5786](https://github.com/exodusintel/cve-2019-5786) FileReader Exploit
+- [**240**星][4d] [Shell] [essandess/macos-fortress](https://github.com/essandess/macos-fortress) Firewall and Privatizing Proxy for Trackers, Attackers, Malware, Adware, and Spammers with Anti-Virus On-Demand and On-Access Scanning (PF, squid, privoxy, hphosts, dshield, emergingthreats, hostsfile, PAC file, clamav)
+- [**240**星][2y] [PS] [dafthack/hostrecon](https://github.com/dafthack/hostrecon) This function runs a number of checks on a system to help provide situational awareness to a penetration tester during the reconnaissance phase. It gathers information about the local system, users, and domain information. It does not use any 'net', 'ipconfig', 'whoami', 'netstat', or other system commands to help avoid detection.
+- [**240**星][6y] [C++] [clinicallyinane/shellcode_launcher](https://github.com/clinicallyinane/shellcode_launcher) Shellcode launcher utility
+- [**240**星][2m] [Py] [a3sal0n/falcongate](https://github.com/a3sal0n/falcongate) A smart gateway to stop hackers and Malware attacks
+- [**239**星][1y] [C++] [zhuhaow/libnekit](https://github.com/zhuhaow/libnekit) Efficient and Flexible Network Utility Library
- [**239**星][7m] [Py] [beeware/bugjar](https://github.com/beeware/bugjar) A interactive graphical debugger for Python code.
- [**239**星][2y] [Py] [xhujoy/pysc2-agents](https://github.com/xhujoy/pysc2-agents) This is a simple implementation of DeepMind's PySC2 RL agents.
-- [**239**星][2y] [PowerShell] [und3rf10w/aggressor-scripts](https://github.com/und3rf10w/aggressor-scripts) Aggressor scripts I've made for Cobalt Strike
-- [**239**星][1y] [Java] [shiltemann/ctf-writeups-public](https://github.com/shiltemann/ctf-writeups-public) Writeups for infosec Capture the Flag events by team Galaxians
-- [**239**星][3y] [JS] [samsung/jalangi2](https://github.com/samsung/jalangi2) Dynamic analysis framework for JavaScript
-- [**239**星][7m] [Lua] [rvn0xsy/nse_vuln](https://github.com/rvn0xsy/nse_vuln) Nmap扫描、漏洞利用脚本
+- [**239**星][2y] [PS] [und3rf10w/aggressor-scripts](https://github.com/und3rf10w/aggressor-scripts) Aggressor scripts I've made for Cobalt Strike
+- [**239**星][2m] [Py] [sc1341/instagramosint](https://github.com/sc1341/instagramosint) An Instagram Open Source Intelligence Tool
+- [**239**星][1m] [PHP] [psecio/versionscan](https://github.com/psecio/versionscan) A PHP version scanner for reporting possible vulnerabilities
- [**239**星][2y] [Py] [panagiks/rspet](https://github.com/panagiks/rspet) RSPET (Reverse Shell and Post Exploitation Tool) is a Python based reverse shell equipped with functionalities that assist in a post exploitation scenario.
- [**239**星][2y] [Py] [nettitude/prowl](https://github.com/nettitude/prowl) an email harvesting tool that scrapes Yahoo for Linkedin profiles associated to the users search terms and identifies job titles
-- [**239**星][4m] [PowerShell] [nccgroup/azucar](https://github.com/nccgroup/azucar) Azure环境安全审计工具
-- [**239**星][2m] [Java] [kwart/jd-cmd](https://github.com/kwart/jd-cmd) Command line Java Decompiler
+- [**239**星][5d] [Makefile] [kframework/evm-semantics](https://github.com/kframework/evm-semantics) K Semantics of the Ethereum Virtual Machine (EVM)
- [**239**星][5m] [C++] [facebook/ds2](https://github.com/facebook/ds2) Debug server for lldb.
-- [**239**星][20d] [Shell] [essandess/macos-fortress](https://github.com/essandess/macos-fortress) Firewall and Privatizing Proxy for Trackers, Attackers, Malware, Adware, and Spammers with Anti-Virus On-Demand and On-Access Scanning (PF, squid, privoxy, hphosts, dshield, emergingthreats, hostsfile, PAC file, clamav)
- [**239**星][10m] [Py] [epickrram/grav](https://github.com/epickrram/grav) Performance visualisation tools
- [**239**星][3y] [Go] [egebalci/egesploit](https://github.com/egebalci/egesploit) EGESPLOIT is a golang library for malware development
- [**239**星][10m] [PHP] [delight-im/php-privacypolicy](https://github.com/delight-im/php-privacypolicy) Programmatically composable privacy policies for humans and machines
-- [**239**星][8m] [0x4d31/awesome-oscp](https://github.com/0x4d31/awesome-oscp) A curated list of awesome OSCP resources
-- [**238**星][3m] [Py] [usb-tools/facedancer](https://github.com/usb-tools/Facedancer) modern FaceDancer core for multiple devices-- including GreatFET
-- [**238**星][12m] [xcsh/unity-game-hacking](https://github.com/xcsh/unity-game-hacking) A guide for hacking unity games
-- [**238**星][6m] [JS] [we11cheng/wcshadowrocket](https://github.com/we11cheng/wcshadowrocket) iOS Shadowrocket(砸壳重签,仅供参考,添加节点存在问题)。另一个fq项目potatso源码参见:
-- [**238**星][1m] [PHP] [psecio/versionscan](https://github.com/psecio/versionscan) A PHP version scanner for reporting possible vulnerabilities
+- [**239**星][2y] [Py] [battelle/sandsifter](https://github.com/battelle/sandsifter) The x86 processor fuzzer
+- [**239**星][13d] [Py] [avatartwo/avatar2](https://github.com/avatartwo/avatar2) targetorchestration 框架,重点是嵌入式设备固件的动态分析
+- [**238**星][3m] [Go] [jpillora/ipfilter](https://github.com/jpillora/ipfilter) A package for IP Filtering in Go (golang)
+- [**238**星][2y] [C] [zerosum0x0/defcon-25-workshop](https://github.com/zerosum0x0/defcon-25-workshop) Windows Post-Exploitation / Malware Forward Engineering DEF CON 25 Workshop
- [**238**星][2y] [Py] [preempt/credssp](https://github.com/preempt/credssp) CVE-2018-0886(Windows CredSSP协议验证过程中的RCE漏洞)PoC
-- [**238**星][3m] [JS] [owasp/dvsa](https://github.com/owasp/dvsa) a Damn Vulnerable Serverless Application
-- [**238**星][5m] [C] [outflanknl/dumpert](https://github.com/outflanknl/dumpert) LSASS memory dumper using direct system calls and API unhooking.
+- [**238**星][8d] [pe3zx/my-infosec-awesome](https://github.com/pe3zx/my-infosec-awesome) My curated list of awesome links, resources and tools on infosec related topics
+- [**238**星][2m] [Java] [nickstadb/serializationdumper](https://github.com/nickstadb/serializationdumper) A tool to dump Java serialization streams in a more human readable form.
- [**238**星][1y] [Py] [matthewclarkmay/geoip-attack-map](https://github.com/matthewclarkmay/geoip-attack-map) Cyber security geoip attack map that follows syslog and parses IPs/port numbers to visualize attackers in real time.
-- [**238**星][7d] [Makefile] [kframework/evm-semantics](https://github.com/kframework/evm-semantics) K Semantics of the Ethereum Virtual Machine (EVM)
+- [**238**星][4y] [C] [jethrogb/uefireverse](https://github.com/jethrogb/uefireverse) Tools to help with Reverse Engineering UEFI-based firmware
- [**238**星][5y] [C] [jduck/asus-cmd](https://github.com/jduck/asus-cmd) ASUS Router infosvr UDP Broadcast root Command Execution
- [**238**星][4y] [HTML] [ikarienator/phantomjs_hide_and_seek](https://github.com/ikarienator/phantomjs_hide_and_seek) Some ideas around spoofing and detecting user agents.
-- [**238**星][9m] [JS] [exodusintel/cve-2019-5786](https://github.com/exodusintel/cve-2019-5786) FileReader Exploit
-- [**238**星][1m] [Java] [ata4/bspsrc](https://github.com/ata4/bspsrc) A Source engine map decompiler
-- [**237**星][1y] [C++] [zhuhaow/libnekit](https://github.com/zhuhaow/libnekit) Efficient and Flexible Network Utility Library
-- [**237**星][2y] [C] [zerosum0x0/defcon-25-workshop](https://github.com/zerosum0x0/defcon-25-workshop) Windows Post-Exploitation / Malware Forward Engineering DEF CON 25 Workshop
-- [**237**星][29d] [pe3zx/my-infosec-awesome](https://github.com/pe3zx/my-infosec-awesome) My curated list of awesome links, resources and tools on infosec related topics
-- [**237**星][8m] [C++] [mstfknn/malware-sample-library](https://github.com/mstfknn/malware-sample-library) Malware sample library.
-- [**237**星][4y] [C] [jethrogb/uefireverse](https://github.com/jethrogb/uefireverse) Tools to help with Reverse Engineering UEFI-based firmware
+- [**238**星][8d] [JS] [frenchyeti/dexcalibur](https://github.com/frenchyeti/dexcalibur) Dynamic binary instrumentation tool designed for Android application and powered by Frida. It disassembles dex, analyzes it statically, generates hooks, discovers reflected methods, stores intercepted data and does new things from it. Its aim is to be an all-in-one Android reverse engineering platform.
+- [**238**星][2m] [Java] [ata4/bspsrc](https://github.com/ata4/bspsrc) A Source engine map decompiler
+- [**238**星][9d] [Py] [a13xp0p0v/kconfig-hardened-check](https://github.com/a13xp0p0v/kconfig-hardened-check) A script for checking the hardening options in the Linux kernel config
+- [**237**星][7d] [Py] [tencent/qt4a](https://github.com/tencent/qt4a) QTA driver for Android app
+- [**237**星][22d] [Py] [pyhackertarget/hackertarget](https://github.com/pyhackertarget/hackertarget) attack surface discovery and identification of security vulnerabilities
+- [**237**星][3y] [Py] [trustedsec/tap](https://github.com/trustedsec/tap) The TrustedSec Attack Platform is a reliable method for droppers on an infrastructure in order to ensure established connections to an organization.
+- [**237**星][1m] [Py] [timlib/webxray](https://github.com/timlib/webxray) webxray is a tool for analyzing third-party content on webpages and identifying the companies which collect user data.
+- [**237**星][2m] [Java] [samlraider/samlraider](https://github.com/samlraider/samlraider) SAML2 Burp Extension
+- [**237**星][21d] [pomerium/awesome-zero-trust](https://github.com/pomerium/awesome-zero-trust) A curated collection of awesome resources for the zero-trust security model.
+- [**237**星][2y] [Ruby] [nahamsec/hostilesubbruteforcer](https://github.com/nahamsec/hostilesubbruteforcer)
+- [**237**星][4m] [PS] [microsoft/aaronlocker](https://github.com/microsoft/aaronlocker) Windows应用程序白名单
+- [**237**星][9d] [Py] [inforion/idapython-cheatsheet](https://github.com/inforion/idapython-cheatsheet) Scripts and cheatsheets for IDAPython
+- [**237**星][9m] [harmoc/ctftools](https://github.com/harmoc/ctftools) Personal CTF Toolkit
+- [**237**星][2d] [JS] [hackademix/noscript](https://github.com/hackademix/noscript) The popular NoScript Security Suite browser extension.
- [**237**星][10m] [C] [geosn0w/osirisjailbreak12](https://github.com/geosn0w/osirisjailbreak12) iOS 12.0 -> 12.1.2 Incomplete Osiris Jailbreak with CVE-2019-6225 by GeoSn0w (FCE365)
+- [**237**星][3y] [Py] [ftramer/steal-ml](https://github.com/ftramer/steal-ml) 机器学习即服务平台上的模型提取攻击
- [**237**星][2y] [C] [ele7enxxh/android-afl](https://github.com/ele7enxxh/android-afl) Fuzzing Android program with american fuzzy lop (AFL)
+- [**237**星][28d] [Rust] [danleh/wasabi](https://github.com/danleh/wasabi) A dynamic analysis framework for WebAssembly programs.
- [**237**星][3y] [C++] [damellis/cellphone2](https://github.com/damellis/cellphone2) Second iteration of the DIY cellphone (based on the Arduino GSM shield).
+- [**237**星][8m] [Py] [daenerys-sre/source](https://github.com/daenerys-sre/source) 使IDA和Ghidra脚本通用, 无需修改
- [**237**星][3m] [cujanovic/markdown-xss-payloads](https://github.com/cujanovic/markdown-xss-payloads) XSS payloads for exploiting Markdown syntax
-- [**237**星][6y] [C++] [clinicallyinane/shellcode_launcher](https://github.com/clinicallyinane/shellcode_launcher) Shellcode launcher utility
-- [**237**星][2y] [Py] [battelle/sandsifter](https://github.com/battelle/sandsifter) The x86 processor fuzzer
-- [**237**星][11d] [Py] [avatartwo/avatar2](https://github.com/avatartwo/avatar2) targetorchestration 框架,重点是嵌入式设备固件的动态分析
-- [**237**星][7d] [Py] [a13xp0p0v/kconfig-hardened-check](https://github.com/a13xp0p0v/kconfig-hardened-check) A script for checking the hardening options in the Linux kernel config
-- [**236**星][21d] [Py] [tencent/qt4a](https://github.com/tencent/qt4a) QTA driver for Android app
+- [**237**星][6m] [Py] [cuckoosandbox/community](https://github.com/cuckoosandbox/community) Repository of modules and signatures contributed by the community
+- [**237**星][4m] [JS] [consensys/surya](https://github.com/consensys/surya) A set of utilities for exploring Solidity contracts
+- [**237**星][28d] [JS] [bet4it/hyperpwn](https://github.com/bet4it/hyperpwn) A hyper plugin to provide a flexible GDB GUI with the help of GEF, pwndbg or peda
+- [**237**星][2y] [Py] [arno0x/wsc2](https://github.com/arno0x/wsc2) A WebSocket C2 Tool
+- [**236**星][2y] [Go] [zyfworks/anothersteamcommunityfix](https://github.com/zyfworks/anothersteamcommunityfix) 通过修改hosts转发HTTP请求的方式临时性修复SteamCommunity在中国大陆无法访问的小工具
+- [**236**星][11m] [C] [r3x/how2kernel](https://github.com/r3x/how2kernel) This Repository aims at giving a basic idea about Kernel Exploitation.
+- [**236**星][3m] [Py] [cylance/cybot](https://github.com/cylance/CyBot) Open Source Threat Intelligence Chat Bot
- [**236**星][3m] [Py] [brad-sp/cuckoo-modified](https://github.com/brad-sp/cuckoo-modified) Modified edition of cuckoo
-- [**236**星][3y] [Py] [trustedsec/tap](https://github.com/trustedsec/tap) The TrustedSec Attack Platform is a reliable method for droppers on an infrastructure in order to ensure established connections to an organization.
-- [**236**星][1m] [Py] [timlib/webxray](https://github.com/timlib/webxray) webxray is a tool for analyzing third-party content on webpages and identifying the companies which collect user data.
+- [**236**星][5d] [w0lfschild/macos_headers](https://github.com/w0lfschild/macos_headers) a class dump of most Apple Applications and Frameworks on macOS
+- [**236**星][7m] [C++] [strivexjun/xantidebug](https://github.com/strivexjun/xantidebug) VMProtect 3.x Anti-debug Method Improved
- [**236**星][4y] [C] [softethervpn/win10pcap](https://github.com/softethervpn/win10pcap) WinPcap for Windows 10 (NDIS 6.x driver model)
-- [**236**星][2m] [Py] [sc1341/instagramosint](https://github.com/sc1341/instagramosint) An Instagram Open Source Intelligence Tool
-- [**236**星][2m] [Java] [samlraider/samlraider](https://github.com/samlraider/samlraider) SAML2 Burp Extension
-- [**236**星][15d] [JS] [hackademix/noscript](https://github.com/hackademix/noscript) The popular NoScript Security Suite browser extension.
-- [**236**星][3y] [Py] [ftramer/steal-ml](https://github.com/ftramer/steal-ml) 机器学习即服务平台上的模型提取攻击
+- [**236**星][2y] [C++] [pellegre/libcrafter](https://github.com/pellegre/libcrafter) C++ 编写的网络数据包嗅探和解码库
+- [**236**星][3d] [HCL] [nozaq/terraform-aws-secure-baseline](https://github.com/nozaq/terraform-aws-secure-baseline) Terraform module to set up your AWS account with the secure baseline configuration based on CIS Amazon Web Services Foundations.
+- [**236**星][2y] [Py] [nccgroup/shocker](https://github.com/nccgroup/shocker) A tool to find and exploit servers vulnerable to Shellshock
+- [**236**星][2m] [JS] [martinzhou2015/srcms](https://github.com/martinzhou2015/srcms) SRCMS企业应急响应与缺陷管理系统
+- [**236**星][24d] [C] [kubo/plthook](https://github.com/kubo/plthook) Hook function calls by replacing PLT(Procedure Linkage Table) entries.
- [**236**星][11m] [Go] [fardog/secureoperator](https://github.com/fardog/secureoperator) A DNS-protocol proxy for DNS-over-HTTPS providers, such as Google and Cloudflare
-- [**236**星][25d] [Rust] [danleh/wasabi](https://github.com/danleh/wasabi) A dynamic analysis framework for WebAssembly programs.
-- [**236**星][8m] [Py] [daenerys-sre/source](https://github.com/daenerys-sre/source) 使IDA和Ghidra脚本通用, 无需修改
-- [**236**星][6m] [Py] [cuckoosandbox/community](https://github.com/cuckoosandbox/community) Repository of modules and signatures contributed by the community
-- [**236**星][4m] [JS] [consensys/surya](https://github.com/consensys/surya) A set of utilities for exploring Solidity contracts
+- [**236**星][11m] [duoergun0729/2book](https://github.com/duoergun0729/2book) 《Web安全之深度学习实战》
- [**236**星][5y] [C] [conix-security/zer0m0n](https://github.com/conix-security/zer0m0n) zer0m0n driver for cuckoo sandbox
-- [**236**星][2y] [Py] [arno0x/wsc2](https://github.com/arno0x/wsc2) A WebSocket C2 Tool
-- [**235**星][11m] [C] [r3x/how2kernel](https://github.com/r3x/how2kernel) This Repository aims at giving a basic idea about Kernel Exploitation.
-- [**235**星][3m] [Py] [cylance/cybot](https://github.com/cylance/CyBot) Open Source Threat Intelligence Chat Bot
+- [**235**星][27d] [C] [cmu-sei/scale](https://github.com/cmu-sei/scale) SCALe (Source Code Analysis Lab) is a static analysis aggregator/correlator which enables a source code analyst to combine static analysis results from multiple tools into one interface, and also provides mappings for diagnostics from the tools to the SEI CERT Secure Coding standards.
+- [**235**星][3m] [Swift] [shadowsocksr-live/ishadowsocksr](https://github.com/shadowsocksr-live/ishadowsocksr) ShadowsocksR for iOS, come from
+- [**235**星][4m] [C#] [fsecurelabs/sharpgpoabuse](https://github.com/FSecureLABS/SharpGPOAbuse) take advantage of a user's edit rights on a Group Policy Object (GPO) in order to compromise the objects that are controlled by that GPO.
+- [**235**星][1y] [Py] [3summer/ctf-rsa-tool](https://github.com/3summer/CTF-RSA-tool) a little tool help CTFer solve RSA problem
- [**235**星][6y] [Py] [xen0ph0n/yaragenerator](https://github.com/xen0ph0n/yaragenerator) quick, simple, and effective yara rule creation to isolate malware families and other malicious objects of interest
-- [**235**星][2y] [C++] [pellegre/libcrafter](https://github.com/pellegre/libcrafter) C++ 编写的网络数据包嗅探和解码库
-- [**235**星][2y] [Ruby] [nahamsec/hostilesubbruteforcer](https://github.com/nahamsec/hostilesubbruteforcer)
-- [**235**星][2m] [JS] [martinzhou2015/srcms](https://github.com/martinzhou2015/srcms) SRCMS企业应急响应与缺陷管理系统
+- [**235**星][3y] [Py] [withdk/badusb2-mitm-poc](https://github.com/withdk/badusb2-mitm-poc) BadUSB 2.0 USB-HID MiTM POC
+- [**235**星][1m] [C] [wbenny/ia32-doc](https://github.com/wbenny/ia32-doc) IA32-doc is a project which aims to put as many definitions from the Intel Manual into machine-processable format as possible
+- [**235**星][1m] [C#] [tyranid/exploitremotingservice](https://github.com/tyranid/exploitremotingservice) A tool to exploit .NET Remoting Services
+- [**235**星][1y] [Java] [nccgroup/burpsuiteloggerplusplus](https://github.com/nccgroup/burpsuiteloggerplusplus) Burp Suite Logger++: Log activities of all the tools in Burp Suite
+- [**235**星][4y] [Py] [mwielgoszewski/python-paddingoracle](https://github.com/mwielgoszewski/python-paddingoracle) A portable, padding oracle exploit API
- [**235**星][1y] [JS] [holyvier/prototype-pollution-nsec18](https://github.com/holyvier/prototype-pollution-nsec18) Content released at NorthSec 2018 for my talk on prototype pollution
+- [**235**星][8m] [Go] [gocaio/goca](https://github.com/gocaio/goca) Goca Scanner
+- [**235**星][2y] [Py] [evait-security/weeman](https://github.com/evait-security/weeman) HTTP server for phishing in python
- [**235**星][1m] [HTML] [edoverflow/bugbountyguide](https://github.com/edoverflow/bugbountyguide) Bug Bounty Guide is a launchpad for bug bounty programs and bug bounty hunters.
+- [**235**星][10m] [Py] [cryin/javaid](https://github.com/cryin/javaid) java source code static code analysis and danger function identify prog
- [**235**星][9m] [Py] [codeinthehole/purl](https://github.com/codeinthehole/purl) A simple, immutable URL class with a clean API for interrogation and manipulation.
-- [**235**星][2m] [Java] [c0ny1/passive-scan-client](https://github.com/c0ny1/passive-scan-client) Burp被动扫描流量转发插件
+- [**235**星][9m] [Py] [airbus-seclab/ilo4_toolbox](https://github.com/airbus-seclab/ilo4_toolbox) Toolbox for HPE iLO4 & iLO5 analysis
- [**235**星][10m] [JS] [adamyordan/cve-2019-1003000-jenkins-rce-poc](https://github.com/adamyordan/cve-2019-1003000-jenkins-rce-poc) Jenkins RCE Proof-of-Concept: SECURITY-1266 / CVE-2019-1003000 (Script Security), CVE-2019-1003001 (Pipeline: Groovy), CVE-2019-1003002 (Pipeline: Declarative)
-- [**234**星][3y] [Py] [withdk/badusb2-mitm-poc](https://github.com/withdk/badusb2-mitm-poc) BadUSB 2.0 USB-HID MiTM POC
-- [**234**星][29d] [C] [wbenny/ia32-doc](https://github.com/wbenny/ia32-doc) IA32-doc is a project which aims to put as many definitions from the Intel Manual into machine-processable format as possible
-- [**234**星][1m] [C#] [tyranid/exploitremotingservice](https://github.com/tyranid/exploitremotingservice) A tool to exploit .NET Remoting Services
+- [**234**星][5m] [Shell] [hak5/packetsquirrel-payloads](https://github.com/hak5/packetsquirrel-payloads) The Official Packet Squirrel Payload Repository
+- [**234**星][10d] [C#] [xenocoderce/neo-confuserex](https://github.com/xenocoderce/neo-confuserex) Updated ConfuserEX, an open-source, free obfuscator for .NET applications
+- [**234**星][2y] [TS] [weichx/cerialize](https://github.com/weichx/cerialize) Easy serialization through ES7/Typescript annotations
- [**234**星][11m] [C] [reisyukaku/reinand](https://github.com/reisyukaku/reinand) Minimalist 3DS custom firmware.
- [**234**星][4y] [Py] [pyana/pyana](https://github.com/pyana/pyana) 使用Unicorn框架模拟执行Shellcode(Windows)
-- [**234**星][1m] [platomav/cpumicrocodes](https://github.com/platomav/cpumicrocodes) Intel, AMD, VIA & Freescale CPU Microcode Repositories
-- [**234**星][1y] [Java] [nccgroup/burpsuiteloggerplusplus](https://github.com/nccgroup/burpsuiteloggerplusplus) Burp Suite Logger++: Log activities of all the tools in Burp Suite
-- [**234**星][7d] [JS] [myetherwallet/ethereum-lists](https://github.com/myetherwallet/ethereum-lists) A repository for maintaining lists of things like malicious URLs, fake token addresses, and so forth. We love lists.
-- [**234**星][4y] [Py] [mwielgoszewski/python-paddingoracle](https://github.com/mwielgoszewski/python-paddingoracle) A portable, padding oracle exploit API
-- [**234**星][4y] [PowerShell] [invoke-ir/uproot](https://github.com/invoke-ir/uproot) Currently not updated for WMIEvent module...
-- [**234**星][9m] [harmoc/ctftools](https://github.com/harmoc/ctftools) Personal CTF Toolkit
-- [**234**星][8m] [Go] [gocaio/goca](https://github.com/gocaio/goca) Goca Scanner
+- [**234**星][21d] [Julia] [jrevels/cassette.jl](https://github.com/jrevels/cassette.jl) Overdub Your Julia Code
+- [**234**星][4y] [PS] [invoke-ir/uproot](https://github.com/invoke-ir/uproot) Currently not updated for WMIEvent module...
+- [**234**星][1y] [Ruby] [hahwul/droid-hunter](https://github.com/hahwul/droid-hunter) (deprecated) Android application vulnerability analysis and Android pentest tool
+- [**234**星][2m] [C] [grant-h/qu1ckr00t](https://github.com/grant-h/qu1ckr00t) A PoC application demonstrating the power of an Android kernel arbitrary R/W.
+- [**234**星][2d] [Ruby] [fabric8io/fluent-plugin-kubernetes_metadata_filter](https://github.com/fabric8io/fluent-plugin-kubernetes_metadata_filter) Enrich your fluentd events with Kubernetes metadata
- [**234**星][1y] [Java] [difcareer/sqlmap4burp](https://github.com/difcareer/sqlmap4burp) sqlmap embed in burpsuite
- [**234**星][1m] [C] [didi/kemon](https://github.com/didi/kemon) An Open-Source Pre and Post Callback-Based Framework for macOS Kernel Monitoring.
-- [**234**星][9m] [Py] [airbus-seclab/ilo4_toolbox](https://github.com/airbus-seclab/ilo4_toolbox) Toolbox for HPE iLO4 & iLO5 analysis
+- [**234**星][7m] [JS] [cliqz-oss/local-sheriff](https://github.com/cliqz-oss/local-sheriff) Think of Local sheriff as a recon tool in your browser (WebExtension). While you normally browse the internet, Local Sheriff works in the background to empower you in identifying what data points (PII) are being shared / leaked to which all third-parties.
- [**234**星][6y] [Py] [adastra-thw/pyhacks](https://github.com/adastra-thw/pyhacks) Python Scripts for Hacking .
- [**233**星][2y] [wizardforcel/web-hacking-101-zh](https://github.com/wizardforcel/web-hacking-101-zh)
- [**233**星][2y] [Py] [robotattackorg/robot-detect](https://github.com/robotattackorg/robot-detect) Detection script for the ROBOT vulnerability
+- [**233**星][7m] [Py] [patois/dsync](https://github.com/patois/dsync) 反汇编和反编译窗口同步插件
- [**233**星][2y] [palantir/alerting-detection-strategy-framework](https://github.com/palantir/alerting-detection-strategy-framework) A framework for developing alerting and detection strategies for incident response.
-- [**233**星][24d] [HCL] [nozaq/terraform-aws-secure-baseline](https://github.com/nozaq/terraform-aws-secure-baseline) Terraform module to set up your AWS account with the secure baseline configuration based on CIS Amazon Web Services Foundations.
- [**233**星][10m] [Py] [nethunteros/punter](https://github.com/nethunteros/punter) 使用 DNSDumpster, WHOIS, Reverse WHOIS 挖掘域名
-- [**233**星][1y] [Py] [nccgroup/shocker](https://github.com/nccgroup/shocker) A tool to find and exploit servers vulnerable to Shellshock
-- [**233**星][4m] [PowerShell] [microsoft/aaronlocker](https://github.com/microsoft/aaronlocker) Windows应用程序白名单
- [**233**星][6m] [Py] [maaaaz/nmaptocsv](https://github.com/maaaaz/nmaptocsv) A simple python script to convert Nmap output to CSV
- [**233**星][2y] [C] [larsbrinkhoff/httptunnel](https://github.com/larsbrinkhoff/httptunnel) Bidirectional data stream tunnelled in HTTP requests.
-- [**233**星][22d] [C] [kubo/plthook](https://github.com/kubo/plthook) Hook function calls by replacing PLT(Procedure Linkage Table) entries.
-- [**233**星][19d] [Julia] [jrevels/cassette.jl](https://github.com/jrevels/cassette.jl) Overdub Your Julia Code
-- [**233**星][7d] [Py] [inforion/idapython-cheatsheet](https://github.com/inforion/idapython-cheatsheet) Scripts and cheatsheets for IDAPython
-- [**233**星][1y] [Ruby] [hahwul/droid-hunter](https://github.com/hahwul/droid-hunter) (deprecated) Android application vulnerability analysis and Android pentest tool
-- [**233**星][2y] [Py] [evait-security/weeman](https://github.com/evait-security/weeman) HTTP server for phishing in python
-- [**233**星][4m] [C] [devnoname120/vhbb](https://github.com/devnoname120/vhbb) Browse, download, and launch Vita homebrews!
-- [**233**星][10m] [Py] [cryin/javaid](https://github.com/cryin/javaid) java source code static code analysis and danger function identify prog
-- [**233**星][7m] [JS] [cliqz-oss/local-sheriff](https://github.com/cliqz-oss/local-sheriff) Think of Local sheriff as a recon tool in your browser (WebExtension). While you normally browse the internet, Local Sheriff works in the background to empower you in identifying what data points (PII) are being shared / leaked to which all third-parties.
-- [**233**星][23d] [Common Lisp] [cffi/cffi](https://github.com/cffi/cffi) The Common Foreign Function Interface
-- [**233**星][26d] [Go] [apuigsech/seekret](https://github.com/apuigsech/seekret) Go library and command line to seek for secrets on various sources.
-- [**232**星][5m] [Shell] [hak5/packetsquirrel-payloads](https://github.com/hak5/packetsquirrel-payloads) The Official Packet Squirrel Payload Repository
-- [**232**星][4m] [C#] [fsecurelabs/sharpgpoabuse](https://github.com/FSecureLABS/SharpGPOAbuse) take advantage of a user's edit rights on a Group Policy Object (GPO) in order to compromise the objects that are controlled by that GPO.
-- [**232**星][1y] [Py] [3summer/ctf-rsa-tool](https://github.com/3summer/CTF-RSA-tool) a little tool help CTFer solve RSA problem
+- [**233**星][2y] [JS] [google/password-alert](https://github.com/google/password-alert) A Chrome Extension to help protect against phishing attacks.
+- [**233**星][2m] [Py] [gilligan/vim-lldb](https://github.com/gilligan/vim-lldb) lldb debugger integration plugin for vim
+- [**233**星][4d] [Common Lisp] [cffi/cffi](https://github.com/cffi/cffi) The Common Foreign Function Interface
+- [**233**星][28d] [Go] [apuigsech/seekret](https://github.com/apuigsech/seekret) Go library and command line to seek for secrets on various sources.
+- [**232**星][2m] [C] [yifengyou/the-design-and-implementation-of-a-64-bit-os](https://github.com/yifengyou/The-design-and-implementation-of-a-64-bit-os) 《一个64位操作系统的设计与实现》读书笔记&随书源码
- [**232**星][2m] [Ruby] [zt2/sqli-hunter](https://github.com/zt2/sqli-hunter) SQLi-Hunter is a simple HTTP proxy server and a SQLMAP API wrapper that makes digging SQLi easy.
-- [**232**星][2y] [Py] [utds3lab/multiverse](https://github.com/utds3lab/multiverse) 不适用启发式(heuristics)的静态二进制文件重写入(rewriter)工具
- [**232**星][5y] [C] [sztupy/luadec51](https://github.com/sztupy/luadec51) Lua Decompiler for Lua version 5.1
-- [**232**星][7m] [C++] [strivexjun/xantidebug](https://github.com/strivexjun/xantidebug) VMProtect 3.x Anti-debug Method Improved
- [**232**星][5y] [PHP] [smaash/quasibot](https://github.com/smaash/quasibot) complex webshell manager, quasi-http botnet.
-- [**232**星][2m] [Java] [nickstadb/serializationdumper](https://github.com/nickstadb/serializationdumper) A tool to dump Java serialization streams in a more human readable form.
+- [**232**星][2m] [C++] [richkmeli/richkware](https://github.com/richkmeli/richkware) Framework for building Windows malware, written in C++
- [**232**星][9m] [Go] [masterzen/winrm](https://github.com/masterzen/winrm) Windows远程命令执行,命令行工具+库,Go编写
- [**232**星][4y] [C] [markjandrews/wrk-v1.2](https://github.com/markjandrews/wrk-v1.2) Windows研究内核
-- [**232**星][2y] [JS] [google/password-alert](https://github.com/google/password-alert) A Chrome Extension to help protect against phishing attacks.
+- [**232**星][16d] [C#] [icsharpcode/avaloniailspy](https://github.com/icsharpcode/avaloniailspy) Avalonia-based .NET Decompiler (port of ILSpy)
+- [**232**星][2m] [Propeller Spin] [grandideastudio/jtagulator](https://github.com/grandideastudio/jtagulator) Assisted discovery of on-chip debug interfaces
- [**232**星][2y] [C++] [fireeye/simplifygraph](https://github.com/fireeye/simplifygraph) 复杂graphs的简化
- [**232**星][4y] [JS] [firebug/firebug.next](https://github.com/firebug/firebug.next) Next Firebug generation built on top of native Firefox developer tools
-- [**232**星][1m] [Ruby] [fabric8io/fluent-plugin-kubernetes_metadata_filter](https://github.com/fabric8io/fluent-plugin-kubernetes_metadata_filter) Enrich your fluentd events with Kubernetes metadata
+- [**232**星][9d] [Java] [dexpatcher/dexpatcher-tool](https://github.com/dexpatcher/dexpatcher-tool) Android Dalvik bytecode patcher.
+- [**232**星][4m] [C] [devnoname120/vhbb](https://github.com/devnoname120/vhbb) Browse, download, and launch Vita homebrews!
- [**232**星][2y] [d33tah/call-for-wpa3](https://github.com/d33tah/call-for-wpa3) Call for WPA3 - what's wrong with WPA2 security and how to fix it
- [**232**星][6m] [cr0hn/nosqlinjection_wordlists](https://github.com/cr0hn/nosqlinjection_wordlists) This repository contains payload to test NoSQL Injections
- [**232**星][3y] [C] [canbus-triple/canbus-triple](https://github.com/canbus-triple/canbus-triple) CANBus Triple – The car hacking platform
-- [**231**星][3m] [Swift] [shadowsocksr-live/ishadowsocksr](https://github.com/shadowsocksr-live/ishadowsocksr) ShadowsocksR for iOS, come from
-- [**231**星][20d] [Py] [pyhackertarget/hackertarget](https://github.com/pyhackertarget/hackertarget) attack surface discovery and identification of security vulnerabilities
+- [**232**星][3m] [Py] [boy-hack/airbug](https://github.com/boy-hack/airbug) Airbug(空气洞),收集漏洞poc用于安全产品
+- [**231**星][10m] [HTML] [nicehash/excavator](https://github.com/nicehash/excavator) NiceHash's proprietary low-level CUDA miner
+- [**231**星][1m] [HTML] [badd1e/disclosures](https://github.com/badd1e/disclosures) Zero-day and N-day security vulnerability notes, analysis, and proof-of-concepts
+- [**231**星][6d] [HTML] [dependency-check/dependency-check-sonar-plugin](https://github.com/dependency-check/dependency-check-sonar-plugin) Integrates Dependency-Check reports into SonarQube
- [**231**星][1y] [Jupyter Notebook] [wesleyraptor/streamingphish](https://github.com/wesleyraptor/streamingphish) 使用受监督的机器学习, 从证书透明度(Certificate Transparency)日志中检测钓鱼域名
+- [**231**星][2y] [Py] [utds3lab/multiverse](https://github.com/utds3lab/multiverse) 不适用启发式(heuristics)的静态二进制文件重写入(rewriter)工具
+- [**231**星][3y] [C#] [thrdev/socks5](https://github.com/thrdev/socks5) A full-fledged high-performance socks5 proxy server written in C#. Plugin support included.
+- [**231**星][4m] [Java] [thisislibra/androidprojectcreator](https://github.com/thisislibra/androidprojectcreator) Convert an APK to an Android Studio Project using multiple open-source decompilers
- [**231**星][2y] [C++] [silentbreaksec/throwback](https://github.com/silentbreaksec/throwback) HTTP/S Beaconing Implant
- [**231**星][4y] [Shell] [nccgroup/metasploitavevasion](https://github.com/nccgroup/metasploitavevasion) Metasploit AV Evasion Tool
- [**231**星][3y] [HTML] [mongodb-labs/disasm](https://github.com/mongodb-labs/disasm) Interactive Disassembler GUI - This Repository is NOT a supported MongoDB product
+- [**231**星][2y] [Shell] [linuz/sticky-keys-slayer](https://github.com/linuz/sticky-keys-slayer) Scans for accessibility tools backdoors via RDP
- [**231**星][2y] [Jupyter Notebook] [james91b/ida_ipython](https://github.com/james91b/ida_ipython) 嵌入IPython内核,集成IPython
+- [**231**星][1y] [C++] [ionescu007/simpleator](https://github.com/ionescu007/simpleator) Windows x64用户模式应用程序模拟器
- [**231**星][2y] [C] [hardenedlinux/grsecurity-101-tutorials](https://github.com/hardenedlinux/grsecurity-101-tutorials) 增强 Linux 内核安全的内核补丁集
-- [**231**星][2m] [C] [grant-h/qu1ckr00t](https://github.com/grant-h/qu1ckr00t) A PoC application demonstrating the power of an Android kernel arbitrary R/W.
-- [**231**星][2m] [Propeller Spin] [grandideastudio/jtagulator](https://github.com/grandideastudio/jtagulator) Assisted discovery of on-chip debug interfaces
-- [**231**星][2m] [Py] [gilligan/vim-lldb](https://github.com/gilligan/vim-lldb) lldb debugger integration plugin for vim
-- [**231**星][26d] [JS] [bet4it/hyperpwn](https://github.com/bet4it/hyperpwn) A hyper plugin to provide a flexible GDB GUI with the help of GEF, pwndbg or peda
+- [**231**星][7m] [Shell] [fransr/bountyplz](https://github.com/fransr/bountyplz) Automated security reporting from markdown templates (HackerOne and Bugcrowd are currently the platforms supported)
+- [**231**星][3m] [Py] [evilmog/ntlmv1-multi](https://github.com/evilmog/ntlmv1-multi) 修改NTLMv1/NTLMv1-ESS/MSCHAPv1 Hask, 使其可以在hashcat中用DES模式14000破解
+- [**231**星][2d] [euphrat1ca/security_w1k1](https://github.com/euphrat1ca/security_w1k1) collect
- [**231**星][2y] [C] [battelle/movfuscator](https://github.com/battelle/movfuscator) The single instruction C compiler
- [**230**星][10m] [C++] [googleprojectzero/bochspwn-reloaded](https://github.com/googleprojectzero/bochspwn-reloaded) A Bochs-based instrumentation performing kernel memory taint tracking to detect disclosure of uninitialized memory to ring 3
-- [**230**星][2y] [TypeScript] [weichx/cerialize](https://github.com/weichx/cerialize) Easy serialization through ES7/Typescript annotations
+- [**230**星][2d] [C] [shchmue/lockpick_rcm](https://github.com/shchmue/lockpick_rcm) Nintendo Switch encryption key derivation bare metal RCM payload
+- [**230**星][5y] [Shell] [s3jensen/iret](https://github.com/s3jensen/iret)
+- [**230**星][7d] [PS] [rsmudge/elevatekit](https://github.com/rsmudge/elevatekit) The Elevate Kit demonstrates how to use third-party privilege escalation attacks with Cobalt Strike's Beacon payload.
- [**230**星][5m] [HTML] [rootup/bfuzz](https://github.com/rootup/bfuzz) Fuzzing Browsers
-- [**230**星][2m] [C++] [richkmeli/richkware](https://github.com/richkmeli/richkware) Framework for building Windows malware, written in C++
- [**230**星][3y] [C] [omriiluz/nrf24-btle-decoder](https://github.com/omriiluz/nrf24-btle-decoder) Sniff and decode NRF24L01+ and Bluetooth Low Energy using RTL-SDR
-- [**230**星][9d] [TypeScript] [ninoseki/mitaka](https://github.com/ninoseki/mitaka) A browser extension for OSINT search
-- [**230**星][12m] [C++] [ionescu007/simpleator](https://github.com/ionescu007/simpleator) Windows x64用户模式应用程序模拟器
-- [**230**星][7m] [Shell] [fransr/bountyplz](https://github.com/fransr/bountyplz) Automated security reporting from markdown templates (HackerOne and Bugcrowd are currently the platforms supported)
-- [**230**星][3m] [Py] [evilmog/ntlmv1-multi](https://github.com/evilmog/ntlmv1-multi) 修改NTLMv1/NTLMv1-ESS/MSCHAPv1 Hask, 使其可以在hashcat中用DES模式14000破解
+- [**230**星][2y] [C++] [nickcano/xenoscan](https://github.com/nickcano/xenoscan) Open source memory scanner written in C++
+- [**230**星][2m] [PS] [miriamxyra/eventlist](https://github.com/miriamxyra/eventlist) help improving your Audit capabilities and to help to build your Security Operation Center.
+- [**230**星][3y] [Visual Basic .NET] [malwares/crypter](https://github.com/malwares/crypter) Windows Crypter
+- [**230**星][8m] [C] [ctz/cifra](https://github.com/ctz/cifra) A collection of cryptographic primitives targeted at embedded use.
- [**230**星][2m] [Java] [commonsguy/cwac-netsecurity](https://github.com/commonsguy/cwac-netsecurity) CWAC-NetSecurity: Simplifying Secure Internet Access
+- [**230**星][3y] [Perl] [brendangregg/heatmap](https://github.com/brendangregg/heatmap) Heat map generation tools
+- [**230**星][4m] [Py] [beaengine/beaengine](https://github.com/beaengine/beaengine) BeaEngine disasm project
- [**230**星][1y] [Py] [audibleblink/doxycannon](https://github.com/audibleblink/doxycannon) 为一堆OpenVPN文件分别创建Docker容器, 每个容器开启SOCKS5代理服务器并绑定至Docker主机端口, 再结合使用Burp或ProxyChains, 构建私有的Botnet
-- [**229**星][30d] [HTML] [badd1e/disclosures](https://github.com/badd1e/disclosures) Zero-day and N-day security vulnerability notes, analysis, and proof-of-concepts
-- [**229**星][27d] [HTML] [dependency-check/dependency-check-sonar-plugin](https://github.com/dependency-check/dependency-check-sonar-plugin) Integrates Dependency-Check reports into SonarQube
-- [**229**星][8d] [C#] [xenocoderce/neo-confuserex](https://github.com/xenocoderce/neo-confuserex) Updated ConfuserEX, an open-source, free obfuscator for .NET applications
-- [**229**星][7m] [Objective-C] [uliwitness/ulikit](https://github.com/uliwitness/ulikit) Miscellaneous open-sourced MacOS Cocoa code by yours truly.
-- [**229**星][4m] [Java] [thisislibra/androidprojectcreator](https://github.com/thisislibra/androidprojectcreator) Convert an APK to an Android Studio Project using multiple open-source decompilers
-- [**229**星][5y] [Shell] [s3jensen/iret](https://github.com/s3jensen/iret)
-- [**229**星][6m] [Py] [patois/dsync](https://github.com/patois/dsync) 反汇编和反编译窗口同步插件
-- [**229**星][2y] [C++] [nickcano/xenoscan](https://github.com/nickcano/xenoscan) Open source memory scanner written in C++
+- [**229**星][1y] [C] [iceonsun/rsock](https://github.com/iceonsun/rsock) The best companion of kcptun
+- [**229**星][1y] [Java] [xxxyanchenxxx/virtualappex](https://github.com/xxxyanchenxxx/virtualappex) VirtualApp 9.0适配
+- [**229**星][4m] [JS] [varchashva/letsmapyournetwork](https://github.com/varchashva/letsmapyournetwork) Lets Map Your Network enables you to visualise your physical network in form of graph with zero manual error
+- [**229**星][7m] [ObjC] [uliwitness/ulikit](https://github.com/uliwitness/ulikit) Miscellaneous open-sourced MacOS Cocoa code by yours truly.
+- [**229**星][6y] [squonk42/tl-wr703n](https://github.com/squonk42/tl-wr703n) Reverse Engineering work on the TP-LINK TL-WR703N 150M 802.11n Wi-Fi Router
+- [**229**星][9m] [C++] [microsoft/windbg-samples](https://github.com/microsoft/windbg-samples) Sample extensions, scripts, and API uses for WinDbg.
- [**229**星][2y] [Batchfile] [mdsecactivebreach/rdpinception](https://github.com/mdsecactivebreach/rdpinception) A proof of concept for the RDP Inception Attack
-- [**229**星][2y] [Shell] [linuz/sticky-keys-slayer](https://github.com/linuz/sticky-keys-slayer) Scans for accessibility tools backdoors via RDP
- [**229**星][5y] [keesj/gomo](https://github.com/keesj/gomo) Wiki pages about Android internals
-- [**229**星][2y] [Java] [ikkisoft/serialkiller](https://github.com/ikkisoft/serialkiller) Look-Ahead Java Deserialization Library
-- [**229**星][14d] [C#] [icsharpcode/avaloniailspy](https://github.com/icsharpcode/avaloniailspy) Avalonia-based .NET Decompiler (port of ILSpy)
-- [**229**星][7d] [OCaml] [fstarlang/kremlin](https://github.com/fstarlang/kremlin) KreMLin is a tool for extracting low-level F* programs to readable C code
+- [**229**星][4m] [C++] [justasmasiulis/lazy_importer](https://github.com/justasmasiulis/lazy_importer) library for importing functions from dlls in a hidden, reverse engineer unfriendly way
+- [**229**星][2d] [OCaml] [fstarlang/kremlin](https://github.com/fstarlang/kremlin) KreMLin is a tool for extracting low-level F* programs to readable C code
- [**229**星][2m] [C] [elfmaster/libelfmaster](https://github.com/elfmaster/libelfmaster) Secure ELF parsing/loading library for forensics reconstruction of malware, and robust reverse engineering tools
- [**229**星][4y] [Py] [danmcinerney/elite-proxy-finder](https://github.com/danmcinerney/elite-proxy-finder) Finds public elite anonymity proxies and concurrently tests them
-- [**229**星][7m] [C] [ctz/cifra](https://github.com/ctz/cifra) A collection of cryptographic primitives targeted at embedded use.
-- [**229**星][3y] [Perl] [brendangregg/heatmap](https://github.com/brendangregg/heatmap) Heat map generation tools
- [**229**星][4y] [JS] [brainshave/ancient-oak](https://github.com/brainshave/ancient-oak) Immutable data trees in JavaScript.
- [**229**星][1y] [Shell] [aplura/tango](https://github.com/aplura/tango) Honeypot Intelligence with Splunk
- [**229**星][1y] [Py] [amiller/honeybadgerbft](https://github.com/amiller/honeybadgerbft) The Honey Badger of BFT Protocols
+- [**229**星][2y] [CoffeeScript] [521xueweihan/shadowsocks-heroku](https://github.com/521xueweihan/shadowsocks-heroku) 本项目已删除
+- [**228**星][5m] [aleenzz/php_bug_wiki](https://github.com/aleenzz/php_bug_wiki) 代码审计相关的一些知识
+- [**228**星][3y] [C] [klsecservices/invoke-vnc](https://github.com/klsecservices/Invoke-Vnc) executes a VNC agent in-memory and initiates a reverse connection, or binds to a specified port.
- [**228**星][1y] [C++] [wwwg/wasmdec](https://github.com/wwwg/wasmdec) WebAssembly to C decompiler
-- [**228**星][19d] [w0lfschild/macos_headers](https://github.com/w0lfschild/macos_headers) a class dump of most Apple Applications and Frameworks on macOS
+- [**228**星][3m] [Py] [whitel1st/docem](https://github.com/whitel1st/docem) Uility to embed XXE and XSS payloads in docx,odt,pptx,etc (OXML_XEE on steroids)
+- [**228**星][1m] [Py] [webbreacher/whatsmyname](https://github.com/webbreacher/whatsmyname) This repository has the unified data required to perform user enumeration on various websites. Content is in a JSON file and can easily be used in other projects.
+- [**228**星][28d] [C] [vusec/ridl](https://github.com/vusec/ridl) RIDL test suite and exploits
- [**228**星][4y] [Py] [trustedsec/spraywmi](https://github.com/trustedsec/spraywmi) SprayWMI is an easy way to get mass shells on systems that support WMI. Much more effective than PSEXEC as it does not leave remnants on a system.
- [**228**星][4m] [C] [tishion/mmloader](https://github.com/tishion/mmloader) 绕过Windows PE Loader,直接从内存中加载DLL模块(x86/x64)
-- [**228**星][6y] [squonk42/tl-wr703n](https://github.com/squonk42/tl-wr703n) Reverse Engineering work on the TP-LINK TL-WR703N 150M 802.11n Wi-Fi Router
+- [**228**星][11m] [C] [stephenbradshaw/vulnserver](https://github.com/stephenbradshaw/vulnserver) Vulnerable server used for learning software exploitation
+- [**228**星][2m] [C++] [soarqin/finalhe](https://github.com/soarqin/finalhe) Final h-encore, a tool to push h-encore exploit for PS VITA/PS TV automatically
- [**228**星][3y] [C++] [secrary/infectpe](https://github.com/secrary/infectpe) Inject custom code into PE file [This project is not maintained anymore]
-- [**228**星][3y] [Visual Basic] [malwares/crypter](https://github.com/malwares/crypter) Windows Crypter
+- [**228**星][6d] [HTML] [patrowl/patrowlmanager](https://github.com/patrowl/patrowlmanager) PatrOwl - Open Source, Smart and Scalable Security Operations Orchestration Platform
+- [**228**星][2y] [C] [opsxcq/exploit-cve-2017-7494](https://github.com/opsxcq/exploit-cve-2017-7494) SambaCry exploit and vulnerable container (CVE-2017-7494)
+- [**228**星][4y] [C] [maijin/workshop2015](https://github.com/maijin/workshop2015)
- [**228**星][1y] [Py] [leapsecurity/libssh-scanner](https://github.com/leapsecurity/libssh-scanner) Script to identify hosts vulnerable to CVE-2018-10933
+- [**228**星][2m] [Py] [johnnykv/heralding](https://github.com/johnnykv/heralding) Credentials catching honeypot
- [**228**星][9m] [Py] [ivanvza/arpy](https://github.com/ivanvza/arpy) Mac OSX ARP spoof (MiTM) tool that can also plug into Gource
-- [**228**星][8d] [JS] [frenchyeti/dexcalibur](https://github.com/frenchyeti/dexcalibur) Dynamic binary instrumentation tool designed for Android application and powered by Frida. It disassembles dex, analyzes it statically, generates hooks, discovers reflected methods, stores intercepted data and does new things from it. Its aim is to be an all-in-one Android reverse engineering platform.
+- [**228**星][2y] [Java] [ikkisoft/serialkiller](https://github.com/ikkisoft/serialkiller) Look-Ahead Java Deserialization Library
+- [**228**星][9m] [Py] [honeynet/beeswarm](https://github.com/honeynet/beeswarm) Honeypot deployment made easy
+- [**228**星][2d] [C] [frida/frida-gum](https://github.com/frida/frida-gum) Low-level code instrumentation library used by frida-core
+- [**228**星][2y] [Py] [fortunec00kie/bug-monitor](https://github.com/fortunec00kie/bug-monitor) Seebug、structs、cve漏洞实时监控推送系统
+- [**228**星][1y] [C#] [djhohnstein/sharpweb](https://github.com/djhohnstein/sharpweb) .NET 2.0 CLR project to retrieve saved browser credentials from Google Chrome, Mozilla Firefox and Microsoft Internet Explorer/Edge.
+- [**228**星][3d] [Java] [constellation-app/constellation](https://github.com/constellation-app/constellation) A graph-focused data visualisation and interactive analysis application.
+- [**228**星][26d] [Go] [cloudflare/xdpcap](https://github.com/cloudflare/xdpcap) tcpdump like XDP packet capture
- [**228**星][2m] [Py] [anon-exploiter/sitebroker](https://github.com/anon-exploiter/sitebroker) A cross-platform python based utility for information gathering and penetration testing automation!
-- [**227**星][3y] [C] [klsecservices/invoke-vnc](https://github.com/klsecservices/Invoke-Vnc) executes a VNC agent in-memory and initiates a reverse connection, or binds to a specified port.
-- [**227**星][3y] [PowerShell] [xyntax/badusb-code](https://github.com/xyntax/badusb-code) 收集badusb的一些利用方式及代码
+- [**228**星][2y] [PHP] [adamdoupe/wackopicko](https://github.com/adamdoupe/wackopicko) WackoPicko is a vulnerable web application used to test web application vulnerability scanners.
+- [**227**星][3y] [PS] [xyntax/badusb-code](https://github.com/xyntax/badusb-code) 收集badusb的一些利用方式及代码
- [**227**星][7m] [C] [wkz/ply](https://github.com/wkz/ply) Light-weight Dynamic Tracer for Linux
- [**227**星][3y] [Swift] [trailofbits/secureenclavecrypto](https://github.com/trailofbits/secureenclavecrypto) Demonstration library for using the Secure Enclave on iOS
-- [**227**星][11m] [C] [stephenbradshaw/vulnserver](https://github.com/stephenbradshaw/vulnserver) Vulnerable server used for learning software exploitation
+- [**227**星][1y] [C#] [tevora-threat/sharpview](https://github.com/tevora-threat/sharpview) C# implementation of harmj0y's PowerView
+- [**227**星][2y] [C#] [t3ntman/social-engineering-payloads](https://github.com/t3ntman/social-engineering-payloads) Collection of social engineering payloads
+- [**227**星][9m] [Go] [stevenaldinger/decker](https://github.com/stevenaldinger/decker) Declarative penetration testing orchestration framework
+- [**227**星][3y] [Py] [scrapy-plugins/scrapy-jsonrpc](https://github.com/scrapy-plugins/scrapy-jsonrpc) Scrapy extension to control spiders using JSON-RPC
- [**227**星][2y] [Py] [requests/requests-ntlm](https://github.com/requests/requests-ntlm) NTLM authentication support for Requests.
- [**227**星][7m] [Shell] [r00t-3xp10it/meterpreter_paranoid_mode-ssl](https://github.com/r00t-3xp10it/meterpreter_paranoid_mode-ssl) Meterpreter Paranoid Mode - SSL/TLS connections
-- [**227**星][9m] [C++] [microsoft/windbg-samples](https://github.com/microsoft/windbg-samples) Sample extensions, scripts, and API uses for WinDbg.
+- [**227**星][7m] [Py] [paradoxis/stegcracker](https://github.com/paradoxis/stegcracker) Steganography brute-force utility to uncover hidden data inside files
+- [**227**星][9d] [Py] [mzfr/gtfo](https://github.com/mzfr/gtfo) Search gtfobins and lolbas files from your terminal
- [**227**星][2y] [Py] [mazen160/struts-pwn_cve-2017-9805](https://github.com/mazen160/struts-pwn_cve-2017-9805) An exploit for Apache Struts CVE-2017-9805
-- [**227**星][1y] [Py] [marekrei/sequence-labeler](https://github.com/marekrei/sequence-labeler) Neural network sequence labeling model
-- [**227**星][4y] [C] [maijin/workshop2015](https://github.com/maijin/workshop2015)
-- [**227**星][9m] [Py] [honeynet/beeswarm](https://github.com/honeynet/beeswarm) Honeypot deployment made easy
-- [**227**星][14d] [C] [frida/frida-gum](https://github.com/frida/frida-gum) Low-level code instrumentation library used by frida-core
-- [**227**星][2y] [Py] [fortunec00kie/bug-monitor](https://github.com/fortunec00kie/bug-monitor) Seebug、structs、cve漏洞实时监控推送系统
-- [**227**星][8d] [euphrat1ca/security_w1k1](https://github.com/euphrat1ca/security_w1k1) collect
+- [**227**星][2m] [C] [leecher1337/ntvdmx64](https://github.com/leecher1337/ntvdmx64) 在64位版本上执行Windows DOS版的 NTVDM
+- [**227**星][2d] [C] [ipsn/go-libtor](https://github.com/ipsn/go-libtor) Self-contained Tor from Go
+- [**227**星][3m] [C++] [dreamstalker/rehlds](https://github.com/dreamstalker/rehlds) Reverse-engineered HLDS
- [**227**星][3m] [C] [dongdongshe/neuzz](https://github.com/dongdongshe/neuzz) neural network assisted fuzzer
-- [**227**星][4m] [Py] [beaengine/beaengine](https://github.com/beaengine/beaengine) BeaEngine disasm project
+- [**227**星][3y] [Perl] [davidpepper/fierce-domain-scanner](https://github.com/davidpepper/fierce-domain-scanner) Fierce.pl Domain Scanner
+- [**227**星][10m] [Py] [calidog/certstream-python](https://github.com/calidog/certstream-python) Python library for connecting to CertStream
+- [**227**星][2y] [Py] [automatingosint/osint_public](https://github.com/automatingosint/osint_public)
+- [**227**星][4y] [Py] [allfro/pymetasploit](https://github.com/allfro/pymetasploit) A full-fledged msfrpc library for Metasploit framework.
+- [**226**星][1y] [lanjelot/kb](https://github.com/lanjelot/kb) Respositoy of all my notes on infosec I have been building up over the years
- [**226**星][3y] [Py] [praetorian-code/pyshell](https://github.com/praetorian-code/pyshell) PyShell makes interacting with web-based command injection less painful, emulating the feel of an interactive shell as much as possible.
- [**226**星][8m] [PHP] [wmjonssen/centcount-analytics](https://github.com/wmjonssen/centcount-analytics) An open-source web analytics software. Developed by PHP + MySQL + Redis, Can be easily deployed on your own server, 100% data ownership.
-- [**226**星][3m] [Py] [whitel1st/docem](https://github.com/whitel1st/docem) Uility to embed XXE and XSS payloads in docx,odt,pptx,etc (OXML_XEE on steroids)
-- [**226**星][1m] [Py] [webbreacher/whatsmyname](https://github.com/webbreacher/whatsmyname) This repository has the unified data required to perform user enumeration on various websites. Content is in a JSON file and can easily be used in other projects.
-- [**226**星][26d] [C] [vusec/ridl](https://github.com/vusec/ridl) RIDL test suite and exploits
- [**226**星][2m] [Py] [volatilityfoundation/profiles](https://github.com/volatilityfoundation/profiles) Volatility profiles for Linux and Mac OS X
- [**226**星][3y] [Py] [uber/focuson](https://github.com/uber/focuson) 查找基于 flask 的 Python Web App 安全问题的工具。
- [**226**星][4y] [Py] [trevp/tlslite](https://github.com/trevp/tlslite) TLS Library in python
-- [**226**星][1y] [C#] [tevora-threat/sharpview](https://github.com/tevora-threat/sharpview) C# implementation of harmj0y's PowerView
-- [**226**星][2y] [C#] [t3ntman/social-engineering-payloads](https://github.com/t3ntman/social-engineering-payloads) Collection of social engineering payloads
-- [**226**星][9m] [Go] [stevenaldinger/decker](https://github.com/stevenaldinger/decker) Declarative penetration testing orchestration framework
-- [**226**星][2m] [C++] [soarqin/finalhe](https://github.com/soarqin/finalhe) Final h-encore, a tool to push h-encore exploit for PS VITA/PS TV automatically
-- [**226**星][3y] [Py] [scrapy-plugins/scrapy-jsonrpc](https://github.com/scrapy-plugins/scrapy-jsonrpc) Scrapy extension to control spiders using JSON-RPC
-- [**226**星][11d] [TypeScript] [qtgate/qtgate-desktop-client](https://github.com/qtgate/qtgate-desktop-client) Become a trustworthy ally for the Internet Freedom
+- [**226**星][7d] [TS] [qtgate/qtgate-desktop-client](https://github.com/qtgate/qtgate-desktop-client) Become a trustworthy ally for the Internet Freedom
- [**226**星][1y] [Go] [opennota/check](https://github.com/opennota/check) A set of utilities for checking Go sources. This repository has migrated to
- [**226**星][1y] [Go] [netxfly/sec_check](https://github.com/netxfly/sec_check) 服务器安全检测的辅助工具
-- [**226**星][2m] [PowerShell] [miriamxyra/eventlist](https://github.com/miriamxyra/eventlist) help improving your Audit capabilities and to help to build your Security Operation Center.
-- [**226**星][2m] [Py] [johnnykv/heralding](https://github.com/johnnykv/heralding) Credentials catching honeypot
+- [**226**星][1y] [Py] [marekrei/sequence-labeler](https://github.com/marekrei/sequence-labeler) Neural network sequence labeling model
- [**226**星][4y] [Py] [hood3drob1n/jsrat-py](https://github.com/hood3drob1n/jsrat-py) This is my implementation of JSRat.ps1 in Python so you can now run the attack server from any OS instead of being limited to a Windows OS with Powershell enabled.
- [**226**星][6m] [Rust] [gamozolabs/mesos](https://github.com/gamozolabs/mesos) Binary coverage tool without binary modification for Windows
-- [**226**星][11m] [duoergun0729/2book](https://github.com/duoergun0729/2book) 《Web安全之深度学习实战》
-- [**226**星][3m] [C++] [dreamstalker/rehlds](https://github.com/dreamstalker/rehlds) Reverse-engineered HLDS
-- [**226**星][7d] [Java] [dexpatcher/dexpatcher-tool](https://github.com/dexpatcher/dexpatcher-tool) Android Dalvik bytecode patcher.
-- [**226**星][3y] [Perl] [davidpepper/fierce-domain-scanner](https://github.com/davidpepper/fierce-domain-scanner) Fierce.pl Domain Scanner
-- [**226**星][3m] [Py] [boy-hack/airbug](https://github.com/boy-hack/airbug) Airbug(空气洞),收集漏洞poc用于安全产品
+- [**226**星][8d] [Py] [elevenpaths/homepwn](https://github.com/elevenpaths/homepwn) HomePwn - Swiss Army Knife for Pentesting of IoT Devices
+- [**226**星][4m] [Py] [duo-labs/isthislegit](https://github.com/duo-labs/isthislegit) 收集、分析和回复网络钓鱼邮件的框架
+- [**226**星][1m] [cpuu/awesome-fuzzing](https://github.com/cpuu/awesome-fuzzing) A curated list of awesome Fuzzing(or Fuzz Testing) for software security
+- [**226**星][2m] [Go] [brompwnie/botb](https://github.com/brompwnie/botb) A container analysis and exploitation tool for pentesters and engineers.
+- [**226**星][6m] [Py] [blark/aiodnsbrute](https://github.com/blark/aiodnsbrute) Python 3.5+ DNS asynchronous brute force utility
- [**226**星][2y] [Py] [alibaba/iossecaudit](https://github.com/alibaba/iossecaudit) iOS Security Audit Toolit - A semi-automatic tool for iOS App security audit and iOS reverse engineering
-- [**226**星][2y] [PHP] [adamdoupe/wackopicko](https://github.com/adamdoupe/wackopicko) WackoPicko is a vulnerable web application used to test web application vulnerability scanners.
-- [**225**星][5m] [aleenzz/php_bug_wiki](https://github.com/aleenzz/php_bug_wiki) 代码审计相关的一些知识
+- [**225**星][1y] [dustyfresh/php-vulnerability-audit-cheatsheet](https://github.com/dustyfresh/php-vulnerability-audit-cheatsheet) This will assist you in the finding of potentially vulnerable PHP code. Each type of grep command is categorized in the type of vulnerabilities you generally find with that function.
- [**225**星][5y] [Ruby] [pwnwiki/q](https://github.com/pwnwiki/q) Exploit Pack for Metasploit - Collection of modules gathered across time and internets
-- [**225**星][1y] [Java] [xxxyanchenxxx/virtualappex](https://github.com/xxxyanchenxxx/virtualappex) VirtualApp 9.0适配
-- [**225**星][4m] [JS] [varchashva/letsmapyournetwork](https://github.com/varchashva/letsmapyournetwork) Lets Map Your Network enables you to visualise your physical network in form of graph with zero manual error
-- [**225**星][8d] [HTML] [patrowl/patrowlmanager](https://github.com/patrowl/patrowlmanager) PatrOwl - Open Source, Smart and Scalable Security Operations Orchestration Platform
-- [**225**星][7m] [Py] [paradoxis/stegcracker](https://github.com/paradoxis/stegcracker) Steganography brute-force utility to uncover hidden data inside files
-- [**225**星][2y] [C] [opsxcq/exploit-cve-2017-7494](https://github.com/opsxcq/exploit-cve-2017-7494) SambaCry exploit and vulnerable container (CVE-2017-7494)
+- [**225**星][13d] [JS] [txthinking/blackwhite](https://github.com/txthinking/blackwhite) Domain, CIDR, IP black/white list, PAC generator
+- [**225**星][1y] [C++] [ucsb-seclab/dr_checker](https://github.com/ucsb-seclab/dr_checker) 用于Linux 内核驱动程序的漏洞检测工具
+- [**225**星][1m] [C] [snar/bgpq3](https://github.com/snar/bgpq3) bgp filtering automation tool
+- [**225**星][1m] [Py] [sethsec/celerystalk](https://github.com/sethsec/celerystalk) An asynchronous enumeration & vulnerability scanner. Run all the tools on all the hosts.
+- [**225**星][7d] [o-mg/demonseed](https://github.com/o-mg/demonseed) minimal malicious USB cabl
- [**225**星][5y] [Py] [nccgroup/umap](https://github.com/nccgroup/umap) The USB host security assessment tool
- [**225**星][5y] [Py] [nanyomy/dht-woodworm](https://github.com/nanyomy/dht-woodworm) this python repo is used to get the info_hash from DHT network, enjoy it
-- [**225**星][7d] [Py] [mzfr/gtfo](https://github.com/mzfr/gtfo) Search gtfobins and lolbas files from your terminal
-- [**225**星][5y] [Objective-C] [limneos/weak_classdump](https://github.com/limneos/weak_classdump) Cycript real-time classdump . An alternative for encrypted binaries
+- [**225**星][5y] [ObjC] [limneos/weak_classdump](https://github.com/limneos/weak_classdump) Cycript real-time classdump . An alternative for encrypted binaries
+- [**225**星][4m] [JS] [jtmelton/appsensor](https://github.com/jtmelton/appsensor) A toolkit for building self-defending applications through real-time event detection and response
+- [**225**星][2m] [Py] [jackeriss/email_my_pc](https://github.com/jackeriss/email_my_pc) 远程监控电脑,也许一切只需要一封邮件。
+- [**225**星][2y] [fuzzysecurity/defcon25](https://github.com/fuzzysecurity/defcon25) UAC 0day, all day!
- [**225**星][3m] [Py] [eth0izzle/the-endorser](https://github.com/eth0izzle/the-endorser) An OSINT tool that allows you to draw out relationships between people on LinkedIn via endorsements/skills.
+- [**225**星][2m] [Py] [crowdstrike/automactc](https://github.com/crowdstrike/automactc) Automated Mac Forensic Triage Collector
- [**225**星][3y] [chaitin/sqlchop](https://github.com/chaitin/sqlchop) [DEPRECATED]A novel SQL injection detection engine built on top of SQL tokenizing and syntax analysis.
-- [**225**星][10m] [Py] [calidog/certstream-python](https://github.com/calidog/certstream-python) Python library for connecting to CertStream
-- [**225**星][2y] [Py] [automatingosint/osint_public](https://github.com/automatingosint/osint_public)
-- [**225**星][4y] [Py] [allfro/pymetasploit](https://github.com/allfro/pymetasploit) A full-fledged msfrpc library for Metasploit framework.
-- [**224**星][1y] [dustyfresh/php-vulnerability-audit-cheatsheet](https://github.com/dustyfresh/php-vulnerability-audit-cheatsheet) This will assist you in the finding of potentially vulnerable PHP code. Each type of grep command is categorized in the type of vulnerabilities you generally find with that function.
+- [**224**星][8m] [Py] [sethmlarson/virtualbox-python](https://github.com/sethmlarson/virtualbox-python) Complete implementation of VirtualBox's COM API with a Pythonic interface.
- [**224**星][4y] [Java] [nowsecure/android-forensics](https://github.com/nowsecure/android-forensics) Open source Android Forensics app and framework
-- [**224**星][12d] [GLSL] [westpointltd/tls_prober](https://github.com/westpointltd/tls_prober) A tool to fingerprint SSL/TLS servers
-- [**224**星][1m] [C] [snar/bgpq3](https://github.com/snar/bgpq3) bgp filtering automation tool
+- [**224**星][14d] [GLSL] [westpointltd/tls_prober](https://github.com/westpointltd/tls_prober) A tool to fingerprint SSL/TLS servers
- [**224**星][4m] [C] [semmle/securityexploits](https://github.com/semmle/securityexploits) PoC exploits from the Semmle Security Research team
+- [**224**星][2y] [Py] [rub-syssec/syntia](https://github.com/rub-syssec/syntia) Program synthesis based deobfuscation framework for the USENIX 2017 paper "Syntia: Synthesizing the Semantics of Obfuscated Code"
+- [**224**星][5m] [Py] [rub-nds/corstest](https://github.com/rub-nds/corstest) A simple CORS misconfiguration scanner
- [**224**星][4y] [PHP] [ripsscanner/rips](https://github.com/ripsscanner/rips) RIPS - A static source code analyser for vulnerabilities in PHP scripts
- [**224**星][6m] [ANTLR] [myriadrf/limesdr-usb](https://github.com/myriadrf/limesdr-usb) USB 3.0 version of the LimeSDR board
-- [**224**星][7d] [Py] [jamesturk/django-honeypot](https://github.com/jamesturk/django-honeypot)
-- [**224**星][2y] [fuzzysecurity/defcon25](https://github.com/fuzzysecurity/defcon25) UAC 0day, all day!
+- [**224**星][1m] [C] [libyal/libfvde](https://github.com/libyal/libfvde) Library and tools to access FileVault Drive Encryption (FVDE) encrypted volumes
+- [**224**星][6d] [Py] [kmyk/online-judge-tools](https://github.com/kmyk/online-judge-tools) Tools for online judge services. Downloading sample cases, Testing/Submitting your code, and various utilities.
+- [**224**星][9d] [Py] [jamesturk/django-honeypot](https://github.com/jamesturk/django-honeypot)
+- [**224**星][1y] [Shell] [edoverflow/megplus](https://github.com/edoverflow/megplus) Automated reconnaissance wrapper — TomNomNom's meg on steroids. [DEPRECATED]
+- [**224**星][2d] [Py] [cyberreboot/poseidon](https://github.com/cyberreboot/poseidon) Poseidon is a python-based application that leverages software defined networks (SDN) to acquire and then feed network traffic to a number of machine learning techniques. The machine learning algorithms classify and predict both the type of device and if the device is acting normally or abnormally.
+- [**224**星][1y] [PHP] [cuckoosandbox/monitor](https://github.com/cuckoosandbox/monitor) The new Cuckoo Monitor.
- [**224**星][1y] [Shell] [ctfs/write-ups-2018](https://github.com/ctfs/write-ups-2018) Wiki-like CTF write-ups repository, maintained by the community. 2018
-- [**224**星][2m] [Py] [crowdstrike/automactc](https://github.com/crowdstrike/automactc) Automated Mac Forensic Triage Collector
-- [**224**星][1m] [cpuu/awesome-fuzzing](https://github.com/cpuu/awesome-fuzzing) A curated list of awesome Fuzzing(or Fuzz Testing) for software security
-- [**224**星][6m] [Py] [blark/aiodnsbrute](https://github.com/blark/aiodnsbrute) Python 3.5+ DNS asynchronous brute force utility
- [**224**星][3y] [Py] [az0ne/github_nuggests](https://github.com/az0ne/github_nuggests) 自动爬取Github上文件敏感信息泄露,抓取邮箱密码并自动登录邮箱验证,支持126,qq,sina,163邮箱
- [**224**星][3y] [PHP] [aszone/avenger-sh](https://github.com/aszone/avenger-sh) Project for finding vunerabilities in mass.
-- [**224**星][1y] [Py] [9b/chirp](https://github.com/9b/chirp) Interface to manage and centralize Google Alert information
+- [**224**星][2y] [Py] [9b/chirp](https://github.com/9b/chirp) Interface to manage and centralize Google Alert information
- [**224**星][7m] [Java] [0xalexei/infiltrate2019](https://github.com/0xalexei/infiltrate2019) INFILTRATE 2019 Demo Materials
-- [**223**星][24d] [C++] [boomerangdecompiler/boomerang](https://github.com/BoomerangDecompiler/boomerang) Boomerang Decompiler - Fighting the code-rot :)
+- [**223**星][26d] [C++] [boomerangdecompiler/boomerang](https://github.com/BoomerangDecompiler/boomerang) Boomerang Decompiler - Fighting the code-rot :)
+- [**223**星][3m] [Java] [virb3/trustmealready](https://github.com/virb3/trustmealready) Disable SSL verification and pinning on Android, system-wide
- [**223**星][2y] [Go] [vedhavyas/zwfp](https://github.com/vedhavyas/zwfp) Zero-Width fingerprinting
-- [**223**星][25d] [Py] [secureworks/dalton](https://github.com/secureworks/dalton) 使用预定义/指定的规则, 针对IDS传感器(例如Snort/Suricata)进行网络数据包捕获
+- [**223**星][1m] [Dockerfile] [thinkst/canarytokens-docker](https://github.com/thinkst/canarytokens-docker) Docker configuration to quickly setup your own Canarytokens.
+- [**223**星][4y] [Ruby] [strazzere/apkfuscator](https://github.com/strazzere/apkfuscator) A generic DEX file obfuscator and munger
+- [**223**星][27d] [Py] [secureworks/dalton](https://github.com/secureworks/dalton) 使用预定义/指定的规则, 针对IDS传感器(例如Snort/Suricata)进行网络数据包捕获
+- [**223**星][2m] [Shell] [screetsec/sudomy](https://github.com/screetsec/sudomy) Sudomy is a subdomain enumeration tool, created using a bash script, to analyze domains and collect subdomains in fast and comprehensive way . Report output in HTML or CSV format
+- [**223**星][6m] [Py] [ruped24/toriptables2](https://github.com/ruped24/toriptables2) Tor Iptables script is an anonymizer that sets up iptables and tor to route all services and traffic including DNS through the Tor network.
- [**223**星][5m] [JS] [pavanw3b/sh00t](https://github.com/pavanw3b/sh00t) Security Testing is not as simple as right click > Scan. It's messy, a tough game. What if you had missed to test just that one thing and had to regret later? Sh00t is a highly customizable, intelligent platform that understands the life of bug hunters and emphasizes on manual security testing.
- [**223**星][10m] [C] [muquit/mailsend](https://github.com/muquit/mailsend) A program to send mail via SMTP from command line
- [**223**星][2y] [Max] [maroueneboubakri/lscan](https://github.com/maroueneboubakri/lscan) lscan is a library identification tool on statically linked/stripped binaries
-- [**223**星][1m] [C] [libyal/libfvde](https://github.com/libyal/libfvde) Library and tools to access FileVault Drive Encryption (FVDE) encrypted volumes
-- [**223**星][2y] [C] [jas502n/0day-security-software-vulnerability-analysis-technology](https://github.com/jas502n/0day-security-software-vulnerability-analysis-technology) 0day安全_软件漏洞分析技术
+- [**223**星][1y] [Java] [ewilded/psychopath](https://github.com/ewilded/psychopath) psychoPATH - an advanced path traversal tool. Features: evasive techniques, dynamic web root list generation, output encoding, site map-searching payload generator, LFI mode, nix & windows support, single byte generator, payload export.
- [**223**星][10m] [C#] [equifox/ksdumper](https://github.com/equifox/ksdumper) Dumping processes using the power of kernel space !
- [**223**星][3y] [Py] [dxa4481/snapper](https://github.com/dxa4481/snapper) A security tool for grabbing screenshots of many web hosts
-- [**223**星][4m] [Py] [duo-labs/isthislegit](https://github.com/duo-labs/isthislegit) 收集、分析和回复网络钓鱼邮件的框架
- [**223**星][11m] [Perl] [daniel-nichter/hackmysql.com](https://github.com/daniel-nichter/hackmysql.com) Deprecated tools from HackMySQL.com
+- [**223**星][6m] [JS] [cr0hn/vulnerable-node](https://github.com/cr0hn/vulnerable-node) A very vulnerable web site written in NodeJS with the purpose of have a project with identified vulnerabilities to test the quality of security analyzers tools tools
+- [**223**星][2m] [Go] [caddyserver/forwardproxy](https://github.com/caddyserver/forwardproxy) Forward proxy plugin for the Caddy web server
+- [**223**星][2m] [Py] [brent-stone/can_reverse_engineering](https://github.com/brent-stone/can_reverse_engineering) Automated Payload Reverse Engineering Pipeline for the Controller Area Network (CAN) protocol
- [**223**星][6y] [Shell] [brav0hax/easy-creds](https://github.com/brav0hax/easy-creds) leverages tools for stealing credentials during a pen test
- [**223**星][2y] [Py] [beetlechunks/redsails](https://github.com/beetlechunks/redsails) RedSails is a Python based post-exploitation project aimed at bypassing host based security monitoring and logging. DerbyCon 2017 Talk:
-- [**222**星][1y] [lanjelot/kb](https://github.com/lanjelot/kb) Respositoy of all my notes on infosec I have been building up over the years
+- [**222**星][3y] [Java] [guardianproject/lildebi](https://github.com/guardianproject/lildebi) UNMAINTAINED please adopt! we can no longer maintain this
- [**222**星][1y] [C++] [wnagzihxa1n/browsersecurity](https://github.com/wnagzihxa1n/browsersecurity) 我在学习浏览器安全过程中整理的漏洞分析笔记与相关的学习资料
-- [**222**星][2m] [vixentael/my-talks](https://github.com/vixentael/my-talks) List of my talks and workshops: security engineering, applied cryptography, secure software development
-- [**222**星][1y] [C++] [ucsb-seclab/dr_checker](https://github.com/ucsb-seclab/dr_checker) 用于Linux 内核驱动程序的漏洞检测工具
-- [**222**星][4y] [Ruby] [strazzere/apkfuscator](https://github.com/strazzere/apkfuscator) A generic DEX file obfuscator and munger
+- [**222**星][13d] [PHP] [wapmorgan/phpcodefixer](https://github.com/wapmorgan/phpcodefixer) Analyzer of PHP code to search issues with deprecated functionality in newer interpreter versions.
+- [**222**星][2d] [vixentael/my-talks](https://github.com/vixentael/my-talks) List of my talks and workshops: security engineering, applied cryptography, secure software development
+- [**222**星][1y] [Py] [tkcert/mail-security-tester](https://github.com/tkcert/mail-security-tester) A testing framework for mail security and filtering solutions.
- [**222**星][2y] [Ruby] [sophsec/ruby-nmap](https://github.com/sophsec/ruby-nmap) A Rubyful interface to the Nmap exploration tool and security / port scanner.
-- [**222**星][11d] [HTML] [sectalks/sectalks](https://github.com/sectalks/sectalks) CTFs, solutions and presentations
-- [**222**星][2y] [Py] [rub-syssec/syntia](https://github.com/rub-syssec/syntia) Program synthesis based deobfuscation framework for the USENIX 2017 paper "Syntia: Synthesizing the Semantics of Obfuscated Code"
+- [**222**星][13d] [HTML] [sectalks/sectalks](https://github.com/sectalks/sectalks) CTFs, solutions and presentations
- [**222**星][3m] [Py] [rivermont/spidy](https://github.com/rivermont/spidy) The simple, easy to use command line web crawler.
+- [**222**星][12m] [C++] [rexdf/commandtrayhost](https://github.com/rexdf/commandtrayhost) 监控Windows systray的命令行工具
- [**222**星][2y] [C] [lgeek/spec_poc_arm](https://github.com/lgeek/spec_poc_arm) (AArch64 硬件平台)Meltdown PoC(变种3a): 从用户模式读取所有的 ARM 系统寄存器
+- [**222**星][4y] [lavalamp-/password-lists](https://github.com/lavalamp-/password-lists) Password lists for use in penetration testing situations, broken up by TLD.
+- [**222**星][7m] [Py] [kingkaki/weblogic-scan](https://github.com/kingkaki/weblogic-scan) weblogic 漏洞扫描工具
- [**222**星][2y] [JS] [jameshabben/evolve](https://github.com/jameshabben/evolve) Web interface for the Volatility Memory Forensics Framework
- [**222**星][2y] [C++] [intelpt/windowsintelpt](https://github.com/intelpt/windowsintelpt) 实现Intel Skylake架构下的Intel处理器追踪功能的Windows驱动
- [**222**星][2y] [C] [iaik/armageddon](https://github.com/iaik/armageddon) This repository contains tools to perform modern cache attacks on ARM.
-- [**222**星][1y] [Java] [ewilded/psychopath](https://github.com/ewilded/psychopath) psychoPATH - an advanced path traversal tool. Features: evasive techniques, dynamic web root list generation, output encoding, site map-searching payload generator, LFI mode, nix & windows support, single byte generator, payload export.
-- [**222**星][1y] [PHP] [cuckoosandbox/monitor](https://github.com/cuckoosandbox/monitor) The new Cuckoo Monitor.
-- [**222**星][2y] [Perl] [csirtgadgets/massive-octo-spice](https://github.com/csirtgadgets/massive-octo-spice) DEPRECATED - USE v3 (bearded-avenger)
-- [**222**星][1m] [Java] [constellation-app/constellation](https://github.com/constellation-app/constellation) A graph-focused data visualisation and interactive analysis application.
-- [**222**星][2m] [Go] [brompwnie/botb](https://github.com/brompwnie/botb) A container analysis and exploitation tool for pentesters and engineers.
-- [**221**星][8m] [Py] [sethmlarson/virtualbox-python](https://github.com/sethmlarson/virtualbox-python) Complete implementation of VirtualBox's COM API with a Pythonic interface.
-- [**221**星][11d] [PHP] [wapmorgan/phpcodefixer](https://github.com/wapmorgan/phpcodefixer) Analyzer of PHP code to search issues with deprecated functionality in newer interpreter versions.
-- [**221**星][27d] [PowerShell] [tonyphipps/meerkat](https://github.com/tonyphipps/meerkat) A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.
-- [**221**星][1y] [Py] [tkcert/mail-security-tester](https://github.com/tkcert/mail-security-tester) A testing framework for mail security and filtering solutions.
-- [**221**星][1m] [Py] [sethsec/celerystalk](https://github.com/sethsec/celerystalk) An asynchronous enumeration & vulnerability scanner. Run all the tools on all the hosts.
-- [**221**星][6m] [Py] [ruped24/toriptables2](https://github.com/ruped24/toriptables2) Tor Iptables script is an anonymizer that sets up iptables and tor to route all services and traffic including DNS through the Tor network.
+- [**222**星][3m] [Py] [caringcaribou/caringcaribou](https://github.com/caringcaribou/caringcaribou) A friendly car security exploration tool for the CAN bus
+- [**222**星][4m] [PS] [byt3bl33d3r/offensivedlr](https://github.com/byt3bl33d3r/offensivedlr) Toolbox containing research notes & PoC code for weaponizing .NET's DLR
+- [**222**星][3y] [axi0mx/alloc8](https://github.com/axi0mx/alloc8) Write-up for alloc8 untethered bootrom exploit for iPhone 3GS
+- [**221**星][2d] [C] [googleprojectzero/ktrw](https://github.com/googleprojectzero/ktrw) An iOS kernel debugger based on a KTRR bypass for A11 iPhones that works with LLDB.
+- [**221**星][10m] [Java] [uprootlabs/gngr](https://github.com/uprootlabs/gngr) a cross-platform browser focussed on privacy.
+- [**221**星][29d] [PS] [tonyphipps/meerkat](https://github.com/tonyphipps/meerkat) A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.
+- [**221**星][1y] [C] [openorbis/mira-project](https://github.com/openorbis/mira-project) The Homebrew Platform
- [**221**星][2y] [Py] [ofek/privy](https://github.com/ofek/privy) An easy, fast lib to correctly password-protect your data
-- [**221**星][1m] [o-mg/demonseed](https://github.com/o-mg/demonseed) minimal malicious USB cabl
-- [**221**星][2m] [Py] [mushorg/snare](https://github.com/mushorg/snare) Super Next generation Advanced Reactive honEypot
-- [**221**星][4y] [lavalamp-/password-lists](https://github.com/lavalamp-/password-lists) Password lists for use in penetration testing situations, broken up by TLD.
-- [**221**星][10d] [Py] [kmyk/online-judge-tools](https://github.com/kmyk/online-judge-tools) Tools for online judge services. Downloading sample cases, Testing/Submitting your code, and various utilities.
-- [**221**星][12m] [C] [gkdr/lurch](https://github.com/gkdr/lurch) XEP-0384: OMEMO Encryption for libpurple.
-- [**221**星][1y] [Shell] [edoverflow/megplus](https://github.com/edoverflow/megplus) Automated reconnaissance wrapper — TomNomNom's meg on steroids. [DEPRECATED]
-- [**221**星][3m] [Py] [caringcaribou/caringcaribou](https://github.com/caringcaribou/caringcaribou) A friendly car security exploration tool for the CAN bus
-- [**221**星][4m] [PowerShell] [byt3bl33d3r/offensivedlr](https://github.com/byt3bl33d3r/offensivedlr) Toolbox containing research notes & PoC code for weaponizing .NET's DLR
-- [**221**星][2m] [Py] [brent-stone/can_reverse_engineering](https://github.com/brent-stone/can_reverse_engineering) Automated Payload Reverse Engineering Pipeline for the Controller Area Network (CAN) protocol
-- [**221**星][3y] [axi0mx/alloc8](https://github.com/axi0mx/alloc8) Write-up for alloc8 untethered bootrom exploit for iPhone 3GS
+- [**221**星][3d] [Py] [mushorg/snare](https://github.com/mushorg/snare) Super Next generation Advanced Reactive honEypot
+- [**221**星][6m] [Py] [malwarecantfly/vba2graph](https://github.com/malwarecantfly/vba2graph) Generate call graphs from VBA code, for easier analysis of malicious documents.
+- [**221**星][1y] [C] [hashcat/princeprocessor](https://github.com/hashcat/princeprocessor) Standalone password candidate generator using the PRINCE algorithm
+- [**221**星][2y] [C++] [ha7ilm/qtcsdr](https://github.com/ha7ilm/qtcsdr) It turns your Raspberry Pi 2 and RTL-SDR into an amateur radio transceiver! (Released under BSD license.)
+- [**221**星][2y] [Perl] [csirtgadgets/massive-octo-spice](https://github.com/csirtgadgets/massive-octo-spice) DEPRECATED - USE v3 (bearded-avenger)
+- [**221**星][3m] [Go] [cloudflare/tls-tris](https://github.com/cloudflare/tls-tris) crypto/tls, now with 100% more 1.3. THE API IS NOT STABLE AND DOCUMENTATION IS NOT GUARANTEED.
+- [**221**星][11m] [Py] [chris408/known_hosts-hashcat](https://github.com/chris408/known_hosts-hashcat) A guide and tool for cracking ssh known_hosts files with hashcat
- [**221**星][3y] [Smarty] [analytically/haproxy-ddos](https://github.com/analytically/haproxy-ddos) DDOS and attack resilient HAProxy configuration. To be used behind CloudFlare.
-- [**220**星][24d] [Py] [volatilityfoundation/community](https://github.com/volatilityfoundation/community) Volatility plugins developed and maintained by the community
-- [**220**星][1m] [Dockerfile] [thinkst/canarytokens-docker](https://github.com/thinkst/canarytokens-docker) Docker configuration to quickly setup your own Canarytokens.
-- [**220**星][12m] [C++] [rexdf/commandtrayhost](https://github.com/rexdf/commandtrayhost) 监控Windows systray的命令行工具
+- [**221**星][3y] [1u4nx/exploit-exercises-nebula](https://github.com/1u4nx/exploit-exercises-nebula) Exploit-Exercises Nebula全攻略——Linux平台下的漏洞分析入门
+- [**220**星][7m] [Shell] [t0xst/linux](https://github.com/t0xst/linux) linux安全检查
+- [**220**星][26d] [Py] [volatilityfoundation/community](https://github.com/volatilityfoundation/community) Volatility plugins developed and maintained by the community
+- [**220**星][5m] [Shell] [vedetta-com/vedetta](https://github.com/vedetta-com/vedetta) OpenBSD Router Boilerplate
+- [**220**星][8m] [Go] [valyala/goloris](https://github.com/valyala/goloris) Slowloris for nginx DoS. Written in go
+- [**220**星][2y] [sh4hin/mobileapp-pentest-cheatsheet](https://github.com/sh4hin/mobileapp-pentest-cheatsheet) The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.
+- [**220**星][3y] [Standard ML] [rootkovska/codehash.db](https://github.com/rootkovska/codehash.db) A public database for software and firmware hashes
+- [**220**星][4y] [C] [rapid7/meterpreter](https://github.com/rapid7/meterpreter) THIS REPO IS OBSOLETE. USE
- [**220**星][11m] [PHP] [paragonie/anti-csrf](https://github.com/paragonie/anti-csrf) Full-Featured Anti-CSRF Library
-- [**220**星][1y] [C] [openorbis/mira-project](https://github.com/openorbis/mira-project) The Homebrew Platform
- [**220**星][8m] [opennetworkingfoundation/delta](https://github.com/opennetworkingfoundation/delta) PROJECT DELTA: SDN SECURITY EVALUATION FRAMEWORK
-- [**220**星][6m] [Py] [malwarecantfly/vba2graph](https://github.com/malwarecantfly/vba2graph) Generate call graphs from VBA code, for easier analysis of malicious documents.
- [**220**星][1y] [Go] [maksadbek/tcpovericmp](https://github.com/maksadbek/tcpovericmp) TCP implementation over ICMP protocol to bypass firewalls
- [**220**星][8m] [letoram/senseye](https://github.com/letoram/senseye) Dynamic Visual Debugging / Reverse Engineering Toolsuite
- [**220**星][2y] [Py] [kbdancer/tplinkkey](https://github.com/kbdancer/tplinkkey) 根据TPLINK系列路由器存在的漏洞批量扫描获取wifi密码
-- [**220**星][4m] [C++] [justasmasiulis/lazy_importer](https://github.com/justasmasiulis/lazy_importer) library for importing functions from dlls in a hidden, reverse engineer unfriendly way
-- [**220**星][4y] [PowerShell] [jseidl/babadook](https://github.com/jseidl/babadook) Connection-less Powershell Persistent and Resilient Backdoor
+- [**220**星][4y] [PS] [jseidl/babadook](https://github.com/jseidl/babadook) Connection-less Powershell Persistent and Resilient Backdoor
+- [**220**星][2m] [Py] [initstring/uptux](https://github.com/initstring/uptux) Linux privilege escalation checks (systemd, dbus, socket fun, etc)
+- [**220**星][12m] [C] [gkdr/lurch](https://github.com/gkdr/lurch) XEP-0384: OMEMO Encryption for libpurple.
- [**220**星][2y] [Py] [feicong/jni_helper](https://github.com/feicong/jni_helper) AndroidSO自动化分析工具(非虫)
-- [**220**星][6m] [JS] [cr0hn/vulnerable-node](https://github.com/cr0hn/vulnerable-node) A very vulnerable web site written in NodeJS with the purpose of have a project with identified vulnerabilities to test the quality of security analyzers tools tools
-- [**220**星][2m] [Go] [cloudflare/tls-tris](https://github.com/cloudflare/tls-tris) crypto/tls, now with 100% more 1.3. THE API IS NOT STABLE AND DOCUMENTATION IS NOT GUARANTEED.
-- [**220**星][11m] [Py] [chris408/known_hosts-hashcat](https://github.com/chris408/known_hosts-hashcat) A guide and tool for cracking ssh known_hosts files with hashcat
+- [**220**星][1y] [C#] [easy66/monohooker](https://github.com/easy66/monohooker) hook C# method at runtime without modify dll file (such as UnityEditor.dll)
- [**220**星][2y] [C++] [bee13oy/av_kernel_vulns](https://github.com/bee13oy/av_kernel_vulns) Pocs for Antivirus Software‘s Kernel Vulnerabilities
+- [**220**星][2y] [Py] [artkond/cisco-snmp-rce](https://github.com/artkond/cisco-snmp-rce) Cisco SNMP 服务 REC 漏洞 PoC(CVE-2017-6736)
- [**219**星][2y] [itrump/shadowsocksrss](https://github.com/itrump/shadowsocksrss) shadowsocksR backup, windows / android / mac downloads, source code backup
-- [**219**星][14d] [Py] [wazuh/wazuh-ruleset](https://github.com/wazuh/wazuh-ruleset) ruleset is used to detect attacks, intrusions, software misuse, configuration problems, application errors, malware, rootkits, system anomalies or security policy violations.
+- [**219**星][4m] [security-checklist/php-security-check-list](https://github.com/security-checklist/php-security-check-list) PHP Security Check List [ EN ]
+- [**219**星][16d] [Py] [wazuh/wazuh-ruleset](https://github.com/wazuh/wazuh-ruleset) ruleset is used to detect attacks, intrusions, software misuse, configuration problems, application errors, malware, rootkits, system anomalies or security policy violations.
- [**219**星][2y] [Py] [vlall/darksearch](https://github.com/vlall/darksearch) query cached onion sites, irc chatrooms, various pdfs, game chats, blackhat forums etc
-- [**219**星][3m] [Java] [virb3/trustmealready](https://github.com/virb3/trustmealready) Disable SSL verification and pinning on Android, system-wide
-- [**219**星][4m] [Shell] [vedetta-com/vedetta](https://github.com/vedetta-com/vedetta) OpenBSD Router Boilerplate
- [**219**星][8m] [Py] [skewwg/vulscan](https://github.com/skewwg/vulscan) 漏洞扫描:st2、tomcat、未授权访问等等
-- [**219**星][2y] [sh4hin/mobileapp-pentest-cheatsheet](https://github.com/sh4hin/mobileapp-pentest-cheatsheet) The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.
-- [**219**星][4y] [C] [rapid7/meterpreter](https://github.com/rapid7/meterpreter) THIS REPO IS OBSOLETE. USE
+- [**219**星][8d] [sab0tag3d/mitm-cheatsheet](https://github.com/sab0tag3d/mitm-cheatsheet) All MITM attacks in one place.
+- [**219**星][5m] [ObjC] [rickyzhang82/tethering](https://github.com/rickyzhang82/tethering) Proxy and DNS Server on iOS
+- [**219**星][2y] [Shell] [r00t-3xp10it/trojanizer](https://github.com/r00t-3xp10it/trojanizer) 将用户提供的2个可执行文件打包为自解压文件, 自解压文件在执行时会执行可执行文件
+- [**219**星][12m] [Shell] [nviso-be/magisktrustusercerts](https://github.com/nviso-be/magisktrustusercerts) A Magisk module that automatically adds user certificates to the system root CA store
- [**219**星][2y] [Ruby] [nahamsec/lazys3](https://github.com/nahamsec/lazys3)
-- [**219**星][2m] [Py] [initstring/uptux](https://github.com/initstring/uptux) Linux privilege escalation checks (systemd, dbus, socket fun, etc)
-- [**219**星][1y] [C] [hashcat/princeprocessor](https://github.com/hashcat/princeprocessor) Standalone password candidate generator using the PRINCE algorithm
-- [**219**星][2y] [C++] [ha7ilm/qtcsdr](https://github.com/ha7ilm/qtcsdr) It turns your Raspberry Pi 2 and RTL-SDR into an amateur radio transceiver! (Released under BSD license.)
+- [**219**星][2y] [Go] [gamexg/proxyclient](https://github.com/gamexg/proxyclient) golang 代理库,和net一致的API。支持 socks4、socks4a、socks5、http、https 等代理协议。
+- [**219**星][2m] [C] [david942j/ctf-writeups](https://github.com/david942j/ctf-writeups) Collection of scripts and writeups
- [**219**星][8m] [Py] [coalfire-research/deathmetal](https://github.com/coalfire-research/deathmetal) Red team & penetration testing tools to exploit the capabilities of Intel AMT
-- [**219**星][2y] [Py] [artkond/cisco-snmp-rce](https://github.com/artkond/cisco-snmp-rce) Cisco SNMP 服务 REC 漏洞 PoC(CVE-2017-6736)
-- [**219**星][3y] [1u4nx/exploit-exercises-nebula](https://github.com/1u4nx/exploit-exercises-nebula) Exploit-Exercises Nebula全攻略——Linux平台下的漏洞分析入门
-- [**218**星][4m] [security-checklist/php-security-check-list](https://github.com/security-checklist/php-security-check-list) PHP Security Check List [ EN ]
+- [**219**星][7m] [bhdresh/dejavu](https://github.com/bhdresh/dejavu) deception framework which can be used to deploy decoys across the infrastructure
+- [**219**星][1y] [basilfx/tradfri-hacking](https://github.com/basilfx/tradfri-hacking) Hacking the IKEA TRÅDFRI light bulbs and accessories.
+- [**218**星][1m] [PHP] [zigoo0/jsonbee](https://github.com/zigoo0/jsonbee) A ready to use JSONP endpoints/payloads to help bypass content security policy (CSP) of different websites.
- [**218**星][8m] [JS] [zhuyingda/veneno](https://github.com/zhuyingda/veneno) 用Node.js编写的Web安全测试框架
-- [**218**星][8m] [Go] [valyala/goloris](https://github.com/valyala/goloris) Slowloris for nginx DoS. Written in go
- [**218**星][3y] [C] [sslab-gatech/opensgx](https://github.com/sslab-gatech/opensgx) An open platform for Intel SGX Environments & Prerequisites
- [**218**星][1y] [PHP] [softius/php-cross-domain-proxy](https://github.com/softius/php-cross-domain-proxy) PHP Proxy for Cross Domain Requests
-- [**218**星][1m] [PowerShell] [rsmudge/elevatekit](https://github.com/rsmudge/elevatekit) The Elevate Kit demonstrates how to use third-party privilege escalation attacks with Cobalt Strike's Beacon payload.
- [**218**星][1y] [JS] [roccomuso/kickthemout](https://github.com/roccomuso/kickthemout) Kick devices off your network by performing an ARP Spoof attack with Node.js.
- [**218**星][1y] [Py] [nccgroup/driverbuddy](https://github.com/nccgroup/driverbuddy) 辅助逆向Windows内核驱动
- [**218**星][6m] [Py] [mgeeky/tomcatwardeployer](https://github.com/mgeeky/tomcatwardeployer) Apache Tomcat auto WAR deployment & pwning penetration testing tool.
-- [**218**星][7m] [Py] [kingkaki/weblogic-scan](https://github.com/kingkaki/weblogic-scan) weblogic 漏洞扫描工具
+- [**218**星][1y] [Py] [mazen160/server-status_pwn](https://github.com/mazen160/server-status_pwn) A script that monitors and extracts requested URLs and clients connected to the service by exploiting publicly accessible Apache server-status instances.
+- [**218**星][11m] [AppleScript] [lifepillar/csvkeychain](https://github.com/lifepillar/csvkeychain) Import/export between Apple Keychain.app and plain CSV file.
+- [**218**星][9m] [jesusprubio/awesome-nodejs-pentest](https://github.com/jesusprubio/awesome-nodejs-pentest)
+- [**218**星][8m] [ivan1ee/net-deserialize](https://github.com/ivan1ee/net-deserialize) 总结了十篇.Net反序列化文章,持续更新
- [**218**星][10m] [C] [feexd/pocs](https://github.com/feexd/pocs)
-- [**218**星][1y] [C#] [djhohnstein/sharpweb](https://github.com/djhohnstein/sharpweb) .NET 2.0 CLR project to retrieve saved browser credentials from Google Chrome, Mozilla Firefox and Microsoft Internet Explorer/Edge.
-- [**218**星][2m] [C] [david942j/ctf-writeups](https://github.com/david942j/ctf-writeups) Collection of scripts and writeups
- [**218**星][2m] [C++] [d3v1l401/findcrypt-ghidra](https://github.com/d3v1l401/findcrypt-ghidra) IDA Pro's FindCrypt ported to Ghidra, with an updated and customizable signature database
+- [**218**星][2y] [cure53/browser-sec-whitepaper](https://github.com/cure53/browser-sec-whitepaper) Cure53 Browser Security White Paper
- [**218**星][2y] [Py] [chromium/web-page-replay](https://github.com/chromium/web-page-replay) Record live Web pages and use them for local performance testing!
- [**218**星][3m] [Shell] [blacktop/docker-cuckoo](https://github.com/blacktop/docker-cuckoo) Cuckoo Sandbox Dockerfile
- [**217**星][10m] [JS] [jopyth/mmm-remote-control](https://github.com/jopyth/mmm-remote-control) Magic Mirror Module to shutdown or configure your mirror
-- [**217**星][1m] [PHP] [zigoo0/jsonbee](https://github.com/zigoo0/jsonbee) A ready to use JSONP endpoints/payloads to help bypass content security policy (CSP) of different websites.
-- [**217**星][1m] [C] [shchmue/lockpick_rcm](https://github.com/shchmue/lockpick_rcm) Nintendo Switch encryption key derivation bare metal RCM payload
+- [**217**星][10m] [Py] [mckinsey666/vocabs](https://github.com/Mckinsey666/vocabs) A lightweight online dictionary integration to the command line
+- [**217**星][2y] [C++] [spacehuhn/arduinopcap](https://github.com/spacehuhn/arduinopcap) A library for creating and sending .pcap files for Wireshark and other programms.
- [**217**星][1y] [Py] [sensepost/spartan](https://github.com/sensepost/spartan) Frontpage and Sharepoint fingerprinting and attack tool.
-- [**217**星][2m] [Shell] [screetsec/sudomy](https://github.com/screetsec/sudomy) Sudomy is a subdomain enumeration tool, created using a bash script, to analyze domains and collect subdomains in fast and comprehensive way . Report output in HTML or CSV format
-- [**217**星][2y] [Shell] [r00t-3xp10it/trojanizer](https://github.com/r00t-3xp10it/trojanizer) 将用户提供的2个可执行文件打包为自解压文件, 自解压文件在执行时会执行可执行文件
+- [**217**星][3y] [Py] [rajeshmajumdar/brutexss](https://github.com/rajeshmajumdar/brutexss) BruteXSS is a tool written in python simply to find XSS vulnerabilities in web application. This tool was originally developed by Shawar Khan in CLI. I just redesigned it and made it GUI for more convienience.
+- [**217**星][3d] [C++] [p4lang/p4c](https://github.com/p4lang/p4c) P4_16 prototype compiler
+- [**217**星][27d] [Py] [nteseyes/pylane](https://github.com/nteseyes/pylane) An python vm injector with debug tools, based on gdb.
- [**217**星][2y] [Py] [maxwellkoh/2fassassin](https://github.com/maxwellkoh/2fassassin) Bypass Two-Factor-Authentication
-- [**217**星][11m] [AppleScript] [lifepillar/csvkeychain](https://github.com/lifepillar/csvkeychain) Import/export between Apple Keychain.app and plain CSV file.
-- [**217**星][28d] [C] [libyal/libesedb](https://github.com/libyal/libesedb) Library and tools to access the Extensible Storage Engine (ESE) Database File (EDB) format.
+- [**217**星][2d] [C] [libyal/libesedb](https://github.com/libyal/libesedb) Library and tools to access the Extensible Storage Engine (ESE) Database File (EDB) format.
+- [**217**星][9m] [Go] [justmao945/mallory](https://github.com/justmao945/mallory) HTTP/HTTPS proxy over SSH
- [**217**星][9m] [Go] [joncooperworks/judas](https://github.com/joncooperworks/judas) a phishing proxy
-- [**217**星][8m] [ivan1ee/net-deserialize](https://github.com/ivan1ee/net-deserialize) 总结了十篇.Net反序列化文章,持续更新
+- [**217**星][4m] [Py] [isaacdelly/plutus](https://github.com/isaacdelly/plutus) An automated bitcoin wallet collider that brute forces random wallet addresses
- [**217**星][4m] [Py] [iojw/socialscan](https://github.com/iojw/socialscan) Check email address and username availability on online platforms with 100% accuracy
-- [**217**星][1y] [foobarto/redteam-notebook](https://github.com/foobarto/redteam-notebook) Collection of commands, tips and tricks and references I found useful during preparation for OSCP exam.
-- [**217**星][1y] [C#] [easy66/monohooker](https://github.com/easy66/monohooker) hook C# method at runtime without modify dll file (such as UnityEditor.dll)
-- [**217**星][14d] [Puppet] [dev-sec/puppet-os-hardening](https://github.com/dev-sec/puppet-os-hardening) This puppet module provides numerous security-related configurations, providing all-round base protection.
-- [**217**星][2y] [cure53/browser-sec-whitepaper](https://github.com/cure53/browser-sec-whitepaper) Cure53 Browser Security White Paper
-- [**217**星][7m] [bhdresh/dejavu](https://github.com/bhdresh/dejavu) deception framework which can be used to deploy decoys across the infrastructure
-- [**217**星][2y] [Py] [003random/003recon](https://github.com/003random/003recon) Some tools to automate recon - 003random
-- [**216**星][7d] [C] [googleprojectzero/ktrw](https://github.com/googleprojectzero/ktrw) An iOS kernel debugger based on a KTRR bypass for A11 iPhones that works with LLDB.
-- [**216**星][10m] [Py] [mckinsey666/vocabs](https://github.com/Mckinsey666/vocabs) A lightweight online dictionary integration to the command line
+- [**217**星][1y] [Py] [dionach/cmsmap](https://github.com/dionach/cmsmap) CMSmap is a python open source CMS scanner that automates the process of detecting security flaws of the most popular CMSs.
+- [**217**星][16d] [Puppet] [dev-sec/puppet-os-hardening](https://github.com/dev-sec/puppet-os-hardening) This puppet module provides numerous security-related configurations, providing all-round base protection.
+- [**217**星][2y] [PS] [arno0x/dbc2](https://github.com/arno0x/dbc2) DBC2 (DropboxC2) is a modular post-exploitation tool, composed of an agent running on the victim's machine, a controler, running on any machine, powershell modules, and Dropbox servers as a means of communication.
- [**216**星][3y] [Java] [zhengmin1989/wechatsportcheat](https://github.com/zhengmin1989/wechatsportcheat) 手把手教你当微信运动第一名 – 利用Android Hook进行微信运动作弊
+- [**216**星][23d] [JS] [strangerealintel/cyberthreatintel](https://github.com/strangerealintel/cyberthreatintel) Analysis of malware and Cyber Threat Intel of APT and cybercriminals groups
- [**216**星][6y] [Shell] [silverfoxx/pwnstar](https://github.com/silverfoxx/pwnstar) PwnSTAR (Pwn SofT-Ap scRipt) - for all your fake-AP needs!
-- [**216**星][3y] [Py] [rajeshmajumdar/brutexss](https://github.com/rajeshmajumdar/brutexss) BruteXSS is a tool written in python simply to find XSS vulnerabilities in web application. This tool was originally developed by Shawar Khan in CLI. I just redesigned it and made it GUI for more convienience.
-- [**216**星][12m] [Shell] [nviso-be/magisktrustusercerts](https://github.com/nviso-be/magisktrustusercerts) A Magisk module that automatically adds user certificates to the system root CA store
-- [**216**星][1y] [Py] [mazen160/server-status_pwn](https://github.com/mazen160/server-status_pwn) A script that monitors and extracts requested URLs and clients connected to the service by exploiting publicly accessible Apache server-status instances.
+- [**216**星][10m] [puresec/awesome-serverless-security](https://github.com/puresec/awesome-serverless-security) A curated list of awesome serverless security resources such as (e)books, articles, whitepapers, blogs and research papers.
+- [**216**星][1y] [PS] [lukebaggett/dnscat2-powershell](https://github.com/lukebaggett/dnscat2-powershell) A Powershell client for dnscat2, an encrypted DNS command and control tool.
- [**216**星][2m] [Py] [icsec/airpwn-ng](https://github.com/icsec/airpwn-ng) force the target's browser to do what we want
-- [**216**星][6m] [Py] [gmr/queries](https://github.com/gmr/queries) PostgreSQL database access simplified
-- [**216**星][2y] [PowerShell] [arno0x/dbc2](https://github.com/arno0x/dbc2) DBC2 (DropboxC2) is a modular post-exploitation tool, composed of an agent running on the victim's machine, a controler, running on any machine, powershell modules, and Dropbox servers as a means of communication.
-- [**215**星][2y] [C#] [azure99/shadowsocksrcsm](https://github.com/azure99/shadowsocksrcsm) SSRC#魔改版,修复原版链接并进行人性化修改
+- [**216**星][5m] [guardrailsio/awesome-dotnet-security](https://github.com/guardrailsio/awesome-dotnet-security) Awesome .NET Security Resources
+- [**216**星][6d] [JS] [giper45/dockersecurityplayground](https://github.com/giper45/dockersecurityplayground) A Microservices-based framework for the study of Network Security and Penetration Test techniques
+- [**216**星][1y] [foobarto/redteam-notebook](https://github.com/foobarto/redteam-notebook) Collection of commands, tips and tricks and references I found useful during preparation for OSCP exam.
+- [**216**星][3y] [Py] [darryllane/bluto-old](https://github.com/darryllane/bluto-old) Recon, Subdomain Bruting, Zone Transfers
+- [**216**星][2y] [Py] [003random/003recon](https://github.com/003random/003recon) Some tools to automate recon - 003random
+- [**215**星][25d] [JS] [saul/demofile](https://github.com/saul/demofile) Node.js library for parsing Counter-Strike: Global Offensive demo files
+- [**215**星][3m] [Py] [shodansploit/shodansploit](https://github.com/shodansploit/shodansploit)
- [**215**星][3m] [C++] [lifting-bits/grr](https://github.com/lifting-bits/grr) High-throughput fuzzer and emulator of DECREE binaries
- [**215**星][1y] [C] [meliot/filewatcher](https://github.com/meliot/filewatcher) A simple auditing utility for macOS
- [**215**星][2m] [C] [xyzz/gamecard-microsd](https://github.com/xyzz/gamecard-microsd) microSD adapter for PlayStation Vita
- [**215**星][1y] [PHP] [wofeiwo/webcgi-exploits](https://github.com/wofeiwo/webcgi-exploits) Multi-language web CGI interfaces exploits.
- [**215**星][2y] [Py] [thiber-org/userline](https://github.com/thiber-org/userline) 从Windows安全事件中查询并报告用户登录关系
+- [**215**星][9m] [C] [sleinen/samplicator](https://github.com/sleinen/samplicator) Send copies of (UDP) datagrams to multiple receivers, with optional sampling and spoofing
- [**215**星][11m] [C#] [rainwayapp/warden](https://github.com/rainwayapp/warden) Warden.NET is an easy to use process management library for keeping track of processes on Windows.
+- [**215**星][7d] [Py] [rackerlabs/scantron](https://github.com/rackerlabs/scantron) A distributed nmap / masscan scanning framework
- [**215**星][5y] [Py] [qgriffith/openeats](https://github.com/qgriffith/openeats) Recipe Management Site created in Django
-- [**215**星][8d] [C++] [p4lang/p4c](https://github.com/p4lang/p4c) P4_16 prototype compiler
-- [**215**星][25d] [Py] [nteseyes/pylane](https://github.com/nteseyes/pylane) An python vm injector with debug tools, based on gdb.
+- [**215**星][1y] [Go] [orderbynull/lottip](https://github.com/orderbynull/lottip) Simple MySQL proxy for query logging with web GUI
- [**215**星][3y] [Py] [mkorman90/volatilitybot](https://github.com/mkorman90/volatilitybot) An automated memory analyzer for malware samples and memory dumps
-- [**215**星][1y] [PowerShell] [lukebaggett/dnscat2-powershell](https://github.com/lukebaggett/dnscat2-powershell) A Powershell client for dnscat2, an encrypted DNS command and control tool.
+- [**215**星][2y] [Py] [mailinneberg/blueborne](https://github.com/mailinneberg/blueborne) Purpose only! The dangers of Bluetooth implementations: Unveiling zero day vulnerabilities and security flaws in modern Bluetooth stacks.
- [**215**星][6y] [Perl] [llaera/slowloris.pl](https://github.com/llaera/slowloris.pl) A new DOS Perl Programm
-- [**215**星][5m] [guardrailsio/awesome-dotnet-security](https://github.com/guardrailsio/awesome-dotnet-security) Awesome .NET Security Resources
+- [**215**星][2y] [Py] [lennonchin/code-confuse-plugin](https://github.com/lennonchin/code-confuse-plugin) iOS代码混淆插件
+- [**215**星][1m] [Py] [khast3x/redcloud](https://github.com/khast3x/redcloud) Comfy & powerful Red Team Infrastructure deployement using Docker
+- [**215**星][1m] [Py] [inquest/python-iocextract](https://github.com/inquest/python-iocextract) IoC提取器
+- [**215**星][2m] [C] [hyc/fcrackzip](https://github.com/hyc/fcrackzip) A braindead program for cracking encrypted ZIP archives. Forked from
+- [**215**星][6m] [Py] [gmr/queries](https://github.com/gmr/queries) PostgreSQL database access simplified
- [**215**星][2y] [Py] [famavott/osint-scraper](https://github.com/famavott/osint-scraper) 输入人名或邮箱地址, 自动从互联网爬取关于此人的信息
-- [**215**星][1y] [Py] [dionach/cmsmap](https://github.com/dionach/cmsmap) CMSmap is a python open source CMS scanner that automates the process of detecting security flaws of the most popular CMSs.
-- [**215**星][3y] [Py] [darryllane/bluto-old](https://github.com/darryllane/bluto-old) Recon, Subdomain Bruting, Zone Transfers
- [**215**星][3m] [PHP] [cyrus-and/fracker](https://github.com/cyrus-and/fracker) PHP function tracker
- [**215**星][5y] [Py] [bonsaiviking/nfspy](https://github.com/bonsaiviking/nfspy) ID-spoofing NFS client
-- [**215**星][1y] [basilfx/tradfri-hacking](https://github.com/basilfx/tradfri-hacking) Hacking the IKEA TRÅDFRI light bulbs and accessories.
-- [**214**星][23d] [JS] [saul/demofile](https://github.com/saul/demofile) Node.js library for parsing Counter-Strike: Global Offensive demo files
-- [**214**星][9m] [C] [sleinen/samplicator](https://github.com/sleinen/samplicator) Send copies of (UDP) datagrams to multiple receivers, with optional sampling and spoofing
-- [**214**星][3m] [sab0tag3d/mitm-cheatsheet](https://github.com/sab0tag3d/mitm-cheatsheet) All MITM attacks in one place.
+- [**214**星][2y] [C#] [azure99/shadowsocksrcsm](https://github.com/azure99/shadowsocksrcsm) SSRC#魔改版,修复原版链接并进行人性化修改
+- [**214**星][1y] [Py] [threatresponse/aws_ir](https://github.com/threatresponse/aws_ir) Python installable command line utiltity for mitigation of host and key compromises.
+- [**214**星][11m] [Shell] [proxycannon/proxycannon-ng](https://github.com/proxycannon/proxycannon-ng) 使用多个云环境构建私人僵尸网络, 用于渗透测试和RedTeaming
+- [**214**星][9m] [PS] [outflanknl/excel4-dcom](https://github.com/outflanknl/excel4-dcom) PowerShell and Cobalt Strike scripts for lateral movement using Excel 4.0 / XLM macros via DCOM (direct shellcode injection in Excel.exe)
+- [**214**星][6d] [C] [open-mpi/hwloc](https://github.com/open-mpi/hwloc) easing the process of discovering hardware resources in parallel architectures.
- [**214**星][4y] [Py] [mitsuhiko/python-regex-scanner](https://github.com/mitsuhiko/python-regex-scanner) Demo of how to use the underlying SRE engine to build a regex scanner
-- [**214**星][2y] [Py] [mailinneberg/blueborne](https://github.com/mailinneberg/blueborne) Purpose only! The dangers of Bluetooth implementations: Unveiling zero day vulnerabilities and security flaws in modern Bluetooth stacks.
-- [**214**星][1m] [Py] [khast3x/redcloud](https://github.com/khast3x/redcloud) Comfy & powerful Red Team Infrastructure deployement using Docker
-- [**214**星][8m] [jesusprubio/awesome-nodejs-pentest](https://github.com/jesusprubio/awesome-nodejs-pentest)
-- [**214**星][7d] [Go] [jasonish/evebox](https://github.com/jasonish/evebox) 基于 Web 的事件查看器, 可查看Suricata EVE事件
-- [**214**星][4m] [Py] [isaacdelly/plutus](https://github.com/isaacdelly/plutus) An automated bitcoin wallet collider that brute forces random wallet addresses
-- [**214**星][1m] [Py] [inquest/python-iocextract](https://github.com/inquest/python-iocextract) IoC提取器
-- [**214**星][12d] [Py] [hyperspy/hyperspy](https://github.com/hyperspy/hyperspy) Multidimensional data analysis
-- [**214**星][2m] [C] [hyc/fcrackzip](https://github.com/hyc/fcrackzip) A braindead program for cracking encrypted ZIP archives. Forked from
+- [**214**星][9d] [Go] [jasonish/evebox](https://github.com/jasonish/evebox) 基于 Web 的事件查看器, 可查看Suricata EVE事件
+- [**214**星][2d] [Py] [hyperspy/hyperspy](https://github.com/hyperspy/hyperspy) Multidimensional data analysis
- [**214**星][4y] [C] [fuzzysecurity/unix-privesc](https://github.com/fuzzysecurity/unix-privesc) Local UNIX PrivEsc Aggregation
+- [**214**星][6m] [C#] [erfg12/memory.dll](https://github.com/erfg12/memory.dll) C# Hacking library for making PC game trainers.
- [**214**星][2m] [C] [dns-oarc/dnscap](https://github.com/dns-oarc/dnscap) Network capture utility designed specifically for DNS traffic
-- [**214**星][2y] [C++] [bromiumlabs/packerattacker](https://github.com/bromiumlabs/packerattacker) C++ application that uses memory and code hooks to detect packers
+- [**214**星][6d] [Shell] [controlplaneio/kubesec](https://github.com/controlplaneio/kubesec) Security risk analysis for Kubernetes resources
+- [**213**星][7m] [Py] [xhak9x/fbi](https://github.com/xhak9x/fbi) Facebook Information
+- [**213**星][3y] [C++] [xdnice/pcshare](https://github.com/xdnice/pcshare) 远程控制软件,可以监视目标机器屏幕、注册表、文件系统等。
+- [**213**星][2y] [Py] [wwong99/pentest-notes](https://github.com/wwong99/pentest-notes)
- [**213**星][2y] [Py] [trustedsec/egressbuster](https://github.com/trustedsec/egressbuster) Egressbuster is a method to check egress filtering and identify if ports are allowed. If they are, you can automatically spawn a shell.
-- [**213**星][1y] [Py] [threatresponse/aws_ir](https://github.com/threatresponse/aws_ir) Python installable command line utiltity for mitigation of host and key compromises.
+- [**213**星][1m] [C] [trailofbits/krf](https://github.com/trailofbits/krf) A kernelspace syscall interceptor and randomized faulter
+- [**213**星][9m] [Py] [teag1e/burpcollector](https://github.com/teag1e/burpcollector) 通过BurpSuite来构建自己的爆破字典,可以通过字典爆破来发现隐藏资产。
+- [**213**星][2m] [Java] [tdunning/log-synth](https://github.com/tdunning/log-synth) Generates more or less realistic log data for testing simple aggregation queries.
+- [**213**星][5m] [Py] [spiderlabs/hosthunter](https://github.com/spiderlabs/hosthunter) HostHunter a recon tool for discovering hostnames using OSINT techniques.
- [**213**星][2y] [C#] [shanek2/invtero.net](https://github.com/shanek2/invtero.net) A high speed (Gbps) Forensics, Memory integrity & assurance. Includes offensive & defensive memory capabilities. Find/Extract processes, hypervisors (including nested) in memory dumps using microarchitechture independent Virtual Machiene Introspection techniques
- [**213**星][5m] [Py] [quoscient/octopus](https://github.com/quoscient/octopus) Security Analysis tool for WebAssembly module and Blockchain Smart Contracts (BTC/ETH/NEO/EOS)
- [**213**星][5m] [Py] [pynetwork/pypcap](https://github.com/pynetwork/pypcap) python libpcap module, forked from code.google.com/p/pypcap, now actively maintained
-- [**213**星][10m] [puresec/awesome-serverless-security](https://github.com/puresec/awesome-serverless-security) A curated list of awesome serverless security resources such as (e)books, articles, whitepapers, blogs and research papers.
-- [**213**星][11m] [Shell] [proxycannon/proxycannon-ng](https://github.com/proxycannon/proxycannon-ng) 使用多个云环境构建私人僵尸网络, 用于渗透测试和RedTeaming
- [**213**星][1y] [Kotlin] [paphonb/androidp-ify](https://github.com/paphonb/androidp-ify) [Xposed] Use features introduced in Android P on your O+ Device!
- [**213**星][2y] [C++] [nu1lctf/n1ctf-2018](https://github.com/nu1lctf/n1ctf-2018) Official repository containing files related to N1CTF 2018.
+- [**213**星][5m] [C] [n0b0dycn/redis-rogue-server](https://github.com/n0b0dycn/redis-rogue-server) Redis(<=5.0.5) RCE
- [**213**星][4y] [HTML] [musalbas/address-spoofing-poc](https://github.com/musalbas/address-spoofing-poc) Chrome address spoofing vulnerability proof-of-concept for HTTPS. (Original by David Leo.)
-- [**213**星][2y] [Py] [lennonchin/code-confuse-plugin](https://github.com/lennonchin/code-confuse-plugin) iOS代码混淆插件
- [**213**星][1y] [Py] [kurobeats/fimap](https://github.com/kurobeats/fimap) fimap is a little python tool which can find, prepare, audit, exploit and even google automatically for local and remote file inclusion bugs in webapps.
-- [**213**星][16d] [JS] [giper45/dockersecurityplayground](https://github.com/giper45/dockersecurityplayground) A Microservices-based framework for the study of Network Security and Penetration Test techniques
+- [**213**星][3m] [Py] [jordanpotti/cloudscraper](https://github.com/jordanpotti/cloudscraper) Tool to enumerate targets in search of cloud resources. S3 Buckets, Azure Blobs, Digital Ocean Storage Space.
+- [**213**星][2y] [C++] [jamesp6000/wsprrypi](https://github.com/jamesp6000/wsprrypi) Raspberry Pi WSPR transmitter using NTP based frequency calibration
+- [**213**星][1m] [Go] [improbable-eng/kedge](https://github.com/improbable-eng/kedge) kEdge - Kubernetes Edge Proxy for gRPC and HTTP Microservices
- [**213**星][1y] [Py] [feicong/lua_re](https://github.com/feicong/lua_re) reverse engineering for lua(lua/luac/luajit/lua_dec/lua_loader/lua_proc)
-- [**213**星][5m] [C#] [erfg12/memory.dll](https://github.com/erfg12/memory.dll) C# Hacking library for making PC game trainers.
+- [**213**星][1y] [Py] [evict/poc_cve-2018-1002105](https://github.com/evict/poc_cve-2018-1002105) PoC for CVE-2018-1002105.
+- [**213**星][2y] [Py] [euphrat1ca/fuzzdb-collect](https://github.com/euphrat1ca/fuzzdb-collect) 网络上安全资源的搜集
- [**213**星][3y] [C#] [dxflatline/flatpipes](https://github.com/dxflatline/flatpipes) A TCP proxy over named pipes. Originally created for maintaining a meterpreter session over 445 for less network alarms.
- [**213**星][4y] [Py] [ctfs/write-ups-2013](https://github.com/ctfs/write-ups-2013) Wiki-like CTF write-ups repository, maintained by the community. 2013
- [**213**星][4y] [PLpgSQL] [cseagle/freedom](https://github.com/cseagle/freedom) 从IDA中导出反汇编信息, 导入到binnavi中使用
+- [**213**星][5m] [Shell] [cryptolok/crykex](https://github.com/cryptolok/crykex) Linux Memory Cryptographic Keys Extractor
- [**213**星][5m] [Py] [coffeehb/tools](https://github.com/coffeehb/tools) 一些实用的python脚本
-- [**212**星][1m] [C] [trailofbits/krf](https://github.com/trailofbits/krf) A kernelspace syscall interceptor and randomized faulter
-- [**212**星][2m] [Java] [tdunning/log-synth](https://github.com/tdunning/log-synth) Generates more or less realistic log data for testing simple aggregation queries.
-- [**212**星][21d] [JS] [strangerealintel/cyberthreatintel](https://github.com/strangerealintel/cyberthreatintel) Analysis of malware and Cyber Threat Intel of APT and cybercriminals groups
-- [**212**星][4m] [Py] [spiderlabs/hosthunter](https://github.com/spiderlabs/hosthunter) HostHunter a recon tool for discovering hostnames using OSINT techniques.
-- [**212**星][11d] [Ruby] [puppetlabs/puppetlabs-postgresql](https://github.com/puppetlabs/puppetlabs-postgresql) Puppet module for managing PostgreSQL
-- [**212**星][9m] [Go] [justmao945/mallory](https://github.com/justmao945/mallory) HTTP/HTTPS proxy over SSH
+- [**213**星][2y] [C++] [bromiumlabs/packerattacker](https://github.com/bromiumlabs/packerattacker) C++ application that uses memory and code hooks to detect packers
+- [**213**星][8m] [Py] [atlas0fd00m/rfcat](https://github.com/atlas0fd00m/rfcat) swiss-army knife of ISM band radio
+- [**212**星][2y] [hackathonhackers/groups](https://github.com/hackathonhackers/groups) A listing of all the subgroups of Hackathon Hackers
+- [**212**星][3m] [C++] [atxsinn3r/vulncases](https://github.com/atxsinn3r/VulnCases) Oh it's just a bunch of vulns for references.
+- [**212**星][1y] [C] [suvllian/process-inject](https://github.com/suvllian/process-inject) 在Windows环境下的进程注入方法:远程线程注入、创建进程挂起注入、反射注入、APCInject、SetWindowHookEX注入
+- [**212**星][2d] [Py] [sofianehamlaoui/lockdoor-framework](https://github.com/sofianehamlaoui/lockdoor-framework)
+- [**212**星][3d] [Ruby] [puppetlabs/puppetlabs-postgresql](https://github.com/puppetlabs/puppetlabs-postgresql) Puppet module for managing PostgreSQL
+- [**212**星][16d] [Py] [nyxgeek/lyncsmash](https://github.com/nyxgeek/lyncsmash) locate and attack Lync/Skype for Business
+- [**212**星][4m] [Shell] [neo23x0/fenrir](https://github.com/neo23x0/fenrir) Simple Bash IOC Scanner
- [**212**星][2m] [Julia] [juliaci/benchmarktools.jl](https://github.com/juliaci/benchmarktools.jl) A benchmarking framework for the Julia language
-- [**212**星][3m] [Py] [jordanpotti/cloudscraper](https://github.com/jordanpotti/cloudscraper) Tool to enumerate targets in search of cloud resources. S3 Buckets, Azure Blobs, Digital Ocean Storage Space.
+- [**212**星][2y] [Shell] [johnnyxmas/scancannon](https://github.com/johnnyxmas/scancannon) Combines the speed of masscan with the reliability and detailed enumeration of nmap
- [**212**星][2y] [Shell] [jakewmeyer/geo](https://github.com/jakewmeyer/geo) A Bash utility for easy wan, lan, router, dns, mac address, and geolocation output,
-- [**212**星][1y] [Py] [evict/poc_cve-2018-1002105](https://github.com/evict/poc_cve-2018-1002105) PoC for CVE-2018-1002105.
+- [**212**星][4m] [Py] [infosecn1nja/maliciousmacromsbuild](https://github.com/infosecn1nja/maliciousmacromsbuild) Generates Malicious Macro and Execute Powershell or Shellcode via MSBuild Application Whitelisting Bypass.
- [**212**星][2m] [Py] [eset/malware-research](https://github.com/eset/malware-research) 恶意代码分析中用到的代码/工具
-- [**212**星][5m] [Shell] [cryptolok/crykex](https://github.com/cryptolok/crykex) Linux Memory Cryptographic Keys Extractor
-- [**211**星][2y] [hackathonhackers/groups](https://github.com/hackathonhackers/groups) A listing of all the subgroups of Hackathon Hackers
-- [**211**星][3m] [C++] [atxsinn3r/vulncases](https://github.com/atxsinn3r/VulnCases) Oh it's just a bunch of vulns for references.
+- [**212**星][2y] [PS] [cobbr/psamsi](https://github.com/cobbr/psamsi) PSAmsi is a tool for auditing and defeating AMSI signatures.
- [**211**星][7m] [HTML] [facebook/delegatedrecoveryspecification](https://github.com/facebook/DelegatedRecoverySpecification) Allows an application to delegate the capability to recover an account to an account controlled by the same user or entity at a third party service provider.
- [**211**星][3y] [Py] [newbee119/telnet-scanner](https://github.com/NewBee119/telnet-scanner) telnet服务密码撞库
-- [**211**星][3m] [Py] [shodansploit/shodansploit](https://github.com/shodansploit/shodansploit)
- [**211**星][3m] [Shell] [xu-jian/vps](https://github.com/xu-jian/vps) 个人笔记汇总
-- [**211**星][3y] [C++] [xdnice/pcshare](https://github.com/xdnice/pcshare) 远程控制软件,可以监视目标机器屏幕、注册表、文件系统等。
-- [**211**星][1y] [C] [suvllian/process-inject](https://github.com/suvllian/process-inject) 在Windows环境下的进程注入方法:远程线程注入、创建进程挂起注入、反射注入、APCInject、SetWindowHookEX注入
-- [**211**星][9m] [PowerShell] [outflanknl/excel4-dcom](https://github.com/outflanknl/excel4-dcom) PowerShell and Cobalt Strike scripts for lateral movement using Excel 4.0 / XLM macros via DCOM (direct shellcode injection in Excel.exe)
-- [**211**星][4m] [Shell] [neo23x0/fenrir](https://github.com/neo23x0/fenrir) Simple Bash IOC Scanner
-- [**211**星][5m] [C] [n0b0dycn/redis-rogue-server](https://github.com/n0b0dycn/redis-rogue-server) Redis(<=5.0.5) RCE
-- [**211**星][2m] [C] [leecher1337/ntvdmx64](https://github.com/leecher1337/ntvdmx64) 在64位版本上执行Windows DOS版的 NTVDM
+- [**211**星][1m] [C++] [trailofbits/winchecksec](https://github.com/trailofbits/winchecksec) Checksec, but for Windows: static detection of executable's opt-in security mitigations
+- [**211**星][3d] [C++] [thalium/icebox](https://github.com/thalium/icebox) Virtual Machine Introspection, Tracing & Debugging
+- [**211**星][7m] [C] [owasp/igoat](https://github.com/owasp/igoat) OWASP iGoat - A Learning Tool for iOS App Pentesting and Security by Swaroop Yermalkar
+- [**211**星][9m] [Py] [nullarray/dorknet](https://github.com/nullarray/dorknet) Selenium powered Python script to automate searching for vulnerable web apps.
+- [**211**星][1y] [Py] [mateuszk87/pcapviz](https://github.com/mateuszk87/pcapviz) Visualize network topologies and collect graph statistics based on pcap files
+- [**211**星][1y] [C#] [leechristensen/spoolsample](https://github.com/leechristensen/spoolsample) PoC tool to coerce Windows hosts authenticate to other machines via the MS-RPRN RPC interface. This is possible via other protocols as well.
+- [**211**星][10m] [jeansgit/redteam](https://github.com/jeansgit/redteam) RedTeam资料收集整理
+- [**211**星][7m] [Py] [jas502n/cnvd-c-2019-48814](https://github.com/jas502n/cnvd-c-2019-48814) WebLogic wls9-async反序列化远程命令执行漏洞
- [**211**星][1m] [Py] [inquest/omnibus](https://github.com/inquest/omnibus) The OSINT Omnibus (beta release)
- [**211**星][9m] [Py] [gosecure/php7-opcache-override](https://github.com/gosecure/php7-opcache-override) Security-related PHP7 OPcache abuse tools and demo
-- [**211**星][2y] [PowerShell] [cobbr/psamsi](https://github.com/cobbr/psamsi) PSAmsi is a tool for auditing and defeating AMSI signatures.
- [**211**星][4m] [Ruby] [bdmac/strong_password](https://github.com/bdmac/strong_password) Entropy-based password strength checking for Ruby and Rails.
-- [**211**星][8m] [Py] [atlas0fd00m/rfcat](https://github.com/atlas0fd00m/rfcat) swiss-army knife of ISM band radio
-- [**210**星][8d] [C++] [thalium/icebox](https://github.com/thalium/icebox) Virtual Machine Introspection, Tracing & Debugging
+- [**211**星][2y] [Py] [arno0x/ntlmrelaytoews](https://github.com/arno0x/ntlmrelaytoews) ntlm relay attack to Exchange Web Services
+- [**211**星][20d] [Shell] [aress31/wirespy](https://github.com/aress31/wirespy) Framework designed to automate various wireless networks attacks (the project was presented on Pentester Academy TV's toolbox in 2017).
+- [**210**星][1y] [Py] [elmundio87/terraform_validate](https://github.com/elmundio87/terraform_validate) Assists in the enforcement of user-defined standards in Terraform
+- [**210**星][9m] [Go] [cloudflare/cloudflare-ingress-controller](https://github.com/cloudflare/cloudflare-ingress-controller) A Kubernetes ingress controller for Cloudflare's Argo Tunnels
+- [**210**星][1m] [Shell] [zfl9/gfwlist2privoxy](https://github.com/zfl9/gfwlist2privoxy) 将 gfwlist.txt(Adblock Plus 规则)转换为 privoxy.action
- [**210**星][1y] [C++] [tandasat/pgresarch](https://github.com/tandasat/pgresarch) PatchGuard Research
- [**210**星][4m] [PHP] [rizer0/log-killer](https://github.com/rizer0/log-killer) Clear all your logs in [linux/windows] servers
-- [**210**星][9d] [Py] [rackerlabs/scantron](https://github.com/rackerlabs/scantron) A distributed nmap / masscan scanning framework
-- [**210**星][7m] [C] [owasp/igoat](https://github.com/owasp/igoat) OWASP iGoat - A Learning Tool for iOS App Pentesting and Security by Swaroop Yermalkar
- [**210**星][11m] [Go] [ooclab/otunnel](https://github.com/ooclab/otunnel) peer-to-peer tunnel tool
-- [**210**星][14d] [Py] [nyxgeek/lyncsmash](https://github.com/nyxgeek/lyncsmash) locate and attack Lync/Skype for Business
-- [**210**星][11m] [Java] [neo23x0/fnord](https://github.com/neo23x0/fnord) Pattern Extractor for Obfuscated Code
-- [**210**星][1y] [Py] [mateuszk87/pcapviz](https://github.com/mateuszk87/pcapviz) Visualize network topologies and collect graph statistics based on pcap files
+- [**210**星][5m] [Py] [nucypher/nufhe](https://github.com/nucypher/nufhe) NuCypher fully homomorphic encryption (NuFHE) library implemented in Python
+- [**210**星][12m] [Java] [neo23x0/fnord](https://github.com/neo23x0/fnord) Pattern Extractor for Obfuscated Code
+- [**210**星][3m] [C++] [mapbox/jni.hpp](https://github.com/mapbox/jni.hpp) A modern, type-safe, header-only, C++14 wrapper for JNI
- [**210**星][2y] [Py] [kamorin/dhcpig](https://github.com/kamorin/dhcpig) DHCP exhaustion script written in python using scapy network library
+- [**210**星][16d] [Java] [jikesrvm/jikesrvm](https://github.com/jikesrvm/jikesrvm) a flexible open testbed to prototype virtual machine technologies and experiment with a large variety of design alternatives
- [**210**星][7y] [haohaolee/shadowsocks-openwrt](https://github.com/haohaolee/shadowsocks-openwrt) A package of shadowsocks for OpenWrt
-- [**210**星][2y] [Py] [euphrat1ca/fuzzdb-collect](https://github.com/euphrat1ca/fuzzdb-collect) 网络上安全资源的搜集
+- [**210**星][4m] [C++] [eternityx/deadcell-csgo](https://github.com/eternityx/deadcell-csgo) Full source to the CS:GO cheat
+- [**210**星][4m] [Java] [dschanoeh/kayak](https://github.com/dschanoeh/kayak) Kayak is a CAN bus analysis tool based on SocketCAN
+- [**210**星][8m] [JS] [dirtbags/pcapdb](https://github.com/dirtbags/pcapdb) 分布式、搜索优化的网络数据包捕获系统
- [**210**星][6m] [Py] [dirkjanm/krbrelayx](https://github.com/dirkjanm/krbrelayx) Kerberos unconstrained delegation abuse toolkit
- [**210**星][1y] [Py] [danmcinerney/msf-autoshell](https://github.com/danmcinerney/msf-autoshell) Feed the tool a .nessus file and it will automatically get you MSF shell
-- [**210**星][2y] [Py] [arno0x/ntlmrelaytoews](https://github.com/arno0x/ntlmrelaytoews) ntlm relay attack to Exchange Web Services
+- [**209**星][6d] [Py] [f0cker/crackq](https://github.com/f0cker/crackq) CrackQ: A Python Hashcat cracking queue system
- [**209**星][2y] [PHP] [defuse/crackstation-hashdb](https://github.com/defuse/crackstation-hashdb) CrackStation.net's Lookup Table Implementation.
+- [**209**星][2y] [C] [fsecurelabs/osxfuzz](https://github.com/FSecureLABS/OSXFuzz) macOS Kernel Fuzzer
- [**209**星][7m] [C++] [googleprojectzero/bochspwn](https://github.com/googleprojectzero/bochspwn) A Bochs-based instrumentation project designed to log kernel memory references, to identify "double fetches" and other OS vulnerabilities
-- [**209**星][9m] [Go] [cloudflare/cloudflare-ingress-controller](https://github.com/cloudflare/cloudflare-ingress-controller) A Kubernetes ingress controller for Cloudflare's Argo Tunnels
+- [**209**星][3y] [Shell] [ztgrace/sticky_keys_hunter](https://github.com/ztgrace/sticky_keys_hunter) A script to test an RDP host for sticky keys and utilman backdoor.
- [**209**星][3y] [Java] [subgraph/orchid](https://github.com/subgraph/orchid)
- [**209**星][2y] [C] [silvermoonsecurity/passivefuzzframeworkosx](https://github.com/silvermoonsecurity/passivefuzzframeworkosx) This framework is for fuzzing OSX kernel vulnerability based on passive inline hook mechanism in kernel mode.
-- [**209**星][15d] [sigp/solidity-security-blog](https://github.com/sigp/solidity-security-blog) Comprehensive list of known attack vectors and common anti-patterns
+- [**209**星][17d] [sigp/solidity-security-blog](https://github.com/sigp/solidity-security-blog) Comprehensive list of known attack vectors and common anti-patterns
+- [**209**星][2m] [Py] [si9int/cc.py](https://github.com/si9int/cc.py) Extracting URLs of a specific target based on the results of "commoncrawl.org"
- [**209**星][2y] [JS] [shutterstock/lil-brother](https://github.com/shutterstock/lil-brother) Track clicks and other client-side events on web pages
+- [**209**星][1m] [shogunlab/awesome-hyper-v-exploitation](https://github.com/shogunlab/awesome-hyper-v-exploitation) A curated list of Hyper-V exploitation resources, fuzzing and vulnerability research.
- [**209**星][3y] [C++] [shinnok/johnny](https://github.com/shinnok/johnny) The GUI frontend to the John the Ripper password cracker
- [**209**星][7m] [PHP] [samdark/yii2-webshell](https://github.com/samdark/yii2-webshell) Web shell allows to run yii console commands using a browser
-- [**209**星][9m] [Py] [nullarray/dorknet](https://github.com/nullarray/dorknet) Selenium powered Python script to automate searching for vulnerable web apps.
-- [**209**星][3m] [C++] [mapbox/jni.hpp](https://github.com/mapbox/jni.hpp) A modern, type-safe, header-only, C++14 wrapper for JNI
-- [**209**星][1y] [C#] [leechristensen/spoolsample](https://github.com/leechristensen/spoolsample) PoC tool to coerce Windows hosts authenticate to other machines via the MS-RPRN RPC interface. This is possible via other protocols as well.
-- [**209**星][27d] [Py] [leancloud/satori](https://github.com/leancloud/satori) LeanCloud 维护的监控系统
-- [**209**星][2y] [Shell] [johnnyxmas/scancannon](https://github.com/johnnyxmas/scancannon) Combines the speed of masscan with the reliability and detailed enumeration of nmap
-- [**209**星][10m] [jeansgit/redteam](https://github.com/jeansgit/redteam) RedTeam资料收集整理
+- [**209**星][1y] [MATLAB] [lts4/deepfool](https://github.com/lts4/deepfool) A simple and accurate method to fool deep neural networks
+- [**209**星][29d] [Py] [leancloud/satori](https://github.com/leancloud/satori) LeanCloud 维护的监控系统
+- [**209**星][2y] [k0keoyo/some-kernel-fuzzing-paper](https://github.com/k0keoyo/some-kernel-fuzzing-paper) Some kernel fuzzing paper about windows and linux
- [**209**星][5m] [C] [hunter-ht-2018/ptfuzzer](https://github.com/hunter-ht-2018/ptfuzzer) Improving AFL by using Intel PT to collect branch information
-- [**209**星][8m] [JS] [dirtbags/pcapdb](https://github.com/dirtbags/pcapdb) 分布式、搜索优化的网络数据包捕获系统
+- [**209**星][2m] [Java] [h3xstream/http-script-generator](https://github.com/h3xstream/http-script-generator) ZAP/Burp plugin that generate script to reproduce a specific HTTP request (Intended for fuzzing or scripted attacks)
+- [**209**星][8m] [Py] [djm/python-scrapyd-api](https://github.com/djm/python-scrapyd-api) A Python wrapper for working with Scrapyd's API.
+- [**209**星][3d] [decalage2/awesome-security-hardening](https://github.com/decalage2/awesome-security-hardening) A collection of awesome security hardening guides, tools and other resources
- [**209**星][2y] [Py] [danigargu/explodingcan](https://github.com/danigargu/explodingcan) Python 版本的CVE-2017-7269 漏洞利用代码. NSA 泄露工具中的 ExplodingCan 即是利用此漏洞
- [**209**星][7m] [C] [coolervoid/raptor_waf](https://github.com/coolervoid/raptor_waf) Raptor - WAF - Web application firewall using DFA [ Current version ] - Beta
- [**209**星][4m] [HTML] [ajinabraham/droid-application-fuzz-framework](https://github.com/ajinabraham/droid-application-fuzz-framework) Android application fuzzing framework with fuzzers and crash monitor.
- [**209**星][2m] [adguardteam/adguardforwindows](https://github.com/adguardteam/adguardforwindows) Windows系统范围的AdBlocker
-- [**208**星][1y] [Py] [elmundio87/terraform_validate](https://github.com/elmundio87/terraform_validate) Assists in the enforcement of user-defined standards in Terraform
-- [**208**星][2y] [C] [fsecurelabs/osxfuzz](https://github.com/FSecureLABS/OSXFuzz) macOS Kernel Fuzzer
- [**208**星][2m] [Shell] [hak5/lanturtle-modules](https://github.com/hak5/lanturtle-modules) The Official LAN Turtle Module Repository
-- [**208**星][3y] [Shell] [ztgrace/sticky_keys_hunter](https://github.com/ztgrace/sticky_keys_hunter) A script to test an RDP host for sticky keys and utilman backdoor.
-- [**208**星][7m] [Py] [xhak9x/fbi](https://github.com/xhak9x/fbi) Facebook Information
-- [**208**星][9m] [Py] [teag1e/burpcollector](https://github.com/teag1e/burpcollector) 通过BurpSuite来构建自己的爆破字典,可以通过字典爆破来发现隐藏资产。
-- [**208**星][1m] [shogunlab/awesome-hyper-v-exploitation](https://github.com/shogunlab/awesome-hyper-v-exploitation) A curated list of Hyper-V exploitation resources, fuzzing and vulnerability research.
-- [**208**星][29d] [Py] [seahoh/gotox](https://github.com/seahoh/gotox) 本地自动代理,修改自 goagent。
-- [**208**星][2y] [k0keoyo/some-kernel-fuzzing-paper](https://github.com/k0keoyo/some-kernel-fuzzing-paper) Some kernel fuzzing paper about windows and linux
-- [**208**星][7m] [Py] [jas502n/cnvd-c-2019-48814](https://github.com/jas502n/cnvd-c-2019-48814) WebLogic wls9-async反序列化远程命令执行漏洞
-- [**208**星][5m] [PowerShell] [harmj0y/damp](https://github.com/harmj0y/damp) The Discretionary ACL Modification Project: Persistence Through Host-based Security Descriptor Modification
-- [**208**星][2m] [Java] [h3xstream/http-script-generator](https://github.com/h3xstream/http-script-generator) ZAP/Burp plugin that generate script to reproduce a specific HTTP request (Intended for fuzzing or scripted attacks)
-- [**208**星][4m] [Java] [dschanoeh/kayak](https://github.com/dschanoeh/kayak) Kayak is a CAN bus analysis tool based on SocketCAN
+- [**208**星][1m] [Py] [seahoh/gotox](https://github.com/seahoh/gotox) 本地自动代理,修改自 goagent。
+- [**208**星][2y] [Py] [pirate-crew/iptv](https://github.com/pirate-crew/iptv) Search and perform brute force attacks on illegal IPTV Servers
+- [**208**星][6m] [PHP] [momosecurity/rhizobia_p](https://github.com/momosecurity/rhizobia_p) PHP安全SDK及编码规范
+- [**208**星][6m] [Perl] [modzero/mod0burpuploadscanner](https://github.com/modzero/mod0burpuploadscanner) HTTP file upload scanner for Burp Proxy
+- [**208**星][2m] [C] [joyent/mdb_v8](https://github.com/joyent/mdb_v8) postmortem debugging for Node.js and other V8-based programs
+- [**208**星][5m] [PS] [harmj0y/damp](https://github.com/harmj0y/damp) The Discretionary ACL Modification Project: Persistence Through Host-based Security Descriptor Modification
+- [**208**星][2y] [emilyanncr/windows-post-exploitation](https://github.com/emilyanncr/windows-post-exploitation) Windows post-exploitation tools, resources, techniques and commands to use during post-exploitation phase of penetration test. Contributions are appreciated. Enjoy!
- [**208**星][2y] [Py] [bluscreenofjeff/malleable-c2-randomizer](https://github.com/bluscreenofjeff/malleable-c2-randomizer) A script to randomize Cobalt Strike Malleable C2 profiles and reduce the chances of flagging signature-based detection controls
- [**208**星][8m] [Py] [blueboxgroup/ursula](https://github.com/blueboxgroup/ursula) Ansible playbooks for operating OpenStack - Powering Blue Box Cloud.
- [**208**星][3y] [Py] [agoragames/kairos](https://github.com/agoragames/kairos) Python module for time series data in Redis and Mongo
+- [**207**星][2m] [Py] [edboffical/bsp](https://github.com/edboffical/bsp) shadowsocks多用户、流量、限时管理接口
+- [**207**星][9d] [Py] [byt3bl33d3r/witnessme](https://github.com/byt3bl33d3r/witnessme) Web Inventory tool, takes screenshots of webpages using Pyppeteer (headless Chrome/Chromium) and provides some extra bells & whistles to make life easier.
- [**207**星][2y] [Go] [sun8911879/shadowsocksr](https://github.com/sun8911879/shadowsocksr) ShadowsocksR(SSR) for Go library
-- [**207**星][1m] [Shell] [zfl9/gfwlist2privoxy](https://github.com/zfl9/gfwlist2privoxy) 将 gfwlist.txt(Adblock Plus 规则)转换为 privoxy.action
-- [**207**星][2y] [Py] [wwong99/pentest-notes](https://github.com/wwong99/pentest-notes)
-- [**207**星][9d] [Py] [voulnet/barq](https://github.com/voulnet/barq) The AWS Cloud Post Exploitation framework!
+- [**207**星][1m] [Ruby] [v2ray/homebrew-v2ray](https://github.com/v2ray/homebrew-v2ray) The homebrew tap for v2ray-core.
+- [**207**星][2y] [C#] [them4hd1/vayne-rat](https://github.com/them4hd1/vayne-rat) An Advanced C# .NET Rat, It’s Stable and Contains Many Features.
- [**207**星][5y] [C] [sorbo/tcpcrypt](https://github.com/sorbo/tcpcrypt) a protocol that attempts to encrypt (almost) all of your network traffic
-- [**207**星][2y] [Py] [pirate-crew/iptv](https://github.com/pirate-crew/iptv) Search and perform brute force attacks on illegal IPTV Servers
+- [**207**星][2y] [Go] [netxfly/xsec-proxy-scanner](https://github.com/netxfly/xsec-proxy-scanner) 速度超快、小巧的代理服务器扫描器
- [**207**星][2y] [JS] [konklone/shaaaaaaaaaaaaa](https://github.com/konklone/shaaaaaaaaaaaaa) Check if a website has weak SHA-1 TLS certificates.
-- [**207**星][2m] [C] [joyent/mdb_v8](https://github.com/joyent/mdb_v8) postmortem debugging for Node.js and other V8-based programs
-- [**207**星][8m] [Py] [djm/python-scrapyd-api](https://github.com/djm/python-scrapyd-api) A Python wrapper for working with Scrapyd's API.
+- [**207**星][2m] [Py] [jwilk/python-afl](https://github.com/jwilk/python-afl) American Fuzzy Lop fork server and instrumentation for pure-Python code
+- [**207**星][7m] [Py] [invictus1306/beebug](https://github.com/invictus1306/beebug) A tool for checking exploitability
- [**207**星][1y] [C] [crozone/spectrepoc](https://github.com/crozone/spectrepoc) Proof of concept code for the Spectre CPU exploit.
-- [**207**星][13d] [Shell] [controlplaneio/kubesec](https://github.com/controlplaneio/kubesec) Security risk analysis for Kubernetes resources
+- [**207**星][4d] [TS] [bevry/getmac](https://github.com/bevry/getmac) Get the mac address of the current machine you are on via Node.js
- [**207**星][4y] [C++] [altf4/untwister](https://github.com/altf4/untwister) Seed recovery tool for PRNGs
- [**207**星][8m] [1hack0/facebook-bug-bounty-write-ups](https://github.com/1hack0/facebook-bug-bounty-write-ups) Hunting Bugs for Fun and Profit
-- [**206**星][2y] [toleda/wireless_half-mini](https://github.com/toleda/wireless_half-mini) macOS Airport Half Mini (WiFi and Bluetooth)
-- [**206**星][3m] [Py] [openstack/hacking](https://github.com/openstack/hacking) OpenStack Hacking Style Checks
+- [**206**星][3y] [Go] [yinghuocho/gotun2socks](https://github.com/yinghuocho/gotun2socks) A Golang implementation of tun2socks
+- [**206**星][15d] [Java] [owasp/mstg-hacking-playground](https://github.com/OWASP/MSTG-Hacking-Playground) 不安全的iOS/Android App集合
- [**206**星][2y] [C] [yifanlu/taihen](https://github.com/yifanlu/taihen) CFW framework for PS Vita
-- [**206**星][5m] [Py] [rub-nds/corstest](https://github.com/rub-nds/corstest) A simple CORS misconfiguration scanner
+- [**206**星][2y] [Java] [udark/underdark-android](https://github.com/udark/underdark-android) Bluetooth peer-to-peer mesh networking for Android
+- [**206**星][23d] [Py] [stamparm/identywaf](https://github.com/stamparm/identywaf) Blind WAF identification tool
- [**206**星][2y] [C] [royhills/ike-scan](https://github.com/royhills/ike-scan) The IKE Scanner
-- [**206**星][6m] [PHP] [momosecurity/rhizobia_p](https://github.com/momosecurity/rhizobia_p) PHP安全SDK及编码规范
-- [**206**星][4y] [PowerShell] [mattifestation/wmi_backdoor](https://github.com/mattifestation/wmi_backdoor) A PoC WMI backdoor presented at Black Hat 2015
+- [**206**星][8m] [C++] [rogue-kdc/cve-2019-0841](https://github.com/rogue-kdc/cve-2019-0841) PoC code for CVE-2019-0841 Privilege Escalation vulnerability
+- [**206**星][1y] [Py] [orf/xcat](https://github.com/orf/xcat) 辅助盲 Xpath 注入,检索正在由 Xpath 查询处理的整个 XML 文档,读取主机文件系统上的任意文件,并使用出站 HTTP 请求,使服务器将数据直接发送到xcat
+- [**206**星][4y] [PS] [mattifestation/wmi_backdoor](https://github.com/mattifestation/wmi_backdoor) A PoC WMI backdoor presented at Black Hat 2015
- [**206**星][1y] [Py] [malicialab/avclass](https://github.com/malicialab/avclass) AVClass malware labeling tool
-- [**206**星][1y] [MATLAB] [lts4/deepfool](https://github.com/lts4/deepfool) A simple and accurate method to fool deep neural networks
-- [**206**星][18d] [Go] [kotakanbe/go-cve-dictionary](https://github.com/kotakanbe/go-cve-dictionary) Build a local copy of CVE (NVD and Japanese JVN). Server mode for easy querying.
-- [**206**星][2y] [emilyanncr/windows-post-exploitation](https://github.com/emilyanncr/windows-post-exploitation) Windows post-exploitation tools, resources, techniques and commands to use during post-exploitation phase of penetration test. Contributions are appreciated. Enjoy!
-- [**206**星][2m] [C] [derrekr/fastboot3ds](https://github.com/derrekr/fastboot3ds) A homebrew bootloader for the Nintendo 3DS that is similar to android's fastboot.
+- [**206**星][20d] [Go] [kotakanbe/go-cve-dictionary](https://github.com/kotakanbe/go-cve-dictionary) Build a local copy of CVE (NVD and Japanese JVN). Server mode for easy querying.
+- [**206**星][9y] [JS] [jwhitehorn/jsminer](https://github.com/jwhitehorn/jsminer) A Javascript Bitcoin miner
+- [**206**星][1y] [faizann24/resources-for-learning-hacking](https://github.com/faizann24/resources-for-learning-hacking) All the resources I could find for learning Ethical Hacking and penetration testing.
+- [**206**星][7d] [C] [derrekr/fastboot3ds](https://github.com/derrekr/fastboot3ds) A homebrew bootloader for the Nintendo 3DS that is similar to android's fastboot.
- [**206**星][3y] [Py] [countercept/doublepulsar-c2-traffic-decryptor](https://github.com/countercept/doublepulsar-c2-traffic-decryptor) A python2 script for processing a PCAP file to decrypt C2 traffic sent to DOUBLEPULSAR implant
+- [**206**星][5y] [C] [cbuchner1/ccminer](https://github.com/cbuchner1/ccminer) Christian Buchner's & Christian H.'s CUDA miner project
+- [**206**星][2y] [0x4d31/deception-as-detection](https://github.com/0x4d31/deception-as-detection) Deception based detection techniques mapped to the MITRE’s ATT&CK framework
+- [**205**星][3m] [JS] [yzddmr6/as_webshell_venom](https://github.com/yzddmr6/as_webshell_venom) 免杀webshell无限生成工具蚁剑版
+- [**205**星][27d] [C++] [apt69/comahawk](https://github.com/apt69/comahawk) Privilege Escalation: Weaponizing CVE-2019-1405 and CVE-2019-1322
+- [**205**星][2y] [C#] [shinlor/v2rays](https://github.com/shinlor/v2rays) 一个V2Ray的Windows客户端
+- [**205**星][2y] [toleda/wireless_half-mini](https://github.com/toleda/wireless_half-mini) macOS Airport Half Mini (WiFi and Bluetooth)
- [**205**星][9m] [C] [paradoxis/php-backdoor](https://github.com/Paradoxis/PHP-Backdoor) Your interpreter isn’t safe anymore — The PHP module backdoor
-- [**205**星][13d] [Java] [owasp/mstg-hacking-playground](https://github.com/OWASP/MSTG-Hacking-Playground) 不安全的iOS/Android App集合
-- [**205**星][12d] [D] [dlang-community/d-scanner](https://github.com/dlang-community/D-Scanner) Swiss-army knife for D source code
+- [**205**星][14d] [D] [dlang-community/d-scanner](https://github.com/dlang-community/D-Scanner) Swiss-army knife for D source code
- [**205**星][3y] [Go] [praetorian-code/trudy](https://github.com/praetorian-code/trudy) A transparent proxy that can modify and drop traffic for arbitrary TCP connections.
-- [**205**星][2y] [Java] [udark/underdark-android](https://github.com/udark/underdark-android) Bluetooth peer-to-peer mesh networking for Android
-- [**205**星][21d] [Py] [stamparm/identywaf](https://github.com/stamparm/identywaf) Blind WAF identification tool
-- [**205**星][2m] [Py] [si9int/cc.py](https://github.com/si9int/cc.py) Extracting URLs of a specific target based on the results of "commoncrawl.org"
-- [**205**星][8m] [C++] [rogue-kdc/cve-2019-0841](https://github.com/rogue-kdc/cve-2019-0841) PoC code for CVE-2019-0841 Privilege Escalation vulnerability
-- [**205**星][1y] [Py] [orf/xcat](https://github.com/orf/xcat) 辅助盲 Xpath 注入,检索正在由 Xpath 查询处理的整个 XML 文档,读取主机文件系统上的任意文件,并使用出站 HTTP 请求,使服务器将数据直接发送到xcat
+- [**205**星][3m] [Py] [openstack/hacking](https://github.com/openstack/hacking) OpenStack Hacking Style Checks
+- [**205**星][15d] [vschiavoni/sgx-papers](https://github.com/vschiavoni/sgx-papers) A list of system papers using/about Intel SGX
+- [**205**星][5m] [YARA] [th3hurrican3/pepper](https://github.com/th3hurrican3/pepper) An open source script to perform malware static analysis on Portable Executable
+- [**205**星][6y] [Lua] [spiderlabs/nmap-tools](https://github.com/spiderlabs/nmap-tools) SpiderLabs shared Nmap Tools
+- [**205**星][5y] [C] [snare/ida-efiutils](https://github.com/snare/ida-efiutils) 辅助ELF逆向
+- [**205**星][1y] [Go] [raz-varren/xsshell](https://github.com/raz-varren/xsshell) XSS反向Shell框架
+- [**205**星][4y] [Shell] [rand0m1ze/ezsploit](https://github.com/rand0m1ze/ezsploit) Linux bash script automation for metasploit
+- [**205**星][16d] [Py] [patois/idacyber](https://github.com/patois/idacyber) 交互式数据可视化插件
- [**205**星][2y] [OCaml] [montyly/gueb](https://github.com/montyly/gueb) Static analyzer detecting Use-After-Free on binary
-- [**205**星][2m] [Py] [jwilk/python-afl](https://github.com/jwilk/python-afl) American Fuzzy Lop fork server and instrumentation for pure-Python code
+- [**205**星][16d] [Py] [m4ll0k/smbrute](https://github.com/m4ll0k/smbrute) SMB Protocol Bruteforce
+- [**205**星][2m] [Shell] [keepwannabe/remot3d](https://github.com/keepwannabe/remot3d) is a simple tool created for large pentesters as well as just for the pleasure of defacers to control server by backdoors
+- [**205**星][1y] [JS] [jpcertcc/sysmonsearch](https://github.com/jpcertcc/sysmonsearch) Investigate suspicious activity by visualizing Sysmon's event log
- [**205**星][2m] [C] [jasonwhite/ducible](https://github.com/jasonwhite/ducible) 使PE和PDB的构建具有可复制性
-- [**205**星][10m] [C#] [enkomio/shed](https://github.com/enkomio/shed) 查看和转储运行中的 .NET文件。分析 .NET 恶意软件的新方式
-- [**205**星][9d] [TypeScript] [bevry/getmac](https://github.com/bevry/getmac) Get the mac address of the current machine you are on via Node.js
-- [**205**星][2y] [0x4d31/deception-as-detection](https://github.com/0x4d31/deception-as-detection) Deception based detection techniques mapped to the MITRE’s ATT&CK framework
-- [**204**星][3m] [JS] [yzddmr6/as_webshell_venom](https://github.com/yzddmr6/as_webshell_venom) 免杀webshell无限生成工具蚁剑版
-- [**204**星][7d] [Py] [mzfr/rsh](https://github.com/mzfr/rsh) generate reverse shell from CLI for linux and Windows.
-- [**204**星][2y] [C#] [shinlor/v2rays](https://github.com/shinlor/v2rays) 一个V2Ray的Windows客户端
-- [**204**星][1m] [Ruby] [v2ray/homebrew-v2ray](https://github.com/v2ray/homebrew-v2ray) The homebrew tap for v2ray-core.
+- [**205**星][10m] [C] [hzqst/unicorn_pe](https://github.com/hzqst/unicorn_pe) 模拟Windows PE文件的代码执行,基于Unicorn
+- [**205**星][11m] [C#] [enkomio/shed](https://github.com/enkomio/shed) 查看和转储运行中的 .NET文件。分析 .NET 恶意软件的新方式
+- [**205**星][2m] [Py] [elevenpaths/ibombshell](https://github.com/elevenpaths/ibombshell) Tool to deploy a post-exploitation prompt at any time
+- [**205**星][1y] [Go] [akagi201/cryptotrader](https://github.com/akagi201/cryptotrader) A cryptocurrency trader for all famous exchanges
+- [**204**星][9d] [Py] [mzfr/rsh](https://github.com/mzfr/rsh) generate reverse shell from CLI for linux and Windows.
+- [**204**星][2y] [JS] [xmcp/gofw](https://github.com/xmcp/gofw) Chrome 扩展:麻麻再也不用担心 Google API 抽风了
- [**204**星][4y] [Py] [aoncyberlabs/xxe-recursive-download](https://github.com/AonCyberLabs/xxe-recursive-download)
-- [**204**星][2m] [PowerShell] [wiredpulse/posh-r2](https://github.com/wiredpulse/posh-r2) PowerShell - Rapid Response... For the incident responder in you!
-- [**204**星][13d] [vschiavoni/sgx-papers](https://github.com/vschiavoni/sgx-papers) A list of system papers using/about Intel SGX
-- [**204**星][2y] [C#] [them4hd1/vayne-rat](https://github.com/them4hd1/vayne-rat) An Advanced C# .NET Rat, It’s Stable and Contains Many Features.
-- [**204**星][6y] [Lua] [spiderlabs/nmap-tools](https://github.com/spiderlabs/nmap-tools) SpiderLabs shared Nmap Tools
-- [**204**星][5y] [C] [snare/ida-efiutils](https://github.com/snare/ida-efiutils) 辅助ELF逆向
-- [**204**星][4y] [Shell] [rand0m1ze/ezsploit](https://github.com/rand0m1ze/ezsploit) Linux bash script automation for metasploit
+- [**204**星][1y] [HTML] [xsscx/commodity-injection-signatures](https://github.com/xsscx/commodity-injection-signatures) Commodity Injection Signatures, Malicious Inputs, XSS, HTTP Header Injection, XXE, RCE, Javascript, XSLT
+- [**204**星][2y] [C++] [rfidtool/esp-rfid-tool](https://github.com/rfidtool/esp-rfid-tool) A tool for logging data/testing devices with a Wiegand Interface. Can be used to create a portable RFID reader or installed directly into an existing installation. Provides access to a web based interface using WiFi in AP or Client mode. Will work with nearly all devices that contain a standard 5V Wiegand interface. Primary target group is 26-37…
+- [**204**星][6d] [Java] [owasp/benchmark](https://github.com/owasp/benchmark) OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web app written in Java, it supports analysis by Static (SAST), Dynamic (DAST), and Runtime (IAST) tools that support Java. The idea is that since it is fully runnable and all the vulnerabilities are actually expl…
+- [**204**星][5d] [C] [niluje/kindletool](https://github.com/niluje/kindletool) A tool for creating & extracting Kindle updates and more
- [**204**星][10y] [C] [nextgens/tor](https://github.com/nextgens/tor) Tor is free software and an open network that helps you defend against a form of network surveillance that threatens personal freedom and privacy, confidential business activities and relationships, and state security known as traffic analysis.
-- [**204**星][2y] [Go] [netxfly/xsec-proxy-scanner](https://github.com/netxfly/xsec-proxy-scanner) 速度超快、小巧的代理服务器扫描器
-- [**204**星][5m] [Perl] [modzero/mod0burpuploadscanner](https://github.com/modzero/mod0burpuploadscanner) HTTP file upload scanner for Burp Proxy
-- [**204**星][14d] [Py] [m4ll0k/smbrute](https://github.com/m4ll0k/smbrute) SMB Protocol Bruteforce
-- [**204**星][1y] [JS] [jpcertcc/sysmonsearch](https://github.com/jpcertcc/sysmonsearch) Investigate suspicious activity by visualizing Sysmon's event log
-- [**204**星][6m] [Py] [invictus1306/beebug](https://github.com/invictus1306/beebug) A tool for checking exploitability
-- [**204**星][4m] [Py] [infosecn1nja/maliciousmacromsbuild](https://github.com/infosecn1nja/maliciousmacromsbuild) Generates Malicious Macro and Execute Powershell or Shellcode via MSBuild Application Whitelisting Bypass.
-- [**204**星][1m] [TypeScript] [helmetjs/csp](https://github.com/helmetjs/csp) Content Security Policy middleware
+- [**204**星][1m] [TS] [helmetjs/csp](https://github.com/helmetjs/csp) Content Security Policy middleware
- [**204**星][6y] [CoffeeScript] [fw42/honeymap](https://github.com/fw42/honeymap) Real-time websocket stream of GPS events on a fancy SVG world map
- [**204**星][1y] [Py] [fireeye/idawasm](https://github.com/fireeye/idawasm) WebAssembly的加载器和解析器
-- [**204**星][1y] [faizann24/resources-for-learning-hacking](https://github.com/faizann24/resources-for-learning-hacking) All the resources I could find for learning Ethical Hacking and penetration testing.
- [**204**星][2y] [Java] [facebookresearch/asynchronousratchetingtree](https://github.com/facebookresearch/asynchronousratchetingtree) 用于"端到端的加密群组消息"的协议
- [**204**星][2y] [evnm/research-in-production](https://github.com/evnm/research-in-production) A collection of research papers categorized by real-world systems that enact them
-- [**204**星][4m] [C++] [eternityx/deadcell-csgo](https://github.com/eternityx/deadcell-csgo) Full source to the CS:GO cheat
-- [**204**星][2m] [Py] [elevenpaths/ibombshell](https://github.com/elevenpaths/ibombshell) Tool to deploy a post-exploitation prompt at any time
- [**204**星][1y] [C#] [damonmohammadbagher/nativepayload_dns](https://github.com/damonmohammadbagher/nativepayload_dns) C# code for Transferring Backdoor Payloads by DNS Traffic and Bypassing Anti-viruses
+- [**204**星][4m] [HCL] [byt3bl33d3r/red-baron](https://github.com/byt3bl33d3r/red-baron) Automate creating resilient, disposable, secure and agile infrastructure for Red Teams
+- [**204**星][30d] [C#] [b4rtik/redpeanut](https://github.com/b4rtik/redpeanut) RedPeanut is a small RAT developed in .Net Core 2 and its agent in .Net 3.5 / 4.0.
- [**204**星][1y] [C++] [azonenberg/openfpga](https://github.com/azonenberg/openfpga) Open FPGA tools
+- [**204**星][4m] [Shell] [anshumanbh/brutesubs](https://github.com/anshumanbh/brutesubs) An automation framework for running multiple open sourced subdomain bruteforcing tools (in parallel) using your own wordlists via Docker Compose
- [**204**星][6y] [C#] [0xd4d/antinet](https://github.com/0xd4d/antinet) .NET anti-managed debugger and anti-profiler code
-- [**203**星][2y] [JS] [xmcp/gofw](https://github.com/xmcp/gofw) Chrome 扩展:麻麻再也不用担心 Google API 抽风了
-- [**203**星][6m] [JS] [wingleung/save-page-state](https://github.com/wingleung/save-page-state) A chrome extension to save the state of a page for further analysis
+- [**203**星][7m] [JS] [wingleung/save-page-state](https://github.com/wingleung/save-page-state) A chrome extension to save the state of a page for further analysis
- [**203**星][2y] [Py] [rootlabs/smap](https://github.com/suraj-root/smap) Handy tool for shellcode analysis
- [**203**星][1y] [C#] [spiderlabs/sharpcompile](https://github.com/spiderlabs/sharpcompile) SharpCompile is an aggressor script for Cobalt Strike which allows you to compile and execute C# in realtime. This is a more slick approach than manually compiling an .NET assembly and loading it into Cobalt Strike. The project aims to make it easier to move away from adhoc PowerShell execution instead creating a temporary assembly and executing…
-- [**203**星][1y] [Go] [raz-varren/xsshell](https://github.com/raz-varren/xsshell) XSS反向Shell框架
+- [**203**星][7m] [JS] [sixstars/starctf2019](https://github.com/sixstars/starctf2019) official source code of *CTF2019
+- [**203**星][1y] [Py] [shaohua0116/group-normalization-tensorflow](https://github.com/shaohua0116/group-normalization-tensorflow) A TensorFlow implementation of Group Normalization on the task of image classification
+- [**203**星][2m] [Py] [rpisec/llvm-deobfuscator](https://github.com/rpisec/llvm-deobfuscator)
- [**203**星][2y] [C] [peperunas/injectopi](https://github.com/peperunas/injectopi) 一堆Windows 代码注入教程
-- [**203**星][14d] [Py] [patois/idacyber](https://github.com/patois/idacyber) 交互式数据可视化插件
- [**203**星][1y] [Py] [omergunal/pot](https://github.com/omergunal/pot) Phishing on Twitter
-- [**203**星][5m] [Py] [nucypher/nufhe](https://github.com/nucypher/nufhe) NuCypher fully homomorphic encryption (NuFHE) library implemented in Python
-- [**203**星][7d] [C] [niluje/kindletool](https://github.com/niluje/kindletool) A tool for creating & extracting Kindle updates and more
-- [**203**星][2m] [Shell] [keepwannabe/remot3d](https://github.com/keepwannabe/remot3d) is a simple tool created for large pentesters as well as just for the pleasure of defacers to control server by backdoors
- [**203**星][3y] [C] [google/kasan](https://github.com/google/kasan) KernelAddressSanitizer, a fast memory error detector for the Linux kernel
- [**203**星][3y] [C] [deadbits/insecureprogramming](https://github.com/deadbits/insecureprogramming) mirror of gera's insecure programming examples |
-- [**203**星][4m] [Shell] [anshumanbh/brutesubs](https://github.com/anshumanbh/brutesubs) An automation framework for running multiple open sourced subdomain bruteforcing tools (in parallel) using your own wordlists via Docker Compose
+- [**202**星][4m] [jiansiting/kali-windows](https://github.com/jiansiting/kali-windows) Kali Windows
+- [**202**星][2y] [Py] [newbee119/ti_collector](https://github.com/NewBee119/Ti_Collector) 本项目致力于收集网上公开来源的威胁情报,主要关注信誉类威胁情报(如IP/域名等),以及事件类威胁情报。
+- [**202**星][2m] [Ruby] [vonahisec/leprechaun](https://github.com/vonahisec/leprechaun) This tool is used to map out the network data flow to help penetration testers identify potentially valuable targets.
- [**202**星][3m] [C++] [mc-imperial/jfs](https://github.com/mc-imperial/jfs) an experimental constraint solverdesigned to investigate using coverage guided fuzzing as an incomplete strategyfor solving boolean, BitVector, and floating-point constraints.
-- [**202**星][1y] [HTML] [xsscx/commodity-injection-signatures](https://github.com/xsscx/commodity-injection-signatures) Commodity Injection Signatures, Malicious Inputs, XSS, HTTP Header Injection, XXE, RCE, Javascript, XSLT
+- [**202**星][2m] [PS] [wiredpulse/posh-r2](https://github.com/wiredpulse/posh-r2) PowerShell - Rapid Response... For the incident responder in you!
- [**202**星][2y] [weilaihui/ss-net](https://github.com/weilaihui/ss-net) 共享shadowsocks主机
- [**202**星][2y] [Py] [tkmru/nao](https://github.com/tkmru/nao) 移除死代码(dead code), 基于Unicorn引擎
-- [**202**星][1y] [PowerShell] [sud0woodo/dcomrade](https://github.com/sud0woodo/dcomrade) Powershell script for enumerating vulnerable DCOM Applications
-- [**202**星][7m] [JS] [sixstars/starctf2019](https://github.com/sixstars/starctf2019) official source code of *CTF2019
-- [**202**星][1y] [Py] [shaohua0116/group-normalization-tensorflow](https://github.com/shaohua0116/group-normalization-tensorflow) A TensorFlow implementation of Group Normalization on the task of image classification
-- [**202**星][2y] [C++] [rfidtool/esp-rfid-tool](https://github.com/rfidtool/esp-rfid-tool) A tool for logging data/testing devices with a Wiegand Interface. Can be used to create a portable RFID reader or installed directly into an existing installation. Provides access to a web based interface using WiFi in AP or Client mode. Will work with nearly all devices that contain a standard 5V Wiegand interface. Primary target group is 26-37…
-- [**202**星][16d] [Java] [owasp/benchmark](https://github.com/owasp/benchmark) OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web app written in Java, it supports analysis by Static (SAST), Dynamic (DAST), and Runtime (IAST) tools that support Java. The idea is that since it is fully runnable and all the vulnerabilities are actually expl…
-- [**202**星][3m] [C++] [oisf/libhtp](https://github.com/oisf/libhtp) LibHTP is a security-aware parser for the HTTP protocol and the related bits and pieces.
+- [**202**星][1y] [PS] [sud0woodo/dcomrade](https://github.com/sud0woodo/dcomrade) Powershell script for enumerating vulnerable DCOM Applications
+- [**202**星][6d] [stuhirst/awssecurity](https://github.com/stuhirst/awssecurity) for AWS Security material
+- [**202**星][2m] [C++] [oisf/libhtp](https://github.com/oisf/libhtp) LibHTP is a security-aware parser for the HTTP protocol and the related bits and pieces.
- [**202**星][3y] [Py] [mseclab/nathan](https://github.com/mseclab/nathan) Android Emulator for mobile security testing
- [**202**星][4y] [Py] [m57/ardt](https://github.com/m57/ardt) Akamai Reflective DDoS Tool - Attack the origin host behind the Akamai Edge hosts and DDoS protection offered by Akamai services.
- [**202**星][1y] [Erlang] [kudelskisecurity/scannerl](https://github.com/kudelskisecurity/scannerl) scannerl:模块化、分布式指纹识别引擎,在单个主机运行即可扫描数千目标,也可轻松的部署到多台主机
- [**202**星][3y] [C++] [k2/ehtrace](https://github.com/k2/ehtrace) 跟踪Windows上二进制文件的执行。
+- [**202**星][1y] [C] [gtoad/android_inline_hook](https://github.com/gtoad/android_inline_hook) Build an so file to automatically do the android_native_hook work. Supports thumb-2/arm32 and ARM64 ! With this, tools like Xposed can do android native hook.
- [**202**星][7m] [Py] [greekn/rce-bug](https://github.com/greekn/rce-bug) 新漏洞感知项目 主要帮助大家 记录一些重大漏洞 漏洞方面的细节
- [**202**星][6y] [Py] [gifts/rogue-mysql-server](https://github.com/gifts/rogue-mysql-server) Rogue MySql Server
- [**202**星][1y] [Shell] [fics/atcmd](https://github.com/fics/atcmd) Android AT command scripts and firmware extraction
+- [**202**星][8m] [Py] [f5networks/f5-common-python](https://github.com/f5networks/f5-common-python) Python SDK for configuration and monitoring of F5® BIG-IP® devices via the iControl® REST API.
- [**202**星][2y] [Py] [euske/pyrexecd](https://github.com/euske/pyrexecd) 独立的SSH服务器(Windows)
-- [**202**星][12d] [Py] [doomedraven/virustotalapi](https://github.com/doomedraven/virustotalapi) VirusTotal Full api
+- [**202**星][3y] [Py] [endgameinc/dga_predict](https://github.com/endgameinc/dga_predict) Predicting Domain Generation Algorithms using LSTMs
+- [**202**星][7m] [C] [doublelabyrinth/how-does-navicat-encrypt-password](https://github.com/doublelabyrinth/how-does-navicat-encrypt-password) This repository tells you how Navicat encrypts database password.
+- [**202**星][14d] [Py] [doomedraven/virustotalapi](https://github.com/doomedraven/virustotalapi) VirusTotal Full api
- [**202**星][5m] [TeX] [decrypto-org/rupture](https://github.com/decrypto-org/rupture) A framework for BREACH and other compression-based crypto attacks
-- [**202**星][4m] [HCL] [byt3bl33d3r/red-baron](https://github.com/byt3bl33d3r/red-baron) Automate creating resilient, disposable, secure and agile infrastructure for Red Teams
-- [**202**星][6m] [C#] [bedthegod/confuserex-mod-by-bed](https://github.com/bedthegod/confuserex-mod-by-bed) Beds Protector | Best free obfuscation out right now
-- [**202**星][18d] [Shell] [aress31/wirespy](https://github.com/aress31/wirespy) Framework designed to automate various wireless networks attacks (the project was presented on Pentester Academy TV's toolbox in 2017).
-- [**201**星][7d] [Py] [byt3bl33d3r/witnessme](https://github.com/byt3bl33d3r/witnessme) Web Inventory tool, takes screenshots of webpages using Pyppeteer (headless Chrome/Chromium) and provides some extra bells & whistles to make life easier.
-- [**201**星][2y] [Py] [newbee119/ti_collector](https://github.com/NewBee119/Ti_Collector) 本项目致力于收集网上公开来源的威胁情报,主要关注信誉类威胁情报(如IP/域名等),以及事件类威胁情报。
+- [**202**星][2y] [Java] [cgutman/adblib](https://github.com/cgutman/adblib) A Java library implementation of the ADB network protocol
+- [**202**星][3d] [Py] [angr/cle](https://github.com/angr/cle) CLE Loads Everything (at least, many binary formats!)
+- [**201**星][20d] [C++] [can1357/byepg](https://github.com/can1357/byepg) Defeating Patchguard universally for Windows 8, Windows 8.1 and all versions of Windows 10 regardless of HVCI
- [**201**星][4m] [Py] [yelp/threat_intel](https://github.com/yelp/threat_intel) Threat Intelligence APIs
-- [**201**星][26d] [stuhirst/awssecurity](https://github.com/stuhirst/awssecurity) for AWS Security material
+- [**201**星][2d] [Shell] [x1mdev/reconpi](https://github.com/x1mdev/reconpi) ReconPi - A lightweight recon tool that performs extensive scanning with the latest tools.
+- [**201**星][4m] [Py] [thesph1nx/absolutezero](https://github.com/thesph1nx/absolutezero) Python APT Backdoor 1.0.0.1
- [**201**星][7m] [Java] [rolfrolles/ghidrapal](https://github.com/rolfrolles/ghidrapal) Ghidra 程序分析库(无文档)
- [**201**星][11m] [Py] [medbenali/cyberscan](https://github.com/medbenali/cyberscan) Network's Forensics ToolKit
+- [**201**星][1y] [JS] [lmammino/jwt-cracker](https://github.com/lmammino/jwt-cracker) jwt-cracker:HS256JWT 令牌暴力破解工具,只对弱密码有效
+- [**201**星][2m] [C++] [kalymos/psnee](https://github.com/kalymos/psnee) PsNee, an open source stealth modchip for the Sony Playstation 1
- [**201**星][2y] [Py] [joker25000/devploit](https://github.com/joker25000/devploit)
-- [**201**星][10m] [C] [hzqst/unicorn_pe](https://github.com/hzqst/unicorn_pe) 模拟Windows PE文件的代码执行,基于Unicorn
-- [**201**星][1y] [C] [gtoad/android_inline_hook](https://github.com/gtoad/android_inline_hook) Build an so file to automatically do the android_native_hook work. Supports thumb-2/arm32 and ARM64 ! With this, tools like Xposed can do android native hook.
-- [**201**星][8m] [Py] [f5networks/f5-common-python](https://github.com/f5networks/f5-common-python) Python SDK for configuration and monitoring of F5® BIG-IP® devices via the iControl® REST API.
-- [**201**星][3y] [Py] [endgameinc/dga_predict](https://github.com/endgameinc/dga_predict) Predicting Domain Generation Algorithms using LSTMs
-- [**201**星][2y] [Java] [cgutman/adblib](https://github.com/cgutman/adblib) A Java library implementation of the ADB network protocol
-- [**201**星][2m] [Ruby] [appfolio/gemsurance](https://github.com/appfolio/gemsurance) Gem vulnerability checker using rubysec/ruby-advisory-db
-- [**200**星][4m] [jiansiting/kali-windows](https://github.com/jiansiting/kali-windows) Kali Windows
-- [**200**星][18d] [C++] [can1357/byepg](https://github.com/can1357/byepg) Defeating Patchguard universally for Windows 8, Windows 8.1 and all versions of Windows 10 regardless of HVCI
-- [**200**星][4m] [Py] [thesph1nx/absolutezero](https://github.com/thesph1nx/absolutezero) Python APT Backdoor 1.0.0.1
+- [**201**星][23d] [Rust] [jedisct1/rust-doh](https://github.com/jedisct1/rust-doh) A fast and secure DoH (DNS-over-HTTP) server proxy written in Rust.
+- [**201**星][11m] [Py] [infamoussyn/rogue](https://github.com/infamoussyn/rogue) An extensible toolkit providing penetration testers an easy-to-use platform to deploy Access Points during penetration testing and red team engagements.
+- [**201**星][2y] [SourcePawn] [fnmsd/awvs_script_decode](https://github.com/fnmsd/awvs_script_decode) 解密好的AWVS10.5 data/script/目录下的脚本
+- [**201**星][6m] [C#] [bedthegod/confuserex-mod-by-bed](https://github.com/bedthegod/confuserex-mod-by-bed) Beds Protector | Best free obfuscation out right now
+- [**201**星][6m] [Py] [ares-x/awd-predator-framework](https://github.com/ares-x/awd-predator-framework) AWD攻防赛webshell批量利用框架
+- [**201**星][3m] [Ruby] [appfolio/gemsurance](https://github.com/appfolio/gemsurance) Gem vulnerability checker using rubysec/ruby-advisory-db
+- [**200**星][26d] [Jupyter Notebook] [hunters-forge/attack-python-client](https://github.com/hunters-forge/ATTACK-Python-Client) Python Script to access ATT&CK content available in STIX via a public TAXII server
+- [**200**星][3y] [Py] [tuuunya/webdirscan](https://github.com/TuuuNya/webdirscan) 跨平台的web目录扫描工具
+- [**200**星][1y] [newbee119/threat-intelligence](https://github.com/NewBee119/threat-intelligence) 收集的一些国外能提供提供威胁情报的公司,涵盖网络安全、工控安全、终端安全、移动安全等领域
+- [**200**星][3y] [tuuunya/fuzz_dict](https://github.com/TuuuNya/fuzz_dict) 常用的一些fuzz及爆破字典,欢迎大神继续提供新的字典及分类。
- [**200**星][1y] [Py] [sec-bit/awesome-buggy-erc20-tokens](https://github.com/sec-bit/awesome-buggy-erc20-tokens) A Collection of Vulnerabilities in ERC20 Smart Contracts With Tokens Affected
- [**200**星][5m] [C++] [rainers/cv2pdb](https://github.com/rainers/cv2pdb) converter of DMD CodeView/DWARF debug information to PDB files
-- [**200**星][1y] [JS] [lmammino/jwt-cracker](https://github.com/lmammino/jwt-cracker) jwt-cracker:HS256JWT 令牌暴力破解工具,只对弱密码有效
-- [**200**星][11m] [Py] [infamoussyn/rogue](https://github.com/infamoussyn/rogue) An extensible toolkit providing penetration testers an easy-to-use platform to deploy Access Points during penetration testing and red team engagements.
+- [**200**星][7m] [PS] [powershell/operation-validation-framework](https://github.com/powershell/operation-validation-framework) executing validation of the operation of a system
+- [**200**星][10m] [HTML] [mxmssh/drltrace](https://github.com/mxmssh/drltrace) Drltrace is a library calls tracer for Windows and Linux applications.
+- [**200**星][2y] [Py] [linw1995/lightsocks-python](https://github.com/linw1995/lightsocks-python)
+- [**200**星][4m] [C] [jas502n/cve-2019-13272](https://github.com/jas502n/cve-2019-13272) Linux 4.10 < 5.1.17 PTRACE_TRACEME local root
+- [**200**星][6m] [Py] [hellogoldsnakeman/masnmapscan-v1.0](https://github.com/hellogoldsnakeman/masnmapscan-v1.0) 一款端口扫描器。整合了masscan和nmap两款扫描器,masscan扫描端口,nmap扫描端口对应服务,二者结合起来实现了又快又好地扫描。并且加入了防火墙的功能
+- [**200**星][1y] [C] [hashcat/kwprocessor](https://github.com/hashcat/kwprocessor) Advanced keyboard-walk generator with configureable basechars, keymap and routes
- [**200**星][2y] [Py] [dragen1860/learningtocompare-pytorch](https://github.com/dragen1860/learningtocompare-pytorch) Pytorch Implementation for CVPR2018 Paper: Learning to Compare: Relation Network for Few-Shot Learning
-- [**200**星][7m] [C] [doublelabyrinth/how-does-navicat-encrypt-password](https://github.com/doublelabyrinth/how-does-navicat-encrypt-password) This repository tells you how Navicat encrypts database password.
+- [**200**星][5m] [Py] [doyensec/graph-ql](https://github.com/doyensec/graph-ql) GraphQL Security Research Material
+- [**200**星][6m] [Py] [dowjones/hammer](https://github.com/dowjones/hammer) Dow Jones Hammer : Protect the cloud with the power of the cloud(AWS)
- [**200**星][2y] [C] [david-reguera-garcia-dreg/anticuckoo](https://github.com/david-reguera-garcia-dreg/anticuckoo) A tool to detect and crash Cuckoo Sandbox
+- [**200**星][3y] [C] [crowdstrike/tortilla](https://github.com/crowdstrike/tortilla) solution for Windows that transparently routes all TCP and DNS traffic through Tor
- [**200**星][3y] [C] [cnlohr/espthernet](https://github.com/cnlohr/espthernet) ESP8266 10-Base-T Ethernet Driver
- [**200**星][1y] [C] [bazad/blanket](https://github.com/bazad/blanket) CVE-2018-4280: Mach port replacement vulnerability in launchd on iOS 11.2.6 leading to sandbox escape, privilege escalation, and codesigning bypass.
+- [**200**星][12d] [anudeepnd/blacklist](https://github.com/anudeepnd/blacklist) Curated and well-maintained host file to block ads, tracking, cryptomining and more! Updated regularly.
- [**199**星][10m] [Py] [kevthehermit/ducktoolkit](https://github.com/kevthehermit/ducktoolkit) Encoding Tools for Rubber Ducky
- [**199**星][2m] [Py] [tylous/vibe](https://github.com/tylous/vibe) A framework for stealthy domain reconnaissance
-- [**199**星][24d] [Jupyter Notebook] [hunters-forge/attack-python-client](https://github.com/hunters-forge/ATTACK-Python-Client) Python Script to access ATT&CK content available in STIX via a public TAXII server
-- [**199**星][1y] [newbee119/threat-intelligence](https://github.com/NewBee119/threat-intelligence) 收集的一些国外能提供提供威胁情报的公司,涵盖网络安全、工控安全、终端安全、移动安全等领域
- [**199**星][3y] [Assembly] [vector35/pwnadventurez](https://github.com/vector35/pwnadventurez) NES zombie survival game made to be hacked
-- [**199**星][2y] [Objective-C] [tihmstar/doubleh3lix](https://github.com/tihmstar/doubleh3lix) Jailbreak for iOS 10.x 64bit devices without KTRR
-- [**199**星][3y] [PHP] [redteamsecurity/plugbot-plug](https://github.com/redteamsecurity/plugbot-plug) The "bot" component of the PlugBot project
+- [**199**星][2m] [C] [uninett/mod_auth_mellon](https://github.com/uninett/mod_auth_mellon) An Apache module with a simple SAML 2.0 service provider
+- [**199**星][2y] [ObjC] [tihmstar/doubleh3lix](https://github.com/tihmstar/doubleh3lix) Jailbreak for iOS 10.x 64bit devices without KTRR
+- [**199**星][1y] [ObjC] [sunweiliang/neteasemusiccrack](https://github.com/sunweiliang/neteasemusiccrack) iOS网易云音乐 免VIP下载、去广告、去更新 无需越狱...
+- [**199**星][2m] [C++] [secrary/drsemu](https://github.com/secrary/drsemu) 根据动态行为检测恶意代码并进行分类
+- [**199**星][3y] [PHP] [redteamsecuritytraining/plugbot-plug](https://github.com/redteamsecuritytraining/PlugBot-Plug) The "bot" component of the PlugBot project
- [**199**星][1y] [C++] [quarkslab/binmap](https://github.com/quarkslab/binmap) system scanner
-- [**199**星][7m] [PowerShell] [powershell/operation-validation-framework](https://github.com/powershell/operation-validation-framework) executing validation of the operation of a system
-- [**199**星][10m] [HTML] [mxmssh/drltrace](https://github.com/mxmssh/drltrace) Drltrace is a library calls tracer for Windows and Linux applications.
-- [**199**星][2m] [C++] [kalymos/psnee](https://github.com/kalymos/psnee) PsNee, an open source stealth modchip for the Sony Playstation 1
-- [**199**星][6m] [Py] [hellogoldsnakeman/masnmapscan-v1.0](https://github.com/hellogoldsnakeman/masnmapscan-v1.0) 一款端口扫描器。整合了masscan和nmap两款扫描器,masscan扫描端口,nmap扫描端口对应服务,二者结合起来实现了又快又好地扫描。并且加入了防火墙的功能
-- [**199**星][1y] [C] [hashcat/kwprocessor](https://github.com/hashcat/kwprocessor) Advanced keyboard-walk generator with configureable basechars, keymap and routes
-- [**199**星][2y] [SourcePawn] [fnmsd/awvs_script_decode](https://github.com/fnmsd/awvs_script_decode) 解密好的AWVS10.5 data/script/目录下的脚本
+- [**199**星][12m] [iamcryptoki/snowden-archive](https://github.com/iamcryptoki/snowden-archive)
+- [**199**星][2y] [iaik/kaiser](https://github.com/iaik/kaiser) Kernel Address Isolation to have Side-channels Efficiently Removed
+- [**199**星][2y] [Go] [ezekg/git-hound](https://github.com/ezekg/git-hound) Git plugin that prevents sensitive data from being committed.
- [**199**星][2y] [Java] [ernw/androtickler](https://github.com/ernw/androtickler) Penetration testing and auditing toolkit for Android apps.
+- [**199**星][1y] [Dockerfile] [eadom/ctf_xinetd](https://github.com/eadom/ctf_xinetd) A docker repository for deploying pwnable challenges in CTF
+- [**199**星][3y] [C] [dismantl/linux-injector](https://github.com/dismantl/linux-injector) Utility for injecting executable code into a running process on x86/x64 Linux
- [**199**星][4y] [JS] [cturt/ps4-playground](https://github.com/cturt/ps4-playground) A set of PS4 experiments using the WebKit exploit
- [**199**星][3y] [Py] [climate-mirror/datasets](https://github.com/climate-mirror/datasets) For tracking data mirroring progress
-- [**199**星][9d] [Py] [angr/cle](https://github.com/angr/cle) CLE Loads Everything (at least, many binary formats!)
+- [**198**星][4m] [Py] [googleprojectzero/ios-messaging-tools](https://github.com/googleprojectzero/ios-messaging-tools) several tools Project Zero uses to test iPhone messaging
- [**198**星][2y] [Py] [alienvault-otx/apiv2](https://github.com/AlienVault-OTX/ApiV2) quickly identify related infrastructure and malware
+- [**198**星][2m] [Py] [thehive-project/thehivedocs](https://github.com/TheHive-Project/TheHiveDocs) Documentation of TheHive
- [**198**星][1y] [Py] [wipi-hunter/pikarma](https://github.com/WiPi-Hunter/PiKarma) Detects wireless network attacks performed by KARMA module
-- [**198**星][12d] [Swift] [auth0/lock.swift](https://github.com/auth0/Lock.swift) A Swift & iOS framework to authenticate using Auth0 and with a Native Look & Feel
-- [**198**星][3y] [Py] [tuuunya/webdirscan](https://github.com/TuuuNya/webdirscan) 跨平台的web目录扫描工具
+- [**198**星][8d] [Swift] [auth0/lock.swift](https://github.com/auth0/Lock.swift) A Swift & iOS framework to authenticate using Auth0 and with a Native Look & Feel
- [**198**星][5y] [rutkai/pentest-bookmarks](https://github.com/rutkai/pentest-bookmarks) A collection of penetration testing related sites
-- [**198**星][2m] [Ruby] [vonahisec/leprechaun](https://github.com/vonahisec/leprechaun) This tool is used to map out the network data flow to help penetration testers identify potentially valuable targets.
-- [**198**星][2m] [C] [uninett/mod_auth_mellon](https://github.com/uninett/mod_auth_mellon) An Apache module with a simple SAML 2.0 service provider
-- [**198**星][1y] [Objective-C] [sunweiliang/neteasemusiccrack](https://github.com/sunweiliang/neteasemusiccrack) iOS网易云音乐 免VIP下载、去广告、去更新 无需越狱...
-- [**198**星][2m] [C++] [secrary/drsemu](https://github.com/secrary/drsemu) 根据动态行为检测恶意代码并进行分类
-- [**198**星][5m] [PowerShell] [mkellerman/invoke-commandas](https://github.com/mkellerman/invoke-commandas) Invoke Command As System/Interactive/GMSA/User on Local/Remote machine & returns PSObjects.
+- [**198**星][7m] [C] [zombiecraig/icsim](https://github.com/zombiecraig/icsim) Instrument Cluster Simulator
+- [**198**星][9d] [Java] [spring-cloud-samples/spring-cloud-contract-samples](https://github.com/spring-cloud-samples/spring-cloud-contract-samples) Samples for Spring Cloud Contract project
+- [**198**星][2y] [proteas/native-lldb-for-ios](https://github.com/proteas/native-lldb-for-ios) native LLDB(v3.8) for iOS
+- [**198**星][8m] [Py] [nccgroup/g-scout](https://github.com/nccgroup/g-scout) Google Cloud Platform Security Tool
+- [**198**星][5m] [PS] [mkellerman/invoke-commandas](https://github.com/mkellerman/invoke-commandas) Invoke Command As System/Interactive/GMSA/User on Local/Remote machine & returns PSObjects.
- [**198**星][1y] [Py] [mike01/pypacker](https://github.com/mike01/pypacker) packet manipulation lib for Python
- [**198**星][2m] [Py] [meejah/txtorcon](https://github.com/meejah/txtorcon) Twisted-based asynchronous Tor control protocol implementation. Includes unit-tests, examples, state-tracking code and configuration abstraction.
- [**198**星][2y] [Go] [magoo/authtables](https://github.com/magoo/authtables) AuthTables is a microservice that helps detect "Account Take Over" caused by simple credential theft. If bad actors are stealing your users passwords, AuthTables may be useful.
- [**198**星][2y] [C] [lsds/spectre-attack-sgx](https://github.com/lsds/spectre-attack-sgx) Spectre attack against SGX enclave
-- [**198**星][21d] [Rust] [jedisct1/rust-doh](https://github.com/jedisct1/rust-doh) A fast and secure DoH (DNS-over-HTTP) server proxy written in Rust.
-- [**198**星][4m] [C] [jas502n/cve-2019-13272](https://github.com/jas502n/cve-2019-13272) Linux 4.10 < 5.1.17 PTRACE_TRACEME local root
- [**198**星][2y] [C#] [jaredhaight/psattackbuildtool](https://github.com/jaredhaight/psattackbuildtool) A tool for building PS>Attack, an offensive PowerShell console that makes it easy for pentesters to use PowerShell.
- [**198**星][3y] [Py] [isofew/sssniff](https://github.com/isofew/sssniff) ShadowSocks(SS) traffic sniffer
-- [**198**星][2y] [iaik/kaiser](https://github.com/iaik/kaiser) Kernel Address Isolation to have Side-channels Efficiently Removed
- [**198**星][6m] [Py] [google/in-silico-labeling](https://github.com/google/in-silico-labeling) Code for In silico labeling: Predicting fluorescent labels in unlabeled images
-- [**198**星][6m] [Py] [dowjones/hammer](https://github.com/dowjones/hammer) Dow Jones Hammer : Protect the cloud with the power of the cloud(AWS)
-- [**198**星][3y] [C] [dismantl/linux-injector](https://github.com/dismantl/linux-injector) Utility for injecting executable code into a running process on x86/x64 Linux
-- [**197**星][3y] [tuuunya/fuzz_dict](https://github.com/TuuuNya/fuzz_dict) 常用的一些fuzz及爆破字典,欢迎大神继续提供新的字典及分类。
-- [**197**星][7m] [C] [zombiecraig/icsim](https://github.com/zombiecraig/icsim) Instrument Cluster Simulator
-- [**197**星][15d] [Shell] [x1mdev/reconpi](https://github.com/x1mdev/reconpi) ReconPi - A lightweight recon tool that performs extensive scanning with the latest tools.
-- [**197**星][2y] [Objective-C] [siguza/v0rtex](https://github.com/siguza/v0rtex) IOSurface exploit
+- [**198**星][5m] [C#] [ghostpack/sharpdpapi](https://github.com/ghostpack/sharpdpapi) SharpDPAPI is a C# port of some Mimikatz DPAPI functionality.
+- [**198**星][3y] [Py] [faizann24/using-machine-learning-to-detect-malicious-urls](https://github.com/faizann24/using-machine-learning-to-detect-malicious-urls) 使用机器学习检测恶意URL
+- [**198**星][4y] [Py] [f8left/decllvm](https://github.com/f8left/decllvm) IDA plugin for OLLVM analysis
+- [**198**星][2d] [C] [beave/sagan](https://github.com/beave/sagan) Sagan uses a 'Snort like' engine and rules to analyze logs (syslog/event log/snmptrap/netflow/etc)
+- [**198**星][5m] [Py] [athre0z/wasm](https://github.com/athre0z/wasm) WebAssembly decoder & disassembler library
+- [**197**星][4m] [Kotlin] [shadowsocks/v2ray-plugin-android](https://github.com/shadowsocks/v2ray-plugin-android) A SIP003 V2ray plugin on Android
+- [**197**星][2y] [ObjC] [siguza/v0rtex](https://github.com/siguza/v0rtex) IOSurface exploit
+- [**197**星][6d] [C#] [secana/penet](https://github.com/secana/penet) Portable Executable (PE) library written in .Net
- [**197**星][7y] [C++] [scanlime/arduino-lelo-remote](https://github.com/scanlime/arduino-lelo-remote) Arduino library for remote-control Lelo vibrators
- [**197**星][1y] [Py] [s1kr10s/apache-struts-v3](https://github.com/s1kr10s/apache-struts-v3)
-- [**197**星][2m] [Py] [rpisec/llvm-deobfuscator](https://github.com/rpisec/llvm-deobfuscator)
-- [**197**星][2y] [proteas/native-lldb-for-ios](https://github.com/proteas/native-lldb-for-ios) native LLDB(v3.8) for iOS
-- [**197**星][8m] [Py] [nccgroup/g-scout](https://github.com/nccgroup/g-scout) Google Cloud Platform Security Tool
+- [**197**星][4y] [Java] [pwntester/serialkillerbypassgadgetcollection](https://github.com/pwntester/serialkillerbypassgadgetcollection) Collection of bypass gadgets to extend and wrap ysoserial payloads
- [**197**星][2y] [Go] [minio/concert](https://github.com/minio/concert) Concert is a console based certificate generation tool for letsencrypt.org.
-- [**197**星][2y] [Py] [linw1995/lightsocks-python](https://github.com/linw1995/lightsocks-python)
-- [**197**星][12m] [iamcryptoki/snowden-archive](https://github.com/iamcryptoki/snowden-archive)
-- [**197**星][3y] [Py] [faizann24/using-machine-learning-to-detect-malicious-urls](https://github.com/faizann24/using-machine-learning-to-detect-malicious-urls) 使用机器学习检测恶意URL
-- [**197**星][4y] [Py] [f8left/decllvm](https://github.com/f8left/decllvm) IDA plugin for OLLVM analysis
-- [**197**星][1y] [Dockerfile] [eadom/ctf_xinetd](https://github.com/eadom/ctf_xinetd) A docker repository for deploying pwnable challenges in CTF
+- [**197**星][3m] [infosecn1nja/awesome-mitre-attack](https://github.com/infosecn1nja/awesome-mitre-attack) A curated list of awesome resources related to Mitre ATT&CK™ Framework
+- [**197**星][2y] [C] [domblack/php-scrypt](https://github.com/domblack/php-scrypt) A PHP wrapper fo the scrypt hashing algorithm
- [**197**星][2y] [Py] [detuxsandbox/detux](https://github.com/detuxsandbox/detux) The Multiplatform Linux Sandbox
-- [**197**星][25d] [decalage2/awesome-security-hardening](https://github.com/decalage2/awesome-security-hardening) A collection of awesome security hardening guides, tools and other resources
-- [**197**星][8d] [OCaml] [bitblaze-fuzzball/fuzzball](https://github.com/bitblaze-fuzzball/fuzzball) Vine-based Binary Symbolic Execution
-- [**197**星][18d] [F#] [b2r2-org/b2r2](https://github.com/b2r2-org/b2r2) B2R2 is a collection of useful algorithms, functions, and tools for binary analysis.
-- [**197**星][5m] [Py] [athre0z/wasm](https://github.com/athre0z/wasm) WebAssembly decoder & disassembler library
-- [**197**星][6m] [Py] [ares-x/awd-predator-framework](https://github.com/ares-x/awd-predator-framework) AWD攻防赛webshell批量利用框架
-- [**197**星][10d] [anudeepnd/blacklist](https://github.com/anudeepnd/blacklist) Curated and well-maintained host file to block ads, tracking, cryptomining and more! Updated regularly.
-- [**196**星][4m] [Py] [googleprojectzero/ios-messaging-tools](https://github.com/googleprojectzero/ios-messaging-tools) several tools Project Zero uses to test iPhone messaging
-- [**196**星][1m] [Py] [thehive-project/thehivedocs](https://github.com/TheHive-Project/TheHiveDocs) Documentation of TheHive
+- [**197**星][4m] [cryptoseb/cryptopaper](https://github.com/cryptoseb/cryptopaper) Privacy, Security, and Anonymity For Every Internet User.
+- [**197**星][2m] [Py] [cisco-talos/decept](https://github.com/cisco-talos/decept) Decept Network Protocol Proxy
+- [**197**星][2d] [OCaml] [bitblaze-fuzzball/fuzzball](https://github.com/bitblaze-fuzzball/fuzzball) Vine-based Binary Symbolic Execution
+- [**197**星][20d] [F#] [b2r2-org/b2r2](https://github.com/b2r2-org/b2r2) B2R2 is a collection of useful algorithms, functions, and tools for binary analysis.
+- [**197**星][5d] [Py] [angr/angr-management](https://github.com/angr/angr-management) A GUI for angr. Being developed *very* slowly.
+- [**197**星][2y] [ObjC] [alonemonkey/dumpdecrypted](https://github.com/alonemonkey/dumpdecrypted) Dumps decrypted mach-o files from encrypted applications、framework or app extensions.
+- [**196**星][2m] [ignitetechnologies/hackthebox-ctf-writeups](https://github.com/ignitetechnologies/hackthebox-ctf-writeups) This cheasheet is aimed at the CTF Players and Beginners to help them sort Hack The Box Labs on the basis of Operating System and Difficulty.
+- [**196**星][12d] [JS] [ret2got/disasm.pro](https://github.com/ret2got/disasm.pro) A realtime assembler/disassembler (formerly known as disasm.ninja)
+- [**196**星][5m] [C#] [zodiacon/drivermon](https://github.com/zodiacon/drivermon) Monitor activity of any driver
- [**196**星][2y] [Py] [yvesalexandre/bandicoot](https://github.com/yvesalexandre/bandicoot) an open-source python toolbox to analyze mobile phone metadata
-- [**196**星][5m] [YARA] [th3hurrican3/pepper](https://github.com/th3hurrican3/pepper) An open source script to perform malware static analysis on Portable Executable
-- [**196**星][7d] [Java] [spring-cloud-samples/spring-cloud-contract-samples](https://github.com/spring-cloud-samples/spring-cloud-contract-samples) Samples for Spring Cloud Contract project
+- [**196**星][2y] [Py] [sqlab/symgdb](https://github.com/sqlab/symgdb) symbolic execution plugin for gdb
- [**196**星][3y] [Ruby] [spiderlabs/malware-analysis](https://github.com/spiderlabs/malware-analysis) A repository of tools and scripts related to malware analysis
+- [**196**星][25d] [Py] [seemoo-lab/internalblue](https://github.com/seemoo-lab/internalblue) Bluetooth experimentation framework for Broadcom and Cypress chips.
- [**196**星][2y] [C] [saaramar/execve_exploit](https://github.com/saaramar/execve_exploit) Hardcore corruption of my execve() vulnerability in WSL
+- [**196**星][10m] [JS] [rook2pawn/node-ddos](https://github.com/rook2pawn/node-ddos) Stop denial of service attacks, configurable allowable burst rate.
+- [**196**星][3y] [C] [robertdavidgraham/telnetlogger](https://github.com/robertdavidgraham/telnetlogger) Simulates enough of a Telnet connection in order to log failed login attempts.
- [**196**星][1y] [Py] [pstirparo/mac4n6](https://github.com/pstirparo/mac4n6) Collection of forensics artifacs location for Mac OS X and iOS
- [**196**星][8m] [JS] [pillarjs/csrf](https://github.com/pillarjs/csrf) Logic behind CSRF token creation and verification.
-- [**196**星][2y] [C] [domblack/php-scrypt](https://github.com/domblack/php-scrypt) A PHP wrapper fo the scrypt hashing algorithm
-- [**196**星][2m] [Py] [cisco-talos/decept](https://github.com/cisco-talos/decept) Decept Network Protocol Proxy
+- [**196**星][3d] [C] [denandz/fuzzotron](https://github.com/denandz/fuzzotron) A TCP/UDP based network daemon fuzzer
+- [**196**星][3y] [Ruby] [crowecybersecurity/ps1encode](https://github.com/crowecybersecurity/ps1encode) Script used to generate and encode a PowerShell based Metasploit payloads.
- [**196**星][2y] [Java] [abstractj/kalium](https://github.com/abstractj/kalium) Java binding to the Networking and Cryptography (NaCl) library with the awesomeness of libsodium
-- [**195**星][1m] [ignitetechnologies/hackthebox-ctf-writeups](https://github.com/ignitetechnologies/hackthebox-ctf-writeups) This cheasheet is aimed at the CTF Players and Beginners to help them sort Hack The Box Labs on the basis of Operating System and Difficulty.
-- [**195**星][1m] [Py] [yingcong/facelet_bank](https://github.com/yingcong/facelet_bank) Facelet-Bank for Fast Portrait Manipulation (pytorch)
-- [**195**星][9d] [Py] [sofianehamlaoui/lockdoor-framework](https://github.com/sofianehamlaoui/lockdoor-framework)
-- [**195**星][2m] [C#] [secana/penet](https://github.com/secana/penet) Portable Executable (PE) library written in .Net
-- [**195**星][3y] [C] [robertdavidgraham/telnetlogger](https://github.com/robertdavidgraham/telnetlogger) Simulates enough of a Telnet connection in order to log failed login attempts.
+- [**195**星][3y] [Py] [falseen/shadowsocks-pyqt](https://github.com/falseen/shadowsocks-pyqt) 一个用PyQt5实现的shadowsocks 客户端, 可以在 windows、linux、OSX 等平台上运行
+- [**195**星][8d] [C++] [spacehuhn/wifiduck](https://github.com/spacehuhn/wifiduck) Wireless keystroke injection attack platform
+- [**195**星][2m] [Py] [yingcong/facelet_bank](https://github.com/yingcong/facelet_bank) Facelet-Bank for Fast Portrait Manipulation (pytorch)
+- [**195**星][25d] [Lua] [ocsaf/freevulnsearch](https://github.com/ocsaf/freevulnsearch) Free and open NMAP NSE script to query vulnerabilities via the cve-search.org API.
- [**195**星][1y] [Java] [nocheatplus/nocheatplus](https://github.com/nocheatplus/nocheatplus) Anti cheating plugin for Minecraft (Bukkit/Spigot).
+- [**195**星][9m] [Py] [mpgn/cve-2019-0192](https://github.com/mpgn/cve-2019-0192) RCE on Apache Solr using deserialization of untrusted data via jmx.serviceUrl
- [**195**星][3y] [mechaphish/mecha-docs](https://github.com/mechaphish/mecha-docs) Documentation for the Mechanical Phish.
- [**195**星][1y] [Batchfile] [knightmare2600/shadowbrokers](https://github.com/knightmare2600/shadowbrokers) Guides, Tools, Tips and such for working with the Shadow Brokers dumps
-- [**195**星][2m] [C] [denandz/fuzzotron](https://github.com/denandz/fuzzotron) A TCP/UDP based network daemon fuzzer
+- [**195**星][9m] [hannoch/scaner](https://github.com/hannoch/scaner) 开源扫描器的集合,包括子域枚举、数据库漏洞扫描器、弱密码或信息泄漏扫描器、端口扫描器、指纹扫描器以及其他大规模扫描仪、模块扫描器等。对于其他著名的扫描工具,如:awvs、nmap,w3af将不包含在集合范围内。
- [**195**星][4m] [Ruby] [delvelabs/vane](https://github.com/delvelabs/vane) A GPL fork of the popular wordpress vulnerability scanner WPScan
-- [**195**星][4m] [cryptoseb/cryptopaper](https://github.com/cryptoseb/cryptopaper) Privacy, Security, and Anonymity For Every Internet User.
-- [**195**星][3y] [Ruby] [crowecybersecurity/ps1encode](https://github.com/crowecybersecurity/ps1encode) Script used to generate and encode a PowerShell based Metasploit payloads.
-- [**195**星][12m] [C++] [cararasu/holodec](https://github.com/cararasu/holodec) Decompiler for x86 and x86-64 ELF binaries
+- [**195**星][2y] [Py] [cheetz/sslscrape](https://github.com/cheetz/sslscrape) SSLScrape | A scanning tool for scaping hostnames from SSL certificates.
+- [**195**星][1y] [C++] [cararasu/holodec](https://github.com/cararasu/holodec) Decompiler for x86 and x86-64 ELF binaries
+- [**195**星][4m] [Py] [boy-hack/hack-requests](https://github.com/boy-hack/hack-requests) 给黑客们使用的http底层网络库
- [**195**星][3m] [Groovy] [alvarosanchez/grails-spring-security-rest](https://github.com/alvarosanchez/grails-spring-security-rest) Grails plugin to implement token-based, RESTful authentication using Spring Security
-- [**195**星][2y] [Objective-C] [alonemonkey/dumpdecrypted](https://github.com/alonemonkey/dumpdecrypted) Dumps decrypted mach-o files from encrypted applications、framework or app extensions.
+- [**195**星][23d] [C] [aircrack-ng/mdk4](https://github.com/aircrack-ng/mdk4) a proof-of-concept tool to exploit common IEEE 802.11 protocol weaknesses.
+- [**195**星][3m] [04x/icg-autoexploiterbot](https://github.com/04x/icg-autoexploiterbot) Wordpress
+- [**194**星][2m] [Java] [trojan-gfw/igniter](https://github.com/trojan-gfw/igniter) A trojan client for Android (UNDER CONSTRUCTION).
+- [**194**星][11m] [Py] [hackatnow/djangohunter](https://github.com/hackatnow/djangohunter) Tool designed to help identify incorrectly configured Django applications that are exposing sensitive information.
- [**194**星][7y] [Java] [nvisium-jack-mannino/owasp-goatdroid-project](https://github.com/nvisium-jack-mannino/OWASP-GoatDroid-Project) *This project is no longer maintained* OWASP GoatDroid is a fully functional and self-contained training environment for educating developers and testers on Android security. GoatDroid requires minimal dependencies and is ideal for both Android beginners as well as more advanced users. The project currently includes two applications: FourGoats, …
- [**194**星][1y] [Rust] [genet-app/genet](https://github.com/genet-app/genet) 网络分析工具, 界面版, 跨平台
-- [**194**星][5m] [C#] [zodiacon/drivermon](https://github.com/zodiacon/drivermon) Monitor activity of any driver
-- [**194**星][11m] [JS] [zer4tul/hacker-howto](https://github.com/zer4tul/hacker-howto) 本文原文由知名Hacker Eric S. Raymond 所撰写,教你如何成为一名黑客。
+- [**194**星][9m] [zardus/wargame-nexus](https://github.com/zardus/wargame-nexus) An sorted and updated list of security wargame sites.
- [**194**星][3y] [Py] [xairy/mipt-ctf](https://github.com/xairy/mipt-ctf) A small course on CTF (wargames) for beginners [in Russian]
-- [**194**星][2y] [Py] [sqlab/symgdb](https://github.com/sqlab/symgdb) symbolic execution plugin for gdb
+- [**194**星][1y] [C++] [unapibageek/cbm](https://github.com/unapibageek/cbm) Car Backdoor Maker
- [**194**星][10y] [Ruby] [sfeley/candy](https://github.com/sfeley/candy) Transparent persistence for MongoDB
-- [**194**星][2m] [PowerShell] [sadprocessor/somestuff](https://github.com/sadprocessor/somestuff) Some PowerShell Stuff
-- [**194**星][10m] [JS] [rook2pawn/node-ddos](https://github.com/rook2pawn/node-ddos) Stop denial of service attacks, configurable allowable burst rate.
+- [**194**星][2m] [PS] [sadprocessor/somestuff](https://github.com/sadprocessor/somestuff) Some PowerShell Stuff
+- [**194**星][8m] [Py] [ropnop/impacket_static_binaries](https://github.com/ropnop/impacket_static_binaries) Standalone binaries for Linux/Windows of Impacket's examples
+- [**194**星][5m] [C++] [panda-re/lava](https://github.com/panda-re/lava) 大规模自动化漏洞Addition工具
- [**194**星][5y] [C#] [nccgroup/upnp-pentest-toolkit](https://github.com/nccgroup/upnp-pentest-toolkit) UPnP Pentest Toolkit for Windows
-- [**194**星][9m] [Py] [mpgn/cve-2019-0192](https://github.com/mpgn/cve-2019-0192) RCE on Apache Solr using deserialization of untrusted data via jmx.serviceUrl
- [**194**星][3y] [JS] [mhils/honeyproxy](https://github.com/mhils/honeyproxy) This project is now part of
- [**194**星][8m] [Py] [lingerhk/hacking_script](https://github.com/lingerhk/hacking_script) 开发或收集的一些网络安全方面的脚本、小工具
-- [**194**星][3m] [infosecn1nja/awesome-mitre-attack](https://github.com/infosecn1nja/awesome-mitre-attack) A curated list of awesome resources related to Mitre ATT&CK™ Framework
-- [**194**星][5m] [C#] [ghostpack/sharpdpapi](https://github.com/ghostpack/sharpdpapi) SharpDPAPI is a C# port of some Mimikatz DPAPI functionality.
+- [**194**星][3d] [Java] [ldtteam/minecolonies](https://github.com/ldtteam/minecolonies) Minecolonies minecraft mod
+- [**194**星][3m] [jdonsec/allthingsssrf](https://github.com/jdonsec/allthingsssrf) This is a collection of writeups, cheatsheets, videos, books related to SSRF in one single location
- [**194**星][2y] [Py] [f3d0x0/gpon](https://github.com/f3d0x0/gpon) Exploit for Remote Code Execution on GPON home routers (CVE-2018-10562) written in Python. Initially disclosed by VPNMentor (
-- [**194**星][12d] [Py] [elevenpaths/homepwn](https://github.com/elevenpaths/homepwn) HomePwn - Swiss Army Knife for Pentesting of IoT Devices
+- [**194**星][11m] [Visual Basic .NET] [dragokas/hijackthis](https://github.com/dragokas/hijackthis) A free utility that finds malware, adware and other security threats
- [**194**星][5m] [Go] [cuishark/cuishark](https://github.com/cuishark/cuishark) A protocol analyzer like a wireshark on CUI. cuishark is using libwireshark to analyze packets.
- [**194**星][11m] [JS] [comotion/vsf](https://github.com/comotion/vsf) Varnish Security Firewall
-- [**194**星][2y] [Py] [cheetz/sslscrape](https://github.com/cheetz/sslscrape) SSLScrape | A scanning tool for scaping hostnames from SSL certificates.
-- [**194**星][2m] [Py] [auth0/auth0-python](https://github.com/auth0/auth0-python) All information regarding using Auth0 with Python
-- [**193**星][11m] [Py] [hackatnow/djangohunter](https://github.com/hackatnow/djangohunter) Tool designed to help identify incorrectly configured Django applications that are exposing sensitive information.
+- [**194**星][11m] [Py] [hackatnow/djangohunter](https://github.com/hackatnow/djangohunter) Tool designed to help identify incorrectly configured Django applications that are exposing sensitive information.
+- [**193**星][6m] [Shell] [suniceman/ss-fly](https://github.com/suniceman/ss-fly) 一键脚本搭建ss/ssr并开启bbr内核加速(Ubuntu/CentOS/Debian)
+- [**193**星][2y] [PS] [vysecurity/angrypuppy](https://github.com/vysecurity/ANGRYPUPPY) Bloodhound Attack Path Automation in CobaltStrike
+- [**193**星][1m] [ObjC] [ripperhe/debugo](https://github.com/ripperhe/Debugo)
- [**193**星][2y] [Py] [abdulrah33m/cl0nemast3r](https://github.com/Abdulrah33m/Cl0neMast3r) Git all your favorite tools in one click
-- [**193**星][3y] [Ruby] [zed-0xff/pedump](https://github.com/zed-0xff/pedump) 转储PE文件,Ruby编写
-- [**193**星][9m] [zardus/wargame-nexus](https://github.com/zardus/wargame-nexus) An sorted and updated list of security wargame sites.
+- [**193**星][11m] [JS] [zer4tul/hacker-howto](https://github.com/zer4tul/hacker-howto) 本文原文由知名Hacker Eric S. Raymond 所撰写,教你如何成为一名黑客。
+- [**193**星][3m] [C++] [xortroll/emuiibo](https://github.com/xortroll/emuiibo) Virtual amiibo (amiibo emulation) system for Nintendo Switch
- [**193**星][3y] [Go] [vesche/lonely-shell](https://github.com/vesche/lonely-shell) poc https reverse shell
-- [**193**星][1y] [C++] [unapibageek/cbm](https://github.com/unapibageek/cbm) Car Backdoor Maker
+- [**193**星][9m] [Batchfile] [tai7sy/fuckcdn](https://github.com/tai7sy/fuckcdn) CDN真实IP扫描,易语言开发
- [**193**星][11m] [Py] [scanlime/coastermelt](https://github.com/scanlime/coastermelt) An effort to make open source firmware for burning anything other than Blu-Ray data onto plastic discs with a BD-R drive.
-- [**193**星][4y] [Java] [pwntester/serialkillerbypassgadgetcollection](https://github.com/pwntester/serialkillerbypassgadgetcollection) Collection of bypass gadgets to extend and wrap ysoserial payloads
-- [**193**星][5m] [C++] [panda-re/lava](https://github.com/panda-re/lava) 大规模自动化漏洞Addition工具
-- [**193**星][8d] [Java] [ldtteam/minecolonies](https://github.com/ldtteam/minecolonies) Minecolonies minecraft mod
+- [**193**星][1m] [Shell] [roddhjav/pass-tomb](https://github.com/roddhjav/pass-tomb) A pass extension that helps you to keep the whole tree of password encrypted inside a tomb.
+- [**193**星][3d] [CSS] [owasp/samm](https://github.com/owasp/samm)
+- [**193**星][4m] [C] [nowsecure/frida-cycript](https://github.com/nowsecure/frida-cycript) Cycript fork powered by Frida.
+- [**193**星][6m] [C++] [linushenze/keysteal](https://github.com/linushenze/keysteal) A macOS <= 10.14.3 Keychain exploit
- [**193**星][1m] [Py] [joxeankoret/cosa-nostra](https://github.com/joxeankoret/cosa-nostra) Cosa Nostra, a FOSS graph based malware clusterization toolkit.
-- [**193**星][9m] [hannoch/scaner](https://github.com/hannoch/scaner) 开源扫描器的集合,包括子域枚举、数据库漏洞扫描器、弱密码或信息泄漏扫描器、端口扫描器、指纹扫描器以及其他大规模扫描仪、模块扫描器等。对于其他著名的扫描工具,如:awvs、nmap,w3af将不包含在集合范围内。
+- [**193**星][2m] [C#] [jakobbotsch/fuzzlyn](https://github.com/jakobbotsch/fuzzlyn) Fuzzer for the .NET toolchains, developed as a project for the 2018 Language-Based Security course at Aarhus University.
+- [**193**星][2m] [C++] [googleprojectzero/street-party](https://github.com/googleprojectzero/street-party) Street Party is a suite of tools that allows the RTP streams of video conferencing implementations to be viewed and modified.
- [**193**星][1y] [Py] [frizb/bypassing-web-application-firewalls](https://github.com/frizb/bypassing-web-application-firewalls) A series of python scripts for generating weird character combinations for bypassing web application firewalls (WAF) and XSS blockers
- [**193**星][2y] [Py] [francisck/danderspritz_docs](https://github.com/francisck/danderspritz_docs) The goal of this project is to examine, reverse, and document the different modules available in the Equation Group's DanderSpritz post-exploitation framework leaked by the ShadowBrokers
- [**193**星][8m] [Py] [fastly/ftw](https://github.com/fastly/ftw) ftw:WAF 测试框架
+- [**193**星][1y] [C] [ehsahil/recon-my-way](https://github.com/ehsahil/recon-my-way) This repository created for personal use and added tools from my latest blog post.
+- [**193**星][9d] [JS] [dvandal/cryptonote-nodejs-pool](https://github.com/dvandal/cryptonote-nodejs-pool) Mining pool for all CryptoNote based coins using Cryptonight, Cryptonight Light and Cryptonight Heavy algorithms
+- [**193**星][3m] [Java] [derekbabb/cybersecurity](https://github.com/derekbabb/cybersecurity) A curriculum for a high school cyber security course.
- [**193**星][6y] [C] [datasoft/honeyd](https://github.com/datasoft/honeyd) virtual honeypots
- [**193**星][3y] [C#] [codeshark-dev/nofuserex](https://github.com/codeshark-dev/nofuserex) Free deobfuscator for ConfuserEx.
- [**193**星][4y] [Clojure] [clojurewerkz/meltdown](https://github.com/clojurewerkz/meltdown) Clojure interface to Reactor, an event-driven programming and stream processing toolkit for the JVM
-- [**193**星][21d] [C] [aircrack-ng/mdk4](https://github.com/aircrack-ng/mdk4) a proof-of-concept tool to exploit common IEEE 802.11 protocol weaknesses.
-- [**193**星][11m] [Py] [hackatnow/djangohunter](https://github.com/hackatnow/djangohunter) Tool designed to help identify incorrectly configured Django applications that are exposing sensitive information.
-- [**193**星][2m] [04x/icg-autoexploiterbot](https://github.com/04x/icg-autoexploiterbot) Wordpress
+- [**193**星][21d] [C] [cathugger/mkp224o](https://github.com/cathugger/mkp224o) vanity address generator for tor onion v3 (ed25519) hidden services
+- [**193**星][5m] [C++] [boyan-milanov/ropgenerator](https://github.com/boyan-milanov/ropgenerator) ROPGenerator is a tool that helps you building ROP exploits by finding and chaining gadgets together
+- [**193**星][2m] [Py] [auth0/auth0-python](https://github.com/auth0/auth0-python) All information regarding using Auth0 with Python
+- [**192**星][23d] [Go] [cruise-automation/k-rail](https://github.com/cruise-automation/k-rail) Kubernetes security tool for policy enforcement
- [**192**星][4y] [Py] [isecpartners/libtech-auditing-cheatsheet](https://github.com/isecpartners/libtech-auditing-cheatsheet)
-- [**192**星][2y] [PowerShell] [vysecurity/angrypuppy](https://github.com/vysecurity/ANGRYPUPPY) Bloodhound Attack Path Automation in CobaltStrike
+- [**192**星][3y] [Ruby] [zed-0xff/pedump](https://github.com/zed-0xff/pedump) 转储PE文件,Ruby编写
+- [**192**星][2m] [Py] [unipacker/unipacker](https://github.com/unipacker/unipacker) Automatic and platform-independent unpacker for Windows binaries based on emulation
- [**192**星][6y] [Py] [smeegesec/hashtag](https://github.com/smeegesec/hashtag) Password Hash Identification
-- [**192**星][30d] [Shell] [roddhjav/pass-tomb](https://github.com/roddhjav/pass-tomb) A pass extension that helps you to keep the whole tree of password encrypted inside a tomb.
-- [**192**星][22d] [Lua] [ocsaf/freevulnsearch](https://github.com/ocsaf/freevulnsearch) Free and open NMAP NSE script to query vulnerabilities via the cve-search.org API.
-- [**192**星][4m] [C] [nowsecure/frida-cycript](https://github.com/nowsecure/frida-cycript) Cycript fork powered by Frida.
+- [**192**星][4y] [C++] [mubix/netview](https://github.com/mubix/netview) Netview enumerates systems using WinAPI calls
- [**192**星][2y] [Java] [mesosphere/cassandra-mesos-deprecated](https://github.com/mesosphere/cassandra-mesos-deprecated) [DEPRECATED] This project is deprecated. It will be archived on December 1, 2017.
-- [**192**星][6m] [C++] [linushenze/keysteal](https://github.com/linushenze/keysteal) A macOS <= 10.14.3 Keychain exploit
-- [**192**星][29d] [Py] [lazza/recuperabit](https://github.com/lazza/recuperabit) A tool for forensic file system reconstruction.
-- [**192**星][3m] [jdonsec/allthingsssrf](https://github.com/jdonsec/allthingsssrf) This is a collection of writeups, cheatsheets, videos, books related to SSRF in one single location
-- [**192**星][2m] [C#] [jakobbotsch/fuzzlyn](https://github.com/jakobbotsch/fuzzlyn) Fuzzer for the .NET toolchains, developed as a project for the 2018 Language-Based Security course at Aarhus University.
-- [**192**星][2m] [C++] [googleprojectzero/street-party](https://github.com/googleprojectzero/street-party) Street Party is a suite of tools that allows the RTP streams of video conferencing implementations to be viewed and modified.
-- [**192**星][7d] [Go] [google/certificate-transparency-go](https://github.com/google/certificate-transparency-go) Auditing for TLS certificates, Go code.
+- [**192**星][1y] [Py] [malwaredllc/bamf](https://github.com/malwaredllc/bamf) BAMF (Backdoor Access Machine Farmer)
+- [**192**星][5m] [Go] [lc/secretz](https://github.com/lc/secretz) secretz, minimizing the large attack surface of Travis CI
+- [**192**星][1m] [Py] [lazza/recuperabit](https://github.com/lazza/recuperabit) A tool for forensic file system reconstruction.
+- [**192**星][11m] [C] [ionescu007/winipt](https://github.com/ionescu007/winipt) 利用Win10 1809添加的Intel处理器追踪功能进行进程追踪
+- [**192**星][8d] [Go] [google/certificate-transparency-go](https://github.com/google/certificate-transparency-go) Auditing for TLS certificates, Go code.
+- [**192**星][1m] [furrtek/dmg-cpu-inside](https://github.com/furrtek/dmg-cpu-inside) Reverse-engineered schematics for DMG-CPU-B
- [**192**星][1y] [Py] [foospidy/dbdat](https://github.com/foospidy/dbdat) performs numerous checks on a database to evaluate security.
-- [**192**星][11m] [Visual Basic] [dragokas/hijackthis](https://github.com/dragokas/hijackthis) A free utility that finds malware, adware and other security threats
+- [**192**星][3m] [Py] [dionach/phemail](https://github.com/dionach/phemail) PhEmail is a python open source phishing email tool that automates the process of sending phishing emails as part of a social engineering test
+- [**192**星][2y] [Assembly] [cybereason/siofra](https://github.com/cybereason/siofra) a tool designed to identify and exploit DLL hijacking vulnerabilities in Windows programs
- [**192**星][5y] [ActionScript] [cure53/flashbang](https://github.com/cure53/flashbang) Project "Flashbang" - An open-source Flash-security helper
-- [**192**星][19d] [C] [cathugger/mkp224o](https://github.com/cathugger/mkp224o) vanity address generator for tor onion v3 (ed25519) hidden services
- [**192**星][2y] [C++] [caledoniaproject/xlcloudclient](https://github.com/caledoniaproject/xlcloudclient) 迅雷离线Linux客户端,多种漏洞利用 ;-P 大家慢慢挖掘吧 哈哈 觉得好就点下 Star / Fork 吧
+- [**192**星][2y] [Py] [brucetg/pentest-tools](https://github.com/brucetg/pentest-tools) 内网渗透工具
- [**192**星][2y] [C] [bindecy/hugedirtycowpoc](https://github.com/bindecy/hugedirtycowpoc) A POC for the Huge Dirty Cow vulnerability (CVE-2017-1000405)
-- [**192**星][28d] [C#] [b4rtik/redpeanut](https://github.com/b4rtik/redpeanut) RedPeanut is a small RAT developed in .Net Core 2 and its agent in .Net 3.5 / 4.0.
-- [**192**星][11d] [Py] [angr/angr-management](https://github.com/angr/angr-management) A GUI for angr. Being developed *very* slowly.
-- [**191**星][25d] [C++] [apt69/comahawk](https://github.com/apt69/comahawk) Privilege Escalation: Weaponizing CVE-2019-1405 and CVE-2019-1322
+- [**192**星][12m] [Py] [0xr0/shellver](https://github.com/0xr0/shellver) Reverse Shell Cheat Sheet TooL
+- [**191**星][2m] [Java] [tongxiji/shadowsocks-java](https://github.com/tongxiji/shadowsocks-java) shadowsocks server base on netty4 , tcp & udp full support,
+- [**191**星][3y] [Go] [koding/tunnel](https://github.com/koding/tunnel) Tunnel proxy package in Go
+- [**191**星][2y] [Java] [p3gleg/pwnback](https://github.com/P3GLEG/PwnBack) Burp Extender plugin that generates a sitemap of a website using Wayback Machine
+- [**191**星][1y] [HTML] [yaseng/iot-security-wiki](https://github.com/yaseng/iot-security-wiki) IOT security wiki
- [**191**星][3y] [Py] [xyntax/dirbrute](https://github.com/xyntax/dirbrute) 多线程WEB目录爆破工具 [Multi-thread WEB directory blasting tool(with dics inside) ]
-- [**191**星][3m] [C++] [xortroll/emuiibo](https://github.com/xortroll/emuiibo) Virtual amiibo (amiibo emulation) system for Nintendo Switch
- [**191**星][2y] [Py] [viralmaniar/wifi-dumper](https://github.com/viralmaniar/wifi-dumper) This is an open source tool to dump the wifi profiles and cleartext passwords of the connected access points on the Windows machine. This tool will help you in a Wifi penetration testing. Furthermore, it is useful while performing red team or an internal infrastructure engagements.
+- [**191**星][3m] [Shell] [unbinilium/twist](https://github.com/unbinilium/twist) A light script for you to setup shadowsocks-libev server with high-speed connections and newest powerful features
- [**191**星][7m] [Py] [tintinweb/pub](https://github.com/tintinweb/pub) Vulnerability Notes, PoC Exploits and Write-Ups for security issues disclosed by tintinweb
+- [**191**星][20d] [Py] [skyscanner/lambdaguard](https://github.com/skyscanner/lambdaguard) AWS Serverless Security
- [**191**星][2m] [JS] [sindresorhus/internal-ip](https://github.com/sindresorhus/internal-ip) Get your internal IP address
- [**191**星][4m] [Py] [sham00n/buster](https://github.com/sham00n/buster) An advanced tool for email reconnaissance
-- [**191**星][8m] [JS] [or3stis/apparatus](https://github.com/or3stis/apparatus) A graphical security analysis tool for IoT networks
+- [**191**星][4m] [ObjC] [riusksk/secconarchive](https://github.com/riusksk/secconarchive) Security Conference Archive
+- [**191**星][2m] [Py] [projectante/dnsgen](https://github.com/projectante/dnsgen) Generates combination of domain names from the provided input.
+- [**191**星][6m] [pochubs/pochubs](https://github.com/pochubs/pochubs) PocHubs是为了整合网上知名开源框架的漏洞详细和POC
- [**191**星][2m] [onesecure/shadowagentnotes](https://github.com/onesecure/shadowagentnotes)
-- [**191**星][4y] [C++] [mubix/netview](https://github.com/mubix/netview) Netview enumerates systems using WinAPI calls
+- [**191**星][2m] [Py] [niklasrosenstein/pydoc-markdown](https://github.com/niklasrosenstein/pydoc-markdown) Create Python API documentation in Markdown format.
+- [**191**星][3m] [Py] [jrspruitt/ubi_reader](https://github.com/jrspruitt/ubi_reader) Collection of Python scripts for reading information about and extracting data from UBI and UBIFS images.
- [**191**星][4y] [C++] [isecpartners/jailbreak](https://github.com/isecpartners/jailbreak) Jailbreak
-- [**191**星][4y] [JS] [isecpartners/introspy-analyzer](https://github.com/isecpartners/introspy-analyzer) a set of iOS and Android tools designed to help understand what an iOS or Android application is doing at runtime and assist in the identification of potential security issues.
-- [**191**星][10m] [C] [ionescu007/winipt](https://github.com/ionescu007/winipt) 利用Win10 1809添加的Intel处理器追踪功能进行进程追踪
-- [**191**星][2y] [PowerShell] [gimini/mimidbg](https://github.com/gimini/mimidbg) PowerShell oneliner to retrieve wdigest passwords from the memory
+- [**191**星][2y] [PS] [gimini/mimidbg](https://github.com/gimini/mimidbg) PowerShell oneliner to retrieve wdigest passwords from the memory
+- [**191**星][26d] [Py] [ghostmanager/ghostwriter](https://github.com/ghostmanager/ghostwriter) The SpecterOps project management and reporting engine
- [**191**星][7m] [Shell] [gaenserich/hostsblock](https://github.com/gaenserich/hostsblock) an ad- and malware-blocking script for Linux
-- [**191**星][1m] [furrtek/dmg-cpu-inside](https://github.com/furrtek/dmg-cpu-inside) Reverse-engineered schematics for DMG-CPU-B
- [**191**星][4y] [HTML] [faber03/androidmalwareevaluatingtools](https://github.com/faber03/androidmalwareevaluatingtools) Evaluation tools for malware Android
-- [**191**星][1y] [C] [ehsahil/recon-my-way](https://github.com/ehsahil/recon-my-way) This repository created for personal use and added tools from my latest blog post.
-- [**191**星][3m] [Py] [dionach/phemail](https://github.com/dionach/phemail) PhEmail is a python open source phishing email tool that automates the process of sending phishing emails as part of a social engineering test
-- [**191**星][2y] [Assembly] [cybereason/siofra](https://github.com/cybereason/siofra) a tool designed to identify and exploit DLL hijacking vulnerabilities in Windows programs
-- [**191**星][2y] [Py] [brucetg/pentest-tools](https://github.com/brucetg/pentest-tools) 内网渗透工具
-- [**191**星][4m] [Py] [boy-hack/hack-requests](https://github.com/boy-hack/hack-requests) 给黑客们使用的http底层网络库
-- [**191**星][12m] [Py] [0xr0/shellver](https://github.com/0xr0/shellver) Reverse Shell Cheat Sheet TooL
-- [**190**星][2y] [Py] [sheldoncoupeheure/autosqli](https://github.com/sheldoncoupeheure/AutoSQLi) An automatic SQL Injection tool which takes advantage of ~DorkNet~ Googler, Ddgr, WhatWaf and sqlmap.
-- [**190**星][6m] [JS] [xiaokanghub/frida-android-unpack](https://github.com/xiaokanghub/frida-android-unpack) this unpack script for Android O and Android P
+- [**191**星][7d] [Go] [esrrhs/pingtunnel](https://github.com/esrrhs/pingtunnel) a tool that advertises tcp/udp/sock5 traffic as icmp traffic for forwarding.流量转发工具.
+- [**191**星][11m] [Py] [emersonelectricco/fsf](https://github.com/emersonelectricco/fsf) File Scanning Framework
+- [**191**星][13d] [Shell] [drduh/purse](https://github.com/drduh/purse) GPG asymmetric (YubiKey) password manager
+- [**191**星][7m] [C] [andikleen/simple-pt](https://github.com/andikleen/simple-pt) Simple Intel CPU processor tracing on Linux
+- [**191**星][1y] [Py] [ak1t4/open-redirect-scanner](https://github.com/ak1t4/open-redirect-scanner) open-redirect-scanner:open redirect subdomains scanner
+- [**191**星][12m] [JS] [78778443/permeate](https://github.com/78778443/permeate) 一个用于渗透透测试演练的WEB系统,用于提升寻找网站能力,也可以用于web安全教学
+- [**190**星][17d] [Py] [skelsec/jackdaw](https://github.com/skelsec/jackdaw) gather gather gather
+- [**190**星][12m] [Py] [zerokeeper/webeye](https://github.com/zerokeeper/webeye) 快速简单地识别WEB服务器类型、CMS类型、WAF类型、WHOIS信息、以及语言框架的小脚本
+- [**190**星][9d] [JS] [xiaokanghub/frida-android-unpack](https://github.com/xiaokanghub/frida-android-unpack) this unpack script for Android O and Android P
- [**190**星][3y] [C++] [wapiflapi/veles](https://github.com/wapiflapi/veles) Visual reverse engineering tool.
-- [**190**星][2m] [Py] [unipacker/unipacker](https://github.com/unipacker/unipacker) Automatic and platform-independent unpacker for Windows binaries based on emulation
-- [**190**星][3m] [Shell] [unbinilium/twist](https://github.com/unbinilium/twist) A light script for you to setup shadowsocks-libev server with high-speed connections and newest powerful features
- [**190**星][1y] [PHP] [smarttang/w3a_soc](https://github.com/smarttang/w3a_soc) Web日志审计与网络监控集合一身的平台
-- [**190**星][23d] [Py] [seemoo-lab/internalblue](https://github.com/seemoo-lab/internalblue) Bluetooth experimentation framework for Broadcom and Cypress chips.
-- [**190**星][8m] [Py] [ropnop/impacket_static_binaries](https://github.com/ropnop/impacket_static_binaries) Standalone binaries for Linux/Windows of Impacket's examples
- [**190**星][2m] [JS] [quarkslab/irma](https://github.com/quarkslab/irma) IRMA is an asynchronous & customizable analysis system for suspicious files.
- [**190**星][2m] [Ruby] [philnash/pwned](https://github.com/philnash/pwned) An easy, Ruby way to use the Pwned Passwords API.
+- [**190**星][8m] [JS] [or3stis/apparatus](https://github.com/or3stis/apparatus) A graphical security analysis tool for IoT networks
- [**190**星][2m] [noorqureshi/kali-linux-cheatsheet](https://github.com/noorqureshi/kali-linux-cheatsheet) Kali Linux Cheat Sheet for Penetration Testers
+- [**190**星][2y] [C] [nongiach/cve](https://github.com/nongiach/cve)
- [**190**星][1y] [Py] [nettitude/scrounger](https://github.com/nettitude/scrounger) Mobile application testing toolkit
- [**190**星][2y] [Py] [neex/gifoeb](https://github.com/neex/gifoeb) exploit for ImageMagick's uninitialized memory disclosure in gif coder
- [**190**星][2y] [Py] [mxdg/passbytcp](https://github.com/mxdg/passbytcp) 内网 tcp 穿透
-- [**190**星][1y] [Py] [malwaredllc/bamf](https://github.com/malwaredllc/bamf) BAMF (Backdoor Access Machine Farmer)
-- [**190**星][3y] [HTML] [liveoverflow/lo_nintendoswitch](https://github.com/liveoverflow/lo_nintendoswitch) Some of my PoC stuff for the Nintendo Switch
+- [**190**星][3m] [Py] [milo2012/metasploithelper](https://github.com/milo2012/metasploithelper) metasploitHelper
- [**190**星][3m] [Shell] [lateralblast/lunar](https://github.com/lateralblast/lunar) A UNIX security auditing tool based on several security frameworks
-- [**190**星][24d] [Py] [ghostmanager/ghostwriter](https://github.com/ghostmanager/ghostwriter) The SpecterOps project management and reporting engine
+- [**190**星][4y] [JS] [isecpartners/introspy-analyzer](https://github.com/isecpartners/introspy-analyzer) a set of iOS and Android tools designed to help understand what an iOS or Android application is doing at runtime and assist in the identification of potential security issues.
+- [**190**星][12m] [Go] [gravitational/cve-2018-1002105](https://github.com/gravitational/cve-2018-1002105) Test utility for cve-2018-1002105
- [**190**星][7m] [Py] [g0tmi1k/exe2hex](https://github.com/g0tmi1k/exe2hex) encodes an executable binary file into ASCII text format
-- [**190**星][11m] [Py] [emersonelectricco/fsf](https://github.com/emersonelectricco/fsf) File Scanning Framework
-- [**190**星][3m] [Java] [derekbabb/cybersecurity](https://github.com/derekbabb/cybersecurity) A curriculum for a high school cyber security course.
-- [**190**星][5m] [C++] [boyan-milanov/ropgenerator](https://github.com/boyan-milanov/ropgenerator) ROPGenerator is a tool that helps you building ROP exploits by finding and chaining gadgets together
+- [**190**星][7m] [Py] [corelan/windbglib](https://github.com/corelan/windbglib) Public repository for windbglib, a wrapper around pykd.pyd (for Windbg), used by mona.py
+- [**190**星][2y] [JS] [chichou/etacsufbo](https://github.com/chichou/etacsufbo) 基于 AST 变换的简易 Javascript 反混淆辅助工具
+- [**190**星][4y] [C++] [aslody/elfhook](https://github.com/aslody/elfhook) modify PLT to hook api, supported android 5\6.
- [**190**星][6y] [Py] [andrewf/pcap2har](https://github.com/andrewf/pcap2har) A convertor from .pcap network capture files to HTTP Archive files.
-- [**190**星][12m] [JS] [78778443/permeate](https://github.com/78778443/permeate) 一个用于渗透透测试演练的WEB系统,用于提升寻找网站能力,也可以用于web安全教学
- [**190**星][9m] [Go] [0x4d31/honeybits](https://github.com/0x4d31/honeybits) A PoC tool designed to enhance the effectiveness of your traps by spreading breadcrumbs & honeytokens across your systems to lure the attacker toward your honeypots
-- [**189**星][4m] [Kotlin] [shadowsocks/v2ray-plugin-android](https://github.com/shadowsocks/v2ray-plugin-android) A SIP003 V2ray plugin on Android
-- [**189**星][3y] [Go] [koding/tunnel](https://github.com/koding/tunnel) Tunnel proxy package in Go
-- [**189**星][2y] [Java] [p3gleg/pwnback](https://github.com/P3GLEG/PwnBack) Burp Extender plugin that generates a sitemap of a website using Wayback Machine
-- [**189**星][28d] [Py] [ydkhatri/mac_apt](https://github.com/ydkhatri/mac_apt) macOS Artifact Parsing Tool
-- [**189**星][1y] [Py] [thesecondsun/shellab](https://github.com/thesecondsun/shellab) Shellcode开发/丰富工具,支持Windows/Linux
-- [**189**星][18d] [Py] [skyscanner/lambdaguard](https://github.com/skyscanner/lambdaguard) AWS Serverless Security
+- [**189**星][2y] [Kotlin] [borisf/classyshark-bytecode-viewer](https://github.com/borisf/classyshark-bytecode-viewer) Browse your Java/Kotlin compiled code
+- [**189**星][2d] [Py] [duo-labs/parliament](https://github.com/duo-labs/parliament) AWS IAM linting library
+- [**189**星][9m] [JS] [noahziheng/ssr-helper](https://github.com/noahziheng/ssr-helper) A CLI helper of ShadowsocksR Python
+- [**189**星][2y] [C] [sud01oo/processinjection](https://github.com/sud01oo/ProcessInjection) Some ways to inject a DLL into a alive process
+- [**189**星][2y] [Py] [sheldoncoupeheure/autosqli](https://github.com/sheldoncoupeheure/AutoSQLi) An automatic SQL Injection tool which takes advantage of ~DorkNet~ Googler, Ddgr, WhatWaf and sqlmap.
+- [**189**星][5d] [Py] [ydkhatri/mac_apt](https://github.com/ydkhatri/mac_apt) macOS Artifact Parsing Tool
+- [**189**星][2y] [Go] [woj-ciech/osint](https://github.com/woj-ciech/osint)
+- [**189**星][8d] [Py] [webfp/tor-browser-selenium](https://github.com/webfp/tor-browser-selenium) Tor Browser automation with Selenium.
- [**189**星][2y] [Py] [sherjilozair/dqn](https://github.com/sherjilozair/dqn) Basic DQN implementation
-- [**189**星][4m] [Objective-C] [riusksk/secconarchive](https://github.com/riusksk/secconarchive) Security Conference Archive
+- [**189**星][5y] [C++] [rwfpl/rewolf-x86-virtualizer](https://github.com/rwfpl/rewolf-x86-virtualizer) Simple VM based x86 PE (portable exectuable) protector.
- [**189**星][1y] [Java] [rebeyond/memshell](https://github.com/rebeyond/memshell) a webshell resides in the memory of java web server
-- [**189**星][2y] [C] [nongiach/cve](https://github.com/nongiach/cve)
-- [**189**星][2m] [Py] [niklasrosenstein/pydoc-markdown](https://github.com/niklasrosenstein/pydoc-markdown) Create Python API documentation in Markdown format.
-- [**189**星][11d] [Py] [mozillasecurity/grizzly](https://github.com/mozillasecurity/grizzly) A cross-platform browser fuzzing framework
+- [**189**星][1m] [Py] [phype/telnet-iot-honeypot](https://github.com/phype/telnet-iot-honeypot) Python telnet honeypot for catching botnet binaries
+- [**189**星][13d] [Py] [mozillasecurity/grizzly](https://github.com/mozillasecurity/grizzly) A cross-platform browser fuzzing framework
+- [**189**星][8m] [Py] [m4ll0k/takeover](https://github.com/m4ll0k/takeover) 子域名漏洞扫描器
+- [**189**星][3y] [HTML] [liveoverflow/lo_nintendoswitch](https://github.com/liveoverflow/lo_nintendoswitch) Some of my PoC stuff for the Nintendo Switch
- [**189**星][9m] [C++] [kelvinhack/khypervisor](https://github.com/kelvinhack/khypervisor) 适用于Windows的类似于bluepill的轻量级、嵌套VMM,提供并模拟英特尔VT-x的基本功能
-- [**189**星][3m] [Py] [jrspruitt/ubi_reader](https://github.com/jrspruitt/ubi_reader) Collection of Python scripts for reading information about and extracting data from UBI and UBIFS images.
- [**189**星][4y] [Py] [jduck/cve-2015-1538-1](https://github.com/jduck/cve-2015-1538-1) An exploit for CVE-2015-1538-1 - Google Stagefright ‘stsc’ MP4 Atom Integer Overflow Remote Code Execution
- [**189**星][7y] [C++] [hzphreak/vminjector](https://github.com/hzphreak/vminjector) DLL Injection tool to unlock guest VMs
-- [**189**星][12m] [Go] [gravitational/cve-2018-1002105](https://github.com/gravitational/cve-2018-1002105) Test utility for cve-2018-1002105
- [**189**星][1y] [Go] [floyernick/fleep-go](https://github.com/floyernick/fleep-go) 根据文件的"magic number"判定文件的格式, Go语言编写
-- [**189**星][2y] [PowerShell] [cybereason/invoke-wmilm](https://github.com/cybereason/invoke-wmilm) a PoC script for various methods to acheive authenticated remote code execution via WMI
-- [**189**星][7m] [Py] [corelan/windbglib](https://github.com/corelan/windbglib) Public repository for windbglib, a wrapper around pykd.pyd (for Windbg), used by mona.py
+- [**189**星][6d] [OCaml] [fkie-cad/cwe_checker](https://github.com/fkie-cad/cwe_checker) cwe_checker finds vulnerable patterns in binary executables
+- [**189**星][2y] [PS] [cybereason/invoke-wmilm](https://github.com/cybereason/invoke-wmilm) a PoC script for various methods to acheive authenticated remote code execution via WMI
- [**189**星][1m] [Shell] [controlplaneio/netassert](https://github.com/controlplaneio/netassert) Network security testing for DevSecOps workflows
- [**189**星][3y] [Shell] [b3rito/yodo](https://github.com/b3rito/yodo) Local Privilege Escalation
- [**189**星][5m] [PHP] [automattic/camptix](https://github.com/automattic/camptix) an easy to use and flexible event ticketing plugin created
-- [**189**星][4y] [C++] [aslody/elfhook](https://github.com/aslody/elfhook) modify PLT to hook api, supported android 5\6.
-- [**189**星][7m] [C] [andikleen/simple-pt](https://github.com/andikleen/simple-pt) Simple Intel CPU processor tracing on Linux
-- [**189**星][1y] [Py] [ak1t4/open-redirect-scanner](https://github.com/ak1t4/open-redirect-scanner) open-redirect-scanner:open redirect subdomains scanner
-- [**188**星][6m] [Shell] [suniceman/ss-fly](https://github.com/suniceman/ss-fly) 一键脚本搭建ss/ssr并开启bbr内核加速(Ubuntu/CentOS/Debian)
-- [**188**星][2y] [C] [sud01oo/processinjection](https://github.com/sud01oo/ProcessInjection) Some ways to inject a DLL into a alive process
-- [**188**星][12m] [Py] [zerokeeper/webeye](https://github.com/zerokeeper/webeye) 快速简单地识别WEB服务器类型、CMS类型、WAF类型、WHOIS信息、以及语言框架的小脚本
-- [**188**星][9m] [Batchfile] [tai7sy/fuckcdn](https://github.com/tai7sy/fuckcdn) CDN真实IP扫描,易语言开发
-- [**188**星][5y] [C++] [rwfpl/rewolf-x86-virtualizer](https://github.com/rwfpl/rewolf-x86-virtualizer) Simple VM based x86 PE (portable exectuable) protector.
+- [**189**星][2m] [ObjC] [alexxy/netdiscover](https://github.com/alexxy/netdiscover) a network address discovering tool
+- [**189**星][2m] [Py] [alainiamburg/sniffrom](https://github.com/alainiamburg/sniffrom) A tool for passive data capture and reconnaissance of serial flash chips. It is used in conjunction with a Saleae logic analyzer to reconstruct flash memory contents and extract contextual information about device operations.
+- [**188**星][1y] [Py] [thesecondsun/shellab](https://github.com/thesecondsun/shellab) Shellcode开发/丰富工具,支持Windows/Linux
+- [**188**星][2m] [Py] [scwuaptx/ctf](https://github.com/scwuaptx/ctf) Some CTF write up
- [**188**星][4y] [Java] [ripe-ncc/hadoop-pcap](https://github.com/ripe-ncc/hadoop-pcap) Hadoop library to read packet capture (PCAP) files
- [**188**星][4m] [C] [reswitched/libtransistor](https://github.com/reswitched/libtransistor) Open source toolchain for Switch development
-- [**188**星][6m] [pochubs/pochubs](https://github.com/pochubs/pochubs) PocHubs是为了整合网上知名开源框架的漏洞详细和POC
-- [**188**星][1m] [Py] [phype/telnet-iot-honeypot](https://github.com/phype/telnet-iot-honeypot) Python telnet honeypot for catching botnet binaries
-- [**188**星][1y] [Perl] [moham3driahi/xbruteforcer](https://github.com/moham3driahi/xbruteforcer) X Brute Forcer Tool
-- [**188**星][3m] [Py] [milo2012/metasploithelper](https://github.com/milo2012/metasploithelper) metasploitHelper
+- [**188**星][4y] [Py] [paulsec/hqlmap](https://github.com/paulsec/hqlmap) (Deprecated) HQLmap, Automatic tool to exploit HQL injections
+- [**188**星][25d] [Py] [osquery/osquery-python](https://github.com/osquery/osquery-python) Python bindings for osquery's Thrift API
+- [**188**星][2y] [Perl] [moham3driahi/xbruteforcer](https://github.com/moham3driahi/xbruteforcer) X Brute Forcer Tool
- [**188**星][4m] [Py] [milo2012/cve-2018-13379](https://github.com/milo2012/cve-2018-13379) CVE-2018-13379
- [**188**星][2m] [Py] [matrix1001/welpwn](https://github.com/matrix1001/welpwn) make pwnning an art, freeing you from dozens of meaningless jobs
- [**188**星][1y] [Py] [malwarereversebrasil/malwaresearch](https://github.com/malwarereversebrasil/malwaresearch) A command line tool to find malwares on http://openmalware.org
-- [**188**星][5m] [Go] [lc/secretz](https://github.com/lc/secretz) secretz, minimizing the large attack surface of Travis CI
- [**188**星][4y] [krmaxwell/coding-entertainment](https://github.com/krmaxwell/coding-entertainment) Puzzles, challenges, games, CTFs, and other entertainment via coding
+- [**188**星][1m] [Rust] [kpcyrd/badtouch](https://github.com/kpcyrd/badtouch) 可编程的网络验证破解的库, Rust编写
- [**188**星][6y] [Java] [jsontest/jsontest](https://github.com/jsontest/jsontest) JSON Testing Service - JSONTest.com
+- [**188**星][2m] [Shell] [jagerzhang/cckiller](https://github.com/jagerzhang/cckiller) Linux轻量级CC攻击防御工具脚本
+- [**188**星][3m] [Py] [internetarchive/warcprox](https://github.com/internetarchive/warcprox) WARC writing MITM HTTP/S proxy
- [**188**星][3y] [C] [hashcat/maskprocessor](https://github.com/hashcat/maskprocessor) High-Performance word generator with a per-position configureable charset
-- [**188**星][11d] [Shell] [drduh/purse](https://github.com/drduh/purse) GPG asymmetric (YubiKey) password manager
+- [**188**星][2m] [PHP] [gallopyd/domain-tool](https://github.com/gallopyd/domain-tool) 微信域名拦截检测、QQ域名拦截检测、域名Whois查询:
- [**188**星][10m] [Haskell] [cifasis/quickfuzz](https://github.com/cifasis/quickfuzz) An experimental grammar fuzzer in Haskell using QuickCheck
-- [**188**星][2y] [JS] [chichou/etacsufbo](https://github.com/chichou/etacsufbo) 基于 AST 变换的简易 Javascript 反混淆辅助工具
-- [**188**星][2m] [Objective-C] [alexxy/netdiscover](https://github.com/alexxy/netdiscover) a network address discovering tool
-- [**188**星][2m] [Py] [alainiamburg/sniffrom](https://github.com/alainiamburg/sniffrom) A tool for passive data capture and reconnaissance of serial flash chips. It is used in conjunction with a Saleae logic analyzer to reconstruct flash memory contents and extract contextual information about device operations.
- [**188**星][2y] [C++] [ahxr/ghost](https://github.com/ahxr/ghost) a light RAT that gives the server/attacker full remote access to the user's command-line interprete
-- [**187**星][2y] [Go] [woj-ciech/osint](https://github.com/woj-ciech/osint)
-- [**187**星][1m] [Py] [webfp/tor-browser-selenium](https://github.com/webfp/tor-browser-selenium) Tor Browser automation with Selenium.
+- [**187**星][2m] [ObjC] [shadowsocksr-live/ssrmac](https://github.com/shadowsocksr-live/ssrmac) ShadowsocksR (SSR) client for macOS
+- [**187**星][16d] [PHP] [0blio/caesar](https://github.com/0blio/Caesar) An HTTP based RAT (Remote Administration Tool) that allows you to remotely control devices from your browser
- [**187**星][3m] [Py] [swisskyrepo/damnwebscanner](https://github.com/swisskyrepo/damnwebscanner) Another web vulnerabilities scanner, this extension works on Chrome and Opera
-- [**187**星][4y] [Py] [paulsec/hqlmap](https://github.com/paulsec/hqlmap) (Deprecated) HQLmap, Automatic tool to exploit HQL injections
+- [**187**星][3m] [slowmist/papers](https://github.com/slowmist/papers) SlowMist Vulnerability Research Advisories
+- [**187**星][17d] [Py] [rastating/shiva](https://github.com/rastating/shiva) An Ansible playbook to provision a host for penetration testing and CTF challenges
+- [**187**星][6m] [PS] [phink-team/cobaltstrike-ms17-010](https://github.com/phink-team/cobaltstrike-ms17-010) cobaltstrike ms17-010 module and some other
- [**187**星][5y] [Ruby] [m4rco-/dorothy2](https://github.com/m4rco-/dorothy2) A malware/botnet analysis framework written in Ruby.
-- [**187**星][8m] [Py] [m4ll0k/takeover](https://github.com/m4ll0k/takeover) 子域名漏洞扫描器
- [**187**星][2y] [C] [laanwj/etna_viv](https://github.com/laanwj/etna_viv) Etnaviv is a project to build a FOSS driver for the Vivante GCxxx series of embedded GPUs - laanwj's personal fork - upstream is
-- [**187**星][30d] [Rust] [kpcyrd/badtouch](https://github.com/kpcyrd/badtouch) 可编程的网络验证破解的库, Rust编写
- [**187**星][2y] [Py] [kokjo/universalrop](https://github.com/kokjo/universalrop) universalrop:使用unicorn 和 z3 生成 ROP 链
-- [**187**星][2m] [Py] [internetarchive/warcprox](https://github.com/internetarchive/warcprox) WARC writing MITM HTTP/S proxy
+- [**187**星][14d] [Shell] [kalilinuxtricksyt/easysploit](https://github.com/kalilinuxtricksyt/easysploit) EasySploit - Metasploit automation (EASIER and FASTER than EVER)
+- [**187**星][2y] [Visual Basic .NET] [joesecurity/pafishmacro](https://github.com/joesecurity/pafishmacro) Pafish Macro is a Macro enabled Office Document to detect malware analysis systems and sandboxes. It uses evasion & detection techniques implemented by malicious documents.
- [**187**星][1y] [Py] [he1m4n6a/findwebshell](https://github.com/he1m4n6a/findwebshell) findWebshell是一款基于python开发的webshell检测工具。
- [**187**星][9m] [C#] [goldshtn/minidumper](https://github.com/goldshtn/minidumper) Write minidumps of .NET processes with full memory, only CLR heaps, or no memory at all
-- [**187**星][14d] [OCaml] [fkie-cad/cwe_checker](https://github.com/fkie-cad/cwe_checker) cwe_checker finds vulnerable patterns in binary executables
-- [**187**星][11d] [Ruby] [erwanlr/fingerprinter](https://github.com/erwanlr/fingerprinter) CMS/LMS/Library etc Versions Fingerprinter
+- [**187**星][13d] [Ruby] [erwanlr/fingerprinter](https://github.com/erwanlr/fingerprinter) CMS/LMS/Library etc Versions Fingerprinter
- [**187**星][3y] [Py] [droope/pwlist](https://github.com/droope/pwlist) Password lists obtained from strangers attempting to log in to my server.
- [**187**星][3y] [Py] [drizzlerisk/tunpacker](https://github.com/drizzlerisk/tunpacker) TUnpacker是一款Android脱壳工具
-- [**187**星][5m] [Py] [doyensec/graph-ql](https://github.com/doyensec/graph-ql) GraphQL Security Research Material
+- [**187**星][2m] [Py] [danigargu/dereferencing](https://github.com/danigargu/dereferencing) 调试时寄存器和栈显示增强
- [**187**星][7m] [JS] [antoinevastel/fpscanner](https://github.com/antoinevastel/fpscanner)
+- [**187**星][5d] [C] [aflgo/aflgo](https://github.com/aflgo/aflgo) Directed Greybox Fuzzing with AFL
+- [**186**星][1y] [bo0om/waf-bypass-cheat-sheet](https://github.com/bo0om/waf-bypass-cheat-sheet) Another way to bypass WAF Cheat Sheet (draft)
+- [**186**星][3y] [C] [tunz/afl-fuzz-js](https://github.com/tunz/afl-fuzz-js) afl-fuzz for javascript
+- [**186**星][1y] [Py] [ha3mrx/ddos-attack](https://github.com/ha3mrx/ddos-attack) DDos-Attack Is A Python script online Attack
- [**186**星][4m] [Py] [ex0dus-0x/doxbox](https://github.com/ex0dus-0x/doxbox) web-based OSINT and reconaissance toolkit
-- [**186**星][4m] [C++] [chrisps/hexext](https://github.com/chrisps/Hexext) 通过操作microcode, 优化反编译器的数据
+- [**186**星][3y] [Lua] [automayt/ics-pcap](https://github.com/automayt/ics-pcap) A collection of ICS/SCADA PCAPs
- [**186**星][3y] [Py] [xyntax/filesensor](https://github.com/xyntax/filesensor) 基于爬虫的动态敏感文件探测工具
-- [**186**星][3m] [slowmist/papers](https://github.com/slowmist/papers) SlowMist Vulnerability Research Advisories
-- [**186**星][2m] [Py] [scwuaptx/ctf](https://github.com/scwuaptx/ctf) Some CTF write up
+- [**186**星][1y] [wooyundota/droiddrops](https://github.com/wooyundota/droiddrops) 梳理下自己之前写过的文章
+- [**186**星][3y] [Shell] [wismna/hackpi](https://github.com/wismna/hackpi) Hacking tool inside a Raspberry Pi zero
+- [**186**星][1m] [Shell] [tomdev/teh_s3_bucketeers](https://github.com/tomdev/teh_s3_bucketeers) S3 bucket 搜索引擎
+- [**186**星][3y] [PS] [sekirkity/browsergather](https://github.com/sekirkity/browsergather) Fileless web browser information extraction
- [**186**星][6y] [C] [saelo/cve-2014-0038](https://github.com/saelo/cve-2014-0038) Linux local root exploit for CVE-2014-0038
-- [**186**星][15d] [Py] [rastating/shiva](https://github.com/rastating/shiva) An Ansible playbook to provision a host for penetration testing and CTF challenges
-- [**186**星][6m] [PowerShell] [phink-team/cobaltstrike-ms17-010](https://github.com/phink-team/cobaltstrike-ms17-010) cobaltstrike ms17-010 module and some other
-- [**186**星][23d] [Py] [osquery/osquery-python](https://github.com/osquery/osquery-python) Python bindings for osquery's Thrift API
-- [**186**星][6m] [Objective-C] [nakiostudio/twitterx](https://github.com/nakiostudio/twitterx) Keeping Twitter for macOS alive with code injection
+- [**186**星][5y] [Py] [rpp0/scapy-fakeap](https://github.com/rpp0/scapy-fakeap) Fake wireless Access Point (AP) implementation using Python and Scapy, intended for convenient testing of 802.11 protocols and implementations.
+- [**186**星][24d] [C] [rfc1036/whois](https://github.com/rfc1036/whois) Intelligent WHOIS client
+- [**186**星][8m] [offensive-security/cryptsetup-nuke-keys](https://github.com/offensive-security/cryptsetup-nuke-keys) A patch for cryptsetup which adds the option to nuke all keyslots given a certain passphrase.
+- [**186**星][4y] [Java] [netspi/weblogicpassworddecryptor](https://github.com/netspi/weblogicpassworddecryptor) PowerShell script and Java code to decrypt WebLogic passwords
+- [**186**星][6m] [ObjC] [nakiostudio/twitterx](https://github.com/nakiostudio/twitterx) Keeping Twitter for macOS alive with code injection
- [**186**星][3y] [Ruby] [miketierney/artii](https://github.com/miketierney/artii) A small gem to generate ASCII art from text fed in to it
-- [**186**星][2y] [Visual Basic] [joesecurity/pafishmacro](https://github.com/joesecurity/pafishmacro) Pafish Macro is a Macro enabled Office Document to detect malware analysis systems and sandboxes. It uses evasion & detection techniques implemented by malicious documents.
-- [**186**星][2m] [Shell] [jagerzhang/cckiller](https://github.com/jagerzhang/cckiller) Linux轻量级CC攻击防御工具脚本
-- [**186**星][8m] [PowerShell] [hansesecure/credgrap_ie_edge](https://github.com/hansesecure/credgrap_ie_edge) Extract stored credentials from Internet Explorer and Edge
-- [**186**星][2m] [PHP] [gallopyd/domain-tool](https://github.com/gallopyd/domain-tool) 微信域名拦截检测、QQ域名拦截检测、域名Whois查询:
-- [**186**星][3m] [C] [aflgo/aflgo](https://github.com/aflgo/aflgo) Directed Greybox Fuzzing with AFL
-- [**185**星][3y] [C] [tunz/afl-fuzz-js](https://github.com/tunz/afl-fuzz-js) afl-fuzz for javascript
+- [**186**星][2d] [Rust] [insanitybit/grapl](https://github.com/insanitybit/grapl) Graph platform for Detection and Response
+- [**186**星][8m] [PS] [hansesecure/credgrap_ie_edge](https://github.com/hansesecure/credgrap_ie_edge) Extract stored credentials from Internet Explorer and Edge
+- [**186**星][1y] [Py] [d4vinci/pastejacker](https://github.com/d4vinci/pastejacker) Hacking systems with the automation of PasteJacking attacks.
+- [**185**星][3y] [Nginx] [awslabs/ecs-nginx-reverse-proxy](https://github.com/awslabs/ecs-nginx-reverse-proxy) Reference architecture for deploying Nginx on ECS, both as a basic static resource server, and as a reverse proxy in front of a dynamic application server.
+- [**185**星][3y] [Py] [f-secure/mittn](https://github.com/f-secure/mittn) Mittn: Security test tool runner for test automation in CI
- [**185**星][8m] [Rust] [nebgnahz/cv-rs](https://github.com/nebgnahz/cv-rs) Rust wrapper for OpenCV (manual at this point)
-- [**185**星][9m] [JS] [noahziheng/ssr-helper](https://github.com/noahziheng/ssr-helper) A CLI helper of ShadowsocksR Python
-- [**185**星][3y] [Lua] [automayt/ics-pcap](https://github.com/automayt/ics-pcap) A collection of ICS/SCADA PCAPs
-- [**185**星][10d] [JS] [ret2got/disasm.pro](https://github.com/ret2got/disasm.pro) A realtime assembler/disassembler (formerly known as disasm.ninja)
-- [**185**星][14d] [PHP] [0blio/caesar](https://github.com/0blio/Caesar) An HTTP based RAT (Remote Administration Tool) that allows you to remotely control devices from your browser
+- [**185**星][4m] [C++] [chrisps/hexext](https://github.com/chrisps/Hexext) 通过操作microcode, 优化反编译器的数据
- [**185**星][1y] [yellowbyte/analysis-of-anti-analysis](https://github.com/yellowbyte/analysis-of-anti-analysis) writings on anti-reverse engineering
-- [**185**星][3y] [Shell] [wismna/hackpi](https://github.com/wismna/hackpi) Hacking tool inside a Raspberry Pi zero
-- [**185**星][1m] [Shell] [tomdev/teh_s3_bucketeers](https://github.com/tomdev/teh_s3_bucketeers) S3 bucket 搜索引擎
- [**185**星][7y] [CoffeeScript] [shadowsocks/shadowsocks-dotcloud](https://github.com/shadowsocks/shadowsocks-dotcloud) a port of shadowsocks via websockets protocol, able to tunnel through HTTP proxy
- [**185**星][2y] [Py] [savio-code/ghost-phisher](https://github.com/savio-code/ghost-phisher) 带 GUI的钓鱼工具
-- [**185**星][22d] [C] [rfc1036/whois](https://github.com/rfc1036/whois) Intelligent WHOIS client
- [**185**星][3y] [pwnsdx/badcode](https://github.com/pwnsdx/badcode) (Discontinued) BadCode is a signature database for static source code scanner that identify bad security practices.
+- [**185**星][2y] [Py] [ninijay/pycurity](https://github.com/ninijay/pycurity) Python Security Scripts
- [**185**星][5y] [C++] [nihilus/scyllahide](https://github.com/nihilus/scyllahide) 用户模式反-反调试
-- [**185**星][4y] [Java] [netspi/weblogicpassworddecryptor](https://github.com/netspi/weblogicpassworddecryptor) PowerShell script and Java code to decrypt WebLogic passwords
- [**185**星][6y] [mynameismeerkat/pyretic](https://github.com/mynameismeerkat/pyretic) pyREtic is an extensible framework for in-memory Python bytecode reverse engineering
- [**185**星][1y] [Py] [mr-un1k0d3r/unibyav](https://github.com/mr-un1k0d3r/unibyav)
- [**185**星][6m] [Py] [lijiejie/idea_exploit](https://github.com/lijiejie/idea_exploit) Gather sensitive information from (.idea) folder for pentesters
-- [**185**星][12m] [PowerShell] [felixweyne/processspawncontrol](https://github.com/felixweyne/processspawncontrol) a Powershell tool which aims to help in the behavioral (process) analysis of malware. PsC suspends newly launched processes, and gives the analyst the option to either keep the process suspended, or to resume it.
+- [**185**星][1y] [Py] [hexhive/t-fuzz](https://github.com/hexhive/t-fuzz)
+- [**185**星][12m] [PS] [felixweyne/processspawncontrol](https://github.com/felixweyne/processspawncontrol) a Powershell tool which aims to help in the behavioral (process) analysis of malware. PsC suspends newly launched processes, and gives the analyst the option to either keep the process suspended, or to resume it.
- [**185**星][3y] [Go] [eahydra/socks](https://github.com/eahydra/socks) socks -- a proxy server.
-- [**185**星][1y] [Py] [d4vinci/pastejacker](https://github.com/d4vinci/pastejacker) Hacking systems with the automation of PasteJacking attacks.
-- [**185**星][7m] [Py] [certcc/certfuzz](https://github.com/certcc/certfuzz) This project contains the source code for the CERT Basic Fuzzing Framework (BFF) and the CERT Failure Observation Engine (FOE).
+- [**185**星][6y] [Py] [danmcinerney/dnsspoof](https://github.com/danmcinerney/dnsspoof) DNS spoofer. Drops DNS responses from the router and replaces it with the spoofed DNS response
+- [**185**星][2d] [Py] [certcc/certfuzz](https://github.com/certcc/certfuzz) This project contains the source code for the CERT Basic Fuzzing Framework (BFF) and the CERT Failure Observation Engine (FOE).
+- [**185**星][7m] [Java] [bypass007/nessus_to_report](https://github.com/bypass007/nessus_to_report) Nessus中文报告自动化脚本
- [**185**星][3y] [Py] [andy10101/apkdetecter](https://github.com/andy10101/apkdetecter) Android Apk查壳工具及源代码
-- [**184**星][2m] [Objective-C] [shadowsocksr-live/ssrmac](https://github.com/shadowsocksr-live/ssrmac) ShadowsocksR (SSR) client for macOS
+- [**185**星][3y] [ObjC] [alonemonkey/macreverse](https://github.com/alonemonkey/macreverse) MacReverse Tools and Demo
- [**184**星][8m] [offensive-security/nethunter-devices](https://github.com/offensive-security/nethunter-devices) NetHunter Devices
-- [**184**星][3y] [Py] [f-secure/mittn](https://github.com/f-secure/mittn) Mittn: Security test tool runner for test automation in CI
-- [**184**星][2y] [PowerShell] [xtr4nge/fruityc2](https://github.com/xtr4nge/fruityc2) FruityC2 is a post-exploitation (and open source) framework based on the deployment of agents on compromised machines. Agents are managed from a web interface under the control of an operator.
-- [**184**星][1y] [wooyundota/droiddrops](https://github.com/wooyundota/droiddrops) 梳理下自己之前写过的文章
+- [**184**星][1y] [PHP] [yaofeifly/vub_env](https://github.com/yaofeifly/vub_env) 跟踪真实漏洞相关靶场环境搭建
+- [**184**星][2y] [PS] [xtr4nge/fruityc2](https://github.com/xtr4nge/fruityc2) FruityC2 is a post-exploitation (and open source) framework based on the deployment of agents on compromised machines. Agents are managed from a web interface under the control of an operator.
- [**184**星][3m] [Py] [stixproject/python-stix](https://github.com/stixproject/python-stix) A Python library for parsing, manipulating, and generating STIX content.
-- [**184**星][3y] [PowerShell] [sekirkity/browsergather](https://github.com/sekirkity/browsergather) Fileless web browser information extraction
-- [**184**星][5y] [Py] [rpp0/scapy-fakeap](https://github.com/rpp0/scapy-fakeap) Fake wireless Access Point (AP) implementation using Python and Scapy, intended for convenient testing of 802.11 protocols and implementations.
+- [**184**星][5m] [JS] [s0md3v/quark](https://github.com/s0md3v/quark) Quark is a data visualization framework.
+- [**184**星][24d] [Py] [rhinosecuritylabs/ccat](https://github.com/rhinosecuritylabs/ccat) Cloud Container Attack Tool (CCAT) is a tool for testing security of container environments.
- [**184**星][3y] [CSS] [r00tkillah/horsepill](https://github.com/r00tkillah/horsepill) a PoC of a ramdisk based containerizing root kit
-- [**184**星][12d] [Shell] [kalilinuxtricksyt/easysploit](https://github.com/kalilinuxtricksyt/easysploit) EasySploit - Metasploit automation (EASIER and FASTER than EVER)
-- [**184**星][8d] [Rust] [insanitybit/grapl](https://github.com/insanitybit/grapl) Graph platform for Detection and Response
-- [**184**星][1y] [Py] [hexhive/t-fuzz](https://github.com/hexhive/t-fuzz)
-- [**184**星][3y] [Py] [hatbashbr/shodanhat](https://github.com/hatbashbr/shodanhat) search for hosts info with shodan
+- [**184**星][2m] [Py] [pure-l0g1c/loki](https://github.com/pure-l0g1c/loki) Remote Access Tool/Botnet
+- [**184**星][2m] [Py] [naategh/pyck](https://github.com/naategh/pyck) A collection of useful Python hacking scripts for beginners
+- [**184**星][2y] [C++] [killvxk/disablewin10patchguardpoc](https://github.com/killvxk/disablewin10patchguardpoc) pseudo-code to show how to disable patchguard with win10
+- [**184**星][3y] [Shell] [jivoi/openssh-backdoor-kit](https://github.com/jivoi/openssh-backdoor-kit)
+- [**184**星][2d] [Go] [getlantern/lantern](https://github.com/getlantern/lantern) Lantern官方版本下载 蓝灯 翻墙 科学上网 外网 加速器 梯子 路由 lantern censorship-circumvention censorship gfw vpn accelerator
- [**184**星][1y] [C++] [fuwaneko/node-protobuf](https://github.com/fuwaneko/node-protobuf) Google Protocol Buffers wrapper for Node.js [UNMAINTAINED]
-- [**184**星][6y] [Py] [danmcinerney/dnsspoof](https://github.com/danmcinerney/dnsspoof) DNS spoofer. Drops DNS responses from the router and replaces it with the spoofed DNS response
-- [**184**星][1m] [Py] [danigargu/dereferencing](https://github.com/danigargu/dereferencing) 调试时寄存器和栈显示增强
-- [**184**星][3y] [Objective-C] [alonemonkey/macreverse](https://github.com/alonemonkey/macreverse) MacReverse Tools and Demo
-- [**183**星][1y] [Py] [ha3mrx/ddos-attack](https://github.com/ha3mrx/ddos-attack) DDos-Attack Is A Python script online Attack
-- [**183**星][25d] [Py] [angr/pyvex](https://github.com/angr/pyvex) Python bindings for Valgrind's VEX IR.
-- [**183**星][1y] [PHP] [yaofeifly/vub_env](https://github.com/yaofeifly/vub_env) 跟踪真实漏洞相关靶场环境搭建
+- [**184**星][3d] [enovella/tee-reversing](https://github.com/enovella/tee-reversing) A curated list of public TEE resources for learning how to reverse-engineer and achieve trusted code execution on ARM devices
+- [**184**星][3y] [Pascal] [bowlofstew/rootkit.com](https://github.com/bowlofstew/rootkit.com) Mirror of users section of rootkit.com
+- [**184**星][20d] [C++] [blackint3/openark](https://github.com/blackint3/openark) 反Rootkit工具(Windows)
+- [**184**星][2d] [Go] [asciimoo/morty](https://github.com/asciimoo/morty) morty:去除恶意HTML标签和属性,去除外部资源引用以防止第三方信息泄露
+- [**183**星][3d] [C#] [carlospolop/privilege-escalation-awesome-scripts-suite](https://github.com/carlospolop/privilege-escalation-awesome-scripts-suite) PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
+- [**183**星][1y] [Perl] [portswigger/upload-scanner](https://github.com/portswigger/upload-scanner) HTTP file upload scanner for Burp Proxy
+- [**183**星][10d] [Lua] [kuoruan/luci-app-v2ray](https://github.com/kuoruan/luci-app-v2ray) LuCI support for V2Ray
+- [**183**星][2m] [Py] [angr/pyvex](https://github.com/angr/pyvex) Python bindings for Valgrind's VEX IR.
- [**183**星][4y] [Py] [xen0ph0n/virustotal_api_tool](https://github.com/xen0ph0n/virustotal_api_tool) A Tool To Leverage Virus Total's Private API Key
-- [**183**星][24d] [C] [wizardmac/readstat](https://github.com/wizardmac/readstat) Command-line tool (+ C library) for converting SAS, Stata, and SPSS files
+- [**183**星][26d] [C] [wizardmac/readstat](https://github.com/wizardmac/readstat) Command-line tool (+ C library) for converting SAS, Stata, and SPSS files
- [**183**星][2y] [Py] [wavestone-cdt/hadoop-attack-library](https://github.com/wavestone-cdt/hadoop-attack-library) A collection of pentest tools and resources targeting Hadoop environments
+- [**183**星][2m] [Ruby] [tresacton/dspectrumgui](https://github.com/tresacton/dspectrumgui) The goal of this app is to make it trivial to demodulate most basic RF transmission, and provide a digital worksheet for your reverse engineering efforts.
+- [**183**星][2y] [Smali] [sslab-gatech/avpass](https://github.com/sslab-gatech/avpass) Tool for leaking and bypassing Android malware detection system
- [**183**星][1y] [C++] [sidechannelmarvels/tracer](https://github.com/sidechannelmarvels/tracer) Set of Dynamic Binary Instrumentation and visualization tools for execution traces.
-- [**183**星][5m] [JS] [s0md3v/quark](https://github.com/s0md3v/quark) Quark is a data visualization framework.
+- [**183**星][2m] [Java] [sensepost/mallet](https://github.com/sensepost/mallet) Mallet is an intercepting proxy for arbitrary protocols
+- [**183**星][10m] [sapphirex00/threat-hunting](https://github.com/sapphirex00/threat-hunting) Personal compilation of APT malware from whitepaper releases, documents and own research
+- [**183**星][5m] [Py] [s0md3v/orbit](https://github.com/s0md3v/orbit) Blockchain Transactions Investigation Tool
- [**183**星][4y] [rmusser01/cheatsheets](https://github.com/rmusser01/cheatsheets) Penetration Testing/Security Cheatsheets
- [**183**星][3m] [radareorg/r2con](https://github.com/radareorg/r2con) Radare Congress Stuff
+- [**183**星][10m] [Py] [r4stl1n/ssh-brute-forcer](https://github.com/r4stl1n/ssh-brute-forcer) A Simple Multi-Threaded SSH Brute Forcer
+- [**183**星][2y] [Py] [plazmaz/lnkup](https://github.com/plazmaz/lnkup) Generates malicious LNK file payloads for data exfiltration
+- [**183**星][2y] [Go] [petercunha/goat](https://github.com/petercunha/goat) a trojan created in Go, using Twitter as a the C&C server
- [**183**星][2y] [Py] [paulsec/api-dnsdumpster.com](https://github.com/paulsec/api-dnsdumpster.com) (Unofficial) Python API for
-- [**183**星][2y] [Py] [ninijay/pycurity](https://github.com/ninijay/pycurity) Python Security Scripts
+- [**183**星][3d] [Py] [mzfr/liffy](https://github.com/mzfr/liffy) Local file inclusion exploitation tool
- [**183**星][3y] [Py] [misterch0c/firminator_backend](https://github.com/misterch0c/firminator_backend) The first open source vulnerability scanner for firmwares
-- [**183**星][2y] [C++] [killvxk/disablewin10patchguardpoc](https://github.com/killvxk/disablewin10patchguardpoc) pseudo-code to show how to disable patchguard with win10
- [**183**星][2y] [Py] [joxeankoret/cve-2017-7494](https://github.com/joxeankoret/cve-2017-7494) Remote root exploit for the SAMBA CVE-2017-7494 vulnerability
-- [**183**星][3y] [Shell] [jivoi/openssh-backdoor-kit](https://github.com/jivoi/openssh-backdoor-kit)
+- [**183**星][2y] [C#] [ioncodes/dnpatch](https://github.com/ioncodes/dnpatch) .NET Patcher library using dnlib
+- [**183**星][9d] [CSS] [hongkonggong/tldr-digital-security](https://github.com/hongkonggong/tldr-digital-security) TLDR Digital Safety Checklist
+- [**183**星][3y] [Py] [hatbashbr/shodanhat](https://github.com/hatbashbr/shodanhat) search for hosts info with shodan
+- [**183**星][30d] [feeicn/securityinterviewquestions](https://github.com/feeicn/securityinterviewquestions) 网络信息安全从业者面试指南(持续补充各公司招聘题目和侧重点)
+- [**183**星][5m] [XSLT] [ernw/nmap-parse-output](https://github.com/ernw/nmap-parse-output) Converts/manipulates/extracts data from a Nmap scan output.
+- [**183**星][11m] [Py] [crowecybersecurity/ad-ldap-enum](https://github.com/crowecybersecurity/ad-ldap-enum) An LDAP based Active Directory user and group enumeration tool
+- [**183**星][3d] [C#] [carlospolop/privilege-escalation-awesome-scripts-suite](https://github.com/carlospolop/privilege-escalation-awesome-scripts-suite) PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
- [**183**星][4y] [Py] [breenmachine/dnsftp](https://github.com/breenmachine/dnsftp) Client/Server scripts to transfer files over DNS. Client scripts are small and only use native tools on the host OS.
-- [**183**星][3y] [Pascal] [bowlofstew/rootkit.com](https://github.com/bowlofstew/rootkit.com) Mirror of users section of rootkit.com
-- [**183**星][18d] [C++] [blackint3/openark](https://github.com/blackint3/openark) 反Rootkit工具(Windows)
-- [**183**星][2m] [Go] [asciimoo/morty](https://github.com/asciimoo/morty) morty:去除恶意HTML标签和属性,去除外部资源引用以防止第三方信息泄露
+- [**183**星][2y] [C#] [bhdresh/lazykatz](https://github.com/bhdresh/lazykatz) Lazykatz is an automation developed to extract credentials from remote targets protected with AV and/or application whitelisting software.
- [**183**星][6m] [Py] [3xp10it/xcdn](https://github.com/3xp10it/xcdn) Try to find out the real ip behind cdn
+- [**182**星][7d] [Py] [aas-n/spraykatz](https://github.com/aas-n/spraykatz) A tool to spray love around the world.
+- [**182**星][3y] [CSS] [kali-docs-cn/kali-linux-cookbook-zh](https://github.com/kali-docs-cn/kali-linux-cookbook-zh)
- [**182**星][4y] [C++] [zecure/shadowd](https://github.com/zecure/shadowd) The Shadow Daemon web application firewall server
- [**182**星][10m] [Py] [welchbj/bscan](https://github.com/welchbj/bscan) an asynchronous target enumeration tool
- [**182**星][2m] [Py] [vector35/community-plugins](https://github.com/vector35/community-plugins) Repository for community provided Binary Ninja plugins
+- [**182**星][6m] [Java] [spring-io/nohttp](https://github.com/spring-io/nohttp) A project for ensuring that https is used
- [**182**星][7m] [Py] [s0md3v/bolt](https://github.com/s0md3v/bolt) CSRF Scanner
+- [**182**星][2m] [C++] [rumpkernel/rumprun-packages](https://github.com/rumpkernel/rumprun-packages) Ready-made packages of software for running on the Rumprun unikernel
- [**182**星][1y] [Rust] [rabbitstack/rabbitc](https://github.com/rabbitstack/rabbitc) Micro container runtime
-- [**182**星][10m] [Py] [r4stl1n/ssh-brute-forcer](https://github.com/r4stl1n/ssh-brute-forcer) A Simple Multi-Threaded SSH Brute Forcer
-- [**182**星][2y] [Go] [petercunha/goat](https://github.com/petercunha/goat) a trojan created in Go, using Twitter as a the C&C server
- [**182**星][7m] [C] [owasp/igoat-swift](https://github.com/owasp/igoat-swift) OWASP iGoat (Swift) - A Damn Vulnerable Swift Application for iOS
- [**182**星][2m] [noraj/oscp-exam-report-template-markdown](https://github.com/noraj/oscp-exam-report-template-markdown) OSCP Exam Report Template in Markdown
-- [**182**星][2m] [Py] [naategh/pyck](https://github.com/naategh/pyck) A collection of useful Python hacking scripts for beginners
-- [**182**星][19d] [Go] [milo2012/pathbrute](https://github.com/milo2012/pathbrute) 服务器目录/文件爆破工具
-- [**182**星][13d] [Py] [jpcertcc/malconfscan](https://github.com/jpcertcc/malconfscan) Volatility plugin for extracts configuration data of known malware
+- [**182**星][16d] [Py] [natlas/natlas](https://github.com/natlas/natlas) Scaling Network Scanning. Changes prior to 1.0 may cause difficult to avoid backwards incompatibilities. You've been warned.
+- [**182**星][7d] [Go] [milo2012/pathbrute](https://github.com/milo2012/pathbrute) 服务器目录/文件爆破工具
+- [**182**星][6m] [Py] [metachar/mercury](https://github.com/metachar/mercury) Mercury is a hacking tool used to collect information and use the information to further hurt the target
+- [**182**星][5y] [knoy/icloudhacker](https://github.com/knoy/icloudhacker) Arduino code to brute force Macbook's 4-digit iCloud PINs
+- [**182**星][7d] [Py] [jpcertcc/malconfscan](https://github.com/jpcertcc/malconfscan) Volatility plugin for extracts configuration data of known malware
- [**182**星][5m] [C++] [jackullrich/shellcodestdio](https://github.com/jackullrich/shellcodestdio) 辅助编写Windows平台的位置无关Shellcode,支持x86/x64
- [**182**星][3m] [Py] [j3ssie/iposint](https://github.com/j3ssie/iposint)
-- [**182**星][2y] [C#] [ioncodes/dnpatch](https://github.com/ioncodes/dnpatch) .NET Patcher library using dnlib
- [**182**星][5y] [C] [gdbinit/onyx-the-black-cat](https://github.com/gdbinit/onyx-the-black-cat) Kernel extension to disable anti-debug tricks and other useful XNU "features"
-- [**182**星][11m] [Py] [crowecybersecurity/ad-ldap-enum](https://github.com/crowecybersecurity/ad-ldap-enum) An LDAP based Active Directory user and group enumeration tool
- [**182**星][3y] [Py] [cldrn/rainmap-lite](https://github.com/cldrn/rainmap-lite) Web界面,从浏览器中启动Nmap扫描. 界面是响应式, 可在手机/平板/PC浏览器中使用
- [**182**星][4y] [Pascal] [chiggins/malware_sources](https://github.com/chiggins/malware_sources) I found all of these samples on MalwareTech through Twitter somewhere
+- [**182**星][1y] [Dockerfile] [cboin/re_lab](https://github.com/cboin/re_lab) 包含一些逆向工具的Docker容器
- [**182**星][2m] [Py] [carlashley/tccprofile](https://github.com/carlashley/tccprofile) Creates a TCC profile for new Privacy Payloads in macOS Mojave
+- [**182**星][11m] [Py] [boy-hack/gwhatweb](https://github.com/boy-hack/gwhatweb) 网站CMS识别
- [**182**星][5y] [Py] [bishopfox/rickmote](https://github.com/bishopfox/rickmote) The Rickmote Controller: Hijack TVs using Google Chromecast
-- [**182**星][2y] [C#] [bhdresh/lazykatz](https://github.com/bhdresh/lazykatz) Lazykatz is an automation developed to extract credentials from remote targets protected with AV and/or application whitelisting software.
+- [**182**星][2y] [PS] [absolomb/windowsenum](https://github.com/absolomb/windowsenum) A Powershell Privilege Escalation Enumeration Script.
- [**182**星][5m] [Py] [abdulgaphy/r3con1z3r](https://github.com/abdulgaphy/r3con1z3r) R3con1z3r is a lightweight Web information gathering tool with an intuitive features written in python. it provides a powerful environment in which open source intelligence (OSINT) web-based footprinting can be conducted quickly and thoroughly.
-- [**181**星][1y] [Perl] [portswigger/upload-scanner](https://github.com/portswigger/upload-scanner) HTTP file upload scanner for Burp Proxy
+- [**182**星][10m] [Py] [0x27/ciscorv320dump](https://github.com/0x27/ciscorv320dump) CVE-2019-1652 /CVE-2019-1653 Exploits For Dumping Cisco RV320 Configurations & Debugging Data AND Remote Root Exploit!
+- [**182**星][4y] [Py] [0vercl0k/z3-playground](https://github.com/0vercl0k/z3-playground) A repository to store Z3-python scripts you can use as examples, reminders, whatever.
+- [**181**星][8m] [shadowsocks/papers](https://github.com/shadowsocks/papers) List of papers related to shadowsocks
- [**181**星][2y] [Py] [0x09al/wordsteal](https://github.com/0x09AL/WordSteal) This script will create a POC that will steal NTML hashes from a remote computer. Do not use this for illegal purposes.The author does not keep responsibility for any illegal action you do.
-- [**181**星][1y] [HTML] [yaseng/iot-security-wiki](https://github.com/yaseng/iot-security-wiki) IOT security wiki
-- [**181**星][1m] [Ruby] [tresacton/dspectrumgui](https://github.com/tresacton/dspectrumgui) The goal of this app is to make it trivial to demodulate most basic RF transmission, and provide a digital worksheet for your reverse engineering efforts.
-- [**181**星][2y] [Smali] [sslab-gatech/avpass](https://github.com/sslab-gatech/avpass) Tool for leaking and bypassing Android malware detection system
+- [**181**星][16d] [TS] [tensult/cloud-reports](https://github.com/tensult/cloud-reports) Scans your AWS cloud resources and generates reports. Check out free hosted version:
+- [**181**星][1m] [Go] [staaldraad/xxeserv](https://github.com/staaldraad/xxeserv) A mini webserver with FTP support for XXE payloads
- [**181**星][2y] [spacehuhn/arduinoarpspoof](https://github.com/spacehuhn/arduinoarpspoof) Kicks out everyone in your LAN via with an enc28j60 ethernet controller and Arduino.
-- [**181**星][2y] [Py] [solusipse/spectrology](https://github.com/solusipse/spectrology) Images to audio files with corresponding spectrograms encoder.
-- [**181**星][10m] [sapphirex00/threat-hunting](https://github.com/sapphirex00/threat-hunting) Personal compilation of APT malware from whitepaper releases, documents and own research
+- [**181**星][1m] [Py] [so87/oscp-pwk](https://github.com/so87/oscp-pwk) This is my cheatsheet and scripts developed while taking the Offensive Security Penetration Testing with Kali Linux course.
- [**181**星][2y] [C#] [ryhanson/externalc2](https://github.com/ryhanson/externalc2) A library for integrating communication channels with the Cobalt Strike External C2 server
-- [**181**星][2m] [C++] [rumpkernel/rumprun-packages](https://github.com/rumpkernel/rumprun-packages) Ready-made packages of software for running on the Rumprun unikernel
-- [**181**星][2m] [Py] [pure-l0g1c/loki](https://github.com/pure-l0g1c/loki) Remote Access Tool/Botnet
-- [**181**星][2y] [Py] [plazmaz/lnkup](https://github.com/plazmaz/lnkup) Generates malicious LNK file payloads for data exfiltration
-- [**181**星][7d] [Py] [mzfr/liffy](https://github.com/mzfr/liffy) Local file inclusion exploitation tool
-- [**181**星][7m] [lucifer1993/cmsprint](https://github.com/lucifer1993/cmsprint) CMS和中间件指纹库
-- [**181**星][5y] [knoy/icloudhacker](https://github.com/knoy/icloudhacker) Arduino code to brute force Macbook's 4-digit iCloud PINs
+- [**181**星][10m] [Py] [riramar/hsecscan](https://github.com/riramar/hsecscan) A security scanner for HTTP response headers.
+- [**181**星][8m] [lucifer1993/cmsprint](https://github.com/lucifer1993/cmsprint) CMS和中间件指纹库
+- [**181**星][3y] [C] [kriswebdev/android_aircrack](https://github.com/kriswebdev/android_aircrack) Aircrack-ng command-line for Android. Binaries & source.
- [**181**星][6m] [Py] [keithjjones/hostintel](https://github.com/keithjjones/hostintel) A modular Python application to collect intelligence for malicious hosts.
+- [**181**星][5y] [jasonqng/chinese-keywords](https://github.com/jasonqng/chinese-keywords) Collected sensitive Chinese keywords from various sources; for censorship testing and searching for sensitive content
- [**181**星][4y] [C++] [jacob-baines/elfparser](https://github.com/jacob-baines/elfparser) Cross Platform ELF analysis
-- [**181**星][28d] [feeicn/securityinterviewquestions](https://github.com/feeicn/securityinterviewquestions) 网络信息安全从业者面试指南(持续补充各公司招聘题目和侧重点)
+- [**181**星][2m] [Go] [hehnope/slurp](https://github.com/hehnope/slurp) Evaluate the security of S3 buckets
+- [**181**星][8d] [Py] [fireeye/pwnauth](https://github.com/fireeye/pwnauth)
+- [**181**星][2m] [Py] [eth-sri/debin](https://github.com/eth-sri/debin) Machine Learning to Deobfuscate Binaries
- [**181**星][2m] [Py] [delvelabs/tachyon](https://github.com/delvelabs/tachyon) Fast http dead file finder.
- [**181**星][5y] [C++] [darkwallet/darkleaks](https://github.com/darkwallet/darkleaks) Decentralised Information Black Market
-- [**181**星][1y] [Dockerfile] [cboin/re_lab](https://github.com/cboin/re_lab) 包含一些逆向工具的Docker容器
-- [**181**星][11m] [Py] [boy-hack/gwhatweb](https://github.com/boy-hack/gwhatweb) 网站CMS识别
-- [**181**星][2y] [PowerShell] [absolomb/windowsenum](https://github.com/absolomb/windowsenum) A Powershell Privilege Escalation Enumeration Script.
+- [**181**星][3y] [Py] [ctxis/wsuspect-proxy](https://github.com/ctxis/wsuspect-proxy) WSUSpect Proxy - a tool for MITM'ing insecure WSUS connections
+- [**181**星][2y] [PS] [cobbr/obfuscatedempire](https://github.com/cobbr/obfuscatedempire) ObfuscatedEmpire is a fork of Empire with Invoke-Obfuscation integrated directly into it's functionality.
+- [**181**星][3y] [Py] [anantshri/svn-extractor](https://github.com/anantshri/svn-extractor) simple script to extract all web resources by means of .SVN folder exposed over network.
- [**181**星][3y] [Py] [4w4k3/repy2exe](https://github.com/4w4k3/repy2exe) A Reverse Engineering Tool for py2exe applications.
-- [**181**星][10m] [Py] [0x27/ciscorv320dump](https://github.com/0x27/ciscorv320dump) CVE-2019-1652 /CVE-2019-1653 Exploits For Dumping Cisco RV320 Configurations & Debugging Data AND Remote Root Exploit!
-- [**181**星][4y] [Py] [0vercl0k/z3-playground](https://github.com/0vercl0k/z3-playground) A repository to store Z3-python scripts you can use as examples, reminders, whatever.
-- [**180**星][8m] [shadowsocks/papers](https://github.com/shadowsocks/papers) List of papers related to shadowsocks
-- [**180**星][3y] [CSS] [kali-docs-cn/kali-linux-cookbook-zh](https://github.com/kali-docs-cn/kali-linux-cookbook-zh)
+- [**180**星][9d] [Py] [absozed/dockerpwn.py](https://github.com/absozed/dockerpwn.py) Python automation of Docker.sock abuse
+- [**180**星][7m] [Go] [knownsec/gsm](https://github.com/knownsec/gsm) 使用树莓派配合硬件来进行短信转发
- [**180**星][12m] [C++] [zsshen/probedroid](https://github.com/zsshen/probedroid) A SDK for the creation of analysis tools without obtaining app source code in order to profile runtime performance, examine code coverage, and track high-risk behaviors of a given app on Android 5.0 and above.
- [**180**星][7m] [Java] [yubico/ykneo-openpgp](https://github.com/yubico/ykneo-openpgp) OpenPGP applet for the YubiKey NEO
-- [**180**星][14d] [TypeScript] [tensult/cloud-reports](https://github.com/tensult/cloud-reports) Scans your AWS cloud resources and generates reports. Check out free hosted version:
-- [**180**星][2m] [Java] [sensepost/mallet](https://github.com/sensepost/mallet) Mallet is an intercepting proxy for arbitrary protocols
-- [**180**星][5m] [Py] [s0md3v/orbit](https://github.com/s0md3v/orbit) Blockchain Transactions Investigation Tool
+- [**180**星][27d] [Py] [the-useless-one/pywerview](https://github.com/the-useless-one/pywerview) A (partial) Python rewriting of PowerSploit's PowerView
+- [**180**星][2y] [Py] [tenrec-builders/pi-scan](https://github.com/tenrec-builders/pi-scan) Pi Scan is a simple, robust capture appliance for book scanners. It runs on a Raspberry Pi 2.
+- [**180**星][5d] [Py] [tarcisio-marinho/gonnacry](https://github.com/tarcisio-marinho/gonnacry) A Linux Ransomware
+- [**180**星][3m] [Py] [spiderlabs/ikeforce](https://github.com/spiderlabs/ikeforce)
+- [**180**星][2y] [Py] [solusipse/spectrology](https://github.com/solusipse/spectrology) Images to audio files with corresponding spectrograms encoder.
+- [**180**星][3m] [C#] [rasta-mouse/amsiscanbufferbypass](https://github.com/rasta-mouse/amsiscanbufferbypass) Circumvent AMSI by patching AmsiScanBuffer
+- [**180**星][5m] [PS] [phillips321/adaudit](https://github.com/phillips321/adaudit) 自动域名审计
+- [**180**星][22d] [JS] [nowsecure/node-applesign](https://github.com/nowsecure/node-applesign) NodeJS module and commandline utility for re-signing iOS applications (IPA files).
+- [**180**星][2y] [Py] [nopernik/sshpry2.0](https://github.com/nopernik/sshpry2.0) SSHPry v2 - Spy & Control os SSH Connected client's TTY
+- [**180**星][4d] [Py] [misp/misp-galaxy](https://github.com/misp/misp-galaxy) Clusters and elements to attach to MISP events or attributes (like threat actors)
- [**180**星][8m] [C#] [marx-yu/wopihost](https://github.com/marx-yu/wopihost) Office Online Server Wopi Host implement, No need Cobalt. Support DOCX, XLSX, PPTX online editing.
- [**180**星][2y] [PHP] [lcatro/php-webshell-bypass-waf](https://github.com/lcatro/php-webshell-bypass-waf) 分享PHP WebShell 绕过WAF 的一些经验 Share some experience about PHP WebShell bypass WAF and Anti-AV
-- [**180**星][3y] [C] [kriswebdev/android_aircrack](https://github.com/kriswebdev/android_aircrack) Aircrack-ng command-line for Android. Binaries & source.
- [**180**星][1m] [Py] [joxeankoret/idamagicstrings](https://github.com/joxeankoret/idamagicstrings) 从字符串常量中提取信息
- [**180**星][2y] [Py] [jeffxue/web-log-parser](https://github.com/jeffxue/web-log-parser) web日志分析工具
-- [**180**星][2m] [C++] [google/libprotobuf-mutator](https://github.com/google/libprotobuf-mutator) Library for structured fuzzing with protobuffers
+- [**180**星][2y] [Shell] [ha71/whatcms](https://github.com/ha71/whatcms) CMS Detection and Exploit Kit based on Whatcms.org API
- [**180**星][4y] [JS] [gamexg/shadowsocks_admin](https://github.com/gamexg/shadowsocks_admin) 一个 shadowsocks 服务器多账号管理系统,后端使用 shadowsocks-go 。支持多节点、流量限制等功能。
- [**180**星][1y] [Py] [fnk0c/cangibrina](https://github.com/fnk0c/cangibrina) A fast and powerfull dashboard (admin) finder
-- [**180**星][1m] [Py] [fireeye/pwnauth](https://github.com/fireeye/pwnauth)
-- [**180**星][2m] [Py] [eth-sri/debin](https://github.com/eth-sri/debin) Machine Learning to Deobfuscate Binaries
-- [**180**星][4m] [XSLT] [ernw/nmap-parse-output](https://github.com/ernw/nmap-parse-output) Converts/manipulates/extracts data from a Nmap scan output.
-- [**180**星][21d] [enovella/tee-reversing](https://github.com/enovella/tee-reversing) A curated list of public TEE resources for learning how to reverse-engineer and achieve trusted code execution on ARM devices
-- [**180**星][3y] [Py] [ctxis/wsuspect-proxy](https://github.com/ctxis/wsuspect-proxy) WSUSpect Proxy - a tool for MITM'ing insecure WSUS connections
-- [**180**星][3y] [Py] [anantshri/svn-extractor](https://github.com/anantshri/svn-extractor) simple script to extract all web resources by means of .SVN folder exposed over network.
-- [**179**星][8d] [Py] [duo-labs/parliament](https://github.com/duo-labs/parliament) AWS IAM linting library
+- [**180**星][6d] [PHP] [divineomega/password_exposed](https://github.com/divineomega/password_exposed)
- [**179**星][4y] [Py] [offlinemark/poet](https://github.com/offlinemark/poet) Post-exploitation tool
-- [**179**星][14d] [thelsa/cs-checklist](https://github.com/thelsa/cs-checklist) PC客户端(C-S架构)渗透测试checklist / Client side(C-S) penestration checklist
-- [**179**星][20d] [Py] [yelp/py_zipkin](https://github.com/yelp/py_zipkin) Provides utilities to facilitate the usage of Zipkin in Python
-- [**179**星][2y] [Py] [tenrec-builders/pi-scan](https://github.com/tenrec-builders/pi-scan) Pi Scan is a simple, robust capture appliance for book scanners. It runs on a Raspberry Pi 2.
-- [**179**星][6m] [Java] [spring-io/nohttp](https://github.com/spring-io/nohttp) A project for ensuring that https is used
-- [**179**星][3m] [Py] [spiderlabs/ikeforce](https://github.com/spiderlabs/ikeforce)
+- [**179**星][12m] [Shell] [thelinuxchoice/locator](https://github.com/thelinuxchoice/locator) Geolocator, Ip Tracker, Device Info by URL (Serveo and Ngrok)
+- [**179**星][6m] [Py] [fox-it/cve-2019-1040-scanner](https://github.com/fox-it/cve-2019-1040-scanner)
+- [**179**星][4y] [Py] [offlinemark/poet](https://github.com/offlinemark/poet) Post-exploitation tool
+- [**179**星][4m] [TeX] [hackl/tikz-network](https://github.com/hackl/tikz-network) A tool to visualize complex networks in LaTeX
+- [**179**星][22d] [Py] [yelp/py_zipkin](https://github.com/yelp/py_zipkin) Provides utilities to facilitate the usage of Zipkin in Python
+- [**179**星][3y] [Py] [videns/vulners-scanner](https://github.com/videns/vulners-scanner) Vulnerability scanner based on vulners.com audit API
+- [**179**星][5m] [C] [therealsaumil/static-arm-bins](https://github.com/therealsaumil/static-arm-bins) 静态编译的arm二进制文件, 用于调试和运行时分析
+- [**179**星][9m] [Py] [spamscope/spamscope](https://github.com/spamscope/spamscope) Fast Advanced Spam Analysis Tool
+- [**179**星][12d] [Shell] [silverpoision/rock-on](https://github.com/silverpoision/rock-on) Rock-On is a all in one Recon tool that will just get a single entry of the Domain name and do all of the work alone.
+- [**179**星][2d] [Py] [rndinfosecguy/scavenger](https://github.com/rndinfosecguy/scavenger) Crawler (Bot) searching for credential leaks on different paste sites.
- [**179**星][3y] [Py] [redteamsecurity/autonessus](https://github.com/redteamsecurity/autonessus) This script communicates with the Nessus API in an attempt to help with automating scans. Depending on the flag issued with the script, you can list all scans, list all policies, start, stop, pause, and resume a scan.
-- [**179**星][2y] [Py] [nopernik/sshpry2.0](https://github.com/nopernik/sshpry2.0) SSHPry v2 - Spy & Control os SSH Connected client's TTY
+- [**179**星][1m] [Py] [nolze/msoffcrypto-tool](https://github.com/nolze/msoffcrypto-tool) Python tool and library for decrypting MS Office files with passwords or other keys
- [**179**星][4y] [Shell] [nccgroup/cisco-snmp-enumeration](https://github.com/nccgroup/cisco-snmp-enumeration) Automated Cisco SNMP Enumeration, Brute Force, Configuration Download and Password Cracking
-- [**179**星][14d] [Py] [natlas/natlas](https://github.com/natlas/natlas) Scaling Network Scanning. Changes prior to 1.0 may cause difficult to avoid backwards incompatibilities. You've been warned.
- [**179**星][4y] [Py] [offlinemark/poet](https://github.com/offlinemark/poet) Post-exploitation tool
-- [**179**星][6m] [Py] [metachar/mercury](https://github.com/metachar/mercury) Mercury is a hacking tool used to collect information and use the information to further hurt the target
+- [**179**星][13d] [Py] [meliht/mr.sip](https://github.com/meliht/mr.sip) SIP-Based Audit and Attack Tool
- [**179**星][2y] [Shell] [malaohu/ssr-with-net-speeder](https://github.com/malaohu/ssr-with-net-speeder) Shadowsocksr with net speeder
-- [**179**星][4y] [Objective-C] [iosre/hippocamphairsalon](https://github.com/iosre/hippocamphairsalon) A simple universal memory editor (game trainer) on OSX/iOS
-- [**179**星][1y] [Py] [iagcl/watchmen](https://github.com/iagcl/watchmen) (Not maintained anymore) Watchmen - AWS account compliance using centrally managed Config Rules
-- [**179**星][2m] [Go] [hehnope/slurp](https://github.com/hehnope/slurp) Evaluate the security of S3 buckets
+- [**179**星][7m] [kaonashi-passwords/kaonashi](https://github.com/kaonashi-passwords/kaonashi) Wordlist, rules and masks from Kaonashi project (RootedCON 2019)
+- [**179**星][4y] [ObjC] [iosre/hippocamphairsalon](https://github.com/iosre/hippocamphairsalon) A simple universal memory editor (game trainer) on OSX/iOS
+- [**179**星][4m] [Py] [hanul93/kicomav](https://github.com/hanul93/kicomav) KicomAV is an open source (GPL v2) antivirus engine designed for detecting malware and disinfecting it.
+- [**179**星][2m] [C++] [google/libprotobuf-mutator](https://github.com/google/libprotobuf-mutator) Library for structured fuzzing with protobuffers
- [**179**星][6y] [C] [devttys0/littleblackbox](https://github.com/devttys0/littleblackbox) Database of private SSL/SSH keys for embedded devices
-- [**179**星][2y] [PowerShell] [cobbr/obfuscatedempire](https://github.com/cobbr/obfuscatedempire) ObfuscatedEmpire is a fork of Empire with Invoke-Obfuscation integrated directly into it's functionality.
+- [**179**星][4m] [Py] [blackarch/wordlistctl](https://github.com/blackarch/wordlistctl) Fetch, install and search wordlist archives from websites and torrent peers.
- [**179**星][7m] [C++] [arsenalrecon/arsenal-image-mounter](https://github.com/arsenalrecon/arsenal-image-mounter) Arsenal Image Mounter mounts the contents of disk images as complete disks in Microsoft Windows.
- [**179**星][3m] [Py] [anssi-fr/secuml](https://github.com/anssi-fr/secuml) Machine Learning for Computer Security
- [**179**星][11m] [Py] [acceis/leakscraper](https://github.com/acceis/leakscraper) LeakScraper is an efficient set of tools to process and visualize huge text files containing credentials. Theses tools are designed to help penetration testers and redteamers doing OSINT by gathering credentials belonging to their target.
-- [**178**星][6m] [Py] [fox-it/cve-2019-1040-scanner](https://github.com/fox-it/cve-2019-1040-scanner)
-- [**178**星][4m] [TeX] [hackl/tikz-network](https://github.com/hackl/tikz-network) A tool to visualize complex networks in LaTeX
-- [**178**星][7m] [Go] [knownsec/gsm](https://github.com/knownsec/gsm) 使用树莓派配合硬件来进行短信转发
-- [**178**星][4y] [Objective-C] [x43x61x69/otx](https://github.com/x43x61x69/otx) The Mach-O disassembler. Now 64bit and Xcode 6 compatible.
-- [**178**星][5m] [C] [therealsaumil/static-arm-bins](https://github.com/therealsaumil/static-arm-bins) 静态编译的arm二进制文件, 用于调试和运行时分析
-- [**178**星][25d] [Py] [the-useless-one/pywerview](https://github.com/the-useless-one/pywerview) A (partial) Python rewriting of PowerSploit's PowerView
-- [**178**星][1m] [Py] [tarcisio-marinho/gonnacry](https://github.com/tarcisio-marinho/gonnacry) A Linux Ransomware
-- [**178**星][1m] [Go] [staaldraad/xxeserv](https://github.com/staaldraad/xxeserv) A mini webserver with FTP support for XXE payloads
-- [**178**星][9m] [Py] [spamscope/spamscope](https://github.com/spamscope/spamscope) Fast Advanced Spam Analysis Tool
-- [**178**星][10m] [Py] [riramar/hsecscan](https://github.com/riramar/hsecscan) A security scanner for HTTP response headers.
-- [**178**星][3m] [C#] [rasta-mouse/amsiscanbufferbypass](https://github.com/rasta-mouse/amsiscanbufferbypass) Circumvent AMSI by patching AmsiScanBuffer
-- [**178**星][5m] [PowerShell] [phillips321/adaudit](https://github.com/phillips321/adaudit) 自动域名审计
+- [**179**星][20d] [JS] [0vercl0k/cve-2019-9810](https://github.com/0vercl0k/cve-2019-9810) Exploit for CVE-2019-9810 Firefox on Windows 64-bit.
+- [**178**星][11m] [zekesnider/nintendoswitchrestapi](https://github.com/zekesnider/nintendoswitchrestapi) Reverse engineered REST API used in the Nintendo Switch app for iOS. Includes documentation on Splatoon 2's API.
+- [**178**星][4y] [ObjC] [x43x61x69/otx](https://github.com/x43x61x69/otx) The Mach-O disassembler. Now 64bit and Xcode 6 compatible.
+- [**178**星][3m] [C] [soxrok2212/pskracker](https://github.com/soxrok2212/pskracker) An all-in-one WPA/WPS toolkit
+- [**178**星][1y] [PS] [samratashok/admodule](https://github.com/samratashok/admodule) Microsoft signed ActiveDirectory PowerShell module
+- [**178**星][2y] [C] [phoenixos/kernel](https://github.com/phoenixos/kernel) PhoenixOS Kernel Open Source Code
+- [**178**星][8m] [pandazheng/threat-intelligence-analyst](https://github.com/pandazheng/threat-intelligence-analyst) 威胁情报,恶意样本分析,开源Malware代码收集
- [**178**星][2y] [Swift] [nvisium/swift.nv](https://github.com/nvisium/swift.nv) Security Training Tool that demonstrates common mobile application vulnerabilities using Swift in iOS
- [**178**星][6m] [C] [neurodroid/cryptonite](https://github.com/neurodroid/cryptonite) EncFS and TrueCrypt on Android
- [**178**星][2y] [Py] [netflix-skunkworks/repulsive-grizzly](https://github.com/netflix-skunkworks/repulsive-grizzly) Application Layer DoS Testing Framework
-- [**178**星][17d] [Py] [misp/misp-galaxy](https://github.com/misp/misp-galaxy) Clusters and elements to attach to MISP events or attributes (like threat actors)
- [**178**星][2y] [Py] [maldevel/canisrufus](https://github.com/maldevel/canisrufus) canisrufus:Python 编写的后门,使用 Github 做 C&C
- [**178**星][3m] [lengjibo/att-ck-cn](https://github.com/lengjibo/att-ck-cn) ATT&CK实操
-- [**178**星][7m] [kaonashi-passwords/kaonashi](https://github.com/kaonashi-passwords/kaonashi) Wordlist, rules and masks from Kaonashi project (RootedCON 2019)
+- [**178**星][1y] [Py] [iagcl/watchmen](https://github.com/iagcl/watchmen) (Not maintained anymore) Watchmen - AWS account compliance using centrally managed Config Rules
- [**178**星][6m] [Py] [hasherezade/ida_ifl](https://github.com/hasherezade/ida_ifl) 交互式函数列表
-- [**178**星][4m] [Py] [hanul93/kicomav](https://github.com/hanul93/kicomav) KicomAV is an open source (GPL v2) antivirus engine designed for detecting malware and disinfecting it.
-- [**178**星][4m] [Py] [blackarch/wordlistctl](https://github.com/blackarch/wordlistctl) Fetch, install and search wordlist archives from websites and torrent peers.
+- [**178**星][3y] [Ruby] [espreto/wpsploit](https://github.com/espreto/wpsploit) WPSploit - Exploiting Wordpress With Metasploit
+- [**178**星][4m] [JS] [authcov/authcov](https://github.com/authcov/authcov) Web app authorization coverage scanning
- [**178**星][2y] [aozhimin/mosec-2017](https://github.com/aozhimin/mosec-2017) 盘古团队和 POC 主办的移动安全技术峰会
- [**178**星][2y] [C++] [0x09al/dns-persist](https://github.com/0x09al/dns-persist) DNS-Persist is a post-exploitation agent which uses DNS for command and control.
-- [**177**星][12m] [Shell] [thelinuxchoice/locator](https://github.com/thelinuxchoice/locator) Geolocator, Ip Tracker, Device Info by URL (Serveo and Ngrok)
- [**177**星][4m] [C++] [samyk/combobreaker](https://github.com/samyk/combobreaker) Motorized, portable, 3D printed, Arduino-based combination lock cracker
- [**177**星][11m] [Go] [fnzv/net-shield](https://github.com/fnzv/net-Shield) An Easy and Simple Anti-DDoS solution for VPS,Dedicated Servers and IoT devices - Beta
-- [**177**星][3y] [Py] [videns/vulners-scanner](https://github.com/videns/vulners-scanner) Vulnerability scanner based on vulners.com audit API
-- [**177**星][3m] [C] [soxrok2212/pskracker](https://github.com/soxrok2212/pskracker) An all-in-one WPA/WPS toolkit
-- [**177**星][1m] [Py] [so87/oscp-pwk](https://github.com/so87/oscp-pwk) This is my cheatsheet and scripts developed while taking the Offensive Security Penetration Testing with Kali Linux course.
+- [**177**星][2y] [Py] [woj-ciech/daily-dose-of-malware](https://github.com/woj-ciech/daily-dose-of-malware) Script lets you gather malicious software and c&c servers from open source platforms like Malshare, Malcode, Google, Cymon - vxvault, cybercrime tracker and c2 for Pony.
+- [**177**星][6m] [Py] [trailofbits/binjascripts](https://github.com/trailofbits/binjascripts) Scripts for Binary Ninja
+- [**177**星][6y] [Py] [syworks/wireless-ids](https://github.com/syworks/wireless-ids) Ability to detect suspicious activity such as (WEP/WPA/WPS) attack by sniffing the air for wireless packets.
- [**177**星][3m] [JS] [sindresorhus/is-reachable](https://github.com/sindresorhus/is-reachable) Check if servers are reachable
-- [**177**星][10d] [Shell] [silverpoision/rock-on](https://github.com/silverpoision/rock-on) Rock-On is a all in one Recon tool that will just get a single entry of the Domain name and do all of the work alone.
- [**177**星][2y] [rapid7/sonar](https://github.com/rapid7/sonar) Project Sonar
- [**177**星][1y] [random-robbie/bugbounty-scans](https://github.com/random-robbie/bugbounty-scans) aquatone results for sites with bug bountys
-- [**177**星][2y] [C] [phoenixos/kernel](https://github.com/phoenixos/kernel) PhoenixOS Kernel Open Source Code
-- [**177**星][8m] [pandazheng/threat-intelligence-analyst](https://github.com/pandazheng/threat-intelligence-analyst) 威胁情报,恶意样本分析,开源Malware代码收集
- [**177**星][2y] [C] [mcarpenter/afl](https://github.com/mcarpenter/afl) DEPRECATED. Will be removed 09/2019. Please see
- [**177**星][1y] [Py] [johnlatwc/pypowershellxray](https://github.com/johnlatwc/pypowershellxray) Python script to decode common encoded PowerShell scripts
-- [**177**星][2y] [Shell] [ha71/whatcms](https://github.com/ha71/whatcms) CMS Detection and Exploit Kit based on Whatcms.org API
-- [**177**星][26d] [Go] [esrrhs/pingtunnel](https://github.com/esrrhs/pingtunnel) a tool that advertises tcp/udp/sock5 traffic as icmp traffic for forwarding.
-- [**177**星][3y] [Ruby] [espreto/wpsploit](https://github.com/espreto/wpsploit) WPSploit - Exploiting Wordpress With Metasploit
+- [**177**星][5m] [Shell] [ginjachris/pentmenu](https://github.com/ginjachris/pentmenu) A bash script for recon and DOS attacks
- [**177**星][8m] [eoftedal/writings](https://github.com/eoftedal/writings) blog posts
-- [**177**星][10d] [Py] [dictation-toolbox/aenea](https://github.com/dictation-toolbox/aenea) Client-server library for using voice macros from Dragon NaturallySpeaking and Dragonfly on remote/non-windows hosts.
-- [**177**星][7m] [PowerShell] [decoder-it/psgetsystem](https://github.com/decoder-it/psgetsystem) getsystem via parent process using ps1 & embeded c#
-- [**177**星][4m] [JS] [authcov/authcov](https://github.com/authcov/authcov) Web app authorization coverage scanning
+- [**177**星][12d] [Py] [dictation-toolbox/aenea](https://github.com/dictation-toolbox/aenea) Client-server library for using voice macros from Dragon NaturallySpeaking and Dragonfly on remote/non-windows hosts.
+- [**177**星][7m] [PS] [decoder-it/psgetsystem](https://github.com/decoder-it/psgetsystem) getsystem via parent process using ps1 & embeded c#
+- [**177**星][15d] [Py] [critical-start/pastebin_scraper](https://github.com/critical-start/pastebin_scraper) monitor pastebin for interesting information
+- [**177**星][3m] [C] [cloudflare/mmproxy](https://github.com/cloudflare/mmproxy) mmproxy, the magical PROXY protocol gateway
- [**176**星][7m] [JS] [openwisp/netjsongraph.js](https://github.com/openwisp/netjsongraph.js) NetJSON NetworkGraph visualizer based on d3.js
-- [**176**星][11m] [zekesnider/nintendoswitchrestapi](https://github.com/zekesnider/nintendoswitchrestapi) Reverse engineered REST API used in the Nintendo Switch app for iOS. Includes documentation on Splatoon 2's API.
-- [**176**星][22d] [HTML] [zaproxy/zap-core-help](https://github.com/zaproxy/zap-core-help) The help files for the OWASP ZAP core
-- [**176**星][26d] [Py] [yassineaboukir/asnlookup](https://github.com/yassineaboukir/asnlookup) Leverage ASN to look up IP addresses (IPv4 & IPv6) owned by a specific organization for reconnaissance purposes, then run port scanning on it.
-- [**176**星][2y] [C] [riscure/rhme-2016](https://github.com/riscure/rhme-2016) Rhme2 challenge (2016)
-- [**176**星][20d] [JS] [nowsecure/node-applesign](https://github.com/nowsecure/node-applesign) NodeJS module and commandline utility for re-signing iOS applications (IPA files).
-- [**176**星][1m] [Py] [nolze/msoffcrypto-tool](https://github.com/nolze/msoffcrypto-tool) Python tool and library for decrypting MS Office files with passwords or other keys
-- [**176**星][17d] [Py] [mschwager/gitem](https://github.com/mschwager/gitem) A Github organization reconnaissance tool.
+- [**176**星][3d] [HTML] [zaproxy/zap-core-help](https://github.com/zaproxy/zap-core-help) The help files for the OWASP ZAP core
+- [**176**星][1y] [C++] [ysrc/antivirtualapp](https://github.com/ysrc/antivirtualapp) 检测当前app是否运行在VirtualApp虚拟机中
+- [**176**星][28d] [Py] [yassineaboukir/asnlookup](https://github.com/yassineaboukir/asnlookup) Leverage ASN to look up IP addresses (IPv4 & IPv6) owned by a specific organization for reconnaissance purposes, then run port scanning on it.
+- [**176**星][13d] [Py] [thekingofduck/filemonitor](https://github.com/thekingofduck/filemonitor) 文件变化实时监控工具(代码审计/黑盒/白盒审计辅助工具)
+- [**176**星][2m] [rust-fuzz/trophy-case](https://github.com/rust-fuzz/trophy-case)
+- [**176**星][3y] [C] [riscure/rhme-2016](https://github.com/riscure/rhme-2016) Rhme2 challenge (2016)
+- [**176**星][19d] [Py] [mschwager/gitem](https://github.com/mschwager/gitem) A Github organization reconnaissance tool.
- [**176**星][2m] [Py] [mrschyte/nmap-converter](https://github.com/mrschyte/nmap-converter) Python script for converting nmap reports into XLS
+- [**176**星][3m] [Py] [martinvigo/email2phonenumber](https://github.com/martinvigo/email2phonenumber) A OSINT tool to obtain a target's phone number just by having his email address
- [**176**星][4y] [Go] [jrozner/sonar](https://github.com/jrozner/sonar) Self contained cross platform DNS recon tool
- [**176**星][1y] [C#] [jaredhaight/sharpattack](https://github.com/jaredhaight/sharpattack) A simple wrapper for C# tools
- [**176**星][2y] [Shell] [ioactive/repossessed](https://github.com/ioactive/repossessed) A project designed to parse public source code repositories and find various types of vulnerabilities.
- [**176**星][3y] [hexorg/cheatenginetables](https://github.com/hexorg/cheatenginetables) Repository of tables for CheatEngine
-- [**176**星][5m] [Shell] [ginjachris/pentmenu](https://github.com/ginjachris/pentmenu) A bash script for recon and DOS attacks
- [**176**星][6y] [C] [gat3way/hashkill](https://github.com/gat3way/hashkill) hashkill password recovery tool
- [**176**星][4y] [Shell] [floyd-fuh/tiny-mitm-proxy](https://github.com/floyd-fuh/tiny-mitm-proxy) Probably one of the smallest SSL MITM proxies you can make
- [**176**星][11m] [C] [fate0/xmark](https://github.com/fate0/xmark) A PHP7 extension that can hook most functions/classes and parts of opcodes
- [**176**星][4y] [Py] [csababarta/ntdsxtract](https://github.com/csababarta/ntdsxtract) Active Directory forensic framework
-- [**176**星][3m] [C] [cloudflare/mmproxy](https://github.com/cloudflare/mmproxy) mmproxy, the magical PROXY protocol gateway
- [**176**星][4y] [PHP] [chuckfw/owaspbwa](https://github.com/chuckfw/owaspbwa) OWASP Broken Web Applications Project
- [**176**星][2y] [Shell] [bitvijays/pentest-scripts](https://github.com/bitvijays/pentest-scripts) 渗透用脚本
+- [**176**星][4y] [C#] [alphadelta/secure-desktop](https://github.com/alphadelta/secure-desktop) Anti-keylogger/anti-rat application for Windows
+- [**176**星][11m] [Java] [aalhuz/navex](https://github.com/aalhuz/navex) is an exploit generation framework for web applications.
- [**175**星][2y] [C++] [fireice-uk/xmr-stak-amd](https://github.com/fireice-uk/xmr-stak-amd) Monero AMD miner
-- [**175**星][2y] [PowerShell] [fsecurelabs/azurite](https://github.com/FSecureLABS/Azurite) Enumeration and reconnaissance activities in the Microsoft Azure Cloud.
+- [**175**星][16d] [Java] [0kee-team/javaprobe](https://github.com/0kee-team/javaprobe) A Java runtime information-gathering tool which uses the Java Attach API for information acquisition
+- [**175**星][2y] [PS] [fsecurelabs/azurite](https://github.com/FSecureLABS/Azurite) Enumeration and reconnaissance activities in the Microsoft Azure Cloud.
- [**175**星][1m] [C] [radareorg/radare2-extras](https://github.com/radareorg/radare2-extras) Source graveyard and random candy for radare2
- [**175**星][3y] [Shell] [praetorian-code/mitm-vm](https://github.com/praetorian-code/mitm-vm) An easy-to-deploy virtual machine that can provide flexible man-in-the-middle capabilities.
-- [**175**星][1y] [C++] [ysrc/antivirtualapp](https://github.com/ysrc/antivirtualapp) 检测当前app是否运行在VirtualApp虚拟机中
-- [**175**星][6m] [Py] [trailofbits/binjascripts](https://github.com/trailofbits/binjascripts) Scripts for Binary Ninja
- [**175**星][4m] [Py] [techbliss/python_editor](https://github.com/techbliss/python_editor) Python脚本编辑窗口
-- [**175**星][6y] [Py] [syworks/wireless-ids](https://github.com/syworks/wireless-ids) Ability to detect suspicious activity such as (WEP/WPA/WPS) attack by sniffing the air for wireless packets.
+- [**175**星][1y] [sysml/lightvm](https://github.com/sysml/lightvm) a virtualization solution based on Xen that is optimized to offer fast boot-times regardless of the number of active VMs
- [**175**星][2y] [sie504/struts-s2-xxx](https://github.com/sie504/struts-s2-xxx) 整理收集Struts2漏洞环境
-- [**175**星][3y] [Java] [secure-software-engineering/droidbench](https://github.com/secure-software-engineering/droidbench) A micro-benchmark suite to assess the stability of taint-analysis tools for Android
- [**175**星][4y] [Py] [secforce/snmp-brute](https://github.com/secforce/snmp-brute) Fast SNMP brute force, enumeration, CISCO config downloader and password cracking script.
- [**175**星][5y] [JS] [samyk/quickjack](https://github.com/samyk/quickjack) Quickjack is a point-and-click tool for intuitively producing advanced clickjacking and frame slicing attacks.
-- [**175**星][1y] [PowerShell] [samratashok/admodule](https://github.com/samratashok/admodule) Microsoft signed ActiveDirectory PowerShell module
+- [**175**星][2y] [Perl] [portcullislabs/enum4linux](https://github.com/portcullislabs/enum4linux) enum4Linux is a Linux alternative to enum.exe for enumerating data from Windows and Samba hosts.
+- [**175**星][9m] [PHP] [paragonie/password_lock](https://github.com/paragonie/password_lock) Wraps Bcrypt-SHA2 in Authenticated Encryption
- [**175**星][3y] [Go] [nats-io/nats-top](https://github.com/nats-io/nats-top) A top-like tool for monitoring NATS servers.
+- [**175**星][2y] [Java] [ms0x0/dayu](https://github.com/ms0x0/dayu) 一款开源指纹识别工具。
+- [**175**星][2y] [Py] [jasonish/py-idstools](https://github.com/jasonish/py-idstools) idstools: Snort and Suricata Rule and Event Utilities in Python (Including a Rule Update Tool)
+- [**175**星][2m] [C#] [jaegertracing/jaeger-client-csharp](https://github.com/jaegertracing/jaeger-client-csharp) C# client (tracer) for Jaeger
+- [**175**星][9m] [guardrailsio/awesome-java-security](https://github.com/guardrailsio/awesome-java-security) Awesome Java Security Resources
- [**175**星][7y] [Py] [gdssecurity/gwt-penetration-testing-toolset](https://github.com/gdssecurity/gwt-penetration-testing-toolset) 辅助渗透测试GWT程序的3个工具
- [**175**星][3y] [C#] [gangzhuo/kcptun-gui-windows](https://github.com/gangzhuo/kcptun-gui-windows) 隧道工具kcptun的GUI
-- [**175**星][13d] [Py] [critical-start/pastebin_scraper](https://github.com/critical-start/pastebin_scraper) monitor pastebin for interesting information
+- [**175**星][3m] [C#] [dionach/ntdsaudit](https://github.com/dionach/ntdsaudit) An Active Directory audit utility
+- [**175**星][9m] [HTML] [cryptogenic/ps4-6.20-webkit-code-execution-exploit](https://github.com/cryptogenic/ps4-6.20-webkit-code-execution-exploit) A WebKit exploit using CVE-2018-4441 to obtain RCE on PS4 6.20.
- [**175**星][4y] [Ruby] [brav0hax/smbexec](https://github.com/brav0hax/smbexec) A rapid psexec style attack with samba tools
-- [**175**星][4m] [C] [acama/xrop](https://github.com/acama/xrop) Tool to generate ROP gadgets for ARM, AARCH64, x86, MIPS, PPC, RISCV, SH4 and SPARC
-- [**175**星][11m] [Java] [aalhuz/navex](https://github.com/aalhuz/navex) is an exploit generation framework for web applications.
+- [**175**星][1y] [Shell] [brannondorsey/sniff-probes](https://github.com/brannondorsey/sniff-probes) Plug-and-play bash script for sniffing 802.11 probes requests
+- [**175**星][5m] [C] [acama/xrop](https://github.com/acama/xrop) Tool to generate ROP gadgets for ARM, AARCH64, x86, MIPS, PPC, RISCV, SH4 and SPARC
- [**175**星][1y] [Py] [0xbug/biu-framework](https://github.com/0xbug/biu-framework) Security Scan Framework For Enterprise Intranet Based Services
-- [**174**星][14d] [Java] [0kee-team/javaprobe](https://github.com/0kee-team/javaprobe) A Java runtime information-gathering tool which uses the Java Attach API for information acquisition
+- [**174**星][2d] [Go] [jaeles-project/jaeles](https://github.com/jaeles-project/jaeles) The Swiss Army knife for automated Web Application Testing
- [**174**星][7m] [Py] [osirislab/ctf-solutions](https://github.com/osirislab/CTF-Solutions) Solutions to a variety of Capture The Flag challenges from different competitions.
-- [**174**星][2y] [Py] [woj-ciech/daily-dose-of-malware](https://github.com/woj-ciech/daily-dose-of-malware) Script lets you gather malicious software and c&c servers from open source platforms like Malshare, Malcode, Google, Cymon - vxvault, cybercrime tracker and c2 for Pony.
+- [**174**星][11m] [PS] [qax-a-team/cobaltstrike-toolset](https://github.com/QAX-A-Team/CobaltStrike-Toolset) Aggressor Script, Kits, Malleable C2 Profiles, External C2 and so on
+- [**174**星][1y] [PHP] [securitypaper/mail_fishing](https://github.com/SecurityPaper/mail_fishing) 甲方安全工程师必备,内部钓鱼系统
- [**174**星][2y] [Py] [virtuesecurity/aws-extender](https://github.com/virtuesecurity/aws-extender) AWS Extender (Cloud Storage Tester) is a Burp plugin to assess permissions of cloud storage containers on AWS, Google Cloud and Azure.
-- [**174**星][11d] [Py] [thekingofduck/filemonitor](https://github.com/thekingofduck/filemonitor) 文件变化实时监控工具(代码审计/黑盒/白盒审计辅助工具)
-- [**174**星][1y] [sysml/lightvm](https://github.com/sysml/lightvm) a virtualization solution based on Xen that is optimized to offer fast boot-times regardless of the number of active VMs
+- [**174**星][4m] [Py] [tweksteen/jenkins-decrypt](https://github.com/tweksteen/jenkins-decrypt) Credentials dumper for Jenkins
+- [**174**星][6m] [HTML] [trishmapow/rf-jam-replay](https://github.com/trishmapow/rf-jam-replay) Jam and replay attack on vehicle keyless entry systems.
+- [**174**星][2m] [C++] [threeme3/wsprrypi](https://github.com/threeme3/wsprrypi) Bareback LF/MF/HF/VHF WSPR transmitter using a Raspberry Pi
- [**174**星][5y] [Py] [smarnach/pyexiftool](https://github.com/smarnach/pyexiftool) a Python library to communicate with an instance of Phil Harvey's excellent ExifTool command-line application.
-- [**174**星][2y] [Perl] [portcullislabs/enum4linux](https://github.com/portcullislabs/enum4linux) enum4Linux is a Linux alternative to enum.exe for enumerating data from Windows and Samba hosts.
-- [**174**星][10d] [HTML] [openvizsla/ov_ftdi](https://github.com/openvizsla/ov_ftdi) FT2232H-based USB sniffer
-- [**174**星][11d] [Py] [meliht/mr.sip](https://github.com/meliht/mr.sip) SIP-Based Audit and Attack Tool
+- [**174**星][4y] [Py] [shadowsocks-backup/shadowsocks](https://github.com/shadowsocks-backup/shadowsocks)
+- [**174**星][3y] [Java] [secure-software-engineering/droidbench](https://github.com/secure-software-engineering/droidbench) A micro-benchmark suite to assess the stability of taint-analysis tools for Android
+- [**174**星][6d] [HTML] [openvizsla/ov_ftdi](https://github.com/openvizsla/ov_ftdi) FT2232H-based USB sniffer
+- [**174**星][2m] [Py] [markbaggett/srum-dump](https://github.com/markbaggett/srum-dump) A forensics tool to convert the data in the Windows srum (System Resource Usage Monitor) database to an xlsx spreadsheet.
+- [**174**星][6m] [Go] [liamg/furious](https://github.com/liamg/furious) Golang IP/port scanner with SYN (stealth) scanning and device manufacturer identification
+- [**174**星][1y] [Dockerfile] [kozmic/laravel-poc-cve-2018-15133](https://github.com/kozmic/laravel-poc-cve-2018-15133) PoC for CVE-2018-15133 (Laravel unserialize vulnerability)
+- [**174**星][1y] [JS] [knownsec/wam](https://github.com/knownsec/wam) Web App Monitor
+- [**174**星][1y] [Go] [ice3man543/hawkeye](https://github.com/ice3man543/hawkeye) Hawkeye filesystem analysis tool
- [**174**星][4y] [C] [hvqzao/foolav](https://github.com/hvqzao/foolav) Pentest tool for antivirus evasion and running arbitrary payload on target Wintel host
-- [**174**星][9m] [guardrailsio/awesome-java-security](https://github.com/guardrailsio/awesome-java-security) Awesome Java Security Resources
+- [**174**星][3m] [fkie-cad/awesome-embedded-and-iot-security](https://github.com/fkie-cad/awesome-embedded-and-iot-security) A curated list of awesome embedded and IoT security resources.
- [**174**星][2y] [Java] [fengyouchao/sockslib](https://github.com/fengyouchao/sockslib) A Java library of SOCKS5 protocol including client and server
- [**174**星][2y] [Py] [duo-labs/idapython](https://github.com/duo-labs/idapython) Duo 实验室使用的IDAPython 脚本收集
- [cortex_m_firmware](https://github.com/duo-labs/idapython/blob/master/cortex_m_firmware.py) 整理包含ARM Cortex M微控制器固件的IDA Pro数据库
- [amnesia](https://github.com/duo-labs/idapython/blob/master/amnesia.py) 使用字节级启发式在IDA Pro数据库中的未定义字节中查找ARM Thumb指令
- [REobjc](https://github.com/duo-labs/idapython/blob/master/reobjc.py) 在Objective-C的调用函数和被调用函数之间进行适当的交叉引用
-- [**174**星][3m] [C#] [dionach/ntdsaudit](https://github.com/dionach/ntdsaudit) An Active Directory audit utility
-- [**174**星][9m] [HTML] [cryptogenic/ps4-6.20-webkit-code-execution-exploit](https://github.com/cryptogenic/ps4-6.20-webkit-code-execution-exploit) A WebKit exploit using CVE-2018-4441 to obtain RCE on PS4 6.20.
- [**174**星][2m] [Py] [comthings/pandwarf](https://github.com/comthings/pandwarf) RF analysis tool with a sub-1 GHz wireless transceiver controlled by a smartphone or
- [**174**星][1m] [Py] [codewatchorg/sqlipy](https://github.com/codewatchorg/sqlipy) sqlipy: Burp Suite 插件, 使用 SQLMap API 集成SQLMap
- [**174**星][1m] [Java] [calebfenton/apkfile](https://github.com/calebfenton/apkfile) Android app analysis and feature extraction library
-- [**174**星][27d] [azure/azure-storage-java](https://github.com/azure/azure-storage-java) Microsoft Azure Storage Library for Java
-- [**174**星][4y] [C#] [alphadelta/secure-desktop](https://github.com/alphadelta/secure-desktop) Anti-keylogger/anti-rat application for Windows
-- [**173**星][21d] [Jupyter Notebook] [alienvault-otx/otx-python-sdk](https://github.com/AlienVault-OTX/OTX-Python-SDK) The Python SDK for AlienVault OTX
-- [**173**星][11m] [PowerShell] [qax-a-team/cobaltstrike-toolset](https://github.com/QAX-A-Team/CobaltStrike-Toolset) Aggressor Script, Kits, Malleable C2 Profiles, External C2 and so on
-- [**173**星][1y] [PHP] [securitypaper/mail_fishing](https://github.com/SecurityPaper/mail_fishing) 甲方安全工程师必备,内部钓鱼系统
+- [**174**星][29d] [azure/azure-storage-java](https://github.com/azure/azure-storage-java) Microsoft Azure Storage Library for Java
+- [**174**星][4m] [Py] [antonin-deniau/cave_miner](https://github.com/antonin-deniau/cave_miner) Search for code cave in all binaries
+- [**174**星][1m] [PHP] [78778443/xssplatform](https://github.com/78778443/xssplatform) 一个经典的XSS渗透管理平台
+- [**174**星][2y] [PS] [3gstudent/list-rdp-connections-history](https://github.com/3gstudent/list-rdp-connections-history) Use powershell to list the RDP Connections History of logged-in users or all users
+- [**173**星][8m] [dgiese/dustcloud-documentation](https://github.com/dgiese/dustcloud-documentation) Xiaomi Smart Home Device Reverse Engineering and Hacking - Documentation Repo
+- [**173**星][4m] [PHP] [opensec-cn/chip](https://github.com/opensec-cn/chip) a simple tool to detect potential security threat in php code
+- [**173**星][16d] [microsvuln/awesome-afl](https://github.com/microsvuln/awesome-afl) A curated list of different AFL forks and AFL inspired fuzzers with detailed equivalent academic papers with AFL-fuzzing tutorials
+- [**173**星][1m] [Py] [fsecurelabs/jandroid](https://github.com/fsecurelabs/jandroid)
+- [**173**星][1m] [Go] [gavinguan24/ahri](https://github.com/gavinguan24/ahri) Ahri is an intranet sharing tool. Like VPN
+- [**173**星][6d] [Py] [alienvault-otx/otx-python-sdk](https://github.com/AlienVault-OTX/OTX-Python-SDK) The Python SDK for AlienVault OTX
+- [**173**星][1y] [Py] [apt55/google_explorer](https://github.com/APT55/google_explorer) Mass exploitation tool in python
+- [**173**星][2m] [C#] [zodiacon/kernelexplorer](https://github.com/zodiacon/kernelexplorer)
- [**173**星][3m] [JS] [zjonsson/node-unzipper](https://github.com/zjonsson/node-unzipper) node.js cross-platform unzip using streams
-- [**173**星][2y] [C++] [zerocoin/libzerocoin](https://github.com/zerocoin/libzerocoin) Zerocoin: C++ lib for anonymous extension to bitcoin
- [**173**星][7y] [Py] [trivio/common_crawl_index](https://github.com/trivio/common_crawl_index) billions of pages randomly crawled from the internet
-- [**173**星][2m] [rust-fuzz/trophy-case](https://github.com/rust-fuzz/trophy-case)
- [**173**星][1m] [C] [rokups/virtual-reality](https://github.com/rokups/virtual-reality) Stealthy backdoor for Windows operating systems
- [**173**星][6m] [Java] [ota4j-team/opentest4j](https://github.com/ota4j-team/opentest4j) Open Test Alliance for the JVM
- [**173**星][4y] [Py] [osandamalith/lfifreak](https://github.com/osandamalith/lfifreak) A unique automated LFi Exploiter with Bind/Reverse Shells
- [**173**星][4m] [Dockerfile] [obscuritylabs/rai](https://github.com/obscuritylabs/rai) Rapid Attack Infrastructure (RAI)
-- [**173**星][12d] [C] [netoptimizer/network-testing](https://github.com/netoptimizer/network-testing) Network Testing Tools for testing the Linux network stack
+- [**173**星][14d] [C] [netoptimizer/network-testing](https://github.com/netoptimizer/network-testing) Network Testing Tools for testing the Linux network stack
- [**173**星][2y] [Py] [nccgroup/aws-recipes](https://github.com/nccgroup/aws-recipes) A number of Recipes for AWS
-- [**173**星][2y] [Java] [ms0x0/dayu](https://github.com/ms0x0/dayu) 一款开源指纹识别工具。
-- [**173**星][2m] [Py] [markbaggett/srum-dump](https://github.com/markbaggett/srum-dump) A forensics tool to convert the data in the Windows srum (System Resource Usage Monitor) database to an xlsx spreadsheet.
-- [**173**星][1y] [JS] [knownsec/wam](https://github.com/knownsec/wam) Web App Monitor
+- [**173**星][7d] [C] [microsoft/pqcrypto-sidh](https://github.com/microsoft/pqcrypto-sidh) SIDH Library is a fast and portable software library that implements state-of-the-art supersingular isogeny cryptographic schemes. The chosen parameters aim to provide security against attackers running a large-scale quantum computer, and security against classical algorithms.
+- [**173**星][1y] [ObjC] [macmade/filevaultcracker](https://github.com/macmade/filevaultcracker) macOS FileVault cracking tool
+- [**173**星][5d] [C] [lttng/lttng-tools](https://github.com/lttng/lttng-tools) The lttng-tools project provides a session daemon (lttng-sessiond) that acts as a tracing registry, the "lttng" command line for tracing control, a lttng-ctl library for tracing control and a lttng-relayd for network streaming.
+- [**173**星][6m] [Py] [lmco/dart](https://github.com/lmco/dart) DART is a test documentation tool created by the Lockheed Martin Red Team to document and report on penetration tests, especially in isolated network environments.
+- [**173**星][7m] [C#] [krzys-h/undertalemodtool](https://github.com/krzys-h/undertalemodtool) The most complete tool for modding, decompiling and unpacking Undertale (and other Game Maker: Studio games!)
- [**173**星][11m] [C++] [jonatan1024/clrinject](https://github.com/jonatan1024/clrinject) 将 C#EXE 或 DLL 程序集注入任意CLR 运行时或者其他进程的 AppDomain
-- [**173**星][3y] [PowerShell] [infocyte/pshunt](https://github.com/infocyte/pshunt) Powershell Threat Hunting Module
+- [**173**星][3m] [JS] [infusion/node-dhcp](https://github.com/infusion/node-dhcp) A DHCP server and client written in pure JavaScript
+- [**173**星][3y] [PS] [infocyte/pshunt](https://github.com/infocyte/pshunt) Powershell Threat Hunting Module
- [**173**星][1y] [C#] [ikende/beetle.dt](https://github.com/ikende/beetle.dt) 分布式压力测试工具
-- [**173**星][1y] [Go] [ice3man543/hawkeye](https://github.com/ice3man543/hawkeye) Hawkeye filesystem analysis tool
- [**173**星][7y] [Py] [grutz/h3c-pt-tools](https://github.com/grutz/h3c-pt-tools) Huawei/H3C/HP Penetration Testing Tools
+- [**173**星][2y] [C] [geosn0w/reverse-engineering-tutorials](https://github.com/geosn0w/reverse-engineering-tutorials) Some Reverse Engineering Tutorials for Beginners
+- [**173**星][2m] [Shell] [duy13/vddos-protection](https://github.com/duy13/vddos-protection) Welcome to vDDoS, a HTTP(S) DDoS Protection Reverse Proxy. Thank you for using!
+- [**173**星][4m] [dhaval17/awsome-security-write-ups-and-pocs](https://github.com/dhaval17/awsome-security-write-ups-and-pocs) Awesome Writeups and POCs
- [**173**星][4y] [Py] [dc3l1ne/blasting_dictionary](https://github.com/dc3l1ne/blasting_dictionary) 爆破字典
+- [**173**星][3m] [cptgibbon/house-of-corrosion](https://github.com/cptgibbon/house-of-corrosion) A description of the "House of Corrosion" GLIBC heap exploitation technique.
- [**173**星][3y] [Py] [comsecuris/shannonre](https://github.com/comsecuris/shannonre) Helpful scripts for various tasks performed during reverse engineering the Shannon Baseband with the goal to exploit the Samsung Galaxy S6
- [**173**星][2y] [Py] [cldrn/macphish](https://github.com/cldrn/macphish) macphish:Office 宏 Payload 生成器(Mac 版)
-- [**173**星][1y] [Shell] [brannondorsey/sniff-probes](https://github.com/brannondorsey/sniff-probes) Plug-and-play bash script for sniffing 802.11 probes requests
-- [**173**星][3m] [Py] [antonin-deniau/cave_miner](https://github.com/antonin-deniau/cave_miner) Search for code cave in all binaries
-- [**173**星][2y] [PowerShell] [3gstudent/list-rdp-connections-history](https://github.com/3gstudent/list-rdp-connections-history) Use powershell to list the RDP Connections History of logged-in users or all users
-- [**173**星][18d] [JS] [0vercl0k/cve-2019-9810](https://github.com/0vercl0k/cve-2019-9810) Exploit for CVE-2019-9810 Firefox on Windows 64 bits.
-- [**172**星][1y] [Py] [apt55/google_explorer](https://github.com/APT55/google_explorer) Mass exploitation tool in python
-- [**172**星][2m] [C#] [zodiacon/kernelexplorer](https://github.com/zodiacon/kernelexplorer)
+- [**173**星][2m] [Py] [busescanfly/pretty](https://github.com/busescanfly/pretty) "PRinter Exploitation Toolkit" LAN automation tool
+- [**173**星][2y] [CSS] [bhdresh/socialengineeringpayloads](https://github.com/bhdresh/socialengineeringpayloads) This is a collection of social engineering tricks and payloads being used for credential theft and spear phishing attacks.
+- [**172**星][24d] [OCaml] [mirage/alcotest](https://github.com/mirage/alcotest) A lightweight and colourful test framework
+- [**172**星][10d] [Py] [fireeye/fidl](https://github.com/fireeye/fidl) A sane API for IDA Pro's decompiler. Useful for malware RE and vulnerability research
+- [**172**星][2y] [C++] [zerocoin/libzerocoin](https://github.com/zerocoin/libzerocoin) Zerocoin: C++ lib for anonymous extension to bitcoin
- [**172**星][2y] [C] [xerub/extra_recipe](https://github.com/xerub/extra_recipe) extra_recipe:Exception-orientedexploitation
-- [**172**星][1y] [C++] [samyk/frisky](https://github.com/samyk/frisky) Instruments to assist in binary application reversing and augmentation, geared towards walled gardens like iOS and macOS
+- [**172**星][2y] [PS] [ubeeri/invoke-usersimulator](https://github.com/ubeeri/invoke-usersimulator) Simulates common user behaviour on local and remote Windows hosts.
+- [**172**星][2y] [Py] [tr3jer/dnsautorebinding](https://github.com/tr3jer/dnsautorebinding) ssrf、ssrfIntranetFuzz、dnsRebinding、recordEncode、dnsPoisoning、Support ipv4/ipv6
+- [**172**星][3y] [Py] [tonybeltramelli/deep-spying](https://github.com/tonybeltramelli/deep-spying) 使用Smartwatch和深度学习进行间谍活动
+- [**172**星][6m] [C++] [strivexjun/driverinjectdll](https://github.com/strivexjun/driverinjectdll) Using Driver Global Injection dll, it can hide DLL modules
+- [**172**星][4d] [C++] [samyk/frisky](https://github.com/samyk/frisky) Instruments to assist in binary application reversing and augmentation, geared towards walled gardens like iOS and macOS
- [**172**星][2y] [Py] [omergunal/hackerbot](https://github.com/omergunal/hackerbot) chatbot 和 hacking 工具的结合版
- [**172**星][1y] [Py] [niloofarkheirkhah/nili](https://github.com/niloofarkheirkhah/nili) nili:网络扫描工具,中间人,协议逆向工程和 Fuzzing
-- [**172**星][1y] [Objective-C] [macmade/filevaultcracker](https://github.com/macmade/filevaultcracker) macOS FileVault cracking tool
-- [**172**星][14d] [C] [lttng/lttng-tools](https://github.com/lttng/lttng-tools) The lttng-tools project provides a session daemon (lttng-sessiond) that acts as a tracing registry, the "lttng" command line for tracing control, a lttng-ctl library for tracing control and a lttng-relayd for network streaming.
+- [**172**星][11m] [Py] [metachar/hatch](https://github.com/metachar/hatch) Hatch is a brute force tool that is used to brute force most websites
- [**172**星][1m] [ASP] [lowleveldesign/debug-recipes](https://github.com/lowleveldesign/debug-recipes) My notes collected while debugging various .NET and Windows problems.
-- [**172**星][6m] [Py] [lmco/dart](https://github.com/lmco/dart) DART is a test documentation tool created by the Lockheed Martin Red Team to document and report on penetration tests, especially in isolated network environments.
-- [**172**星][7m] [C#] [krzys-h/undertalemodtool](https://github.com/krzys-h/undertalemodtool) The most complete tool for modding, decompiling and unpacking Undertale (and other Game Maker: Studio games!)
+- [**172**星][6d] [Shell] [lavabit/robox](https://github.com/lavabit/robox) The tools needed to robotically create/configure/provision a large number of operating systems, for a variety of hypervisors, using packer.
+- [**172**星][3y] [C] [henkaku/offline-installer](https://github.com/henkaku/offline-installer)
- [**172**星][2m] [JS] [hapijs/crumb](https://github.com/hapijs/crumb) CSRF crumb generation and validation for hapi
+- [**172**星][4y] [JS] [fnando/password_strength](https://github.com/fnando/password_strength) Check password strength against several rules. Includes ActiveRecord/ActiveModel support.
+- [**172**星][2m] [Py] [fgsect/unicorefuzz](https://github.com/fgsect/unicorefuzz) Fuzzing the Kernel Using AFL-Unicorn
- [**172**星][1y] [JS] [brannondorsey/host-validation](https://github.com/brannondorsey/host-validation) Express.js middleware for "Host" and "Referer" header validation to protect against DNS rebinding attacks.
- [**172**星][3y] [Py] [4w4k3/insanity-framework](https://github.com/4w4k3/insanity-framework) Generate Payloads and Control Remote Machines. [Discontinued]
-- [**172**星][3y] [Py] [4shadoww/hakkuframework](https://github.com/4shadoww/hakkuframework) Hakku Framework penetration testing
-- [**171**星][7d] [Py] [absozed/dockerpwn.py](https://github.com/absozed/dockerpwn.py) Python automation of Docker.sock abuse
+- [**171**星][1m] [Py] [out0fmemory/qqwry.dat](https://github.com/out0fmemory/qqwry.dat) 自动更新的纯真ip库,每天自动更新
- [**171**星][2y] [vysecurity/cve-2017-8759](https://github.com/vysecurity/CVE-2017-8759) CVE-2017-8759 - A vulnerability in the SOAP WDSL parser.
+- [**171**星][7m] [C] [ciyze/windows-rootkits](https://github.com/ciyze/Windows-Rootkits)
- [**171**星][6m] [C] [noracodes/crackmes](https://github.com/NoraCodes/crackmes) Some CrackMe codes for Linux x86/x86_64
-- [**171**星][6m] [HTML] [trishmapow/rf-jam-replay](https://github.com/trishmapow/rf-jam-replay) Jam and replay attack on vehicle keyless entry systems.
-- [**171**星][3y] [Py] [tonybeltramelli/deep-spying](https://github.com/tonybeltramelli/deep-spying) 使用Smartwatch和深度学习进行间谍活动
-- [**171**星][6m] [C++] [strivexjun/driverinjectdll](https://github.com/strivexjun/driverinjectdll) Using Driver Global Injection dll, it can hide DLL modules
+- [**171**星][10m] [winmin/awesome-vm-exploit](https://github.com/winmin/awesome-vm-exploit) share some useful archives about vm and qemu escape exploit.
+- [**171**星][10m] [Shell] [trustedsec/hardcidr](https://github.com/trustedsec/hardcidr) hardCIDR is a Linux Bash script, but also functions under macOS. Your mileage may vary on other distros. The script with no specified options will query ARIN and a pool of BGP route servers. The route server is selected at random at runtime.
- [**171**星][6m] [JS] [sindresorhus/ipify](https://github.com/sindresorhus/ipify) Get your public IP address
- [**171**星][2y] [Ruby] [section9labs/cartero](https://github.com/section9labs/cartero) Cartero - Social Engineering Framework
+- [**171**星][2m] [C#] [samueltulach/virustotaluploader](https://github.com/samueltulach/virustotaluploader) C# Open-Source Winforms application for uploading files to VirusTotal
- [**171**星][3y] [PHP] [rpisec/hackthevote](https://github.com/rpisec/hackthevote) Handouts, setup scripts, sources, and solutions for challenges from Hack The Vote
+- [**171**星][2m] [Java] [rohanpadhye/jqf](https://github.com/rohanpadhye/jqf) JQF + Zest: Coverage-guided semantic fuzzing for Java.
- [**171**星][10m] [C] [q3k/cve-2019-5736-poc](https://github.com/q3k/cve-2019-5736-poc) Unweaponized Proof of Concept for CVE-2019-5736 (Docker escape)
- [**171**星][4y] [JS] [philbooth/escomplex](https://github.com/philbooth/escomplex) Software complexity analysis of JavaScript-family abstract syntax trees
-- [**171**星][1y] [Objective-C] [objective-see/donotdisturb](https://github.com/objective-see/donotdisturb) Detect Evil Maid Attacks
-- [**171**星][13d] [C] [microsoft/pqcrypto-sidh](https://github.com/microsoft/pqcrypto-sidh) SIDH Library is a fast and portable software library that implements state-of-the-art supersingular isogeny cryptographic schemes. The chosen parameters aim to provide security against attackers running a large-scale quantum computer, and security against classical algorithms.
-- [**171**星][11m] [Py] [metachar/hatch](https://github.com/metachar/hatch) Hatch is a brute force tool that is used to brute force most websites
-- [**171**星][3m] [Py] [martinvigo/email2phonenumber](https://github.com/martinvigo/email2phonenumber) A OSINT tool to obtain a target's phone number just by having his email address
+- [**171**星][3y] [C++] [phat3/pindemonium](https://github.com/phat3/pindemonium) A pintool in order to unpack malware
+- [**171**星][1y] [ObjC] [objective-see/donotdisturb](https://github.com/objective-see/donotdisturb) Detect Evil Maid Attacks
+- [**171**星][5m] [C#] [nettitude/sharpsocks](https://github.com/nettitude/sharpsocks) Tunnellable HTTP/HTTPS socks4a proxy written in C# and deployable via PowerShell
- [**171**星][10m] [Shell] [lcashdol/exploits](https://github.com/lcashdol/exploits) Exploits for various CVEs
-- [**171**星][1y] [Dockerfile] [kozmic/laravel-poc-cve-2018-15133](https://github.com/kozmic/laravel-poc-cve-2018-15133) PoC for CVE-2018-15133 (Laravel unserialize vulnerability)
- [**171**星][3y] [kayrus/kubelet-exploit](https://github.com/kayrus/kubelet-exploit)
-- [**171**星][2m] [C#] [jaegertracing/jaeger-client-csharp](https://github.com/jaegertracing/jaeger-client-csharp) C# client (tracer) for Jaeger
-- [**171**星][3m] [JS] [infusion/node-dhcp](https://github.com/infusion/node-dhcp) A DHCP server and client written in pure JavaScript
+- [**171**星][11m] [Java] [joychou93/webshell](https://github.com/joychou93/webshell) 入侵分析时发现的Webshell后门
+- [**171**星][6m] [C++] [hoangprod/andrewspecial](https://github.com/hoangprod/andrewspecial) AndrewSpecial, dumping lsass' memory stealthily and bypassing "Cilence" since 2019.
+- [**171**星][2d] [C] [heimdal/heimdal](https://github.com/heimdal/heimdal) a Kerberos 5 implementation
- [**171**星][4y] [Shell] [halpomeranz/lmg](https://github.com/halpomeranz/lmg) Script for automating Linux memory capture and analysis
- [**171**星][1m] [Py] [gleeda/memtriage](https://github.com/gleeda/memtriage) 快速查询Windows计算机上的内存。使用Winpmem驱动访问物理内存,使用Volatility分析
-- [**171**星][2y] [C] [geosn0w/reverse-engineering-tutorials](https://github.com/geosn0w/reverse-engineering-tutorials) Some Reverse Engineering Tutorials for Beginners
-- [**171**星][4y] [JS] [fnando/password_strength](https://github.com/fnando/password_strength) Check password strength against several rules. Includes ActiveRecord/ActiveModel support.
-- [**171**星][2m] [Shell] [duy13/vddos-protection](https://github.com/duy13/vddos-protection) Welcome to vDDoS, a HTTP(S) DDoS Protection Reverse Proxy. Thank you for using!
+- [**171**星][12m] [C#] [fullmetalcache/powerline](https://github.com/fullmetalcache/powerline)
+- [**171**星][9m] [C++] [ecx86/classinformer-ida7](https://github.com/ecx86/classinformer-ida7) ClassInformer backported for IDA Pro 7.0
+- [**171**星][2m] [Ruby] [devise-security/devise-security](https://github.com/devise-security/devise-security) A security extension for devise, meeting industrial standard security demands for web applications.
- [**171**星][1m] [C] [curl/doh](https://github.com/curl/doh) stand-alone application for DoH (DNS-over-HTTPS) name resolves and lookups
-- [**171**星][2m] [Py] [busescanfly/pretty](https://github.com/busescanfly/pretty) "PRinter Exploitation Toolkit" LAN automation tool
- [**171**星][7m] [Py] [bilelmoussaoui/authenticator](https://github.com/bilelmoussaoui/authenticator) 2FA code generator for GNOME
-- [**171**星][2y] [CSS] [bhdresh/socialengineeringpayloads](https://github.com/bhdresh/socialengineeringpayloads) This is a collection of social engineering tricks and payloads being used for credential theft and spear phishing attacks.
- [**171**星][2y] [C++] [bayshorenetworks/yextend](https://github.com/bayshorenetworks/yextend) Yara integrated software to handle archive file data.
- [**171**星][2y] [Go] [arwmq9b6/dnsproxy](https://github.com/arwmq9b6/dnsproxy) 防 DNS 缓存污染,兼顾查询质量与速度
-- [**171**星][1m] [PHP] [78778443/xssplatform](https://github.com/78778443/xssplatform) 一个经典的XSS渗透管理平台
+- [**171**星][12m] [Py] [andreafioraldi/idangr](https://github.com/andreafioraldi/idangr) 在IDA中使用angrdbg调试器进行调试
+- [**171**星][3y] [Py] [4shadoww/hakkuframework](https://github.com/4shadoww/hakkuframework) Hakku Framework penetration testing
- [**170**星][2y] [Go] [out0fmemory/goproxy-always-available](https://github.com/out0fmemory/goproxy-always-available) fork from goproxy Becaust it closed!! 1632版本自动扫描可用ip
-- [**170**星][22d] [OCaml] [mirage/alcotest](https://github.com/mirage/alcotest) A lightweight and colourful test framework
-- [**170**星][8d] [Lua] [kuoruan/luci-app-v2ray](https://github.com/kuoruan/luci-app-v2ray) LuCI support for V2Ray
- [**170**星][3m] [Rust] [phra/rustbuster](https://github.com/phra/rustbuster) A Comprehensive Web Fuzzer and Content Discovery Tool
-- [**170**星][1m] [Go] [gavinguan24/ahri](https://github.com/gavinguan24/ahri) Ahri is an intranet sharing tool. Like VPN
-- [**170**星][6m] [C] [ciyze/windows-rootkits](https://github.com/ciyze/Windows-Rootkits)
-- [**170**星][10m] [winmin/awesome-vm-exploit](https://github.com/winmin/awesome-vm-exploit) share some useful archives about vm and qemu escape exploit.
- [**170**星][1y] [Py] [vergl4s/instarecon](https://github.com/vergl4s/instarecon) Automated digital reconnaissance
-- [**170**星][7m] [HTML] [tylert/pocorgtfo](https://github.com/tylert/pocorgtfo) International Journal of Proof-of-Concept or Get The F*** Out (PoC||GTFO or PoC or GTFO)
+- [**170**星][8m] [HTML] [tylert/pocorgtfo](https://github.com/tylert/pocorgtfo) International Journal of Proof-of-Concept or Get The F*** Out (PoC||GTFO or PoC or GTFO)
+- [**170**星][15d] [Py] [skyscanner/cfripper](https://github.com/skyscanner/cfripper) Lambda function to "rip apart" a CloudFormation template and check it for security compliance.
- [**170**星][2y] [Py] [securingsam/krackdetector](https://github.com/securingsam/krackdetector) 在网络中检测和预防 KRACK 攻击
- [**170**星][1y] [PHP] [robocoder/rips-scanner](https://github.com/robocoder/rips-scanner) RIPS - A static source code analyser for vulnerabilities in PHP scripts
- [**170**星][1y] [ramen0x3f/aggressorscripts](https://github.com/ramen0x3f/aggressorscripts)
- [**170**星][3y] [HTML] [purpleteam/snarf](https://github.com/purpleteam/snarf) Snarf man-in-the-middle / relay suite
-- [**170**星][3y] [C++] [phat3/pindemonium](https://github.com/phat3/pindemonium) A pintool in order to unpack malware
-- [**170**星][5y] [Py] [paulsec/csrft](https://github.com/paulsec/csrft) A lightweight CSRF Toolkit for easy Proof of concept
+- [**170**星][6y] [Py] [paulsec/csrft](https://github.com/paulsec/csrft) A lightweight CSRF Toolkit for easy Proof of concept
- [**170**星][2y] [Py] [omri9741/cve-2017-7494](https://github.com/omri9741/cve-2017-7494) Samba 漏洞(CVE-2017-7494)PoC
-- [**170**星][7d] [Py] [misp/pymisp](https://github.com/misp/pymisp) Python library using the MISP Rest API
-- [**170**星][1y] [PowerShell] [mattifestation/pssysmontools](https://github.com/mattifestation/pssysmontools) Sysmon Tools for PowerShell
-- [**170**星][6m] [Go] [liamg/furious](https://github.com/liamg/furious) Golang IP/port scanner with SYN (stealth) scanning and device manufacturer identification
-- [**170**星][11m] [Java] [joychou93/webshell](https://github.com/joychou93/webshell) 入侵分析时发现的Webshell后门
+- [**170**星][6d] [Py] [misp/pymisp](https://github.com/misp/pymisp) Python library using the MISP Rest API
+- [**170**星][1y] [PS] [mattifestation/pssysmontools](https://github.com/mattifestation/pssysmontools) Sysmon Tools for PowerShell
+- [**170**星][1y] [PS] [mattifestation/pic_bindshell](https://github.com/mattifestation/pic_bindshell) Position Independent Windows Shellcode Written in C
+- [**170**星][3y] [Py] [luyishisi/nyspider](https://github.com/luyishisi/nyspider) 各种爬虫---大众点评,安居客,58,人人贷,拍拍贷, IT桔子,拉勾网,豆瓣,搜房网,ASO100,气象数据,猫眼电影,链家,PM25.in...
+- [**170**星][6m] [C] [0xkira/qemu-vm-escape](https://github.com/0xKira/qemu-vm-escape) an exploit for CVE-2019-6778
- [**170**星][10m] [HTML] [jensvoid/lorg](https://github.com/jensvoid/lorg) Apache Logfile Security Analyzer
-- [**170**星][6m] [C++] [hoangprod/andrewspecial](https://github.com/hoangprod/andrewspecial) AndrewSpecial, dumping lsass' memory stealthily and bypassing "Cilence" since 2019.
-- [**170**星][13d] [C] [heimdal/heimdal](https://github.com/heimdal/heimdal) a Kerberos 5 implementation
-- [**170**星][12m] [C#] [fullmetalcache/powerline](https://github.com/fullmetalcache/powerline)
- [**170**星][1m] [Shell] [edoverflow/contact.sh](https://github.com/edoverflow/contact.sh) An OSINT tool to find contacts in order to report security vulnerabilities.
-- [**170**星][9m] [C++] [ecx86/classinformer-ida7](https://github.com/ecx86/classinformer-ida7) ClassInformer backported for IDA Pro 7.0
- [**170**星][1y] [C#] [eaglexiang/eagle.tunnel.dotnet.core](https://github.com/eaglexiang/eagle.tunnel.dotnet.core) 稳定易用的代理工具
-- [**170**星][4m] [dhaval17/awsome-security-write-ups-and-pocs](https://github.com/dhaval17/awsome-security-write-ups-and-pocs) Awesome Writeups and POCs
- [**170**星][3y] [C] [cyrus-and/mysql-unsha1](https://github.com/cyrus-and/mysql-unsha1) 无需明文密码,认证MySQL服务器
- [**170**星][2y] [PHP] [cryin/assetsview](https://github.com/cryin/assetsview) Assets View资产发现、网络拓扑管理系统
- [**170**星][3y] [C++] [cr4sh/fwexpl](https://github.com/cr4sh/fwexpl) PC firmware exploitation tool and library
-- [**170**星][12d] [JS] [cert-polska/mquery](https://github.com/cert-polska/mquery) YARA malware query accelerator (web frontend)
+- [**170**星][14d] [JS] [cert-polska/mquery](https://github.com/cert-polska/mquery) YARA malware query accelerator (web frontend)
+- [**170**星][2m] [C] [beehive-lab/mambo](https://github.com/beehive-lab/mambo) ARM运行时二进制文件修改工具,低耗版。
- [**170**星][2y] [Py] [awhitehatter/mailoney](https://github.com/awhitehatter/mailoney) An SMTP Honeypot
-- [**170**星][1y] [C] [autopear/ipainstaller](https://github.com/autopear/ipainstaller) Install IPA from command line
-- [**169**星][1m] [Py] [fsecurelabs/jandroid](https://github.com/fsecurelabs/jandroid)
-- [**169**星][1m] [Py] [hpfeeds/hpfeeds](https://github.com/hpfeeds/hpfeeds) Honeynet Project generic authenticated datafeed protocol
+- [**170**星][2m] [CSS] [7dog7/bottleneckosmosis](https://github.com/7dog7/bottleneckosmosis) 瓶颈渗透,web渗透,red红队,fuzz param,注释,js字典,ctf
+- [**169**星][3d] [Py] [hpfeeds/hpfeeds](https://github.com/hpfeeds/hpfeeds) Honeynet Project generic authenticated datafeed protocol
- [**169**星][2m] [JS] [wuchangming/node-mitmproxy](https://github.com/wuchangming/node-mitmproxy) node-mitmproxy is an extensible man-in-the-middle(MITM) proxy server for HTTP/HTTPS base on Node.js.
-- [**169**星][10m] [Shell] [trustedsec/hardcidr](https://github.com/trustedsec/hardcidr) hardCIDR is a Linux Bash script, but also functions under macOS. Your mileage may vary on other distros. The script with no specified options will query ARIN and a pool of BGP route servers. The route server is selected at random at runtime.
-- [**169**星][2m] [C#] [samueltulach/virustotaluploader](https://github.com/samueltulach/virustotaluploader) C# Open-Source Winforms application for uploading files to VirusTotal
+- [**169**星][2y] [Py] [undeadsec/debinject](https://github.com/undeadsec/debinject) Inject malicious code into *.debs
+- [**169**星][4m] [Py] [racepwn/racepwn](https://github.com/racepwn/racepwn) a librace library and a racepwn utility that are designed to test a race condition attack through protocols that use a TCP connection
+- [**169**星][1m] [PS] [olafhartong/attackdatamap](https://github.com/olafhartong/attackdatamap) A datasource assessment on an event level to show potential coverage or the MITRE ATT&CK framework
- [**169**星][6m] [C] [octomagon/davegrohl](https://github.com/octomagon/davegrohl) A Password Cracker for macOS
+- [**169**星][7m] [Shell] [munki/bootstrappr](https://github.com/munki/bootstrappr) A bare-bones tool to install a set of packages on a target volume.
- [**169**星][8m] [Go] [mimah/gomet](https://github.com/mimah/gomet) Multi-platform agent written in Golang. TCP forwarding, socks5, tunneling, pivoting, shell, download, exec
-- [**169**星][1y] [PowerShell] [mattifestation/pic_bindshell](https://github.com/mattifestation/pic_bindshell) Position Independent Windows Shellcode Written in C
-- [**169**星][3y] [Py] [luyishisi/nyspider](https://github.com/luyishisi/nyspider) 各种爬虫---大众点评,安居客,58,人人贷,拍拍贷, IT桔子,拉勾网,豆瓣,搜房网,ASO100,气象数据,猫眼电影,链家,PM25.in...
-- [**169**星][14d] [Shell] [lavabit/robox](https://github.com/lavabit/robox) The tools needed to robotically create/configure/provision a large number of operating systems, for a variety of hypervisors, using packer.
-- [**169**星][6m] [C] [0xkira/qemu-vm-escape](https://github.com/0xKira/qemu-vm-escape) an exploit for CVE-2019-6778
+- [**169**星][16d] [Py] [in-toto/in-toto](https://github.com/in-toto/in-toto) in-toto is a framework to protect supply chain integrity.
- [**169**星][2y] [Py] [googulator/teslacrack](https://github.com/googulator/teslacrack) Decryptor for the TeslaCrypt malware
- [**169**星][5y] [Puppet] [garethr/pentesting-playground](https://github.com/garethr/pentesting-playground) Code for installing various security minded tools onto Vagrant powered virtual machines
-- [**169**星][2m] [Py] [fgsect/unicorefuzz](https://github.com/fgsect/unicorefuzz) Fuzzing the Kernel Using AFL-Unicorn
-- [**169**星][2m] [C] [beehive-lab/mambo](https://github.com/beehive-lab/mambo) ARM运行时二进制文件修改工具,低耗版。
-- [**169**星][12m] [Py] [andreafioraldi/idangr](https://github.com/andreafioraldi/idangr) 在IDA中使用angrdbg调试器进行调试
+- [**169**星][2y] [Ruby] [fuzzapi/api-fuzzer](https://github.com/fuzzapi/api-fuzzer) API Fuzzer which allows to fuzz request attributes using common pentesting techniques and lists vulnerabilities
+- [**169**星][3y] [cn33liz/msbuildshell](https://github.com/cn33liz/msbuildshell) MSBuildShell, a Powershell Host running within MSBuild.exe
+- [**169**星][11m] [C] [carolemieux/afl-rb](https://github.com/carolemieux/afl-rb) AFL Fuzz 工具的修改版,针对 Rare Branches
+- [**169**星][1y] [C] [autopear/ipainstaller](https://github.com/autopear/ipainstaller) Install IPA from command line
- [**169**星][2y] [Py] [3gstudent/worse-pdf](https://github.com/3gstudent/worse-pdf) Turn a normal PDF file into malicious.Use to steal Net-NTLM Hashes from windows machines.
-- [**168**星][14d] [microsvuln/awesome-afl](https://github.com/microsvuln/awesome-afl) A curated list of different AFL forks and AFL inspired fuzzers with detailed equivalent academic papers with AFL-fuzzing tutorials
+- [**168**星][3d] [C++] [radareorg/r2ghidra-dec](https://github.com/radareorg/r2ghidra-dec) Deep ghidra decompiler integration for radare2
- [**168**星][6m] [Py] [zerosteiner/mayhem](https://github.com/zerosteiner/mayhem) Runtime Process Manipulation
- [**168**星][2y] [C#] [x41sec/browser-security-whitepaper-2017](https://github.com/x41sec/browser-security-whitepaper-2017) X41 Browser Security White Paper - Tools and PoCs
-- [**168**星][2y] [Py] [undeadsec/debinject](https://github.com/undeadsec/debinject) Inject malicious code into *.debs
+- [**168**星][9m] [Clojure] [weavejester/crypto-password](https://github.com/weavejester/crypto-password) Library for securely hashing passwords
- [**168**星][1y] [Shell] [tokyoneon/armor](https://github.com/tokyoneon/armor) Armor is a simple Bash script designed to create encrypted macOS payloads capable of evading antivirus scanners.
-- [**168**星][13d] [Py] [skyscanner/cfripper](https://github.com/skyscanner/cfripper) Lambda function to "rip apart" a CloudFormation template and check it for security compliance.
+- [**168**星][4m] [C++] [strivexjun/aheadlib-x86-x64](https://github.com/strivexjun/aheadlib-x86-x64) hijack dll Source Code Generator. support x86/x64
+- [**168**星][2y] [spacehuhn/wifi_keylogger](https://github.com/spacehuhn/wifi_keylogger) DIY Arduino Wi-Fi Keylogger (Proof of Concept)
- [**168**星][4y] [C] [silver13/h8mini-acro](https://github.com/silver13/h8mini-acro) acro firmware for eachine H8 mini
-- [**168**星][2m] [Java] [rohanpadhye/jqf](https://github.com/rohanpadhye/jqf) JQF + Zest: Coverage-guided semantic fuzzing for Java.
-- [**168**星][7d] [Py] [rndinfosecguy/scavenger](https://github.com/rndinfosecguy/scavenger) Crawler (Bot) searching for credential leaks on different paste sites.
+- [**168**星][7m] [JS] [sentinel-official/sentinel](https://github.com/sentinel-official/sentinel) Sentinel is an interoperable secure network layer offering the Sentinel Service Chain exclusively for distributed & decentralized native services like - dVPN, Sentrix (dChat and dVoIP) and more.
+- [**168**星][5m] [PHP] [scr34m/php-malware-scanner](https://github.com/scr34m/php-malware-scanner) Scans PHP files for malwares and known threats
- [**168**星][11m] [Py] [ridter/cve-2018-15982_exp](https://github.com/ridter/cve-2018-15982_exp) exp of CVE-2018-15982
-- [**168**星][22d] [Py] [rhinosecuritylabs/ccat](https://github.com/rhinosecuritylabs/ccat) Cloud Container Attack Tool (CCAT) is a tool for testing security of container environments.
+- [**168**星][3d] [C++] [radareorg/r2ghidra-dec](https://github.com/radareorg/r2ghidra-dec) Deep ghidra decompiler integration for radare2
+- [**168**星][2m] [JS] [puresec/serverless-puresec-cli](https://github.com/puresec/serverless-puresec-cli) Serverless plugin for least privileges.
- [**168**星][4y] [Shell] [pr0x13/ibrutr](https://github.com/pr0x13/ibrutr) iCloud Bruteforce PoC - with MultiCurl
-- [**168**星][1m] [PowerShell] [olafhartong/attackdatamap](https://github.com/olafhartong/attackdatamap) A datasource assessment on an event level to show potential coverage or the MITRE ATT&CK framework
-- [**168**星][5m] [C#] [nettitude/sharpsocks](https://github.com/nettitude/sharpsocks) Tunnellable HTTP/HTTPS socks4a proxy written in C# and deployable via PowerShell
-- [**168**星][1m] [C#] [n0dec/malwless](https://github.com/n0dec/malwless) Test Blue Team detections without running any attack.
-- [**168**星][7m] [Shell] [munki/bootstrappr](https://github.com/munki/bootstrappr) A bare-bones tool to install a set of packages on a target volume.
+- [**168**星][2m] [C#] [n0dec/malwless](https://github.com/n0dec/malwless) Test Blue Team detections without running any attack.
- [**168**星][11m] [Py] [mnkgrover08-zz/whatsapp_automation](https://github.com/mnkgrover08-zz/whatsapp_automation) Whatsapp Automation is a collection of APIs that interact with WhatsApp messenger running in an Android emulator, allowing developers to build projects that automate sending and receiving messages, adding new contacts and broadcasting messages multiple contacts.
-- [**168**星][2y] [PowerShell] [javelinnetworks/honeypotbuster](https://github.com/javelinnetworks/honeypotbuster)
+- [**168**星][2y] [Py] [mdsecactivebreach/chameleon](https://github.com/mdsecactivebreach/chameleon) A tool for evading Proxy categorisation
+- [**168**星][4d] [Java] [mcdcorp/opentest](https://github.com/mcdcorp/opentest) Open source test automation tool for web applications, mobile apps and APIs
+- [**168**星][1y] [Java] [k-tamura/easybuggy](https://github.com/k-tamura/easybuggy) Too buggy web application
+- [**168**星][2y] [PS] [javelinnetworks/honeypotbuster](https://github.com/javelinnetworks/honeypotbuster)
+- [**168**星][6y] [Py] [infodox/python-dll-injection](https://github.com/infodox/python-dll-injection) Python toolkit for injecting DLL files into running processes on Windows
- [**168**星][5m] [C++] [immunant/selfrando](https://github.com/immunant/selfrando) Function order shuffling to defend against ROP and other types of code reuse
- [**168**星][2y] [HTML] [ihebski/angryfuzzer](https://github.com/ihebski/angryfuzzer) Tools for information gathering
-- [**168**星][4m] [Py] [googlecloudplatform/psq](https://github.com/googlecloudplatform/psq) Cloud Pub/Sub Task Queue for Python
-- [**168**星][2y] [Ruby] [fuzzapi/api-fuzzer](https://github.com/fuzzapi/api-fuzzer) API Fuzzer which allows to fuzz request attributes using common pentesting techniques and lists vulnerabilities
+- [**168**星][3m] [Py] [gnebbia/pdlist](https://github.com/gnebbia/pdlist) A passive subdomain finder
- [**168**星][4y] [Go] [filosottile/cve-2016-2107](https://github.com/filosottile/cve-2016-2107) Simple test for the May 2016 OpenSSL padding oracle (CVE-2016-2107)
- [**168**星][6y] [JS] [evilcos/xssprobe](https://github.com/evilcos/xssprobe) xss probe to steal page info: browser, ua, lang, referer, location, toplocation, cookie, domain, title, screen, flash, etc.
- [**168**星][4y] [Py] [dynetics/malfunction](https://github.com/dynetics/malfunction) Malware Analysis Tool using Function Level Fuzzy Hashing
-- [**168**星][3y] [cn33liz/msbuildshell](https://github.com/cn33liz/msbuildshell) MSBuildShell, a Powershell Host running within MSBuild.exe
+- [**168**星][26d] [chbrian/awesome-adversarial-examples-dl](https://github.com/chbrian/awesome-adversarial-examples-dl) A curated list of awesome resources for adversarial examples in deep learning
- [**168**星][6m] [PHP] [blackhole1/webrtcxss](https://github.com/blackhole1/webrtcxss) 利用XSS入侵内网(Use XSS automation Invade intranet)
+- [**168**星][2m] [TSQL] [baidu-security/app-env-docker](https://github.com/baidu-security/app-env-docker) 基于 Docker 的真实应用测试环境
+- [**168**星][11m] [Java] [anbai-inc/javaweb-codereview](https://github.com/anbai-inc/javaweb-codereview) 演示java代码审计的示例程序
- [**168**星][3y] [Shell] [0x90/wps-scripts](https://github.com/0x90/wps-scripts) WPS hacking scripts
-- [**167**星][8m] [dgiese/dustcloud-documentation](https://github.com/dgiese/dustcloud-documentation) Xiaomi Smart Home Device Reverse Engineering and Hacking - Documentation Repo
- [**167**星][3y] [JS] [norma-inc/atear](https://github.com/norma-inc/atear) Wireless Hacking, WiFi Security, Vulnerability Analyzer, Pentestration
- [**167**星][4y] [Py] [praetorian-code/gladius](https://github.com/praetorian-code/gladius) Automated Responder/secretsdump.py cracking
- [**167**星][8y] [Py] [zynamics/objc-helper-plugin-ida](https://github.com/zynamics/objc-helper-plugin-ida) 辅助Objective-C二进制文件的分析
- [**167**星][4y] [C] [vlad902/hacking-team-windows-kernel-lpe](https://github.com/vlad902/hacking-team-windows-kernel-lpe) Previously-0day exploit from the Hacking Team leak, written by Eugene Ching/Qavar.
- [**167**星][1y] [Py] [tintinweb/ida-batch_decompile](https://github.com/tintinweb/ida-batch_decompile) 将多个文件及其import用附加注释(外部参照,堆栈变量大小)反编译到pseudocode.c文件
- [**167**星][1y] [sumas/oscp-cheatsheet-god](https://github.com/sumas/oscp-cheatsheet-god)
-- [**167**星][4m] [C++] [strivexjun/aheadlib-x86-x64](https://github.com/strivexjun/aheadlib-x86-x64) hijack dll Source Code Generator. support x86/x64
-- [**167**星][2y] [spacehuhn/wifi_keylogger](https://github.com/spacehuhn/wifi_keylogger) DIY Arduino Wi-Fi Keylogger (Proof of Concept)
-- [**167**星][5m] [PHP] [scr34m/php-malware-scanner](https://github.com/scr34m/php-malware-scanner) Scans PHP files for malwares and known threats
+- [**167**星][28d] [ObjC] [subito-it/sbtuitesttunnel](https://github.com/subito-it/sbtuitesttunnel) Enable network mocks and more in UI Tests
+- [**167**星][1y] [Py] [spiderlabs/scavenger](https://github.com/spiderlabs/scavenger) is a multi-threaded post-exploitation scanning tool for scavenging systems, finding most frequently used files and folders as well as "interesting" files containing sensitive information.
+- [**167**星][2y] [Py] [smokeleeteveryday/ctf_writeups](https://github.com/smokeleeteveryday/ctf_writeups) CTF Writeups
+- [**167**星][5y] [JS] [skycrab/leakscan](https://github.com/skycrab/leakscan) 在线漏洞扫描
+- [**167**星][8d] [JS] [sereneblue/chameleon](https://github.com/sereneblue/chameleon) A WebExtension port of Random Agent Spoofer
- [**167**星][1y] [Swift] [rlovelett/langserver-swift](https://github.com/rlovelett/langserver-swift) A Swift implementation of the open Language Server Protocol.
-- [**167**星][2m] [JS] [puresec/serverless-puresec-cli](https://github.com/puresec/serverless-puresec-cli) Serverless plugin for least privileges.
-- [**167**星][2y] [PowerShell] [peewpw/invoke-bsod](https://github.com/peewpw/invoke-bsod) For when you want a computer to be done - without admin!
+- [**167**星][5d] [Java] [pwittchen/reactivewifi](https://github.com/pwittchen/reactivewifi) Android library listening available WiFi Access Points and related information with RxJava Observables
+- [**167**星][6d] [C] [odzhan/shellcode](https://github.com/odzhan/shellcode) 针对Windows/Linux/BSD的Shellcode
- [**167**星][2y] [Py] [northernsec/cve-scan](https://github.com/northernsec/cve-scan) Scan systems with NMap and parse the output to a list of CVE's, CWE's and DPE's
- [**167**星][5y] [CSS] [nknetobserver/nknetobserver.github.io](https://github.com/nknetobserver/nknetobserver.github.io) Scans of North Korean IP Space
- [**167**星][2y] [C++] [mortenschenk/bhusa2017](https://github.com/mortenschenk/bhusa2017) Content from presentation at BHUSA 2017
-- [**167**星][7d] [C++] [mipt-ilab/mipt-mips](https://github.com/mipt-ilab/mipt-mips) Cycle-accurate pre-silicon simulator of RISC-V and MIPS CPUs
-- [**167**星][2y] [Py] [mdsecactivebreach/chameleon](https://github.com/mdsecactivebreach/chameleon) A tool for evading Proxy categorisation
-- [**167**星][12d] [Java] [mcdcorp/opentest](https://github.com/mcdcorp/opentest) Open source test automation tool for web applications, mobile apps and APIs
+- [**167**星][2d] [C++] [mipt-ilab/mipt-mips](https://github.com/mipt-ilab/mipt-mips) Cycle-accurate pre-silicon simulator of RISC-V and MIPS CPUs
- [**167**星][2y] [Rust] [loggerhead/shadowsocks-rust](https://github.com/loggerhead/shadowsocks-rust) Oh my implementation of Shadowsocks in Rust
-- [**167**星][1y] [Java] [k-tamura/easybuggy](https://github.com/k-tamura/easybuggy) Too buggy web application
-- [**167**星][3m] [Py] [gnebbia/pdlist](https://github.com/gnebbia/pdlist) A passive subdomain finder
+- [**167**星][3y] [C] [hugsy/proxenet](https://github.com/hugsy/proxenet) The ONLY hacker friendly proxy for webapp pentests.
+- [**167**星][4m] [Py] [googlecloudplatform/psq](https://github.com/googlecloudplatform/psq) Cloud Pub/Sub Task Queue for Python
+- [**167**星][8m] [Py] [githacktools/billcipher](https://github.com/githacktools/billcipher) Information Gathering tool for a Website or IP address
- [**167**星][1y] [Java] [ge0rg/memorizingtrustmanager](https://github.com/ge0rg/memorizingtrustmanager) A "plugin" for Android Java to allow asking the user about SSL certificates
-- [**167**星][26d] [JS] [eggjs/egg-security](https://github.com/eggjs/egg-security) Security plugin for egg, force performance too.
-- [**167**星][24d] [chbrian/awesome-adversarial-examples-dl](https://github.com/chbrian/awesome-adversarial-examples-dl) A curated list of awesome resources for adversarial examples in deep learning
-- [**167**星][11m] [C] [carolemieux/afl-rb](https://github.com/carolemieux/afl-rb) AFL Fuzz 工具的修改版,针对 Rare Branches
-- [**167**星][7m] [Java] [bypass007/nessus_to_report](https://github.com/bypass007/nessus_to_report) Nessus中文报告自动化脚本
+- [**167**星][28d] [JS] [eggjs/egg-security](https://github.com/eggjs/egg-security) Security plugin for egg, force performance too.
+- [**167**星][8m] [PS] [dviros/credsleaker](https://github.com/dviros/credsleaker) Credsleaker allows an attacker to craft a highly convincing credentials prompt using Windows Security, validate it against the DC and in turn leak it via an HTTP request.
+- [**167**星][4m] [C] [droe/xnumon](https://github.com/droe/xnumon) monitor macOS for malicious activity
+- [**167**星][1y] [HTML] [c4o/chinesedarkwebcrawler](https://github.com/c4o/chinesedarkwebcrawler) 中文暗网爬虫
+- [**167**星][17d] [Py] [botherder/targetedthreats](https://github.com/botherder/targetedthreats) Collection of IOCs related to targeting of civil society
+- [**167**星][2m] [JS] [bencoder/js13k-2019](https://github.com/bencoder/js13k-2019) xx142-b2.exe. An entry for js13kgames 2019
- [**167**星][1y] [Py] [belane/linux-soft-exploit-suggester](https://github.com/belane/linux-soft-exploit-suggester) linux-soft-exploit-suggester:通过 exploit database 搜索 Linux 系统中有漏洞的软件
- [**167**星][1y] [Py] [bazad/ida_kernelcache](https://github.com/bazad/ida_kernelcache) 使用IDA Pro重建iOS内核缓存的C++类
-- [**167**星][2m] [TSQL] [baidu-security/app-env-docker](https://github.com/baidu-security/app-env-docker) 基于 Docker 的真实应用测试环境
-- [**166**星][11d] [C++] [radareorg/r2ghidra-dec](https://github.com/radareorg/r2ghidra-dec) Deep ghidra decompiler integration for radare2
+- [**166**星][5y] [PHP] [pentestmonkey/php-reverse-shell](https://github.com/pentestmonkey/php-reverse-shell)
+- [**166**星][4y] [C] [zeek/packet-bricks](https://github.com/zeek/packet-bricks) A netmap-based packet layer for distributing and filtering traffic.
+- [**166**星][16d] [C] [progmem/switch-fightstick](https://github.com/progmem/switch-fightstick) Proof-of-Concept LUFA Project for the Nintendo Switch. Uses reverse-engineering of the Pokken Tournament Pro Pad for the Wii U and Switch System v3.0.0
- [**166**星][1y] [Py] [wipi-hunter/pisavar](https://github.com/WiPi-Hunter/PiSavar) Detects PineAP module and starts deauthentication attack
-- [**166**星][26d] [Objective-C] [subito-it/sbtuitesttunnel](https://github.com/subito-it/sbtuitesttunnel) Enable network mocks and more in UI Tests
-- [**166**星][1y] [Py] [spiderlabs/scavenger](https://github.com/spiderlabs/scavenger) is a multi-threaded post-exploitation scanning tool for scavenging systems, finding most frequently used files and folders as well as "interesting" files containing sensitive information.
-- [**166**星][2y] [Py] [smokeleeteveryday/ctf_writeups](https://github.com/smokeleeteveryday/ctf_writeups) CTF Writeups
-- [**166**星][21d] [Py] [securestate/termineter](https://github.com/securestate/termineter) Smart Meter Security Testing Framework
+- [**166**星][9d] [Shell] [offensive-security/exploitdb-papers](https://github.com/offensive-security/exploitdb-papers) exploit-database-papers
+- [**166**星][10m] [Py] [tijme/angularjs-csti-scanner](https://github.com/tijme/angularjs-csti-scanner) Automated client-side template injection (sandbox escape/bypass) detection for AngularJS.
+- [**166**星][23d] [Py] [securestate/termineter](https://github.com/securestate/termineter) Smart Meter Security Testing Framework
- [**166**星][7y] [PHP] [secrule/falcon](https://github.com/secrule/falcon) Falcon是一款基于inotify-tools 开发的Web服务器文件监控平台 能够实时监控Web目录文件变化(新增,修改,删除),判断文件内容是否包含恶意代码,自动隔离常见Webshell,保证Web目录文件安全
-- [**166**星][11d] [C++] [radareorg/r2ghidra-dec](https://github.com/radareorg/r2ghidra-dec) Deep ghidra decompiler integration for radare2
-- [**166**星][3m] [PowerShell] [r3mrum/psdecode](https://github.com/r3mrum/psdecode) PowerShell script for deobfuscating encoded PowerShell scripts
+- [**166**星][3m] [Vala] [ricotz/plank](https://github.com/ricotz/plank) the simplest dock on the planet
+- [**166**星][3m] [PS] [r3mrum/psdecode](https://github.com/r3mrum/psdecode) PowerShell script for deobfuscating encoded PowerShell scripts
- [**166**星][7m] [proteas/unstripped-ios-kernels](https://github.com/proteas/unstripped-ios-kernels) Unstripped iOS Kernels
+- [**166**星][2y] [Py] [priyankgada/python-for-hackers](https://github.com/priyankgada/python-for-hackers) Python for Hackers - Youtube Tutorials - Priyank Gada
+- [**166**星][2y] [PS] [peewpw/invoke-bsod](https://github.com/peewpw/invoke-bsod) For when you want a computer to be done - without admin!
- [**166**星][10m] [Py] [mpgn/poodle-poc](https://github.com/mpgn/poodle-poc)
- [**166**星][2y] [Py] [monrocoury/forensic-tools](https://github.com/monrocoury/forensic-tools) A collection of tools for forensic analysis
- [**166**星][1y] [Py] [milo2012/pentest_scripts](https://github.com/milo2012/pentest_scripts)
-- [**166**星][6y] [Py] [infodox/python-dll-injection](https://github.com/infodox/python-dll-injection) Python toolkit for injecting DLL files into running processes on Windows
-- [**166**星][3y] [C] [hugsy/proxenet](https://github.com/hugsy/proxenet) The ONLY hacker friendly proxy for webapp pentests.
- [**166**星][1y] [Py] [hanc00l/weblogic_unserialize_exploit](https://github.com/hanc00l/weblogic_unserialize_exploit) java unserialize vul for weblogic exploit
-- [**166**星][3m] [fkie-cad/awesome-embedded-and-iot-security](https://github.com/fkie-cad/awesome-embedded-and-iot-security) A curated list of awesome embedded and IoT security resources.
-- [**166**星][8m] [PowerShell] [dviros/credsleaker](https://github.com/dviros/credsleaker) Credsleaker allows an attacker to craft a highly convincing credentials prompt using Windows Security, validate it against the DC and in turn leak it via an HTTP request.
-- [**166**星][4m] [C] [droe/xnumon](https://github.com/droe/xnumon) monitor macOS for malicious activity
-- [**166**星][3m] [cptgibbon/house-of-corrosion](https://github.com/cptgibbon/house-of-corrosion) A description of the "House of Corrosion" GLIBC heap exploitation technique.
+- [**166**星][2y] [Java] [cryptocubik/browserprint](https://github.com/cryptocubik/browserprint) An open-source browser fingerprinting suite.
- [**166**星][3y] [Haskell] [corsis/portfusion](https://github.com/corsis/portfusion) Haskell-powered cross-platform transport-layer distributed reverse / forward proxy & tunneling solution – currently available for all TCP protocols (RDP, VNC, HTTP(S), SSH, ...).
-- [**166**星][1y] [HTML] [c4o/chinesedarkwebcrawler](https://github.com/c4o/chinesedarkwebcrawler) 中文暗网爬虫
-- [**166**星][15d] [Py] [botherder/targetedthreats](https://github.com/botherder/targetedthreats) Collection of IOCs related to targeting of civil society
- [**166**星][2y] [C++] [bigric3/cve-2018-8120](https://github.com/bigric3/cve-2018-8120)
+- [**166**星][3y] [Shell] [backlion/hack-for-tools](https://github.com/backlion/hack-for-tools) 常用的黑客神器
- [**166**星][1y] [Py] [azizaltuntas/camelishing](https://github.com/azizaltuntas/camelishing) Social Engineering Tool
-- [**166**星][11m] [Java] [anbai-inc/javaweb-codereview](https://github.com/anbai-inc/javaweb-codereview) 演示java代码审计的示例程序
- [**166**星][2m] [Shell] [1n3/massbleed](https://github.com/1n3/massbleed) MassBleed SSL Vulnerability Scanner
-- [**165**星][20d] [Shell] [offensive-security/exploitdb-papers](https://github.com/offensive-security/exploitdb-papers) exploit-database-papers
+- [**165**星][2y] [C++] [spacehuhn/packetmonitor32](https://github.com/spacehuhn/packetmonitor32) ESP32 Packet Monitor + SD card!
- [**165**星][7y] [Perl] [yuri-gushin/roboo](https://github.com/yuri-gushin/roboo) uses advanced non-interactive HTTP challenge/response mechanisms to detect and subsequently mitigate HTTP robots
- [**165**星][5y] [Perl] [xme/hoover](https://github.com/xme/hoover) Wireless Probe Requests Sniffer
-- [**165**星][2y] [PowerShell] [ubeeri/invoke-usersimulator](https://github.com/ubeeri/invoke-usersimulator) Simulates common user behaviour on local and remote Windows hosts.
-- [**165**星][10m] [Py] [tijme/angularjs-csti-scanner](https://github.com/tijme/angularjs-csti-scanner) Automated client-side template injection (sandbox escape/bypass) detection for AngularJS.
+- [**165**星][2m] [C++] [westerndigitalcorporation/swerv-iss](https://github.com/westerndigitalcorporation/swerv-iss) Western Digital’s Open Source RISC-V SweRV Instruction Set Simulator
- [**165**星][3y] [Py] [sowish/lnscan](https://github.com/sowish/lnscan) 详细的内部网络信息扫描器
-- [**165**星][5y] [JS] [skycrab/leakscan](https://github.com/skycrab/leakscan) 在线漏洞扫描
- [**165**星][3m] [Scheme] [siraben/zkeme80](https://github.com/siraben/zkeme80) An assembler and operating system for the TI-84+ written in Scheme, Forth and Z80 assembly.
- [**165**星][7m] [Ruby] [r00t-3xp10it/msf-auxiliarys](https://github.com/r00t-3xp10it/msf-auxiliarys) My collection of metasploit auxiliary post-modules
- [**165**星][5y] [Roff] [opendns/security_ninjas_appsec_training](https://github.com/opendns/security_ninjas_appsec_training) OpenDNS application security training program
+- [**165**星][2y] [Shell] [moexin/easy-v2ray](https://github.com/moexin/easy-v2ray) 简单的V2ray一键配置包,小白也能简单上手。
- [**165**星][1y] [C] [jioundai/bluedroid](https://github.com/jioundai/bluedroid) PoCs of Vulnerabilities on Bluedroid
+- [**165**星][4m] [JS] [grempe/diceware](https://github.com/grempe/diceware) A tool for generating strong Diceware passwords, with entropy and crack time estimates.
- [**165**星][2y] [C++] [google/pawn](https://github.com/google/pawn) 从基于 Intel 的工作站和笔记本电脑中提取 BIOS 固件
-- [**165**星][8m] [Py] [githacktools/billcipher](https://github.com/githacktools/billcipher) Information Gathering tool for a Website or IP address
- [**165**星][3y] [Standard ML] [gamelinux/prads](https://github.com/gamelinux/prads) Passive Real-time Asset Detection System
+- [**165**星][2m] [C] [fullmetal5/bluebomb](https://github.com/fullmetal5/bluebomb) A Bluetooth exploit for the Nintendo Wii.
- [**165**星][2y] [C] [cyassl/cyassl](https://github.com/cyassl/cyassl) Please use wolfSSL now instead:
+- [**165**星][9m] [C++] [creepsky/creepminer](https://github.com/creepsky/creepminer) Burstcoin C++ CPU and GPU Miner
- [**165**星][4m] [C++] [creddefense/creddefense](https://github.com/creddefense/creddefense) Credential and Red Teaming Defense for Windows Environments
- [**165**星][2m] [Py] [chtd/psycopg2cffi](https://github.com/chtd/psycopg2cffi) Port to cffi with some speed improvements
- [**165**星][1y] [Py] [certcc/keyfinder](https://github.com/certcc/keyfinder) A tool for finding and analyzing private (and public) key files, including support for Android APK files.
-- [**165**星][9d] [Py] [adamcaudill/yawast](https://github.com/adamcaudill/yawast) YAWAST ...where a pentest starts. Security Toolkit for Web-based Applications
-- [**164**星][2m] [Java] [trojan-gfw/igniter](https://github.com/trojan-gfw/igniter) A trojan client for Android (UNDER CONSTRUCTION).
-- [**164**星][11d] [Rust] [hippolot/finshir](https://github.com/Hippolot/finshir)
-- [**164**星][2m] [C++] [westerndigitalcorporation/swerv-iss](https://github.com/westerndigitalcorporation/swerv-iss) Western Digital’s Open Source RISC-V SweRV Instruction Set Simulator
+- [**165**星][3d] [Py] [adamcaudill/yawast](https://github.com/adamcaudill/yawast) YAWAST ...where a pentest starts. Security Toolkit for Web-based Applications
+- [**164**星][2m] [Java] [lilifengcode/burpsuite-plugins-usage](https://github.com/lilifengcode/burpsuite-plugins-usage) Burpsuite-Plugins-Usage
+- [**164**星][13d] [Rust] [hippolot/finshir](https://github.com/Hippolot/finshir)
+- [**164**星][9m] [thehackingsage/hackdroid](https://github.com/thehackingsage/hackdroid) Penetration Testing Apps for Android
- [**164**星][3m] [Swift] [ryasnoy/applocker](https://github.com/ryasnoy/applocker) AppLocker - simple lock screen for iOS Application ( Swift 4+, iOS 9.0+) Touch ID / Face ID
-- [**164**星][3m] [Vala] [ricotz/plank](https://github.com/ricotz/plank) the simplest dock on the planet
-- [**164**星][2y] [Py] [priyankgada/python-for-hackers](https://github.com/priyankgada/python-for-hackers) Python for Hackers - Youtube Tutorials - Priyank Gada
+- [**164**星][2d] [Py] [paloaltonetworks/ansible-pan](https://github.com/paloaltonetworks/ansible-pan) Ansible modules for Palo Alto Networks NGFWs
- [**164**星][3y] [JS] [nvisium/django.nv](https://github.com/nvisium/django.nv) Vulnerable Django Application
-- [**164**星][2y] [Shell] [moexin/easy-v2ray](https://github.com/moexin/easy-v2ray) 简单的V2ray一键配置包,小白也能简单上手。
+- [**164**星][2y] [JS] [nospaceships/node-net-ping](https://github.com/nospaceships/node-net-ping) Ping and trace route to many hosts at once.
+- [**164**星][8d] [C#] [mr-un1k0d3r/redteamcsharpscripts](https://github.com/mr-un1k0d3r/redteamcsharpscripts) C# Script used for Red Team
+- [**164**星][11m] [Py] [mosuan/filescan](https://github.com/mosuan/filescan) 敏感文件扫描 / 二次判断降低误报率 / 扫描内容规则化 / 多目录扫描
- [**164**星][3m] [mdrights/digital-rights](https://github.com/mdrights/digital-rights) 抵抗国家机器对公民的监控
+- [**164**星][2y] [Py] [manisso/crips](https://github.com/manisso/crips) IP Tools To quickly get information about IP Address's, Web Pages and DNS records.
- [**164**星][3y] [C] [jedisct1/blacknurse](https://github.com/jedisct1/blacknurse) BlackNurse attack PoC
- [**164**星][4y] [C] [jdbirdwell/afl](https://github.com/jdbirdwell/afl) american fuzzy lop for network fuzzing (unofficial) -- official afl site is
-- [**164**星][4m] [JS] [grempe/diceware](https://github.com/grempe/diceware) A tool for generating strong Diceware passwords, with entropy and crack time estimates.
+- [**164**星][3y] [C#] [jamesjlinden/unity-decompiled](https://github.com/jamesjlinden/unity-decompiled)
- [**164**星][11m] [Py] [ghostmanager/domaincheck](https://github.com/ghostmanager/domaincheck) DomainCheck is designed to assist operators with monitoring changes related to their domain names. This includes negative changes in categorization, VirusTotal detections, and appearances on malware blacklists. DomainCheck currently works only with NameCheap.
- [**164**星][2y] [Py] [fs0c131y/aadhaarsearchengine](https://github.com/fs0c131y/aadhaarsearchengine) Find Aadhaar cards thanks to Google
+- [**164**星][2m] [C] [elementsproject/secp256k1-zkp](https://github.com/elementsproject/secp256k1-zkp) Experimental fork of libsecp256k1 with support for pedersen commitments and range proofs.
+- [**164**星][1y] [Py] [c0ny1/pwcracker](https://github.com/c0ny1/pwcracker) 一款插件化的密码爆破框架
- [**164**星][3y] [Shell] [brandonprry/wicked_cool_shell_scripts_2e](https://github.com/brandonprry/wicked_cool_shell_scripts_2e) Full shell scripts for the second edition of Wicked Cool Shell Scripts
-- [**164**星][3y] [Shell] [backlion/hack-for-tools](https://github.com/backlion/hack-for-tools) 常用的黑客神器
-- [**164**星][6m] [PowerShell] [alsidofficial/wsuspendu](https://github.com/alsidofficial/wsuspendu) Implement WSUSpendu attack
-- [**163**星][5y] [PHP] [pentestmonkey/php-reverse-shell](https://github.com/pentestmonkey/php-reverse-shell)
-- [**163**星][13d] [C] [progmem/switch-fightstick](https://github.com/progmem/switch-fightstick) Proof-of-Concept LUFA Project for the Nintendo Switch. Uses reverse-engineering of the Pokken Tournament Pro Pad for the Wii U and Switch System v3.0.0
+- [**164**星][2y] [PS] [ankh2054/windows-pentest](https://github.com/ankh2054/windows-pentest) Windows Pentest Scripts
+- [**164**星][6m] [PS] [alsidofficial/wsuspendu](https://github.com/alsidofficial/wsuspendu) Implement WSUSpendu attack
+- [**163**星][2y] [sniperoj/attack-defense-framework](https://github.com/SniperOJ/Attack-Defense-Framework)
- [**163**星][5y] [Py] [q2h1cg/cms-exploit-framework](https://github.com/Q2h1Cg/CMS-Exploit-Framework) CMS Exploit Framework
+- [**163**星][26d] [PS] [dsccommunity/activedirectorydsc](https://github.com/dsccommunity/ActiveDirectoryDsc) 包含用于部署和配置Active Directory的DSC资源
- [**163**星][6m] [C] [bytecode77/r77-rootkit](https://github.com/bytecode77/r77-rootkit) Ring 3 Rootkit DLL
+- [**163**星][2y] [HTML] [threatexpress/metatwin](https://github.com/threatexpress/metatwin) The project is designed as a file resource cloner. Metadata, including digital signature, is extracted from one file and injected into another.
- [**163**星][1y] [Py] [walkerfuz/morph](https://github.com/walkerfuz/morph) An open source fuzzing framework for fun.
- [**163**星][6m] [Py] [wafpassproject/wafpass](https://github.com/wafpassproject/wafpass) wafpass:利用所有Payload 的绕过技巧分析参数,旨在为安全解决方案(例如WAF)确定基准。
- [**163**星][4y] [C] [uptimejp/sql_firewall](https://github.com/uptimejp/sql_firewall) SQL Firewall Extension for PostgreSQL
-- [**163**星][19d] [Py] [swisskyrepo/graphqlmap](https://github.com/swisskyrepo/graphqlmap) GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes.
+- [**163**星][3y] [C] [teran-mckinney/raru](https://github.com/teran-mckinney/raru) raru: run as random user
+- [**163**星][21d] [Py] [swisskyrepo/graphqlmap](https://github.com/swisskyrepo/graphqlmap) GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes.
- [**163**星][3y] [Py] [sourcekris/rsactftool](https://github.com/sourcekris/rsactftool) RSA CTF Tool - Tool to attack RSA public keys and ciphertexts in common ways
- [**163**星][3y] [C] [scslab/tcpcrypt](https://github.com/scslab/tcpcrypt) Fast TCP encryption
- [**163**星][2y] [Py] [rxwx/cve-2017-8570](https://github.com/rxwx/cve-2017-8570) Proof of Concept exploit for CVE-2017-8570
-- [**163**星][4m] [Py] [racepwn/racepwn](https://github.com/racepwn/racepwn) a librace library and a racepwn utility that are designed to test a race condition attack through protocols that use a TCP connection
-- [**163**星][3m] [Py] [pinterest/thrift-tools](https://github.com/pinterest/thrift-tools) thrift-tools is a library and a set of tools to introspect Apache Thrift traffic.
-- [**163**星][2y] [JS] [nospaceships/node-net-ping](https://github.com/nospaceships/node-net-ping) Ping and trace route to many hosts at once.
-- [**163**星][11m] [Py] [mosuan/filescan](https://github.com/mosuan/filescan) 敏感文件扫描 / 二次判断降低误报率 / 扫描内容规则化 / 多目录扫描
+- [**163**星][4m] [Py] [pinterest/thrift-tools](https://github.com/pinterest/thrift-tools) thrift-tools is a library and a set of tools to introspect Apache Thrift traffic.
+- [**163**星][2y] [C] [oalabs/blobrunner](https://github.com/oalabs/blobrunner) Quickly debug shellcode extracted during malware analysis
- [**163**星][3y] [Makefile] [kost/nmap-android](https://github.com/kost/nmap-android) Nmap on Android - Makefile/diff/scripts to build it with Android NDK
-- [**163**星][3y] [C#] [jamesjlinden/unity-decompiled](https://github.com/jamesjlinden/unity-decompiled)
+- [**163**星][12d] [C++] [jrfonseca/drmingw](https://github.com/jrfonseca/drmingw) Postmortem debugging tools for MinGW.
- [**163**星][8m] [hd421/monitoring-systems-cheat-sheet](https://github.com/hd421/monitoring-systems-cheat-sheet) A cheat sheet for pentesters and researchers about vulnerabilities in well-known monitoring systems.
- [**163**星][2y] [Shell] [functionclub/fail2ban](https://github.com/functionclub/fail2ban) 最简单的防止SSH暴力破解的脚本
-- [**163**星][2m] [C] [elementsproject/secp256k1-zkp](https://github.com/elementsproject/secp256k1-zkp) Experimental fork of libsecp256k1 with support for pedersen commitments and range proofs.
+- [**163**星][3m] [JS] [friedrith/node-wifi](https://github.com/friedrith/node-wifi)
- [**163**星][10m] [C] [davidgfnet/wireshark-whatsapp](https://github.com/davidgfnet/wireshark-whatsapp) Whatsapp dissector plugin for wireshark
+- [**163**星][2y] [PS] [cyberark/riskyspn](https://github.com/cyberark/riskyspn) Detect and abuse risky SPNs
- [**163**星][1y] [Py] [boy-hack/poc-t](https://github.com/boy-hack/poc-t) 基于poc-t 并在此基础上增加批量功能!
- [**163**星][2m] [C++] [bastibl/gr-ieee802-15-4](https://github.com/bastibl/gr-ieee802-15-4) IEEE 802.15.4 ZigBee Transceiver
-- [**163**星][2y] [PowerShell] [ankh2054/windows-pentest](https://github.com/ankh2054/windows-pentest) Windows Pentest Scripts
-- [**163**星][5m] [C++] [a5-/gamerfood_csgo](https://github.com/a5-/gamerfood_csgo) Fully featured CSGO cheat by Team Gamerfood
+- [**163**星][4m] [Py] [alpha1e0/kiwi](https://github.com/alpha1e0/kiwi) kiwi:安全源码审计工具
+- [**162**星][18d] [Groovy] [jeremylong/dependency-check-gradle](https://github.com/jeremylong/dependency-check-gradle) The dependency-check gradle plugin allows projects to monitor dependent libraries for known, published vulnerabilities.
- [**162**星][2y] [Py] [hackatnow/shodanwave](https://github.com/hackatnow/shodanwave) Shodanwave is a tool for exploring and obtaining information from Netwave IP Camera.
-- [**162**星][2y] [sniperoj/attack-defense-framework](https://github.com/SniperOJ/Attack-Defense-Framework)
+- [**162**星][3y] [Py] [chenjiandongx/github-spider](https://github.com/chenjiandongx/Github-spider) Github 仓库及用户分析爬虫
- [**162**星][4y] [Py] [osirislab/fentanyl](https://github.com/osirislab/Fentanyl) 简化打补丁
-- [**162**星][2y] [HTML] [threatexpress/metatwin](https://github.com/threatexpress/metatwin) The project is designed as a file resource cloner. Metadata, including digital signature, is extracted from one file and injected into another.
- [**162**星][2m] [Py] [x64dbg/x64dbgida](https://github.com/x64dbg/x64dbgida) x64dbg插件,用于IDA数据导入导出
- [**162**星][3y] [Py] [wh1t3rh1n0/air-hammer](https://github.com/wh1t3rh1n0/air-hammer) A WPA Enterprise horizontal brute-force attack tool
+- [**162**星][2m] [Shell] [securityriskadvisors/vectr](https://github.com/securityriskadvisors/vectr) VECTR is a tool that facilitates tracking of your red and blue team testing activities to measure detection and prevention capabilities across different attack scenarios
+- [**162**星][1y] [Py] [saltstack/salt-contrib](https://github.com/saltstack/salt-contrib) Salt Module Contributions
- [**162**星][8m] [Py] [sa7mon/miniprint](https://github.com/sa7mon/miniprint) A medium interaction printer honeypot
-- [**162**星][1m] [Py] [paloaltonetworks/ansible-pan](https://github.com/paloaltonetworks/ansible-pan) Ansible modules for Palo Alto Networks NGFWs
- [**162**星][1m] [Py] [opentimestamps/opentimestamps-client](https://github.com/opentimestamps/opentimestamps-client) Command-line tool to create and validate timestamp proofs with the OpenTimestamps protocol
-- [**162**星][25d] [Py] [neo23x0/yaranalyzer](https://github.com/neo23x0/yaranalyzer) Yara Rule Analyzer and Statistics
+- [**162**星][27d] [Py] [neo23x0/yaranalyzer](https://github.com/neo23x0/yaranalyzer) Yara Rule Analyzer and Statistics
- [**162**星][2m] [Py] [mykings/python-masscan](https://github.com/mykings/python-masscan) python-masscan is a python library which helps in using masscan port scanner.
-- [**162**星][2y] [Py] [manisso/crips](https://github.com/manisso/crips) IP Tools To quickly get information about IP Address's, Web Pages and DNS records.
-- [**162**星][10d] [C++] [jrfonseca/drmingw](https://github.com/jrfonseca/drmingw) Postmortem debugging tools for MinGW.
- [**162**星][6y] [XSLT] [ironbee/waf-research](https://github.com/ironbee/waf-research) WAF Research
-- [**162**星][5y] [PowerShell] [harmj0y/powerup](https://github.com/harmj0y/powerup) This version of PowerUp is now unsupported. See
+- [**162**星][10m] [Scala] [input-output-hk/mantis](https://github.com/input-output-hk/mantis) A Scala based client for Ethereum Classic.
+- [**162**星][5y] [PS] [harmj0y/powerup](https://github.com/harmj0y/powerup) This version of PowerUp is now unsupported. See
- [**162**星][6y] [C] [gdbinit/readmem](https://github.com/gdbinit/readmem) A small OS X/iOS userland util to dump processes memory
- [**162**星][2y] [C] [gabrielrcouto/reaver-wps](https://github.com/gabrielrcouto/reaver-wps) Brute force attack against Wifi Protected Setup
- [**162**星][2y] [C++] [encounter/futurerestore](https://github.com/encounter/futurerestore) (unmaintained) iOS upgrade and downgrade tool utilizing SHSH blobs (unofficial fork supporting iOS 11 and newer devices)
-- [**162**星][29d] [Visual Basic] [dzzie/sysanalyzer](https://github.com/dzzie/sysanalyzer) Automated malcode analysis system - read more ->
+- [**162**星][1m] [Visual Basic .NET] [dzzie/sysanalyzer](https://github.com/dzzie/sysanalyzer) Automated malcode analysis system - read more ->
- [**162**星][4m] [C] [dyne/dnscrypt-proxy](https://github.com/dyne/dnscrypt-proxy) DNSCrypt-Proxy repository, frankly maintained for what it does (no new features planned)
+- [**162**星][7m] [Py] [dyboy2017/wtf_scan](https://github.com/dyboy2017/wtf_scan) 一款WEB端的在线敏感资产扫描器,扫描网站中的指纹、漏洞及相关敏感信息,针对已经识别的CMS指纹,进行二次0day扫描利用,一键GetShell也不是不可能!!!
+- [**162**星][2y] [Shell] [danilabs/tools-tbhm](https://github.com/danilabs/tools-tbhm) Tools of "The Bug Hunters Methodology V2 by
- [**162**星][7m] [Py] [d4stiny/dell-support-assist-rce-poc](https://github.com/d4stiny/dell-support-assist-rce-poc)
-- [**162**星][2y] [PowerShell] [cyberark/riskyspn](https://github.com/cyberark/riskyspn) Detect and abuse risky SPNs
- [**162**星][5m] [Py] [cvandeplas/elk-forensics](https://github.com/cvandeplas/elk-forensics) ELK configuration files for Forensic Analysts and Incident Handlers (unmaintained)
- [**162**星][2m] [JS] [ant4g0nist/vegvisir](https://github.com/ant4g0nist/vegvisir) 基于浏览器的LLDB 调试器
-- [**162**星][4m] [Py] [alpha1e0/kiwi](https://github.com/alpha1e0/kiwi) kiwi:安全源码审计工具
+- [**162**星][5m] [C++] [a5-/gamerfood_csgo](https://github.com/a5-/gamerfood_csgo) Fully featured CSGO cheat by Team Gamerfood
- [**162**星][2y] [Py] [hackatnow/shodanwave](https://github.com/hackatnow/shodanwave) Shodanwave is a tool for exploring and obtaining information from Netwave IP Camera.
- [**161**星][1y] [Java] [iqiyi/dexsplitter](https://github.com/iqiyi/dexsplitter) Analyze contribution rate of each module to the apk size
-- [**161**星][3y] [Py] [chenjiandongx/github-spider](https://github.com/chenjiandongx/Github-spider) Github 仓库及用户分析爬虫
-- [**161**星][2m] [Java] [lilifengcode/burpsuite-plugins-usage](https://github.com/lilifengcode/burpsuite-plugins-usage) Burpsuite-Plugins-Usage
+- [**161**星][24d] [C#] [hmbsbige/nattypetester](https://github.com/hmbsbige/nattypetester) 测试当前网络的NAT类型(STUN)
- [**161**星][4y] [Py] [appknox/afe](https://github.com/appknox/AFE) Android Framework for Exploitation, is a framework for exploiting android based devices
- [**161**星][2y] [Py] [tulpar/tulpar](https://github.com/tulpar/tulpar) Tulpar - Web Vulnerability Scanner
+- [**161**星][2m] [Py] [lc/theftfuzzer](https://github.com/lc/theftfuzzer) TheftFuzzer is a tool that fuzzes Cross-Origin Resource Sharing implementations for common misconfigurations.
+- [**161**星][8m] [C++] [momo5502/cod-exploits](https://github.com/momo5502/cod-exploits)
+- [**161**星][6m] [Py] [yassineaboukir/cve-2018-0296](https://github.com/yassineaboukir/cve-2018-0296) Script to test for Cisco ASA path traversal vulnerability (CVE-2018-0296) and extract system information.
+- [**161**星][11m] [HTML] [yaph/domxssscanner](https://github.com/yaph/domxssscanner) DOMXSS Scanner is an online tool to scan source code for DOM based XSS vulnerabilities
+- [**161**星][7m] [C#] [xorrior/random-csharptools](https://github.com/xorrior/random-csharptools) Collection of CSharp Assemblies focused on Post-Exploitation Capabilities
+- [**161**星][2m] [Py] [wish-i-was/femida](https://github.com/wish-i-was/femida) Automated blind-xss search for Burp Suite
- [**161**星][1y] [Py] [veorq/blueflower](https://github.com/veorq/blueflower) a grep -r for secrets
- [**161**星][1m] [Py] [staticafi/symbiotic](https://github.com/staticafi/symbiotic) Symbiotic is a tool for finding bugs in computer programs based on instrumentation, program slicing and KLEE
- [**161**星][2y] [secwiki/hack-movie](https://github.com/secwiki/hack-movie) 黑客相关的电视剧/电影/纪录片
-- [**161**星][1y] [Py] [saltstack/salt-contrib](https://github.com/saltstack/salt-contrib) Salt Module Contributions
+- [**161**星][15d] [Py] [regala/burp-scope-monitor](https://github.com/regala/burp-scope-monitor) Burp Suite Extension to monitor new scope
+- [**161**星][6m] [C] [rapid7/mettle](https://github.com/rapid7/mettle) This is an implementation of a native-code Meterpreter, designed for portability, embeddability, and low resource utilization.
- [**161**星][2y] [Py] [rajeshmajumdar/ploitkit](https://github.com/rajeshmajumdar/ploitkit) The Hacker's ToolBox
- [**161**星][8y] [C] [poelzi/openchronos](https://github.com/poelzi/openchronos) Open Source Firmware for the TI EZ430-Chronos Watch
- [**161**星][3y] [Py] [pentesteres/delorean](https://github.com/pentesteres/delorean) NTP Main-in-the-Middle tool
- [**161**星][3y] [Go] [openwhitebox/aes](https://github.com/openwhitebox/aes) Implementations of white-box AES constructions and their cryptanalyses.
-- [**161**星][5m] [C] [odzhan/shellcode](https://github.com/odzhan/shellcode) 针对Windows/Linux/BSD的Shellcode
-- [**161**星][2y] [C] [oalabs/blobrunner](https://github.com/oalabs/blobrunner) Quickly debug shellcode extracted during malware analysis
- [**161**星][2y] [netbiosx/default-credentials](https://github.com/netbiosx/default-credentials) Default usernames and passwords for various systems (VoIP,IPMI,Oracle).
-- [**161**星][1m] [C#] [mr-un1k0d3r/redteamcsharpscripts](https://github.com/mr-un1k0d3r/redteamcsharpscripts) C# Script used for Red Team
+- [**161**星][1y] [msuhanov/regf](https://github.com/msuhanov/regf) Windows注册表文件格式规范
- [**161**星][3y] [miserlou/mackenzie](https://github.com/miserlou/mackenzie) AWS Lambda Infection Toolkit // Persistent Lambda Malware PoC
+- [**161**星][1y] [jnusimba/linuxsecnotes](https://github.com/jnusimba/linuxsecnotes) some learning notes about Linux Security
- [**161**星][5m] [C] [jakeajames/jelbreklib](https://github.com/jakeajames/jelbreklib) Give me tfp0, I give you jelbrek
-- [**161**星][10m] [Scala] [input-output-hk/mantis](https://github.com/input-output-hk/mantis) A Scala based client for Ethereum Classic.
-- [**161**星][3m] [JS] [friedrith/node-wifi](https://github.com/friedrith/node-wifi)
+- [**161**星][3y] [Py] [hkm/whoishere.py](https://github.com/hkm/whoishere.py) WIFI Client Detection - Identify people by assigning a name to a device performing a wireless probe request.
+- [**161**星][3y] [Shell] [hiroshimanrise/anonym8](https://github.com/hiroshimanrise/anonym8) Sets Transparent proxy tunnel through Tor, I2P, Privoxy, Polipo and modify DNS; Include Anonymizing Relay Monitor (arm), macchanger and wipe (Cleans ram/cache & swap-space) features, ID spoofing has never been so easy.
- [**161**星][3m] [Java] [eth-sri/securify](https://github.com/eth-sri/securify) Security Scanner for Ethereum Smart Contracts
-- [**161**星][13d] [C++] [devinacker/bsnes-plus](https://github.com/devinacker/bsnes-plus) debug-oriented fork of bsnes
-- [**161**星][25d] [Py] [davedoesdev/python-jwt](https://github.com/davedoesdev/python-jwt) Python module for generating and verifying JSON Web Tokens
-- [**161**星][2y] [Shell] [danilabs/tools-tbhm](https://github.com/danilabs/tools-tbhm) Tools of "The Bug Hunters Methodology V2 by
+- [**161**星][8m] [C] [eniac/faas](https://github.com/eniac/faas) Factoring as a Service
+- [**161**星][2y] [Go] [elithrar/simple-scrypt](https://github.com/elithrar/simple-scrypt) A convenience library for generating, comparing and inspecting password hashes using the scrypt KDF in Go
+- [**161**星][4d] [C++] [devinacker/bsnes-plus](https://github.com/devinacker/bsnes-plus) debug-oriented fork of bsnes
+- [**161**星][8m] [HTML] [decal/werdlists](https://github.com/decal/werdlists)
+- [**161**星][27d] [Py] [davedoesdev/python-jwt](https://github.com/davedoesdev/python-jwt) Python module for generating and verifying JSON Web Tokens
- [**161**星][3y] [Py] [ctfs/write-ups-tools](https://github.com/ctfs/write-ups-tools) A collection of tools used to maintain and create CTF write-up folders
-- [**161**星][10d] [Py] [citizenlab/test-lists](https://github.com/citizenlab/test-lists) URL testing lists intended for discovering website censorship
-- [**161**星][1y] [Py] [c0ny1/pwcracker](https://github.com/c0ny1/pwcracker) 一款插件化的密码爆破框架
+- [**161**星][5d] [Py] [citizenlab/test-lists](https://github.com/citizenlab/test-lists) URL testing lists intended for discovering website censorship
+- [**161**星][3m] [Py] [blacktop/virustotal-api](https://github.com/blacktop/virustotal-api) Virus Total Public/Private/Intel API
+- [**161**星][3y] [Py] [artkond/cisco-rce](https://github.com/artkond/cisco-rce) CVE-2017-3881 Cisco Catalyst Remote Code Execution PoC
+- [**161**星][21d] [C] [altramayor/gatekeeper](https://github.com/altramayor/gatekeeper) First open source DDoS protection system
- [**161**星][2y] [Py] [aim4r/voldiff](https://github.com/aim4r/voldiff) Malware Memory Footprint Analysis based on Volatility
-- [**160**星][16d] [Groovy] [jeremylong/dependency-check-gradle](https://github.com/jeremylong/dependency-check-gradle) The dependency-check gradle plugin allows projects to monitor dependent libraries for known, published vulnerabilities.
-- [**160**星][24d] [PowerShell] [dsccommunity/activedirectorydsc](https://github.com/dsccommunity/ActiveDirectoryDsc) 包含用于部署和配置Active Directory的DSC资源
-- [**160**星][2m] [Py] [lc/theftfuzzer](https://github.com/lc/theftfuzzer) TheftFuzzer is a tool that fuzzes Cross-Origin Resource Sharing implementations for common misconfigurations.
+- [**161**星][5d] [Shell] [0xmachos/mosl](https://github.com/0xmachos/mosl) Bash script to audit and fix macOS Catalina (10.15.x) security settings
+- [**161**星][6m] [0xbug/biu](https://github.com/0xbug/biu) 网络资产发现、漏洞扫描
+- [**160**星][24d] [JS] [paperseller/chn-iplist](https://github.com/paperseller/chn-iplist) Chnroutes rules for routers、Shadowrocket、Quantumult、Kitsunebi、acl、BifrostV、v2rayNG、clash、pac、v2ray config file.
- [**160**星][10m] [C] [iaik/sgxrop](https://github.com/IAIK/sgxrop) The code to the SGX-ROP paper
-- [**160**星][8m] [C++] [momo5502/cod-exploits](https://github.com/momo5502/cod-exploits)
- [**160**星][2y] [C] [ninjaprawn/async_wake-fun](https://github.com/ninjaprawn/async_wake-fun) iOS/MacOS 11 内核双释放漏洞 exp
-- [**160**星][11m] [HTML] [yaph/domxssscanner](https://github.com/yaph/domxssscanner) DOMXSS Scanner is an online tool to scan source code for DOM based XSS vulnerabilities
-- [**160**星][6m] [C#] [xorrior/random-csharptools](https://github.com/xorrior/random-csharptools) Collection of CSharp Assemblies focused on Post-Exploitation Capabilities
-- [**160**星][2m] [Py] [wish-i-was/femida](https://github.com/wish-i-was/femida) Automated blind-xss search for Burp Suite
-- [**160**星][9m] [thehackingsage/hackdroid](https://github.com/thehackingsage/hackdroid) Penetration Testing Apps for Android
-- [**160**星][12m] [splunk/botsv1](https://github.com/splunk/botsv1) A sample security dataset and CTF platform
+- [**160**星][3y] [C] [yifanlu/psvimgtools](https://github.com/yifanlu/psvimgtools) Decrypt Vita CMA backups
+- [**160**星][19d] [AGS Script] [tinyfpga/tinyfpga-bootloader](https://github.com/tinyfpga/tinyfpga-bootloader) An open source USB bootloader for FPGAs
+- [**160**星][2y] [Java] [the404hacking/androrat](https://github.com/the404hacking/androrat) AndroRAT | Remote Administrator Tool for Android OS Hacking
+- [**160**星][1y] [splunk/botsv1](https://github.com/splunk/botsv1) A sample security dataset and CTF platform
- [**160**星][4y] [PHP] [spiderlabs/cryptomg](https://github.com/spiderlabs/cryptomg) CryptOMG is a configurable CTF style test bed that highlights common flaws in cryptographic implementations.
- [**160**星][3y] [C++] [sakshamsharma/http-over-protocol](https://github.com/sakshamsharma/http-over-protocol) HOP: A proxy server to enable arbitrary protocols behind an HTTP proxy
-- [**160**星][13d] [Py] [regala/burp-scope-monitor](https://github.com/regala/burp-scope-monitor) Burp Suite Extension to monitor new scope
-- [**160**星][6m] [C] [rapid7/mettle](https://github.com/rapid7/mettle) This is an implementation of a native-code Meterpreter, designed for portability, embeddability, and low resource utilization.
- [**160**星][3m] [JS] [mrgeffitas/ironsquirrel](https://github.com/mrgeffitas/ironsquirrel) Encrypted exploit delivery for the masses
- [**160**星][3y] [Py] [moha99sa/evilap_defender](https://github.com/moha99sa/evilap_defender) Protect your Wireless Network from Evil Access Points!
- [**160**星][2y] [Py] [matiasb/unpy2exe](https://github.com/matiasb/unpy2exe) Extract .pyc files from executables created with py2exe
-- [**160**星][1y] [jnusimba/linuxsecnotes](https://github.com/jnusimba/linuxsecnotes) some learning notes about Linux Security
-- [**160**星][3y] [Shell] [hiroshimanrise/anonym8](https://github.com/hiroshimanrise/anonym8) Sets Transparent proxy tunnel through Tor, I2P, Privoxy, Polipo and modify DNS; Include Anonymizing Relay Monitor (arm), macchanger and wipe (Cleans ram/cache & swap-space) features, ID spoofing has never been so easy.
+- [**160**星][2m] [JS] [lelinhtinh/de4js](https://github.com/lelinhtinh/de4js) JavaScript Deobfuscator and Unpacker
+- [**160**星][3y] [Ruby] [kost/dockscan](https://github.com/kost/dockscan) dockscan:docker安全漏洞扫描和审计工具。
+- [**160**星][8m] [klionsec/redteammanual](https://github.com/klionsec/redteammanual)
+- [**160**星][2y] [Py] [juancarlospaco/css-html-js-minify](https://github.com/juancarlospaco/css-html-js-minify) StandAlone Async cross-platform Minifier for the Web.
+- [**160**星][3m] [C#] [hunniccyber/sharpsniper](https://github.com/hunniccyber/sharpsniper) Find specific users in active directory via their username and logon IP address
- [**160**星][2m] [C++] [gregwar/fatcat](https://github.com/gregwar/fatcat) FAT filesystems explore, extract, repair, and forensic tool
- [**160**星][1y] [HTML] [exploitprotocol/mobile-security-wiki](https://github.com/exploitprotocol/mobile-security-wiki)
-- [**160**星][8m] [C] [eniac/faas](https://github.com/eniac/faas) Factoring as a Service
-- [**160**星][2y] [Go] [elithrar/simple-scrypt](https://github.com/elithrar/simple-scrypt) A convenience library for generating, comparing and inspecting password hashes using the scrypt KDF in Go
+- [**160**星][15d] [Shell] [dshield-isc/dshield](https://github.com/dshield-isc/dshield) DShield Raspberry Pi Sensor
- [**160**星][2y] [C] [dhavalkapil/libdheap](https://github.com/dhavalkapil/libdheap) A shared (dynamic) library that can be transparently injected into different processes to detect memory corruption in glibc heap
-- [**160**星][8m] [HTML] [decal/werdlists](https://github.com/decal/werdlists)
- [**160**星][3m] [Py] [d0c-s4vage/gramfuzz](https://github.com/d0c-s4vage/gramfuzz) gramfuzz is a grammar-based fuzzer that lets one define complex grammars to generate text and binary data formats.
-- [**160**星][3m] [Py] [blacktop/virustotal-api](https://github.com/blacktop/virustotal-api) Virus Total Public/Private/Intel API
-- [**160**星][16d] [JS] [bkimminich/juice-shop-ctf](https://github.com/bkimminich/juice-shop-ctf) Juice Shop CTF 环境配置工具
-- [**160**星][3y] [Py] [artkond/cisco-rce](https://github.com/artkond/cisco-rce) CVE-2017-3881 Cisco Catalyst Remote Code Execution PoC
+- [**160**星][18d] [JS] [bkimminich/juice-shop-ctf](https://github.com/bkimminich/juice-shop-ctf) Juice Shop CTF 环境配置工具
- [**160**星][3y] [Py] [504ensicslabs/damm](https://github.com/504ensicslabs/damm) Differential Analysis of Malware in Memory
-- [**159**星][10d] [HTML] [v2ray/v2ray.github.io](https://github.com/v2ray/v2ray.github.io) V2Ray Portal
+- [**159**星][3d] [HTML] [v2ray/v2ray.github.io](https://github.com/v2ray/v2ray.github.io) V2Ray Portal
+- [**159**星][7m] [PS] [nickrod518/powershell-scripts](https://github.com/nickrod518/powershell-scripts) PowerShell scripts ranging from SCCM, MSO, AD, and other corporate enterprise uses... to sending cat facts to coworkers.
- [**159**星][7m] [C] [zhuhuibeishadiao/newhidedriverex](https://github.com/zhuhuibeishadiao/newhidedriverex) Hide Driver By MiProcessLoaderEntry
-- [**159**星][3y] [C] [yifanlu/psvimgtools](https://github.com/yifanlu/psvimgtools) Decrypt Vita CMA backups
-- [**159**星][6m] [Py] [yassineaboukir/cve-2018-0296](https://github.com/yassineaboukir/cve-2018-0296) Script to test for Cisco ASA path traversal vulnerability (CVE-2018-0296) and extract system information.
+- [**159**星][4m] [whoisflynn/oscp-exam-report-template](https://github.com/whoisflynn/oscp-exam-report-template) Modified template for the OSCP Exam and Labs. Used during my passing attempt
+- [**159**星][1m] [F#] [softsec-kaist/codealchemist](https://github.com/softsec-kaist/codealchemist) Semantics-aware Code Generation for Finding JS engine Vulnerabilities
- [**159**星][2m] [smilezxlee/crackediosapps](https://github.com/smilezxlee/crackediosapps) iOS端破解版App集合,包含破解版QQ、破解版抖音、破解版百度网盘、破解版麻花、钉钉打卡助手、破解版墨墨背单词、破解版网易云音乐、破解版芒果TV
+- [**159**星][9m] [Py] [sch3m4/androidpatternlock](https://github.com/sch3m4/androidpatternlock) A little Python tool to crack the Pattern Lock on Android devices
- [**159**星][4y] [Py] [plaguescanner/plaguescanner](https://github.com/plaguescanner/plaguescanner) Open source multiple AV scanner framework
+- [**159**星][2y] [C] [phhusson/super-bootimg](https://github.com/phhusson/super-bootimg) Tools to edit Android boot.img. NDK buildable, to be usable in an update.zip
- [**159**星][3y] [Py] [nneonneo/eqgrp-free-file](https://github.com/nneonneo/eqgrp-free-file) Free sampling of files from the purported Equation Group hack.
+- [**159**星][2m] [Py] [nforest/droidimg](https://github.com/nforest/droidimg) Android/Linux vmlinux loader
- [**159**星][5y] [Py] [netspi/sshkey-grab](https://github.com/netspi/sshkey-grab) Grab ssh keys from ssh-agent
- [**159**星][5m] [Java] [netspi/javaserialkiller](https://github.com/netspi/javaserialkiller) Burp extension to perform Java Deserialization Attacks
-- [**159**星][1y] [msuhanov/regf](https://github.com/msuhanov/regf) Windows注册表文件格式规范
-- [**159**星][3y] [Ruby] [kost/dockscan](https://github.com/kost/dockscan) dockscan:docker安全漏洞扫描和审计工具。
-- [**159**星][8m] [klionsec/redteammanual](https://github.com/klionsec/redteammanual)
-- [**159**星][2y] [Py] [juancarlospaco/css-html-js-minify](https://github.com/juancarlospaco/css-html-js-minify) StandAlone Async cross-platform Minifier for the Web.
+- [**159**星][26d] [C++] [mxmssh/manul](https://github.com/mxmssh/manul) Manul is a coverage-guided parallel fuzzer for open-source and blackbox binaries on Windows, Linux and MacOS
+- [**159**星][1y] [malwarearchaeology/attack](https://github.com/malwarearchaeology/attack) MITRE ATT&CK Windows Logging Cheat Sheets
+- [**159**星][3m] [Go] [lukasikic/subzy](https://github.com/lukasikic/subzy) Subdomain takeover vulnerability checker
+- [**159**星][1y] [JS] [logicalhacking/dvhma](https://github.com/logicalhacking/dvhma) Damn Vulnerable Hybrid Mobile App (DVHMA) is an hybrid mobile app (for Android) that intentionally contains vulnerabilities.
+- [**159**星][5m] [JS] [k4m4/dcipher-cli](https://github.com/k4m4/dcipher-cli) Crack hashes using online rainbow & lookup table attack services, right from your terminal
- [**159**星][2y] [C++] [hussein-aitlahcen/blackhole](https://github.com/hussein-aitlahcen/blackhole) C# RAT (Remote Administration Tool)
-- [**159**星][3y] [Py] [hkm/whoishere.py](https://github.com/hkm/whoishere.py) WIFI Client Detection - Identify people by assigning a name to a device performing a wireless probe request.
-- [**159**星][2m] [C] [fullmetal5/bluebomb](https://github.com/fullmetal5/bluebomb) A Bluetooth exploit for the Nintendo Wii.
-- [**159**星][7m] [Py] [dyboy2017/wtf_scan](https://github.com/dyboy2017/wtf_scan) 一款WEB端的在线敏感资产扫描器,扫描网站中的指纹、漏洞及相关敏感信息,针对已经识别的CMS指纹,进行二次0day扫描利用,一键GetShell也不是不可能!!!
-- [**159**星][13d] [Shell] [dshield-isc/dshield](https://github.com/dshield-isc/dshield) DShield Raspberry Pi Sensor
-- [**159**星][2y] [TypeScript] [cupslab/password_meter](https://github.com/cupslab/password_meter) 数据驱动的密码测量仪表,可对密码进行强度和可用性检测
+- [**159**星][17d] [Java] [gantman/jail-monkey](https://github.com/gantman/jail-monkey) A React Native library for identifying if a phone is rooted or mocking locations
+- [**159**星][2y] [TS] [cupslab/password_meter](https://github.com/cupslab/password_meter) 数据驱动的密码测量仪表,可对密码进行强度和可用性检测
- [**159**星][10m] [Py] [censys/censys-python](https://github.com/censys/censys-python) Python Library for Censys
-- [**159**星][19d] [C] [altramayor/gatekeeper](https://github.com/altramayor/gatekeeper) First open source DDoS protection system
-- [**159**星][15d] [Shell] [0xmachos/mosl](https://github.com/0xmachos/mosl) Bash script to audit and fix macOS Catalina (10.15.x) security settings
-- [**159**星][6m] [0xbug/biu](https://github.com/0xbug/biu) 网络资产发现、漏洞扫描
-- [**158**星][8d] [Py] [fireeye/fidl](https://github.com/fireeye/fidl) A sane API for IDA Pro's decompiler. Useful for malware RE and vulnerability research
+- [**159**星][11m] [Go] [botherder/kraken](https://github.com/botherder/kraken) Cross-platform Yara scanner written in Go
+- [**158**星][20d] [Java] [fuzzitdev/javafuzz](https://github.com/fuzzitdev/javafuzz) coverage guided fuzz testing for java
+- [**158**星][1m] [Py] [travisfoley/dfirtriage](https://github.com/travisfoley/dfirtriage) Digital forensic acquisition tool for Windows based incident response.
+- [**158**星][1y] [Go] [remeh/sizedwaitgroup](https://github.com/remeh/sizedwaitgroup) SizedWaitGroup has the same role and close to the same API as the Golang sync.WaitGroup but it adds a limit on the amount of goroutines started concurrently.
- [**158**星][6y] [Ruby] [resque/resque-loner](https://github.com/resque/resque-loner) Support for unique jobs in Resque: Only one job with the same payload per queue.
- [**158**星][4y] [Go] [vyrus001/go-mimikatz](https://github.com/vyrus001/go-mimikatz) A wrapper around a pre-compiled version of the Mimikatz executable for the purpose of anti-virus evasion.
-- [**158**星][2y] [Java] [the404hacking/androrat](https://github.com/the404hacking/androrat) AndroRAT | Remote Administrator Tool for Android OS Hacking
+- [**158**星][4y] [Shell] [theresalu/rspiducky](https://github.com/theresalu/rspiducky)
- [**158**星][8m] [C] [tboox/itrace](https://github.com/tboox/itrace) Trace objc method call for ios and mac
-- [**158**星][29d] [F#] [softsec-kaist/codealchemist](https://github.com/softsec-kaist/codealchemist) Semantics-aware Code Generation for Finding JS engine Vulnerabilities
-- [**158**星][2m] [Shell] [securityriskadvisors/vectr](https://github.com/securityriskadvisors/vectr) VECTR is a tool that facilitates tracking of your red and blue team testing activities to measure detection and prevention capabilities across different attack scenarios
- [**158**星][2y] [HTML] [secmob/pwnfest2016](https://github.com/secmob/pwnfest2016) full exploit of pwnfest2016, slide and full text of syscan2017
-- [**158**星][9m] [Py] [sch3m4/androidpatternlock](https://github.com/sch3m4/androidpatternlock) A little Python tool to crack the Pattern Lock on Android devices
-- [**158**星][13d] [Batchfile] [pyn3rd/cve-2019-0232](https://github.com/pyn3rd/cve-2019-0232) Apache Tomcat Remote Code Execution on Windows
+- [**158**星][5m] [samanl33t/awesome-mainframe-hacking](https://github.com/samanl33t/awesome-mainframe-hacking)
+- [**158**星][15d] [Batchfile] [pyn3rd/cve-2019-0232](https://github.com/pyn3rd/cve-2019-0232) Apache Tomcat Remote Code Execution on Windows
- [**158**星][2y] [Py] [phishai/phish-ai-api](https://github.com/phishai/phish-ai-api) phish.ai 公开和私有的API接口, Python编写
-- [**158**星][2y] [C] [phhusson/super-bootimg](https://github.com/phhusson/super-bootimg) Tools to edit Android boot.img. NDK buildable, to be usable in an update.zip
- [**158**星][9m] [Shell] [nullarray/intrec-pack](https://github.com/nullarray/intrec-pack) Intelligence and Reconnaissance Package/Bundle installer.
-- [**158**星][2m] [Py] [nforest/droidimg](https://github.com/nforest/droidimg) Android/Linux vmlinux loader
- [**158**星][1y] [Py] [musicmancorley/briarids](https://github.com/musicmancorley/briarids) An All-In-One home intrusion detection system (IDS) solution for the Raspberry PI.
-- [**158**星][3m] [Go] [lukasikic/subzy](https://github.com/lukasikic/subzy) Subdomain takeover vulnerability checker
- [**158**星][2y] [Py] [kuburan/txtool](https://github.com/kuburan/txtool) an easy pentesting tool.
-- [**158**星][5m] [JS] [k4m4/dcipher-cli](https://github.com/k4m4/dcipher-cli) Crack hashes using online rainbow & lookup table attack services, right from your terminal
- [**158**星][1y] [joychou93/sks](https://github.com/joychou93/sks) Security Knowledge Structure(安全知识汇总)
+- [**158**星][2m] [C#] [jlospinoso/beamgun](https://github.com/jlospinoso/beamgun) A rogue-USB-device defeat program for Windows.
- [**158**星][2y] [Py] [jeffball55/rop_compiler](https://github.com/jeffball55/rop_compiler) An open source, multi-architecture ROP compiler written in python
-- [**158**星][3m] [C#] [hunniccyber/sharpsniper](https://github.com/hunniccyber/sharpsniper) Find specific users in active directory via their username and logon IP address
+- [**158**星][2y] [javierolmedo/shodan-filters](https://github.com/javierolmedo/shodan-filters) A list of shodan filters
+- [**158**星][9d] [Py] [itsmehacker/darkscrape](https://github.com/itsmehacker/darkscrape) OSINT Tool For Scraping Dark Websites
+- [**158**星][3m] [C++] [ion28/bluespawn](https://github.com/ion28/bluespawn) Windows-based Active Defense and EDR tool to empower Blue Teams
- [**158**星][1y] [Py] [hadiasghari/pyasn](https://github.com/hadiasghari/pyasn) Python IP address to Autonomous System Number lookup module. (Supports fast local lookups, and historical lookups using archived BGP dumps.)
- [**158**星][3y] [Java] [googlecloudplatform/endpoints-codelab-android](https://github.com/googlecloudplatform/endpoints-codelab-android) endpoints-codelab-android
-- [**158**星][1m] [LLVM] [galoisinc/reopt](https://github.com/galoisinc/reopt) A tool for analyzing x86-64 binaries.
+- [**158**星][7d] [LLVM] [galoisinc/reopt](https://github.com/galoisinc/reopt) A tool for analyzing x86-64 binaries.
- [**158**星][5y] [C] [fuzion24/androidobfuscation-ndk](https://github.com/fuzion24/androidobfuscation-ndk) Example of obfuscating an Android NDK project using O-LLVM
-- [**157**星][22d] [JS] [paperseller/chn-iplist](https://github.com/paperseller/chn-iplist) Chnroutes rules for routers、Shadowrocket、Quantumult、Kitsunebi、acl、BifrostV、v2rayNG、clash、pac、v2ray config file.
-- [**157**星][6m] [PowerShell] [nickrod518/powershell-scripts](https://github.com/nickrod518/powershell-scripts) PowerShell scripts ranging from SCCM, MSO, AD, and other corporate enterprise uses... to sending cat facts to coworkers.
-- [**157**星][1y] [Go] [remeh/sizedwaitgroup](https://github.com/remeh/sizedwaitgroup) SizedWaitGroup has the same role and close to the same API as the Golang sync.WaitGroup but it adds a limit on the amount of goroutines started concurrently.
-- [**157**星][4y] [Shell] [theresalu/rspiducky](https://github.com/theresalu/rspiducky)
+- [**158**星][1y] [C++] [doublelabyrinth/010editor-keygen](https://github.com/doublelabyrinth/010editor-keygen) A keygen for 010Editor
+- [**158**星][4y] [Py] [crown-prince/python_poc](https://github.com/crown-prince/python_poc) 一款python编写的Web安全检测PoC&&EXP框架
+- [**158**星][2m] [Py] [c0rvax/project-black](https://github.com/c0rvax/project-black) Pentest/BugBounty progress control with scanning modules
+- [**158**星][4y] [Py] [blazeinfosec/bt2](https://github.com/blazeinfosec/bt2) 电报后门,使用电报做C&C 服务器
+- [**158**星][1y] [Py] [bayotop/off-by-slash](https://github.com/bayotop/off-by-slash) off-by-slash: Bupr扩展, 检测利用Nginx错误配置导致的重名遍历(alias traversal)
+- [**158**星][1m] [C#] [andrewlock/netescapades.aspnetcore.securityheaders](https://github.com/andrewlock/netescapades.aspnetcore.securityheaders) Small package to allow adding security headers to ASP.NET Core websites
+- [**158**星][2y] [Py] [alephsecurity/abootool](https://github.com/alephsecurity/abootool) abootool:基于静态知识(从bootloader 镜像中提取的字符串)动态 fuzz 隐藏的 fastboot OEM 指令
+- [**157**星][16d] [C++] [lifting-bits/rellic](https://github.com/lifting-bits/rellic) Rellic produces goto-free C output from LLVM bitcode
+- [**157**星][6m] [Py] [ecstatic-nobel/osweep](https://github.com/ecstatic-nobel/OSweep) Don't Just Search OSINT. Sweep It.
+- [**157**星][1y] [Py] [ultrasecurity/webkiller](https://github.com/ultrasecurity/webkiller) 多功能渗透测试辅助脚本
+- [**157**星][7m] [JS] [tidesec/proxy_pool](https://github.com/tidesec/proxy_pool) Proxy_Pool(代理资源池),一个小巧的代理ip抓取+评估+存储+展示的一体化的工具,包括了web展示和接口。
+- [**157**星][3y] [Py] [theevilbit/exploit_generator](https://github.com/theevilbit/exploit_generator) Automated Exploit generation with WinDBG
- [**157**星][2y] [swannman/ircapabilities](https://github.com/swannman/ircapabilities) Incident Response Hierarchy of Needs
-- [**157**星][5m] [samanl33t/awesome-mainframe-hacking](https://github.com/samanl33t/awesome-mainframe-hacking)
+- [**157**星][2y] [C] [spajed/processrefund](https://github.com/spajed/processrefund) An attempt at Process Doppelgänging
+- [**157**星][3m] [PS] [shiva108/ctf-notes](https://github.com/shiva108/ctf-notes) Everything needed for doing CTFs
+- [**157**星][5m] [Rust] [rust-fuzz/honggfuzz-rs](https://github.com/rust-fuzz/honggfuzz-rs) Fuzz your Rust code with Google-developed Honggfuzz !
- [**157**星][4y] [C#] [radiowar/nfcgui](https://github.com/radiowar/nfcgui) 图形化NFC协议安全分析工具,主要针对Mifare卡,基于libnfc完成
-- [**157**星][24d] [C++] [mxmssh/manul](https://github.com/mxmssh/manul) Manul is a coverage-guided parallel fuzzer for open-source and blackbox binaries on Windows, Linux and MacOS
+- [**157**星][1y] [C++] [openats/openats](https://github.com/openats/openats) 天线追踪系统
+- [**157**星][2m] [C++] [nitrokey/nitrokey-app](https://github.com/nitrokey/nitrokey-app) a cross-platform (runs under Windows, Linux and Mac OS) application created to manage Nitrokey devices
- [**157**星][6m] [mrmugiwara/ctf-tools](https://github.com/mrmugiwara/ctf-tools) Useful CTF Tools
-- [**157**星][1y] [JS] [logicalhacking/dvhma](https://github.com/logicalhacking/dvhma) Damn Vulnerable Hybrid Mobile App (DVHMA) is an hybrid mobile app (for Android) that intentionally contains vulnerabilities.
+- [**157**星][2y] [C] [lctf/lctf2017](https://github.com/lctf/lctf2017) Source code, writeups and exps in LCTF2017.
+- [**157**星][6m] [C] [kkamagui/shadow-box-for-x86](https://github.com/kkamagui/shadow-box-for-x86) Lightweight and Practical Kernel Protector for x86 (Presented at BlackHat Asia 2017/2018, beVX 2018 and HITBSecConf 2017)
- [**157**星][8y] [C++] [kavika13/remcom](https://github.com/kavika13/remcom) Remote Command Executor: A OSS replacement for PsExec and RunAs - or Telnet without having to install a server. Take your pick :)
- [**157**星][3y] [HTML] [jonnyhightower/neet](https://github.com/jonnyhightower/neet) Neet - Network Enumeration and Exploitation Tool
- [**157**星][2y] [Py] [joker25000/optiva-framework](https://github.com/joker25000/optiva-framework) Optiva-Framework
-- [**157**星][2m] [C#] [jlospinoso/beamgun](https://github.com/jlospinoso/beamgun) A rogue-USB-device defeat program for Windows.
-- [**157**星][2y] [javierolmedo/shodan-filters](https://github.com/javierolmedo/shodan-filters) A list of shodan filters
-- [**157**星][11d] [Py] [itsmehacker/darkscrape](https://github.com/itsmehacker/darkscrape) OSINT Tool For Scraping Dark Websites
+- [**157**星][2y] [Py] [galkan/flashlight](https://github.com/galkan/flashlight) Pentesters spend too much time during information gathering phase. Flashlight (Fener) provides services to scan network/ports and gather information rapidly on target networks. So Flashlight should be the choice to automate discovery step during a penetration test. In this article, usage of Flashligh application will be explained.
+- [**157**星][4m] [C++] [fritzone/obfy](https://github.com/fritzone/obfy) A tiny C++ obfuscation framework
+- [**157**星][3y] [Py] [facert/github_search](https://github.com/facert/github_search) 根据 keywords 搜索 github 上面的 repos, 并通过 web 展示
- [**157**星][9y] [C] [comex/star](https://github.com/comex/star) the code behind the second incarnation of jailbreakme.com
-- [**157**星][4y] [Py] [blazeinfosec/bt2](https://github.com/blazeinfosec/bt2) 电报后门,使用电报做C&C 服务器
-- [**157**星][13d] [Py] [angr/heaphopper](https://github.com/angr/heaphopper) HeapHopper is a bounded model checking framework for Heap-implementations
-- [**157**星][2y] [Py] [alephsecurity/abootool](https://github.com/alephsecurity/abootool) abootool:基于静态知识(从bootloader 镜像中提取的字符串)动态 fuzz 隐藏的 fastboot OEM 指令
-- [**156**星][14d] [C++] [lifting-bits/rellic](https://github.com/lifting-bits/rellic) Rellic produces goto-free C output from LLVM bitcode
+- [**157**星][15d] [Py] [angr/heaphopper](https://github.com/angr/heaphopper) HeapHopper is a bounded model checking framework for Heap-implementations
+- [**157**星][3y] [Py] [4w4k3/umbrella](https://github.com/4w4k3/umbrella) 用于渗透的File Dropper
+- [**156**星][24d] [SourcePawn] [splewis/csgo-practice-mode](https://github.com/splewis/csgo-practice-mode) CS:GO Sourcemod plugin for private team/individual practice servers
- [**156**星][3y] [Go] [wille/cry](https://github.com/wille/cry) Cross platform PoC ransomware written in Go
-- [**156**星][1y] [Py] [ultrasecurity/webkiller](https://github.com/ultrasecurity/webkiller) 多功能渗透测试辅助脚本
+- [**156**星][3y] [C++] [zer0mem0ry/runpe](https://github.com/zer0mem0ry/runpe) 在与主机进程相同的地址空间中运行另一个Windows PE
+- [**156**星][3y] [Ruby] [waterlink/rack-reverse-proxy](https://github.com/waterlink/rack-reverse-proxy) A Reverse Proxy for Rack
- [**156**星][2m] [SystemVerilog] [ufrisk/pcileech-fpga](https://github.com/ufrisk/pcileech-fpga) FPGA 模块,可与 PCILeech DMA(Direct Memory Access )攻击软件组合使用
-- [**156**星][17d] [AGS Script] [tinyfpga/tinyfpga-bootloader](https://github.com/tinyfpga/tinyfpga-bootloader) An open source USB bootloader for FPGAs
-- [**156**星][2y] [C] [spajed/processrefund](https://github.com/spajed/processrefund) An attempt at Process Doppelgänging
+- [**156**星][2y] [Py] [tintinweb/striptls](https://github.com/tintinweb/striptls) proxy poc implementation of STARTTLS stripping attacks
- [**156**星][11m] [C] [soldierx/libhijack](https://github.com/soldierx/libhijack) Runtime Process Infection Made Easy
-- [**156**星][4m] [Rust] [rust-fuzz/honggfuzz-rs](https://github.com/rust-fuzz/honggfuzz-rs) Fuzz your Rust code with Google-developed Honggfuzz !
- [**156**星][2y] [C++] [rossja/tinynuke](https://github.com/rossja/tinynuke) zeus-style banking trojan
-- [**156**星][1y] [C++] [openats/openats](https://github.com/openats/openats) 天线追踪系统
+- [**156**星][3m] [Py] [rhinosecuritylabs/cloud-security-research](https://github.com/rhinosecuritylabs/cloud-security-research) Cloud-related research releases from the Rhino Security Labs team.
+- [**156**星][2y] [PS] [psconfeu/2018](https://github.com/psconfeu/2018) PowerShell Conference Europe 2018 Slides and Demo Scripts
+- [**156**星][1y] [YARA] [mikesxrs/open-source-yara-rules](https://github.com/mikesxrs/open-source-yara-rules) YARA Rules I come across on the internet
- [**156**星][2y] [C++] [mharjac/bad_ducky](https://github.com/mharjac/bad_ducky) Rubber Ducky compatible clone based on CJMCU BadUSB HW.
+- [**156**星][6m] [Shell] [maldevel/blue-team](https://github.com/maldevel/blue-team) Blue Team Scripts
+- [**156**星][1y] [Py] [madengr/ham2mon](https://github.com/madengr/ham2mon) GNU Radio based SDR scanner for narrow band FM demodulation
+- [**156**星][2y] [Go] [ls0f/gortcp](https://github.com/ls0f/gortcp) 内网穿透、远程文件上传下载、命令执行
- [**156**星][1y] [Java] [lightless233/java-unserialization-study](https://github.com/lightless233/java-unserialization-study) QAQ Just study unserialize vulnerabilities in Java :)
-- [**156**星][1m] [JS] [lelinhtinh/de4js](https://github.com/lelinhtinh/de4js) JavaScript Deobfuscator and Unpacker
-- [**156**星][2y] [C] [lctf/lctf2017](https://github.com/lctf/lctf2017) Source code, writeups and exps in LCTF2017.
-- [**156**星][6m] [C] [kkamagui/shadow-box-for-x86](https://github.com/kkamagui/shadow-box-for-x86) Lightweight and Practical Kernel Protector for x86 (Presented at BlackHat Asia 2017/2018, beVX 2018 and HITBSecConf 2017)
- [**156**星][9y] [Py] [jonty/idiocy](https://github.com/jonty/idiocy) Idiocy is a warning shot to people browsing the internet insecurely.
-- [**156**星][3m] [C++] [ion28/bluespawn](https://github.com/ion28/bluespawn) Windows-based Active Defense and EDR tool to empower Blue Teams
-- [**156**星][1y] [TypeScript] [handsomeone/scout](https://github.com/handsomeone/scout) 可能是东半球最灵活的 URL 监控系统
-- [**156**星][2y] [Py] [galkan/flashlight](https://github.com/galkan/flashlight) Pentesters spend too much time during information gathering phase. Flashlight (Fener) provides services to scan network/ports and gather information rapidly on target networks. So Flashlight should be the choice to automate discovery step during a penetration test. In this article, usage of Flashligh application will be explained.
+- [**156**星][2m] [JS] [interference-security/frida-scripts](https://github.com/interference-security/frida-scripts) Frida Scripts
+- [**156**星][18d] [C] [hfiref0x/ntcall64](https://github.com/hfiref0x/ntcall64) Windows NT x64 syscall fuzzer
+- [**156**星][1m] [JS] [henices/chrome-proxy-helper](https://github.com/henices/chrome-proxy-helper) Chrome PROXY extension, set proxy for Chrome browser
+- [**156**星][1y] [TS] [handsomeone/scout](https://github.com/handsomeone/scout) 可能是东半球最灵活的 URL 监控系统
+- [**156**星][23d] [Py] [gprmax/gprmax](https://github.com/gprmax/gprmax) gprMax is open source software that simulates electromagnetic wave propagation using the Finite-Difference Time-Domain (FDTD) method for numerical modelling of Ground Penetrating Radar (GPR)
+- [**156**星][3y] [C++] [gbonacini/cve-2016-5195](https://github.com/gbonacini/cve-2016-5195) A CVE-2016-5195 exploit example.
- [**156**星][1y] [Py] [fireeye/geologonalyzer](https://github.com/fireeye/geologonalyzer) GeoLogonalyzer is a utility to analyze remote access logs for anomalies such as travel feasibility and data center sources.
- [**156**星][3y] [Py] [fire30/ps4-3.55-code-execution-poc](https://github.com/fire30/ps4-3.55-code-execution-poc)
-- [**156**星][3y] [Py] [facert/github_search](https://github.com/facert/github_search) 根据 keywords 搜索 github 上面的 repos, 并通过 web 展示
- [**156**星][8m] [dsignr/disallowed-usernames](https://github.com/dsignr/disallowed-usernames) An open source database of disallowed usernames for software projects to prevent phishing and impersonation.
+- [**156**星][2d] [C#] [djkaty/il2cppinspector](https://github.com/djkaty/il2cppinspector) The easy way to extract types and metadata from Unity IL2CPP binaries
- [**156**星][9m] [dckc/awesome-ocap](https://github.com/dckc/awesome-ocap) Awesome Object Capabilities andCapability-based Security
-- [**156**星][4y] [Py] [crown-prince/python_poc](https://github.com/crown-prince/python_poc) 一款python编写的Web安全检测PoC&&EXP框架
-- [**156**星][8m] [Visual Basic] [christophetd/spoofing-office-macro](https://github.com/christophetd/spoofing-office-macro) a VBA macro spawning a process with a spoofed parent and command line.
-- [**156**星][6m] [Objective-C] [chichou/sploits](https://github.com/chichou/sploits) CVE-2018-4310
+- [**156**星][8m] [Visual Basic .NET] [christophetd/spoofing-office-macro](https://github.com/christophetd/spoofing-office-macro) a VBA macro spawning a process with a spoofed parent and command line.
+- [**156**星][6m] [ObjC] [chichou/sploits](https://github.com/chichou/sploits) CVE-2018-4310
- [**156**星][4m] [Py] [certcc/trommel](https://github.com/certcc/trommel) Sift Through Embedded Device Files to Identify Potential Vulnerable Indicators
-- [**156**星][11m] [Go] [botherder/kraken](https://github.com/botherder/kraken) Cross-platform Yara scanner written in Go
+- [**156**星][2m] [Go] [c-sto/recursebuster](https://github.com/c-sto/recursebuster) rapid content discovery tool for recursively querying webservers, handy in pentesting and web application assessments
- [**156**星][4y] [Py] [borjamerino/pazuzu](https://github.com/borjamerino/pazuzu) Reflective DLL to run binaries from memory
- [**156**星][2y] [PHP] [bo0om/cve-2017-5124](https://github.com/bo0om/cve-2017-5124) Chrome < 62 uxss exploit (CVE-2017-5124)
-- [**156**星][1y] [Py] [bayotop/off-by-slash](https://github.com/bayotop/off-by-slash) off-by-slash: Bupr扩展, 检测利用Nginx错误配置导致的重名遍历(alias traversal)
- [**156**星][2y] [C] [armadito/armadito-av](https://github.com/armadito/armadito-av) Armadito antivirus main repository
-- [**156**星][3y] [Py] [4w4k3/umbrella](https://github.com/4w4k3/umbrella) 用于渗透的File Dropper
-- [**155**星][22d] [C#] [hmbsbige/nattypetester](https://github.com/hmbsbige/nattypetester) 测试当前网络的NAT类型(STUN)
+- [**156**星][1y] [C#] [anthemtotheego/sharpcradle](https://github.com/anthemtotheego/sharpcradle)
+- [**156**星][13d] [Scala] [albuch/sbt-dependency-check](https://github.com/albuch/sbt-dependency-check) SBT Plugin for OWASP DependencyCheck. Monitor your dependencies and report if there are any publicly known vulnerabilities (e.g. CVEs).
+- [**155**星][2m] [Go] [ihciah/go-shadowsocks-magic](https://github.com/ihciah/go-shadowsocks-magic) A shadowsocks implementation in golang with Multi-connection Acceleration
- [**155**星][11m] [feeicn/vulture](https://github.com/feeicn/vulture) 分布式近实时全覆盖资产和漏洞扫描器
-- [**155**星][6m] [Py] [ecstatic-nobel/osweep](https://github.com/ecstatic-nobel/OSweep) Don't Just Search OSINT. Sweep It.
+- [**155**星][3m] [C] [ajkhoury/uefi-bootkit](https://github.com/ajkhoury/UEFI-Bootkit) A small bootkit which does not rely on x64 assembly.
- [**155**星][2y] [Py] [crytic/ida-evm](https://github.com/crytic/ida-evm) 以太坊虚拟机的Processor模块
-- [**155**星][3y] [C++] [zer0mem0ry/runpe](https://github.com/zer0mem0ry/runpe) 在与主机进程相同的地址空间中运行另一个Windows PE
+- [**155**星][3y] [Py] [z0noxz/powerstager](https://github.com/z0noxz/powerstager) powerstager:创建可执行文件,用于下载PowerShell Payload,将其加载到内存,并使用混淆的EC方法运行
- [**155**星][3y] [C] [x0rz/ssh-honeypot](https://github.com/x0rz/ssh-honeypot) Fake sshd that logs ip addresses, usernames, and passwords.
-- [**155**星][3y] [Ruby] [waterlink/rack-reverse-proxy](https://github.com/waterlink/rack-reverse-proxy) A Reverse Proxy for Rack
-- [**155**星][7m] [JS] [tidesec/proxy_pool](https://github.com/tidesec/proxy_pool) Proxy_Pool(代理资源池),一个小巧的代理ip抓取+评估+存储+展示的一体化的工具,包括了web展示和接口。
-- [**155**星][3y] [Py] [theevilbit/exploit_generator](https://github.com/theevilbit/exploit_generator) Automated Exploit generation with WinDBG
+- [**155**星][4m] [Shell] [weaveworks/tcptracer-bpf](https://github.com/weaveworks/tcptracer-bpf) eBPF program using kprobes to trace TCP events without run-time compilation dependencies
+- [**155**星][8m] [Shell] [viralmaniar/i-see-you](https://github.com/viralmaniar/i-see-you) ISeeYou is a Bash and Javascript tool to find the exact location of the users during social engineering or phishing engagements. Using exact location coordinates an attacker can perform preliminary reconnaissance which will help them in performing further targeted attacks.
- [**155**星][1y] [Py] [sublimelinter/sublimelinter-shellcheck](https://github.com/sublimelinter/sublimelinter-shellcheck) This linter plugin for SublimeLinter provides an interface to shellcheck.
+- [**155**星][10d] [Java] [spring-cloud/spring-cloud-vault](https://github.com/spring-cloud/spring-cloud-vault) Configuration Integration with HashiCorp Vault
+- [**155**星][4m] [Assembly] [smealum/butthax](https://github.com/smealum/butthax) lovense hush buttplug exploit chain
- [**155**星][8m] [Common Lisp] [oblivia-simplex/roper](https://github.com/oblivia-simplex/roper) Return Oriented Programme Evolution with ROPER
+- [**155**星][2m] [Py] [nucypher/pyumbral](https://github.com/nucypher/pyumbral) NuCypher's reference implementation of Umbral (threshold proxy re-encryption) using OpenSSL and Cryptography.io
- [**155**星][4y] [Py] [n0tr00t/beehive](https://github.com/n0tr00t/beehive) Beehive is an open-source vulnerability detection framework based on Beebeeto-framework. Security researcher can use it to find vulnerability, exploits, subsequent attacks, etc.
-- [**155**星][1y] [malwarearchaeology/attack](https://github.com/malwarearchaeology/attack) MITRE ATT&CK Windows Logging Cheat Sheets
-- [**155**星][1y] [Py] [madengr/ham2mon](https://github.com/madengr/ham2mon) GNU Radio based SDR scanner for narrow band FM demodulation
-- [**155**星][2y] [Go] [ls0f/gortcp](https://github.com/ls0f/gortcp) 内网穿透、远程文件上传下载、命令执行
-- [**155**星][9m] [Ruby] [hatlord/snmpwn](https://github.com/hatlord/snmpwn) An SNMPv3 User Enumerator and Attack tool
-- [**155**星][21d] [Py] [gprmax/gprmax](https://github.com/gprmax/gprmax) gprMax is open source software that simulates electromagnetic wave propagation using the Finite-Difference Time-Domain (FDTD) method for numerical modelling of Ground Penetrating Radar (GPR)
-- [**155**星][4m] [C++] [fritzone/obfy](https://github.com/fritzone/obfy) A tiny C++ obfuscation framework
+- [**155**星][4m] [mac4n6/presentations](https://github.com/mac4n6/presentations) Presentation Archives for my macOS and iOS Related Research
+- [**155**星][27d] [Java] [itzsomebody/radon](https://github.com/itzsomebody/radon) A crappy Java bytecode obfuscator (meaning: not for production use)
+- [**155**星][10m] [Ruby] [hatlord/snmpwn](https://github.com/hatlord/snmpwn) An SNMPv3 User Enumerator and Attack tool
- [**155**星][7y] [evilcos/xss.swf](https://github.com/evilcos/xss.swf) a tiny tool for swf hacking, just browse it:)
- [**155**星][3y] [JS] [escomplex/complexity-report](https://github.com/escomplex/complexity-report) **UNMAINTAINED** Software complexity analysis for JavaScript projects
+- [**155**星][11m] [Py] [epsylon/cintruder](https://github.com/epsylon/cintruder) Captcha Intruder (CIntruder) is an automatic pentesting tool to bypass captchas.
- [**155**星][6y] [C] [defuse/sockstress](https://github.com/defuse/sockstress) Sockstress (TCP DoS) implementation.
+- [**155**星][2y] [Ruby] [chrislee35/passivedns-client](https://github.com/chrislee35/passivedns-client) passivedns-client provides a library and a query tool for querying several passive DNS providers
- [**155**星][5y] [C] [arisada/midgetpack](https://github.com/arisada/midgetpack) midgetpack is a multiplatform secure ELF packer
-- [**155**星][1y] [C#] [anthemtotheego/sharpcradle](https://github.com/anthemtotheego/sharpcradle)
-- [**155**星][1m] [C#] [andrewlock/netescapades.aspnetcore.securityheaders](https://github.com/andrewlock/netescapades.aspnetcore.securityheaders) Small package to allow adding security headers to ASP.NET Core websites
-- [**155**星][11d] [Scala] [albuch/sbt-dependency-check](https://github.com/albuch/sbt-dependency-check) SBT Plugin for OWASP DependencyCheck. Monitor your dependencies and report if there are any publicly known vulnerabilities (e.g. CVEs).
+- [**155**星][11d] [Py] [antichown/subdomain-takeover](https://github.com/antichown/subdomain-takeover) Subdomain Takeover Scanner | Subdomain Takeover Tool | by 0x94
- [**155**星][2m] [C] [airbus-seclab/crashos](https://github.com/airbus-seclab/crashos) crashos:一个极简的操作系统,通过创建畸形的系统配置,导致 hypervisor 崩溃,从而辅助 hypervisor 漏洞研究
-- [**154**星][18d] [Java] [fuzzitdev/javafuzz](https://github.com/fuzzitdev/javafuzz) coverage guided fuzz testing for java
-- [**154**星][3y] [Visual Basic] [mwsrc/plasmarat](https://github.com/mwsrc/PlasmaRAT) Remote Access Trojan(RAT), Miner, DDoS
-- [**154**星][3y] [Py] [z0noxz/powerstager](https://github.com/z0noxz/powerstager) powerstager:创建可执行文件,用于下载PowerShell Payload,将其加载到内存,并使用混淆的EC方法运行
-- [**154**星][4m] [Shell] [weaveworks/tcptracer-bpf](https://github.com/weaveworks/tcptracer-bpf) eBPF program using kprobes to trace TCP events without run-time compilation dependencies
+- [**154**星][4d] [Py] [zeddyu/http-smuggling-lab](https://github.com/zeddyu/http-smuggling-lab) Use HTTP Smuggling Lab to learn HTTP Smuggling.
+- [**154**星][3y] [Visual Basic .NET] [mwsrc/plasmarat](https://github.com/mwsrc/PlasmaRAT) Remote Access Trojan(RAT), Miner, DDoS
+- [**154**星][7m] [C#] [wohlstand/destroy-windows-10-spying](https://github.com/wohlstand/destroy-windows-10-spying) 禁用/销毁Windows的间谍功能
- [**154**星][10m] [Py] [vulnerscom/zabbix-threat-control](https://github.com/vulnerscom/zabbix-threat-control) Zabbix vulnerability assessment plugin
-- [**154**星][8m] [Shell] [viralmaniar/i-see-you](https://github.com/viralmaniar/i-see-you) ISeeYou is a Bash and Javascript tool to find the exact location of the users during social engineering or phishing engagements. Using exact location coordinates an attacker can perform preliminary reconnaissance which will help them in performing further targeted attacks.
-- [**154**星][2y] [Py] [tintinweb/striptls](https://github.com/tintinweb/striptls) proxy poc implementation of STARTTLS stripping attacks
+- [**154**星][6d] [Go] [ullaakut/nmap](https://github.com/ullaakut/nmap) Idiomatic nmap library for go developers
+- [**154**星][4m] [threatexpress/malleable-c2](https://github.com/threatexpress/malleable-c2) Cobalt Strike Malleable C2 Design and Reference Guide
- [**154**星][3y] [C] [stonedreamforest/naiheqiao](https://github.com/stonedreamforest/naiheqiao) open-source x86/x64 usermode anti-anti-debug plugin
-- [**154**星][8d] [Java] [spring-cloud/spring-cloud-vault](https://github.com/spring-cloud/spring-cloud-vault) Configuration Integration with HashiCorp Vault
-- [**154**星][4m] [Assembly] [smealum/butthax](https://github.com/smealum/butthax) lovense hush buttplug exploit chain
+- [**154**星][11m] [C] [sjvermeu/cvechecker](https://github.com/sjvermeu/cvechecker) Command-line utility to scan the system and report on potential vulnerabilities, based on public CVE data
- [**154**星][2y] [Py] [secretsquirrel/fido](https://github.com/secretsquirrel/fido) Teaching old shellcode new tricks
- [**154**星][2y] [C] [scen/osxinj](https://github.com/scen/osxinj) osx dylib injection
-- [**154**星][2m] [Py] [rhinosecuritylabs/cloud-security-research](https://github.com/rhinosecuritylabs/cloud-security-research) Cloud-related research releases from the Rhino Security Labs team.
- [**154**星][3m] [Java] [rednaga/axmlprinter](https://github.com/rednaga/axmlprinter) Library for parsing and printing compiled Android manifest files
- [**154**星][2m] [Java] [reddr/libscout](https://github.com/reddr/libscout) Third-party library detector for Java/Android apps
-- [**154**星][16d] [Pascal] [passbyyou888/zserver4d](https://github.com/passbyyou888/zserver4d) ZServer4D 是一套从商业项目剥离而出的云服务器中间件,可以承载百万级的分布式负载服务,并且支持IoT及内网穿透
+- [**154**星][13d] [Shell] [realtho/partyloud](https://github.com/realtho/partyloud) A simple tool to generate fake web browsing and mitigate tracking
+- [**154**星][5m] [Py] [ragibson/steganography](https://github.com/ragibson/steganography) Least Significant Bit Steganography for bitmap images (.bmp and .png), WAV sound files, and byte sequences. Simple LSB Steganalysis (LSB extraction) for bitmap images.
+- [**154**星][5d] [Pascal] [passbyyou888/zserver4d](https://github.com/passbyyou888/zserver4d) ZServer4D 是一套从商业项目剥离而出的云服务器中间件,可以承载百万级的分布式负载服务,并且支持IoT及内网穿透
- [**154**星][2y] [PHP] [paralax/lfi-labs](https://github.com/paralax/lfi-labs) small set of PHP scripts to practice exploiting LFI, RFI and CMD injection vulns
-- [**154**星][2m] [Py] [nucypher/pyumbral](https://github.com/nucypher/pyumbral) NuCypher's reference implementation of Umbral (threshold proxy re-encryption) using OpenSSL and Cryptography.io
- [**154**星][2m] [Rust] [net-reflow/reflow](https://github.com/net-reflow/reflow) Content-routable socks5 proxy switcher for your entire LAN.
- [**154**星][2y] [Py] [moyix/creddump](https://github.com/moyix/creddump) Automatically exported from code.google.com/p/creddump
-- [**154**星][1y] [YARA] [mikesxrs/open-source-yara-rules](https://github.com/mikesxrs/open-source-yara-rules) YARA Rules I come across on the internet
-- [**154**星][6m] [Shell] [maldevel/blue-team](https://github.com/maldevel/blue-team) Blue Team Scripts
-- [**154**星][4m] [mac4n6/presentations](https://github.com/mac4n6/presentations) Presentation Archives for my macOS and iOS Related Research
+- [**154**星][6d] [Go] [mimoo/disco](https://github.com/mimoo/disco) a protocol to encrypt communications and a cryptographic library based on Disco
- [**154**星][4y] [Py] [kbandla/immunitydebugger](https://github.com/kbandla/immunitydebugger) ImmunityDebugger
-- [**154**星][25d] [Java] [itzsomebody/radon](https://github.com/itzsomebody/radon) A crappy Java bytecode obfuscator (meaning: not for production use)
-- [**154**星][16d] [C] [hfiref0x/ntcall64](https://github.com/hfiref0x/ntcall64) Windows NT x64 syscall fuzzer
-- [**154**星][11m] [Py] [epsylon/cintruder](https://github.com/epsylon/cintruder) Captcha Intruder (CIntruder) is an automatic pentesting tool to bypass captchas.
-- [**154**星][2y] [Ruby] [chrislee35/passivedns-client](https://github.com/chrislee35/passivedns-client) passivedns-client provides a library and a query tool for querying several passive DNS providers
-- [**154**星][2m] [Py] [c0rvax/project-black](https://github.com/c0rvax/project-black) Pentest/BugBounty progress control with scanning modules
-- [**154**星][2m] [CSS] [7dog7/bottleneckosmosis](https://github.com/7dog7/bottleneckosmosis) 瓶颈渗透,web渗透,red红队,fuzz param,注释,js字典,ctf
+- [**154**星][4m] [AutoIt] [jschicht/rawcopy](https://github.com/jschicht/rawcopy) copy files off NTFS volumes by using low level disk reading method
+- [**154**星][10m] [Shell] [joukewitteveen/netctl](https://github.com/joukewitteveen/netctl) Profile based systemd network management
+- [**154**星][27d] [Go] [jollheef/out-of-tree](https://github.com/jollheef/out-of-tree) out-of-tree kernel {module, exploit} development tool
+- [**154**星][2d] [Py] [nccgroup/keimpx](https://github.com/nccgroup/keimpx) Check for valid credentials across a network over SMB
+- [**154**星][2y] [C] [ifding/radare2-tutorial](https://github.com/ifding/radare2-tutorial) Reverse Engineering using Radare2
+- [**154**星][29d] [hl2guide/all-in-one-customized-adblock-list](https://github.com/hl2guide/all-in-one-customized-adblock-list) An all-in-one adblock list that thoroughly blocks trackers, popup ads, ads, unwanted cookies, fake news, cookie warning messages, unwanted comment sections, crypto-coin mining, YouTube clutter, Twitter guff and social network hassles. Development is halted at version 2.8.
+- [**154**星][9m] [C++] [changeofpace/self-remapping-code](https://github.com/changeofpace/self-remapping-code) This program remaps its image to prevent the page protection of pages contained in the image from being modified via NtProtectVirtualMemory.
+- [**154**星][7m] [C#] [anthemtotheego/sharpexec](https://github.com/anthemtotheego/sharpexec) an offensive security C# tool designed to aid with lateral movement
- [**154**星][2y] [Ruby] [0x09al/cve-2018-8174-msf](https://github.com/0x09al/cve-2018-8174-msf) CVE-2018-8174 - VBScript memory corruption exploit.
- [**153**星][4y] [Go] [inconshreveable/go-tunnel](https://github.com/inconshreveable/go-tunnel) [DEPRECATED] Tunnel to localhost as a library
-- [**153**星][22d] [SourcePawn] [splewis/csgo-practice-mode](https://github.com/splewis/csgo-practice-mode) CS:GO Sourcemod plugin for private team/individual practice servers
-- [**153**星][3m] [C] [ajkhoury/uefi-bootkit](https://github.com/ajkhoury/UEFI-Bootkit) A small bootkit which does not rely on x64 assembly.
+- [**153**星][11m] [CSS] [kali-docs-cn/kali-linux-web-pentest-cookbook-zh](https://github.com/kali-docs-cn/kali-linux-web-pentest-cookbook-zh)
+- [**153**星][2y] [Java] [zjlywjh001/phrackctf-platform-team](https://github.com/zjlywjh001/phrackctf-platform-team) CTF platfrom(Team Version) developed by Jarvis from Phrack Team. 做一个功能最全的CTF平台。
+- [**153**星][3m] [HTML] [zer0yu/berserker](https://github.com/zer0yu/berserker) A list of useful payloads for Web Application Security and Pentest/CTF
+- [**153**星][3y] [ysrc/androidobfusedictionary](https://github.com/ysrc/androidobfusedictionary) Android ProGuard变态混淆字典
- [**153**星][1y] [voidfyoo/cve-2018-3191](https://github.com/voidfyoo/cve-2018-3191) CVE-2018-3191 payload generator
+- [**153**星][8m] [valdikss/super-uefiinsecureboot-disk](https://github.com/valdikss/super-uefiinsecureboot-disk) Super UEFIinSecureBoot Disk: Boot any OS or .efi file without disabling UEFI Secure Boot
- [**153**星][3y] [Ruby] [urbanadventurer/username-anarchy](https://github.com/urbanadventurer/username-anarchy) Username tools for penetration testing
- [**153**星][3m] [Py] [trustedsec/ridenum](https://github.com/trustedsec/ridenum) Rid_enum is a null session RID cycle attack for brute forcing domain controllers.
-- [**153**星][4m] [threatexpress/malleable-c2](https://github.com/threatexpress/malleable-c2) Cobalt Strike Malleable C2 Design and Reference Guide
-- [**153**星][11m] [C] [sjvermeu/cvechecker](https://github.com/sjvermeu/cvechecker) Command-line utility to scan the system and report on potential vulnerabilities, based on public CVE data
-- [**153**星][2m] [PowerShell] [shiva108/ctf-notes](https://github.com/shiva108/ctf-notes) Everything needed for doing CTFs
+- [**153**星][2y] [ASP] [testsecer/webshell](https://github.com/testsecer/webshell) 这是一个WebShell收集项目
- [**153**星][4y] [Py] [samyoyo/weeman](https://github.com/samyoyo/weeman) HTTP Server for phishing in Python
-- [**153**星][2m] [Py] [renatahodovan/fuzzinator](https://github.com/renatahodovan/fuzzinator) Fuzzinator Random Testing Framework
-- [**153**星][2y] [PowerShell] [psconfeu/2018](https://github.com/psconfeu/2018) PowerShell Conference Europe 2018 Slides and Demo Scripts
+- [**153**星][3d] [Py] [renatahodovan/fuzzinator](https://github.com/renatahodovan/fuzzinator) Fuzzinator Random Testing Framework
- [**153**星][10m] [Ruby] [palkan/n_plus_one_control](https://github.com/palkan/n_plus_one_control) RSpec and Minitest matchers to prevent N+1 queries problem
- [**153**星][2y] [HTML] [mpirnat/lets-be-bad-guys](https://github.com/mpirnat/lets-be-bad-guys) A deliberately-vulnerable website and exercises for teaching about the OWASP Top 10
-- [**153**星][1m] [Go] [mimoo/disco](https://github.com/mimoo/disco) a protocol to encrypt communications and a cryptographic library based on Disco
- [**153**星][8m] [Py] [k0retux/fuddly](https://github.com/k0retux/fuddly) Fuzzing/数据操纵(Data Manipulation)框架
-- [**153**星][4m] [AutoIt] [jschicht/rawcopy](https://github.com/jschicht/rawcopy) copy files off NTFS volumes by using low level disk reading method
-- [**153**星][25d] [Go] [jollheef/out-of-tree](https://github.com/jollheef/out-of-tree) out-of-tree kernel {module, exploit} development tool
-- [**153**星][11d] [Py] [inquisb/keimpx](https://github.com/inquisb/keimpx) Check for valid credentials across a network over SMB
-- [**153**星][9m] [C++] [changeofpace/self-remapping-code](https://github.com/changeofpace/self-remapping-code) This program remaps its image to prevent the page protection of pages contained in the image from being modified via NtProtectVirtualMemory.
-- [**153**星][7m] [C#] [anthemtotheego/sharpexec](https://github.com/anthemtotheego/sharpexec) an offensive security C# tool designed to aid with lateral movement
+- [**153**星][2y] [JS] [cazala/react-coin-hive](https://github.com/cazala/react-coin-hive) Mine cryptocurrency while your users haven't engaged with your content lately
+- [**153**星][2y] [Py] [atlassian/localstack](https://github.com/atlassian/localstack)
- [**153**星][12m] [Go] [adguardteam/adguarddns](https://github.com/adguardteam/adguarddns) Public DNS resolver that protects you from ad trackers
+- [**153**星][5m] [Shell] [0xmitsurugi/gimmecredz](https://github.com/0xmitsurugi/gimmecredz) You're a #pentester and you totally pwn that linux box, congrats! Now what? You can launch gimmecredz.sh which will try to extract all passwords from known locations.
- [**153**星][3y] [Makefile] [0x36/vpnpivot](https://github.com/0x36/vpnpivot) Explore the network using VPNPivot tool
-- [**152**星][11m] [CSS] [kali-docs-cn/kali-linux-web-pentest-cookbook-zh](https://github.com/kali-docs-cn/kali-linux-web-pentest-cookbook-zh)
+- [**152**星][7m] [Py] [vysecurity/linkedint](https://github.com/vysecurity/linkedint) LinkedIn Recon Tool
+- [**152**星][12d] [C#] [vivami/sauroneye](https://github.com/vivami/sauroneye) Search tool to find specific files containing specific words, i.e. files containing passwords..
- [**152**星][2y] [Py] [0xbing/wukong-agent](https://github.com/0xbing/wukong-agent) Web scan foundation framework
-- [**152**星][2y] [Java] [zjlywjh001/phrackctf-platform-team](https://github.com/zjlywjh001/phrackctf-platform-team) CTF platfrom(Team Version) developed by Jarvis from Phrack Team. 做一个功能最全的CTF平台。
-- [**152**星][3m] [HTML] [zer0yu/berserker](https://github.com/zer0yu/berserker) A list of useful payloads for Web Application Security and Pentest/CTF
-- [**152**星][8m] [valdikss/super-uefiinsecureboot-disk](https://github.com/valdikss/super-uefiinsecureboot-disk) Super UEFIinSecureBoot Disk: Boot any OS or .efi file without disabling UEFI Secure Boot
+- [**152**星][1y] [Py] [vanpersiexp/expcamera](https://github.com/vanpersiexp/expcamera) Exploit Netwave and GoAhead IP Camera
+- [**152**星][6d] [Py] [thehive-project/cortex-analyzers](https://github.com/thehive-project/cortex-analyzers) Cortex Analyzers Repository
- [**152**星][4y] [thecreeper/privacyfox](https://github.com/thecreeper/privacyfox) PrivacyFox tweaks various preferences in Firefox in order to enhance the privacy of users; it will also try to enforce these changes to maintain your privacy online.
-- [**152**星][6m] [PowerShell] [stealthbits/poshkatz](https://github.com/stealthbits/poshkatz) PowerShell module for Mimikatz
+- [**152**星][6m] [PS] [stealthbits/poshkatz](https://github.com/stealthbits/poshkatz) PowerShell module for Mimikatz
- [**152**星][2y] [JS] [snooze6/fios](https://github.com/snooze6/fios) small proof of concept gui for auditing iOS applications based on objection
-- [**152**星][5m] [Py] [ragibson/steganography](https://github.com/ragibson/steganography) Least Significant Bit Steganography for bitmap images (.bmp and .png), WAV sound files, and byte sequences. Simple LSB Steganalysis (LSB extraction) for bitmap images.
+- [**152**星][7d] [Py] [shirosaidev/sharesniffer](https://github.com/shirosaidev/sharesniffer) 远程文件系统自动嗅探、挂载和爬取
+- [**152**星][2m] [Py] [richiercyrus/venator](https://github.com/richiercyrus/venator) Venator is a python tool used to gather data for proactive detection of malicious activity on macOS devices.
+- [**152**星][4d] [C] [pkroma/processhacker](https://github.com/pkroma/processhacker) A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware—mirror of
- [**152**星][5y] [C++] [mothran/aflpin](https://github.com/mothran/aflpin) aflpin enables afl to fuzz blackbox binaries using a pin tool to trace execution branches.
- [**152**星][2y] [Py] [laie/worldsfirstsha2vulnerability](https://github.com/laie/worldsfirstsha2vulnerability) Sha256 vulnerability for full rounds. Circular hash attack.
+- [**152**星][3y] [C] [ixty/xarch_shellcode](https://github.com/ixty/xarch_shellcode) Cross Architecture Shellcode in C
- [**152**星][7y] [Py] [intrepidusgroup/imdmtools](https://github.com/intrepidusgroup/imdmtools) Intrepidus Group's iOS MDM tools
-- [**152**星][2m] [JS] [interference-security/frida-scripts](https://github.com/interference-security/frida-scripts) Frida Scripts
-- [**152**星][2y] [C] [ifding/radare2-tutorial](https://github.com/ifding/radare2-tutorial) Reverse Engineering using Radare2
- [**152**星][6m] [Objective-C++] [gaoshilei/mmplugin](https://github.com/gaoshilei/mmplugin) 微信自动抢红包、修改运动步数、朋友圈小视频转发等功能(无需越狱),附微信重签名教程
+- [**152**星][2y] [Java] [floyd-fuh/jks-private-key-cracker-hashcat](https://github.com/floyd-fuh/jks-private-key-cracker-hashcat) Nail in the JKS coffin - Cracking passwords of private key entries in a JKS file
+- [**152**星][8y] [dotfighter/torshammer](https://github.com/dotfighter/torshammer) Tor's hammer. Slow post DDOS tool written in python.
- [**152**星][7y] [C] [dannvix/keylogger-osx](https://github.com/dannvix/keylogger-osx) Very simple keylogger for self-quantifying on Mac OS X
-- [**152**星][2m] [Go] [c-sto/recursebuster](https://github.com/c-sto/recursebuster) rapid content discovery tool for recursively querying webservers, handy in pentesting and web application assessments
-- [**152**星][2y] [Py] [atlassian/localstack](https://github.com/atlassian/localstack)
-- [**152**星][9d] [Py] [antichown/subdomain-takeover](https://github.com/antichown/subdomain-takeover) Subdomain Takeover Scanner | Subdomain Takeover Tool | by 0x94
+- [**152**星][3m] [Shell] [countercept/snake](https://github.com/countercept/snake) snake - a malware storage zoo
+- [**152**星][2d] [Shell] [bitnami/bitnami-docker-nginx](https://github.com/bitnami/bitnami-docker-nginx) Bitnami nginx Docker Image
- [**152**星][1m] [C] [angr/patcherex](https://github.com/angr/patcherex) Shellphish's automated patching engine, originally created for the Cyber Grand Challenge.
-- [**151**星][3y] [PowerShell] [nsacyber/pass-the-hash-guidance](https://github.com/nsacyber/pass-the-hash-guidance) Configuration guidance for implementing Pass-the-Hash mitigations. #nsacyber
+- [**151**星][1y] [Java] [zhangjiupeng/agentx](https://github.com/zhangjiupeng/agentx) Shadowsocks升级版,支持协议伪装和流量压缩,易于扩展,可统计流量
+- [**151**星][3y] [PS] [nsacyber/pass-the-hash-guidance](https://github.com/nsacyber/pass-the-hash-guidance) Configuration guidance for implementing Pass-the-Hash mitigations. #nsacyber
+- [**151**星][23d] [C] [tiiffi/mcrcon](https://github.com/tiiffi/mcrcon) Rcon client for Minecraft
+- [**151**星][1m] [C] [processhacker/plugins-extra](https://github.com/processhacker/plugins-extra) These are highly unstable, buggy, incomplete plugins that are not included with Process Hacker by default.
+- [**151**星][3y] [zbetcheckin/pdf_analysis](https://github.com/zbetcheckin/pdf_analysis) Several PDF analysis reassembled with additional tips and tools
- [**151**星][2y] [Rust] [trailofbits/flying-sandbox-monster](https://github.com/trailofbits/flying-sandbox-monster) 如何将 Windows Defender 放到沙箱中运行,以及关于 Windows 系统上 Rust 的若干思考
-- [**151**星][2m] [Py] [thehive-project/cortex-analyzers](https://github.com/thehive-project/cortex-analyzers) Cortex Analyzers Repository
-- [**151**星][12m] [Py] [shirosaidev/sharesniffer](https://github.com/shirosaidev/sharesniffer) 远程文件系统自动嗅探、挂载和爬取
-- [**151**星][8d] [HTML] [retest/recheck-web](https://github.com/retest/recheck-web) recheck for web apps – change comparison tool with local Golden Masters, Git-like ignore syntax and "Unbreakable Selenium" tests.
+- [**151**星][1y] [Py] [souhardya/zerodoor](https://github.com/souhardya/zerodoor) A script written lazily for generating cross-platform backdoors on the go :)
+- [**151**星][2y] [CSS] [saadeghi/browser-hack-sass-mixins](https://github.com/saadeghi/browser-hack-sass-mixins) Browser hack sass mixin - Apply your SCSS to a specific browser - CSS hacks for: IE, Chrome, Firefox, Edge, Opera
+- [**151**星][2d] [HTML] [retest/recheck-web](https://github.com/retest/recheck-web) recheck for web apps – change comparison tool with local Golden Masters, Git-like ignore syntax and "Unbreakable Selenium" tests.
- [**151**星][2y] [Py] [reswitched/cagetheunicorn](https://github.com/reswitched/cagetheunicorn) Debugging/emulating environment for Switch code
-- [**151**星][11d] [Shell] [realtho/partyloud](https://github.com/realtho/partyloud) A simple tool to generate fake web browsing and mitigate tracking
- [**151**星][2y] [Java] [psiinon/bodgeit](https://github.com/psiinon/bodgeit) The BodgeIt Store is a vulnerable web application which is currently aimed at people who are new to pen testing.
-- [**151**星][8d] [C] [pkroma/processhacker](https://github.com/pkroma/processhacker) A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware—mirror of
+- [**151**星][5m] [Assembly] [peterferrie/win-exec-calc-shellcode](https://github.com/peterferrie/win-exec-calc-shellcode) 执行calc.exe的Shellcode (x86/x64, 所有版本/SPs)
+- [**151**星][6y] [onx/cih](https://github.com/onx/cih) The source code of the CIH virus
- [**151**星][2y] [CSS] [m6a-uds/ssrf-lab](https://github.com/m6a-uds/ssrf-lab) Lab for exploring SSRF vulnerabilities
-- [**151**星][21d] [C] [libimobiledevice/libirecovery](https://github.com/libimobiledevice/libirecovery) Library and utility to talk to iBoot/iBSS via USB on Mac OS X, Windows, and Linux
+- [**151**星][8d] [C] [libimobiledevice/libirecovery](https://github.com/libimobiledevice/libirecovery) Library and utility to talk to iBoot/iBSS via USB on Mac OS X, Windows, and Linux
+- [**151**星][2m] [Java] [leadroyal/fastjson-blacklist](https://github.com/leadroyal/fastjson-blacklist)
- [**151**星][2y] [C++] [l3cr0f/dccwbypassuac](https://github.com/l3cr0f/dccwbypassuac) Windows 8.1 and 10 UAC bypass abusing WinSxS in "dccw.exe".
-- [**151**星][4m] [Py] [kacperszurek/burp_wp](https://github.com/kacperszurek/burp_wp) Find known vulnerabilities in WordPress plugins and themes using Burp Suite proxy. WPScan like plugin for Burp.
+- [**151**星][5m] [Py] [kacperszurek/burp_wp](https://github.com/kacperszurek/burp_wp) Find known vulnerabilities in WordPress plugins and themes using Burp Suite proxy. WPScan like plugin for Burp.
- [**151**星][2y] [Py] [k4m4/dymerge](https://github.com/k4m4/dymerge) takes given wordlists and merges them into one dynamic dictionary that can then be used as ammunition for a successful dictionary based (or bruteforce) attack.
-- [**151**星][28d] [Py] [jymcheong/autottp](https://github.com/jymcheong/autottp) Automated Tactics Techniques & Procedures
-- [**151**星][3y] [PowerShell] [johnnydep/owa-toolkit](https://github.com/johnnydep/owa-toolkit) Powershell module to assist in attacking Exchange/Outlook Web Access
-- [**151**星][27d] [jeremymain/gpuprofiler](https://github.com/jeremymain/gpuprofiler) Understand your application and workflow resource requirements
-- [**151**星][3y] [C] [ixty/xarch_shellcode](https://github.com/ixty/xarch_shellcode) Cross Architecture Shellcode in C
+- [**151**星][30d] [Py] [jymcheong/autottp](https://github.com/jymcheong/autottp) Automated Tactics Techniques & Procedures
+- [**151**星][3y] [PS] [johnnydep/owa-toolkit](https://github.com/johnnydep/owa-toolkit) Powershell module to assist in attacking Exchange/Outlook Web Access
+- [**151**星][1y] [Py] [jiangsir404/php-code-audit](https://github.com/jiangsir404/php-code-audit) php code audit for cms vulnerabilities / 代码审计,对一些大型cms漏洞的复现研究,更新源码和漏洞exp
+- [**151**星][29d] [jeremymain/gpuprofiler](https://github.com/jeremymain/gpuprofiler) Understand your application and workflow resource requirements
+- [**151**星][2m] [Py] [iamblackhacker/facebook-bruteforce](https://github.com/iamblackhacker/facebook-bruteforce) Bruteforce attack on Facebook account using python script
- [**151**星][5y] [Shell] [hellman/fixenv](https://github.com/hellman/fixenv) Fix stack addresses (when no ASLR) with and without debugging
+- [**151**星][3m] [C] [hasherezade/process_doppelganging](https://github.com/hasherezade/process_doppelganging) 进程注入技术 Process Doppelganging 的实现代码
- [**151**星][8m] [Py] [githacktools/leaked](https://github.com/githacktools/leaked) Leaked? 2.1 - A Checking tool for Hash codes, Passwords and Emails leaked
-- [**151**星][3y] [C++] [gbonacini/cve-2016-5195](https://github.com/gbonacini/cve-2016-5195) A CVE-2016-5195 exploit example.
-- [**151**星][2y] [Java] [floyd-fuh/jks-private-key-cracker-hashcat](https://github.com/floyd-fuh/jks-private-key-cracker-hashcat) Nail in the JKS coffin - Cracking passwords of private key entries in a JKS file
- [**151**星][1y] [css] [eun/ctf.tf](https://github.com/eun/ctf.tf) A database of collected CTFs and their solutions.
-- [**151**星][8y] [dotfighter/torshammer](https://github.com/dotfighter/torshammer) Tor's hammer. Slow post DDOS tool written in python.
-- [**151**星][8d] [Shell] [bitnami/bitnami-docker-nginx](https://github.com/bitnami/bitnami-docker-nginx) Bitnami nginx Docker Image
+- [**151**星][3y] [Shell] [buguroo/cuckooautoinstall](https://github.com/buguroo/cuckooautoinstall) Auto Installer Script for Cuckoo Sandbox
- [**151**星][2y] [JS] [alexzzz9/ps4-5.01-webkit-exploit-poc](https://github.com/alexzzz9/ps4-5.01-webkit-exploit-poc) PS4 5.01 WebKit Exploit PoC
-- [**150**星][1y] [Py] [vanpersiexp/expcamera](https://github.com/vanpersiexp/expcamera) Exploit Netwave and GoAhead IP Camera
+- [**150**星][13d] [C] [ray-cp/vm-escape](https://github.com/ray-cp/vm-escape) some interesting vm-escape game
- [**150**星][1m] [Py] [tintinweb/ecdsa-private-key-recovery](https://github.com/tintinweb/ecdsa-private-key-recovery) A simple library to recover the private key of ECDSA and DSA signatures sharing the same nonce k and therefore having identical signature parameter r
- [**150**星][3m] [Py] [stuhli/dfirtrack](https://github.com/stuhli/dfirtrack) 数字取证, 与事件响应追踪. 基于Django
- [**150**星][9y] [Shell] [spiderlabs/jboss-autopwn](https://github.com/spiderlabs/jboss-autopwn) A JBoss script for obtaining remote shell access
-- [**150**星][1y] [Py] [souhardya/zerodoor](https://github.com/souhardya/zerodoor) A script written lazily for generating cross-platform backdoors on the go :)
- [**150**星][1y] [Py] [shawarkhanethicalhacker/d-tect](https://github.com/shawarkhanethicalhacker/d-tect) D-TECT - Pentesting the Modern Web
- [**150**星][2y] [Py] [sensepost/userenum](https://github.com/sensepost/userenum) Domain user enumeration tool
- [**150**星][3y] [C++] [scateu/kalibrate-hackrf](https://github.com/scateu/kalibrate-hackrf) kalibrate for hackrf
-- [**150**星][2y] [CSS] [saadeghi/browser-hack-sass-mixins](https://github.com/saadeghi/browser-hack-sass-mixins) Browser hack sass mixin - Apply your SCSS to a specific browser - CSS hacks for: IE, Chrome, Firefox, Edge, Opera
-- [**150**星][2m] [Py] [richiercyrus/venator](https://github.com/richiercyrus/venator) Venator is a python tool used to gather data for proactive detection of malicious activity on macOS devices.
-- [**150**星][5m] [Assembly] [peterferrie/win-exec-calc-shellcode](https://github.com/peterferrie/win-exec-calc-shellcode) 执行calc.exe的Shellcode (x86/x64, 所有版本/SPs)
+- [**150**星][12d] [Py] [rogerhu/gdb-heap](https://github.com/rogerhu/gdb-heap) Heap Analyzer for Python
+- [**150**星][5y] [Py] [rep/dionaea](https://github.com/rep/dionaea) dionaea low interaction honeypot (forked from dionaea.carnivore.it)
- [**150**星][2y] [Py] [orppra/ropa](https://github.com/orppra/ropa) ROP 链创建工具, 带界面, 基于 Ropper
-- [**150**星][6y] [onx/cih](https://github.com/onx/cih) The source code of the CIH virus
+- [**150**星][5m] [Py] [moyix/pdbparse](https://github.com/moyix/pdbparse) Python code to parse Microsoft PDB files
+- [**150**星][1y] [C] [matthiaskramm/swftools](https://github.com/matthiaskramm/swftools) Utilities for editing and generating Adobe Flash (SWF) files.
- [**150**星][2y] [Py] [malwaretech/trickbot-toolkit](https://github.com/malwaretech/trickbot-toolkit) A collection of tools for dealing with TrickBot
- [**150**星][2y] [Go] [kudelskisecurity/cdf](https://github.com/kudelskisecurity/cdf) automatically test the correctness and security of cryptographic software
-- [**150**星][2m] [Py] [iamblackhacker/facebook-bruteforce](https://github.com/iamblackhacker/facebook-bruteforce) Bruteforce attack on Facebook account using python script
- [**150**星][1y] [Shell] [hiruna/wifi-txpower-unlocker](https://github.com/hiruna/wifi-txpower-unlocker) bash 脚本, 从 Central Regulatory Domain Agent 和 Wireles Regulatory Database 获取源, 生成修改版的 regulatory.bin 并 patch 内核, 以解锁 WiFi TX power
- [**150**星][6y] [Py] [hiddenillusion/analyzepe](https://github.com/hiddenillusion/analyzepe) Wraps around various tools and provides some additional checks/information to produce a centralized report of a PE file.
-- [**150**星][14d] [Py] [gdbinit/lldbinit](https://github.com/gdbinit/lldbinit) A gdbinit clone for LLDB
+- [**150**星][16d] [Py] [gdbinit/lldbinit](https://github.com/gdbinit/lldbinit) A gdbinit clone for LLDB
- [**150**星][2y] [Py] [ga-ryo/idafuzzy](https://github.com/ga-ryo/idafuzzy) 模糊搜索: 命令/函数/结构体
- [**150**星][7m] [Py] [fox-it/adconnectdump](https://github.com/fox-it/adconnectdump) Dump Azure AD Connect credentials for Azure AD and Active Directory
- [**150**星][3y] [Py] [enginebai/pymedium](https://github.com/enginebai/pymedium) Unofficial Medium Python Flask API and SDK
- [**150**星][2y] [dragonquesthero/awesome-windows-security-development](https://github.com/dragonquesthero/awesome-windows-security-development) awesome-windows-security-development
-- [**150**星][3y] [Shell] [buguroo/cuckooautoinstall](https://github.com/buguroo/cuckooautoinstall) Auto Installer Script for Cuckoo Sandbox
+- [**150**星][1y] [C#] [codewhitesec/lethalhta](https://github.com/codewhitesec/lethalhta) Lateral Movement technique using DCOM and HTA
+- [**150**星][2y] [Py] [cls1991/ng](https://github.com/cls1991/ng) 获取未连接的 Wifi 的密码
- [**150**星][1y] [Py] [ax330d/hrdev](https://github.com/ax330d/hrdev) 反编译输出增强: 使用Python Clang解析标准的IDA反编译结果
- [**150**星][3y] [Py] [alschwalm/foresight](https://github.com/alschwalm/foresight) A tool for predicting the output of random number generators
-- [**150**星][4m] [Shell] [0xmitsurugi/gimmecredz](https://github.com/0xmitsurugi/gimmecredz) You're a #pentester and you totally pwn that linux box, congrats! Now what? You can launch gimmecredz.sh which will try to extract all passwords from known locations.
-- [**149**星][11d] [C] [ray-cp/vm-escape](https://github.com/ray-cp/vm-escape) some interesting vm-escape game
+- [**150**星][2y] [C] [alexdenisov/bitcode_retriever](https://github.com/alexdenisov/bitcode_retriever) Retrieves Bitcode from Mach-O binaries
+- [**150**星][2y] [Py] [aipengjie/sensitivefilescan](https://github.com/aipengjie/sensitivefilescan)
- [**149**星][1y] [C++] [ajkhoury/sigmaker-x64](https://github.com/ajkhoury/SigMaker-x64) IDA Pro 7.0 compatible SigMaker plugin
-- [**149**星][30d] [C] [processhacker/plugins-extra](https://github.com/processhacker/plugins-extra) These are highly unstable, buggy, incomplete plugins that are not included with Process Hacker by default.
-- [**149**星][7m] [C#] [wohlstand/destroy-windows-10-spying](https://github.com/wohlstand/destroy-windows-10-spying) 禁用/销毁Windows的间谍功能
+- [**149**星][11m] [Go] [znly/strobfus](https://github.com/znly/strobfus) String obfuscation
+- [**149**星][1m] [C] [wmkhoo/taintgrind](https://github.com/wmkhoo/taintgrind) A taint-tracking plugin for the Valgrind memory checking tool
- [**149**星][11m] [Py] [wangshub/hmpa-pi](https://github.com/wangshub/hmpa-pi) 在树莓派上,利用 Wireshark 扫描附近网络 WiFi 设备,并对扫描结果通过邮件或者微信进行推送
-- [**149**星][9d] [Go] [ullaakut/nmap](https://github.com/ullaakut/nmap) Idiomatic nmap library for go developers
+- [**149**星][4y] [trietptm/sql-injection-payloads](https://github.com/trietptm/sql-injection-payloads) SQL Injection Payloads for Burp Suite, OWASP Zed Attack Proxy,...
- [**149**星][1y] [C] [theofficialflow/update365](https://github.com/theofficialflow/update365) Custom Firmware 3.65 HENkaku Ensō Updater for PS Vita
-- [**149**星][15d] [Py] [swehner/foos](https://github.com/swehner/foos) Instant replay system for foosball table
+- [**149**星][17d] [Py] [swehner/foos](https://github.com/swehner/foos) Instant replay system for foosball table
- [**149**星][8m] [Py] [safebreach-labs/sireprat](https://github.com/safebreach-labs/sireprat) Remote Command Execution as SYSTEM on Windows IoT Core
- [**149**星][2m] [JS] [rwjblue/ember-cli-content-security-policy](https://github.com/rwjblue/ember-cli-content-security-policy) use Content Security Policy (CSP) in your project
-- [**149**星][5y] [Py] [rep/dionaea](https://github.com/rep/dionaea) dionaea low interaction honeypot (forked from dionaea.carnivore.it)
-- [**149**星][18d] [HTML] [neal1991/gshark](https://github.com/neal1991/gshark) Scan for sensitive information easily and effectively.
-- [**149**星][29d] [Py] [nccgroup/idahunt](https://github.com/nccgroup/idahunt) 在IDA外部使用IDAPython脚本, 批量创建/读取/解析IDB文件, 可编写自己的IDB分析脚本,命令行工具,
+- [**149**星][20d] [HTML] [neal1991/gshark](https://github.com/neal1991/gshark) Scan for sensitive information easily and effectively.
+- [**149**星][1m] [Py] [nccgroup/idahunt](https://github.com/nccgroup/idahunt) 在IDA外部使用IDAPython脚本, 批量创建/读取/解析IDB文件, 可编写自己的IDB分析脚本,命令行工具,
- [**149**星][3y] [Java] [mwielgoszewski/jython-burp-api](https://github.com/mwielgoszewski/jython-burp-api) Develop Burp extensions in Jython
-- [**149**星][5m] [Py] [moyix/pdbparse](https://github.com/moyix/pdbparse) Python code to parse Microsoft PDB files
-- [**149**星][1y] [C] [matthiaskramm/swftools](https://github.com/matthiaskramm/swftools) Utilities for editing and generating Adobe Flash (SWF) files.
-- [**149**星][2m] [Java] [leadroyal/fastjson-blacklist](https://github.com/leadroyal/fastjson-blacklist)
-- [**149**星][12m] [Py] [jiangsir404/php-code-audit](https://github.com/jiangsir404/php-code-audit) php code audit for cms vulnerabilities / 代码审计,对一些大型cms漏洞的复现研究,更新源码和漏洞exp
-- [**149**星][27d] [hl2guide/all-in-one-customized-adblock-list](https://github.com/hl2guide/all-in-one-customized-adblock-list) An all-in-one adblock list that thoroughly blocks trackers, popup ads, ads, unwanted cookies, fake news, cookie warning messages, unwanted comment sections, crypto-coin mining, YouTube clutter, Twitter guff and social network hassles. Development is halted at version 2.8.
+- [**149**星][1y] [PS] [mattifestation/psreflect](https://github.com/mattifestation/psreflect) Easily define in-memory enums, structs, and Win32 functions in PowerShell
+- [**149**星][6y] [C++] [kaiserfarrell/malware](https://github.com/kaiserfarrell/malware) virus collection source code
+- [**149**星][9d] [C] [jovanbulck/sgx-step](https://github.com/jovanbulck/sgx-step) A practical attack framework for precise enclave execution control
+- [**149**星][2m] [Ruby] [jekyll/github-metadata](https://github.com/jekyll/github-metadata) Jekyll plugin to propagate the `site.github` namespace and set default values for use with GitHub Pages.
- [**149**星][4y] [C++] [hiwincn/htran](https://github.com/hiwincn/htran) HTran is a connection bouncer, a kind of proxy server. A “listener” program is hacked stealthily onto an unsuspecting host anywhere on the Internet. When it receives signals from the actual target system, it redirects it to the hacker’s server.
-- [**149**星][3m] [C] [hasherezade/process_doppelganging](https://github.com/hasherezade/process_doppelganging) 进程注入技术 Process Doppelganging 的实现代码
+- [**149**星][7m] [Py] [ethereum/evmlab](https://github.com/ethereum/evmlab) Utilities for interacting with the Ethereum virtual machine
- [**149**星][2m] [Py] [eth-sri/diffai](https://github.com/eth-sri/diffai) 用于保护神经网络抵御攻击的库
+- [**149**星][2y] [JS] [djadmin/passw0rd](https://github.com/djadmin/passw0rd)
- [**149**星][2y] [Shell] [dhavalkapil/luaver](https://github.com/dhavalkapil/luaver) Lua Version Manager - Managing and switching between different versions of Lua, LuaJIT and Luarocks made easy
- [**149**星][5y] [Py] [devttys0/wps](https://github.com/devttys0/wps) WPS related utilities
-- [**149**星][2m] [Shell] [countercept/snake](https://github.com/countercept/snake) snake - a malware storage zoo
-- [**149**星][1y] [C#] [codewhitesec/lethalhta](https://github.com/codewhitesec/lethalhta) Lateral Movement technique using DCOM and HTA
-- [**149**星][2y] [Py] [cls1991/ng](https://github.com/cls1991/ng) 获取未连接的 Wifi 的密码
+- [**149**星][3y] [Jupyter Notebook] [dchad/malware-detection](https://github.com/dchad/malware-detection) Malware Detection and Classification Using Machine Learning
+- [**149**星][1y] [chryzsh/awesome-windows-security](https://github.com/chryzsh/awesome-windows-security) List of Awesome Windows Security Resources
+- [**149**星][20d] [JS] [certsocietegenerale/swordphish-awareness](https://github.com/certsocietegenerale/swordphish-awareness) Swordphish Phishing Awareness Tool
+- [**149**星][1y] [brucetg/app_security](https://github.com/brucetg/app_security)
- [**149**星][4y] [Py] [arxsys/dff](https://github.com/arxsys/dff) DFF (Digital Forensics Framework) is a Forensics Framework coming with command line and graphical interfaces. DFF can be used to investigate hard drives and volatile memory and create reports about user and system activities.
-- [**149**星][2y] [C] [alexdenisov/bitcode_retriever](https://github.com/alexdenisov/bitcode_retriever) Retrieves Bitcode from Mach-O binaries
-- [**149**星][1y] [PowerShell] [airbus-seclab/powersap](https://github.com/airbus-seclab/powersap) powersap:PowershellSAP 评估工具。所有公开且流行/有效的工具的PowerShell 重制版,例如 Bizploit、Metasploitauxiliary 模块、网络收集的 Python 脚本。
-- [**149**星][2y] [Py] [aipengjie/sensitivefilescan](https://github.com/aipengjie/sensitivefilescan)
+- [**149**星][1y] [PS] [airbus-seclab/powersap](https://github.com/airbus-seclab/powersap) powersap:PowershellSAP 评估工具。所有公开且流行/有效的工具的PowerShell 重制版,例如 Bizploit、Metasploitauxiliary 模块、网络收集的 Python 脚本。
- [**149**星][8m] [C] [adrianyy/eacreversing](https://github.com/adrianyy/eacreversing) Reversing EasyAntiCheat.
-- [**148**星][21d] [C] [tiiffi/mcrcon](https://github.com/tiiffi/mcrcon) Rcon client for Minecraft
-- [**148**星][7m] [Py] [vysecurity/linkedint](https://github.com/vysecurity/linkedint) LinkedIn Recon Tool
-- [**148**星][1m] [Py] [travisfoley/dfirtriage](https://github.com/travisfoley/dfirtriage) Digital forensic acquisition tool for Windows based incident response.
+- [**149**星][11m] [Py] [649/crashcast-exploit](https://github.com/649/crashcast-exploit) This tool allows you mass play any YouTube video, terminate apps and rename Chromecast device(s) obtained from Shodan.io
+- [**149**星][3y] [Java] [1998lixin/wechat-database](https://github.com/1998lixin/wechat-database) 破解微信数据库 获取想要的数据
- [**148**星][12m] [Java] [wnagzihxa1n/ctf-mobile](https://github.com/wnagzihxa1n/CTF-Mobile) CTF Solutions by me
- [**148**星][2m] [C] [cntools/cnping](https://github.com/cntools/cnping) Minimal Graphical IPV4 Ping Tool
-- [**148**星][11m] [Go] [znly/strobfus](https://github.com/znly/strobfus) String obfuscation
-- [**148**星][3y] [zbetcheckin/pdf_analysis](https://github.com/zbetcheckin/pdf_analysis) Several PDF analysis reassembled with additional tips and tools
-- [**148**星][29d] [C] [wmkhoo/taintgrind](https://github.com/wmkhoo/taintgrind) A taint-tracking plugin for the Valgrind memory checking tool
-- [**148**星][4y] [trietptm/sql-injection-payloads](https://github.com/trietptm/sql-injection-payloads) SQL Injection Payloads for Burp Suite, OWASP Zed Attack Proxy,...
+- [**148**星][5d] [Py] [tuhinshubhra/extanalysis](https://github.com/tuhinshubhra/extanalysis) Browser Extension Analysis Framework - Scan, Analyse Chrome and firefox extensions for vulnerabilities and intels
- [**148**星][3m] [Py] [trailofbits/protofuzz](https://github.com/trailofbits/protofuzz) Google Protocol Buffers message generator
-- [**148**星][10d] [Py] [rogerhu/gdb-heap](https://github.com/rogerhu/gdb-heap) Heap Analyzer for Python
+- [**148**星][9m] [C] [trailofbits/onesixtyone](https://github.com/trailofbits/onesixtyone) Fast SNMP Scanner
+- [**148**星][6m] [Py] [thekingofduck/burpfakeip](https://github.com/thekingofduck/burpfakeip) 一个用于伪造ip地址进行爆破的Burp Suite插件
+- [**148**星][3m] [Py] [secdec/adapt](https://github.com/secdec/adapt) WebApp自动化渗透测试工具
- [**148**星][1y] [Py] [raminfp/linux_exploit_development](https://github.com/raminfp/linux_exploit_development) Linux Exploit Development Techniques
+- [**148**星][6m] [Shell] [petermosmans/security-scripts](https://github.com/petermosmans/security-scripts) A collection of security related Python and Bash shell scripts. Analyze hosts on generic security vulnerabilities. Wrapper around popular tools like nmap (portscanner), nikto (webscanner) and testssl.sh (SSL/TLS scanner)
- [**148**星][2y] [owenliang/php-fpm-code-analysis](https://github.com/owenliang/php-fpm-code-analysis) php-fpm源码分析
- [**148**星][2y] [C] [ortegaalfredo/kscope](https://github.com/ortegaalfredo/kscope) Small tool to visualize small differences on syscall timing
-- [**148**星][1y] [PowerShell] [nexxai/cryptoblocker](https://github.com/nexxai/cryptoblocker) A script to deploy File Server Resource Manager and associated scripts to block infected users
+- [**148**星][1y] [PS] [nexxai/cryptoblocker](https://github.com/nexxai/cryptoblocker) A script to deploy File Server Resource Manager and associated scripts to block infected users
- [**148**星][5y] [Py] [mveytsman/dilettante](https://github.com/mveytsman/dilettante) Maven central doesn't do SSL when serving you JARs. Dilettante is a MiTM proxy for exploiting that.
+- [**148**星][9m] [mpgn/cve-2019-5418](https://github.com/mpgn/cve-2019-5418) CVE-2019-5418 - File Content Disclosure on Ruby on Rails
+- [**148**星][19d] [C] [microchiptech/cryptoauthlib](https://github.com/microchiptech/cryptoauthlib) Library for interacting with the Crypto Authentication secure elements
- [**148**星][5m] [PHP] [mebjas/csrf-protector-php](https://github.com/mebjas/csrf-protector-php) CSRF Protector library: standalone library for CSRF mitigation
-- [**148**星][1y] [PowerShell] [mattifestation/psreflect](https://github.com/mattifestation/psreflect) Easily define in-memory enums, structs, and Win32 functions in PowerShell
- [**148**星][3y] [HTML] [luxiaok/dnsmasqweb](https://github.com/luxiaok/dnsmasqweb) 基于DNSmasq的DNS解析、以及DHCP地址分配系统
-- [**148**星][22d] [leonjza/awesome-nmap-grep](https://github.com/leonjza/awesome-nmap-grep) Awesome Nmap Grep
-- [**148**星][7d] [C] [jovanbulck/sgx-step](https://github.com/jovanbulck/sgx-step) A practical attack framework for precise enclave execution control
+- [**148**星][24d] [leonjza/awesome-nmap-grep](https://github.com/leonjza/awesome-nmap-grep) Awesome Nmap Grep
+- [**148**星][10d] [Py] [ivandokov/phockup](https://github.com/ivandokov/phockup) Media sorting tool to organize photos and videos from your camera in folders by year, month and day.
- [**148**星][1y] [Py] [hugsy/binja-retdec](https://github.com/hugsy/binja-retdec) Binary Ninja plugin to decompile binaries using RetDec API
- [**148**星][9m] [C++] [googleprojectzero/comparecoverage](https://github.com/googleprojectzero/comparecoverage) Clang instrumentation module for tracing variable and buffer comparisons in C/C++ and saving the coverage data to .sancov files
+- [**148**星][3y] [C] [felixwilhelm/mario_baslr](https://github.com/felixwilhelm/mario_baslr) PoC for breaking hypervisor ASLR using branch target buffer collisions
- [**148**星][5y] [C++] [f-secure/sulo](https://github.com/f-secure/sulo) Dynamic instrumentation tool for Adobe Flash Player built on Intel Pin
-- [**148**星][7m] [Py] [ethereum/evmlab](https://github.com/ethereum/evmlab) Utilities for interacting with the Ethereum virtual machine
-- [**148**星][26d] [C++] [dekuan/vwfirewall](https://github.com/dekuan/vwfirewall) 微盾®VirtualWall®防火墙整套源代码
+- [**148**星][2y] [C] [elfmaster/skeksi_virus](https://github.com/elfmaster/skeksi_virus) Devestating and awesome Linux X86_64 ELF Virus
+- [**148**星][28d] [C++] [dekuan/vwfirewall](https://github.com/dekuan/vwfirewall) 微盾®VirtualWall®防火墙整套源代码
+- [**148**星][11m] [Ruby] [darkoperator/meterpreter-scripts](https://github.com/darkoperator/meterpreter-scripts) Meterpreter Scripts that I'm working on
- [**148**星][9m] [C] [darkabode/zerokit](https://github.com/darkabode/zerokit) Zerokit/GAPZ rootkit (non buildable and only for researching)
-- [**148**星][11m] [Py] [649/crashcast-exploit](https://github.com/649/crashcast-exploit) This tool allows you mass play any YouTube video, terminate apps and rename Chromecast device(s) obtained from Shodan.io
+- [**148**星][12m] [C] [caesar0301/http-sniffer](https://github.com/caesar0301/http-sniffer) A multi-threading tool to sniff TCP flow statistics and embedded HTTP headers from PCAP file. Each TCP flow carrying HTTP is exported to text file in json format.
+- [**148**星][11m] [Py] [bhavsec/reconspider](https://github.com/bhavsec/reconspider)
+- [**148**星][1y] [Py] [anselal/antminer-monitor](https://github.com/anselal/antminer-monitor) Cryptocurrency mining hardware monitor using a simple web interface
- [**148**星][1y] [Py] [0xalexei/windowsdefendertools](https://github.com/0xalexei/windowsdefendertools) Tools for instrumenting Windows Defender's mpengine.dll
-- [**147**星][3y] [ysrc/androidobfusedictionary](https://github.com/ysrc/androidobfusedictionary) Android ProGuard变态混淆字典
+- [**147**星][10m] [Shell] [v2ray/dist](https://github.com/v2ray/dist) Mirror of V2Ray core releases
+- [**147**星][8d] [HTML] [izar/pytm](https://github.com/izar/pytm) A Pythonic framework for threat modeling
+- [**147**星][10m] [Py] [zhovner/mfdread](https://github.com/zhovner/mfdread) Mifare 1k/4k dumps parser in human readable format
- [**147**星][4y] [C] [valdikss/openvpn-fix-dns-leak-plugin](https://github.com/valdikss/openvpn-fix-dns-leak-plugin) OpenVPN plugin to fix Windows DNS Leaks
- [**147**星][2y] [Py] [valardragon/ctf-crypto](https://github.com/valardragon/ctf-crypto) Contains tools for solving RSA and other crypto problems in CTFs.
-- [**147**星][2y] [ASP] [testsecer/webshell](https://github.com/testsecer/webshell) 这是一个WebShell收集项目
- [**147**星][1y] [C++] [tandasat/memorymon](https://github.com/tandasat/memorymon) Detecting execution of kernel memory where is not backed by any image file
- [**147**星][3y] [C] [sysprogs/virtualkd](https://github.com/sysprogs/virtualkd)
- [**147**星][5y] [C] [strazzere/android-lkms](https://github.com/strazzere/android-lkms) Android Loadable Kernel Modules - mostly used for reversing and debugging on controlled systems/emulators
- [**147**星][2y] [Py] [stfpeak/ctf](https://github.com/stfpeak/ctf) some experience in CTFs
-- [**147**星][3m] [Py] [secdec/adapt](https://github.com/secdec/adapt) WebApp自动化渗透测试工具
+- [**147**星][6m] [shramos/awesome-cybersecurity-datasets](https://github.com/shramos/awesome-cybersecurity-datasets) A curated list of amazingly awesome Cybersecurity datasets
- [**147**星][3y] [Py] [risksense-ops/cve-2016-6366](https://github.com/risksense-ops/cve-2016-6366) Public repository for improvements to the EXTRABACON exploit
+- [**147**星][2y] [C] [r-a-w/torproxy](https://github.com/r-a-w/torproxy) TorProxy is a tool which uses netfilter hooks in the linux kernel to route all network traffic through the Tor network
- [**147**星][3y] [Py] [mpgn/padding-oracle-attack](https://github.com/mpgn/padding-oracle-attack) An exploit for the Padding Oracle Attack
-- [**147**星][9m] [mpgn/cve-2019-5418](https://github.com/mpgn/cve-2019-5418) CVE-2019-5418 - File Content Disclosure on Ruby on Rails
-- [**147**星][2y] [PowerShell] [milo2012/portia](https://github.com/milo2012/portia) portia:自动化内网渗透测试工具
-- [**147**星][17d] [C] [microchiptech/cryptoauthlib](https://github.com/microchiptech/cryptoauthlib) Library for interacting with the Crypto Authentication secure elements
+- [**147**星][2y] [PS] [milo2012/portia](https://github.com/milo2012/portia) portia:自动化内网渗透测试工具
+- [**147**星][2y] [Py] [mandiant/ioc_writer](https://github.com/mandiant/ioc_writer)
- [**147**星][2y] [Shell] [madmantm/ubuntu-pentest-tools](https://github.com/madmantm/ubuntu-pentest-tools) Script to install security tools, on ubuntu, i follow each new releases.
-- [**147**星][6y] [C++] [kaiserfarrell/malware](https://github.com/kaiserfarrell/malware) virus collection source code
- [**147**星][1y] [C++] [justasmasiulis/nt_wrapper](https://github.com/justasmasiulis/nt_wrapper) 对原生Windows系统API的Wrapper
-- [**147**星][2m] [Ruby] [jekyll/github-metadata](https://github.com/jekyll/github-metadata) Jekyll plugin to propagate the `site.github` namespace and set default values for use with GitHub Pages.
-- [**147**星][24d] [Shell] [hardenedlinux/debian-gnu-linux-profiles](https://github.com/hardenedlinux/debian-gnu-linux-profiles) Debian GNU/Linux based Services Profiles
+- [**147**星][3d] [Shell] [hardenedlinux/debian-gnu-linux-profiles](https://github.com/hardenedlinux/debian-gnu-linux-profiles) Debian GNU/Linux based Services Profiles
- [**147**星][1y] [JS] [gabemarshall/microctfs](https://github.com/gabemarshall/microctfs) Small CTF challenges running on Docker
- [**147**星][2m] [Py] [frint0/mass-pwn-vbulletin](https://github.com/frint0/mass-pwn-vbulletin) Identify vulnerable (RCE) vBulletin 5.0.0 - 5.5.4 instances using Shodan (CVE-2019-16759)
-- [**147**星][3y] [C] [felixwilhelm/mario_baslr](https://github.com/felixwilhelm/mario_baslr) PoC for breaking hypervisor ASLR using branch target buffer collisions
- [**147**星][3y] [C#] [endgameinc/py2exedecompiler](https://github.com/endgameinc/py2exedecompiler) Decompiles Exe created by Py2Exe using uncompyle6 for both python 2 and 3.
-- [**147**星][2y] [C] [elfmaster/skeksi_virus](https://github.com/elfmaster/skeksi_virus) Devestating and awesome Linux X86_64 ELF Virus
+- [**147**星][18d] [C++] [emsec/hal](https://github.com/emsec/hal) HAL – The Hardware Analyzer
- [**147**星][3y] [Py] [drizzlerisk/bunpacker](https://github.com/drizzlerisk/bunpacker) BUnpacker是一款Android脱壳工具
- [**147**星][2m] [Ruby] [dev-sec/ansible-nginx-hardening](https://github.com/dev-sec/ansible-nginx-hardening) This Ansible role provides secure nginx configurations.
-- [**147**星][11m] [Ruby] [darkoperator/meterpreter-scripts](https://github.com/darkoperator/meterpreter-scripts) Meterpreter Scripts that I'm working on
- [**147**星][1m] [C] [cyrus-and/zizzania](https://github.com/cyrus-and/zizzania) Automated DeAuth attack
+- [**147**星][2m] [C#] [cyberark/zbang](https://github.com/cyberark/zbang) zBang is a risk assessment tool that detects potential privileged account threats
+- [**147**星][11m] [C#] [cobbr/sharpgen](https://github.com/cobbr/sharpgen) SharpGen is a .NET Core console application that utilizes the Rosyln C# compiler to quickly cross-compile .NET Framework console applications or libraries.
- [**147**星][6m] [C++] [checkpointsw/invizzzible](https://github.com/checkpointsw/invizzzible) InviZzzible is a tool for assessment of your virtual environments in an easy and reliable way. It contains the most recent and up to date detection and evasion techniques as well as fixes for them.
-- [**147**星][18d] [JS] [certsocietegenerale/swordphish-awareness](https://github.com/certsocietegenerale/swordphish-awareness) Swordphish Phishing Awareness Tool
-- [**147**星][12m] [C] [caesar0301/http-sniffer](https://github.com/caesar0301/http-sniffer) A multi-threading tool to sniff TCP flow statistics and embedded HTTP headers from PCAP file. Each TCP flow carrying HTTP is exported to text file in json format.
+- [**147**星][22d] [Py] [bugcrowd/vulnerability-rating-taxonomy](https://github.com/bugcrowd/vulnerability-rating-taxonomy) Bugcrowd’s baseline priority ratings for common security vulnerabilities
+- [**147**星][3y] [Py] [biosbits/bits](https://github.com/biosbits/bits) BIOS Implementation Test Suite
- [**147**星][11m] [Shell] [aturl/awesome-anti-gfw](https://github.com/aturl/awesome-anti-gfw) 突破网络审查和封锁的开源工具清单。
-- [**146**星][20d] [Py] [aas-n/spraykatz](https://github.com/aas-n/spraykatz) A tool to spray love around the world.
-- [**146**星][20d] [PHP] [dunglas/dunglasangularcsrfbundle](https://github.com/dunglas/dunglasangularcsrfbundle) Automatic CSRF protection for JavaScript apps using a Symfony API
+- [**147**星][7m] [C] [0x00pf/0x00sec_code](https://github.com/0x00pf/0x00sec_code) Code for my 0x00sec.org posts
+- [**146**星][8d] [C] [immunityinc/libptrace](https://github.com/immunityinc/libptrace) An event driven multi-core process debugging, tracing, and manipulation framework.
+- [**146**星][3m] [hmaverickadams/tcm-security-sample-pentest-report](https://github.com/hmaverickadams/tcm-security-sample-pentest-report) Sample pentest report provided by TCM Security
+- [**146**星][5m] [C++] [darthton/polychaos](https://github.com/darthton/polychaos) PE permutation library
+- [**146**星][22d] [PHP] [dunglas/dunglasangularcsrfbundle](https://github.com/dunglas/dunglasangularcsrfbundle) Automatic CSRF protection for JavaScript apps using a Symfony API
- [**146**星][5m] [C#] [mr-un1k0d3r/maliciousclickoncegenerator](https://github.com/Mr-Un1k0d3r/MaliciousClickOnceGenerator) Quick Malicious ClickOnceGenerator for Red Team
- [**146**星][2y] [Py] [vduddu/malware](https://github.com/vduddu/malware) Rootkits | Backdoors | Sniffers | Virus | Ransomware | Steganography | Cryptography | Shellcodes | Webshells | Keylogger | Botnets | Worms | Other Network Tools
- [**146**星][2y] [Py] [undeadsec/enigma](https://github.com/undeadsec/enigma) Multiplatform payload dropper
-- [**146**星][9m] [C] [trailofbits/onesixtyone](https://github.com/trailofbits/onesixtyone) Fast SNMP Scanner
-- [**146**星][2y] [Py] [tr3jer/dnsautorebinding](https://github.com/tr3jer/dnsautorebinding) ssrf、ssrfIntranetFuzz、dnsRebinding、recordEncode、dnsPoisoning、Support ipv4/ipv6
-- [**146**星][1y] [Objective-C] [tihmstar/jelbrektime](https://github.com/tihmstar/jelbrektime) An developer jailbreak for Apple watch S3 watchOS 4.1
+- [**146**星][1y] [ObjC] [tihmstar/jelbrektime](https://github.com/tihmstar/jelbrektime) An developer jailbreak for Apple watch S3 watchOS 4.1
- [**146**星][3m] [Ruby] [seattlerb/ruby2ruby](https://github.com/seattlerb/ruby2ruby) a means of generating pure ruby code easily from RubyParser compatible
- [**146**星][1y] [JS] [saelo/cve-2018-4233](https://github.com/saelo/cve-2018-4233) Exploit for CVE-2018-4233, a WebKit JIT optimization bug used during Pwn2Own 2018
- [**146**星][11m] [Py] [ritiek/scribd-downloader](https://github.com/ritiek/scribd-downloader) A scribd-downloader that just works
- [**146**星][5y] [HTML] [pwnwiki/kaliwiki](https://github.com/pwnwiki/kaliwiki) Unofficial Kali Documentation Project
-- [**146**星][3y] [C] [pustladi/windows-2000](https://github.com/pustladi/windows-2000) Windows 2000专业版的源码
-- [**146**星][6m] [Shell] [petermosmans/security-scripts](https://github.com/petermosmans/security-scripts) A collection of security related Python and Bash shell scripts. Analyze hosts on generic security vulnerabilities. Wrapper around popular tools like nmap (portscanner), nikto (webscanner) and testssl.sh (SSL/TLS scanner)
- [**146**星][6m] [olafhartong/sysmon-cheatsheet](https://github.com/olafhartong/sysmon-cheatsheet) All sysmon event types and their fields explained
-- [**146**星][1m] [misterch0c/what_is_this_c2](https://github.com/misterch0c/what_is_this_c2) For all these times you're asking yourself "what is this panel again?"
+- [**146**星][4m] [Java] [netsoss/headless-burp](https://github.com/netsoss/headless-burp) Automate security tests using Burp Suite.
+- [**146**星][3y] [C] [nccgroup/triforcelinuxsyscallfuzzer](https://github.com/nccgroup/triforcelinuxsyscallfuzzer) A linux system call fuzzer using TriforceAFL
+- [**146**星][6d] [misterch0c/what_is_this_c2](https://github.com/misterch0c/what_is_this_c2) For all these times you're asking yourself "what is this panel again?"
- [**146**星][2y] [Py] [mhelwig/apk-anal](https://github.com/mhelwig/apk-anal) Android APK analyzer based on radare2 and others.
-- [**146**星][9d] [C] [mate-desktop/caja](https://github.com/mate-desktop/caja) Caja, the file manager for the MATE desktop
-- [**146**星][2y] [Py] [mandiant/ioc_writer](https://github.com/mandiant/ioc_writer)
+- [**146**星][11d] [C] [mate-desktop/caja](https://github.com/mate-desktop/caja) Caja, the file manager for the MATE desktop
- [**146**星][2y] [Go] [magisterquis/sshhipot](https://github.com/magisterquis/sshhipot) High-interaction MitM SSH honeypot
+- [**146**星][9m] [Java] [lanchon/haystack](https://github.com/lanchon/haystack) Signature Spoofing Patcher for Android
+- [**146**星][4m] [HTML] [l4bf0x/phishingpretexts](https://github.com/l4bf0x/phishingpretexts) A library of pretexts to use on offensive phishing engagements.
- [**146**星][11m] [Shell] [kevlar1818/is_my_password_pwned](https://github.com/kevlar1818/is_my_password_pwned) How often does your password appear in the Pwned Passwords database? Uses the k-anonymity API.
- [**146**星][1y] [Py] [jekil/hardentheworld](https://github.com/jekil/hardentheworld) Harden the world is a community driven project to develop hardening guidelines and checklists for common software and devices.
-- [**146**星][8d] [Py] [ivandokov/phockup](https://github.com/ivandokov/phockup) Media sorting tool to organize photos and videos from your camera in folders by year, month and day.
-- [**146**星][22d] [Perl] [henshin/filebuster](https://github.com/henshin/filebuster) An extremely fast and flexible web fuzzer
+- [**146**星][24d] [Perl] [henshin/filebuster](https://github.com/henshin/filebuster) An extremely fast and flexible web fuzzer
+- [**146**星][3m] [PostScript] [guardianproject/orfox](https://github.com/guardianproject/orfox) UPDATE: Orfox is being replaced by Tor Browser for Android. All future work and comments will be handled by Tor Project.
- [**146**星][3y] [C] [gentilkiwi/wanadecrypt](https://github.com/gentilkiwi/wanadecrypt) A decryptor for Wanacry (you need the private key!)
+- [**146**星][27d] [Py] [futuresharks/rpi-security](https://github.com/futuresharks/rpi-security) A security system written in python to run on a Raspberry Pi with motion detection and mobile notifications
- [**146**星][4m] [Py] [fireeye/pywintrace](https://github.com/fireeye/pywintrace) Python 编写的 ETW(Event Tracing for Windows) Wrapper
- [**146**星][3m] [C] [fgont/ipv6toolkit](https://github.com/fgont/ipv6toolkit) SI6 Networks' IPv6 Toolkit
-- [**146**星][1y] [C++] [doublelabyrinth/010editor-keygen](https://github.com/doublelabyrinth/010editor-keygen) A keygen for 010Editor
+- [**146**星][2d] [Shell] [entynetproject/ehtools](https://github.com/entynetproject/ehtools) Wi-Fi tools keep getting more and more accessible to beginners, and the Ehtools Framework is a framework of serious penetration tools that can be explored easily from within it. This powerful and simple tool can be used for everything from installing new add-ons to grabbing a WPA handshake in a matter of seconds. Plus, it's easy to install, set …
+- [**146**星][1m] [Ruby] [dev-sec/ssh-baseline](https://github.com/dev-sec/ssh-baseline) DevSec SSH Baseline - InSpec Profile
+- [**146**星][2m] [Py] [decoxviii/karma](https://github.com/decoxviii/karma) Find leaked emails with your passwords
- [**146**星][4y] [Lua] [davidm/lua-inspect](https://github.com/davidm/lua-inspect) Lua code analysis, with plugins for HTML and SciTE
-- [**146**星][2m] [C#] [cyberark/zbang](https://github.com/cyberark/zbang) zBang is a risk assessment tool that detects potential privileged account threats
-- [**146**星][11m] [C#] [cobbr/sharpgen](https://github.com/cobbr/sharpgen) SharpGen is a .NET Core console application that utilizes the Rosyln C# compiler to quickly cross-compile .NET Framework console applications or libraries.
-- [**146**星][1y] [brucetg/app_security](https://github.com/brucetg/app_security)
+- [**146**星][1m] [Py] [chrispetrou/hrshell](https://github.com/chrispetrou/hrshell) HRShell is an HTTPS/HTTP reverse shell built with flask. It is an advanced C2 server with many features & capabilities.
- [**146**星][5y] [C++] [blankwall/python_pin](https://github.com/blankwall/python_pin)
+- [**146**星][18d] [Py] [bash-c/pwn_repo](https://github.com/bash-c/pwn_repo) To store some CTF_pwn_bins and exploits for self-practice
- [**146**星][2y] [Py] [appsecco/vulnerable-apps](https://github.com/appsecco/vulnerable-apps)
- [**146**星][1y] [Py] [andresriancho/race-condition-exploit](https://github.com/andresriancho/race-condition-exploit) Tool to help with the exploitation of web application race conditions
-- [**145**星][6d] [C] [immunityinc/libptrace](https://github.com/immunityinc/libptrace) An event driven multi-core process debugging, tracing, and manipulation framework.
-- [**145**星][3m] [hmaverickadams/tcm-security-sample-pentest-report](https://github.com/hmaverickadams/tcm-security-sample-pentest-report) Sample pentest report provided by TCM Security
-- [**145**星][9m] [Shell] [v2ray/dist](https://github.com/v2ray/dist) Mirror of V2Ray core releases
+- [**146**星][2m] [C++] [alschwalm/dwarfexport](https://github.com/alschwalm/dwarfexport) Export dwarf debug information from IDA Pro
+- [**145**星][4m] [Py] [reb311ion/rebel-framework](https://github.com/reb311ion/rebel-framework) Advanced and easy to use penetration testing framework
- [**145**星][3y] [C] [sciencemanx/dress](https://github.com/sciencemanx/dress) add symbols back into a stripped ELF binary (~strip)
-- [**145**星][10m] [Py] [zhovner/mfdread](https://github.com/zhovner/mfdread) Mifare 1k/4k dumps parser in human readable format
- [**145**星][2y] [C] [yepher/razberry](https://github.com/yepher/razberry) Notes About ZWave and RazBerry
+- [**145**星][20d] [Py] [wenzel/pyvmidbg](https://github.com/wenzel/pyvmidbg) LibVMI-based debug server, implemented in Python. Building a guest aware, stealth and agentless full-system debugger
- [**145**星][3y] [PHP] [webshellpub/awsome-webshell](https://github.com/webshellpub/awsome-webshell) webshell样本大合集。收集各种webshell用于webshell分析与发现。——
+- [**145**星][5m] [ObjC] [ursachec/cpaproxy](https://github.com/ursachec/cpaproxy) A thin Objective-C wrapper around Tor.
+- [**145**星][3m] [CSS] [rubyfu/rubyfu](https://github.com/rubyfu/rubyfu) Rubyfu, where Ruby goes evil!
- [**145**星][2m] [Py] [ripe-atlas-community/ripe-atlas-community-contrib](https://github.com/ripe-atlas-community/ripe-atlas-community-contrib) Repository for links towards tools written during hackathons, and a collection of contributions by the community of the RIPE Atlas visualizations, tools for analysing measurements data and other scripts
- [**145**星][10m] [Dockerfile] [remnux/docker](https://github.com/remnux/docker) This repository contains Dockerfiles for building Docker images of popular malware analysis tools. See
-- [**145**星][1y] [Objective-C] [psychotea/meridianjb](https://github.com/psychotea/meridianjb) An iOS 10.x Jailbreak for all 64-bit devices.
+- [**145**星][3y] [C] [pustladi/windows-2000](https://github.com/pustladi/windows-2000) Windows 2000专业版的源码
+- [**145**星][1y] [ObjC] [psychotea/meridianjb](https://github.com/psychotea/meridianjb) An iOS 10.x Jailbreak for all 64-bit devices.
- [**145**星][1y] [Shell] [projectatomic/container-storage-setup](https://github.com/projectatomic/container-storage-setup) Service to set up storage for Docker and other container systems
-- [**145**星][4m] [Java] [netsoss/headless-burp](https://github.com/netsoss/headless-burp) Automate security tests using Burp Suite.
-- [**145**星][3y] [C] [nccgroup/triforcelinuxsyscallfuzzer](https://github.com/nccgroup/triforcelinuxsyscallfuzzer) A linux system call fuzzer using TriforceAFL
+- [**145**星][4y] [JS] [nowsecure/owasp-password-strength-test](https://github.com/nowsecure/owasp-password-strength-test) OWASP Password Strength Test for Node.js
- [**145**星][4y] [R] [mlsecproject/tiq-test](https://github.com/mlsecproject/tiq-test) Threat Intelligence Quotient Test - Dataviz and Statistical Analysis of TI feeds
+- [**145**星][7d] [JS] [mike-works/web-security-fundamentals](https://github.com/mike-works/web-security-fundamentals)
+- [**145**星][1m] [C#] [mihaifm/hibpofflinecheck](https://github.com/mihaifm/hibpofflinecheck) Keepass plugin that performs offline and online checks against HaveIBeenPwned passwords
- [**145**星][1y] [Py] [marty90/pychromedevtools](https://github.com/marty90/pychromedevtools) PyChromeDevTools is a python module that allows one to interact with Google Chrome using Chrome DevTools Protocol within a Python script.
+- [**145**星][6m] [Py] [macr0phag3/githubmonitor](https://github.com/macr0phag3/githubmonitor) 根据关键字与 hosts 生成的关键词,利用 github 提供的 api,监控 git 泄漏。
- [**145**星][4y] [C++] [lcatro/network_backdoor_scanner](https://github.com/lcatro/network_backdoor_scanner) This is a backdoor about discover network device ,and it can hidden reverse connecting the hacker's server with encrypt commuication 后渗透后门程序,适合在已经攻陷的内网中做下一步的网络信息扫描..
-- [**145**星][9m] [Java] [lanchon/haystack](https://github.com/lanchon/haystack) Signature Spoofing Patcher for Android
-- [**145**星][4m] [HTML] [l4bf0x/phishingpretexts](https://github.com/l4bf0x/phishingpretexts) A library of pretexts to use on offensive phishing engagements.
- [**145**星][9m] [Py] [kacperszurek/exploits](https://github.com/kacperszurek/exploits) 提权漏洞利用集合
- [**145**星][5m] [AutoIt] [igromanru/dark-souls-iii-cheat-engine-guide](https://github.com/igromanru/dark-souls-iii-cheat-engine-guide) Latest CE table and guide for Dark Souls 3
-- [**145**星][25d] [Py] [futuresharks/rpi-security](https://github.com/futuresharks/rpi-security) A security system written in python to run on a Raspberry Pi with motion detection and mobile notifications
- [**145**星][3y] [Py] [elcodigok/wphardening](https://github.com/elcodigok/wphardening) Wordpress 安全加固工具
-- [**145**星][3y] [Jupyter Notebook] [dchad/malware-detection](https://github.com/dchad/malware-detection) Malware Detection and Classification Using Machine Learning
+- [**145**星][5m] [Py] [echowei/deeptraffic](https://github.com/echowei/deeptraffic) Deep Learning models for network traffic classification
+- [**145**星][25d] [C++] [cybermaggedon/cyberprobe](https://github.com/cybermaggedon/cyberprobe) Capturing, analysing and responding to cyber attacks
- [**145**星][2y] [Ruby] [conradirwin/dotgpg](https://github.com/conradirwin/dotgpg) A secure and easy-to-use store for your production secrets
-- [**145**星][1y] [chryzsh/awesome-windows-security](https://github.com/chryzsh/awesome-windows-security) List of Awesome Windows Security Resources
-- [**145**星][1m] [Py] [chrispetrou/hrshell](https://github.com/chrispetrou/hrshell) HRShell is an HTTPS/HTTP reverse shell built with flask. It is an advanced C2 server with many features & capabilities.
-- [**145**星][20d] [Py] [bugcrowd/vulnerability-rating-taxonomy](https://github.com/bugcrowd/vulnerability-rating-taxonomy) Bugcrowd’s baseline priority ratings for common security vulnerabilities
-- [**145**星][16d] [Py] [bash-c/pwn_repo](https://github.com/bash-c/pwn_repo) To store some CTF_pwn_bins and exploits for self-practice
-- [**145**星][2m] [C++] [alschwalm/dwarfexport](https://github.com/alschwalm/dwarfexport) Export dwarf debug information from IDA Pro
+- [**145**星][1y] [Go] [brimstone/go-shellcode](https://github.com/brimstone/go-shellcode) Load shellcode into a new process
- [**145**星][11m] [Py] [airbuscyber/grap](https://github.com/airbuscyber/grap) define and match graph patterns within binaries
- [**144**星][5y] [Py] [ring04h/thorns](https://github.com/ring04h/thorns) thorns_project 分布式异步队列系统
-- [**144**星][14d] [Py] [izar/pytm](https://github.com/izar/pytm) A Pythonic framework for threat modeling
-- [**144**星][18d] [Py] [wenzel/pyvmidbg](https://github.com/wenzel/pyvmidbg) LibVMI-based debug server, implemented in Python. Building a guest aware, stealth and agentless full-system debugger
+- [**144**星][3y] [ObjC] [project-imas/security-check](https://github.com/project-imas/security-check) Application level, attached debug detect and jailbreak checking
+- [**144**星][3y] [Ruby] [yahooarchive/rtrace](https://github.com/yahooarchive/rtrace) Rtrace is an x86/x86_64 native code debugger written in Ruby with zero dependencies
+- [**144**星][4y] [ObjC] [etsy/bughunt-ios](https://github.com/etsy/bughunt-ios)
- [**144**星][1y] [Py] [viralmaniar/remote-desktop-caching-](https://github.com/viralmaniar/remote-desktop-caching-) This tool allows one to recover old RDP (mstsc) session information in the form of broken PNG files. These PNG files allows Red Team member to extract juicy information such as LAPS passwords or any sensitive information on the screen. Blue Team member can reconstruct PNG files to see what an attacker did on a compromised host. It is extremely u…
- [**144**星][4y] [C] [ud2/advisories](https://github.com/ud2/advisories) Security advisories
-- [**144**星][6m] [Py] [thekingofduck/burpfakeip](https://github.com/thekingofduck/burpfakeip) 一个用于伪造ip地址进行爆破的Burp Suite插件
-- [**144**星][6m] [shramos/awesome-cybersecurity-datasets](https://github.com/shramos/awesome-cybersecurity-datasets) A curated list of amazingly awesome Cybersecurity datasets
-- [**144**星][7d] [Go] [rverton/webanalyze](https://github.com/rverton/webanalyze) Port of Wappalyzer (uncovers technologies used on websites) in Go to automate scanning.
-- [**144**星][3m] [CSS] [rubyfu/rubyfu](https://github.com/rubyfu/rubyfu) Rubyfu, where Ruby goes evil!
+- [**144**星][4m] [Java] [shack2/javaserializetools](https://github.com/shack2/javaserializetools) Java反序列化漏洞利用工具V1.0 Java反序列化相关漏洞的检查工具,采用JDK 1.8+NetBeans8.2开发,软件运行必须安装JDK 1.8或者以上版本。 支持:weblogic xml反序列化漏洞 CVE-2017-10271/CNVD-C-2019-48814/CVE-2019-2725检查。
+- [**144**星][20d] [Shell] [securecodebox/securecodebox](https://github.com/securecodebox/securecodebox) SecureCodeBox - continuous secure delivery out of the box
+- [**144**星][10d] [Go] [rverton/webanalyze](https://github.com/rverton/webanalyze) Port of Wappalyzer (uncovers technologies used on websites) in Go to automate scanning.
- [**144**星][7y] [C] [rsmudge/metasploit-loader](https://github.com/rsmudge/metasploit-loader) A client compatible with Metasploit's staging protocol
- [**144**星][5y] [PHP] [pentestgeek/phishing-frenzy-templates](https://github.com/pentestgeek/phishing-frenzy-templates) Phishing Scenarios Used for Phishing Frenzy
- [**144**星][7y] [Shell] [offensive-security/hid-backdoor-peensy](https://github.com/offensive-security/hid-backdoor-peensy) Reliable Teensy Penetration Testing Payload
-- [**144**星][4y] [JS] [nowsecure/owasp-password-strength-test](https://github.com/nowsecure/owasp-password-strength-test) OWASP Password Strength Test for Node.js
+- [**144**星][4m] [Py] [nccgroup/umap2](https://github.com/nccgroup/umap2) Umap2 is the second revision of NCC Group's python based USB host security assessment tool.
+- [**144**星][4m] [Py] [nccgroup/fuzzowski](https://github.com/nccgroup/fuzzowski) the Network Protocol Fuzzer that we will want to use.
- [**144**星][6m] [Py] [nashcontrol/bounty-monitor](https://github.com/nashcontrol/bounty-monitor) Leverage certificate transparency live feed to monitor for newly issued subdomain certificates (last 90 days, configurable), for domains participating in bug bounty programs.
- [**144**星][2y] [Shell] [n0pe-sled/postfix-server-setup](https://github.com/n0pe-sled/postfix-server-setup)
-- [**144**星][1m] [C#] [mihaifm/hibpofflinecheck](https://github.com/mihaifm/hibpofflinecheck) Keepass plugin that performs offline and online checks against HaveIBeenPwned passwords
- [**144**星][2y] [Py] [mdsecactivebreach/powerdns](https://github.com/mdsecactivebreach/powerdns) Powershell DNS Delivery
-- [**144**星][6m] [Py] [macr0phag3/githubmonitor](https://github.com/macr0phag3/githubmonitor) 根据关键字与 hosts 生成的关键词,利用 github 提供的 api,监控 git 泄漏。
+- [**144**星][3y] [HTML] [landley/aboriginal](https://github.com/landley/aboriginal) provides virtual Linux images you can boot under QEMU, within which you can compile and test any software you like.
- [**144**星][4y] [Java] [kantega/notsoserial](https://github.com/kantega/notsoserial) Java Agent which mitigates deserialisation attacks by making certain classes unserializable
- [**144**星][1y] [C] [geosn0w/osiris-jailbreak](https://github.com/geosn0w/osiris-jailbreak) An incomplete iOS 11.2 -> iOS 11.3.1 Jailbreak
-- [**144**星][30d] [Shell] [entynetproject/ehtools](https://github.com/entynetproject/ehtools) Wi-Fi tools keep getting more and more accessible to beginners, and the Ehtools Framework is a framework of serious penetration tools that can be explored easily from within it. This powerful and simple tool can be used for everything from installing new add-ons to grabbing a WPA handshake in a matter of seconds. Plus, it's easy to install, set …
+- [**144**星][3d] [fdiskyou/threat-intel](https://github.com/fdiskyou/threat-intel) Archive of publicly available threat INTel reports (mostly APT Reports but not limited to).
- [**144**星][2y] [Shell] [depoon/iosdylibinjectiondemo](https://github.com/depoon/iosdylibinjectiondemo) Using this Repository to demo how to inject dynamic libraries into cracked ipa files for jailed iOS devices
- [**144**星][2y] [Py] [davidpany/wmi_forensics](https://github.com/davidpany/wmi_forensics)
+- [**144**星][14d] [PHP] [danwin/hosting](https://github.com/danwin/hosting) This is a setup for a TOR based shared hosting server
- [**144**星][2y] [chan9390/awesome-mitm](https://github.com/chan9390/awesome-mitm) Curated List of MitM frameworks on GitHub
-- [**144**星][3y] [Py] [biosbits/bits](https://github.com/biosbits/bits) BIOS Implementation Test Suite
-- [**144**星][7m] [C] [0x00pf/0x00sec_code](https://github.com/0x00pf/0x00sec_code) Code for my 0x00sec.org posts
-- [**143**星][10d] [security-cheatsheet/reverse-shell-cheatsheet](https://github.com/security-cheatsheet/reverse-shell-cheatsheet)
+- [**144**星][15d] [Py] [andresriancho/enumerate-iam](https://github.com/andresriancho/enumerate-iam) Enumerate the permissions associated with AWS credential set
+- [**143**星][4m] [Py] [daeken/httprebind](https://github.com/daeken/httprebind) Automatic tool for DNS rebinding-based SSRF attacks
+- [**143**星][30d] [Shell] [sclorg/s2i-python-container](https://github.com/sclorg/s2i-python-container) Python container images based on Red Hat Software Collections and intended for OpenShift and general usage, that provide a platform for building and running Python applications. Users can choose between Red Hat Enterprise Linux, Fedora, and CentOS based images.
+- [**143**星][12d] [security-cheatsheet/reverse-shell-cheatsheet](https://github.com/security-cheatsheet/reverse-shell-cheatsheet)
- [**143**星][1y] [Py] [checkymander/imessagesbackdoor](https://github.com/checkymander/iMessagesBackdoor) A script to help set up an event handler in order to install a persistent backdoor that can be activated by sending a message.
- [**143**星][7m] [C++] [zombiecraig/udsim](https://github.com/zombiecraig/udsim) a graphical simulator that can emulate different modules in a vehicle and respond to UDS request.
+- [**143**星][7m] [Py] [vinayakumarr/network-intrusion-detection](https://github.com/vinayakumarr/network-intrusion-detection) Network Intrusion Detection KDDCup '99', NSL-KDD and UNSW-NB15
- [**143**星][2y] [JS] [theori-io/zer0con2018_bpak](https://github.com/theori-io/zer0con2018_bpak) 为Google Chrome创建1-dayExploit(Zer0Con)
- [**143**星][3y] [CSS] [sensepost/jack](https://github.com/sensepost/jack) Drag and Drop ClickJacking PoC development assistance tool.
-- [**143**星][18d] [Shell] [securecodebox/securecodebox](https://github.com/securecodebox/securecodebox) SecureCodeBox - continuous secure delivery out of the box
- [**143**星][3y] [HTML] [secmob/badkernel](https://github.com/secmob/badkernel) Full exploit of CVE-2016-6754(BadKernel) and slide of SyScan360 2016
+- [**143**星][2y] [C] [salls/kernel-exploits](https://github.com/salls/kernel-exploits) Some kernel exploits
- [**143**星][2y] [C] [rodionovd/liblorgnette](https://github.com/rodionovd/liblorgnette) Interprocess dlsym() for OS X & iOS
- [**143**星][3y] [Assembly] [ricardojrdez/anti-analysis-tricks](https://github.com/ricardojrdez/anti-analysis-tricks) Bunch of techniques potentially used by malware to detect analysis environments
+- [**143**星][2m] [C++] [raspberrypi/piserver](https://github.com/raspberrypi/piserver) Raspberry Pi Server wizard to serve Raspbian to network booting Pis
- [**143**星][5m] [Java] [quentinhardy/jndiat](https://github.com/quentinhardy/jndiat) 渗透工具, 通过T3协议攻击Weblogic服务器
- [**143**星][3m] [Py] [nuid/nebulousad](https://github.com/nuid/nebulousad) NebulousAD automated credential auditing tool.
-- [**143**星][4m] [Py] [nccgroup/umap2](https://github.com/nccgroup/umap2) Umap2 is the second revision of NCC Group's python based USB host security assessment tool.
+- [**143**星][2d] [C] [ntpsec/ntpsec](https://github.com/ntpsec/ntpsec) The Network Time Protocol suite, refactored GitHub is a mirror of
+- [**143**星][8m] [ASP] [misterch0c/apt34](https://github.com/misterch0c/apt34) APT34/OILRIG leak
+- [**143**星][8d] [C] [libyal/libpff](https://github.com/libyal/libpff) Library and tools to access the Personal Folder File (PFF) and the Offline Folder File (OFF) format
+- [**143**星][2m] [C] [grimm-co/killerbeez](https://github.com/grimm-co/killerbeez) A distributed fuzzer which aims to pull in the best technologies, make them play nicely together, and run on multiple O/Ses.
+- [**143**星][10m] [Shell] [essandess/macos-openvpn-server](https://github.com/essandess/macos-openvpn-server) macOS OpenVPN Server and Client Configuration (OpenVPN, Tunnelblick, PF)
- [**143**星][8m] [Py] [dvopsway/datasploit](https://github.com/dvopsway/datasploit) A tool to perform various OSINT techniques, aggregate all the raw data, visualise it on a dashboard, and facilitate alerting and monitoring on the data.
- [**143**星][3y] [Py] [codexgigassys/codex-backend](https://github.com/codexgigassys/codex-backend) Codex Gigas malware DNA profiling search engine discovers malware patterns and characteristics assisting individuals who are attracted in malware hunting.
-- [**143**星][7d] [Rust] [brycx/orion](https://github.com/brycx/orion) Easy and usable rust crypto
-- [**143**星][1y] [Go] [brimstone/go-shellcode](https://github.com/brimstone/go-shellcode) Load shellcode into a new process
-- [**143**星][10m] [Py] [bhavsec/reconspider](https://github.com/bhavsec/reconspider)
+- [**143**星][8d] [Rust] [brycx/orion](https://github.com/brycx/orion) Easy and usable rust crypto
+- [**143**星][3y] [Py] [blackye/lalascan](https://github.com/blackye/lalascan) 自主开发的分布式web漏洞扫描框架,集合webkit爬虫,Subdomain子域名发现,sqli、反射xss、Domxss等owasp top10漏洞扫描和边界资产发现能力。同时为通用CMS POC扫描提供了插件扩展平台
+- [**143**星][1m] [bin2415/fuzzing_paper](https://github.com/bin2415/fuzzing_paper) puzzing related paper
- [**143**星][4y] [JS] [ben174/hsts-cookie](https://github.com/ben174/hsts-cookie) Creates a HSTS Supercookie to fingerprint a browser
-- [**143**星][13d] [Py] [andresriancho/enumerate-iam](https://github.com/andresriancho/enumerate-iam) Enumerate the permissions associated with AWS credential set
- [**143**星][1y] [Shell] [adi90x/rancher-active-proxy](https://github.com/adi90x/rancher-active-proxy) All in one active reverse proxy for Rancher !
-- [**142**星][8d] [Go] [jaeles-project/jaeles](https://github.com/jaeles-project/jaeles) The Swiss Army knife for automated Web Application Testing
+- [**143**星][1y] [Py] [aatlasis/chiron](https://github.com/aatlasis/chiron) An IPv6 Security Assessment framework with advanced IPv6 Extension Headers manipulation capabilities.
+- [**142**星][11m] [C++] [virustotal/qt-virustotal-uploader](https://github.com/virustotal/qt-virustotal-uploader) VirusTotal Uploader written in C++ using QT framework
+- [**142**星][4y] [JS] [urinx/browspy](https://github.com/urinx/browspy) 浏览器用户全部信息收集js
- [**142**星][1m] [Py] [mubix/osx-wificleaner](https://github.com/mubix/osx-wificleaner) Cleans out "open" wireless connections from OSX machine
-- [**142**星][28d] [Shell] [sclorg/s2i-python-container](https://github.com/sclorg/s2i-python-container) Python container images based on Red Hat Software Collections and intended for OpenShift and general usage, that provide a platform for building and running Python applications. Users can choose between Red Hat Enterprise Linux, Fedora, and CentOS based images.
-- [**142**星][4m] [Py] [reb311ion/rebel-framework](https://github.com/reb311ion/rebel-framework) Advanced and easy to use penetration testing framework
- [**142**星][4y] [C] [valdikss/p0f-mtu](https://github.com/valdikss/p0f-mtu) p0f with patches to save MTU value and export it via API (for VPN detection)
- [**142**星][2m] [Py] [usableprivacy/upribox](https://github.com/usableprivacy/upribox) Usable Privacy Box
- [**142**星][1y] [Go] [target/portauthority](https://github.com/target/portauthority) API that leverages Clair to scan Docker Registries and Kubernetes Clusters for vulnerabilities
+- [**142**星][3y] [PS] [sw4mpf0x/powerlurk](https://github.com/sw4mpf0x/powerlurk) Malicious WMI Events using PowerShell
- [**142**星][3y] [Java] [secarmalabs/psychopath](https://github.com/secarmalabs/psychopath) psychoPATH - hunting file uploads & LFI in the dark. This tool is a customisable payload generator designed for blindly detecting LFI & web file upload implementations allowing to write files into the webroot (aka document root). The "blind" aspect is the key here and is inherent to dynamic testing usually conducted with no access to the source …
-- [**142**星][2y] [C] [salls/kernel-exploits](https://github.com/salls/kernel-exploits) Some kernel exploits
-- [**142**星][8d] [C] [ntpsec/ntpsec](https://github.com/ntpsec/ntpsec) The Network Time Protocol suite, refactored GitHub is a mirror of
+- [**142**星][3y] [Py] [safebreach-labs/pacdoor](https://github.com/safebreach-labs/pacdoor) Proof-of-concept JavaScript malware implemented as a Proxy Auto-Configuration (PAC) File
+- [**142**星][2y] [Py] [ridter/rtf_11882_0802](https://github.com/ridter/rtf_11882_0802) PoC for CVE-2018-0802 And CVE-2017-11882
+- [**142**星][10m] [Java] [rani-i/mi365locker](https://github.com/rani-i/mi365locker) Xiaomi Mi365 Scooter locker
+- [**142**星][1y] [Py] [packtpublishing/mastering-machine-learning-for-penetration-testing](https://github.com/packtpublishing/mastering-machine-learning-for-penetration-testing) 《Mastering Machine Learning for Penetration Testing》随书代码
- [**142**星][2y] [Java] [nickstadb/deserlab](https://github.com/nickstadb/deserlab) Java deserialization exploitation lab.
-- [**142**星][4m] [Py] [nccgroup/fuzzowski](https://github.com/nccgroup/fuzzowski) the Network Protocol Fuzzer that we will want to use.
- [**142**星][3y] [Shell] [nccgroup/chuckle](https://github.com/nccgroup/chuckle) An automated SMB relay exploitation script.
-- [**142**星][8m] [ASP] [misterch0c/apt34](https://github.com/misterch0c/apt34) APT34/OILRIG leak
- [**142**星][2y] [Ruby] [michenriksen/searchpass](https://github.com/michenriksen/searchpass) searchpass:离线搜索网络设备、Web应用程序等的默认凭据
- [**142**星][3y] [C] [mdsecresearch/publications](https://github.com/mdsecresearch/publications) A list of published research documents
- [**142**星][2m] [C] [mak-/mak_it-linux-rootkit](https://github.com/mak-/mak_it-linux-rootkit) This is a linux rootkit using many of the techniques described on
-- [**142**星][28d] [C] [libyal/libpff](https://github.com/libyal/libpff) Library and tools to access the Personal Folder File (PFF) and the Offline Folder File (OFF) format
- [**142**星][3y] [PHP] [laurent22/so-sql-injections](https://github.com/laurent22/so-sql-injections) SQL injection vulnerabilities in Stack Overflow PHP questions
- [**142**星][11m] [Go] [justinazoff/bro-pdns](https://github.com/justinazoff/bro-pdns) Passive DNS collection using Bro
-- [**142**星][1m] [PowerShell] [jaredcatkinson/psreflect-functions](https://github.com/jaredcatkinson/psreflect-functions) Module to provide PowerShell functions that abstract Win32 API functions
+- [**142**星][2y] [Py] [julieeen/kleefl](https://github.com/julieeen/kleefl) kleefl:结合了符号执行的Fuzzer,针对普通 C/C++ 应用程序
+- [**142**星][1m] [PS] [jaredcatkinson/psreflect-functions](https://github.com/jaredcatkinson/psreflect-functions) Module to provide PowerShell functions that abstract Win32 API functions
- [**142**星][2y] [PHP] [drego85/ddos-php-script](https://github.com/drego85/ddos-php-script) Script to perform a DoS or DDoS UDP Flood by PHP
+- [**142**星][1y] [C] [dots-tb/lolicon](https://github.com/dots-tb/lolicon) Small vita shell ran from kernel that allows for actual overclocking
- [**142**星][9m] [Py] [dlcowen/fseventsparser](https://github.com/dlcowen/fseventsparser) Parser for OSX/iOS FSEvents Logs
-- [**142**星][23d] [C++] [cybermaggedon/cyberprobe](https://github.com/cybermaggedon/cyberprobe) Capturing, analysing and responding to cyber attacks
+- [**142**星][3m] [C] [covertcodes/freqwatch](https://github.com/covertcodes/freqwatch) Keep track of the airwaves with RTL-SDR; snoop and capture everything into a DB
+- [**142**星][3m] [Pascal] [coldzer0/cmulator](https://github.com/coldzer0/cmulator) Cmulator is ( x86 - x64 ) Scriptable Reverse Engineering Sandbox Emulator for shellcode and PE binaries . Based on Unicorn & Zydis Engine & javascript
+- [**142**星][5m] [Py] [codingo/minesweeper](https://github.com/codingo/minesweeper) A Burpsuite plugin (BApp) to aid in the detection of scripts being loaded from over 23000 malicious cryptocurrency mining domains (cryptojacking).
- [**142**星][3y] [C] [clearlinux/cve-check-tool](https://github.com/clearlinux/cve-check-tool) Original Automated CVE Checking Tool
-- [**142**星][3y] [Py] [blackye/lalascan](https://github.com/blackye/lalascan) 自主开发的分布式web漏洞扫描框架,集合webkit爬虫,Subdomain子域名发现,sqli、反射xss、Domxss等owasp top10漏洞扫描和边界资产发现能力。同时为通用CMS POC扫描提供了插件扩展平台
-- [**142**星][24d] [Ruby] [bitzesty/devise_zxcvbn](https://github.com/bitzesty/devise_zxcvbn) Devise plugin to reject weak passwords using zxcvbn
-- [**142**星][29d] [bin2415/fuzzing_paper](https://github.com/bin2415/fuzzing_paper) puzzing related paper
+- [**142**星][8m] [Py] [bloodhoundad/bloodhound-tools](https://github.com/bloodhoundad/bloodhound-tools) Miscellaneous tools for BloodHound
+- [**142**星][26d] [Ruby] [bitzesty/devise_zxcvbn](https://github.com/bitzesty/devise_zxcvbn) Devise plugin to reject weak passwords using zxcvbn
- [**142**星][2y] [Py] [balidani/tinyctf-platform](https://github.com/balidani/tinyctf-platform) Yet another CTF platform
-- [**142**星][8d] [Py] [argp/iboot64helper](https://github.com/argp/iboot64helper) IDAPython loader to help with AArch64 iBoot, iBEC, and SecureROM reverse engineering
-- [**142**星][1y] [Py] [aatlasis/chiron](https://github.com/aatlasis/chiron) An IPv6 Security Assessment framework with advanced IPv6 Extension Headers manipulation capabilities.
-- [**141**星][11m] [C++] [virustotal/qt-virustotal-uploader](https://github.com/virustotal/qt-virustotal-uploader) VirusTotal Uploader written in C++ using QT framework
-- [**141**星][4m] [whoisflynn/oscp-exam-report-template](https://github.com/whoisflynn/oscp-exam-report-template) Modified template for the OSCP Exam and Labs. Used during my passing attempt
+- [**142**星][10d] [Py] [argp/iboot64helper](https://github.com/argp/iboot64helper) IDAPython loader to help with AArch64 iBoot, iBEC, and SecureROM reverse engineering
+- [**141**星][7d] [Py] [volatilityfoundation/volatility3](https://github.com/volatilityfoundation/volatility3) Volatility 3.0 development
+- [**141**星][3y] [kejane/securityrss](https://github.com/kejane/SecurityRSS) 网络安全相关的RSS订阅列表
- [**141**星][5y] [PHP] [veerupandey/penetration-testing-toolkit](https://github.com/veerupandey/penetration-testing-toolkit) A web interface to automate Scanning, Generating metasploit payload, Network Testing,Exploring CMS,Information Gathering and much more
- [**141**星][2y] [C] [tyranid/windows-logical-eop-workshop](https://github.com/tyranid/windows-logical-eop-workshop) source code for my Windows Logical Privilege Escalation workshop examples
+- [**141**星][9m] [C] [trailofbits/osquery-extensions](https://github.com/trailofbits/osquery-extensions) osquery extensions by Trail of Bits
- [**141**星][3y] [C] [thispc/psiphon](https://github.com/thispc/psiphon) A multi-functional version of a popular network circumvention tool
-- [**141**星][3y] [PowerShell] [sw4mpf0x/powerlurk](https://github.com/sw4mpf0x/powerlurk) Malicious WMI Events using PowerShell
+- [**141**星][11m] [Py] [t4d/phishingkithunter](https://github.com/t4d/phishingkithunter) Find phishing kits which use your brand/organization's files and image.
+- [**141**星][1m] [Java] [superblaubeere27/obfuscator](https://github.com/superblaubeere27/obfuscator) A java obfuscator (GUI)
- [**141**星][2y] [Py] [snare/binjatron](https://github.com/snare/binjatron) Binary Ninja plugin for Voltron integration
-- [**141**星][3m] [Java] [shack2/javaserializetools](https://github.com/shack2/javaserializetools) Java反序列化漏洞利用工具V1.0 Java反序列化相关漏洞的检查工具,采用JDK 1.8+NetBeans8.2开发,软件运行必须安装JDK 1.8或者以上版本。 支持:weblogic xml反序列化漏洞 CVE-2017-10271/CNVD-C-2019-48814/CVE-2019-2725检查。
+- [**141**星][4m] [Go] [skx/simple-vpn](https://github.com/skx/simple-vpn) A simple VPN allowing mesh-like communication between nodes, over websockets
- [**141**星][2y] [Py] [secureworks/flowsynth](https://github.com/secureworks/flowsynth) a network packet capture compiler
- [**141**星][2y] [Py] [sarah314/spypi](https://github.com/sarah314/spypi) An (un-)ethical hacking-station based on Raspberry Pi and Python
-- [**141**星][3y] [Py] [safebreach-labs/pacdoor](https://github.com/safebreach-labs/pacdoor) Proof-of-concept JavaScript malware implemented as a Proxy Auto-Configuration (PAC) File
-- [**141**星][2y] [Py] [ridter/rtf_11882_0802](https://github.com/ridter/rtf_11882_0802) PoC for CVE-2018-0802 And CVE-2017-11882
-- [**141**星][2m] [C++] [raspberrypi/piserver](https://github.com/raspberrypi/piserver) Raspberry Pi Server wizard to serve Raspbian to network booting Pis
-- [**141**星][10m] [Java] [rani-i/mi365locker](https://github.com/rani-i/mi365locker) Xiaomi Mi365 Scooter locker
-- [**141**星][23d] [PHP] [openzipkin/zipkin-php](https://github.com/openzipkin/zipkin-php) official PHP Tracer implementation for Zipkin
+- [**141**星][5y] [Java] [retme7/cve-2014-7911_poc](https://github.com/retme7/cve-2014-7911_poc) Local root exploit for Nexus5 Android 4.4.4(KTU84P)
+- [**141**星][25d] [PHP] [openzipkin/zipkin-php](https://github.com/openzipkin/zipkin-php) official PHP Tracer implementation for Zipkin
+- [**141**星][8m] [ObjC] [objective-see/reikey](https://github.com/objective-see/reikey) Malware and other applications may install persistent keyboard "event taps" to intercept your keystrokes. ReiKey can scan, detect, and monitor for such taps!
- [**141**星][6m] [C++] [oatpp/oatpp-examples](https://github.com/oatpp/oatpp-examples) List of example projects of how to use oat++ framework
- [**141**星][2y] [Py] [nviso-be/binsnitch](https://github.com/nviso-be/binsnitch) Detect silent (unwanted) changes to files on your system
- [**141**星][2y] [Ruby] [nccgroup/binproxy](https://github.com/nccgroup/binproxy) BinProxy is a proxy for arbitrary TCP connections. You can define custom message formats using the BinData gem.
-- [**141**星][20d] [JS] [mike-works/web-security-fundamentals](https://github.com/mike-works/web-security-fundamentals)
- [**141**星][4m] [Shell] [mbahadou/postenum](https://github.com/mbahadou/postenum) Postenum is a clean, nice and easy tool for basic/advanced privilege escalation techniques. Postenum tool is intended to be executed locally on a Linux box.
+- [**141**星][1y] [landgrey/upload-labs-writeup](https://github.com/landgrey/upload-labs-writeup) upload-labs writeup
- [**141**星][3y] [Py] [kgretzky/python-x86-obfuscator](https://github.com/kgretzky/python-x86-obfuscator) This is a **WIP** tool that performs shellcode obfuscation in x86 instruction set.
+- [**141**星][4m] [Py] [karmenzind/fp-server](https://github.com/karmenzind/fp-server) Free proxy server, continuously crawling and providing proxies, based on Tornado and Scrapy. 免费代理服务器,基于Tornado和Scrapy,在本地搭建属于自己的代理池
- [**141**星][1m] [Java] [joshjdevl/libsodium-jni](https://github.com/joshjdevl/libsodium-jni) (Android) Networking and Cryptography Library (NaCL) JNI binding. JNI is utilized for fastest access to native code. Accessible either in Android or Java application. Uses SWIG to generate Java JNI bindings. SWIG definitions are extensible to other languages.
+- [**141**星][3y] [C] [jongates/jon](https://github.com/jongates/jon) jon 是一款LINUX系统攻防工具箱,包含扫描,入侵,痕迹清理,木马,网站测试等各种黑客工具。Jon is a toolbox of Linux, including scanning, intrusion, trace cleaning, Trojan horse, website testing and other hacker tools.
- [**141**星][6m] [Py] [integrity-sa/burpcollaborator-docker](https://github.com/integrity-sa/burpcollaborator-docker) This repository includes a set of scripts to install a Burp Collaborator Server in a docker environment, using a LetsEncrypt wildcard certificate. The objective is to simplify as much as possible the process of setting up and maintaining the server.
- [**141**星][3m] [PHP] [incredibleindishell/cors-vulnerable-lab](https://github.com/incredibleindishell/cors-vulnerable-lab) Sample vulnerable code and its exploit code
- [**141**星][2y] [C++] [honorarybot/pulsedbg](https://github.com/honorarybot/pulsedbg) Hypervisor-based debugger
- [**141**星][2y] [C++] [hjc4869/uacbypass](https://github.com/hjc4869/uacbypass) A demo to bypass windows 10 default UAC configuration using IFileOperation and dll hijacking
- [**141**星][2y] [Py] [gumblex/ptproxy](https://github.com/gumblex/ptproxy) Turn any pluggable transport for Tor into an obfuscating TCP tunnel.
-- [**141**星][2m] [C] [grimm-co/killerbeez](https://github.com/grimm-co/killerbeez) A distributed fuzzer which aims to pull in the best technologies, make them play nicely together, and run on multiple O/Ses.
- [**141**星][3m] [CoffeeScript] [furqansoftware/node-whois](https://github.com/furqansoftware/node-whois) A simple WHOIS client for NodeJS
-- [**141**星][18d] [fdiskyou/threat-intel](https://github.com/fdiskyou/threat-intel) Archive of publicly available threat INTel reports (mostly APT Reports but not limited to).
-- [**141**星][10m] [Shell] [essandess/macos-openvpn-server](https://github.com/essandess/macos-openvpn-server) macOS OpenVPN Server and Client Configuration (OpenVPN, Tunnelblick, PF)
-- [**141**星][3m] [C] [covertcodes/freqwatch](https://github.com/covertcodes/freqwatch) Keep track of the airwaves with RTL-SDR; snoop and capture everything into a DB
-- [**141**星][3m] [Pascal] [coldzer0/cmulator](https://github.com/coldzer0/cmulator) Cmulator is ( x86 - x64 ) Scriptable Reverse Engineering Sandbox Emulator for shellcode and PE binaries . Based on Unicorn & Zydis Engine & javascript
+- [**141**星][7m] [C] [coolervoid/hiddenwall](https://github.com/coolervoid/hiddenwall) Tool to generate a Linux kernel module for custom rules with Netfilter hooking. (block ports, Hidden mode, rootkit functions etc)
- [**141**星][1y] [Py] [bruce30262/twindbg](https://github.com/bruce30262/twindbg) PEDA-like debugger UI for WinDbg
-- [**141**星][14d] [Py] [blueudp/deep-explorer](https://github.com/blueudp/deep-explorer) Deep Explorer is a tool developed in python which purpose is the search of hidden services in tor network, using Ahmia Browser and crawling the links obtained
+- [**141**星][1y] [Py] [brain-research/tensorfuzz](https://github.com/brain-research/tensorfuzz) A library for performing coverage guided fuzzing of neural networks
+- [**141**星][16d] [Py] [blueudp/deep-explorer](https://github.com/blueudp/deep-explorer) Deep Explorer is a tool developed in python which purpose is the search of hidden services in tor network, using Ahmia Browser and crawling the links obtained
+- [**141**星][4y] [Py] [blackye/jenkins](https://github.com/blackye/jenkins) Jenkins漏洞探测、用户抓取爆破
+- [**140**星][1m] [uknowsec/sharptoolsaggressor](https://github.com/uknowsec/sharptoolsaggressor) 内网渗透中常用的c#程序整合成cs脚本,直接内存加载。持续更新~
+- [**140**星][14d] [JS] [dfirkuiper/kuiper](https://github.com/dfirkuiper/kuiper) a digital investigation platform that provides a capabilities for the investigation team and individuals to parse, search, visualize collected evidences (evidences could be collected by fast traige script like Hoarder)
- [**140**星][2y] [Py] [we5ter/gsdf](https://github.com/We5ter/GSDF) 基于谷歌SSL透明证书的子域名查询工具
- [**140**星][1m] [Shell] [cloudfoundry-incubator/docker-boshrelease](https://github.com/cloudfoundry-incubator/docker-boshrelease) Docker BOSH Release
- [**140**星][1y] [Java] [tomsteele/burpbuddy](https://github.com/tomsteele/burpbuddy) burpbuddy exposes Burp Suites's extender API over the network through various mediums, with the goal of enabling development in any language without the restrictions of the JVM
-- [**140**星][3y] [Objective-C] [zhengmin1989/os-x-10.11.6-exp-via-pegasus](https://github.com/zhengmin1989/os-x-10.11.6-exp-via-pegasus) Local privilege escalation for OS X 10.11.6 via PEGASUS
-- [**140**星][25d] [Py] [wmliang/pe-afl](https://github.com/wmliang/pe-afl)
+- [**140**星][3y] [ObjC] [zhengmin1989/os-x-10.11.6-exp-via-pegasus](https://github.com/zhengmin1989/os-x-10.11.6-exp-via-pegasus) Local privilege escalation for OS X 10.11.6 via PEGASUS
+- [**140**星][27d] [Py] [wmliang/pe-afl](https://github.com/wmliang/pe-afl)
- [**140**星][3y] [Py] [vvalien/sharpmeter](https://github.com/vvalien/sharpmeter) A Simple Way To Make Meterpreter Reverse Payloads
-- [**140**星][7m] [Py] [vinayakumarr/network-intrusion-detection](https://github.com/vinayakumarr/network-intrusion-detection) Network Intrusion Detection KDDCup '99', NSL-KDD and UNSW-NB15
-- [**140**星][9m] [C] [trailofbits/osquery-extensions](https://github.com/trailofbits/osquery-extensions) osquery extensions by Trail of Bits
- [**140**星][2y] [C++] [talos-vulndev/afl-dyninst](https://github.com/talos-vulndev/afl-dyninst) American Fuzzy Lop + Dyninst == AFL Fuzzing blackbox binaries
-- [**140**星][11m] [Py] [t4d/phishingkithunter](https://github.com/t4d/phishingkithunter) Find phishing kits which use your brand/organization's files and image.
+- [**140**星][2y] [Shell] [systematicat/hack-captive-portals](https://github.com/systematicat/hack-captive-portals) Hack any Captive portal using MAC-spoofing technique
- [**140**星][2y] [Py] [sumanj/frankencert](https://github.com/sumanj/frankencert) Adversarial Testing of Certificate Validation in SSL/TLS Implementations
- [**140**星][4y] [Py] [shengqi158/pyvulhunter](https://github.com/shengqi158/pyvulhunter) python audit tool 审计 注入 inject
- [**140**星][2m] [Py] [scrapinghub/python-scrapinghub](https://github.com/scrapinghub/python-scrapinghub) A client interface for Scrapinghub's API
- [**140**星][5y] [Shell] [s7ephen/osx-sandbox--seatbelt--profiles](https://github.com/s7ephen/osx-sandbox--seatbelt--profiles) A repository for configuration profiles for OSX's Seatbelt Application Sandbox
-- [**140**星][5y] [Java] [retme7/cve-2014-7911_poc](https://github.com/retme7/cve-2014-7911_poc) Local root exploit for Nexus5 Android 4.4.4(KTU84P)
+- [**140**星][5m] [Py] [ridter/cve-2019-1040](https://github.com/ridter/cve-2019-1040) CVE-2019-1040 with Exchange
- [**140**星][3m] [Py] [pybind/python_example](https://github.com/pybind/python_example) Example pybind11 module built with a Python-based build system
- [**140**星][10m] [Py] [payloadsecurity/vxapi](https://github.com/payloadsecurity/vxapi) A generic interface and CLI for all endpoints of the Falcon Sandbox API
-- [**140**星][1y] [Py] [packtpublishing/mastering-machine-learning-for-penetration-testing](https://github.com/packtpublishing/mastering-machine-learning-for-penetration-testing) 《Mastering Machine Learning for Penetration Testing》随书代码
-- [**140**星][8m] [Objective-C] [objective-see/reikey](https://github.com/objective-see/reikey) Malware and other applications may install persistent keyboard "event taps" to intercept your keystrokes. ReiKey can scan, detect, and monitor for such taps!
+- [**140**星][2y] [Py] [nullarray/cypher](https://github.com/nullarray/cypher) Pythonic ransomware proof of concept.
+- [**140**星][4y] [C++] [nihilus/hexrays_tools](https://github.com/nihilus/hexrays_tools) 辅助结构体定义和虚函数检测
+- [**140**星][2d] [C#] [microsoft/windowsprotocoltestsuites](https://github.com/microsoft/windowsprotocoltestsuites) 针对Windows开放规范的实现提供了互操作性测试
+- [**140**星][2m] [C#] [med0x2e/gadgettojscript](https://github.com/med0x2e/gadgettojscript) A tool for generating .NET serialized gadgets that can trigger .NET assembly load/execution when deserialized using BinaryFormatter from JS/VBS/VBA based scripts.
- [**140**星][2y] [Java] [lorenzoongithub/nudge4j](https://github.com/lorenzoongithub/nudge4j) Get inside your JVM
- [**140**星][1y] [laxa/hackingtools](https://github.com/laxa/hackingtools) Exhaustive list of hacking tools
- [**140**星][6y] [Tcl] [koto/mosquito](https://github.com/koto/mosquito) XSS exploitation tool - access victims through HTTP proxy
-- [**140**星][2y] [Py] [julieeen/kleefl](https://github.com/julieeen/kleefl) kleefl:结合了符号执行的Fuzzer,针对普通 C/C++ 应用程序
-- [**140**星][3y] [C] [jongates/jon](https://github.com/jongates/jon) jon 是一款LINUX系统攻防工具箱,包含扫描,入侵,痕迹清理,木马,网站测试等各种黑客工具。Jon is a toolbox of Linux, including scanning, intrusion, trace cleaning, Trojan horse, website testing and other hacker tools.
- [**140**星][7y] [C] [johnath/beep](https://github.com/johnath/beep) beep is a command line tool for linux that beeps the PC speaker
- [**140**星][2y] [C] [ixty/mandibule](https://github.com/ixty/mandibule) 向远程进程注入ELF文件
- [**140**星][4y] [HTML] [hexgolems/schem](https://github.com/hexgolems/schem) A debugger frontend
-- [**140**星][6m] [Visual Basic] [dzzie/pdfstreamdumper](https://github.com/dzzie/pdfstreamdumper) research tool for the analysis of malicious pdf documents. make sure to run the installer first to get all of the 3rd party dlls installed correctly.
+- [**140**星][2y] [guanchao/androidchecklist](https://github.com/guanchao/androidchecklist) Android应用审计checklist整理
+- [**140**星][7m] [Visual Basic .NET] [dzzie/pdfstreamdumper](https://github.com/dzzie/pdfstreamdumper) research tool for the analysis of malicious pdf documents. make sure to run the installer first to get all of the 3rd party dlls installed correctly.
- [**140**星][4y] [Py] [dzonerzy/acunetix_0day](https://github.com/dzonerzy/acunetix_0day) Acunetix 0day RCE
+- [**140**星][3y] [C] [dismantl/improvedreflectivedllinjection](https://github.com/dismantl/improvedreflectivedllinjection) An improvement of the original reflective DLL injection technique by Stephen Fewer of Harmony Security
+- [**140**星][2m] [C++] [dfir-orc/dfir-orc](https://github.com/dfir-orc/dfir-orc) Forensics artefact collection tool for systems running Microsoft Windows
- [**140**星][1y] [Py] [codypierce/hackers-grep](https://github.com/codypierce/hackers-grep) hackers-grep is a utility to search for strings in PE executables including imports, exports, and debug symbols
-- [**140**星][5m] [Py] [codingo/minesweeper](https://github.com/codingo/minesweeper) A Burpsuite plugin (BApp) to aid in the detection of scripts being loaded from over 23000 malicious cryptocurrency mining domains (cryptojacking).
- [**140**星][3y] [C#] [cn33liz/cscriptshell](https://github.com/cn33liz/cscriptshell) CScriptShell, a Powershell Host running within cscript.exe
- [**140**星][2y] [PHP] [bugku/bwvs](https://github.com/bugku/bwvs) Web漏洞渗透测试靶场
-- [**140**星][1y] [Py] [brain-research/tensorfuzz](https://github.com/brain-research/tensorfuzz) A library for performing coverage guided fuzzing of neural networks
-- [**140**星][4y] [Py] [blackye/jenkins](https://github.com/blackye/jenkins) Jenkins漏洞探测、用户抓取爆破
- [**140**星][3y] [JS] [atiger77/dionaea](https://github.com/atiger77/dionaea) 基于Docker的蜜罐系统
- [**139**星][3y] [Py] [n1nj4sec/mimipy](https://github.com/n1nj4sec/mimipy) port of mimipenguin.sh in python with some additional protection features
-- [**139**星][3m] [Py] [daeken/httprebind](https://github.com/daeken/httprebind) Automatic tool for DNS rebinding-based SSRF attacks
+- [**139**星][8d] [C#] [0xd4d/jitdasm](https://github.com/0xd4d/jitdasm) Disassemble jitted .NET methods
+- [**139**星][7d] [Rust] [bytecodealliance/wasmparser](https://github.com/bytecodealliance/wasmparser) A simple event-driven library for parsing WebAssembly binary files
+- [**139**星][2m] [crytic/blockchain-security-contacts](https://github.com/crytic/blockchain-security-contacts) Directory of security contacts for blockchain companies
+- [**139**星][2d] [Java] [zaproxy/zap-hud](https://github.com/zaproxy/zap-hud) 看ZAP如何解决安全工具的UX特别难用的问题
+- [**139**星][4m] [Py] [wangyihang/sourceleakhacker](https://github.com/wangyihang/sourceleakhacker) a muilt-thread web source leak detector
- [**139**星][1y] [Py] [und3rf10w/external_c2_framework](https://github.com/und3rf10w/external_c2_framework) Python api for usage with cobalt strike's External C2 specification
-- [**139**星][2m] [C] [twogood/unshield](https://github.com/twogood/unshield) Tool and library to extract CAB files from InstallShield installers
+- [**139**星][4d] [C] [twogood/unshield](https://github.com/twogood/unshield) Tool and library to extract CAB files from InstallShield installers
+- [**139**星][3m] [Py] [technicaldada/hackerpro](https://github.com/technicaldada/hackerpro) All in One Hacking Tool for Linux & Android (Termux). Hackers are welcome in our blog
+- [**139**星][2y] [spoock1024/web-security](https://github.com/spoock1024/web-security) Web安全中比较好的文章
- [**139**星][4y] [Py] [spiderlabs/cribdrag](https://github.com/spiderlabs/cribdrag) cribdrag - an interactive crib dragging tool for cryptanalysis on ciphertext generated with reused or predictable stream cipher keys
- [**139**星][3y] [Py] [skochinsky/me-tools](https://github.com/skochinsky/me-tools) Tools for working with Intel ME
-- [**139**星][1y] [Py] [santatic/web2attack](https://github.com/santatic/web2attack) Web hacking framework with tools, exploits by python
+- [**139**星][2d] [Py] [santatic/web2attack](https://github.com/santatic/web2attack) Web hacking framework with tools, exploits by python
- [**139**星][2y] [C] [saleemrashid/ledger-mcu-backdoor](https://github.com/saleemrashid/ledger-mcu-backdoor) Proof of concept for Ledger MCU exploit
-- [**139**星][5m] [Py] [ridter/cve-2019-1040](https://github.com/ridter/cve-2019-1040) CVE-2019-1040 with Exchange
- [**139**星][1m] [Py] [rhinosecuritylabs/gcpbucketbrute](https://github.com/rhinosecuritylabs/gcpbucketbrute) A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated.
+- [**139**星][5d] [recolic/awesome-hust](https://github.com/recolic/awesome-hust) HUST experiments, reports, and useful tools.
- [**139**星][1m] [HTML] [proabiral/inception](https://github.com/proabiral/inception) A highly configurable tool to check for whatever you like against any number of hosts.
-- [**139**星][2y] [Py] [nullarray/cypher](https://github.com/nullarray/cypher) Pythonic ransomware proof of concept.
+- [**139**星][2m] [Verilog] [osresearch/spispy](https://github.com/osresearch/spispy) An open source SPI flash emulator and monitor
+- [**139**星][2m] [nathanchance/android-kernel-clang](https://github.com/nathanchance/android-kernel-clang) Information on compiling Android kernels with Clang
- [**139**星][9m] [Py] [mtivadar/qiew](https://github.com/mtivadar/qiew) Home of Qiew - Reverse engineering tool
-- [**139**星][2m] [C#] [med0x2e/gadgettojscript](https://github.com/med0x2e/gadgettojscript) A tool for generating .NET serialized gadgets that can trigger .NET assembly load/execution when deserialized using BinaryFormatter from JS/VBS/VBA based scripts.
+- [**139**星][4m] [Py] [mgeeky/expdevbadchars](https://github.com/mgeeky/expdevbadchars) Bad Characters highlighter for exploit development purposes supporting multiple input formats while comparing.
- [**139**星][4y] [Py] [lauixdata/wechat_hack](https://github.com/lauixdata/wechat_hack) 微信黑客攻击平台 - 已经废弃
- [**139**星][2y] [l3m0n/linux_information](https://github.com/l3m0n/linux_information) 自动化收集linux信息
+- [**139**星][17d] [Jupyter Notebook] [kelu124/echomods](https://github.com/kelu124/echomods) Open source ultrasound processing modules and building blocks
- [**139**星][2m] [C#] [juunas11/aspnetcore-security-headers](https://github.com/juunas11/aspnetcore-security-headers) Middleware for adding security headers to an ASP.NET Core application.
+- [**139**星][6m] [Py] [jaxbcd/zeebsploit](https://github.com/jaxbcd/zeebsploit) web scanner - exploitation - information gathering
- [**139**星][7m] [Py] [iphelix/ida-sploiter](https://github.com/iphelix/ida-sploiter) 辅助漏洞研究
- [**139**星][11m] [C++] [guidovranken/libfuzzer-gv](https://github.com/guidovranken/libfuzzer-gv) 加强版 libFuzzer:超快速Fuzzing 的新技巧
-- [**139**星][2y] [guanchao/androidchecklist](https://github.com/guanchao/androidchecklist) Android应用审计checklist整理
-- [**139**星][22d] [C] [glv2/bruteforce-luks](https://github.com/glv2/bruteforce-luks) Try to find the password of a LUKS encrypted volume.
+- [**139**星][24d] [C] [glv2/bruteforce-luks](https://github.com/glv2/bruteforce-luks) Try to find the password of a LUKS encrypted volume.
- [**139**星][2y] [C] [gkaindl/meltdown-poc](https://github.com/gkaindl/meltdown-poc) A quick PoC to try out the "meltdown" timing attack.
+- [**139**星][11m] [C++] [finixbit/elf-parser](https://github.com/finixbit/elf-parser) Lightweight elf binary parser with no external dependencies - Sections, Symbols, Relocations, Segments
- [**139**星][2y] [C] [eterna1/puszek-rootkit](https://github.com/eterna1/puszek-rootkit) linux rootkit
-- [**139**星][5m] [Py] [echowei/deeptraffic](https://github.com/echowei/deeptraffic) Deep Learning models for network traffic classification
-- [**139**星][2m] [C++] [dfir-orc/dfir-orc](https://github.com/dfir-orc/dfir-orc) Forensics artefact collection tool for systems running Microsoft Windows
+- [**139**星][10m] [PS] [empireproject/psinject](https://github.com/empireproject/psinject) Inject PowerShell into any process
- [**139**星][2m] [Py] [cboesecurity/password_pwncheck](https://github.com/cboesecurity/password_pwncheck) Kerberos / Windows AD / Linux PAM password change check against breached lists (HIBP), and other rules
- [**139**星][1y] [Py] [c0r3dump3d/osueta](https://github.com/c0r3dump3d/osueta) A simple Python script to exploit the OpenSSH User Enumeration Timing Attack.
- [**139**星][5y] [PHP] [btoplak/joomla-anti-malware-scan-script--jamss-](https://github.com/btoplak/joomla-anti-malware-scan-script--jamss-) a Joomla! and WordPress Security script that automatically scans the Joomla! or Wordpress files for some patterns and "fingerprints" of malware, trojans or other injections into PHP code
+- [**139**星][11m] [Py] [bignerd95/winboxexploit](https://github.com/bignerd95/winboxexploit) Proof of Concept of Winbox Critical Vulnerability
- [**139**星][2m] [Scala] [azure/azure-cosmosdb-spark](https://github.com/azure/azure-cosmosdb-spark) Apache Spark Connector for Azure Cosmos DB
- [**139**星][6y] [Ruby] [aidanns/vagrant-reload](https://github.com/aidanns/vagrant-reload) A plugin that allows you to reload a Vagrant plugin as a provisioning step.
-- [**138**星][8d] [C++] [tenzir/vast](https://github.com/tenzir/vast) a scalable foundation for a security operations center (SOC): a rich data model for security data, high-throughput ingestion of telemetry, low-latency search, and flexible export in various formats.
-- [**138**星][8d] [Java] [zaproxy/zap-hud](https://github.com/zaproxy/zap-hud) 看ZAP如何解决安全工具的UX特别难用的问题
+- [**138**星][3m] [ckjbug/xmind-learning](https://github.com/ckjbug/xmind-learning) 各种安全相关思维导图整理收集
+- [**138**星][7m] [JS] [wzdnzd/shadowsocksx-ng-r](https://github.com/wzdnzd/shadowsocksx-ng-r) Shadowsocks Client for MacOS
+- [**138**星][2d] [C++] [tenzir/vast](https://github.com/tenzir/vast) a scalable foundation for a security operations center (SOC): a rich data model for security data, high-throughput ingestion of telemetry, low-latency search, and flexible export in various formats.
+- [**138**星][1m] [Py] [darkarp/chromepass](https://github.com/darkarp/chromepass) Chromepass - Hacking Chrome Saved Passwords
- [**138**星][8m] [Shell] [wazehell/pe-linux](https://github.com/wazehell/pe-linux) Linux Privilege Escalation Tool By WazeHell
- [**138**星][7m] [Shell] [vcheckzen/familycloudspeederinshell](https://github.com/vcheckzen/familycloudspeederinshell) [ 天翼家庭云/天翼云盘提速 Shell 版 ] A Shell Implementation of FamilyCloudSpeeder, ESurfing
- [**138**星][1y] [Py] [ultimatelabs/zoom](https://github.com/ultimatelabs/zoom) Automatic & lightning fast wordpress vulnerability scanner
- [**138**星][1y] [C++] [tromp/equihash](https://github.com/tromp/equihash) multi-parameter Equihash proof-of-work multi-threaded C solvers
-- [**138**星][3m] [Py] [technicaldada/hackerpro](https://github.com/technicaldada/hackerpro) All in One Hacking Tool for Linux & Android (Termux). Hackers are welcome in our blog
+- [**138**星][3m] [Py] [threatexpress/cs2modrewrite](https://github.com/threatexpress/cs2modrewrite) Convert Cobalt Strike profiles to modrewrite scripts
+- [**138**星][9m] [C++] [thefox/keylogger](https://github.com/thefox/keylogger) Keylogger for Windows.
+- [**138**星][12m] [C] [tharina/35c3ctf](https://github.com/tharina/35c3ctf) 35C3 Junior CTF pwnables
- [**138**星][8y] [JS] [substack/node-password-reset](https://github.com/substack/node-password-reset) middleware for password reset emails
-- [**138**星][2y] [spoock1024/web-security](https://github.com/spoock1024/web-security) Web安全中比较好的文章
- [**138**星][1m] [Shell] [shellhub/shellhub](https://github.com/shellhub/shellhub) shell script hub
-- [**138**星][4y] [C++] [nihilus/hexrays_tools](https://github.com/nihilus/hexrays_tools) 辅助结构体定义和虚函数检测
-- [**138**星][4m] [Py] [mgeeky/expdevbadchars](https://github.com/mgeeky/expdevbadchars) Bad Characters highlighter for exploit development purposes supporting multiple input formats while comparing.
-- [**138**星][1y] [landgrey/upload-labs-writeup](https://github.com/landgrey/upload-labs-writeup) upload-labs writeup
-- [**138**星][3y] [Objective-C] [kpwn/935csbypass](https://github.com/kpwn/935csbypass) codesign bypass (get out of rop without JIT)
+- [**138**星][7y] [C] [quarkslab/dreamboot](https://github.com/quarkslab/dreamboot) UEFI bootkit
+- [**138**星][7m] [C++] [macmade/dyld_cache_extract](https://github.com/macmade/dyld_cache_extract) A macOS utility to extract dynamic libraries from the dyld_shared_cache of macOS and iOS.
- [**138**星][2y] [Py] [jrbancel/chromagnon](https://github.com/jrbancel/chromagnon) Chrome/Chromium Forensic Tool : Parses History, Visited Links, Downloaded Files and Cache
+- [**138**星][2y] [ObjC] [jiangbolee/changelocation](https://github.com/jiangbolee/changelocation) 改变自己的定位地址(免越狱打卡)
- [**138**星][7m] [C] [jgm/lunamark](https://github.com/jgm/lunamark) Lua library for conversion between markup formats
- [**138**星][6y] [Py] [jezdez/django-discover-runner](https://github.com/jezdez/django-discover-runner) A Django test runner based on unittest2's test discovery.
-- [**138**星][6m] [Py] [jaxbcd/zeebsploit](https://github.com/jaxbcd/zeebsploit) web scanner - exploitation - information gathering
- [**138**星][4m] [Go] [greenboxal/dns-heaven](https://github.com/greenboxal/dns-heaven) 通过/etc/resolv.conf 启用本地 DNS stack 来修复(愚蠢的) macOS DNS stack
+- [**138**星][2y] [Py] [google/tcp_killer](https://github.com/google/tcp_killer) 关闭 Linux或 MacOS 的 Tcp 端口
- [**138**星][6m] [C] [glv2/bruteforce-wallet](https://github.com/glv2/bruteforce-wallet) Try to find the password of an encrypted Peercoin (or Bitcoin, Litecoin, etc...) wallet file.
-- [**138**星][11m] [C++] [finixbit/elf-parser](https://github.com/finixbit/elf-parser) Lightweight elf binary parser with no external dependencies - Sections, Symbols, Relocations, Segments
+- [**138**星][10m] [Py] [gawen/virustotal](https://github.com/gawen/virustotal)
- [**138**星][8m] [JS] [exodusintel/chromium-941743](https://github.com/exodusintel/chromium-941743) Chrome v8 1Day Exploit by István Kurucsai
- [**138**星][4m] [CSS] [epfl-vlsc/memoro](https://github.com/epfl-vlsc/memoro) 堆详情查探器, 可查看进程分配堆的位置和时间, 以及进程如何使用堆内存
-- [**138**星][10m] [PowerShell] [empireproject/psinject](https://github.com/empireproject/psinject) Inject PowerShell into any process
- [**138**星][2m] [C] [dgiardini/rtl-ais](https://github.com/dgiardini/rtl-ais) A simple AIS tuner and generic dual-frequency FM demodulator
+- [**138**星][2m] [C] [dekunukem/kbord](https://github.com/dekunukem/kbord) Scriptable mechanical keypad with OLED display and RGB backlight.
- [**138**星][2y] [Py] [cyberark/shimit](https://github.com/cyberark/shimit) A tool that implements the Golden SAML attack
-- [**138**星][7m] [C] [coolervoid/hiddenwall](https://github.com/coolervoid/hiddenwall) Tool to generate a Linux kernel module for custom rules with Netfilter hooking. (block ports, Hidden mode, rootkit functions etc)
+- [**138**星][16d] [Go] [cloudflare/cfssl_trust](https://github.com/cloudflare/cfssl_trust) CFSSL's CA trust store repository
- [**138**星][6m] [Perl] [caledoniaproject/jenkins-cli-exploit](https://github.com/caledoniaproject/jenkins-cli-exploit) Jenkins CommonCollections Exploit
-- [**138**星][22d] [C] [antelle/argon2-browser](https://github.com/antelle/argon2-browser) Argon2 library compiled for browser runtime
-- [**138**星][8m] [Py] [ale5000-git/tingle](https://github.com/ale5000-git/tingle) Android patcher
-- [**137**星][3m] [ckjbug/xmind-learning](https://github.com/ckjbug/xmind-learning) 各种安全相关思维导图整理收集
+- [**138**星][24d] [C] [antelle/argon2-browser](https://github.com/antelle/argon2-browser) Argon2 library compiled for browser runtime
+- [**138**星][9m] [Py] [ale5000-git/tingle](https://github.com/ale5000-git/tingle) Android patcher
- [**137**星][4y] [Py] [pentestmonkey/pysecdump](https://github.com/pentestmonkey/pysecdump) 从Windows系统中转储安全相关信息,Python编写
- [**137**星][9m] [Go] [snail007/shadowtunnel](https://github.com/snail007/shadowtunnel) secure tunnel which help you protecting your tcp traffic between your machine and your service on remote.
- [**137**星][1m] [JS] [fcavallarin/domdig](https://github.com/fcavallarin/domdig) DOM XSS scanner for Single Page Applications
- [**137**星][11m] [Shell] [tacticthreat/penetrationtesting-notes](https://github.com/tacticthreat/PenetrationTesting-Notes) Penetration Testing Notes and Playbook (PTP)
- [**137**星][8m] [Py] [mdudek-ics/trisis-triton-hatman](https://github.com/MDudek-ICS/TRISIS-TRITON-HATMAN) Repository containting original and decompiled files of TRISIS/TRITON/HATMAN malware
-- [**137**星][1m] [Py] [darkarp/chromepass](https://github.com/darkarp/chromepass) Chromepass - Hacking Chrome Saved Passwords
+- [**137**星][18d] [Shell] [reb311ion/tornado](https://github.com/reb311ion/tornado) All in one MITM tool .
- [**137**星][4y] [C] [xairy/kaslr-bypass-via-prefetch](https://github.com/xairy/kaslr-bypass-via-prefetch) A proof-of-concept KASLR bypass for the Linux kernel via timing prefetch (dilettante implementation, better read the original paper:
-- [**137**星][5y] [Objective-C] [tyranid/ie11sandboxescapes](https://github.com/tyranid/ie11sandboxescapes) Some example source code for fixed IE11 sandbox escapes.
+- [**137**星][5y] [ObjC] [tyranid/ie11sandboxescapes](https://github.com/tyranid/ie11sandboxescapes) Some example source code for fixed IE11 sandbox escapes.
- [**137**星][2y] [Java] [tinylcy/classanalyzer](https://github.com/tinylcy/classanalyzer) A Java Class File Disassembler
-- [**137**星][9m] [C++] [thefox/keylogger](https://github.com/thefox/keylogger) Keylogger for Windows.
-- [**137**星][2y] [Shell] [systematicat/hack-captive-portals](https://github.com/systematicat/hack-captive-portals) Hack any Captive portal using MAC-spoofing technique
-- [**137**星][30d] [Java] [superblaubeere27/obfuscator](https://github.com/superblaubeere27/obfuscator) A java obfuscator (GUI)
- [**137**星][8y] [stefanesser/ida-ios-toolkit](https://github.com/stefanesser/ida-ios-toolkit) 辅助处理iOS kernelcache的IDAPython收集
-- [**137**星][4y] [PowerShell] [secabstraction/wmisploit](https://github.com/secabstraction/wmisploit) a small set of PowerShell scripts that leverage the WMI service, for post-exploitation use
+- [**137**星][4y] [PS] [secabstraction/wmisploit](https://github.com/secabstraction/wmisploit) a small set of PowerShell scripts that leverage the WMI service, for post-exploitation use
- [**137**星][1y] [Py] [quentinhardy/scriptsandexploits](https://github.com/quentinhardy/scriptsandexploits) Some scripts and exploits
-- [**137**星][7y] [C] [quarkslab/dreamboot](https://github.com/quarkslab/dreamboot) UEFI bootkit
- [**137**星][4y] [Py] [puniaze/portdog](https://github.com/puniaze/portdog) network anomaly detector aimed to detect port scanning techniques
+- [**137**星][2m] [HTML] [nusenu/ansible-relayor](https://github.com/nusenu/ansible-relayor) An Ansible Role for Tor Relay Operators
- [**137**星][9m] [Py] [nh2/strace-pipes-presentation](https://github.com/nh2/strace-pipes-presentation) 利用strace+管道/socket进行调试
- [**137**星][1y] [Java] [netspi/wsdler](https://github.com/netspi/wsdler) WSDL Parser extension for Burp
- [**137**星][3y] [Py] [misterch0c/twitterbftd](https://github.com/misterch0c/twitterbftd) Twitter Back From The Dead looks in a user tweets history for domain names that are available for registration
-- [**137**星][7m] [C++] [macmade/dyld_cache_extract](https://github.com/macmade/dyld_cache_extract) A macOS utility to extract dynamic libraries from the dyld_shared_cache of macOS and iOS.
-- [**137**星][24d] [PowerShell] [lazywinadmin/adsips](https://github.com/lazywinadmin/adsips) PowerShell module to interact with Active Directory using ADSI and the System.DirectoryServices namespace (.NET Framework)
+- [**137**星][26d] [PS] [lazywinadmin/adsips](https://github.com/lazywinadmin/adsips) PowerShell module to interact with Active Directory using ADSI and the System.DirectoryServices namespace (.NET Framework)
- [**137**星][3y] [C] [koutto/ioctlbf](https://github.com/koutto/ioctlbf) Windows Kernel Drivers fuzzer
- [**137**星][10m] [Py] [johndekroon/serializekiller](https://github.com/johndekroon/serializekiller) Mass scanner for the Java serialize bug
+- [**137**星][2m] [ignitetechnologies/ctf-difficulty](https://github.com/ignitetechnologies/ctf-difficulty) This cheasheet is aimed at the CTF Players and Beginners to help them sort the CTF Challenges on the basis of Difficulties.
+- [**137**星][2m] [ObjC] [icepa/tor.framework](https://github.com/icepa/tor.framework) Tor framework for the iCepa project
+- [**137**星][2y] [Java] [helios-decompiler/standalone-app](https://github.com/helios-decompiler/standalone-app) All-in-one Java reverse engineering tool
+- [**137**星][7m] [C] [hc0d3r/mysql-magic](https://github.com/hc0d3r/mysql-magic) dump mysql client password from memory
- [**137**星][2y] [greymd/cve-2017-1000117](https://github.com/greymd/cve-2017-1000117) Check Git's vulnerability CVE-2017-1000117
-- [**137**星][7d] [C++] [grammatech/ddisasm](https://github.com/grammatech/ddisasm) A fast and accurate disassembler
-- [**137**星][2y] [Py] [google/tcp_killer](https://github.com/google/tcp_killer) 关闭 Linux或 MacOS 的 Tcp 端口
+- [**137**星][9d] [C++] [grammatech/ddisasm](https://github.com/grammatech/ddisasm) A fast and accurate disassembler
+- [**137**星][2y] [Py] [gradiusx/hevd-python-solutions](https://github.com/gradiusx/hevd-python-solutions) Python solutions for the HackSysTeam Extreme Vulnerable Driver
- [**137**星][2y] [Java] [gnaixx/hidex-hack](https://github.com/gnaixx/hidex-hack) anti reverse by hack dex file
- [**137**星][7m] [Py] [giovanifss/gitmails](https://github.com/giovanifss/gitmails) An information gathering tool to collect git commit emails in version control host services
-- [**137**星][10m] [Py] [gawen/virustotal](https://github.com/gawen/virustotal)
- [**137**星][3y] [C] [ebursztein/malusb](https://github.com/ebursztein/malusb) Malicious USB
-- [**137**星][3y] [C] [dismantl/improvedreflectivedllinjection](https://github.com/dismantl/improvedreflectivedllinjection) An improvement of the original reflective DLL injection technique by Stephen Fewer of Harmony Security
+- [**137**星][17d] [Ruby] [dev-sec/chef-ssh-hardening](https://github.com/dev-sec/chef-ssh-hardening) This chef cookbook provides secure ssh-client and ssh-server configurations.
- [**137**星][3y] [C] [cr4sh/peibackdoor](https://github.com/cr4sh/peibackdoor) PEI stage backdoor for UEFI compatible firmware
-- [**137**星][14d] [Go] [cloudflare/cfssl_trust](https://github.com/cloudflare/cfssl_trust) CFSSL's CA trust store repository
-- [**137**星][11m] [Py] [bignerd95/winboxexploit](https://github.com/bignerd95/winboxexploit) Proof of Concept of Winbox Critical Vulnerability
+- [**137**星][5y] [Py] [byt3bl33d3r/sslstrip2](https://github.com/byt3bl33d3r/sslstrip2) A mirror of the original SSLstrip+ code by Leonardo Nve
- [**137**星][3y] [JS] [as0ler/frida-scripts](https://github.com/as0ler/frida-scripts) Repository including some useful frida script for iOS Reversing
- [**137**星][2y] [Py] [anhkgg/pyrat](https://github.com/anhkgg/pyrat) PyRat,a rat by python xmlrpc
- [**137**星][5m] [C] [akayn/demos](https://github.com/akayn/demos) Windows Kernel Exploitation. Static & dynamic analysis, exploits & vuln research. Mitigations bypass's, genric bug-class's.
+- [**137**星][1y] [PLpgSQL] [1eez/103976](https://github.com/1eez/103976) 103976个英语单词库(sql版,csv版,Excel版)包含英文单词,中文翻译,单词的词性及多种词义,执行SQL语句就可以生成表,支持SQL Server,MySQL等多种数据库
+- [**136**星][9d] [Scala] [shiftleftsecurity/joern](https://github.com/shiftleftsecurity/joern) Open-source code analysis platform for C/C++ based on code property graphs
- [**136**星][2y] [Py] [vysecurity/ipfuscator](https://github.com/vysecurity/IPFuscator) IPFuscator - A tool to automatically generate alternative IP representations
+- [**136**星][14d] [PS] [lazywinadmin/monitor-adgroupmembership](https://github.com/lazywinadmin/Monitor-ADGroupMembership) PowerShell script to monitor Active Directory groups and send an email when someone is changing the membership
- [**136**星][6y] [Py] [osirislab/ctf-challenges](https://github.com/osirislab/CTF-Challenges) A repository of challenges from various CTF competitions.
-- [**136**星][2y] [PowerShell] [gpoguy/getvulnerablegpo](https://github.com/gpoguy/getvulnerablegpo) PowerShell script to find 'vulnerable' security-related GPOs that should be hardended
-- [**136**星][16d] [Shell] [reb311ion/tornado](https://github.com/reb311ion/tornado) All in one MITM tool .
+- [**136**星][2y] [PS] [gpoguy/getvulnerablegpo](https://github.com/gpoguy/getvulnerablegpo) PowerShell script to find 'vulnerable' security-related GPOs that should be hardended
+- [**136**星][1y] [nsacyber/unfetter](https://github.com/nsacyber/unfetter) Identifies defensive gaps in security posture by leveraging Mitre's ATT&CK framework. #nsacyber
- [**136**星][2m] [JS] [jesusprubio/shodan-client](https://github.com/jesusprubio/shodan-client)
- [**136**星][6y] [C++] [zer0fl4g/nanomite](https://github.com/zer0fl4g/nanomite) Windows上用于x64和x86的图形调试器
+- [**136**星][8m] [Py] [yt1g3r/cve-2019-3396_exp](https://github.com/yt1g3r/cve-2019-3396_exp) CVE-2019-3396 confluence SSTI RCE
+- [**136**星][3y] [Java] [ysrc/anti-emulator](https://github.com/ysrc/anti-emulator) 基于文件特征的Android模拟器检测
- [**136**星][1y] [C] [xvortex/ps4-hen-vtx](https://github.com/xvortex/ps4-hen-vtx) A fully implemented kernel exploit for the PS4 with HEN
-- [**136**星][4m] [Py] [wangyihang/sourceleakhacker](https://github.com/wangyihang/sourceleakhacker) a muilt-thread web source leak detector
+- [**136**星][12m] [JS] [thx/magix-inspector](https://github.com/thx/magix-inspector) magix项目调试分析工具
- [**136**星][4m] [Jupyter Notebook] [threathuntingproject/hunter](https://github.com/threathuntingproject/hunter) A threat hunting / data analysis environment based on Python, Pandas, PySpark and Jupyter Notebook.
-- [**136**星][3m] [Py] [threatexpress/cs2modrewrite](https://github.com/threatexpress/cs2modrewrite) Convert Cobalt Strike profiles to modrewrite scripts
-- [**136**星][11m] [C] [tharina/35c3ctf](https://github.com/tharina/35c3ctf) 35C3 Junior CTF pwnables
-- [**136**星][10m] [Py] [scrapinghub/scrapy-training](https://github.com/scrapinghub/scrapy-training) Scrapy Training companion code
+- [**136**星][7y] [C] [t57root/pwnginx](https://github.com/t57root/pwnginx) Pwn nginx - a nginx backdoor provides shell access, socks5 tunneling, http password sniffing.
+- [**136**星][28d] [Py] [swisskyrepo/vulny-code-static-analysis](https://github.com/swisskyrepo/vulny-code-static-analysis) Basic script to detect vulnerabilities into a PHP source code using statical analysis, based on regex
+- [**136**星][4y] [scfwse/blockchinasoftware](https://github.com/scfwse/blockchinasoftware) 国产安全软件免疫补丁
- [**136**星][4m] [C] [rmmh/abbrase](https://github.com/rmmh/abbrase) password generation based on abbreviating phrases made with markov chains
-- [**136**星][2m] [Verilog] [osresearch/spispy](https://github.com/osresearch/spispy) An open source SPI flash emulator and monitor
- [**136**星][1y] [Py] [nirizr/rematch](https://github.com/nirizr/rematch) REmatch, a complete binary diffing framework that is free and strives to be open source and community driven.
- [**136**星][6y] [Py] [nightnord/ljd](https://github.com/nightnord/ljd) LuaJIT raw-bytecode decompiler
-- [**136**星][2m] [nathanchance/android-kernel-clang](https://github.com/nathanchance/android-kernel-clang) Information on compiling Android kernels with Clang
-- [**136**星][13d] [Py] [misp/misp-modules](https://github.com/misp/misp-modules) Modules for expansion services, import and export in MISP
-- [**136**星][8d] [C#] [microsoft/windowsprotocoltestsuites](https://github.com/microsoft/windowsprotocoltestsuites) 针对Windows开放规范的实现提供了互操作性测试
-- [**136**星][4m] [PowerShell] [leechristensen/random](https://github.com/leechristensen/random) Assorted scripts and one off things
-- [**136**星][3y] [PowerShell] [latkin/1poshword](https://github.com/latkin/1poshword) PowerShell client for 1Password
+- [**136**星][3d] [Py] [misp/misp-modules](https://github.com/misp/misp-modules) Modules for expansion services, import and export in MISP
+- [**136**星][1y] [HTML] [maestron/hacking-tutorials](https://github.com/maestron/hacking-tutorials) hacking-tutorials
+- [**136**星][3m] [Go] [leviathan1995/fari-proxy](https://github.com/leviathan1995/fari-proxy) To freedom
+- [**136**星][4m] [PS] [leechristensen/random](https://github.com/leechristensen/random) Assorted scripts and one off things
- [**136**星][3y] [kurobeats/pentest-bookmarks](https://github.com/kurobeats/pentest-bookmarks) Open Penetration Testing Bookmarks Collection
+- [**136**星][2m] [C] [kubo/funchook](https://github.com/kubo/funchook) Funchook - an API Hook Library
+- [**136**星][3y] [ObjC] [kpwn/935csbypass](https://github.com/kpwn/935csbypass) codesign bypass (get out of rop without JIT)
+- [**136**星][2y] [Shell] [junbaor/shell_script](https://github.com/junbaor/shell_script) 一键安装 shadowsocks,支持 chacha20-ietf-poly1305 加密方式
- [**136**星][7m] [Py] [itskindred/moddetective](https://github.com/itskindred/moddetective) modDetective is a small Python tool that chronologizes files based on modification time in order to investigate recent system activity.
-- [**136**星][2m] [ignitetechnologies/ctf-difficulty](https://github.com/ignitetechnologies/ctf-difficulty) This cheasheet is aimed at the CTF Players and Beginners to help them sort the CTF Challenges on the basis of Difficulties.
-- [**136**星][2y] [Java] [helios-decompiler/standalone-app](https://github.com/helios-decompiler/standalone-app) All-in-one Java reverse engineering tool
-- [**136**星][7m] [C] [hc0d3r/mysql-magic](https://github.com/hc0d3r/mysql-magic) dump mysql client password from memory
- [**136**星][3y] [Py] [hasameli/foghorn](https://github.com/hasameli/foghorn) The foghorn project is a DNS proxy intended to reduce user exposure to phishing and other malicious items that can be interdicted by DNS greylisting
-- [**136**星][1y] [JS] [h3xstream/burp-retire-js](https://github.com/h3xstream/burp-retire-js) Burp/ZAP/Maven extension that integrate Retire.js repository to find vulnerable Javascript libraries.
+- [**136**星][2d] [JS] [h3xstream/burp-retire-js](https://github.com/h3xstream/burp-retire-js) Burp/ZAP/Maven extension that integrate Retire.js repository to find vulnerable Javascript libraries.
- [**136**星][7y] [Py] [gdssecurity/wifitap](https://github.com/gdssecurity/wifitap) wifitap updated for BT5r3
+- [**136**星][2y] [Py] [duoergun0729/3book](https://github.com/duoergun0729/3book) 《Web安全之强化学习与GAN》
- [**136**星][3y] [Java] [dodola/deepinvirtualapp](https://github.com/dodola/deepinvirtualapp) VirtualApp的技术文档和各个技术点拆解demo
-- [**136**星][15d] [Ruby] [dev-sec/chef-ssh-hardening](https://github.com/dev-sec/chef-ssh-hardening) This chef cookbook provides secure ssh-client and ssh-server configurations.
+- [**136**星][4m] [Py] [derekhe/proxypool](https://github.com/derekhe/proxypool) 高质量免费代理池——每日1w+代理资源滚动更新
- [**136**星][2y] [Py] [ctxis/canape](https://github.com/ctxis/canape) CANAPE Network Testing Tool
+- [**136**星][8d] [C#] [chrisnas/debuggingextensions](https://github.com/chrisnas/debuggingextensions) Host of debugging-related extensions such as post-mortem tools or WinDBG extensions
- [**136**星][3y] [C] [chris-johnston/binarykeyboard](https://github.com/chris-johnston/binarykeyboard) A keyboard with two buttons that types in binary.
+- [**136**星][1m] [TS] [chame1eon/jnitrace](https://github.com/chame1eon/jnitrace) A Frida based tool that traces usage of the JNI API in Android apps.
+- [**136**星][4m] [JS] [chabou/hyper-pane](https://github.com/chabou/hyper-pane) Extension for Hyper.app to enhance pane navigation.
+- [**136**星][2y] [Rust] [bryant/argon2rs](https://github.com/bryant/argon2rs) The pure-Rust password hashing library running on Argon2.
+- [**136**星][2m] [Py] [bo0om/parampampam](https://github.com/bo0om/parampampam) brute discover GET and POST parameters.
- [**136**星][4y] [Go] [bearded-web/bearded](https://github.com/bearded-web/bearded)
-- [**136**星][12m] [C] [alex3434/wmi-static-spoofer](https://github.com/alex3434/wmi-static-spoofer) Spoofing the Windows 10 HDD/diskdrive serialnumber from kernel without hooking
-- [**135**星][8d] [Py] [volatilityfoundation/volatility3](https://github.com/volatilityfoundation/volatility3) Volatility 3.0 development
-- [**135**星][10m] [PowerShell] [vysecurity/aggressor-vysec](https://github.com/vysecurity/Aggressor-VYSEC) CobaltStrike Aggressor Scripts
-- [**135**星][1y] [nsacyber/unfetter](https://github.com/nsacyber/unfetter) Identifies defensive gaps in security posture by leveraging Mitre's ATT&CK framework. #nsacyber
+- [**136**星][7d] [Py] [arizvisa/ida-minsc](https://github.com/arizvisa/ida-minsc) a plugin for IDA Pro that assists a user with scripting the IDAPython plugin that is bundled with the disassembler.
+- [**136**星][14d] [PS] [antoniococo/conptyshell](https://github.com/antoniococo/conptyshell) ConPtyShell - Fully Interactive Reverse Shell for Windows
+- [**136**星][1y] [C] [alex3434/wmi-static-spoofer](https://github.com/alex3434/wmi-static-spoofer) Spoofing the Windows 10 HDD/diskdrive serialnumber from kernel without hooking
+- [**136**星][2y] [Go] [aiportal/wechat-proxy](https://github.com/aiportal/wechat-proxy) 微信代理服务
+- [**135**星][13d] [JS] [snyk/goof](https://github.com/snyk/goof) Super vulnerable todo list application
+- [**135**星][11m] [PS] [vysecurity/aggressor-vysec](https://github.com/vysecurity/Aggressor-VYSEC) CobaltStrike Aggressor Scripts
+- [**135**星][12m] [Shell] [onmyway133/swiftsnippets](https://github.com/onmyway133/SwiftSnippets) A collection of Swift snippets to be used in Xcode
- [**135**星][1y] [Py] [crytic/rattle](https://github.com/crytic/rattle) evm binary static analysis
-- [**135**星][8m] [Py] [yt1g3r/cve-2019-3396_exp](https://github.com/yt1g3r/cve-2019-3396_exp) CVE-2019-3396 confluence SSTI RCE
+- [**135**星][13d] [Haskell] [jackmiranda/herms](https://github.com/JackMiranda/herms) a Haskell-based Recipe Manager (yes, food recipes) for the command line
- [**135**星][2y] [JS] [usscltd/dorks](https://github.com/usscltd/dorks) google hack database automation tool
- [**135**星][2y] [thec00n/smart-contract-honeypots](https://github.com/thec00n/smart-contract-honeypots) 智能合约蜜罐收集
- [**135**星][3y] [Ruby] [tagomoris/fluent-plugin-secure-forward](https://github.com/tagomoris/fluent-plugin-secure-forward) input/output plugin to forward fluentd messages over SSL with authentication.
-- [**135**星][7y] [C] [t57root/pwnginx](https://github.com/t57root/pwnginx) Pwn nginx - a nginx backdoor provides shell access, socks5 tunneling, http password sniffing.
-- [**135**星][26d] [Py] [swisskyrepo/vulny-code-static-analysis](https://github.com/swisskyrepo/vulny-code-static-analysis) Basic script to detect vulnerabilities into a PHP source code using statical analysis, based on regex
- [**135**星][3y] [Py] [sviehb/jefferson](https://github.com/sviehb/jefferson) JFFS2 filesystem extraction tool
- [**135**星][6y] [Java] [sectooladdict/wavsep](https://github.com/sectooladdict/wavsep) The Web Application Vulnerability Scanner Evaluation Project
-- [**135**星][24d] [recolic/awesome-hust](https://github.com/recolic/awesome-hust) HUST experiments, reports, and useful tools.
- [**135**星][2y] [C#] [poshsec/poshsecframework](https://github.com/poshsec/poshsecframework) A framework for PowerShell and PoshSec scripts for network management, security, and maintenance.
-- [**135**星][2y] [Py] [pjlantz/hale](https://github.com/pjlantz/hale) Botnet command & control monitor
-- [**135**星][1y] [Shell] [peterjaric/archaeologit](https://github.com/peterjaric/archaeologit) 扫描GitHub repo的历史, 按指定模式查找敏感信息, 例如用户名密码
+- [**135**星][8d] [pomerium/awesome-security-audits](https://github.com/pomerium/awesome-security-audits) A collection of public security audits.
+- [**135**星][2y] [Shell] [peterjaric/archaeologit](https://github.com/peterjaric/archaeologit) 扫描GitHub repo的历史, 按指定模式查找敏感信息, 例如用户名密码
- [**135**星][4y] [osandamalith/exe2image](https://github.com/osandamalith/exe2image) A simple utility to convert EXE files to JPEG images and vice versa.
-- [**135**星][1y] [HTML] [maestron/hacking-tutorials](https://github.com/maestron/hacking-tutorials) hacking-tutorials
-- [**135**星][28d] [Py] [m8r0wn/subscraper](https://github.com/m8r0wn/subscraper) External pentest and bug bounty tool to perform subdomain enumeration through various techniques. SubScraper will provide information such as HTTP & DNS lookups to aid in potential next steps.
-- [**135**星][8m] [PowerShell] [logrhythm-labs/pie](https://github.com/logrhythm-labs/pie) Phishing Intelligence Engine
+- [**135**星][5d] [Py] [oasis-open/cti-python-stix2](https://github.com/oasis-open/cti-python-stix2) OASIS TC Open Repository: Python APIs for STIX 2
+- [**135**星][7y] [Ruby] [mubix/vt-notify](https://github.com/mubix/vt-notify) Get email notification when Virus Total has a copy of your binary.
+- [**135**星][30d] [Py] [m8r0wn/subscraper](https://github.com/m8r0wn/subscraper) External pentest and bug bounty tool to perform subdomain enumeration through various techniques. SubScraper will provide information such as HTTP & DNS lookups to aid in potential next steps.
+- [**135**星][8m] [PS] [logrhythm-labs/pie](https://github.com/logrhythm-labs/pie) Phishing Intelligence Engine
+- [**135**星][3y] [PS] [latkin/1poshword](https://github.com/latkin/1poshword) PowerShell client for 1Password
- [**135**星][1y] [Go] [lanrat/certgraph](https://github.com/lanrat/certgraph) 抓取 SSL 证书并创建有向图, 图中每个域都是一个节点, 域的证书的替代名称作为节点的边
+- [**135**星][3y] [Py] [laginimaineb/android_fde_bruteforce](https://github.com/laginimaineb/android_fde_bruteforce) Scripts to bruteforce Android's Full Disk Encryption off the device
- [**135**星][2y] [Rust] [kpcyrd/rshijack](https://github.com/kpcyrd/rshijack) TCP连接劫持
- [**135**星][3y] [C] [keenerd/rtl-sdr-misc](https://github.com/keenerd/rtl-sdr-misc) A bucket of various work-in-progress rtl-sdr ideas.
-- [**135**星][2y] [Shell] [junbaor/shell_script](https://github.com/junbaor/shell_script) 一键安装 shadowsocks,支持 chacha20-ietf-poly1305 加密方式
+- [**135**星][7m] [Shell] [itskindred/jalesc](https://github.com/itskindred/jalesc) Just Another Linux Enumeration Script: A Bash script for locally enumerating a compromised Linux box
- [**135**星][3y] [C++] [ioactive/i-know-where-your-page-lives](https://github.com/ioactive/i-know-where-your-page-lives) 对的Windows 10内核进行非随机化
-- [**135**星][2m] [C] [dekunukem/kbord](https://github.com/dekunukem/kbord) Scriptable mechanical keypad with OLED display and RGB backlight.
-- [**135**星][20d] [C] [davidbuchanan314/tardis](https://github.com/davidbuchanan314/tardis) Trace And Rewrite Delays In Syscalls: Hooking time-related Linux syscalls to warp a process's perspective of time, using ptrace.
+- [**135**星][11m] [C++] [herumi/msoffice](https://github.com/herumi/msoffice) A tool/lib to encrypt/decrypt Microsoft Office Document
+- [**135**星][7m] [C] [dzzie/scdbg](https://github.com/dzzie/scdbg) note: current build is VS_LIBEMU project. This cross platform gcc build is for Linux users but is no longer updated. modification of the libemu sctest project to add basic debugger capabilities and more output useful for manual RE. The newer version will run under WINE
+- [**135**星][5m] [PHP] [designsecurity/progpilot](https://github.com/designsecurity/progpilot) A static analysis tool for security
+- [**135**星][22d] [C] [davidbuchanan314/tardis](https://github.com/davidbuchanan314/tardis) Trace And Rewrite Delays In Syscalls: Hooking time-related Linux syscalls to warp a process's perspective of time, using ptrace.
- [**135**星][3y] [C] [cryptosphere/sysrandom](https://github.com/cryptosphere/sysrandom) Secure random number generation for Ruby using system RNG facilities
-- [**135**星][4m] [JS] [chabou/hyper-pane](https://github.com/chabou/hyper-pane) Extension for Hyper.app to enhance pane navigation.
-- [**135**星][25d] [Py] [certcc/tapioca](https://github.com/certcc/tapioca) CERT Tapioca for MITM network analysis
+- [**135**星][8d] [Py] [certcc/tapioca](https://github.com/certcc/tapioca) CERT Tapioca for MITM network analysis
- [**135**星][7m] [Py] [cbhue/pyfuscation](https://github.com/cbhue/pyfuscation) Obfuscate powershell scripts by replacing Function names, Variables and Parameters.
-- [**135**星][2y] [Rust] [bryant/argon2rs](https://github.com/bryant/argon2rs) The pure-Rust password hashing library running on Argon2.
-- [**135**星][8m] [Py] [bloodhoundad/bloodhound-tools](https://github.com/bloodhoundad/bloodhound-tools) Miscellaneous tools for BloodHound
-- [**135**星][8d] [Py] [arizvisa/ida-minsc](https://github.com/arizvisa/ida-minsc) a plugin for IDA Pro that assists a user with scripting the IDAPython plugin that is bundled with the disassembler.
- [**135**星][2m] [Py] [arch4ngel/eavesarp](https://github.com/arch4ngel/eavesarp) Analyze ARP requests to identify intercommunicating hosts and stale network address configurations (SNACs)
-- [**135**星][12d] [PowerShell] [antoniococo/conptyshell](https://github.com/antoniococo/conptyshell) ConPtyShell - Fully Interactive Reverse Shell for Windows
- [**135**星][2m] [Go] [0xrawsec/whids](https://github.com/0xrawsec/whids) Open Source Endpoint Detection System for Windows
-- [**134**星][11d] [JS] [snyk/goof](https://github.com/snyk/goof) Super vulnerable todo list application
-- [**134**星][7d] [Rust] [bytecodealliance/wasmparser](https://github.com/bytecodealliance/wasmparser) A simple event-driven library for parsing WebAssembly binary files
-- [**134**星][12d] [PowerShell] [lazywinadmin/monitor-adgroupmembership](https://github.com/lazywinadmin/Monitor-ADGroupMembership) PowerShell script to monitor Active Directory groups and send an email when someone is changing the membership
-- [**134**星][12m] [Shell] [onmyway133/swiftsnippets](https://github.com/onmyway133/SwiftSnippets) A collection of Swift snippets to be used in Xcode
+- [**134**星][6d] [Py] [dhondta/dronesploit](https://github.com/dhondta/dronesploit) Drone pentesting framework console
+- [**134**星][24d] [Go] [getlantern/http-proxy](https://github.com/getlantern/http-proxy) HTTP Proxy with TLS support
+- [**134**星][2d] [Shell] [adroitadorkhan/energizedprotection](https://github.com/AdroitAdorKhan/EnergizedProtection) A merged collection of hosts from reputable sources. #StayEnergized!
- [**134**星][4y] [Ruby] [dradis/dradis-legacy](https://github.com/dradis/dradis-legacy) This is a LEGACY repo head to
+- [**134**星][10m] [C] [yadutaf/tracepkt](https://github.com/yadutaf/tracepkt) 跟踪 Linux 系统 PING 数据包跨网络接口和命名空间的路线,支持 IPv4 及 IPv6
- [**134**星][2m] [Py] [wudimahua/firewall](https://github.com/wudimahua/firewall) 美国国家安全局NSA下属方程式黑客组织(Equation Group)被The Shadow Brokers(影子经纪人)hack出来的并免费分享的源码
+- [**134**星][9d] [C++] [thiagoralves/openplc_v3](https://github.com/thiagoralves/openplc_v3) OpenPLC Runtime version 3
- [**134**星][5m] [tarraschk/richelieu](https://github.com/tarraschk/richelieu) List of the most common French passwords
- [**134**星][1y] [Py] [soledad208/cve-2018-10933](https://github.com/soledad208/cve-2018-10933) CVE-2018-10933 very simple POC
- [**134**星][2y] [C] [silentsignal/sheep-wolf](https://github.com/silentsignal/sheep-wolf) 现实中早已有MD5 碰撞攻击的实例,然而一些安全软件依然已 MD5 标识恶意样本。此工具用于检测安全工具内部是否使用 MD5 标识样本
- [**134**星][3m] [Py] [seomoz/reppy](https://github.com/seomoz/reppy) Modern robots.txt Parser for Python
-- [**134**星][10m] [PowerShell] [securemode/invoke-apex](https://github.com/securemode/invoke-apex) A PowerShell-based toolkit and framework consisting of a collection of techniques and tradecraft for use in red team, post-exploitation, adversary simulation, or other offensive security tasks.
+- [**134**星][10m] [PS] [securemode/invoke-apex](https://github.com/securemode/invoke-apex) A PowerShell-based toolkit and framework consisting of a collection of techniques and tradecraft for use in red team, post-exploitation, adversary simulation, or other offensive security tasks.
+- [**134**星][11m] [Py] [scrapinghub/scrapy-training](https://github.com/scrapinghub/scrapy-training) Scrapy Training companion code
- [**134**星][3m] [Py] [revng/llvmcpy](https://github.com/revng/llvmcpy) Python bindings for LLVM auto-generated from the LLVM-C API
- [**134**星][2y] [Py] [random-robbie/jira-scan](https://github.com/random-robbie/jira-scan) CVE-2017-9506 - SSRF
-- [**134**星][18d] [C++] [pichi-router/pichi](https://github.com/pichi-router/pichi) Flexible Rule-Based Proxy
+- [**134**星][2y] [Py] [pjlantz/hale](https://github.com/pjlantz/hale) Botnet command & control monitor
+- [**134**星][20d] [C++] [pichi-router/pichi](https://github.com/pichi-router/pichi) Flexible Rule-Based Proxy
+- [**134**星][5y] [PHP] [phith0n/xsshtml](https://github.com/phith0n/xsshtml) php富文本过滤类,XSS Filter
- [**134**星][4m] [C++] [phildo/expandpass](https://github.com/phildo/expandpass) Implements a simple nested grammar for expanding passwords
- [**134**星][3y] [Shell] [pasahitz/zirikatu](https://github.com/pasahitz/zirikatu) Fud Payload generator script
-- [**134**星][2y] [Objective-C] [objective-see/sniffmk](https://github.com/objective-see/sniffmk) sniff mouse and keyboard events
-- [**134**星][12d] [Py] [oasis-open/cti-python-stix2](https://github.com/oasis-open/cti-python-stix2) OASIS TC Open Repository: Python APIs for STIX 2
+- [**134**星][5d] [Go] [palantir/policy-bot](https://github.com/palantir/policy-bot) A GitHub App that enforces approval policies on pull requests
+- [**134**星][3d] [C] [openmpt/openmpt](https://github.com/openmpt/openmpt) Official read-only git mirror of the OpenMPT and libopenmpt subversion repository at
+- [**134**星][3d] [Py] [omegak2/pypoe](https://github.com/omegak2/pypoe) Collection of Python Tools for Path of Exile
+- [**134**星][2y] [ObjC] [objective-see/sniffmk](https://github.com/objective-see/sniffmk) sniff mouse and keyboard events
+- [**134**星][1m] [C] [nomorefood/putty-cac](https://github.com/nomorefood/putty-cac) Windows 安全Shell客户端,支持智能卡&证书
- [**134**星][1y] [C++] [nitram2342/degate](https://github.com/nitram2342/degate) Open source software for chip reverse engineering.
+- [**134**星][3d] [Py] [netevert/pockint](https://github.com/netevert/pockint) A portable OSINT Swiss Army Knife for DFIR/OSINT professionals
- [**134**星][5m] [Shell] [nccgroup/bkscan](https://github.com/nccgroup/bkscan) BlueKeep scanner supporting NLA
-- [**134**星][7y] [Ruby] [mubix/vt-notify](https://github.com/mubix/vt-notify) Get email notification when Virus Total has a copy of your binary.
+- [**134**星][6m] [Go] [mylxsw/remote-tail](https://github.com/mylxsw/remote-tail) RemoteTail用于同步监控多台服务器日志文件变更,一句话说就是多主机的远程tail。
- [**134**星][2y] [Py] [mohamednourtn/terminator](https://github.com/mohamednourtn/terminator) Terminator metasploit payload generator
-- [**134**星][3y] [Py] [laginimaineb/android_fde_bruteforce](https://github.com/laginimaineb/android_fde_bruteforce) Scripts to bruteforce Android's Full Disk Encryption off the device
-- [**134**星][8m] [PowerShell] [klionsec/decryption-tool](https://github.com/klionsec/decryption-tool)
+- [**134**星][2y] [mafutian/software](https://github.com/mafutian/software) 破解版工具/软件
+- [**134**星][8m] [PS] [klionsec/decryption-tool](https://github.com/klionsec/decryption-tool)
- [**134**星][3y] [Swift] [kidneyband/potatso-ios](https://github.com/kidneyband/potatso-ios) Potatso is an iOS client that implements Shadowsocks proxy with the leverage of NetworkExtension framework in iOS 9.
- [**134**星][9m] [Py] [jzadeh/aktaion](https://github.com/jzadeh/aktaion) 基于微行为(Micro Behavior)的漏洞检测和自动化GPO策略生成
- [**134**星][3m] [PHP] [jorijn/laravel-security-checker](https://github.com/jorijn/laravel-security-checker) Added Laravel functionality to SensioLabs Security Checker. Adds a command to check for, and optionally emails you, vulnerabilities when they affect you.
-- [**134**星][6m] [Shell] [itskindred/jalesc](https://github.com/itskindred/jalesc) Just Another Linux Enumeration Script: A Bash script for locally enumerating a compromised Linux box
-- [**134**星][11m] [C++] [herumi/msoffice](https://github.com/herumi/msoffice) A tool/lib to encrypt/decrypt Microsoft Office Document
-- [**134**星][2y] [Py] [gradiusx/hevd-python-solutions](https://github.com/gradiusx/hevd-python-solutions) Python solutions for the HackSysTeam Extreme Vulnerable Driver
-- [**134**星][6m] [C] [dzzie/scdbg](https://github.com/dzzie/scdbg) note: current build is VS_LIBEMU project. This cross platform gcc build is for Linux users but is no longer updated. modification of the libemu sctest project to add basic debugger capabilities and more output useful for manual RE. The newer version will run under WINE
+- [**134**星][1y] [Makefile] [jonathansalwan/binary-samples](https://github.com/jonathansalwan/binary-samples) Samples of binary with different formats and architectures. A test suite for your binary analysis tools.
+- [**134**星][3m] [C] [guillem96/argon-nx](https://github.com/guillem96/argon-nx) an immutable payload which is injected to your Nintendo Switch via Fusee Gelee exploit.
+- [**134**星][5y] [C] [goldshtn/windbg-extensions](https://github.com/goldshtn/windbg-extensions) Various extensions for WinDbg
+- [**134**星][1y] [ellerbrock/docker-security-images](https://github.com/ellerbrock/docker-security-images)
- [**134**星][1y] [Py] [dionach/reposcanner](https://github.com/dionach/reposcanner) Python script to scan Git repos for interesting strings
-- [**134**星][5m] [PHP] [designsecurity/progpilot](https://github.com/designsecurity/progpilot) A static analysis tool for security
+- [**134**星][1y] [Swift] [danleechina/mixplaintext](https://github.com/danleechina/mixplaintext) 可对 Xcode 项目工程所有的 objective-c 文件内包含的明文进行加密混淆,提高逆向分析难度。
- [**134**星][4y] [Shell] [commonexploits/port-scan-automation](https://github.com/commonexploits/port-scan-automation) Automate NMAP Scans and Generate Custom Nessus Policies Automatically
-- [**134**星][14d] [C#] [chrisnas/debuggingextensions](https://github.com/chrisnas/debuggingextensions) Host of debugging-related extensions such as post-mortem tools or WinDBG extensions
+- [**134**星][3m] [YARA] [citizenlab/malware-indicators](https://github.com/citizenlab/malware-indicators) Citizen Lab Malware Reports
- [**134**星][3y] [Py] [blacktop/malice](https://github.com/blacktop/malice) VirusTotal Wanna Be
- [**134**星][2y] [Py] [binarydefense/auto-ossec](https://github.com/binarydefense/auto-ossec) 为Linux和Windows自动配置OSSEC代理
- [**134**星][5y] [Py] [ashdnazg/pyreshark](https://github.com/ashdnazg/pyreshark) A Wireshark plugin providing a simple interface for writing dissectors in Python.
+- [**134**星][4m] [PS] [anssi-fr/adtimeline](https://github.com/anssi-fr/adtimeline) PowerShell script creating a timeline of Active Directory changes with replication metadata
+- [**134**星][3y] [akibsayyed/safeseven](https://github.com/akibsayyed/safeseven) SS7 Assessment Tool
- [**134**星][2y] [HTML] [4b5f5f4b/exploits](https://github.com/4b5f5f4b/exploits)
- [**134**星][1m] [0xhelloworld/public](https://github.com/0xhelloworld/public) stuff i'm willing to share with the world lol
-- [**133**星][22d] [Go] [getlantern/http-proxy](https://github.com/getlantern/http-proxy) HTTP Proxy with TLS support
-- [**133**星][7d] [Shell] [adroitadorkhan/energizedprotection](https://github.com/AdroitAdorKhan/EnergizedProtection) A merged collection of hosts from reputable sources. #StayEnergized!
-- [**133**星][11d] [Haskell] [jackmiranda/herms](https://github.com/JackMiranda/herms) a Haskell-based Recipe Manager (yes, food recipes) for the command line
-- [**133**星][10m] [C] [yadutaf/tracepkt](https://github.com/yadutaf/tracepkt) 跟踪 Linux 系统 PING 数据包跨网络接口和命名空间的路线,支持 IPv4 及 IPv6
+- [**133**星][4y] [C++] [qihoo360/artdumper](https://github.com/qihoo360/artdumper) 从oat文件中dump出来dex的工具
+- [**133**星][2m] [Kotlin] [gosecure/dtd-finder](https://github.com/gosecure/dtd-finder) List DTDs and generate XXE payloads using those local DTDs.
+- [**133**星][29d] [Batchfile] [pr0cf5/kernel-exploit-practice](https://github.com/pr0cf5/kernel-exploit-practice) repository for kernel exploit practice
+- [**133**星][2d] [Py] [baidu-security/openrasp-iast](https://github.com/baidu-security/openrasp-iast) IAST 灰盒扫描工具
+- [**133**星][1y] [Py] [zxlie/website-ssl.sh](https://github.com/zxlie/website-ssl.sh) 低门槛跨入Https大门!网站ssl证书自动生成工具(http到https的转变),燥起来吧!
+- [**133**星][1y] [Py] [youngyangyang04/nosqlattack](https://github.com/youngyangyang04/nosqlattack) NoSQLAttack is an open source Python tool to automate exploit MongoDB server IP on Internet and disclose the database data by MongoDB default configuration weaknesses and injection attacks.
- [**133**星][5y] [Java] [wanchouchou/apkprotect](https://github.com/wanchouchou/apkprotect) 通付盾第一代安全加固方案
+- [**133**星][1y] [Py] [threatresponse/margaritashotgun](https://github.com/threatresponse/margaritashotgun) Remote Memory Acquisition Tool
+- [**133**星][7m] [shipcod3/mysapadventures](https://github.com/shipcod3/mysapadventures) A quick methodology on testing / hacking SAP Applications for n00bz and bug bounty hunters
+- [**133**星][2y] [sashs/arm_exploitation](https://github.com/sashs/arm_exploitation) Exploitation on ARM-based Systems (Troopers18)
- [**133**星][2y] [C] [potmdehex/multipath_kfree](https://github.com/potmdehex/multipath_kfree) low effort jb
- [**133**星][9m] [Shell] [nullarray/mida-multitool](https://github.com/nullarray/mida-multitool) Bash script purposed for system enumeration, vulnerability identification and privilege escalation.
-- [**133**星][1m] [C] [nomorefood/putty-cac](https://github.com/nomorefood/putty-cac) Windows 安全Shell客户端,支持智能卡&证书
- [**133**星][2y] [C++] [nezha-dt/nezha](https://github.com/nezha-dt/nezha) nezha:高效的domain-independent differential fuzzer
-- [**133**星][2m] [Py] [nccgroup/thetick](https://github.com/nccgroup/thetick) A simple embedded Linux backdoor.
-- [**133**星][2y] [mafutian/software](https://github.com/mafutian/software) 破解版工具/软件
-- [**133**星][2m] [C] [kubo/funchook](https://github.com/kubo/funchook) Funchook - an API Hook Library
+- [**133**星][3m] [Py] [nccgroup/thetick](https://github.com/nccgroup/thetick) A simple embedded Linux backdoor.
+- [**133**星][2d] [Py] [manifoldai/docker-cookiecutter-data-science](https://github.com/manifoldai/docker-cookiecutter-data-science) A fork of the cookiecutter-data-science leveraging Docker for local development.
+- [**133**星][7m] [C++] [luis-hebendanz/0pack](https://github.com/luis-hebendanz/0pack) A novel technique to hide code from debuggers
- [**133**星][3y] [PHP] [ksanchezcld/hacking_cheat_sheet](https://github.com/ksanchezcld/hacking_cheat_sheet) All my Hacking|Pentesting Notes
+- [**133**星][9m] [PHP] [k4mpr3t/b4tm4n](https://github.com/k4mpr3t/b4tm4n) Php webshell
+- [**133**星][4y] [C] [jvoisin/pangu](https://github.com/jvoisin/pangu) Toolkit to detect/crash/attack GNU debugging-related tools
- [**133**星][4m] [Py] [hannob/optionsbleed](https://github.com/hannob/optionsbleed) a proof of concept code to test for the Optionsbleed bug in Apache httpd (CVE-2017-9798)
-- [**133**星][5y] [C] [goldshtn/windbg-extensions](https://github.com/goldshtn/windbg-extensions) Various extensions for WinDbg
+- [**133**星][23d] [Ruby] [hahwul/xspear](https://github.com/hahwul/xspear) Powerfull XSS Scanning and Parameter analysis tool&gem
- [**133**星][1y] [CSS] [gbrindisi/wordpot](https://github.com/gbrindisi/wordpot) A Wordpress Honeypot
- [**133**星][3y] [C++] [felixwilhelm/xenpwn](https://github.com/felixwilhelm/xenpwn) Xenpwn is a toolkit for memory access tracing using hardware-assisted virtualization
- [**133**星][1y] [Shell] [europa502/sharp](https://github.com/europa502/sharp) An anti-ARP-spoofing application software that use active and passive scanning methods to detect and remove any ARP-spoofer from the network.
-- [**133**星][1y] [ellerbrock/docker-security-images](https://github.com/ellerbrock/docker-security-images)
-- [**133**星][13d] [C] [drahnr/oregano](https://github.com/drahnr/oregano) Schematic capture and circuit simulator
+- [**133**星][15d] [C] [drahnr/oregano](https://github.com/drahnr/oregano) Schematic capture and circuit simulator
- [**133**星][10m] [C#] [davidfowl/multiprotocolaspnetcore](https://github.com/davidfowl/multiprotocolaspnetcore) Multi-protocol Server with ASP.NET Core and Kestrel
-- [**133**星][1y] [PowerShell] [darkoperator/posh-sysmon](https://github.com/darkoperator/posh-sysmon) PowerShell module for creating and managing Sysinternals Sysmon config files.
+- [**133**星][1y] [PS] [darkoperator/posh-sysmon](https://github.com/darkoperator/posh-sysmon) PowerShell module for creating and managing Sysinternals Sysmon config files.
+- [**133**星][1m] [Py] [csirtgadgets/bearded-avenger](https://github.com/csirtgadgets/bearded-avenger) CIF v3 -- the fastest way to consume threat intelligence
- [**133**星][9m] [JS] [crowdstrike/falcon-orchestrator](https://github.com/crowdstrike/falcon-orchestrator) CrowdStrike Falcon Orchestrator provides automated workflow and response capabilities
+- [**133**星][3y] [C++] [chenenyu/androidsecurity](https://github.com/chenenyu/androidsecurity) Android安全实践
- [**133**星][1y] [Py] [carlosgprado/jarvis](https://github.com/carlosgprado/jarvis) 多功能, 带界面,辅助静态分析、漏洞挖掘、动态追踪(Pin)、导入导出等
- [IDA插件](https://github.com/carlosgprado/jarvis/tree/master/IDAPlugin)
- [PinTracer](https://github.com/carlosgprado/jarvis/tree/master/PinTracer)
- [**133**星][4y] [C] [bwall/pemcracker](https://github.com/bwall/pemcracker) Tool to crack encrypted PEM files
-- [**133**星][2m] [Py] [bo0om/parampampam](https://github.com/bo0om/parampampam) brute discover GET and POST parameters.
-- [**133**星][4m] [PowerShell] [anssi-fr/adtimeline](https://github.com/anssi-fr/adtimeline) PowerShell script creating a timeline of Active Directory changes with replication metadata
+- [**133**星][2y] [Py] [bharshbarger/autosint](https://github.com/bharshbarger/autosint) Tool to automate common OSINT tasks
+- [**133**星][11m] [Ruby] [bahaabdelwahed/killshot](https://github.com/bahaabdelwahed/killshot) A Penetration Testing Framework, Information gathering tool & Website Vulnerability Scanner
- [**133**星][8y] [Perl] [anestisb/webacoo](https://github.com/anestisb/webacoo) Web Backdoor Cookie Script-Kit
-- [**133**星][3y] [akibsayyed/safeseven](https://github.com/akibsayyed/safeseven) SS7 Assessment Tool
- [**133**星][3m] [Py] [1n3/exploits](https://github.com/1n3/exploits) Exploits by 1N3 @CrowdShield
-- [**132**星][10d] [C#] [vivami/sauroneye](https://github.com/vivami/sauroneye) Search tool to find specific files containing specific words, i.e. files containing passwords..
-- [**132**星][7d] [Scala] [shiftleftsecurity/joern](https://github.com/shiftleftsecurity/joern) Open-source code analysis platform for C/C++ based on code property graphs
+- [**132**星][2m] [Shell] [starttoaster/docker-traefik](https://github.com/starttoaster/docker-traefik) Script to setup Traefik reverse-proxy in Docker with Compose
+- [**132**星][2y] [Py] [chenjiandongx/soksaccounts](https://github.com/chenjiandongx/soksaccounts) Shadowsocks 账号爬虫
+- [**132**星][2m] [C#] [lithnet/ad-password-protection](https://github.com/lithnet/ad-password-protection) Active Directory password filter featuring breached password checking and custom complexity rules
- [**132**星][4m] [PHP] [zsxsoft/my-ctf-challenges](https://github.com/zsxsoft/my-ctf-challenges) My CTF Challenges
-- [**132**星][2m] [Py] [tuhinshubhra/extanalysis](https://github.com/tuhinshubhra/extanalysis) Browser Extension Analysis Framework - Scan and Analyse Chrome and firefox extensions for vulnerabilities and intels
-- [**132**星][7d] [C++] [thiagoralves/openplc_v3](https://github.com/thiagoralves/openplc_v3) OpenPLC Runtime version 3
+- [**132**星][4y] [JS] [walkdoer/life-time-tracker](https://github.com/walkdoer/Life-Time-Tracker) 个人时间跟踪,可视化个人活动数据,管理个人生活,利用过去来指导未来,基于柳比歇夫的统计方法
+- [**132**星][12m] [Dockerfile] [theonemule/docker-waf](https://github.com/theonemule/docker-waf) An NGINX and ModSecurity based Web Application Firewall for Docker
- [**132**星][1y] [Py] [thehive-project/hippocampe](https://github.com/thehive-project/hippocampe) Threat Feed Aggregation, Made Easy
- [**132**星][4m] [Py] [tensorflow/tensorboard-plugin-example](https://github.com/tensorflow/tensorboard-plugin-example)
- [**132**星][5y] [C] [smealum/ninjhax](https://github.com/smealum/ninjhax) 3ds homebrew-enabling exploit for 4.0-9.2
-- [**132**星][2y] [sashs/arm_exploitation](https://github.com/sashs/arm_exploitation) Exploitation on ARM-based Systems (Troopers18)
+- [**132**星][2y] [sky8964/home](https://github.com/sky8964/home) 【墙外到墙内搬运工】郭文贵 推特党 兲朝浮世绘 小民之心 辛灏年 曹长青 袁红冰 旗袍 袁腾飞 翻墙 科学上网 | 搬运工 自由 民主 法治 宪政 人权 平等 视频 音频 文字版 在线 播放 下载 民运 维权 王岐山 孟建柱 孙力军 傅振华 江棉恒 江泽民 习近平 温家宝 王芳 董卿 杨澜 周小平 吴征 唐柏桥 e租宝 泛亚 共产党 赵家 盜国贼 内幕 黑暗 灾难 专政 上访 游行 暴乱 欺骗 谎言 腐败 通奸 权贵 马航 老兵 活摘 启蒙 墙外 墙内 防火墙 防火长城 功夫网 党文化 民阵 爆料 九评 杨建利 郭宝胜 昭明 反共 法轮功 自媒体 Youtube 油管 推特 Twitter 网盘 传播 关注 五毛 自干五 特务 红二代 红三代 官二代 土共 共匪
+- [**132**星][3d] [Py] [rvn0xsy/cooolis-ms](https://github.com/rvn0xsy/cooolis-ms) Cooolis-ms is a server that supports the Metasploit Framework RPC. It is used to work with the Shellcode and PE loader. To some extent, it bypasses the static killing of anti-virus software, and allows the Cooolis-ms server to communicate with the Metasploit server. Separation.
- [**132**星][10m] [C] [regehr/ub-canaries](https://github.com/regehr/ub-canaries) collection of C/C++ programs that try to get compilers to exploit undefined behavior
+- [**132**星][2m] [Py] [rastrea2r/rastrea2r](https://github.com/rastrea2r/rastrea2r) Collecting & Hunting for IOCs with gusto and style
+- [**132**星][2y] [Py] [pwning/defcon25-public](https://github.com/pwning/defcon25-public) DEFCON 25 某Talk用到的 反汇编器和 IDA 模块
- [**132**星][6m] [CMake] [pothosware/pothossdr](https://github.com/pothosware/pothossdr) Pothos SDR Windows开发环境
-- [**132**星][5y] [PHP] [phith0n/xsshtml](https://github.com/phith0n/xsshtml) php富文本过滤类,XSS Filter
-- [**132**星][24d] [Go] [palantir/policy-bot](https://github.com/palantir/policy-bot) A GitHub App that enforces approval policies on pull requests
-- [**132**星][17d] [Py] [omegak2/pypoe](https://github.com/omegak2/pypoe) Collection of Python Tools for Path of Exile
-- [**132**星][8d] [Lua] [nnposter/nndefaccts](https://github.com/nnposter/nndefaccts) nnposter's alternate fingerprint dataset for Nmap script http-default-accounts
-- [**132**星][20d] [PowerShell] [netspi/powershell](https://github.com/netspi/powershell) NetSPI PowerShell Scripts
+- [**132**星][10d] [Lua] [nnposter/nndefaccts](https://github.com/nnposter/nndefaccts) nnposter's alternate fingerprint dataset for Nmap script http-default-accounts
+- [**132**星][22d] [PS] [netspi/powershell](https://github.com/netspi/powershell) NetSPI PowerShell Scripts
- [**132**星][7m] [Py] [mitrecnd/whodat](https://github.com/mitrecnd/whodat) Pivotable Reverse WhoIs / PDNS Fusion with Registrant Tracking & Alerting plus API for automated queries (JSON/CSV/TXT)
-- [**132**星][8m] [Py] [manifoldai/docker-cookiecutter-data-science](https://github.com/manifoldai/docker-cookiecutter-data-science) A fork of the cookiecutter-data-science leveraging Docker for local development.
- [**132**星][4y] [Py] [korelogicsecurity/mastiff](https://github.com/korelogicsecurity/mastiff) Malware static analysis framework
+- [**132**星][5d] [C] [jnider/delinker](https://github.com/jnider/delinker) Unlinks a binary executable to get back a set of .o object files for further transformation and re-linking.
- [**132**星][1m] [jlopp/physical-bitcoin-attacks](https://github.com/jlopp/physical-bitcoin-attacks) A list of known attacks against Bitcoin / crypto asset owning entities that occurred in meatspace.
+- [**132**星][8m] [Py] [jas502n/cve-2019-2618](https://github.com/jas502n/cve-2019-2618) Weblogic Upload Vuln(Need username password)-CVE-2019-2618
+- [**132**星][2m] [Py] [ivan1ee/struts2-057-exp](https://github.com/ivan1ee/struts2-057-exp) s2-057 最新漏洞分析和EXP脚本
- [**132**星][8m] [C] [hfiref0x/wdextract](https://github.com/hfiref0x/wdextract) Extract Windows Defender database from vdm files and unpack it
-- [**132**星][19d] [Go] [fanpei91/gap-proxy](https://github.com/fanpei91/gap-proxy) gap-proxy 是一个加速网络的 SOCKS5 安全代理工具。
-- [**132**星][5m] [PowerShell] [cyberark/ketshash](https://github.com/cyberark/ketshash) 基于事件查看器日志,检测可疑的特权 NTLM 连接, 尤其是 Pass-The-Hash 攻击
-- [**132**星][1m] [Py] [csirtgadgets/bearded-avenger](https://github.com/csirtgadgets/bearded-avenger) CIF v3 -- the fastest way to consume threat intelligence
+- [**132**星][21d] [Go] [fanpei91/gap-proxy](https://github.com/fanpei91/gap-proxy) gap-proxy 是一个加速网络的 SOCKS5 安全代理工具。
+- [**132**星][6y] [esxgx/easy-ecc](https://github.com/esxgx/easy-ecc) Simple and secure ECC and ECDSA
+- [**132**星][3y] [Batchfile] [eliteandroidapps/whatsapp-key-db-extractor](https://github.com/eliteandroidapps/whatsapp-key-db-extractor) Allows WhatsApp users to extract their cipher key and databases on non-rooted Android devices.
+- [**132**星][2m] [Py] [defense-cyber-crime-center/dc3-mwcp](https://github.com/defense-cyber-crime-center/dc3-mwcp)
+- [**132**星][5m] [PS] [cyberark/ketshash](https://github.com/cyberark/ketshash) 基于事件查看器日志,检测可疑的特权 NTLM 连接, 尤其是 Pass-The-Hash 攻击
- [**132**星][4y] [HTML] [code-scan/brodomain](https://github.com/code-scan/brodomain) 兄弟域名查询
-- [**132**星][3m] [YARA] [citizenlab/malware-indicators](https://github.com/citizenlab/malware-indicators) Citizen Lab Malware Reports
-- [**132**星][1m] [TypeScript] [chame1eon/jnitrace](https://github.com/chame1eon/jnitrace) A Frida based tool that traces usage of the JNI API in Android apps.
-- [**132**星][2y] [Py] [bharshbarger/autosint](https://github.com/bharshbarger/autosint) Tool to automate common OSINT tasks
-- [**132**星][11m] [Ruby] [bahaabdelwahed/killshot](https://github.com/bahaabdelwahed/killshot) A Penetration Testing Framework, Information gathering tool & Website Vulnerability Scanner
-- [**132**星][14d] [C] [arsv/minibase](https://github.com/arsv/minibase) small static userspace tools for Linux
-- [**132**星][1m] [Java] [apache/commons-compress](https://github.com/apache/commons-compress) Mirror of Apache Commons Compress
+- [**132**星][11d] [Shell] [cfn-modules/docs](https://github.com/cfn-modules/docs) Rapid CloudFormation: Modular, production ready, open source.
+- [**132**星][2m] [Py] [batuhaniskr/twitter-intelligence](https://github.com/batuhaniskr/twitter-intelligence) Twitter Intelligence OSINT project performs tracking and analysis of the Twitter
+- [**132**星][16d] [C] [arsv/minibase](https://github.com/arsv/minibase) small static userspace tools for Linux
+- [**132**星][3y] [aqzt/sso](https://github.com/aqzt/sso) 项目主要是汇集整理服务器安全运维规范,包括运维工程师必须遵守的规范、服务器运维中注意事项、故障避免手段等文档,帮助运维工程师避免服务器安全和运维故障,方便运维工程师学习成长。
+- [**132**星][4d] [Java] [apache/commons-compress](https://github.com/apache/commons-compress) Mirror of Apache Commons Compress
- [**132**星][4y] [Py] [andrewmohawk/rfcathelpers](https://github.com/andrewmohawk/rfcathelpers) Helper scripts for RfCat devices
-- [**132**星][2y] [Visual Basic] [alibawazeeer/rat-njrat-0.7d-modded-source-code](https://github.com/alibawazeeer/rat-njrat-0.7d-modded-source-code) NJR
-- [**131**星][1y] [PowerShell] [nsacyber/applocker-guidance](https://github.com/nsacyber/applocker-guidance) Configuration guidance for implementing application whitelisting with AppLocker. #nsacyber
+- [**132**星][2y] [Visual Basic .NET] [alibawazeeer/rat-njrat-0.7d-modded-source-code](https://github.com/alibawazeeer/rat-njrat-0.7d-modded-source-code) NJR
+- [**131**星][1y] [PS] [nsacyber/applocker-guidance](https://github.com/nsacyber/applocker-guidance) Configuration guidance for implementing application whitelisting with AppLocker. #nsacyber
+- [**131**星][3y] [Py] [hanc00l/wifitest](https://github.com/hanc00l/wifitest) 一个简单的wifi弱口令暴破的python脚本,可自动实时破解,不需要使用aircrack-ng抓包
- [**131**星][4y] [okturtles/blockchainid](https://github.com/okturtles/blockchainid) Decentralized alternative to Facebook Login and OpenID
-- [**131**星][6m] [JS] [wzdnzd/shadowsocksx-ng-r](https://github.com/wzdnzd/shadowsocksx-ng-r) Shadowsocks Client for MacOS
+- [**131**星][2y] [Shell] [coldhakca/tor-relay-bootstrap](https://github.com/coldhakca/tor-relay-bootstrap) Script to bootstrap a Debian server to be a set-and-forget Tor relay
- [**131**星][2y] [JS] [oyyd/encryptsocks](https://github.com/oyyd/encryptsocks) Encrypt your socks transmission.
-- [**131**星][2y] [Py] [chenjiandongx/soksaccounts](https://github.com/chenjiandongx/soksaccounts) Shadowsocks 账号爬虫
+- [**131**星][2y] [C#] [m0xiaoxi/ctftools](https://github.com/m0xiaoxi/CTFtools) 本项目主要搜集一些关于信息安全攻防相关的知识与工具,便于个人的渗透工作。
- [**131**星][4y] [Py] [ricterz/websocket-injection](https://github.com/ricterz/websocket-injection) WebSocket 中转注入工具
-- [**131**星][12d] [JS] [dfirkuiper/kuiper](https://github.com/dfirkuiper/kuiper) a digital investigation platform that provides a capabilities for the investigation team and individuals to parse, search, visualize collected evidences (evidences could be collected by fast traige script like Hoarder)
-- [**131**星][1y] [Py] [youngyangyang04/nosqlattack](https://github.com/youngyangyang04/nosqlattack) NoSQLAttack is an open source Python tool to automate exploit MongoDB server IP on Internet and disclose the database data by MongoDB default configuration weaknesses and injection attacks.
+- [**131**星][2y] [C] [airbus-seclab/ramooflax](https://github.com/airbus-seclab/ramooflax) a bare metal (type 1) VMM (hypervisor) with a python remote control API
+- [**131**星][2y] [C++] [vmcall/latebros](https://github.com/vmcall/latebros) x64 usermode rootkit
+- [**131**星][5m] [Py] [zeropwn/spyse.py](https://github.com/zeropwn/spyse.py) Python API wrapper and command-line client for the tools hosted on spyse.com.
+- [**131**星][2m] [TS] [xyfir/ptorx](https://github.com/xyfir/ptorx)
- [**131**星][1y] [wpscanteam/wpscan-v3](https://github.com/wpscanteam/wpscan-v3) THIS REPOSITORY HAS BEEN MOVED TO
- [**131**星][6y] [ActionScript] [wordpress/secure-swfupload](https://github.com/wordpress/secure-swfupload) A fork of the long-abandoned SWFUpload project, maintained by WordPress and others to ensure that a secure version of SWFUpload exists. Report security vulnerabilities to swfupload-security@wordpress.org.
-- [**131**星][24d] [Py] [wangyihang/exploit-framework](https://github.com/wangyihang/exploit-framework)
-- [**131**星][1y] [Py] [threatresponse/margaritashotgun](https://github.com/threatresponse/margaritashotgun) Remote Memory Acquisition Tool
+- [**131**星][26d] [Py] [wangyihang/exploit-framework](https://github.com/wangyihang/exploit-framework)
+- [**131**星][1y] [PHP] [tools2/zend-decoder](https://github.com/tools2/zend-decoder) 还原ZendGuard处理后的php代码
- [**131**星][3y] [HTML] [theori-io/chakra-2016-11](https://github.com/theori-io/chakra-2016-11) Proof-of-Concept exploit for Edge bugs (CVE-2016-7200 & CVE-2016-7201)
-- [**131**星][3y] [PowerShell] [tevora-threat/eternal_blue_powershell](https://github.com/tevora-threat/eternal_blue_powershell) Port of eternal blue exploits to powershell
+- [**131**星][3y] [PS] [tevora-threat/eternal_blue_powershell](https://github.com/tevora-threat/eternal_blue_powershell) Port of eternal blue exploits to powershell
- [**131**星][10m] [Rust] [shnatsel/libdiffuzz](https://github.com/shnatsel/libdiffuzz) Custom memory allocator that helps discover reads from uninitialized memory
-- [**131**星][7m] [shipcod3/mysapadventures](https://github.com/shipcod3/mysapadventures) A quick methodology on testing / hacking SAP Applications for n00bz and bug bounty hunters
- [**131**星][3y] [Py] [schumilo/vusbf](https://github.com/schumilo/vusbf)
- [**131**星][7y] [C] [saurik/mempodroid](https://github.com/saurik/mempodroid)
- [**131**星][3y] [Py] [safebreach-labs/pyekaboo](https://github.com/safebreach-labs/pyekaboo) Proof-of-concept program that is able to to hijack/hook/proxy Python module(s) thanks to $PYTHONPATH variable
- [**131**星][2y] [Ruby] [rapid7/nexpose-client](https://github.com/rapid7/nexpose-client) DEPRECATED: Rapid7 Nexpose API client library written in Ruby
- [**131**星][5m] [JS] [owasp/passfault](https://github.com/owasp/passfault) OWASP Passfault evaluates passwords and enforces password policy in a completely different way.
-- [**131**星][8d] [C] [openmpt/openmpt](https://github.com/openmpt/openmpt) Official read-only git mirror of the OpenMPT and libopenmpt subversion repository at
- [**131**星][1y] [Py] [nopernik/mpdns](https://github.com/nopernik/mpdns) Multi-Purpose DNS Server
+- [**131**星][1y] [Py] [mschwager/0wned](https://github.com/mschwager/0wned) Code execution via Python package installation.
+- [**131**星][2d] [JS] [mozilla/fxa](https://github.com/mozilla/fxa) Monorepo for Firefox Accounts
- [**131**星][5y] [Java] [mogwaisec/mjet](https://github.com/mogwaisec/mjet) Mogwai Java Management Extensions (JMX) Exploitation Toolkit
-- [**131**星][7m] [C++] [luis-hebendanz/0pack](https://github.com/luis-hebendanz/0pack) A novel technique to hide code from debuggers
-- [**131**星][9m] [PHP] [k4mpr3t/b4tm4n](https://github.com/k4mpr3t/b4tm4n) Php webshell
-- [**131**星][4y] [C] [jvoisin/pangu](https://github.com/jvoisin/pangu) Toolkit to detect/crash/attack GNU debugging-related tools
-- [**131**星][15d] [C] [jnider/delinker](https://github.com/jnider/delinker) Unlinks a binary executable to get back a set of .o object files for further transformation and re-linking.
+- [**131**星][2y] [C#] [m0xiaoxi/ctftools](https://github.com/m0xiaoxi/ctftools) 本项目主要搜集一些关于信息安全攻防相关的知识与工具,便于个人的渗透工作。
+- [**131**星][2y] [MATLAB] [lts4/universal](https://github.com/lts4/universal) Universal adversarial perturbations
- [**131**星][2y] [Py] [jlospinoso/memcachedump](https://github.com/jlospinoso/memcachedump) Use your Shodan API Key to dump all the contents of exposed memcached servers.
- [**131**星][2y] [Shell] [jgamblin/quickinstall](https://github.com/jgamblin/quickinstall) A Shell Script To Take Care Of Ubuntu Basics
- [**131**星][3y] [C] [jcadduono/android_external_dirtycow](https://github.com/jcadduono/android_external_dirtycow) CVE-2016-5195 (dirtycow/dirtyc0w) - recowvery fork
-- [**131**星][8m] [Py] [jas502n/cve-2019-2618](https://github.com/jas502n/cve-2019-2618) Weblogic Upload Vuln(Need username password)-CVE-2019-2618
-- [**131**星][2m] [Py] [ivan1ee/struts2-057-exp](https://github.com/ivan1ee/struts2-057-exp) s2-057 最新漏洞分析和EXP脚本
+- [**131**星][9m] [JS] [htfy96/v2ray-config-gen](https://github.com/htfy96/v2ray-config-gen) V2Ray Configuration generator
- [**131**星][4m] [C] [hoshimin/hooklib](https://github.com/hoshimin/hooklib) The functions interception library written on pure C and NativeAPI with UserMode and KernelMode support
+- [**131**星][4y] [C] [hiteshd/android-rootkit](https://github.com/hiteshd/android-rootkit) A rootkit for Android. Based on "Android platform based linux kernel rootkit" from Phrack Issue 68
- [**131**星][6y] [Py] [hiddenillusion/analyzepdf](https://github.com/hiddenillusion/analyzepdf) Tool to help analyze PDF files
+- [**131**星][1m] [Java] [games647/fastlogin](https://github.com/games647/fastlogin) Checks if a minecraft player has a valid paid account. If so, they can skip offline authentication automatically. (premium auto login)
- [**131**星][6y] [Java] [fuzion24/androidziparbitrage](https://github.com/fuzion24/androidziparbitrage) Exploit for Android Zip bugs: 8219321, 9695860, and 9950697
-- [**131**星][6y] [esxgx/easy-ecc](https://github.com/esxgx/easy-ecc) Simple and secure ECC and ECDSA
- [**131**星][7m] [Go] [empijei/wapty](https://github.com/empijei/wapty) Go语言编写的Burp的替代品。(已不再维护)
-- [**131**星][3y] [Batchfile] [eliteandroidapps/whatsapp-key-db-extractor](https://github.com/eliteandroidapps/whatsapp-key-db-extractor) Allows WhatsApp users to extract their cipher key and databases on non-rooted Android devices.
- [**131**星][3m] [PHP] [edsonmedina/php_testability](https://github.com/edsonmedina/php_testability) Analyses and reports testability issues of a php codebase
-- [**131**星][2m] [Py] [defense-cyber-crime-center/dc3-mwcp](https://github.com/defense-cyber-crime-center/dc3-mwcp)
+- [**131**星][7m] [Java] [comsecuris/gdbghidra](https://github.com/comsecuris/gdbghidra) a visual bridge between a GDB session and GHIDRA
+- [**131**星][1y] [Py] [cisco-talos/bass](https://github.com/cisco-talos/bass) 从先前生成的恶意软件集群的样本中自动生成AV签名
- [**131**星][2y] [Py] [chrisrimondi/vulntoes](https://github.com/chrisrimondi/vulntoes) Vulnerability Data in ES
+- [**131**星][2m] [C] [celesteblue-dev/psvita-re-tools](https://github.com/celesteblue-dev/psvita-re-tools) A bundle of RE tools for analyzing and modding PSVita OS
+- [**131**星][2d] [Shell] [binhex/arch-rtorrentvpn](https://github.com/binhex/arch-rtorrentvpn) Docker build script for Arch Linux base with ruTorrent, rTorrent, Flood, Privoxy and OpenVPN
+- [**131**星][6d] [Shell] [beta-tester/rpi-pxe-server](https://github.com/beta-tester/rpi-pxe-server) setup a Raspberry Pi as an PXE-Server
+- [**131**星][1m] [Go] [arnaucube/go-snark](https://github.com/arnaucube/go-snark) zkSNARK library implementation in Go
- [**131**星][2y] [PHP] [anssi-fr/ad-permissions](https://github.com/anssi-fr/ad-permissions) Active Directory permissions (ACL/ACE) auditing tools
-- [**130**星][2y] [C] [airbus-seclab/ramooflax](https://github.com/airbus-seclab/ramooflax) a bare metal (type 1) VMM (hypervisor) with a python remote control API
-- [**130**星][2y] [C++] [vmcall/latebros](https://github.com/vmcall/latebros) x64 usermode rootkit
-- [**130**星][5m] [Py] [zeropwn/spyse.py](https://github.com/zeropwn/spyse.py) Python API wrapper and command-line client for the tools hosted on spyse.com.
+- [**131**星][1y] [C++] [3gstudent/eventlogedit-evtx--evolution](https://github.com/3gstudent/eventlogedit-evtx--evolution) 从Windows XML事件日志(EVTX)文件中删除个别行
+- [**131**星][1y] [Py] [0x09al/dropboxc2c](https://github.com/0x09al/dropboxc2c) DropboxC2C is a post-exploitation agent which uses Dropbox Infrastructure for command and control operations.
- [**130**星][2y] [Py] [zcutlip/bowcaster](https://github.com/zcutlip/bowcaster) Exploit Development Framework
-- [**130**星][1y] [PowerShell] [xor-function/fathomless](https://github.com/xor-function/fathomless) A collection of post-exploitation tools for network red teaming. (Migrating to Fathomless Project)
+- [**130**星][1y] [PS] [xor-function/fathomless](https://github.com/xor-function/fathomless) A collection of post-exploitation tools for network red teaming. (Migrating to Fathomless Project)
- [**130**星][2y] [C#] [xiaoxiaoleo/windows_pentest_tools](https://github.com/xiaoxiaoleo/windows_pentest_tools) My pentest tools used two years ago. Part1
-- [**130**星][1y] [PHP] [tools2/zend-decoder](https://github.com/tools2/zend-decoder) 还原ZendGuard处理后的php代码
-- [**130**星][12m] [Dockerfile] [theonemule/docker-waf](https://github.com/theonemule/docker-waf) An NGINX and ModSecurity based Web Application Firewall for Docker
+- [**130**星][6m] [Py] [wfzsec/awd_attack_framework](https://github.com/wfzsec/awd_attack_framework) awd攻防常用脚本+不死马+crontab+防御方法
+- [**130**星][1y] [Py] [wangyihang/reverse-shell-manager](https://github.com/wangyihang/reverse-shell-manager)
+- [**130**星][4m] [theofficialflow/h-encore-2](https://github.com/theofficialflow/h-encore-2) Fully chained kernel exploit for the PS Vita on firmwares 3.65-3.72
+- [**130**星][9m] [Shell] [tenable/router_badusb](https://github.com/tenable/router_badusb) BadUSB in Routers
+- [**130**星][2m] [Py] [shieldersec/webtech](https://github.com/shieldersec/webtech) Identify technologies used on websites.
- [**130**星][2y] [Py] [ropnop/windows_sshagent_extract](https://github.com/ropnop/windows_sshagent_extract) PoC code to extract private keys from Windows 10's built in ssh-agent service
- [**130**星][9m] [C++] [quarkslab/arybo](https://github.com/quarkslab/arybo) Manipulation, canonicalization and identification of mixed boolean-arithmetic symbolic expressions
-- [**130**星][2y] [Py] [pwning/defcon25-public](https://github.com/pwning/defcon25-public) DEFCON 25 某Talk用到的 反汇编器和 IDA 模块
-- [**130**星][7m] [TypeScript] [phiresky/nmap-log-parse](https://github.com/phiresky/nmap-log-parse) Logs which devices are in your local network and draws graphs
-- [**130**星][1y] [Py] [mschwager/0wned](https://github.com/mschwager/0wned) Code execution via Python package installation.
+- [**130**星][7m] [TS] [phiresky/nmap-log-parse](https://github.com/phiresky/nmap-log-parse) Logs which devices are in your local network and draws graphs
+- [**130**星][23d] [Shell] [oktasecuritylabs/passprotect-js](https://github.com/oktasecuritylabs/passprotect-js) A simple JavaScript library to help you protect your users' passwords
+- [**130**星][3y] [Java] [mwsrc/betterandrorat](https://github.com/mwsrc/betterandrorat) Android Remote Access Trojan
+- [**130**星][9m] [HTML] [minhaskamal/cuteviruscollection](https://github.com/minhaskamal/cuteviruscollection) A Collection of Cute But Deadly Viruses (small-unharmful-annoying-harmless-funny-malware-virus-worm-windows-xp-7-10)
- [**130**星][3m] [Go] [malfunkt/arpfox](https://github.com/malfunkt/arpfox) An arpspoof alternative (written in Go) that injects spoofed ARP packets into a LAN
-- [**130**星][2y] [MATLAB] [lts4/universal](https://github.com/lts4/universal) Universal adversarial perturbations
+- [**130**星][1m] [Py] [log2timeline/dfvfs](https://github.com/log2timeline/dfvfs) Digital Forensics Virtual File System (dfVFS)
- [**130**星][8m] [Py] [landgrey/abuse-ssl-bypass-waf](https://github.com/landgrey/abuse-ssl-bypass-waf) Bypassing WAF by abusing SSL/TLS Ciphers
-- [**130**星][4y] [C] [hiteshd/android-rootkit](https://github.com/hiteshd/android-rootkit) A rootkit for Android. Based on "Android platform based linux kernel rootkit" from Phrack Issue 68
-- [**130**星][21d] [Ruby] [hahwul/xspear](https://github.com/hahwul/xspear) Powerfull XSS Scanning and Parameter analysis tool&gem
+- [**130**星][7m] [Py] [kd8bny/limeaide](https://github.com/kd8bny/limeaide) A python application designed to remotely dump RAM of a Linux client and create a volatility profile for later analysis on your local host.
+- [**130**星][9d] [inquest/yara-rules](https://github.com/inquest/yara-rules) A collection of YARA rules we wish to share with the world, most probably referenced from
+- [**130**星][3y] [Py] [infosec-au/enumxff](https://github.com/infosec-au/enumxff) Enumerating IPs in X-Forwarded-Headers to bypass 403 restrictions
+- [**130**星][2y] [PHP] [incredibleindishell/sqlite-lab](https://github.com/incredibleindishell/sqlite-lab) This code is vulnerable to SQL Injection and having SQLite database. For SQLite database, SQL Injection payloads are different so it is for fun. Just enjoy it \m/
- [**130**星][4y] [Lua] [glennzw/shodan-hq-nse](https://github.com/glennzw/shodan-hq-nse) Shodan HQ nmap plugin - passively scan targets
+- [**130**星][7m] [gaerae/awesome-algorithms-education](https://github.com/gaerae/awesome-algorithms-education) A curated list to learning and practicing about algorithm.
+- [**130**星][2m] [Py] [decoxviii/userrecon-py](https://github.com/decoxviii/userrecon-py) Username recognition on various websites.
- [**130**星][2y] [Py] [comsecuris/ida_strcluster](https://github.com/comsecuris/ida_strcluster) 扩展IDA的字符串导航功能
-- [**130**星][1y] [Py] [cisco-talos/bass](https://github.com/cisco-talos/bass) 从先前生成的恶意软件集群的样本中自动生成AV签名
-- [**130**星][2m] [C] [celesteblue-dev/psvita-re-tools](https://github.com/celesteblue-dev/psvita-re-tools) A bundle of RE tools for analyzing and modding PSVita OS
- [**130**星][1y] [Py] [blacknbunny/mcreator](https://github.com/blacknbunny/mcreator) 反向Shell生成器, 自带AV绕过技术
- [**130**星][2m] [Py] [benjeems/packetstrider](https://github.com/benjeems/packetstrider) A network packet forensics tool for SSH
-- [**130**星][2m] [Py] [batuhaniskr/twitter-intelligence](https://github.com/batuhaniskr/twitter-intelligence) Twitter Intelligence OSINT project performs tracking and analysis of the Twitter
- [**130**星][3m] [Py] [apperian/ios-checkipa](https://github.com/apperian/ios-checkipa) Scans an IPA file and parses its Info.plist and embedded.mobileprovision files. Performs checks of expected key/value relationships and displays the results.
- [**130**星][2y] [Py] [andrewaeva/dga](https://github.com/andrewaeva/dga) The repository that contains the algorithms for generating domain names, dictionaries of malicious domain names. Developed to research the possibility of applying machine learning and neural networks to detect and classify malicious domains.
-- [**130**星][28d] [PHP] [ahref-group/ss-panel-smarty-edition](https://github.com/ahref-group/ss-panel-smarty-edition) Forked from
-- [**130**星][1y] [C++] [3gstudent/eventlogedit-evtx--evolution](https://github.com/3gstudent/eventlogedit-evtx--evolution) 从Windows XML事件日志(EVTX)文件中删除个别行
-- [**130**星][1y] [Py] [0x09al/dropboxc2c](https://github.com/0x09al/dropboxc2c) DropboxC2C is a post-exploitation agent which uses Dropbox Infrastructure for command and control operations.
-- [**129**星][3y] [Py] [hanc00l/wifitest](https://github.com/hanc00l/wifitest) 一个简单的wifi弱口令暴破的python脚本,可自动实时破解,不需要使用aircrack-ng抓包
-- [**129**星][4y] [C] [stefanesser/opensource_taig](https://github.com/stefanesser/opensource_taig) Lets create an open source version of the latest TaiG jailbreak.
+- [**130**星][30d] [PHP] [ahref-group/ss-panel-smarty-edition](https://github.com/ahref-group/ss-panel-smarty-edition) Forked from
+- [**130**星][2m] [Py] [3xpl017/netpwn](https://github.com/3xpl017/netpwn) Tool made to automate tasks of pentesting.
+- [**129**星][2m] [C++] [michalmonday/supremeduck](https://github.com/michalmonday/supremeduck) Wireless "Rubber ducky" controlled by smartphone.
- [**129**星][3y] [Swift] [magic-akari/wannacry](https://github.com/magic-akari/wannacry)
-- [**129**星][2y] [C#] [m0xiaoxi/ctftools](https://github.com/m0xiaoxi/CTFtools) 本项目主要搜集一些关于信息安全攻防相关的知识与工具,便于个人的渗透工作。
-- [**129**星][27d] [Batchfile] [pr0cf5/kernel-exploit-practice](https://github.com/pr0cf5/kernel-exploit-practice) repository for kernel exploit practice
-- [**129**星][1m] [C#] [lithnet/ad-password-protection](https://github.com/lithnet/ad-password-protection) Active Directory password filter featuring breached password checking and custom complexity rules
+- [**129**星][3m] [Py] [kootenpv/access_points](https://github.com/kootenpv/access_points) Scan your WiFi and get access point information and signal quality
- [**129**星][2y] [Py] [nccgroup/susanrtti](https://github.com/nccgroup/SusanRTTI) RTTI解析插件
+- [**129**星][2d] [TS] [wkovacs64/pwned](https://github.com/wkovacs64/pwned) A command-line tool for querying the 'Have I been pwned?' service.
+- [**129**星][10m] [Shell] [weaknetlabs/penetration-testing-grimoire](https://github.com/weaknetlabs/penetration-testing-grimoire) Custom Tools and Notes from my own Penetration Testing Experience
- [**129**星][2y] [C#] [v2ray/v2ray-panel-master](https://github.com/v2ray/v2ray-panel-master) Deprecated
-- [**129**星][3m] [theofficialflow/h-encore-2](https://github.com/theofficialflow/h-encore-2) Fully chained kernel exploit for the PS Vita on firmwares 3.65-3.72
-- [**129**星][8m] [Shell] [tenable/router_badusb](https://github.com/tenable/router_badusb) BadUSB in Routers
-- [**129**星][7d] [Py] [swimlane/pyattck](https://github.com/swimlane/pyattck) A Python Module to interact with the Mitre ATT&CK Framework
+- [**129**星][1y] [C#] [ustayready/casperstager](https://github.com/ustayready/casperstager) PoC for persisting .NET payloads in Windows Notification Facility (WNF) state names using low-level Windows Kernel API calls.
+- [**129**星][7m] [Py] [tarlogicsecurity/chankro](https://github.com/tarlogicsecurity/chankro) Herramienta para evadir disable_functions y open_basedir
+- [**129**星][2d] [Py] [swimlane/pyattck](https://github.com/swimlane/pyattck) A Python Module to interact with the Mitre ATT&CK Framework
- [**129**星][2m] [Py] [svenito/exploit-pattern](https://github.com/svenito/exploit-pattern) generate and search pattern string for exploit development
- [**129**星][6y] [Go] [stripe-ctf/octopus](https://github.com/stripe-ctf/octopus) Many-armed network simulator
- [**129**星][2y] [C] [smeso/mtpwn](https://github.com/smeso/mtpwn) PoC exploit for arbitrary file read/write in locked Samsung Android device via MTP (SVE-2017-10086)
+- [**129**星][6d] [JS] [smartcontractsecurity/swc-registry](https://github.com/smartcontractsecurity/swc-registry) Smart Contract Weakness Classification and Test Cases
+- [**129**星][4y] [C++] [slauc91/anticheat](https://github.com/slauc91/anticheat) RootKit & Cheat Scanner - Windows
- [**129**星][4y] [HTML] [skylined/localnetworkscanner](https://github.com/skylined/localnetworkscanner) PoC Javascript that scans your local network when you open a webpage
-- [**129**星][2y] [sky8964/home](https://github.com/sky8964/home) 【墙外到墙内搬运工】郭文贵 推特党 兲朝浮世绘 小民之心 辛灏年 曹长青 袁红冰 旗袍 袁腾飞 翻墙 科学上网 | 搬运工 自由 民主 法治 宪政 人权 平等 视频 音频 文字版 在线 播放 下载 民运 维权 王岐山 孟建柱 孙力军 傅振华 江棉恒 江泽民 习近平 温家宝 王芳 董卿 杨澜 周小平 吴征 唐柏桥 e租宝 泛亚 共产党 赵家 盜国贼 内幕 黑暗 灾难 专政 上访 游行 暴乱 欺骗 谎言 腐败 通奸 权贵 马航 老兵 活摘 启蒙 墙外 墙内 防火墙 防火长城 功夫网 党文化 民阵 爆料 九评 杨建利 郭宝胜 昭明 反共 法轮功 自媒体 Youtube 油管 推特 Twitter 网盘 传播 关注 五毛 自干五 特务 红二代 红三代 官二代 土共 共匪
- [**129**星][1y] [C] [siguza/cl0ver](https://github.com/siguza/cl0ver) tfp0 for iOS 9.0-9.3.4
- [**129**星][7m] [C++] [schnocker/noeye](https://github.com/schnocker/noeye) An usermode BE Rootkit Bypass
-- [**129**星][2m] [Py] [rastrea2r/rastrea2r](https://github.com/rastrea2r/rastrea2r) Collecting & Hunting for IOCs with gusto and style
+- [**129**星][7m] [JS] [pownjs/pown](https://github.com/pownjs/pown) Pown.js is a security testing an exploitation toolkit built on top of Node.js and NPM.
+- [**129**星][7m] [OCaml] [plum-umd/redexer](https://github.com/plum-umd/redexer) The Redexer binary instrumentation framework for Dalvik bytecode
- [**129**星][2y] [Go] [netxfly/xsec-traffic](https://github.com/netxfly/xsec-traffic) 恶意流量分析程序
-- [**129**星][3y] [Java] [mwsrc/betterandrorat](https://github.com/mwsrc/betterandrorat) Android Remote Access Trojan
-- [**129**星][9m] [HTML] [minhaskamal/cuteviruscollection](https://github.com/minhaskamal/cuteviruscollection) A Collection of Cute But Deadly Viruses (small-unharmful-annoying-harmless-funny-malware-virus-worm-windows-xp-7-10)
-- [**129**星][2y] [C#] [m0xiaoxi/ctftools](https://github.com/m0xiaoxi/ctftools) 本项目主要搜集一些关于信息安全攻防相关的知识与工具,便于个人的渗透工作。
-- [**129**星][1m] [Py] [log2timeline/dfvfs](https://github.com/log2timeline/dfvfs) Digital Forensics Virtual File System (dfVFS)
-- [**129**星][7m] [Py] [kd8bny/limeaide](https://github.com/kd8bny/limeaide) A python application designed to remotely dump RAM of a Linux client and create a volatility profile for later analysis on your local host.
-- [**129**星][3y] [Py] [infosec-au/enumxff](https://github.com/infosec-au/enumxff) Enumerating IPs in X-Forwarded-Headers to bypass 403 restrictions
-- [**129**星][2y] [PHP] [incredibleindishell/sqlite-lab](https://github.com/incredibleindishell/sqlite-lab) This code is vulnerable to SQL Injection and having SQLite database. For SQLite database, SQL Injection payloads are different so it is for fun. Just enjoy it \m/
-- [**129**星][9m] [JS] [htfy96/v2ray-config-gen](https://github.com/htfy96/v2ray-config-gen) V2Ray Configuration generator
+- [**129**星][4m] [HTML] [mxk/win10-secure-baseline-gpo](https://github.com/mxk/win10-secure-baseline-gpo) Windows 10 and Server 2016 Secure Baseline Group Policy
+- [**129**星][7m] [Shell] [munki/installr](https://github.com/munki/installr) A tool designed for use in Recovery boot to do a "fresh" install of macOS and additional packages.
+- [**129**星][2y] [mandatoryprogrammer/russiadnsleak](https://github.com/mandatoryprogrammer/russiadnsleak) Summary and archives of leaked Russian TLD DNS data
+- [**129**星][3y] [PHP] [malwares/exploitkit](https://github.com/malwares/exploitkit) Exploitkit
+- [**129**星][1y] [Shell] [jsitech/relayer](https://github.com/jsitech/relayer) SMB Relay Attack Script
+- [**129**星][4y] [Go] [jordan-wright/elastichoney](https://github.com/jordan-wright/elastichoney) A Simple Elasticsearch Honeypot
+- [**129**星][3m] [Py] [j3ssie/metabigor](https://github.com/j3ssie/metabigor) Command line Search Engines Framework but without API key
+- [**129**星][1m] [Py] [initstring/cloud_enum](https://github.com/initstring/cloud_enum) Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.
- [**129**星][2y] [PHP] [hcamael/ctf_repo](https://github.com/hcamael/ctf_repo)
+- [**129**星][11d] [C++] [hasherezade/iat_patcher](https://github.com/hasherezade/iat_patcher) Persistent IAT hooking application - based on bearparser
- [**129**星][7m] [C++] [gossip-sjtu/tripledoggy](https://github.com/gossip-sjtu/tripledoggy) 基于clang static analyzer的源码漏洞检测插件
+- [**129**星][21d] [gajos112/oscp](https://github.com/gajos112/oscp) Materials for OSCP exam
- [**129**星][3y] [Py] [friedappleteam/frapl](https://github.com/friedappleteam/frapl) 在Frida Client和IDA之间建立连接,将运行时信息直接导入IDA,并可直接在IDA中控制Frida
- [IDA插件](https://github.com/FriedAppleTeam/FRAPL/tree/master/Framework/FridaLink)
- [Frida脚本](https://github.com/FriedAppleTeam/FRAPL/tree/master/Framework/FRAPL)
- [**129**星][4y] [Py] [elceef/bitlocker](https://github.com/elceef/bitlocker) Volatility Framework plugin for extracting BitLocker FVEK (Full Volume Encryption Key)
-- [**129**星][2m] [Py] [decoxviii/userrecon-py](https://github.com/decoxviii/userrecon-py) Username recognition on various websites.
+- [**129**星][1y] [Py] [ekultek/dagon](https://github.com/ekultek/dagon) Dagon:哈希破解和操纵系统,可以爆破多种哈希类型,创建爆破字典,自动哈希算法验证,从 Unicode 到 ASCII 的随机salt 生成等。
+- [**129**星][2y] [Py] [dviros/rat-via-telegram](https://github.com/dviros/rat-via-telegram) 使用Telegram控制已经攻克的Windows主机
- [**129**星][6m] [Py] [cr0hn/enteletaor](https://github.com/cr0hn/enteletaor) Message Queue & Broker Injection tool
-- [**129**星][7m] [Java] [comsecuris/gdbghidra](https://github.com/comsecuris/gdbghidra) a visual bridge between a GDB session and GHIDRA
+- [**129**星][2y] [Py] [comsecuris/gdbida](https://github.com/comsecuris/gdbida) 使用GDB调试时,在IDA中自动跟随当前GDB的调试位置
+ - [IDA插件](https://github.com/comsecuris/gdbida/blob/master/ida_gdb_bridge.py)
+ - [GDB脚本](https://github.com/comsecuris/gdbida/blob/master/gdb_ida_bridge_client.py)
- [**129**星][2y] [HTML] [chybeta/waf-bypass](https://github.com/chybeta/waf-bypass) WAF Bypass Cheatsheet
-- [**129**星][9d] [Shell] [cfn-modules/docs](https://github.com/cfn-modules/docs) Rapid CloudFormation: Modular, production ready, open source.
- [**129**星][2y] [Ruby] [benlaurie/objecthash](https://github.com/benlaurie/objecthash) A way to cryptographically hash objects (in the JSON-ish sense) that works cross-language. And, therefore, cross-encoding.
- [**129**星][4y] [Go] [benjojo/dos_ssh](https://github.com/benjojo/dos_ssh) Use BIOS ram hacks to make a SSH server out of any INT 10 13h app (MS-DOS is one of those)
-- [**129**星][3y] [aqzt/sso](https://github.com/aqzt/sso) 项目主要是汇集整理服务器安全运维规范,包括运维工程师必须遵守的规范、服务器运维中注意事项、故障避免手段等文档,帮助运维工程师避免服务器安全和运维故障,方便运维工程师学习成长。
- [**129**星][6m] [C] [abhishekkr/n00brat](https://github.com/abhishekkr/n00brat) Remote Administration Toolkit (or Trojan) for POSiX (Linux/Unix) system working as a Web Service
-- [**129**星][2m] [Py] [3xpl017/netpwn](https://github.com/3xpl017/netpwn) Tool made to automate tasks of pentesting.
- [**128**星][4y] [Py] [snare/idiot](https://github.com/snare/idiot) Your best is an idiot
-- [**128**星][2m] [Kotlin] [gosecure/dtd-finder](https://github.com/gosecure/dtd-finder) List DTDs and generate XXE payloads using those local DTDs.
-- [**128**星][3m] [Py] [kootenpv/access_points](https://github.com/kootenpv/access_points) Scan your WiFi and get access point information and signal quality
+- [**128**星][4y] [C] [stefanesser/opensource_taig](https://github.com/stefanesser/opensource_taig) Lets create an open source version of the latest TaiG jailbreak.
+- [**128**星][20d] [Rust] [gamozolabs/fzero_fuzzer](https://github.com/gamozolabs/fzero_fuzzer) A fast Rust-based safe and thead-friendly grammar-based fuzz generator
- [**128**星][2m] [C] [jollheef/lpe](https://github.com/jollheef/lpe) collection of verified Linux kernel exploits
+- [**128**星][2y] [Py] [unfetter-discover/unfetter-analytic](https://github.com/unfetter-discover/unfetter-analytic) a framework for collecting events (process creation, network connections, Window Event Logs, etc.) from a client machine (Windows 7) and performing CAR analytics to detect potential adversary activity
+- [**128**星][9m] [Vim script] [logico-ar/typewriter](https://github.com/logico-ar/typewriter) An iA Writer inspired color scheme. It has support for vim, vim airline, vim lightline, tmux and urxvt/xterm.
- [**128**星][2y] [Shell] [newbee119/ssh-scanner](https://github.com/NewBee119/ssh-scanner) ssh password guessing,ssh登录密码破解
+- [**128**星][6d] [Py] [you0708/ida](https://github.com/you0708/ida) 查找加密常量
+ - [IDA主题](https://github.com/you0708/ida/tree/master/theme)
+ - [findcrypt](https://github.com/you0708/ida/tree/master/idapython_tools/findcrypt) IDA FindCrypt/FindCrypt2 插件的Python版本
- [**128**星][2y] [Java] [yandex/burp-molly-scanner](https://github.com/yandex/burp-molly-scanner) Turn your Burp suite into headless active web application vulnerability scanner
-- [**128**星][10m] [Shell] [weaknetlabs/penetration-testing-grimoire](https://github.com/weaknetlabs/penetration-testing-grimoire) Custom Tools and Notes from my own Penetration Testing Experience
-- [**128**星][1y] [Py] [wangyihang/reverse-shell-manager](https://github.com/wangyihang/reverse-shell-manager)
- [**128**星][6y] [Py] [valdikss/billgates-botnet-tracker](https://github.com/valdikss/billgates-botnet-tracker) Some tools to monitor BillGates CnC servers
-- [**128**星][1y] [C#] [ustayready/casperstager](https://github.com/ustayready/casperstager) PoC for persisting .NET payloads in Windows Notification Facility (WNF) state names using low-level Windows Kernel API calls.
-- [**128**星][6m] [Py] [tarlogicsecurity/chankro](https://github.com/tarlogicsecurity/chankro) Herramienta para evadir disable_functions y open_basedir
+- [**128**星][6m] [Py] [tuuunya/webpocket](https://github.com/tuuunya/webpocket) Exploit management framework
- [**128**星][1m] [Py] [stratosphereips/stratospherelinuxips](https://github.com/stratosphereips/stratospherelinuxips) an intrusion prevention system that is based on behavioral detections and machine learning algorithms
-- [**128**星][7m] [OCaml] [plum-umd/redexer](https://github.com/plum-umd/redexer) The Redexer binary instrumentation framework for Dalvik bytecode
-- [**128**星][3m] [Py] [paulsec/det](https://github.com/paulsec/det) (extensible) Data Exfiltration Toolkit (DET)
+- [**128**星][3m] [Py] [shellster/ldapper](https://github.com/shellster/ldapper) AD LDAP Command Line Searching that doesn't suck.
+- [**128**星][1y] [C++] [s3team/vmhunt](https://github.com/s3team/vmhunt) Extraction and Simplification of Virtualized Binary Code
+- [**128**星][4y] [PHP] [ramadhanamizudin/wordpress-scanner](https://github.com/ramadhanamizudin/wordpress-scanner) Wordpress Vulnerability Scanner
+- [**128**星][24d] [PHP] [propaganistas/laravel-fakeid](https://github.com/propaganistas/laravel-fakeid) Automatic model ID obfuscation in routes for Laravel 5
+- [**128**星][4m] [Py] [paulsec/det](https://github.com/paulsec/det) (extensible) Data Exfiltration Toolkit (DET)
- [**128**星][2m] [Java] [openzipkin/brave-webmvc-example](https://github.com/openzipkin/brave-webmvc-example) See how much time Spring services spend on an http request. — Edit
-- [**128**星][7m] [Shell] [munki/installr](https://github.com/munki/installr) A tool designed for use in Recovery boot to do a "fresh" install of macOS and additional packages.
- [**128**星][5y] [Shell] [mrschyte/dockerpot](https://github.com/mrschyte/dockerpot) A docker based honeypot.
-- [**128**星][7d] [JS] [mozilla/fxa](https://github.com/mozilla/fxa) Monorepo for Firefox Accounts
-- [**128**星][2y] [mandatoryprogrammer/russiadnsleak](https://github.com/mandatoryprogrammer/russiadnsleak) Summary and archives of leaked Russian TLD DNS data
-- [**128**星][3y] [PHP] [malwares/exploitkit](https://github.com/malwares/exploitkit) Exploitkit
+- [**128**星][1y] [TeX] [maxking/linux-vulnerabilities-10-years](https://github.com/maxking/linux-vulnerabilities-10-years) My MS thesis on survey of a decade fo Linux Kernel CVEs, their categories and various mitigations that exist.
+- [**128**星][30d] [Py] [m8r0wn/enumdb](https://github.com/m8r0wn/enumdb) MySQL/MSSQL 爆破和后渗透工具, 搜索数据库并提取敏感信息
- [**128**星][1y] [C++] [m0n0ph1/iat-hooking-revisited](https://github.com/m0n0ph1/iat-hooking-revisited) Import address table (IAT) hooking is a well documented technique for intercepting calls to imported functions.
- [**128**星][2y] [Shell] [lavalamp-/ws-docker-community](https://github.com/lavalamp-/ws-docker-community) Web Sight Docker Deployment
-- [**128**星][1y] [Py] [kaniini/antissh](https://github.com/kaniini/antissh) An IRC bot which monitors for compromised embedded devices being used as proxies.
-- [**128**星][17d] [TypeScript] [justinpealing/html-query-plan](https://github.com/justinpealing/html-query-plan) Display SQL Server Execution Plans in HTML
-- [**128**星][1y] [Shell] [jsitech/relayer](https://github.com/jsitech/relayer) SMB Relay Attack Script
-- [**128**星][4y] [Go] [jordan-wright/elastichoney](https://github.com/jordan-wright/elastichoney) A Simple Elasticsearch Honeypot
-- [**128**星][1y] [Makefile] [jonathansalwan/binary-samples](https://github.com/jonathansalwan/binary-samples) Samples of binary with different formats and architectures. A test suite for your binary analysis tools.
-- [**128**星][7d] [inquest/yara-rules](https://github.com/inquest/yara-rules) A collection of YARA rules we wish to share with the world, most probably referenced from
-- [**128**星][9d] [C++] [hasherezade/iat_patcher](https://github.com/hasherezade/iat_patcher) Persistent IAT hooking application - based on bearparser
+- [**128**星][19d] [TS] [justinpealing/html-query-plan](https://github.com/justinpealing/html-query-plan) Display SQL Server Execution Plans in HTML
+- [**128**星][2m] [C++] [itm4n/usodllloader](https://github.com/itm4n/usodllloader) Windows - Weaponizing privileged file writes with the Update Session Orchestrator service
- [**128**星][2y] [C] [gsmk/hexagon](https://github.com/gsmk/hexagon) IDA processor module for the hexagon (QDSP6) processor
- [**128**星][8m] [Ruby] [firefart/wordpresspingbackportscanner](https://github.com/firefart/wordpresspingbackportscanner) WordpressPingbackPortScanner
-- [**128**星][1y] [Py] [ekultek/dagon](https://github.com/ekultek/dagon) Dagon:哈希破解和操纵系统,可以爆破多种哈希类型,创建爆破字典,自动哈希算法验证,从 Unicode 到 ASCII 的随机salt 生成等。
-- [**128**星][2y] [Py] [dviros/rat-via-telegram](https://github.com/dviros/rat-via-telegram) 使用Telegram控制已经攻克的Windows主机
+- [**128**星][1y] [Py] [deepzec/grok-backdoor](https://github.com/deepzec/grok-backdoor) Simple python backdoor with Ngrok tunnel support
- [**128**星][3y] [HTML] [danladi/httppwnly](https://github.com/danladi/httppwnly) "Repeater" style XSS post-exploitation tool for mass browser control. Primarily a PoC to show why HttpOnly flag isn't a complete protection against session hijacking via XSS
-- [**128**星][2y] [Py] [comsecuris/gdbida](https://github.com/comsecuris/gdbida) 使用GDB调试时,在IDA中自动跟随当前GDB的调试位置
- - [IDA插件](https://github.com/comsecuris/gdbida/blob/master/ida_gdb_bridge.py)
- - [GDB脚本](https://github.com/comsecuris/gdbida/blob/master/gdb_ida_bridge_client.py)
- [**128**星][3m] [Py] [claudiugeorgiu/obfuscapk](https://github.com/claudiugeorgiu/obfuscapk) A black-box obfuscation tool for Android apps
-- [**128**星][1m] [Go] [arnaucube/go-snark](https://github.com/arnaucube/go-snark) zkSNARK library implementation in Go
+- [**128**星][12d] [Py] [bullseye0/shodan-eye](https://github.com/bullseye0/shodan-eye) Shodan Eye This tool collects all the information about all devices directly connected to the internet using the specified keywords that you enter. Author: Jolanda de Koff
- [**128**星][1y] [C#] [anthemtotheego/sharpsploitconsole](https://github.com/anthemtotheego/sharpsploitconsole)
- [**128**星][4y] [Py] [andrewhilts/snifflab](https://github.com/andrewhilts/snifflab) Scripts to create your own MITM'ing, packet sniffing WiFi access point
-- [**127**星][2y] [Py] [unfetter-discover/unfetter-analytic](https://github.com/unfetter-discover/unfetter-analytic) a framework for collecting events (process creation, network connections, Window Event Logs, etc.) from a client machine (Windows 7) and performing CAR analytics to detect potential adversary activity
-- [**127**星][9m] [Vim script] [logico-ar/typewriter](https://github.com/logico-ar/typewriter) An iA Writer inspired color scheme. It has support for vim, vim airline, vim lightline, tmux and urxvt/xterm.
-- [**127**星][12d] [PHP] [breach-tw/breach.tw](https://github.com/breach-tw/breach.tw) A service that can track data breaches like "Have I Been Pwned", but it is specific for Taiwan.
-- [**127**星][9d] [TypeScript] [wkovacs64/pwned](https://github.com/wkovacs64/pwned) A command-line tool for querying the 'Have I been pwned?' service.
-- [**127**星][6m] [Py] [wfzsec/awd_attack_framework](https://github.com/wfzsec/awd_attack_framework) awd攻防常用脚本+不死马+crontab+防御方法
+- [**128**星][3y] [C] [adamcaudill/ccsrch](https://github.com/adamcaudill/ccsrch) Cross-platform credit card (PAN) search tool for security assessments
+- [**127**星][10m] [whid-injector/awesome-go-offensive-tools](https://github.com/whid-injector/awesome-go-offensive-tools) List of Awesome Offensive Tools written in GO
+- [**127**星][5d] [PHP] [curtbraz/phishing-api](https://github.com/curtbraz/phishing-api) Comprehensive Web Based Phishing Suite of Tools for Rapid Deployment and Real-Time Alerting!
+- [**127**星][2m] [C#] [fireeye/duedlligence](https://github.com/fireeye/duedlligence) Shellcode runner for all application whitelisting bypasses
+- [**127**星][20d] [Py] [secureauthcorp/pysap](https://github.com/SecureAuthCorp/pysap) pysap is an open source Python library that provides modules for crafting and sending packets using SAP's NI, Diag, Enqueue, Router, Message Server, SNC, IGS and RFC protocols.
+- [**127**星][14d] [PHP] [breach-tw/breach.tw](https://github.com/breach-tw/breach.tw) A service that can track data breaches like "Have I Been Pwned", but it is specific for Taiwan.
+- [**127**星][1y] [HTML] [xhak9x/socialphish](https://github.com/xhak9x/socialphish) The most complete Phishing Tool, with 32 templates +1 customizable
- [**127**星][2m] [Py] [v3aqb/fwlite](https://github.com/v3aqb/fwlite) A anti-censorship HTTP proxy with builtin shadowsocks support.
- [**127**星][2m] [Go] [ullaakut/camerattack](https://github.com/ullaakut/camerattack) An attack tool designed to remotely disable CCTV camera streams (like in spy movies)
-- [**127**星][6m] [Py] [tuuunya/webpocket](https://github.com/tuuunya/webpocket) Exploit management framework
- [**127**星][1y] [Py] [spotify/gcp-audit](https://github.com/spotify/gcp-audit) A tool for auditing security properties of GCP projects.
- [**127**星][3y] [CSS] [shellntel/vcr](https://github.com/shellntel/vcr) Vulnerability Compliance Report Tool used to parse Nessus files into html reports created by SynerComm, Inc.
+- [**127**星][2m] [Rust] [rust-ammonia/ammonia](https://github.com/rust-ammonia/ammonia) Repair and secure untrusted HTML
- [**127**星][2y] [Py] [rootlabs/nwatch](https://github.com/rootlabs/nwatch) a handy tool for host discovery, portscanning and operating system fingerprinting.
-- [**127**星][4y] [PHP] [ramadhanamizudin/wordpress-scanner](https://github.com/ramadhanamizudin/wordpress-scanner) Wordpress Vulnerability Scanner
-- [**127**星][22d] [PHP] [propaganistas/laravel-fakeid](https://github.com/propaganistas/laravel-fakeid) Automatic model ID obfuscation in routes for Laravel 5
-- [**127**星][7m] [JS] [pownjs/pown](https://github.com/pownjs/pown) Pown.js is a security testing an exploitation toolkit built on top of Node.js and NPM.
+- [**127**星][1y] [Py] [qiyeboy/baseproxy](https://github.com/qiyeboy/baseproxy) Asynchronous HTTP/HTTPS proxy that intercepts and modifies messages(异步http/https代理,可拦截修改报文)
+- [**127**星][5m] [Shell] [pssss/security-baseline](https://github.com/pssss/security-baseline) Linux/Windows 安全加固脚本
- [**127**星][5m] [Go] [mushorg/glutton](https://github.com/mushorg/glutton) Generic Low Interaction Honeypot
-- [**127**星][20d] [C] [libyal/libewf](https://github.com/libyal/libewf) Libewf is a library to access the Expert Witness Compression Format (EWF)
+- [**127**星][12m] [C++] [mq1n/nomercy](https://github.com/mq1n/nomercy) Open source anti cheat
+- [**127**星][2y] [Go] [massung/chip-8](https://github.com/massung/chip-8) Assembler and Emulator in Go
+- [**127**星][22d] [C] [libyal/libewf](https://github.com/libyal/libewf) Libewf is a library to access the Expert Witness Compression Format (EWF)
+- [**127**星][9m] [leezj9671/offensiveinterview](https://github.com/leezj9671/offensiveinterview) 翻译国外的
+- [**127**星][7m] [Go] [l3m0n/whatweb](https://github.com/l3m0n/whatweb) 更快速的进行Web应用指纹识别
+- [**127**星][1y] [Py] [kaniini/antissh](https://github.com/kaniini/antissh) An IRC bot which monitors for compromised embedded devices being used as proxies.
- [**127**星][4y] [C] [jndok/stfusip](https://github.com/jndok/stfusip) System Integrity Protection (SIP) bypass for OSX 10.11.1 - 10.11.2 - 10.11.3
-- [**127**星][2m] [C++] [itm4n/usodllloader](https://github.com/itm4n/usodllloader) Windows - Weaponizing privileged file writes with the Update Session Orchestrator service
- [**127**星][6y] [Py] [ikotler/hackersh](https://github.com/ikotler/hackersh) A free and open source command-line shell and scripting language designed especially for security testing
-- [**127**星][2m] [Py] [google/ctfscoreboard](https://github.com/google/ctfscoreboard) Scoreboard for Capture The Flag competitions.
+- [**127**星][2m] [grrrdog/weird_proxies](https://github.com/grrrdog/weird_proxies) Reverse proxies cheatsheet
- [**127**星][2y] [C++] [gitmirar/meltdown-poc](https://github.com/gitmirar/meltdown-poc) A PoC implementation of the meltdown attack described in
- [**127**星][1y] [C] [gamozolabs/falkervisor_grilled_cheese](https://github.com/gamozolabs/falkervisor_grilled_cheese)
- [**127**星][5y] [Py] [fox-it/cryptophp](https://github.com/fox-it/cryptophp) CryptoPHP Indicators of Compromise
- [**127**星][2y] [Py] [fireeye/flare-dbg](https://github.com/fireeye/flare-dbg) to aid malware reverse engineers in rapidly developing debugger scripts.
- [**127**星][4y] [C] [fi01/cve-2015-3636](https://github.com/fi01/cve-2015-3636) PoC code for 32 bit Android OS
+- [**127**星][7m] [enovella/r2frida-wiki](https://github.com/enovella/r2frida-wiki) This repo aims at providing practical examples on how to use r2frida
- [**127**星][3m] [JS] [electrode-io/electrode-csrf-jwt](https://github.com/electrode-io/electrode-csrf-jwt) Stateless Cross-Site Request Forgery (CSRF) protection with JWT
-- [**127**星][1y] [Py] [deepzec/grok-backdoor](https://github.com/deepzec/grok-backdoor) Simple python backdoor with Ngrok tunnel support
-- [**127**星][4y] [Ruby] [darkarnium/secpub](https://github.com/darkarnium/secpub) Published security vulnerabilities and associated information.
+- [**127**星][3y] [C] [davidbuchanan314/pwn-mbr](https://github.com/davidbuchanan314/pwn-mbr) A simple MBR hijack demonstration
+- [**127**星][2d] [Py] [darkarnium/secpub](https://github.com/darkarnium/secpub) Published security vulnerabilities and associated information.
+- [**127**星][3m] [Rust] [d0nutptr/sic](https://github.com/d0nutptr/sic) A tool to perform Sequential Import Chaining
+- [**127**星][2m] [Py] [cyb0r9/ispy](https://github.com/cyb0r9/ispy) ispy V1.0 - Eternalblue(ms17-010)/Bluekeep(CVE-2019-0708) Scanner and exploit ( Metasploit automation )
- [**127**星][6y] [C++] [crowdstrike/crowddetox](https://github.com/crowdstrike/crowddetox) CrowdStrike CrowdDetox Plugin for Hex-Rays,automatically removes junk code and variables from Hex-Rays function decompilation
-- [**127**星][18d] [C] [cisco-talos/file2pcap](https://github.com/cisco-talos/file2pcap) make various types of packet captures containing the content of any file that you specify
+- [**127**星][20d] [C] [cisco-talos/file2pcap](https://github.com/cisco-talos/file2pcap) make various types of packet captures containing the content of any file that you specify
- [**127**星][3y] [Java] [chora10/fuzzdomain](https://github.com/chora10/fuzzdomain) FuzzDomain
+- [**127**星][4y] [C++] [chago/advmp](https://github.com/chago/advmp) 大自然的搬运工-Android虚拟机保护Demo
- [**127**星][4y] [Py] [caijiji/vulscritp](https://github.com/caijiji/vulscritp) 内网渗透脚本
- [**127**星][1y] [Java] [bmax121/budhook](https://github.com/bmax121/budhook) An Android hook framework written like Xposed,based on YAHFA.
+- [**127**星][5m] [Shell] [bet4it/build-an-efficient-pwn-environment](https://github.com/bet4it/build-an-efficient-pwn-environment) How to build an efficient pwn development environment in 2019
+- [**127**星][3d] [Java] [baidu-security/openrasp-testcases](https://github.com/baidu-security/openrasp-testcases) OpenRASP 漏洞测试环境
- [**127**星][4m] [HTML] [b-mueller/smashing-smart-contracts](https://github.com/b-mueller/smashing-smart-contracts) (HITBSecConf 2018)smashing smart contracts
-- [**127**星][3y] [C] [adamcaudill/ccsrch](https://github.com/adamcaudill/ccsrch) Cross-platform credit card (PAN) search tool for security assessments
+- [**127**星][5y] [Py] [0xpoly/centry](https://github.com/0xpoly/centry) Panic button for protection against cold boot attacks
- [**127**星][2y] [Py] [0ang3el/easycsrf](https://github.com/0ang3el/easycsrf)
-- [**126**星][2m] [C#] [fireeye/duedlligence](https://github.com/fireeye/duedlligence) Shellcode runner for all application whitelisting bypasses
+- [**126**星][4y] [Py] [sektioneins/sandbox_toolkit](https://github.com/sektioneins/sandbox_toolkit) Toolkit for binary iOS / OS X sandbox profiles
- [**126**星][4y] [Assembly] [osirislab/shellcode](https://github.com/osirislab/Shellcode) a repository of Shellcode written by students in NYU-Polytechnic's ISIS lab.
-- [**126**星][18d] [Py] [secureauthcorp/pysap](https://github.com/SecureAuthCorp/pysap) pysap is an open source Python library that provides modules for crafting and sending packets using SAP's NI, Diag, Enqueue, Router, Message Server, SNC, IGS and RFC protocols.
-- [**126**星][1y] [HTML] [xhak9x/socialphish](https://github.com/xhak9x/socialphish) The most complete Phishing Tool, with 32 templates +1 customizable
+- [**126**星][2y] [Py] [opensourcesec/forager](https://github.com/opensourcesec/Forager) Multithreaded threat Intelligence gathering built with Python3
+- [**126**星][5y] [CSS] [merces/aleph](https://github.com/merces/aleph) An Open Source Malware Analysis Pipeline System
- [**126**星][1y] [C++] [urshadow/stringobfuscator](https://github.com/urshadow/stringobfuscator) Compile-time string obfuscation (C++14)
- [**126**星][8m] [C] [treehacks/botnet-hackpack](https://github.com/treehacks/botnet-hackpack) Build a basic Command & Control botnet in C
- [**126**星][10m] [C#] [terribledev/hardhat](https://github.com/terribledev/hardhat) Help secure .net core apps with various HTTP headers (such as CSP's)
@@ -7350,1161 +7798,1221 @@ capabilities of the framework.
- [**126**星][10y] [C] [spotify/linux](https://github.com/spotify/linux) Spotify's Linux kernel for Debian-based systems
- [**126**星][2y] [Py] [sparksharly/sharly](https://github.com/sparksharly/sharly) 基于HMM的web异常参数检测
- [**126**星][4m] [JS] [sowdust/searchbook](https://github.com/sowdust/searchbook) A Firefox extension for executing some Graph-like searches against Facebook.
-- [**126**星][4y] [C++] [slauc91/anticheat](https://github.com/slauc91/anticheat) RootKit & Cheat Scanner - Windows
-- [**126**星][1y] [C++] [s3team/vmhunt](https://github.com/s3team/vmhunt) Extraction and Simplification of Virtualized Binary Code
-- [**126**星][2m] [Rust] [rust-ammonia/ammonia](https://github.com/rust-ammonia/ammonia) Repair and secure untrusted HTML
-- [**126**星][1y] [Py] [qiyeboy/baseproxy](https://github.com/qiyeboy/baseproxy) Asynchronous HTTP/HTTPS proxy that intercepts and modifies messages(异步http/https代理,可拦截修改报文)
+- [**126**星][30d] [CSS] [redhatofficial/redhatofficial.github.io](https://github.com/redhatofficial/redhatofficial.github.io) The official Red Hat project page.
- [**126**星][1y] [Py] [pyn3rd/cve-2018-3245](https://github.com/pyn3rd/cve-2018-3245) CVE-2018-3245-PoC
+- [**126**星][2y] [Py] [pybind/cmake_example](https://github.com/pybind/cmake_example) Example pybind11 module built with a CMake-based build system
+- [**126**星][2m] [PS] [nccgroup/accomplice](https://github.com/nccgroup/accomplice) Tools for discovery and abuse of COM hijacks
- [**126**星][3m] [Py] [mvelazc0/oriana](https://github.com/mvelazc0/oriana) Oriana is a threat hunting tool that leverages a subset of Windows events to build relationships, calculate totals and run analytics. The results are presented in a Web layer to help defenders identify outliers and suspicious behavior on corporate environments.
+- [**126**星][7m] [Go] [mritd/idgen](https://github.com/mritd/idgen) 一个使用 golang 编写的大陆身份证生成器
+- [**126**星][4m] [C++] [marcosd4h/memhunter](https://github.com/marcosd4h/memhunter) Live hunting of code injection techniques
+- [**126**星][12d] [Shell] [maravento/blackweb](https://github.com/maravento/blackweb) Domains Blacklist for Squid
- [**126**星][4y] [PHP] [lietdai/doom](https://github.com/lietdai/doom) DOOM是在thorn上实现的分布式任务分发的ip端口漏洞扫描器
-- [**126**星][9m] [leezj9671/offensiveinterview](https://github.com/leezj9671/offensiveinterview) 翻译国外的
-- [**126**星][7m] [Go] [l3m0n/whatweb](https://github.com/l3m0n/whatweb) 更快速的进行Web应用指纹识别
+- [**126**星][3m] [Roff] [kirtar22/litmus_test](https://github.com/kirtar22/litmus_test) Detecting ATT&CK techniques & tactics for Linux
- [**126**星][4y] [Py] [jakecooper/oneplustwobot](https://github.com/jakecooper/oneplustwobot) A series of exploits used to jump the OnePlus reservation queue.
-- [**126**星][3m] [Py] [j3ssie/metabigor](https://github.com/j3ssie/metabigor) Command line Search Engines Framework but without API key
-- [**126**星][1m] [Py] [initstring/cloud_enum](https://github.com/initstring/cloud_enum) Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.
+- [**126**星][2y] [C] [hfiref0x/zeroaccess](https://github.com/hfiref0x/zeroaccess) ZeroAccess v3 toolkit
- [**126**星][2y] [C] [hardenedlinux/offensive_poc](https://github.com/hardenedlinux/offensive_poc) Writing PoC for fun and educate people take security seriously;-)
+- [**126**星][2m] [Py] [google/ctfscoreboard](https://github.com/google/ctfscoreboard) Scoreboard for Capture The Flag competitions.
- [**126**星][7m] [Py] [ex0dus-0x/dedsploit](https://github.com/ex0dus-0x/dedsploit) Network protocol auditing framework
-- [**126**星][16d] [C++] [emsec/hal](https://github.com/emsec/hal) HAL – The Hardware Analyzer
- [**126**星][2m] [PHP] [dragonbe/hibp](https://github.com/dragonbe/hibp) A composer package to verify if a password was previously used in a breach using Have I Been Pwned API.
- [**126**星][2m] [Py] [doyler/securitytools](https://github.com/doyler/securitytools) A single repository for any security tools, scripts, documentation, etc. that I add
-- [**126**星][17d] [C++] [detexploit/detexploit](https://github.com/detexploit/detexploit) OSS Vulnerability Scanner for Windows Platform
+- [**126**星][19d] [C++] [detexploit/detexploit](https://github.com/detexploit/detexploit) OSS Vulnerability Scanner for Windows Platform
- [**126**星][5m] [Py] [davidjacobson/safetext](https://github.com/davidjacobson/safetext) Script to remove homoglyphs and zero-width characters to allow for safe distribution of documents from anonymous sources.
- [**126**星][1y] [JS] [danielstjules/blankshield](https://github.com/danielstjules/blankshield) Prevent reverse tabnabbing phishing attacks caused by _blank
- [**126**星][3y] [C] [ctxis/rdp-replay](https://github.com/ctxis/rdp-replay) Replay RDP traffic from PCAP
- [**126**星][1y] [Py] [cisco-talos/fnc-1](https://github.com/cisco-talos/fnc-1) Fake News Challenge
- [**126**星][6y] [Lua] [bobsayshilol/luajit-decomp](https://github.com/bobsayshilol/luajit-decomp) LuaJIT decompiler
-- [**126**星][5m] [Shell] [bet4it/build-an-efficient-pwn-environment](https://github.com/bet4it/build-an-efficient-pwn-environment) How to build an efficient pwn development environment in 2019
-- [**126**星][8d] [Java] [baidu-security/openrasp-testcases](https://github.com/baidu-security/openrasp-testcases) OpenRASP 漏洞测试环境
-- [**126**星][5y] [Py] [0xpoly/centry](https://github.com/0xpoly/centry) Panic button for protection against cold boot attacks
-- [**125**星][4y] [Py] [sektioneins/sandbox_toolkit](https://github.com/sektioneins/sandbox_toolkit) Toolkit for binary iOS / OS X sandbox profiles
+- [**126**星][6y] [atimorin/scada-tools](https://github.com/atimorin/scada-tools)
+- [**125**星][9d] [Py] [d0g3-lab/h1ve](https://github.com/d0g3-lab/h1ve) 自研CTF平台,同时具备解题、攻防对抗模式
+- [**125**星][2y] [C] [firmianay/life-long-learner](https://github.com/firmianay/life-long-learner) Personal Notes About Everything.
+- [**125**星][17d] [xrkk/awesome-cyber-security](https://github.com/xrkk/awesome-cyber-security) [Moved to:
+- [**125**星][19d] [JS] [maxmeng93/get-free-ss](https://github.com/maxmeng93/get-free-ss) 【停止维护】Node爬虫学习:自动爬取网络上公开的免费 SS\SSR 账号密码,并替换掉软件中旧的账号。
- [**125**星][4y] [JS] [wisdom/regex-dos](https://github.com/Wisdom/RegEx-DoS)
-- [**125**星][2y] [Py] [opensourcesec/forager](https://github.com/opensourcesec/Forager) Multithreaded threat Intelligence gathering built with Python3
-- [**125**星][5y] [CSS] [merces/aleph](https://github.com/merces/aleph) An Open Source Malware Analysis Pipeline System
+- [**125**星][30d] [Py] [yuxiaokui/intranet-penetration](https://github.com/yuxiaokui/intranet-penetration) 内网渗透必备工具。
- [**125**星][2y] [vidar-team/hctf2017](https://github.com/vidar-team/hctf2017)
- [**125**星][9m] [Py] [stamparm/hontel](https://github.com/stamparm/hontel) Telnet Honeypot
-- [**125**星][2y] [Py] [pybind/cmake_example](https://github.com/pybind/cmake_example) Example pybind11 module built with a CMake-based build system
+- [**125**星][12m] [Py] [sabri-zaki/easy_hack](https://github.com/sabri-zaki/easy_hack) Hack the World using Termux
- [**125**星][7y] [pwnwiki/webappdefaultsdb](https://github.com/pwnwiki/webappdefaultsdb) A DB of known Web Application Admin URLS, Username/Password Combos and Exploits
-- [**125**星][1y] [Perl] [philsmd/7z2hashcat](https://github.com/philsmd/7z2hashcat) extract information from password-protected .7z archives (and .sfx files) such that you can crack these "hashes" with hashcat
-- [**125**星][2m] [PowerShell] [nccgroup/accomplice](https://github.com/nccgroup/accomplice) Tools for discovery and abuse of COM hijacks
-- [**125**星][12m] [C++] [mq1n/nomercy](https://github.com/mq1n/nomercy) Open source anti cheat
-- [**125**星][4m] [PowerShell] [mikefrobbins/powershell](https://github.com/mikefrobbins/powershell) PowerShell scripts and functions
-- [**125**星][2y] [Go] [massung/chip-8](https://github.com/massung/chip-8) Assembler and Emulator in Go
-- [**125**星][4m] [C++] [marcosd4h/memhunter](https://github.com/marcosd4h/memhunter) Live hunting of code injection techniques
+- [**125**星][1m] [C] [projecthorus/radiosonde_auto_rx](https://github.com/projecthorus/radiosonde_auto_rx) Automatically Track Radiosonde Launches using RTLSDR
+- [**125**星][20d] [Py] [picoctf/picoctf](https://github.com/picoctf/picoctf) The platform used to run picoCTF. A great framework to host any CTF.
+- [**125**星][2d] [Perl] [philsmd/7z2hashcat](https://github.com/philsmd/7z2hashcat) extract information from password-protected .7z archives (and .sfx files) such that you can crack these "hashes" with hashcat
+- [**125**星][1m] [osm0sis/android-busybox-ndk](https://github.com/osm0sis/android-busybox-ndk) Keeping track of instructions and patches for building busybox with the Android NDK
+- [**125**星][9d] [C++] [omenscan/achoir](https://github.com/omenscan/achoir) Windows Live Artifacts Acquisition Script
+- [**125**星][18d] [Go] [ns3777k/go-shodan](https://github.com/ns3777k/go-shodan) Shodan API client
+- [**125**星][1m] [C++] [monoxgas/flyingafalseflag](https://github.com/monoxgas/flyingafalseflag) Slides and Code for the BHUSA 2019 talk: Flying a False Flag
+- [**125**星][4m] [PS] [mikefrobbins/powershell](https://github.com/mikefrobbins/powershell) PowerShell scripts and functions
- [**125**星][4y] [Py] [leastauthority/ethereum-analyses](https://github.com/leastauthority/ethereum-analyses)
+- [**125**星][1y] [C] [lctf/lctf2018](https://github.com/lctf/lctf2018) Source code, writeups and exps in LCTF2018.
+- [**125**星][9d] [C#] [jitbit/aspnetsaml](https://github.com/jitbit/aspnetsaml) Very simple SAML 2.0 consumer module for ASP.NET/C#
- [**125**星][6m] [Py] [jinmo/ctfs](https://github.com/jinmo/ctfs) ctf exploit codes or writeups
- [**125**星][2y] [Perl] [infoslack/sec-tools](https://github.com/infoslack/sec-tools) Docker images for infosec tools
- [**125**星][3y] [JS] [infosec-au/little-doctor](https://github.com/infosec-au/little-doctor) a JavaScript worm that can exfiltrate files, microphone, webcam, and other data
- [**125**星][3y] [PHP] [ikoniaris/kippo-graph](https://github.com/ikoniaris/kippo-graph) Visualize statistics from a Kippo SSH honeypot
-- [**125**星][2m] [grrrdog/weird_proxies](https://github.com/grrrdog/weird_proxies) Reverse proxies cheatsheet
- [**125**星][2y] [C++] [gpoulios/ropinjector](https://github.com/gpoulios/ropinjector) Patching ROP-encoded shellcodes into PEs
-- [**125**星][7m] [enovella/r2frida-wiki](https://github.com/enovella/r2frida-wiki) This repo aims at providing practical examples on how to use r2frida
+- [**125**星][5m] [Py] [fireeye/flare-qdb](https://github.com/fireeye/flare-qdb) 操纵和修改Windows和Linux的软件行为的调试器,包括命令行工具和Python调试器
+- [**125**星][4d] [JS] [feross/cs253.stanford.edu](https://github.com/feross/cs253.stanford.edu) CS 253 Web Security course at Stanford University
+- [**125**星][3m] [Shell] [exalab/anlinux-resources](https://github.com/exalab/anlinux-resources) Image and Script for LinuxOnAndroid App
- [**125**星][1y] [C] [emptymonkey/mimic](https://github.com/emptymonkey/mimic) Hide processes as a normal user in Linux.
-- [**125**星][2y] [Py] [duoergun0729/3book](https://github.com/duoergun0729/3book) 《Web安全之强化学习与GAN》
- [**125**星][2m] [Py] [deroko/lldbinit](https://github.com/deroko/lldbinit) Similar implementation of .gdbinit from fG
-- [**125**星][7m] [Py] [danigargu/syms2elf](https://github.com/danigargu/syms2elf) 将IDA Pro和Radare2识别的符号(目前仅函数)导出到ELF符号表
-- [**125**星][2m] [Py] [cyb0r9/ispy](https://github.com/cyb0r9/ispy) ispy V1.0 - Eternalblue(ms17-010)/Bluekeep(CVE-2019-0708) Scanner and exploit ( Metasploit automation )
+- [**125**星][7m] [Perl] [davisjam/vuln-regex-detector](https://github.com/davisjam/vuln-regex-detector) Detect vulnerable regexes in your project. REDOS, catastrophic backtracking.
+- [**125**星][8m] [Py] [danigargu/syms2elf](https://github.com/danigargu/syms2elf) 将IDA Pro和Radare2识别的符号(目前仅函数)导出到ELF符号表
- [**125**星][3y] [Py] [codypierce/pyemu](https://github.com/codypierce/pyemu) 在IDA中使用x86模拟器
-- [**125**星][6y] [atimorin/scada-tools](https://github.com/atimorin/scada-tools)
-- [**124**星][2y] [C] [firmianay/life-long-learner](https://github.com/firmianay/life-long-learner) Personal Notes About Everything.
+- [**125**星][8m] [Py] [chg-hou/enmicromsg.db-password-cracker](https://github.com/chg-hou/enmicromsg.db-password-cracker) Crack the password of EnMicroMsg.db with brute-force attack.
+- [**125**星][10m] [Shell] [capt-meelo/lazyrecon](https://github.com/capt-meelo/lazyrecon) An automated approach to performing recon for bug bounty hunting and penetration testing.
+- [**125**星][4y] [Py] [bwall/bamfdetect](https://github.com/bwall/bamfdetect) Identifies and extracts information from bots and other malware
+- [**125**星][2y] [PS] [borntoberoot/powershell_ipv4networkscanner](https://github.com/borntoberoot/powershell_ipv4networkscanner) Powerful asynchronus IPv4 Network Scanner for PowerShell
+- [**124**星][14d] [Py] [aquasecurity/tracee](https://github.com/aquasecurity/tracee) a lightweight, easy to use container and system tracing tool
+- [**124**星][2m] [PHP] [binarymaster/3wifi](https://github.com/binarymaster/3wifi) 3WiFi Wireless Database
+- [**124**星][5d] [JS] [lirantal/lockfile-lint](https://github.com/lirantal/lockfile-lint) Lint an npm or yarn lockfile to analyze and detect security issues
- [**124**星][3y] [JS] [bakerface/wireless-tools](https://github.com/bakerface/wireless-tools) Wireless tools for Node.js
-- [**124**星][28d] [Py] [yuxiaokui/intranet-penetration](https://github.com/yuxiaokui/intranet-penetration) 内网渗透必备工具。
+- [**124**星][8d] [JS] [radareorg/radare2-r2pipe](https://github.com/radareorg/radare2-r2pipe) Access radare2 via pipe from any programming language!
+- [**124**星][5m] [C++] [xorrior/raven](https://github.com/xorrior/raven) CobaltStrike External C2 for Websockets
+- [**124**星][3y] [JS] [vtky/swizzler2](https://github.com/vtky/swizzler2) Swizzler2 - Hacking iOS applications
- [**124**星][5y] [Py] [urule99/jsunpack-n](https://github.com/urule99/jsunpack-n) Automatically exported from code.google.com/p/jsunpack-n
+- [**124**星][1y] [Shell] [thelinuxchoice/facebash](https://github.com/thelinuxchoice/facebash) Facebook Brute Forcer in shellscript using TOR
+- [**124**星][6m] [Py] [thekingofduck/mysqlmonitor](https://github.com/thekingofduck/mysqlmonitor) MySQL实时监控工具(代码审计/黑盒/白盒审计辅助工具)
+- [**124**星][17d] [Py] [t4d/stalkphish](https://github.com/t4d/stalkphish) StalkPhish - The Phishing kits stalker, harvesting phishing kits for investigations.
- [**124**星][7y] [Py] [sysdream/pysqli](https://github.com/sysdream/pysqli) Python SQL injection framework
-- [**124**星][28d] [CSS] [redhatofficial/redhatofficial.github.io](https://github.com/redhatofficial/redhatofficial.github.io) The official Red Hat project page.
+- [**124**星][2m] [HTML] [sundaysec/android-exploits](https://github.com/sundaysec/android-exploits) A collection of android Exploits and Hacks
+- [**124**星][7m] [C++] [saaramar/deterministic_lfh](https://github.com/saaramar/deterministic_lfh) Have fun with the LowFragmentationHeap
+- [**124**星][4y] [Shell] [reider-roque/linpostexp](https://github.com/reider-roque/linpostexp) Linux post exploitation enumeration and exploit checking tools
- [**124**星][3m] [Py] [platomav/biosutilities](https://github.com/platomav/biosutilities) Various BIOS Utilities for Modding/Research
-- [**124**星][18d] [Py] [picoctf/picoctf](https://github.com/picoctf/picoctf) The platform used to run picoCTF. A great framework to host any CTF.
-- [**124**星][8d] [C++] [omenscan/achoir](https://github.com/omenscan/achoir) Windows Live Artifacts Acquisition Script
-- [**124**星][16d] [Go] [ns3777k/go-shodan](https://github.com/ns3777k/go-shodan) Shodan API client
+- [**124**星][2m] [C#] [nyan-x-cat/lime-crypter](https://github.com/nyan-x-cat/lime-crypter) Simple obfuscation tool
- [**124**星][3m] [C] [matrixssl/matrixssl](https://github.com/matrixssl/matrixssl) Lightweight Embedded SSL/TLS Implementation for IoT Devices
-- [**124**星][28d] [Py] [m8r0wn/enumdb](https://github.com/m8r0wn/enumdb) MySQL/MSSQL 爆破和后渗透工具, 搜索数据库并提取敏感信息
-- [**124**星][1y] [C] [lctf/lctf2018](https://github.com/lctf/lctf2018) Source code, writeups and exps in LCTF2018.
-- [**124**星][7d] [C#] [jitbit/aspnetsaml](https://github.com/jitbit/aspnetsaml) Very simple SAML 2.0 consumer module for ASP.NET/C#
+- [**124**星][1y] [Py] [leezj9671/socialdb_vue_flask](https://github.com/leezj9671/socialdb_vue_flask) 一个小型的较为简陋的社工库查询系统,使用Vue.js+Flask+MongoDB.可用52g, 本人不提供任何社工库资源. A tiny social engineering database system, including backend and frontend.
+- [**124**星][4m] [Py] [lakiw/pcfg_cracker](https://github.com/lakiw/pcfg_cracker) Probabilistic Context Free Grammar (PCFG) password guess generator
- [**124**星][4m] [Py] [igio90/uddbg](https://github.com/igio90/uddbg) A gdb like debugger that provide a runtime env to unicorn emulator and additionals features!
- [**124**星][3m] [Py] [highmeh/pentest_scripts](https://github.com/highmeh/pentest_scripts) penetration testing scripts
-- [**124**星][2y] [C] [hfiref0x/zeroaccess](https://github.com/hfiref0x/zeroaccess) ZeroAccess v3 toolkit
-- [**124**星][7d] [C++] [grammatech/gtirb](https://github.com/grammatech/gtirb) Intermediate Representation for Binary analysis and transformation
-- [**124**星][5m] [Py] [fireeye/flare-qdb](https://github.com/fireeye/flare-qdb) 操纵和修改Windows和Linux的软件行为的调试器,包括命令行工具和Python调试器
+- [**124**星][1m] [C++] [grammatech/gtirb](https://github.com/grammatech/gtirb) Intermediate Representation for Binary analysis and transformation
- [**124**星][1y] [Shell] [dtag-dev-sec/t-pot-autoinstall](https://github.com/dtag-dev-sec/t-pot-autoinstall) Deprecated - Please use T-Pot Universal Installer
- [**124**星][4y] [Py] [davidoren/cuckoosploit](https://github.com/davidoren/cuckoosploit) An environment for comprehensive, automated analysis of web-based exploits, based on Cuckoo sandbox.
-- [**124**星][3y] [C] [davidbuchanan314/pwn-mbr](https://github.com/davidbuchanan314/pwn-mbr) A simple MBR hijack demonstration
-- [**124**星][3m] [Rust] [d0nutptr/sic](https://github.com/d0nutptr/sic) A tool to perform Sequential Import Chaining
- [**124**星][1y] [C#] [codecracker-tools/megadumper](https://github.com/codecracker-tools/megadumper) Dump native and .NET assemblies
-- [**124**星][8m] [Py] [chg-hou/enmicromsg.db-password-cracker](https://github.com/chg-hou/enmicromsg.db-password-cracker) Crack the password of EnMicroMsg.db with brute-force attack.
+- [**124**星][4d] [chef-koch/online-privacy-test-resource-list](https://github.com/chef-koch/online-privacy-test-resource-list) Privacy Online Test and Resource Compendium (POTARC) 🕵🏻
- [**124**星][1y] [Py] [c0mmand3ropsec/cve-2017-10271](https://github.com/c0mmand3ropsec/cve-2017-10271) WebLogic Exploit
-- [**124**星][4y] [Py] [bwall/bamfdetect](https://github.com/bwall/bamfdetect) Identifies and extracts information from bots and other malware
-- [**124**星][10d] [Py] [bullseye0/shodan-eye](https://github.com/bullseye0/shodan-eye) Shodan Eye This tool collects all the information about all devices directly connected to the internet using the specified keywords that you enter. Author: Jolanda de Koff
- [**124**星][2y] [Java] [brompwnie/uitkyk](https://github.com/brompwnie/uitkyk) Android Frida库, 用于分析App查找恶意行为
- [**124**星][11m] [Shell] [antonlindstrom/passpwn](https://github.com/antonlindstrom/passpwn) 检查Unix密码管理器(pass)中的密码是否发生过泄露
- [**124**星][3y] [JS] [antojoseph/diff-gui](https://github.com/antojoseph/diff-gui) GUI for Frida -Scripts
- [**124**星][2y] [Py] [alonemonkey/antiantidebug](https://github.com/alonemonkey/antiantidebug) tweak、 lldb python for anti anti debug
- [**124**星][2y] [HTML] [alienwithin/owasp-mth3l3m3nt-framework](https://github.com/alienwithin/owasp-mth3l3m3nt-framework) 辅助渗透测试与漏洞利用
-- [**123**星][18d] [Rust] [gamozolabs/fzero_fuzzer](https://github.com/gamozolabs/fzero_fuzzer) A fast Rust-based safe and thead-friendly grammar-based fuzz generator
-- [**123**星][11d] [JS] [lirantal/lockfile-lint](https://github.com/lirantal/lockfile-lint) Lint an npm or yarn lockfile to analyze and detect security issues
-- [**123**星][29d] [JS] [radareorg/radare2-r2pipe](https://github.com/radareorg/radare2-r2pipe) Access radare2 via pipe from any programming language!
-- [**123**星][8d] [Julia] [alertot/detectem](https://github.com/alertot/detectem) detect software and its version on websites.
+- [**124**星][23d] [C++] [adamyaxley/obfuscate](https://github.com/adamyaxley/obfuscate) Guaranteed compile-time string literal obfuscation header-only library for C++14
+- [**123**星][4d] [Julia] [alertot/detectem](https://github.com/alertot/detectem) detect software and its version on websites.
- [**123**星][2m] [Go] [yahoo/yfuzz](https://github.com/yahoo/yfuzz) 利用 Kubernetes 实现分布式 fuzzing
- [**123**星][11m] [C] [wenzel/r2vmi](https://github.com/wenzel/r2vmi) Hypervisor-Level Debugger based on Radare2 / LibVMI, using VMI IO and debug plugins
-- [**123**星][3y] [JS] [vtky/swizzler2](https://github.com/vtky/swizzler2) Swizzler2 - Hacking iOS applications
+- [**123**星][5m] [Py] [veerendra2/wifi-deauth-attack](https://github.com/veerendra2/wifi-deauth-attack) An automated script for deauthentication attack
- [**123**星][4y] [Py] [ucsb-seclab/leakless](https://github.com/ucsb-seclab/leakless) Function redirection via ELF tricks.
+- [**123**星][7y] [steamedfish/gfwiplist](https://github.com/steamedfish/gfwiplist) 可用于翻墙路由表的墙外IP列表
- [**123**星][3m] [Go] [stalkr/dns-reverse-proxy](https://github.com/stalkr/dns-reverse-proxy) DNS Reverse Proxy
+- [**123**星][4m] [PHP] [spidermate/b-xssrf](https://github.com/spidermate/b-xssrf) Toolkit to detect and keep track on Blind XSS, XXE & SSRF
+- [**123**星][4m] [Py] [skyplabs/probequest](https://github.com/skyplabs/probequest) Toolkit for Playing with Wi-Fi Probe Requests
- [**123**星][3m] [secure-data-analysis-data-sharing/data-analysis](https://github.com/secure-data-analysis-data-sharing/data-analysis) 资料分享
- [**123**星][3y] [JS] [salesforce/secure-filters](https://github.com/salesforce/secure-filters) Anti-XSS Security Filters for EJS and More
- [**123**星][2y] [Py] [riverloopsec/tumblerf](https://github.com/riverloopsec/tumblerf) a unified fuzzing framework for low-level RF and HW protocol/PHY/MAC analysis
- [**123**星][5y] [Py] [ring04h/dirfuzz](https://github.com/ring04h/dirfuzz) 多线程网站目录穷举扫描
-- [**123**星][4y] [Shell] [reider-roque/linpostexp](https://github.com/reider-roque/linpostexp) Linux post exploitation enumeration and exploit checking tools
- [**123**星][6m] [PHP] [radenvodka/svscanner](https://github.com/radenvodka/svscanner) SVScanner - Scanner Vulnerability And MaSsive Exploit.
-- [**123**星][1m] [Py] [radare/radare2ida](https://github.com/radare/radare2ida) Tools, documentation and scripts to move projects from IDA to R2 and viceversa
-- [**123**星][1m] [C] [projecthorus/radiosonde_auto_rx](https://github.com/projecthorus/radiosonde_auto_rx) Automatically Track Radiosonde Launches using RTLSDR
+- [**123**星][2m] [Py] [radare/radare2ida](https://github.com/radare/radare2ida) Tools, documentation and scripts to move projects from IDA to R2 and viceversa
+- [**123**星][26d] [PS] [dsccommunity/xwebadministration](https://github.com/dsccommunity/xWebAdministration) This module contains DSC resources for deployment and configuration of web servers and components around those.
- [**123**星][4y] [Py] [pentestmonkey/gateway-finder](https://github.com/pentestmonkey/gateway-finder) Tool to identify routers on the local LAN and paths to the Internet
- [**123**星][1y] [Gherkin] [owasp-cloud-security/owasp-cloud-security](https://github.com/owasp-cloud-security/owasp-cloud-security) OWASP Cloud Security - Enabling conversations through threat and control stories
-- [**123**星][1m] [osm0sis/android-busybox-ndk](https://github.com/osm0sis/android-busybox-ndk) Keeping track of instructions and patches for building busybox with the Android NDK
- [**123**星][3y] [JS] [openmarshall/shortcutss](https://github.com/openmarshall/shortcutss) This is a Mac Shadowsocks client equipped with global shortcuts to switch proxy mode !
-- [**123**星][3y] [PowerShell] [onelogicalmyth/automated-ad-setup](https://github.com/onelogicalmyth/automated-ad-setup) A PowerShell script that aims to have a fully configured domain built in under 10 minutes, but also apply security configuration and hardening.
+- [**123**星][3y] [PS] [onelogicalmyth/automated-ad-setup](https://github.com/onelogicalmyth/automated-ad-setup) A PowerShell script that aims to have a fully configured domain built in under 10 minutes, but also apply security configuration and hardening.
+- [**123**星][7m] [PS] [nyxgeek/o365recon](https://github.com/nyxgeek/o365recon) o365recon:PowerShell脚本,使用单个 cred 来转储完整的 o365 用户列表,组列表和组成员
- [**123**星][11m] [Py] [niklasb/3dpwn](https://github.com/niklasb/3dpwn) VirtualBox 3D exploits & PoCs
- [**123**星][2y] [Shell] [niclet/xiaomi_hack](https://github.com/niclet/xiaomi_hack) Xiaomi common hack for cameras (Mijia 360)
+- [**123**星][2m] [C++] [nettitude/simplepeloader](https://github.com/nettitude/simplepeloader) In-Memory PE Loader
- [**123**星][2y] [Shell] [nccgroup/lazydroid](https://github.com/nccgroup/lazydroid) bash script to facilitate some aspects of an Android application assessment
-- [**123**星][1m] [C++] [monoxgas/flyingafalseflag](https://github.com/monoxgas/flyingafalseflag) Slides and Code for the BHUSA 2019 talk: Flying a False Flag
- [**123**星][4y] [Py] [moloch--/csp-bypass](https://github.com/moloch--/csp-bypass) A Burp Plugin for Detecting Weaknesses in Content Security Policies
-- [**123**星][1y] [TeX] [maxking/linux-vulnerabilities-10-years](https://github.com/maxking/linux-vulnerabilities-10-years) My MS thesis on survey of a decade fo Linux Kernel CVEs, their categories and various mitigations that exist.
-- [**123**星][10d] [Shell] [maravento/blackweb](https://github.com/maravento/blackweb) Domains Blacklist for Squid
+- [**123**星][3y] [malwares/dangerouszone](https://github.com/malwares/dangerouszone) Dangerous Malwares
+- [**123**星][11m] [Pascal] [mahdisafsafi/debugengine](https://github.com/mahdisafsafi/debugengine) Delphi debug framework
- [**123**星][7y] [Ruby] [livingsocial/keyspace](https://github.com/livingsocial/keyspace) Capability-based secure key management and credential storage
-- [**123**星][4m] [Py] [lakiw/pcfg_cracker](https://github.com/lakiw/pcfg_cracker) Probabilistic Context Free Grammar (PCFG) password guess generator
+- [**123**星][4m] [k0rz3n/googlehacking-page](https://github.com/k0rz3n/googlehacking-page) This is a summary of my study and use of Google hacking. I hope I can share it with you. If you like, please give me a star or fork it, thank you.
- [**123**星][1y] [JS] [jonaslejon/tor-fingerprint](https://github.com/jonaslejon/tor-fingerprint) Tor Browser and Tails version fingerprint PoC
- [**123**星][5m] [HTML] [jlleitschuh/zoom_vulnerability_poc](https://github.com/jlleitschuh/zoom_vulnerability_poc)
+- [**123**星][7m] [Py] [jerrychan807/wspih](https://github.com/jerrychan807/wspih) Website Sensitive Personal Information Hunter 网站个人敏感信息文件扫描器
- [**123**星][5y] [jacobsoo/androidslides](https://github.com/jacobsoo/androidslides)
+- [**123**星][1y] [PS] [itm4n/ikeext-privesc](https://github.com/itm4n/ikeext-privesc) Windows IKEEXT DLL Hijacking Exploit Tool
- [**123**星][3y] [Py] [inguma/bokken](https://github.com/inguma/bokken) Dear user: This is a git mirror of our Mercurial repository in
+- [**123**星][1y] [PHP] [gwen001/s3-buckets-finder](https://github.com/gwen001/s3-buckets-finder) Find aws s3 buckets and extract datas.
- [**123**星][1m] [Java] [graylog2/graylog-plugin-threatintel](https://github.com/graylog2/graylog-plugin-threatintel) Graylog Processing Pipeline functions to enrich log messages with IoC information from threat intelligence databases
+- [**123**星][1m] [Go] [fuzzitdev/fuzzit](https://github.com/fuzzitdev/fuzzit) CLI to integrate continuous fuzzing with Fuzzit
- [**123**星][8y] [evilcos/python-webshell](https://github.com/evilcos/python-webshell) webshell writen in python
+- [**123**星][4y] [Py] [equalitie/learn2ban](https://github.com/equalitie/learn2ban) Open source machine learning DDOS detection tool
- [**123**星][6y] [PHP] [disk0nn3ct/cookiecatcher](https://github.com/disk0nn3ct/cookiecatcher) assist in the exploitation of XSS (Cross Site Scripting) vulnerabilities within web applications to steal user session IDs
-- [**123**星][7m] [Perl] [davisjam/vuln-regex-detector](https://github.com/davisjam/vuln-regex-detector) Detect vulnerable regexes in your project. REDOS, catastrophic backtracking.
+- [**123**星][2y] [C] [coolervoid/mosca](https://github.com/coolervoid/mosca) Manual search tool to find bugs like a grep unix command - Beta
- [**123**星][5y] [Shell] [chrisfosterelli/dockerrootplease](https://github.com/chrisfosterelli/dockerrootplease) Gives you root on the hostOS, if you're a member of the 'docker' group.
-- [**123**星][8d] [chef-koch/online-privacy-test-resource-list](https://github.com/chef-koch/online-privacy-test-resource-list) Privacy Online Test and Resource Compendium (POTARC) 🕵🏻
- [**123**星][3y] [C++] [cheetahsec/avmdbg](https://github.com/cheetahsec/avmdbg) a lightweight debugger for android virtual machine.
-- [**123**星][10m] [Shell] [capt-meelo/lazyrecon](https://github.com/capt-meelo/lazyrecon) An automated approach to performing recon for bug bounty hunting and penetration testing.
-- [**123**星][2y] [PowerShell] [borntoberoot/powershell_ipv4networkscanner](https://github.com/borntoberoot/powershell_ipv4networkscanner) Powerful asynchronus IPv4 Network Scanner for PowerShell
+- [**123**星][2y] [Py] [blazeinfosec/pcrappyfuzzer](https://github.com/blazeinfosec/pcrappyfuzzer) pcrappyfuzzer:Scapy+ radamsa 的简单组合,从 pcap 文件中提取数据,执行快速 Fuzz
- [**123**星][8m] [C++] [binspector/binspector](https://github.com/binspector/binspector) A binary format analysis tool
-- [**123**星][21d] [C++] [adamyaxley/obfuscate](https://github.com/adamyaxley/obfuscate) Guaranteed compile-time string literal obfuscation header-only library for C++14
+- [**123**星][19d] [JS] [0vercl0k/windbg-scripts](https://github.com/0vercl0k/windbg-scripts) A bunch of JavaScript extensions for WinDbg.
- [**122**星][4y] [C] [trustedsec/pivoter](https://github.com/trustedsec/pivoter) Pivoter is a proxy tool for pentesters to have easier lateral movement.
+- [**122**星][11m] [Shell] [wulabing/ssr-manyuser_glzjin_shell](https://github.com/wulabing/ssr-manyuser_glzjin_shell) sspanel v3 魔改版 后端一键安装配置管理脚本
+- [**122**星][8m] [C++] [hmbsbige/getcndomainsandipv4](https://github.com/hmbsbige/getcndomainsandipv4) 获取国内 IP 和域名,生成路由表和 PAC 文件
+- [**122**星][1m] [Py] [fuzzitdev/pythonfuzz](https://github.com/fuzzitdev/pythonfuzz) coverage guided fuzz testing for python
- [**122**星][3y] [C] [nsacyber/control-flow-integrity](https://github.com/nsacyber/Control-Flow-Integrity) A proposed hardware-based method for stopping known memory corruption exploitation techniques. #nsacyber
- [**122**星][2m] [Ruby] [chef/knife-openstack](https://github.com/chef/knife-openstack) Chef knife plug-in for OpenStack
- [**122**星][4y] [C++] [lifting-bits/codereason](https://github.com/lifting-bits/codereason) Semantic Binary Code Analysis Framework
-- [**122**星][2m] [Py] [you0708/ida](https://github.com/you0708/ida) 查找加密常量
- - [IDA主题](https://github.com/you0708/ida/tree/master/theme)
- - [findcrypt](https://github.com/you0708/ida/tree/master/idapython_tools/findcrypt) IDA FindCrypt/FindCrypt2 插件的Python版本
-- [**122**星][5m] [C++] [xorrior/raven](https://github.com/xorrior/raven) CobaltStrike External C2 for Websockets
+- [**122**星][2y] [Java] [zjlywjh001/phrackctf-platform-personal](https://github.com/zjlywjh001/phrackctf-platform-personal) CTF platfrom developed by Jarvis from Phrack Team. 做一个功能最全的CTF平台。
+- [**122**星][2y] [C#] [zerosum0x0/runshellcode](https://github.com/zerosum0x0/runshellcode) .NET GUI program that runs shellcode
+- [**122**星][5y] [C++] [zachriggle/ida-splode](https://github.com/zachriggle/ida-splode) 使用Pin收集动态运行数据, 导入到IDA中查看
+ - [IDA插件](https://github.com/zachriggle/ida-splode/tree/master/py)
+ - [PinTool](https://github.com/zachriggle/ida-splode/tree/master/src)
- [**122**星][1y] [C#] [xenocoderce/noisette-obfuscator](https://github.com/xenocoderce/noisette-obfuscator) An Obfuscator for .NET assembly
- [**122**星][2y] [Py] [wossl33/wossl](https://github.com/wossl33/wossl) OpenSSL对称算法、哈希校验、非对称算法、证书管理、SSL安全
-- [**122**星][5m] [Py] [veerendra2/wifi-deauth-attack](https://github.com/veerendra2/wifi-deauth-attack) An automated script for deauthentication attack
- [**122**星][6y] [tombkeeper/shellcode_template_in_c](https://github.com/tombkeeper/shellcode_template_in_c)
-- [**122**星][2m] [HTML] [sundaysec/android-exploits](https://github.com/sundaysec/android-exploits) A collection of android Exploits and Hacks
-- [**122**星][7y] [steamedfish/gfwiplist](https://github.com/steamedfish/gfwiplist) 可用于翻墙路由表的墙外IP列表
-- [**122**星][4m] [PHP] [spidermate/b-xssrf](https://github.com/spidermate/b-xssrf) Toolkit to detect and keep track on Blind XSS, XXE & SSRF
-- [**122**星][3y] [PowerShell] [silverhack/voyeur](https://github.com/silverhack/voyeur) VOYEUR's main purpose is to generate a fast (and pretty) Active Directory report. The tool is developed entirely in PowerShell (a powerful scripting language) without dependencies (just .Net Framework 3.5 and Ofiice Excel if you want an useful and pretty report). The generated report is a perfect starting point for well-established forensic, inc…
-- [**122**星][2m] [Py] [shieldersec/webtech](https://github.com/shieldersec/webtech) Identify technologies used on websites.
-- [**122**星][11m] [Py] [sabri-zaki/easy_hack](https://github.com/sabri-zaki/easy_hack) Hack the World using Termux
-- [**122**星][7m] [C++] [saaramar/deterministic_lfh](https://github.com/saaramar/deterministic_lfh) Have fun with the LowFragmentationHeap
+- [**122**星][3y] [PS] [silverhack/voyeur](https://github.com/silverhack/voyeur) VOYEUR's main purpose is to generate a fast (and pretty) Active Directory report. The tool is developed entirely in PowerShell (a powerful scripting language) without dependencies (just .Net Framework 3.5 and Ofiice Excel if you want an useful and pretty report). The generated report is a perfect starting point for well-established forensic, inc…
- [**122**星][4y] [Py] [raffaele-forte/climber](https://github.com/raffaele-forte/climber) Check UNIX/Linux systems for privilege escalation
-- [**122**星][24d] [PowerShell] [dsccommunity/xwebadministration](https://github.com/dsccommunity/xWebAdministration) This module contains DSC resources for deployment and configuration of web servers and components around those.
-- [**122**星][7m] [PowerShell] [nyxgeek/o365recon](https://github.com/nyxgeek/o365recon) o365recon:PowerShell脚本,使用单个 cred 来转储完整的 o365 用户列表,组列表和组成员
+- [**122**星][2m] [Py] [netflix-skunkworks/policyuniverse](https://github.com/netflix-skunkworks/policyuniverse) Parse and Process AWS IAM Policies, Statements, ARNs, and wildcards.
+- [**122**星][3y] [Ruby] [melvinsh/vcsmap](https://github.com/melvinsh/vcsmap) vcsmap is a plugin-based tool to scan public version control systems for sensitive information.
- [**122**星][2m] [Py] [mdiazcl/fuzzbunch-debian](https://github.com/mdiazcl/fuzzbunch-debian) Fuzzbunch deployment for Debian - Intructions: Readme.md
-- [**122**星][1y] [PowerShell] [mattifestation/bhusa2018_sysmon](https://github.com/mattifestation/bhusa2018_sysmon) All materials from our Black Hat 2018 "Subverting Sysmon" talk
-- [**122**星][3y] [malwares/dangerouszone](https://github.com/malwares/dangerouszone) Dangerous Malwares
+- [**122**星][1y] [PS] [mattifestation/bhusa2018_sysmon](https://github.com/mattifestation/bhusa2018_sysmon) All materials from our Black Hat 2018 "Subverting Sysmon" talk
- [**122**星][3y] [C] [l0n3c0d3r/ceed](https://github.com/l0n3c0d3r/ceed) A tiny x86 compiler with ELF and PE target
- [**122**星][2y] [PHP] [jamalc0m/wphunter](https://github.com/jamalc0m/wphunter) WPHunter A Wordpress Vulnerability Scanner
- [**122**星][3y] [C++] [ivildeed/vmw_vmx_overloader](https://github.com/ivildeed/vmw_vmx_overloader) Loading unsigned code into kernel in Windows 10 (64) with help of VMware Workstation Pro/Player design flaw
- [**122**星][2y] [Java] [isstac/kelinci](https://github.com/isstac/kelinci) AFL-based fuzzing for Java
- [**122**星][4y] [irsl/adb-backup-apk-injection](https://github.com/irsl/adb-backup-apk-injection) Android ADB backup APK Injection POC
-- [**122**星][1y] [PHP] [gwen001/s3-buckets-finder](https://github.com/gwen001/s3-buckets-finder) Find aws s3 buckets and extract datas.
- [**122**星][3y] [Py] [grazfather/practicalmalwarelabs](https://github.com/grazfather/practicalmalwarelabs) Keep track of the labs from the book "Practical Malware Analysis"
+- [**122**星][4m] [C++] [f4exb/dsdcc](https://github.com/f4exb/dsdcc) Digital Speech Decoder (DSD) rewritten as a C++ library
- [**122**星][2y] [Java] [ezequielpereira/gae-rce](https://github.com/ezequielpereira/gae-rce) Google App Engine - Remote Code Execution bug ($36k bug bounty)
-- [**122**星][4y] [Py] [equalitie/learn2ban](https://github.com/equalitie/learn2ban) Open source machine learning DDOS detection tool
- [**122**星][2y] [Go] [egebalci/arcanus](https://github.com/egebalci/arcanus) ARCANUS is a customized payload generator/handler.
- [**122**星][4m] [C] [dschanoeh/socketcand](https://github.com/dschanoeh/socketcand) A deprecated fork of socketcand. Please got to linux-can for the latest version.
- [**122**星][4y] [PHP] [dermotblair/webvulscan](https://github.com/dermotblair/webvulscan) Web Application Vulnerability Scanner.
-- [**122**星][2y] [C] [coolervoid/mosca](https://github.com/coolervoid/mosca) Manual search tool to find bugs like a grep unix command - Beta
+- [**122**星][11m] [PHP] [damianofalcioni/ip-biter](https://github.com/damianofalcioni/ip-biter) The Hacker-friendly E-Mail (but not only) Tracking Framework
+- [**122**星][3y] [JS] [cn33liz/jsmeter](https://github.com/cn33liz/jsmeter) JavaScript Reversed TCP Meterpreter Stager
+- [**122**星][3m] [HTML] [chromium/trickuri](https://github.com/chromium/trickuri) to allow testing of applications' display of URLs.
- [**122**星][2m] [Py] [chrispetrou/fdsploit](https://github.com/chrispetrou/fdsploit) File Inclusion & Directory Traversal fuzzing, enumeration & exploitation tool.
-- [**122**星][2y] [Py] [blazeinfosec/pcrappyfuzzer](https://github.com/blazeinfosec/pcrappyfuzzer) pcrappyfuzzer:Scapy+ radamsa 的简单组合,从 pcap 文件中提取数据,执行快速 Fuzz
+- [**122**星][12m] [Py] [axt/angr-utils](https://github.com/axt/angr-utils) Handy utilities for the angr binary analysis framework, most notably CFG visualization
+- [**122**星][2y] [Py] [alephsecurity/firehorse](https://github.com/alephsecurity/firehorse) 漏洞开发与利用之: 在紧急加载模式(EDM,Emergency Download Mode)下刷机时使用的固件包(高通)
+- [**122**星][28d] [Java] [al3xtjames/ghidra-firmware-utils](https://github.com/al3xtjames/ghidra-firmware-utils) Ghidra utilities for analyzing PC firmware
+- [**122**星][2y] [Batchfile] [3gstudent/clr-injection](https://github.com/3gstudent/clr-injection) Use CLR to inject all the .NET apps
- [**122**星][2y] [CSS] [0xbug/orangescan](https://github.com/0xbug/orangescan) 在线子域名信息收集工具
-- [**121**星][7d] [C#] [carlospolop/privilege-escalation-awesome-scripts-suite](https://github.com/carlospolop/privilege-escalation-awesome-scripts-suite) PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
-- [**121**星][11m] [Shell] [wulabing/ssr-manyuser_glzjin_shell](https://github.com/wulabing/ssr-manyuser_glzjin_shell) sspanel v3 魔改版 后端一键安装配置管理脚本
-- [**121**星][8d] [PHP] [curtbraz/phishing-api](https://github.com/curtbraz/phishing-api) Comprehensive Web Based Phishing Suite of Tools for Rapid Deployment and Real-Time Alerting!
-- [**121**星][1m] [Py] [fuzzitdev/pythonfuzz](https://github.com/fuzzitdev/pythonfuzz) coverage guided fuzz testing for python
+- [**121**星][8m] [C] [xhuvom/darknetfaceid](https://github.com/xhuvom/darknetfaceid) A YOLO darknet implementation of facial recognition from automatic annotation of facial images.
+- [**121**星][8d] [ukncsc/zero-trust-architecture](https://github.com/ukncsc/zero-trust-architecture) Principles to help you design and deploy a zero trust architecture
- [**121**星][4y] [C] [cuckoosandbox/cuckoomon](https://github.com/cuckoosandbox/cuckoomon) DEPRECATED - replaced with "monitor"
-- [**121**星][2y] [Java] [zjlywjh001/phrackctf-platform-personal](https://github.com/zjlywjh001/phrackctf-platform-personal) CTF platfrom developed by Jarvis from Phrack Team. 做一个功能最全的CTF平台。
-- [**121**星][2y] [C#] [zerosum0x0/runshellcode](https://github.com/zerosum0x0/runshellcode) .NET GUI program that runs shellcode
-- [**121**星][5y] [C++] [zachriggle/ida-splode](https://github.com/zachriggle/ida-splode) 使用Pin收集动态运行数据, 导入到IDA中查看
- - [IDA插件](https://github.com/zachriggle/ida-splode/tree/master/py)
- - [PinTool](https://github.com/zachriggle/ida-splode/tree/master/src)
-- [**121**星][15d] [Py] [t4d/stalkphish](https://github.com/t4d/stalkphish) StalkPhish - The Phishing kits stalker, harvesting phishing kits for investigations.
+- [**121**星][2m] [Py] [yelp/amira](https://github.com/yelp/amira) Automated Malware Incident Response & Analysis
+- [**121**星][2y] [we5ter/awesome-platforms](https://github.com/we5ter/awesome-platforms) A curated list of awesome security platforms,including CTF/Security Response Center/Bug Tracker and so on.
+- [**121**星][11d] [HTML] [trendmicro/securecodingdojo](https://github.com/trendmicro/securecodingdojo) a platform for delivering secure coding training
+- [**121**星][7m] [Py] [tidesec/web_pwd_common_crack](https://github.com/tidesec/web_pwd_common_crack) 通用web弱口令破解脚本,旨在批量检测那些没有验证码的管理后台,可用于刷分~
+- [**121**星][2m] [Go] [teknogeek/ssrf-sheriff](https://github.com/teknogeek/ssrf-sheriff) A simple SSRF-testing sheriff written in Go
- [**121**星][2y] [C] [sqlmapproject/udfhack](https://github.com/sqlmapproject/udfhack) Database takeover user-defined functions for MySQL and PostgreSQL
-- [**121**星][4m] [Py] [skyplabs/probequest](https://github.com/skyplabs/probequest) Toolkit for Playing with Wi-Fi Probe Requests
- [**121**星][2y] [C#] [schnocker/hleaker](https://github.com/schnocker/hleaker) An usermode alternative for DuplicateHandle.
- [**121**星][4y] [sandysekharan/ctf-tool](https://github.com/sandysekharan/ctf-tool) A curated list of Capture The Flag (CTF) frameworks, libraries, resources and softwares.
+- [**121**星][15d] [PS] [rgl/windows-2016-vagrant](https://github.com/rgl/windows-2016-vagrant) Windows 2012R2/10/2016/2019 Base Vagrant Box (
+- [**121**星][6d] [Py] [renatahodovan/grammarinator](https://github.com/renatahodovan/grammarinator) ANTLR v4 grammar-based test generator
+- [**121**星][24d] [Py] [redhuntlabs/burpsuite-asset_discover](https://github.com/redhuntlabs/burpsuite-asset_discover) Burp Suite extension to discover assets from HTTP response.
+- [**121**星][3m] [Py] [redaelli/imago-forensics](https://github.com/redaelli/imago-forensics) Imago is a python tool that extract digital evidences from images.
+- [**121**星][1m] [C++] [rebzzel/kiero](https://github.com/rebzzel/kiero) Universal graphical hook for a D3D9-D3D12, OpenGL and Vulcan based games.
- [**121**星][3y] [Java] [rastapasta/pokemon-go-xposed](https://github.com/rastapasta/pokemon-go-xposed)
- [**121**星][11m] [Shell] [qinghuas/ss-panel-and-ss-py-mu](https://github.com/qinghuas/ss-panel-and-ss-py-mu) SS Panel V3 前端/节点端安装脚本,及相关附属工具管理
-- [**121**星][9d] [PowerShell] [dsccommunity/xpsdesiredstateconfiguration](https://github.com/dsccommunity/xPSDesiredStateConfiguration)
+- [**121**星][11d] [PS] [dsccommunity/xpsdesiredstateconfiguration](https://github.com/dsccommunity/xPSDesiredStateConfiguration)
- [**121**星][1y] [Py] [powdahound/redis-collectd-plugin](https://github.com/powdahound/redis-collectd-plugin) A Redis plugin for collectd.
-- [**121**星][2m] [C#] [nyan-x-cat/lime-crypter](https://github.com/nyan-x-cat/lime-crypter) Simple obfuscation tool
-- [**121**星][2m] [C++] [nettitude/simplepeloader](https://github.com/nettitude/simplepeloader) In-Memory PE Loader
-- [**121**星][2m] [Py] [netflix-skunkworks/policyuniverse](https://github.com/netflix-skunkworks/policyuniverse) Parse and Process AWS IAM Policies, Statements, ARNs, and wildcards.
+- [**121**星][10d] [C++] [phackt/stager.dll](https://github.com/phackt/stager.dll) Code from this article:
+- [**121**星][3m] [XSLT] [pcapng/pcapng](https://github.com/pcapng/pcapng) PCAP next generation file format specification
+- [**121**星][7m] [Py] [owasp/serverless-goat](https://github.com/owasp/serverless-goat) a serverless application demonstrating common serverless security flaws
- [**121**星][1y] [nagwww/s3-leaks](https://github.com/nagwww/s3-leaks) List of S3 Hacks
-- [**121**星][7d] [HTML] [mozillasecurity/fuzzmanager](https://github.com/mozillasecurity/fuzzmanager) A fuzzing management tools collection
-- [**121**星][3y] [Ruby] [melvinsh/vcsmap](https://github.com/melvinsh/vcsmap) vcsmap is a plugin-based tool to scan public version control systems for sensitive information.
+- [**121**星][3d] [HTML] [mozillasecurity/fuzzmanager](https://github.com/mozillasecurity/fuzzmanager) A fuzzing management tools collection
- [**121**星][1m] [JS] [mazen160/xless](https://github.com/mazen160/xless) The Serverless Blind XSS App
- [**121**星][3y] [malwares/webshell](https://github.com/malwares/webshell) WebShell Dump
-- [**121**星][26d] [maddiestone/conpresentations](https://github.com/maddiestone/conpresentations) Slide decks from my conference presentations
-- [**121**星][4y] [PowerShell] [maaaaz/crackmapexecwin](https://github.com/maaaaz/crackmapexecwin) The great CrackMapExec tool compiled for Windows
+- [**121**星][28d] [maddiestone/conpresentations](https://github.com/maddiestone/conpresentations) Slide decks from my conference presentations
+- [**121**星][4y] [PS] [maaaaz/crackmapexecwin](https://github.com/maaaaz/crackmapexecwin) The great CrackMapExec tool compiled for Windows
+- [**121**星][3y] [HTML] [louchaooo/kali-tools-zh](https://github.com/louchaooo/kali-tools-zh)
- [**121**星][7y] [Py] [liato/android-market-api-py](https://github.com/liato/android-market-api-py) A Python port of the java Android Market API.
-- [**121**星][3m] [k0rz3n/googlehacking-page](https://github.com/k0rz3n/googlehacking-page) This is a summary of my study and use of Google hacking. I hope I can share it with you. If you like, please give me a star or fork it, thank you.
-- [**121**星][5m] [AutoIt] [jschicht/mft2csv](https://github.com/jschicht/mft2csv) Extract $MFT record info and log it to a csv file.
+- [**121**星][6m] [AutoIt] [jschicht/mft2csv](https://github.com/jschicht/mft2csv) Extract $MFT record info and log it to a csv file.
+- [**121**星][1y] [Shell] [joanbono/snorter](https://github.com/joanbono/snorter) Snort + Barnyard2 + Pulledpork → The easy way!
+- [**121**星][6y] [Py] [infodox/exploits](https://github.com/infodox/exploits) Some exploits and exploit development stuff.
- [**121**星][4y] [Scala] [guillaumebort/scasm](https://github.com/guillaumebort/scasm) A a dynamic x86_64 assembler in Scala — Code for the live coding session @ Devoxx france 2016
-- [**121**星][3y] [C] [glacierw/mba](https://github.com/glacierw/mba) Malware Behavior Analyzer
-- [**121**星][19d] [gajos112/oscp](https://github.com/gajos112/oscp) Materials for OSCP exam
-- [**121**星][3y] [PowerShell] [fuzzysecurity/hacksysteam-pskernelpwn](https://github.com/fuzzysecurity/hacksysteam-pskernelpwn) Accompanying blog posts on using PowerShell to exploit the @HackSysTeam Extreme Vulnerable Driver (HEVD).
+- [**121**星][3y] [PS] [fuzzysecurity/hacksysteam-pskernelpwn](https://github.com/fuzzysecurity/hacksysteam-pskernelpwn) Accompanying blog posts on using PowerShell to exploit the @HackSysTeam Extreme Vulnerable Driver (HEVD).
- [**121**星][2y] [Shell] [feicong/ida_for_mac_green](https://github.com/feicong/ida_for_mac_green) IDAPro 绿化增强版 (macOS)
-- [**121**星][4m] [C++] [f4exb/dsdcc](https://github.com/f4exb/dsdcc) Digital Speech Decoder (DSD) rewritten as a C++ library
-- [**121**星][3m] [Shell] [exalab/anlinux-resources](https://github.com/exalab/anlinux-resources) Image and Script for LinuxOnAndroid App
+- [**121**星][14d] [Go] [facebookincubator/nvdtools](https://github.com/facebookincubator/nvdtools) A set of tools to work with the feeds (vulnerabilities, CPE dictionary etc.) distributed by National Vulnerability Database (NVD)
- [**121**星][2y] [Ruby] [ehloonion/onionmx](https://github.com/ehloonion/onionmx) Onion delivery, so delicious
-- [**121**星][3y] [JS] [cn33liz/jsmeter](https://github.com/cn33liz/jsmeter) JavaScript Reversed TCP Meterpreter Stager
-- [**121**星][7d] [C#] [carlospolop/privilege-escalation-awesome-scripts-suite](https://github.com/carlospolop/privilege-escalation-awesome-scripts-suite) PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
+- [**121**星][10m] [Perl] [dave-theunsub/clamtk](https://github.com/dave-theunsub/clamtk) An easy to use, light-weight, on-demand virus scanner for Linux systems
+- [**121**星][1m] [cujanovic/content-bruteforcing-wordlist](https://github.com/cujanovic/content-bruteforcing-wordlist) Wordlist for content(directory) bruteforce discovering with Burp or dirsearch
+- [**121**星][2m] [Py] [ctxis/beemka](https://github.com/ctxis/beemka) Basic Electron Exploitation
+- [**121**星][3y] [cloudsec/research](https://github.com/cloudsec/research) the core papers i researched about kernel security.
- [**121**星][4y] [Batchfile] [brianwrf/winsystemhelper](https://github.com/brianwrf/winsystemhelper) A tool that checks and downloads scripts that will aid with privilege escalation on a Windows system.
+- [**121**星][1y] [C] [bob-beck/libtls](https://github.com/bob-beck/libtls) libtls tutorial, exercises, test CA and exercise solutions
- [**121**星][1y] [Java] [b3dk7/stegexpose](https://github.com/b3dk7/stegexpose) A steganalysis tool for detecting LSB steganography in images
-- [**121**星][12m] [Py] [axt/angr-utils](https://github.com/axt/angr-utils) Handy utilities for the angr binary analysis framework, most notably CFG visualization
-- [**121**星][2y] [Py] [alephsecurity/firehorse](https://github.com/alephsecurity/firehorse) 漏洞开发与利用之: 在紧急加载模式(EDM,Emergency Download Mode)下刷机时使用的固件包(高通)
- [**121**星][7m] [C] [aczid/crypto1_bs](https://github.com/aczid/crypto1_bs) Bitsliced Crypto-1 brute-forcer
-- [**121**星][2y] [Batchfile] [3gstudent/clr-injection](https://github.com/3gstudent/clr-injection) Use CLR to inject all the .NET apps
-- [**121**星][17d] [JS] [0vercl0k/windbg-scripts](https://github.com/0vercl0k/windbg-scripts) A bunch of JavaScript extensions for WinDbg.
-- [**120**星][17d] [JS] [maxmeng93/get-free-ss](https://github.com/maxmeng93/get-free-ss) Node爬虫学习:自动爬取网络上公开的免费 SS\SSR 账号密码,并替换掉软件中旧的账号。
-- [**120**星][2m] [PHP] [binarymaster/3wifi](https://github.com/binarymaster/3wifi) 3WiFi Wireless Database
+- [**121**星][1y] [PHP] [a0xnirudh/kurukshetra](https://github.com/a0xnirudh/kurukshetra) 通过交互式解决问题的方式来学习安全编程
+- [**121**星][4y] [Shell] [91yun/vpn](https://github.com/91yun/vpn) vpn一键安装包
+- [**121**星][3d] [C++] [0vercl0k/blazefox](https://github.com/0vercl0k/blazefox) Blazefox exploits for Windows 10 RS5 64-bit.
- [**120**星][2y] [Go] [zxsecurity/steamer](https://github.com/zxsecurity/steamer) 导入、搜索和管理公开泄露的数据
-- [**120**星][2m] [Py] [yelp/amira](https://github.com/yelp/amira) Automated Malware Incident Response & Analysis
- [**120**星][3y] [Assembly] [yaseng/pentest](https://github.com/yaseng/pentest) some pentest scripts & tools by yaseng@uauc.net
- [**120**星][4y] [Ruby] [yangbh/hammer](https://github.com/yangbh/hammer) A web vulnerability scanner framework
+- [**120**星][3y] [Shell] [xmikos/cryptboot](https://github.com/xmikos/cryptboot) Encrypted boot partition manager with UEFI Secure Boot support
- [**120**星][2y] [JS] [wofeiwo/website-analyzer](https://github.com/wofeiwo/website-analyzer) Analyze and display the Web technology of current page.
-- [**120**星][2y] [we5ter/awesome-platforms](https://github.com/we5ter/awesome-platforms) A curated list of awesome security platforms,including CTF/Security Response Center/Bug Tracker and so on.
- [**120**星][1y] [Py] [wavestone-cdt/wavecrack](https://github.com/wavestone-cdt/wavecrack) 多用户之间共享Hastcat cracking box 的 Web 界面
-- [**120**星][7m] [Py] [tidesec/web_pwd_common_crack](https://github.com/tidesec/web_pwd_common_crack) 通用web弱口令破解脚本,旨在批量检测那些没有验证码的管理后台,可用于刷分~
-- [**120**星][2m] [Go] [teknogeek/ssrf-sheriff](https://github.com/teknogeek/ssrf-sheriff) A simple SSRF-testing sheriff written in Go
- [**120**星][2y] [Jupyter Notebook] [teamhg-memex/deep-deep](https://github.com/teamhg-memex/deep-deep) Adaptive crawler which uses Reinforcement Learning methods
-- [**120**星][3m] [Py] [redaelli/imago-forensics](https://github.com/redaelli/imago-forensics) Imago is a python tool that extract digital evidences from images.
+- [**120**星][2y] [Py] [szcf-weiya/sinaspider](https://github.com/szcf-weiya/sinaspider) 动态IP解决新浪的反爬虫机制,快速抓取内容。
+- [**120**星][4y] [Py] [synack/dylibhijack](https://github.com/synack/dylibhijack) python utilities related to dylib hijacking on OS X
- [**120**星][5m] [Py] [rabbitmask/weblogicscanlot](https://github.com/rabbitmask/weblogicscanlot) WeblogicScanLot系列,Weblogic漏洞批量检测工具,V2.2
- [**120**星][3y] [Java] [pwntester/jre8u20_rce_gadget](https://github.com/pwntester/jre8u20_rce_gadget) JRE8u20_RCE_Gadget
- [**120**星][2y] [Swift] [nsexceptional/runtime](https://github.com/nsexceptional/runtime) An Objective-C simulator written in Swift.
- [**120**星][6y] [Lua] [nixuehan/belial](https://github.com/nixuehan/belial) 基于nginx lua module 的一个 waf .
- [**120**星][8y] [Py] [mostawesomedude/construct](https://github.com/mostawesomedude/construct) Python binary parsing library
+- [**120**星][1y] [Py] [mitre/cascade-server](https://github.com/mitre/cascade-server) a research project at MITRE which seeks to automate much of the investigative work a “blue-team” team would perform to determine the scope and maliciousness of suspicious behavior on a network using host data
- [**120**星][1y] [Py] [mikesiegel/ews-crack](https://github.com/mikesiegel/ews-crack) 利用 EWS 绕过 Office365 2FA/MDM
- [**120**星][2y] [C] [marsyy/littl_tools](https://github.com/marsyy/littl_tools)
-- [**120**星][3y] [HTML] [louchaooo/kali-tools-zh](https://github.com/louchaooo/kali-tools-zh)
+- [**120**星][2y] [Swift] [lxdcn/nepackettunnelvpndemo](https://github.com/lxdcn/nepackettunnelvpndemo) iOS VPN client implementation demo based on iOS9 NetworkExtension NETunnelProvider APIs
+- [**120**星][18d] [Java] [kyhsgeekcode/android-disassembler](https://github.com/kyhsgeekcode/android-disassembler) Disassemble ANY files including .so (NDK, JNI), Windows PE(EXE, DLL, SYS, etc), linux binaries, libraries, and any other files such as pictures, audios, etc(for fun)files on Android. Capstone-based disassembler application on android. 안드로이드 NDK 공유 라이브러리, Windows 바이너리, etc,... 리버싱 앱
- [**120**星][5m] [Rust] [kanishkarj/snoopy](https://github.com/kanishkarj/snoopy) A highly configurable multi-threaded packet sniffer and parser build in rust-lang.
- [**120**星][5y] [jyny/pasc2at](https://github.com/jyny/pasc2at) 高级PHP应用程序漏洞审核技术 by 80vul
-- [**120**星][1y] [Shell] [joanbono/snorter](https://github.com/joanbono/snorter) Snort + Barnyard2 + Pulledpork → The easy way!
- [**120**星][2y] [C] [jimstudt/ook-decoder](https://github.com/jimstudt/ook-decoder) Ook-decoder reads On-Off Keying radio data commonly used in the 433MHz ISM bands using a software defined radio (SDR).
- [**120**星][11m] [Shell] [itskindred/portpush](https://github.com/itskindred/portpush) A small Bash utility used for pivoting into internal networks upon compromising a public-facing host.
- [**120**星][2m] [HTML] [intel/generic-sensor-demos](https://github.com/intel/generic-sensor-demos) applications that demonstrate how to use the Generic Sensor API.
-- [**120**星][6y] [Py] [infodox/exploits](https://github.com/infodox/exploits) Some exploits and exploit development stuff.
+- [**120**星][5m] [C++] [hasherezade/tiny_tracer](https://github.com/hasherezade/tiny_tracer) A Pin Tool for tracing API calls etc
+- [**120**星][12m] [Py] [grunny/zap-cli](https://github.com/grunny/zap-cli) A simple tool for interacting with OWASP ZAP from the commandline.
+- [**120**星][3y] [C] [glacierw/mba](https://github.com/glacierw/mba) Malware Behavior Analyzer
- [**120**星][3y] [gasche/popl2016-papers](https://github.com/gasche/popl2016-papers) Links to publicly available preprints for the POPL'16 conference
-- [**120**星][29d] [Go] [fuzzitdev/fuzzit](https://github.com/fuzzitdev/fuzzit) CLI to integrate continuous fuzzing with Fuzzit
- [**120**星][3y] [Py] [exp-db/ai-driven-waf](https://github.com/exp-db/ai-driven-waf) Artificial intelligence-driven Web Firewall
+- [**120**星][2y] [JS] [duo-labs/phinn](https://github.com/duo-labs/phinn) phinn:生成脱机 Chrome 扩展,使用 bespoke convolutional 神经网络来检测网络钓鱼攻击
- [**120**星][8m] [C] [dimopouloselias/alpc-mmc-uac-bypass](https://github.com/dimopouloselias/alpc-mmc-uac-bypass) UAC Bypass with mmc via alpc
-- [**120**星][10m] [PHP] [damianofalcioni/ip-biter](https://github.com/damianofalcioni/ip-biter) The Hacker-friendly E-Mail (but not only) Tracking Framework
-- [**120**星][2m] [Py] [ctxis/beemka](https://github.com/ctxis/beemka) Basic Electron Exploitation
+- [**120**星][1y] [C] [cylancevulnresearch/reflectivedllrefresher](https://github.com/cylancevulnresearch/reflectivedllrefresher) Universal Unhooking
- [**120**星][1y] [Go] [cllunsford/aws-signing-proxy](https://github.com/cllunsford/aws-signing-proxy) Golang http proxy to transparently sign requests to AWS endpoints
+- [**120**星][3m] [C] [changeofpace/overwatch-dump-fix](https://github.com/changeofpace/overwatch-dump-fix) x64dbg plugin which removes anti-dumping and obfuscation techniques from the popular FPS game Overwatch.
+- [**120**星][7m] [Py] [c0ny1/workscripts](https://github.com/c0ny1/workscripts) 信息安全工程师工作常用脚本
- [**120**星][9m] [byt3bl33d3r/ansibleplaybooks](https://github.com/byt3bl33d3r/ansibleplaybooks) A collection of Ansible Playbooks that configure Kali to use Fish & install a number of tools
- [**120**星][4y] [Py] [breenmachine/javaunserializeexploits](https://github.com/breenmachine/javaunserializeexploits)
- [**120**星][5y] [C++] [breakingmalware/selfie](https://github.com/breakingmalware/selfie) 对自修改代码进行脱壳
-- [**120**星][1y] [C] [bob-beck/libtls](https://github.com/bob-beck/libtls) libtls tutorial, exercises, test CA and exercise solutions
- [**120**星][3m] [Py] [ashleysommer/sanic-cors](https://github.com/ashleysommer/sanic-cors) A Sanic extension for handling Cross Origin Resource Sharing (CORS), making cross-origin AJAX possible. Based on flask-cors by Cory Dolphin.
- [**120**星][5y] [Go] [appnician/pastor](https://github.com/appnician/pastor) Pastor stores all your passwords without storing them anywhere.
-- [**120**星][1y] [PHP] [a0xnirudh/kurukshetra](https://github.com/a0xnirudh/kurukshetra) 通过交互式解决问题的方式来学习安全编程
-- [**120**星][4y] [Shell] [91yun/vpn](https://github.com/91yun/vpn) vpn一键安装包
+- [**119**星][1y] [PHP] [walkor/php-socks5](https://github.com/walkor/php-socks5) socks5 proxy written in PHP based on workerman.
+- [**119**星][3m] [neo23x0/vti-dorks](https://github.com/neo23x0/vti-dorks) Awesome VirusTotal Intelligence Search Queries
+- [**119**星][1y] [Shell] [cyb0r9/winspy](https://github.com/Cyb0r9/winspy) WinSpy a Windows reverse shell Backdoor creator with an Automatic IP Poisener
- [**119**星][1y] [imfht/educn-sqlscan](https://github.com/imfht/educn-sqlScan) 对全国edu域名以及其二级域名进行的一次Sql注入,预计花费时间为三天,结束时候将提交至漏洞平台
+- [**119**星][2y] [Py] [klsecservices/bat-armor](https://github.com/klsecservices/bat-armor) Encode powershell payload into bat files
+- [**119**星][5y] [C++] [zyantific/retypedef](https://github.com/zyantific/retypedef) 函数名称替换,可以自定义规则
+- [**119**星][6m] [xiangbab/web-hack](https://github.com/xiangbab/web-hack) 一份网络安全入门的资料。
- [**119**星][1y] [Py] [winheapexplorer/winheap-explorer](https://github.com/winheapexplorer/winheap-explorer) heap-based bugs detection in x86 machine code for Windows applications.
+- [**119**星][1y] [Py] [williballenthin/indxparse](https://github.com/williballenthin/indxparse) Tool suite for inspecting NTFS artifacts.
- [**119**星][9m] [Shell] [vishnudxb/automated-pentest](https://github.com/vishnudxb/automated-pentest) Minimal docker container of Parrot OS for running an automated scan & pentest report.
- [**119**星][1y] [Py] [vanhoefm/blackhat17-pocs](https://github.com/vanhoefm/blackhat17-pocs) Proof of concepts of attacks against Wi-Fi implementations
-- [**119**星][9d] [HTML] [trendmicro/securecodingdojo](https://github.com/trendmicro/securecodingdojo) a platform for delivering secure coding training
-- [**119**星][4y] [Py] [synack/dylibhijack](https://github.com/synack/dylibhijack) python utilities related to dylib hijacking on OS X
+- [**119**星][2y] [Py] [teamhg-memex/aquarium](https://github.com/teamhg-memex/aquarium) Splash + HAProxy + Docker Compose
- [**119**星][6y] [Py] [stephenbrannon/iocextractor](https://github.com/stephenbrannon/iocextractor) IOC (Indicator of Compromise) Extractor: a program to help extract IOCs from text files.
- [**119**星][1m] [C++] [stealth/lophttpd](https://github.com/stealth/lophttpd) lots of performance (or lots of porn, if you prefer) httpd: Easy, chrooted, fast and simple to use HTTP server for static content. Runs on Linux, BSD, Android and OSX/Darwin. It's free but if you like it, consider donating to the EFF:
- [**119**星][5m] [C] [ryanries/passfiltex](https://github.com/ryanries/passfiltex) PassFiltEx. An Active Directory Password Filter.
-- [**119**星][7m] [Py] [renatahodovan/grammarinator](https://github.com/renatahodovan/grammarinator) ANTLR v4 grammar-based test generator
-- [**119**星][22d] [Py] [redhuntlabs/burpsuite-asset_discover](https://github.com/redhuntlabs/burpsuite-asset_discover) Burp Suite extension to discover assets from HTTP response.
-- [**119**星][1m] [C++] [rebzzel/kiero](https://github.com/rebzzel/kiero) Universal graphical hook for a D3D9-D3D12, OpenGL and Vulcan based games.
- [**119**星][4y] [Py] [packz/ropeme](https://github.com/packz/ropeme) ROPME is a set of python scripts to generate ROP gadgets and payload.
-- [**119**星][10m] [PowerShell] [p0w3rsh3ll/autoruns](https://github.com/p0w3rsh3ll/autoruns)
-- [**119**星][7m] [Py] [owasp/serverless-goat](https://github.com/owasp/serverless-goat) a serverless application demonstrating common serverless security flaws
+- [**119**星][10m] [PS] [p0w3rsh3ll/autoruns](https://github.com/p0w3rsh3ll/autoruns)
- [**119**星][3y] [Py] [neuroo/grabber](https://github.com/neuroo/grabber) [DON'T USE ME] plain ol' web apps scanner
-- [**119**星][10d] [Py] [netevert/pockint](https://github.com/netevert/pockint) A portable OSINT Swiss Army Knife for DFIR/OSINT professionals
+- [**119**星][3y] [Visual Basic .NET] [mwsrc/njrat](https://github.com/mwsrc/njrat) njRAT SRC Extract
- [**119**星][2y] [C] [mniip/spectre-meltdown-poc](https://github.com/mniip/spectre-meltdown-poc) spectre meltdown poc
+- [**119**星][10d] [Py] [misp/misp-taxonomies](https://github.com/misp/misp-taxonomies) Taxonomies used in MISP taxonomy system and can be used by other information sharing tool.
- [**119**星][2y] [mawenjian/china-cdn-domain-whitelist](https://github.com/mawenjian/china-cdn-domain-whitelist) 中国CDN服务提供商域名白名单(China CDN Service Providers' Domain Whitelist)
-- [**119**星][2y] [Swift] [lxdcn/nepackettunnelvpndemo](https://github.com/lxdcn/nepackettunnelvpndemo) iOS VPN client implementation demo based on iOS9 NetworkExtension NETunnelProvider APIs
- [**119**星][9m] [Py] [jzadeh/chiron-elk](https://github.com/jzadeh/chiron-elk) Chiron Home Based ML Intrusion Detection System
-- [**119**星][1y] [PowerShell] [itm4n/ikeext-privesc](https://github.com/itm4n/ikeext-privesc) Windows IKEEXT DLL Hijacking Exploit Tool
-- [**119**星][18d] [C++] [intel/opencl-intercept-layer](https://github.com/intel/opencl-intercept-layer) Intercept Layer for Debugging and Analyzing OpenCL Applications
-- [**119**星][19d] [Dockerfile] [harvard-itsecurity/docker-misp](https://github.com/harvard-itsecurity/docker-misp) Automated Docker MISP container - Malware Information Sharing Platform and Threat Sharing
-- [**119**星][11m] [Py] [grunny/zap-cli](https://github.com/grunny/zap-cli) A simple tool for interacting with OWASP ZAP from the commandline.
+- [**119**星][2y] [CoffeeScript] [joyqi/socket-pipe](https://github.com/joyqi/socket-pipe) forward your socket from one address to anoter without any configs
+- [**119**星][2d] [C++] [intel/opencl-intercept-layer](https://github.com/intel/opencl-intercept-layer) Intercept Layer for Debugging and Analyzing OpenCL Applications
+- [**119**星][2m] [C] [hydrabus/hydrafw](https://github.com/hydrabus/hydrafw) HydraFW official firmware for HydraBus/HydraNFC for researcher, hackers, students, embedded software developers or anyone interested in debugging/hacking/developing/penetration testing
+- [**119**星][21d] [Dockerfile] [harvard-itsecurity/docker-misp](https://github.com/harvard-itsecurity/docker-misp) Automated Docker MISP container - Malware Information Sharing Platform and Threat Sharing
- [**119**星][11m] [Py] [ghostmanager/shepherd](https://github.com/ghostmanager/shepherd) A Django application to help red team operators manage a library of domain names
-- [**119**星][29d] [JS] [fergarrui/ethereum-security](https://github.com/fergarrui/ethereum-security) Security issues in Ethereum demonstrated in mocha tests. The fix is also demonstrated
+- [**119**星][10d] [JS] [fuzzysecurity/fermion](https://github.com/fuzzysecurity/fermion) Fermion, an electron wrapper for Frida & Monaco.
+- [**119**星][1m] [JS] [fergarrui/ethereum-security](https://github.com/fergarrui/ethereum-security) Security issues in Ethereum demonstrated in mocha tests. The fix is also demonstrated
- [**119**星][4y] [Py] [fengxuangit/dede_exp_collect](https://github.com/fengxuangit/dede_exp_collect) collection dedecms exp use pocsuite framework 收集织梦的一些漏洞,并用pocsuite框架写出利用程序。打造一键日dede
-- [**119**星][2y] [JS] [duo-labs/phinn](https://github.com/duo-labs/phinn) phinn:生成脱机 Chrome 扩展,使用 bespoke convolutional 神经网络来检测网络钓鱼攻击
-- [**119**星][10m] [Perl] [dave-theunsub/clamtk](https://github.com/dave-theunsub/clamtk) An easy to use, light-weight, on-demand virus scanner for Linux systems
-- [**119**星][1m] [cujanovic/content-bruteforcing-wordlist](https://github.com/cujanovic/content-bruteforcing-wordlist) Wordlist for content(directory) bruteforce discovering with Burp or dirsearch
+- [**119**星][1y] [Py] [erdiaker/torrequest](https://github.com/erdiaker/torrequest) Simple Python interface for HTTP(s) requests over Tor
+- [**119**星][2y] [C++] [earthquake/universaldvc](https://github.com/earthquake/universaldvc) Universal Dynamic Virtual Channel connector for Remote Desktop Services
+- [**119**星][4d] [Shell] [cihanmehmet/sub.sh](https://github.com/cihanmehmet/sub.sh) Online Subdomain Detect Script
- [**119**星][2y] [alecmuffett/the-onion-diaries](https://github.com/alecmuffett/the-onion-diaries) Blog-type notes about building Onion sites
- [**119**星][4m] [C#] [akaion/jupiter](https://github.com/akaion/jupiter) A Windows virtual memory editing library with support for pattern scanning.
- [**119**星][1m] [Shell] [a-dma/yubitouch](https://github.com/a-dma/yubitouch) Bash script for setting or clearing touch requirements for # cryptographic operations the OpenPGP application on a YubiKey 4
-- [**119**星][7m] [C++] [0vercl0k/blazefox](https://github.com/0vercl0k/blazefox) Blazefox exploits for Windows 10 RS5 64-bit.
- [**118**星][12m] [C] [saelo/35c3ctf](https://github.com/saelo/35c3ctf) Source code and exploits for some 35c3ctf challenges.
- [**118**星][3m] [C++] [googleprojectzero/drsancov](https://github.com/googleprojectzero/drsancov) DynamoRIO plugin to get ASAN and SanitizerCoverage compatible output for closed-source executables
-- [**118**星][3m] [neo23x0/vti-dorks](https://github.com/neo23x0/vti-dorks) Awesome VirusTotal Intelligence Search Queries
- [**118**星][1y] [JS] [shadowsocks/shadowsocks-hub](https://github.com/shadowsocks/shadowsocks-hub) A web app managing shadowsocks users, servers, nodes, products, accounts, and traffic. Suitable for internal use by companies, organizations, and friends.
-- [**118**星][15d] [xrkk/awesome-cyber-security](https://github.com/xrkk/awesome-cyber-security) [Draft]Awesome Cyber Security Resource Collection. Currently contains 8000+ open source repositories, and not very well classified. For each repository, extra info included: star count, commit count, last update time. This is the DRAFT version.
-- [**118**星][28d] [Py] [jgilhutton/pyxiewps](https://github.com/jgilhutton/PyxieWPS) Pyxiewps is a wireless attack tool to retrieve the WPS pin in seconds.
+- [**118**星][30d] [Py] [jgilhutton/pyxiewps](https://github.com/jgilhutton/PyxieWPS) Pyxiewps is a wireless attack tool to retrieve the WPS pin in seconds.
- [**118**星][1y] [Py] [wipi-hunter/pifinger](https://github.com/WiPi-Hunter/PiFinger) determine whether the network we are connected for is opened by Wifi- Pineapple
-- [**118**星][1y] [Shell] [cyb0r9/winspy](https://github.com/Cyb0r9/winspy) WinSpy a Windows reverse shell Backdoor creator with an Automatic IP Poisener
-- [**118**星][2y] [Py] [klsecservices/bat-armor](https://github.com/klsecservices/bat-armor) Encode powershell payload into bat files
-- [**118**星][5y] [C++] [zyantific/retypedef](https://github.com/zyantific/retypedef) 函数名称替换,可以自定义规则
- [**118**星][2y] [Py] [yt1g3r/cve-2018-8174_exp](https://github.com/yt1g3r/cve-2018-8174_exp) CVE-2018-8174_python
-- [**118**星][6m] [xiangbab/web-hack](https://github.com/xiangbab/web-hack) 一份网络安全入门的资料。
-- [**118**星][1y] [Py] [williballenthin/indxparse](https://github.com/williballenthin/indxparse) Tool suite for inspecting NTFS artifacts.
- [**118**星][3y] [C] [timwr/cve-2014-3153](https://github.com/timwr/cve-2014-3153) CVE-2014-3153 aka towelroot
-- [**118**星][2y] [Py] [teamhg-memex/aquarium](https://github.com/teamhg-memex/aquarium) Splash + HAProxy + Docker Compose
- [**118**星][1y] [lua] [tanjiti/icstools](https://github.com/tanjiti/icstools) ics security tools
- [**118**星][9m] [Py] [skelsec/pypykatz_server](https://github.com/skelsec/pypykatz_server) the server part of a server-agent model credential acquiring tool based on pypykatz
- [**118**星][2y] [Shell] [shipcod3/mazda_getinfo](https://github.com/shipcod3/mazda_getinfo) A PoC that the USB port is an attack surface for a Mazda car's infotainment system and how Mazda hacks are made
-- [**118**星][22d] [Py] [rvn0xsy/cooolis-ms](https://github.com/rvn0xsy/cooolis-ms) Cooolis-ms is a server that supports the Metasploit Framework RPC. It is used to work with the Shellcode and PE loader. To some extent, it bypasses the static killing of anti-virus software, and allows the Cooolis-ms server to communicate with the Metasploit server. Separation.
+- [**118**星][9m] [Java] [securityfirst/umbrella_android](https://github.com/securityfirst/umbrella_android) Digital and Physical Security Advice App
- [**118**星][11m] [CSS] [rootkiter/earthworm](https://github.com/rootkiter/earthworm) Tool for tunnel
- [**118**星][1y] [Py] [ridter/mailget](https://github.com/ridter/mailget) 通过脉脉用户猜测企业邮箱
-- [**118**星][1y] [Py] [mitre/cascade-server](https://github.com/mitre/cascade-server) a research project at MITRE which seeks to automate much of the investigative work a “blue-team” team would perform to determine the scope and maliciousness of suspicious behavior on a network using host data
-- [**118**星][8d] [Py] [misp/misp-taxonomies](https://github.com/misp/misp-taxonomies) Taxonomies used in MISP taxonomy system and can be used by other information sharing tool.
+- [**118**星][5d] [PHP] [radenvodka/recsech](https://github.com/radenvodka/recsech) Recsech is a tool for doing Footprinting and Reconnaissance on the target web. Recsech collects information such as DNS Information, Sub Domains, HoneySpot Detected, Subdomain takeovers, Reconnaissance On Github and much more you can see in Features in tools .
- [**118**星][6y] [Py] [meatballs1/burp-extensions](https://github.com/meatballs1/burp-extensions) Burp Suite Extensions
-- [**118**星][16d] [Java] [kyhsgeekcode/android-disassembler](https://github.com/kyhsgeekcode/android-disassembler) Disassemble ANY files including .so (NDK, JNI), Windows PE(EXE, DLL, SYS, etc), linux binaries, libraries, and any other files such as pictures, audios, etc(for fun)files on Android. Capstone-based disassembler application on android. 안드로이드 NDK 공유 라이브러리, Windows 바이너리, etc,... 리버싱 앱
-- [**118**星][2m] [C] [hydrabus/hydrafw](https://github.com/hydrabus/hydrafw) HydraFW official firmware for HydraBus/HydraNFC for researcher, hackers, students, embedded software developers or anyone interested in debugging/hacking/developing/penetration testing
+- [**118**星][2y] [Py] [malus-security/sandblaster](https://github.com/malus-security/sandblaster) Reversing the Apple sandbox
+- [**118**星][30d] [Py] [m8r0wn/crosslinked](https://github.com/m8r0wn/crosslinked) LinkedIn enumeration tool to extract valid employee names from an organization through search engine scraping. Names can be formatted in a defined naming convention for further security testing.
+- [**118**星][1y] [Java] [liqinew/myutils](https://github.com/liqinew/myutils) 包含全方位的工具的工具项目
- [**118**星][5m] [Shell] [hardenedlinux/stig-4-debian](https://github.com/hardenedlinux/stig-4-debian) Security Technical Implementation Guide for Debian
- [**118**星][3y] [Py] [hackstoic/eqgrp-free-file](https://github.com/hackstoic/eqgrp-free-file) Free sampling of files from the purported Equation Group hack.
-- [**118**星][8d] [JS] [fuzzysecurity/fermion](https://github.com/fuzzysecurity/fermion) Fermion, an electron wrapper for Frida & Monaco.
-- [**118**星][1y] [Py] [erdiaker/torrequest](https://github.com/erdiaker/torrequest) Simple Python interface for HTTP(s) requests over Tor
+- [**118**星][26d] [Go] [furduhlutur/yar](https://github.com/furduhlutur/yar) Yar is a tool for plunderin' organizations, users and/or repositories.
+- [**118**星][2y] [C] [endgameinc/clrguard](https://github.com/endgameinc/clrguard) a proof of concept project to explore instrumenting the Common Language Runtime (CLR) for security purposes.
- [**118**星][1m] [HTML] [edoverflow/proof-of-concepts](https://github.com/edoverflow/proof-of-concepts) A little collection of fun and creative proof of concepts to demonstrate the potential impact of a security vulnerability.
+- [**118**星][6d] [Py] [domainaware/parsedmarc](https://github.com/domainaware/parsedmarc) 解析DMARC报告的Python脚本, 含cli
+- [**118**星][3m] [PS] [danmcinerney/pymetasploit3](https://github.com/danmcinerney/pymetasploit3) Automation library for Metasploit
- [**118**星][5y] [Shell] [d4rkcat/handshaker](https://github.com/d4rkcat/handshaker) Detect, capture, crack WPA/2 handshakes, WEP Keys and geotag with Android GPS
- [**118**星][8y] [C] [cr4sh/ioctlfuzzer](https://github.com/cr4sh/ioctlfuzzer) Automatically exported from code.google.com/p/ioctlfuzzer
-- [**118**星][3m] [C] [changeofpace/overwatch-dump-fix](https://github.com/changeofpace/overwatch-dump-fix) x64dbg plugin which removes anti-dumping and obfuscation techniques from the popular FPS game Overwatch.
+- [**118**星][1m] [Py] [containers/udica](https://github.com/containers/udica) This repository contains a tool for generating SELinux security profiles for containers
- [**118**星][1y] [Py] [amossys/memitm](https://github.com/amossys/memitm) Tool to make in memory man in the middle
-- [**117**星][1y] [PHP] [walkor/php-socks5](https://github.com/walkor/php-socks5) socks5 proxy written in PHP based on workerman.
-- [**117**星][11d] [Py] [meliot/shcheck](https://github.com/meliot/shcheck) check security headers on a target website
+- [**117**星][13d] [Py] [meliot/shcheck](https://github.com/meliot/shcheck) check security headers on a target website
- [**117**星][2y] [Py] [willphillipscvdemo/raspberry-pi-camera-motion-detection.](https://github.com/willphillipscvdemo/raspberry-pi-camera-motion-detection.) Using Python code with a Raspberry-Pi, PIR motion and a Picamera, you can create a device which will email you a snapshot image when someone enters your room.
- [**117**星][1y] [C#] [vulnerator/vulnerator](https://github.com/vulnerator/vulnerator) The official distribution of the vulnerability parsing utility.
- [**117**星][3y] [Py] [violentshell/rollmac](https://github.com/violentshell/rollmac) Automated WiFi limit evasion
+- [**117**星][4y] [Lua] [ulissescastro/linux-native-backdoors](https://github.com/ulissescastro/linux-native-backdoors) Repository holding all alternatives of *nix backdoors.
- [**117**星][4y] [Go] [tutumcloud/ngrok](https://github.com/tutumcloud/ngrok) Introspected tunnels to localhost
-- [**117**星][2y] [Objective-C] [theori-io/zer0con2018_singi](https://github.com/theori-io/zer0con2018_singi)
+- [**117**星][9m] [Java] [turing-technician/virtualfasthook](https://github.com/turing-technician/virtualfasthook) Android application hooking tool based on FastHook + VirtualApp
+- [**117**星][3m] [PS] [thom-s/netsec-ps-scripts](https://github.com/thom-s/netsec-ps-scripts) Collection of PowerShell network security scripts for system administrators.
+- [**117**星][2y] [ObjC] [theori-io/zer0con2018_singi](https://github.com/theori-io/zer0con2018_singi)
- [**117**星][2y] [C++] [sysml/clickos](https://github.com/sysml/clickos) The Click modular router: fast modular packet processing and analysis
- [**117**星][5y] [C] [squiffy/masochist](https://github.com/squiffy/masochist) XNU Rootkit Framework
- [**117**星][5m] [Java] [spoofzu/deepviolet](https://github.com/spoofzu/deepviolet) Tool for introspection of SSL\TLS sessions
-- [**117**星][4y] [C] [shellntel/backdoors](https://github.com/shellntel/backdoors)
-- [**117**星][9m] [Java] [securityfirst/umbrella_android](https://github.com/securityfirst/umbrella_android) Digital and Physical Security Advice App
-- [**117**星][15d] [Py] [saucer-man/saucerframe](https://github.com/saucer-man/saucerframe) python3批量poc检测工具
+- [**117**星][5y] [C] [shellntel/backdoors](https://github.com/shellntel/backdoors)
+- [**117**星][17d] [Py] [saucer-man/saucerframe](https://github.com/saucer-man/saucerframe) python3批量poc检测工具
- [**117**星][8m] [C] [rednaga/native-shim](https://github.com/rednaga/native-shim) A "shim" for loading native jni files for Android active debugging
- [**117**星][3y] [Java] [rafaeltoledo/android-security](https://github.com/rafaeltoledo/android-security) An app showcase of some techniques to improve Android app security
-- [**117**星][8d] [Py] [perfectblue/ctf-writeups](https://github.com/perfectblue/ctf-writeups) Perfect Blue's CTF Writeups
+- [**117**星][9d] [Py] [perfectblue/ctf-writeups](https://github.com/perfectblue/ctf-writeups) Perfect Blue's CTF Writeups
+- [**117**星][11m] [Shell] [patpadgett/corkscrew](https://github.com/patpadgett/corkscrew) Corkscrew is a tool for tunneling SSH through HTTP proxies.
- [**117**星][3y] [Py] [nitr4x/whichcdn](https://github.com/nitr4x/whichcdn) WhichCDN allows to detect if a given website is protected by a Content Delivery Network
-- [**117**星][3y] [Visual Basic] [mwsrc/njrat](https://github.com/mwsrc/njrat) njRAT SRC Extract
-- [**117**星][2y] [Py] [malus-security/sandblaster](https://github.com/malus-security/sandblaster) Reversing the Apple sandbox
-- [**117**星][28d] [Py] [m8r0wn/crosslinked](https://github.com/m8r0wn/crosslinked) LinkedIn enumeration tool to extract valid employee names from an organization through search engine scraping. Names can be formatted in a defined naming convention for further security testing.
-- [**117**星][1y] [Java] [liqinew/myutils](https://github.com/liqinew/myutils) 包含全方位的工具的工具项目
-- [**117**星][2y] [PowerShell] [javelinnetworks/ir-tools](https://github.com/javelinnetworks/ir-tools) forensics of domain based attacks on an infected host
+- [**117**星][3y] [Py] [nccgroup/hodor](https://github.com/nccgroup/hodor) Hodor! Fuzzer..
+- [**117**星][2y] [PS] [javelinnetworks/ir-tools](https://github.com/javelinnetworks/ir-tools) forensics of domain based attacks on an infected host
- [**117**星][2m] [Py] [hugsy/stuff](https://github.com/hugsy/stuff) Misc tools for reversing, exploit and pentest
- [**117**星][3y] [Py] [honeynet/cuckooml](https://github.com/honeynet/cuckooml) Machine Learning for Cuckoo Sandbox
- [**117**星][5y] [JS] [hadynz/xss-keylogger](https://github.com/hadynz/xss-keylogger) A keystroke logger to exploit XSS vulnerabilities in a site - for my personal Educational purposes only
-- [**117**星][11d] [Py] [gridsync/gridsync](https://github.com/gridsync/gridsync) Synchronize local directories with Tahoe-LAFS storage grids
-- [**117**星][2y] [C] [endgameinc/clrguard](https://github.com/endgameinc/clrguard) a proof of concept project to explore instrumenting the Common Language Runtime (CLR) for security purposes.
-- [**117**星][2y] [C++] [earthquake/universaldvc](https://github.com/earthquake/universaldvc) Universal Dynamic Virtual Channel connector for Remote Desktop Services
+- [**117**星][13d] [Py] [gridsync/gridsync](https://github.com/gridsync/gridsync) Synchronize local directories with Tahoe-LAFS storage grids
+- [**117**星][5y] [Py] [gdssecurity/jetleak-testing-script](https://github.com/gdssecurity/jetleak-testing-script) Script to test if a server is vulnerable to the JetLeak vulnerability
+- [**117**星][2y] [Py] [functionclub/uping](https://github.com/functionclub/uping) 一个24小时监测VPS延迟的工具
+- [**117**星][2y] [Py] [ecapuano/web-traffic-generator](https://github.com/ecapuano/web-traffic-generator) A quick and dirty HTTP/S "organic" traffic generator.
- [**117**星][4y] [Shell] [dholm/dotgdb](https://github.com/dholm/dotgdb) GDB scripts to add support for low level debugging and reverse engineering
-- [**117**星][1y] [C] [cylancevulnresearch/reflectivedllrefresher](https://github.com/cylancevulnresearch/reflectivedllrefresher) Universal Unhooking
-- [**117**星][15d] [Shell] [cihanmehmet/sub.sh](https://github.com/cihanmehmet/sub.sh) Online Subdomain Detect Script
+- [**117**星][3y] [PHP] [dhayalanb/windows-php-reverse-shell](https://github.com/dhayalanb/windows-php-reverse-shell) Simple php reverse shell implemented using binary .
+- [**117**星][7m] [Py] [danmcinerney/device-pharmer](https://github.com/danmcinerney/device-pharmer) Opens 1K+ IPs or Shodan search results and attempts to login
+- [**117**星][5d] [Go] [cyberark/secretless-broker](https://github.com/cyberark/secretless-broker) Secure your apps by making them Secretless
+- [**117**星][4y] [Py] [cvvt/dumpdex](https://github.com/cvvt/dumpdex) 基于IDA python的Android DEX内存dump工具
- [**117**星][2y] [Ruby] [bsidessf/ctf-2017-release](https://github.com/bsidessf/ctf-2017-release) Our released code for BSidesSF CTF 2017
- [**117**星][1y] [Py] [bo0om/safiler](https://github.com/bo0om/safiler) Safari local file reader
- [**117**星][4m] [Py] [bastibl/gr-keyfob](https://github.com/bastibl/gr-keyfob) Transceiver for Hella wireless car key fobs.
- [**117**星][2m] [Java] [auth0/lock.android](https://github.com/auth0/lock.android) Android Library to authenticate using Auth0 and with a Native Look & Feel
- [**117**星][1m] [Java] [aramrami/owasp-csrfguard](https://github.com/aramrami/owasp-csrfguard) OWASP CSRFGuard 3.1.0
-- [**117**星][26d] [Java] [al3xtjames/ghidra-firmware-utils](https://github.com/al3xtjames/ghidra-firmware-utils) Ghidra utilities for analyzing PC firmware
+- [**117**星][1y] [Go] [aprosvetova/xiaomi-kettle](https://github.com/aprosvetova/xiaomi-kettle) Xiaomi Kettle BLE protocol reverse-engineered
- [**117**星][10m] [C] [adrianyy/rw_socket_driver](https://github.com/adrianyy/rw_socket_driver) Driver that uses network sockets to communicate with client and read/ write protected process memory.
- [**117**星][2y] [C++] [0xphoenix/mazewalker](https://github.com/0xphoenix/mazewalker) 使用Pin收集数据,导入到IDA中查看
- [mazeui](https://github.com/0xphoenix/mazewalker/blob/master/MazeUI/mazeui.py) 在IDA中显示界面
- [PyScripts](https://github.com/0xPhoeniX/MazeWalker/tree/master/MazeTracer/PyScripts) Python脚本,处理收集到的数据
- [PinClient](https://github.com/0xPhoeniX/MazeWalker/tree/master/MazeTracer/src)
+- [**116**星][1y] [C++] [lincolnhard/openpose-darknet](https://github.com/lincolnhard/openpose-darknet) Openpose implementation using darknet
- [**116**星][3y] [PHP] [ircmaxell/stauros](https://github.com/ircmaxell/stauros) A fast XSS sanitization library for PHP
- [**116**星][3y] [Shell] [cisco-talos/vboxhardening](https://github.com/cisco-talos/vboxhardening)
-- [**116**星][12d] [Py] [baidu-security/openrasp-iast](https://github.com/baidu-security/openrasp-iast) IAST 灰盒扫描工具
-- [**116**星][21d] [Kotlin] [babylonhealth/certificate-transparency-android](https://github.com/babylonhealth/certificate-transparency-android) Certificate transparency for Android and Java
+- [**116**星][23d] [Kotlin] [babylonhealth/certificate-transparency-android](https://github.com/babylonhealth/certificate-transparency-android) Certificate transparency for Android and Java
- [**116**星][8m] [C++] [ze0r/cve-2018-8639-exp](https://github.com/ze0r/cve-2018-8639-exp)
+- [**116**星][3y] [Py] [y1ng1996/f-scrack](https://github.com/y1ng1996/f-scrack)
- [**116**星][1y] [Py] [xerub/idastuff](https://github.com/xerub/idastuff) 针对ARM处理器
- [**116**星][1y] [Py] [victims/victims-cve-db](https://github.com/victims/victims-cve-db) CVE database store
- [**116**星][10m] [C] [tylabs/quicksand_lite](https://github.com/tylabs/quicksand_lite) quicksand_lite:命令行工具,扫描 Office 文档 stream
-- [**116**星][3m] [PowerShell] [thom-s/netsec-ps-scripts](https://github.com/thom-s/netsec-ps-scripts) Collection of PowerShell network security scripts for system administrators.
+- [**116**星][27d] [PHP] [tide-emergency/yingji](https://github.com/tide-emergency/yingji) 应急相关内容积累
+- [**116**星][7m] [C] [tarlogicsecurity/tickey](https://github.com/tarlogicsecurity/tickey) Tool to extract Kerberos tickets from Linux kernel keys.
- [**116**星][2y] [C#] [tandasat/dotnethooking](https://github.com/tandasat/dotnethooking) Sample use cases of the .NET native code hooking technique
- [**116**星][1y] [Go] [t94j0/airmaster](https://github.com/t94j0/airmaster) Use ExpiredDomains.net and BlueCoat to find useful domains for red team.
- [**116**星][2y] [C++] [skylined/edgedbg](https://github.com/skylined/edgedbg) A simple command line exe to start and debug the Microsoft Edge browser.
- [**116**星][3m] [Shell] [shubhampathak/autosetup](https://github.com/shubhampathak/autosetup) Auto setup is a bash script compatible with Debian based distributions to install and setup necessary programs.
- [**116**星][3y] [Py] [shiva-spampot/shiva](https://github.com/shiva-spampot/shiva) Spam Honeypot with Intelligent Virtual Analyzer
+- [**116**星][5m] [Py] [servian/aws-auto-remediate](https://github.com/servian/aws-auto-remediate) Open source application to instantly remediate common security issues through the use of AWS Config
- [**116**星][7y] [C] [secmobi/amatutor](https://github.com/secmobi/amatutor) Android恶意代码分析教程
-- [**116**星][4m] [PowerShell] [roflsandwich/chrome-password-dumper](https://github.com/roflsandwich/chrome-password-dumper)
-- [**116**星][3m] [PHP] [radenvodka/recsech](https://github.com/radenvodka/recsech) Recsech is a tool for doing Footprinting and Reconnaissance on the target web. Recsech collects information such as DNS Information, Sub Domains, HoneySpot Detected, Subdomain takeovers, Reconnaissance On Github and much more you can see in Features in tools .
+- [**116**星][4m] [PS] [roflsandwich/chrome-password-dumper](https://github.com/roflsandwich/chrome-password-dumper)
- [**116**星][1y] [C] [nospaceships/raw-socket-sniffer](https://github.com/nospaceships/raw-socket-sniffer) Packet capture on Windows without a kernel driver
-- [**116**星][3y] [Py] [nccgroup/hodor](https://github.com/nccgroup/hodor) Hodor! Fuzzer..
-- [**116**星][9d] [Java] [nccgroup/decoder-improved](https://github.com/nccgroup/decoder-improved) Improved decoder for Burp Suite
+- [**116**星][11d] [Java] [nccgroup/decoder-improved](https://github.com/nccgroup/decoder-improved) Improved decoder for Burp Suite
+- [**116**星][6m] [Shell] [moreseclab/ddg_malware_clean_tool](https://github.com/moreseclab/ddg_malware_clean_tool) Watchdogs 、kthrotlds 挖矿蠕虫清理脚本。
+- [**116**星][12m] [C++] [melonwxd/elfhooker](https://github.com/melonwxd/elfhooker) 兼容Android 32位和64位。基于EFL文件格式Hook的demo,hook了SurfaceFlinger进程的eglSwapBuffers函数,替换为new_eglSwapBuffers
- [**116**星][1m] [Py] [markmckinnon/autopsy-plugins](https://github.com/markmckinnon/autopsy-plugins) Autopsy Python Plugins
- [**116**星][4y] [Py] [mandatoryprogrammer/xsshunter_client](https://github.com/mandatoryprogrammer/xsshunter_client) Correlated injection proxy tool for XSS Hunter
- [**116**星][9m] [C#] [linhlhq/cve-2019-0604](https://github.com/linhlhq/cve-2019-0604) CVE-2019-0604
- [**116**星][1y] [Py] [landgrey/cve-2018-2894](https://github.com/landgrey/cve-2018-2894) CVE-2018-2894 WebLogic Unrestricted File Upload Lead To RCE Check Script
+- [**116**星][17d] [C#] [joelverhagen/torsharp](https://github.com/joelverhagen/torsharp) Use Tor for your C# HTTP clients. Tor + Privoxy =
- [**116**星][1y] [Py] [jin10086/ico-spider](https://github.com/jin10086/ico-spider) download ICO source code from etherscan
- [**116**星][2y] [C++] [iaik/drama](https://github.com/iaik/drama) This repository contains examples of DRAMA reverse-engineering and side-channel attacks
+- [**116**星][1y] [Py] [graniet/inspector](https://github.com/graniet/inspector) The Inspector tool is a privilege escalation helper (PoC), easy to deployed on web server, this tool can list process running with root, check kernel version, check history file, get possible exploit ...
- [**116**星][1m] [govanguard/list-pentest-tools](https://github.com/govanguard/list-pentest-tools) A curated list of network penetration testing tools.
-- [**116**星][5y] [Py] [gdssecurity/jetleak-testing-script](https://github.com/gdssecurity/jetleak-testing-script) Script to test if a server is vulnerable to the JetLeak vulnerability
-- [**116**星][14d] [Py] [domainaware/parsedmarc](https://github.com/domainaware/parsedmarc) 解析DMARC报告的Python脚本, 含cli
+- [**116**星][3y] [C] [gdabah/distormx](https://github.com/gdabah/distormx) The ultimate hooking library
+- [**116**星][2y] [Go] [evilsocket/dirsearch](https://github.com/evilsocket/dirsearch) A Go implementation of dirsearch.
- [**116**星][2y] [Java] [dannagle/packetsender-android](https://github.com/dannagle/packetsender-android) Packet Sender for Android, Send/Receive UDP/TCP
-- [**116**星][6m] [Py] [danmcinerney/device-pharmer](https://github.com/danmcinerney/device-pharmer) Opens 1K+ IPs or Shodan search results and attempts to login
-- [**116**星][7d] [Go] [cyberark/secretless-broker](https://github.com/cyberark/secretless-broker) Secure your apps by making them Secretless
-- [**116**星][4y] [Py] [cvvt/dumpdex](https://github.com/cvvt/dumpdex) 基于IDA python的Android DEX内存dump工具
+- [**116**星][11m] [C] [d00rt/emotet_research](https://github.com/d00rt/emotet_research) documentation about the packer of Emotet and its unpacker.
- [**116**星][4y] [C++] [critters/twang](https://github.com/critters/twang) Arduino-based 1D dungeon crawler
+- [**116**星][5d] [C] [cr4sh/s6_pcie_microblaze](https://github.com/cr4sh/s6_pcie_microblaze) PCI Express DIY hacking toolkit for Xilinx SP605
- [**116**星][2y] [Py] [coffeehb/struts2_check](https://github.com/coffeehb/struts2_check) 一个用于识别目标网站是否采用Struts2框架开发的工具demo
- [**116**星][9y] [C] [chaoslawful/tcc](https://github.com/chaoslawful/tcc) track of Tiny C Compiler
+- [**116**星][8y] [PHP] [cdhowie/bitcoin-mining-proxy](https://github.com/cdhowie/bitcoin-mining-proxy) Multi-pool, multi-worker proxy for Bitcoin miners, supporting long polling and pool failover
- [**116**星][6y] [caomulaodao/xss-filter-evasion-cheat-sheet-cn](https://github.com/caomulaodao/xss-filter-evasion-cheat-sheet-cn) XSS_Filter_Evasion_Cheat_Sheet 中文版
-- [**116**星][15d] [C++] [b4rtik/metasploit-execute-assembly](https://github.com/b4rtik/metasploit-execute-assembly) Custom Metasploit post module to executing a .NET Assembly from Meterpreter session
-- [**116**星][1y] [Go] [aprosvetova/xiaomi-kettle](https://github.com/aprosvetova/xiaomi-kettle) Xiaomi Kettle BLE protocol reverse-engineered
-- [**116**星][1m] [JS] [acmbvp/hacktoberfest](https://github.com/acmbvp/hacktoberfest) Make your first PR! ~ A beginner friendly repository made specifically for open source beginners. Add your profile, a blog or any program under any language (it can be anything from a hello-world program to a complex data structure algorithm) or update the existing one. Just make sure to add the file under the correct directory. Happy hacking!
+- [**116**星][1y] [JS] [brannondorsey/distributed-password-cracking](https://github.com/brannondorsey/distributed-password-cracking) Borrow CPU cycles from visitor's web browsers to crack MD5 password hashes
+- [**116**星][17d] [C++] [b4rtik/metasploit-execute-assembly](https://github.com/b4rtik/metasploit-execute-assembly) Custom Metasploit post module to executing a .NET Assembly from Meterpreter session
+- [**116**星][9m] [Py] [ambionics/magento-exploits](https://github.com/ambionics/magento-exploits) Exploits for Magento 2.3.0 and lower
+- [**116**星][14d] [CMake] [abhi-r3v0/evabs](https://github.com/abhi-r3v0/evabs) An open source Android application that is intentionally vulnerable so as to act as a learning platform for Android application security beginners.
+- [**115**星][4y] [C++] [cisco-talos/tesladecrypt](https://github.com/Cisco-Talos/TeslaDecrypt) Decryption Tool
- [**115**星][1y] [Py] [vallejocc/reverse-engineering-arsenal](https://github.com/vallejocc/Reverse-Engineering-Arsenal) 逆向脚本收集
- [WinDbg](https://github.com/vallejocc/Reverse-Engineering-Arsenal/blob/master/WinDbg) Windbg脚本收集
- [IDA-set_symbols_for_addresses](https://github.com/vallejocc/Reverse-Engineering-Arsenal/blob/master/IDA/set_symbols_for_addresses.py) 遍历所有区段查找与指定的(地址,符号)匹配的DWORD地址,并将对应地址的值命名
- [IDA-stack_strings_deobfuscator_1](https://github.com/vallejocc/Reverse-Engineering-Arsenal/blob/master/IDA/stack_strings_deobfuscator_1.py) 反混淆栈字符串
- [RevealPE](https://github.com/vallejocc/Reverse-Engineering-Arsenal/tree/master/Standalone/RevealPE)
+- [**115**星][3y] [C++] [yanncam/exe2powershell](https://github.com/yanncam/exe2powershell) exe2powershell - exe2bat reborn for modern Windows
- [**115**星][8m] [Py] [woj-ciech/pepe](https://github.com/woj-ciech/pepe) Collect information about email addresses from Pastebin
+- [**115**星][1y] [Shell] [wknapik/vpnfailsafe](https://github.com/wknapik/vpnfailsafe) IP leak prevention for OpenVPN
- [**115**星][2y] [Py] [williballenthin/process-forest](https://github.com/williballenthin/process-forest) Reconstruct process trees from event logs
- [**115**星][12m] [HTML] [wifiphisher/extra-phishing-pages](https://github.com/wifiphisher/extra-phishing-pages) Community-built scenarios for Wifiphisher
- [**115**星][11m] [Py] [webbreacher/tilde_enum](https://github.com/webbreacher/tilde_enum) Takes a URL and checks the system for the tilde enum vuln and then find the files.
- [**115**星][1y] [Py] [verctor/cs_xor64](https://github.com/verctor/cs_xor64) cobaltstrike xor64.bin补完计划
- [**115**星][2y] [C] [valentinbreiz/ps4-linux-loader](https://github.com/valentinbreiz/ps4-linux-loader) A simple payload that let you run Linux on your 4.05 / 4.55 / 5.01 / 5.05 PS4
-- [**115**星][4y] [Lua] [ulissescastro/linux-native-backdoors](https://github.com/ulissescastro/linux-native-backdoors) Repository holding all alternatives of *nix backdoors.
-- [**115**星][9m] [Java] [turing-technician/virtualfasthook](https://github.com/turing-technician/virtualfasthook) Android application hooking tool based on FastHook + VirtualApp
-- [**115**星][25d] [PHP] [tide-emergency/yingji](https://github.com/tide-emergency/yingji) 应急相关内容积累
-- [**115**星][17d] [Shell] [therealsaumil/armx](https://github.com/therealsaumil/armx) ARM-X Firmware Emulation Framework
+- [**115**星][19d] [Shell] [therealsaumil/armx](https://github.com/therealsaumil/armx) ARM-X Firmware Emulation Framework
- [**115**星][1y] [Shell] [theflakes/ultimate-forensics-vm](https://github.com/theflakes/ultimate-forensics-vm) Evolving directions on building the best Open Source Forensics VM
-- [**115**星][7m] [C] [tarlogicsecurity/tickey](https://github.com/tarlogicsecurity/tickey) Tool to extract Kerberos tickets from Linux kernel keys.
+- [**115**星][8m] [AppleScript] [rtrouton/payload-free-package-creator](https://github.com/rtrouton/payload-free-package-creator)
- [**115**星][2y] [Py] [penafieljlm/inquisitor](https://github.com/penafieljlm/inquisitor) Opinionated organisation-centric OSINT footprinting inspired from recon-ng and Maltego
-- [**115**星][11m] [Shell] [patpadgett/corkscrew](https://github.com/patpadgett/corkscrew) Corkscrew is a tool for tunneling SSH through HTTP proxies.
- [**115**星][3y] [Java] [njfox/java-deserialization-exploit](https://github.com/njfox/java-deserialization-exploit)
-- [**115**星][6m] [Shell] [moreseclab/ddg_malware_clean_tool](https://github.com/moreseclab/ddg_malware_clean_tool) Watchdogs 、kthrotlds 挖矿蠕虫清理脚本。
-- [**115**星][2m] [C#] [metalnem/sharpfuzz](https://github.com/metalnem/sharpfuzz) AFL-based fuzz testing for .NET
+- [**115**星][5m] [Py] [n4nu/reversing-challenges-list](https://github.com/n4nu/reversing-challenges-list) CTF Reversing Challenges List
+- [**115**星][5d] [C#] [metalnem/sharpfuzz](https://github.com/metalnem/sharpfuzz) AFL-based fuzz testing for .NET
- [**115**星][3y] [Java] [mbechler/serianalyzer](https://github.com/mbechler/serianalyzer) A static byte code analyzer for Java deserialization gadget research
- [**115**星][2y] [Ruby] [m4sc3r4n0/avoidz](https://github.com/m4sc3r4n0/avoidz) Avoidz tool to bypass most A.V softwares
-- [**115**星][3m] [Py] [kmkz/exploit](https://github.com/kmkz/exploit) Exploits and advisories
+- [**115**星][11m] [Py] [lucifer1993/alb](https://github.com/lucifer1993/alb) 攻击日志分析工具
+- [**115**星][3y] [C++] [lcatro/vuln_javascript](https://github.com/lcatro/vuln_javascript) 模拟一个存在漏洞的JavaScript 运行环境,用来学习浏览器漏洞原理和练习如何编写Shellcode (a JavaScript Execute Envirment which study browser vuln and how to write Shellcode ) ..
+- [**115**星][6d] [Py] [kmkz/exploit](https://github.com/kmkz/exploit) Exploits and advisories
- [**115**星][1y] [Py] [khast3x/offensive-dockerfiles](https://github.com/khast3x/offensive-dockerfiles) Offensive tools as Dockerfiles. Lightweight & Ready to go
-- [**115**星][29d] [Py] [jpdias/botnet-lab](https://github.com/jpdias/botnet-lab) An IRC based tool for testing the capabilities of a botnet.
+- [**115**星][1m] [Py] [jpdias/botnet-lab](https://github.com/jpdias/botnet-lab) An IRC based tool for testing the capabilities of a botnet.
- [**115**星][2y] [Py] [jko/nsearch](https://github.com/jko/nsearch) minimal script to help find script into the nse database
- [**115**星][6y] [C#] [jerryhoff/webgoat.net](https://github.com/jerryhoff/webgoat.net) OWASP WebGoat.NET
+- [**115**星][3m] [PS] [jcqsteven/ghosttunnel](https://github.com/jcqsteven/ghosttunnel) 基于360提出的Ghost Tunnel攻击复现
+- [**115**星][1y] [C] [jas502n/cve-2018-17182](https://github.com/jas502n/cve-2018-17182) Linux 内核VMA-UAF 提权漏洞(CVE-2018-17182),0day
- [**115**星][1y] [Py] [jamesjgoodwin/wreckuests](https://github.com/jamesjgoodwin/wreckuests) Wreckuests — yet another one hard-hitting tool to run DDoS atacks with HTTP-flood
- [**115**星][9y] [C] [ice799/ltrace](https://github.com/ice799/ltrace) ltrace intercepts and records dynamic library calls which are called by an executed process and the signals received by that process. It can also intercept and print the system calls executed by the program.
- [**115**星][2y] [C] [harsaroopdhillon/spectreexploit](https://github.com/harsaroopdhillon/spectreexploit) SpectreExploit POC
- [**115**星][5y] [Py] [h01/proxyscanner](https://github.com/h01/proxyscanner) python HTTP代理扫描
-- [**115**星][1y] [Py] [graniet/inspector](https://github.com/graniet/inspector) The Inspector tool is a privilege escalation helper (PoC), easy to deployed on web server, this tool can list process running with root, check kernel version, check history file, get possible exploit ...
- [**115**星][8m] [C] [govolution/avepoc](https://github.com/govolution/avepoc) avepoc:一些免杀的 poc
- [**115**星][2y] [gfwlist/tinylist](https://github.com/gfwlist/tinylist) Tiny version of gfwlist, focusing on common websites ONLY
-- [**115**星][3y] [C] [gdabah/distormx](https://github.com/gdabah/distormx) The ultimate hooking library
-- [**115**星][24d] [Go] [furduhlutur/yar](https://github.com/furduhlutur/yar) Yar is a tool for plunderin' organizations, users and/or repositories.
-- [**115**星][12m] [PowerShell] [fox-it/invoke-credentialphisher](https://github.com/fox-it/invoke-credentialphisher)
-- [**115**星][2y] [Py] [ecapuano/web-traffic-generator](https://github.com/ecapuano/web-traffic-generator) A quick and dirty HTTP/S "organic" traffic generator.
-- [**115**星][3y] [PHP] [dhayalanb/windows-php-reverse-shell](https://github.com/dhayalanb/windows-php-reverse-shell) Simple php reverse shell implemented using binary .
+- [**115**星][12m] [PS] [fox-it/invoke-credentialphisher](https://github.com/fox-it/invoke-credentialphisher)
- [**115**星][4y] [JS] [demi6od/chromefuzzer](https://github.com/demi6od/chromefuzzer) fuzz
-- [**115**星][11m] [C] [d00rt/emotet_research](https://github.com/d00rt/emotet_research) documentation about the packer of Emotet and its unpacker.
-- [**115**星][29d] [Py] [containers/udica](https://github.com/containers/udica) This repository contains a tool for generating SELinux security profiles for containers
- [**115**星][2y] [Py] [cantoolz/cantoolz](https://github.com/cantoolz/cantoolz) CANToolz - Black-box CAN network analysis framework
- [**115**星][3y] [C] [c0d3z3r0/sudo-cve-2017-1000367](https://github.com/c0d3z3r0/sudo-cve-2017-1000367)
-- [**115**星][1y] [JS] [brannondorsey/distributed-password-cracking](https://github.com/brannondorsey/distributed-password-cracking) Borrow CPU cycles from visitor's web browsers to crack MD5 password hashes
- [**115**星][3y] [Batchfile] [bartblaze/disable-intel-amt](https://github.com/bartblaze/disable-intel-amt) Windows系统禁用AMT
- [**115**星][4m] [Java] [andprox/andprox](https://github.com/andprox/andprox) Native Android Proxmark3 client (no root required)
-- [**115**星][9m] [Py] [ambionics/magento-exploits](https://github.com/ambionics/magento-exploits) Exploits for Magento 2.3.0 and lower
+- [**115**星][1m] [JS] [acmbvp/hacktoberfest](https://github.com/acmbvp/hacktoberfest) Make your first PR! ~ A beginner friendly repository made specifically for open source beginners. Add your profile, a blog or any program under any language (it can be anything from a hello-world program to a complex data structure algorithm) or update the existing one. Just make sure to add the file under the correct directory. Happy hacking!
+- [**115**星][3m] [Py] [360netlab/dga](https://github.com/360netlab/dga) Suspicious DGA from PDNS and Sandbox.
- [**114**星][8y] [C++] [moxie0/tortunnel](https://github.com/moxie0/tortunnel) A partial Onion Proxy implementation that's designed to build single-hop circuits through Tor exit nodes
-- [**114**星][4y] [C++] [cisco-talos/tesladecrypt](https://github.com/Cisco-Talos/TeslaDecrypt) Decryption Tool
+- [**114**星][1y] [Shell] [fox-it/linux-luks-tpm-boot](https://github.com/fox-it/linux-luks-tpm-boot) A guide for setting up LUKS boot with a key from TPM in Linux
+- [**114**星][5m] [PHP] [m0xiaoxi/ctf_web_docker](https://github.com/m0xiaoxi/ctf_web_docker) dockers for CTF_Web.
+- [**114**星][4d] [Py] [realsanjay/domainrecon](https://github.com/realsanjay/DomainRecon) Based on URL and Organization Name, collect the IP Ranges, subdomains using various tools like Amass, subfinder, etc.. And check for uphost and Run Masscan to grap CNAME entries, take the screenshot of all the found subdomains using WebScreeShot and more...
+- [**114**星][2y] [JS] [fsecurelabs/cve-2018-4121](https://github.com/FSecureLABS/CVE-2018-4121) macOS 10.13.3 (17D47) Safari Wasm Exploit
+- [**114**星][10m] [Ruby] [hdm/inetdata](https://github.com/hdm/inetdata) Internet data acquisition
+- [**114**星][11m] [C] [zombiecraig/uds-server](https://github.com/zombiecraig/uds-server) CAN UDS Simulator and Fuzzer
+- [**114**星][8d] [C] [zmrbak/pcwechathook](https://github.com/zmrbak/pcwechathook) 云课堂《2019 PC微信 探秘》示例代码
+- [**114**星][6d] [Rust] [zcash/librustzcash](https://github.com/zcash/librustzcash) Rust-language assets for Zcash
+- [**114**星][2y] [C] [xiphosresearch/netelf](https://github.com/xiphosresearch/netelf) Run executables from memory, over the network, on Windows, Linux, OpenVMS... routers... spaceships... toasters etc.
+- [**114**星][2y] [wpvsyou/mprop](https://github.com/wpvsyou/mprop) 修改Android prop脚本工具
+- [**114**星][2y] [C++] [waryas/eupmaccess](https://github.com/waryas/eupmaccess) This DKOM exploit enables any app in usermode to access physical memory directly
- [**114**星][6m] [C#] [tyranid/canape.core](https://github.com/tyranid/canape.core) A network proxy library written in C# for .NET Core based on CANAPE
- [**114**星][6y] [CSS] [syphon1c/threatelligence](https://github.com/syphon1c/threatelligence) Threatelligence is a simple cyber threat intelligence feed collector, using Elasticsearch, Kibana and Python to automatically collect intelligence from custom or public sources. Automatically updates feeds and tries to further enhance data for dashboards.
+- [**114**星][16d] [Java] [stringcare/androidlibrary](https://github.com/stringcare/androidlibrary) Android library to reveal or obfuscate strings and assets at runtime
- [**114**星][6y] [spiderlabs/sqlol](https://github.com/spiderlabs/sqlol) A configurable SQL injection test-bed
- [**114**星][2y] [Ruby] [skahwah/wordsmith](https://github.com/skahwah/wordsmith) The aim of Wordsmith is to assist with creating tailored wordlists. This is mostly based on geolocation.
-- [**114**星][8m] [AppleScript] [rtrouton/payload-free-package-creator](https://github.com/rtrouton/payload-free-package-creator)
+- [**114**星][11m] [Py] [saaramar/35c3_modern_windows_userspace_exploitation](https://github.com/saaramar/35c3_modern_windows_userspace_exploitation)
- [**114**星][3y] [C] [rosgos/mirai-source-code](https://github.com/rosgos/mirai-source-code)
- [**114**星][4y] [Perl] [reider-roque/pentest-tools](https://github.com/reider-roque/pentest-tools) Penetration testing scripts
- [**114**星][4y] [Ruby] [patio11/wrightverification](https://github.com/patio11/wrightverification) (Failed) verification of the signature posted by Craig Wright on May 2, 2016
- [**114**星][3y] [Java] [nil1666/auditdroid](https://github.com/nil1666/auditdroid) AduitDroid
-- [**114**星][13d] [C#] [mr-un1k0d3r/minidump](https://github.com/mr-un1k0d3r/minidump) alternative to procdump
-- [**114**星][1m] [Shell] [misp/misp-book](https://github.com/misp/misp-book) User guide of MISP
+- [**114**星][15d] [C#] [mr-un1k0d3r/minidump](https://github.com/mr-un1k0d3r/minidump) alternative to procdump
+- [**114**星][6d] [Shell] [misp/misp-book](https://github.com/misp/misp-book) User guide of MISP
+- [**114**星][5m] [Py] [marcoramilli/malwaretrainingsets](https://github.com/marcoramilli/malwaretrainingsets) Free Malware Training Datasets for Machine Learning
- [**114**星][1y] [C#] [malcomvetter/managedinjection](https://github.com/malcomvetter/managedinjection) A proof of concept for dynamically loading .net assemblies at runtime with only a minimal convention pre-knowledge
-- [**114**星][11m] [Py] [lucifer1993/alb](https://github.com/lucifer1993/alb) 攻击日志分析工具
- [**114**星][3y] [C#] [leurak/trollrat](https://github.com/leurak/trollrat) A remote trolling software mainly intended for Tech Support Scammers.
-- [**114**星][3y] [C++] [lcatro/vuln_javascript](https://github.com/lcatro/vuln_javascript) 模拟一个存在漏洞的JavaScript 运行环境,用来学习浏览器漏洞原理和练习如何编写Shellcode (a JavaScript Execute Envirment which study browser vuln and how to write Shellcode ) ..
- [**114**星][4y] [C] [kpwn/nullguard](https://github.com/kpwn/nullguard) kext kills all 32bit binaries lacking __PAGEZERO (required for exploitation of kernel NULL derefs)
-- [**114**星][3m] [PowerShell] [jcqsteven/ghosttunnel](https://github.com/jcqsteven/ghosttunnel) 基于360提出的Ghost Tunnel攻击复现
-- [**114**星][1y] [C] [jas502n/cve-2018-17182](https://github.com/jas502n/cve-2018-17182) Linux 内核VMA-UAF 提权漏洞(CVE-2018-17182),0day
-- [**114**星][5m] [C++] [hasherezade/tiny_tracer](https://github.com/hasherezade/tiny_tracer) A Pin Tool for tracing API calls etc
-- [**114**星][12d] [Go] [facebookincubator/nvdtools](https://github.com/facebookincubator/nvdtools) A set of tools to work with the feeds (vulnerabilities, CPE dictionary etc.) distributed by National Vulnerability Database (NVD)
+- [**114**星][2y] [JS] [jaimehgb/raiwebwallet](https://github.com/jaimehgb/raiwebwallet) Raiblocks raiwallet.com wallet source code
- [**114**星][3m] [Go] [eaglexiang/eagle.tunnel.go](https://github.com/eaglexiang/eagle.tunnel.go) 稳定的代理工具,比.NET版本更轻量和易用
-- [**114**星][5y] [Py] [digital4rensics/malformity](https://github.com/digital4rensics/malformity) Malformity is a Maltego project based on the Canari framework for malicious binary and infrastructure research.
+- [**114**星][7m] [PS] [dviros/excalibur](https://github.com/dviros/excalibur) Excalibur is an Eternalblue exploit payload based "Powershell" for the Bashbunny project.
+- [**114**星][2y] [Py] [dragon2fly/vpngate-with-proxy](https://github.com/dragon2fly/vpngate-with-proxy) vpn gate client for linux, be able to connect to open vpn server through proxy
+- [**114**星][6y] [Py] [digital4rensics/malformity](https://github.com/digital4rensics/malformity) Malformity is a Maltego project based on the Canari framework for malicious binary and infrastructure research.
- [**114**星][2m] [Shell] [darkerego/mips-binaries](https://github.com/darkerego/mips-binaries) Various binaries for the mips architecture.
+- [**114**星][4y] [Py] [danmcinerney/wifi-monitor](https://github.com/danmcinerney/wifi-monitor) Prints the IPs on your local network that're sending the most packets
+- [**114**星][2d] [Shell] [concourse/git-resource](https://github.com/concourse/git-resource) tracks commits in a branch of a Git repository
+- [**114**星][4m] [JS] [baronpan/sysmonhunter](https://github.com/baronpan/sysmonhunter) An easy ATT&CK-based Sysmon hunting tool, showing in Blackhat USA 2019 Arsenal
- [**114**星][4y] [Shell] [anbud/droidducky](https://github.com/anbud/droidducky) SImple duckyscript interpreter in Bash.
- [**114**星][2y] [Ruby] [airbus-seclab/warbirdvm](https://github.com/airbus-seclab/warbirdvm) An analysis of the Warbird virtual-machine protection for the CI!g_pStore
- [**114**星][1y] [Py] [abhinavbom/threat-intelligence-hunter](https://github.com/abhinavbom/threat-intelligence-hunter) TIH is an intelligence tool that helps you in searching for IOCs across multiple openly available security feeds and some well known APIs. The idea behind the tool is to facilitate searching and storing of frequently added IOCs for creating your own local database of indicators.
- [**114**星][9m] [C] [a13xp0p0v/kernel-hack-drill](https://github.com/a13xp0p0v/kernel-hack-drill) Linux kernel exploitation experiments
-- [**114**星][3m] [Py] [360netlab/dga](https://github.com/360netlab/dga) Suspicious DGA from PDNS and Sandbox.
+- [**113**星][7m] [Py] [decalage2/olefile](https://github.com/decalage2/olefile) olefile is a Python package to parse, read and write Microsoft OLE2 files (also called Structured Storage, Compound File Binary Format or Compound Document File Format), such as Microsoft Office 97-2003 documents, vbaProject.bin in MS Office 2007+ files, Image Composer and FlashPix files, Outlook messages, StickyNotes, several Microscopy file fo…
- [**113**星][3y] [wtsxdev/vehicle-security](https://github.com/wtsxdev/vehicle-security) List of resources for learning about vehicle security and car hacking
-- [**113**星][1y] [Shell] [fox-it/linux-luks-tpm-boot](https://github.com/fox-it/linux-luks-tpm-boot) A guide for setting up LUKS boot with a key from TPM in Linux
-- [**113**星][5m] [PHP] [m0xiaoxi/ctf_web_docker](https://github.com/m0xiaoxi/ctf_web_docker) dockers for CTF_Web.
-- [**113**星][1y] [Py] [realsanjay/domainrecon](https://github.com/realsanjay/DomainRecon) Based on URL, collect the subdomains using various tools like Sublist3r, recon-ng etc.. And check for subdomain take over and Run the EyeWitness to take the screenshot of all the found subdomains.
+- [**113**星][2m] [C#] [infosecn1nja/sharpdoor](https://github.com/infosecn1nja/sharpdoor) SharpDoor is alternative RDPWrap written in C# to allowed multiple RDP (Remote Desktop) sessions by patching termsrv.dll file.
+- [**113**星][9d] [portswigger/xss-cheatsheet-data](https://github.com/portswigger/xss-cheatsheet-data) This repository contains all the XSS cheatsheet data to allow contributions from the community.
- [**113**星][5y] [Py] [nccgroup/zulu](https://github.com/nccgroup/zulu) The Zulu fuzzer
-- [**113**星][2y] [JS] [fsecurelabs/cve-2018-4121](https://github.com/FSecureLABS/CVE-2018-4121) macOS 10.13.3 (17D47) Safari Wasm Exploit
-- [**113**星][10m] [Ruby] [hdm/inetdata](https://github.com/hdm/inetdata) Internet data acquisition
- [**113**星][3y] [Objective-C++] [yonsm/ipafine](https://github.com/yonsm/ipafine) iOS IPA package refine and resign
-- [**113**星][3y] [Py] [y1ng1996/f-scrack](https://github.com/y1ng1996/f-scrack)
- [**113**星][4y] [C] [wireshark/winpcap](https://github.com/wireshark/winpcap) The WinPcap packet capture library. Pull requests will be ignored. Please upload changes to
- [**113**星][4m] [we5ter/flerken](https://github.com/we5ter/flerken) A Solution For Cross-Platform Obfuscated Commands Detection
-- [**113**星][2y] [C++] [waryas/eupmaccess](https://github.com/waryas/eupmaccess) This DKOM exploit enables any app in usermode to access physical memory directly
-- [**113**星][14d] [Java] [stringcare/androidlibrary](https://github.com/stringcare/androidlibrary) Android library to reveal or obfuscate strings and assets at runtime
- [**113**星][1y] [Py] [securityclippy/elasticintel](https://github.com/securityclippy/elasticintel) Serverless, low cost, threat intel aggregation for enterprise or personal use, backed by ElasticSearch.
- [**113**星][1y] [C++] [scgywx/fooking](https://github.com/scgywx/fooking) distributed gateway server(php game server, tcp server, websocket server)
-- [**113**星][8d] [C++] [phackt/stager.dll](https://github.com/phackt/stager.dll) Code from this article:
- [**113**星][1y] [Shell] [peterpt/eternal_check](https://github.com/peterpt/eternal_check) 检查指定IP是否有某些SMB漏洞, 比如永恒之蓝. 基于nmap
+- [**113**星][23d] [Py] [p4-team/crypto-commons](https://github.com/p4-team/crypto-commons) Small python module for common CTF crypto functions
- [**113**星][1m] [C#] [oj/clr-meterpreter](https://github.com/oj/clr-meterpreter) The full story of the CLR implementation of Meterpreter
-- [**113**星][5m] [Py] [n4nu/reversing-challenges-list](https://github.com/n4nu/reversing-challenges-list) CTF Reversing Challenges List
-- [**113**星][5m] [Py] [marcoramilli/malwaretrainingsets](https://github.com/marcoramilli/malwaretrainingsets) Free Malware Training Datasets for Machine Learning
+- [**113**星][10m] [HTML] [mpgn/byp-sop](https://github.com/mpgn/byp-sop) 🏴☠️ Bypass Same Origin Policy with DNS-rebinding to retrieve local server files 🏴☠️
- [**113**星][2y] [JS] [landgrey/dnstricker](https://github.com/landgrey/dnstricker) A simple dns resolver of dns-record and web-record log server for pentesting
+- [**113**星][7m] [C] [jakkarth/icmptx](https://github.com/jakkarth/icmptx) IP-over-ICMP tunnel
- [**113**星][5m] [Java] [guardianproject/iocipher](https://github.com/guardianproject/iocipher) make non-root mountable encrypted disk shares
-- [**113**星][3y] [PowerShell] [fuzzysecurity/defcon24](https://github.com/fuzzysecurity/defcon24) DefCon24
+- [**113**星][3y] [PS] [fuzzysecurity/defcon24](https://github.com/fuzzysecurity/defcon24) DefCon24
+- [**113**星][10m] [Py] [fupinglee/mypython](https://github.com/fupinglee/mypython) 一些常用的Python脚本
+- [**113**星][7m] [fabionoth/awesome-cyber-security](https://github.com/fabionoth/awesome-cyber-security) A collection of awesome software, libraries, documents, books, resources and cools stuffs about security.
- [**113**星][3y] [Py] [exodusintel/disclosures](https://github.com/exodusintel/disclosures) all of Exodus Intelligence's disclosure material
- [**113**星][4y] [Java] [evilsocket/pdusms](https://github.com/evilsocket/pdusms) PoC app for raw pdu manipulation on Android.
-- [**113**星][6m] [Visual Basic] [dzzie/comraider](https://github.com/dzzie/comraider) ActiveX Fuzzing tool with GUI, object browser, system scanner, and distributed auditing capabilities
-- [**113**星][7m] [PowerShell] [dviros/excalibur](https://github.com/dviros/excalibur) Excalibur is an Eternalblue exploit payload based "Powershell" for the Bashbunny project.
+- [**113**星][6y] [edthamm/lootbooty](https://github.com/edthamm/lootbooty) WIreless Hacking Tools
+- [**113**星][7m] [Visual Basic .NET] [dzzie/comraider](https://github.com/dzzie/comraider) ActiveX Fuzzing tool with GUI, object browser, system scanner, and distributed auditing capabilities
- [**113**星][6m] [Py] [drego85/joomlascan](https://github.com/drego85/joomlascan) A free software to find the components installed in Joomla CMS, built out of the ashes of Joomscan.
+- [**113**星][8m] [C++] [dragonquesthero/pubg-pak-hacker](https://github.com/dragonquesthero/pubg-pak-hacker) 使用Windows内核驱动隐藏文件及自身,绕过BE
+- [**113**星][11d] [Shell] [diladele/websafety](https://github.com/diladele/websafety) Simple and powerful web filter for HTTP and HTTPS traffic
- [**113**星][5y] [Shell] [denny0223/scrabble](https://github.com/denny0223/scrabble) Simple tool to recover .git folder from remote server
-- [**113**星][4m] [C#] [decoder-it/powershellveryless](https://github.com/decoder-it/powershellveryless) Constrained Language Mode + AMSI bypass all in one
-- [**113**星][4y] [Py] [danmcinerney/wifi-monitor](https://github.com/danmcinerney/wifi-monitor) Prints the IPs on your local network that're sending the most packets
-- [**113**星][3m] [PowerShell] [danmcinerney/pymetasploit3](https://github.com/danmcinerney/pymetasploit3) Automation library for Metasploit
-- [**113**星][2y] [C] [cr4sh/s6_pcie_microblaze](https://github.com/cr4sh/s6_pcie_microblaze) PCI Express DIY hacking toolkit for Xilinx SP605
+- [**113**星][5m] [C#] [decoder-it/powershellveryless](https://github.com/decoder-it/powershellveryless) Constrained Language Mode + AMSI bypass all in one
+- [**113**星][4y] [C++] [chengchengcc/ark-tools](https://github.com/chengchengcc/ark-tools) Windows Ark 工具的工程和一些demo
- [**113**星][2m] [bugcrowd/disclosure-policy](https://github.com/bugcrowd/disclosure-policy) Open Source Vulnerability Disclosure Framework. Maintained by Bugcrowd.
- [**113**星][3y] [Py] [bjmayor/hacker](https://github.com/bjmayor/hacker) python绝技:运用python成为顶级黑客 这本书的源码
-- [**113**星][4m] [JS] [baronpan/sysmonhunter](https://github.com/baronpan/sysmonhunter) An easy ATT&CK-based Sysmon hunting tool, showing in Blackhat USA 2019 Arsenal
-- [**113**星][12d] [CMake] [abhi-r3v0/evabs](https://github.com/abhi-r3v0/evabs) An open source Android application that is intentionally vulnerable so as to act as a learning platform for Android application security beginners. The effort is to introduce beginners with very limited or zero knowledge to some of the major and commonly found real-world based Android application vulnerabilities in a story-based, interactive mod…
-- [**112**星][7m] [Py] [decalage2/olefile](https://github.com/decalage2/olefile) olefile is a Python package to parse, read and write Microsoft OLE2 files (also called Structured Storage, Compound File Binary Format or Compound Document File Format), such as Microsoft Office 97-2003 documents, vbaProject.bin in MS Office 2007+ files, Image Composer and FlashPix files, Outlook messages, StickyNotes, several Microscopy file fo…
-- [**112**星][13d] [ukncsc/zero-trust-architecture](https://github.com/ukncsc/zero-trust-architecture) Principles to help you design and deploy a zero trust architecture
+- [**112**星][6m] [PS] [nsacyber/nsacyber.github.io](https://github.com/nsacyber/nsacyber.github.io) NSA Cybersecurity. Formerly known as NSA Information Assurance and the Information Assurance Directorate
- [**112**星][6m] [v2rayv3/v2ray-sspanel-v3-mod_uim-plugin](https://github.com/v2rayv3/v2ray-sspanel-v3-mod_uim-plugin)
- [**112**星][1m] [Py] [prodigysml/dr.-watson](https://github.com/prodigysml/dr.-watson) Dr. Watson is a simple Burp Suite extension that helps find assets, keys, subdomains, IP addresses, and other useful information! It's your very own discovery side kick, the Dr. Watson to your Sherlock!
+- [**112**星][2m] [C++] [outflanknl/recon-ad](https://github.com/outflanknl/recon-ad) Recon-AD, an AD recon tool based on ADSI and reflective DLL’s
- [**112**星][9m] [HTML] [xuechiyaobai/cve-2017-7092-poc](https://github.com/xuechiyaobai/CVE-2017-7092-PoC) This is the Pwn2Own 2017 Safari backup vul's exploit.
- [**112**星][2y] [Py] [simplysecurity/simplytemplate](https://github.com/SimplySecurity/SimplyTemplate) Phishing Template Generation Made Easy
- [**112**星][2y] [Py] [fsecurelabs/drozer-modules](https://github.com/FSecureLABS/drozer-modules) leading security testing framework for Android.
-- [**112**星][11m] [C] [zombiecraig/uds-server](https://github.com/zombiecraig/uds-server) CAN UDS Simulator and Fuzzer
- [**112**星][8m] [PHP] [xplico/xplico](https://github.com/xplico/xplico) Open Source Network Forensic Analysis Tool (NFAT)
-- [**112**星][2y] [C] [xiphosresearch/netelf](https://github.com/xiphosresearch/netelf) Run executables from memory, over the network, on Windows, Linux, OpenVMS... routers... spaceships... toasters etc.
-- [**112**星][2y] [wpvsyou/mprop](https://github.com/wpvsyou/mprop) 修改Android prop脚本工具
+- [**112**星][3m] [C++] [x64dbg/scripts](https://github.com/x64dbg/scripts) A collection of x64dbg scripts. Feel free to submit a pull request to add your script.
- [**112**星][9m] [Py] [williballenthin/evtxtract](https://github.com/williballenthin/evtxtract) EVTXtract recovers and reconstructs fragments of EVTX log files from raw binary data, including unallocated space and memory images.
+- [**112**星][1y] [C] [vusec/hammertime](https://github.com/vusec/hammertime) a software suite for testing, profiling and simulating the Rowhammer DRAM defect, built on top of the RAMSES address translation library.
- [**112**星][8m] [Py] [tkisason/unhash](https://github.com/tkisason/unhash) unhash is a set of tools designed to enable better password auditing
- [**112**星][6m] [Vue] [tevora-threat/dragnet](https://github.com/tevora-threat/dragnet) Your Social Engineering Sidekick
+- [**112**星][7y] [Py] [sroberts/malwarehouse](https://github.com/sroberts/malwarehouse) A warehouse for your malware
+- [**112**星][2y] [Py] [sithis993/crypter](https://github.com/sithis993/crypter) Crypter - Python-based builder and ransomware compiled to Windows executable using PyInstaller
- [**112**星][6m] [Py] [ruped24/killchain](https://github.com/ruped24/killchain) A unified console to perform the "kill chain" stages of attacks.
-- [**112**星][21d] [Py] [p4-team/crypto-commons](https://github.com/p4-team/crypto-commons) Small python module for common CTF crypto functions
+- [**112**星][11m] [C] [rup0rt/pcapfix](https://github.com/rup0rt/pcapfix) repair corrupted pcap files
+- [**112**星][1y] [ridter/cs_chinese_support](https://github.com/ridter/cs_chinese_support) Cobalt strike 修改支持回显中文。
+- [**112**星][10m] [Py] [plazmaz/sublist3r](https://github.com/plazmaz/sublist3r) Fast subdomains enumeration tool for penetration testers
+- [**112**星][2y] [Shell] [pimps/wsuxploit](https://github.com/pimps/wsuxploit) wsuxploit:MiTM 漏洞利用脚本,用于将“假冒”更新注入到非 SSL WSUS 流量中
+- [**112**星][2y] [Py] [orange-cyberdefense/fenrir-ocd](https://github.com/orange-cyberdefense/fenrir-ocd)
- [**112**星][11m] [C] [opsxcq/docker-tor-hiddenservice-nginx](https://github.com/opsxcq/docker-tor-hiddenservice-nginx) Easily setup a hidden service inside the Tor network
- [**112**星][5y] [opendns/public-domain-lists](https://github.com/opendns/public-domain-lists) OpenDNS public domain lists of domain names for training/testing classifiers
+- [**112**星][6m] [C++] [nospaceships/node-raw-socket](https://github.com/nospaceships/node-raw-socket) Raw sockets for Node.js.
- [**112**星][3y] [netbiosx/pentest-bookmarks](https://github.com/netbiosx/pentest-bookmarks) Database of websites for penetration testing
- [**112**星][3y] [Py] [mthbernardes/artlas](https://github.com/mthbernardes/artlas) Apache Real Time Logs Analyzer System
-- [**112**星][10m] [HTML] [mpgn/byp-sop](https://github.com/mpgn/byp-sop) 🏴☠️ Bypass Same Origin Policy with DNS-rebinding to retrieve local server files 🏴☠️
- [**112**星][6y] [C] [mncoppola/rpef](https://github.com/mncoppola/rpef) Abstracts and expedites the process of backdooring stock firmware images for consumer/SOHO routers
+- [**112**星][6d] [Java] [mkopylec/charon-spring-boot-starter](https://github.com/mkopylec/charon-spring-boot-starter) Reverse proxy implementation in form of a Spring Boot starter.
- [**112**星][5y] [C] [mirror/reactos](https://github.com/mirror/reactos) svn://svn.reactos.org/reactos/trunk
+- [**112**星][8m] [marcosvalle/awesome-windows-red-team](https://github.com/marcosvalle/awesome-windows-red-team) A curated list of awesome Windows frameworks, libraries, software and resources for Red Teams
- [**112**星][4y] [Java] [ledgerhq/ledger-javacard](https://github.com/ledgerhq/ledger-javacard) Ledger Unplugged - Java Card implementation of Ledger Bitcoin Hardware Wallet
-- [**112**星][7m] [Py] [jerrychan807/wspih](https://github.com/jerrychan807/wspih) Website Sensitive Personal Information Hunter 网站个人敏感信息文件扫描器
-- [**112**星][7m] [C] [jakkarth/icmptx](https://github.com/jakkarth/icmptx) IP-over-ICMP tunnel
-- [**112**星][27d] [Py] [hivesolutions/netius](https://github.com/hivesolutions/netius) Readable, simple and fast asynchronous non-blocking network apps
+- [**112**星][29d] [Py] [hivesolutions/netius](https://github.com/hivesolutions/netius) Readable, simple and fast asynchronous non-blocking network apps
- [**112**星][12m] [JS] [google/csp-evaluator](https://github.com/google/csp-evaluator) check if a Content Security Policy (CSP) serves as a strong mitigation against cross-site scripting attacks
- [**112**星][11m] [Py] [ghost123gg/wep](https://github.com/ghost123gg/wep) A generator to weaponize Macro payloads that can evade EMET and utilises native VB migration.
-- [**112**星][10m] [Py] [fupinglee/mypython](https://github.com/fupinglee/mypython) 一些常用的Python脚本
-- [**112**星][6m] [fabionoth/awesome-cyber-security](https://github.com/fabionoth/awesome-cyber-security) A collection of awesome software, libraries, documents, books, resources and cools stuffs about security.
-- [**112**星][6y] [edthamm/lootbooty](https://github.com/edthamm/lootbooty) WIreless Hacking Tools
-- [**112**星][7m] [C++] [dragonquesthero/pubg-pak-hacker](https://github.com/dragonquesthero/pubg-pak-hacker) 使用Windows内核驱动隐藏文件及自身,绕过BE
+- [**112**星][1y] [funnykun/nessusreportinchinese](https://github.com/funnykun/nessusreportinchinese) 半自动化将 Nessus 英文报告(csv格式)生成中文 excel ,中文漏洞库已有700多条常见漏洞,后续再进一步加上新漏洞自动翻译,实现全自动化
- [**112**星][4y] [Py] [ddcc/microparse](https://github.com/ddcc/microparse) Microcode parser for AMD, Intel, and VIA processors
-- [**112**星][4y] [C++] [chengchengcc/ark-tools](https://github.com/chengchengcc/ark-tools) Windows Ark 工具的工程和一些demo
- [**112**星][3y] [C++] [brock7/xdbg](https://github.com/brock7/xdbg) Open-source user-mode Anti-Anti-Debug plugin for x64dbg & cheatengine.
- [**112**星][1y] [Py] [blueudp/dorkme](https://github.com/blueudp/dorkme) [WORKING IN V2, WITH PROXIES, CUSTOM USER AGENT... TO MUCH BETTER!]DorkMe is a tool designed with the purpose of making easier the searching of vulnerabilities with Google Dorks, such as SQL Injection vulnerabilities.
- [**112**星][7m] [C++] [arno0x/tcprelayinjecter](https://github.com/arno0x/tcprelayinjecter) Tool for injecting a "TCP Relay" managed assembly into unmanaged processes
- [**112**星][4y] [Py] [androidsecuritytools/lobotomy](https://github.com/androidsecuritytools/lobotomy) Android Security Toolkit
-- [**112**星][5m] [Py] [andreafioraldi/angrgdb](https://github.com/andreafioraldi/angrgdb) Use angr inside GDB. Create an angr state from the current debugger state.
+- [**112**星][6m] [Py] [andreafioraldi/angrgdb](https://github.com/andreafioraldi/angrgdb) Use angr inside GDB. Create an angr state from the current debugger state.
+- [**112**星][1y] [Py] [alienvault-otx/yabin](https://github.com/alienvault-otx/yabin) A Yara rule generator for finding related samples and hunting
- [**112**星][4y] [C++] [agwa/titus](https://github.com/agwa/titus) Totally Isolated TLS Unwrapping Server
+- [**112**星][5y] [C++] [adamkramer/dll_hijack_detect](https://github.com/adamkramer/dll_hijack_detect) Detects DLL hijacking in running processes on Windows systems
+- [**112**星][2y] [Py] [0x27/gitpass](https://github.com/0x27/gitpass) Open Source Your Password (Mismanagement)!
+- [**111**星][12d] [Java] [tidesec/decrypt_weblogic_password](https://github.com/tidesec/decrypt_weblogic_password) 搜集了市面上绝大部分weblogic解密方式,整理了7种解密weblogic的方法及响应工具。
+- [**111**星][6y] [Ruby] [spiderlabs/beef_injection_framework](https://github.com/spiderlabs/beef_injection_framework) Inject beef hooks into HTTP traffic and track hooked systems from cmdline
+- [**111**星][10d] [CSS] [woj-ciech/kamerka-gui](https://github.com/woj-ciech/kamerka-gui) Ultimate Internet of Things/Industrial Control Systems reconnaissance tool.
- [**111**星][4y] [C] [nsacyber/maplesyrup](https://github.com/nsacyber/Maplesyrup) Assesses CPU security of embedded devices. #nsacyber
-- [**111**星][12d] [Rust] [zcash/librustzcash](https://github.com/zcash/librustzcash) Rust-language assets for Zcash
-- [**111**星][3y] [C++] [yanncam/exe2powershell](https://github.com/yanncam/exe2powershell) exe2powershell - exe2bat reborn for modern Windows
-- [**111**星][3m] [C++] [x64dbg/scripts](https://github.com/x64dbg/scripts) A collection of x64dbg scripts. Feel free to submit a pull request to add your script.
+- [**111**星][7m] [Py] [w-digital-scanner/w12scan-client](https://github.com/w-digital-scanner/w12scan-client) 网络资产搜索发现引擎,w12scan 扫描端程序
+- [**111**星][4m] [C] [zyw-200/firmafl](https://github.com/zyw-200/firmafl) FIRM-AFL is the first high-throughput greybox fuzzer for IoT firmware.
- [**111**星][6m] [Py] [webarx-security/wpbullet](https://github.com/webarx-security/wpbullet) A static code analysis for WordPress (and PHP)
-- [**111**星][3y] [PowerShell] [vletoux/ntlminjector](https://github.com/vletoux/ntlminjector) In case you didn't now how to restore the user password after a password reset (get the previous hash with DCSync)
+- [**111**星][3y] [PS] [vletoux/ntlminjector](https://github.com/vletoux/ntlminjector) In case you didn't now how to restore the user password after a password reset (get the previous hash with DCSync)
- [**111**星][2y] [Py] [tothi/pwn-hisilicon-dvr](https://github.com/tothi/pwn-hisilicon-dvr)
-- [**111**星][7y] [Py] [sroberts/malwarehouse](https://github.com/sroberts/malwarehouse) A warehouse for your malware
-- [**111**星][2y] [Py] [sithis993/crypter](https://github.com/sithis993/crypter) Crypter - Python-based builder and ransomware compiled to Windows executable using PyInstaller
- [**111**星][1y] [Py] [seifreed/malware-scripts](https://github.com/seifreed/malware-scripts) Useful scripts related with malware
- [**111**星][5m] [Py] [sagehack/cloud-buster](https://github.com/sagehack/cloud-buster) A Cloudflare resolver that works
-- [**111**星][11m] [Py] [saaramar/35c3_modern_windows_userspace_exploitation](https://github.com/saaramar/35c3_modern_windows_userspace_exploitation)
-- [**111**星][15d] [Clojure] [rm-hull/lein-nvd](https://github.com/rm-hull/lein-nvd) National Vulnerability Database dependency-checker plugin for Leiningen
+- [**111**星][17d] [Clojure] [rm-hull/lein-nvd](https://github.com/rm-hull/lein-nvd) National Vulnerability Database dependency-checker plugin for Leiningen
- [**111**星][2y] [Perl] [raikia/smbcrunch](https://github.com/raikia/smbcrunch) 3 tools that work together to simplify reconaissance of Windows File Shares
-- [**111**星][10m] [Py] [plazmaz/sublist3r](https://github.com/plazmaz/sublist3r) Fast subdomains enumeration tool for penetration testers
-- [**111**星][2y] [Py] [orange-cyberdefense/fenrir-ocd](https://github.com/orange-cyberdefense/fenrir-ocd)
+- [**111**星][7m] [C++] [praetorian-code/vulcan](https://github.com/praetorian-code/vulcan) a tool to make it easy and fast to test various forms of injection
- [**111**星][2y] [C] [openjailbreak/evasi0n6](https://github.com/openjailbreak/evasi0n6) Evasi0n6 Jailbreak by Evad3rs for iOS 6.0-6.1.2
- [**111**星][12m] [PHP] [ollyxar/php-malware-detector](https://github.com/ollyxar/php-malware-detector) PHP malware detector
-- [**111**星][6m] [C++] [nospaceships/node-raw-socket](https://github.com/nospaceships/node-raw-socket) Raw sockets for Node.js.
+- [**111**星][2m] [Py] [nu1lctf/n1ctf-2019](https://github.com/nu1lctf/n1ctf-2019)
- [**111**星][11m] [Shell] [mi-al/wifi-autopwner](https://github.com/mi-al/wifi-autopwner) script to automate searching and auditing Wi-Fi networks with weak security
+- [**111**星][5m] [Shell] [merces/bashacks](https://github.com/merces/bashacks) Set of functions to increase productivity while hacking with Bash
+- [**111**星][4y] [C] [mariovilas/shellcode_tools](https://github.com/mariovilas/shellcode_tools) Miscellaneous tools written in Python, mostly centered around shellcodes.
+- [**111**星][2y] [Go] [lloydlabs/elf-strings](https://github.com/lloydlabs/elf-strings) read an ELF binary's string sections within a given binary. This is meant to be much like the strings UNIX utility, however is purpose built for ELF binaries.
+- [**111**星][7m] [Shell] [leviathan36/trigmap](https://github.com/leviathan36/trigmap) A wrapper for Nmap to automate penetration testing
- [**111**星][2y] [Py] [lcatro/php_source_audit_tools](https://github.com/lcatro/php_source_audit_tools) PHP 白盒分析工具,结合AST 和数据流跟踪分析代码,达到自动化白盒审计功能
- [**111**星][3y] [Py] [kudelskisecurity/sgxfun](https://github.com/kudelskisecurity/sgxfun) SGX command-line tools and paper
+- [**111**星][3m] [Java] [kakawait/cas-security-spring-boot-starter](https://github.com/kakawait/cas-security-spring-boot-starter) Spring boot starter for Apereo CAS client fully integrated with Spring security
- [**111**星][11m] [C] [ionescu007/hdk](https://github.com/ionescu007/hdk) (unofficial) Hyper-V® Development Kit
- [**111**星][6y] [CSS] [httphacker/gethead](https://github.com/httphacker/gethead) HTTP Header Analysis Vulnerability Tool
- [**111**星][1y] [Py] [hook-s3c/cve-2018-11776-python-poc](https://github.com/hook-s3c/cve-2018-11776-python-poc) Working Python test and PoC for CVE-2018-11776, includes Docker lab
- [**111**星][2y] [Py] [hook-s3c/blueborne-scanner](https://github.com/hook-s3c/blueborne-scanner) Bluetooth scanner for local devices that may be vulnerable to Blueborne exploit
-- [**111**星][23d] [C#] [gaprogman/owaspheaders.core](https://github.com/gaprogman/owaspheaders.core) A .NET Core middleware for injecting the Owasp recommended HTTP Headers for increased security
-- [**111**星][14d] [Py] [flyingcircusio/vulnix](https://github.com/flyingcircusio/vulnix) Vulnerability (CVE) scanner for Nix/NixOS.
+- [**111**星][25d] [C#] [gaprogman/owaspheaders.core](https://github.com/gaprogman/owaspheaders.core) A .NET Core middleware for injecting the Owasp recommended HTTP Headers for increased security
+- [**111**星][16d] [Py] [flyingcircusio/vulnix](https://github.com/flyingcircusio/vulnix) Vulnerability (CVE) scanner for Nix/NixOS.
+- [**111**星][1y] [Java] [despector/despector](https://github.com/despector/despector) Java / Kotlin Decompiler and AST Library
- [**111**星][1y] [C#] [damonmohammadbagher/meterpreter_payload_detection](https://github.com/damonmohammadbagher/meterpreter_payload_detection) Meterpreter_Payload_Detection.exe tool for detecting Meterpreter in memory like IPS-IDS and Forensics tool
- [**111**星][3y] [Py] [cornell-brg/pydgin](https://github.com/cornell-brg/pydgin) A (Py)thon (D)SL for (G)enerating (In)struction set simulators.
- [**111**星][3y] [Py] [codepr/creak](https://github.com/codepr/creak) Poison, reset, spoof, redirect MITM script
+- [**111**星][2m] [checkmarx/js-scp](https://github.com/checkmarx/js-scp) JavaScript Secure Coding Practices guide
- [**111**星][2y] [Py] [cfsworks/wavebird-reversing](https://github.com/cfsworks/wavebird-reversing) Reverse-engineering the WaveBird protocol for the betterment of mankind
- [**111**星][2y] [Py] [cert-w/certitude](https://github.com/cert-w/certitude) The Seeker of IOC
-- [**111**星][7m] [PowerShell] [audibleblink/gorsh](https://github.com/audibleblink/gorsh) A Golang Reverse Shell w/ a Tmux-driven psuedo-C2 Interface
-- [**111**星][3y] [PowerShell] [arno0x/dnsdelivery](https://github.com/arno0x/dnsdelivery) DNSDelivery provides delivery and in memory execution of shellcode or .Net assembly using DNS requests delivery channel.
-- [**111**星][1y] [Py] [alienvault-otx/yabin](https://github.com/alienvault-otx/yabin) A Yara rule generator for finding related samples and hunting
-- [**111**星][5y] [C++] [adamkramer/dll_hijack_detect](https://github.com/adamkramer/dll_hijack_detect) Detects DLL hijacking in running processes on Windows systems
-- [**110**星][29d] [C] [hasherezade/chimera_pe](https://github.com/hasherezade/chimera_pe) ChimeraPE (a PE injector type - alternative to: RunPE, ReflectiveLoader, etc) - a template for manual loading of EXE, loading imports payload-side
-- [**110**星][6m] [PowerShell] [nsacyber/nsacyber.github.io](https://github.com/nsacyber/nsacyber.github.io) NSA Cybersecurity. Formerly known as NSA Information Assurance and the Information Assurance Directorate
-- [**110**星][6y] [Ruby] [spiderlabs/beef_injection_framework](https://github.com/spiderlabs/beef_injection_framework) Inject beef hooks into HTTP traffic and track hooked systems from cmdline
+- [**111**星][2y] [carloop/simulator](https://github.com/carloop/simulator) CAN bus simulator on the Rasperry Pi
+- [**111**星][8d] [Py] [brieflyx/ctf-pwns](https://github.com/brieflyx/ctf-pwns) Some pwn challenges selected for training and education.
+- [**111**星][2m] [Py] [bishopfox/zigdiggity](https://github.com/bishopfox/zigdiggity) A ZigBee hacking toolkit by Bishop Fox
+- [**111**星][1y] [JS] [austintgriffith/bouncer-proxy](https://github.com/austintgriffith/bouncer-proxy) 👮🏻
+- [**111**星][7m] [PS] [audibleblink/gorsh](https://github.com/audibleblink/gorsh) A Golang Reverse Shell w/ a Tmux-driven psuedo-C2 Interface
+- [**111**星][3y] [PS] [arno0x/dnsdelivery](https://github.com/arno0x/dnsdelivery) DNSDelivery provides delivery and in memory execution of shellcode or .Net assembly using DNS requests delivery channel.
+- [**111**星][2y] [Shell] [adrelanos/vpn-firewall](https://github.com/adrelanos/vpn-firewall) Leak Protection (Fail Safe Mechanism) for (Open)VPN
+- [**110**星][1m] [C] [hasherezade/chimera_pe](https://github.com/hasherezade/chimera_pe) ChimeraPE (a PE injector type - alternative to: RunPE, ReflectiveLoader, etc) - a template for manual loading of EXE, loading imports payload-side
+- [**110**星][3m] [suricata-rules/suricata-rules](https://github.com/suricata-rules/suricata-rules) Suricata IDS rules
- [**110**星][3m] [C++] [barakat/cve-2019-16098](https://github.com/barakat/cve-2019-16098) Local privilege escalation PoC exploit for CVE-2019-16098
- [**110**星][1m] [Py] [yuawn/ctf](https://github.com/yuawn/CTF) CTF write-ups and some wargame sites write-ups.
-- [**110**星][4m] [C] [zyw-200/firmafl](https://github.com/zyw-200/firmafl) FIRM-AFL is the first high-throughput greybox fuzzer for IoT firmware.
+- [**110**星][2y] [optixal/cehv10-notes](https://github.com/Optixal/CEHv10-Notes)
+- [**110**星][8d] [Py] [bit4woo/code2sec.com](https://github.com/bit4woo/code2sec.com) xmind\code\articles for my personal blog 个人博客上的资源备份存储,也是个人分享的汇总
- [**110**星][2y] [Smali] [xxxyanchenxxx/sigkill](https://github.com/xxxyanchenxxx/sigkill) 一键绕过App签名验证
- [**110**星][2y] [Java] [x-ai/burpunlimitedre](https://github.com/x-ai/burpunlimitedre) This project !replace! BurpUnlimited of depend (BurpSutie version 1.7.27). It is NOT intended to replace them!
-- [**110**星][8m] [C] [wbenny/ksocket](https://github.com/wbenny/ksocket) 在Windows驱动中使用WSK建立网络连接的示例
- [**110**星][2y] [JS] [voidsec/webrtc-leak](https://github.com/voidsec/webrtc-leak) Check if your VPN leaks your IP address via the WebRTC technology
+- [**110**星][1y] [Py] [unixfreak0037/officeparser](https://github.com/unixfreak0037/officeparser) Extract embedded files and macros from office documents.
+- [**110**星][5m] [Go] [sudosammy/knary](https://github.com/sudosammy/knary) A simple HTTP(S) and DNS Canary bot with Slack/Discord/MS Teams & Pushover support
- [**110**星][9m] [C] [strivexjun/memorymodulepp](https://github.com/strivexjun/memorymodulepp) Library to load a DLL from memory
- [**110**星][2m] [C] [sipcapture/captagent](https://github.com/sipcapture/captagent) 100% Open-Source Packet Capture Agent for HEP
-- [**110**星][7m] [C] [siguza/imobax](https://github.com/siguza/imobax) iOS Mobile Backup Extractor
+- [**110**星][2d] [Go] [sero-cash/go-sero](https://github.com/sero-cash/go-sero) The Total Solution for Blockchain with Privacy Protecting
- [**110**星][5y] [Ruby] [sensepost/heartbleed-poc](https://github.com/sensepost/heartbleed-poc) Test for SSL heartbeat vulnerability (CVE-2014-0160)
+- [**110**星][10d] [C] [scribery/tlog](https://github.com/scribery/tlog) Terminal I/O logger
- [**110**星][3y] [Py] [samgranger/eqgrp](https://github.com/samgranger/eqgrp) Mirror
-- [**110**星][2y] [Objective-C] [rozbo/ios-pubgm-hack](https://github.com/rozbo/ios-pubgm-hack) iOS吃鸡辅助
+- [**110**星][2y] [ObjC] [rozbo/ios-pubgm-hack](https://github.com/rozbo/ios-pubgm-hack) iOS吃鸡辅助
- [**110**星][8m] [rose-compiler/rose-develop](https://github.com/rose-compiler/rose-develop) The latest development version of rose. It may not pass all regression tests.
-- [**110**星][1y] [ridter/cs_chinese_support](https://github.com/ridter/cs_chinese_support) Cobalt strike 修改支持回显中文。
-- [**110**星][7m] [C++] [praetorian-code/vulcan](https://github.com/praetorian-code/vulcan) a tool to make it easy and fast to test various forms of injection
+- [**110**星][17d] [PS] [dsccommunity/networkingdsc](https://github.com/dsccommunity/NetworkingDsc)
- [**110**星][3y] [JS] [nccgroup/typofinder](https://github.com/nccgroup/typofinder) A finder of domain typos showing country of IP address
-- [**110**星][5m] [Java] [mkopylec/charon-spring-boot-starter](https://github.com/mkopylec/charon-spring-boot-starter) Reverse proxy implementation in form of a Spring Boot starter.
-- [**110**星][5m] [Shell] [merces/bashacks](https://github.com/merces/bashacks) Set of functions to increase productivity while hacking with Bash
- [**110**星][1y] [Shell] [mattymcfatty/honeypi](https://github.com/mattymcfatty/honeypi)
-- [**110**星][4y] [C] [mariovilas/shellcode_tools](https://github.com/mariovilas/shellcode_tools) Miscellaneous tools written in Python, mostly centered around shellcodes.
-- [**110**星][2y] [Go] [lloydlabs/elf-strings](https://github.com/lloydlabs/elf-strings) read an ELF binary's string sections within a given binary. This is meant to be much like the strings UNIX utility, however is purpose built for ELF binaries.
-- [**110**星][7m] [Shell] [leviathan36/trigmap](https://github.com/leviathan36/trigmap) A wrapper for Nmap to automate penetration testing
-- [**110**星][3m] [Java] [kakawait/cas-security-spring-boot-starter](https://github.com/kakawait/cas-security-spring-boot-starter) Spring boot starter for Apereo CAS client fully integrated with Spring security
+- [**110**星][1y] [C#] [malcomvetter/csexec](https://github.com/malcomvetter/csexec) An implementation of PSExec in C#
- [**110**星][8m] [C] [jwbensley/etherate](https://github.com/jwbensley/etherate) Linux CLI Ethernet and MPLS Testing Tool
-- [**110**星][2m] [PowerShell] [jrentenaar/office-365-extractor](https://github.com/jrentenaar/office-365-extractor) The Office 365 Extractor is a tool that allows for complete and reliable extraction of the Unified Audit Log (UAL)
+- [**110**星][2m] [PS] [jrentenaar/office-365-extractor](https://github.com/jrentenaar/office-365-extractor) The Office 365 Extractor is a tool that allows for complete and reliable extraction of the Unified Audit Log (UAL)
- [**110**星][7y] [Py] [jgeralnik/pytroj](https://github.com/jgeralnik/pytroj) A tool for infected .pyc files with arbitrary code that spreads out to infect all other .pyc files
-- [**110**星][29d] [C] [hasherezade/chimera_pe](https://github.com/hasherezade/chimera_pe) ChimeraPE (a PE injector type - alternative to: RunPE, ReflectiveLoader, etc) - a template for manual loading of EXE, loading imports payload-side
+- [**110**星][1m] [C] [hasherezade/chimera_pe](https://github.com/hasherezade/chimera_pe) ChimeraPE (a PE injector type - alternative to: RunPE, ReflectiveLoader, etc) - a template for manual loading of EXE, loading imports payload-side
+- [**110**星][3m] [Py] [h0nus/qrgen](https://github.com/h0nus/qrgen) Simple script for generating Malformed QRCodes.
- [**110**星][3y] [JS] [fransr/template-generator](https://github.com/fransr/template-generator) A simple variable based template editor using handlebarjs+strapdownjs. The idea is to use variables in markdown based files to easily replace the variables with content. Data is saved temporarily in local storage. PHP is only needed to generate the list of files in the dropdown of templates.
- [**110**星][2y] [Py] [fox-it/danderspritz-evtx](https://github.com/fox-it/danderspritz-evtx) Parse evtx files and detect use of the DanderSpritz eventlogedit module
+- [**110**星][3y] [HTML] [dxa4481/xssjacking](https://github.com/dxa4481/xssjacking) Abusing Self-XSS and Clickjacking to trigger XSS
- [**110**星][3m] [Java] [dogangcr/vulnerable-sso](https://github.com/dogangcr/vulnerable-sso) vulnerable single sign on
- [**110**星][2y] [C++] [codewatchorg/sidestep](https://github.com/codewatchorg/sidestep) Yet another AV evasion tool
-- [**110**星][2m] [checkmarx/js-scp](https://github.com/checkmarx/js-scp) JavaScript Secure Coding Practices guide
- [**110**星][8m] [Py] [chaitanyaharitash/kimi](https://github.com/chaitanyaharitash/kimi) Script to generate malicious debian packages (debain trojans).
-- [**110**星][2y] [carloop/simulator](https://github.com/carloop/simulator) CAN bus simulator on the Rasperry Pi
- [**110**星][7y] [C++] [abhisek/pe-loader-sample](https://github.com/abhisek/pe-loader-sample) Proof of concept implementation of in-memory PE Loader based on ReflectiveDLLInjection Technique
- [**110**星][4y] [Py] [1n3/xsstracer](https://github.com/1n3/xsstracer) A small python script to check for Cross-Site Tracing (XST)
-- [**109**星][5m] [Go] [v2ray/ext](https://github.com/v2ray/ext) Utilities to support Project V
-- [**109**星][2m] [C++] [outflanknl/recon-ad](https://github.com/outflanknl/recon-ad) Recon-AD, an AD recon tool based on ADSI and reflective DLL’s
+- [**109**星][3d] [C] [wifiphisher/roguehostapd](https://github.com/wifiphisher/roguehostapd) Hostapd fork including Wi-Fi attacks and providing Python bindings with ctypes.
+- [**109**星][21d] [SourcePawn] [shavitush/bhoptimer](https://github.com/shavitush/bhoptimer) A bunnyhop timer plugin for Counter-Strike: Source, Counter-Strike: Global Offensive and Team Fortress 2.
+- [**109**星][4m] [PHP] [vvmelody/ctf-web-challenges](https://github.com/vvmelody/ctf-web-challenges)
- [**109**星][1y] [Py] [meizjm3i/ctf-challenge](https://github.com/meizjm3i/CTF-Challenge) CTF题目收集
-- [**109**星][3m] [Py] [bit4woo/code2sec.com](https://github.com/bit4woo/code2sec.com) xmind\code\articles for my personal blog 个人博客上的资源备份存储,也是个人分享的汇总
-- [**109**星][13d] [C] [zmrbak/pcwechathook](https://github.com/zmrbak/pcwechathook) 云课堂《2019 PC微信 探秘》示例代码
+- [**109**星][9m] [Shell] [xvass/vscan](https://github.com/xvass/vscan) vulnerability scanner tool using nmap and nse scripts
+- [**109**星][8m] [C] [wbenny/ksocket](https://github.com/wbenny/ksocket) 在Windows驱动中使用WSK建立网络连接的示例
- [**109**星][2y] [C++] [vegard/prog-fuzz](https://github.com/vegard/prog-fuzz) Compiler/source code fuzzing tool using AFL instrumentation
-- [**109**星][1y] [Py] [unixfreak0037/officeparser](https://github.com/unixfreak0037/officeparser) Extract embedded files and macros from office documents.
- [**109**星][1y] [C] [twelvesec/passcat](https://github.com/twelvesec/passcat) Passwords Recovery Tool
-- [**109**星][5m] [Go] [sudosammy/knary](https://github.com/sudosammy/knary) A simple HTTP(S) and DNS Canary bot with Slack/Discord/MS Teams & Pushover support
+- [**109**星][3y] [HTML] [theori-io/cve-2016-0189](https://github.com/theori-io/cve-2016-0189) Proof-of-Concept exploit for CVE-2016-0189 (VBScript Memory Corruption in IE11)
+- [**109**星][7m] [C] [siguza/imobax](https://github.com/siguza/imobax) iOS Mobile Backup Extractor
- [**109**星][2y] [C] [securestate/syringe](https://github.com/securestate/syringe) A General Purpose DLL & Code Injection Utility
-- [**109**星][13d] [C] [scribery/tlog](https://github.com/scribery/tlog) Terminal I/O logger
+- [**109**星][29d] [Ruby] [rapid7/metasploit-omnibus](https://github.com/rapid7/metasploit-omnibus) Packaging metasploit-framework with omnibus
- [**109**星][4m] [Shell] [qax-a-team/weblogicenvironment](https://github.com/qax-a-team/weblogicenvironment) Weblogic环境搭建工具
-- [**109**星][15d] [PowerShell] [dsccommunity/networkingdsc](https://github.com/dsccommunity/NetworkingDsc)
+- [**109**星][2y] [PS] [proxb/powershell_scripts](https://github.com/proxb/powershell_scripts) Miscellaneous scripts for things that I have done; more scripts will arrive as I get time to update this repo.
- [**109**星][2y] [C] [pbatard/bootimg-tools](https://github.com/pbatard/bootimg-tools) Android boot.img creation and extraction tools [NOTE: This project is NO LONGER maintained]
- [**109**星][2y] [TeX] [p4t12ick/ypsilon](https://github.com/p4t12ick/ypsilon) Automated Use Case Testing
- [**109**星][5m] [C++] [niklasb/hack2win-chrome](https://github.com/niklasb/hack2win-chrome) This is collaborative work of Ned Williamson and Niklas Baumstark
- [**109**星][8m] [Py] [needmorecowbell/giggity](https://github.com/needmorecowbell/giggity) Wraps github api for openly available information about an organization, user, or repo
-- [**109**星][4m] [Roff] [nb-star/security-operation](https://github.com/nb-star/security-operation) 安全运维技巧整理
-- [**109**星][8m] [marcosvalle/awesome-windows-red-team](https://github.com/marcosvalle/awesome-windows-red-team) A curated list of awesome Windows frameworks, libraries, software and resources for Red Teams
-- [**109**星][1y] [C#] [malcomvetter/csexec](https://github.com/malcomvetter/csexec) An implementation of PSExec in C#
+- [**109**星][5m] [Roff] [nb-star/security-operation](https://github.com/nb-star/security-operation) 安全运维技巧整理
+- [**109**星][3y] [Py] [moosedojo/mybff](https://github.com/moosedojo/mybff) myBFF - a Brute Force Framework
- [**109**星][10m] [HTML] [m4cs/blackeye-python](https://github.com/m4cs/blackeye-python) BlackEye Phishing Kit in Python w Serveo Subdomain Creation | Educational Purposes Only
- [**109**星][4y] [Ruby] [lubyruffy/wyquery](https://github.com/lubyruffy/wyquery) Wooyun查询系统
+- [**109**星][8m] [linking12/tesla](https://github.com/linking12/tesla) Tesla is a gateway service that provides dynamic routing,waf,support spring cloud,gRPC,DUBBO and more.
- [**109**星][1y] [C++] [joxeankoret/membugtool](https://github.com/joxeankoret/membugtool) A DBI tool to discover heap memory related bugs
+- [**109**星][1y] [PHP] [joecampo/random-user-agent](https://github.com/joecampo/random-user-agent) Generate real random user-agents
- [**109**星][3y] [Py] [jmortega/osint_tools_security_auditing](https://github.com/jmortega/osint_tools_security_auditing) osint_tools_security_auditing
- [**109**星][1y] [Shell] [jgamblin/blackhat-macos-config](https://github.com/jgamblin/blackhat-macos-config) Configure Your Macbook For Blackhat
-- [**109**星][4m] [Shell] [immmx/ubnt-mips-shadowsocks-libev](https://github.com/immmx/ubnt-mips-shadowsocks-libev) Cross complie shadowsocks for UBNT devices based on mipsel or mips64
- [**109**星][2y] [C] [gvb84/pbscan](https://github.com/gvb84/pbscan) Faster and more efficient stateless SYN scanner and banner grabber due to userland TCP/IP stack usage.
- [**109**星][1y] [Pascal] [greatis/anti-webminer](https://github.com/greatis/anti-webminer) Anti-WebMiner protects your PC against web cryptocurrency miners (JS scripts like Coinhive executed in the browser) by modifying Windows hosts file
- [**109**星][2y] [C#] [goldshtn/etrace](https://github.com/goldshtn/etrace) Command-line tool for ETW tracing on files and real-time events
+- [**109**星][5y] [fjvva/ecu-tool](https://github.com/fjvva/ecu-tool) Tool to communicate with vehicle ECUs based on Arduino
+- [**109**星][3m] [JS] [elkentaro/kismetmobiledashboard](https://github.com/elkentaro/kismetmobiledashboard) Mobile UI for kismet
+- [**109**星][11m] [Py] [ekultek/graffiti](https://github.com/ekultek/graffiti) A tool to generate obfuscated one liners to aid in penetration testing
- [**109**星][6m] [JS] [detroitenglish/pw-pwnage-cfworker](https://github.com/detroitenglish/pw-pwnage-cfworker) Deploy a Cloudflare Worker to sanely score users' new passwords with zxcvbn AND check for matches against haveibeenpwned's 7.8+ billion breached accounts
- [**109**星][2m] [C] [david-reguera-garcia-dreg/dbgchild](https://github.com/david-reguera-garcia-dreg/dbgchild) Debug Child Process Tool (auto attach)
+- [**109**星][5m] [C++] [danielcardeenas/audiostego](https://github.com/danielcardeenas/audiostego) Audio file steganography. Hides files or text inside audio files and retrieve them automatically
- [**109**星][12m] [JS] [cloudtracer/paskto](https://github.com/cloudtracer/paskto) Paskto - Passive Web Scanner
- [**109**星][5y] [Py] [behindthefirewalls/parsero](https://github.com/behindthefirewalls/parsero) Parsero | Robots.txt audit tool
- [**109**星][10m] [Py] [b3-v3r/hunner](https://github.com/b3-v3r/hunner) Hacking framework
-- [**108**星][19d] [SourcePawn] [shavitush/bhoptimer](https://github.com/shavitush/bhoptimer) A bunnyhop timer plugin for Counter-Strike: Source, Counter-Strike: Global Offensive and Team Fortress 2.
-- [**108**星][4m] [PHP] [vvmelody/ctf-web-challenges](https://github.com/vvmelody/ctf-web-challenges)
-- [**108**星][2y] [optixal/cehv10-notes](https://github.com/Optixal/CEHv10-Notes)
-- [**108**星][13d] [3had0w/fuzzing-dicts](https://github.com/3had0w/Fuzzing-Dicts) Web Security Dictionary
-- [**108**星][9m] [Shell] [xvass/vscan](https://github.com/xvass/vscan) vulnerability scanner tool using nmap and nse scripts
-- [**108**星][3y] [HTML] [theori-io/cve-2016-0189](https://github.com/theori-io/cve-2016-0189) Proof-of-Concept exploit for CVE-2016-0189 (VBScript Memory Corruption in IE11)
+- [**109**星][2y] [C] [b-mueller/frida-detection-demo](https://github.com/b-mueller/frida-detection-demo) Some examples for detecting frida on Android
+- [**109**星][6m] [Py] [anssi-fr/bmc-tools](https://github.com/anssi-fr/bmc-tools) RDP Bitmap Cache parser
+- [**109**星][3m] [Py] [altjx/ipwn](https://github.com/altjx/ipwn)
+- [**108**星][5m] [Go] [v2ray/ext](https://github.com/v2ray/ext) Utilities to support Project V
+- [**108**星][7m] [C#] [virb3/de4dot-cex](https://github.com/virb3/de4dot-cex) de4dot deobfuscator with full support for vanilla ConfuserEx
+- [**108**星][1y] [C] [fsecurelabs/xrulez](https://github.com/FSecureLABS/XRulez) A command line tool for creating malicious outlook rules
+- [**108**星][3y] [vidar-team/hctf2016](https://github.com/vidar-team/HCTF2016) HCTF 2016 CHALLENGES
+- [**108**星][15d] [3had0w/fuzzing-dicts](https://github.com/3had0w/Fuzzing-Dicts) Web Security Dictionary
+- [**108**星][11m] [Py] [w3h/isf](https://github.com/w3h/isf) ISF(Industrial Security Exploitation Framework) is a exploitation framework based on Python.
- [**108**星][3y] [Py] [souhardya/warchild](https://github.com/souhardya/warchild) War Child denial of service testing suite
-- [**108**星][11d] [PHP] [sniperoj/attack-defense-challenges](https://github.com/sniperoj/attack-defense-challenges) Challenges of CTF Attack with Defense mode
+- [**108**星][13d] [PHP] [sniperoj/attack-defense-challenges](https://github.com/sniperoj/attack-defense-challenges) Challenges of CTF Attack with Defense mode
- [**108**星][3y] [JS] [sensepost/wadi](https://github.com/sensepost/wadi) Wadi Fuzzing Harness
-- [**108**星][27d] [Ruby] [rapid7/metasploit-omnibus](https://github.com/rapid7/metasploit-omnibus) Packaging metasploit-framework with omnibus
-- [**108**星][2y] [PowerShell] [proxb/powershell_scripts](https://github.com/proxb/powershell_scripts) Miscellaneous scripts for things that I have done; more scripts will arrive as I get time to update this repo.
+- [**108**星][8m] [Py] [rootbsd/fridump3](https://github.com/rootbsd/fridump3) A universal memory dumper using Frida for Python 3
+- [**108**星][1m] [C] [rohanpadhye/fuzzfactory](https://github.com/rohanpadhye/fuzzfactory) Domain-Specific Fuzzing with Waypoints
+- [**108**星][3m] [JS] [rapid7/awsaml](https://github.com/rapid7/awsaml) Awsaml is an application for providing automatically rotated temporary AWS credentials.
- [**108**星][3y] [projectretroscope/retroscope](https://github.com/projectretroscope/retroscope) Public release of the RetroScope Android memory forensics framework
-- [**108**星][2y] [Shell] [pimps/wsuxploit](https://github.com/pimps/wsuxploit) wsuxploit:MiTM 漏洞利用脚本,用于将“假冒”更新注入到非 SSL WSUS 流量中
-- [**108**星][2m] [Py] [nu1lctf/n1ctf-2019](https://github.com/nu1lctf/n1ctf-2019)
+- [**108**星][2m] [Assembly] [platypew/picoctf-2018-writeup](https://github.com/platypew/picoctf-2018-writeup) Writeup for picoCTF 2018
- [**108**星][10m] [Py] [mpgn/cve-2019-7238](https://github.com/mpgn/cve-2019-7238) 🐱💻 Poc of CVE-2019-7238 - Nexus Repository Manager 3 Remote Code Execution 🐱💻
-- [**108**星][3y] [Py] [moosedojo/mybff](https://github.com/moosedojo/mybff) myBFF - a Brute Force Framework
+- [**108**星][6m] [Py] [matiskay/html-similarity](https://github.com/matiskay/html-similarity) Compare html similarity using structural and style metrics
+- [**108**星][5m] [C++] [mactec0/kernelmode-manual-mapping-through-iat](https://github.com/mactec0/kernelmode-manual-mapping-through-iat) Manual mapping without creating any threads, with rw only access
- [**108**星][10m] [Py] [m4cs/darkspiritz](https://github.com/m4cs/darkspiritz)
-- [**108**星][1m] [C] [libyal/libbde](https://github.com/libyal/libbde) Library and tools to access the BitLocker Drive Encryption (BDE) encrypted volumes
-- [**108**星][1y] [PHP] [joecampo/random-user-agent](https://github.com/joecampo/random-user-agent) Generate real random user-agents
-- [**108**星][3m] [Py] [h0nus/qrgen](https://github.com/h0nus/qrgen) Simple script for generating Malformed QRCodes.
+- [**108**星][3d] [C] [libyal/libbde](https://github.com/libyal/libbde) Library and tools to access the BitLocker Drive Encryption (BDE) encrypted volumes
+- [**108**星][4m] [Shell] [immmx/ubnt-mips-shadowsocks-libev](https://github.com/immmx/ubnt-mips-shadowsocks-libev) Cross complie shadowsocks for UBNT devices based on mipsel or mips64
+- [**108**星][2y] [Py] [hansesecure/exploitdev](https://github.com/hansesecure/exploitdev)
- [**108**星][2y] [geosn0w/myriam](https://github.com/geosn0w/myriam) A vulnerable iOS App with Security Challenges for the Security Researcher inside you.
-- [**108**星][1y] [funnykun/nessusreportinchinese](https://github.com/funnykun/nessusreportinchinese) 半自动化将 Nessus 英文报告(csv格式)生成中文 excel ,中文漏洞库已有700多条常见漏洞,后续再进一步加上新漏洞自动翻译,实现全自动化
-- [**108**星][9d] [C++] [frida/frida-node](https://github.com/frida/frida-node) Frida Node.js bindings
+- [**108**星][6d] [C++] [frida/frida-node](https://github.com/frida/frida-node) Frida Node.js bindings
+- [**108**星][18d] [Pascal] [fenix01/cheatengine-library](https://github.com/fenix01/cheatengine-library) Cheat Engine Library is based on CheatEngine a debugger and coding environment particularly aimed at games, but can also be used for other purposes like debugging applications and used in schools for teaching how computers work
+- [**108**星][7m] [C++] [ez8-co/yapi](https://github.com/ez8-co/yapi) fusion injector that reduce differences between x64, wow64 and x86 processes
+- [**108**星][7m] [Py] [evilsocket/ergo-pe-av](https://github.com/evilsocket/ergo-pe-av) 🧠 🦠 An artificial neural network and API to detect Windows malware, based on Ergo and LIEF.
- [**108**星][3y] [C] [emptymonkey/shelljack](https://github.com/emptymonkey/shelljack) A keystroke / terminal logger for Linux.
- [**108**星][4m] [Haxe] [empirectf/empirectf](https://github.com/empirectf/empirectf) EmpireCTF – write-ups, videos, capture the flag, cybersecurity
-- [**108**星][3m] [JS] [elkentaro/kismetmobiledashboard](https://github.com/elkentaro/kismetmobiledashboard) Mobile UI for kismet
-- [**108**星][3y] [HTML] [dxa4481/xssjacking](https://github.com/dxa4481/xssjacking) Abusing Self-XSS and Clickjacking to trigger XSS
-- [**108**星][5m] [C++] [danielcardeenas/audiostego](https://github.com/danielcardeenas/audiostego) Audio file steganography. Hides files or text inside audio files and retrieve them automatically
- [**108**星][2y] [Vim script] [chr4/sslsecure.vim](https://github.com/chr4/sslsecure.vim) Highlight insecure SSL configuration in Vim (works for all OpenSSL/ LibreSSL cipher strings, independent of the filetype)
-- [**108**星][1m] [Py] [bishopfox/zigdiggity](https://github.com/bishopfox/zigdiggity) A ZigBee hacking toolkit by Bishop Fox
-- [**108**星][2y] [C] [b-mueller/frida-detection-demo](https://github.com/b-mueller/frida-detection-demo) Some examples for detecting frida on Android
-- [**108**星][6m] [Py] [anssi-fr/bmc-tools](https://github.com/anssi-fr/bmc-tools) RDP Bitmap Cache parser
-- [**108**星][3m] [Py] [altjx/ipwn](https://github.com/altjx/ipwn)
-- [**107**星][14d] [paralax/awesome-cybersecurity-internships](https://github.com/paralax/awesome-cybersecurity-internships) a list of cybersecurity internships
-- [**107**星][6y] [Objective-C] [colemancda/wi-fi-crack](https://github.com/colemancda/wi-fi-crack) OS X GUI for Aircrack-NG
-- [**107**星][12m] [C] [fsecurelabs/xrulez](https://github.com/FSecureLABS/XRulez) A command line tool for creating malicious outlook rules
-- [**107**星][3y] [vidar-team/hctf2016](https://github.com/vidar-team/HCTF2016) HCTF 2016 CHALLENGES
-- [**107**星][7m] [Py] [w-digital-scanner/w12scan-client](https://github.com/w-digital-scanner/w12scan-client) 网络资产搜索发现引擎,w12scan 扫描端程序
-- [**107**星][30d] [Objective-C] [zydeco/aah](https://github.com/zydeco/aah) arm64 architecture handler
+- [**108**星][7m] [binject/awesome-go-security](https://github.com/binject/awesome-go-security) A dedicated place for cool golang security projects
+- [**107**星][17d] [paralax/awesome-cybersecurity-internships](https://github.com/paralax/awesome-cybersecurity-internships) a list of cybersecurity internships
+- [**107**星][2d] [internetwache/ct_subdomains](https://github.com/internetwache/ct_subdomains) An hourly updated list of subdomains gathered from certificate transparency logs
+- [**107**星][6m] [PS] [dafthack/check-localadminhash](https://github.com/dafthack/check-localadminhash) Check-LocalAdminHash is a PowerShell tool that attempts to authenticate to multiple hosts over either WMI or SMB using a password hash to determine if the provided credential is a local administrator. It's useful if you obtain a password hash for a user and want to see where they are local admin on a network. It is essentially a Frankenstein of …
+- [**107**星][19d] [firmianay/security-paper](https://github.com/firmianay/security-paper) (与本人兴趣强相关的)各种安全or计算机资料收集
+- [**107**星][14d] [Shell] [g666gle/basequery](https://github.com/g666gle/basequery) BaseQuery is a way to organize public combo-lists and data breaches in a way that you can easily search through everything
+- [**107**星][4m] [Py] [xzkzdx/weixin-spider](https://github.com/xzkzdx/weixin-spider) 微信公众号爬虫,公众号历史文章,文章评论,文章阅读及在看数据,可视化web页面,可部署于Windows服务器。基于Python3之flask/mysql/redis/mitmproxy/pywin32等实现,高效微信爬虫,微信公众号爬虫,历史文章,文章评论,数据更新。
+- [**107**星][6y] [ObjC] [colemancda/wi-fi-crack](https://github.com/colemancda/wi-fi-crack) OS X GUI for Aircrack-NG
+- [**107**星][1m] [ObjC] [zydeco/aah](https://github.com/zydeco/aah) arm64 architecture handler
- [**107**星][2y] [Shell] [xillwillx/cactustorch_ddeauto](https://github.com/xillwillx/cactustorch_ddeauto) OFFICE DDEAUTO Payload Generation script
- [**107**星][1y] [PHP] [walkor/php-http-proxy](https://github.com/walkor/php-http-proxy) HTTP proxy written in PHP based on workerman.
-- [**107**星][11m] [Py] [w3h/isf](https://github.com/w3h/isf) ISF(Industrial Security Exploitation Framework) is a exploitation framework based on Python.
- [**107**星][6m] [Swift] [tuluobo/leiter](https://github.com/tuluobo/leiter) 一个基于 NEKit 的网络 Proxy App。
- [**107**星][3y] [C++] [timeweb/ddosdetector](https://github.com/timeweb/ddosdetector) A flexible tool for analyzing network traffic and automation of the process of protection against DDoS attacks.
- [**107**星][11m] [C++] [sidechannelmarvels/daredevil](https://github.com/sidechannelmarvels/daredevil) A tool to perform (higher-order) correlation power analysis attacks (CPA).
+- [**107**星][5m] [JS] [ryanmarcus/dirty-json](https://github.com/ryanmarcus/dirty-json) A parser for invalid JSON
- [**107**星][9m] [Emacs Lisp] [rubocop-hq/rubocop-emacs](https://github.com/rubocop-hq/rubocop-emacs) An Emacs interface for RuboCop
-- [**107**星][7m] [Shell] [rpranshu/eternalview](https://github.com/rpranshu/eternalview) EternalView is an all in one basic information gathering and vulnerability assessment tool
-- [**107**星][8m] [Py] [rootbsd/fridump3](https://github.com/rootbsd/fridump3) A universal memory dumper using Frida for Python 3
-- [**107**星][6m] [PowerShell] [r4wd3r/rid-hijacking](https://github.com/r4wd3r/rid-hijacking) Windows RID Hijacking persistence technique
+- [**107**星][8m] [Shell] [rpranshu/eternalview](https://github.com/rpranshu/eternalview) EternalView is an all in one basic information gathering and vulnerability assessment tool
+- [**107**星][6m] [PS] [r4wd3r/rid-hijacking](https://github.com/r4wd3r/rid-hijacking) Windows RID Hijacking persistence technique
+- [**107**星][2y] [Ruby] [porterhau5/bloodhound-owned](https://github.com/porterhau5/bloodhound-owned) A collection of files for adding and leveraging custom properties in BloodHound.
- [**107**星][1y] [pgarba/switchidaproloader](https://github.com/pgarba/switchidaproloader) Loader for IDA Pro to support the Nintendo Switch NRO binaries
+- [**107**星][2m] [JS] [p3nt4/nuages](https://github.com/p3nt4/nuages) A modular C2 framework
+- [**107**星][1y] [PS] [p3nt4/invoke-tmpdavfs](https://github.com/p3nt4/invoke-tmpdavfs) Memory Backed Powershell WebDav Server
+- [**107**星][3y] [C#] [p0cl4bs/hanzoinjection](https://github.com/p0cl4bs/hanzoinjection) injecting arbitrary codes in memory to bypass common antivirus solutions
- [**107**星][2y] [Py] [orsinium/django-bruteforce-protection](https://github.com/orsinium/django-bruteforce-protection) Bruteforce protection for Django projects based on Redis. Simple, powerful, extendable.
- [**107**星][1y] [JS] [offdev/zwsp-steg-js](https://github.com/offdev/zwsp-steg-js) 零宽度空间隐写术, 将隐藏的消息编码/解码为不可打印/可读的字符
-- [**107**星][17d] [Py] [nasa/pvslib](https://github.com/nasa/pvslib) NASA PVS Library of Formal Developments
+- [**107**星][19d] [Py] [nasa/pvslib](https://github.com/nasa/pvslib) NASA PVS Library of Formal Developments
- [**107**星][8m] [C] [mudongliang/linuxflaw](https://github.com/mudongliang/linuxflaw) This repo records all the vulnerabilities of linux software I have reproduced in my local workspace
- [**107**星][5y] [Py] [mspreitz/adel](https://github.com/mspreitz/adel) dumps all important SQLite Databases from a connected Android smartphone to the local disk and analyzes these files in a forensically accurate workflow
- [**107**星][4y] [Py] [mozilla/garmr](https://github.com/mozilla/garmr) inspect the responses from websites for basic security requirements.
- [**107**星][4y] [Py] [mit-ll/ll-fuzzer](https://github.com/mit-ll/ll-fuzzer) An automated NFC fuzzing framework for Android devices.
-- [**107**星][26d] [Py] [misp/misp-warninglists](https://github.com/misp/misp-warninglists) Warning lists to inform users of MISP about potential false-positives or other information in indicators
+- [**107**星][28d] [Py] [misp/misp-warninglists](https://github.com/misp/misp-warninglists) Warning lists to inform users of MISP about potential false-positives or other information in indicators
- [**107**星][4y] [Py] [mdegrazia/sqlite-deleted-records-parser](https://github.com/mdegrazia/sqlite-deleted-records-parser) recover deleted entries in an SQLite database and places the output into either a TSV file or text file (-r)
- [**107**星][3m] [C#] [matterpreter/shhmon](https://github.com/matterpreter/shhmon) Neutering Sysmon via driver unload
- [**107**星][5y] [C] [malwaretech/tinyxpb](https://github.com/malwaretech/tinyxpb) Windows XP 32-Bit Bootkit
- [**107**星][1y] [Py] [lizhongnian/btpanel-ss](https://github.com/lizhongnian/btpanel-ss) 基于宝塔Linux面板的shadowsocks可视化管理插件,本人博客,欢迎大家指导
+- [**107**星][3d] [JS] [liyangready/mini-proxy](https://github.com/liyangready/mini-proxy) A very mini transparent proxy for http/https by NodeJS.Just like squid. 基于nodejs的迷你易用的proxy
- [**107**星][3y] [liuchenx/surgeconfig](https://github.com/liuchenx/surgeconfig) surge app shadowsocks config
- [**107**星][7m] [Py] [leoid/cve-2019-0708](https://github.com/leoid/cve-2019-0708) Only Hitting PoC [Tested on Windows Server 2008 r2]
+- [**107**星][10d] [lattera/articles](https://github.com/lattera/articles) Various articles I've written
- [**107**星][11m] [Py] [koush/efi-x99](https://github.com/koush/efi-x99) Hackintosh Guide: Gigabyte X99P-SLI, Intel 6950X, Nvidia Titan Xp
- [**107**星][2y] [Go] [jthomas/serverless-pwned-passwords](https://github.com/jthomas/serverless-pwned-passwords) serverless-pwned-passwords:提供了1个API,用于从各种数据泄漏的巨大密码库中检查潜在密码
+- [**107**星][3y] [ios-reverse-engineering-dev/swift-apps-reverse-engineering](https://github.com/ios-reverse-engineering-dev/swift-apps-reverse-engineering) Swift Apps Reverse Engineering reading book
- [**107**星][5y] [C] [ioactive/melkor_elf_fuzzer](https://github.com/ioactive/melkor_elf_fuzzer) Melkor is a very intuitive and easy-to-use ELF file format fuzzer to find functional and security bugs in ELF parsers.
- [**107**星][2y] [Java] [realbearcat/oracle-weblogic-cve-2017-10271](https://github.com/RealBearcat/Oracle-WebLogic-CVE-2017-10271) WebLogic Wls-wsat XMLDecoder 反序列化
-- [**107**星][6m] [C++] [ez8-co/yapi](https://github.com/ez8-co/yapi) fusion injector that reduce differences between x64, wow64 and x86 processes
-- [**107**星][10m] [Py] [ekultek/graffiti](https://github.com/ekultek/graffiti) A tool to generate obfuscated one liners to aid in penetration testing
+- [**107**星][11m] [hongrisec/ai-machine-learning-security](https://github.com/hongrisec/ai-machine-learning-security) 一个关于人工智能渗透测试分析系列
+- [**107**星][2y] [C] [holbertonschool/hack-the-virtual-memory](https://github.com/holbertonschool/hack-the-virtual-memory) This is a series of small articles / tutorials based around virtual memory. The goal is to learn some CS basics, but in a different and more practical way.
+- [**107**星][1m] [Py] [ethereum/eth-tester](https://github.com/ethereum/eth-tester) Tool suite for testing ethereum applications.
- [**107**星][1y] [Py] [egaus/maliciousmacrobot](https://github.com/egaus/maliciousmacrobot) Malicious Macro Bot Project
-- [**107**星][1y] [Java] [despector/despector](https://github.com/despector/despector) Java / Kotlin Decompiler and AST Library
-- [**107**星][2m] [Py] [danielplohmann/apiscout](https://github.com/danielplohmann/apiscout) 简化导入API恢复。可以从内存中恢复API信息。包含命令行版本和IDA插件。可以处理PE头被抹掉等ImpRec/ImpRec无法处理的情况。
+- [**107**星][2y] [JS] [eboda/34c3ctf](https://github.com/eboda/34c3ctf) Challenge Sources & Exploits for the 34C3 CTF
+- [**107**星][6m] [C#] [dannythesloth/vanillarat](https://github.com/dannythesloth/vanillarat) VanillaRat is an advanced remote administration tool completely coded in C# for Windows.
+- [**107**星][4d] [Py] [danielplohmann/apiscout](https://github.com/danielplohmann/apiscout) 简化导入API恢复。可以从内存中恢复API信息。包含命令行版本和IDA插件。可以处理PE头被抹掉等ImpRec/ImpRec无法处理的情况。
+- [**107**星][16d] [HTML] [cj123/canijailbreak.com](https://github.com/cj123/canijailbreak.com) a website which tells you whether you can jailbreak your iOS device.
- [**107**星][7m] [Java] [c0d3p1ut0s/cve-2019-12086-jackson-databind-file-read](https://github.com/c0d3p1ut0s/cve-2019-12086-jackson-databind-file-read)
+- [**107**星][2d] [PHP] [blackhacker511/blacknet](https://github.com/blackhacker511/blacknet) Free Advanced Windows BotNET with Secure PHP Panel
- [**107**星][4m] [Py] [atlas0fd00m/cancat](https://github.com/atlas0fd00m/cancat) swiss army knife of Controller Area Networks (CAN) often used in cars and building automation, etc...
-- [**106**星][9d] [Py] [vulhub/metadockers](https://github.com/vulhub/metadockers) Responsible for visualization the vulhub and docker
-- [**106**星][12d] [portswigger/xss-cheatsheet-data](https://github.com/portswigger/xss-cheatsheet-data) This repository contains all the XSS cheatsheet data to allow contributions from the community.
-- [**106**星][3m] [suricata-rules/suricata-rules](https://github.com/suricata-rules/suricata-rules) Suricata IDS rules
+- [**107**星][4d] [Shell] [anandkumar11u/oscp-60days](https://github.com/anandkumar11u/oscp-60days) OSCP All Tools are Here ...!! ***
+- [**106**星][11m] [Swift] [lettleprince/qladder](https://github.com/lettleprince/qladder) QLadder is a project for iOS client. It uses shadowsocks as server-side.
+- [**106**星][11d] [Py] [vulhub/metadockers](https://github.com/vulhub/metadockers) Responsible for visualization the vulhub and docker
+- [**106**星][18d] [Java] [astrelsky/ghidra-cpp-class-analyzer](https://github.com/astrelsky/ghidra-cpp-class-analyzer) Ghidra C++ Class and Run Time Type Information Analyzer
+- [**106**星][2y] [Py] [cylance/introductiontomachinelearningforsecuritypros](https://github.com/cylance/IntroductionToMachineLearningForSecurityPros) 书的示例代码:Introduction to Artificial Intelligence for Security Professionals
+- [**106**星][3y] [Py] [opensourcesec/cirtkit](https://github.com/opensourcesec/CIRTKit) Tools for the Computer Incident Response Team
- [**106**星][2y] [C++] [zerosum0x0/puppetstrings](https://github.com/zerosum0x0/puppetstrings) Hitch a free ride to Ring 0 on Windows
- [**106**星][4y] [C] [xobs/fernly](https://github.com/xobs/fernly) a simple operating system designed for use in the reverse engineering of the Fernvale CPU
- [**106**星][2y] [Py] [xme/toolbox](https://github.com/xme/toolbox) Miscelaneous useful scripts for my day to day projects
- [**106**星][9m] [webbreacher/orcs](https://github.com/webbreacher/orcs) OSINT Resource Classification System
- [**106**星][6y] [Py] [uber/py-find-injection](https://github.com/uber/py-find-injection) Look for SQL injection attacks in python source code
+- [**106**星][17d] [Py] [testerting/hacker101-ctf](https://github.com/testerting/hacker101-ctf) Hacker101 CTF Writeup
+- [**106**星][3m] [C++] [tandasat/simplesvmhook](https://github.com/tandasat/simplesvmhook) SimpleSvmHook is a research purpose hypervisor for Windows on AMD processors.
+- [**106**星][2y] [Py] [sparksharly/dl_for_xss](https://github.com/sparksharly/dl_for_xss) Deep learnning for detection with xss
- [**106**星][2y] [Py] [shogunlab/shuriken](https://github.com/shogunlab/shuriken) Cross-Site Scripting (XSS) command line tool for testing lists of XSS payloads on web apps.
-- [**106**星][26d] [Java] [sable/heros](https://github.com/sable/heros) IFDS/IDE Solver for Soot
-- [**106**星][5m] [JS] [ryanmarcus/dirty-json](https://github.com/ryanmarcus/dirty-json) A parser for invalid JSON
+- [**106**星][28d] [Java] [sable/heros](https://github.com/sable/heros) IFDS/IDE Solver for Soot
- [**106**星][4y] [C] [rootkitsmm/win32k-fuzzer](https://github.com/rootkitsmm/win32k-fuzzer) Fuzz and Detect "Use After Free" vulnerability in win32k.sys ( Heap based )
-- [**106**星][2y] [Ruby] [porterhau5/bloodhound-owned](https://github.com/porterhau5/bloodhound-owned) A collection of files for adding and leveraging custom properties in BloodHound.
-- [**106**星][2m] [Assembly] [platypew/picoctf-2018-writeup](https://github.com/platypew/picoctf-2018-writeup) Writeup for picoCTF 2018
-- [**106**星][2m] [JS] [p3nt4/nuages](https://github.com/p3nt4/nuages) A modular C2 framework
-- [**106**星][1y] [PowerShell] [p3nt4/invoke-tmpdavfs](https://github.com/p3nt4/invoke-tmpdavfs) Memory Backed Powershell WebDav Server
-- [**106**星][2y] [Py] [mozilla/django-session-csrf](https://github.com/mozilla/django-session-csrf) CSRF protection for Django without cookies.
-- [**106**星][6m] [Py] [matiskay/html-similarity](https://github.com/matiskay/html-similarity) Compare html similarity using structural and style metrics
+- [**106**星][2m] [PHP] [realender/dwpa](https://github.com/realender/dwpa) Distributed WPA PSK auditor
+- [**106**星][12d] [Py] [pavelrevak/pystlink](https://github.com/pavelrevak/pystlink) Python tool for flashing and debugging STM32 devices using ST-LINK/V2
+- [**106**星][2m] [Py] [neatmonster/amie](https://github.com/neatmonster/amie) 针对ARM架构的`FRIEND`插件, 文档增强
+- [**106**星][4y] [Go] [mattbostock/go-ldpreload-backdoor](https://github.com/mattbostock/go-ldpreload-backdoor) LD_PRELOAD libc hooking using Go
- [**106**星][4y] [Py] [mapleray/proxy_pool](https://github.com/mapleray/proxy_pool) python 代理池
-- [**106**星][5m] [C++] [mactec0/kernelmode-manual-mapping-through-iat](https://github.com/mactec0/kernelmode-manual-mapping-through-iat) Manual mapping without creating any threads, with rw only access
- [**106**星][3y] [Py] [lingerhk/fshell](https://github.com/lingerhk/fshell) 基于机器学习的分布式webshell检测系统
-- [**106**星][8d] [lattera/articles](https://github.com/lattera/articles) Various articles I've written
- [**106**星][4y] [C] [kohsuke/com4j](https://github.com/kohsuke/com4j) Type-safe Java/COM binding
- [**106**星][6y] [Java] [isecpartners/android-opendebug](https://github.com/isecpartners/android-opendebug) Make any application debuggable
-- [**106**星][11m] [hongrisec/ai-machine-learning-security](https://github.com/hongrisec/ai-machine-learning-security) 一个关于人工智能渗透测试分析系列
-- [**106**星][2y] [C] [holbertonschool/hack-the-virtual-memory](https://github.com/holbertonschool/hack-the-virtual-memory) This is a series of small articles / tutorials based around virtual memory. The goal is to learn some CS basics, but in a different and more practical way.
-- [**106**星][2y] [Py] [hansesecure/exploitdev](https://github.com/hansesecure/exploitdev)
-- [**106**星][14d] [Py] [hanc00l/some_pocsuite](https://github.com/hanc00l/some_pocsuite) 用于漏洞排查的pocsuite3验证POC代码
+- [**106**星][2m] [Py] [ickerwx/tcpproxy](https://github.com/ickerwx/tcpproxy) Intercepting TCP proxy to modify raw TCP streams using modules on incoming or outgoing traffic
+- [**106**星][16d] [Py] [hanc00l/some_pocsuite](https://github.com/hanc00l/some_pocsuite) 用于漏洞排查的pocsuite3验证POC代码
- [**106**星][2y] [Py] [guedou/jupyter-radare2](https://github.com/guedou/jupyter-radare2) Just a simple radare2 Jupyter kernel
- [**106**星][5m] [Py] [graph-x/davscan](https://github.com/graph-x/davscan) Fingerprints servers, finds exploits, scans WebDAV. May or may not also make coffee.
- [**106**星][2m] [Perl] [gottburgm/exploits](https://github.com/gottburgm/exploits) Containing Self Made Perl Reproducers / PoC Codes
- [**106**星][12m] [JS] [fpass/fpass](https://github.com/fpass/fpass) 类似于 LastPass的密码管理工具
- [**106**星][1m] [Py] [flosell/trailscraper](https://github.com/flosell/trailscraper) A command-line tool to get valuable information out of AWS CloudTrail
-- [**106**星][16d] [Pascal] [fenix01/cheatengine-library](https://github.com/fenix01/cheatengine-library) Cheat Engine Library is based on CheatEngine a debugger and coding environment particularly aimed at games, but can also be used for other purposes like debugging applications and used in schools for teaching how computers work
- [**106**星][4y] [Perl] [fastvpseestiou/antidoto](https://github.com/fastvpseestiou/antidoto) Linux antimalware and antirootkit tool
- [**106**星][2y] [Py] [falseen/pysocket](https://github.com/falseen/pysocket) 通过monkey patch动态修改 socket 的项目。在不修改源码的情况下给 socket 增加一些诸如限制客户端数量、前置代理之类的功能。让我们将 Monkey Patch 进行到底吧!
- [**106**星][3y] [Py] [fail0verflow/radeon-tools](https://github.com/fail0verflow/radeon-tools) Radeon reverse engineering tools
-- [**106**星][7m] [Py] [evilsocket/ergo-pe-av](https://github.com/evilsocket/ergo-pe-av) 🧠 🦠 An artificial neural network and API to detect Windows malware, based on Ergo and LIEF.
-- [**106**星][1m] [Py] [ethereum/eth-tester](https://github.com/ethereum/eth-tester) Tool suite for testing ethereum applications.
-- [**106**星][2y] [JS] [eboda/34c3ctf](https://github.com/eboda/34c3ctf) Challenge Sources & Exploits for the 34C3 CTF
- [**106**星][2m] [Ruby] [dev-sec/ansible-mysql-hardening](https://github.com/dev-sec/ansible-mysql-hardening) This Ansible role provides security configuration for MySQL.
- [**106**星][3m] [C++] [comaeio/hibr2bin](https://github.com/comaeio/hibr2bin) Comae Hibernation File Decompressor
- [**106**星][2y] [Java] [caledoniaproject/cve-2018-1270](https://github.com/caledoniaproject/cve-2018-1270) Spring messaging STOMP protocol RCE
- [**106**星][3y] [JS] [boy-hack/webshellmanager](https://github.com/boy-hack/webshellmanager) w8ay 一句话WEB端管理工具
-- [**106**星][3m] [Go] [bnagy/gapstone](https://github.com/bnagy/gapstone) gapstone is a Go binding for the capstone disassembly library
-- [**106**星][3y] [PowerShell] [ben0xa/powershelldefense](https://github.com/ben0xa/powershelldefense) Some PowerShell Defensive Scripts
+- [**106**星][4m] [Go] [bnagy/gapstone](https://github.com/bnagy/gapstone) gapstone is a Go binding for the capstone disassembly library
+- [**106**星][3y] [PS] [ben0xa/powershelldefense](https://github.com/ben0xa/powershelldefense) Some PowerShell Defensive Scripts
- [**106**星][2y] [Shell] [b3rito/yotter](https://github.com/b3rito/yotter) Bash 脚本, 执行侦察,然后使用 dirb 发现可能导致信息泄露的目录
- [**106**星][3y] [JS] [attekett/nodefuzz](https://github.com/attekett/nodefuzz)
+- [**106**星][2y] [Py] [anbai-inc/cve-2018-4878](https://github.com/anbai-inc/cve-2018-4878) CVE-2018-4878 样本
- [**106**星][2m] [ajvb/awesome-tor](https://github.com/ajvb/awesome-tor) A list of awesome Tor related projects, articles, papers, etc
- [**106**星][8m] [Py] [ajinabraham/webappsec](https://github.com/ajinabraham/webappsec) Web Application Security
- [**106**星][3y] [Py] [aeondave/doork](https://github.com/aeondave/doork) Passive Vulnerability Auditor
- [**106**星][1y] [Py] [aboutsecurity/rastrea2r](https://github.com/aboutsecurity/rastrea2r) Collecting & Hunting for IOCs with gusto and style
- [**106**星][6m] [CSS] [0xitx/ida_nightfall](https://github.com/0xitx/ida_nightfall) 黑色主题插件
-- [**105**星][7d] [internetwache/ct_subdomains](https://github.com/internetwache/ct_subdomains) An hourly updated list of subdomains gathered from certificate transparency logs
+- [**105**星][3y] [Py] [hanc00l/captcha-python-test](https://github.com/hanc00l/captcha-python-test) 学习验证码识别的相关技术,包括opencv、tesseract、机器学习算法(kNN和SVM)等,将原作者的算法改为python
- [**105**星][10m] [Py] [ehco1996/shadowsocksr-deprecated](https://github.com/ehco1996/shadowsocksr-deprecated) ssr mod version for django-sspanel
-- [**105**星][8d] [CSS] [woj-ciech/kamerka-gui](https://github.com/woj-ciech/kamerka-gui) Ultimate Internet of Things/Industrial Control Systems reconnaissance tool.
+- [**105**星][1m] [Py] [0ang3el/websocket-smuggle](https://github.com/0ang3el/websocket-smuggle) Issues with WebSocket reverse proxying allowing to smuggle HTTP requests
- [**105**星][1m] [C++] [josh0xa/threadboat](https://github.com/josh0xA/ThreadBoat) Program uses Thread Execution Hijacking to Inject Native Shellcode into a Standard Win32 Application
-- [**105**星][3y] [Py] [opensourcesec/cirtkit](https://github.com/opensourcesec/CIRTKit) Tools for the Computer Incident Response Team
+- [**105**星][4m] [w-digital-scanner/w10scan](https://github.com/w-digital-scanner/w10scan) 全自动搜索互联网漏洞
+- [**105**星][2m] [Py] [vstinner/python-ptrace](https://github.com/vstinner/python-ptrace) a debugger using ptrace (Linux, BSD and Darwin system call to trace processes) written in Python
- [**105**星][1y] [JS] [phishai/phish-protect](https://github.com/phishai/phish-protect) 警报并可能阻止IDN/Unicode域名的网站
- [**105**星][5y] [C] [yurushao/droid_injectso](https://github.com/yurushao/droid_injectso) A shared libraries injection tool.
-- [**105**星][21d] [C++] [thomasdullien/heap_history_viewer](https://github.com/thomasdullien/heap_history_viewer) A program to draw rectangles from heap traces.
+- [**105**星][14d] [Go] [virustotal/vt-cli](https://github.com/virustotal/vt-cli) VirusTotal Command Line Interface
+- [**105**星][2y] [Py] [tkcert/testssl.sh-webfrontend](https://github.com/tkcert/testssl.sh-webfrontend) Web Frontend for testssl.sh
+- [**105**星][23d] [C++] [thomasdullien/heap_history_viewer](https://github.com/thomasdullien/heap_history_viewer) A program to draw rectangles from heap traces.
- [**105**星][3y] [Py] [tengzhangchao/struts2_045-poc](https://github.com/tengzhangchao/struts2_045-poc) Struts2-045 POC
-- [**105**星][2y] [Py] [sparksharly/dl_for_xss](https://github.com/sparksharly/dl_for_xss) Deep learnning for detection with xss
+- [**105**星][20d] [Py] [t0thkr1s/revshellgen](https://github.com/t0thkr1s/revshellgen) Reverse shell generator written in Python.
+- [**105**星][16d] [Shell] [spf-tools/spf-tools](https://github.com/spf-tools/spf-tools) Shell scripts for taming the SPF (Sender Policy Framework) records in order to fight 10-maximum-DNS-look-ups limit.
+- [**105**星][3m] [soffensive/windowsblindread](https://github.com/soffensive/windowsblindread) A list of files / paths to probe when arbitrary files can be read on a Microsoft Windows operating system
- [**105**星][1y] [Py] [shizzz477/msploitego](https://github.com/shizzz477/msploitego) 将Metasploit数据库导入到数据挖掘工具Maltego并进行分析的框架
- [**105**星][6y] [Py] [secretsquirrel/recomposer](https://github.com/secretsquirrel/recomposer) Randomly changes Win32/64 PE Files for 'safer' uploading to malware and sandbox sites.
- [**105**星][4y] [C++] [secmob/pocforcve-2015-1528](https://github.com/secmob/pocforcve-2015-1528) I'll submit the poc after blackhat
- [**105**星][3y] [Py] [saferman/cupper](https://github.com/saferman/cupper) 社工密码生成器
- [**105**星][10m] [PHP] [rub-nds/metadata-attacker](https://github.com/rub-nds/metadata-attacker) A tool to generate media files with malicious metadata
-- [**105**星][1m] [C] [rohanpadhye/fuzzfactory](https://github.com/rohanpadhye/fuzzfactory) Domain-Specific Fuzzing with Waypoints
-- [**105**星][5m] [Py] [roglew/guppy-proxy](https://github.com/roglew/guppy-proxy) 用于WebApp安全测试的拦截代理(intercepting proxy)
+- [**105**星][6m] [Py] [roglew/guppy-proxy](https://github.com/roglew/guppy-proxy) 用于WebApp安全测试的拦截代理(intercepting proxy)
- [**105**星][4y] [Java] [rednaga/dexhook](https://github.com/rednaga/dexhook) DexHook is a xposed module for capturing dynamically loaded dex files.
- [**105**星][1y] [Py] [redlectroid/overthruster](https://github.com/redlectroid/overthruster) HID attack payload generator for Arduinos
+- [**105**星][9m] [C++] [quarkslab/android-restriction-bypass](https://github.com/quarkslab/android-restriction-bypass) PoC to bypass Android restrictions
- [**105**星][3y] [Py] [picoctf/picoctf-platform-2](https://github.com/picoctf/picoctf-platform-2) A genericized version of picoCTF 2014 that can be easily adapted to host CTF or programming competitions.
- [**105**星][3y] [Py] [phith0n/python-xss-filter](https://github.com/phith0n/python-xss-filter) Based on native Python module HTMLParser purifier of HTML, To Clear all javascript in html
-- [**105**星][3y] [C#] [p0cl4bs/hanzoinjection](https://github.com/p0cl4bs/hanzoinjection) injecting arbitrary codes in memory to bypass common antivirus solutions
-- [**105**星][1m] [Py] [neatmonster/amie](https://github.com/neatmonster/amie) 针对ARM架构的`FRIEND`插件, 文档增强
+- [**105**星][11d] [ObjC] [objective-see/processmonitor](https://github.com/objective-see/processmonitor) Process Monitor Library (based on Apple's new Endpoint Security Framework)
+- [**105**星][2y] [Shell] [niclet/yi-hack-v2](https://github.com/niclet/yi-hack-v2) Xiaomi Yi Ants Camera 2 hack
- [**105**星][3m] [Ruby] [naxg/cve_2019_0708_bluekeep_rce](https://github.com/naxg/cve_2019_0708_bluekeep_rce) bluekeep exploit
+- [**105**星][2y] [Py] [mozilla/django-session-csrf](https://github.com/mozilla/django-session-csrf) CSRF protection for Django without cookies.
- [**105**星][1y] [TeX] [monero-project/research-lab](https://github.com/monero-project/research-lab) A general repo for Monero Research Lab work in progress and completed work
+- [**105**星][1y] [mitre/brawl-public-game-001](https://github.com/mitre/brawl-public-game-001) Data from a BRAWL Automated Adversary Emulation Exercise
- [**105**星][3y] [Java] [mindmac/intentfuzzer](https://github.com/mindmac/intentfuzzer) A Tool to fuzz Intent on Android
- [**105**星][2y] [Go] [mhmdiaa/second-order](https://github.com/mhmdiaa/second-order) 爬取web app, 收集 URL, 扫描second-order 子域名接管
-- [**105**星][4y] [Go] [mattbostock/go-ldpreload-backdoor](https://github.com/mattbostock/go-ldpreload-backdoor) LD_PRELOAD libc hooking using Go
- [**105**星][1y] [HTML] [lz1y/cve-2018-8420](https://github.com/lz1y/cve-2018-8420) 原PoC甚至符号都打错了!太不走心了!
-- [**105**星][6m] [PowerShell] [leeberg/bluehive](https://github.com/leeberg/bluehive) PowerShell based Active Directory Honey User Account Management with Universal Dashboards
+- [**105**星][14d] [leomaurodesenv/game-datasets](https://github.com/leomaurodesenv/game-datasets)
+- [**105**星][6m] [PS] [leeberg/bluehive](https://github.com/leeberg/bluehive) PowerShell based Active Directory Honey User Account Management with Universal Dashboards
- [**105**星][2y] [Py] [kkirsche/cve-2017-10271](https://github.com/kkirsche/cve-2017-10271) Oracle WebLogic WLS-WSAT Remote Code Execution Exploit (CVE-2017-10271)
-- [**105**星][3y] [ios-reverse-engineering-dev/swift-apps-reverse-engineering](https://github.com/ios-reverse-engineering-dev/swift-apps-reverse-engineering) Swift Apps Reverse Engineering reading book
- [**105**星][7y] [intrepidusgroup/trustme](https://github.com/intrepidusgroup/trustme) Disable certificate trust checks on iOS devices.
+- [**105**星][2y] [Java] [ggrandes/bouncer](https://github.com/ggrandes/bouncer) Bouncer is a network TCP port redirector/forward proxy (like rinetd) with extra features like Reverse tunneling (like ssh -R), SSL tunneling (like stunnel), connection Failover, LoadBalancing and Clustering. In pure Java (BIO)
+- [**105**星][2y] [C] [formyown/alesense-antivirus](https://github.com/formyown/alesense-antivirus) 一款拥有完整交互界面与驱动级拦截能力的开源杀毒软件
- [**105**星][5y] [Py] [fooying/3102](https://github.com/fooying/3102) A domain/ip fuzzing tool for vulnerability mining
- [**105**星][4m] [Py] [ex16x41/oscp-prep](https://github.com/ex16x41/oscp-prep) my oscp prep collection
- [**105**星][2y] [Py] [danigargu/idatropy](https://github.com/danigargu/idatropy) 使用idapython和matplotlib的功能生成熵和直方图的图表
-- [**105**星][14d] [HTML] [cj123/canijailbreak.com](https://github.com/cj123/canijailbreak.com) a website which tells you whether you can jailbreak your iOS device.
- [**105**星][2y] [Ruby] [chrisallenlane/watchtower](https://github.com/chrisallenlane/watchtower) Watchtower is a Static Code Analysis tool designed to assist security auditors who are tasked with performing manual code reviews. It is platform- and language-agnostic.
-- [**105**星][7m] [binject/awesome-go-security](https://github.com/binject/awesome-go-security) A dedicated place for cool golang security projects
+- [**105**星][1m] [Java] [c0ny1/sqlmap4burp-plus-plus](https://github.com/c0ny1/sqlmap4burp-plus-plus) sqlmap4burp++是一款兼容Windows,mac,linux多个系统平台的Burp与sqlmap联动插件
- [**105**星][1y] [Py] [binarydefense/goatrider](https://github.com/binarydefense/goatrider) GoatRider is a simple tool that will dynamically pull down Artillery Threat Intelligence Feeds, TOR, AlienVaults OTX, and the Alexa top 1 million websites and do a comparison to a hostname file or IP file.
- [**105**星][3m] [Py] [armijnhemel/binaryanalysis-ng](https://github.com/armijnhemel/binaryanalysis-ng) Binary Analysis Next Generation (BANG)
-- [**105**星][2y] [Py] [anbai-inc/cve-2018-4878](https://github.com/anbai-inc/cve-2018-4878) CVE-2018-4878 样本
+- [**105**星][1y] [Py] [5alt/ultrarelay](https://github.com/5alt/ultrarelay) poison and relay NTLM credentials
- [**105**星][3y] [Py] [3gstudent/smbtouch-scanner](https://github.com/3gstudent/smbtouch-scanner) Automatically scan the inner network to detect whether they are vulnerable.
+- [**105**星][3m] [Py] [0xdezzy/cve-2019-11539](https://github.com/0xdezzy/cve-2019-11539) Exploit for the Post-Auth RCE vulnerability in Pulse Secure Connect
+- [**104**星][2y] [Ruby] [axsuul/rails-reverse-proxy](https://github.com/axsuul/rails-reverse-proxy) A reverse proxy for Ruby on Rails
+- [**104**星][5m] [Py] [kibodwapon/axis-1.4-rce-poc](https://github.com/kibodwapon/axis-1.4-rce-poc) Axis <=1.4 远程命令执行(RCE) POC
+- [**104**星][10m] [Py] [thelinuxchoice/pyrat](https://github.com/thelinuxchoice/pyrat) Windows Remote Administration Tool (RAT)
+- [**104**星][3d] [Go] [inlets/inletsctl](https://github.com/inlets/inletsctl) Fast HTTP (L7) and TCP (L4) tunnels written in Go
- [**104**星][11m] [Java] [varunon9/remote-control-pc](https://github.com/varunon9/remote-control-pc) Control Laptop using Android. Remote control PC consists of android as well as desktop app written in Java to control laptop using phone.
-- [**104**星][2y] [Py] [cylance/introductiontomachinelearningforsecuritypros](https://github.com/cylance/IntroductionToMachineLearningForSecurityPros) 书的示例代码:Introduction to Artificial Intelligence for Security Professionals
- [**104**星][7m] [C++] [ajayrandhawa/keylogger](https://github.com/ajayrandhawa/Keylogger) Blackcat Keylogger is 100% invisible keylogger not only for users, but also undetectable by antivirus software. Blackcat keylogger Monitors all keystokes, Mouse clicks. It has a seperate process which continues capture system screenshot and send to ftp server in given time.
-- [**104**星][4m] [w-digital-scanner/w10scan](https://github.com/w-digital-scanner/w10scan) 全自动搜索互联网漏洞
- [**104**星][2y] [HTML] [ziplokk1/incapsula-cracker-py3](https://github.com/ziplokk1/incapsula-cracker-py3) Python3 compatible way to bypass sites guarded with Incapsula
- [**104**星][2y] [C#] [tyranid/deviceguardbypasses](https://github.com/tyranid/deviceguardbypasses) A repository of some of my Windows 10 Device Guard Bypasses
- [**104**星][3y] [JS] [trustedsec/ships](https://github.com/trustedsec/ships) The Shared Host Integrated Password System (SHIPS) is a solution to provide unique and rotated local super user or administrator passwords for environments where it is not possible or not appropriate to disable these local accounts. Clients may be configured to rotate passwords automatically. Stored passwords can be retrieved by desktop support …
- [**104**星][4y] [C++] [trailofbits/appjaillauncher](https://github.com/trailofbits/appjaillauncher) CTF Challenge Framework for Windows 8 and above
-- [**104**星][3m] [C++] [tandasat/simplesvmhook](https://github.com/tandasat/simplesvmhook) SimpleSvmHook is a research purpose hypervisor for Windows on AMD processors.
-- [**104**星][18d] [Go] [stefanoj3/dirstalk](https://github.com/stefanoj3/dirstalk) a multi threaded application designed to brute force paths on web servers.
+- [**104**星][20d] [Go] [stefanoj3/dirstalk](https://github.com/stefanoj3/dirstalk) a multi threaded application designed to brute force paths on web servers.
- [**104**星][5y] [C] [sploitfun/lsploits](https://github.com/sploitfun/lsploits) Linux Exploits
-- [**104**星][3m] [soffensive/windowsblindread](https://github.com/soffensive/windowsblindread) A list of files / paths to probe when arbitrary files can be read on a Microsoft Windows operating system
- [**104**星][1y] [Py] [sidechannelmarvels/jeangrey](https://github.com/sidechannelmarvels/jeangrey) A tool to perform differential fault analysis attacks (DFA).
+- [**104**星][2y] [Java] [secureskytechnology/study-struts2-s2-054_055-jackson-cve-2017-7525_cve-2017-15095](https://github.com/secureskytechnology/study-struts2-s2-054_055-jackson-cve-2017-7525_cve-2017-15095) Struts2の脆弱性S2-045, S2-055 および Jackson の脆弱性 CVE-2017-7525, CVE-2017-15095 の調査報告
- [**104**星][3y] [C++] [secmob/mosec2016](https://github.com/secmob/mosec2016) The slides and exploit of mosec2016
- [**104**星][6y] [santoku/santoku-linux](https://github.com/santoku/santoku-linux) Linux Distro for Mobile Security, Malware Analysis, and Forensics
-- [**104**星][2m] [PHP] [realender/dwpa](https://github.com/realender/dwpa) Distributed WPA PSK auditor
- [**104**星][11m] [Py] [re4son/kali-pi](https://github.com/re4son/kali-pi) Sticky Fingers Kali Pi
- [**104**星][7m] [C#] [r-smith/splice-admin](https://github.com/r-smith/splice-admin) A remote Windows administration tool. You know you want it.
-- [**104**星][9m] [C++] [quarkslab/android-restriction-bypass](https://github.com/quarkslab/android-restriction-bypass) PoC to bypass Android restrictions
- [**104**星][12m] [Py] [ohmyadd/wetland](https://github.com/ohmyadd/wetland) A high interaction SSH honeypot
-- [**104**星][9d] [Objective-C] [objective-see/processmonitor](https://github.com/objective-see/processmonitor) Process Monitor Library (based on Apple's new Endpoint Security Framework)
-- [**104**星][3y] [Py] [noplay/scrapy-mongodb](https://github.com/noplay/scrapy-mongodb) Mongodb support for scrapy
- [**104**星][1y] [C++] [nmulasmajic/syscall_exploit_cve-2018-8897](https://github.com/nmulasmajic/syscall_exploit_cve-2018-8897) Implements the POP/MOV SS (CVE-2018-8897) vulnerability by leveraging SYSCALL to perform a local privilege escalation (LPE).
-- [**104**星][2y] [Shell] [niclet/yi-hack-v2](https://github.com/niclet/yi-hack-v2) Xiaomi Yi Ants Camera 2 hack
- [**104**星][4y] [Go] [netxfly/transparent-proxy-scanner](https://github.com/netxfly/transparent-proxy-scanner) 基于vpn和透明代理的web漏洞扫描器的实现思路及demo
+- [**104**星][17d] [Go] [netevert/dnsmorph](https://github.com/netevert/dnsmorph) 域名排列(permutation)引擎, Go编写
- [**104**星][2y] [C#] [nccgroup/outlookleaktest](https://github.com/nccgroup/outlookleaktest) The Outlook HTML Leak Test Project
- [**104**星][12m] [Perl] [mustlive/davoset](https://github.com/mustlive/davoset) DDoS attacks via other sites execution tool (DAVOSET) - it is command line tool for conducting DDoS attacks on the sites via Abuse of Functionality and XML External Entities vulnerabilities at other sites.
- [**104**星][2y] [C++] [mlghuskie/nobastian](https://github.com/mlghuskie/nobastian) NoBastian - Universal Ring3 IPC based BattlEye/EAC/FaceIt/ESEA/MRAC bypass
-- [**104**星][1y] [mitre/brawl-public-game-001](https://github.com/mitre/brawl-public-game-001) Data from a BRAWL Automated Adversary Emulation Exercise
- [**104**星][2y] [Py] [mehdilauters/wifiscanmap](https://github.com/mehdilauters/wifiscanmap) an other wifi mapping tool
-- [**104**星][22d] [Java] [mebigfatguy/fb-contrib](https://github.com/mebigfatguy/fb-contrib) a FindBugs/SpotBugs plugin for doing static code analysis for java code bases
+- [**104**星][24d] [Java] [mebigfatguy/fb-contrib](https://github.com/mebigfatguy/fb-contrib) a FindBugs/SpotBugs plugin for doing static code analysis for java code bases
+- [**104**星][30d] [Py] [m8r0wn/activereign](https://github.com/m8r0wn/activereign) A Network Enumeration and Attack Toolset
- [**104**星][2m] [Shell] [luyg24/it_security](https://github.com/luyg24/it_security) 业内信息安全标准
-- [**104**星][12d] [leomaurodesenv/game-datasets](https://github.com/leomaurodesenv/game-datasets)
+- [**104**星][3m] [PHP] [langleyfoxall/laravel-nist-password-rules](https://github.com/langleyfoxall/laravel-nist-password-rules)
- [**104**星][2y] [Shell] [joarleymoraes/net_guard](https://github.com/joarleymoraes/net_guard) 命令行工具, 利用 ARP 协议检测网络中的未知设备
- [**104**星][3y] [Go] [jessfraz/tupperwarewithspears](https://github.com/jessfraz/tupperwarewithspears) Distributed load testing with containers, Apache benchmark, with OpenVSwitch for networking.
-- [**104**星][2m] [Py] [ickerwx/tcpproxy](https://github.com/ickerwx/tcpproxy) Intercepting TCP proxy to modify raw TCP streams using modules on incoming or outgoing traffic
-- [**104**星][2y] [Java] [ggrandes/bouncer](https://github.com/ggrandes/bouncer) Bouncer is a network TCP port redirector/forward proxy (like rinetd) with extra features like Reverse tunneling (like ssh -R), SSL tunneling (like stunnel), connection Failover, LoadBalancing and Clustering. In pure Java (BIO)
+- [**104**星][2d] [C] [isc-projects/bind9](https://github.com/isc-projects/bind9) a complete, highly portable implementation of the DNS (Domain Name System) protocol.
+- [**104**星][2y] [Kotlin] [heimashi/debug_view_kotlin](https://github.com/heimashi/debug_view_kotlin) 用kotlin实现的Android浮层调试控制台,实时的显示内存、FPS、文字log、app启动时间、Activity启动时间
- [**104**星][1y] [C++] [ga0/pyprotect](https://github.com/ga0/pyprotect) A lightweight python code protector, makes your python project harder to reverse engineer
+- [**104**星][3m] [Ruby] [dryruby/tor.rb](https://github.com/dryruby/tor.rb) Tor.rb is a Ruby library for interacting with the Tor anonymity network.
- [**104**星][3y] [Java] [cvvt/apptroy](https://github.com/cvvt/apptroy) An Online Analysis System for Packed Android Malware
- [**104**星][4y] [Shell] [cornerpirate/socat-shell](https://github.com/cornerpirate/socat-shell) Socat can be used to establish a reverse shell with bash tab completion and full shell functionality
- [**104**星][3y] [C++] [cn33liz/tpminituacbypass](https://github.com/cn33liz/tpminituacbypass) Bypassing User Account Control (UAC) using TpmInit.exe
-- [**104**星][12d] [C] [checkpointsw/scout](https://github.com/checkpointsw/scout) Instruction based research debugger
-- [**104**星][1m] [Java] [c0ny1/sqlmap4burp-plus-plus](https://github.com/c0ny1/sqlmap4burp-plus-plus) sqlmap4burp++是一款兼容Windows,mac,linux多个系统平台的Burp与sqlmap联动插件
+- [**104**星][14d] [C] [checkpointsw/scout](https://github.com/checkpointsw/scout) Instruction based research debugger
- [**104**星][3y] [Py] [c0demap/codemap](https://github.com/c0demap/codemap) Hook IDA,调试命中断点时将寄存器/内存信息保存到数据库,在web浏览器中查看
- [IDA插件](https://github.com/c0demap/codemap/blob/master/idapythonrc.py)
- [Web服务器](https://github.com/c0demap/codemap/tree/master/codemap/server)
- [**104**星][5y] [Py] [botherder/vxcage](https://github.com/botherder/vxcage) REST API based malware repository (abandoned)
+- [**104**星][2y] [Py] [blindfuzzy/lhf](https://github.com/blindfuzzy/lhf) A modular recon tool for pentesting
+- [**104**星][15d] [Swift] [auth0/auth0.swift](https://github.com/auth0/auth0.swift) Swift toolkit for Auth0 API
- [**104**星][4y] [ActionScript] [adobe/avmplus](https://github.com/adobe/avmplus) Source code for the Actionscript virtual machine
-- [**104**星][3m] [Py] [0xdezzy/cve-2019-11539](https://github.com/0xdezzy/cve-2019-11539) Exploit for the Post-Auth RCE vulnerability in Pulse Secure Connect
+- [**103**星][4d] [Py] [sachinkamath/ntlmrecon](https://github.com/sachinkamath/ntlmrecon) A fast and flexible NTLM reconnaissance tool
- [**103**星][3y] [wtsxdev/list-of-web-application-security](https://github.com/wtsxdev/list-of-web-application-security) List of web application security
-- [**103**星][4m] [Py] [xzkzdx/weixin-spider](https://github.com/xzkzdx/weixin-spider) 微信公众号爬虫,公众号历史文章,文章评论,文章阅读及在看数据,可视化web页面,可部署于Windows服务器。基于Python3之flask/mysql/redis/mitmproxy/pywin32等实现,高效微信爬虫,微信公众号爬虫,历史文章,文章评论,数据更新。
-- [**103**星][16d] [Java] [astrelsky/ghidra-cpp-class-analyzer](https://github.com/astrelsky/ghidra-cpp-class-analyzer) Ghidra C++ Class and Run Time Type Information Analyzer
+- [**103**星][3y] [Py] [landgrey/taoman](https://github.com/landgrey/taoman) 快速收集
+- [**103**星][2m] [Shell] [greycatz/cloudunflare](https://github.com/greycatz/cloudunflare) Reconnaissance Real IP address for Cloudflare Bypass
- [**103**星][2y] [Brainfuck] [tegmen/regex-brainfuck-interpreter](https://github.com/Tegmen/RegEx-Brainfuck-Interpreter) A Brainfuck interpreter in RegEx only (using Find/Replace)
-- [**103**星][1y] [Objective-C] [kealdishx/icmethoddigger](https://github.com/kealdishx/ICMethodDigger) An easy way to print almost methods including private methods (supported arm64 architecture devices).
-- [**103**星][2m] [Py] [vstinner/python-ptrace](https://github.com/vstinner/python-ptrace) a debugger using ptrace (Linux, BSD and Darwin system call to trace processes) written in Python
+- [**103**星][1y] [ObjC] [kealdishx/icmethoddigger](https://github.com/kealdishx/ICMethodDigger) An easy way to print almost methods including private methods (supported arm64 architecture devices).
+- [**103**星][2m] [Py] [paulc/dnslib](https://github.com/paulc/dnslib) A Python library to encode/decode DNS wire-format packets
+- [**103**星][23d] [JS] [wilddeer/sniffer](https://github.com/wilddeer/sniffer) browser/engine/os/device detection tool
- [**103**星][2y] [Py] [wetw0rk/malicious-wordpress-plugin](https://github.com/wetw0rk/malicious-wordpress-plugin) malicious-wordpress-plugin:生成带反向 Shell 的 wordpress 插件
-- [**103**星][19d] [Py] [virb3/apk-utilities](https://github.com/virb3/apk-utilities) Tools and scripts to manipulate Android APKs
+- [**103**星][9d] [Py] [virb3/apk-utilities](https://github.com/virb3/apk-utilities) Tools and scripts to manipulate Android APKs
- [**103**星][4m] [Go] [twistlock/cloud-discovery](https://github.com/twistlock/cloud-discovery) Cloud Discovery provides a point in time enumeration of all the cloud native platform services
- [**103**星][4y] [Py] [tripwire/tardis](https://github.com/tripwire/tardis) Threat Analysis, Reconnaissance, and Data Intelligence System
-- [**103**星][2y] [Py] [tkcert/testssl.sh-webfrontend](https://github.com/tkcert/testssl.sh-webfrontend) Web Frontend for testssl.sh
- [**103**星][1y] [JS] [thecjw/frida-android-scripts](https://github.com/thecjw/frida-android-scripts) Some frida scripts
+- [**103**星][1y] [Go] [sroberts/cacador](https://github.com/sroberts/cacador) 从文本块中提取常见的IoC
- [**103**星][8m] [Py] [sibears/hrast](https://github.com/sibears/hrast) 演示如何修改AST(抽象语法树)
-- [**103**星][2y] [Java] [secureskytechnology/study-struts2-s2-054_055-jackson-cve-2017-7525_cve-2017-15095](https://github.com/secureskytechnology/study-struts2-s2-054_055-jackson-cve-2017-7525_cve-2017-15095) Struts2の脆弱性S2-045, S2-055 および Jackson の脆弱性 CVE-2017-7525, CVE-2017-15095 の調査報告
- [**103**星][3y] [Py] [samratashok/continuousintrusion](https://github.com/samratashok/continuousintrusion) Material related to my talks at various conferences on using Continuous Integration tools (Jenkins, Teamcity, Go, Hudson, CruiseControl) for penetration testing
- [**103**星][3m] [rub-nds/tls-padding-oracles](https://github.com/rub-nds/tls-padding-oracles) New TLS Padding Oracles
- [**103**星][1y] [Java] [quarantyne/quarantyne](https://github.com/quarantyne/quarantyne) Modern Web Firewall: stop account takeovers, weak passwords, cloud IPs, DoS attacks, disposable emails
- [**103**星][6y] [Py] [pwnieexpress/pwn_plug_sources](https://github.com/pwnieexpress/pwn_plug_sources) Public source repository for the Pwn Plug platform.
- [**103**星][1y] [Py] [preos-security/fwaudit](https://github.com/preos-security/fwaudit) Platform Firmware Auditing Tool
+- [**103**星][2m] [PS] [powershell/windowscompatibility](https://github.com/powershell/windowscompatibility) Module that allows Windows PowerShell Modules to be used from PSCore6
- [**103**星][6m] [C++] [not-wlan/drvmap](https://github.com/not-wlan/drvmap) driver mapper / capcom wrapper
-- [**103**星][15d] [Go] [netevert/dnsmorph](https://github.com/netevert/dnsmorph) 域名排列(permutation)引擎, Go编写
-- [**103**星][28d] [Py] [m8r0wn/activereign](https://github.com/m8r0wn/activereign) A Network Enumeration and Attack Toolset
+- [**103**星][3y] [Py] [noplay/scrapy-mongodb](https://github.com/noplay/scrapy-mongodb) Mongodb support for scrapy
+- [**103**星][23d] [C++] [m2team/privexec](https://github.com/m2team/privexec) Run the program with the specified permission level (C++17 required)
- [**103**星][4y] [C] [m0n0ph1/win64-rovnix-vbr-bootkit](https://github.com/m0n0ph1/win64-rovnix-vbr-bootkit) Win64/Rovnix - Volume Boot Record Bootkit
- [**103**星][3m] [Py] [lucasg/findrpc](https://github.com/lucasg/findrpc) 从二进制文件中提取内部的RPC结构体
- [**103**星][7m] [C] [joel16/psv-vsh-menu](https://github.com/joel16/psv-vsh-menu) A VSH menu tai-hen plugin for the PS VITA.
- [**103**星][11m] [JS] [jasonsheh/sitescan](https://github.com/jasonsheh/sitescan) A tool help get the basic information of one site
-- [**103**星][7d] [C] [isc-projects/bind9](https://github.com/isc-projects/bind9) a complete, highly portable implementation of the DNS (Domain Name System) protocol.
- [**103**星][6y] [C] [infodox/tsh-sctp](https://github.com/infodox/tsh-sctp) An open-source UNIX backdoor
+- [**103**星][1m] [Py] [infertux/zeyple](https://github.com/infertux/zeyple) Postfix filter/hook to automatically encrypt outgoing emails with PGP/GPG
+- [**103**星][10m] [Py] [iluxonchik/blackhat-python-book](https://github.com/iluxonchik/blackhat-python-book) Code from Blackhat Python book
- [**103**星][2y] [C++] [iceb0y/windows-container](https://github.com/iceb0y/windows-container) A lightweight sandbox for Windows application
+- [**103**星][7m] [PS] [homjxi0e/poweravails](https://github.com/homjxi0e/poweravails) PowerAvails Powershell .NET Operating system
- [**103**星][2y] [C++] [hasherezade/snippets](https://github.com/hasherezade/snippets) Various code snippets and small PoCs, to be used for tests or as ready-made skeletons.
-- [**103**星][1y] [PowerShell] [harmj0y/asreproast](https://github.com/harmj0y/asreproast) Project that retrieves crackable hashes from KRB5 AS-REP responses for users without kerberoast preauthentication enabled.
+- [**103**星][1y] [PS] [harmj0y/asreproast](https://github.com/harmj0y/asreproast) Project that retrieves crackable hashes from KRB5 AS-REP responses for users without kerberoast preauthentication enabled.
+- [**103**星][3y] [C] [greensea/mptunnel](https://github.com/greensea/mptunnel) MPUDP Tunnel (User space MultiPath UDP)
- [**103**星][2y] [gossithedog/threathunting](https://github.com/gossithedog/threathunting) Tools for hunting for threats.
+- [**103**星][2y] [Java] [gosecure/csp-auditor](https://github.com/gosecure/csp-auditor) Burp and ZAP plugin to analyse Content-Security-Policy headers or generate template CSP configuration from crawling a Website
- [**103**星][2m] [C++] [google/vxsig](https://github.com/google/vxsig) Automatically generate AV byte signatures from sets of similar binaries.
- [**103**星][2y] [glinares/officemalware](https://github.com/glinares/officemalware)
- [**103**星][2y] [Py] [gelim/censys](https://github.com/gelim/censys) Python code to query the Censys public scan database.
- [**103**星][6y] [C] [gdbinit/hydra](https://github.com/gdbinit/hydra) A kernel extension and userland daemon to patch applications
- [**103**星][12m] [fuchsia-mirror/garnet](https://github.com/fuchsia-mirror/garnet)
- [**103**星][6m] [Py] [fireeye/flashmingo](https://github.com/fireeye/flashmingo) Automatic analysis of SWF files based on some heuristics. Extensible via plugins.
+- [**103**星][4d] [F#] [enkomio/sacara](https://github.com/enkomio/sacara) A stack based intermediate language aimed at software protection by running in a software VM
- [**103**星][1y] [Swift] [ehrishirajsharma/swiftness](https://github.com/ehrishirajsharma/swiftness) A note-taking macOS app for penetration-testers.
- [**103**星][1y] [C++] [cbayet/exploit-cve-2017-6008](https://github.com/cbayet/exploit-cve-2017-6008) Exploits for CVE-2017-6008, a kernel pool buffer overflow leading to privilege escalation.
-- [**103**星][2y] [Py] [blindfuzzy/lhf](https://github.com/blindfuzzy/lhf) A modular recon tool for pentesting
-- [**103**星][7d] [PHP] [blackhacker511/blacknet](https://github.com/blackhacker511/blacknet) Free Advanced Windows BotNET with Secure PHP Panel
-- [**103**星][4m] [Py] [b1eed/vulrec](https://github.com/b1eed/vulrec) 漏洞复现记录
+- [**103**星][2d] [Py] [b1eed/vulrec](https://github.com/b1eed/vulrec) 漏洞复现记录
- [**103**星][4y] [Py] [allyshka/pwngitmanager](https://github.com/allyshka/pwngitmanager) Git manager for pentesters
+- [**103**星][7m] [Py] [alexmyg/andropytool](https://github.com/alexmyg/andropytool) A framework for automated extraction of static and dynamic features from Android applications
- [**103**星][2y] [Py] [1111joe1111/tuts](https://github.com/1111joe1111/tuts) Reverse engineering tutorials
- [**102**星][8m] [l3m0n/webfuzzattack](https://github.com/l3m0n/webfuzzattack) web模糊测试 - 将漏洞可能性放大
- [**102**星][12m] [searking/ggfwzs_in_hack](https://github.com/searking/ggfwzs_in_hack) hack VIP for chrome-extension 谷歌访问助手
-- [**102**星][1m] [Py] [0ang3el/websocket-smuggle](https://github.com/0ang3el/websocket-smuggle) Issues with WebSocket reverse proxying allowing to smuggle HTTP requests
+- [**102**星][2y] [raikia/recon-ng-api-key-creation](https://github.com/raikia/recon-ng-api-key-creation) One of the biggest annoyances of using Recon-ng is getting everything set up to use it. So here I’ll outline the different API keys it can use and where to get them yourself.
- [**102**星][2m] [Py] [mazen160/jwt-pwn](https://github.com/mazen160/jwt-pwn) Security Testing Scripts for JWT
-- [**102**星][2m] [Py] [paulc/dnslib](https://github.com/paulc/dnslib) A Python library to encode/decode DNS wire-format packets
- [**102**星][1y] [Py] [zwq0320/malicious_dynamic_behavior_detection_by_cnn](https://github.com/zwq0320/malicious_dynamic_behavior_detection_by_cnn) 使用CNN进行样本恶意动态行为检测
- [**102**星][3y] [Go] [zaf/sipshock](https://github.com/zaf/sipshock) A scanner for SIP proxies vulnerable to Shellshock
- [**102**星][11m] [C] [x41sec/x41-smartcard-fuzzing](https://github.com/x41sec/x41-smartcard-fuzzing) X41 Smartcard Fuzzer
- [**102**星][2y] [Py] [wstart/db_baseline](https://github.com/wstart/db_baseline) 数据库基线检查工具
- [**102**星][2y] [Py] [wolph/python-statsd](https://github.com/wolph/python-statsd) Python Client for the Etsy NodeJS Statsd Server
-- [**102**星][21d] [JS] [wilddeer/sniffer](https://github.com/wilddeer/sniffer) browser/engine/os/device detection tool
- [**102**星][6m] [Py] [vmavromatis/absolutely-proprietary](https://github.com/vmavromatis/absolutely-proprietary) Proprietary package detector for arch-based distros. Compares your installed packages against Parabola's package blacklist and then prints your Stallman Freedom Index (free/total).
-- [**102**星][12d] [Go] [virustotal/vt-cli](https://github.com/virustotal/vt-cli) VirusTotal Command Line Interface
- [**102**星][3y] [Py] [violentshell/rover](https://github.com/violentshell/rover) Proof of Concept code for CVE-2016-5696
- [**102**星][3y] [veramine/detections](https://github.com/veramine/detections)
+- [**102**星][1m] [Kotlin] [uber/crumb](https://github.com/uber/crumb) An annotation processor for breadcrumbing metadata across compilation boundaries.
- [**102**星][3m] [Go] [tbiehn/curryfinger](https://github.com/tbiehn/curryfinger) CURRYFINGER - SNI & Host header spoofing utility.
-- [**102**星][18d] [Py] [t0thkr1s/revshellgen](https://github.com/t0thkr1s/revshellgen) Reverse shell generator written in Python.
-- [**102**星][1y] [Go] [sroberts/cacador](https://github.com/sroberts/cacador) 从文本块中提取常见的IoC
- [**102**星][2y] [C++] [sensepost/gdi-palettes-exp](https://github.com/sensepost/gdi-palettes-exp) 滥用 GDI 对象来揭示内核漏洞利用
- [**102**星][2y] [Go] [sakeven/httpproxy](https://github.com/sakeven/httpproxy) 基于 Go 开发,支持 http/1.1 以上版本的 HTTP(S) 代理。(Why not try out Mika?)
-- [**102**星][2m] [PowerShell] [powershell/windowscompatibility](https://github.com/powershell/windowscompatibility) Module that allows Windows PowerShell Modules to be used from PSCore6
+- [**102**星][1y] [JS] [rassec/a_scan_framework](https://github.com/rassec/a_scan_framework) Network Security Vulnerability Manage
+- [**102**星][19d] [Py] [patois/idapyhelper](https://github.com/patois/idapyhelper) IDAPython脚本编写辅助
- [**102**星][3m] [C#] [padovah4ck/cve-2019-1253](https://github.com/padovah4ck/cve-2019-1253) Poc for CVE-2019-1253
- [**102**星][3y] [Py] [n0fate/volafox](https://github.com/n0fate/volafox) Mac OS X Memory Analysis Toolkit
-- [**102**星][10m] [Py] [mbevilacqua/appcompatprocessor](https://github.com/mbevilacqua/appcompatprocessor) "Evolving AppCompat/AmCache data analysis beyond grep"
+- [**102**星][11m] [Py] [mbevilacqua/appcompatprocessor](https://github.com/mbevilacqua/appcompatprocessor) "Evolving AppCompat/AmCache data analysis beyond grep"
+- [**102**星][4m] [Py] [matrix1001/heapinspect](https://github.com/matrix1001/heapinspect)
+- [**102**星][24d] [C] [madeye/tcp_china](https://github.com/madeye/tcp_china) TCP China congestion control algorithm
- [**102**星][3y] [Java] [liuyufei/sslkiller](https://github.com/liuyufei/sslkiller) SSLKiller is used for killing SSL verification functions on Android client side. With SSLKiller, You can intercept app's HTTPS communication packages between the client and server.
-- [**102**星][8m] [PowerShell] [leeberg/bluecommand](https://github.com/leeberg/bluecommand) Dashboarding and Tooling front-end for PowerShell Empire using PowerShell Universal Dashboard
+- [**102**星][8m] [PS] [leeberg/bluecommand](https://github.com/leeberg/bluecommand) Dashboarding and Tooling front-end for PowerShell Empire using PowerShell Universal Dashboard
- [**102**星][6m] [Py] [kibodwapon/noeye](https://github.com/kibodwapon/noeye) A blind mode exploit framework (a dns server and a web app) that like wvs's AcuMonitor Service or burpsuite's collabrator or cloudeye
+- [**102**星][1m] [Go] [jmpsec/osctrl](https://github.com/jmpsec/osctrl) Fast and efficient osquery management
- [**102**星][3y] [JS] [jkingsman/bishop](https://github.com/jkingsman/bishop) Hunt for vulnerable websites as you browse.
-- [**102**星][10m] [Py] [iluxonchik/blackhat-python-book](https://github.com/iluxonchik/blackhat-python-book) Code from Blackhat Python book
+- [**102**星][6m] [Py] [janniskirschner/horn3t](https://github.com/janniskirschner/horn3t) Powerful Visual Subdomain Enumeration at the Click of a Mouse
+- [**102**星][6d] [PHP] [io-developer/php-whois](https://github.com/io-developer/php-whois) PHP WHOIS provides parsed and raw whois lookup of domains and ASN routes. PHP 5.4+ and 7+ compatible
- [**102**星][1m] [Py] [huuck/adbhoney](https://github.com/huuck/adbhoney) Low interaction honeypot designed for Android Debug Bridge over TCP/IP
-- [**102**星][6m] [PowerShell] [homjxi0e/poweravails](https://github.com/homjxi0e/poweravails) PowerAvails Powershell .NET Operating system
-- [**102**星][3y] [C] [greensea/mptunnel](https://github.com/greensea/mptunnel) MPUDP Tunnel (User space MultiPath UDP)
+- [**102**星][2y] [C] [hc0d3r/sudohulk](https://github.com/hc0d3r/sudohulk) 使用ptraceHook系统调用execve, 监控并修改sudo命令的参数
- [**102**星][2y] [C] [google/pg_page_verification](https://github.com/google/pg_page_verification) verify checksums on PostgreSQL data pages without having to load each page into shared buffer cache
-- [**102**星][2y] [C] [formyown/alesense-antivirus](https://github.com/formyown/alesense-antivirus) 一款拥有完整交互界面与驱动级拦截能力的开源杀毒软件
- [**102**星][3y] [feicong/android-app-sec](https://github.com/feicong/android-app-sec) ISC 2016安全训练营-安卓app逆向与安全防护 ppt
-- [**102**星][10d] [F#] [enkomio/sacara](https://github.com/enkomio/sacara) A stack based intermediate language aimed at software protection by running in a software VM
- [**102**星][1y] [edoverflow/bugbountywiki](https://github.com/edoverflow/bugbountywiki) The Bug Bounty Wiki
-- [**102**星][1m] [TypeScript] [eddyverbruggen/nativescript-fingerprint-auth](https://github.com/eddyverbruggen/nativescript-fingerprint-auth)
+- [**102**星][1m] [TS] [eddyverbruggen/nativescript-fingerprint-auth](https://github.com/eddyverbruggen/nativescript-fingerprint-auth)
- [**102**星][1y] [Java] [duo-labs/xray](https://github.com/duo-labs/xray) X-Ray allows you to scan your Android device for security vulnerabilities that put your device at risk.
-- [**102**星][6m] [C#] [dannythesloth/vanillarat](https://github.com/dannythesloth/vanillarat) VanillaRat is an advanced remote administration tool completely coded in C# for Windows.
+- [**102**星][10m] [C++] [decred/gominer](https://github.com/decred/gominer) Go (golang) based GPU miner for Decred.
- [**102**星][1y] [cujanovic/crlf-injection-payloads](https://github.com/cujanovic/crlf-injection-payloads) Payloads for CRLF Injection
-- [**102**星][14d] [Py] [buffer/pylibemu](https://github.com/buffer/pylibemu) A Libemu Cython wrapper
+- [**102**星][7d] [Py] [buffer/pylibemu](https://github.com/buffer/pylibemu) A Libemu Cython wrapper
- [**102**星][3y] [C++] [azuregreen/injectcollection](https://github.com/azuregreen/injectcollection) A collection of injection via vc++ in ring3
-- [**102**星][13d] [Swift] [auth0/auth0.swift](https://github.com/auth0/auth0.swift) Swift toolkit for Auth0 API
+- [**102**星][6d] [PS] [awsmhacks/crackmapextreme](https://github.com/awsmhacks/crackmapextreme) For all your network pentesting needs
- [**102**星][1y] [Py] [apg-intel/ipv6tools](https://github.com/apg-intel/ipv6tools) IPv6Tools is a robust modular framework that enables the ability to visually audit an IPv6 enabled network.
- [**102**星][5m] [Py] [anx1ang/poc_pentest](https://github.com/anx1ang/poc_pentest)
+- [**102**星][5y] [Py] [ajinabraham/static-dom-xss-scanner](https://github.com/ajinabraham/static-dom-xss-scanner) Static DOM XSS Scanner is a Static Analysis tool written in python that will iterate through all the JavaScript and HTML files under the given directory and will list out all the possible sources and sinks that may cause DOM XSS. At the end of the scan, the tool will generate an HTML report.
- [**102**星][6m] [HTML] [ahmia/search](https://github.com/ahmia/search) Ahmia - Search Engine for onion services.
-- [**101**星][10m] [Py] [thelinuxchoice/pyrat](https://github.com/thelinuxchoice/pyrat) Windows Remote Administration Tool (RAT)
-- [**101**星][3y] [Py] [landgrey/taoman](https://github.com/landgrey/taoman) 快速收集
-- [**101**星][10d] [Ruby] [arkadiyt/bounty-targets](https://github.com/arkadiyt/bounty-targets) This project crawls bug bounty platform scopes (like Hackerone/Bugcrowd/etc) hourly and dumps them into the bounty-targets-data repo
+- [**101**星][8m] [Shell] [hmaverickadams/breach-parse](https://github.com/hmaverickadams/breach-parse) A tool for parsing breached passwords
+- [**101**星][1m] [C#] [n1xbyte/donutcs](https://github.com/n1xbyte/donutcs) dem sharp donuts
+- [**101**星][7d] [Ruby] [arkadiyt/bounty-targets](https://github.com/arkadiyt/bounty-targets) This project crawls bug bounty platform scopes (like Hackerone/Bugcrowd/etc) hourly and dumps them into the bounty-targets-data repo
- [**101**星][9m] [polarislab/secpaper](https://github.com/PolarisLab/SecPaper) SecurityPaper For
-- [**101**星][2y] [raikia/recon-ng-api-key-creation](https://github.com/raikia/recon-ng-api-key-creation) One of the biggest annoyances of using Recon-ng is getting everything set up to use it. So here I’ll outline the different API keys it can use and where to get them yourself.
- [**101**星][4m] [Py] [6e726d/wig](https://github.com/6e726d/wig) Tools for 802.11 information gathering.
-- [**101**星][2m] [Shell] [greycatz/cloudunflare](https://github.com/greycatz/cloudunflare) Reconnaissance Real IP address for Cloudflare Bypass
- [**101**星][2y] [Py] [znuh/re-dected](https://github.com/znuh/re-dected) tools for playing with DECT
-- [**101**星][15d] [HTML] [w3c/webappsec-csp](https://github.com/w3c/webappsec-csp) WebAppSec Content Security Policy
-- [**101**星][30d] [Kotlin] [uber/crumb](https://github.com/uber/crumb) An annotation processor for breadcrumbing metadata across compilation boundaries.
-- [**101**星][15d] [Py] [testerting/hacker101-ctf](https://github.com/testerting/hacker101-ctf) Hacker101 CTF Writeup
-- [**101**星][3y] [Py] [tbgsecurity/splunk_shells](https://github.com/tbgsecurity/splunk_shells) Weaponizing Splunk with reverse and bind shells.
-- [**101**星][5m] [Py] [spring-epfl/lightnion](https://github.com/spring-epfl/lightnion) A light version of Tor portable to the browser
+- [**101**星][3m] [xx0hcd/malleable-c2-profiles](https://github.com/xx0hcd/malleable-c2-profiles) Cobalt Strike - Malleable C2 Profiles. A collection of profiles used in different projects using Cobalt Strike
+- [**101**星][17d] [HTML] [w3c/webappsec-csp](https://github.com/w3c/webappsec-csp) WebAppSec Content Security Policy
+- [**101**星][4y] [utkusen/eda2](https://github.com/utkusen/eda2) a more complex ransomware honeypot
+- [**101**星][2y] [Java] [spiderlabs/airachnid-burp-extension](https://github.com/spiderlabs/airachnid-burp-extension) A Burp Extension to test applications for vulnerability to the Web Cache Deception attack
- [**101**星][6m] [Py] [skysider/vulnpoc](https://github.com/skysider/vulnpoc) Vulnerability Verification Environment based on Docker
+- [**101**星][4y] [Ruby] [sam-b/hashdata](https://github.com/sam-b/hashdata) A command line Hash Identifying tool.
- [**101**星][8m] [Rust] [rub-syssec/nautilus](https://github.com/rub-syssec/nautilus) a grammar based feedback fuzzer
- [**101**星][2m] [Py] [raw-packet/raw-packet](https://github.com/raw-packet/raw-packet) Raw-packet Project
-- [**101**星][1y] [JS] [rassec/a_scan_framework](https://github.com/rassec/a_scan_framework) Network Security Vulnerability Manage
- [**101**星][9m] [polarislab/secpaper](https://github.com/polarislab/secpaper) SecurityPaper For
-- [**101**星][17d] [Py] [patois/idapyhelper](https://github.com/patois/idapyhelper) IDAPython脚本编写辅助
+- [**101**星][5d] [Dockerfile] [peterdavehello/tor-socks-proxy](https://github.com/peterdavehello/tor-socks-proxy) Setup Tor SOCKS5 proxy server with a < 10MB
+- [**101**星][2m] [C] [onotelli/justniffer](https://github.com/onotelli/justniffer) Justniffer Just A Network TCP Packet Sniffer .Justniffer is a network protocol analyzer that captures network traffic and produces logs in a customized way, can emulate Apache web server log files, track response times and extract all "intercepted" files from the HTTP traffic
- [**101**星][2m] [Java] [netspi/burp-extensions](https://github.com/netspi/burp-extensions) Central Repo for Burp extensions
+- [**101**星][2y] [C++] [nccgroup/tpmgenie](https://github.com/nccgroup/tpmgenie) TPM Genie is an I2C bus interposer for discrete Trusted Platform Modules
- [**101**星][3y] [Py] [n00py/norknork](https://github.com/n00py/norknork) Powershell Empire Persistence finder
- [**101**星][1y] [Java] [mystech7/burp-hunter](https://github.com/mystech7/burp-hunter) XSS Hunter Burp Plugin
+- [**101**星][1y] [Py] [mr-un1k0d3r/windows-signedbinary](https://github.com/mr-un1k0d3r/windows-signedbinary) Generate Windows Signed Binary With a Different Hash
- [**101**星][2m] [Py] [mkorman90/regipy](https://github.com/mkorman90/regipy) Regipy is an os independent python library for parsing offline registry hives
- [**101**星][1y] [Go] [milo2012/cve-2018-0296](https://github.com/milo2012/cve-2018-0296) Test CVE-2018-0296 and extract usernames
- [**101**星][2y] [C++] [mfontanini/dot11decrypt](https://github.com/mfontanini/dot11decrypt) An 802.11 WEP/WPA2 on-the-fly decrypter.
- [**101**星][3y] [mattifestation/deviceguardbypassmitigationrules](https://github.com/mattifestation/deviceguardbypassmitigationrules) A reference Device Guard code integrity policy consisting of FilePublisher deny rules for published Device Guard configuration bypasses
-- [**101**星][3m] [Py] [matrix1001/heapinspect](https://github.com/matrix1001/heapinspect)
-- [**101**星][22d] [C] [madeye/tcp_china](https://github.com/madeye/tcp_china) TCP China congestion control algorithm
- [**101**星][1y] [Py] [macr0phag3/sniffer](https://github.com/macr0phag3/sniffer) A Sniffer for Open-WLAN
- [**101**星][11m] [C] [kirillwow/ids_bypass](https://github.com/kirillwow/ids_bypass) 入侵检测系统(IDS)绕过PoC
- [**101**星][4y] [Ruby] [joernchen/xxeserve](https://github.com/joernchen/xxeserve) XXE Out of Band Server.
-- [**101**星][1m] [Go] [jmpsec/osctrl](https://github.com/jmpsec/osctrl) Fast and efficient osquery management
-- [**101**星][2y] [C] [hc0d3r/sudohulk](https://github.com/hc0d3r/sudohulk) 使用ptraceHook系统调用execve, 监控并修改sudo命令的参数
-- [**101**星][2y] [Java] [gosecure/csp-auditor](https://github.com/gosecure/csp-auditor) Burp and ZAP plugin to analyse Content-Security-Policy headers or generate template CSP configuration from crawling a Website
+- [**101**星][2m] [ihebski/a-red-teamer-diaries](https://github.com/ihebski/a-red-teamer-diaries) RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.
- [**101**星][1y] [Py] [google/closure-linter](https://github.com/google/closure-linter) Automatically exported from code.google.com/p/closure-linter
-- [**101**星][4y] [PowerShell] [enigma0x3/invoke-loginprompt](https://github.com/enigma0x3/invoke-loginprompt) Invokes a Windows Security Login Prompt and outputs the clear text password.
+- [**101**星][3m] [C++] [giovannidicanio/winreg](https://github.com/giovannidicanio/winreg) Convenient high-level C++ wrapper around the Windows Registry API
+- [**101**星][4y] [PS] [enigma0x3/invoke-loginprompt](https://github.com/enigma0x3/invoke-loginprompt) Invokes a Windows Security Login Prompt and outputs the clear text password.
- [**101**星][2y] [Objective-C++] [electrajailbreak/cydia](https://github.com/electrajailbreak/cydia) Cydia modified for iOS 11/Electra
- [**101**星][8y] [C] [djrbliss/libplayground](https://github.com/djrbliss/libplayground) A simple framework for developing Linux kernel heap exploit techniques
-- [**101**星][2y] [PowerShell] [darkoperator/defcon25_ps_workshop](https://github.com/darkoperator/defcon25_ps_workshop) Materials of Workshop presented at DEFCON 25
+- [**101**星][2y] [PS] [darkoperator/defcon25_ps_workshop](https://github.com/darkoperator/defcon25_ps_workshop) Materials of Workshop presented at DEFCON 25
- [**101**星][3m] [C#] [damonmohammadbagher/nativepayload_reverse_tcp](https://github.com/damonmohammadbagher/nativepayload_reverse_tcp) Meterpreter Encrypted Payload by C#
-- [**101**星][7d] [C++] [cyclops-community/ctf](https://github.com/cyclops-community/ctf) Cyclops Tensor Framework: parallel arithmetic on multidimensional arrays
+- [**101**星][8d] [C++] [cyclops-community/ctf](https://github.com/cyclops-community/ctf) Cyclops Tensor Framework: parallel arithmetic on multidimensional arrays
- [**101**星][1y] [Java] [cornerpirate/java-stager](https://github.com/cornerpirate/java-stager) A PoC Java Stager which can download, compile, and execute a Java file in memory.
- [**101**星][5y] [C++] [clymb3r/misc-windows-hacking](https://github.com/clymb3r/misc-windows-hacking) Miscellaneous projects related to attacking Windows.
- [**101**星][2y] [Java] [clr2of8/gathercontacts](https://github.com/clr2of8/gathercontacts) A Burp Suite Extension to pull Employee Names from Google and Bing LinkedIn Search Results
+- [**101**星][1y] [C#] [chrismaddalena/sharpcloud](https://github.com/chrismaddalena/sharpcloud) Simple C# for checking for the existence of credential files related to AWS, Microsoft Azure, and Google Compute.
- [**101**星][2y] [Py] [ceh-tn/the-axer](https://github.com/ceh-tn/the-axer) replace the manual procedure of creating your payloads with msfvenom , making it easier and a lot quicker
- [**101**星][1y] [JS] [blackhole1/autofindxssandcsrf](https://github.com/blackhole1/autofindxssandcsrf) 自动化检测页面是否存在XSS和CSRF漏洞的浏览器插件(A plugin for browser that checks automatically whether a page haves XSS and CSRF vulnerabilities)
- [**101**星][2y] [C] [benjibobs/async_wake](https://github.com/benjibobs/async_wake) iOS 11.1.2 kernel exploit and PoC local kernel debugger by
- [**101**星][2y] [C] [akayn/postexploits](https://github.com/akayn/postexploits) post exploitation: Keyloggers, UacByPass etc..
-- [**101**星][5y] [Py] [ajinabraham/static-dom-xss-scanner](https://github.com/ajinabraham/static-dom-xss-scanner) Static DOM XSS Scanner is a Static Analysis tool written in python that will iterate through all the JavaScript and HTML files under the given directory and will list out all the possible sources and sinks that may cause DOM XSS. At the end of the scan, the tool will generate an HTML report.
-- [**101**星][18d] [Py] [adulau/cve-search](https://github.com/adulau/cve-search) cve-search is a tool to import CVE (Common Vulnerabilities and Exposures) and CPE (Common Platform Enumeration) into a MongoDB to facilitate search and processing of CVEs.
-- [**100**星][17d] [firmianay/security-paper](https://github.com/firmianay/security-paper) (与本人兴趣强相关的)各种安全or计算机资料收集
-- [**100**星][7d] [Makefile] [honwen/openwrt-shadowsocksr](https://github.com/honwen/openwrt-shadowsocksr) ShadowsocksR-libev for OpenWrt/LEDE
+- [**101**星][20d] [Py] [adulau/cve-search](https://github.com/adulau/cve-search) cve-search is a tool to import CVE (Common Vulnerabilities and Exposures) and CPE (Common Platform Enumeration) into a MongoDB to facilitate search and processing of CVEs.
+- [**101**星][3m] [Java] [0ffffffffh/dragondance](https://github.com/0ffffffffh/dragondance) 在Ghidra中进行代码覆盖情况的可视化
+ - [Ghidra插件](https://github.com/0ffffffffh/dragondance/blob/master/README.md)
+ - [coverage-pin](https://github.com/0ffffffffh/dragondance/blob/master/coveragetools/README.md) 使用Pin收集信息
+- [**100**星][6m] [C] [siguza/iometa](https://github.com/siguza/iometa) Just another IOKit class dumper
+- [**100**星][9d] [Makefile] [honwen/openwrt-shadowsocksr](https://github.com/honwen/openwrt-shadowsocksr) ShadowsocksR-libev for OpenWrt/LEDE
+- [**100**星][2d] [JS] [paradiseduo/shadowsocksx-ng-r8](https://github.com/paradiseduo/shadowsocksx-ng-r8) ShadowsocksX-NG-R for MacOS
+- [**100**星][14d] [Shell] [snail007/proxy_admin_free](https://github.com/snail007/proxy_admin_free) A powerful web console of snail007/goproxy .
+- [**100**星][3y] [C] [sciencemanx/ctf_import](https://github.com/sciencemanx/ctf_import) Run basic functions from stripped binaries cross platform
- [**100**星][4y] [woolabs/reverseng](https://github.com/woolabs/reverseng) 《Reverse Engineering for Beginners》翻译
+- [**100**星][3y] [Py] [williballenthin/shellbags](https://github.com/williballenthin/shellbags) Cross-platform, open-source shellbag parser
- [**100**星][9m] [Shell] [vishnudxb/docker-blackeye](https://github.com/vishnudxb/docker-blackeye) Docker container for creating the phishing sites using Blackeye
-- [**100**星][4y] [utkusen/eda2](https://github.com/utkusen/eda2) a more complex ransomware honeypot
+- [**100**星][3y] [Py] [tbgsecurity/splunk_shells](https://github.com/tbgsecurity/splunk_shells) Weaponizing Splunk with reverse and bind shells.
- [**100**星][2y] [Py] [syss-research/outis](https://github.com/syss-research/outis) outis is a custom Remote Administration Tool (RAT) or something like that. It was build to support various transport methods (like DNS) and platforms (like Powershell).
- [**100**星][10m] [Go] [subutai-io/p2p](https://github.com/subutai-io/p2p) P2P Cloud project allows users to build their private networks.
+- [**100**星][5m] [Py] [spring-epfl/lightnion](https://github.com/spring-epfl/lightnion) A light version of Tor portable to the browser
- [**100**星][2y] [C] [shellster/dcsyncmonitor](https://github.com/shellster/dcsyncmonitor) Monitors for DCSYNC and DCSHADOW attacks and create custom Windows Events for these events.
- [**100**星][1y] [Py] [securestate/eapeak](https://github.com/securestate/eapeak) Analysis Suite For EAP Enabled Wireless Networks
-- [**100**星][2m] [C] [onotelli/justniffer](https://github.com/onotelli/justniffer) Justniffer Just A Network TCP Packet Sniffer .Justniffer is a network protocol analyzer that captures network traffic and produces logs in a customized way, can emulate Apache web server log files, track response times and extract all "intercepted" files from the HTTP traffic
+- [**100**星][1y] [sapran/dontclickshit](https://github.com/sapran/dontclickshit) Як не стати кібер-жертвою
- [**100**星][3y] [CSS] [nonce-disrespect/nonce-disrespect](https://github.com/nonce-disrespect/nonce-disrespect) Nonce-Disrespecting Adversaries: Practical Forgery Attacks on GCM in TLS
- [**100**星][3m] [C] [nese-team/ourchallenges](https://github.com/nese-team/ourchallenges) writeups for our challenges
- [**100**星][3y] [Py] [ncouture/mockssh](https://github.com/ncouture/mockssh) Mock an SSH server and define all commands it supports (Python, Twisted)
-- [**100**星][2y] [C++] [nccgroup/tpmgenie](https://github.com/nccgroup/tpmgenie) TPM Genie is an I2C bus interposer for discrete Trusted Platform Modules
- [**100**星][2m] [Py] [nccgroup/gitpwnd](https://github.com/nccgroup/gitpwnd) gitpwnd:网络渗透测试工具,可使攻击者向被攻击机器发送命令,并使用 git repo 作为 C&C 传输层接收结果
-- [**100**星][1y] [Py] [mr-un1k0d3r/windows-signedbinary](https://github.com/mr-un1k0d3r/windows-signedbinary) Generate Windows Signed Binary With a Different Hash
+- [**100**星][2m] [momika233/joomla-3.4.6-rce](https://github.com/momika233/joomla-3.4.6-rce) Joomla 3.4.6 – Remote Code Execution
- [**100**星][5y] [JS] [malwarelu/malwasm](https://github.com/malwarelu/malwasm) Offline debugger for malware's reverse engineering
-- [**100**星][21d] [C++] [m2team/privexec](https://github.com/m2team/privexec) Run the program with the specified permission level (C++17 required)
- [**100**星][12m] [Py] [krintoxi/noobsec-toolkit](https://github.com/krintoxi/noobsec-toolkit) NoobSecToolkit is a Python Based Tool kit that brings together powerful security and anonymity tools and scripts with predefined security configurations and modifications. Making it very simple for students and the inexperienced to get started with offensive security!
+- [**100**星][5d] [Java] [jpmorganchase/tessera](https://github.com/jpmorganchase/tessera) Enterprise Implementation of Quorum's transaction manager
- [**100**星][4y] [Py] [jonathansalwan/abf](https://github.com/jonathansalwan/abf) Abstract Binary Format Manipulation - ELF, PE and Mach-O format
+- [**100**星][1m] [jonaschn/awesome-he](https://github.com/jonaschn/awesome-he)
- [**100**星][3y] [C] [jndok/iokit-dumper-arm64](https://github.com/jndok/iokit-dumper-arm64) tool for statically reconstructing the IOKit classes hierarchy from iOS kernelcache dumps
-- [**100**星][6m] [Py] [janniskirschner/horn3t](https://github.com/janniskirschner/horn3t) Powerful Visual Subdomain Enumeration at the Click of a Mouse
- [**100**星][4y] [C] [ionescu007/hookingnirvana](https://github.com/ionescu007/hookingnirvana) Recon 2015 Presentation from Alex Ionescu
-- [**100**星][16d] [PHP] [io-developer/php-whois](https://github.com/io-developer/php-whois) PHP WHOIS provides parsed and raw whois lookup of domains and ASN routes. PHP 5.4+ and 7+ compatible
-- [**100**星][3m] [C++] [giovannidicanio/winreg](https://github.com/giovannidicanio/winreg) Convenient high-level C++ wrapper around the Windows Registry API
- [**100**星][2y] [Py] [g0rx/cve-2018-7600-drupal-rce](https://github.com/g0rx/cve-2018-7600-drupal-rce) CVE-2018-7600 Drupal RCE
-- [**100**星][7m] [fox-it/cobaltstrike-extraneous-space](https://github.com/fox-it/cobaltstrike-extraneous-space) Historical list of {Cobalt Strike,NanoHTTPD} servers
+- [**100**星][2y] [C++] [fvantienen/dji_rev](https://github.com/fvantienen/dji_rev) DJI Reverse engineering
+- [**100**星][8m] [fox-it/cobaltstrike-extraneous-space](https://github.com/fox-it/cobaltstrike-extraneous-space) Historical list of {Cobalt Strike,NanoHTTPD} servers
+- [**100**星][4y] [Py] [eset/vba-dynamic-hook](https://github.com/eset/vba-dynamic-hook) dynamically analyzes VBA macros inside Office documents by hooking function calls
+- [**100**星][2m] [Py] [elevenpaths/uac-a-mola](https://github.com/elevenpaths/uac-a-mola)
- [**100**星][3m] [Py] [cs01/pygdbmi](https://github.com/cs01/pygdbmi) A library to parse gdb mi output, as well as control gdb subprocesses
- [**100**星][4y] [Py] [cr4sh/uefi_boot_script_expl](https://github.com/cr4sh/uefi_boot_script_expl) CHIPSEC module that exploits UEFI boot script table vulnerability
+- [**100**星][2y] [C] [comsecuris/luaqemu](https://github.com/comsecuris/luaqemu) QEMU-based framework exposing several of QEMU-internal APIs to a LuaJIT core injected into QEMU itself. Among other things, this allows fast prototyping of target systems without any native code and minimal effort in Lua.
- [**100**星][1y] [C] [cnlohr/fx3fun](https://github.com/cnlohr/fx3fun) Charles's playground for the Cypress FX3
-- [**100**星][1y] [C#] [chrismaddalena/sharpcloud](https://github.com/chrismaddalena/sharpcloud) Simple C# for checking for the existence of credential files related to AWS, Microsoft Azure, and Google Compute.
- [**100**星][5y] [Py] [blasty/moneyshot](https://github.com/blasty/moneyshot) A collection of python scripts to aid you in the final steps of binary exploitation or during the construction of buffers.
-- [**100**星][9d] [Scala] [bigdatagenomics/mango](https://github.com/bigdatagenomics/mango) A scalable genome browser. Apache 2 licensed.
- [**100**星][2y] [JS] [avlidienbrunn/bountydash](https://github.com/avlidienbrunn/bountydash) 从所有BugBounty平台收集你获取的奖励信息, 生成进度和漏洞类型信息图表等
+- [**100**星][2y] [C++] [artsabintsev/ethminer-for-macos](https://github.com/artsabintsev/ethminer-for-macos) Ethereum GPU Miner for macOS.
- [**100**星][1m] [Py] [angr/claripy](https://github.com/angr/claripy) An abstraction layer for constraint solvers.
-- [**100**星][8m] [Objective-C] [anders/pwgen](https://github.com/anders/pwgen) password generator for OS X
+- [**100**星][8m] [ObjC] [anders/pwgen](https://github.com/anders/pwgen) password generator for OS X
- [**100**星][4y] [Py] [alexplaskett/qnxsecurity](https://github.com/alexplaskett/qnxsecurity) QNX and BB10 Security Tools
- [**100**星][2y] [Py] [acceis/crypto_identifier](https://github.com/acceis/crypto_identifier) Crypto tool for pentest and ctf : try to uncipher data using multiple algorithms and block chaining modes. Usefull for a quick check on unknown cipher text and key dictionnary
- [**100**星][11m] [1hack0/bug-bounty-101](https://github.com/1hack0/bug-bounty-101) Happy Hunting
-- [**100**星][3m] [Java] [0ffffffffh/dragondance](https://github.com/0ffffffffh/dragondance) 在Ghidra中进行代码覆盖情况的可视化
- - [Ghidra插件](https://github.com/0ffffffffh/dragondance/blob/master/README.md)
- - [coverage-pin](https://github.com/0ffffffffh/dragondance/blob/master/coveragetools/README.md) 使用Pin收集信息
-- [**99**星][8d] [JS] [javascript-obfuscator/javascript-obfuscator-ui](https://github.com/javascript-obfuscator/javascript-obfuscator-ui) A web UI to the JavaScript Obfuscator node.js package.
+- [**99**星][2m] [Shell] [nfc-tools/milazycracker](https://github.com/nfc-tools/milazycracker) Mifare Classic Plus - Hardnested Attack Implementation for SCL3711 LibNFC USB reader
+- [**99**星][10d] [JS] [javascript-obfuscator/javascript-obfuscator-ui](https://github.com/javascript-obfuscator/javascript-obfuscator-ui) A web UI to the JavaScript Obfuscator node.js package.
- [**99**星][10m] [winterssy/miui-purify](https://github.com/winterssy/miui-purify) 个人兴趣项目存档,使用 apktool 魔改 MIUI ROM,去除 MIUI 系统新增的广告。
+- [**99**星][14d] [Py] [devploit/xorpass](https://github.com/devploit/xorpass) Encoder to bypass WAF filters using XOR operations
+- [**99**星][2d] [TSQL] [cisagov/cset](https://github.com/cisagov/cset) Cybersecurity Evaluation Tool
+- [**99**星][17d] [PS] [dsccommunity/computermanagementdsc](https://github.com/dsccommunity/ComputerManagementDsc)
- [**99**星][4m] [houjingyi233/cpu-vulnerability-collections](https://github.com/houjingyi233/CPU-vulnerability-collections)
- [**99**星][2y] [Shell] [aoncyberlabs/cexigua](https://github.com/AonCyberLabs/Cexigua) Linux based inter-process code injection without ptrace(2)
-- [**99**星][20d] [Py] [rapid7/le](https://github.com/rapid7/le) A command line utility for a convenient access to Logentries logging infrastructure.
+- [**99**星][1m] [PHP] [gwillem/magevulndb](https://github.com/gwillem/magevulndb) Central repository for third party Magento extensions with known security issues.
+- [**99**星][22d] [Py] [rapid7/le](https://github.com/rapid7/le) A command line utility for a convenient access to Logentries logging infrastructure.
- [**99**星][2y] [antid0tecom/ios-kerneldocs](https://github.com/Antid0teCom/ios-kerneldocs) Various files helping to better understand the iOS / WatchOS / tvOS kernels
-- [**99**星][3y] [C] [sciencemanx/ctf_import](https://github.com/sciencemanx/ctf_import) Run basic functions from stripped binaries cross platform
- [**99**星][2y] [C++] [atxsinn3r/amsiscanner](https://github.com/atxsinn3r/amsiscanner) A C/C++ implementation of Microsoft's Antimalware Scan Interface
- [**99**星][9m] [C#] [zodiacon/peexplorer](https://github.com/zodiacon/peexplorer) Portable Executable Explorer
- [**99**星][3y] [Py] [ym2011/scanbackdoor](https://github.com/ym2011/scanbackdoor) Webshell扫描工具,通过各种规则和算法实现服务器脚本后门查杀
-- [**99**星][3m] [xx0hcd/malleable-c2-profiles](https://github.com/xx0hcd/malleable-c2-profiles) Cobalt Strike - Malleable C2 Profiles. A collection of profiles used in different projects using Cobalt Strike
+- [**99**星][2y] [C] [xerpi/ds4vita](https://github.com/xerpi/ds4vita)
- [**99**星][1y] [Py] [wonderqs/blade](https://github.com/wonderqs/blade) A webshell connection tool with customized WAF bypass payloads
-- [**99**星][3y] [Py] [williballenthin/shellbags](https://github.com/williballenthin/shellbags) Cross-platform, open-source shellbag parser
-- [**99**星][25d] [Shell] [trimstray/massh-enum](https://github.com/trimstray/massh-enum) OpenSSH 2.3 up to 7.4 Mass Username Enumeration (CVE-2018-15473).
-- [**99**星][2y] [Py] [trendmicro/defplorex](https://github.com/trendmicro/defplorex) 一种用于大规模电子犯罪取证的机器学习工具包
+- [**99**星][27d] [Shell] [trimstray/massh-enum](https://github.com/trimstray/massh-enum) OpenSSH 2.3 up to 7.4 Mass Username Enumeration (CVE-2018-15473).
+- [**99**星][14d] [C++] [trailofbits/sienna-locomotive](https://github.com/trailofbits/sienna-locomotive) A user-friendly fuzzing and crash triage tool for Windows
- [**99**星][1y] [Py] [thehappydinoa/iosrestrictionbruteforce](https://github.com/thehappydinoa/iosrestrictionbruteforce) Crack iOS Restriction Passcodes with Python
-- [**99**星][2y] [PowerShell] [testingpens/malwarepersistencescripts](https://github.com/testingpens/malwarepersistencescripts) A collection of scripts I've written to help red and blue teams with malware persistence techniques.
+- [**99**星][2y] [PS] [testingpens/malwarepersistencescripts](https://github.com/testingpens/malwarepersistencescripts) A collection of scripts I've written to help red and blue teams with malware persistence techniques.
- [**99**星][9y] [C] [tecknicaltom/dsniff](https://github.com/tecknicaltom/dsniff) dsniff is a collection of tools for network auditing and penetration testing.
- [**99**星][12m] [target/webbreaker](https://github.com/target/webbreaker) 自动并集中管理DAST,将其作为 DevOps pipeline 的一部分。(DAST:Dynamic Application Security Test,动态应用程序安全测试)
- [**99**星][3y] [C++] [tandasat/exploitcapcom](https://github.com/tandasat/exploitcapcom) This is a standalone exploit for a vulnerable feature in Capcom.sys
+- [**99**星][2y] [Py] [sonickun/ctf-crypto-writeups](https://github.com/sonickun/ctf-crypto-writeups)
- [**99**星][6m] [Py] [smythtech/sdnpwn](https://github.com/smythtech/sdnpwn) SDN 渗透测试工具包。(SDN:Software-Defined Networks,软件定义网络)
- [**99**星][4y] [Py] [racwn/wp-file-analyser](https://github.com/racwn/wp-file-analyser) Find modified, missing and extra files in a WordPress directory
- [**99**星][3y] [Java] [pwntester/s2-046-poc](https://github.com/pwntester/s2-046-poc) S2-046-PoC
- [**99**星][2y] [Py] [pure-l0g1c/pulse](https://github.com/pure-l0g1c/pulse) Brute Force For Facebook,Instagram & Twitter
- [**99**星][6m] [Shell] [parrotsec/anonsurf](https://github.com/parrotsec/anonsurf) parrot anonymous mode
-- [**99**星][26d] [C++] [oxagast/ansvif](https://github.com/oxagast/ansvif) A Not So Very Intelligent Fuzzer: An advanced fuzzing framework designed to find vulnerabilities in C/C++ code.
-- [**99**星][10m] [C] [nowrep/vita-shellbat](https://github.com/nowrep/vita-shellbat) taiHEN plugin that shows battery percent in statusbar
+- [**99**星][28d] [C++] [oxagast/ansvif](https://github.com/oxagast/ansvif) A Not So Very Intelligent Fuzzer: An advanced fuzzing framework designed to find vulnerabilities in C/C++ code.
+- [**99**星][1y] [PS] [nettitude/invoke-powerthief](https://github.com/nettitude/invoke-powerthief) The PowerThIEf, an Internet Explorer Post Exploitation library
- [**99**星][2y] [Py] [mr-un1k0d3r/sct-obfuscator](https://github.com/mr-un1k0d3r/sct-obfuscator) Cobalt Strike SCT payload obfuscator
+- [**99**星][2d] [TeX] [misp/misp-training](https://github.com/misp/misp-training) MISP trainings, threat intel and information sharing training materials with source code
+- [**99**星][2m] [Py] [m4cs/traxss](https://github.com/m4cs/traxss) traxss | Automated XSS Vulnerability Scanner Currently In Development
- [**99**星][3y] [lorexxar/feigong](https://github.com/lorexxar/feigong) Feigong,针对各种情况自由变化的mysql注入脚本,In view of the different things freely change the mysql injection script
- [**99**星][2y] [CSS] [lmy375/pinvmp](https://github.com/lmy375/pinvmp) 虚拟化代码辅助分析工具
+- [**99**星][30d] [Py] [lambdaconcept/minerva](https://github.com/lambdaconcept/minerva) A 32-bit RISC-V soft processor
- [**99**星][2m] [Shell] [johanlike/djy-oneplus6-or-oneplus6t-nethunter-andrax-kernel](https://github.com/johanlike/djy-oneplus6-or-oneplus6t-nethunter-andrax-kernel) DJY Nethunter And Andrax Kernel Oneplus6-Oneplus6T
- [**99**星][3y] [Java] [jkinder/jakstab](https://github.com/jkinder/jakstab) The Jakstab static analysis platform for binaries
- [**99**星][3m] [Py] [intezer/memorypatchdetector](https://github.com/intezer/memorypatchdetector) Detects code differentials between executables in disk and the corresponding processes/modules in memory
- [**99**星][2m] [C] [iaik/flush_flush](https://github.com/iaik/flush_flush) This repository contains examples of Flush+Flush cache attacks
- [**99**星][11m] [hasherezade/pe-bear-releases](https://github.com/hasherezade/pe-bear-releases) PE-bear (builds only)
-- [**99**星][2y] [C++] [fvantienen/dji_rev](https://github.com/fvantienen/dji_rev) DJI Reverse engineering
-- [**99**星][3y] [flothrone/bootguard](https://github.com/flothrone/bootguard)
+- [**99**星][1y] [Java] [ganyao114/va_doc](https://github.com/ganyao114/va_doc) VirtualApp 代码注释
- [**99**星][5y] [Java] [finn-no/xss-html-filter](https://github.com/finn-no/xss-html-filter) Open Sourced HTML filtering utility for Java. Used to parse user-submitted input and sanitize it against potential cross site scripting attacks, malicious html, or simply badly formed html.
- [**99**星][1y] [Py] [darx0r/stingray](https://github.com/darx0r/stingray) 递归查找函数和字符串
-- [**99**星][2y] [C] [comsecuris/luaqemu](https://github.com/comsecuris/luaqemu) QEMU-based framework exposing several of QEMU-internal APIs to a LuaJIT core injected into QEMU itself. Among other things, this allows fast prototyping of target systems without any native code and minimal effort in Lua.
+- [**99**星][3y] [C#] [cyberpoint/ruxcon2016etw](https://github.com/cyberpoint/ruxcon2016etw) Ruxcon2016 POC Code
- [**99**星][3y] [C] [codelion/pathgrind](https://github.com/codelion/pathgrind) Path based Dynamic Analysis
+- [**99**星][4m] [Py] [circl/url-abuse](https://github.com/circl/url-abuse) A Versatile Software for URL review, analysis and black-list reporting
- [**99**星][3y] [Py] [bontchev/wlscrape](https://github.com/bontchev/wlscrape) A tool for scrapping the possible malware from the Wikileaks AKP leak
+- [**99**星][4y] [JS] [bishopfox/cve-2016-1764](https://github.com/bishopfox/cve-2016-1764) Recovery of Plaintext iMessage Data Without Breaking Crypto
+- [**99**星][8d] [Scala] [bigdatagenomics/mango](https://github.com/bigdatagenomics/mango) A scalable genome browser. Apache 2 licensed.
- [**99**星][9m] [Py] [attactics/nmapgrapher](https://github.com/attactics/nmapgrapher) A tool to generate graph and other output from NMAP XML files
- [**99**星][1y] [C#] [atredispartners/cve-2018-0952-systemcollector](https://github.com/atredispartners/cve-2018-0952-systemcollector) PoC for Privilege Escalation in Windows 10 Diagnostics Hub Standard Collector Service
-- [**98**星][2m] [Shell] [nfc-tools/milazycracker](https://github.com/nfc-tools/milazycracker) Mifare Classic Plus - Hardnested Attack Implementation for SCL3711 LibNFC USB reader
-- [**98**星][6m] [C] [siguza/iometa](https://github.com/siguza/iometa) Just another IOKit class dumper
- [**98**星][4y] [C] [aquynh/unidos](https://github.com/aquynh/unidos) MSDOS emulator built on top of Unicorn engine
+- [**98**星][7d] [Shell] [seajaysec/cypheroth](https://github.com/seajaysec/cypheroth) Automated, extensible toolset that runs cypher queries against Bloodhound's Neo4j backend and saves output to spreadsheets.
+- [**98**星][3m] [C++] [marcosd4h/sysmonx](https://github.com/marcosd4h/sysmonx) An Augmented Drop-In Replacement of Sysmon
+- [**98**星][23d] [chryzsh/awesome-bloodhound](https://github.com/chryzsh/awesome-bloodhound) A curated list of awesome BloodhoundAD resources
- [**98**星][1m] [C] [radareorg/radare2-bindings](https://github.com/radareorg/radare2-bindings) Bindings of the r2 api for Valabind and friends
-- [**98**星][1m] [PHP] [gwillem/magevulndb](https://github.com/gwillem/magevulndb) Central repository for third party Magento extensions with known security issues.
- [**98**星][8m] [Py] [zsdlove/apkvulcheck](https://github.com/zsdlove/apkvulcheck) This is a tool to help androidcoder to check the flaws in their projects.
-- [**98**星][2y] [C] [xerpi/ds4vita](https://github.com/xerpi/ds4vita)
+- [**98**星][2y] [Py] [trendmicro/defplorex](https://github.com/trendmicro/defplorex) 一种用于大规模电子犯罪取证的机器学习工具包
- [**98**星][9m] [Go] [superfly/wormhole](https://github.com/superfly/wormhole) Fly.io secure tunnel
- [**98**星][4y] [Java] [summitt/burp-ysoserial](https://github.com/summitt/burp-ysoserial) YSOSERIAL Integration with burp suite
-- [**98**星][2y] [Py] [sonickun/ctf-crypto-writeups](https://github.com/sonickun/ctf-crypto-writeups)
- [**98**星][3y] [singe/wifi-frequency-hacker](https://github.com/singe/wifi-frequency-hacker) A modified frequency regulatory domain configuration that doesn't limit you.
- [**98**星][2m] [Ruby] [simp/simp-core](https://github.com/simp/simp-core) The base SIMP build repository
- [**98**星][4y] [PHP] [silentbreaksec/throwbacklp](https://github.com/silentbreaksec/throwbacklp) Listening Post for Throwback Implant
+- [**98**星][2y] [Java] [securityriskadvisors/cmd.jsp](https://github.com/securityriskadvisors/cmd.jsp) A super small jsp webshell with file upload capabilities.
- [**98**星][6y] [C++] [sdhash/sdhash](https://github.com/sdhash/sdhash) allows two arbitrary blobs of data to be compared for similarity based on common strings of binary data
- [**98**星][1y] [Py] [scottgarner/beetbox](https://github.com/scottgarner/beetbox) Python code that powers the BeetBox.
-- [**98**星][1y] [sapran/dontclickshit](https://github.com/sapran/dontclickshit) Як не стати кібер-жертвою
+- [**98**星][1m] [Py] [sandialabs/dr_robot](https://github.com/sandialabs/dr_robot) This tool can be used to enumerate the subdomains associated with a company by aggregating the results of multiple OSINT (Open Source Intelligence) tools.
+- [**98**星][11m] [Batchfile] [sagishahar/lpeworkshop](https://github.com/sagishahar/lpeworkshop) Windows/Linux本地提权工作室
- [**98**星][3m] [Py] [phith0n/realworldctf](https://github.com/phith0n/realworldctf) My Real World CTF challenges
- [**98**星][5y] [Py] [onesourcecat/scan-framework](https://github.com/onesourcecat/scan-framework) A framework used for Vulnerability scanning
+- [**98**星][10m] [C] [nowrep/vita-shellbat](https://github.com/nowrep/vita-shellbat) taiHEN plugin that shows battery percent in statusbar
- [**98**星][4m] [Py] [mushorg/tanner](https://github.com/mushorg/tanner) He who flays the hide
+- [**98**星][4m] [C++] [mixaill/fakepdb](https://github.com/mixaill/fakepdb) 通过IDA数据库生成PDB文件
- [**98**星][4m] [Py] [milo2012/cve-2018-13382](https://github.com/milo2012/cve-2018-13382) CVE-2018-13382
- [**98**星][2y] [C] [micropython/micropython-unicorn](https://github.com/micropython/micropython-unicorn) 基于 Unicorn 模拟器的虚拟微控制器(virtual microcontroller),以及针对此虚拟微控制器的 MicroPython。
- [**98**星][3y] [Py] [merculite/ble-security](https://github.com/merculite/ble-security) Hacking Bluetooth Low Energy Locks
@@ -8512,44 +9020,54 @@ capabilities of the framework.
- [**98**星][3y] [Py] [matiasb/demiurge](https://github.com/matiasb/demiurge) PyQuery-based scraping micro-framework.
- [**98**星][1m] [Go] [ls0f/cracker](https://github.com/ls0f/cracker) tunnel over http[s]
- [**98**星][2y] [Py] [leesoh/yams](https://github.com/leesoh/yams) A collectionof Ansible roles for automating infosec builds.
-- [**98**星][28d] [Py] [lambdaconcept/minerva](https://github.com/lambdaconcept/minerva) A 32-bit RISC-V soft processor
- [**98**星][2y] [ktecv2000/how-to-play-ctf](https://github.com/ktecv2000/how-to-play-ctf) CTF入門建議
+- [**98**星][15d] [Shell] [konstruktoid/ansible-role-hardening](https://github.com/konstruktoid/ansible-role-hardening) Ansible role to apply a security baseline. Systemd edition.
- [**98**星][8m] [Swift] [kofktu/sniffer](https://github.com/kofktu/sniffer) Networking activity logger for Swift
- [**98**星][2y] [Py] [kitctf/writeups](https://github.com/kitctf/writeups) CTF writeups
-- [**98**星][7d] [Java] [jpmorganchase/tessera](https://github.com/jpmorganchase/tessera) Enterprise Implementation of Quorum's transaction manager
- [**98**星][1y] [C] [jakeajames/multi_path](https://github.com/jakeajames/multi_path) multi_path with root and sandbox escape
- [**98**星][2y] [Java] [irsl/jackson-rce-via-spel](https://github.com/irsl/jackson-rce-via-spel) An example project that exploits the default typing issue in Jackson-databind via Spring application contexts and expressions
-- [**98**星][3y] [Objective-C] [insidegui/darkmode](https://github.com/insidegui/darkmode) Enable "real dark mode" on OS X / macOS
+- [**98**星][3y] [ObjC] [insidegui/darkmode](https://github.com/insidegui/darkmode) Enable "real dark mode" on OS X / macOS
- [**98**星][3m] [Py] [guyingbo/shadowproxy](https://github.com/guyingbo/shadowproxy) A proxy server that implements Socks5/Shadowsocks/Redirect/HTTP (tcp) and Shadowsocks/TProxy/Tunnel (udp) protocols.
- [**98**星][1y] [Ruby] [green-m/green-hat-suite](https://github.com/green-m/green-hat-suite) Green-hat-suite is a tool to generate meterpreter/shell which could evade antivirus.
- [**98**星][2y] [Py] [google/legilimency](https://github.com/google/legilimency) A Memory Research Platform for iOS
- [**98**星][3y] [Shell] [gebl/dirtycow-docker-vdso](https://github.com/gebl/dirtycow-docker-vdso)
-- [**98**星][2m] [Py] [elevenpaths/uac-a-mola](https://github.com/elevenpaths/uac-a-mola)
-- [**98**星][3y] [C#] [cyberpoint/ruxcon2016etw](https://github.com/cyberpoint/ruxcon2016etw) Ruxcon2016 POC Code
+- [**98**星][5m] [Py] [fmk0/scripts](https://github.com/fmk0/scripts)
+- [**98**星][3y] [flothrone/bootguard](https://github.com/flothrone/bootguard)
- [**98**星][2y] [C++] [cojocar/bin2llvm](https://github.com/cojocar/bin2llvm) A binary to LLVM translator
-- [**98**星][3y] [PowerShell] [chango77747/adenumerator](https://github.com/chango77747/adenumerator) Active Directory enumeration from non-domain system.
-- [**98**星][7d] [PowerShell] [awsmhacks/crackmapextreme](https://github.com/awsmhacks/crackmapextreme) For all your network pentesting needs
+- [**98**星][3y] [PS] [chango77747/adenumerator](https://github.com/chango77747/adenumerator) Active Directory enumeration from non-domain system.
+- [**98**星][2m] [byt3bl33d3r/slides](https://github.com/byt3bl33d3r/slides) Slides from various talks that I've given over the years
+- [**98**星][2y] [Py] [blackye/webdirdig](https://github.com/blackye/webdirdig) web敏感目录、信息泄漏批量扫描脚本,结合爬虫、目录深度遍历。
- [**98**星][4m] [Pascal] [artlav/meteor_decoder](https://github.com/artlav/meteor_decoder) A portable decoder for METEOR M weather satellite LRPT signal
-- [**98**星][7m] [Py] [alexmyg/andropytool](https://github.com/alexmyg/andropytool) A framework for automated extraction of static and dynamic features from Android applications
+- [**98**星][4y] [Java] [andrewmichaelsmith/bluepot](https://github.com/andrewmichaelsmith/bluepot) Bluetooth Honeypot
- [**98**星][1y] [Go] [0x09al/go-deliver](https://github.com/0x09al/go-deliver) Go-deliver is a payload delivery tool coded in Go.
-- [**97**星][1y] [PowerShell] [hackplayers/empire-mod-hackplayers](https://github.com/hackplayers/empire-mod-hackplayers) PowerShell Empire mod to post-exploit the World!
+- [**97**星][1y] [Go] [bechurch/reverse-proxy-demo](https://github.com/bechurch/reverse-proxy-demo)
+- [**97**星][1y] [Py] [tonyseek/rsocks](https://github.com/tonyseek/rsocks) A SOCKS 4/5 reverse proxy server
+- [**97**星][2d] [Py] [securisec/chepy](https://github.com/securisec/chepy) Chepy is a python lib/cli equivalent of the awesome CyberChef tool.
+- [**97**星][1y] [PS] [hackplayers/empire-mod-hackplayers](https://github.com/hackplayers/empire-mod-hackplayers) PowerShell Empire mod to post-exploit the World!
- [**97**星][11m] [R] [stephenturner/annotables](https://github.com/stephenturner/annotables) R data package for annotating/converting Gene IDs
+- [**97**星][3m] [C] [virtualabs/radiobit](https://github.com/virtualabs/radiobit) Micro:Bit Radio framework
- [**97**星][3m] [xyntax/security-conference-archive](https://github.com/xyntax/security-conference-archive) Collection of Security Conference Slides/Papers
+- [**97**星][1m] [PHP] [cybercog/laravel-optimus](https://github.com/cybercog/laravel-optimus) Transform your internal id's to obfuscated integers based on Knuth's integer hash.
+- [**97**星][28d] [C++] [4d61726b/virtualkd-redux](https://github.com/4d61726b/virtualkd-redux) VirtualKD-Redux - A revival and modernization of VirtualKD
+- [**97**星][1m] [Py] [xct/ropstar](https://github.com/xct/ropstar) Automatic exploit generation for simple linux pwn challenges.
+- [**97**星][20d] [Py] [pagalaxylab/vxhunter](https://github.com/PAGalaxyLab/vxhunter) 用于分析基于VxWorks的嵌入式设备的工具集
+ - [R2](https://github.com/PAGalaxyLab/vxhunter/blob/master/firmware_tools/vxhunter_r2_py2.py)
+ - [IDA插件](https://github.com/PAGalaxyLab/vxhunter/blob/master/firmware_tools/vxhunter_ida.py)
+ - [Ghidra插件](https://github.com/PAGalaxyLab/vxhunter/tree/master/firmware_tools/ghidra)
- [**97**星][2y] [CSS] [owasp/owasp-summit-2017](https://github.com/OWASP/owasp-summit-2017) Content for OWASP Summit 2017 site
+- [**97**星][4y] [Java] [zencodex/hack-android](https://github.com/zencodex/hack-android) Collection tools for hack android, java
+- [**97**星][3y] [Ruby] [zcgonvh/cve-2017-7269](https://github.com/zcgonvh/cve-2017-7269) cve-2017-7269:修订版msf模块
- [**97**星][4m] [Py] [woanware/usbdeviceforensics](https://github.com/woanware/usbdeviceforensics) Python script for extracting USB information from Windows registry hives
- [**97**星][3m] [C] [vmonaco/kloak](https://github.com/vmonaco/kloak) Keystroke-level online anonymization kernel: obfuscates typing behavior at the device level.
-- [**97**星][12d] [C++] [trailofbits/sienna-locomotive](https://github.com/trailofbits/sienna-locomotive) A user-friendly fuzzing and crash triage tool for Windows
- [**97**星][2y] [Go] [subgraph/fw-daemon](https://github.com/subgraph/fw-daemon) Subgraph Application Firewall
- [**97**星][10m] [Shell] [sskaje/6in4](https://github.com/sskaje/6in4) IPv6-in-IPv4 Tunnel Server
-- [**97**星][2y] [Java] [spiderlabs/airachnid-burp-extension](https://github.com/spiderlabs/airachnid-burp-extension) A Burp Extension to test applications for vulnerability to the Web Cache Deception attack
- [**97**星][8m] [Shell] [shadowhatesyou/pipetap.sh](https://github.com/shadowhatesyou/pipetap.sh) This script invokes tcpdump over ssh piping to STDOUT, allowing remote use of wireshark
-- [**97**星][2y] [Java] [securityriskadvisors/cmd.jsp](https://github.com/securityriskadvisors/cmd.jsp) A super small jsp webshell with file upload capabilities.
-- [**97**星][1m] [Py] [sandialabs/dr_robot](https://github.com/sandialabs/dr_robot) This tool can be used to enumerate the subdomains associated with a company by aggregating the results of multiple OSINT (Open Source Intelligence) tools.
-- [**97**星][2y] [Py] [robindavid/idasec](https://github.com/robindavid/idasec) IDA插件,与Binsec 平台进行交互
+- [**97**星][5m] [C] [s0lst1c3/silentbridge](https://github.com/s0lst1c3/silentbridge) Silentbridge is a toolkit for bypassing 802.1x-2010 and 802.1x-2004.
+- [**97**星][6y] [Py] [roglew/wifikill](https://github.com/roglew/wifikill) A python program to kick people off of wifi
- [**97**星][4y] [Py] [ridter/myjsrat](https://github.com/ridter/myjsrat) This is JSRat.ps1 in Python
-- [**97**星][2y] [PowerShell] [rhinosecuritylabs/aggressor-scripts](https://github.com/rhinosecuritylabs/aggressor-scripts) Aggregation of Cobalt Strike's aggressor scripts.
+- [**97**星][2y] [PS] [rhinosecuritylabs/aggressor-scripts](https://github.com/rhinosecuritylabs/aggressor-scripts) Aggregation of Cobalt Strike's aggressor scripts.
- [**97**星][9m] [Go] [renatoathaydes/go-hash](https://github.com/renatoathaydes/go-hash) Small utility to store secret information like passwords.
-- [**97**星][2m] [Shell] [qubesos/qubes-antievilmaid](https://github.com/qubesos/qubes-antievilmaid) an implementation of a TPM-based dynamic (Intel TXT) trusted
+- [**97**星][12d] [Shell] [qubesos/qubes-antievilmaid](https://github.com/qubesos/qubes-antievilmaid) an implementation of a TPM-based dynamic (Intel TXT) trusted
boot for dracut/initramfs-based OSes (Fedora, Qubes, etc.) with a primary goal
to prevent Evil Maid attacks.
- [**97**星][4y] [C++] [quarkslab/qb-sync](https://github.com/quarkslab/qb-sync) 使用调试器调试时,自动在IDA中跟随调试位置
@@ -8560,66 +9078,70 @@ to prevent Evil Maid attacks.
- [WinDbg](https://github.com/quarkslab/qb-sync/tree/master/ext_windbg/sync)
- [x64dbg](https://github.com/quarkslab/qb-sync/tree/master/ext_x64dbg)
- [**97**星][2y] [Java] [piasy/fridaandroidtracer](https://github.com/piasy/fridaandroidtracer) A runnable jar that generate Javascript hook script to hook Android classes.
-- [**97**星][7m] [PowerShell] [p3nt4/magiccopy](https://github.com/p3nt4/magiccopy) Powershell script to exfiltrate large files quickly and securely
+- [**97**星][7m] [PS] [p3nt4/magiccopy](https://github.com/p3nt4/magiccopy) Powershell script to exfiltrate large files quickly and securely
- [**97**星][1y] [Go] [netxfly/crack_ssh](https://github.com/netxfly/crack_ssh) go写的协程版的ssh\redis\mongodb弱口令破解工具
- [**97**星][2y] [Go] [mxi4oyu/dockerxscan](https://github.com/mxi4oyu/dockerxscan) DockerXScan——Docker镜像漏洞扫描器
- [**97**星][1y] [Py] [mitshell/libmich](https://github.com/mitshell/libmich) Easy developpement of formats [de]coding for network protocols (IP, mobile...) and files
- [**97**星][2y] [Swift] [liruqi/mume-ios](https://github.com/liruqi/mume-ios) an iOS client that implements custom proxies with the leverage of Network Extension framework introduced by Apple since iOS 9
-- [**97**星][13d] [Shell] [konstruktoid/ansible-role-hardening](https://github.com/konstruktoid/ansible-role-hardening) Ansible role to apply a security baseline. Systemd edition.
-- [**97**星][1m] [jonaschn/awesome-he](https://github.com/jonaschn/awesome-he)
+- [**97**星][30d] [C] [libyal/libevtx](https://github.com/libyal/libevtx) Library and tools to access the Windows XML Event Log (EVTX) format
- [**97**星][1y] [C++] [jeremywildsmith/x86devirt](https://github.com/jeremywildsmith/x86devirt) A project that aims to automatically devirtualize code that has been virtualized using x86virt
+- [**97**星][5m] [Py] [itsmehacker/cardpwn](https://github.com/itsmehacker/cardpwn) OSINT Tool to find Breached Credit Cards Information
- [**97**星][1y] [C#] [holly-hacker/eazfixer](https://github.com/holly-hacker/eazfixer) A deobfuscation tool for Eazfuscator.
-- [**97**星][1y] [Java] [ganyao114/va_doc](https://github.com/ganyao114/va_doc) VirtualApp 代码注释
+- [**97**星][3y] [C] [georgenicolaou/w64owow64](https://github.com/georgenicolaou/w64owow64) Library that allows you to run 64bit code on a Wow64 32bit process
- [**97**星][3y] [Py] [fdiskyou/kcshell](https://github.com/fdiskyou/kcshell) 交互式汇编/反汇编 Shell,Python3编写,基于Keystone/Capstone
+- [**97**星][23d] [C++] [fdiskyou/iris](https://github.com/fdiskyou/iris) WinDbg extension to display Windows process mitigations
- [**97**星][2y] [Py] [dakotanelson/sneaky-creeper](https://github.com/dakotanelson/sneaky-creeper) Get your APT on using social media as a tool for data exfiltration.
- [**97**星][3y] [Py] [cx9527/strongdb](https://github.com/cx9527/strongdb) gdb plugin for android debugging
-- [**97**星][4m] [Py] [circl/url-abuse](https://github.com/circl/url-abuse) A Versatile Software for URL review, analysis and black-list reporting
- [**97**星][2y] [HTML] [chrisallenlane/drek](https://github.com/chrisallenlane/drek) drek:静态代码分析工具,用于执行以安全性为主的代码审计
-- [**97**星][2m] [byt3bl33d3r/slides](https://github.com/byt3bl33d3r/slides) Slides from various talks that I've given over the years
-- [**97**星][2y] [Py] [blackye/webdirdig](https://github.com/blackye/webdirdig) web敏感目录、信息泄漏批量扫描脚本,结合爬虫、目录深度遍历。
-- [**97**星][4y] [Java] [andrewmichaelsmith/bluepot](https://github.com/andrewmichaelsmith/bluepot) Bluetooth Honeypot
- [**97**星][6m] [Java] [an0nymous0/mybatisplugin-crack-javassist](https://github.com/an0nymous0/mybatisplugin-crack-javassist) Javassist实现的破解IDEA MybatisPlugin修改字节码工具,仅供学习用途。
+- [**97**星][12m] [Assembly] [86hh/dreamloader](https://github.com/86hh/dreamloader) Simple 32/64-bit PEs loader.
+- [**97**星][5y] [C++] [0vercl0k/ollydbg2-python](https://github.com/0vercl0k/ollydbg2-python) Scripting OllyDBG2 using Python is now possible!
+- [**96**星][2m] [C++] [xiangweizeng/darknet2ncnn](https://github.com/xiangweizeng/darknet2ncnn) Darknet2ncnn converts the darknet model to the ncnn model
+- [**96**星][5d] [Ruby] [bl4de/dictionaries](https://github.com/bl4de/dictionaries) Misc dictionaries for directory/file enumeration, username enumeration, password dictionary/bruteforce attacks
- [**96**星][2m] [404notf0und/always-learning](https://github.com/404notf0und/always-learning) 404 Not Found的知识库:计算机基础、前端技术、编程技术、底层研究、安全技术、安全研究、人工智能、企业安全建设、安全发展、综合素质
-- [**96**星][1m] [Shell] [seajaysec/cypheroth](https://github.com/seajaysec/cypheroth) Automated, extensible toolset that runs cypher queries against Bloodhound's Neo4j backend and saves output to spreadsheets.
-- [**96**星][3m] [C++] [marcosd4h/sysmonx](https://github.com/marcosd4h/sysmonx) An Augmented Drop-In Replacement of Sysmon
-- [**96**星][14d] [Py] [b17zr/ntlm_challenger](https://github.com/b17zr/ntlm_challenger) Parse NTLM over HTTP challenge messages
-- [**96**星][7d] [TSQL] [cisagov/cset](https://github.com/cisagov/cset) Cybersecurity Evaluation Tool
+- [**96**星][2y] [JS] [paulsec/shodan-firefox-addon](https://github.com/paulsec/shodan-firefox-addon) Shodan Firefox Add-on
+- [**96**星][3m] [Java] [guardianproject/pixelknot](https://github.com/guardianproject/pixelknot) Image stego app using the F5 algorithm
+- [**96**星][19d] [Py] [fboldewin/com-code-helper](https://github.com/fboldewin/com-code-helper) IDAPython脚本, 辅助重建MS COM 代码
+- [**96**星][1m] [C#] [tyranid/windowsrpcclients](https://github.com/tyranid/windowsrpcclients) This respository is a collection of C# class libraries which implement RPC clients for various versions of the Windows Operating System from 7 to Windows 10.
+- [**96**星][16d] [Py] [b17zr/ntlm_challenger](https://github.com/b17zr/ntlm_challenger) Parse NTLM over HTTP challenge messages
+- [**96**星][1m] [smi1esec/web-security-note](https://github.com/Smi1eSEC/Web-Security-Note) Record some common Web security sites
- [**96**星][11m] [Py] [presto412/captcha-cracker](https://github.com/Presto412/Captcha-Cracker) Cracks the Captcha at VIT University's Academics Portal
-- [**96**星][15d] [PowerShell] [dsccommunity/computermanagementdsc](https://github.com/dsccommunity/ComputerManagementDsc)
-- [**96**星][4y] [PowerShell] [nsacyber/certificate-authority-situational-awareness](https://github.com/nsacyber/Certificate-Authority-Situational-Awareness) Identifies unexpected and prohibited certificate authority certificates on Windows systems. #nsacyber
+- [**96**星][25d] [Py] [nkargas/gen2-uhf-rfid-reader](https://github.com/nkargas/Gen2-UHF-RFID-Reader) Gen2 UHF RFID reader with USRP and GNU Radio. Tested with USRPN200 and GNU Radio v3.7.4
+- [**96**星][4y] [PS] [nsacyber/certificate-authority-situational-awareness](https://github.com/nsacyber/Certificate-Authority-Situational-Awareness) Identifies unexpected and prohibited certificate authority certificates on Windows systems. #nsacyber
- [**96**星][1y] [Shell] [xme/misp-docker](https://github.com/xme/misp-docker) Docker container for MISP
- [**96**星][2y] [Py] [unix-ninja/shellfire](https://github.com/unix-ninja/shellfire) Exploitation shell for exploiting LFI, RFI, and command injection vulnerabilities
- [**96**星][3y] [Py] [torque59/nosqlpot](https://github.com/torque59/nosqlpot) The NoSQL Honeypot Framework
+- [**96**星][2y] [Java] [tengzhangchao/pycmd](https://github.com/tengzhangchao/pycmd) python+php+jsp WebShell(一句话木马)
- [**96**星][5y] [sooshie/security-data-analysis](https://github.com/sooshie/security-data-analysis) A series of labs that will help users apply various data science techniques to security related data.
- [**96**星][3y] [HTML] [skiptomyliu/solutions-bwapp](https://github.com/skiptomyliu/solutions-bwapp) In progress rough solutions to bWAPP / bee-box
- [**96**星][3y] [secmobi/slides](https://github.com/secmobi/slides) My presentations in some recent security conferences
- [**96**星][3y] [C] [s4n7h0/practical-reverse-engineering-using-radare2](https://github.com/s4n7h0/practical-reverse-engineering-using-radare2) Training Materials of Practical Reverse Engineering using Radare2
-- [**96**星][5m] [C] [s0lst1c3/silentbridge](https://github.com/s0lst1c3/silentbridge) Silentbridge is a toolkit for bypassing 802.1x-2010 and 802.1x-2004.
-- [**96**星][6y] [Py] [roglew/wifikill](https://github.com/roglew/wifikill) A python program to kick people off of wifi
+- [**96**星][2y] [Py] [robindavid/idasec](https://github.com/robindavid/idasec) IDA插件,与Binsec 平台进行交互
+- [**96**星][1y] [Py] [njcx/pocsuite_poc_collect](https://github.com/njcx/pocsuite_poc_collect) 收集一些 poc with pocsuite框架
- [**96**星][2y] [Lua] [niallmcl/deep-android-malware-detection](https://github.com/niallmcl/deep-android-malware-detection) Code for Deep Android Malware Detection paper
- [**96**星][3y] [Py] [neuroo/equip](https://github.com/neuroo/equip) Python bytecode instrumentation library
- [**96**星][1y] [Py] [mrmtwoj/0day-mikrotik](https://github.com/mrmtwoj/0day-mikrotik)
- [**96**星][4m] [HTML] [momenbasel/keyfinder](https://github.com/momenbasel/keyfinder) Keyfinder
-- [**96**星][4m] [C++] [mixaill/fakepdb](https://github.com/mixaill/fakepdb) 通过IDA数据库生成PDB文件
+- [**96**星][7m] [Py] [michyamrane/okadminfinder3](https://github.com/michyamrane/okadminfinder3) [ Admin panel finder / Admin Login Page Finder ] ¢σ∂є∂ ву
- [**96**星][3y] [Py] [magicming200/tomcat-weak-password-scanner](https://github.com/magicming200/tomcat-weak-password-scanner) 醉考拉tomcat后台弱口令扫描器,命令行版+图形界面版。
-- [**96**星][2m] [Py] [m4cs/traxss](https://github.com/m4cs/traxss) traxss | Automated XSS Vulnerability Scanner Currently In Development
- [**96**星][3y] [C++] [luctalpe/wmimon](https://github.com/luctalpe/wmimon) Tool to monitor WMI activity on Windows
-- [**96**星][28d] [C] [libyal/libevtx](https://github.com/libyal/libevtx) Library and tools to access the Windows XML Event Log (EVTX) format
+- [**96**星][23d] [Py] [leeon123/cc-attack](https://github.com/leeon123/cc-attack) Using Socks4/5 proxy to make a multithread Http-flood/Https-flood (cc) attack.
- [**96**星][5y] [Py] [le4f/dnsmaper](https://github.com/le4f/dnsmaper) 子域名枚举与地图标记
- [**96**星][7y] [Py] [k3170makan/goodork](https://github.com/k3170makan/goodork) Command line go0gle dorking tool
- [**96**星][2y] [Py] [jjf012/passivescanner](https://github.com/jjf012/passivescanner) a passive scanner based on Mitmproxy and Arachni
-- [**96**星][2m] [ihebski/a-red-teamer-diaries](https://github.com/ihebski/a-red-teamer-diaries) RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.
+- [**96**星][2y] [Java] [jgillam/burp-co2](https://github.com/jgillam/burp-co2) A collection of enhancements for Portswigger's popular Burp Suite web penetration testing tool.
+- [**96**星][7y] [Py] [jeffbryner/pyioc](https://github.com/jeffbryner/pyioc) Python tools for IOC (Indicator of Compromise) handling
+- [**96**星][3m] [Pascal] [hongludianxue/bailu-sed-tool](https://github.com/hongludianxue/bailu-sed-tool) 白鹿社工字典生成器,灵活与易用兼顾。
- [**96**星][2y] [Py] [he1m4n6a/btscan](https://github.com/he1m4n6a/btscan) 批量漏洞扫描框架
+- [**96**星][17d] [Ruby] [hahwul/mad-metasploit](https://github.com/hahwul/mad-metasploit) Metasploit custom modules, plugins, resource script and.. awesome metasploit collection
- [**96**星][1m] [JS] [google/service-worker-detector](https://github.com/google/service-worker-detector) This extension detects if a website registers a Service Worker.
-- [**96**星][2m] [C++] [glmcdona/strings2](https://github.com/glmcdona/strings2) extracting strings from binary data
-- [**96**星][3y] [C] [georgenicolaou/w64owow64](https://github.com/georgenicolaou/w64owow64) Library that allows you to run 64bit code on a Wow64 32bit process
+- [**96**星][7d] [C++] [glmcdona/strings2](https://github.com/glmcdona/strings2) extracting strings from binary data
- [**96**星][2m] [geeksonsecurity/vuln-web-apps](https://github.com/geeksonsecurity/vuln-web-apps) A curated list of vulnerable web applications.
- [**96**星][6m] [Shell] [gavinlyonsrepo/cylon](https://github.com/gavinlyonsrepo/cylon) Updates, maintenance, backups and system checks in a TUI menu driven bash shell script for an Arch based Linux distro
+- [**96**星][20d] [Py] [felamos/weirdhta](https://github.com/felamos/weirdhta) A python tool to create obfuscated HTA script.
- [**96**星][1y] [Pascal] [fdiskyou/www.rootkit.com](https://github.com/fdiskyou/www.rootkit.com)
-- [**96**星][21d] [C++] [fdiskyou/iris](https://github.com/fdiskyou/iris) WinDbg extension to display Windows process mitigations
-- [**96**星][5y] [Py] [eugeniodelfa/smali-cfgs](https://github.com/eugeniodelfa/smali-cfgs) Smali Control Flow Graph's
-- [**96**星][4y] [Py] [eset/vba-dynamic-hook](https://github.com/eset/vba-dynamic-hook) dynamically analyzes VBA macros inside Office documents by hooking function calls
- [**96**星][6y] [C] [enzolovesbacon/inficere](https://github.com/enzolovesbacon/inficere) Mac OS X rootkit - for learning purposes
+- [**96**星][2d] [dxxzst/free-proxy-list](https://github.com/dxxzst/free-proxy-list) Free proxy list 免费的代理IP,定时更新,优先更新:
- [**96**星][1y] [JS] [desudesutalk/desudesutalk](https://github.com/desudesutalk/desudesutalk) Steganography for imageboards
- [**96**星][7m] [Swift] [depoon/networkinterceptor](https://github.com/depoon/networkinterceptor) iOS URLRequest interception framework
- [**96**星][1y] [Py] [danmcinerney/msf-autopwn](https://github.com/danmcinerney/msf-autopwn) Autoexploitation of some of the most common vulnerabilities in wild
@@ -8629,193 +9151,197 @@ to prevent Evil Maid attacks.
- [**96**星][3m] [Java] [bastienjalbert/topguw](https://github.com/bastienjalbert/topguw) A software to make easier some cracking GSM steps (known plaintext attack vector)
- [**96**星][8m] [Shell] [baguswiratmaadi/catnip](https://github.com/baguswiratmaadi/catnip) Cat-Nip Automated Basic Pentest Tool - Designed For Kali Linux
- [**96**星][2y] [JS] [anttikurittu/kirjuri](https://github.com/anttikurittu/kirjuri) Kirjuri is a web application for managing cases and physical forensic evidence items.
-- [**96**星][7d] [Shell] [anandkumar11u/oscp-60days](https://github.com/anandkumar11u/oscp-60days) OSCP All Tools are Here ...!! ***
-- [**96**星][11d] [Py] [airbus-cert/regrippy](https://github.com/airbus-cert/regrippy) a framework for reading and extracting useful forensics data from Windows registry hives
-- [**96**星][12m] [Assembly] [86hh/dreamloader](https://github.com/86hh/dreamloader) Simple 32/64-bit PEs loader.
-- [**96**星][5y] [C++] [0vercl0k/ollydbg2-python](https://github.com/0vercl0k/ollydbg2-python) Scripting OllyDBG2 using Python is now possible!
+- [**96**星][13d] [Py] [airbus-cert/regrippy](https://github.com/airbus-cert/regrippy) a framework for reading and extracting useful forensics data from Windows registry hives
- [**96**星][7y] [0day1day/mwcrawler](https://github.com/0day1day/mwcrawler) Python Malware Crawler for Zoos and Repositories
-- [**95**星][4m] [Ruby] [bl4de/dictionaries](https://github.com/bl4de/dictionaries) Misc dictionaries for directory/file enumeration, username enumeration, password dictionary/bruteforce attacks
-- [**95**星][1m] [C#] [n1xbyte/donutcs](https://github.com/n1xbyte/donutcs) dem sharp donuts
-- [**95**星][7m] [C#] [virb3/de4dot-cex](https://github.com/virb3/de4dot-cex) de4dot deobfuscator with full support for vanilla ConfuserEx
-- [**95**星][1m] [C#] [tyranid/windowsrpcclients](https://github.com/tyranid/windowsrpcclients) This respository is a collection of C# class libraries which implement RPC clients for various versions of the Windows Operating System from 7 to Windows 10.
-- [**95**星][12d] [Py] [devploit/xorpass](https://github.com/devploit/xorpass) Encoder to bypass WAF filters using XOR operations
+- [**95**星][25d] [C] [ssd-secure-disclosure/advisories](https://github.com/ssd-secure-disclosure/advisories) SSD Secure Disclosure Advisories
- [**95**星][2m] [ashemery/linuxforensics](https://github.com/ashemery/LinuxForensics) Everything related to Linux Forensics
- [**95**星][9m] [C] [sagaantheepic/sagaan-anticheat-v2.0](https://github.com/ContionMig/ContionMig-AntiCheat) Anti Cheat i made in my free time. Credits to everyone who helped are in the files and some are in the code. I will definitely improve this Anti Cheat along the way, now its just beta. Enjoy.
-- [**95**星][23d] [Py] [nkargas/gen2-uhf-rfid-reader](https://github.com/nkargas/Gen2-UHF-RFID-Reader) Gen2 UHF RFID reader with USRP and GNU Radio. Tested with USRPN200 and GNU Radio v3.7.4
-- [**95**星][2y] [Py] [radareorg/r2con2017](https://github.com/radareorg/r2con2017) r2con 2017 September 6-9
+- [**95**星][1y] [sectool/redteam-hardware-toolkit](https://github.com/sectool/redteam-hardware-toolkit)
+- [**95**星][1y] [Shell] [cyb0r9/quasar](https://github.com/Cyb0r9/quasar) An Information Gathering Framework For Lazy Penetration Testers
- [**95**星][11m] [Java] [open-keychain/openpgp-api](https://github.com/open-keychain/openpgp-api) OpenPGP API library
- [**95**星][2m] [Py] [ubuntu-mate/mate-dock-applet](https://github.com/ubuntu-mate/mate-dock-applet) application dock for the MATE panel
-- [**95**星][4y] [Java] [zencodex/hack-android](https://github.com/zencodex/hack-android) Collection tools for hack android, java
-- [**95**星][3y] [Ruby] [zcgonvh/cve-2017-7269](https://github.com/zcgonvh/cve-2017-7269) cve-2017-7269:修订版msf模块
-- [**95**星][2y] [Objective-C] [xslim/mobiledevicemanager](https://github.com/xslim/mobiledevicemanager) Manage iOS devices through iTunes lib
+- [**95**星][6d] [JS] [frida/frida-java-bridge](https://github.com/frida/frida-java-bridge) Java runtime interop from Frida
+- [**95**星][2y] [ObjC] [xslim/mobiledevicemanager](https://github.com/xslim/mobiledevicemanager) Manage iOS devices through iTunes lib
- [**95**星][3y] [Py] [v1cker/src_edu](https://github.com/v1cker/src_edu) 为各位出色的渗透工程师提供攻击目标。
-- [**95**星][2y] [Java] [tengzhangchao/pycmd](https://github.com/tengzhangchao/pycmd) python+php+jsp WebShell(一句话木马)
+- [**95**星][3y] [Py] [tehsyntx/loffice](https://github.com/tehsyntx/loffice) Lazy Office Analyzer
- [**95**星][1m] [Py] [songguoxiong/wenshu_utils](https://github.com/songguoxiong/wenshu_utils) 裁判文书网 参数加解密工具库 for Python and Java
- [**95**星][2y] [Pascal] [senjaxus/allakore_remote](https://github.com/senjaxus/allakore_remote) AllaKore Remote is Open Source Remote Access software written in Delphi Seattle.
- [**95**星][2y] [Py] [safebreach-labs/mkmalwarefrom](https://github.com/safebreach-labs/mkmalwarefrom) Proof-of-concept two-stage dropper generator that uses bits from external sources
-- [**95**星][2m] [Py] [pyudev/pyudev](https://github.com/pyudev/pyudev) Python bindings to libudev (with support for PyQt4, PySide, pygobject and wx)
+- [**95**星][3y] [Shell] [ppabc/security_check](https://github.com/ppabc/security_check) LINUX安全检查脚本,支持centos5,centos6,ubuntu
- [**95**星][1y] [Java] [pengzhile/atlassian-agent](https://github.com/pengzhile/atlassian-agent) Atlassian's productions crack.
- [**95**星][2y] [Java] [oliverklee/pixy](https://github.com/oliverklee/pixy) Pixy is a scanner static code analysis tools that scans PHP applications for security vulnerabilities.
-- [**95**星][1y] [Py] [njcx/pocsuite_poc_collect](https://github.com/njcx/pocsuite_poc_collect) 收集一些 poc with pocsuite框架
+- [**95**星][3y] [Py] [nowsecure/samsung-ime-rce-poc](https://github.com/nowsecure/samsung-ime-rce-poc) Samsung Remote Code Execution as System User
+- [**95**星][5y] [Py] [nihilus/ida-idc-scripts](https://github.com/nihilus/ida-idc-scripts) 多个IDC脚本收集
- [**95**星][1y] [Py] [n4xh4ck5/cmssc4n](https://github.com/n4xh4ck5/cmssc4n) Tool to identify if a domain is a CMS such as Wordpress, Moodle, Joomla, Drupal or Prestashop
-- [**95**星][7d] [TeX] [misp/misp-training](https://github.com/misp/misp-training) MISP trainings, threat intel and information sharing training materials with source code
- [**95**星][1m] [JS] [microsoftedge/jsdbg](https://github.com/microsoftedge/jsdbg) Debugging extensions for Microsoft Edge and other Chromium-based browsers
-- [**95**星][7m] [Py] [michyamrane/okadminfinder3](https://github.com/michyamrane/okadminfinder3) [ Admin panel finder / Admin Login Page Finder ] ¢σ∂є∂ ву
+- [**95**星][3m] [Py] [matrix07ksa/brute_force](https://github.com/matrix07ksa/brute_force) Brute_Force_Attack Gmail Hotmail Twitter Facebook Netflix
- [**95**星][1y] [Py] [martinvigo/voicemailautomator](https://github.com/martinvigo/voicemailautomator) A tool that serves as a Proof of Concept for the research I presented at DEF CON 26, "Compromising online accounts by cracking voicemail systems"
- [**95**星][5y] [C++] [malwaretech/fakembr](https://github.com/malwaretech/fakembr) TDL4 style rootkit to spoof read/write requests to master boot record
+- [**95**星][2y] [CSS] [malaohu/arukas-api](https://github.com/malaohu/arukas-api) Arukas API 自动获取IP和端口,SSR服务器订阅,Arukas 监测启动
+- [**95**星][3m] [Py] [lonely-night/fastjson_gadgets_scanner](https://github.com/lonely-night/fastjson_gadgets_scanner)
- [**95**星][2y] [Py] [localh0t/wildpwn](https://github.com/localh0t/wildpwn) unix wildcard attacks
- [**95**星][2m] [Py] [jssimporter/jssimporter](https://github.com/jssimporter/jssimporter) Upload packages made with AutoPkg to your Jamf Pro server with customizable policies.
-- [**95**星][2y] [Java] [jgillam/burp-co2](https://github.com/jgillam/burp-co2) A collection of enhancements for Portswigger's popular Burp Suite web penetration testing tool.
+- [**95**星][4y] [Shell] [jlrodriguezf/whatspwn](https://github.com/jlrodriguezf/whatspwn) Linux tool used to extract sensitive data, inject backdoor or drop remote shells on android devices.
- [**95**星][3y] [PHP] [jas502n/fuzz-wooyun-org](https://github.com/jas502n/fuzz-wooyun-org) WooYun Fuzz 库
-- [**95**星][5m] [Py] [itsmehacker/cardpwn](https://github.com/itsmehacker/cardpwn) OSINT Tool to find Breached Credit Cards Information
-- [**95**星][7d] [CSS] [hongkonggong/tldr-digital-security](https://github.com/hongkonggong/tldr-digital-security) TLDR Digital Safety Checklist
+- [**95**星][2y] [Py] [jas502n/2018-qwb-ctf](https://github.com/jas502n/2018-qwb-ctf) 2018强网杯CTF___题目整理
+- [**95**星][7y] [C#] [ilikenwf/darkagent](https://github.com/ilikenwf/darkagent) DarkAgent Remote Administration Tool RAT by DragonHunter
+- [**95**星][2y] [guardianproject/tor-browser](https://github.com/guardianproject/tor-browser) UPDATE: Orfox is being replaced by Tor Browser for Android. All future work and comments will be handled by Tor Project.
- [**95**星][2y] [Py] [gaasedelen/prefix](https://github.com/gaasedelen/prefix) IDA 插件,为函数添加前缀
+- [**95**星][1y] [HTML] [frizb/sourcecodesniffer](https://github.com/frizb/sourcecodesniffer) The Source Code Sniffer is a poor man’s static code analysis tool (SCA) that leverages regular expressions. Designed to highlight high risk functions (Injection, LFI/RFI, file uploads etc) across multiple languages (ASP, Java, CSharp, PHP, Perl, Python, JavaScript, HTML etc) in a highly configurable manner.
- [**95**星][7y] [JS] [feross/fullscreen-api-attack](https://github.com/feross/fullscreen-api-attack) Demo of phishing attack on the native HTML5 full screen API.
-- [**95**星][10m] [PowerShell] [equk/windows](https://github.com/equk/windows) tweaks for Windows
-- [**95**星][4y] [PowerShell] [enigma0x3/invoke-altdsbackdoor](https://github.com/enigma0x3/invoke-altdsbackdoor)
+- [**95**星][5y] [Py] [eugeniodelfa/smali-cfgs](https://github.com/eugeniodelfa/smali-cfgs) Smali Control Flow Graph's
+- [**95**星][10m] [PS] [equk/windows](https://github.com/equk/windows) tweaks for Windows
+- [**95**星][4y] [PS] [enigma0x3/invoke-altdsbackdoor](https://github.com/enigma0x3/invoke-altdsbackdoor)
- [**95**星][2m] [C++] [dzzie/vs_libemu](https://github.com/dzzie/vs_libemu) Visual Studio 2008 port of the libemu library that includes scdbg.exe, a modification of the sctest project, that includes more hooks, interactive debugging, reporting features, and ability to work with file format exploit shellcode.
- [**95**星][9y] [Py] [dugsong/pypcap](https://github.com/dugsong/pypcap) Automatically exported from code.google.com/p/pypcap
- [**95**星][9m] [C#] [djhohnstein/eventlogparser](https://github.com/djhohnstein/eventlogparser) Parse PowerShell and Security event logs for sensitive information.
+- [**95**星][8m] [Go] [covenantsql/cookiescanner](https://github.com/covenantsql/cookiescanner) Cookie Scanner for GDPR compliance
- [**95**星][2m] [PHP] [commixproject/commix-testbed](https://github.com/commixproject/commix-testbed) A collection of web pages, vulnerable to command injection flaws.
-- [**95**星][11d] [Py] [brieflyx/ctf-pwns](https://github.com/brieflyx/ctf-pwns) Some pwn challenges selected for training and education.
-- [**94**星][2y] [JS] [paulsec/shodan-firefox-addon](https://github.com/paulsec/shodan-firefox-addon) Shodan Firefox Add-on
-- [**94**星][1m] [PHP] [cybercog/laravel-optimus](https://github.com/cybercog/laravel-optimus) Transform your internal id's to obfuscated integers based on Knuth's integer hash.
-- [**94**星][1m] [Py] [xct/ropstar](https://github.com/xct/ropstar) Automatic exploit generation for simple linux pwn challenges.
+- [**95**星][12m] [bughunterid/hackeronedb](https://github.com/bughunterid/hackeronedb) The unofficial HackerOne disclosure Timeline
+- [**95**星][2y] [Py] [blackploit/hash-identifier](https://github.com/blackploit/hash-identifier) Software to identify the different types of hashes used to encrypt data and especially passwords
+- [**95**星][2y] [PS] [australiancybersecuritycentre/windows_event_logging](https://github.com/australiancybersecuritycentre/windows_event_logging) Windows Event Forwarding subscriptions, configuration files and scripts that assist with implementing ACSC's protect publication, Technical Guidance for Windows Event Logging.
+- [**94**星][4m] [JS] [beepisla/csgo-crash-exploit](https://github.com/beepisla/csgo-crash-exploit) Allows you to crash any Windows user
+- [**94**星][2y] [Shell] [functionclub/localecn](https://github.com/functionclub/localecn) 更改Linux服务器终端显示语言为中文的脚本
- [**94**星][3y] [HTML] [sewellding/lfiboomctf](https://github.com/SewellDinG/LFIboomCTF) 本地文件包含漏洞&&PHP利用协议&&实践源码
- [**94**星][4m] [C] [adamlaurie/chronic](https://github.com/AdamLaurie/ChronIC) A wearable Sub-GHz RF hacking tool
-- [**94**星][18d] [Py] [pagalaxylab/vxhunter](https://github.com/PAGalaxyLab/vxhunter) 用于分析基于VxWorks的嵌入式设备的工具集
- - [R2](https://github.com/PAGalaxyLab/vxhunter/blob/master/firmware_tools/vxhunter_r2_py2.py)
- - [IDA插件](https://github.com/PAGalaxyLab/vxhunter/blob/master/firmware_tools/vxhunter_ida.py)
- - [Ghidra插件](https://github.com/PAGalaxyLab/vxhunter/tree/master/firmware_tools/ghidra)
-- [**94**星][1y] [Shell] [cyb0r9/quasar](https://github.com/Cyb0r9/quasar) An Information Gathering Framework For Lazy Penetration Testers
-- [**94**星][2m] [JS] [frida/frida-java-bridge](https://github.com/frida/frida-java-bridge) Java runtime interop from Frida
+- [**94**星][2y] [Py] [radareorg/r2con2017](https://github.com/radareorg/r2con2017) r2con 2017 September 6-9
- [**94**星][2y] [C++] [waryas/umpmlib](https://github.com/waryas/umpmlib) A library to manipulate physical memory from usermode.
-- [**94**星][5m] [JS] [w00dl3cs/exploit_playground](https://github.com/w00dl3cs/exploit_playground)
-- [**94**星][8m] [PowerShell] [vletoux/smbscanner](https://github.com/vletoux/smbscanner) Smb Scanner from PingCastle
+- [**94**星][3d] [JS] [w00dl3cs/exploit_playground](https://github.com/w00dl3cs/exploit_playground)
+- [**94**星][8m] [PS] [vletoux/smbscanner](https://github.com/vletoux/smbscanner) Smb Scanner from PingCastle
- [**94**星][4m] [Py] [thewhiteh4t/killcast](https://github.com/thewhiteh4t/killcast) Manipulate Chromecast Devices in your Network
+- [**94**星][6y] [C++] [stealth/fraud-bridge](https://github.com/stealth/fraud-bridge) ICMP and DNS tunneling via IPv4 and IPv6
- [**94**星][1m] [JS] [securityrat/securityrat](https://github.com/securityrat/securityrat) OWASP SecurityRAT (version 1.x) - Tool for handling security requirements in development
- [**94**星][1m] [Py] [raikia/kali-setup](https://github.com/raikia/kali-setup) Script for Kali that adds a bunch of tools and customizes it to be much better
-- [**94**星][2y] [Objective-C] [r0ysue/osg-teams](https://github.com/r0ysue/osg-teams) 希望大家在合作中学习姿势、提升技术、交流感情。比赛第二,友谊第一。
-- [**94**星][3y] [Py] [nowsecure/samsung-ime-rce-poc](https://github.com/nowsecure/samsung-ime-rce-poc) Samsung Remote Code Execution as System User
-- [**94**星][5y] [Py] [nihilus/ida-idc-scripts](https://github.com/nihilus/ida-idc-scripts) 多个IDC脚本收集
+- [**94**星][2y] [ObjC] [r0ysue/osg-teams](https://github.com/r0ysue/osg-teams) 希望大家在合作中学习姿势、提升技术、交流感情。比赛第二,友谊第一。
+- [**94**星][2m] [Py] [pyudev/pyudev](https://github.com/pyudev/pyudev) Python bindings to libudev (with support for PyQt4, PySide, pygobject and wx)
- [**94**星][7y] [Shell] [nccgroup/port-scan-automation](https://github.com/nccgroup/port-scan-automation) Automate NMAP Scans and Generate Custom Nessus Policies Automatically
+- [**94**星][7m] [Py] [mr-un1k0d3r/shellcoding](https://github.com/mr-un1k0d3r/shellcoding) Shellcoding utilities
- [**94**星][1y] [Shell] [mindpointgroup/rhel6-stig](https://github.com/mindpointgroup/rhel6-stig) Ansible role for Red Hat 6 DISA STIG
+- [**94**星][5m] [CSS] [mike-goodwin/owasp-threat-dragon-desktop](https://github.com/mike-goodwin/owasp-threat-dragon-desktop) An installable desktop variant of OWASP Threat Dragon
- [**94**星][12m] [Batchfile] [mdsecactivebreach/sharppack](https://github.com/mdsecactivebreach/sharppack) insider threat assessments that lets you defeat application whitelisting to execute arbitrary DotNet and PowerShell tools.
+- [**94**星][2y] [Py] [lorenzog/dns-parallel-prober](https://github.com/lorenzog/dns-parallel-prober) PoC for an adaptive parallelised DNS prober
- [**94**星][6y] [lgrangeia/cupid](https://github.com/lgrangeia/cupid) Patch for hostapd and wpa_supplicant to attempt to exploit heartbleed on EAP-PEAP/TLS/TTLS connections
- [**94**星][5m] [Py] [lanmaster53/honeybadger](https://github.com/lanmaster53/honeybadger) a framework for targeted geolocation
-- [**94**星][4y] [Shell] [jlrodriguezf/whatspwn](https://github.com/jlrodriguezf/whatspwn) Linux tool used to extract sensitive data, inject backdoor or drop remote shells on android devices.
- [**94**星][9m] [C] [jcs/login_duress](https://github.com/jcs/login_duress) A BSD authentication module for duress passwords
- [**94**星][2y] [Py] [invictus1306/workshop-bsidesmunich2018](https://github.com/invictus1306/workshop-bsidesmunich2018) ARM shellcode and exploit development - BSidesMunich 2018
-- [**94**星][7y] [C#] [ilikenwf/darkagent](https://github.com/ilikenwf/darkagent) DarkAgent Remote Administration Tool RAT by DragonHunter
- [**94**星][2y] [Batchfile] [huntresslabs/evading-autoruns](https://github.com/huntresslabs/evading-autoruns) 几种用于逃避常见的驻留枚举工具的技术(Evading Autoruns,Derbycon 2017)
-- [**94**星][3m] [Pascal] [hongludianxue/bailu-sed-tool](https://github.com/hongludianxue/bailu-sed-tool) 白鹿社工字典生成器,灵活与易用兼顾。
- [**94**星][8m] [C++] [hlldz/apc-ppid](https://github.com/hlldz/apc-ppid) Adds a user-mode asynchronous procedure call (APC) object to the APC queue of the specified thread and spoof the Parent Process.
- [**94**星][2y] [C++] [hasherezade/pe_recovery_tools](https://github.com/hasherezade/pe_recovery_tools) Helper tools for recovering dumped PE files
-- [**94**星][15d] [Ruby] [hahwul/mad-metasploit](https://github.com/hahwul/mad-metasploit) Metasploit custom modules, plugins, resource script and.. awesome metasploit collection
-- [**94**星][1y] [HTML] [frizb/sourcecodesniffer](https://github.com/frizb/sourcecodesniffer) The Source Code Sniffer is a poor man’s static code analysis tool (SCA) that leverages regular expressions. Designed to highlight high risk functions (Injection, LFI/RFI, file uploads etc) across multiple languages (ASP, Java, CSharp, PHP, Perl, Python, JavaScript, HTML etc) in a highly configurable manner.
+- [**94**星][3y] [PS] [fuzzysecurity/capcom-rootkit](https://github.com/fuzzysecurity/capcom-rootkit) Capcom Rootkit POC
- [**94**星][8y] [Py] [firefart/hashcollision-dos-poc](https://github.com/firefart/hashcollision-dos-poc) Proof of Concept for the PHP and JAVA Hashcollision Denial of service attack
-- [**94**星][6m] [Visual Basic] [dzzie/idacompare](https://github.com/dzzie/idacompare) 汇编级别对比工具
+- [**94**星][6m] [Java] [felberj/gotools](https://github.com/felberj/gotools) Plugin for Ghidra to assist reversing Golang binaries
+- [**94**星][7m] [Visual Basic .NET] [dzzie/idacompare](https://github.com/dzzie/idacompare) 汇编级别对比工具
- [**94**星][3y] [Py] [donnchac/ubuntu-apport-exploitation](https://github.com/donnchac/ubuntu-apport-exploitation) This project contains a PoC and exploit generator for a code execution bug in Ubuntu's Apport crash reporter
- [**94**星][2y] [Java] [dexpatcher/dex2jar](https://github.com/dexpatcher/dex2jar) Unofficial dex2jar updated for Android 8
-- [**94**星][2m] [PowerShell] [dbheise/vm_setup](https://github.com/dbheise/vm_setup) A collection of scripts to initialize a windows VM to run all the malwares!
+- [**94**星][2m] [PS] [dbheise/vm_setup](https://github.com/dbheise/vm_setup) A collection of scripts to initialize a windows VM to run all the malwares!
- [**94**星][11m] [Java] [cspf-founder/javavulnerablelab](https://github.com/cspf-founder/javavulnerablelab) Vulnerable Java based Web Application
- [**94**星][6y] [Py] [crowdstrike/crowdfms](https://github.com/crowdstrike/crowdfms) CrowdStrike Feed Management System
-- [**94**星][28d] [Scala] [criteo/cuttle](https://github.com/criteo/cuttle) An embedded job scheduler.
-- [**94**星][8m] [Go] [covenantsql/cookiescanner](https://github.com/covenantsql/cookiescanner) Cookie Scanner for GDPR compliance
-- [**94**星][12m] [bughunterid/hackeronedb](https://github.com/bughunterid/hackeronedb) The unofficial HackerOne disclosure Timeline
-- [**94**星][2y] [Py] [blackthorne/codetective](https://github.com/blackthorne/codetective) a tool to determine the crypto/encoding algorithm used according to traces from its representation
-- [**94**星][4y] [JS] [bishopfox/cve-2016-1764](https://github.com/bishopfox/cve-2016-1764) Recovery of Plaintext iMessage Data Without Breaking Crypto
-- [**94**星][4m] [JS] [beepfelix/csgo-crash-exploit](https://github.com/beepfelix/csgo-crash-exploit) Allows you to crash any Windows user
-- [**94**星][2y] [PowerShell] [australiancybersecuritycentre/windows_event_logging](https://github.com/australiancybersecuritycentre/windows_event_logging) Windows Event Forwarding subscriptions, configuration files and scripts that assist with implementing ACSC's protect publication, Technical Guidance for Windows Event Logging.
+- [**94**星][3d] [Scala] [criteo/cuttle](https://github.com/criteo/cuttle) An embedded job scheduler.
+- [**94**星][4y] [C++] [cossacklabs/0fc](https://github.com/cossacklabs/0fc) Anonymous web chat server, built on top of Themis/WebThemis
+- [**94**星][3y] [JS] [compewter/copycat](https://github.com/compewter/copycat) Universal MITM web server
+- [**94**星][7d] [Go] [colettecontreras/v2ray-ssrpanel-plugin](https://github.com/colettecontreras/v2ray-ssrpanel-plugin) A buildin V2ray plugin for SSRPanel to sync users from database to v2ray, to log traffics/system info
+- [**94**星][2y] [Shell] [chorankates/h4ck](https://github.com/chorankates/h4ck) a collection of writeups and tools related to ~embedded device ~hacking
+- [**94**星][4m] [JS] [beepisla/csgo-crash-exploit](https://github.com/BeepIsla/csgo-crash-exploit) Allows you to crash any Windows user
+- [**94**星][5y] [Py] [atarantini/wpbf](https://github.com/atarantini/wpbf) Remotely test password strength of WordPress bloging software
+- [**94**星][3y] [C] [arno0x/diverttcpconn](https://github.com/arno0x/diverttcpconn) A TCP packet diverter for Windows platform
- [**94**星][3y] [appsecco/defcon24-infra-monitoring-workshop](https://github.com/appsecco/defcon24-infra-monitoring-workshop) Defcon24 Workshop Contents : Ninja Level Infrastructure Monitoring
- [**94**星][1m] [Assembly] [alanvivona/pwnshop](https://github.com/alanvivona/pwnshop) Exploit Development and Reverse Engineering topics
-- [**93**星][16d] [JS] [paradiseduo/shadowsocksx-ng-r8](https://github.com/paradiseduo/shadowsocksx-ng-r8) ShadowsocksX-NG-R for MacOS
-- [**93**星][21d] [chryzsh/awesome-bloodhound](https://github.com/chryzsh/awesome-bloodhound) A curated list of awesome BloodhoundAD resources
-- [**93**星][1m] [smi1esec/web-security-note](https://github.com/Smi1eSEC/Web-Security-Note) Record some common Web security sites
+- [**94**星][7d] [Py] [0xprateek/stardox](https://github.com/0xprateek/stardox) Github stargazers information gathering tool
+- [**93**星][10d] [Py] [gmdutra/cryptondie](https://github.com/gmdutra/cryptondie) PoC - cryptonDie is a ransomware developed for study purposes.
+- [**93**星][3m] [Py] [in3tinct/see-surf](https://github.com/in3tinct/see-surf) Python based scanner to find potential SSRF parameters
+- [**93**星][9d] [JS] [cn-panda/javacodeaudit](https://github.com/cn-panda/javacodeaudit) Learn java code auditing from scratch 一个Java 代码审计入门的小项目
+- [**93**星][2d] [PS] [gtworek/psbits](https://github.com/gtworek/psbits) Simple (mainly PowerShell) solutions allowing you to dig a bit deeper than usual.
- [**93**星][2y] [C] [duraki/virtualcar](https://github.com/duraki/virtualcar) A virtual car. Because you wouldn't download a car, would you?
+- [**93**星][10d] [Py] [gmdutra/cryptondie](https://github.com/gmdutra/cryptondie) PoC - cryptonDie is a ransomware developed for study purposes.
- [**93**星][11m] [C++] [ze0r/cve-2018-8453-exp](https://github.com/ze0r/cve-2018-8453-exp) cve-2018-8453 exp
- [**93**星][2y] [C] [zcgonvh/ntdsdumpex](https://github.com/zcgonvh/ntdsdumpex) NTDS.dit offline dumper with non-elevated
- [**93**星][4y] [Py] [zachriggle/peda](https://github.com/zachriggle/peda) PEDA - Python Exploit Development Assistance for GDB
- [**93**星][3y] [Py] [wiredcraft/dopy](https://github.com/wiredcraft/dopy) Digital Ocean Python
-- [**93**星][1m] [C] [weirdnox/emacs-gdb](https://github.com/weirdnox/emacs-gdb) GDB graphical interface for GNU Emacs
+- [**93**星][2m] [C] [weirdnox/emacs-gdb](https://github.com/weirdnox/emacs-gdb) GDB graphical interface for GNU Emacs
- [**93**星][5m] [Shell] [vincentbernat/eudyptula-boot](https://github.com/vincentbernat/eudyptula-boot) Boot a Linux kernel in a VM without a dedicated root filesystem.
- [**93**星][10m] [Py] [tijme/not-your-average-web-crawler](https://github.com/tijme/not-your-average-web-crawler) A web crawler (for bug hunting) that gathers more than you can imagine.
- [**93**星][5y] [Py] [thuxnder/dalvik-obfuscator](https://github.com/thuxnder/dalvik-obfuscator) a set of tools/scripts to obfuscate and manipulate dex files
- [**93**星][4m] [Py] [themadinventor/ida-xtensa](https://github.com/themadinventor/ida-xtensa) 分析Tensilica Xtensa (as seen in ESP8266)
+- [**93**星][2y] [C#] [them4hd1/pencrawler](https://github.com/them4hd1/pencrawler) An Advanced Web Crawler and DirBuster
- [**93**星][5m] [Py] [teemu-l/execution-trace-viewer](https://github.com/teemu-l/execution-trace-viewer) Tool for viewing and analyzing execution traces
- [**93**星][2y] [Java] [tdy218/ysoserial-cve-2018-2628](https://github.com/tdy218/ysoserial-cve-2018-2628) Some codes for bypassing Oracle WebLogic CVE-2018-2628 patch
- [**93**星][1y] [C#] [stufus/reconerator](https://github.com/stufus/reconerator) C# Targeted Attack Reconnissance Tools
- [**93**星][12m] [C] [stintel/vallumd](https://github.com/stintel/vallumd) Centralize or distribute IPset blacklists
- [**93**星][3y] [Py] [stamparm/tsusen](https://github.com/stamparm/tsusen) Network traffic sensor
+- [**93**星][2d] [Go] [sonatype-nexus-community/nancy](https://github.com/sonatype-nexus-community/nancy) A tool to check for vulnerabilities in your Golang dependencies, powered by Sonatype OSS Index
- [**93**星][5m] [F#] [softsec-kaist/eclipser](https://github.com/softsec-kaist/eclipser) Grey-box Concolic Testing on Binary Code
- [**93**星][1y] [Java] [sirmordred/angelaroot](https://github.com/sirmordred/angelaroot) An app which escalates root privilege on device and installs SuperSU through newly vulnerability "angela root" without unlocking bootloader
+- [**93**星][25d] [PHP] [shirosaidev/diskover-web](https://github.com/shirosaidev/diskover-web) Web file manager, disk space usage, storage search engine and file system analytics for diskover
- [**93**星][4y] [C] [scumjr/the-sea-watcher](https://github.com/scumjr/the-sea-watcher) Implementation of the SMM rootkit "The Watcher"
-- [**93**星][2y] [PowerShell] [sadprocessor/empiredog](https://github.com/sadprocessor/empiredog) A collection of PowerShell Modules for BloodHound/Empire Orchestration
+- [**93**星][2y] [PS] [sadprocessor/empiredog](https://github.com/sadprocessor/empiredog) A collection of PowerShell Modules for BloodHound/Empire Orchestration
- [**93**星][4y] [JS] [ro31337/hacktunnel](https://github.com/ro31337/hacktunnel) HackTunnel is web-based peer-to-peer chat software for anonymous and encrypted communication written with Go language
- [**93**星][1m] [C#] [retirenet/dotnet-retire](https://github.com/retirenet/dotnet-retire) Open source vulnerability scanner for .NET Core projects
-- [**93**星][3y] [Shell] [ppabc/security_check](https://github.com/ppabc/security_check) LINUX安全检查脚本,支持centos5,centos6,ubuntu
+- [**93**星][1y] [Jupyter Notebook] [positivetechnologies/seq2seq-web-attack-detection](https://github.com/positivetechnologies/seq2seq-web-attack-detection) The implementation of the Seq2Seq model for web attack detection. The Seq2Seq model is usually used in Neural Machine Translation. The main goal of this project is to demonstrate the relevance of the NLP approach for web security.
- [**93**星][7y] [C] [planetbeing/ios-jailbreak-patchfinder](https://github.com/planetbeing/ios-jailbreak-patchfinder) Analyzes a binary iOS kernel to determine function offsets and where to apply the canonical jailbreak patches.
+- [**93**星][4y] [C] [osandamalith/ipobfuscator](https://github.com/osandamalith/ipobfuscator) A simple tool to convert the IP to a DWORD IP
- [**93**星][7y] [Ruby] [openwiresec/metasploit](https://github.com/openwiresec/metasploit)
+- [**93**星][6m] [C#] [octokit/octokit.graphql.net](https://github.com/octokit/octokit.graphql.net) A GitHub GraphQL client library for .NET
- [**93**星][11m] [HTML] [nytrorst/xssfuzzer](https://github.com/nytrorst/xssfuzzer) XSS Fuzzer is a tool which generates XSS payloads based on user-defined vectors and fuzzing lists.
-- [**93**星][1y] [PowerShell] [nettitude/invoke-powerthief](https://github.com/nettitude/invoke-powerthief) The PowerThIEf, an Internet Explorer Post Exploitation library
- [**93**星][10m] [JS] [n0tan3rd/squidwarc](https://github.com/n0tan3rd/squidwarc) Squidwarc is a high fidelity, user scriptable, archival crawler that uses Chrome or Chromium with or without a head
-- [**93**星][7m] [Py] [mr-un1k0d3r/shellcoding](https://github.com/mr-un1k0d3r/shellcoding) Shellcoding utilities
+- [**93**星][2y] [Swift] [ming1016/smck](https://github.com/ming1016/smck) 用 Swift 编写的工程代码静态分析命令行工具 smck
- [**93**星][3y] [Go] [mauri870/powershell-reverse-http](https://github.com/mauri870/powershell-reverse-http)
- [**93**星][7y] [C] [m0nad/dns-discovery](https://github.com/m0nad/dns-discovery) DNS-Discovery is a multithreaded subdomain bruteforcer.
-- [**93**星][2y] [Py] [lorenzog/dns-parallel-prober](https://github.com/lorenzog/dns-parallel-prober) PoC for an adaptive parallelised DNS prober
+- [**93**星][11d] [Go] [lu4p/torat](https://github.com/lu4p/torat) ToRat is a Remote Administation tool written in Go using Tor as a transport mechanism and RPC for communication
- [**93**星][3y] [Py] [leonjza/ooktools](https://github.com/leonjza/ooktools) help with the reverse engineering of on-off keying data sources
- [**93**星][2y] [C++] [kentonv/dvorak-qwerty](https://github.com/kentonv/dvorak-qwerty) "Dvorak-Qwerty ⌘" (DQ) keyboard layout for Windows and Unix/Linux/X
-- [**93**星][2y] [Py] [jas502n/2018-qwb-ctf](https://github.com/jas502n/2018-qwb-ctf) 2018强网杯CTF___题目整理
- [**93**星][1y] [Py] [integrity-sa/droidstatx](https://github.com/integrity-sa/droidstatx) Python tool that generates an Xmind map with all the information gathered and any evidence of possible vulnerabilities identified via static analysis. The map itself is an Android Application Pentesting Methodology component, which assists Pentesters to cover all important areas during an assessment.
- [**93**星][2y] [C] [hdm/juniper-cve-2015-7755](https://github.com/hdm/juniper-cve-2015-7755) Notes, binaries, and related information from analysis of the CVE-2015-7755 & CVE-2015-7756 issues within Juniper ScreenOS
-- [**93**星][3y] [PowerShell] [fuzzysecurity/capcom-rootkit](https://github.com/fuzzysecurity/capcom-rootkit) Capcom Rootkit POC
+- [**93**星][3m] [Go] [grepplabs/kafka-proxy](https://github.com/grepplabs/kafka-proxy) Proxy connections to Kafka cluster. Connect through SOCKS Proxy, HTTP Proxy or to cluster running in Kubernetes.
- [**93**星][2y] [C++] [femto-dev/femto](https://github.com/femto-dev/femto) Sequence Indexing and Search
-- [**93**星][6m] [Java] [felberj/gotools](https://github.com/felberj/gotools) Plugin for Ghidra to assist reversing Golang binaries
-- [**93**星][10d] [Shell] [dylanaraps/bin](https://github.com/dylanaraps/bin)
+- [**93**星][11m] [C] [elfmaster/dsym_obfuscate](https://github.com/elfmaster/dsym_obfuscate) Obfuscates dynamic symbol table
+- [**93**星][7d] [Shell] [dylanaraps/bin](https://github.com/dylanaraps/bin)
- [**93**星][5y] [Py] [debasishm89/hack_audio_captcha](https://github.com/debasishm89/hack_audio_captcha) Collection of Scripts written to Solve/Crack Audio reCapcha Challenges
- [**93**星][2y] [Py] [debasishm89/burpy](https://github.com/debasishm89/burpy) Portable and flexible web application security assessment tool.It parses Burp Suite log and performs various tests depending on the module provided and finally generate a HTML report.
- [**93**星][3y] [Py] [cymmetria/mtpot](https://github.com/cymmetria/mtpot) Open Source Telnet Honeypot
-- [**93**星][3y] [JS] [compewter/copycat](https://github.com/compewter/copycat) Universal MITM web server
-- [**93**星][13d] [Shell] [clion007/dnsmasq](https://github.com/clion007/dnsmasq) 全自动dnsmasq及hosts科学上网,防DNS劫持及全面广告屏蔽脚本
+- [**93**星][15d] [Shell] [clion007/dnsmasq](https://github.com/clion007/dnsmasq) 全自动dnsmasq及hosts科学上网,防DNS劫持及全面广告屏蔽脚本
+- [**93**星][5y] [Shell] [ckuethe/usbarmory](https://github.com/ckuethe/usbarmory) Scripts, learnings, sample configurations, and random whining
- [**93**星][3y] [Vim script] [citizenlab/malware-signatures](https://github.com/citizenlab/malware-signatures) Yara rules for malware families seen as part of targeted threats project
-- [**93**星][2y] [Shell] [chorankates/h4ck](https://github.com/chorankates/h4ck) a collection of writeups and tools related to ~embedded device ~hacking
- [**93**星][2y] [Ruby] [carnal0wnage/metasploit-code](https://github.com/carnal0wnage/metasploit-code) Metasploit modules that didn't make it into trunk for some reason or the other
-- [**93**星][4y] [Py] [atarantini/wpbf](https://github.com/atarantini/wpbf) Remotely test password strength of WordPress bloging software
+- [**93**星][2y] [Py] [blackthorne/codetective](https://github.com/blackthorne/codetective) a tool to determine the crypto/encoding algorithm used according to traces from its representation
+- [**93**星][1y] [Shell] [arthastang/iot-implant-toolkit](https://github.com/arthastang/iot-implant-toolkit) Toolkit for implant attack of IoT devices
- [**93**星][2y] [Py] [arno0x/webdavc2](https://github.com/arno0x/webdavc2) A WebDAV PROPFIND C2 tool
-- [**92**星][3m] [Py] [in3tinct/see-surf](https://github.com/in3tinct/see-surf) Python based scanner to find potential SSRF parameters
-- [**92**星][23d] [C] [ssd-secure-disclosure/advisories](https://github.com/ssd-secure-disclosure/advisories) SSD Secure Disclosure Advisories
+- [**93**星][6m] [Py] [abaykan/crawlbox](https://github.com/abaykan/crawlbox) Web目录爆破脚本
+- [**92**星][27d] [Py] [plazmaz/leaky-repo](https://github.com/plazmaz/leaky-repo) Benchmarking repo for secrets scanning
+- [**92**星][2m] [Py] [gxfxyz/unblockchn](https://github.com/gxfxyz/unblockchn) Unblock CHN - Shadowsocks 回国解锁代理分流配置工具 (路由器 & Surge) - Unblock Youku 衍生工具
- [**92**星][2m] [Py] [furniel/apk-changer](https://github.com/furniel/apk-changer) Command line program for modifying apk files
- [**92**星][2m] [Py] [hyuunnn/hyara](https://github.com/hyuunnn/hyara) Yara rule making tool (IDA Pro & Binary Ninja Plugin)
-- [**92**星][7m] [PowerShell] [mgreen27/invoke-liveresponse](https://github.com/mgreen27/Invoke-LiveResponse) Invoke-LiveResponse
+- [**92**星][7m] [PS] [mgreen27/invoke-liveresponse](https://github.com/mgreen27/Invoke-LiveResponse) Invoke-LiveResponse
- [**92**星][2y] [Shell] [offxec/thedoc](https://github.com/OffXec/TheDoc) TheDoc is a simple but very useful SQLMAP automator with built in admin finder, hash cracker(using hashca) and more!
-- [**92**星][8d] [Py] [gmdutra/cryptondie](https://github.com/gmdutra/cryptondie) PoC - cryptonDie is a ransomware developed for study purposes.
+- [**92**星][2d] [Go] [zonedb/zonedb](https://github.com/zonedb/zonedb) Public Zone Database
- [**92**星][3y] [HTML] [xinali/wooyun](https://github.com/xinali/wooyun) wooyun public information backup
- [**92**星][2y] [JS] [tinysec/vulnerability](https://github.com/tinysec/vulnerability) vulnerability:作者收集的Windows内核漏洞。
-- [**92**星][3y] [PowerShell] [thepaulbenoit/winpirate](https://github.com/thepaulbenoit/winpirate) Automated sticky keys hack. Post exploitation it grabs browser passwords, history, and network passwords
-- [**92**星][2y] [C#] [them4hd1/pencrawler](https://github.com/them4hd1/pencrawler) An Advanced Web Crawler and DirBuster
+- [**92**星][4y] [HTML] [thezdi/abusing-silent-mitigations](https://github.com/thezdi/abusing-silent-mitigations) Understanding weaknesses within Internet Explorer's Isolated Heap and MemoryProtection
+- [**92**星][3y] [PS] [thepaulbenoit/winpirate](https://github.com/thepaulbenoit/winpirate) Automated sticky keys hack. Post exploitation it grabs browser passwords, history, and network passwords
+- [**92**星][12m] [Shell] [thelinuxchoice/brutecms](https://github.com/thelinuxchoice/brutecms) Multi-threaded CMS BruteForcer to WordPress, Joomla, Drupal, OpenCart
+- [**92**星][1y] [Go] [tarlogicsecurity/sasshimi](https://github.com/tarlogicsecurity/sasshimi) SSH Tunnelling in "RAW mode", via STDIN/OUT without using forwarding channels
- [**92**星][1y] [C++] [tandasat/guardmon](https://github.com/tandasat/guardmon) Hypervisor based tool for monitoring system register accesses.
- [**92**星][11m] [Py] [stratosphereips/manati](https://github.com/stratosphereips/manati) A web-based tool to assist the work of the intuitive threat analysts.
-- [**92**星][6y] [C++] [stealth/fraud-bridge](https://github.com/stealth/fraud-bridge) ICMP and DNS tunneling via IPv4 and IPv6
+- [**92**星][2y] [C] [stonedreamforest/re_sysdiag](https://github.com/stonedreamforest/re_sysdiag) 逆向火绒安全软件驱动——sysdiag
+- [**92**星][3y] [HTML] [stixproject/stix-viz](https://github.com/stixproject/stix-viz) STIX Visualization Tool
- [**92**星][3y] [C++] [shmuelyr/captainhook](https://github.com/shmuelyr/captainhook) CaptainHook is perfect x86/x64 hook environment
- [**92**星][7m] [C++] [sharepub/checkvm-sandbox](https://github.com/sharepub/checkvm-sandbox) source code
-- [**92**星][3y] [PowerShell] [secvulture/dvta](https://github.com/secvulture/dvta) Damn Vulnerable Thick Client App
+- [**92**星][3y] [PS] [secvulture/dvta](https://github.com/secvulture/dvta) Damn Vulnerable Thick Client App
- [**92**星][1y] [reconjson/reconjson](https://github.com/reconjson/reconjson) ReconJSON is a project dedicated to creating a flexible and consistent JSON format across popular recon tools.
-- [**92**星][1y] [Jupyter Notebook] [positivetechnologies/seq2seq-web-attack-detection](https://github.com/positivetechnologies/seq2seq-web-attack-detection) The implementation of the Seq2Seq model for web attack detection. The Seq2Seq model is usually used in Neural Machine Translation. The main goal of this project is to demonstrate the relevance of the NLP approach for web security.
+- [**92**星][7d] [Go] [privacypass/challenge-bypass-server](https://github.com/privacypass/challenge-bypass-server) a TCP server that is compatible with the Privacy Pass browser extension
- [**92**星][2y] [Go] [phillipmartin/gopassivedns](https://github.com/phillipmartin/gopassivedns) Network-based DNS logging in Go
-- [**92**星][8m] [pagalaxylab/vulinfo](https://github.com/pagalaxylab/vulinfo) These are the vulnerabilities discovered by Galaxy Lab.
-- [**92**星][4y] [C] [osandamalith/ipobfuscator](https://github.com/osandamalith/ipobfuscator) A simple tool to convert the IP to a DWORD IP
+- [**92**星][9m] [pagalaxylab/vulinfo](https://github.com/pagalaxylab/vulinfo) These are the vulnerabilities discovered by Galaxy Lab.
+- [**92**星][9d] [JS] [oznu/dns-zone-blacklist](https://github.com/oznu/dns-zone-blacklist) This project generates dnsmasq, bind and unbound zone files to be used in DNS based AD Blockers.
- [**92**星][3y] [Hack] [oracle/kernel-fuzzing](https://github.com/oracle/kernel-fuzzing) Fuzzers for the Linux kernel
- [**92**星][5y] [JS] [nihgwu/nevermore](https://github.com/nihgwu/nevermore) a shadowsocks client powered by node-webkit
- [**92**星][5y] [Py] [neo23x0/dllrunner](https://github.com/neo23x0/dllrunner) Smart DLL execution for malware analysis in sandbox systems
-- [**92**星][13d] [Java] [mvetsch/jwt4b](https://github.com/mvetsch/jwt4b) JWT Support for Burp
+- [**92**星][8d] [Java] [mvetsch/jwt4b](https://github.com/mvetsch/jwt4b) JWT Support for Burp
- [**92**星][8y] [Ruby] [mubix/not-in-pentesting-class](https://github.com/mubix/not-in-pentesting-class) The Dirty Secrets They Didn't Teach You In Pentesting Class
- [**92**星][12m] [C] [mthbernardes/sshlooterc](https://github.com/mthbernardes/sshlooterc) It's the C version of
- [**92**星][1y] [C] [mrschyte/pentestkoala](https://github.com/mrschyte/pentestkoala) pentestkoala:修改版dropbear SSH 服务器
-- [**92**星][4m] [CSS] [mike-goodwin/owasp-threat-dragon-desktop](https://github.com/mike-goodwin/owasp-threat-dragon-desktop) An installable desktop variant of OWASP Threat Dragon
-- [**92**星][4y] [PowerShell] [matthastings/dscompromised](https://github.com/matthastings/dscompromised) managing and infecting systems via Windows Desired State Configuration (DSC)
-- [**92**星][22d] [Py] [log2timeline/dftimewolf](https://github.com/log2timeline/dftimewolf) A framework for orchestrating forensic collection, processing and data export
+- [**92**星][4y] [PS] [matthastings/dscompromised](https://github.com/matthastings/dscompromised) managing and infecting systems via Windows Desired State Configuration (DSC)
+- [**92**星][24d] [Py] [log2timeline/dftimewolf](https://github.com/log2timeline/dftimewolf) A framework for orchestrating forensic collection, processing and data export
- [**92**星][6m] [Py] [localh0t/backfuzz](https://github.com/localh0t/backfuzz) protocol fuzzing toolkit
-- [**92**星][16d] [Go] [likexian/whois-go](https://github.com/likexian/whois-go) Go module for domain and ip whois info query
+- [**92**星][18d] [Go] [likexian/whois-go](https://github.com/likexian/whois-go) Go module for domain and ip whois info query
- [**92**星][2y] [Py] [lcatro/webshell-detect-by-machine-learning](https://github.com/lcatro/webshell-detect-by-machine-learning) 使用机器学习识别WebShell
- [**92**星][4y] [C] [kr105-zz/ps4-dlclose](https://github.com/kr105-zz/ps4-dlclose) Fully implemented dlclose exploit for PS4 fw 1.76 with included linux loader
- [**92**星][4m] [knownsec/ethereum-smart-contracts-security-checklist](https://github.com/knownsec/ethereum-smart-contracts-security-checklist) Ethereum Smart Contracts Security CheckList From Knownsec 404 Team
@@ -8831,614 +9357,677 @@ to prevent Evil Maid attacks.
- [**92**星][2y] [C++] [gdbinit/efiswissknife](https://github.com/gdbinit/efiswissknife) 辅助 (U)EFI reversing 逆向
- [**92**星][3y] [Py] [fengyouchao/webzmap](https://github.com/fengyouchao/webzmap) 通过web方式管理运行zmap扫描任务, 并提供 RESTful API 方便第三方程序调用控制zmap任务
- [**92**星][5y] [JS] [etherdream/https_hijack_demo](https://github.com/etherdream/https_hijack_demo) HTTPS Frontend Hijack
-- [**92**星][11m] [C] [elfmaster/dsym_obfuscate](https://github.com/elfmaster/dsym_obfuscate) Obfuscates dynamic symbol table
-- [**92**星][5y] [Shell] [ckuethe/usbarmory](https://github.com/ckuethe/usbarmory) Scripts, learnings, sample configurations, and random whining
+- [**92**星][2y] [C] [christian-roggia/open-myrtus](https://github.com/christian-roggia/open-myrtus) RCEed version of computer malware / rootkit MyRTUs / Stuxnet.
+- [**92**星][8d] [Py] [chadsr/nordvpn-networkmanager](https://github.com/chadsr/nordvpn-networkmanager) A CLI tool for automating the importing, securing and usage of NordVPN (and in the future, more) OpenVPN servers through NetworkManager.
+- [**92**星][2y] [PS] [borntoberoot/powershell_ipv4portscanner](https://github.com/borntoberoot/powershell_ipv4portscanner) Powerful asynchronus IPv4 Port Scanner for PowerShell
- [**92**星][10m] [Py] [b1n4ry4rms/redteam-pentest-cheatsheets](https://github.com/b1n4ry4rms/redteam-pentest-cheatsheets) Red Teaming :: Penetration Testing :: Offensive Security :: OSCP :: OSCE :: CheatSheets :: Tools :: etc...
-- [**92**星][1y] [TypeScript] [auth0-blog/mean-rsvp-auth0](https://github.com/auth0-blog/mean-rsvp-auth0) MEAN stack application with Auth0 (see sample deployed at
-- [**92**星][3y] [C] [arno0x/diverttcpconn](https://github.com/arno0x/diverttcpconn) A TCP packet diverter for Windows platform
+- [**92**星][1y] [TS] [auth0-blog/mean-rsvp-auth0](https://github.com/auth0-blog/mean-rsvp-auth0) MEAN stack application with Auth0 (see sample deployed at
+- [**92**星][11m] [Shell] [antitree/private-tor-network](https://github.com/antitree/private-tor-network) Run an isolated instance of a tor network in Docker containers
- [**92**星][1y] [Py] [andresriancho/websocket-fuzzer](https://github.com/andresriancho/websocket-fuzzer) HTML5 WebSocket message fuzzer
+- [**92**星][2y] [PS] [alsidofficial/uncoverdcshadow](https://github.com/alsidofficial/uncoverdcshadow) A PowerShell utility to dynamically uncover a DCShadow attack
- [**92**星][4m] [Py] [aedoo/allscanner](https://github.com/aedoo/allscanner) 数据库和其他服务的弱端口的弱口令检测以及未授权访问的集成检测工具。 Weak password blasting of weak ports and integrated detection tools for unauthorized access.
-- [**92**星][6m] [Py] [abaykan/crawlbox](https://github.com/abaykan/crawlbox) Web目录爆破脚本
-- [**91**星][17d] [Py] [fboldewin/com-code-helper](https://github.com/fboldewin/com-code-helper) IDAPython脚本, 辅助重建MS COM 代码
-- [**91**星][1m] [Py] [lockedbyte/cryptovenom](https://github.com/lockedbyte/cryptovenom) Cryptovenom: The Cryptography Swiss Army Knife
+- [**92**星][1m] [C#] [3xpl01tc0d3r/processinjection](https://github.com/3xpl01tc0d3r/processinjection) The program is designed to demonstrate various process injection techniques
+- [**91**星][8m] [JS] [vksrc/captcha_orz](https://github.com/vksrc/captcha_orz) 验证码识别
+- [**91**星][2m] [C] [zfl9/chinadns-ng](https://github.com/zfl9/chinadns-ng) chinadns next generation, refactoring with epoll and ipset
+- [**91**星][3d] [Py] [lockedbyte/cryptovenom](https://github.com/lockedbyte/cryptovenom) Cryptovenom: The Cryptography Swiss Army Knife
+- [**91**星][8m] [Py] [lc/230-oob](https://github.com/lc/230-OOB) An Out-of-Band XXE server for retrieving file contents over FTP.
- [**91**星][1y] [Py] [fsecurelabs/z3_and_angr_binary_analysis_workshop](https://github.com/FSecureLABS/z3_and_angr_binary_analysis_workshop) Code and exercises for a workshop on z3 and angr
-- [**91**星][1y] [sectool/redteam-hardware-toolkit](https://github.com/sectool/redteam-hardware-toolkit)
+- [**91**星][3m] [CSS] [woj-ciech/socialpath](https://github.com/woj-ciech/socialpath) Track users across social media platforms
- [**91**星][5y] [C] [wi-fi-analyzer/mdk3-master](https://github.com/wi-fi-analyzer/mdk3-master)
- [**91**星][2y] [C] [wangyihang/apache-http-server-module-backdoor](https://github.com/wangyihang/apache-http-server-module-backdoor)
- [**91**星][1y] [Py] [wagiro/pintool](https://github.com/wagiro/pintool) This tool can be useful for solving some reversing challenges in CTFs events.
-- [**91**星][4y] [HTML] [thezdi/abusing-silent-mitigations](https://github.com/thezdi/abusing-silent-mitigations) Understanding weaknesses within Internet Explorer's Isolated Heap and MemoryProtection
-- [**91**星][12m] [Shell] [thelinuxchoice/brutecms](https://github.com/thelinuxchoice/brutecms) Multi-threaded CMS BruteForcer to WordPress, Joomla, Drupal, OpenCart
-- [**91**星][3y] [Py] [tehsyntx/loffice](https://github.com/tehsyntx/loffice) Lazy Office Analyzer
-- [**91**星][1y] [Go] [tarlogicsecurity/sasshimi](https://github.com/tarlogicsecurity/sasshimi) SSH Tunnelling in "RAW mode", via STDIN/OUT without using forwarding channels
-- [**91**星][3y] [HTML] [stixproject/stix-viz](https://github.com/stixproject/stix-viz) STIX Visualization Tool
-- [**91**星][2y] [PowerShell] [stefanscherer/adfs2](https://github.com/stefanscherer/adfs2) Multi Vagrant environment with Active Directory
-- [**91**星][19d] [Go] [sonatype-nexus-community/nancy](https://github.com/sonatype-nexus-community/nancy) A tool to check for vulnerabilities in your Golang dependencies, powered by Sonatype OSS Index
+- [**91**星][2y] [PS] [stefanscherer/adfs2](https://github.com/stefanscherer/adfs2) Multi Vagrant environment with Active Directory
- [**91**星][2y] [C] [secwiki/android-kernel-exploits](https://github.com/secwiki/android-kernel-exploits) android kernel exploits漏洞集合
+- [**91**星][2y] [PS] [russelltomkins/active-directory](https://github.com/russelltomkins/active-directory) Collection of scripts for Querying and Managing Active Directory and Domain Controllers
- [**91**星][2y] [Py] [pry0cc/proxydock](https://github.com/pry0cc/proxydock) ProxyDock is a Dockerfile and Bash script that converts your OpenVPN files into local proxies.
-- [**91**星][2m] [Go] [privacypass/challenge-bypass-server](https://github.com/privacypass/challenge-bypass-server) a TCP server that is compatible with the Privacy Pass browser extension
- [**91**星][4y] [Py] [pdjstone/wsuspect-proxy](https://github.com/pdjstone/wsuspect-proxy) Python tool to inject fake updates into unencrypted WSUS traffic
+- [**91**星][10m] [Py] [p3pperp0tts/leaks_parser](https://github.com/p3pperp0tts/leaks_parser) Parser for data dumps Collection #1 / Collection #2-5
+- [**91**星][3y] [Py] [n3tc4t/instabrute](https://github.com/n3tc4t/instabrute) Instagram password bruteforcer
- [**91**星][11m] [Py] [n00py/hwacha](https://github.com/n00py/hwacha) Deploy payloads to *Nix systems en masse
+- [**91**星][2m] [C#] [mihazupan/httptosocks5proxy](https://github.com/mihazupan/httptosocks5proxy) C# Http to Socks5 proxy implementation
- [**91**星][5m] [Shell] [louwrentius/ppss](https://github.com/louwrentius/ppss) Parallel Processing Shell Script
- [**91**星][3m] [Rust] [loiclec/fuzzcheck-rs](https://github.com/loiclec/fuzzcheck-rs) Structure-aware, in-process, coverage-guided, evolutionary fuzzing engine for Rust functions.
- [**91**星][2y] [C++] [liulilittle/paperairplane](https://github.com/liulilittle/paperairplane) 一个类似于Proxifier的SOCKS5代理工具
+- [**91**星][4y] [Py] [knownsec/vxpwn](https://github.com/knownsec/vxpwn) VxWorks漏洞挖掘相关
+- [**91**星][9m] [Py] [johntroony/blisqy](https://github.com/johntroony/blisqy) Version 0.2 - Exploit Time-based blind-SQL injection in HTTP-Headers (MySQL/MariaDB).
- [**91**星][4m] [C#] [jbe2277/dotnetpad](https://github.com/jbe2277/dotnetpad) The Waf DotNetPad is a simple and fast code editor that makes fun to program with C# or Visual Basic.
- [**91**星][4y] [Py] [hvqzao/liffy](https://github.com/hvqzao/liffy) Local File Inclusion Exploitation Tool (mirror)
- [**91**星][11m] [Ruby] [hdm/metasploit-framework](https://github.com/hdm/metasploit-framework) Metasploit Framework
+- [**91**星][3y] [C] [hacksysteam/exploitation](https://github.com/hacksysteam/exploitation) Windows Software Exploitation
- [**91**星][1y] [Go] [google/minions](https://github.com/google/minions) Distributed filesystem scanner
+- [**91**星][4m] [Shell] [giantbranch/pwn-env-init](https://github.com/giantbranch/pwn-env-init) CTF PWN 做题环境一键搭建脚本
- [**91**星][1y] [Py] [getsecnow/instagram-py](https://github.com/getsecnow/instagram-py) Simple Instagram brute force script written in python
- [**91**星][3y] [C++] [gdelugre/shell-factory](https://github.com/gdelugre/shell-factory) C++-based shellcode builder
- [**91**星][6m] [Py] [fortynorthsecurity/aggressorassessor](https://github.com/fortynorthsecurity/aggressorassessor) Aggressor scripts for phases of a pen test or red team assessment
-- [**91**星][18d] [Py] [felamos/weirdhta](https://github.com/felamos/weirdhta) A python tool to create obfuscated HTA script.
+- [**91**星][2y] [C++] [epam/nfstrace](https://github.com/epam/nfstrace) Network file system monitor and analyzer
- [**91**星][9y] [C] [dugsong/libdnet](https://github.com/dugsong/libdnet) a simplified, portable interface to several low-level
networking routines
-- [**91**星][2y] [C] [christian-roggia/open-myrtus](https://github.com/christian-roggia/open-myrtus) RCEed version of computer malware / rootkit MyRTUs / Stuxnet.
-- [**91**星][2y] [PowerShell] [alsidofficial/uncoverdcshadow](https://github.com/alsidofficial/uncoverdcshadow) A PowerShell utility to dynamically uncover a DCShadow attack
-- [**91**星][2m] [Py] [abusesa/abusehelper](https://github.com/abusesa/abusehelper) A framework for receiving and redistributing abuse feeds
+- [**91**星][4m] [C++] [djformby/grfics](https://github.com/djformby/grfics) Graphical Realism Framework for Industrial Control Simulations
+- [**91**星][1y] [Py] [arbazkiraak/certasset](https://github.com/arbazkiraak/certasset) Takes ip range, Scan all open SSL Certs, Grab Cnames
+- [**91**星][3m] [Py] [abusesa/abusehelper](https://github.com/abusesa/abusehelper) A framework for receiving and redistributing abuse feeds
- [**91**星][7m] [C] [abelcheung/rifiuti2](https://github.com/abelcheung/rifiuti2) Windows Recycle Bin analyser
+- [**91**星][2y] [Java] [5gsd/aimsicdl](https://github.com/5gsd/aimsicdl) AIMSICD Lite (Android IMSI-Catcher Detector) - reloaded!
- [**91**星][2y] [C] [3gstudent/inject-dll-by-process-doppelganging](https://github.com/3gstudent/inject-dll-by-process-doppelganging) Process Doppelgänging
- [**91**星][1y] [001spartan/aggressor_scripts](https://github.com/001spartan/aggressor_scripts) A collection of useful scripts for Cobalt Strike
-- [**90**星][13d] [Ruby] [shopify/browser_sniffer](https://github.com/shopify/browser_sniffer) Properly detect what browser you are dealing with
+- [**90**星][11m] [Py] [hackatnow/stretcher](https://github.com/hackatnow/stretcher) Tool designed to help identify open Elasticsearch servers that are exposing sensitive information
+- [**90**星][15d] [Ruby] [shopify/browser_sniffer](https://github.com/shopify/browser_sniffer) Properly detect what browser you are dealing with
+- [**90**星][12m] [PS] [besimorhino/pause-process](https://github.com/besimorhino/pause-process) PowerShell script which allows pausing\unpausing Win32/64 exes
+- [**90**星][4m] [Py] [google/python_portpicker](https://github.com/google/python_portpicker) A module to find available network ports for testing.
+- [**90**星][9m] [C] [caesar0301/pkt2flow](https://github.com/caesar0301/pkt2flow) A simple utility to classify packets into flows. It's so simple that only one task is aimed to finish. For Deep Packet Inspection or flow classification, it's so common to analyze the feature of one specific flow. I have make the attempt to use made-ready tools like tcpflows, tcpslice, tcpsplit, but all these tools try to either decrease the tra…
+- [**90**星][8m] [JS] [adonespitogo/adobot-io](https://github.com/adonespitogo/adobot-io) Android Spyware Server
+- [**90**星][2y] [Py] [hackatnow/cromos](https://github.com/hackatnow/cromos) Cromos is a tool for downloading legitimate extensions of the Chrome Web Store and inject codes in the background of the application.
+- [**90**星][1m] [Go] [ne1llee/v2ray2clash](https://github.com/ne1llee/v2ray2clash) V2ray、SSR subscribe convert to Clash、QuantumultX
- [**90**星][2m] [Py] [radareorg/r2con2019](https://github.com/radareorg/r2con2019) slides and materials
-- [**90**星][3m] [Py] [securisec/r2wiki](https://github.com/securisec/r2wiki) Radare 2 wiki
- [**90**星][2y] [JS] [watson/monster-drift](https://github.com/watson/monster-drift) a radio controlled car with Node.js and HackRF.
- [**90**星][1y] [C] [vv1ld/ps4hen](https://github.com/vv1ld/ps4hen) PS4 Homebrew ENabler based on Flatz writeup and using IDC's codebase
- [**90**星][7m] [C] [vmcall/ayyxam](https://github.com/vmcall/ayyxam) Bypass for The Digital Exam Monitor developed by the Danish Ministry of Education (Den Digitale Prøvevagt) and ExamCookie
- [**90**星][5m] [Py] [tomchop/volatility-autoruns](https://github.com/tomchop/volatility-autoruns) Autoruns plugin for the Volatility framework
+- [**90**星][7m] [Rust] [tbrand/dystopia](https://github.com/tbrand/dystopia) Anonymity on the Internet by Transparent way.
+- [**90**星][3y] [swiftonsecurity/phishingregex](https://github.com/swiftonsecurity/phishingregex) Backup of my phishing regular expression testing bench
- [**90**星][2y] [HTML] [struct/research](https://github.com/struct/research) A repo for various research
-- [**90**星][2y] [C] [stonedreamforest/re_sysdiag](https://github.com/stonedreamforest/re_sysdiag) 逆向火绒安全软件驱动——sysdiag
- [**90**星][8y] [Java] [securitycompass/androidlabs](https://github.com/securitycompass/androidlabs) Android security labs
- [**90**星][3y] [C++] [screetsec/pateensy](https://github.com/screetsec/pateensy) Payload for teensy like a rubber ducky but the syntax is different. this Human interfaes device ( HID attacks ). Penetration With Teensy
-- [**90**星][2y] [PowerShell] [russelltomkins/active-directory](https://github.com/russelltomkins/active-directory) Collection of scripts for Querying and Managing Active Directory and Domain Controllers
+- [**90**星][5d] [Py] [samsung/cotopaxi](https://github.com/samsung/cotopaxi) Set of tools for security testing of Internet of Things devices using specific network IoT protocols
- [**90**星][1y] [C++] [rub-syssec/marx](https://github.com/rub-syssec/marx) 揭示C++程序中的类继承结构
- [IDA导出](https://github.com/rub-syssec/marx/blob/master/ida_export/export.py)
- [IDA导入插件](https://github.com/rub-syssec/marx/tree/master/ida_import)
- [core](https://github.com/rub-syssec/marx/tree/master/src)
-- [**90**星][1y] [PowerShell] [rasta-mouse/aggressor-script](https://github.com/rasta-mouse/aggressor-script) Collection of Aggressor Scripts for Cobalt Strike
-- [**90**星][5y] [Objective-C] [project-imas/app-password](https://github.com/project-imas/app-password) Custom iOS user authentication mechanism (password with security questions for self reset)
+- [**90**星][4y] [C] [rchiossi/dexterity](https://github.com/rchiossi/dexterity) Dex manipulation library
+- [**90**星][1y] [PS] [rasta-mouse/aggressor-script](https://github.com/rasta-mouse/aggressor-script) Collection of Aggressor Scripts for Cobalt Strike
+- [**90**星][7m] [Rust] [ragnaroek/mithril](https://github.com/ragnaroek/mithril) Pure Rust Monero Miner
+- [**90**星][5y] [ObjC] [project-imas/app-password](https://github.com/project-imas/app-password) Custom iOS user authentication mechanism (password with security questions for self reset)
+- [**90**星][14d] [C] [plusvic/yara](https://github.com/plusvic/yara) The pattern matching swiss knife
- [**90**星][9m] [pandazheng/securitysite](https://github.com/pandazheng/securitysite) 收集了一些安全公司的博客
-- [**90**星][10m] [Py] [p3pperp0tts/leaks_parser](https://github.com/p3pperp0tts/leaks_parser) Parser for data dumps Collection #1 / Collection #2-5
-- [**90**星][2y] [PowerShell] [netbiosx/digital-signature-hijack](https://github.com/netbiosx/digital-signature-hijack) Binaries, PowerShell scripts and information about Digital Signature Hijacking.
+- [**90**星][1y] [Shell] [ossiozac/raspberry-pi-zero-rubber-ducky-duckberry-pi](https://github.com/ossiozac/raspberry-pi-zero-rubber-ducky-duckberry-pi) A £10 Rubber Ducky USB HID! A USB device which emulates a keyboard and automates key entry.
+- [**90**星][2m] [Py] [operatorequals/httpimport](https://github.com/operatorequals/httpimport) Module for remote in-memory Python package/module loading through HTTP/S
+- [**90**星][2y] [PS] [netbiosx/digital-signature-hijack](https://github.com/netbiosx/digital-signature-hijack) Binaries, PowerShell scripts and information about Digital Signature Hijacking.
- [**90**星][2y] [nccgroup/cve-2017-8759](https://github.com/nccgroup/cve-2017-8759) NCC Group's analysis and exploitation of CVE-2017-8759 along with further refinements
-- [**90**星][3y] [Py] [n3tc4t/instabrute](https://github.com/n3tc4t/instabrute) Instagram password bruteforcer
- [**90**星][8m] [JS] [mozillasecurity/octo](https://github.com/mozillasecurity/octo) A fuzzing library in JavaScript.
+- [**90**星][1m] [Java] [mnemonic-no/act-platform](https://github.com/mnemonic-no/act-platform) Open platform for collection and exchange of threat intelligence information
- [**90**星][3y] [Java] [mingyuan-xia/patdroid](https://github.com/mingyuan-xia/patdroid) A Program Analysis Toolkit for Android
- [**90**星][3m] [Py] [malshare/malshare-toolkit](https://github.com/malshare/malshare-toolkit) Set of tools for interacting with Malshare
- [**90**星][2y] [jollheef/libreoffice-remote-arbitrary-file-disclosure](https://github.com/jollheef/libreoffice-remote-arbitrary-file-disclosure) Proof of concept of LibreOffice remote arbitrary file disclosure vulnerability
-- [**90**星][9m] [Py] [johntroony/blisqy](https://github.com/johntroony/blisqy) Version 0.2 - Exploit Time-based blind-SQL injection in HTTP-Headers (MySQL/MariaDB).
+- [**90**星][5m] [HTML] [jbman223/earlyap](https://github.com/jbman223/earlyap) Proxy specifically available for AP scores to enable simple early access to your scores without any storing of your College Board account details or dealing with untrustable proxies.
- [**90**星][2y] [Ruby] [isecpartners/tlspretense](https://github.com/isecpartners/tlspretense) A test framework for testing SSL/TLS client certificate validation.
-- [**90**星][3y] [C] [hacksysteam/exploitation](https://github.com/hacksysteam/exploitation) Windows Software Exploitation
+- [**90**星][6y] [C++] [igh0st/gh0st3.6_src](https://github.com/igh0st/gh0st3.6_src)
+- [**90**星][2y] [C] [hfiref0x/vmde](https://github.com/hfiref0x/vmde) Source from VMDE paper, adapted to 2015
+- [**90**星][2y] [Ruby] [hanshaze/ms17-010-eternalblue-winxp-win10](https://github.com/hanshaze/ms17-010-eternalblue-winxp-win10) EternalBlue Metasploit Port to various Windows Versions from Windows XP SP2 up to Windows 10 Pro
+- [**90**星][3d] [C] [guidovranken/cryptofuzz](https://github.com/guidovranken/cryptofuzz)
- [**90**星][1y] [C] [grimm-co/notquite0dayfriday](https://github.com/grimm-co/notquite0dayfriday) This is a repo which documents real bugs in real software to illustrate trends, learn how to prevent or find them more quickly.
-- [**90**星][3m] [Shell] [giantbranch/pwn-env-init](https://github.com/giantbranch/pwn-env-init) CTF PWN 做题环境一键搭建脚本
+- [**90**星][1m] [Py] [giantbranch/pwn_deploy_chroot](https://github.com/giantbranch/pwn_deploy_chroot) 可以方便地部署一个或者多个pwn题到一个docker容器中(使用chroot,并可以设置是否使用我自己写的catflag程序替换默认的/bin/sh程序,以增加安全性)
- [**90**星][3m] [Py] [gast04/r4ge](https://github.com/gast04/r4ge) Symbolic Execution Tool in r2
- [**90**星][7m] [C] [fireeye/flare-kscldr](https://github.com/fireeye/flare-kscldr) 内核中加载Shellcode: 实例、方法与工具
- [**90**星][2m] [Ruby] [ffleming/timing_attack](https://github.com/ffleming/timing_attack) timing_attack:对 Webapp 执行 timing 攻击
- [**90**星][1y] [Py] [elttam/advisories](https://github.com/elttam/advisories)
-- [**90**星][3y] [PowerShell] [darkoperator/powershell_scripts](https://github.com/darkoperator/powershell_scripts) Powershell Scripts
+- [**90**星][3y] [PS] [darkoperator/powershell_scripts](https://github.com/darkoperator/powershell_scripts) Powershell Scripts
+- [**90**星][7d] [JS] [consensys/truffle-security](https://github.com/consensys/truffle-security) MythX smart contract security verification plugin for Truffle Framework
- [**90**星][3y] [Py] [chrizator/netattack](https://github.com/chrizator/netattack) A simple python script to scan and attack wireless networks.
-- [**90**星][1y] [Shell] [arthastang/iot-implant-toolkit](https://github.com/arthastang/iot-implant-toolkit) Toolkit for implant attack of IoT devices
+- [**90**星][3y] [Py] [callmefeifei/svnhack](https://github.com/callmefeifei/svnhack) 一个Svn信息泄露辅助工具,可以使用这个脚本列取网站目录,读取源码文件以及下载整站代码。
+- [**90**星][2m] [Ruby] [auth0/ruby-auth0](https://github.com/auth0/ruby-auth0) Ruby toolkit for Auth0 API
- [**90**星][7m] [aprilahijriyan/w3brute](https://github.com/aprilahijriyan/w3brute) Automatic Web Application Brute Force Attack Tool
-- [**90**星][4m] [adguardteam/adguardformac](https://github.com/adguardteam/adguardformac) Open bug tracker for Mac version of AdGuard
+- [**90**星][1m] [Py] [akamai-threat-research/mqtt-pwn](https://github.com/akamai-threat-research/mqtt-pwn) MQTT-PWN intends to be a one-stop-shop for IoT Broker penetration-testing and security assessment operations.
+- [**90**星][3m] [Java] [adubbz/ghidra-switch-loader](https://github.com/adubbz/ghidra-switch-loader) Nintendo Switch loader for Ghidra
- [**90**星][4y] [JS] [adafruit/adafruit-io-node](https://github.com/adafruit/adafruit-io-node) A Node.js Adafruit IO Node.js Client, Local Server, & io.adafruit.com TLS Tunnel.
- [**90**星][11m] [Py] [hackatnow/stretcher](https://github.com/hackatnow/stretcher) Tool designed to help identify open Elasticsearch servers that are exposing sensitive information
- [**90**星][2y] [Py] [hackatnow/cromos](https://github.com/hackatnow/cromos) Cromos is a tool for downloading legitimate extensions of the Chrome Web Store and inject codes in the background of the application.
-- [**90**星][2y] [Java] [5gsd/aimsicdl](https://github.com/5gsd/aimsicdl) AIMSICD Lite (Android IMSI-Catcher Detector) - reloaded!
-- [**90**星][1m] [C#] [3xpl01tc0d3r/processinjection](https://github.com/3xpl01tc0d3r/processinjection) The program is designed to demonstrate various process injection techniques
-- [**90**星][8d] [Py] [0xprateek/stardox](https://github.com/0xprateek/stardox) Github stargazers information gathering tool
-- [**89**星][12m] [PowerShell] [besimorhino/pause-process](https://github.com/besimorhino/pause-process) PowerShell script which allows pausing\unpausing Win32/64 exes
-- [**89**星][4m] [Py] [google/python_portpicker](https://github.com/google/python_portpicker) A module to find available network ports for testing.
+- [**90**星][9m] [Py] [0x27/ssh_keyscanner](https://github.com/0x27/ssh_keyscanner) ssh public host key scanner using shodan
+- [**89**星][5m] [Py] [lgandx/ccrawldns](https://github.com/lgandx/ccrawldns) This small utility retrieves from the CommonCrawl data set unique subdomains for a given domain name.
+- [**89**星][7m] [Shell] [honwen/luci-app-shadowsocksr](https://github.com/honwen/luci-app-shadowsocksr) OpenWrt/LEDE LuCI for ShadowsocksR-libev
+- [**89**星][3d] [Rust] [amaurymartiny/check-if-email-exists](https://github.com/amaurymartiny/check-if-email-exists) Check if an email address exists without sending any email.
- [**89**星][7m] [Py] [lopseg/jsdir](https://github.com/Lopseg/Jsdir) Jsdir is a Burp Suite extension that extracts hidden paths from js files and beautifies it for further reading.
+- [**89**星][1y] [C] [zerosteiner/reflective-polymorphism](https://github.com/zeroSteiner/reflective-polymorphism) Reflective Polymorphism
+- [**89**星][3m] [Py] [securisec/r2wiki](https://github.com/securisec/r2wiki) Radare 2 wiki
- [**89**星][5m] [Java] [llvm-but-worse/java-disassembler](https://github.com/LLVM-but-worse/java-disassembler) The Java Disassembler
-- [**89**星][2y] [Objective-C] [wooyundota/dumpdex](https://github.com/wooyundota/dumpdex) Android Unpack tool based on Cydia
-- [**89**星][3m] [CSS] [woj-ciech/socialpath](https://github.com/woj-ciech/socialpath) Track users across social media platforms
+- [**89**星][10m] [C++] [zhunki/superion](https://github.com/zhunki/superion) Superion is a fuzzer which extends the famous AFL to support structured inputs such as JavaScript and XML.
+- [**89**星][2y] [ObjC] [wooyundota/dumpdex](https://github.com/wooyundota/dumpdex) Android Unpack tool based on Cydia
- [**89**星][1y] [Py] [willbengtson/trailblazer-aws](https://github.com/willbengtson/trailblazer-aws) Blazing CloudTrail since 2018
+- [**89**星][1y] [PS] [vletoux/spoolerscanner](https://github.com/vletoux/spoolerscanner) Check if MS-RPRN is remotely available with powershell/c#
- [**89**星][4m] [Py] [tomchop/unxor](https://github.com/tomchop/unxor) unXOR will search a XORed file and try to guess the key using known-plaintext attacks.
-- [**89**星][7d] [Py] [tomato42/tlslite-ng](https://github.com/tomato42/tlslite-ng) New home of the TLS implementation in pure python
+- [**89**星][9d] [Py] [tomato42/tlslite-ng](https://github.com/tomato42/tlslite-ng) New home of the TLS implementation in pure python
- [**89**星][2y] [HTML] [tigzy/malware-repo](https://github.com/tigzy/malware-repo) Malware Repository Framework
+- [**89**星][3m] [Py] [thomaspatzke/wase](https://github.com/thomaspatzke/wase) The Web Audit Search Engine - Index and Search HTTP Requests and Responses in Web Application Audits with ElasticSearch
+- [**89**星][1y] [Shell] [thelinuxchoice/infog](https://github.com/thelinuxchoice/infog) Information Gathering Tool
- [**89**星][1y] [Py] [thehive-project/thehive4py](https://github.com/thehive-project/thehive4py) Python API Client for TheHive
-- [**89**星][3y] [swiftonsecurity/phishingregex](https://github.com/swiftonsecurity/phishingregex) Backup of my phishing regular expression testing bench
-- [**89**星][23d] [PHP] [shirosaidev/diskover-web](https://github.com/shirosaidev/diskover-web) Web file manager, disk space usage, storage search engine and file system analytics for diskover
+- [**89**星][4y] [C#] [smartbooks/smartspider](https://github.com/smartbooks/smartspider) 网络信息智能采集系统,是一款基于http协议的Web信息采集软件,应用于网站信息采集,信息安全监控等领域。
+- [**89**星][2m] [C++] [sinakarvandi/process-magics](https://github.com/sinakarvandi/process-magics) This is a collection of interesting codes about Windows Process creation.
+- [**89**星][2m] [C] [sfan5/fi6s](https://github.com/sfan5/fi6s) IPV6扫描器
- [**89**星][5m] [C] [session-replay-tools/intercept](https://github.com/session-replay-tools/intercept) An auxiliary tool for tcpcopy and tcpburn
- [**89**星][2y] [C#] [schillings/swordphish](https://github.com/schillings/swordphish) Schillings SwordPhish empowers organisations and engages its employees to establish the key component of any cyber security strategy: the Human Firewall.
- [**89**星][2y] [HTML] [sam-b/windbg-plugins](https://github.com/sam-b/windbg-plugins) Any useful windbg plugins I've written.
- [**89**星][4m] [Go] [richardlehane/siegfried](https://github.com/richardlehane/siegfried) signature-based file format identification
- [**89**星][5y] [C] [retme7/cve-2014-4322_poc](https://github.com/retme7/cve-2014-4322_poc) Gain privileges:system -> root,as a part of
-- [**89**星][1y] [PowerShell] [realoriginal/reflectivepotato](https://github.com/realoriginal/reflectivepotato) MSFRottenPotato built as a Reflective DLL.
-- [**89**星][4y] [C] [rchiossi/dexterity](https://github.com/rchiossi/dexterity) Dex manipulation library
-- [**89**星][12d] [C] [plusvic/yara](https://github.com/plusvic/yara) The pattern matching swiss knife
+- [**89**星][1y] [PS] [realoriginal/reflectivepotato](https://github.com/realoriginal/reflectivepotato) MSFRottenPotato built as a Reflective DLL.
- [**89**星][6m] [Py] [patois/hrdevhelper](https://github.com/patois/hrdevhelper) 反编译函数CTree可视化
- [**89**星][3y] [JS] [particle-iot/spark-protocol](https://github.com/particle-iot/spark-protocol) Node.JS module for hosting direct encrypted CoAP socket connections
-- [**89**星][6m] [C#] [octokit/octokit.graphql.net](https://github.com/octokit/octokit.graphql.net) A GitHub GraphQL client library for .NET
+- [**89**星][24d] [C#] [notsosecure/blacklist3r](https://github.com/notsosecure/blacklist3r) project-blacklist3r
+- [**89**星][5m] [C++] [niklasb/sploits](https://github.com/niklasb/sploits)
+- [**89**星][8y] [C] [neuroo/runtime-tracer](https://github.com/neuroo/runtime-tracer) 使用Pin收集运行数据并在IDA中显示
+ - [PinTool](https://github.com/neuroo/runtime-tracer/tree/master/tracer)
+ - [IDA插件](https://github.com/neuroo/runtime-tracer/tree/master/ida-pin)
- [**89**星][2y] [nanopool/claymore-xmr-miner](https://github.com/nanopool/claymore-xmr-miner) Claymore's CryptoNote GPU Miner
-- [**89**星][1m] [Java] [mnemonic-no/act-platform](https://github.com/mnemonic-no/act-platform) Open platform for collection and exchange of threat intelligence information
-- [**89**星][3y] [JS] [lovetingyuan/fq](https://github.com/lovetingyuan/fq) fq应用,基于nodejs和shadowsocks
-- [**89**星][3y] [Objective-C] [jamie72/ipapatch](https://github.com/jamie72/ipapatch) Patch iOS Apps, The Easy Way, Without Jailbreak.
-- [**89**星][6y] [C++] [igh0st/gh0st3.6_src](https://github.com/igh0st/gh0st3.6_src)
+- [**89**星][5y] [JS] [laktak/vanilla-chrome](https://github.com/laktak/vanilla-chrome) Vanilla Cookie Manager is a Whitelist Manager that helps protect your privacy. Automatically removes unwanted cookies.
+- [**89**星][2m] [Java] [julietkilo/canbabel](https://github.com/julietkilo/canbabel) Translator for several Controller Area Network (CAN) description formats
+- [**89**星][3y] [ObjC] [jamie72/ipapatch](https://github.com/jamie72/ipapatch) Patch iOS Apps, The Easy Way, Without Jailbreak.
- [**89**星][5y] [Py] [ifghou/wapiti](https://github.com/ifghou/wapiti) A web-application vulnerability scanner
+- [**89**星][4y] [Py] [houqp/shell.py](https://github.com/houqp/shell.py) shell power for python
- [**89**星][8m] [Shell] [hannob/tlshelpers](https://github.com/hannob/tlshelpers) A collection of shell scripts that help handling X.509 certificate and TLS issues
- [**89**星][2y] [PHP] [graniet/gshark-framework](https://github.com/graniet/gshark-framework) gshark-framework:执行web post exploitation,可与多个 Web 后门交互,并执行自定义脚本
-- [**89**星][2y] [PowerShell] [gimini/noah](https://github.com/gimini/noah) an agentless open source Incident Response framework based on PowerShell
-- [**89**星][1m] [Py] [giantbranch/pwn_deploy_chroot](https://github.com/giantbranch/pwn_deploy_chroot) 可以方便地部署一个或者多个pwn题到一个docker容器中(使用chroot,并可以设置是否使用我自己写的catflag程序替换默认的/bin/sh程序,以增加安全性)
-- [**89**星][2y] [C++] [epam/nfstrace](https://github.com/epam/nfstrace) Network file system monitor and analyzer
-- [**89**星][15d] [JS] [ehmicky/test-each](https://github.com/ehmicky/test-each)
+- [**89**星][2y] [PS] [gimini/noah](https://github.com/gimini/noah) an agentless open source Incident Response framework based on PowerShell
+- [**89**星][10d] [JS] [ehmicky/test-each](https://github.com/ehmicky/test-each)
- [**89**星][2y] [C#] [dsnezhkov/typhoon](https://github.com/dsnezhkov/typhoon) recon under the radar
- [**89**星][7m] [Java] [docbleach/docbleach](https://github.com/docbleach/docbleach)
- [**89**星][3y] [Java] [dobin/burpsentinel](https://github.com/dobin/burpsentinel) GUI Burp Plugin to ease discovering of security holes in web applications
- [**89**星][2y] [Py] [dionysio/haveibeenpwned_lastpass](https://github.com/dionysio/haveibeenpwned_lastpass) Check if your lastpass passwords have been pwned by someone
+- [**89**星][5m] [Ruby] [digininja/rsmangler](https://github.com/digininja/rsmangler) RSMangler will take a wordlist and perform various manipulations on it similar to those done by John the Ripper with a few extras.
- [**89**星][6m] [Go] [devanshbatham/gorecon](https://github.com/devanshbatham/gorecon) Gorecon is a All in one Reconnaissance Tool , a.k.a swiss knife for Reconnaissance , A tool that every pentester/bughunter might wanna consider into their arsenal
-- [**89**星][2y] [PowerShell] [danielbohannon/out-fincodedcommand](https://github.com/danielbohannon/out-fincodedcommand) POC Highlighting Obfuscation Techniques used by FIN threat actors based on cmd.exe's replace functionality and cmd.exe/powershell.exe's stdin command invocation capabilities
-- [**89**星][2m] [JS] [consensys/truffle-security](https://github.com/consensys/truffle-security) MythX smart contract security verification plugin for Truffle Framework
+- [**89**星][1y] [Py] [dc3l1ne/weblogic-weakpassword-scnner](https://github.com/dc3l1ne/weblogic-weakpassword-scnner)
+- [**89**星][2y] [PS] [danielbohannon/out-fincodedcommand](https://github.com/danielbohannon/out-fincodedcommand) POC Highlighting Obfuscation Techniques used by FIN threat actors based on cmd.exe's replace functionality and cmd.exe/powershell.exe's stdin command invocation capabilities
- [**89**星][4y] [Py] [cognosec/secbee](https://github.com/cognosec/secbee) a ZigBee security testing tool developed
- [**89**星][2y] [C] [codecat/clawsearch](https://github.com/codecat/clawsearch) A memory scanner plugin for x64dbg, inspired by Cheat Engine.
-- [**89**星][3m] [C] [capstone-rust/capstone-rs](https://github.com/capstone-rust/capstone-rs) high-level Capstone system bindings for Rust
-- [**89**星][2y] [PowerShell] [borntoberoot/powershell_ipv4portscanner](https://github.com/borntoberoot/powershell_ipv4portscanner) Powerful asynchronus IPv4 Port Scanner for PowerShell
-- [**89**星][12d] [bkimminich/pwning-juice-shop](https://github.com/bkimminich/pwning-juice-shop) GitBook markdown content for the eBook "Pwning OWASP Juice Shop"
-- [**89**星][2y] [Objective-C] [bahome/batouchid](https://github.com/bahome/batouchid) git 最全面的支付宝 指纹解锁 和 手势解锁 封装以及逻辑处理!
-- [**89**星][2m] [Ruby] [auth0/ruby-auth0](https://github.com/auth0/ruby-auth0) Ruby toolkit for Auth0 API
-- [**89**星][11m] [Shell] [antitree/private-tor-network](https://github.com/antitree/private-tor-network) Run an isolated instance of a tor network in Docker containers
+- [**89**星][7d] [C] [capstone-rust/capstone-rs](https://github.com/capstone-rust/capstone-rs) high-level Capstone system bindings for Rust
+- [**89**星][6d] [bkimminich/pwning-juice-shop](https://github.com/bkimminich/pwning-juice-shop) GitBook markdown content for the eBook "Pwning OWASP Juice Shop"
+- [**89**星][4y] [Py] [bindog/toymalwareclassification](https://github.com/bindog/toymalwareclassification) Kaggle微软恶意代码分类
+- [**89**星][2y] [ObjC] [bahome/batouchid](https://github.com/bahome/batouchid) git 最全面的支付宝 指纹解锁 和 手势解锁 封装以及逻辑处理!
- [**89**星][6y] [C++] [amrthabet/winsrdf](https://github.com/amrthabet/winsrdf) Security Research and Development Framework
+- [**89**星][4m] [adguardteam/adguardformac](https://github.com/adguardteam/adguardformac) Open bug tracker for Mac version of AdGuard
- [**89**星][2y] [HTML] [0xcl/clang-cfi-bypass-techniques](https://github.com/0xcl/clang-cfi-bypass-techniques) 三种利用漏洞绕过Clang Control Flow Integrity (CFI)的技巧(应用于Chromium时)
-- [**89**星][9m] [Py] [0x27/ssh_keyscanner](https://github.com/0x27/ssh_keyscanner) ssh public host key scanner using shodan
- [**89**星][11m] [Py] [0x00-0x00/fakepip](https://github.com/0x00-0x00/fakepip) Pip install exploit package
-- [**88**星][2d] [Py] [sachinkamath/ntlmrecon](https://github.com/sachinkamath/ntlmrecon) A fast and flexible NTLM reconnaissance tool
-- [**88**星][5m] [Py] [lgandx/ccrawldns](https://github.com/lgandx/ccrawldns) This small utility retrieves from the CommonCrawl data set unique subdomains for a given domain name.
-- [**88**星][9m] [C] [caesar0301/pkt2flow](https://github.com/caesar0301/pkt2flow) A simple utility to classify packets into flows. It's so simple that only one task is aimed to finish. For Deep Packet Inspection or flow classification, it's so common to analyze the feature of one specific flow. I have make the attempt to use made-ready tools like tcpflows, tcpslice, tcpsplit, but all these tools try to either decrease the tra…
-- [**88**星][7d] [PowerShell] [gtworek/psbits](https://github.com/gtworek/psbits) Simple (mainly PowerShell) solutions allowing you to dig a bit deeper than usual.
-- [**88**星][26d] [C++] [4d61726b/virtualkd-redux](https://github.com/4d61726b/virtualkd-redux) VirtualKD-Redux - A revival and modernization of VirtualKD
+- [**88**星][2y] [Go] [dawei101/tongsheclient.shadowsocks-go-ui](https://github.com/dawei101/tongsheclient.shadowsocks-go-ui) shadowsocks client for all desktop platform(mac osx/windows/linux) with golang
+- [**88**星][3y] [Swift] [kjcracks/swift-dump](https://github.com/kjcracks/swift-dump) Generate readable Swift code from binaries
+- [**88**星][3m] [C++] [leoloobeek/comproxy](https://github.com/leoloobeek/comproxy) PoC for proxying COM objects when hijacking
- [**88**星][2y] [Py] [icchy/tracecorn](https://github.com/icchy/tracecorn) Windows API 调用追踪,用作恶意代码分析
-- [**88**星][1y] [C] [zerosteiner/reflective-polymorphism](https://github.com/zeroSteiner/reflective-polymorphism) Reflective Polymorphism
- [**88**星][1y] [TeX] [zxgio/r2-cheatsheet](https://github.com/zxgio/r2-cheatsheet) Radare2 cheat-sheet
- [**88**星][3y] [C++] [zibility/remote](https://github.com/zibility/remote) 参考Gh0st源码,实现的一款PC远程协助软件,拥有远程Shell、文件管理、桌面管理、消息发送等功能。
-- [**88**星][9m] [C++] [zhunki/superion](https://github.com/zhunki/superion) Superion is a fuzzer which extends the famous AFL to support structured inputs such as JavaScript and XML.
- [**88**星][2m] [PHP] [zendframework/zend-crypt](https://github.com/zendframework/zend-crypt) Cryptographic component from Zend Framework
- [**88**星][10m] [Py] [woj-ciech/kupa3](https://github.com/woj-ciech/kupa3) Tracking the trackers. Draw connections between scripts and domains on website.
-- [**88**星][1y] [PowerShell] [vletoux/spoolerscanner](https://github.com/vletoux/spoolerscanner) Check if MS-RPRN is remotely available with powershell/c#
-- [**88**星][17d] [CSS] [uvasrg/evademl](https://github.com/uvasrg/evademl) 绕过基于机器学习的恶意软件分类器
+- [**88**星][5m] [C] [vulhub/redis-rogue-getshell](https://github.com/vulhub/redis-rogue-getshell) 利用redis 4.x/5.x master/slave 模式getshell
+- [**88**星][3d] [C] [vigem/hidguardian](https://github.com/vigem/hidguardian) Windows kernel-mode driver for controlling access to various input devices.
+- [**88**星][9d] [CSS] [uvasrg/evademl](https://github.com/uvasrg/evademl) 绕过基于机器学习的恶意软件分类器
- [**88**星][3y] [C] [ufrisk/kaslrfinder](https://github.com/ufrisk/kaslrfinder) Kernel Address Space Layout Randomization (KASLR) Recovery Software
- [**88**星][5m] [tuupola/branca-spec](https://github.com/tuupola/branca-spec) Authenticated and encrypted API tokens using modern crypto
-- [**88**星][11d] [Ruby] [travis-ci/packer-templates](https://github.com/travis-ci/packer-templates) Templates for Packer!
+- [**88**星][1m] [Py] [tum-i22/macke](https://github.com/tum-i22/macke) Modular And Compositional analysis with KLEE Engine
+- [**88**星][13d] [Ruby] [travis-ci/packer-templates](https://github.com/travis-ci/packer-templates) Templates for Packer!
- [**88**星][1y] [Py] [tearsecurity/firstorder](https://github.com/tearsecurity/firstorder) A traffic analyzer to evade Empire's communication from Anomaly-Based IDS
-- [**88**星][2y] [PowerShell] [suriyaakudoisc/keylogger](https://github.com/suriyaakudoisc/keylogger)
+- [**88**星][2y] [PS] [suriyaakudoisc/keylogger](https://github.com/suriyaakudoisc/keylogger)
- [**88**星][3y] [C] [stealth/troubleshooter](https://github.com/stealth/troubleshooter) setroubleshootd xSports
- [**88**星][3m] [Go] [smiegles/mass3](https://github.com/smiegles/mass3) 使用DNS和一堆DNS解析器, 快速枚举预定义的AWS S3 bucket
+- [**88**星][1y] [Java] [silentsignal/burp-image-size](https://github.com/silentsignal/burp-image-size) Image size issues plugin for Burp Suite
- [**88**星][1y] [Py] [sigploiter/gtscan](https://github.com/sigploiter/gtscan) The Nmap Scanner for Telco
- [**88**星][2m] [Py] [si9int/acamar](https://github.com/si9int/acamar) A Python3 based single-file subdomain enumerator
-- [**88**星][2m] [C] [sfan5/fi6s](https://github.com/sfan5/fi6s) IPV6扫描器
- [**88**星][2y] [Py] [se55i0n/awvs_nessus_scanner_api](https://github.com/se55i0n/awvs_nessus_scanner_api) 扫描器Awvs 11和Nessus 7 Api利用脚本
+- [**88**星][14d] [sdnewhop/sdwannewhope](https://github.com/sdnewhop/sdwannewhope) 通过分析不同的SD-WAN解决方案, 回答SD-WAN安全性方面的问题(SD-WAN: 软件定义的广域网)
+- [**88**星][2m] [Scala] [scala/jardiff](https://github.com/scala/jardiff) A tool for comparing JAR files, including Scala pickled signatures and method code
- [**88**星][10m] [PHP] [sanix-darker/antiddos-system](https://github.com/sanix-darker/antiddos-system)
- [**88**星][5m] [Py] [rub-syssec/password-guessing-framework](https://github.com/rub-syssec/password-guessing-framework) A Framework for Comparing Password Guessing Strategies
- [**88**星][6m] [Java] [rub-nds/burpssoextension](https://github.com/rub-nds/burpssoextension) An extension for BurpSuite that highlights SSO messages in Burp's proxy window..
+- [**88**星][2m] [Scala] [rsertelon/android-keystore-recovery](https://github.com/rsertelon/android-keystore-recovery) A tool to recover your lost Android keystore password
- [**88**星][2y] [Py] [rk700/attackrsa](https://github.com/rk700/attackrsa) An all-in-one tool including many common attacks against RSA problems in CTF.
- [**88**星][1y] [C] [renorobert/virtualbox-cve-2018-2844](https://github.com/renorobert/virtualbox-cve-2018-2844)
-- [**88**星][2y] [PowerShell] [realparisi/wmi_monitor](https://github.com/realparisi/wmi_monitor) Log newly created WMI consumers and processes to the Windows Application event log
-- [**88**星][1y] [Shell] [ossiozac/raspberry-pi-zero-rubber-ducky-duckberry-pi](https://github.com/ossiozac/raspberry-pi-zero-rubber-ducky-duckberry-pi) A £10 Rubber Ducky USB HID! A USB device which emulates a keyboard and automates key entry.
+- [**88**星][2y] [PS] [realparisi/wmi_monitor](https://github.com/realparisi/wmi_monitor) Log newly created WMI consumers and processes to the Windows Application event log
+- [**88**星][5m] [Py] [rassec/yandi-scanner](https://github.com/rassec/yandi-scanner) Network Security Vulnerability Scanner
- [**88**星][3m] [JS] [ossindex/auditjs](https://github.com/ossindex/auditjs) Audits an NPM package.json file to identify known vulnerabilities.
-- [**88**星][2m] [Py] [operatorequals/httpimport](https://github.com/operatorequals/httpimport) Module for remote in-memory Python package/module loading through HTTP/S
-- [**88**星][5m] [C++] [niklasb/sploits](https://github.com/niklasb/sploits)
-- [**88**星][8y] [C] [neuroo/runtime-tracer](https://github.com/neuroo/runtime-tracer) 使用Pin收集运行数据并在IDA中显示
- - [PinTool](https://github.com/neuroo/runtime-tracer/tree/master/tracer)
- - [IDA插件](https://github.com/neuroo/runtime-tracer/tree/master/ida-pin)
- [**88**星][7m] [Go] [nearform/gammaray](https://github.com/nearform/gammaray) Node.js vulnerability scanner
- [**88**星][4y] [Py] [mothran/unicorn-decoder](https://github.com/mothran/unicorn-decoder) Simple shellcode decoder using unicorn-engine
- [**88**星][2y] [Py] [mind0xp/frida-python-binding](https://github.com/mind0xp/frida-python-binding) Easy to use Frida python binding script
- [**88**星][10m] [Go] [marinx/keylogger](https://github.com/marinx/keylogger) Basic keylogger in Go (no C deps)
+- [**88**星][11m] [JS] [mandatoryprogrammer/tarnish](https://github.com/mandatoryprogrammer/tarnish) A Chrome extension static analysis tool to help aide in security reviews.
- [**88**星][4y] [Py] [maltelligence/maltelligence](https://github.com/maltelligence/maltelligence) a Malware/Threat Analyst Desktop
-- [**88**星][5y] [JS] [laktak/vanilla-chrome](https://github.com/laktak/vanilla-chrome) Vanilla Cookie Manager is a Whitelist Manager that helps protect your privacy. Automatically removes unwanted cookies.
-- [**88**星][4y] [Py] [knownsec/vxpwn](https://github.com/knownsec/vxpwn) VxWorks漏洞挖掘相关
-- [**88**星][2m] [Java] [julietkilo/canbabel](https://github.com/julietkilo/canbabel) Translator for several Controller Area Network (CAN) description formats
+- [**88**星][3y] [JS] [lovetingyuan/fq](https://github.com/lovetingyuan/fq) fq应用,基于nodejs和shadowsocks
- [**88**星][8m] [Shell] [jseidl/multi-tor](https://github.com/jseidl/multi-tor) Shellscript opens multiple TOR instances
+- [**88**星][6m] [C#] [jnqpblc/sharpspray](https://github.com/jnqpblc/sharpspray) SharpSpray a simple code set to perform a password spraying attack against all users of a domain using LDAP and is compatible with Cobalt Strike.
- [**88**星][1y] [Shell] [jbreed/apkwash](https://github.com/jbreed/apkwash) Android APK Antivirus evasion for msfvenom generated payloads.
-- [**88**星][2y] [Ruby] [hanshaze/ms17-010-eternalblue-winxp-win10](https://github.com/hanshaze/ms17-010-eternalblue-winxp-win10) EternalBlue Metasploit Port to various Windows Versions from Windows XP SP2 up to Windows 10 Pro
-- [**88**星][24d] [C] [guidovranken/cryptofuzz](https://github.com/guidovranken/cryptofuzz)
- [**88**星][2y] [Java] [federicodotta/handycollaborator](https://github.com/federicodotta/handycollaborator) Burp Suite plugin created for using Collaborator tool during manual testing in a comfortable way!
+- [**88**星][20d] [Py] [ernw/windows-insight](https://github.com/ernw/windows-insight) The content of this repository aims to assist efforts on analysing inner working principles, functionalities, and properties of the Microsoft Windows operating system. This repository stores relevant documentation as well as executable files needed for conducting analysis studies.
- [**88**星][1m] [Rust] [ekse/unicorn-rs](https://github.com/ekse/unicorn-rs) Rust bindings for the unicorn CPU emulator
-- [**88**星][4m] [C++] [djformby/grfics](https://github.com/djformby/grfics) Graphical Realism Framework for Industrial Control Simulations
+- [**88**星][2y] [C++] [egebalci/cminer](https://github.com/egebalci/cminer) Cminer is a tool for enumerating the code caves in PE files.
+- [**88**星][3y] [Go] [dutchcoders/ares](https://github.com/dutchcoders/ares) Phishing toolkit for red teams and pentesters.
- [**88**星][9m] [Py] [dirkjanm/impacket](https://github.com/dirkjanm/impacket) Impacket is a collection of Python classes for working with network protocols.
-- [**88**星][5m] [Ruby] [digininja/rsmangler](https://github.com/digininja/rsmangler) RSMangler will take a wordlist and perform various manipulations on it similar to those done by John the Ripper with a few extras.
-- [**88**星][1y] [Py] [dc3l1ne/weblogic-weakpassword-scnner](https://github.com/dc3l1ne/weblogic-weakpassword-scnner)
- [**88**星][4y] [dantaler/detectionstring](https://github.com/dantaler/detectionstring) list of sql-injection and XSS strings
- [**88**星][5y] [Py] [cubicalabs/idasynergy](https://github.com/cubicalabs/idasynergy) 集成了版本控制系统(svn)的IDA插件
- [**88**星][3m] [Scala] [criteo/lolhttp](https://github.com/criteo/lolhttp) An HTTP Server and Client library for Scala.
- [**88**星][6m] [Go] [coinbase/dexter](https://github.com/coinbase/dexter) Forensics acquisition framework designed to be extensible and secure
-- [**88**星][1y] [Objective-C] [cmackay/google-analytics-plugin](https://github.com/cmackay/google-analytics-plugin) Cordova Google Analytics Plugin for Android & iOS
+- [**88**星][1y] [ObjC] [cmackay/google-analytics-plugin](https://github.com/cmackay/google-analytics-plugin) Cordova Google Analytics Plugin for Android & iOS
+- [**88**星][3m] [Py] [cisco-talos/ghidraaas](https://github.com/cisco-talos/ghidraaas) 通过REST API暴露Ghidra分析服务, 也是GhIDA的后端
- [**88**星][3y] [Py] [circl/bgp-ranking](https://github.com/circl/bgp-ranking) BGP ranking is a free software to calculate the security ranking of Internet Service Provider (ASN).
- [**88**星][1y] [chihebchebbi/internet-of-things-pentesting-framework](https://github.com/chihebchebbi/internet-of-things-pentesting-framework)
+- [**88**星][1y] [C] [chef-koch/malware-research](https://github.com/chef-koch/malware-research) Samples, research and documents about any kind of malware and misc source which should be released to the public
- [**88**星][5y] [Py] [cheetz/brutescrape](https://github.com/cheetz/brutescrape) A web scraper for generating password files based on plain text found
- [**88**星][3m] [JS] [chatziko/location-guard](https://github.com/chatziko/location-guard) Hide your geographic location from websites.
-- [**88**星][2y] [Py] [blackploit/hash-identifier](https://github.com/blackploit/hash-identifier) Software to identify the different types of hashes used to encrypt data and especially passwords
-- [**88**星][12d] [Py] [appsecco/spaces-finder](https://github.com/appsecco/spaces-finder) A tool to hunt for publicly accessible DigitalOcean Spaces
-- [**88**星][2m] [Java] [adubbz/ghidra-switch-loader](https://github.com/adubbz/ghidra-switch-loader) Nintendo Switch loader for Ghidra
-- [**88**星][6m] [C++] [adalenv/cve-2019-0708-tool](https://github.com/adalenv/cve-2019-0708-tool) A social experiment
+- [**88**星][10m] [Py] [calidog/axeman](https://github.com/calidog/axeman) Axeman is a utility to retrieve certificates from Certificate Transparency Lists (CTLs)
+- [**88**星][5m] [Py] [balika011/selfblow](https://github.com/balika011/selfblow) CVE‑2019‑5680
+- [**88**星][14d] [Py] [appsecco/spaces-finder](https://github.com/appsecco/spaces-finder) A tool to hunt for publicly accessible DigitalOcean Spaces
+- [**88**星][1y] [Py] [andresriancho/jwt-fuzzer](https://github.com/andresriancho/jwt-fuzzer) JWT fuzzer
+- [**88**星][7m] [C++] [adalenv/cve-2019-0708-tool](https://github.com/adalenv/cve-2019-0708-tool) A social experiment
- [**88**星][2y] [Ruby] [0x09al/cve-2017-11882-metasploit](https://github.com/0x09al/cve-2017-11882-metasploit) This is a Metasploit module which exploits CVE-2017-11882 using the POC released here :
-- [**87**星][2m] [C] [zfl9/chinadns-ng](https://github.com/zfl9/chinadns-ng) chinadns next generation, refactoring with epoll and ipset
-- [**87**星][7m] [Shell] [honwen/luci-app-shadowsocksr](https://github.com/honwen/luci-app-shadowsocksr) OpenWrt/LEDE LuCI for ShadowsocksR-libev
- [**87**星][4y] [Py] [aanarchyy/wifite-mod-pixiewps](https://github.com/aanarchyy/wifite-mod-pixiewps)
+- [**87**星][2m] [Py] [demantz/frizzer](https://github.com/demantz/frizzer) Frida-based general purpose fuzzer
- [**87**星][3m] [Py] [ecstatic-nobel/analyst-arsenal](https://github.com/ecstatic-nobel/Analyst-Arsenal) A toolkit for Security Researchers
- [**87**星][11m] [C++] [nccgroup/dibf](https://github.com/nccgroup/DIBF) Windows NT ioctl bruteforcer and modular fuzzer
+- [**87**星][6m] [Py] [mzfr/ctf-writeups](https://github.com/mzfr/ctf-writeups) Writeups of Capture The Flag Competitions
- [**87**星][4m] [Py] [duo-labs/phish-collect](https://github.com/duo-labs/phish-collect) Python script to hunt phishing kits
- [**87**星][8m] [Py] [blacknbunny/peanalyzer](https://github.com/blacknbunny/peanalyzer) Advanced Portable Executable File Analyzer And Disassembler 32 & 64 Bit
- [**87**星][2y] [Go] [rancher/lb-controller](https://github.com/rancher/lb-controller) Load Balancer for Rancher services via ingress controllers backed up by a Load Balancer provider of choice
- [**87**星][11m] [Py] [0xbharath/censys-enumeration](https://github.com/0xbharath/censys-enumeration) A script to extract subdomains/emails for a given domain using SSL/TLS certificate dataset on Censys
- [**87**星][4y] [C] [yaoyumeng/adore-ng](https://github.com/yaoyumeng/adore-ng) linux rootkit adapted for 2.6 and 3.x
- [**87**星][8y] [C] [zoloziak/winnt4](https://github.com/zoloziak/winnt4) Windows NT4 Kernel Source code
-- [**87**星][2m] [Py] [xfreed0m/katzkatz](https://github.com/xfreed0m/katzkatz) Python script to parse txt files containing Mimikatz output
-- [**87**星][14d] [C] [waterslidelts/waterslide](https://github.com/waterslidelts/waterslide) WaterSlide is a streaming event-at-a-time architecture for processing metadata. It is designed to take in a set of streaming events from multiple sources, process them through a set of modules ("kids"), and return meaningful outputs.
-- [**87**星][30d] [HTML] [w3c/editing](https://github.com/w3c/editing) Specs and explainers maintained by the editing task force
-- [**87**星][1y] [C] [vigem/hidguardian](https://github.com/vigem/hidguardian) Windows kernel-mode driver for controlling access to various input devices.
+- [**87**星][1y] [C#] [zawawawa/gatelessgatesharp](https://github.com/zawawawa/gatelessgatesharp) Gateless Gate Sharp is an user-friendly yet extremely powerful open-source multi-algorithm miner for Windows operating systems.
+- [**87**星][9m] [Java] [yunxu1/jboss-_cve-2017-12149](https://github.com/yunxu1/jboss-_cve-2017-12149) CVE-2017-12149 jboss反序列化 可回显
+- [**87**星][7d] [Py] [xfreed0m/katzkatz](https://github.com/xfreed0m/katzkatz) Python script to parse txt files containing Mimikatz output
+- [**87**星][2d] [C] [waterslidelts/waterslide](https://github.com/waterslidelts/waterslide) WaterSlide is a streaming event-at-a-time architecture for processing metadata. It is designed to take in a set of streaming events from multiple sources, process them through a set of modules ("kids"), and return meaningful outputs.
+- [**87**星][8d] [HTML] [w3c/editing](https://github.com/w3c/editing) Specs and explainers maintained by the editing task force
+- [**87**星][2y] [vegabird/xvna](https://github.com/vegabird/xvna) 带漏洞的Node App
- [**87**星][6m] [v-p-b/avpwn](https://github.com/v-p-b/avpwn) List of real-world threats against endpoint protection software
+- [**87**星][1y] [Py] [uploadcare/pyuploadcare](https://github.com/uploadcare/pyuploadcare) Python library for uploadcare
+- [**87**星][17d] [C] [unicornteam/hackcube-special](https://github.com/unicornteam/hackcube-special)
- [**87**星][1y] [Java] [twjitm/afhq](https://github.com/twjitm/afhq) 类似于腾讯手机管家,360安全卫士等软件系。可以进行木马扫描,网络端口扫描,支付环境扫描,漏洞检测,短信电话拦截,垃圾清理,和手机防盗,利用反射和内容提供者实现电话短信拦截,采用iptable实现网络拦截过滤
-- [**87**星][1m] [Py] [tum-i22/macke](https://github.com/tum-i22/macke) Modular And Compositional analysis with KLEE Engine
-- [**87**星][3m] [Py] [thomaspatzke/wase](https://github.com/thomaspatzke/wase) The Web Audit Search Engine - Index and Search HTTP Requests and Responses in Web Application Audits with ElasticSearch
-- [**87**星][1y] [Shell] [thelinuxchoice/infog](https://github.com/thelinuxchoice/infog) Information Gathering Tool
-- [**87**星][2m] [C++] [sinakarvandi/process-magics](https://github.com/sinakarvandi/process-magics) This is a collection of interesting codes about Windows Process creation.
-- [**87**星][1y] [Java] [silentsignal/burp-image-size](https://github.com/silentsignal/burp-image-size) Image size issues plugin for Burp Suite
+- [**87**星][26d] [Py] [tozny/rancher-lets-encrypt](https://github.com/tozny/rancher-lets-encrypt) Automatically create and manage certificates in Rancher using Let's Encrypt webroot verification via a minimal service
+- [**87**星][2m] [JS] [sk4ddy/remediatetheflag](https://github.com/sk4ddy/remediatetheflag) remediatetheflag: 对程序员进行安全相关的培训
- [**87**星][6y] [C] [shjalayeri/drivecrypt](https://github.com/shjalayeri/drivecrypt) DriveCrypt Dcr.sys vulnerability exploit
-- [**87**星][12d] [sdnewhop/sdwannewhope](https://github.com/sdnewhop/sdwannewhope) 通过分析不同的SD-WAN解决方案, 回答SD-WAN安全性方面的问题(SD-WAN: 软件定义的广域网)
- [**87**星][6m] [TeX] [rudymatela/concise-cheat-sheets](https://github.com/rudymatela/concise-cheat-sheets) Cheat Sheets for programming languages and tools
-- [**87**星][2m] [Scala] [rsertelon/android-keystore-recovery](https://github.com/rsertelon/android-keystore-recovery) A tool to recover your lost Android keystore password
- [**87**星][4y] [Py] [regit/pshitt](https://github.com/regit/pshitt) Passwords of SSH Intruders Transferred to Text
-- [**87**星][5m] [Py] [rassec/yandi-scanner](https://github.com/rassec/yandi-scanner) Network Security Vulnerability Scanner
+- [**87**星][2y] [PS] [re4lity/schtasks-backdoor](https://github.com/re4lity/schtasks-backdoor) Powershell 权限维持后门
- [**87**星][5y] [C++] [piscou/fuzzwin](https://github.com/piscou/fuzzwin)
-- [**87**星][22d] [C#] [notsosecure/blacklist3r](https://github.com/notsosecure/blacklist3r) project-blacklist3r
+- [**87**星][4y] [PS] [netspi/powershell-modules](https://github.com/netspi/powershell-modules)
- [**87**星][4y] [Py] [necst/aamo](https://github.com/necst/aamo) AAMO: Another Android Malware Obfuscator
-- [**87**星][26d] [JS] [misp/misp-dashboard](https://github.com/misp/misp-dashboard) A dashboard for a real-time overview of threat intelligence from MISP instances
-- [**87**星][4y] [Py] [malwaremusings/unpacker](https://github.com/malwaremusings/unpacker) Automated malware unpacker
+- [**87**星][1m] [nccgroup/onelogicalmyth_shell](https://github.com/nccgroup/onelogicalmyth_shell) A HTA shell to assist with breakout assessments.
+- [**87**星][10m] [C] [mrdoulestar/whatminer](https://github.com/mrdoulestar/whatminer) 整理和收集遇见的各种恶意挖矿样本以供研究和学习(欢迎小伙伴们一起维护)
+- [**87**星][4m] [C++] [misson20000/twili](https://github.com/misson20000/twili) Homebrew debug monitor for the Nintendo Switch.
+- [**87**星][28d] [JS] [misp/misp-dashboard](https://github.com/misp/misp-dashboard) A dashboard for a real-time overview of threat intelligence from MISP instances
+- [**87**星][2y] [JS] [mirkoschubert/gdpr-cli](https://github.com/mirkoschubert/gdpr-cli) A command line tool for checking your website for GDPR compliance.
- [**87**星][1y] [Py] [lnxg33k/webhandler](https://github.com/lnxg33k/webhandler) Bash simulator to control a server using PHP system functions.
- [**87**星][1y] [C] [lloydlabs/windows-api-hashing](https://github.com/lloydlabs/windows-api-hashing) This is a simple example and explanation of obfuscating API resolution via hashing
- [**87**星][4y] [Py] [laginimaineb/msm8974_exploit](https://github.com/laginimaineb/msm8974_exploit) Full TrustZone exploit for MSM8974
+- [**87**星][8m] [Py] [laconicwolf/burp-extensions](https://github.com/laconicwolf/burp-extensions) A collection of scripts to extend Burp Suite
- [**87**星][6y] [Py] [jordan-wright/python-wireless-attacks](https://github.com/jordan-wright/python-wireless-attacks) Wireless Attacks in Python (Based on Blog Series)
-- [**87**星][5m] [C#] [jnqpblc/sharpspray](https://github.com/jnqpblc/sharpspray) SharpSpray a simple code set to perform a password spraying attack against all users of a domain using LDAP and is compatible with Cobalt Strike.
- [**87**星][5y] [Py] [iphelix/ida-patcher](https://github.com/iphelix/ida-patcher) 二进制文件和内存补丁
-- [**87**星][18d] [Py] [hexhive/bopc](https://github.com/hexhive/bopc) Block Oriented Programming -- Compiler
+- [**87**星][2y] [realbearcat/fastjson-payload](https://github.com/RealBearcat/Fastjson-Payload) Fastjson 反序列化
+- [**87**星][8m] [C++] [huanghongkai/game-helper](https://github.com/huanghongkai/game-helper) 介绍入门级游戏辅助的原理,内附有2018年2月dnf辅助C++源码
+- [**87**星][20d] [Py] [hexhive/bopc](https://github.com/hexhive/bopc) Block Oriented Programming -- Compiler
- [**87**星][10m] [Py] [hegusung/webhashcat](https://github.com/hegusung/webhashcat) Hashcat web interface
- [**87**星][1y] [hannob/tls-what-can-go-wrong](https://github.com/hannob/tls-what-can-go-wrong) TLS可能存在的问题
- [**87**星][2y] [C++] [google/aff4](https://github.com/google/aff4) The Advanced Forensic File Format. NOTE: This project has been split into C and Python projects and moved to
- [**87**星][5y] [Go] [filosottile/berserk](https://github.com/filosottile/berserk) A Go implementation of the BERserk attack against Mozilla NSS ASN.1 parsing of PKCS#1 RSA signatures with e = 3. Complete of a certificate generation tool, works with CAs in the trust store.
- [**87**星][1y] [JS] [fgsect/fexm](https://github.com/fgsect/fexm) Automated fuzzing framework
-- [**87**星][18d] [Py] [ernw/windows-insight](https://github.com/ernw/windows-insight) The content of this repository aims to assist efforts on analysing inner working principles, functionalities, and properties of the Microsoft Windows operating system. This repository stores relevant documentation as well as executable files needed for conducting analysis studies.
+- [**87**星][2m] [Py] [eth0izzle/cracke-dit](https://github.com/eth0izzle/cracke-dit) cracke-dit ("Cracked It") makes it easier to perform regular password audits against Active Directory environments.
- [**87**星][1m] [F#] [enkomio/sojobo](https://github.com/enkomio/sojobo) A binary analysis framework
-- [**87**星][2y] [C++] [egebalci/cminer](https://github.com/egebalci/cminer) Cminer is a tool for enumerating the code caves in PE files.
-- [**87**星][3y] [Go] [dutchcoders/ares](https://github.com/dutchcoders/ares) Phishing toolkit for red teams and pentesters.
+- [**87**星][6d] [endermanch/malwaredatabase](https://github.com/endermanch/malwaredatabase) This repository is one of a few malware collections on the GitHub.
+- [**87**星][9m] [Java] [doyensec/burpdeveltraining](https://github.com/doyensec/burpdeveltraining) Material for the training "Developing Burp Suite Extensions – From Manual Testing to Security Automation"
+- [**87**星][1y] [PS] [deepzec/win-portfwd](https://github.com/deepzec/win-portfwd) Powershell script to setup windows port forwarding using native netsh client
- [**87**星][2y] [C#] [cubecoders/confuserex-reborn](https://github.com/cubecoders/confuserex-reborn) An open-source, free protector for .NET applications
-- [**87**星][3m] [PowerShell] [clr2of8/slackextract](https://github.com/clr2of8/slackextract) A PowerShell script to download all files, messages and user profiles that a user has access to in slack.
+- [**87**星][9m] [Go] [crabkun/switcher](https://github.com/crabkun/switcher) 一个多功能的端口转发/端口复用工具,支持转发本地或远程地址的端口,支持正则表达式转发(实现端口复用)。
+- [**87**星][3m] [PS] [clr2of8/slackextract](https://github.com/clr2of8/slackextract) A PowerShell script to download all files, messages and user profiles that a user has access to in slack.
- [**87**星][4m] [Clojure] [clojure-goes-fast/clj-java-decompiler](https://github.com/clojure-goes-fast/clj-java-decompiler) clj-java-decompiler: 将 Clojure 反编译为 Java
-- [**87**星][1y] [C] [chef-koch/malware-research](https://github.com/chef-koch/malware-research) Samples, research and documents about any kind of malware and misc source which should be released to the public
- [**87**星][3y] [Py] [boy-hack/pythonwebhack](https://github.com/boy-hack/pythonwebhack) 用python实现的web框架建立的在线渗透平台
- [**87**星][2y] [Java] [blackarbiter/android_code_arbiter](https://github.com/blackarbiter/android_code_arbiter) 针对Android Studio的源码扫描工具
-- [**87**星][2y] [PowerShell] [bkup/slackshell](https://github.com/bkup/slackshell) PowerShell to Slack C2
-- [**87**星][4y] [Py] [bindog/toymalwareclassification](https://github.com/bindog/toymalwareclassification) Kaggle微软恶意代码分类
-- [**87**星][5m] [Py] [balika011/selfblow](https://github.com/balika011/selfblow) CVE‑2019‑5680
+- [**87**星][2y] [PS] [bkup/slackshell](https://github.com/bkup/slackshell) PowerShell to Slack C2
- [**87**星][1m] [Py] [assurancemaladiesec/certstreammonitor](https://github.com/assurancemaladiesec/certstreammonitor) Monitor certificates generated for specific domain strings and associated, store data into sqlite3 database, alert you when sites come online.
- [**87**星][1m] [Py] [alset0326/peda-arm](https://github.com/alset0326/peda-arm) GDB plugin peda for arm
- [**87**星][2y] [Py] [alexpark07/armscgen](https://github.com/alexpark07/armscgen) ARM Shellcode Generator
-- [**87**星][1m] [Py] [akamai-threat-research/mqtt-pwn](https://github.com/akamai-threat-research/mqtt-pwn) MQTT-PWN intends to be a one-stop-shop for IoT Broker penetration-testing and security assessment operations.
- [**87**星][4y] [Py] [airbus-seclab/bta](https://github.com/airbus-seclab/bta) Open source Active Directory security audit framework.
- [**87**星][5y] [Py] [adafruit/freqshow](https://github.com/adafruit/freqshow) Raspberry Pi & PiTFT-based RTL-SDR frequency scanning and display tool.
+- [**86**星][6d] [Rust] [plsyssec/haybale](https://github.com/plsyssec/haybale) Symbolic execution of LLVM IR with an engine written in Rust
- [**86**星][4m] [Py] [skelsec/minikerberos](https://github.com/skelsec/minikerberos) Kerberos manipulation library in pure Python
- [**86**星][11m] [Py] [webbreacher/osinttools](https://github.com/webbreacher/osinttools) A collection of random OSINT scripts
+- [**86**星][1y] [Py] [bignerd95/routeros-backup-tools](https://github.com/bignerd95/routeros-backup-tools) Tools to encrypt/decrypt and pack/unpack RouterOS v6.13+ backup files
- [**86**星][1y] [Py] [openai/neural-gpu](https://github.com/openai/neural-gpu) Code for the Neural GPU model originally described in "Neural GPUs Learn Algorithms"
- [**86**星][3m] [C#] [shack2/struts2vulstools](https://github.com/shack2/struts2vulstools) Struts2系列漏洞检查工具
-- [**86**星][3m] [C++] [leoloobeek/comproxy](https://github.com/leoloobeek/comproxy) PoC for proxying COM objects when hijacking
+- [**86**星][24d] [Go] [liamg/pax](https://github.com/liamg/pax)
+- [**86**星][14d] [HCL] [nccgroup/sadcloud](https://github.com/nccgroup/sadcloud) A tool for standing up (and tearing down!) purposefully insecure cloud infrastructure
- [**86**星][4y] [JS] [nsacyber/locklevel](https://github.com/nsacyber/LOCKLEVEL) A prototype that demonstrates a method for scoring how well Windows systems have implemented some of the top 10 Information Assurance mitigation strategies. #nsacyber
+- [**86**星][9m] [Py] [hackthissite/ctf-writeups](https://github.com/HackThisSite/CTF-Writeups) Things we learned from Capture The Flag hacking competitions we participated in.
- [**86**星][2y] [Ruby] [eurialo/vsaudit](https://github.com/eurialo/vsaudit) VOIP Security Audit Framework
- [**86**星][2y] [JS] [polymathnetwork/polymath-token](https://github.com/PolymathNetwork/polymath-token) Ethereum contracts for the official Polymath token (POLY) and token distribution
-- [**86**星][5m] [Py] [mzfr/ctf-writeups](https://github.com/mzfr/ctf-writeups) Writeups of Capture The Flag Competitions
- [**86**星][7y] [Py] [stevenseeley/heaper](https://github.com/stevenseeley/heaper) heaper, an advanced heap analysis plugin for Immunity Debugger
- [**86**星][3y] [Py] [vysecurity/genhta](https://github.com/vysecurity/genHTA) Generates anti-sandbox analysis HTA files without payloads
- [**86**星][2y] [HTML] [illikainen/exploits](https://github.com/illikainen/exploits)
-- [**86**星][9m] [Java] [yunxu1/jboss-_cve-2017-12149](https://github.com/yunxu1/jboss-_cve-2017-12149) CVE-2017-12149 jboss反序列化 可回显
+- [**86**星][1y] [JS] [ettic-team/dnsbin](https://github.com/ettic-team/dnsbin) The request.bin of DNS request
+- [**86**星][7d] [HTML] [mitre-attack/attack-website](https://github.com/mitre-attack/attack-website) MITRE ATT&CK Website
+- [**86**星][4y] [Java] [zerothoughts/spring-jndi](https://github.com/zerothoughts/spring-jndi) Proof of concept exploit, showing how to do bytecode injection through untrusted deserialization with Spring Framework 4.2.4
+- [**86**星][2y] [C] [zerosum0x0/threadcontinue](https://github.com/zerosum0x0/threadcontinue) Reflective DLL injection using SetThreadContext() and NtContinue()
+- [**86**星][4y] [Py] [youmengxuefei/web_vul_scan](https://github.com/youmengxuefei/web_vul_scan) 基于爬虫的web漏洞扫描器
- [**86**星][3y] [Py] [yehia-mamdouh/xssya](https://github.com/yehia-mamdouh/xssya) XSSYA (Cross Site Scripting Scanner & Vulnerability Confirmation)
- [**86**星][2y] [Py] [wasiher/chrome_remote_interface_python](https://github.com/wasiher/chrome_remote_interface_python) Chrome Debugging Protocol interface for Python
-- [**86**星][4y] [Visual Basic] [vozzie/uacscript](https://github.com/vozzie/uacscript) Windows 7 UAC Bypass Vulnerability in the Windows Script Host
-- [**86**星][2y] [vegabird/xvna](https://github.com/vegabird/xvna) 带漏洞的Node App
+- [**86**星][4y] [Visual Basic .NET] [vozzie/uacscript](https://github.com/vozzie/uacscript) Windows 7 UAC Bypass Vulnerability in the Windows Script Host
+- [**86**星][1y] [Py] [viralmaniar/smwyg-show-me-what-you-got](https://github.com/viralmaniar/smwyg-show-me-what-you-got) This tool allows you to perform OSINT and reconnaissance on an organisation or an individual. It allows one to search 1.4 Billion clear text credentials which was dumped as part of BreachCompilation leak. This database makes finding passwords faster and easier than ever before.
- [**86**星][3y] [Py] [ucsb-seclab/baredroid](https://github.com/ucsb-seclab/baredroid) bare-metal analysis on Android devices
-- [**86**星][24d] [Py] [tozny/rancher-lets-encrypt](https://github.com/tozny/rancher-lets-encrypt) Automatically create and manage certificates in Rancher using Let's Encrypt webroot verification via a minimal service
-- [**86**星][12m] [Py] [thelsa/tp5-getshell](https://github.com/thelsa/tp5-getshell) thinkphp5 rce getshell
+- [**86**星][2y] [Swift] [tendigi/xmrminer](https://github.com/tendigi/xmrminer) An embeddable Monero miner written in Swift.
- [**86**星][5y] [Java] [sysdream/fino](https://github.com/sysdream/fino) Android small footprint inspection tool
- [**86**星][4y] [Py] [sogeti-esec-lab/lkd](https://github.com/sogeti-esec-lab/lkd) Local Kernel Debugger (LKD) is a python wrapper around dbgengine.dll
+- [**86**星][1y] [santosomar/who_and_what_to_follow](https://github.com/santosomar/who_and_what_to_follow) Who and what to follow in the world of cyber security
- [**86**星][2y] [C++] [rmitton/goaldis](https://github.com/rmitton/goaldis) Jak & Daxter GOAL disassembler
-- [**86**星][2y] [PowerShell] [re4lity/schtasks-backdoor](https://github.com/re4lity/schtasks-backdoor) Powershell 权限维持后门
- [**86**星][1y] [HTML] [radareorg/r2con2018](https://github.com/radareorg/r2con2018)
- [**86**星][11m] [paralax/awesome-internet-scanning](https://github.com/paralax/awesome-internet-scanning) A curated list of awesome Internet port and host scanners, plus related components and much more, with a focus on free and open source projects.
- [**86**星][3y] [JS] [oalabs/frida-wshook](https://github.com/oalabs/frida-wshook) Script analysis tool based on Frida.re
- [**86**星][8m] [nongiach/awesome-cryptocurrency-security](https://github.com/nongiach/awesome-cryptocurrency-security)
- [**86**星][5m] [C++] [nlitsme/idbutil](https://github.com/nlitsme/idbutil) 从 IDA 数据库中提取数据,支持 idb 及 i64
-- [**86**星][4y] [PowerShell] [netspi/powershell-modules](https://github.com/netspi/powershell-modules)
-- [**86**星][1m] [nccgroup/onelogicalmyth_shell](https://github.com/nccgroup/onelogicalmyth_shell) A HTA shell to assist with breakout assessments.
-- [**86**星][10m] [C] [mrdoulestar/whatminer](https://github.com/mrdoulestar/whatminer) 整理和收集遇见的各种恶意挖矿样本以供研究和学习(欢迎小伙伴们一起维护)
+- [**86**星][2m] [nightowl131/aapg](https://github.com/nightowl131/aapg) [A]ndroid [A]pplication [P]entest [G]uide
+- [**86**星][7m] [Py] [nccgroup/blesuite](https://github.com/nccgroup/blesuite) BLESuite is a Python package that provides an easier way to test Bluetooth Low Energy (BLE) device
+- [**86**星][2m] [Ruby] [nbulaj/proxy_fetcher](https://github.com/nbulaj/proxy_fetcher)
- [**86**星][5y] [Ruby] [moosedojo/praedasploit](https://github.com/moosedojo/praedasploit)
-- [**86**星][4m] [C++] [misson20000/twili](https://github.com/misson20000/twili) Homebrew debug monitor for the Nintendo Switch.
-- [**86**星][2y] [JS] [mirkoschubert/gdpr-cli](https://github.com/mirkoschubert/gdpr-cli) A command line tool for checking your website for GDPR compliance.
- [**86**星][2y] [Ruby] [mavproxyuser/p0vsredherring](https://github.com/mavproxyuser/p0vsredherring) "Luckily, there are underground 0day exploits for FTPD for path traversal." #FakeNews #DotDotWontPwn
+- [**86**星][3m] [Go] [mame82/unifyingvulnsdisclosurerepo](https://github.com/mame82/unifyingvulnsdisclosurerepo) Formerly private repository for discussion, knowledge- and code-sharing around new Unifying vulns, as announced on Twitter
- [**86**星][1y] [C++] [malwaretech/appcontainersandbox](https://github.com/malwaretech/appcontainersandbox) An example sandbox using AppContainer (Windows 8+)
-- [**86**星][8m] [Py] [laconicwolf/burp-extensions](https://github.com/laconicwolf/burp-extensions) A collection of scripts to extend Burp Suite
-- [**86**星][3m] [Rust] [kzen-networks/curv](https://github.com/kzen-networks/curv) Rust language general purpose elliptic curve cryptography.
-- [**86**星][2y] [realbearcat/fastjson-payload](https://github.com/RealBearcat/Fastjson-Payload) Fastjson 反序列化
+- [**86**星][4y] [Py] [malwaremusings/unpacker](https://github.com/malwaremusings/unpacker) Automated malware unpacker
+- [**86**星][3d] [Rust] [kzen-networks/curv](https://github.com/kzen-networks/curv) Rust language general purpose elliptic curve cryptography.
+- [**86**星][4y] [PHP] [klaubert/waf-fle](https://github.com/klaubert/waf-fle) WAF-FLE, ModSecurity Console
+- [**86**星][7m] [C++] [kimci86/bkcrack](https://github.com/kimci86/bkcrack) Crack legacy zip encryption with Biham and Kocher's known plaintext attack.
- [**86**星][7y] [Py] [iamultra/ssrfsocks](https://github.com/iamultra/ssrfsocks) Creates a SOCK proxy server that transmits data over an SSRF vulnerability
- [**86**星][4y] [Py] [huntergregal/scansploit](https://github.com/huntergregal/scansploit) Exploit using barcodes, QRcodes, earn13, datamatrix
+- [**86**星][1y] [Java] [frpccluster/frpc-android](https://github.com/frpccluster/frpc-android) Android,安卓版frpc,一个快速反向代理,可帮助您将NAT或防火墙后面的本地服务器暴露给Internet。
- [**86**星][3y] [C] [frangarcj/oclockvita](https://github.com/frangarcj/oclockvita) Simple Overclock Plugin for Taihen
-- [**86**星][21d] [Py] [fr0gger/vthunting](https://github.com/fr0gger/vthunting) Vthunting is a tiny script used to generate report about Virus Total hunting and send it by email, slack or telegram.
+- [**86**星][3d] [Py] [fr0gger/vthunting](https://github.com/fr0gger/vthunting) Vthunting is a tiny script used to generate report about Virus Total hunting and send it by email, slack or telegram.
- [**86**星][4m] [Py] [findneo/rsa-attack](https://github.com/findneo/rsa-attack) RSA加密应用常见缺陷的原理与实践
-- [**86**星][2m] [Py] [eth0izzle/cracke-dit](https://github.com/eth0izzle/cracke-dit) cracke-dit ("Cracked It") makes it easier to perform regular password audits against Active Directory environments.
-- [**86**星][9m] [Java] [doyensec/burpdeveltraining](https://github.com/doyensec/burpdeveltraining) Material for the training "Developing Burp Suite Extensions – From Manual Testing to Security Automation"
-- [**86**星][1y] [PowerShell] [deepzec/win-portfwd](https://github.com/deepzec/win-portfwd) Powershell script to setup windows port forwarding using native netsh client
-- [**86**星][3m] [Py] [cisco-talos/ghidraaas](https://github.com/cisco-talos/ghidraaas) 通过REST API暴露Ghidra分析服务, 也是GhIDA的后端
+- [**86**星][11m] [Py] [duanhongyi/gmssl](https://github.com/duanhongyi/gmssl) a python crypto for sm2/sm3/sm4
+- [**86**星][4y] [Py] [danmcinerney/fast-recon](https://github.com/danmcinerney/fast-recon) Does some google dorks against a domain
- [**86**星][1y] [C] [cgcl-codes/vuldeepecker](https://github.com/cgcl-codes/vuldeepecker) 基于深度学习的漏洞检测系统
- [**86**星][5y] [Py] [carmaa/nacker](https://github.com/carmaa/nacker) Nacker is a tool to circumvent 802.1x Network Access Control (NAC) on a wired LAN. Nacker will help you locate any non-802.1x configurable hosts on your subnet, and spoof their MAC address so that you appear authenticated to the switch.
-- [**86**星][10m] [Py] [calidog/axeman](https://github.com/calidog/axeman) Axeman is a utility to retrieve certificates from Certificate Transparency Lists (CTLs)
- [**86**星][1y] [C++] [c3d/elfe](https://github.com/c3d/elfe) Extensible Language for Everyday
- [**86**星][5m] [Shell] [butteff/ubuntu-telemetry-free-privacy-secure](https://github.com/butteff/ubuntu-telemetry-free-privacy-secure) This Bash script just removes a pre-installed Telemetry, a pre-installed software and libs with some potentional or high risk. Script removes them to make your experience better and more secure. Also, the script installs an additional software for the protection. You will find more advices in Readme file about "what you can do more".
- [**86**星][2y] [Py] [bsmali4/sicklepoc](https://github.com/bsmali4/sicklepoc)
-- [**86**星][1y] [Py] [andresriancho/jwt-fuzzer](https://github.com/andresriancho/jwt-fuzzer) JWT fuzzer
+- [**86**星][3y] [Py] [azizaltuntas/network-analysis-tools](https://github.com/azizaltuntas/network-analysis-tools) Pcap (capture file) Analysis Toolkit(v.1)
- [**86**星][3y] [aidanharris/free-security-ebooks-from-packtpub](https://github.com/aidanharris/free-security-ebooks-from-packtpub) Collection of free Security eBooks from Packt Publishing [Regularly Updated]
- [**86**星][3y] [advanced-threat-research/efi-whitelist](https://github.com/advanced-threat-research/efi-whitelist) 一堆EFI 可执行文件的信息(Json格式),文件来自于供应商网站的(U)EFI固件更新镜像,信息包括Hash、GUID、名称、类型。
- [**86**星][7m] [Shell] [1n3/prism-ap](https://github.com/1n3/prism-ap) An automated Wireless RogueAP MITM attack framework.
-- [**85**星][4m] [TypeScript] [redpointgames/pkgsign](https://github.com/redpointgames/pkgsign) A CLI tool for signing and verifying npm and yarn packages.
-- [**85**星][2m] [Py] [demantz/frizzer](https://github.com/demantz/frizzer) Frida-based general purpose fuzzer
-- [**85**星][12d] [HCL] [nccgroup/sadcloud](https://github.com/nccgroup/sadcloud) A tool for standing up (and tearing down!) purposefully insecure cloud infrastructure
+- [**85**星][9m] [Visual Basic .NET] [catboy96/automator](https://github.com/catboy96/automator) ⌨ Digispark™ Rubber Ducky code editor for Windows.
+- [**85**星][28d] [PS] [adamdriscoll/snek](https://github.com/adamdriscoll/snek) PowerShell wrapper around Python for .NET to invoke Python from PowerShell
+- [**85**星][5m] [TS] [redpointgames/pkgsign](https://github.com/redpointgames/pkgsign) A CLI tool for signing and verifying npm and yarn packages.
+- [**85**星][3d] [C++] [tihmstar/ra1nsn0w](https://github.com/tihmstar/ra1nsn0w) A tethered booter for 64bit iOS devices vulnerable to checkm8
+- [**85**星][3y] [C++] [outflanknl/netshhelperbeacon](https://github.com/outflanknl/NetshHelperBeacon) Example DLL to load from Windows NetShell
- [**85**星][10m] [C++] [fsecurelabs/viridianfuzzer](https://github.com/FSecureLABS/ViridianFuzzer) Kernel driver to fuzz Hyper-V hypercalls
-- [**85**星][9m] [Py] [hackthissite/ctf-writeups](https://github.com/HackThisSite/CTF-Writeups) Things we learned from Capture The Flag hacking competitions we participated in.
- [**85**星][1y] [Py] [lorentzenman/youzer](https://github.com/lorentzenman/youzer) Fake User Generator for Active Directory Environments
-- [**85**星][1y] [JS] [ettic-team/dnsbin](https://github.com/ettic-team/dnsbin) The request.bin of DNS request
- [**85**星][10m] [ruby] [pikatrack/pikatrack](https://gitlab.com/pikatrack/pikatrack)
+- [**85**星][4m] [C] [zouxianyu/kernelhiddenexecute](https://github.com/zouxianyu/kernelhiddenexecute) Execute kernel code with page separation
- [**85**星][1y] [Py] [zmap/ztag](https://github.com/zmap/ztag) Tagging and annotation framework for scan data
-- [**85**星][3y] [Objective-C] [zhengmin1989/macos-10.12.2-exp-via-mach_voucher](https://github.com/zhengmin1989/macos-10.12.2-exp-via-mach_voucher) Local Privilege Escalation for macOS 10.12.2 via mach_voucher and XNU port Feng Shui
+- [**85**星][3y] [ObjC] [zhengmin1989/macos-10.12.2-exp-via-mach_voucher](https://github.com/zhengmin1989/macos-10.12.2-exp-via-mach_voucher) Local Privilege Escalation for macOS 10.12.2 via mach_voucher and XNU port Feng Shui
- [**85**星][2y] [Py] [zhangzhenfeng/anyscan](https://github.com/zhangzhenfeng/anyscan) AnyScan
-- [**85**星][4y] [Java] [zerothoughts/spring-jndi](https://github.com/zerothoughts/spring-jndi) Proof of concept exploit, showing how to do bytecode injection through untrusted deserialization with Spring Framework 4.2.4
-- [**85**星][2y] [C] [zerosum0x0/threadcontinue](https://github.com/zerosum0x0/threadcontinue) Reflective DLL injection using SetThreadContext() and NtContinue()
+- [**85**星][3m] [Py] [yeggor/uefi_retool](https://github.com/yeggor/uefi_retool) 在UEFI固件和UEFI模块分析中查找专有协议的工具
- [**85**星][1y] [Py] [wez3/msfenum](https://github.com/wez3/msfenum) 在特定目标集上自动运行多个 Metasploit auxiliary 模块
- [**85**星][2y] [Py] [wanjunzh/ssct](https://github.com/wanjunzh/ssct) ssct:shadowsocks 包装器,用于持续绕过防火墙
-- [**85**星][1y] [Py] [viralmaniar/smwyg-show-me-what-you-got](https://github.com/viralmaniar/smwyg-show-me-what-you-got) This tool allows you to perform OSINT and reconnaissance on an organisation or an individual. It allows one to search 1.4 Billion clear text credentials which was dumped as part of BreachCompilation leak. This database makes finding passwords faster and easier than ever before.
+- [**85**星][2d] [C++] [wallix/redemption](https://github.com/wallix/redemption) A GPL RDP proxy
- [**85**星][2y] [C] [vim2meta/keylogger](https://github.com/vim2meta/keylogger) A powerful C keylogger for Windows.
- [**85**星][3y] [Py] [vector35/binaryninja-plugins](https://github.com/vector35/binaryninja-plugins) Repository to track Binary Ninja Plugins, Themes, and other related tools
- [**85**星][7y] [Java] [thomascannon/android-sms-spoof](https://github.com/thomascannon/android-sms-spoof) PoC app which takes advantage of Android's SmsReceiverService being exported to fake an incoming SMS with no permissions.
+- [**85**星][12m] [Py] [thelsa/tp5-getshell](https://github.com/thelsa/tp5-getshell) thinkphp5 rce getshell
+- [**85**星][2y] [ObjC] [siguza/phoenixnonce](https://github.com/siguza/phoenixnonce) 64-bit nonce setter for iOS 9.3.4-9.3.5
- [**85**星][7m] [C] [siguza/iokit-utils](https://github.com/siguza/iokit-utils) Dev tools for probing IOKit
- [**85**星][3y] [C] [sensepost/ms16-098](https://github.com/sensepost/ms16-098) Windows 8.1 x64 Exploit for MS16-098 RNGOBJ_Integer_Overflow
- [**85**星][4y] [HTML] [secmob/cansecwest2016](https://github.com/secmob/cansecwest2016) slide and full exploit
-- [**85**星][1y] [santosomar/who_and_what_to_follow](https://github.com/santosomar/who_and_what_to_follow) Who and what to follow in the world of cyber security
+- [**85**星][8m] [JS] [scravy/node-macaddress](https://github.com/scravy/node-macaddress) Get the MAC addresses (hardware addresses) of the hosts network interfaces.
- [**85**星][2m] [Ruby] [rtfpessoa/dependency_spy](https://github.com/rtfpessoa/dependency_spy) Find known vulnerabilities in your dependencies
- [**85**星][1y] [Shell] [rpranshu/autopwn](https://github.com/rpranshu/autopwn) A simple bash based metasploit automation tool!
-- [**85**星][2m] [Py] [rocky/python2-trepan](https://github.com/rocky/python2-trepan) A gdb-like Python 2.x Debugger in the Trepan family
+- [**85**星][2m] [C++] [romainthomas/pyjadx](https://github.com/romainthomas/pyjadx) Jadx Python Binding
+- [**85**星][2d] [Py] [rocky/python2-trepan](https://github.com/rocky/python2-trepan) A gdb-like Python 2.x Debugger in the Trepan family
- [**85**星][6y] [Py] [rjw57/hdcp-genkey](https://github.com/rjw57/hdcp-genkey) Generate HDCP source and sink keys from the leaked master key
- [**85**星][3y] [risksense-ops/ms17-010](https://github.com/risksense-ops/ms17-010) MS17-010 Research
+- [**85**星][5y] [AGS Script] [rapid7/embedded-tools](https://github.com/rapid7/embedded-tools)
- [**85**星][1y] [Py] [pyn3rd/cve-2018-3191](https://github.com/pyn3rd/cve-2018-3191) CVE-2018-3191-PoC
-- [**85**星][11m] [Objective-C] [pwnsdx/unsecure](https://github.com/pwnsdx/unsecure) (Released in December 2016) Bypass security alerts of Little Flocker / Little Snitch / HandsOff! / BlockBlock (same concept can be applied to other security tools) on macOS.
+- [**85**星][11m] [ObjC] [pwnsdx/unsecure](https://github.com/pwnsdx/unsecure) (Released in December 2016) Bypass security alerts of Little Flocker / Little Snitch / HandsOff! / BlockBlock (same concept can be applied to other security tools) on macOS.
- [**85**星][8y] [poerschke/uniscan](https://github.com/poerschke/uniscan) Uniscan web vulnerability scanner
- [**85**星][5m] [Py] [pnfsoftware/jeb2-samplecode](https://github.com/pnfsoftware/jeb2-samplecode) Sample extensions for JEB Decompiler
- [**85**星][2y] [C] [petermosmans/openssl](https://github.com/petermosmans/openssl) 'Extra featured' OpenSSL with ChaCha20 and Poly1305 support
+- [**85**星][9m] [C#] [padovah4ck/psbypassclm](https://github.com/padovah4ck/psbypassclm) Bypass for PowerShell Constrained Language Mode
- [**85**星][2y] [Py] [oreilly-japan/black-hat-python-jp-support](https://github.com/oreilly-japan/black-hat-python-jp-support) 『サイバーセキュリティプログラミング』のサポートページ
-- [**85**星][7m] [Py] [nccgroup/blesuite](https://github.com/nccgroup/blesuite) BLESuite is a Python package that provides an easier way to test Bluetooth Low Energy (BLE) device
+- [**85**星][4y] [C++] [ohjeongwook/flashhacker](https://github.com/ohjeongwook/flashhacker) Flash Instrumentation Tool
+- [**85**星][5y] [C] [nyx0/rovnix](https://github.com/nyx0/rovnix) Rovnix Bootkit
- [**85**星][12m] [Py] [naivenom/exploiting](https://github.com/naivenom/exploiting) Exploiting challenges in Linux and Windows
+- [**85**星][2m] [JS] [mlgualtieri/css-exfil-protection](https://github.com/mlgualtieri/css-exfil-protection) Official repository for the CSS Exfil Protection browser extensions.
+- [**85**星][2d] [Shell] [mitchellkrogza/phishing.database](https://github.com/mitchellkrogza/phishing.database) Phishing Domains, urls websites and threats database. We use the PyFunceble testing tool to validate the status of all known Phishing domains and provide stats to reveal how many unique domains used for Phishing are still active.
- [**85**星][2y] [C] [maximehip/safari-ios10.3.2-macos-10.12.4-exploit-bugs](https://github.com/maximehip/safari-ios10.3.2-macos-10.12.4-exploit-bugs)
- [**85**星][4y] [Java] [mauro-g/snuck](https://github.com/mauro-g/snuck) Automatic XSS filter bypass
-- [**85**星][1y] [C] [marfjeh/coinhive-block](https://github.com/marfjeh/coinhive-block) To block the malware domains of coin-hive systemwide.
- [**85**星][5m] [Java] [magiczer0/fastjson-rce-exploit](https://github.com/magiczer0/fastjson-rce-exploit) exploit for fastjson remote code execution vulnerability
- [**85**星][4y] [Py] [liuhui0613/thewind](https://github.com/liuhui0613/thewind) a MITM attack tool
- [**85**星][4y] [C] [laginimaineb/cve-2015-6639](https://github.com/laginimaineb/cve-2015-6639) QSEE Privilege Escalation Exploit using PRDiag* commands (CVE-2015-6639)
-- [**85**星][7m] [C++] [kimci86/bkcrack](https://github.com/kimci86/bkcrack) Crack legacy zip encryption with Biham and Kocher's known plaintext attack.
-- [**85**星][6m] [PowerShell] [kieranwalsh/powershell](https://github.com/kieranwalsh/powershell) My PowerShell stuff
+- [**85**星][2d] [ObjC] [lacertosusrepo/open-source-tweaks](https://github.com/lacertosusrepo/open-source-tweaks) Tweaks I've left open, maybe someone can learn from/correct them. Either on my repo or Packix.
+- [**85**星][6m] [PS] [kieranwalsh/powershell](https://github.com/kieranwalsh/powershell) My PowerShell stuff
- [**85**星][1m] [C++] [jnastarot/furikuri](https://github.com/jnastarot/furikuri) (In dev)furikuri is framework for code protection
- [**85**星][1y] [Shell] [jakewharton/dalvik-dx](https://github.com/jakewharton/dalvik-dx) A standalone packaging of AOSP's platform/dalvik dx library.
-- [**85**星][8m] [C++] [huanghongkai/game-helper](https://github.com/huanghongkai/game-helper) 介绍入门级游戏辅助的原理,内附有2018年2月dnf辅助C++源码
+- [**85**星][6m] [Py] [initstring/evil-ssdp](https://github.com/initstring/evil-ssdp) Spoof SSDP replies and create fake UPnP devices to phish for credentials and NetNTLM challenge/response.
- [**85**星][4y] [C] [gitdurandal/dbd](https://github.com/gitdurandal/dbd) Durandal's Backdoor
+- [**85**星][5d] [C++] [galoisinc/macaw](https://github.com/galoisinc/macaw) Open source binary analysis tools.
- [**85**星][3y] [exp-sky/hitcon-2016-windows-10-x64-edge-0day-and-exploit](https://github.com/exp-sky/hitcon-2016-windows-10-x64-edge-0day-and-exploit) HitCon 2016 Windows 10 x64 edge 0day and exploit
+- [**85**星][6m] [Go] [equim-chan/h2s](https://github.com/equim-chan/h2s)
- [**85**星][4y] [C] [electrojustin/triad-decompiler](https://github.com/electrojustin/triad-decompiler) TRiad Is A Decompiler. Triad is a tiny, free and open source, Capstone based x86 decompiler for ELF binaries.
- [**85**星][2y] [diablohorn/yara4pentesters](https://github.com/diablohorn/yara4pentesters) rules to identify files containing juicy information like usernames, passwords etc
+- [**85**星][4m] [C++] [designer1337/aristois-legit](https://github.com/designer1337/aristois-legit) Full project files for aristois, Counter-Strike: Global Offensive cheat.
- [**85**星][7m] [Py] [dcsync/pycobalt](https://github.com/dcsync/pycobalt) Cobalt Strike API, Python版本
- [**85**星][1y] [Java] [cunninglogic/dumlracer](https://github.com/cunninglogic/dumlracer) Root Exploit for DJI Drones and Controllers (up to and including v01.04.0200)
- [**85**星][2y] [C] [countercept/doublepulsar-usermode-injector](https://github.com/countercept/doublepulsar-usermode-injector) doublepulsar-usermode-injector:使用 DOUBLEPULSAR payload 用户模式的 Shellcode 向其他进程注入任意 DLL
-- [**85**星][7d] [Zeek] [bro/bro](https://github.com/bro/bro) Mirror of
+- [**85**星][1y] [cneill/appsec-resources](https://github.com/cneill/appsec-resources) Resources for developers and security engineers to learn the ropes of application security
+- [**85**星][2y] [Py] [cheeky4n6monkey/4n6-scripts](https://github.com/cheeky4n6monkey/4n6-scripts) Forensic Scripts
+- [**85**星][2d] [Zeek] [bro/bro](https://github.com/bro/bro) Mirror of
- [**85**星][4y] [Py] [blackye/bkscanner](https://github.com/blackye/bkscanner) BkScanner 分布式、插件化web漏洞扫描器
- [**85**星][7y] [C] [bagder/spindly](https://github.com/bagder/spindly) a portable C library for SPDY transport (DEAD project!)
-- [**85**星][3y] [Py] [azizaltuntas/network-analysis-tools](https://github.com/azizaltuntas/network-analysis-tools) Pcap (capture file) Analysis Toolkit(v.1)
+- [**85**星][12d] [C] [awakened1712/cve-2019-11932](https://github.com/awakened1712/cve-2019-11932) Simple POC for exploiting WhatsApp double-free bug in DDGifSlurp in decoding.c in libpl_droidsonroids_gif
+- [**85**星][6y] [C] [armenb/sharktools](https://github.com/armenb/sharktools) Tools for programmatic parsing of packet captures using Wireshark functionality
+- [**85**星][27d] [JS] [aqiongbei/buy_pig_plan](https://github.com/aqiongbei/buy_pig_plan) 电话攻击(电话轰炸、可代替短信轰炸)、留言攻击工具 | 随缘维护,佛系更新
+- [**85**星][2m] [Py] [angr/phuzzer](https://github.com/angr/phuzzer) The new phuzzing framework!
- [**85**星][2y] [Ruby] [anbai-inc/attackfilter](https://github.com/anbai-inc/attackfilter) Logstash 日志安全攻击分析插件
- [**85**星][7m] [Py] [aaronst/macholibre](https://github.com/aaronst/macholibre) Mach-O & Universal Binary Parser
- [**85**星][3y] [Py] [5up3rc/nagascan](https://github.com/5up3rc/nagascan) NagaScan is a distributed passive scanner for Web application.
-- [**84**星][10d] [Go] [inlets/inletsctl](https://github.com/inlets/inletsctl) Fast HTTP (L7) and TCP (L4) tunnels written in Go
+- [**84**星][1m] [ObjC] [gssdromen/v2rayc](https://github.com/gssdromen/v2rayc) a GUI for v2ray on Mac
- [**84**星][3y] [C#] [0xfireball/modphuserex](https://github.com/0xfireball/modphuserex) A .NET protector supporting .NET Core forked from the discontinued ConfuserEx
+- [**84**星][3d] [stonedreamforest/mirage](https://github.com/stonedreamforest/mirage) kernel-mode Anti-Anti-Debug plugin. based on intel vt-x && ept technology
- [**84**星][9m] [Py] [npist/v2rayms](https://github.com/npist/v2rayms) v2ray whmcs 多用户后端
-- [**84**星][3y] [C++] [outflanknl/netshhelperbeacon](https://github.com/outflanknl/NetshHelperBeacon) Example DLL to load from Windows NetShell
+- [**84**星][1y] [Py] [justsoos/ss-ssr-v2ray-gadget](https://github.com/justsoos/ss-ssr-v2ray-gadget) merge, deduplicate, backup, convert and online benchmark tools set for shadowsocks/shadowsocksR, v2ray. by python3
- [**84**星][7m] [Py] [aoncyberlabs/ssh-weak-dh](https://github.com/AonCyberLabs/SSH-Weak-DH)
-- [**84**星][1m] [Shell] [devploit/put2win](https://github.com/devploit/put2win) Script to automate PUT HTTP method exploitation to get shell
+- [**84**星][2m] [Shell] [devploit/put2win](https://github.com/devploit/put2win) Script to automate PUT HTTP method exploitation to get shell
- [**84**星][3y] [C++] [zcash-hackworks/pay-to-sudoku](https://github.com/zcash-hackworks/pay-to-sudoku) Pay for the solution to a sudoku puzzle with a zero-knowledge contingent payment
- [**84**星][1y] [security-cheatsheet/metasploit-cheat-sheet](https://github.com/security-cheatsheet/metasploit-cheat-sheet) Metasploit Cheat Sheet
- [**84**星][4y] [Ruby] [ztgrace/pwn_lab](https://github.com/ztgrace/pwn_lab) pwn_lab:创建安全训练环境的Vagrant 脚本和 boxes
-- [**84**星][4m] [C] [zouxianyu/kernelhiddenexecute](https://github.com/zouxianyu/kernelhiddenexecute) Execute kernel code with page separation
-- [**84**星][4y] [Py] [youmengxuefei/web_vul_scan](https://github.com/youmengxuefei/web_vul_scan) 基于爬虫的web漏洞扫描器
-- [**84**星][3m] [Py] [yeggor/uefi_retool](https://github.com/yeggor/uefi_retool) 在UEFI固件和UEFI模块分析中查找专有协议的工具
+- [**84**星][3d] [Py] [zricethezav/h1domains](https://github.com/zricethezav/h1domains) HackerOne "in scope" domains
+- [**84**星][21d] [Py] [ziconius/fudgec2](https://github.com/ziconius/fudgec2) FudgeC2 - a command and control framework designed for team collaboration and post-exploitation activities.
+- [**84**星][2y] [Java] [yandex/burp-molly-pack](https://github.com/yandex/burp-molly-pack) Security checks pack for Burp Suite
- [**84**星][4y] [JS] [xuanhuan/ss-panel](https://github.com/xuanhuan/ss-panel) !
-- [**84**星][29d] [C] [wonderkun/ctfenv](https://github.com/wonderkun/ctfenv) 为应对CTF比赛而搭建的各种环境
-- [**84**星][15d] [C] [unicornteam/hackcube-special](https://github.com/unicornteam/hackcube-special)
+- [**84**星][1m] [C] [wonderkun/ctfenv](https://github.com/wonderkun/ctfenv) 为应对CTF比赛而搭建的各种环境
- [**84**星][1y] [JS] [tingge/web-analytics](https://github.com/tingge/web-analytics) 监测分析、异常监测、广告验证、访客唯一标识
+- [**84**星][3m] [Py] [therook/nsshell](https://github.com/therook/nsshell) A DNS connectback shell executed by strings in payloads.txt
- [**84**星][3y] [C] [tedsluis/dump1090](https://github.com/tedsluis/dump1090) Dump1090 is a simple Mode S decoder for RTLSDR devices
- [**84**星][3y] [Py] [smxlabs/gibbersense](https://github.com/smxlabs/gibbersense) gibbersense:尝试理解乱七八糟的东西(从乱七八糟的东西里面提取出有意义的信息)
-- [**84**星][2y] [Objective-C] [siguza/phoenixnonce](https://github.com/siguza/phoenixnonce) 64-bit nonce setter for iOS 9.3.4-9.3.5
- [**84**星][5y] [shodan-labs/iotdb](https://github.com/shodan-labs/iotdb) Nmap scans of Internet of Things devices
- [**84**星][2y] [Py] [sensepost/birp](https://github.com/sensepost/birp) Big Iron Recon & Pwnage
-- [**84**星][4m] [Py] [samsung/cotopaxi](https://github.com/samsung/cotopaxi) Set of tools for security testing of Internet of Things devices using specific network IoT protocols
-- [**84**星][11m] [Batchfile] [sagishahar/lpeworkshop](https://github.com/sagishahar/lpeworkshop) Windows/Linux本地提权工作室
-- [**84**星][2m] [C++] [romainthomas/pyjadx](https://github.com/romainthomas/pyjadx) Jadx Python Binding
-- [**84**星][5y] [AGS Script] [rapid7/embedded-tools](https://github.com/rapid7/embedded-tools)
+- [**84**星][3y] [Shell] [scotthelme/lets-encrypt-smart-renew](https://github.com/scotthelme/lets-encrypt-smart-renew) Check the remaining validity period of a certificate before renewing.
+- [**84**星][4m] [Py] [safebreach-labs/bitsinject](https://github.com/safebreach-labs/bitsinject) A one-click tool to inject jobs into the BITS queue (Background Intelligent Transfer Service), allowing arbitrary program execution as the NT AUTHORITY/SYSTEM account
+- [**84**星][5y] [PHP] [rickgray/bypass-php-gd-process-to-rce](https://github.com/rickgray/bypass-php-gd-process-to-rce) Reference:
+- [**84**星][3m] [Py] [r00ts3c/ddos-rootsec](https://github.com/r00ts3c/ddos-rootsec) DDOS Archive by RootSec (Scanners, BotNets (Mirai and QBot Premium & Normal and more), Exploits, Methods, Sniffers)
- [**84**星][2y] [C] [pannzh/hidemyass](https://github.com/pannzh/hidemyass) A post-exploit tool that carefully clean *NIX access logs
-- [**84**星][9m] [C#] [padovah4ck/psbypassclm](https://github.com/padovah4ck/psbypassclm) Bypass for PowerShell Constrained Language Mode
-- [**84**星][4y] [C++] [ohjeongwook/flashhacker](https://github.com/ohjeongwook/flashhacker) Flash Instrumentation Tool
-- [**84**星][5y] [C] [nyx0/rovnix](https://github.com/nyx0/rovnix) Rovnix Bootkit
-- [**84**星][28d] [Py] [nullarray/archivist](https://github.com/nullarray/archivist) A ctypes powered python keylogger.
-- [**84**星][2m] [nightowl131/aapg](https://github.com/nightowl131/aapg) [A]ndroid [A]pplication [P]entest [G]uide
-- [**84**星][2m] [JS] [mlgualtieri/css-exfil-protection](https://github.com/mlgualtieri/css-exfil-protection) Official repository for the CSS Exfil Protection browser extensions.
-- [**84**星][7d] [Shell] [mitchellkrogza/phishing.database](https://github.com/mitchellkrogza/phishing.database) Phishing Domains, urls websites and threats database. We use the PyFunceble testing tool to validate the status of all known Phishing domains and provide stats to reveal how many unique domains used for Phishing are still active.
+- [**84**星][4y] [Py] [omererdem/honeything](https://github.com/omererdem/honeything) TR-069 Honeypot
+- [**84**星][30d] [Py] [nullarray/archivist](https://github.com/nullarray/archivist) A ctypes powered python keylogger.
- [**84**星][4y] [Py] [mgoffin/malwarecookbook](https://github.com/mgoffin/malwarecookbook) Malware Analyst's Cookbook stuffs
-- [**84**星][11m] [JS] [mandatoryprogrammer/tarnish](https://github.com/mandatoryprogrammer/tarnish) A Chrome extension static analysis tool to help aide in security reviews.
-- [**84**星][4y] [PHP] [klaubert/waf-fle](https://github.com/klaubert/waf-fle) WAF-FLE, ModSecurity Console
+- [**84**星][1y] [C] [marfjeh/coinhive-block](https://github.com/marfjeh/coinhive-block) To block the malware domains of coin-hive systemwide.
+- [**84**星][4m] [Py] [kapytein/jsonp](https://github.com/kapytein/jsonp) jsonp is a Burp Extension which attempts to reveal JSONP functionality behind JSON endpoints. This could help reveal cross-site script inclusion vulnerabilities or aid in bypassing content security policies.
- [**84**星][5m] [JS] [k4m4/dcipher](https://github.com/k4m4/dcipher) Decipher hashes using online rainbow & lookup table attack services.
- [**84**星][1y] [Py] [jiangsir404/s7scan](https://github.com/jiangsir404/s7scan) a pentest scanner / 一个漏洞综合利用工具轮子,大佬请忽略
-- [**84**星][6m] [Py] [initstring/evil-ssdp](https://github.com/initstring/evil-ssdp) Spoof SSDP replies and create fake UPnP devices to phish for credentials and NetNTLM challenge/response.
+- [**84**星][2y] [Py] [hi-wenr0/mlcheckwebshell](https://github.com/hi-wenr0/mlcheckwebshell)
- [**84**星][3y] [C++] [hasherezade/persistence_demos](https://github.com/hasherezade/persistence_demos) Demos of various (also non standard) persistence methods used by malware
-- [**84**星][9d] [Py] [haotianteng/chiron](https://github.com/haotianteng/chiron) A basecaller for Oxford Nanopore Technologies' sequencers
+- [**84**星][11d] [Py] [haotianteng/chiron](https://github.com/haotianteng/chiron) A basecaller for Oxford Nanopore Technologies' sequencers
- [**84**星][1y] [Dockerfile] [hackerhouse-opensource/cve-2018-10933](https://github.com/hackerhouse-opensource/cve-2018-10933) cve-2018-10933 libssh authentication bypass
- [**84**星][5m] [JS] [glamrock/cupcake](https://github.com/glamrock/cupcake) Create new pathways into Tor
+- [**84**星][2m] [Py] [fleetcaptain/turbolist3r](https://github.com/fleetcaptain/turbolist3r) Subdomain enumeration tool with analysis features for discovered domains
- [**84**星][JS] [feeicn/papers](https://github.com/feeicn/papers) 个人博客,在企业安全、软件研发和个人思考的一些文章
- [**84**星][4y] [Swift] [deniskr/keychainswiftapi](https://github.com/deniskr/keychainswiftapi) This Keychain Swift API library is a wrapper of iOS C Keychain Framework. It allows easily and securely storing sensitive data in secure keychain store.
- [**84**星][7y] [Py] [dc414/upnp-exploiter](https://github.com/dc414/upnp-exploiter) A Upnp exploitation tool.
-- [**84**星][4y] [Py] [danmcinerney/fast-recon](https://github.com/danmcinerney/fast-recon) Does some google dorks against a domain
+- [**84**星][2y] [Py] [coco413/discoversubdomain](https://github.com/coco413/discoversubdomain) 前渗透信息探测工具集-子域名
- [**84**星][4m] [C#] [cobbr/elite](https://github.com/cobbr/elite) Elite is the client-side component of the Covenant project. Covenant is a .NET command and control framework that aims to highlight the attack surface of .NET, make the use of offensive .NET tradecraft easier, and serve as a collaborative command and control platform for red teamers.
- [**84**星][4y] [Go] [cloudflare/jgc-talks](https://github.com/cloudflare/jgc-talks) Code samples and data used in talk preparation by John Graham-Cumming
- [**84**星][2y] [CSS] [cleverbao/webrange](https://github.com/cleverbao/webrange) 一个Web版的docker管理程序,可以用来运行各种docker漏洞环境和CTF环境。
-- [**84**星][10d] [C] [awakened1712/cve-2019-11932](https://github.com/awakened1712/cve-2019-11932) Simple POC for exploiting WhatsApp double-free bug in DDGifSlurp in decoding.c in libpl_droidsonroids_gif
+- [**84**星][3d] [claucece/useful-crypto-resources](https://github.com/claucece/useful-crypto-resources) A place for useful crypto-related resources plus some of my fav stuff
+- [**84**星][2y] [PHP] [bug7sec/ransomware](https://github.com/bug7sec/ransomware) Bug7sec Team - ransomware open source (web)
+- [**84**星][11m] [C++] [basketwill/sysmon_reverse](https://github.com/basketwill/sysmon_reverse)
+- [**84**星][12m] [C++] [arashpartow/proxy](https://github.com/arashpartow/proxy) C++ TCP Proxy Server
+- [**84**星][2y] [Py] [anonion0/nsec3map](https://github.com/anonion0/nsec3map) a tool to enumerate the resource records of a DNS zone using its DNSSEC NSEC or NSEC3 chain
- [**84**星][5y] [Shell] [anexia-it/winshock-test](https://github.com/anexia-it/winshock-test) Bash script that tests if a system is Winshock (MS14-066) vulnerable
+- [**84**星][10m] [C] [aasthayadav/compsecattacklabs](https://github.com/aasthayadav/compsecattacklabs) Contains Attack labs
- [**84**星][11m] [Py] [422926799/python](https://github.com/422926799/python) python黑客与一些脚本
- [**84**星][3y] [Py] [3xp10it/mytoolkit](https://github.com/3xp10it/mytoolkit) 【Not maintained】sqlmap对所有目标及其所有旁站批量自动化sqli
- [**84**星][2y] [Go] [0x09al/browser-c2](https://github.com/0x09al/browser-c2) Post Exploitation agent which uses a browser to do C2 operations.
+- [**83**星][3y] [Jupyter Notebook] [supercowpowers/workbench](https://github.com/supercowpowers/workbench) Workbench: A scalable python framework for security research and development teams.
- [**83**星][3m] [C++] [lifting-bits/microx](https://github.com/lifting-bits/microx) Safely execute an arbitrary x86 instruction
- [**83**星][1y] [JS] [seclab-ucr/tcp_exploit](https://github.com/seclab-ucr/tcp_exploit) Off-Path TCP Exploit: How Wireless Routers Can Jeopardize Your Secret
-- [**83**星][26d] [PowerShell] [adamdriscoll/snek](https://github.com/adamdriscoll/snek) PowerShell wrapper around Python for .NET to invoke Python from PowerShell
-- [**83**星][29d] [Go] [ne1llee/v2ray2clash](https://github.com/ne1llee/v2ray2clash) V2ray、SSR subscribe convert to Clash、QuantumultX
-- [**83**星][1y] [Py] [justsoos/ss-ssr-v2ray-gadget](https://github.com/justsoos/ss-ssr-v2ray-gadget) merge, deduplicate, backup, convert and online benchmark tools set for shadowsocks/shadowsocksR, v2ray. by python3
-- [**83**星][29d] [C++] [tihmstar/ra1nsn0w](https://github.com/tihmstar/ra1nsn0w) A tethered booter for 64bit iOS devices vulnerable to checkm8
+- [**83**星][1y] [Py] [danmcinerney/search-google](https://github.com/danmcinerney/search-google) Scrape google search results
+- [**83**星][24d] [PS] [kmkz/powershell](https://github.com/kmkz/powershell) Some .ps1 scripts for pentesting
+- [**83**星][19d] [payloadbox/sql-injection-payload-list](https://github.com/payloadbox/sql-injection-payload-list)
+- [**83**星][22d] [six2dez/oscp-human-guide](https://github.com/six2dez/oscp-human-guide) My own OSCP guide
- [**83**星][6m] [Shell] [zerobyte-id-bak/bashter](https://github.com/zerobyte-id-bak/Bashter) Web Crawler, Scanner, and Analyzer Framework (Shell-Script based)
-- [**83**星][3y] [C#] [saneki-discontinued/flatui](https://github.com/saneki-discontinued/FlatUI) Flat UI theme for .NET applications
+- [**83**星][1y] [Shell] [cyb0r9/androspy](https://github.com/Cyb0r9/Androspy) Androspy framework is a Backdoor Crypter & Creator with Automatic IP Poisener
- [**83**星][4y] [Py] [n0tr00t/wvs_patcher](https://github.com/n0tr00t/WVS_Patcher) Script to run wvs in queue, and send mails to you on ending.
-- [**83**星][17d] [Py] [openpreserve/fido](https://github.com/openpreserve/fido) Format Identification for Digital Objects (FIDO) is a Python command-line tool to identify the file formats of digital objects. It is designed for simple integration into automated work-flows.
+- [**83**星][19d] [Py] [openpreserve/fido](https://github.com/openpreserve/fido) Format Identification for Digital Objects (FIDO) is a Python command-line tool to identify the file formats of digital objects. It is designed for simple integration into automated work-flows.
- [**83**星][2y] [Py] [am0nsec/exploit](https://github.com/am0nsec/exploit) Collection of different exploits
-- [**83**星][2m] [Py] [zricethezav/h1domains](https://github.com/zricethezav/h1domains) HackerOne "in scope" domains
-- [**83**星][19d] [Py] [ziconius/fudgec2](https://github.com/ziconius/fudgec2) FudgeC2 - a command and control framework designed for team collaboration and post-exploitation activities.
-- [**83**星][2y] [Java] [yandex/burp-molly-pack](https://github.com/yandex/burp-molly-pack) Security checks pack for Burp Suite
-- [**83**星][5y] [Py] [xypiie/webshell](https://github.com/xypiie/webshell) WebShell is a web-based ssh shell.
- [**83**星][2y] [C] [xobs/novena-linux](https://github.com/xobs/novena-linux) Linux kernel with Novena patches -- expect frequent rebases!
-- [**83**星][1m] [C++] [vusec/vuzzer64](https://github.com/vusec/vuzzer64) This implements a 64-bit version of vusec/vuzzer fuzzing tool.
+- [**83**星][9m] [Py] [xajkep/wordlists](https://github.com/xajkep/wordlists) Infosec Wordlists
+- [**83**星][2m] [C++] [vusec/vuzzer64](https://github.com/vusec/vuzzer64) This implements a 64-bit version of vusec/vuzzer fuzzing tool.
- [**83**星][1y] [JS] [vspandan/ifuzzer](https://github.com/vspandan/ifuzzer)
- [**83**星][8m] [Py] [viralmaniar/peekaboo](https://github.com/viralmaniar/peekaboo) PeekABoo tool can be used during internal penetration testing when a user needs to enable Remote Desktop on the targeted machine. It uses PowerShell remoting to perform this task. Note: Remote desktop is disabled by default on all Windows operating systems.
+- [**83**星][3y] [JS] [unrealakama/nightshade](https://github.com/unrealakama/nightshade) A simple capture the flag framework.
+- [**83**星][11m] [Py] [tlkh/prowler](https://github.com/tlkh/prowler) Distributed Network Vulnerability Scanner
- [**83**星][2y] [Py] [sogeti-esec-lab/rpcforge](https://github.com/sogeti-esec-lab/rpcforge) Windows RPC Python fuzzer
-- [**83**星][2y] [Go] [snail007/autostart](https://github.com/snail007/autostart) autostart tools to set your application auto startup after desktop login,only for desktop version of linux , windows , mac.
-- [**83**星][8m] [JS] [scravy/node-macaddress](https://github.com/scravy/node-macaddress) Get the MAC addresses (hardware addresses) of the hosts network interfaces.
-- [**83**星][3y] [Shell] [scotthelme/lets-encrypt-smart-renew](https://github.com/scotthelme/lets-encrypt-smart-renew) Check the remaining validity period of a certificate before renewing.
-- [**83**星][4m] [Py] [safebreach-labs/bitsinject](https://github.com/safebreach-labs/bitsinject) A one-click tool to inject jobs into the BITS queue (Background Intelligent Transfer Service), allowing arbitrary program execution as the NT AUTHORITY/SYSTEM account
+- [**83**星][1m] [PHP] [slims/slims8_akasia](https://github.com/slims/slims8_akasia) SLiMS 8 Akasia official source code repository
+- [**83**星][16d] [Py] [sjord/jwtcrack](https://github.com/sjord/jwtcrack) Crack the shared secret of a HS256-signed JWT
+- [**83**星][3y] [C++] [scanlime/facewhisperer](https://github.com/scanlime/facewhisperer) USB host add-on for the ChipWhisperer side-channel analysis tool
+- [**83**星][1y] [Py] [s3rvac/retdec-python](https://github.com/s3rvac/retdec-python) A Python library and tools providing easy access to the retdec.com decompilation service through their REST API.
- [**83**星][7y] [C] [realtalk/cve-2013-2094](https://github.com/realtalk/cve-2013-2094) original cve-2013-2094 exploit and a rewritten version for educational purposes
+- [**83**星][5m] [Py] [quantika14/guasap-whatsapp-foresincs-tool](https://github.com/quantika14/guasap-whatsapp-foresincs-tool) WhatsApp Forensic Tool
+- [**83**星][7d] [Java] [pwntester/dupekeyinjector](https://github.com/pwntester/dupekeyinjector) DupeKeyInjector
+- [**83**星][1y] [Jupyter Notebook] [poteman/alibaba-3rd-security-algorithm-challenge](https://github.com/poteman/alibaba-3rd-security-algorithm-challenge) 第三届阿里云安全算法挑战赛冠军代码
- [**83**星][10m] [Py] [piranhalysis/pirogue](https://github.com/piranhalysis/pirogue) PiRogue is a small device meant to ease network interception and analysis.
- [**83**星][11m] [Py] [phantom0301/vulcloud](https://github.com/phantom0301/vulcloud) A Simple Web-UI for Vulhub (Docker) / 便捷的漏洞镜像管理部署Web应用
- [**83**星][3m] [Ruby] [pedrib/poc](https://github.com/pedrib/poc)
+- [**83**星][4y] [owasp/owasp-testing-guide](https://github.com/owasp/owasp-testing-guide) OWASP Testing Guide
- [**83**星][8m] [offensive-security/kali-cloud-build](https://github.com/offensive-security/kali-cloud-build) Script to create Kali Linux Amazon Machine Images (AMIs)
- [**83**星][3y] [JS] [oalabs/frida-extract](https://github.com/oalabs/frida-extract) Frida.re based RunPE (and MapViewOfSection) extraction tool
+- [**83**星][1y] [Py] [oalabs/findyara](https://github.com/oalabs/findyara) 使用Yara规则扫描二进制文件
+- [**83**星][1y] [Py] [nccgroup/blackboxprotobuf](https://github.com/nccgroup/blackboxprotobuf) Blackbox protobuf is a Burp Suite extension for decoding and modifying arbitrary protobuf messages without the protobuf type definition.
+- [**83**星][7m] [mr-xn/hackbar2.1.3](https://github.com/mr-xn/hackbar2.1.3) the free firefox extions of hackbar v2.1.3 ,hackbar 插件未收费的免费版本
- [**83**星][4y] [C#] [monoxgas/trebuchet](https://github.com/monoxgas/trebuchet) MS15-076 Privilege Escalation
-- [**83**星][6y] [PowerShell] [mmessano/powershell](https://github.com/mmessano/powershell)
+- [**83**星][6y] [PS] [mmessano/powershell](https://github.com/mmessano/powershell)
- [**83**星][1y] [C] [marcusbotacin/branchmonitoringproject](https://github.com/marcusbotacin/branchmonitoringproject) A branch-monitor-based solution for process monitoring.
+- [**83**星][6m] [Py] [localh0t/m4ngl3m3](https://github.com/localh0t/m4ngl3m3) 使用字符串列表的通用密码模式生成器
- [**83**星][5y] [JS] [kmowery/canvas-fingerprinting](https://github.com/kmowery/canvas-fingerprinting) A framework for collecting and viewing graphical browser fingerprints.
- [**83**星][2y] [Makefile] [kingsquare/docker-tunnel](https://github.com/kingsquare/docker-tunnel) a (simple) dockerized ssh tunnel
- [**83**星][3m] [Py] [kcarretto/arsenal](https://github.com/kcarretto/arsenal) Extensible Red Team Framework
- [**83**星][8m] [kai5263499/awesome-container-security](https://github.com/kai5263499/awesome-container-security) Awesome list of resources related to container security
-- [**83**星][2y] [PowerShell] [kacperszurek/gpg_reaper](https://github.com/kacperszurek/gpg_reaper) 从gpg-agent缓存/内存中获取/窃取/恢复GPG私钥
-- [**83**星][6y] [k33nteam/ie9-ie11-vulnerability-advanced-exploitation](https://github.com/k33nteam/ie9-ie11-vulnerability-advanced-exploitation) Public slides and demo code of bypassing security protection in the latest Windows Internet Explorer.
+- [**83**星][2y] [PS] [kacperszurek/gpg_reaper](https://github.com/kacperszurek/gpg_reaper) 从gpg-agent缓存/内存中获取/窃取/恢复GPG私钥
- [**83**星][9m] [justinsteven/advisories](https://github.com/justinsteven/advisories)
-- [**83**星][3y] [Objective-C] [jonwil/unlinker](https://github.com/jonwil/unlinker) Unlinker is a tool that can rip functions out of Visual C++ compiled binaries and produce Visual C++ COFF object files
-- [**83**星][11d] [Java] [jgillam/burp-paramalyzer](https://github.com/jgillam/burp-paramalyzer) Paramalyzer - Burp extension for parameter analysis of large-scale web application penetration tests.
+- [**83**星][3y] [ObjC] [jonwil/unlinker](https://github.com/jonwil/unlinker) Unlinker is a tool that can rip functions out of Visual C++ compiled binaries and produce Visual C++ COFF object files
+- [**83**星][13d] [Java] [jgillam/burp-paramalyzer](https://github.com/jgillam/burp-paramalyzer) Paramalyzer - Burp extension for parameter analysis of large-scale web application penetration tests.
- [**83**星][1y] [github-classroom-cybros/ethical-hacking](https://github.com/github-classroom-cybros/ethical-hacking) This repository contains reference material & links for people willing to learn Ethical Hacking
- [**83**星][2y] [R] [fujitsulaboratories/comevizz](https://github.com/fujitsulaboratories/comevizz) COMEVIZZ is COde MEtrics VIsualiZation with Z-Score.
- [**83**星][12m] [C] [friendlyarm/h3_lichee](https://github.com/friendlyarm/h3_lichee) BSP for FriendlyARM NanoPi H3
- [**83**星][1y] [Ruby] [enjoiz/bsqlinjector](https://github.com/enjoiz/bsqlinjector) Blind SQL injection exploitation tool written in ruby.
- [**83**星][6y] [Py] [einstein-/hexrays-python](https://github.com/einstein-/hexrays-python) Python bindings for the Hexrays Decompiler
-- [**83**星][4m] [C++] [designer1337/aristois-legit](https://github.com/designer1337/aristois-legit) Full project files for aristois, Counter-Strike: Global Offensive cheat.
+- [**83**星][2y] [C] [dword1511/onewire-over-uart](https://github.com/dword1511/onewire-over-uart) Access Dallas 1-Wire bus on your PC via low-cost USB to UART bridge.
+- [**83**星][6m] [C++] [djhohnstein/processreimaging](https://github.com/djhohnstein/processreimaging) Process reimaging proof of concept code
- [**83**星][2y] [C++] [decoder-it/lonelypotato](https://github.com/decoder-it/lonelypotato) Modified version of RottenPotatoNG C++
- [**83**星][8m] [C++] [deadash/pbb_crack](https://github.com/deadash/pbb_crack) PBB视频解密
-- [**83**星][2m] [PowerShell] [cyberark/skyark](https://github.com/cyberark/skyark) SkyArk helps to discover, assess and secure the most privileged entities in Azure and AWS
-- [**83**星][2y] [Py] [coco413/discoversubdomain](https://github.com/coco413/discoversubdomain) 前渗透信息探测工具集-子域名
-- [**83**星][1y] [cneill/appsec-resources](https://github.com/cneill/appsec-resources) Resources for developers and security engineers to learn the ropes of application security
+- [**83**星][4m] [Py] [danielplohmann/smda](https://github.com/danielplohmann/smda) SMDA is a minimalist recursive disassembler library that is optimized for accurate Control Flow Graph (CFG) recovery from memory dumps.
+- [**83**星][2m] [PS] [cyberark/skyark](https://github.com/cyberark/skyark) SkyArk helps to discover, assess and secure the most privileged entities in Azure and AWS
- [**83**星][3y] [Py] [claudioviviani/wordbrutepress](https://github.com/claudioviviani/wordbrutepress) Wordpress Brute Force Multithreading with standard and xml-rpc login
+- [**83**星][3d] [caledoniaproject/awesome-opensource-security](https://github.com/caledoniaproject/awesome-opensource-security) A list of interesting stuffs that I have no time to test/review
- [**83**星][5y] [Py] [bwall/ircsnapshot](https://github.com/bwall/ircsnapshot) Tool to gather information from IRC servers
- [**83**星][4m] [C] [brainsmoke/ptrace-burrito](https://github.com/brainsmoke/ptrace-burrito) a friendly wrapper around ptrace
+- [**83**星][3y] [bones-codes/bombs](https://github.com/bones-codes/bombs) A few files for decompression bomb testing –––
- [**83**星][3y] [C] [bluekezhou/binarywaf](https://github.com/bluekezhou/binarywaf) CTF线下赛流量记录工具
-- [**83**星][10m] [C++] [basketwill/sysmon_reverse](https://github.com/basketwill/sysmon_reverse)
+- [**83**星][2y] [C++] [benjaminsoelberg/reflectivepeloader](https://github.com/benjaminsoelberg/reflectivepeloader) Reflective PE loader for DLL injection
- [**83**星][7m] [Go] [assafmo/xioc](https://github.com/assafmo/xioc) Extract indicators of compromise from text, including "escaped" ones.
-- [**83**星][2y] [Py] [anonion0/nsec3map](https://github.com/anonion0/nsec3map) a tool to enumerate the resource records of a DNS zone using its DNSSEC NSEC or NSEC3 chain
- [**83**星][1y] [HTML] [amolnaik4/bodhi](https://github.com/amolnaik4/bodhi) Bodhi - Client-side Vulnerability Playground
- [**83**星][2y] [Py] [401trg/detections](https://github.com/401trg/detections) This repository contains all public indicators identified by 401trg during the course of our investigations. It also includes relevant yara rules and ids signatures to detect these indicators.
- [**83**星][2y] [Py] [1n3/httpoxyscan](https://github.com/1n3/httpoxyscan) HTTPoxy Exploit Scanner by 1N3 @CrowdShield
- [**83**星][11m] [java] [JesusFreke/smali](https://bitbucket.org/jesusfreke/smali)
+- [**82**星][1y] [Dockerfile] [codesuki/ecs-nginx-proxy](https://github.com/codesuki/ecs-nginx-proxy) Reverse proxy for AWS ECS. Lets you address your docker containers by sub domain.
+- [**82**星][3d] [Py] [m4ll0k/burpsuite-secret_finder](https://github.com/m4ll0k/burpsuite-secret_finder) Burp Suite extension to discover apikeys/tokens from HTTP response.
- [**82**星][2m] [C] [taviso/cefdebug](https://github.com/taviso/cefdebug) Minimal code to connect to a CEF debugger.
+- [**82**星][2m] [uknowsec/loginlog_windows](https://github.com/uknowsec/loginlog_windows) 读取登录过本机的登录失败或登录成功的所有计算机信息,在内网渗透中快速定位运维管理人员。
- [**82**星][5y] [Ruby] [intrigueio/tapir](https://github.com/intrigueio/tapir) An easy-to-use and extensible framework for OSINT - REPLACED BY INTRIGUE-CORE
-- [**82**星][1y] [Py] [danmcinerney/search-google](https://github.com/danmcinerney/search-google) Scrape google search results
-- [**82**星][22d] [PowerShell] [kmkz/powershell](https://github.com/kmkz/powershell) Some .ps1 scripts for pentesting
-- [**82**星][1m] [Objective-C] [gssdromen/v2rayc](https://github.com/gssdromen/v2rayc) a GUI for v2ray on Mac
+- [**82**星][20d] [Py] [imtiazkarimik23/atfuzzer](https://github.com/imtiazkarimik23/atfuzzer) "Opening Pandora's Box through ATFuzzer: Dynamic Analysis of AT Interface for Android Smartphones" ACSAC 2019
- [**82**星][11m] [JS] [zswang/jfogs](https://github.com/zswang/jfogs) JavaScript Obfuscator
-- [**82**星][1y] [Shell] [cyb0r9/androspy](https://github.com/Cyb0r9/Androspy) Androspy framework is a Backdoor Crypter & Creator with Automatic IP Poisener
+- [**82**星][3y] [C#] [saneki-discontinued/flatui](https://github.com/saneki-discontinued/FlatUI) Flat UI theme for .NET applications
- [**82**星][2y] [C#] [zacbrown/powerkrabsetw](https://github.com/zacbrown/powerkrabsetw) PowerKrabsEtw is a PowerShell interface for doing real-time ETW tracing.
- [**82**星][3y] [Py] [yehia-mamdouh/xssya-v-2.0](https://github.com/yehia-mamdouh/xssya-v-2.0)
+- [**82**星][5y] [Py] [xypiie/webshell](https://github.com/xypiie/webshell) WebShell is a web-based ssh shell.
- [**82**星][4y] [C++] [wjp/idados](https://github.com/wjp/idados) DOSBox调试器插件
+- [**82**星][3y] [Go] [whyrusleeping/zmsg](https://github.com/whyrusleeping/zmsg) A small program for sending messages via zcash encrypted memo fields
+- [**82**星][3y] [Py] [wangyihang/ccupp](https://github.com/wangyihang/ccupp) 基于社会工程学的弱口令密码字典生成工具
- [**82**星][2y] [Kotlin] [viktordegtyarev/callreclib](https://github.com/viktordegtyarev/callreclib) Call Recorder fix for Android 7 and Android 6
-- [**82**星][3y] [JS] [unrealakama/nightshade](https://github.com/unrealakama/nightshade) A simple capture the flag framework.
-- [**82**星][11m] [Py] [tlkh/prowler](https://github.com/tlkh/prowler) Distributed Network Vulnerability Scanner
+- [**82**星][10m] [Shell] [trailofbits/ios-integrity-validator](https://github.com/trailofbits/ios-integrity-validator) Integrity validator for iOS devices
- [**82**星][5y] [Py] [techbliss/frida_for_ida_pro](https://github.com/techbliss/frida_for_ida_pro) 在IDA中使用Frida, 主要用于追踪函数
- [**82**星][2m] [Py] [takuzoo3868/penta](https://github.com/takuzoo3868/penta) Open source all-in-one CLI tool to automate pentesting.
-- [**82**星][1m] [PHP] [slims/slims8_akasia](https://github.com/slims/slims8_akasia) SLiMS 8 Akasia official source code repository
-- [**82**星][14d] [Py] [sjord/jwtcrack](https://github.com/sjord/jwtcrack) Crack the shared secret of a HS256-signed JWT
+- [**82**星][2y] [Go] [snail007/autostart](https://github.com/snail007/autostart) autostart tools to set your application auto startup after desktop login,only for desktop version of linux , windows , mac.
- [**82**星][1y] [Py] [silascutler/lnkparse](https://github.com/silascutler/lnkparse) Windows Shortcut file (LNK) parser
- [**82**星][7y] [shjalayeri/sysret](https://github.com/shjalayeri/sysret) Windows Kernel Intel x64 SYSRET Vulnerability Exploit
- [**82**星][6y] [Java] [schierlm/javapayload](https://github.com/schierlm/javapayload) JavaPayload is a collection of pure Java payloads to be used for post-exploitation from pure Java exploits or from common misconfigurations (like not password protected Tomcat manager or debugger port).
-- [**82**星][1y] [Py] [s3rvac/retdec-python](https://github.com/s3rvac/retdec-python) A Python library and tools providing easy access to the retdec.com decompilation service through their REST API.
- [**82**星][1y] [C] [rlarabee/exploits](https://github.com/rlarabee/exploits)
- [**82**星][3y] [Vim script] [rjohnsondev/vim-compiler-go](https://github.com/rjohnsondev/vim-compiler-go) Vim compiler plugin for Go (golang)
-- [**82**星][3y] [Py] [ratty3697/hackspy-trojan-exploit](https://github.com/ratty3697/hackspy-trojan-exploit) This tool creates almost undetectabe trojan virus to exploit windows machine.
+- [**82**星][7m] [C] [ret2p4nda/kernel-pwn](https://github.com/ret2p4nda/kernel-pwn)
+- [**82**星][4m] [Py] [ray-cp/pwn_debug](https://github.com/ray-cp/pwn_debug) Aim to help building exploitation of CTFs pwn game quickly
- [**82**星][2y] [Go] [random-robbie/aws-scanner](https://github.com/random-robbie/aws-scanner) Scans a list of websites for Cloudfront or S3 Buckets
-- [**82**星][5m] [Py] [quantika14/guasap-whatsapp-foresincs-tool](https://github.com/quantika14/guasap-whatsapp-foresincs-tool) WhatsApp Forensic Tool
+- [**82**星][1y] [Kotlin] [pvasa/easycrypt](https://github.com/pvasa/easycrypt) Android cryptography library with SecureRandom patches.
+- [**82**星][10m] [Py] [plizonczyk/noiseprotocol](https://github.com/plizonczyk/noiseprotocol) Noise Protocol Framework - Python 3 implementation
- [**82**星][4y] [Py] [pinperepette/geotweet_gui](https://github.com/pinperepette/geotweet_gui) Social engineering tool for human hacking
- [**82**星][10m] [C++] [pelock/pelock-software-protection-and-licensing-sdk](https://github.com/pelock/pelock-software-protection-and-licensing-sdk) Software copy protection against cracking & reverse engineering with anti-cracking & anti-debugging techniques. Software license key system with time trial options.
- [**82**星][2y] [C++] [paulsapps/msgi](https://github.com/paulsapps/msgi) Metal Gear Solid Integral PC reversing, efforts moved to
-- [**82**星][17d] [Ruby] [openzipkin/zipkin-ruby](https://github.com/openzipkin/zipkin-ruby) zipkin-tracer ruby gem
-- [**82**星][4y] [Py] [omererdem/honeything](https://github.com/omererdem/honeything) TR-069 Honeypot
-- [**82**星][1y] [Py] [oalabs/findyara](https://github.com/oalabs/findyara) 使用Yara规则扫描二进制文件
+- [**82**星][19d] [Ruby] [openzipkin/zipkin-ruby](https://github.com/openzipkin/zipkin-ruby) zipkin-tracer ruby gem
+- [**82**星][4d] [C] [nukem9/swissarmyknife](https://github.com/nukem9/swissarmyknife) x64dbg utility for linker map files, diff files, PEiD/IDA signatures, and code signature generation
- [**82**星][2y] [C++] [nemerle/dcc](https://github.com/nemerle/dcc) This is a heavily updated version of the old DOS executable decompiler DCC
- [**82**星][6y] [Py] [mwielgoszewski/burp-protobuf-decoder](https://github.com/mwielgoszewski/burp-protobuf-decoder) A simple Google Protobuf Decoder for Burp
-- [**82**星][3m] [Go] [mame82/unifyingvulnsdisclosurerepo](https://github.com/mame82/unifyingvulnsdisclosurerepo) Formerly private repository for discussion, knowledge- and code-sharing around new Unifying vulns, as announced on Twitter
- [**82**星][5y] [Py] [maldroid/maldrolyzer](https://github.com/maldroid/maldrolyzer) Simple framework to extract "actionable" data from Android malware (C&Cs, phone numbers etc.)
- [**82**星][2y] [Shell] [m4sc3r4n0/astroid](https://github.com/m4sc3r4n0/astroid) ASTROID v 1.2 bypass most A.V softwares
- [**82**星][1y] [Py] [m4ll0k/wpsploit](https://github.com/m4ll0k/wpsploit) Wordpress主题/插件代码扫描
- [**82**星][2y] [Py] [lz1y/cve-2017-8759](https://github.com/lz1y/cve-2017-8759) CVE-2017-8759
-- [**82**星][6m] [Py] [localh0t/m4ngl3m3](https://github.com/localh0t/m4ngl3m3) 使用字符串列表的通用密码模式生成器
- [**82**星][3y] [Py] [llsourcell/antivirus_demo](https://github.com/llsourcell/antivirus_demo) Antivirus Demo for Fresh Machine Learning #7
- [**82**星][2y] [Py] [lcatro/browser_vuln_check](https://github.com/lcatro/browser_vuln_check) 利用已知的浏览器漏洞PoC 来快速检测Webview 和浏览器环境是否存在安全漏洞,只需要访问run.html 即可获取所有扫描结果,适用场景包含:APP 发布之前的内部安全测试,第三方Webview 漏洞检测等
-- [**82**星][18d] [Objective-C] [lacertosusrepo/open-source-tweaks](https://github.com/lacertosusrepo/open-source-tweaks) Tweaks I've left open, maybe someone can learn from/correct them. Either on my repo or Packix.
- [**82**星][5y] [Py] [krmaxwell/tinfoleak](https://github.com/krmaxwell/tinfoleak) Get detailed information about a Twitter user activity
+- [**82**星][6y] [k33nteam/ie9-ie11-vulnerability-advanced-exploitation](https://github.com/k33nteam/ie9-ie11-vulnerability-advanced-exploitation) Public slides and demo code of bypassing security protection in the latest Windows Internet Explorer.
+- [**82**星][1y] [Py] [juniorn1003/faitagram](https://github.com/juniorn1003/faitagram) Welp, This failed. Go find another one.
+- [**82**星][4y] [Py] [jinhang/12306_captcha](https://github.com/jinhang/12306_captcha) CNN对12306、sina、baidu的验证码破解。
+- [**82**星][4m] [jeanlouisferey/aws-securitygroup-grapher](https://github.com/jeanlouisferey/aws-securitygroup-grapher) This ansible role gets information from an AWS VPC and generate a graphical representation of security groups
- [**82**星][4m] [Py] [indicodatasolutions/enso](https://github.com/indicodatasolutions/enso) Enso: An Open Source Library for Benchmarking Embeddings + Transfer Learning Methods
- [**82**星][2y] [Py] [idanr1986/cuckoodroid-2.0](https://github.com/idanr1986/cuckoodroid-2.0) 自动化Android 恶意软件分析
-- [**82**星][2y] [Py] [hi-wenr0/mlcheckwebshell](https://github.com/hi-wenr0/mlcheckwebshell)
+- [**82**星][5y] [C++] [hackedteam/scout-win](https://github.com/hackedteam/scout-win) Scout backdoor for Windows
- [**82**星][3m] [Java] [graxcode/cafebabe](https://github.com/graxcode/cafebabe) Easy-to-use java bytecode editor - successor of JByteMod!
+- [**82**星][18d] [Go] [grantseltzer/karn](https://github.com/grantseltzer/karn) Simplifying Seccomp enforcement in containerized or non-containerized apps
+- [**82**星][1y] [C] [gossithedog/zeroday](https://github.com/gossithedog/zeroday)
- [**82**星][1y] [HTML] [google/rekall-profiles](https://github.com/google/rekall-profiles) Public Profile Repository for Rekall Memory Forensic.
- [**82**星][9m] [Go] [glen-mac/gogetbucket](https://github.com/glen-mac/gogetbucket) A penetration testing tool to enumerate and analyse Amazon S3 Buckets owned by a domain.
+- [**82**星][30d] [Shell] [firecracker-microvm/firecracker-demo](https://github.com/firecracker-microvm/firecracker-demo) A demo running 4000 Firecracker microVMs.
- [**82**星][2y] [exp-sky/asiasecwest-2018-chakra-vulnerability-and-exploit-bypass-all-system-mitigation](https://github.com/exp-sky/asiasecwest-2018-chakra-vulnerability-and-exploit-bypass-all-system-mitigation) Chakra vulnerability and exploit bypass all system mitigation
- [**82**星][12m] [Py] [erforschr/bruteforce-http-auth](https://github.com/erforschr/bruteforce-http-auth) Bruteforce HTTP Authentication
+- [**82**星][4y] [elephantos/elephant](https://github.com/elephantos/elephant) 操作系统真象还原
- [**82**星][4y] [C] [eklitzke/ptrace-call-userspace](https://github.com/eklitzke/ptrace-call-userspace) Example of how to use the ptrace(2) system call to call a userspace method.
- [**82**星][11m] [Py] [ecx86/tcpbin](https://github.com/ecx86/tcpbin) Very crude and poorly written HTTP(s) and SMTP bin
-- [**82**星][2y] [C] [dword1511/onewire-over-uart](https://github.com/dword1511/onewire-over-uart) Access Dallas 1-Wire bus on your PC via low-cost USB to UART bridge.
-- [**82**星][11m] [Py] [duanhongyi/gmssl](https://github.com/duanhongyi/gmssl) a python crypto for sm2/sm3/sm4
+- [**82**星][7y] [Ruby] [dirtyfilthy/metassh](https://github.com/dirtyfilthy/metassh) ssh session type for metasploit
- [**82**星][2y] [Py] [crackmes/crackmes](https://github.com/crackmes/crackmes) Open and censorship resistant crackmes repository
-- [**82**星][7d] [Go] [colettecontreras/v2ray-ssrpanel-plugin](https://github.com/colettecontreras/v2ray-ssrpanel-plugin) A buildin V2ray plugin for SSRPanel to sync users from database to v2ray, to log traffics/system info
+- [**82**星][6d] [Java] [col-e/jremapper](https://github.com/col-e/jremapper) Remapping tool for compiled java programs.
+- [**82**星][1y] [ckjbug/kali-linux-learning](https://github.com/ckjbug/kali-linux-learning)
- [**82**星][8m] [Py] [ciscodevnet/virlutils](https://github.com/ciscodevnet/virlutils)
- [**82**星][6y] [Py] [chrisjohnriley/random_code](https://github.com/chrisjohnriley/random_code) Random Code, POC Scripts and other things (Your Mileage May Vary)
-- [**82**星][9d] [caledoniaproject/awesome-opensource-security](https://github.com/caledoniaproject/awesome-opensource-security) A list of interesting stuffs that I have no time to test/review
+- [**82**星][5y] [C] [chokepoint/crypthook](https://github.com/chokepoint/crypthook) TCP/UDP symmetric encryption tunnel wrapper
- [**82**星][2y] [Java] [calaylin/bda](https://github.com/calaylin/bda) Programmer De-anonymization from Binary Executables
-- [**82**星][2y] [PHP] [bug7sec/ransomware](https://github.com/bug7sec/ransomware) Bug7sec Team - ransomware open source (web)
- [**82**星][6m] [Py] [brutemap-dev/brutemap](https://github.com/brutemap-dev/brutemap) Let's find someone's account
-- [**82**星][3y] [bones-codes/bombs](https://github.com/bones-codes/bombs) A few files for decompression bomb testing –––
-- [**82**星][2y] [C++] [benjaminsoelberg/reflectivepeloader](https://github.com/benjaminsoelberg/reflectivepeloader) Reflective PE loader for DLL injection
- [**82**星][3y] [C#] [basic4/widucky](https://github.com/basic4/widucky) WiFi Enabled USB Rubber Ducky
- [**82**星][1y] [C#] [baibaomen/baibaomen.httphijacker](https://github.com/baibaomen/baibaomen.httphijacker) 一个通过网络包嗅探攻击HTTP协议,从而对其它电脑上用户的网站登录会话进行劫持的演示程序。教程参见链接:
- [**82**星][1y] [JS] [avian2/noscript](https://github.com/avian2/noscript) A Firefox extension for whitelist driven safe JavaScript execution.
+- [**82**星][4m] [Py] [audreyr/binaryornot](https://github.com/audreyr/binaryornot) Ultra-lightweight pure Python package to check if a file is binary or text.
+- [**82**星][5m] [Ruby] [argos83/ritm](https://github.com/argos83/ritm) Ruby In The Middle (HTTP/HTTPS interception proxy)
- [**82**星][2y] [Py] [anssi-fr/tabi](https://github.com/anssi-fr/tabi) BGP Hijack Detection
- [**82**星][1y] [java] [anbai-inc/cobaltstrike_hanization](https://github.com/anbai-inc/cobaltstrike_hanization) CobaltStrike 2.5中文汉化版
-- [**82**星][1m] [Go] [alphasoc/nfr](https://github.com/alphasoc/nfr) A lightweight tool to score network traffic and flag anomalies
+- [**82**星][8d] [Go] [alphasoc/nfr](https://github.com/alphasoc/nfr) A lightweight tool to score network traffic and flag anomalies
- [**82**星][4y] [C] [abdsec/cve-2016-0801](https://github.com/abdsec/cve-2016-0801)
-- [**82**星][10m] [C] [aasthayadav/compsecattacklabs](https://github.com/aasthayadav/compsecattacklabs) Contains Attack labs
+- [**82**星][10m] [Java] [7ym0n/security](https://github.com/7ym0n/security) Happy Hacker
+- [**82**星][8d] [PHP] [10up/restricted-site-access](https://github.com/10up/restricted-site-access) Limit access to visitors who are logged in or allowed by IP addresses. Includes many options for handling blocked visitors.
+- [**82**星][5m] [Py] [0xffff0800/muddyc3v1.0.1-](https://github.com/0xffff0800/muddyc3v1.0.1-) This is the MuddyWater APT C3 v1.0.1 Source
+- [**82**星][1m] [C] [0xcpu/winaltsyscallhandler](https://github.com/0xcpu/winaltsyscallhandler) Some research on AltSystemCallHandlers functionality in Windows 10 20H1 18999
+- [**81**星][2y] [JS] [chxj1992/shadowsocks-manager-docker](https://github.com/chxj1992/shadowsocks-manager-docker) 这是一个基于 shadowsocks-manager webui 插件开发的shadowsocks账号售卖网站的Docker镜像
+- [**81**星][4m] [C] [sensepost/wpa_sycophant](https://github.com/sensepost/wpa_sycophant) Evil client portion of EAP relay attack
- [**81**星][1y] [Java] [googlecreativelab/tunnelvision](https://github.com/googlecreativelab/tunnelvision) Distort your surroundings through a collection of transformative filters
- [**81**星][3y] [Shell] [infoslack/docker-dvwa](https://github.com/infoslack/docker-dvwa) Docker image for DVWA(Damn Vulnerable Web Application)
-- [**81**星][7m] [Objective-C] [hikariobfuscator/hanabi](https://github.com/hikariobfuscator/hanabi) Apple Clang Loader
-- [**81**星][22d] [Go] [liamg/pax](https://github.com/liamg/pax)
-- [**81**星][11m] [Go] [ouqiang/mars](https://github.com/ouqiang/mars) HTTP(S)代理, 用于抓包调试
-- [**81**星][20d] [six2dez/oscp-human-guide](https://github.com/six2dez/oscp-human-guide) My own OSCP guide
+- [**81**星][7m] [ObjC] [hikariobfuscator/hanabi](https://github.com/hikariobfuscator/hanabi) Apple Clang Loader
+- [**81**星][11d] [Go] [asche910/flynet](https://github.com/asche910/flynet) A powerful TCP/UDP tool, which support socks5 proxy by tcp and udp, http proxy and NAT traversal. This tool can help you bypass gfw easily
- [**81**星][2y] [Shell] [offxec/pavelow](https://github.com/OffXec/PAVELOW) PAVELOW Exploit Toolbox is a BASH script that corresponds with your KALI distro to better help your vulnerability hunting and exploiting proccess with a few other goodies added to aid your fight.
+- [**81**星][3m] [Java] [nats-io/stan.java](https://github.com/nats-io/stan.java) NATS Streaming Java Client
- [**81**星][4y] [Py] [android-dtf/dtf](https://github.com/android-dtf/dtf) Android Device Testing Framework ("dtf")
- [**81**星][1y] [Py] [ctfhacker/ctf-writeups](https://github.com/ctfhacker/ctf-writeups)
- [**81**星][4y] [Py] [zcutlip/exploit-poc](https://github.com/zcutlip/exploit-poc) Proof-of-Concept code for exploits
- [**81**星][2y] [Py] [xyzz/rop-rpc](https://github.com/xyzz/rop-rpc)
- [**81**星][3y] [xoreaxeaxeax/vimmmex](https://github.com/xoreaxeaxeax/vimmmex) The vim execution engine
-- [**81**星][3y] [Go] [whyrusleeping/zmsg](https://github.com/whyrusleeping/zmsg) A small program for sending messages via zcash encrypted memo fields
- [**81**星][3y] [HTML] [vah13/avdetection](https://github.com/vah13/avdetection) A simple way for detection the remote user's antivirus
- [**81**星][1y] [Py] [undeadsec/idisagree](https://github.com/undeadsec/idisagree) Control remote computers using discord bot and python 3.
- [**81**星][4y] [C] [tyilo/asm_repl](https://github.com/tyilo/asm_repl) A REPL for assembly
@@ -9446,69 +10035,71 @@ networking routines
- [**81**星][7y] [C] [strobejb/winspy](https://github.com/strobejb/winspy) WinSpy++
- [**81**星][8y] [spiderlabs/msfrpc](https://github.com/spiderlabs/msfrpc) Perl/Python modules for interfacing with Metasploit MSGRPC
- [**81**星][9m] [C#] [skelsec/pypykatz_agent_dn](https://github.com/skelsec/pypykatz_agent_dn) Pypykatz agent implemented in .NET
-- [**81**星][2m] [JS] [sk4ddy/remediatetheflag](https://github.com/sk4ddy/remediatetheflag) remediatetheflag: 对程序员进行安全相关的培训
- [**81**星][1y] [Py] [silascutler/malpipe](https://github.com/silascutler/malpipe) Malware/IOC ingestion and processing engine
- [**81**星][2y] [Ruby] [siberas/watobo](https://github.com/siberas/watobo) watobo:自动化 web app 安全测试
- [**81**星][4y] [Py] [shengqi158/svn_git_scanner](https://github.com/shengqi158/svn_git_scanner) 用于扫描git,svn泄露
- [**81**星][4m] [JS] [securestate/king-phisher-templates](https://github.com/securestate/king-phisher-templates) Templates for the King Phisher open source phishing campaign toolkit.
- [**81**星][10m] [sderosiaux/guidelines-to-create-a-strong-website](https://github.com/sderosiaux/guidelines-to-create-a-strong-website) A list of all things to consider when making a website or webapp of quality.
- [**81**星][5m] [Py] [scwuaptx/lazyfragmentationheap](https://github.com/scwuaptx/lazyfragmentationheap) WCTF 2019 challenge
-- [**81**星][2m] [Scala] [scala/jardiff](https://github.com/scala/jardiff) A tool for comparing JAR files, including Scala pickled signatures and method code
- [**81**星][2m] [Shell] [rhaidiz/dribble](https://github.com/rhaidiz/dribble) A small project for stealing Wi-Fi passwords via browser's cache poisoning
+- [**81**星][3y] [Py] [ratty3697/hackspy-trojan-exploit](https://github.com/ratty3697/hackspy-trojan-exploit) This tool creates almost undetectabe trojan virus to exploit windows machine.
- [**81**星][3y] [JS] [rapid7/jsobfu](https://github.com/rapid7/jsobfu) Obfuscate JavaScript (beyond repair) with Ruby
- [**81**星][1y] [Py] [r3dxpl0it/apache-superset-remote-code-execution-poc-cve-2018-8021](https://github.com/r3dxpl0it/apache-superset-remote-code-execution-poc-cve-2018-8021) CVE-2018-8021 Proof-Of-Concept and Exploit
-- [**81**星][3m] [Py] [r00ts3c/ddos-rootsec](https://github.com/r00ts3c/ddos-rootsec) DDOS Archive by RootSec (Scanners, BotNets (Mirai and QBot Premium & Normal and more), Exploits, Methods, Sniffers)
-- [**81**星][4m] [Java] [pwntester/dupekeyinjector](https://github.com/pwntester/dupekeyinjector) DupeKeyInjector
- [**81**星][1y] [Py] [prezi/reddalert](https://github.com/prezi/reddalert) AWS risky security change detector based on EDDA.
-- [**81**星][1y] [Jupyter Notebook] [poteman/alibaba-3rd-security-algorithm-challenge](https://github.com/poteman/alibaba-3rd-security-algorithm-challenge) 第三届阿里云安全算法挑战赛冠军代码
-- [**81**星][17d] [Objective-C] [poomsmart/idaobjctypes](https://github.com/poomsmart/idaobjctypes) A collection of types & functions definitions useful for Objective-C binaries analysis.
-- [**81**星][4y] [owasp/owasp-testing-guide](https://github.com/owasp/owasp-testing-guide) OWASP Testing Guide
+- [**81**星][19d] [ObjC] [poomsmart/idaobjctypes](https://github.com/poomsmart/idaobjctypes) A collection of types & functions definitions useful for Objective-C binaries analysis.
- [**81**星][5y] [C] [nukem9/virtualdbghide](https://github.com/nukem9/virtualdbghide) Windows kernel mode driver to prevent detection of debuggers.
- [**81**星][7m] [C] [nowsecure/dirtycow](https://github.com/nowsecure/dirtycow) radare2 IO plugin for Linux and Android. Modifies files owned by other users via dirtycow Copy-On-Write cache vulnerability
+- [**81**星][4m] [TS] [nowsecure/airspy](https://github.com/nowsecure/airspy) AirSpy - Frida-based tool for exploring and tracking the evolution of Apple's AirDrop protocol implementation on i/macOS, from the server's perspective. Released during BH USA 2019 Training
- [**81**星][4m] [Py] [nccgroup/requests-racer](https://github.com/nccgroup/requests-racer) Small Python library that makes it easy to exploit race conditions in web apps with Requests.
-- [**81**星][1y] [Py] [nccgroup/blackboxprotobuf](https://github.com/nccgroup/blackboxprotobuf) Blackbox protobuf is a Burp Suite extension for decoding and modifying arbitrary protobuf messages without the protobuf type definition.
+- [**81**星][8m] [Py] [nccgroup/argumentinjectionhammer](https://github.com/nccgroup/argumentinjectionhammer) A Burp Extension designed to identify argument injection vulnerabilities.
- [**81**星][1m] [PHP] [nao-sec/ektotal](https://github.com/nao-sec/ektotal) 分析Drive-by Download攻击的集成工具
+- [**81**星][2y] [Go] [mtojek/aws-lambda-go-proxy](https://github.com/mtojek/aws-lambda-go-proxy)
- [**81**星][2m] [Py] [mattcurrie/mgbdis](https://github.com/mattcurrie/mgbdis) Game Boy ROM disassembler with RGBDS compatible output
+- [**81**星][2y] [matt-knight/research](https://github.com/matt-knight/research) Matt's security publications and related materials
- [**81**星][3y] [Py] [lukasikic/hacoder.py](https://github.com/lukasikic/hacoder.py) FUD Backdoor Generator / Remote Administration Tool
+- [**81**星][11m] [Java] [lufeirider/project](https://github.com/lufeirider/project)
+- [**81**星][7m] [Py] [leoid/matchandreplace](https://github.com/leoid/matchandreplace) Match and Replace script used to automatically generate JSON option file to BurpSuite
- [**81**星][7m] [MATLAB] [ktekeli/audio-steganography-algorithms](https://github.com/ktekeli/audio-steganography-algorithms) A Library of Audio Steganography & Watermarking Algorithms
-- [**81**星][11d] [TeX] [kramse/security-courses](https://github.com/kramse/security-courses) various courses, presentation etc.
-- [**81**星][4m] [Py] [kapytein/jsonp](https://github.com/kapytein/jsonp) jsonp is a Burp Extension which attempts to reveal JSONP functionality behind JSON endpoints. This could help reveal cross-site script inclusion vulnerabilities or aid in bypassing content security policies.
-- [**81**星][4m] [jeanlouisferey/aws-securitygroup-grapher](https://github.com/jeanlouisferey/aws-securitygroup-grapher) This ansible role gets information from an AWS VPC and generate a graphical representation of security groups
+- [**81**星][6d] [TeX] [kramse/security-courses](https://github.com/kramse/security-courses) various courses, presentation etc.
+- [**81**星][3d] [PS] [jborean93/packer-windoze](https://github.com/jborean93/packer-windoze) Packer templates to create Windows vagrant box images
+- [**81**星][1m] [Py] [jas502n/cve-2019-3396](https://github.com/jas502n/cve-2019-3396) Confluence 未授权 RCE (CVE-2019-3396) 漏洞
+- [**81**星][2y] [C] [hvqzao/foolavc](https://github.com/hvqzao/foolavc) foolav successor - loads DLL, executable or shellcode into memory and runs it effectively bypassing AV
- [**81**星][3m] [Py] [huntergregal/png-idat-payload-generator](https://github.com/huntergregal/png-idat-payload-generator) Generate a PNG with a payload embedded in the IDAT chunk (Based off of previous concepts and code -- credit in README)
-- [**81**星][5y] [C++] [hackedteam/scout-win](https://github.com/hackedteam/scout-win) Scout backdoor for Windows
-- [**81**星][2m] [Py] [fleetcaptain/turbolist3r](https://github.com/fleetcaptain/turbolist3r) Subdomain enumeration tool with analysis features for discovered domains
+- [**81**星][1m] [HTML] [freedom-wy/js-reverse](https://github.com/freedom-wy/js-reverse) JS逆向研究
+- [**81**星][9m] [Py] [fox-it/mkyara](https://github.com/fox-it/mkyara) Generating YARA rules based on binary code
+- [**81**星][2m] [Py] [fgsect/scat](https://github.com/fgsect/scat) 通过USB解析Qualcomm和Samsung基带的诊断消息,并生成包含蜂窝控制平面消息的GSMTAP数据包流
+- [**81**星][3m] [Shell] [fademind/hosts.extras](https://github.com/fademind/hosts.extras) Extra rules for
- [**81**星][3y] [Py] [evilsocket/coffee](https://github.com/evilsocket/coffee) Smarter Coffee terminal client.
- [**81**星][1y] [Py] [endgameinc/youarespecial](https://github.com/endgameinc/youarespecial)
-- [**81**星][4y] [elephantos/elephant](https://github.com/elephantos/elephant) 操作系统真象还原
-- [**81**星][7y] [Ruby] [dirtyfilthy/metassh](https://github.com/dirtyfilthy/metassh) ssh session type for metasploit
+- [**81**星][2m] [PS] [ecstatic-nobel/posint](https://github.com/ecstatic-nobel/posint) Gather Open-Source Intelligence using PowerShell.
+- [**81**星][2y] [Lua] [duoergun0729/4book](https://github.com/duoergun0729/4book) 《企业安全建设入门:基于开源软件打造企业网络安全》
- [**81**星][3y] [C] [derrekr/android_security](https://github.com/derrekr/android_security) Public Android Vulnerability Information (CVE PoCs etc)
- [**81**星][4y] [Roff] [ddos-defense/bohatei](https://github.com/ddos-defense/bohatei) Bohatei is a first of its kind platform that enables flexible and elastic DDoS defense using SDN and NFV.
- [**81**星][4y] [C#] [david-risney/csp-fiddler-extension](https://github.com/david-risney/csp-fiddler-extension) Content Security Policy rule collector extension for Fiddler
-- [**81**星][4m] [Py] [danielplohmann/smda](https://github.com/danielplohmann/smda) SMDA is a minimalist recursive disassembler library that is optimized for accurate Control Flow Graph (CFG) recovery from memory dumps.
-- [**81**星][8m] [Java] [col-e/jremapper](https://github.com/col-e/jremapper) Remapping tool for compiled java programs.
+- [**81**星][3y] [Py] [coffeehb/ocift](https://github.com/coffeehb/ocift) 一个半自动化命令注入漏洞Fuzz工具(One Semi-automation command injection vulnerability Fuzz tool)
- [**81**星][6y] [C] [chokepoint/beleth](https://github.com/chokepoint/beleth) Multi-threaded SSH Password Auditor
-- [**81**星][26d] [JS] [chichou/wiggle](https://github.com/chichou/wiggle) The concepting self hosted executable binary search engine
+- [**81**星][7d] [JS] [chichou/wiggle](https://github.com/chichou/wiggle) The concepting self hosted executable binary search engine
- [**81**星][1y] [HTML] [bruceye777/cronmon](https://github.com/bruceye777/cronmon) 定时任务执行状态监控
-- [**81**星][2y] [C] [axi0mx/ios-kexec-utils](https://github.com/axi0mx/ios-kexec-utils) boot LLB/iBoot/iBSS/iBEC image from a jailbroken iOS kernel
-- [**81**星][4m] [Py] [audreyr/binaryornot](https://github.com/audreyr/binaryornot) Ultra-lightweight pure Python package to check if a file is binary or text.
+- [**81**星][3m] [blockchainlabsnz/awesome-solidity](https://github.com/blockchainlabsnz/awesome-solidity) A curated list of awesome Solidity resources
- [**81**星][1y] [asuri-team/pwn-sandbox](https://github.com/asuri-team/pwn-sandbox) A sandbox to protect your pwn challenges being pwned in CTF AWD.
- [**81**星][11m] [Scala] [arguslab/argus-saf](https://github.com/arguslab/argus-saf) Argus static analysis framework
-- [**81**星][6m] [C] [andreybazhan/symstore](https://github.com/andreybazhan/symstore) The history of Windows Internals via symbols.
-- [**81**星][12d] [Py] [abarker/pdfcropmargins](https://github.com/abarker/pdfcropmargins) pdfCropMargins -- a program to crop the margins of PDF files
-- [**81**星][10m] [Java] [7ym0n/security](https://github.com/7ym0n/security) Happy Hacker
+- [**81**星][7m] [C] [andreybazhan/symstore](https://github.com/andreybazhan/symstore) The history of Windows Internals via symbols.
+- [**81**星][14d] [Py] [abarker/pdfcropmargins](https://github.com/abarker/pdfcropmargins) pdfCropMargins -- a program to crop the margins of PDF files
- [**80**星][10m] [C] [mr-un1k0d3r/maliciousdllgenerator](https://github.com/mr-un1k0d3r/maliciousdllgenerator) DLL Generator for side loading attack
- [**80**星][1y] [JS] [toyodadoubi/ssrstatus](https://github.com/toyodadoubi/ssrstatus) Shadowsocks/ShadowsocksR 账号在线监控
+- [**80**星][7m] [JS] [thekingofduck/logontracer](https://github.com/thekingofduck/logontracer) Windows系统安全登录日志分析工具logonTracer汉化修正版
- [**80**星][7m] [PHP] [shadowsocks/shadow-shop](https://github.com/shadowsocks/shadow-shop) Building highly customizable e-commerce websites selling shadowsocks services, using Wordpress and WooCommerce
-- [**80**星][9d] [C] [trailofbits/mishegos](https://github.com/trailofbits/mishegos) A differential fuzzer for x86 decoders
-- [**80**星][9d] [Go] [asche910/flynet](https://github.com/asche910/flynet) A powerful TCP/UDP tool, which support socks5 proxy by tcp and udp, http proxy and NAT traversal. This tool can help you bypass gfw easily
+- [**80**星][2d] [PHP] [automattic/vip-coding-standards](https://github.com/automattic/vip-coding-standards) PHP_CodeSniffer ruleset to enforce WordPress.com VIP and VIP Go coding standards
+- [**80**星][6d] [Rust] [warner/magic-wormhole.rs](https://github.com/warner/magic-wormhole.rs) NOT FUNCTIONAL YET. Slowly porting magic-wormhole to Rust. See wiki for game plan.
+- [**80**星][3y] [bastilleresearch/keysniffer](https://github.com/bastilleresearch/keysniffer) KeySniffer device discovery tools and public advisories
+- [**80**星][11m] [Go] [ouqiang/mars](https://github.com/ouqiang/mars) HTTP(S)代理, 用于抓包调试
+- [**80**星][6d] [C] [trailofbits/mishegos](https://github.com/trailofbits/mishegos) A differential fuzzer for x86 decoders
+- [**80**星][2y] [JS] [vmikhav/antipacman](https://github.com/vmikhav/AntiPacMan) HTML5 Pac-Man game with gesture recognition
- [**80**星][4y] [Py] [helpsystems/wiwo](https://github.com/helpsystems/wiwo) wiwo is a distributed 802.11 monitoring and injecting system that was designed to be simple and scalable, in which all workers (nodes) can be managed by a Python framework.
-- [**80**星][2m] [Java] [nats-io/stan.java](https://github.com/nats-io/stan.java) NATS Streaming Java Client
+- [**80**星][2y] [Py] [zhkl0228/androidattacher](https://github.com/zhkl0228/androidattacher) IDA debugging plugin for android armv7 so
- [**80**星][3y] [Py] [z00nx/reversemap](https://github.com/z00nx/reversemap) Analyse SQL injection attempts in web server logs
-- [**80**星][27d] [JS] [yosuke-furukawa/httpstat](https://github.com/yosuke-furukawa/httpstat) httpstat node implementation
-- [**80**星][3y] [yeyintminthuhtut/awesome-study-resources-for-kernel-hacking](https://github.com/yeyintminthuhtut/awesome-study-resources-for-kernel-hacking) Kernel Hacking study materials collection
-- [**80**星][9m] [Py] [xajkep/wordlists](https://github.com/xajkep/wordlists) Infosec Wordlists
+- [**80**星][29d] [JS] [yosuke-furukawa/httpstat](https://github.com/yosuke-furukawa/httpstat) httpstat node implementation
- [**80**星][3y] [C++] [wpo-foundation/win-shaper](https://github.com/wpo-foundation/win-shaper) Windows traffic-shaping packet filter
-- [**80**星][5m] [C] [vulhub/redis-rogue-getshell](https://github.com/vulhub/redis-rogue-getshell) 利用redis 4.x/5.x master/slave 模式getshell
- [**80**星][6m] [Rust] [trailofbits/molasses](https://github.com/trailofbits/molasses) A Rust implementation of the Message Layer Security group messaging protocol
- [**80**星][1y] [Go] [tleyden/keynuker](https://github.com/tleyden/keynuker)
- [**80**星][3m] [C++] [thewhiteh4t/flashsploit](https://github.com/thewhiteh4t/flashsploit) Exploitation Framework for ATtiny85 Based HID Attacks
@@ -9519,131 +10110,135 @@ networking routines
- [fn_fuzzy](https://github.com/takahiroharuyama/ida_haru/blob/master/fn_fuzzy/README.org) 快速二进制文件对比
- [stackstring_static](https://github.com/takahiroharuyama/ida_haru/blob/master/stackstring_static/README.org) 静态恢复栈上的字符串
- [**80**星][2m] [C] [stef/libsphinx](https://github.com/stef/libsphinx) libsphinx: 用于密码管理的库
+- [**80**星][5m] [ObjC] [smilezxlee/zxhookdetection](https://github.com/smilezxlee/zxhookdetection) 【iOS应用安全】hook及越狱的基本防护与检测
- [**80**星][2y] [Jupyter Notebook] [sebdraven/hack_lu_2017](https://github.com/sebdraven/hack_lu_2017) Python and Machine Learning Workshop at Hack.lu 2017
- [**80**星][2y] [Py] [se55i0n/portscanner](https://github.com/se55i0n/portscanner) 目标tcp端口快速扫描、banner识别、cdn检测
- [**80**星][3m] [sbousseaden/panache_sysmon](https://github.com/sbousseaden/panache_sysmon) A Sysmon Config for APTs Techniques Detection
- [**80**星][2m] [Py] [sashs/filebytes](https://github.com/sashs/filebytes) Library to read and edit files in the following formats: Executable and Linking Format (ELF), Portable Executable (PE), MachO and OAT (Android Runtime)
- [**80**星][2y] [Py] [rsc-dev/pbd](https://github.com/rsc-dev/pbd) Pbd is a Python module to disassemble serialized protocol buffers descriptors (
- [**80**星][4y] [C] [riscure/rhme-2015](https://github.com/riscure/rhme-2015) RHme+ 2015 challenge
-- [**80**星][4m] [Py] [ray-cp/pwn_debug](https://github.com/ray-cp/pwn_debug) Aim to help building exploitation of CTFs pwn game quickly
+- [**80**星][3y] [C++] [radiowar/firegoose](https://github.com/radiowar/firegoose) 中国烧鹅 FireGoose Just like USB Rubber Ducky
- [**80**星][1y] [Py] [pyn3rd/cve-2018-2893](https://github.com/pyn3rd/cve-2018-2893) CVE-2018-2893-PoC
- [**80**星][1y] [Py] [ptresearch/mmdetect](https://github.com/ptresearch/mmdetect) Intel ME Manufacturing Mode Detection Tools
- [**80**星][3y] [Py] [programa-stic/security-advisories](https://github.com/programa-stic/security-advisories) A database of published security advisories reported by the Programa STIC Team at Fundación Sadosky
- [**80**星][3m] [CSS] [pielco11/doge](https://github.com/pielco11/doge) Darknet Osint Graph Explorer
+- [**80**星][2y] [C] [oranav/i9300_emmc_toolbox](https://github.com/oranav/i9300_emmc_toolbox) Samsung Galaxy S3 GT-I9300 eMMC toolbox
- [**80**星][4m] [Shell] [nullarray/netset](https://github.com/nullarray/netset) Operational Security utility and automator.
-- [**80**星][28d] [C] [nukem9/swissarmyknife](https://github.com/nukem9/swissarmyknife) x64dbg utility for linker map files, diff files, PEiD/IDA signatures, and code signature generation
+- [**80**星][3m] [Py] [nlitsme/pyidbutil](https://github.com/nlitsme/pyidbutil) 读取IDB数据库
- [**80**星][2y] [PHP] [nixawk/fuzzdb](https://github.com/nixawk/fuzzdb) Web Fuzzing Discovery and Attack Pattern Database
-- [**80**星][8m] [Py] [nccgroup/argumentinjectionhammer](https://github.com/nccgroup/argumentinjectionhammer) A Burp Extension designed to identify argument injection vulnerabilities.
- [**80**星][10m] [Go] [mkishere/sshsyrup](https://github.com/mkishere/sshsyrup) A low-to-medium interaction SSH Honeypot with features to capture terminal activity and upload to asciinema.org
- [**80**星][3m] [Py] [menkrep1337/xsscon](https://github.com/menkrep1337/xsscon) Simple XSS Scanner tool
-- [**80**星][2y] [matt-knight/research](https://github.com/matt-knight/research) Matt's security publications and related materials
- [**80**星][5m] [Py] [manulqwerty/evil-winrar-gen](https://github.com/manulqwerty/evil-winrar-gen) Generator of malicious Ace files for WinRAR < 5.70 beta 1
+- [**80**星][1y] [Go] [lzjluzijie/websocks](https://github.com/lzjluzijie/websocks) A secure proxy based on WebSocket. 一个基于 WebSocket 的代理工具
- [**80**星][3y] [C] [lflare/picoctf_2017_writeup](https://github.com/lflare/picoctf_2017_writeup) PicoCTF 2017 Writeup
- [**80**星][2y] [C++] [legitbs/quals-2017](https://github.com/legitbs/quals-2017)
- [**80**星][1y] [Py] [lcatro/cve-2017-7269-echo-poc](https://github.com/lcatro/cve-2017-7269-echo-poc) CVE-2017-7269 回显PoC ,用于远程漏洞检测..
- [**80**星][2m] [Go] [koenrh/s3enum](https://github.com/koenrh/s3enum) Fast Amazon S3 bucket enumeration tool for pentesters.
- [**80**星][2y] [C] [klsfct/getshell](https://github.com/klsfct/getshell) 各大平台提权工具
- [**80**星][12m] [Py] [keybase/python-triplesec](https://github.com/keybase/python-triplesec) A Python port of the triplesec library.
+- [**80**星][3y] [Py] [januzellij/hopperscripts](https://github.com/januzellij/hopperscripts) Collection of scripts I use in the Hopper disassembler
- [**80**星][4y] [idapython/bin](https://github.com/idapython/bin) IDAPython binaries
-- [**80**星][2y] [C] [hvqzao/foolavc](https://github.com/hvqzao/foolavc) foolav successor - loads DLL, executable or shellcode into memory and runs it effectively bypassing AV
-- [**80**星][3y] [Objective-C++] [hexploitable/memscan](https://github.com/hexploitable/memscan) A memory scanning tool which uses mach_vm* to either dump memory or look for a specific sequence of bytes.
-- [**80**星][16d] [Go] [grantseltzer/karn](https://github.com/grantseltzer/karn) Simplifying Seccomp enforcement in containerized or non-containerized apps
-- [**80**星][9m] [Py] [fox-it/mkyara](https://github.com/fox-it/mkyara) Generating YARA rules based on binary code
-- [**80**星][28d] [Shell] [firecracker-microvm/firecracker-demo](https://github.com/firecracker-microvm/firecracker-demo) A demo running 4000 Firecracker microVMs.
-- [**80**星][2m] [Py] [fgsect/scat](https://github.com/fgsect/scat) 通过USB解析Qualcomm和Samsung基带的诊断消息,并生成包含蜂窝控制平面消息的GSMTAP数据包流
+- [**80**星][2m] [JS] [garethflowers/tor-browser-portable](https://github.com/garethflowers/tor-browser-portable) Portable version of the Tor Browser, for Windows
- [**80**星][4y] [C++] [fastvpseestiou/fastnetmon](https://github.com/fastvpseestiou/fastnetmon) This is old freezed version! Please use
-- [**80**星][3m] [Shell] [fademind/hosts.extras](https://github.com/fademind/hosts.extras) Extra rules for
- [**80**星][4y] [fabiobaroni/awesome-chinese-infosec-websites](https://github.com/fabiobaroni/awesome-chinese-infosec-websites) A curated list of Chinese websites and personal blogs about ethical hacking and pentesting
+- [**80**星][3y] [C] [evil-e/sdb-explorer](https://github.com/evil-e/sdb-explorer) Tool to view and create Microsoft shim database files (SDB).
+- [**80**星][3m] [Py] [escapingbug/ancypwn](https://github.com/escapingbug/ancypwn) Script to setup pwn environment for CTF with Docker
- [**80**星][3y] [Py] [davidkorczynski/repeconstruct](https://github.com/davidkorczynski/repeconstruct) 自动脱壳并重建二进制文件
-- [**80**星][3y] [Py] [coffeehb/ocift](https://github.com/coffeehb/ocift) 一个半自动化命令注入漏洞Fuzz工具(One Semi-automation command injection vulnerability Fuzz tool)
-- [**80**星][5y] [C] [chokepoint/crypthook](https://github.com/chokepoint/crypthook) TCP/UDP symmetric encryption tunnel wrapper
-- [**80**星][2y] [Py] [cheeky4n6monkey/4n6-scripts](https://github.com/cheeky4n6monkey/4n6-scripts) Forensic Scripts
+- [**80**星][2y] [Py] [david942j/defcon-2017-tools](https://github.com/david942j/defcon-2017-tools) DEFCON CTF 2017 Stuff of Shit by HITCON
+- [**80**星][2m] [C] [cyberdefenseinstitute/cdir](https://github.com/cyberdefenseinstitute/cdir) CDIR (Cyber Defense Institute Incident Response) Collector - live collection tool based on oss tool/library
- [**80**星][3y] [C++] [cbayet/poolsprayer](https://github.com/cbayet/poolsprayer) Simple library to spray the Windows Kernel Pool
-- [**80**星][3m] [blockchainlabsnz/awesome-solidity](https://github.com/blockchainlabsnz/awesome-solidity) A curated list of awesome Solidity resources
+- [**80**星][1y] [Py] [brandonasuncion/reverse-engineering-bluetooth-protocols](https://github.com/brandonasuncion/reverse-engineering-bluetooth-protocols) Intercepting Bluetooth device communication and simulating packet responses of an iPhone from a Raspberry Pi 3
- [**80**星][10m] [JS] [bkth/attacking-edge-through-the-javascript-compiler](https://github.com/bkth/attacking-edge-through-the-javascript-compiler) Attacking-Edge-Through-the-JavaScript-Compiler
- [**80**星][1y] [Py] [ax330d/functions-plus](https://github.com/ax330d/functions-plus) 解析函数名称,按命名空间分组,将分组结果以树的形式展示
- [**80**星][2y] [Go] [asciimoo/filtron](https://github.com/asciimoo/filtron) filtron:反向HTTP代码
-- [**80**星][5m] [Ruby] [argos83/ritm](https://github.com/argos83/ritm) Ruby In The Middle (HTTP/HTTPS interception proxy)
-- [**80**星][2m] [Py] [angr/phuzzer](https://github.com/angr/phuzzer) The new phuzzing framework!
- [**80**星][3y] [Py] [alyakhtar/katastrophe](https://github.com/alyakhtar/katastrophe) Command Line Tool to download torrents
- [**80**星][1y] [C#] [advancedhacker101/c-sharp-r.a.t-server](https://github.com/advancedhacker101/c-sharp-r.a.t-server) This is a remote administration tool built with c#
- [**80**星][2y] [Shell] [adi1090x/hackapk](https://github.com/adi1090x/hackapk) An Advanced Tool For Complete Apk-Modding In Termux ...
-- [**80**星][1m] [C] [0xcpu/winaltsyscallhandler](https://github.com/0xcpu/winaltsyscallhandler) Some research on AltSystemCallHandlers functionality in Windows 10 20H1 18999
-- [**79**星][7d] [PHP] [automattic/vip-coding-standards](https://github.com/automattic/vip-coding-standards) PHP_CodeSniffer ruleset to enforce WordPress.com VIP and VIP Go coding standards
-- [**79**星][28d] [Rust] [warner/magic-wormhole.rs](https://github.com/warner/magic-wormhole.rs) NOT FUNCTIONAL YET. Slowly porting magic-wormhole to Rust. See wiki for game plan.
+- [**79**星][3y] [Go] [ring04h/s5.go](https://github.com/ring04h/s5.go) Socks5 proxy server by golang
- [**79**星][1y] [Shell] [iaik/ios-analysis](https://github.com/iaik/ios-analysis) Automated Binary Analysis on iOS
+- [**79**星][5y] [Py] [bishopfox/anti-anti-automation](https://github.com/bishopfox/anti-anti-automation) Anti-Anti-Automation Framework
- [**79**星][3y] [Py] [lanjelot/albatar](https://github.com/lanjelot/albatar) Albatar is a SQLi exploitation framework in Python
- [**79**星][1m] [Py] [momika233/clamav_0day_exploit](https://github.com/momika233/clamav_0day_exploit) ClamAV_0Day_exploit
-- [**79**星][2y] [JS] [vmikhav/antipacman](https://github.com/vmikhav/AntiPacMan) HTML5 Pac-Man game with gesture recognition
-- [**79**星][7d] [HTML] [mitre-attack/attack-website](https://github.com/mitre-attack/attack-website) MITRE ATT&CK Website
-- [**79**星][2y] [Py] [zhkl0228/androidattacher](https://github.com/zhkl0228/androidattacher) IDA debugging plugin for android armv7 so
+- [**79**星][2m] [Rust] [mozilla/authenticator-rs](https://github.com/mozilla/authenticator-rs) Rust library to interact with Security Keys, used by Firefox
- [**79**星][2y] [C] [yifanlu/uvloader](https://github.com/yifanlu/uvloader) Userland Vita Loader for loading unsigned executables on your Vita
+- [**79**星][3y] [yeyintminthuhtut/awesome-study-resources-for-kernel-hacking](https://github.com/yeyintminthuhtut/awesome-study-resources-for-kernel-hacking) Kernel Hacking study materials collection
- [**79**星][3y] [Py] [xyntax/bingc](https://github.com/xyntax/bingc) 基于Bing搜索引擎的C段/旁站查询,多线程,支持API
-- [**79**星][3y] [PowerShell] [winscripting/uac-bypass](https://github.com/winscripting/uac-bypass)
+- [**79**星][3y] [PS] [winscripting/uac-bypass](https://github.com/winscripting/uac-bypass)
- [**79**星][2y] [Py] [viralmaniar/in-spectre-meltdown](https://github.com/viralmaniar/in-spectre-meltdown) This tool allows to check speculative execution side-channel attacks that affect many modern processors and operating systems designs. CVE-2017-5754 (Meltdown) and CVE-2017-5715 (Spectre) allows unprivileged processes to steal secrets from privileged processes. These attacks present 3 different ways of attacking data protection measures on CPUs …
- [**79**星][3y] [C++] [torps/torps](https://github.com/torps/torps) The Tor Path Simulator
- [**79**星][3m] [Go] [tillson/git-hound](https://github.com/tillson/git-hound) GitHound pinpoints exposed API keys on GitHub using pattern matching, commit history searching, and a unique result scoring system. A batch-catching, pattern-matching, patch-attacking secret snatcher.
-- [**79**星][12m] [PowerShell] [thom-s/docx-embeddedhtml-injection](https://github.com/thom-s/docx-embeddedhtml-injection) Word 2016 vulnerability allows injecting HTML/JS code into a docx file's embeddedHTML="" tags.
+- [**79**星][1y] [PS] [thom-s/docx-embeddedhtml-injection](https://github.com/thom-s/docx-embeddedhtml-injection) Word 2016 vulnerability allows injecting HTML/JS code into a docx file's embeddedHTML="" tags.
- [**79**星][4m] [Assembly] [thecodeartist/elf-parser](https://github.com/thecodeartist/elf-parser) Identifying/Extracting various sections of an ELF file
- [**79**星][5y] [C++] [tandasat/findpg](https://github.com/tandasat/findpg) Windbg extension to find PatchGuard pages
- [**79**星][9m] [Go] [subfinder/goaltdns](https://github.com/subfinder/goaltdns) A permutation generation tool written in golang
-- [**79**星][5m] [Objective-C] [smilezxlee/zxhookdetection](https://github.com/smilezxlee/zxhookdetection) 【iOS应用安全】hook及越狱的基本防护与检测
- [**79**星][3y] [C] [smealum/udsploit](https://github.com/smealum/udsploit) UDS exploit + kernel hooks for 11.3
+- [**79**星][3y] [Py] [sjhilt/gaspot](https://github.com/sjhilt/gaspot) GasPot Released at Blackhat 2015
- [**79**星][1y] [Py] [shendo/websnort](https://github.com/shendo/websnort) Web service for scanning pcaps with snort
-- [**79**星][20d] [Go] [schollz/find3-cli-scanner](https://github.com/schollz/find3-cli-scanner) The command-line scanner that supports Bluetooth and WiFi
+- [**79**星][22d] [Go] [schollz/find3-cli-scanner](https://github.com/schollz/find3-cli-scanner) The command-line scanner that supports Bluetooth and WiFi
- [**79**星][1y] [Py] [sawzeeyy/sanitiz3r](https://github.com/sawzeeyy/sanitiz3r) A python script that filters, checks the validity, generates clickable link(s) of subdomain(s), and reports their status
-- [**79**星][10m] [Py] [plizonczyk/noiseprotocol](https://github.com/plizonczyk/noiseprotocol) Noise Protocol Framework - Python 3 implementation
-- [**79**星][2m] [Py] [pfalcon/scratchablock](https://github.com/pfalcon/scratchablock) Yet another crippled decompiler project
+- [**79**星][10m] [Py] [purduepaml/trojannn](https://github.com/purduepaml/trojannn) Trojan Attack on Neural Network
+- [**79**星][6m] [PS] [powershell/psdscresources](https://github.com/powershell/psdscresources)
- [**79**星][7m] [PHP] [ostark/upper](https://github.com/ostark/upper) Integrates Edge Caches like Fastly, KeyCDN, Cloudflare and Varnish with Craft.
-- [**79**星][2y] [C] [oranav/i9300_emmc_toolbox](https://github.com/oranav/i9300_emmc_toolbox) Samsung Galaxy S3 GT-I9300 eMMC toolbox
- [**79**星][4m] [Batchfile] [op7ic/edr-testing-script](https://github.com/op7ic/edr-testing-script) Test the accuracy of Endpoint Detection and Response (EDR) software with simple script which executes various ATT&CK/LOLBAS/Invoke-CradleCrafter/Invoke-DOSfuscation payloads
- [**79**星][11m] [Makefile] [onioniot/openwrt-packages](https://github.com/onioniot/openwrt-packages) Onion Packages Feed for OpenWRT
+- [**79**星][7m] [nusr/awesome-macos-command-line-zh](https://github.com/nusr/awesome-macos-command-line-zh) 用你的 macOS 终端搞事情。(Use your macOS terminal shell to do awesome things. )
- [**79**星][3y] [C] [nsacyber/netfil](https://github.com/nsacyber/netfil) A kernel network manager with monitoring and limiting capabilities for macOS. #nsacyber
-- [**79**星][3m] [Py] [nlitsme/pyidbutil](https://github.com/nlitsme/pyidbutil) 读取IDB数据库
+- [**79**星][1y] [Dockerfile] [nitr4x/reverse-me](https://github.com/nitr4x/reverse-me) This repository contains a docker container dedicated to reverse engineering
- [**79**星][2y] [C++] [nezza/sdqanalyzer](https://github.com/nezza/sdqanalyzer) A Saleae analyzer plugin for the SDQ (Apple Lightning, MagSafe, Battery) protocol.
- [**79**星][2y] [Go] [netxfly/xsec-dns-proxy](https://github.com/netxfly/xsec-dns-proxy) xsec-dns-proxy:DNS代理服务器,可以将DNS请求代理到后端的DNS服务器中,在代理的过程中会将dns log写入到数据库中
- [**79**星][2y] [nanqinlang-mogic/v2ray](https://github.com/nanqinlang-mogic/v2ray) template with websocket+tls+nginx of v2ray
- [**79**星][10m] [Shell] [naltun/eyes.sh](https://github.com/naltun/eyes.sh) Let's you perform domain/IP information gathering... in BASH! Wasn't it esr who said "With enough eyeballs, all your IP info are belong to us?"
- [**79**星][3y] [Py] [mozilla/http-observatory-cli](https://github.com/mozilla/http-observatory-cli) The command line tool for the HTTP Observatory
- [**79**星][4y] [mi3security/su-a-cyder](https://github.com/mi3security/su-a-cyder) Home-Brewed iOS Malware PoC Generator (BlackHat ASIA 2016)
-- [**79**星][2y] [PowerShell] [kromerm/adflab](https://github.com/kromerm/adflab) Azure Data Factory hands-on lab, self-paced. Learn how to lift & shift SSIS packages to the Cloud with ADF. Build new ETL pipelines in ADF, transform data at scale, load Azure Data Warehouse data marts. Also walks through operationalizing ADF pipelines with scheduling and monitoring modules.
+- [**79**星][5d] [Py] [lightswitch05/hosts](https://github.com/lightswitch05/hosts) Hostfile blocklist for ads and tracking, updated regularly
+- [**79**星][10m] [Py] [laconicwolf/nmap-scan-to-csv](https://github.com/laconicwolf/nmap-scan-to-csv) Converts Nmap XML output to csv file, and other useful functions
+- [**79**星][2y] [PS] [kromerm/adflab](https://github.com/kromerm/adflab) Azure Data Factory hands-on lab, self-paced. Learn how to lift & shift SSIS packages to the Cloud with ADF. Build new ETL pipelines in ADF, transform data at scale, load Azure Data Warehouse data marts. Also walks through operationalizing ADF pipelines with scheduling and monitoring modules.
- [**79**星][8m] [Java] [kingsabri/godofwar](https://github.com/kingsabri/godofwar) GodOfWar - Malicious Java WAR builder with built-in payloads
- [**79**星][6y] [Py] [julienpalard/ashttp](https://github.com/julienpalard/ashttp) Shell command, that expose any other command as http. To expose top as http, try : ashttp -p8080 top ; then try http://localhost/8080 and hit F5 to refresh your top :)
-- [**79**星][1m] [Py] [jas502n/cve-2019-3396](https://github.com/jas502n/cve-2019-3396) Confluence 未授权 RCE (CVE-2019-3396) 漏洞
-- [**79**星][3y] [Py] [januzellij/hopperscripts](https://github.com/januzellij/hopperscripts) Collection of scripts I use in the Hopper disassembler
+- [**79**星][2y] [Py] [imiyoo2010/teye_scanner_for_book](https://github.com/imiyoo2010/teye_scanner_for_book) 《白帽子讲Web扫描》书籍参考代码
+- [**79**星][2m] [ignitetechnologies/vulnhub-ctf-writeups](https://github.com/ignitetechnologies/vulnhub-ctf-writeups) This cheasheet is aimed at the CTF Players and Beginners to help them sort Vulnhub Labs. This list contains all the writeups available on hackingarticles.
+- [**79**星][2y] [iamhdt/ecommerce-website-security-checklist](https://github.com/iamhdt/ecommerce-website-security-checklist) List of considerations for commerce site auditing and security teams. This is summary of action points and areas that need to be built into the Techinical Specific Document, or will be checked in the Security testing phases.
+- [**79**星][7m] [Java] [i2p/i2p.i2p-bote](https://github.com/i2p/i2p.i2p-bote) I2P-Bote is a serverless, encrypted e-mail application.
+- [**79**星][3y] [Objective-C++] [hexploitable/memscan](https://github.com/hexploitable/memscan) A memory scanning tool which uses mach_vm* to either dump memory or look for a specific sequence of bytes.
+- [**79**星][1y] [Ruby] [hahwul/metasploit-autopwn](https://github.com/hahwul/metasploit-autopwn) db_autopwn plugin of metasploit
+- [**79**星][2y] [Py] [hackndo/krack-poc](https://github.com/hackndo/krack-poc) Krack POC
- [**79**星][7m] [Py] [guedou/r2m2](https://github.com/guedou/r2m2) radare2 + miasm2 = ♥
- [**79**星][2m] [Py] [google/giftstick](https://github.com/google/giftstick) 1-Click push forensics evidence to the cloud
- [**79**星][3y] [glinares/hephaestus](https://github.com/glinares/hephaestus) Open Source Office Malware Generation & Polymorphic Engine for Red Teams and QA testing
-- [**79**星][8d] [Py] [githubmaidou/tools](https://github.com/githubmaidou/tools) Python渗透漏洞工具
+- [**79**星][7d] [Py] [githubmaidou/tools](https://github.com/githubmaidou/tools) Python渗透漏洞工具
- [**79**星][4y] [C] [gdbinit/mach_race](https://github.com/gdbinit/mach_race) Exploit code for CVE-2016-1757
- [**79**星][4m] [JS] [frida/frida-presentations](https://github.com/frida/frida-presentations) Public presentations given on Frida at conferences
-- [**79**星][3m] [Py] [escapingbug/ancypwn](https://github.com/escapingbug/ancypwn) Script to setup pwn environment for CTF with Docker
-- [**79**星][2m] [PowerShell] [ecstatic-nobel/posint](https://github.com/ecstatic-nobel/posint) Gather Open-Source Intelligence using PowerShell.
-- [**79**星][6m] [C++] [djhohnstein/processreimaging](https://github.com/djhohnstein/processreimaging) Process reimaging proof of concept code
+- [**79**星][1y] [f0rgetting/presentations](https://github.com/f0rgetting/presentations)
- [**79**星][12m] [C#] [djhohnstein/.net-profiler-dll-hijack](https://github.com/djhohnstein/.net-profiler-dll-hijack) Implementation of the .NET Profiler DLL hijack in C#
-- [**79**星][2y] [Py] [david942j/defcon-2017-tools](https://github.com/david942j/defcon-2017-tools) DEFCON CTF 2017 Stuff of Shit by HITCON
+- [**79**星][2y] [Go] [derekchiang/mesos-bitcoin-miner](https://github.com/derekchiang/mesos-bitcoin-miner) A bitcoin mining framework on Mesos
+- [**79**星][4m] [JS] [de1ta-team/de1ctf2019](https://github.com/de1ta-team/de1ctf2019) De1CTF2019
- [**79**星][2y] [Shell] [daradib/sidedoor](https://github.com/daradib/sidedoor) SSH connection daemon for Debian/Raspbian/Ubuntu/etc
- [**79**星][3y] [Py] [dancezarp/tbdex](https://github.com/dancezarp/tbdex)
+- [**79**星][1y] [Py] [damian89/xssfinder](https://github.com/damian89/xssfinder) Toolset for detecting reflected xss in websites
- [**79**星][6y] [Py] [corelan/dnshjmon](https://github.com/corelan/dnshjmon) dnshjmon is a free tool to monitor public DNS records and report hijacks
- [**79**星][4y] [PHP] [coderpirata/xpl-search](https://github.com/coderpirata/xpl-search) Search exploits in multiple exploit databases!
- [**79**星][1y] [C#] [certsocietegenerale/notifysecurity](https://github.com/certsocietegenerale/notifysecurity) Outlook add-in companion to report suspicious mail easily
- [**79**星][1y] [Py] [cdhowie/netflix-no-ipv6-dns-proxy](https://github.com/cdhowie/netflix-no-ipv6-dns-proxy) Fix for Netflix blocking various IPv6 tunnels by returning no results for AAAA queries of Netflix domains
- [**79**星][2y] [Py] [brianwrf/hackrequests](https://github.com/brianwrf/hackrequests) It is a dedicated requests lib that supports cookie, headers, get/post, etc. And it also supports rendering the response (e.g. Javascript, CSS, etc.) of GET requests by using PhantomJs enginee.
-- [**79**星][1y] [Py] [brandonasuncion/reverse-engineering-bluetooth-protocols](https://github.com/brandonasuncion/reverse-engineering-bluetooth-protocols) Intercepting Bluetooth device communication and simulating packet responses of an iPhone from a Raspberry Pi 3
- [**79**星][2y] [Py] [billyv4/id-entify](https://github.com/billyv4/id-entify) Search for information related to a domain: Emails - IP addresses - Domains - Information on WEB technology - Type of Firewall - NS and MX records - Nmap to IP addresses and Domains.
- [**79**星][9m] [axiomzen/eth-random](https://github.com/axiomzen/eth-random) commit-reveal RNG method in Ethereum
+- [**79**星][2y] [C] [axi0mx/ios-kexec-utils](https://github.com/axi0mx/ios-kexec-utils) boot LLB/iBoot/iBSS/iBEC image from a jailbroken iOS kernel
+- [**79**星][3y] [Py] [anfractuosity/ultrasonicnetworking](https://github.com/anfractuosity/ultrasonicnetworking) Ultrasonic networking - Transmitting TCP/IP via Ultrasound
- [**79**星][1y] [C] [adafruit/adafruit_blesniffer_python](https://github.com/adafruit/adafruit_blesniffer_python) Python API for Adafruit's Bluefruit LE Sniffer
+- [**79**星][6m] [Py] [abaykan/53r3n17y](https://github.com/abaykan/53r3n17y) Python based script for Information Gathering.
+- [**78**星][3m] [zhoushuai0207/ladder](https://github.com/zhoushuai0207/ladder) 梯子整理,科学上网
- [**78**星][8m] [Py] [reswitched/loaders](https://github.com/reswitched/loaders) IDA Loaders for Switch binaries(NSO / NRO)
-- [**78**星][3y] [Go] [ring04h/s5.go](https://github.com/ring04h/s5.go) Socks5 proxy server by golang
+- [**78**星][2m] [uknowsec/sharpdecryptpwd](https://github.com/uknowsec/sharpdecryptpwd) 对密码已保存在 Windwos 系统上的部分程序进行解析,包括:Navicat,TeamViewer,FileZilla,WinSCP,Xmangager系列产品(Xshell,Xftp)。
- [**78**星][10m] [JS] [webbreacher/yoga](https://github.com/webbreacher/yoga) Your OSINT Graphical Analyzer
-- [**78**星][28d] [Py] [mr-un1k0d3r/redteamscripts](https://github.com/mr-un1k0d3r/redteamscripts) Repo with various Red Team scripts
-- [**78**星][3y] [bastilleresearch/keysniffer](https://github.com/bastilleresearch/keysniffer) KeySniffer device discovery tools and public advisories
+- [**78**星][30d] [Py] [mr-un1k0d3r/redteamscripts](https://github.com/mr-un1k0d3r/redteamscripts) Repo with various Red Team scripts
+- [**78**星][9m] [Py] [elliiot/ghidra_darknight](https://github.com/elliiot/ghidra_darknight) DarkNight theme for Ghidra
- [**78**星][2y] [Go] [oftn-oswg/zerodrop](https://github.com/oftn-oswg/zerodrop) A stealth URL toolkit optimized for bypassing censorship filters and/or dropping malware
-- [**78**星][8m] [Py] [sxcurity/230-oob](https://github.com/lc/230-OOB) An Out-of-Band XXE server for retrieving file contents over FTP.
- [**78**星][5y] [Py] [cylance/smbtrap](https://github.com/cylance/SMBTrap) Tools developed to test the Redirect to SMB issue
- [**78**星][5y] [C++] [helpsystems/agafi](https://github.com/helpsystems/Agafi) A gadget finder and a ROP-Chainer tool for x86 platforms
- [**78**星][11m] [Py] [siberas/sjet](https://github.com/siberas/sjet) siberas JMX exploitation toolkit
-- [**78**星][19d] [Shell] [radareorg/radare2-pm](https://github.com/radareorg/radare2-pm) Package Manager for Radare2
+- [**78**星][21d] [Shell] [radareorg/radare2-pm](https://github.com/radareorg/radare2-pm) Package Manager for Radare2
+- [**78**星][3y] [C#] [virb3/dneditor](https://github.com/virb3/dneditor) A .NET assembly editor based on dnlib
+- [**78**星][8d] [Py] [unkn0wnh4ckr/hackers-tool-kit](https://github.com/unkn0wnh4ckr/hackers-tool-kit) Its a framework filled with alot of options and hacking tools you use directly in the script from brute forcing to payload making im still adding more stuff i now have another tool out called htkl-lite its hackers-tool-kit just not as big and messy to see updates check on my instagram @tuf_unkn0wn or if there are any problems message me on insta…
- [**78**星][2y] [Py] [trolldbois/python-haystack](https://github.com/trolldbois/python-haystack) Process heap analysis framework - Windows/Linux - record type inference and forensics
- [**78**星][6y] [Py] [t-s-a/smbspider](https://github.com/t-s-a/smbspider) SMB Spider is a lightweight python utility for searching SMB/CIFS/Samba file shares. While performing a penetration test, the need to search hundreds of hosts for sensitive password files resulted in this project.
- [**78**星][3y] [C] [stevemk14ebr/unihook](https://github.com/stevemk14ebr/unihook) Intercept arbitrary functions at run-time, without knowing their typedefs
@@ -9654,212 +10249,228 @@ networking routines
- [**78**星][4y] [C#] [realalexandergeorgiev/tempracer](https://github.com/realalexandergeorgiev/tempracer) A Windows priviledge escalation tool (abusing race conditions)
- [**78**星][4y] [Py] [qtek/qradio](https://github.com/qtek/qradio) QRadio ~ Best Threat Intelligence Radio ~ Tune In!
- [**78**星][3y] [Py] [pythonone/ms17-010](https://github.com/pythonone/ms17-010) MS17-010 exploits, payloads, and scanners
-- [**78**星][2m] [JS] [pownjs/pown-whoarethey](https://github.com/pownjs/pown-whoarethey)
-- [**78**星][6m] [PowerShell] [powershell/psdscresources](https://github.com/powershell/psdscresources)
+- [**78**星][3m] [JS] [pownjs/pown-whoarethey](https://github.com/pownjs/pown-whoarethey)
+- [**78**星][2y] [Py] [pinkflawd/r2graphity](https://github.com/pinkflawd/r2graphity) Creating function call graphs based on radare2 framwork, plot fancy graphs and extract behavior indicators
+- [**78**星][2m] [Py] [pfalcon/scratchablock](https://github.com/pfalcon/scratchablock) Yet another crippled decompiler project
- [**78**星][2y] [Py] [peterpt/fuzzbunch](https://github.com/peterpt/fuzzbunch) Shadow Brokers NSA fuzzbunch tool leak . With windows auto instalation script
- [**78**星][1m] [Py] [palkeo/pakala](https://github.com/palkeo/pakala) Offensive vulnerability scanner for ethereum, and symbolic execution tool for the Ethereum Virtual Machine
- [**78**星][6y] [C] [oblique/wificurse](https://github.com/oblique/wificurse) WiFi Jamming tool
-- [**78**星][1y] [Dockerfile] [nitr4x/reverse-me](https://github.com/nitr4x/reverse-me) This repository contains a docker container dedicated to reverse engineering
- [**78**星][2m] [Py] [miyagaw61/exgdb](https://github.com/miyagaw61/exgdb) Extension for GDB
- [**78**星][6m] [Go] [mattevans/pwned-passwords](https://github.com/mattevans/pwned-passwords)
- [**78**星][1y] [Py] [markbaggett/domain_stats](https://github.com/markbaggett/domain_stats)
- [**78**星][3y] [HTML] [malqr/malqr.github.io](https://github.com/malqr/malqr.github.io) MalQR is a collection of malicious QR Codes and Barcodes you can use to test the security of your scanners.
-- [**78**星][10m] [Java] [lufeirider/project](https://github.com/lufeirider/project)
- [**78**星][6y] [Zeek] [liamrandall/bromalware-exercise](https://github.com/liamrandall/bromalware-exercise)
-- [**78**星][7m] [Py] [leoid/matchandreplace](https://github.com/leoid/matchandreplace) Match and Replace script used to automatically generate JSON option file to BurpSuite
-- [**78**星][10m] [Py] [laconicwolf/nmap-scan-to-csv](https://github.com/laconicwolf/nmap-scan-to-csv) Converts Nmap XML output to csv file, and other useful functions
- [**78**星][3m] [C] [kelvinhack/devicemon](https://github.com/kelvinhack/devicemon) VT-based PCI device monitor (SPI)
- [**78**星][4y] [C] [kala13x/scap](https://github.com/kala13x/scap) Network Sniffer (Scan and Capture Incoming Packets)
- [**78**星][1m] [Java] [jenkinsci/dependency-check-plugin](https://github.com/jenkinsci/dependency-check-plugin) Jenkins plugin for OWASP Dependency-Check. Inspects project components for known vulnerabilities (e.g. CVEs).
- [**78**星][3y] [C++] [jeffbryner/nbdserver](https://github.com/jeffbryner/nbdserver) Network Block Device Server for windows with a DFIR/forensic focus.
- [**78**星][3y] [JS] [jacobreynolds/ssrfdetector](https://github.com/jacobreynolds/ssrfdetector) Server-side request forgery detector
-- [**78**星][2y] [Py] [imiyoo2010/teye_scanner_for_book](https://github.com/imiyoo2010/teye_scanner_for_book) 《白帽子讲Web扫描》书籍参考代码
- [**78**星][5y] [Py] [idanr1986/cuckoo](https://github.com/idanr1986/cuckoo) A Cuckoo Sandbox Extension for Android
-- [**78**星][2y] [iamhdt/ecommerce-website-security-checklist](https://github.com/iamhdt/ecommerce-website-security-checklist) List of considerations for commerce site auditing and security teams. This is summary of action points and areas that need to be built into the Techinical Specific Document, or will be checked in the Security testing phases.
- [**78**星][3y] [Py] [hatriot/shellme](https://github.com/hatriot/shellme) simple shellcode generator
-- [**78**星][2y] [Py] [hackndo/krack-poc](https://github.com/hackndo/krack-poc) Krack POC
- [**78**星][8m] [Py] [gelim/nmap-erpscan](https://github.com/gelim/nmap-erpscan) Nmap custom probes for better detecting SAP services
- [**78**星][6y] [Go] [gabrielg/cve-2014-1266-poc](https://github.com/gabrielg/cve-2014-1266-poc) Apple OS X/iOS SSL flaw demonstration
- [**78**星][7y] [C#] [g0tmi1k/vulninjector](https://github.com/g0tmi1k/vulninjector) Generates a Windows 'vulnerable' machine from ISOs
- [**78**星][1y] [Ruby] [frohoff/ciphr](https://github.com/frohoff/ciphr) CLI crypto swiss-army knife for performing and composing encoding, decoding, encryption, decryption, hashing, and other various cryptographic operations on streams of data from the command line; mostly intended for ad hoc, infosec-related uses.
-- [**78**星][1y] [f0rgetting/presentations](https://github.com/f0rgetting/presentations)
-- [**78**星][22d] [C] [etnaviv/etna_viv](https://github.com/etnaviv/etna_viv) Etnaviv is a project to build an FOSS driver for the Vivante GCxxx series of embedded GPUs - Tools and reverse engineering repository
+- [**78**星][24d] [C] [etnaviv/etna_viv](https://github.com/etnaviv/etna_viv) Etnaviv is a project to build an FOSS driver for the Vivante GCxxx series of embedded GPUs - Tools and reverse engineering repository
- [**78**星][3y] [C] [ernacktob/esp8266_wifi_raw](https://github.com/ernacktob/esp8266_wifi_raw) ESP8266 wifi packet injection and receiving experiment
- [**78**星][2y] [C] [elfmaster/saruman](https://github.com/elfmaster/saruman) ELF anti-forensics exec, for injecting full dynamic executables into process image (With thread injection)
- [**78**星][2y] [Shell] [demonsec666/secist_script](https://github.com/demonsec666/secist_script)
-- [**78**星][4m] [JS] [de1ta-team/de1ctf2019](https://github.com/de1ta-team/de1ctf2019) De1CTF2019
-- [**78**星][1y] [Py] [damian89/xssfinder](https://github.com/damian89/xssfinder) Toolset for detecting reflected xss in websites
- [**78**星][3y] [Go] [cyphar/mkonion](https://github.com/cyphar/mkonion) A simple way to create a Tor onion service for existing Docker containers.
-- [**78**星][2m] [C] [cyberdefenseinstitute/cdir](https://github.com/cyberdefenseinstitute/cdir) CDIR (Cyber Defense Institute Incident Response) Collector - live collection tool based on oss tool/library
+- [**78**星][10m] [Py] [cymmetria/honeycomb](https://github.com/cymmetria/honeycomb) An extensible honeypot framework
+- [**78**星][4m] [Py] [clirimemini/keye](https://github.com/clirimemini/keye) Keye is a reconnaissance tool that was written in Python with SQLite3 integrated. After adding a single URL, or a list of URLs, it will make a request to these URLs and try to detect changes based on their response's body length.
- [**78**星][6y] [Py] [cea-sec/torpylle](https://github.com/cea-sec/torpylle) A Python / Scapy implementation of the OR (TOR) protocol.
-- [**78**星][3y] [Py] [anfractuosity/ultrasonicnetworking](https://github.com/anfractuosity/ultrasonicnetworking) Ultrasonic networking - Transmitting TCP/IP via Ultrasound
+- [**78**星][6y] [Shell] [breadtk/onion_pi](https://github.com/breadtk/onion_pi) Make a Raspberry Pi into a Anonymizing Tor Proxy!
+- [**77**星][2m] [Shell] [acris/shadowsocks-asuswrt-merlin](https://github.com/acris/shadowsocks-asuswrt-merlin) Shadowsock for Asuswrt-Merlin New Gen
+- [**77**星][10m] [JS] [qious/ss-panel-server](https://github.com/qious/ss-panel-server) 基于企业微信的科学上网分享站点 - 后端
+- [**77**星][11m] [Java] [thelinuxchoice/droidtracker](https://github.com/thelinuxchoice/droidtracker) Script to generate an Android App to track location in real time
- [**77**星][5m] [C] [virustotal/c-vtapi](https://github.com/virustotal/c-vtapi) Official implementation of the VirusTotal API in C programming language
+- [**77**星][16d] [C] [hasherezade/module_overloading](https://github.com/hasherezade/module_overloading) A more stealthy variant of "DLL hollowing"
- [**77**星][2m] [comwrg/fuck-gfw](https://github.com/comwrg/fuck-gfw) 记录各个包管理器使用代理的方法, 因为GFW已经浪费了已经数不清的时间, FUCK GFW
+- [**77**星][1m] [C++] [foxhex0ne/hyperviper](https://github.com/foxhex0ne/hyperviper) Toolkit for Hyper-V security research
+- [**77**星][2m] [C] [iqiyi/qnsm](https://github.com/iqiyi/qnsm) QNSM is network security monitoring framework based on DPDK.
- [**77**星][1y] [C] [contionmig/kernelmode-bypass](https://github.com/ContionMig/KernelMode-Bypass) This is a source to a bypass i made for some games, for now this should work f or VAC, BE and EAC. The only downside is that you will need to find a exploit to load the driver
- [**77**星][3y] [C++] [fsecurelabs/cve-2016-7255](https://github.com/FSecureLABS/CVE-2016-7255) An exploit for CVE-2016-7255 on Windows 7/8/8.1/10(pre-anniversary) 64 bit
- [**77**星][3m] [Batchfile] [phoenix1747/fake-sandbox](https://github.com/Phoenix1747/fake-sandbox)
- [**77**星][5y] [C++] [zer0mem/minihypervisorproject](https://github.com/zer0mem/minihypervisorproject) IntelVT-X nice feature -> tool
- [**77**星][2y] [Py] [wofeiwo/webshell-find-tools](https://github.com/wofeiwo/webshell-find-tools) 分析web访问日志以及web目录文件属性,用于根据查找可疑后门文件的相关脚本。
-- [**77**星][3y] [C#] [virb3/dneditor](https://github.com/virb3/dneditor) A .NET assembly editor based on dnlib
+- [**77**星][14d] [C++] [versprite/research](https://github.com/versprite/research) VerSprite Security Research
- [**77**星][1m] [HTML] [vergl4s/pentesting-dump](https://github.com/vergl4s/pentesting-dump) Scripts, tools, and proof-of-concepts to aid in a penetration test.
- [**77**星][2y] [PHP] [tuhinshubhra/shellstack](https://github.com/tuhinshubhra/shellstack) A PHP Based Tool That Helps You To Manage All Your Backdoored Websites Efficiently.
- [**77**星][4y] [Py] [trolldbois/sslsnoop](https://github.com/trolldbois/sslsnoop) Live SSH/SSL/TLS decryption - extraction of secret keys from live process memory
+- [**77**星][3y] [C] [tinysec/iathook](https://github.com/tinysec/iathook) windows kernelmode and usermode IAT hook
- [**77**星][4m] [Py] [thundergunexpress/badministration](https://github.com/thundergunexpress/badministration)
-- [**77**星][25d] [Go] [tarampampam/mikrotik-hosts-parser](https://github.com/tarampampam/mikrotik-hosts-parser)
+- [**77**星][2y] [Py] [tezukanice/office8570](https://github.com/tezukanice/office8570) CVE20178570
+- [**77**星][27d] [Go] [tarampampam/mikrotik-hosts-parser](https://github.com/tarampampam/mikrotik-hosts-parser)
- [**77**星][3y] [HTML] [szimeus/evalyzer](https://github.com/szimeus/evalyzer) Using WinDBG to tap into JavaScript and help with deobfuscation and browser exploit detection
+- [**77**星][4y] [PHP] [subtlescope/bash-ransomware](https://github.com/subtlescope/bash-ransomware) Simple Bash Rasomware for use in Cyber Exercises
- [**77**星][2y] [Py] [stasinopoulos/jaidam](https://github.com/stasinopoulos/jaidam) Jaidam is an open source penetration testing tool that would take as input a list of domain names, scan them, determine if wordpress or joomla platform was used and finally check them automatically, for web vulnerabilities using two well‐known open source tools, WPScan and Joomscan.
-- [**77**星][3y] [Py] [sjhilt/gaspot](https://github.com/sjhilt/gaspot) GasPot Released at Blackhat 2015
+- [**77**星][3y] [PHP] [secwiki/webshell-2](https://github.com/secwiki/webshell-2) Webshell
+- [**77**星][3y] [Py] [securitystreak/security-scripts](https://github.com/securitystreak/security-scripts) A collection of public offensive and defensive security related scripts for InfoSec students.
+- [**77**星][1y] [Java] [schollz/find3-android-scanner](https://github.com/schollz/find3-android-scanner) An android app that scans Bluetooth and WiFi for FIND3
- [**77**星][4m] [PHP] [rizer0/blind-bash](https://github.com/rizer0/blind-bash) Obfuscate your Bash Code
-- [**77**星][2y] [Py] [pinkflawd/r2graphity](https://github.com/pinkflawd/r2graphity) Creating function call graphs based on radare2 framwork, plot fancy graphs and extract behavior indicators
+- [**77**星][3d] [Ruby] [r00t-3xp10it/resource_files](https://github.com/r00t-3xp10it/resource_files) mosquito - Automating reconnaissance and brute force attacks
+- [**77**星][2m] [Py] [pingxcpost/f-nascan-plus](https://github.com/pingxcpost/f-nascan-plus) F-NAScan-PLUS 安服资产搜集
- [**77**星][1y] [C#] [parsingteam/redlogin](https://github.com/parsingteam/redlogin) Red Login: SSH Brute-force Tools
- [**77**星][1y] [Py] [paolomonti42/salt](https://github.com/paolomonti42/salt) SALT - SLUB ALlocator Tracer for the Linux kernel
- [**77**星][6y] [Py] [owasp/ninja-pingu](https://github.com/owasp/ninja-pingu) a free open-source high performance network scanner tool for large scale analyses
-- [**77**星][14d] [C] [open-power/skiboot](https://github.com/open-power/skiboot) OPAL boot and runtime firmware for POWER
+- [**77**星][7d] [C] [open-power/skiboot](https://github.com/open-power/skiboot) OPAL boot and runtime firmware for POWER
- [**77**星][4y] [CoffeeScript] [olegberman/mitm-omegle](https://github.com/olegberman/mitm-omegle) Watch strangers talk on Omegle (man in the middle attack)
- [**77**星][4m] [C] [oleavr/ios-inject-custom](https://github.com/oleavr/ios-inject-custom) (iOS) 使用Frida注入自定义Payload
-- [**77**星][7m] [nusr/awesome-macos-command-line-zh](https://github.com/nusr/awesome-macos-command-line-zh) 用你的 macOS 终端搞事情。(Use your macOS terminal shell to do awesome things. )
- [**77**星][10m] [Py] [nullarray/mimir](https://github.com/nullarray/mimir) OSINT Threat Intel Interface - CLI for HoneyDB
- [**77**星][2y] [nhoya/pastebinmarkdownxss](https://github.com/nhoya/pastebinmarkdownxss) XSS in pastebin.com and reddit.com via unsanitized markdown output
+- [**77**星][4m] [Go] [netxfly/x-proxy](https://github.com/netxfly/x-proxy) honeypot proxy
+- [**77**星][1y] [JS] [mtjailed/jailbreakme](https://github.com/mtjailed/jailbreakme) A webbased jailbreak solution unifying existing jailbreak me solutions and new ones.
- [**77**星][4y] [Py] [mncoppola/linux-kernel-ctf](https://github.com/mncoppola/linux-kernel-ctf) Helper scripts for hosting a Linux kernel exploitation CTF challenge
- [**77**星][2m] [JS] [mitchmoser/sputnik](https://github.com/mitchmoser/sputnik) Open Source Intelligence Browser Extension
-- [**77**星][16d] [Go] [likexian/whois-parser-go](https://github.com/likexian/whois-parser-go) Go module for domain whois info parse
+- [**77**星][18d] [Go] [likexian/whois-parser-go](https://github.com/likexian/whois-parser-go) Go module for domain whois info parse
- [**77**星][9m] [Py] [k8scop/k8s-security-dashboard](https://github.com/k8scop/k8s-security-dashboard) A security monitoring solution for Kubernetes
+- [**77**星][20d] [Jupyter Notebook] [k-vitali/malware-misc-re](https://github.com/k-vitali/malware-misc-re) Miscellaneous Malware RE
- [**77**星][3y] [C] [jndok/pegasusx](https://github.com/jndok/pegasusx) OS X 10.11.6 LPE PoC for CVE-2016-4655 / CVE-2016-4656
- [**77**星][3m] [HTML] [jenyraval/phishing-simulation](https://github.com/jenyraval/phishing-simulation) Phishing Simulation mainly aims to increase phishing awareness by providing an intuitive tutorial and customized assessment
+- [**77**星][2d] [C] [horsicq/nfdx64dbg](https://github.com/horsicq/nfdx64dbg) Plugin for x64dbg Linker/Compiler/Tool detector.
- [**77**星][1y] [homjxi0e/apt](https://github.com/homjxi0e/apt) APT || Execution || Launch || APTs || ( Authors harr0ey, bohops )
-- [**77**星][1y] [Ruby] [hahwul/metasploit-autopwn](https://github.com/hahwul/metasploit-autopwn) db_autopwn plugin of metasploit
+- [**77**星][5m] [ObjC] [google/gscxscanner](https://github.com/google/gscxscanner) iOS Accessibility Scanner
- [**77**星][11m] [Py] [fs0c131y/cve-2018-20555](https://github.com/fs0c131y/cve-2018-20555) Social Network Tabs Wordpress Plugin Vulnerability - CVE-2018-20555
-- [**77**星][1m] [Shell] [f5networks/f5-aws-cloudformation](https://github.com/f5networks/f5-aws-cloudformation) CloudFormation Templates for quickly deploying BIG-IP services in Amazon Web Services EC2
+- [**77**星][6d] [Shell] [f5networks/f5-aws-cloudformation](https://github.com/f5networks/f5-aws-cloudformation) CloudFormation Templates for quickly deploying BIG-IP services in Amazon Web Services EC2
- [**77**星][4y] [HTML] [f47h3r/hackingteam_exploits](https://github.com/f47h3r/hackingteam_exploits) Initial Collection of HackingTeam Exploits
+- [**77**星][7m] [Py] [enigmabridge/certbot-external-auth](https://github.com/enigmabridge/certbot-external-auth) Certbot external DNS, HTTP, TLSSNI domain validation plugin with JSON output and scriptable hooks, with Dehydrated compatibility
- [**77**星][1y] [Py] [ekultek/xanxss](https://github.com/ekultek/xanxss) A simple XSS finding tool
-- [**77**星][2y] [Lua] [duoergun0729/4book](https://github.com/duoergun0729/4book) 《企业安全建设入门:基于开源软件打造企业网络安全》
- [**77**星][2y] [Py] [dtag-dev-sec/explo](https://github.com/dtag-dev-sec/explo) Human and machine readable web vulnerability testing format
- [**77**星][2y] [dictionaryhouse/dirpath_list](https://github.com/dictionaryhouse/dirpath_list) Dirpath_List 目录扫描字典
- [**77**星][2m] [Py] [danieluhricek/lisa](https://github.com/danieluhricek/lisa) Sandbox for automated Linux malware analysis.
- [**77**星][2y] [C++] [daizhongyin/securitysdk](https://github.com/daizhongyin/securitysdk) Android安全SDK,提供基础的安全防护能力,如安全webview、IPC安全通信、应用和插件安全更新、威胁情报搜集等等
-- [**77**星][11d] [d3sre/use_case_applicability](https://github.com/d3sre/use_case_applicability) Security Monitoring Resolution Categories
-- [**77**星][10m] [Py] [cymmetria/honeycomb](https://github.com/cymmetria/honeycomb) An extensible honeypot framework
+- [**77**星][4d] [d3sre/use_case_applicability](https://github.com/d3sre/use_case_applicability) Security Monitoring Resolution Categories
- [**77**星][6m] [Py] [cybereason/linux_plumber](https://github.com/cybereason/linux_plumber) A python implementation of a grep friendly ftrace wrapper
- [**77**星][2m] [C#] [csmacnz/coveralls.net](https://github.com/csmacnz/coveralls.net) Coveralls uploader for .Net Code coverage
-- [**77**星][2y] [Objective-C] [cocoahuke/ioskextdump](https://github.com/cocoahuke/ioskextdump) Dump Kext information from iOS kernel cache. Applicable to the kernel which dump from memory
-- [**77**星][4m] [Py] [clirimemini/keye](https://github.com/clirimemini/keye) Keye is a reconnaissance tool that was written in Python with SQLite3 integrated. After adding a single URL, or a list of URLs, it will make a request to these URLs and try to detect changes based on their response's body length.
-- [**77**星][1y] [ckjbug/kali-linux-learning](https://github.com/ckjbug/kali-linux-learning)
+- [**77**星][7m] [PS] [cottinghamd/hardeningauditor](https://github.com/cottinghamd/hardeningauditor) Scripts for comparing Microsoft Windows compliance with the ASD 1709 & Office 2016 Hardening Guides
+- [**77**星][2y] [ObjC] [cocoahuke/ioskextdump](https://github.com/cocoahuke/ioskextdump) Dump Kext information from iOS kernel cache. Applicable to the kernel which dump from memory
+- [**77**星][4m] [Shell] [chunkingz/linsetmv1-2](https://github.com/chunkingz/linsetmv1-2) Linset is a WPA/WPA2 phishing tool (evil twin)
- [**77**星][2y] [PHP] [bugsafe/wereport](https://github.com/bugsafe/wereport) WeReport
-- [**77**星][6y] [Shell] [breadtk/onion_pi](https://github.com/breadtk/onion_pi) Make a Raspberry Pi into a Anonymizing Tor Proxy!
- [**77**星][2y] [Py] [blacknbunny/shellcodetoassembly](https://github.com/blacknbunny/shellcodetoassembly)
- [**77**星][5y] [C] [bishopfox/firecat](https://github.com/bishopfox/firecat) Firecat is a penetration testing tool that allows you to punch reverse TCP tunnels out of a compromised network.
-- [**77**星][19d] [C] [apriorit/mhook](https://github.com/apriorit/mhook) A Windows API hooking library
-- [**77**星][2m] [JS] [anmavrid/smart-contracts](https://github.com/anmavrid/smart-contracts)
+- [**77**星][1y] [Py] [asherags/amzsear](https://github.com/asherags/amzsear) The unofficial Amazon search CLI & Python API
+- [**77**星][21d] [C] [apriorit/mhook](https://github.com/apriorit/mhook) A Windows API hooking library
+- [**77**星][3m] [JS] [anmavrid/smart-contracts](https://github.com/anmavrid/smart-contracts)
- [**77**星][3y] [Shell] [ank1036official/git_pentesting_toolkit](https://github.com/ank1036official/git_pentesting_toolkit) Exploit pack for pentesters and ethical hackers.
- [**77**星][4m] [C] [angelkitty/computer-virus](https://github.com/angelkitty/computer-virus)
-- [**77**星][12d] [HTML] [android-x86/android-x86.github.io](https://github.com/android-x86/android-x86.github.io) Official Website for Android-x86 Project
-- [**76**星][14d] [C] [hasherezade/module_overloading](https://github.com/hasherezade/module_overloading) A more stealthy variant of "DLL hollowing"
-- [**76**星][23d] [stonedreamforest/mirage](https://github.com/stonedreamforest/mirage) kernel-mode Anti-Anti-Debug plugin. based on intel vt-x && ept technology
-- [**76**星][1m] [C++] [foxhex0ne/hyperviper](https://github.com/foxhex0ne/hyperviper) Toolkit for Hyper-V security research
+- [**77**星][3d] [HTML] [android-x86/android-x86.github.io](https://github.com/android-x86/android-x86.github.io) Official Website for Android-x86 Project
+- [**76**星][9m] [C] [iaik/cache_template_attacks](https://github.com/iaik/cache_template_attacks) This repository contains several tools to perform Cache Template Attacks
+- [**76**星][2y] [Py] [galkan/tools](https://github.com/galkan/tools) Tools that are related to pentest and network security
+- [**76**星][2y] [Go] [mushorg/go-dpi](https://github.com/mushorg/go-dpi) Application layer protocol identification of traffic flows
+- [**76**星][1m] [akenofu/oscp-cheat-sheet](https://github.com/akenofu/oscp-cheat-sheet) This is my OSCP cheat sheet made by combining a lot of different resources online with a little bit of tweaking. I used this cheat sheet during my exam (Fri, 13 Sep 2019) and during the labs. I can proudly say it helped me pass so I hope it can help you as well ! Good Luck and Try Harder
- [**76**星][8y] [Py] [ts-way/gerix-wifi-cracker](https://github.com/ts-way/gerix-wifi-cracker) A graphical user interface for aircrack-ng and pyrit.
- [**76**星][10m] [Py] [ztgrace/red_team_telemetry](https://github.com/ztgrace/red_team_telemetry)
+- [**76**星][5m] [JS] [zencashofficial/arizen](https://github.com/zencashofficial/arizen) Arizen is the API wallet for Horizen with encrypted and only locally stored files!
- [**76**星][3y] [C#] [zcgonvh/cve-2017-7269-tool](https://github.com/zcgonvh/cve-2017-7269-tool) CVE-2017-7269 to webshell or shellcode loader
+- [**76**星][5y] [C++] [yveaux/nrf24_sniffer](https://github.com/yveaux/nrf24_sniffer) Sniffer for Nordic NRF24L01+ modules with MySensors support
+- [**76**星][4m] [Go] [yashpl/mongobuster](https://github.com/yashpl/mongobuster) Hunt Open MongoDB instances
- [**76**星][2y] [Ruby] [xc0d3rz/metasploit-apk-embed-payload](https://github.com/xc0d3rz/metasploit-apk-embed-payload) Embed a Metasploit Payload in an Original .Apk File
-- [**76**星][12d] [C++] [versprite/research](https://github.com/versprite/research) VerSprite Security Research
- [**76**星][5y] [PHP] [v0s/plus22](https://github.com/v0s/plus22) Tool to analyze 64-bit binaries with 32-bit Hex-Rays Decompiler
-- [**76**星][3y] [C] [tinysec/iathook](https://github.com/tinysec/iathook) windows kernelmode and usermode IAT hook
-- [**76**星][2y] [Py] [tezukanice/office8570](https://github.com/tezukanice/office8570) CVE20178570
+- [**76**星][2y] [Py] [threatexpress/tinyshell](https://github.com/threatexpress/tinyshell)
+- [**76**星][8m] [Py] [the-c0d3r/admin-finder](https://github.com/the-c0d3r/admin-finder) Blazing fast admin panel finder with multi-threading
- [**76**星][2y] [Py] [superponible/volatility-plugins](https://github.com/superponible/volatility-plugins) Plugins I've written for Volatility
-- [**76**星][4y] [PHP] [subtlescope/bash-ransomware](https://github.com/subtlescope/bash-ransomware) Simple Bash Rasomware for use in Cyber Exercises
-- [**76**星][14d] [CSS] [sniperoj/jeopardy-dockerfiles](https://github.com/sniperoj/jeopardy-dockerfiles)
+- [**76**星][7m] [Py] [sup3ria/atlantr](https://github.com/sup3ria/atlantr) Fastes Email:Pass Checker on the planet.
+- [**76**星][16d] [CSS] [sniperoj/jeopardy-dockerfiles](https://github.com/sniperoj/jeopardy-dockerfiles)
- [**76**星][1y] [Py] [sh4rk0-666/spykeyboard](https://github.com/sh4rk0-666/spykeyboard) keylogger which sends us the data to our gmail.
+- [**76**星][10m] [sevagas/windowsdefender_asr_bypass-offensivecon2019](https://github.com/sevagas/windowsdefender_asr_bypass-offensivecon2019) Public documents related to my talk "Bypass Windows Exploit Guard ASR" at Offensive Con 2019.
- [**76**星][5y] [ActionScript] [sethsec/crossdomain-exploitation-framework](https://github.com/sethsec/crossdomain-exploitation-framework) Everything you need to exploit overly permissive crossdomain.xml files
-- [**76**星][3y] [PHP] [secwiki/webshell-2](https://github.com/secwiki/webshell-2) Webshell
+- [**76**星][22d] [Go] [root4loot/rescope](https://github.com/root4loot/rescope) Rescope is a tool geared towards pentesters and bugbounty researchers, that aims to make life easier when defining scopes for Burp Suite and OWASP ZAP.
- [**76**星][8m] [JS] [retirejs/grunt-retire](https://github.com/retirejs/grunt-retire) Grunt plugin for retire.
-- [**76**星][7m] [C] [ret2p4nda/kernel-pwn](https://github.com/ret2p4nda/kernel-pwn)
-- [**76**星][3m] [Ruby] [r00t-3xp10it/resource_files](https://github.com/r00t-3xp10it/resource_files) mosquito - Automating reconnaissance and brute force attacks
-- [**76**星][10m] [Py] [purduepaml/trojannn](https://github.com/purduepaml/trojannn) Trojan Attack on Neural Network
-- [**76**星][2m] [Py] [pingxcpost/f-nascan-plus](https://github.com/pingxcpost/f-nascan-plus) F-NAScan-PLUS 安服资产搜集
+- [**76**星][1y] [Shell] [re4son/wsl-kali-x](https://github.com/re4son/wsl-kali-x) Tweaks to run Kali Linux desktop panels and gui apps on Windows 10
+- [**76**星][7m] [PHP] [ph-7/obfuscator-class](https://github.com/ph-7/obfuscator-class)
- [**76**星][4y] [oguzhantopgul/vezir-project](https://github.com/oguzhantopgul/vezir-project) Yet Another Linux Virtual Machine for Mobile Application Pentesting and Mobile Malware Analysis
- [**76**星][2y] [Py] [nickstadb/serialbrute](https://github.com/nickstadb/serialbrute) Java serialization brute force attack tool.
+- [**76**星][3y] [nezteb/i_hate_wordpress](https://github.com/nezteb/i_hate_wordpress) I used to hate Wordpress until I had created this repo. This is me documenting how to make WordPress not suck like everyone thinks it does.
- [**76**星][6y] [Shell] [neohapsis/suddensix](https://github.com/neohapsis/suddensix) IPV6 MITM attack tool
-- [**76**星][1y] [JS] [mtjailed/jailbreakme](https://github.com/mtjailed/jailbreakme) A webbased jailbreak solution unifying existing jailbreak me solutions and new ones.
- [**76**星][3y] [Py] [moosd/needle](https://github.com/moosd/needle) Android framework injection made easy
- [**76**星][6m] [JS] [microsoft/adfswebcustomization](https://github.com/microsoft/adfswebcustomization) A repository of useful Web Customizations for Active Directory Federation Services
- [**76**星][2y] [Py] [mgeide/poortego](https://github.com/mgeide/poortego) Open-source python project to handle the storage and linking of open-source intelligence (ala Maltego)
-- [**76**星][28d] [Crystal] [maxfierke/fincher](https://github.com/maxfierke/fincher) A steganography tool for text
-- [**76**星][7d] [Py] [lightswitch05/hosts](https://github.com/lightswitch05/hosts) Hostfile blocklist for ads and tracking, updated regularly
+- [**76**星][30d] [Crystal] [maxfierke/fincher](https://github.com/maxfierke/fincher) A steganography tool for text
- [**76**星][2m] [Py] [leveldown-security/svd-loader-ghidra](https://github.com/leveldown-security/svd-loader-ghidra)
- [**76**星][4y] [C++] [lcatro/sise_traning_ctf_re](https://github.com/lcatro/sise_traning_ctf_re) SNST Traning RE Project .华软网络安全小组逆向工程训练营,尝试以CTF 的形式来使大家可以动手训练快速提升自己的逆向工程水平.CTF 的训练程序又浅到深,没有使用太复杂的算法,在逆向的过程中遇到的难关都是在分析病毒和破解中遇到的实际情况,注重于实用.训练营还包含有源代码文件,训练程序和思路.希望可以帮助小伙伴们入门逆向工程这个神奇的世界..
- [**76**星][1y] [Shell] [kolargol/openvpn](https://github.com/kolargol/openvpn) openvpn:Shell 脚本,5分钟建立个人 VPN
- [**76**星][3y] [Py] [keithjjones/fileintel](https://github.com/keithjjones/fileintel) A modular Python application to pull intelligence about malicious files
-- [**76**星][7y] [Objective-C] [jils/flashbackchecker](https://github.com/jils/flashbackchecker) Quick and easy checker for Mac Flashback malware variants
-- [**76**星][13d] [Py] [inquest/python-sandboxapi](https://github.com/inquest/python-sandboxapi) Minimal, consistent Python API for building integrations with malware sandboxes.
+- [**76**星][7y] [ObjC] [jils/flashbackchecker](https://github.com/jils/flashbackchecker) Quick and easy checker for Mac Flashback malware variants
+- [**76**星][15d] [Py] [inquest/python-sandboxapi](https://github.com/inquest/python-sandboxapi) Minimal, consistent Python API for building integrations with malware sandboxes.
- [**76**星][6m] [Java] [incredibleindishell/exploit-code-by-me](https://github.com/incredibleindishell/exploit-code-by-me) Exploit code developed/reproduced by me
- [**76**星][4y] [hardhatdigital/rails-security-audit](https://github.com/hardhatdigital/rails-security-audit) A checklist of Rails security audit
- [**76**星][1y] [C] [gregvish/l1tf-poc](https://github.com/gregvish/l1tf-poc) L1TF (Foreshadow) VM guest to host memory read PoC
-- [**76**星][9d] [C] [greenbone/gvmd](https://github.com/greenbone/gvmd) Greenbone Vulnerability Manager
-- [**76**星][5m] [Objective-C] [google/gscxscanner](https://github.com/google/gscxscanner) iOS Accessibility Scanner
+- [**76**星][7d] [C] [greenbone/gvmd](https://github.com/greenbone/gvmd) Greenbone Vulnerability Manager
+- [**76**星][6m] [Py] [githacktools/brutedum](https://github.com/githacktools/brutedum) BruteDum - Brute Force attacks SSH, FTP, Telnet, PostgreSQL, RDP, VNC with Hydra, Medusa and Ncrack
- [**76**星][4y] [C] [gdbinit/gopher](https://github.com/gdbinit/gopher) A OS X crypto ransomware PoC
- [**76**星][1m] [Py] [foospidy/web-cve-tests](https://github.com/foospidy/web-cve-tests) A simple framework for sending test payloads for known web CVEs.
+- [**76**星][12m] [foolmitah/cve-2018-14729](https://github.com/foolmitah/cve-2018-14729) Discuz backend getshell
+- [**76**星][4y] [C++] [feross/wiresheep](https://github.com/feross/wiresheep) WireSheep shows you each user on the network and all the HTTP requests they're making in a pretty News Feed, a la Facebook.
- [**76**星][4y] [PHP] [fakhrizulkifli/defeating-php-gd-imagecreatefromgif](https://github.com/fakhrizulkifli/defeating-php-gd-imagecreatefromgif) Proof-of-concept to exploit the flaw in the PHP-GD built-in function, imagecreatefromgif()
- [**76**星][5y] [Java] [evilsocket/nikeplus-fuelband-se-reversed](https://github.com/evilsocket/nikeplus-fuelband-se-reversed) A a proof of concept application that uses BLE api and the Nike+ FuelBand SE protocol to communicate with Nike BLE devices.
+- [**76**星][3y] [Java] [ethackdotorg/orwall](https://github.com/ethackdotorg/orwall) Put your apps behind Orbot, and block all unwanted traffic in one row.
- [**76**星][4y] [Java] [enovella/jebscripts](https://github.com/enovella/jebscripts) A set of JEB Python/Java scripts for reverse engineering Android obfuscated code
-- [**76**星][6m] [Py] [enigmabridge/certbot-external-auth](https://github.com/enigmabridge/certbot-external-auth) Certbot external DNS, HTTP, TLSSNI domain validation plugin with JSON output and scriptable hooks, with Dehydrated compatibility
-- [**76**星][7d] [endermanch/malwaredatabase](https://github.com/endermanch/malwaredatabase) This repository is one of a few malware collections on the GitHub.
- [**76**星][4m] [Py] [duo-labs/apple-t2-xpc](https://github.com/duo-labs/apple-t2-xpc) Tools to explore the XPC interface of Apple's T2 chip
+- [**76**星][4y] [PHP] [dunglas/php-torcontrol](https://github.com/dunglas/php-torcontrol) PHP TorControl, a library to control TOR
- [**76**星][1y] [Go] [drael/gonetstat](https://github.com/drael/gonetstat) Netstat implementation in Go
- [**76**星][3m] [M4] [dennisyurichev/yurichev.com](https://github.com/dennisyurichev/yurichev.com) my website
- [**76**星][3y] [C] [decryptoniteteam/decryptonite](https://github.com/decryptoniteteam/decryptonite) Ransomware Detection and Mitigation Software
- [**76**星][5y] [Py] [dantangfan/ddos](https://github.com/dantangfan/ddos) ddos attact
- [**76**星][2y] [PHP] [curlyboi/hashtopus](https://github.com/curlyboi/hashtopus) Distributed wrapper around oclHashcat
-- [**76**星][7m] [PowerShell] [cottinghamd/hardeningauditor](https://github.com/cottinghamd/hardeningauditor) Scripts for comparing Microsoft Windows compliance with the ASD 1709 & Office 2016 Hardening Guides
- [**76**星][2y] [C] [brl/grlh](https://github.com/brl/grlh)
+- [**76**星][6d] [Go] [binject/binjection](https://github.com/binject/binjection) Injects additional machine instructions into various binary formats.
- [**76**星][2y] [C] [bazad/x18-leak](https://github.com/bazad/x18-leak) CVE-2018-4185: iOS 11.2-11.2.6 kernel pointer disclosure introduced by Apple's Meltdown mitigation.
-- [**76**星][6m] [TypeScript] [auth0-blog/angular-auth0-aside](https://github.com/auth0-blog/angular-auth0-aside) Aside: Angular with Auth0 and an authenticated Node API.
-- [**76**星][1y] [Py] [asherags/amzsear](https://github.com/asherags/amzsear) The unofficial Amazon search CLI & Python API
-- [**76**星][25d] [JS] [aqiongbei/buy_pig_plan](https://github.com/aqiongbei/buy_pig_plan) 电话攻击(电话轰炸、可代替短信轰炸)、留言攻击工具 | 随缘维护,佛系更新
+- [**76**星][25d] [Py] [bannsec/autopwn](https://github.com/bannsec/autopwn) Automate repetitive tasks for fuzzing
+- [**76**星][6m] [TS] [auth0-blog/angular-auth0-aside](https://github.com/auth0-blog/angular-auth0-aside) Aside: Angular with Auth0 and an authenticated Node API.
- [**76**星][2y] [Py] [anssi-fr/bootcode_parser](https://github.com/anssi-fr/bootcode_parser) A boot record parser that identifies known good signatures for MBR, VBR and IPL.
- [**76**星][1y] [C] [alpha1ab/win2016lpe](https://github.com/alpha1ab/win2016lpe) Windows10 & Windows Server 2016 LPE Exploit (use schedsvc!SchRpcSetSecurity())
+- [**76**星][3m] [C] [ahmadmansoor/advancedscript](https://github.com/ahmadmansoor/advancedscript) Add More Features for x64dbg Script System,with some Functions which will help Plugin Coder
- [**76**星][1m] [Py] [ab77/black.box](https://github.com/ab77/black.box) Plug-and-Play VPN router and unblocker
- [**76**星][3y] [Py] [1an0rmus/tekdefense](https://github.com/1an0rmus/tekdefense) Open Development projects for TekDefense
- [**75**星][3y] [Java] [guardianproject/cacheword](https://github.com/guardianproject/cacheword) a password caching and management service for Android
- [**75**星][3m] [ignitetechnologies/web-application-cheatsheet](https://github.com/ignitetechnologies/web-application-cheatsheet) This cheatsheet is aimed at the CTF Players and Beginners to help them understand Web Application Vulnerablity with examples.
-- [**75**星][2y] [Py] [galkan/tools](https://github.com/galkan/tools) Tools that are related to pentest and network security
+- [**75**星][3y] [C++] [x64dbg/xedparse](https://github.com/x64dbg/xedparse) A MASM-like, single-line plaintext assembler
- [**75**星][5y] [Shell] [shadowsocks/stackscript](https://github.com/shadowsocks/stackscript)
-- [**75**星][9m] [Py] [elliiot/ghidra_darknight](https://github.com/elliiot/ghidra_darknight) DarkNight theme for Ghidra
+- [**75**星][1y] [Py] [mame82/duckencoder.py](https://github.com/mame82/duckencoder.py) Python port of infamous duckencoder for RubberDucky
+- [**75**星][5m] [Dockerfile] [leezj9671/secdevices_docker](https://github.com/leezj9671/secdevices_docker) 自行编写的工作中使用到的安全设备Dockerfile
- [**75**星][3m] [ivbeg/awesome-forensicstools](https://github.com/ivbeg/awesome-forensicstools) Awesome list of digital forensic tools
+- [**75**星][9m] [Py] [daeken/ssrftest](https://github.com/daeken/ssrftest) SSRF testing tool
- [**75**星][3y] [C] [osirislab/csaw-ctf-2016-quals](https://github.com/osirislab/CSAW-CTF-2016-Quals) Repo for CSAW CTF 2016 Quals challenges
- [**75**星][6y] [Lua] [jpalanco/nmap-scada](https://github.com/jpalanco/nmap-scada) nse scripts for scada identification
- [**75**星][10m] [Rust] [easyctf/librectf](https://github.com/easyctf/librectf) CTF in a box. Minimal setup required. (not production-ready yet)
- [**75**星][2y] [Assembly] [zznop/pop-nedry](https://github.com/zznop/pop-nedry) x86-64 Windows shellcode that recreates the Jurassic Park hacking scene (Ah, ah, ah... you didn't' say the magic word!)
- [**75**星][2m] [Py] [zenix-blurryface/sneakyexe](https://github.com/zenix-blurryface/sneakyexe) Embedding a "UAC-Bypassing" function into your custom payload
-- [**75**星][5m] [JS] [zencashofficial/arizen](https://github.com/zencashofficial/arizen) Arizen is the API wallet for Horizen with encrypted and only locally stored files!
- [**75**星][3y] [ywolf/f-middlewarescan](https://github.com/ywolf/f-middlewarescan) A vulnerability detection scripts for middleware services
-- [**75**星][5y] [C++] [yveaux/nrf24_sniffer](https://github.com/yveaux/nrf24_sniffer) Sniffer for Nordic NRF24L01+ modules with MySensors support
-- [**75**星][4m] [Go] [yashpl/mongobuster](https://github.com/yashpl/mongobuster) Hunt Open MongoDB instances
+- [**75**星][1y] [Py] [x0rz/tweetentropy](https://github.com/x0rz/tweetentropy) Twitter as an extra entropy source
- [**75**星][8m] [Py] [wied03/centos-package-cron](https://github.com/wied03/centos-package-cron) A security update tool for CentOS
- [**75**星][3y] [Py] [vvalien/win_exp](https://github.com/vvalien/win_exp)
+- [**75**星][3y] [C] [vnik5287/kernel_rop](https://github.com/vnik5287/kernel_rop)
- [**75**星][3y] [C] [viralsecuritygroup/knoxout](https://github.com/viralsecuritygroup/knoxout) A PoC of KNOXout (CVE-2016-6584) - bypassing Samsung KNOX protections and root Samsung Galaxy S6 Android Device.
- [**75**星][4y] [PHP] [vidar-team/hctf2015-all-problems](https://github.com/vidar-team/hctf2015-all-problems) hctf2015 all problems and writeups from authors
- [**75**星][4m] [C++] [velocidex/c-aff4](https://github.com/velocidex/c-aff4) An AFF4 C++ implementation.
- [**75**星][3y] [Py] [va5c0/steghide-brute-force-tool](https://github.com/va5c0/steghide-brute-force-tool) Execute a brute force attack with Steghide to file with hide information and password established
- [**75**星][2y] [Java] [unchartedsoftware/aperture-tiles](https://github.com/unchartedsoftware/aperture-tiles) Aperture-Tiles uses familiar web-based map interactions to allow exploration of arbitrary huge data sets.
- [**75**星][11m] [Shell] [ttffdd/xbadmanners](https://github.com/ttffdd/xbadmanners) Tool for CVE-2018-16323
+- [**75**星][2m] [Batchfile] [tresacton/passwordstealer](https://github.com/tresacton/passwordstealer) USB / CD / DVD autorun password stealer
- [**75**星][2m] [Py] [tp7309/ttdedroid](https://github.com/tp7309/ttdedroid) 一键反编译工具One key for quickly decompile apk/aar/dex/jar, support by jadx/dex2jar/enjarify/cfr.
-- [**75**星][2y] [Py] [threatexpress/tinyshell](https://github.com/threatexpress/tinyshell)
- [**75**星][5y] [C++] [sherifeldeeb/inmet](https://github.com/sherifeldeeb/inmet) A multi-purpose meterpreter executable (inline, many transports, msfpayload)
-- [**75**星][10m] [sevagas/windowsdefender_asr_bypass-offensivecon2019](https://github.com/sevagas/windowsdefender_asr_bypass-offensivecon2019) Public documents related to my talk "Bypass Windows Exploit Guard ASR" at Offensive Con 2019.
+- [**75**星][6m] [Py] [shashank-in/travisleaks](https://github.com/shashank-in/travisleaks) A tool to find sensitive keys and passwords in Travis logs
+- [**75**星][10m] [Py] [secrary/ida-scripts](https://github.com/secrary/ida-scripts) 多脚本
+ - [dumpDyn](https://github.com/secrary/ida-scripts/blob/master/dumpDyn/README.md) 保存动态分配并执行的代码的相关信息:注释、名称、断点、函数等,之后此代码在不同基址执行时使保存内容依然可用
+ - [idenLib](https://github.com/secrary/ida-scripts/blob/master/idenLib/README.md) 库函数识别
+ - [IOCTL_decode](https://github.com/secrary/ida-scripts/blob/master/IOCTL_decode.py) Windows驱动的IO控制码
+ - [XORCheck](https://github.com/secrary/ida-scripts/blob/master/XORCheck.py) check xor
+- [**75**星][1m] [C] [scriptingxss/iotgoat](https://github.com/scriptingxss/iotgoat) IoTGoat is a deliberately insecure firmware based on OpenWrt.
- [**75**星][2y] [Py] [safebreach-labs/spacebin](https://github.com/safebreach-labs/spacebin) Spacebin is a proof-of-concept malware that exfiltrates data (from No Direct Internet Access environments) via triggering AV on the endpoint and then communicating back from the AV's cloud component.
-- [**75**星][6m] [Py] [s2e/docs](https://github.com/s2e/docs) Documentation and Quick Start Guides for the S2E Symbolic Execution Platform
+- [**75**星][5d] [Py] [s2e/docs](https://github.com/s2e/docs) Documentation and Quick Start Guides for the S2E Symbolic Execution Platform
- [**75**星][2y] [C] [rtlsdrblog/tempestsdr](https://github.com/rtlsdrblog/tempestsdr) Remote video eavesdropping using a software-defined radio platform
-- [**75**星][20d] [Go] [root4loot/rescope](https://github.com/root4loot/rescope) Rescope is a tool geared towards pentesters and bugbounty researchers, that aims to make life easier when defining scopes for Burp Suite and OWASP ZAP.
-- [**75**星][1y] [Shell] [re4son/wsl-kali-x](https://github.com/re4son/wsl-kali-x) Tweaks to run Kali Linux desktop panels and gui apps on Windows 10
+- [**75**星][4y] [Shell] [rossmairm/pentools](https://github.com/rossmairm/pentools) This is a bundle of python and bash penetration testing tools for recon and information gathering.
+- [**75**星][1y] [ObjC] [ret2/p2o_2018](https://github.com/ret2/p2o_2018)
- [**75**星][5y] [C++] [quangnh89/ollycapstone](https://github.com/quangnh89/ollycapstone) This is a plugin for OllyDbg 1.10 to replace the old disasm engine by Capstone disassembly/disassembler framework.
-- [**75**星][4y] [PowerShell] [pwdrkeg/honeyport](https://github.com/pwdrkeg/honeyport) A powershell script for creating a Windows honeyport.
+- [**75**星][4y] [PS] [pwdrkeg/honeyport](https://github.com/pwdrkeg/honeyport) A powershell script for creating a Windows honeyport.
- [**75**星][2y] [JS] [polaris64/web_exploit_detector](https://github.com/polaris64/web_exploit_detector) web_exploit_detector:检测 Web hosting 环境中可能的感染、恶意代码和可疑文件。Node.js 应用程序。
-- [**75**星][7m] [PHP] [ph-7/obfuscator-class](https://github.com/ph-7/obfuscator-class)
-- [**75**星][2y] [Py] [nyloner/proxypool](https://github.com/nyloner/proxypool) 高匿代理IP池
+- [**75**星][18d] [C] [ntraiseharderror/antimalware-research](https://github.com/ntraiseharderror/antimalware-research) Research on Anti-malware and other related security solutions
+- [**75**星][18d] [Py] [nightwatchcybersecurity/truegaze](https://github.com/nightwatchcybersecurity/truegaze) Static analysis tool for Android/iOS apps focusing on security issues outside the source code
+- [**75**星][3d] [C] [naworkcaj/bdvl](https://github.com/naworkcaj/bdvl) LD_PRELOAD Linux rootkit (x86 & ARM)
- [**75**星][9m] [misterch0c/crimeboards](https://github.com/misterch0c/crimeboards) A list of private and public (more or less) blackhat boards
- [**75**星][6m] [C] [milabs/khook](https://github.com/milabs/khook) Linux Kernel hooking engine (x86)
- [**75**星][3y] [magoo/incident-response-plan](https://github.com/magoo/incident-response-plan) Boilerplate Incident Response Plan from "Starting Up Security"
-- [**75**星][28d] [Py] [m8r0wn/pymeta](https://github.com/m8r0wn/pymeta) 搜索某域名网站的文件,下载并提取元数据, 例如: 域名、用户名、软件版本号、命名约定等
-- [**75**星][18d] [Jupyter Notebook] [k-vitali/malware-misc-re](https://github.com/k-vitali/malware-misc-re) Miscellaneous Malware RE
+- [**75**星][30d] [Py] [m8r0wn/pymeta](https://github.com/m8r0wn/pymeta) 搜索某域名网站的文件,下载并提取元数据, 例如: 域名、用户名、软件版本号、命名约定等
- [**75**星][4m] [AutoIt] [jschicht/logfileparser](https://github.com/jschicht/logfileparser) Parser for $LogFile on NTFS
- [**75**星][1y] [HTML] [johnlatwc/msrc](https://github.com/johnlatwc/msrc) Scripts for interacting with MSRC portal data
- [**75**星][11m] [JS] [j0nathanj/publications](https://github.com/j0nathanj/publications) Slides, exploits and PoCs :)
@@ -9869,73 +10480,65 @@ networking routines
- [**75**星][12m] [C++] [hzqst/fuckcertverifytimevalidity](https://github.com/hzqst/fuckcertverifytimevalidity) This tiny project prevents the signtool from verifing cert time validity and let you sign your bin with outdated cert without changing system time manually
- [**75**星][8m] [Py] [huaisha1224/shadowsocks-client](https://github.com/huaisha1224/shadowsocks-client) The ShadowSocks client is a support multiple server port and password
- [**75**星][1y] [C++] [hrbust86/hookmsrbysvm](https://github.com/hrbust86/hookmsrbysvm) hook msr by amd svm
-- [**75**星][7d] [C] [horsicq/nfdx64dbg](https://github.com/horsicq/nfdx64dbg) Plugin for x64dbg Linker/Compiler/Tool detector.
+- [**75**星][14d] [Py] [highmeh/lure](https://github.com/highmeh/lure) Lure - User Recon Automation for GoPhish
- [**75**星][6y] [Py] [hiddenillusion/ipinfo](https://github.com/hiddenillusion/ipinfo) Searches various online resources to try and get as much info about an IP/domain as possible.
-- [**75**星][3y] [PowerShell] [harmj0y/misc-powershell](https://github.com/harmj0y/misc-powershell) Misc. PowerShell scripts
+- [**75**星][3y] [PS] [harmj0y/misc-powershell](https://github.com/harmj0y/misc-powershell) Misc. PowerShell scripts
+- [**75**星][6m] [Py] [hameda2/zydra](https://github.com/hameda2/zydra)
- [**75**星][1y] [Py] [hadojae/data](https://github.com/hadojae/data) Credential Phish Analysis and Automation
- [**75**星][3m] [gouveaheitor/awesome-biohacking](https://github.com/gouveaheitor/awesome-biohacking)
-- [**75**星][6m] [Py] [githacktools/brutedum](https://github.com/githacktools/brutedum) BruteDum - Brute Force attacks SSH, FTP, Telnet, PostgreSQL, RDP, VNC with Hydra, Medusa and Ncrack
-- [**75**星][15d] [Py] [fopina/kdbxpasswordpwned](https://github.com/fopina/kdbxpasswordpwned) Check KeePass passwords against
-- [**75**星][12m] [foolmitah/cve-2018-14729](https://github.com/foolmitah/cve-2018-14729) Discuz backend getshell
+- [**75**星][17d] [Py] [fopina/kdbxpasswordpwned](https://github.com/fopina/kdbxpasswordpwned) Check KeePass passwords against
- [**75**星][7y] [JS] [evilpacket/xss.io](https://github.com/evilpacket/xss.io)
- [**75**星][8m] [edelahozuah/awesome-wifi-security](https://github.com/edelahozuah/awesome-wifi-security) A collection of awesome resources related to 802.11 security, tools and other things
+- [**75**星][4d] [Java] [dschadow/javasecurity](https://github.com/dschadow/javasecurity) Java web and command line applications demonstrating various security topics
- [**75**星][4y] [Java] [directdefense/superserial](https://github.com/directdefense/superserial) SuperSerial - Burp Java Deserialization Vulnerability Identification
+- [**75**星][5y] [C] [dinotools/sslscan](https://github.com/dinotools/sslscan) SSLScan tests SSL/TLS enabled services to discover supported cipher suites
+- [**75**星][2y] [C] [dadas190/heavens-gate-2.0](https://github.com/dadas190/heavens-gate-2.0) Executes 64bit code from a 32bit process
- [**75**星][3m] [Py] [coldzer0/ida-for-delphi](https://github.com/coldzer0/ida-for-delphi) 针对Delphi的IDAPython脚本,从 Event Constructor (VCL)中获取所有函数名称
-- [**75**星][24d] [C++] [clrx/clrx-mirror](https://github.com/clrx/clrx-mirror) CLRadeonExtender (GCN assembler, Radeon assembler) mirror
-- [**75**星][23d] [Py] [bannsec/autopwn](https://github.com/bannsec/autopwn) Automate repetitive tasks for fuzzing
+- [**75**星][26d] [C++] [clrx/clrx-mirror](https://github.com/clrx/clrx-mirror) CLRadeonExtender (GCN assembler, Radeon assembler) mirror
+- [**75**星][2y] [Go] [calidog/certstream-go](https://github.com/calidog/certstream-go) Go library for connecting to CertStream
- [**75**星][3y] [Py] [antojoseph/diff-droid](https://github.com/antojoseph/diff-droid) 使用 Frida对手机渗透测试的若干脚本
-- [**75**星][3m] [C] [ahmadmansoor/advancedscript](https://github.com/ahmadmansoor/advancedscript) Add More Features for x64dbg Script System,with some Functions which will help Plugin Coder
- [**75**星][4y] [Py] [ahhh/reverse_https_bot](https://github.com/ahhh/reverse_https_bot) A python based https remote access trojan for penetration testing
-- [**75**星][6m] [Py] [abaykan/53r3n17y](https://github.com/abaykan/53r3n17y) Python based script for Information Gathering.
-- [**74**星][11m] [Java] [thelinuxchoice/droidtracker](https://github.com/thelinuxchoice/droidtracker) Script to generate an Android App to track location in real time
+- [**74**星][3m] [cisco-talos/snort-faq](https://github.com/cisco-talos/snort-faq) Snort FAQ
- [**74**星][7y] [Ruby] [pentestgeek/scripts](https://github.com/pentestgeek/scripts) A collection of useful scripts for penetration testers
-- [**74**星][3y] [C++] [x64dbg/xedparse](https://github.com/x64dbg/xedparse) A MASM-like, single-line plaintext assembler
+- [**74**星][3y] [wtsxdev/android-security-list](https://github.com/wtsxdev/android-security-list) Collection of Android security related resources
- [**74**星][3y] [HTML] [dxa4481/damn-vulnerable-redis-container](https://github.com/dxa4481/damn-vulnerable-redis-container) An example of obtaining RCE via Redis and CSRF
-- [**74**星][1m] [akenofu/oscp-cheat-sheet](https://github.com/akenofu/oscp-cheat-sheet) This is my OSCP cheat sheet made by combining a lot of different resources online with a little bit of tweaking. I used this cheat sheet during my exam (Fri, 13 Sep 2019) and during the labs. I can proudly say it helped me pass so I hope it can help you as well ! Good Luck and Try Harder
-- [**74**星][9m] [Py] [daeken/ssrftest](https://github.com/daeken/ssrftest) SSRF testing tool
+- [**74**星][24d] [JS] [andreafioraldi/frida-js-afl-instr](https://github.com/andreafioraldi/frida-js-afl-instr) An example on how to do performant in-memory fuzzing with AFL++ and Frida
+- [**74**星][1m] [Py] [boypt/vmess2json](https://github.com/boypt/vmess2json) Scripts parse vmess:// links into v2ray config json and vice versa.
- [**74**星][5y] [Py] [ivanlei/airodump-iv](https://github.com/ivanlei/airodump-iv) A python implementation of airodump-ng
- [**74**星][1m] [Go] [edoverflow/csp](https://github.com/edoverflow/csp) Given a list of hosts, this small utility fetches all whitelisted domains from the hosts' CSPs.
-- [**74**星][2m] [C] [iqiyi/qnsm](https://github.com/iqiyi/qnsm) QNSM is network security monitoring framework based on DPDK.
- [**74**星][5m] [HTML] [ph0en1x-xmu/awesome-ctf-book](https://github.com/Ph0en1x-XMU/Awesome-CTF-Book) Study CTF, study security
- [**74**星][4m] [Py] [lazorfuzz/python-hacklib](https://github.com/lazorfuzz/python-hacklib) hacklib - pentesting, port scanning, and logging in anywhere with Python
- [**74**星][2y] [C] [deeptechlabs/meltdown](https://github.com/deeptechlabs/meltdown) Local Exploit for Meltdown
- [**74**星][2y] [Py] [shmilylty/cheetah-gui](https://github.com/shmilylty/cheetah-gui) Cheetah GUI
- [**74**星][3y] [C++] [avatarone/avatar-python](https://github.com/avatarone/avatar-python) Dynamic security analysis of embedded systems’ firmwares
-- [**74**星][2m] [Rust] [mozilla/authenticator-rs](https://github.com/mozilla/authenticator-rs) Rust library to interact with Security Keys, used by Firefox
- [**74**星][1y] [Py] [yoda66/androidembedit](https://github.com/yoda66/androidembedit) A quick and dirty python script to embed a Metasploit generated APK file into another APK for fun.
-- [**74**星][1y] [Py] [x0rz/tweetentropy](https://github.com/x0rz/tweetentropy) Twitter as an extra entropy source
- [**74**星][8m] [C] [vanhoefm/dragonslayer](https://github.com/vanhoefm/dragonslayer)
-- [**74**星][1m] [Batchfile] [tresacton/passwordstealer](https://github.com/tresacton/passwordstealer) USB / CD / DVD autorun password stealer
+- [**74**星][4y] [Visual Basic .NET] [twi1ight/ad-pentest-script](https://github.com/twi1ight/ad-pentest-script) Active Directory pentest scripts
- [**74**星][1y] [tianjifou/ios-security-attack-and-prevent](https://github.com/tianjifou/ios-security-attack-and-prevent) iOS安全攻与防,详细的列出了,在iOS开发中,项目会存在的安全漏洞以及解决办法。
- [**74**星][5y] [Py] [tandasat/winioctldecoder](https://github.com/tandasat/winioctldecoder) IDA插件,将Windows设备IO控制码解码成为DeviceType, FunctionCode, AccessType, MethodType.
+- [**74**星][5m] [Jupyter Notebook] [surajr/url-classification](https://github.com/surajr/url-classification) Machine learning to classify Malicious (Spam)/Benign URL's
- [**74**星][3y] [Py] [spotify/gcp-firewall-enforcer](https://github.com/spotify/gcp-firewall-enforcer) A toolbox to enforce firewall rules across multiple GCP projects.
-- [**74**星][6m] [Py] [shashank-in/travisleaks](https://github.com/shashank-in/travisleaks) A tool to find sensitive keys and passwords in Travis logs
-- [**74**星][3y] [Py] [securitystreak/security-scripts](https://github.com/securitystreak/security-scripts) A collection of public offensive and defensive security related scripts for InfoSec students.
-- [**74**星][10m] [Py] [secrary/ida-scripts](https://github.com/secrary/ida-scripts) 多脚本
- - [dumpDyn](https://github.com/secrary/ida-scripts/blob/master/dumpDyn/README.md) 保存动态分配并执行的代码的相关信息:注释、名称、断点、函数等,之后此代码在不同基址执行时使保存内容依然可用
- - [idenLib](https://github.com/secrary/ida-scripts/blob/master/idenLib/README.md) 库函数识别
- - [IOCTL_decode](https://github.com/secrary/ida-scripts/blob/master/IOCTL_decode.py) Windows驱动的IO控制码
- - [XORCheck](https://github.com/secrary/ida-scripts/blob/master/XORCheck.py) check xor
-- [**74**星][1m] [C] [scriptingxss/iotgoat](https://github.com/scriptingxss/iotgoat) IoTGoat is a deliberately insecure firmware based on OpenWrt.
-- [**74**星][1y] [Java] [schollz/find3-android-scanner](https://github.com/schollz/find3-android-scanner) An android app that scans Bluetooth and WiFi for FIND3
-- [**74**星][4y] [Shell] [rossmairm/pentools](https://github.com/rossmairm/pentools) This is a bundle of python and bash penetration testing tools for recon and information gathering.
-- [**74**星][1y] [Objective-C] [ret2/p2o_2018](https://github.com/ret2/p2o_2018)
+- [**74**星][7m] [PHP] [s9mf/s9mf-php-webshell-bypass](https://github.com/s9mf/s9mf-php-webshell-bypass) 为方便WAF入库的项目 | 分享PHP免杀大马 | 菜是原罪 | 多姿势(假的就一个)
+- [**74**星][3y] [Py] [ropnop/xxetimes](https://github.com/ropnop/xxetimes) An interactive OOB XXE data exfiltration tool
- [**74**星][1y] [Py] [pielco11/dot](https://github.com/pielco11/dot) Darknet OSINT Transform
-- [**74**星][12d] [Py] [patrowl/patrowlengines](https://github.com/patrowl/patrowlengines) PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform
+- [**74**星][1m] [Rust] [phayes/sidefuzz](https://github.com/phayes/sidefuzz) Fuzzer to automatically find side-channel (timing) vulnerabilities
+- [**74**星][6d] [Py] [patrowl/patrowlengines](https://github.com/patrowl/patrowlengines) PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform
- [**74**星][3y] [Java] [panagiotisdrakatos/javaransomware](https://github.com/panagiotisdrakatos/javaransomware) Simple Ransomware Tool in Pure Java
- [**74**星][8m] [Dockerfile] [owasp/sonarqube](https://github.com/owasp/sonarqube) OWASP SonarQube Project
-- [**74**星][11m] [Visual Basic] [nyan-x-cat/lime-miner](https://github.com/nyan-x-cat/lime-miner) a simple hidden silent XMR miner.
+- [**74**星][11m] [Visual Basic .NET] [nyan-x-cat/lime-miner](https://github.com/nyan-x-cat/lime-miner) a simple hidden silent XMR miner.
- [**74**星][3m] [C++] [noddos/noddos](https://github.com/noddos/noddos) noddos:Noddos 客户端,监视家庭或企业网络中的网络流量,识别 IoT 和其他设备,并将特定设备的ACL应用于已识别设备的流量。 其目标是识别并阻止来自已被黑客控制的设备的流氓流量(例如在 DDOS 攻击的流量)
- [**74**星][3y] [JS] [nmaier/about-addons-memory](https://github.com/nmaier/about-addons-memory) Tiny prototype Firefox extension presenting the memory usage of all active add-ons
-- [**74**星][16d] [Py] [nightwatchcybersecurity/truegaze](https://github.com/nightwatchcybersecurity/truegaze) Static analysis tool for Android/iOS apps focusing on security issues outside the source code
-- [**74**星][4m] [Go] [netxfly/x-proxy](https://github.com/netxfly/x-proxy) honeypot proxy
-- [**74**星][3m] [PowerShell] [mdavis332/domainpasswordspray](https://github.com/mdavis332/domainpasswordspray) DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. It will automatically generate a userlist from the domain which excludes accounts that are expired, disabled locked out, or within 1 lockout attempt.
+- [**74**星][2y] [JS] [mtjailed/unjailme](https://github.com/mtjailed/unjailme) A sandbox escape based on the proof-of-concept (CVE-2018-4087) by Rani Idan (Zimperium)
+- [**74**星][3m] [PS] [mdavis332/domainpasswordspray](https://github.com/mdavis332/domainpasswordspray) DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. It will automatically generate a userlist from the domain which excludes accounts that are expired, disabled locked out, or within 1 lockout attempt.
- [**74**星][6y] [Py] [matir/pwnableweb](https://github.com/matir/pwnableweb) PwnableWeb is a suite of web applications for use in information security training.
+- [**74**星][3y] [Go] [matiasinsaurralde/transports](https://github.com/matiasinsaurralde/transports) A HTTP proxy that aims to support different transports.
- [**74**星][2y] [C] [makefu/dnsmap](https://github.com/makefu/dnsmap) fork of
- [**74**星][6y] [l3m0n/xss-filter-evasion-cheat-sheet-cn](https://github.com/l3m0n/xss-filter-evasion-cheat-sheet-cn) XSS_Filter_Evasion_Cheat_Sheet 中文版
+- [**74**星][3y] [HTML] [l3m0n/wooyun-wiki](https://github.com/l3m0n/wooyun-wiki) wiki.wooyun.org的部分快照网页
+- [**74**星][2y] [C++] [kasperskylab/forensicstools](https://github.com/kasperskylab/forensicstools) Tools for DFIR
- [**74**星][4y] [Py] [integrissecurity/carbonator](https://github.com/integrissecurity/carbonator) Integris Security Carbonator - The Burp Suite Pro extension that automates scope, spider & scan from the command line. Carbonator helps automate the vulnerability scanning of web applications. Either 1 or 100 web applications can be scanned by issuing a single command. Carbonator is now available from within Burp Suite Pro through the BApp Store.
-- [**74**星][1m] [ignitetechnologies/vulnhub-ctf-writeups](https://github.com/ignitetechnologies/vulnhub-ctf-writeups) This cheasheet is aimed at the CTF Players and Beginners to help them sort Vulnhub Labs. This list contains all the writeups available on hackingarticles.
-- [**74**星][6m] [Py] [hameda2/zydra](https://github.com/hameda2/zydra)
+- [**74**星][28d] [grapheneos/platform_manifest](https://github.com/grapheneos/platform_manifest) Repo manifest for the GrapheneOS mobile privacy and security hardening project.
+- [**74**星][2y] [Py] [gento/dionaea](https://github.com/gento/dionaea) dionaea:低交互蜜罐
- [**74**星][3y] [Py] [ganapati/crawlic](https://github.com/ganapati/crawlic) Web recon tool (find temporary files, parse robots.txt, search some folders, google dorks and search domains hosted on same server)
- [**74**星][6y] [C++] [gamebooster/dota2-lua-engine](https://github.com/gamebooster/dota2-lua-engine) Lua Scripting Engine for Dota 2
- [**74**星][2y] [C#] [foxglovesec/hpwn](https://github.com/foxglovesec/hpwn) HP printer security research code
@@ -9943,166 +10546,177 @@ networking routines
- [**74**星][7m] [Makefile] [florianutz/ubuntu1604-cis](https://github.com/florianutz/ubuntu1604-cis) Ubuntu CIS Hardening Ansible Role
- [**74**星][2y] [C++] [eyeofra/winconmon](https://github.com/eyeofra/winconmon) Windows Console Monitoring
- [**74**星][4y] [Py] [einstein-/poodle](https://github.com/einstein-/poodle) A Proof of Concept for the POODLE vulnerability in SSLv3
-- [**74**星][27d] [Java] [dschadow/javasecurity](https://github.com/dschadow/javasecurity) Java web and command line applications demonstrating various security topics
+- [**74**星][2m] [Shell] [edu4rdshl/tor-router](https://github.com/edu4rdshl/tor-router) A tool that allow you to make TOR your default gateway and send all internet connections under TOR (as transparent proxy) for increase privacy/anonymity without extra unnecessary code.
- [**74**星][1y] [Py] [dobin/ffw](https://github.com/dobin/ffw) A fuzzing framework for network servers
-- [**74**星][5y] [C] [dinotools/sslscan](https://github.com/dinotools/sslscan) SSLScan tests SSL/TLS enabled services to discover supported cipher suites
-- [**74**星][2m] [Ruby] [devunwired/apktools](https://github.com/devunwired/apktools) Ruby library for reading/parsing APK resource data
-- [**74**星][1y] [PowerShell] [decoder-it/psportfwd](https://github.com/decoder-it/psportfwd) psportfwd: PowerShell编写的端口转发工具, 无需admin权限
-- [**74**星][11d] [Ruby] [david942j/heapinfo](https://github.com/david942j/heapinfo) An interactive memory info for pwning / exploiting
+- [**74**星][3m] [Lua] [dns-oarc/drool](https://github.com/dns-oarc/drool) DNS Replay Tool
+- [**74**星][5y] [Py] [dmayer/time_trial](https://github.com/dmayer/time_trial) Time Trial - A tool for performing feasibility analyses of timing attacks
+- [**74**星][4y] [Go] [dlion/guesstor](https://github.com/dlion/guesstor) Bruteforces [.onion] domains
+- [**74**星][3m] [Ruby] [devunwired/apktools](https://github.com/devunwired/apktools) Ruby library for reading/parsing APK resource data
+- [**74**星][13d] [Ruby] [david942j/heapinfo](https://github.com/david942j/heapinfo) An interactive memory info for pwning / exploiting
- [**74**星][6m] [Py] [cve-search/via4cve](https://github.com/cve-search/via4cve) Vulnerability Information Aggregator for CVEs
- [**74**星][8m] [Go] [coreos/torcx](https://github.com/coreos/torcx) torcx is a boot-time addon manager for immutable systems
- [**74**星][3y] [Py] [compoterhacker/mehrai](https://github.com/compoterhacker/mehrai) docker based telnet honeypot
-- [**74**星][4m] [Shell] [chunkingz/linsetmv1-2](https://github.com/chunkingz/linsetmv1-2) Linset is a WPA/WPA2 phishing tool (evil twin)
-- [**74**星][2y] [Go] [calidog/certstream-go](https://github.com/calidog/certstream-go) Go library for connecting to CertStream
+- [**74**星][10d] [C] [certificate-helper/tls-inspector](https://github.com/certificate-helper/tls-inspector) Easily view and inspect X.509 certificates on your iOS device.
- [**74**星][2y] [Py] [busindre/dumpzilla](https://github.com/busindre/dumpzilla) Extract all forensic interesting information of Firefox, Iceweasel and Seamonkey browsers
- [**74**星][7m] [Py] [bannsec/stegoveritas](https://github.com/bannsec/stegoveritas) Yet another Stego Tool
+- [**74**星][2y] [Assembly] [azeria-labs/arm-assembly-examples](https://github.com/azeria-labs/arm-assembly-examples) Snippets from ARM assembly tutorials
- [**74**星][2m] [Py] [anvilventures/lookinsidethebox](https://github.com/anvilventures/lookinsidethebox) Breaks the encryption and obfuscation layers that Dropbox applies to their modified Python interpreter.
+- [**74**星][2y] [HTML] [anquanquantao/pentraining](https://github.com/anquanquantao/pentraining) 一个网络安全基础知识的教程。内容比较杂,好在都是实验视频和工具提供,可以自行动手完成实验。
+- [**74**星][2y] [Batchfile] [aghorler/windows-10-hardening](https://github.com/aghorler/windows-10-hardening) An admittedly frivolous (and infrequently updated) attempt to harden Windows 10.
+- [**74**星][2y] [233boy/chinaip](https://github.com/233boy/chinaip) 中国大陆 IP 列表(已优化)
- [**74**星][4m] [C++] [0xeb/ida-qscripts](https://github.com/0xeb/ida-qscripts) IDA“最近脚本/执行脚本”的进化版
+- [**74**星][8m] [Go] [0x9ef/golang-uacbypasser](https://github.com/0x9ef/golang-uacbypasser) UAC bypass techniques implemented and written in Go
+- [**73**星][23d] [Py] [nict-csl/exist](https://github.com/nict-csl/exist) EXIST is a web application for aggregating and analyzing cyber threat intelligence.
+- [**73**星][13d] [Py] [openscap/openscap-daemon](https://github.com/openscap/openscap-daemon) Manages continuous scans of your infrastructure
- [**73**星][5y] [C] [cloudsec/exploit](https://github.com/cloudsec/exploit) Some kernel exploit i wrote
-- [**73**星][3y] [wtsxdev/android-security-list](https://github.com/wtsxdev/android-security-list) Collection of Android security related resources
- [**73**星][3y] [Py] [programa-stic/hexag00n](https://github.com/programa-stic/hexag00n) Hexag00n: A collection of reverse engineering tools for the Qualcomm Digital Signal Proccesor (QDSP6)
- [**73**星][4y] [Py] [veil-framework/veil-catapult](https://github.com/veil-framework/veil-catapult) Veil Catapult is no longer supported
-- [**73**星][17d] [payloadbox/sql-injection-payload-list](https://github.com/payloadbox/sql-injection-payload-list)
-- [**73**星][9m] [C#] [checkymander/sharp-smbexec](https://github.com/checkymander/Sharp-SMBExec) SMBExec C# module
+- [**73**星][20d] [yingtongdou/graph-adversarial-learning-literature](https://github.com/yingtongdou/graph-adversarial-learning-literature) A curated list of adversarial learning papers on graph-structured data.
+- [**73**星][10m] [C#] [checkymander/sharp-smbexec](https://github.com/checkymander/Sharp-SMBExec) SMBExec C# module
+- [**73**星][3m] [Py] [acmesec/ctfcracktools-v2](https://github.com/Acmesec/CTFCrackTools-V2) China's first CTFTools framework.中国国内首个CTF工具框架,旨在帮助CTFer快速攻克难关
- [**73**星][4y] [Shell] [ctfhacker/ctf-vagrant-64](https://github.com/ctfhacker/ctf-vagrant-64)
- [**73**星][3y] [Py] [zhanghangorg/sqlinj-ant](https://github.com/zhanghangorg/sqlinj-ant) 伪分布式SQL注入自动扫描
- [**73**星][2y] [HTML] [xuechiyaobai/v8_november_2017](https://github.com/xuechiyaobai/v8_november_2017)
- [**73**星][1y] [C++] [xrobots/robotx](https://github.com/xrobots/robotx) All the things for RobotX
- [**73**星][3y] [C] [xpn/ssh-inject](https://github.com/xpn/ssh-inject) A ptrace POC by hooking SSH to reveal provided passwords
-- [**73**星][6m] [C++] [watersalesman/aura-botnet](https://github.com/watersalesman/aura-botnet) A super portable botnet framework with a Django-based C2 server. The client is written in C++, with alternate clients written in Rust, Bash, and Powershell.
-- [**73**星][8d] [Py] [unkn0wnh4ckr/hackers-tool-kit](https://github.com/unkn0wnh4ckr/hackers-tool-kit) Its a framework filled with alot of options and hacking tools you use directly in the script from brute forcing to payload making im still adding more stuff i now have another tool out called htkl-lite its hackers-tool-kit just not as big and messy to see updates check on my instagram @tuf_unkn0wn or if there are any problems message me on insta…
-- [**73**星][4y] [Visual Basic] [twi1ight/ad-pentest-script](https://github.com/twi1ight/ad-pentest-script) Active Directory pentest scripts
+- [**73**星][7m] [C++] [watersalesman/aura-botnet](https://github.com/watersalesman/aura-botnet) A super portable botnet framework with a Django-based C2 server. The client is written in C++, with alternate clients written in Rust, Bash, and Powershell.
- [**73**星][6m] [tigaxmt/hackerone-lessons](https://github.com/tigaxmt/hackerone-lessons) Transcribed video lessons of HackerOne to pdf's
- [**73**星][2y] [Shell] [te-papa/aws-key-disabler](https://github.com/te-papa/aws-key-disabler) aws-key-disabler: 禁用超过指定日期的 AWS 访问key
+- [**73**星][2y] [Py] [sumoprojects/sumoeasyminer](https://github.com/sumoprojects/sumoeasyminer) The most easy, intuitive CPU miner for cryptonote-based cryptocurrency
- [**73**星][2y] [Java] [spiderlabs/burplay](https://github.com/spiderlabs/burplay) Burplay is a Burp Extension allowing for replaying any number of requests using same modifications definition. Its main purpose is to aid in searching for Privilege Escalation issues.
+- [**73**星][4m] [Assembly] [siguza/aprr](https://github.com/siguza/aprr) Apple hardware secrets
+- [**73**星][24d] [C++] [sidyhe/dxx](https://github.com/sidyhe/dxx) Windows Kernel Driver with C++ runtime
- [**73**星][3m] [C++] [shellvm/shellvm](https://github.com/shellvm/shellvm) A collection of LLVM transform and analysis passes to write shellcode in regular C
- [**73**星][12m] [C] [securifera/servicefu](https://github.com/securifera/servicefu) Automates credential skimming from service accounts in Windows Registry
+- [**73**星][2m] [Py] [rub-syssec/grimoire](https://github.com/rub-syssec/grimoire)
- [**73**星][3y] [C++] [rrbranco/blackhat2016](https://github.com/rrbranco/blackhat2016) Black Hat 2016 Slides, Paper and Code
-- [**73**星][3y] [Py] [ropnop/xxetimes](https://github.com/ropnop/xxetimes) An interactive OOB XXE data exfiltration tool
-- [**73**星][7d] [JS] [ralphwetzel/theonionbox](https://github.com/ralphwetzel/theonionbox) Dashboard to monitor Tor node operations
+- [**73**星][5y] [C++] [rrbranco/blackhat2012](https://github.com/rrbranco/blackhat2012) Blackhat 2012 Sample Codes
+- [**73**星][9d] [JS] [ralphwetzel/theonionbox](https://github.com/ralphwetzel/theonionbox) Dashboard to monitor Tor node operations
+- [**73**星][2y] [Py] [qianniaoge/f-scrack](https://github.com/qianniaoge/f-scrack) 一款python编写的轻量级弱口令检测脚本,目前支持以下服务:FTP、MYSQL、MSSQL、MONGODB、REDIS、TELNET、ELASTICSEARCH、POSTGRESQL。
+- [**73**星][1m] [C] [puppet-meteor/mopt-afl](https://github.com/puppet-meteor/mopt-afl) MOpt-AFL provided by the paper "MOPT: Optimized Mutation Scheduling for Fuzzers"
- [**73**星][4y] [PHP] [phith0n/b374k](https://github.com/phith0n/b374k) PHP Webshell with handy features
-- [**73**星][16d] [C] [ntraiseharderror/antimalware-research](https://github.com/ntraiseharderror/antimalware-research) Research on Anti-malware and other related security solutions
- [**73**星][3y] [PHP] [nmalcolm/ipcamshell](https://github.com/nmalcolm/ipcamshell) IP Cam Shell is a command line script for testing and exploiting a wide range of IP cameras as demonstrated by Craig Heffner in "Exploiting Surveillance Cameras Like a Hollywood Hacker". See the slides here:
- [**73**星][4y] [C] [nihilus/ida_signsrch](https://github.com/nihilus/ida_signsrch) signsrch签名匹配
- [**73**星][10m] [Py] [msuhanov/yarp](https://github.com/msuhanov/yarp) Yet another registry parser
- [**73**星][6y] [Shell] [mkottman/luacrypto](https://github.com/mkottman/luacrypto) Fork of LuaCrypto, which enables encryption and decryption through OpenSSL
- [**73**星][Py] [minisafe/microscan](https://github.com/minisafe/microscan) MicroScan 基于B/S架构微扫描器
+- [**73**星][5m] [Py] [milo2012/ipv4bypass](https://github.com/milo2012/ipv4bypass) 利用ipV6绕过安全防护
- [**73**星][4y] [Py] [marekrei/theano-tutorial](https://github.com/marekrei/theano-tutorial) Basic Theano code samples
+- [**73**星][3y] [lcatro/hacker_document](https://github.com/lcatro/hacker_document) 收集一些以前看过对于入门和进阶很有用的攻击原理文档..
+- [**73**星][2y] [C++] [koemeet/rtti-obfuscator](https://github.com/koemeet/rtti-obfuscator) Obfuscates all RTTI (Run-time type information) inside a binary
- [**73**星][4y] [Py] [johnmaguire/cardinal](https://github.com/johnmaguire/cardinal) A Python IRC bot, designed to make adding functionality quick and simple.
-- [**73**星][19d] [Py] [internetarchive/warctools](https://github.com/internetarchive/warctools) Command line tools and libraries for handling and manipulating WARC files (and HTTP contents)
+- [**73**星][1m] [HTML] [jmortega/python-pentesting](https://github.com/jmortega/python-pentesting) python-pentesting-tool
+- [**73**星][7m] [Py] [jiangsir404/pbscan](https://github.com/jiangsir404/pbscan) 基于burpsuite headless 的代理式被动扫描系统
+- [**73**星][21d] [Py] [internetarchive/warctools](https://github.com/internetarchive/warctools) Command line tools and libraries for handling and manipulating WARC files (and HTTP contents)
- [**73**星][3y] [Shell] [inquisb/unix-privesc-check](https://github.com/inquisb/unix-privesc-check) Shell script that runs on UNIX systems (tested on Solaris 9, HPUX 11, various Linux distributions, FreeBSD 6.2). It detects misconfigurations that could allow local unprivileged user to escalate to other users (e.g. root) or to access local apps (e.g. databases). This is a collaborative rework of version 1.0
-- [**73**星][26d] [grapheneos/platform_manifest](https://github.com/grapheneos/platform_manifest) Repo manifest for the GrapheneOS mobile privacy and security hardening project.
-- [**73**星][2y] [Py] [gento/dionaea](https://github.com/gento/dionaea) dionaea:低交互蜜罐
+- [**73**星][3y] [Go] [grahamedgecombe/ct-submit](https://github.com/grahamedgecombe/ct-submit) A program for submitting X.509 certificate chains to Certificate Transparency log servers.
- [**73**星][1y] [Ruby] [fbkcs/msf-elf-in-memory-execution](https://github.com/fbkcs/msf-elf-in-memory-execution) msf-elf-in-memory-execution: Metasploit模块, 用于在内存中执行ELF文件
-- [**73**星][2m] [Shell] [edu4rdshl/tor-router](https://github.com/edu4rdshl/tor-router) A tool that allow you to make TOR your default gateway and send all internet connections under TOR (as transparent proxy) for increase privacy/anonymity without extra unnecessary code.
- [**73**星][2y] [Ruby] [dyjakan/interpreter-bugs](https://github.com/dyjakan/interpreter-bugs) Fuzzing results for various interpreters.
- [**73**星][9m] [C++] [doublelabyrinth/sdokeycrypt-sys-local-privilege-elevation](https://github.com/doublelabyrinth/sdokeycrypt-sys-local-privilege-elevation) CVE-2019-9729
-- [**73**星][3m] [Lua] [dns-oarc/drool](https://github.com/dns-oarc/drool) DNS Replay Tool
-- [**73**星][4y] [Go] [dlion/guesstor](https://github.com/dlion/guesstor) Bruteforces [.onion] domains
+- [**73**星][1y] [Py] [dionach/panhunt](https://github.com/dionach/panhunt) PANhunt searches for credit card numbers (PANs) in directories.
- [**73**星][9m] [Verilog] [denandz/lpc_sniffer_tpm](https://github.com/denandz/lpc_sniffer_tpm) A low pin count sniffer for ICEStick - targeting TPM chips
+- [**73**星][1y] [PS] [decoder-it/psportfwd](https://github.com/decoder-it/psportfwd) psportfwd: PowerShell编写的端口转发工具, 无需admin权限
- [**73**星][2y] [HTML] [cyberheartmi9/payloadsallthethings](https://github.com/cyberheartmi9/payloadsallthethings)
- [**73**星][5y] [C] [cooloppo/reclass](https://github.com/cooloppo/reclass) A tool for reconstructing data types based on memory - [Outdated; use ReClassEx]
-- [**73**星][3y] [Visual Basic] [cn33liz/vbsmeter](https://github.com/cn33liz/vbsmeter) VBS Reversed TCP Meterpreter Stager
-- [**73**星][8d] [C] [certificate-helper/tls-inspector](https://github.com/certificate-helper/tls-inspector) Easily view and inspect X.509 certificates on your iOS device.
+- [**73**星][3y] [Visual Basic .NET] [cn33liz/vbsmeter](https://github.com/cn33liz/vbsmeter) VBS Reversed TCP Meterpreter Stager
- [**73**星][3y] [Py] [carlosgprado/brundlefuzz](https://github.com/carlosgprado/brundlefuzz) BrundleFuzz is a distributed fuzzer for Windows and Linux using dynamic binary instrumentation.
+- [**73**星][1y] [Java] [bit4woo/u2c](https://github.com/bit4woo/u2c) Unicode To Chinese -- U2C : A burpsuite Extender That Convert Unicode To Chinese 【Unicode编码转中文的burp插件】
- [**73**星][1y] [Batchfile] [b4rtik/hiddenpowershelldll](https://github.com/b4rtik/hiddenpowershelldll)
-- [**73**星][2y] [Assembly] [azeria-labs/arm-assembly-examples](https://github.com/azeria-labs/arm-assembly-examples) Snippets from ARM assembly tutorials
-- [**73**星][2y] [HTML] [anquanquantao/pentraining](https://github.com/anquanquantao/pentraining) 一个网络安全基础知识的教程。内容比较杂,好在都是实验视频和工具提供,可以自行动手完成实验。
-- [**72**星][6m] [Py] [golismero/openvas_lib](https://github.com/golismero/openvas_lib) OpenVAS connector for versions 6, 7, 8 and 9
+- [**73**星][7m] [Go] [audibleblink/letsproxy](https://github.com/audibleblink/letsproxy) Quickly fetch Let's Encrypt certs and serve a reverse proxy
+- [**73**星][5y] [Shell] [andrewmichaelsmith/honeypot-setup-script](https://github.com/andrewmichaelsmith/honeypot-setup-script) Honeypot (Dionaea and kippo) setup script
+- [**73**星][16d] [C++] [3gstudent/homework-of-c-language](https://github.com/3gstudent/homework-of-c-language) C/C++ code examples of my blog.
+- [**72**星][5m] [C] [zhengshoujian/darknet-yolo-segmentation](https://github.com/zhengshoujian/darknet-yolo-segmentation) This project is based on darknet to get image segmentation
+- [**72**星][9d] [Py] [golismero/openvas_lib](https://github.com/golismero/openvas_lib) OpenVAS connector for versions 6, 7, 8 and 9
- [**72**星][1y] [C] [shellphish/afl-other-arch](https://github.com/shellphish/afl-other-arch) AFL, with scripts to support other architectures.
- [**72**星][1y] [v2ray/discussion](https://github.com/v2ray/discussion) For general discussion over Project V development and usage.
- [**72**星][2y] [Go] [wallix/triplestore](https://github.com/wallix/triplestore) Nifty library to manage, query and store RDF triples. Make RDF great again!
-- [**72**星][2m] [thehive-project/cortexdocs](https://github.com/TheHive-Project/CortexDocs) Documentation of Cortex
-- [**72**星][3m] [Py] [acmesec/ctfcracktools-v2](https://github.com/Acmesec/CTFCrackTools-V2) China's first CTFTools framework.中国国内首个CTF工具框架,旨在帮助CTFer快速攻克难关
+- [**72**星][2y] [C++] [wyexe/lol_china](https://github.com/wyexe/LOL_China)
+- [**72**星][2d] [thehive-project/cortexdocs](https://github.com/TheHive-Project/CortexDocs) Documentation of Cortex
+- [**72**星][2y] [zntfdr/awesome-twitter-bots](https://github.com/zntfdr/awesome-twitter-bots) A Curated Collection of the Best Twitter Bots
- [**72**星][3y] [C++] [zcgonvh/ms16-032](https://github.com/zcgonvh/ms16-032) MS16-032(CVE-2016-0099) for SERVICE ONLY
- [**72**星][3y] [Go] [xsec-lab/x-waf-admin](https://github.com/xsec-lab/x-waf-admin) x-waf的web管理后台
- [**72**星][4y] [Pascal] [xlinshan/coldroot](https://github.com/xlinshan/coldroot) Mac OS Trojan (RAT) made with love <3
+- [**72**星][7d] [Py] [xfreed0m/smtptester](https://github.com/xfreed0m/smtptester) small python3 tool to check common vulnerabilities in SMTP servers
- [**72**星][2y] [C++] [vusec/guardion](https://github.com/vusec/guardion) Android GuardION patches to mitigate DMA-based Rowhammer attacks on ARM
- [**72**星][3y] [vrtadmin/first](https://github.com/vrtadmin/first) 函数识别和签名恢复, 带服务器
-- [**72**星][3y] [C] [vnik5287/kernel_rop](https://github.com/vnik5287/kernel_rop)
- [**72**星][2y] [C++] [vecna/sniffjoke](https://github.com/vecna/sniffjoke) a client-only layer of protection from the wiretap/sniff/IDS analysis
- [**72**星][3m] [vanhauser-thc/afl-patches](https://github.com/vanhauser-thc/afl-patches) Patches to afl to fix bugs or add enhancements
-- [**72**星][25d] [Dart] [timsneath/github-tracker](https://github.com/timsneath/github-tracker) Grabs some useful information from GitHub.
+- [**72**星][27d] [Dart] [timsneath/github-tracker](https://github.com/timsneath/github-tracker) Grabs some useful information from GitHub.
- [**72**星][3y] [C] [tillmannw/honeytrap](https://github.com/tillmannw/honeytrap) a low-interaction honeypot
- [**72**星][3y] [Perl] [tanjiti/fingerprint](https://github.com/tanjiti/fingerprint) web应用指纹识别
-- [**72**星][2y] [Objective-C] [sunweiliang/baiduyuncrack](https://github.com/sunweiliang/baiduyuncrack) iOS百度云盘 破解速度限制、去广告、去更新 无需越狱~
-- [**72**星][17d] [XSLT] [spring-cloud/spring-cloud-stream-starters](https://github.com/spring-cloud/spring-cloud-stream-starters)
-- [**72**星][17d] [Py] [skelsec/msldap](https://github.com/skelsec/msldap) 从Active Directory中获取用户对象, 并将重要内容存储在一个大型电子表格中. 用于渗透期间快速识别易受攻击的用户设置
+- [**72**星][2y] [ObjC] [sunweiliang/baiduyuncrack](https://github.com/sunweiliang/baiduyuncrack) iOS百度云盘 破解速度限制、去广告、去更新 无需越狱~
+- [**72**星][19d] [XSLT] [spring-cloud/spring-cloud-stream-starters](https://github.com/spring-cloud/spring-cloud-stream-starters)
- [**72**星][2y] [Py] [skelsec/cve-2017-12542](https://github.com/skelsec/cve-2017-12542) Test and exploit for CVE-2017-12542
-- [**72**星][4m] [Assembly] [siguza/aprr](https://github.com/siguza/aprr) Apple hardware secrets
+- [**72**星][6m] [HTML] [securityautomation/dumpthegit](https://github.com/securityautomation/dumpthegit) DumpTheGit searches through public repositories to find sensitive information uploaded to the Github repositories.
- [**72**星][3y] [Py] [scumsec/recon-ng-modules](https://github.com/scumsec/recon-ng-modules) Additional modules for recon-ng
-- [**72**星][7m] [PHP] [s9mf/s9mf-php-webshell-bypass](https://github.com/s9mf/s9mf-php-webshell-bypass) 为方便WAF入库的项目 | 分享PHP免杀大马 | 菜是原罪 | 多姿势(假的就一个)
-- [**72**星][5y] [C++] [rrbranco/blackhat2012](https://github.com/rrbranco/blackhat2012) Blackhat 2012 Sample Codes
-- [**72**星][2y] [Py] [roothaxor/ransom](https://github.com/roothaxor/ransom) Various codes related to Ransomware Developement
+- [**72**星][3y] [Py] [roothaxor/ransom](https://github.com/roothaxor/ransom) Various codes related to Ransomware Developement
+- [**72**星][1y] [JS] [rameshaditya/ducky](https://github.com/rameshaditya/ducky) Chrome extension to overlay a (super adorable) rubber duck, as a virtual companion during rubber duck debugging.
- [**72**星][6m] [Py] [pyobfx/pyobfx](https://github.com/pyobfx/pyobfx) Python Obfuscator & Packer
-- [**72**星][30d] [C] [puppet-meteor/mopt-afl](https://github.com/puppet-meteor/mopt-afl) MOpt-AFL provided by the paper "MOPT: Optimized Mutation Scheduling for Fuzzers"
-- [**72**星][14d] [C++] [powerdns/weakforced](https://github.com/powerdns/weakforced) Anti-Abuse for servers at authentication time
-- [**72**星][1m] [Rust] [phayes/sidefuzz](https://github.com/phayes/sidefuzz) Fuzzer to automatically find side-channel (timing) vulnerabilities
-- [**72**星][8m] [C++] [niklasb/bspfuzz](https://github.com/niklasb/bspfuzz)
-- [**72**星][21d] [C] [naworkcaj/bdvl](https://github.com/naworkcaj/bdvl) LD_PRELOAD Linux rootkit (x86 & ARM)
-- [**72**星][4y] [Objective-C] [mubix/ditto](https://github.com/mubix/ditto) Binary resource copier
-- [**72**星][2y] [JS] [mtjailed/unjailme](https://github.com/mtjailed/unjailme) A sandbox escape based on the proof-of-concept (CVE-2018-4087) by Rani Idan (Zimperium)
-- [**72**星][5m] [Py] [milo2012/ipv4bypass](https://github.com/milo2012/ipv4bypass) 利用ipV6绕过安全防护
-- [**72**星][6y] [PowerShell] [mattifestation/powerworm](https://github.com/mattifestation/powerworm) Analysis, detection, and removal of the "Power Worm" PowerShell-based malware
+- [**72**星][2m] [JS] [purplei2p/i2pdbrowser](https://github.com/purplei2p/i2pdbrowser) i2pd browser bundle
+- [**72**星][16d] [C++] [powerdns/weakforced](https://github.com/powerdns/weakforced) Anti-Abuse for servers at authentication time
+- [**72**星][6y] [Py] [piccimario/iphone-backup-analyzer-2](https://github.com/piccimario/iphone-backup-analyzer-2) iPBA, Qt version
+- [**72**星][9m] [C++] [niklasb/bspfuzz](https://github.com/niklasb/bspfuzz)
+- [**72**星][4y] [ObjC] [mubix/ditto](https://github.com/mubix/ditto) Binary resource copier
+- [**72**星][6y] [PS] [mattifestation/powerworm](https://github.com/mattifestation/powerworm) Analysis, detection, and removal of the "Power Worm" PowerShell-based malware
- [**72**星][5y] [C++] [malwaretech/zombifyprocess](https://github.com/malwaretech/zombifyprocess) Inject code into a legitimate process
- [**72**星][7y] [C] [machn1k/scalpel-2.0](https://github.com/machn1k/scalpel-2.0) Scalpel; File Carving. Configuration files are modified.
-- [**72**星][7m] [TypeScript] [louisvillemetro/wazeccpprocessor](https://github.com/louisvillemetro/wazeccpprocessor) Waze WARP takes your CCP data feed and processes it into your cloud provider for access, analysis, and visualization. An Open Government Coalition (OGC) project.
+- [**72**星][7m] [TS] [louisvillemetro/wazeccpprocessor](https://github.com/louisvillemetro/wazeccpprocessor) Waze WARP takes your CCP data feed and processes it into your cloud provider for access, analysis, and visualization. An Open Government Coalition (OGC) project.
- [**72**星][3y] [Py] [lorexxar/bscanner](https://github.com/lorexxar/bscanner) 一直没有顺手的扫描器,那就自己写一个吧
- [**72**星][1y] [Py] [lixmk/concierge](https://github.com/lixmk/concierge) Physical Access Control Identification and Exploitation
-- [**72**星][3y] [lcatro/hacker_document](https://github.com/lcatro/hacker_document) 收集一些以前看过对于入门和进阶很有用的攻击原理文档..
- [**72**星][5y] [Py] [ksoona/attackvector](https://github.com/ksoona/attackvector) AttackVector Linux
-- [**72**星][2y] [C++] [koemeet/rtti-obfuscator](https://github.com/koemeet/rtti-obfuscator) Obfuscates all RTTI (Run-time type information) inside a binary
-- [**72**星][2y] [C++] [kasperskylab/forensicstools](https://github.com/kasperskylab/forensicstools) Tools for DFIR
- [**72**星][6y] [C] [jtripper/sslnuke](https://github.com/jtripper/sslnuke) Transparent proxy that decrypts SSL traffic and prints out IRC messages.
- [**72**星][5y] [Py] [joridos/custom-ssh-backdoor](https://github.com/joridos/custom-ssh-backdoor) Custom ssh backdoor, coded in python using Paramiko
-- [**72**星][1m] [HTML] [jmortega/python-pentesting](https://github.com/jmortega/python-pentesting) python-pentesting-tool
-- [**72**星][7m] [Py] [jiangsir404/pbscan](https://github.com/jiangsir404/pbscan) 基于burpsuite headless 的代理式被动扫描系统
-- [**72**星][3y] [PowerShell] [jaredhaight/invoke-metasploitpayload](https://github.com/jaredhaight/invoke-metasploitpayload) Powershell script to download and kick off Metasploit payloads. Relies on the exploit/multi/scripts/web_delivery metasploit module.
-- [**72**星][14d] [Zeek] [hosom/file-extraction](https://github.com/hosom/file-extraction) Extract files from network traffic with Bro.
+- [**72**星][4d] [jawz101/mobileadtrackers](https://github.com/jawz101/mobileadtrackers) Taken from DNS logs while actively using Android apps over the years. Formatted in hostfile format.
+- [**72**星][3y] [PS] [jaredhaight/invoke-metasploitpayload](https://github.com/jaredhaight/invoke-metasploitpayload) Powershell script to download and kick off Metasploit payloads. Relies on the exploit/multi/scripts/web_delivery metasploit module.
+- [**72**星][17d] [Zeek] [hosom/file-extraction](https://github.com/hosom/file-extraction) Extract files from network traffic with Bro.
- [**72**星][2y] [C++] [hexhive/hextype](https://github.com/hexhive/hextype) HexType: Efficient Detection of Type Confusion Errors for C++
-- [**72**星][3y] [Go] [grahamedgecombe/ct-submit](https://github.com/grahamedgecombe/ct-submit) A program for submitting X.509 certificate chains to Certificate Transparency log servers.
+- [**72**星][3y] [Py] [hak5darren/bashbunny-payloads](https://github.com/hak5darren/bashbunny-payloads) Payloads for the Hak5 Bash Bunny
- [**72**星][5y] [Py] [feliam/cve-2014-4377](https://github.com/feliam/cve-2014-4377)
- [**72**星][8m] [C] [ez-flash/omega-kernel](https://github.com/ez-flash/omega-kernel) EZ-FLASH OMEGA Kernel
- [**72**星][4y] [Py] [exp0se/harbinger](https://github.com/exp0se/harbinger) Harbinger Threat Intelligence
- [**72**星][2y] [Py] [embedi/meloader](https://github.com/embedi/meloader) 加载英特尔管理引擎固件
-- [**72**星][1y] [Py] [dionach/panhunt](https://github.com/dionach/panhunt) PANhunt searches for credit card numbers (PANs) in directories.
-- [**72**星][2y] [C] [dadas190/heavens-gate-2.0](https://github.com/dadas190/heavens-gate-2.0) Executes 64bit code from a 32bit process
-- [**72**星][7d] [Py] [cert-polska/n6](https://github.com/cert-polska/n6) Automated handling of data feeds for security teams
+- [**72**星][2y] [Py] [denglend/decode345](https://github.com/denglend/decode345) Honeywell 345 Mhz decoding
+- [**72**星][4y] [david415/ansible-tor](https://github.com/david415/ansible-tor) An Ansible role for using tor!
+- [**72**星][3m] [JS] [cveproject/automation-working-group](https://github.com/cveproject/automation-working-group) CVE Automation Working Group
+- [**72**星][1y] [C] [chinatiny/inlinehooklib](https://github.com/chinatiny/inlinehooklib) 同时支持用户和内核模式的Inlinehook库
+- [**72**星][9d] [Py] [cert-polska/n6](https://github.com/cert-polska/n6) Automated handling of data feeds for security teams
- [**72**星][1y] [C#] [c4bbage/pentestscripts](https://github.com/c4bbage/pentestscripts) 白名单利用代码、渗透工具
- [**72**星][8m] [Py] [busescanfly/rpi-hunter](https://github.com/busescanfly/rpi-hunter) Auto discover and exploit LAN raspberry pi's
-- [**72**星][1y] [Java] [bit4woo/u2c](https://github.com/bit4woo/u2c) Unicode To Chinese -- U2C : A burpsuite Extender That Convert Unicode To Chinese 【Unicode编码转中文的burp插件】
- [**72**星][5y] [Py] [binsigma/binsourcerer](https://github.com/binsigma/binsourcerer) 反汇编与源码匹配
-- [**72**星][7m] [Go] [audibleblink/letsproxy](https://github.com/audibleblink/letsproxy) Quickly fetch Let's Encrypt certs and serve a reverse proxy
- [**72**星][3y] [Py] [antojoseph/droid-ff](https://github.com/antojoseph/droid-ff) Android File Fuzzing Framework
- [**72**星][2y] [Py] [angr/simuvex](https://github.com/angr/simuvex) [DEPRECATED] A symbolic execution engine for the VEX IR
-- [**72**星][5y] [Shell] [andrewmichaelsmith/honeypot-setup-script](https://github.com/andrewmichaelsmith/honeypot-setup-script) Honeypot (Dionaea and kippo) setup script
-- [**72**星][2y] [Batchfile] [aghorler/windows-10-hardening](https://github.com/aghorler/windows-10-hardening) An admittedly frivolous (and infrequently updated) attempt to harden Windows 10.
-- [**72**星][14d] [C++] [3gstudent/homework-of-c-language](https://github.com/3gstudent/homework-of-c-language) C/C++ code examples of my blog.
-- [**72**星][2y] [233boy/chinaip](https://github.com/233boy/chinaip) 中国大陆 IP 列表(已优化)
+- [**72**星][5y] [80vul/pasc2at](https://github.com/80vul/pasc2at) Php Application Source Code Audits Advanced Technology
+- [**72**星][3m] [Go] [0xrawsec/golang-evtx](https://github.com/0xrawsec/golang-evtx) a parsing library for Windows EVTX log files.
+- [**71**星][2y] [Py] [jiansiting/wpa2-krack](https://github.com/jiansiting/wpa2-krack)
- [**71**星][4y] [Ruby] [etsy/chef-whitelist](https://github.com/etsy/chef-whitelist) Simple library to enable host based rollouts of changes
-- [**71**星][1m] [Py] [boypt/vmess2json](https://github.com/boypt/vmess2json) Scripts parse vmess:// links into v2ray config json and vice versa.
+- [**71**星][4m] [Py] [utkusen/rhodiola](https://github.com/utkusen/rhodiola) Personalized wordlist generator with NLP, by analyzing tweets. (A.K.A crunch2049)
+- [**71**星][12d] [Shell] [nahamsec/crtndstry](https://github.com/nahamsec/crtndstry) Yet another subdomain finder
- [**71**星][5m] [Py] [k8gege/scrun](https://github.com/k8gege/scrun) BypassAV ShellCode Loader (Cobaltstrike/Metasploit)
-- [**71**星][8d] [C++] [jeefo/yapb](https://github.com/jeefo/yapb) AI opponent for Counter-Strike based on POD-Bot 2.6
+- [**71**星][10d] [C++] [jeefo/yapb](https://github.com/jeefo/yapb) AI opponent for Counter-Strike based on POD-Bot 2.6
+- [**71**星][27d] [C] [davidxanatos/taskexplorer](https://github.com/davidxanatos/taskexplorer) Power full Task Manager
- [**71**星][7m] [Py] [rmanofcn/ml_malware_detect](https://github.com/RManOfCN/ML_Malware_detect) 阿里云安全恶意程序检测比赛
- [**71**星][1m] [Jupyter Notebook] [mozilla/overscripted](https://github.com/mozilla/overscripted) Repository for the Mozilla Overscripted Data Mining Challenge
+- [**71**星][6m] [Py] [jakobrpennington/information-security](https://github.com/JakobRPennington/information-security) A place where I can create, collect and share tooling, resources and knowledge about information security.
- [**71**星][7m] [C] [hc0d3r/alfheim](https://github.com/hc0d3r/alfheim) a linux process hacker tool
- [**71**星][7y] [Py] [mushorg/buttinsky](https://github.com/mushorg/buttinsky) Botnet monitoring is a crucial part in threat analysis and often neglected due to the lack of proper open source tools. Our tool will provide an open source framework for automated botnet monitoring. The modular design will allow full customization of the used protocols, the monitoring clients behavior, how we log the collected information, proc…
-- [**71**星][2y] [zntfdr/awesome-twitter-bots](https://github.com/zntfdr/awesome-twitter-bots) A Curated Collection of the Best Twitter Bots
- [**71**星][2y] [C] [yrp604/atc-sources](https://github.com/yrp604/atc-sources) Attacking the Core associated source files
- [**71**星][3y] [Py] [xyntax/baiduyun-brute](https://github.com/xyntax/baiduyun-brute) [已失效] 多线程百度云(私密分享)密码爆破工具 pan.baidu.com
- [**71**星][2y] [Py] [x64dbg/mona](https://github.com/x64dbg/mona) Fork of mona.py with x64dbg support
+- [**71**星][4y] [C++] [waleedassar/antidebug](https://github.com/waleedassar/antidebug) Collection Of Anti-Debugging Tricks
- [**71**星][6m] [PHP] [vlucas/pikirasa](https://github.com/vlucas/pikirasa) PKI public/private RSA key encryption using the OpenSSL extension
+- [**71**星][1y] [Shell] [thelinuxchoice/keydroid](https://github.com/thelinuxchoice/keydroid) Android Keylogger + Reverse Shell
- [**71**星][3y] [Py] [tengzhangchao/microsoftspider](https://github.com/tengzhangchao/microsoftspider) 爬取微软漏洞信息,MS对应的每个版本操作系统KB号以及补丁下载地址。
+- [**71**星][4m] [Py] [utkusen/rhodiola](https://github.com/utkusen/rhodiola) Personalized wordlist generator with NLP, by analyzing tweets. (A.K.A crunch2049)
- [**71**星][3y] [C++] [tandasat/eopmon](https://github.com/tandasat/eopmon) Elevation of privilege detector based on HyperPlatform
- [**71**星][2y] [Py] [soinull/assimilate](https://github.com/soinull/assimilate) Assimilate is a series of scripts for using the Naïve Bayes algorithm to find potential malicious activity in HTTP headers
-- [**71**星][22d] [C++] [sidyhe/dxx](https://github.com/sidyhe/dxx) Windows Kernel Driver with C++ runtime
+- [**71**星][19d] [Py] [skelsec/msldap](https://github.com/skelsec/msldap) 从Active Directory中获取用户对象, 并将重要内容存储在一个大型电子表格中. 用于渗透期间快速识别易受攻击的用户设置
+- [**71**星][2m] [HTML] [sisoc-tokyo/real-timedetectionad_ver2](https://github.com/sisoc-tokyo/real-timedetectionad_ver2)
- [**71**星][1y] [C] [shift-crops/escapeme](https://github.com/shift-crops/escapeme) TokyoWestens CTF 4th 2018 EscapeMe challenge
-- [**71**星][6m] [HTML] [securityautomation/dumpthegit](https://github.com/securityautomation/dumpthegit) DumpTheGit searches through public repositories to find sensitive information uploaded to the Github repositories.
-- [**71**星][2m] [Py] [rub-syssec/grimoire](https://github.com/rub-syssec/grimoire)
+- [**71**星][6d] [C++] [rodneyviana/netext](https://github.com/rodneyviana/netext) WinDbg extension for data mining managed heap. It also includes commands to list http request, wcf services, WIF tokens among others
+- [**71**星][16d] [Rust] [redsift/ingraind](https://github.com/redsift/ingraind) Data first monitoring agent using (e)BPF, built on RedBPF
- [**71**星][3y] [C] [rcvalle/vmmfuzzer](https://github.com/rcvalle/vmmfuzzer) A hypervisor or virtual machine monitor (VMM) fuzzer.
- [**71**星][3y] [C++] [razzile/liberation](https://github.com/razzile/liberation) A runtime patching library for iOS. Major rework on unfinished branch
- [**71**星][3y] [Shell] [ppabc/cc_iptables](https://github.com/ppabc/cc_iptables) 收集处理DDOS、CC攻击各类脚本,包括NGINX日志中的CC攻击IP处理。
-- [**71**星][6y] [Py] [piccimario/iphone-backup-analyzer-2](https://github.com/piccimario/iphone-backup-analyzer-2) iPBA, Qt version
- [**71**星][2y] [Shell] [opsxcq/exploit-cve-2014-6271](https://github.com/opsxcq/exploit-cve-2014-6271) Shellshock exploit + vulnerable environment
- [**71**星][1y] [PHP] [opsxcq/docker-vulnerable-dvwa](https://github.com/opsxcq/docker-vulnerable-dvwa) Damn Vulnerable Web Application Docker container
- [**71**星][2y] [HTML] [onplus/shadowsocks-websocket-python](https://github.com/onplus/shadowsocks-websocket-python) shadowsocks over WebSocket, support Heroku.
@@ -10111,58 +10725,68 @@ networking routines
- [**71**星][6y] [Py] [mrnasro/zynos-attacker](https://github.com/mrnasro/zynos-attacker) ZynOS tool for automated attack on a range of IPs, find more informations at :
- [**71**星][3y] [C] [moyix/panda](https://github.com/moyix/panda) Deprecated repo for PANDA 1.0 – see PANDA 2.0 repository
- [**71**星][3y] [Py] [monnappa22/hollowfind](https://github.com/monnappa22/hollowfind) Hollowfind is a Volatility plugin to detect different types of process hollowing techniques used in the wild to bypass, confuse, deflect and divert the forensic analysis techniques. The plugin detects such attacks by finding discrepancy in the VAD and PEB, it also disassembles the address of entry point to detect any redirection attempts and als…
-- [**71**星][17d] [Dockerfile] [mko-x/docker-clamav](https://github.com/mko-x/docker-clamav) Dockerized open source antivirus for use with file sharing containers, REST API or TCP.
+- [**71**星][19d] [Dockerfile] [mko-x/docker-clamav](https://github.com/mko-x/docker-clamav) Dockerized open source antivirus for use with file sharing containers, REST API or TCP.
- [**71**星][2y] [Py] [mgeeky/exploit-development-tools](https://github.com/mgeeky/exploit-development-tools) A bunch of my exploit development helper tools, collected in one place.
- [**71**星][3y] [Py] [mak/ekdeco](https://github.com/mak/ekdeco) Scripts for dealing with various ek's
+- [**71**星][3m] [C++] [macmade/unicorn-bios](https://github.com/macmade/unicorn-bios) Basic BIOS emulator for Unicorn Engine.
+- [**71**星][1y] [Go] [m4ll0k/aron](https://github.com/m4ll0k/aron) Aron is a GO script for finding hidden GET & POST parameters
+- [**71**星][5d] [Go] [letsencrypt/ct-woodpecker](https://github.com/letsencrypt/ct-woodpecker) A tool to monitor a CT log for operational problems
- [**71**星][6y] [Py] [krmaxwell/dns-exfiltration](https://github.com/krmaxwell/dns-exfiltration) Exfiltrate files via DNS
+- [**71**星][1y] [kingzd/wxdemo](https://github.com/kingzd/wxdemo) 学习练手
- [**71**星][5y] [C#] [khr0x40sh/whitelistevasion](https://github.com/khr0x40sh/whitelistevasion) Collection of scripts, binaries and the like to aid in WhiteList Evasion on a Microsoft Windows Network.
- [**71**星][7y] [C] [kholia/rc4-40-brute-office](https://github.com/kholia/rc4-40-brute-office) Guaranteed cracking of M$ Office files using RC4 40-bit encryption
+- [**71**星][2y] [PHP] [joesmithjaffa/jenkins-shell](https://github.com/joesmithjaffa/jenkins-shell) Automating Jenkins Hacking using Shodan API
- [**71**星][4y] [Py] [internetwache/internetwache-ctf-2016](https://github.com/internetwache/internetwache-ctf-2016) The Internetwache CTF 2016 repository
- [**71**星][4y] [Py] [icewall/bindifffilter](https://github.com/icewall/bindifffilter) IDA Pro plugin making easier work on BinDiff results
-- [**71**星][12d] [Py] [highmeh/lure](https://github.com/highmeh/lure) Lure - User Recon Automation for GoPhish
+- [**71**星][9m] [PS] [iamrootsh3ll/anchorwatch](https://github.com/iamrootsh3ll/anchorwatch) A Rogue Device Detection Script with Email Alerts Functionality for Windows Subsystem
- [**71**星][8y] [Py] [hellais/buckle-up](https://github.com/hellais/buckle-up) Script for running Mac OS X applications in a sandbox and a collection of seatbelt profiles
-- [**71**星][3y] [Py] [hak5darren/bashbunny-payloads](https://github.com/hak5darren/bashbunny-payloads) Payloads for the Hak5 Bash Bunny
- [**71**星][7y] [PHP] [geekchannel/webmap](https://github.com/geekchannel/webmap) NMAP via web
+- [**71**星][6y] [enigma0x3/powershell-payload-excel-delivery](https://github.com/enigma0x3/powershell-payload-excel-delivery) Uses Invoke-Shellcode to execute a payload and persist on the system.
- [**71**星][3y] [C++] [endgameinc/maxwell](https://github.com/endgameinc/maxwell)
-- [**71**星][2y] [Py] [denglend/decode345](https://github.com/denglend/decode345) Honeywell 345 Mhz decoding
- [**71**星][4y] [Py] [danmcinerney/autorelay](https://github.com/danmcinerney/autorelay) Automatically performs the SMB relay attack
- [**71**星][2y] [Py] [d4vinci/pyloggy](https://github.com/d4vinci/pyloggy) A python keylogger that does more than any other keylogger - Key logger, Clicks logger and Screenshots
- [**71**星][1m] [C++] [cseagle/collabreate](https://github.com/cseagle/collabreate) Hook IDA的事件通知,将事件涉及的修改内容广播到中心服务器,中心服务器转发给其他分析相同文件的用户
- [**71**星][1y] [citybasebrooks/siac](https://github.com/citybasebrooks/siac) SIAC is an enterprise SIEM built on open-source technology.
- [**71**星][2y] [Py] [chrispcampbell/qrocodile](https://github.com/chrispcampbell/qrocodile) A kid-friendly system for controlling Sonos with QR codes
-- [**71**星][1y] [C] [chinatiny/inlinehooklib](https://github.com/chinatiny/inlinehooklib) 同时支持用户和内核模式的Inlinehook库
- [**71**星][2y] [HTML] [brandis-project/brandis](https://github.com/brandis-project/brandis) Brandis: End-to-end encryption for everyone
- [**71**星][3y] [bmaia/cross-utils](https://github.com/bmaia/cross-utils) Cross compiling Utils (ARMEB, ARMEL, MIPS, MIPSEL)
- [**71**星][6y] [C++] [blitzcode/ghc-stack](https://github.com/blitzcode/ghc-stack) Hacking GHC's Stack for Fun and Profit (featuring The Glorious Haskell Debugger v0.0.1 Pre-alpha)
- [**71**星][3y] [Batchfile] [azmatt/windowsenum](https://github.com/azmatt/windowsenum) Batch file to help automate Windows enumeration for privilege escalation
- [**71**星][3y] [JS] [attekett/surku](https://github.com/attekett/surku) Surku is a general-purpose mutation-based fuzzer.
- [**71**星][3y] [C] [alexwebr/salsa20](https://github.com/alexwebr/salsa20) An implementation of the Salsa20 stream cipher in C99
-- [**71**星][5y] [80vul/pasc2at](https://github.com/80vul/pasc2at) Php Application Source Code Audits Advanced Technology
- [**71**星][2y] [Py] [7h3ram/flowinspect](https://github.com/7h3ram/flowinspect) A Network Inspection Tool
- [**71**星][1y] [C++] [3gstudent/inject-dll-by-apc](https://github.com/3gstudent/inject-dll-by-apc) Asynchronous Procedure Calls
- [**71**星][2y] [C] [0ffffffffh/api-break-for-x64dbg](https://github.com/0ffffffffh/api-break-for-x64dbg) x64dbg plugin to set breakpoints automatically to Win32/64 APIs
- [**70**星][4y] [C#] [cn33liz/smashedpotato](https://github.com/cn33liz/smashedpotato)
+- [**70**星][11d] [Py] [ehco1996/aioshadowsocks](https://github.com/ehco1996/aioshadowsocks) 用 asyncio 重写 shadowsocks ~
- [**70**星][8m] [Go] [mmcloughlin/cryptofuzz](https://github.com/mmcloughlin/cryptofuzz) Fuzzing Go crypto
-- [**70**星][21d] [JS] [andreafioraldi/frida-js-afl-instr](https://github.com/andreafioraldi/frida-js-afl-instr) An example on how to do performant in-memory fuzzing with AFL++ and Frida
-- [**70**星][25d] [C] [davidxanatos/taskexplorer](https://github.com/davidxanatos/taskexplorer) Power full Task Manager
-- [**70**星][6m] [Py] [jakobrpennington/information-security](https://github.com/JakobRPennington/information-security) A place where I can create, collect and share tooling, resources and knowledge about information security.
+- [**70**星][26d] [CSS] [s0md3v/predator](https://github.com/s0md3v/predator) Anti-Automation System
+- [**70**星][3y] [zbetcheckin/ipv6](https://github.com/zbetcheckin/ipv6) Playing with IPv6 for fun and profit
- [**70**星][6y] [Py] [q2h1cg/xss_scan](https://github.com/Q2h1Cg/xss_scan) XSS Scan
+- [**70**星][9d] [Shell] [sclorg/s2i-php-container](https://github.com/sclorg/s2i-php-container) PHP container images based on Red Hat Software Collections and intended for OpenShift and general usage, that provide a platform for building and running PHP applications. Users can choose between Red Hat Enterprise Linux, Fedora, and CentOS based images.
+- [**70**星][3y] [Py] [zxsecurity/gpsnitch](https://github.com/zxsecurity/gpsnitch) GPS Spoofer Catcher, the GPS IDS.
+- [**70**星][1m] [Py] [ziirish/burp-ui](https://github.com/ziirish/burp-ui) Burp-UI is a web-ui for burp backup written in python with Flask and jQuery/Bootstrap
+- [**70**星][7m] [Py] [zer1t0/ticket_converter](https://github.com/zer1t0/ticket_converter) A little tool to convert ccache tickets into kirbi (KRB-CRED) and vice versa based on impacket.
+- [**70**星][2y] [Java] [ysrc/obfusesmalitext](https://github.com/ysrc/obfusesmalitext) smali文件,jar包字符串混淆,支持gradle插件
+- [**70**星][2d] [Py] [x4nth055/pythoncode-tutorials](https://github.com/x4nth055/pythoncode-tutorials) The Python Code Tutorials
+- [**70**星][8m] [wufengxue/android-reverse](https://github.com/wufengxue/android-reverse) 安卓逆向工具汇总
+- [**70**星][5m] [wbierbower/awesome-physics](https://github.com/wbierbower/awesome-physics)
+- [**70**星][4m] [Py] [war-and-code/jawfish](https://github.com/war-and-code/jawfish) Tool for breaking into web applications.
- [**70**星][11m] [Py] [viperbluff/portwitness](https://github.com/viperbluff/portwitness) Tool for checking Whether a domain or its multiple sub-domains are up and running.
+- [**70**星][5y] [Java] [veeti/disableflagsecure](https://github.com/veeti/disableflagsecure)
- [**70**星][1y] [Go] [urld/passmgr](https://github.com/urld/passmgr) a simple, portable password manager
- [**70**星][2m] [C++] [trailofbits/llvm-sanitizer-tutorial](https://github.com/trailofbits/llvm-sanitizer-tutorial) An LLVM sanitizer tutorial
- [**70**星][2y] [Py] [timbo05sec/autocrack](https://github.com/timbo05sec/autocrack) Hashcat wrapper to help automate the cracking process
-- [**70**星][1y] [Shell] [thelinuxchoice/keydroid](https://github.com/thelinuxchoice/keydroid) Android Keylogger + Reverse Shell
- [**70**星][1y] [Shell] [thelinuxchoice/getwin](https://github.com/thelinuxchoice/getwin) FUD Win32 payload generator and listener
-- [**70**星][2m] [HTML] [sisoc-tokyo/real-timedetectionad_ver2](https://github.com/sisoc-tokyo/real-timedetectionad_ver2)
+- [**70**星][3m] [PS] [samratashok/race](https://github.com/samratashok/race) RACE is a PowerShell module for executing ACL attacks against Windows targets.
- [**70**星][3y] [JS] [saelo/jscpwn](https://github.com/saelo/jscpwn) PoC exploit for CVE-2016-4622
-- [**70**星][7d] [C++] [rodneyviana/netext](https://github.com/rodneyviana/netext) WinDbg extension for data mining managed heap. It also includes commands to list http request, wcf services, WIF tokens among others
- [**70**星][1y] [Py] [rassec/rasscan](https://github.com/rassec/rasscan) Port service SCan
- [**70**星][10m] [Dockerfile] [rancher/runc-cve](https://github.com/rancher/runc-cve) CVE patches for legacy runc packaged with Docker
- [**70**星][3y] [Py] [quantumliu/antibtchack](https://github.com/quantumliu/antibtchack) 破解5.12比特币勒索软件
- [**70**星][7y] [JS] [qburst/penq](https://github.com/qburst/penq) PenQ is an open source Linux based penetration testing browser bundle built over Mozilla Firefox. It comes pre-configured with security tools for spidering, advanced web searching, fingerprinting, anonymous browsing, web server scanning, fuzzing, report generating and more.
-- [**70**星][18d] [C] [ptrrkssn/pnscan](https://github.com/ptrrkssn/pnscan) Peter's Network Scanner
+- [**70**星][2y] [Py] [qazbnm456/vwgen](https://github.com/qazbnm456/vwgen) Vulnerable Web applications Generator
+- [**70**星][20d] [C] [ptrrkssn/pnscan](https://github.com/ptrrkssn/pnscan) Peter's Network Scanner
- [**70**星][4y] [Py] [programa-stic/marvin-django](https://github.com/programa-stic/marvin-django) Marvin-django is the UI/database part of the Marvin project. Marvin is a platform for security analysis of Android apps.
-- [**70**星][4m] [pomerium/awesome-security-audits](https://github.com/pomerium/awesome-security-audits) A collection of public security audits.
- [**70**星][4m] [Go] [nray-scanner/nray](https://github.com/nray-scanner/nray) nray distributed port scanner
- [**70**星][8m] [Java] [novoda/dojos](https://github.com/novoda/dojos) This is where the Novoda team do all their hacking
- [**70**星][2y] [C++] [nmulasmajic/cve-2018-8897](https://github.com/nmulasmajic/cve-2018-8897) Implements the POP/MOV SS (CVE-2018-8897) vulnerability by bugchecking the machine (local DoS).
@@ -10173,572 +10797,619 @@ networking routines
- [**70**星][2m] [Py] [meejah/carml](https://github.com/meejah/carml) Command-line utility to control Tor.
- [**70**星][2y] [Py] [malwarereversebrasil/maltran](https://github.com/malwarereversebrasil/maltran) A command line tool to download malware exercises from malware-traffic-analysis.net
- [**70**星][1y] [Go] [maliceio/malice-av](https://github.com/maliceio/malice-av) Malice AntiVirus Plugins
-- [**70**星][3m] [C++] [macmade/unicorn-bios](https://github.com/macmade/unicorn-bios) Basic BIOS emulator for Unicorn Engine.
-- [**70**星][1y] [Go] [m4ll0k/aron](https://github.com/m4ll0k/aron) Aron is a GO script for finding hidden GET & POST parameters
+- [**70**星][3m] [m507/awae-preparation](https://github.com/m507/awae-preparation) This repository will contain all trainings and tutorials I have done/read to prepare for OSWE / AWAE.
- [**70**星][5y] [JS] [lfzark/cookie-injecting-tools](https://github.com/lfzark/cookie-injecting-tools) A chrome extension ,cookie injecting tool includeing injecting ,editing ,adding ,removeing cookies.
- [**70**星][4y] [C++] [laginimaineb/cve-2014-7920-7921](https://github.com/laginimaineb/cve-2014-7920-7921) Exploit code for CVE-2014-7920 and CVE-2014-7921 - code-exec in mediaserver up to Android 5.1
- [**70**星][7m] [Py] [l4ys/ctf](https://github.com/l4ys/ctf) Some of my CTF solutions
-- [**70**星][1y] [kingzd/wxdemo](https://github.com/kingzd/wxdemo) 学习练手
-- [**70**星][8m] [Py] [jpcertcc/malconfscan-with-cuckoo](https://github.com/jpcertcc/malconfscan-with-cuckoo) Cuckoo Sandbox plugin for extracts configuration data of known malware
-- [**70**星][11d] [C] [jovanbulck/nemesis](https://github.com/jovanbulck/nemesis) Nemesis: Studying microarchitectural timing leaks in rudimentary CPU interrupt logic
-- [**70**星][2y] [PHP] [joesmithjaffa/jenkins-shell](https://github.com/joesmithjaffa/jenkins-shell) Automating Jenkins Hacking using Shodan API
+- [**70**星][3y] [Py] [kevsersrca/2016lykagguvenligivesizmatestleri](https://github.com/kevsersrca/2016lykagguvenligivesizmatestleri) Network Security Notes
+- [**70**星][7d] [Py] [jpcertcc/malconfscan-with-cuckoo](https://github.com/jpcertcc/malconfscan-with-cuckoo) Cuckoo Sandbox plugin for extracts configuration data of known malware
+- [**70**星][13d] [C] [jovanbulck/nemesis](https://github.com/jovanbulck/nemesis) Nemesis: Studying microarchitectural timing leaks in rudimentary CPU interrupt logic
+- [**70**星][8m] [Py] [itsmehacker/ducky-exploit](https://github.com/itsmehacker/ducky-exploit) Arduino Rubber Ducky Framework
- [**70**星][6y] [Java] [irsdl/burpsuitejsbeautifier](https://github.com/irsdl/burpsuitejsbeautifier) Burp Suite JS Beautifier
- [**70**星][9m] [Py] [intel/resilient-ml-research-platform](https://github.com/intel/resilient-ml-research-platform)
- [**70**星][2y] [Java] [ikkisoft/bradamsa](https://github.com/ikkisoft/bradamsa) Burp Suite extension to generate Intruder payloads using Radamsa
-- [**70**星][9m] [PowerShell] [iamrootsh3ll/anchorwatch](https://github.com/iamrootsh3ll/anchorwatch) A Rogue Device Detection Script with Email Alerts Functionality for Windows Subsystem
+- [**70**星][8d] [Java] [i2p/i2p.android.base](https://github.com/i2p/i2p.android.base) I2P for Android
- [**70**星][3y] [JS] [himadriganguly/sqlilabs](https://github.com/himadriganguly/sqlilabs) Lab set-up for learning SQL Injection Techniques
+- [**70**星][11m] [C] [heidsoft/devops](https://github.com/heidsoft/devops) 系统架构实践
+- [**70**星][6d] [Py] [greenbone/gvm-tools](https://github.com/greenbone/gvm-tools) Remote control your Greenbone Vulnerability Manager (GVM)
+- [**70**星][2m] [C] [getdrive/lazy-rdp](https://github.com/getdrive/lazy-rdp) Script for automatic scanning & brute-force RDP
- [**70**星][2y] [C] [flxwu/spectre-attack-demo](https://github.com/flxwu/spectre-attack-demo) Reproducing malicious memory reading on Intel i5 and Intel Xeon using a Spectre attack
- [**70**星][5y] [C] [fireeye/tools](https://github.com/fireeye/tools) general purpose and malware specific analysis tools
+- [**70**星][5y] [JS] [esapi/owasp-esapi-js](https://github.com/esapi/owasp-esapi-js) Automatically exported from code.google.com/p/owasp-esapi-js
+- [**70**星][2y] [Isabelle] [diekmann/iptables_semantics](https://github.com/diekmann/iptables_semantics) Verified iptables Firewall Ruleset Analysis
+- [**70**星][7d] [Py] [devopshq/artifactory](https://github.com/devopshq/artifactory) dohq-artifactory: a Python client for Artifactory
+- [**70**星][3y] [PS] [darkoperator/posh-virustotal](https://github.com/darkoperator/posh-virustotal) PowerShell Module to interact with VirusTotal
- [**70**星][4y] [HTML] [crackinglandia/pype32](https://github.com/crackinglandia/pype32) Yet another Python library to read and write PE/PE+ files.
- [**70**星][1y] [HTML] [cooolis/cooolis.github.io](https://github.com/cooolis/cooolis.github.io) Cooolis是一个操作系统命令技巧备忘录
- [**70**星][3y] [Py] [coldfusion39/domi-owned](https://github.com/coldfusion39/domi-owned) domi-owned:IBM/LotusDomino 服务器漏洞利用工具
+- [**70**星][2y] [JS] [chrisyer/lightsocks-nodejs](https://github.com/chrisyer/lightsocks-nodejs) It's a simple socks5 proxy tool which based on lightsocks
+- [**70**星][6m] [Java] [c0d3p1ut0s/java-security-manager-bypass](https://github.com/c0d3p1ut0s/java-security-manager-bypass)
- [**70**星][2y] [C] [azuregreen/arkprotect](https://github.com/azuregreen/arkprotect) An Ark tool project,run on Win7 x86/x64
- [**70**星][3y] [Py] [antelox/fopo-php-deobfuscator](https://github.com/antelox/fopo-php-deobfuscator) A simple script to deobfuscate PHP file obfuscated with FOPO Obfuscator -
-- [**70**星][14d] [C] [anssi-fr/oradad](https://github.com/anssi-fr/oradad) Outil de récupération automatique des données de l'Active Directory / Automated tool for dumping Active Directory data
+- [**70**星][16d] [C] [anssi-fr/oradad](https://github.com/anssi-fr/oradad) Outil de récupération automatique des données de l'Active Directory / Automated tool for dumping Active Directory data
+- [**70**星][2y] [androidtamer/androidtamer](https://github.com/androidtamer/androidtamer) We Use Github Extensively and openly. So it becomes dificult to track what's what and what's where. This repository is a master repo to Help with that.
+- [**70**星][15d] [Py] [alexdetrano/4can](https://github.com/alexdetrano/4can)
+- [**70**星][1y] [C] [alex9191/kernel-dll-injector](https://github.com/alex9191/kernel-dll-injector) Kernel-Mode Driver that loads a dll into every new created process that loads kernel32.dll module
- [**70**星][1y] [JS] [hackatnow/certstreamcatcher](https://github.com/hackatnow/certstreamcatcher) This tool is based on regex with effective standards for detecting phishing sites in real time using certstream and can also detect punycode (IDNA) attacks.
-- [**70**星][3y] [PowerShell] [1ricardotavares/offensive-powershell](https://github.com/1ricardotavares/offensive-powershell)
+- [**70**星][3y] [PS] [1ricardotavares/offensive-powershell](https://github.com/1ricardotavares/offensive-powershell)
- [**70**星][6y] [Py] [0xdevalias/sparty](https://github.com/0xdevalias/sparty) Sparty - MS Sharepoint and Frontpage Auditing Tool [Unofficial]
-- [**70**星][12d] [Batchfile] [0xcoto/evilusb](https://github.com/0xcoto/evilusb) Turn an ordinary USB drive into a malicious social-engineering USB
+- [**70**星][14d] [Batchfile] [0xcoto/evilusb](https://github.com/0xcoto/evilusb) Turn an ordinary USB drive into a malicious social-engineering USB
+- [**69**星][6m] [JS] [jiang-xuan/deepinss](https://github.com/jiang-xuan/deepinss) Deep in shadowsocks.
+- [**69**星][4y] [Py] [mitmproxy/netlib](https://github.com/mitmproxy/netlib)
+- [**69**星][5m] [JS] [nccgroup/datajackproxy](https://github.com/nccgroup/datajackproxy) Datajack Proxy allows you to intercept TLS traffic in native x86 applications across platforms
- [**69**星][4m] [0xd4d/dnspy-unity-mono](https://github.com/0xd4d/dnspy-unity-mono) Fork of Unity mono that's used to compile mono.dll with debugging support enabled
-- [**69**星][3y] [zbetcheckin/ipv6](https://github.com/zbetcheckin/ipv6) Playing with IPv6 for fun and profit
-- [**69**星][15d] [Py] [splewis/get5-web](https://github.com/splewis/get5-web) Proof-of-concept webpanel for servers using the get5 CS:GO server plugin
+- [**69**星][3y] [Nginx] [localtunnel/nginx](https://github.com/localtunnel/nginx) nginx container used as the localtunnel load balancer
+- [**69**星][17d] [Py] [splewis/get5-web](https://github.com/splewis/get5-web) Proof-of-concept webpanel for servers using the get5 CS:GO server plugin
- [**69**星][2m] [opentoallctf/tips](https://github.com/opentoallctf/tips)
- [**69**星][5y] [JS] [substack/wit](https://github.com/substack/wit) command-line wifi manager for linux
- [**69**星][8m] [C#] [fsecurelabs/sharpcliphistory](https://github.com/FSecureLABS/SharpClipHistory) SharpClipHistory is a .NET application written in C# that can be used to read the contents of a user's clipboard history in Windows 10 starting from the 1809 Build.
-- [**69**星][7d] [Py] [bbva/patton](https://github.com/BBVA/patton) The clever vulnerability dependency finder
-- [**69**星][3y] [Py] [zxsecurity/gpsnitch](https://github.com/zxsecurity/gpsnitch) GPS Spoofer Catcher, the GPS IDS.
+- [**69**星][9d] [Py] [bbva/patton](https://github.com/BBVA/patton) The clever vulnerability dependency finder
- [**69**星][1y] [Py] [zsxsoft/regeorg](https://github.com/zsxsoft/regeorg) A modified reGeorg for One-line PHP Shell.
- [**69**星][2y] [C++] [zodiacon/poolmonx](https://github.com/zodiacon/poolmonx) A GUI version of the classic PoolMon tool
-- [**69**星][30d] [Py] [ziirish/burp-ui](https://github.com/ziirish/burp-ui) Burp-UI is a web-ui for burp backup written in python with Flask and jQuery/Bootstrap
-- [**69**星][7m] [Py] [zer1t0/ticket_converter](https://github.com/zer1t0/ticket_converter) A little tool to convert ccache tickets into kirbi (KRB-CRED) and vice versa based on impacket.
+- [**69**星][2y] [Py] [zldww2011/cve-2018-0802_poc](https://github.com/zldww2011/cve-2018-0802_poc) Exploit the vulnerability to execute the calculator
- [**69**星][4m] [Py] [zaproxy/zap-api-python](https://github.com/zaproxy/zap-api-python) OWASP ZAP Python API
-- [**69**星][3y] [PowerShell] [xillwillx/tricky.lnk](https://github.com/xillwillx/tricky.lnk) Creates a .lnk file with unicode chars that reverse the file extension and adds a .txt to the end to make it appear as a textfile. Payload is a powershell webdl and execute
-- [**69**星][4m] [Py] [war-and-code/jawfish](https://github.com/war-and-code/jawfish) Tool for breaking into web applications.
-- [**69**星][5y] [Java] [veeti/disableflagsecure](https://github.com/veeti/disableflagsecure)
+- [**69**星][7m] [Go] [ying32/rproxy](https://github.com/ying32/rproxy) 简单的反向代理用于内网穿透,支持HTTP/HTTPS转发
+- [**69**星][3y] [PS] [xillwillx/tricky.lnk](https://github.com/xillwillx/tricky.lnk) Creates a .lnk file with unicode chars that reverse the file extension and adds a .txt to the end to make it appear as a textfile. Payload is a powershell webdl and execute
+- [**69**星][4y] [Py] [x56/airpyrt-tools](https://github.com/x56/airpyrt-tools) Python module and client for the AirPort device management interface
- [**69**星][4y] [Py] [v-p-b/pecloakcapstone](https://github.com/v-p-b/pecloakcapstone) Platform independent peCloak fork based on Capstone
+- [**69**星][7m] [Py] [thombashi/allpairspy](https://github.com/thombashi/allpairspy) A python library for test combinations generator. The generator allows one to create a set of tests using "pairwise combinations" method, reducing a number of combinations of variables into a lesser set that covers most situations.
- [**69**星][6m] [C++] [thomasthelen/antidebugging](https://github.com/thomasthelen/antidebugging) A collection of c++ programs that demonstrate common ways to detect the presence of an attached debugger.
- [**69**星][1y] [Py] [stixproject/openioc-to-stix](https://github.com/stixproject/openioc-to-stix) Generate STIX XML from OpenIOC XML
+- [**69**星][30d] [Ruby] [spiderlabs/cve_server](https://github.com/spiderlabs/cve_server) Simple REST-style web service for the CVE searching
- [**69**星][2y] [Shell] [snubbegbg/install_raspi-config](https://github.com/snubbegbg/install_raspi-config) Script to install raspi-config on Raspberry Pi devices with an Linux OS that's missing it, like Kali Linux.
- [**69**星][3y] [HTML] [skylined/bugs](https://github.com/skylined/bugs) Collection of software bugs found by SkyLined
+- [**69**星][2y] [C] [shay-gueron/aes-gcm-siv](https://github.com/shay-gueron/aes-gcm-siv) AES-GCM-SIV implementations (128 and 256 bit)
- [**69**星][4y] [Py] [sensepost/autoresponder](https://github.com/sensepost/autoresponder) Quick python script to automatically load NTLM hashes from Responder logs and fires up Hashcat to crack them
-- [**69**星][12m] [Py] [romanking98/house-of-roman](https://github.com/romanking98/house-of-roman) RCE through Leakless HeapFengShui, fastbin alloc anywhere.
+- [**69**星][2y] [Py] [s0lst1c3/sentrygun](https://github.com/s0lst1c3/sentrygun) Rogue AP killer
+- [**69**星][2y] [Py] [ryanohoro/csbruter](https://github.com/ryanohoro/csbruter) Cobalt Strike team server password brute force tool
+- [**69**星][1y] [Py] [romanking98/house-of-roman](https://github.com/romanking98/house-of-roman) RCE through Leakless HeapFengShui, fastbin alloc anywhere.
- [**69**星][2y] [Py] [r0oth3x49/xpath](https://github.com/r0oth3x49/xpath) Xpath is a python based open source Sql injection tool that automates the process of detecting and exploiting error-based injection security flaws.
-- [**69**星][2y] [Py] [qazbnm456/vwgen](https://github.com/qazbnm456/vwgen) Vulnerable Web applications Generator
- [**69**星][11m] [Py] [pure-l0g1c/instaburst](https://github.com/pure-l0g1c/instaburst) Brute force Instagram
+- [**69**星][2y] [Py] [planet-work/php-malware-scanner](https://github.com/planet-work/php-malware-scanner) PHP files analyzer for malware detection
- [**69**星][3y] [C] [payatu/emffuzzer](https://github.com/payatu/emffuzzer) Enhanced Meta File Fuzzer based on Peach Fuzzing Framework
+- [**69**星][14d] [Py] [patois/mrspicky](https://github.com/patois/mrspicky) IDA反编译器脚本,辅助审计对于memcpy() 和memmove()函数的调用
+- [**69**星][13d] [Shell] [orjail/orjail](https://github.com/orjail/orjail) a more secure way to force programs to exclusively use tor network
- [**69**星][10y] [C#] [oleavr/ospy](https://github.com/oleavr/ospy) Automatically exported from code.google.com/p/ospy
- [**69**星][2y] [Py] [odensc/janus](https://github.com/odensc/janus) Python script to create an Android APK exploiting the Janus vulnerability.
+- [**69**星][2y] [Swift] [nwhacks-loki/loki](https://github.com/nwhacks-loki/loki) Proof-of-concept of emotion-targeted content delivery using machine learning and ARKit.
+- [**69**星][17d] [Py] [nmantani/fileinsight-plugins](https://github.com/nmantani/fileinsight-plugins) a decoding toolbox of McAfee FileInsight hex editor for malware analysis
- [**69**星][7y] [C] [nektra/vtbl-ida-pro-plugin](https://github.com/nektra/vtbl-ida-pro-plugin) Identifying Virtual Table Functions using VTBL IDA Pro Plugin + Deviare Hooking Engine
-- [**69**星][4m] [PowerShell] [nbeede/boombox](https://github.com/nbeede/boombox) Automatic deployment of Cuckoo Sandbox malware lab using Packer and Vagrant
+- [**69**星][4m] [PS] [nbeede/boombox](https://github.com/nbeede/boombox) Automatic deployment of Cuckoo Sandbox malware lab using Packer and Vagrant
- [**69**星][2y] [PHP] [nairuzabulhul/roadmap](https://github.com/nairuzabulhul/roadmap) GitBook: OSCP RoadMap
- [**69**星][1y] [Kotlin] [menjoo/android-ssl-pinning-webviews](https://github.com/menjoo/android-ssl-pinning-webviews) A simple demo app that demonstrates Certificate pinning and scheme/domain whitelisting in Android WebViews
+- [**69**星][3y] [Ruby] [melvinsh/subresolve](https://github.com/melvinsh/subresolve) Resolve and quickly portscan a list of (sub)domains.
- [**69**星][1m] [Py] [m8r0wn/ldap_search](https://github.com/m8r0wn/ldap_search) Python3 script to perform LDAP queries and enumerate users, groups, and computers from Windows Domains. Ldap_Search can also perform brute force/password spraying to identify valid accounts via LDAP.
- [**69**星][2y] [C++] [lynnux/windbg_hilight](https://github.com/lynnux/windbg_hilight) A windbg plugin to hilight text in Disassembly and Command windows. Support x86 and x64.
- [**69**星][2y] [JS] [kureev/react-native-network-proxy](https://github.com/kureev/react-native-network-proxy) Network debugger (logger) for React Native apps
+- [**69**星][3y] [C] [klks/checksec](https://github.com/klks/checksec) x64dbg插件,用于检查应用程序各模块的安全设置,包括:SafeSEH、DEP、ASLR、、GS、CFG、Signature
- [**69**星][6y] [C] [kedebug/scdetective](https://github.com/kedebug/scdetective) A kernel level anti-rootkit tool which runs on the windows platform.
-- [**69**星][3m] [PowerShell] [jaredhaight/windowsattackanddefenselab](https://github.com/jaredhaight/windowsattackanddefenselab)
-- [**69**星][8m] [Py] [itsmehacker/ducky-exploit](https://github.com/itsmehacker/ducky-exploit) Arduino Rubber Ducky Framework
-- [**69**星][11m] [PowerShell] [itskindred/winportpush](https://github.com/itskindred/winportpush) A simple PowerShell utility used for pivoting into internal networks via a compromised Windows host.
+- [**69**星][3m] [PS] [jaredhaight/windowsattackanddefenselab](https://github.com/jaredhaight/windowsattackanddefenselab)
+- [**69**星][11m] [PS] [itskindred/winportpush](https://github.com/itskindred/winportpush) A simple PowerShell utility used for pivoting into internal networks via a compromised Windows host.
+- [**69**星][6m] [Py] [incredibleindishell/windows-ad-environment-related](https://github.com/incredibleindishell/windows-ad-environment-related) This Repository contains the stuff related to windows Active directory environment exploitation
- [**69**星][6y] [C] [ichooseyou/reclass64](https://github.com/ichooseyou/reclass64) A port of DrunkenCheetah's Project to x64
- [**69**星][4y] [Py] [hxer/vulnapp](https://github.com/hxer/vulnapp) use docker to attack web as a demo
- [**69**星][2y] [C] [hfiref0x/stryker](https://github.com/hfiref0x/stryker) Multi-purpose proof-of-concept tool based on CPU-Z CVE-2017-15303
- [**69**星][4y] [Py] [grazfather/blackhatpython](https://github.com/grazfather/blackhatpython) Black Hat Python Labs
- [**69**星][1m] [Py] [google/certificate-transparency-rfcs](https://github.com/google/certificate-transparency-rfcs) Certificate Transparency RFC
-- [**69**星][2m] [C] [getdrive/lazy-rdp](https://github.com/getdrive/lazy-rdp) Script for automatic scanning & brute-force RDP
- [**69**星][11m] [C++] [fr0gger/rocprotect-v1](https://github.com/fr0gger/rocprotect-v1) Emulating Virtual Environment to stay protected against advanced malware
-- [**69**星][5y] [JS] [esapi/owasp-esapi-js](https://github.com/esapi/owasp-esapi-js) Automatically exported from code.google.com/p/owasp-esapi-js
-- [**69**星][6y] [enigma0x3/powershell-payload-excel-delivery](https://github.com/enigma0x3/powershell-payload-excel-delivery) Uses Invoke-Shellcode to execute a payload and persist on the system.
- [**69**星][5y] [Py] [el3ct71k/subdomain-analyzer](https://github.com/el3ct71k/subdomain-analyzer) Subdomain Analyzer
- [**69**星][2y] [Py] [dxwu/binderfilter](https://github.com/dxwu/binderfilter) A Linux kernel IPC firewall and logger for Android and Binder
-- [**69**星][13d] [C] [devnoname120/vitabright](https://github.com/devnoname120/vitabright) Experimental minimum brightness lowering plugin
+- [**69**星][15d] [C] [devnoname120/vitabright](https://github.com/devnoname120/vitabright) Experimental minimum brightness lowering plugin
- [**69**星][3y] [Py] [dchrastil/ttsl](https://github.com/dchrastil/ttsl) Tool to scrape LinkedIn
-- [**69**星][3y] [PowerShell] [darkoperator/posh-virustotal](https://github.com/darkoperator/posh-virustotal) PowerShell Module to interact with VirusTotal
-- [**69**星][3m] [JS] [cveproject/automation-working-group](https://github.com/cveproject/automation-working-group) CVE Automation Working Group
-- [**69**星][2y] [JS] [chrisyer/lightsocks-nodejs](https://github.com/chrisyer/lightsocks-nodejs) It's a simple socks5 proxy tool which based on lightsocks
+- [**69**星][8m] [Py] [chipik/sap_gw_rce_exploit](https://github.com/chipik/sap_gw_rce_exploit) SAP Gateway RCE exploits
+- [**69**星][5y] [PS] [cheetz/powertools](https://github.com/cheetz/powertools) Veil's PowerTools are a collection of PowerShell projects with a focus on offensive operations.
- [**69**星][1m] [JS] [certtools/intelmq-manager](https://github.com/certtools/intelmq-manager) IntelMQ Manager is a graphical interface to manage configurations for IntelMQ framework.
-- [**69**星][6m] [Py] [biggerwing/cve-2019-0708-poc](https://github.com/biggerwing/cve-2019-0708-poc) CVE-2019-0708 远程代码执行漏洞批量检测
+- [**69**星][7y] [Assembly] [brainsmoke/nyanmbr](https://github.com/brainsmoke/nyanmbr) Nyancat in the MBR
+- [**69**星][7m] [Py] [biggerwing/cve-2019-0708-poc](https://github.com/biggerwing/cve-2019-0708-poc) CVE-2019-0708 远程代码执行漏洞批量检测
- [**69**星][5y] [Shell] [begriffs/microservice-template](https://github.com/begriffs/microservice-template) Basic architecture for running and monitoring workers
-- [**69**星][8d] [Java] [auth0/auth0.android](https://github.com/auth0/auth0.android) Android toolkit for Auth0 API
+- [**69**星][4m] [ascotbe/osmographic-brain-mapping](https://github.com/ascotbe/osmographic-brain-mapping) 渗透脑图(渗透步骤)
- [**69**星][5y] [Py] [arvinddoraiswamy/slid](https://github.com/arvinddoraiswamy/slid) 静态链接库检测
- [**69**星][4m] [C#] [antoniococo/runascs](https://github.com/antoniococo/runascs) RunasCs - Csharp and open version of windows builtin runas.exe
-- [**69**星][2y] [androidtamer/androidtamer](https://github.com/androidtamer/androidtamer) We Use Github Extensively and openly. So it becomes dificult to track what's what and what's where. This repository is a master repo to Help with that.
-- [**69**星][1y] [C] [alex9191/kernel-dll-injector](https://github.com/alex9191/kernel-dll-injector) Kernel-Mode Driver that loads a dll into every new created process that loads kernel32.dll module
+- [**69**星][2y] [Py] [alexander-hanel/idapython6to7](https://github.com/alexander-hanel/idapython6to7)
- [**69**星][2y] [Haskell] [adjoint-io/pedersen-commitment](https://github.com/adjoint-io/pedersen-commitment) Cryptographic Commitment Schemes
- [**69**星][1y] [Java] [1135/equationexploit](https://github.com/1135/equationexploit) Eternalblue Doublepulsar exploit
-- [**68**星][3y] [Nginx] [localtunnel/nginx](https://github.com/localtunnel/nginx) nginx container used as the localtunnel load balancer
+- [**68**星][3y] [Py] [yourtion/alfred_shadowsockscontroller](https://github.com/yourtion/alfred_shadowsockscontroller) ShadowsocksX controller for Alfred
+- [**68**星][2y] [C++] [secrary/hooking-via-instrumentationcallback](https://github.com/secrary/hooking-via-instrumentationcallback) codes for my blog post:
+- [**68**星][28d] [Py] [skelsec/kerberoast](https://github.com/skelsec/kerberoast) Kerberoast attack -pure python-
+- [**68**星][2y] [C++] [cmu-sei/biggrep](https://github.com/cmu-sei/biggrep) A scalable search index for binary files
+- [**68**星][6d] [gossip-sjtu/gossip_blog](https://github.com/gossip-sjtu/gossip_blog) 每周定期更新论文笔记分享的markdown以及图片
- [**68**星][1y] [Py] [feeicn/webproxy](https://github.com/feeicn/webproxy) Create an HTTP / HTTPS proxy server based on MITMProxy and log all requests to the log file and parse the log for rewriting into the database.
-- [**68**星][28d] [Py] [lylemi/browser-fuzz-summarize](https://github.com/lylemi/browser-fuzz-summarize) Browser Fuzz Summarize / 浏览器模糊测试综述
+- [**68**星][30d] [Py] [lylemi/browser-fuzz-summarize](https://github.com/lylemi/browser-fuzz-summarize) Browser Fuzz Summarize / 浏览器模糊测试综述
- [**68**星][4y] [Py] [0x90/wifi-scripts](https://github.com/0x90/wifi-scripts) Misc scripts and tools for WiFi
-- [**68**星][10m] [Objective-C] [synacktiv-contrib/cve-2018-4193](https://github.com/Synacktiv-contrib/CVE-2018-4193) exploit for CVE-2018-4193
-- [**68**星][7d] [C] [radareorg/radare2-regressions](https://github.com/radareorg/radare2-regressions) Regression Tests for the Radare2 Reverse Engineer's Debugger
-- [**68**星][2y] [Py] [zldww2011/cve-2018-0802_poc](https://github.com/zldww2011/cve-2018-0802_poc) Exploit the vulnerability to execute the calculator
-- [**68**星][2y] [Java] [ysrc/obfusesmalitext](https://github.com/ysrc/obfusesmalitext) smali文件,jar包字符串混淆,支持gradle插件
-- [**68**星][4y] [Py] [x56/airpyrt-tools](https://github.com/x56/airpyrt-tools) Python module and client for the AirPort device management interface
-- [**68**星][5m] [wbierbower/awesome-physics](https://github.com/wbierbower/awesome-physics)
+- [**68**星][1y] [Shell] [kiyadesu/android](https://github.com/kiyadesu/Android) walk into Android security step by step
+- [**68**星][10m] [ObjC] [synacktiv-contrib/cve-2018-4193](https://github.com/Synacktiv-contrib/CVE-2018-4193) exploit for CVE-2018-4193
+- [**68**星][25d] [PS] [dsccommunity/certificatedsc](https://github.com/dsccommunity/CertificateDsc) This DSC Resource module can be used to simplify administration of certificates on a Windows Server.
+- [**68**星][3d] [C] [radareorg/radare2-regressions](https://github.com/radareorg/radare2-regressions) Regression Tests for the Radare2 Reverse Engineer's Debugger
+- [**68**星][2y] [Java] [yolosec/routerkeygenandroid](https://github.com/yolosec/routerkeygenandroid) Router Keygen generate default WPA/WEP keys for several routers.
- [**68**星][6m] [Py] [usyd-blockchain/vandal](https://github.com/usyd-blockchain/vandal) Static program analysis framework for Ethereum smart contract bytecode.
- [**68**星][5m] [Py] [tintinweb/ethereum-dasm](https://github.com/tintinweb/ethereum-dasm) An ethereum evm bytecode disassembler and static/dynamic analysis tool
- [**68**星][2m] [Py] [thehappydinoa/rootos](https://github.com/thehappydinoa/rootos) macOS Root Helper
- [**68**星][3y] [C] [stealth/plasmapulsar](https://github.com/stealth/plasmapulsar) PLASMA PULSAR
- [**68**星][3y] [Py] [stayliv3/burpsuite-changeu](https://github.com/stayliv3/burpsuite-changeu)
-- [**68**星][28d] [Ruby] [spiderlabs/cve_server](https://github.com/spiderlabs/cve_server) Simple REST-style web service for the CVE searching
-- [**68**星][24d] [Py] [spesmilo/electrum-docs](https://github.com/spesmilo/electrum-docs) Electrum
-- [**68**星][10d] [JS] [simplerisk/code](https://github.com/simplerisk/code) code:SimpleRisk 源码,企业威胁管理
+- [**68**星][26d] [Py] [spesmilo/electrum-docs](https://github.com/spesmilo/electrum-docs) Electrum
+- [**68**星][6d] [JS] [simplerisk/code](https://github.com/simplerisk/code) code:SimpleRisk 源码,企业威胁管理
- [**68**星][1y] [Py] [shengqi158/cve-2018-2628](https://github.com/shengqi158/cve-2018-2628) CVE-2018-2628 & CVE-2018-2893
-- [**68**星][2y] [C] [shay-gueron/aes-gcm-siv](https://github.com/shay-gueron/aes-gcm-siv) AES-GCM-SIV implementations (128 and 256 bit)
+- [**68**星][5m] [C++] [sepehrdaddev/xerxes](https://github.com/sepehrdaddev/xerxes) Xerxes dos tool enhanced
- [**68**星][6y] [Py] [secfree/bcrpscan](https://github.com/secfree/bcrpscan) Base on crawler result web path scanner.
+- [**68**星][3y] [screetsec/wordlist-dracos](https://github.com/screetsec/wordlist-dracos) Collection My Wordlist
- [**68**星][1y] [JS] [samhaxr/xxrf-shots](https://github.com/samhaxr/xxrf-shots) XXRF Shots - Useful for testing SSRF vulnerability
- [**68**星][5m] [C#] [sailro/bdtunnel](https://github.com/sailro/bdtunnel) BoutDuTunnel is able to create virtual connections tunnelled in HTTP requests.
-- [**68**星][2y] [Py] [s0lst1c3/sentrygun](https://github.com/s0lst1c3/sentrygun) Rogue AP killer
+- [**68**星][10m] [JS] [saelo/v9](https://github.com/saelo/v9) Files for the "v9" challenge of 34C3 CTF. See the greeting message in server.go for more information about the challenge
- [**68**星][3y] [C++] [rwfpl/rewolf-gogogadget](https://github.com/rwfpl/rewolf-gogogadget) kernel exploitation helper class
- [**68**星][1y] [HTML] [rvrsh3ll/word-doc-video-embed-exe-poc](https://github.com/rvrsh3ll/word-doc-video-embed-exe-poc)
- [**68**星][2y] [richinseattle/evolutionarykernelfuzzing](https://github.com/richinseattle/evolutionarykernelfuzzing) Materials for the Evolutionary Kernel Fuzzing talk at Black Hat USA 2017
+- [**68**星][2y] [C] [ps4dev/ps4sdk](https://github.com/ps4dev/ps4sdk) Modular open source ps4 sdk with user and kernel space support
- [**68**星][12m] [Py] [poorbillionaire/usn-journal-parser](https://github.com/poorbillionaire/usn-journal-parser) Python script to parse the NTFS USN Journal
-- [**68**星][2y] [Py] [planet-work/php-malware-scanner](https://github.com/planet-work/php-malware-scanner) PHP files analyzer for malware detection
- [**68**星][1y] [PHP] [philipjohn/exploit-scanner-hashes](https://github.com/philipjohn/exploit-scanner-hashes) Hashes files for the WordPress Exploit Scanner plugin
- [**68**星][4m] [outflanknl/presentations](https://github.com/outflanknl/presentations)
-- [**68**星][2y] [Swift] [nwhacks-loki/loki](https://github.com/nwhacks-loki/loki) Proof-of-concept of emotion-targeted content delivery using machine learning and ARKit.
-- [**68**星][15d] [Py] [nmantani/fileinsight-plugins](https://github.com/nmantani/fileinsight-plugins) a decoding toolbox of McAfee FileInsight hex editor for malware analysis
- [**68**星][10m] [C] [ningzhenyu/nailgun](https://github.com/ningzhenyu/nailgun) Nailgun attack on ARM devices.
+- [**68**星][4m] [C] [neural75/gqrx-scanner](https://github.com/neural75/gqrx-scanner) A frequency scanner for Gqrx Software Defined Radio receiver
+- [**68**星][3m] [Py] [mrh0wl/cloudmare](https://github.com/mrh0wl/cloudmare) Cloudflare real IP tracker.
- [**68**星][2y] [Perl] [mobrine-mob/m0b-tool](https://github.com/mobrine-mob/m0b-tool) exploit
-- [**68**星][4y] [C] [microwave89/rtsectiontest](https://github.com/microwave89/rtsectiontest) An Attempt to Bypass Memory Scanners By Misusing the ntdll.dll "RT" Section.
-- [**68**星][3y] [Ruby] [melvinsh/subresolve](https://github.com/melvinsh/subresolve) Resolve and quickly portscan a list of (sub)domains.
- [**68**星][2y] [Py] [mazenelzanaty/twlocation](https://github.com/mazenelzanaty/twlocation) Python script that gets Twitter users' tweets location
-- [**68**星][12d] [PHP] [markri/wp-sec](https://github.com/markri/wp-sec) Wp-sec is an exentsion for wp-cli which checks for Wordpress CVE security issues at wpvulndb.com
+- [**68**星][14d] [PHP] [markri/wp-sec](https://github.com/markri/wp-sec) Wp-sec is an exentsion for wp-cli which checks for Wordpress CVE security issues at wpvulndb.com
- [**68**星][6m] [Py] [marco-lancini/docker_offensive_elk](https://github.com/marco-lancini/docker_offensive_elk) Elasticsearch for Offensive Security
+- [**68**星][3m] [C#] [malwarialabs/derbycon2019](https://github.com/malwarialabs/derbycon2019) Code & Slides For DerbyCon 2019
- [**68**星][8m] [Py] [lunixbochs/revsync](https://github.com/lunixbochs/revsync) IDA和Binja实时同步插件
-- [**68**星][13d] [Go] [letsencrypt/ct-woodpecker](https://github.com/letsencrypt/ct-woodpecker) A tool to monitor a CT log for operational problems
-- [**68**星][25d] [C#] [leoloobeek/csharp](https://github.com/leoloobeek/csharp) Various C# projects for offensive security
+- [**68**星][27d] [C#] [leoloobeek/csharp](https://github.com/leoloobeek/csharp) Various C# projects for offensive security
- [**68**星][9y] [Py] [laanwj/decuda](https://github.com/laanwj/decuda) Decuda and cudasm, the CUDA binary utilities package. Low-level tools for NVidia G80 GPUs.
- [**68**星][3y] [Py] [kkar/vbs-obfuscator-in-python](https://github.com/kkar/vbs-obfuscator-in-python) VBScript obfuscation to allow PenTesters bypass countermeasures.
-- [**68**星][3y] [Py] [kevsersrca/2016lykagguvenligivesizmatestleri](https://github.com/kevsersrca/2016lykagguvenligivesizmatestleri) Network Security Notes
- [**68**星][1y] [Py] [kdaoudieh/bella](https://github.com/kdaoudieh/bella) Bella is a pure python post-exploitation data mining tool & remote administration tool for macOS.
- [**68**星][2m] [Py] [jas502n/cve-2018-2628](https://github.com/jas502n/cve-2018-2628) Weblogic 反序列化漏洞(CVE-2018-2628)
+- [**68**星][2y] [C] [invictus1306/arm-episodes](https://github.com/invictus1306/arm-episodes) Arm Episodes
- [**68**星][6y] [intrepidusgroup/rpi-atv](https://github.com/intrepidusgroup/rpi-atv) David Schuetz's Raspberry Pi/Apple TV talk at Derbycon
-- [**68**星][6m] [Py] [incredibleindishell/windows-ad-environment-related](https://github.com/incredibleindishell/windows-ad-environment-related) This Repository contains the stuff related to windows Active directory environment exploitation
- [**68**星][2y] [imp0wd3r/active-directory-pentest](https://github.com/imp0wd3r/active-directory-pentest) Windows域渗透学习笔记
- [**68**星][2y] [Go] [ihciah/inner-shadowsocks](https://github.com/ihciah/inner-shadowsocks) Shadowsocks -> socks5 on server. (Created for providing socks5 proxy for Telegram)
- [**68**星][6m] [Py] [idiom/pftriage](https://github.com/idiom/pftriage) Python tool and library to help analyze files during malware triage and analysis.
- [**68**星][2y] [Py] [ianmiell/autotrace](https://github.com/ianmiell/autotrace) Runs a process, and gives you the output along with other telemetry on the process, all in one terminal window.
+- [**68**星][2d] [C] [horsicq/stringsx64dbg](https://github.com/horsicq/stringsx64dbg) Strings plugin for x64dbg
- [**68**星][5m] [C#] [holly-hacker/dnspy.extension.holly](https://github.com/holly-hacker/dnspy.extension.holly) A dnSpy extension to aid reversing of obfuscated assemblies
- [**68**星][3y] [C] [henkaku/vitashell](https://github.com/henkaku/vitashell) This is a fork of
-- [**68**星][8d] [Py] [greenbone/gvm-tools](https://github.com/greenbone/gvm-tools) Remote control your Greenbone Vulnerability Manager (GVM)
+- [**68**星][2y] [hacker0x01/h1-212-ctf-solutions](https://github.com/hacker0x01/h1-212-ctf-solutions) A collection of the solutions people wrote for the H1-212 Capture The Flag event
+- [**68**星][3m] [Py] [gadiluna/safe](https://github.com/gadiluna/safe) Self-Attentive Function Embeddings for binary similarity
- [**68**星][6m] [Py] [funilrys/pyfunceble](https://github.com/funilrys/pyfunceble) The tool to check the availability or syntax of domains, IPv4 or URL.
-- [**68**星][3m] [TypeScript] [flathub/linux-store-frontend](https://github.com/flathub/linux-store-frontend) A web application to browse and install applications present in Flatpak repositories. Powers
+- [**68**星][3m] [TS] [flathub/linux-store-frontend](https://github.com/flathub/linux-store-frontend) A web application to browse and install applications present in Flatpak repositories. Powers
- [**68**星][2y] [Go] [fideliscyber/x509](https://github.com/fideliscyber/x509) 用X.509数字证书建立隐蔽数据交换通道 PoC
+- [**68**星][3m] [Py] [endgameinc/eqllib](https://github.com/endgameinc/eqllib)
- [**68**星][3y] [CSS] [enddo/cjexploiter](https://github.com/enddo/cjexploiter) Drag and Drop ClickJacking exploit development assistance tool.
- [**68**星][4y] [C] [elfmaster/kdress](https://github.com/elfmaster/kdress) Transform vmlinuz into a fully debuggable vmlinux that can be used with /proc/kcore
- [**68**星][1y] [PHP] [dpiekacz/gixlg](https://github.com/dpiekacz/gixlg) GIXLG - Looking Glass
-- [**68**星][12d] [Py] [devopshq/artifactory](https://github.com/devopshq/artifactory) dohq-artifactory: a Python client for Artifactory
- [**68**星][9m] [Ruby] [dev-sec/chef-windows-hardening](https://github.com/dev-sec/chef-windows-hardening) This chef cookbook provides windows hardening configurations for the DevSec Windows baseline profile.
- [**68**星][2y] [Py] [dekunukem/facepunch](https://github.com/dekunukem/facepunch) Raspberry Pi based facial recognition punch clock
- [**68**星][3y] [HTML] [davevs/dvxte](https://github.com/davevs/dvxte) Damn Vulnerable Xebia Training Environment
- [**68**星][8m] [C] [comaeio/livecloudkd](https://github.com/comaeio/livecloudkd) Hyper-V Research is trendy now
-- [**68**星][5y] [PowerShell] [cheetz/powertools](https://github.com/cheetz/powertools) Veil's PowerTools are a collection of PowerShell projects with a focus on offensive operations.
-- [**68**星][6m] [Java] [c0d3p1ut0s/java-security-manager-bypass](https://github.com/c0d3p1ut0s/java-security-manager-bypass)
- [**68**星][3y] [CMake] [bastilleresearch/gr-nordic](https://github.com/bastilleresearch/gr-nordic) GNU Radio module and Wireshark dissector for the Nordic Semiconductor nRF24L Enhanced Shockburst protocol.
-- [**68**星][4m] [ascotbe/osmographic-brain-mapping](https://github.com/ascotbe/osmographic-brain-mapping) 渗透脑图(渗透步骤)
+- [**68**星][8m] [Shell] [baguswiratmaadi/reverie](https://github.com/baguswiratmaadi/reverie) Automated Pentest Tools Designed For Parrot Linux
+- [**68**星][4d] [Java] [auth0/auth0.android](https://github.com/auth0/auth0.android) Android toolkit for Auth0 API
- [**68**星][3y] [C] [angelkillah/zer0m0n](https://github.com/angelkillah/zer0m0n) zer0m0n driver for cuckoo sandbox
-- [**68**星][2y] [Py] [alexander-hanel/idapython6to7](https://github.com/alexander-hanel/idapython6to7)
- [**68**星][2y] [C] [akayn/kbmon](https://github.com/akayn/kbmon) Kernel Mode, driver only, ring O, remote UDP ,windows 10, keylogger. (no data needs to be writen to disk..).
- [**68**星][2m] [C] [aerosoul94/ida_gel](https://github.com/aerosoul94/ida_gel) A collection of IDA loaders for various game console ELF's. (PS3, PSVita, WiiU)
+- [**68**星][5y] [C++] [987432340/lcx](https://github.com/987432340/lcx) 自修改免杀lcx端口转发工具
- [**68**星][2y] [Py] [3xp10it/xdump](https://github.com/3xp10it/xdump) Drag database with "one sentence" webshell
- [**68**星][11m] [0xfe/hacking-stellar](https://github.com/0xfe/hacking-stellar) A hacker's guide to using the Stellar blockchain platform.
-- [**67**星][2y] [C++] [secrary/hooking-via-instrumentationcallback](https://github.com/secrary/hooking-via-instrumentationcallback) codes for my blog post:
-- [**67**星][9d] [Py] [ehco1996/aioshadowsocks](https://github.com/ehco1996/aioshadowsocks) 用 asyncio 重写 shadowsocks ~
- [**67**星][4y] [Ruby] [achillean/shodan-ruby](https://github.com/achillean/shodan-ruby) Ruby library for SHODAN
+- [**67**星][9m] [Py] [ehco1996/lazyspider](https://github.com/ehco1996/lazyspider) 爬虫的各种坑 我来填 :)
+- [**67**星][2m] [404notf0und/my-security-algorithm-architecture](https://github.com/404notf0und/my-security-algorithm-architecture) 404 Not Found的安全算法知识体系:安全、算法、安全算法(面试前必看一遍!!!)
+- [**67**星][10d] [pluwen/china-domain-whitelist](https://github.com/pluwen/china-domain-whitelist) 常用中国网站白名单,纯列表,用于 SwitchyOmega,控制不走代理的网站。
- [**67**星][8y] [Py] [jedahan/haiku-wifi](https://github.com/jedahan/haiku-wifi) turn your wireless router's extra radios into a public billboard!
- [**67**星][2m] [Java] [static-flow/burpsuite-team-extension](https://github.com/static-flow/burpsuite-team-extension) This Burpsuite plugin allows for multiple web app testers to share their proxy history with each other in real time. Requests that comes through your Burpsuite instance will be replicated in the history of the other testers and vice-versa!
-- [**67**星][1y] [Shell] [kiyadesu/android](https://github.com/kiyadesu/Android) walk into Android security step by step
- [**67**星][9m] [Py] [phxbandit/scripts-and-tools](https://github.com/phxbandit/scripts-and-tools) Scripts and utilities to help your hacking needs
- [**67**星][2y] [vysecurity/cve-2018-4878](https://github.com/vysecurity/CVE-2018-4878) Aggressor Script to launch IE driveby for CVE-2018-4878
-- [**67**星][23d] [PowerShell] [dsccommunity/certificatedsc](https://github.com/dsccommunity/CertificateDsc) This DSC Resource module can be used to simplify administration of certificates on a Windows Server.
- [**67**星][9m] [Py] [phxbandit/scripts-and-tools](https://github.com/phxbandit/scripts-and-tools) Scripts and utilities to help your hacking needs
-- [**67**星][13d] [Shell] [sclorg/s2i-php-container](https://github.com/sclorg/s2i-php-container) PHP container images based on Red Hat Software Collections and intended for OpenShift and general usage, that provide a platform for building and running PHP applications. Users can choose between Red Hat Enterprise Linux, Fedora, and CentOS based images.
- [**67**星][2m] [C] [brandonplank/rootlessjb4](https://github.com/BrandonPlank/rootlessJB4) rootlessJB that supports iOS 12.0 - 12.2 & 12.4
- [**67**星][1y] [JS] [radareorg/radare2-webui](https://github.com/radareorg/radare2-webui) webui repository for radare2
- [**67**星][3y] [Java] [octopus-platform/bjoern](https://github.com/octopus-platform/bjoern) Binary analysis platform based on Octopus and Radare2
- [**67**星][2y] [shmilylty/awesome-malware-analysis](https://github.com/shmilylty/awesome-malware-analysis) A curated list of awesome malware analysis tools and resources
- [**67**星][1y] [PHP] [xsuperbug/payloads](https://github.com/xsuperbug/payloads)
-- [**67**星][12d] [Py] [x4nth055/pythoncode-tutorials](https://github.com/x4nth055/pythoncode-tutorials) The Python Code Tutorials
- [**67**星][6m] [Py] [vesche/histstat](https://github.com/vesche/histstat) history for netstat
+- [**67**星][3y] [Shell] [trpt/usbdeath](https://github.com/trpt/usbdeath) anti-forensic tool that writes udev rules for known usb devices and do some things at unknown usb insertion or specific usb device removal
- [**67**星][11m] [C++] [trailofbits/clang-cfi-showcase](https://github.com/trailofbits/clang-cfi-showcase) Sample programs that illustrate how to use control flow integrity with the clang compiler
+- [**67**星][7m] [Py] [toxydose/duckyspark](https://github.com/toxydose/duckyspark) Translator from USB-Rubber-Ducky payloads to a Digispark code.
- [**67**星][5m] [Shell] [tasket/qubes-vpn-support](https://github.com/tasket/qubes-vpn-support) VPN configuration in Qubes OS
- [**67**星][1y] [Py] [takeshixx/knxmap](https://github.com/takeshixx/knxmap) KNXnet/IP scanning and auditing tool for KNX home automation installations.
-- [**67**星][5m] [Jupyter Notebook] [surajr/url-classification](https://github.com/surajr/url-classification) Machine learning to classify Malicious (Spam)/Benign URL's
- [**67**星][4y] [C#] [stphivos/rat-shell](https://github.com/stphivos/rat-shell) Windows Remote Access Trojan (RAT)
- [**67**星][5y] [Java] [ssexxe/xxebugfind](https://github.com/ssexxe/xxebugfind) A tool for detecting XML External Entity (XXE) vulnerabilities in Java applications
- [**67**星][2y] [Java] [sola-da/synode](https://github.com/sola-da/synode) Automatically Preventing Code Injection Attacks on Node.js
- [**67**星][8m] [JS] [sindresorhus/debounce-fn](https://github.com/sindresorhus/debounce-fn) Debounce a function
-- [**67**星][5m] [C++] [sepehrdaddev/xerxes](https://github.com/sepehrdaddev/xerxes) Xerxes dos tool enhanced
-- [**67**星][10m] [JS] [saelo/v9](https://github.com/saelo/v9) Files for the "v9" challenge of 34C3 CTF. See the greeting message in server.go for more information about the challenge
+- [**67**星][3y] [Py] [secwiki/vulscritp](https://github.com/secwiki/vulscritp) 内网渗透脚本
+- [**67**星][1m] [Py] [s1egesystems/ghostdelivery](https://github.com/s1egesystems/ghostdelivery) .vbs script to deliver payload with persistence.
+- [**67**星][9m] [YARA] [rootkiter/binary-files](https://github.com/rootkiter/binary-files) EarthWorm/Termite 停止更新
- [**67**星][4y] [Py] [robbyfux/ragpicker](https://github.com/robbyfux/ragpicker) Ragpicker is a Plugin based malware crawler with pre-analysis and reporting functionalities. Use this tool if you are testing antivirus products, collecting malware for another analyzer/zoo.
-- [**67**星][11d] [Ruby] [puppetlabs/puppetlabs-inifile](https://github.com/puppetlabs/puppetlabs-inifile) Resource types for managing settings in INI files
-- [**67**星][2y] [C] [ps4dev/ps4sdk](https://github.com/ps4dev/ps4sdk) Modular open source ps4 sdk with user and kernel space support
+- [**67**星][1m] [retme7/my-slides](https://github.com/retme7/my-slides) My slides
+- [**67**星][3y] [JS] [pythonran/pcap_tools](https://github.com/pythonran/pcap_tools) 网络流量可配置嗅探,流量包解析,漏洞规则扫描,生成报告. ....搞网络安全这块,还凑合着用吧
+- [**67**星][3d] [Ruby] [puppetlabs/puppetlabs-inifile](https://github.com/puppetlabs/puppetlabs-inifile) Resource types for managing settings in INI files
+- [**67**星][6y] [PHP] [pshep/anubis](https://github.com/pshep/anubis) Web front-end (api interface) to CGMINER
+- [**67**星][4m] [Py] [pjialin/pyproxy-async](https://github.com/pjialin/pyproxy-async) 基于 Python Asyncio + Redis 实现的代理池
- [**67**星][1y] [C++] [oyyd/nysocks](https://github.com/oyyd/nysocks) Nysocks binds kcp and libuv to provide an aggressive tcp tunnel in nodejs.
+- [**67**星][6m] [Py] [orleven/tentacle](https://github.com/orleven/tentacle) Tentacle is a POC vulnerability verification and exploit framework. It supports free extension of exploits and uses POC scripts. It supports calls to zoomeye, fofa, shodan and other APIs to perform bulk vulnerability verification for multiple targets.
- [**67**星][2m] [Java] [netspi/burpcollaboratordnstunnel](https://github.com/netspi/burpcollaboratordnstunnel) A DNS tunnel utilizing the Burp Collaborator
-- [**67**星][3m] [Py] [mrh0wl/cloudmare](https://github.com/mrh0wl/cloudmare) Cloudflare real IP tracker.
- [**67**星][9m] [Go] [mozilla/audit-go](https://github.com/mozilla/audit-go) Linux Audit Plugin for heka written using netlink Protocol in golang and Lua
-- [**67**星][3m] [C#] [malwarialabs/derbycon2019](https://github.com/malwarialabs/derbycon2019) Code & Slides For DerbyCon 2019
+- [**67**星][4y] [C] [microwave89/rtsectiontest](https://github.com/microwave89/rtsectiontest) An Attempt to Bypass Memory Scanners By Misusing the ntdll.dll "RT" Section.
- [**67**星][5y] [C] [malwaretech/basichook](https://github.com/malwaretech/basichook) x86 Inline hooking engine (using trampolines)
- [**67**星][4y] [C] [luigirizzo/netmap-libpcap](https://github.com/luigirizzo/netmap-libpcap) Automatically exported from code.google.com/p/netmap-libpcap
- [**67**星][12m] [Py] [lucasg/idamagnum](https://github.com/lucasg/idamagnum) 在IDA中向MagnumDB发起请求, 查询枚举常量可能的值
- [**67**星][2y] [Go] [lubyruffy/tcptunnel](https://github.com/lubyruffy/tcptunnel) 将本地内网服务器映射到公网。
- [**67**星][2y] [C++] [leeqwind/holicpoc](https://github.com/leeqwind/holicpoc) POC and exploitation of vulnerabilities
- [**67**星][2y] [Swift] [ktakayama/notificationcrash](https://github.com/ktakayama/notificationcrash)
-- [**67**星][3y] [C] [klks/checksec](https://github.com/klks/checksec) x64dbg插件,用于检查应用程序各模块的安全设置,包括:SafeSEH、DEP、ASLR、、GS、CFG、Signature
-- [**67**星][2y] [C] [invictus1306/arm-episodes](https://github.com/invictus1306/arm-episodes) Arm Episodes
-- [**67**星][7d] [C] [horsicq/stringsx64dbg](https://github.com/horsicq/stringsx64dbg) Strings plugin for x64dbg
+- [**67**星][18d] [C++] [jaegertracing/jaeger-client-cpp](https://github.com/jaegertracing/jaeger-client-cpp) C++ OpenTracing binding for Jaeger
+- [**67**星][1m] [YARA] [itayc0hen/apt-ecosystem](https://github.com/itayc0hen/apt-ecosystem) This repository contains the website and the tools which are part of the joint research between Check Point Research and Intezer to map the connections inside the APT Ecosystem of Russia.
+- [**67**星][2y] [ObjC] [iscanner/iscanner_ios](https://github.com/iscanner/iscanner_ios) An easy-to-use scanner app for iOS.
+- [**67**星][1y] [PHP] [irelance/jsc-decompile-mozjs-34](https://github.com/irelance/jsc-decompile-mozjs-34) A javascript bytecode decoder for mozilla spider-monkey version 34. May decompile jsc file compile by cocos-2dx
- [**67**星][2y] [Py] [hlldz/wildpwn](https://github.com/hlldz/wildpwn) Brute forcer and shell deployer for WildFly
- [**67**星][6m] [Ruby] [hercules-team/augeasproviders](https://github.com/hercules-team/augeasproviders) Alternative Augeas-based providers for Puppet
- [**67**星][3y] [Py] [harmj0y/impdump](https://github.com/harmj0y/impdump) This is a simple parser for/decrypter for Impacket's esentutl.py utility. It assists with decrypting hashes and hash histories from ntds.dit databases.
-- [**67**星][2y] [hacker0x01/h1-212-ctf-solutions](https://github.com/hacker0x01/h1-212-ctf-solutions) A collection of the solutions people wrote for the H1-212 Capture The Flag event
-- [**67**星][7d] [Java] [gmu-swe/phosphor](https://github.com/gmu-swe/phosphor) Phosphor: Dynamic Taint Tracking for the JVM
+- [**67**星][8m] [Py] [grayddq/publicsecscan](https://github.com/grayddq/publicsecscan) 针对大量WEB资产进行分布式WEB安全扫描,发现web环境下常规的一些安全漏洞
+- [**67**星][5d] [Java] [gmu-swe/phosphor](https://github.com/gmu-swe/phosphor) Phosphor: Dynamic Taint Tracking for the JVM
- [**67**星][4m] [Go] [gen0cide/laforge](https://github.com/gen0cide/laforge) Competition Infrastructure Management
-- [**67**星][3m] [Py] [gadiluna/safe](https://github.com/gadiluna/safe) Self-Attentive Function Embeddings for binary similarity
-- [**67**星][1m] [Shell] [f5networks/f5-azure-arm-templates](https://github.com/f5networks/f5-azure-arm-templates) Azure Resource Manager Templates for quickly deploying BIG-IP services in Azure
+- [**67**星][5y] [C] [gabrtv/shocker](https://github.com/gabrtv/shocker) Shocker / Docker Breakout PoC
+- [**67**星][2d] [Shell] [f5networks/f5-azure-arm-templates](https://github.com/f5networks/f5-azure-arm-templates) Azure Resource Manager Templates for quickly deploying BIG-IP services in Azure
- [**67**星][7m] [JS] [exodusintel/cve-2019-0808](https://github.com/exodusintel/cve-2019-0808) Win32k Exploit by Grant Willcox
- [**67**星][2m] [doctorwebltd/malware-iocs](https://github.com/doctorwebltd/malware-iocs)
- [**67**星][10m] [dkhuuthe/madlira](https://github.com/dkhuuthe/madlira) Malware detection using learning and information retrieval for Android
- [**67**星][6m] [Py] [deptofdefense/salsa](https://github.com/deptofdefense/salsa) Salvaging Static Analysis
+- [**67**星][2y] [Py] [debasishm89/openxmolar](https://github.com/debasishm89/openxmolar) A MS OpenXML Format Fuzzing Framework
+- [**67**星][2m] [HTML] [deadlyelder/tools-for-cryptanalysis](https://github.com/deadlyelder/tools-for-cryptanalysis) A repository that aims to provide tools for cryptography and cryptanalysis
- [**67**星][1y] [Nix] [dapphub/ds-math](https://github.com/dapphub/ds-math) Safe arithmetic
+- [**67**星][8d] [Py] [cyboxproject/python-cybox](https://github.com/cyboxproject/python-cybox) A Python library for parsing, manipulating, and generating CybOX content.
- [**67**星][1y] [C++] [codewhitesec/unmarshalpwn](https://github.com/codewhitesec/unmarshalpwn) POC for CVE-2018-0824
-- [**67**星][12m] [C#] [cobbr/sharpshell](https://github.com/cobbr/sharpshell) SharpShell is a proof-of-concept offensive C# scripting engine that utilizes the Rosyln C# compiler to quickly cross-compile .NET Framework console applications or libraries.
-- [**67**星][8m] [Py] [chipik/sap_gw_rce_exploit](https://github.com/chipik/sap_gw_rce_exploit) SAP Gateway RCE exploits
+- [**67**星][4m] [C#] [codedx/codepulse](https://github.com/codedx/codepulse) Code Pulse is a real-time code coverage tool for penetration testing activities
+- [**67**星][1y] [C#] [cobbr/sharpshell](https://github.com/cobbr/sharpshell) SharpShell is a proof-of-concept offensive C# scripting engine that utilizes the Rosyln C# compiler to quickly cross-compile .NET Framework console applications or libraries.
+- [**67**星][1m] [chef-koch/projectx](https://github.com/chef-koch/projectx) DarkWeb Overview
+- [**67**星][2m] [C++] [changeofpace/mouclassinputinjection](https://github.com/changeofpace/mouclassinputinjection) MouClassInputInjection implements a kernel interface for injecting mouse input data packets into the input data stream of HID USB mouse devices.
- [**67**星][4y] [Py] [byt3bl33d3r/beef-api](https://github.com/byt3bl33d3r/beef-api) Python library that facilitates interfacing with BeEF via it's RESTful API
-- [**67**星][7y] [Assembly] [brainsmoke/nyanmbr](https://github.com/brainsmoke/nyanmbr) Nyancat in the MBR
+- [**67**星][3y] [JS] [bitsofinfo/stateful-process-command-proxy](https://github.com/bitsofinfo/stateful-process-command-proxy) node.js module for executing os commands against a pool of stateful child processes such as bash or powershell via stdout and stderr streams
- [**67**星][3m] [Shell] [bgeesaman/kube-env-stealer](https://github.com/bgeesaman/kube-env-stealer) Automated GKE Kubelet Impersonation and Cluster Secret Stealer via kube-env
-- [**67**星][8m] [Shell] [baguswiratmaadi/reverie](https://github.com/baguswiratmaadi/reverie) Automated Pentest Tools Designed For Parrot Linux
- [**67**星][2y] [Py] [azizaltuntas/pymap-scanner](https://github.com/azizaltuntas/pymap-scanner)
-- [**67**星][2m] [Py] [alexdetrano/4can](https://github.com/alexdetrano/4can)
- [**67**星][2y] [Makefile] [adamdoupe/ctf-training](https://github.com/adamdoupe/ctf-training)
- [**67**星][2y] [abazhaniuk/publications](https://github.com/abazhaniuk/publications) Slides, Papers, Links to CVEs and advisories
-- [**67**星][5y] [C++] [987432340/lcx](https://github.com/987432340/lcx) 自修改免杀lcx端口转发工具
- [**67**星][1y] [Py] [3xp10it/xwifi](https://github.com/3xp10it/xwifi) Auto crack wifi in macOS
+- [**67**星][1y] [C++] [3gstudent/use-com-objects-to-bypass-uac](https://github.com/3gstudent/use-com-objects-to-bypass-uac)
+- [**67**星][1y] [Go] [003random/getjs](https://github.com/003random/getjs) A tool to fastly get all javascript sources/files
+- [**66**星][t] [Go] [mvdan/garble](https://github.com/mvdan/garble) Obfuscate Go builds
- [**66**星][3y] [C] [shellphish/driller-afl](https://github.com/shellphish/driller-afl) A version of AFL tailored for Driller's use in analyzing CGC binaries.
- [**66**星][3y] [Py] [gojhonny/pentesting-scripts](https://github.com/gojhonny/pentesting-scripts) Useful pentesting scripts
- [**66**星][3y] [jipegit/irnotes](https://github.com/jipegit/irnotes) Some IR notes
- [**66**星][6m] [Hack] [defuse/crackstation](https://github.com/defuse/crackstation) Source code for my crackstation.net website.
-- [**66**星][4m] [splunk/ta-microsoft-sysmon](https://github.com/splunk/ta-microsoft-sysmon) TA-microsoft-sysmon
-- [**66**星][18d] [Py] [imtiazkarimik23/atfuzzer](https://github.com/imtiazkarimik23/atfuzzer) "Opening Pandora's Box through ATFuzzer: Dynamic Analysis of AT Interface for Android Smartphones" ACSAC 2019
-- [**66**星][8d] [pluwen/china-domain-whitelist](https://github.com/pluwen/china-domain-whitelist) 常用中国网站白名单,纯列表,用于 SwitchyOmega,控制不走代理的网站。
+- [**66**星][5m] [splunk/ta-microsoft-sysmon](https://github.com/splunk/ta-microsoft-sysmon) TA-microsoft-sysmon
+- [**66**星][10d] [Rust] [io12/pwninit](https://github.com/io12/pwninit) pwninit - automate starting binary exploit challenges
+- [**66**星][14d] [C++] [moemod/csmoe](https://github.com/moemod/csmoe) Cross-platform Counter-Strike mod based on Xash3D (previously named CSBTE-Mobile)
- [**66**星][3y] [JS] [ethjs/ethjs-provider-signer](https://github.com/ethjs/ethjs-provider-signer) A simple web3 standard provider that signs eth_sendTransaction payloads.
+- [**66**星][1y] [Py] [angelkitty/bilibili-smallvideo](https://github.com/angelkitty/bilibili-smallvideo)
+- [**66**星][2m] [Py] [chris-rands/emojify](https://github.com/chris-rands/emojify) Obfuscate your python script by converting it to emoji icons
- [**66**星][12m] [HTML] [zadewg/livebox-0day](https://github.com/zadewg/livebox-0day) Arcadyan ARV7519RW22-A-L T VR9 1.2 Multiple security vulnerabilities affecting latest firmware release on ORANGE Livebox modems.
- [**66**星][5y] [Assembly] [yifanlu/spider3dstools](https://github.com/yifanlu/spider3dstools) Tools to work with 3DS 9.x Spider exploit
- [**66**星][10m] [Py] [yelp/parcelgen](https://github.com/yelp/parcelgen) Helpful tool to make data objects easier for Android
- [**66**星][3y] [xnymia/suricata-signatures](https://github.com/xnymia/suricata-signatures) Suricata rules for Emerging Threats and funkyness
- [**66**星][6m] [Ruby] [weppos/whois-parser](https://github.com/weppos/whois-parser) An intelligent — pure Ruby — WHOIS parser.
- [**66**星][4y] [C] [wekillpeople/browser-dumpwd](https://github.com/wekillpeople/browser-dumpwd) Dump browser passwords(chrome, firefox) with sqlite3 lib.
-- [**66**星][8m] [Visual Basic] [visualbasic6/chatter](https://github.com/visualbasic6/chatter) internet monitoring osint tool for windows
+- [**66**星][8m] [JS] [webxscan/linux_rat](https://github.com/webxscan/linux_rat) LINUX集群控制(LINUX反弹式远控) LINUX反向链接运维 BY:QQ:879301117
+- [**66**星][8m] [Visual Basic .NET] [visualbasic6/chatter](https://github.com/visualbasic6/chatter) internet monitoring osint tool for windows
- [**66**星][6m] [Shell] [violentlydave/mkhtaccess_red](https://github.com/violentlydave/mkhtaccess_red) Auto-generate an HTaccess for payload delivery -- automatically pulls ips/nets/etc from known sandbox companies/sources that have been seen before, and redirects them to a benign payload.
-- [**66**星][2y] [Shell] [trpt/usbdeath](https://github.com/trpt/usbdeath) anti-forensic tool that writes udev rules for known usb devices and do some things at unknown usb insertion or specific usb device removal
-- [**66**星][7d] [Rust] [trailofbits/siderophile](https://github.com/trailofbits/siderophile) Find the ideal fuzz targets in a Rust codebase
-- [**66**星][7m] [Py] [toxydose/duckyspark](https://github.com/toxydose/duckyspark) Translator from USB-Rubber-Ducky payloads to a Digispark code.
-- [**66**星][7m] [Py] [thombashi/allpairspy](https://github.com/thombashi/allpairspy) A python library for test combinations generator. The generator allows one to create a set of tests using "pairwise combinations" method, reducing a number of combinations of variables into a lesser set that covers most situations.
+- [**66**星][9d] [Rust] [trailofbits/siderophile](https://github.com/trailofbits/siderophile) Find the ideal fuzz targets in a Rust codebase
+- [**66**星][2y] [Shell] [thestr4ng3r/arcore-patch](https://github.com/thestr4ng3r/arcore-patch) Attempt to get ARCore Preview 2 running on unsupported devices
- [**66**星][8y] [JS] [therook/csrf-request-builder](https://github.com/therook/csrf-request-builder)
- [**66**星][3y] [Py] [syss-research/nrf24-playset](https://github.com/syss-research/nrf24-playset) Software tools for Nordic Semiconductor nRF24-based devices like wireless keyboards, mice, and presenters
+- [**66**星][17d] [C] [seanheelan/heaplayout](https://github.com/seanheelan/heaplayout) Source code for paper 'Automatic Heap Layout Manipulation for Exploitation'
- [**66**星][3y] [Assembly] [scorchsecurity/systorm](https://github.com/scorchsecurity/systorm) NASM Standard Library for shellcode
- [**66**星][2y] [Py] [sapir/sonare](https://github.com/sapir/sonare) A Qt-based disassembly viewer based on radare2
-- [**66**星][23d] [PowerShell] [samratashok/deploy-deception](https://github.com/samratashok/deploy-deception) A PowerShell module to deploy active directory decoy objects.
+- [**66**星][25d] [PS] [samratashok/deploy-deception](https://github.com/samratashok/deploy-deception) A PowerShell module to deploy active directory decoy objects.
- [**66**星][2y] [Lua] [s4n7h0/nse](https://github.com/s4n7h0/nse) Some of my work on Nmap Scripts (NSE)
-- [**66**星][30d] [Py] [s1egesystems/ghostdelivery](https://github.com/s1egesystems/ghostdelivery) .vbs script to deliver payload with persistence.
- [**66**星][5y] [C++] [rwfpl/rewolf-dllpackager](https://github.com/rwfpl/rewolf-dllpackager) Simple tool to bundle windows DLLs with PE executable
-- [**66**星][1m] [retme7/my-slides](https://github.com/retme7/my-slides) My slides
- [**66**星][1m] [Py] [remg427/misp42splunk](https://github.com/remg427/misp42splunk) A Splunk app to use MISP in background
- [**66**星][12m] [Py] [r3vn/punk.py](https://github.com/r3vn/punk.py) unix SSH post-exploitation 1337 tool
-- [**66**星][2y] [Py] [qianniaoge/f-scrack](https://github.com/qianniaoge/f-scrack) 一款python编写的轻量级弱口令检测脚本,目前支持以下服务:FTP、MYSQL、MSSQL、MONGODB、REDIS、TELNET、ELASTICSEARCH、POSTGRESQL。
-- [**66**星][3y] [JS] [pythonran/pcap_tools](https://github.com/pythonran/pcap_tools) 网络流量可配置嗅探,流量包解析,漏洞规则扫描,生成报告. ....搞网络安全这块,还凑合着用吧
- [**66**星][1y] [Java] [pyn3rd/cve-2018-3252](https://github.com/pyn3rd/cve-2018-3252) CVE-2018-3252-PoC
- [**66**星][2y] [C] [pvachon/tsl-sdr](https://github.com/pvachon/tsl-sdr) Software Defined Radio Demodulation and Decoding Tools
- [**66**星][1y] [Py] [pure-l0g1c/hyprpulse](https://github.com/pure-l0g1c/hyprpulse) Brute force multiple accounts at once
+- [**66**星][8m] [JS] [plazmaz/mongodb-honeyproxy](https://github.com/plazmaz/mongodb-honeyproxy) A honeypot proxy for mongodb. When run, this will proxy and log all traffic to a dummy mongodb server.
- [**66**星][3y] [oj/bsides-2017-ctf-docker](https://github.com/oj/bsides-2017-ctf-docker) BSidesCBR CTF docker compose files
- [**66**星][3y] [C++] [nmgwddj/learn-windows-drivers](https://github.com/nmgwddj/learn-windows-drivers) Windows drivers 开发的各个基础示例,包含进程、内存、注册表、回调等管理
-- [**66**星][13d] [Ruby] [ninoseki/miteru](https://github.com/ninoseki/miteru) An experimental phishing kit detection tool
+- [**66**星][15d] [Ruby] [ninoseki/miteru](https://github.com/ninoseki/miteru) An experimental phishing kit detection tool
- [**66**星][1y] [C++] [nickcano/relocbonus](https://github.com/nickcano/relocbonus) An obfuscation tool for Windows which instruments the Windows Loader into acting as an unpacking engine.
-- [**66**星][4m] [C] [neural75/gqrx-scanner](https://github.com/neural75/gqrx-scanner) A frequency scanner for Gqrx Software Defined Radio receiver
- [**66**星][11m] [Py] [necst/crave](https://github.com/necst/crave) crave: 自动测试和探索通用AV引擎功能的框架
- [**66**星][1y] [JS] [nccgroup/goatcasino](https://github.com/nccgroup/goatcasino) This is an intentionally vulnerable smart contract truffle deployment aimed at allowing those interested in smart contract security to exploit a wide variety of issues in a safe environment.
+- [**66**星][1y] [Go] [mmcloughlin/pearl](https://github.com/mmcloughlin/pearl) Tor relay implementation in Golang
- [**66**星][2y] [Py] [martinoj2009/icmpexfil](https://github.com/martinoj2009/icmpexfil) Exfiltrate data with ICMP
+- [**66**星][6m] [Py] [marcobellaccini/pyaescrypt](https://github.com/marcobellaccini/pyaescrypt) A Python 3 module and script that uses AES256-CBC to encrypt/decrypt files and streams in AES Crypt file format (version 2).
+- [**66**星][2m] [C#] [maraudershell/marauder](https://github.com/maraudershell/marauder) A .NET agent for the Faction C2 Framework
- [**66**星][10m] [HCL] [mantvydasb/red-team-infrastructure-automation](https://github.com/mantvydasb/red-team-infrastructure-automation) Disposable and resilient red team infrastructure with Terraform
-- [**66**星][3m] [m507/awae-preparation](https://github.com/m507/awae-preparation) This repository will contain all trainings and tutorials I have done/read to prepare for OSWE / AWAE.
+- [**66**星][2y] [Java] [lovejj1994/simplify-core](https://github.com/lovejj1994/simplify-core) Simplify 为简化重复的JAVA代码而生,基于JDK8,无其它jar包依赖,提供序列化,json parse/generator,日期处理,asm && jdkproxy 实现动态代理功能 等常见操作。
- [**66**星][3y] [C] [librecore-org/librecore](https://github.com/librecore-org/librecore)
-- [**66**星][13d] [Java] [lianglixin/sandvxposed](https://github.com/lianglixin/sandvxposed) Xposed environment without root (OS 5.0 - 10.0)
-- [**66**星][18d] [Py] [ledgerhq/blue-loader-python](https://github.com/ledgerhq/blue-loader-python) Python Loader for Ledger Blue and Nano S
+- [**66**星][15d] [Java] [lianglixin/sandvxposed](https://github.com/lianglixin/sandvxposed) Xposed environment without root (OS 5.0 - 10.0)
+- [**66**星][20d] [Py] [ledgerhq/blue-loader-python](https://github.com/ledgerhq/blue-loader-python) Python Loader for Ledger Blue and Nano S
- [**66**星][4y] [Py] [jpsenior/threataggregator](https://github.com/jpsenior/threataggregator) Aggregates security threats from a number of online sources, and outputs to Syslog CEF, Snort Signatures, Iptables rules, hosts.deny, etc.
- [**66**星][2y] [PHP] [josecl/cool-php-captcha](https://github.com/josecl/cool-php-captcha) This is the official GitHub project from code.google.com/p/cool-php-captcha
-- [**66**星][9m] [Java] [javabeanz/owasp-security-logging](https://github.com/javabeanz/owasp-security-logging) OWASP Security Logging library for Java
-- [**66**星][2y] [Objective-C] [iscanner/iscanner_ios](https://github.com/iscanner/iscanner_ios) An easy-to-use scanner app for iOS.
-- [**66**星][1y] [PHP] [irelance/jsc-decompile-mozjs-34](https://github.com/irelance/jsc-decompile-mozjs-34) A javascript bytecode decoder for mozilla spider-monkey version 34. May decompile jsc file compile by cocos-2dx
+- [**66**星][3y] [Py] [jgamblin/badactors](https://github.com/jgamblin/badactors) Create a list of bad actors from public IP blacklist.
+- [**66**星][10m] [Java] [javabeanz/owasp-security-logging](https://github.com/javabeanz/owasp-security-logging) OWASP Security Logging library for Java
+- [**66**星][6m] [C++] [invictus1306/functrace](https://github.com/invictus1306/functrace) A function tracer
- [**66**星][4y] [JS] [indeedops/shadowbuster](https://github.com/indeedops/shadowbuster)
-- [**66**星][6y] [C] [hiikezoe/android_run_root_shell](https://github.com/hiikezoe/android_run_root_shell)
- [**66**星][7m] [C] [hc0d3r/sshd-poison](https://github.com/hc0d3r/sshd-poison) a tool to get creds of pam based sshd authentication
-- [**66**星][8m] [Py] [grayddq/publicsecscan](https://github.com/grayddq/publicsecscan) 针对大量WEB资产进行分布式WEB安全扫描,发现web环境下常规的一些安全漏洞
-- [**66**星][12d] [Go] [google/gonids](https://github.com/google/gonids) gonids is a library to parse IDS rules, with a focus primarily on Suricata rule compatibility. There is a discussion forum available that you can join on Google Groups:
+- [**66**星][28d] [Assembly] [hardenedlinux/firmware-anatomy](https://github.com/hardenedlinux/firmware-anatomy) Tear the firmware apart with your bare hands;-)
+- [**66**星][2d] [Go] [google/gonids](https://github.com/google/gonids) gonids is a library to parse IDS rules, with a focus primarily on Suricata rule compatibility. There is a discussion forum available that you can join on Google Groups:
- [**66**星][2y] [Py] [fossfreedom/coverart-browser](https://github.com/fossfreedom/coverart-browser) Browse your cover-art albums in Rhythmbox v2.96 - 3.0+
- [**66**星][2y] [Py] [firefart/cve-2018-7600](https://github.com/firefart/cve-2018-7600) CVE-2018-7600 - Drupal 7.x RCE
- [**66**星][4y] [JS] [etherdream/mitm-http-cache-poisoning](https://github.com/etherdream/mitm-http-cache-poisoning) HTTP Cache Poisoning Demo
+- [**66**星][4y] [PS] [dlwyatt/protecteddata](https://github.com/dlwyatt/protecteddata) PowerShell Module for securely encrypting and sharing secret data such as passwords.
- [**66**星][8m] [C] [dimopouloselias/simpleshellcodeinjector](https://github.com/dimopouloselias/simpleshellcodeinjector) SimpleShellcodeInjector receives as an argument a shellcode in hex and executes it. It DOES NOT inject the shellcode in a third party application.
-- [**66**星][2y] [Py] [debasishm89/openxmolar](https://github.com/debasishm89/openxmolar) A MS OpenXML Format Fuzzing Framework
- [**66**星][2m] [davidfowl/windbgcheatsheet](https://github.com/davidfowl/windbgcheatsheet) This is a cheat sheet for windbg
+- [**66**星][3y] [Eagle] [dangrie158/esptool](https://github.com/dangrie158/esptool)
- [**66**星][3m] [HTML] [cytoscape/cytoscape.js-cose-bilkent](https://github.com/cytoscape/cytoscape.js-cose-bilkent) The CoSE layout for Cytoscape.js by Bilkent with enhanced compound node placement.
-- [**66**星][12d] [Py] [cyboxproject/python-cybox](https://github.com/cyboxproject/python-cybox) A Python library for parsing, manipulating, and generating CybOX content.
- [**66**星][3y] [Py] [crange/crange](https://github.com/crange/crange) Crange is a tool to index and cross-reference C/C++ source code
- [**66**星][5m] [Batchfile] [cornerpirate/reportcompiler](https://github.com/cornerpirate/reportcompiler) A tool for importing vulnerability scanner data and then allowing you to manipulate the risks, affected hosts, and create risk ordered output.
-- [**66**星][4m] [C#] [codedx/codepulse](https://github.com/codedx/codepulse) Code Pulse is a real-time code coverage tool for penetration testing activities
- [**66**星][3y] [Py] [claudioviviani/ms17-010-m4ss-sc4nn3r](https://github.com/claudioviviani/ms17-010-m4ss-sc4nn3r) MS17-010 multithreading scanner written in python.
- [**66**星][3y] [Py] [circl/cve-portal](https://github.com/circl/cve-portal) Common Vulnerabilities and Exposures - Portal
- [**66**星][2y] [Py] [christophetd/firepwned](https://github.com/christophetd/firepwned)
-- [**66**星][1m] [chef-koch/projectx](https://github.com/chef-koch/projectx) DarkWeb Overview
+- [**66**星][7y] [C] [chokepoint/jynx2](https://github.com/chokepoint/jynx2) JynxKit2 is an LD_PRELOAD userland rootkit based on the original JynxKit. The backdoor has been replaced with an "accept()" system hook.
- [**66**星][3y] [Py] [bwall/ssdc](https://github.com/bwall/ssdc) ssdeep based clustering tool
+- [**66**星][1m] [Shell] [brainfucksec/archtorify](https://github.com/brainfucksec/archtorify) Transparent proxy through Tor for Arch Linux OS
- [**66**星][9m] [Java] [bolexliu/apptrack](https://github.com/bolexliu/apptrack) Xposed HookAPP逆向跟踪工具,跟踪Activity与Fragment启动信息等
- [**66**星][3y] [Py] [bear/s3scan](https://github.com/bear/s3scan) scan s3 buckets for security issues
- [**66**星][2y] [avast-tl/capstone2llvmir](https://github.com/avast-tl/capstone2llvmir) capstone2llvmir: 将Capstone 指令转化为 LLVM IR
- [**66**星][6y] [atimorin/poc2013](https://github.com/atimorin/poc2013) Power of Community 2013 conference special release of ICS/SCADA toolkit
+- [**66**星][1m] [Shell] [ankh2054/linux-pentest](https://github.com/ankh2054/linux-pentest) Linux pentest tools
+- [**66**星][5y] [C] [akamajoris/php-extension-backdoor](https://github.com/akamajoris/php-extension-backdoor) Simple php backdoor based on extension
- [**66**星][5y] [Py] [ajinabraham/xenotix-apk-reverser](https://github.com/ajinabraham/xenotix-apk-reverser) Xenotix APK Reverser is an OpenSource Android Application Package (APK) decompiler and disassembler powered by dex2jar, baksmali and jd-core.
-- [**66**星][1y] [C++] [3gstudent/use-com-objects-to-bypass-uac](https://github.com/3gstudent/use-com-objects-to-bypass-uac)
- [**66**星][4m] [Go] [0xrawsec/gene](https://github.com/0xrawsec/gene) Signature Engine for Windows Event Logs
- [**66**星][4y] [C] [0xabu/qemu](https://github.com/0xabu/qemu) OLD qemu with Raspberry Pi 2 and Windows on ARM support. Retained for reference purposes only -- most of this has been merged upstream.
- [**66**星][11m] [C] [0x36/cve-pocs](https://github.com/0x36/cve-pocs) This repo contains some of my vuln research findings
- [**65**星][3y] [Ruby] [p3nt4/metasploit-modules](https://github.com/p3nt4/metasploit-modules) Collection of metasploit modules
+- [**65**星][5y] [ObjC] [project-imas/memory-security](https://github.com/project-imas/memory-security) Tools for securely clearing and validating iOS application memory
+- [**65**星][3y] [zhengmin1989/ios-10-decrypted-kernel-cache](https://github.com/zhengmin1989/ios-10-decrypted-kernel-cache) iOS 10 Decrypted Kernel Cache
- [**65**星][4m] [C] [jtesta/rainbowcrackalack](https://github.com/jtesta/rainbowcrackalack) Rainbow table generation & lookup tools. Make Rainbow Tables Great Again!
-- [**65**星][24d] [Py] [cve-search/git-vuln-finder](https://github.com/cve-search/git-vuln-finder) Finding potential software vulnerabilities from git commit messages
+- [**65**星][26d] [Py] [cve-search/git-vuln-finder](https://github.com/cve-search/git-vuln-finder) Finding potential software vulnerabilities from git commit messages
- [**65**星][1m] [Py] [nccgroup/gtfoblookup](https://github.com/nccgroup/gtfoblookup) Offline command line lookup utility for GTFOBins (
-- [**65**星][1y] [Py] [angelkitty/bilibili-smallvideo](https://github.com/angelkitty/bilibili-smallvideo)
+- [**65**星][7m] [Py] [s0md3v/shiva](https://github.com/s0md3v/Shiva) Improved DOS exploit for wordpress websites (CVE-2018-6389)
- [**65**星][8y] [C] [robclemons/arpspoof](https://github.com/robclemons/Arpspoof) Android port of Arpspoof
- [**65**星][3y] [Py] [plantdaddy/fuzzap](https://github.com/PlantDaddy/FuzzAP) A python script for obfuscating wireless networks
- [**65**星][2y] [C++] [jocover/openusrp](https://github.com/jocover/OpenUSRP) using LimeSDR to simulate USRP B210
- [**65**星][4y] [Py] [nsacyber/splunk-assessment-of-mitigation-implementations](https://github.com/nsacyber/Splunk-Assessment-of-Mitigation-Implementations) Automatically scores how well Windows systems have implemented some of the top 10 Information Assurance mitigation strategies. #nsacyber
+- [**65**星][28d] [Py] [hatching/httpreplay](https://github.com/hatching/httpreplay) Replay HTTP and HTTPS requests from a PCAP based on TLS Master Secrets.
- [**65**星][5y] [Py] [adamlaurie/hdmi-sniff](https://github.com/AdamLaurie/hdmi-sniff) sniff HDMI DDC (I2C) traffic
- [**65**星][2y] [Java] [fsecurelabs/drozer-agent](https://github.com/FSecureLABS/drozer-agent) The Android Agent for the Mercury Security Assessment Framework.
- [**65**星][1m] [Java] [lmax-exchange/disruptor-proxy](https://github.com/LMAX-Exchange/disruptor-proxy) Byte-code generator to create Disruptor-backed proxies
-- [**65**星][3y] [Objective-C] [zhengmin1989/yalu102](https://github.com/zhengmin1989/yalu102) incomplete iOS 10.2 jailbreak for 64 bit devices by qwertyoruiopz and marcograssi
+- [**65**星][3y] [ObjC] [zhengmin1989/yalu102](https://github.com/zhengmin1989/yalu102) incomplete iOS 10.2 jailbreak for 64 bit devices by qwertyoruiopz and marcograssi
- [**65**星][3y] [C] [zer0mem0ry/kernelreadwritememory](https://github.com/zer0mem0ry/kernelreadwritememory) Simple code to manipulate the memory of a usermode process from kernel.
- [**65**星][6m] [Py] [yelp/osxcollector_output_filters](https://github.com/yelp/osxcollector_output_filters) Filters that process and transform the output of osxcollector
-- [**65**星][8m] [wufengxue/android-reverse](https://github.com/wufengxue/android-reverse) 安卓逆向工具汇总
- [**65**星][11m] [Py] [we45/dvfaas-damn-vulnerable-functions-as-a-service](https://github.com/we45/dvfaas-damn-vulnerable-functions-as-a-service) Intentionally Vulnerable Serverless Functions to understand the specifics of Serverless Security Vulnerabilities
- [**65**星][2y] [Py] [wazehell/cve-2018-6389](https://github.com/wazehell/cve-2018-6389) CVE-2018-6389 Exploit In WordPress DoS
- [**65**星][5m] [QML] [turanmahmudov/instagraph](https://github.com/turanmahmudov/instagraph) Unofficial Instagram Client
- [**65**星][6y] [C++] [trevd/android_root](https://github.com/trevd/android_root) Got Root!
-- [**65**星][2y] [Shell] [thestr4ng3r/arcore-patch](https://github.com/thestr4ng3r/arcore-patch) Attempt to get ARCore Preview 2 running on unsupported devices
- [**65**星][2y] [Py] [temesgeny/ppsx-file-generator](https://github.com/temesgeny/ppsx-file-generator) ppsx file generator for cve-2017-8570 (based on bhdresh/cve-2017-8570)
- [**65**星][2y] [Py] [tbarabosch/quincy](https://github.com/tbarabosch/quincy) 在内存转储中检测基于主机的代码注入攻击
- [**65**星][2y] [Py] [switchbrew/nx-hbexploit300-obf](https://github.com/switchbrew/nx-hbexploit300-obf) Homebrew exploit for 3.0.0
- [**65**星][3y] [C++] [soarlab/maline](https://github.com/soarlab/maline) Android Malware Detection Framework
+- [**65**星][2y] [JS] [smarttang/sosrp](https://github.com/smarttang/sosrp) SOSRP Security 安全平台
- [**65**星][3m] [JS] [sergejmueller/wpcheck](https://github.com/sergejmueller/wpcheck) Vulnerability scanner for WordPress based on Node.js
-- [**65**星][1y] [HTML] [secwiki/ipot](https://github.com/secwiki/ipot) Honeypot Research Blog 蜜罐技术研究小组
-- [**65**星][3y] [secdr/sec-ml](https://github.com/secdr/sec-ml) 与安全相关的机器学习资料
+- [**65**星][2y] [HTML] [secwiki/ipot](https://github.com/secwiki/ipot) Honeypot Research Blog 蜜罐技术研究小组
- [**65**星][3y] [Py] [scipag/btle-sniffer](https://github.com/scipag/btle-sniffer) Passively scan for Bluetooth Low Energy devices and attempt to fingerprint them
- [**65**星][1y] [Shell] [samhaxr/takeover-v1](https://github.com/samhaxr/takeover-v1) Takeover script extracts CNAME record of all subdomains at once. TakeOver saves researcher time and increase the chance of finding subdomain takeover vulnerability.
-- [**65**星][9m] [YARA] [rootkiter/binary-files](https://github.com/rootkiter/binary-files) EarthWorm/Termite 停止更新
+- [**65**星][4m] [Rust] [rust-fuzz/targets](https://github.com/rust-fuzz/targets)
+- [**65**星][4m] [Shell] [rfxn/advanced-policy-firewall](https://github.com/rfxn/advanced-policy-firewall) advanced-policy-firewall:高级版策略防火墙
- [**65**星][3y] [redhatproductsecurity/cve-howto](https://github.com/redhatproductsecurity/cve-howto) CVE assignment documentation
- [**65**星][3m] [HTML] [project-prismatica/prismatica](https://github.com/project-prismatica/prismatica) Responsive Command and Control System
-- [**65**星][8m] [JS] [plazmaz/mongodb-honeyproxy](https://github.com/plazmaz/mongodb-honeyproxy) A honeypot proxy for mongodb. When run, this will proxy and log all traffic to a dummy mongodb server.
+- [**65**星][6m] [Java] [portswigger/command-injection-attacker](https://github.com/portswigger/command-injection-attacker) SHELLING - a comprehensive OS command injection payload generator
- [**65**星][5m] [Py] [passivetotal/python_api](https://github.com/passivetotal/python_api) Python abstract API for PassiveTotal services in the form of libraries and command line utilities.
- [**65**星][1y] [C#] [parsingteam/teleshadow2](https://github.com/parsingteam/teleshadow2) TeleShadow - Telegram Desktop Session Stealer (Windows)
- [**65**星][5y] [Shell] [pansen/macos-sandbox-profiles](https://github.com/pansen/macos-sandbox-profiles) sandbox files for some applications running on osx for more security
-- [**65**星][6m] [Py] [orleven/tentacle](https://github.com/orleven/tentacle) Tentacle is a POC vulnerability verification and exploit framework. It supports free extension of exploits and uses POC scripts. It supports calls to zoomeye, fofa, shodan and other APIs to perform bulk vulnerability verification for multiple targets.
- [**65**星][2y] [Py] [ojasookert/cve-2017-0781](https://github.com/ojasookert/cve-2017-0781) Blueborne CVE-2017-0781 Android heap overflow vulnerability
- [**65**星][2y] [C++] [not-wlan/driver-hijack](https://github.com/not-wlan/driver-hijack)
+- [**65**星][11m] [YARA] [nheijmans/malzoo](https://github.com/nheijmans/malzoo) Mass static malware analysis tool
- [**65**星][12m] [Py] [naivenom/reversing-list](https://github.com/naivenom/reversing-list) Reversing list
- [**65**星][11m] [HTML] [mtesauro/owasp-wte](https://github.com/mtesauro/owasp-wte) Home of the developement for OWASP WTE - the Web Testing Environment, a collection of pre-packaged Linux AppSec tools, apps and documentation used to create pre-configured VMs or installed ala carte in the Linux of your choice..
-- [**65**星][10m] [Gherkin] [minishift/minishift-addons](https://github.com/minishift/minishift-addons) A repository for the community to exchange Minishift add-ons
+- [**65**星][2d] [TSQL] [mitchellkrogza/the-big-list-of-hacked-malware-web-sites](https://github.com/mitchellkrogza/the-big-list-of-hacked-malware-web-sites) This repository contains a list of all web sites I come across that are either hacked with or purposefully hosting malware, ransomware, viruses or trojans.
+- [**65**星][7m] [Gherkin] [minishift/minishift-addons](https://github.com/minishift/minishift-addons) A repository for the community to exchange Minishift add-ons
+- [**65**星][4m] [Py] [mcdallas/cryptotools](https://github.com/mcdallas/cryptotools)
- [**65**星][2y] [Py] [markclayton/bumpster](https://github.com/markclayton/bumpster) The Unofficial Burp Extension for DNSDumpster.com
-- [**65**星][2m] [C#] [maraudershell/marauder](https://github.com/maraudershell/marauder) A .NET agent for the Faction C2 Framework
- [**65**星][3y] [C++] [m000/dtracker](https://github.com/m000/dtracker) DataTracker: A Pin tool for collecting high-fidelity data provenance from unmodified programs.
- [**65**星][1y] [Py] [lukebaggett/google_socks](https://github.com/lukebaggett/google_socks) A proof of concept demonstrating the use of Google Drive for command and control.
- [**65**星][3y] [lcamry/sqli-labs](https://github.com/lcamry/sqli-labs) sqli-labs中文使用手册,详细讲解了mysql注入的各种手段。
-- [**65**星][8d] [Go] [lair-framework/go-nmap](https://github.com/lair-framework/go-nmap) Nmap XML parsing library for Go
+- [**65**星][10d] [Go] [lair-framework/go-nmap](https://github.com/lair-framework/go-nmap) Nmap XML parsing library for Go
- [**65**星][2y] [HTML] [jianmou/vulnctf](https://github.com/jianmou/vulnctf) MiniProject_VulnCTF | A CTF practice environment that links Dockerhub through Github
-- [**65**星][16d] [C++] [jaegertracing/jaeger-client-cpp](https://github.com/jaegertracing/jaeger-client-cpp) C++ OpenTracing binding for Jaeger
+- [**65**星][5m] [Py] [integeruser/on-pwning](https://github.com/integeruser/on-pwning) My solutions to some CTF challenges and a list of interesting resources about pwning stuff
+- [**65**星][1y] [Py] [immunit/xip](https://github.com/immunit/xip) XIP generates a list of IP addresses by applying a set of transformations used to bypass security measures e.g. blacklist filtering, WAF, etc.
- [**65**星][2y] [Java] [realbearcat/s2-055](https://github.com/RealBearcat/S2-055) S2-055 反序列化 CVE-2017-7525
- [**65**星][1y] [Jupyter Notebook] [hmishra2250/botnet-detection-using-machine-learning](https://github.com/hmishra2250/botnet-detection-using-machine-learning) Repository of Bachelor's Major Project on Botnet Detection
- [**65**星][5y] [Py] [hikerell/bfuzzer](https://github.com/hikerell/bfuzzer) A Browser Fuzzer for Vulnerbilities
-- [**65**星][26d] [Assembly] [hardenedlinux/firmware-anatomy](https://github.com/hardenedlinux/firmware-anatomy) Tear the firmware apart with your bare hands;-)
- [**65**星][8m] [Dockerfile] [hangim/kcp-shadowsocks-docker](https://github.com/hangim/kcp-shadowsocks-docker) A docker image for shadowsocks server with KCPTUN support
- [**65**星][2y] [Java] [hackthelegacy/hack400tool](https://github.com/hackthelegacy/hack400tool) hack400tool:IBM 电源系统安全处理工具
- [**65**星][5y] [Java] [guardianproject/trustedintents](https://github.com/guardianproject/trustedintents) library for flexible trusted interactions between Android apps
- [**65**星][4m] [Py] [greenwolf/social_attacker](https://github.com/greenwolf/social_attacker) An Open Source Multi Site Automated Social Media Phishing Framework
+- [**65**星][30d] [C] [gpg/libgcrypt](https://github.com/gpg/libgcrypt) The GNU crypto library
- [**65**星][4y] [Py] [funoverip/mcafee-sitelist-pwd-decryption](https://github.com/funoverip/mcafee-sitelist-pwd-decryption) Password decryption tool for the McAfee SiteList.xml file
- [**65**星][4y] [PHP] [fakhrizulkifli/defeating-php-gd-imagecreatefromjpeg](https://github.com/fakhrizulkifli/defeating-php-gd-imagecreatefromjpeg) Proof-of-concept to exploit the flaw in the PHP-GD built-in function, imagecreatefromjpeg()
-- [**65**星][2m] [Py] [endgameinc/eqllib](https://github.com/endgameinc/eqllib)
-- [**65**星][4y] [PowerShell] [dlwyatt/protecteddata](https://github.com/dlwyatt/protecteddata) PowerShell Module for securely encrypting and sharing secret data such as passwords.
+- [**65**星][5m] [JS] [exposejs/expose](https://github.com/exposejs/expose) A Dynamic Symbolic Execution (DSE) engine for JavaScript
- [**65**星][2y] [Py] [daniestevez/free-outernet](https://github.com/daniestevez/free-outernet) Free Software Outernet receiver
-- [**65**星][3y] [Eagle] [dangrie158/esptool](https://github.com/dangrie158/esptool)
+- [**65**星][3m] [Py] [d3vzer0/reternal-quickstart](https://github.com/d3vzer0/reternal-quickstart) Repo containing docker-compose files and setup scripts without having to clone the individual reternal components
- [**65**星][3y] [PHP] [cymmetria/strutshoneypot](https://github.com/cymmetria/strutshoneypot) Struts Apache 2 based honeypot as well as a detection module for Apache 2 servers
- [**65**星][1y] [Py] [cryptax/dextools](https://github.com/cryptax/dextools) Miscellaenous DEX (Dalvik Executable) tools
-- [**65**星][1m] [C++] [changeofpace/mouclassinputinjection](https://github.com/changeofpace/mouclassinputinjection) MouClassInputInjection implements a kernel interface for injecting mouse input data packets into the input data stream of HID USB mouse devices.
- [**65**星][1y] [Py] [ch3k1/squidmagic](https://github.com/ch3k1/squidmagic) analyze a web-based network traffic
- [**65**星][1y] [Py] [cerbo/aws-waf-security-automation](https://github.com/cerbo/aws-waf-security-automation) Amazon WAF Security Automation deployment (modular with Terraform)
- [**65**星][2y] [Shell] [bluscreenofjeff/ccdc-scripts](https://github.com/bluscreenofjeff/ccdc-scripts) Scripts and resources for Red Teaming at CCDC competitions
+- [**65**星][19d] [Visual Basic .NET] [blackhacker511/blackworm](https://github.com/blackhacker511/blackworm) Black Worm Offical Repo
- [**65**星][2m] [Py] [blackarch/sploitctl](https://github.com/blackarch/sploitctl) Fetch, install and search exploit archives from exploit sites.
-- [**65**星][17d] [Go] [binject/binjection](https://github.com/binject/binjection) Injects additional machine instructions into various binary formats.
- [**65**星][1y] [Lua] [beaujeant/pwnadventure3](https://github.com/beaujeant/pwnadventure3) Resources for the Pwn Adventure 3 challenges from GITS'15 (
- [**65**星][2y] [Lua] [bastilleresearch/cabletap](https://github.com/bastilleresearch/cabletap) CableTap public disclosure documents.
-- [**65**星][1m] [Shell] [ankh2054/linux-pentest](https://github.com/ankh2054/linux-pentest) Linux pentest tools
+- [**65**星][4y] [C] [basil00/pseudonode](https://github.com/basil00/pseudonode) PseudoNode - A full node emulator.
- [**65**星][6y] [Py] [anbc/andbug](https://github.com/anbc/andbug) Android Debugging Library
-- [**65**星][5y] [C] [akamajoris/php-extension-backdoor](https://github.com/akamajoris/php-extension-backdoor) Simple php backdoor based on extension
-- [**65**星][17d] [Py] [agroce/tstl](https://github.com/agroce/tstl) Template Scripting Testing Language tool: automated test generation for Python
+- [**65**星][19d] [Py] [agroce/tstl](https://github.com/agroce/tstl) Template Scripting Testing Language tool: automated test generation for Python
+- [**65**星][2y] [Shell] [adhdproject/buildkit](https://github.com/adhdproject/buildkit)
- [**65**星][1y] [Go] [0xfe/lumen](https://github.com/0xfe/lumen) A commandline client for the Stellar blockchain
-- [**65**星][2y] [Go] [0c34/govwa](https://github.com/0c34/govwa)
+- [**64**星][14d] [bkimminich/it-security-lecture](https://github.com/bkimminich/it-security-lecture) University lecture on "IT Security" as Open Educational Resources material
+- [**64**星][3y] [C++] [functionclub/memtester](https://github.com/functionclub/memtester) 检测VPS真实可分配内存的小工具,适用于检测VPS超售情况。
+- [**64**星][1y] [Py] [feeicn/exif](https://github.com/feeicn/exif) EXIF information viewer(查看照片中隐藏的各类信息)
- [**64**星][3y] [Ruby] [danielmiessler/caparser](https://github.com/danielmiessler/caparser) A quick and dirty PCAP parser that helps you identify who your applications are sending sensitive data to without encryption.
-- [**64**星][10d] [Shell] [nahamsec/crtndstry](https://github.com/nahamsec/crtndstry) Yet another subdomain finder
-- [**64**星][12d] [C++] [moemod/csmoe](https://github.com/moemod/csmoe) Cross-platform Counter-Strike mod based on Xash3D (previously named CSBTE-Mobile)
-- [**64**星][7m] [Py] [s0md3v/shiva](https://github.com/s0md3v/Shiva) Improved DOS exploit for wordpress websites (CVE-2018-6389)
+- [**64**星][3y] [bastilleresearch/keyjack](https://github.com/bastilleresearch/keyjack) Device discovery tools and encrypted keystroke injection advisories for Logitech, Dell, Lenovo and AmazonBasics
- [**64**星][6y] [C++] [helpsystems/sentinel](https://github.com/helpsystems/sentinel) Sentinel is a command line tool able to protect Windows 32 bit programs against exploits targeted by attackers or viruses. It can protect your programs against 0-day attacks or publicly known bugs.
-- [**64**星][11d] [C] [enjoy-digital/pcie_screamer](https://github.com/enjoy-digital/pcie_screamer) PCIe Screamer SoC based on LiteX
-- [**64**星][26d] [Py] [hatching/httpreplay](https://github.com/hatching/httpreplay) Replay HTTP and HTTPS requests from a PCAP based on TLS Master Secrets.
-- [**64**星][2m] [Py] [chris-rands/emojify](https://github.com/chris-rands/emojify) Obfuscate your python script by converting it to emoji icons
+- [**64**星][13d] [C] [enjoy-digital/pcie_screamer](https://github.com/enjoy-digital/pcie_screamer) PCIe Screamer SoC based on LiteX
+- [**64**星][8m] [Py] [nordicsemiconductor/nrf-sniffer-for-802.15.4](https://github.com/NordicSemiconductor/nRF-Sniffer-for-802.15.4) nRF-based 802.15.4 sniffer (firmware and software)
- [**64**星][6y] [C++] [zenlulz/fasm.net](https://github.com/zenlulz/fasm.net) A managed wrapper to use FASM compiler from .NET applications.
+- [**64**星][8m] [Py] [yarox24/attack_monitor](https://github.com/yarox24/attack_monitor) Endpoint detection & Malware analysis software
- [**64**星][3y] [Py] [xorpd/idsearch](https://github.com/xorpd/idsearch) 搜索工具
- [**64**星][8m] [C] [xiao70/x70fsd](https://github.com/xiao70/x70fsd) Windows file system filter drivers(minifilter) to encrypt, compress, or otherwise modify file-based data require some of the most complex kernel software developed for Windows.
- [**64**星][7y] [C++] [wisec/dominator](https://github.com/wisec/dominator)
- [**64**星][7m] [Py] [vysecurity/att-ck_analysis](https://github.com/vysecurity/att-ck_analysis) Repository for my ATT&CK analysis research.
- [**64**星][1y] [vagnerpilar/windbgtree](https://github.com/vagnerpilar/windbgtree) A command tree based on commands and extensions for Windows Kernel Debugging.
+- [**64**星][4m] [Visual Basic .NET] [thesph1nx/rt-101](https://github.com/thesph1nx/rt-101) VB.net Remote Administrator Tool (RAT)
- [**64**星][12m] [Py] [th3j0kr/jtb_investigator](https://github.com/th3j0kr/jtb_investigator) A tool to speed up the process of doing the same simple IP/Domain Name lookups over and over again.
- [**64**星][4m] [HTML] [team-su/suctf-2019](https://github.com/team-su/suctf-2019)
- [**64**星][3y] [Fortran] [tabacof/adversarial](https://github.com/tabacof/adversarial) Exploring the Space of Adversarial Images
- [**64**星][2y] [JS] [switchbrew/nx-hbexploit300](https://github.com/switchbrew/nx-hbexploit300) Homebrew exploit for 3.0.0
+- [**64**星][10m] [sukaralin/php_code_audit_project](https://github.com/sukaralin/php_code_audit_project) 该项目用来记录,我用来练手的PHP代码审计项目。
- [**64**星][1y] [Haskell] [snoyberg/markdown](https://github.com/snoyberg/markdown) Convert Markdown to HTML, with XSS protection
- [**64**星][1m] [JS] [snail007/anytunnel](https://github.com/snail007/anytunnel) 内网穿透,内网穿透代理服务器,商用内网穿透代理系统,内网穿透平台,内网穿透多用户会员系统。
-- [**64**星][2y] [JS] [smarttang/sosrp](https://github.com/smarttang/sosrp) SOSRP Security 安全平台
+- [**64**星][8m] [Go] [smithclay/faassh](https://github.com/smithclay/faassh) simple go SSH server with reverse tunneling designed for running in cloud functions like AWS lambda
- [**64**星][1y] [Py] [skelsec/pykerberoast](https://github.com/skelsec/pykerberoast) Implementing Kerberoast attack fully in python
- [**64**星][8m] [JS] [sindresorhus/p-debounce](https://github.com/sindresorhus/p-debounce) Debounce promise-returning & async functions
- [**64**星][2y] [C] [siguza/hsp4](https://github.com/siguza/hsp4) macOS kext for host_special_port(4) patch
- [**64**星][4m] [sh1n0g1/shinobot](https://github.com/sh1n0g1/shinobot) RAT / Botnet Simulator for pentest / education
- [**64**星][1y] [JS] [serain/netmap.js](https://github.com/serain/netmap.js) Fast browser-based network discovery module
-- [**64**星][15d] [C] [seanheelan/heaplayout](https://github.com/seanheelan/heaplayout) Source code for paper 'Automatic Heap Layout Manipulation for Exploitation'
+- [**64**星][3y] [secdr/sec-ml](https://github.com/secdr/sec-ml) 与安全相关的机器学习资料
- [**64**星][1y] [Py] [scy-phy/minicps](https://github.com/scy-phy/minicps) MiniCPS: a framework for Cyber-Physical Systems real-time simulation, built on top of mininet
-- [**64**星][10m] [Zeek] [salesforce/bro-sysmon](https://github.com/salesforce/bro-sysmon) How to Zeek Sysmon Logs!
+- [**64**星][11m] [Zeek] [salesforce/bro-sysmon](https://github.com/salesforce/bro-sysmon) How to Zeek Sysmon Logs!
+- [**64**星][9m] [PS] [sadprocessor/cypherdog](https://github.com/sadprocessor/cypherdog) PoSh BloodHound Dog Whisperer
- [**64**星][3y] [C++] [ronangaillard/logitech-mouse](https://github.com/ronangaillard/logitech-mouse) Use an arduino as a logitech wireless
-- [**64**星][5m] [PowerShell] [rgl/windows-domain-controller-vagrant](https://github.com/rgl/windows-domain-controller-vagrant) Example Windows Domain Controller
-- [**64**星][4m] [Shell] [rfxn/advanced-policy-firewall](https://github.com/rfxn/advanced-policy-firewall) advanced-policy-firewall:高级版策略防火墙
+- [**64**星][5m] [PS] [rgl/windows-domain-controller-vagrant](https://github.com/rgl/windows-domain-controller-vagrant) Example Windows Domain Controller
- [**64**星][1y] [Py] [ralphje/imagemounter](https://github.com/ralphje/imagemounter) Command line utility and Python package to ease the (un)mounting of forensic disk images
-- [**64**星][29d] [C] [qwaz/solved-hacking-problem](https://github.com/qwaz/solved-hacking-problem)
+- [**64**星][1m] [C] [qwaz/solved-hacking-problem](https://github.com/qwaz/solved-hacking-problem)
- [**64**星][3y] [C] [quokkalight/rkduck](https://github.com/quokkalight/rkduck) Linux v4.x.x Rootkit
- [**64**星][6y] [C] [programa-stic/ropc-llvm](https://github.com/programa-stic/ropc-llvm) ropc-llvm is a PoC of a Turing complete ROP compiler with support for a subset of LLVM IR. It is an extension of ropc.
- [**64**星][1y] [Lua] [pr4jwal/quick-scripts](https://github.com/pr4jwal/quick-scripts) A collection of my quick and dirty scripts for vulnerability POC and detections
-- [**64**星][6m] [Java] [portswigger/command-injection-attacker](https://github.com/portswigger/command-injection-attacker) SHELLING - a comprehensive OS command injection payload generator
- [**64**星][7m] [pinkp4nther/aws-testing-notes](https://github.com/pinkp4nther/aws-testing-notes) Notes as I learn basic AWS penetration testing
-- [**64**星][12d] [Py] [patois/mrspicky](https://github.com/patois/mrspicky) IDA反编译器脚本,辅助审计对于memcpy() 和memmove()函数的调用
-- [**64**星][10m] [YARA] [nheijmans/malzoo](https://github.com/nheijmans/malzoo) Mass static malware analysis tool
-- [**64**星][3y] [Lua] [netxfly/nginx_lua_security](https://github.com/netxfly/nginx_lua_security) 浅谈nginx+lua在安全中的应用
+- [**64**星][9m] [C] [phonegapx/airplay](https://github.com/phonegapx/airplay) 关于AirPlay的一些逆向研究成果。
+- [**64**星][9d] [Py] [phackt/pentest](https://github.com/phackt/pentest) Custom tools and projects about security
+- [**64**星][2m] [HTML] [patrowl/patrowldocs](https://github.com/patrowl/patrowldocs) PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform
+- [**64**星][19d] [Py] [patois/genmc](https://github.com/patois/genmc) 显示Hex-Rays 反编译器的Microcode,辅助开发Microcode插件
+- [**64**星][20d] [Py] [openitsystem/itops](https://github.com/openitsystem/itops) 基于Python + Django的AD\Exchange管理系统
+- [**64**星][5y] [PHP] [nyx0/tinba](https://github.com/nyx0/tinba) Tinba Banking Trojan
- [**64**星][4m] [C++] [nccgroup/xendbg](https://github.com/nccgroup/xendbg) A feature-complete reference implementation of a modern Xen VMI debugger.
- [**64**星][1y] [Py] [mwleeds/android-malware-analysis](https://github.com/mwleeds/android-malware-analysis) This project seeks to apply machine learning algorithms to Android malware classification.
- [**64**星][1y] [C] [mthbernardes/qmkhuehuebr](https://github.com/mthbernardes/qmkhuehuebr) Trying to hack into keyboards
-- [**64**星][8d] [TSQL] [mitchellkrogza/the-big-list-of-hacked-malware-web-sites](https://github.com/mitchellkrogza/the-big-list-of-hacked-malware-web-sites) This repository contains a list of all web sites I come across that are either hacked with or purposefully hosting malware, ransomware, viruses or trojans.
- [**64**星][7m] [mitchellkrogza/fail2ban-blacklist-jail-for-repeat-offenders-with-perma-extended-banning](https://github.com/mitchellkrogza/fail2ban-blacklist-jail-for-repeat-offenders-with-perma-extended-banning) A customised jail with action and filter file for Fail2Ban. This jail is based on the recidive jail but makes use of a simple text file to enable extended and permanent bans.
- [**64**星][3y] [Py] [milesrichardson/docker-nfqueue-scapy](https://github.com/milesrichardson/docker-nfqueue-scapy) Docker容器,使用python脚本在netfilter队列中监听数据包,并使用scapy操作数据包。
- [**64**星][3m] [Shell] [mdrights/liveslak](https://github.com/mdrights/liveslak) 中文化的隐私加强 GNU/Linux 系统 - Forked from Alien Bob's powerful building script for Slackware Live.
- [**64**星][11m] [Pascal] [mahdisafsafi/univdisasm](https://github.com/mahdisafsafi/univdisasm) x86 Disassembler and Analyzer
+- [**64**星][1y] [Py] [kasperskylab/vbscriptinternals](https://github.com/kasperskylab/vbscriptinternals) Scripts for disassembling VBScript p-code in the memory to aid in exploits analysis
- [**64**星][7m] [Py] [k4yt3x/scutum](https://github.com/k4yt3x/scutum) Linux Automatic ARP (TCP / UDP / ICMP) Firewall
+- [**64**星][1y] [C] [joswr1ght/cowpatty](https://github.com/joswr1ght/cowpatty) WPA2-PSK Cracking
+- [**64**星][7m] [ObjC] [javerous/torchat-mac](https://github.com/javerous/torchat-mac) macOS native TorChat client
- [**64**星][11m] [C++] [jacksonvd/pwnedpasswordsdll](https://github.com/jacksonvd/pwnedpasswordsdll) Open source solution to check prospective AD passwords against previously breached passwords
- [**64**星][4m] [Py] [itskindred/redviper](https://github.com/itskindred/redviper) redViper is a proof of concept Command & Control framework that utilizes Reddit for communications.
-- [**64**星][5m] [Py] [integeruser/on-pwning](https://github.com/integeruser/on-pwning) My solutions to some CTF challenges and a list of interesting resources about pwning stuff
- [**64**星][6y] [Java] [ibrahimbalic/androidrat](https://github.com/ibrahimbalic/androidrat) Android RAT
+- [**64**星][6y] [C] [hiikezoe/android_run_root_shell](https://github.com/hiikezoe/android_run_root_shell)
- [**64**星][2m] [Py] [hamz-a/jeb2frida](https://github.com/hamz-a/jeb2frida) Automated Frida hook generation with JEB
- [**64**星][4y] [Py] [halit/isip](https://github.com/halit/isip) Interactive sip toolkit for packet manipulations, sniffing, man in the middle attacks, fuzzing, simulating of dos attacks.
- [**64**星][4y] [PHP] [googleinurl/routerhunterbr](https://github.com/googleinurl/routerhunterbr) TOOL - Unauthenticated Remote DNS , Scanner ranger IP.
- [**64**星][8y] [C] [gdbinit/pydbg64](https://github.com/gdbinit/pydbg64) PyDBG64 - OS X PyDbg with 64 bits support
+- [**64**星][11m] [Py] [fnmsd/chunkedhttpadapter](https://github.com/fnmsd/chunkedhttpadapter) 参考《利用分块传输吊打所有WAF》修改的requests的Adapter
+- [**64**星][2m] [Java] [flankerhqd/bindump4j](https://github.com/flankerhqd/bindump4j) A portable utility to locate android binder service
- [**64**星][5y] [Py] [falcon-lnhg/mwebfp](https://github.com/falcon-lnhg/mwebfp) LNHG - Mass Web Fingerprinter
-- [**64**星][5m] [JS] [exposejs/expose](https://github.com/exposejs/expose) A Dynamic Symbolic Execution (DSE) engine for JavaScript
+- [**64**星][15d] [Go] [evilsocket/sum](https://github.com/evilsocket/sum) A specialized database server for linear algebra and machine learning.
- [**64**星][3y] [Py] [evilsocket/fang](https://github.com/evilsocket/fang) A multi service threaded MD5 cracker
-- [**64**星][2m] [HTML] [deadlyelder/tools-for-cryptanalysis](https://github.com/deadlyelder/tools-for-cryptanalysis) A repository that aims to provide tools for cryptography and cryptanalysis
+- [**64**星][9m] [FreeMarker] [dvdandroid/xposedmoduletemplate](https://github.com/dvdandroid/xposedmoduletemplate) Easily create a Xposed Module with Android Studio
+- [**64**星][8m] [Go] [dsnezhkov/sshorty](https://github.com/dsnezhkov/sshorty) A progressive, customizable armored SSH tunnel implant for Linux and MacOS systems
- [**64**星][2y] [Py] [darkquasar/wmi_persistence](https://github.com/darkquasar/wmi_persistence) WMI_Persistence:Python脚本,直接解析 OBJECTS.DATA 文件(无需访问用户WMI 名称空间)查找 WMI persistence
-- [**64**星][13d] [Py] [daniellerch/aletheia](https://github.com/daniellerch/aletheia) Image steganalysis using state-of-the-art machine learning techniques
+- [**64**星][15d] [Py] [daniellerch/aletheia](https://github.com/daniellerch/aletheia) Image steganalysis using state-of-the-art machine learning techniques
- [**64**星][3y] [Shell] [da667/667s_shitlist](https://github.com/da667/667s_shitlist) Hi kids, do you like cyber violence? Wanna see me destroy evil in the blink of an eyelid?
-- [**64**星][3m] [Py] [d3vzer0/reternal-quickstart](https://github.com/d3vzer0/reternal-quickstart) Repo containing docker-compose files and setup scripts without having to clone the individual reternal components
- [**64**星][3y] [C] [coolervoid/payloadmask](https://github.com/coolervoid/payloadmask) Web Payload list editor to use techniques to try bypass web application firewall - version 0.2
-- [**64**星][6m] [Assembly] [cdisselkoen/pitchfork](https://github.com/cdisselkoen/pitchfork) Detecting Spectre vulnerabilities using symbolic execution, built on angr (github.com/angr/angr)
+- [**64**星][7m] [Assembly] [cdisselkoen/pitchfork](https://github.com/cdisselkoen/pitchfork) Detecting Spectre vulnerabilities using symbolic execution, built on angr (github.com/angr/angr)
+- [**64**星][1y] [Java] [c0ny1/httpheadmodifer](https://github.com/c0ny1/httpheadmodifer) 一款快速修改HTTP数据包头的Burp Suite插件
- [**64**星][7y] [C] [bskari/sqlassie](https://github.com/bskari/sqlassie) database firewall
-- [**64**星][15d] [PHP] [bediger4000/php-malware-analysis](https://github.com/bediger4000/php-malware-analysis) Deobfuscation and analysis of PHP malware captured by a WordPress honey pot
-- [**64**星][4y] [C] [basil00/pseudonode](https://github.com/basil00/pseudonode) PseudoNode - A full node emulator.
+- [**64**星][7d] [PHP] [bediger4000/php-malware-analysis](https://github.com/bediger4000/php-malware-analysis) Deobfuscation and analysis of PHP malware captured by a WordPress honey pot
+- [**64**星][5d] [Java] [beardypig/ghidra-emotionengine](https://github.com/beardypig/ghidra-emotionengine) Ghidra Processor for the Play Station 2's Emotion Engine MIPS based CPU
- [**64**星][5y] [Go] [arlolra/meek](https://github.com/arlolra/meek)
-- [**64**星][1m] [Shell] [angr/angr-dev](https://github.com/angr/angr-dev) Some helper scripts to set up an environment for angr development.
+- [**64**星][3m] [Java] [aress31/swurg](https://github.com/aress31/swurg) Parse OpenAPI documents into Burp Suite for automating OpenAPI-based APIs security assessments (approved by PortSwigger for inclusion in their official BApp Store).
+- [**64**星][15d] [Py] [anon-exploiter/suid3num](https://github.com/anon-exploiter/suid3num) A standalone python script which utilizes python's built-in modules to enumerate SUID binaries, separate default binaries from custom binaries, cross-match those with bins in GTFO Bin's repository & auto-exploit those, all with colors! ( ͡~ ͜ʖ ͡°)
+- [**64**星][5d] [Shell] [angr/angr-dev](https://github.com/angr/angr-dev) Some helper scripts to set up an environment for angr development.
- [**64**星][6y] [Py] [andrew-morris/stupid_malware](https://github.com/andrew-morris/stupid_malware) Python malware for pentesters that bypasses most antivirus (signature and heuristics) and IPS using sheer stupidity
-- [**64**星][2y] [Shell] [adhdproject/buildkit](https://github.com/adhdproject/buildkit)
-- [**63**星][12d] [bkimminich/it-security-lecture](https://github.com/bkimminich/it-security-lecture) University lecture on "IT Security" as Open Educational Resources material
+- [**64**星][3y] [Shell] [91yun/uml](https://github.com/91yun/uml)
+- [**64**星][2y] [Go] [0c34/govwa](https://github.com/0c34/govwa)
+- [**63**星][4d] [worawit/cve-2019-0708](https://github.com/worawit/cve-2019-0708) CVE-2019-0708 (BlueKeep)
+- [**63**星][9d] [Py] [meituan-dianping/lyrebird-android](https://github.com/meituan-dianping/lyrebird-android) 本程序是一个Lyrebird的插件,用于支持获取Android设备信息。
+- [**63**星][2y] [Py] [adamlaurie/sjcam](https://github.com/adamlaurie/sjcam) A python CLI tool for controlling SJCAM WiFi Sports Cameras
- [**63**星][4y] [C++] [zyantific/remodel](https://github.com/zyantific/remodel) Data and class remodeling library
- [**63**星][2m] [C] [zzhouhe/pg1903](https://github.com/zzhouhe/pg1903)
- [**63**星][1m] [Py] [misp/misp-maltego](https://github.com/misp/misp-maltego) Set of Maltego transforms to inferface with a MISP instance and explore the whole MITRE ATT&CK dataset.
-- [**63**星][21d] [C#] [firebaseextended/unity-solutions](https://github.com/FirebaseExtended/unity-solutions) Use Firebase tools to incorporate common features into your games!
+- [**63**星][23d] [C#] [firebaseextended/unity-solutions](https://github.com/FirebaseExtended/unity-solutions) Use Firebase tools to incorporate common features into your games!
- [**63**星][1y] [C] [freescale/u-boot-fslc](https://github.com/Freescale/u-boot-fslc) U-Boot tree to host pending fixes and improvements
- [**63**星][4m] [LLVM] [lifting-bits/fennec](https://github.com/lifting-bits/fennec) Rewriting functions in compiled binaries using McSema
-- [**63**星][12d] [Py] [crytic/etheno](https://github.com/crytic/etheno) Simplify Ethereum security analysis and testing
+- [**63**星][9d] [Py] [crytic/etheno](https://github.com/crytic/etheno) Simplify Ethereum security analysis and testing
+- [**63**星][2m] [C] [zyantific/zyan-hook-engine](https://github.com/zyantific/zyan-hook-engine) Advanced x86/x86-64 hooking library (WIP).
+- [**63**星][1y] [Py] [zhongzhi107/raspberry-pi-tutorials](https://github.com/zhongzhi107/raspberry-pi-tutorials) 面向软件工程师的树莓派入门教程
+- [**63**星][3y] [Ruby] [zed-0xff/ctf](https://github.com/zed-0xff/ctf) some tasks/solutions from CTF challenges
+- [**63**星][4m] [C] [yuawn/hitcon-badge-2019](https://github.com/yuawn/hitcon-badge-2019) HITCON Badge for HITCON CMT 2019.
- [**63**星][5m] [Go] [yryz/httpproxy](https://github.com/yryz/httpproxy) 一个轻量级HTTP代理,支持shadowsocks服务,方便命令行、开发环境使用。
- [**63**星][2y] [Go] [yara-rules/yara-endpoint](https://github.com/yara-rules/yara-endpoint) Yara-Endpoint is a tool useful for incident response as well as anti-malware enpoint base on Yara signatures.
- [**63**星][3y] [Py] [xorond/sudo-snooper](https://github.com/xorond/sudo-snooper) Python script that acts like the original sudo binary to fool users into entering their passwords
+- [**63**星][9m] [Py] [xnffdd/proxypool](https://github.com/xnffdd/proxypool) 自建免费IP代理池。
- [**63**星][1y] [Py] [wazehell/metateta](https://github.com/wazehell/metateta) Metateta Automated Tool For Scanning And Exploiting Network Protocols Using Metasploit
-- [**63**星][4y] [C++] [waleedassar/antidebug](https://github.com/waleedassar/antidebug) Collection Of Anti-Debugging Tricks
-- [**63**星][4m] [tiaotiaolong/sec_interview_know_list](https://github.com/tiaotiaolong/sec_interview_know_list) 信息安全方面面试清单
-- [**63**星][4m] [Visual Basic] [thesph1nx/rt-101](https://github.com/thesph1nx/rt-101) VB.net Remote Administrator Tool (RAT)
-- [**63**星][3m] [Py] [therook/nsshell](https://github.com/therook/nsshell) A DNS connectback shell executed by strings in payloads.txt
+- [**63**星][7d] [tiaotiaolong/sec_interview_know_list](https://github.com/tiaotiaolong/sec_interview_know_list) 信息安全方面面试清单
- [**63**星][1y] [tevora-threat/powerview3-aggressor](https://github.com/tevora-threat/powerview3-aggressor) Cobalt Strike Aggressor script menu for Powerview/SharpView
- [**63**星][6m] [Py] [sysopfb/malware_decoders](https://github.com/sysopfb/malware_decoders) Static based decoders for malware samples
-- [**63**星][8m] [Go] [smithclay/faassh](https://github.com/smithclay/faassh) simple go SSH server with reverse tunneling designed for running in cloud functions like AWS lambda
+- [**63**星][5y] [Py] [sqall01/zwoelf](https://github.com/sqall01/zwoelf) An ELF parsing and manipulation library for Python
- [**63**星][2y] [Py] [sethsec/pycodeinjection](https://github.com/sethsec/pycodeinjection) Automated Python Code Injection Tool
- [**63**星][3y] [C] [seemoo-lab/bcm-public](https://github.com/seemoo-lab/bcm-public) DEPRECATED: Monitor Mode and Firmware patching framework for the Google Nexus 5, development moved to:
-- [**63**星][9m] [PowerShell] [sadprocessor/cypherdog](https://github.com/sadprocessor/cypherdog) PoSh BloodHound Dog Whisperer
-- [**63**星][2y] [Py] [ryanohoro/csbruter](https://github.com/ryanohoro/csbruter) Cobalt Strike team server password brute force tool
- [**63**星][1y] [C#] [rvrsh3ll/sharpfruit](https://github.com/rvrsh3ll/sharpfruit) A C# penetration testing tool to discover low-haning web fruit via web requests.
- [**63**星][2y] [C] [plashchynski/viewssld](https://github.com/plashchynski/viewssld) viewssld is a free, open source, non-terminating SSLv2/SSLv3/TLS traffic decryption daemon for Snort, and other Network Intrusion Detection Systems (IDS).
+- [**63**星][4m] [Java] [pibigstar/parsevip](https://github.com/pibigstar/parsevip) 解析VIP资源,解析出酷狗、QQ音乐、腾讯视频、人人视频的真实地址
- [**63**星][5y] [Py] [paulsec/spipscan](https://github.com/paulsec/spipscan) SPIP (CMS) Scanner for penetration testing purpose written in Python
- [**63**星][2y] [Py] [paulsec/metasearch-public](https://github.com/paulsec/metasearch-public) Stop searching for sample hashes on 10 different sites.
-- [**63**星][17d] [Py] [patois/genmc](https://github.com/patois/genmc) 显示Hex-Rays 反编译器的Microcode,辅助开发Microcode插件
- [**63**星][4y] [Java] [palmerc/securewebsockets](https://github.com/palmerc/securewebsockets) Add SSL support to the Autobahn WebSocket library
- [**63**星][5m] [PHP] [owasp/owaspwebgoatphp](https://github.com/owasp/owaspwebgoatphp) A deliberately vulnerable web application for learning web application security.
- [**63**星][6y] [JS] [owasp/appsec-browser-bundle](https://github.com/owasp/appsec-browser-bundle) The OWASP AppSec Browser Bundle is an open source Linux based penetration testing browser bundle built over Mozilla Firefox. It comes pre-configured with security tools for spidering, advanced web searching, fingerprinting, anonymous browsing, web server scanning, fuzzing, report generating and more.
- [**63**星][2y] [ophirharpaz/patched-minesweeper](https://github.com/ophirharpaz/patched-minesweeper) I hacked Minesweeper into putting flags on all the mined squares when starting. Yoohoo.
- [**63**星][5y] [CSS] [opensecurityresearch/fsexploitme](https://github.com/opensecurityresearch/fsexploitme) Purposely vulnerable ActiveX Control to teach about exploitation in a browser-based environment.
-- [**63**星][18d] [Py] [openitsystem/itops](https://github.com/openitsystem/itops) 基于Python + Django的AD\Exchange管理系统
-- [**63**星][5y] [PHP] [nyx0/tinba](https://github.com/nyx0/tinba) Tinba Banking Trojan
+- [**63**星][5m] [Shell] [nodesocket/cryptr](https://github.com/nodesocket/cryptr) A simple shell utility for encrypting and decrypting files using OpenSSL.
- [**63**星][5y] [C] [nihilus/idastealth](https://github.com/nihilus/idastealth)
- [**63**星][1y] [Py] [nicksanzotta/wifisuite](https://github.com/nicksanzotta/wifisuite) Enterprise WPA Wireless Tool Suite
+- [**63**星][3y] [Lua] [netxfly/nginx_lua_security](https://github.com/netxfly/nginx_lua_security) 浅谈nginx+lua在安全中的应用
- [**63**星][4m] [Java] [nccgroup/berserko](https://github.com/nccgroup/berserko) Burp Suite extension to perform Kerberos authentication
- [**63**星][3y] [C] [mrrraou/waithax](https://github.com/mrrraou/waithax) An implementation of the waithax / slowhax 3DS Kernel11 exploit.
- [**63**星][2m] [Ruby] [mephux/ruby-nessus](https://github.com/mephux/ruby-nessus) Ruby-Nessus is a ruby interface for the popular Nessus vulnerability scanner.
-- [**63**星][6m] [Py] [marcobellaccini/pyaescrypt](https://github.com/marcobellaccini/pyaescrypt) A Python 3 module and script that uses AES256-CBC to encrypt/decrypt files and streams in AES Crypt file format (version 2).
+- [**63**星][21d] [C] [maldiohead/cve-2019-6207](https://github.com/maldiohead/cve-2019-6207) xnu kernel heap info leak
+- [**63**星][4y] [C] [m-pays/m-cpuminer-v2](https://github.com/m-pays/m-cpuminer-v2) Latest miner (m-minerd)
- [**63**星][3y] [JS] [luin/serialize](https://github.com/luin/serialize) Serialize an object including it's function into a JSON.
+- [**63**星][12m] [PS] [luciusbono/packer-windows10](https://github.com/luciusbono/packer-windows10) A Packer build for Windows 10
+- [**63**星][5m] [Py] [loolzec/asu](https://github.com/loolzec/asu) facebook hacking toolkit
- [**63**星][11m] [Ruby] [livingsocial/bundler-patch](https://github.com/livingsocial/bundler-patch) Update your gems conservatively to deal with vulnerable gems or just get more current.
- [**63**星][4y] [MATLAB] [konstantinberlin/malware-windows-audit-log-detection](https://github.com/konstantinberlin/malware-windows-audit-log-detection) Detection of malware using dynamic behavior and Windows audit logs
-- [**63**星][1y] [Py] [kasperskylab/vbscriptinternals](https://github.com/kasperskylab/vbscriptinternals) Scripts for disassembling VBScript p-code in the memory to aid in exploits analysis
- [**63**星][6m] [Py] [jvns/zine-formatter](https://github.com/jvns/zine-formatter) Small Python script for formatting zines into booklets
-- [**63**星][1y] [C] [joswr1ght/cowpatty](https://github.com/joswr1ght/cowpatty) WPA2-PSK Cracking
- [**63**星][2y] [josephlhall/dc25-votingvillage-report](https://github.com/josephlhall/dc25-votingvillage-report) A report to synthesize findings from the Defcon 25 Voting Machine Hacking Village
- [**63**星][9y] [C] [jonoberheide/ksymhunter](https://github.com/jonoberheide/ksymhunter) Routines for hunting down kernel symbols.
+- [**63**星][2y] [Py] [iotsec/z3sec](https://github.com/iotsec/z3sec) Penetration testing framework for ZigBee security research.
- [**63**星][1y] [C] [ioactive/fuzzndis](https://github.com/ioactive/fuzzndis) A Fuzzer for Windows NDIS Drivers OID Handlers
- [**63**星][1y] [C] [inndy/ctf-writeup](https://github.com/inndy/ctf-writeup) My CTF write-up collection
- [**63**星][7y] [C++] [hurley25/sniffer](https://github.com/hurley25/sniffer) 一个跨平台的网络数据嗅探&抓包程序,基于Qt 4.x 以及 libpcap 库(Linux下)和 Winpcap库(Windows 下)。
- [**63**星][11m] [hannob/apache-uaf](https://github.com/hannob/apache-uaf) Apache use after free bug infos / ASAN stack traces
- [**63**星][1y] [Py] [gr4ym4ntx/attackintel](https://github.com/gr4ym4ntx/attackintel) A python script to query the MITRE ATT&CK API for tactics, techniques, mitigations, & detection methods for specific threat groups.
-- [**63**星][27d] [C] [gpg/libgcrypt](https://github.com/gpg/libgcrypt) The GNU crypto library
- [**63**星][2y] [C] [georgeargyros/snowflake](https://github.com/georgeargyros/snowflake) Snowflake is a tool for exploiting randomness vulnerabilities by seed recovery attacks targetting the rand() and mt_rand() generators in PHP applications.
+- [**63**星][3m] [JS] [gbaptista/luminous](https://github.com/gbaptista/luminous) Identify, analyze and block code execution and event collection through JavaScript in your browser with code interception.
- [**63**星][3y] [funkmyster/awesome-cloud-security](https://github.com/funkmyster/awesome-cloud-security) Curated list of awesome cloud security blogs, podcasts, standards, projects, and examples.
- [**63**星][1y] [Shell] [floyd-fuh/crass](https://github.com/floyd-fuh/crass) Code Review Audit Script Scanner
-- [**63**星][2m] [Java] [flankerhqd/bindump4j](https://github.com/flankerhqd/bindump4j) A portable utility to locate android binder service
- [**63**星][2y] [Shell] [faf0/thinkpad-scripts](https://github.com/faf0/thinkpad-scripts) Scripts for fixing TrackPointers and touchpads under Ubuntu 14.04 and 16.04 or similar distributions on Lenovo ThinkPads (tested on X1 Carbon 2nd Generation and reported to work on X240)
-- [**63**星][12d] [Go] [evilsocket/sum](https://github.com/evilsocket/sum) A specialized database server for linear algebra and machine learning.
- [**63**星][2y] [Py] [esser420/eviltwinframework](https://github.com/esser420/eviltwinframework) A framework for pentesters that facilitates evil twin attacks as well as exploiting other wifi vulnerabilities
- [**63**星][8m] [emadshanab/facebook-bug-bounty-writeups](https://github.com/emadshanab/facebook-bug-bounty-writeups) Facebook Bug Bounties
-- [**63**星][9m] [FreeMarker] [dvdandroid/xposedmoduletemplate](https://github.com/dvdandroid/xposedmoduletemplate) Easily create a Xposed Module with Android Studio
-- [**63**星][8m] [Go] [dsnezhkov/sshorty](https://github.com/dsnezhkov/sshorty) A progressive, customizable armored SSH tunnel implant for Linux and MacOS systems
- [**63**星][3m] [C] [dorneanu/ixkeylog](https://github.com/dorneanu/ixkeylog) *NIX X11 Keylogger
- [**63**星][1y] [C] [dodola/fbhookfork](https://github.com/dodola/fbhookfork) 从 fb 的 profilo 项目里提取出来的hook 库,自己用
- [**63**星][1y] [Py] [crescentvenus/walb](https://github.com/crescentvenus/walb) WALB is raspberry Pi and HackRF based Wireless Attack LaunchBox.
- [**63**星][2y] [Java] [codelion/gramtest](https://github.com/codelion/gramtest) GramTest: A tool for Grammar based Test case generation
+- [**63**星][3y] [Java] [chhsiao90/nitmproxy](https://github.com/chhsiao90/nitmproxy) Proxy server based on netty
- [**63**星][2m] [C] [carmaa/interrogate](https://github.com/carmaa/interrogate) Interrogate is a proof-of-concept tool for identification of cryptographic keys in binary material (regardless of target operating system), first and foremost for memory dump analysis and forensic usage.
-- [**63**星][1y] [Java] [c0ny1/httpheadmodifer](https://github.com/c0ny1/httpheadmodifer) 一款快速修改HTTP数据包头的Burp Suite插件
- [**63**星][5y] [Py] [c01db33f/concolica](https://github.com/c01db33f/concolica) Python concolic execution framework for program analysis
- [**63**星][3y] [C++] [breakingmalwareresearch/eleven](https://github.com/breakingmalwareresearch/eleven) Elevation by environment variable expansion
-- [**63**星][17d] [Visual Basic] [blackhacker511/blackworm](https://github.com/blackhacker511/blackworm) Black Worm Offical Repo
+- [**63**星][5m] [Go] [botherder/snoopdigg](https://github.com/botherder/snoopdigg) Simple utility to ease the process of collecting evidence to find infections
- [**63**星][1y] [Shell] [bcapptain/dockernymous](https://github.com/bcapptain/dockernymous) A script used to create a whonix like gateway/workstation environment with docker containers.
- [**63**星][3m] [CMake] [argilo/gr-elster](https://github.com/argilo/gr-elster) A GNU Radio block that decodes packets transmitted by Elster R2S smart meters
-- [**63**星][3m] [Java] [aress31/swurg](https://github.com/aress31/swurg) Parse OpenAPI documents into Burp Suite for automating OpenAPI-based APIs security assessments (approved by PortSwigger for inclusion in their official BApp Store).
- [**63**星][2m] [Py] [archlinux/arch-security-tracker](https://github.com/archlinux/arch-security-tracker) Arch Linux Security Tracker
-- [**63**星][2y] [Objective-C] [antoinet/valora](https://github.com/antoinet/valora) valora:利用随机源 MAC 地址和随机 SSID 生成 802.11 探测请求流,以迷惑 WiFi 追踪系统
-- [**63**星][18d] [Py] [aliasrobotics/aztarna](https://github.com/aliasrobotics/aztarna) aztarna, a footprinting tool for robots.
+- [**63**星][2y] [ObjC] [antoinet/valora](https://github.com/antoinet/valora) valora:利用随机源 MAC 地址和随机 SSID 生成 802.11 探测请求流,以迷惑 WiFi 追踪系统
+- [**63**星][20d] [Py] [aliasrobotics/aztarna](https://github.com/aliasrobotics/aztarna) aztarna, a footprinting tool for robots.
- [**63**星][3m] [C] [adulau/ssldump](https://github.com/adulau/ssldump) (unofficial repository) of ssldump - + a myriad of patches (from Debian and other distributions + contribution (via PR))
- [**63**星][2y] [C++] [abenkhadra/spedi](https://github.com/abenkhadra/spedi) Speculative disassembly, CFG recovery, and call-graph recovery from stripped binaries.
- [**63**星][2y] [Perl] [0x90/vpn-arsenal](https://github.com/0x90/vpn-arsenal) VPN pentest tools and scripts
-- [**62**星][17d] [C] [taviso/dbusmap](https://github.com/taviso/dbusmap) This is a simple utility for enumerating D-Bus endpoints, an nmap for D-Bus.
+- [**62**星][15d] [Go] [harleo/asnip](https://github.com/harleo/asnip) ASN target organization IP range attack surface mapping for reconnaissance, fast and lightweight
+- [**62**星][9d] [ga1ois/bluehat-2019-seattle](https://github.com/ga1ois/bluehat-2019-seattle) All the materials in BlueHat 2019 Seattle will be realeased here.
+- [**62**星][19d] [payloadbox/xxe-injection-payload-list](https://github.com/payloadbox/xxe-injection-payload-list)
+- [**62**星][29d] [Py] [draios/sysdigcloud-kubernetes](https://github.com/draios/sysdigcloud-kubernetes) Sysdig Cloud on Kubernetes
+- [**62**星][19d] [C] [taviso/dbusmap](https://github.com/taviso/dbusmap) This is a simple utility for enumerating D-Bus endpoints, an nmap for D-Bus.
+- [**62**星][9d] [C++] [intel/ad-rss-lib](https://github.com/intel/ad-rss-lib) Library implementing the Responsibility Sensitive Safety model (RSS) for Autonomous Vehicles
- [**62**星][4y] [Py] [tuter/monmob](https://github.com/tuter/monmob)
- [**62**星][2y] [Py] [vysecurity/maiint](https://github.com/vysecurity/MaiInt) OSINT Organization Employee Profiling Tool for MaiMai
- [**62**星][3y] [shmilylty/sec-box](https://github.com/shmilylty/Sec-Box) information security Tools Box (信息安全工具集合)
@@ -10746,9 +11417,7 @@ networking routines
- [**62**星][2m] [C] [0e85dc6eaf/ctf-writeups](https://github.com/0e85dc6eaf/CTF-Writeups) Writeups/solutions
- [**62**星][1y] [Py] [avicoder/spoodle](https://github.com/avicoder/spoodle) spoodle:大规模子域名及 poodle漏洞扫描器
- [**62**星][4m] [Py] [crytic/pyevmasm](https://github.com/crytic/pyevmasm) Ethereum Virtual Machine (EVM) disassembler and assembler
-- [**62**星][2m] [C] [zyantific/zyan-hook-engine](https://github.com/zyantific/zyan-hook-engine) Advanced x86/x86-64 hooking library (WIP).
- [**62**星][9m] [C] [zigzagsecurity/survival-guide-radare2](https://github.com/zigzagsecurity/survival-guide-radare2) Basic tutorials for reverse engineer with radare2
-- [**62**星][3y] [Ruby] [zed-0xff/ctf](https://github.com/zed-0xff/ctf) some tasks/solutions from CTF challenges
- [**62**星][2y] [Shell] [yukinoshita47/pentest-tools-auto-installer](https://github.com/yukinoshita47/pentest-tools-auto-installer) Tool sederhana buat install tool-tool pentest dan forensic bagi pengguna linux yang jenis nya non-pentest OS
- [**62**星][8y] [Java] [yifanlu/psxperia](https://github.com/yifanlu/psxperia) This tool will take a PSX image that you legally own and convert it to be playable on the Xperia Play with the emulator extracted from the packaged game "Crash Bandicoot."
- [**62**星][5y] [Py] [xipiter/idiotic](https://github.com/xipiter/idiotic) Simple ways to 0wn simple IOT devices
@@ -10758,155 +11427,169 @@ networking routines
- [**62**星][2y] [C++] [tyranid/zeronights2017](https://github.com/tyranid/zeronights2017) Some sample code from my Zero Nights 2017 presentation.
- [**62**星][1y] [tyranid/windows-attacksurface-workshop](https://github.com/tyranid/windows-attacksurface-workshop) Workshop material for a Windows Attack Surface Analysis Workshop
- [**62**星][4y] [Py] [tony1016/burplogfilter](https://github.com/tony1016/burplogfilter) A python3 program to filter Burp Suite log file.
-- [**62**星][7m] [PowerShell] [swizzlez/invoke-enumsecuritytools](https://github.com/swizzlez/invoke-enumsecuritytools)
+- [**62**星][2y] [Go] [tengzhangchao/portscan](https://github.com/tengzhangchao/portscan) 端口扫描器
+- [**62**星][8m] [PS] [swizzlez/invoke-enumsecuritytools](https://github.com/swizzlez/invoke-enumsecuritytools)
+- [**62**星][1y] [C] [shuax/locateip](https://github.com/shuax/locateip) 高效的IP数据库解析库
- [**62**星][2y] [Lua] [scipag/httprecon-nse](https://github.com/scipag/httprecon-nse) Advanced web server fingerprinting for Nmap
- [**62**星][1m] [HTML] [santandersecurityresearch/asvs](https://github.com/santandersecurityresearch/asvs) A simple web app that helps developers understand the ASVS requirements.
- [**62**星][4y] [Py] [rich5/harness](https://github.com/rich5/harness) Interactive remote PowerShell Payload
- [**62**星][5m] [Ruby] [rhtconsulting/cfme-rhconsulting-scripts](https://github.com/rhtconsulting/cfme-rhconsulting-scripts)
-- [**62**星][6m] [PowerShell] [psconfeu/2019](https://github.com/psconfeu/2019) Code, Materials and Slides for psconf.eu 2019
+- [**62**星][6m] [PS] [psconfeu/2019](https://github.com/psconfeu/2019) Code, Materials and Slides for psconf.eu 2019
- [**62**星][4y] [Py] [poorbillionaire/windows-prefetch-parser](https://github.com/poorbillionaire/windows-prefetch-parser) Parse Windows Prefetch files: Supports XP - Windows 10 Prefetch files
- [**62**星][2y] [PHP] [pklink/ppma](https://github.com/pklink/ppma) [INACTIVE] PHP Password Manager
-- [**62**星][4m] [Py] [pinnace/burp-jwt-fuzzhelper-extension](https://github.com/pinnace/burp-jwt-fuzzhelper-extension) burp-jwt-fuzzhelper-extension: Burp扩展, 用于Fuzzing JWT
+- [**62**星][5m] [Py] [pinnace/burp-jwt-fuzzhelper-extension](https://github.com/pinnace/burp-jwt-fuzzhelper-extension) burp-jwt-fuzzhelper-extension: Burp扩展, 用于Fuzzing JWT
+- [**62**星][1y] [C++] [paranoidninja/scriptdotsh-malwaredevelopment](https://github.com/paranoidninja/scriptdotsh-malwaredevelopment) This repo will contain code snippets for blogs: Malware on Steroids written by me at
- [**62**星][2y] [Go] [openprovider/whoisd](https://github.com/openprovider/whoisd) Openprovider WHOIS server/daemon
-- [**62**星][4m] [TypeScript] [nowsecure/airspy](https://github.com/nowsecure/airspy) AirSpy - Frida-based tool for exploring and tracking the evolution of Apple's AirDrop protocol implementation on i/macOS, from the server's perspective. Released during BH USA 2019 Training
-- [**62**星][5m] [Shell] [nodesocket/cryptr](https://github.com/nodesocket/cryptr) A simple shell utility for encrypting and decrypting files using OpenSSL.
+- [**62**星][5y] [Py] [nullhypothesis/scramblesuit](https://github.com/nullhypothesis/scramblesuit) The ScrambleSuit traffic obfuscation protocol.
+- [**62**星][2y] [C] [nccgroup/cachegrab](https://github.com/nccgroup/cachegrab) 执行和可视化针对软件的由 trace 驱动的缓存攻击(需要启用TrustZone 的 ARMv8 内核)
- [**62**星][2m] [Go] [moldabekov/virusgotal](https://github.com/moldabekov/virusgotal)
+- [**62**星][26d] [Dockerfile] [misp/misp-docker](https://github.com/misp/misp-docker) MISP Docker (XME edition)
- [**62**星][7m] [C] [merlijnwajer/tracy](https://github.com/merlijnwajer/tracy) tracy - a system call tracer and injector. Find us in #tracy on irc.freenode.net
-- [**62**星][19d] [C] [maldiohead/cve-2019-6207](https://github.com/maldiohead/cve-2019-6207) xnu kernel heap info leak
-- [**62**星][5m] [Py] [loolzec/asu](https://github.com/loolzec/asu) facebook hacking toolkit
+- [**62**星][7m] [C] [luoyanbei/testhookzz](https://github.com/luoyanbei/testhookzz) iOS逆向:使用HookZz框架hook游戏“我的战争”,进入上帝模式
- [**62**星][1y] [Py] [lclevy/unarcrypto](https://github.com/lclevy/unarcrypto) unarcrypto:描述 zip、rar、7zip 使用的加密算法
- [**62**星][2y] [Py] [lbarman/kali-tools](https://github.com/lbarman/kali-tools) Run Kali tools on all distributions. Offline search, including in package descriptions.
+- [**62**星][1y] [kutim/docker-security](https://github.com/kutim/docker-security) docker 安全基线规范
- [**62**星][2m] [Go] [knqyf263/gost](https://github.com/knqyf263/gost) Build a local copy of Security Tracker. Notify via E-mail/Slack if there is an update.
- [**62**星][1y] [Ruby] [kingsabri/cve-in-ruby](https://github.com/kingsabri/cve-in-ruby) Exploits written & ported to Ruby - no Metasploit
- [**62**星][1m] [Shell] [joshuamart/autorecon](https://github.com/joshuamart/autorecon) Simple shell script for automated domain recognition with some tools
- [**62**星][2y] [Go] [johnsonz/go-sni-detector](https://github.com/johnsonz/go-sni-detector) A go application to scan sni ip
+- [**62**星][8m] [Dockerfile] [john-lin/docker-snort](https://github.com/john-lin/docker-snort) Snort in Docker for Network Functions Virtualization (NFV)
- [**62**星][5y] [C] [jiayy/lkm-rootkit](https://github.com/jiayy/lkm-rootkit) an lkm rootkit support x86/64,arm,mips
- [**62**星][5y] [MATLAB] [jiaoxianjun/rtl-sdr-lte](https://github.com/jiaoxianjun/rtl-sdr-lte) Play with LTE signal (especially China TD-LTE) captured by rtl-sdr
- [**62**星][9m] [Py] [jaksi/awslog](https://github.com/jaksi/awslog) Show the history and changes between configuration versions of AWS resources
-- [**62**星][2y] [Py] [iotsec/z3sec](https://github.com/iotsec/z3sec) Penetration testing framework for ZigBee security research.
-- [**62**星][26d] [JS] [hugsy/windbg_js_scripts](https://github.com/hugsy/windbg_js_scripts) Toy scripts for playing with WinDbg JS API
+- [**62**星][28d] [JS] [hugsy/windbg_js_scripts](https://github.com/hugsy/windbg_js_scripts) Toy scripts for playing with WinDbg JS API
- [**62**星][3y] [C++] [hexhive/malwash](https://github.com/hexhive/malwash)
- [**62**星][3y] [Py] [hackinglab/mobilesf](https://github.com/hackinglab/mobilesf) HackingLab定制版Mobile Safe Framework
+- [**62**星][1y] [Py] [ha3mrx/hacking](https://github.com/ha3mrx/hacking) Ha3Mrx Pentesting and Security Hacking
- [**62**星][1m] [Shell] [gentoo/libressl](https://github.com/gentoo/libressl) [MIRROR] LibreSSL ebuilds testing repository
- [**62**星][7y] [C] [gdbinit/osx_boubou](https://github.com/gdbinit/osx_boubou) A PoC Mach-O infector via library injection
+- [**62**星][7m] [Kotlin] [fs0c131y/samsunglocker](https://github.com/fs0c131y/samsunglocker) Samsung ContainerAgent Vulnerability - Local DoS for Samsung smartphone
- [**62**星][2y] [Py] [frky/scat](https://github.com/frky/scat) Dynamic analysis of binary programs to retrieve function-related information (arity, type of parameters, coupling).
- [**62**星][7m] [C++] [fare9/anbu](https://github.com/fare9/anbu) ANBU (Automatic New Binary Unpacker) a tool for me to learn about PIN and about algorithms for generic unpacking.
- [**62**星][7m] [C++] [explife0011/cve-2019-0803](https://github.com/explife0011/cve-2019-0803) Win32k Elevation of Privilege Poc
-- [**62**星][5y] [C] [evilsocket/libpe](https://github.com/evilsocket/libpe) A C/C++ library to parse Windows portable executables written with speed and stability in mind.
+- [**62**星][7m] [Py] [engmaher/baf](https://github.com/engmaher/baf) Blind Attacking Framework
- [**62**星][1y] [C] [emptymonkey/drinkme](https://github.com/emptymonkey/drinkme) drinkme:从 stdin 读取 ShellCode 并执行。用于部署 ShellCode 之前测试
-- [**62**星][20d] [drduh/pc-engines-apu-router-guide](https://github.com/drduh/pc-engines-apu-router-guide) Guide to building a Linux or BSD router on the PC Engines APU platform
-- [**62**星][23d] [Py] [deepdivesec/gitmad](https://github.com/deepdivesec/gitmad) Monitor, Alert, and Discover sensitive info and data leakage on Github.
-- [**62**星][23d] [JS] [curiousdannii/ifvms.js](https://github.com/curiousdannii/ifvms.js) The Interactive Fiction Virtual Machines Suite - in Javascript
+- [**62**星][22d] [drduh/pc-engines-apu-router-guide](https://github.com/drduh/pc-engines-apu-router-guide) Guide to building a Linux or BSD router on the PC Engines APU platform
+- [**62**星][3m] [PHP] [divineomega/laravel-password-exposed-validation-rule](https://github.com/divineomega/laravel-password-exposed-validation-rule)
+- [**62**星][4m] [Shell] [developerkunal/converto](https://github.com/developerkunal/converto) Installing Kali linux on Vps Server
+- [**62**星][25d] [Py] [deepdivesec/gitmad](https://github.com/deepdivesec/gitmad) Monitor, Alert, and Discover sensitive info and data leakage on Github.
+- [**62**星][12m] [C] [darm64/xnu](https://github.com/darm64/xnu) Research into porting the XNU kernel to ARM devices.
+- [**62**星][25d] [JS] [curiousdannii/ifvms.js](https://github.com/curiousdannii/ifvms.js) The Interactive Fiction Virtual Machines Suite - in Javascript
- [**62**星][2m] [PHP] [cosasdepuma/securitynotfound](https://github.com/cosasdepuma/securitynotfound)
+- [**62**星][13d] [C] [cn-uofbasel/ccn-lite](https://github.com/cn-uofbasel/ccn-lite) CCN-lite, a lightweight implementation of the CCNx protocol and its variations
- [**62**星][11m] [cmatthewbrooks/r2kit](https://github.com/cmatthewbrooks/r2kit) A set of scripts for a radare-based malware code analysis workflow
- [**62**星][6m] [Py] [catalyst256/myjunk](https://github.com/catalyst256/myjunk) Just random files I've stored here for people to get access to because wordpress doesn't like python.
-- [**62**星][5m] [Go] [botherder/snoopdigg](https://github.com/botherder/snoopdigg) Simple utility to ease the process of collecting evidence to find infections
-- [**62**星][28d] [Java] [beardypig/ghidra-emotionengine](https://github.com/beardypig/ghidra-emotionengine) Ghidra Processor for the Play Station 2's Emotion Engine MIPS based CPU
+- [**62**星][2y] [Java] [calebwhiting/java-asm-obfuscator](https://github.com/calebwhiting/java-asm-obfuscator)
- [**62**星][2y] [JS] [auth0/webtask-scripts](https://github.com/auth0/webtask-scripts)
- [**62**星][7m] [Py] [andy10101/apksecurityanalysis](https://github.com/andy10101/apksecurityanalysis) ApkSecurityAnalysis
- [**62**星][2y] [C++] [agustingianni/retools](https://github.com/agustingianni/retools) retools: a reverse engineering toolkit for normies
- [**62**星][2y] [AutoIt] [9aylas/shortcut-payload-generator](https://github.com/9aylas/shortcut-payload-generator) AutoIt HackTool, Shortcuts .lnk Payloads Generator As LNK-KISSER.
+- [**62**星][9m] [Py] [3lackrush/poc-bank](https://github.com/3lackrush/poc-bank) Focus on cybersecurity | collection of PoC and Exploits
- [**62**星][2y] [3gstudent/bitsadminexec](https://github.com/3gstudent/bitsadminexec) 利用bitsadmin 实现驻留,以及自动运行
- [**62**星][10m] [Py] [cse-assemblyline/assemblyline](https://bitbucket.org/cse-assemblyline/assemblyline)
-- [**61**星][5m] [JS] [nccgroup/datajackproxy](https://github.com/nccgroup/datajackproxy) Datajack Proxy allows you to intercept TLS traffic in native x86 applications across platforms
-- [**61**星][27d] [Py] [draios/sysdigcloud-kubernetes](https://github.com/draios/sysdigcloud-kubernetes) Sysdig Cloud on Kubernetes
- [**61**星][5y] [Py] [byt3bl33d3r/dhcpshock](https://github.com/byt3bl33d3r/dhcpshock) Spoofs a DHCP server and exploits all clients vulnerable to the 'ShellShock' bug
- [**61**星][2y] [wtsxdev/fuzzing-resources](https://github.com/wtsxdev/fuzzing-resources) List of fuzzing resources for learning Fuzzing and initial phases of Exploit Development like root cause analysis
-- [**61**星][8d] [Rust] [io12/pwninit](https://github.com/io12/pwninit) pwninit - automate starting binary exploit challenges
+- [**61**星][1y] [Py] [dafthack/rdpspray](https://github.com/dafthack/rdpspray) Tool for password spraying RDP
+- [**61**星][4y] [ObjC] [project-imas/securefoundation](https://github.com/project-imas/securefoundation) Secure components enabling application authentication, secure file storage, app level file-based keychain, and shredding for files on disk
+- [**61**星][8d] [C] [chroblert/domainweakpasswdcheck](https://github.com/chroblert/domainweakpasswdcheck) 内网安全·域账号弱口令审计
+- [**61**星][6d] [CSS] [hacker0x01/docs.hackerone.com](https://github.com/hacker0x01/docs.hackerone.com) HackerOne Platform Documentation
- [**61**星][8m] [Ruby] [gushmazuko/winbypass](https://github.com/gushmazuko/winbypass) Windows UAC Bypass
- [**61**星][6y] [Java] [gat3way/airpirate](https://github.com/gat3way/airpirate) Android 802.11 pentesting tool
- [**61**星][6m] [Py] [joshvillbrandt/wireless](https://github.com/joshvillbrandt/wireless) A dead simple, cross-platform Python library to connect to wireless networks.
+- [**61**星][2m] [Jupyter Notebook] [misinfosecproject/amitt_framework](https://github.com/misinfosecproject/amitt_framework) AMITT (Adversarial Misinformation and Influence Tactics and Techniques) framework for describing disinformation incidents. AMITT is part of misinfosec - work on adapting information security practices to help track and counter misinformation - and is designed as far as possible to fit existing infosec practices and tools.
- [**61**星][7y] [JS] [enablesecurity/webapp-exploit-payloads](https://github.com/EnableSecurity/Webapp-Exploit-Payloads) a collection of payloads for common webapps
- [**61**星][12m] [imfht/scansql](https://github.com/imfht/ScanSql) 利用sqlmap和URL去重的爬虫写的一个大规模扫描的脚本
- [**61**星][2y] [Shell] [m4lv0id/lare](https://github.com/m4lv0id/LARE) [L]ocal [A]uto [R]oot [E]xploiter is a simple bash script that helps you deploy local root exploits from your attacking machine when your victim machine do not have internet connectivity.
- [**61**星][7m] [PHP] [michyamrane/wso-webshell](https://github.com/mIcHyAmRaNe/wso-webshell)
- [**61**星][2y] [Py] [feexd/vbg](https://github.com/feexd/vbg) vbg: 使用X11转发的SSH会话远程在客户端执行指令
-- [**61**星][7m] [Py] [nordicsemiconductor/nrf-sniffer-for-802.15.4](https://github.com/NordicSemiconductor/nRF-Sniffer-for-802.15.4) nRF-based 802.15.4 sniffer (firmware and software)
-- [**61**星][1y] [PowerShell] [danmcinerney/msfbot](https://github.com/DanMcInerney/msfbot) WORK IN PROGRESS. Waits for MSF session then automatically gets domain admin
+- [**61**星][1y] [PS] [danmcinerney/msfbot](https://github.com/DanMcInerney/msfbot) WORK IN PROGRESS. Waits for MSF session then automatically gets domain admin
+- [**61**星][4y] [Shell] [praetorian-code/epictreasure](https://github.com/praetorian-code/epictreasure) radare, angr, pwndbg, binjitsu, ect in a box ready for pwning
- [**61**星][1y] [C] [zhuowei/qemu](https://github.com/zhuowei/qemu) Patched version of QEMU for exploring XNU arm64 emulation.
-- [**61**星][27d] [Lua] [yelp/casper](https://github.com/yelp/casper) Yelp's internal caching proxy, powered by Nginx and OpenResty at its core
+- [**61**星][6m] [JS] [ysocorp/koa2-ratelimit](https://github.com/ysocorp/koa2-ratelimit) Rate-limiting middleware for Koa2 ES6. Use to limit repeated requests to APIs and/or endpoints such as password reset.
+- [**61**星][29d] [Lua] [yelp/casper](https://github.com/yelp/casper) Yelp's internal caching proxy, powered by Nginx and OpenResty at its core
- [**61**星][2y] [Py] [yassergersy/sub6](https://github.com/yassergersy/sub6) Web App Scanner
- [**61**星][8m] [C++] [yajs/nikpeviewer](https://github.com/yajs/nikpeviewer) NikPEViewer a PE viewer source code
- [**61**星][2y] [Perl] [xlogicx/m2elf](https://github.com/xlogicx/m2elf) Converts Machine Code to x86 (32-bit) Linux executable (auto-wrapping with ELF headers)
-- [**61**星][2m] [Py] [xfreed0m/smtptester](https://github.com/xfreed0m/smtptester) small python3 tool to check common vulnerabilities in SMTP servers
- [**61**星][1y] [wjpdeveloper/my-action-github](https://github.com/wjpdeveloper/my-action-github) my-action-github
- [**61**星][3y] [Lua] [waffles-2/sambacry](https://github.com/waffles-2/sambacry) CVE-2017-7494 - Detection Scripts
+- [**61**星][7m] [Shell] [vs4vijay/swissarmypi](https://github.com/vs4vijay/swissarmypi) A set of utility/tools to make Raspberry Pi [Zero W] into Swiss Army Knife
- [**61**星][4y] [Py] [veil-framework/veil-ordnance](https://github.com/veil-framework/veil-ordnance) Veil-Ordnance is a tool designed to quickly generate MSF stager shellcode
- [**61**星][8m] [Py] [treussart/probemanager](https://github.com/treussart/probemanager) Centralize Management of Intrusion Detection System like Suricata Bro Ossec ...
- [**61**星][3y] [Py] [trailofbits/deceptiveidn](https://github.com/trailofbits/deceptiveidn) deceptiveidn: 利用计算机视觉(computer vision)自动检测 IDN 是否具有欺骗性(a deceptive reading)。(IDN: Internationalized Domain Names,国际化域名)
- [**61**星][2y] [C] [tobaljackson/2017-sit-re-presentation](https://github.com/tobaljackson/2017-sit-re-presentation) Intro to radare2 presentation files.
-- [**61**星][2y] [Go] [tengzhangchao/portscan](https://github.com/tengzhangchao/portscan) 端口扫描器
-- [**61**星][2y] [PowerShell] [tenable/posh-nessus](https://github.com/tenable/posh-nessus) PowerShell Module for automating Tenable Nessus Vulnerability Scanner.
+- [**61**星][2y] [PS] [tenable/posh-nessus](https://github.com/tenable/posh-nessus) PowerShell Module for automating Tenable Nessus Vulnerability Scanner.
- [**61**星][1y] [C++] [tandasat/debuglogger](https://github.com/tandasat/debuglogger) A software driver that lets you log kernel-mode debug output into a file on Windows.
+- [**61**星][4y] [C++] [t-vk/memory-hacking-class](https://github.com/t-vk/memory-hacking-class) Easy to use class to read and modify other processes memory.
- [**61**星][3y] [Py] [syss-research/radio-hackbox](https://github.com/syss-research/radio-hackbox) PoC tool to demonstrate vulnerabilities in wireless input devices
- [**61**星][4y] [Py] [sysinsider/usbtracker](https://github.com/sysinsider/usbtracker) Quick & dirty coded incident response and forensics python script to track USB devices events and artifacts in a Windows OS (Vista and later).
- [**61**星][1y] [C] [synestraa/highcall-library](https://github.com/synestraa/highcall-library) usermode standalone kernel interface
- [**61**星][4y] [C++] [strozfriedberg/ntfs-linker](https://github.com/strozfriedberg/ntfs-linker) An NTFS journal parser
- [**61**星][1y] [Py] [srounet/pymem](https://github.com/srounet/pymem) A python library for windows, providing the needed functions to start working on your own with memory editing.
- [**61**星][5y] [CoffeeScript] [sroberts/hubot-vtr-scripts](https://github.com/sroberts/hubot-vtr-scripts) Scripts for making Hubot a CND Sidekick
+- [**61**星][5y] [PHP] [smaash/fuckshitup](https://github.com/smaash/fuckshitup) php-cli vulnerability scanner
- [**61**星][4y] [C] [sha0/winvblock](https://github.com/sha0/winvblock) WinVBlock (derived from WinAoE) AoE, MEMDISK, GRUB4DOS RAM Disk, File-Backed Disk Driver
- [**61**星][4y] [Py] [secretsquirrel/backdoor-pyc](https://github.com/secretsquirrel/backdoor-pyc) Patch pyc files with your code. Fairly lame.
- [**61**星][3y] [Py] [samyk/awesome-vehicle-security](https://github.com/samyk/awesome-vehicle-security)
+- [**61**星][2y] [ObjC] [rickhe/rhwechat](https://github.com/rickhe/rhwechat) iOS 无需越狱逆向微信:自动抢红包
- [**61**星][2y] [Py] [pimps/cve-2018-7600](https://github.com/pimps/cve-2018-7600) Exploit for Drupal 7 <= 7.57 CVE-2018-7600
- [**61**星][1y] [pfalcon/awesome-linux-android-hacking](https://github.com/pfalcon/awesome-linux-android-hacking) List of hints and Q&As to get most of your Linux/Android device
- [**61**星][4y] [HTML] [payatu/cve-2015-6086](https://github.com/payatu/cve-2015-6086) PoC for CVE-2015-6086
- [**61**星][7y] [pakt/decv](https://github.com/pakt/decv) Decompiler for Code Virtualizer 1.3.8 (Oreans)
+- [**61**星][4y] [C++] [oowoodone/vmp_odplugin](https://github.com/oowoodone/vmp_odplugin) VMProtect OD Plugin
- [**61**星][2y] [Py] [oalabs/pyiatrebuild](https://github.com/oalabs/pyiatrebuild) Automatically rebuild Import Address Table for dumped PE file. With python bindings!
-- [**61**星][5y] [Py] [nullhypothesis/scramblesuit](https://github.com/nullhypothesis/scramblesuit) The ScrambleSuit traffic obfuscation protocol.
- [**61**星][4y] [C++] [null--/graviton](https://github.com/null--/graviton) Cross Platform Malware Development Framework
+- [**61**星][3y] [nanopool/claymore-xmr-cpu-miner](https://github.com/nanopool/claymore-xmr-cpu-miner) Claymore's CryptoNote Windows CPU Miner
- [**61**星][3y] [Py] [n00py/post-ex](https://github.com/n00py/post-ex) Post-exploitation scripts for OS X persistence and privesc
- [**61**星][2y] [Go] [mwgg/passera](https://github.com/mwgg/passera) [UNSUPPORTED] A small tool to turn any entered passphrase into a strong secure password, allowing you to easily use different strong passwords for different websites without storing them
-- [**61**星][24d] [Dockerfile] [misp/misp-docker](https://github.com/misp/misp-docker) MISP Docker (XME edition)
+- [**61**星][2y] [HTML] [michenriksen/bucketlist](https://github.com/michenriksen/bucketlist) Amazon S3 bucket spelunking!
- [**61**星][4y] [Py] [michael-yip/maltegovt](https://github.com/michael-yip/maltegovt) A set of Maltego transforms for VirusTotal Public API v2.0. This set has the added functionality of caching queries on a daily basis to speed up resolutions.
-- [**61**星][2y] [PowerShell] [mattifestation/pocsubjectinterfacepackage](https://github.com/mattifestation/pocsubjectinterfacepackage) A proof-of-concept subject interface package (SIP) used to demonstrate digital signature subversion attacks.
+- [**61**星][2y] [PS] [mattifestation/pocsubjectinterfacepackage](https://github.com/mattifestation/pocsubjectinterfacepackage) A proof-of-concept subject interface package (SIP) used to demonstrate digital signature subversion attacks.
- [**61**星][3y] [C++] [maldevel/driver-loader](https://github.com/maldevel/driver-loader) Windows驱动加载器
- [**61**星][3y] [Py] [lijiejie/struts2_045_scan](https://github.com/lijiejie/struts2_045_scan) Struts2-045 Scanner
- [**61**星][9m] [Go] [lesnuages/go-execute-assembly](https://github.com/lesnuages/go-execute-assembly) Allow a Go process to dynamically load .NET assemblies
- [**61**星][6y] [Py] [kevthehermit/yarapcap](https://github.com/kevthehermit/yarapcap) Process HTTP Pcaps With YARA
-- [**61**星][4m] [Py] [josue87/boomer](https://github.com/josue87/boomer) Framework for exploiting local vulnerabilities
+- [**61**星][5m] [Py] [josue87/boomer](https://github.com/josue87/boomer) Framework for exploiting local vulnerabilities
- [**61**星][4y] [JS] [joliss/js-string-escape](https://github.com/joliss/js-string-escape) Escape strings for use as JavaScript string literals
-- [**61**星][8d] [C] [jessfraz/tor](https://github.com/jessfraz/tor) Development fork of
+- [**61**星][5d] [C] [jessfraz/tor](https://github.com/jessfraz/tor) Development fork of
- [**61**星][4y] [C#] [jaredcatkinson/evilnetconnectionwmiprovider](https://github.com/jaredcatkinson/evilnetconnectionwmiprovider)
- [**61**星][6y] [Java] [isecpartners/android-killpermandsigchecks](https://github.com/isecpartners/android-killpermandsigchecks) Bypass signature and permission checks for IPCs
- [**61**星][1y] [im-bug/blockchain-security-list](https://github.com/im-bug/blockchain-security-list)
- [**61**星][5y] [Py] [hamiltoniancycle/classnamedeobfuscator](https://github.com/hamiltoniancycle/classnamedeobfuscator) Simple script to parse through the .smali files produced by apktool and extract the .source annotation lines.
- [**61**星][3m] [Py] [hacksysteam/wpadescape](https://github.com/hacksysteam/wpadescape) Sandbox escape using WinHTTP Web Proxy Auto-Discovery Service
-- [**61**星][1y] [Py] [ha3mrx/hacking](https://github.com/ha3mrx/hacking) Ha3Mrx Pentesting and Security Hacking
- [**61**星][11m] [Py] [graniet/operative-framework-hd](https://github.com/graniet/operative-framework-hd) operative framework HD is the digital investigation framework, you can interact with websites, email address, company, people, ip address, vulnerability fuzzing ... interact with basic/graphical view and export with XML, JSON, use database management...
- [**61**星][5y] [Assembly] [gdbinit/mpress_dumper](https://github.com/gdbinit/mpress_dumper) MPRESS dumper for OS X
- [**61**星][1y] [Assembly] [gamozolabs/falkervisor_beta](https://github.com/gamozolabs/falkervisor_beta)
- [**61**星][6y] [C] [freewaf/waf-pe](https://github.com/freewaf/waf-pe) Open Source Web Application Firewall Protection Engine
-- [**61**星][6m] [Ruby] [engineyard/engineyard-serverside](https://github.com/engineyard/engineyard-serverside) This gem deploys your application on Engine Yard Cloud.
+- [**61**星][5y] [C] [evilsocket/libpe](https://github.com/evilsocket/libpe) A C/C++ library to parse Windows portable executables written with speed and stability in mind.
+- [**61**星][7m] [Ruby] [engineyard/engineyard-serverside](https://github.com/engineyard/engineyard-serverside) This gem deploys your application on Engine Yard Cloud.
- [**61**星][11m] [JS] [dxa4481/xssoauthpersistence](https://github.com/dxa4481/xssoauthpersistence) Maintaining account persistence via XSS and Oauth
- [**61**星][3y] [Java] [dodola/simplesmali](https://github.com/dodola/simplesmali) 通过精简Smali语法细节来增强反编译代码阅读性,自定义了一种简单语法
- [**61**星][2y] [Swift] [devxoul/blockchain](https://github.com/devxoul/blockchain) A blockchain simulator written in Swift
-- [**61**星][4m] [Shell] [developerkunal/converto](https://github.com/developerkunal/converto) Installing Kali linux on Vps Server
-- [**61**星][12m] [C] [darm64/xnu](https://github.com/darm64/xnu) Research into porting the XNU kernel to ARM devices.
- [**61**星][7y] [Py] [danghvu/pwp](https://github.com/danghvu/pwp) Python Web framework P0wner
+- [**61**星][2y] [PS] [curi0usjack/adimporter](https://github.com/curi0usjack/adimporter) Credit to Helge Klein -
+- [**61**星][20d] [Py] [crs-support/ftw](https://github.com/crs-support/ftw) Framework for Testing WAFs (FTW!)
- [**61**星][3y] [Assembly] [cranklin/cranky-data-virus](https://github.com/cranklin/cranky-data-virus) Educational virus written in Assembly that infects 32-bit ELF executables on Linux using the data segment infection method
- [**61**星][2y] [C] [convisoappsec/firefox_tunnel](https://github.com/convisoappsec/firefox_tunnel) 使用Firefox来建立远程通信隧道, 使用cookie.sqlite/html/js实现payload上传下载
-- [**61**星][11d] [C] [cn-uofbasel/ccn-lite](https://github.com/cn-uofbasel/ccn-lite) CCN-lite, a lightweight implementation of the CCNx protocol and its variations
- [**61**星][10m] [Py] [cisco-sas/katnip](https://github.com/cisco-sas/katnip) Extension library for the Kitty fuzzing framework
- [**61**星][2y] [Py] [cifasis/nosy-newt](https://github.com/cifasis/nosy-newt) Nosy Newt is a simple concolic execution tool for exploring the input space of a binary executable program based in Triton
+- [**61**星][9y] [C] [chronic-dev/bootrom-dumper](https://github.com/chronic-dev/bootrom-dumper) Utility to Dump iPhone Bootrom
- [**61**星][5m] [Py] [christophetd/ipv6teal](https://github.com/christophetd/ipv6teal)
-- [**61**星][2y] [Java] [calebwhiting/java-asm-obfuscator](https://github.com/calebwhiting/java-asm-obfuscator)
-- [**61**星][2y] [breaktoprotect/cve-2017-12615](https://github.com/breaktoprotect/cve-2017-12615) POC Exploit for Apache Tomcat 7.0.x CVE-2017-12615 PUT JSP vulnerability.
-- [**61**星][2y] [blue-bird1/metasploit-cn-wiki](https://github.com/blue-bird1/metasploit-cn-wiki) metasploit中文wiki
+- [**61**星][5m] [Py] [b-mueller/scrooge-mcetherface](https://github.com/b-mueller/scrooge-mcetherface) Attack tool that loots Ether from vulnerable smart contracts
- [**61**星][7m] [C++] [apexlegendsuc/anti-cheat-emulator](https://github.com/apexlegendsuc/anti-cheat-emulator)
-- [**61**星][13d] [Py] [anon-exploiter/suid3num](https://github.com/anon-exploiter/suid3num) A standalone python script which utilizes python's built-in modules to enumerate SUID binaries, separate default binaries from custom binaries, cross-match those with bins in GTFO Bin's repository & auto-exploit those, all with colors! ( ͡~ ͜ʖ ͡°)
+- [**61**星][1y] [Py] [anbai-inc/cve-2018-2893](https://github.com/anbai-inc/cve-2018-2893) CVE-2018-2893
- [**61**星][3y] [Shell] [abs0/wargames](https://github.com/abs0/wargames) Shell script to simulate the W.O.P.R. computer from WarGames (wopr)
-- [**61**星][9m] [Py] [3lackrush/poc-bank](https://github.com/3lackrush/poc-bank) Focus on cybersecurity | collection of PoC and Exploits
- [**60**星][3m] [Go] [dvyukov/go-fuzz-corpus](https://github.com/dvyukov/go-fuzz-corpus) Corpus for github.com/dvyukov/go-fuzz examples
-- [**60**星][28d] [Shell] [nccgroup/asafw](https://github.com/nccgroup/asafw) Set of scripts to deal with Cisco ASA firmware [pack/unpack etc.]
+- [**60**星][3d] [Py] [tribler/py-ipv8](https://github.com/tribler/py-ipv8) Python implementation of the IPv8 layer
+- [**60**星][30d] [Shell] [nccgroup/asafw](https://github.com/nccgroup/asafw) Set of scripts to deal with Cisco ASA firmware [pack/unpack etc.]
- [**60**星][4y] [shadowsocks/tun2socks-ios](https://github.com/shadowsocks/tun2socks-ios) tun2socks as a library for iOS apps
-- [**60**星][13d] [CSS] [hacker0x01/docs.hackerone.com](https://github.com/hacker0x01/docs.hackerone.com) HackerOne Platform Documentation
+- [**60**星][4m] [motherfuzzers/meetups](https://github.com/motherfuzzers/meetups) Materials from Fuzzing Bay Area meetups
+- [**60**星][4m] [JS] [phith0n/xray-poc-generation](https://github.com/phith0n/xray-poc-generation) 🧬 辅助生成 XRay YAML POC
+- [**60**星][1m] [HCL] [jordanpotti/offensiveclouddistribution](https://github.com/jordanpotti/offensiveclouddistribution) Leverage the ability of Terraform and AWS or GCP to distribute large security scans across numerous cloud instances.
- [**60**星][2m] [JS] [atlasnx/web-cfw-loader](https://github.com/atlasnx/web-cfw-loader) A payload launcher made in javascript for the Nintendo Switch
-- [**60**星][2m] [Jupyter Notebook] [misinfosecproject/amitt_framework](https://github.com/misinfosecproject/amitt_framework) AMITT (Adversarial Misinformation and Influence Tactics and Techniques) framework for describing disinformation incidents. AMITT is part of misinfosec - work on adapting information security practices to help track and counter misinformation - and is designed as far as possible to fit existing infosec practices and tools.
- [**60**星][2m] [Py] [landgrey/cve-2019-7609](https://github.com/landgrey/cve-2019-7609) exploit CVE-2019-7609(kibana RCE) on right way by python2 scripts
- [**60**星][2y] [C] [samuelpowell/cx10-fnrf](https://github.com/samuelpowell/CX10-FNRF) Cheerson CX10 rate mode firmware with integrated RF
- [**60**星][8m] [C++] [intel/satt](https://github.com/intel/satt)
- [**60**星][2m] [C++] [imugee/pegasus](https://github.com/imugee/pegasus) reverse engineering extension plugin for windbg
-- [**60**星][4y] [Shell] [praetorian-code/epictreasure](https://github.com/praetorian-code/epictreasure) radare, angr, pwndbg, binjitsu, ect in a box ready for pwning
- [**60**星][3y] [Java] [censorship-no-archive/ceno1](https://github.com/censorship-no-archive/ceno1) (Deprecated PoC) Innovative censorship evading technology based on p2p distributed caching network
- [**60**星][5m] [Py] [zznop/bnida](https://github.com/zznop/bnida) 4个脚本,在IDA和BinaryNinja间交互数据
- [ida_export](https://github.com/zznop/bnida/blob/master/ida/ida_export.py) 将数据从IDA中导入
@@ -10914,35 +11597,39 @@ networking routines
- [binja_export](https://github.com/zznop/bnida/blob/master/binja_export.py) 将数据从BinaryNinja中导出
- [binja_import](https://github.com/zznop/bnida/blob/master/binja_import.py) 将数据导入到BinaryNinja
- [**60**星][4y] [Ruby] [zombiecraig/c0f](https://github.com/zombiecraig/c0f) CAN of Fingers (c0f) creates passive fingerprints of Make and Model over CAN bus
+- [**60**星][7d] [Py] [yingshang/banruo](https://github.com/yingshang/banruo)
- [**60**星][7m] [Py] [ultrasecurity/telekiller](https://github.com/ultrasecurity/telekiller) A Tools Session Hijacking And Stealer Local Passcode Telegram Windows
- [**60**星][4y] [Py] [tycx2ry/docker_api_vul](https://github.com/tycx2ry/docker_api_vul) docker 未授权访问漏洞利用脚本
+- [**60**星][8m] [JS] [try-to/electron-proxy](https://github.com/try-to/electron-proxy) 基于electron开发的内网穿透工具,支持多系统,支持任意本地端口.
- [**60**星][2y] [Py] [tmr232/idabuddy](https://github.com/tmr232/idabuddy) 逆向滴好盆友??
+- [**60**星][2y] [tkmru/awesome-linux-rootkits](https://github.com/tkmru/awesome-linux-rootkits)
+- [**60**星][10m] [ObjC] [tihmstar/v3ntex](https://github.com/tihmstar/v3ntex) getf tfp0 on iOS 12.0 - 12.1.2
- [**60**星][6m] [Py] [thesph1nx/spacecow](https://github.com/thesph1nx/spacecow) Windows Rootkit written in Python
+- [**60**星][6m] [PS] [texhex/biossledgehammer](https://github.com/texhex/biossledgehammer) Automated BIOS, ME, TPM firmware update and BIOS settings for HP devices
- [**60**星][1y] [Ruby] [tallakt/modbus-cli](https://github.com/tallakt/modbus-cli) Modbus command line utility
-- [**60**星][4y] [C++] [t-vk/memory-hacking-class](https://github.com/t-vk/memory-hacking-class) Easy to use class to read and modify other processes memory.
- [**60**星][4y] [Objective-C++] [steven-michaud/reverse-engineering-on-osx](https://github.com/steven-michaud/reverse-engineering-on-osx) Reverse Engineering on OS X
- [**60**星][4m] [OCaml] [stephenrkell/libcrunch](https://github.com/stephenrkell/libcrunch) Runtime + instrumentation adding precise, accurate and fash(-ish) dynamic checking to C (bounds errors, type confusion, ...).
-- [**60**星][5y] [PHP] [smaash/fuckshitup](https://github.com/smaash/fuckshitup) php-cli vulnerability scanner
-- [**60**星][6m] [Ruby] [skahwah/automato](https://github.com/skahwah/automato) automato should help with automating some of the user-focused enumeration tasks during an internal penetration test.
+- [**60**星][2y] [Java] [stefano-lupo/java-proxy-server](https://github.com/stefano-lupo/java-proxy-server) This is a simple HTTP/HTTPS proxy server written in Java
+- [**60**星][7m] [Ruby] [skahwah/automato](https://github.com/skahwah/automato) automato should help with automating some of the user-focused enumeration tasks during an internal penetration test.
- [**60**星][8y] [Py] [sensepost/anapickle](https://github.com/sensepost/anapickle) Toolset for writing shellcode in Python's Pickle language and for manipulating pickles to inject shellcode.
- [**60**星][2y] [secwiki/macos-kernel-exploits](https://github.com/secwiki/macos-kernel-exploits) macos-kernel-exploits MacOS平台提权漏洞集合
- [**60**星][9m] [C#] [securifybv/shelllink](https://github.com/securifybv/shelllink) A .NET Class Library for processing ShellLink (LNK) files
- [**60**星][4y] [Py] [samvartaka/malware](https://github.com/samvartaka/malware) Various malware, packer, crypter, etc. detection and analysis tools
-- [**60**星][4m] [Rust] [rust-fuzz/targets](https://github.com/rust-fuzz/targets)
- [**60**星][3y] [C++] [rprichard/win32-console-docs](https://github.com/rprichard/win32-console-docs) Win32 Console Documentation -- in particular, console/standard handles and CreateProcess inheritance
+- [**60**星][17d] [JS] [rastating/xss-chef](https://github.com/rastating/xss-chef) A web application for generating custom XSS payloads
+- [**60**星][2m] [Py] [quarkslab/lldbagility](https://github.com/quarkslab/lldbagility) A tool for debugging macOS virtual machines
- [**60**星][4y] [Py] [phith0n/xdctf2015](https://github.com/phith0n/xdctf2015) writeup about XDCTF 2015
-- [**60**星][7d] [Py] [phackt/pentest](https://github.com/phackt/pentest) Custom tools and projects about security
- [**60**星][6m] [Py] [pdkt-team/ctf](https://github.com/pdkt-team/ctf) CTF write-ups by PDKT team with English and Indonesian language
-- [**60**星][1y] [C++] [paranoidninja/scriptdotsh-malwaredevelopment](https://github.com/paranoidninja/scriptdotsh-malwaredevelopment) This repo will contain code snippets for blogs: Malware on Steroids written by me at
- [**60**星][5y] [Py] [owtf/wafbypasser](https://github.com/owtf/wafbypasser)
-- [**60**星][15d] [netstalking-core/netstalking-catalogue](https://github.com/netstalking-core/netstalking-catalogue) Каталог нетсталкерских ресурсов, команд, инструментов, источников контента.
+- [**60**星][17d] [netstalking-core/netstalking-catalogue](https://github.com/netstalking-core/netstalking-catalogue) Каталог нетсталкерских ресурсов, команд, инструментов, источников контента.
- [**60**星][5y] [PHP] [nccgroup/webfeet](https://github.com/nccgroup/webfeet) Web Filter External Enumeration Tool (WebFEET)
-- [**60**星][9d] [Vue] [nao-sec/tknk_scanner](https://github.com/nao-sec/tknk_scanner) 基于社区的集成恶意软件识别系统
+- [**60**星][11d] [Vue] [nao-sec/tknk_scanner](https://github.com/nao-sec/tknk_scanner) 基于社区的集成恶意软件识别系统
- [**60**星][2y] [Py] [mthbernardes/whoamimailbot](https://github.com/mthbernardes/whoamimailbot)
- [**60**星][1y] [HTML] [micyo202/yan-demo](https://github.com/micyo202/yan-demo) 本项目是基于 SpringMVC+Spring+MyBatis (SSM) 架构的高效率便捷开发框架
+- [**60**星][6d] [C] [lnslbrty/ptunnel-ng](https://github.com/lnslbrty/ptunnel-ng) Tunnel TCP connections through ICMP.
- [**60**星][3y] [Py] [leonjza/qrxfer](https://github.com/leonjza/qrxfer) Transfer files from Air gapped machines using QR codes
-- [**60**星][3y] [PowerShell] [kevin-robertson/conveigh](https://github.com/kevin-robertson/conveigh) Conveigh is a Windows PowerShell LLMNR/NBNS spoofer detection tool
-- [**60**星][7m] [Dockerfile] [john-lin/docker-snort](https://github.com/john-lin/docker-snort) Snort in Docker for Network Functions Virtualization (NFV)
+- [**60**星][5m] [C] [lazenca/kernel-exploit-tech](https://github.com/lazenca/kernel-exploit-tech) Linux Kernel exploitation Tutorial.
+- [**60**星][3y] [PS] [kevin-robertson/conveigh](https://github.com/kevin-robertson/conveigh) Conveigh is a Windows PowerShell LLMNR/NBNS spoofer detection tool
- [**60**星][2y] [C++] [jmasterx/agui](https://github.com/jmasterx/agui) C++ GUI API Aimed at Games
- [**60**星][5y] [Go] [jgrahamc/torhoney](https://github.com/jgrahamc/torhoney) Gets the list of TOR exit nodes and matches them with Project Honeypot data
- [**60**星][1y] [Java] [java-deobfuscator/deobfuscator-gui](https://github.com/java-deobfuscator/deobfuscator-gui) An awesome GUI for an awesome deobfuscator
@@ -10951,184 +11638,203 @@ networking routines
- [**60**星][3y] [C] [hoshimin/enjoythering0](https://github.com/hoshimin/enjoythering0) Шаблон полнофункционального драйвера и обёртки над ядерным API
- [**60**星][4y] [Py] [hood3drob1n/cve-2016-3714](https://github.com/hood3drob1n/cve-2016-3714) ImaegMagick Code Execution (CVE-2016-3714)
- [**60**星][2y] [C++] [hasherezade/mypintools](https://github.com/hasherezade/mypintools) Tools to run with Intel PIN
-- [**60**星][5y] [PowerShell] [harmj0y/cortana](https://github.com/harmj0y/cortana) This is a pack of Cortana scripts commonly used on our pentests.
+- [**60**星][5y] [PS] [harmj0y/cortana](https://github.com/harmj0y/cortana) This is a pack of Cortana scripts commonly used on our pentests.
- [**60**星][8m] [Py] [grocid/ctf](https://github.com/grocid/ctf)
- [**60**星][2y] [C] [gravity-postquantum/gravity-sphincs](https://github.com/gravity-postquantum/gravity-sphincs) Signature scheme submitted to NIST's Post-Quantum Cryptography Project
+- [**60**星][5d] [JS] [gitsquared/sherlock-js](https://github.com/gitsquared/sherlock-js) Find usernames across over 170 social networks - Fast & flexible remake of sdushantha/sherlock
+- [**60**星][2y] [Java] [geeksonsecurity/android-overlay-malware-example](https://github.com/geeksonsecurity/android-overlay-malware-example) Harmless Android malware using the overlay technique to steal user credentials.
- [**60**星][1y] [Shell] [galeone/letsencrypt-lighttpd](https://github.com/galeone/letsencrypt-lighttpd) Renew your let's encrypt certificates monthly, using lighttpd as webserver.
-- [**60**星][7m] [Kotlin] [fs0c131y/samsunglocker](https://github.com/fs0c131y/samsunglocker) Samsung ContainerAgent Vulnerability - Local DoS for Samsung smartphone
- [**60**星][3y] [Py] [fireeye/volatility-plugins](https://github.com/fireeye/volatility-plugins)
- [**60**星][2y] [C++] [finixbit/ftrace](https://github.com/finixbit/ftrace) Simple Function calls tracer
- [**60**星][4y] [PHP] [filetofirewall/fof](https://github.com/filetofirewall/fof) Filet-O-Firewall Vulnerability PoC
- [**60**星][5y] [Py] [eykd/owyl](https://github.com/eykd/owyl) A python behavior tree for implementing fast and flexible AI.
- [**60**星][10m] [exitmsconfig/engineering-box](https://github.com/exitmsconfig/engineering-box) engineering Box (简称 - engineering) 是一个集合github平台上的安全行业从业者自研开源扫描器的仓库,包括子域名枚举、数据库漏洞扫描、弱口令或信息泄漏扫描、端口扫描、指纹识别以及其他大型扫描器或模块化扫描器,同时该仓库只收录各位安全行业从业者自己编写的一般性开源扫描器,类似awvs、nmap、w3af等知名扫描工具不收录,收集全球各位同仁爱好者维护项目
- [**60**星][1y] [Py] [esmog/nodexp](https://github.com/esmog/nodexp) NodeXP - A Server Side Javascript Injection tool capable of detecting and exploiting Node.js vulnerabilities
-- [**60**星][7m] [Py] [engmaher/baf](https://github.com/engmaher/baf) Blind Attacking Framework
+- [**60**星][8m] [Shell] [ernw/static-toolbox](https://github.com/ernw/static-toolbox) A collection of statically compiled tools like Nmap and Socat.
- [**60**星][4y] [Py] [dotcppfile/serbot](https://github.com/dotcppfile/serbot) Advanced Controller/Server/Client Reverse Shell/Bot – Windows/Linux – Python
- [**60**星][1y] [Py] [darkw1z/ps1jacker](https://github.com/darkw1z/ps1jacker) Ps1jacker is a tool for generating COM Hijacking payload.
-- [**60**星][2y] [PowerShell] [curi0usjack/adimporter](https://github.com/curi0usjack/adimporter) Credit to Helge Klein -
-- [**60**星][7d] [HTML] [cudeso/tools](https://github.com/cudeso/tools) Different tools, koen.vanimpe@cudeso.be
-- [**60**星][18d] [Py] [crs-support/ftw](https://github.com/crs-support/ftw) Framework for Testing WAFs (FTW!)
+- [**60**星][4m] [Py] [dai-lab/steganogan](https://github.com/dai-lab/steganogan) SteganoGAN is a tool for creating steganographic images using adversarial training.
+- [**60**星][9d] [HTML] [cudeso/tools](https://github.com/cudeso/tools) Different tools, koen.vanimpe@cudeso.be
- [**60**星][2y] [C] [croemheld/lkm-rootkit](https://github.com/croemheld/lkm-rootkit) A LKM rootkit for most newer kernel versions.
- [**60**星][7m] [JS] [coolervoid/nozes](https://github.com/coolervoid/nozes) Pentest cmd manager- ALpha
- [**60**星][1y] [Py] [conix-security/btg](https://github.com/conix-security/btg) BTG's purpose is to make fast and efficient search on IOC
+- [**60**星][1y] [C++] [cisco-talos/thanatosdecryptor](https://github.com/cisco-talos/thanatosdecryptor) ThanatosDecryptor is an executable program that attempts to decrypt certain files encrypted by the Thanatos malware.
- [**60**星][5y] [Py] [byt3bl33d3r/duckhunter](https://github.com/byt3bl33d3r/duckhunter) Converts a USB Rubber ducky script into a Kali Nethunter friendly format for the HID attack
- [**60**星][2y] [DTrace] [brendangregg/dtrace-tools](https://github.com/brendangregg/dtrace-tools) DTrace tools for FreeBSD
+- [**60**星][2y] [breaktoprotect/cve-2017-12615](https://github.com/breaktoprotect/cve-2017-12615) POC Exploit for Apache Tomcat 7.0.x CVE-2017-12615 PUT JSP vulnerability.
- [**60**星][5m] [Py] [brakmic/sinkholes](https://github.com/brakmic/sinkholes)
- [**60**星][1y] [Py] [blackholesec/wifigod](https://github.com/blackholesec/wifigod) Wireless Security Testing v1.5
-- [**60**星][5m] [Py] [b-mueller/scrooge-mcetherface](https://github.com/b-mueller/scrooge-mcetherface) Attack tool that loots Ether from vulnerable smart contracts
- [**60**星][3y] [C] [arvanaghi/windows-dll-injector](https://github.com/arvanaghi/windows-dll-injector) A basic Windows DLL injector in C using CreateRemoteThread and LoadLibrary. Implemented for educational purposes.
+- [**60**星][1y] [Py] [arthastang/iot-home-guard](https://github.com/arthastang/iot-home-guard) A tool for malicious behavior detection in IoT devices
- [**60**星][2y] [Py] [argp/unmask_jemalloc](https://github.com/argp/unmask_jemalloc) De Mysteriis Dom jemalloc
- [**60**星][1y] [Py] [anssi-fr/audit-radius](https://github.com/anssi-fr/audit-radius) A RADIUS authentication server audit tool
-- [**60**星][1y] [Py] [anbai-inc/cve-2018-2893](https://github.com/anbai-inc/cve-2018-2893) CVE-2018-2893
+- [**60**星][5m] [C++] [alf45tar/pedalino](https://github.com/alf45tar/pedalino) Smart wireless MIDI foot controller for guitarists and more.
- [**60**星][7m] [Rust] [ajmwagar/lor-axe](https://github.com/ajmwagar/lor-axe) 🪓 a multi-threaded, low-bandwidth HTTP DOS tool
+- [**60**星][1y] [HTML] [aglcaicai/kalitoolsmanual](https://github.com/aglcaicai/kalitoolsmanual) Kali Linux 工具合集中文说明书
- [**60**星][2m] [Py] [9b/netinfo](https://github.com/9b/netinfo) Simple IP enrichment service and API wrapping PyASN and MaxMind GeoIP.
- [**59**星][8m] [JS] [javascript-obfuscator/gulp-javascript-obfuscator](https://github.com/javascript-obfuscator/gulp-javascript-obfuscator) Gulp plugin for javascript-obfuscator package.
- [**59**星][8m] [JS] [shadowsocks/shadowsocks-restful-api](https://github.com/shadowsocks/shadowsocks-restful-api) Secure, reliable, standard restful api for managing shadowsocks-libev
+- [**59**星][3m] [snoopysecurity/osce-prep](https://github.com/snoopysecurity/osce-prep) A list of freely available resources that can be used as a prerequisite before taking OSCE.
+- [**59**星][13d] [C++] [whid-injector/whid-31337](https://github.com/whid-injector/whid-31337) WHID Elite is a GSM-enabled Open-Source Multi-Purpose Offensive Device that allows a threat actor to remotely inject keystrokes, bypass air-gapped systems, conduct mousejacking attacks, do acoustic surveillance, RF replay attacks and much more. In practice, is THE Wet Dream of any Security Consultant out there!
- [**59**星][8m] [nationalsecurityagency/ghidra-data](https://github.com/nationalsecurityagency/ghidra-data) Supporting Data Archives for Ghidra
-- [**59**星][1m] [HCL] [jordanpotti/offensiveclouddistribution](https://github.com/jordanpotti/offensiveclouddistribution) Leverage the ability of Terraform and AWS or GCP to distribute large security scans across numerous cloud instances.
+- [**59**星][3m] [C] [angr/vex](https://github.com/angr/vex) A patched version of VEX to work with PyVEX.
+- [**59**星][2d] [aquasecurity/vuln-list](https://github.com/aquasecurity/vuln-list) NVD, RedHat, Debian, Ubuntu, Alpine
- [**59**星][4y] [JS] [auth0-blog/react-flux-debug-actions-sample](https://github.com/auth0-blog/react-flux-debug-actions-sample) This repository shows how you can use Flux actions to reproduce your user's issues in your own browser
- [**59**星][2m] [Py] [mozilla/frost](https://github.com/mozilla/frost) Unit testing framework for test driven security of AWS configurations, and more.
- [**59**星][3y] [Py] [fsecurelabs/peas](https://github.com/FSecureLABS/peas) PEAS is a Python 2 library and command line application for running commands on an ActiveSync server e.g. Microsoft Exchange.
- [**59**星][1y] [C] [zhechkoz/pwin](https://github.com/zhechkoz/pwin) Security Evaluation of Dynamic Binary Instrumentation Engines
-- [**59**星][7d] [Py] [yingshang/banruo](https://github.com/yingshang/banruo)
-- [**59**星][10m] [C] [xyzz/amonet](https://github.com/xyzz/amonet) A bootrom exploit for MediaTek devices
-- [**59**星][4y] [PowerShell] [xorrior/emailraider](https://github.com/xorrior/emailraider) Powershell MS Outlook enumeration and phishing tool
+- [**59**星][4y] [Java] [zd2100/pscout](https://github.com/zd2100/pscout)
+- [**59**星][11m] [C] [xyzz/amonet](https://github.com/xyzz/amonet) A bootrom exploit for MediaTek devices
+- [**59**星][4y] [PS] [xorrior/emailraider](https://github.com/xorrior/emailraider) Powershell MS Outlook enumeration and phishing tool
- [**59**星][1y] [xenithlabs/rfid-workshop](https://github.com/xenithlabs/rfid-workshop)
+- [**59**星][1y] [C#] [wledfor2/playhooky](https://github.com/wledfor2/playhooky) C# Runtime Hooking Library for .NET/Mono/Unity.
- [**59**星][2m] [Go] [wickett/lambhack](https://github.com/wickett/lambhack) A very vulnerable serverless application in AWS Lambda
-- [**59**星][7m] [Shell] [vs4vijay/swissarmypi](https://github.com/vs4vijay/swissarmypi) A set of utility/tools to make Raspberry Pi [Zero W] into Swiss Army Knife
- [**59**星][8m] [Py] [viele/onionskinrenderer](https://github.com/viele/onionskinrenderer) This is an Onion Skin Renderer for Autodesk Maya
- [**59**星][11m] [Py] [s0md3v/infinity](https://github.com/ultimatehackers/infinity) Infinity can get phone numbers from facebook accounts with some maths and shit.
-- [**59**星][8m] [JS] [try-to/electron-proxy](https://github.com/try-to/electron-proxy) 基于electron开发的内网穿透工具,支持多系统,支持任意本地端口.
-- [**59**星][2y] [tkmru/awesome-linux-rootkits](https://github.com/tkmru/awesome-linux-rootkits)
+- [**59**星][4m] [Zeek] [tylabs/dovehawk](https://github.com/tylabs/dovehawk) Dovehawk is a Zeek module that automatically imports MISP indicators and reports Sightings
- [**59**星][2y] [Lua] [tkcert/winnti-nmap-script](https://github.com/tkcert/winnti-nmap-script) Nmap Script to scan for Winnti infections
- [**59**星][1y] [Py] [tiaotiaolong/ttlscan](https://github.com/tiaotiaolong/ttlscan) 一款简易的插件化的漏洞扫描器框架
- [**59**星][11m] [Py] [thom-s/httphish](https://github.com/thom-s/httphish) Quickly clone a website and launch an HTTP server to phish information with httphish.py
- [**59**星][3y] [C#] [tech-srl/esh](https://github.com/tech-srl/esh) statistical similarity of binaries (Esh)
- [**59**星][5y] [Ruby] [tduehr/buby](https://github.com/tduehr/buby) A JRuby implementation of the BurpExtender interface for PortSwigger Burp Suite.
- [**59**星][3y] [Shell] [tapio/nautilus-git-scripts](https://github.com/tapio/nautilus-git-scripts) Nautilus scripts for interacting with a Git repository.
+- [**59**星][4m] [sukkaw/cloudflare-block-bad-bot-ruleset](https://github.com/sukkaw/cloudflare-block-bad-bot-ruleset)
- [**59**星][7y] [Java] [strazzere/dehoser](https://github.com/strazzere/dehoser) Unpacker for the HoseDex2Jar APK Protection which packs the original file inside the dex header
+- [**59**星][1y] [C] [sourceincite/cve-2018-8440](https://github.com/sourceincite/cve-2018-8440) CVE-2018-8440 standalone exploit
+- [**59**星][4m] [C] [sonertari/sslproxy](https://github.com/sonertari/sslproxy) Transparent SSL/TLS proxy for decrypting and diverting network traffic to other programs, such as UTM services, for deep SSL inspection
+- [**59**星][1y] [C] [skeeto/ptrace-examples](https://github.com/skeeto/ptrace-examples) Examples for Linux ptrace(2)
- [**59**星][3y] [Py] [sirusdv/edgehttp2fuzzer](https://github.com/sirusdv/edgehttp2fuzzer) Peach Pit for HTTP/2 Targeting Microsoft Edge
- [**59**星][2m] [PHP] [sirbrillig/phpcs-variable-analysis](https://github.com/sirbrillig/phpcs-variable-analysis) Find undefined and unused variables with the PHP Codesniffer static analysis tool.
- [**59**星][8m] [YARA] [sfaci/masc](https://github.com/sfaci/masc) 扫描网站中的恶意软件, 以及其他一些网站维护功能
+- [**59**星][2y] [Go] [sensepost/notruler](https://github.com/sensepost/notruler) The opposite of Ruler, provides blue teams with the ability to detect Ruler usage against Exchange.
- [**59**星][6m] [Py] [securityautomation/autosource](https://github.com/securityautomation/autosource) Automated SonarQube
- [**59**星][1m] [s9mf/xss_test](https://github.com/s9mf/xss_test) 记录个人XSS学习
- [**59**星][2m] [C#] [rvrsh3ll/sharpexcel4-dcom](https://github.com/rvrsh3ll/sharpexcel4-dcom) Port of Invoke-Excel4DCOM
-- [**59**星][11d] [rub-nds/johnny-you-are-fired](https://github.com/rub-nds/johnny-you-are-fired) Artifacts for the USENIX publication.
+- [**59**星][13d] [rub-nds/johnny-you-are-fired](https://github.com/rub-nds/johnny-you-are-fired) Artifacts for the USENIX publication.
- [**59**星][4y] [C] [robertdavidgraham/cve-2015-5477](https://github.com/robertdavidgraham/cve-2015-5477) PoC exploit for CVE-2015-5477 BIND9 TKEY assertion failure
+- [**59**星][17d] [C] [riscure/optee_fuzzer](https://github.com/riscure/optee_fuzzer) This repository contains the code for a fuzzing prototype for the OP-TEE system call interface using AFL.
- [**59**星][3m] [Go] [rickgray/vscan-go](https://github.com/rickgray/vscan-go) golang version for nmap service and application version detection (without nmap installation)
- [**59**星][11m] [Py] [reptilehaus/eternal-blue](https://github.com/reptilehaus/eternal-blue) REPTILEHAUS' simplified build process of Worawit Wang' (@sleepya_) version of EternalBlue.. The NSA exploit brought to you by the ShadowBrokers for exploiting MS17-010
-- [**59**星][15d] [JS] [rastating/xss-chef](https://github.com/rastating/xss-chef) A web application for generating custom XSS payloads
-- [**59**星][2m] [Py] [quarkslab/lldbagility](https://github.com/quarkslab/lldbagility) A tool for debugging macOS virtual machines
- [**59**星][10m] [Py] [push0ebp/allirt](https://github.com/push0ebp/allirt) Tool that converts All of libc to signatures for IDA Pro FLIRT Plugin. and utility make sig with FLAIR easily
+- [**59**星][4y] [Py] [psychomario/pyinject](https://github.com/psychomario/pyinject) A python module to help inject shellcode/DLLs into windows processes
+- [**59**星][4m] [Py] [owasp/threat-model-cookbook](https://github.com/owasp/threat-model-cookbook) This project is about creating and publishing threat model examples.
- [**59**星][6y] [Py] [offensivepython/sniffy](https://github.com/offensivepython/sniffy) A Simple network sniffer implemented on Python 3
- [**59**星][3m] [Shell] [nviso-be/sec599](https://github.com/nviso-be/sec599) SEC599 supporting GitHub repository
-- [**59**星][3y] [PowerShell] [nettitude/powershell](https://github.com/nettitude/powershell)
+- [**59**星][3y] [PS] [nettitude/powershell](https://github.com/nettitude/powershell)
- [**59**星][6m] [Py] [neonprimetime/phishingkittracker](https://github.com/neonprimetime/phishingkittracker) Tracking Threat Actor Emails in Phishing Kits. CC @PhishKitTracker on twitter if you find a #threatactoremail in #phishingkit , maintained by
- [**59**星][1y] [Go] [nebulouslabs/entropy-mnemonics](https://github.com/nebulouslabs/entropy-mnemonics) Human readable entropy.
- [**59**星][1m] [Java] [mozilla/zest](https://github.com/mozilla/zest)
+- [**59**星][2y] [Visual Basic .NET] [mgeeky/robustpentestmacro](https://github.com/mgeeky/robustpentestmacro) This is a rich-featured Visual Basic macro code for use during Penetration Testing assignments, implementing various advanced post-exploitation techniques.
- [**59**星][2y] [Go] [matishsiao/goinfo](https://github.com/matishsiao/goinfo) get os information use golang
- [**59**星][3y] [C++] [markhc/windbg_to_c](https://github.com/markhc/windbg_to_c) Translates WinDbg "dt" structure dump to a C structure
- [**59**星][5y] [C++] [malwaretech/uacelevator](https://github.com/malwaretech/uacelevator) Passive UAC elevation using dll infection
-- [**59**星][7d] [C] [lnslbrty/ptunnel-ng](https://github.com/lnslbrty/ptunnel-ng) Tunnel TCP connections through ICMP.
-- [**59**星][7d] [leipzig/awesome-reproducible-research](https://github.com/leipzig/awesome-reproducible-research) A curated list of reproducible research case studies, projects, tutorials, and media
-- [**59**星][5y] [Objective-C] [kpwn/vpwn](https://github.com/kpwn/vpwn) xnu local privilege escalation via cve-2015-1140 IOHIDSecurePromptClient injectStringGated heap overflow | poc||gtfo
+- [**59**星][6d] [leipzig/awesome-reproducible-research](https://github.com/leipzig/awesome-reproducible-research) A curated list of reproducible research case studies, projects, tutorials, and media
+- [**59**星][5y] [ObjC] [kpwn/vpwn](https://github.com/kpwn/vpwn) xnu local privilege escalation via cve-2015-1140 IOHIDSecurePromptClient injectStringGated heap overflow | poc||gtfo
- [**59**星][2y] [C] [koodous/androguard-yara](https://github.com/koodous/androguard-yara) Module to use Androguard with Yara
+- [**59**星][3y] [Go] [jijinggang/golocproxy](https://github.com/jijinggang/golocproxy) 轻量级超强反向代理软件,用go语言开发,通过公共可知的服务器端口代理,把局域网内任何主机的本地服务发布给局域网外的用户,可用来跨越各种防火墙。
- [**59**星][2y] [Py] [jeremyngalloway/mod_plaintext.py](https://github.com/jeremyngalloway/mod_plaintext.py) AKA "Internet Chemotherapy"
- [**59**星][7m] [Py] [jas502n/cve-2019-6340](https://github.com/jas502n/cve-2019-6340) Drupal8's REST RCE, SA-CORE-2019-003, CVE-2019-6340
- [**59**星][5m] [Py] [jas502n/cve-2019-11580](https://github.com/jas502n/cve-2019-11580) CVE-2019-11580 Atlassian Crowd and Crowd Data Center RCE
- [**59**星][2y] [Py] [isra17/nrs](https://github.com/isra17/nrs) 脱壳并分析NSIS installer打包的文件
- [**59**星][6m] [Py] [intrinsec/comission](https://github.com/intrinsec/comission) WhiteBox CMS analysis
-- [**59**星][28d] [infosec-community/apac-conferences](https://github.com/infosec-community/apac-conferences) A community contributed consolidated list of InfoSec meetups in the Asia Pacific region.
+- [**59**星][30d] [infosec-community/apac-conferences](https://github.com/infosec-community/apac-conferences) A community contributed consolidated list of InfoSec meetups in the Asia Pacific region.
+- [**59**星][1y] [Py] [howie6879/hproxy](https://github.com/howie6879/hproxy) hproxy - Asynchronous IP proxy pool, aims to make getting proxy as convenient as possible.(异步爬虫代理池)
- [**59**星][5m] [Py] [hgascon/adagio](https://github.com/hgascon/adagio) Structural Analysis and Detection of Android Malware
- [**59**星][4y] [hduffddybz/linux_websites](https://github.com/hduffddybz/linux_websites) Commonly used kernel hacking site
- [**59**星][5y] [C] [hackedteam/soldier-win](https://github.com/hackedteam/soldier-win) RCS Soldier for Windows
- [**59**星][1y] [Py] [gunnerstahl/jqshell](https://github.com/gunnerstahl/jqshell) A weaponized version of CVE-2018-9206
-- [**59**星][3m] [JS] [gitsquared/sherlock-js](https://github.com/gitsquared/sherlock-js) Find usernames across over 170 social networks - Fast & flexible remake of sdushantha/sherlock
-- [**59**星][2y] [Java] [geeksonsecurity/android-overlay-malware-example](https://github.com/geeksonsecurity/android-overlay-malware-example) Harmless Android malware using the overlay technique to steal user credentials.
-- [**59**星][8m] [Shell] [ernw/static-toolbox](https://github.com/ernw/static-toolbox) A collection of statically compiled tools like Nmap and Socat.
-- [**59**星][5y] [PowerShell] [enigma0x3/outlookpersistence](https://github.com/enigma0x3/outlookpersistence)
+- [**59**星][5y] [PS] [enigma0x3/outlookpersistence](https://github.com/enigma0x3/outlookpersistence)
- [**59**星][7m] [HTML] [dustyfresh/honeypress](https://github.com/dustyfresh/honeypress) python based WordPress honeypot in a docker container
+- [**59**星][7m] [HTML] [dobin/yookiterm-slides](https://github.com/dobin/yookiterm-slides) Exploitation and Mitigation Slides
- [**59**星][11m] [C] [depletionmode/wsipc](https://github.com/depletionmode/wsipc) Working Set Page Cache side-channel IPC PoC
+- [**59**星][8y] [JS] [davepacheco/node-heap-dump](https://github.com/davepacheco/node-heap-dump) Testing node heap dumps
- [**59**星][2m] [Py] [dannycork/python-whois](https://github.com/dannycork/python-whois) Python module/library for retrieving WHOIS information of domains.
+- [**59**星][9y] [C++] [cr4sh/drvhide-poc](https://github.com/cr4sh/drvhide-poc) Hidden kernel mode code execution for bypassing modern anti-rootkits.
- [**59**星][1y] [Py] [cortesi/mitmproxy](https://github.com/cortesi/mitmproxy) An interactive SSL-capable intercepting HTTP proxy for penetration testers and software developers
- [**59**星][2y] [C] [coolervoid/ninja_shell](https://github.com/coolervoid/ninja_shell) Port Knocking technique with AES256-GCM
- [**59**星][2y] [Java] [contrast-security-oss/contrast-ro0](https://github.com/contrast-security-oss/contrast-ro0) A tiny Java agent that blocks attacks against unsafe deserialization
-- [**59**星][1y] [C++] [cisco-talos/thanatosdecryptor](https://github.com/cisco-talos/thanatosdecryptor) ThanatosDecryptor is an executable program that attempts to decrypt certain files encrypted by the Thanatos malware.
- [**59**星][2y] [C] [cisco-talos/locky](https://github.com/cisco-talos/locky)
-- [**59**星][26d] [Py] [binaryanalysisplatform/bap-ida-python](https://github.com/binaryanalysisplatform/bap-ida-python) IDAPython脚本,在IDA中集成BAP
+- [**59**星][1y] [Py] [capt-meelo/telewreck](https://github.com/capt-meelo/telewreck) A Burp extension to detect and exploit versions of Telerik Web UI vulnerable to CVE-2017-9248.
+- [**59**星][28d] [Py] [binaryanalysisplatform/bap-ida-python](https://github.com/binaryanalysisplatform/bap-ida-python) IDAPython脚本,在IDA中集成BAP
- [**59**星][6y] [Py] [bez0r/pdns2](https://github.com/bez0r/pdns2) Passive DNS V2
- [**59**星][2y] [Py] [attackercan/teamviewer-dumper](https://github.com/attackercan/teamviewer-dumper) teamviewer-dumper: 从内存中转储TeamViewer ID 和密码
-- [**59**星][1y] [Py] [arthastang/iot-home-guard](https://github.com/arthastang/iot-home-guard) A tool for malicious behavior detection in IoT devices
+- [**59**星][11m] [Py] [anteater/anteater](https://github.com/anteater/anteater) Anteater - CI/CD Gate Check Framework
- [**59**星][2y] [Py] [amoulu/tinysmaliemulator](https://github.com/amoulu/tinysmaliemulator) A very minimalist smali emulator that could be used to "decrypt" obfuscated strings
- [**59**星][12m] [aliasrobotics/rsf](https://github.com/aliasrobotics/rsf) The Robot Security Framework (RSF), Robot Security Framework (RSF), a standardized methodology to perform security assessments in robotics.
- [**59**星][2y] [C++] [alexhude/loadprocconfig](https://github.com/alexhude/loadprocconfig) 加载处理器配置文件
- [**59**星][6m] [JS] [alexcn/onestack](https://github.com/alexcn/onestack) IT管理系统,实现自动化运维,整合CMDB和监控,实现自动化部署,打通开发、运维和测试的边界,实现一栈式管理。
- [**59**星][2y] [Shell] [abhisek/pwnworks](https://github.com/abhisek/pwnworks) Exploitation challenges for CTF
+- [**58**星][5d] [Java] [daggerok/streaming-file-server](https://github.com/daggerok/streaming-file-server) full-stack java file server with no limitation for files uploads and downloads: spring-boot + Gradle Kotlin DSL, Gradle buildSrc, postgres / h2, apache fileUpload, lombok, mustache, docker, jgiven, powermock, gradle, CI, bootstrap 4, bootstrap-filelinput, webjars, maven github-release-plugin, nginx, haproxy, reverse-proxy
- [**58**星][3y] [v2ray/planning](https://github.com/v2ray/planning) Deprecated. Please use v2ray-core for feature requests
-- [**58**星][10m] [Py] [shellphish/shellphish-afl](https://github.com/shellphish/shellphish-afl) A pip wrapper around AFL.
+- [**58**星][2m] [Py] [shellphish/shellphish-afl](https://github.com/shellphish/shellphish-afl) A pip wrapper around AFL.
- [**58**星][3y] [Shell] [r00t-3xp10it/netool-toolkit](https://github.com/r00t-3xp10it/netool-toolkit) MitM pentesting opensource toolkit (scan/sniff/exploit) -- NOT SUPORTED ANYMORE --
+- [**58**星][4y] [HTML] [kevthehermit/spearphisher](https://github.com/kevthehermit/spearphisher) A Web Application to Send and Track Spear Phishing Campaigns
+- [**58**星][1m] [JS] [medicean/as_bypass_php_disable_functions](https://github.com/medicean/as_bypass_php_disable_functions) antsword bypass PHP disable_functions
- [**58**星][7y] [Shell] [lozzd/autonmap](https://github.com/lozzd/autonmap) Automated daily scan using Nmap and report on the differences
+- [**58**星][6m] [JS] [yzyjim/shadowsocks-back-china-pac](https://github.com/yzyjim/shadowsocks-back-china-pac) Shadowsocks翻墙回国PAC规则
- [**58**星][3m] [C++] [vlad-tri/cve-2019-1132](https://github.com/vlad-tri/cve-2019-1132) EoP POC for CVE-2019-1132
+- [**58**星][2d] [C] [cisco/mercury](https://github.com/cisco/mercury) network fingerprinting and packet metadata capture
- [**58**星][1y] [Shell] [cyb0r9/dvr-exploiter](https://github.com/Cyb0r9/DVR-Exploiter) DVR-Exploiter a Bash Script Program Exploit The DVR's Based on CVE-2018-9995
- [**58**星][3y] [Py] [deadbits/intersect-2.5](https://github.com/deadbits/Intersect-2.5) Post-Exploitation Framework
- [**58**星][2y] [Shell] [offxec/samurai](https://github.com/OffXec/Samurai) Samurai Email Discovery - SED is a email discovery framework that grabs emails via google dork, company name, or domain name.
- [**58**星][2y] [Ruby] [hammackj/risu](https://github.com/hammackj/risu) Risu is Nessus parser, that converts the generated reports into a ActiveRecord database, this allows for easy report generation and vulnerability verification.
- [**58**星][7m] [HTML] [leonwxqian/lucky-js-fuzz](https://github.com/leonwxqian/lucky-js-fuzz) A web page based fuzzer that generates random JS statements then fuzz in the web-browser.
-- [**58**星][4y] [Java] [zd2100/pscout](https://github.com/zd2100/pscout)
- [**58**星][8y] [Ruby] [wuntee/androidaudittools](https://github.com/wuntee/androidaudittools)
-- [**58**星][1y] [C#] [wledfor2/playhooky](https://github.com/wledfor2/playhooky) C# Runtime Hooking Library for .NET/Mono/Unity.
+- [**58**星][3y] [CSS] [wizardforcel/sploitfun-linux-x86-exp-tut-zh](https://github.com/wizardforcel/sploitfun-linux-x86-exp-tut-zh)
- [**58**星][2y] [Py] [wavestone-cdt/dyode](https://github.com/wavestone-cdt/dyode) A low-cost, DIY data diode for ICS
-- [**58**星][8m] [Shell] [vay3t/hax0rpi](https://github.com/vay3t/hax0rpi) A Raspberry Pi Hacker Tools suite
+- [**58**星][2y] [Py] [vivami/ms17-010](https://github.com/vivami/ms17-010) MS17-010
+- [**58**星][9m] [Shell] [vay3t/hax0rpi](https://github.com/vay3t/hax0rpi) A Raspberry Pi Hacker Tools suite
- [**58**星][2y] [JS] [vah13/win_zip_password](https://github.com/vah13/win_zip_password) Python script to hook ZIP files passwords in Windows 10
- [**58**星][7m] [tyranid/infosec-presentations](https://github.com/tyranid/infosec-presentations) A repository of previous info-sec presentations I've presented.
-- [**58**星][4m] [Zeek] [tylabs/dovehawk](https://github.com/tylabs/dovehawk) Dovehawk is a Zeek module that automatically imports MISP indicators and reports Sightings
+- [**58**星][5y] [C++] [tyranid/exploitdotnetdcom](https://github.com/tyranid/exploitdotnetdcom) A tool to exploit .NET DCOM for EoP and RCE. Is fixed in latest versions of the .NET.
+- [**58**星][6m] [Py] [turr0n/firebase](https://github.com/turr0n/firebase) Exploiting misconfigured firebase databases
- [**58**星][6m] [Lua] [trisulnsm/trisul-scripts](https://github.com/trisulnsm/trisul-scripts) Ready to run scripts for network analysis
+- [**58**星][4d] [tonyphipps/siem](https://github.com/tonyphipps/siem) SIEM Tactics, Techiques, and Procedures
- [**58**星][1y] [Py] [tarlogicsecurity/arecibo](https://github.com/tarlogicsecurity/arecibo) Arecibo: Endpoint for Out-of-Band Exfiltration (DNS & HTTP)
-- [**58**星][4m] [sukkaw/cloudflare-block-bad-bot-ruleset](https://github.com/sukkaw/cloudflare-block-bad-bot-ruleset)
-- [**58**星][1y] [C] [sourceincite/cve-2018-8440](https://github.com/sourceincite/cve-2018-8440) CVE-2018-8440 standalone exploit
- [**58**星][1y] [PHP] [slangji/wp-missed-schedule](https://github.com/slangji/wp-missed-schedule) Find only missed schedule posts, every 15 minutes, and republish correctly 10 items each session. The Original plugin (only this) no longer available on WordPress.org for explicit author request! Compatible with WP 2.1+ to 4.9+ and 5.0-beta3 (100.000+ installs 300.000+ downloads 2016-04-13) Please: do not install unauthorized malware cloned forked!
-- [**58**星][1y] [C] [skeeto/ptrace-examples](https://github.com/skeeto/ptrace-examples) Examples for Linux ptrace(2)
- [**58**星][3m] [Py] [simplysecurity/simplydomain](https://github.com/simplysecurity/simplydomain) Subdomain brute force focused on speed and data serialization
- [**58**星][1m] [she11c0der/scanners-box](https://github.com/she11c0der/scanners-box) 安全从业人员常用开源工具资料合集
- [**58**星][3y] [Py] [sensepost/xrdp](https://github.com/sensepost/xrdp) A rudimentary remote desktop tool for the X11 protocol exploiting unauthenticated x11 sessions
-- [**58**星][2y] [Go] [sensepost/notruler](https://github.com/sensepost/notruler) The opposite of Ruler, provides blue teams with the ability to detect Ruler usage against Exchange.
- [**58**星][4y] [C++] [rootkitsmm/win10pcap-exploit](https://github.com/rootkitsmm/win10pcap-exploit) Exploit Win10Pcap Driver to enable some Privilege in our process token ( local Privilege escalation )
- [**58**星][2y] [C] [riscybusiness/riscypacker](https://github.com/riscybusiness/riscypacker) Process Hollowing Packer
-- [**58**星][15d] [C] [riscure/optee_fuzzer](https://github.com/riscure/optee_fuzzer) This repository contains the code for a fuzzing prototype for the OP-TEE system call interface using AFL.
- [**58**星][3y] [rehints/windbg](https://github.com/rehints/windbg)
- [**58**星][2y] [PHP] [raesene/bwapp](https://github.com/raesene/bwapp)
+- [**58**星][3d] [PS] [quake4/mindminer](https://github.com/quake4/mindminer) MindMiner - the miner manager programm with online monitoring
- [**58**星][6y] [Java] [pwntester/xmldecoder](https://github.com/pwntester/xmldecoder) RCE Exploit PoC for XMLDecoder
- [**58**星][1y] [Java] [psycopaths/jdart](https://github.com/psycopaths/jdart) A dynamic symbolic analysis tool for Java
-- [**58**星][4y] [Py] [psychomario/pyinject](https://github.com/psychomario/pyinject) A python module to help inject shellcode/DLLs into windows processes
- [**58**星][7m] [JS] [pownjs/pown-proxy](https://github.com/pownjs/pown-proxy) Pown Proxy is a versatile web application security testing proxy with cool TUI features.
- [**58**星][10m] [Java] [portswigger/replicator](https://github.com/portswigger/replicator) Burp extension to help developers replicate findings from pen tests
- [**58**星][5y] [C] [poliva/dexinfo](https://github.com/poliva/dexinfo) A very rudimentary Android DEX file parser
+- [**58**星][6m] [Rust] [poc-consortium/scavenger](https://github.com/poc-consortium/scavenger) A fast Burstcoin miner written in Rust
- [**58**星][2y] [Shell] [p292/nackered](https://github.com/p292/nackered) This is a bash script to bypass 802.1x NAC
+- [**58**星][2y] [C] [outflanknl/external_c2](https://github.com/outflanknl/external_c2) POC for Cobalt Strike external C2
- [**58**星][7y] [Py] [opensecurityresearch/pentest-scripts](https://github.com/opensecurityresearch/pentest-scripts)
-- [**58**星][4y] [C++] [oowoodone/vmp_odplugin](https://github.com/oowoodone/vmp_odplugin) VMProtect OD Plugin
- [**58**星][3y] [Py] [nopernik/fuzzbunch_wrapper](https://github.com/nopernik/fuzzbunch_wrapper) Fuzzbunch Python-Wine wrapper
- [**58**星][2y] [C] [noloader/sha-intrinsics](https://github.com/noloader/sha-intrinsics) SHA-1, SHA-256 and SHA-512 compression functions using Intel, ARMv8 and Power8 SHA intrinsics
- [**58**星][2y] [Java] [nightoftwelve/virtualhookex](https://github.com/nightoftwelve/virtualhookex) Android application hooking tool based on VirtualHook/VirtualApp
- [**58**星][3y] [nidom/buff](https://github.com/nidom/buff) A proxy tool for macOS.
+- [**58**星][4y] [HTML] [nccgroup/iodide](https://github.com/nccgroup/iodide) The Cisco IOS Debugger and Integrated Disassembler Environment
- [**58**星][1y] [C++] [my-first-pr/hacktoberfest-2018](https://github.com/my-first-pr/hacktoberfest-2018)
- [**58**星][1y] [C] [mrgeffitas/hwfwbypass](https://github.com/mrgeffitas/hwfwbypass)
- [**58**星][2y] [JS] [monkeym4ster/domainfuzz](https://github.com/monkeym4ster/domainfuzz) Domain name permutation engine for detecting typo squatting, phishing and corporate espionage
- [**58**星][8m] [Assembly] [mist64/c64rom](https://github.com/mist64/c64rom) Commodore 64 BASIC and KERNAL Source
- [**58**星][5y] [Go] [mikkolehtisalo/cvesync](https://github.com/mikkolehtisalo/cvesync) CVE feed synchronization to issue management system
-- [**58**星][2y] [Visual Basic] [mgeeky/robustpentestmacro](https://github.com/mgeeky/robustpentestmacro) This is a rich-featured Visual Basic macro code for use during Penetration Testing assignments, implementing various advanced post-exploitation techniques.
- [**58**星][3y] [ASP] [merttasci/weapons4pentester](https://github.com/merttasci/weapons4pentester)
- [**58**星][7m] [JS] [mdslab/wstun](https://github.com/mdslab/wstun) Tunnels and reverse tunnels over WebSocket
- [**58**星][6y] [Py] [malwarelu/tools](https://github.com/malwarelu/tools) Malware.lu tools
-- [**58**星][5y] [CoffeeScript] [lupino/shadowsocks-gui](https://github.com/lupino/shadowsocks-gui) Shadowsocks GUI client
-- [**58**星][5m] [C] [lazenca/kernel-exploit-tech](https://github.com/lazenca/kernel-exploit-tech) Linux Kernel exploitation Tutorial.
-- [**58**星][3y] [PowerShell] [killswitch-gui/persistence-survivability](https://github.com/killswitch-gui/persistence-survivability) Powershell Persistence Locator
+- [**58**星][6y] [CoffeeScript] [lupino/shadowsocks-gui](https://github.com/lupino/shadowsocks-gui) Shadowsocks GUI client
+- [**58**星][2y] [Java] [littlerich/wechatluckymoney](https://github.com/littlerich/wechatluckymoney) 本开源项目为Xposed练手代码,可以从中深入了解使用Xposed的用法和源码逆向分析能力
+- [**58**星][3y] [PS] [killswitch-gui/persistence-survivability](https://github.com/killswitch-gui/persistence-survivability) Powershell Persistence Locator
- [**58**星][2y] [Shell] [kevthehermit/pentest](https://github.com/kevthehermit/pentest) Just a collection of pentest stuffs
+- [**58**星][2y] [C] [jas502n/ubuntu-0day](https://github.com/jas502n/ubuntu-0day) all 4.4 ubuntu aws instances are vulnerable
- [**58**星][5y] [C++] [ivanfratric/ropguard](https://github.com/ivanfratric/ropguard) Runtime Prevention of Return-Oriented Programming Attacks
- [**58**星][2y] [C++] [int0/processisolator](https://github.com/int0/processisolator)
+- [**58**星][3y] [C] [infosecguerrilla/reflectivesoinjection](https://github.com/infosecguerrilla/reflectivesoinjection) Reflective SO injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process.
- [**58**星][2y] [Py] [hasherezade/crypto_utils](https://github.com/hasherezade/crypto_utils) Set of my small utils related to cryptography, encoding, decoding etc
- [**58**星][3y] [hackstar7/wanacry](https://github.com/hackstar7/wanacry) WannaCry Ransomware
- [**58**星][7y] [gynophage/solarized_ida](https://github.com/gynophage/solarized_ida) Solarized黑色主题
-- [**58**星][15d] [C] [grehack/ctf-challs](https://github.com/grehack/ctf-challs) Here are the challenges (including sources) of the GreHack CTF.
+- [**58**星][28d] [HTML] [gwen001/actarus](https://github.com/gwen001/actarus) Actarus is a custom tool for bug bounty
+- [**58**星][17d] [C] [grehack/ctf-challs](https://github.com/grehack/ctf-challs) Here are the challenges (including sources) of the GreHack CTF.
- [**58**星][1y] [C++] [fjh658/hexrayscodexplorer](https://github.com/fjh658/hexrayscodexplorer) Hex-Rays Decompiler plugin for better code navigation. Add support ida7.0/7.1/7.2 for macOS
- [**58**星][2y] [Go] [evilsocket/ftrace](https://github.com/evilsocket/ftrace) Go library to trace Linux syscalls using the FTRACE kernel framework.
- [**58**星][2y] [C++] [eternalsakura/ctf_pwn](https://github.com/eternalsakura/ctf_pwn)
@@ -11139,40 +11845,47 @@ networking routines
- [**58**星][10m] [Py] [dogoncouch/logdissect](https://github.com/dogoncouch/logdissect) CLI utility and Python module for analyzing log files and other data.
- [**58**星][4y] [C] [dev-zzo/exploits-nt-privesc](https://github.com/dev-zzo/exploits-nt-privesc) Exploit collection for NT privilege escalation
- [**58**星][4m] [JS] [detroitenglish/haveibeenpwned-zxcvbn-lambda-api](https://github.com/detroitenglish/haveibeenpwned-zxcvbn-lambda-api) Deploy your own secure API to estimate password strength and check haveibeenpwned for known matches - HTTPS by force, server not required, fire and brimstone sold separately
-- [**58**星][8y] [JS] [davepacheco/node-heap-dump](https://github.com/davepacheco/node-heap-dump) Testing node heap dumps
-- [**58**星][5m] [Shell] [d4rk007/blueghost](https://github.com/d4rk007/blueghost) A network tool designed to assist blue teams in banning attackers from linux servers.
+- [**58**星][6m] [Shell] [d4rk007/blueghost](https://github.com/d4rk007/blueghost) A network tool designed to assist blue teams in banning attackers from linux servers.
- [**58**星][3y] [PHP] [cspf-founder/btslab](https://github.com/cspf-founder/btslab) Vulnerable web application
- [**58**星][4y] [C++] [codereversing/directx9hook](https://github.com/codereversing/directx9hook) Runtime DirectX9 Hooking
- [**58**星][1y] [Py] [coalfire-research/sqlinator](https://github.com/coalfire-research/sqlinator) Automatically forward HTTP GET & POST requests to SQLMap's API to test for SQLi and XSS
+- [**58**星][9m] [Py] [cnotin/splunkwhisperer2](https://github.com/cnotin/splunkwhisperer2) Local privilege escalation, or remote code execution, through Splunk Universal Forwarder (UF) misconfigurations
- [**58**星][5m] [Go] [cloudposse/sudosh](https://github.com/cloudposse/sudosh) Shell wrapper to run a login shell with `sudo` as the current user for the purpose of audit logging
- [**58**星][2y] [Py] [circl/pymisp](https://github.com/circl/pymisp) Please use this repository instead:
-- [**58**星][7y] [C] [chokepoint/jynx2](https://github.com/chokepoint/jynx2) JynxKit2 is an LD_PRELOAD userland rootkit based on the original JynxKit. The backdoor has been replaced with an "accept()" system hook.
- [**58**星][4m] [C++] [changeofpace/mouhidinputhook](https://github.com/changeofpace/mouhidinputhook) MouHidInputHook enables users to filter, modify, and inject mouse input data packets into the input data stream of HID USB mouse devices without modifying the mouse device stacks.
-- [**58**星][12d] [C++] [cert-polska/ursadb](https://github.com/cert-polska/ursadb) Trigram database written in C++, suited for malware indexing
+- [**58**星][14d] [C++] [cert-polska/ursadb](https://github.com/cert-polska/ursadb) Trigram database written in C++, suited for malware indexing
- [**58**星][4y] [Py] [cc06/dns_transfer_check](https://github.com/cc06/dns_transfer_check) 一个用来批量检测网站是否存在域传送漏洞的Python脚本
+- [**58**星][5y] [Py] [bwall/extracthosts](https://github.com/bwall/extracthosts) Extracts hosts (IP/Hostnames) from files
+- [**58**星][3y] [Shell] [buginux/flexloader](https://github.com/buginux/flexloader) 使用 FLEX 调试任意第三方应用
- [**58**星][2y] [Py] [brianwarehime/insp3ctor](https://github.com/brianwarehime/insp3ctor) AWS S3 Bucket/Object Finder
- [**58**星][3y] [C++] [azerg/remote_dll_injector](https://github.com/azerg/remote_dll_injector) Stealth DLL injector
+- [**58**星][3y] [Batchfile] [ayra/zipbomb](https://github.com/ayra/zipbomb) About an old technology that still screws up some anti virus software
- [**58**星][6m] [autodesk/continuous-threat-modeling](https://github.com/autodesk/continuous-threat-modeling) A Continuous Threat Modeling methodology
-- [**58**星][11d] [Java] [appsecco/vyapi](https://github.com/appsecco/vyapi) VyAPI - A cloud based vulnerable hybrid Android App
+- [**58**星][13d] [Java] [appsecco/vyapi](https://github.com/appsecco/vyapi) VyAPI - A cloud based vulnerable hybrid Android App
+- [**58**星][10m] [Go] [appliscale/cloud-security-audit](https://github.com/appliscale/cloud-security-audit) A command line security audit tool for Amazon Web Services
- [**58**星][2y] [PHP] [alisummer/qqipdetector](https://github.com/alisummer/qqipdetector) 探测某个或某些QQ用户的IP。 代码非常烂,也没有注释。
-- [**58**星][1y] [HTML] [aglcaicai/kalitoolsmanual](https://github.com/aglcaicai/kalitoolsmanual) Kali Linux 工具合集中文说明书
- [**58**星][3y] [Py] [adulau/malwareclassifier](https://github.com/adulau/malwareclassifier) Malware Classifier From Network Captures
+- [**58**星][3m] [Java] [aagarwal1012/image-steganography-library-android](https://github.com/aagarwal1012/image-steganography-library-android)
- [**58**星][2y] [3gstudent/cve-2017-8464-exp](https://github.com/3gstudent/cve-2017-8464-exp) Support x86 and x64
+- [**57**星][2y] [Py] [yangzheng10/ss](https://github.com/yangzheng10/ss) 利用爬虫科学上网
+- [**57**星][1y] [Py] [vonsdite/auto_shadowsocks](https://github.com/vonsdite/auto_shadowsocks) Shadowsocks. 科学上网, 仅供学习。是免费的服务器,可能存在科学上网不稳定。
+- [**57**星][30d] [zscdumin/vpn](https://github.com/zscdumin/vpn) ShadowSocks 翻墙(收费服务器合租套餐:180元/年、50元/季度、20元/月,需要的可以联系我)
+- [**57**星][3d] [Rust] [leo-lb/wpbrute-rs](https://github.com/leo-lb/wpbrute-rs) High performance WordPress login bruteforcer with automatic concurrency for maximum amount of tries per second.
- [**57**星][6m] [JS] [pownjs/pown-cdb](https://github.com/pownjs/pown-cdb) Automate common Chrome Debug Protocol tasks to help debug web applications from the command-line and actively monitor and intercept HTTP requests and responses.
- [**57**星][1m] [Ruby] [trustedsec/honeybadger](https://github.com/trustedsec/honeybadger)
-- [**57**星][4y] [HTML] [kevthehermit/spearphisher](https://github.com/kevthehermit/spearphisher) A Web Application to Send and Track Spear Phishing Campaigns
- [**57**星][6m] [JS] [doctormckay/node-globaloffensive](https://github.com/doctormckay/node-globaloffensive) A Node.js module to connect to and interact with the CS:GO game coordinator. Mostly used to get item data.
- [**57**星][1y] [C++] [m0n73/dc26_badgeemulator](https://github.com/m0n73/dc26_badgeemulator) This code was used with Arduino Nano to create the OG defcon 26 badge emulator.
-- [**57**星][6m] [JS] [yzyjim/shadowsocks-back-china-pac](https://github.com/yzyjim/shadowsocks-back-china-pac) Shadowsocks翻墙回国PAC规则
-- [**57**星][2y] [PowerShell] [obscuritylabs/infophish](https://github.com/obscuritylabs/InfoPhish) InfoPath Phishing Repo Resource
+- [**57**星][3m] [Py] [gosecure/freshonions-torscraper](https://github.com/gosecure/freshonions-torscraper) Fresh Onions is an open source TOR spider / hidden service onion crawler
+- [**57**星][7d] [Py] [trailofbits/polyfile](https://github.com/trailofbits/polyfile) A utility for mapping the file formats embedded within a single file
+- [**57**星][2y] [PS] [obscuritylabs/infophish](https://github.com/obscuritylabs/InfoPhish) InfoPath Phishing Repo Resource
- [**57**星][6m] [Py] [pyca/service-identity](https://github.com/pyca/service-identity) Service Identity Verification for Python
-- [**57**星][1y] [Py] [vysecurity/checko365](https://github.com/vysecurity/checkO365) checkO365 is a tool to check if a target domain is using O365
+- [**57**星][2y] [Py] [vysecurity/checko365](https://github.com/vysecurity/checkO365) checkO365 is a tool to check if a target domain is using O365
- [**57**星][3y] [shmilylty/awesome-application-security](https://github.com/shmilylty/awesome-application-security) awesome application security chinese version
- [**57**星][3y] [JS] [auth0-samples/auth0-sso-dashboard](https://github.com/auth0-samples/auth0-sso-dashboard) [DEPRECATED] App Single Sign On Dashboard using Auth0
- [**57**星][4y] [Go] [zond/qisniff](https://github.com/zond/qisniff)
- [**57**星][3y] [JS] [xtr4nge/fruityc2-client](https://github.com/xtr4nge/fruityc2-client) FruityC2 is a post-exploitation (and open source) framework based on the deployment of agents on compromised machines. Agents are managed from a web interface under the control of an operator.
- [**57**星][4y] [C++] [xpn/getsystem-offline](https://github.com/xpn/getsystem-offline) Small tool to get a SYSTEM shell
-- [**57**星][3y] [CSS] [wizardforcel/sploitfun-linux-x86-exp-tut-zh](https://github.com/wizardforcel/sploitfun-linux-x86-exp-tut-zh)
+- [**57**星][2y] [JS] [windard/sm4](https://github.com/windard/sm4) SM4 by JavaScript
- [**57**星][2m] [Py] [williballenthin/idawilli](https://github.com/williballenthin/idawilli) IDA Pro 资源、脚本和配置文件等
- [hint_calls](https://github.com/williballenthin/idawilli/blob/master/plugins/hint_calls/readme.md) 以Hint的形式战士函数引用的call和字符串
- [dynamic_hints](https://github.com/williballenthin/idawilli/blob/master/plugins/dynamic_hints/readme.md) 演示如何为动态数据提供自定义hint的示例插件
@@ -11186,435 +11899,473 @@ networking routines
- [**57**星][1y] [Py] [warflop/whoisleak](https://github.com/warflop/whoisleak) This tool queries the emails that registered the domain and verifies if they were leaked in some data leak.
- [**57**星][2y] [wangyihang/awesome-web-security](https://github.com/wangyihang/awesome-web-security)
- [**57**星][5m] [C++] [walkingcat/symdiff](https://github.com/walkingcat/symdiff) Diff tool for comparing symbols in PDB files
-- [**57**星][2y] [Py] [vivami/ms17-010](https://github.com/vivami/ms17-010) MS17-010
+- [**57**星][3y] [Java] [vulnerscom/burp-dirbuster](https://github.com/vulnerscom/burp-dirbuster) Dirbuster plugin for Burp Suite
+- [**57**星][3m] [uniking/dingding](https://github.com/uniking/dingding) 免root远程钉钉打卡,支持wifi和gps定位,仅支持android系统。本项目出于学习目的,仅用于学习玩耍,请于24小时后自行删除。xposed, crack,package,dingtalk,remote control
+- [**57**星][2y] [HTML] [trustedsec/cors-poc](https://github.com/trustedsec/cors-poc)
- [**57**星][2y] [HTML] [troydo42/cia-hacking-tools](https://github.com/troydo42/cia-hacking-tools) WikiLeaks Vault 7 CIA Hacking Tools
+- [**57**星][5m] [C++] [troybowman/dtxmsg](https://github.com/troybowman/dtxmsg) 辅助逆向DTXConnectionServices 框架
- [**57**星][2y] [JS] [transparencytoolkit/harvester](https://github.com/transparencytoolkit/harvester) Web crawling and document processing through a usable interface.
- [**57**星][2y] [Py] [tcpiplab/web-app-hacking-notes](https://github.com/tcpiplab/web-app-hacking-notes) Notes I've taken while working through various web app pentesting labs.
- [**57**星][2y] [Shell] [tanprathan/fridpa](https://github.com/tanprathan/fridpa) An automated wrapper script for patching iOS applications (IPA files) and work on non-jailbroken device
- [**57**星][3y] [Py] [t3rry7f/badtunnel_exp](https://github.com/t3rry7f/badtunnel_exp) Usage: python badtunnel.py wpad_server_ip
- [**57**星][2y] [Py] [superhuahua/xunfenges](https://github.com/superhuahua/xunfenges)
-- [**57**星][10m] [sukaralin/php_code_audit_project](https://github.com/sukaralin/php_code_audit_project) 该项目用来记录,我用来练手的PHP代码审计项目。
-- [**57**星][5y] [Py] [sqall01/zwoelf](https://github.com/sqall01/zwoelf) An ELF parsing and manipulation library for Python
- [**57**星][6y] [Java] [spiderlabs/burpnotesextension](https://github.com/spiderlabs/burpnotesextension) Burp Notes Extension is a plugin for Burp Suite that adds a Notes tab. The tool aims to better organize external files that are created during penetration testing.
-- [**57**星][10d] [JS] [silverwind/oui](https://github.com/silverwind/oui) Look up MAC addresses for their vendor in the IEEE OUI database
-- [**57**星][13d] [Rust] [shssoichiro/zxcvbn-rs](https://github.com/shssoichiro/zxcvbn-rs) Port of Dropbox's zxcvbn password strength library for Rust
+- [**57**星][5d] [JS] [silverwind/oui](https://github.com/silverwind/oui) Look up MAC addresses for their vendor in the IEEE OUI database
+- [**57**星][15d] [Rust] [shssoichiro/zxcvbn-rs](https://github.com/shssoichiro/zxcvbn-rs) Port of Dropbox's zxcvbn password strength library for Rust
- [**57**星][2y] [Py] [s1kr10s/struts2shell](https://github.com/s1kr10s/struts2shell)
-- [**57**星][11m] [TypeScript] [roryrjb/iplocation](https://github.com/roryrjb/iplocation) get IP location information using various providers
+- [**57**星][4m] [C] [rub-syssec/antifuzz](https://github.com/rub-syssec/antifuzz) Impeding Fuzzing Audits of Binary Executables
+- [**57**星][3d] [TS] [roryrjb/iplocation](https://github.com/roryrjb/iplocation) (looking for a maintainer) get IP location information using various providers
- [**57**星][2y] [Py] [roberteldersoftware/roberteldersoftwarediff](https://github.com/roberteldersoftware/roberteldersoftwarediff)
+- [**57**星][5y] [C] [rmusser01/hyperdbg](https://github.com/rmusser01/hyperdbg) Automatically exported from code.google.com/p/hyperdbg
- [**57**星][12m] [C] [qssec/hades-lite](https://github.com/qssec/hades-lite) Hades-lite 青松云安全开源的一个内核级 Anti-ddos 的驱动程序,轻量且高效,构建高性能代理防御,单机可抵御7Gb DDoS攻击
- [**57**星][1y] [Py] [programa-stic/marvin-static-analyzer](https://github.com/programa-stic/marvin-static-analyzer) Marvin static analyzer is an Android application vulnerability scanner. The framework uses androguard and Static Android Analysis Framework (SAAF).
- [**57**星][1y] [C++] [petrgeorgievsky/gtarenderhook](https://github.com/petrgeorgievsky/gtarenderhook) GTA SA rendering hook
- [**57**星][3m] [pe3zx/mthc](https://github.com/pe3zx/mthc) All-in-one bundle of MISP, TheHive and Cortex
-- [**57**星][2y] [C] [outflanknl/external_c2](https://github.com/outflanknl/external_c2) POC for Cobalt Strike external C2
-- [**57**星][9m] [Py] [opsdisk/metagoofil](https://github.com/opsdisk/metagoofil) An updated version of metagoofil
+- [**57**星][2d] [Py] [opsdisk/metagoofil](https://github.com/opsdisk/metagoofil) An updated version of metagoofil
- [**57**星][2y] [C++] [openjailbreak/jailbreakme-1.0](https://github.com/openjailbreak/jailbreakme-1.0) The first publicly available userland jailbreak for iPhoneOS 1.0.2/1.1.1 by cmw and dre
- [**57**星][9m] [Go] [openbazaar/go-onion-transport](https://github.com/openbazaar/go-onion-transport) Tor onion transport for IPFS
+- [**57**星][6m] [C#] [nyan-x-cat/limeusb-csharp](https://github.com/nyan-x-cat/limeusb-csharp) Malware USB Spread | Example C#
+- [**57**星][3y] [Py] [nonenotnull/ssrfx](https://github.com/nonenotnull/ssrfx) CVE-2014-4210+Redis未授权访问
- [**57**星][2y] [Java] [nikolamilosevic86/owasp-seraphimdroid](https://github.com/nikolamilosevic86/owasp-seraphimdroid) OWASP Seraphimdroid is an open source project with aim to create, as a community, an open platform for education and protection of Android users against privacy and security threats.
-- [**57**星][4y] [HTML] [nccgroup/iodide](https://github.com/nccgroup/iodide) The Cisco IOS Debugger and Integrated Disassembler Environment
-- [**57**星][2y] [C] [nccgroup/cachegrab](https://github.com/nccgroup/cachegrab) 执行和可视化针对软件的由 trace 驱动的缓存攻击(需要启用TrustZone 的 ARMv8 内核)
- [**57**星][2y] [mrash/afl-cve](https://github.com/mrash/afl-cve) A collection of vulnerabilities discovered by the AFL fuzzer (afl-fuzz)
- [**57**星][2y] [C#] [mch2112/sharp80](https://github.com/mch2112/sharp80) TRS80 Emulator for Windows
- [**57**星][2y] [Py] [mame82/p4wnp1_nexmon_additions](https://github.com/mame82/p4wnp1_nexmon_additions)
- [**57**星][5m] [Py] [lion-gu/ioc-explorer](https://github.com/lion-gu/ioc-explorer) Explore Indicators of Compromise Automatically
- [**57**星][2y] [Go] [linkedin/jaqen](https://github.com/linkedin/jaqen) Simple DNS rebinding
+- [**57**星][4d] [Py] [lief-project/tutorials](https://github.com/lief-project/tutorials) Materials for LIEF tutorials
+- [**57**星][2m] [lgg/awesome-keepass](https://github.com/lgg/awesome-keepass) Curated list of KeePass-related projects
- [**57**星][10m] [Py] [leoid/b1tmass](https://github.com/leoid/b1tmass) Multiple Weaknesses Checking for Mass Subdomains [Deprecated]
+- [**57**星][29d] [Go] [konimarti/opc](https://github.com/konimarti/opc) OPC DA client in Golang for monitoring and analyzing process data based on Windows COM.
+- [**57**星][3y] [C] [k2/admmutate](https://github.com/k2/admmutate) Classic code from 1999+ I am fairly sure this is the first public polymorphic shellcode ever (best IMHO and others
- [**57**星][1y] [Py] [jx-sec/jxotp](https://github.com/jx-sec/jxotp) 企业SSH登陆双因素认证系统
- [**57**星][3y] [Shell] [justintime/docker-airsonos](https://github.com/justintime/docker-airsonos) Expose Sonos over Airplay via a Docker container
+- [**57**星][ObjC] [jrock007/tob](https://github.com/jrock007/tob) Free, open-source and ad-less Tor web browser for iOS
+- [**57**星][7m] [JS] [joevennix/lan-js](https://github.com/joevennix/lan-js) Probe LAN devices from a web browser.
+- [**57**星][25d] [Shell] [jmcerrejon/pikiss](https://github.com/jmcerrejon/pikiss) PiKISS for Raspberry Pi & ODROID-C1: A bunch of scripts with menu to make your life easier.
- [**57**星][4y] [PHP] [jcarlosn/gzip-http-time](https://github.com/jcarlosn/gzip-http-time) PoC for getting remote HTTP Server date using gzip compressed HTTP Response
- [**57**星][3y] [C++] [jaybosamiya/busysteg](https://github.com/jaybosamiya/busysteg)
-- [**57**星][2y] [C] [jas502n/ubuntu-0day](https://github.com/jas502n/ubuntu-0day) all 4.4 ubuntu aws instances are vulnerable
+- [**57**星][1m] [HTML] [j3ers3/passlist](https://github.com/j3ers3/passlist)
- [**57**星][8m] [Shell] [itskindred/pyembed](https://github.com/itskindred/pyembed) Elementary bash script that embeds malicious python code within another piece of inconspicuous python code.
-- [**57**星][1y] [PowerShell] [invokethreatguy/csasc](https://github.com/invokethreatguy/csasc) Cobalt Strike Aggressor Script Collection
-- [**57**星][6m] [C++] [invictus1306/functrace](https://github.com/invictus1306/functrace) A function tracer
-- [**57**星][3y] [C] [infosecguerrilla/reflectivesoinjection](https://github.com/infosecguerrilla/reflectivesoinjection) Reflective SO injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process.
+- [**57**星][1y] [PS] [invokethreatguy/csasc](https://github.com/invokethreatguy/csasc) Cobalt Strike Aggressor Script Collection
+- [**57**星][10d] [C++] [henrypp/errorlookup](https://github.com/henrypp/errorlookup) Simple tool for retrieving information about Windows errors codes.
+- [**57**星][1y] [Py] [he1m4n6a/dictbuilder](https://github.com/he1m4n6a/dictbuilder) 渗透测试中字典生成工具
- [**57**星][3y] [C] [hbowden/nextgen](https://github.com/hbowden/nextgen) A Genetic File, Syscall and Network Fuzzer.
-- [**57**星][26d] [HTML] [gwen001/actarus](https://github.com/gwen001/actarus) Actarus is a custom tool for bug bounty
+- [**57**星][4m] [Go] [hashmatter/p3lib](https://github.com/hashmatter/p3lib) privacy preserving primitives and protocols (p3) for routing and messaging in P2P networks
+- [**57**星][6y] [Assembly] [hackedteam/core-win64](https://github.com/hackedteam/core-win64) RCS Agent for Windows (64bit)
+- [**57**星][2y] [gy-games/shield](https://github.com/gy-games/shield) 基于Strom的日志实时流量分析主动防御(CCFirewall)系统
- [**57**星][3m] [Rust] [guitmz/fe2o3](https://github.com/guitmz/fe2o3) Simple prepender virus written in Rust
-- [**57**星][6m] [PowerShell] [gnieboer/gnuradio_windows_build_scripts](https://github.com/gnieboer/gnuradio_windows_build_scripts) A series of Powershell scripts to automatically download, build from source, and install GNURadio and -all- it's dependencies as 64-bit native binaries then package as an msi using Visual Studio 2015
+- [**57**星][6m] [PS] [gnieboer/gnuradio_windows_build_scripts](https://github.com/gnieboer/gnuradio_windows_build_scripts) A series of Powershell scripts to automatically download, build from source, and install GNURadio and -all- it's dependencies as 64-bit native binaries then package as an msi using Visual Studio 2015
- [**57**星][5m] [C#] [gigajew/powerdropper](https://github.com/gigajew/powerdropper) App that generates PowerShell dropper scripts for .NET executables
- [**57**星][4y] [JS] [gattermeier/nodejs-virus](https://github.com/gattermeier/nodejs-virus) A Node.js Proof of Concept Virus
- [**57**星][4y] [JS] [firebug/pixel-perfect](https://github.com/firebug/pixel-perfect)
-- [**57**星][2m] [Java] [exalab/anlinux-adfree](https://github.com/exalab/anlinux-adfree) AnLinux, Ad free version.
+- [**57**星][3m] [Java] [exalab/anlinux-adfree](https://github.com/exalab/anlinux-adfree) AnLinux, Ad free version.
+- [**57**星][2y] [F#] [enkomio/anathema](https://github.com/enkomio/anathema) .NET instrumentation framework
- [**57**星][5y] [C++] [datasoft/nova](https://github.com/datasoft/nova) Repo for the Open Source version of NOVA
-- [**57**星][24d] [Rust] [ctsrc/pgen](https://github.com/ctsrc/pgen) Command-line passphrase generator
+- [**57**星][3m] [C] [danielkrupinski/memject](https://github.com/danielkrupinski/memject) Simple Dll injector loading from memory. Supports PE header and entry point erasure. Written in C99.
+- [**57**星][26d] [Rust] [ctsrc/pgen](https://github.com/ctsrc/pgen) Command-line passphrase generator
- [**57**星][3y] [JS] [cryptogenic/ps4-4.0x-code-execution-poc](https://github.com/cryptogenic/ps4-4.0x-code-execution-poc) My edit of qwertyoruiopz 4.0x exploit PoC from
-- [**57**星][9y] [C++] [cr4sh/drvhide-poc](https://github.com/cr4sh/drvhide-poc) Hidden kernel mode code execution for bypassing modern anti-rootkits.
+- [**57**星][7y] [Py] [cr4sh/ida-vmware-gdb](https://github.com/cr4sh/ida-vmware-gdb) 辅助Windows内核调试
- [**57**星][2y] [JS] [coincoin7/wireless-router-vulnerability](https://github.com/coincoin7/wireless-router-vulnerability) Vulnerability and exploiting
- [**57**星][3y] [C] [codectile/paradise](https://github.com/codectile/paradise) x86/x86-64 hooking library
-- [**57**星][9m] [Py] [cnotin/splunkwhisperer2](https://github.com/cnotin/splunkwhisperer2) Local privilege escalation, or remote code execution, through Splunk Universal Forwarder (UF) misconfigurations
-- [**57**星][14d] [Py] [cleanunicorn/karl](https://github.com/cleanunicorn/karl) Monitor smart contracts deployed on blockchain and test against vulnerabilities with Mythril
-- [**57**星][1y] [Py] [capt-meelo/telewreck](https://github.com/capt-meelo/telewreck) A Burp extension to detect and exploit versions of Telerik Web UI vulnerable to CVE-2017-9248.
+- [**57**星][16d] [Py] [cleanunicorn/karl](https://github.com/cleanunicorn/karl) Monitor smart contracts deployed on blockchain and test against vulnerabilities with Mythril
+- [**57**星][5m] [Py] [chrismaddalena/goreport](https://github.com/chrismaddalena/goreport) A Python script to collect campaign data from Gophish and generate a report
- [**57**星][2y] [HTML] [bo0om/cve-2017-7089](https://github.com/bo0om/cve-2017-7089) Webkit uxss exploit (CVE-2017-7089)
+- [**57**星][6m] [Py] [bao7uo/dp_crypto](https://github.com/bao7uo/dp_crypto) Base64-based encryption oracle exploit for CVE-2017-9248 (Telerik UI for ASP.NET AJAX dialog handler)
- [**57**星][5y] [Shell] [bagder/keyfreq](https://github.com/bagder/keyfreq) Logs all key presses with a timestamp
-- [**57**星][3y] [Batchfile] [ayra/zipbomb](https://github.com/ayra/zipbomb) About an old technology that still screws up some anti virus software
-- [**57**星][10m] [Go] [appliscale/cloud-security-audit](https://github.com/appliscale/cloud-security-audit) A command line security audit tool for Amazon Web Services
- [**57**星][12m] [JS] [antoinevastel/fp-collect](https://github.com/antoinevastel/fp-collect) Fingerprinting script of Fingerprint-Scanner
-- [**57**星][2m] [Py] [angus-y/pyiris-backdoor](https://github.com/angus-y/pyiris-backdoor) PyIris-backdoor is a modular, stealthy and flexible remote-access-toolkit used to command and control other systems. Currently it is 80% through the alpha stage, has some bugs and a lot of incomplete features, feel free to contribute or help me out with this project its still under active development >_>
+- [**57**星][8d] [Py] [angus-y/pyiris-backdoor](https://github.com/angus-y/pyiris-backdoor) PyIris-backdoor is a modular, stealthy and flexible remote-access-toolkit written completely in python used to command and control other systems. It is now in the beta stage, possibly perpetually. There are bugs still present in the framework, feel free to contribute or help me out with this project its still under active development >_>
+- [**57**星][2d] [C++] [aliveteam/alive_reversing](https://github.com/aliveteam/alive_reversing) Re-implementation of Abe's Exoddus
+- [**57**星][4m] [al0ne/nmap_bypass_ids](https://github.com/al0ne/nmap_bypass_ids) bypass IDS
+- [**57**星][6d] [Py] [afagarap/malware-classification](https://github.com/afagarap/malware-classification) Towards Building an Intelligent Anti-Malware System: A Deep Learning Approach using Support Vector Machine for Malware Classification
- [**57**星][3y] [Py] [acama/ctf](https://github.com/acama/ctf) Exploits for interesting CTF challenges I have worked on
- [**57**星][2y] [Batchfile] [absolomb/pentesting](https://github.com/absolomb/pentesting) Pentesting Cheatsheets and Guides
-- [**57**星][3m] [Java] [aagarwal1012/image-steganography-library-android](https://github.com/aagarwal1012/image-steganography-library-android)
-- [**57**星][9m] [15pb/wechat_tools](https://github.com/15pb/wechat_tools) 微信插件,微信辅助工具
+- [**57**星][10m] [15pb/wechat_tools](https://github.com/15pb/wechat_tools) 微信插件,微信辅助工具
- [**57**星][7y] [IntrepidusGroup/mallory](https://bitbucket.org/intrepidusgroup/mallory)
+- [**56**星][1m] [Shell] [125k/pwrdeauther](https://github.com/125k/pwrdeauther) This script allows you to deauth a specific SSID or an entire channel with mdk3 (MDK3 is more powerful than Aireplay)
- [**56**星][2y] [Kotlin] [v2ray/v2rayng](https://github.com/v2ray/v2rayng) This project is currently discontinued. Please use this code with care and considering adopt it.
- [**56**星][10m] [Py] [genymobile/copydeps](https://github.com/genymobile/copydeps) Analyze and copy library dependencies of ELF binaries
- [**56**星][6y] [C] [pwning/plaidctf2014](https://github.com/pwning/plaidctf2014) Source for some problems from PlaidCTF 2014.
-- [**56**星][24d] [Kotlin] [m1dr05/istheapp](https://github.com/m1dr05/istheapp) Open-source android spyware
-- [**56**星][2m] [Py] [gosecure/freshonions-torscraper](https://github.com/gosecure/freshonions-torscraper) Fresh Onions is an open source TOR spider / hidden service onion crawler
-- [**56**星][4m] [motherfuzzers/meetups](https://github.com/motherfuzzers/meetups) Materials from Fuzzing Bay Area meetups
-- [**56**星][3m] [Py] [giantbranch/mipsaudit](https://github.com/giantbranch/mipsaudit) IDA MIPS静态扫描脚本,汇编审计辅助脚本
+- [**56**星][28d] [Go] [evilsocket/pwngrid](https://github.com/evilsocket/pwngrid) (⌐■_■) - API server for pwnagotchi.ai
+- [**56**星][6m] [Py] [rabbitmask/weblogicscanserver](https://github.com/rabbitmask/weblogicscanserver) 开启WeblogicScanV3.*系列,采用Server部署,支持远程Weblogic漏洞扫描
+- [**56**星][1y] [Py] [thelsa/ueditor-getshell](https://github.com/thelsa/ueditor-getshell) ueditor .net getshell
+- [**56**星][9m] [TS] [pengchujin/onesubscribe](https://github.com/pengchujin/onesubscribe) ss ssr v2ray 订阅管理 node 后端
+- [**56**星][10m] [ObjC] [geosn0w/chaos](https://github.com/geosn0w/chaos) Chaos iOS < 12.1.2 PoC by
+- [**56**星][3d] [Py] [ubernostrum/pwned-passwords-django](https://github.com/ubernostrum/pwned-passwords-django) Utilities for working with the Pwned Passwords database from Django.
+- [**56**星][4m] [Py] [giantbranch/mipsaudit](https://github.com/giantbranch/mipsaudit) IDA MIPS静态扫描脚本,汇编审计辅助脚本
- [**56**星][1m] [Shell] [125k/pwrdeauther](https://github.com/125K/PwrDeauther) This script allows you to deauth a specific SSID or an entire channel with mdk3 (MDK3 is more powerful than Aireplay)
-- [**56**星][7m] [Py] [hatching/sflock](https://github.com/hatching/sflock) Sample staging & detonation utility to be used in combination with Cuckoo Sandbox.
+- [**56**星][8m] [Py] [hatching/sflock](https://github.com/hatching/sflock) Sample staging & detonation utility to be used in combination with Cuckoo Sandbox.
- [**56**星][6y] [PHP] [wkcaj/safecurl](https://github.com/wkcaj/safecurl) SSRF Protection Library for PHP -
- [**56**星][8m] [Shell] [malscan/malscan](https://github.com/malscan/malscan) A fully featured malware scanner for Linux desktops and servers.
- [**56**星][3y] [C] [zerosum0x0/shellcodedriver](https://github.com/zerosum0x0/shellcodedriver) Windows driver to execute arbitrary usermode code (essentially same vulnerability as capcom.sys)
- [**56**星][1y] [zephrfish/xsspayloads](https://github.com/zephrfish/xsspayloads) Cross Site Scripting Payloads -- Variations
- [**56**星][4y] [Ruby] [zenvdeluca/net_healer](https://github.com/zenvdeluca/net_healer) NET HEALER receive DDoS Attack reports from FastNetMon collectors allowing custom triggers on a per stage based actions.
-- [**56**星][2y] [PowerShell] [xan7r/kerberoast](https://github.com/xan7r/kerberoast)
-- [**56**星][2y] [JS] [windard/sm4](https://github.com/windard/sm4) SM4 by JavaScript
+- [**56**星][4m] [Assembly] [xyzz/ghidra-mep](https://github.com/xyzz/ghidra-mep) Toshiba MeP processor module for GHIDRA
+- [**56**星][2y] [PS] [xan7r/kerberoast](https://github.com/xan7r/kerberoast)
+- [**56**星][4m] [Shell] [wuseman/wbruter](https://github.com/wuseman/wbruter) Crack your non-rooted android device pin code with 100% guarantee aslong as usb debugging has been enable. Wbruter also has support for parallel ssh brute forcing via pssh
- [**56**星][2y] [Py] [williballenthin/python-sdb](https://github.com/williballenthin/python-sdb) Pure Python parser for Application Compatibility Shim Databases (.sdb files)
-- [**56**星][3y] [Java] [vulnerscom/burp-dirbuster](https://github.com/vulnerscom/burp-dirbuster) Dirbuster plugin for Burp Suite
- [**56**星][4y] [Py] [upgoingstar/hackerone_public_reports](https://github.com/upgoingstar/hackerone_public_reports) Finds all public bug reports on reported on Hackerone
- [**56**星][11m] [Py] [unamer/pwnsandboxforctf](https://github.com/unamer/pwnsandboxforctf) Yet another sandbox for CTF challenge in AWD mode
- [**56**星][2m] [C] [ufrisk/leechcore](https://github.com/ufrisk/leechcore) LeechCore - Physical Memory Acquisition Library & The LeechAgent Remote Memory Acquisition Agent
- [**56**星][3y] [JS] [twz915/django-minicms](https://github.com/twz915/django-minicms) Django 开发简易的内容管理系统
-- [**56**星][2y] [HTML] [trustedsec/cors-poc](https://github.com/trustedsec/cors-poc)
+- [**56**星][2m] [Makefile] [trojan-gfw/openwrt-trojan](https://github.com/trojan-gfw/openwrt-trojan) trojan and its dependencies for OpenWrt
+- [**56**星][8y] [C] [toucan-system/pmcma](https://github.com/toucan-system/pmcma) Post Memory Corruption Memory Analyzer
- [**56**星][1y] [Py] [torque59/garfield](https://github.com/torque59/garfield) An offensive attack framework for Distributed Layer of Modern Applications
- [**56**星][4m] [Py] [stef/pyrsp](https://github.com/stef/pyrsp) python implementation of the GDB Remote Serial Protocol
- [**56**星][3y] [C++] [stealth/crash](https://github.com/stealth/crash) crypted admin shell: SSH-like strong crypto remote admin shell for Linux, BSD, Android, Solaris and OSX
- [**56**星][8m] [HTML] [sophoslabs/cve-2018-18500](https://github.com/sophoslabs/cve-2018-18500) PoC for CVE-2018-18500 - Firefox Use-After-Free
- [**56**星][11m] [C] [smihica/pyminizip](https://github.com/smihica/pyminizip) To create a password encrypted zip file in python.
-- [**56**星][10d] [C++] [signetlabdei/lorawan](https://github.com/signetlabdei/lorawan) An ns-3 module for simulation of LoRaWAN networks.
+- [**56**星][8d] [C++] [signetlabdei/lorawan](https://github.com/signetlabdei/lorawan) An ns-3 module for simulation of LoRaWAN networks.
- [**56**星][4y] [Py] [siberas/arpwn](https://github.com/siberas/arpwn) Analysis tools and exploit sample scripts for Adobe Reader 10/11 and Acrobat Reader DC
- [**56**星][10m] [Shell] [securityriskadvisors/talr](https://github.com/securityriskadvisors/talr) Threat Alert Logic Repository
- [**56**星][2y] [WebAssembly] [seccon/seccon2017_online_ctf](https://github.com/seccon/seccon2017_online_ctf)
-- [**56**星][4m] [C] [rub-syssec/antifuzz](https://github.com/rub-syssec/antifuzz) Impeding Fuzzing Audits of Binary Executables
+- [**56**星][7m] [scubsrgroup/automatic-exploit-generation](https://github.com/scubsrgroup/automatic-exploit-generation) Something about AEG
- [**56**星][7m] [OCaml] [rolfrolles/pandemicml](https://github.com/rolfrolles/pandemicml) Pandemic binary program analysis framework in OCaml (abandoned)
-- [**56**星][18d] [Py] [rocky/python-xdis](https://github.com/rocky/python-xdis) Python cross-version bytecode library and disassembler
+- [**56**星][2d] [Py] [rocky/python-xdis](https://github.com/rocky/python-xdis) Python cross-version bytecode library and disassembler
- [**56**星][2m] [JS] [roccomuso/alveare](https://github.com/roccomuso/alveare)
-- [**56**星][5y] [C] [rmusser01/hyperdbg](https://github.com/rmusser01/hyperdbg) Automatically exported from code.google.com/p/hyperdbg
- [**56**星][2y] [C] [rgerganov/nfqsed](https://github.com/rgerganov/nfqsed) Modify network traffic with netfilter_queue
- [**56**星][4y] [Py] [rehints/blackhat_2015](https://github.com/rehints/blackhat_2015) Distributing the REconstruction of High-Level IR for Large Scale Malware Analysis
- [**56**星][2y] [Py] [rafiot/kittengroomer](https://github.com/rafiot/kittengroomer) USB key cleaner
+- [**56**星][5m] [Py] [r3nt0n/bopscrk](https://github.com/r3nt0n/bopscrk) A tool to generate smart and powerful wordlists
+- [**56**星][3y] [C] [pythonmaster41/go-for-oscp](https://github.com/pythonmaster41/go-for-oscp)
- [**56**星][5m] [Java] [pnfsoftware/jeb2-androsig](https://github.com/pnfsoftware/jeb2-androsig) Android Library Code Recognition
-- [**56**星][10m] [Py] [pirate/mesh-botnet](https://github.com/pirate/mesh-botnet)
+- [**56**星][11m] [Py] [pirate/mesh-botnet](https://github.com/pirate/mesh-botnet)
- [**56**星][1y] [Py] [p1kachu/talking-with-cars](https://github.com/p1kachu/talking-with-cars) CAN analysis - Use your car as a gamepad!
- [**56**星][2y] [ouspg/fuzz-testing-beginners-guide](https://github.com/ouspg/fuzz-testing-beginners-guide) Fuzz testing: Beginner's guide
- [**56**星][3y] [C] [opsxcq/exploit-blacknurse](https://github.com/opsxcq/exploit-blacknurse) Black Nurse DOS attack
- [**56**星][9m] [JS] [obscuritylabs/os-cfdb](https://github.com/obscuritylabs/os-cfdb) Open Source - Common Findings DataBase (JSON & MD)
-- [**56**星][6m] [C#] [nyan-x-cat/limeusb-csharp](https://github.com/nyan-x-cat/limeusb-csharp) Malware USB Spread | Example C#
- [**56**星][4y] [C++] [nukem9/virtualdbg](https://github.com/nukem9/virtualdbg) Test code only. Not reliable for actual use.
- [**56**星][4m] [PHP] [nextras/secured-links](https://github.com/nextras/secured-links) CSRF protection for Nette Framework presenters' signals.
- [**56**星][4y] [Py] [newlog/exploiting](https://github.com/newlog/exploiting) Stuff you might use when exploiting software
+- [**56**星][8d] [Java] [netflix/iep](https://github.com/netflix/iep) Insight Engineering Platform Components
+- [**56**星][28d] [Py] [netflix-skunkworks/cloudaux](https://github.com/netflix-skunkworks/cloudaux) Cloud Auxiliary is a python wrapper and orchestration module for interacting with cloud providers
- [**56**星][1y] [Py] [neo23x0/exotron](https://github.com/neo23x0/exotron) Sandbox feature upgrade with the help of wrapped samples
+- [**56**星][3m] [Py] [nccgroup/hashcrack](https://github.com/nccgroup/hashcrack) Guesses hash types, picks some sensible dictionaries and rules for hashcat
- [**56**星][2y] [Py] [mzeyong/cve-2017-13089](https://github.com/mzeyong/cve-2017-13089) CVE-2017-13089
+- [**56**星][2y] [myndtt/ctf-site](https://github.com/myndtt/ctf-site) 介绍一些CTF训练的站点
- [**56**星][2y] [C] [mwpcheung/ssl-kill-switch2](https://github.com/mwpcheung/ssl-kill-switch2) Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS and OS X Apps
- [**56**星][5y] [Py] [mvantellingen/psycopg2-ctypes](https://github.com/mvantellingen/psycopg2-ctypes) ctypes port of psycopg2 (see
+- [**56**星][1y] [C] [msftserver/ravencoin-wallet-with-miners](https://github.com/msftserver/ravencoin-wallet-with-miners) RavenCoin Wallet including CPU and GPU miners! programs are directly from Ravencoin and official miner sources
- [**56**星][2m] [Java] [mp911de/spring-cloud-vault-config-samples](https://github.com/mp911de/spring-cloud-vault-config-samples) Examples for Spring Vault and Spring Cloud Vault Config
+- [**56**星][5y] [C] [molnarg/dead0007](https://github.com/molnarg/dead0007) Decompiler for SpiderMonkey 1.8 XDR bytecode
+- [**56**星][2y] [Shell] [moki-ics/moki](https://github.com/moki-ics/moki) Moki Distribution - ICS/SCADA Tools
+- [**56**星][8m] [Py] [mogwailabs/mjet](https://github.com/mogwailabs/mjet) MOGWAI LABS JMX exploitation toolkit
- [**56**星][2y] [JS] [marknote/teleshellbot](https://github.com/marknote/teleshellbot) A simple Telegram Bot to run shell commands remotely
- [**56**星][7y] [C++] [makerbot/miracle-grue](https://github.com/makerbot/miracle-grue) Workspace for new Toolpathing software.
- [**56**星][4y] [C++] [m0n0ph1/basic-file-crypter](https://github.com/m0n0ph1/basic-file-crypter) Process Hollowing techniques as used in many file Crypters (C/C++)
- [**56**星][3m] [C] [lucamassarelli/yarasafe](https://github.com/lucamassarelli/yarasafe) SAFE embeddings to match functions in yara
- [**56**星][3y] [Java] [linkedin/sometime](https://github.com/linkedin/sometime) A BurpSuite plugin to detect Same Origin Method Execution vulnerabilities
-- [**56**星][8m] [Py] [lief-project/tutorials](https://github.com/lief-project/tutorials) Materials for LIEF tutorials
- [**56**星][1y] [latestalexey/awesome-web-hacking](https://github.com/latestalexey/awesome-web-hacking) A list of web application security
-- [**56**星][27d] [Go] [konimarti/opc](https://github.com/konimarti/opc) OPC DA client in Golang for monitoring and analyzing process data based on Windows COM.
- [**56**星][4y] [Go] [kevinmahaffey/tescat](https://github.com/kevinmahaffey/tescat) A tool to identify unique UDP payloads developed in order to audit the Tesla Model S's onboard ethernet traffic.
-- [**56**星][8d] [Py] [keeper-security/commander](https://github.com/keeper-security/commander) Keeper Commander
-- [**56**星][3y] [C] [k2/admmutate](https://github.com/k2/admmutate) Classic code from 1999+ I am fairly sure this is the first public polymorphic shellcode ever (best IMHO and others
-- [**56**星][18d] [C++] [jspspemu/jspspemu](https://github.com/jspspemu/jspspemu) typescript psp emulator
+- [**56**星][3d] [Py] [keeper-security/commander](https://github.com/keeper-security/commander) Keeper Commander
+- [**56**星][20d] [C++] [jspspemu/jspspemu](https://github.com/jspspemu/jspspemu) typescript psp emulator
- [**56**星][4m] [AutoIt] [jschicht/extractusnjrnl](https://github.com/jschicht/extractusnjrnl) Tool to extract the $UsnJrnl from an NTFS volume
- [**56**星][2y] [JS] [jpenalbae/r2-scripts](https://github.com/jpenalbae/r2-scripts) Multiple radare2 rpipe scripts
- [**56**星][2y] [Py] [joxeankoret/maltindex](https://github.com/joxeankoret/maltindex) Mal Tindex is an Open Source tool for indexing binaries and help attributing malware campaigns
-- [**56**星][18d] [Java] [johnjohndoe/proguard](https://github.com/johnjohndoe/proguard) Java class file shrinker, optimizer, obfuscator, and preverifier
-- [**56**星][7m] [JS] [joevennix/lan-js](https://github.com/joevennix/lan-js) Probe LAN devices from a web browser.
+- [**56**星][20d] [Java] [johnjohndoe/proguard](https://github.com/johnjohndoe/proguard) Java class file shrinker, optimizer, obfuscator, and preverifier
- [**56**星][2y] [C++] [jnferguson/double-free-examples](https://github.com/jnferguson/double-free-examples) Basic examples of double free exploitation/etc functionality in glibc/jemalloc/tcmalloc
- [**56**星][5y] [Ruby] [jekil/hostmap](https://github.com/jekil/hostmap)
- [**56**星][1y] [C] [jduck/canhazaxs](https://github.com/jduck/canhazaxs) A tool for enumerating the access to entries in the file system of an Android device.
- [**56**星][1y] [Py] [jas502n/cve-2018-3191](https://github.com/jas502n/cve-2018-3191) Weblogic-CVE-2018-3191远程代码命令执行漏洞
-- [**56**星][26d] [PowerShell] [jaapbrasser/sharedscripts](https://github.com/jaapbrasser/sharedscripts) This is a collection of scripts that I have shared online
-- [**56**星][1m] [HTML] [j3ers3/passlist](https://github.com/j3ers3/passlist)
+- [**56**星][3d] [PS] [jaapbrasser/sharedscripts](https://github.com/jaapbrasser/sharedscripts) This is a collection of scripts that I have shared online
- [**56**星][8y] [JS] [iriscouch/request_jquery](https://github.com/iriscouch/request_jquery) request (NodeJS http client) API using jQuery back-end
- [**56**星][5y] [C] [honeynet/ghost-usb-honeypot](https://github.com/honeynet/ghost-usb-honeypot) A honeypot for malware that propagates via USB storage devices
-- [**56**星][8d] [C++] [henrypp/errorlookup](https://github.com/henrypp/errorlookup) Simple tool for retrieving information about Windows errors codes.
-- [**56**星][6y] [Assembly] [hackedteam/core-win64](https://github.com/hackedteam/core-win64) RCS Agent for Windows (64bit)
+- [**56**星][8m] [JS] [hamz-a/frida-android-libbinder](https://github.com/hamz-a/frida-android-libbinder) PoC Frida script to view Android libbinder traffic
- [**56**星][3y] [C] [gnaixx/anti-debug](https://github.com/gnaixx/anti-debug) Android detect debugger
+- [**56**星][6m] [TS] [geeksonsecurity/illuminatejs](https://github.com/geeksonsecurity/illuminatejs) IlluminateJs is a static JavaScript deobfuscator
- [**56**星][5y] [Shell] [ge0rg/samsung-nx-hacks](https://github.com/ge0rg/samsung-nx-hacks) Firmware Hacks for the Linux-based Samsung NX mirrorless camera models (NX300, NX2000, ???)
- [**56**星][9y] [Py] [gdssecurity/sqlbrute](https://github.com/gdssecurity/sqlbrute) SQLBrute is a tool for brute forcing data out of databases using blind SQL injection vulnerabilities.
+- [**56**星][23d] [JS] [gajus/global-agent](https://github.com/gajus/global-agent) Global HTTP/HTTPS proxy agent configurable using environment variables.
- [**56**星][5y] [Py] [foreni-packages/dhcpig](https://github.com/foreni-packages/dhcpig) initiates an advanced DHCP exhaustion attack
- [**56**星][2m] [Py] [forallsecure/bncov](https://github.com/forallsecure/bncov) Scriptable Binary Ninja plugin for coverage analysis and visualization
- [**56**星][3y] [C++] [fireeye/unicorn-libemu-shim](https://github.com/fireeye/unicorn-libemu-shim) unicorn-libemu-shim:项目地址
-- [**56**星][2y] [F#] [enkomio/anathema](https://github.com/enkomio/anathema) .NET instrumentation framework
+- [**56**星][3y] [Shell] [epinna/unusedpkg](https://github.com/epinna/unusedpkg) Diagnostic tool to find unused packages
- [**56**星][4y] [Shell] [emirozer/nixarmor](https://github.com/emirozer/nixarmor) nixarmor is a linux hardening automation project
- [**56**星][1y] [C#] [egorbo/intrinsicsplayground](https://github.com/egorbo/intrinsicsplayground) My toys to play with SSE/AVX in pure C# (.NET Core 2.1)
- [**56**星][1m] [dwizzzle/presentations](https://github.com/dwizzzle/presentations) A repository of my presentations
-- [**56**星][7m] [HTML] [dobin/yookiterm-slides](https://github.com/dobin/yookiterm-slides) Exploitation and Mitigation Slides
- [**56**星][2y] [Shell] [digitalocean/debian-sys-maint-roll-passwd](https://github.com/digitalocean/debian-sys-maint-roll-passwd) debian-sys-maint-roll-passwd:更新 MySQL 用户 "debian-sys-maint" 的密码
+- [**56**星][6y] [C] [devzero2000/shellcoderhandbook](https://github.com/devzero2000/shellcoderhandbook) shellcoderhandbook source code : "The Shellcoder's Handbook: Discovering and Exploiting Security Holes"
- [**56**星][1y] [Py] [destine21/zipfileraider](https://github.com/destine21/zipfileraider) ZIP File Raider - Burp Extension for ZIP File Payload Testing
- [**56**星][1y] [Nix] [dapphub/ds-auth](https://github.com/dapphub/ds-auth) Updatable, unobtrusive Solidity authorization pattern
- [**56**星][2y] [danielmiessler/blackhat-arsenal-tools](https://github.com/danielmiessler/blackhat-arsenal-tools) Official Black Hat Arsenal Security Tools Repository
- [**56**星][3y] [Py] [cuppa-joe/dsame](https://github.com/cuppa-joe/dsame) Python EAS SAME Alert Message Decoder
- [**56**星][2m] [Assembly] [cturt/ps2-yabasic-exploit](https://github.com/cturt/ps2-yabasic-exploit) PS2 exploit for demo discs containing Yabasic that allows arbitrary code execution.
-- [**56**星][7y] [Py] [cr4sh/ida-vmware-gdb](https://github.com/cr4sh/ida-vmware-gdb) 辅助Windows内核调试
+- [**56**星][2y] [C] [coolervoid/rootstealer](https://github.com/coolervoid/rootstealer) X11 trick to inject commands on root terminal.
- [**56**星][3y] [cn33liz/ms17-012](https://github.com/cn33liz/ms17-012) MS17-012 - COM Session Moniker EoP Exploit running within MSBuild.exe
-- [**56**星][5m] [Py] [chrismaddalena/goreport](https://github.com/chrismaddalena/goreport) A Python script to collect campaign data from Gophish and generate a report
-- [**56**星][27d] [C] [bytebandits/writeups](https://github.com/bytebandits/writeups) Wiki-like CTF write-ups repository by ByteBandits
-- [**56**星][5y] [Py] [bwall/extracthosts](https://github.com/bwall/extracthosts) Extracts hosts (IP/Hostnames) from files
+- [**56**星][5d] [PS] [chef-koch/windows-10-hardening](https://github.com/chef-koch/windows-10-hardening) Windows 10 hardening guide without gimmicks
+- [**56**星][29d] [C] [bytebandits/writeups](https://github.com/bytebandits/writeups) Wiki-like CTF write-ups repository by ByteBandits
- [**56**星][2y] [Py] [bonkc/bugbountysubdomains](https://github.com/bonkc/bugbountysubdomains) Tools to gather subdomains from Bug Bounty programs
+- [**56**星][2y] [Java] [bigsizeme/burplugin-java-rce](https://github.com/bigsizeme/burplugin-java-rce) ******本软件仅限用于学习交流禁止用于任何非法行为****** 本版本支持elasticsearch java语言远程命令执行及文件上传 elasticsearchgroov语言远程命令执行及文件上传 struts2-005、struts2-009、struts2-013、struts2-016、struts2-019、struts2-020、struts2-devmode、 struts2-032、struts2-033、struts2-037、struts2-045、struts2-048、struts2-052 除struts2-053全部RCE漏洞验证并支持批量验证。 Struts2漏洞验证需要python环境并需要相关类库支持.点击python按钮初始化初始化python…
- [**56**星][2y] [Py] [b-mueller/laser-ethereum](https://github.com/b-mueller/laser-ethereum) Symbolic virtual machine for Ethereum
- [**56**星][5y] [C] [axoltl/hubcap](https://github.com/axoltl/hubcap) ChromeCast HubCap exploit
- [**56**星][2y] [Py] [averagesecurityguy/ptnotes](https://github.com/averagesecurityguy/ptnotes)
-- [**56**星][11m] [Py] [anteater/anteater](https://github.com/anteater/anteater) Anteater - CI/CD Gate Check Framework
-- [**56**星][23d] [Py] [angr/archinfo](https://github.com/angr/archinfo) Classes with architecture-specific information useful to other projects.
+- [**56**星][7d] [Py] [angr/archinfo](https://github.com/angr/archinfo) Classes with architecture-specific information useful to other projects.
- [**56**星][2y] [Java] [amotzte/android-mock-location-for-development](https://github.com/amotzte/android-mock-location-for-development) allows to change mock location from command line on real devices
-- [**56**星][12d] [C++] [aliveteam/alive_reversing](https://github.com/aliveteam/alive_reversing) Re-implementation of Abe's Exoddus
-- [**56**星][15d] [albertzsigovits/malware-writeups](https://github.com/albertzsigovits/malware-writeups) Personal research and publication on malware families
-- [**56**星][4m] [al0ne/nmap_bypass_ids](https://github.com/al0ne/nmap_bypass_ids) bypass IDS
+- [**56**星][17d] [albertzsigovits/malware-writeups](https://github.com/albertzsigovits/malware-writeups) Personal research and publication on malware families
+- [**55**星][3m] [C] [heiher/hev-socks5-tproxy](https://github.com/heiher/hev-socks5-tproxy) A simple, lightweight socks5 transparent proxy for Linux
+- [**55**星][3d] [JS] [instantwebp2p/peer-proxy](https://github.com/instantwebp2p/peer-proxy) Light on hidden web service - Expose web service from Peer
+- [**55**星][21d] [victorqribeiro/bruteforcetv](https://github.com/victorqribeiro/bruteforcetv) Let's brute force this hotel's tv.
- [**55**星][6m] [C] [vanhoefm/dragondrain-and-time](https://github.com/vanhoefm/dragondrain-and-time)
- [**55**星][2y] [Py] [ztgrace/pwnboard](https://github.com/ztgrace/pwnboard) CCDC Red Team PWNboard
- [**55**星][10m] [HTML] [jpcertcc/cordova](https://github.com/jpcertcc/cordova) Vulnerability Analysis of Hybrid Applications using Apache Cordova
-- [**55**星][26d] [Go] [evilsocket/pwngrid](https://github.com/evilsocket/pwngrid) (⌐■_■) - API server for pwnagotchi.ai
- [**55**星][1y] [Py] [osirislab/csaw-ctf-2018-finals](https://github.com/osirislab/csaw-ctf-2018-finals) Repo for CSAW CTF 2018 Finals challenges
-- [**55**星][3m] [snoopysecurity/osce-prep](https://github.com/snoopysecurity/osce-prep) A list of freely available resources that can be used as a prerequisite before taking OSCE.
-- [**55**星][11d] [C++] [whid-injector/whid-31337](https://github.com/whid-injector/whid-31337) WHID Elite is a GSM-enabled Open-Source Multi-Purpose Offensive Device that allows a threat actor to remotely inject keystrokes, bypass air-gapped systems, conduct mousejacking attacks, do acoustic surveillance, RF replay attacks and much more. In practice, is THE Wet Dream of any Security Consultant out there!
-- [**55**星][6m] [Py] [rabbitmask/weblogicscanserver](https://github.com/rabbitmask/weblogicscanserver) 开启WeblogicScanV3.*系列,采用Server部署,支持远程Weblogic漏洞扫描
- [**55**星][6m] [C++] [eyalz800/zpp_hypervisor](https://github.com/eyalz800/zpp_hypervisor) A very simple hypervisor for learning experience.
+- [**55**星][26d] [Kotlin] [m1dr05/istheapp](https://github.com/m1dr05/istheapp) Open-source android spyware
+- [**55**星][9m] [Vue] [pengchujin/subscribevue](https://github.com/pengchujin/subscribevue) ss ssr v2ray 订阅管理 vue前端界面
- [**55**星][2m] [C#] [ohjeongwook/powershellrunbox](https://github.com/ohjeongwook/powershellrunbox) Dynamic PowerShell analysis framework
-- [**55**星][29d] [Go] [lc/hacks](https://github.com/lc/hacks) Repo of useful scripts
-- [**55**星][3m] [Py] [ubernostrum/pwned-passwords-django](https://github.com/ubernostrum/pwned-passwords-django) Utilities for working with the Pwned Passwords database from Django.
+- [**55**星][1m] [Go] [lc/hacks](https://github.com/lc/hacks) Repo of useful scripts
- [**55**星][2m] [Py] [ripxorip/aerojump.nvim](https://github.com/ripxorip/aerojump.nvim) Aerojump is a fuzzy-match searcher/jumper for Neovim with the goal of quick keyboard navigation
- [**55**星][2m] [C] [resilar/crchack](https://github.com/resilar/crchack) Reversing CRC for fun and profit
-- [**55**星][30d] [redteamwing/pentest_wiki](https://github.com/RedTeamWing/Pentest_WiKi) 你所不知道的渗透测试
+- [**55**星][5m] [Py] [re4lity/pocorexp](https://github.com/re4lity/PoCorExp) PoC or Exp Of Vulnerability
+- [**55**星][1m] [redteamwing/pentest_wiki](https://github.com/RedTeamWing/Pentest_WiKi) 你所不知道的渗透测试
- [**55**星][1m] [C] [secureauthcorp/sap-dissection-plug-in-for-wireshark](https://github.com/SecureAuthCorp/SAP-Dissection-plug-in-for-Wireshark) This Wireshark plugin provides dissection of SAP's NI, Diag, Enqueue, Router, Message Server, SNC and IGS protocols.
-- [**55**星][12m] [pegasuslab/pegasusteam](https://github.com/PegasusLab/PegasusTeam) PegasusTeam is a group that focuses on WLAN security and Wi-Fi Pentesting.
-- [**55**星][7d] [HTML] [canonical-web-and-design/ubuntu.com](https://github.com/canonical-web-and-design/ubuntu.com) The official website for the Ubuntu operating system
+- [**55**星][1y] [pegasuslab/pegasusteam](https://github.com/PegasusLab/PegasusTeam) PegasusTeam is a group that focuses on WLAN security and Wi-Fi Pentesting.
+- [**55**星][2d] [HTML] [canonical-web-and-design/ubuntu.com](https://github.com/canonical-web-and-design/ubuntu.com) The official website for the Ubuntu operating system
- [**55**星][2y] [yrzx404/free-security-resources](https://github.com/yrzx404/free-security-resources) 安全总是无处不在...
-- [**55**星][4m] [Assembly] [xyzz/ghidra-mep](https://github.com/xyzz/ghidra-mep) Toshiba MeP processor module for GHIDRA
-- [**55**星][4m] [Shell] [wuseman/wbruter](https://github.com/wuseman/wbruter) Crack your non-rooted android device pin code with 100% guarantee aslong as usb debugging has been enable. Wbruter also has support for parallel ssh brute forcing via pssh
- [**55**星][2y] [C] [winbagility/winbagility](https://github.com/winbagility/winbagility) [ARCHIVED] mov rax, ${Thalium/IceBox}; jmp rax;
+- [**55**星][21d] [C] [watf-team/watf-bank](https://github.com/watf-team/watf-bank) WaTF Bank - What a Terrible Failure Mobile Banking Application for Android and iOS
- [**55**星][1y] [Py] [wangyihang/find-php-vulnerabilities](https://github.com/wangyihang/find-php-vulnerabilities)
-- [**55**星][2y] [PowerShell] [vletoux/ms17-010-scanner](https://github.com/vletoux/ms17-010-scanner)
+- [**55**星][2y] [PS] [vletoux/ms17-010-scanner](https://github.com/vletoux/ms17-010-scanner)
- [**55**星][1y] [JS] [ubeacsec/silverdog](https://github.com/ubeacsec/silverdog) An audio firewall for Chrome!
- [**55**星][1y] [C#] [tyranid/windowsruntimesecuritydemos](https://github.com/tyranid/windowsruntimesecuritydemos) Demos for Presentation on Windows Runtime Security
- [**55**星][5y] [PHP] [troyhunt/pineapplesurprise](https://github.com/troyhunt/pineapplesurprise) Pineapple Surprise! is a PHP implementation for the Wi-Fi Pineapple or "Jasager". Used in conjunction with dnsspoof it will serve a "surprise" to any clients connected to the device when they make an HTTP request.
-- [**55**星][5m] [C++] [troybowman/dtxmsg](https://github.com/troybowman/dtxmsg) 辅助逆向DTXConnectionServices 框架
- [**55**星][2y] [trietptm/security-news](https://github.com/trietptm/security-news) Information Security News
- [**55**星][4m] [Py] [trickster0/enyx](https://github.com/trickster0/enyx) Enyx SNMP IPv6 Enumeration Tool
- [**55**星][2y] [JS] [tinysec/jsrt](https://github.com/tinysec/jsrt) javascript runtime ( JSRT ) project for windows , based on chakra
-- [**55**星][4m] [Visual Basic] [thesph1nx/slickermaster-rev4](https://github.com/thesph1nx/slickermaster-rev4) NSA Hacking Tool Recreation UnitedRake
+- [**55**星][4m] [Visual Basic .NET] [thesph1nx/slickermaster-rev4](https://github.com/thesph1nx/slickermaster-rev4) NSA Hacking Tool Recreation UnitedRake
+- [**55**星][7m] [HTML] [tgeaus/weak-password](https://github.com/tgeaus/weak-password) 字典大全 dictionary
- [**55**星][3y] [C] [synack/chaoticmarch](https://github.com/synack/chaoticmarch) A mechanism for automating input events on iOS
- [**55**星][3y] [Py] [sowish/sqlmapapi_pi](https://github.com/sowish/sqlmapapi_pi) 利用sqlmapapi进行批量检测sql注入
-- [**55**星][4m] [C] [sonertari/sslproxy](https://github.com/sonertari/sslproxy) Transparent SSL/TLS proxy for decrypting and diverting network traffic to other programs, such as UTM services, for deep SSL inspection
+- [**55**星][8m] [Perl] [sourceperl/mbtget](https://github.com/sourceperl/mbtget) A simple modbus/TCP client write in pure Perl.
- [**55**星][2y] [C++] [sigint9/yaragui](https://github.com/sigint9/yaragui)
+- [**55**星][2y] [Py] [shaanen/osint-combiner](https://github.com/shaanen/osint-combiner) Combining OSINT sources in Elastic Stack
- [**55**星][2y] [TeX] [season-lab/survey-symbolic-execution](https://github.com/season-lab/survey-symbolic-execution) 对有关符号执行相关工具和技术的调查
- [**55**星][3y] [Java] [scriptjunkie/msfgui](https://github.com/scriptjunkie/msfgui) The Metasploit GUI
- [**55**星][2m] [Ruby] [saz/puppet-memcached](https://github.com/saz/puppet-memcached) Puppet module for memcached
- [**55**星][2y] [C] [samlarenn/callbackdisabler](https://github.com/samlarenn/callbackdisabler) Disable Driver Callbacks
-- [**55**星][6m] [Py] [s2e/s2e-env](https://github.com/s2e/s2e-env) Your S2E project management tools
+- [**55**星][1m] [Py] [s2e/s2e-env](https://github.com/s2e/s2e-env) Your S2E project management tools
- [**55**星][3y] [C++] [s-kanev/xiosim](https://github.com/s-kanev/xiosim) A detailed michroarchitectural x86 simulator
- [**55**星][2y] [Java] [righettod/virtualhost-payload-generator](https://github.com/righettod/virtualhost-payload-generator) BURP extension providing a set of values for the HTTP request "Host" header for the "BURP Intruder" in order to abuse virtual host resolution.
- [**55**星][7m] [C] [rapid7/reflectivedllinjection](https://github.com/rapid7/reflectivedllinjection) Reflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process.
-- [**55**星][10m] [Objective-C] [rani-i/bluetoothdpoc](https://github.com/rani-i/bluetoothdpoc) CVE-2018-4087 PoC
-- [**55**星][5m] [Py] [r3nt0n/bopscrk](https://github.com/r3nt0n/bopscrk) A tool to generate smart and powerful wordlists
-- [**55**星][3y] [C] [pythonmaster41/go-for-oscp](https://github.com/pythonmaster41/go-for-oscp)
+- [**55**星][10m] [ObjC] [rani-i/bluetoothdpoc](https://github.com/rani-i/bluetoothdpoc) CVE-2018-4087 PoC
- [**55**星][4y] [Py] [pidydx/smrt](https://github.com/pidydx/smrt) Sublime Malware Research Tool
+- [**55**星][1m] [Visual Basic .NET] [outflanknl/scripts](https://github.com/outflanknl/scripts) Small scripts that make life better
- [**55**星][3y] [Shell] [ouspg/libfuzzerfication](https://github.com/ouspg/libfuzzerfication) libfuzzerfication - fuzzing for the rest of us!
- [**55**星][6m] [C++] [osql/osql](https://github.com/osql/osql) SQL powered operating system instrumentation, monitoring, and analytics.
-- [**55**星][3y] [Py] [nonenotnull/ssrfx](https://github.com/nonenotnull/ssrfx) CVE-2014-4210+Redis未授权访问
-- [**55**星][12d] [Java] [netflix/iep](https://github.com/netflix/iep) Insight Engineering Platform Components
-- [**55**星][26d] [Py] [netflix-skunkworks/cloudaux](https://github.com/netflix-skunkworks/cloudaux) Cloud Auxiliary is a python wrapper and orchestration module for interacting with cloud providers
+- [**55**星][5y] [Pascal] [nyx0/pony](https://github.com/nyx0/pony) Pony 2.0 Stealer
- [**55**星][3y] [C#] [nccgroup/mnemosyne](https://github.com/nccgroup/mnemosyne) mnemosyne:通用Windows内存抓取工具
-- [**55**星][3m] [Py] [nccgroup/hashcrack](https://github.com/nccgroup/hashcrack) Guesses hash types, picks some sensible dictionaries and rules for hashcat
- [**55**星][2y] [Py] [msfidelis/kill-router-](https://github.com/msfidelis/kill-router-) Ferramenta para quebrar senhas administrativas de roteadores Wireless, routers, switches e outras plataformas de gestão de serviços de rede autenticados.
-- [**55**星][5y] [C] [molnarg/dead0007](https://github.com/molnarg/dead0007) Decompiler for SpiderMonkey 1.8 XDR bytecode
-- [**55**星][2y] [Shell] [moki-ics/moki](https://github.com/moki-ics/moki) Moki Distribution - ICS/SCADA Tools
-- [**55**星][8m] [Py] [mogwailabs/mjet](https://github.com/mogwailabs/mjet) MOGWAI LABS JMX exploitation toolkit
+- [**55**星][1y] [mindpointgroup/ansible-vmware-provisioning](https://github.com/mindpointgroup/ansible-vmware-provisioning) Some basic Ansible content to help get more out of VMware. Developed for AnsibleFest San Francisco 2017.
- [**55**星][6m] [C++] [mefistotelis/ida-pro-loadmap](https://github.com/mefistotelis/ida-pro-loadmap) Plugin for IDA Pro disassembler which allows loading .map files.
- [**55**星][3y] [Py] [m4sc3r4n0/spyrat](https://github.com/m4sc3r4n0/spyrat) Python Remote Access Trojan
-- [**55**星][3y] [C#] [lontivero/vinchuca](https://github.com/lontivero/vinchuca) A resilient peer-to-peer botnet agent in .NET
+- [**55**星][2y] [Shell] [lanjelot/twisted-honeypots](https://github.com/lanjelot/twisted-honeypots) SSH, FTP and Telnet honeypots based on Twisted
- [**55**星][2y] [C] [kkamagui/shadow-box-for-arm](https://github.com/kkamagui/shadow-box-for-arm) Shadow-Box v2: 实用且全能的ARM沙箱
- [**55**星][7y] [C++] [kakaroto/ps3ida](https://github.com/kakaroto/ps3ida) IDA scripts and plugins for PS3
+- [**55**星][2y] [jkpang/timliu-ios](https://github.com/jkpang/timliu-ios) iOS开发常用三方库、插件、知名博客等等
- [**55**星][8m] [JS] [jes/chess-steg](https://github.com/jes/chess-steg) Steganography in chess games
+- [**55**星][2y] [C#] [jamessmith2/ethmonitoring](https://github.com/jamessmith2/ethmonitoring) Miner monitoring software with different notifications support
- [**55**星][2y] [C++] [huoji120/av-killer](https://github.com/huoji120/av-killer) Antivirus Killer
-- [**55**星][6m] [TypeScript] [geeksonsecurity/illuminatejs](https://github.com/geeksonsecurity/illuminatejs) IlluminateJs is a static JavaScript deobfuscator
+- [**55**星][14d] [YARA] [hestat/lw-yara](https://github.com/hestat/lw-yara) Yara Ruleset for scanning Linux servers for shells, spamming, phishing and other webserver baddies
+- [**55**星][4d] [Go] [gyyyy/footprint](https://github.com/gyyyy/footprint) 个人笔记
+- [**55**星][2d] [Py] [fox-it/bloodhound-import](https://github.com/fox-it/bloodhound-import) Python based BloodHound data importer
- [**55**星][1y] [Py] [flo354/androick](https://github.com/flo354/androick)
- [**55**星][2y] [C++] [feliam/klee-taint](https://github.com/feliam/klee-taint) KLEE-TAINT - Klee with taint analysis support
-- [**55**星][3y] [Shell] [epinna/unusedpkg](https://github.com/epinna/unusedpkg) Diagnostic tool to find unused packages
- [**55**星][2y] [Py] [elevenpaths/dirtytooth-raspberrypi](https://github.com/elevenpaths/dirtytooth-raspberrypi) Exploit the hack for IOS 11.1.2 and earlier to collect leaked information.
+- [**55**星][2m] [PS] [eclypsium/screwed-drivers](https://github.com/eclypsium/screwed-drivers) a centralized source of knowledge which contains a list of drivers determined to be vulnerable as well as example code for how to use this kind of functionality.
- [**55**星][3m] [Py] [dogoncouch/logesp](https://github.com/dogoncouch/logesp) Open Source SIEM (Security Information and Event Management system).
-- [**55**星][6y] [C] [devzero2000/shellcoderhandbook](https://github.com/devzero2000/shellcoderhandbook) shellcoderhandbook source code : "The Shellcoder's Handbook: Discovering and Exploiting Security Holes"
-- [**55**星][13d] [C] [danielkrupinski/vac-hooks](https://github.com/danielkrupinski/vac-hooks) Hook WinAPI functions used by Valve Anti-Cheat. Log calls and intercept arguments & return values. DLL written in C.
-- [**55**星][2y] [C] [coolervoid/rootstealer](https://github.com/coolervoid/rootstealer) X11 trick to inject commands on root terminal.
-- [**55**星][17d] [PowerShell] [chef-koch/windows-10-hardening](https://github.com/chef-koch/windows-10-hardening) Windows 10 hardening guide without gimmicks
+- [**55**星][3y] [Shell] [docker-linux/kali-metasploit](https://github.com/docker-linux/kali-metasploit)
+- [**55**星][4d] [C] [danielkrupinski/vac-hooks](https://github.com/danielkrupinski/vac-hooks) Hook WinAPI functions used by Valve Anti-Cheat. Log calls and intercept arguments & return values. DLL written in C.
+- [**55**星][6m] [Java] [cognifide/aem-rules-for-sonarqube](https://github.com/cognifide/aem-rules-for-sonarqube) SonarQube plugin with set of rules detecting possible bugs and bad smells specific for AEM development.
+- [**55**星][5m] [Shell] [cignoraptor-ita/cignotrack](https://github.com/cignoraptor-ita/cignotrack) OSINT tool for testing privacy and social engineering vulnerability of organizations.
- [**55**星][3y] [Py] [chadillac/mdns_recon](https://github.com/chadillac/mdns_recon) Multicast DNS and DNS service discovery daemons deployed on various systems across the Internet are misconfigured and reply to queries targeting their unicast addresses, including requests from their WAN interface. These daemons could be leveraged by attackers for sensitive information disclosure and potentially used in DDoS campaigns for reflec…
- [**55**星][2y] [C++] [caseysmithrc/memmitm](https://github.com/caseysmithrc/memmitm) SSL In Memory Inspection - Proof Of Concept.
- [**55**星][3y] [Java] [bsmali4/checksql](https://github.com/bsmali4/checksql)
- [**55**星][2y] [Py] [brianloveswords/python-jws](https://github.com/brianloveswords/python-jws) python implementation of JSON Web Signatures
-- [**55**星][2y] [Java] [bigsizeme/burplugin-java-rce](https://github.com/bigsizeme/burplugin-java-rce) ******本软件仅限用于学习交流禁止用于任何非法行为****** 本版本支持elasticsearch java语言远程命令执行及文件上传 elasticsearchgroov语言远程命令执行及文件上传 struts2-005、struts2-009、struts2-013、struts2-016、struts2-019、struts2-020、struts2-devmode、 struts2-032、struts2-033、struts2-037、struts2-045、struts2-048、struts2-052 除struts2-053全部RCE漏洞验证并支持批量验证。 Struts2漏洞验证需要python环境并需要相关类库支持.点击python按钮初始化初始化python…
- [**55**星][3y] [C] [bazad/physmem](https://github.com/bazad/physmem) Local privilege escalation through macOS 10.12.1 via CVE-2016-1825 or CVE-2016-7617.
- [**55**星][5m] [basketwill/z0bpctools](https://github.com/basketwill/z0bpctools) 一个windows反汇编工具,界面风格防OllyDbg 利用业余开发了一款类似仿OLlyDbg界面的 IDA静态反编译工具,目前是1.0版本,功能不是很强大但是基本功能有了
+- [**55**星][4y] [Py] [az0ne/python_backdoor](https://github.com/az0ne/python_backdoor) 过360主动防御360杀毒以前99%杀软的python后门
- [**55**星][4y] [Py] [az0ne/jboss_autoexploit](https://github.com/az0ne/jboss_autoexploit) JBoss JMXInvokerServlet JMXInvoker 0.3 - Remote Command Execution 漏洞批量检测
+- [**55**星][9m] [Py] [attackanddefencesecuritylab/ad_webscanner](https://github.com/attackanddefencesecuritylab/ad_webscanner) AD工作室精心研发漏洞安全扫描器
- [**55**星][7y] [Py] [antitree/manitree](https://github.com/antitree/manitree) AndroidManifest.xml security auditor
- [**55**星][5y] [C] [anestisb/melkor-android](https://github.com/anestisb/melkor-android) An Android port of the melkor ELF fuzzer
+- [**55**星][2y] [Py] [ahm3dhany/ids-evasion](https://github.com/ahm3dhany/ids-evasion) Evading Snort Intrusion Detection System.
- [**55**星][4y] [Py] [ahhh/ntp_trojan](https://github.com/ahhh/ntp_trojan) Reverse NTP remote access trojan in python, for penetration testers
- [**55**星][3y] [abatchy17/introduction-to-manual-backdooring](https://github.com/abatchy17/introduction-to-manual-backdooring) Executables created while writing "Introduction to Manual Backdooring".
- [**55**星][3m] [Py] [5alt/zeroscan](https://github.com/5alt/zeroscan) ZeroScan is a tool that auto gathers subdomains and scan ports
-- [**54**星][19d] [victorqribeiro/bruteforcetv](https://github.com/victorqribeiro/bruteforcetv) Let's brute force this hotel's tv.
-- [**54**星][9d] [xairy/ubuntu-hardening](https://github.com/xairy/ubuntu-hardening) Random tips on how to improve security of Ubuntu Desktop
+- [**54**星][] [Py] [dhondta/sploitkit](https://github.com/dhondta/sploitkit) Toolkit for building Metasploit-like consoles
+- [**54**星][23d] [CSS] [gh0stkey/ahrid](https://github.com/gh0stkey/ahrid) AHRID - Analysis Hacker's Real-ID Platform 黑客攻击画像分析系统
+- [**54**星][25d] [Swift] [chengluffy/shadowsocksfree](https://github.com/chengluffy/shadowsocksfree) Try Yourself.
+- [**54**星][7m] [C++] [mozillasecurity/libfuzzer-python-bridge](https://github.com/mozillasecurity/libfuzzer-python-bridge) A Python3 bridge for implementing custom libFuzzer mutators
+- [**54**星][3m] [Shell] [snail007/goproxy-heroku](https://github.com/snail007/goproxy-heroku) goproxy heroku 一键部署套装,把heroku变为免费的http(s)\socks5代理,搜索学习资料。
+- [**54**星][4y] [Py] [ryhanson/keyslack](https://github.com/ryhanson/keyslack) Slack client used to encrypt/decrypt and send/receive Keybase PGP messages through a Slack private group.
+- [**54**星][11d] [xairy/ubuntu-hardening](https://github.com/xairy/ubuntu-hardening) Random tips on how to improve security of Ubuntu Desktop
+- [**54**星][1y] [Py] [secwiki/ctf-hub](https://github.com/secwiki/ctf-hub) CTF 题目列表
+- [**54**星][3y] [Java] [giovannicolonna/msfvenom-backdoor-android](https://github.com/giovannicolonna/msfvenom-backdoor-android) Android backdoored app, improved source code of msfvenom android .apk
- [**54**星][4y] [HTML] [konklone/cdns-to-https](https://github.com/konklone/cdns-to-https) (Retired.) Testing HTTP->HTTPS redirects for CDNs.
-- [**54**星][9d] [fatihh92/hackthebox-writeups](https://github.com/fatihh92/hackthebox-writeups)
-- [**54**星][1y] [Py] [thelsa/ueditor-getshell](https://github.com/thelsa/ueditor-getshell) ueditor .net getshell
+- [**54**星][5d] [fatihh92/hackthebox-writeups](https://github.com/fatihh92/hackthebox-writeups)
- [**54**星][1y] [PHP] [ahref-group/superpanel](https://github.com/ahref-group/superpanel) A new shadowsocks panel based on ThinkPHP
+- [**54**星][16d] [Py] [kkamagui/napper-for-tpm](https://github.com/kkamagui/napper-for-tpm) TPM vulnerability checking tool for CVE-2018-6622. This tool will be published at Black Hat Asia 2019 and Black Hat Europe 2019
+- [**54**星][18d] [Java] [cuyler36/ghidra-gamecube-loader](https://github.com/cuyler36/ghidra-gamecube-loader) A Nintendo GameCube binary loader for Ghidra
- [**54**星][2m] [HTML] [aravinthpanch/rssi](https://github.com/aravinthpanch/rssi) Indoor localisation using RSSI. RSSI is received signal strength indicator in IEEE 802.11 beacon packet to announce the presence of WiFi.This tool was built to study & visualize the data collected in the experiments. This was done at Telecommunications Network Group (TKN), Berlin as part of EVARILOS.
- [**54**星][4y] [Py] [geovation/wifispy](https://github.com/geovation/wifispy) Sniff Wifi traffic, log device addresses.
-- [**54**星][14d] [Py] [trailofbits/polyfile](https://github.com/trailofbits/polyfile) A utility for mapping the file formats embedded within a single file
-- [**54**星][7d] [C] [cisco/mercury](https://github.com/cisco/mercury) network fingerprinting and packet metadata capture
+- [**54**星][16d] [TS] [ediardo/kmdr-cli](https://github.com/ediardo/kmdr-cli) 🧠The ultimate CLI learning tool for explaining commands from your terminal
+- [**54**星][27d] [HTML] [usnistgov/acvp](https://github.com/usnistgov/acvp) Industry Working Group on Automated Cryptographic Algorithm Validation
- [**54**星][5y] [Py] [yahooarchive/pyioce](https://github.com/YahooArchive/PyIOCe) Python IOC Editor
- [**54**星][2m] [C#] [southpolenator/sharpdebug](https://github.com/southpolenator/SharpDebug) C# debugging automation tool
-- [**54**星][5m] [Py] [re4lity/pocorexp](https://github.com/re4lity/PoCorExp) PoC or Exp Of Vulnerability
- [**54**星][1y] [Py] [k4yt3x/defense-matrix](https://github.com/k4yt3x/defense-matrix) Express security essentials deployment for Linux Servers
- [**54**星][2y] [Java] [graxcode/java-unpacker](https://github.com/GraxCode/java-unpacker) Extract Crypted Jar Archives
- [**54**星][1y] [Py] [zardus/idalink](https://github.com/zardus/idalink) 使用IDA API时保证不卡界面. 在后台启动与界面脱离IDA CLI会话, 再使用RPyC连接界面
-- [**54**星][2y] [PowerShell] [whitehat-zero/powenum](https://github.com/whitehat-zero/powenum) Executes common PowerSploit Powerview functions then combines output into a spreadsheet for easy analysis.
-- [**54**星][13d] [Java] [vy/hrrs](https://github.com/vy/hrrs) Record, transform, and replay HTTP requests in Java EE and Spring applications.
+- [**54**星][6m] [C++] [x64dbg/snowman](https://github.com/x64dbg/snowman) Snowman Decompiler for x64dbg (LOOKING FOR MAINTAINER)
+- [**54**星][2y] [PS] [whitehat-zero/powenum](https://github.com/whitehat-zero/powenum) Executes common PowerSploit Powerview functions then combines output into a spreadsheet for easy analysis.
+- [**54**星][10d] [Py] [w181496/ctf](https://github.com/w181496/ctf) My CTF writeups
+- [**54**星][15d] [Java] [vy/hrrs](https://github.com/vy/hrrs) Record, transform, and replay HTTP requests in Java EE and Spring applications.
- [**54**星][1y] [Py] [vulnerscom/vulners-scanner](https://github.com/vulnerscom/vulners-scanner) Vulnerability scanner based on vulners.com audit API
- [**54**星][1y] [JS] [userlandkernel/jailbreakme-unified](https://github.com/userlandkernel/jailbreakme-unified) Framework for iOS browser exploitation to kernel privileges and rootfs remount
-- [**54**星][3m] [uniking/dingding](https://github.com/uniking/dingding) 免root远程钉钉打卡,支持wifi和gps定位,仅支持android系统。本项目出于学习目的,仅用于学习玩耍,请于24小时后自行删除。xposed, crack,package,dingtalk,remote control
-- [**54**星][22d] [Py] [ucsb-seclab/agrigento](https://github.com/ucsb-seclab/agrigento) Agrigento is a tool to identify privacy leaks in Android apps by performing black-box differential analysis on the network traffic.
-- [**54**星][5y] [C++] [tyranid/exploitdotnetdcom](https://github.com/tyranid/exploitdotnetdcom) A tool to exploit .NET DCOM for EoP and RCE. Is fixed in latest versions of the .NET.
-- [**54**星][5m] [PowerShell] [tasox/logrm](https://github.com/tasox/logrm) LogRM is a post exploitation powershell script which it uses windows event logs to gather information about internal network
+- [**54**星][24d] [Py] [ucsb-seclab/agrigento](https://github.com/ucsb-seclab/agrigento) Agrigento is a tool to identify privacy leaks in Android apps by performing black-box differential analysis on the network traffic.
+- [**54**星][1y] [Shell] [thelinuxchoice/tweetshell](https://github.com/thelinuxchoice/tweetshell) Multi-thread Twitter BruteForcer in Shell Script
+- [**54**星][5m] [PS] [tasox/logrm](https://github.com/tasox/logrm) LogRM is a post exploitation powershell script which it uses windows event logs to gather information about internal network
- [**54**星][2y] [C] [tandasat/fu_hypervisor](https://github.com/tandasat/fu_hypervisor) A hypervisor hiding user-mode memory using EPT
-- [**54**星][8m] [Perl] [sourceperl/mbtget](https://github.com/sourceperl/mbtget) A simple modbus/TCP client write in pure Perl.
- [**54**星][8y] [C] [soulxu/kvmsample](https://github.com/soulxu/kvmsample) minivm based on kvm
- [**54**星][2y] [C++] [sisoma2/shellcodeloader](https://github.com/sisoma2/shellcodeloader) Small tool to load shellcodes or PEs to analyze them
-- [**54**星][2y] [Py] [shaanen/osint-combiner](https://github.com/shaanen/osint-combiner) Combining OSINT sources in Elastic Stack
- [**54**星][3y] [C++] [rwfpl/rewolf-msi-exploit](https://github.com/rwfpl/rewolf-msi-exploit) MSI NTIOLib/WinIO Local Privilege Escalation exploit
- [**54**星][4y] [Py] [rodionovd/cuckoo-osx-analyzer](https://github.com/rodionovd/cuckoo-osx-analyzer) An OS X analyzer for Cuckoo Sandbox project
- [**54**星][2y] [C++] [raymon-tian/wfpfirewall](https://github.com/raymon-tian/wfpfirewall) 基于WFP(Windows Filter Platform)的个人防火墙系统
- [**54**星][2m] [HTML] [r3kapig/writeup](https://github.com/r3kapig/writeup) CTF challenges writeup
- [**54**星][8m] [MATLAB] [professormahi/ctf](https://github.com/professormahi/ctf) CTF (Capture The Flag Writeups and Tools)
+- [**54**星][7d] [Ruby] [picatz/shodanz](https://github.com/picatz/shodanz)
+- [**54**星][3y] [Py] [patois/drgadget](https://github.com/patois/drgadget) 开发和分析ROP链
- [**54**星][3y] [C] [passingtheknowledge/ganxo](https://github.com/passingtheknowledge/ganxo) An opensource API hooking framework
-- [**54**星][2y] [Objective-C] [objective-see/aurevoir](https://github.com/objective-see/aurevoir) View and remove notification messages from Apple's "Notification Database"
+- [**54**星][2y] [ObjC] [objective-see/aurevoir](https://github.com/objective-see/aurevoir) View and remove notification messages from Apple's "Notification Database"
- [**54**星][5y] [Py] [nnewsom/webbies](https://github.com/nnewsom/webbies) Collection of tools for web recon and enumeration.
- [**54**星][2y] [Py] [nezza/scada-stuff](https://github.com/nezza/scada-stuff) A collection of scripts & tools for reverse-engineering & hacking SCADA/ICS devices.
+- [**54**星][2m] [netstalking-core/netstalking-osint](https://github.com/netstalking-core/netstalking-osint) Коллекция материалов по OSINT для нетсталкинга
- [**54**星][1y] [Go] [netflix-skunkworks/aws-metadata-proxy](https://github.com/netflix-skunkworks/aws-metadata-proxy) AWS Metadata Proxy for protection against SSRF
- [**54**星][9y] [Emacs Lisp] [nelhage/reverse-android](https://github.com/nelhage/reverse-android) Reverse-engineering tools for Android applications
- [**54**星][3y] [Rust] [nccgroup/assethook](https://github.com/nccgroup/assethook) LD_PRELOAD magic for Android's AssetManager
-- [**54**星][2y] [myndtt/ctf-site](https://github.com/myndtt/ctf-site) 介绍一些CTF训练的站点
+- [**54**星][9m] [Shell] [mzpqnxow/embedded-toolkit](https://github.com/mzpqnxow/embedded-toolkit) Prebuilt statically linked gdbserver and gawk executables for Linux on ARMEL, MIPS/MIPSEL and more platforms for use on embedded devices, including for systems with many different ABIs (including more than 20 statically linked gdbserver executables)
- [**54**星][10m] [muhammd/awesome-pentest](https://github.com/muhammd/awesome-pentest) Awesome Penetration Testing A collection of awesome penetration testing resources
- [**54**星][3y] [Perl] [msimerson/sentry](https://github.com/msimerson/sentry) Bruteforce attack blocker (ssh, FTP, SMTP, and more)
- [**54**星][3y] [Py] [mseclab/burp-pyjfuzz](https://github.com/mseclab/burp-pyjfuzz) Burp Suite plugin which implement PyJFuzz for fuzzing web application.
- [**54**星][2y] [Java] [mirsamantajbakhsh/onionharvester](https://github.com/mirsamantajbakhsh/onionharvester) A small TOR Onion Address harvester for checking if the address is available or not.
-- [**54**星][2y] [PowerShell] [microsoftedge/dev.microsoftedge.com-vms](https://github.com/microsoftedge/dev.microsoftedge.com-vms) Scripts used to generate the free VMs available at
+- [**54**星][1y] [C] [mikeryan/uberducky](https://github.com/mikeryan/uberducky) 将Ubertooth转换为通过BLE触发的无线USB橡皮鸭
+- [**54**星][3m] [mikerah/awesome-privacy-on-blockchains](https://github.com/mikerah/awesome-privacy-on-blockchains) A curated list of privacy on blockchains resources
+- [**54**星][2y] [PS] [microsoftedge/dev.microsoftedge.com-vms](https://github.com/microsoftedge/dev.microsoftedge.com-vms) Scripts used to generate the free VMs available at
- [**54**星][1m] [Py] [matt-kempster/mips_to_c](https://github.com/matt-kempster/mips_to_c) A MIPS decompiler.
+- [**54**星][2y] [Py] [matejbasic/pythonscrapybasicsetup](https://github.com/matejbasic/pythonscrapybasicsetup) Basic setup with random user agents and IP addresses for Python Scrapy Framework.
- [**54**星][6m] [Py] [masood-m/yalih](https://github.com/masood-m/yalih) YALIH (Yet Another Low Interaction Honeyclient) is a low Interaction Client honeypot designed to detect malicious websites through signature, anomaly and pattern matching techniques
- [**54**星][5y] [C++] [malwaretech/fsthook](https://github.com/malwaretech/fsthook) A library for intercepting native functions by hooking KiFastSystemCall
-- [**54**星][2y] [Shell] [lanjelot/twisted-honeypots](https://github.com/lanjelot/twisted-honeypots) SSH, FTP and Telnet honeypots based on Twisted
+- [**54**星][3y] [C#] [lontivero/vinchuca](https://github.com/lontivero/vinchuca) A resilient peer-to-peer botnet agent in .NET
+- [**54**星][2y] [Shell] [letssudormrf/ssr-bbr-docker](https://github.com/letssudormrf/ssr-bbr-docker) Dockerfile for ssr+bbr_powered
+- [**54**星][12m] [Py] [klsecservices/s7scan](https://github.com/klsecservices/s7scan) The tool for enumerating Siemens S7 PLCs through TCP/IP or LLC network
- [**54**星][6m] [C#] [klionsec/bypassav-allthings](https://github.com/klionsec/bypassav-allthings)
-- [**54**星][3m] [Objective-C] [julbouln/ice40_eink_controller](https://github.com/julbouln/ice40_eink_controller) ice40 FPGA eink controller
+- [**54**星][3m] [ObjC] [julbouln/ice40_eink_controller](https://github.com/julbouln/ice40_eink_controller) ice40 FPGA eink controller
- [**54**星][4y] [Batchfile] [islamadel/bat2exe](https://github.com/islamadel/bat2exe) Automatically exported from code.google.com/p/bat2exe
- [**54**星][9y] [Shell] [ioerror/crlwatch](https://github.com/ioerror/crlwatch) Collect, watch, and analyze SSL/TLS CRL data
- [**54**星][2y] [Py] [heurs/parsentfs](https://github.com/heurs/parsentfs) Simple NTFS crawler.
-- [**54**星][12d] [YARA] [hestat/lw-yara](https://github.com/hestat/lw-yara) Yara Ruleset for scanning Linux servers for shells, spamming, phishing and other webserver baddies
- [**54**星][6y] [Shell] [hclx/dell_power_spoofer](https://github.com/hclx/dell_power_spoofer) A MSP430 based design spoofing dell power adapter identification
- [**54**星][7m] [Py] [hannob/superfishy](https://github.com/hannob/superfishy) Archive of software and other data involved in the Superfish / Komodia incident
-- [**54**星][8m] [JS] [hamz-a/frida-android-libbinder](https://github.com/hamz-a/frida-android-libbinder) PoC Frida script to view Android libbinder traffic
- [**54**星][5y] [Go] [hailocab/logslam](https://github.com/hailocab/logslam) A lightweight lumberjack protocol compliant logstash indexer
-- [**54**星][7m] [C] [gosecure/dllpasswordfilterimplant](https://github.com/gosecure/dllpasswordfilterimplant) DLL Password Filter Implant with Exfiltration Capabilities
+- [**54**星][3m] [Py] [gray-panda/grayrepo](https://github.com/gray-panda/grayrepo) Personal repository for all ctf related stuffs
+- [**54**星][8m] [C] [gosecure/dllpasswordfilterimplant](https://github.com/gosecure/dllpasswordfilterimplant) DLL Password Filter Implant with Exfiltration Capabilities
- [**54**星][4m] [HTML] [google/security-crawl-maze](https://github.com/google/security-crawl-maze) Security Crawl Maze is a comprehensive testbed for web security crawlers. It contains pages representing many ways in which one can link resources from a valid HTML document.
+- [**54**星][4y] [Go] [gehaxelt/ds_store](https://github.com/gehaxelt/ds_store) GO - Minimal parser for .DS_Store files
+- [**54**星][11d] [JS] [fedora-infra/asknot-ng](https://github.com/fedora-infra/asknot-ng) What can I do for $ORGANIZATION?
- [**54**星][1y] [JS] [enovella/androidtrainings](https://github.com/enovella/androidtrainings) Mobile security trainings based on android
- [**54**星][5m] [Py] [dr0op/bufferfly](https://github.com/dr0op/bufferfly) 攻防演习/渗透测试资产处理小工具,对攻防演习/渗透测试前的信息搜集到的大批量资产/域名进行存活检测、获取标题头、语料提取、常见web端口检测等。
-- [**54**星][3y] [Shell] [docker-linux/kali-metasploit](https://github.com/docker-linux/kali-metasploit)
- [**54**星][1y] [cujanovic/subdomain-bruteforce-list](https://github.com/cujanovic/subdomain-bruteforce-list) subdomain bruteforce list
- [**54**星][8y] [Py] [cranklin/python-virus](https://github.com/cranklin/python-virus) This is an educational computer virus written in Python to demonstrate how replication is done.
-- [**54**星][9m] [Py] [circl/potiron](https://github.com/circl/potiron) Potiron - Normalize, Index and Visualize Network Capture
-- [**54**星][5m] [Shell] [cignoraptor-ita/cignotrack](https://github.com/cignoraptor-ita/cignotrack) OSINT tool for testing privacy and social engineering vulnerability of organizations.
+- [**54**星][10m] [Py] [circl/potiron](https://github.com/circl/potiron) Potiron - Normalize, Index and Visualize Network Capture
- [**54**星][2y] [C++] [census/windows_10_rs2_rs3_exploitation_primitives](https://github.com/census/windows_10_rs2_rs3_exploitation_primitives) Windows 10 RS2/RS3 exploitation primitives based on the OffensiveCon 2018 talk
- [**54**星][3y] [Assembly] [casperreverser/casperreverse](https://github.com/casperreverser/casperreverse) Here's a quick rundown of how I reversed the Casper API (
-- [**54**星][2y] [PowerShell] [byt3bl33d3r/invoke-autoit](https://github.com/byt3bl33d3r/invoke-autoit) Loads the AutoIt DLL and PowerShell assemblies into memory and executes the specified keystrokes
+- [**54**星][2y] [PS] [byt3bl33d3r/invoke-autoit](https://github.com/byt3bl33d3r/invoke-autoit) Loads the AutoIt DLL and PowerShell assemblies into memory and executes the specified keystrokes
+- [**54**星][9m] [C] [bsidessf/ctf-2019-release](https://github.com/bsidessf/ctf-2019-release) BSidesSF CTF 2019 release
- [**54**星][7m] [Clojure] [bronsa/tools.decompiler](https://github.com/bronsa/tools.decompiler) A decompiler for clojure, in clojure
-- [**54**星][6m] [Py] [bao7uo/dp_crypto](https://github.com/bao7uo/dp_crypto) Base64-based encryption oracle exploit for CVE-2017-9248 (Telerik UI for ASP.NET AJAX dialog handler)
- [**54**星][4y] [JS] [az0ne/simple_zoomeye](https://github.com/az0ne/simple_zoomeye) 一个还正在完善的项目,采用分布式python扫描全国的HTTP服务
-- [**54**星][4y] [Py] [az0ne/python_backdoor](https://github.com/az0ne/python_backdoor) 过360主动防御360杀毒以前99%杀软的python后门
- [**54**星][1y] [Self] [ayoul3/privesc](https://github.com/ayoul3/privesc) Privilege escalation tools on Mainframe
- [**54**星][3y] [Elm] [auth0-blog/elm-with-jwt-api](https://github.com/auth0-blog/elm-with-jwt-api)
-- [**54**星][9m] [Py] [attackanddefencesecuritylab/ad_webscanner](https://github.com/attackanddefencesecuritylab/ad_webscanner) AD工作室精心研发漏洞安全扫描器
- [**54**星][2y] [Py] [aserper/ddetect](https://github.com/aserper/ddetect) Simple DDE object detector
-- [**54**星][3m] [Java] [arloor/httpproxy](https://github.com/arloor/httpproxy) a netty-based http proxy that breaks the GFW。
- [**54**星][5y] [Java] [ajohnston9/ciscorouter](https://github.com/ajohnston9/ciscorouter) Tool for scanning Cisco router products over SSH
-- [**54**星][2y] [Py] [ahm3dhany/ids-evasion](https://github.com/ahm3dhany/ids-evasion) Evading Snort Intrusion Detection System.
-- [**54**星][2y] [Py] [afagarap/malware-classification](https://github.com/afagarap/malware-classification) Towards Building an Intelligent Anti-Malware System: A Deep Learning Approach using Support Vector Machine for Malware Classification
-- [**54**星][1y] [C#] [advancedhacker101/c-sharp-r.a.t-client](https://github.com/advancedhacker101/c-sharp-r.a.t-client) This is a c# client for the c# R.A.T server
+- [**54**星][2y] [Java] [5up3rc/weblogic_cmd](https://github.com/5up3rc/weblogic_cmd) weblogic t3 deserialization rce
- [**54**星][1y] [Py] [5alt/vulhint](https://github.com/5alt/vulhint) VulHint是辅助代码审计的 sublime text 3 插件
-- [**53**星][7m] [C++] [mozillasecurity/libfuzzer-python-bridge](https://github.com/mozillasecurity/libfuzzer-python-bridge) A Python3 bridge for implementing custom libFuzzer mutators
+- [**53**星][3d] [Shell] [al0ne/nginx_log_check](https://github.com/al0ne/nginx_log_check) Nginx日志安全分析脚本
+- [**53**星][6d] [Java] [sukaralin/cve-2019-2890](https://github.com/sukaralin/cve-2019-2890)
+- [**53**星][5y] [Py] [jeanphorn/common-password](https://github.com/jeanphorn/common-password) 字典生成脚本, 用python语言写成的可交互性的字典生成脚本。尤其适合社会工程学,当你收集到目标的具体信息后,你就可以通过这个脚本来智能化生成关于目标的字典。
+- [**53**星][7d] [Go] [shopify/voucher](https://github.com/shopify/voucher)
- [**53**星][11m] [Py] [mushorg/oschameleon](https://github.com/mushorg/oschameleon) OS Fingerprint Obfuscation for modern Linux Kernels
- [**53**星][9m] [Py] [moosedojo/spotter](https://github.com/moosedojo/spotter) Targeted Payload Execution
-- [**53**星][1y] [Py] [secwiki/ctf-hub](https://github.com/secwiki/ctf-hub) CTF 题目列表
-- [**53**星][28d] [Py] [0x90/wpsik](https://github.com/0x90/wpsik) WPS scan and pwn tool
-- [**53**星][3y] [PowerShell] [elevenpaths/telefonica-wannacry-filerestorer](https://github.com/elevenpaths/telefonica-wannacry-filerestorer) Tool to restore some WannaCry files which encryption weren't finish properly
-- [**53**星][3y] [Java] [giovannicolonna/msfvenom-backdoor-android](https://github.com/giovannicolonna/msfvenom-backdoor-android) Android backdoored app, improved source code of msfvenom android .apk
-- [**53**星][9m] [TypeScript] [pengchujin/onesubscribe](https://github.com/pengchujin/onesubscribe) ss ssr v2ray 订阅管理 node 后端
-- [**53**星][16d] [Java] [cuyler36/ghidra-gamecube-loader](https://github.com/cuyler36/ghidra-gamecube-loader) A Nintendo GameCube binary loader for Ghidra
-- [**53**星][9m] [Vue] [pengchujin/subscribevue](https://github.com/pengchujin/subscribevue) ss ssr v2ray 订阅管理 vue前端界面
-- [**53**星][10m] [Shell] [criteo/kerberos-docker](https://github.com/criteo/kerberos-docker) Run kerberos environment in docker containers
-- [**53**星][19d] [Py] [hamz-a/frida-android-helper](https://github.com/hamz-a/frida-android-helper) Frida Android utilities
+- [**53**星][24d] [Shell] [threatexpress/pasties](https://github.com/threatexpress/pasties) A collection of random bits of information common to many individual penetration tests, red teams, and other assessments
+- [**53**星][30d] [Py] [0x90/wpsik](https://github.com/0x90/wpsik) WPS scan and pwn tool
+- [**53**星][3y] [PS] [elevenpaths/telefonica-wannacry-filerestorer](https://github.com/elevenpaths/telefonica-wannacry-filerestorer) Tool to restore some WannaCry files which encryption weren't finish properly
+- [**53**星][22d] [Java] [thisislibra/genesis](https://github.com/thisislibra/genesis) A framework to generate unique test cases based on code snippets to test techniques
+- [**53**星][11m] [Shell] [criteo/kerberos-docker](https://github.com/criteo/kerberos-docker) Run kerberos environment in docker containers
+- [**53**星][21d] [Py] [hamz-a/frida-android-helper](https://github.com/hamz-a/frida-android-helper) Frida Android utilities
+- [**53**星][2m] [mohitkhemchandani/oscp-complete-guide](https://github.com/mohitkhemchandani/oscp-complete-guide) How to prepare for OSCP complete guide
+- [**53**星][4d] [JS] [bazzite/nuxt-netlify](https://github.com/bazzite/nuxt-netlify) Dynamically generate _headers and _redirects files for Netlify in your Nuxt.js projects
+- [**53**星][1y] [Py] [synacktiv-contrib/modmobmap](https://github.com/Synacktiv-contrib/Modmobmap) Map 2G/3G/4G and more cellular networks in real live with a simple smart phone, pretty much like osmocomBB monitoring feature.
- [**53**星][8m] [Py] [synacktiv-contrib/stuffz](https://github.com/Synacktiv-contrib/stuffz) Repository containing many useful scripts
+- [**53**星][3y] [Py] [ghostlulzhacks/rolljam](https://github.com/ghostlulzhacks/rolljam) rolljam
- [**53**星][2y] [HTML] [jm33-m0/gfw_scripts](https://github.com/jm33-m0/gfw_scripts) added shadowsocks plugin for gee 4
+- [**53**星][2y] [fsecurelabs/defcon25_uac_workshop](https://github.com/FSecureLABS/defcon25_uac_workshop) UAC 0Day all day!
+- [**53**星][1m] [b-mueller/awesome-mythx-smart-contract-security-tools](https://github.com/b-mueller/awesome-mythx-smart-contract-security-tools) A curated list of resources and tools for the MythX smart contract security API
- [**53**星][2y] [Java] [zyrikby/fsquadra](https://github.com/zyrikby/fsquadra) Fast detection of repackaged Android applications based on the comparison of resource files included into the package.
- [**53**星][4y] [Py] [zenfish/ipmi](https://github.com/zenfish/ipmi) IPMI stuff from DARPA work
-- [**53**星][3m] [C#] [z3prover/firewallchecker](https://github.com/z3prover/firewallchecker) A self-contained firewall checker
+- [**53**星][7d] [C#] [z3prover/firewallchecker](https://github.com/z3prover/firewallchecker) A self-contained firewall checker
- [**53**星][9m] [Shell] [xalfie/nix-auditor](https://github.com/xalfie/nix-auditor) Nix Audit made easier (RHEL, CentOS)
-- [**53**星][6m] [C++] [x64dbg/snowman](https://github.com/x64dbg/snowman) Snowman Decompiler for x64dbg (LOOKING FOR MAINTAINER)
-- [**53**星][19d] [C] [watf-team/watf-bank](https://github.com/watf-team/watf-bank) WaTF Bank - What a Terrible Failure Mobile Banking Application for Android and iOS
+- [**53**星][1m] [Go] [wrfly/gus-proxy](https://github.com/wrfly/gus-proxy) "打一枪换一个地方" 一个HTTP代理
- [**53**星][1y] [Shell] [w3c/device-memory](https://github.com/w3c/device-memory) Device Memory
-- [**53**星][8d] [Py] [w181496/ctf](https://github.com/w181496/ctf) My CTF writeups
-- [**53**星][9m] [PowerShell] [vtagion/scripts](https://github.com/vtagion/scripts)
-- [**53**星][7y] [Visual Basic] [vbgamer45/semi-vb-decompiler](https://github.com/vbgamer45/semi-vb-decompiler) Partial decompiler for Visual Basic. Code source of file struture infomation.
+- [**53**星][9m] [PS] [vtagion/scripts](https://github.com/vtagion/scripts)
+- [**53**星][7y] [Visual Basic .NET] [vbgamer45/semi-vb-decompiler](https://github.com/vbgamer45/semi-vb-decompiler) Partial decompiler for Visual Basic. Code source of file struture infomation.
- [**53**星][2y] [Py] [uzetta27/easyrop](https://github.com/uzetta27/easyrop) A Python tool to generate ROP chains
-- [**53**星][6m] [Py] [turr0n/firebase](https://github.com/turr0n/firebase) Exploiting misconfigured firebase databases
- [**53**星][5y] [Java] [thuxnder/androiddevice.info](https://github.com/thuxnder/androiddevice.info) Android app collecting device information and submiting it to
-- [**53**星][1y] [Shell] [thelinuxchoice/tweetshell](https://github.com/thelinuxchoice/tweetshell) Multi-thread Twitter BruteForcer in Shell Script
-- [**53**星][10d] [Py] [taokong/group_normalization](https://github.com/taokong/group_normalization) pytorch implementation of group normalization in
+- [**53**星][12d] [Py] [taokong/group_normalization](https://github.com/taokong/group_normalization) pytorch implementation of group normalization in
+- [**53**星][1m] [Rust] [str4d/ire](https://github.com/str4d/ire) I2P router implementation in Rust
+- [**53**星][2y] [Py] [spritz-research-group/ctf-writeups](https://github.com/spritz-research-group/ctf-writeups) SPRITZ plays CTFs! Writeups by spritzers
+- [**53**星][6d] [Py] [snowflakedb/snowalert](https://github.com/snowflakedb/snowalert) Security Analytics Using The Snowflake Data Warehouse
- [**53**星][5m] [Py] [sneakerhax/pyphisher](https://github.com/sneakerhax/pyphisher) A simple python tool for phishing
-- [**53**星][2y] [rehints/blackhat_2017](https://github.com/rehints/blackhat_2017) Betraying the BIOS: Where the Guardians of the BIOS are Failing
-- [**53**星][2y] [PowerShell] [powershell/gpregistrypolicy](https://github.com/powershell/gpregistrypolicy)
-- [**53**星][1y] [PowerShell] [pldmgg/winadmincenterps](https://github.com/pldmgg/winadmincenterps) Copy of Windows Admin Center (
-- [**53**星][30d] [Ruby] [picatz/shodanz](https://github.com/picatz/shodanz)
+- [**53**星][1m] [JS] [secgroup/flower](https://github.com/secgroup/flower) TCP flow analyzer with sugar for A/D CTF
+- [**53**星][4y] [C++] [scadacs/plcinject](https://github.com/scadacs/plcinject)
+- [**53**星][1m] [Py] [reorx/python-terminal-color](https://github.com/reorx/python-terminal-color) Drop-in single file library for printing color in terminal
+- [**53**星][2y] [PS] [powershell/gpregistrypolicy](https://github.com/powershell/gpregistrypolicy)
- [**53**星][12m] [Py] [payatu/cve-2018-14442](https://github.com/payatu/cve-2018-14442) PoC for Foxit Reader CVE-2018-14442
-- [**53**星][3y] [Py] [patois/drgadget](https://github.com/patois/drgadget) 开发和分析ROP链
-- [**53**星][1m] [Visual Basic] [outflanknl/scripts](https://github.com/outflanknl/scripts) Small scripts that make life better
+- [**53**星][3d] [C] [outscale/packetgraph](https://github.com/outscale/packetgraph) Packetgraph library is a collection of network bricks you can connect to form a network graph.
- [**53**星][6m] [JS] [ollseg/ttt-ext](https://github.com/ollseg/ttt-ext) Chrome extension to aid in finding DOMXSS by simple taint analysis of string values.
+- [**53**星][8m] [Py] [nwmonster/applysig](https://github.com/nwmonster/applysig) Apply IDA FLIRT signatures for Ghidra
- [**53**星][3y] [Shell] [nvssks/android-responder](https://github.com/nvssks/android-responder) Scripts for running Responder.py in an Android (rooted) device.
- [**53**星][6y] [JS] [niegowski/node-daemonize2](https://github.com/niegowski/node-daemonize2) Node module for easy creation of daemons for Node 0.8.x and above
- [**53**星][3m] [Shell] [nameles-org/nameles](https://github.com/nameles-org/nameles) Open source entropy based invalid traffic detection and pre-bid filtering.
- [**53**星][5m] [Py] [n0fate/ichainbreaker](https://github.com/n0fate/ichainbreaker) Breaking the iCloud Keychain Artifacts
- [**53**星][2y] [C++] [mq1n/dllthreadinjectiondetector](https://github.com/mq1n/dllthreadinjectiondetector)
- [**53**星][2y] [Java] [modzero/modjoda](https://github.com/modzero/modjoda) Java Object Deserialization on Android
-- [**53**星][1y] [C] [mikeryan/uberducky](https://github.com/mikeryan/uberducky) 将Ubertooth转换为通过BLE触发的无线USB橡皮鸭
- [**53**星][2y] [Shell] [mempodippy/snodew](https://github.com/mempodippy/snodew) PHP root (suid) reverse shell
- [**53**星][1y] [Py] [m4ll0k/icloudbrutter](https://github.com/m4ll0k/icloudbrutter) AppleID Bruteforce
- [**53**星][4y] [C] [lgeek/dynamorio_pin_escape](https://github.com/lgeek/dynamorio_pin_escape)
-- [**53**星][4y] [PHP] [kulisu/metasploit-pro-trial-grabber](https://github.com/kulisu/metasploit-pro-trial-grabber) This is a PHP command-line script to auto-grab the metasploit 14-DAYs pro trial key.
+- [**53**星][5y] [PHP] [kulisu/metasploit-pro-trial-grabber](https://github.com/kulisu/metasploit-pro-trial-grabber) This is a PHP command-line script to auto-grab the metasploit 14-DAYs pro trial key.
- [**53**星][7y] [C] [kmcallister/alameda](https://github.com/kmcallister/alameda) Linux kernel JIT spray for SMEP / KERNEXEC bypass
- [**53**星][4y] [Py] [juliocesarfort/netscreen-shodan-scanner](https://github.com/juliocesarfort/netscreen-shodan-scanner) A SHODAN/Censys + Paramiko scanner to check for backdoored Internet-facing Juniper ScreenOS devices
-- [**53**星][2y] [jkpang/timliu-ios](https://github.com/jkpang/timliu-ios) iOS开发常用三方库、插件、知名博客等等
-- [**53**星][2y] [objective-c] [iabem97/securityd-racer2](https://github.com/iabem97/securityd-racer2) PoC vulnerability in securityd
-- [**53**星][9d] [C++] [hasherezade/vidi](https://github.com/hasherezade/vidi) ViDi Visual Disassembler (experimental)
+- [**53**星][9m] [Java] [jogolden/ghidraps4loader](https://github.com/jogolden/ghidraps4loader) A Ghidra loader for PlayStation 4 binaries.
+- [**53**星][5m] [C++] [jesseemond/cheat-and-gin](https://github.com/jesseemond/cheat-and-gin) C++ cheat engine (memory scanner)
+- [**53**星][2y] [ObjC] [iabem97/securityd-racer2](https://github.com/iabem97/securityd-racer2) PoC vulnerability in securityd
+- [**53**星][3m] [Shell] [hirbodbehnam/shadowsocks-cloak-installer](https://github.com/hirbodbehnam/shadowsocks-cloak-installer) A one-key script to setup Cloak plugin with Shadowsocks on your server
+- [**53**星][11d] [C++] [hasherezade/vidi](https://github.com/hasherezade/vidi) ViDi Visual Disassembler (experimental)
- [**53**星][5y] [C++] [hackedteam/core-win32](https://github.com/hackedteam/core-win32) RCS Agent for Windows (32bit)
- [**53**星][2y] [Py] [h-j-13/malicious_domain_whois](https://github.com/h-j-13/malicious_domain_whois)
- [**53**星][2y] [C#] [guardicore/azure_password_harvesting](https://github.com/guardicore/azure_password_harvesting) Plaintext Password harvesting from Azure Windows VMs
-- [**53**星][2m] [Py] [gray-panda/grayrepo](https://github.com/gray-panda/grayrepo) Personal repository for all ctf related stuffs
- [**53**星][1m] [C] [gluster/gluster-block](https://github.com/gluster/gluster-block) A framework for gluster block storage
- [**53**星][5y] [C#] [glmcdona/functionhacker](https://github.com/glmcdona/functionhacker) Maintaining an official release at
- [**53**星][3y] [Py] [gideonn/insta-gallery-downloader](https://github.com/gideonn/insta-gallery-downloader) This is a bot to download all your instagram gallery pictures in a single folder
-- [**53**星][4y] [Go] [gehaxelt/ds_store](https://github.com/gehaxelt/ds_store) GO - Minimal parser for .DS_Store files
+- [**53**星][4y] [PHP] [gfoss/phpmyadmin_honeypot](https://github.com/gfoss/phpmyadmin_honeypot)
- [**53**星][2y] [g-solaria/osintforpentests](https://github.com/g-solaria/osintforpentests) Slides from my ShellCon Talk, OSINT for Pen Tests, given 10/19.
-- [**53**星][9m] [Py] [fox-it/bloodhound-import](https://github.com/fox-it/bloodhound-import) Python based BloodHound data importer
-- [**53**星][9d] [JS] [fedora-infra/asknot-ng](https://github.com/fedora-infra/asknot-ng) What can I do for $ORGANIZATION?
+- [**53**星][2y] [Shell] [evyatarmeged/stegextract](https://github.com/evyatarmeged/stegextract) Detect hidden files and text in images
- [**53**星][1y] [JS] [evyatarmeged/humanoid](https://github.com/evyatarmeged/humanoid) Node.js package to bypass CloudFlare's anti-bot JavaScript challenges
- [**53**星][7y] [C++] [eschweiler/proreversing](https://github.com/eschweiler/proreversing) Open and generic Anti-Anti Reversing Framework. Works in 32 and 64 bits.
- [**53**星][2m] [C#] [ericzimmerman/bstrings](https://github.com/ericzimmerman/bstrings) A better strings utility!
+- [**53**星][2m] [Shell] [edoverflow/smith](https://github.com/edoverflow/smith) Simple wrapper for meg that sieves through meg's output for you.
+- [**53**星][7m] [Py] [edent/renault-zoe-api](https://github.com/edent/renault-zoe-api) A basic API for getting information about your Renault Zoe Electric Vehicle.
+- [**53**星][3y] [Py] [dmuhs/pastebin-scraper](https://github.com/dmuhs/pastebin-scraper) Live-scraping pastebin to fight boredom.
- [**53**星][2y] [Go] [diogomonica/actuary](https://github.com/diogomonica/actuary) An actuary is a business professional who analyzes the financial consequences of risk.
- [**53**星][3y] [Shell] [dg92/node-express-postgres-redis-starter-kit](https://github.com/dg92/node-express-postgres-redis-starter-kit) This is a starter kit that help you get started with node, express, postgresql, redis. Node.js / Express / PostgreSQL / Authentication API Starter Kit
+- [**53**星][2y] [Py] [devsecops/defcon-workshop](https://github.com/devsecops/defcon-workshop)
+- [**53**星][5m] [Py] [deadbits/malware-analysis-scripts](https://github.com/deadbits/malware-analysis-scripts) Collection of scripts for different malware analysis tasks
+- [**53**星][2m] [HTML] [daxio/k8s-lemp](https://github.com/daxio/k8s-lemp) LEMP stack in a Kubernetes cluster
- [**53**星][4y] [C++] [datachi/memdb](https://github.com/datachi/memdb) Tools to track memory accesses in applications and visualize the patterns to reveal opportunities for optimization.
- [**53**星][12m] [Shell] [damonmohammadbagher/nativepayload_image](https://github.com/damonmohammadbagher/nativepayload_image) Transferring Backdoor Payloads with BMP Image Pixels
- [**53**星][5m] [HTML] [d1str0/drupot](https://github.com/d1str0/drupot) Drupal Honeypot
@@ -11622,172 +12373,205 @@ networking routines
- [**53**星][2y] [Py] [coffeehb/sstif](https://github.com/coffeehb/sstif) 一个Fuzzing服务器端模板注入漏洞的半自动化工具
- [**53**星][4y] [C++] [cn33liz/p0shkiller](https://github.com/cn33liz/p0shkiller)
- [**53**星][12m] [chryzsh/practical-hacking](https://github.com/chryzsh/practical-hacking) Repo for the Gitbook Practical Hacking
+- [**53**星][2y] [JS] [christophetd/docker-python-sandbox](https://github.com/christophetd/docker-python-sandbox) A Docker-powered NodeJS sandbox to execute untrusted python code.
- [**53**星][1y] [C] [chen-charles/pedetour](https://github.com/chen-charles/pedetour) modify binary Portable Executable to hook its export functions
- [**53**星][2y] [Py] [carnal0wnage/malicious_file_maker](https://github.com/carnal0wnage/malicious_file_maker) malicious file maker/sender to create and send malicious attachments to test your email filter/alerting
- [**53**星][12m] [bughunterid/bughunterid](https://github.com/bughunterid/bughunterid) Para pencari bug / celah kemanan bisa bergabung.
-- [**53**星][9m] [C] [bsidessf/ctf-2019-release](https://github.com/bsidessf/ctf-2019-release) BSidesSF CTF 2019 release
- [**53**星][3m] [Shell] [bishopfox/pwn-pulse](https://github.com/bishopfox/pwn-pulse) Exploit for Pulse Connect Secure SSL VPN arbitrary file read vulnerability (CVE-2019-11510)
+- [**53**星][3m] [Java] [arloor/httpproxy](https://github.com/arloor/httpproxy) a netty-based http proxy that breaks the GFW。
- [**53**星][3y] [C++] [aixxe/chameleon](https://github.com/aixxe/chameleon) Basic skin & knife changer for Counter-Strike: Global Offensive
- [**53**星][3y] [agahlot/rtfm](https://github.com/agahlot/rtfm) Red Team Field Manual
-- [**53**星][10d] [C] [ademakov/mainmemory](https://github.com/ademakov/mainmemory) Wannabe Main Memory Database and More
+- [**53**星][1y] [C#] [advancedhacker101/c-sharp-r.a.t-client](https://github.com/advancedhacker101/c-sharp-r.a.t-client) This is a c# client for the c# R.A.T server
+- [**53**星][7d] [C] [ademakov/mainmemory](https://github.com/ademakov/mainmemory) Wannabe Main Memory Database and More
- [**53**星][2y] [Py] [0x4d31/sqhunter](https://github.com/0x4d31/sqhunter) A simple threat hunting tool based on osquery, Salt Open and Cymon API
+- [**53**星][7m] [C] [0cch/0cchext](https://github.com/0cch/0cchext) 0CCh Windbg extension
- [**52**星][2y] [Py] [sensepost/peanuts](https://github.com/sensepost/peanuts) Peanuts is a free and open source wifi tracking tool. Based on the SensePosts Snoopy-NG project that is now closed.
- [**52**星][1y] [Py] [nixawk/hello-python2](https://github.com/nixawk/hello-python2) Python libraries demos
- [**52**星][5y] [Ruby] [michenriksen/hibp](https://github.com/michenriksen/hibp) A simple tool to check a bunch of email addresses against the Have I Been Pwned API.
-- [**52**星][2m] [Shell] [ullaakut/awesome-macos-setup](https://github.com/ullaakut/awesome-macos-setup) A repository with tools to automatically make any Mac awesome in a few minutes
-- [**52**星][22d] [Shell] [threatexpress/pasties](https://github.com/threatexpress/pasties) A collection of random bits of information common to many individual penetration tests, red teams, and other assessments
- [**52**星][3y] [Py] [tobefuturer/ida-swift-demangle](https://github.com/tobefuturer/ida-swift-demangle) A tool to demangle Swift function names in IDA.
- [**52**星][2y] [Py] [yadox666/wifi_ccc](https://github.com/yadox666/wifi_ccc) Wi-Fi Covert Channel Chat demo application
-- [**52**星][18d] [C] [ixzzving/ssr-vpn](https://github.com/ixzzving/ssr-vpn) Shadowsocks & ShadowsocksR & V2Ray & V2RayNG & VNET/酸酸乳节点及客户端
+- [**52**星][7m] [Py] [shadowsocksr-live/shadowsocksr](https://github.com/shadowsocksr-live/shadowsocksr)
+- [**52**星][29d] [Py] [jas502n/solr_rce](https://github.com/jas502n/solr_rce) Apache Solr RCE via Velocity template
+- [**52**星][2y] [C++] [xfgryujk/cheatingtutorial](https://github.com/xfgryujk/cheatingtutorial) 一个游戏修改器制作教程的例程
- [**52**星][3y] [Py] [test-pipeline/orthrus](https://github.com/test-pipeline/orthrus) A tool to manage, conduct, and assess dictionary-based fuzz testing
-- [**52**星][23d] [C] [bmegli/wifi-scan](https://github.com/bmegli/wifi-scan) A nl80211 C/C++ library for monitoring signal strength of WiFi networks
-- [**52**星][2m] [mohitkhemchandani/oscp-complete-guide](https://github.com/mohitkhemchandani/oscp-complete-guide) How to prepare for OSCP complete guide
-- [**52**星][1y] [Py] [synacktiv-contrib/modmobmap](https://github.com/Synacktiv-contrib/Modmobmap) Map 2G/3G/4G and more cellular networks in real live with a simple smart phone, pretty much like osmocomBB monitoring feature.
-- [**52**星][3y] [Py] [ghostlulzhacks/rolljam](https://github.com/ghostlulzhacks/rolljam) rolljam
+- [**52**星][25d] [C] [bmegli/wifi-scan](https://github.com/bmegli/wifi-scan) A nl80211 C/C++ library for monitoring signal strength of WiFi networks
+- [**52**星][7d] [Go] [giuliocomi/backoori](https://github.com/giuliocomi/backoori) Tool aided persistence via Windows URI schemes abuse
+- [**52**星][4m] [Py] [lengjibo/dedecmscan](https://github.com/lengjibo/dedecmscan) 织梦全版本漏洞扫描
+- [**52**星][3y] [Py] [cylance/mitmcanary](https://github.com/cylance/mitmcanary) Tool/service to detect Man in the Middle attacks with Canary Requests
- [**52**星][11m] [JS] [kruegerrobotics/lan-monitor](https://github.com/kruegerrobotics/lan-monitor) Simple website to display the LAN status based on a nmap scan
-- [**52**星][2y] [fsecurelabs/defcon25_uac_workshop](https://github.com/FSecureLABS/defcon25_uac_workshop) UAC 0Day all day!
-- [**52**星][1m] [b-mueller/awesome-mythx-smart-contract-security-tools](https://github.com/b-mueller/awesome-mythx-smart-contract-security-tools) A curated list of resources and tools for the MythX smart contract security API
- [**52**星][9m] [Logos] [zhaochengxiang/ioswechatfakelocation](https://github.com/zhaochengxiang/ioswechatfakelocation) A tweak that can fake location info in WeChat
- [**52**星][5y] [Py] [x0day/multiproxies](https://github.com/x0day/multiproxies) penetration testing framework that can use socks4/socks5 proxy.
- [**52**星][3y] [Py] [wraith-wireless/pyric](https://github.com/wraith-wireless/pyric) Python wireless library for Linux
-- [**52**星][8d] [TypeScript] [wkovacs64/hibp](https://github.com/wkovacs64/hibp) A Promise-based API for querying the 'Have I been pwned?' service.
+- [**52**星][2d] [TS] [wkovacs64/hibp](https://github.com/wkovacs64/hibp) A Promise-based API for querying the 'Have I been pwned?' service.
- [**52**星][2y] [C#] [vmcall/mapdetection](https://github.com/vmcall/mapdetection) Detect manualmapped images remotely, without hassle
-- [**52**星][2y] [JS] [tyrmars/websafe-steppitguide](https://github.com/tyrmars/websafe-steppitguide) Web前后端漏洞分析与防御-知识梳理
+- [**52**星][6m] [C++] [virgilsecurity/virgil-crypto](https://github.com/virgilsecurity/virgil-crypto) Virgil Crypto is a high-level cryptographic library that allows you to perform all necessary operations for secure storing and transferring data and everything required to become HIPAA and GDPR compliant. Crypto Library is written in C++, suitable for mobile and server platforms and supports bindings with: Swift, Obj-C, Java (Android), С#/.NET, …
+- [**52**星][9d] [tyrmars/websafe-steppitguide](https://github.com/tyrmars/websafe-steppitguide) Web前后端漏洞分析与防御-知识梳理
- [**52**星][1y] [Py] [truneski/external_c2_framework](https://github.com/truneski/external_c2_framework) Python api for usage with cobalt strike's External C2 specification
- [**52**星][1y] [C#] [them4hd1/jcs](https://github.com/them4hd1/jcs) Joomla Vulnerability Component Scanner
- [**52**星][1y] [Py] [theevilbit/workshops](https://github.com/theevilbit/workshops)
- [**52**星][7m] [C] [strivexjun/hidedll](https://github.com/strivexjun/hidedll) Hide DLL / Hide Module / Hide Dynamic Link Library
-- [**52**星][2y] [Py] [spritz-research-group/ctf-writeups](https://github.com/spritz-research-group/ctf-writeups) SPRITZ plays CTFs! Writeups by spritzers
- [**52**星][3y] [PHP] [shenzhenjinma/aliredenvelope](https://github.com/shenzhenjinma/aliredenvelope) 支付宝红包破解算法
-- [**52**星][3y] [C++] [sektioneins/wwcd](https://github.com/sektioneins/wwcd) Capstone powered IDA view
+- [**52**星][3y] [C++] [sektioneins/wwcd](https://github.com/sektioneins/wwcd) Capstone支持的IDA视图
- [**52**星][3y] [Py] [secwiki/some-poc-or-exp](https://github.com/secwiki/some-poc-or-exp) 各种漏洞poc、Exp的收集或编写
-- [**52**星][1m] [JS] [secgroup/flower](https://github.com/secgroup/flower) TCP flow analyzer with sugar for A/D CTF
+- [**52**星][10m] [Java] [ruedigergad/clj-net-pcap](https://github.com/ruedigergad/clj-net-pcap) A wrapper/facade/whatever to enable/ease the use of jNetPcap (a libpcap based packet sniffing lib) in Clojure
+- [**52**星][2y] [rehints/blackhat_2017](https://github.com/rehints/blackhat_2017) Betraying the BIOS: Where the Guardians of the BIOS are Failing
- [**52**星][2y] [C] [rc0r/afl-fuzz](https://github.com/rc0r/afl-fuzz) Non-official repository for lcamtuf's American Fuzzy Lop
- [**52**星][10m] [Assembly] [pret/pokepinball](https://github.com/pret/pokepinball) disassembly of pokémon pinball
+- [**52**星][1y] [PS] [pldmgg/winadmincenterps](https://github.com/pldmgg/winadmincenterps) Copy of Windows Admin Center (
- [**52**星][1y] [C] [phdphuc/mac-a-mal](https://github.com/phdphuc/mac-a-mal) 追踪macOS恶意软件的内核驱动, 与Cuckoo沙箱组合使用
- [**52**星][3y] [ASP] [pentesthub/priviledgebook](https://github.com/pentesthub/priviledgebook) 提权的文档
+- [**52**星][4m] [payloadbox/open-redirect-payload-list](https://github.com/payloadbox/open-redirect-payload-list)
+- [**52**星][19d] [Py] [patois/xray](https://github.com/patois/xray) 根据正则表达式对IDA反编译输出的特定内容进行高亮显示
+- [**52**星][2m] [PS] [palantir/exploitguard](https://github.com/palantir/exploitguard) Documentation and supporting script sample for Windows Exploit Guard
- [**52**星][2y] [Java] [owasp-ruhrpott/owasp-workshop-android-pentest](https://github.com/owasp-ruhrpott/owasp-workshop-android-pentest) Learning Penetration Testing of Android Applications
- [**52**星][5y] [Py] [osandamalith/chromefreak](https://github.com/osandamalith/chromefreak) A Cross-Platform Forensic Framework for Google Chrome
-- [**52**星][5y] [Pascal] [nyx0/pony](https://github.com/nyx0/pony) Pony 2.0 Stealer
- [**52**星][3y] [PHP] [northwind6/webbug](https://github.com/northwind6/webbug) WebBug漏洞练习平台
- [**52**星][1y] [Py] [nikallass/sharesearch](https://github.com/nikallass/sharesearch) Samba, NFS shares spider and grepper
-- [**52**星][2m] [netstalking-core/netstalking-osint](https://github.com/netstalking-core/netstalking-osint) Коллекция материалов по OSINT для нетсталкинга
- [**52**星][2y] [Py] [neo23x0/radiocarbon](https://github.com/neo23x0/radiocarbon) Leak File Analyzer
+- [**52**星][2m] [Py] [nelenkov/android-device-check](https://github.com/nelenkov/android-device-check) Check Android device security settings
+- [**52**星][2y] [PS] [mr-un1k0d3r/base64-obfuscator](https://github.com/mr-un1k0d3r/base64-obfuscator) Simple PowerShell Base64 encoder to avoid detection of your malicious payload
+- [**52**星][4d] [Shell] [mitchellkrogza/badd-boyz-hosts](https://github.com/mitchellkrogza/badd-boyz-hosts) A hosts file for use on any operating system to block bad domains out of your servers or devices.
+- [**52**星][1y] [C] [miguelangel-nubla/videop2proxy](https://github.com/miguelangel-nubla/videop2proxy) Proxy to enable P2P only cameras to work with standard protocols.
- [**52**星][7y] [Ruby] [medelibero/ddos-tools](https://github.com/medelibero/ddos-tools) Tools that were created to help with Distributed Denial of Service testing
- [**52**星][11m] [Py] [matonis/yara_tools](https://github.com/matonis/yara_tools) Create an entire YARA rule via Python? Whhhhhhaatttt?
-- [**52**星][3y] [PowerShell] [m-dwyer/cryptoblocker](https://github.com/m-dwyer/cryptoblocker) A script to deploy File Server Resource Manager and associated scripts to block infected users
+- [**52**星][9m] [C] [marcan/lsirec](https://github.com/marcan/lsirec) LSI SAS2008/SAS2108 low-level recovery tool for Linux
+- [**52**星][3y] [PS] [m-dwyer/cryptoblocker](https://github.com/m-dwyer/cryptoblocker) A script to deploy File Server Resource Manager and associated scripts to block infected users
+- [**52**星][5m] [Py] [lorexxar/redis-rogue-server](https://github.com/lorexxar/redis-rogue-server) Redis 4.x & 5.x RCE
- [**52**星][1y] [Py] [libraggbond/cve-2018-3191](https://github.com/libraggbond/cve-2018-3191) CVE-2018-3191 反弹shell
- [**52**星][3y] [Roff] [ldbfpiaoran/websearch](https://github.com/ldbfpiaoran/websearch) Search engine for web assets
-- [**52**星][12m] [Py] [klsecservices/s7scan](https://github.com/klsecservices/s7scan) The tool for enumerating Siemens S7 PLCs through TCP/IP or LLC network
- [**52**星][6y] [Py] [kevthehermit/maildb](https://github.com/kevthehermit/maildb) Python Web App to Parse and Track Email and http Pcap Files.
- [**52**星][2y] [Py] [joker25000/dzjecter](https://github.com/joker25000/dzjecter)
- [**52**星][5y] [C++] [jieyu/maple](https://github.com/jieyu/maple) A dynamic analysis framework for concurrent programs (x86 binaries). It is shipped with a few tools written using this framework for testing concurrent programs.
- [**52**星][5y] [Py] [jfoote/burp-git-bridge](https://github.com/jfoote/burp-git-bridge) Store Burp data and collaborate via git
-- [**52**星][5m] [C++] [jesseemond/cheat-and-gin](https://github.com/jesseemond/cheat-and-gin) C++ cheat engine (memory scanner)
+- [**52**星][2y] [Py] [jflyup/goms17-010](https://github.com/jflyup/goms17-010) Simple program for detecting if host(s) are vulnerable to SMB exploit(MS17-010)
- [**52**星][5y] [Py] [jeffreysasaki/backdoor](https://github.com/jeffreysasaki/backdoor) Linux backdoor implementation written in Python
- [**52**星][1y] [JS] [jeffbryner/mozdef](https://github.com/jeffbryner/mozdef) MozDef: The Mozilla Defense Platform
- [**52**星][2y] [Py] [inurlx/cloudkill3r](https://github.com/inurlx/cloudkill3r) CLOUDKiLL3R bypasses Cloudflare protection service via TOR Browser using crimeflare !
+- [**52**星][2m] [Py] [idapython/pyhexraysdeob](https://github.com/idapython/pyhexraysdeob) 工具 RolfRolles/HexRaysDeob 的Python版本
- [**52**星][3y] [PHP] [httpoxy/php-fpm-httpoxy-poc](https://github.com/httpoxy/php-fpm-httpoxy-poc) A PoC for exploiting Guzzle's HTTP_PROXY untrusted read
+- [**52**星][2y] [C] [hasherezade/process_chameleon](https://github.com/hasherezade/process_chameleon) A process overwriting its own PEB to make an illusion that it has been loaded from a different path.
- [**52**星][4y] [HTML] [hakanson/ng-owasp](https://github.com/hakanson/ng-owasp) OWASP Top 10 for AngularJS Applications
-- [**52**星][3m] [Py] [grrrdog/tacotaco](https://github.com/grrrdog/tacotaco) Some scripts for attacks on Tacacs+ protocol
-- [**52**星][4y] [PHP] [gfoss/phpmyadmin_honeypot](https://github.com/gfoss/phpmyadmin_honeypot)
-- [**52**星][5y] [C++] [georgenicolaou/heaveninjector](https://github.com/georgenicolaou/heaveninjector) Simple proof of concept code for injecting libraries on 64bit processes from a 32bit process
+- [**52**星][4m] [Py] [grrrdog/tacotaco](https://github.com/grrrdog/tacotaco) Some scripts for attacks on Tacacs+ protocol
+- [**52**星][6y] [C++] [georgenicolaou/heaveninjector](https://github.com/georgenicolaou/heaveninjector) Simple proof of concept code for injecting libraries on 64bit processes from a 32bit process
- [**52**星][2y] [C] [gentilkiwi/spectre_meltdown](https://github.com/gentilkiwi/spectre_meltdown)
- [**52**星][3y] [C] [fuzzstati0n/fuzzgoat](https://github.com/fuzzstati0n/fuzzgoat) A vulnerable C program for testing fuzzers.
- [**52**星][4m] [Py] [fkasler/dolos_cloak](https://github.com/fkasler/dolos_cloak) Automated 802.1x Bypass
- [**52**星][5y] [C++] [filcab/patchdiff2](https://github.com/filcab/patchdiff2) IDA binary differ. Since code.google.com/p/patchdiff2/ seemed abandoned, I did the obvious thing…
- [**52**星][2y] [Py] [fideliscyber/indicators](https://github.com/fideliscyber/indicators) Indicators from FTAs and Blog Posts
- [**52**星][11m] [feicong/zsxq_archives](https://github.com/feicong/zsxq_archives) 【软件安全与知识星球】精华文章列表
-- [**52**星][1m] [Py] [ezelf/f5_cookieleaks](https://github.com/ezelf/f5_cookieleaks) Decode the cookies set by balancer F5, and disclousure all pool ip
+- [**52**星][2m] [Py] [ezelf/f5_cookieleaks](https://github.com/ezelf/f5_cookieleaks) Decode the cookies set by balancer F5, and disclousure all pool ip
- [**52**星][6y] [Py] [enthought/python-2.7.3](https://github.com/enthought/python-2.7.3)
- [**52**星][10m] [Java] [empireproject/empiremobile](https://github.com/empireproject/empiremobile) Android and iOS source for the Empire mobile app
-- [**52**星][6m] [Py] [edent/renault-zoe-api](https://github.com/edent/renault-zoe-api) A basic API for getting information about your Renault Zoe Electric Vehicle.
-- [**52**星][3y] [Py] [dmuhs/pastebin-scraper](https://github.com/dmuhs/pastebin-scraper) Live-scraping pastebin to fight boredom.
+- [**52**星][2y] [Py] [disruptops/cred_scanner](https://github.com/disruptops/cred_scanner) A simple file-based scanner to look for potential AWS access and secret keys in files
- [**52**星][1m] [Py] [didierstevens/beta](https://github.com/didierstevens/beta) Beta versions of my software
-- [**52**星][2y] [Py] [devsecops/defcon-workshop](https://github.com/devsecops/defcon-workshop)
- [**52**星][6y] [Ruby] [depthsecurity/dahua_dvr_auth_bypass](https://github.com/depthsecurity/dahua_dvr_auth_bypass) Dahua CCTV DVR Authentication Bypass Metasploit Scanning Module
+- [**52**星][2y] [C] [dennypage/dpinger](https://github.com/dennypage/dpinger) dpinger:持续性监控网络延迟和数据包丢失
+- [**52**星][2m] [Py] [dedsecinside/awesome-scripts](https://github.com/dedsecinside/awesome-scripts) A collection of awesome scripts from developers around the globe.
- [**52**星][8y] [Py] [crossbowerbt/gdb-python-utils](https://github.com/crossbowerbt/gdb-python-utils) A library for GDB (with python support), that adds useful functions to the standard 'gdb' library.
-- [**52**星][5m] [Py] [crond-jaist/cytrone](https://github.com/crond-jaist/cytrone) CyTrONE: Integrated Cybersecurity Training Framework
+- [**52**星][8d] [Py] [crond-jaist/cytrone](https://github.com/crond-jaist/cytrone) CyTrONE: Integrated Cybersecurity Training Framework
- [**52**星][2y] [C] [cn33liz/hsevd-stackoverflowx64](https://github.com/cn33liz/hsevd-stackoverflowx64) HackSys Extreme Vulnerable Driver - Windows 10 x64 StackOverflow Exploit with SMEP Bypass
+- [**52**星][2y] [Go] [cmars/ormesh](https://github.com/cmars/ormesh) onion-routed mesh
+- [**52**星][1y] [Py] [cisco-talos/pylocky_decryptor](https://github.com/cisco-talos/pylocky_decryptor)
- [**52**星][3y] [Lua] [christophetd/nmap-nse-info](https://github.com/christophetd/nmap-nse-info) nmap-nse-info:浏览、搜索Nmap 的 NSE 脚本
-- [**52**星][2y] [JS] [christophetd/docker-python-sandbox](https://github.com/christophetd/docker-python-sandbox) A Docker-powered NodeJS sandbox to execute untrusted python code.
+- [**52**星][10m] [JS] [cat-team-mmc/lysec](https://github.com/cat-team-mmc/lysec) 一个基于docker的安全培训系统
+- [**52**星][8m] [Elixir] [calidog/certstream-server](https://github.com/calidog/certstream-server) Certificate Transparency Log aggregation, parsing, and streaming service written in Elixir
- [**52**星][5y] [Py] [bwall/bamf](https://github.com/bwall/bamf) Botnet Analysis Modular Framework
- [**52**星][2y] [JS] [blockadeio/chrome_extension](https://github.com/blockadeio/chrome_extension) Browser extension that uses intelligence to combat malicious websites by blocking them in real-time.
- [**52**星][6m] [Py] [bkerler/oppo_decrypt](https://github.com/bkerler/oppo_decrypt) 一加手机固件解密脚本
+- [**52**星][1y] [C] [bazad/threadexec](https://github.com/bazad/threadexec) A library to execute code in the context of other processes on iOS 11.
- [**52**星][9m] [aungthurhahein/red-team-curation-list](https://github.com/aungthurhahein/red-team-curation-list) A list to discover work of red team tooling and methodology for penetration testing and security assessment
- [**52**星][11m] [PHP] [atmoner/nodecrypto](https://github.com/atmoner/nodecrypto) Ransomware written in NodeJs
-- [**52**星][18d] [Py] [aress31/jwtcat](https://github.com/aress31/jwtcat) JSON Web Token (JWT) cracker.
+- [**52**星][20d] [Py] [aress31/jwtcat](https://github.com/aress31/jwtcat) JSON Web Token (JWT) cracker.
- [**52**星][2y] [Py] [apkjet/trustlookwannacrytoolkit](https://github.com/apkjet/trustlookwannacrytoolkit) WannaCryToolkit scanner and removal toolkit
+- [**52**星][3y] [annsec/awesome-cybersecurity](https://github.com/annsec/awesome-cybersecurity) Curated list of awesome cybersecurity companies and solutions.
- [**52**星][8y] [Py] [9b/pdfxray_public](https://github.com/9b/pdfxray_public) Public version of PDF X-RAY
+- [**52**星][4y] [Py] [5alt/lianwifi](https://github.com/5alt/lianwifi) wifi万能钥匙api
- [**52**星][2y] [1522402210/blockchain-security-list](https://github.com/1522402210/blockchain-security-list) BlockChain-Security-List
+- [**52**星][2y] [Py] [0xd34db33f/gfyp](https://github.com/0xd34db33f/gfyp) Unification of dnstwist + SQLite + Email reporting. Set it as a cron job that runs every hour, give it a list of domains and email addresses for reporting, then watch it go find stuff.
- [**51**星][3y] [hack-with-github/awesome-hacking-tools](https://github.com/hack-with-github/awesome-hacking-tools) A collection of various hacking and exploitation tools for hackers and pentesters.
+- [**51**星][2m] [Shell] [ullaakut/awesome-macos-setup](https://github.com/ullaakut/awesome-macos-setup) A repository with tools to automatically make any Mac awesome in a few minutes
+- [**51**星][2y] [Jupyter Notebook] [calebmadrigal/radio-hacking-scripts](https://github.com/calebmadrigal/radio-hacking-scripts) Scripts to aid in the manipulation of electromagnetic radiation (for use with gnu_radio and SDR).
+- [**51**星][9m] [Py] [fireeye/adfspoof](https://github.com/fireeye/adfspoof) forge AD FS security tokens
- [**51**星][2y] [C] [shadowsocks/libsscrypto](https://github.com/shadowsocks/libsscrypto) Build libsscrypto.dll for shadowsocks-windows.
- [**51**星][2y] [HTML] [jgamblin/nmapnetworkinventorycontainer](https://github.com/jgamblin/nmapnetworkinventorycontainer) A Docker Container To Continually Scan Your Network And Display Findings Cleanly.
-- [**51**星][6m] [Py] [shadowsocksr-live/shadowsocksr](https://github.com/shadowsocksr-live/shadowsocksr)
-- [**51**星][11d] [Py] [k8gege/k8portscan](https://github.com/k8gege/k8portscan) 跨平台大型网络端口扫描器(支持批量A段/B段/C段/IP列表(TXT)/端口列表,Banner识别比S扫描器加强版更准)
-- [**51**星][14d] [Py] [kkamagui/napper-for-tpm](https://github.com/kkamagui/napper-for-tpm) TPM vulnerability checking tool for CVE-2018-6622. This tool will be published at Black Hat Asia 2019 and Black Hat Europe 2019
-- [**51**星][14d] [TypeScript] [ediardo/kmdr-cli](https://github.com/ediardo/kmdr-cli) 🧠The ultimate CLI learning tool for explaining commands from your terminal
-- [**51**星][4m] [Py] [lengjibo/dedecmscan](https://github.com/lengjibo/dedecmscan) 织梦全版本漏洞扫描
+- [**51**星][2y] [mitmproxy/docker-releases](https://github.com/mitmproxy/docker-releases)
+- [**51**星][26d] [C++] [rek7/ddoor](https://github.com/rek7/ddoor) DDoor - cross platform backdoor using dns txt records
+- [**51**星][14d] [Py] [k8gege/k8portscan](https://github.com/k8gege/k8portscan) 跨平台大型网络端口扫描器(支持批量A段/B段/C段/IP列表(TXT)/端口列表,Banner识别比S扫描器加强版更准)
+- [**51**星][20d] [C] [ixzzving/ssr-vpn](https://github.com/ixzzving/ssr-vpn) Shadowsocks & ShadowsocksR & V2Ray & V2RayNG & VNET/酸酸乳节点及客户端
+- [**51**星][1y] [Py] [zhovner/airport-sniffer](https://github.com/zhovner/airport-sniffer) Very simple Wi-Fi sniffer and dumps parser for built-in macbook AirPort Extreme card. Only native MacOS tools used.
- [**51**星][8m] [C#] [fsecurelabs/sharpgpo-remoteaccesspolicies](https://github.com/FSecureLABS/SharpGPO-RemoteAccessPolicies) A C# tool for enumerating remote access policies through group policy.
+- [**51**星][3y] [wh1t3p1g/struts2environment](https://github.com/wh1t3p1g/Struts2Environment) Struts2 历史版本的漏洞环境
+- [**51**星][28d] [Java] [guardianproject/tor-android](https://github.com/guardianproject/tor-android) Tor binary and library for Android
- [**51**星][1y] [Py] [qax-a-team/redis_lua_exploit](https://github.com/QAX-A-Team/redis_lua_exploit)
-- [**51**星][3y] [Py] [cylance/mitmcanary](https://github.com/cylance/mitmcanary) Tool/service to detect Man in the Middle attacks with Canary Requests
+- [**51**星][4d] [Py] [lich4/personal_script](https://github.com/lich4/personal_script) 010Editor/BurpSuite/Frida/IDA等多个工具的多个脚本
+ - [010Editor](https://github.com/lich4/personal_script/tree/master/010Editor_Script) 010Editor的多个脚本
+ - [ParamChecker](https://github.com/lich4/personal_script/tree/master/BurpSuite_Script) Burp插件
+ - [Frida](https://github.com/lich4/personal_script/tree/master/Frida_script) Frida多个脚本
+ - [IDA](https://github.com/lich4/personal_script/tree/master/IDA_Script) IDA Scripts
+ - [IDA-read_unicode.py](https://github.com/lich4/personal_script/blob/master/IDA_Script/read_unicode.py) IDA插件,识别程序中的中文字符
+ - [IDA-add_xref_for_macho](https://github.com/lich4/personal_script/blob/master/IDA_Script/add_xref_for_macho.py) 辅助识别Objective-C成员函数的caller和callee
+ - [IDA-add_info_for_androidgdb](https://github.com/lich4/personal_script/blob/master/IDA_Script/add_info_for_androidgdb.py) 使用gdbserver和IDA调试Android时,读取module列表和segment
+ - [IDA-trace_instruction](https://github.com/lich4/personal_script/blob/master/IDA_Script/trace_instruction.py) 追踪指令流
+ - [IDA-detect_ollvm](https://github.com/lich4/personal_script/blob/master/IDA_Script/detect_ollvm.py) 检测OLLVM,在某些情况下修复(Android/iOS)
+ - [IDA-add_block_for_macho](https://github.com/lich4/personal_script/blob/master/IDA_Script/add_block_for_macho.py) 分析macho文件中的block结构
- [**51**星][5m] [C#] [zodiacon/gflagsx](https://github.com/zodiacon/gflagsx) Enhanced version of the GFlags tool
- [**51**星][4y] [Py] [znb/malware](https://github.com/znb/malware) Malware related code
- [**51**星][2m] [C#] [zeropointsecurity/goldenticket](https://github.com/zeropointsecurity/goldenticket)
+- [**51**星][10d] [yassergersy/cazador_unr](https://github.com/yassergersy/cazador_unr) Simple Hacking tools
- [**51**星][2m] [Py] [vrtadmin/first-plugin-ida](https://github.com/vrtadmin/first-plugin-ida) 函数识别与签名恢复工具
+- [**51**星][1y] [C++] [tomladder/winlib](https://github.com/tomladder/winlib) Windows Manipulation Library (x64, User/Kernelmode)
- [**51**星][2y] [Go] [threatstack/deputize](https://github.com/threatstack/deputize) Manage an on-call LDAP group based on PagerDuty on-call status
-- [**51**星][12d] [Py] [thez3ro/gogsownz](https://github.com/thez3ro/gogsownz) Gogs CVEs
+- [**51**星][14d] [Py] [thez3ro/gogsownz](https://github.com/thez3ro/gogsownz) Gogs CVEs
- [**51**星][2y] [Py] [tgianko/deemon](https://github.com/tgianko/deemon) Deemon is a tool to detect CSRF in web applications. Deemon has been used for the paper "Deemon: Detecting CSRF with Dynamic Analysis and Property Graphs" by G. Pellegrino, M. Johns, S. Koch, M. Backes, and C. Rossow.
- [**51**星][1y] [Py] [sysopfb/malware_scripts](https://github.com/sysopfb/malware_scripts) Various scripts for different malware families
- [**51**星][3y] [C] [sycloversecurity/ctf](https://github.com/sycloversecurity/ctf) Syclover(三叶草安全小组)承办的ctf比赛集合
-- [**51**星][22d] [Java] [stevespringett/threatmodel-sdk](https://github.com/stevespringett/threatmodel-sdk) A Java library for parsing and programmatically using threat models
-- [**51**星][25d] [Py] [snowflakedb/snowalert](https://github.com/snowflakedb/snowalert) Security Analytics Using The Snowflake Data Warehouse
+- [**51**星][24d] [Java] [stevespringett/threatmodel-sdk](https://github.com/stevespringett/threatmodel-sdk) A Java library for parsing and programmatically using threat models
+- [**51**星][3d] [Rust] [sorz/moproxy](https://github.com/sorz/moproxy) A transparent TCP to SOCKSv5/HTTP proxy on Linux written in Rust.
- [**51**星][8y] [C] [snare/kernelresolver](https://github.com/snare/kernelresolver) Example Mac OS X kernel extension that resolves symbols from the running kernel image
+- [**51**星][2m] [C#] [smourier/tracespy](https://github.com/smourier/tracespy) TraceSpy is a pure .NET, 100% free and open source, alternative to the very popular SysInternals DebugView tool.
+- [**51**星][2y] [Java] [shengqi158/jackson-databind-rce-poc](https://github.com/shengqi158/jackson-databind-rce-poc)
- [**51**星][4y] [Py] [sensepost/wifi-rifle](https://github.com/sensepost/wifi-rifle) Creating a wireless rifle de-authentication gun, which utilized a yagi antenna and a Raspberry Pi.
+- [**51**星][3m] [Java] [sensepost/apostille](https://github.com/sensepost/apostille)
- [**51**星][1m] [JS] [segmentio/metalsmith-markdown](https://github.com/segmentio/metalsmith-markdown) A Metalsmith plugin to convert markdown files.
-- [**51**星][6m] [scubsrgroup/automatic-exploit-generation](https://github.com/scubsrgroup/automatic-exploit-generation) Something about AEG
- [**51**星][3y] [C] [sciencemanx/ftrace](https://github.com/sciencemanx/ftrace) trace local function calls like strace and ltrace
-- [**51**星][4y] [C++] [scadacs/plcinject](https://github.com/scadacs/plcinject)
-- [**51**星][10m] [Java] [ruedigergad/clj-net-pcap](https://github.com/ruedigergad/clj-net-pcap) A wrapper/facade/whatever to enable/ease the use of jNetPcap (a libpcap based packet sniffing lib) in Clojure
+- [**51**星][2y] [Py] [romankh/gsm-assessment-toolkit](https://github.com/romankh/gsm-assessment-toolkit) GSM Assessment Toolkit - A security evaluation framework for GSM networks
- [**51**星][2y] [Py] [rolfrolles/finspyvm](https://github.com/rolfrolles/finspyvm) Static unpacker for FinSpy VM
- [**51**星][2y] [riscure/rhme-2017](https://github.com/riscure/rhme-2017) Riscure Hack Me embedded hardware CTF 2017-2018.
-- [**51**星][1m] [Py] [reorx/python-terminal-color](https://github.com/reorx/python-terminal-color) Drop-in single file library for printing color in terminal
- [**51**星][3y] [Py] [red-team-labs/waldo](https://github.com/red-team-labs/waldo)
- [**51**星][2y] [Shell] [r1b/cve-2017-13089](https://github.com/r1b/cve-2017-13089) PoC for wget v1.19.1
- [**51**星][5m] [JS] [qtgate/conet](https://github.com/qtgate/conet) Become a trustworthy ally for the Internet Freedom
- [**51**星][3y] [HTML] [pwnsdx/ios-uri-schemes-abuse-poc](https://github.com/pwnsdx/ios-uri-schemes-abuse-poc) A set of URI schemes bugs that lead Safari to crash/freeze.
- [**51**星][1y] [C] [pwn20wndstuff/osiris](https://github.com/pwn20wndstuff/osiris) Osiris developer jailbreak for iOS 11.0 - 11.4b3
- [**51**星][2m] [Ruby] [puppetlabs/puppetlabs-puppetdb](https://github.com/puppetlabs/puppetlabs-puppetdb) A puppet module for installing and managing puppetdb
-- [**51**星][1m] [Perl] [pepelux/sippts](https://github.com/pepelux/sippts) Set of tools to audit SIP based VoIP Systems
+- [**51**星][7d] [Perl] [pepelux/sippts](https://github.com/pepelux/sippts) Set of tools to audit SIP based VoIP Systems
- [**51**星][1y] [Py] [pentestpartners/mykali](https://github.com/pentestpartners/mykali) Linux setup tool for Kali Linux
-- [**51**星][17d] [Py] [patois/xray](https://github.com/patois/xray) 根据正则表达式对IDA反编译输出的特定内容进行高亮显示
- [**51**星][2y] [p292/ddeautocs](https://github.com/p292/ddeautocs) A cobaltstrike script that integrates DDEAuto Attacks
- [**51**星][7y] [C#] [owasp/webgoat.net](https://github.com/owasp/webgoat.net) OWASP WebGoat.NET
+- [**51**星][5m] [PHP] [owasp/vulnerable-web-application](https://github.com/owasp/vulnerable-web-application) OWASP Vulnerable Web Application Project
- [**51**星][1y] [Py] [osuseclab/sgxpectre](https://github.com/osuseclab/sgxpectre)
- [**51**星][4y] [C] [osbock/baldwisdom](https://github.com/osbock/baldwisdom) Kevin's hacking projects code
- [**51**星][2y] [Py] [orweis/winpcapy](https://github.com/orweis/winpcapy) A Modern Python wrapper for WinPcap
- [**51**星][8m] [offensive-security/nethunter-utils](https://github.com/offensive-security/nethunter-utils) Kali Linux NetHunter utils package
- [**51**星][4y] [Py] [nottinghamprisateam/pyersinia](https://github.com/nottinghamprisateam/pyersinia) Herramienta escrita en Python y utilizando la librería Scapy basada en Yersinia para la implementación de ataques de capa de enlace de datos
+- [**51**星][1y] [Java] [netspi/burpextractor](https://github.com/netspi/burpextractor) A Burp extension for generic extraction and reuse of data within HTTP requests and responses.
- [**51**星][2y] [C] [nccgroup/ncloader](https://github.com/nccgroup/ncloader) A session-0 capable dll injection utility
- [**51**星][1y] [Go] [mrexodia/haxxmap](https://github.com/mrexodia/haxxmap) Some simple go tools to perform a Man-in-the-middle (MITM) attack on your IMAP server in case you forgot your password.
-- [**51**星][2y] [PowerShell] [mr-un1k0d3r/base64-obfuscator](https://github.com/mr-un1k0d3r/base64-obfuscator) Simple PowerShell Base64 encoder to avoid detection of your malicious payload
- [**51**星][3m] [CSS] [mobsf/capfuzz](https://github.com/mobsf/capfuzz) CapFuzz - capture, fuzz & intercept web traffic.
-- [**51**星][8d] [Shell] [mitchellkrogza/badd-boyz-hosts](https://github.com/mitchellkrogza/badd-boyz-hosts) A hosts file for use on any operating system to block bad domains out of your servers or devices.
- [**51**星][2y] [Py] [metalnas/loubia](https://github.com/metalnas/loubia) Python script to exploit java unserialize on t3 (Weblogic)
-- [**51**星][9m] [C] [marcan/lsirec](https://github.com/marcan/lsirec) LSI SAS2008/SAS2108 low-level recovery tool for Linux
- [**51**星][2y] [C#] [lordgreggreg/skype-log-viewer](https://github.com/lordgreggreg/skype-log-viewer) Download and View Skype History Without Skype
- [**51**星][4y] [Py] [lokifer/blindelephant](https://github.com/lokifer/blindelephant) Getting BlindElephant into a working state, and updating the plugin files
-- [**51**星][6m] [C++] [lemire/testingrng](https://github.com/lemire/testingrng) Testing common random-number generators (RNG)
-- [**51**星][9m] [Java] [jogolden/ghidraps4loader](https://github.com/jogolden/ghidraps4loader) A Ghidra loader for PlayStation 4 binaries.
+- [**51**星][7m] [C++] [lemire/testingrng](https://github.com/lemire/testingrng) Testing common random-number generators (RNG)
+- [**51**星][3y] [Py] [kovige/netscan](https://github.com/kovige/netscan) 配合reGeorg使用的内网扫描工具
+- [**51**星][6y] [C++] [jyang772/xor_crypter](https://github.com/jyang772/xor_crypter) XOR encryption, malware crypter
- [**51**星][3y] [C] [jianqiangzhao/cve-2016-2434](https://github.com/jianqiangzhao/cve-2016-2434)
- [**51**星][2y] [HTML] [jgamblin/nmaptable](https://github.com/jgamblin/nmaptable) nmaptable:将 Nmap 扫描结果转变为 D3.js HTML 表格
-- [**51**星][2y] [Py] [jflyup/goms17-010](https://github.com/jflyup/goms17-010) Simple program for detecting if host(s) are vulnerable to SMB exploit(MS17-010)
+- [**51**星][1y] [Py] [jay-johnson/train-ai-with-django-swagger-jwt](https://github.com/jay-johnson/train-ai-with-django-swagger-jwt) Train AI (Keras + Tensorflow) to defend apps with Django REST Framework + Celery + Swagger + JWT - deploys to Kubernetes and OpenShift Container Platform
- [**51**星][1m] [intelstormteam/papers](https://github.com/intelstormteam/papers) Papers written (and released) by the Team
- [**51**星][5y] [C++] [ikoz/androidsubstrate_hookingc_examples](https://github.com/ikoz/androidsubstrate_hookingc_examples) AndroidSubstrate_hookingC_examples
- [**51**星][3y] [Py] [huntcve/exploit](https://github.com/huntcve/exploit)
-- [**51**星][2m] [Shell] [hirbodbehnam/shadowsocks-cloak-installer](https://github.com/hirbodbehnam/shadowsocks-cloak-installer) A one-key script to setup Cloak plugin with Shadowsocks on your server
-- [**51**星][1y] [Py] [hiddenillusion/nomorexor](https://github.com/hiddenillusion/nomorexor) Tool to help guess a files 256 byte XOR key by using frequency analysis
-- [**51**星][2y] [C] [hasherezade/process_chameleon](https://github.com/hasherezade/process_chameleon) A process overwriting its own PEB to make an illusion that it has been loaded from a different path.
+- [**51**星][2m] [TSQL] [horsicq/xntsv](https://github.com/horsicq/xntsv) XNTSV program for detailed viewing of system structures for Windows.
+- [**51**星][5m] [hitripod/awesome-blockchain](https://github.com/hitripod/awesome-blockchain) Curated list of blockchain, Awesome Awesomeness
+- [**51**星][2y] [Py] [hiddenillusion/nomorexor](https://github.com/hiddenillusion/nomorexor) Tool to help guess a files 256 byte XOR key by using frequency analysis
- [**51**星][2y] [harshilpatel007/hackinglabs](https://github.com/harshilpatel007/hackinglabs) A List Of Labs For People (Students) Who Want Learn OR Practice IT Security / Hacking / Penetration Testing In Ethical Way.
- [**51**星][1y] [hack-with-github/infosec-badges](https://github.com/hack-with-github/infosec-badges) Badges for your GitHub tool presented at InfoSec Conference
- [**51**星][7m] [Py] [hack-hut/crabstick](https://github.com/hack-hut/crabstick) Automatic remote/local file inclusion vulnerability analysis and exploit tool
@@ -11795,228 +12579,230 @@ networking routines
- [**51**星][5y] [Py] [fuzzynop/fiveonceinyourlife](https://github.com/fuzzynop/fiveonceinyourlife) Local osx dialog box phishing using osascript. Easier than keylogging on osx. Simply ask for the passwords you want.
- [**51**星][3y] [JS] [firesuncn/my_ctf_challenges](https://github.com/firesuncn/my_ctf_challenges)
- [**51**星][7y] [JS] [firegpg/firegpg](https://github.com/firegpg/firegpg) FireGPG is no longer supported. Please see the README for information on WebPG.
-- [**51**星][2m] [Shell] [edoverflow/smith](https://github.com/edoverflow/smith) Simple wrapper for meg that sieves through meg's output for you.
-- [**51**星][2y] [Py] [disruptops/cred_scanner](https://github.com/disruptops/cred_scanner) A simple file-based scanner to look for potential AWS access and secret keys in files
+- [**51**星][2y] [Java] [fergarrui/custom-bytecode-analyzer](https://github.com/fergarrui/custom-bytecode-analyzer) Java bytecode analyzer customizable via JSON rules
+- [**51**星][11m] [Py] [elevenpaths/neto](https://github.com/elevenpaths/neto) Neto | A tool to analyse browser extensions
- [**51**星][5y] [C] [dgoulet/kjackal](https://github.com/dgoulet/kjackal) Linux Rootkit Scanner
-- [**51**星][2y] [C] [dennypage/dpinger](https://github.com/dennypage/dpinger) dpinger:持续性监控网络延迟和数据包丢失
-- [**51**星][5m] [Py] [deadbits/malware-analysis-scripts](https://github.com/deadbits/malware-analysis-scripts) Collection of scripts for different malware analysis tasks
-- [**51**星][1m] [HTML] [daxio/k8s-lemp](https://github.com/daxio/k8s-lemp) LEMP stack in a Kubernetes cluster
- [**51**星][1y] [JS] [danigargu/urlfuzz](https://github.com/danigargu/urlfuzz) Another web fuzzer written in NodeJS
+- [**51**星][30d] [Py] [d-rickyy-b/pastepwn](https://github.com/d-rickyy-b/pastepwn) Python framework to scrape Pastebin pastes and analyze them
- [**51**星][1y] [Py] [cytopia/crawlpy](https://github.com/cytopia/crawlpy) Scrapy python crawler/spider with post/get login (handles CSRF), variable level of recursions and optionally save to disk
- [**51**星][2y] [Py] [cseagle/ida_clemency](https://github.com/cseagle/ida_clemency) IDA cLEMENCy Tools
-- [**51**星][3y] [Visual Basic] [cn33liz/macrometer](https://github.com/cn33liz/macrometer) VBA Reversed TCP Meterpreter Stager
-- [**51**星][2y] [Go] [cmars/ormesh](https://github.com/cmars/ormesh) onion-routed mesh
-- [**51**星][1y] [Py] [cisco-talos/pylocky_decryptor](https://github.com/cisco-talos/pylocky_decryptor)
+ - [clemency_ldr](https://github.com/cseagle/ida_clemency/blob/master/clemency_ldr.py) IDA加载程序模块,为9位,中端,cLEMENCy可执行文件创建基本的内存布局,并处理其加载。
+ - [clemency_proc](https://github.com/cseagle/ida_clemency/blob/master/clemency_proc.py) IDA处理器模块,处理反汇编和汇编任务
+ - [clemency_dump](https://github.com/cseagle/ida_clemency/blob/master/clemency_dump.py) IDA插件,将修改后的数据库内容转储到打包的9位中端字节文件中
+ - [clemency_fix](https://github.com/cseagle/ida_clemency/blob/master/clemency_fix.py) IDA plugin to assist with fixing up poorly disassembled functions that might branch/call into regions that continue to be marked as data blocks.
+- [**51**星][3y] [Visual Basic .NET] [cn33liz/macrometer](https://github.com/cn33liz/macrometer) VBA Reversed TCP Meterpreter Stager
- [**51**星][11m] [Py] [cisco-talos/dyndataresolver](https://github.com/cisco-talos/dyndataresolver) 动态数据解析. 在IDA中控制DyRIO执行程序的指定部分, 记录执行过程后传回数据到IDA
- [DDR](https://github.com/cisco-talos/dyndataresolver/blob/master/VS_project/ddr/ddr.sln) 基于DyRIO的Client
- [IDA插件](https://github.com/cisco-talos/dyndataresolver/tree/master/IDAplugin)
- [**51**星][2y] [Py] [cisco-talos/dotnet_windbg](https://github.com/cisco-talos/dotnet_windbg)
- [**51**星][7y] [Py] [chrisjohnriley/scythe](https://github.com/chrisjohnriley/scythe) scythe: account enumerator
+- [**51**星][4m] [PS] [chrisad/wiki-dictionary-creator](https://github.com/chrisad/wiki-dictionary-creator) Creates dictionaries based on Wikipedia titles
- [**51**星][1y] [Py] [carnal0wnage/pentesty_scripts](https://github.com/carnal0wnage/pentesty_scripts) scripts for pentesting
-- [**51**星][25d] [C] [buffer/libemu](https://github.com/buffer/libemu)
-- [**51**星][1y] [C] [bazad/threadexec](https://github.com/bazad/threadexec) A library to execute code in the context of other processes on iOS 11.
+- [**51**星][7d] [C] [buffer/libemu](https://github.com/buffer/libemu)
+- [**51**星][1y] [PS] [bromiley/olaf](https://github.com/bromiley/olaf) Office365 Log Analysis Framework
+- [**51**星][1m] [Makefile] [blacktop/docker-ghidra](https://github.com/blacktop/docker-ghidra) Ghidra Client/Server Docker Image
+- [**51**星][3m] [Py] [bkerler/mr](https://github.com/bkerler/mr) Mobile Revelator
+- [**51**星][1y] [HTML] [beep3r/poc-exp](https://github.com/beep3r/poc-exp)
+- [**51**星][5m] [Py] [bambish/scanqli](https://github.com/bambish/scanqli) SQLi scanner to detect SQL vulns
- [**51**星][2m] [Py] [azure-samples/python-docs-hello-world](https://github.com/azure-samples/python-docs-hello-world) A simple python application for docs
- [**51**星][2y] [Py] [awnumar/blind-sql-bitshifting](https://github.com/awnumar/blind-sql-bitshifting) A blind SQL injection module that uses bitshfting to calculate characters.
-- [**51**星][3y] [annsec/awesome-cybersecurity](https://github.com/annsec/awesome-cybersecurity) Curated list of awesome cybersecurity companies and solutions.
+- [**51**星][2d] [Py] [angr/tracer](https://github.com/angr/tracer) Utilities for generating dynamic traces
- [**51**星][11m] [C] [anestisb/radamsa-android](https://github.com/anestisb/radamsa-android) An Android port of radamsa fuzzer
- [**51**星][1y] [HTML] [an0nud4y/blackeye](https://github.com/an0nud4y/blackeye) The ultimate phishing tool with 38 websites available!
-- [**51**星][26d] [Py] [ahmia/ahmia-crawler](https://github.com/ahmia/ahmia-crawler) Collection of crawlers used by the ahmia search engine
-- [**51**星][1m] [Py] [afagarap/gru-svm](https://github.com/afagarap/gru-svm) [ICMLC 2018] A Neural Network Architecture Combining Gated Recurrent Unit (GRU) and Support Vector Machine (SVM) for Intrusion Detection
+- [**51**星][2y] [Shell] [alephsecurity/initroot](https://github.com/alephsecurity/initroot) Motorola Untethered Jailbreak: Exploiting CVE-2016-10277 for Secure Boot and Device Locking bypass
+- [**51**星][8m] [aldelaro5/ghidra-gekko-broadway-lang](https://github.com/aldelaro5/ghidra-gekko-broadway-lang) Ghidra language definition for the Gekko and Broadway CPU variant used in the Nintendo GameCube and Nintendo Wii respectively
+- [**51**星][28d] [Py] [ahmia/ahmia-crawler](https://github.com/ahmia/ahmia-crawler) Collection of crawlers used by the ahmia search engine
+- [**51**星][6d] [Py] [afagarap/gru-svm](https://github.com/afagarap/gru-svm) [ICMLC 2018] A Neural Network Architecture Combining Gated Recurrent Unit (GRU) and Support Vector Machine (SVM) for Intrusion Detection
- [**51**星][6y] [Py] [aeondave/tilt](https://github.com/aeondave/tilt) Terminal Ip Lookup Tool
- [**51**星][1y] [C] [adrianyy/keinject](https://github.com/adrianyy/keinject) Kernel LdrLoadDll injector
-- [**51**星][2y] [Py] [0xd34db33f/gfyp](https://github.com/0xd34db33f/gfyp) Unification of dnstwist + SQLite + Email reporting. Set it as a cron job that runs every hour, give it a list of domains and email addresses for reporting, then watch it go find stuff.
- [**51**星][11m] [c] [NtQuery/scyllahide](https://bitbucket.org/ntquery/scyllahide)
-- [**50**星][21d] [Py] [frida/frida-tools](https://github.com/frida/frida-tools) Frida CLI tools
-- [**50**星][2y] [Jupyter Notebook] [calebmadrigal/radio-hacking-scripts](https://github.com/calebmadrigal/radio-hacking-scripts) Scripts to aid in the manipulation of electromagnetic radiation (for use with gnu_radio and SDR).
-- [**50**星][14d] [Py] [circl/douglas-quaid](https://github.com/circl/douglas-quaid) Open source software for image correlation, distance and analysis
-- [**50**星][27d] [Py] [jas502n/solr_rce](https://github.com/jas502n/solr_rce) Apache Solr RCE via Velocity template
-- [**50**星][21d] [h2hconference/2019](https://github.com/h2hconference/2019) H2HC 2019 Slides/Materials/Presentations
-- [**50**星][1y] [Py] [zhovner/airport-sniffer](https://github.com/zhovner/airport-sniffer) Very simple Wi-Fi sniffer and dumps parser for built-in macbook AirPort Extreme card. Only native MacOS tools used.
-- [**50**星][3y] [wh1t3p1g/struts2environment](https://github.com/wh1t3p1g/Struts2Environment) Struts2 历史版本的漏洞环境
-- [**50**星][25d] [TypeScript] [tjson/tjson.js](https://github.com/tjson/tjson.js) JavaScript-compatible implementation of Tagged JSON (TJSON), written in TypeScript.
+- [**50**星][4y] [danielmiessler/securitytools](https://github.com/danielmiessler/securitytools) A repo for collecting and organizing security tools of various types. As new ones come out, they get added to the list.
+- [**50**星][23d] [Py] [frida/frida-tools](https://github.com/frida/frida-tools) Frida CLI tools
+- [**50**星][4y] [Py] [wapiflapi/wsym](https://github.com/wapiflapi/wsym) Adds symbols to a ELF file.
+- [**50**星][5y] [Py] [xiphosresearch/steelcon-python-injection](https://github.com/xiphosresearch/steelcon-python-injection) Python Process Injection PoC Code from my SteelCon talk in 2014
+- [**50**星][16d] [Py] [circl/douglas-quaid](https://github.com/circl/douglas-quaid) Open source software for image correlation, distance and analysis
+- [**50**星][23d] [h2hconference/2019](https://github.com/h2hconference/2019) H2HC 2019 Slides/Materials/Presentations
+- [**50**星][2m] [Shell] [mwz1tn/free-v2ray](https://github.com/mwz1tn/free-v2ray) 免费v2ray分享,V2ray安装使用教程,墙裂的购买使用教程
+- [**50**星][6m] [JS] [smallmi/omms](https://github.com/smallmi/omms) OMMS运维监控系统,功能介绍: 资产管理 应用管理 任务执行 权限管理等
+- [**50**星][6d] [TS] [tjson/tjson.js](https://github.com/tjson/tjson.js) JavaScript-compatible implementation of Tagged JSON (TJSON), written in TypeScript.
- [**50**星][9m] [C] [lab313ru/smd_ida_tools](https://github.com/lab313ru/smd_ida_tools) Sega Genesis/MegaDrive ROM文件加载器,Z80音频驱动加载器,IDA Pro调试器
-- [**50**星][3m] [Py] [lich4/personal_script](https://github.com/lich4/personal_script) 010Editor/BurpSuite/Frida/IDA等多个工具的多个脚本
- - [010Editor](https://github.com/lich4/personal_script/tree/master/010Editor_Script) 010Editor的多个脚本
- - [ParamChecker](https://github.com/lich4/personal_script/tree/master/BurpSuite_Script) Burp插件
- - [Frida](https://github.com/lich4/personal_script/tree/master/Frida_script) Frida多个脚本
- - [IDA](https://github.com/lich4/personal_script/tree/master/IDA_Script) IDA Scripts
- - [IDA-read_unicode.py](https://github.com/lich4/personal_script/blob/master/IDA_Script/read_unicode.py) IDA插件,识别程序中的中文字符
- - [IDA-add_xref_for_macho](https://github.com/lich4/personal_script/blob/master/IDA_Script/add_xref_for_macho.py) 辅助识别Objective-C成员函数的caller和callee
- - [IDA-add_info_for_androidgdb](https://github.com/lich4/personal_script/blob/master/IDA_Script/add_info_for_androidgdb.py) 使用gdbserver和IDA调试Android时,读取module列表和segment
- - [IDA-trace_instruction](https://github.com/lich4/personal_script/blob/master/IDA_Script/trace_instruction.py) 追踪指令流
- - [IDA-detect_ollvm](https://github.com/lich4/personal_script/blob/master/IDA_Script/detect_ollvm.py) 检测OLLVM,在某些情况下修复(Android/iOS)
- - [IDA-add_block_for_macho](https://github.com/lich4/personal_script/blob/master/IDA_Script/add_block_for_macho.py) 分析macho文件中的block结构
- [**50**星][1y] [JS] [lukechilds/onionite](https://github.com/lukechilds/onionite) Explore the Tor network
- [**50**星][10m] [Shell] [cyb0r9/network-attacker](https://github.com/Cyb0r9/network-attacker) Programmed For Penetration Testing Beginners . This Program Based on Mdk3 . "WiFi Stress Testing Beacon Flooding & Deauthentication Attack "
- [**50**星][1y] [Py] [synacktiv-contrib/kernelcache-laundering](https://github.com/Synacktiv-contrib/kernelcache-laundering) load iOS12 kernelcaches and PAC code in IDA
- [**50**星][2y] [C#] [zodiacon/windbgx](https://github.com/zodiacon/windbgx) An attempt to create a friendly version of WinDbg
- [**50**星][3y] [Py] [zengqiu/study](https://github.com/zengqiu/study)
- [**50**星][2y] [C++] [zcgonvh/cve-2017-0213](https://github.com/zcgonvh/cve-2017-0213) CVE-2017-0213 for command line
-- [**50**星][8d] [yassergersy/cazador_unr](https://github.com/yassergersy/cazador_unr) Simple Hacking tools
-- [**50**星][8m] [Py] [yarox24/attack_monitor](https://github.com/yarox24/attack_monitor) Endpoint detection & Malware analysis software
- [**50**星][2y] [xssninja/alexa-hacker-mode](https://github.com/xssninja/alexa-hacker-mode) Node JS code for a set of Alexa voice skills designed to assist hackers and developers with common tasks
- [**50**星][3y] [C] [williamshowalter/hdroot-bootkit-analysis](https://github.com/williamshowalter/hdroot-bootkit-analysis) Supporting Files on my analysis of the malware designated hdroot.
+- [**50**星][5m] [HTML] [whatwg/mimesniff](https://github.com/whatwg/mimesniff) MIME Sniffing Standard
- [**50**星][1y] [Go] [weppos/dnscaa](https://github.com/weppos/dnscaa)
- [**50**星][1y] [Py] [virtuesecurity/aws-extender-cli](https://github.com/virtuesecurity/aws-extender-cli) AWS Extender CLI is a command-line script to test S3 buckets as well as Google Storage buckets and Azure Storage containers for common misconfiguration issues using the boto/boto3 SDK library.
- [**50**星][3y] [C] [vikasnkumar/wisecracker](https://github.com/vikasnkumar/wisecracker) Wisecracker is a high performance distributed cryptanalysis framework.
- [**50**星][2y] [C] [vallejocc/poc-inject-data-wm_copydata](https://github.com/vallejocc/poc-inject-data-wm_copydata) A tiny PoC to inject and execute code into explorer.exe with WM_SETTEXT+WM_COPYDATA+SetThreadContext
-- [**50**星][4y] [C++] [uitra/injectora](https://github.com/uitra/injectora) x86/x64 manual mapping injector using the JUCE library
+- [**50**星][9d] [PHP] [tsug0d/myawesomewebchallenge](https://github.com/tsug0d/myawesomewebchallenge) Collection of my capture-the-flag web challenge in any levels
- [**50**星][3y] [Ruby] [tresacton/dspectrum](https://github.com/tresacton/dspectrum) Automated RF/SDR Signal Analysis [Reverse Engineering]
-- [**50**星][1y] [C++] [tomladder/winlib](https://github.com/tomladder/winlib) Windows Manipulation Library (x64, User/Kernelmode)
+- [**50**星][2y] [Ruby] [thezdi/derbycon2017](https://github.com/thezdi/derbycon2017) DerbyCon 2017 Presentation VMware Escapology: How to Houdini the Hypervisor
- [**50**星][6y] [PHP] [taogogo/taocms](https://github.com/taogogo/taocms) taocms is a very very small CMS( Content Management System) ,base on php,support mysql/sqlite
+- [**50**星][8m] [ObjC] [ssyzh/weworktweak](https://github.com/ssyzh/weworktweak) 逆向破解企业微信定位,在家就能打卡了!
- [**50**星][4y] [C++] [sri-csl/stegotorus](https://github.com/sri-csl/stegotorus) A Camouflage Proxy for the Tor Anonymity System
- [**50**星][9y] [Perl] [spiderlabs/thicknet](https://github.com/spiderlabs/thicknet) TCP session interception and injection framework
+- [**50**星][10m] [sourcingdenis/free-online-competitive-intelligence](https://github.com/sourcingdenis/free-online-competitive-intelligence) #OSINT
- [**50**星][1y] [JS] [soluto/webdriverio-zap-proxy](https://github.com/soluto/webdriverio-zap-proxy) Demo - how to easily build security testing for Web App, using Zap and Glue
-- [**50**星][2m] [C#] [smourier/tracespy](https://github.com/smourier/tracespy) TraceSpy is a pure .NET, 100% free and open source, alternative to the very popular SysInternals DebugView tool.
-- [**50**星][3y] [Objective-C] [skelsec/biterrant](https://github.com/skelsec/biterrant) BitErrant
+- [**50**星][3y] [ObjC] [skelsec/biterrant](https://github.com/skelsec/biterrant) BitErrant
- [**50**星][2y] [Py] [sfwishes/ollvm_de_fla](https://github.com/sfwishes/ollvm_de_fla) deobfuscation ollvm's fla
-- [**50**星][3m] [Java] [sensepost/apostille](https://github.com/sensepost/apostille)
-- [**50**星][8m] [Py] [scarvell/grandstream_exploits](https://github.com/scarvell/grandstream_exploits)
+- [**50**星][9m] [Py] [scarvell/grandstream_exploits](https://github.com/scarvell/grandstream_exploits)
+- [**50**星][11d] [Go] [sandertv/gophertunnel](https://github.com/sandertv/gophertunnel) A Minecraft (Bedrock Edition) library written in Go used for creating proxies, servers, clients and tools
- [**50**星][2y] [Py] [samuelcolvin/dnserver](https://github.com/samuelcolvin/dnserver) Simple development DNS server written in python
- [**50**星][3y] [C] [ryanmallon/thelostvikingstools](https://github.com/ryanmallon/thelostvikingstools) Reverse Engineered Tools/Library for the DOS game The Lost Vikings
- [**50**星][12m] [C] [realoriginal/reflective-rewrite](https://github.com/realoriginal/reflective-rewrite) Attempt to rewrite StephenFewers Reflective DLL Injection to make it a little more stealthy. Some code taken from Meterpreter & sRDI. Currently a work in progress.
+- [**50**星][4d] [Py] [pylyf/networm](https://github.com/pylyf/networm) Python network worm that spreads on the local network and gives the attacker control of these machines.
- [**50**星][1y] [C++] [psychotropos/xhunter1_privesc](https://github.com/psychotropos/xhunter1_privesc) (Ab)using the XIGNCODE3 driver to open a handle to any process.
- [**50**星][5m] [C] [praneethkarnena/ddos-scripts](https://github.com/praneethkarnena/ddos-scripts) This repo consists of various DDoS scripts, collected from internet. Layer-4 and Layer-7 levels can be targeted using these scripts.
-- [**50**星][12m] [JS] [platdrag/unblockablechains](https://github.com/platdrag/unblockablechains) Unblockable Chains - A POC on using blockchain as infrastructure for malware operations
+- [**50**星][1y] [JS] [platdrag/unblockablechains](https://github.com/platdrag/unblockablechains) Unblockable Chains - A POC on using blockchain as infrastructure for malware operations
- [**50**星][3m] [Shell] [piffall/pxesetupwizard](https://github.com/piffall/pxesetupwizard) PXE Setup Wizard. Netboot Debian, Ubuntu, System Rescue CD, FreeDOS and more.
-- [**50**星][10d] [Java] [p1sec/sigfw](https://github.com/p1sec/sigfw) Open Source Signaling Firewall for SS7, Diameter filtering, antispoof and antisniff
+- [**50**星][3d] [Java] [p1sec/sigfw](https://github.com/p1sec/sigfw) Open Source Signaling Firewall for SS7, Diameter filtering, antispoof and antisniff
- [**50**星][2y] [newlog/r2_malware_unpacking_training](https://github.com/newlog/r2_malware_unpacking_training) 使用 r2 脱壳恶意代码教程
-- [**50**星][1y] [Java] [netspi/burpextractor](https://github.com/netspi/burpextractor) A Burp extension for generic extraction and reuse of data within HTTP requests and responses.
-- [**50**星][2m] [Py] [nelenkov/android-device-check](https://github.com/nelenkov/android-device-check) Check Android device security settings
- [**50**星][2y] [Py] [neargle/pil-rce-by-ghostbutt](https://github.com/neargle/pil-rce-by-ghostbutt) Exploiting Python PIL Module Command Execution Vulnerability
-- [**50**星][7d] [Py] [nccgroup/asadbg](https://github.com/nccgroup/asadbg) asadbg is a framework of tools to aid in automating live debugging of Cisco ASA devices
+- [**50**星][9d] [Py] [nccgroup/asadbg](https://github.com/nccgroup/asadbg) asadbg is a framework of tools to aid in automating live debugging of Cisco ASA devices
- [**50**星][2y] [Py] [navytitanium/dnsmasterchef](https://github.com/navytitanium/dnsmasterchef) Selective DNS proxy forwarding based on DNS threat blocking providers intelligence.
+- [**50**星][3y] [Py] [n0pe-sled/apache2-mod-rewrite-setup](https://github.com/n0pe-sled/apache2-mod-rewrite-setup) Quickly Implement Mod-Rewrite in your infastructure
- [**50**星][1m] [C++] [ms-iot/imx-iotcore](https://github.com/ms-iot/imx-iotcore) Windows 10 IoT Core BSP for NXP i.MX Processors
-- [**50**星][3m] [mikerah/awesome-privacy-on-blockchains](https://github.com/mikerah/awesome-privacy-on-blockchains) A curated list of privacy on blockchains resources
- [**50**星][3y] [Py] [matthewdunwoody/block-parser](https://github.com/matthewdunwoody/block-parser) Parser for Windows PowerShell script block logs
+- [**50**星][4m] [JS] [mattcg/socks5-client](https://github.com/mattcg/socks5-client) SOCKS v5 client socket implementation in JavaScript for Node.JS.
- [**50**星][2y] [C] [leonnewton/selfmodify](https://github.com/leonnewton/selfmodify) Dalvik字节码自篡改原理及实现
- [**50**星][1y] [JS] [leocardoso94/push-notification-demo](https://github.com/leocardoso94/push-notification-demo) Demonstrate how to receive notifications using Firebase
-- [**50**星][3y] [Py] [kovige/netscan](https://github.com/kovige/netscan) 配合reGeorg使用的内网扫描工具
-- [**50**星][5y] [PowerShell] [kfosaaen/get-lapspasswords](https://github.com/kfosaaen/get-lapspasswords) Powershell function to pull the local admin passwords from LDAP, stored there by LAPS.
+- [**50**星][8m] [klaver/sysctl](https://github.com/klaver/sysctl) Linux/BSD kernel tuning and network security hardening optimizations, improving the performance of server systems via optimized sysctl tweaks
+- [**50**星][5y] [PS] [kfosaaen/get-lapspasswords](https://github.com/kfosaaen/get-lapspasswords) Powershell function to pull the local admin passwords from LDAP, stored there by LAPS.
- [**50**星][2y] [C++] [k0keoyo/dark_composition_case_study_integer_overflow](https://github.com/k0keoyo/dark_composition_case_study_integer_overflow)
-- [**50**星][6y] [C++] [jyang772/xor_crypter](https://github.com/jyang772/xor_crypter) XOR encryption, malware crypter
- [**50**星][4y] [Py] [jpyorre/intelligenthoneynet](https://github.com/jpyorre/intelligenthoneynet) The Intelligent Honey Net Project attempts to create actionable information from honeypots
- [**50**星][2y] [JS] [jpenalbae/rarop](https://github.com/jpenalbae/rarop) Graphical ROP chain builder using radare2 and r2pipe
- [**50**星][2y] [JS] [johnhhorton/node-nmap](https://github.com/johnhhorton/node-nmap) NPM package for interfacing with local NMAP installation
- [**50**星][3y] [Shell] [jgamblin/curluseragent](https://github.com/jgamblin/curluseragent) Curl Script To Change User Agent
+- [**50**星][2y] [Shell] [jaybrown/dnscrypt-menu](https://github.com/jaybrown/dnscrypt-menu) Manage DNSCrypt from the macOS menu bar (BitBar plugin)
- [**50**星][2y] [Go] [jakewins/findbtc](https://github.com/jakewins/findbtc) findbtc: 在损坏、格式化或被覆盖写入的磁盘上查找比特币钱包
+- [**50**星][2m] [Py] [importctf/instagram-hacker](https://github.com/importctf/instagram-hacker) This is an advanced script for Instagram bruteforce attacks. WARNING THIS IS A REAL TOOL!
- [**50**星][2y] [JS] [idan5x/switcheroo](https://github.com/idan5x/switcheroo) Exploiting CVE-2016-4657 to JailBreak the Nintendo Switch
-- [**50**星][2m] [TSQL] [horsicq/xntsv](https://github.com/horsicq/xntsv) XNTSV program for detailed viewing of system structures for Windows.
- [**50**星][7m] [C] [hfiref0x/mpenum](https://github.com/hfiref0x/mpenum) Enumerate Windows Defender threat families and dump their names according category
- [**50**星][5m] [Smali] [hellohudi/androidreversenotes](https://github.com/hellohudi/androidreversenotes) Android逆向笔记---从入门到入土
+- [**50**星][2y] [Py] [h2hconference/2017](https://github.com/h2hconference/2017) H2HC 2017 Slides/Materials/Presentations
- [**50**星][2y] [Py] [h0nus/backtome](https://github.com/h0nus/backtome) Little tool made in python to create payloads for Linux, Windows and OSX with unique handler
-- [**50**星][6m] [Go] [gyyyy/footprint](https://github.com/gyyyy/footprint) 个人笔记
- [**50**星][8y] [Py] [gyim/stupidgit](https://github.com/gyim/stupidgit) A cross-platform git GUI with strong submodule support
-- [**50**星][2y] [PowerShell] [gobiasinfosec/wireless_query](https://github.com/gobiasinfosec/wireless_query) Query Active Directory for Workstations and then pull their Wireless Network Passwords
+- [**50**星][3m] [C#] [guillac/wsmanager](https://github.com/guillac/wsmanager) Webshell Manager
+- [**50**星][2y] [PS] [gobiasinfosec/wireless_query](https://github.com/gobiasinfosec/wireless_query) Query Active Directory for Workstations and then pull their Wireless Network Passwords
- [**50**星][1y] [JS] [fortiguard-lion/frida-scripts](https://github.com/fortiguard-lion/frida-scripts)
- [**50**星][4y] [C++] [fishstiqz/poolinfo](https://github.com/fishstiqz/poolinfo) kernel pool windbg extension
-- [**50**星][2y] [Visual Basic] [fireeye/remote_lookup](https://github.com/fireeye/remote_lookup) Resolves DLL API entrypoints for a process w/ remote query capabilities.
-- [**50**星][2y] [Java] [fergarrui/custom-bytecode-analyzer](https://github.com/fergarrui/custom-bytecode-analyzer) Java bytecode analyzer customizable via JSON rules
-- [**50**星][2y] [Shell] [evyatarmeged/stegextract](https://github.com/evyatarmeged/stegextract) Detect hidden files and text in images
+- [**50**星][2y] [Visual Basic .NET] [fireeye/remote_lookup](https://github.com/fireeye/remote_lookup) Resolves DLL API entrypoints for a process w/ remote query capabilities.
- [**50**星][3m] [Haskell] [essandess/adblock2privoxy](https://github.com/essandess/adblock2privoxy) Convert adblock config files to privoxy format
- [**50**星][2y] [JS] [ericr/sol-function-profiler](https://github.com/ericr/sol-function-profiler) Solidity Contract Function Profiler
-- [**50**星][11m] [Py] [elevenpaths/neto](https://github.com/elevenpaths/neto) Neto | A tool to analyse browser extensions
-- [**50**星][28d] [Py] [d-rickyy-b/pastepwn](https://github.com/d-rickyy-b/pastepwn) Python framework to scrape Pastebin pastes and analyze them
+- [**50**星][3y] [PHP] [edent/tweeview](https://github.com/edent/tweeview) A Tree View For Tweets
+- [**50**星][3y] [C++] [drizzlerisk/ntpdoser](https://github.com/drizzlerisk/ntpdoser) NTP Doser is a NTP Amplification DoS/DDoS attack tool for penttesting
+- [**50**星][1y] [PS] [dgg-it/match-adhashes](https://github.com/dgg-it/match-adhashes) Builds a hashmap of AD NTLM hashes/usernames and iterates through a second list of hashes checking for the existence of each entry in the AD NTLM hashmap
+- [**50**星][2y] [PHP] [daudmalik06/reconcat](https://github.com/daudmalik06/reconcat) A small Php application to fetch archive url snapshots from archive.org. using it you can fetch complete list of snapshot urls of any year or complete list of all years possible. Made Specially for penetration testing purpose.
+- [**50**星][2y] [Py] [citp/thewebneverforgets](https://github.com/citp/thewebneverforgets) Public code release for The Web Never Forgets paper
- [**50**星][3y] [Py] [cisco-talos/smi_check](https://github.com/cisco-talos/smi_check) Smart Install Client Scanner
-- [**50**星][4m] [PowerShell] [chrisad/wiki-dictionary-creator](https://github.com/chrisad/wiki-dictionary-creator) Creates dictionaries based on Wikipedia titles
- [**50**星][2y] [Java] [channingbj/meerkat](https://github.com/channingbj/meerkat) meerkat 是用于服务监控以及服务降级基础组件,主要为了解决调用外部接口的时候进行成功率,响应时间,QPS指标的监控,同时在成功率下降到预设的阈值以下的时候自动切断外部接口的调用,外部接口成功率恢复后自动恢复请求
-- [**50**星][7m] [Elixir] [calidog/certstream-server](https://github.com/calidog/certstream-server) Certificate Transparency Log aggregation, parsing, and streaming service written in Elixir
-- [**50**星][1y] [PowerShell] [bromiley/olaf](https://github.com/bromiley/olaf) Office365 Log Analysis Framework
-- [**50**星][23d] [HTML] [brampat/security](https://github.com/brampat/security) Collection of links to Security stuff
+- [**50**星][25d] [HTML] [brampat/security](https://github.com/brampat/security) Collection of links to Security stuff
- [**50**星][2y] [bluscreenofjeff/metasploit-resource-scripts](https://github.com/bluscreenofjeff/metasploit-resource-scripts)
-- [**50**星][1m] [Makefile] [blacktop/docker-ghidra](https://github.com/blacktop/docker-ghidra) Ghidra Client/Server Docker Image
- [**50**星][4y] [C++] [bishopfox/untwister](https://github.com/bishopfox/untwister) Seed recovery tool for PRNGs
-- [**50**星][5m] [Py] [bambish/scanqli](https://github.com/bambish/scanqli) SQLi scanner to detect SQL vulns
- [**50**星][3y] [Py] [ayoul3/cicspwn](https://github.com/ayoul3/cicspwn) CICSpwn is a tool to pentest a CICS Transaction servers on z/OS.
- [**50**星][3y] [Py] [aramosf/recoversqlite](https://github.com/aramosf/recoversqlite) recover deleted information from sqlite files.
+- [**50**星][4m] [C++] [antscode/macwifi](https://github.com/antscode/macwifi) A wifi system menu extension for 68k Macs.
- [**50**星][1y] [Py] [anssi-fr/route_leaks](https://github.com/anssi-fr/route_leaks) BGP Route Leaks Detection
+- [**50**星][7y] [C] [andy928/xpenology](https://github.com/andy928/xpenology) XPEnology Project
- [**50**星][1y] [Py] [alexknvl/fuzzball](https://github.com/alexknvl/fuzzball) Scala fuzzer
-- [**50**星][8m] [aldelaro5/ghidra-gekko-broadway-lang](https://github.com/aldelaro5/ghidra-gekko-broadway-lang) Ghidra language definition for the Gekko and Broadway CPU variant used in the Nintendo GameCube and Nintendo Wii respectively
+- [**50**星][2m] [C] [alainesp/hashsuitedroid](https://github.com/alainesp/hashsuitedroid) Hash Suite for Android
+- [**50**星][2y] [Py] [adrianherrera/virustotal](https://github.com/adrianherrera/virustotal) A simple command-line script to interact with the virustotal-api
- [**50**星][11m] [C] [acoinfo/kidvpn](https://github.com/acoinfo/kidvpn) The world's smallest VPN server and client.
+- [**50**星][7m] [C#] [9ee1/capstone.net](https://github.com/9ee1/capstone.net) .NET Core and .NET Framework binding for the Capstone Disassembly Framework
- [**50**星][2y] [0xhjk/caidao](https://github.com/0xhjk/caidao) 中国菜刀及其衍生版本的Webshell管理工具收集
- [**50**星][7y] [Py] [0xd012/wifuzzit](https://github.com/0xd012/wifuzzit) a 802.11 wireless fuzzer
-- [**50**星][7m] [C] [0cch/0cchext](https://github.com/0cch/0cchext) 0CCh Windbg extension
-- [**49**星][4y] [danielmiessler/securitytools](https://github.com/danielmiessler/securitytools) A repo for collecting and organizing security tools of various types. As new ones come out, they get added to the list.
+- [**49**星][2y] [C] [xueeinstein/darknet-vis](https://github.com/xueeinstein/darknet-vis) Visualize YOLO feature map in prediction for easily checking your model performance
+- [**49**星][3y] [Assembly] [t00sh/assembly](https://github.com/t00sh/assembly) Collection of Linux shellcodes
- [**49**星][7m] [Py] [secgroundzero/tetanus](https://github.com/secgroundzero/tetanus) Helper script for mangling CS payloads
+- [**49**星][4m] [Makefile] [shadowsocks/openwrt-feeds](https://github.com/shadowsocks/openwrt-feeds) OpenWrt/LEDE feeds
- [**49**星][2y] [HTML] [qinyuhang/network-knowledge](https://github.com/qinyuhang/network-knowledge) 前端必备网络基础知识
-- [**49**星][4y] [Py] [wapiflapi/wsym](https://github.com/wapiflapi/wsym) Adds symbols to a ELF file.
-- [**49**星][5y] [Py] [xiphosresearch/steelcon-python-injection](https://github.com/xiphosresearch/steelcon-python-injection) Python Process Injection PoC Code from my SteelCon talk in 2014
-- [**49**星][24d] [C++] [rek7/ddoor](https://github.com/rek7/ddoor) DDoor - cross platform backdoor using dns txt records
-- [**49**星][3m] [C] [chroblert/domainweakpasswdcheck](https://github.com/chroblert/domainweakpasswdcheck) 内网安全·域账号弱口令审计
-- [**49**星][2m] [Shell] [mwz1tn/free-v2ray](https://github.com/mwz1tn/free-v2ray) 免费v2ray分享,V2ray安装使用教程,墙裂的购买使用教程
+- [**49**星][6m] [C++] [0x00-0x00/cve-2019-0841-bypass](https://github.com/0x00-0x00/cve-2019-0841-bypass) A fully automatic CVE-2019-0841 bypass targeting all versions of Edge in Windows 10.
+- [**49**星][4m] [Py] [skelsec/responder3](https://github.com/skelsec/responder3) Responder for Python3
+- [**49**星][1m] [Dockerfile] [winterssy/ssr-docker](https://github.com/winterssy/ssr-docker) 使用Docker部署ShadowsocksR服务端
+- [**49**星][2y] [Py] [fpfeng/g2w.online](https://github.com/fpfeng/g2w.online) 域名已被DNS污染,水表已拆
- [**49**星][2y] [C] [cnlohr/wifirxpower](https://github.com/cnlohr/wifirxpower) Linux-based WiFi RX Power Grapher
-- [**49**星][3m] [HTML] [0xbird/0xbird.github.io](https://github.com/0xbird/0xbird.github.io) 欢迎关注小鸟的技术博客!(Pwn/智能硬件/AI安全/漏洞分析/威胁情报/RedTeam/移动设备/内核/虚拟机/容器安全/浏览器/CPU/安全开发/漏洞挖掘/APT/病毒分析/安全学术)
+- [**49**星][3m] [Py] [makuga01/dnsfookup](https://github.com/makuga01/dnsfookup) DNS rebinding toolkit
+- [**49**星][1m] [Java] [portswigger/stepper](https://github.com/portswigger/stepper) A natural evolution of Burp Suite's Repeater tool
+- [**49**星][29d] [PS] [s3cur3th1ssh1t/creds](https://github.com/S3cur3Th1sSh1t/Creds) Some usefull Scripts and Executables for Pentest & Forensics
- [**49**星][2y] [Ruby] [mrbrutti/cartero](https://github.com/mrbrutti/Cartero) Mailing Phishing Framework - This Branch is UNSTABLE :: Official STABLE master branch at
-- [**49**星][4y] [PowerShell] [xme/powershell_scripts](https://github.com/xme/powershell_scripts) Miscellaneous PowerShell scripts
-- [**49**星][9d] [JS] [whichbrowser/parser-javascript](https://github.com/whichbrowser/parser-javascript) Browser sniffing gone too far — A useragent parser library for JavaScript
+- [**49**星][1y] [Perl] [bigsen/crack-file](https://github.com/bigsen/Crack-file) Theos File
+- [**49**星][1y] [Go] [zredshift/mimemagic](https://github.com/zredshift/mimemagic) Powerful and versatile MIME sniffing package using pre-compiled glob patterns, magic number signatures, XML document namespaces, and tree magic for mounted volumes, generated from the XDG shared-mime-info database.
+- [**49**星][4y] [PS] [xme/powershell_scripts](https://github.com/xme/powershell_scripts) Miscellaneous PowerShell scripts
+- [**49**星][23d] [Shell] [xhorak/firefox-devedition-flatpak](https://github.com/xhorak/firefox-devedition-flatpak) Flatpak manifest and patches to build Firefox
+- [**49**星][11d] [JS] [whichbrowser/parser-javascript](https://github.com/whichbrowser/parser-javascript) Browser sniffing gone too far — A useragent parser library for JavaScript
- [**49**星][1y] [Py] [undeadsec/herakeylogger](https://github.com/undeadsec/herakeylogger) Chrome Keylogger Extension | Post Exploitation Tool
-- [**49**星][1y] [JS] [tsug0d/myawesomewebchallenge](https://github.com/tsug0d/myawesomewebchallenge) Collection of my capture-the-flag web challenge in any levels
-- [**49**星][24d] [Py] [trailofbits/ctf-challenges](https://github.com/trailofbits/ctf-challenges) CTF Challenges
+- [**49**星][4y] [C++] [uitra/injectora](https://github.com/uitra/injectora) x86/x64 manual mapping injector using the JUCE library
+- [**49**星][26d] [Py] [trailofbits/ctf-challenges](https://github.com/trailofbits/ctf-challenges) CTF Challenges
- [**49**星][2m] [Py] [tna0y/python-random-module-cracker](https://github.com/tna0y/python-random-module-cracker) Predict python's random module generated values.
- [**49**星][10m] [timip/osee](https://github.com/timip/osee) OSEE Preparation
-- [**49**星][2y] [Ruby] [thezdi/derbycon2017](https://github.com/thezdi/derbycon2017) DerbyCon 2017 Presentation VMware Escapology: How to Houdini the Hypervisor
+- [**49**星][2y] [Py] [thelsa/awbruter](https://github.com/thelsa/awbruter) 千倍速一句话木马密码爆破工具
- [**49**星][2y] [java] [toufikairane/andromalware](https://github.com/tfairane/andromalware) Android Malware for educational purpose
- [**49**星][5y] [Perl] [tanjiti/waftest](https://github.com/tanjiti/waftest) WAF测试工具
+- [**49**星][2y] [Py] [steinsgatep001/binary](https://github.com/steinsgatep001/binary) Sleep_Pwn_f1sh
- [**49**星][5m] [Jupyter Notebook] [sroberts/jager](https://github.com/sroberts/jager) Hunting IOCs all day every day...
-- [**49**星][10m] [sourcingdenis/free-online-competitive-intelligence](https://github.com/sourcingdenis/free-online-competitive-intelligence) #OSINT
- [**49**星][2y] [JS] [sola-da/redos-vulnerabilities](https://github.com/sola-da/redos-vulnerabilities) A list of ReDoS vulnerabilities in npm modules found by the Software Lab at TU Darmstadt. For each vulnerability, there is a proof-of-concept exploit, showing how the slowdown may occur. The resources in this repository are provided for research purpose only. Please read below for more details.
-- [**49**星][25d] [JS] [silverwind/default-gateway](https://github.com/silverwind/default-gateway) Get the default network gateway, cross-platform.
+- [**49**星][27d] [JS] [silverwind/default-gateway](https://github.com/silverwind/default-gateway) Get the default network gateway, cross-platform.
- [**49**星][4y] [Py] [silentsignal/duncan](https://github.com/silentsignal/duncan) Duncan - Blind SQL injector skeleton
- [**49**星][1y] [Swift] [sherlouk/swiftprovisioningprofile](https://github.com/sherlouk/swiftprovisioningprofile) Parse iOS mobile provisioning files into Swift models
- [**49**星][2y] [JS] [secureskytechnology/badlibrary](https://github.com/secureskytechnology/badlibrary) vulnerable web application for training
- [**49**星][3y] [Py] [secrary/ellascanner](https://github.com/secrary/ellascanner) Passive web scanner [This project is not maintained anymore]
- [**49**星][8m] [Shell] [screetsec/imr0t](https://github.com/screetsec/imr0t) imR0T: Send a quick message with simple text encryption to your whatsapp contact and protect your text by encrypting and decrypting, basically in ROT13 with new multi encryption based algorithm on ASCII and Symbols Substitution
-- [**49**星][9d] [Go] [sandertv/gophertunnel](https://github.com/sandertv/gophertunnel) A Minecraft (Bedrock Edition) library written in Go used for creating proxies, servers, clients and tools
+- [**49**星][7m] [Shell] [scipag/nac_bypass](https://github.com/scipag/nac_bypass) Script collection to bypass Network Access Control (NAC, 802.1x)
- [**49**星][9y] [C] [s7ephen/sandkit](https://github.com/s7ephen/sandkit) A Toolkit to assist with the investigation of Sandboxing software
+- [**49**星][30d] [Java] [rub-nds/tls-scanner](https://github.com/rub-nds/tls-scanner) The TLS-Scanner Module from TLS-Attacker
- [**49**星][3y] [C++] [rolisoft/host-scanner](https://github.com/rolisoft/host-scanner) Active/passive network scanner and autonomous vulnerability assessment application.
- [**49**星][5y] [Java] [retme7/broadanywhere_poc_by_retme_bug_17356824](https://github.com/retme7/broadanywhere_poc_by_retme_bug_17356824) a poc of Android bug 17356824
+- [**49**星][4y] [C] [relys/3ds_multi_decryptor](https://github.com/relys/3ds_multi_decryptor)
- [**49**星][4y] [Java] [rapid7/metasploit-javapayload](https://github.com/rapid7/metasploit-javapayload) THIS REPO IS OBSOLETE. USE
+- [**49**星][2d] [C] [rahra/onioncat](https://github.com/rahra/onioncat) Official repository of OnionCat, the VPN adapter for Tor and I2P.
- [**49**星][10m] [proofofcalc/cve-2019-6453-poc](https://github.com/proofofcalc/cve-2019-6453-poc) Proof of calc for CVE-2019-6453
- [**49**星][2y] [Py] [prncc/steam-scraper](https://github.com/prncc/steam-scraper) A pair of spiders for scraping product data and reviews from Steam.
- [**49**星][4m] [C] [pinkp4nther/sutekh](https://github.com/pinkp4nther/sutekh) An example rootkit that gives a userland process root permissions
-- [**49**星][2m] [PowerShell] [palantir/exploitguard](https://github.com/palantir/exploitguard) Documentation and supporting script sample for Windows Exploit Guard
- [**49**星][2y] [C++] [osrdrivers/kmexts](https://github.com/osrdrivers/kmexts) Simple driver to register all available process, thread, image, Registry, and Object callbacks
- [**49**星][1y] [opensourcepentest/tools](https://github.com/opensourcepentest/tools) Tools used for Penetration testing / Red Teaming
+- [**49**星][1y] [C] [niklasb/elgoog](https://github.com/niklasb/elgoog) elgoog/searchme challenge from 34C3 CTF / WCTF 2018: sources & exploit
- [**49**星][3y] [Java] [necst/heldroid](https://github.com/necst/heldroid) Dissect Android Apps Looking for Ransomware Functionalities
-- [**49**星][3y] [Py] [n0pe-sled/apache2-mod-rewrite-setup](https://github.com/n0pe-sled/apache2-mod-rewrite-setup) Quickly Implement Mod-Rewrite in your infastructure
- [**49**星][6y] [CSS] [mubix/whitechapel](https://github.com/mubix/whitechapel) password cracking front end
- [**49**星][8m] [Shell] [mthbernardes/lfi-enum](https://github.com/mthbernardes/lfi-enum) Scripts to execute enumeration via LFI
- [**49**星][3y] [mrvaughan/defcon2016gsmdata](https://github.com/mrvaughan/defcon2016gsmdata) Just a place to dump the cdma data I collected while at Defcon 2016
- [**49**星][2y] [Py] [mrschyte/socksmon](https://github.com/mrschyte/socksmon) socksmon:使用 BURP 或 ZAP 的 TCP 拦截代理
- [**49**星][1y] [Perl] [mrash/fwsnort](https://github.com/mrash/fwsnort) Application Layer IDS/IPS with iptables
+- [**49**星][1y] [PS] [mmotti/mmotti-host-file](https://github.com/mmotti/mmotti-host-file) Heavily optimised, wildcard enabled host file for use with Samsung Knox Firewall.
- [**49**星][5y] [Py] [michael-yip/threattracker](https://github.com/michael-yip/threattracker) 监控由一组自定义谷歌搜索引擎索引的IoC,并生成告警
- [**49**星][3m] [Ruby] [mcpa-stlouis/hack-the-arch](https://github.com/mcpa-stlouis/hack-the-arch) Welcome to HackTheArch! A free open source scoring server for cyber Capture the Flag competitions!
- [**49**星][3y] [maldevel/rootkits-list-download](https://github.com/maldevel/rootkits-list-download) A curated list of rootkits found on Github and other sites.
- [**49**星][3y] [Ruby] [luizluca/bridge](https://github.com/luizluca/bridge) brigde is a dynamic port forwarder over HTTP (with HTTP PROXY support)
-- [**49**星][8m] [klaver/sysctl](https://github.com/klaver/sysctl) Linux/BSD kernel tuning and network security hardening optimizations, improving the performance of server systems via optimized sysctl tweaks
+- [**49**星][27d] [Java] [llvm-but-worse/maple-ir](https://github.com/llvm-but-worse/maple-ir) Industrial IR-based static analysis framework for Java bytecode
- [**49**星][2y] [Py] [juga0/dhcpcanon](https://github.com/juga0/dhcpcanon) DHCP client disclosing less identifying information.
- [**49**星][2m] [jcesarstef/ghhdb-github-hacking-database](https://github.com/jcesarstef/ghhdb-github-hacking-database) Github Hacking Database - My personal collection of Github Dorks to search for Confidential Information (Yes, it's a Github version of Google Dorks)
- [**49**星][6y] [Py] [isecpartners/rtspfuzzer](https://github.com/isecpartners/rtspfuzzer) RTSP network protocol fuzzer
- [**49**星][10m] [Py] [hrkfdn/deckard](https://github.com/hrkfdn/deckard) Deckard performs static and dynamic binary analysis on Android APKs to extract Xposed hooks
-- [**49**星][3m] [C#] [guillac/wsmanager](https://github.com/guillac/wsmanager) Webshell Manager
- [**49**星][2y] [JS] [freddyb/html2dom](https://github.com/freddyb/html2dom) generates JavaScript source code to create Elements from a given html string
- [**49**星][6y] [C++] [frankstain/pe-loader](https://github.com/frankstain/pe-loader) library, which help to describe or load and execute PE files.
- [**49**星][2m] [PHP] [fastly/wordpress-plugin](https://github.com/fastly/wordpress-plugin) The Official Fastly WordPress Plugin
- [**49**星][3y] [Java] [fabiomsr/okhttp-peer-certificate-extractor](https://github.com/fabiomsr/okhttp-peer-certificate-extractor) This tool extracts peer certificates from given certificates.
-- [**49**星][7m] [Py] [esecuritylab/kostebek](https://github.com/esecuritylab/kostebek)
- [**49**星][3y] [C++] [enigma0x3/messagebox](https://github.com/enigma0x3/messagebox) PoC dlls for Task Scheduler COM Hijacking
-- [**49**星][3y] [PowerShell] [enclaveconsulting/crypto-pki](https://github.com/enclaveconsulting/crypto-pki) Scripts related to Windows cryptography and PKI.
+- [**49**星][3y] [PS] [enclaveconsulting/crypto-pki](https://github.com/enclaveconsulting/crypto-pki) Scripts related to Windows cryptography and PKI.
- [**49**星][11m] [ember-cli/rfcs](https://github.com/ember-cli/rfcs) Archive of RFCs for changes to ember-cli (for current RFC repo see
- [**49**星][3y] [CSS] [dxa4481/whatsinmyredis](https://github.com/dxa4481/whatsinmyredis) A CSRF demonstration of stealing local Redis data, and encrypting all Redis instances on a local network
-- [**49**星][2y] [PowerShell] [dstaulcu/ta-sigma-searches](https://github.com/dstaulcu/ta-sigma-searches) A Splunk app with saved reports derived from Sigma rules
-- [**49**星][3y] [C++] [drizzlerisk/ntpdoser](https://github.com/drizzlerisk/ntpdoser) NTP Doser is a NTP Amplification DoS/DDoS attack tool for penttesting
-- [**49**星][1y] [PowerShell] [dgg-it/match-adhashes](https://github.com/dgg-it/match-adhashes) Builds a hashmap of AD NTLM hashes/usernames and iterates through a second list of hashes checking for the existence of each entry in the AD NTLM hashmap
+- [**49**星][2y] [PS] [dstaulcu/ta-sigma-searches](https://github.com/dstaulcu/ta-sigma-searches) A Splunk app with saved reports derived from Sigma rules
- [**49**星][3y] [Py] [dfirfpi/dpapilab](https://github.com/dfirfpi/dpapilab) Windows DPAPI laboratory
- [**49**星][7m] [Ruby] [dev-sec/chef-nginx-hardening](https://github.com/dev-sec/chef-nginx-hardening) This chef cookbook provides secure nginx configurations.
- [**49**星][6y] [Py] [debasishm89/iofuzz](https://github.com/debasishm89/iofuzz) A mutation based user mode (ring3) dumb in-memory Windows Kernel (IOCTL) Fuzzer/Logger. This script attach it self to any given process and hooks DeviceIoControl!Kernel32 API and try to log or fuzz all I/O Control code I/O Buffer pointer, I/O buffer length that process sends to any Kernel driver.
-- [**49**星][2y] [PHP] [daudmalik06/reconcat](https://github.com/daudmalik06/reconcat) A small Php application to fetch archive url snapshots from archive.org. using it you can fetch complete list of snapshot urls of any year or complete list of all years possible. Made Specially for penetration testing purpose.
-- [**49**星][12d] [C] [danielkrupinski/vac](https://github.com/danielkrupinski/vac) Source code of Valve Anti-Cheat obtained from disassembly of compiled modules
-- [**49**星][11d] [Batchfile] [chef-koch/chromium-hardening](https://github.com/chef-koch/chromium-hardening) Hardens Chrome & Chromium based Browsers
-- [**49**星][3m] [Py] [bkerler/mr](https://github.com/bkerler/mr) Mobile Revelator
+- [**49**星][14d] [C] [danielkrupinski/vac](https://github.com/danielkrupinski/vac) Source code of Valve Anti-Cheat obtained from disassembly of compiled modules
+- [**49**星][2y] [C] [coolervoid/firefox_tunnel](https://github.com/coolervoid/firefox_tunnel) The way to use firefox to make a tunnel to remote communication, bypass any firewall
+- [**49**星][5d] [CSS] [command-tab/awesome-n64-development](https://github.com/command-tab/awesome-n64-development) A curated list of Nintendo 64 development resources including toolchains, documentation, emulators, and more
+- [**49**星][3d] [Batchfile] [chef-koch/chromium-hardening](https://github.com/chef-koch/chromium-hardening) Hardens Chrome & Chromium based Browsers
+- [**49**星][2d] [Go] [c-sto/gosecretsdump](https://github.com/c-sto/gosecretsdump)
+- [**49**星][25d] [Py] [bolunwang/backdoor](https://github.com/bolunwang/backdoor) Code implementation of the paper "Neural Cleanse: Identifying and Mitigating Backdoor Attacks in Neural Networks", at IEEE Security and Privacy 2019.
+- [**49**星][1y] [Java] [blackhacker511/blackrat](https://github.com/blackhacker511/blackrat) BlackRAT - Java Based Remote Administrator Tool
- [**49**星][2y] [PHP] [auraphp/aura.payload](https://github.com/auraphp/aura.payload) A Domain Payload implementation.
- [**49**星][3y] [Py] [attify/attify-zigbee-framework](https://github.com/attify/attify-zigbee-framework) GUI Framework on top of Killerbee
-- [**49**星][7y] [C] [andy928/xpenology](https://github.com/andy928/xpenology) XPEnology Project
-- [**49**星][2y] [Shell] [alephsecurity/initroot](https://github.com/alephsecurity/initroot) Motorola Untethered Jailbreak: Exploiting CVE-2016-10277 for Secure Boot and Device Locking bypass
- [**49**星][7d] [C++] [ahupowerdns/galmon](https://github.com/ahupowerdns/galmon) galileo open source monitoring
- [**49**星][11m] [Py] [agustingianni/utilities](https://github.com/agustingianni/utilities) 多个IDAPython脚本
- [DumpFunctionBytes](https://github.com/agustingianni/utilities/blob/master/DumpFunctionBytes.py) dumps the current function (you need to position the cursor on the start of the function) as a shellcode. It does a very limited analysis of the function in order to let you know that you need to fix call sites to functions
@@ -12031,71 +12817,73 @@ networking routines
- [mark_interesting](https://github.com/agustingianni/utilities/blob/master/mark_interesting.py) Small idapython script that finds all the signed comparisions and marks them with a color.
- [machofinder](https://github.com/agustingianni/utilities/blob/master/machofinder.py) Hacky script to gather all the mach-o file (and fat).
- [find_hardref](https://github.com/agustingianni/utilities/blob/master/find_hardref.py) Script to find hardcoded references inside an IDA database.
-- [**49**星][2y] [Py] [adrianherrera/virustotal](https://github.com/adrianherrera/virustotal) A simple command-line script to interact with the virustotal-api
-- [**49**星][7m] [C#] [9ee1/capstone.net](https://github.com/9ee1/capstone.net) .NET Core and .NET Framework binding for the Capstone Disassembly Framework
-- [**49**星][12d] [Py] [0blio/filegps](https://github.com/0blio/filegps) A tool that help you to guess how your shell was renamed after the server-side script of the file uploader saved it
+- [**49**星][14d] [Py] [0blio/filegps](https://github.com/0blio/filegps) A tool that help you to guess how your shell was renamed after the server-side script of the file uploader saved it
+- [**48**星][6d] [TS] [srar/socks2shadowsocks](https://github.com/srar/socks2shadowsocks) 单Socks5 转换 多Shadowsocks端口 流量统计 抓包分析 TypeScript
+- [**48**星][1y] [pbnj/infosec-interview-questions](https://github.com/pbnj/infosec-interview-questions)
- [**48**星][5m] [Shell] [yeyintminthuhtut/lazy-redteamer-scripts](https://github.com/yeyintminthuhtut/lazy-redteamer-scripts)
-- [**48**星][3y] [Assembly] [t00sh/assembly](https://github.com/t00sh/assembly) Collection of Linux shellcodes
-- [**48**星][4m] [Makefile] [shadowsocks/openwrt-feeds](https://github.com/shadowsocks/openwrt-feeds) OpenWrt/LEDE feeds
-- [**48**星][6m] [C++] [0x00-0x00/cve-2019-0841-bypass](https://github.com/0x00-0x00/cve-2019-0841-bypass) A fully automatic CVE-2019-0841 bypass targeting all versions of Edge in Windows 10.
- [**48**星][4y] [Py] [g0tmi1k/boot2root-scripts](https://github.com/g0tmi1k/boot2root-scripts) Homemade scripts to-do various vulnerable challenges
-- [**48**星][12d] [Py] [intel/cve-bin-tool](https://github.com/intel/cve-bin-tool) This tool scans for a number of common, vulnerable components (openssl, libpng, libxml2, expat and a few others) to let you know if your system includes common libraries with known vulnerabilities.
+- [**48**星][14d] [Py] [intel/cve-bin-tool](https://github.com/intel/cve-bin-tool) This tool scans for a number of common, vulnerable components (openssl, libpng, libxml2, expat and a few others) to let you know if your system includes common libraries with known vulnerabilities.
- [**48**星][3m] [Py] [hatriot/peachorchard](https://github.com/hatriot/peachorchard) Peach Fuzzer Web Frontend
-- [**48**星][14d] [PowerShell] [littl3field/audix](https://github.com/littl3field/audix) Audix is a PowerShell tool to quickly configure the Windows Event Audit Policies for security monitoring
-- [**48**星][1m] [Dockerfile] [winterssy/ssr-docker](https://github.com/winterssy/ssr-docker) 使用Docker部署ShadowsocksR服务端
-- [**48**星][9d] [Py] [pomo-mondreganto/forcad](https://github.com/pomo-mondreganto/forcad) Pure-python distributable Attack-Defence CTF platform, created to be easily set up.
+- [**48**星][3y] [JS] [cyrus-and/gproxy](https://github.com/cyrus-and/gproxy) googleusercontent.com as HTTP(S) proxy
+- [**48**星][8m] [JS] [rhinosecuritylabs/swagger-ez](https://github.com/rhinosecuritylabs/swagger-ez) A tool geared towards pentesting APIs using OpenAPI definitions.
+- [**48**星][16d] [PS] [littl3field/audix](https://github.com/littl3field/audix) Audix is a PowerShell tool to quickly configure the Windows Event Audit Policies for security monitoring
+- [**48**星][2y] [HTML] [c0nw0nk/coinhive](https://github.com/c0nw0nk/coinhive) A nice friendly simple and easly customizable GUI for coinhives javascript miner to embed onto websites so users of your site can interact with features of the miner on every single page this javascript miner is to help those who have problems with advertisements/advertising/ads popups banners mobile redirects malvertising/malware etc and provid…
+- [**48**星][11d] [Py] [pomo-mondreganto/forcad](https://github.com/pomo-mondreganto/forcad) Pure-python distributable Attack-Defence CTF platform, created to be easily set up.
+- [**48**星][3m] [Ruby] [tintoser/bluekeep-exploit](https://github.com/tintoser/bluekeep-exploit) Bluekeep(CVE 2019-0708) exploit released
- [**48**星][3m] [C] [juniorjacob/readwrite-kernel-stable](https://github.com/juniorjacob/readwrite-kernel-stable) a more stable & secure read/write virtual memory for kernel mode drivers
- [**48**星][4m] [bcosorg/whitepaper](https://github.com/bcosorg/whitepaper) whitepaper
-- [**48**星][27d] [PowerShell] [s3cur3th1ssh1t/creds](https://github.com/S3cur3Th1sSh1t/Creds) Some usefull Scripts and Executables for Pentest & Forensics
+- [**48**星][2d] [C++] [trailofbits/polytracker](https://github.com/trailofbits/polytracker) An LLVM-based instrumentation tool for universal taint analysis.
+- [**48**星][2m] [JS] [luckman666/devops_kkit](https://github.com/luckman666/devops_kkit) django2.1写的自动化运维系统
+- [**48**星][4m] [HTML] [0xbird/0xbird.github.io](https://github.com/0xbird/0xbird.github.io) 欢迎关注小鸟的技术博客!(Pwn/智能硬件/AI安全/漏洞分析/威胁情报/RedTeam/移动设备/内核/虚拟机/容器安全/浏览器/CPU/安全开发/漏洞挖掘/APT/病毒分析/安全学术)
- [**48**星][4y] [Java] [gdssecurity/gds-pmd-security-rules](https://github.com/GDSSecurity/GDS-PMD-Security-Rules) Custom security ruleset for the popular Java static analysis tool PMD.
-- [**48**星][1y] [Perl] [bigsen/crack-file](https://github.com/bigsen/Crack-file) Theos File
+- [**48**星][7m] [Py] [anouarbensaad/honeypot-iot](https://github.com/anouarbensaad/honeypot-iot) This tool to simulate http server attacks in Python which logs HackerIP and all the tracing he does into a Logfile then a database.
- [**48**星][1y] [HTML] [yahooarchive/csptester](https://github.com/YahooArchive/csptester) A quick and easy way to test CSP behavior on modern browsers
-- [**48**星][1y] [Go] [zredshift/mimemagic](https://github.com/zredshift/mimemagic) Powerful and versatile MIME sniffing package using pre-compiled glob patterns, magic number signatures, XML document namespaces, and tree magic for mounted volumes, generated from the XDG shared-mime-info database.
- [**48**星][2y] [C++] [zodiacon/dllinjectionwiththreadcontext](https://github.com/zodiacon/dllinjectionwiththreadcontext) This is a sample that shows how to leverage SetThreadContext for DLL injection
-- [**48**星][17d] [Py] [zdresearch/owasp-honeypot](https://github.com/zdresearch/owasp-honeypot) OWASP Honeypot
+- [**48**星][19d] [Py] [zdresearch/owasp-honeypot](https://github.com/zdresearch/owasp-honeypot) OWASP Honeypot
- [**48**星][3y] [C] [yolosec/upcgen](https://github.com/yolosec/upcgen) Proof of concept for UPC UBEE router hack - WPA2 password generator
- [**48**星][9m] [yeti-791/apt-guide](https://github.com/yeti-791/apt-guide) APT学习指南(Advanced persistent threat learning Guide)
- [**48**星][2y] [Py] [xl7dev/icsecurity](https://github.com/xl7dev/icsecurity) Industrial control Security Tool
-- [**48**星][21d] [Shell] [xhorak/firefox-devedition-flatpak](https://github.com/xhorak/firefox-devedition-flatpak) Flatpak manifest and patches to build Firefox
- [**48**星][1y] [html] [wzw19890321/exploits](https://github.com/wzw19890321/exploits)
- [**48**星][9m] [C++] [vmcall/eye_mapper](https://github.com/vmcall/eye_mapper) BattlEye x64 usermode injector
- [**48**星][2y] [JS] [vegabird/prithvi](https://github.com/vegabird/prithvi) A Report Generation Tool for Security Assessment
+- [**48**星][2m] [Py] [turnerlabs/antiope](https://github.com/turnerlabs/antiope) AWS Inventory and Compliance Framework
- [**48**星][7m] [JS] [tuhinshubhra/wpintel](https://github.com/tuhinshubhra/wpintel) Chrome extension designed for WordPress Vulnerability Scanning and information gathering!
- [**48**星][2y] [C++] [tonyzesto/pubgprivxcode85](https://github.com/tonyzesto/pubgprivxcode85) Player ESP 3D Box ESP Nametag ESP Lightweight Code Secure Injection Dedicated Cheat Launcher Secured Against Battleye Chicken Dinner Every Day. Win more matches than ever before with CheatAutomation’s Playerunknown’s Battlegrounds cheat! Our stripped down, ESP only cheat gives you the key features you need to take out your opponents and be eatin…
- [**48**星][7y] [tias/android-busybox-ndk](https://github.com/tias/android-busybox-ndk) Keeping track of instructions and patches for building busybox with the android NDK
-- [**48**星][2y] [Py] [thelsa/awbruter](https://github.com/thelsa/awbruter) 千倍速一句话木马密码爆破工具
- [**48**星][2m] [Py] [thcipriani/sshecret](https://github.com/thcipriani/sshecret) I can keep a SSHecret
+- [**48**星][6m] [Shell] [t3chnocat/oscp-ctf](https://github.com/t3chnocat/oscp-ctf) oscp-ctf is a small collection of basic Bash scripts that make life easier and save time whether you are in the OSCP labs, HackThebox or playing around with CTFs.
- [**48**星][9m] [C++] [stoyan-shopov/troll](https://github.com/stoyan-shopov/troll) troll:ARM Cortex-M 处理器 C 语言源码调试器
-- [**48**星][2y] [Py] [steinsgatep001/binary](https://github.com/steinsgatep001/binary) Sleep_Pwn_f1sh
-- [**48**星][2m] [C] [ssbssa/heob](https://github.com/ssbssa/heob) Detects buffer overruns and memory leaks.
+- [**48**星][4d] [C] [ssbssa/heob](https://github.com/ssbssa/heob) Detects buffer overruns and memory leaks.
- [**48**星][5y] [C++] [sogeti-esec-lab/android-fde](https://github.com/sogeti-esec-lab/android-fde) Tools to work on Android Full Disk Encryption (FDE).
- [**48**星][1y] [Py] [softsec-kaist/gitctf](https://github.com/softsec-kaist/gitctf) Git-based CTF
- [**48**星][2y] [Py] [softscheck/scff](https://github.com/softscheck/scff) softScheck Cloud Fuzzing Framework
- [**48**星][1m] [Py] [snovvcrash/fwdsh3ll](https://github.com/snovvcrash/fwdsh3ll) Forward shell generation framework
- [**48**星][4y] [Py] [signalsec/kirlangic-ttf-fuzzer](https://github.com/signalsec/kirlangic-ttf-fuzzer) TrueType Font Fuzzer
+- [**48**星][3m] [Ruby] [salemove/jaeger-client-ruby](https://github.com/salemove/jaeger-client-ruby) OpenTracing Tracer implementation for Jaeger in Ruby
- [**48**星][1y] [Shell] [rustybird/corridor](https://github.com/rustybird/corridor) Tor traffic whitelisting gateway
- [**48**星][2y] [Py] [rubenespadas/dionaeafr](https://github.com/rubenespadas/dionaeafr) Dionaea Front Web
-- [**48**星][28d] [Java] [rub-nds/tls-scanner](https://github.com/rub-nds/tls-scanner) The TLS-Scanner Module from TLS-Attacker
- [**48**星][3y] [C] [rodrigoalvesvieira/soundkeylogger](https://github.com/rodrigoalvesvieira/soundkeylogger) An experimental project to demonstrate how a user keyboard input may be sniffed through the pattern analysis of the sounds emitted by the keystrokes.
+- [**48**星][3m] [C] [rek7/postshell](https://github.com/rek7/postshell) PostShell - Post Exploitation Bind/Backconnect Shell
- [**48**星][7m] [reabout/datacon](https://github.com/reabout/datacon) datacon比赛方向三-攻击源与攻击者分析writeup
-- [**48**星][3m] [C] [rahra/onioncat](https://github.com/rahra/onioncat) Official repository of OnionCat, the VPN adapter for Tor and I2P.
- [**48**星][5m] [C] [r3kapig/wctf-2019](https://github.com/r3kapig/wctf-2019) WCTF 2019 Onsite(Master) Challenge
- [**48**星][2y] [Py] [q3k/m16c-interface](https://github.com/q3k/m16c-interface) 绕过Renesas M16C 微控制器的 bootloader security,以及转储固件
- [**48**星][1y] [C] [pymumu/jail-shell](https://github.com/pymumu/jail-shell) Jail-shell is a linux security tool mainly using chroot, namespaces technologies, limiting users to perform specific commands, and access sepcific directories.
-- [**48**星][6m] [Py] [pylyf/networm](https://github.com/pylyf/networm) Python network worm that spreads on the local network and gives the attacker control of these machines.
-- [**48**星][2y] [PowerShell] [proxb/poshprivilege](https://github.com/proxb/poshprivilege) Manage user privileges on a local machine or view applied privileges on local or remote system
+- [**48**星][2y] [PS] [proxb/poshprivilege](https://github.com/proxb/poshprivilege) Manage user privileges on a local machine or view applied privileges on local or remote system
- [**48**星][1y] [pbnj/infosec-interview-questions](https://github.com/pbnj/infosec-interview-questions)
- [**48**星][7y] [Py] [pdasilva/vtrace_scripts](https://github.com/pdasilva/vtrace_scripts)
- [**48**星][6y] [JS] [pauljt/scanjs](https://github.com/pauljt/scanjs) Static analysis tool for javascript code based. Scanjs uses Esprima to convert sources to AST, then walks AST looking for patterns.
-- [**48**星][5m] [PHP] [owasp/vulnerable-web-application](https://github.com/owasp/vulnerable-web-application) OWASP Vulnerable Web Application Project
- [**48**星][3y] [Shell] [osm0sis/apk-patcher](https://github.com/osm0sis/apk-patcher) Patch APKs on-the-fly from Android recovery (Proof of Concept)
+- [**48**星][5y] [C] [nyx0/kins](https://github.com/nyx0/kins) KINS Banking Trojan
- [**48**星][2y] [Py] [nixawk/nmap_vscan](https://github.com/nixawk/nmap_vscan) nmap service and application version detection (without nmap installation)
-- [**48**星][1y] [C] [niklasb/elgoog](https://github.com/niklasb/elgoog) elgoog/searchme challenge from 34C3 CTF / WCTF 2018: sources & exploit
+- [**48**星][9d] [JS] [moneroocean/xmr-node-proxy](https://github.com/moneroocean/xmr-node-proxy) Cryptonote/Forknote/Cryptonight/Light/Heavy coin proxy for nodejs-pool
- [**48**星][5y] [Shell] [mkdesu/cables](https://github.com/mkdesu/cables) Cables Communication, secure and anonymous communication using email-like addresses.
+- [**48**星][12m] [Py] [metachar/pyhawk](https://github.com/metachar/pyhawk) Searches the directory of choice for interesting files. Such as database files and files with passwords stored on them
- [**48**星][2y] [Shell] [menzow/sn1per-docker](https://github.com/menzow/sn1per-docker) Dockerized version of Sn1per (
- [**48**星][7m] [JS] [mcollina/docker-loghose](https://github.com/mcollina/docker-loghose) Collect all the logs from all docker containers
+- [**48**星][2y] [HTML] [mburakergenc/malware-detection-using-machine-learning](https://github.com/mburakergenc/malware-detection-using-machine-learning) Malware detection project on Android devices using machine learning classification algorithms.
+- [**48**星][8m] [Py] [marten4n6/tinytor](https://github.com/marten4n6/tinytor) A tiny Tor client implementation (in pure python).
+- [**48**星][24d] [PHP] [marcocesarato/php-antimalware-scanner](https://github.com/marcocesarato/php-antimalware-scanner) AMWSCAN (Antimalware Scanner) is a php antimalware/antivirus scanner console script written in php for scan your project. This can work on php projects and a lot of others platform.
- [**48**星][3y] [C] [malwarelu/malware-lu](https://github.com/malwarelu/malware-lu) Automatically exported from code.google.com/p/malware-lu
-- [**48**星][25d] [Java] [llvm-but-worse/maple-ir](https://github.com/llvm-but-worse/maple-ir) Industrial IR-based static analysis framework for Java bytecode
- [**48**星][2y] [HTML] [knrdl/yamot](https://github.com/knrdl/yamot) Yet Another MOnitoring Tool
- [**48**星][8m] [HTML] [klionsec/klionsec.github.io](https://github.com/klionsec/klionsec.github.io)
- [**48**星][2y] [C] [kkamagui/iron-hid](https://github.com/kkamagui/iron-hid) Create Your Own Bad USB Device (Presented at HITBSecConf 2016)
@@ -12106,107 +12894,135 @@ networking routines
- [**48**星][5m] [jas502n/cve-2019-11581](https://github.com/jas502n/cve-2019-11581) Atlassian JIRA Template injection vulnerability RCE
- [**48**星][2y] [Java] [inode-/attackselector](https://github.com/inode-/attackselector) Burp Suite Attack Selector Plugin
- [**48**星][3y] [PHP] [incredibleindishell/ldap-credentials-collector-backdoor-generator](https://github.com/incredibleindishell/ldap-credentials-collector-backdoor-generator) This script generate backdoor code which log username password of an user who have passed HTTP basic auth using LDAP credentials.
-- [**48**星][2m] [Py] [importctf/instagram-hacker](https://github.com/importctf/instagram-hacker) This is an advanced script for Instagram bruteforce attacks. WARNING THIS IS A REAL TOOL!
-- [**48**星][2m] [Py] [idapython/pyhexraysdeob](https://github.com/idapython/pyhexraysdeob) 工具 RolfRolles/HexRaysDeob 的Python版本
- [**48**星][3y] [JS] [huangwc94/scraping-helper-chrome-extension](https://github.com/huangwc94/scraping-helper-chrome-extension) Scraping Helper will help you to find out the best html/css selector for certain elements
- [**48**星][7m] [Jupyter Notebook] [hija/malwaredatascience](https://github.com/hija/malwaredatascience) Malware Data Science Reading Diary / Notes
- [**48**星][12m] [C] [hfiref0x/sxsexp](https://github.com/hfiref0x/sxsexp) Expand compressed files from WinSxS folder
- [**48**星][2y] [Jupyter Notebook] [harrisonpim/bookworm](https://github.com/harrisonpim/bookworm)
-- [**48**星][2y] [Py] [h2hconference/2017](https://github.com/h2hconference/2017) H2HC 2017 Slides/Materials/Presentations
+- [**48**星][5y] [C] [hackedteam/vector-edk](https://github.com/hackedteam/vector-edk) EFI Development Kit
+- [**48**星][1y] [Py] [ha3mrx/facebook-cracker](https://github.com/ha3mrx/facebook-cracker) Facebook Cracker Version 1.0 can crack into Facebook Database 100% without Interruption By Facebook Firewall
+- [**48**星][5d] [guyanqi/awesome-privacy](https://github.com/guyanqi/awesome-privacy) Repository for collection of research papers on privacy.
- [**48**星][3y] [Go] [filosottile/openbsd-fde-crack](https://github.com/filosottile/openbsd-fde-crack) Some code to bruteforce OpenBSD softraid encrypted drives - NOT A READY-TO-USE TOOL
+- [**48**星][8d] [Nim] [federicoceratto/nim-httpauth](https://github.com/federicoceratto/nim-httpauth) HTTP Authentication library for Nim
+- [**48**星][7m] [Py] [esecuritylab/kostebek](https://github.com/esecuritylab/kostebek)
- [**48**星][3y] [Py] [el3ct71k/autobrowser](https://github.com/el3ct71k/autobrowser) AutoBrowser Screenshot
- [**48**星][8m] [C++] [dishather/richprint](https://github.com/dishather/richprint) Print compiler information stored in Rich Header of PE executables.
- [**48**星][1y] [Batchfile] [dflabs/nat](https://github.com/dflabs/nat) No-Script Automation Tool
- [**48**星][2y] [Py] [debasishm89/iefuzz](https://github.com/debasishm89/iefuzz) A static Internet Explorer Fuzzer.
- [**48**星][3y] [Shell] [danielmiessler/honeycrediptracker](https://github.com/danielmiessler/honeycrediptracker) Quick script to gather stats on incoming credentials and IPs for a honey listener.
+- [**48**星][2y] [Shell] [danielfree/asus-v2ray-transparent-proxy](https://github.com/danielfree/asus-v2ray-transparent-proxy) transparent proxy with v2ray, iptables, ipset 无线路由器 v2ray 透明代理
+- [**48**星][9m] [Py] [crond-jaist/cyris](https://github.com/crond-jaist/cyris) CyRIS: Cyber Range Instantiation System
- [**48**星][7y] [C++] [cr4sh/msfontsfuzz](https://github.com/cr4sh/msfontsfuzz) OpenType font file format fuzzer for Windows
- [**48**星][7y] [C++] [cr4sh/code-coverage-analysis-tools](https://github.com/cr4sh/code-coverage-analysis-tools) Code coverage analysis tools for the PIN Toolkit
-- [**48**星][2y] [C] [coolervoid/firefox_tunnel](https://github.com/coolervoid/firefox_tunnel) The way to use firefox to make a tunnel to remote communication, bypass any firewall
-- [**48**星][18d] [CSS] [command-tab/awesome-n64-development](https://github.com/command-tab/awesome-n64-development) A curated list of Nintendo 64 development resources including toolchains, documentation, emulators, and more
- [**48**星][2y] [C#] [cobbr/insecurepowershell](https://github.com/cobbr/insecurepowershell) InsecurePowerShell is PowerShell with some security features removed.
-- [**48**星][2y] [PowerShell] [clr2of8/detect-sslmitm](https://github.com/clr2of8/detect-sslmitm) This PowerShell script will determine if your connection to external servers over HTTPS is being decrypted by an intercepting proxy such as the internet proxies commonly found in corporate environments. It does this by comparing the SSL intermediate certificate being used for your connection to the true/known SSL certificate for the server.
-- [**48**星][2y] [Py] [citp/thewebneverforgets](https://github.com/citp/thewebneverforgets) Public code release for The Web Never Forgets paper
+- [**48**星][2y] [PS] [clr2of8/detect-sslmitm](https://github.com/clr2of8/detect-sslmitm) This PowerShell script will determine if your connection to external servers over HTTPS is being decrypted by an intercepting proxy such as the internet proxies commonly found in corporate environments. It does this by comparing the SSL intermediate certificate being used for your connection to the true/known SSL certificate for the server.
+- [**48**星][20d] [Py] [cleanunicorn/theo](https://github.com/cleanunicorn/theo) Ethereum recon and exploitation tool.
- [**48**星][2y] [C++] [cherrypill/system_info](https://github.com/cherrypill/system_info) Hardware information tool for Windows
+- [**48**星][3y] [C++] [chaitin/yanshi](https://github.com/chaitin/yanshi) A regular language recognizer generater like Ragel, enhanced with features to approximate context-free grammars and substring grammars
- [**48**星][2y] [Py] [cert-polska/malwarecage](https://github.com/cert-polska/malwarecage) Malware repository component for samples & static configuration with REST API interface
- [**48**星][2y] [C] [can1357/safe_capcom](https://github.com/can1357/safe_capcom) Capcom wrapper with safety in mind
- [**48**星][4y] [Py] [breakingmalware/avulnerabilitychecker](https://github.com/breakingmalware/avulnerabilitychecker) Tool to check if your computer is likely to be vulnerable to exploitable constant Read-Write-Execute (RWX) addresses (AVs vulnerability)
+- [**48**星][28d] [Shell] [bkerler/ghidra_installer](https://github.com/bkerler/ghidra_installer) Helper scripts to set up OpenJDK 11 and scale Ghidra for 4K on Ubuntu 18.04 / 18.10
- [**48**星][2y] [Py] [bignerd95/chimay-blue](https://github.com/bignerd95/chimay-blue) Mikrotik SMB buffer overflow exploit
+- [**48**星][2y] [PHP] [backlion/webshell](https://github.com/backlion/webshell) 这是一些常用的webshell
- [**48**星][3y] [JS] [auth0-blog/serverless-stories-lambda](https://github.com/auth0-blog/serverless-stories-lambda) Serverless app built with AWS Lambda
+- [**48**星][8m] [Py] [austin-taylor/bluewall](https://github.com/austin-taylor/bluewall) Bluewall is a firewall framework designed for offensive and defensive cyber professionals.
+- [**48**星][8m] [CSS] [appsecco/using-docker-kubernetes-for-automating-appsec-and-osint-workflows](https://github.com/appsecco/using-docker-kubernetes-for-automating-appsec-and-osint-workflows) Repository for all the workshop content delivered at nullcon X on 1st of March 2019
- [**48**星][2y] [C++] [anubisss/szimatszatyor](https://github.com/anubisss/szimatszatyor) World of Warcraft (WoW): SzimatSzatyor is an injector sniffer written in C++
- [**48**星][1y] [java] [anbai-inc/burpstart](https://github.com/anbai-inc/burpstart) Burp 启动加载器
- [**48**星][6y] [C++] [amrthabet/pysrdf](https://github.com/amrthabet/pysrdf) This is the python wrapper for The Security Framework SRDF
- [**48**星][3y] [Py] [alessandrogario/ida-function-tagger](https://github.com/alessandrogario/ida-function-tagger) 根据函数使用的导入表,对函数进行标记
- [**48**星][3y] [Py] [agusmakmun/python-wordlist-generator](https://github.com/agusmakmun/python-wordlist-generator) Create awesome wordlist with python - demo:
+- [**48**星][7y] [C++] [1184893257/simplesniffer](https://github.com/1184893257/simplesniffer) 基于 WinPcap 的网络抓包软件,使用 MFC 做界面
+- [**47**星][9d] [jyvsectec/phr-model](https://github.com/jyvsectec/phr-model) Prepare, Hunt, and Respond - Conceptual model against cyber attack by JYVSECTEC
- [**47**星][5y] [PHP] [cloudsec/aioshell](https://github.com/cloudsec/aioshell) A php webshell run under linux based webservers. v0.05
- [**47**星][3y] [HTML] [jpcertcc/owaspdocuments](https://github.com/jpcertcc/owaspdocuments) Japanese translation of OWASP documents
+- [**47**星][1y] [HTML] [iaik/jstemplate](https://github.com/iaik/jstemplate) JavaScript Template Attack proof-of-concept implementation
+- [**47**星][15d] [k8gege/aggressor](https://github.com/k8gege/aggressor) Ladon NetScan for Cobalt Strike 3.x Aggressor Script
+- [**47**星][12d] [Py] [consensys/defi-score](https://github.com/consensys/defi-score) DeFi Score: An open framework for evaluating DeFi protocols
+- [**47**星][21d] [Shell] [hak5/sharkjack-payloads](https://github.com/hak5/sharkjack-payloads) The Official Hak5 Shark Jack Payload Repository
- [**47**星][4y] [Py] [bastilleresearch/scapy-radio](https://github.com/bastilleresearch/scapy-radio) scapy-radio (from original Hg repo)
-- [**47**星][8m] [JS] [rhinosecuritylabs/swagger-ez](https://github.com/rhinosecuritylabs/swagger-ez) A tool geared towards pentesting APIs using OpenAPI definitions.
-- [**47**星][2y] [HTML] [c0nw0nk/coinhive](https://github.com/c0nw0nk/coinhive) A nice friendly simple and easly customizable GUI for coinhives javascript miner to embed onto websites so users of your site can interact with features of the miner on every single page this javascript miner is to help those who have problems with advertisements/advertising/ads popups banners mobile redirects malvertising/malware etc and provid…
+- [**47**星][2m] [Py] [nccgroup/sshession](https://github.com/nccgroup/sshession) The SSH Multiplex Backdoor Tool
+- [**47**星][5d] [Py] [evilsocket/pwnagotchi-plugins-contrib](https://github.com/evilsocket/pwnagotchi-plugins-contrib) User contributed Pwnagotchi plugins.
+- [**47**星][6m] [Go] [dreadl0ck/ja3](https://github.com/dreadl0ck/ja3) Ja3 TLS Client Hello Hashes in Go
+- [**47**星][3d] [Go] [asutorufa/ssrmicroclient](https://github.com/asutorufa/ssrmicroclient) a shadowskcsr client with gui by golang for linux(support subscription)
+- [**47**星][1m] [payloadbox/rfi-lfi-payload-list](https://github.com/payloadbox/rfi-lfi-payload-list)
+- [**47**星][15d] [k8gege/aggressor](https://github.com/k8gege/Aggressor) Ladon NetScan for Cobalt Strike 3.x Aggressor Script
- [**47**星][3y] [Py] [beaugunderson/wifi-heatmap](https://github.com/beaugunderson/wifi-heatmap)
-- [**47**星][21d] [Go] [giuliocomi/backoori](https://github.com/giuliocomi/backoori) Tool aided persistence via Windows URI schemes abuse
+- [**47**星][7y] [Py] [paulmcmillan/kismetclient](https://github.com/paulmcmillan/kismetclient) A Python client for the Kismet server protocol
- [**47**星][1m] [Py] [nyxgeek/ntlmscan](https://github.com/nyxgeek/ntlmscan) scan for NTLM directories
-- [**47**星][1y] [Visual Basic] [vysecurity/cactustorch](https://github.com/vysecurity/CACTUSTORCH) Payload Generation for Adversary Simulations
+- [**47**星][1y] [Visual Basic .NET] [vysecurity/cactustorch](https://github.com/vysecurity/CACTUSTORCH) Payload Generation for Adversary Simulations
- [**47**星][6m] [jaxbcd/recscansec](https://github.com/jaxBCD/RecScanSec) reconnaisance - footprinting - information disclosure (0.7)
-- [**47**星][7m] [Py] [anouarbensaad/honeypot-iot](https://github.com/anouarbensaad/honeypot-iot) This tool to simulate http server attacks in Python which logs HackerIP and all the tracing he does into a Logfile then a database.
- [**47**星][2m] [Py] [pwnlandia/shockpot](https://github.com/pwnlandia/shockpot) WebApp Honeypot for detecting Shell Shock exploit attempts
- [**47**星][3y] [Py] [jjo-sec/idataco](https://github.com/jjo-sec/idataco) 多功能
- [**47**星][7m] [Py] [ctf-o-matic/capture-the-flag](https://github.com/ctf-o-matic/capture-the-flag) Helper scripts to remaster Linux Live CD images for the purpose of creating ready to use security wargames with pre-installed vulnerabilities to exploit.
- [**47**星][3y] [C] [zerosum0x0/loadlibrary-getprocaddress-replacements](https://github.com/zerosum0x0/loadlibrary-getprocaddress-replacements) LoadLibrary() and GetProcAddress() Replacement Functions
- [**47**星][1y] [Py] [zer0yu/zeroscan](https://github.com/zer0yu/zeroscan) Multi-Thread Vulnerability Verify Framework
- [**47**星][4y] [C] [yifanlu/3ds_injector](https://github.com/yifanlu/3ds_injector) Open source implementation of loader module with code injection support
-- [**47**星][5m] [HTML] [whatwg/mimesniff](https://github.com/whatwg/mimesniff) MIME Sniffing Standard
+- [**47**星][9m] [C++] [vletoux/detectpasswordviantlminflow](https://github.com/vletoux/detectpasswordviantlminflow) Extract the password of the current user from flow (keylogger, config file, ..) Use SSPI to get a valid NTLM challenge/response and test passwords
+- [**47**星][4y] [Py] [vasco2016/shellsploit-framework](https://github.com/vasco2016/shellsploit-framework) New Generation Exploit Development Kit
- [**47**星][2y] [Py] [vah13/sap_exploit](https://github.com/vah13/sap_exploit) Here you can get full exploit for SAP NetWeaver AS JAVA
- [**47**星][2m] [Py] [utkonos/lst2x64dbg](https://github.com/utkonos/lst2x64dbg) Extract labels from IDA .lst or Ghidra .csv file and export x64dbg database.
-- [**47**星][12m] [Ruby] [uploadcare/uploadcare-rails](https://github.com/uploadcare/uploadcare-rails) Rails wrapper for Uploadcare
+- [**47**星][1y] [Ruby] [uploadcare/uploadcare-rails](https://github.com/uploadcare/uploadcare-rails) Rails wrapper for Uploadcare
- [**47**星][3y] [tw-ncert/ctifeeds](https://github.com/tw-ncert/ctifeeds) Cyber Threat Intelligence Feeds
-- [**47**星][2m] [Makefile] [trojan-gfw/openwrt-trojan](https://github.com/trojan-gfw/openwrt-trojan) trojan and its dependencies for OpenWrt
- [**47**星][4m] [Py] [trinitronx/vncpasswd.py](https://github.com/trinitronx/vncpasswd.py) A Python implementation of vncpasswd, w/decryption abilities & extra features ;-)
- [**47**星][4y] [Py] [topshed/rpi_8x8griddraw](https://github.com/topshed/rpi_8x8griddraw) A Python Pygame application for creating 8x8 images to load onto the Astro-Pi LED matrix
+- [**47**星][5m] [Java] [tlamb96/kgb_messenger](https://github.com/tlamb96/kgb_messenger) An Android CTF practice challenge
- [**47**星][7m] [Go] [threeaccents/botnet](https://github.com/threeaccents/botnet) A tcp botnet written in golang
+- [**47**星][4y] [threatminer/aptnotes](https://github.com/threatminer/aptnotes) Various public documents, whitepapers and articles about APT campaigns
+- [**47**星][2m] [the-blockchain-bible/readme](https://github.com/the-blockchain-bible/readme) The Blockchain Bible,a collections for blockchain tech,bitcoin,ethereum,crypto currencies,cryptography,decentralized solutions,business scenarios,hyperledger tech,meetups,区块链,数字货币,加密货币,比特币,以太坊,密码学,去中心化,超级账本
- [**47**星][1y] [C] [tamirzb/cve-2018-9411](https://github.com/tamirzb/cve-2018-9411) Exploit code for CVE-2018-9411 for MediaCasService
+- [**47**星][11m] [Jupyter Notebook] [tamimmirza/intrusion-detection-system-using-deep-learning](https://github.com/tamimmirza/intrusion-detection-system-using-deep-learning) VGG-19 deep learning model trained using ISCX 2012 IDS Dataset
- [**47**星][6m] [C++] [talvos/talvos](https://github.com/talvos/talvos) Talvos is a dynamic-analysis framework and debugger for Vulkan/SPIR-V programs.
+- [**47**星][16d] [C] [sunnyki/bareboot](https://github.com/sunnyki/bareboot) Bare Boot. EFI bootloader for Mac OS, Windows, Linux etc
+- [**47**星][2y] [Py] [stormshadow07/beef-over-wan](https://github.com/stormshadow07/beef-over-wan) Browser Exploitation Framework is a Open-source penetration testing tool that focuses on browser-based vulnerabilities .This Python Script does the changes Required to make hooked Linked Accessible Over WAN .So anyone can use this framework and Attack Over WAN without Port Forwarding [NGROK or any Localhost to Webhost Service Required ]
- [**47**星][8y] [C] [stephenfewer/ollysockettrace](https://github.com/stephenfewer/ollysockettrace) OllySocketTrace is a plugin for OllyDbg to trace the socket operations being performed by a process.
- [**47**星][1y] [C] [squalr/selfhackingapp](https://github.com/squalr/selfhackingapp) Self Assembling/Disassembling C++ App Reference Code
+- [**47**星][2m] [C] [spacial/csirt](https://github.com/spacial/csirt) CSIRT is an awesome curated list of links and resources in security and csirt daily activities.
+- [**47**星][2m] [ObjC] [smilezxlee/zxrequestblock](https://github.com/smilezxlee/zxrequestblock) 一句话实现iOS应用底层所有网络请求拦截(如ajax请求拦截),包含http-dns解决方法,有效防止DNS劫持,用于分析http,https请求,禁用/允许代理,防抓包等
- [**47**星][1y] [Go] [slowmist/blockchain-threat-intelligence](https://github.com/slowmist/blockchain-threat-intelligence) Blockchain Threat Intelligence Sharing Platform(区块链威胁情报共享平台)
- [**47**星][5y] [C] [simsong/afflibv3](https://github.com/simsong/afflibv3) AFF is now being maintained at
- [**47**星][1y] [C++] [silica/sandbox](https://github.com/silica/sandbox) Application virtualization tool for Windows
- [**47**星][4m] [Py] [sherlly/pcrt](https://github.com/sherlly/pcrt) PCRT (PNG Check & Repair Tool), a tool to help check and fix the error in a PNG image.
-- [**47**星][9m] [setuid0-sec/swiss_e-voting_publications](https://github.com/setuid0-sec/swiss_e-voting_publications) Our publications of the Swiss E-Voting Public Intrusion Test (PIT)
- [**47**星][5m] [sekhan/nightpi](https://github.com/sekhan/nightpi) An all-in-one briefcase for pentesting, OSINT and radio exploration
+- [**47**星][5y] [Java] [securenetwork/nfcult](https://github.com/securenetwork/nfcult) NFC Ultralight Toolkit
- [**47**星][2y] [Shell] [samoshkin/docker-letsencrypt-certgen](https://github.com/samoshkin/docker-letsencrypt-certgen) Docker image to generate, renew, revoke RSA and/or ECDSA SSL certificates from LetsEncrypt CA using certbot and acme.sh clients in automated fashion
- [**47**星][2y] [Py] [salesforce/autotriagebot](https://github.com/salesforce/autotriagebot) AutoTriageBot automatically verifies, deduplicates, and suggests payouts for incoming HackerOne reports.
-- [**47**星][3m] [Ruby] [salemove/jaeger-client-ruby](https://github.com/salemove/jaeger-client-ruby) OpenTracing Tracer implementation for Jaeger in Ruby
-- [**47**星][3m] [saaramar/publications](https://github.com/saaramar/publications)
+- [**47**星][4m] [saaramar/publications](https://github.com/saaramar/publications)
- [**47**星][2y] [Py] [riscure/drop-ida-plugin](https://github.com/riscure/drop-ida-plugin) Experimental opaque predicate detection for IDA Pro
-- [**47**星][3m] [C] [rek7/postshell](https://github.com/rek7/postshell) PostShell - Post Exploitation Bind/Backconnect Shell
- [**47**星][7y] [Py] [radare/bokken](https://github.com/radare/bokken) python-gtk UI for radare2
- [**47**星][3y] [C++] [progmboy/cansecwest2017](https://github.com/progmboy/cansecwest2017)
- [**47**星][10m] [JS] [pownjs/pown-duct](https://github.com/pownjs/pown-duct) Essential tool for finding blind injection attacks.
+- [**47**星][7d] [Shell] [pierregode/linux-active-directory-join-script](https://github.com/pierregode/linux-active-directory-join-script) Active directory Join script for Ubuntu, Debian, CentOS, Linux Mint, Fedora, Kali and Raspbian with built in failchcheck and debugmode for Ubuntu. "The most advanced and updated AD join script on GITHUB for Linux"
- [**47**星][4y] [Py] [ostorlab/jniostorlab](https://github.com/ostorlab/jniostorlab) JNI method enumeration in ELF files
- [**47**星][6y] [Java] [o2platform/defcon_resting](https://github.com/o2platform/defcon_resting) Repository to hold materials for DefCon_RESTing presentation by Dinis, Abe and Alvaro
- [**47**星][2y] [Shell] [nyxgeek/dumpsniffer](https://github.com/nyxgeek/dumpsniffer) tools for analyzing strings from password lists
-- [**47**星][5y] [C] [nyx0/kins](https://github.com/nyx0/kins) KINS Banking Trojan
- [**47**星][5y] [Py] [neohapsis/mptcp-abuse](https://github.com/neohapsis/mptcp-abuse) A collection of tools and resources to explore MPTCP on your network. Initially released at Black Hat USA 2014.
- [**47**星][3y] [Py] [nanshihui/android-reverse-tool](https://github.com/nanshihui/android-reverse-tool) Android reverse tool
-- [**47**星][8m] [DIGITAL Command Language] [nahsra/antisamy](https://github.com/nahsra/antisamy) a library for performing fast, configurable cleansing of HTML coming from untrusted sources
+- [**47**星][9m] [DIGITAL Command Language] [nahsra/antisamy](https://github.com/nahsra/antisamy) a library for performing fast, configurable cleansing of HTML coming from untrusted sources
- [**47**星][4y] [C++] [mozmark/ringleader](https://github.com/mozmark/ringleader) A tool for configuring and using MITM proxies from firefox
-- [**47**星][4y] [C] [mobileforensicsresearch/mem](https://github.com/mobileforensicsresearch/mem) Tool used for dumping memory from Android devices
+- [**47**星][5y] [C] [mobileforensicsresearch/mem](https://github.com/mobileforensicsresearch/mem) Tool used for dumping memory from Android devices
+- [**47**星][1y] [Py] [miladdiaz/mikrotikexploit](https://github.com/miladdiaz/mikrotikexploit) Scan and Export RouterOS Password
- [**47**星][2y] [mikewest/cookies-over-http-bad](https://github.com/mikewest/cookies-over-http-bad) Sending cookies over plaintext HTTP is bad. We should stop doing that.
-- [**47**星][2y] [HTML] [mburakergenc/malware-detection-using-machine-learning](https://github.com/mburakergenc/malware-detection-using-machine-learning) Malware detection project on Android devices using machine learning classification algorithms.
- [**47**星][5y] [C] [lukasikic/unix-privilege-escalation-exploits-pack](https://github.com/lukasikic/unix-privilege-escalation-exploits-pack) Exploits for getting local root on Linux, BSD, AIX, HP-UX, Solaris, RHEL, SUSE etc.
-- [**47**星][1m] [PowerShell] [lkys37en/start-adenum](https://github.com/lkys37en/start-adenum) Tool that automates Active Directory enumeration
+- [**47**星][1m] [PS] [lkys37en/start-adenum](https://github.com/lkys37en/start-adenum) Tool that automates Active Directory enumeration
+- [**47**星][1y] [C++] [lianglixin/memdllloader](https://github.com/lianglixin/memdllloader) 加载内存当中的DLL文件
+- [**47**星][3m] [C] [leoetlino/botw-re-notes](https://github.com/leoetlino/botw-re-notes) Reverse engineering notes and tools for The Legend of Zelda: Breath of the Wild
+- [**47**星][5m] [Shell] [kwilczynski/packer-templates](https://github.com/kwilczynski/packer-templates) Packer templates for creating Amazon EC2 images and Vagrant boxes
- [**47**星][10m] [Java] [jreframeworker/jreframeworker](https://github.com/jreframeworker/jreframeworker) A practical tool for bytecode manipulation and creating Managed Code Rootkits (MCRs) in the Java Runtime Environment
- [**47**星][3y] [JS] [jonathankingston/ember-cli-sri](https://github.com/jonathankingston/ember-cli-sri) Generation of SRI hashes for ember
+- [**47**星][8m] [jeremyblackthorne/ghidra-keybindings](https://github.com/jeremyblackthorne/ghidra-keybindings)
- [**47**星][5y] [jameshabben/sysmon-queries](https://github.com/jameshabben/sysmon-queries) Queries to parse sysmon event log file with microsoft logparser
-- [**47**星][2m] [Py] [jackeriss/keyboard_recording_trojan](https://github.com/jackeriss/keyboard_recording_trojan) 一个可以记录键盘输入并发送到指定邮箱的简单木马。
+- [**47**星][3m] [Py] [jackeriss/keyboard_recording_trojan](https://github.com/jackeriss/keyboard_recording_trojan) 一个可以记录键盘输入并发送到指定邮箱的简单木马。
- [**47**星][6m] [Py] [ivrodriguezca/decrypt-ios-apps-script](https://github.com/ivrodriguezca/decrypt-ios-apps-script) Python script to SSH into your jailbroken device, decrypt an iOS App and transfer it to your local machine
- [**47**星][2y] [Py] [intrd/nozzlr](https://github.com/intrd/nozzlr) Nozzlr is a bruteforce framework, trully modular and script-friendly
+- [**47**星][7m] [Py] [initstring/lxd_root](https://github.com/initstring/lxd_root) Linux privilege escalation via LXD
- [**47**星][11m] [C] [imbushuo/boot-shim](https://github.com/imbushuo/boot-shim) Bootstraps ARM32/ARM64 ELF payloads on Qualcomm Windows platforms
+- [**47**星][4m] [C] [ihack4falafel/osee](https://github.com/ihack4falafel/osee) Collection of things made during my preparation to take on OSEE
- [**47**星][11m] [Java] [iflody/mybuganalyze](https://github.com/iflody/mybuganalyze) 一些漏洞分析
-- [**47**星][27d] [C] [hexhive/smotherspectre](https://github.com/hexhive/smotherspectre) Proof-of-concept code for the SMoTherSpectre exploit.
-- [**47**星][18d] [C++] [hasherezade/mal_unpack](https://github.com/hasherezade/mal_unpack) Dynamic unpacker based on PE-sieve
+- [**47**星][29d] [C] [hexhive/smotherspectre](https://github.com/hexhive/smotherspectre) Proof-of-concept code for the SMoTherSpectre exploit.
+- [**47**星][5d] [Shell] [hax4us/apkmod](https://github.com/hax4us/apkmod) Apkmod can decompile, recompile, sign APK, and bind the payload with any legit APP
+- [**47**星][20d] [C++] [hasherezade/mal_unpack](https://github.com/hasherezade/mal_unpack) Dynamic unpacker based on PE-sieve
- [**47**星][2y] [JS] [hackvertor/visualfuzzer](https://github.com/hackvertor/visualfuzzer) A visual fuzzer written in NodeJS to find Zalgo characters
-- [**47**星][5y] [C] [hackedteam/vector-edk](https://github.com/hackedteam/vector-edk) EFI Development Kit
- [**47**星][1y] [JS] [h43z/dns-rebinding-tool](https://github.com/h43z/dns-rebinding-tool) dns rebind tool with custom scripts
- [**47**星][8y] [Py] [grant-olson/pyasm](https://github.com/grant-olson/pyasm) Dynamic inline x86 assembler for python.
- [**47**星][3y] [Py] [gosecure/break-fast-serial](https://github.com/gosecure/break-fast-serial) A proof of concept that demonstrates asynchronous scanning for Java deserialization bugs
@@ -12214,123 +13030,141 @@ networking routines
- [**47**星][1m] [C] [gerhart01/livecloudkd](https://github.com/gerhart01/livecloudkd) Hyper-V Research is trendy now
- [**47**星][6y] [C] [gdbinit/gdb-ng](https://github.com/gdbinit/gdb-ng) Apple's gdb fork with some fixes and enhancements
- [**47**星][7m] [C] [gdbinit/extractmacho](https://github.com/gdbinit/extractmacho) IDA plugin to extract Mach-O binaries located in the disassembly or data
-- [**47**星][25d] [PHP] [fortrabbit/craft-copy](https://github.com/fortrabbit/craft-copy) Deployment tools for Craft on fortrabbit
+- [**47**星][8d] [PHP] [fortrabbit/craft-copy](https://github.com/fortrabbit/craft-copy) Deployment tools for Craft on fortrabbit
- [**47**星][2y] [Pascal] [felipedaragon/huntpad](https://github.com/felipedaragon/huntpad) 开源的Notepad,有很多有助于渗透测试的特性
- [**47**星][2y] [C] [fail0verflow/switch-arm-trusted-firmware](https://github.com/fail0verflow/switch-arm-trusted-firmware) ARM Trusted Firmware-A for the Switch
-- [**47**星][1y] [Py] [ercoppa/symbolic-execution-tutorial](https://github.com/ercoppa/symbolic-execution-tutorial) Tutorial on Symbolic Execution. Hands-on session is based on the angr framework.
+- [**47**星][4d] [JS] [essandess/easylist-pac-privoxy](https://github.com/essandess/easylist-pac-privoxy) EasyList Tracker and Adblocks to Proxy Auto Configuration (PAC) File and Privoxy Actions and Filters
+- [**47**星][6d] [Py] [ercoppa/symbolic-execution-tutorial](https://github.com/ercoppa/symbolic-execution-tutorial) Tutorial on Symbolic Execution. Hands-on session is based on the angr framework.
- [**47**星][11m] [Py] [engelsjo/raspireader](https://github.com/engelsjo/raspireader) 3D models and code for building your own fingerprint reader
- [**47**星][2y] [Py] [embedi/amt_auth_bypass_poc](https://github.com/embedi/amt_auth_bypass_poc) CVE-2017-5689 Proof-of-Concept exploit
- [**47**星][10m] [Go] [dsopas/rfd-checker](https://github.com/dsopas/rfd-checker) rfd-checker: 命令行工具,检测指定URL是否存在反射文件下载(Reflected File Download)问题
- [**47**星][2y] [C] [david-reguera-garcia-dreg/enyelkm](https://github.com/david-reguera-garcia-dreg/enyelkm) LKM rootkit for Linux x86 with the 2.6 kernel. It inserts salts inside system_call and sysenter_entry.
-- [**47**星][1y] [PowerShell] [dafthack/passphrasegen](https://github.com/dafthack/passphrasegen) A script for generating custom passphrase lists to be used for password cracking with hashcat rules
+- [**47**星][1y] [PS] [dafthack/passphrasegen](https://github.com/dafthack/passphrasegen) A script for generating custom passphrase lists to be used for password cracking with hashcat rules
- [**47**星][2y] [C++] [collin80/m2ret](https://github.com/collin80/m2ret) GVRET fork to Macchina M2 board
-- [**47**星][18d] [Py] [cleanunicorn/theo](https://github.com/cleanunicorn/theo) Ethereum recon and exploitation tool.
-- [**47**星][3y] [C++] [chaitin/yanshi](https://github.com/chaitin/yanshi) A regular language recognizer generater like Ragel, enhanced with features to approximate context-free grammars and substring grammars
-- [**47**星][1y] [Java] [blackhacker511/blackrat](https://github.com/blackhacker511/blackrat) BlackRAT - Java Based Remote Administrator Tool
-- [**47**星][26d] [Shell] [bkerler/ghidra_installer](https://github.com/bkerler/ghidra_installer) Helper scripts to set up OpenJDK 11 and scale Ghidra for 4K on Ubuntu 18.04 / 18.10
+- [**47**星][4m] [Lua] [charlemaznable/lua-resty-wechat](https://github.com/charlemaznable/lua-resty-wechat) 使用Lua编写的nginx服务器微信公众平台代理.
+- [**47**星][2m] [Rust] [brycx/checkpwn](https://github.com/brycx/checkpwn) Check Have I Been Pwned and see if it's time for you to change passwords.
- [**47**星][1y] [Java] [bit4woo/java_deserialize_vuln_lab](https://github.com/bit4woo/java_deserialize_vuln_lab) Java 反序列化学习的实验代码 Java_deserialize_vuln_lab
- [**47**星][1y] [Py] [behavior3/behavior3py](https://github.com/behavior3/behavior3py) Behavior3 client library for Python (Behavior Tree for Python)
- [**47**星][5m] [PHP] [bediger4000/reverse-php-malware](https://github.com/bediger4000/reverse-php-malware) De-obfuscate and reverse engineer PHP malware
-- [**47**星][2y] [PHP] [backlion/webshell](https://github.com/backlion/webshell) 这是一些常用的webshell
- [**47**星][4y] [JS] [awalgarg/devtools-timing-attack](https://github.com/awalgarg/devtools-timing-attack) timing attack to check if devtools are open
- [**47**星][1y] [Shell] [appsecconsulting/pentest-tools](https://github.com/appsecconsulting/pentest-tools) Penetration Testing Tools Developed by AppSec Consulting.
-- [**47**星][8m] [CSS] [appsecco/using-docker-kubernetes-for-automating-appsec-and-osint-workflows](https://github.com/appsecco/using-docker-kubernetes-for-automating-appsec-and-osint-workflows) Repository for all the workshop content delivered at nullcon X on 1st of March 2019
- [**47**星][2y] [C++] [antid0tecom/aarch64_armv81extension](https://github.com/antid0tecom/aarch64_armv81extension) IDA AArch64 处理器扩展:添加对ARMv8.1 opcodes的支持
- [**47**星][2y] [Py] [anilbaranyelken/arpag](https://github.com/anilbaranyelken/arpag) Arpag: 自动化漏洞利用脚本
- [**47**星][1y] [Py] [alexfrancow/a-detector](https://github.com/alexfrancow/a-detector)
+- [**47**星][3y] [Py] [alessandroz/pupy](https://github.com/alessandroz/pupy) Pupy is an opensource, multi-platform (Windows, Linux, OSX, Android), multi function RAT (Remote Administration Tool) mainly written in python. It features a all-in-memory execution guideline and leaves very low footprint. Pupy can communicate using various transports, migrate into processes (reflective injection), load remote python code, pytho…
- [**47**星][7m] [Go] [agilebits/crackme](https://github.com/agilebits/crackme)
- [**47**星][5y] [Shell] [adafruit/adafruit-pi-externalroot-helper](https://github.com/adafruit/adafruit-pi-externalroot-helper) A shell script to configure a USB drive as root filesystem.
- [**47**星][3y] [Py] [4w4k3/knockmail](https://github.com/4w4k3/knockmail) Verify if email exists
-- [**47**星][7y] [C++] [1184893257/simplesniffer](https://github.com/1184893257/simplesniffer) 基于 WinPcap 的网络抓包软件,使用 MFC 做界面
+- [**46**星][12d] [Go] [dsnezhkov/deepsea](https://github.com/dsnezhkov/deepsea) DeepSea Phishing Gear
+- [**46**星][6m] [Swift] [git-kevinchuang/potatso-swift5](https://github.com/git-kevinchuang/potatso-swift5) Potatso compiled with swift5 xcode 10.2.1 mojave 10.14.5
+- [**46**星][1m] [C++] [125k/esp8266_wifi_captive_portal](https://github.com/125k/esp8266_wifi_captive_portal) WiFi captive portal for NodeMCU (ESP8266 Module) with DNS spoofing. It phishes the WiFi password.
+- [**46**星][10d] [JS] [hmbsbige/text_translation](https://github.com/hmbsbige/text_translation) 简体中文翻译&&一些文本
+- [**46**星][3y] [Py] [asamy/x86-64-pe-emu](https://github.com/asamy/x86-64-pe-emu) AMD64 PE Emulator in Python.
- [**46**星][1m] [Vue] [fireeye/gocrack-ui](https://github.com/fireeye/gocrack-ui) The User Interface for GoCrack
-- [**46**星][1y] [HTML] [iaik/jstemplate](https://github.com/iaik/jstemplate) JavaScript Template Attack proof-of-concept implementation
- [**46**星][6m] [Py] [landgrey/classhound](https://github.com/landgrey/classhound) 利用任意文件下载漏洞自动循环下载并反编译class文件获得网站源码
- [**46**星][2m] [Go] [rancher/remotedialer](https://github.com/rancher/remotedialer) HTTP in TCP in Websockets in HTTP in TCP, Tunnel all the things!
-- [**46**星][2m] [Py] [nccgroup/sshession](https://github.com/nccgroup/sshession) The SSH Multiplex Backdoor Tool
+- [**46**星][8y] [Perl] [gamelinux/echidna](https://github.com/gamelinux/echidna) Network Security Monitoring Framework
- [**46**星][9m] [Py] [lorenzb/libsubmarine](https://github.com/lorenzb/libsubmarine) Implementation of a novel practical scheme for submarine commitments
- [**46**星][2y] [leotsui/cs259d_notes_hw_cn](https://github.com/leotsui/cs259d_notes_hw_cn) 本笔记是对课程CS 259D中涉及的论文和讲义的扩展,建议阅读原始论文和讲义。
-- [**46**星][3m] [Ruby] [tintoser/bluekeep-exploit](https://github.com/tintoser/bluekeep-exploit) Bluekeep(CVE 2019-0708) exploit released
+- [**46**星][9m] [Py] [stef/wireless-radar](https://github.com/stef/wireless-radar) DF and other tools to explore a 2.4GHz environment.
- [**46**星][4y] [securitytube/wifiscanvisualizer](https://github.com/securitytube/wifiscanvisualizer) Wi-Fi Scan Visualizer by Pentester Academy
-- [**46**星][7y] [Py] [paulmcmillan/kismetclient](https://github.com/paulmcmillan/kismetclient) A Python client for the Kismet server protocol
-- [**46**星][3m] [Py] [makuga01/dnsfookup](https://github.com/makuga01/dnsfookup) DNS rebinding toolkit
+- [**46**星][2y] [C#] [epicrouterss/mssql-fileless-rootkit-warsqlkit](https://github.com/epicrouterss/mssql-fileless-rootkit-warsqlkit) Bildiğiniz üzere uzun zamandır MSSQL üzerine çalışmalar yapmaktayım. Bu yazımda uzun zamandır uğraştığım bir konuyu ele alacağım, MSSQL Rootkit. Bildiğiniz üzere şimdiye kadar MS-SQL için anlatılan post-exploitation işlemlerinin büyük çoğunluğu “xp_cmdshell” ve “sp_OACreate” stored procedure’lerini kullanarak anlatılır. Peki xp_cmdshell ve sp_OA…
+- [**46**星][4y] [PHP] [kurtcoke/demonhunter_exploitkit](https://github.com/kurtcoke/demonhunter_exploitkit) Source code to the Malicious Demon Hunter Exploit Kit
+- [**46**星][4m] [C#] [cristianst85/quickconnectplugin](https://github.com/cristianst85/quickconnectplugin) A KeePass plugin that allows you to connect to Windows/Linux/ESXi hosts.
+- [**46**星][2m] [C#] [ernado-x/x.web.sitemap](https://github.com/ernado-x/x.web.sitemap) Simple sitemap generator for .NET and .NET Core
- [**46**星][2y] [hdm/2017-bsideslv-modern-recon](https://github.com/hdm/2017-BSidesLV-Modern-Recon) Materials related to the 2017 BSides Las Vegas presentation
-- [**46**星][22d] [PHP] [szepeviktor/waf4wordpress](https://github.com/szepeviktor/waf4wordpress) WAF for WordPress
+- [**46**星][1m] [C++] [125k/esp8266_wifi_captive_portal](https://github.com/125K/ESP8266_WiFi_Captive_Portal) WiFi captive portal for NodeMCU (ESP8266 Module) with DNS spoofing. It phishes the WiFi password.
+- [**46**星][24d] [PHP] [szepeviktor/waf4wordpress](https://github.com/szepeviktor/waf4wordpress) WAF for WordPress
- [**46**星][2y] [C] [robotpy/robotpy-crio](https://github.com/robotpy/robotpy-crio) Obsolete. Python 3 port for cRIO for use in the FIRST Robotics Competition (FRC)
+- [**46**星][2m] [C#] [brunull/pace](https://github.com/brunull/pace) A Remote Access Tool for Windows.
+- [**46**星][3m] [Py] [koromodako/mkctf](https://github.com/koromodako/mkctf) A CTF framework to create, build, deploy and test challenges
- [**46**星][2y] [Go] [caarlos0-graveyard/gravekeeper](https://github.com/caarlos0-graveyard/gravekeeper) Informs users that a repo is not maintained anymore.
- [**46**星][1y] [C] [zznop/flyr](https://github.com/zznop/flyr) Block-based software vulnerability fuzzing framework
-- [**46**星][17d] [TeX] [zxgio/gdb_gef-cheatsheet](https://github.com/zxgio/gdb_gef-cheatsheet) GDB + GEF cheatsheet for reversing binaries
+- [**46**星][19d] [TeX] [zxgio/gdb_gef-cheatsheet](https://github.com/zxgio/gdb_gef-cheatsheet) GDB + GEF cheatsheet for reversing binaries
+- [**46**星][1m] [C] [zodiacon/regeditx](https://github.com/zodiacon/regeditx) Enhanced Registry Editor
+- [**46**星][18d] [JS] [znetstar/tor-router](https://github.com/znetstar/tor-router) A SOCKS, HTTP and DNS proxy for distributing traffic across multiple instances of Tor
- [**46**星][3y] [C] [zhuhuibeishadiao/pfhook](https://github.com/zhuhuibeishadiao/pfhook) Page fault hook use ept (Intel Virtualization Technology)
- [**46**星][5m] [C] [zerbea/hcxkeys](https://github.com/zerbea/hcxkeys) Small set of tools to generate plainmasterkeys (rainbowtables) and hashes for the use with latest hashcat and John the Ripper.
- [**46**星][8m] [YARA] [xumeiquer/yara-forensics](https://github.com/xumeiquer/yara-forensics) Set of Yara rules for finding files using magics headers
+- [**46**星][3m] [Py] [xuchaoa/ctf_awd_platform](https://github.com/xuchaoa/ctf_awd_platform) CTF 攻防对抗平台
- [**46**星][2y] [Py] [xnianq/awd-frame](https://github.com/xnianq/awd-frame) ctf awd framework
- [**46**星][7m] [Py] [wetw0rk/exploit-development](https://github.com/wetw0rk/exploit-development) CVE-2016-10709, CVE-2017-17099, CVE-2017-18047, CVE-2019-1003000, CVE-2018-1999002
-- [**46**星][9m] [C++] [vletoux/detectpasswordviantlminflow](https://github.com/vletoux/detectpasswordviantlminflow) Extract the password of the current user from flow (keylogger, config file, ..) Use SSPI to get a valid NTLM challenge/response and test passwords
+- [**46**星][1y] [C++] [wanttobeno/win_driver_mouse_and_key](https://github.com/wanttobeno/win_driver_mouse_and_key) 驱动模拟键鼠,支持64位,附代码
- [**46**星][12m] [Py] [viperbluff/waf_buster](https://github.com/viperbluff/waf_buster) Disrupt WAF by abusing SSL/TLS Ciphers
- [**46**星][3y] [C++] [vdalibard/boat](https://github.com/vdalibard/boat)
-- [**46**星][4y] [Py] [vasco2016/shellsploit-framework](https://github.com/vasco2016/shellsploit-framework) New Generation Exploit Development Kit
- [**46**星][4m] [Py] [v-p-b/kaspy_toolz](https://github.com/v-p-b/kaspy_toolz)
+- [**46**星][1y] [Go] [unixpickle/cve-2018-4407](https://github.com/unixpickle/cve-2018-4407) Crash macOS and iOS devices with one packet
- [**46**星][1y] [uefitech/resources](https://github.com/uefitech/resources) One-stop shop for UEFI/BIOS specifications/utilities by UEFI.Tech community
- [**46**星][8m] [turing-chain/honeypots-on-blockchain](https://github.com/turing-chain/honeypots-on-blockchain) This repo collects almost all the smart contract honeypots that you could find in the first three pages of Google search.
+- [**46**星][27d] [C] [trendmicro/rfquack](https://github.com/trendmicro/rfquack) RFQuack: the versatile RF-analysis tool that quacks!
- [**46**星][1y] [Py] [towerofhanoi/ctfsubmitter](https://github.com/towerofhanoi/ctfsubmitter) A flag submitter service with distributed attackers for attack/defense CTF games.
-- [**46**星][4y] [threatminer/aptnotes](https://github.com/threatminer/aptnotes) Various public documents, whitepapers and articles about APT campaigns
-- [**46**星][7d] [Py] [te-k/analyst-scripts](https://github.com/te-k/analyst-scripts) Scripts to analyze stuff
-- [**46**星][11m] [Jupyter Notebook] [tamimmirza/intrusion-detection-system-using-deep-learning](https://github.com/tamimmirza/intrusion-detection-system-using-deep-learning) VGG-19 deep learning model trained using ISCX 2012 IDS Dataset
-- [**46**星][5m] [Shell] [t3chnocat/oscp-ctf](https://github.com/t3chnocat/oscp-ctf) oscp-ctf is a small collection of basic Bash scripts that make life easier and save time whether you are in the OSCP labs, HackThebox or playing around with CTFs.
-- [**46**星][2y] [Py] [stormshadow07/beef-over-wan](https://github.com/stormshadow07/beef-over-wan) Browser Exploitation Framework is a Open-source penetration testing tool that focuses on browser-based vulnerabilities .This Python Script does the changes Required to make hooked Linked Accessible Over WAN .So anyone can use this framework and Attack Over WAN without Port Forwarding [NGROK or any Localhost to Webhost Service Required ]
+- [**46**星][2y] [C#] [testsecer/md5decrypt](https://github.com/testsecer/md5decrypt) MD5多接口解密工具(插件式)
+- [**46**星][2d] [Py] [te-k/analyst-scripts](https://github.com/te-k/analyst-scripts) Scripts to analyze stuff
- [**46**星][2y] [C] [stonedreamforest/re_avkmgr](https://github.com/stonedreamforest/re_avkmgr) 逆向小红伞杀毒软件驱动——avkmgr
- [**46**星][7y] [spiderlabs/korelogic-rules](https://github.com/spiderlabs/korelogic-rules) Updated version of the 2010 KoreLogic password cracking rules for John the Ripper
+- [**46**星][30d] [Py] [sowdust/ffff](https://github.com/sowdust/ffff) FFFF Finds Facebook Friends
- [**46**星][2y] [silvermoonsecurity/security-misc](https://github.com/silvermoonsecurity/security-misc) # Full overview of current vulnerability, exploit , fuzz, mitigation of current major Operation System(Windows, macOS, Linux, Android,iOS and so forath) and popular applicaiton
- [**46**星][3y] [C] [sidechannelmarvels/stark](https://github.com/sidechannelmarvels/stark) Repository of small utilities related to key recovery
- [**46**星][7y] [C] [shjalayeri/mcedp](https://github.com/shjalayeri/mcedp) Malicious Code Execution Detection Prevention (MCEDP) High Interaction Client Honeypot
+- [**46**星][9m] [setuid0-sec/swiss_e-voting_publications](https://github.com/setuid0-sec/swiss_e-voting_publications) Our publications of the Swiss E-Voting Public Intrusion Test (PIT)
- [**46**星][1y] [Py] [sentenza/gimp-ela](https://github.com/sentenza/gimp-ela) A JPEG Error Level Analysis forensic plugin for the GNU Image Manipulation Program (GIMP)
- [**46**星][8m] [Py] [safebreach-labs/altfs](https://github.com/safebreach-labs/altfs) The Alternative Fileless File System
- [**46**星][2y] [rustemsoft/skater-.net-obfuscator](https://github.com/rustemsoft/skater-.net-obfuscator) Skater .NET Obfuscator is an obfuscation tool for .NET code protection. It implements all known software protection techniques and obfuscation algorithms.
- [**46**星][7m] [Shell] [rokasurbelis/system-security-testing](https://github.com/rokasurbelis/system-security-testing)
- [**46**星][5y] [C] [rodionovd/task_vaccine](https://github.com/rodionovd/task_vaccine) Yet another code injection library for OS X
- [**46**星][2y] [JS] [rnehra01/arp-validator](https://github.com/rnehra01/arp-validator) 检测ARP 投毒攻击
+- [**46**星][4y] [Assembly] [raspberrypi/rpi-sense](https://github.com/raspberrypi/rpi-sense) Sense HAT firmware and driver
+- [**46**星][1m] [randomuserid/tylium](https://github.com/randomuserid/tylium) Primary data pipelines for intrusion detection, security analytics and threat hunting
- [**46**星][8m] [JS] [radenvodka/pentol](https://github.com/radenvodka/pentol) PENTOL - Pentester Toolkit for Fiddler2
- [**46**星][5y] [Py] [pun1sh3r/facebot](https://github.com/pun1sh3r/facebot) A facebook profile and reconnaissance system
-- [**46**星][7d] [C] [psilupan/fray](https://github.com/psilupan/fray) Recompilable version of Super Smash Bros. Melee 1.02 based on the LibOGC project.
+- [**46**星][2d] [C] [psilupan/fray](https://github.com/psilupan/fray) Recompilable version of Super Smash Bros. Melee 1.02 based on the LibOGC project.
- [**46**星][1y] [pimps/cve-2017-5645](https://github.com/pimps/cve-2017-5645) CVE-2017-5645 - Apache Log4j RCE due Insecure Deserialization
- [**46**星][2y] [pentestpartners/ptp-rat](https://github.com/pentestpartners/ptp-rat) Exfiltrate data over screen interfaces
+- [**46**星][4y] [C++] [papadp/reflective-injection-detection](https://github.com/papadp/reflective-injection-detection) a program to detect reflective dll injection on a live machine
- [**46**星][5m] [HTML] [paloaltonetworks/aws-elb-autoscaling](https://github.com/paloaltonetworks/aws-elb-autoscaling) Auto Scaling VM-Series firewalls in AWS
- [**46**星][1y] [Shell] [pablomansanet/c0toolkit](https://github.com/pablomansanet/c0toolkit) Miscellaneous pentesting scripts for OSCP
- [**46**星][4y] [Py] [p0cl4bs/facebrute](https://github.com/p0cl4bs/facebrute) Bruteforce to facebook accounts
+- [**46**星][2m] [Makefile] [osminogin/docker-tor-simple](https://github.com/osminogin/docker-tor-simple) Simplest minimal container for Tor anonymity software
- [**46**星][5m] [Go] [oscp/openshift-monitoring](https://github.com/oscp/openshift-monitoring) A realtime distributed monitoring tool for OpenShift Enterprise
- [**46**星][1y] [HTML] [octosavvi/espkey](https://github.com/octosavvi/espkey) Wiegand data logger, replay device and micro door-controller
-- [**46**星][13d] [Java] [netspi/awssigner](https://github.com/netspi/awssigner) Burp Extension for AWS Signing
+- [**46**星][2m] [Py] [nodiscc/srv01](https://github.com/nodiscc/srv01) [mirror] [Legacy version, rewrite in progress] Run your own network services, hosted on a server you control.
+- [**46**星][7d] [Java] [netspi/awssigner](https://github.com/netspi/awssigner) Burp Extension for AWS Signing
- [**46**星][2y] [Py] [n4xh4ck5/n4xd0rk](https://github.com/n4xh4ck5/n4xd0rk) Listing subdomains about a main domain
-- [**46**星][3y] [PowerShell] [n3l5/irfartpull](https://github.com/n3l5/irfartpull) PowerShell script utilized to pull several forensic artifacts from a live Win7 and WinXP system without WINRM.
+- [**46**星][3y] [PS] [n3l5/irfartpull](https://github.com/n3l5/irfartpull) PowerShell script utilized to pull several forensic artifacts from a live Win7 and WinXP system without WINRM.
- [**46**星][11m] [Shell] [mzpqnxow/gdb-static-cross](https://github.com/mzpqnxow/gdb-static-cross) Shell scripts, sourceable "activate" scripts and instructions for building a statically linked gdb-7.12 gdbserver using cross-compile toolchains. Includes more than 20 statically linked gdbserver executables for different architectures, byte orders and ABIs
- [**46**星][1y] [PHP] [mrsqar-ye/door404](https://github.com/mrsqar-ye/door404) Web application backdoor builder
-- [**46**星][1y] [Py] [miladdiaz/mikrotikexploit](https://github.com/miladdiaz/mikrotikexploit) Scan and Export RouterOS Password
- [**46**星][3y] [C] [maximehip/mach_portal](https://github.com/maximehip/mach_portal) iOS 10.1.1 Kernel exploit by Project Zero
-- [**46**星][22d] [PHP] [marcocesarato/php-antimalware-scanner](https://github.com/marcocesarato/php-antimalware-scanner) AMWSCAN (Antimalware Scanner) is a php antimalware/antivirus scanner console script written in php for scan your project. This can work on php projects and a lot of others platform.
- [**46**星][1y] [JS] [maltek/swift-frida](https://github.com/maltek/swift-frida) Frida library for interacting with Swift programs.
- [**46**星][4m] [JS] [lwindolf/polscan](https://github.com/lwindolf/polscan) Zero-setup SSH-based scanner with extensive visualizations for Debian server inventory, policy compliance and vulnerabilities
- [**46**星][1y] [Py] [luis-hebendanz/msf-remote-console](https://github.com/luis-hebendanz/msf-remote-console) A remote msfconsole written in Python 2.7 to connect to the msfrcpd server of metasploit. This tool gives you the ability to load modules permanently as daemon on your server like autopwn2.
-- [**46**星][7y] [Objective-C] [logicalparadox/apnagent-ios](https://github.com/logicalparadox/apnagent-ios) iOS application for testing Apple Push Notification (APN) service payloads.
-- [**46**星][3m] [C] [leoetlino/botw-re-notes](https://github.com/leoetlino/botw-re-notes) Reverse engineering notes and tools for The Legend of Zelda: Breath of the Wild
+- [**46**星][7y] [ObjC] [logicalparadox/apnagent-ios](https://github.com/logicalparadox/apnagent-ios) iOS application for testing Apple Push Notification (APN) service payloads.
- [**46**星][4y] [C] [laginimaineb/fuzz_zone](https://github.com/laginimaineb/fuzz_zone) Fuzzing utility which enables sending arbitrary SCMs to TrustZone
- [**46**星][2y] [Go] [lafolle/flen](https://github.com/lafolle/flen) Flen provides stats on functions/methods lengths in a Golang package.
+- [**46**星][22d] [Py] [kisspeter/apifuzzer](https://github.com/kisspeter/apifuzzer) Fuzz your application using you Swagger or API Blueprint definition without coding
+- [**46**星][1y] [Java] [kaushikravikumar/realtimetaxiandroiddemo](https://github.com/kaushikravikumar/realtimetaxiandroiddemo) PubNub Demo that uses a Publish/Subscribe model to implement a realtime map functionality similar to Lyft/Uber.
- [**46**星][3y] [C] [jyao1/stm](https://github.com/jyao1/stm)
+- [**46**星][20d] [Py] [justfoxing/ghidra_bridge](https://github.com/justfoxing/ghidra_bridge) Python 3 bridge to Ghidra's Python scripting
- [**46**星][1y] [C] [jthuraisamy/dirt](https://github.com/jthuraisamy/dirt) Driver Initial Reconnaissance Tool
- [**46**星][5y] [joshbegley/nsa-stories](https://github.com/joshbegley/nsa-stories) Every document published from the Snowden archive
- [**46**星][8m] [Dockerfile] [jmg87/redteam-k8spwn](https://github.com/jmg87/redteam-k8spwn) Reverse shell container for k8s deployments
- [**46**星][8m] [JS] [jeremyfetiveau/turbofan-exploit-for-issue-762874](https://github.com/jeremyfetiveau/turbofan-exploit-for-issue-762874) Exploit for a bug in TurboFan's typing of JSCall nodes for builtins kStringLastIndexOf and kStringIndexOf
-- [**46**星][8m] [jeremyblackthorne/ghidra-keybindings](https://github.com/jeremyblackthorne/ghidra-keybindings)
- [**46**星][3y] [Go] [iovisor/iovisor-ovn](https://github.com/iovisor/iovisor-ovn) IOVisor OVN integration
-- [**46**星][7m] [Py] [initstring/lxd_root](https://github.com/initstring/lxd_root) Linux privilege escalation via LXD
-- [**46**星][6m] [Py] [hucmosin/purelove](https://github.com/hucmosin/purelove) Purelove is a lightweight penetration testing framework, in order to better security testers testing holes with use.
-- [**46**星][1y] [Py] [ha3mrx/facebook-cracker](https://github.com/ha3mrx/facebook-cracker) Facebook Cracker Version 1.0 can crack into Facebook Database 100% without Interruption By Facebook Firewall
+- [**46**星][3y] [Go] [inszva/tap0901](https://github.com/inszva/tap0901) Go语言虚拟网卡库,可用于制作对战平台、加速器、防火墙、VPN等
+- [**46**星][7m] [Go] [ice-ice/dnstunnel](https://github.com/ice-ice/dnstunnel) dns tunnel backdoor DNS隧道后门
+- [**46**星][7m] [Py] [hucmosin/purelove](https://github.com/hucmosin/purelove) Purelove is a lightweight penetration testing framework, in order to better security testers testing holes with use.
+- [**46**星][6m] [Go] [hectane/go-acl](https://github.com/hectane/go-acl) Go library for manipulating ACLs on Windows
+- [**46**星][5y] [C++] [hackedteam/core-macos](https://github.com/hackedteam/core-macos) RCS Agent for Mac
+- [**46**星][11d] [PHP] [gsoros/gtrader](https://github.com/gsoros/gtrader) a trading strategy trainer, back-tester and bot
- [**46**星][2y] [Py] [grierforensics/officedissector](https://github.com/grierforensics/officedissector) Static analysis tools for Microsoft Office Open XML files and documents
+- [**46**星][2y] [grayddq/hids](https://github.com/grayddq/hids) HIDS全称是Host-based Intrusion Detection System,即基于主机型入侵检测系统,HIDS运行依赖这样一个原理:一个成功的入侵者一般而言都会留下他们入侵的痕迹。本人更倾向于通过记录主机的重要信息变更来发现入侵者。 本项目由两部分组成:一部分osquery、另一部分监控脚本来补充osquery规则的不足; 本文是第一部分osquery规则部分,实现绝大部分主机信息监控。
- [**46**星][2y] [gdssecurity/whitepapers](https://github.com/gdssecurity/whitepapers) A collection of publicly released whitepapers
- [**46**星][4y] [C] [gdbinit/gatekeerper](https://github.com/gdbinit/gatekeerper) A kernel extension to mitigate Gatekeeper bypasses
+- [**46**星][2m] [Py] [gcmartinelli/entropy](https://github.com/gcmartinelli/entropy) Binary file entropy visualizer written in Python
- [**46**星][6y] [Py] [funsecurity/apk_binder_script](https://github.com/funsecurity/apk_binder_script) apk binder script
- [**46**星][6y] [Ruby] [fingertips/wad](https://github.com/fingertips/wad) WAD is a little script that speeds up test runs on Travis-CI by caching the installed bundle on S3.
- [**46**星][5m] [C#] [ericzimmerman/prefetch](https://github.com/ericzimmerman/prefetch) Windows Prefetch parser. Supports all known versions from Windows XP to Windows 10.
- [**46**星][2y] [Py] [erevus-cn/scan_webshell](https://github.com/erevus-cn/scan_webshell) 很简单的webshell扫描
-- [**46**星][2y] [Shell] [danielfree/asus-v2ray-transparent-proxy](https://github.com/danielfree/asus-v2ray-transparent-proxy) transparent proxy with v2ray, iptables, ipset 无线路由器 v2ray 透明代理
+- [**46**星][7m] [Py] [disappeerlabs/disappeer](https://github.com/disappeerlabs/disappeer) A pure Python GUI app for GPG functionality and peer-to-peer encrypted messaging over Tor
- [**46**星][8m] [Shell] [damonmohammadbagher/nativepayload_bssid](https://github.com/damonmohammadbagher/nativepayload_bssid) Transferring Backdoor Payload by BSSID and Wireless traffic
- [**46**星][3m] [Py] [cve-search/pycvesearch](https://github.com/cve-search/pycvesearch) Python wrapper for the API of cve-search
- [**46**星][5m] [Py] [cryptax/angeapk](https://github.com/cryptax/angeapk) Encrypting a PNG into an Android application
@@ -12338,74 +13172,81 @@ networking routines
- [**46**星][5m] [C] [chentingz/snifferui](https://github.com/chentingz/snifferui) 基于MFC和WinPcap库开发的网络抓包和协议分析软件
- [**46**星][7m] [Py] [capeleidokos/elf_diff](https://github.com/capeleidokos/elf_diff) A tool to compare ELF binaries
- [**46**星][4y] [Py] [bwall/markovobfuscate](https://github.com/bwall/markovobfuscate) Python library and tools to obfuscate data based on Markov models built off shared data
+- [**46**星][4m] [bc-security/defcon27](https://github.com/bc-security/defcon27)
- [**46**星][2y] [Assembly] [azya52/seiko](https://github.com/azya52/seiko) Seiko uc-2000 reverse engineering
- [**46**星][5y] [Ruby] [averagesecurityguy/prometheus](https://github.com/averagesecurityguy/prometheus) Prometheus Firewall Analyzer
-- [**46**星][19d] [PowerShell] [automatedlab/automatedlab.common](https://github.com/automatedlab/automatedlab.common) PowerShell module for daily administrative tasks and general helper functions
-- [**46**星][3y] [Py] [alessandroz/pupy](https://github.com/alessandroz/pupy) Pupy is an opensource, multi-platform (Windows, Linux, OSX, Android), multi function RAT (Remote Administration Tool) mainly written in python. It features a all-in-memory execution guideline and leaves very low footprint. Pupy can communicate using various transports, migrate into processes (reflective injection), load remote python code, pytho…
+- [**46**星][21d] [PS] [automatedlab/automatedlab.common](https://github.com/automatedlab/automatedlab.common) PowerShell module for daily administrative tasks and general helper functions
- [**46**星][3y] [C#] [aleksk/lazycopy](https://github.com/aleksk/lazycopy) NTFS minifilter driver that can download file content from a remote location, when it is opened for the first time.
+- [**46**星][2y] [akhepcat/bridgeap](https://github.com/akhepcat/bridgeap) Automagically bridge any live interface to any idle interface using NATS, DHCP, and HostAP where applicable
- [**46**星][7m] [Ruby] [activeadmin-plugins/active_admin_role](https://github.com/activeadmin-plugins/active_admin_role) Role based authorization with CanCanCan for Active Admin
- [**46**星][1y] [Py] [aaaddress1/vtmal](https://github.com/aaaddress1/vtmal) Malware Sandbox Emulation in Python @ HITCON 2018
- [**46**星][3y] [C++] [55-aa/cve-2016-3308](https://github.com/55-aa/cve-2016-3308) Use CVE-2016-3308 corrupt win32k desktop heap
-- [**45**星][17d] [payloadbox/xxe-injection-payload-list](https://github.com/payloadbox/xxe-injection-payload-list)
+- [**45**星][] [blacckhathaceekr/osint_tips](https://github.com/blacckhathaceekr/osint_tips) This repository was created and developed by Ammar Amer @cry__pto Only. Updates to this repository will continue to arrive until the number of TIPS reach 1000 TIPS .Learn Ethical Hacking and penetration testing.and of course OSINT
+- [**45**星][12m] [Shell] [witee/note-shadowsocks](https://github.com/witee/note-shadowsocks) 公司网关使用 shadowsocks 搭建翻墙网络
+- [**45**星][9m] [syst3ma/awesome-baseband-research](https://github.com/syst3ma/awesome-baseband-research) A curated list of awesome baseband research resources
+- [**45**星][5d] [CSS] [evilsocket/www.pwnagotchi.ai](https://github.com/evilsocket/www.pwnagotchi.ai) (⌐■_■) - pwnagotchi.ai
- [**45**星][5y] [Py] [f-secure/mqtt_fuzz](https://github.com/f-secure/mqtt_fuzz) A simple fuzzer for the MQTT protocol
+- [**45**星][30d] [C] [timwr/cve-2019-2215](https://github.com/timwr/cve-2019-2215)
- [**45**星][7y] [JS] [zneak/jsx](https://github.com/zneak/jsx) A Playstation 1 emulator written in Javascript
- [**45**星][4y] [C] [shadowsocks/iptables](https://github.com/shadowsocks/iptables) iptables is the userspace command line program used to configure the Linux 2.4.x and later packet filtering ruleset. It is targeted towards system administrators.
-- [**45**星][25d] [Py] [evilsocket/pwnagotchi-plugins-contrib](https://github.com/evilsocket/pwnagotchi-plugins-contrib) User contributed Pwnagotchi plugins.
+- [**45**星][27d] [C++] [avast/pelib](https://github.com/avast/pelib) PE file manipulation library.
- [**45**星][5y] [Shell] [danielmiessler/iptables](https://github.com/danielmiessler/iptables) An iptables firewall configuration template.
-- [**45**星][20d] [Java] [thisislibra/genesis](https://github.com/thisislibra/genesis) A framework to generate unique test cases based on code snippets to test techniques
+- [**45**星][20d] [Shell] [soaringswine/lazyrecon_docker](https://github.com/soaringswine/lazyrecon_docker) Containerized version of my fork of Nahamsec's Lazyrecon.
- [**45**星][10m] [Shell] [ticarpi/my-pentesting-repo](https://github.com/ticarpi/my-pentesting-repo) This is a set of tips and reminders for pentesting processes and scripts/programs. Initially for personal use, but if anyone else finds the reminders useful, then enjoy! A few links for useful tools and files. Some tools written by me.
+- [**45**星][2y] [Go] [onplus/v2ray-sitedat](https://github.com/onplus/v2ray-sitedat)
- [**45**星][2m] [Py] [k8gege/cve-2019-0604](https://github.com/k8gege/cve-2019-0604) cve-2019-0604 SharePoint RCE exploit
- [**45**星][4y] [Py] [nims11/hostapd.py](https://github.com/nims11/hostapd.py) Python script to make using and configuring hostapd easier
-- [**45**星][9m] [Py] [stef/wireless-radar](https://github.com/stef/wireless-radar) DF and other tools to explore a 2.4GHz environment.
-- [**45**星][2y] [C#] [epicrouterss/mssql-fileless-rootkit-warsqlkit](https://github.com/epicrouterss/mssql-fileless-rootkit-warsqlkit) Bildiğiniz üzere uzun zamandır MSSQL üzerine çalışmalar yapmaktayım. Bu yazımda uzun zamandır uğraştığım bir konuyu ele alacağım, MSSQL Rootkit. Bildiğiniz üzere şimdiye kadar MS-SQL için anlatılan post-exploitation işlemlerinin büyük çoğunluğu “xp_cmdshell” ve “sp_OACreate” stored procedure’lerini kullanarak anlatılır. Peki xp_cmdshell ve sp_OA…
-- [**45**星][4y] [PHP] [kurtcoke/demonhunter_exploitkit](https://github.com/kurtcoke/demonhunter_exploitkit) Source code to the Malicious Demon Hunter Exploit Kit
- [**45**星][2m] [mpgn/cve-2018-17246](https://github.com/mpgn/cve-2018-17246) CVE-2018-17246 - Kibana LFI < 6.4.3 & 5.6.13
-- [**45**星][27d] [r0x4r/d4rkxss](https://github.com/r0x4r/d4rkxss) A list of useful payloads and Bypass for Web Application Security and Bug Bounty/CTF
-- [**45**星][1m] [Java] [portswigger/stepper](https://github.com/portswigger/stepper) A natural evolution of Burp Suite's Repeater tool
+- [**45**星][29d] [r0x4r/d4rkxss](https://github.com/r0x4r/d4rkxss) A list of useful payloads and Bypass for Web Application Security and Bug Bounty/CTF
- [**45**星][2y] [feeicn/wsvd](https://github.com/FeeiCN/WSVD) White hat Speaks Vulnerabilities Defence《白帽子讲漏洞防御》
- [**45**星][3m] [C] [thibault-69/rat-hodin-v2.9](https://github.com/Thibault-69/RAT-Hodin-v2.9) Remote Administration Tool for Linux
- [**45**星][3y] [C++] [notglop/sysexec](https://github.com/NotGlop/SysExec) [Windows] Local Privilege Escalation - WebClient
- [**45**星][3y] [Py] [eteissonniere/elidecode](https://github.com/ETeissonniere/EliDecode) The tool to decode obfuscated shellcodes using the unicorn and capstone engine
-- [**45**星][18d] [Assembly] [borjamerino/windows-one-way-stagers](https://github.com/BorjaMerino/Windows-One-Way-Stagers) Windows Stagers to circumvent restrictive network environments
+- [**45**星][20d] [Assembly] [borjamerino/windows-one-way-stagers](https://github.com/BorjaMerino/Windows-One-Way-Stagers) Windows Stagers to circumvent restrictive network environments
- [**45**星][3y] [Py] [threatexpress/subshell](https://github.com/threatexpress/subshell) SubShell is a python command shell used to control and execute commands through HTTP requests to a webshell. SubShell acts as the interface to the remote webshells.
-- [**45**星][2m] [C#] [brunull/pace](https://github.com/brunull/pace) A Remote Access Tool for Windows.
-- [**45**星][3m] [Py] [koromodako/mkctf](https://github.com/koromodako/mkctf) A CTF framework to create, build, deploy and test challenges
-- [**45**星][2m] [Assembly] [drenn1/oracles-disasm](https://github.com/Drenn1/oracles-disasm) Disassembly of Oracle of Ages and Seasons
+- [**45**星][3d] [Assembly] [drenn1/oracles-disasm](https://github.com/Drenn1/oracles-disasm) Disassembly of Oracle of Ages and Seasons
- [**45**星][8y] [Py] [zynamics/msdn-plugin-ida](https://github.com/zynamics/msdn-plugin-ida) Imports MSDN documentation into IDA Pro
-- [**45**星][1m] [C] [zodiacon/regeditx](https://github.com/zodiacon/regeditx) Enhanced Registry Editor
-- [**45**星][1y] [C++] [wanttobeno/win_driver_mouse_and_key](https://github.com/wanttobeno/win_driver_mouse_and_key) 驱动模拟键鼠,支持64位,附代码
-- [**45**星][8d] [Py] [virtadpt/exocortex-halo](https://github.com/virtadpt/exocortex-halo) Various and sundry additional pieces of software I've written to incorporate into my exocortex.
+- [**45**星][12m] [Py] [zev3n/shodan_so](https://github.com/zev3n/shodan_so) Search Assistant: Searching shodan via API.
+- [**45**星][3y] [C++] [vusec/dangsan](https://github.com/vusec/dangsan) dangsan:检测C/C++编写的程序是否有未释放的内存,防止悬挂指针
+- [**45**星][9d] [Py] [virtadpt/exocortex-halo](https://github.com/virtadpt/exocortex-halo) Various and sundry additional pieces of software I've written to incorporate into my exocortex.
- [**45**星][6m] [Py] [virink/awd_auto_attack_framework](https://github.com/virink/awd_auto_attack_framework) AWD 自动化攻击框架
+- [**45**星][3y] [vduddu/deepweblinks](https://github.com/vduddu/deepweblinks) A huge dump of deep web links
- [**45**星][4m] [HTML] [unk9vvn/andtroj](https://github.com/unk9vvn/andtroj) A tool for integrating the Metasploit payload with Android's healthy programs and bypassing antivirus
-- [**45**星][1y] [Go] [unixpickle/cve-2018-4407](https://github.com/unixpickle/cve-2018-4407) Crash macOS and iOS devices with one packet
- [**45**星][3y] [Py] [tr3jer/incextensivelist](https://github.com/tr3jer/incextensivelist) 从扫描器结果分离出的一些大公司泛解析ip列表
+- [**45**星][5y] [Py] [thomaspatzke/poodleattack](https://github.com/thomaspatzke/poodleattack) PoC implementation of the POODLE attack
- [**45**星][4y] [C++] [tandasat/remotewritemonitor](https://github.com/tandasat/remotewritemonitor) A tool to help malware analysts tell that the sample is injecting code into other process.
- [**45**星][4y] [Py] [stasinopoulos/ztexploit](https://github.com/stasinopoulos/ztexploit) ZTE ZXV10 H108L Router with <= V1.0.01_WIND_A01 - Remote root RCE Exploit
+- [**45**星][6m] [C] [sqdwr/hidedriver](https://github.com/sqdwr/hidedriver) 之前那份是7600的,每次编译搞得好麻烦。更新一个VS2017可以直接编译的。
- [**45**星][11m] [Perl] [spiderlabs/modsecurity-apache](https://github.com/spiderlabs/modsecurity-apache) ModSecurity v3 Apache Connector
- [**45**星][5y] [Py] [spiderlabs/groupenum](https://github.com/spiderlabs/groupenum)
-- [**45**星][2m] [C] [spacial/csirt](https://github.com/spacial/csirt) CSIRT is an awesome curated list of links and resources in security and csirt daily activities.
- [**45**星][7y] [JS] [sofish/imagexss.js](https://github.com/sofish/imagexss.js) 防止外部链接通过图片进行 XSS 攻击
+- [**45**星][7m] [ObjC] [smilezxlee/zxhookutil](https://github.com/smilezxlee/zxhookutil) 【iOS逆向】Tweak工具函数集,基于theos、monkeyDev
- [**45**星][1m] [Py] [skoolkid/skoolkit](https://github.com/skoolkid/skoolkit) A suite of tools for creating disassemblies of ZX Spectrum games.
-- [**45**星][18d] [JS] [silverwind/tcpie](https://github.com/silverwind/tcpie) CLI tool to ping any TCP port
+- [**45**星][20d] [JS] [silverwind/tcpie](https://github.com/silverwind/tcpie) CLI tool to ping any TCP port
+- [**45**星][5m] [Shell] [shiva108/waes](https://github.com/shiva108/waes) CPH:SEC WAES: Web Auto Enum & Scanner - Auto enums website(s) and dumps files as result
- [**45**星][7y] [C] [shenghe/pcmanager](https://github.com/shenghe/pcmanager) 金山卫士开源代码。同步于Hg源。为了方便查看和学习,同步到Github
- [**45**星][5y] [JS] [shd101wyy/python_reverse_tcp](https://github.com/shd101wyy/python_reverse_tcp) simple reverse tcp backdoor hack
-- [**45**星][1y] [Py] [seekintoo/chimay-red](https://github.com/seekintoo/chimay-red) Mikrotik RouterOS (6.x < 6.38.5) exploit kit. Reverse engineered from the "Vault 7" WikiLeaks publication.
+- [**45**星][2y] [Py] [seekintoo/chimay-red](https://github.com/seekintoo/chimay-red) Mikrotik RouterOS (6.x < 6.38.5) exploit kit. Reverse engineered from the "Vault 7" WikiLeaks publication.
+- [**45**星][4y] [Py] [secwiki/scaing-backdoor](https://github.com/secwiki/scaing-backdoor) 新一代Webshell扫描工具
- [**45**星][3y] [Shell] [rumesh986/wifianalyse](https://github.com/rumesh986/wifianalyse) simple bash script to monitor wifi signal and ping time
+- [**45**星][5m] [Ruby] [rootup/autosploit](https://github.com/rootup/autosploit) Autosploit = Automating Metasploit Modules.
- [**45**星][4y] [C++] [rootkitsmm/ms15-061](https://github.com/rootkitsmm/ms15-061) Exploiting MS15-061 local Privilege escalation
- [**45**星][2m] [Py] [ritvikb99/dark-fantasy-hack-tool](https://github.com/ritvikb99/dark-fantasy-hack-tool) DDOS Tool: To take down small websites with HTTP FLOOD. Port scanner: To know the open ports of a site. FTP Password Cracker: To hack file system of websites.. Banner Grabber: To get the service or software running on a port. (After knowing the software running google for its vulnerabilities.) Web Spider: For gathering web application hacking in…
- [**45**星][3y] [C++] [reevesrs24/winmacspoofer](https://github.com/reevesrs24/winmacspoofer) Windows application for spoofing the MAC address
- [**45**星][1y] [C++] [redogwu/windows_kernel_exploit](https://github.com/redogwu/windows_kernel_exploit) windows kernel exploit
+- [**45**星][12d] [reddelexc/hackerone-reports](https://github.com/reddelexc/hackerone-reports) Top disclosed reports from HackerOne
- [**45**星][2y] [Ruby] [rapid7/metasploit-aggregator](https://github.com/rapid7/metasploit-aggregator) Created by Jeffrey Martin via the GitHub Connector
-- [**45**星][3m] [radareorg/cutter-plugins](https://github.com/radareorg/cutter-plugins) A a curated list of Community Plugins and Scripts written for Cutter
+- [**45**星][2d] [radareorg/cutter-plugins](https://github.com/radareorg/cutter-plugins) A curated list of Community Plugins and Scripts written for Cutter
- [**45**星][1y] [Shell] [qiang-yu/shadowsocksvpn-openwrt](https://github.com/qiang-yu/shadowsocksvpn-openwrt) Shadowsocks-libev-full for OpenWrt
+- [**45**星][2y] [CSS] [pure-l0g1c/apex](https://github.com/pure-l0g1c/apex) Using Social Engineering To Obtain WiFi Passwords
- [**45**星][7m] [Rust] [ps1dr3x/lachesis](https://github.com/ps1dr3x/lachesis)
- [**45**星][2y] [Java] [portswigger/httpoxy-scanner](https://github.com/portswigger/httpoxy-scanner) A Burp Suite extension that checks for the HTTPoxy vulnerability.
-- [**45**星][24d] [Shell] [pierregode/linux-active-directory-join-script](https://github.com/pierregode/linux-active-directory-join-script) Active directory Join script for Ubuntu, Debian, CentOS, Linux Mint, Fedora, Kali and Raspbian with built in failchcheck and debugmode for Ubuntu. "The most advanced and updated AD join script on GITHUB for Linux"
-- [**45**星][4y] [C++] [papadp/reflective-injection-detection](https://github.com/papadp/reflective-injection-detection) a program to detect reflective dll injection on a live machine
+- [**45**星][10m] [Py] [platypew/digispark-duckduino](https://github.com/platypew/digispark-duckduino) Poor man's rubber ducky
+- [**45**星][9m] [JS] [phantom0301/pteye](https://github.com/phantom0301/pteye) Phantom eye——A passive business logic vulnerability auditing tool
- [**45**星][3y] [orangetw/bug-bounty-reference](https://github.com/orangetw/bug-bounty-reference) Inspired by
-- [**45**星][7y] [JS] [oguzy/ovizart](https://github.com/oguzy/ovizart)
- [**45**星][6y] [Py] [obscuresec/random](https://github.com/obscuresec/random) Scripts that aren't PowerShell
- [**45**星][2m] [nullsecuritynet/papers](https://github.com/nullsecuritynet/papers) Papers about known hacking, security, hardware, software, computer, network and other ressources.
+- [**45**星][11m] [Py] [nowsecure/r2lldb](https://github.com/nowsecure/r2lldb) radare2-lldb integration
- [**45**星][4m] [JS] [nowsecure/frida-trace](https://github.com/nowsecure/frida-trace) Trace APIs declaratively through Frida.
- [**45**星][3y] [C#] [nccgroup/ransomware-simulator](https://github.com/nccgroup/ransomware-simulator) NCC Group Ransomware Simulator
- [**45**星][2y] [C++] [nccgroup/psr](https://github.com/nccgroup/psr) Pointer Sequence Reverser - enable you to see how Windows C++ application is accessing a particular data member or object.
@@ -12414,220 +13255,237 @@ networking routines
- [**45**星][9m] [C++] [ncatlin/exilesniffer](https://github.com/ncatlin/exilesniffer) A protocol decryption and dissection tool for the game 'Path of Exile'
- [**45**星][2y] [Py] [mthbernardes/fses](https://github.com/mthbernardes/fses) fses:从搜索引擎中爬取 url
- [**45**星][5y] [Java] [monstersb/hijackandroidpoweroff](https://github.com/monstersb/hijackandroidpoweroff) Android hijack power off
+- [**45**星][2y] [Py] [monrocoury/admin-panel-finder](https://github.com/monrocoury/admin-panel-finder) A powerful admin login page finder in python
- [**45**星][5m] [Py] [misp/mail_to_misp](https://github.com/misp/mail_to_misp) Connect your mail client/infrastructure to MISP in order to create events based on the information contained within mails.
+- [**45**星][5m] [PS] [miladmsft/threathunt](https://github.com/miladmsft/threathunt) ThreatHunt is a PowerShell repository that allows you to train your threat hunting skills.
- [**45**星][1y] [Py] [maoqyhz/droidcc](https://github.com/maoqyhz/droidcc) Android malware detection using deep learning, contains android malware samples, papers, tools etc.
- [**45**星][2y] [Go] [luc10/struts-rce-cve-2017-9805](https://github.com/luc10/struts-rce-cve-2017-9805) Apache Struts CVE 2017-9805 漏洞利用代码(Go语言)
-- [**45**星][19d] [C] [limithit/ngx_dynamic_limit_req_module](https://github.com/limithit/ngx_dynamic_limit_req_module) The ngx_dynamic_limit_req_module module is used to dynamically lock IP and release it periodically.
+- [**45**星][3m] [C] [linaro-swg/optee_examples](https://github.com/linaro-swg/optee_examples) OP-TEE Sample Applications
+- [**45**星][21d] [C] [limithit/ngx_dynamic_limit_req_module](https://github.com/limithit/ngx_dynamic_limit_req_module) The ngx_dynamic_limit_req_module module is used to dynamically lock IP and release it periodically.
- [**45**星][2y] [lcatro/think-in-security](https://github.com/lcatro/think-in-security) 从二进制到WEB ,分享我在安全路上的思考与点滴,后面会不断地更新..
- [**45**星][1y] [Py] [l4ys/idasignsrch](https://github.com/l4ys/idasignsrch) 签名搜索
- [**45**星][5y] [Py] [kyrus/ida-translator](https://github.com/kyrus/ida-translator) 将IDB数据库中的任意字符集转换为Unicode,然后自动调用基于网页的翻译服务(当前只有谷歌翻译)将非英文语言翻译为英文
+- [**45**星][3m] [Java] [kxcode/jndi-exploit-bypass-demo](https://github.com/kxcode/jndi-exploit-bypass-demo) Demo code for post
- [**45**星][2y] [Py] [kukfa/bindbg](https://github.com/kukfa/bindbg) Binary Ninja插件, 将Windbg的静态/动态调试同步至Binary Ninja
-- [**45**星][20d] [Py] [kisspeter/apifuzzer](https://github.com/kisspeter/apifuzzer) Fuzz your application using you Swagger or API Blueprint definition without coding
-- [**45**星][1y] [Java] [kaushikravikumar/realtimetaxiandroiddemo](https://github.com/kaushikravikumar/realtimetaxiandroiddemo) PubNub Demo that uses a Publish/Subscribe model to implement a realtime map functionality similar to Lyft/Uber.
+- [**45**星][3m] [C] [knnspeed/simple-uefi-bootloader](https://github.com/knnspeed/simple-uefi-bootloader) A UEFI bootloader for bare-metal x86-64 applications, including a minimal cross-platform UEFI development environment
+- [**45**星][7d] [TSQL] [kacos2000/windowstimeline](https://github.com/kacos2000/windowstimeline) SQLite query & Powershell scripts to parse the Windows 10 (v1803+) ActivitiesCache.db
- [**45**星][4m] [Shell] [juxhindb/oob-server](https://github.com/juxhindb/oob-server) A Bind9 server for pentesters to use for Out-of-Band vulnerabilities
-- [**45**星][18d] [Py] [justfoxing/ghidra_bridge](https://github.com/justfoxing/ghidra_bridge) Python 3 bridge to Ghidra's Python scripting
- [**45**星][11m] [Py] [jevinskie/emusca](https://github.com/jevinskie/emusca) Power trace simulator using Unicorn Engine for side channel analysis attack testing
- [**45**星][9m] [C] [jay/gethooks](https://github.com/jay/gethooks) GetHooks is a program designed for the passive detection and monitoring of hooks from a limited user account.
-- [**45**星][4y] [PowerShell] [invoke-ir/wmievent](https://github.com/invoke-ir/wmievent) A PowerShell module to abstract the complexities of Permanent WMI Event Subscriptions
+- [**45**星][4y] [PS] [invoke-ir/wmievent](https://github.com/invoke-ir/wmievent) A PowerShell module to abstract the complexities of Permanent WMI Event Subscriptions
- [**45**星][10m] [C] [ilammy/ftrace-hook](https://github.com/ilammy/ftrace-hook) Using ftrace for function hooking in Linux kernel
- [**45**星][5y] [Java] [ikkisoft/parrotng](https://github.com/ikkisoft/parrotng) ParrotNG is a tool capable of identifying Adobe Flex applications (SWF) vulnerable to CVE-2011-2461
-- [**45**星][4m] [C] [ihack4falafel/osee](https://github.com/ihack4falafel/osee) Collection of things made during my preparation to take on OSEE
- [**45**星][6y] [C++] [igororlov/trafficlight](https://github.com/igororlov/trafficlight) Detection of traffic lights and driving on red light.
-- [**45**星][7m] [Go] [ice-ice/dnstunnel](https://github.com/ice-ice/dnstunnel) dns tunnel backdoor DNS隧道后门
-- [**45**星][13d] [Shell] [hax4us/apkmod](https://github.com/hax4us/apkmod) Apkmod can decompile, recompile, sign APK, and bind the payload with any legit APP
+- [**45**星][28d] [Py] [hvqzao/report-ng](https://github.com/hvqzao/report-ng) Generate MS Word template-based reports with HP WebInspect / Burp Suite Pro input, own custom data and knowledge base.
- [**45**星][2y] [Py] [hansesecure/metasploit-modules](https://github.com/hansesecure/metasploit-modules)
- [**45**星][2y] [Ruby] [hammackj/uirusu](https://github.com/hammackj/uirusu) A rubygem for interacting with Virustotal.com's public API v2
-- [**45**星][5y] [C++] [hackedteam/core-macos](https://github.com/hackedteam/core-macos) RCS Agent for Mac
-- [**45**星][9d] [PHP] [gsoros/gtrader](https://github.com/gsoros/gtrader) a trading strategy trainer, back-tester and bot
- [**45**星][8m] [C] [groupgets/purethermal1-firmware](https://github.com/groupgets/purethermal1-firmware) Reference firmware for PureThermal 1 FLIR Lepton Dev Kit
-- [**45**星][2y] [PowerShell] [golem445/bunny_payloads](https://github.com/golem445/bunny_payloads) Bash Bunny fun!
+- [**45**星][1y] [Dockerfile] [gradiuscypher/grids](https://github.com/gradiuscypher/grids) My network monitoring solution and tools that go along with it.
+- [**45**星][2y] [PS] [golem445/bunny_payloads](https://github.com/golem445/bunny_payloads) Bash Bunny fun!
- [**45**星][2m] [Py] [gojek/dollhouse](https://github.com/gojek/dollhouse)
- [**45**星][2y] [C] [geosn0w/ios-10.1.1-project-0-exploit-fork](https://github.com/geosn0w/ios-10.1.1-project-0-exploit-fork) iOS 10.1.1 Project 0 Exploit Compatible with All arm64 devices for Jailbreak Development
-- [**45**星][2m] [Py] [gcmartinelli/entropy](https://github.com/gcmartinelli/entropy) Binary file entropy visualizer written in Python
+- [**45**星][3y] [C] [gentilkiwi/basic_rpc](https://github.com/gentilkiwi/basic_rpc) Samples about Microsoft RPC and native API calls in Windows C
- [**45**星][4y] [TeX] [gannimo/maldiv](https://github.com/gannimo/maldiv) Malware diversity
- [**45**星][2y] [Py] [g4lb1t/smoothcriminal](https://github.com/g4lb1t/smoothcriminal) SmoothCriminal:利用鼠标移动速度,检测沙箱
- [**45**星][2y] [Py] [fvrmatteo/dmnp](https://github.com/fvrmatteo/dmnp) Resources of the "Dissecting mobile native code packers. A case study." Zimperium's blogpost.
-- [**45**星][7y] [Perl] [fnord0/hurl](https://github.com/fnord0/hurl) hexadecimal & URL encoder + decoder
- [**45**星][1y] [c] [f0rb1dd3n/papers](https://github.com/f0rb1dd3n/papers) Some papers and talks that I have done
- [**45**星][3y] [Py] [evi1clay/coolpool](https://github.com/evi1clay/coolpool) 仓库已经废弃,新仓库地址
-- [**45**星][6m] [JS] [essandess/easylist-pac-privoxy](https://github.com/essandess/easylist-pac-privoxy) EasyList Tracker and Adblocks to Proxy Auto Configuration (PAC) File and Privoxy Actions and Filters
- [**45**星][4y] [Py] [equ1nox/srop-poc](https://github.com/equ1nox/srop-poc)
+- [**45**星][2d] [Py] [entynetproject/geospy](https://github.com/entynetproject/geospy) Geolocation Spy (GeoSpy) is an OSINT analysis and research tool, which allows people to track and execute intelligent social engineering attacks in real time. It was created with the aim of teaching the world how large Internet companies could obtain confidential information such as the status of sessions of their websites or services and contro…
- [**45**星][3y] [C] [enferex/asrepl](https://github.com/enferex/asrepl) asrepl: x86-64 assembly REPL
+- [**45**星][9m] [syst3ma/awesome-baseband-research](https://github.com/syst3ma/awesome-baseband-research) A curated list of awesome baseband research resources
- [**45**星][4y] [C++] [diocles/apt-transport-tor](https://github.com/diocles/apt-transport-tor) Tor support for apt
- [**45**星][6y] [Java] [devadvance/rootcloakplus](https://github.com/devadvance/rootcloakplus)
+- [**45**星][2y] [JS] [davidstutz/password-score](https://github.com/davidstutz/password-score) Password scoring library written in Javascript.
- [**45**星][8m] [Py] [databricks/mlflow](https://github.com/databricks/mlflow) Open source platform for the machine learning lifecycle
- [**45**星][6y] [JS] [cyberpython/wifiscanandmap](https://github.com/cyberpython/wifiscanandmap) A Linux Python application to create maps of 802.11 networks
- [**45**星][8m] [C] [cossacklabs/hermes-core](https://github.com/cossacklabs/hermes-core) Security framework for building multi-user end-to-end encrypted data storage and sharing/processing with zero leakage risks from storage and transport infrastructure.
+- [**45**星][2y] [codemaxx/binary-exploitation](https://github.com/codemaxx/binary-exploitation) Good to know, easy to forget information about binaries and their exploitation!
+- [**45**星][4y] [Py] [cdhigh/forwarder](https://github.com/cdhigh/forwarder) 简单的HTTP请求转发服务器,配合KIndleEar翻入墙内或绕过部分网站对GAE的IP地址的封锁。灵感来自
- [**45**星][7y] [Py] [carlosgprado/milf](https://github.com/carlosgprado/milf) IDA瑞士军刀
- [milf](https://github.com/carlosgprado/MILF/blob/master/milf.py) 辅助漏洞挖掘
- [**45**星][4y] [Go] [carloop/simulator-program](https://github.com/carloop/simulator-program) Software for the CAN bus simulator on the Rasperry Pi
- [**45**星][2y] [Go] [c-bata/systracer](https://github.com/c-bata/systracer) Linux/x86 系统调用追踪, Go语言实现
-- [**45**星][2m] [Rust] [brycx/checkpwn](https://github.com/brycx/checkpwn) Check Have I Been Pwned and see if it's time for you to change passwords.
-- [**45**星][23d] [Py] [bolunwang/backdoor](https://github.com/bolunwang/backdoor) Code implementation of the paper "Neural Cleanse: Identifying and Mitigating Backdoor Attacks in Neural Networks", at IEEE Security and Privacy 2019.
+- [**45**星][3m] [blackint3/awesome-debugging](https://github.com/blackint3/awesome-debugging) Why Debugging?(为什么要调试?)
+- [**45**星][9m] [Py] [binaryanalysisplatform/bap-tutorial](https://github.com/binaryanalysisplatform/bap-tutorial) The BAP tutorial
+- [**45**星][1m] [Py] [bbva/apicheck](https://github.com/bbva/apicheck) The DevSecOps toolset for REST APIs
- [**45**星][1y] [C] [bazad/xpc-string-leak](https://github.com/bazad/xpc-string-leak) CVE-2018-4248: Out-of-bounds read in libxpc during string serialization.
- [**45**星][1y] [C] [bazad/launchd-portrep](https://github.com/bazad/launchd-portrep) macOS 10.13.5 Mach端口替换漏洞, 可导致提权和SIP绕过(CVE-2018-4280)
- [**45**星][10m] [Java] [veracode-research/actuator-testbed](https://github.com/veracode-research/actuator-testbed) A vulnerable application exposing Spring Boot Actuators
+- [**45**星][27d] [Py] [anvilventures/dawgmon](https://github.com/anvilventures/dawgmon) dawg the hallway monitor - monitor operating system changes and analyze introduced attack surface when installing software
- [**45**星][2y] [Py] [anssi-fr/bits_parser](https://github.com/anssi-fr/bits_parser) Extract BITS jobs from QMGR queue and store them as CSV records
- [**45**星][9m] [anhkgg/awesome-windbg-extensions](https://github.com/anhkgg/awesome-windbg-extensions) awesome windbg extensions
-- [**45**星][12d] [Py] [andreafioraldi/cve_searchsploit](https://github.com/andreafioraldi/cve_searchsploit) Search an exploit in the local exploitdb database by its CVE
+- [**45**星][14d] [Py] [andreafioraldi/cve_searchsploit](https://github.com/andreafioraldi/cve_searchsploit) Search an exploit in the local exploitdb database by its CVE
+- [**45**星][1y] [C++] [alphaseclab/anti-debug](https://github.com/alphaseclab/anti-debug)
- [**45**星][4m] [Py] [aencode/elf_analysis](https://github.com/aencode/elf_analysis) Perform Static and dynamic analysis on 32 bit ELF binary, and automate the process of stack based overflow exploitation.
- [**45**星][2y] [Pascal] [0x48piraj/malwarex](https://github.com/0x48piraj/malwarex) Collection of killers !
-- [**44**星][15d] [CSS] [evilsocket/www.pwnagotchi.ai](https://github.com/evilsocket/www.pwnagotchi.ai) (⌐■_■) - pwnagotchi.ai
+- [**45**星][1y] [Py] [04x/instagramcracker](https://github.com/04x/instagramcracker) Full Speed Instagram Cracker
+- [**45**星][2y] [001spartan/csfm](https://github.com/001spartan/csfm) Cobalt Strike Field Manual - A quick reference for Windows commands that can be accessed in a beacon console.
- [**44**星][2y] [C++] [uxmal/nucleus](https://github.com/uxmal/nucleus) Clone of "Compiler-Agnostic Function Detection in Binaries" source code
-- [**44**星][19d] [Shell] [hak5/sharkjack-payloads](https://github.com/hak5/sharkjack-payloads) The Official Hak5 Shark Jack Payload Repository
+- [**44**星][5m] [TS] [igio90/hooah-trace](https://github.com/igio90/hooah-trace) Instructions tracing powered by frida
- [**44**星][4y] [Py] [enablesecurity/tftptheft](https://github.com/enablesecurity/tftptheft) TFTP Theft is a tool which allows one to quickly scan/bruteforce a tftp server for files and download them instantly
-- [**44**星][2y] [Go] [onplus/v2ray-sitedat](https://github.com/onplus/v2ray-sitedat)
+- [**44**星][5y] [ObjC] [project-imas/passcode-check](https://github.com/project-imas/passcode-check) iMAS pascode-check, set passcode config profiles and check for conformance
- [**44**星][2y] [PHP] [nkkollaw/reserved-subdomains](https://github.com/nkkollaw/reserved-subdomains) List of subdomains that could be candidates for reservation in multitenant app/ subdomain validator for multitenant apps
- [**44**星][2y] [Py] [twtrubiks/csrf-tutorial](https://github.com/twtrubiks/csrf-tutorial) Use Django To Introduce CSRF and Cookies , Session
-- [**44**星][28d] [appsecco/defcon-26-workshop-attacking-and-auditing-docker-containers](https://github.com/appsecco/defcon-26-workshop-attacking-and-auditing-docker-containers) DEF CON 26 Workshop - Attacking & Auditing Docker Containers Using Open Source
+- [**44**星][30d] [appsecco/defcon-26-workshop-attacking-and-auditing-docker-containers](https://github.com/appsecco/defcon-26-workshop-attacking-and-auditing-docker-containers) DEF CON 26 Workshop - Attacking & Auditing Docker Containers Using Open Source
+- [**44**星][3y] [shmilylty/nmap-reference-guide](https://github.com/shmilylty/Nmap-Reference-Guide) Nmap Reference Guide(Nmap参考指南)
+- [**44**星][2y] [C++] [newbee119/deceptive-document](https://github.com/NewBee119/Deceptive-document) 通过在U盘中伪装正常文件,欺骗用户点击,传播木马的一个demo程序~just for fun~
- [**44**星][3y] [JS] [bivainis/ng6-starter-sass](https://github.com/bivainis/NG6-starter-sass) An AngularJS Starter repo for Angular + ES6 + (Webpack or JSPM) by
-- [**44**星][1m] [C++] [125k/esp8266_wifi_captive_portal](https://github.com/125K/ESP8266_WiFi_Captive_Portal) WiFi captive portal for NodeMCU (ESP8266 Module) with DNS spoofing. It phishes the WiFi password.
- [**44**星][1y] [Py] [chiefychief/dlink_shell_poc](https://github.com/ChiefyChief/dlink_shell_poc) Dlink 615/815 shell PoC
- [**44**星][10m] [Py] [expliot_framework/expliot](https://gitlab.com/expliot_framework/expliot)
-- [**44**星][12m] [Py] [zev3n/shodan_so](https://github.com/zev3n/shodan_so) Search Assistant: Searching shodan via API.
- [**44**星][2y] [Py] [zedshaw/zadm4py](https://github.com/zedshaw/zadm4py) Zed's Awesome Debug Macros for Python
+- [**44**星][3y] [JS] [yinzhixin/scanner](https://github.com/yinzhixin/scanner) 网站漏洞扫描平台
- [**44**星][5y] [Py] [x0day/bannerscan](https://github.com/x0day/bannerscan)
-- [**44**星][28d] [C++] [wopss/renhook](https://github.com/wopss/renhook) An open-source x86 / x86-64 hooking library for Windows.
+- [**44**星][30d] [C++] [wopss/renhook](https://github.com/wopss/renhook) An open-source x86 / x86-64 hooking library for Windows.
+- [**44**星][3m] [C] [wongsyrone/transocks-wong](https://github.com/wongsyrone/transocks-wong) A redsocks-like transparent IPv4/IPv6 TCP-to-SOCKS5 redirector (for Linux only)
- [**44**星][2y] [Py] [wizh/rop-chainer](https://github.com/wizh/rop-chainer) static program analysis tool that generates return-oriented exploits for ELF binaries
-- [**44**星][3y] [C++] [vusec/dangsan](https://github.com/vusec/dangsan) dangsan:检测C/C++编写的程序是否有未释放的内存,防止悬挂指针
+- [**44**星][5y] [Lua] [wenjun1055/httpguard](https://github.com/wenjun1055/httpguard) prevent cc attack
- [**44**星][3y] [Shell] [vtky/resign](https://github.com/vtky/resign) XCode Project to resign .ipa files
- [**44**星][5y] [C] [vincentbernat/ssl-dos](https://github.com/vincentbernat/ssl-dos) Various tools related to SSL denial of service
-- [**44**星][3y] [vduddu/deepweblinks](https://github.com/vduddu/deepweblinks) A huge dump of deep web links
- [**44**星][3y] [Py] [tribalchicken/volatility-filevault2](https://github.com/tribalchicken/volatility-filevault2) Volatility plugin to extract FileVault 2 VMK's
-- [**44**星][5m] [Java] [tlamb96/kgb_messenger](https://github.com/tlamb96/kgb_messenger) An Android CTF practice challenge
+- [**44**星][2y] [C#] [tkyu/shadowsocks-csharp-mod](https://github.com/tkyu/shadowsocks-csharp-mod) Shadowsocks for Windows
- [**44**星][6m] [thomasthelen/ollydbg-scripts](https://github.com/thomasthelen/ollydbg-scripts) Unpacking scripts for Ollydbg.
- [**44**星][3y] [HTML] [theori-io/jscript9-typedarray](https://github.com/theori-io/jscript9-typedarray) Proof-of-Concept exploit for jscript9 bug (MS16-063)
-- [**44**星][2y] [C#] [testsecer/md5decrypt](https://github.com/testsecer/md5decrypt) MD5多接口解密工具(插件式)
- [**44**星][6m] [Py] [tengzhangchao/pyshell](https://github.com/tengzhangchao/pyshell) python backdoor (后门程序)
-- [**44**星][8d] [stamparm/blackbook](https://github.com/stamparm/blackbook) Blackbook of malware domains
+- [**44**星][2d] [stamparm/blackbook](https://github.com/stamparm/blackbook) Blackbook of malware domains
- [**44**星][8m] [C] [sslab-gatech/perf-fuzz](https://github.com/sslab-gatech/perf-fuzz)
-- [**44**星][6m] [C] [sqdwr/hidedriver](https://github.com/sqdwr/hidedriver) 之前那份是7600的,每次编译搞得好麻烦。更新一个VS2017可以直接编译的。
- [**44**星][3m] [JS] [sinakarvandi/windbg2ida](https://github.com/sinakarvandi/windbg2ida) 在IDA中显示Windbg调试的每个步骤
- [Windbg脚本](https://github.com/sinakarvandi/windbg2ida/blob/master/windbg2ida.js) JavaScript
- [IDA脚本](https://github.com/sinakarvandi/windbg2ida/blob/master/IDAScript.py)
- [**44**星][3y] [Shell] [shotokanzh/pa-th-zuzu](https://github.com/shotokanzh/pa-th-zuzu) Checks for PATH substitution vulnerabilities and logs the commands executed by the vulnerable executables
-- [**44**星][4m] [Shell] [shiva108/waes](https://github.com/shiva108/waes) CPH:SEC WAES: Web Auto Enum & Scanner - Auto enums website(s) and dumps files as result
- [**44**星][11m] [Py] [serain/kubelet-anon-rce](https://github.com/serain/kubelet-anon-rce) Executes commands in a container on a kubelet endpoint that allows anonymous authentication (default)
- [**44**星][2y] [JS] [sensepost/wsproxy](https://github.com/sensepost/wsproxy) A websocket proxy
- [**44**星][5y] [securitytube/pcap2xml](https://github.com/securitytube/pcap2xml) Convert 802.11 Packet Traces to XML and SQLITE Format
+- [**44**星][2m] [Shell] [security-onion-solutions/securityonion-saltstack](https://github.com/security-onion-solutions/securityonion-saltstack)
- [**44**星][4y] [Py] [scy-phy/scapy-cip-enip](https://github.com/scy-phy/scapy-cip-enip) EtherNet/IP+CIP dissector for Scapy
-- [**44**星][24d] [Py] [scwuaptx/peda](https://github.com/scwuaptx/peda) PEDA - Python Exploit Development Assistance for GDB
+- [**44**星][26d] [Py] [scwuaptx/peda](https://github.com/scwuaptx/peda) PEDA - Python Exploit Development Assistance for GDB
+- [**44**星][19d] [Py] [sanix-darker/brute-force-login](https://github.com/sanix-darker/brute-force-login) Brute Force Login in a web site with Python, hack accounts on any website with a good dictionary of words
- [**44**星][4y] [C] [samdmarshall/machodiff](https://github.com/samdmarshall/machodiff) mach-o diffing tool
- [**44**星][5y] [C] [rpaleari/qtrace](https://github.com/rpaleari/qtrace) QTrace, a "zero knowledge" system call tracer
-- [**44**星][5m] [Ruby] [rootup/autosploit](https://github.com/rootup/autosploit) Autosploit = Automating Metasploit Modules.
- [**44**星][6y] [IDL] [riverloopsec/apimote](https://github.com/riverloopsec/apimote) ApiMote IEEE 802.15.4/ZigBee Sniffing Hardware
-- [**44**星][10d] [reddelexc/hackerone-reports](https://github.com/reddelexc/hackerone-reports) Top disclosed reports from HackerOne
-- [**44**星][4y] [Assembly] [raspberrypi/rpi-sense](https://github.com/raspberrypi/rpi-sense) Sense HAT firmware and driver
-- [**44**星][2y] [CSS] [pure-l0g1c/apex](https://github.com/pure-l0g1c/apex) Using Social Engineering To Obtain WiFi Passwords
+- [**44**星][1y] [puuoi/ss-r-4in1](https://github.com/puuoi/ss-r-4in1) 由于秋水逸冰网站国内无法访问,所以为有需要的朋友复制发布到github
- [**44**星][4y] [PHP] [pupi1985/marfil](https://github.com/pupi1985/marfil) Marfil is an extension of the Aircrack-ng suite, used to assess WiFi network security. It allows to split the work of performing long running dictionary attacks among many computers.
+- [**44**星][3y] [C++] [pstolarz/dumpext](https://github.com/pstolarz/dumpext) WinDbg debugger extension library providing various tools to analyse, dump and fix (restore) Microsoft Portable Executable files for both 32 (PE) and 64-bit (PE+) platforms.
- [**44**星][10m] [Java] [portswigger/json-web-token-attacker](https://github.com/portswigger/json-web-token-attacker)
-- [**44**星][9m] [JS] [phantom0301/pteye](https://github.com/phantom0301/pteye) Phantom eye——A passive business logic vulnerability auditing tool
+- [**44**星][3y] [Perl] [philsmd/itunes_backup2hashcat](https://github.com/philsmd/itunes_backup2hashcat) Extract the information needed from the Manifest.plist files to convert it to hashes compatible with hashcat
- [**44**星][1y] [C] [petabi/sniffles](https://github.com/petabi/sniffles) Packet Capture Generator for IDS and Regular Expression Evaluation
- [**44**星][1y] [Ruby] [pentestgeek/burpcommander](https://github.com/pentestgeek/burpcommander) Ruby command-line interface to Burp Suite's REST API
- [**44**星][3y] [HTML] [pcchou/ctf-writeups](https://github.com/pcchou/ctf-writeups) 練習解題跟練習寫 writeups 的地方(?
+- [**44**星][4m] [Java] [opencryptoproject/jcmathlib](https://github.com/opencryptoproject/jcmathlib) Implementation of mathematical operations with big numbers and elliptic curve points for smart cards with JavaCard platform.
- [**44**星][1y] [Py] [olipratt/swagger-conformance](https://github.com/olipratt/swagger-conformance) Python based tool for testing whether your API conforms to its Swagger schema
+- [**44**星][7y] [JS] [oguzy/ovizart](https://github.com/oguzy/ovizart)
- [**44**星][2y] [Py] [nullbites/snakeeater](https://github.com/nullbites/snakeeater) Python implementation of the reflective SO injection technique
- [**44**星][1y] [C] [ntraiseharderror/anti-delete](https://github.com/ntraiseharderror/anti-delete) Protects deletion of files with a specified extension using a kernel-mode driver.
-- [**44**星][11m] [Py] [nowsecure/r2lldb](https://github.com/nowsecure/r2lldb) radare2-lldb integration
+- [**44**星][11m] [Lua] [nozominetworks/tricotools](https://github.com/nozominetworks/tricotools) Triconex TriStation utilities and tools
+- [**44**星][2y] [Go] [nicholasjackson/cnitch](https://github.com/nicholasjackson/cnitch) Container Snitch checks running processes under the Docker Engine and alerts if any are found to be running as root
- [**44**星][2y] [C#] [mythicmaniac/keyboard-minigames](https://github.com/mythicmaniac/keyboard-minigames) A snake game for the corsair RGB keyboards
+- [**44**星][3y] [Shell] [mueller-ma/block-ads-via-dns](https://github.com/mueller-ma/block-ads-via-dns) Block ads and malware via local DNS server
- [**44**星][4m] [HTML] [mrluanma/shadowsocks-websocket-python](https://github.com/mrluanma/shadowsocks-websocket-python) shadowsocks over WebSocket, support Heroku.
- [**44**星][10m] [Py] [misp/misp-stix-converter](https://github.com/misp/misp-stix-converter) A utility repo to assist with converting between MISP and STIX formats
- [**44**星][2y] [Py] [milo2012/nmap2nessus](https://github.com/milo2012/nmap2nessus)
-- [**44**星][5m] [PowerShell] [miladmsft/threathunt](https://github.com/miladmsft/threathunt) ThreatHunt is a PowerShell repository that allows you to train your threat hunting skills.
- [**44**星][7y] [Shell] [metricsgrimoire/cmetrics](https://github.com/metricsgrimoire/cmetrics) CMetrics measures size and complexity for C files
-- [**44**星][11m] [PowerShell] [mattifestation/bcd](https://github.com/mattifestation/bcd) BCD is a module to interact with boot configuration data (BCD) either locally or remotely using the ROOT/WMI:Bcd* WMI classes. The functionality of the functions in this module mirror that of bcdedit.exe.
-- [**44**星][3m] [C] [linaro-swg/optee_examples](https://github.com/linaro-swg/optee_examples) OP-TEE Sample Applications
+- [**44**星][11m] [PS] [mattifestation/bcd](https://github.com/mattifestation/bcd) BCD is a module to interact with boot configuration data (BCD) either locally or remotely using the ROOT/WMI:Bcd* WMI classes. The functionality of the functions in this module mirror that of bcdedit.exe.
- [**44**星][1m] [TSQL] [leveryd/vulndocker](https://github.com/leveryd/vulndocker) 漏洞靶场平台
-- [**44**星][3y] [PowerShell] [lazywinadmin/winformps](https://github.com/lazywinadmin/winformps) PowerShell functions for Windows Forms controls
+- [**44**星][3y] [PS] [lazywinadmin/winformps](https://github.com/lazywinadmin/winformps) PowerShell functions for Windows Forms controls
- [**44**星][4m] [Py] [laincode/shodan-seeker](https://github.com/laincode/shodan-seeker) Command-line tool using Shodan API. Generates and downloads CSV results, diffing of historic scanning results, alerts and monitoring of specific ports/IPs, etc.
-- [**44**星][3m] [Java] [kxcode/jndi-exploit-bypass-demo](https://github.com/kxcode/jndi-exploit-bypass-demo) Demo code for post
+- [**44**星][3y] [C] [kudelskisecurity/sgx-reencrypt](https://github.com/kudelskisecurity/sgx-reencrypt) PoC of an SGX enclave performing symmetric reencryption
- [**44**星][2y] [Py] [kudelskisecurity/eddsa-fault-attack](https://github.com/kudelskisecurity/eddsa-fault-attack) Fault attack agaisnt EdDSA demonstrated on an Arduino Nano board, allowing for partial key recovery and fake signatures.
-- [**44**星][8d] [TSQL] [kacos2000/windowstimeline](https://github.com/kacos2000/windowstimeline) SQLite query & Powershell scripts to parse the Windows 10 (v1803+) ActivitiesCache.db
- [**44**星][6m] [C] [junxzm1990/pomp](https://github.com/junxzm1990/pomp) 在 Linux 系统上开发 POMP 系统,分析崩溃后的 artifacts
- [**44**星][5m] [C#] [jnqpblc/sharptask](https://github.com/jnqpblc/sharptask) SharpTask is a simple code set to interact with the Task Scheduler service api and is compatible with Cobalt Strike.
-- [**44**星][28d] [Java] [jenkinsci/zap-plugin](https://github.com/jenkinsci/zap-plugin) The OWASP ZAP Jenkins Plugin extends the functionality of the ZAP security tool into a CI Environment.
+- [**44**星][30d] [Java] [jenkinsci/zap-plugin](https://github.com/jenkinsci/zap-plugin) The OWASP ZAP Jenkins Plugin extends the functionality of the ZAP security tool into a CI Environment.
- [**44**星][3y] [Py] [jbremer/pyasm2](https://github.com/jbremer/pyasm2) An easy and powerful assembler engine in python.
- [**44**星][2y] [Ruby] [j-0-t/staekka](https://github.com/j-0-t/staekka) Stækka Metasploit - Extenting Metasploit
-- [**44**星][2m] [Rust] [ironcorelabs/recrypt-rs](https://github.com/ironcorelabs/recrypt-rs) A set of cryptographic primitives for building a multi-hop Proxy Re-encryption scheme, known as Transform Encryption.
+- [**44**星][7d] [Rust] [ironcorelabs/recrypt-rs](https://github.com/ironcorelabs/recrypt-rs) A set of cryptographic primitives for building a multi-hop Proxy Re-encryption scheme, known as Transform Encryption.
- [**44**星][8m] [C#] [im0qianqian/codeforceseduhacking](https://github.com/im0qianqian/codeforceseduhacking)
- [**44**星][2y] [Py] [illusivenetworks-labs/historicprocesstree](https://github.com/illusivenetworks-labs/historicprocesstree) An Incident Response tool that visualizes historic process execution evidence (based on Event ID 4688 - Process Creation Event) in a tree view.
- [**44**星][2y] [Py] [ikoz/jdwp-lib-injector](https://github.com/ikoz/jdwp-lib-injector)
- [**44**星][5m] [Jupyter Notebook] [httparchive/bigquery](https://github.com/httparchive/bigquery) BigQuery import and processing pipelines
-- [**44**星][6m] [Go] [hectane/go-acl](https://github.com/hectane/go-acl) Go library for manipulating ACLs on Windows
-- [**44**星][3y] [PowerShell] [harmj0y/encryptedstore](https://github.com/harmj0y/encryptedstore) Offensive Data Storage
+- [**44**星][3y] [PS] [harmj0y/encryptedstore](https://github.com/harmj0y/encryptedstore) Offensive Data Storage
+- [**44**星][19d] [Perl] [hackerdom/checksystem](https://github.com/hackerdom/checksystem) Checksystem for attack-defense CTF
- [**44**星][2y] [Py] [grayddq/pubilcassetinfo](https://github.com/grayddq/pubilcassetinfo) 以甲方安全人员的视角,尽可能收集发现企业的域名和服务器公网IP资产
-- [**44**星][2y] [grayddq/hids](https://github.com/grayddq/hids) HIDS全称是Host-based Intrusion Detection System,即基于主机型入侵检测系统,HIDS运行依赖这样一个原理:一个成功的入侵者一般而言都会留下他们入侵的痕迹。本人更倾向于通过记录主机的重要信息变更来发现入侵者。 本项目由两部分组成:一部分osquery、另一部分监控脚本来补充osquery规则的不足; 本文是第一部分osquery规则部分,实现绝大部分主机信息监控。
- [**44**星][8m] [Py] [githacktools/ftpbruter](https://github.com/githacktools/ftpbruter) A FTP Server brute forcing tool written in Python 3
- [**44**星][2y] [Haskell] [giovanifss/dumb](https://github.com/giovanifss/dumb) Dumain Bruteforcer - a fast and flexible domain bruteforcer
-- [**44**星][3y] [C] [gentilkiwi/basic_rpc](https://github.com/gentilkiwi/basic_rpc) Samples about Microsoft RPC and native API calls in Windows C
- [**44**星][4m] [Lua] [fsiamp/rhapis](https://github.com/fsiamp/rhapis) rhapis:网络入侵检测系统(IDS)模拟器。用户可在模拟环境中执行任意 IDS 操作
+- [**44**星][7y] [Perl] [fnord0/hurl](https://github.com/fnord0/hurl) hexadecimal & URL encoder + decoder
- [**44**星][6m] [Py] [firmadyne/scraper](https://github.com/firmadyne/scraper) Firmware scraper
- [**44**星][2y] [C] [fail0verflow/switch-u-boot](https://github.com/fail0verflow/switch-u-boot) "Das U-Boot" Source Tree for the Switch
+- [**44**星][2y] [Py] [erpscanteam/cve-2018-2380](https://github.com/erpscanteam/cve-2018-2380) PoC of Remote Command Execution via Log injection on SAP NetWeaver AS JAVA CRM
+- [**44**星][2d] [Py] [entynetproject/arissploit](https://github.com/entynetproject/arissploit) Arissploit Framework is a simple framework designed to master penetration testing tools. Arissploit Framework offers simple structure, basic CLI, and useful features for learning and developing penetration testing tools.
- [**44**星][1y] [C#] [enkomio/rundotnetdll](https://github.com/enkomio/rundotnetdll) A simple utility to list all methods of a given .NET Assembly and to invoke them
-- [**44**星][9m] [syst3ma/awesome-baseband-research](https://github.com/syst3ma/awesome-baseband-research) A curated list of awesome baseband research resources
+- [**44**星][1y] [Py] [ecx86/shellcode_encoder](https://github.com/ecx86/shellcode_encoder) x64 printable shellcode encoder
- [**44**星][10m] [Go] [dsopas/h1-search](https://github.com/dsopas/h1-search) Tool that will request the public disclosures on a specific HackerOne program and show them in a localhost webserver.
+- [**44**星][7m] [Ruby] [dev-sec/ssl-baseline](https://github.com/dev-sec/ssl-baseline) DevSec SSL/TLS Baseline - InSpec Profile
- [**44**星][2y] [Py] [depthsecurity/haveibeenharvested](https://github.com/depthsecurity/haveibeenharvested) Automated HaveIbeenPwned lookups using theharvester results
- [**44**星][6m] [Erlang] [darkkey/erlamsa](https://github.com/darkkey/erlamsa) Erlang port of famous radamsa fuzzzer.
- [**44**星][4y] [Py] [danse-macabre/ida-efitools](https://github.com/danse-macabre/ida-efitools) 辅助逆向ELF文件
- [**44**星][2y] [Py] [coolervoid/vision2](https://github.com/coolervoid/vision2) Nmap's XML result parse and NVD's CPE correlation to search CVE.
+- [**44**星][6m] [Py] [contrast-security-oss/djangoat](https://github.com/contrast-security-oss/djangoat) Python and Django implementation of the OWASP RailsGoat project
- [**44**星][1y] [C++] [coltonon/reghookex](https://github.com/coltonon/reghookex) External mid-function hooking method to retrieve register data
-- [**44**星][2y] [codemaxx/binary-exploitation](https://github.com/codemaxx/binary-exploitation) Good to know, easy to forget information about binaries and their exploitation!
- [**44**星][11m] [Scala] [ccied/ugforum-analysis](https://github.com/ccied/ugforum-analysis) Tools for Automated Analysis of Cybercriminal Markets
- [**44**星][1y] [bugbountyresources/resources](https://github.com/bugbountyresources/resources) A Storehouse of resources related to Bug Bounty Hunting collected from different sources. Watch and Star this repo for all latest guides, tools, methodology, platforms tips, and tricks curated by us.
- [**44**星][1y] [JS] [brangerbriz/wifi-data-safari](https://github.com/brangerbriz/wifi-data-safari) WiFi Data Safari Workshop
-- [**44**星][3m] [blackint3/awesome-debugging](https://github.com/blackint3/awesome-debugging) Why Debugging?(为什么要调试?)
- [**44**星][6m] [Py] [bitthebyte/bitblinder](https://github.com/bitthebyte/bitblinder) Burp extension helps in finding blind xss vulnerabilities
-- [**44**星][1m] [Py] [bbva/apicheck](https://github.com/bbva/apicheck) The DevSecOps toolset for REST APIs
-- [**44**星][2y] [PowerShell] [attackdebris/babel-sf](https://github.com/attackdebris/babel-sf) Babel Scripting Framework
+- [**44**星][4m] [Py] [bieberg0n/bjdns](https://github.com/bieberg0n/bjdns) A dns server which can protect yourself against DNS poisoning in China. / 抗污染 带缓存的dns服务器
+- [**44**星][1m] [PS] [azure/health-data-and-ai-blueprint](https://github.com/azure/health-data-and-ai-blueprint) Azure Security and Compliance Blueprint - HIPAA/HITRUST Health Data and AI - deployment, and demo that Predicts the Length of Stay in Hospitals
+- [**44**星][2y] [PS] [attackdebris/babel-sf](https://github.com/attackdebris/babel-sf) Babel Scripting Framework
- [**44**星][11m] [Go] [armanshan12/rkms](https://github.com/armanshan12/rkms) RKMS is a highly available key management service, built on top of AWS's KMS.
-- [**44**星][25d] [Py] [anvilventures/dawgmon](https://github.com/anvilventures/dawgmon) dawg the hallway monitor - monitor operating system changes and analyze introduced attack surface when installing software
+- [**44**星][11m] [C#] [andychiare/netcore2-reverse-proxy](https://github.com/andychiare/netcore2-reverse-proxy) An example of how to implement a reverse proxy in .NET Core 2
- [**44**星][5y] [Py] [andrew-morris/kippo_detect](https://github.com/andrew-morris/kippo_detect) Quick proof of concept to detect a Kippo SSH honeypot instance externally
- [**44**星][1y] [Py] [ambionics/prestashop-exploits](https://github.com/ambionics/prestashop-exploits) Collection of exploits/POC for PrestaShop cookie vulnerabilities (CVE-2018-13784)
- [**44**星][2y] [C#] [amarkulo/openpasswordfilter](https://github.com/amarkulo/openpasswordfilter) An open source custom password filter DLL and userspace service to better protect / control Active Directory domain passwords.
-- [**44**星][1y] [C++] [alphaseclab/anti-debug](https://github.com/alphaseclab/anti-debug)
- [**44**星][3y] [Py] [allyshka/vhostbrute](https://github.com/allyshka/vhostbrute) Virtual host bruteforcer
- [**44**星][1y] [akayn/vault](https://github.com/akayn/resources) Old Code.... and a never-ending reading list.
- [**44**星][3y] [Py] [aikinogard/5th_place_solution_facebook_check_ins](https://github.com/aikinogard/5th_place_solution_facebook_check_ins) My solution rank 5th/1212 in Facebook check ins prediction competition at Kaggle
- [**44**星][2y] [C] [aerosoul94/dynlib](https://github.com/aerosoul94/dynlib) 辅助PS4用户模式ELF逆向
- [**44**星][2m] [HTML] [advanced-threat-research/iocs](https://github.com/advanced-threat-research/iocs) Repository containing IOCs, CSV and MISP JSON from our blogs
-- [**44**星][5m] [HTML] [adrecon/adrecon](https://github.com/adrecon/adrecon) ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment.
+- [**44**星][6m] [HTML] [adrecon/adrecon](https://github.com/adrecon/adrecon) ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment.
+- [**44**星][9m] [JS] [adguardteam/stealthmode](https://github.com/adguardteam/stealthmode) a browser extension to stop all kinds of online trackers from receiving any information about you and your actions on the Internet
- [**44**星][2y] [Py] [649/memfixed-mitigation-tool](https://github.com/649/memfixed-mitigation-tool) DDoS mitigation tool for sending flush or shutdown commands to vulnerable Memcached servers obtained using Shodan API
+- [**44**星][1y] [Py] [649/apache-struts-shodan-exploit](https://github.com/649/apache-struts-shodan-exploit) This tool takes advantage of CVE-2018-11776 and Shodan to perform mass exploitation of verified and vulnerable Apache Struts servers.
- [**44**星][2y] [Py] [5alt/emu](https://github.com/5alt/emu) code emulator base on unicorn engine
-- [**44**星][2y] [PowerShell] [3gstudent/windows-user-clone](https://github.com/3gstudent/windows-user-clone) Create a hidden account
-- [**44**星][2y] [PowerShell] [3gstudent/dump-clear-password-after-kb2871997-installed](https://github.com/3gstudent/dump-clear-password-after-kb2871997-installed)
-- [**44**星][2y] [001spartan/csfm](https://github.com/001spartan/csfm) Cobalt Strike Field Manual - A quick reference for Windows commands that can be accessed in a beacon console.
+- [**44**星][1y] [PHP] [4k-developer/4k-botnet](https://github.com/4k-developer/4k-botnet) A simple and easy to use JS Botnet
+- [**44**星][2y] [PS] [3gstudent/windows-user-clone](https://github.com/3gstudent/windows-user-clone) Create a hidden account
+- [**44**星][2y] [PS] [3gstudent/dump-clear-password-after-kb2871997-installed](https://github.com/3gstudent/dump-clear-password-after-kb2871997-installed)
+- [**44**星][8m] [Py] [0x4d31/honeyku](https://github.com/0x4d31/honeyku) A Heroku-based web honeypot that can be used to create and monitor fake HTTP endpoints (i.e. honeytokens).
+- [**43**星][1y] [C++] [grcasanova/badusb](https://github.com/grcasanova/badusb) Personal implementation of the BadUSB exploit with an Atmel 8-bit AVR ATTiny85 acting as a HID keyboard
+- [**43**星][7y] [Shell] [jseidl/torblock](https://github.com/jseidl/torblock) TORBlock is a BASH script to automatically download the list of TOR exit-nodes and add them to your IPTables ruleset.
- [**43**星][8y] [C] [hellman/shtest](https://github.com/hellman/shtest) Simple shellcode testing tool.
+- [**43**星][7m] [Py] [s0md3v/locky](https://github.com/s0md3v/locky) Locky generates "really" strong yet easy to remember passwords.
+- [**43**星][2d] [Py] [rocky/python-decompile3](https://github.com/rocky/python-decompile3) Python decompiler for 3.7+. Stripped down from uncompyle6 so we can refactor and fix up some long-standing problems
- [**43**星][3y] [Go] [madeye/obfs4-tunnel](https://github.com/madeye/obfs4-tunnel) obfs4 tunnel
-- [**43**星][28d] [C] [timwr/cve-2019-2215](https://github.com/timwr/cve-2019-2215)
+- [**43**星][2m] [JS] [pwnlandia/mhn-splunk](https://github.com/pwnlandia/mhn-splunk) Modern Honey Network App for Splunk
- [**43**星][2y] [Py] [warner/python-spake2](https://github.com/warner/python-spake2) pure-python implementation of the SPAKE2 Password-Authenticated Key Exchange algorithm
+- [**43**星][9m] [PS] [nsacyber/http-connectivity-tester](https://github.com/nsacyber/http-connectivity-tester) Aids in discovering HTTP and HTTPS connectivity issues. #nsacyber
- [**43**星][2y] [C] [p0cl4bs/shellcodes](https://github.com/p0cl4bs/shellcodes)
- [**43**星][3y] [Py] [tylerha97/findevil](https://github.com/tylerha97/findevil) Volatility plugin to find evil
+- [**43**星][10m] [Shell] [thelinuxchoice/phurious](https://github.com/thelinuxchoice/phurious) Phishing any website to delivery Windows Reverse Shell payload through DATA URI
- [**43**星][6m] [YARA] [decalage2/balbuzard](https://github.com/decalage2/balbuzard) Balbuzard is a package of malware analysis tools in python to extract patterns of interest from suspicious files (IP addresses, domain names, known file headers, interesting strings, etc). It can also crack malware obfuscation such as XOR, ROL, etc by bruteforcing and checking for those patterns.
-- [**43**星][7m] [Py] [jmagnusson/bgtunnel](https://github.com/jmagnusson/bgtunnel) Initiate SSH tunnels in the background in python
-- [**43**星][3y] [shmilylty/nmap-reference-guide](https://github.com/shmilylty/Nmap-Reference-Guide) Nmap Reference Guide(Nmap参考指南)
+- [**43**星][8m] [Py] [jmagnusson/bgtunnel](https://github.com/jmagnusson/bgtunnel) Initiate SSH tunnels in the background in python
- [**43**星][1y] [C++] [johnsonjason/rvdbg](https://github.com/johnsonjason/RVDbg) RVDbg is a debugger/exception handler for Windows processes and has the capability to circumvent anti-debugging techniques. (Cleaner, documented code base being worked on in: core branch)
- [**43**星][3y] [Jupyter Notebook] [rmax/scrapydo](https://github.com/rmax/scrapydo) Crochet-based blocking API for Scrapy.
- [**43**星][4y] [JS] [praetorian-code/hashcatjs](https://github.com/praetorian-code/hashcatJS) An implementation of the hashcat rules engine in javascript
-- [**43**星][4y] [JS] [nvisium/grails-nv](https://github.com/nVisium/grails-nV) Vulnerable Grails application
+- [**43**星][5y] [JS] [nvisium/grails-nv](https://github.com/nVisium/grails-nV) Vulnerable Grails application
- [**43**星][2y] [Py] [secarmalabs/dns-parallel-prober](https://github.com/SecarmaLabs/dns-parallel-prober) PoC for an adaptive parallelised DNS prober
- [**43**星][6y] [C++] [zer0mem/showmeyourgongfu](https://github.com/zer0mem/showmeyourgongfu) OpenSrc projects; common multiprojects headers store to ./Common/*category*/
- [**43**星][2y] [C#] [zacbrown/hiddentreasure-etw-demo](https://github.com/zacbrown/hiddentreasure-etw-demo) 在内存取证中,使用 ETW(Windows事件追踪) 挖掘宝藏的新方式
-- [**43**星][3y] [JS] [yinzhixin/scanner](https://github.com/yinzhixin/scanner) 网站漏洞扫描平台
- [**43**星][5y] [Py] [yelp/mycroft](https://github.com/yelp/mycroft)
- [**43**星][4y] [yeahwu/google-ip-range](https://github.com/yeahwu/google-ip-range) 一个超大的 Google 全球 IP 扫描范围库
- [**43**星][3y] [Py] [xyntax/drystan](https://github.com/xyntax/drystan) Automated information gathering tool for pentest
- [**43**星][11m] [Go] [xpn/blockchainc2](https://github.com/xpn/blockchainc2) A POC C2 server and agent to explore just if/how the Ethereum blockchain can be used for C2
- [**43**星][4y] [Py] [xme/mime2vt](https://github.com/xme/mime2vt) Unpack MIME attachments from a file and check them against virustotal.com
- [**43**星][2y] [xazlsec/pentest-project-lists](https://github.com/xazlsec/pentest-project-lists) 由信安之路团队成员收集整理的与渗透测试相关的 Github 项目地址,如果你由更好的项目请将项目地址发送到:myh0st@foxmail.com
-- [**43**星][24d] [C] [wuseman/tg799vac-xtreme-17.2-mint](https://github.com/wuseman/tg799vac-xtreme-17.2-mint) My personal unique wiki for hacking the router firmware used by (Telia)TG799vac Xtream v17.2-MINT delivered from Technicolor
+- [**43**星][7m] [YARA] [x64dbg/yarasigs](https://github.com/x64dbg/yarasigs) Various Yara signatures (possibly to be included in a release later).
- [**43**星][2y] [Py] [williballenthin/python-ntfs](https://github.com/williballenthin/python-ntfs) Open source Python library for NTFS analysis
- [**43**星][1m] [Rust] [whitfin/s3-meta](https://github.com/whitfin/s3-meta) Gather metadata about your S3 buckets
+- [**43**星][2y] [PHP] [whitewinterwolf/wwwolf-php-webshell](https://github.com/whitewinterwolf/wwwolf-php-webshell) WhiteWinterWolf's PHP web shell
- [**43**星][2y] [Shell] [wh1t3rh1n0/pentest-scripts](https://github.com/wh1t3rh1n0/pentest-scripts) Miscellaneous scripts for pentesting
-- [**43**星][13d] [C] [wallarm/libdetection](https://github.com/wallarm/libdetection) Signature-free approach library to detect injection and commanding attacks
-- [**43**星][4m] [C] [w1nds/dll2shellcode](https://github.com/w1nds/dll2shellcode) dll转shellcode工具
-- [**43**星][2m] [Jupyter Notebook] [urcuqui/whitehat](https://github.com/urcuqui/whitehat) Information about my experiences in ethical hacking
+- [**43**星][15d] [C] [wallarm/libdetection](https://github.com/wallarm/libdetection) Signature-free approach library to detect injection and commanding attacks
+- [**43**星][5m] [C] [w1nds/dll2shellcode](https://github.com/w1nds/dll2shellcode) dll转shellcode工具
+- [**43**星][4m] [C#] [userr00t/universalunityhooks](https://github.com/userr00t/universalunityhooks) A framework designed to hook into and modify methods in unity games via dlls
+- [**43**星][3m] [Jupyter Notebook] [urcuqui/whitehat](https://github.com/urcuqui/whitehat) Information about my experiences in ethical hacking
- [**43**星][2y] [Py] [unkl4b/gitbackdorizer](https://github.com/unkl4b/gitbackdorizer) GitBackdorizer (bad name, I know!) Is a proof of concept from Ulisses Castro's talk - 50 ton of backdoors (
- [**43**星][2y] [C++] [technikempire/httpfilteringengine](https://github.com/technikempire/httpfilteringengine) Transparent filtering TLS proxy.
+- [**43**星][2m] [Py] [teal33t/poopak](https://github.com/teal33t/poopak) POOPAK - TOR Hidden Service Crawler
- [**43**星][8m] [tea-deliverers/ctf-writeups](https://github.com/tea-deliverers/ctf-writeups)
- [**43**星][1y] [tbgsecurity/weaponize_splunk](https://github.com/tbgsecurity/weaponize_splunk) Weaponizing Splunk Presentation including Splunk Apps for penetration testing.
- [**43**星][4y] [t3kn1cs/infosec-rss-feeds](https://github.com/t3kn1cs/infosec-rss-feeds) Information Security RSS Feeds OMPL format
@@ -12636,26 +13494,22 @@ networking routines
- [**43**星][2y] [Shell] [stayliv3/embedded-device-lab](https://github.com/stayliv3/embedded-device-lab) embedded-device-lab是一个利用qemu模拟真实世界中物联网漏洞的测试环境。由于物联网架构的特殊性,调试分析漏洞通常需要使用qemu模拟执行不同架构的可执行文件。而各种搭建环境,交叉编译是一件费事费力,令人忧伤的工作。 embedded-device-lab利用docker-compose,将各种漏洞调试环境一键化。简单使用两条命令,就可以直接使用gdb或者IDA动态分析相关漏洞。
- [**43**星][8m] [C] [souhailhammou/drivers](https://github.com/souhailhammou/drivers) Windows Drivers
- [**43**星][6y] [Py] [sketchymoose/totalrecall](https://github.com/sketchymoose/totalrecall) Based on the Volatility framework, this script will run various plugins as well as create a timeline, or use YARA/ClamAV/VirusTotal to find badness.
-- [**43**星][13d] [C] [simonwunderlich/fft_eval](https://github.com/simonwunderlich/fft_eval) FFT evaluation
+- [**43**星][15d] [C] [simonwunderlich/fft_eval](https://github.com/simonwunderlich/fft_eval) FFT evaluation
- [**43**星][2y] [C] [shipcod3/irc-bot-hunters](https://github.com/shipcod3/irc-bot-hunters) a collection of Metasploit PoC exploits for IRC Botnets that allows RCE
- [**43**星][4y] [Py] [sh1nu11bi/routerhunter-2.0](https://github.com/sh1nu11bi/routerhunter-2.0) Testing vulnerabilities in devices and routers connected to the Internet.
-- [**43**星][4y] [Py] [secwiki/scaing-backdoor](https://github.com/secwiki/scaing-backdoor) 新一代Webshell扫描工具
-- [**43**星][2m] [Shell] [security-onion-solutions/securityonion-saltstack](https://github.com/security-onion-solutions/securityonion-saltstack)
+- [**43**星][4y] [C++] [sekoialab/binaryinjectionmitigation](https://github.com/sekoialab/binaryinjectionmitigation) Two tools used during our analysis of the Microsoft binary injection mitigation implemented in Edge TH2.
- [**43**星][2y] [Py] [secdec/xssmap](https://github.com/secdec/xssmap) Intelligent XSS detection tool that uses human techniques for looking for reflected cross-site scripting (XSS) vulnerabilities
- [**43**星][2y] [Py] [savio-code/hexorbase](https://github.com/savio-code/hexorbase) Automatically exported from code.google.com/p/hexorbase
-- [**43**星][17d] [Py] [sanix-darker/brute-force-login](https://github.com/sanix-darker/brute-force-login) Brute Force Login in a web site with Python, hack accounts on any website with a good dictionary of words
+- [**43**星][2y] [Py] [robertbaruch/polychip](https://github.com/robertbaruch/polychip) Python app to extract a netlist of NMOS transistors from an Inkscape diagram.
- [**43**星][10m] [Makefile] [revng/orchestra](https://github.com/revng/orchestra) Helper repository to easily build all the rev.ng components
- [**43**星][2y] [C] [rbaron/fitless](https://github.com/rbaron/fitless) A collection of toy firmwares for the ID115 fitness tracker
- [**43**星][5y] [JS] [rapid7/dllhijackauditkit](https://github.com/rapid7/dllhijackauditkit) This toolkit detects applications vulnerable to DLL hijacking (released in 2010)
- [**43**星][3y] [Py] [ramadhanamizudin/python-icap-yara](https://github.com/ramadhanamizudin/python-icap-yara) An ICAP Server with yara scanner for URL and content.
-- [**43**星][3y] [Perl] [philsmd/itunes_backup2hashcat](https://github.com/philsmd/itunes_backup2hashcat) Extract the information needed from the Manifest.plist files to convert it to hashes compatible with hashcat
- [**43**星][1y] [Shell] [philcryer/wpa2own](https://github.com/philcryer/wpa2own) Use hashcat to crack WPA2 PSK (Pre-Shared Key) passwords!
- [**43**星][8y] [pentestmonkey/timing-attack-checker](https://github.com/pentestmonkey/timing-attack-checker) Tool to help identify timing attacks
- [**43**星][3m] [Py] [partoftheworld/ghidrapy_functionstringassociate](https://github.com/partoftheworld/ghidrapy_functionstringassociate) It does the same thing as plugin FunctionStringAssociate for IDA, Now the script just works, in the future it is planned to increase the speed of work and bring it closer to the speed of the plugin.
-- [**43**星][4m] [C] [operationnt414c/shellsecbat](https://github.com/operationnt414c/shellsecbat) Henkaku plugin which displays seconds and battery percent in status bar
-- [**43**星][4m] [Java] [opencryptoproject/jcmathlib](https://github.com/opencryptoproject/jcmathlib) Implementation of mathematical operations with big numbers and elliptic curve points for smart cards with JavaCard platform.
+- [**43**星][2y] [Go] [ocmdev/rita](https://github.com/ocmdev/rita) This repo is deprecated. Please use activecm/rita instead.
- [**43**星][7m] [C#] [nyan-x-cat/lime-downloader](https://github.com/nyan-x-cat/lime-downloader) Simple Malware Downloader
-- [**43**星][11m] [Lua] [nozominetworks/tricotools](https://github.com/nozominetworks/tricotools) Triconex TriStation utilities and tools
- [**43**星][2y] [C] [noahhhryan/krackattacks-test](https://github.com/noahhhryan/krackattacks-test)
- [**43**星][1y] [Py] [nirizr/pytest-idapro](https://github.com/nirizr/pytest-idapro) 辅助对IDAPython脚本进行单元测试
- [**43**星][2y] [Py] [nikshepsvn/scatterfly](https://github.com/nikshepsvn/scatterfly) An attempt to improve user privacy by intelligent data obfuscation.
@@ -12664,7 +13518,7 @@ networking routines
- [**43**星][2y] [Py] [nccgroup/royal_apt](https://github.com/nccgroup/royal_apt) Royal APT - APT15 - Related Information from NCC Group Cyber Defense Operations Research
- [**43**星][3m] [Java] [nalen98/ebpf-for-ghidra](https://github.com/nalen98/ebpf-for-ghidra) eBPF Processor for Ghidra
- [**43**星][1y] [C] [n30m1nd/linux_heap_exploitation_intro_series](https://github.com/n30m1nd/linux_heap_exploitation_intro_series) Various PoCs and challenges regarding heap userland exploitation
-- [**43**星][3y] [Shell] [mueller-ma/block-ads-via-dns](https://github.com/mueller-ma/block-ads-via-dns) Block ads and malware via local DNS server
+- [**43**星][5y] [Py] [mubix/pykek](https://github.com/mubix/pykek) Kerberos Exploitation Kit
- [**43**星][2y] [Py] [mthbernardes/ipchecker](https://github.com/mthbernardes/ipchecker) Check if a IP is from tor or is a malicious proxy
- [**43**星][1y] [mrowensnobody/presentation](https://github.com/mrowensnobody/presentation)
- [**43**星][3y] [Py] [mrgeffitas/sandbox_tester](https://github.com/mrgeffitas/sandbox_tester)
@@ -12675,9 +13529,9 @@ networking routines
- [**43**星][3y] [Batchfile] [maldiohead/idapin](https://github.com/maldiohead/idapin) plugin of ida with pin
- [**43**星][2y] [Java] [m301/rdroid](https://github.com/m301/rdroid) [Android RAT] Remotely manage your android phone using PHP Interface
- [**43**星][1y] [Ruby] [lucifer1993/lasercrack](https://github.com/lucifer1993/lasercrack) Lasercrack-可扩展的Ruby暴力破解框架
-- [**43**星][3y] [C] [kudelskisecurity/sgx-reencrypt](https://github.com/kudelskisecurity/sgx-reencrypt) PoC of an SGX enclave performing symmetric reencryption
- [**43**星][10m] [Go] [konstantin8105/ddos](https://github.com/konstantin8105/ddos) DDoS attack. Creating infinite http GET requests.
- [**43**星][1m] [Py] [kavishgr/xmlrpc-bruteforcer](https://github.com/kavishgr/xmlrpc-bruteforcer) An XMLRPC brute forcer targeting Wordpress written in Python 3. In the context of xmlrpc brute forcing, its faster than Hydra and WpScan. It can brute force 1000 passwords per second.
+- [**43**星][17d] [PS] [kacos2000/win10](https://github.com/kacos2000/win10) Win 10 related research
- [**43**星][5m] [AutoIt] [jschicht/usnjrnl2csv](https://github.com/jschicht/usnjrnl2csv) Parser for $UsnJrnl on NTFS
- [**43**星][3y] [C#] [jacobmisirian/dbltekgoippwn](https://github.com/jacobmisirian/dbltekgoippwn) Tool to check if an IP of a DblTek GoIP is vulnerable to a challenge-response login system, send SMS messages from the system, execute remote commands botnet style, and generate responses to challenges.
- [**43**星][2y] [JS] [issue-db/issue-db](https://github.com/issue-db/issue-db)
@@ -12685,78 +13539,77 @@ networking routines
- [**43**星][1y] [JS] [intoli/slice](https://github.com/intoli/slice) A JavaScript implementation of Python's negative indexing and extended slice syntax.
- [**43**星][5m] [Shell] [infosecn1nja/ycsm](https://github.com/infosecn1nja/ycsm) This is a quick script installation for resilient redirector using nginx reverse proxy and letsencrypt compatible with some popular Post-Ex Tools (Cobalt Strike, Empire, Metasploit, PoshC2).
- [**43**星][8m] [Py] [ihaveamac/switchfs](https://github.com/ihaveamac/switchfs) FUSE (Filesystem in Userspace) scripts for Nintendo Switch files
-- [**43**星][26d] [Py] [hvqzao/report-ng](https://github.com/hvqzao/report-ng) Generate MS Word template-based reports with HP WebInspect / Burp Suite Pro input, own custom data and knowledge base.
+- [**43**星][1y] [Py] [hillsbird/db_security](https://github.com/hillsbird/db_security) 数据库安全审计平台
- [**43**星][3y] [Py] [hewlettpackard/reconbf](https://github.com/hewlettpackard/reconbf) Recon system hardening scanner
+- [**43**星][2y] [Go] [heptiolabs/ironclad](https://github.com/heptiolabs/ironclad) Web Application Firewall (WAF) on Kubernetes
- [**43**星][3y] [C] [hamza-megahed/ctfs](https://github.com/hamza-megahed/ctfs) Walkthrough some CTFs
-- [**43**星][17d] [Perl] [hackerdom/checksystem](https://github.com/hackerdom/checksystem) Checksystem for attack-defense CTF
- [**43**星][2y] [Py] [gregversteeg/gaussianize](https://github.com/gregversteeg/gaussianize) Transforms univariate data into normally distributed data
- [**43**星][2y] [Py] [grayddq/passiveseccheck](https://github.com/grayddq/passiveseccheck) 自动化被动扫描系统分为数据源、数据处理、漏洞验证等三个子系统,本系统属于漏洞验证部分,根据提供的数据进行分布式安全验证,确定是否包含相关严重漏洞。
+- [**43**星][4m] [Py] [giantbranch/gray-hat-python-src](https://github.com/giantbranch/gray-hat-python-src) python灰帽子--黑客与逆向工程师的Python编程之道的课本各章源码,我实验的程序等
+- [**43**星][1y] [C] [gcwnow/linux](https://github.com/gcwnow/linux) Linux kernel for GCW Zero (Ingenic JZ4770)
- [**43**星][6y] [Py] [fygrave/honeyntp](https://github.com/fygrave/honeyntp) NTP logger/honeypot
- [**43**星][2y] [Py] [ethvpn/code](https://github.com/ethvpn/code) The sourecode
-- [**43**星][2y] [Py] [erpscanteam/cve-2018-2380](https://github.com/erpscanteam/cve-2018-2380) PoC of Remote Command Execution via Log injection on SAP NetWeaver AS JAVA CRM
-- [**43**星][15d] [Py] [entynetproject/geospy](https://github.com/entynetproject/geospy) Geolocation Spy (GeoSpy) is an OSINT analysis and research tool, which allows people to track and execute intelligent social engineering attacks in real time. It was created with the aim of teaching the world how large Internet companies could obtain confidential information such as the status of sessions of their websites or services and contro…
- [**43**星][2m] [C#] [emoose/xvdtool](https://github.com/emoose/xvdtool) A command-line tool for manipulating Xbox One XVD & XVC files.
+- [**43**星][12m] [PHP] [eboda/35c3](https://github.com/eboda/35c3) Challenges I created for 35c3
- [**43**星][3y] [Shell] [dominikstyp/auto-reaver](https://github.com/dominikstyp/auto-reaver) Auto Reaver - multiple access point attack using Reaver
-- [**43**星][2y] [Py] [deadpix3l/pydhe](https://github.com/deadpix3l/pydhe) a fully python Diffie-Hellman Library
- [**43**星][2y] [JS] [davidaq/vodo](https://github.com/davidaq/vodo) 开源HTTP抓包
-- [**43**星][6m] [Py] [contrast-security-oss/djangoat](https://github.com/contrast-security-oss/djangoat) Python and Django implementation of the OWASP RailsGoat project
- [**43**星][1y] [Py] [cmu-sei/cyobstract](https://github.com/cmu-sei/cyobstract) A tool to extract structured cyber information from incident reports.
- [**43**星][9m] [Py] [chriswmorris/metaforge](https://github.com/chriswmorris/metaforge) An OSINT Metadata analyzing tool that filters through tags and creates reports
- [**43**星][1y] [Py] [christhecoolhut/easy-pickings](https://github.com/christhecoolhut/easy-pickings) Automatic function exporting and linking for fuzzing cross-architecture binaries.
-- [**43**星][8d] [Go] [c-sto/gosecretsdump](https://github.com/c-sto/gosecretsdump)
+- [**43**星][1y] [Py] [chrismaddalena/fox](https://github.com/chrismaddalena/fox) A companion tool for BloodHound offering Active Directory statistics and number crunching
- [**43**星][1y] [bulentrahimkazanci/windbg-cheat-sheet](https://github.com/bulentrahimkazanci/windbg-cheat-sheet) A practical guide to analyze memory dumps of .Net applications by using Windbg
-- [**43**星][28d] [Py] [bsdphk/pyreveng](https://github.com/bsdphk/pyreveng) Software Reverse Engineering toolkit in python
+- [**43**星][30d] [Py] [bsdphk/pyreveng](https://github.com/bsdphk/pyreveng) Software Reverse Engineering toolkit in python
- [**43**星][4y] [Shell] [brianwrf/roothelper](https://github.com/brianwrf/roothelper) A Bash script that downloads and unzips scripts that will aid with privilege escalation on a Linux system.
- [**43**星][1y] [Py] [br3akp0int/gqlparser](https://github.com/br3akp0int/gqlparser) A repository for GraphQL Extension for Burp Suite
- [**43**星][4y] [Py] [borjamerino/tlsinjector](https://github.com/borjamerino/tlsinjector) Python script to inject and run shellcodes through TLS callbacks
- [**43**星][7y] [Py] [bonsaiviking/tarpyt](https://github.com/bonsaiviking/tarpyt) A web spider's worst nightmare.
-- [**43**星][9m] [Py] [binaryanalysisplatform/bap-tutorial](https://github.com/binaryanalysisplatform/bap-tutorial) The BAP tutorial
-- [**43**星][3m] [JS] [bendrucker/hapi-require-https](https://github.com/bendrucker/hapi-require-https) hapi http -> https redirection for servers behind a reverse proxy
-- [**43**星][4m] [bc-security/defcon27](https://github.com/bc-security/defcon27)
+- [**43**星][4m] [JS] [bendrucker/hapi-require-https](https://github.com/bendrucker/hapi-require-https) hapi http -> https redirection for servers behind a reverse proxy
+- [**43**星][12m] [Py] [bayotop/sink-logger](https://github.com/bayotop/sink-logger) sink-logger: Burp扩展,无缝记录所有传递到已知JavaScript sinks的数据
- [**43**星][2y] [C] [bartblaze/matire](https://github.com/bartblaze/matire) Malware Analysis, Threat Intelligence and Reverse Engineering: LABS
- [**43**星][2m] [PHP] [auth0/auth0-drupal](https://github.com/auth0/auth0-drupal) Auth0 Drupal Plugin - Single Sign On, Social Login, SAML and AD/LDAP Integration, User Management
- [**43**星][2y] [JS] [auth0-blog/aliens-go-home-part-1](https://github.com/auth0-blog/aliens-go-home-part-1) GitHub repository that accompanies the first article of the "Developing Games with React, Redux, and SVG" series.
- [**43**星][2y] [JS] [ascendr/spectre-chrome](https://github.com/ascendr/spectre-chrome) Spectre JS PoC for Chrome
+- [**43**星][3y] [C++] [andreybazhan/dbgext](https://github.com/andreybazhan/dbgext) Debugger extension for the Debugging Tools for Windows (WinDbg, KD, CDB, NTSD).
- [**43**星][4y] [C#] [alphadelta/dumb](https://github.com/alphadelta/dumb) A fast and advanced ransomware PoC
- [**43**星][3m] [TSQL] [abrignoni/dfir-sql-query-repo](https://github.com/abrignoni/dfir-sql-query-repo) Collection of SQL query templates for digital forensics use by platform and application.
-- [**43**星][1y] [Py] [649/apache-struts-shodan-exploit](https://github.com/649/apache-struts-shodan-exploit) This tool takes advantage of CVE-2018-11776 and Shodan to perform mass exploitation of verified and vulnerable Apache Struts servers.
-- [**43**星][1y] [PHP] [4k-developer/4k-botnet](https://github.com/4k-developer/4k-botnet) A simple and easy to use JS Botnet
- [**43**星][6y] [1an0rmus/yara](https://github.com/1an0rmus/yara) Yara rules
-- [**43**星][8m] [Py] [0x4d31/honeyku](https://github.com/0x4d31/honeyku) A Heroku-based web honeypot that can be used to create and monitor fake HTTP endpoints (i.e. honeytokens).
-- [**43**星][1y] [Py] [04x/instagramcracker](https://github.com/04x/instagramcracker) Full Speed Instagram Cracker
- [**42**星][1m] [C#] [uknowsec/sharpcheckinfo](https://github.com/uknowsec/sharpcheckinfo) 收集目标主机信息,包括最近打开文件,系统环境变量和回收站文件等等
- [**42**星][1y] [Go] [arnaucube/flock-botnet](https://github.com/arnaucube/flock-botnet) Twitter botnet with autonomous bots replying tweets with text generated based on probabilities in Markov chains
-- [**42**星][7d] [Py] [rocky/python-decompile3](https://github.com/rocky/python-decompile3) Python decompiler for 3.7+. Stripped down from uncompyle6 so we can refactor and fix up some long-standing problems
+- [**42**星][2m] [Lua] [dsasmblr/cheat-engine](https://github.com/dsasmblr/cheat-engine) Cheat Engine scripts, tutorials, tools, and more.
- [**42**星][4m] [Lua] [ricterz/my-nse-scripts](https://github.com/ricterz/my-nse-scripts) My NSE Scripts
- [**42**星][4y] [Lua] [fireeye/synfulknock](https://github.com/fireeye/synfulknock)
-- [**42**星][5m] [TypeScript] [igio90/hooah-trace](https://github.com/igio90/hooah-trace) Instructions tracing powered by frida
- [**42**星][2y] [Py] [undeadsec/checkurl](https://github.com/undeadsec/checkurl) Detect evil urls that uses IDN Homograph Attack.
+- [**42**星][16d] [Py] [pagekite/pysocksipychain](https://github.com/pagekite/pysocksipychain) Modified socks.py which supports chained proxies
- [**42**星][1m] [C] [wireghoul/sploit-dev](https://github.com/wireghoul/sploit-dev) Exploits and research stuffs
- [**42**星][3y] [Go] [v2ray/experiments](https://github.com/v2ray/experiments) Repository for experimental code
+- [**42**星][10m] [TS] [javascript-obfuscator/react-native-obfuscating-transformer](https://github.com/javascript-obfuscator/react-native-obfuscating-transformer) Obfuscation for React Native bundles
+- [**42**星][2m] [C#] [k8gege/porttran](https://github.com/k8gege/porttran) PortTran (.NET端口转发工具,支持任意权限)
- [**42**星][1y] [Perl] [t3hp0rp/hitcondockerfile](https://github.com/t3hp0rp/hitcondockerfile) Dockerfile for hitcon
+- [**42**星][1m] [mohitkhemchandani/oscp_bible](https://github.com/mohitkhemchandani/oscp_bible) This is a collection of resources, scripts, bookmarks, writeups, notes, cheatsheets that will help you in OSCP Preparation as well as for general pentesting and learning. If you feel like you can contribute in it. Please do that, I'll appreciate you.
+- [**42**星][7m] [kungfu-pro/kungfu-pro-issues](https://github.com/kungfu-pro/kungfu-pro-issues) kungfu pro 透明代理, 企业科学上网解决方案
- [**42**星][2y] [Py] [t7hm1/pyddos](https://github.com/t7hm1/pyddos) DDOS python script
-- [**42**星][1m] [payloadbox/rfi-lfi-payload-list](https://github.com/payloadbox/rfi-lfi-payload-list)
- [**42**星][6m] [Py] [kryptoslogic/rdppot](https://github.com/kryptoslogic/rdppot) RDP honeypot
+- [**42**星][2d] [Py] [3xploit-db/pentest-tools-framework](https://github.com/3xploit-db/pentest-tools-framework) Pentest Tools Framework is a database of exploits, Scanners and tools for penetration testing. Pentest is a powerful framework includes a lot of tools for beginners. You can explore kernel vulnerabilities, network vulnerabilities
- [**42**星][1y] [C++] [3gstudent/windows-eventlog-bypass](https://github.com/3gstudent/Windows-EventLog-Bypass) Use subProcessTag Value From TEB to identify Event Log Threads
- [**42**星][10m] [C++] [bytecode77/slui-file-handler-hijack-privilege-escalation](https://github.com/bytecode77/slui-file-handler-hijack-privilege-escalation) 利用 slui.exe 的文件 Handler 劫持漏洞实现 UAC 绕过和本地提权
- [**42**星][2m] [C++] [lifting-bits/klee](https://github.com/lifting-bits/klee) KLEE Symbolic Execution Engine
- [**42**星][2y] [Py] [klsecservices/ios_mips_gdb](https://github.com/klsecservices/ios_mips_gdb) Cisco MIPS debugger
- [**42**星][2y] [Py] [miss-d/blindy](https://github.com/miss-d/blindy) Simple script to automate brutforcing blind sql injection vulnerabilities
+- [**42**星][1m] [C] [zhangboyang/pal3patch](https://github.com/zhangboyang/pal3patch) 《仙剑奇侠传三》《仙剑奇侠传三外传·问情篇》分辨率补丁
- [**42**星][2y] [C] [z4ziggy/zigfrid](https://github.com/z4ziggy/zigfrid) A Passive RFID fuzzer
+- [**42**星][3y] [C] [yosqueoy/ditsnap](https://github.com/yosqueoy/ditsnap) An inspection tool for Active Directory database
- [**42**星][10m] [xisigr/paper](https://github.com/xisigr/paper) Web&Browser Security
- [**42**星][4y] [PHP] [xibijj/awvscan](https://github.com/xibijj/awvscan) New On Live Web Vul Scan
- [**42**星][6m] [C] [x899/ssh_brute_force](https://github.com/x899/ssh_brute_force) Crack SSH Password using Dictionary and Brute Force Method
-- [**42**星][7m] [YARA] [x64dbg/yarasigs](https://github.com/x64dbg/yarasigs) Various Yara signatures (possibly to be included in a release later).
- [**42**星][7m] [x41sec/slides](https://github.com/x41sec/slides)
+- [**42**星][3d] [C] [wuseman/tg799vac-xtreme-17.2-mint](https://github.com/wuseman/tg799vac-xtreme-17.2-mint) My personal unique wiki for hacking the router firmware used by (Telia)TG799vac Xtream v17.2-MINT delivered from Technicolor
- [**42**星][11m] [Perl] [wireghoul/doona](https://github.com/wireghoul/doona) Network based protocol fuzzer
-- [**42**星][2y] [PHP] [whitewinterwolf/wwwolf-php-webshell](https://github.com/whitewinterwolf/wwwolf-php-webshell) WhiteWinterWolf's PHP web shell
+- [**42**星][7y] [C++] [vlad902/findcrypt2-with-mmx](https://github.com/vlad902/findcrypt2-with-mmx) 对findcrypt2插件的增强,支持MMX AES指令
- [**42**星][6m] [C++] [vanhauser-thc/afl-pin](https://github.com/vanhauser-thc/afl-pin) run AFL with pintool
-- [**42**星][4m] [C#] [userr00t/universalunityhooks](https://github.com/userr00t/universalunityhooks) A framework designed to hook into and modify methods in unity games via dlls
- [**42**星][3y] [Py] [uber/usb2fac](https://github.com/uber/usb2fac) Enabling 2fac confirmation for newly connected USB devices
-- [**42**星][2m] [Py] [turnerlabs/antiope](https://github.com/turnerlabs/antiope) AWS Inventory and Compliance Framework
- [**42**星][1m] [JS] [tineola/tineola](https://github.com/tineola/tineola) Blockchains. Destruction. Mayhem.
- [**42**星][3m] [Go] [threatstack/authkeys](https://github.com/threatstack/authkeys) A tool for getting SSH keys out of LDAP
-- [**42**星][3m] [Lua] [theherogac/tf-card-plugin-tool](https://github.com/theherogac/tf-card-plugin-tool) TF Card Plugin Tool is an excellent tool developed with the OneLua Team interpreter that allows you to simplify the installation and management of the drivers of the SD2VITA adapter and of the official PSVITA memory in the ux0: / uma0 paths
+- [**42**星][4d] [PS] [thecjw/scoop-retools](https://github.com/thecjw/scoop-retools) Scoop bucket for reverse engineering tools
- [**42**星][2y] [Shell] [taherio/redi](https://github.com/taherio/redi) Automated script for setting up CobaltStrike redirectors (nginx reverse proxy, letsencrypt)
- [**42**星][3y] [Py] [t0kx/exploit-cve-2015-3306](https://github.com/t0kx/exploit-cve-2015-3306) ProFTPd 1.3.5 - (mod_copy) Remote Command Execution exploit and vulnerable container
- [**42**星][3m] [Pawn] [stypr/tmpleak](https://github.com/stypr/tmpleak) Leak off used temporary workspaces for ctf and wargames!
@@ -12764,26 +13617,26 @@ networking routines
- [**42**星][6y] [Ruby] [sophsec/ffi-pcap](https://github.com/sophsec/ffi-pcap) Ruby FFI bindings for libpcap.
- [**42**星][1m] [Py] [sh3llcod3/airscript-ng](https://github.com/sh3llcod3/airscript-ng) A python script to simplify the process of auditing wireless networks.
- [**42**星][9m] [Py] [sendgrid/krampus](https://github.com/sendgrid/krampus) The original AWS security enforcer™
-- [**42**星][4y] [C++] [sekoialab/binaryinjectionmitigation](https://github.com/sekoialab/binaryinjectionmitigation) Two tools used during our analysis of the Microsoft binary injection mitigation implemented in Edge TH2.
-- [**42**星][25d] [Py] [securestate/king-phisher-plugins](https://github.com/securestate/king-phisher-plugins) Plugins for the King Phisher open source phishing campaign toolkit.
+- [**42**星][8d] [Py] [securestate/king-phisher-plugins](https://github.com/securestate/king-phisher-plugins) Plugins for the King Phisher open source phishing campaign toolkit.
- [**42**星][2y] [Py] [se55i0n/cwebscanner](https://github.com/se55i0n/cwebscanner) 快速扫描C段web应用,获取请求状态code、server、title信息
+- [**42**星][3y] [KiCad Layout] [salmg/magspoofpi](https://github.com/salmg/magspoofpi) MagSpoof for Raspberry PI GPIO
+- [**42**星][6m] [Visual Basic .NET] [s1egesystems/ghostsquadhackers-javascript-encrypter-encoder](https://github.com/s1egesystems/ghostsquadhackers-javascript-encrypter-encoder) Encrypt/Encode your Javascript code. (Windows Scripting)
- [**42**星][2y] [Shell] [rogdham/cve-2018-11235](https://github.com/rogdham/cve-2018-11235) PoC exploit for CVE-2018-11235 allowing RCE on git clone --recurse-submodules
-- [**42**星][2y] [Py] [robertbaruch/polychip](https://github.com/robertbaruch/polychip) Python app to extract a netlist of NMOS transistors from an Inkscape diagram.
-- [**42**星][8m] [PowerShell] [robbridgeman/adimporter](https://github.com/robbridgeman/adimporter) Credit to Helge Klein -
+- [**42**星][8m] [PS] [robbridgeman/adimporter](https://github.com/robbridgeman/adimporter) Credit to Helge Klein -
- [**42**星][2m] [Java] [revolver-ocelot-saa/ghidrax64dbg](https://github.com/revolver-ocelot-saa/ghidrax64dbg) Extract annoations from Ghidra into an X32/X64 dbg database
- [**42**星][2m] [Java] [radioegor146/native-obfuscator](https://github.com/radioegor146/native-obfuscator) Java .class to .cpp converter for use with JNI
+- [**42**星][1y] [Shell] [r0hi7/tortipi](https://github.com/r0hi7/tortipi) Tor based Raspberry π hotspot
- [**42**星][8m] [pyn3rd/cve-2019-2618](https://github.com/pyn3rd/cve-2019-2618) Weblogic Unrestricted File Upload
-- [**42**星][1y] [puuoi/ss-r-4in1](https://github.com/puuoi/ss-r-4in1) 由于秋水逸冰网站国内无法访问,所以为有需要的朋友复制发布到github
-- [**42**星][3y] [C++] [pstolarz/dumpext](https://github.com/pstolarz/dumpext) WinDbg debugger extension library providing various tools to analyse, dump and fix (restore) Microsoft Portable Executable files for both 32 (PE) and 64-bit (PE+) platforms.
- [**42**星][2y] [PHP] [paragonie/hpkp-builder](https://github.com/paragonie/hpkp-builder) Build HTTP Public-Key-Pinning headers from a JSON file (or build them programmatically)
- [**42**星][2y] [C] [opsxcq/exploit-cve-2017-5715](https://github.com/opsxcq/exploit-cve-2017-5715) Spectre exploit
+- [**42**星][4m] [C] [operationnt414c/shellsecbat](https://github.com/operationnt414c/shellsecbat) Henkaku plugin which displays seconds and battery percent in status bar
- [**42**星][3y] [Ruby] [openshift/openshift-extras](https://github.com/openshift/openshift-extras) Unofficial tools for use with OpenShift
-- [**42**星][2y] [Go] [ocmdev/rita](https://github.com/ocmdev/rita) This repo is deprecated. Please use activecm/rita instead.
-- [**42**星][8m] [Py] [nwmonster/applysig](https://github.com/nwmonster/applysig) Apply IDA FLIRT signatures for Ghidra
-- [**42**星][17d] [ntdiff/headers](https://github.com/ntdiff/headers)
+- [**42**星][5m] [JS] [oasis-open/cti-stix-visualization](https://github.com/oasis-open/cti-stix-visualization) OASIS TC Open Repository: Lightweight visualization for STIX 2.0 objects and relationships
+- [**42**星][5d] [ntdiff/headers](https://github.com/ntdiff/headers)
- [**42**星][5y] [C] [ntddk/temu](https://github.com/ntddk/temu) TEMU: The BitBlaze Dynamic Analysis Component (with some patches).
-- [**42**星][2m] [Java] [nowsecure/cybertruckchallenge19](https://github.com/nowsecure/cybertruckchallenge19) Android security workshop material taught during the CyberTruck Challenge 2019 (Detroit USA).
+- [**42**星][3m] [Java] [nowsecure/cybertruckchallenge19](https://github.com/nowsecure/cybertruckchallenge19) Android security workshop material taught during the CyberTruck Challenge 2019 (Detroit USA).
- [**42**星][2y] [C] [nixawk/awesome-windows-debug](https://github.com/nixawk/awesome-windows-debug) Debug Windows Application / Kernel
+- [**42**星][12d] [Ruby] [ninoseki/mihari](https://github.com/ninoseki/mihari) mihari is a sidekick tool for TheHive to monitor malicious hosts
- [**42**星][4y] [C] [nikolajschlej/zeronights2015](https://github.com/nikolajschlej/zeronights2015) My UEFI security talk on ZeroNights 2015
- [**42**星][5y] [Py] [nihilus/idasimulator](https://github.com/nihilus/idasimulator) 扩展IDA的条件断点支持,在被调试进行中使用Python代码替换复杂的执行代码
- [**42**星][4y] [C++] [nihilus/guid-finder](https://github.com/nihilus/guid-finder) 查找GUID/UUID
@@ -12791,145 +13644,175 @@ networking routines
- [**42**星][3y] [C] [nextsecurity/gozi-mbr-rootkit](https://github.com/nextsecurity/gozi-mbr-rootkit) Gozi-MBR-rootkit Bootkit Modified
- [**42**星][1y] [Java] [narkisr/nmap4j](https://github.com/narkisr/nmap4j) A Java Nmap wrapper
- [**42**星][4y] [Py] [nanshihui/normal_hark_lite](https://github.com/nanshihui/normal_hark_lite) 通用的POC检测框架,有足够的POC,就可以找出相应的漏洞
-- [**42**星][30d] [munsiwoo/ctf-web-prob](https://github.com/munsiwoo/ctf-web-prob) my ctf web probs
-- [**42**星][5y] [Py] [mubix/pykek](https://github.com/mubix/pykek) Kerberos Exploitation Kit
+- [**42**星][5y] [Py] [nanopony/apache-scalp](https://github.com/nanopony/apache-scalp) Scalp!/Anathema is a log analyzer for web server (Apache, nginx) [Python3]
+- [**42**星][1m] [munsiwoo/ctf-web-prob](https://github.com/munsiwoo/ctf-web-prob) my ctf web probs
- [**42**星][3y] [C++] [mrexodia/idapatch](https://github.com/mrexodia/idapatch) IDA plugin to patch IDA Pro in memory.
- [**42**星][1y] [Py] [modzero/interestingfilescanner](https://github.com/modzero/interestingfilescanner) Burp extension
+- [**42**星][2m] [Py] [mitre-attack/attack-scripts](https://github.com/mitre-attack/attack-scripts) Scripts and a (future) library to improve users' interactions with the ATT&CK content
- [**42**星][1m] [mikalv/awesome-i2p](https://github.com/mikalv/awesome-i2p) A curated list of awesome I2P implementations, libraries, resources, projects, and shiny things. I2P is an anonymous overlay network - a network within a network. It is intended to protect communication from dragnet surveillance and monitoring by third parties such as ISPs.
+- [**42**星][1y] [C#] [micli/netcoredebugging](https://github.com/micli/netcoredebugging) A repository maintains the book of ".NET Core application debugging" sample code.
+- [**42**星][11m] [PS] [mburrough/pentestingazureapps](https://github.com/mburrough/pentestingazureapps) Script samples from the book Pentesting Azure Applications (2018, No Starch Press)
- [**42**星][2y] [Assembly] [martinvelez/w32evol](https://github.com/martinvelez/w32evol) An obfuscation engine which obfuscates Intel x86 32-bit binary code.
- [**42**星][3y] [C] [lxdcn/simple-vpn-demo](https://github.com/lxdcn/simple-vpn-demo) A Simple Point-to-Point tunnelling implementation in C
- [**42**星][9m] [C++] [luciouskami/xigncode3bypass](https://github.com/luciouskami/xigncode3bypass)
-- [**42**星][7d] [JS] [loki-project/loki-messenger](https://github.com/loki-project/loki-messenger) Loki Messenger - Onion routing based messenger
-- [**42**星][8m] [Shell] [leitbogioro/fuck_aliyun](https://github.com/leitbogioro/fuck_aliyun)
+- [**42**星][2d] [JS] [loki-project/loki-messenger](https://github.com/loki-project/loki-messenger) Loki Messenger - Onion routing based messenger
+- [**42**星][5m] [C++] [lianglixin/sksocks](https://github.com/lianglixin/sksocks) SKSocks, for proxy, firewall penetration, data encryption and speeding up internet accessing.
+- [**42**星][9m] [Shell] [leitbogioro/fuck_aliyun](https://github.com/leitbogioro/fuck_aliyun)
+- [**42**星][1y] [Java] [k0r0pt/project-tauro](https://github.com/k0r0pt/project-tauro) A Router WiFi key recovery/cracking tool with a twist.
+- [**42**星][9y] [jonoberheide/stackjacking](https://github.com/jonoberheide/stackjacking) PoC code for our presentation titled "Stackjacking Your Way to grsec/PaX Bypass"
- [**42**星][2y] [Go] [johnsonz/go-checkiptools](https://github.com/johnsonz/go-checkiptools) A go application to scan google ip.
- [**42**星][11m] [JS] [jeremyfetiveau/pwn-just-in-time-exploit](https://github.com/jeremyfetiveau/pwn-just-in-time-exploit) Exploit for the [pwn] just-in-time challenge from google ctf 2018's finals (TurboFan bug)
- [**42**星][4m] [Py] [jas502n/cve-2019-7238](https://github.com/jas502n/cve-2019-7238) Nexus Repository Manager 3 Remote Code Execution without authentication < 3.15.0
+- [**42**星][4m] [Py] [jaredlgillespie/proxyscrape](https://github.com/jaredlgillespie/proxyscrape) Python library for retrieving free proxies (HTTP, HTTPS, SOCKS4, SOCKS5).
- [**42**星][2y] [C] [invictus-0x90/vulnerable_linux_driver](https://github.com/invictus-0x90/vulnerable_linux_driver) An intentionally vulnerable linux driver for research purposes/practice in kernel exploit dev
- [**42**星][2y] [Py] [imp0wd3r/scanner](https://github.com/imp0wd3r/scanner) 端口扫描 + 敏感文件扫描 + POC批量调用框架
- [**42**星][2y] [C] [idc/ps4-fake-405](https://github.com/idc/ps4-fake-405)
- [**42**星][4y] [Py] [ibm-security-intelligence/data-import](https://github.com/ibm-security-intelligence/data-import)
- [**42**星][5y] [Py] [husam212/mitmer](https://github.com/husam212/mitmer) Automated man-in-the-middle attack tool.
-- [**42**星][2y] [Go] [heptiolabs/ironclad](https://github.com/heptiolabs/ironclad) Web Application Firewall (WAF) on Kubernetes
- [**42**星][1y] [C] [hannob/bignum-fuzz](https://github.com/hannob/bignum-fuzz) Code to fuzz bignum libraries
- [**42**星][3y] [Ruby] [guidovranken/rpcbomb](https://github.com/guidovranken/rpcbomb) RPCBOMB + patches
- [**42**星][4m] [Py] [gnebbia/halive](https://github.com/gnebbia/halive) A fast http and https prober, to check which URLs are alive
-- [**42**星][1y] [C] [gcwnow/linux](https://github.com/gcwnow/linux) Linux kernel for GCW Zero (Ingenic JZ4770)
- [**42**星][4y] [C++] [flankerhqd/mediacodecoob](https://github.com/flankerhqd/mediacodecoob) Infoleak and PC control poc for CVE-2015-6620 (24445127), I'll add after conference
- [**42**星][3y] [JS] [firebug/devtools-extension-examples](https://github.com/firebug/devtools-extension-examples) Extension examples for Firefox developer tools
- [**42**星][1m] [Erlang] [etnt/edbg](https://github.com/etnt/edbg) edbg:基于 tty 的 Erlang 调试/追踪接口
- [**42**星][2m] [Py] [edeca/rtfraptor](https://github.com/edeca/rtfraptor) Extract OLEv1 objects from RTF files by instrumenting Word
-- [**42**星][1y] [Py] [ecx86/shellcode_encoder](https://github.com/ecx86/shellcode_encoder) x64 printable shellcode encoder
-- [**42**星][11m] [PHP] [eboda/35c3](https://github.com/eboda/35c3) Challenges I created for 35c3
- [**42**星][5y] [Py] [duo-labs/mysslstrip](https://github.com/duo-labs/mysslstrip) CVE-2015-3152 PoC
-- [**42**星][14d] [Objective-C] [dineshshetty/ios-sandbox-dumper](https://github.com/dineshshetty/ios-sandbox-dumper) SandBox-Dumper makes use of multiple private libraries to provide exact locations of the application sandbox, application bundle and some other interesting information
+- [**42**星][16d] [ObjC] [dineshshetty/ios-sandbox-dumper](https://github.com/dineshshetty/ios-sandbox-dumper) SandBox-Dumper makes use of multiple private libraries to provide exact locations of the application sandbox, application bundle and some other interesting information
- [**42**星][2y] [HTML] [digitalinterruption/fridaworkshop](https://github.com/digitalinterruption/fridaworkshop) Break Apps with Frida workshop material
+- [**42**星][3m] [Py] [dhn/osee](https://github.com/dhn/osee) Collection of resources for my preparation to take the OSEE certification.
+- [**42**星][2y] [Py] [deadpix3l/pydhe](https://github.com/deadpix3l/pydhe) a fully python Diffie-Hellman Library
+- [**42**星][1y] [PHP] [davidtavarez/pinky](https://github.com/davidtavarez/pinky) pinky - The PHP mini RAT (Remote Administration Tool)
- [**42**星][10m] [PHP] [danwin/onion-link-list](https://github.com/danwin/onion-link-list) A set of scripts to list tor hidden services
+- [**42**星][2y] [Py] [danmcinerney/smb-reverse-brute](https://github.com/danmcinerney/smb-reverse-brute) Async'ly gather unique usernames thru null SMB sessions and bruteforce them with 2 passwords
- [**42**星][12m] [Py] [daddycocoaman/ironpentest](https://github.com/daddycocoaman/ironpentest) Collection of IronPython scripts and executables for penetration testing
+- [**42**星][9d] [C#] [cs-util-com/cscore](https://github.com/cs-util-com/cscore) cscore is a minimal-footprint library providing commonly used helpers & patterns for your C# projects. It can be used in both pure C# and Unity projects.
- [**42**星][4y] [C++] [cr4sh/secretnet_expl](https://github.com/cr4sh/secretnet_expl) LPE exploits for Secret Net and Secret Net Studio
-- [**42**星][20d] [JS] [coston/react-obfuscate](https://github.com/coston/react-obfuscate) An intelligent React component to obfuscate any contact link!
-- [**42**星][1y] [Py] [chrismaddalena/fox](https://github.com/chrismaddalena/fox) A companion tool for BloodHound offering Active Directory statistics and number crunching
+- [**42**星][3d] [JS] [coston/react-obfuscate](https://github.com/coston/react-obfuscate) An intelligent React component to obfuscate any contact link!
+- [**42**星][7m] [Java] [ciscopsirt/openvulnapi](https://github.com/ciscopsirt/openvulnapi) Documentation and Tools for Cisco's PSIRT openVuln API
- [**42**星][10m] [Batchfile] [chrisad/ads-payload](https://github.com/chrisad/ads-payload) Powershell script which will take any payload and put it in the a bat script which delivers the payload. The payload is delivered using environment variables, alternating data streams and wmic.
- [**42**星][5y] [C] [cemeyer/msp430-emu-uctf](https://github.com/cemeyer/msp430-emu-uctf) msp430 emulator for uctf (with remote GDB debugging, reverse debugging, and optional symbolic execution)
- [**42**星][1y] [btkrausen/aws](https://github.com/btkrausen/aws)
- [**42**星][2y] [HCL] [bneg/redteam-automation](https://github.com/bneg/redteam-automation) Automating those tasks which can or should be automated
-- [**42**星][12m] [Py] [bayotop/sink-logger](https://github.com/bayotop/sink-logger) sink-logger: Burp扩展,无缝记录所有传递到已知JavaScript sinks的数据
- [**42**星][6m] [Ruby] [b1ack0wl/linux_mint_poc](https://github.com/b1ack0wl/linux_mint_poc)
- [**42**星][2y] [Py] [azure/embarrassingly-parallel-image-classification](https://github.com/azure/embarrassingly-parallel-image-classification) Walkthrough demonstrating how trained DNNs (CNTK and TensorFlow) can be applied to massive image sets in ADLS using PySpark on Azure HDInsight clusters
+- [**42**星][17d] [SystemVerilog] [azonenberg/starshipraider](https://github.com/azonenberg/starshipraider) High performance embedded systems debug/reverse engineering platform
- [**42**星][7m] [Go] [aschzero/hera](https://github.com/aschzero/hera) Automated secure tunnels for containers using Cloudflare Argo
- [**42**星][8m] [OCaml] [anssi-fr/mabo](https://github.com/anssi-fr/mabo) MRT Parser
- [**42**星][8m] [C++] [angorafuzzer/libdft64](https://github.com/angorafuzzer/libdft64) libdft for Intel Pin 3.x and 64 bit platform. (Dynamic taint tracking, taint analysis)
- [**42**星][2y] [Py] [anemonelabs/unmessage](https://github.com/anemonelabs/unmessage) Privacy enhanced instant messenger
-- [**42**星][11m] [C#] [andychiare/netcore2-reverse-proxy](https://github.com/andychiare/netcore2-reverse-proxy) An example of how to implement a reverse proxy in .NET Core 2
- [**42**星][1y] [HTML] [an0nud4y/socialfish](https://github.com/an0nud4y/socialfish) Modern phishing tool with advanced functionality
+- [**42**星][2y] [Rust] [alexcrichton/socks5-rs](https://github.com/alexcrichton/socks5-rs) Implementation of a socks5 proxy server in Rust
+- [**42**星][2m] [Rust] [ajmwagar/merino](https://github.com/ajmwagar/merino)
- [**42**星][2y] [Py] [abdesslem/ctf](https://github.com/abdesslem/ctf) Flask platform for Capture The Flag challenges
- [**42**星][9y] [Py] [9b/malpdfobj](https://github.com/9b/malpdfobj) Builds json representation of PDF malware sample
+- [**42**星][4m] [Py] [4n4nk3/tinkerershell](https://github.com/4n4nk3/tinkerershell) A simple python reverse shell written just for fun.
+- [**42**星][29d] [1135/1135-cobaltstrike-toolkit](https://github.com/1135/1135-cobaltstrike-toolkit) about CobaltStrike
- [**42**星][5m] [C++] [0xeb/ida-climacros](https://github.com/0xeb/ida-climacros) 在IDA命令行接口中定义和使用静态/动态的宏
- [**42**星][2m] [Py] [0x01h/pyddoz](https://github.com/0x01h/pyddoz) PyDDoZ is a powerful, human-friendly DDoS tool using application layer (L7) attack techniques.
- [**42**星][6m] [JS] [0katz/cve-2019-12476](https://github.com/0katz/cve-2019-12476)
- [**41**星][7m] [C++] [trojan-gfw/trojan-qt](https://github.com/trojan-gfw/trojan-qt) GUI server and client of Trojan in Qt C++
+- [**41**星][1y] [Py] [v2ray/v2ray-shell_alpha](https://github.com/v2ray/v2ray-shell_alpha) A GUI for V2Ray-core, written in PyQt5
- [**41**星][11m] [JS] [hacker0x01/helpful-recon-data](https://github.com/hacker0x01/helpful-recon-data) This information provides helpful information to make it easier to discover new attack surface on HackerOne.com.
-- [**41**星][7d] [Py] [simsong/dfxml](https://github.com/simsong/dfxml) Digital Forensics XML project and library
-- [**41**星][2m] [Lua] [dsasmblr/cheat-engine](https://github.com/dsasmblr/cheat-engine) Cheat Engine scripts, tutorials, tools, and more.
+- [**41**星][2d] [Py] [simsong/dfxml](https://github.com/simsong/dfxml) Digital Forensics XML project and library
+- [**41**星][2y] [Py] [moosedojo/legion](https://github.com/moosedojo/legion) Distributed computing environment that can be used for both academic and pen testing purposes.
- [**41**星][6y] [PHP] [spiderlabs/upnp-request-generator](https://github.com/spiderlabs/upnp-request-generator) A tool to parse UPnP descriptor XML files and generate SOAP control requests for use with Burp Suite or netcat
- [**41**星][1y] [C] [l3m0n/my_ctf_challenges](https://github.com/l3m0n/my_ctf_challenges)
+- [**41**星][2y] [Py] [cisco-talos/covnavi](https://github.com/cisco-talos/covnavi)
- [**41**星][7m] [OCaml] [mirage/wodan](https://github.com/mirage/wodan) A Mirage filesystem library
- [**41**星][4m] [C#] [3gstudent/apt34-jason](https://github.com/3gstudent/apt34-jason) Use to perform Microsoft exchange account brute-force.
-- [**41**星][10m] [Shell] [thelinuxchoice/phurious](https://github.com/thelinuxchoice/phurious) Phishing any website to delivery Windows Reverse Shell payload through DATA URI
-- [**41**星][10m] [TypeScript] [javascript-obfuscator/react-native-obfuscating-transformer](https://github.com/javascript-obfuscator/react-native-obfuscating-transformer) Obfuscation for React Native bundles
-- [**41**星][18d] [Shell] [soaringswine/lazyrecon_docker](https://github.com/soaringswine/lazyrecon_docker) Containerized version of my fork of Nahamsec's Lazyrecon.
-- [**41**星][2m] [C#] [k8gege/porttran](https://github.com/k8gege/porttran) PortTran (.NET端口转发工具,支持任意权限)
+- [**41**星][19d] [Shell] [shibli2700/rekon](https://github.com/shibli2700/rekon) The project contains multiple shell scripts for automating the tasks which most of the hackers struggle during their recon phase.
+- [**41**星][2m] [amimo/goron](https://github.com/amimo/goron) Yet another llvm based obfuscator
+- [**41**星][2y] [Makefile] [artem-panchenko/counter-strike-docker](https://github.com/artem-panchenko/counter-strike-docker) Docker image for Counter-Strike 1.6 server
- [**41**星][1y] [C#] [advancedhacker101/c-sharp-proxy-server](https://github.com/advancedhacker101/c-sharp-proxy-server) A proxy server built with c# can be both normal and MITM Proxy
+- [**41**星][2m] [C] [alxbrn/gdrv-loader](https://github.com/alxbrn/gdrv-loader) Kernel driver loader using vulnerable gigabyte driver (
+- [**41**星][2y] [Py] [bcopeland/speccy](https://github.com/bcopeland/speccy) Visualization tool for ath spectral scan
+- [**41**星][2d] [Shell] [phspade/automated-scanner](https://github.com/phspade/automated-scanner) Trying to make automated recon for bug bounties
+- [**41**星][20d] [Go] [abguthrie/goquery](https://github.com/abguthrie/goquery) Provide a shell like interface by utilizing osquery's distributed API
+- [**41**星][2m] [Py] [kc0bfv/pcode-emulator](https://github.com/kc0bfv/pcode-emulator) A PCode Emulator for Ghidra.
+- [**41**星][1m] [Java] [flankerhqd/vendor-android-cves](https://github.com/flankerhqd/vendor-android-cves) Collections of my POCs for android vendor CVEs
- [**41**星][4m] [Py] [philomathic-guy/malicious-web-content-detection-using-machine-learning](https://github.com/philomathic-guy/Malicious-Web-Content-Detection-Using-Machine-Learning) Chrome extension for detecting phishing web sites
- [**41**星][3y] [kd1991/oxul103-jailbreak](https://github.com/KD1991/OXUL103-Jailbreak) A NEW 64-bit JAILBREAK FOR iOS 10.3,10.3.1,10.3.2,10.3.x. (Untethered).
- [**41**星][2y] [JS] [osirislab/csaw-ctf-2017-quals](https://github.com/osirislab/CSAW-CTF-2017-Quals) Repo for CSAW CTF 2018 Quals challenges
- [**41**星][5y] [Java] [tacixat/cfgscandroid](https://github.com/TACIXAT/CFGScanDroid) Control Flow Graph Scanning for Android
+- [**41**星][3y] [Py] [cylance/markovobfuscate](https://github.com/cylance/MarkovObfuscate) Use Markov Chains to obfuscate data as other data
- [**41**星][5y] [cmu-18739l-s15/18739l-s15-coursedocs](https://github.com/CMU-18739L-S15/18739L-s15-coursedocs)
-- [**41**星][4m] [TypeScript] [verifynpm/tbv](https://github.com/verifynpm/tbv) Package verification for npm
+- [**41**星][4m] [TS] [verifynpm/tbv](https://github.com/verifynpm/tbv) Package verification for npm
+- [**41**星][6d] [Py] [opencybersecurityalliance/stix-shifter](https://github.com/opencybersecurityalliance/stix-shifter) This project consists of an open source library allowing software to connect to data repositories using STIX Patterning, and return results as STIX Observations.
- [**41**星][6y] [Py] [vpnguy-zz/snmpdos](https://github.com/vpnguy-zz/snmpdos) Create a DDOS attack using SNMP servers
- [**41**星][1y] [C] [synacktiv-contrib/lightspeed](https://github.com/Synacktiv-contrib/lightspeed) PoC for the iOS 11.4.1 and MacOS 10.13 kernel vulnerability in lio_listio
- [**41**星][8m] [Ruby] [sharpstone/heroku-bouncer](https://github.com/sharpstone/heroku-bouncer) A Heroku OAuth middleware with no other work to do
- [**41**星][5m] [Go] [lc/cspparse](https://github.com/lc/cspparse) A tool to evaluate Content Security Policies.
+- [**41**星][1m] [Java] [flankerhqd/vendor-android-cves](https://github.com/flankerhqd/vendor-android-cves) Collections of my POCs for android vendor CVEs
- [**41**星][11m] [Py] [zynga/hiccup](https://github.com/zynga/hiccup) [DEPRECATED] Hiccup is a framework that allows the Burp Suite (a web application security testing tool,
-- [**41**星][30d] [C] [zhichao281/duilib-miniblinkbrowser](https://github.com/zhichao281/duilib-miniblinkbrowser) 用duilib做的miniblink的浏览器
+- [**41**星][4m] [C] [zouxianyu/physicalmemoryrw](https://github.com/zouxianyu/physicalmemoryrw) the basic version of the ring0 physical memory read/write tool
+- [**41**星][1m] [C] [zhichao281/duilib-miniblinkbrowser](https://github.com/zhichao281/duilib-miniblinkbrowser) 用duilib做的miniblink的浏览器
- [**41**星][5y] [C++] [zer0mem/hypervisor](https://github.com/zer0mem/hypervisor) microVM
-- [**41**星][3y] [C] [yosqueoy/ditsnap](https://github.com/yosqueoy/ditsnap) An inspection tool for Active Directory database
- [**41**星][2y] [Py] [yingshang/hack](https://github.com/yingshang/hack) crawl hackerone reports
- [**41**星][2y] [Shell] [xtiankisutsa/twiga](https://github.com/xtiankisutsa/twiga) twiga:枚举 Android 设备,获取了解其内部部件和漏洞利用的信息
- [**41**星][2y] [Shell] [xaqron/stunnel](https://github.com/xaqron/stunnel) Wrapping openvpn with stunnel
-- [**41**星][4m] [Py] [x64dbg/x64dbgpylib](https://github.com/x64dbg/x64dbgpylib) Port of windbglib to x64dbgpy, in an effort to support mona.py in x64dbg.
+- [**41**星][5m] [Py] [x64dbg/x64dbgpylib](https://github.com/x64dbg/x64dbgpylib) Port of windbglib to x64dbgpy, in an effort to support mona.py in x64dbg.
+- [**41**星][5d] [Go] [x-way/iptables-tracer](https://github.com/x-way/iptables-tracer) Insert trace-points into the running configuration to observe the path of packets through the iptables chains.
- [**41**星][3y] [Perl] [wireghoul/lbmap](https://github.com/wireghoul/lbmap) Advanced HTTP fingerprinting PoC
-- [**41**星][7y] [C++] [vlad902/findcrypt2-with-mmx](https://github.com/vlad902/findcrypt2-with-mmx) 对findcrypt2插件的增强,支持MMX AES指令
+- [**41**星][1y] [C] [wanttobeno/dllprotect](https://github.com/wanttobeno/dllprotect) dll文件加解密和内存加载
+- [**41**星][1y] [Py] [v1v1/sleight](https://github.com/v1v1/sleight) Empire HTTP(S) C2 redirector setup script
- [**41**星][1y] [C++] [userexistserror/dllloadershellcode](https://github.com/userexistserror/dllloadershellcode) Shellcode to load an appended Dll
+- [**41**星][1y] [traceflight/android-malware-datasets](https://github.com/traceflight/android-malware-datasets) Popular Android malware datasets
+- [**41**星][4m] [Lua] [theherogac/tf-card-plugin-tool](https://github.com/theherogac/tf-card-plugin-tool) TF Card Plugin Tool is an excellent tool developed with the OneLua Team interpreter that allows you to simplify the installation and management of the drivers of the SD2VITA adapter and of the official PSVITA memory in the ux0: / uma0 paths
- [**41**星][2y] [HTML] [thehackingsage/fluxion](https://github.com/thehackingsage/fluxion) WiFi Cracking Tool (Using Evil Twin Attack) With Some Modification. (Only For Legal Purposes)
- [**41**星][10m] [C++] [thebabush/dumb-obfuscator](https://github.com/thebabush/dumb-obfuscator) Tutorial on how to write the dumbest obfuscator I could think of.
-- [**41**星][8m] [C#] [thaisenpm/loader3](https://github.com/thaisenpm/loader3) A self leak of a loader I sold on Selly for easy money to open a business. I got enough, it was leaked to shit. Enjoy
- [**41**星][3y] [Py] [tengzhangchao/websniff](https://github.com/tengzhangchao/websniff) 局域网http流量嗅探,并获取登陆的账号密码
- [**41**星][4y] [Py] [techwizrd/gitkraken](https://github.com/techwizrd/gitkraken) A Git client for the GNOME Desktop.
+- [**41**星][3m] [Shell] [tasket/qubes-vm-hardening](https://github.com/tasket/qubes-vm-hardening) Fend off malware at Qubes VM startup
- [**41**星][2y] [Py] [talos-vulndev/fuzzflow](https://github.com/talos-vulndev/fuzzflow)
- [**41**星][1y] [Py] [spiderlabs/firework](https://github.com/spiderlabs/firework) Firework is a proof of concept tool to interact with Microsoft Workplaces creating valid files required for the provisioning process.
- [**41**星][8m] [Shell] [sonofagl1tch/awsdetonationlab](https://github.com/sonofagl1tch/awsdetonationlab) This script is used to generate some basic detections of the aws security services
- [**41**星][4y] [ApacheConf] [smikims/arpspoof](https://github.com/smikims/arpspoof) Performs an ARP spoofing attack using the Linux kernel's raw sockets
+- [**41**星][3y] [PS] [sikkandar-sha/sec-audit](https://github.com/sikkandar-sha/sec-audit) PowerShell Script for Windows Server Compliance / Security Configuration Audit
- [**41**星][4y] [C] [sesuperuser/super-bootimg](https://github.com/sesuperuser/super-bootimg) Tools to edit Android boot.img. NDK buildable, to be usable in an update.zip
+- [**41**星][7m] [C] [sensepost/frida-windows-playground](https://github.com/sensepost/frida-windows-playground) A collection of Frida hooks for experimentation on Windows platforms.
- [**41**星][2y] [C] [seemoo-lab/nexmon_debugger](https://github.com/seemoo-lab/nexmon_debugger) Debugger with hardware breakpoints and memory watchpoints for BCM4339 Wi-Fi chips
- [**41**星][10m] [Java] [secdec/attack-surface-detector-burp](https://github.com/secdec/attack-surface-detector-burp) The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters
- [**41**星][1y] [seadog007/noxctf-2018-psrf-as-pwn](https://github.com/seadog007/noxctf-2018-psrf-as-pwn)
- [**41**星][3y] [Java] [scriptjunkie/kcap](https://github.com/scriptjunkie/kcap)
- [**41**星][2y] [Py] [scrapbird/sarlacc](https://github.com/scrapbird/sarlacc) SMTP server / sinkhole for collecting spam
-- [**41**星][3y] [KiCad Layout] [salmg/magspoofpi](https://github.com/salmg/magspoofpi) MagSpoof for Raspberry PI GPIO
-- [**41**星][6m] [Visual Basic] [s1egesystems/ghostsquadhackers-javascript-encrypter-encoder](https://github.com/s1egesystems/ghostsquadhackers-javascript-encrypter-encoder) Encrypt/Encode your Javascript code. (Windows Scripting)
- [**41**星][3y] [C++] [rootkitsmm/cve-2016-0040](https://github.com/rootkitsmm/cve-2016-0040) Exploiting CVE-2016-0040 uninitialized pointer
+- [**41**星][2y] [C#] [rappayne/webgoat.net](https://github.com/rappayne/webgoat.net) OWASP's official repository for WebGoat (ASP.NET version)
- [**41**星][2y] [Py] [rapid7/vm-automation](https://github.com/rapid7/vm-automation) Created to simplify interactions with virtual machines
- [**41**星][2m] [Shell] [r0bag/pentest](https://github.com/r0bag/pentest)
+- [**41**星][3y] [PS] [proxb/serverinventoryreport](https://github.com/proxb/serverinventoryreport) A set of scripts to create an inventory report using PowerShell, SQL and WPF
- [**41**星][3y] [Py] [ph4r05/kismet-deauth-wpa2-handshake-plugin](https://github.com/ph4r05/kismet-deauth-wpa2-handshake-plugin) Python plugin for Kismet to perform deauthentication to collect WPA2 handshakes
- [**41**星][2y] [Py] [oways/sa-core-2018-004](https://github.com/oways/sa-core-2018-004) SA-CORE-2018-004 POC #drupalgeddon3
- [**41**星][2m] [C#] [outflanknl/net-gpppassword](https://github.com/outflanknl/net-gpppassword) .NET implementation of Get-GPPPassword. Retrieves the plaintext password and other information for accounts pushed through Group Policy Preferences.
- [**41**星][2y] [oscarakaelvis/game-of-thrones-hacking-ctf](https://github.com/oscarakaelvis/game-of-thrones-hacking-ctf) Game of Thrones hacking CTF (Capture the flag)
- [**41**星][2y] [JS] [opsxcq/exploit-cve-2016-6515](https://github.com/opsxcq/exploit-cve-2016-6515) OpenSSH remote DOS exploit and vulnerable container
+- [**41**星][3y] [Py] [opendns/og-miner](https://github.com/opendns/og-miner) OpenDNS Graph Miner
- [**41**星][2y] [Py] [ntddk/virustream](https://github.com/ntddk/virustream) A script to track malware IOCs with OSINT on Twitter.
- [**41**星][2y] [CSS] [nourabusoud/password-genie](https://github.com/nourabusoud/password-genie)
- [**41**星][5y] [Py] [nimai/mptcp-scapy](https://github.com/nimai/mptcp-scapy) MPTCP firewall tester based on scapy
- [**41**星][1y] [Py] [neverlovelynn/chrome_headless_xss](https://github.com/neverlovelynn/chrome_headless_xss) A plugin to check xss by using chrome_headless
- [**41**星][2y] [ASP] [netspi/cmdsql](https://github.com/netspi/cmdsql)
-- [**41**星][5y] [Py] [nanopony/apache-scalp](https://github.com/nanopony/apache-scalp) Scalp!/Anathema is a log analyzer for web server (Apache, nginx) [Python3]
+- [**41**星][11m] [C] [netmap-unipi/netmap-tutorial](https://github.com/netmap-unipi/netmap-tutorial) Netmap tutorial at SIGCOMM 2017 and AsiaBSDCon 2018
+- [**41**星][3y] [nao-sec/rigek](https://github.com/nao-sec/rigek) Analyzing Rig Exploit Kit
- [**41**星][4y] [Py] [muodov/sqlmapchik](https://github.com/muodov/sqlmapchik) cross-platform sqlmap GUI aimed to mobile devices
+- [**41**星][2y] [Perl] [mtve/yazecminer](https://github.com/mtve/yazecminer) yet another ZEC miner
- [**41**星][4y] [JS] [moloch--/cve-2016-1764](https://github.com/moloch--/cve-2016-1764) Extraction of iMessage Data via XSS
- [**41**星][2y] [minisafe/microweb](https://github.com/minisafe/microweb) MicroScan 的web端,正在改bug
-- [**41**星][1y] [C#] [micli/netcoredebugging](https://github.com/micli/netcoredebugging) A repository maintains the book of ".NET Core application debugging" sample code.
-- [**41**星][27d] [PHP] [mddanish/vulnerable-otp-application](https://github.com/mddanish/vulnerable-otp-application) Vulnerable OTP/2FA Application written in PHP using Google Authenticator
+- [**41**星][29d] [PHP] [mddanish/vulnerable-otp-application](https://github.com/mddanish/vulnerable-otp-application) Vulnerable OTP/2FA Application written in PHP using Google Authenticator
- [**41**星][6y] [Shell] [masterbutcher/kali-cleaner](https://github.com/masterbutcher/kali-cleaner) Little cleaner script for Kali linux.Clean apt cache,Removing old config files,Removing old kernels,Emptying every trashes.
- [**41**星][4m] [maecproject/malware-behaviors](https://github.com/maecproject/malware-behaviors) A taxonomy and dictionary of malware behaviors.
-- [**41**星][5m] [C++] [lianglixin/sksocks](https://github.com/lianglixin/sksocks) SKSocks, for proxy, firewall penetration, data encryption and speeding up internet accessing.
+- [**41**星][8m] [Py] [linuxacademy/la-aws-security_specialty](https://github.com/linuxacademy/la-aws-security_specialty) Learning Activities for the AWS Security Specialty Course
+- [**41**星][4y] [C++] [lingerhk/0net](https://github.com/lingerhk/0net) 一个简单的Windows远程控制后门
- [**41**星][7m] [Py] [koboi137/darksplitz](https://github.com/koboi137/darksplitz) Exploit Framework
- [**41**星][4y] [C] [kitctf/nginxpwn](https://github.com/kitctf/nginxpwn) Exploitation Training -- CVE-2013-2028: Nginx Stack Based Buffer Overflow
- [**41**星][3y] [C] [killswitch-gui/hotload-driver](https://github.com/killswitch-gui/hotload-driver) C++
- [**41**星][3y] [C] [kanglictf/afl-qai](https://github.com/kanglictf/afl-qai) A demo project for AFL with QEMU Augmented Instrumentation (qai)
-- [**41**星][15d] [PowerShell] [kacos2000/win10](https://github.com/kacos2000/win10) Win 10 related research
-- [**41**星][1y] [Java] [k0r0pt/project-tauro](https://github.com/k0r0pt/project-tauro) A Router WiFi key recovery/cracking tool with a twist.
- [**41**星][3y] [C] [jzdziarski/mod_evasive](https://github.com/jzdziarski/mod_evasive) Apache mod_evasive module
+- [**41**星][1y] [Py] [jpcertcc/impfuzzy](https://github.com/jpcertcc/impfuzzy) Fuzzy Hash calculated from import API of PE files
+- [**41**星][2m] [Java] [jenkinsci/parameterized-scheduler-plugin](https://github.com/jenkinsci/parameterized-scheduler-plugin) A Jenkins Plugin to support setting parameters in the build schedule
- [**41**星][3y] [Shell] [jbreed/apkinjector](https://github.com/jbreed/apkinjector) Android APK Antivirus evasion for msfvenom generated payloads to inject into another APK file for phishing attacks.
- [**41**星][2y] [Py] [inaz2/unico](https://github.com/inaz2/unico) Unicorn PE function runner
- [**41**星][5m] [Go] [icchy/wctf2019-gtf](https://github.com/icchy/wctf2019-gtf) WCTF2019 challenge: Gyotaku The Flag
-- [**41**星][7d] [C] [horsicq/pex64dbg](https://github.com/horsicq/pex64dbg) pe 查看
+- [**41**星][2d] [C] [horsicq/pex64dbg](https://github.com/horsicq/pex64dbg) pe 查看
- [**41**星][7m] [hook-s3c/cve-2019-0708-poc](https://github.com/hook-s3c/cve-2019-0708-poc) proof of concept exploit for Microsoft Windows 7 and Server 2008 RDP vulnerability
- [**41**星][2y] [Py] [guptachetan1997/crawling-projects](https://github.com/guptachetan1997/crawling-projects) Web scraping and automation using python
- [**41**星][2y] [Ruby] [gabamnml/hoper](https://github.com/gabamnml/hoper) Security tool to trace URL's jumps across the rel links to obtain the last URL
@@ -12937,127 +13820,132 @@ networking routines
- [**41**星][3m] [Swift] [frida/frida-swift](https://github.com/frida/frida-swift) Frida Swift bindings
- [**41**星][6y] [freewaf/waf-anti-tamper](https://github.com/freewaf/waf-anti-tamper) Open Source Web Application Firewall Anti Tamper
- [**41**星][9m] [Shell] [forte-research/forte-fuzzbench](https://github.com/forte-research/forte-fuzzbench) FoRTE-Research's fuzzing benchmarks
+- [**41**星][2y] [Java] [fooock/jshodan](https://github.com/fooock/jshodan) Powerful Shodan API client using RxJava and Retrofit
- [**41**星][3y] [Py] [fnzv/trsh](https://github.com/fnzv/trsh) trsh:使用电报 API 与 Linux 服务器通信,Python编写。
- [**41**星][7y] [Py] [flyr4nk/xssscaner](https://github.com/flyr4nk/xssscaner) Xss Scaner
- [**41**星][2y] [C++] [feruxmax/meltdown](https://github.com/feruxmax/meltdown) Meltdown/Spectre experiments
-- [**41**星][7d] [C++] [equalitie/ouinet](https://github.com/equalitie/ouinet) Library to enable decentralized web requests
+- [**41**星][3d] [C++] [equalitie/ouinet](https://github.com/equalitie/ouinet) Library to enable decentralized web requests
- [**41**星][2y] [Go] [empty-nest/emptynest](https://github.com/empty-nest/emptynest) emptynest:基于插件的 C2 服务器框架。其目标不是取代某些强大的工具(例如 Empire、Metasploit、CobaltStrike),而是创建一个支持框架,以便为自定义 agents 快速创建小型、专用的 handlers
-- [**41**星][8m] [Java] [dxsdyhm/gwelldemo](https://github.com/dxsdyhm/gwelldemo) a demo to use P2P-Core
+- [**41**星][9m] [Java] [dxsdyhm/gwelldemo](https://github.com/dxsdyhm/gwelldemo) a demo to use P2P-Core
- [**41**星][3y] [Py] [dnlongen/reglister](https://github.com/dnlongen/reglister) Recurse through a registry, identifying values with large data -- a registry malware hunter
-- [**41**星][3m] [Py] [dhn/osee](https://github.com/dhn/osee) Collection of resources for my preparation to take the OSEE certification.
- [**41**星][3y] [Py] [devttys0/botox](https://github.com/devttys0/botox) SIGSTOPing ELF binaries since 0x7E1
- [**41**星][7m] [Rust] [dentrax/netlyser](https://github.com/dentrax/netlyser) Lightweight, a simple yet, Presence Detection Tool written in Rust, based on nmap, built for UNIX, made with <3
+- [**41**星][2m] [Shell] [denizparlak/hayat](https://github.com/denizparlak/hayat) Google Cloud Platform ~ Auditing & Hardening Script
- [**41**星][8m] [deep-security/aws-waf](https://github.com/deep-security/aws-waf) Deep Security's APIs make it simple to integration with a variety of AWS Services
- [**41**星][2y] [deadbits/analyst-casefile](https://github.com/deadbits/analyst-casefile) Maltego CaseFile entities for information security investigations, malware analysis and incident response
-- [**41**星][1y] [PHP] [davidtavarez/pinky](https://github.com/davidtavarez/pinky) pinky - The PHP mini RAT (Remote Administration Tool)
-- [**41**星][2y] [Py] [danmcinerney/smb-reverse-brute](https://github.com/danmcinerney/smb-reverse-brute) Async'ly gather unique usernames thru null SMB sessions and bruteforce them with 2 passwords
+- [**41**星][20d] [C++] [danielkrupinski/anubis](https://github.com/danielkrupinski/anubis) Free open-source training software / cheat for Counter-Strike: Global Offensive, written in C.
- [**41**星][3y] [Py] [crysys/membrane](https://github.com/crysys/membrane) Membrane: A Posteriori Detection of Malicious Code Loading by Memory Paging Analysis
- [**41**星][3y] [Py] [crowdstrike/pyspresso](https://github.com/crowdstrike/pyspresso) The pyspresso package is a Python-based framework for debugging Java.
- [**41**星][9y] [C++] [cr4sh/ptbypass-poc](https://github.com/cr4sh/ptbypass-poc) Bypassing code hooks detection in modern anti-rootkits via building faked PTE entries.
- [**41**星][2y] [C] [cocoahuke/mackextdump](https://github.com/cocoahuke/mackextdump) mackextdump:从macOS中dump Kext信息
- [**41**星][7m] [certcc/vulnerability-data-archive](https://github.com/certcc/vulnerability-data-archive) With the hope that someone finds the data useful, we're publishing an archive of almost all of the non-sensitive vulnerability information in our vulnerability reports database. See also
- [**41**星][4y] [C++] [c4bbage/webrobot-v1.8.2](https://github.com/c4bbage/webrobot-v1.8.2) 网络安全检测工具WebRobot
+- [**41**星][23d] [Lua] [c0nw0nk/nginx-lua-anti-ddos](https://github.com/c0nw0nk/nginx-lua-anti-ddos) A Anti-DDoS script to protect Nginx web servers using Lua with a HTML Javascript based authentication puzzle inspired by Cloudflare I am under attack mode an Anti-DDoS authentication page protect yourself from every attack type All Layer 7 Attacks Mitigating Historic Attacks DoS DoS Implications DDoS All Brute Force Attacks Zero day exploits Soc…
- [**41**星][5y] [Py] [bones-codes/the_colonel](https://github.com/bones-codes/the_colonel) an experimental linux kernel module (rootkit) with a keylogger and built-in IRC bot
- [**41**星][3y] [C] [bluec0re/reversing-radare2](https://github.com/bluec0re/reversing-radare2) A reversing series with radare2
- [**41**星][2y] [JS] [bahmutov/ban-sensitive-files](https://github.com/bahmutov/ban-sensitive-files) Checks filenames to be committed against a library of filename rules to prevent sensitive files in Git
+- [**41**星][3y] [Py] [backto17/sinahousecrawler](https://github.com/backto17/sinahousecrawler) 基于scrapy,scrapy-redis实现的一个分布式网络爬虫,爬取了新浪房产的楼盘信息及户型图片,实现了常用的爬虫功能需求.
- [**41**星][1y] [C++] [baarsik/tauros-v2](https://github.com/baarsik/tauros-v2)
-- [**41**星][15d] [SystemVerilog] [azonenberg/starshipraider](https://github.com/azonenberg/starshipraider) High performance embedded systems debug/reverse engineering platform
- [**41**星][2y] [C++] [azerg/packerpe](https://github.com/azerg/packerpe) simple PE packer written in C++
+- [**41**星][3y] [C++] [avdbg/saber](https://github.com/avdbg/saber) 《macOS软件安全与逆向分析》随书的调试器代码
- [**41**星][1y] [C] [asm/deep_spectre](https://github.com/asm/deep_spectre) Deep learning side channel privileged memory reader
+- [**41**星][5m] [Py] [arthastang/router-exploit-shovel](https://github.com/arthastang/router-exploit-shovel) Automated Application Generation for Stack Overflow Types on Wireless Routers
- [**41**星][2y] [JS] [arno0x/reflectivednsexfiltrator](https://github.com/arno0x/reflectivednsexfiltrator) Data exfiltration using reflective DNS resolution covert channel
-- [**41**星][5y] [C++] [anwarmohamed/packetyzer](https://github.com/anwarmohamed/packetyzer) Packetyzer is a high level library for C++ designed to make easier the forging and decoding of network packets. It has the ability to decode packets of most common network protocols, capture them and send them on the wire. This capability allows construction of tools that can probe, scan or attack networks.
+- [**41**星][6m] [Perl] [anon6372098/fazscan](https://github.com/anon6372098/fazscan) | FazScan is a Perl program to do some vulnerability scanning and pentesting |
- [**41**星][4y] [C] [android-rooting-tools/libpingpong_exploit](https://github.com/android-rooting-tools/libpingpong_exploit) CVE-2015-3636 exploit
- [**41**星][2y] [Py] [andreafioraldi/pwntrace](https://github.com/andreafioraldi/pwntrace) Use ltrace with pwnlib.tubes.process instances, useful for heap exploitation. Pwntools rocks!
+- [**41**星][1y] [Py] [alfa-group/robust-adv-malware-detection](https://github.com/alfa-group/robust-adv-malware-detection) Code repository for the paper "Adversarial Deep Learning for Robust Detection of Binary Encoded Malware"
- [**41**星][2y] [Java] [alepacheco/androrw](https://github.com/alepacheco/androrw) PoC Ransomware for android
+- [**41**星][1m] [Py] [agrawalsmart7/autorecon](https://github.com/agrawalsmart7/autorecon) 自动化渗透初期的一些手动工作,是我们可专注于主要目标
- [**41**星][4y] [Py] [abdesslem/malwarehunter](https://github.com/abdesslem/malwarehunter) Static and automated/dynamic malware analysis
-- [**41**星][4m] [Py] [4n4nk3/tinkerershell](https://github.com/4n4nk3/tinkerershell) A simple python reverse shell written just for fun.
+- [**40**星][2y] [C++] [pgigioli/darknet_ros](https://github.com/pgigioli/darknet_ros) YOLO integration with ROS for real-time object detection
+- [**40**星][12m] [HTML] [zkeeer/shadowsocks-manager](https://github.com/zkeeer/shadowsocks-manager) shadowsocks多用户管理,可视化管理,轻量级,一键安装shadowsocks和ssadmin,控制端口流量/速度,查看端口状态,修改ss配置
- [**40**星][5y] [Lua] [asamy/forgottenmapeditor](https://github.com/asamy/forgottenmapeditor) Map editor written in lua for Open Tibia. Written with OtClient's framework.
-- [**40**星][1y] [Py] [v2ray/v2ray-shell_alpha](https://github.com/v2ray/v2ray-shell_alpha) A GUI for V2Ray-core, written in PyQt5
-- [**40**星][1y] [TypeScript] [icodesign/proxy-uri](https://github.com/icodesign/proxy-uri) Helper to generate/parse Shadowsocks(R)/HTTP(S) URI
+- [**40**星][6y] [robertdavidgraham/hamster](https://github.com/robertdavidgraham/hamster) A proxy server for cookie sidejacking. Works with 'ferret'.
+- [**40**星][1y] [TS] [icodesign/proxy-uri](https://github.com/icodesign/proxy-uri) Helper to generate/parse Shadowsocks(R)/HTTP(S) URI
- [**40**星][5m] [C++] [avast/yaracpp](https://github.com/avast/yaracpp) C++ wrapper for YARA.
- [**40**星][2y] [Py] [wibiti/evedec](https://github.com/wibiti/evedec) Eve Online decrypter/decompiler
-- [**40**星][2y] [PowerShell] [jaredhaight/powerpunch](https://github.com/jaredhaight/powerpunch) A collection of PowerScripts for Pentesting
+- [**40**星][2y] [PS] [jaredhaight/powerpunch](https://github.com/jaredhaight/powerpunch) A collection of PowerScripts for Pentesting
- [**40**星][3y] [Ruby] [gallopsled/pwntools-binutils](https://github.com/gallopsled/pwntools-binutils) Building binutils for pwntools
-- [**40**星][2y] [Makefile] [artem-panchenko/counter-strike-docker](https://github.com/artem-panchenko/counter-strike-docker) Docker image for Counter-Strike 1.6 server
+- [**40**星][9d] [C#] [damonmohammadbagher/nativepayload_reverseshell](https://github.com/damonmohammadbagher/nativepayload_reverseshell) This is Simple C# Source code to Bypass almost "all" AVS, (kaspersky v19, Eset v12 v13 ,Trend-Micro v16, Comodo & Windows Defender Bypassed via this method Very Simple)
+- [**40**星][6m] [C#] [guibacellar/dnci](https://github.com/guibacellar/dnci) DNCI - Dot Net Code Injector
- [**40**星][1y] [Shell] [nick-the-greek/aerial](https://github.com/nick-the-greek/aerial) Multi-mode wireless LAN Based on a Software Access point for Kali Linux.
-- [**40**星][2y] [Py] [bcopeland/speccy](https://github.com/bcopeland/speccy) Visualization tool for ath spectral scan
-- [**40**星][18d] [Go] [abguthrie/goquery](https://github.com/abguthrie/goquery) Provide a shell like interface by utilizing osquery's distributed API
+- [**40**星][5y] [Py] [flankerhqd/wifimonster](https://github.com/flankerhqd/wifimonster) Wifi sniffing and hijacking tool
- [**40**星][1y] [Ruby] [trailofbits/rubysec](https://github.com/trailofbits/rubysec) RubySec Field Guide
+- [**40**星][2d] [thespeedx/proxy-list](https://github.com/TheSpeedX/PROXY-List) Get PROXY List that gets updated everyday
- [**40**星][1y] [HTML] [raidandfade/hacktoberchallenges2018](https://github.com/RaidAndFade/HacktoberChallenges2018) Welcome! I need some help making my list... Learn how in the README
- [**40**星][5y] [Java] [paloaltonetworks/installerhijackingvulnerabilityscanner](https://github.com/PaloAltoNetworks/InstallerHijackingVulnerabilityScanner)
+- [**40**星][2m] [Py] [nerrorsec/googledorker](https://github.com/nerrorsec/GoogleDorker) This is a simple tool to automate google hacking when doing web penetration testing or bug hunting.
- [**40**星][4m] [Py] [gh0stkey/jsonandhttpp](https://github.com/gh0stkey/JSONandHTTPP) Burp Suite Plugin: Convert the json text that returns the body into HTTP request parameters.
- [**40**星][4y] [Lua] [aoncyberlabs/nmap-scripts](https://github.com/AonCyberLabs/Nmap-Scripts)
-- [**40**星][3y] [Py] [cylance/markovobfuscate](https://github.com/cylance/MarkovObfuscate) Use Markov Chains to obfuscate data as other data
- [**40**星][3y] [Ruby] [fsecurelabs/honeypot_recipes](https://github.com/FSecureLABS/honeypot_recipes) A chef cookbook which can be used to quickly deploy a high interaction honeypot, using the sysdig and falco tools
- [**40**星][2y] [JS] [auth0-blog/hapi-jwt-authentication](https://github.com/auth0-blog/hapi-jwt-authentication)
+- [**40**星][7d] [Dockerfile] [crytic/eth-security-toolbox](https://github.com/crytic/eth-security-toolbox) A Docker container preconfigured with all of the Trail of Bits Ethereum security tools.
- [**40**星][10m] [scheme] [aki helin/radamsa](https://gitlab.com/akihe/radamsa)
-- [**40**星][4m] [C] [zouxianyu/physicalmemoryrw](https://github.com/zouxianyu/physicalmemoryrw) the basic version of the ring0 physical memory read/write tool
-- [**40**星][1m] [C] [zhangboyang/pal3patch](https://github.com/zhangboyang/pal3patch) 《仙剑奇侠传三》《仙剑奇侠传三外传·问情篇》分辨率补丁
- [**40**星][3y] [C++] [zer0mem0ry/manualmap](https://github.com/zer0mem0ry/manualmap) A Simple demonstration of manual dll injector
- [**40**星][2y] [Shell] [zephrfish/attackdeploy](https://github.com/zephrfish/attackdeploy) Scripts for Deploying new server
- [**40**星][3y] [Lua] [z-0ne/scans2-045-nmap](https://github.com/z-0ne/scans2-045-nmap) Struts2 S2-045-Nmap NSE script
- [**40**星][2y] [C++] [yifengyou/code-virtualization-and-automation-analysis](https://github.com/yifengyou/code-virtualization-and-automation-analysis) 代码虚拟化与自动化分析
- [**40**星][3y] [Py] [xiphosresearch/phuzz](https://github.com/xiphosresearch/phuzz) Find exploitable PHP files by parameter fuzzing and function call tracing
- [**40**星][3y] [Py] [xiphosresearch/dnsbrute](https://github.com/xiphosresearch/dnsbrute) DNS Sub-domain brute forcer, in Python + gevent
+- [**40**星][3y] [HTML] [xiaoyanguoke/ciahackingtools](https://github.com/xiaoyanguoke/ciahackingtools) WikiLeaks Vault 7 CIA Hacking Tools
+- [**40**星][14d] [PHP] [xchwarze/cain](https://github.com/xchwarze/cain) Password recovery tool for Microsoft Operating Systems. It allows easy recovery of various kind of passwords by sniffing the network, cracking encrypted passwords using Dictionary, Brute-Force and Cryptanalysis attacks, recording VoIP conversations, decoding scrambled passwords, recovering wireless network keys, revealing password boxes, uncover…
- [**40**星][3y] [C++] [x64dbg/interobfu](https://github.com/x64dbg/interobfu) Intermediate x86 instruction representation for use in obfuscation/deobfuscation.
- [**40**星][3y] [PHP] [wso-shell/wso](https://github.com/wso-shell/wso) WSO SHELL , wso shell , WSO.php , wso.php , webshell , wso-shell веб-шелл , шелл , WSO2.5 , WSO2.5.1 , WSO2.php , Shell download, C99 , r57 , bypass shell , P.A.S. (php web-shell) , PPS 4.0 , Скачать WSO Web Shell , Скачать wso.php , Скачать Web Shell
- [**40**星][6y] [C++] [wirepair/idapinlogger](https://github.com/wirepair/idapinlogger) Logs instruction hits to a file which can be fed into IDA Pro to highlight which instructions were called.
- [**40**星][10m] [C++] [wildbydesign/appcontainer-launcher](https://github.com/WildByDesign/AppContainer-Launcher) AppContainer and LPAC (Less Privileged AppContainer) Launcher with Capabilities
- [**40**星][3y] [C] [wi-fi-analyzer/wifi-arsenal](https://github.com/wi-fi-analyzer/wifi-arsenal) WiFi arsenal
-- [**40**星][1y] [C] [wanttobeno/dllprotect](https://github.com/wanttobeno/dllprotect) dll文件加解密和内存加载
+- [**40**星][2y] [C#] [wearelegal/cinarat](https://github.com/wearelegal/cinarat) CinaRAT - Cina Is Not A Remote Administration Tool
+- [**40**星][5d] [Py] [wangyihang/pwnme](https://github.com/wangyihang/pwnme) 二进制渗透题目汇总
- [**40**星][1y] [Py] [wangyihang/codiad-remote-code-execute-exploit](https://github.com/wangyihang/codiad-remote-code-execute-exploit) A simple exploit to execute system command on codiad
- [**40**星][1y] [Shell] [waja/maldetect](https://github.com/waja/maldetect) Debian packaging of Linux Malware Detect (
- [**40**星][9m] [HTML] [voidhack/write-ups](https://github.com/voidhack/write-ups)
- [**40**星][2y] [Py] [villanch/g3ar](https://github.com/villanch/g3ar) 渗透测试编程工具包
- [**40**星][4m] [JS] [vigneshsrao/cve-2019-11707](https://github.com/vigneshsrao/cve-2019-11707) Exploit code for CVE-2019-11707 on Firefox 66.0.3 running on Ubuntu
-- [**40**星][1y] [Py] [v1v1/sleight](https://github.com/v1v1/sleight) Empire HTTP(S) C2 redirector setup script
-- [**40**星][1y] [traceflight/android-malware-datasets](https://github.com/traceflight/android-malware-datasets) Popular Android malware datasets
+- [**40**星][8m] [Go] [txthinking/socks5](https://github.com/txthinking/socks5) SOCKS Protocol Version 5 Library in Go
- [**40**星][4m] [Py] [tmr232/brutal-ida](https://github.com/tmr232/brutal-ida) 在IDA 7.3中禁用Undo/Redo
-- [**40**星][8d] [PowerShell] [thecjw/scoop-retools](https://github.com/thecjw/scoop-retools) Scoop bucket for reverse engineering tools
+- [**40**星][8m] [C#] [thaisenpm/loader3](https://github.com/thaisenpm/loader3) A self leak of a loader I sold on Selly for easy money to open a business. I got enough, it was leaked to shit. Enjoy
+- [**40**星][3y] [HTML] [tennc/1000php](https://github.com/tennc/1000php) 1000个PHP代码审计案例(2016.7以前乌云公开漏洞)
- [**40**星][4y] [Elixir] [tatsuya6502/recon_ex](https://github.com/tatsuya6502/recon_ex) Elixir wrapper for Recon, tools to diagnose Erlang VM safely in production
-- [**40**星][3m] [Shell] [tasket/qubes-vm-hardening](https://github.com/tasket/qubes-vm-hardening) Fend off malware at Qubes VM startup
- [**40**星][7y] [C++] [taintdroid/android_platform_dalvik](https://github.com/taintdroid/android_platform_dalvik) Mirror of git://android.git.kernel.org/platform/dalvik.git with TaintDroid additions (mirror lags official Android)
- [**40**星][3y] [Py] [stratosphereips/stratospheretestingframework](https://github.com/stratosphereips/stratospheretestingframework) The stratosphere testing framework is mean to help in the researching and verification of the behavioral models used by the Stratoshpere IPS.
-- [**40**星][4m] [C] [stephenrkell/trap-syscalls](https://github.com/stephenrkell/trap-syscalls) Monitor, rewrite and/or otherwise trap system calls... on Linux/x86-64 only, for now.
- [**40**星][8y] [C] [stephenfewer/ollyheaptrace](https://github.com/stephenfewer/ollyheaptrace) OllyHeapTrace is a plugin for OllyDbg to trace the heap operations being performed by a process.
- [**40**星][6y] [C++] [stealth/fernmelder](https://github.com/stealth/fernmelder) async mass DNS resolver
-- [**40**星][3y] [PowerShell] [sikkandar-sha/sec-audit](https://github.com/sikkandar-sha/sec-audit) PowerShell Script for Windows Server Compliance / Security Configuration Audit
+- [**40**星][6y] [sinsoul/sinsoulwebremotecontrol](https://github.com/sinsoul/sinsoulwebremotecontrol) 在任何地方通过网页控制和管理自己的计算设备
- [**40**星][6y] [Py] [shadsidd/automated-xss-finder](https://github.com/shadsidd/automated-xss-finder) Automated XSS Finder
+- [**40**星][2m] [Go] [sensepost/go-out](https://github.com/sensepost/go-out)
- [**40**星][2y] [Py] [securifera/cve-2018-6546-exploit](https://github.com/securifera/cve-2018-6546-exploit) CVE-2018-6546-Exploit
- [**40**星][5y] [Py] [scottjpack/shellshock_scanner](https://github.com/scottjpack/shellshock_scanner) Python Scanner for "ShellShock" (CVE-2014-6271)
- [**40**星][2y] [HTML] [scorelab/androphsy](https://github.com/scorelab/androphsy) An Open Source Mobile Forensics Investigation Tool for Android Platform
+- [**40**星][11m] [Py] [s2e/pykvm](https://github.com/s2e/pykvm) A tiny KVM hypervisor written in Python
- [**40**星][10m] [C] [s-macke/starflight-reverse](https://github.com/s-macke/starflight-reverse) Reversed engineered game Starflight (1986)
- [**40**星][11m] [C++] [rr-/crc-manipulator](https://github.com/rr-/crc-manipulator) Change CRC checksums of your files.
- [**40**星][4y] [Py] [rooklabs/milano](https://github.com/rooklabs/milano) Hacking Team Malware Detection Utility
- [**40**星][2y] [Py] [robputt796/py-dns-over-https-proxy](https://github.com/robputt796/py-dns-over-https-proxy) Provides a simple Python based proxy for running DNS over HTTPS to Google's DNS over HTTPS service.
- [**40**星][3y] [C++] [regehr/compiler-crashes](https://github.com/regehr/compiler-crashes) 60 artisanal compiler crashes
-- [**40**星][10m] [M4] [raspberrypi/usbbootgui](https://github.com/raspberrypi/usbbootgui) GUI for booting a Raspberry Pi device like Pi Zero or compute module as a device
-- [**40**星][2y] [C#] [rappayne/webgoat.net](https://github.com/rappayne/webgoat.net) OWASP's official repository for WebGoat (ASP.NET version)
- [**40**星][3y] [Lua] [r00t-3xp10it/rc-exploiter](https://github.com/r00t-3xp10it/rc-exploiter) NOT SUPORTED ANYMORE -- try resource_files repository (mosquito)
- [**40**星][5m] [Py] [q3k/tpm2137](https://github.com/q3k/tpm2137) Hardware task for WCTF2019
-- [**40**星][10d] [Shell] [pyllyukko/harden.sh](https://github.com/pyllyukko/harden.sh) Slackware hardening script
+- [**40**星][7d] [Shell] [pyllyukko/harden.sh](https://github.com/pyllyukko/harden.sh) Slackware hardening script
- [**40**星][6y] [Ruby] [pwnieexpress/metasploit-framework](https://github.com/pwnieexpress/metasploit-framework) Unofficial fork of the Rapid7 metasploit-framework, pruned for minimal size.
-- [**40**星][3y] [PowerShell] [proxb/serverinventoryreport](https://github.com/proxb/serverinventoryreport) A set of scripts to create an inventory report using PowerShell, SQL and WPF
- [**40**星][9m] [olafhartong/detection-sources](https://github.com/olafhartong/detection-sources)
- [**40**星][1y] [Py] [ocadotechnology/gcp-census](https://github.com/ocadotechnology/gcp-census) GAE python based app which regularly collects information about GCP resources and stores them in BigQuery
- [**40**星][5y] [Py] [neuman/python-carteblanche](https://github.com/neuman/python-carteblanche) Module to align code with thoughts of users and designers. Also magically handles navigation and permissions.
-- [**40**星][10m] [C] [netmap-unipi/netmap-tutorial](https://github.com/netmap-unipi/netmap-tutorial) Netmap tutorial at SIGCOMM 2017 and AsiaBSDCon 2018
- [**40**星][3y] [C] [nccgroup/triforceopenbsdfuzzer](https://github.com/nccgroup/triforceopenbsdfuzzer) System call fuzzing of OpenBSD amd64 using TriforceAFL (i.e. AFL and QEMU)
- [**40**星][6y] [Py] [nccgroup/lapith](https://github.com/nccgroup/lapith) A simple Nessus results viewer
-- [**40**星][3y] [nao-sec/rigek](https://github.com/nao-sec/rigek) Analyzing Rig Exploit Kit
- [**40**星][2y] [n3uz/elastic-x-pack-crack](https://github.com/n3uz/elastic-x-pack-crack) 破解 x-pack 授权时间限制,白金版到2050年,仅做研究用途
- [**40**星][1m] [Py] [n3k/pentest](https://github.com/n3k/pentest) Notes/Tools for pentesting
+- [**40**星][13d] [mykings/security-study-tutorial](https://github.com/mykings/security-study-tutorial) Summary of online learning materials
- [**40**星][2y] [Py] [mxmssh/idametrics](https://github.com/mxmssh/idametrics) 收集x86体系结构的二进制可执行文件的静态软件复杂性度量
- [**40**星][2y] [PHP] [mrsqar-ye/wpcrack](https://github.com/mrsqar-ye/wpcrack) wordpress hash cracker .
+- [**40**星][3m] [Py] [momalab/icsref](https://github.com/momalab/icsref) A tool for reverse engineering industrial control systems binaries.
- [**40**星][1y] [Py] [mnrkbys/vss_carver](https://github.com/mnrkbys/vss_carver) Carves and recreates VSS catalog and store from Windows disk image.
- [**40**星][1y] [Java] [miwong/intellidroid](https://github.com/miwong/intellidroid) A targeted input generator for Android that improves the effectiveness of dynamic malware analysis.
-- [**40**星][6m] [Batchfile] [meesong/nt-crucial-modules](https://github.com/meesong/nt-crucial-modules) Collect different versions of Crucial modules.
-- [**40**星][10m] [PowerShell] [mburrough/pentestingazureapps](https://github.com/mburrough/pentestingazureapps) Script samples from the book Pentesting Azure Applications (2018, No Starch Press)
+- [**40**星][3m] [Py] [mikeperry-tor/vanguards](https://github.com/mikeperry-tor/vanguards) Vanguards help guard you from getting vanned...
- [**40**星][1y] [Shell] [mavrepis/shodanvulncheck](https://github.com/mavrepis/shodanvulncheck) bash script to enumerate vulnerabilities on specific year through Shodan API
+- [**40**星][5m] [Lua] [mame82/misc](https://github.com/mame82/misc)
- [**40**星][2y] [JS] [mafintosh/ws-to-tcp](https://github.com/mafintosh/ws-to-tcp) Proxy from WebSockets to TCP
- [**40**星][2y] [Py] [m0rtem/mailfail](https://github.com/m0rtem/mailfail) Proof of Concept - Utilize misconfigured newsletter forms to spam / deny service to an inbox
- [**40**星][3y] [Py] [lukasikic/kodi-backdoor-generator](https://github.com/lukasikic/kodi-backdoor-generator) Kodi Reverse Shell
-- [**40**星][8m] [Py] [linuxacademy/la-aws-security_specialty](https://github.com/linuxacademy/la-aws-security_specialty) Learning Activities for the AWS Security Specialty Course
- [**40**星][4y] [C] [lillypad/badger](https://github.com/lillypad/badger) A Swiss Army Knife for Windows Exploit Development.
- [**40**星][3y] [PHP] [lcatro/xss-hunter](https://github.com/lcatro/xss-hunter) XSS hunter 收集Webview 页面上存在的反射,储存型XSS ,方便应急APP 和前端页面在发布时遇到XSS 安全问题..
- [**40**星][1y] [Py] [lanjelot/ctfs](https://github.com/lanjelot/ctfs) notes and code on past CTFs
@@ -13066,11 +13954,12 @@ networking routines
- [**40**星][11m] [C#] [kevingosse/windbg-extensions](https://github.com/kevingosse/windbg-extensions) Extensions for the new WinDbg
- [**40**星][2y] [C++] [kelvinhack/notruth](https://github.com/kelvinhack/notruth)
- [**40**星][2y] [Py] [karttoon/trigen](https://github.com/karttoon/trigen) Trigen is a Python script which uses different combinations of Win32 function calls in generated VBA to execute shellcode.
-- [**40**星][7m] [PowerShell] [k2/scripting](https://github.com/k2/scripting) PS / Bash / Python / Other scripts For FUN!
-- [**40**星][1y] [Py] [jpcertcc/impfuzzy](https://github.com/jpcertcc/impfuzzy) Fuzzy Hash calculated from import API of PE files
+- [**40**星][3m] [Py] [karttoon/binsequencer](https://github.com/karttoon/binsequencer) BinSequencer is a script designed to find a common pattern of bytes within a set of samples and generate a YARA rule from the identified pattern.
+- [**40**星][7m] [PS] [k2/scripting](https://github.com/k2/scripting) PS / Bash / Python / Other scripts For FUN!
+- [**40**星][2y] [Java] [jwnie/proxyservice](https://github.com/jwnie/proxyservice) 抓取网上公开代理,维护可供爬虫使用的IP池,区分墙内墙外、http/https/socks代理。
+- [**40**星][2m] [jsecurity101/windows-api-to-sysmon-events](https://github.com/jsecurity101/windows-api-to-sysmon-events) A repository that maps API calls to Sysmon Event ID's.
- [**40**星][3y] [jonbruner/twitter-analysis](https://github.com/jonbruner/twitter-analysis) The original dataset for my 2013 article on Twitter's network patterns
- [**40**星][11m] [Py] [jh00nbr/phishruffus](https://github.com/jh00nbr/phishruffus) Intelligent threat hunter and phishing servers
-- [**40**星][2m] [Java] [jenkinsci/parameterized-scheduler-plugin](https://github.com/jenkinsci/parameterized-scheduler-plugin) A Jenkins Plugin to support setting parameters in the build schedule
- [**40**星][9m] [Shell] [jceminer/cn_cpu_miner](https://github.com/jceminer/cn_cpu_miner) Cryptonote CPU Miner
- [**40**星][2y] [Java] [ivianuu/contributer](https://github.com/ivianuu/contributer) Inject all types like views or a conductor controllers with @ContributesAndroidInjector
- [**40**星][8y] [JS] [iriscouch/audit_couchdb](https://github.com/iriscouch/audit_couchdb) Detect security issues, large or small, in a CouchDB server
@@ -13078,23 +13967,27 @@ networking routines
- [**40**星][1y] [C] [in7egral/taig8-ios-jailbreak-patchfinder](https://github.com/in7egral/taig8-ios-jailbreak-patchfinder) Analyzes a binary iOS kernel to determine function offsets and where to apply the canonical jailbreak patches.
- [**40**星][3y] [Assembly] [ilovepp/firminsight](https://github.com/ilovepp/firminsight) Automatic collect firmwares from internet,decompress,find binary code,extract info,file relation and function relation
- [**40**星][4y] [C++] [igorkorkin/hypervisorsdetection](https://github.com/igorkorkin/hypervisorsdetection) This is the first software system, which can detect a stealthy hypervisor and calculate several nested ones even under countermeasures.
-- [**40**星][2m] [Py] [icanhasfay/pypwned](https://github.com/icanhasfay/pypwned) A Python client for the HaveIBeenPwned REST API
+- [**40**星][3m] [Py] [icanhasfay/pypwned](https://github.com/icanhasfay/pypwned) A Python client for the HaveIBeenPwned REST API
+- [**40**星][3d] [Erlang] [homas/ioc2rpz](https://github.com/homas/ioc2rpz) ioc2rpz is a place where threat intelligence meets DNS.
- [**40**星][4y] [hexx0r/cve-2016-0051](https://github.com/hexx0r/cve-2016-0051)
- [**40**星][3y] [C++] [hackshields/antivirus](https://github.com/hackshields/antivirus)
-- [**40**星][12d] [grapheneos/vanadium](https://github.com/grapheneos/vanadium) Privacy and security enhanced releases of Chromium for GrapheneOS. Vanadium provides the WebView and standard user-facing browser on GrapheneOS. It depends on hardening in other GrapheneOS repositories and doesn't include patches not relevant to the build targets used on GrapheneOS.
+- [**40**星][3y] [Py] [h0nus/spynoteshell](https://github.com/h0nus/spynoteshell) Simple Python tool for backdooring apks files (with meterpreter or shell of Metasploit)
+- [**40**星][14d] [grapheneos/vanadium](https://github.com/grapheneos/vanadium) Privacy and security enhanced releases of Chromium for GrapheneOS. Vanadium provides the WebView and standard user-facing browser on GrapheneOS. It depends on hardening in other GrapheneOS repositories and doesn't include patches not relevant to the build targets used on GrapheneOS.
- [**40**星][2y] [godaddy/yara-rules](https://github.com/godaddy/yara-rules) YARA rules for use with ProcFilter
+- [**40**星][21d] [JS] [github/enable-security-alerts-sample](https://github.com/github/enable-security-alerts-sample) This repository contains a sample script which can be used to enable security vulnerability alerts in all of the repositories in a given organization.
- [**40**星][2y] [C] [gamelinux/cxtracker](https://github.com/gamelinux/cxtracker) Connection Tracker is a passive network connection tracker for profiling, history, auditing and network discovery.
-- [**40**星][2y] [Java] [fooock/jshodan](https://github.com/fooock/jshodan) Powerful Shodan API client using RxJava and Retrofit
+- [**40**星][1y] [Shell] [g763007297/gqresign](https://github.com/g763007297/gqresign) ipa重签名(resign),只需一个证书的p12和一个mobileprovision文件就可以实现ipa的重签名
- [**40**星][5y] [Py] [fireeye/chopshop](https://github.com/fireeye/chopshop) Protocol Analysis/Decoder Framework
- [**40**星][2y] [Py] [fideliscyber/yalda](https://github.com/fideliscyber/yalda) yalda:分析文件,从中提取恶意数据(例如:URL)
- [**40**星][4y] [C] [fi01/backdoor_mmap_tools](https://github.com/fi01/backdoor_mmap_tools) Unlock security module, obtain root privilege and so on.
- [**40**星][2y] [Pascal] [felipedaragon/plua-xe](https://github.com/felipedaragon/plua-xe) Embed Lua into Delphi, FreePascal or Lazarus projects
+- [**40**星][1y] [PHP] [farisv/cj2018-final-ctf](https://github.com/farisv/cj2018-final-ctf) Cyber Jawara 2018 Final - Attack & Defense CTF services environments based on Docker.
- [**40**星][3y] [Py] [fabiobaroni/was](https://github.com/fabiobaroni/was) Automatic USB drive malware scanning tool for the security-minded person
- [**40**星][6y] [JS] [evilpacket/redis-sha-crack](https://github.com/evilpacket/redis-sha-crack) node / redis sha hash cracker
- [**40**星][5y] [evi1m0/webshell](https://github.com/evi1m0/webshell) This is a webshell open source project
- [**40**星][2y] [c++] [embedi/meitools](https://github.com/embedi/meitools) meitools:通过 MEI 与英特尔管理引擎进行通信
- [**40**星][3m] [Groovy] [elastic/elasticsearch-groovy](https://github.com/elastic/elasticsearch-groovy) Elasticsearch Groovy client
-- [**40**星][6m] [Visual Basic] [dzzie/re_plugins](https://github.com/dzzie/re_plugins) 逆向插件收集
+- [**40**星][7m] [Visual Basic .NET] [dzzie/re_plugins](https://github.com/dzzie/re_plugins) 逆向插件收集
- [IDASrvr](https://github.com/dzzie/re_plugins/tree/master/IDASrvr) wm_copydata IPC 服务器,通过WM_COPYDATA机制监听远程消息, 可从其他进程中想IDA发送命令,查询数据,控制接口显示
- [IDA_JScript](https://github.com/dzzie/re_plugins/tree/master/IDA_JScript) 通过IDASrvr,使用JavaScript编写IDA脚本(依赖ActiveX)
- [IDA_JScript_w_DukDbg](https://github.com/dzzie/re_plugins/tree/master/IDA_JScript_w_DukDbg) IDA_JScript进阶版
@@ -13118,264 +14011,283 @@ networking routines
- [wininet_hooks](https://github.com/dzzie/re_plugins/tree/master/wininet_hooks) Hook以下API调用并记录关键信息:HttpOpenRequest,InternetConnect,InternetReadFile,InternetCrackUrl,HttpSendRequest
- [**40**星][10m] [C] [dzzie/hookexplorer](https://github.com/dzzie/hookexplorer) technical tool to analyze a process trying to find various types of runtime hooks. Interface and output is geared torwards security experts. Average users wont be able to decipher its output.
- [**40**星][5y] [Go] [dutchcoders/troje](https://github.com/dutchcoders/troje) Troje is a honeypot built around lxc containers. It will run each connection with the service within a seperate lxc container.
-- [**40**星][19d] [Py] [dhondta/rpl-attacks](https://github.com/dhondta/rpl-attacks) RPL attacks framework for simulating WSN with a malicious mote based on Contiki
-- [**40**星][2m] [Shell] [denizparlak/hayat](https://github.com/denizparlak/hayat) Google Cloud Platform ~ Auditing & Hardening Script
+- [**40**星][21d] [Py] [dhondta/rpl-attacks](https://github.com/dhondta/rpl-attacks) RPL attacks framework for simulating WSN with a malicious mote based on Contiki
- [**40**星][1y] [Py] [debasishm89/dotnetfuzz](https://github.com/debasishm89/dotnetfuzz) A quick and dirty .NET "Deserialize_*" fuzzer based on James Forshaw's (@tiraniddo) DotNetToJScript.
- [**40**星][8y] [C++] [dbtsai/libdai](https://github.com/dbtsai/libdai) A free and open source C++ library for Discrete Approximate Inference in graphical models
- [**40**星][2y] [C] [david-reguera-garcia-dreg/lsrootkit](https://github.com/david-reguera-garcia-dreg/lsrootkit) Rootkit Detector for UNIX
-- [**40**星][18d] [C++] [danielkrupinski/anubis](https://github.com/danielkrupinski/anubis) Free open-source training software / cheat for Counter-Strike: Global Offensive, written in C.
- [**40**星][C] [d1w0u/arp-rootkit](https://github.com/d1w0u/arp-rootkit) An open source rootkit for the Linux Kernel to develop new ways of infection/detection.
- [**40**星][3m] [Dockerfile] [cowrie/docker-cowrie](https://github.com/cowrie/docker-cowrie) Cowrie Docker GitHub repository
-- [**40**星][3y] [PowerShell] [colemination/poweroutlook](https://github.com/colemination/poweroutlook) Sample code from Owning MS Outlook with Powershell
+- [**40**星][3y] [PS] [colemination/poweroutlook](https://github.com/colemination/poweroutlook) Sample code from Owning MS Outlook with Powershell
- [**40**星][9m] [Py] [christhecoolhut/rocket-shot](https://github.com/christhecoolhut/rocket-shot) Backwards program slice stitching for automatic CTF problem solving.
- [**40**星][1y] [Py] [ccapton/brook-ok](https://github.com/ccapton/brook-ok) brook程序服务端配置程序,一键搭建brook / Shadowsocks / Socks5服务用于科学上网
- [**40**星][8m] [C#] [azure/reverse-proxy-dotnet](https://github.com/azure/reverse-proxy-dotnet) Reverse Proxy agent
- [**40**星][4y] [CoffeeScript] [atom/loophole](https://github.com/atom/loophole) A hack to enable use of libraries that depend on a basic form of eval in Atom with CSP enabled
- [**40**星][2y] [Py] [aqcurate/lsb-steganography](https://github.com/aqcurate/lsb-steganography) Least-Significant-Bit tool for steganography
+- [**40**星][5y] [C++] [anwarmohamed/packetyzer](https://github.com/anwarmohamed/packetyzer) Packetyzer is a high level library for C++ designed to make easier the forging and decoding of network packets. It has the ability to decode packets of most common network protocols, capture them and send them on the wire. This capability allows construction of tools that can probe, scan or attack networks.
- [**40**星][10m] [anudeepnd/pihole-unbound](https://github.com/anudeepnd/pihole-unbound) Guide to setup Unbound recursive DNS resolver with Pi-Hole
-- [**40**星][6m] [Perl] [anon6372098/fazscan](https://github.com/anon6372098/fazscan) | FazScan is a Perl program to do some vulnerability scanning and pentesting |
- [**40**星][3y] [PHP] [ambulong/phpmyxss](https://github.com/ambulong/phpmyxss) A XSS Project
-- [**40**星][1y] [Py] [alfa-group/robust-adv-malware-detection](https://github.com/alfa-group/robust-adv-malware-detection) Code repository for the paper "Adversarial Deep Learning for Robust Detection of Binary Encoded Malware"
- [**40**星][4y] [Py] [alexbredo/honeypot-camera](https://github.com/alexbredo/honeypot-camera) observation camera honeypot
- [**40**星][2y] [Py] [agustingianni/memrepl](https://github.com/agustingianni/memrepl) Frida 插件,辅助开发内存崩溃类的漏洞
-- [**40**星][30d] [Py] [agrawalsmart7/autorecon](https://github.com/agrawalsmart7/autorecon) 自动化渗透初期的一些手动工作,是我们可专注于主要目标
- [**40**星][2y] [JS] [agjmills/form-scrape](https://github.com/agjmills/form-scrape) form-scrape:示例chrome 扩展,以演示将JavaScript和html注入页面的危险
- [**40**星][1y] [Shell] [adityashrm21/raspberrypi-packet-sniffer](https://github.com/adityashrm21/raspberrypi-packet-sniffer) An HTTP and HTTPS sniffing tool created using a Raspberry Pi
- [**40**星][7m] [Py] [aaronsoria/panalizer](https://github.com/aaronsoria/panalizer)
- [**40**星][2y] [C#] [aaaddress1/puzzcode](https://github.com/aaaddress1/puzzcode) simple compiler based on mingw to build uncrackable windows application against analysis tools
- [**40**星][4y] [Java] [0ang3el/hqli-playground](https://github.com/0ang3el/hqli-playground)
+- [**39**星][1y] [Py] [ysh329/darknet2caffe](https://github.com/ysh329/darknet2caffe) Convert Darknet model to Caffe's
+- [**39**星][2y] [Go] [googlecloudplatform/stackdriver-reverse-proxy](https://github.com/googlecloudplatform/stackdriver-reverse-proxy) Simple HTTP proxy to automatically traces the incoming requests
+- [**39**星][4y] [Py] [joxeankoret/tahh](https://github.com/joxeankoret/tahh) Source codes for "The Antivirus Hackers Handbook" book.
+- [**39**星][4y] [Py] [honeynet/yapdns](https://github.com/honeynet/yapdns) YAPDNS
- [**39**星][3y] [Py] [xl7dev/sectools](https://github.com/xl7dev/sectools) Pentests tools
+- [**39**星][2m] [Py] [meituan-dianping/lyrebird-ios](https://github.com/meituan-dianping/lyrebird-ios) 本程序是Lyrebird插件,您可以在插件中快速查看已连接iOS设备的详细设备信息,截取屏幕快照,以及查看已连接设备的应用信息。
- [**39**星][1y] [Py] [tarunkant/endpoint-finder](https://github.com/tarunkant/endpoint-finder) Finds the End-Points in JavaScript files
-- [**39**星][9m] [Go] [zmap/zannotate](https://github.com/zmap/zannotate) Utility for annotating Internet datasets with contextual metadata (e.g., origin AS, MaxMind GeoIP2, reverse DNS, and WHOIS)
+- [**39**星][10m] [Go] [zmap/zannotate](https://github.com/zmap/zannotate) Utility for annotating Internet datasets with contextual metadata (e.g., origin AS, MaxMind GeoIP2, reverse DNS, and WHOIS)
- [**39**星][1y] [Perl] [cldrn/davtest](https://github.com/cldrn/davtest) davtest (improved)- Exploits WebDAV folders
-- [**39**星][6m] [C#] [guibacellar/dnci](https://github.com/guibacellar/dnci) DNCI - Dot Net Code Injector
-- [**39**星][2m] [amimo/goron](https://github.com/amimo/goron) Yet another llvm based obfuscator
+- [**39**星][11m] [Java] [thelinuxchoice/droidcam](https://github.com/thelinuxchoice/droidcam) Script to generate an Android App to take photos from Cameras
+- [**39**星][10m] [Kotlin] [cbeuw/cloak-android](https://github.com/cbeuw/cloak-android) Android client of Cloak
+- [**39**星][2y] [Py] [liang2580/btpanel-ss](https://github.com/liang2580/btpanel-ss) 基于宝塔Linux面板的shadowsocks可视化管理插件
+- [**39**星][15d] [Verilog] [lvd2/ay-3-8910_reverse_engineered](https://github.com/lvd2/ay-3-8910_reverse_engineered) The reverse-engineered AY-3-8910 chip. Transistor-level schematics, verilog model and a testbench with tools, that can render register dump files into .flac soundtrack.
+- [**39**星][10m] [Java] [zhongxunking/ids](https://github.com/zhongxunking/ids) 高效的分布式id生成器,每个客户端实例tps可达到100万,服务端毫无压力。即使服务端宕机了,id生成依然可用。支持多数据中心,支持id加密。
- [**39**星][5m] [Java] [scalesec/vulnado](https://github.com/scalesec/vulnado) Purposely vulnerable Java application to help lead secure coding workshops
- [**39**星][3m] [Java] [x41sec/beanstack](https://github.com/x41sec/beanstack) X41 BeanStack - Stack Trace Fingerprinting BETA
-- [**39**星][5y] [Py] [flankerhqd/wifimonster](https://github.com/flankerhqd/wifimonster) Wifi sniffing and hijacking tool
-- [**39**星][2m] [Py] [kc0bfv/pcode-emulator](https://github.com/kc0bfv/pcode-emulator) A PCode Emulator for Ghidra.
-- [**39**星][1m] [C++] [trailofbits/polytracker](https://github.com/trailofbits/polytracker) An LLVM-based instrumentation tool for universal taint analysis.
+- [**39**星][2m] [Assembly] [pelock/simple-polymorphic-engine-spe32](https://github.com/pelock/simple-polymorphic-engine-spe32) Simple Polymorphic Engine (SPE32) is a simple polymorphic engine for encrypting code and data. It is an amateur project that can be used to demonstrate what polymorphic engines are.
- [**39**星][6y] [Shell] [intelisecurelabs/pineapple-confs](https://github.com/InteliSecureLabs/Pineapple-Confs) TPLink Pineapple Mods
-- [**39**星][2m] [Py] [nerrorsec/googledorker](https://github.com/nerrorsec/GoogleDorker) This is a simple tool to automate google hacking when doing web penetration testing or bug hunting.
-- [**39**星][2y] [PowerShell] [msadministrator/pprt](https://github.com/MSAdministrator/PPRT) This module is used to report phishing URLs to their WHOIS/RDAP abuse contact information.
-- [**39**星][3y] [Visual Basic] [mwsrc/betterrat](https://github.com/mwsrc/BetterRAT) Better Remote Access Trojan
-- [**39**星][13d] [Dockerfile] [ironpeakservices/iron-alpine](https://github.com/ironPeakServices/iron-alpine) Hardened alpine linux baseimage for Docker.
-- [**39**星][2m] [Dockerfile] [crytic/eth-security-toolbox](https://github.com/crytic/eth-security-toolbox) A Docker container preconfigured with all of the Trail of Bits Ethereum security tools.
+- [**39**星][10m] [C] [fsecurelabs/3d-accelerated-exploitation](https://github.com/FSecureLABS/3d-accelerated-exploitation) 3D Accelerated Exploitation
+- [**39**星][2y] [PS] [msadministrator/pprt](https://github.com/MSAdministrator/PPRT) This module is used to report phishing URLs to their WHOIS/RDAP abuse contact information.
+- [**39**星][3y] [Visual Basic .NET] [mwsrc/betterrat](https://github.com/mwsrc/BetterRAT) Better Remote Access Trojan
+- [**39**星][10m] [Java] [tijme/similar-request-excluder](https://github.com/tijme/similar-request-excluder) A Burp Suite extension that automatically marks similar requests as 'out-of-scope'.
+- [**39**星][6d] [Dockerfile] [ironpeakservices/iron-alpine](https://github.com/ironPeakServices/iron-alpine) Hardened alpine linux baseimage for Docker.
- [**39**星][8y] [Py] [zynamics/bincrowd-plugin-ida](https://github.com/zynamics/bincrowd-plugin-ida) BinCrowd Plugin for IDA Pro
+- [**39**星][2y] [Py] [zjx20/socks-cli](https://github.com/zjx20/socks-cli) A solution to make CLI commands use socks5 proxy.
+- [**39**星][3y] [C++] [zibility/anti-rootkits](https://github.com/zibility/anti-rootkits) 内核级ARK工具。
- [**39**星][4y] [C] [xvilka/hacklu](https://github.com/xvilka/hacklu)
+- [**39**星][2y] [ObjC] [xpreeks/g0blin](https://github.com/xpreeks/g0blin) v0rtex + yalu102
- [**39**星][7y] [Perl] [xme/cuckoomx](https://github.com/xme/cuckoomx) CuckooMX is a project to automate analysis of files transmitted over SMTP (using the Cuckoo sandbox)
-- [**39**星][12d] [PHP] [xchwarze/cain](https://github.com/xchwarze/cain) Password recovery tool for Microsoft Operating Systems. It allows easy recovery of various kind of passwords by sniffing the network, cracking encrypted passwords using Dictionary, Brute-Force and Cryptanalysis attacks, recording VoIP conversations, decoding scrambled passwords, recovering wireless network keys, revealing password boxes, uncover…
- [**39**星][5y] [C] [x43x61x69/codeunsign](https://github.com/x43x61x69/codeunsign) A Mach-O binary codesign remover.
-- [**39**星][11d] [Go] [x-way/iptables-tracer](https://github.com/x-way/iptables-tracer) Insert trace-points into the running configuration to observe the path of packets through the iptables chains.
- [**39**星][6y] [Java] [wuntee/burpauthzplugin](https://github.com/wuntee/burpauthzplugin)
- [**39**星][3y] [Py] [wraith-wireless/wraith](https://github.com/wraith-wireless/wraith) Wireless Reconnaissance And Intelligent Target Harvesting
-- [**39**星][1y] [Py] [wangyihang/pwnme](https://github.com/wangyihang/pwnme) 二进制渗透题目汇总
- [**39**星][6y] [Py] [viaforensics/android-encryption](https://github.com/viaforensics/android-encryption) Brute force and decryption of Android's Full Device Encryption
- [**39**星][2y] [Py] [vah13/sap_vulnerabilities](https://github.com/vah13/sap_vulnerabilities) DoS PoC's for SAP products
+- [**39**星][8d] [Shell] [userlandkernel/plataoplomo](https://github.com/userlandkernel/plataoplomo) Collection of (at time of release) iOS bugs I found
+- [**39**星][2y] [C] [tum-i22/obfuscation-benchmarks](https://github.com/tum-i22/obfuscation-benchmarks) A set of programs used for benchmarking the strength of obfuscation
- [**39**星][3y] [Py] [tomasreimers/tensorflow-graph-compression](https://github.com/tomasreimers/tensorflow-graph-compression) Compress graph files for tensorflow.
- [**39**星][5y] [Shell] [tjluoma/bash-fix](https://github.com/tjluoma/bash-fix) Download and compile a new version of bash to replace vulnerable one
+- [**39**星][10m] [Go] [timothyye/namebeta](https://github.com/timothyye/namebeta) A command line domain query tool.
- [**39**星][2y] [Java] [tiked/androrw](https://github.com/tiked/androrw) PoC Ransomware for android
- [**39**星][1y] [Assembly] [therealsaumil/arm_shellcode](https://github.com/therealsaumil/arm_shellcode) Make ARM Shellcode Great Again
+- [**39**星][2y] [Py] [thecjw/ida_android_script](https://github.com/thecjw/ida_android_script) 辅助Android调试的IDAPython脚本
- [**39**星][5y] [Py] [techbliss/adb_helper_qt_super_version](https://github.com/techbliss/adb_helper_qt_super_version) All You Need For Ida Pro And Android Debugging
- [**39**星][4y] [Py] [takahiroharuyama/openioc_scan](https://github.com/takahiroharuyama/openioc_scan) openioc_scan Volatility Framework plugin
- [**39**星][3y] [Shell] [superkojiman/rfishell](https://github.com/superkojiman/rfishell) Provide a shell-like interface for exploiting Remote File Inclusion vulnerabilities.
- [**39**星][1y] [Py] [sundaysec/andspoilt](https://github.com/sundaysec/andspoilt) Run interactive android exploits in linux.
+- [**39**星][4m] [C] [stephenrkell/trap-syscalls](https://github.com/stephenrkell/trap-syscalls) Monitor, rewrite and/or otherwise trap system calls... on Linux/x86-64 only, for now.
- [**39**星][5m] [HTML] [sophoslabs/cve-2019-0888](https://github.com/sophoslabs/cve-2019-0888) PoC for CVE-2019-0888 - Use-After-Free in Windows ActiveX Data Objects (ADO)
- [**39**星][3y] [C#] [sneaksensed/hiddentear](https://github.com/sneaksensed/hiddentear) HiddenTear Cyan Edition - A real life ransomware coded in C#
- [**39**星][6y] [C] [smartinm/diskcryptor](https://github.com/smartinm/diskcryptor) DiskCryptor - Open source partition encryption solution
- [**39**星][4y] [C++] [simutrace/simutrace](https://github.com/simutrace/simutrace) Tracing framework for full system simulators
- [**39**星][5m] [Py] [silv3rhorn/artifactextractor](https://github.com/silv3rhorn/artifactextractor) Extract common Windows artifacts from source images and VSCs
-- [**39**星][2m] [Go] [sensepost/go-out](https://github.com/sensepost/go-out)
-- [**39**星][7m] [C] [sensepost/frida-windows-playground](https://github.com/sensepost/frida-windows-playground) A collection of Frida hooks for experimentation on Windows platforms.
+- [**39**星][8m] [JS] [shadow-workers/shadow-workers](https://github.com/shadow-workers/shadow-workers) Shadow Workers is a free and open source C2 and proxy designed for penetration testers to help in the exploitation of XSS and malicious Service Workers (SW)
- [**39**星][4y] [Pascal] [senjaxus/delphi_remote_access_pc](https://github.com/senjaxus/delphi_remote_access_pc) Remote access in Delphi 7 and Delphi XE5 (With sharer files, CHAT and Forms Inheritance) || Acesso Remoto em Delphi 7 e Delphi XE5 (Com Compartilhador de Arquivos, CHAT e Herança de Formulários)
+- [**39**星][9m] [Py] [secgroup/mignis](https://github.com/secgroup/mignis) Mignis is a semantic based tool for firewall configuration.
+- [**39**星][13d] [Py] [sdnewhop/grinder](https://github.com/sdnewhop/grinder)
- [**39**星][1y] [JS] [sauldoescode/rilti.js](https://github.com/sauldoescode/rilti.js) a small opinionated future forward front-end framework
- [**39**星][3y] [C++] [sam-b/hacksysdriverexploits](https://github.com/sam-b/hacksysdriverexploits)
-- [**39**星][8m] [Py] [rr-/ida-images](https://github.com/rr-/ida-images) 图像预览插件,辅助查找图像解码函数(运行复杂代码,查看内存中是否存在图像)
+- [**39**星][9m] [Py] [sadfud/exploits](https://github.com/sadfud/exploits) Real world and CTFs exploiting web/binary POCs.
+- [**39**星][9m] [Py] [rr-/ida-images](https://github.com/rr-/ida-images) 图像预览插件,辅助查找图像解码函数(运行复杂代码,查看内存中是否存在图像)
+- [**39**星][3y] [C++] [rootkiter/reverse-engineering](https://github.com/rootkiter/reverse-engineering) 软件逆向
+- [**39**星][1y] [Batchfile] [romanzaikin/ollydbg-v1.10-with-best-plugins-and-immunity-debugger-theme-](https://github.com/romanzaikin/ollydbg-v1.10-with-best-plugins-and-immunity-debugger-theme-) Make OllyDbg v1.10 Look like Immunity Debugger & Best Plugins
- [**39**星][3y] [ActionScript] [riusksk/flashscanner](https://github.com/riusksk/flashscanner) Flash XSS Scanner
- [**39**星][5y] [PHP] [ridter/webshell](https://github.com/ridter/webshell) This is a webshell open source project
- [**39**星][2y] [Py] [resultsmayvary/ctf](https://github.com/resultsmayvary/ctf) CTF Writeups
- [**39**星][3y] [Py] [rebootuser/hashmash](https://github.com/rebootuser/hashmash) Hashmash is a tool to aid in generating hashes from user supplied values and Epochs
+- [**39**星][10m] [M4] [raspberrypi/usbbootgui](https://github.com/raspberrypi/usbbootgui) GUI for booting a Raspberry Pi device like Pi Zero or compute module as a device
- [**39**星][12m] [ranginang67/firecrack](https://github.com/ranginang67/firecrack)
- [**39**星][2y] [Java] [quhw/xtunnel](https://github.com/quhw/xtunnel) An useful TCP/SSL tunnel utility.
- [**39**星][6y] [Py] [proteansec/fuzzyftp](https://github.com/proteansec/fuzzyftp) The FTP fuzzer for Sulley and Peach.
+- [**39**星][3y] [Java] [portswigger/authz](https://github.com/portswigger/authz)
- [**39**星][2y] [C#] [phylliida/unityvoip](https://github.com/phylliida/unityvoip) [Doesn't work now sorry] Real time peer to peer voice chat in Unity, using CSCore, NSpeex, and UnityP2P
-- [**39**星][6m] [C++] [peperunas/pasticciotto](https://github.com/peperunas/pasticciotto) Polymorphic VM and PoliCTF '17 reversing challenge.
-- [**39**星][4m] [payloadbox/open-redirect-payload-list](https://github.com/payloadbox/open-redirect-payload-list)
-- [**39**星][1y] [PowerShell] [outflanknl/doh_c2_trigger](https://github.com/outflanknl/doh_c2_trigger) Code for blogpost:
-- [**39**星][4m] [TypeScript] [oleavr/frida-agent-example](https://github.com/oleavr/frida-agent-example) Example Frida agent written in TypeScript
-- [**39**星][17d] [Py] [ntdiff/ntdiff](https://github.com/ntdiff/ntdiff)
-- [**39**星][10d] [Ruby] [ninoseki/mihari](https://github.com/ninoseki/mihari) mihari is a sidekick tool for TheHive to monitor malicious hosts
+- [**39**星][2y] [VHDL] [pedrorivera/siafpgaminer](https://github.com/pedrorivera/siafpgaminer) VHDL FPGA design of an optimized Blake2b pipeline to mine Siacoin
+- [**39**星][1y] [PS] [outflanknl/doh_c2_trigger](https://github.com/outflanknl/doh_c2_trigger) Code for blogpost:
+- [**39**星][2m] [Go] [opencoff/go-tunnel](https://github.com/opencoff/go-tunnel) TLS/SSL Tunnel - A modern STunnel replacement written in golang
+- [**39**星][4m] [TS] [oleavr/frida-agent-example](https://github.com/oleavr/frida-agent-example) Example Frida agent written in TypeScript
+- [**39**星][4m] [CSS] [oasis-open/cti-documentation](https://github.com/oasis-open/cti-documentation) OASIS TC Open Repository: GitHub Pages site for STIX, CybOX, and TAXII
+- [**39**星][5d] [Py] [ntdiff/ntdiff](https://github.com/ntdiff/ntdiff)
+- [**39**星][10m] [Py] [noobscode/kalel](https://github.com/noobscode/kalel) Kal El Network Stress Test and Penetration Testing Toolkit
- [**39**星][1y] [Py] [netspi/spoofspotter](https://github.com/netspi/spoofspotter) A tool to catch spoofed NBNS responses.
- [**39**星][2y] [PHP] [nao-sec/mal_getter](https://github.com/nao-sec/mal_getter) Tool for dropping malware from EK
-- [**39**星][11d] [mykings/security-study-tutorial](https://github.com/mykings/security-study-tutorial) Summary of online learning materials
- [**39**星][2y] [Py] [mthbernardes/houseproxy](https://github.com/mthbernardes/houseproxy) Protect your parents from phishing
- [**39**星][2m] [Ruby] [mrackwitz/jeroboam](https://github.com/mrackwitz/jeroboam) Check all your apps on macOS for vulnerable Sparkle updaters
-- [**39**星][10m] [Py] [mpgn/beast-poc](https://github.com/mpgn/beast-poc)
-- [**39**星][6m] [HTML] [mindflavor/tdsbridge](https://github.com/mindflavor/tdsbridge) TDS Proxy library
+- [**39**星][11m] [Py] [mpgn/beast-poc](https://github.com/mpgn/beast-poc)
+- [**39**星][10m] [Go] [moriyoshi/devproxy](https://github.com/moriyoshi/devproxy) A swiss army knife of forward HTTP proxies
+- [**39**星][7m] [HTML] [mindflavor/tdsbridge](https://github.com/mindflavor/tdsbridge) TDS Proxy library
- [**39**星][2y] [milkdevil/ultimateapplockerbypasslist](https://github.com/milkdevil/ultimateapplockerbypasslist)
-- [**39**星][3m] [Py] [mikeperry-tor/vanguards](https://github.com/mikeperry-tor/vanguards) Vanguards help guard you from getting vanned...
- [**39**星][6y] [Perl] [micahflee/trollwot](https://github.com/micahflee/trollwot) Trolling the Web of Trust
-- [**39**星][5m] [Lua] [mame82/misc](https://github.com/mame82/misc)
+- [**39**星][6m] [Batchfile] [meesong/nt-crucial-modules](https://github.com/meesong/nt-crucial-modules) Collect different versions of Crucial modules.
+- [**39**星][7m] [Dockerfile] [marco-lancini/docker_burp](https://github.com/marco-lancini/docker_burp) Burp Pro as a Docker Container
- [**39**星][1m] [JS] [lydell/eslump](https://github.com/lydell/eslump) Fuzz testing JavaScript parsers and suchlike programs.
- [**39**星][10m] [lj147/awesome-wechat](https://github.com/lj147/awesome-wechat) 技术型干货分享公众号集合,点击公众号链接即可扫描快速二维码。
- [**39**星][3y] [Shell] [lawliet89/llvm-obfuscator](https://github.com/lawliet89/llvm-obfuscator) LLVM Obfuscator
+- [**39**星][2y] [JS] [laomu1988/koa2-proxy](https://github.com/laomu1988/koa2-proxy) 基于koa@next的代理工具,支持http和https,并且可以当做本地服务器使用
- [**39**星][4y] [C] [laginimaineb/waroftheworlds](https://github.com/laginimaineb/waroftheworlds) QSEE Shellcode to directly hijack the "Normal World" Linux Kernel
+- [**39**星][4m] [C#] [killeroo/powerping](https://github.com/killeroo/powerping) Advanced command-line ping tool
+- [**39**星][11m] [Py] [keli/furion](https://github.com/keli/furion) Socks5 + SSL Proxy
- [**39**星][3y] [Java] [kdkanishka/virustotal-public-api-v2.0-client](https://github.com/kdkanishka/virustotal-public-api-v2.0-client) VirusTotal public API 2.0 implementation in Java
-- [**39**星][3m] [Py] [karttoon/binsequencer](https://github.com/karttoon/binsequencer) BinSequencer is a script designed to find a common pattern of bytes within a set of samples and generate a YARA rule from the identified pattern.
-- [**39**星][2m] [jsecurity101/windows-api-to-sysmon-events](https://github.com/jsecurity101/windows-api-to-sysmon-events) A repository that maps API calls to Sysmon Event ID's.
- [**39**星][10m] [Go] [joanbono/gurp](https://github.com/joanbono/gurp) Burp Commander written in Go
+- [**39**星][3y] [Py] [jevalenciap/iptodomain](https://github.com/jevalenciap/iptodomain) This tool extract domains from IP address based in the information saved in virustotal.
- [**39**星][2y] [Py] [jas502n/st2-048](https://github.com/jas502n/st2-048) st2-048
-- [**39**星][2y] [PowerShell] [jaredhaight/powershellclasslab](https://github.com/jaredhaight/powershellclasslab)
+- [**39**星][2y] [PS] [jaredhaight/powershellclasslab](https://github.com/jaredhaight/powershellclasslab)
- [**39**星][2y] [Py] [jamespayor/vector-homomorphic-encryption](https://github.com/jamespayor/vector-homomorphic-encryption) 6.857 project - implementation of scheme for encrypting integer vectors that allows addition, linear transformation, and weighted inner products.
+- [**39**星][3m] [Go] [jakejarvis/subtake](https://github.com/jakejarvis/subtake) Automatic finder for subdomains vulnerable to takeover. Written in Go, based on
- [**39**星][10y] [izsh/ida-python-scripts](https://github.com/izsh/ida-python-scripts) IDA Python Scripts
- [**39**星][6y] [Clojure] [isecpartners/scout](https://github.com/isecpartners/scout) AWS EC2 and S3 Security Auditing Tool
+- [**39**星][2m] [igorbrigadir/twitter-advanced-search](https://github.com/igorbrigadir/twitter-advanced-search) Advanced Search for Twitter.
- [**39**星][2y] [HTML] [hugsy/codebro](https://github.com/hugsy/codebro) Web based code browser using clang to provide basic code analysis.
- [**39**星][3y] [Py] [houbbit/haveibeenpwned](https://github.com/houbbit/haveibeenpwned) Python script to verify multiple email addresses for pwnage
- [**39**星][3m] [C] [hlandau/ortega](https://github.com/hlandau/ortega) Ortega FDK
- [**39**星][3y] [C++] [hasherezade/petya_recovery](https://github.com/hasherezade/petya_recovery) Application for cracking Red Petya key based on genetic algorithms.
- [**39**星][4m] [hackingthings/publications](https://github.com/hackingthings/publications) All related files and slides for past talks
-- [**39**星][2y] [Py] [h0nus/spynoteshell](https://github.com/h0nus/spynoteshell) Simple Python tool for backdooring apks files (with meterpreter or shell of Metasploit)
- [**39**星][3y] [grrrdog/zeronights-hackquest-2016](https://github.com/grrrdog/zeronights-hackquest-2016) 2 web tasks from ZeroNights HackQuest 2016
- [**39**星][1y] [Dockerfile] [gmdutra/docker-inurlbr](https://github.com/gmdutra/docker-inurlbr) Advanced search in search engines, enables analysis provided to exploit GET / POST capturing emails & urls, with an internal custom validation junction for each target / url found.
-- [**39**星][19d] [JS] [github/enable-security-alerts-sample](https://github.com/github/enable-security-alerts-sample) This repository contains a sample script which can be used to enable security vulnerability alerts in all of the repositories in a given organization.
+- [**39**星][3m] [Py] [gh2o/rvi_capture](https://github.com/gh2o/rvi_capture) rvictl for Linux and Windows: capture packets sent/received by iOS devices
- [**39**星][7y] [C] [gdbinit/gimmedebugah](https://github.com/gdbinit/gimmedebugah) A small utility to inject a Info.plist into binaries.
- [**39**星][7m] [Go] [function61/holepunch-client](https://github.com/function61/holepunch-client) Totally self-contained SSH reverse tunnel written in Go
-- [**39**星][30d] [Py] [entynetproject/arissploit](https://github.com/entynetproject/arissploit) Arissploit Framework is a simple framework designed to master penetration testing tools. Arissploit Framework offers simple structure, basic CLI, and useful features for learning and developing penetration testing tools.
+- [**39**星][2y] [exploitagency/github-esploit](https://github.com/exploitagency/github-esploit) !!! Deprecated See ESPloitV2 !!! Original PoC(Released: Sep 11, 2016) - WiFi controlled keystroke injection Using ESP8266 and 32u4 based Arduino HID Keyboard Emulator
+- [**39**星][1y] [Dockerfile] [elejke/docker-socks5](https://github.com/elejke/docker-socks5) Docker для поднятия socks5 proxy сервера
- [**39**星][5m] [C++] [egebalci/keylogger](https://github.com/egebalci/keylogger) Simple C++ Keylogger...
+- [**39**星][2y] [Shell] [e-f-a/v3](https://github.com/e-f-a/v3) E.F.A version 3.x.x.x
+- [**39**星][1m] [d1nfinite/sec-interview](https://github.com/d1nfinite/sec-interview) 信息安全面试题汇总
- [**39**星][1y] [Py] [dissectmalware/malwarecmdmonitor](https://github.com/dissectmalware/malwarecmdmonitor) Shows command lines used by latest instances analyzed on Hybrid-Analysis
- [**39**星][1y] [Py] [dissectmalware/batch_deobfuscator](https://github.com/dissectmalware/batch_deobfuscator) Deobfuscate batch scripts obfuscated using string substitution and escape character techniques.
- [**39**星][3y] [Java] [directdefense/superserial-active](https://github.com/directdefense/superserial-active) SuperSerial-Active - Java Deserialization Vulnerability Active Identification Burp Extender
- [**39**星][5y] [Py] [dionach/passhunt](https://github.com/dionach/passhunt) Search drives for documents containing passwords
- [**39**星][4y] [JS] [digitalbond/canbus-utils](https://github.com/digitalbond/canbus-utils) Command line utilities for analyzing CANbus traffic
-- [**39**星][4y] [PowerShell] [dfinke/onegetgistprovider](https://github.com/dfinke/onegetgistprovider) Gist-as-a-Package - PackageManagement PowerShell Provider to interop with Github Gists
+- [**39**星][4y] [PS] [dfinke/onegetgistprovider](https://github.com/dfinke/onegetgistprovider) Gist-as-a-Package - PackageManagement PowerShell Provider to interop with Github Gists
- [**39**星][1y] [CSS] [destructivevoice/destructivefarm](https://github.com/destructivevoice/destructivefarm) Exploit farm for attack-defense CTF competitions
- [**39**星][5y] [C] [cyanogenmod/android_external_openssl](https://github.com/cyanogenmod/android_external_openssl) OpenSSL for Android
- [**39**星][5y] [JS] [csh/stegosploit](https://github.com/csh/stegosploit) IMAJS meet
- [**39**星][1y] [Py] [csecgroup/wafid](https://github.com/csecgroup/wafid) Wafid identify and fingerprint Web Application Firewall (WAF) products.
- [**39**星][2y] [Py] [cryptokrishtopher/binancescanner](https://github.com/cryptokrishtopher/binancescanner)
-- [**39**星][4m] [Java] [coveros/zap-sonar-plugin](https://github.com/coveros/zap-sonar-plugin) Integrates OWASP Zed Attack Proxy reports into SonarQube
+- [**39**星][5m] [Java] [coveros/zap-sonar-plugin](https://github.com/coveros/zap-sonar-plugin) Integrates OWASP Zed Attack Proxy reports into SonarQube
- [**39**星][4y] [C++] [corelan/pin](https://github.com/corelan/pin) Collection of pin tools
- [**39**星][3y] [C] [cn33liz/hsevd-arbitraryoverwritegdi](https://github.com/cn33liz/hsevd-arbitraryoverwritegdi) HackSys Extreme Vulnerable Driver - ArbitraryOverwrite Exploit using GDI
- [**39**星][4m] [cmlh/maltego-haveibeenpwned](https://github.com/cmlh/maltego-haveibeenpwned) Maltego integration of
- [**39**星][2y] [HTML] [chybeta/cve-2018-1000006-demo](https://github.com/chybeta/cve-2018-1000006-demo) The Demo for CVE-2018-1000006
- [**39**星][1y] [chichou/10.13.5-sip-bypass](https://github.com/chichou/10.13.5-sip-bypass)
-- [**39**星][21d] [Lua] [c0nw0nk/nginx-lua-anti-ddos](https://github.com/c0nw0nk/nginx-lua-anti-ddos) A Anti-DDoS script to protect Nginx web servers using Lua with a HTML Javascript based authentication puzzle inspired by Cloudflare I am under attack mode an Anti-DDoS authentication page protect yourself from every attack type All Layer 7 Attacks Mitigating Historic Attacks DoS DoS Implications DDoS All Brute Force Attacks Zero day exploits Soc…
- [**39**星][3y] [Py] [brianwrf/sambahunter](https://github.com/brianwrf/sambahunter) It is a simple script to exploit RCE for Samba (CVE-2017-7494 ).
+- [**39**星][5y] [JS] [breach/mod_strip](https://github.com/breach/mod_strip) Breach default layout / tabbing module
- [**39**星][11m] [Go] [boy-hack/gowhatweb](https://github.com/boy-hack/gowhatweb) [学习GO] go语言写的web指纹识别 - Identify websites by go language
+- [**39**星][2y] [Py] [bonelee/dns_tunnel_dectect_with_cnn](https://github.com/bonelee/dns_tunnel_dectect_with_cnn) dns tunnel dectect with CNN
- [**39**星][2y] [Java] [bit4woo/burp_collaborator_http_api](https://github.com/bit4woo/burp_collaborator_http_api) burp_collaborator_http_api: 基于Burp Collaborator的HTTP API
+- [**39**星][9m] [binarymist/holisticinfosec-for-webdevelopers-fascicle0](https://github.com/binarymist/holisticinfosec-for-webdevelopers-fascicle0)
- [**39**星][2y] [C] [bi-zone/rdtsc-checkvirt-poc](https://github.com/bi-zone/rdtsc-checkvirt-poc) rdtsc-checkvirt-poc: 利用预测执行(speculative execution)检测虚拟化
- [**39**星][9y] [OCaml] [berke/jsure](https://github.com/berke/jsure) JSure is a fast, standalone Javascript checker.
- [**39**星][7y] [C++] [bend/rar_crack](https://github.com/bend/rar_crack) A rar password cracker using brute force attack
-- [**39**星][11d] [C] [bdutro/ibm_pw_clear](https://github.com/bdutro/ibm_pw_clear) Small EFI utility that clears the power-on and setup passwords in IBM x3550/x3650 M3 servers
-- [**39**星][1y] [Lua] [bcsecorg/ethereum_devp2p_wireshark_dissector](https://github.com/bcsecorg/ethereum_devp2p_wireshark_dissector) This is Ethereum devp2p protocol dissector plugin for wireshark.
+- [**39**星][13d] [C] [bdutro/ibm_pw_clear](https://github.com/bdutro/ibm_pw_clear) Small EFI utility that clears the power-on and setup passwords in IBM x3550/x3650 M3 servers
+- [**39**星][2y] [Lua] [bcsecorg/ethereum_devp2p_wireshark_dissector](https://github.com/bcsecorg/ethereum_devp2p_wireshark_dissector) This is Ethereum devp2p protocol dissector plugin for wireshark.
- [**39**星][7m] [Py] [bbva/patton-cli](https://github.com/bbva/patton-cli) The knife of the Admin & Security auditor
- [**39**星][2y] [Go] [averagesecurityguy/searchscan](https://github.com/averagesecurityguy/searchscan) Search Nmap and Metasploit scanning scripts.
- [**39**星][3y] [JS] [auth0-blog/nodejs-awesome-polls](https://github.com/auth0-blog/nodejs-awesome-polls)
- [**39**星][3y] [C++] [attackercan/cpp-sql-fuzzer](https://github.com/attackercan/cpp-sql-fuzzer)
-- [**39**星][5m] [Py] [arthastang/router-exploit-shovel](https://github.com/arthastang/router-exploit-shovel) Automated Application Generation for Stack Overflow Types on Wireless Routers
- [**39**星][3y] [C] [arinerron/cve-2016-5195](https://github.com/arinerron/cve-2016-5195) Automated Android root via CVE-2016-5195 (dirtycow/dirtyc0w PoC)
- [**39**星][2y] [Roff] [apxar/xlog](https://github.com/apxar/xlog) web日志扫描工具
- [**39**星][2y] [ActionScript] [appsecco/json-flash-csrf-poc](https://github.com/appsecco/json-flash-csrf-poc) This repo contains the files required to perform a CSRF attack using Flash and HTTP 307 redirections.
- [**39**星][2y] [Java] [aninstein/network-security-situation-awareness-system](https://github.com/aninstein/network-security-situation-awareness-system) 综合了资产检测,主机扫描,流量分析等技术,通过这些技术取得网络资产,脆弱性,威胁等指标,从而根据这些指标计算出当前网络的网络安全态势。
- [**39**星][3y] [C] [andnxor/andnxor_dc24_badge](https://github.com/andnxor/andnxor_dc24_badge) AND!XOR DEFCON 24 Badge HW and SW
-- [**39**星][4m] [PowerShell] [absozed/steamprivesc](https://github.com/absozed/steamprivesc) Simple tool collection for escalation to NT AUTHORITY\SYSTEM from recently disclosed Steam Client Zero Day
-- [**39**星][5m] [1135/1135-cobaltstrike-toolkit](https://github.com/1135/1135-cobaltstrike-toolkit) about CobaltStrike
+- [**39**星][4m] [PS] [absozed/steamprivesc](https://github.com/absozed/steamprivesc) Simple tool collection for escalation to NT AUTHORITY\SYSTEM from recently disclosed Steam Client Zero Day
- [**39**星][1y] [dcid/ossec-hids](https://bitbucket.org/dcid/ossec-hids)
-- [**38**星][2d] [worawit/cve-2019-0708](https://github.com/worawit/cve-2019-0708) CVE-2019-0708 (BlueKeep)
-- [**38**星][4y] [Py] [joxeankoret/tahh](https://github.com/joxeankoret/tahh) Source codes for "The Antivirus Hackers Handbook" book.
+- [**38**星][2m] [Py] [kamingchan/shadowsocks-munager](https://github.com/kamingchan/shadowsocks-munager) Middleware of shadowsocks-libev and sspanel
+- [**38**星][1m] [Lua] [hackertarget/nmap-nse-scripts](https://github.com/hackertarget/nmap-nse-scripts) Nmap NSE scripts that have been customised or created
+- [**38**星][] [Rust] [verideth/dll_hook-rs](https://github.com/verideth/dll_hook-rs) Rust code to show how hooking in rust with a dll works.
- [**38**星][3y] [HTML] [cryptogenic/ps4-playground-3.55](https://github.com/cryptogenic/ps4-playground-3.55) A 3.55 implementation of PS4 Playground (based on CTurt's 1.76 original)
- [**38**星][5y] [Py] [internetwache/ssh-honeypot](https://github.com/internetwache/ssh-honeypot) Simple SSH Honeypot in Python
-- [**38**星][11m] [Java] [thelinuxchoice/droidcam](https://github.com/thelinuxchoice/droidcam) Script to generate an Android App to take photos from Cameras
-- [**38**星][2y] [Py] [liang2580/btpanel-ss](https://github.com/liang2580/btpanel-ss) 基于宝塔Linux面板的shadowsocks可视化管理插件
-- [**38**星][13d] [Verilog] [lvd2/ay-3-8910_reverse_engineered](https://github.com/lvd2/ay-3-8910_reverse_engineered) The reverse-engineered AY-3-8910 chip. Transistor-level schematics, verilog model and a testbench with tools, that can render register dump files into .flac soundtrack.
-- [**38**星][2m] [Py] [fireeye/win10_volatility](https://github.com/fireeye/win10_volatility) An advanced memory forensics framework
-- [**38**星][1m] [mohitkhemchandani/oscp_bible](https://github.com/mohitkhemchandani/oscp_bible) This is a collection of resources, scripts, bookmarks, writeups, notes, cheatsheets that will help you in OSCP Preparation as well as for general pentesting and learning. If you feel like you can contribute in it. Please do that, I'll appreciate you.
+- [**38**星][4m] [HCL] [trailofbits/algo-ng](https://github.com/trailofbits/algo-ng) Experimental version of Algo built on Terraform
+- [**38**星][3y] [wtsxdev/exploit-development](https://github.com/wtsxdev/exploit-development) Resources for learning about Exploit Development
+- [**38**星][3m] [Py] [fireeye/win10_volatility](https://github.com/fireeye/win10_volatility) An advanced memory forensics framework
- [**38**星][3m] [C++] [aliyuchang33/hv2ray](https://github.com/aliyuchang33/hv2ray) A linux GUI tool for v2ray base on QT.
+- [**38**星][3m] [Py] [oasis-open/cti-taxii-client](https://github.com/oasis-open/cti-taxii-client) OASIS TC Open Repository: TAXII 2 Client Library Written in Python
- [**38**星][7m] [Py] [k8gege/ciscoexploit](https://github.com/k8gege/ciscoexploit) Cisco Exploit (CVE-2019-1821 Cisco Prime Infrastructure Remote Code Execution/CVE-2019-1653/Cisco SNMP RCE/Dump Cisco RV320 Password)
-- [**38**星][25d] [Shell] [phspade/automated-scanner](https://github.com/phspade/automated-scanner) Trying to make automated recon for bug bounties
+- [**38**星][18d] [Swift] [fonta1n3/fullynoded](https://github.com/fonta1n3/fullynoded) A Bitcoin Core GUI for iOS devices. Allows you to connect to and control multiple nodes via Tor
- [**38**星][1m] [lucasnaja/useful-dev-tools](https://github.com/lucasnaja/useful-dev-tools)
-- [**38**星][2m] [JS] [iwinston/javascript-code-protection-example](https://github.com/iwinston/javascript-code-protection-example) An example of JavaScript code protection
+- [**38**星][3m] [JS] [iwinston/javascript-code-protection-example](https://github.com/iwinston/javascript-code-protection-example) An example of JavaScript code protection
- [**38**星][2y] [Py] [walkerfuz/pydbgeng](https://github.com/walkerfuz/PyDbgEng) a python wrapper of debug engines on windows, linux or osx, it's only aim to auto fuzzing.
- [**38**星][2y] [vysecurity/cobaltsplunk](https://github.com/vysecurity/CobaltSplunk) Splunk Dashboard for CobaltStrike logs
- [**38**星][1y] [C++] [contionmig/lsass-usermode-bypass](https://github.com/ContionMig/LSASS-Usermode-Bypass) This bypass is for anti cheats like battleye and EAC. All this does is abuse lsass's handles and use them for yourself. This is quite useful as this is usermode which doesnt require you to find a way to load a driver
- [**38**星][3y] [C++] [hluwa/smali-anti-usageseach](https://github.com/hluwa/Smali-Anti-UsageSeach) 隐藏关键方法的相关调用
- [**38**星][2y] [Py] [pegasuslab/wifi-miner-detector](https://github.com/PegasusLab/WiFi-Miner-Detector) Detecting malicious WiFi with mining cryptocurrency.
- [**38**星][4m] [Py] [projecthorus/wenet](https://github.com/projecthorus/wenet) Wenet ("The Swift One") - Transmit and Receive code for the Project Horus High-Speed Imagery Payload.
-- [**38**星][10m] [Java] [tijme/similar-request-excluder](https://github.com/tijme/similar-request-excluder) A Burp Suite extension that automatically marks similar requests as 'out-of-scope'.
- [**38**星][4y] [C] [dadas190/penetrator-wps](https://github.com/dadas190/penetrator-wps) 实时攻击多个启用了WPS的AP
- [**38**星][5y] [C++] [livemirror/pcshare](https://github.com/LiveMirror/pcshare)
- [**38**星][2y] [C++] [lijuno/nrf24_ble](https://github.com/lijuno/nRF24_BLE) Hacking nRF24L01+ as a low-cost BLE beacon
- [**38**星][1y] [Py] [initstring/evil-ssdp](https://gitlab.com/initstring/evil-ssdp)
-- [**38**星][3y] [C++] [zibility/anti-rootkits](https://github.com/zibility/anti-rootkits) 内核级ARK工具。
- [**38**星][3y] [JS] [zhuzhibo0/sslcloud](https://github.com/zhuzhibo0/sslcloud)
- [**38**星][8m] [Py] [zeroq/amun](https://github.com/zeroq/amun) Amun Honeypot
- [**38**星][2y] [Py] [ytisf/muninn](https://github.com/ytisf/muninn) A short and small memory forensics helper.
+- [**38**星][1m] [Py] [yaleimeng/free_proxy_pool](https://github.com/yaleimeng/free_proxy_pool) 对免费代理IP网站进行爬取,收集汇总为自己的代理池。关键是验证代理的有效性、匿名性、去重复
+- [**38**星][4y] [Java] [xyntax/jboss-exp](https://github.com/xyntax/jboss-exp) java反序列化漏洞利用-JBOSS(含payload生成的java项目,漏洞利用py脚本,shodan部分目标主机搜索结果)
- [**38**星][5y] [PHP] [xpaw/httpsys](https://github.com/xpaw/httpsys)
-- [**38**星][3y] [HTML] [xiaoyanguoke/ciahackingtools](https://github.com/xiaoyanguoke/ciahackingtools) WikiLeaks Vault 7 CIA Hacking Tools
+- [**38**星][5y] [xionox/moz-tor-relays](https://github.com/xionox/moz-tor-relays)
- [**38**星][6y] [C] [x43x61x69/mach-o-prettifier](https://github.com/x43x61x69/mach-o-prettifier) A Mach-O Load Command deobfuscator.
- [**38**星][3m] [Lua] [wubonetcn/luawaf](https://github.com/wubonetcn/luawaf) A secure and privately deployable web application firewall(WAF).一个安全、可私有部署的Web应用防火墙(WAF)。
- [**38**星][3m] [Java] [voorivex/andrill](https://github.com/voorivex/andrill) a vulnerable mobile application interacting with a back-end API
-- [**38**星][8m] [Shell] [userlandkernel/plataoplomo](https://github.com/userlandkernel/plataoplomo) Collection of (at time of release) iOS bugs I found
-- [**38**星][2y] [C] [tum-i22/obfuscation-benchmarks](https://github.com/tum-i22/obfuscation-benchmarks) A set of programs used for benchmarking the strength of obfuscation
-- [**38**星][8d] [JS] [tryghost/gscan](https://github.com/tryghost/gscan) Ghost theme scanner - checks for errors and feature support
+- [**38**星][10d] [JS] [tryghost/gscan](https://github.com/tryghost/gscan) Ghost theme scanner - checks for errors and feature support
- [**38**星][8m] [Go] [tripwire/padcheck](https://github.com/tripwire/padcheck) TLS CBC Padding Oracle Checker
-- [**38**星][26d] [Py] [trailofbits/manticore-examples](https://github.com/trailofbits/manticore-examples) Example Manticore scripts
+- [**38**星][28d] [Py] [trailofbits/manticore-examples](https://github.com/trailofbits/manticore-examples) Example Manticore scripts
- [**38**星][3y] [CSS] [thundercls/x64dbg_vs_dark](https://github.com/thundercls/x64dbg_vs_dark) x64dbg stylesheet like visual studio dark theme
- [**38**星][3y] [HTML] [thugs-rumal/rumal](https://github.com/thugs-rumal/rumal) Thug's Rumāl: a Thug's dress & weapon
- [**38**星][8m] [Java] [thomasdarimont/spring-boot-admin-keycloak-example](https://github.com/thomasdarimont/spring-boot-admin-keycloak-example) Example for protecting Spring Boot Admin & Spring Boot Actuator endpoints with Keycloak
-- [**38**星][2y] [Py] [thecjw/ida_android_script](https://github.com/thecjw/ida_android_script) 辅助Android调试的IDAPython脚本
- [**38**星][4y] [HTML] [tevora-threat/splunk_pentest_app](https://github.com/tevora-threat/splunk_pentest_app) splunk_pentest_app
- [**38**星][3m] [HTML] [terjanq/flag-capture](https://github.com/terjanq/flag-capture) Solutions and write-ups from security-based competitions also known as Capture The Flag competition
- [**38**星][3y] [team-firebugs/burp-lfi-tests](https://github.com/team-firebugs/burp-lfi-tests) Fuzzing for LFI using Burpsuite
-- [**38**星][21d] [YARA] [te-k/pe](https://github.com/te-k/pe) CLI tool to analyze PE files
+- [**38**星][23d] [YARA] [te-k/pe](https://github.com/te-k/pe) CLI tool to analyze PE files
+- [**38**星][2y] [C++] [tanninone/usvfs](https://github.com/tanninone/usvfs) library using api hooking to implement process-local filesystem-independent file links.
- [**38**星][1y] [Py] [tanc7/arms-commander](https://github.com/tanc7/arms-commander) Malware Suite/Menu designed for "Speedy and No-Mistakes Penetration Testing", written in Python 2.7.13 and tested on Kali Linux 4.6 & 4.9, originally intended to only perform the Reconnaissance and Enumeration Stages (it's role is dramatically expanded now). Requires Python 2.7 + Pip + Termcolor Module. All code is entirely free to be used in yo…
- [**38**星][4y] [C] [taichisocks/shadowsocks](https://github.com/taichisocks/shadowsocks) Lightweight shadowsocks client for iOS and Mac OSX base on shadowsocks-libev
- [**38**星][2y] [C++] [struct/hardenedpartitionalloc](https://github.com/struct/hardenedpartitionalloc) A forked and hardened version of PartitionAlloc from Chrome's Blink engine
-- [**38**星][19d] [C] [stefanberger/libtpms](https://github.com/stefanberger/libtpms) The libtpms library provides software emulation of a Trusted Platform Module (TPM 1.2 and TPM 2.0)
+- [**38**星][6d] [C] [stefanberger/libtpms](https://github.com/stefanberger/libtpms) The libtpms library provides software emulation of a Trusted Platform Module (TPM 1.2 and TPM 2.0)
+- [**38**星][3m] [spiderlabs/iocs-idps](https://github.com/spiderlabs/iocs-idps) This repository will hold PCAP IOC data related with known malware samples (owner: Bryant Smith)
- [**38**星][3y] [C] [spender-sandbox/cuckoomon-modified](https://github.com/spender-sandbox/cuckoomon-modified) Modified edition of cuckoomon
- [**38**星][6y] [C] [shjalayeri/pwnypot](https://github.com/shjalayeri/pwnypot) PwnyPot, High Interaction Client Honeypot
- [**38**星][2y] [C] [shellbombs/strongod](https://github.com/shellbombs/strongod) StrongOD(anti anti-debug plugin) driver source code.
-- [**38**星][8m] [JS] [shadow-workers/shadow-workers](https://github.com/shadow-workers/shadow-workers) Shadow Workers is a free and open source C2 and proxy designed for penetration testers to help in the exploitation of XSS and malicious Service Workers (SW)
+- [**38**星][4y] [Assembly] [sh3llc0d3r1337/windows_reverse_shell_1](https://github.com/sh3llc0d3r1337/windows_reverse_shell_1) Windows Reverse Shell shellcode
- [**38**星][3y] [C] [scubsrgroup/taint-analyse](https://github.com/scubsrgroup/taint-analyse) Windows平台下的细粒度污点分析工具
-- [**38**星][12d] [Go] [scrapinghub/crawlera-headless-proxy](https://github.com/scrapinghub/crawlera-headless-proxy) A complimentary proxy to help to use Crawlera with headless browsers
+- [**38**星][14d] [Go] [scrapinghub/crawlera-headless-proxy](https://github.com/scrapinghub/crawlera-headless-proxy) A complimentary proxy to help to use Crawlera with headless browsers
- [**38**星][3y] [C++] [scalys7/privilege-escalation-framework](https://github.com/scalys7/privilege-escalation-framework) Privilege Escilation training project, with an emphasis on the distinction between vulnerability research & it's exposure and exploitation methods(which are CVE-independent.)
- [**38**星][4y] [C++] [sam-b/cve-2014-4113](https://github.com/sam-b/cve-2014-4113) Trigger and exploit code for CVE-2014-4113
- [**38**星][2y] [Py] [saelo/ida_scripts](https://github.com/saelo/ida_scripts) 多脚本
- [kernelcache](https://github.com/saelo/ida_scripts/blob/master/kernelcache.py) 识别并重命名iOS kernelcache函数stub。ARM64 Only
- [ssdt](https://github.com/saelo/ida_scripts/blob/master/ssdt.py) 解析Windows内核中的syscall表
-- [**38**星][9m] [Py] [sadfud/exploits](https://github.com/sadfud/exploits) Real world and CTFs exploiting web/binary POCs.
+- [**38**星][11d] [Py] [saeeddhqan/maryam](https://github.com/saeeddhqan/maryam) Open-source Intelligence(OSINT) Framework
- [**38**星][1y] [Shell] [rordi/docker-antivirus](https://github.com/rordi/docker-antivirus) Docker antivirus & malware scanning (antivirus as a microservice / antivirus as a container)
-- [**38**星][10m] [PowerShell] [rootup/redteam](https://github.com/rootup/redteam) One line PS scripts that may come handy during your network assesment
-- [**38**星][3y] [C++] [rootkiter/reverse-engineering](https://github.com/rootkiter/reverse-engineering) 软件逆向
+- [**38**星][10m] [PS] [rootup/redteam](https://github.com/rootup/redteam) One line PS scripts that may come handy during your network assesment
- [**38**星][2y] [Py] [roothaxor/pystat](https://github.com/roothaxor/pystat) Advanced Netstat Using Python For Windows
-- [**38**星][1y] [Batchfile] [romanzaikin/ollydbg-v1.10-with-best-plugins-and-immunity-debugger-theme-](https://github.com/romanzaikin/ollydbg-v1.10-with-best-plugins-and-immunity-debugger-theme-) Make OllyDbg v1.10 Look like Immunity Debugger & Best Plugins
- [**38**星][3y] [Py] [ring04h/wyscan](https://github.com/ring04h/wyscan) WooYun Network Scanner
- [**38**星][2y] [HTML] [rh0dev/expdev](https://github.com/rh0dev/expdev) exploit development
- [**38**星][7y] [Java] [ravn/jsocks](https://github.com/ravn/jsocks) Updates for
-- [**38**星][21d] [Ruby] [rapid7/rex-powershell](https://github.com/rapid7/rex-powershell) Rex library for dealing with Powershell Scripts
-- [**38**星][11d] [q1271964185/cyberspace_security_learning](https://github.com/q1271964185/cyberspace_security_learning) 在学习CTF、网络安全路上整合自己博客和一些资料,持续更新~
+- [**38**星][23d] [Ruby] [rapid7/rex-powershell](https://github.com/rapid7/rex-powershell) Rex library for dealing with Powershell Scripts
+- [**38**星][13d] [q1271964185/cyberspace_security_learning](https://github.com/q1271964185/cyberspace_security_learning) 在学习CTF、网络安全路上整合自己博客和一些资料,持续更新~
- [**38**星][3y] [Py] [programa-stic/marvin-dynamic-analyzer](https://github.com/programa-stic/marvin-dynamic-analyzer) Dynamic android vulnerability scanner using OpenNebula and Android-x86 emulators.
-- [**38**星][2y] [PowerShell] [politoinc/elk-hunting](https://github.com/politoinc/elk-hunting) Threat Hunting with ELK Workshop (InfoSecWorld 2017)
+- [**38**星][2y] [PS] [politoinc/elk-hunting](https://github.com/politoinc/elk-hunting) Threat Hunting with ELK Workshop (InfoSecWorld 2017)
- [**38**星][7m] [Java] [pnfsoftware/jnihelper](https://github.com/pnfsoftware/jnihelper) jeb-plugin-android-jni-helper
- [**38**星][2y] [Py] [phishai/idn_generator](https://github.com/phishai/idn_generator) idn_generator: 生成相似的IDN域名
-- [**38**星][30d] [Lua] [hackertarget/nmap-nse-scripts](https://github.com/hackertarget/nmap-nse-scripts) Nmap NSE scripts that have been customised or created
+- [**38**星][1m] [Lua] [hackertarget/nmap-nse-scripts](https://github.com/hackertarget/nmap-nse-scripts) Nmap NSE scripts that have been customised or created
+- [**38**星][3d] [PLpgSQL] [percona-qa/percona-qa](https://github.com/percona-qa/percona-qa) Percona QA is a suite of scripts and utilities that assists in building, continuous integration, automated testing & bug reporting for Percona Server, Percona XtraDB Cluster, Percona XtraBackup, Percona Server for MongoDB, as well as other flavors of MySQL (Oracle, Facebook MyQSL, WebScaleSQL, MariaDB) etc.
+- [**38**星][6m] [C++] [peperunas/pasticciotto](https://github.com/peperunas/pasticciotto) Polymorphic VM and PoliCTF '17 reversing challenge.
- [**38**星][4m] [Py] [outflanknl/redfile](https://github.com/outflanknl/redfile) A flask wsgi application that serves files with intelligence, good for serving conditional RedTeam payloads
-- [**38**星][2m] [Go] [opencoff/go-tunnel](https://github.com/opencoff/go-tunnel) TLS/SSL Tunnel - A modern STunnel replacement written in golang
-- [**38**星][1y] [Objective-C] [omerporze/brokentooth](https://github.com/omerporze/brokentooth) POC for CVE-2018-4327
-- [**38**星][11d] [olbat/nvdcve](https://github.com/olbat/nvdcve) NVD/CVE as JSON files
-- [**38**星][6y] [Objective-C] [nzn/nsuserdefaults-aesencryptor](https://github.com/nzn/nsuserdefaults-aesencryptor) NSUserDefaults category with AES encrypt/decrypt keys and values.
+- [**38**星][1y] [ObjC] [omerporze/brokentooth](https://github.com/omerporze/brokentooth) POC for CVE-2018-4327
+- [**38**星][2d] [olbat/nvdcve](https://github.com/olbat/nvdcve) NVD/CVE as JSON files
+- [**38**星][6y] [ObjC] [nzn/nsuserdefaults-aesencryptor](https://github.com/nzn/nsuserdefaults-aesencryptor) NSUserDefaults category with AES encrypt/decrypt keys and values.
- [**38**星][4y] [Py] [northbit/bulletin-scraper](https://github.com/northbit/bulletin-scraper) Download all of Microsoft's security updates and symbols
- [**38**星][4y] [Py] [nonenotnull/regeorg](https://github.com/nonenotnull/regeorg) The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.
- [**38**星][3y] [C++] [nccgroup/pip3line](https://github.com/nccgroup/pip3line) The Swiss army knife of byte manipulation
- [**38**星][4y] [Py] [mozilla/minion-backend](https://github.com/mozilla/minion-backend) Minion Backend
-- [**38**星][3m] [Py] [momalab/icsref](https://github.com/momalab/icsref) A tool for reverse engineering industrial control systems binaries.
- [**38**星][2y] [Shell] [mitchellkrogza/fail2ban.webexploits](https://github.com/mitchellkrogza/fail2ban.webexploits) This custom Fail2Ban filter and jail will deal with all scans for common Wordpress, Joomla and other Web Exploits being scanned for by automated bots and those seeking to find exploitable web sites.
- [**38**星][2y] [Py] [mcw0/pwn-hisilicon-dvr](https://github.com/mcw0/pwn-hisilicon-dvr)
- [**38**星][3y] [Shell] [mcous/kicad-lib](https://github.com/mcous/kicad-lib) Repository for my KiCad components and footprints
- [**38**星][7y] [Py] [matthewdfuller/intellifuzz-xss](https://github.com/matthewdfuller/intellifuzz-xss) An adaptive, intelligent XSS fuzzer that learns how the response is reflected and carefully crafts an XSS payload to match
- [**38**星][2m] [C#] [mashed-potatoes/usbtrojan](https://github.com/mashed-potatoes/usbtrojan) Super simple loader that spreads over removable drives (USB flash drives, portable and network drives, SD cards). Features: You can add the HWID of your PC to the whitelist and trojan will ignore it; You can add any payload (executable file); Slient work. Ideal for school, university or office.
-- [**38**星][7m] [Dockerfile] [marco-lancini/docker_burp](https://github.com/marco-lancini/docker_burp) Burp Pro as a Docker Container
+- [**38**星][5m] [Assembly] [marespiaut/rayman_disasm](https://github.com/marespiaut/rayman_disasm) Reverse-engineering effort for the 1995 MS-DOS game “Rayman”
- [**38**星][7y] [Py] [mainframed/mfsniffer](https://github.com/mainframed/mfsniffer) Mainframe TN3270 unencrypted TSO session user ID and password sniffer
+- [**38**星][2y] [Assembly] [macmade/obfuscate](https://github.com/macmade/obfuscate) C/C++ machine code obfuscation.
+- [**38**星][2y] [Py] [m4n3dw0lf/sslkill](https://github.com/m4n3dw0lf/sslkill) Forced Man-In-The-Middle HTTPs-Avoiding Reverse Proxy
- [**38**星][5m] [Py] [lukacci/cpuhunter](https://github.com/lukacci/cpuhunter)
- [**38**星][1y] [C] [luigirizzo/netmap-ipfw](https://github.com/luigirizzo/netmap-ipfw) Automatically exported from code.google.com/p/netmap-ipfw
- [**38**星][12m] [Py] [luh2/detectdynamicjs](https://github.com/luh2/detectdynamicjs) The DetectDynamicJS Burp Extension provides an additional passive scanner that tries to find differing content in JavaScript files and aid in finding user/session data.
@@ -13385,19 +14297,20 @@ networking routines
- [**38**星][1y] [JS] [lmammino/webhook-tunnel](https://github.com/lmammino/webhook-tunnel) A little HTTP proxy suitable to create tunnels for webhook endpoints protected behind a firewall or a VPN
- [**38**星][7m] [Py] [llt4l/iculeak.py](https://github.com/llt4l/iculeak.py) Tool to find and extract credentials from phone configuration files hosted on CUCM
- [**38**星][1y] [Py] [linted/linuxprivchecker](https://github.com/linted/linuxprivchecker) linuxprivchecker.py -- a Linux Privilege Escalation Check Script
-- [**38**星][4y] [C++] [lingerhk/0net](https://github.com/lingerhk/0net) 一个简单的Windows远程控制后门
+- [**38**星][3y] [Py] [lifetyper/asynchttpsdns](https://github.com/lifetyper/asynchttpsdns) DNS Over Https Powered By Asyncio
- [**38**星][2y] [Py] [lavalamp-/ws-backend-community](https://github.com/lavalamp-/ws-backend-community) Web Sight Back-end Community Edition
- [**38**星][3y] [C++] [kurapicabs/x64_tracer](https://github.com/kurapicabs/x64_tracer) x64dbg conditional branches logger [Plugin]
- [**38**星][3y] [PHP] [keyus/xss](https://github.com/keyus/xss) php写的个人研究测试用的 xss cookie 攻击管理平台,开源出来
- [**38**星][3y] [Py] [kevthehermit/volatility_plugins](https://github.com/kevthehermit/volatility_plugins) Volatility Plugins
- [**38**星][1y] [Py] [kernelmachine/haveibeenpwned](https://github.com/kernelmachine/haveibeenpwned) Python interface to Have I Been Pwned API
- [**38**星][3y] [C++] [k2/languagebackdoors](https://github.com/k2/languagebackdoors) Compiler exploits and exploitable non-obvious source code back doors.
-- [**38**星][2m] [Rust] [jwillbold/rusty-jsyc](https://github.com/jwillbold/rusty-jsyc) JavaScript-To-Bytecode compiler written in Rust
+- [**38**星][3d] [Rust] [jwillbold/rusty-jsyc](https://github.com/jwillbold/rusty-jsyc) JavaScript-To-Bytecode compiler written in Rust
+- [**38**星][9m] [Rust] [juxhindb/synner](https://github.com/juxhindb/synner) A TCP SYN flood client written in Rust, powered by libpnet
- [**38**星][10m] [PHP] [jsmitty12/phpwhois](https://github.com/jsmitty12/phpwhois) phpWhois general repository
- [**38**星][2y] [Py] [jpiechowka/jenkins-cve-2016-0792](https://github.com/jpiechowka/jenkins-cve-2016-0792) Exploit for Jenkins serialization vulnerability - CVE-2016-0792
-- [**38**星][3y] [Visual Basic] [johnlatwc/macrojob](https://github.com/johnlatwc/macrojob) Proof of concept VBA code to add to Normal.dot to put restrictions on Word
+- [**38**星][3y] [Visual Basic .NET] [johnlatwc/macrojob](https://github.com/johnlatwc/macrojob) Proof of concept VBA code to add to Normal.dot to put restrictions on Word
- [**38**星][4y] [Shell] [jivoi/ansible-pentest-with-tor](https://github.com/jivoi/ansible-pentest-with-tor) Use Tor for anonymous scanning with nmap
-- [**38**星][3y] [Py] [jevalenciap/iptodomain](https://github.com/jevalenciap/iptodomain) This tool extract domains from IP address based in the information saved in virustotal.
+- [**38**星][9d] [C] [jedisct1/libhydrogen](https://github.com/jedisct1/libhydrogen) A lightweight, secure, easy-to-use crypto library suitable for constrained environments.
- [**38**星][1y] [Java] [javafxports/javafxmobile-plugin](https://github.com/javafxports/javafxmobile-plugin) A gradle plugin for building mobile applications in java.
- [**38**星][2y] [Py] [jasondoyle/google-nest-cam-bug-disclosures](https://github.com/jasondoyle/google-nest-cam-bug-disclosures)
- [**38**星][5y] [Py] [jakev/oat2dex-python](https://github.com/jakev/oat2dex-python) Extract DEX files from an ART ELF binary
@@ -13405,131 +14318,154 @@ networking routines
- [**38**星][4m] [Py] [initstring/lyricpass](https://github.com/initstring/lyricpass) Password wordlist generator using song lyrics for targeted bruteforce audits / attacks. Useful for penetration testing or security research.
- [**38**星][3y] [PHP] [incredibleindishell/local-file-disclosure-sql-injection-lab](https://github.com/incredibleindishell/local-file-disclosure-sql-injection-lab) This is sample code to demonstrate how one can use SQL Injection vulnerability to download local file from server in specific condition. If you have any doubt, ping me at
- [**38**星][3y] [Py] [hcamael/ctf-library](https://github.com/hcamael/ctf-library) 之Crypto
+- [**38**星][5y] [Py] [hackedteam/test-av2](https://github.com/hackedteam/test-av2) Automated antivirus test environment (new version)
+- [**38**星][1y] [Java] [guolei1130/global_httpdns](https://github.com/guolei1130/global_httpdns) 全局HttpDns替换方案
- [**38**星][1y] [C#] [greycorbel/admpwd](https://github.com/greycorbel/admpwd) AdmPwd project
- [**38**星][3y] [C] [gnoxter/mountain_goat](https://github.com/gnoxter/mountain_goat) A PoC demonstrating techniques exploiting CVE-2016-5696 Off-Path TCP Exploits: Global Rate Limit Considered Dangerous
- [**38**星][7m] [githubixx/ansible-role-harden-linux](https://github.com/githubixx/ansible-role-harden-linux) Ansible role for hardening Linux (targeting Ubuntu 16.04/18.04 mainly)
-- [**38**星][3m] [Py] [gh2o/rvi_capture](https://github.com/gh2o/rvi_capture) rvictl for Linux and Windows: capture packets sent/received by iOS devices
- [**38**星][5y] [C] [gdbinit/kextstat_aslr](https://github.com/gdbinit/kextstat_aslr) Implementation of kexstat via /dev/kmem with kernel ASLR support
+- [**38**星][10d] [JS] [frida/frida-compile](https://github.com/frida/frida-compile) Compile a Frida script comprised of one or more Node.js modules
- [**38**星][3y] [Py] [fotisl/utimaco](https://github.com/fotisl/utimaco) Tools for reverse engineering the Utimaco Firmware
- [**38**星][1y] [c++] [fluc-uc/emusdk](https://github.com/fluc-uc/emusdk) A simple SDK intended for people new to internal cheats. Written while I was drunk.
- [**38**星][1y] [C++] [firelizzard18/dc26-badge](https://github.com/firelizzard18/dc26-badge) DefCon 26 Badge Hacking
- [**38**星][4y] [Py] [fire30/ps4-2014-1303-poc](https://github.com/fire30/ps4-2014-1303-poc)
-- [**38**星][1y] [PHP] [farisv/cj2018-final-ctf](https://github.com/farisv/cj2018-final-ctf) Cyber Jawara 2018 Final - Attack & Defense CTF services environments based on Docker.
- [**38**星][3y] [Py] [exploitx3/fuzzbunch](https://github.com/exploitx3/fuzzbunch) FUZZBUNCH - NSA security tools
- [**38**星][2y] [Go] [evilsocket/brutemachine](https://github.com/evilsocket/brutemachine) A Go library which main purpose is giving an interface to loop over a dictionary and use those words/lines as input for some custom logic such as HTTP file bruteforcing, DNS bruteforcing, etc.
- [**38**星][7y] [Py] [evilcry/pythonscripts](https://github.com/evilcry/pythonscripts) Collection of my Python Scripts
- [**38**星][1y] [C] [en14c/pivirus](https://github.com/en14c/pivirus) sample linux x86_64 ELF virus
-- [**38**星][12d] [OCaml] [draperlaboratory/cbat_tools](https://github.com/draperlaboratory/cbat_tools) Program analysis tools developed at Draper on the CBAT project.
+- [**38**星][7d] [OCaml] [draperlaboratory/cbat_tools](https://github.com/draperlaboratory/cbat_tools) Program analysis tools developed at Draper on the CBAT project.
+- [**38**星][2d] [C] [dnsdb/dnsdbq](https://github.com/dnsdb/dnsdbq) DNSDB API Client, C Version
+- [**38**星][4y] [Py] [danmcinerney/autoresp](https://github.com/danmcinerney/autoresp) Runs Responder, uploads hashes for cracking, alerts when cracked
- [**38**星][5y] [Julia] [danluu/fuzz.jl](https://github.com/danluu/fuzz.jl) World's dumbest fuzzer
-- [**38**星][10m] [PowerShell] [curtbraz/invoke-neutralizeav](https://github.com/curtbraz/invoke-neutralizeav) Quick PoC I Wrote for Bypassing Next Gen AV Remotely for Pentesting
+- [**38**星][3y] [Py] [cysinfo/pymal](https://github.com/cysinfo/pymal) PyMal is a python based interactive Malware Analysis Framework. It is built on the top of three pure python programes Pefile, Pydbg and Volatility.
+- [**38**星][2m] [JS] [cxueqin/falcon](https://github.com/cxueqin/falcon) 猎鹰网络安全工具,核心功能DOS测试,支持端口扫描,支持CentOS/Ubuntu/MacOS系统。技术构成:nodejs引擎、express框架、nmap工具、tfn2k dos攻击工具、mocha单元测试框架。欢迎大家使用,也欢迎大家一起开发完善。
+- [**38**星][10m] [PS] [curtbraz/invoke-neutralizeav](https://github.com/curtbraz/invoke-neutralizeav) Quick PoC I Wrote for Bypassing Next Gen AV Remotely for Pentesting
- [**38**星][4y] [Py] [cudeso/cudeso-honeypot](https://github.com/cudeso/cudeso-honeypot) Honeypot repo
- [**38**星][7y] [C] [commonexploits/icmpsh](https://github.com/commonexploits/icmpsh) Simple reverse ICMP shell
- [**38**星][2y] [Java] [codewhitesec/coldfusionpwn](https://github.com/codewhitesec/coldfusionpwn) Exploitation Tool for CVE-2017-3066 targeting Adobe Coldfusion 11/12
-- [**38**星][8d] [TypeScript] [chef-koch/ffck](https://github.com/chef-koch/ffck)
+- [**38**星][2d] [TS] [chef-koch/ffck](https://github.com/chef-koch/ffck)
- [**38**星][3y] [C] [changeofpace/force-page-protection](https://github.com/changeofpace/force-page-protection) This x64dbg plugin sets the page protection for memory mapped views in scenarios which cause NtProtectVirtualMemory to fail.
- [**38**星][3m] [PHP] [cesnet/pakiti-server](https://github.com/cesnet/pakiti-server) Pakiti provides a monitoring mechanism to check the patching status of Linux systems.
- [**38**星][3y] [certtools/intelmq-feeds-documentation](https://github.com/certtools/intelmq-feeds-documentation) Cyber Threat Intelligence Feeds
- [**38**星][3y] [Py] [cerberussecurity/cve-2017-5689](https://github.com/cerberussecurity/cve-2017-5689)
- [**38**星][2y] [C++] [can1357/physical_mem_controller](https://github.com/can1357/physical_mem_controller) A library to read physical memory and system-wide virtual memory.
- [**38**星][3y] [C] [boywhp/wifi_crack_windows](https://github.com/boywhp/wifi_crack_windows) wifi crack project for windows
-- [**38**星][2y] [Py] [bonelee/dns_tunnel_dectect_with_cnn](https://github.com/bonelee/dns_tunnel_dectect_with_cnn) dns tunnel dectect with CNN
- [**38**星][3y] [bluscreenofjeff/malleablec2profiles](https://github.com/bluscreenofjeff/malleablec2profiles) Malleable C2 profiles for Cobalt Strike
-- [**38**星][9m] [binarymist/holisticinfosec-for-webdevelopers-fascicle0](https://github.com/binarymist/holisticinfosec-for-webdevelopers-fascicle0)
+- [**38**星][2y] [Py] [blazeinfosec/ssrf-ntlm](https://github.com/blazeinfosec/ssrf-ntlm) Proof of concept written in Python to show that in some situations a SSRF vulnerability can be used to steal NTLMv1/v2 hashes.
+- [**38**星][13d] [Py] [bit4woo/dnslog](https://github.com/bit4woo/dnslog) DNSLog 是一款监控 DNS 解析记录和 HTTP 访问记录的工具。
- [**38**星][4y] [Assembly] [battelle/repsych](https://github.com/battelle/repsych) Psychological warfare in reverse engineering
- [**38**星][1y] [Py] [ax330d/ida_pdb_loader](https://github.com/ax330d/ida_pdb_loader) IDA PDB Loader
- [**38**星][2m] [JS] [auth0/auth0-cordova](https://github.com/auth0/auth0-cordova) Auth0 integration for Cordova apps
- [**38**星][3y] [C++] [aurel26/ts-security-editor](https://github.com/aurel26/ts-security-editor) Terminal Service (RDP) Security Editor
-- [**38**星][2y] [Visual Basic] [arno0x/webdavdelivery](https://github.com/arno0x/webdavdelivery) A WebDAV PROPFIND covert channel to deliver payloads
-- [**38**星][3y] [C++] [andreybazhan/dbgext](https://github.com/andreybazhan/dbgext) Debugger extension for the Debugging Tools for Windows (WinDbg, KD, CDB, NTSD).
+- [**38**星][4d] [PS] [asymmetric-infosec/power-response](https://github.com/asymmetric-infosec/power-response) Powering Up Incident Response with Power-Response
+- [**38**星][2y] [Visual Basic .NET] [arno0x/webdavdelivery](https://github.com/arno0x/webdavdelivery) A WebDAV PROPFIND covert channel to deliver payloads
+- [**38**星][1y] [Py] [aptnotes/tools](https://github.com/aptnotes/tools) Tools to interact with APTnotes reporting/index.
- [**38**星][4y] [AutoIt] [ajmartel/irtriage](https://github.com/ajmartel/irtriage) Incident Response Triage - Windows Evidence Collection for Forensic Analysis
- [**38**星][1y] [C] [adulau/dcfldd](https://github.com/adulau/dcfldd) dcfldd - enhanced version of dd for forensics and security
- [**38**星][2y] [Java] [adrianbzg/twitter-follow-exploit](https://github.com/adrianbzg/twitter-follow-exploit) Automated Twitter mass account creation and follow using Selenium and Tor VPN
- [**38**星][5y] [C++] [adamkramer/rapid_env](https://github.com/adamkramer/rapid_env) Rapid deployment of Windows environment (files, registry keys, mutex etc) to facilitate malware analysis
+- [**38**星][1y] [Py] [activecm/passer](https://github.com/activecm/passer) Passive service locator, a python sniffer that identifies servers, clients, names and much more
+- [**38**星][17d] [Go] [9seconds/httransform](https://github.com/9seconds/httransform) A framework to build precise and fast HTTP proxies.
+- [**38**星][2y] [Java] [5gsd/aicdm](https://github.com/5gsd/aicdm) AICDL collector services and modules
+- [**38**星][9m] [54yimeng/sia-websites](https://github.com/54yimeng/sia-websites) 这里是我在youtube等上收集的一些科学上网网站的集合,以各自的网站名命名文件夹。
+- [**38**星][1y] [C++] [3gstudent/eventlogedit-evt--general](https://github.com/3gstudent/eventlogedit-evt--general) Remove individual lines from Windows Event Viewer Log (EVT) files
- [**38**星][3y] [Py] [0x90/upnp-arsenal](https://github.com/0x90/upnp-arsenal) UPnP hacking scripts and tools
- [**38**星][4y] [Py] [0x90/routerz](https://github.com/0x90/routerz) Some exploits for ZeroNights 0x03
- [**38**星][2y] [C] [0x4a47/sectalks-mel0x14-ctf](https://github.com/0x4a47/sectalks-mel0x14-ctf) Sectalks MEL0x14 CTF
-- [**37**星][2y] [PowerShell] [hackplayers/reverseshell](https://github.com/hackplayers/reverseshell) A simple PowerShell script that we can use for easing the process of creating a reverse shell and automating Meterpreter update
-- [**37**星][3m] [Perl] [theos/logos](https://github.com/theos/logos) Preprocessor that simplifies Objective-C hooking.
-- [**37**星][3y] [wtsxdev/exploit-development](https://github.com/wtsxdev/exploit-development) Resources for learning about Exploit Development
+- [**37**星][1m] [Java] [xausky/shadowsocksgostplugin](https://github.com/xausky/shadowsocksgostplugin) Gost 的 Shadowsocks 安卓插件,可以直接在 Shadowsocks 安卓客户端上连接 Gost 服务器
+- [**37**星][2d] [Py] [mhaskar/octopus](https://github.com/mhaskar/octopus) Open source pre-operation C2 server based on python and powershell
+- [**37**星][5y] [PHP] [snifer/l4bsforshell](https://github.com/snifer/l4bsforshell)
+- [**37**星][2y] [PS] [hackplayers/reverseshell](https://github.com/hackplayers/reverseshell) A simple PowerShell script that we can use for easing the process of creating a reverse shell and automating Meterpreter update
+- [**37**星][2m] [C] [intel/kernelflinger](https://github.com/intel/kernelflinger) the Intel UEFI bootloader for AndroidTM/BrilloTM
+- [**37**星][8d] [Perl] [theos/logos](https://github.com/theos/logos) Preprocessor that simplifies Objective-C hooking.
+- [**37**星][3y] [rednaga/disclosures](https://github.com/rednaga/disclosures) A place for disclosing things
+- [**37**星][3y] [C] [cn33liz/easysystem](https://github.com/cn33liz/easysystem) Quick and dirty System (Power)Shell using NamedPipe impersonation.
- [**37**星][4y] [C#] [cn33liz/sharpcat](https://github.com/cn33liz/sharpcat) SharpCat - A Simple Reversed Command Shell which can be started using InstallUtil (Bypassing AppLocker)
-- [**37**星][17d] [Shell] [shibli2700/rekon](https://github.com/shibli2700/rekon) The project contains multiple shell scripts for automating the tasks which most of the hackers struggle during their recon phase.
+- [**37**星][2y] [Shell] [pwnieexpress/pwn_pad_sources](https://github.com/pwnieexpress/pwn_pad_sources) Public source repository for the Pwn Pad platform.
+- [**37**星][8d] [Py] [vdoo-connected-trust/ghidra-pyi-generator](https://github.com/vdoo-connected-trust/ghidra-pyi-generator) Generates `.pyi` type stubs for the entire Ghidra API
- [**37**星][1y] [C#] [codeofdark/panda-obfuscator](https://github.com/codeofdark/panda-obfuscator) PandaObfuscator an simple Obfuscator, free, OpenSource for .Net Applications
-- [**37**星][2m] [C] [alxbrn/gdrv-loader](https://github.com/alxbrn/gdrv-loader) Kernel driver loader using vulnerable gigabyte driver (
+- [**37**星][2y] [vduddu/pentestresources](https://github.com/vduddu/PentestResources) A list of resources for Pentesting from various sources
- [**37**星][9m] [Go] [prsecurity/golang_c2](https://github.com/prsecurity/golang_c2) Boilerplate C2 written in Go for red teams
-- [**37**星][1m] [Java] [flankerhqd/vendor-android-cves](https://github.com/flankerhqd/vendor-android-cves) Collections of my POCs for android vendor CVEs
+- [**37**星][3d] [Java] [gedsh/invizible](https://github.com/gedsh/invizible) Android application for Internet privacy and security
- [**37**星][1y] [HTML] [madhuakula/security-automation-with-ansible-2](https://github.com/madhuakula/security-automation-with-ansible-2) Ansible Playbooks for Security Automation with Ansible2 book
-- [**37**星][10m] [C] [mwrlabs/3d-accelerated-exploitation](https://github.com/FSecureLABS/3d-accelerated-exploitation) 3D Accelerated Exploitation
-- [**37**星][19d] [Py] [soscleaner/soscleaner](https://github.com/soscleaner/soscleaner) A python application to clean sensitive and un-wanted data from an existing sosreport
+- [**37**星][3m] [C#] [nyan-x-cat/uac-escaper](https://github.com/nyan-x-cat/uac-escaper) Escalation / Bypass Windows UAC
+- [**37**星][2y] [HTML] [electroniccats/samykamtools](https://github.com/ElectronicCats/SamyKamTools) Magnetic Pentesting tool for Raspberry Pi
+- [**37**星][21d] [Py] [soscleaner/soscleaner](https://github.com/soscleaner/soscleaner) A python application to clean sensitive and un-wanted data from an existing sosreport
- [**37**星][5y] [Assembly] [muffins/rookit_playground](https://github.com/muffins/rookit_playground) Educational repository for learning about rootkits and Windows Kernel Hooks.
- [**37**星][6m] [Java] [hsiafan/cute-proxy](https://github.com/hsiafan/cute-proxy) A Man-In-The-Middle Proxy as Fiddle and Charles, using Netty, JavaFX
-- [**37**星][22d] [Py] [robotools/defcon](https://github.com/robotools/defcon) A set of UFO based objects for use in font editing applications.
-- [**37**星][1m] [Java] [flankerhqd/vendor-android-cves](https://github.com/flankerhqd/vendor-android-cves) Collections of my POCs for android vendor CVEs
+- [**37**星][24d] [Py] [robotools/defcon](https://github.com/robotools/defcon) A set of UFO based objects for use in font editing applications.
+- [**37**星][6d] [Go] [zpsean/go4api](https://github.com/zpsean/go4api) Go4Api - an API testing tool written in Go
+- [**37**星][5y] [C++] [zer0mem/kernelproject](https://github.com/zer0mem/kernelproject) Plain project for usege with github/zer0mem/common.git
- [**37**星][9m] [C++] [ze0r/cve-2019-0808-poc](https://github.com/ze0r/cve-2019-0808-poc) cve-2019-0808-poc
- [**37**星][3y] [C++] [yejiansnake/windows-sys-base](https://github.com/yejiansnake/windows-sys-base) windows 系统API C++封装库,包含进程间通讯,互斥,内存队列等通用功能
-- [**37**星][18d] [Py] [ydkhatri/macforensics](https://github.com/ydkhatri/macforensics) Scripts to process OSX forensic artifacts
-- [**37**星][4y] [Java] [xyntax/jboss-exp](https://github.com/xyntax/jboss-exp) java反序列化漏洞利用-JBOSS(含payload生成的java项目,漏洞利用py脚本,shodan部分目标主机搜索结果)
+- [**37**星][20d] [Py] [ydkhatri/macforensics](https://github.com/ydkhatri/macforensics) Scripts to process OSX forensic artifacts
- [**37**星][7m] [C#] [woanware/autorunner](https://github.com/woanware/autorunner) Emulates the Sysinternals Autoruns tool, but for DFIR purposes e.g. multi user processing
-- [**37**星][3y] [PowerShell] [wkleinhenz/powershell-botnet](https://github.com/wkleinhenz/powershell-botnet) A POC powershell botnet
+- [**37**星][3y] [PS] [wkleinhenz/powershell-botnet](https://github.com/wkleinhenz/powershell-botnet) A POC powershell botnet
- [**37**星][1y] [Py] [weebsec/weebdns](https://github.com/weebsec/weebdns) DNS Enumeration with Asynchronicity
- [**37**星][2y] [Py] [warner/petmail](https://github.com/warner/petmail) secure messaging, file-transfer, and directory synchronization
- [**37**星][3y] [Py] [wal99d/slowloris](https://github.com/wal99d/slowloris) Python code demonstrating the how-to part of L7 Application DDoS Attack called SlowLoris
+- [**37**星][3y] [Py] [villanch/pr0xy](https://github.com/villanch/pr0xy) 教学用多线程扫描框架(代理扫描)
+- [**37**星][2y] [vduddu/pentestresources](https://github.com/vduddu/pentestresources) A list of resources for Pentesting from various sources
+- [**37**星][9m] [PHP] [vanvan/ipfsproxyhttp](https://github.com/vanvan/ipfsproxyhttp) a very fast proxy to redirect HTTP Query to several IPFS Public gateway HTTP server
- [**37**星][3y] [C] [tylous/auto_eap](https://github.com/tylous/auto_eap) Automated Brute-Force Login Attacks Against EAP Networks.
- [**37**星][3m] [C] [twistlock/runc-cve-2019-5736](https://github.com/twistlock/runc-cve-2019-5736) CVE-2019-5736 POCs
- [**37**星][1y] [Py] [trustedsec/auto_settingcontent-ms](https://github.com/trustedsec/auto_settingcontent-ms) This is a quick POC for using the Matt Nelson (enigma0x3) technique for generating a malicious .SettingContent-ms extension type for remote code execution. This automates generating an HTA downloader and embeds it in the SettingContent-ms file for you and starts Apache.
+- [**37**星][2y] [Go] [tomsteele/pen-utils](https://github.com/tomsteele/pen-utils) Trivial unixey pentest utilities
- [**37**星][2y] [Py] [ticosax/pseud](https://github.com/ticosax/pseud) Pythonic bi-directional RPC API built on top of ØMQ.
- [**37**星][3y] [Py] [the-c0d3r/sqli-scanner](https://github.com/the-c0d3r/sqli-scanner) A tool to mass scan SQL Injection Vulnerable websites from a file.
- [**37**星][2y] [tevora-threat/aggressor-powerview](https://github.com/tevora-threat/aggressor-powerview) PowerView menu for Cobalt Strike
- [**37**星][3y] [C] [techgaun/mirai](https://github.com/techgaun/mirai) Mirai related codes and stuff
-- [**37**星][2y] [C++] [tanninone/usvfs](https://github.com/tanninone/usvfs) library using api hooking to implement process-local filesystem-independent file links.
- [**37**星][4y] [C] [tandasat/scavenger](https://github.com/tandasat/scavenger) A minifilter driver preserves all modified and deleted files.
+- [**37**星][1y] [Py] [tahz7/traffic_analyser](https://github.com/tahz7/traffic_analyser) Retrieve useful information from apache/nginx access logs to help troubleshoot traffic related problems
- [**37**星][1y] [Shell] [syncsrc/microrenovator](https://github.com/syncsrc/microrenovator) Pre-OS microcode updater
- [**37**星][12m] [Py] [spiderlabs/owasp-crs-documentation](https://github.com/spiderlabs/owasp-crs-documentation) Documentation for the OWASP CRS project
-- [**37**星][3m] [spiderlabs/iocs-idps](https://github.com/spiderlabs/iocs-idps) This repository will hold PCAP IOC data related with known malware samples (owner: Bryant Smith)
- [**37**星][5y] [C] [sk4ld/gridpot](https://github.com/sk4ld/gridpot) Open source tools for realistic-behaving electric grid honeynets
-- [**37**星][4y] [Assembly] [sh3llc0d3r1337/windows_reverse_shell_1](https://github.com/sh3llc0d3r1337/windows_reverse_shell_1) Windows Reverse Shell shellcode
-- [**37**星][27d] [Shell] [security-onion-solutions/securityonion-elastic](https://github.com/security-onion-solutions/securityonion-elastic) Security Onion Elastic Stack
-- [**37**星][11d] [Py] [sdnewhop/grinder](https://github.com/sdnewhop/grinder)
+- [**37**星][2y] [PHP] [sjord/jwtdemo](https://github.com/sjord/jwtdemo) Practice hacking JWT tokens
+- [**37**星][29d] [Shell] [security-onion-solutions/securityonion-elastic](https://github.com/security-onion-solutions/securityonion-elastic) Security Onion Elastic Stack
- [**37**星][3y] [JS] [saelo/feuerfuchs](https://github.com/saelo/feuerfuchs) Files for the "feuerfuchs" challenge of 33C3 CTF. See the greeting message in server.py for more information about the challenge
-- [**37**星][7d] [C++] [rust-fuzz/libfuzzer-sys](https://github.com/rust-fuzz/libfuzzer-sys)
+- [**37**星][9d] [C++] [rust-fuzz/libfuzzer-sys](https://github.com/rust-fuzz/libfuzzer-sys)
- [**37**星][10m] [Py] [raz0r/aemscan](https://github.com/raz0r/aemscan) Adobe Experience Manager Vulnerability Scanner
- [**37**星][2y] [Py] [rahiel/firectl](https://github.com/rahiel/firectl) Control Firejail desktop integration.
+- [**37**星][2m] [Lua] [r00t-3xp10it/nmap-nse-modules](https://github.com/r00t-3xp10it/nmap-nse-modules) My collection of nmap nse modules
- [**37**星][7y] [JS] [ptcoresec/ctf-scoreboard](https://github.com/ptcoresec/ctf-scoreboard) A scoreboard for Security CTF events
+- [**37**星][3d] [Go] [projectcalico/typha](https://github.com/projectcalico/typha) Calico's datastore fan-out daemon.
+- [**37**星][2y] [Java] [portswigger/distribute-damage](https://github.com/portswigger/distribute-damage) Evenly distributes scanner load across targets
- [**37**星][5y] [Py] [philwantsfish/gdb_commands](https://github.com/philwantsfish/gdb_commands) GDB commands to aid exploit development
- [**37**星][12m] [C++] [patois/nesldr](https://github.com/patois/nesldr) Nintendo Entertainment System (NES) ROM loader module for IDA Pro
- [**37**星][3y] [C] [p0cl4bs/thanos](https://github.com/p0cl4bs/thanos) Thanos is a tool made for scan a range of IP's and get the banners of the running services. The main function is do banner grabber, but you also can use this for exploit vulnerabilities, find proxy servers, or simply check for open ports.
-- [**37**星][28d] [Java] [openzipkin/zipkin-finagle](https://github.com/openzipkin/zipkin-finagle) Integration between Finagle tracing to Zipkin transports such as http and kafka
+- [**37**星][30d] [Java] [openzipkin/zipkin-finagle](https://github.com/openzipkin/zipkin-finagle) Integration between Finagle tracing to Zipkin transports such as http and kafka
+- [**37**星][2y] [Py] [netkiller/firewall](https://github.com/netkiller/firewall) Python Firewall Library
+- [**37**星][2y] [C#] [n0ise9914/rdpchecker](https://github.com/n0ise9914/rdpchecker) Stable and reliable multiple RDP checker written in C#
- [**37**星][3y] [C] [mwsrc/mass-malicious-script-dump](https://github.com/mwsrc/mass-malicious-script-dump) Mass malicious script dump/Malware src dump
-- [**37**星][3y] [Py] [mthbernardes/strutszeiro](https://github.com/mthbernardes/strutszeiro) Telegram Bot to manage botnets created with struts vulnerability(CVE-2017-5638)
- [**37**星][2y] [C++] [mstefanowich/filesignaturehijack](https://github.com/mstefanowich/filesignaturehijack) C proof-of-concept of Mattifestations paper on signature hijacking
- [**37**星][8m] [Py] [mozillasecurity/quokka](https://github.com/mozillasecurity/quokka) Quokka is a utility to launch and monitor application for faults.
- [**37**星][3y] [HTML] [mortenschenk/rtlcapturecontext-cfg-bypass](https://github.com/mortenschenk/rtlcapturecontext-cfg-bypass) Internet Explorer Exploit with CFG bypass for Windows 10
- [**37**星][3y] [PHP] [mortedamos/vehicle-hacking](https://github.com/mortedamos/vehicle-hacking) Guides and scripts for vehicle cybersecurity research
-- [**37**星][11m] [PowerShell] [minervalabsresearch/blogposts](https://github.com/minervalabsresearch/blogposts) Code examples from recent blog posts by minerva labs.
-- [**37**星][13d] [C] [microsoft/cfu](https://github.com/microsoft/cfu) Component Firmware Update
+- [**37**星][2y] [C] [mlafeldt/ps2rd](https://github.com/mlafeldt/ps2rd) Collection of tools to remotely debug PS2 games
+- [**37**星][11m] [PS] [minervalabsresearch/blogposts](https://github.com/minervalabsresearch/blogposts) Code examples from recent blog posts by minerva labs.
+- [**37**星][15d] [C] [microsoft/cfu](https://github.com/microsoft/cfu) Component Firmware Update
- [**37**星][2y] [Py] [medicean/sublimexssencode](https://github.com/medicean/sublimexssencode) Converts characters from one encoding to another using a transformation.
-- [**37**星][1m] [Shell] [maravento/blackip](https://github.com/maravento/blackip) IPs Blacklist for Ipset/Squid
+- [**37**星][6d] [Shell] [maravento/blackip](https://github.com/maravento/blackip) IPs Blacklist for Ipset/Squid
- [**37**星][2y] [mailinneberg/broadpwn](https://github.com/mailinneberg/broadpwn) Broadpwn bug (CVE-2017-9417)
-- [**37**星][2y] [Assembly] [macmade/obfuscate](https://github.com/macmade/obfuscate) C/C++ machine code obfuscation.
-- [**37**星][2y] [Py] [m4n3dw0lf/sslkill](https://github.com/m4n3dw0lf/sslkill) Forced Man-In-The-Middle HTTPs-Avoiding Reverse Proxy
+- [**37**星][5m] [Py] [m57/piescan](https://github.com/m57/piescan) A simple fast port scanner for when you cant use Nmap on a pentest.
- [**37**星][3y] [Py] [luckygeck/ycmdcompletion](https://github.com/luckygeck/ycmdcompletion) Sublime Text 3 plugin for C++ code completion and error highlighting, based on Ycmd server
- [**37**星][1y] [Java] [lmax-exchange/angler](https://github.com/lmax-exchange/angler) A utility for monitoring UDP message-processing
-- [**37**星][12d] [Tcl] [llir/grammar](https://github.com/llir/grammar) EBNF grammar of LLVM IR assembly.
+- [**37**星][7d] [Tcl] [llir/grammar](https://github.com/llir/grammar) EBNF grammar of LLVM IR assembly.
- [**37**星][1m] [C] [libyal/libolecf](https://github.com/libyal/libolecf) Library and tools to access the OLE 2 Compound File (OLECF) format
+- [**37**星][1y] [Py] [lasq88/deobfuscate](https://github.com/lasq88/deobfuscate) Python script to automatically deobfuscate malware code
- [**37**星][5y] [C++] [lallousx86/graphslick](https://github.com/lallousx86/graphslick) IDA Plugin - GraphSlick
-- [**37**星][7y] [C] [korczis/upx](https://github.com/korczis/upx) UPX is a free, portable, extendable, high-performance executable packer for several executable formats. See
+- [**37**星][8y] [C] [korczis/upx](https://github.com/korczis/upx) UPX is a free, portable, extendable, high-performance executable packer for several executable formats. See
- [**37**星][3y] [Py] [killswitch-gui/lterm](https://github.com/killswitch-gui/lterm) lterm is a small script built to install a bash hook for full terminal logging.
- [**37**星][2y] [JS] [kevva/caw](https://github.com/kevva/caw) Construct HTTP/HTTPS agents for tunneling proxies
- [**37**星][2y] [HTML] [keenrivals/bugsite-index](https://github.com/keenrivals/bugsite-index) Index of websites publishing bugs along the lines of heartbleed.com
-- [**37**星][9m] [Rust] [juxhindb/synner](https://github.com/juxhindb/synner) A TCP SYN flood client written in Rust, powered by libpnet
+- [**37**星][4y] [Java] [julianschuette/condroid](https://github.com/julianschuette/condroid) Symbolic/concolic execution of Android apps
- [**37**星][6y] [Py] [johnnykv/mnemosyne](https://github.com/johnnykv/mnemosyne) Normalizer for honeypot data.
-- [**37**星][20d] [Kotlin] [itznotabug/checkoutverifier](https://github.com/itznotabug/checkoutverifier) Verify your In-App Purchase receipts & protect your Apps from hacking, patching used by Piracy Apps like Lucky Patcher.
+- [**37**星][7d] [Kotlin] [itznotabug/checkoutverifier](https://github.com/itznotabug/checkoutverifier) Verify your In-App Purchase receipts & protect your Apps from hacking, patching used by Piracy Apps like Lucky Patcher.
- [**37**星][2y] [JS] [idc/ps4-entrypoint-405](https://github.com/idc/ps4-entrypoint-405) A fully implemented kernel exploit for the PS4 on 4.05FW
+- [**37**星][4m] [Py] [hugsy/gef-extras](https://github.com/hugsy/gef-extras) Extra goodies for GEF: Open repository for unfiltered contributions to the project.
- [**37**星][11m] [Py] [hook-s3c/cve-2018-18852](https://github.com/hook-s3c/cve-2018-18852) CERIO RCE CVE-2018-18852, authenticated (vendor defaults) web-based RCE as root user.
-- [**37**星][5y] [Py] [hackedteam/test-av2](https://github.com/hackedteam/test-av2) Automated antivirus test environment (new version)
-- [**37**星][1y] [Java] [guolei1130/global_httpdns](https://github.com/guolei1130/global_httpdns) 全局HttpDns替换方案
-- [**37**星][8d] [C] [greenbone/gvm-libs](https://github.com/greenbone/gvm-libs) Greenbone Vulnerability Management Libraries
-- [**37**星][6y] [C] [gdbinit/crackme_nr1](https://github.com/gdbinit/crackme_nr1) fG!'s crackme #1 source code
-- [**37**星][8d] [JS] [frida/frida-compile](https://github.com/frida/frida-compile) Compile a Frida script comprised of one or more Node.js modules
+- [**37**星][4d] [C] [greenbone/gvm-libs](https://github.com/greenbone/gvm-libs) Greenbone Vulnerability Management Libraries
+- [**37**星][7y] [C] [gdbinit/crackme_nr1](https://github.com/gdbinit/crackme_nr1) fG!'s crackme #1 source code
- [**37**星][2y] [C++] [flier/zipkin-cpp](https://github.com/flier/zipkin-cpp) Zipkin tracing library for C/C++
- [**37**星][4y] [C++] [flankerhqd/cve-2015-6620-poc](https://github.com/flankerhqd/cve-2015-6620-poc) POC for CVE-2015-6620, AMessage unmarshal arbitrary write
- [**37**星][6y] [Ruby] [fishermansenemy/bucket_finder](https://github.com/fishermansenemy/bucket_finder) Amazon bucket brute force tool
@@ -13537,222 +14473,232 @@ networking routines
- [**37**星][4y] [Py] [fabio-d/honeypot](https://github.com/fabio-d/honeypot) Honeypot that emulates several protocols (incl. SSH, telnet, SMTP, HTTP, SSL and SIP)
- [**37**星][3m] [C++] [ez8-co/emock](https://github.com/ez8-co/emock)
- [**37**星][4y] [Py] [exploit-install/shellsploit-framework](https://github.com/exploit-install/shellsploit-framework) New Generation Exploit Development Kit
-- [**37**星][12m] [ekoparty/ekolabs](https://github.com/ekoparty/ekolabs) EKOLABS esta dedicada para investigadores independientes y para la comunidad del Software Libre. Vamos a proveer de stands completos con monitor, alimentacion de energia y acceso a internet por cable, y vos vas a traer tu maquina para mostrar tu trabajo y responder preguntas de los participantes de Ekoparty Security Conference
+- [**37**星][1y] [ekoparty/ekolabs](https://github.com/ekoparty/ekolabs) EKOLABS esta dedicada para investigadores independientes y para la comunidad del Software Libre. Vamos a proveer de stands completos con monitor, alimentacion de energia y acceso a internet por cable, y vos vas a traer tu maquina para mostrar tu trabajo y responder preguntas de los participantes de Ekoparty Security Conference
- [**37**星][10m] [Java] [egguncle/xposednavigationbar](https://github.com/egguncle/xposednavigationbar) Xposed导航栏功能拓展模块
- [**37**星][1y] [C] [egguncle/ptraceinject](https://github.com/egguncle/ptraceinject) 进程注入
- [**37**星][2y] [edoverflow/bug-bounty-responses](https://github.com/edoverflow/bug-bounty-responses) A collection of response templates for invalid bug bounty reports.
- [**37**星][3y] [Py] [dungtv543/dutas](https://github.com/dungtv543/dutas) Analysis PE file or Shellcode
- [**37**星][1y] [Ruby] [dreadlocked/ssrfmap](https://github.com/dreadlocked/ssrfmap) Simple Server Side Request Forgery services enumeration tool.
-- [**37**星][1m] [d1nfinite/sec-interview](https://github.com/d1nfinite/sec-interview) 信息安全面试题汇总
-- [**37**星][12d] [C] [dnsdb/dnsdbq](https://github.com/dnsdb/dnsdbq) DNSDB API Client, C Version
+- [**37**星][2y] [PS] [dmb2168/oauthhunting](https://github.com/dmb2168/oauthhunting)
- [**37**星][1y] [Py] [dhn/osce](https://github.com/dhn/osce) Some exploits, which I’ve created during my OSCE preparation.
- [**37**星][1m] [Py] [desword/shellcode_tools](https://github.com/desword/shellcode_tools) Useful tools for writing shellcode
- [**37**星][2y] [PHP] [dcid/doh-php-client](https://github.com/dcid/doh-php-client) DoH (DNS over HTTPS) PHP Client
-- [**37**星][4y] [Py] [danmcinerney/autoresp](https://github.com/danmcinerney/autoresp) Runs Responder, uploads hashes for cracking, alerts when cracked
-- [**37**星][3y] [Py] [cysinfo/pymal](https://github.com/cysinfo/pymal) PyMal is a python based interactive Malware Analysis Framework. It is built on the top of three pure python programes Pefile, Pydbg and Volatility.
-- [**37**星][2m] [JS] [cxueqin/falcon](https://github.com/cxueqin/falcon) 猎鹰网络安全工具,核心功能DOS测试,支持端口扫描,支持CentOS/Ubuntu/MacOS系统。技术构成:nodejs引擎、express框架、nmap工具、tfn2k dos攻击工具、mocha单元测试框架。欢迎大家使用,也欢迎大家一起开发完善。
+- [**37**星][3y] [C] [cylancevulnresearch/osx_runbin](https://github.com/cylancevulnresearch/osx_runbin)
- [**37**星][3y] [ctftime/ctftime.org](https://github.com/ctftime/ctftime.org) meta repository for ctftime.org issues, feature-requests etc
- [**37**星][7m] [Py] [coalfire-research/vampire](https://github.com/coalfire-research/vampire) Vampire is an aggressor script which integrates with BloodHound to mark nodes as owned.
- [**37**星][7m] [Batchfile] [cervoise/abuse-bash-for-windows](https://github.com/cervoise/abuse-bash-for-windows) Pentest scripts for abuse Bash on Windows (Cygwin/WSL) - HackLu 2018
- [**37**星][3y] [Java] [cert-se/megatron-java](https://github.com/cert-se/megatron-java) Megatron - A System for Abuse- and Incident Handling
-- [**37**星][5m] [C++] [carbonblack/hexraysdeob](https://github.com/carbonblack/hexraysdeob) Hex-Rays microcode API plugin for breaking an obfuscating compiler
+- [**37**星][2y] [C++] [cedarctic/digiquack](https://github.com/cedarctic/digiquack) A DuckyScript language to DigiSpark payload converter based on C++
+- [**37**星][6m] [C++] [carbonblack/hexraysdeob](https://github.com/carbonblack/hexraysdeob) Hex-Rays microcode API plugin for breaking an obfuscating compiler
- [**37**星][1m] [Makefile] [c0deh4cker/pwnableharness](https://github.com/c0deh4cker/pwnableharness) Manage building and deploying exploitation challenges with ease
-- [**37**星][12d] [Py] [bytesoverbombs/virusshare-search](https://github.com/bytesoverbombs/virusshare-search) Downloads VirusShare hashes (
+- [**37**星][14d] [Py] [bytesoverbombs/virusshare-search](https://github.com/bytesoverbombs/virusshare-search) Downloads VirusShare hashes (
- [**37**星][8m] [Py] [bx/bootloader_instrumentation_suite](https://github.com/bx/bootloader_instrumentation_suite) Bootloader 研究工具
- [**37**星][3y] [C++] [breakingmalwareresearch/cfgexceptions](https://github.com/breakingmalwareresearch/cfgexceptions) Adding exceptions to Microsoft's Control Flow Guard (CFG)
-- [**37**星][2y] [Py] [blazeinfosec/ssrf-ntlm](https://github.com/blazeinfosec/ssrf-ntlm) Proof of concept written in Python to show that in some situations a SSRF vulnerability can be used to steal NTLMv1/v2 hashes.
- [**37**星][5y] [Py] [bfosterjr/ufgraph](https://github.com/bfosterjr/ufgraph)
+- [**37**星][8y] [bes/keystorebrute](https://github.com/bes/keystorebrute) A Keystore Brute-force attacker.
+- [**37**星][1y] [Java] [augustd/burp-suite-error-message-checks](https://github.com/augustd/burp-suite-error-message-checks) Burp Suite extension to passively scan for applications revealing server error messages
- [**37**星][5y] [C] [aloz77/hiktools](https://github.com/aloz77/hiktools) Tools for Hikvision IP cameras
-- [**37**星][1y] [Py] [activecm/passer](https://github.com/activecm/passer) Passive service locator, a python sniffer that identifies servers, clients, names and much more
- [**37**星][1y] [C] [abiondo/afl](https://github.com/abiondo/afl) My fork of American Fuzzy Lop
-- [**37**星][15d] [Go] [9seconds/httransform](https://github.com/9seconds/httransform) A framework to build precise and fast HTTP proxies.
+- [**37**星][4y] [Py] [73696e65/windows-exploits](https://github.com/73696e65/windows-exploits) Used for the osce exam preparation
- [**37**星][2y] [C++] [3gstudent/shellcode-generater](https://github.com/3gstudent/shellcode-generater) No inline asm,support x86/x64
-- [**37**星][11m] [C++] [3gstudent/from-system-authority-to-medium-authority](https://github.com/3gstudent/from-system-authority-to-medium-authority) Penetration test
-- [**37**星][1y] [C++] [3gstudent/eventlogedit-evt--general](https://github.com/3gstudent/eventlogedit-evt--general) Remove individual lines from Windows Event Viewer Log (EVT) files
+- [**37**星][7d] [C++] [3gstudent/from-system-authority-to-medium-authority](https://github.com/3gstudent/from-system-authority-to-medium-authority) Penetration test
- [**37**星][2y] [Py] [1337g/cve-2017-10271](https://github.com/1337g/cve-2017-10271) CVE-2017-10271 WEBLOGIC RCE (TESTED)
- [**37**星][3y] [C] [0xbadc0de1/vmp_dbg](https://github.com/0xbadc0de1/vmp_dbg) This is a VmProtect integrated debugger, that will essentially allow you to disasm and debug vmp partially virtualized functions at the vmp bytecode level. It was made using TitanEngine for the debug engine and Qt for the gui. Do not expect much of it and feel free to report any bugs.
+- [**36**星][3y] [Go] [davidqhr/socccks](https://github.com/davidqhr/socccks) Socccks is a shadowsocks like separated socks5 proxy
- [**36**星][3y] [Py] [vulnerscom/scripts](https://github.com/vulnerscom/scripts) Some useful scripts for penetration testing
- [**36**星][3y] [offensive-security/kali-scripts](https://github.com/offensive-security/kali-scripts) Various Kali Scripts
- [**36**星][3y] [Py] [averagesecurityguy/exfil](https://github.com/averagesecurityguy/exfil) Modular tool to test exfiltration techniques.
-- [**36**星][2y] [Py] [cisco-talos/covnavi](https://github.com/cisco-talos/covnavi)
-- [**36**星][2y] [Shell] [pwnieexpress/pwn_pad_sources](https://github.com/pwnieexpress/pwn_pad_sources) Public source repository for the Pwn Pad platform.
-- [**36**星][10m] [Kotlin] [cbeuw/cloak-android](https://github.com/cbeuw/cloak-android) Android client of Cloak
+- [**36**星][2d] [CSS] [frida/frida-website](https://github.com/frida/frida-website) Frida's website
+- [**36**星][11m] [Py] [tidesec/common_spider](https://github.com/tidesec/common_spider) 一个还算通用的爬虫脚本,可自己设定爬取的深度,可以把动态页面和外链单独分出来~
+- [**36**星][16d] [JS] [snyk/broker](https://github.com/snyk/broker) A broker system between a public service and a private service
- [**36**星][2y] [C++] [blole/injectory](https://github.com/blole/injectory) command-line interface dll injector
-- [**36**星][2y] [vduddu/pentestresources](https://github.com/vduddu/PentestResources) A list of resources for Pentesting from various sources
+- [**36**星][11m] [Py] [pilgun/acvtool](https://github.com/pilgun/acvtool) ACVTool is a novel tool for measuring black-box code coverage of Android applications.
+- [**36**星][1m] [Java] [ayrx/jnianalyzer](https://github.com/ayrx/jnianalyzer) Analysis scripts for Ghidra to work with Android NDK libraries.
+- [**36**星][5y] [Py] [hiteshchoudhary/airvengers](https://github.com/hiteshchoudhary/airvengers) A GUI to pentest wifi Network, based on Aircrack-ng tools
+- [**36**星][8d] [C++] [chickenhook/chickenhook](https://github.com/chickenhook/chickenhook) A linux / android hooking framework
- [**36**星][3m] [PHP] [x-o-r-r-o/php-webshells-collection](https://github.com/x-o-r-r-o/php-webshells-collection) Most Wanted Private and Public PHP Web Shells Can Be Downloaded Here. (Educational Purpose Only)
- [**36**星][2m] [Shell] [itshaadi/torbox](https://github.com/itshaadi/torbox) Container-based Tor access point (Anonymizing Middlebox).
-- [**36**星][2y] [Shell] [re4son/pocket-kali-live-build](https://github.com/Re4son/Pocket-Kali-live-build) Debian live build for the Pocket-Kali
+- [**36**星][3y] [Py] [lightless233/pansidong](https://github.com/lightless233/Pansidong) 盘丝洞 - 自动化WEB漏洞扫描器
- [**36**星][2y] [Ruby] [opensourcesec/malstrom](https://github.com/opensourcesec/malstrom) Cyber Intel Management
- [**36**星][1y] [Go] [joshrendek/hnypots-agent](https://github.com/joshrendek/hnypots-agent) A SSH Server in Go that logs username/password combos
- [**36**星][1y] [Py] [newbee119/ctf_ics_traffic](https://github.com/NewBee119/ctf_ics_traffic) 工控CTF比赛工具,各种网络数据包处理脚本
- [**36**星][2y] [rivaill/blockchain-security-awesome](https://github.com/Rivaill/blockchain-security-awesome) A curated list of awesome things related to blockchain security
-- [**36**星][2m] [Go] [zpsean/go4api](https://github.com/zpsean/go4api) Go4Api - an API testing tool written in Go
-- [**36**星][5y] [C++] [zer0mem/kernelproject](https://github.com/zer0mem/kernelproject) Plain project for usege with github/zer0mem/common.git
+- [**36**星][1m] [Py] [zephrfish/burpfeed](https://github.com/zephrfish/burpfeed) Hacked together script for feeding urls into Burp's Sitemap
- [**36**星][1y] [Shell] [xhak9x/hak9tools](https://github.com/xhak9x/hak9tools) All Hak9 Tools
-- [**36**星][9m] [Visual Basic] [visualbasic6/subdomain-bruteforce](https://github.com/visualbasic6/subdomain-bruteforce) a subdomain brute forcing tool for windows
-- [**36**星][3y] [Py] [villanch/pr0xy](https://github.com/villanch/pr0xy) 教学用多线程扫描框架(代理扫描)
-- [**36**星][13d] [C++] [verizondigital/waflz](https://github.com/verizondigital/waflz) multitenant ModSecurity compatible WAF engine from Verizon Digital Media Services
-- [**36**星][1y] [C++] [venam/browser](https://github.com/venam/browser) A Simple to use yet efficient headers only library ( wrapped over libcurl / curl wrapper ) to do browser emulation (emulate) or web interaction in C++.
-- [**36**星][2y] [vduddu/pentestresources](https://github.com/vduddu/pentestresources) A list of resources for Pentesting from various sources
+- [**36**星][8d] [Shell] [wicg/ua-client-hints](https://github.com/wicg/ua-client-hints) Wouldn't it be nice if `User-Agent` was a (set of) client hints?
+- [**36**星][9m] [Visual Basic .NET] [visualbasic6/subdomain-bruteforce](https://github.com/visualbasic6/subdomain-bruteforce) a subdomain brute forcing tool for windows
+- [**36**星][15d] [C++] [verizondigital/waflz](https://github.com/verizondigital/waflz) multitenant ModSecurity compatible WAF engine from Verizon Digital Media Services
- [**36**星][5y] [Go] [traetox/sshforshits](https://github.com/traetox/sshforshits) framework for a high interaction SSH honeypot
- [**36**星][6y] [Py] [toperaproject/topera](https://github.com/toperaproject/topera) IPv6 analysis tool: the other side
-- [**36**星][2y] [Go] [tomsteele/pen-utils](https://github.com/tomsteele/pen-utils) Trivial unixey pentest utilities
+- [**36**星][2d] [C++] [titzanyic/clover](https://github.com/titzanyic/clover) 我的黑苹果配置列表
- [**36**星][2y] [Zeek] [tatsui-geek/rpot](https://github.com/tatsui-geek/rpot) Real-time Packet Observation Tool
- [**36**星][3m] [Py] [takeshixx/deen](https://github.com/takeshixx/deen) Generic data DEcoding/ENcoding application built with PyQt5.
- [**36**星][3y] [TeX] [sympy/sympy-paper](https://github.com/sympy/sympy-paper) Repo for the paper "SymPy: symbolic computing in python"
- [**36**星][3y] [C++] [steven-michaud/sandboxmirror](https://github.com/steven-michaud/sandboxmirror) Tool for reverse-engineering Apple's sandbox
- [**36**星][8y] [C] [stephenfewer/ollycalltrace](https://github.com/stephenfewer/ollycalltrace) OllyCallTrace is a plugin for OllyDbg to trace the call chain of a thread.
- [**36**星][1m] [Py] [static-flow/cloudcopy](https://github.com/static-flow/cloudcopy) This tool implements a cloud version of the Shadow Copy attack against domain controllers running in AWS using only the EC2:CreateSnapshot permission.
-- [**36**星][26d] [Py] [sinfulz/justtryharder](https://github.com/sinfulz/justtryharder) JustTryHarder, a cheat sheet which will aid you through the PWK course & the OSCP Exam.
+- [**36**星][28d] [Py] [sinfulz/justtryharder](https://github.com/sinfulz/justtryharder) JustTryHarder, a cheat sheet which will aid you through the PWK course & the OSCP Exam.
- [**36**星][4y] [C] [sektioneins/xpwntool-lite](https://github.com/sektioneins/xpwntool-lite) Lightweight version of xpwntool just for decrypting IMG3 firmware files
+- [**36**星][1y] [HTML] [secwiki/iot](https://github.com/secwiki/iot) IOT Research Blog 物联网安全技术研究小组
- [**36**星][3y] [JS] [saelo/foxpwn](https://github.com/saelo/foxpwn) Exploit code for CVE-2016-9066
- [**36**星][7m] [Py] [s0md3v/entropy](https://github.com/s0md3v/entropy) Entropy is a (prototype) WAF driven by maths.
- [**36**星][2y] [Py] [rxwx/cve-2017-11882](https://github.com/rxwx/cve-2017-11882) Proof-of-Concept exploits for CVE-2017-11882
-- [**36**星][2y] [PowerShell] [rvrsh3ll/pentesting-scripts](https://github.com/rvrsh3ll/pentesting-scripts) A ton of helpful tools
+- [**36**星][2y] [PS] [rvrsh3ll/pentesting-scripts](https://github.com/rvrsh3ll/pentesting-scripts) A ton of helpful tools
+- [**36**星][6m] [Py] [ruped24/tor_ip_switcher](https://github.com/ruped24/tor_ip_switcher) tor_ip_switcher is useful for making any DoS attack look like a DDoS attack. Works with toriptables2.
- [**36**星][2y] [C++] [rolfrolles/wbdeshook](https://github.com/rolfrolles/wbdeshook) DLL-injection based solution to Brecht Wyseur's wbDES challenge (based on SysK's Phrack article)
-- [**36**星][16d] [C] [rinnegatamante/vitaquakeiii](https://github.com/rinnegatamante/vitaquakeiii) ioquake3 port for PSVITA (Currently supporting Quake III: Arena, Quake III: Team Arena, OpenArena, Urban Terror and Q3Rally)
+- [**36**星][18d] [C] [rinnegatamante/vitaquakeiii](https://github.com/rinnegatamante/vitaquakeiii) ioquake3 port for PSVITA (Currently supporting Quake III: Arena, Quake III: Team Arena, OpenArena, Urban Terror and Q3Rally)
- [**36**星][7m] [Py] [rikonaka/katoolin4china](https://github.com/rikonaka/katoolin4china) Kali tools installer
- [**36**星][1y] [JS] [rewanth1997/vuln-headers-extension](https://github.com/rewanth1997/vuln-headers-extension) Firefox extension which parses the headers of all the requests which are being flowing through your firefox browser to detect for vulnerabilities.
- [**36**星][10m] [Py] [redforcesec/dumpit](https://github.com/redforcesec/dumpit) An exploit for SHAREit <= v 4.0.38
- [**36**星][4m] [Py] [raymanfx/android-cve-checker](https://github.com/raymanfx/android-cve-checker) Python tool to check your Android kernel for missing CVE patches.
- [**36**星][4m] [Java] [radare/ghidra-r2web](https://github.com/radare/ghidra-r2web) Ghidra plugin to start an r2 webserver to let r2 interact with it
-- [**36**星][2m] [Lua] [r00t-3xp10it/nmap-nse-modules](https://github.com/r00t-3xp10it/nmap-nse-modules) My collection of nmap nse modules
- [**36**星][4y] [Shell] [pwnagentsmith/ir_tool](https://github.com/pwnagentsmith/ir_tool) Script for Forensic on Linux
-- [**36**星][11d] [Go] [projectcalico/typha](https://github.com/projectcalico/typha) Calico's datastore fan-out daemon.
-- [**36**星][2y] [Java] [portswigger/distribute-damage](https://github.com/portswigger/distribute-damage) Evenly distributes scanner load across targets
- [**36**星][4m] [Shell] [plenumlab/lazyrecon](https://github.com/plenumlab/lazyrecon) This script is intended to automate your reconnaissance process in an organized fashion
- [**36**星][3y] [Py] [phar/eyephish](https://github.com/phar/eyephish) OpenCV based IDN option generator PoC
- [**36**星][9m] [Py] [phage-nz/malware-hunting](https://github.com/phage-nz/malware-hunting) 与 Malware Hunting 相关的脚本/信息收集
- [**36**星][12m] [Elixir] [paulzql/shadowsocks-ex](https://github.com/paulzql/shadowsocks-ex) elixir port of shadowsocks
- [**36**星][3y] [C++] [paulmehta/ablation](https://github.com/paulmehta/ablation) Augmenting Static Analysis Using Pintool: Ablation
-- [**36**星][3y] [Java] [onionmail/onionmail](https://github.com/onionmail/onionmail) TOR Mail encrypted server for Hidden Services
+- [**36**星][5m] [Py] [paradoxis/flask-unsign](https://github.com/paradoxis/flask-unsign) Command line tool to fetch, decode, brute-force and craft session cookies of a Flask application by guessing secret keys.
+- [**36**星][4y] [Java] [onionmail/onionmail](https://github.com/onionmail/onionmail) TOR Mail encrypted server for Hidden Services
- [**36**星][4y] [C] [ofercas/ransomware_begone](https://github.com/ofercas/ransomware_begone) ransomware_begone
- [**36**星][3m] [C++] [notscimmy/pplib](https://github.com/notscimmy/pplib) Elevate a process to be a protected process
+- [**36**星][5m] [C#] [not-matthias/nemesis](https://github.com/not-matthias/nemesis) A customizable process dumper.
+- [**36**星][5m] [Go] [northern-lights/yara-parser](https://github.com/northern-lights/yara-parser) Tools for parsing rulesets using the exact grammar as YARA. Written in Go.
- [**36**星][3y] [Ruby] [nopernik/msfvenom-bc-generator](https://github.com/nopernik/msfvenom-bc-generator) Metasploit msfvenom Bash Completions Generator
- [**36**星][3y] [C] [nexusbots/umbreon-rootkit](https://github.com/nexusbots/umbreon-rootkit)
- [**36**星][11m] [Py] [nevillegrech/madmax](https://github.com/nevillegrech/madmax) Ethereum Static Vulnerability Detector for Gas-Focussed Vulnerabilities
- [**36**星][3y] [Ruby] [neinwechter/metasploit-framework](https://github.com/neinwechter/metasploit-framework) Metasploit Framework
- [**36**星][9m] [C++] [nanoric/pkn](https://github.com/nanoric/pkn) core of pkn game hacking project. Including mainly for process management, memory management, and DLL injecttion. Also PE analysis, windows registry management, compile-time sting encryption, byte-code emulator, etc. Most of them can run under kernel mode.
- [**36**星][4y] [C++] [n3k/ekoparty2015_windows_smep_bypass](https://github.com/n3k/ekoparty2015_windows_smep_bypass) Windows SMEP Bypass U=S
+- [**36**星][3y] [Py] [mthbernardes/strutszeiro](https://github.com/mthbernardes/strutszeiro) Telegram Bot to manage botnets created with struts vulnerability(CVE-2017-5638)
- [**36**星][2y] [Py] [mr-un1k0d3r/searchipowner](https://github.com/mr-un1k0d3r/searchipowner) Search public IP owner through ARIN
- [**36**星][3y] [Assembly] [mortenschenk/token-stealing-shellcode](https://github.com/mortenschenk/token-stealing-shellcode)
- [**36**星][2y] [Go] [mojachieee/go-honeypot](https://github.com/mojachieee/go-honeypot) A honeypot server written in Go.
- [**36**星][4y] [michael-yip/aptmalwarenotes](https://github.com/michael-yip/aptmalwarenotes) A repository of open source reports on different malware families used in targeted cyber intrusions ("APT").
- [**36**星][8y] [Ruby] [miaout17/lolize](https://github.com/miaout17/lolize) Colorize your ruby output with rainbow
- [**36**星][4y] [C] [mempodippy/cub3](https://github.com/mempodippy/cub3) Proof of concept for LD_PRELOAD malware that uses extended attributes to protect files.
-- [**36**星][4m] [Assembly] [marespiaut/rayman_disasm](https://github.com/marespiaut/rayman_disasm) Reverse-engineering effort for the 1995 MS-DOS game “Rayman”
- [**36**星][3y] [C++] [manux81/canspy](https://github.com/manux81/canspy) Very simple tool for users who need to interface with a device based on CAN (CAN/CANopen/J1939/NMEA2000/DeviceNet) such as motors, sensors and many other devices.
-- [**36**星][5m] [Py] [m57/piescan](https://github.com/m57/piescan) A simple fast port scanner for when you cant use Nmap on a pentest.
+- [**36**星][3m] [Go] [mame82/munifying](https://github.com/mame82/munifying)
- [**36**星][1m] [PHP] [linuxsec/indoxploit-shell](https://github.com/linuxsec/indoxploit-shell) IndoXploit Webshell V.3
+- [**36**星][5y] [Shell] [linkp2p/wps-pin](https://github.com/linkp2p/wps-pin) # This scripts is edited under the General Public License as defined by the Free software foundation. # This package is distributed in the hope that it will be useful, but without any warranty; It can be used and modified and shared but should be referenced to, it CANNOT be # sold or be used for a commercial-economical purpose. # See the detail…
- [**36**星][1y] [Go] [leoloobeek/gogreen](https://github.com/leoloobeek/gogreen) Environmental (and http) keying for scripting languages
-- [**36**星][1y] [Py] [lasq88/deobfuscate](https://github.com/lasq88/deobfuscate) Python script to automatically deobfuscate malware code
- [**36**星][5y] [C++] [kkar/teamviewer-dumper-in-cpp](https://github.com/kkar/teamviewer-dumper-in-cpp) Dumps TeamViewer ID,Password and account settings from a running TeamViewer instance by enumerating child windows.
+- [**36**星][10m] [Shell] [keeganjk/kali-anonymous](https://github.com/keeganjk/kali-anonymous)
- [**36**星][6m] [Shell] [kawaxi/kali-setup](https://github.com/kawaxi/kali-setup) Bash script to fully setup your kali system.
-- [**36**星][4y] [Java] [julianschuette/condroid](https://github.com/julianschuette/condroid) Symbolic/concolic execution of Android apps
-- [**36**星][27d] [JS] [jrjr/paw.js](https://github.com/jrjr/paw.js) Passwordless Authentication Wallet (PAW) is key-based authentication for the web. The library helps manage identities, their associated public/private keypairs, and signing operations in the browser.
+- [**36**星][29d] [JS] [jrjr/paw.js](https://github.com/jrjr/paw.js) Passwordless Authentication Wallet (PAW) is key-based authentication for the web. The library helps manage identities, their associated public/private keypairs, and signing operations in the browser.
- [**36**星][2y] [jhaddix/bug-bounty-reference](https://github.com/jhaddix/bug-bounty-reference) Inspired by
- [**36**星][2y] [JS] [jamiebuilds/guarded-string](https://github.com/jamiebuilds/guarded-string) Prevent accidentally introducing XSS holes with the strings in your app
-- [**36**星][3m] [Go] [jakejarvis/subtake](https://github.com/jakejarvis/subtake) Automatic finder for subdomains vulnerable to takeover. Written in Go, based on
+- [**36**星][9m] [C] [ivanfratric/winafl](https://github.com/ivanfratric/winafl) Windows 二进制文件fuzz工具
- [**36**星][4y] [C] [in12hacker/vt_64_ept](https://github.com/in12hacker/vt_64_ept) createfile
- [**36**星][2y] [C++] [illusivenetworks-labs/getconsolehistoryandoutput](https://github.com/illusivenetworks-labs/getconsolehistoryandoutput) An Incident Response tool to extract console command history and screen output buffer
-- [**36**星][27d] [hwroot/presentations](https://github.com/hwroot/presentations)
-- [**36**星][4m] [Py] [hugsy/gef-extras](https://github.com/hugsy/gef-extras) Extra goodies for GEF: Open repository for unfiltered contributions to the project.
+- [**36**星][7d] [Lua] [igalia/snabb](https://github.com/igalia/snabb) Snabb Switch: Fast open source packet processing
+- [**36**星][29d] [hwroot/presentations](https://github.com/hwroot/presentations)
- [**36**星][3m] [Shell] [hromie/obfs4proxy-openvpn](https://github.com/hromie/obfs4proxy-openvpn) Obfuscating OpenVPN traffic using obfs4proxy
- [**36**星][2y] [C++] [hitanshu-dhawan/imagesteganography](https://github.com/hitanshu-dhawan/imagesteganography)
- [**36**星][9m] [Shell] [gusbemacbe/suru-plus-dark](https://github.com/gusbemacbe/suru-plus-dark) Suru++ 25 Dark — A full dark cyberpunk, elegant, futuristic and Papirus-like third-party icons theme
+- [**36**星][5m] [C] [geosn0w/geofilza](https://github.com/geosn0w/geofilza) Filza No Jailbreak
- [**36**星][8y] [C#] [gdssecurity/wcf-binary-soap-plug-in](https://github.com/gdssecurity/wcf-binary-soap-plug-in) This is a Burp Suite plug-in designed to encode and decode WCF Binary Soap request and response data ("Content-Type: application/soap+msbin1). There are two versions of the plug-in available (consult the README for more information).
- [**36**星][3y] [C#] [gdssecurity/psattack](https://github.com/gdssecurity/psattack) A portable console aimed at making pentesting with PowerShell a little easier.
- [**36**星][8y] [Py] [gdssecurity/burpee](https://github.com/gdssecurity/burpee) Python object interface to requests/responses recorded by Burp Suite
- [**36**星][2y] [fuzzysecurity/defcon-beijing-uac](https://github.com/fuzzysecurity/defcon-beijing-uac) Slide deck for DefCon Beijing
-- [**36**星][29d] [Go] [fuzzitdev/example-go](https://github.com/fuzzitdev/example-go) Go Fuzzit Example
+- [**36**星][1m] [Go] [fuzzitdev/example-go](https://github.com/fuzzitdev/example-go) Go Fuzzit Example
- [**36**星][3y] [D] [f-secure/reflash](https://github.com/f-secure/reflash) ActionScript3 dynamic instrumentation tool
- [**36**星][2y] [Py] [extremecoders-re/pjorion-deobfuscator](https://github.com/extremecoders-re/pjorion-deobfuscator) A deobfuscator for PjOrion, python cfg generator and more
- [**36**星][5y] [Py] [eurecom-s3/actaeon](https://github.com/eurecom-s3/actaeon) Memory forensics of virtualization environments
+- [**36**星][23d] [C++] [erickutcher/httpdownloader](https://github.com/erickutcher/httpdownloader) HTTP(S) download manager that uses input/output completion ports (IOCP).
- [**36**星][3y] [Py] [ec-digit-csirc/virustotal-tools](https://github.com/ec-digit-csirc/virustotal-tools)
-- [**36**星][19d] [Assembly] [dpt/the-great-escape](https://github.com/dpt/the-great-escape) Reverse engineering classic ZX Spectrum game "The Great Escape"
-- [**36**星][2y] [PowerShell] [dmb2168/oauthhunting](https://github.com/dmb2168/oauthhunting)
+- [**36**星][14d] [Py] [draios/python-sdc-client](https://github.com/draios/python-sdc-client) Sysdig Monitor/Secure Python client library
+- [**36**星][21d] [Assembly] [dpt/the-great-escape](https://github.com/dpt/the-great-escape) Reverse engineering classic ZX Spectrum game "The Great Escape"
- [**36**星][4y] [Py] [dionach/codeigniterxor](https://github.com/dionach/codeigniterxor) CodeIgniter <=2.1.4 session cookie decryption vulnerability
- [**36**星][1m] [C++] [dankirk/regslscan](https://github.com/dankirk/regslscan) A tool for scanning registery key permissions. Find where non-admins can create symbolic links.
- [**36**星][12m] [Py] [dahua966/web-awd-framework](https://github.com/dahua966/web-awd-framework) AWD framework for web in CTF by HuaSir
-- [**36**星][3y] [C] [cylancevulnresearch/osx_runbin](https://github.com/cylancevulnresearch/osx_runbin)
+- [**36**星][3y] [Awk] [d3sre/understanding_the_ndis_6_stack](https://github.com/d3sre/understanding_the_ndis_6_stack) Public documents about bachelor thesis "Reverse Engineering Analysis of the NDIS 6.* stack"
+- [**36**星][8m] [Py] [cyubuchen/free_proxy_website](https://github.com/cyubuchen/free_proxy_website) 获取免费socks/https/http代理的网站集合
- [**36**星][3y] [Objective-C++] [cyhe/iossecurity-attack](https://github.com/cyhe/iossecurity-attack) APP安全(逆向攻击篇)
- [**36**星][4y] [C#] [cweb/unicode-hax](https://github.com/cweb/unicode-hax) A library to assist in security-testing Unicode enabled applications during fuzzing, XSS, SQLi, etc.
-- [**36**星][10d] [PowerShell] [cube0x0/security-assessment](https://github.com/cube0x0/security-assessment) Scripts to automate some part of Security/Vulnerability Assessment
+- [**36**星][8d] [PS] [cube0x0/security-assessment](https://github.com/cube0x0/security-assessment) Scripts to automate some part of Security/Vulnerability Assessment
+- [**36**星][5m] [PHP] [ctubio/php-proxy-keyserver](https://github.com/ctubio/php-proxy-keyserver) PHP proxy and extensible web interface forwarding standard HKP requests to a local or remote SKS OpenPGP Keyserver.
- [**36**星][2y] [Py] [cr4sh/smram_parse](https://github.com/cr4sh/smram_parse) System Management RAM analysis tool
- [**36**星][3y] [C++] [cn33liz/tpminituacanniversarybypass](https://github.com/cn33liz/tpminituacanniversarybypass) Bypassing User Account Control (UAC) using TpmInit.exe
-- [**36**星][2y] [PowerShell] [clr2of8/commentator](https://github.com/clr2of8/commentator)
-- [**36**星][8d] [Java] [cliqz-oss/browser-android](https://github.com/cliqz-oss/browser-android) CLIQZ for Android
+- [**36**星][2y] [PS] [clr2of8/commentator](https://github.com/clr2of8/commentator)
+- [**36**星][10d] [Java] [cliqz-oss/browser-android](https://github.com/cliqz-oss/browser-android) CLIQZ for Android
- [**36**星][4m] [Py] [cisco-talos/re2pcap](https://github.com/cisco-talos/re2pcap)
-- [**36**星][2y] [C++] [cedarctic/digiquack](https://github.com/cedarctic/digiquack) A DuckyScript language to DigiSpark payload converter based on C++
+- [**36**星][3y] [C] [changeofpace/pe-header-dump-utilities](https://github.com/changeofpace/pe-header-dump-utilities) This x64dbg plugin adds several commands for dumping PE header information by address.
- [**36**星][4y] [Py] [byt3bl33d3r/toby](https://github.com/byt3bl33d3r/toby) Recursively searches a directory for any file containing a specified string
- [**36**星][2y] [Py] [brianwrf/s2-053-cve-2017-12611](https://github.com/brianwrf/s2-053-cve-2017-12611) A simple script for exploit RCE for Struts 2 S2-053(CVE-2017-12611)
- [**36**星][3y] [C] [brad-anton/proxbrute](https://github.com/brad-anton/proxbrute) Modified proxmark3 firmware to perform brute forcing of 26-Bit ProxCards
- [**36**星][2y] [PHP] [bogdaan/spycss](https://github.com/bogdaan/spycss) Track user interactions without JavaScript
- [**36**星][4y] [C++] [bobotig/cracker-ng](https://github.com/bobotig/cracker-ng) ZIP cracker, CCRYPT cracker, and others to come.
- [**36**星][2y] [JS] [blackhole1/fecm](https://github.com/blackhole1/fecm) 前端XSS防火墙及后台报警系统(front-end XSS firewall and back-end alarm system)
-- [**36**星][8y] [bes/keystorebrute](https://github.com/bes/keystorebrute) A Keystore Brute-force attacker.
-- [**36**星][1y] [Java] [augustd/burp-suite-error-message-checks](https://github.com/augustd/burp-suite-error-message-checks) Burp Suite extension to passively scan for applications revealing server error messages
- [**36**星][3y] [C] [arodland/haproxy](https://github.com/arodland/haproxy) Experiment with haproxy
-- [**36**星][1y] [Py] [aptnotes/tools](https://github.com/aptnotes/tools) Tools to interact with APTnotes reporting/index.
+- [**36**星][1m] [JS] [anseki/gnirts](https://github.com/anseki/gnirts) Obfuscate string literals in JavaScript code.
- [**36**星][10m] [Py] [anic/ida2pwntools](https://github.com/anic/ida2pwntools) IDA插件,远程连接pwntools启动的程序进行pwn调试
- [**36**星][7m] [Py] [anantshri/ds_store_crawler_parser](https://github.com/anantshri/ds_store_crawler_parser) a parser + crawler for .DS_Store files exposed publically
-- [**36**星][26d] [Py] [ahmia/ahmia-site](https://github.com/ahmia/ahmia-site) Ahmia.fi - Hidden service search engine
-- [**36**星][15d] [Py] [agroce/universalmutator](https://github.com/agroce/universalmutator) Regexp based tool for mutating generic source code across numerous languages
+- [**36**星][28d] [Py] [ahmia/ahmia-site](https://github.com/ahmia/ahmia-site) Ahmia.fi - Hidden service search engine
+- [**36**星][17d] [Py] [agroce/universalmutator](https://github.com/agroce/universalmutator) Regexp based tool for mutating generic source code across numerous languages
- [**36**星][5y] [C++] [adamkramer/jmp2it](https://github.com/adamkramer/jmp2it) Transfer EIP control to shellcode during malware analysis investigation
- [**36**星][2y] [C] [adamgreen/mri](https://github.com/adamgreen/mri) MRI - Monitor for Remote Inspection. The gdb compatible debug monitor for Cortex-M devices.
- [**36**星][1y] [ab1gale/phpcms-2008-cve-2018-19127](https://github.com/ab1gale/phpcms-2008-cve-2018-19127)
- [**36**星][3y] [Py] [a7vinx/swarm](https://github.com/a7vinx/swarm) A modular distributed penetration testing tool.
- [**36**星][4y] [7iosecurity/xss-payloads](https://github.com/7iosecurity/xss-payloads) XSS Payloads
-- [**36**星][4y] [Py] [73696e65/windows-exploits](https://github.com/73696e65/windows-exploits) Used for the osce exam preparation
-- [**36**星][3m] [C] [0x7ff/dimentio](https://github.com/0x7ff/dimentio) PoC tool for setting nonce without triggering KPP/KTRR/PAC. (requires tfp0)
-- [**35**星][27d] [Py] [mak-/scanomaly](https://github.com/mak-/scanomaly) This is a web application fuzzer scanner - the goal was CLI flexibility and rapid prototyping
+- [**36**星][4y] [PS] [5alt/zerorat](https://github.com/5alt/zerorat) ZeroRAT是一款windows上的一句话远控
+- [**36**星][7d] [C] [0x7ff/dimentio](https://github.com/0x7ff/dimentio) PoC tool for setting nonce without triggering KPP/KTRR/PAC. (requires tfp0)
+- [**36**星][3y] [Py] [0ang3el/unsafe-jax-rs-burp](https://github.com/0ang3el/unsafe-jax-rs-burp) Burp Suite extension for JAX-RS
+- [**35**星][2y] [unbinilium/surge](https://github.com/unbinilium/surge) Shadowsocks Encrypt Support Module for Surge APP, iOS & MacOS Configuration
+- [**35**星][7m] [tidesec/mars](https://github.com/tidesec/mars) Mars(战神)——结合Tide资产探测和指纹识别方面的技术积累,为客户提供更高效智能的安全检测和安全监测服务。
+- [**35**星][2m] [Lua] [chaitin/safeline-open-platform](https://github.com/chaitin/safeline-open-platform)
+- [**35**星][29d] [Py] [mak-/scanomaly](https://github.com/mak-/scanomaly) This is a web application fuzzer scanner - the goal was CLI flexibility and rapid prototyping
- [**35**星][5m] [HTML] [nsacyber/bitlocker-guidance](https://github.com/nsacyber/bitlocker-guidance) Configuration guidance for implementing BitLocker. #nsacyber
- [**35**星][4y] [Py] [lanjelot/web-hunter](https://github.com/lanjelot/web-hunter) Crawl Google and Bing to find emails, subdomains and URLs associated to a target domain
- [**35**星][2m] [LLVM] [galoisinc/llvm-pretty-bc-parser](https://github.com/galoisinc/llvm-pretty-bc-parser) Parser for the llvm bitcode format
- [**35**星][9m] [JS] [paulsec/shodan.io-mobile-app](https://github.com/paulsec/shodan.io-mobile-app) Official repository for the Shodan.io mobile Application
- [**35**星][6y] [Py] [robindavid/captcha-basic-recognition](https://github.com/robindavid/captcha-basic-recognition) Python module that intent to crack basic captcha engines using OpenCV and Pytesser
-- [**35**星][14d] [Py] [vdoo-connected-trust/ghidra-pyi-generator](https://github.com/vdoo-connected-trust/ghidra-pyi-generator) Generates `.pyi` type stubs for the entire Ghidra API
-- [**35**星][29d] [PowerShell] [vletoux/bluekeep-scanner](https://github.com/vletoux/bluekeep-scanner) BlueKeep powershell scanner (based on c# code)
-- [**35**星][30d] [Java] [ayrx/jnianalyzer](https://github.com/ayrx/jnianalyzer) Analysis scripts for Ghidra to work with Android NDK libraries.
+- [**35**星][1m] [PS] [vletoux/bluekeep-scanner](https://github.com/vletoux/bluekeep-scanner) BlueKeep powershell scanner (based on c# code)
- [**35**星][2y] [Shell] [secfathy/bugzee](https://github.com/secfathy/bugzee) Simple Script to install recommended Bug Bounty Hunting Tools In Your Linux Disto
-- [**35**星][1m] [C++] [chickenhook/chickenhook](https://github.com/chickenhook/chickenhook) A linux / android hooking framework
- [**35**星][1m] [jasonniebauer/nmap-cheatsheet](https://github.com/jasonniebauer/nmap-cheatsheet) Reference guide for scanning networks with Nmap.
-- [**35**星][7d] [Java] [gedsh/invizible](https://github.com/gedsh/invizible) Android application for Internet privacy and security
-- [**35**星][8d] [CSS] [fabriziofubelli/black-widow](https://github.com/fabriziofubelli/black-widow) Offensive penetration testing tool (Open Source)
-- [**35**星][21d] [Rust] [scipr-lab/poly-commit](https://github.com/scipr-lab/poly-commit) A Rust library for polynomial commitments
-- [**35**星][3y] [Py] [lightless233/pansidong](https://github.com/lightless233/Pansidong) 盘丝洞 - 自动化WEB漏洞扫描器
-- [**35**星][2y] [HTML] [electroniccats/samykamtools](https://github.com/ElectronicCats/SamyKamTools) Magnetic Pentesting tool for Raspberry Pi
+- [**35**星][2d] [CSS] [fabriziofubelli/black-widow](https://github.com/fabriziofubelli/black-widow) Offensive penetration testing tool (Open Source)
+- [**35**星][15d] [Rust] [scipr-lab/poly-commit](https://github.com/scipr-lab/poly-commit) A Rust library for polynomial commitments
+- [**35**星][2y] [Shell] [re4son/pocket-kali-live-build](https://github.com/Re4son/Pocket-Kali-live-build) Debian live build for the Pocket-Kali
+- [**35**星][3y] [polarislab/aesgfic](https://github.com/PolarisLab/AESGFIC) 互联网企业安全高级指南读书笔记脑图 -
- [**35**星][1y] [Java] [bit4woo/resign](https://github.com/bit4woo/ReSign) A burp extender that recalculate signature value automatically after you modified request parameter value.
- [**35**星][5y] [C] [intel/kvmgt-kernel](https://github.com/intel/KVMGT-kernel)
- [**35**星][3y] [JS] [yxhsea/xss](https://github.com/yxhsea/xss) web安全之模拟xss攻击
- [**35**星][3y] [Shell] [rumpkernel/rumpctrl](https://github.com/rumpkernel/rumpctrl) Control and diagnostic applications for rump kernels
- [**35**星][7y] [Java] [continuumsecurity/resty-burp](https://github.com/continuumsecurity/resty-burp) REST/JSON interface to Burp Suite
-- [**35**星][10d] [Rust] [rair-project/rair-core](https://github.com/Rair-Project/rair-core) RAIR: RAdare In Rust
+- [**35**星][2d] [Rust] [rair-project/rair-core](https://github.com/Rair-Project/rair-core) RAIR: RAdare In Rust
- [**35**星][2m] [Go] [62726164/netscan](https://github.com/62726164/netscan) A fast TCP port scanner
+- [**35**星][1y] [PHP] [rickmacgillis/hackfastalgos](https://github.com/rickmacgillis/hackfastalgos) A library of various fast algorithms written in Hack
- [**35**星][2y] [Py] [hash3lizer/airpydump](https://github.com/hash3liZer/airpydump) Analyze Wireless Packets on the fly. Currently supporting three working Modes (Reader, Live, Stealth)
- [**35**星][8y] [Py] [zynamics/ida2sql-plugin-ida](https://github.com/zynamics/ida2sql-plugin-ida)
- [**35**星][5m] [HTML] [zhuowei/worthdoingbadly.com](https://github.com/zhuowei/worthdoingbadly.com) My blog where I make a new coding project every Thursday.
- [**35**星][4y] [C++] [zer0mem/libc](https://github.com/zer0mem/libc) Kernel C++ driver developing library; std & boost partially supported
-- [**35**星][1m] [Py] [zephrfish/burpfeed](https://github.com/zephrfish/burpfeed) Hacked together script for feeding urls into Burp's Sitemap
-- [**35**星][10m] [Go] [yvesago/shodan-cli](https://github.com/yvesago/shodan-cli) Simple golang shodan cli
+- [**35**星][11m] [Go] [yvesago/shodan-cli](https://github.com/yvesago/shodan-cli) Simple golang shodan cli
+- [**35**星][2y] [yuvadm/dg-m1q](https://github.com/yuvadm/dg-m1q) DG-M1Q IP camera alternative usage
- [**35**星][5y] [C] [yuange75/aspcode](https://github.com/yuange75/aspcode) aspcode堆溢出利用代码
- [**35**星][1y] [Py] [yaokaiyang-assaultmaster/pythonportscanner](https://github.com/yaokaiyang-assaultmaster/pythonportscanner)
+- [**35**星][3y] [Py] [yang3yen/pysm4](https://github.com/yang3yen/pysm4) Python SM4
- [**35**星][3y] [Py] [yanceyblog/scrapy-multi](https://github.com/yanceyblog/scrapy-multi) 实现多个爬虫共同工作的scrapy爬虫实例
- [**35**星][2y] [C] [xerub/ibex64](https://github.com/xerub/ibex64) iBoot64 Payload Development Toolkit
-- [**35**星][12d] [Py] [x-vector/x-rsa](https://github.com/x-vector/x-rsa) Cryptography Tool | RSA Attacks
+- [**35**星][14d] [Py] [x-vector/x-rsa](https://github.com/x-vector/x-rsa) Cryptography Tool | RSA Attacks
+- [**35**星][1y] [Swift] [vixentael/zka-example](https://github.com/vixentael/zka-example) Zero Knowledge Application example, iOS, notes sharing, Firebase backend
+- [**35**星][1y] [C++] [venam/browser](https://github.com/venam/browser) A Simple to use yet efficient headers only library ( wrapped over libcurl / curl wrapper ) to do browser emulation (emulate) or web interaction in C++.
- [**35**星][1y] [ustayready/cloudburst](https://github.com/ustayready/cloudburst) CloudBurst is a red team framework for interacting with cloud providers to capture, compromise, and exfil data.
- [**35**星][4y] [C++] [uncseclab/vmxxnr](https://github.com/uncseclab/vmxxnr) Implementation of a thin hypervisor
- [**35**星][1y] [HTML] [umbertocicero/coinhive-monero](https://github.com/umbertocicero/coinhive-monero)
- [**35**星][6m] [Py] [trylinux/lift](https://github.com/trylinux/lift) Low-Impact Fingerprint Tool
+- [**35**星][3y] [C] [topcss/wannacry](https://github.com/topcss/wannacry) 勒索病毒WannaCry反编译源码
+- [**35**星][2y] [Perl] [tls-check/tls-check](https://github.com/tls-check/tls-check) TLS-Check – a security/encryption scanner and framework for checking IT Security and the capability to be innovative
- [**35**星][7m] [Py] [tidesec/tdscanner](https://github.com/tidesec/tdscanner) 自动化检测小工具,主要实现了域名枚举、链接爬取、注入检测、主机扫描、目录枚举、敏感信息检测等功能~
- [**35**星][2y] [Java] [thecyaniteproject/exit_code_java](https://github.com/thecyaniteproject/exit_code_java) ExitCode - The Free, Open-Source, Desktop & Hacking Simulator Game.
- [**35**星][6m] [Py] [testingpens/constole](https://github.com/testingpens/constole) Scan for and exploit Consul agents
- [**35**星][5m] [Rust] [teovoinea/steganography](https://github.com/teovoinea/steganography) A simple steganography library written in rust
- [**35**星][2y] [technicaldada/best-hacking-tools](https://github.com/technicaldada/best-hacking-tools) BEST HACKING TOOLS..For more tools visit our blog for Hackers
+- [**35**星][2y] [Py] [superbuker/camhell](https://github.com/superbuker/camhell) Ingenic T10 IP camera crawler
- [**35**星][6m] [Shell] [sundowndev/covermyass](https://github.com/sundowndev/covermyass) Shell tool to cover your tracks on UNIX systems. Designed for pen testing "covering tracks" phase, before exiting the infected server. Or, permanently disable system logs for post-exploitation.
- [**35**星][9m] [C] [sud0man/pac4mac](https://github.com/sud0man/pac4mac) Automatically exported from code.google.com/p/pac4mac
- [**35**星][1y] [JS] [stdarg/tcp-port-used](https://github.com/stdarg/tcp-port-used) A simple Node.js module to check if a TCP port is already bound.
-- [**35**星][1y] [PowerShell] [sqlcollaborative/invoke-sqlcmd2](https://github.com/sqlcollaborative/invoke-sqlcmd2) PowerShell module containing Invoke-SqlCmd2
+- [**35**星][1y] [PS] [sqlcollaborative/invoke-sqlcmd2](https://github.com/sqlcollaborative/invoke-sqlcmd2) PowerShell module containing Invoke-SqlCmd2
+- [**35**星][9y] [Perl] [spiderlabs/ackack](https://github.com/spiderlabs/ackack) A program to monitor network traffic and detect unauthorized sessions.
- [**35**星][2y] [Py] [webr0ck/waf_bypass_helper](https://github.com/sndvul/waf_bypass_helper) Python script for generating bypass of your attack
- [**35**星][6m] [C] [sistr0/ps4-hen-vtx](https://github.com/sistr0/ps4-hen-vtx) A fully implemented kernel exploit for the PS4 with HEN
- [**35**星][5y] [Py] [siberas/ida2sym](https://github.com/siberas/ida2sym) IDAScript to create Symbol file which can be loaded in WinDbg via AddSyntheticSymbol
@@ -13761,16 +14707,19 @@ networking routines
- [**35**星][8y] [C] [sduverger/ld-shatner](https://github.com/sduverger/ld-shatner) ld-linux code injector
- [**35**星][6y] [C++] [scen/ionlib](https://github.com/scen/ionlib) c++11 reverse engineering library. bootstraps common tasks in game hacking and reverse engineering
- [**35**星][2y] [C#] [scavanger/memorymodule.net](https://github.com/scavanger/memorymodule.net) Loading a native DLL in the memory.
+- [**35**星][2y] [C] [satoshinm/pill_duck](https://github.com/satoshinm/pill_duck) Scriptable USB HID device for STM32F103 blue pill (inspired by USB Rubber Ducky) ⛺
- [**35**星][4y] [Shell] [samyoyo/flux](https://github.com/samyoyo/flux) Flux is a [WIFI CRACKER]
-- [**35**星][6m] [Py] [ruped24/tor_ip_switcher](https://github.com/ruped24/tor_ip_switcher) tor_ip_switcher is useful for making any DoS attack look like a DDoS attack. Works with toriptables2.
-- [**35**星][29d] [Py] [roddhjav/pass-audit](https://github.com/roddhjav/pass-audit) A pass extension for auditing your password repository.
+- [**35**星][1m] [Py] [roddhjav/pass-audit](https://github.com/roddhjav/pass-audit) A pass extension for auditing your password repository.
- [**35**星][2y] [ritiek/rat-via-telegram](https://github.com/ritiek/rat-via-telegram) Removed according to regulations
- [**35**星][5y] [C#] [redth/android.signature.tool](https://github.com/redth/android.signature.tool) Simple GUI tool for Mac and Windows to help find the SHA1 and MD5 hashes of your Android keystore's and apk's
- [**35**星][1y] [C] [realoriginal/alpc-diaghub](https://github.com/realoriginal/alpc-diaghub) Utilizing the ALPC Flaw in combiniation with Diagnostics Hub as found in Server 2016 and Windows 10.
+- [**35**星][2y] [Py] [r0oth3x49/tor](https://github.com/r0oth3x49/tor) Tor is a python based module for using tor proxy/network services on windows, osx, linux with just one click.
- [**35**星][2y] [PHP] [propaganistas/email-obfuscator](https://github.com/propaganistas/email-obfuscator)
- [**35**星][1y] [C] [prodicode/arppd](https://github.com/prodicode/arppd) An ARP Poisoning Defender script
+- [**35**星][3m] [PS] [dsccommunity/xfailovercluster](https://github.com/dsccommunity/xFailOverCluster) This module contains DSC resources for deployment and configuration of Windows Server Failover Cluster.
- [**35**星][5y] [plutochiou/shadowsocks-rss](https://github.com/plutochiou/shadowsocks-rss) shadowsocks update rss
- [**35**星][3y] [Java] [onurkarasalihoglu/pentest-tools](https://github.com/onurkarasalihoglu/pentest-tools)
+- [**35**星][2y] [JS] [one-com/one-validation](https://github.com/one-com/one-validation) Regexp based validation collection for common internet validation tasks
- [**35**星][8m] [offensive-security/kali-wsl-chroot](https://github.com/offensive-security/kali-wsl-chroot) Kali Linux Windows App chroot builder script
- [**35**星][8m] [Py] [oddcoder/cutterdrcov](https://github.com/oddcoder/cutterdrcov) DynamoRIO coverage visualization for cutter
- [**35**星][5m] [ocatak/malware_api_class](https://github.com/ocatak/malware_api_class) Malware dataset for security researchers, data scientists. Public malware dataset generated by Cuckoo Sandbox based on Windows OS API calls analysis for cyber security researchers
@@ -13778,14 +14727,15 @@ networking routines
- [**35**星][1y] [C] [ntraiseharderror/kaiser](https://github.com/ntraiseharderror/kaiser) Fileless persistence, attacks and anti-forensic capabilties.
- [**35**星][7m] [C] [ntraiseharderror/antihook](https://github.com/ntraiseharderror/antihook) PoC designed to evade userland-hooking anti-virus.
- [**35**星][6m] [C] [ns1/xdp-workshop](https://github.com/ns1/xdp-workshop) Velocity SJC 2019 - DDoS mitigation made easy with XDP and eBPF
-- [**35**星][5m] [C#] [not-matthias/nemesis](https://github.com/not-matthias/nemesis) A customizable process dumper.
-- [**35**星][5m] [Go] [northern-lights/yara-parser](https://github.com/northern-lights/yara-parser) Tools for parsing rulesets using the exact grammar as YARA. Written in Go.
- [**35**星][3y] [C] [nnamon/practicalret2libc](https://github.com/nnamon/practicalret2libc) Practical Return to Libc in 12 Minutes Presentation + practice for CS3235 YouTeach project.
+- [**35**星][21d] [C] [nil0x42/duplicut](https://github.com/nil0x42/duplicut) Quickly remove duplicates, without changing the order, and without getting OOM on huge wordlists.
- [**35**星][5y] [C++] [nihilus/ida_classinformer](https://github.com/nihilus/ida_classinformer) IDA ClassInformer PlugIn
- [**35**星][6y] [PHP] [nightlionsecurity/phpstress](https://github.com/nightlionsecurity/phpstress) phpstress:对运行PHP-FPM 或 PHP-CGI 的网页服务器进行DoS/压力测试
- [**35**星][10m] [Shell] [nicoulaj/broom](https://github.com/nicoulaj/broom) A disk cleaning utility for developers.
-- [**35**星][1y] [Py] [nhoya/mycroftai-rce](https://github.com/nhoya/mycroftai-rce) "Zero Click" Remote Code Execution in Mycroft AI vocal assistant
+- [**35**星][2y] [Py] [nhoya/mycroftai-rce](https://github.com/nhoya/mycroftai-rce) "Zero Click" Remote Code Execution in Mycroft AI vocal assistant
+- [**35**星][5y] [Py] [netxfly/eventlog-audit](https://github.com/netxfly/eventlog-audit) Windows事件日志审计系统,支持以WEB的方式审计日志
- [**35**星][8m] [Go] [netevert/delator](https://github.com/netevert/delator) Golang-based subdomain miner leveraging certificate transparency logs
+- [**35**星][3y] [Java] [netcrusherorg/netcrusher-java](https://github.com/netcrusherorg/netcrusher-java) NetCrusher is a TCP/UDP proxy that allows to test services for failover
- [**35**星][2y] [Py] [neargle/tips-note](https://github.com/neargle/tips-note) 做过的实验,踩过的坑
- [**35**星][4y] [Shell] [ncsa/ossec-tools](https://github.com/ncsa/ossec-tools) Scripts and integrations for OSSEC
- [**35**星][3y] [Py] [n1nj4sec/pymemimporter](https://github.com/n1nj4sec/pymemimporter) import pyd or execute PE all from memory using only pure python code and some shellcode tricks
@@ -13793,27 +14743,28 @@ networking routines
- [**35**星][5y] [Py] [miserlou/onionchat](https://github.com/miserlou/onionchat) Anonymous chat. No Javascript.
- [**35**星][2m] [Py] [michaelstott/crlf-injection-scanner](https://github.com/michaelstott/crlf-injection-scanner) Command line tool for testing CRLF injection on list of domains.
- [**35**星][2y] [Py] [meyer9/ethdasm](https://github.com/meyer9/ethdasm) Tool for auditing Ethereum contracts
+- [**35**星][2y] [Go] [metalnem/zinio](https://github.com/metalnem/zinio) This command line tool removes DRM from magazines in your digital Zinio library
- [**35**星][4m] [Go] [maxlaverse/reverse-shell](https://github.com/maxlaverse/reverse-shell) A reverse-shell agent, master and rendezvous point written in Go
-- [**35**星][3y] [PowerShell] [machosec/mystique](https://github.com/machosec/mystique) PowerShell module to play with Kerberos S4U extensions
+- [**35**星][3y] [PS] [machosec/mystique](https://github.com/machosec/mystique) PowerShell module to play with Kerberos S4U extensions
- [**35**星][3y] [C#] [m4ndingo/radare2gui_dotnet](https://github.com/m4ndingo/radare2gui_dotnet) Another radare2 gui for windows
+- [**35**星][1y] [JS] [lmammino/distributed-jwt-cracker](https://github.com/lmammino/distributed-jwt-cracker) An experimental distributed JWT token cracker built using Node.js and ZeroMQ
- [**35**星][4y] [Py] [laginimaineb/unpack_bootloader_image](https://github.com/laginimaineb/unpack_bootloader_image) Small script to unpack the bootloader image format present in Nexus 5 devices
+- [**35**星][9m] [C] [l4ys/lazyklee](https://github.com/l4ys/lazyklee) Lazy python wrapper of KLEE for solving CTF challenges
- [**35**星][3y] [Go] [kung-foo/freki](https://github.com/kung-foo/freki) Freki is a tool to manipulate packets in usermode using NFQUEUE and golang.
- [**35**星][4m] [Py] [ktenzer/openshift-on-openstack-123](https://github.com/ktenzer/openshift-on-openstack-123) Deploy OpenShift on OpenStack
- [**35**星][4y] [Py] [kitctf/ctfcode](https://github.com/kitctf/ctfcode) Collection of somewhat useful stuff for CTF events
- [**35**星][2y] [JS] [kingsabri/sqlmap-tamper-api](https://github.com/kingsabri/sqlmap-tamper-api) SQLMap tamper api to accept tamper scripts from all languages
-- [**35**星][10m] [Shell] [keeganjk/kali-anonymous](https://github.com/keeganjk/kali-anonymous)
+- [**35**星][1y] [Java] [kingkaki/struts2-vulenv](https://github.com/kingkaki/struts2-vulenv) struts2 漏洞环境源代码
- [**35**星][2y] [C] [jordan9001/superhide](https://github.com/jordan9001/superhide) Example of hooking a linux systemcall
- [**35**星][3y] [Go] [jmpews/goscan](https://github.com/jmpews/goscan) golang的扫描框架, 支持协程池和自动调节协程个数.
- [**35**星][1y] [Py] [jimmy-sonny/yayagen](https://github.com/jimmy-sonny/yayagen) Yet Another YARA rule Generator
- [**35**星][3y] [JS] [jackgu1988/dsploit-scripts](https://github.com/jackgu1988/dsploit-scripts) Scripts that could be injected in MITM attacks using dSploit
-- [**35**星][9m] [C] [ivanfratric/winafl](https://github.com/ivanfratric/winafl) Windows 二进制文件fuzz工具
-- [**35**星][20d] [PHP] [isometriks/isometriksspambundle](https://github.com/isometriks/isometriksspambundle) Symfony3 Form Spam Protection
+- [**35**星][22d] [PHP] [isometriks/isometriksspambundle](https://github.com/isometriks/isometriksspambundle) Symfony3 Form Spam Protection
- [**35**星][3y] [Perl] [interference-security/kali-windows-binaries](https://github.com/interference-security/kali-windows-binaries) Windows binaries from Kali Linux :
- [**35**星][3y] [Py] [immunio/apache-struts2-cve-2017-5638](https://github.com/immunio/apache-struts2-cve-2017-5638) Demo Application and Exploit
- [**35**星][6y] [Py] [ilektrojohn/creepy-plugins](https://github.com/ilektrojohn/creepy-plugins) Plugins for cree.py
- [**35**星][1y] [Java] [ikkisoft/blazer](https://github.com/ikkisoft/blazer) Burp Suite AMF Extension
- [**35**星][4y] [Py] [iiseymour/game-of-life](https://github.com/iiseymour/game-of-life) Conway's Game Of Life
-- [**35**星][1m] [Lua] [igalia/snabb](https://github.com/igalia/snabb) Snabb Switch: Fast open source packet processing
- [**35**星][3y] [Shell] [huntergregal/malwaresandbox](https://github.com/huntergregal/malwaresandbox) A ready to deploy docker container for a fresh sandbox for on-the-fly malware analysis
- [**35**星][3y] [Py] [huntergregal/bothunter](https://github.com/huntergregal/bothunter) Scans the internet for open FTP servers looking for common malware bot droppers and grabs them for sampling. Also provides support for uploading samples to VirusTotal
- [**35**星][5y] [Py] [holloway/insiderer](https://github.com/holloway/insiderer) Insiderer looks inside files for metadata and hidden content
@@ -13823,91 +14774,108 @@ networking routines
- [**35**星][3y] [C] [harvie/libpurple-core-answerscripts](https://github.com/harvie/libpurple-core-answerscripts) Most-hackable Pidgin plugin! Framework for hooking scripts to respond received messages for various libpurple clients such as pidgin or finch
- [**35**星][2y] [Py] [hanc00l/weblogic_wls_wsat_rce](https://github.com/hanc00l/weblogic_wls_wsat_rce) forked from
- [**35**星][3y] [hacking-and-coffee/defcon-for-n00bs](https://github.com/hacking-and-coffee/defcon-for-n00bs) DEF CON for N00bs is an open guide for first time attendees to the convention.
+- [**35**星][3m] [Java] [guardicore/labs_campaigns](https://github.com/guardicore/labs_campaigns)
- [**35**星][5m] [gsurma/password_cracker](https://github.com/gsurma/password_cracker) Char-level RNN LSTM password cracker
- [**35**星][5y] [Py] [gry/shellshock-scanner](https://github.com/gry/shellshock-scanner) A simple Shellshock scanner in python
- [**35**星][7y] [Py] [grugq/buggery](https://github.com/grugq/buggery) Python wrapper for DbgEng
- [**35**星][4y] [Java] [grrrdog/acedcup](https://github.com/grrrdog/acedcup) Payload generator for Java Binary Deserialization attack with Commons FileUpload (CVE-2013-2186)
+- [**35**星][6d] [C#] [greavesy1899/mafia2toolkit](https://github.com/greavesy1899/mafia2toolkit) Open source toolkit for Mafia 2.
+- [**35**星][8d] [Perl] [gouveaheitor/security-spellbook](https://github.com/gouveaheitor/security-spellbook) My collection of custom scripts, plugins, exploits and others small things
- [**35**星][4m] [Py] [geek-repo/c2-blockchain](https://github.com/geek-repo/c2-blockchain) This is a concept poc of command and control server implemented over blockchain
- [**35**星][3y] [Py] [gauthamgoli/rarpasswordcracker](https://github.com/gauthamgoli/rarpasswordcracker) Bruteforces a password protected rar/zip file with specified charset.
- [**35**星][4y] [Py] [ganapati/wpyscan](https://github.com/ganapati/wpyscan) Wordpress pentest tool (because i don't like ruby)
- [**35**星][6y] [C#] [friedkiwi/netcrypt](https://github.com/friedkiwi/netcrypt) .NET executable packer
- [**35**星][2y] [Go] [freach/docker-image-policy-plugin](https://github.com/freach/docker-image-policy-plugin) Docker authentication plugin to enforce a image pull policy. Whitelist Docker images allowed to be pulled.
- [**35**星][3y] [C] [firebroo/screw_decode](https://github.com/firebroo/screw_decode) decode screw encode php file
+- [**35**星][1y] [C++] [fdiskyou/dbi](https://github.com/fdiskyou/dbi) Files for
+- [**35**星][12m] [PHP] [farisv/prestashop-cve-2018-19126](https://github.com/farisv/prestashop-cve-2018-19126) PrestaShop (1.6.x <= 1.6.1.23 or 1.7.x <= 1.7.4.4) Back Office Remote Code Execution (CVE-2018-19126)
- [**35**星][2y] [Py] [extremecoders-re/bytecode_simplifier](https://github.com/extremecoders-re/bytecode_simplifier) A generic deobfuscator for PjOrion obfuscated python scripts
- [**35**星][1m] [Rebol] [ericzimmerman/recmd](https://github.com/ericzimmerman/recmd) Command line access to the Registry
-- [**35**星][21d] [C++] [erickutcher/httpdownloader](https://github.com/erickutcher/httpdownloader) HTTP(S) download manager that uses input/output completion ports (IOCP).
+- [**35**星][8m] [enovella/ida2ghidra-kb](https://github.com/enovella/ida2ghidra-kb) 在Ghidra中应用部分IDA的键盘绑定
- [**35**星][7d] [C] [efficios/babeltrace](https://github.com/efficios/babeltrace) The Babeltrace project provides trace read and write libraries, as well as a trace converter. Plugins can be created for any trace format to allow its conversion to/from another trace format.
-- [**35**星][12d] [Py] [draios/python-sdc-client](https://github.com/draios/python-sdc-client) Sysdig Monitor/Secure Python client library
- [**35**星][1y] [Py] [digidotcom/python-wpa-supplicant](https://github.com/digidotcom/python-wpa-supplicant) WPA Supplicant wrapper for Python
- [**35**星][1y] [C] [davidbuchanan314/fusee-nano](https://github.com/davidbuchanan314/fusee-nano) A minimalist re-implementation of the Fusée Gelée exploit (
- [**35**星][2m] [Py] [d4mianwayne/alfred](https://github.com/d4mianwayne/alfred) A friendly Toolkit for Beginner CTF players
-- [**35**星][3y] [Awk] [d3sre/understanding_the_ndis_6_stack](https://github.com/d3sre/understanding_the_ndis_6_stack) Public documents about bachelor thesis "Reverse Engineering Analysis of the NDIS 6.* stack"
- [**35**星][6y] [Perl] [cyberisltd/egresser](https://github.com/cyberisltd/egresser) Client/server scripts designed to test outbound (egress) firewall rules.
- [**35**星][7y] [C++] [csurage/rootkit](https://github.com/csurage/rootkit) Windows Malware
+- [**35**星][1m] [Go] [cretz/tor-static](https://github.com/cretz/tor-static) Helpers to build Tor statically
- [**35**星][4y] [C++] [codereversing/wow64syscall](https://github.com/codereversing/wow64syscall) WoW64 Syscall Hooking
- [**35**星][1m] [JS] [cloudflare/ipfs-ext](https://github.com/cloudflare/ipfs-ext) Validates IPFS resources served by Cloudflare's gateway.
- [**35**星][4y] [C] [choller/llcov](https://github.com/choller/llcov) LLVM-based, flexible, live coverage instrumentation for C/C++ code
- [**35**星][5y] [C] [charlesxsh/mdk3-master](https://github.com/charlesxsh/mdk3-master) Modifications to MDK3 to reboot Access Points
-- [**35**星][3y] [C] [changeofpace/pe-header-dump-utilities](https://github.com/changeofpace/pe-header-dump-utilities) This x64dbg plugin adds several commands for dumping PE header information by address.
- [**35**星][2y] [JS] [cgvwzq/spectre](https://github.com/cgvwzq/spectre) My minimal PoC for spectre
+- [**35**星][2m] [Py] [carlospolop/legion](https://github.com/carlospolop/legion) Automatic Enumeration Tool based in Open Source tools
- [**35**星][11m] [brianwrf/cve-2018-11788](https://github.com/brianwrf/cve-2018-11788) Apache Karaf XXE Vulnerability (CVE-2018-11788)
- [**35**星][1y] [Py] [bnbdr/ida-bpf-processor](https://github.com/bnbdr/ida-bpf-processor) BPF Processor for IDA Python
- [**35**星][4y] [C#] [bnagy/crabstone](https://github.com/bnagy/crabstone) crabstone is a Ruby binding to the capstone disassembly library by Nguyen Anh Quynh
+- [**35**星][5m] [C] [bmx-routing/bmx7](https://github.com/bmx-routing/bmx7) BMX7 / SEMTOR Securely Entrusted Mesh Routing Protocol
- [**35**星][6m] [bkth/tale-of-chakra-bugs](https://github.com/bkth/tale-of-chakra-bugs)
- [**35**星][6m] [Py] [bkerler/dump_avb_signature](https://github.com/bkerler/dump_avb_signature) Dump Android Verified Boot Signature
- [**35**星][2y] [Py] [b4rd4k/vproxy](https://github.com/b4rd4k/vproxy) Forward HTTP/S Traffic To Proxy Instance
- [**35**星][9m] [Py] [att/docker-forensics](https://github.com/att/docker-forensics) Tools to assist in forensicating docker
+- [**35**星][3y] [ashchan/bitcoin-ethereum-cryptography](https://github.com/ashchan/bitcoin-ethereum-cryptography) 比特币、以太坊加密技术
- [**35**星][3y] [arnaudsoullie/ics-default-passwords](https://github.com/arnaudsoullie/ics-default-passwords) List of default passwords for Industrial Control Systems
- [**35**星][5y] [OCaml] [argp/bap](https://github.com/argp/bap) Binary Analysis Platform -- I will try to keep this updated with patches, fixes, etc.
-- [**35**星][1m] [JS] [anseki/gnirts](https://github.com/anseki/gnirts) Obfuscate string literals in JavaScript code.
-- [**35**星][11m] [Py] [alessiovierti/blindpie](https://github.com/alessiovierti/blindpie) Automatically exploit time-based blind SQL injection vulnerabilities.
+- [**35**星][11m] [CSS] [appsecco/practical-recon-levelup0x02](https://github.com/appsecco/practical-recon-levelup0x02) This repository contains all the material from the talk "Practical recon techniques for bug hunters & pentesters" given at Bugcrowd LevelUp 0x02 virtual conference
+- [**35**星][10m] [Go] [amir20/sha-miner](https://github.com/amir20/sha-miner) Simple miner for understanding how cryptocurrency mining works
+- [**35**星][9m] [Makefile] [alectrocute/unboundbl](https://github.com/alectrocute/unboundbl)
- [**35**星][11y] [C] [alanquatermain/appencryptor](https://github.com/alanquatermain/appencryptor) A command-line tool to apply or remove Apple Binary Protection from an application.
- [**35**星][2y] [C#] [akalankauk/keep-it-secure-file-encryption](https://github.com/akalankauk/keep-it-secure-file-encryption) Keep It Secure Private Data Encryption & Decryption Tool
- [**35**星][2y] [Shell] [ac-mercury/mercuryiss-kali](https://github.com/ac-mercury/mercuryiss-kali) 部署KaliLinux Docker容器的Bash脚本
-- [**35**星][4y] [PowerShell] [5alt/zerorat](https://github.com/5alt/zerorat) ZeroRAT是一款windows上的一句话远控
- [**35**星][2y] [C++] [3gstudent/createremotethread](https://github.com/3gstudent/createremotethread) From 32-bit process to 64-bit process
- [**35**星][2y] [Shell] [0x00pf/stan](https://github.com/0x00pf/stan) STAN is a sTAtic aNalyser
- [**35**星][3y] [Py] [0pc0defr/wordpress-sploit-framework](https://github.com/0pc0defr/wordpress-sploit-framework) Wordpress Sploit Framework was developed for the purpose to provide a framework which creates proof of concept when discovering vulnerability in Wordpress core and Wordpress plugin.
-- [**35**星][3y] [Py] [0ang3el/unsafe-jax-rs-burp](https://github.com/0ang3el/unsafe-jax-rs-burp) Burp Suite extension for JAX-RS
- [**35**星][4y] [Perl] [0ang3el/hibernate-injection-study](https://github.com/0ang3el/hibernate-injection-study) Study about HQL injection exploitation.
-- [**34**星][10d] [Py] [m4ll0k/burpsuite-secret_finder](https://github.com/m4ll0k/burpsuite-secret_finder) Burp Suite extension to discover apikeys/tokens from HTTP response.
+- [**35**星][11m] [Py] [04x/wpscan](https://github.com/04x/wpscan) 渗透+信息收集
+- [**34**星][15d] [C] [atrosinenko/kbdysch](https://github.com/atrosinenko/kbdysch) A collection of user-space Linux kernel specific guided fuzzers based on LKL
+- [**34**星][5m] [Py] [k0fin/eternalrelayx](https://github.com/k0fin/eternalrelayx) eternalrelayx
- [**34**星][3y] [screetsec/dracos](https://github.com/screetsec/dracos) Dracos Linux (
- [**34**星][2y] [Py] [misterbianco/wifijammer-ng](https://github.com/misterbianco/wifijammer-ng) Dan McInerney's Wifijammer - rewritten
+- [**34**星][2m] [Py] [angr/fidget](https://github.com/angr/fidget) A tool to add simple inline patches to a binary to rearrange its stack frames, and other things!
+- [**34**星][3m] [C++] [x64dbg/titanengine](https://github.com/x64dbg/titanengine)
- [**34**星][10m] [Kotlin] [cbeuw/goquiet-android](https://github.com/cbeuw/goquiet-android) GoQuiet plugin on android
- [**34**星][2y] [Go] [csploit/daemon](https://github.com/csploit/daemon) the core of the cSploit project
-- [**34**星][8d] [CSS] [frida/frida-website](https://github.com/frida/frida-website) Frida's website
-- [**34**星][9m] [Go] [v2ray/geoip](https://github.com/v2ray/geoip)
+- [**34**星][3m] [Go] [cnlh/httpmonitor](https://github.com/cnlh/httpmonitor) http、api接口监控系统,可监控各种http请求,支持header、data设置,支持腾讯云短信和邮件警告通知。
+- [**34**星][1y] [JS] [threatexpress/portplow](https://github.com/threatexpress/portplow) PortPlow is a distributed port and system scanning & enumeration service. It enables the quick and automated enumeration of ports and services from multiple systems managed by a central console.
+- [**34**星][3y] [Py] [airbus-seclab/elfesteem](https://github.com/airbus-seclab/elfesteem) ELF/PE/Mach-O parsing library
+- [**34**星][10m] [Go] [v2ray/geoip](https://github.com/v2ray/geoip)
- [**34**星][5y] [Py] [danmcinerney/best-channel](https://github.com/danmcinerney/best-channel) Find wifi channel with least interference
+- [**34**星][1y] [Shell] [sensepost/shinai-fi](https://github.com/sensepost/shinai-fi) Docker images for learning wifi hacking
- [**34**星][5m] [Py] [rabbitmask/whoisweblogic](https://github.com/rabbitmask/whoisweblogic) 提供Weblogic批量模糊指纹识别
+- [**34**星][21d] [Jupyter Notebook] [vrthra/f1](https://github.com/vrthra/f1)
- [**34**星][6m] [C++] [parkovski/wsudo](https://github.com/parkovski/wsudo) Proof of concept sudo for Windows
- [**34**星][2m] [CSS] [koala633/hostbase](https://github.com/koala633/hostbase) A Ruby GUI based on advanced rogue AP attack
+- [**34**星][10m] [Java] [alexatiks/spring-security-jwt-csrf](https://github.com/alexatiks/spring-security-jwt-csrf) A demonstration of stateless JWT authentication with Spring Security, Spring Boot and Vue js
+- [**34**星][7m] [gfwlist/tsilwfg](https://github.com/gfwlist/tsilwfg) Reverse list for netizens overseas
- [**34**星][7m] [Ruby] [k8gege/zimbraexploit](https://github.com/k8gege/zimbraexploit) Zimbra邮件系统漏洞 XXE/RCE/SSRF/Upload GetShell Exploit 1. (CVE-2019-9621 Zimbra<8.8.11 XXE GetShell Exploit)
-- [**34**星][5y] [Py] [hiteshchoudhary/airvengers](https://github.com/hiteshchoudhary/airvengers) A GUI to pentest wifi Network, based on Aircrack-ng tools
+- [**34**星][6d] [Py] [technowlogy-pushpender/technowhorse](https://github.com/technowlogy-pushpender/technowhorse) TechNowHorse is a RAT (Remote Administrator Trojan) Generator for Windows/Linux systems written in Python 3.
- [**34**星][2y] [C] [nttiton/malware](https://github.com/NTTITON/Malware)
+- [**34**星][2m] [PHP] [safflower/solveme](https://github.com/safflower/solveme) SolveMe - Jeopardy CTF Platform (for wargame)
- [**34**星][3y] [Ruby] [cloudfoundry-attic/dea_ng](https://github.com/cloudfoundry-attic/dea_ng) Droplet Execution Agent for Cloud Foundry v2
-- [**34**星][26d] [HTML] [cveproject/cveproject.github.io](https://github.com/CVEProject/cveproject.github.io) CVE Project Documentation
-- [**34**星][23d] [C] [zfigura/semblance](https://github.com/zfigura/semblance) Disassembler for Windows executables. Supports 16-bit NE (New Executable), MZ (DOS), and PE (Portable Executable, i.e. Win32) files.
+- [**34**星][28d] [HTML] [cveproject/cveproject.github.io](https://github.com/CVEProject/cveproject.github.io) CVE Project Documentation
+- [**34**星][7d] [C] [zfigura/semblance](https://github.com/zfigura/semblance) Disassembler for Windows executables. Supports 16-bit NE (New Executable), MZ (DOS), and PE (Portable Executable, i.e. Win32) files.
- [**34**星][3y] [Py] [ywjt/dshield](https://github.com/ywjt/dshield)
-- [**34**星][3m] [Py] [xuchaoa/ctf_awd_platform](https://github.com/xuchaoa/ctf_awd_platform) CTF 攻防对抗平台
- [**34**星][2y] [Py] [x0rloser/ps4_wifi_bt](https://github.com/x0rloser/ps4_wifi_bt) PS4 wifi/bluetooth firmware ~~reversing~~ h4x
+- [**34**星][21d] [PS] [wortell/azsentinel](https://github.com/wortell/azsentinel) PowerShell module for Azure Sentinel
- [**34**星][5y] [Java] [wooyundota/intentmonitor](https://github.com/wooyundota/intentmonitor) Tool based xposed can monitor the android intents
- [**34**星][6m] [Pascal] [winkelsdorf/delphiencryptioncompendium](https://github.com/winkelsdorf/delphiencryptioncompendium) Automatically exported from code.google.com/p/delphidec
-- [**34**星][1y] [Swift] [vixentael/zka-example](https://github.com/vixentael/zka-example) Zero Knowledge Application example, iOS, notes sharing, Firebase backend
+- [**34**星][1y] [vu-aml/adlib](https://github.com/vu-aml/adlib) Game-Theoretic Adversarial Machine Learning Library
- [**34**星][3m] [Ruby] [veeral-patel/incidents](https://github.com/veeral-patel/incidents) Collaborative, web-based case management for incident response
+- [**34**星][4y] [unicornsasfuel/sqlite_sqli_cheat_sheet](https://github.com/unicornsasfuel/sqlite_sqli_cheat_sheet) A cheat sheet for attacking SQLite via SQLi
- [**34**星][5y] [JS] [tweekfawkes/white_lightning](https://github.com/tweekfawkes/white_lightning) Platform for Browser Exploitation
-- [**34**星][3y] [C] [topcss/wannacry](https://github.com/topcss/wannacry) 勒索病毒WannaCry反编译源码
+- [**34**星][2m] [HCL] [traveloka/terraform-aws-waf-owasp-top-10-rules](https://github.com/traveloka/terraform-aws-waf-owasp-top-10-rules) A Terraform module to create AWF WAF Rules for OWASP Top 10 security risks protection.
- [**34**星][7y] [Py] [tkisason/gcrack](https://github.com/tkisason/gcrack) password cracking with the help of google's search
- [**34**星][3y] [Py] [thomaspatzke/burp-sessionauthtool](https://github.com/thomaspatzke/burp-sessionauthtool) Burp plugin which supports in finding privilege escalation vulnerabilities
- [**34**星][1y] [C++] [tarlogicsecurity/eoploaddriver](https://github.com/tarlogicsecurity/eoploaddriver) Proof of concept for abusing SeLoadDriverPrivilege (Privilege Escalation in Windows)
- [**34**星][2y] [C++] [swwwolf/obderef](https://github.com/swwwolf/obderef) Decrement Windows Kernel for fun and profit
- [**34**星][2y] [Shell] [swisskyrepo/chocolatine](https://github.com/swisskyrepo/chocolatine) When you forget to lock your computer .. you will have to pay some "French Croissants"
-- [**34**星][6m] [PowerShell] [swisscom/powergrr](https://github.com/swisscom/powergrr) PowerGRR is an API client library in PowerShell working on Windows, Linux and macOS for GRR automation and scripting.
-- [**34**星][2y] [Py] [superbuker/camhell](https://github.com/superbuker/camhell) Ingenic T10 IP camera crawler
+- [**34**星][6m] [PS] [swisscom/powergrr](https://github.com/swisscom/powergrr) PowerGRR is an API client library in PowerShell working on Windows, Linux and macOS for GRR automation and scripting.
- [**34**星][6m] [sourcefrenchy/certexfil.client](https://github.com/sourcefrenchy/certexfil.client) MOVED TO
- [**34**星][2y] [JS] [sola-da/conflictjs](https://github.com/sola-da/conflictjs) Finding and Understanding Conflicts Between JavaScript Libraries
- [**34**星][3y] [JS] [snyk/serverless-snyk](https://github.com/snyk/serverless-snyk) Serverless plugin for securing your dependencies with Snyk
-- [**34**星][24d] [smithersec/bug-bounty-resources](https://github.com/smithersec/bug-bounty-resources) Resources I consider useful for security research of web applications
+- [**34**星][26d] [smithersec/bug-bounty-resources](https://github.com/smithersec/bug-bounty-resources) Resources I consider useful for security research of web applications
- [**34**星][2y] [C] [smh17/bitcoin-hacking-tools](https://github.com/smh17/bitcoin-hacking-tools) The source code of main tools used in Bitcoin "non-malware-based" attacks.
+- [**34**星][2y] [Java] [shengqi158/s2-055-poc](https://github.com/shengqi158/s2-055-poc) S2-055的环境,基于rest-show-case改造
- [**34**星][5y] [Py] [shendo/netsink](https://github.com/shendo/netsink) Network sinkhole for isolated malware analysis
- [**34**星][3m] [C#] [sf197/telegra_csharp_c2](https://github.com/sf197/telegra_csharp_c2) Command and Control for C# Writing
- [**34**星][4y] [C++] [secmob/cve-2016-0846](https://github.com/secmob/cve-2016-0846) arbitrary memory read/write by IMemroy OOB
@@ -13915,145 +14883,174 @@ networking routines
- [**34**星][6m] [C++] [seancline/pyext](https://github.com/seancline/pyext) WinDbg Extensions for Python
- [**34**星][1y] [Py] [sasdf/firstblood](https://github.com/sasdf/firstblood) Write exploit faster with up-to-date python 3
- [**34**星][5y] [Py] [sangaline/svganimator](https://github.com/sangaline/svganimator) The application svganinmator attempts to build a single animated svg out of a sequence of distinct static svg files.
+- [**34**星][2m] [Shell] [sandrokeil/yubikey-full-disk-encryption-secure-boot-uefi](https://github.com/sandrokeil/yubikey-full-disk-encryption-secure-boot-uefi) Tutorial to create full disk encryption with YubiKey, encrypted boot partition and secure boot with UEFI
- [**34**星][1y] [Py] [rvn0xsy/fastwhatwebsearch](https://github.com/rvn0xsy/fastwhatwebsearch) FastWhatWebSearch是一个能够支持搜索whatweb工具结果的一个微型平台。
- [**34**星][1y] [C++] [rokups/reflectiveldr](https://github.com/rokups/reflectiveldr) Position-idependent Windows DLL loader based on ReflectiveDLL project.
- [**34**星][4m] [C] [reversingid/crackmes-repository](https://github.com/reversingid/crackmes-repository) Initiative to collect and preserve crackmes for learning and practice in reverse engineering
- [**34**星][7y] [reverselab/kernel-pwn-challenge](https://github.com/reverselab/kernel-pwn-challenge) Source code for building an exploitable linux kernel challenge iso.
- [**34**星][4y] [C] [reinhardvz/wsk](https://github.com/reinhardvz/wsk) Automatically exported from code.google.com/p/wskudp
- [**34**星][6m] [quarkslab/conf-presentations](https://github.com/quarkslab/conf-presentations)
+- [**34**星][3y] [PHP] [qilinbaoleiji/baoleiji](https://github.com/qilinbaoleiji/baoleiji) 麒麟堡垒机由资深软件开发人员发起,开发开始于2009年9月,开发主要成员共计有5个人,开发地点位于北京。系统经过现场严格的压力、性能、功能测试,使用稳定,功能齐全,系统透明登录功能可以让运维人员完全感觉不到堡垒机存在,系统模块齐全。 主要包含:堡垒机运维模块(支持RDP/SSH/SFTP/FTP/TELNET)、动态口令模块、网管监控模块、日志分析模块、3A模块等,堡垒机整体完全可以满足中型企业的整体运维及安全需要。
- [**34**星][1y] [Py] [pure-l0g1c/spectre](https://github.com/pure-l0g1c/spectre) A simple phishing tool that can phish almost any website
-- [**34**星][1y] [PowerShell] [ptylenda/kubernetes-for-windows](https://github.com/ptylenda/kubernetes-for-windows) Ansible playbooks and Packer templates for creating hybrid Windows/Linux Kubernetes 1.10+ cluster with experimental Flannel pod network (host-gw backend)
-- [**34**星][3m] [PowerShell] [dsccommunity/xfailovercluster](https://github.com/dsccommunity/xFailOverCluster) This module contains DSC resources for deployment and configuration of Windows Server Failover Cluster.
+- [**34**星][1y] [PS] [ptylenda/kubernetes-for-windows](https://github.com/ptylenda/kubernetes-for-windows) Ansible playbooks and Packer templates for creating hybrid Windows/Linux Kubernetes 1.10+ cluster with experimental Flannel pod network (host-gw backend)
- [**34**星][7y] [Ruby] [postmodern/rprogram](https://github.com/postmodern/rprogram) A library for creating wrappers around command-line programs.
- [**34**星][3y] [Py] [politoinc/yara-scanner](https://github.com/politoinc/yara-scanner) Yara intergrated into BurpSuite
- [**34**星][3y] [C] [plutooo/wiiu](https://github.com/plutooo/wiiu) Reversers notes on the Wii U, collected January-October 2015
+- [**34**星][2m] [Py] [peterhinch/micropython-fourier](https://github.com/peterhinch/micropython-fourier) Fast Fourier transform in MicroPython's inline ARM assembler.
- [**34**星][3m] [C] [peterbjornx/meloader](https://github.com/peterbjornx/meloader) Linux i386 tool to load and execute ME modules.
- [**34**星][2y] [Py] [penafieljlm/burp-tracer](https://github.com/penafieljlm/burp-tracer) burp-tracer:BurpSuite 扩展。获取当前的站点地图,提取每个请求参数,并搜索存在请求参数值的回复(responseswhere request parameter value is present)
- [**34**星][2y] [Py] [peewpw/domainfrontdiscover](https://github.com/peewpw/domainfrontdiscover) Scripts and results for finding domain frontable CloudFront domains
-- [**34**星][5m] [Py] [paradoxis/flask-unsign](https://github.com/paradoxis/flask-unsign) Command line tool to fetch, decode, brute-force and craft session cookies of a Flask application by guessing secret keys.
+- [**34**星][2m] [C] [pearinc/fogconnect](https://github.com/pearinc/fogconnect) 提供企业级网络设备之间数据的快速,安全,可靠的P2P传输协议
- [**34**星][4y] [C] [panyu6325/cve-2015-1805](https://github.com/panyu6325/cve-2015-1805)
- [**34**星][3m] [C#] [ossindex/audit.net](https://github.com/ossindex/audit.net) Identify known vulnerabilities in .net nuget dependencies
- [**34**星][5y] [osiris123/cdriver_loader](https://github.com/osiris123/cdriver_loader) Kernel mode driver loader, injecting into the windows kernel, Rootkit. Driver injections.
-- [**34**星][12d] [C++] [olegzhr/altprobe](https://github.com/olegzhr/altprobe) Alertflex IDS collector (Altprobe)
+- [**34**星][1y] [Py] [oros42/dns_sniffer](https://github.com/oros42/dns_sniffer) A python DNS sniffer
+- [**34**星][14d] [C++] [olegzhr/altprobe](https://github.com/olegzhr/altprobe) Alertflex IDS collector (Altprobe)
+- [**34**星][4m] [C#] [nyan-x-cat/disable-windows-defender](https://github.com/nyan-x-cat/disable-windows-defender) Changing values to bypass windows defender C#
- [**34**星][7y] [JS] [nv/setinterval-sniffer](https://github.com/nv/setinterval-sniffer) Keep tabs on your uncleared intervals. Hunt down lags and memory leaks.
- [**34**星][11m] [CSS] [nowsecure/r2frida-book](https://github.com/nowsecure/r2frida-book) The radare2 + frida book for Mobile Application assessment
+- [**34**星][11m] [C++] [niemand-sec/directx11hook](https://github.com/niemand-sec/directx11hook)
+- [**34**星][1y] [C++] [nickcano/reloadlibrary](https://github.com/nickcano/reloadlibrary) A quick-and-dirty anti-hook library proof of concept.
+- [**34**星][1y] [Jupyter Notebook] [nfrumkin/forecast-prometheus](https://github.com/nfrumkin/forecast-prometheus) A collection of analysis, and machine learning techniques for time series forecasting w/ Prometheus metrics
- [**34**星][2y] [JS] [newfuture/pac](https://github.com/newfuture/pac) Proxy Auto Config generator,自动代理配置生成PAC,可配合ss小飞机使用
+- [**34**星][2y] [C] [mtjailed/purplesmoke](https://github.com/mtjailed/purplesmoke) A work-in-progress repository for breaking the security of iOS 11.2 up to 11.2.6
- [**34**星][3y] [CSS] [monosource/radare2-explorations](https://github.com/monosource/radare2-explorations) A book on learning radare2.
-- [**34**星][19d] [Dockerfile] [misp/docker-misp](https://github.com/misp/docker-misp) Automated Docker MISP container - Malware Information Sharing Platform and Threat Sharing
+- [**34**星][21d] [Dockerfile] [misp/docker-misp](https://github.com/misp/docker-misp) Automated Docker MISP container - Malware Information Sharing Platform and Threat Sharing
- [**34**星][3y] [Py] [mipu94/broids_unicorn](https://github.com/mipu94/broids_unicorn) simple plugin to detect shellcode on Bro IDS with Unicorn
- [**34**星][1y] [Java] [minervalabsresearch/coffeeshot](https://github.com/minervalabsresearch/coffeeshot) CoffeeShot: Avoid Detection with Memory Injection
- [**34**星][2y] [Py] [mhelwig/privdns](https://github.com/mhelwig/privdns) Check dns servers for reverse resolving private ips
-- [**34**星][2y] [Go] [metalnem/zinio](https://github.com/metalnem/zinio) This command line tool removes DRM from magazines in your digital Zinio library
+- [**34**星][8m] [C] [mboehme/pythia](https://github.com/mboehme/pythia) Pythia (extends AFL with Predictions)
- [**34**星][2y] [Go] [mattiasgeniar/http-flooder](https://github.com/mattiasgeniar/http-flooder) An experiment using goroutines and channels to create a simple HTTP flooder. Mixes GET, POST, PUT, PATCH, ... to one baseline URL.
- [**34**星][1y] [C] [mainframed/logica](https://github.com/mainframed/logica) Files compiled from the Logica breach investigation materials
- [**34**星][4y] [Py] [madsc13ntist/idapython](https://github.com/madsc13ntist/idapython) IDAPython脚本收集(无文档)
- [**34**星][4y] [Ruby] [lookingglass/opentpx](https://github.com/lookingglass/opentpx) Open Threat Partner eXchange
- [**34**星][2y] [Ruby] [lolwaleet/reverseip](https://github.com/lolwaleet/reverseip) Ruby based reverse IP-lookup tool.
-- [**34**星][1y] [JS] [lmammino/distributed-jwt-cracker](https://github.com/lmammino/distributed-jwt-cracker) An experimental distributed JWT token cracker built using Node.js and ZeroMQ
- [**34**星][1y] [Py] [leonardonve/edm](https://github.com/leonardonve/edm) Encima De la Mosca HTTP proxy POC for infecting files on-the-fly and SSLstrip2
- [**34**星][1y] [Go] [leoloobeek/keyserver](https://github.com/leoloobeek/keyserver) Easily serve HTTP and DNS keys for proper payload protection
+- [**34**星][2y] [Py] [ldionmarcil/sudo-backdoor](https://github.com/ldionmarcil/sudo-backdoor) Wraps sudo; transparently steals user's credentials and exfiltrate over DNS. For those annoying times when you get a shell/file write on a sudoers account and need to leverage their credentials.
- [**34**星][8m] [Py] [lazenca/exploit-tech](https://github.com/lazenca/exploit-tech) Example files to experience basic exploit techniques.
-- [**34**星][9m] [C] [l4ys/lazyklee](https://github.com/l4ys/lazyklee) Lazy python wrapper of KLEE for solving CTF challenges
- [**34**星][1y] [kudelskisecurity/cryptochallenge18](https://github.com/kudelskisecurity/cryptochallenge18) Kudelski Security's 2018 pre-Black Hat crypto challenge
- [**34**星][4m] [Rust] [kpcyrd/boxxy-rs](https://github.com/kpcyrd/boxxy-rs) Linkable sandbox explorer
-- [**34**星][1y] [Java] [kingkaki/struts2-vulenv](https://github.com/kingkaki/struts2-vulenv) struts2 漏洞环境源代码
+- [**34**星][1y] [Py] [kasperskylab/actionscript3](https://github.com/kasperskylab/actionscript3) SWF Loader、ActionScript3 Processor和 IDA 调试辅助插件
- [**34**星][1y] [Shell] [jay-johnson/owasp-jenkins](https://github.com/jay-johnson/owasp-jenkins) Want to test your applications using the latest OWASP security toolchains and the NIST National Vulnerability Database using Jenkins, Ansible and docker?
- [**34**星][5m] [Py] [jasonhinds13/hackable](https://github.com/jasonhinds13/hackable) A python flask app that is purposefully vulnerable to SQL injection and XSS attacks. To be used for demonstrating attacks
- [**34**星][3y] [C] [jantonakos/threathuntingexcursions](https://github.com/jantonakos/threathuntingexcursions) Code, commands, and chatter about Threat Hunting.
+- [**34**星][1y] [C++] [ipbc-dev/bittube-miner](https://github.com/ipbc-dev/bittube-miner) BitTube Miner
- [**34**星][4y] [Py] [interference-security/multiport](https://github.com/interference-security/multiport)
+- [**34**星][8m] [C++] [indeedminers/xmr-aeon-stak](https://github.com/indeedminers/xmr-aeon-stak) Unified All-in-one Monero, Sumokoin, Aeon and other Cryptonote miner
- [**34**星][4y] [Java] [ilmila/springcss-cve-2014-3625](https://github.com/ilmila/springcss-cve-2014-3625) spring mvc cve-2014-3625
+- [**34**星][5m] [Java] [idl3r/ghidravmlinuxloader](https://github.com/idl3r/ghidravmlinuxloader)
- [**34**星][2y] [JS] [honeypotio/techmap](https://github.com/honeypotio/techmap) Honeypot's Tech Map
+- [**34**星][1y] [Shell] [hestat/blazescan](https://github.com/hestat/blazescan) Blazescan is a linux webserver malware scanning and incident response tool, with built in support for cPanel servers, but will run on any linux based server.
- [**34**星][2y] [hardenedlinux/armv7-nexus7-grsec](https://github.com/hardenedlinux/armv7-nexus7-grsec) Hardened PoC: PaX for Android
+- [**34**星][7y] [Py] [hackedteam/test-av](https://github.com/hackedteam/test-av) Automated antivirus test environment
- [**34**星][5y] [gwerz/reverse-engineearing](https://github.com/gwerz/reverse-engineearing) 软件逆向
-- [**34**星][3m] [Java] [guardicore/labs_campaigns](https://github.com/guardicore/labs_campaigns)
- [**34**星][6y] [JS] [gtanczyk/dupocracy](https://github.com/gtanczyk/dupocracy) Defcon clone
-- [**34**星][8d] [C#] [greavesy1899/mafia2toolkit](https://github.com/greavesy1899/mafia2toolkit) Open source toolkit for Mafia 2.
-- [**34**星][9d] [Perl] [gouveaheitor/security-spellbook](https://github.com/gouveaheitor/security-spellbook) My collection of custom scripts, plugins, exploits and others small things
- [**34**星][2y] [Py] [google/amt-forensics](https://github.com/google/amt-forensics) Retrieve Intel AMT's Audit Log from a Linux machine without knowing the admin user's password.
+- [**34**星][4y] [Py] [gioyik/getexploit](https://github.com/gioyik/getexploit)
- [**34**星][2y] [Py] [g2p/vido](https://github.com/g2p/vido) wrap commands in throwaway virtual machines — easy kernel debugging and regression testing
- [**34**星][3y] [friedappleteam/blackhat-asia-2017](https://github.com/friedappleteam/blackhat-asia-2017) BlackHat Asia 2017 talk
- [**34**星][11m] [Shell] [flowztul/keyexec](https://github.com/flowztul/keyexec) keyexec:Shell脚本,在使用 kexec 命令重启时,自动解锁 LUKS 设备
-- [**34**星][12m] [PHP] [farisv/prestashop-cve-2018-19126](https://github.com/farisv/prestashop-cve-2018-19126) PrestaShop (1.6.x <= 1.6.1.23 or 1.7.x <= 1.7.4.4) Back Office Remote Code Execution (CVE-2018-19126)
-- [**34**星][6m] [C++] [ez8-co/unlocker](https://github.com/ez8-co/unlocker)
+- [**34**星][7m] [C++] [ez8-co/unlocker](https://github.com/ez8-co/unlocker)
- [**34**星][2y] [Py] [eyyub/tensorflow-cyclegan](https://github.com/eyyub/tensorflow-cyclegan) Lightweight CycleGAN tensorflow implementation
- [**34**星][2y] [Py] [ernw/dizzy-legacy](https://github.com/ernw/dizzy-legacy) Network and USB protocol fuzzing toolkit.
- [**34**星][1y] [Py] [ernw/dizzy](https://github.com/ernw/dizzy) Network and USB protocol fuzzing toolkit.
-- [**34**星][17d] [C#] [ericzimmerman/appcompatcacheparser](https://github.com/ericzimmerman/appcompatcacheparser) AppCompatCache (shimcache) parser. Supports Windows 7 (x86 and x64), Windows 8.x, and Windows 10
-- [**34**星][8m] [enovella/ida2ghidra-kb](https://github.com/enovella/ida2ghidra-kb) 在Ghidra中应用部分IDA的键盘绑定
+- [**34**星][19d] [C#] [ericzimmerman/appcompatcacheparser](https://github.com/ericzimmerman/appcompatcacheparser) AppCompatCache (shimcache) parser. Supports Windows 7 (x86 and x64), Windows 8.x, and Windows 10
- [**34**星][3y] [Py] [emdel/ksfinder](https://github.com/emdel/ksfinder) ksfinder - Retrieve exported kernel symbols from physical memory dumps
- [**34**星][2y] [Py] [embedi/dir8xx_poc](https://github.com/embedi/dir8xx_poc) Proof-of-Concept exploits for D-Link DIR8xx routers
- [**34**星][6m] [Py] [efficios/barectf](https://github.com/efficios/barectf) Generator of ANSI C tracers which output CTF
- [**34**星][4y] [Shell] [easonoutlook/rasticrac](https://github.com/easonoutlook/rasticrac) Rasticrac v3.2.5 is for Crack IPA file, like Clutch, this is a copy from appaddict.org, just for study. Now support PlugIn and Watch App.
+- [**34**星][10m] [Go] [dwin/gosecretboxpassword](https://github.com/dwin/gosecretboxpassword) A probably paranoid Golang utility library for securely hashing and encrypting passwords based on the Dropbox method. This implementation uses Blake2b, Scrypt and XSalsa20-Poly1305 (via NaCl SecretBox) to create secure password hashes that are also encrypted using a master passphrase.
- [**34**星][2m] [Py] [duo-labs/cloudtrail-partitioner](https://github.com/duo-labs/cloudtrail-partitioner)
-- [**34**星][2y] [Visual Basic] [doctorlai/vbscript_obfuscator](https://github.com/doctorlai/vbscript_obfuscator) The VBScript Obfuscator written in VBScript
+- [**34**星][2y] [Visual Basic .NET] [doctorlai/vbscript_obfuscator](https://github.com/doctorlai/vbscript_obfuscator) The VBScript Obfuscator written in VBScript
- [**34**星][3y] [Ruby] [dmchell/metasploit-framework](https://github.com/dmchell/metasploit-framework) Metasploit Framework
+- [**34**星][2m] [Py] [dmaasland/mcfridafee](https://github.com/dmaasland/mcfridafee)
- [**34**星][5y] [Py] [dionach/headersanalyzer](https://github.com/dionach/headersanalyzer) Burp extension that checks for interesting and security headers
- [**34**星][4y] [Java] [devadvance/rootinspector](https://github.com/devadvance/rootinspector) Advanced detection of rooting
- [**34**星][3y] [Py] [darx0r/reef](https://github.com/darx0r/reef) 显示"由指定函数发起的"交叉应用。可以理解为函数内部引用的其他函数
- [**34**星][2y] [CMake] [daniestevez/gr-outernet](https://github.com/daniestevez/gr-outernet) GNUradio OOT module for Outernet
- [**34**星][2y] [Py] [d3vilbug/brutal_ssh](https://github.com/d3vilbug/brutal_ssh) SSH Login brute force, scan for vulnerable version and 0 day exploit (under development)
-- [**34**星][8m] [Py] [cyubuchen/free_proxy_website](https://github.com/cyubuchen/free_proxy_website) 获取免费socks/https/http代理的网站集合
- [**34**星][3y] [CSS] [cysca/cysca2015](https://github.com/cysca/cysca2015) Cyber Security Challenge Australia 2015 Files
- [**34**星][1y] [JS] [cymmetria/ciscoasa_honeypot](https://github.com/cymmetria/ciscoasa_honeypot) A low interaction honeypot for the Cisco ASA component capable of detecting CVE-2018-0101, a DoS and remote code execution vulnerability.
- [**34**星][4y] [Py] [curehsu/ez-wave](https://github.com/curehsu/ez-wave) Tools for Evaluating and Exploiting Z-Wave Networks using Software-Defined Radios.
- [**34**星][7m] [Py] [claudiugeorgiu/riskindroid](https://github.com/claudiugeorgiu/riskindroid) 基于机器学习技术,对Android App进行定量风险分析
- [**34**星][7y] [C] [chokepoint/jynxkit](https://github.com/chokepoint/jynxkit) JynxKit is an LD_PRELOAD userland rootkit for Linux systems with reverse connection SSL backdoor
+- [**34**星][2y] [C++] [chiehmin/sheepwall](https://github.com/chiehmin/sheepwall) Sniff plaintext account/password/cookie on router
- [**34**星][3y] [Py] [cheery/spirthon](https://github.com/cheery/spirthon) Python bytecode to SPIR-V -translation.
- [**34**星][4y] [Py] [cclgroupltd/ccl-bplist](https://github.com/cclgroupltd/ccl-bplist) Python Module for parsing Binary Property List and NSKeyedArchiver files
- [**34**星][2y] [C#] [breenmachine/hpwn](https://github.com/breenmachine/hpwn) HP printer security research code
+- [**34**星][5y] [brad-anton/freeradius-wpe](https://github.com/brad-anton/freeradius-wpe)
- [**34**星][1y] [C] [bartavelle/rulesfinder](https://github.com/bartavelle/rulesfinder)
-- [**34**星][2m] [Java] [availlang/avail](https://github.com/availlang/avail) The Avail programming language. Includes the virtual machine, standard library, and standard examples.
+- [**34**星][5y] [C++] [avplayer/avcamera](https://github.com/avplayer/avcamera) 一款家用安全防盗监控软件,无需额外购买昂贵的CCD监控摄像头,只需普通电脑视频聊天用的CMOS摄像头即可。
+- [**34**星][3m] [Java] [availlang/avail](https://github.com/availlang/avail) The Avail programming language. Includes the virtual machine, standard library, and standard examples.
- [**34**星][3y] [Py] [attackercan/burp-xss-sql-plugin](https://github.com/attackercan/burp-xss-sql-plugin)
- [**34**星][1y] [Dockerfile] [asuri-team/ctf-xinetd](https://github.com/asuri-team/ctf-xinetd) A docker image to hold pwn challenges in ctf war
- [**34**星][3m] [Py] [arbazkiraak/burpblh](https://github.com/arbazkiraak/burpblh) BurpBLH: 使用IScannerCheck发现被劫持的损坏链接. Burp插件
- [**34**星][5m] [Shell] [ank1036official/cloudcheck](https://github.com/ank1036official/cloudcheck) Checks using a test string if a Cloudflare DNS bypass is possible using CloudFail.
+- [**34**星][2y] [Py] [anbai-inc/secrss](https://github.com/anbai-inc/secrss) RSS安全订阅 每日安全信息推送
- [**34**星][7m] [Py] [am0nt31r0/osint-search](https://github.com/am0nt31r0/osint-search) Useful for digital forensics investigations or initial black-box pentest footprinting.
+- [**34**星][2y] [C] [alon7/bbt-multiminer](https://github.com/alon7/bbt-multiminer) Start different miners from the same script. Easy and simple to get started with mining. Originally by Bits Be Trippin'
+- [**34**星][3d] [Py] [aliasrobotics/rvd](https://github.com/aliasrobotics/rvd) Robot Vulnerability Database. An archive of robot vulnerabilities and bugs.
- [**34**星][2y] [Py] [alexbers/exploit_farm](https://github.com/alexbers/exploit_farm) The utility for CTF hacker competition for team hacking and flag submitting
-- [**34**星][22d] [HTML] [adulau/misp-osint-collection](https://github.com/adulau/misp-osint-collection) Collection of best practices to add OSINT into MISP and/or MISP communities
+- [**34**星][11m] [Py] [alessiovierti/blindpie](https://github.com/alessiovierti/blindpie) Automatically exploit time-based blind SQL injection vulnerabilities.
+- [**34**星][24d] [HTML] [adulau/misp-osint-collection](https://github.com/adulau/misp-osint-collection) Collection of best practices to add OSINT into MISP and/or MISP communities
- [**34**星][5y] [C++] [adamkramer/handle_monitor](https://github.com/adamkramer/handle_monitor) Identifying and Disrupting Crypto-Ransomware (and Destructive Malware) using handle heurustics
-- [**34**星][3y] [PowerShell] [3gstudent/ninjacopy](https://github.com/3gstudent/ninjacopy) Powershell to copy ntds.dit
+- [**34**星][3y] [PS] [3gstudent/ninjacopy](https://github.com/3gstudent/ninjacopy) Powershell to copy ntds.dit
- [**34**星][3y] [PHP] [233sec/laravel-src](https://github.com/233sec/laravel-src) 基于 LARAVEL 打造的安全应急响应中心平台
-- [**34**星][11m] [Py] [04x/wpscan](https://github.com/04x/wpscan) 渗透+信息收集
-- [**33**星][16d] [Assembly] [86hh/poc-viruses](https://github.com/86hh/poc-viruses) POC viruses I have created to demo some ideas
+- [**33**星][1m] [Shell] [garywill/linux-router](https://github.com/garywill/linux-router) Set Linux as router in one command. Support Internet sharing, redsocks, Wifi hotspot, IPv6. Can also be used for routing VM/containers
+- [**33**星][2d] [Go] [mzz2017/v2raya](https://github.com/mzz2017/v2raya) V2RayA是一个支持全局透明代理的V2Ray Linux GUI客户端。
+- [**33**星][2y] [Go] [serverless-ss/slss](https://github.com/serverless-ss/slss)
+- [**33**星][18d] [Assembly] [86hh/poc-viruses](https://github.com/86hh/poc-viruses) POC viruses I have created to demo some ideas
- [**33**星][2m] [C] [mak-/reverse-shell-access-kernel-module](https://github.com/mak-/reverse-shell-access-kernel-module) This is a kernel module invoked reverse shell proof of concept.
-- [**33**星][7d] [C++] [taviso/sharapi](https://github.com/taviso/sharapi) Simpsons: Hit & Run JavaScript API
+- [**33**星][2y] [C] [uwnetworkslab/cordova-plugin-tun2socks](https://github.com/uwnetworkslab/cordova-plugin-tun2socks) Cordova plugin to enable a system-wide VPN for Android devices.
+- [**33**星][2m] [Py] [landgrey/toolsparty](https://github.com/landgrey/toolsparty) A collection of script tools for pentesting
+- [**33**星][9d] [C++] [taviso/sharapi](https://github.com/taviso/sharapi) Simpsons: Hit & Run JavaScript API
- [**33**星][1y] [Shell] [jaredhaight/scripts](https://github.com/jaredhaight/scripts) A collection of scripts that I've written while pentesting.
-- [**33**星][3m] [C++] [x64dbg/titanengine](https://github.com/x64dbg/titanengine)
+- [**33**星][1y] [Py] [skelsec/socksohttp](https://github.com/skelsec/socksohttp) Socks5 server over Websockets
- [**33**星][2y] [HTML] [jipegit/twintelligence](https://github.com/jipegit/twintelligence) Twintelligence is a free Twitter OSINT tool
- [**33**星][5y] [C] [gdbinit/bruteforcesysent](https://github.com/gdbinit/bruteforcesysent) Small util to discover OS X sysent via bruteforce
-- [**33**星][1m] [Py] [angr/angr-platforms](https://github.com/angr/angr-platforms) A collection of extensions to angr to handle new platforms
+- [**33**星][5d] [Py] [angr/angr-platforms](https://github.com/angr/angr-platforms) A collection of extensions to angr to handle new platforms
- [**33**星][1y] [CSS] [osirislab/csaw-ctf-2018-quals](https://github.com/osirislab/csaw-ctf-2018-quals) Repo for CSAW CTF 2018 Quals challenges
-- [**33**星][1y] [Shell] [sensepost/shinai-fi](https://github.com/sensepost/shinai-fi) Docker images for learning wifi hacking
+- [**33**星][4y] [C] [stealth/injectso](https://github.com/stealth/injectso)
+- [**33**星][8m] [Py] [hacker0x01/hacker101coursework](https://github.com/hacker0x01/hacker101coursework) Deprecated coursework from first iteration of Hacker101
+- [**33**星][1y] [seemoo-lab/wireshark-awdl](https://github.com/seemoo-lab/wireshark-awdl) Wireshark Dissector for Apple Wireless Direct Link (AWDL) and Apple's CoreCapture logging framework. Note: the AWDL dissector is part of Wireshark 3.0!
- [**33**星][6y] [JS] [michenriksen/hackpad](https://github.com/michenriksen/hackpad) A web application hacker's toolbox. Base64 encoding/decoding, URL encoding/decoding, MD5/SHA1/SHA256/HMAC hashing, code deobfuscation, formatting, highlighting and much more.
-- [**33**星][18d] [Py] [rhelmot/nclib](https://github.com/rhelmot/nclib) Netcat as a python library
-- [**33**星][29d] [C] [xerpi/vita-libbaremetal](https://github.com/xerpi/vita-libbaremetal) PSVita bare-metal payload library and sample
+- [**33**星][20d] [C] [jovanbulck/0xbadc0de](https://github.com/jovanbulck/0xbadc0de) A Tale of Two Worlds: Assessing the Vulnerability of Enclave Shielding Runtimes
+- [**33**星][20d] [Py] [rhelmot/nclib](https://github.com/rhelmot/nclib) Netcat as a python library
+- [**33**星][1m] [C] [xerpi/vita-libbaremetal](https://github.com/xerpi/vita-libbaremetal) PSVita bare-metal payload library and sample
- [**33**星][7y] [Py] [ml31415/wpscrack](https://github.com/ml31415/wpscrack) Continuation of wpscrack originally written by Stefan Viehböck
-- [**33**星][1m] [Objective-C] [proteas/ios13-sandbox-profile-format](https://github.com/proteas/ios13-sandbox-profile-format) Binary Format of iOS 13 Sandbox Profile Collection
-- [**33**星][29d] [C] [xerpi/vita-libbaremetal](https://github.com/xerpi/vita-libbaremetal) PSVita bare-metal payload library and sample
-- [**33**星][8m] [JS] [cylance/nmap-cluster](https://github.com/cylance/NMAP-Cluster) Clustering NMAP XML results to help make sense of large scan results.
+- [**33**星][1m] [ObjC] [proteas/ios13-sandbox-profile-format](https://github.com/proteas/ios13-sandbox-profile-format) Binary Format of iOS 13 Sandbox Profile Collection
+- [**33**星][1m] [C] [xerpi/vita-libbaremetal](https://github.com/xerpi/vita-libbaremetal) PSVita bare-metal payload library and sample
+- [**33**星][2y] [Py] [newbee119/ip-location](https://github.com/NewBee119/IP-location) batch query IP location information,批量查询IP地理位置信息,解析pcap包中IP地址的地理信息
+- [**33**星][4y] [Py] [fortynorthsecurity/hasher](https://github.com/FortyNorthSecurity/Hasher) Hasher is designed to be a tool that allows you to quickly hash plaintext strings, or compare hashed values with a plaintext locally. Not meant to crack passwords, but designed for local checks.
- [**33**星][1y] [C++] [teammolecule/toshiba-mep-idp](https://github.com/TeamMolecule/toshiba-mep-idp) IDA Pro module for Toshiba MeP processors
-- [**33**星][2m] [PHP] [safflower/solveme](https://github.com/safflower/solveme) SolveMe - Jeopardy CTF Platform (for wargame)
- [**33**星][2y] [C] [openpreserve/scape-xcorrsound](https://github.com/openpreserve/scape-xcorrsound) Suite of tools for automated quality assurance of audio migration processes.
-- [**33**星][14d] [JS] [googleapis/cloud-profiler-nodejs](https://github.com/googleapis/cloud-profiler-nodejs) Node.js library for Stackdriver Profiler. Continuous CPU and heap profiling to improve performance and reduce costs.
+- [**33**星][3m] [C++] [busyluo/netassistant](https://github.com/busyluo/NetAssistant) A UDP/TCP Assistant. 网络调试助手
+- [**33**星][16d] [JS] [googleapis/cloud-profiler-nodejs](https://github.com/googleapis/cloud-profiler-nodejs) Node.js library for Stackdriver Profiler. Continuous CPU and heap profiling to improve performance and reduce costs.
- [**33**星][1y] [Py] [newbee119/check_ip](https://github.com/NewBee119/check_ip) check_IP is to judge whether a IP is malicious based on open threat intelligence,基于开源威胁情报AlienVault,排查IP地址及域名的恶意性
- [**33**星][2y] [Perl] [zhou0/shadowsocks-perl](https://github.com/zhou0/shadowsocks-perl) An asynchronous, non-blocking shadowsocks client and server written in Perl.
-- [**33**星][29d] [C] [xerpi/vita-libbaremetal](https://github.com/xerpi/vita-libbaremetal) PSVita bare-metal payload library and sample
+- [**33**星][1y] [xxwiredxx/nintendo-switch-joycon-hack](https://github.com/xxwiredxx/nintendo-switch-joycon-hack) Hardwiring a push button in a JoyCon to grant bootloader access
+- [**33**星][5y] [Py] [xurubin/aurasium](https://github.com/xurubin/aurasium) Practical security policy enforcement for Android apps via bytecode rewriting and in-place reference monitor
+- [**33**星][1m] [C] [xerpi/vita-libbaremetal](https://github.com/xerpi/vita-libbaremetal) PSVita bare-metal payload library and sample
+- [**33**星][3y] [HTML] [wolfram77web/app-peid](https://github.com/wolfram77web/app-peid) PEiD detects most common packers, cryptors and compilers for PE files.
+- [**33**星][2y] [C] [weaknetlabs/byteforce](https://github.com/weaknetlabs/byteforce) Offline Digital Forensics Tool for Binary Files
- [**33**星][1y] [C++] [wanttobeno/x64_aob_search](https://github.com/wanttobeno/x64_aob_search) 快速内存搜索算法,商用级别
-- [**33**星][1y] [vu-aml/adlib](https://github.com/vu-aml/adlib) Game-Theoretic Adversarial Machine Learning Library
+- [**33**星][9m] [Swift] [vixentael/ios-datasec-basics](https://github.com/vixentael/ios-datasec-basics) iOS data security basics: key management, workshop for iOS Con UK
- [**33**星][1y] [Ruby] [versioneye/versioneye-security](https://github.com/versioneye/versioneye-security) Security Crawler for VersionEye
-- [**33**星][2m] [HCL] [traveloka/terraform-aws-waf-owasp-top-10-rules](https://github.com/traveloka/terraform-aws-waf-owasp-top-10-rules) A Terraform module to create AWF WAF Rules for OWASP Top 10 security risks protection.
-- [**33**星][25d] [CSS] [trailofbits/nyc-infosec](https://github.com/trailofbits/nyc-infosec) Mapping the NYC Infosec Community
+- [**33**星][3m] [C++] [vanhauser-thc/afl-dyninst](https://github.com/vanhauser-thc/afl-dyninst) American Fuzzy Lop + Dyninst == AFL Fuzzing blackbox binaries
+- [**33**星][27d] [CSS] [trailofbits/nyc-infosec](https://github.com/trailofbits/nyc-infosec) Mapping the NYC Infosec Community
- [**33**星][2m] [Py] [tp7309/ttpassgen](https://github.com/tp7309/ttpassgen) flexiable and scriptable password dictionary generator which can support brute-force、combination、complex rule mode etc...
- [**33**星][3y] [tom4t0/cobalt-strike-persistence](https://github.com/tom4t0/cobalt-strike-persistence) cobalt strike 自启动脚本
- [**33**星][1y] [C#] [tlgyt/wibr](https://github.com/tlgyt/wibr) Wifi Bruteforce (WiBr) is a wifi cracking tool written in c#.
+- [**33**星][7m] [C++] [tlgyt/absent-loader](https://github.com/tlgyt/absent-loader) Example Loader to be used as a learning resource for people interested in how commercially available malware is made.
- [**33**星][2y] [C++] [tienex/apfs](https://github.com/tienex/apfs) apfs: 挂载、转储和分析Apple APFS 卷和容器
- [**33**星][1y] [C] [thisissecurity/malware](https://github.com/thisissecurity/malware)
-- [**33**星][3y] [HTML] [tennc/1000php](https://github.com/tennc/1000php) 1000个PHP代码审计案例(2016.7以前乌云公开漏洞)
- [**33**星][3m] [Py] [teebytes/tnt-fuzzer](https://github.com/teebytes/tnt-fuzzer) OpenAPI 2.0 (Swagger) fuzzer written in python. Basically TnT for your API.
- [**33**星][1m] [Shell] [taylanbildik/linux_dersleri](https://github.com/taylanbildik/linux_dersleri) Kali Linux Üzerinden İşlenen Linux Komut Satırı Dersleri Dokümantasyon Kaynağı
- [**33**星][3y] [Shell] [superkojiman/snuff](https://github.com/superkojiman/snuff) Automate ARP poisoning, ssltrip, and ettercap.
- [**33**星][4y] [C] [soufianetahiri/vault-8-hive](https://github.com/soufianetahiri/vault-8-hive) Hive solves a critical problem for the malware operators at the CIA.
- [**33**星][2y] [C] [soufianetahiri/mirai-botnet](https://github.com/soufianetahiri/mirai-botnet) Mirai Botnet Client, Echo Loader and CNC source code (for the sake of knowledge)
+- [**33**星][10m] [Shell] [smileart/omg](https://github.com/smileart/omg) One More Gear set to follow DRY principle and stop doing things again and again (just a nice name for my dotfiles)
- [**33**星][3y] [Py] [smeegesec/smeegescrape](https://github.com/smeegesec/smeegescrape) File/Web Text Scraper and Wordlist Generator
- [**33**星][5y] [PHP] [smaash/kunai](https://github.com/smaash/kunai) pwning & info gathering via user browser
- [**33**星][2y] [C++] [siberas/cve-2016-3309_reloaded](https://github.com/siberas/cve-2016-3309_reloaded) Exploits for the win32kfull!bFill vulnerability on Win10 x64 RS2 using Bitmap or Palette techniques
@@ -14061,83 +15058,90 @@ networking routines
- [**33**星][9m] [C] [securesystemslab/periscope](https://github.com/securesystemslab/periscope)
- [**33**星][1y] [Go] [saturnsvoid/windows-keylogger](https://github.com/saturnsvoid/windows-keylogger)
- [**33**星][2m] [sapran/ukraine-infosec-conferences](https://github.com/sapran/ukraine-infosec-conferences) Анонси, програми та архів матеріалів українських конференцій з кібер-безпеки.
-- [**33**星][2m] [Shell] [sandrokeil/yubikey-full-disk-encryption-secure-boot-uefi](https://github.com/sandrokeil/yubikey-full-disk-encryption-secure-boot-uefi) Tutorial to create full disk encryption with YubiKey, encrypted boot partition and secure boot with UEFI
- [**33**星][3y] [Py] [sam-b/windows_syscalls_dumper](https://github.com/sam-b/windows_syscalls_dumper) 转储Windows系统调用Call的 number/name,以json格式导出
- [**33**星][2y] [Py] [s0cket7/torstat](https://github.com/s0cket7/torstat)
- [**33**星][1y] [C#] [roshly/ayyhook-loader](https://github.com/roshly/ayyhook-loader) A Free Open Source Cheat Loader
- [**33**星][2y] [Py] [rootlabs/torstat](https://github.com/rootlabs/torstat)
+- [**33**星][6m] [Shell] [robertohuertasm/apk-decompiler](https://github.com/robertohuertasm/apk-decompiler) Small Rust utility to decompile Android apks
- [**33**星][3y] [Java] [riramar/pubkey-pin-android](https://github.com/riramar/pubkey-pin-android) Just another example for Android Public Key Pinning (based on OWASP example)
- [**33**星][2y] [HTML] [rh0dev/shellcode2asmjs](https://github.com/rh0dev/shellcode2asmjs) Automatically generate ASM.JS JIT-Spray payloads
+- [**33**星][20d] [C] [rems-project/sail-arm](https://github.com/rems-project/sail-arm) Sail version of ARM ISA definition, currently for ARMv8.5-A
- [**33**星][7m] [Ruby] [rapid7/metasploit_data_models](https://github.com/rapid7/metasploit_data_models) MSF database code, gemified
+- [**33**星][7m] [Py] [r35tart/redisdirscan](https://github.com/r35tart/redisdirscan) 此脚本用于测试 Rdies 未授权访问,在没权限写ssh私钥和定时任务又不知道web绝对路径的情况下,进行WEB目录探测
- [**33**星][4y] [JS] [qazbnm456/ctf-course](https://github.com/qazbnm456/ctf-course)
- [**33**星][6m] [Verilog] [q3k/ctf](https://github.com/q3k/ctf) Stuff from CTF contests
- [**33**星][2y] [ptresearch/pentest-detections](https://github.com/ptresearch/pentest-detections) Repository for penetration testing tools
- [**33**星][2m] [Py] [pr0cf5/ctf-writeups](https://github.com/pr0cf5/ctf-writeups)
- [**33**星][6m] [Py] [portswigger/active-scan-plus-plus](https://github.com/portswigger/active-scan-plus-plus) ActiveScan++ Burp Suite Plugin
- [**33**星][4y] [Py] [peacand/burp-pytemplate](https://github.com/peacand/burp-pytemplate) Burp extension to quickly and easily develop Python complex exploits based on Burp proxy requests.
+- [**33**星][2y] [Java] [panagiotisdrakatos/t0rlib4j](https://github.com/panagiotisdrakatos/t0rlib4j) T0rlib4j is a Java controller library for Tor
- [**33**星][4y] [Py] [pan0pt1c0n/python-sockstress](https://github.com/pan0pt1c0n/python-sockstress) SockStress DoS (Denial of Service) exploit written in Python |
-- [**33**星][4m] [C#] [nyan-x-cat/disable-windows-defender](https://github.com/nyan-x-cat/disable-windows-defender) Changing values to bypass windows defender C#
+- [**33**星][11m] [C] [p3n3troot0r/socketv2v](https://github.com/p3n3troot0r/socketv2v) Mainline Linux Kernel integration of IEEE 802.11p, IEEE 1609.{3,4}, and developmental userspace utility for using J2735 over WAVE
+- [**33**星][2y] [Py] [osssanitizer/osspolice](https://github.com/osssanitizer/osspolice) Identifying Open-Source License Violation and 1-day Security Risk at Large Scale
+- [**33**星][5y] [C++] [nyx0/alina](https://github.com/nyx0/alina) Alina Spark - Point of Sales Trojan
- [**33**星][7y] [C] [nwhusted/auditdandroid](https://github.com/nwhusted/auditdandroid) A Fork of Auditd geared specifically for running on the Android platform. Includes system applications, AOSP patches, and kernel patches to maximize the audit experience.
- [**33**星][5y] [Py] [novetta/delilah](https://github.com/novetta/delilah)
-- [**33**星][11m] [C++] [niemand-sec/directx11hook](https://github.com/niemand-sec/directx11hook)
-- [**33**星][1y] [C++] [nickcano/reloadlibrary](https://github.com/nickcano/reloadlibrary) A quick-and-dirty anti-hook library proof of concept.
- [**33**星][2y] [mzet-/ctf-writeups](https://github.com/mzet-/ctf-writeups) My writeups of various CTFs & security challenges
- [**33**星][7y] [C] [mubix/fakenetbios](https://github.com/mubix/fakenetbios) See here:
+- [**33**星][2y] [ObjC] [mtjailed/privateapimanager](https://github.com/mtjailed/privateapimanager) A project providing usefull classes for reverse engineering iOS Private APIs on-device
- [**33**星][2y] [C] [mtalbi/vm_escape](https://github.com/mtalbi/vm_escape) vm escape exploit
-- [**33**星][3m] [Shell] [mozillasecurity/orion](https://github.com/mozillasecurity/orion) CI/CD pipeline for building and publishing multiple
+- [**33**星][7d] [Shell] [mozillasecurity/orion](https://github.com/mozillasecurity/orion) CI/CD pipeline for building and publishing multiple
- [**33**星][2m] [Py] [monolithworks/trueseeing](https://github.com/monolithworks/trueseeing) Non-decompiling Android vulnerability scanner (DC25 demo lab, CB17)
+- [**33**星][5m] [Go] [moldabekov/whatsipp](https://github.com/moldabekov/whatsipp)
- [**33**星][4y] [Py] [moheshmohan/pyssltest](https://github.com/moheshmohan/pyssltest) A python multithreaded script to make use of Qualys ssllabs api to test SSL flaws
- [**33**星][4y] [C] [mmyydd/relative-pattern](https://github.com/mmyydd/relative-pattern) Recover control flow graph from obfuscated codes
- [**33**星][2m] [C] [milter-manager/milter-manager](https://github.com/milter-manager/milter-manager) milter manager is a free software to protect you from spam mails and virus mails effectively with milter.
-- [**33**星][13d] [Py] [mfthomps/resim](https://github.com/mfthomps/resim) Reverse engineering software using a full system simulator
+- [**33**星][2y] [C#] [mili-tan/mv2rayconfig](https://github.com/mili-tan/mv2rayconfig)
+- [**33**星][4m] [C#] [mgeeky/stracciatella](https://github.com/mgeeky/stracciatella) OpSec-safe Powershell runspace from within C# (aka SharpPick) with AMSI and Script Block Logging disabled at startup
+- [**33**星][15d] [Py] [mfthomps/resim](https://github.com/mfthomps/resim) Reverse engineering software using a full system simulator
- [**33**星][2y] [C++] [menooker/fishhook](https://github.com/menooker/fishhook) An inline hook platform for Windows x86/x64
- [**33**星][3m] [JS] [medicean/superterm](https://github.com/medicean/superterm) 利用 webshell 创建交互式终端(Create an interactive terminal with webshell.)
+- [**33**星][9m] [Py] [mattbierner/urban-dictionary-word-list](https://github.com/mattbierner/urban-dictionary-word-list) Script and sample dataset of all urban dictionary entry names (around 1.4 million total)
+- [**33**星][4y] [Py] [mansosec/microsoft-malware-challenge](https://github.com/mansosec/microsoft-malware-challenge)
+- [**33**星][5m] [Jupyter Notebook] [malware-revealer/malware-revealer](https://github.com/malware-revealer/malware-revealer) Spot malwares using Machine Learning techniques
- [**33**星][7m] [C] [maldiohead/cve-2019-8540](https://github.com/maldiohead/cve-2019-8540) Kernel Stack info leak at exportObjectToClient function
- [**33**星][5y] [Ruby] [madirish/kojoney2](https://github.com/madirish/kojoney2) Kojoney2 is a low interaction SSH honeypot written in Python. Based on Kojoney by Jose Antonio Coret
-- [**33**星][7d] [JS] [m1nl/pompa](https://github.com/m1nl/pompa) Fully-featured spear-phishing toolkit - web front-end
+- [**33**星][6d] [JS] [m1nl/pompa](https://github.com/m1nl/pompa) Fully-featured spear-phishing toolkit - web front-end
- [**33**星][7y] [Py] [luca-m/lsb-toolkit](https://github.com/luca-m/lsb-toolkit) This is a small and simple toolkit that might be useful during steganalysis, it is currently composed by several general purpose command line tools.
- [**33**星][2y] [C] [long123king/tokenext](https://github.com/long123king/tokenext) A windbg extension, extracting token related contents
-- [**33**星][2y] [Py] [ldionmarcil/sudo-backdoor](https://github.com/ldionmarcil/sudo-backdoor) Wraps sudo; transparently steals user's credentials and exfiltrate over DNS. For those annoying times when you get a shell/file write on a sudoers account and need to leverage their credentials.
- [**33**星][3y] [C++] [kingsunc/minidump](https://github.com/kingsunc/minidump) windows软件崩溃解决方案
- [**33**星][3y] [Ruby] [khr0x40sh/metasploit-modules](https://github.com/khr0x40sh/metasploit-modules)
-- [**33**星][1y] [Py] [kasperskylab/actionscript3](https://github.com/kasperskylab/actionscript3) SWF Loader、ActionScript3 Processor和 IDA 调试辅助插件
+- [**33**星][16d] [Py] [kevcui/mitm-scripts](https://github.com/kevcui/mitm-scripts)
- [**33**星][2y] [PHP] [karek314/ddos-deflate-nginx-cloudflare](https://github.com/karek314/ddos-deflate-nginx-cloudflare) This is ddos-deflate version made to mitigate Layer 7 dos/ddos attacks - made to work with nginx and optionally cloudflare
- [**33**星][2m] [Py] [kaorz/exploits_challenges](https://github.com/kaorz/exploits_challenges) Challenges and vulnerabilities exploitation.
+- [**33**星][2y] [Py] [kandru/ts3proxy](https://github.com/kandru/ts3proxy) Teamspeak 3 Server Proxy
- [**33**星][5y] [Py] [jonmetz/androfuzz](https://github.com/jonmetz/androfuzz) A fuzzing utility for Android that focuses on reporting and delivery portions of the fuzzing process
- [**33**星][6y] [JS] [joeferner/node-gitgui](https://github.com/joeferner/node-gitgui) Git GUI written in node.js
+- [**33**星][2y] [Py] [jipegit/fect](https://github.com/jipegit/fect) Fast Evidence Collector Toolkit is an incident response toolkit to collect evidences on a suspicious windows computer
- [**33**星][3y] [jianqiangzhao/mosec2016](https://github.com/jianqiangzhao/mosec2016)
- [**33**星][2y] [Elixir] [jclem/ot_ex](https://github.com/jclem/ot_ex) OT algorithms for Elixir
- [**33**星][3m] [Py] [jamesacampbell/python-examples](https://github.com/jamesacampbell/python-examples) Examples for some key libraries in Python that I use all the time. A way for me to remember and hopefully get others started.
-- [**33**星][11m] [Objective-C] [jakeajames/reverse-engineering](https://github.com/jakeajames/reverse-engineering) nothing important
-- [**33**星][3y] [Objective-C] [integrity-sa/introspy-ios](https://github.com/integrity-sa/introspy-ios) Security profiling for blackbox iOS
+- [**33**星][12m] [ObjC] [jakeajames/reverse-engineering](https://github.com/jakeajames/reverse-engineering) nothing important
+- [**33**星][2m] [JS] [iteratec/juicy-ctf](https://github.com/iteratec/juicy-ctf) Run Capture the Flags and Security Trainings with OWASP Juice Shop
+- [**33**星][3y] [ObjC] [integrity-sa/introspy-ios](https://github.com/integrity-sa/introspy-ios) Security profiling for blackbox iOS
- [**33**星][4m] [JS] [impakho/ciscn2019_final_web1](https://github.com/impakho/ciscn2019_final_web1) 国赛2019决赛Web1 - 滑稽云音乐
-- [**33**星][12m] [Dockerfile] [immunit/cve-2018-11759](https://github.com/immunit/cve-2018-11759) Proof of concept showing how to exploit the CVE-2018-11759
+- [**33**星][1y] [Dockerfile] [immunit/cve-2018-11759](https://github.com/immunit/cve-2018-11759) Proof of concept showing how to exploit the CVE-2018-11759
- [**33**星][2y] [Py] [illusivenetworks-labs/webtrap](https://github.com/illusivenetworks-labs/webtrap) This project is designed to create deceptive webpages to deceive and redirect attackers away from real websites.
-- [**33**星][5m] [Java] [idl3r/ghidravmlinuxloader](https://github.com/idl3r/ghidravmlinuxloader)
- [**33**星][2y] [C] [realbearcat/cve-2017-16995](https://github.com/RealBearcat/CVE-2017-16995) Linux Kernel Version 4.14 - 4.4 (Ubuntu && Debian)
- [**33**星][2y] [Java] [htbridge/pivaa](https://github.com/htbridge/pivaa) Created by High-Tech Bridge, the Purposefully Insecure and Vulnerable Android Application (PIVAA) replaces outdated DIVA for benchmark of mobile vulnerability scanners.
-- [**33**星][1y] [Shell] [hestat/blazescan](https://github.com/hestat/blazescan) Blazescan is a linux webserver malware scanning and incident response tool, with built in support for cPanel servers, but will run on any linux based server.
- [**33**星][5y] [Py] [heikoheiko/pyethapp](https://github.com/heikoheiko/pyethapp)
-- [**33**星][7y] [Py] [hackedteam/test-av](https://github.com/hackedteam/test-av) Automated antivirus test environment
- [**33**星][2y] [Py] [guedou/r2scapy](https://github.com/guedou/r2scapy) a radare2 plugin that decodes packets with Scapy
- [**33**星][3y] [PHP] [gregzem/aibolit](https://github.com/gregzem/aibolit) Free malware and virus scanner for websites and ISP
- [**33**星][1y] [Java] [graxcode/zelixkiller](https://github.com/graxcode/zelixkiller) Deobfuscate ZKM up to version 11
-- [**33**星][4y] [Py] [gioyik/getexploit](https://github.com/gioyik/getexploit)
- [**33**星][2y] [Py] [ganapati/firmflaws](https://github.com/ganapati/firmflaws) Firmware analysis website + API
-- [**33**星][1y] [PowerShell] [g4lb1t/invoke-noshell](https://github.com/g4lb1t/invoke-noshell) All the Power with no Shell
+- [**33**星][1y] [PS] [g4lb1t/invoke-noshell](https://github.com/g4lb1t/invoke-noshell) All the Power with no Shell
- [**33**星][3y] [Py] [g4hsean/binauthor](https://github.com/g4hsean/binauthor) 识别未知二进制文件的作者
- [**33**星][2y] [JS] [francodacosta/phmagick](https://github.com/francodacosta/phmagick) image manipulation with php and imagemagick
- [**33**星][1y] [Py] [fnk0c/organon](https://github.com/fnk0c/organon) This program focuses on automating the download, installation and compilation of pentest tools from source
- [**33**星][6m] [flyfishsec/rsgen](https://github.com/flyfishsec/rsgen) An Universal Reverse Shell Command Genrator.
- [**33**星][3y] [Py] [fkie-cad/iva](https://github.com/fkie-cad/iva) IVA is a system to scan for known vulnerabilities in software products installed inside an organization. IVA uses CPE identifiers to search for CVEs related to a software product.
- [**33**星][8y] [Shell] [firebitsbr/hardeningone](https://github.com/firebitsbr/hardeningone) Scripts-Scanner de hardening de SO (Linux, OpenBSD, FreeBSD, apache, PHP e outros)
-- [**33**星][1y] [C++] [fdiskyou/dbi](https://github.com/fdiskyou/dbi) Files for
- [**33**星][9y] [Py] [evilsocket/altair](https://github.com/evilsocket/altair) A Modular Web Vulnerability Scanner
- [**33**星][12m] [Py] [eset/volatility-browserhooks](https://github.com/eset/volatility-browserhooks) Volatility Framework plugin to detect various types of hooks as performed by banking Trojans
-- [**33**星][11d] [F#] [enkomio/misc](https://github.com/enkomio/misc) A repository with simple projects created for testing/learning purpose
+- [**33**星][13d] [F#] [enkomio/misc](https://github.com/enkomio/misc) A repository with simple projects created for testing/learning purpose
+- [**33**星][3y] [Go] [egebalci/the-eye](https://github.com/egebalci/the-eye) Simple security surveillance script for linux distributions.
- [**33**星][1m] [C++] [dspinellis/cqmetrics](https://github.com/dspinellis/cqmetrics) C Quality Metrics
- [**33**星][1y] [Java] [dnet/burp-oauth](https://github.com/dnet/burp-oauth) OAuth plugin for Burp Suite Extender
-- [**33**星][2m] [Py] [dmaasland/mcfridafee](https://github.com/dmaasland/mcfridafee)
- [**33**星][3y] [Shell] [dlshad/openvpn-shapeshifter](https://github.com/dlshad/openvpn-shapeshifter) This script will automatically guide you to install and configure your OpenVPN server with Shapeshifter Dispatcher (obfuscation) which will allow you to bypass the DPI blockage on OpenVPN. This setup will offer the users the freedom to choose between regular OpenVPN connection or obfuscated one, they actually can use both! OpenVPN is the VPN pro…
- [**33**星][2y] [Py] [disruptops/resource-counter](https://github.com/disruptops/resource-counter) This command line tool counts the number of resources in different categories across Amazon regions.
- [**33**星][3m] [dfw1n/dfw1n-osint](https://github.com/dfw1n/dfw1n-osint) Australian Open Source Intelligence Gathering Resources, Australias Largest Open Source Intelligence Repository for Cyber Professionals and Ethical Hackers
@@ -14150,139 +15154,147 @@ networking routines
- [**33**星][3y] [Py] [cys3c/backdoorman](https://github.com/cys3c/backdoorman) BackdoorMan is a toolkit that helps you find malicious, hidden and suspicious PHP scripts and shells in a chosen destination.
- [**33**星][3y] [Py] [cr4sh/aptiocalypsis](https://github.com/cr4sh/aptiocalypsis) Arbitrary SMM code execution exploit for AMI Aptio based firmware
- [**33**星][2y] [C++] [cnrig/cnrig](https://github.com/cnrig/cnrig) Static CryptoNight CPU miner for Linux + automatic updates
-- [**33**星][9d] [PHP] [cms-garden/cmsscanner](https://github.com/cms-garden/cmsscanner) Detects FOSS CMS in the local filesystem
+- [**33**星][11d] [PHP] [cms-garden/cmsscanner](https://github.com/cms-garden/cmsscanner) Detects FOSS CMS in the local filesystem
- [**33**星][2m] [C++] [chinatiny/gameanticheat](https://github.com/chinatiny/gameanticheat) 反外挂
- [**33**星][3y] [cert-w/hadoop-attack-library](https://github.com/cert-w/hadoop-attack-library) A collection of pentest tools and resources targeting Hadoop environments
- [**33**星][2y] [cazala/coin-hive-proxy](https://github.com/cazala/coin-hive-proxy) Deprecated. Use CoinHive Stratum instead.
+- [**33**星][25d] [C++] [bareflank/standalone_cxx](https://github.com/bareflank/standalone_cxx) run C++ from anywhere
- [**33**星][3y] [Shell] [b3rito/trolo](https://github.com/b3rito/trolo) trolo - an easy to use script for generating Payloads that bypasses antivirus
- [**33**星][11m] [avery3r/re-writeups](https://github.com/avery3r/re-writeups) Writeups for my reverse engineering shanenagins
- [**33**星][6y] [Py] [averagesecurityguy/twanalyze](https://github.com/averagesecurityguy/twanalyze) Extract useful information from a Twitter account.
-- [**33**星][11m] [CSS] [appsecco/practical-recon-levelup0x02](https://github.com/appsecco/practical-recon-levelup0x02) This repository contains all the material from the talk "Practical recon techniques for bug hunters & pentesters" given at Bugcrowd LevelUp 0x02 virtual conference
+- [**33**星][2y] [C#] [arunsatyarth/oneminer](https://github.com/arunsatyarth/oneminer) 1 Click miner for Ethereum, ZCash etc on windows. Supports mixed GPUs(Nvidia & AMD)
- [**33**星][2y] [Py] [antriv/transfer_learning_text](https://github.com/antriv/transfer_learning_text)
- [**33**星][3y] [C++] [anssi-fr/nogaxeh](https://github.com/anssi-fr/nogaxeh) Tools for analyzing hexagon code
-- [**33**星][1m] [Py] [akiym/pedal](https://github.com/akiym/pedal) PEDAL - Python Exploit Development Assistance for GDB Lite
+- [**33**星][6m] [C#] [amitwaisel/malproxy](https://github.com/amitwaisel/malproxy) Proxy system calls over an RPC channel
+- [**33**星][2m] [Py] [akiym/pedal](https://github.com/akiym/pedal) PEDAL - Python Exploit Development Assistance for GDB Lite
+- [**33**星][2d] [adilmajid/privacy-for-the-paranoid](https://github.com/adilmajid/privacy-for-the-paranoid) A master checklist for securing your online life.
- [**33**星][4m] [C] [aa65535/chinadns](https://github.com/aa65535/chinadns) Protect yourself against DNS poisoning in China.
- [**33**星][2y] [Batchfile] [3gstudent/winpcap_install](https://github.com/3gstudent/winpcap_install) Auto install WinPcap on Windows(command line)
- [**33**星][4y] [C#] [3gstudent/smallp0wnedshell](https://github.com/3gstudent/smallp0wnedshell) Small modification version of p0wnedShell
- [**33**星][2y] [16667/metasploitable-3-ctf](https://github.com/16667/metasploitable-3-ctf) Metasploitable3 CTF Write-up
- [**33**星][2y] [Rust] [0xcpu/bonomen](https://github.com/0xcpu/bonomen) BONOMEN - Hunt for Malware Critical Process Impersonation
-- [**32**星][2m] [Py] [landgrey/toolsparty](https://github.com/landgrey/toolsparty) A collection of script tools for pentesting
+- [**32**星][3y] [archimboldimao/surgeconfig](https://github.com/archimboldimao/surgeconfig) 这是我日常使用 Surge 配置 Shadowsocks 代理翻墙的文件。
+- [**32**星][2y] [Go] [pbnj/s3-fuzzer](https://github.com/pbnj/s3-fuzzer)
+- [**32**星][] [Py] [adrianherrera/afl-mutation-chain](https://github.com/adrianherrera/afl-mutation-chain) Recover mutation chain from an AFL seed
+- [**32**星][10m] [Go] [bigtan/cow](https://github.com/bigtan/cow) Rule based proxy utility client
- [**32**星][2y] [dxa4481/cors](https://github.com/dxa4481/cors) JSON API's Are Automatically Protected Against CSRF, And Google Almost Took It Away.
+- [**32**星][2y] [C++] [paranoidninja/botnet-blogpost](https://github.com/paranoidninja/botnet-blogpost) This repo basically contains the code that was mentioned in the blogposts that was written by me at:
- [**32**星][2y] [sagishahar-zz/challenges](https://github.com/sagishahar-zz/challenges) Hacking challenges
- [**32**星][4y] [C] [a0rtega/bdldr](https://github.com/a0rtega/bdldr) bdldr is an unofficial engine loader for Bitdefender ® for Linux
- [**32**星][8m] [Shell] [ytisf/randomgoodness](https://github.com/ytisf/randomgoodness) General tools and scripts i want to make public to the world.
-- [**32**星][1y] [JS] [threatexpress/portplow](https://github.com/threatexpress/portplow) PortPlow is a distributed port and system scanning & enumeration service. It enables the quick and automated enumeration of ports and services from multiple systems managed by a central console.
+- [**32**星][10m] [PHP] [thekingofduck/bypassavaddusers](https://github.com/thekingofduck/bypassavaddusers) 绕过杀毒软件添加用户
- [**32**星][2y] [Shell] [paranoidninja/threat-hunting](https://github.com/paranoidninja/threat-hunting) This repo is dedicated to all my tricks, tweaks and modules for testing and hunting threats. This repo contains multiple directories which are in their own, different modules required for threat hunting. This repo will be updated as and when new changes are made.
- [**32**星][4y] [Py] [wi-fi-analyzer/3viltwinattacker](https://github.com/wi-fi-analyzer/3viltwinattacker)
-- [**32**星][19d] [Jupyter Notebook] [vrthra/f1](https://github.com/vrthra/f1)
-- [**32**星][10m] [Java] [alexatiks/spring-security-jwt-csrf](https://github.com/alexatiks/spring-security-jwt-csrf) A demonstration of stateless JWT authentication with Spring Security, Spring Boot and Vue js
+- [**32**星][12m] [Py] [ekultek/tadpole](https://github.com/ekultek/tadpole) Download files out of open AWS buckets
+- [**32**星][2d] [Shell] [ibm/cloud-pak](https://github.com/ibm/cloud-pak) IBM Cloud Paks are enterprise-grade containerized software by combining container images with enterprise capabilities for deployment in production use cases with integrations for management and lifecycle operations. Features such as pre-configured deployments based on product expertise, rolling upgrades, rollbacks, security/vulnerability testing…
+- [**32**星][3y] [Go] [localtunnel/go-localtunnel](https://github.com/localtunnel/go-localtunnel) golang client library for localtunnel.me
+- [**32**星][2m] [cloudsploit/security-remediation-guides](https://github.com/cloudsploit/security-remediation-guides) Security Remediation Guides
+- [**32**星][5d] [Go] [sadicann/andor](https://github.com/sadicann/andor) Blind SQL Injection Tool with Golang
+- [**32**星][24d] [Shell] [zerobyte-id/netass2](https://github.com/zerobyte-id/netass2) Network Assessment Assistance Framework (PenTest Toolkit).
- [**32**星][10m] [hax4us/termux-x](https://github.com/hax4us/termux-x) it is unofficial repository maintained by me
+- [**32**星][2m] [C] [kangtastic/cve-2019-2215](https://github.com/kangtastic/cve-2019-2215) Temproot for Pixel 2 and Pixel 2 XL via CVE-2019-2215
- [**32**星][2m] [Shell] [da667/ciderpress](https://github.com/da667/ciderpress) Wordpress automation and hardening
-- [**32**星][9d] [Py] [technowlogy-pushpender/technowhorse](https://github.com/technowlogy-pushpender/technowhorse) TechNowHorse is a RAT (Remote Administrator Trojan) Generator for Windows/Linux systems written in Python 3.
+- [**32**星][1m] [C] [gdbinit/efi_dxe_emulator](https://github.com/gdbinit/efi_dxe_emulator) EFI DXE Emulator and Interactive Debugger
- [**32**星][2m] [HTML] [egebalci/xss-flare](https://github.com/egebalci/xss-flare) XSS hunter on cloudflare serverless workers.
-- [**32**星][9d] [Py] [3xploit-db/pentest-tools-framework](https://github.com/3xploit-db/pentest-tools-framework) Pentest Tools Framework is a database of exploits, Scanners and tools for penetration testing. Pentest is a powerful framework includes a lot of tools for beginners. You can explore kernel vulnerabilities, network vulnerabilities
- [**32**星][6y] [sin5678/a-protect](https://github.com/sin5678/A-Protect) A-Protect Anti Rootkit Tool
+- [**32**星][3y] [Pascal] [mwsrc/xtremerat](https://github.com/mwsrc/XtremeRAT) XtremeRAT SRC Extract
- [**32**星][2y] [Py] [sewellding/sitepathscan](https://github.com/SewellDinG/SitePathScan) 网站路径扫描脚本
+- [**32**星][8m] [JS] [cylance/nmap-cluster](https://github.com/cylance/NMAP-Cluster) Clustering NMAP XML results to help make sense of large scan results.
- [**32**星][4y] [C++] [helpsystems/gdiobjdump](https://github.com/helpsystems/GDIObjDump)
- [**32**星][5y] [Py] [coalfire-research/doozer](https://github.com/Coalfire-Research/Doozer) Password cracking utility
-- [**32**星][4y] [Py] [fortynorthsecurity/hasher](https://github.com/FortyNorthSecurity/Hasher) Hasher is designed to be a tool that allows you to quickly hash plaintext strings, or compare hashed values with a plaintext locally. Not meant to crack passwords, but designed for local checks.
- [**32**星][3m] [C++] [imugee/xdv](https://github.com/imugee/xdv) XDV is disassembler or debugger that works based on the extension plugin.
- [**32**星][3m] [Shell] [blackgeneration/uncle-spufus](https://github.com/blackgeneration/uncle-spufus) A tool that automates MAC address and hostname spoofing
- [**32**星][4y] [Ruby] [praetorian-code/ruby_hashcat](https://github.com/praetorian-code/ruby_hashcat) Command line wrapper, Library, and Rest API for oclHashcat.
- [**32**星][1y] [Py] [dd4rk/ctfwebscan](https://github.com/dd4rk/ctfwebscan) CTF比赛中web源码泄露扫描
- [**32**星][2y] [CMake] [zyantific/ida-cmake](https://github.com/zyantific/ida-cmake) 使用CMake编译C++编写的IDA脚本
-- [**32**星][2m] [Java] [zerokilo/n64loaderwv](https://github.com/zerokilo/n64loaderwv) Ghidra Loader Module for N64 ROMs
-- [**32**星][5y] [Py] [xurubin/aurasium](https://github.com/xurubin/aurasium) Practical security policy enforcement for Android apps via bytecode rewriting and in-place reference monitor
+- [**32**星][2y] [ObjC] [zjjno/interface-inspector-hook](https://github.com/zjjno/interface-inspector-hook) Interface Inspector破解
+- [**32**星][3m] [Java] [zerokilo/n64loaderwv](https://github.com/zerokilo/n64loaderwv) Ghidra Loader Module for N64 ROMs
+- [**32**星][8m] [C] [y123456yz/reading-and-comprehense-twemproxy0.4.1](https://github.com/y123456yz/reading-and-comprehense-twemproxy0.4.1) redis、memcached缓存代理twemproxy源码详细分析注释,带详尽中文注释及函数调用关系。(源码学习交流QQ群:568892619)
- [**32**星][4y] [PHP] [wstart/webshell](https://github.com/wstart/webshell) This is a webshell open source project
-- [**32**星][2y] [C] [weaknetlabs/byteforce](https://github.com/weaknetlabs/byteforce) Offline Digital Forensics Tool for Binary Files
- [**32**星][2y] [vulnex/tintorera](https://github.com/vulnex/tintorera) Source Code Intelligence
- [**32**星][4m] [vulnerscom/detect-rules](https://github.com/vulnerscom/detect-rules) Vulners signature-base software version detection rules
- [**32**星][5y] [Shell] [vt-magnum-research/antimalware](https://github.com/vt-magnum-research/antimalware) Dynamic malware analysis for the Android platform
-- [**32**星][9m] [Swift] [vixentael/ios-datasec-basics](https://github.com/vixentael/ios-datasec-basics) iOS data security basics: key management, workshop for iOS Con UK
- [**32**星][5m] [C++] [vector35/generate_assembler](https://github.com/vector35/generate_assembler) generate assemblers from disassemblers, 2018 jailbreak security summit talk
-- [**32**星][3m] [C++] [vanhauser-thc/afl-dyninst](https://github.com/vanhauser-thc/afl-dyninst) American Fuzzy Lop + Dyninst == AFL Fuzzing blackbox binaries
+- [**32**星][5m] [vah13/oracle-bi-bugs](https://github.com/vah13/oracle-bi-bugs)
+- [**32**星][10m] [twelvesec/bearerauthtoken](https://github.com/twelvesec/bearerauthtoken) This burpsuite extender provides a solution on testing Enterprise applications that involve security Authorization tokens into every HTTP requests.Furthermore, this solution provides a better approach to solve the problem of Burp suite automated scanning failures when Authorization tokens exist.
- [**32**星][4y] [Py] [trustedsec/crackmapexec](https://github.com/trustedsec/crackmapexec) A swiss army knife for pentesting Windows/Active Directory environments
- [**32**星][1y] [JS] [truework/lambda-s3-antivirus](https://github.com/truework/lambda-s3-antivirus) Lambda Function to scan incoming S3 uploads by Truework
- [**32**星][7m] [Perl] [tripflex/cpsetup](https://github.com/tripflex/cpsetup) Intuitive bash/shell script to setup and harden/configure cPanel CentOS/RHEL server with ConfigServer Firewall, MailManage, MailQueue, Malware Detect, ClamAV, mod_cloudflare, CloudFlare RailGun, and many more applications and security tweaks
- [**32**星][3y] [Go] [tomsteele/burpstaticscan](https://github.com/tomsteele/burpstaticscan) Use burp's JS static code analysis on code from your local system.
- [**32**星][3y] [C] [tlgyt/dirtycowandroid](https://github.com/tlgyt/dirtycowandroid) Repo For Working on Dirty Cow Based Android Root Method
-- [**32**星][7m] [C++] [tlgyt/absent-loader](https://github.com/tlgyt/absent-loader) Example Loader to be used as a learning resource for people interested in how commercially available malware is made.
+- [**32**星][2m] [thetorproject/gettorbrowser](https://github.com/thetorproject/gettorbrowser) This is a repository to provide links for downloading Tor Browser from Github.
- [**32**星][1y] [Ruby] [thesubtlety/shocens](https://github.com/thesubtlety/shocens) Query Shodan and Censys data for fast parsing
- [**32**星][3y] [Py] [tengzhangchao/information](https://github.com/tengzhangchao/information) windows Server Information gathering tool (主机信息收集工具)
- [**32**星][3y] [tdifg/payloads](https://github.com/tdifg/payloads) for burp
- [**32**星][3m] [Py] [tangxiaofeng7/srcinformation-gathering](https://github.com/tangxiaofeng7/srcinformation-gathering) 挖掘SRC的信息收集
+- [**32**星][3y] [Py] [syss-research/dns-mitm](https://github.com/syss-research/dns-mitm) A minimal DNS service that can provide spoofed replies
- [**32**星][3y] [C++] [swwwolf/cbtest](https://github.com/swwwolf/cbtest) Windows kernel-mode callbacks tutorial driver
- [**32**星][2y] [C] [srakai/adun](https://github.com/srakai/adun) A way to backdoor every process
- [**32**星][2y] [Py] [spiperac/armroper](https://github.com/spiperac/armroper) ARM rop chain gadget searcher
- [**32**星][2y] [C] [snorez/exploits](https://github.com/snorez/exploits) practice
- [**32**星][2m] [Shell] [snawoot/linux-secureboot-kit](https://github.com/snawoot/linux-secureboot-kit) Tool for complete hardening of Linux boot chain with UEFI Secure Boot
- [**32**星][2y] [Elixir] [smpallen99/coherence_demo](https://github.com/smpallen99/coherence_demo) A coherence demo project
-- [**32**星][2y] [PHP] [sjord/jwtdemo](https://github.com/sjord/jwtdemo) Practice hacking JWT tokens
- [**32**星][2y] [Py] [sigploiter/m3uascan](https://github.com/sigploiter/m3uascan) A Scanner for M3UA protocol to detect Sigtran supporting nodes
- [**32**星][6m] [Py] [shouc/knicky](https://github.com/shouc/knicky) A module-based static virus generator
- [**32**星][7y] [C] [sergiocampama/launchpad](https://github.com/sergiocampama/launchpad) Launchpad mini projects. Includes mspgcc installation instructions for Ubuntu
- [**32**星][4y] [Py] [sekoialab/pe-tools](https://github.com/sekoialab/pe-tools) Set of python scripts to analyse PE32/PE64 binaries and to extract VB 5/6 headers and Visual Basic p-code functions.
- [**32**星][1y] [Shell] [securityriskadvisors/redteamsiem](https://github.com/securityriskadvisors/redteamsiem) Repository of resources for configuring a Red Team SIEM using Elastic
- [**32**星][3m] [C++] [saml1er/gta-reversed](https://github.com/saml1er/gta-reversed) Reversed code of GTA:SA executable (gta_sa.exe) 1.0 US
-- [**32**星][9d] [Py] [saeeddhqan/maryam](https://github.com/saeeddhqan/maryam) Open-source Intelligence(OSINT) Framework
- [**32**星][1y] [JS] [s03d4-164/hiryu](https://github.com/s03d4-164/hiryu) IOC Management and Visualization Tool
- [**32**星][3y] [Py] [rurik/pe_carver](https://github.com/rurik/pe_carver) Carves EXEs from given data files, using intelligent carving based upon PE headers
- [**32**星][2y] [Py] [rurik/java_idx_parser](https://github.com/rurik/java_idx_parser) Parses Java Cache IDX files
- [**32**星][2y] [Py] [rudsarkar/crlf-injector](https://github.com/rudsarkar/crlf-injector) A CRLF ( Carriage Return Line Feed ) Injection attack occurs when a user manages to submit a CRLF into an application. This is most commonly done by modifying an HTTP parameter or URL.
-- [**32**星][6y] [PowerShell] [roo7break/powershell-scripts](https://github.com/roo7break/powershell-scripts) List of PowerShell scripts conjured up for my consumption (you are welcome to use)
-- [**32**星][2m] [JS] [ronomon/mime](https://github.com/ronomon/mime) Fast, robust, standards-compliant MIME decoder. Ships with extensive tests and fuzz tests.
-- [**32**星][6m] [Shell] [robertohuertasm/apk-decompiler](https://github.com/robertohuertasm/apk-decompiler) Small Rust utility to decompile Android apks
+- [**32**星][6y] [PS] [roo7break/powershell-scripts](https://github.com/roo7break/powershell-scripts) List of PowerShell scripts conjured up for my consumption (you are welcome to use)
+- [**32**星][3m] [JS] [ronomon/mime](https://github.com/ronomon/mime) Fast, robust, standards-compliant MIME decoder. Ships with extensive tests and fuzz tests.
+- [**32**星][1y] [robocyber/shodan-dorks](https://github.com/robocyber/shodan-dorks) Dorks for shodan.io. Some basic shodan dorks collected from publicly available data.
- [**32**星][2m] [Java] [righettod/log-requests-to-sqlite](https://github.com/righettod/log-requests-to-sqlite) BURP extension to record every HTTP request send via BURP and create an audit trail log of an assessment.
-- [**32**星][18d] [C] [rems-project/sail-arm](https://github.com/rems-project/sail-arm) Sail version of ARM ISA definition, currently for ARMv8.5-A
+- [**32**星][2y] [Py] [redteam-cyberark/google-domain-fronting](https://github.com/redteam-cyberark/google-domain-fronting) Domain fronting using Google app engine
- [**32**星][4y] [PHP] [realtimeprojects/quixplorer](https://github.com/realtimeprojects/quixplorer) simply upload and download files to your webserver with a web-interface
- [**32**星][10m] [C] [rakion99/icememe](https://github.com/rakion99/icememe) Roblox Exploit Source Code Called IceMeme with some cmds, lua c and limited lua execution with simple ui in c#
- [**32**星][4m] [C++] [rafaelgss/hyzmall](https://github.com/rafaelgss/hyzmall)
- [**32**星][4y] [Py] [raccoons-team/ctf](https://github.com/raccoons-team/ctf) Writeups for CTF competitions.
+- [**32**星][11m] [Py] [qwj/python-esp](https://github.com/qwj/python-esp) IPSec IKE(v1,v2) PSK VPN implemented in pure Python. (For Research Purposes Only)
+- [**32**星][3d] [Ruby] [puppetlabs/puppetlabs-java_ks](https://github.com/puppetlabs/puppetlabs-java_ks) Uses a combination of keytool and openssl to manage entries in a Java keystore
- [**32**星][4y] [Py] [psmiraglia/ctf](https://github.com/psmiraglia/ctf) My solutions of CTFs
- [**32**星][1y] [Py] [phdphuc/mac-a-mal-cuckoo](https://github.com/phdphuc/mac-a-mal-cuckoo) 扩展Cuckoo沙箱功能, 添加分析macOS恶意软件功能
- [**32**星][2y] [Go] [pbnj/s3-fuzzer](https://github.com/pbnj/s3-fuzzer) A concurrent, command-line AWS S3 Fuzzer.
- [**32**星][1y] [C] [perceptionpoint/suprotect](https://github.com/perceptionpoint/suprotect) Linux内核模块, 修改任意进程的内存保护属性
- [**32**星][2m] [Py] [pagalaxylab/ghidra_scripts](https://github.com/pagalaxylab/ghidra_scripts) Scripts for the Ghidra.
- [**32**星][10m] [Swift] [pabloroca/obfuscateapi](https://github.com/pabloroca/obfuscateapi) Mac OSX, Command line Swift 4 Utility for obfuscate / defuscate strings (API endpoints) in AES128 format.
-- [**32**星][11m] [C] [p3n3troot0r/socketv2v](https://github.com/p3n3troot0r/socketv2v) Mainline Linux Kernel integration of IEEE 802.11p, IEEE 1609.{3,4}, and developmental userspace utility for using J2735 over WAVE
- [**32**星][10m] [Py] [oshp/headers](https://github.com/oshp/headers) An application to catch, search and analyze HTTP secure headers.
-- [**32**星][1y] [Py] [oros42/dns_sniffer](https://github.com/oros42/dns_sniffer) A python DNS sniffer
+- [**32**星][5m] [oldbonhart/osint-resources](https://github.com/oldbonhart/osint-resources) Data collected from publicly available sources to be used in an intelligence context
- [**32**星][2m] [Py] [oalieno/ctf](https://github.com/oalieno/ctf) CTF writeups
- [**32**星][4m] [HTML] [o0xmuhe/realworldpwn](https://github.com/o0xmuhe/realworldpwn) vulns I found or I collect
- [**32**星][7m] [Shell] [nyxgeek/nyxgeek-rules](https://github.com/nyxgeek/nyxgeek-rules) Custom rules for Hashcat and John the Ripper
- [**32**星][1y] [C++] [ntraiseharderror/dreadnought](https://github.com/ntraiseharderror/dreadnought) PoC for detecting and dumping code injection (built and extended on UnRunPE)
- [**32**星][2y] [JS] [notdls/hackbar](https://github.com/notdls/hackbar) HackBar Quantum is a sidebar that assists you with web application security testing, it's aim is to help make those tedious tasks a little bit easier. This add-on is a predecessor to the original HackBar that is not compatible with Firefox Quantum.
-- [**32**星][1y] [Jupyter Notebook] [nfrumkin/forecast-prometheus](https://github.com/nfrumkin/forecast-prometheus) A collection of analysis, and machine learning techniques for time series forecasting w/ Prometheus metrics
- [**32**星][6y] [netspi/skl](https://github.com/netspi/skl) strace keylogger PoC
- [**32**星][3y] [Go] [mwitkow/go-http-dialer](https://github.com/mwitkow/go-http-dialer) Go net.Dialer for HTTP(S) CONNECT Tunneling.
- [**32**星][2y] [HTML] [mthbernardes/leakmanager](https://github.com/mthbernardes/leakmanager) A tool to help you manage your leaks
- [**32**星][2y] [Shell] [mseclab/ahe17](https://github.com/mseclab/ahe17) Android Hacking Event 2017 Write-up
-- [**32**星][7d] [Go] [mondoolabs/mondoo](https://github.com/mondoolabs/mondoo) Mondoo Cloud-Native Security & Vulnerability Risk Management
+- [**32**星][9d] [Go] [mondoolabs/mondoo](https://github.com/mondoolabs/mondoo) Mondoo Cloud-Native Security & Vulnerability Risk Management
+- [**32**星][27d] [Shell] [mirchr/security-research](https://github.com/mirchr/security-research) Security Research
- [**32**星][1y] [Py] [mimoo/rsa_pkcs1v1_5_attacks](https://github.com/mimoo/rsa_pkcs1v1_5_attacks) Implementation of Bleichenbacher, Manger and Ben-Or attacks on RSA PKCS#1 v1.5
-- [**32**星][2y] [C#] [mili-tan/mv2rayconfig](https://github.com/mili-tan/mv2rayconfig)
- [**32**星][5m] [Py] [mikemeliz/torcrawl.py](https://github.com/mikemeliz/torcrawl.py) Crawl and extract (regular or onion) webpages through TOR network
- [**32**星][1y] [mhaggis/sysmon-splunk-app](https://github.com/mhaggis/sysmon-splunk-app) Sysmon Splunk App
- [**32**星][2y] [Py] [mgale/dhcpsnoop](https://github.com/mgale/dhcpsnoop) DHCP Snooping app - great for finding rogue DHCP servers
- [**32**星][3y] [C] [mehdilauters/esp8266-wifiscanmap](https://github.com/mehdilauters/esp8266-wifiscanmap)
- [**32**星][3y] [Py] [mdegrazia/osx-quicklook-parser](https://github.com/mdegrazia/osx-quicklook-parser) Parse the Mac Quickook index.sqlite database
-- [**32**星][8m] [C] [mboehme/pythia](https://github.com/mboehme/pythia) Pythia (extends AFL with Predictions)
- [**32**星][8m] [Py] [maxkrivich/slowloris](https://github.com/maxkrivich/slowloris) Small and simple tool for testing Slow Loris vulnerability
-- [**32**星][9m] [Py] [mattbierner/urban-dictionary-word-list](https://github.com/mattbierner/urban-dictionary-word-list) Script and sample dataset of all urban dictionary entry names (around 1.4 million total)
-- [**32**星][4y] [Py] [mansosec/microsoft-malware-challenge](https://github.com/mansosec/microsoft-malware-challenge)
-- [**32**星][5m] [Jupyter Notebook] [malware-revealer/malware-revealer](https://github.com/malware-revealer/malware-revealer) Spot malwares using Machine Learning techniques
- [**32**星][5y] [Java] [malerisch/burp-csj](https://github.com/malerisch/burp-csj) BurpCSJ extension for Burp Pro - Crawljax Selenium JUnit integration
- [**32**星][1y] [lylemi/dom-vuln-db](https://github.com/lylemi/dom-vuln-db) A collection of Browser DOM Vulnerabilities with PoCs
-- [**32**星][1y] [Objective-C] [lycajb/lycajb](https://github.com/lycajb/lycajb) LycaJB is a project that aims to fill the gap in iOS 11.0 - 11.3.1 jailbreaks. While this jailbreak is specifically aimed at developers it could be turned into a public stable jailbreak which includes Cydia. Right now we had to make the hard decision to remove Cydia from LycaJB as it caused our test devices to bootloop. We are working hard to ma…
+- [**32**星][1y] [ObjC] [lycajb/lycajb](https://github.com/lycajb/lycajb) LycaJB is a project that aims to fill the gap in iOS 11.0 - 11.3.1 jailbreaks. While this jailbreak is specifically aimed at developers it could be turned into a public stable jailbreak which includes Cydia. Right now we had to make the hard decision to remove Cydia from LycaJB as it caused our test devices to bootloop. We are working hard to ma…
- [**32**星][5y] [Perl] [linvex/mitm-squid](https://github.com/linvex/mitm-squid) sharing some files of MITM-squid attack.
- [**32**星][11m] [Assembly] [linuxthor/uul](https://github.com/linuxthor/uul) ELF binary that runs on several different *nix flavours. Works out which variant it's being run on and runs code specific to that.
- [**32**星][2y] [PHP] [leebaird/assessment-manager](https://github.com/leebaird/assessment-manager) Manage all logistical information for a pentest including clients, contacts, employees, findings, projects, scoping, and vulnerabilities.
+- [**32**星][6d] [C++] [kuqadk3/ctf-and-learning](https://github.com/kuqadk3/ctf-and-learning)
- [**32**星][2y] [Py] [krystalgamer/dec2struct](https://github.com/krystalgamer/dec2struct) 使用类定义/声明文件,在 IDA 中轻松创建虚表
- [**32**星][2y] [knoobdev/bypass-facebook-ssl-pinning](https://github.com/knoobdev/bypass-facebook-ssl-pinning) Bypassing ssl pinning for facebook android app
-- [**32**星][14d] [Py] [kevcui/mitm-scripts](https://github.com/kevcui/mitm-scripts)
+- [**32**星][3m] [Py] [kang-newbie/s-mbf](https://github.com/kang-newbie/s-mbf) Simple Multi BruteForce by KANG-NEWBIE
+- [**32**星][3y] [Shell] [jriguera/coreos-usb-creator](https://github.com/jriguera/coreos-usb-creator) Coreos live image builder with cloud-config on FAT32 to easily create POC
- [**32**星][1y] [C] [jp-bennett/fwknop2](https://github.com/jp-bennett/fwknop2) A replacement fwknop client for android.
- [**32**星][8y] [Py] [jonoberheide/kstructhunter](https://github.com/jonoberheide/kstructhunter) Routines for hunting down kernel structs.
- [**32**星][3y] [Py] [jkkj93/mint-webshell-defender](https://github.com/jkkj93/mint-webshell-defender)
-- [**32**星][2y] [Py] [jipegit/fect](https://github.com/jipegit/fect) Fast Evidence Collector Toolkit is an incident response toolkit to collect evidences on a suspicious windows computer
- [**32**星][5y] [jgor/php-jpeg-shell](https://github.com/jgor/php-jpeg-shell) Simple PHP webshell with a JPEG header to bypass weak image verification checks
- [**32**星][5y] [Ruby] [jduck/addjsif](https://github.com/jduck/addjsif) Metasploit Exploit Module for the Android addJavascriptInterface Issue (MITM)
- [**32**星][6m] [C] [jcsaezal/pmctrack](https://github.com/jcsaezal/pmctrack) an OS-oriented performance monitoring tool for Linux (
@@ -14290,121 +15302,138 @@ networking routines
- [**32**星][11m] [C++] [jacksonvd/pwnedpasswordsdll-api](https://github.com/jacksonvd/pwnedpasswordsdll-api) Open source solution to check prospective AD passwords against previously breached passwords
- [**32**星][7y] [Py] [isecpartners/fuzzbox](https://github.com/isecpartners/fuzzbox) A multi-codec media fuzzing tool.
- [**32**星][5y] [Py] [iphelix/ida-pomidor](https://github.com/iphelix/ida-pomidor) 在长时间的逆向中保存注意力和效率
+- [**32**星][6y] [C++] [igh0st/crypters](https://github.com/igh0st/crypters) Various Crypter Project
- [**32**星][5m] [Py] [idhyt/jeb-keygen](https://github.com/idhyt/jeb-keygen) JEB install env
- [**32**星][4y] [C++] [icestudent/ontl](https://github.com/icestudent/ontl) A set of tiny C++ RAII wrappers for NT Native/Win32 APIs including its own C++0x Standard Library (formerly STL) implementation.
- [**32**星][2y] [Java] [realbearcat/cve-2017-12615](https://github.com/RealBearcat/CVE-2017-12615) Tomcat 远程代码执行漏洞 Exploit
- [**32**星][4y] [Py] [holloway/docvert-python3](https://github.com/holloway/docvert-python3) Docvert for Python3: Converts Office files to DocBook and clean HTML, diagrams to SVG/PNG, etc.
- [**32**星][3y] [Py] [harryr/maltrieve](https://github.com/harryr/maltrieve) A tool to retrieve malware directly from the source for security researchers.
- [**32**星][9m] [C#] [graykernel/graystorm](https://github.com/graykernel/graystorm) In memory attack platform for C# Applications
+- [**32**星][3m] [C#] [globalpolicy/csarp-netcut](https://github.com/globalpolicy/csarp-netcut) An arpspoof program using Sharppcap
- [**32**星][2y] [C] [freener/exploits](https://github.com/freener/exploits)
- [**32**星][5y] [Java] [forprevious/attack-analysis](https://github.com/forprevious/attack-analysis) just for attack、Vulnerability,my study and research
- [**32**星][9y] [C] [falk3n/subversive](https://github.com/falk3n/subversive) x86_64 linux rootkit using debug registers
+- [**32**星][24d] [C++] [f18m/large-pcap-analyzer](https://github.com/f18m/large-pcap-analyzer) A command-line utility program that performs some simple operations on PCAP files (Wireshark/tcpdump traces) very quickly. Allows you to manipulate very large PCAP files that cannot be easily handled with other software like Wireshark (or tshark). Supports filtering encapsulated GTPu frames. Easily extendible.
- [**32**星][2y] [Py] [eurecom-s3/linux_screenshot_xwindows](https://github.com/eurecom-s3/linux_screenshot_xwindows) Volatility插件, 从内存dump中提取Windows截屏
-- [**32**星][3y] [Go] [egebalci/the-eye](https://github.com/egebalci/the-eye) Simple security surveillance script for linux distributions.
+- [**32**星][7d] [edoverflow/legal-bug-bounty](https://github.com/edoverflow/legal-bug-bounty) #legalbugbounty project — creating safe harbors on bug bounty programs and vulnerability disclosure programs. Authored by Amit Elazari.
- [**32**星][3y] [C++] [ecologylab/ecotuiodriver](https://github.com/ecologylab/ecotuiodriver) Diver to convert tuio touch events into windows touch events. Started as GSoC 2012 project.
- [**32**星][2y] [dweinstein/dockerfile-androguard](https://github.com/dweinstein/dockerfile-androguard) docker file for use with androguard python android app analysis tool
- [**32**星][5y] [Shell] [duoduo369/oh-my-shadowsocks](https://github.com/duoduo369/oh-my-shadowsocks) shadowsocks config on server, supervisor support
- [**32**星][1y] [C] [dlrobertson/sylkie](https://github.com/dlrobertson/sylkie) sylkie:利用 NeighborDiscovery Protocol 实现的 IPv6 地址欺骗工具
- [**32**星][2m] [JS] [digitalinterruption/vulnerable-xss-app](https://github.com/digitalinterruption/vulnerable-xss-app)
- [**32**星][2y] [JS] [dg92/fractal-tree](https://github.com/dg92/fractal-tree) Fractal tree
+- [**32**星][7y] [Py] [derv82/werdy](https://github.com/derv82/werdy) A set of Python scripts for generating, parsing, sorting, and saving wordlists.
- [**32**星][2y] [Shell] [deepwn/gitpagehijack](https://github.com/deepwn/gitpagehijack) OK now. Let's hijack github user's custom domain.
- [**32**星][1y] [C] [deadnumbers/pegasus](https://github.com/deadnumbers/pegasus) Carbanak leaked source
- [**32**星][2y] [HTML] [ddvkid/ng-treetable](https://github.com/ddvkid/ng-treetable) A treetable module for angular 5
+- [**32**星][1y] [TeX] [danpage/mascab](https://github.com/danpage/mascab) MASCAB: a Micro-Architectural Side-Channel Attack Bibliography
+- [**32**星][4y] [Py] [csababarta/volatility_plugins](https://github.com/csababarta/volatility_plugins) Volatility plugins created by the author
+- [**32**星][3m] [C++] [creaink/ucom](https://github.com/creaink/ucom) A simple Serial-Port/TCP/UDP debugging tool.
- [**32**星][6y] [Py] [coldheat/quicksec](https://github.com/coldheat/quicksec) IDAPython script for quick vulnerability analysis
- [**32**星][1m] [Py] [codingo/ransomware-json-dataset](https://github.com/codingo/ransomware-json-dataset) Compiles a json dataset using public sources that contains properties to aid in the detection and mitigation of over 1000 variants of ransomware.
-- [**32**星][11m] [TypeScript] [xfoxfu/clover](https://github.com/xfoxfu/clover) Shadowsocks and v2ray User Interface
-- [**32**星][1m] [Py] [cloudflare/salt-cloudflare](https://github.com/cloudflare/salt-cloudflare) Cloudflare salt module allows you to manage zones on Cloudflare from salt.
+- [**32**星][11m] [TS] [xfoxfu/clover](https://github.com/xfoxfu/clover) Shadowsocks and v2ray User Interface
+- [**32**星][4d] [Py] [cloudflare/salt-cloudflare](https://github.com/cloudflare/salt-cloudflare) Cloudflare salt module allows you to manage zones on Cloudflare from salt.
- [**32**星][2y] [Py] [citp/email_tracking](https://github.com/citp/email_tracking) Code and data release for our PETS 2018 paper: "I never signed up for this! Privacy implications of email tracking".
- [**32**星][2y] [C#] [cfwprpht/free-ps2-pub-gen](https://github.com/cfwprpht/free-ps2-pub-gen) Automated Tool for flatz PS4- PS2 Emu PKG Technic.
- [**32**星][3y] [Py] [certsocietegenerale/abuse_finder](https://github.com/certsocietegenerale/abuse_finder) Find abuse contacts for observables
-- [**32**星][2m] [Py] [carlospolop/legion](https://github.com/carlospolop/legion) Automatic Enumeration Tool based in Open Source tools
+- [**32**星][1y] [Go] [boxproject/voucher](https://github.com/boxproject/voucher) Enterprise-grade security solution for digital assets custody, using a cryptographically secure offline network.
- [**32**星][2m] [YARA] [blacktop/docker-yara](https://github.com/blacktop/docker-yara) docker-yara:YaraDockerfile
+- [**32**星][5m] [C++] [blackint3/none](https://github.com/blackint3/none) UNONE and KNONE is a couple of open source base library that makes it easy to develop software on Windows.
- [**32**星][6m] [Py] [bishopfox/idontspeakssl](https://github.com/bishopfox/idontspeakssl) simple script to parse testssl.sh results
- [**32**星][3y] [Py] [binarlyhq/binarly-query](https://github.com/binarlyhq/binarly-query) Command-line Interface for Binar.ly
- [**32**星][2y] [applebetas/mterminal-jailed](https://github.com/applebetas/mterminal-jailed) An iOS 11 compatible fork of MTerminal using Ian Beer's tfp0 exploit
+- [**32**星][5m] [angelkitty/ida7.0](https://github.com/angelkitty/ida7.0)
- [**32**星][1y] [Py] [andreafortuna/autotimeliner](https://github.com/andreafortuna/autotimeliner) 自动从volatile内存转储中提取取证时间线
-- [**32**星][6m] [C#] [amitwaisel/malproxy](https://github.com/amitwaisel/malproxy) Proxy system calls over an RPC channel
-- [**32**星][9d] [Py] [aliasrobotics/rvd](https://github.com/aliasrobotics/rvd) Robot Vulnerability Database. An archive of robot vulnerabilities and bugs.
+- [**32**星][3m] [Py] [amossys/fragscapy](https://github.com/amossys/fragscapy) Fragscapy is a command-line tool to fuzz network protocols by automating the modification of outgoing network packets. It can run multiple successive tests to determine which options can be used to evade firewalls and IDS.
- [**32**星][1y] [C] [alex9191/kernelmodemonitor](https://github.com/alex9191/kernelmodemonitor) Kernel-Mode driver and User-Mode application communication project
+- [**32**星][3d] [Py] [adguardteam/adguardsdnsfilter](https://github.com/adguardteam/adguardsdnsfilter) AdGuard Simplified Domain names filter
- [**32**星][5y] [JS] [acama/webkitties](https://github.com/acama/webkitties) PS Vita Webkit Exploit / Mini SDK and Testing Framework
- [**32**星][4y] [C++] [5loyd/makecode](https://github.com/5loyd/makecode) Dll Convert to Shellcode.
- [**32**星][11m] [Jupyter Notebook] [404notf0und/ai-for-security-testing](https://github.com/404notf0und/ai-for-security-testing) My AI security testing projects
-- [**32**星][2y] [PowerShell] [3gstudent/office-persistence](https://github.com/3gstudent/office-persistence) Use powershell to test Office-based persistence methods
+- [**32**星][2y] [PS] [3gstudent/office-persistence](https://github.com/3gstudent/office-persistence) Use powershell to test Office-based persistence methods
- [**32**星][1y] [Makefile] [1bitsy/1bitsy-examples](https://github.com/1bitsy/1bitsy-examples) Example projects for the 1BitSy development boards.
- [**32**星][5y] [Py] [0xebfe/3dsx-ida-pro-loader](https://github.com/0xebfe/3dsx-ida-pro-loader) IDA PRO Loader for 3DSX files
-- [**31**星][2m] [C#] [cmu-sei/ghosts](https://github.com/cmu-sei/ghosts) GHOSTS is a framework for highly-complex, realistic NPC orchestration
+- [**31**星][2m] [Go] [shikanon/socks5proxy](https://github.com/shikanon/socks5proxy) 一个简单的socks5代理转发服务(VPN)
+- [**31**星][2y] [Makefile] [xc2/shadowsocks-libev-tomato](https://github.com/xc2/shadowsocks-libev-tomato) Pre-compiled shadowsocks-libev for TomatoUSB, Tomato Shibby, Toastman and Asuswrt Merlin.
+- [**31**星][22d] [C] [questescape/exploit](https://github.com/questescape/exploit) Kernel exploits for the Oculus Quest
+- [**31**星][3m] [C#] [cmu-sei/ghosts](https://github.com/cmu-sei/ghosts) GHOSTS is a framework for highly-complex, realistic NPC orchestration
+- [**31**星][5y] [ObjC] [project-imas/encrypted_code_modules](https://github.com/project-imas/encrypted_code_modules) ECM - mitigates static attacks - allows sections of source code to be encrypted into a .dylib at build time and decrypted at run-time
- [**31**星][1y] [rhinosecuritylabs/presentations](https://github.com/rhinosecuritylabs/presentations) A collection of slides, videos, and proof-of-concept scripts from various Rhino presentations.
- [**31**星][2y] [bypass007/vuln](https://github.com/bypass007/vuln) Record some Vulnerabilities
- [**31**星][2m] [C] [bkerler/opencl_brute](https://github.com/bkerler/opencl_brute) MD5,SHA1,SHA256,SHA512,HMAC,PBKDF2,SCrypt Bruteforcing tools using OpenCL (GPU, yay!) and Python
-- [**31**星][7m] [Py] [fallibleinc/retirejslib](https://github.com/fallibleinc/retirejslib) Scan for vulnerabilities in JavaScript libraries you use (Python port of retirejs)
-- [**31**星][2y] [C++] [paranoidninja/botnet-blogpost](https://github.com/paranoidninja/botnet-blogpost) This repo basically contains the code that was mentioned in the blogposts that was written by me at:
+- [**31**星][8m] [Py] [fallibleinc/retirejslib](https://github.com/fallibleinc/retirejslib) Scan for vulnerabilities in JavaScript libraries you use (Python port of retirejs)
+- [**31**星][6m] [Py] [snowming04/cipher_encryption_type_identification](https://github.com/snowming04/cipher_encryption_type_identification) 对密文的加密类型进行判断的命令行工具。
- [**31**星][5y] [Py] [michenriksen/maltego](https://github.com/michenriksen/maltego) Custom Maltego transforms
-- [**31**星][8m] [Py] [hacker0x01/hacker101coursework](https://github.com/hacker0x01/hacker101coursework) Deprecated coursework from first iteration of Hacker101
+- [**31**星][21d] [Py] [grayddq/eburst](https://github.com/grayddq/eburst) 这个脚本主要提供对Exchange邮件服务器的账户爆破功能,集成了现有主流接口的爆破方式。
- [**31**星][6y] [CSS] [spiderlabs/microphisher](https://github.com/spiderlabs/microphisher) µphisher spear phishing tool (reference implementation)
-- [**31**星][16d] [JS] [pirate/django-concurrency-talk](https://github.com/pirate/django-concurrency-talk) Database Integrity in Django: Safely Handling Critical Data in Distributed Systems
-- [**31**星][7d] [Shell] [ibm/cloud-pak](https://github.com/ibm/cloud-pak) IBM Cloud Paks are enterprise-grade containerized software by combining container images with enterprise capabilities for deployment in production use cases with integrations for management and lifecycle operations. Features such as pre-configured deployments based on product expertise, rolling upgrades, rollbacks, security/vulnerability testing…
-- [**31**星][22d] [Shell] [zerobyte-id/netass2](https://github.com/zerobyte-id/netass2) Network Assessment Assistance Framework (PenTest Toolkit).
+- [**31**星][18d] [JS] [pirate/django-concurrency-talk](https://github.com/pirate/django-concurrency-talk) Database Integrity in Django: Safely Handling Critical Data in Distributed Systems
+- [**31**星][2m] [Shell] [thelinuxchoice/self-xss](https://github.com/thelinuxchoice/self-xss) Self-XSS attack using bit.ly to grab cookies tricking users into running malicious code
- [**31**星][1m] [Py] [k8gege/solrexp](https://github.com/k8gege/solrexp) Apache Solr <=8.2.0 Velocity Template 0day Exploit
- [**31**星][1m] [xuxiaodong/v2ray-for-ansible](https://github.com/xuxiaodong/v2ray-for-ansible) V2Ray for Ansible
+- [**31**星][3y] [Py] [d4vinci/wormy](https://github.com/d4vinci/wormy) some python3 functions to add spreading features to any python backdoor
+- [**31**星][2m] [Shell] [lbp0200/v2ray-vultr](https://github.com/lbp0200/v2ray-vultr) 在vultr上,在线自动部署v2ray
- [**31**星][1y] [Shell] [wongsyrone/openwrt-v2ray](https://github.com/wongsyrone/openwrt-v2ray) v2ray package example for OpenWrt/LEDE
+- [**31**星][5d] [Py] [oasis-open/cti-taxii-server](https://github.com/oasis-open/cti-taxii-server) OASIS TC Open Repository: TAXII 2 Server Library Written in Python
- [**31**星][10m] [kiyadesu/android-reversing-challenges](https://github.com/kiyadesu/android-reversing-challenges) there are some CTF challenges or some other things helping improving android reversing skills.
-- [**31**星][1m] [C] [gdbinit/efi_dxe_emulator](https://github.com/gdbinit/efi_dxe_emulator) EFI DXE Emulator and Interactive Debugger
-- [**31**星][3y] [Pascal] [mwsrc/xtremerat](https://github.com/mwsrc/XtremeRAT) XtremeRAT SRC Extract
+- [**31**星][4m] [bslassey/privacy-budget](https://github.com/bslassey/privacy-budget)
- [**31**星][1y] [Shell] [xxh3x/nethunter_universal](https://github.com/XXH3X/Nethunter_Universal) Kali Nethunter for any phone (Kerneless)
+- [**31**星][2y] [proappleos/upgrade-from-10.3.x-to-ios-11.1.2-on-any-64bit-device-with-blobs](https://github.com/ProAppleOS/Upgrade-from-10.3.x-to-iOS-11.1.2-on-any-64Bit-device-with-Blobs) How to Upgrade any 64Bit Device from 10.3.x to 11.1.2 with Blobs
- [**31**星][2y] [C++] [mojtabatajik/sandbox-detection](https://github.com/MojtabaTajik/Sandbox-Detection) Contains some tricks to detect Sandboxes and gradually completed
- [**31**星][2y] [JS] [ret2got/ethereum-jsonrpc-dns-rebinding](https://github.com/ret2got/Ethereum-JSONRPC-DNS-Rebinding) The PoC files for ethereum client's JSON-RPC DNS Rebinding
- [**31**星][2y] [C] [zwclose/hidusb2](https://github.com/zwclose/hidusb2) hidusb2:Win10hidusb.sys 源代码
- [**31**星][1y] [C#] [zodiacon/perfmonx](https://github.com/zodiacon/perfmonx) PerfMonX is an enhanced Performance Monitor tool
-- [**31**星][4m] [C++] [zodiacon/apisetview](https://github.com/zodiacon/apisetview) API Set Viewer
- [**31**星][6y] [Ruby] [zeknox/scripts](https://github.com/zeknox/scripts) a collection of useful scripts that for penetration testers
- [**31**星][3y] [Py] [ytisf/hemingway](https://github.com/ytisf/hemingway) hemingway is a simple and easy to use spear phishing helper.
- [**31**星][1y] [PHP] [yaofeifly/php_code_challenge](https://github.com/yaofeifly/php_code_challenge) 总结一些php代码审计ctf练习题
-- [**31**星][7m] [C++] [xrivendell/pcsgolh](https://github.com/xrivendell/pcsgolh) PCSGOLH - Pointless Counter-Strike: Global Offensive Lua Hooks. A open-source Lua API for CS:GO hacking written in modern C++
- [**31**星][10m] [Py] [xme/dockers](https://github.com/xme/dockers) Miscelaneous Dockers
- [**31**星][5m] [Py] [withzombies/bnil-graph](https://github.com/withzombies/bnil-graph) A BinaryNinja plugin to graph a BNIL instruction tree
+- [**31**星][20d] [Py] [whitequark/binja_itanium_cxx_abi](https://github.com/whitequark/binja_itanium_cxx_abi) Binary Ninja ItaniumC++ ABI 插件. 提供了一个自定义的 demangler,能够分析解析 RTTI 和 vtables,并发现基于虚函数指针的新函数
+- [**31**星][5y] [web2hack/trac](https://github.com/web2hack/trac) 《Web前端黑客技术揭秘》勘误表
- [**31**星][1y] [Py] [wasapi-community/data-transfer-apis](https://github.com/wasapi-community/data-transfer-apis) WASAPI data transfer APIs
-- [**31**星][5m] [vah13/oracle-bi-bugs](https://github.com/vah13/oracle-bi-bugs)
+- [**31**星][3m] [SystemVerilog] [wangxuan95/ustc-rvsoc](https://github.com/wangxuan95/ustc-rvsoc) 一个用 SystemVerilog 编写的,RISC-V 架构的 CPU + SoC
- [**31**星][1y] [unapibageek/thebicho](https://github.com/unapibageek/thebicho) Hardware backdoor for CAN bus.
- [**31**星][3m] [PHP] [ubient/laravel-pwned-passwords](https://github.com/ubient/laravel-pwned-passwords) A Laravel validation rule to determine whether a given password is pwned (insecure)
-- [**31**星][2y] [PowerShell] [tyranid/zer0con_2018](https://github.com/tyranid/zer0con_2018) Repository for my talk on Desktop Bridge at Zer0Con 2018.
-- [**31**星][10m] [twelvesec/bearerauthtoken](https://github.com/twelvesec/bearerauthtoken) This burpsuite extender provides a solution on testing Enterprise applications that involve security Authorization tokens into every HTTP requests.Furthermore, this solution provides a better approach to solve the problem of Burp suite automated scanning failures when Authorization tokens exist.
+- [**31**星][2y] [PS] [tyranid/zer0con_2018](https://github.com/tyranid/zer0con_2018) Repository for my talk on Desktop Bridge at Zer0Con 2018.
- [**31**星][3y] [Py] [tunnelshade/nightfury](https://github.com/tunnelshade/nightfury)
+- [**31**星][5y] [Py] [tripwire/openssl-ccs-inject-test](https://github.com/tripwire/openssl-ccs-inject-test) This script is designed for detection of vulnerable servers (CVE-2014-0224.) in a wide range of configurations. It attempts to negotiate using each affected protocol version (SSLv3, TLSv1, TLSv1.1, and TLSv1.2) advertising a comprehensive set of ciphers.
- [**31**星][3y] [C++] [trailofbits/cfg-showcase](https://github.com/trailofbits/cfg-showcase) Sample programs that illustrate how to use Control Flow Guard, VS2015's control flow integrity implementation
- [**31**星][1y] [Py] [thusoy/postgres-mitm](https://github.com/thusoy/postgres-mitm) Test whether your Postgres connections are vulnerable to MitM attacks
- [**31**星][4y] [Eagle] [thedarknet/hhvkit](https://github.com/thedarknet/hhvkit) DefCon Hardware Hacking Village Learn To Solder Kit
- [**31**星][5y] [Assembly] [th4nat0s/no_sandboxes](https://github.com/th4nat0s/no_sandboxes) Test suite for bypassing Malware sandboxes.
- [**31**星][4y] [C] [tandasat/cs_driver](https://github.com/tandasat/cs_driver) A sample project for using Capstone from a driver in Visual Studio 2015
-- [**31**星][21d] [talltechy/infosec_it-conferences-and-certs-usa](https://github.com/talltechy/infosec_it-conferences-and-certs-usa) USA based Information Security & I.T. Conferences
-- [**31**星][3y] [Py] [syss-research/dns-mitm](https://github.com/syss-research/dns-mitm) A minimal DNS service that can provide spoofed replies
+- [**31**星][23d] [talltechy/infosec_it-conferences-and-certs-usa](https://github.com/talltechy/infosec_it-conferences-and-certs-usa) USA based Information Security & I.T. Conferences
- [**31**星][8y] [C] [swatkat/arkitlib](https://github.com/swatkat/arkitlib) Windows anti-rootkit library
- [**31**星][2y] [Py] [starnightcyber/cve-2017-11882](https://github.com/starnightcyber/cve-2017-11882) CVE-2017-11882 exploitation
- [**31**星][3y] [Py] [staaldraad/fastfluxanalysis](https://github.com/staaldraad/fastfluxanalysis) Scripts to detect Fast-Flux and DGA using DNS query responses
- [**31**星][1y] [Ruby] [st0rn/windows-10-exploit](https://github.com/st0rn/windows-10-exploit) Windows 10 Exploit
+- [**31**星][3y] [Java] [silentsignal/burp-collab-gw](https://github.com/silentsignal/burp-collab-gw) Simple socket-based gateway to the Burp Collaborator
- [**31**星][2y] [shadowsocksrr/shadowsocksx-ng](https://github.com/shadowsocksrr/shadowsocksx-ng) Next Generation of ShadowsocksX
- [**31**星][2y] [Py] [safebreach-labs/cachetalk](https://github.com/safebreach-labs/cachetalk) Proof-of-concept program that is able to read and write arbitrary bits using HTTP server-side caching
-- [**31**星][27d] [Java] [rub-nds/tls-attacker-burpextension](https://github.com/rub-nds/tls-attacker-burpextension)
+- [**31**星][11m] [Shell] [s-o-t/telegram-3proxy-install](https://github.com/s-o-t/telegram-3proxy-install) Bash script to install socks5 proxy (3proxy) configured for telegram.
+- [**31**星][29d] [Java] [rub-nds/tls-attacker-burpextension](https://github.com/rub-nds/tls-attacker-burpextension)
- [**31**星][2y] [C++] [rprop/cppdll](https://github.com/rprop/cppdll) CppDLL a small tool that will help you generate Cpp Header(.h) and Import Library(.lib) from Dynamic Link Library(.dll)
-- [**31**星][4m] [PowerShell] [roflsandwich/steam-eop](https://github.com/roflsandwich/steam-eop)
+- [**31**星][4m] [PS] [roflsandwich/steam-eop](https://github.com/roflsandwich/steam-eop)
- [**31**星][1y] [Py] [righettod/owasp-cs-book](https://github.com/righettod/owasp-cs-book) Provide a utility script to build a PDF book gathering all Cheat Sheets from the project
-- [**31**星][2y] [Py] [redteam-cyberark/google-domain-fronting](https://github.com/redteam-cyberark/google-domain-fronting) Domain fronting using Google app engine
+- [**31**星][4m] [Shell] [riftbit/docker-3proxy](https://github.com/riftbit/docker-3proxy) Smallest and Fastest Docker container for fast proxy setup based on 3proxy SOCKS5 proxy
- [**31**星][5m] [Py] [raphaelyancey/virtual_fm_band](https://github.com/raphaelyancey/virtual_fm_band)
- [**31**星][3y] [randommood/fallacyoffast](https://github.com/randommood/fallacyoffast) Reference materials to this talk
- [**31**星][2y] [Go] [pyinx/zk-sniffer](https://github.com/pyinx/zk-sniffer) sniffer and parse zookeeper packet
-- [**31**星][11d] [Ruby] [puppetlabs/puppetlabs-java_ks](https://github.com/puppetlabs/puppetlabs-java_ks) Uses a combination of keytool and openssl to manage entries in a Java keystore
- [**31**星][1m] [C] [programa-stic/pyasmjit](https://github.com/programa-stic/pyasmjit) PyAsmJIT is a Python package for x86_64/ARM assembly code generation and execution.
- [**31**星][2y] [C++] [progmboy/kernel_vul_poc](https://github.com/progmboy/kernel_vul_poc)
- [**31**星][1y] [Py] [prevade/cloudjack](https://github.com/prevade/cloudjack) Route53/CloudFront Vulnerability Assessment Utility
- [**31**星][3y] [Py] [pmsosa/pylogger](https://github.com/pmsosa/pylogger)
- [**31**星][4y] [Pascal] [pigrecos/codedeobfuscator](https://github.com/pigrecos/codedeobfuscator) Code Deobfuscator
-- [**31**星][11d] [PHP] [php-fig-rectified/psr2r-sniffer](https://github.com/php-fig-rectified/psr2r-sniffer) A PSR-2-R code sniffer and code-style auto-correction-tool - including many useful additions
+- [**31**星][13d] [PHP] [php-fig-rectified/psr2r-sniffer](https://github.com/php-fig-rectified/psr2r-sniffer) A PSR-2-R code sniffer and code-style auto-correction-tool - including many useful additions
- [**31**星][2y] [PHP] [phith0n/ctfdbbuilder](https://github.com/phith0n/ctfdbbuilder) a database query builder for CTFer(出题专用/开发阶段/慎用)
+- [**31**星][5y] [Shell] [patrickod/docker-tor-hidden-services](https://github.com/patrickod/docker-tor-hidden-services) A simple way of exposing any docker container as a tor hidden service
- [**31**星][4y] [C] [patois/brahma](https://github.com/patois/brahma) Brahma - Privilege elevation exploit for Nintendo 3DS
- [**31**星][6m] [C] [pathway27/bookr-mod-vita](https://github.com/pathway27/bookr-mod-vita) A book reader for the Vita. Still a work in progress
- [**31**星][2y] [HTML] [p3t3rp4rk3r/my_dirty_scripts](https://github.com/p3t3rp4rk3r/my_dirty_scripts) My Dirty Scriptss ..!!!!! Pentest , OSINT , Python ,, Trainings
- [**31**星][3y] [osandamalith/apimon](https://github.com/osandamalith/apimon) A simple API monitor for Windbg
- [**31**星][4y] [Swift] [openscanner/xguardian](https://github.com/openscanner/xguardian) Security Scanner for OSX
-- [**31**星][5m] [oldbonhart/osint-resources](https://github.com/oldbonhart/osint-resources) Data collected from publicly available sources to be used in an intelligence context
-- [**31**星][5y] [C++] [nyx0/alina](https://github.com/nyx0/alina) Alina Spark - Point of Sales Trojan
+- [**31**星][11m] [C] [olehkulykov/libnhr](https://github.com/olehkulykov/libnhr) Tiny Network HTTP Request cross platform C library.
+- [**31**星][3m] [Go] [nullhypothesis/zoossh](https://github.com/nullhypothesis/zoossh) Parsing library for Tor-specific data formats.
+- [**31**星][1y] [C++] [notscimmy/libelevate](https://github.com/notscimmy/libelevate) Handle elevation DKOM against ObRegisterCallbacks
- [**31**星][1y] [Py] [northernsec/veracracker](https://github.com/northernsec/veracracker) Veracrypt Password Cracker
- [**31**星][3y] [Py] [nopdev/binjadock](https://github.com/nopdev/binjadock) An extendable, tabbed, dockable UI widget plugin for BinaryNinja
- [**31**星][2y] [Rust] [nikomatsakis/cargo-incremental](https://github.com/nikomatsakis/cargo-incremental) A fuzzing tool for incremental compilation that walks git history
@@ -14415,12 +15444,13 @@ networking routines
- [**31**星][6y] [C] [nbareil/net2pcap](https://github.com/nbareil/net2pcap) Net2PCAP is a simple network-to-pcap capture file for Linux. Its goal is to be as simple as possible to be used in hostile environments
- [**31**星][1y] [Go] [naltun/eyes](https://github.com/naltun/eyes)
- [**31**星][2y] [HTML] [mthbernardes/heimdall_webserver](https://github.com/mthbernardes/heimdall_webserver) heimdall_webserver:在 *inux 服务器上集中管理有漏洞的包(vulnerables packages)
+- [**31**星][5m] [JS] [mozfreddyb/webext-firstpartyisolation](https://github.com/mozfreddyb/webext-firstpartyisolation) Enable First Party Isolation Pref
- [**31**星][3m] [Py] [moohax/proof-pudding](https://github.com/moohax/proof-pudding) Copy cat model for Proofpoint
+- [**31**星][9m] [mmarfil/tinfoilhat](https://github.com/mmarfil/tinfoilhat) A list of privacy-respecting alternatives to apps and services that track you around.
- [**31**星][5y] [C] [mitrecnd/pynids](https://github.com/mitrecnd/pynids)
-- [**31**星][11d] [Py] [misp/misp-objects](https://github.com/misp/misp-objects) Definition, description and relationship types of MISP objects
+- [**31**星][6d] [Py] [misp/misp-objects](https://github.com/misp/misp-objects) Definition, description and relationship types of MISP objects
- [**31**星][2y] [Java] [mindawei/aliyun-safe-match](https://github.com/mindawei/aliyun-safe-match) Webshell和钓鱼网站检测(阿里云安全算法挑战赛 第29名)
- [**31**星][3y] [Go] [mikegleasonjr/devproxy](https://github.com/mikegleasonjr/devproxy) A local development http proxy with hosts spoofing written in Go
-- [**31**星][4m] [C#] [mgeeky/stracciatella](https://github.com/mgeeky/stracciatella) OpSec-safe Powershell runspace from within C# (aka SharpPick) with AMSI and Script Block Logging disabled at startup
- [**31**星][2y] [C++] [mgeeky/hevd_kernel_exploit](https://github.com/mgeeky/hevd_kernel_exploit) Exploits pack for the Windows Kernel mode driver HackSysExtremeVulnerableDriver written for educational purposes.
- [**31**星][2y] [Py] [medhini/malicious_website_detection](https://github.com/medhini/malicious_website_detection) Uses deep learning and machine learning techniques to detect and classify web pages as spam, malware and phishing
- [**31**星][5y] [matthewrudy/fake-code4hk-app](https://github.com/matthewrudy/fake-code4hk-app) Decompiling a fake code4hk / occupy central app distributed via whatsapp
@@ -14429,122 +15459,143 @@ networking routines
- [**31**星][8m] [Py] [mathboy7/ctf](https://github.com/mathboy7/ctf) Exploit for hardcore pwnable
- [**31**星][3y] [CSS] [malwares/malwares.github.io](https://github.com/malwares/malwares.github.io) malwares src dump
- [**31**星][5y] [Py] [madpowah/forensicpcap](https://github.com/madpowah/forensicpcap)
+- [**31**星][2y] [Py] [lxiaogirl/hack](https://github.com/lxiaogirl/hack) 渗透测试过程中使用的脚本,包括不限于针对特定程序设备的爆破脚本、利用代码,通用的脚本。
+- [**31**星][7m] [C++] [lr3800/teensy](https://github.com/lr3800/teensy) teensy示例代码
- [**31**星][3m] [Shell] [leviathan36/ska](https://github.com/leviathan36/ska) Simple Karma Attack
-- [**31**星][7d] [C++] [kuqadk3/ctf-and-learning](https://github.com/kuqadk3/ctf-and-learning)
- [**31**星][4y] [Lua] [kost/nmap-nse](https://github.com/kost/nmap-nse) NMAP NSE scripts - (not all)) my contributions before merging to nmap svn
- [**31**星][10m] [kiyadesu/android-reversing-challenges](https://github.com/kiyadesu/android-reversing-challenges) there are some CTF challenges or some other things helping improving android reversing skills.
- [**31**星][1y] [karelorigin/xss-problems](https://github.com/karelorigin/xss-problems)
-- [**31**星][2m] [Py] [kang-newbie/s-mbf](https://github.com/kang-newbie/s-mbf) Simple Multi BruteForce by KANG-NEWBIE
- [**31**星][3m] [Py] [junorouse/ctf](https://github.com/junorouse/ctf)
-- [**31**星][3m] [C] [jtalowell/crackme](https://github.com/jtalowell/crackme) Source repository for my introduction to reverse engineering workshop
+- [**31**星][4m] [C] [jtalowell/crackme](https://github.com/jtalowell/crackme) Source repository for my introduction to reverse engineering workshop
- [**31**星][5y] [Py] [jofpin/fuckshell](https://github.com/jofpin/fuckshell) Simple Webshell Scanner
+- [**31**星][7m] [Java] [jehy/rutracker-free](https://github.com/jehy/rutracker-free) Android thin client for rutracker.org, using Tor to avoid block.
- [**31**星][2y] [C] [jaybosamiya/fuzzing-numpy](https://github.com/jaybosamiya/fuzzing-numpy)
-- [**31**星][1m] [JS] [iteratec/juicy-ctf](https://github.com/iteratec/juicy-ctf) Run Capture the Flags and Security Trainings with OWASP Juice Shop
- [**31**星][9m] [C++] [isoadam/gina_public](https://github.com/isoadam/gina_public) Prototype of hijacking Windows driver dispatch routines in unmapped discardable sections
- [**31**星][6y] [Shell] [installation/rkhunter](https://github.com/installation/rkhunter) Rootkit Hunter install script
- [**31**星][2y] [Py] [ihack4falafel/subrosa](https://github.com/ihack4falafel/subrosa) Basic tool to automate backdooring PE files
-- [**31**星][6y] [C++] [igh0st/crypters](https://github.com/igh0st/crypters) Various Crypter Project
- [**31**星][5y] [idkwim/frooksinatra](https://github.com/idkwim/frooksinatra) POC of sysenter x64 LSTAR MSR hook
- [**31**星][1y] [C] [iamgublin/ndis6.30-netmonitor](https://github.com/iamgublin/ndis6.30-netmonitor) NDIS6.30 Filter Library
-- [**31**星][7d] [C] [hfiref0x/rocall](https://github.com/hfiref0x/rocall) ReactOS x86-32 syscall fuzzer
-- [**31**星][18d] [C++] [hasherezade/funky_malware_formats](https://github.com/hasherezade/funky_malware_formats) Parsers for custom malware formats ("Funky malware formats")
+- [**31**星][9d] [C] [hfiref0x/rocall](https://github.com/hfiref0x/rocall) ReactOS x86-32 syscall fuzzer
+- [**31**星][20d] [C++] [hasherezade/funky_malware_formats](https://github.com/hasherezade/funky_malware_formats) Parsers for custom malware formats ("Funky malware formats")
- [**31**星][1y] [Java] [harryfrey/fakegumtree](https://github.com/harryfrey/fakegumtree) Investigating an Android spyware and phishing application.
- [**31**星][5y] [Py] [hacksysteam/exploitreliabilitytestingsystem](https://github.com/hacksysteam/exploitreliabilitytestingsystem) Exploit Reliability Testing System
-- [**31**星][13d] [Ruby] [gplcc/gplcc](https://github.com/gplcc/gplcc) GPL Cooperation Commitment
+- [**31**星][8y] [C] [hackedteam/driver-win64](https://github.com/hackedteam/driver-win64) Windows (64bit) agent driver
+- [**31**星][1y] [h2hconference/2018](https://github.com/h2hconference/2018) H2HC 2018 Slides/Materials/Presentations
+- [**31**星][2y] [Go] [guitmz/go-liora](https://github.com/guitmz/go-liora) Probably the first binary (PE/ELF) infector ever created in GoLang.
+- [**31**星][15d] [Ruby] [gplcc/gplcc](https://github.com/gplcc/gplcc) GPL Cooperation Commitment
- [**31**星][6y] [C++] [glmcdona/malm](https://github.com/glmcdona/malm) MALM: Malware Monitor
- [**31**星][5y] [Py] [glamrock/stormy](https://github.com/glamrock/stormy) Easy creation of Tor Hidden Services
- [**31**星][5y] [Go] [fzerorubigd/go0r](https://github.com/fzerorubigd/go0r) A simple ssh honeypot in golang
- [**31**星][2y] [C] [frederic/qemu-exynos-bootrom](https://github.com/frederic/qemu-exynos-bootrom) Emulating Exynos 4210 BootROM in QEMU
+- [**31**星][6m] [Py] [fr0gger/unprotect](https://github.com/fr0gger/unprotect) Unprotect is a python tool for parsing PE malware and extract evasion techniques.
- [**31**星][1y] [C++] [fortiguard-lion/rpcview](https://github.com/fortiguard-lion/rpcview) RpcView is a free tool to explore and decompile Microsoft RPC interfaces
+- [**31**星][3y] [HLSL] [foonull/halomd](https://github.com/foonull/halomd) New demo version of Halo for the Mac.
+- [**31**星][7m] [Py] [fkie-cad/luckycat](https://github.com/fkie-cad/luckycat) A distributed fuzzing management framework
- [**31**星][2y] [Py] [fist0urs/kerberom](https://github.com/fist0urs/kerberom) Kerberom is a tool aimed to retrieve ARC4-HMAC'ed encrypted Tickets Granting Service (TGS) of accounts having a Service Principal Name (SPN) within an Active Directory
- [**31**星][2y] [Py] [ffmancera/pentesting-multitool](https://github.com/ffmancera/pentesting-multitool) Different utility scripts for pentesting and hacking.
+- [**31**星][8m] [C++] [ez8-co/xpjson](https://github.com/ez8-co/xpjson)
- [**31**星][5m] [C++] [etsubu/nanovm](https://github.com/etsubu/nanovm) PoC lightweight x64 register based VM implementation
-- [**31**星][1y] [edoverflow/legal-bug-bounty](https://github.com/edoverflow/legal-bug-bounty) #legalbugbounty project — creating safe harbors on bug bounty programs and vulnerability disclosure programs.
- [**31**星][1y] [Shell] [edoverflow/curate](https://github.com/edoverflow/curate) A tool for fetching archived URLs (to be rewritten in Go).
-- [**31**星][2y] [Visual Basic] [dzzie/myaut_contrib](https://github.com/dzzie/myaut_contrib) mod to myaut2exe decompiler
+- [**31**星][9m] [JS] [ecleipteon/thalos](https://github.com/ecleipteon/thalos) Secure approach to secure file storage in untrusted environments.
+- [**31**星][2y] [Visual Basic .NET] [dzzie/myaut_contrib](https://github.com/dzzie/myaut_contrib) mod to myaut2exe decompiler
- [**31**星][4y] [dhamuharker/xss-](https://github.com/dhamuharker/xss-) Awesome XSS Payloads
- [**31**星][3y] [JS] [desudesutalk/f5stegojs](https://github.com/desudesutalk/f5stegojs) JPEG steganography for browser and node. F5 algo in pure javascript.
- [**31**星][3m] [C] [defcon-russia/metasploit-payloads](https://github.com/defcon-russia/metasploit-payloads) Unified repository for different Metasploit Framework payloads
- [**31**星][4y] [Lua] [danilabs/scripts-nse](https://github.com/danilabs/scripts-nse) Some NSE scripts to search information from routers
- [**31**星][4y] [danielmiessler/ctfsolutiontypes](https://github.com/danielmiessler/ctfsolutiontypes) A collection of CTF solution types, i.e. not solutions to specific CTF challenges, but the general categories that those solutions fall under. Includes CTF solution categories for web, binary, network, crypto, and others. Please contribute!
+- [**31**星][1y] [JS] [d0g3-lab/i-soon_ctf_2018](https://github.com/D0g3-Lab/i-SOON_CTF_2018) 2018 第一届安洵杯 题目环境/源码/WP
- [**31**星][6y] [Java] [cunninglogic/lgpwn](https://github.com/cunninglogic/lgpwn) LG Root Exploit
+- [**31**星][10m] [C] [ctxis/capemon](https://github.com/ctxis/capemon) CAPE monitor DLLs
- [**31**星][4m] [cturt/gameboy_ghidrasleigh](https://github.com/cturt/gameboy_ghidrasleigh) Ghidra Processor support for Nintendo Game Boy
- [**31**星][5m] [C] [csandker/inmemoryshellcode](https://github.com/csandker/inmemoryshellcode) A Collection of In-Memory Shellcode Execution Techniques for Windows
-- [**31**星][4y] [Py] [csababarta/volatility_plugins](https://github.com/csababarta/volatility_plugins) Volatility plugins created by the author
+- [**31**星][1y] [Shell] [cryptolok/ghostinthechaos](https://github.com/cryptolok/ghostinthechaos) Chaotic Crypto Stealth VPN for Anonymity and Untraceable Hacking Attacks with Linux and Android
- [**31**星][3y] [Py] [cryptax/fittools](https://github.com/cryptax/fittools) Wristband research tools
-- [**31**星][3m] [C++] [creaink/ucom](https://github.com/creaink/ucom) A simple Serial-Port/TCP/UDP debugging tool.
- [**31**星][1y] [Py] [cisco-talos/casc](https://github.com/cisco-talos/casc) 在IDA的反汇编和字符串窗口中, 辅助创建ClamAV NDB 和 LDB签名
- [**31**星][5y] [C] [christianpapathanasiou/apache-rootkit](https://github.com/christianpapathanasiou/apache-rootkit) A malicious Apache module with rootkit functionality
- [**31**星][5y] [Ruby] [chdorner/epubinfo](https://github.com/chdorner/epubinfo) Extracts metadata information from EPUB files. Supports EPUB2 and EPUB3 formats.
- [**31**星][5m] [Py] [charliedean/psexecspray](https://github.com/charliedean/psexecspray) Spray SMB with hashes, Then psexec
- [**31**星][2y] [Py] [bwsw/webshell](https://github.com/bwsw/webshell) Docker container which includes Shellinabox and enables SSH connections to arbitrary (not where installed) servers
+- [**31**星][1y] [Py] [bsvineethiitg/malwaregan](https://github.com/bsvineethiitg/malwaregan) Visualizing malware behavior, and proactive protection using GANs against zero-day attacks.
+- [**31**星][2y] [Go] [brimstone/rsocks](https://github.com/brimstone/rsocks) Tiny little reverse socks5 client & server
+- [**31**星][2y] [PHP] [bmitch/codor](https://github.com/bmitch/codor) Custom PHPCS sniffs to find Code Smells
- [**31**星][2y] [Shell] [bluscreenofjeff/scripts](https://github.com/bluscreenofjeff/scripts) One-off scripts
- [**31**星][2y] [Py] [bltsec/violent-python3](https://github.com/bltsec/violent-python3) Python 3 scripts based on lessons learned from Violent Python: A Cookbook for Hackers, Forensic Analysts, Penetration Testers and Security Engineers by TJ O'Connor.
-- [**31**星][4m] [C++] [blackint3/none](https://github.com/blackint3/none) UNONE and KNONE is a couple of open source base library that makes it easy to develop software on Windows.
+- [**31**星][3m] [C#] [blackvikingpro/aresskit](https://github.com/blackvikingpro/aresskit) Next Generation Remote Administration Tool (RAT)
- [**31**星][2y] [Py] [benjamincrom/scrabble](https://github.com/benjamincrom/scrabble) Implements Scrabble. Also allows user to recover all game moves from given board and score list as well as brute-force find best move.
- [**31**星][4y] [Py] [basilfx/kippo-extra](https://github.com/basilfx/kippo-extra) Set of extra commands for kippo, the SSH honeypot daemon
-- [**31**星][23d] [C++] [bareflank/standalone_cxx](https://github.com/bareflank/standalone_cxx) run C++ from anywhere
- [**31**星][3y] [Py] [as0ler/r2clutch](https://github.com/as0ler/r2clutch) r2-based tool to decrypt iOS applications
+- [**31**星][4y] [Py] [arthaud/formatstring](https://github.com/arthaud/formatstring) Format string exploitation helper
- [**31**星][3m] [Perl] [aron-tn/mega-bot](https://github.com/aron-tn/mega-bot) [NEW] : Mega Bot ☣ Scanner & Auto Exploiter
- [**31**星][3m] [Py] [argilo/secplus](https://github.com/argilo/secplus) A software implementation of the Security+ system used by garage door openers
- [**31**星][7y] [Perl] [appliedsec/forensicscanner](https://github.com/appliedsec/forensicscanner) Forensic Scanner
-- [**31**星][4m] [Py] [anilyuk/punydomaincheck](https://github.com/anilyuk/punydomaincheck) punydomaincheck:Puny域名检查
-- [**31**星][5m] [angelkitty/ida7.0](https://github.com/angelkitty/ida7.0)
+- [**31**星][5m] [Py] [anilyuk/punydomaincheck](https://github.com/anilyuk/punydomaincheck) punydomaincheck:Puny域名检查
- [**31**星][7m] [Go] [andrewwebber/kate](https://github.com/andrewwebber/kate) Because Clair needs a friend
-- [**31**星][3m] [Py] [amossys/fragscapy](https://github.com/amossys/fragscapy) Fragscapy is a command-line tool to fuzz network protocols by automating the modification of outgoing network packets. It can run multiple successive tests to determine which options can be used to evade firewalls and IDS.
+- [**31**星][2y] [amoghbl1/tor-browser](https://github.com/amoghbl1/tor-browser) Orfox - A Tor Browser for Android
+- [**31**星][2y] [C] [alienrobotarmy/ctunnel](https://github.com/alienrobotarmy/ctunnel) ctunnel is a proxy and VPN software for tunneling TCP and UDP connections securely
- [**31**星][7m] [C] [alex91ar/diamorphine](https://github.com/alex91ar/diamorphine) LKM rootkit for Linux Kernels 2.6.x/3.x/4.x
- [**31**星][1y] [KiCad Layout] [5n44p/omega-dock-new](https://github.com/5n44p/omega-dock-new) A dock for Onion omega, omega2 and omega2+. It features: Microusb for power supply, USB host, Ethernet
+- [**31**星][2y] [PS] [3gstudent/waitfor-persistence](https://github.com/3gstudent/waitfor-persistence) Use Waitfor.exe to maintain persistence
- [**31**星][4y] [C] [211217613/c-hacking](https://github.com/211217613/c-hacking) Practice and learning in the world of C RE and exploit analysis
- [**31**星][11m] [Py] [0xr0/hediye](https://github.com/0xr0/hediye) Hash Generator & Cracker Online Offline
- [**31**星][1y] [Py] [003random/icu](https://github.com/003random/icu) An Extended, Modulair, Host Discovery Framework
-- [**30**星][24d] [Ruby] [stelligent/aws-devsecops-workshop](https://github.com/stelligent/aws-devsecops-workshop) A continuous security pipeline demo for the AWS DevSecOps Workshop.
+- [**30**星][10m] [smallstrong0/ss](https://github.com/smallstrong0/ss) I spend many ways to break the GFW,and this is my destination.
+- [**30**星][4y] [Forth] [benhoyt/third](https://github.com/benhoyt/third) Third, a small Forth compiler for 8086 DOS
+- [**30**星][11m] [Java] [bestoa/shadowsocks-vertx](https://github.com/bestoa/shadowsocks-vertx) Java port of shadowsocks with vertx.
+- [**30**星][26d] [fqshare/free-ssr-v2ray-vpn](https://github.com/fqshare/free-ssr-v2ray-vpn) ssr/酸酸乳/v2ray/shadowsocks节点/vpn/机场搬运分享
+- [**30**星][26d] [Ruby] [stelligent/aws-devsecops-workshop](https://github.com/stelligent/aws-devsecops-workshop) A continuous security pipeline demo for the AWS DevSecOps Workshop.
- [**30**星][2y] [Py] [scwuaptx/ais3-2017](https://github.com/scwuaptx/ais3-2017) AIS3 2017 Binary Exploitation
- [**30**星][2y] [Java] [amitshekhariitbhu/applock](https://github.com/amitshekhariitbhu/applock) Android Application for app lock
- [**30**星][8y] [Py] [hubert3/isniff](https://github.com/hubert3/isniff) SSL man-in-the-middle tool targeting iOS devices < 4.3.5
- [**30**星][8m] [offensive-security/kali-linux-preseed](https://github.com/offensive-security/kali-linux-preseed)
-- [**30**星][27d] [C] [angr/binaries](https://github.com/angr/binaries) A repository with binaries for angr tests and examples.
+- [**30**星][3y] [xyntax/waf-bypass](https://github.com/xyntax/waf-bypass)
+- [**30**星][29d] [C] [angr/binaries](https://github.com/angr/binaries) A repository with binaries for angr tests and examples.
- [**30**星][5y] [Perl] [pentestmonkey/yaptest](https://github.com/pentestmonkey/yaptest) Automatically exported from code.google.com/p/yaptest
+- [**30**星][8m] [C] [pwn20wndstuff/meridianjb](https://github.com/pwn20wndstuff/meridianjb)
- [**30**星][6m] [jiansiting/cve-2019-2725](https://github.com/jiansiting/cve-2019-2725) weblogic绕过和wls远程执行
-- [**30**星][2m] [Shell] [thelinuxchoice/self-xss](https://github.com/thelinuxchoice/self-xss) Self-XSS attack using bit.ly to grab cookies tricking users into running malicious code
-- [**30**星][1m] [Shell] [honwen/openwrt-dnsmasq-extra](https://github.com/honwen/openwrt-dnsmasq-extra) Anti-{Pollution, ADs}-DNS for OpenWrt/LEDE
-- [**30**星][3y] [Py] [d4vinci/wormy](https://github.com/d4vinci/wormy) some python3 functions to add spreading features to any python backdoor
-- [**30**星][2m] [Shell] [lbp0200/v2ray-vultr](https://github.com/lbp0200/v2ray-vultr) 在vultr上,在线自动部署v2ray
+- [**30**星][18d] [Py] [kkevsterrr/geneva](https://github.com/kkevsterrr/geneva) client-side censorship evasion engine from the Geneva AI
+- [**30**星][2y] [C++] [hsluoyz/rmtsvc](https://github.com/hsluoyz/rmtsvc) A web-based remote desktop & control service for Windows.
- [**30**星][4m] [starriv/docker-ss](https://github.com/starriv/docker-ss) use the docker to run shadowsocksr
- [**30**星][6y] [Py] [acidprime/wirelessconfig](https://github.com/acidprime/wirelessconfig) A 802.1x Python wireless configuration tool with Cocoa wrappers
-- [**30**星][2m] [C] [kangtastic/cve-2019-2215](https://github.com/kangtastic/cve-2019-2215) Temproot for Pixel 2 and Pixel 2 XL via CVE-2019-2215
- [**30**星][2y] [Py] [probr/probr-core](https://github.com/probr/probr-core) The core-component for generic WiFi tracking: remote device management, packet capturing, packet storage
-- [**30**星][27d] [Jupyter Notebook] [tikeswar/kido](https://github.com/tikeswar/kido) White hat hacking passwords using ML
+- [**30**星][29d] [Jupyter Notebook] [tikeswar/kido](https://github.com/tikeswar/kido) White hat hacking passwords using ML
+- [**30**星][7d] [ds19991999/secbox](https://github.com/ds19991999/secbox)
+- [**30**星][1m] [Go] [monereum/monereum](https://github.com/monereum/monereum) Monereum Network - A permissioned implementation of Ethereum supporting data privacy
- [**30**星][2m] [Shell] [masssmith/smgate](https://github.com/masssmith/smgate) 用树莓派做v2ray透明翻墙网关
- [**30**星][5y] [Py] [osirislab/catfish](https://github.com/osirislab/Catfish) Catfish is a tool used ease the process of finding ROP gadgets and creating payloads with them.
-- [**30**星][1y] [PowerShell] [nsacyber/detect-cve-2017-15361-tpm](https://github.com/nsacyber/Detect-CVE-2017-15361-TPM) Detects Windows and Linux systems with enabled Trusted Platform Modules (TPM) vulnerable to CVE-2017-15361. #nsacyber
+- [**30**星][1y] [PS] [nsacyber/detect-cve-2017-15361-tpm](https://github.com/nsacyber/Detect-CVE-2017-15361-TPM) Detects Windows and Linux systems with enabled Trusted Platform Modules (TPM) vulnerable to CVE-2017-15361. #nsacyber
- [**30**星][3y] [Py] [tacixat/xorshift128plus](https://github.com/TACIXAT/XorShift128Plus) Symbolic execution for the XorShift128+ algorithm.
- [**30**星][4y] [C] [intel/jit-spray-poc-for-ksp](https://github.com/intel/jit-spray-poc-for-ksp)
-- [**30**星][1m] [zoranpandovski/awesome-testing-tools](https://github.com/zoranpandovski/awesome-testing-tools)
+- [**30**星][2m] [zoranpandovski/awesome-testing-tools](https://github.com/zoranpandovski/awesome-testing-tools)
+- [**30**星][4m] [C++] [zodiacon/apisetview](https://github.com/zodiacon/apisetview) API Set Viewer
+- [**30**星][9m] [Py] [zerosteiner/advancedhttpserver](https://github.com/zerosteiner/advancedhttpserver) Standalone web server built on Python's BaseHTTPServer
- [**30**星][2y] [C#] [zacbrown/powershellmethodauditor](https://github.com/zacbrown/powershellmethodauditor) PowerShellMethodAuditor listens to the PowerShell ETW provider and logs PowerShell method invocations.
- [**30**星][2y] [ysrc/shelldaddy](https://github.com/ysrc/shelldaddy) 跨平台 webshell 静态扫描器
-- [**30**星][13d] [Haskell] [ymherklotz/verismith](https://github.com/ymherklotz/verismith) Verilog Fuzzer to test the major simulators and sythesisers by generating random, valid Verilog.
+- [**30**星][2d] [Haskell] [ymherklotz/verismith](https://github.com/ymherklotz/verismith) Verilog Fuzzer to test the major simulators and sythesisers by generating random, valid Verilog.
+- [**30**星][7m] [C++] [xrivendell/pcsgolh](https://github.com/xrivendell/pcsgolh) PCSGOLH - Pointless Counter-Strike: Global Offensive Lua Hooks. A open-source Lua API for CS:GO hacking written in modern C++
- [**30**星][2m] [C++] [xoreos/xoreos-tools](https://github.com/xoreos/xoreos-tools) Tools to help the development of xoreos
- [**30**星][7y] [JS] [x/twitter-brute-force](https://github.com/x/twitter-brute-force) Brute forces dictionaries for available twitter handles
- [**30**星][1y] [Go] [wybiral/reverseproxy](https://github.com/wybiral/reverseproxy) reverseproxy: Go语言编写的加密反向代理
-- [**30**星][17d] [Py] [whitequark/binja_itanium_cxx_abi](https://github.com/whitequark/binja_itanium_cxx_abi) Binary Ninja ItaniumC++ ABI 插件. 提供了一个自定义的 demangler,能够分析解析 RTTI 和 vtables,并发现基于虚函数指针的新函数
- [**30**星][2y] [HTML] [vuetifyjs/simple](https://github.com/vuetifyjs/simple) The simplest possible Vue setup in a single HTML file
- [**30**星][3y] [Shell] [vrutkovs/firefox-flatpak](https://github.com/vrutkovs/firefox-flatpak) Flatpak manifest and patches to build Firefox
+- [**30**星][2y] [C++] [vic4key/cat-driver](https://github.com/vic4key/cat-driver) CatDriver - The Kernel Mode Driver that written in C++. It is an useful driver and has the highest privilege level on the Windows platform. It can be used for Game Hacking and others.
- [**30**星][2y] [C#] [valsov/backnet](https://github.com/valsov/backnet) Remote Administration Tool with botnet capability, Windows
-- [**30**星][5y] [Py] [tripwire/openssl-ccs-inject-test](https://github.com/tripwire/openssl-ccs-inject-test) This script is designed for detection of vulnerable servers (CVE-2014-0224.) in a wide range of configurations. It attempts to negotiate using each affected protocol version (SSLv3, TLSv1, TLSv1.1, and TLSv1.2) advertising a comprehensive set of ciphers.
+- [**30**星][1y] [travisfsmith/mitre_attack](https://github.com/travisfsmith/mitre_attack)
+- [**30**星][5m] [Go] [tomnomnom/rawhttp](https://github.com/tomnomnom/rawhttp) A Go library for making HTTP requests with complete control
- [**30**星][2y] [C] [tigerpuma/afl_unicorn](https://github.com/tigerpuma/afl_unicorn)
- [**30**星][8m] [C#] [thaisenpm/loader2](https://github.com/thaisenpm/loader2) Nova Hook is an open source C# cheat loader currently built for CS:GO
+- [**30**星][6m] [PHP] [teamharekaze/harekazectf2019-challenges](https://github.com/teamharekaze/harekazectf2019-challenges) Harekaze CTF 2019 challenges
- [**30**星][3y] [Jupyter Notebook] [surajr/machine-learning-approach-for-malware-detection](https://github.com/surajr/machine-learning-approach-for-malware-detection) A Machine Learning approach for classifying a file as Malicious or Legitimate
- [**30**星][6y] [spiderlabs/xmlmao](https://github.com/spiderlabs/xmlmao) A configurable XPath/XML injection testbed
+- [**30**星][6y] [JS] [spiderlabs/modsecurity-status](https://github.com/spiderlabs/modsecurity-status) ModSecurity status
- [**30**星][2y] [Py] [spencerdodd/pysploit](https://github.com/spencerdodd/pysploit) Remote exploitation framework written in Python
- [**30**星][3y] [Py] [sooshie/packerid](https://github.com/sooshie/packerid)
- [**30**星][3y] [Ruby] [skulltech/apk-payload-injector](https://github.com/skulltech/apk-payload-injector) POC for injecting Metasploit payloads on arbitrary APKs
-- [**30**星][7m] [HTML] [skepticfx/damnvulnerable.me](https://github.com/skepticfx/damnvulnerable.me) A deliberately vulnerable modern day app with lots of DOM related bugs
+- [**30**星][8m] [HTML] [skepticfx/damnvulnerable.me](https://github.com/skepticfx/damnvulnerable.me) A deliberately vulnerable modern day app with lots of DOM related bugs
- [**30**星][3y] [C] [simoninns/smallymouse2](https://github.com/simoninns/smallymouse2) Universal USB to quadrature mouse adapter
-- [**30**星][3y] [Java] [silentsignal/burp-collab-gw](https://github.com/silentsignal/burp-collab-gw) Simple socket-based gateway to the Burp Collaborator
- [**30**星][10m] [Py] [sf197/hashboy-tool](https://github.com/sf197/hashboy-tool) a hash query tool
- [**30**星][1y] [Py] [serpilliere/elfesteem](https://github.com/serpilliere/elfesteem) Automatically exported from code.google.com/p/elfesteem
- [**30**星][1y] [C++] [sentinel-one/skream](https://github.com/sentinel-one/skream) SentinelOne's KeRnel Exploits Advanced Mitigations
-- [**30**星][24d] [Shell] [security-onion-solutions/securityonion-setup](https://github.com/security-onion-solutions/securityonion-setup)
+- [**30**星][26d] [Shell] [security-onion-solutions/securityonion-setup](https://github.com/security-onion-solutions/securityonion-setup)
- [**30**星][9m] [Java] [secdec/attack-surface-detector-zap](https://github.com/secdec/attack-surface-detector-zap) The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters
- [**30**星][3m] [Py] [scottmudge/debugautopatch](https://github.com/scottmudge/debugautopatch) Patching system improvement plugin for IDA.
- [**30**星][2y] [JS] [rpgeeganage/file-less-ransomware-demo](https://github.com/rpgeeganage/file-less-ransomware-demo) Demonstrate about file-less malware approach using JavaScript
@@ -14552,6 +15603,7 @@ networking routines
- [**30**星][3m] [C++] [rokups/hooker](https://github.com/rokups/hooker) Minimalistic hooking library written in C
- [**30**星][3y] [Py] [rmtew/peasauce](https://github.com/rmtew/peasauce) Peasauce Interactive Disassembler
- [**30**星][2y] [Py] [revengecoming/demonhunter](https://github.com/revengecoming/demonhunter) Distributed Honeypot
+- [**30**星][2m] [Shell] [putsi/privatecollaborator](https://github.com/putsi/privatecollaborator) A script for installing private Burp Collaborator with free Let's Encrypt SSL-certificate
- [**30**星][2y] [C] [psxdev/ps4sdk](https://github.com/psxdev/ps4sdk) Modular open source ps4 sdk with user and kernel space support
- [**30**星][1y] [C++] [psmitty7373/eif](https://github.com/psmitty7373/eif) Evil Reflective DLL Injection Finder
- [**30**星][2y] [Shell] [pnptutorials/pnp-portablehackingmachine](https://github.com/pnptutorials/pnp-portablehackingmachine) This script will convert your Raspberry Pi 3 into a portable hacking machine.
@@ -14559,133 +15611,155 @@ networking routines
- [**30**星][2y] [HTML] [plaperdr/fprandom](https://github.com/plaperdr/fprandom) A browser to counter advanced fingerprinting techniques
- [**30**星][1y] [pinktangent/endpoint-testing](https://github.com/pinktangent/endpoint-testing) Repository for Endpoint Security Testing
- [**30**星][5m] [C] [pentesteracademy/linux-rootkits-red-blue-teams](https://github.com/pentesteracademy/linux-rootkits-red-blue-teams) Linux Rootkits (4.x Kernel)
-- [**30**星][5y] [Shell] [patrickod/docker-tor-hidden-services](https://github.com/patrickod/docker-tor-hidden-services) A simple way of exposing any docker container as a tor hidden service
+- [**30**星][5m] [C++] [paragon-software-group/paragon_apfs_sdk_ce](https://github.com/paragon-software-group/paragon_apfs_sdk_ce) Paragon APFS SDK Free
+- [**30**星][1y] [C++] [owodelta/coilgun](https://github.com/owodelta/coilgun) Direct WinAPI calling
- [**30**星][2y] [PHP] [opt-oss/ng-netms](https://github.com/opt-oss/ng-netms) NG-NetMS is a new end-to-end network management platform for your Linux servers, Cisco, Juniper, HP and Extreme routers, switches and firewalls.
- [**30**星][4y] [Shell] [opentoallctf/ctf-tools](https://github.com/opentoallctf/ctf-tools) Some setup scripts for security research tools.
+- [**30**星][11m] [HCL] [opendevsecops/terraform-aws-scanner](https://github.com/opendevsecops/terraform-aws-scanner) Terraform module which provides easy to configure AWS environment for running automated security scanning solutions at scheduled intervals.
- [**30**星][1y] [C++] [ntraiseharderror/unrunpe](https://github.com/ntraiseharderror/unrunpe) PoC for detecting and dumping process hollowing code injection
+- [**30**星][3y] [nextco/android-decompiler](https://github.com/nextco/android-decompiler) A hight quality list of tools to reverse engineering code from android.
- [**30**星][4y] [neu5ron/malware-traffic-analysis-pcaps](https://github.com/neu5ron/malware-traffic-analysis-pcaps) malware-traffic-analysis.net PCAPs repository.
- [**30**星][5y] [Py] [mstsec/mst](https://github.com/mstsec/mst) A Platform for Web Pentest From China
-- [**30**星][9m] [mmarfil/tinfoilhat](https://github.com/mmarfil/tinfoilhat) A list of privacy-respecting alternatives to apps and services that track you around.
-- [**30**星][25d] [Shell] [mirchr/security-research](https://github.com/mirchr/security-research) Security Research
+- [**30**星][1y] [Tcl] [mohemiv/tcltools](https://github.com/mohemiv/tcltools) Сollection of TCL scripts for Cisco IOS penetration testing
+- [**30**星][2y] [C#] [modzero/mod0umleitung](https://github.com/modzero/mod0umleitung) modzero DNS Masquerading Server for Windows
+- [**30**星][7m] [Zeek] [mitre-attack/bzar](https://github.com/mitre-attack/bzar) A set of Zeek scripts to detect ATT&CK techniques.
- [**30**星][3y] [mhaggis/app_splunk_sysmon_hunter](https://github.com/mhaggis/app_splunk_sysmon_hunter) Splunk App to assist Sysmon Threat Hunting
- [**30**星][3y] [Py] [mhagger/diff-slider-tools](https://github.com/mhagger/diff-slider-tools) Tools for experimenting diff "slider" heuristics
- [**30**星][6y] [Py] [meatballs1/burp_jsbeautifier](https://github.com/meatballs1/burp_jsbeautifier) js-beautifier extension for Burp Suite
- [**30**星][4y] [markofu/hackeire](https://github.com/markofu/hackeire) Challenges, notes & other stuff from the HackEire CTF.....
-- [**30**星][11m] [C++] [malcomvetter/dnscache](https://github.com/malcomvetter/dnscache)
+- [**30**星][12m] [C++] [malcomvetter/dnscache](https://github.com/malcomvetter/dnscache)
- [**30**星][1y] [CSS] [m6a-uds/dvca](https://github.com/m6a-uds/dvca) Damn Vulnerable Cloud Application
-- [**30**星][2y] [Py] [lxiaogirl/hack](https://github.com/lxiaogirl/hack) 渗透测试过程中使用的脚本,包括不限于针对特定程序设备的爆破脚本、利用代码,通用的脚本。
+- [**30**星][3y] [Py] [loggerhead/shadowsocks](https://github.com/loggerhead/shadowsocks)
- [**30**星][5m] [Py] [lionheart/pwnedpasswords](https://github.com/lionheart/pwnedpasswords) A Python Library and CLI for the Pwned Passwords v2 API
- [**30**星][2y] [Py] [lanrat/spiderwho](https://github.com/lanrat/spiderwho) A very fast whois crawler
+- [**30**星][2m] [C++] [klaasnicolaas/ha_nfc_scanner](https://github.com/klaasnicolaas/ha_nfc_scanner) Scan
- [**30**星][6m] [HTML] [kkthxbye-code/csgo_bugs](https://github.com/kkthxbye-code/csgo_bugs) Random CSGO stuff
- [**30**星][2y] [C++] [kingron/s](https://github.com/kingron/s) The simple, fast, powerful SYN/TCP port scanner source code
- [**30**星][5y] [C] [karottc/linux-virus](https://github.com/karottc/linux-virus) A simple virus of linux. It can get root and destory your system.(这是一个简单的linux下的病毒,它仅能得到root权限和感染文件并进行破坏)
- [**30**星][6y] [PHP] [joostvanveen/php-security-pitfalls](https://github.com/joostvanveen/php-security-pitfalls) Code repository for Tutsplus course PHP Security Pitfalls
- [**30**星][3y] [Shell] [jlevitsk/lazykali](https://github.com/jlevitsk/lazykali) A refresh of LazyKali which simplifies install of tools and configuration. Original author appears missing.
- [**30**星][2y] [PHP] [jhaddix/seclists](https://github.com/jhaddix/seclists) SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.
-- [**30**星][13d] [C] [jedisct1/libhydrogen](https://github.com/jedisct1/libhydrogen) A lightweight, secure, easy-to-use crypto library suitable for constrained environments.
+- [**30**星][5m] [Java] [jenly1314/baseurlmanager](https://github.com/jenly1314/baseurlmanager)
- [**30**星][7m] [Py] [jaky5155/cve-2019-0708-exp](https://github.com/jaky5155/cve-2019-0708-exp)
- [**30**星][3y] [Py] [itsreallynick/office-crackros](https://github.com/itsreallynick/office-crackros) Crack your macros like the math pros.
+- [**30**星][7m] [PS] [improsec/get-badpasswords](https://github.com/improsec/get-badpasswords) Get insights into the actual strength and quality of passwords in Active Directory.
- [**30**星][3y] [Py] [immortal3/hidden-eye](https://github.com/immortal3/hidden-eye) Hide data into Picture
-- [**30**星][15d] [Py] [ickerwx/pattern](https://github.com/ickerwx/pattern) Python implementation of Metasploit's pattern_create/pattern_offset.
-- [**30**星][8y] [C] [hackedteam/driver-win64](https://github.com/hackedteam/driver-win64) Windows (64bit) agent driver
-- [**30**星][3m] [C#] [globalpolicy/csarp-netcut](https://github.com/globalpolicy/csarp-netcut) An arpspoof program using Sharppcap
+- [**30**星][3d] [Py] [ickerwx/pattern](https://github.com/ickerwx/pattern) Python implementation of Metasploit's pattern_create/pattern_offset.
+- [**30**星][3y] [HTML] [h2hconference/2016](https://github.com/h2hconference/2016) H2HC 2016 Slides/Materials/Presentations
- [**30**星][4y] [PHP] [fuzzdb-project/webshell](https://github.com/fuzzdb-project/webshell) This is a webshell open source project
-- [**30**星][6m] [Py] [fr0gger/unprotect](https://github.com/fr0gger/unprotect) Unprotect is a python tool for parsing PE malware and extract evasion techniques.
- [**30**星][2y] [Py] [fideliscyber/data_mining](https://github.com/fideliscyber/data_mining) Data Mining Virus Total for threat feed building
- [**30**星][4y] [PHP] [ezyang/csrf-magic](https://github.com/ezyang/csrf-magic) Automatic CSRF protection for PHP applications
- [**30**星][2y] [C++] [exorxw/kylin-llvm-obfuscator](https://github.com/exorxw/kylin-llvm-obfuscator) based on llvm 5.0.1 release with ollvm
- [**30**星][6m] [JS] [eshengsky/noginx](https://github.com/eshengsky/noginx) High performance HTTP and reverse proxy server based on Node.js. 基于 Node.js 的高性能 HTTP 及反向代理服务器,类似nginx。
-- [**30**星][6y] [PowerShell] [enigma0x3/powershell-c2](https://github.com/enigma0x3/powershell-c2)
+- [**30**星][6y] [PS] [enigma0x3/powershell-c2](https://github.com/enigma0x3/powershell-c2)
- [**30**星][3y] [Py] [endgameinc/instegogram](https://github.com/endgameinc/instegogram)
- [**30**星][3y] [Py] [emersonelectricco/boomerang](https://github.com/emersonelectricco/boomerang) A tool designed for consistent and safe capture of off network web resources.
-- [**30**星][9m] [JS] [ecleipteon/thalos](https://github.com/ecleipteon/thalos) Secure approach to secure file storage in untrusted environments.
- [**30**星][4y] [PHP] [echo-devim/xbackdoor](https://github.com/echo-devim/xbackdoor) A tool for the persistent XSS exploitation with a focus for mobile web browsers
+- [**30**星][11m] [Shell] [ebelties/domainwatch](https://github.com/ebelties/domainwatch) DomainWatch allows everyone to monitor domains for possible take-overs.
+- [**30**星][1y] [dwestgard/threat_hunting_tables](https://github.com/dwestgard/threat_hunting_tables) Theat hunting notes in flat file format and mapped to MITRE's ATT&CK IDs
- [**30**星][2y] [Py] [dqi/ctf_writeup](https://github.com/dqi/ctf_writeup)
- [**30**星][4m] [C] [dhn/exploits](https://github.com/dhn/exploits) Some personal exploits/pocs
- [**30**星][2y] [deroko/payloadrestrictions](https://github.com/deroko/payloadrestrictions) EMET 集成到 Win10Insider 之后改名为 PayloadRestrictions,文章分析了 PayloadRestrictions.dll 的加载过程
-- [**30**星][1y] [PowerShell] [demonsec666/security-toolkit](https://github.com/demonsec666/security-toolkit) Security-Toolkit
+- [**30**星][1y] [PS] [demonsec666/security-toolkit](https://github.com/demonsec666/security-toolkit) Security-Toolkit
- [**30**星][3y] [Py] [deadbits/shells](https://github.com/deadbits/shells) collection of useful shells for penetration tests
- [**30**星][4y] [Py] [danilovazb/sawef](https://github.com/danilovazb/sawef) Send Attack Web Forms
- [**30**星][3m] [C] [daft-freak/sdl-emscripten](https://github.com/daft-freak/sdl-emscripten) SDL2 emscripten port, non-upstreamed changes
- [**30**星][4m] [Py] [dado3212/polldaddyhack](https://github.com/dado3212/polldaddyhack) Exploit PollDaddy polls
-- [**30**星][1y] [JS] [d0g3-lab/i-soon_ctf_2018](https://github.com/D0g3-Lab/i-SOON_CTF_2018) 2018 第一届安洵杯 题目环境/源码/WP
-- [**30**星][5y] [PowerShell] [curi0usjack/activedirectory](https://github.com/curi0usjack/activedirectory) This script runs several security checks and makes modifications (with your permission) to your Active Directory domain to improve it's security posture.
-- [**30**星][1y] [Shell] [cryptolok/ghostinthechaos](https://github.com/cryptolok/ghostinthechaos) Chaotic Crypto Stealth VPN for Anonymity and Untraceable Hacking Attacks with Linux and Android
+- [**30**星][5y] [PS] [curi0usjack/activedirectory](https://github.com/curi0usjack/activedirectory) This script runs several security checks and makes modifications (with your permission) to your Active Directory domain to improve it's security posture.
+- [**30**星][4y] [comeforu2012/fq_faq](https://github.com/comeforu2012/fq_faq) 翻墙常见问题
- [**30**星][1y] [C++] [certt/1000base](https://github.com/certt/1000base) CS:GO cheat base
- [**30**星][4y] [Py] [carstein/burp-extensions](https://github.com/carstein/burp-extensions) Automatically exported from code.google.com/p/burp-extensions
-- [**30**星][1y] [Py] [bsvineethiitg/malwaregan](https://github.com/bsvineethiitg/malwaregan) Visualizing malware behavior, and proactive protection using GANs against zero-day attacks.
+- [**30**星][3y] [Py] [bshastry/afl-sancov](https://github.com/bshastry/afl-sancov) AFL coverage tool using Clang SanitizerCoverage
- [**30**星][2y] [C++] [briterator/drpdb](https://github.com/briterator/drpdb) Convert from Microsoft PDB format into a MySQL database
- [**30**星][3y] [CSS] [botherder/flexikiller](https://github.com/botherder/flexikiller) flexikiller:移除FlexiSpy 木马(Windows/Mac)
-- [**30**星][3m] [C#] [blackvikingpro/aresskit](https://github.com/blackvikingpro/aresskit) Next Generation Remote Administration Tool (RAT)
- [**30**星][2y] [Py] [blackmathit/2017-11882_generator](https://github.com/blackmathit/2017-11882_generator) CVE-2017-11882 File Generator PoC
- [**30**星][2y] [biprodeep/awesome-ml-for-cybersecurity](https://github.com/biprodeep/awesome-ml-for-cybersecurity)
- [**30**星][3y] [Py] [bannsec/pythaw](https://github.com/bannsec/pythaw) Python Application to Reverse Freezing
-- [**30**星][17d] [C++] [ayuto/dynamichooks](https://github.com/ayuto/dynamichooks) A C++ library to create function hooks dynamically, so you can easily embed it into other programming languages..
+- [**30**星][1y] [Py] [bandrel/ocyara](https://github.com/bandrel/ocyara) Performs OCR on image files and scans them for matches to YARA rules
+- [**30**星][9d] [Java] [azure/azure-cosmosdb-java](https://github.com/azure/azure-cosmosdb-java) Java Async SDK for SQL API of Azure Cosmos DB
+- [**30**星][19d] [C++] [ayuto/dynamichooks](https://github.com/ayuto/dynamichooks) A C++ library to create function hooks dynamically, so you can easily embed it into other programming languages..
- [**30**星][1y] [Py] [aurainfosec/xss_payloads](https://github.com/aurainfosec/xss_payloads) XSS payloads for edge cases
- [**30**星][2y] [Py] [aurainfosec/burp-multi-browser-highlighting](https://github.com/aurainfosec/burp-multi-browser-highlighting) Highlight Burp proxy requests made by different browsers
-- [**30**星][4y] [Py] [arthaud/formatstring](https://github.com/arthaud/formatstring) Format string exploitation helper
- [**30**星][4m] [Shell] [armourbird/csf](https://github.com/armourbird/csf) ArmourBird CSF - Container Security Framework
- [**30**星][2y] [Py] [andrewilyas/ens-adv-train-attack](https://github.com/andrewilyas/ens-adv-train-attack) Circumventing the defense in "Ensemble Adversarial Training: Attacks and Defenses"
-- [**30**星][2y] [C] [alienrobotarmy/ctunnel](https://github.com/alienrobotarmy/ctunnel) ctunnel is a proxy and VPN software for tunneling TCP and UDP connections securely
- [**30**星][11m] [PHP] [alemalakra/xwaf](https://github.com/alemalakra/xwaf) xWAF 3.0 - Free Web Application Firewall, Open-Source.
- [**30**星][1y] [JS] [akalankauk/foxss-xss-penetration-testing-tool](https://github.com/akalankauk/foxss-xss-penetration-testing-tool) Foxss is a simple php based penetration Testing Tool.Currently it will help to find XSS vulnerability in websites.
- [**30**星][1y] [Java] [airman604/jdbc-backdoor](https://github.com/airman604/jdbc-backdoor) A fake JDBC driver that allows OS command execution.
- [**30**星][4y] [HTML] [a0xnirudh/webxploiter](https://github.com/a0xnirudh/webxploiter) WebXploiter - An OWASP Top 10 Security scanner !
- [**30**星][12m] [PHP] [7hxz233/ctf](https://github.com/7hxz233/ctf) This repo stores all challenges and writeups of CTFs we have participated in
+- [**30**星][3y] [Py] [5z1punch/oracle_java_shell_client](https://github.com/5z1punch/oracle_java_shell_client) oracle 10g sys权限通过java执行命令获得一个非交互shell的客户端,通常用于正向连接
- [**30**星][8m] [Py] [3xp10it/xupload](https://github.com/3xp10it/xupload) A tool for automatically testing whether the upload function can upload webshell
- [**30**星][1y] [JS] [1lastbr3ath/drmine](https://github.com/1lastbr3ath/drmine) Dr. Mine is a node script written to aid automatic detection of in-browser cryptojacking.
- [**30**星][4y] [C++] [0xddaa/pin](https://github.com/0xddaa/pin) Use Intel Pin tools to analysis binary.
- [**30**星][4y] [0pc0defr/yararules](https://github.com/0pc0defr/yararules) Multiple rules for yara-project for detect compiler/packer/protector
+- [**29**星][11m] [C++] [pushkalkatara/darknet_ros](https://github.com/pushkalkatara/darknet_ros) Robotics Operating System Package for Yolo v3 based on darknet with optimized tracking using Kalman Filter and Optical Flow.
+- [**29**星][2y] [Py] [sevro/security-utilities](https://github.com/sevro/security-utilities) Offensive Security Certified Profesional (OSCP) course scripts, some have been generalized
+- [**29**星][6m] [Java] [portswigger/scan-check-builder](https://github.com/portswigger/scan-check-builder) Burp Bounty is a extension of Burp Suite that improve an active and passive scanner by yourself. This extension requires Burp Suite Pro.
+- [**29**星][] [Shell] [m507/kali-tx](https://github.com/m507/kali-tx) Customized Kali Linux - Ansible playbook
+- [**29**星][5d] [Py] [skybulk/bin2sc](https://github.com/skybulk/bin2sc) Binary to shellcode
- [**29**星][2y] [Shell] [dreadl0ck/golang-libs](https://github.com/dreadl0ck/golang-libs) List of awesome golang repositories and useful resources for development
+- [**29**星][1m] [fs0c131y/conpresentations](https://github.com/fs0c131y/conpresentations) Slide decks from my conference presentations
- [**29**星][4y] [JS] [infosec-au/phishjs](https://github.com/infosec-au/phishjs) Abusing trust boundaries to deliver effective phishing payloads
- [**29**星][3y] [JS] [mandatoryprogrammer/pers](https://github.com/mandatoryprogrammer/pers) A passive scanning tool for finding expired domain vulnerabilities while you browse.
-- [**29**星][1y] [PowerShell] [denandz/secretserversecretstealer](https://github.com/denandz/secretserversecretstealer) Powershell script that decrypts the data stored within a Thycotic Secret Server
+- [**29**星][2m] [C] [iaik/transientfail](https://github.com/iaik/transientfail) Website and PoC collection for transient execution attacks
+- [**29**星][1y] [PS] [denandz/secretserversecretstealer](https://github.com/denandz/secretserversecretstealer) Powershell script that decrypts the data stored within a Thycotic Secret Server
+- [**29**星][2m] [C#] [uknowsec/sharpeventlog](https://github.com/uknowsec/sharpeventlog) c# 读取登录过本机的登录失败或登录成功(4624,4625)的所有计算机信息,在内网渗透中快速定位运维管理人员。
- [**29**星][1y] [Java] [guardianproject/pluto](https://github.com/guardianproject/pluto) Pluggable Library (for) Using Traffic Obfuscation: DEPRECATED - SEE LINK FOR NEW PROJECT
+- [**29**星][7y] [PHP] [guelfoweb/wp-waf](https://github.com/guelfoweb/wp-waf) [PHP] WordPress Application Firewall
- [**29**星][2m] [al0ne/suricata_optimize](https://github.com/al0ne/suricata_optimize) Suricata安装部署&丢包优化&性能调优&规则调整&Pfring设置
-- [**29**星][28d] [Py] [certtools/malware_name_mapping](https://github.com/certtools/malware_name_mapping) A mapping of used malware names to commonly known family names
+- [**29**星][4y] [Py] [yinghuocho/ghttproxy](https://github.com/yinghuocho/ghttproxy) a gevent based HTTP/HTTPS proxy with SOCKS5 forwarding.
+- [**29**星][3y] [C] [nicehash/sgminer-gm](https://github.com/nicehash/sgminer-gm) A multi-algo GPU miner from genesismining
+- [**29**星][30d] [Py] [certtools/malware_name_mapping](https://github.com/certtools/malware_name_mapping) A mapping of used malware names to commonly known family names
+- [**29**星][6m] [TS] [igio90/frida-onload](https://github.com/igio90/frida-onload) Frida module to hook module initializations on android
- [**29**星][3m] [Py] [osirislab/csaw-ctf-2019-quals](https://github.com/osirislab/csaw-ctf-2019-quals) Challenge Repository for CSAW CTF Quals 2019
+- [**29**星][2m] [Shell] [trojan-gfw/trojan-quickstart](https://github.com/trojan-gfw/trojan-quickstart) A simple installation script for trojan server.
+- [**29**星][1m] [Py] [lunixbochs/mpwn](https://github.com/lunixbochs/mpwn) single file ctf/exploit client library - python3, type annotated
- [**29**星][9m] [Shell] [shadowsocks/libev](https://github.com/shadowsocks/libev) A fork of libev
- [**29**星][4y] [PHP] [wpscanteam/vulnerablewordpress](https://github.com/wpscanteam/vulnerablewordpress)
+- [**29**星][1y] [C] [stevemk14ebr/bf4-atombot](https://github.com/stevemk14ebr/bf4-atombot) Latest version of my personal BF4 Hack
- [**29**星][2y] [JS] [javascript-obfuscator/obfuscator-loader](https://github.com/javascript-obfuscator/obfuscator-loader) A webpack loader for obfuscating single modules using javascript-obfuscator
- [**29**星][1y] [C++] [stealth/libusipp](https://github.com/stealth/libusipp) unix socket interface for C++ raw IP/IP6/UDP/TCP, Layer2 etc. framework
-- [**29**星][3y] [Go] [localtunnel/go-localtunnel](https://github.com/localtunnel/go-localtunnel) golang client library for localtunnel.me
-- [**29**星][25d] [Go] [sadicann/andor](https://github.com/sadicann/andor) Blind SQL Injection Tool with Golang
+- [**29**星][26d] [Py] [charlie-belmer/subdomain_recon](https://github.com/charlie-belmer/subdomain_recon) A subdomain reconnaissance scanner
+- [**29**星][2d] [Shell] [honwen/openwrt-dnsmasq-extra](https://github.com/honwen/openwrt-dnsmasq-extra) Anti-{Pollution, ADs}-DNS for OpenWrt/LEDE
- [**29**星][1y] [HTML] [evilbotnet/openpimap](https://github.com/evilbotnet/openpimap) Python3 and Raspberry Pi based NetFlow Traffic Analysis leveraging Shodan's API, Twilio, GeoIP, and Folium to produce interactive maps and threat intelligence data.
-- [**29**星][4y] [PowerShell] [ahhh/wifi_trojans](https://github.com/ahhh/wifi_trojans) A collection of wireless based bind and reverse connect shells for penetration testers to use in demonstrating persistence to a network via rouge access points.
+- [**29**星][4y] [PS] [ahhh/wifi_trojans](https://github.com/ahhh/wifi_trojans) A collection of wireless based bind and reverse connect shells for penetration testers to use in demonstrating persistence to a network via rouge access points.
- [**29**星][3y] [Py] [6e726d/pywiwi](https://github.com/6e726d/pywiwi) Python Windows Wifi
+- [**29**星][9d] [Py] [muteb/hoarder](https://github.com/muteb/hoarder) This script is made to collect the most valiable artifacts for foreniscs or incident reponse investigation rather than imaging the whole har drive.
+- [**29**星][2d] [Py] [pnfsoftware/jeb-golang-analyzer](https://github.com/pnfsoftware/jeb-golang-analyzer) JEB scripts for Golang executables analysis
- [**29**星][12m] [Vim script] [fabi1cazenave/suckless.vim](https://github.com/fabi1cazenave/suckless.vim) Tiling window management that sucks less. Inpired by wmii and i3.
- [**29**星][8y] [sektioneins/.ipa-pie-scanner](https://github.com/sektioneins/.ipa-PIE-Scanner) Scans iPhone/iPad/iPod applications for PIE flags
-- [**29**星][5m] [JS] [websecurity-quiz/websecurity-quiz.github.io](https://github.com/websecurity-quiz/websecurity-quiz.github.io) Test your Web Security knowledge with OWASP exam questions.
+- [**29**星][6m] [JS] [websecurity-quiz/websecurity-quiz.github.io](https://github.com/websecurity-quiz/websecurity-quiz.github.io) Test your Web Security knowledge with OWASP exam questions.
+- [**29**星][11m] [xymnal/wce](https://github.com/xymnal/wce) Windows Credentials Editor v1.3beta
- [**29**星][3y] [Py] [calebstewart/peach](https://github.com/calebstewart/peach) Simple vulnerability scanning framework
+- [**29**星][10d] [Java] [ztgreat/proxy](https://github.com/ztgreat/proxy)
+- [**29**星][4m] [Py] [zkclown/getpwd](https://github.com/zkclown/getpwd) It's a tool which generate a dictionary from a csv containing personals informations. Generate all common passwords based on perso info. (leet transformations and combinatory processing)
- [**29**星][3y] [C] [zhuhuibeishadiao/minivtx64](https://github.com/zhuhuibeishadiao/minivtx64) Intel Virtualization Technology demo
-- [**29**星][9m] [Py] [zerosteiner/advancedhttpserver](https://github.com/zerosteiner/advancedhttpserver) Standalone web server built on Python's BaseHTTPServer
- [**29**星][11m] [PHP] [zendframework/zendxml](https://github.com/zendframework/zendxml) Utility library for XML usage and best practices in PHP
- [**29**星][3y] [Java] [yolosec/ysoserial](https://github.com/yolosec/ysoserial) A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
- [**29**星][4y] [Py] [xyntax/zzone-transfer](https://github.com/xyntax/zzone-transfer) DNS域传送漏洞探测工具。多线程,批量探测,漏洞利用,简单网页采集。(DNS zone transfer vulnerability Vulnerability detection tool, support multithreading,batch scanning and vulnerability exploitation)
- [**29**星][3y] [Py] [x64dbg/x64dbgbinja](https://github.com/x64dbg/x64dbgbinja) Official x64dbg plugin for Binary Ninja
+- [**29**星][2y] [C] [wangyinuo/memdump](https://github.com/wangyinuo/memdump) android下的内存dump工具,可以dump so文件
- [**29**星][2y] [virqdroid/android_malware](https://github.com/virqdroid/android_malware)
-- [**29**星][2y] [C++] [vic4key/cat-driver](https://github.com/vic4key/cat-driver) CatDriver - The Kernel Mode Driver that written in C++. It is an useful driver and has the highest privilege level on the Windows platform. It can be used for Game Hacking and others.
- [**29**星][8m] [Batchfile] [vanhauser-thc/audit_scripts](https://github.com/vanhauser-thc/audit_scripts) Scripts to gather system configuration information for offline/remote auditing
- [**29**星][1y] [Java] [v-p-b/oracle_forms](https://github.com/v-p-b/oracle_forms) Testing tools for Oracle Forms
+- [**29**星][3m] [C++] [usnistgov/nfiq2](https://github.com/usnistgov/nfiq2) Biometric fingerprint quality assessment tool
- [**29**星][12m] [troyhunt/hibp-stickers](https://github.com/troyhunt/hibp-stickers) This is artwork that can be used to create stickers for Have I Been Pwned
- [**29**星][2y] [Py] [tribalchicken/volatility-bitlocker](https://github.com/tribalchicken/volatility-bitlocker) Volatility plugin to extract BitLocker Full Volume Encryption Keys (FVEK)
-- [**29**星][12m] [travisfsmith/mitre_attack](https://github.com/travisfsmith/mitre_attack)
- [**29**星][3y] [Shell] [tjunxiang92/android-vulnerabilities](https://github.com/tjunxiang92/android-vulnerabilities) Covers Top 10 OWASP Mobile Vulnerabilities
- [**29**星][2y] [Lua] [tinywan/openresty-project-v0.01](https://github.com/tinywan/openresty-project-v0.01)
- [**29**星][3y] [HTML] [theori-io/jscript9-typedarray-cfg](https://github.com/theori-io/jscript9-typedarray-cfg) Proof-of-Concept exploit for jscript9 bug (MS16-063) with CFG Bypass
-- [**29**星][13d] [HTML] [theforeman/foreman_openscap](https://github.com/theforeman/foreman_openscap) Foreman plug-in for displaying OpenSCAP audit reports
- [**29**星][4y] [techbliss/yara_mailware_quick_menu_scanner](https://github.com/techbliss/yara_mailware_quick_menu_scanner) Work Fast With the pattern matching swiss knife for malware researchers.
-- [**29**星][6m] [PHP] [teamharekaze/harekazectf2019-challenges](https://github.com/teamharekaze/harekazectf2019-challenges) Harekaze CTF 2019 challenges
- [**29**星][1y] [C++] [tai7sy/be_fuck](https://github.com/tai7sy/be_fuck) BattlEye Emulator
- [**29**星][6y] [Py] [syworks/wpa-bruteforcer](https://github.com/syworks/wpa-bruteforcer) Attacking WPA/WPA encrypted access point without client.
- [**29**星][3y] [sycloversecurity/papers](https://github.com/sycloversecurity/papers) Syclover PPT
- [**29**星][3y] [C++] [stormshield/beholder-win32](https://github.com/stormshield/beholder-win32) A sample on how to inject a DLL from a kernel driver
-- [**29**星][6y] [JS] [spiderlabs/modsecurity-status](https://github.com/spiderlabs/modsecurity-status) ModSecurity status
- [**29**星][1y] [slowmist/ontology-triones-service-node-security-checklist](https://github.com/slowmist/ontology-triones-service-node-security-checklist) Ontology Triones Service Node security checklist(本体北斗共识集群安全执行指南)
- [**29**星][3y] [PHP] [slifty/tvarchive-duplitron](https://github.com/slifty/tvarchive-duplitron)
- [**29**星][1y] [Py] [skelsec/windows_ad_dos_poc](https://github.com/skelsec/windows_ad_dos_poc) PoC code for crashing windows active directory
-- [**29**星][3y] [PowerShell] [sekirkity/seeclrly](https://github.com/sekirkity/seeclrly) Fileless SQL Server CLR-based Custom Stored Procedure Command Execution
+- [**29**星][11m] [Go] [shift/domain_exporter](https://github.com/shift/domain_exporter) Prometheus WHOIS domain details exporter.
+- [**29**星][3y] [PS] [sekirkity/seeclrly](https://github.com/sekirkity/seeclrly) Fileless SQL Server CLR-based Custom Stored Procedure Command Execution
- [**29**星][3y] [C] [securifera/cowcron](https://github.com/securifera/cowcron) Cronbased Dirty Cow Exploit
+- [**29**星][3m] [Py] [sdnewhop/sdwan-harvester](https://github.com/sdnewhop/sdwan-harvester)
- [**29**星][6m] [Assembly] [sdasgup3/binary-decompilation](https://github.com/sdasgup3/binary-decompilation) Extracting high level semantic information from binary code
- [**29**星][3y] [Py] [scubsrgroup/lectures-a-weekly-information-security-knowledge-lecture-hall](https://github.com/scubsrgroup/lectures-a-weekly-information-security-knowledge-lecture-hall) “每周一讲,信息安全基础知识讲堂”由四川大学信息安全研究所漏洞挖掘和利用组同学共同创建,通过每组员每周一讲的形式展开,主要涉及信息安全的基础知识,包括windows安全、移动安全等,此外还对通过该平台对外发布一些小组的研究成果!通过知识讲座一方面对新同学起到引导作用,另一方面则是漏洞挖掘与利用研究组同学信息安全研究经验和知识的积累!
- [**29**星][4y] [HTML] [schmalle/nodepot](https://github.com/schmalle/nodepot) A nodejs web application honeypot
@@ -14698,56 +15772,63 @@ networking routines
- [**29**星][1y] [redteamwing/cobaltstrike_wiki](https://github.com/redteamwing/cobaltstrike_wiki) Cobalt Strike 3.12中文文档
- [**29**星][4m] [Py] [razorpay/alohomora](https://github.com/razorpay/alohomora) alohomora is razorpay's secret distribution system
- [**29**星][4y] [rafiot/hackedteamcerts](https://github.com/rafiot/hackedteamcerts) A bunch of certificates from the Hacking Team leak
+- [**29**星][4y] [Makefile] [radicallyopensecurity/netaidkit](https://github.com/radicallyopensecurity/netaidkit) Standalone VPN/Tor WiFi router for journalists and activists
- [**29**星][7m] [JS] [r00tse7en/googlehackingtool](https://github.com/r00tse7en/googlehackingtool) 在线Google Hacking 小工具
-- [**29**星][2m] [Shell] [putsi/privatecollaborator](https://github.com/putsi/privatecollaborator) A script for installing private Burp Collaborator with free Let's Encrypt SSL-certificate
- [**29**星][11m] [Py] [parasimpaticki/sandcastle](https://github.com/parasimpaticki/sandcastle)
-- [**29**星][5m] [C++] [paragon-software-group/paragon_apfs_sdk_ce](https://github.com/paragon-software-group/paragon_apfs_sdk_ce) Paragon APFS SDK Free
-- [**29**星][1y] [C++] [owodelta/coilgun](https://github.com/owodelta/coilgun) Direct WinAPI calling
- [**29**星][12m] [opensourcehelpcommunity/contributingtomyproject](https://github.com/opensourcehelpcommunity/contributingtomyproject) Writeup from maintainers, admins, contributors on how someone can get started with their project.
-- [**29**星][11m] [HCL] [opendevsecops/terraform-aws-scanner](https://github.com/opendevsecops/terraform-aws-scanner) Terraform module which provides easy to configure AWS environment for running automated security scanning solutions at scheduled intervals.
-- [**29**星][11m] [C] [olehkulykov/libnhr](https://github.com/olehkulykov/libnhr) Tiny Network HTTP Request cross platform C library.
-- [**29**星][20d] [TypeScript] [oclif/kaomoji](https://github.com/oclif/kaomoji) A simple example CLI that generates kaomoji (
+- [**29**星][22d] [TS] [oclif/kaomoji](https://github.com/oclif/kaomoji) A simple example CLI that generates kaomoji (
- [**29**星][3m] [Py] [obscuritylabs/pefixup](https://github.com/obscuritylabs/pefixup) PE File Blessing - To continue or not to continue
- [**29**星][2y] [C++] [nuand/kalibrate-bladerf](https://github.com/nuand/kalibrate-bladerf) kalibrate-bladeRF
- [**29**星][1y] [C++] [notscimmy/libinject](https://github.com/notscimmy/libinject) Currently supports injecting signed/unsigned DLLs in 64-bit processes
- [**29**星][1y] [Go] [netxfly/docker_ssh_honeypot](https://github.com/netxfly/docker_ssh_honeypot) 安全开发教学 - 用Docker制作一个高交互ssh蜜罐
+- [**29**星][2y] [C++] [namreeb/wowned](https://github.com/namreeb/wowned) Authentication bypass for outdated WoW emulation authentication servers
- [**29**星][4y] [Ruby] [nahamsec/cmsfuzz](https://github.com/nahamsec/cmsfuzz)
- [**29**星][9m] [Py] [mzfr/lswriteups](https://github.com/mzfr/lswriteups) CLI tool to get the links of original writeups from ctftime.org
-- [**29**星][3y] [Objective-C] [mtigas/iobfs](https://github.com/mtigas/iobfs) Building obfs4proxy for Tor-enabled iOS apps.
+- [**29**星][3y] [ObjC] [mtigas/iobfs](https://github.com/mtigas/iobfs) Building obfs4proxy for Tor-enabled iOS apps.
- [**29**星][9m] [C] [mrmacete/r2-ios-kernelcache](https://github.com/mrmacete/r2-ios-kernelcache) Radare2 plugin to parse modern iOS 64-bit kernel caches
- [**29**星][1y] [Assembly] [mrfearless/apiinfo-plugin-x86](https://github.com/mrfearless/apiinfo-plugin-x86) APIInfo Plugin (x86) - A Plugin For x64dbg
-- [**29**星][1y] [Tcl] [mohemiv/tcltools](https://github.com/mohemiv/tcltools) Сollection of TCL scripts for Cisco IOS penetration testing
+- [**29**星][8m] [Py] [mosuan/auditdpy](https://github.com/mosuan/auditdpy) !!!不建议使用了,可以使用AuditBeat!!! Linux服务器命令监控辅助脚本,ElasticSearch + Logstash + Kibana + Redis + Auditd
- [**29**星][2y] [C++] [mogongtech/ransomdetection](https://github.com/mogongtech/ransomdetection) 基于行为的Ransomware检测原型
-- [**29**星][2y] [C#] [modzero/mod0umleitung](https://github.com/modzero/mod0umleitung) modzero DNS Masquerading Server for Windows
- [**29**星][4y] [C] [mncoppola/stringipc](https://github.com/mncoppola/stringipc) CSAW CTF 2015 Linux kernel exploitation challenge
- [**29**星][2m] [C] [mitrecnd/htpy](https://github.com/mitrecnd/htpy) Python bindings to libhtp
- [**29**星][2y] [misterch0c/solidlity-vulnerable](https://github.com/misterch0c/solidlity-vulnerable) Vulnerable smart contracts
-- [**29**星][14d] [Shell] [mainframed/enumeration](https://github.com/mainframed/enumeration) PoC REXX Script to Help with z/OS System enumeration via OMVS/TSO/JCL.
+- [**29**星][12m] [Java] [mhatta/orchid](https://github.com/mhatta/orchid) A Tor client implementation and library written in pure Java
+- [**29**星][4m] [JS] [mephistools/diablo2-protocol](https://github.com/mephistools/diablo2-protocol) Diablo 2 network protocol
+- [**29**星][5m] [C++] [marakew/syser](https://github.com/marakew/syser) syser debugger x32/x64 ring3
+- [**29**星][16d] [Shell] [mainframed/enumeration](https://github.com/mainframed/enumeration) PoC REXX Script to Help with z/OS System enumeration via OMVS/TSO/JCL.
+- [**29**星][2y] [Go] [madnikulin50/gordp](https://github.com/madnikulin50/gordp) Rdp client on pure GoLang
- [**29**星][2y] [Py] [luffin/cve-2017-10271](https://github.com/luffin/cve-2017-10271) CVE-2017-10271 POC
+- [**29**星][6m] [Java] [ludovicianul/geolog](https://github.com/ludovicianul/geolog) Geolocation for SSH brute force attacks
- [**29**星][1m] [Py] [kudelskisecurity/fumblechain](https://github.com/kudelskisecurity/fumblechain) A Purposefully Vulnerable Blockchain
-- [**29**星][2m] [C++] [klaasnicolaas/ha_nfc_scanner](https://github.com/klaasnicolaas/ha_nfc_scanner) Scan
+- [**29**星][2y] [Py] [kerrigan29a/idapython_virtualenv](https://github.com/kerrigan29a/idapython_virtualenv) 在IDAPython中启用Virtualenv或Conda,使可以有多个虚拟环境
- [**29**星][2y] [Ruby] [jtdowney/private_address_check](https://github.com/jtdowney/private_address_check) Ruby gem to help prevent Server Side Request Forgery
-- [**29**星][9m] [Java] [jruby/jruby-openssl](https://github.com/jruby/jruby-openssl) JRuby's OpenSSL gem
+- [**29**星][10m] [Java] [jruby/jruby-openssl](https://github.com/jruby/jruby-openssl) JRuby's OpenSSL gem
- [**29**星][4y] [Py] [joychou93/md5-extension-attack](https://github.com/joychou93/md5-extension-attack) MD5长度扩展攻击
- [**29**星][2y] [C] [jnastarot/native_peloader](https://github.com/jnastarot/native_peloader) PE(compressed dll) memory loader using nt api
- [**29**星][8m] [Go] [jimyj/scanproxy](https://github.com/jimyj/scanproxy) scanproxy is auto scan IP & port,and check that is proxy if port is open...(scanproxy是一个自动扫描端口,并且检测是否是代理服务器的程序)
-- [**29**星][5m] [Java] [jenly1314/baseurlmanager](https://github.com/jenly1314/baseurlmanager)
-- [**29**星][2y] [Swift] [jeanshuang/potatso](https://github.com/jeanshuang/potatso) 适配Xcode9.3 iOS11.3 Swift3.3编译通过。 (unmaintained) Potatso is an iOS client that implements Shadowsocks proxy with the leverage of NetworkExtension framework in iOS 9.
+- [**29**星][1y] [Shell] [jaybrown/macos-security-updates](https://github.com/jaybrown/macos-security-updates) Notifies the user of updates to macOS Security components like Gatekeeper and XProtect
- [**29**星][5m] [Py] [jacobsoo/threathunting](https://github.com/jacobsoo/threathunting) This is just my personal compilation of APT malware from whitepaper releases, documents and malware samples from my personal research.
+- [**29**星][1y] [Py] [iweizime/dbghider](https://github.com/iweizime/dbghider) 向被调试进程隐藏IDA调试器
- [**29**星][4m] [Py] [intezer/mop](https://github.com/intezer/mop) MoP - "Master of Puppets" - Advanced malware tracking framework
- [**29**星][9m] [Py] [inishantgrover/shodmon](https://github.com/inishantgrover/shodmon) The Shodan monitoring tools allows you to monitor shodan listed servers basis on the filter you provided
-- [**29**星][2y] [PowerShell] [illusivenetworks-labs/get-networkconnection](https://github.com/illusivenetworks-labs/get-networkconnection) Edited version of Lee Christensen's Get-NetworkConnection which includes timestamp for each network connection
+- [**29**星][2y] [PS] [illusivenetworks-labs/get-networkconnection](https://github.com/illusivenetworks-labs/get-networkconnection) Edited version of Lee Christensen's Get-NetworkConnection which includes timestamp for each network connection
+- [**29**星][7m] [Java] [hvqzao/burp-flow](https://github.com/hvqzao/burp-flow) Extension providing view with filtering capabilities for both complete and incomplete requests from all burp tools.
- [**29**星][3y] [C] [hklcf/mirai](https://github.com/hklcf/mirai) Source code for the Mirai botnet - Not going anywhere anytime soon
- [**29**星][5y] [Py] [hiddenillusion/filelookup](https://github.com/hiddenillusion/filelookup) Quick & dirty script to get info on a file from online resources (VirusTotal, Team Cymru, Shadow Server etc.)
- [**29**星][1y] [Py] [he1m4n6a/dcweb](https://github.com/he1m4n6a/dcweb) 三方依赖库扫描系统
- [**29**星][3m] [MATLAB] [hcab14/tdoa](https://github.com/hcab14/tdoa) Time difference of arrival (TDoA) multi-lateration
- [**29**星][5y] [Py] [haxorthematrix/loc-nogps](https://github.com/haxorthematrix/loc-nogps)
-- [**29**星][5m] [hahwul/xss-payload-without-anything](https://github.com/hahwul/xss-payload-without-anything) XSS Payload without Anything.
+- [**29**星][6m] [hahwul/xss-payload-without-anything](https://github.com/hahwul/xss-payload-without-anything) XSS Payload without Anything.
- [**29**星][8m] [Py] [ha71/pywhatcms](https://github.com/ha71/pywhatcms) Unofficial WhatCMS API package
+- [**29**星][4m] [Shell] [gushmazuko/metasploit_in_termux](https://github.com/gushmazuko/metasploit_in_termux) Install Metasploit Framework 5 in Termux
+- [**29**星][10m] [Jupyter Notebook] [gcrahay/otx_misp](https://github.com/gcrahay/otx_misp) Imports Alienvault OTX pulses to a MISP instance
- [**29**星][2y] [Lua] [foxmole/pwnadventure3](https://github.com/foxmole/pwnadventure3) Blog series about Pwn Adventure 3
-- [**29**星][7m] [Py] [fkie-cad/luckycat](https://github.com/fkie-cad/luckycat) A distributed fuzzing management framework
+- [**29**星][5m] [PHP] [fdciabdul/fbchecker](https://github.com/fdciabdul/fbchecker) Facebook Mass Account Checker
- [**29**星][3m] [PHP] [eymengunay/eohoneypotbundle](https://github.com/eymengunay/eohoneypotbundle) Honeypot type for Symfony forms
+- [**29**星][2y] [Py] [sevro/security-utilities](https://github.com/sevro/security-utilities) Offensive Security Certified Profesional (OSCP) course scripts, some have been generalized
- [**29**星][1y] [Py] [ernw/binja-ipython](https://github.com/ernw/binja-ipython) A plugin to integrate an IPython kernel into Binary Ninja.
+- [**29**星][2d] [Py] [entynetproject/proton](https://github.com/entynetproject/proton) Proton Framework is a Windows post exploitation framework similar to other penetration testing tools such as Meterpreter and Powershell Invader Framework. The major difference is that the Proton Framework does most of its operations using Windows Script Host (a.k.a. JScript/VBScript), with compatibility in the core to support a default installat…
+- [**29**星][1y] [C] [dro/uac-launchinf-poc](https://github.com/dro/uac-launchinf-poc) Windows 10 UAC bypass PoC using LaunchInfSection
- [**29**星][2y] [Ruby] [drewlong/vbully](https://github.com/drewlong/vbully) 3.8.x - 4.2.3 ForumRunner (vBulletin) exploit Proof of Concept
- [**29**星][5y] [Py] [donctl/sandy](https://github.com/donctl/sandy) Release of the sandy framework.
- [**29**星][10y] [C] [dmolnar/smartfuzz](https://github.com/dmolnar/smartfuzz) Valgrind extension for whitebox fuzz testing
@@ -14758,27 +15839,29 @@ networking routines
- [**29**星][2y] [Shell] [cyb3r3x3r/kalilinuxnethunter-termux](https://github.com/cyb3r3x3r/kalilinuxnethunter-termux) Install Kali Linux Nethunter in termux - orginal by
- [**29**星][5m] [Go] [cryptogenic/rebot](https://github.com/cryptogenic/rebot) A discord bot for reverse engineers and exploit developers.
- [**29**星][7m] [Java] [cristianturetta/mad-spy](https://github.com/cristianturetta/mad-spy) We developed a malware for educational purposes. In particular, our goal is to provide a PoC of what is known as a Repacking attack, a known technique widely used by malware cybercrooks to trojanize android apps. The answer to solve this particular goal boils down in the simplicity of APK decompiling and smali code injection.
+- [**29**星][1y] [Go] [cretz/tor-dht-poc](https://github.com/cretz/tor-dht-poc) Anonymous DHT Accessible from Executable or Tor-Enabled Browser
- [**29**星][5y] [C] [conorpp/mitm-http-proxy](https://github.com/conorpp/mitm-http-proxy) A simple, low level http/https proxy server with MiTM pranking features.
- [**29**星][5y] [C++] [codeliker/mymig_meterpreter](https://github.com/codeliker/mymig_meterpreter) mig meterpreter stager
- [**29**星][7m] [Shell] [chunkingz/vmr-mdk-k2-2017r-012x4](https://github.com/chunkingz/vmr-mdk-k2-2017r-012x4) VMR-MDK is a script/tool for hacking wps wireless networks
- [**29**星][2y] [Shell] [chichou/grab.js](https://github.com/chichou/grab.js) fast TCP banner grabbing with node.js
- [**29**星][5m] [C++] [celestialpaler/cthackframework](https://github.com/celestialpaler/cthackframework) 游戏外挂通用框架,快速构建外挂程序。
- [**29**星][6y] [Py] [catalyst256/sniffmypackets](https://github.com/catalyst256/sniffmypackets) Canari local transforms pcap file analysis
+- [**29**星][1y] [C] [calebfenton/native-harness-target](https://github.com/calebfenton/native-harness-target) Android app for demonstrating native library harnessing
- [**29**星][2m] [Py] [bugbounty-site/calexe](https://github.com/bugbounty-site/calexe) Calendar Exploit.
-- [**29**星][3y] [Py] [bshastry/afl-sancov](https://github.com/bshastry/afl-sancov) AFL coverage tool using Clang SanitizerCoverage
-- [**29**星][7m] [C] [br101/libuwifi](https://github.com/br101/libuwifi) Userspace Wifi Library
+- [**29**星][2y] [Go] [bramp/myip](https://github.com/bramp/myip) (A better) What's My IP Address web application
+- [**29**星][6d] [C] [br101/libuwifi](https://github.com/br101/libuwifi) Userspace Wifi Library
- [**29**星][3y] [Assembly] [borjamerino/plcinjector](https://github.com/borjamerino/plcinjector) Modbus stager in assembly and some scripts to upload/download data to the holding register of a PLC
- [**29**星][4y] [Go] [bnagy/afl-launch](https://github.com/bnagy/afl-launch) Boring tool to launch multiple afl-fuzz instances
- [**29**星][2y] [Shell] [bgeesaman/subpath-exploit](https://github.com/bgeesaman/subpath-exploit) Writeup of CVE-2017-1002101 with sample "exploit"/escape
- [**29**星][2y] [Java] [barro/java-afl](https://github.com/barro/java-afl) Binary rewriting approach with fork server support to fuzz Java applications with afl-fuzz.
-- [**29**星][1y] [Py] [bandrel/ocyara](https://github.com/bandrel/ocyara) Performs OCR on image files and scans them for matches to YARA rules
-- [**29**星][7d] [Java] [azure/azure-cosmosdb-java](https://github.com/azure/azure-cosmosdb-java) Java Async SDK for SQL API of Azure Cosmos DB
- [**29**星][2y] [C#] [aviavni/nativeleakdetector](https://github.com/aviavni/nativeleakdetector) Win32 memory leak detector with ETW
- [**29**星][3y] [HTML] [auth0-blog/polymer-with-jwt-api](https://github.com/auth0-blog/polymer-with-jwt-api) Build an app using web components and Polymer with an API and JSON Web Token authentication.
- [**29**星][6y] [atlantis2013/evasion-tools](https://github.com/atlantis2013/evasion-tools) Anti-technique Codes, Detection of Anti-technique codes
- [**29**星][6y] [Shell] [artemdinaburg/optimizevm](https://github.com/artemdinaburg/optimizevm) Make Windows VMs Faster
- [**29**星][3y] [JS] [arlolra/ctypes-otr](https://github.com/arlolra/ctypes-otr) js-ctypes wrapper for libotr
+- [**29**星][2y] [C] [arduinohannover/zpb30a1_firmware](https://github.com/arduinohannover/zpb30a1_firmware) Open-Source firmware for the ZPB30A1 electronic load (WIP)
- [**29**星][4y] [C] [android-rooting-tools/libkallsyms](https://github.com/android-rooting-tools/libkallsyms) Get symbol address and name from tables for kallsyms
+- [**29**星][2m] [Go] [ammario/ipisp](https://github.com/ammario/ipisp) Query IP address network information in Go
- [**29**星][4y] [Shell] [alexoslabs/httpsscan](https://github.com/alexoslabs/httpsscan) Shell script for testing the SSL/TLS Protocols
- [**29**星][2y] [C] [alex9191/netdriver](https://github.com/alex9191/netdriver) kernel-mode TDI client which can send and receive HTTP requests
- [**29**星][5m] [Py] [alberties/ghostfuscator](https://github.com/alberties/ghostfuscator) The Python Password-Protected Obfuscator
@@ -14790,63 +15873,93 @@ networking routines
- [**29**星][7y] [C++] [0xdabbad00/openhips](https://github.com/0xdabbad00/openhips) OpenHIPS prevents exploitation of Windows systems
- [**29**星][2y] [0x90/nrf24-arsenal](https://github.com/0x90/nrf24-arsenal) Hacking tools and scripts for nRF24LU1+
- [**29**星][10m] [c++] [camp0/aiengine](https://bitbucket.org/camp0/aiengine)
+- [**28**星][2m] [Shell] [idkiro/ssmgr-install](https://github.com/idkiro/ssmgr-install) shadowsocks-manager 前端+后端+魔改BBR一键部署脚本
+- [**28**星][2y] [C] [zhou0/mysocks](https://github.com/zhou0/mysocks) The cross-platform shadowsocks client and server with minimum dependencies.
+- [**28**星][2m] [C++] [bennetthardwick/darknet.js](https://github.com/bennetthardwick/darknet.js) A NodeJS wrapper of pjreddie's darknet / yolo.
+- [**28**星][10m] [Jupyter Notebook] [danielgatis/darknetpy](https://github.com/danielgatis/darknetpy) darknetpy is a simple binding for darknet's yolo detector
+- [**28**星][2y] [Py] [portswigger/wordpress-scanner](https://github.com/portswigger/wordpress-scanner) Find known vulnerabilities in WordPress plugins and themes using Burp Suite proxy. WPScan like plugin for Burp.
+- [**28**星][2y] [C] [lincolnhard/facenet-darknet-inference](https://github.com/lincolnhard/facenet-darknet-inference) Face recognition using facenet
+- [**28**星][10d] [Shell] [yaleh/kcp-shadowsocks-server](https://github.com/yaleh/kcp-shadowsocks-server) Docker image of a server with KCP tunnel and Shadowsocks.
+- [**28**星][3y] [iqiancheng/shadowsocks-awesome](https://github.com/iqiancheng/shadowsocks-awesome) 一个实时更新的实用gfwlist清单。用于ss的PAC自动分流。
+- [**28**星][12d] [C] [tidesec/peach_fuzzing](https://github.com/tidesec/peach_fuzzing) 在学习使用peach进行模糊测试时,搜集到的一些不错的资料,以及配套的一些软件或脚本。
+- [**28**星][2m] [bishopfox/cyberdic](https://github.com/bishopfox/cyberdic) An auxiliary spellcheck dictionary that corresponds with the Bishop Fox Cybersecurity Style Guide
- [**28**星][7y] [C] [jonathansalwan/vmndh-2k12](https://github.com/jonathansalwan/vmndh-2k12) Emulator, debugger and compiler for the NDH architecture - Emulator for CTF NDH 2k12
- [**28**星][7m] [C++] [frida/v8](https://github.com/frida/v8) Frida depends on V8
- [**28**星][2y] [C] [shadowsocksr-live/ssrdroid](https://github.com/shadowsocksr-live/ssrdroid) ShadowsocksR (SSR) for Android
- [**28**星][1y] [C++] [lordnoteworthy/windows-exploitation](https://github.com/lordnoteworthy/windows-exploitation) My notes while studying Windows exploitation
+- [**28**星][11m] [HTML] [twintproject/twint-explorer](https://github.com/twintproject/twint-explorer) TWINT Graph Visualizer
- [**28**星][4m] [Java] [dineshshetty/fridaloader](https://github.com/dineshshetty/fridaloader) A quick and dirty app to download and launch Frida on Genymotion
- [**28**星][11m] [Shell] [angorafuzzer/fuzzingrealprogrambenchstatistics](https://github.com/angorafuzzer/fuzzingrealprogrambenchstatistics) List the real world programs evaluated in fuzzing papers.
-- [**28**星][1m] [Py] [lunixbochs/mpwn](https://github.com/lunixbochs/mpwn) single file ctf/exploit client library - python3, type annotated
+- [**28**星][4y] [Swift] [urinx/device-9](https://github.com/urinx/device-9) 实时监测网速,IP,内存大小,温度等设备信息并显示在通知中心的 iOS App
+- [**28**星][9y] [Py] [spiderlabs/deblaze](https://github.com/spiderlabs/deblaze) Performs method enumeration and interrogation against flash remoting end points.
+- [**28**星][1y] [Ruby] [igrigorik/em-socksify](https://github.com/igrigorik/em-socksify) Transparent proxy support for any EventMachine protocol
- [**28**星][12m] [Py] [wyatu/pentestscripts](https://github.com/wyatu/pentestscripts) Some scripts for penetration testing
-- [**28**星][24d] [C] [kasif-dekel/whatsapp-rce-patched](https://github.com/kasif-dekel/whatsapp-rce-patched) cve-2019-11931
-- [**28**星][16d] [Py] [kkevsterrr/geneva](https://github.com/kkevsterrr/geneva) client-side censorship evasion engine from the Geneva AI
-- [**28**星][2y] [C++] [hsluoyz/rmtsvc](https://github.com/hsluoyz/rmtsvc) A web-based remote desktop & control service for Windows.
+- [**28**星][3y] [HTML] [cryptogenic/ps4console](https://github.com/cryptogenic/ps4console) A successor to PS4Playground, emulates a shell-like environment to interact with the PlayStation 4.
+- [**28**星][2m] [Rust] [timvisee/pixelpwnr](https://github.com/timvisee/pixelpwnr)
+- [**28**星][3y] [Java] [tribler/app-to-app-communicator](https://github.com/tribler/app-to-app-communicator) Create an attack-resilient network out of smartphones, no-PC-needed (proof of concept)
+- [**28**星][26d] [C] [kasif-dekel/whatsapp-rce-patched](https://github.com/kasif-dekel/whatsapp-rce-patched) cve-2019-11931
- [**28**星][1m] [Assembly] [vxunderground/family](https://github.com/vxunderground/family) Collection of Malware source code by Language and Family.
-- [**28**星][29d] [Shell] [privacyint/appdata-environment-desktop](https://github.com/privacyint/appdata-environment-desktop) A selection of script and the manual for Privacy International's data interception environment
+- [**28**星][1m] [Shell] [privacyint/appdata-environment-desktop](https://github.com/privacyint/appdata-environment-desktop) A selection of script and the manual for Privacy International's data interception environment
- [**28**星][2m] [JS] [benoitsevens/applying-ttd-to-malware-analysis](https://github.com/benoitsevens/applying-ttd-to-malware-analysis) Resources for the workshop titled "Repacking the unpacker: Applying Time Travel Debugging to malware analysis", given at HackLu 2019
- [**28**星][4y] [C] [scallywag/nbtscan](https://github.com/scallywag/nbtscan) NetBIOS scanning tool. Currently segfaults!
- [**28**星][1m] [C#] [cobbr/c2bridge](https://github.com/cobbr/c2bridge) C2Bridges allow developers to create new custom communication protocols and quickly utilize them within Covenant.
+- [**28**星][2m] [Py] [x1tan/cve-2019-13025](https://github.com/x1tan/cve-2019-13025) Connect Box CH7465LG (CVE-2019-13025)
+- [**28**星][2y] [Py] [vpnguy-zz/handyheaderhacker](https://github.com/vpnguy-zz/HandyHeaderHacker) Examine HTTP response headers for common security issues
+- [**28**星][7d] [C#] [geta/404handler](https://github.com/Geta/404handler) The popular 404 handler for EPiServer, enabling better control over your 404 page in addition to allowing redirects for old urls that no longer works.
- [**28**星][4y] [Ruby] [praetorian-code/dert](https://github.com/praetorian-code/dert) DNS Enumeration and Reconnaissance Tool
- [**28**星][3y] [Py] [zonksec/weblogic-serialization-exploit-updated](https://github.com/zonksec/weblogic-serialization-exploit-updated) Updated the FoxGlove Security WebLogic serialization exploit.
- [**28**星][5y] [Py] [zombiesam/wikigen](https://github.com/zombiesam/wikigen) A script to generate wordlists out of wikipedia pages. Should support most of the subdomains. Some ugly code may occur
- [**28**星][1y] [Py] [zhanghaoyil/hawk-i](https://github.com/zhanghaoyil/hawk-i) Automatic extract anomalious Web attack Payloads with Unsupervised Machine Learning algorithms
+- [**28**星][3y] [C] [zenware/bluemaho](https://github.com/zenware/bluemaho) BlueMaho is GUI-shell (interface) for suite of tools for testing security of bluetooth devices. It is freeware, opensource, written on python, uses wxPyhon. It can be used for testing BT-devices for known vulnerabilities and major thing to do – testing to find unknown vulns. Also it can form nice statistics.
- [**28**星][4m] [Java] [zaproxy/zap-api-java](https://github.com/zaproxy/zap-api-java) OWASP ZAP Java API
- [**28**星][8y] [JS] [zanelackey/projects](https://github.com/zanelackey/projects)
+- [**28**星][8d] [C++] [z4yx/supervisor-mips32](https://github.com/z4yx/supervisor-mips32) 计算机组成原理课程32位监控程序
+- [**28**星][10m] [Shell] [yulewang/brook](https://github.com/yulewang/brook) Brook 端口转发 一键管理脚本修改版 增加了对动态域名的支持 基于逗比版本修改而来
- [**28**星][1y] [C] [yifiheaven/magicwall](https://github.com/yifiheaven/magicwall)
- [**28**星][5y] [C++] [yawning/obfsclient](https://github.com/yawning/obfsclient) A C++11 obfs2/3 Tor managed pluggable transport client
- [**28**星][1y] [Py] [xyzz/vita-ida-physdump](https://github.com/xyzz/vita-ida-physdump) help with physical memory dump reversing
- [**28**星][8m] [Py] [xayon/pyrcrack](https://github.com/xayon/pyrcrack) Python Aircrack-ng bindings
- [**28**星][2y] [C] [x64dbg/slothbp](https://github.com/x64dbg/slothbp) Collaborative Breakpoint Manager for x64dbg.
-- [**28**星][12m] [PowerShell] [wuseman/wloader](https://github.com/wuseman/wloader) Windows 10 PRO Activator - No more backdoors via loaders from China and neither you will need any crack anymore that is valid for a week or two. This is script is written for powershell/cmd. This script will also removing all bloatware from Windows 10. Edit the script after your needs.
+- [**28**星][2y] [C] [x64dbg/plugintemplate](https://github.com/x64dbg/plugintemplate) Plugin template for x64dbg. Releases:
- [**28**星][12m] [Jupyter Notebook] [wlmeng11/rtl-ultrasound](https://github.com/wlmeng11/rtl-ultrasound)
- [**28**星][1y] [JS] [webpack/source-list-map](https://github.com/webpack/source-list-map) Fast line to line SourceMap generator.
- [**28**星][2y] [C] [wanttobeno/win64driverstudy_src](https://github.com/wanttobeno/win64driverstudy_src) WIN64驱动编程基础教程-源码 作者:胡文亮
-- [**28**星][3m] [SystemVerilog] [wangxuan95/ustc-rvsoc](https://github.com/wangxuan95/ustc-rvsoc) 一个用 SystemVerilog 编写的,RISC-V 架构的 CPU + SoC
- [**28**星][1y] [JS] [wahengchang/nodejs-security-must-know](https://github.com/wahengchang/nodejs-security-must-know) It is a note about security on nodejs
- [**28**星][3y] [C] [vusec/typearmor](https://github.com/vusec/typearmor) 缓解高级代码重用攻击。论文“一个艰难的决定:在二进制级别缓解高级的代码重用攻击”的具体实现。
- [**28**星][9m] [PHP] [visualbasic6/google-drive-exploit](https://github.com/visualbasic6/google-drive-exploit) active exploit leaking full names associated with some email addresses including but not limited to gmail
- [**28**星][5m] [JS] [virink/as_plugin_godofhacker](https://github.com/virink/as_plugin_godofhacker) 黑客神器,谁用谁知道!
- [**28**星][2y] [JS] [versprite/engage](https://github.com/versprite/engage) Tools and Materials for the Frida Engage Blog Series
- [**28**星][6y] [MATLAB] [vedaldi/visualindex](https://github.com/vedaldi/visualindex) A simple demo of visual object matching using VLFeat
+- [**28**星][3y] [Py] [v1cker/poc-exp](https://github.com/v1cker/poc-exp)
- [**28**星][3y] [uber/bug-bounty-page](https://github.com/uber/bug-bounty-page) A repo to make our changes more transparent to bug bounty researchers in our program (so they can see commits, etc).
- [**28**星][2y] [PHP] [tuupola/whereami](https://github.com/tuupola/whereami) Common PHP interface for wifi positioning services
- [**28**星][2m] [Shell] [tradichel/awssecurityautomationframework](https://github.com/tradichel/awssecurityautomationframework) Framework for reviewing and responding to events in AWS Flow Logs using Lambda Function
-- [**28**星][5m] [Go] [tomnomnom/rawhttp](https://github.com/tomnomnom/rawhttp) A Go library for making HTTP requests with complete control
+- [**28**星][3y] [Py] [tr3jer/autohookspider](https://github.com/tr3jer/autohookspider) 将自动爬虫的结果判断是否属于hooks,并不断抓取url爬啊爬。
+- [**28**星][2y] [Makefile] [torbsd/openbsd-ports](https://github.com/torbsd/openbsd-ports) OpenBSD ports under development by TDP
- [**28**星][1y] [Shell] [themiddleblue/dnsenum](https://github.com/themiddleblue/dnsenum) Bash script for DNS Enumeration.
+- [**28**星][15d] [HTML] [theforeman/foreman_openscap](https://github.com/theforeman/foreman_openscap) Foreman plug-in for displaying OpenSCAP audit reports
- [**28**星][5m] [C++] [thalium/idatag](https://github.com/thalium/idatag) IDA plugin to explore and browse tags
+- [**28**星][3m] [Go] [telanflow/dictgenerate](https://github.com/telanflow/dictgenerate) 使用Go语言编写的社工字典生成器(The social engineering dictionary generator written by Go)
- [**28**星][3y] [PHP] [talhasch/php-httpstat](https://github.com/talhasch/php-httpstat) PHP implementation of
- [**28**星][3y] [Shell] [superkojiman/scanreport](https://github.com/superkojiman/scanreport) Take output from nmap and turn it into something easily searchable and readable.
-- [**28**星][11m] [Go] [shift/domain_exporter](https://github.com/shift/domain_exporter) Prometheus WHOIS domain details exporter.
+- [**28**星][7m] [Shell] [sukkaw/zsh-proxy](https://github.com/sukkaw/zsh-proxy)
+- [**28**星][11m] [C] [sqdwr/loadimageinject](https://github.com/sqdwr/loadimageinject) LoadImage Routine Inject Dll
+- [**28**星][8d] [Py] [sophoslabs/webassembly](https://github.com/sophoslabs/webassembly) Research on WebAssembly
+- [**28**星][5m] [JS] [skateman/purr](https://github.com/skateman/purr) Smuggle TCP connections through HTTP
+- [**28**星][10m] [JS] [shanselman/daskeyboard-q-nightscout](https://github.com/shanselman/daskeyboard-q-nightscout) Hooking up the DasKeyboard Q REST API to change the key colors in response to diabetic's glucose from NightScout
- [**28**星][3y] [Shell] [securitygeneration/honeyport](https://github.com/securitygeneration/honeyport) Bash and Python Honeyport scripts
- [**28**星][2y] [secarmalabs/iotchecklist](https://github.com/secarmalabs/iotchecklist) Baseline IoT security checklist. Consider security as early in development as possible and reap the rewards.
-- [**28**星][3m] [Py] [sdnewhop/sdwan-harvester](https://github.com/sdnewhop/sdwan-harvester)
+- [**28**星][2y] [Go] [sakeven/mika](https://github.com/sakeven/mika) Mika - A Secure Proxy
- [**28**星][11m] [Shell] [rokasurbelis/system_safety_test](https://github.com/rokasurbelis/system_safety_test)
- [**28**星][2y] [Ruby] [richardc/puppet-datacat](https://github.com/richardc/puppet-datacat) Data composition types for puppet
- [**28**星][5y] [C] [rfdslabs/mimosa-framework](https://github.com/rfdslabs/mimosa-framework) Mimosa Framework to abuse EPC functionality on CISCO Routers.
+- [**28**星][6d] [C++] [regehr/opt-fuzz](https://github.com/regehr/opt-fuzz) llvm opt fuzzer and bounded exhaustive test generator
- [**28**星][3y] [Shell] [rccoder/awesome-shadowsocks-qt5-installation-on-debian](https://github.com/rccoder/awesome-shadowsocks-qt5-installation-on-debian) Installation Script For shadowsocks-Qt5 on Debian
+- [**28**星][10m] [Go] [razc411/gobd](https://github.com/razc411/gobd) A Golang covert backdoor using raw sockets.
+- [**28**星][5d] [C] [rapid7/mimikatz](https://github.com/rapid7/mimikatz) A little tool to play with Windows security
- [**28**星][1m] [Py] [qsecure-labs/overlord](https://github.com/qsecure-labs/overlord) Overlord - Red Teaming Infrastructure Automation
- [**28**星][4y] [CSS] [qll/attacking-browser-extensions](https://github.com/qll/attacking-browser-extensions) Test Suite and exemplary extensions of the "Attacking Browser Extensions" master's thesis
-- [**28**星][4y] [C] [qianshanhai/q-shell](https://github.com/qianshanhai/q-shell) Unix remote login tool, rootkit shell tool
+- [**28**星][5y] [C] [qianshanhai/q-shell](https://github.com/qianshanhai/q-shell) Unix remote login tool, rootkit shell tool
- [**28**星][6y] [Java] [pwntester/springbreaker](https://github.com/pwntester/springbreaker) Exploit PoC for Spring RCE issue (CVE-2011-2894)
- [**28**星][2y] [Py] [pwn2winctf/2017](https://github.com/pwn2winctf/2017) Pwn2Win CTF 2017
- [**28**星][9m] [JS] [puritys/chromesecureshell](https://github.com/puritys/chromesecureshell) Hack chrome secure shell for improving usability
@@ -14858,42 +15971,54 @@ networking routines
- [**28**星][6y] [C++] [oct0xor/deci3dbg](https://github.com/oct0xor/deci3dbg) Ida Pro debugger module for Playstation 3
- [**28**星][8m] [C#] [nyan-x-cat/dropless-malware](https://github.com/nyan-x-cat/dropless-malware) Download a payload and make it run from registry without droppng.
- [**28**星][4y] [Java] [nvisium/moneyx](https://github.com/nvisium/moneyx) MoneyX is an intentionally vulnerable JSP application used for training developers in application security concepts.
-- [**28**星][3y] [nextco/android-decompiler](https://github.com/nextco/android-decompiler) A hight quality list of tools to reverse engineering code from android.
- [**28**星][3y] [Py] [netspi/asa_tools](https://github.com/netspi/asa_tools) Verification tools for CVE-2016-1287
- [**28**星][2y] [C++] [nervous/greenkit-rootkit](https://github.com/nervous/greenkit-rootkit) GreenKit is an userland rootkit hiding its own files and mining bitcoins on compromised computers. Do /NOT/ download or use this rootkit for malicious purposes. Use it only for your own knowledge.
- [**28**星][2y] [Py] [ne0nd0g/guinevere](https://github.com/ne0nd0g/guinevere) Automated Security Assessment Reporting Tool
+- [**28**星][1m] [nats-io/nats-general](https://github.com/nats-io/nats-general) General NATS Information
- [**28**星][1y] [C] [mxmssh/netafl](https://github.com/mxmssh/netafl) winAFL patch to enable network-based apps fuzzing
+- [**28**星][8m] [Py] [mvrcrypto/bitp0wn](https://github.com/mvrcrypto/bitp0wn) Algorithms to re-compute a private key, to fake signatures and some other funny things with Bitcoin.
+- [**28**星][3y] [Py] [mvondracek/wifimitm](https://github.com/mvondracek/wifimitm) Automation of MitM Attack on Wi-Fi Networks
- [**28**星][4y] [ms3fgx/tsatool](https://github.com/ms3fgx/tsatool) 3D printed TSA keys in a pocketable "Swiss Army" style tool.
-- [**28**星][11m] [C] [mrmacete/r2scripts](https://github.com/mrmacete/r2scripts) Collection of scripts for radare2
-- [**28**星][7d] [HTML] [misp/misp-rfc](https://github.com/misp/misp-rfc) Specifications used in the MISP project including MISP core format
+- [**28**星][7d] [Py] [mrwn007/m3m0](https://github.com/mrwn007/m3m0) M3m0 Tool
+- [**28**星][12m] [C] [mrmacete/r2scripts](https://github.com/mrmacete/r2scripts) Collection of scripts for radare2
+- [**28**星][1y] [Py] [mprhode/malware-prediction-rnn](https://github.com/mprhode/malware-prediction-rnn) RNN implementation with Keras for machine activity data to predict malware
+- [**28**星][6d] [HTML] [misp/misp-rfc](https://github.com/misp/misp-rfc) Specifications used in the MISP project including MISP core format
+- [**28**星][6d] [Shell] [misp/misp-cloud](https://github.com/misp/misp-cloud) misp-cloud - Cloud-ready images of MISP
- [**28**星][5y] [Java] [mindmac/xposedautomation](https://github.com/mindmac/xposedautomation) A demo to show how to install Xposed and enable Xposed based module automatically
- [**28**星][9m] [Go] [mimoo/eureka](https://github.com/mimoo/eureka) Need to encrypt a file before sending it to someone? This is it.
+- [**28**星][1y] [Shell] [mikhbur/conformer](https://github.com/mikhbur/conformer) Password Guessing for different Web Portals
- [**28**星][5y] [C++] [michael4338/tdi](https://github.com/michael4338/tdi) Windows Kernel Driver - Create a driver device in TDI layer of windows kernel to capture network data packets
+- [**28**星][3m] [Py] [michael-myers/macos-wpa-psk](https://github.com/michael-myers/macos-wpa-psk) PoC script showing that MacOS leaves the wireless key in NVRAM, in plaintext and accessible to anyone.
+- [**28**星][5m] [Py] [mechpen/sockdump](https://github.com/mechpen/sockdump) Dump unix domain socket traffic with bpf
+- [**28**星][2y] [Java] [martinstyk/apkanalyzer](https://github.com/martinstyk/apkanalyzer) Java tool for analyzing Android APK files
- [**28**星][3y] [JS] [markelog/adit](https://github.com/markelog/adit) SSH tunnels – in any way you want it
-- [**28**星][5m] [C++] [marakew/syser](https://github.com/marakew/syser) syser debugger x32/x64 ring3
-- [**28**星][2y] [Go] [madnikulin50/gordp](https://github.com/madnikulin50/gordp) Rdp client on pure GoLang
+- [**28**星][4m] [Py] [lufeirider/sqlchecker](https://github.com/lufeirider/sqlchecker) 注入检测工具
- [**28**星][5m] [PHP] [lucasfrag/kali-linux-tools-interface](https://github.com/lucasfrag/kali-linux-tools-interface) Graphical Web interface developed to facilitate the use of security information tools.
- [**28**星][1y] [C] [lpefferkorn/ipdecap](https://github.com/lpefferkorn/ipdecap) Decapsulate traffic encapsulated within GRE, IPIP, 6in4, ESP (ipsec) protocols, can also remove IEEE 802.1Q (virtual lan) header. Works with pcap files.
+- [**28**星][2y] [C] [l-n-s/transmission-i2p](https://github.com/l-n-s/transmission-i2p) Anonymous torrent client Transmission-I2P [UNMAINTAINED]
- [**28**星][1y] [Py] [knownsec/decrypt-ransomware](https://github.com/knownsec/decrypt-ransomware)
- [**28**星][6y] [Py] [kholia/exetractor-clone](https://github.com/kholia/exetractor-clone) Unpacker for packed Python executables. Supports PyInstaller and py2exe. This project is not updated anymore. Use "PyInstaller Extractor" and "unpy2exe" instead.
-- [**28**星][2y] [Py] [kerrigan29a/idapython_virtualenv](https://github.com/kerrigan29a/idapython_virtualenv) 在IDAPython中启用Virtualenv或Conda,使可以有多个虚拟环境
- [**28**星][1y] [Py] [jumbo-wjb/jpentest](https://github.com/jumbo-wjb/jpentest) Jumbo Python Penetration testing framework
+- [**28**星][5m] [PS] [johnaho/cloakify-powershell](https://github.com/johnaho/cloakify-powershell) Cloak files using text based steganography output to obsfucate what data they contain. Coded in Powershell. This is a port of TryCatchHCF's Cloakify written in python
+- [**28**星][1m] [C++] [jnastarot/enma_pe](https://github.com/jnastarot/enma_pe) Cross-platform library for parsing and building PE\PE+ formats
- [**28**星][7y] [Ruby] [jjyg/ssh_decoder](https://github.com/jjyg/ssh_decoder)
+- [**28**星][1y] [C++] [jiazhang0/seloader](https://github.com/jiazhang0/seloader) Secure EFI Loader designed to authenticate the non-PE files
- [**28**星][4m] [Py] [jekil/udpot](https://github.com/jekil/udpot) Simple UDP honeypot script
+- [**28**星][2y] [Swift] [jeanshuang/potatso](https://github.com/jeanshuang/potatso) 适配Xcode9.3 iOS11.3 Swift3.3编译通过。 (unmaintained) Potatso is an iOS client that implements Shadowsocks proxy with the leverage of NetworkExtension framework in iOS 9.
- [**28**星][6y] [Py] [jayeshchauhan/skanda](https://github.com/jayeshchauhan/skanda) OWASP Skanda - SSRF Exploitation Framework
-- [**28**星][1y] [Py] [iweizime/dbghider](https://github.com/iweizime/dbghider) 向被调试进程隐藏IDA调试器
- [**28**星][3y] [Assembly] [inndy/ctf-from-zero-to-one](https://github.com/inndy/ctf-from-zero-to-one) TDOH Conf 2016 演講相關資料
- [**28**星][5y] [Py] [infosec-au/webappsec-toolkit](https://github.com/infosec-au/webappsec-toolkit) Web Application Security related tools. Includes backdoors, proof of concepts and tricks
- [**28**星][2y] [Py] [ihebski/pentest-chainsaw](https://github.com/ihebski/pentest-chainsaw) Scrapes Router Passwords From
- [**28**星][4y] [C] [icewall/forcedelete](https://github.com/icewall/forcedelete) Windows driver including couple different techniques for file removal when regular operation isn't possible.
+- [**28**星][2y] [Py] [ice3man543/malscan](https://github.com/ice3man543/malscan) A Simple PE File Heuristics Scanners
+- [**28**星][2y] [Java] [ibey0nd/nstproxy](https://github.com/ibey0nd/nstproxy) 一款存储HTTP请求入库的burpsuite插件
- [**28**星][3m] [Shell] [hybtoy/ssrrmu](https://github.com/hybtoy/ssrrmu) ShadowsocksRR (shadowsocksr/ssr) multi-user and single-user install script
-- [**28**星][7m] [Java] [hvqzao/burp-flow](https://github.com/hvqzao/burp-flow) Extension providing view with filtering capabilities for both complete and incomplete requests from all burp tools.
- [**28**星][11m] [C++] [hoangprod/leospecial-veh-hook](https://github.com/hoangprod/leospecial-veh-hook) Vectored Exception Handling Hooking Class
- [**28**星][5y] [C++] [hempnall/broyara](https://github.com/hempnall/broyara) integrating bro into yara
- [**28**星][3y] [Py] [harryr/nanac](https://github.com/harryr/nanac) Tiny modular assembler & vm for lightweight control microcode
- [**28**星][5y] [Py] [hannob/pgpecosystem](https://github.com/hannob/pgpecosystem) Scripts to parse and analyze pgp key server data
-- [**28**星][3y] [HTML] [h2hconference/2016](https://github.com/h2hconference/2016) H2HC 2016 Slides/Materials/Presentations
-- [**28**星][4m] [Shell] [gushmazuko/metasploit_in_termux](https://github.com/gushmazuko/metasploit_in_termux) Install Metasploit Framework 5 in Termux
+- [**28**星][8y] [C] [hackedteam/driver-win32](https://github.com/hackedteam/driver-win32) Windows (32bit) agent driver
+- [**28**星][3d] [Py] [greenbone/python-gvm](https://github.com/greenbone/python-gvm) Greenbone Vulnerability Management Python Library
- [**28**星][2y] [Py] [grayddq/passivedatasorting](https://github.com/grayddq/passivedatasorting) 自动化被动扫描系统分为数据源、数据处理、漏洞验证等三个子系统,本系统属于数据处理部分,抓取流量镜像的数据,进行分析过滤去重等操作,发送至消息队列中,等待PassiveSecCheck消费
- [**28**星][1y] [TeX] [gossip-sjtu/k-hunt](https://github.com/gossip-sjtu/k-hunt) K-Hunt: Pinpointing Insecure Crypto Keys
- [**28**星][2y] [Ruby] [godinezj/metasploit-framework](https://github.com/godinezj/metasploit-framework) Metasploit Framework
@@ -14905,36 +16030,38 @@ networking routines
- [**28**星][7m] [foryujian/yujianrdpcrack](https://github.com/foryujian/yujianrdpcrack) 御剑RDP爆破工具
- [**28**星][3y] [Py] [floyd-fuh/burp-httpfuzzer](https://github.com/floyd-fuh/burp-httpfuzzer) Burp plugin to do random fuzzing of HTTP requests
- [**28**星][6y] [Py] [flo354/iosforensic](https://github.com/flo354/iosforensic) iOS forensic tool
+- [**28**星][4y] [JS] [firebug/firequery](https://github.com/firebug/firequery) Firefox plugin for jQuery development
- [**28**星][2y] [C++] [fdfalcon/typeisolationdbg](https://github.com/fdfalcon/typeisolationdbg) A little WinDbg extension to help dump the state of Win32k Type Isolation structures.
-- [**28**星][5m] [PHP] [fdciabdul/fbchecker](https://github.com/fdciabdul/fbchecker) Facebook Mass Account Checker
- [**28**星][4y] [C] [erriy/data_pirate](https://github.com/erriy/data_pirate)
-- [**28**星][17d] [C#] [ericzimmerman/amcacheparser](https://github.com/ericzimmerman/amcacheparser) Parses amcache.hve files, but with a twist!
-- [**28**星][7d] [Py] [entynetproject/proton](https://github.com/entynetproject/proton) Proton Framework is a Windows post exploitation framework similar to other penetration testing tools such as Meterpreter and Powershell Invader Framework. The major difference is that the Proton Framework does most of its operations using Windows Script Host (a.k.a. JScript/VBScript), with compatibility in the core to support a default installat…
-- [**28**星][2y] [PowerShell] [enddo/hatdbg](https://github.com/enddo/hatdbg) Minimal WIN32 Debugger in powershell
+- [**28**星][19d] [C#] [ericzimmerman/amcacheparser](https://github.com/ericzimmerman/amcacheparser) Parses amcache.hve files, but with a twist!
+- [**28**星][2y] [PS] [enddo/hatdbg](https://github.com/enddo/hatdbg) Minimal WIN32 Debugger in powershell
- [**28**星][3y] [Java] [elynx/pokemon-go-xposed-mitm](https://github.com/elynx/pokemon-go-xposed-mitm) MITM attack on Pokemon Go (c) via XPosed framework
+- [**28**星][25d] [Py] [eleemosynator/writeups](https://github.com/eleemosynator/writeups) Write-ups for crackmes and CTF challenges
- [**28**星][2y] [Shell] [earayu/fastjson_jndi_poc](https://github.com/earayu/fastjson_jndi_poc) fastjson远程命令执行漏洞,jndi方式
-- [**28**星][1y] [dwestgard/threat_hunting_tables](https://github.com/dwestgard/threat_hunting_tables) Theat hunting notes in flat file format and mapped to MITRE's ATT&CK IDs
- [**28**星][2y] [C++] [dshikashio/pybag](https://github.com/dshikashio/pybag) CPython module for Windbg's dbgeng plus additional wrappers.
- [**28**星][2y] [Java] [drme/ble-rc](https://github.com/drme/ble-rc) Control RC cars from your SmartPhone
- [**28**星][8m] [Ruby] [dreadlocked/ctf-writeups](https://github.com/dreadlocked/ctf-writeups) CTF Write-ups
-- [**28**星][7d] [Py] [dottedmag/archmage](https://github.com/dottedmag/archmage) A reader and decompiler for files in the CHM format
+- [**28**星][9d] [Py] [dottedmag/archmage](https://github.com/dottedmag/archmage) A reader and decompiler for files in the CHM format
- [**28**星][1y] [Py] [dienuet/crossdomain](https://github.com/dienuet/crossdomain) CORS checking
- [**28**星][2m] [Go] [dharmaofcode/gorp](https://github.com/dharmaofcode/gorp) A modular bug hunting and web application pentesting framework written in Go
- [**28**星][2y] [defcon-russia/shortcut_auto_bind](https://github.com/defcon-russia/shortcut_auto_bind) Windows LNK/URL shortcut auto-binding hotkey (not a bug, feature)
- [**28**星][3y] [Py] [deadbits/arcreactor](https://github.com/deadbits/arcreactor) open-source intelligence gathering for SIEMs <3
-- [**28**星][2y] [Objective-C] [dannagle/packetsender-ios](https://github.com/dannagle/packetsender-ios) Packet Sender for iOS, Send/Receive UDP/TCP
+- [**28**星][1m] [Shell] [dcso/misp-dockerized](https://github.com/dcso/misp-dockerized)
+- [**28**星][18d] [Py] [darksecdevelopers/absorber](https://github.com/darksecdevelopers/absorber) An advance keylogger that works and also logs special keys including uppercase letters as well.
+- [**28**星][2y] [ObjC] [dannagle/packetsender-ios](https://github.com/dannagle/packetsender-ios) Packet Sender for iOS, Send/Receive UDP/TCP
+- [**28**星][4y] [C] [ctz/sgx-pwenclave](https://github.com/ctz/sgx-pwenclave) Using SGX to harden password hashing
- [**28**星][3y] [JS] [ctxis/pac-leak-demo](https://github.com/ctxis/pac-leak-demo) PAC HTTPS leak demo from DEF CON 24 'Toxic Proxies' talk
- [**28**星][9m] [Py] [ctxis/cbrcli](https://github.com/ctxis/cbrcli) Command line interface to Carbon Black Response
-- [**28**星][9m] [C] [ctxis/capemon](https://github.com/ctxis/capemon) CAPE monitor DLLs
+- [**28**星][7m] [Py] [cryptolu/whitebox](https://github.com/cryptolu/whitebox) White-box Analysis and Implementation Tools
- [**28**星][2m] [Py] [cryptax/droidlysis](https://github.com/cryptax/droidlysis) Property extractor for Android apps
- [**28**星][3y] [Py] [crowdstrike/chopshop](https://github.com/crowdstrike/chopshop) Mitre chopshop network decoder framework
- [**28**星][4y] [JS] [crisu83/ctf-game](https://github.com/crisu83/ctf-game) Fast-paced hot seat multiplayer game written in modern JavaScript.
- [**28**星][7y] [C++] [cr4sh/dbgcb](https://github.com/cr4sh/dbgcb) Engine for communication with remote kernel debugger (KD, WinDbg) from drivers and applications
-- [**28**星][12m] [PowerShell] [countercept/ppid-spoofing](https://github.com/countercept/ppid-spoofing) Scripts for performing and detecting parent PID spoofing
+- [**28**星][12m] [PS] [countercept/ppid-spoofing](https://github.com/countercept/ppid-spoofing) Scripts for performing and detecting parent PID spoofing
- [**28**星][6y] [JS] [codenothing/argv](https://github.com/codenothing/argv) Node based command line argument parser
+- [**28**星][2m] [Java] [codehaus-plexus/plexus-archiver](https://github.com/codehaus-plexus/plexus-archiver)
- [**28**星][3y] [C#] [cannanlly/gogotester](https://github.com/cannanlly/gogotester) 原版基础上修改bug和优化使用体验
- [**28**星][10m] [JS] [calidog/certstream-js](https://github.com/calidog/certstream-js) Javascript library for connecting to the CertStream network.
-- [**28**星][1y] [C] [calebfenton/native-harness-target](https://github.com/calebfenton/native-harness-target) Android app for demonstrating native library harnessing
- [**28**星][4y] [Java] [burp-hash/burp-hash](https://github.com/burp-hash/burp-hash)
- [**28**星][3y] [brandonprry/clamav-fuzz](https://github.com/brandonprry/clamav-fuzz) A fuzz job for ClamAV
- [**28**星][1y] [C] [bot-man-jl/wfp-traffic-redirection-driver](https://github.com/bot-man-jl/wfp-traffic-redirection-driver) WFP Traffic Redirection Driver is used to redirect NIC traffic on network layer and framing layer, based on Windows Filtering Platform (WFP).
@@ -14945,137 +16072,161 @@ networking routines
- [**28**星][4m] [Py] [azmatt/anaximander](https://github.com/azmatt/anaximander) Python Code to Map Cell Towers From a Cellebrite Android Dump
- [**28**星][3y] [Py] [ayrx/tlsenum](https://github.com/ayrx/tlsenum) A command line tool to enumerate TLS cipher-suites supported by a server
- [**28**星][2m] [Py] [armissecurity/urgent11-detector](https://github.com/armissecurity/urgent11-detector) URGENT/11 detection tool by Armis
+- [**28**星][2m] [C] [arm-software/sbsa-acs](https://github.com/arm-software/sbsa-acs) ARM Enterprise: SBSA Architecture Compliance Suite
- [**28**星][7m] [Py] [antoinet/obike](https://github.com/antoinet/obike) Reverse engineering of the oBike protocol communication (BLE and HTTP)
- [**28**星][11m] [Py] [antid0tecom/ipad_accessory_research](https://github.com/antid0tecom/ipad_accessory_research) Research into Security of Apple Smart Keyboard and Apple Pencil
- [**28**星][6y] [Ruby] [andrewsmhay/brisket](https://github.com/andrewsmhay/brisket) Brisket is a collection of frontend scripts for masscan, zmap, and nmap, in addition data manipulation scripts
- [**28**星][1y] [C++] [allocandinit/ollvm5.0.1](https://github.com/allocandinit/ollvm5.0.1) obfuscator 基于 llvm 5.0.1 版本
+- [**28**星][2y] [JS] [allglorytothehypnotoad/nodescan](https://github.com/allglorytothehypnotoad/nodescan) scans network for hosts and open ports
- [**28**星][1y] [Py] [alienwithin/scripts-sploits](https://github.com/alienwithin/scripts-sploits) A number of scripts POC's and problems solved as pentests move along.
- [**28**星][1y] [JS] [alephsecurity/spectrebrowserresearch](https://github.com/alephsecurity/spectrebrowserresearch)
- [**28**星][6m] [airbus-seclab/gustave](https://github.com/airbus-seclab/gustave)
- [**28**星][2y] [Py] [ahmadnourallah/pysploit-framework](https://github.com/ahmadnourallah/pysploit-framework) free exploit framework written use python language version 3.3
- [**28**星][1y] [C++] [abatchy17/hevd-exploits](https://github.com/abatchy17/hevd-exploits) Exploit code used for the HackSysExtremeVulnerableDriver.
- [**28**星][3y] [C] [a7vinx/liinux](https://github.com/a7vinx/liinux) A linux rootkit works on kernel 4.0.X or higher
-- [**28**星][12m] [Py] [98587329/web-scan](https://github.com/98587329/web-scan) jboss,tomcat,weblogic,未授权访问扫描工具
+- [**28**星][1y] [Py] [98587329/web-scan](https://github.com/98587329/web-scan) jboss,tomcat,weblogic,未授权访问扫描工具
- [**28**星][1m] [Py] [4n4nk3/wordlister](https://github.com/4n4nk3/wordlister) A simple wordlist generator and mangler written in python.
- [**28**星][3y] [Py] [3gstudent/fuzzbunch](https://github.com/3gstudent/fuzzbunch) NSA finest tool
+- [**28**星][1y] [Py] [0xacb/github-desktop-poc](https://github.com/0xacb/github-desktop-poc) Github Desktop RCE PoC
- [**28**星][3y] [Py] [0x71/cuckoo-linux](https://github.com/0x71/cuckoo-linux) Linux malware analysis based on Cuckoo Sandbox.
- [**28**星][3y] [Shell] [0utrider/malrecon](https://github.com/0utrider/malrecon) malrecon:基本的恶意代码检测和分析工具,Shell 编写
+- [**27**星][2y] [syst3ma/awesome_cisco_exploitation](https://github.com/syst3ma/awesome_cisco_exploitation) A curated list of awesome Cisco exploitation resources
- [**27**星][11m] [Java] [adolfintel/notebot](https://github.com/adolfintel/notebot) A ripoff of Microsoft Sticky Notes
+- [**27**星][9d] [snail007/goproxy-cn](https://github.com/snail007/goproxy-cn) 高性能的http代理、https代理、socks5代理、ss代理、内网穿透、内网穿透p2p、内网穿透代理、内网穿透反向代理、内网穿透服务器、游戏盾、游戏高防、游戏代理,支持API代理认证。websocke代理、tcp代理、udp代理、socket代理、高仿服务器。支持正向代理、反向代理、透明代理、TCP内网穿透、UDP内网穿透、HTTP内网穿透、HTTPS内网穿透、https代理负载均衡、http代理负载均衡、socks5代理负载均衡、socket代理负载均衡、ss代理负载均衡、TCP/UDP端口映射、SSH中转、TLS加密传输、协议转换、防污染DNS代理,限速,限连接数。官方QQ交流群: 42805407。
+- [**27**星][2y] [Py] [spiderlabs/modsecurity-log-utilities](https://github.com/spiderlabs/modsecurity-log-utilities) Set of CLI tools to transform ModSecurity logs into a meaningful information, given a context.
- [**27**星][10m] [radareorg/r2jp](https://github.com/radareorg/r2jp) Japanese Community of radare2
- [**27**星][3y] [Ruby] [infobyte/cve-2016-2776](https://github.com/infobyte/cve-2016-2776) CVE-2016-2776
-- [**27**星][2y] [PowerShell] [gimini/tartarus](https://github.com/gimini/tartarus) Fileless Ransomware Example
+- [**27**星][2y] [PS] [gimini/tartarus](https://github.com/gimini/tartarus) Fileless Ransomware Example
+- [**27**星][2y] [JS] [cyrus-and/chrome-page-graph](https://github.com/cyrus-and/chrome-page-graph) Chrome extension to generate interactive page dependency graphs
- [**27**星][1y] [JS] [samyk/crak](https://github.com/samyk/crak) Crash Royale Attack Kit
-- [**27**星][1m] [Go] [getlantern/lampshade](https://github.com/getlantern/lampshade) Obfuscated encrypted network protocol for Lantern
+- [**27**星][7d] [Go] [getlantern/lampshade](https://github.com/getlantern/lampshade) Obfuscated encrypted network protocol for Lantern
- [**27**星][4y] [Py] [averagesecurityguy/blue](https://github.com/averagesecurityguy/blue) Scripts that are suited for blue teams
-- [**27**星][11m] [HTML] [twintproject/twint-explorer](https://github.com/twintproject/twint-explorer) TWINT Graph Visualizer
-- [**27**星][25d] [Shell] [security-onion-solutions/securityonion-docker](https://github.com/security-onion-solutions/securityonion-docker) Docker files for Security Onion
+- [**27**星][1m] [tidesec/auto_pentest_tool_course](https://github.com/tidesec/auto_pentest_tool_course) 《自动化漏洞挖掘技术实践》相关资料及脚本
+- [**27**星][27d] [Shell] [security-onion-solutions/securityonion-docker](https://github.com/security-onion-solutions/securityonion-docker) Docker files for Security Onion
- [**27**星][3y] [Py] [paranoidninja/pisociety](https://github.com/paranoidninja/pisociety) Inspired from Mr. Robot I started developing this framework which can create 3vil twins, ddos Wireless networks, bypass HSTS(partial) and many more.This project is a work in progress and will be updated and fixed regularly for any issues found.
+- [**27**星][3y] [Assembly] [fsecurelabs/avrop](https://github.com/fsecurelabs/avrop) ROP based Movfuscator VM
- [**27**星][4y] [Ruby] [thesp0nge/wordstress](https://github.com/thesp0nge/wordstress) A security scanner for Wordpress blogging engine
+- [**27**星][7y] [hak5darren/ducky-flasher](https://github.com/hak5darren/ducky-flasher) Automatically exported from code.google.com/p/ducky-flasher
- [**27**星][3m] [Py] [nccgroup/nobex](https://github.com/nccgroup/nobex) nOBEX allows emulating the PBAP, MAP, and HFP profiles to test vehicle infotainment systems and similar devices using these profiles
-- [**27**星][2m] [Rust] [timvisee/pixelpwnr](https://github.com/timvisee/pixelpwnr)
+- [**27**星][5m] [C#] [netspi/daft](https://github.com/netspi/daft) DAFT: Database Audit Framework & Toolkit
+- [**27**星][4y] [Py] [hephaest0s/creatorrc](https://github.com/hephaest0s/creatorrc) Create torrc files optimized for speed, security, or avoiding captchas
+- [**27**星][4m] [JS] [purplei2p/i2pd-tools](https://github.com/purplei2p/i2pd-tools) Some useful tools for I2P
- [**27**星][8m] [offensive-security/kali-sly-pi](https://github.com/offensive-security/kali-sly-pi) kali-sly-pi
- [**27**星][2y] [C#] [zaczero/sharploader](https://github.com/zaczero/sharploader)
-- [**27**星][4m] [PowerShell] [glenrobinson72/tableau-powershell-scripts](https://github.com/glenrobinson72/tableau-powershell-scripts) Repository of Powershell Scripts for Tableau
+- [**27**星][2y] [Shell] [digivill/all-in-one-wifi-cracker](https://github.com/digivill/all-in-one-wifi-cracker) Linux All in One Wifi Cracker
+- [**27**星][4m] [PS] [glenrobinson72/tableau-powershell-scripts](https://github.com/glenrobinson72/tableau-powershell-scripts) Repository of Powershell Scripts for Tableau
- [**27**星][1y] [Shell] [edoverflow/h1-cli](https://github.com/edoverflow/h1-cli) A CLI tool to interact with hackerone.com. This was my submission for HackerOne's Summer 2018 Hack Day.
+- [**27**星][5m] [HTML] [firewalltutor/firewalltutor.github.io](https://github.com/firewalltutor/firewalltutor.github.io) fire wall tutor 自建梯子教程 Google 翻墙 科学上网 代理工具 一键安装
- [**27**星][4m] [Py] [mvelazc0/purplespray](https://github.com/mvelazc0/purplespray) PurpleSpray is an adversary simulation tool that executes password spray behavior under different scenarios and conditions with the purpose of generating attack telemetry in properly monitored Windows enterprise environments
- [**27**星][1m] [vgkintsugi/ghidra-segasaturn-processor](https://github.com/vgkintsugi/ghidra-segasaturn-processor) A Ghidra processor module for the Sega Saturn (SuperH SH-2)
- [**27**星][2y] [JS] [imshubhamsingh/farmerchain](https://github.com/imshubhamsingh/farmerchain) A collaborative and collective pool farming system with built in blockchain based self financing system to help farmers become self-reliant. | ᴘʀᴏᴏꜰ ᴏꜰ ᴄᴏɴᴄᴇᴘᴛ
- [**27**星][4m] [Java] [usdag/cstc](https://github.com/usdag/cstc)
- [**27**星][2y] [Py] [dixel/wifi-linux](https://github.com/dixel/wifi-linux) Simple python script to monitor access point signal strength.
- [**27**星][5y] [Py] [bendemott/captiveportal](https://github.com/bendemott/captiveportal) A captive portal that can be used on most linux distributions.
-- [**27**星][26d] [C++] [gdabah/win32k-bugs](https://github.com/gdabah/win32k-bugs) Dump of win32k POCs for bugs I've found
-- [**27**星][1m] [Py] [pnfsoftware/jeb-golang-analyzer](https://github.com/pnfsoftware/jeb-golang-analyzer) JEB scripts for Golang executables analysis
-- [**27**星][1m] [Py] [ds19991999/secbox](https://github.com/ds19991999/secbox)
+- [**27**星][6d] [C++] [vulcainreo/dvid](https://github.com/vulcainreo/dvid) Damn Vulnerable IoT Device
+- [**27**星][29d] [C++] [gdabah/win32k-bugs](https://github.com/gdabah/win32k-bugs) Dump of win32k POCs for bugs I've found
+- [**27**星][3m] [grapheneos/os_issue_tracker](https://github.com/grapheneos/os_issue_tracker) Issue tracker for GrapheneOS Android Open Source Project hardening work. Standalone projects like Auditor, AttestationServer and hardened_malloc have their own dedicated trackers.
- [**27**星][5m] [C#] [axdsan/dnspy-stringsanalyzer](https://github.com/axdsan/dnspy-stringsanalyzer) Plugin for DnSpy - Analyze through assemblies and display their strings.
-- [**27**星][2m] [Py] [x1tan/cve-2019-13025](https://github.com/x1tan/cve-2019-13025) Connect Box CH7465LG (CVE-2019-13025)
- [**27**星][2m] [hrt/anticheatjs](https://github.com/hrt/anticheatjs) Javascript Anti Cheats 101
-- [**27**星][2y] [Py] [vpnguy-zz/handyheaderhacker](https://github.com/vpnguy-zz/HandyHeaderHacker) Examine HTTP response headers for common security issues
- [**27**星][1m] [C] [usineur/sdlpop](https://github.com/usineur/SDLPoP) An open-source port of Prince of Persia, based on the disassembly of the DOS version.
- [**27**星][5y] [C] [exploiteers/nestdfuattack](https://github.com/exploiteers/NestDFUAttack) Packages to attack the Google Nest's DFU mode.
- [**27**星][1y] [C++] [fdiskyou/winalloctracer](https://github.com/fdiskyou/WinAllocTracer) Pintool that logs and tracks calls to RtlAllocateHeap, RtlReAllocateHeap, RtlFreeHeap, VirtualAllocEx, and VirtualFreeEx.
- [**27**星][7y] [Java] [alessiodallapiazza/wpscan](https://github.com/alessiodallapiazza/WPScan)
-- [**27**星][3m] [C#] [geta/404handler](https://github.com/Geta/404handler) The popular 404 handler for EPiServer, enabling better control over your 404 page in addition to allowing redirects for old urls that no longer works.
+- [**27**星][1y] [Jupyter Notebook] [aicoe/prometheus-data-science](https://github.com/AICoE/prometheus-data-science) A collection of analysis, analytics, and machine learning techniques for time series forecasting w/ Prometheus metrics
+- [**27**星][10m] [JS] [1lastbr3ath/s2o](https://github.com/1lastBr3ath/S2O) Chrome extension to inspect and find domains that don't resolve or have expired
- [**27**星][6y] [osirislab/xnippet](https://github.com/osirislab/xnippet) A little tool to execute functions without debugging an entire executable. Originally written by Gonzalo J. Carracedo (BatchDrake).
+- [**27**星][3m] [Shell] [imwally/coffeeconnect](https://github.com/imwally/coffeeconnect) Connect to Starbucks WiFi without opening a browser.
- [**27**星][2y] [Py] [taroballzchen/shecodject](https://github.com/TaroballzChen/shecodject) shecodject is a autoscript for shellcode injection by Python3 programing
+- [**27**星][16d] [PHP] [backdoorhub/shell-backdoor-list](https://github.com/backdoorhub/shell-backdoor-list)
+- [**27**星][2y] [tatsui-geek/malware-traffic-analysis.net](https://github.com/tatsui-geek/malware-traffic-analysis.net) Download pcap files from
- [**27**星][2y] [shmilylty/kalitools](https://github.com/shmilylty/kalitools) Kali Linux工具清单
- [**27**星][5m] [Java] [bit4woo/burp-api-drops](https://github.com/bit4woo/burp-api-drops) burp suite API 处理http请求和响应的基本流程
- [**27**星][1y] [JS] [zjlywjh001/phrackctf-team-docker](https://github.com/zjlywjh001/phrackctf-team-docker) Docker image for phrackCTF-Platform-Team Project.
- [**27**星][6y] [C++] [zhaolong/libparser](https://github.com/zhaolong/libparser) 解析静态库(Lib)文件,提取出所有函数信息,组织成自定义格式文件
- [**27**星][4y] [Java] [zerothoughts/jndipoc](https://github.com/zerothoughts/jndipoc) Proof of concept showing how java byte code can be injected through InitialContext.lookup() calls
- [**27**星][2y] [C] [zerosum0x0/zeroload](https://github.com/zerosum0x0/zeroload)
-- [**27**星][2m] [Java] [zerokilo/xexloaderwv](https://github.com/zerokilo/xexloaderwv) Ghidra Loader Module for X360 XEX Files
+- [**27**星][3m] [Java] [zerokilo/xexloaderwv](https://github.com/zerokilo/xexloaderwv) Ghidra Loader Module for X360 XEX Files
- [**27**星][5m] [Smarty] [zee-ahmed/kube-owasp-zap](https://github.com/zee-ahmed/kube-owasp-zap) Owasp Zap chart for Kubernetes
- [**27**星][4y] [Scheme] [yifanlu/cgen](https://github.com/yifanlu/cgen) CGEN的Fork,增加了生成IDA IDP模块的支持
- [**27**星][2y] [Py] [yehgdotnet/s3scanner](https://github.com/yehgdotnet/s3scanner) Scan for open S3 buckets and dump
- [**27**星][2y] [C] [yara-rules/r2yara](https://github.com/yara-rules/r2yara) r2yara - Module for Yara using radare2 information
- [**27**星][7y] [Py] [yanlinlin82/plcscan](https://github.com/yanlinlin82/plcscan) Automatically exported from code.google.com/p/plcscan
+- [**27**星][3m] [Shell] [yahuiwong/docker-ss-tproxy](https://github.com/yahuiwong/docker-ss-tproxy) ss-redir 全局透明代理 (REDIRECT + TPROXY)
- [**27**星][9m] [Py] [xajkep/xpt](https://github.com/xajkep/xpt) XPT - XSS Polyglot Tester
+- [**27**星][12m] [PS] [wuseman/wloader](https://github.com/wuseman/wloader) Windows 10 PRO Activator - No more backdoors via loaders from China and neither you will need any crack anymore that is valid for a week or two. This is script is written for powershell/cmd. This script will also removing all bloatware from Windows 10. Edit the script after your needs.
- [**27**星][4y] [Py] [williballenthin/python-evt](https://github.com/williballenthin/python-evt) Pure Python parser for classic Windows Event Log files (.evt)
- [**27**星][1y] [JS] [whizkydee/type-reverse](https://github.com/whizkydee/type-reverse)
- [**27**星][5y] [Py] [webstersprodigy/webstersprodigy](https://github.com/webstersprodigy/webstersprodigy) misc pentest tools.
- [**27**星][3y] [Py] [w4kfu/ida_loader](https://github.com/w4kfu/ida_loader) loader module 收集
- [**27**星][3y] [C++] [vusec/typesan](https://github.com/vusec/typesan) TypeSan checks casts in C++ code - code released for CCS 2016
- [**27**星][8m] [Py] [vngkv123/ctf](https://github.com/vngkv123/ctf) CTF binary exploit code
+- [**27**星][3m] [C++] [vertextoedge/windowfunctiontracer](https://github.com/vertextoedge/windowfunctiontracer) Window Executable file Function tracer using Debugging API
+- [**27**星][2y] [Py] [vergecurrency/electrum-xvg-tor](https://github.com/vergecurrency/electrum-xvg-tor) XVG TOR Electrum Client for connecting to the VERGE XVG TOR Electrum Server
- [**27**星][8m] [vah13/oraclecve](https://github.com/vah13/oraclecve) Vulnerabilities which found in Oracle products
- [**27**星][1y] [Py] [undeadsec/goblinwordgenerator](https://github.com/undeadsec/goblinwordgenerator) Python wordlist generator
+- [**27**星][2y] [Go] [u35s/ag](https://github.com/u35s/ag) 一个用go实现的命令行下查看每个网卡详细流量的小工具
- [**27**星][3y] [Py] [toxic-ig/sql-xss](https://github.com/toxic-ig/sql-xss) A few SQL and XSS attack tools
- [**27**星][2y] [HTML] [torque59/aws-vulnerable-lambda](https://github.com/torque59/aws-vulnerable-lambda) An AWS Lambda vulnerable application written in flask.
- [**27**星][3y] [C] [tinysec/runwithdll](https://github.com/tinysec/runwithdll) windows create process with a dll load first time via LdrHook
- [**27**星][1y] [Py] [tildedennis/malware](https://github.com/tildedennis/malware)
- [**27**星][4y] [JS] [threatstack/pigsty](https://github.com/threatstack/pigsty) Pigsty is very efficient and customizable spooler for the unified2 file format.
- [**27**星][3y] [HTML] [thoppe/5baa61e4c9b93f3f0682250b6cf8331b7ee68fd8](https://github.com/thoppe/5baa61e4c9b93f3f0682250b6cf8331b7ee68fd8) RNN-LSTM that learns passwords from a starting list
+- [**27**星][7m] [Py] [thombashi/pingparsing](https://github.com/thombashi/pingparsing) pingparsing is a CLI-tool/Python-library parser and transmitter for ping command output.
+- [**27**星][1y] [Py] [thesecondsun/pasm](https://github.com/thesecondsun/pasm) Linux assembler/disassembler based on Rasm2
- [**27**星][10m] [Py] [thehive-project/synapse](https://github.com/thehive-project/synapse) a Meta Alert Feeder for TheHive, a Security Incident Response Platform
- [**27**星][1m] [PHP] [telnet22/kn0ck](https://github.com/telnet22/kn0ck) Automated Tools Pentest
- [**27**星][2m] [Erlang] [technion/ct_advisor](https://github.com/technion/ct_advisor) A monitoring service for Certificate Transparency
- [**27**星][3y] [Perl] [tanjiti/perl_tools](https://github.com/tanjiti/perl_tools) perl小工具
- [**27**星][1m] [Py] [szysec/ctftest](https://github.com/szysec/ctftest)
+- [**27**星][1y] [systemli/ansible-role-hidden-service](https://github.com/systemli/ansible-role-hidden-service) Ansible role to install & maintain Tor Hidden Services
- [**27**星][2y] [Py] [syslog777/psak](https://github.com/syslog777/psak) The Pentester's Swiss Army Knife
- [**27**星][1y] [Py] [sweetsoftware/artemis](https://github.com/sweetsoftware/artemis) Phishing webapp generator
- [**27**星][3y] [Py] [swackhamer/vt_notification_puller](https://github.com/swackhamer/vt_notification_puller) VirusTotal Intelligence Notification Puller
- [**27**星][2m] [C] [surajfale/passthrough-minifilter-driver](https://github.com/surajfale/passthrough-minifilter-driver) Windows mini-filter-driver. Blocks the access to USB drives.
- [**27**星][2y] [JS] [supersaiyansss/wechatspider](https://github.com/supersaiyansss/wechatspider) 基于中间人攻击的微信公众号爬虫 2017/9/19更新
- [**27**星][11m] [Smali] [strazzere/emacs-smali](https://github.com/strazzere/emacs-smali) Smali/Baksmali mode for Emacs
+- [**27**星][11d] [Go] [stefansundin/ec2-metadata-filter](https://github.com/stefansundin/ec2-metadata-filter) Enhance the security of the EC2 metadata service.
- [**27**星][2y] [Ruby] [stebbins/strigil](https://github.com/stebbins/strigil) Strigil is an OSINT tool for collecting and aggregating social media data
-- [**27**星][11m] [C] [sqdwr/loadimageinject](https://github.com/sqdwr/loadimageinject) LoadImage Routine Inject Dll
+- [**27**星][3y] [stayliv3/iotsec](https://github.com/stayliv3/iotsec) 收集物联网安全相关资料
- [**27**星][1m] [Py] [spuerbread/kun](https://github.com/spuerbread/kun) 插件化漏洞扫描器
- [**27**星][6m] [C] [souhailhammou/kernelsymbolshelper](https://github.com/souhailhammou/kernelsymbolshelper) Retrieve pointers to undocumented kernel functions and offsets to members within undocumented structures to use in your driver by using the symbol server.
-- [**27**星][12d] [Py] [sophoslabs/webassembly](https://github.com/sophoslabs/webassembly) Research on WebAssembly
+- [**27**星][8y] [Ruby] [sophsec/wordlist](https://github.com/sophsec/wordlist) A Ruby library for generating and working with wordlists.
- [**27**星][4y] [Py] [smeegesec/burp-importer](https://github.com/smeegesec/burp-importer) Burp Suite Importer - Connect to multiple web servers while populating the sitemap.
- [**27**星][4m] [C] [skx/pam_pwnd](https://github.com/skx/pam_pwnd) A PAM module to test passwords against previous leaks at haveibeenpwned.com
- [**27**星][2y] [HTML] [shikarisenpai/leak-ntlm-hash-via-html](https://github.com/shikarisenpai/leak-ntlm-hash-via-html) List of HTML tags for leaking NTLM-hashes
- [**27**星][2y] [Lua] [shengnoah/riff](https://github.com/shengnoah/riff) 一个基于lua插件的pcap监控工具。
-- [**27**星][10m] [JS] [shanselman/daskeyboard-q-nightscout](https://github.com/shanselman/daskeyboard-q-nightscout) Hooking up the DasKeyboard Q REST API to change the key colors in response to diabetic's glucose from NightScout
- [**27**星][2y] [Makefile] [shadowsocksr-rm/openwrt-shadowsocksr](https://github.com/shadowsocksr-rm/openwrt-shadowsocksr) ShadowsocksR-libev for OpenWrt/LEDE
+- [**27**星][3m] [C#] [shack2/swebscan](https://github.com/shack2/swebscan) SWebScan是一款基于C#的Web目录扫描器。
- [**27**星][2y] [C] [sentinel-one/minhook](https://github.com/sentinel-one/minhook) The Minimalistic x86/x64 API Hooking Library for Windows
- [**27**星][2y] [PHP] [securelayer7/csv-injection-vulnerable-php-script-](https://github.com/securelayer7/csv-injection-vulnerable-php-script-) CSV injection Vulnerable Script.
-- [**27**星][7d] [C++] [schdub/protodec](https://github.com/schdub/protodec) Protobuf decompiler
+- [**27**星][9d] [C++] [schdub/protodec](https://github.com/schdub/protodec) Protobuf decompiler
- [**27**星][3y] [C] [salmg/audiospoof](https://github.com/salmg/audiospoof) Magnetic stripe spoofer implementing audio waves.
+- [**27**星][1y] [TS] [robinyo/ionic-angular-schematics](https://github.com/robinyo/ionic-angular-schematics) Schematics for Ionic Angular
+- [**27**星][6m] [Shell] [rithvikvibhu/nh-magisk-wifi-firmware](https://github.com/rithvikvibhu/nh-magisk-wifi-firmware) This Magisk module adds the required firmware for external wireless adapters to be used with NetHunter.
- [**27**星][1y] [Jupyter Notebook] [rh01/raspi-driving-car](https://github.com/rh01/raspi-driving-car) Capstone Auto RC Car
+- [**27**星][4d] [retarded-skid/skidsuite-3](https://github.com/retarded-skid/skidsuite-3) A collection of java reverse engineering tools and informational links
- [**27**星][3y] [Py] [regit/opensvp](https://github.com/regit/opensvp) Opensvp is a security tool implementing "attacks" to be able to test the resistance of firewall to protocol level attack.
-- [**27**星][21d] [C++] [regehr/opt-fuzz](https://github.com/regehr/opt-fuzz) llvm opt fuzzer and bounded exhaustive test generator
-- [**27**星][10m] [Go] [razc411/gobd](https://github.com/razc411/gobd) A Golang covert backdoor using raw sockets.
-- [**27**星][23d] [C] [rapid7/mimikatz](https://github.com/rapid7/mimikatz) A little tool to play with Windows security
+- [**27**星][2y] [re4lity/secpaper](https://github.com/re4lity/secpaper) SecurityPaper For
- [**27**星][1y] [PHP] [rakshitshah94/wordpress-wp-vcd-malware-attack-solution](https://github.com/rakshitshah94/wordpress-wp-vcd-malware-attack-solution) Another attack on wordpress 4.8
- [**27**星][1y] [Java] [rabrg/refactored-client](https://github.com/rabrg/refactored-client) Refactoring the obfuscated v317 of the RuneScape (RuneTek 3) client.
- [**27**星][9m] [C#] [raandree/managedpasswordfilter](https://github.com/raandree/managedpasswordfilter) Windows Password Filter that uses managed code internally
- [**27**星][7m] [Py] [qingxp9/cve-2019-6203-poc](https://github.com/qingxp9/cve-2019-6203-poc) PoC for CVE-2019-6203, works on < iOS 12.2, macOS < 10.14.4
- [**27**星][1y] [Py] [psiquelabs/dot2moon](https://github.com/psiquelabs/dot2moon) Tool that checks for path traversal traces in a given web application url, plus it is capable of multi-threading, set timeout and 5-layers verification.
- [**27**星][2m] [C++] [progmboy/win32kext](https://github.com/progmboy/win32kext) windbg plugin for win32k debugging
-- [**27**星][3y] [PowerShell] [powershell/dscconfigurations](https://github.com/powershell/dscconfigurations)
+- [**27**星][3y] [PS] [powershell/dscconfigurations](https://github.com/powershell/dscconfigurations)
- [**27**星][3y] [Java] [portswigger/xss-validator](https://github.com/portswigger/xss-validator) This is a burp intruder extender that is designed for automation and validation of XSS vulnerabilities.
- [**27**星][7m] [Py] [plaperdr/blink-docker](https://github.com/plaperdr/blink-docker) Tool to mitigate browser fingerprint tracking
-- [**27**星][3y] [Visual Basic] [phreak87/espeensy-and-peensy-payload-generator-esp8266-teensy-3.5-](https://github.com/phreak87/espeensy-and-peensy-payload-generator-esp8266-teensy-3.5-) Build your own Bad USB Stick for pentesting with wifi and dip switches
+- [**27**星][3y] [Visual Basic .NET] [phreak87/espeensy-and-peensy-payload-generator-esp8266-teensy-3.5-](https://github.com/phreak87/espeensy-and-peensy-payload-generator-esp8266-teensy-3.5-) Build your own Bad USB Stick for pentesting with wifi and dip switches
- [**27**星][5m] [PHP] [paul-axe/ctf](https://github.com/paul-axe/ctf) CTF stuff
- [**27**星][2y] [Shell] [owtf/owtf-docker](https://github.com/owtf/owtf-docker) Docker repository for OWTF (64-bit Kali)
- [**27**星][1m] [C] [oracle/libdtrace-ctf](https://github.com/oracle/libdtrace-ctf) libdtrace-ctf is the Compact Type Format library used by DTrace on Linux
- [**27**星][1y] [C] [openbsm/bsmtrace](https://github.com/openbsm/bsmtrace) BSM based intrusion detection system
-- [**27**星][7m] [PowerShell] [onelogicalmyth/invoke-gppcse](https://github.com/onelogicalmyth/invoke-gppcse) Obtains a list of GPOs based on known Client Side Extensions (CSE) that normally contain passwords
+- [**27**星][7m] [PS] [onelogicalmyth/invoke-gppcse](https://github.com/onelogicalmyth/invoke-gppcse) Obtains a list of GPOs based on known Client Side Extensions (CSE) that normally contain passwords
- [**27**星][5y] [C] [olsut/kinject-x64](https://github.com/olsut/kinject-x64) Kinject - kernel dll injector, currently available in x86 version, will be updated to x64 soon.
- [**27**星][2y] [C] [okazakinagisa/vtbaseddebuggerwin7](https://github.com/okazakinagisa/vtbaseddebuggerwin7) Simple kernelmode driver.
- [**27**星][9m] [Go] [nullhypothesis/sybilhunter](https://github.com/nullhypothesis/sybilhunter) Hunting for Sybils and anomalies in archived Tor network data.
- [**27**星][9m] [Py] [nullarray/amplispy](https://github.com/nullarray/amplispy) Check local or remote list of DNS servers for suitability in DNS Amplification DoS.
- [**27**星][1y] [Py] [nucypher/sputnik](https://github.com/nucypher/sputnik) Sputnik is an assembly language and interpreter for Fully Homomorphic Encryption
-- [**27**星][10m] [Py] [noobscode/kalel](https://github.com/noobscode/kalel) Kal El Network Stress Test and Penetration Testing Toolkit
- [**27**星][2y] [Java] [ninetysec/cknife](https://github.com/ninetysec/cknife) Cknife
- [**27**星][4y] [C++] [nihilus/ida-pro-swf](https://github.com/nihilus/ida-pro-swf) 处理SWF文件
- [**27**星][2y] [Py] [niexinming/safe_tool](https://github.com/niexinming/safe_tool) safe_tools
@@ -15084,24 +16235,22 @@ networking routines
- [**27**星][4m] [C++] [netdex/twinject](https://github.com/netdex/twinject) Automated player and hooking framework for bullet hell games from the Touhou Project
- [**27**星][3y] [Java] [nccgroup/jmxbf](https://github.com/nccgroup/jmxbf) A brute force program to test weak accounts configured to access a JMX Registry
- [**27**星][4y] [Py] [nbshelton/bitdump](https://github.com/nbshelton/bitdump) A tool to extract database data from a blind SQL injection vulnerability.
-- [**27**星][1m] [nats-io/nats-general](https://github.com/nats-io/nats-general) General NATS Information
- [**27**星][4m] [Py] [n4xh4ck5/v1d0m](https://github.com/n4xh4ck5/v1d0m) Enumerate subdomains through Virustotal
- [**27**星][2y] [Shell] [n3uz/t-pot-autoinstall](https://github.com/n3uz/t-pot-autoinstall) T-POT 针对中国区替换国内加速镜像
-- [**27**星][3y] [Py] [mvondracek/wifimitm](https://github.com/mvondracek/wifimitm) Automation of MitM Attack on Wi-Fi Networks
-- [**27**星][3m] [Py] [mrwn007/m3m0](https://github.com/mrwn007/m3m0) M3m0 Tool
-- [**27**星][1y] [Py] [mprhode/malware-prediction-rnn](https://github.com/mprhode/malware-prediction-rnn) RNN implementation with Keras for machine activity data to predict malware
+- [**27**星][3y] [Py] [mzweilin/ipv6-attack-detector](https://github.com/mzweilin/ipv6-attack-detector) Google Summer of Code 2012 project, supported by The Honeynet Project organization.
+- [**27**星][2y] [Py] [mrts/burp-suite-http-proxy-history-converter](https://github.com/mrts/burp-suite-http-proxy-history-converter) Python script that converts Burp Suite HTTP proxy history files to CSV or HTML
+- [**27**星][1y] [Rust] [mortendahl/rust-paillier](https://github.com/mortendahl/rust-paillier) A pure-Rust implementation of the Paillier encryption scheme
- [**27**星][2y] [Py] [morphuslabs/distinct](https://github.com/morphuslabs/distinct) Find potential Indicators of Compromise among similar Linux servers
- [**27**星][1y] [C++] [moccajoghurt/memwars](https://github.com/moccajoghurt/memwars)
- [**27**星][4y] [Py] [misteriouser/nextkey](https://github.com/misteriouser/nextkey) Free KeyLogger for Kali Linux and Ubuntu
- [**27**星][11m] [Java] [minecraftforge/fernflower](https://github.com/minecraftforge/fernflower) Unofficial mirror of FernFlower Java decompiler, Subtree split of:
- [**27**星][4y] [TeX] [mimoo/timing_attack_ecdsa_tls](https://github.com/mimoo/timing_attack_ecdsa_tls) Timing Attack on TLS' ECDSA signature
- [**27**星][2y] [C#] [milo2012/owadump](https://github.com/milo2012/owadump) Search Email Accounts (OWA) for Passwords, PAN numbers as well as other Keywords
-- [**27**星][1y] [Shell] [mikhbur/conformer](https://github.com/mikhbur/conformer) Password Guessing for different Web Portals
-- [**27**星][13d] [C] [microsoft/wafbench](https://github.com/microsoft/wafbench) WAFBench (wb) is a tool to measure the performance of WAF(Web Application Firewall) . It's based on latest code of ab (ApacheBench), and adds support for real trace replaying, framework of testing waf (FTW), and some other features.
+- [**27**星][15d] [C] [microsoft/wafbench](https://github.com/microsoft/wafbench) WAFBench (wb) is a tool to measure the performance of WAF(Web Application Firewall) . It's based on latest code of ab (ApacheBench), and adds support for real trace replaying, framework of testing waf (FTW), and some other features.
+- [**27**星][1m] [Py] [mhaskar/xssradare](https://github.com/mhaskar/xssradare) A Cross Site Scripting scanner using selenium webdriver
- [**27**星][10y] [C] [mcolyer/ifuse](https://github.com/mcolyer/ifuse) No longer actively developed here, see
- [**27**星][5m] [Go] [mcandre/stank](https://github.com/mcandre/stank) stank: analyzers for determining whether files smell like rotten POSIX shell scripts, or faintly rosy like Ruby and Python scripts
- [**27**星][3y] [C] [matteoserva/dirtycow-arm32](https://github.com/matteoserva/dirtycow-arm32)
-- [**27**星][2y] [Java] [martinstyk/apkanalyzer](https://github.com/martinstyk/apkanalyzer) Java tool for analyzing Android APK files
- [**27**星][2y] [mahmudz/malware](https://github.com/mahmudz/malware)
- [**27**星][4m] [Go] [magisterquis/dnsbotnet](https://github.com/magisterquis/dnsbotnet) DNS Botnet Server and Client
- [**27**星][6m] [C++] [m-r-j-o-h-n/swh-injector](https://github.com/m-r-j-o-h-n/swh-injector) An Injector that can inject dll into game process protected by anti cheat using SetWindowsHookEx.
@@ -15109,88 +16258,95 @@ networking routines
- [**27**星][5y] [Go] [lucdew/goransomware](https://github.com/lucdew/goransomware) Ransomware written in Go language
- [**27**星][5y] [JS] [lubyruffy/livemapdemo](https://github.com/lubyruffy/livemapdemo) 地图实时攻击演示
- [**27**星][8m] [C++] [lordnoteworthy/binary-auditing-solutions](https://github.com/lordnoteworthy/binary-auditing-solutions) Solutions for Binary Auditing Package:
+- [**27**星][3m] [PS] [loadenmb/tvasion](https://github.com/loadenmb/tvasion)
- [**27**星][4m] [C++] [lianglixin/remotecontrol-x3](https://github.com/lianglixin/remotecontrol-x3) Saurik remote control software opensource, X17 is now available.
- [**27**星][4y] [C] [lcxl/lcxl-shadow](https://github.com/lcxl/lcxl-shadow) LCXL影子系统
- [**27**星][8y] [PHP] [koto/squid-imposter](https://github.com/koto/squid-imposter) Phishing attack w/HTML5 offline cache framework based on Squid proxy
- [**27**星][11m] [C#] [kostapc/putty-tunnel-manager](https://github.com/kostapc/putty-tunnel-manager) Fixes and new release. PuTTY Tunnel Manager allows you to easily open tunnels, that are defined in a PuTTY session, from the system tray. You can also move the tunnels from PuTTY to PuTTY Tunnel Manager. This allows you to use PuTTY just for SSH shell sessions (without opening tunnels), and use PuTTY Tunnel Manager just for tunneling.
+- [**27**星][2y] [Go] [kensodev/micro-auth-proxy](https://github.com/kensodev/micro-auth-proxy) Github Auth proxy designed for micro-apps with static client and an API server
+- [**27**星][7y] [Py] [kcreyts/plugxdecoder](https://github.com/kcreyts/plugxdecoder) Decodes PlugX traffic and encrypted/compressed artifacts
- [**27**星][8m] [C++] [karaulov/warcraftiii_dll_126-127](https://github.com/karaulov/warcraftiii_dll_126-127) Improvements for Warcraft III 126a used in new DoTA (d1stats.ru). Auto unload from w3x map and load to Warcraft III !
- [**27**星][2y] [JS] [kafuuchinoq/v2raygeokit](https://github.com/kafuuchinoq/v2raygeokit)
- [**27**星][2y] [Ruby] [kacperszurek/pentest_teamcity](https://github.com/kacperszurek/pentest_teamcity) Pentest TeamCity using Metasploit
+- [**27**星][7m] [C++] [slyd0g/timestomper](https://github.com/slyd0g/TimeStomper) PoC that manipulates Windows file times using SetFileTime() API
- [**27**星][2y] [Go] [jsimonetti/tlstun](https://github.com/jsimonetti/tlstun) A socks tunnel client and server using websockets over http and tls
-- [**27**星][3m] [Py] [josue87/airopy](https://github.com/josue87/airopy) Get clients and access points.
-- [**27**星][2y] [C] [johndoe31415/ratched](https://github.com/johndoe31415/ratched) Ratched is a transparent Man-in-the-Middle TLS proxy intended for penetration testing
-- [**27**星][5m] [PowerShell] [johnaho/cloakify-powershell](https://github.com/johnaho/cloakify-powershell) Cloak files using text based steganography output to obsfucate what data they contain. Coded in Powershell. This is a port of TryCatchHCF's Cloakify written in python
+- [**27**星][4m] [Py] [josue87/airopy](https://github.com/josue87/airopy) Get clients and access points.
+- [**27**星][6d] [C] [johndoe31415/ratched](https://github.com/johndoe31415/ratched) Ratched is a transparent Man-in-the-Middle TLS proxy intended for penetration testing
- [**27**星][3y] [Py] [jofpin/sack](https://github.com/jofpin/sack) Identify connection of sessions for social engineering attacks.
- [**27**星][6m] [C++] [jnastarot/soul_eater](https://github.com/jnastarot/soul_eater) it can extract functions from .dll, .exe, .sys and it be work! :)
-- [**27**星][29d] [C++] [jnastarot/enma_pe](https://github.com/jnastarot/enma_pe) Cross-platform library for parsing and building PE\PE+ formats
- [**27**星][4y] [JS] [jgegeny/gootkit-xswkit-js](https://github.com/jgegeny/gootkit-xswkit-js)
+- [**27**星][5d] [Java] [jenkinsci/remoting-kafka-plugin](https://github.com/jenkinsci/remoting-kafka-plugin) Jenkins Remoting over Kafka
- [**27**星][7y] [C] [izsh/exploits](https://github.com/izsh/exploits) various exploits
- [**27**星][4m] [C] [ispras/qemu](https://github.com/ispras/qemu)
-- [**27**星][11m] [C] [intelpt/winafl-intelpt](https://github.com/intelpt/winafl-intelpt) A fork of AFL for fuzzing Windows binaries
+- [**27**星][12m] [C] [intelpt/winafl-intelpt](https://github.com/intelpt/winafl-intelpt) A fork of AFL for fuzzing Windows binaries
- [**27**星][3y] [C++] [int0/ltmdm64_poc](https://github.com/int0/ltmdm64_poc) ltmdm64_poc:利用ltmdm64.sys 的漏洞绕过 Windows 7 SP1 x64 的代码完整性检查
-- [**27**星][2y] [Py] [ice3man543/malscan](https://github.com/ice3man543/malscan) A Simple PE File Heuristics Scanners
-- [**27**星][2y] [Java] [ibey0nd/nstproxy](https://github.com/ibey0nd/nstproxy) 一款存储HTTP请求入库的burpsuite插件
- [**27**星][4m] [C] [hyrathon/pocs](https://github.com/hyrathon/pocs) Some Proof-of-Concepts of bugs I found
- [**27**星][4y] [C] [hxp2k6/smart7ec-scan-console](https://github.com/hxp2k6/smart7ec-scan-console) 基于Linux c开发的插件式扫描器(Python/lua)
-- [**27**星][14d] [Perl] [hknutzen/netspoc](https://github.com/hknutzen/netspoc) A network security policy compiler. Netspoc is targeted at large environments with a large number of firewalls and admins. Firewall rules are derived from a single rule set. Supported are Cisco IOS, NX-OS, ASA and IPTables.
+- [**27**星][8d] [Perl] [hknutzen/netspoc](https://github.com/hknutzen/netspoc) A network security policy compiler. Netspoc is targeted at large environments with a large number of firewalls and admins. Firewall rules are derived from a single rule set. Supported are Cisco IOS, NX-OS, ASA and IPTables.
- [**27**星][6y] [C++] [hexgolems/pint](https://github.com/hexgolems/pint) A debugger backend and LUA wrapper for PIN
- [**27**星][2y] [Go] [heptiolabs/certstream-slack](https://github.com/heptiolabs/certstream-slack) A small daemon that watches your domains in Certificate Transparency logs and posts them into Slack
- [**27**星][6m] [hardenedlinux/embedded-iot_profile](https://github.com/hardenedlinux/embedded-iot_profile) embedded-iot_profile
- [**27**星][2y] [JS] [hans-strudle/coinjack](https://github.com/hans-strudle/coinjack) Extension to HiJack/control web miners (like CoinHive)
- [**27**星][4y] [C] [hannob/selftls](https://github.com/hannob/selftls) Sample application to let OpenSSL talk to itself (for fuzzing)
- [**27**星][7m] [CSS] [hackeryunen/django-xss-platform](https://github.com/hackeryunen/django-xss-platform)
-- [**27**星][8y] [C] [hackedteam/driver-win32](https://github.com/hackedteam/driver-win32) Windows (32bit) agent driver
- [**27**星][6y] [C] [gwroblew/detectxsslib](https://github.com/gwroblew/detectxsslib)
- [**27**星][2y] [Shell] [gustavosotnas/avd-launcher](https://github.com/gustavosotnas/avd-launcher) Front-end to Android Virtual Devices (AVDs) emulator from Google.
-- [**27**星][1y] [Py] [fsacer/nps_payload](https://github.com/fsacer/nps_payload) This script will generate payloads for basic intrusion detection avoidance. It utilizes publicly demonstrated techniques from several different sources. Written by Larry Spohn (
+- [**27**星][8y] [Py] [greysign/pysec](https://github.com/greysign/pysec) python安全编程
+- [**27**星][11m] [C++] [giantpune/mailboxbomb](https://github.com/giantpune/mailboxbomb) a program used to build the mailbox bomb exploit for the Wii system menu.
+- [**27**星][3y] [Py] [gdataadvancedanalytics/r2graphity](https://github.com/gdataadvancedanalytics/r2graphity) Creating function call graphs based on radare2 framwork, plot fancy graphs and extract behavior indicators
+- [**27**星][2y] [Py] [fsacer/nps_payload](https://github.com/fsacer/nps_payload) This script will generate payloads for basic intrusion detection avoidance. It utilizes publicly demonstrated techniques from several different sources. Written by Larry Spohn (
- [**27**星][3y] [fouroctets/android-malware-samples](https://github.com/fouroctets/android-malware-samples) Android Malware Samples
- [**27**星][5m] [Py] [fluxchief/binaryninja_avr](https://github.com/fluxchief/binaryninja_avr) Binaryninja AVR architecture plugin with lifting
- [**27**星][8y] [Py] [fitblip/pydbg](https://github.com/fitblip/pydbg) A pure-python win32 debugger interface.
-- [**27**星][4y] [JS] [firebug/firequery](https://github.com/firebug/firequery) Firefox plugin for jQuery development
+- [**27**星][8m] [Py] [fireeye/vocab_scraper](https://github.com/fireeye/vocab_scraper) Vocabulary Scraper script used in FLARE's analysis of Russian-language Carbanak source code
- [**27**星][3y] [Py] [fare9/androidswissknife](https://github.com/fare9/androidswissknife) Framework for static and dynamic analysis in Android APKs
-- [**27**星][8m] [C++] [ez8-co/xpjson](https://github.com/ez8-co/xpjson)
- [**27**星][5m] [Py] [enovella/re-scripts](https://github.com/enovella/re-scripts) IDA/Ghidra/Radare2脚本收集(无文档)
-- [**27**星][23d] [Py] [eleemosynator/writeups](https://github.com/eleemosynator/writeups) Write-ups for crackmes and CTF challenges
- [**27**星][5m] [HTML] [edoverflow/security-template](https://github.com/edoverflow/security-template) A static website template for security pages.
- [**27**星][2y] [syst3ma/awesome_cisco_exploitation](https://github.com/syst3ma/awesome_cisco_exploitation) A curated list of awesome Cisco exploitation resources
- [**27**星][4m] [dustyfresh/dictionaries](https://github.com/dustyfresh/dictionaries) curated password lists and various other lists/dictionaries for security things
- [**27**星][2m] [Dockerfile] [dukebarman/ghidra-builder](https://github.com/dukebarman/ghidra-builder) Docker image for building ghidra RE framework from source
- [**27**星][3y] [Py] [duk3luk3/onion-py](https://github.com/duk3luk3/onion-py) Python wrapper for the OnionOO tor status API
- [**27**星][3y] [C++] [dragonfive/opencv_tld](https://github.com/dragonfive/opencv_tld) TLD:tracking-learning-detection 跟踪算法
+- [**27**星][8m] [Dockerfile] [dockage/tor-privoxy](https://github.com/dockage/tor-privoxy) Docker Tor proxy (http and shell) built on Alpine Linux
- [**27**星][4y] [C++] [dkemp/vulndev](https://github.com/dkemp/vulndev) Vulnerability research and development.
- [**27**星][5y] [Py] [djteller/memoryanalysis](https://github.com/djteller/memoryanalysis) Automated Memory Analysis (Black Hat Arsenal 2014)
+- [**27**星][6m] [HTML] [divyanshusahu/minictf](https://github.com/divyanshusahu/minictf) A platform build in django for hosting CTF events.
- [**27**星][10m] [C] [devdavisnunez/vhbb](https://github.com/devdavisnunez/vhbb) Browse, download, and launch Vita homebrews!
-- [**27**星][7m] [Ruby] [dev-sec/ansible-apache-hardening](https://github.com/dev-sec/ansible-apache-hardening)
+- [**27**星][8m] [Ruby] [dev-sec/ansible-apache-hardening](https://github.com/dev-sec/ansible-apache-hardening)
- [**27**星][2y] [C] [deroko/activationcontexthook](https://github.com/deroko/activationcontexthook) activationcontexthook:Hook 进程,强制进程加载重定向的 DLL
-- [**27**星][2y] [Py] [deralexxx/firemisp](https://github.com/deralexxx/firemisp) FireEye Alert json files to MISP Malware information sharing plattform (Alpha)
+- [**27**星][3y] [Py] [deralexxx/firemisp](https://github.com/deralexxx/firemisp) FireEye Alert json files to MISP Malware information sharing plattform (Alpha)
- [**27**星][2y] [C] [daveti/usbfilter](https://github.com/daveti/usbfilter) A USB layer firewall for the Linux kernel
-- [**27**星][16d] [Py] [darksecdevelopers/absorber](https://github.com/darksecdevelopers/absorber) An advance keylogger that works and also logs special keys including uppercase letters as well.
-- [**27**星][1y] [PowerShell] [danmcinerney/invoke-cats](https://github.com/danmcinerney/invoke-cats) Obfuscated Invoke-Mimikatz
+- [**27**星][1y] [PS] [danmcinerney/invoke-cats](https://github.com/danmcinerney/invoke-cats) Obfuscated Invoke-Mimikatz
- [**27**星][3y] [danielmiessler/atm](https://github.com/danielmiessler/atm) The Adaptive Security Testing Methodology (ASTM) provides context-adjusted testing methodologies based on factors such as time available to test, platform, technology stack, versions, plugins, modules, and other variables.
- [**27**星][3y] [PureBasic] [dadido3/d3hex](https://github.com/dadido3/d3hex) The first dataflow based Hex-Editor!
- [**27**星][3y] [Py] [d4vinci/clickjacking-tester](https://github.com/d4vinci/clickjacking-tester) A python script designed to check if the website if vulnerable of clickjacking and create a poc
-- [**27**星][7m] [Py] [cryptolu/whitebox](https://github.com/cryptolu/whitebox) White-box Analysis and Implementation Tools
+- [**27**星][4y] [PHP] [ctubio/php-proxy-stratum](https://github.com/ctubio/php-proxy-stratum) ReactPHP stratum+tcp proxy between miners and pools with database and frontend.
- [**27**星][7y] [C++] [colagrosso/avviso](https://github.com/colagrosso/avviso) (unmaintained) Ring the red phone from your Arduino
-- [**27**星][18d] [coky-t/owasp-mstg-ja](https://github.com/coky-t/owasp-mstg-ja) draft for Japanese translation of OWASP Mobile Security Testing Guide.
+- [**27**星][21d] [coky-t/owasp-mstg-ja](https://github.com/coky-t/owasp-mstg-ja) draft for Japanese translation of OWASP Mobile Security Testing Guide.
- [**27**星][2y] [Java] [coh7eiqu8thabu/slocker](https://github.com/coh7eiqu8thabu/slocker) Source code of the SLocker Android ransomware
-- [**27**星][1m] [Java] [codehaus-plexus/plexus-archiver](https://github.com/codehaus-plexus/plexus-archiver)
- [**27**星][3y] [C] [cn33liz/hsevd-stackoverflow](https://github.com/cn33liz/hsevd-stackoverflow) HackSys Extreme Vulnerable Driver - StackOverflow Exploit
- [**27**星][3y] [C] [chuckixia/mirai-source-code](https://github.com/chuckixia/mirai-source-code) Leaked Mirai Source Code - make it vagrantized
- [**27**星][4y] [Py] [cheetz/icmpshock](https://github.com/cheetz/icmpshock) A scanning tool for the ShellShock bash vulnerability
+- [**27**星][10d] [JS] [checkmyhttps/checkmyhttps](https://github.com/checkmyhttps/checkmyhttps) We propose a user-friendly add-on that allows you to check if your encrypted web traffic (SSL/TLS) towards secured Internet servers (HTTPS) is not intercepted (being listened to).
- [**27**星][11m] [JS] [chainsecurity/constantinople-reentrancy](https://github.com/chainsecurity/constantinople-reentrancy) Vulnerable code example including tests for Constantinople Reentrancy
-- [**27**星][9m] [HTML] [cainiaocome/xssgun](https://github.com/cainiaocome/xssgun) xss payloads generator
+- [**27**星][10m] [HTML] [cainiaocome/xssgun](https://github.com/cainiaocome/xssgun) xss payloads generator
- [**27**星][6y] [Py] [c0d3sh3lf/android_forensics](https://github.com/c0d3sh3lf/android_forensics) Bypassing Android Pattern Lock
+- [**27**星][10d] [JS] [bowlingtoolkit/discord-bots-hack-code](https://github.com/bowlingtoolkit/discord-bots-hack-code) Discord Bots Hacking
- [**27**星][1y] [Perl] [bollwarm/app-waf](https://github.com/bollwarm/app-waf) A simple waf application .用来实时探测web 非法访问,统计非法访问的ip ,web状态,访问url,来源web url。结合iptables和nginx可以实现实现实时封禁。
- [**27**星][2y] [PHP] [blackfan/web-inf-dict](https://github.com/blackfan/web-inf-dict) List of configuration files from WEB-INF and META-INF for use in Unvalidated Forwards and JSP Include vulnerabilities.
+- [**27**星][6y] [Py] [bl4ckic3/modbus-fuzzer](https://github.com/bl4ckic3/modbus-fuzzer) Modbus Protocol Fuzzer
- [**27**星][5m] [C] [biswa96/wslreverse](https://github.com/biswa96/wslreverse) Experiments with hidden COM interface and LxBus IPC mechanism in WSL
+- [**27**星][2y] [Go] [biezhi/goinx](https://github.com/biezhi/goinx)
- [**27**星][12m] [bcdannyboy/research](https://github.com/bcdannyboy/research) General Research Repository - Only updated when I feel like it
- [**27**星][5m] [badappsdevelopment/wifi-cracker](https://github.com/badappsdevelopment/wifi-cracker) Wifi Cracking
- [**27**星][2m] [JS] [b-mueller/sabre](https://github.com/b-mueller/sabre) Security analyzer for Solidity smart contracts. Uses MythX, the premier smart contract security service.
- [**27**星][6m] [JS] [auth0/passport-wsfed-saml2](https://github.com/auth0/passport-wsfed-saml2) passport strategy for both WS-fed and SAML2 protocol
- [**27**星][2y] [atom0s/ceautoasm-x64dbg](https://github.com/atom0s/ceautoasm-x64dbg) An x64dbg plugin that allows users to execute Cheat Engine auto assembler scripts within x64dbg.
+- [**27**星][7m] [JS] [antville/antville](https://github.com/antville/antville) The Queen Mum of Weblog Hosting Systems – written in JavaScript since 2001.
- [**27**星][3y] [Java] [animeshshaw/chromeforensics](https://github.com/animeshshaw/chromeforensics) A tool to perform automated forensic analysis of Chrome Browser.
- [**27**星][4y] [C] [anarcheuz/android-pocs](https://github.com/anarcheuz/android-pocs)
- [**27**星][2y] [JS] [anandtiwarics/datasploit](https://github.com/anandtiwarics/datasploit) A tool to perform various OSINT techniques, aggregate all the raw data, visualise it on a dashboard, and facilitate alerting and monitoring on the data.
+- [**27**星][2y] [Shell] [digivill/all-in-one-wifi-cracker](https://github.com/Digivill/All-in-One-WiFi-Cracker) Linux All in One Wifi Cracker
- [**27**星][1y] [alonemonkey/iosrebook-issues](https://github.com/alonemonkey/iosrebook-issues) 《iOS应用逆向与安全》 勘误
- [**27**星][1y] [C] [alex9191/zerobank-ring0-bundle](https://github.com/alex9191/zerobank-ring0-bundle) Kernel-Mode rootkit that connects to a remote server to send & recv commands
- [**27**星][11m] [Py] [al45tair/ds_store](https://github.com/al45tair/ds_store)
@@ -15198,148 +16354,154 @@ networking routines
- [**27**星][1y] [Py] [ajinabraham/poc](https://github.com/ajinabraham/poc) Proof of Concepts, Exploits
- [**27**星][8m] [Go] [ahhh/goredshell](https://github.com/ahhh/goredshell) A cross platform tool for verifying credentials and executing single commands
- [**27**星][8y] [Py] [9b/pdfxray_lite](https://github.com/9b/pdfxray_lite) Lite version of PDF X-RAY that uses no backend
-- [**27**星][2y] [PowerShell] [3gstudent/com-object-hijacking](https://github.com/3gstudent/com-object-hijacking) use COM Object hijacking to maintain persistence.(Hijack CAccPropServicesClass and MMDeviceEnumerator)
+- [**27**星][4m] [C#] [717021/pcmgr](https://github.com/717021/pcmgr) Windows 任务管理器重制版 A rebulid version for Windows task manager.
+- [**27**星][2y] [PS] [3gstudent/com-object-hijacking](https://github.com/3gstudent/com-object-hijacking) use COM Object hijacking to maintain persistence.(Hijack CAccPropServicesClass and MMDeviceEnumerator)
- [**27**星][2y] [C] [1ce0ear/dllloaderunpacker](https://github.com/1ce0ear/dllloaderunpacker)
- [**27**星][4y] [0xicf/scadashutdowntool](https://github.com/0xicf/scadashutdowntool)
- [**27**星][1y] [Py] [daniel_plohmann/simplifire.idascope](https://bitbucket.org/daniel_plohmann/simplifire.idascope) 简化恶意代码分析
-- [**26**星][2m] [bishopfox/cyberdic](https://github.com/bishopfox/cyberdic) An auxiliary spellcheck dictionary that corresponds with the Bishop Fox Cybersecurity Style Guide
-- [**26**星][12m] [C] [martin-ger/esp_peap_psk](https://github.com/martin-ger/esp_peap_psk) A WPA2-PEAP to WPA2-PSK converter
+- [**26**星][9m] [Rust] [felipenoris/hyper-reverse-proxy](https://github.com/felipenoris/hyper-reverse-proxy) A simple reverse proxy for use with Hyper and Tokio
+- [**26**星][1y] [C] [brucedone/darknet_demo](https://github.com/brucedone/darknet_demo) darknet yolov3 tiny train model demo
+- [**26**星][4m] [Swift] [itsjohnye/lead-ios](https://github.com/itsjohnye/lead-ios) a featherweight iOS SS proxy client with interactive UI
+- [**26**星][3y] [CSS] [cw1997/mysql-monitor](https://github.com/cw1997/mysql-monitor) MySQL服务器执行SQL记录实时监控(WEB版本)
+- [**26**星][1y] [C] [martin-ger/esp_peap_psk](https://github.com/martin-ger/esp_peap_psk) A WPA2-PEAP to WPA2-PSK converter
- [**26**星][4y] [C] [ufrisk/shellcode64](https://github.com/ufrisk/shellcode64) A minimal tool to extract shellcode from 64-bit PE binaries.
-- [**26**星][12d] [snail007/goproxy-cn](https://github.com/snail007/goproxy-cn) 高性能的http代理、https代理、socks5代理、ss代理、内网穿透、内网穿透p2p、内网穿透代理、内网穿透反向代理、内网穿透服务器、游戏盾、游戏高防、游戏代理,支持API代理认证。websocke代理、tcp代理、udp代理、socket代理、高仿服务器。支持正向代理、反向代理、透明代理、TCP内网穿透、UDP内网穿透、HTTP内网穿透、HTTPS内网穿透、https代理负载均衡、http代理负载均衡、socks5代理负载均衡、socket代理负载均衡、ss代理负载均衡、TCP/UDP端口映射、SSH中转、TLS加密传输、协议转换、防污染DNS代理,限速,限连接数。官方QQ交流群: 42805407。
- [**26**星][6y] [chokepoint/crunchpwn](https://github.com/chokepoint/crunchpwn) #Pwn Linux (CrunchPwn) is a penetration testing repository/addition for CrunchBang Linux.
+- [**26**星][20d] [Java] [snail007/goproxy-android](https://github.com/snail007/goproxy-android) snail007/goproxy全能代理服务器安卓版。高性能的http代理、https代理、socks5代理、ss代理、内网穿透、内网穿透p2p、内网穿透代理、内网穿透反向代理、内网穿透服务器、游戏盾、游戏高防、游戏代理,支持API代理认证。websocke代理、tcp代理、udp代理、socket代理、高仿服务器。支持正向代理、反向代理、透明代理、TCP内网穿透、UDP内网穿透、HTTP内网穿透、HTTPS内网穿透、https代理负载均衡、http代理负载均衡、socks5代理负载均衡、socket代理负载均衡、ss代理负载均衡、TCP/UDP端口映射、SSH中转、TLS加密传输、协议转换、防污染DNS代理,限速,限连接数。
- [**26**星][2y] [Java] [calebfenton/resequencer](https://github.com/calebfenton/resequencer) Configurable, flexible regex-based APK modification tool.
- [**26**星][2y] [Py] [epsylon/orb](https://github.com/epsylon/orb) Orb is a massive footprinting tool.
- [**26**星][1y] [Py] [honeynet/checkpot](https://github.com/honeynet/checkpot) Checkpot Honeypot Checker
- [**26**星][5y] [Py] [oros42/arp_poisoning_detector](https://github.com/oros42/arp_poisoning_detector) Simple detector of ARP poisoning attack
-- [**26**星][3y] [Objective-C] [nabla-c0d3/ios-reversing](https://github.com/nabla-c0d3/ios-reversing) Some iOS tools and scripts from 2014 for iOS reversing.
-- [**26**星][1m] [tidesec/auto_pentest_tool_course](https://github.com/tidesec/auto_pentest_tool_course) 《自动化漏洞挖掘技术实践》相关资料及脚本
+- [**26**星][1y] [Py] [corelan/certmon](https://github.com/corelan/certmon) Certificate Expiration Monitor script
+- [**26**星][3y] [ObjC] [nabla-c0d3/ios-reversing](https://github.com/nabla-c0d3/ios-reversing) Some iOS tools and scripts from 2014 for iOS reversing.
- [**26**星][2m] [C] [oracle/dtrace-utils](https://github.com/oracle/dtrace-utils) DTrace-utils contains the Userspace portion of the DTrace port to Linux
- [**26**星][3y] [Py] [juju/plugins](https://github.com/juju/plugins) Basic collection of the first few plugins for Juju
-- [**26**星][6m] [TypeScript] [igio90/frida-onload](https://github.com/igio90/frida-onload) Frida module to hook module initializations on android
- [**26**星][4y] [Shell] [infobyte/distro_checker](https://github.com/infobyte/distro_checker) Cross Distribution Exploit Testing
-- [**26**星][2m] [Shell] [trojan-gfw/trojan-quickstart](https://github.com/trojan-gfw/trojan-quickstart) A simple installation script for trojan server.
- [**26**星][4y] [Py] [snifer/gpt](https://github.com/snifer/gpt) Gadget Pentesting Tool Scripts
-- [**26**星][5m] [C#] [netspi/daft](https://github.com/netspi/daft) DAFT: Database Audit Framework & Toolkit
+- [**26**星][10m] [Py] [neo23x0/ti-falsepositives](https://github.com/neo23x0/ti-falsepositives) A collection of typical false positive indicators
- [**26**星][1y] [ctfd/plugins](https://github.com/ctfd/plugins) Official and Community CTFd Plugins
-- [**26**星][24d] [Py] [charlie-belmer/subdomain_recon](https://github.com/charlie-belmer/subdomain_recon) A subdomain reconnaissance scanner
-- [**26**星][18d] [C] [jovanbulck/0xbadc0de](https://github.com/jovanbulck/0xbadc0de) A Tale of Two Worlds: Assessing the Vulnerability of Enclave Shielding Runtimes
-- [**26**星][2y] [Shell] [digivill/all-in-one-wifi-cracker](https://github.com/digivill/all-in-one-wifi-cracker) Linux All in One Wifi Cracker
+- [**26**星][2y] [Java] [lamster2018/learnndk](https://github.com/lamster2018/learnndk) 学习jni及反调试策略
- [**26**星][1y] [Ruby] [ajitsing/apktojava](https://github.com/ajitsing/apktojava) View android apk as java code in gui
- [**26**星][2m] [PHP] [krowinski/tinyid](https://github.com/krowinski/tinyid) Shorten and obfuscate IDs
- [**26**星][2y] [C] [tokenrove/niffy](https://github.com/tokenrove/niffy) NIF testing harness
- [**26**星][5m] [Py] [k8gege/sshshell](https://github.com/k8gege/sshshell) sshshell/sshcmd/sshlogin/sshcrack(SSH交互式Shell/内网渗透专用非交互式Shell/SSH密码爆破)Windows & Linux
-- [**26**星][7m] [thomasking2014/slides](https://github.com/thomasking2014/slides)
+- [**26**星][7m] [Py] [bonnetn/vba-obfuscator](https://github.com/bonnetn/vba-obfuscator) 2018 School project - PoC of malware code obfuscation in Word macros
+- [**26**星][5d] [thomasking2014/slides](https://github.com/thomasking2014/slides)
- [**26**星][6m] [Java] [static-flow/directoryimporter](https://github.com/static-flow/directoryimporter) This is a Burpsuite plugin built to enable you to import your directory bruteforcing results into burp for easy viewing later. This is an alternative to proxying bruteforcing tools through burp to catch the results.
-- [**26**星][3m] [C++] [vulcainreo/dvid](https://github.com/vulcainreo/dvid) Damn Vulnerable IoT Device
- [**26**星][4y] [cure53/publications](https://github.com/cure53/publications)
- [**26**星][5m] [Py] [elevenpaths/pesto](https://github.com/elevenpaths/pesto)
-- [**26**星][2m] [grapheneos/os_issue_tracker](https://github.com/grapheneos/os_issue_tracker) Issue tracker for GrapheneOS Android Open Source Project hardening work. Standalone projects like Auditor, AttestationServer and hardened_malloc have their own dedicated trackers.
- [**26**星][2m] [HTML] [restincode/restincode](https://github.com/restincode/restincode) A memorial site for Hackers and Infosec people who have passed
- [**26**星][4y] [Py] [stratosphereips/stratospherewindowsips](https://github.com/stratosphereips/StratosphereWindowsIps) The Stratosphere IPS is a free software IPS that uses network behavior to detect and block malicious actions.
- [**26**星][3y] [Assembly] [cduplooy/rootkit](https://github.com/CDuPlooy/Rootkit)
+- [**26**星][2y] [C#] [fsecurelabs/athena](https://github.com/FSecureLABS/Athena) GUI Tool to generate threat intelligence information in various formats
- [**26**星][2y] [C++] [kernelm0de/runpe-processhollowing](https://github.com/kernelm0de/RunPE-ProcessHollowing) RunPE
-- [**26**星][10m] [JS] [1lastbr3ath/2ndorder](https://github.com/1lastBr3ath/S2O) Chrome extension to inspect and find domains that don't resolve or have expired
+- [**26**星][2m] [itechub/sqlmap-wiki-zhcn](https://github.com/itechub/sqlmap-wiki-zhcn)
- [**26**星][2y] [Py] [meliot/ryanair-seats](https://github.com/meliot/ryanair-seats) Tool to predict which seat you will have for free
-- [**26**星][2y] [tatsui-geek/malware-traffic-analysis.net](https://github.com/tatsui-geek/malware-traffic-analysis.net) Download pcap files from
+- [**26**星][22d] [Py] [joesecurity/jbxapi](https://github.com/joesecurity/jbxapi) Python API wrapper for the Joe Sandbox API.
- [**26**星][1y] [C] [fsecurelabs/incognito](https://github.com/FSecureLABS/incognito) One Token To Rule Them All
-- [**26**星][3y] [C] [zenware/bluemaho](https://github.com/zenware/bluemaho) BlueMaho is GUI-shell (interface) for suite of tools for testing security of bluetooth devices. It is freeware, opensource, written on python, uses wxPyhon. It can be used for testing BT-devices for known vulnerabilities and major thing to do – testing to find unknown vulns. Also it can form nice statistics.
- [**26**星][3y] [Java] [yolosec/upckeygen](https://github.com/yolosec/upckeygen) UPC router default WPA2 key generator
+- [**26**星][4y] [HTML] [xyntax/campus-fakeap](https://github.com/xyntax/campus-fakeap) 针对校园网的wifi钓鱼工具
+- [**26**星][1y] [C#] [xljiulang/debugviewer](https://github.com/xljiulang/debugviewer) 用于捕获任意进程调用System.Diagnostics.Debugger.Log (level,category,message)输出的调试内容
- [**26**星][2y] [Py] [xiphosresearch/smsisher](https://github.com/xiphosresearch/smsisher) SMS Phishing Tools
-- [**26**星][2y] [C] [x64dbg/plugintemplate](https://github.com/x64dbg/plugintemplate) Plugin template for x64dbg. Releases:
+- [**26**星][2m] [Py] [wybiral/shh](https://github.com/wybiral/shh) Create Tor hidden services in Python.
- [**26**星][5m] [Py] [wwkenwong/ctf-writeup](https://github.com/wwkenwong/ctf-writeup)
-- [**26**星][10m] [Shell] [wuseman/tg799vac-xtream-v16.2-jade](https://github.com/wuseman/tg799vac-xtream-v16.2-jade) My personal unique wiki for hacking the router firmware used by (Telia)TG799vac Xtream Version 16.2 Jade delivered from Technicolor
+- [**26**星][11m] [Shell] [wuseman/tg799vac-xtream-v16.2-jade](https://github.com/wuseman/tg799vac-xtream-v16.2-jade) My personal unique wiki for hacking the router firmware used by (Telia)TG799vac Xtream Version 16.2 Jade delivered from Technicolor
+- [**26**星][1m] [JS] [wuseman/sagemcom-fast-5370e-telia](https://github.com/wuseman/sagemcom-fast-5370e-telia) This is my personal wiki for hacking the router firmware used by (Sagemcom)F@ast Version 3.43.2 delivered from Sagemcom
- [**26**星][1m] [JS] [vulnogram/vulnogram](https://github.com/vulnogram/vulnogram) Vulnogram is a tool for creating and editing CVE information in CVE JSON format
- [**26**星][5m] [C] [visweswaran1998/cybergod-ksgmprh](https://github.com/visweswaran1998/cybergod-ksgmprh) An open-source antivirus for windows
- [**26**星][3y] [JS] [venables/node-where](https://github.com/venables/node-where) A very simple geolocation library in node.js
- [**26**星][1y] [Py] [v-p-b/windowsdefendertools](https://github.com/v-p-b/windowsdefendertools) Tools for instrumenting Windows Defender's mpengine.dll
- [**26**星][5y] [Java] [twilightgod/malwarebuster](https://github.com/twilightgod/malwarebuster) This is a Xposed module. It helps to prevent malwares to register service/receiver which were disabled in My Android Tools before.
+- [**26**星][2m] [Dockerfile] [trojan-gfw/trojan-docker](https://github.com/trojan-gfw/trojan-docker) Dockerfile for building a trojan docker image.
- [**26**星][4y] [Py] [tjcsec/ctf-platform](https://github.com/tjcsec/ctf-platform) A platform for running CTFs
- [**26**星][3y] [Py] [tiankonguse/themole](https://github.com/tiankonguse/themole) Mole is an automatic SQL Injection exploitation tool. clone from sourceforge
- [**26**星][4y] [Py] [threatminer/ioc_parser](https://github.com/threatminer/ioc_parser) Tool to extract indicators of compromise from security reports in PDF format
-- [**26**星][7m] [Py] [thombashi/pingparsing](https://github.com/thombashi/pingparsing) pingparsing is a CLI-tool/Python-library parser and transmitter for ping command output.
-- [**26**星][1y] [Py] [thesecondsun/pasm](https://github.com/thesecondsun/pasm) Linux assembler/disassembler based on Rasm2
- [**26**星][8m] [Py] [thehappydinoa/tp-link-defaults](https://github.com/thehappydinoa/tp-link-defaults) Python script for trying default passwords for some TP-Link Hotspots
- [**26**星][2y] [C++] [tamirzb/cve-2017-13253](https://github.com/tamirzb/cve-2017-13253) PoC code for CVE-2017-13253
- [**26**星][3m] [Perl] [t00sh/ctf](https://github.com/t00sh/ctf) Exploits used on hacking CTF's
- [**26**星][3y] [PHP] [symphonycms/xssfilter](https://github.com/symphonycms/xssfilter) An XSS filter for Events in Symphony CMS
- [**26**星][5y] [C++] [strobejb/sslhook](https://github.com/strobejb/sslhook) OpenSSL hooking
- [**26**星][2y] [C++] [strikerx3/whvpclient](https://github.com/strikerx3/whvpclient) Windows Hypervisor Platform client
-- [**26**星][11d] [Py] [strawp/random-scripts](https://github.com/strawp/random-scripts) Quick and dirty scripts that don't really belong in a larger project
+- [**26**星][13d] [Py] [strawp/random-scripts](https://github.com/strawp/random-scripts) Quick and dirty scripts that don't really belong in a larger project
- [**26**星][1m] [Py] [starnightcyber/findsubdomains](https://github.com/starnightcyber/findsubdomains) A tool finding sub-domains for penetesters
- [**26**星][7m] [C] [souhailhammou/panda-antivirus-lpe](https://github.com/souhailhammou/panda-antivirus-lpe) The exploit for Panda AV LPE
- [**26**星][6m] [JS] [soprasteria/cybersecurity-dfm](https://github.com/soprasteria/cybersecurity-dfm) Data Feed Manager (news watch orchestrator to predict topic with deepdetect and store cleaned text in elasticsearch)
- [**26**星][8m] [Py] [somerset-recon/blog](https://github.com/somerset-recon/blog) For code snippets and information
- [**26**星][4y] [PHP] [sinfocol/vboxdie-cracker](https://github.com/sinfocol/vboxdie-cracker) VirtualBox Disk Image Encryption password cracker
- [**26**星][9m] [Shell] [shverni/raspberry-pi-vpn-gateway](https://github.com/shverni/raspberry-pi-vpn-gateway) Raspberry Pi VPN gateway installer for Private Internet Access
-- [**26**星][3m] [C#] [shack2/swebscan](https://github.com/shack2/swebscan) SWebScan是一款基于C#的Web目录扫描器。
+- [**26**星][8m] [Ruby] [sensu-plugins/sensu-plugins-network-checks](https://github.com/sensu-plugins/sensu-plugins-network-checks) This plugin provides native network instrumentation for monitoring and metrics collection, including: hardware, TCP response, RBLs, whois, port status, and more.
- [**26**星][5y] [Shell] [seankaiser/automation-scripts](https://github.com/seankaiser/automation-scripts)
- [**26**星][1y] [Py] [ryaninf/cve-2018-2893](https://github.com/ryaninf/cve-2018-2893) CVE-2018-2893 PoC
- [**26**星][3y] [C++] [rwfpl/rewolf-pcausa-exploit](https://github.com/rwfpl/rewolf-pcausa-exploit) PCAUSA Rawether for Windows Local Privilege Escalation
- [**26**星][7m] [Py] [rofl0r/nat-tunnel](https://github.com/rofl0r/nat-tunnel) NAT Tunnel: to effortlessly serve from behind NAT
-- [**26**星][1y] [TypeScript] [robinyo/ionic-angular-schematics](https://github.com/robinyo/ionic-angular-schematics) Schematics for Ionic Angular
-- [**26**星][6m] [Shell] [rithvikvibhu/nh-magisk-wifi-firmware](https://github.com/rithvikvibhu/nh-magisk-wifi-firmware) This Magisk module adds the required firmware for external wireless adapters to be used with NetHunter.
- [**26**星][1m] [Ruby] [risksense-ops/metasploit-framework](https://github.com/risksense-ops/metasploit-framework) Metasploit Framework
- [**26**星][4m] [C++] [rischardv/riscv-alphanumeric-shellcoding](https://github.com/rischardv/riscv-alphanumeric-shellcoding) Alphanumeric+1 shellcoding tools for RISC-V
-- [**26**星][6m] [retarded-skid/skidsuite-3](https://github.com/retarded-skid/skidsuite-3) A collection of java reverse engineering tools and informational links
- [**26**星][4m] [Go] [releasel0ck/nettracer](https://github.com/releasel0ck/nettracer) This tool is used to map out the network data flow to help penetration testers identify potentially valuable targets.
-- [**26**星][2y] [re4lity/secpaper](https://github.com/re4lity/secpaper) SecurityPaper For
-- [**26**星][4y] [Objective-C] [qiuyuzhou/shadowsocks-ios](https://github.com/qiuyuzhou/shadowsocks-ios) No maintaining. Try this
+- [**26**星][8m] [C++] [rek7/descrypt-cpu-collision-cracker](https://github.com/rek7/descrypt-cpu-collision-cracker) DEScrypt CPU Collision Cracker
+- [**26**星][4y] [ObjC] [qiuyuzhou/shadowsocks-ios](https://github.com/qiuyuzhou/shadowsocks-ios) No maintaining. Try this
- [**26**星][3y] [Ruby] [qazbnm456/docker-war](https://github.com/qazbnm456/docker-war) Docker based Wargame Platform - To practice your CTF skills
- [**26**星][5m] [pushinginertia/ip-blacklist](https://github.com/pushinginertia/ip-blacklist) An Apache httpd configuration file that rejects access to a server from a list of blacklisted IPs
- [**26**星][1y] [C++] [psaneme/kung-fu-malware](https://github.com/psaneme/kung-fu-malware)
+- [**26**星][2y] [PHP] [probely/ctf-challenges](https://github.com/probely/ctf-challenges) Capture the flag challenges
- [**26**星][11m] [C] [plutonium-dbg/plutonium-dbg](https://github.com/plutonium-dbg/plutonium-dbg) Kernel-based debugger for Linux applications
- [**26**星][2y] [Py] [philarkwright/dga-detection](https://github.com/philarkwright/dga-detection) DGA Domain Detection using Bigram Frequency Analysis
+- [**26**星][1y] [Shell] [panjks/t-pot-autoinstall](https://github.com/panjks/t-pot-autoinstall) Autoinstall T-Pot on Ubuntu 16.04
- [**26**星][3y] [Java] [owasp/owaspbugbounty](https://github.com/owasp/owaspbugbounty) This is a container of web applications that work with OWASP Bug Bounty for Projects
- [**26**星][1y] [Py] [osmode/ddash](https://github.com/osmode/ddash) DDASH - Ethereum Operating System for Knowledge Creation and Sharing
- [**26**星][4y] [Py] [open-nsm/dockoo](https://github.com/open-nsm/dockoo) Malware analysis using Docker project
- [**26**星][10m] [JS] [onrik/django-webshell](https://github.com/onrik/django-webshell) Django application for running python code in your project's environment from django admin.
- [**26**星][8m] [C++] [offlinej/ida-rpc](https://github.com/offlinej/ida-rpc) Discord rich presence plugin for IDA Pro 7.0
- [**26**星][3m] [JS] [nowsecure/frida-uikit](https://github.com/nowsecure/frida-uikit) Inspect and manipulate UIKit-based GUIs through Frida.
-- [**26**星][1y] [C++] [notscimmy/libelevate](https://github.com/notscimmy/libelevate) Handle elevation DKOM against ObRegisterCallbacks
- [**26**星][2m] [Shell] [noob-hackers/kalimux](https://github.com/noob-hackers/kalimux) Install kali linux in termux with desktop environment from kalimux oneclick installation tool no root required
- [**26**星][2m] [Rust] [nixpulvis/oursh](https://github.com/nixpulvis/oursh) Your comrade through the perilous world of UNIX.
- [**26**星][7y] [C++] [neuroo/pinpy](https://github.com/neuroo/pinpy) Detours from binaries method entry/exit point to Python scripts (PIN, CPython API)
-- [**26**星][3y] [Py] [mzweilin/ipv6-attack-detector](https://github.com/mzweilin/ipv6-attack-detector) Google Summer of Code 2012 project, supported by The Honeynet Project organization.
- [**26**星][2y] [Py] [murmus/ctf](https://github.com/murmus/ctf)
-- [**26**星][2y] [Py] [mrts/burp-suite-http-proxy-history-converter](https://github.com/mrts/burp-suite-http-proxy-history-converter) Python script that converts Burp Suite HTTP proxy history files to CSV or HTML
- [**26**星][9m] [HTML] [mpgn/cve-2019-9580](https://github.com/mpgn/cve-2019-9580) CVE-2019-9580 - StackStorm: exploiting CORS misconfiguration (null origin) to gain RCE
-- [**26**星][1y] [Rust] [mortendahl/rust-paillier](https://github.com/mortendahl/rust-paillier) A pure-Rust implementation of the Paillier encryption scheme
- [**26**星][3y] [C] [monosource/radare2-explorations-binaries](https://github.com/monosource/radare2-explorations-binaries) Supplement to radare2-explorations.
- [**26**星][11m] [Perl] [modernistik/nmap-parser](https://github.com/modernistik/nmap-parser) Parse nmap scan data with Perl (official repo)
-- [**26**星][12m] [TypeScript] [mitre/attack-navigator](https://github.com/mitre/attack-navigator) ATT&CK导航/浏览工具. 以表格形式显示ATT&CK各种技术, 并执行某些操作. 基于Angular
-- [**26**星][3m] [Shell] [misp/misp-vagrant](https://github.com/misp/misp-vagrant) Deploy MISP Project software with Vagrant.
+- [**26**星][12m] [TS] [mitre/attack-navigator](https://github.com/mitre/attack-navigator) ATT&CK导航/浏览工具. 以表格形式显示ATT&CK各种技术, 并执行某些操作. 基于Angular
+- [**26**星][4m] [Shell] [misp/misp-vagrant](https://github.com/misp/misp-vagrant) Deploy MISP Project software with Vagrant.
- [**26**星][10m] [C++] [michmich/analogvoltmeterclock](https://github.com/michmich/analogvoltmeterclock) An Arduino based analog volt meter clock.
+- [**26**星][2y] [Py] [mgeeky/visualbasicobfuscator](https://github.com/mgeeky/visualbasicobfuscator) Visual Basic Code universal Obfuscator intended to be used during penetration testing assignments.
+- [**26**星][1y] [Py] [mdsecactivebreach/lambda-webbugs](https://github.com/mdsecactivebreach/lambda-webbugs) A proof of concept for delivering webbugs via AWS lambda
- [**26**星][5y] [Py] [matonis/rippe](https://github.com/matonis/rippe) ripPE - section extractor and profiler for PE file analysis
- [**26**星][2m] [Rust] [marcograss/rust-kernelcache-extractor](https://github.com/marcograss/rust-kernelcache-extractor) Extract a decrypted iOS 64-bit kernelcache
- [**26**星][3y] [C++] [marcnewlin/mousejack-nes-controller](https://github.com/marcnewlin/mousejack-nes-controller) MouseJack NES controller firmware and build guide.
+- [**26**星][3y] [Py] [mandatoryprogrammer/xcname](https://github.com/mandatoryprogrammer/xcname) A tool for enumerating expired domains in CNAME records
- [**26**星][3y] [lucifer1993/awesome-hacking](https://github.com/lucifer1993/awesome-hacking) awesome hacking chinese version
-- [**26**星][3m] [PowerShell] [loadenmb/tvasion](https://github.com/loadenmb/tvasion)
+- [**26**星][2m] [HTML] [locomotive-crypto/crypto_book_1st](https://github.com/locomotive-crypto/crypto_book_1st) 《深入浅出CryptoPP密码学库》随书电子文档
- [**26**星][2y] [PHP] [lloricode/ci-capstone](https://github.com/lloricode/ci-capstone) Enrollment System with CodeIgniter
- [**26**星][5y] [C#] [lennyleng/radioeye](https://github.com/lennyleng/radioeye) RFID Security Audit Tool
- [**26**星][6y] [C] [kacheo/kernelrootkit](https://github.com/kacheo/kernelrootkit) Linux kernel rootkit to hide certain files and processes.
-- [**26**星][7m] [C++] [slyd0g/timestomper](https://github.com/slyd0g/TimeStomper) PoC that manipulates Windows file times using SetFileTime() API
+- [**26**星][5y] [Py] [joxeankoret/mynav](https://github.com/joxeankoret/mynav) Automatically exported from code.google.com/p/mynav
+- [**26**星][2m] [Py] [joshzelonis/attack-eval-scoring](https://github.com/joshzelonis/attack-eval-scoring)
- [**26**星][9m] [Py] [joda32/got-responded](https://github.com/joda32/got-responded) A simple tool to detect NBT-NS and LLMNR spoofing (and messing with them a bit)
- [**26**星][2y] [Py] [jlospinoso/unfurl](https://github.com/jlospinoso/unfurl) An Entropy-Based Link Vulnerability Tool
- [**26**星][7y] [C++] [jingpu/pintools](https://github.com/jingpu/pintools)
- [**26**星][4y] [jgamblin/hackapie](https://github.com/jgamblin/hackapie) An Raspberry PI 2 OpenWRT Image Setup To Be A Wireless Hacking Sandbox
- [**26**星][2y] [Shell] [jgamblin/defensive-s3-buckets](https://github.com/jgamblin/defensive-s3-buckets) Defensive S3 Bucket Squating
-- [**26**星][11d] [Java] [jenkinsci/remoting-kafka-plugin](https://github.com/jenkinsci/remoting-kafka-plugin) Jenkins Remoting over Kafka
- [**26**星][2y] [Shell] [jchrisfarris/aws-service-control-policies](https://github.com/jchrisfarris/aws-service-control-policies) Collection of semi-useful Service Control Policies and scripts to manage them
- [**26**星][1y] [JS] [ioactive/bluecrawl](https://github.com/ioactive/bluecrawl) Frida (Android) Script for extracting bluetooth information
- [**26**星][2m] [Py] [initstring/pentest-tools](https://github.com/initstring/pentest-tools) General stuff for pentesting - password cracking, phishing, automation, Kali, etc.
- [**26**星][3y] [C++] [ilyatk/hookengine](https://github.com/ilyatk/hookengine)
+- [**26**星][1y] [Py] [ihack4falafel/slink](https://github.com/ihack4falafel/slink) Alphanumeric Shellcode (x86) Encoder
- [**26**星][3y] [Py] [hydrabus/rhme-2016](https://github.com/hydrabus/rhme-2016) The RHme2 (Riscure Hack me 2) is a low level hardware CTF challenge that comes in the form of an Arduino Nano board. The new edition provides a completely different set of new challenges to test your skills in side channel, fault injection, cryptoanalysis and software exploitation attacks.
- [**26**星][4y] [Shell] [hrishioa/nomohead](https://github.com/hrishioa/nomohead) Simple Bash script that announces IP Address and ngrok tunnel of Raspberry Pi at boot
+- [**26**星][2y] [R] [hrbrmstr/crafter](https://github.com/hrbrmstr/crafter) Analyze and Visualize Network Packet Capture (PCAP) Files
- [**26**星][3y] [C++] [hpsocket/restclient-cpp](https://github.com/hpsocket/restclient-cpp) C++ winnet/winhttp api restclient
- [**26**星][1m] [Py] [hiddenillusion/ir](https://github.com/hiddenillusion/ir) Some dfir stuff
- [**26**星][1y] [Shell] [hestat/minerchk](https://github.com/hestat/minerchk) Bash script to Check for malicious Cryptomining
+- [**26**星][6m] [Java] [hakbot/hakbot-origin-controller](https://github.com/hakbot/hakbot-origin-controller) Vendor-Neutral Security Tool Automation Controller (over REST)
- [**26**星][3y] [Assembly] [gyje/bios_rootkit](https://github.com/gyje/bios_rootkit) 来自Freebuf评论区,一个UEFI马.
+- [**26**星][2y] [Go] [grocid/passdesktop](https://github.com/grocid/passdesktop)
- [**26**星][4y] [C] [gregwar/mitm](https://github.com/gregwar/mitm) Man in the middle tool
-- [**26**星][7d] [Py] [greenbone/python-gvm](https://github.com/greenbone/python-gvm) Greenbone Vulnerability Management Python Library
+- [**26**星][10m] [Kotlin] [gosecure/burp-ntlm-challenge-decoder](https://github.com/gosecure/burp-ntlm-challenge-decoder) Burp extension to decode NTLM SSP headers and extract domain/host information
- [**26**星][7m] [Groovy] [gmacario/easy-jenkins](https://github.com/gmacario/easy-jenkins) Easily deploy a Jenkins CI/CD infrastructure via docker-compose
+- [**26**星][6m] [Py] [githacktools/githacktools](https://github.com/githacktools/githacktools) The best Hacking and PenTesting tools installer on the world
- [**26**星][3m] [Py] [ghassani/mclf-ida-loader](https://github.com/ghassani/mclf-ida-loader) An IDA file loader for Mobicore trustlet and driver binaries
+- [**26**星][3m] [C++] [frida/frida-clr](https://github.com/frida/frida-clr) Frida .NET bindings
- [**26**星][1y] [HTML] [flyrabbit/winproject](https://github.com/flyrabbit/winproject) Hook, DLLInject, PE_Tool
- [**26**星][5y] [Py] [fireeye/pycommands](https://github.com/fireeye/pycommands) PyCommand Scripts for Immunity Debugger
+- [**26**星][4y] [Py] [fengxuangit/pyshell](https://github.com/fengxuangit/pyshell) python版菜刀 连接一句话木马
- [**26**星][3m] [Pascal] [felipedaragon/catarinka](https://github.com/felipedaragon/catarinka) A powerful set of multi-purpose libraries for Pascal/Delphi and Lua
- [**26**星][9m] [C] [eternityx/deadcell-oshgui](https://github.com/eternityx/deadcell-oshgui) OSHGui project files
- [**26**星][8m] [Shell] [ericpskl/exportec2volumeimage](https://github.com/ericpskl/exportec2volumeimage) A Bash script which uses AWS CLI to create an image of an AWS EC2 volume
@@ -15348,26 +16510,28 @@ networking routines
- [**26**星][3y] [Go] [egebalci/ticketbleed](https://github.com/egebalci/ticketbleed) This is a tool for exploiting Ticketbleed (CVE-2016-9244) vulnerability.
- [**26**星][1y] [eclypsium/publications](https://github.com/eclypsium/publications) Slides, papers, etc
- [**26**星][7m] [ebiquity/unified-cybersecurity-ontology](https://github.com/ebiquity/unified-cybersecurity-ontology) Unified Cybersecurity Ontology
-- [**26**星][6m] [HTML] [divyanshusahu/minictf](https://github.com/divyanshusahu/minictf) A platform build in django for hosting CTF events.
+- [**26**星][4y] [Py] [dinotools/pysslscan](https://github.com/dinotools/pysslscan) Framework and command-line tool to scan SSL enabled services
- [**26**星][4y] [C++] [dfct/inssidious](https://github.com/dfct/inssidious) A uniquely frustrating wireless network.
- [**26**星][5m] [HTML] [devnetsandbox/sbx_multi_ios](https://github.com/devnetsandbox/sbx_multi_ios) Sample code, examples, and resources for use with the DevNet Multi-IOS Sandbox
- [**26**星][1y] [Ruby] [dev-sec/chef-postgres-hardening](https://github.com/dev-sec/chef-postgres-hardening) This chef cookbook provides security configuration for PostgreSQL.
+- [**26**星][2m] [Ruby] [david942j/rbelftools](https://github.com/david942j/rbelftools) ELF parser library implemented in pure Ruby!
- [**26**星][2y] [Py] [danmcinerney/smb-autopwn](https://github.com/danmcinerney/smb-autopwn) Discovers and exploits hosts vulnerable to MS08-067/MS17-010
- [**26**星][2y] [C] [danghvu/nginx-1.4.0](https://github.com/danghvu/nginx-1.4.0) For the analysis of CVE-2013-2028
- [**26**星][4y] [Py] [cyberhatcoil/acf](https://github.com/cyberhatcoil/acf) Android Connections Forensics
- [**26**星][1y] [C++] [cyanidee/snowflake](https://github.com/cyanidee/snowflake) A simple CSGO cheat base written in mind of begginers.
- [**26**星][2y] [C++] [cuitche/code-obfuscation](https://github.com/cuitche/code-obfuscation) 一款iOS代码混淆工具(A code obfuscation tool for iOS.)
- [**26**星][2y] [Shell] [crackpkcs12/crackpkcs12](https://github.com/crackpkcs12/crackpkcs12) A multithreaded program to crack PKCS#12 files (p12 and pfx extensions)
+- [**26**星][3m] [Go] [cpl/cryptor](https://github.com/cpl/cryptor) Privacy, Anonymity, Freedom - P2P network
- [**26**星][1y] [C++] [cpasjuste/scummvm](https://github.com/cpasjuste/scummvm) ScummVM main repository
+- [**26**星][12m] [C#] [cocowalla/snifter](https://github.com/cocowalla/snifter) Snifter is a raw socket IP packet capturing tool for Windows, with a tiny CPU and memory footprint
- [**26**星][4y] [Py] [cleveridge/cleveridge-subdomain-scanner](https://github.com/cleveridge/cleveridge-subdomain-scanner) The Cleveridge Subdomain Scanner finds subdomains of a given domain.
- [**26**星][12m] [Py] [chrisjd20/power_dump](https://github.com/chrisjd20/power_dump) powershell memory dumper
- [**26**星][4y] [JS] [chaitin/sqlchop-http-proxy](https://github.com/chaitin/sqlchop-http-proxy) SQLChop reverse http proxy module
- [**26**星][9m] [Py] [byt3bl33d3r/dnschef](https://github.com/byt3bl33d3r/dnschef) DNSChef - DNS proxy for Penetration Testers and Malware Analysts
- [**26**星][1y] [brute-f0rce/ceh](https://github.com/brute-f0rce/ceh) Exam Prep for the Ec-council Certified Ethical Hacker 312-50
- [**26**星][7y] [Py] [bozhu/rc4-python](https://github.com/bozhu/rc4-python) A python implementation of the block cipher RC4
-- [**26**星][1y] [Objective-C] [boxproject/box-staff-manager](https://github.com/boxproject/box-staff-manager) Employee App is used for initialize transactions, user management, authorise flow so that enteripise digital assets can be managed by stakeholders and partners.
-- [**26**星][1m] [blackbagtech/sleuthkit-apfs](https://github.com/blackbagtech/sleuthkit-apfs) A fork of The Sleuthkit with Pooled Storage and APFS support. See
-- [**26**星][6y] [Py] [bl4ckic3/modbus-fuzzer](https://github.com/bl4ckic3/modbus-fuzzer) Modbus Protocol Fuzzer
+- [**26**星][1y] [ObjC] [boxproject/box-staff-manager](https://github.com/boxproject/box-staff-manager) Employee App is used for initialize transactions, user management, authorise flow so that enteripise digital assets can be managed by stakeholders and partners.
+- [**26**星][2m] [blackbagtech/sleuthkit-apfs](https://github.com/blackbagtech/sleuthkit-apfs) A fork of The Sleuthkit with Pooled Storage and APFS support. See
- [**26**星][2y] [JS] [bkimminich/webappsec-nutshell](https://github.com/bkimminich/webappsec-nutshell) An ultra-compact intro (or refresher) to Web Application Security.
- [**26**星][2y] [Py] [bipabo1l/ssrf_scan](https://github.com/bipabo1l/ssrf_scan) 多线程批量扫描ssrf漏洞
- [**26**星][2y] [Go] [benjojo/traceroute-haiku](https://github.com/benjojo/traceroute-haiku) A thing you can traceroute and it gives you a haiku inside the trace
@@ -15377,70 +16541,86 @@ networking routines
- [**26**星][7y] [C++] [avalon1610/lpc](https://github.com/avalon1610/lpc) windows LPC library
- [**26**星][4y] [atktgs/blackhat2015arsenal](https://github.com/atktgs/blackhat2015arsenal) My Quick Note of BlackHat 2015 Arsenal
- [**26**星][3y] [astocko/json-x86-64](https://github.com/astocko/json-x86-64) x86-64 Intel instruction set in JSON format
-- [**26**星][8d] [C] [armfazh/rfc7748_precomputed](https://github.com/armfazh/rfc7748_precomputed) Updated! (Dec2-2019) This is a C-language software library that provides optimized implementations of the Diffie-Hellman functions known as X25519 and X448 (RFC-7748) for 64-bit architectures.
-- [**26**星][7m] [JS] [antville/antville](https://github.com/antville/antville) The Queen Mum of Weblog Hosting Systems – written in JavaScript since 2001.
+- [**26**星][2m] [Rust] [arosspope/cipher-crypt](https://github.com/arosspope/cipher-crypt) A cryptographic tomb of ciphers forgotten by time.
+- [**26**星][10d] [C] [armfazh/rfc7748_precomputed](https://github.com/armfazh/rfc7748_precomputed) Updated! (Dec2-2019) This is a C-language software library that provides optimized implementations of the Diffie-Hellman functions known as X25519 and X448 (RFC-7748) for 64-bit architectures.
- [**26**星][2y] [Py] [aniketp/network-programming](https://github.com/aniketp/network-programming) Small Projects on Socket Programming, Website Scanning, Wireless & Network Security
- [**26**星][2y] [Jupyter Notebook] [andykamath/nfl-data-hacking](https://github.com/andykamath/nfl-data-hacking) Algorithmically draft NFL players for your fantasy league!
- [**26**星][2y] [Py] [androidtamer/frida-push](https://github.com/androidtamer/frida-push) Wrapper tool to identify the remote device and push device specific frida-server binary.
-- [**26**星][5m] [Py] [andreafioraldi/angrdbg](https://github.com/andreafioraldi/angrdbg) Abstract library to generate angr states from a debugger state
-- [**26**星][2y] [Shell] [digivill/all-in-one-wifi-cracker](https://github.com/Digivill/All-in-One-WiFi-Cracker) Linux All in One Wifi Cracker
+- [**26**星][6m] [Py] [andreafioraldi/angrdbg](https://github.com/andreafioraldi/angrdbg) Abstract library to generate angr states from a debugger state
- [**26**星][2y] [JS] [an0ny420/ps4-4.0x--4.05-code-execution-poc](https://github.com/an0ny420/ps4-4.0x--4.05-code-execution-poc) 4.05 added support
- [**26**星][3y] [C] [alpackers/ctf-writeups](https://github.com/alpackers/ctf-writeups) CTF Writeups
- [**26**星][5y] [Py] [alfarom/nmap](https://github.com/alfarom/nmap) python nmap tool to scan hosts and search
for CVE details based on the nmap report.
- [**26**星][2y] [Py] [alfa100001/-cve-2017-0785-blueborne-poc](https://github.com/alfa100001/-cve-2017-0785-blueborne-poc) CVE-2017-0785 BlueBorne PoC
- [**26**星][3y] [JS] [alexhorn/defendjs](https://github.com/alexhorn/defendjs) A free and open source JavaScript and Node.js obfuscator.
+- [**26**星][2y] [Py] [alanshaw-github/minimips](https://github.com/alanshaw-github/minimips) Introducing the new lightweight MIPS Assembler and Disassembler, supporting syntax highlighting, code editing, file dragging and dropping, debug mode, assembly and disassembly, Molokai color matching style. Full platform support including Windows, macOS and Linux. Star now! Keep updating!
- [**26**星][1y] [C] [aircrack-ng/openwips-ng](https://github.com/aircrack-ng/openwips-ng) OpenWIPS-ng is an open source and modular Wireless IPS (Intrusion Prevention System)
- [**26**星][5m] [Shell] [adon90/ip2hosts](https://github.com/adon90/ip2hosts) Dirty bash script to obtain hosts given an IP address
-- [**26**星][21d] [Shell] [adnanhodzic/anon-hotspot](https://github.com/adnanhodzic/anon-hotspot) On demand Debian Linux (Tor) Hotspot setup tool
-- [**26**星][4m] [C#] [717021/pcmgr](https://github.com/717021/pcmgr) Windows 任务管理器重制版 A rebulid version for Windows task manager.
+- [**26**星][23d] [Shell] [adnanhodzic/anon-hotspot](https://github.com/adnanhodzic/anon-hotspot) On demand Debian Linux (Tor) Hotspot setup tool
+- [**26**星][2y] [Py] [adanvillarreal/spydan](https://github.com/adanvillarreal/spydan) A web spider for shodan.io without using the Developer API.
- [**26**星][2y] [C] [5h311-1nj3c706/local-root-exploits](https://github.com/5h311-1nj3c706/local-root-exploits) LOCAL ROOT EXPLOITS
+- [**26**星][2y] [C++] [3gstudent/hiddenntregistry](https://github.com/3gstudent/hiddenntregistry) Use NT Native Registry API to create a registry that normal user can not query.
- [**26**星][2y] [JS] [0xsobky/regaxor](https://github.com/0xsobky/regaxor) A regular expression fuzzer.
+- [**26**星][2m] [Lua] [0x4d31/hassh-utils](https://github.com/0x4d31/hassh-utils) Nmap NSE Script and Docker image for HASSH - the SSH client/server fingerprinting method (
+- [**25**星][1y] [ObjC] [skifary/c4msis](https://github.com/skifary/c4msis) ios shadowsocks app based on NEKit
+- [**25**星][13d] [Py] [eth-sri/ilf](https://github.com/eth-sri/ilf) AI based fuzzer based on imitation learning
+- [**25**星][6y] [C++] [stealth/pam_schroedinger](https://github.com/stealth/pam_schroedinger) Uncertainty for brute forcers during login.
- [**25**星][6m] [Py] [mozillasecurity/avalanche](https://github.com/mozillasecurity/avalanche) Avalanche is a document generator which uses context-free grammars to generate randomized outputs for fuzz-testing.
-- [**25**星][21d] [Shell] [pirate/fish-functions](https://github.com/pirate/fish-functions)
+- [**25**星][23d] [Shell] [pirate/fish-functions](https://github.com/pirate/fish-functions)
- [**25**星][4m] [Py] [mozillasecurity/laniakea](https://github.com/mozillasecurity/laniakea) Laniakea is a utility for managing instances at various cloud providers and aids in setting up a fuzzing cluster.
- [**25**星][3m] [Py] [jgamblin/kali-virtualbox](https://github.com/jgamblin/kali-virtualbox) A Python Script To Automatically Download, Provision and Update a Kali Linux VM in Virtualbox
+- [**25**星][4d] [Ruby] [intrigueio/intrigue-ident](https://github.com/intrigueio/intrigue-ident) Asset Fingerprinting Library
- [**25**星][1y] [C#] [fuzzysecurity/dotnettojscript-languagemodebreakout](https://github.com/fuzzysecurity/dotnettojscript-languagemodebreakout)
- [**25**星][3y] [wtsxdev/application-security](https://github.com/wtsxdev/application-security) Resources for learning about application security
- [**25**星][6y] [C#] [isecpartners/peachfarmer](https://github.com/isecpartners/peachfarmer) A log collector for Peach fuzzing in the cloud
+- [**25**星][8y] [C++] [cr4sh/simpleunpacker](https://github.com/cr4sh/simpleunpacker) Simple tool for unpacking packed/protected malware executables.
- [**25**星][8m] [C++] [hikariobfuscator/noctilucence](https://github.com/hikariobfuscator/noctilucence) Embedded Bitcode Recompiler
+- [**25**星][2y] [Py] [jpcertcc/strelok](https://github.com/jpcertcc/strelok) Application for STIX v2.0 objects management and analysis
- [**25**星][1y] [HTML] [649/crash-ios-exploit](https://github.com/649/crash-ios-exploit) Repository dedicated to storing a multitude of iOS/macOS/OSX/watchOS crash bugs. Some samples need to be viewed as raw in order to see the Unicode. Please do not intentionally abuse these exploits.
- [**25**星][4y] [Py] [averagesecurityguy/scapy](https://github.com/averagesecurityguy/scapy) Scapy Presentation and Code
-- [**25**星][26d] [CSS] [flatpak/flatpak.github.io](https://github.com/flatpak/flatpak.github.io) Flatpak website
+- [**25**星][28d] [CSS] [flatpak/flatpak.github.io](https://github.com/flatpak/flatpak.github.io) Flatpak website
- [**25**星][3y] [gdbinit/adium-ng-preview](https://github.com/gdbinit/adium-ng-preview) Repo to dump some preview info and builds for adium-ng
-- [**25**星][3y] [Objective-C] [kpwn/rapd2](https://github.com/kpwn/rapd2) simple radare2 rap:// server
+- [**25**星][6m] [Py] [pyauth/pywarp](https://github.com/pyauth/pywarp) Python WebAuthn Relying Party library
+- [**25**星][2m] [Go] [influxdata/wirey](https://github.com/influxdata/wirey) Manage local wireguard interfaces in a distributed system
+- [**25**星][8m] [offensive-security/gcc-arm-linux-gnueabihf-4.7](https://github.com/offensive-security/gcc-arm-linux-gnueabihf-4.7) gcc-arm-linux-gnueabihf-4.7/
+- [**25**星][3y] [ObjC] [kpwn/rapd2](https://github.com/kpwn/rapd2) simple radare2 rap:// server
+- [**25**星][15d] [JS] [fsecurelabs/android-keystore-audit](https://github.com/fsecurelabs/android-keystore-audit)
- [**25**星][2m] [Go] [banzaicloud/dast-operator](https://github.com/banzaicloud/dast-operator) Dynamic Application Security Testing
- [**25**星][8m] [offensive-security/kali-linux-docker-rolling](https://github.com/offensive-security/kali-linux-docker-rolling)
- [**25**星][6y] [Py] [opensecurityresearch/custompassivescanner](https://github.com/opensecurityresearch/custompassivescanner) A Custom Scanner for Burp
+- [**25**星][2m] [starnightcyber/subdomains](https://github.com/starnightcyber/subdomains) 互联网公司子域名收集
- [**25**星][2y] [C#] [zjyl1994/v2switcher](https://github.com/zjyl1994/v2switcher) 极简V2Ray配置切换器,拯救多线用户
-- [**25**星][11m] [Visual Basic] [modify24x7/ultimate-advanced-apktool](https://github.com/modify24x7/ultimate-advanced-apktool) v4.1
+- [**25**星][11m] [Visual Basic .NET] [modify24x7/ultimate-advanced-apktool](https://github.com/modify24x7/ultimate-advanced-apktool) v4.1
- [**25**星][6y] [C] [kylekirkby/python-exploit-search-tool](https://github.com/kylekirkby/python-exploit-search-tool) A search tool that searches Offensive Securitys Exploit-db and Shodans Exploit DB using their API.
- [**25**星][9m] [Assembly] [thog/ghidra_falcon](https://github.com/thog/ghidra_falcon) Support of Nvidia Falcon processors for Ghidra (WIP)
- [**25**星][10m] [Rust] [archer884/harsh](https://github.com/archer884/harsh) Hashids implementation in Rust
- [**25**星][4y] [C++] [vivek-ramachandran/wi-door](https://github.com/vivek-ramachandran/wi-door) Wi-Fi Backdoors
- [**25**星][9y] [C] [clockfort/wifi-locator](https://github.com/clockfort/wifi-locator) Determines physical location of station judging from 802.11 beacons' BSSID/Signal/Noise/Quality information.
-- [**25**星][3m] [security-prince/resources-for-application-security](https://github.com/security-prince/Resources-for-Application-Security) Some good resources for getting started with application security
+- [**25**星][2d] [security-prince/resources-for-application-security](https://github.com/security-prince/Resources-for-Application-Security) Some good resources for getting started with application security
+- [**25**星][3m] [JS] [lanmaster53/cef](https://github.com/lanmaster53/cef) Proof-of-concept CORS exploitation tool.
- [**25**星][2m] [C++] [3xpl017/linpwn](https://github.com/3xpl017/linpwn) Interactive Post Exploitation Tool
-- [**25**星][3m] [security-prince/resources-for-application-security](https://github.com/security-prince/resources-for-application-security) Some good resources for getting started with application security
+- [**25**星][2d] [security-prince/resources-for-application-security](https://github.com/security-prince/resources-for-application-security) Some good resources for getting started with application security
+- [**25**星][2m] [HTML] [trojan-tutor/trojan-tutor.github.io](https://github.com/trojan-tutor/trojan-tutor.github.io) trojan 教程 自建梯子教程 trojan教程 trojan-gfw 科学上网 代理工具 翻墙 Ubuntu Debian 小白教程 https伪装
- [**25**星][2m] [C] [airbus-cert/pstrace](https://github.com/airbus-cert/pstrace) Trace ScriptBlock execution for powershell v2
- [**25**星][1y] [Py] [avicoder/hackerone](https://github.com/avicoder/Hackerone) Hackerone disclosed report URL Aggregator
- [**25**星][3y] [monsterzer0/cyber-security-guide](https://github.com/monsterzer0/Cyber-Security-Guide) The Whitepaper For Enterprise Security created by Monster Zero Team
- [**25**星][2y] [retbandit-zz/blackhat2017](https://github.com/retbandit-zz/BlackHat2017) BlackHat Europe 2017 Slides
-- [**25**星][2y] [C#] [fsecurelabs/athena](https://github.com/FSecureLABS/Athena) GUI Tool to generate threat intelligence information in various formats
-- [**25**星][3m] [Py] [blacknbunny/encdecshellcode](https://github.com/blacknbunny/encdecshellcode) Shellcode Encrypter & Decrypter With XOR Cipher
-- [**25**星][1y] [Jupyter Notebook] [aicoe/prometheus-data-science](https://github.com/AICoE/prometheus-data-science) A collection of analysis, analytics, and machine learning techniques for time series forecasting w/ Prometheus metrics
-- [**25**星][2m] [itechub/sqlmap-wiki-zhcn](https://github.com/itechub/sqlmap-wiki-zhcn)
-- [**25**星][14d] [PHP] [backdoorhub/shell-backdoor-list](https://github.com/backdoorhub/shell-backdoor-list)
+- [**25**星][5y] [Py] [5ee/socialengineerdbuilder](https://github.com/5ee/SocialEngineerDBuilder) 整理社工库的工具
+- [**25**星][4m] [Py] [blacknbunny/encdecshellcode](https://github.com/blacknbunny/encdecshellcode) Shellcode Encrypter & Decrypter With XOR Cipher
+- [**25**星][2y] [Py] [loveraven42/tools](https://github.com/loveraven42/tools) 渗透所用小工具以及poc
- [**25**星][6y] [C] [whyallyn/paythepony](https://github.com/whyallyn/paythepony) Pay the Pony is hilarityware that uses the Reflective DLL injection library to inject into a remote process, encrypt and demand a ransom for files, and inflict My Little Pony madness on a system.
- [**25**星][4y] [C] [riswandans/litesploit](https://github.com/riswandans/litesploit) library and intepreter for penetration testing tools
- [**25**星][3y] [zyrikby/android_permission_evolution](https://github.com/zyrikby/android_permission_evolution) Analysis of the evolution of Android permissions. This repository contains the results presented in the paper "Small Changes, Big Changes: An Updated View on the Android Permission System".
- [**25**星][3y] [Py] [zyantific/continuum](https://github.com/zyantific/continuum) Plugin adding multi-binary project support to IDA Pro (WIP)
- [**25**星][5y] [Py] [zhengmin1989/droidanalytics](https://github.com/zhengmin1989/droidanalytics) linux version (rewrite in Python)
-- [**25**星][15d] [Py] [yannayl/ctf-writeups](https://github.com/yannayl/ctf-writeups) Write ups of solution for CTF challenges I solved
+- [**25**星][17d] [Py] [yannayl/ctf-writeups](https://github.com/yannayl/ctf-writeups) Write ups of solution for CTF challenges I solved
- [**25**星][2y] [Py] [xme/emlrender](https://github.com/xme/emlrender) EML file rendering tool
- [**25**星][9m] [Py] [xmcp/acfan](https://github.com/xmcp/acfan) 名副其实的自动AC机
- [**25**星][4y] [Py] [xfkxfk/pyvulhunter](https://github.com/xfkxfk/pyvulhunter) python audit tool 审计 注入 inject
+- [**25**星][2m] [Py] [xebia/mobilehacktools](https://github.com/xebia/mobilehacktools) A repository for scripting a mobile attack toolchain
- [**25**星][5y] [wirelesscollege/securitytools](https://github.com/wirelesscollege/securitytools) android安全工具大全
+- [**25**星][2y] [C] [wiire-a/bully](https://github.com/wiire-a/bully) Brute force attack against WPS, that actually works
+- [**25**星][3y] [Java] [whyalwaysmea/mobilesafe](https://github.com/whyalwaysmea/mobilesafe) 这是一个android版的手机卫士,包含一下功能:1.手机防盗 2. 黑名单设置 3.软件管理 4.进程管理 5.流量统计 6.缓存清理 7.手机杀毒 8.来电归属地显示 9.号码归属地查询 10.程序锁
- [**25**星][6y] [waytai/cloudsafe](https://github.com/waytai/cloudsafe) cloudsafe 云安全扫描
- [**25**星][2y] [Py] [w00t3k/insp3ctor](https://github.com/w00t3k/insp3ctor) AWS S3 Bucket/Object Finder
- [**25**星][3y] [C++] [vix597/vulny](https://github.com/vix597/vulny) Vulnerable Linux socket game for educational purposes
@@ -15453,59 +16633,73 @@ for CVE details based on the nmap report.
- [**25**星][3y] [Py] [toxic-ig/pythonkeylogger](https://github.com/toxic-ig/pythonkeylogger) A remote keylogger with some cool features
- [**25**星][7y] [Py] [tosanjay/bopfunctionrecognition](https://github.com/tosanjay/bopfunctionrecognition) plugin to BinNavi tool to analyze a x86 binanry file to find buffer overflow prone functions. Such functions are important for vulnerability analysis.
- [**25**星][4y] [Go] [tomsteele/shellsquid](https://github.com/tomsteele/shellsquid) A dynamic HTTP and DNS reverse proxy
-- [**25**星][2y] [Objective-C] [tijme/reverse-engineering](https://github.com/tijme/reverse-engineering) This repository contains some of the executables that I've cracked.
+- [**25**星][2y] [ObjC] [tijme/reverse-engineering](https://github.com/tijme/reverse-engineering) This repository contains some of the executables that I've cracked.
- [**25**星][3y] [Py] [threatresponse/mad-king](https://github.com/threatresponse/mad-king) Proof of Concept Zappa Based AWS Persistence and Attack Platform
-- [**25**星][2y] [PowerShell] [thoughtfuldev/psimage-delivery](https://github.com/thoughtfuldev/psimage-delivery) Use Invoke-PSImage to deliver a payload in an Image
+- [**25**星][2y] [PS] [thoughtfuldev/psimage-delivery](https://github.com/thoughtfuldev/psimage-delivery) Use Invoke-PSImage to deliver a payload in an Image
- [**25**星][2y] [Py] [thekingofduck/autosploit_chs](https://github.com/thekingofduck/autosploit_chs) 渗透工具AutoSploit的汉化版
+- [**25**星][2y] [Py] [the404hacking/windows-python-rat](https://github.com/the404hacking/windows-python-rat) A New Microsoft Windows Remote Administrator Tool [RAT] with Python by Sir.4m1R.
- [**25**星][2y] [Py] [the404hacking/websploit](https://github.com/the404hacking/websploit) Websploit is an advanced MITM framework.
-- [**25**星][11m] [C#] [technikempire/citadelcore](https://github.com/technikempire/citadelcore) Cross platform filtering HTTP/S proxy based on .NET Standard 2.0.
+- [**25**星][12m] [C#] [technikempire/citadelcore](https://github.com/technikempire/citadelcore) Cross platform filtering HTTP/S proxy based on .NET Standard 2.0.
- [**25**星][12m] [techbliss/ida_pro_ultimate_qt_build_guide](https://github.com/techbliss/ida_pro_ultimate_qt_build_guide) Ida Pro Ultimate Qt Build Guide
+- [**25**星][2y] [Py] [tasdikrahman/thanos](https://github.com/tasdikrahman/thanos) A dead simple demonstration of SQL injection in an SQLite database
- [**25**星][6m] [Py] [tarcisio-marinho/rsb-framework](https://github.com/tarcisio-marinho/rsb-framework) Windows/Linux - ReverseShellBackdoor Framework
-- [**25**星][22d] [C] [sysprogs/openocd](https://github.com/sysprogs/openocd) OpenOCD shipped with VisualGDB. Built with CMake.
+- [**25**星][4y] [Py] [tampe125/mongodb-scraper](https://github.com/tampe125/mongodb-scraper) Scraps for publicly accessible MongoDB instances and dumps user passwords
+- [**25**星][24d] [C] [sysprogs/openocd](https://github.com/sysprogs/openocd) OpenOCD shipped with VisualGDB. Built with CMake.
- [**25**星][2y] [LLVM] [syreal17/cardinal](https://github.com/syreal17/cardinal) Similarity Analysis to Defeat Malware Compiler Variations
- [**25**星][2y] [C#] [symbolsource/symbolsource](https://github.com/symbolsource/symbolsource)
+- [**25**星][8y] [stefanesser/serialkdpproxy](https://github.com/stefanesser/serialkdpproxy) Improved version of David Elliott's SerialKDPProxy
+- [**25**星][8y] [Ruby] [spiderlabs/yara-ruby](https://github.com/spiderlabs/yara-ruby) Ruby bindings for the yara file analysis and classification library
+- [**25**星][1y] [Gherkin] [soluto/containers-security-project](https://github.com/soluto/containers-security-project) A place for documenting threats and mitigations related to containers orchestrators (Kubernetes, Swarm etc)
- [**25**星][1y] [Ruby] [smiegles/certs](https://github.com/smiegles/certs) certs: 解析 X509 证书, 获取其中的(子)域名
- [**25**星][1y] [PHP] [sipcapture/homer-api](https://github.com/sipcapture/homer-api) HOMER 5: Back-End (API)
- [**25**星][3y] [Shell] [simonschuang/rpi-hostapd](https://github.com/simonschuang/rpi-hostapd)
+- [**25**星][2m] [Py] [sim642/whatpulse](https://github.com/sim642/whatpulse) WhatPulse reverse engineered
- [**25**星][1y] [Py] [si9int/screenshooter](https://github.com/si9int/screenshooter) Convert your masscan/subdomain-scan results (80,443,8080) into screenshots for better analysis
- [**25**星][10m] [C++] [shaxzy/nixware-csgo](https://github.com/shaxzy/nixware-csgo) Source code of Nixware. Cheat doesn't inject for some reason, fix it uself or just paste from it
- [**25**星][3y] [Py] [shawarkhanethicalhacker/brutexss-1](https://github.com/shawarkhanethicalhacker/brutexss-1) BruteXSS - Cross-Site Scripting Bruteforcer
- [**25**星][3y] [Py] [shakenetwork/mimipenguin](https://github.com/shakenetwork/mimipenguin) Mimipenguin密码抓取神器
- [**25**星][2m] [HTML] [shahril96/online-assembler-disassembler](https://github.com/shahril96/online-assembler-disassembler) Online assembler and disassembler
+- [**25**星][2y] [shadowsocksr-rm/shadowsocksx-ng](https://github.com/shadowsocksr-rm/shadowsocksx-ng) Next Generation of ShadowsocksX
- [**25**星][4y] [Py] [sghctoma/multipass](https://github.com/sghctoma/multipass) A small wriiteup and a PoC tool about how to use SO_REUSADDR for firewall evasion
- [**25**星][3y] [JS] [sethsec/nodejs-ssrf-app](https://github.com/sethsec/nodejs-ssrf-app) Nodejs application intentionally vulnerable to SSRF
-- [**25**星][8m] [Ruby] [sensu-plugins/sensu-plugins-network-checks](https://github.com/sensu-plugins/sensu-plugins-network-checks) This plugin provides native network instrumentation for monitoring and metrics collection, including: hardware, TCP response, RBLs, whois, port status, and more.
- [**25**星][2y] [Py] [scanfsec/ihoneyportscan](https://github.com/scanfsec/ihoneyportscan) 轻量端口扫描器、信息泄露扫描、批量网站备份扫描
- [**25**星][2y] [Py] [sc0tfree/netbyte](https://github.com/sc0tfree/netbyte) Netbyte is a Netcat-style tool that facilitates probing proprietary TCP and UDP services. It is lightweight, fully interactive and provides formatted output in both hexadecimal and ASCII.
+- [**25**星][5y] [Py] [sash-ko/kaggle-malware-classification](https://github.com/sash-ko/kaggle-malware-classification) Kaggle "Microsoft Malware Classification Challenge". 6th place solution
- [**25**星][4m] [Shell] [sap/vulnerability-assessment-kb](https://github.com/sap/vulnerability-assessment-kb) This dataset contains fix commits for known vulnerabilities in open-source projects and fuels the vulnerability-assessment-tool
- [**25**星][1y] [C] [s54mtb/loradunchy](https://github.com/s54mtb/loradunchy) Lora board with Arduino nano compatibile pinout and simple battery management
- [**25**星][10y] [C] [ryantenney/php7](https://github.com/ryantenney/php7) Hacking the PHP compiler and standard libraries in the name of turning it into a not crappy language. (Unofficial. No warranty whatsoever.)
- [**25**星][5y] [Go] [rverton/xssmap](https://github.com/rverton/xssmap) (DOM-)XSS fuzzer based on phantomjs and go.
- [**25**星][3y] [C#] [rummykhan/sql-nightmare](https://github.com/rummykhan/sql-nightmare) SQL SERVER Exploitation.
-- [**25**星][1y] [robocyber/shodan-dorks](https://github.com/robocyber/shodan-dorks) Dorks for shodan.io. Some basic shodan dorks collected from publicly available data.
+- [**25**星][1y] [Go] [rsrdesarrollo/sasshimi](https://github.com/rsrdesarrollo/sasshimi) SSH Tunnelling in "RAW mode", via STDIN/OUT without using forwarding channels
- [**25**星][1y] [C] [renorobert/virtualbox-nat-dhcp-bugs](https://github.com/renorobert/virtualbox-nat-dhcp-bugs)
- [**25**星][6m] [CSS] [remmina/et-electron](https://github.com/remmina/et-electron) Eagle Tunnel 的图形化客户端,一个简单的代理工具
-- [**25**星][8m] [C++] [rek7/descrypt-cpu-collision-cracker](https://github.com/rek7/descrypt-cpu-collision-cracker) DEScrypt CPU Collision Cracker
+- [**25**星][5m] [HTML] [rafaybaloch/sop-bypass-mini-test-suite](https://github.com/rafaybaloch/sop-bypass-mini-test-suite) This test suite contains over 40 different test cases that have proven to work with different mobile browsers in my research or testing Same Origin Policy bypass issues with browsers. Due credits were given to the researchers whose Proof of concepts have been incorporated in this test suite. Please note that, this is just the beta version, the n…
- [**25**星][3m] [C++] [quangnh89/dbgsymgrabber](https://github.com/quangnh89/dbgsymgrabber) Just another tool to download specify Symbol (.pdb) files
-- [**25**星][3y] [PowerShell] [proxb/pinvoke](https://github.com/proxb/pinvoke) One-off scripts that I have written involving PInvoke and PowerShell
-- [**25**星][2y] [PHP] [probely/ctf-challenges](https://github.com/probely/ctf-challenges) Capture the flag challenges
+- [**25**星][4m] [JS] [qabin/kb-proxy](https://github.com/qabin/kb-proxy) kb-proxy 是一个可本地部署的、提供代理功能、接口测试管理、支持在线Mock、Host环境管理的在线工具平台。
+- [**25**星][2y] [Swift] [purkylin/kingproxy](https://github.com/purkylin/kingproxy) A proxy like privoxy and antinat
+- [**25**星][3y] [PS] [proxb/pinvoke](https://github.com/proxb/pinvoke) One-off scripts that I have written involving PInvoke and PowerShell
- [**25**星][2y] [Py] [prezi/django-zipkin](https://github.com/prezi/django-zipkin) [Unmaintained] A Django middleware and api for recording and sending messages to Zipkin
-- [**25**星][2m] [Java] [portswigger/taborator](https://github.com/portswigger/taborator) A Burp extension to show the Collaborator client in a tab
+- [**25**星][6d] [Java] [portswigger/taborator](https://github.com/portswigger/taborator) A Burp extension to show the Collaborator client in a tab
+- [**25**星][1m] [Py] [portswigger/sqli-py](https://github.com/portswigger/sqli-py) SQLiPy is a Python plugin for Burp Suite that integrates SQLMap using the SQLMap API.
- [**25**星][3y] [Java] [pokeolaf/pokemongodecoderforburp](https://github.com/pokeolaf/pokemongodecoderforburp) A simpe decoder to decode requests/responses made by PokemonGo in burp
- [**25**星][3y] [Go] [peoples-cloud/pc](https://github.com/peoples-cloud/pc) people's cloud: using the ideas of botnets for good
- [**25**星][2y] [Py] [pentestbox/scripts](https://github.com/pentestbox/scripts)
- [**25**星][12m] [Go] [parsiya/go-security](https://github.com/parsiya/go-security) My Go security projects
-- [**25**星][10d] [F#] [paralax/burningdogs](https://github.com/paralax/burningdogs) Honeypot log processor to create OTX Pulse entries
-- [**25**星][1y] [Shell] [panjks/t-pot-autoinstall](https://github.com/panjks/t-pot-autoinstall) Autoinstall T-Pot on Ubuntu 16.04
+- [**25**星][3d] [F#] [paralax/burningdogs](https://github.com/paralax/burningdogs) Honeypot log processor to create OTX Pulse entries
- [**25**星][2y] [packtpublishing/digital-forensics-with-kali-linux](https://github.com/packtpublishing/digital-forensics-with-kali-linux) Digital Forensics with Kali Linux, published by Packt
- [**25**星][2y] [Py] [owtf/ptp](https://github.com/owtf/ptp) Pentester's Tools Parser (PTP) provides an unified way to retrieve the information from all (final goal) automated pentesting tools and assign an automated ranking for each finding.
+- [**25**星][5m] [optixal/oscp-pwk-notes-public](https://github.com/optixal/oscp-pwk-notes-public)
- [**25**星][10m] [Dockerfile] [opsxcq/docker-metasploit](https://github.com/opsxcq/docker-metasploit) Metasploit framework with steroids
- [**25**星][1y] [Go] [opennota/hydra](https://github.com/opennota/hydra) Penetration testing tool. This repository has migrated to
- [**25**星][1y] [omg2hei/vulnerability-env](https://github.com/omg2hei/vulnerability-env) 收集国内外开源CMS存在漏洞的各种版本
+- [**25**星][1y] [Py] [nviso-be/decompile-py2exe](https://github.com/nviso-be/decompile-py2exe) Decompile py2exe Python 3 generated EXEs
- [**25**星][4y] [Java] [nvisium/httpillage](https://github.com/nvisium/httpillage)
- [**25**星][1y] [Py] [numirias/firefed](https://github.com/numirias/firefed)
- [**25**星][3y] [C] [nukem9/idaskins](https://github.com/nukem9/idaskins) *DEPRECATED* Advanced skinning plugin for IDA Pro, ported to x64dbg
+- [**25**星][2d] [JS] [npm/npm-packlist](https://github.com/npm/npm-packlist) Walk through a folder and figure out what goes in an npm package
- [**25**星][5y] [Py] [noobiedog/dir-xcan](https://github.com/noobiedog/dir-xcan) Python version of OWASP's DirBuster Application.
+- [**25**星][8m] [Py] [nixwizard/kube-alien](https://github.com/nixwizard/kube-alien)
+- [**25**星][3y] [Rust] [nixos/security](https://github.com/nixos/security)
- [**25**星][3y] [Py] [nairuzabulhul/keyplexer](https://github.com/nairuzabulhul/keyplexer) Capstone: Keylogger Trojan
- [**25**星][5m] [Java] [mx-futhark/hook-any-text](https://github.com/mx-futhark/hook-any-text) The goal of this project is to provide an alternative to well established text hookers, whose features are restrained to a certain number of game engines and emulators.
- [**25**星][1y] [Assembly] [mrfearless/apisearch-plugin-x86](https://github.com/mrfearless/apisearch-plugin-x86) APISearch Plugin (x86) - A Plugin For x64dbg
@@ -15515,84 +16709,98 @@ for CVE details based on the nmap report.
- [**25**星][7m] [Makefile] [mintty/wsltty.appx](https://github.com/mintty/wsltty.appx)
- [**25**星][4y] [Py] [milo2012/social-engineering-toys](https://github.com/milo2012/social-engineering-toys) Social Engineering Toys
- [**25**星][3m] [Py] [mikaelkall/massrecon](https://github.com/mikaelkall/massrecon) This reconissance tool is specific written for OSCP engagements.
-- [**25**星][4m] [Py] [michaeldim02/hvazard](https://github.com/michaeldim02/hvazard) Remove short passwords & duplicates, change lowercase to uppercase & reverse, combine wordlists!
-- [**25**星][1m] [Py] [mhaskar/xssradare](https://github.com/mhaskar/xssradare) A Cross Site Scripting scanner using selenium webdriver
-- [**25**星][2y] [Py] [mgeeky/visualbasicobfuscator](https://github.com/mgeeky/visualbasicobfuscator) Visual Basic Code universal Obfuscator intended to be used during penetration testing assignments.
-- [**25**星][13d] [meitar/awesome-pentest](https://github.com/meitar/awesome-pentest)
-- [**25**星][5m] [Py] [mechpen/sockdump](https://github.com/mechpen/sockdump) Dump unix domain socket traffic with bpf
-- [**25**星][1y] [Py] [mdsecactivebreach/lambda-webbugs](https://github.com/mdsecactivebreach/lambda-webbugs) A proof of concept for delivering webbugs via AWS lambda
+- [**25**星][5m] [Py] [michaeldim02/hvazard](https://github.com/michaeldim02/hvazard) Remove short passwords & duplicates, change lowercase to uppercase & reverse, combine wordlists!
+- [**25**星][15d] [meitar/awesome-pentest](https://github.com/meitar/awesome-pentest)
- [**25**星][6y] [Py] [marshyski/sshwatch](https://github.com/marshyski/sshwatch) Intrusion Prevention System (IPS) for Secure Shell (SSH)
- [**25**星][3y] [Go] [maddevsio/telegram_bbbot](https://github.com/maddevsio/telegram_bbbot) Telegram Bug Bounty Bot
- [**25**星][2y] [ANTLR] [luftek/limesdr-usb](https://github.com/luftek/limesdr-usb) USB 3.0 version of the LimeSDR board
+- [**25**星][3m] [Shell] [leviathan36/wifibang](https://github.com/leviathan36/wifibang) wifi attacks suite
+- [**25**星][8m] [Py] [letheanmovement/lethean-vpn](https://github.com/letheanmovement/lethean-vpn) Lethean Virtual Private Network (VPN)
- [**25**星][4y] [Py] [legbacore/t2e_integrity_check](https://github.com/legbacore/t2e_integrity_check) Integrity checking script for Apple Thunderbolt to Ethernet adapters, to check for attacks similar to Thunderstrike 2
+- [**25**星][11m] [C] [0xdrrb/hackrf_ook](https://github.com/0xDRRB/hackrf_ook) ASK-OOK transmit tool for Great Scott Gadget HackRF
- [**25**星][3y] [C] [leetchicken/afl](https://github.com/leetchicken/afl) Unofficial American Fuzzy Lop repo
- [**25**星][4y] [Go] [leechristensen/tgscrack](https://github.com/leechristensen/tgscrack) Kerberos TGS_REP cracker written in Golang
- [**25**星][2y] [C] [ktemkin-archive/atmosphere](https://github.com/ktemkin-archive/Atmosphere) Atmosphère is a work-in-progress customized firmware for the Nintendo Switch.
- [**25**星][1y] [C++] [kriw/ropchain](https://github.com/kriw/ropchain) ROPChain generator.
- [**25**星][3y] [Py] [kostrin/pillage](https://github.com/kostrin/pillage) Pillage is a multithreaded enumeration python script I created for the enumeration phase of penetration tests.
- [**25**星][7y] [Perl] [kost/vulnscan-pwcrack](https://github.com/kost/vulnscan-pwcrack) Password guessers for popular vulnerability scanners and frameworks: Find the password for your favourite vulnscanners: OpenVAS, Nessus, NeXpose or Metasploit
+- [**25**星][4y] [Shell] [kisom/surfraw](https://github.com/kisom/surfraw) local changes to surfraw - local edits prior to sending updates to surfraw-devel
+- [**25**星][14d] [AutoIt] [kirlovon/devil-backdoor](https://github.com/kirlovon/devil-backdoor) Simple backdoor for public places, that uses a file system for communication. Just for fun!
- [**25**星][3y] [Py] [kingtuna/hybrid-darknet-concept](https://github.com/kingtuna/hybrid-darknet-concept)
-- [**25**星][5y] [Py] [joxeankoret/mynav](https://github.com/joxeankoret/mynav) Automatically exported from code.google.com/p/mynav
+- [**25**星][1m] [TS] [kennbroorg/iky](https://github.com/kennbroorg/iky) OSINT Project
+- [**25**星][1y] [Assembly] [joric/arduino-bitcoin-miner](https://github.com/joric/arduino-bitcoin-miner) Arduino Bitcoin Miner (plain C and AVR assembly versions)
- [**25**星][5y] [C++] [jeremyfetiveau/exploits](https://github.com/jeremyfetiveau/exploits) Old exploits and code for my self-referencing PML4 technique (2014)
- [**25**星][1m] [Java] [jenkinsci/aqua-microscanner-plugin](https://github.com/jenkinsci/aqua-microscanner-plugin) Enables scanning of docker builds in Jenkins for OS package vulnerabilities.
- [**25**星][1y] [C#] [jeffreye/avaloniailspy](https://github.com/jeffreye/avaloniailspy) Avalonia-based .NET Decompiler (port of ILSpy)
- [**25**星][3y] [C] [jacktang310/kerneldebugonnexus6p](https://github.com/jacktang310/kerneldebugonnexus6p)
- [**25**星][3y] [Py] [j4r3tt/gerix-wifi-cracker-2](https://github.com/j4r3tt/gerix-wifi-cracker-2) GUI wireless 802.11 penetration tool
- [**25**星][4m] [Py] [initroot/fransrecon](https://github.com/initroot/fransrecon) Script will enumerate domain name using horizontal enumeration, reverse lookup. Each horziontal domain will then be vertically enumerated using Sublist3r.
+- [**25**星][2m] [infosec-community/apac-meetups](https://github.com/infosec-community/apac-meetups) A community contributed consolidated list of InfoSec meetups in the Asia Pacific region.
- [**25**星][7y] [Py] [infodox/web-exploitation-engine](https://github.com/infodox/web-exploitation-engine) Generic Command Exploitation Engine for exploiting web application command-injection bugs,.
- [**25**星][2y] [PHP] [imagemlt/ctf_web_dockers](https://github.com/imagemlt/ctf_web_dockers) dockerfile of CTF web practices
- [**25**星][5y] [C] [honeynet/phoneyc](https://github.com/honeynet/phoneyc)
+- [**25**星][2y] [Go] [himei29a/gichidan](https://github.com/himei29a/gichidan) Gichidan - CLI wrapper for Ichidan deep-web search engine.
- [**25**星][4y] [C++] [herrcore/cmddesktopswitch](https://github.com/herrcore/cmddesktopswitch) CmdDesktopSwitch is a small utility that lists all windows desktops and provides the option to switch between them. This can be used to identify and watch malware that has created a hidden desktop.
- [**25**星][8y] [JS] [hdm/axman](https://github.com/hdm/axman) AxMan ActiveX Fuzzer
- [**25**星][2y] [C++] [hatriot/delayloadinject](https://github.com/hatriot/delayloadinject) Code injection via delay load libraries
- [**25**星][2y] [C++] [hasherezade/petya_key](https://github.com/hasherezade/petya_key) A decoder for Petya victim keys, using the Janus' masterkey.
-- [**25**星][17d] [Py] [harleo/knockknock](https://github.com/harleo/knockknock) [Golang rework soon] A simple reverse whois lookup CLI which allows you to find domain names owned by an individual person or company, often used for Open Source Intelligence (OSINT) purposes.
+- [**25**星][2m] [C] [hasherezade/flareon2019](https://github.com/hasherezade/flareon2019) Flare-On solutions
+- [**25**星][19d] [Py] [harleo/knockknock](https://github.com/harleo/knockknock) [Golang rework soon] A simple reverse whois lookup CLI which allows you to find domain names owned by an individual person or company, often used for Open Source Intelligence (OSINT) purposes.
- [**25**星][4y] [C] [hanj4096/wukong](https://github.com/hanj4096/wukong) A LKM rootkit for Linux kernel 2.6.x, 3.x and 4.x
-- [**25**星][5m] [Java] [hakbot/hakbot-origin-controller](https://github.com/hakbot/hakbot-origin-controller) Vendor-Neutral Security Tool Automation Controller (over REST)
-- [**25**星][1y] [h2hconference/2018](https://github.com/h2hconference/2018) H2HC 2018 Slides/Materials/Presentations
+- [**25**星][2y] [Py] [hackingenvivo/doxing](https://github.com/hackingenvivo/doxing) Espionaje y recopilación de Información
+- [**25**星][8y] [ObjC] [hackedteam/vector-macos-root](https://github.com/hackedteam/vector-macos-root) root installation for MacOS
+- [**25**星][2y] [Py] [guardicore/vmware_guest_auth_bypass](https://github.com/guardicore/vmware_guest_auth_bypass) Proof of concept of VMSA-2017-0012
- [**25**星][3y] [Py] [graniet/domff](https://github.com/graniet/domff) DOMFf is a simple IDE for extract all DOM data on a website, is perfect for all penetration testers, with this you can extract all data name, value of specific form with only one line, this tool work like a debugger
-- [**25**星][10m] [Kotlin] [gosecure/burp-ntlm-challenge-decoder](https://github.com/gosecure/burp-ntlm-challenge-decoder) Burp extension to decode NTLM SSP headers and extract domain/host information
- [**25**星][1y] [gluk256/misc](https://github.com/gluk256/misc) text files, etc.
- [**25**星][2y] [C#] [glinares/cscguard](https://github.com/glinares/cscguard) Protects and logs suspicious and malicious usage of .NET CSC.exe and Runtime C# Compilation
-- [**25**星][6m] [Py] [githacktools/githacktools](https://github.com/githacktools/githacktools) The best Hacking and PenTesting tools installer on the world
- [**25**星][8m] [gitguardian/getting-started-with-the-individual-app](https://github.com/gitguardian/getting-started-with-the-individual-app) GitGuardian is at the forefront of developers' security on GitHub. API tokens, database credentials, certificates leaked on GitHub: be alerted in real-time! GitGuardian is loved by developers:
- [**25**星][8m] [Py] [ghostlulzhacks/waybackmachine](https://github.com/ghostlulzhacks/waybackmachine)
- [**25**星][5y] [PHP] [ghorbanzadeh/owaat](https://github.com/ghorbanzadeh/owaat) OWASP ASVS Assessment Tool
+- [**25**星][2d] [CSS] [ghacksuserjs/torzillaprint](https://github.com/ghacksuserjs/torzillaprint) Firefox & Tor Browser only, current ESR+ only, client-side only [for now], results only, fingerprint testing
- [**25**星][8y] [Py] [gdssecurity/cloud-and-control](https://github.com/gdssecurity/cloud-and-control)
- [**25**星][5y] [C] [gdbinit/rex_versus_the_romans](https://github.com/gdbinit/rex_versus_the_romans) Anti Hacking Team TrustedBSD module
-- [**25**星][3y] [Py] [gdataadvancedanalytics/r2graphity](https://github.com/gdataadvancedanalytics/r2graphity) Creating function call graphs based on radare2 framwork, plot fancy graphs and extract behavior indicators
- [**25**星][5y] [Py] [fygrave/dnslyzer](https://github.com/fygrave/dnslyzer) DNS traffic indexer and analyzer
- [**25**星][2y] [Java] [fupinglee/crackcaptcahlogin](https://github.com/fupinglee/crackcaptcahlogin) CrackCaptcahLogin
- [**25**星][1y] [Tcl] [fruho/fruhoapp](https://github.com/fruho/fruhoapp) Fruho VPN Manager - Universal VPN Client |
-- [**25**星][3m] [C++] [frida/frida-clr](https://github.com/frida/frida-clr) Frida .NET bindings
+- [**25**星][7m] [Visual Basic .NET] [foryujian/ipintervalmerge](https://github.com/foryujian/ipintervalmerge) IP区间批量合并工具,合并重叠交集的IP范围
- [**25**星][3m] [C] [forensicitguy/libpreloadvaccine](https://github.com/forensicitguy/libpreloadvaccine) Whitelisting LD_PRELOAD libraries using LD_AUDIT
- [**25**星][6y] [C] [fi01/libput_user_exploit](https://github.com/fi01/libput_user_exploit) CVE-2013-6282 exploit
- [**25**星][5m] [C++] [ffiirree/capturer](https://github.com/ffiirree/capturer) Screen shot / GIF / Screen recording
-- [**25**星][2y] [Py] [eudoxier/security-utilities](https://github.com/eudoxier/security-utilities) Offensive Security Certified Profesional (OSCP) course scripts, some have been generalized
+- [**25**星][2y] [exp-db/toolpool](https://github.com/exp-db/toolpool) 安全 & 运维小工具
+- [**25**星][1y] [JS] [ethanent/sloww](https://github.com/ethanent/sloww)
+
+ Lightweight Slowloris attack CLI in Node
+
- [**25**星][2y] [C] [embedi/tcl_shellcode](https://github.com/embedi/tcl_shellcode) A template project for creating a shellcode for the Cisco IOS in the C language
- [**25**星][5y] [Java] [elechantelepate/bip_hack](https://github.com/elechantelepate/bip_hack) Sample app for hacking the BIP! card on the Santiago Public Transit system.
- [**25**星][4y] [C] [ele7enxxh/mtkfbexploit](https://github.com/ele7enxxh/mtkfbexploit) mtkfb exploit for mt658x & mt6592
- [**25**星][3y] [Ruby] [eik00d/reverse_dns_shellcode](https://github.com/eik00d/reverse_dns_shellcode) Revrese DNS payload for Metasploit: Download Exec x86 shellcode. Also DNS Handler and VBS bot (alsow working over DNS) as PoC included.
+- [**25**星][5m] [HTML] [duocircle/office365-setup-dkim-dmarc-spf](https://github.com/duocircle/office365-setup-dkim-dmarc-spf) Setup guide for Office 365 Administrators who are unable to use ATP to configure SPF, DKIM and DMARC.
- [**25**星][2y] [Py] [dragoneeg/struts2-048](https://github.com/dragoneeg/struts2-048) CVE-2017-9791
-- [**25**星][8d] [C++] [domob1812/namecore](https://github.com/domob1812/namecore) Reimplementation of Namecoin on top of the current Bitcoin Core codebase.
+- [**25**星][3d] [C++] [domob1812/namecore](https://github.com/domob1812/namecore) Reimplementation of Namecoin on top of the current Bitcoin Core codebase.
- [**25**星][6y] [C++] [dominictobias/detourxs](https://github.com/dominictobias/detourxs) A x86/64 library for detouring functions on Windows OS
- [**25**星][2y] [JS] [dg92/graphql-nodejs-modular-kit](https://github.com/dg92/graphql-nodejs-modular-kit)
- [**25**星][11m] [C] [defuse/yescrypt](https://github.com/defuse/yescrypt) Non-C Implementations of the yescrypt KDF.
-- [**25**星][26d] [danpage/scale](https://github.com/danpage/scale) scale: Side-Channel Attack Lab
+- [**25**星][10m] [Py] [deep-fingerprinting/df](https://github.com/deep-fingerprinting/df) The source code and dataset are used to demonstrate the DF model, and reproduce the results of the ACM CCS2018 paper
+- [**25**星][28d] [danpage/scale](https://github.com/danpage/scale) scale: Side-Channel Attack Lab
- [**25**星][5y] [Py] [danmcinerney/nmap-parser](https://github.com/danmcinerney/nmap-parser) Parses Nmap XML files
+- [**25**星][2y] [JS] [danielstjules/toragent](https://github.com/danielstjules/toragent) HTTP(S) requests through Tor for Node
- [**25**星][2y] [JS] [cybellum/vulnerabilities](https://github.com/cybellum/vulnerabilities) Some of the vulnerabilities that were found by Cybellum platform
- [**25**星][1m] [Py] [cube0x8/chrome_ragamuffin](https://github.com/cube0x8/chrome_ragamuffin) Google Chrome internals analysis using Volatility
- [**25**星][5y] [JS] [cryptographrix/hootoo_ht-tm05-hacking](https://github.com/cryptographrix/hootoo_ht-tm05-hacking) Hacking the HooToo HT-TM05
- [**25**星][1y] [JS] [coincheckup/crypto-supplies](https://github.com/coincheckup/crypto-supplies) Cryptocurrency circulating, maximum and total supplies
-- [**25**星][4m] [PowerShell] [codewatchorg/powersniper](https://github.com/codewatchorg/powersniper) Password spraying script and helper for creating password lists
+- [**25**星][4m] [PS] [codewatchorg/powersniper](https://github.com/codewatchorg/powersniper) Password spraying script and helper for creating password lists
+- [**25**星][2y] [Go] [chuan-yun/esmeralda](https://github.com/chuan-yun/esmeralda) 穿云全链路追踪监控系统日志转储、实时日志数据分析、接口数据服务。
- [**25**星][4y] [Shell] [cert-polska/hsn2-bundle](https://github.com/cert-polska/hsn2-bundle)
- [**25**星][6y] [cbrunsch/wmbus-sniffer-muc](https://github.com/cbrunsch/wmbus-sniffer-muc) Source code of the demonstration programs showed in the Black Hat '13 presentation "Energy fraud and orchestrated blackouts: Issues with wireless metering protocols (WM-BUS)" by Cyrill Brunschwiler
-- [**25**星][1y] [PHP] [bypupil/ctfhub](https://github.com/bypupil/ctfhub) Some Docker for CTF environments
+- [**25**星][3y] [Java] [calebfenton/androidemulatordetect](https://github.com/calebfenton/androidemulatordetect) Android Emulator Detection
+- [**25**星][2y] [PHP] [bypupil/ctfhub](https://github.com/bypupil/ctfhub) Some Docker for CTF environments
- [**25**星][1y] [C++] [buseclab/paybreak](https://github.com/buseclab/paybreak)
- [**25**星][2m] [C++] [boegel/mica](https://github.com/boegel/mica) a Pin tool for collecting microarchitecture-independent workload characteristics
- [**25**星][3y] [Py] [bnagy/francis](https://github.com/bnagy/francis) LLDB engine based tool to instrument OSX apps and triage crashes
- [**25**星][5y] [Py] [bkerler/oregondecoder](https://github.com/bkerler/oregondecoder) Oregon Scientific V1/V2 Gnuradio Decoder
- [**25**星][4y] [Shell] [binkybear/honeypi](https://github.com/binkybear/honeypi) Bash script to install Honeypot projects ona Raspbian System
+- [**25**星][4y] [C] [bfosterjr/windowsrtdev](https://github.com/bfosterjr/windowsrtdev)
- [**25**星][6y] [Py] [batteryshark/miasma](https://github.com/batteryshark/miasma) Cross-Platform Binary OTF Patcher, Code Injector, Hacking Utility
- [**25**星][3y] [C] [azuregreen/arktooldrv](https://github.com/azuregreen/arktooldrv) An ark tool's driver
- [**25**星][2y] [Go] [avineshwar/slurp](https://github.com/avineshwar/slurp) S3 bucket enumerator
@@ -15603,41 +16811,51 @@ for CVE details based on the nmap report.
- [**25**星][1y] [Py] [ansorren/gdpatrol](https://github.com/ansorren/gdpatrol) A Lambda-powered Security Orchestration framework for AWS GuardDuty
- [**25**星][2y] [andrew-morris/presentations](https://github.com/andrew-morris/presentations) A centralized location for all presentations I've given at various conferences
- [**25**星][6m] [Py] [andreafioraldi/r2angrdbg](https://github.com/andreafioraldi/r2angrdbg) 在 radare2 调试器中使用 angr
+- [**25**星][3y] [Shell] [amoghbl1/orfox](https://github.com/amoghbl1/orfox) This is my repository for the orfox browser, a browser that uses tor to communicate and Firefox for Android as it's base.
+- [**25**星][29d] [Lua] [alpinelinux/alpine-secdb](https://github.com/alpinelinux/alpine-secdb) Alpine Linux security database
+- [**25**星][2y] [Shell] [alephsecurity/edlrooter](https://github.com/alephsecurity/edlrooter)
- [**25**星][8y] [aheadley/logitech-solar-k750-linux](https://github.com/aheadley/logitech-solar-k750-linux) Userspace "driver" for the Logitech k750 Solar Keyboard. A fork of the repo from
- [**25**星][3y] [Go] [aead/hydrogen](https://github.com/aead/hydrogen) Go implementation of libhydrogen - a lightweight, easy-to-use crypto library
-- [**25**星][2y] [Py] [adanvillarreal/spydan](https://github.com/adanvillarreal/spydan) A web spider for shodan.io without using the Developer API.
- [**25**星][2y] [Py] [absingh31/tor_spider](https://github.com/absingh31/tor_spider) Python project to crawl and scrap the lesser known deep web or one can say dark web. Just provide the onion link and get started.
- [**25**星][5m] [aadityapurani/nodejs-red-team-cheat-sheet](https://github.com/aadityapurani/nodejs-red-team-cheat-sheet) NodeJS Red-Team Cheat Sheet
- [**25**星][3y] [HTML] [4b5f5f4b/pocs](https://github.com/4b5f5f4b/pocs)
-- [**25**星][2y] [C++] [3gstudent/hiddenntregistry](https://github.com/3gstudent/hiddenntregistry) Use NT Native Registry API to create a registry that normal user can not query.
- [**25**星][2y] [1337g/cve-2017-17215](https://github.com/1337g/cve-2017-17215) CVE-2017-17215 HuaWei Router RCE (NOT TESTED)
-- [**25**星][2m] [Lua] [0x4d31/hassh-utils](https://github.com/0x4d31/hassh-utils) Nmap NSE Script and Docker image for HASSH - the SSH client/server fingerprinting method (
- [**25**星][6m] [Py] [0x00string/oldays](https://github.com/0x00string/oldays) public exploits
- [**25**星][2y] [C] [0x00-0x00/cve-2018-1000001](https://github.com/0x00-0x00/cve-2018-1000001) glibc getcwd() local privilege escalation compiled binaries
+- [**24**星][23d] [Visual Basic .NET] [zelon88/ransomware_defender](https://github.com/zelon88/ransomware_defender) A Windows Logon / Startup / Scheduled Task Script for Ransomware Detection & Early-Warning
+- [**24**星][1m] [Go] [monkeydioude/capybara](https://github.com/monkeydioude/capybara) Capybara, simple reverse-proxy (api gateway) for localhost services
+- [**24**星][t] [thehive-project/awesome](https://github.com/thehive-project/awesome) A curated list of awesome things related to TheHive & Cortex
+- [**24**星][3y] [C#] [nytrorst/hookme](https://github.com/nytrorst/hookme) Exported from
+- [**24**星][2y] [HTML] [iaik/interruptjs](https://github.com/iaik/interruptjs) Practical Keystroke Timing Attacks in Sandboxed JavaScript
- [**24**星][2y] [C#] [reswitched/hacversionlistbot](https://github.com/reswitched/hacversionlistbot) Versionlist update tracker for the Nintendo Switch.
- [**24**星][1y] [JS] [shack2/jvapp](https://github.com/shack2/jvapp) Java漏洞练习程序,开发工具Eclipse,运行环境Java 1.7以上版本,Tocmat7以上。
- [**24**星][3y] [C++] [sektioneins/aarch64_cryptoextension](https://github.com/sektioneins/aarch64_cryptoextension) IDA AArch64 processor extender extension: Adding crypto extension instructions (AES/SHA1/SHA256)
+- [**24**星][2y] [Shell] [david942j/honest](https://github.com/david942j/honest) Are your installed packages _really_ the same as you saw on GitHub?
- [**24**星][5y] [C#] [yck1509/dnexplorer](https://github.com/yck1509/dnexplorer) A simple viewer of modules using dnlib.
+- [**24**星][6y] [Py] [felixgr/pytaint](https://github.com/felixgr/pytaint)
- [**24**星][4m] [Go] [l3m0n/vulenv](https://github.com/l3m0n/vulenv) 漏洞测试环境 - 方便写扫描器利用复现
- [**24**星][3y] [Assembly] [rehints/bootkitsbook](https://github.com/rehints/bootkitsbook) repository with additional materials and source code
- [**24**星][4y] [Java] [stealthcopter/steganography](https://github.com/stealthcopter/steganography) Android Steganography Library
- [**24**星][1y] [n0tr00t/n0js](https://github.com/n0tr00t/n0js) n0js xss challenges
-- [**24**星][6m] [Py] [pyauth/pywarp](https://github.com/pyauth/pywarp) Python WebAuthn Relying Party library
-- [**24**星][13d] [JS] [fsecurelabs/android-keystore-audit](https://github.com/fsecurelabs/android-keystore-audit)
+- [**24**星][5y] [C] [z3apa3a/3scan](https://github.com/z3apa3a/3scan) 3Scan is fast detector for open HTTP/CONNECT/SOCKS4/SOCKS5/FTP/TELNET proxy
+- [**24**星][10m] [C++] [tasvideos/vba-rerecording](https://github.com/tasvideos/vba-rerecording) Automatically exported from code.google.com/p/vba-rerecording
+- [**24**星][28d] [C] [userlandkernel/usbusted](https://github.com/userlandkernel/usbusted) Research on Apple's USB protocols
+- [**24**星][3y] [Py] [jenkstom/python-ddns](https://github.com/jenkstom/python-ddns) A self-hosted dynamic DNS service using BIND9 and python.
+- [**24**星][9m] [Java] [openindex/remotesupporttool](https://github.com/openindex/remotesupporttool) an easy single click solution for remote maintenance
- [**24**星][2m] [Py] [kismon/kismon](https://github.com/kismon/kismon) A GUI client for kismet
-- [**24**星][7d] [Py] [muteb/hoarder](https://github.com/muteb/hoarder) This script is made to collect the most valiable artifacts for foreniscs or incident reponse investigation rather than imaging the whole har drive.
-- [**24**星][3m] [JS] [lanmaster53/cef](https://github.com/lanmaster53/cef) Proof-of-concept CORS exploitation tool.
-- [**24**星][2m] [HTML] [trojan-tutor/trojan-tutor.github.io](https://github.com/trojan-tutor/trojan-tutor.github.io) trojan 教程 自建梯子教程 trojan教程 trojan-gfw 科学上网 代理工具 翻墙 Ubuntu Debian 小白教程 https伪装
+- [**24**星][2y] [Ruby] [trailofbits/trailofphish](https://github.com/trailofbits/trailofphish) Phishing e-mail repository
+- [**24**星][27d] [cypurr-collective/cypurr-prezes](https://github.com/cypurr-collective/cypurr-prezes) presentation materials for our cryptoparties
+- [**24**星][3m] [abhinavprasad47/bugbounty-starter-notes](https://github.com/abhinavprasad47/bugbounty-starter-notes) bug bounty hunters starter notes
- [**24**星][3y] [AutoIt] [yaseralnajjar/ida-msdn-helper](https://github.com/yaseralnajjar/IDA-MSDN-helper) IDA Pro MSDN Helper
- [**24**星][4m] [C] [hatching/tracy](https://github.com/hatching/tracy) tracy - a system call tracer and injector. Find us in #tracy on irc.freenode.net
+- [**24**星][2y] [C++] [vmcall/token_manipulation](https://github.com/vmcall/token_manipulation) Bypass User Account Control by manipulating tokens
- [**24**星][12m] [C++] [zsshen/yadd](https://github.com/zsshen/yadd) Yet another Android Dex bytecode Disassembler: a static Android app disassembler for fast class and method signature extraction and code structure visualization.
- [**24**星][1y] [C] [zhuhuibeishadiao/pathmodification](https://github.com/zhuhuibeishadiao/pathmodification) Process path modification x64
- [**24**星][4y] [Py] [zecure/shadowd_python](https://github.com/zecure/shadowd_python) A Shadow Daemon connector for Python applications
- [**24**星][4m] [xyntax/slides](https://github.com/xyntax/slides) My public presentation slides.
+- [**24**星][2y] [C#] [xxczaki/logger](https://github.com/xxczaki/logger) ☠
- [**24**星][4y] [xgfan/ss-relay](https://github.com/xgfan/ss-relay) shadowsocks relay docker
-- [**24**星][2m] [Py] [xebia/mobilehacktools](https://github.com/xebia/mobilehacktools) A repository for scripting a mobile attack toolchain
-- [**24**星][1m] [JS] [wuseman/sagemcom-fast-5370e-telia](https://github.com/wuseman/sagemcom-fast-5370e-telia) This is my personal wiki for hacking the router firmware used by (Sagemcom)F@ast Version 3.43.2 delivered from Sagemcom
-- [**24**星][9m] [TypeScript] [woza-lab/woza](https://github.com/woza-lab/woza) [Deprecated]Dump application ipa from jailbroken iOS based on frida. (Node edition)
+- [**24**星][9m] [TS] [woza-lab/woza](https://github.com/woza-lab/woza) [Deprecated]Dump application ipa from jailbroken iOS based on frida. (Node edition)
- [**24**星][3y] [woodspeed/pentest](https://github.com/woodspeed/pentest)
- [**24**星][1y] [C] [wchill/defcon26_badgehacking](https://github.com/wchill/defcon26_badgehacking) Notes and things regarding hacking DEFCON 26's badge
- [**24**星][5y] [JS] [vector35/hackinggames](https://github.com/vector35/hackinggames) Hacking Games in a Hacked Game
@@ -15651,10 +16869,8 @@ for CVE details based on the nmap report.
- [**24**星][1m] [Py] [thehairyj/scout](https://github.com/thehairyj/scout) Scout - a Contactless Active Reconnaissance Tool
- [**24**星][2y] [Py] [thegeekht/loki.rat](https://github.com/thegeekht/loki.rat) Loki.Rat is a fork of the Ares RAT, it integrates new modules, like recording , lockscreen , and locate options. Loki.Rat is a Python Remote Access Tool.
- [**24**星][4y] [C++] [thecybermind/ipredir](https://github.com/thecybermind/ipredir) IP redirection+NAT for Windows
-- [**24**星][2y] [Py] [the404hacking/windows-python-rat](https://github.com/the404hacking/windows-python-rat) A New Microsoft Windows Remote Administrator Tool [RAT] with Python by Sir.4m1R.
- [**24**星][7m] [Py] [tgalal/consonance](https://github.com/tgalal/consonance) WhatsApp's handshake implementation using Noise Protocol
- [**24**星][3y] [C] [te-k/openssh-backdoor](https://github.com/te-k/openssh-backdoor) Openssh backdoor found with a ssh honeypot
-- [**24**星][4y] [Py] [tampe125/mongodb-scraper](https://github.com/tampe125/mongodb-scraper) Scraps for publicly accessible MongoDB instances and dumps user passwords
- [**24**星][4y] [C] [talos-vulndev/advisories](https://github.com/talos-vulndev/advisories)
- [**24**星][2y] [Rust] [sushant94/rune](https://github.com/sushant94/rune) rune - radare2 based symbolic emulator
- [**24**星][3y] [Shell] [superkojiman/dirtshell](https://github.com/superkojiman/dirtshell) dirtshell:提供类似于Shell的接口,使文件路径遍历变得简单且迅速。
@@ -15663,50 +16879,55 @@ for CVE details based on the nmap report.
- [**24**星][10m] [C] [stooged/apptousb-50x](https://github.com/stooged/apptousb-50x) 5.0X
- [**24**星][1y] [JS] [stephenlb/spoken](https://github.com/stephenlb/spoken) Spoken - JavaScript Text-to-Speech and Speech-to-Text for AI Artificial Intelligence Apps
- [**24**星][1m] [Rust] [stainless-steel/md5](https://github.com/stainless-steel/md5) MD5 hash function
+- [**24**星][9y] [Java] [spiderlabs/deface](https://github.com/spiderlabs/deface) A Java Server Faces (JSF) testing tool for decoding view state and creating view state attack vectors.
- [**24**星][11m] [C++] [sonicrules11/barbossa](https://github.com/sonicrules11/barbossa) Macintosh MultiHack for Counter-Strike: Global Offensive
-- [**24**星][1y] [Gherkin] [soluto/containers-security-project](https://github.com/soluto/containers-security-project) A place for documenting threats and mitigations related to containers orchestrators (Kubernetes, Swarm etc)
+- [**24**星][2y] [PHP] [skyzyx/bad-passwords](https://github.com/skyzyx/bad-passwords) A list of the top 10,000 most-used passwords from hacked password lists.
+- [**24**星][4m] [Go] [skeeto/pgp-poisoner](https://github.com/skeeto/pgp-poisoner) PGP key poisoner
- [**24**星][3y] [Py] [sizzop/hevd-exploits](https://github.com/sizzop/hevd-exploits) Various exploits for the HackSys Extreme Vulnerable Driver
- [**24**星][2y] [silvermoonsecurity/sandboxevasion](https://github.com/silvermoonsecurity/sandboxevasion) Malware sandbox evasion tricks and solution
- [**24**星][3y] [Py] [silentsignal/activescan3plus](https://github.com/silentsignal/activescan3plus) Modified version of ActiveScan++ Burp Suite extension
- [**24**星][5m] [Common Lisp] [shrdlu68/cl-tls](https://github.com/shrdlu68/cl-tls) An implementation of TLS and related specifications in Common Lisp
- [**24**星][1y] [Shell] [shawnduong/pxenum](https://github.com/shawnduong/pxenum) Post eXploitation Enumeration script for Linux. Tested on Ubuntu.
-- [**24**星][2y] [shadowsocksr-rm/shadowsocksx-ng](https://github.com/shadowsocksr-rm/shadowsocksx-ng) Next Generation of ShadowsocksX
- [**24**星][2y] [Py] [sensepost/dnserver](https://github.com/sensepost/dnserver) dnserver: Python 编写的简易 DNS 服务器
- [**24**星][2y] [HTML] [secwiki/ti](https://github.com/secwiki/ti) Threat Research Blog 威胁情报提取与溯源技术研究小组
- [**24**星][4y] [C++] [secmob/cve-2015-6612](https://github.com/secmob/cve-2015-6612)
- [**24**星][2y] [Java] [secdec/pen-test-automation](https://github.com/secdec/pen-test-automation) A framework for automating penetration testing using a plugin based architecture
- [**24**星][3y] [C] [seccon/seccon2016_online_ctf](https://github.com/seccon/seccon2016_online_ctf) SECCON2016 online CTF for public
-- [**24**星][5y] [Py] [sash-ko/kaggle-malware-classification](https://github.com/sash-ko/kaggle-malware-classification) Kaggle "Microsoft Malware Classification Challenge". 6th place solution
-- [**24**星][5y] [Objective-C] [samdmarshall/ios-internals](https://github.com/samdmarshall/ios-internals) iOS related code
-- [**24**星][1y] [Go] [rsrdesarrollo/sasshimi](https://github.com/rsrdesarrollo/sasshimi) SSH Tunnelling in "RAW mode", via STDIN/OUT without using forwarding channels
+- [**24**星][3y] [Py] [sciencemanx/ctf-tools](https://github.com/sciencemanx/ctf-tools) Attack-Defend CTF Tools
+- [**24**星][4d] [scanfsec/cve-2018-15982](https://github.com/scanfsec/cve-2018-15982) Aggressor Script to launch IE driveby for CVE-2018-15982.
+- [**24**星][5y] [ObjC] [samdmarshall/ios-internals](https://github.com/samdmarshall/ios-internals) iOS related code
- [**24**星][1y] [Py] [rootm0s/casper](https://github.com/rootm0s/casper) 👻 Socket based RAT for Windows with evasion techniques and other features for control
- [**24**星][4y] [C++] [rootkitsmm/winio-vidix](https://github.com/rootkitsmm/winio-vidix) Exploit WinIo - Vidix and Run Shellcode in Windows Kerne ( local Privilege escalation )
- [**24**星][1y] [Go] [root-gg/wsp](https://github.com/root-gg/wsp) HTTP tunnel over Websocket
- [**24**星][3y] [Go] [robinmonjo/ngx_http_l](https://github.com/robinmonjo/ngx_http_l) nginx module "mostly" developed in Go
- [**24**星][2y] [HTML] [ring04h/cia-hacking-tools](https://github.com/ring04h/cia-hacking-tools) WikiLeaks Vault 7 CIA Hacking Tools
- [**24**星][5y] [Py] [ricterz/simple-dns](https://github.com/ricterz/simple-dns) A simple regular-expression based DNS server
+- [**24**星][2y] [retrogamer74/firmwarev5.05_mirahen_baseinjection](https://github.com/retrogamer74/firmwarev5.05_mirahen_baseinjection) Mira HEN 5.05 PS4 Fast developed firmware just for the basic injection
- [**24**星][3y] [Py] [restran/hacker-scripts](https://github.com/restran/hacker-scripts)
- [**24**星][5m] [redshiftzero/awesome-threat-modeling](https://github.com/redshiftzero/awesome-threat-modeling) a curated list of useful threat modeling resources
- [**24**星][4m] [C#] [rciworks/rci.tutorials.csgo.cheat.external](https://github.com/rciworks/rci.tutorials.csgo.cheat.external) "Counter-Strike: Global Offensive" External Cheat
- [**24**星][7y] [C] [rapid7/vaccination](https://github.com/rapid7/vaccination)
- [**24**星][1y] [prsecurity/neutrino](https://github.com/prsecurity/neutrino) Neutrino C2 Source Code
-- [**24**星][1m] [Py] [portswigger/sqli-py](https://github.com/portswigger/sqli-py) SQLiPy is a Python plugin for Burp Suite that integrates SQLMap using the SQLMap API.
- [**24**星][2y] [Py] [portswigger/burp-smart-buster](https://github.com/portswigger/burp-smart-buster) A Burp Suite content discovery plugin that add the smart into the Buster!
-- [**24**星][3y] [Java] [portswigger/authz](https://github.com/portswigger/authz)
+- [**24**星][2y] [C++] [polycone/pe-loader](https://github.com/polycone/pe-loader) A Windows PE format file loader
- [**24**星][3y] [polarislab/s2-045](https://github.com/polarislab/s2-045) Struts2 S2-045(CVE-2017-5638)Vulnerability environment -
- [**24**星][12m] [plenumlab/gql-helper](https://github.com/plenumlab/gql-helper) This is a small extension to make graphql readable
- [**24**星][1y] [JS] [peterwilli/iota-ion.lib.js](https://github.com/peterwilli/iota-ion.lib.js) IOTA ION Library - Fast data-troughput in the browser, supported by the IOTA tangle.
- [**24**星][1m] [JS] [pertsev/web3_utilz](https://github.com/pertsev/web3_utilz) Useful snippets of js code for interacting with Smart Contracts
+- [**24**星][2y] [Py] [p4u/stratum-relay](https://github.com/p4u/stratum-relay) Stratum proxy relay for mining altcoin
- [**24**星][3y] [Java] [owasp/owasp-proxy](https://github.com/owasp/owasp-proxy) Owasp Proxy
- [**24**星][3y] [C] [osandamalith/shellcodes](https://github.com/osandamalith/shellcodes) My Shellcode Archive
- [**24**星][4y] [C] [osandamalith/imageexploiter](https://github.com/osandamalith/imageexploiter) Hide JavaScript inside your GIF and BMP images
-- [**24**星][5m] [optixal/oscp-pwk-notes-public](https://github.com/optixal/oscp-pwk-notes-public)
+- [**24**星][3d] [Java] [opticfusion1/mcantimalware](https://github.com/opticfusion1/mcantimalware) Anti-Malware for minecraft
- [**24**星][2y] [Py] [operatorequals/chmod-stego](https://github.com/operatorequals/chmod-stego) A PoC on passing data through UNIX file privilege bits (RWX Triplets)
+- [**24**星][3y] [C] [opensise/cve_poc_collect](https://github.com/opensise/cve_poc_collect) 这里会收集各种类型的CVE PoC 和EXP ,仅用来学习漏洞挖掘相关技术..
+- [**24**星][2y] [Shell] [oniondecoy/installer](https://github.com/oniondecoy/installer) A platform to run private unannounced Honeypots as Tor Hidden Services (aka Onion Decoys) inside the Tor Network.
+- [**24**星][2d] [Py] [oasis-open/cti-stix-elevator](https://github.com/oasis-open/cti-stix-elevator) OASIS TC Open Repository: Convert STIX 1.2 XML to STIX 2.0 JSON
- [**24**星][4m] [HTML] [o-o-overflow/dc2019f-super-smash-ooos](https://github.com/o-o-overflow/dc2019f-super-smash-ooos)
- [**24**星][2y] [C] [o-o-overflow/chall-www](https://github.com/o-o-overflow/chall-www)
-- [**24**星][1y] [Py] [nviso-be/decompile-py2exe](https://github.com/nviso-be/decompile-py2exe) Decompile py2exe Python 3 generated EXEs
- [**24**星][1y] [Py] [nullarray/shogun](https://github.com/nullarray/shogun) Shodan.io Command Line Interface
- [**24**星][1y] [Py] [noobiedog/peanuts](https://github.com/noobiedog/peanuts) Peanuts is a free and open source wifi tracking tool. Based on the SensePosts Snoopy-NG project that is now closed.
+- [**24**星][22d] [Py] [nocomplexity/securityprivacyreferencearchitecture](https://github.com/nocomplexity/securityprivacyreferencearchitecture) Open Repository for the Open Security and Privacy Reference Architecture
- [**24**星][1y] [C++] [nixer1337/nixware-gmod](https://github.com/nixer1337/nixware-gmod) Internal c++ gmod hack
- [**24**星][1y] [Py] [nityanandagohain/proxy_configuration](https://github.com/nityanandagohain/proxy_configuration) System wide proxy configuration in a single script with options to add, remove proxy and restore system default proxy configuration
- [**24**星][3y] [Py] [nccgroup/blesuite-cli](https://github.com/nccgroup/blesuite-cli) BLESuite_CLI is a command line tool to enable an easier way to test Bluetooth Low Energy (BLE) devices
@@ -15719,55 +16940,61 @@ for CVE details based on the nmap report.
- [**24**星][3y] [Pascal] [martindrab/vrtuletree](https://github.com/martindrab/vrtuletree) VrtuleTree is a tool that displays information about driver and device objects present in the system and relations between them. Its functionality is very similar to famous DeviceTree, however, VrtuleTree emhasises on stability and support of latest Windows versions
- [**24**星][2y] [Py] [marcusbotacin/anti.analysis](https://github.com/marcusbotacin/anti.analysis) Malware Analysis, Anti-Analysis, and Anti-Anti-Analysis
- [**24**星][2y] [PHP] [magento-engcom/php-7.2-support](https://github.com/magento-engcom/php-7.2-support) Repository for implementing support of php-7.2 support in Magento
+- [**24**星][1y] [Py] [m4rktn/jogan](https://github.com/m4rktn/jogan) Pentest Tools & Packages Installer [Linux/Termux]
- [**24**星][4y] [C] [ltangjian/firewall](https://github.com/ltangjian/firewall) Based on the research of Windows network architecture and the core packet filtering firewall technology, using NDIS intermediate driver, the article achieved the filter of the core layer, and completed the Windows Personal Firewall Design and Implementation.
- [**24**星][4y] [PHP] [lt/php-cryptopals](https://github.com/lt/php-cryptopals) The Matasano crypto challenges completed using PHP
- [**24**星][3y] [long123king/grep](https://github.com/long123king/grep) Grep-like WinDbg extension
- [**24**星][3y] [Py] [lolwaleet/bannergrab](https://github.com/lolwaleet/bannergrab) ~ BannerGrab
- [**24**星][1m] [Shell] [lockedbyte/ddos2track](https://github.com/lockedbyte/ddos2track) A script to avoid HTTP Floods attacks, log the attacker IP Addresses and Traffic, and Send you an email to warn that you are behind an attack.
-- [**24**星][11m] [C++] [lesmargoulins/margoulineur2000](https://github.com/lesmargoulins/margoulineur2000) NFC
+- [**24**星][12m] [C++] [lesmargoulins/margoulineur2000](https://github.com/lesmargoulins/margoulineur2000) NFC
- [**24**星][8m] [Dockerfile] [knqyf263/cve-2019-6467](https://github.com/knqyf263/cve-2019-6467) CVE-2019-6467 (BIND nxdomain-redirect)
-- [**24**星][4y] [Shell] [kisom/surfraw](https://github.com/kisom/surfraw) local changes to surfraw - local edits prior to sending updates to surfraw-devel
-- [**24**星][12d] [AutoIt] [kirlovon/devil-backdoor](https://github.com/kirlovon/devil-backdoor) Simple backdoor for public places, that uses a file system for communication. Just for fun!
- [**24**星][6m] [Zeek] [kinomakino/threat-intelligence-data](https://github.com/kinomakino/threat-intelligence-data) Snort_rules detection bad actors.
- [**24**星][11m] [Py] [kennell/ftpknocker](https://github.com/kennell/ftpknocker)
-- [**24**星][1m] [TypeScript] [kennbroorg/iky](https://github.com/kennbroorg/iky) OSINT Project
+- [**24**星][6m] [Py] [keithjjones/malgazer](https://github.com/keithjjones/malgazer) A Python malware analysis library.
- [**24**星][4y] [Py] [karblue/pppoe-hijack](https://github.com/karblue/pppoe-hijack) 伪装PPPoE服务器截取密码
- [**24**星][9m] [C] [kaist-ina/sgx-tor](https://github.com/kaist-ina/sgx-tor) Tor anonymity network for SGX
- [**24**星][2m] [ka0labs/ctf-writeups](https://github.com/ka0labs/ctf-writeups) CTF Writeups
- [**24**星][2y] [C++] [k0keoyo/hevd-arbitrary-overwrite-exploit-win10-rs3](https://github.com/k0keoyo/hevd-arbitrary-overwrite-exploit-win10-rs3)
+- [**24**星][9m] [PHP] [jsondeveloper/dante-gui](https://github.com/jsondeveloper/dante-gui) Dante Server (SOCKS5 Proxy) Web Interface (Telegram ready)
- [**24**星][2y] [Java] [joychou93/trident](https://github.com/joychou93/trident) Java通用漏洞修复安全组件
- [**24**星][9m] [Java] [jonas-schievink/ghidraxbe](https://github.com/jonas-schievink/ghidraxbe) A Ghidra extension for loading Xbox Executables (.xbe files)
-- [**24**星][3m] [Py] [joelwking/phantom-cyber](https://github.com/joelwking/phantom-cyber) Phantom Playbook and App repository
-- [**24**星][11m] [C] [jmcph4/crackerjack](https://github.com/jmcph4/crackerjack) A collection of crackmes
+- [**24**星][4m] [Py] [joelwking/phantom-cyber](https://github.com/joelwking/phantom-cyber) Phantom Playbook and App repository
+- [**24**星][12m] [C] [jmcph4/crackerjack](https://github.com/jmcph4/crackerjack) A collection of crackmes
+- [**24**星][1y] [PS] [jiangxianli/googlehosttool](https://github.com/jiangxianli/googlehosttool) 一键添加最新google hosts文件到本地hosts文件中,google 翻墙访问工具,适用windows、linux、mac
+- [**24**星][2y] [Shell] [jacksongl/npm-vuln-poc](https://github.com/jacksongl/npm-vuln-poc) Vulnerabilities discovered in npm repository [Berkeley PL & Security Research].
- [**24**星][6y] [Py] [izuzak/urlreq](https://github.com/izuzak/urlreq) HTTP proxy that decodes a HTTP request defined in the URL and makes that request
-- [**24**星][3y] [PowerShell] [invoke-ir/presentations](https://github.com/invoke-ir/presentations)
-- [**24**星][2m] [infosec-community/apac-meetups](https://github.com/infosec-community/apac-meetups) A community contributed consolidated list of InfoSec meetups in the Asia Pacific region.
+- [**24**星][3y] [PS] [invoke-ir/presentations](https://github.com/invoke-ir/presentations)
- [**24**星][3y] [JS] [informationshallbefree/spiegel-plus-unlocker-firefox](https://github.com/informationshallbefree/spiegel-plus-unlocker-firefox) A Firefox Addon to decrypt every Spiegel Plus article without paying money.
-- [**24**星][1y] [Py] [ihack4falafel/slink](https://github.com/ihack4falafel/slink) Alphanumeric Shellcode (x86) Encoder
-- [**24**星][2y] [Go] [himei29a/gichidan](https://github.com/himei29a/gichidan) Gichidan - CLI wrapper for Ichidan deep-web search engine.
+- [**24**星][2m] [Py] [ictu/zap-baseline](https://github.com/ictu/zap-baseline) Zap baseline scanner in Docker with authentication
- [**24**星][2y] [Shell] [hannob/ctgrab](https://github.com/hannob/ctgrab)
- [**24**星][6y] [C] [hacksysteam/shellcodeofdeath](https://github.com/hacksysteam/shellcodeofdeath) Shellcode Of Death
-- [**24**星][2y] [Py] [hackingenvivo/doxing](https://github.com/hackingenvivo/doxing) Espionaje y recopilación de Información
-- [**24**星][8y] [Objective-C] [hackedteam/vector-macos-root](https://github.com/hackedteam/vector-macos-root) root installation for MacOS
+- [**24**星][6y] [Ruby] [hackedteam/rcs-backdoor](https://github.com/hackedteam/rcs-backdoor) Backdoor implementation in Ruby (testing)
+- [**24**星][1y] [Py] [gynvael/arcanesector](https://github.com/gynvael/arcanesector) Arcane Sector game - a CTF task, or old-school (MMO)RPG - depending on the perspective. The code is of terrible quality, you have been warned!
- [**24**星][3y] [C] [guilhermeferreira/spikepp](https://github.com/guilhermeferreira/spikepp) SPIKE is a protocol fuzzer creation kit. It provides an API that allows a user to create their own fuzzers for network based protocols using the C++ programming language. The tool defines a number of primitives that it makes available to C coders, which allows it to construct fuzzed messages called “SPIKES” that can be sent to a network service …
- [**24**星][1y] [JS] [goliatone/arpscan](https://github.com/goliatone/arpscan) Node arp-scan wrapper
+- [**24**星][3m] [Py] [ghostofgoes/adles](https://github.com/ghostofgoes/adles) Automated Deployment of Lab Environments System (ADLES)
+- [**24**星][3y] [Py] [freedomofpress/fingerprint-securedrop](https://github.com/freedomofpress/fingerprint-securedrop) A machine learning data analysis pipeline for analyzing website fingerprinting attacks and defenses.
- [**24**星][2y] [foundstone/expertinvestigationguides](https://github.com/foundstone/expertinvestigationguides) Expert Investigation Guides
+- [**24**星][20d] [Py] [foteinosmerg/pymerkle](https://github.com/foteinosmerg/pymerkle) Python crypto toolkit for generation and validation of Merkle-Proofs
- [**24**星][4y] [C] [fortiguard-lion/anti-dll-hijacking](https://github.com/fortiguard-lion/anti-dll-hijacking)
- [**24**星][3y] [Py] [forensicmatt/pancakeviewer](https://github.com/forensicmatt/pancakeviewer) A DFVFS Backed Forensic Viewer
- [**24**星][3y] [Py] [fluproject/flunym0us](https://github.com/fluproject/flunym0us) Flunym0us is a Vulnerability Scanner for Wordpress and Moodle designed by Flu Project Team. Flunym0us has been developed in Python. Flunym0us performs dictionary attacks against Web sites. By default, Flunym0us includes a dictionary for Wordpress and other for Moodle.
- [**24**星][3y] [Py] [felmoltor/keepnote_import_nmap](https://github.com/felmoltor/keepnote_import_nmap) Plugin for keepnote to import a XML nmap file
-- [**24**星][4m] [Shell] [fajartheggman/f-tools](https://github.com/fajartheggman/f-tools) Toolkit Hacking
+- [**24**星][5d] [Shell] [fajartheggman/f-tools](https://github.com/fajartheggman/f-tools) Toolkit Hacking
- [**24**星][4y] [exp-sky/hitcon-2015-spartan-0day-exploit](https://github.com/exp-sky/hitcon-2015-spartan-0day-exploit) HitCon 2015 spartan 0day & exploit
+- [**24**星][4y] [JS] [eviltik/evilwaf](https://github.com/eviltik/evilwaf) Web Application Firewall (WAF) Detection Tool
- [**24**星][2y] [evilmog/hashcat-hcstat](https://github.com/evilmog/hashcat-hcstat) A collection of hashcat-hcstat files
-- [**24**星][6m] [JS] [ettic-team/endpointfinder](https://github.com/ettic-team/endpointfinder)
-- [**24**星][10d] [HTML] [equalitie/banjax](https://github.com/equalitie/banjax) Apache Traffic Server Plugin performing various anti-DDoS measures
+- [**24**星][6m] [Py] [evild3ad/isodump](https://github.com/evild3ad/isodump) isodump - ISO dump utility
+- [**24**星][7m] [JS] [ettic-team/endpointfinder](https://github.com/ettic-team/endpointfinder)
+- [**24**星][12d] [HTML] [equalitie/banjax](https://github.com/equalitie/banjax) Apache Traffic Server Plugin performing various anti-DDoS measures
- [**24**星][6y] [C++] [epsylon3/odbgscript](https://github.com/epsylon3/odbgscript) OllyDBG Script Engine
- [**24**星][1y] [C] [enovella/exploitrainings](https://github.com/enovella/exploitrainings) Exploitation on different architectures (x86, x64, arm, mips, avr)
- [**24**星][5y] [C++] [edix/malwareresourcescanner](https://github.com/edix/malwareresourcescanner) Scanning and identifying XOR encrypted PE files in PE resources
-- [**24**星][5m] [HTML] [duocircle/office365-setup-dkim-dmarc-spf](https://github.com/duocircle/office365-setup-dkim-dmarc-spf) Setup guide for Office 365 Administrators who are unable to use ATP to configure SPF, DKIM and DMARC.
- [**24**星][2y] [Py] [dsnezhkov/octohook](https://github.com/dsnezhkov/octohook) Git Web Hook Tunnel for C2
- [**24**星][6y] [Py] [dkovar/ircollect](https://github.com/dkovar/ircollect) ircollect
- [**24**星][9m] [Dockerfile] [dizcza/docker-hashcat](https://github.com/dizcza/docker-hashcat) Hashcat docker for Ubuntu 18.04 OpenCL 2.1
+- [**24**星][2y] [ObjC] [dev-liyang/lytableviewwidget](https://github.com/dev-liyang/lytableviewwidget) 逆向微信-分析学习微信是如何快速构建静态TableView界面的
+- [**24**星][1m] [Py] [desword/pwn_execrise](https://github.com/desword/pwn_execrise) A collection of pwn execrise
- [**24**星][3y] [Ruby] [deadbits/maz](https://github.com/deadbits/maz) Malware Analysis Zoo
- [**24**星][2y] [Py] [cym13/vbs-reverse-shell](https://github.com/cym13/vbs-reverse-shell) VBS reverse shell scripts
- [**24**星][6y] [PHP] [cyberisltd/gzipbloat](https://github.com/cyberisltd/gzipbloat) PHP framework to test User-Agents and intermediary content inspection devices for denial-of-service vulnerabilities with respect to HTTP response decompression.
@@ -15775,10 +17002,14 @@ for CVE details based on the nmap report.
- [**24**星][1y] [Py] [cosine0/amphitrite](https://github.com/cosine0/amphitrite) Symbolic debugging tool using JonathanSalwan/Triton
- [**24**星][2y] [Groovy] [continuumsecurity/ropeytasks](https://github.com/continuumsecurity/ropeytasks) Deliberately vulnerable web application
- [**24**星][2y] [Java] [commonsguy/autofillfollies](https://github.com/commonsguy/autofillfollies) Demonstration of security issues with Android 8.0 autofill
+- [**24**星][2y] [PS] [codingo/retrieve-windows-wifi-passwords](https://github.com/codingo/retrieve-windows-wifi-passwords) Retreives the SSID names and passwords in cleartext for each Wifi network stored on the computer running this powershell script and output to JSON.
- [**24**星][4y] [C] [cngutierr/ersatzpassword](https://github.com/cngutierr/ersatzpassword)
- [**24**星][1y] [CSS] [citguru/jobby](https://github.com/citguru/jobby) A Job Listing Web App using NodeJS and Indreed
- [**24**星][10m] [chrysh/ctf_writeups](https://github.com/chrysh/ctf_writeups)
- [**24**星][7y] [Ruby] [chrislee35/flowtag](https://github.com/chrislee35/flowtag) FlowTag visualizes pcap files for forensic analysis
+- [**24**星][3y] [C++] [chausner/1337patch](https://github.com/chausner/1337patch) Simple command-line tool to apply patches exported by x64dbg to running processes
+- [**24**星][1y] [Py] [bwesterb/pol](https://github.com/bwesterb/pol) pol /pɵl/ is a modern command line password manager with deniable encryption
+- [**24**星][5y] [Py] [burningcodes/dexconfuse](https://github.com/burningcodes/dexconfuse) 简易dex混淆器
- [**24**星][5m] [Py] [bunseokbot/darklight](https://github.com/bunseokbot/darklight) Engine for collecting onion domains and crawling from webpage based on Tor network
- [**24**星][3y] [Py] [bunseokbot/androtools](https://github.com/bunseokbot/androtools) Android malware static & dynamic analysis and automated action (deprecated)
- [**24**星][2y] [Py] [brainsmoke/pub-archive](https://github.com/brainsmoke/pub-archive)
@@ -15788,6 +17019,8 @@ for CVE details based on the nmap report.
- [**24**星][10m] [C++] [blitz/baresifter](https://github.com/blitz/baresifter) A bare-metal x86 instruction set fuzzer a la Sandsifter
- [**24**星][2y] [PHP] [blackfan/jpg_payload](https://github.com/blackfan/jpg_payload)
- [**24**星][10m] [bkerler/slides_and_papers](https://github.com/bkerler/slides_and_papers) Here be dragons. Or Slides. Or Papers. Or Nothing :)
+- [**24**星][11m] [Go] [betalo-sweden/forwardingproxy](https://github.com/betalo-sweden/forwardingproxy) A HTTP/S forwarding proxy in Go
+- [**24**星][9m] [C] [begriffs/utofu](https://github.com/begriffs/utofu) Unicode Trust on First Use (TOFU)
- [**24**星][2m] [JS] [aykutcevik/idn-safe](https://github.com/aykutcevik/idn-safe) "IDN Safe" is a browser extension which blocks internationalized domain names to prevent you from visiting probable fake sites
- [**24**星][3y] [C] [avalon1610/alpc](https://github.com/avalon1610/alpc) Advance LPC
- [**24**星][2y] [JS] [auth0-blog/nextjs-got](https://github.com/auth0-blog/nextjs-got) A simple nextjs application that showcases Game of Thrones Characters
@@ -15795,17 +17028,21 @@ for CVE details based on the nmap report.
- [**24**星][2m] [Ruby] [arkadiyt/ssrf_filter](https://github.com/arkadiyt/ssrf_filter) A ruby gem for defending against Server Side Request Forgery (SSRF) attacks
- [**24**星][4y] [C] [arizvisa/afl-cygwin](https://github.com/arizvisa/afl-cygwin) AFL "mostly" ported to cygwin
- [**24**星][8m] [C++] [anwi-wips/anwi](https://github.com/anwi-wips/anwi) 新型无线IDS, 基于低成本的Wi-Fi模块(ESP8266)
-- [**24**星][5y] [PowerShell] [anweiss/dockerclientdsc](https://github.com/anweiss/dockerclientdsc)
-- [**24**星][29d] [Dockerfile] [antswordproject/antsword-labs](https://github.com/antswordproject/antsword-labs) Awesome environment for antsword tests
-- [**24**星][7m] [Py] [antisomnus/sniffer](https://github.com/antisomnus/sniffer) Simple sniffer using scapy and PyQt5 on Windows 10
+- [**24**星][5y] [PS] [anweiss/dockerclientdsc](https://github.com/anweiss/dockerclientdsc)
+- [**24**星][1m] [Dockerfile] [antswordproject/antsword-labs](https://github.com/antswordproject/antsword-labs) Awesome environment for antsword tests
- [**24**星][1m] [Py] [anssi-fr/packetweaver](https://github.com/anssi-fr/packetweaver) A Python framework for script filing and task sequencing
- [**24**星][7y] [Java] [akdeniz/mitmsocks4j](https://github.com/akdeniz/mitmsocks4j) Man in the Middle SOCKS Proxy for JAVA
- [**24**星][4y] [JS] [aerospaceresearch/dgsn_bigwhoop](https://github.com/aerospaceresearch/dgsn_bigwhoop) BigWhoop
-- [**24**星][29d] [Perl] [abarisani/abarisani.github.io](https://github.com/abarisani/abarisani.github.io)
+- [**24**星][1y] [C++] [adrianyy/x64-syscall](https://github.com/adrianyy/x64-syscall) x64 syscall caller in C++.
+- [**24**星][2y] [Py] [admintony/sql-injection](https://github.com/admintony/sql-injection) 解决sqlmap不能跑的注入
+- [**24**星][1m] [Perl] [abarisani/abarisani.github.io](https://github.com/abarisani/abarisani.github.io)
+- [**24**星][9m] [Py] [a-maumau/vesta](https://github.com/a-maumau/vesta) GPU state check script.
- [**24**星][1y] [0xkiewicz/pwk-oscp](https://github.com/0xkiewicz/pwk-oscp) Empower your enumeration during OSCP
- [**24**星][3y] [Py] [0xbc/chiasm-shell](https://github.com/0xbc/chiasm-shell) Python-based interactive assembler/disassembler CLI, powered by Keystone/Capstone.
- [**24**星][2y] [Py] [0verl0ad/dumb0](https://github.com/0verl0ad/dumb0) A simple tool to dump users in popular forums and CMS :)
-- [**23**星][10d] [C] [tidesec/peach_fuzzing](https://github.com/tidesec/peach_fuzzing) 在学习使用peach进行模糊测试时,搜集到的一些不错的资料,以及配套的一些软件或脚本。
+- [**24**星][7d] [Py] [00xc/h2buster](https://github.com/00xc/h2buster) A fast, threaded, recursive, web directory brute-force scanner over HTTP/2.
+- [**23**星][2y] [jonnybanana/essential-usb-rubber-ducky-printable-cheat-sheet](https://github.com/jonnybanana/essential-usb-rubber-ducky-printable-cheat-sheet) My personal RubberDucky Cheat Sheet, in JPG, PNG and PDF
+- [**23**星][6m] [C++] [amirrezanasiri/usb-keystroke-injector](https://github.com/amirrezanasiri/usb-keystroke-injector)
- [**23**星][8m] [Shell] [thelinuxchoice/clipboardme](https://github.com/thelinuxchoice/clipboardme) Grab target's clipboard content
- [**23**星][8m] [C++] [hikariobfuscator/core](https://github.com/hikariobfuscator/core) Shared Obfuscation Core
- [**23**星][2m] [Shell] [hak5/signalowl-payloads](https://github.com/hak5/signalowl-payloads) The Official Hak5 Signal Owl Payload Repository
@@ -15814,38 +17051,46 @@ for CVE details based on the nmap report.
- [**23**星][2y] [C#] [lockfale/dotnetavbypass-master](https://github.com/lockfale/dotnetavbypass-master) C# AV bypass jank
- [**23**星][6y] [C#] [kjcracks/brake](https://github.com/kjcracks/brake) Remote cracking utility
- [**23**星][8y] [C#] [sensepost/suru](https://github.com/sensepost/suru) Suru is one of the original Man In The Middle (MITM) proxies that sits between the user's browser and the web application.
+- [**23**星][6y] [Py] [fsecurelabs/jasmin](https://github.com/fsecurelabs/jasmin)
+- [**23**星][3m] [Shell] [owasp/honeypot-project](https://github.com/owasp/honeypot-project)
- [**23**星][2y] [Py] [wi-fi-analyzer/boopsuite](https://github.com/wi-fi-analyzer/boopsuite) A Suite of Tools written in Python for wireless auditing and security testing.
- [**23**星][3y] [hack-with-github/security-bookmarks](https://github.com/hack-with-github/security-bookmarks) Single stop for security related stuff
+- [**23**星][1y] [Py] [ekultek/checkers](https://github.com/ekultek/checkers) Determine everything you need to know to about a system
- [**23**星][3m] [Py] [warner/magic-wormhole-transit-relay](https://github.com/warner/magic-wormhole-transit-relay) Transit Relay server for Magic-Wormhole
- [**23**星][5m] [Py] [ntkernel/cve-2019-0708](https://github.com/ntkernel/cve-2019-0708) 收集网上CVE-2018-0708的poc和exp(目前没有找到exp)
-- [**23**星][8y] [C++] [cr4sh/simpleunpacker](https://github.com/cr4sh/simpleunpacker) Simple tool for unpacking packed/protected malware executables.
+- [**23**星][3y] [C] [nicehash/cpuminer-opt](https://github.com/nicehash/cpuminer-opt)
- [**23**星][3y] [Py] [d4vinci/reversehttp](https://github.com/d4vinci/reversehttp) Python backdoor that uses http post/get requests to communicate
-- [**23**星][1y] [Py] [airbus-seclab/rebus](https://github.com/airbus-seclab/rebus) REbus facilitates the coupling of existing tools that perform specific tasks, where one's output will be used as the input of others.
+- [**23**星][2y] [Py] [airbus-seclab/rebus](https://github.com/airbus-seclab/rebus) REbus facilitates the coupling of existing tools that perform specific tasks, where one's output will be used as the input of others.
+- [**23**星][20d] [Py] [angr/archr](https://github.com/angr/archr) Target-centric program analysis.
- [**23**星][4y] [Py] [andresriancho/django-moth](https://github.com/andresriancho/django-moth) A Django vulnerable Web application for testing the w3af framework
- [**23**星][3y] [robertdavidgraham/iotpasswds](https://github.com/robertdavidgraham/iotpasswds) Recording default/backdoor passwords from IoT devices I come across
- [**23**星][6y] [Go] [inconshreveable/shroud](https://github.com/inconshreveable/shroud) [DEPRECATED] Public hidden services
- [**23**星][2y] [Py] [andresriancho/mongo-objectid-predict](https://github.com/andresriancho/mongo-objectid-predict) Predict Mongo ObjectIds
- [**23**星][1y] [hikariobfuscator/swift](https://github.com/hikariobfuscator/swift) Swift Fork
- [**23**星][3y] [JS] [uber-common/paranoid-request](https://github.com/uber-common/paranoid-request) An SSRF-preventing wrapper around Node's request module
+- [**23**星][6m] [JS] [greenwolf/eslint-security-scanner-configs](https://github.com/greenwolf/eslint-security-scanner-configs) eslintrc.js config files for running static analysis on JavaScript to identify security issues.
- [**23**星][2y] [Ruby] [urbanadventurer/urlcrazy](https://github.com/urbanadventurer/urlcrazy) Generate and test domain typos and variations to detect and perform typo squatting, URL hijacking, phishing, and corporate espionage.
- [**23**星][1y] [Go] [tam7t/cautious-pancake](https://github.com/tam7t/cautious-pancake) github generated the repo name for me
-- [**23**星][9d] [JS] [keenwon/koa-subdomain](https://github.com/keenwon/koa-subdomain) Simple and lightweight Koa middleware to handle multilevel and wildcard subdomains
+- [**23**星][11d] [JS] [keenwon/koa-subdomain](https://github.com/keenwon/koa-subdomain) Simple and lightweight Koa middleware to handle multilevel and wildcard subdomains
- [**23**星][1m] [Go] [hahwul/ras-fuzzer](https://github.com/hahwul/ras-fuzzer) RAS(RAndom Subdomain) Fuzzer
-- [**23**星][11d] [JS] [josephpei/uv2ray](https://github.com/josephpei/uv2ray) Electron V2ray Client (mostly for Linux)
+- [**23**星][13d] [JS] [josephpei/uv2ray](https://github.com/josephpei/uv2ray) Electron V2ray Client (mostly for Linux)
- [**23**星][3y] [Py] [ptonewreckin/blindref](https://github.com/ptonewreckin/blindref) BlindRef serves as the basis for an automated Blind-Based XXE Exploitation Framework
- [**23**星][3m] [Py] [k8gege/phpstudydoor](https://github.com/k8gege/phpstudydoor) PhpStudy 2016 & 2018 BackDoor Exploit
-- [**23**星][7m] [Py] [bonnetn/vba-obfuscator](https://github.com/bonnetn/vba-obfuscator) 2018 School project - PoC of malware code obfuscation in Word macros
+- [**23**星][3y] [Java] [nexxado/wifipasswords](https://github.com/nexxado/wifipasswords) a completely free app that shows your device saved wifi passwords.
+- [**23**星][3y] [C++] [aixxe/cstrike-basehook-linux](https://github.com/aixxe/cstrike-basehook-linux) Internal project base for Counter-Strike: Source on Linux.
- [**23**星][1y] [JS] [andreas0607/coinhive-blocker](https://github.com/andreas0607/coinhive-blocker) Blocks unwanted cryptominers in your browser (plug-in)
- [**23**星][5y] [C] [rpp0/peapwn](https://github.com/rpp0/peapwn) Proof-of-concept implementation of the Apple relay attack in Python
- [**23**星][5y] [Py] [vnik5287/wpa-autopwn](https://github.com/vnik5287/wpa-autopwn) WPA/WPA2 autopwn script that parses captured handshakes and sends them to the Crackq
+- [**23**星][29d] [awsmhacks/awsmbloodhoundcustomqueries](https://github.com/awsmhacks/awsmbloodhoundcustomqueries) Collection of cyphers for bloodhound
- [**23**星][2m] [C] [doublelabyrinth/windowssudo](https://github.com/doublelabyrinth/windowssudo) A linux-like su/sudo on Windows.
-- [**23**星][2y] [Ruby] [trailofbits/trailofphish](https://github.com/trailofbits/trailofphish) Phishing e-mail repository
+- [**23**星][4y] [C#] [olliencc/winbinaryaudit](https://github.com/olliencc/winbinaryaudit) GSAudit at Symantec, ExeAudit at RIM, RECX Binary Assurance for Windows at Recx etc. - core library now WinBinaryAudit
- [**23**星][2m] [rarecoil/pantagrule](https://github.com/rarecoil/pantagrule) hashcat rules generated from over 840 million compromised passwords
-- [**23**星][16d] [Py] [bing0o/python-scripts](https://github.com/bing0o/python-scripts) some scripts for penetration testing
+- [**23**星][4d] [Py] [bing0o/python-scripts](https://github.com/bing0o/python-scripts) some scripts for penetration testing
- [**23**星][2m] [PHP] [coenjacobs/wp-haveibeenpwned](https://github.com/coenjacobs/wp-haveibeenpwned) Checks if the password for each WordPress user account has been compromised via haveibeenpwned.com
-- [**23**星][3m] [abhinavprasad47/bugbounty-starter-notes](https://github.com/abhinavprasad47/bugbounty-starter-notes) bug bounty hunters starter notes
+- [**23**星][3m] [Visual Basic .NET] [henriksb/extensionspoofer](https://github.com/henriksb/extensionspoofer) Spoof file icons and extensions in Windows
- [**23**星][6y] [vtsingaras/qcom-mbn-ida-loader](https://github.com/vtsingaras/qcom-mbn-ida-loader) IDA loader plugin for Qualcomm Bootloader Stages
- [**23**星][5m] [Java] [openjavacard/openjavacard-ndef](https://github.com/OpenJavaCard/openjavacard-ndef) NDEF tag implementation for JavaCard
+- [**23**星][3y] [Java] [ichukai/forwarder](https://github.com/ichukai/forwarder) 穿透内网的端口转发工具
- [**23**星][2y] [OpenEdge ABL] [praetorian-code/ctf-writeups](https://github.com/praetorian-code/ctf-writeups) Collection of Praetorian solutions to CTF challenges
- [**23**星][3y] [Py] [jofpin/backcookie](https://github.com/jofpin/backcookie) Small backdoor using cookie.
- [**23**星][4y] [bannsec/angr-windows](https://github.com/bannsec/angr-Windows) Windows builds for use with angr framework
@@ -15853,84 +17098,93 @@ for CVE details based on the nmap report.
- [**23**星][5y] [Assembly] [zerosum0x0/slae64](https://github.com/zerosum0x0/slae64) x64 Linux Shellcode
- [**23**星][4y] [Py] [zedsec390/defcon23](https://github.com/zedsec390/defcon23)
- [**23**星][3y] [Py] [zachriggle/pwndbg](https://github.com/zachriggle/pwndbg) GDB插件,辅助漏洞开发和逆向
+- [**23**星][2m] [xxpe3/clash_raspberrypi](https://github.com/xxpe3/clash_raspberrypi) Clash for ARMv6L
- [**23**星][4m] [C++] [xpn/rpcenum](https://github.com/xpn/rpcenum) An command-line RPC method enumerator, born out of RPCView's awesomeness
- [**23**星][5m] [Py] [xorpd/fcatalog_server](https://github.com/xorpd/fcatalog_server) Functions Catalog
- [**23**星][2y] [PHP] [xiaoxiaoleo/xiao-webshell](https://github.com/xiaoxiaoleo/xiao-webshell) a collection of webshell
-- [**23**星][1y] [Visual Basic] [xiaoxiaoleo/pentest-script](https://github.com/xiaoxiaoleo/pentest-script) Script for pentest
+- [**23**星][2y] [Visual Basic .NET] [xiaoxiaoleo/pentest-script](https://github.com/xiaoxiaoleo/pentest-script) Script for pentest
- [**23**星][7y] [C++] [wyyqyl/hidemodule](https://github.com/wyyqyl/hidemodule) The dll that can hide itself and then delete itselft.
+- [**23**星][3m] [C] [ww9210/kernel4.20_bpf_lpe](https://github.com/ww9210/kernel4.20_bpf_lpe) exploit code for a bpf heap overflow vulnerability
- [**23**星][2y] [Py] [whitel1st/gp_hijack](https://github.com/whitel1st/gp_hijack) Group Policy Hijacking
- [**23**星][3y] [Py] [whaleshark-team/chromeheadlessinterface](https://github.com/whaleshark-team/chromeheadlessinterface)
- [**23**星][2y] [PHP] [weaverheavy/threat-intelligence-tradecraft](https://github.com/weaverheavy/threat-intelligence-tradecraft)
- [**23**星][2y] [C] [wanttobeno/wmifilter](https://github.com/wanttobeno/wmifilter) 驱动层拦截web访问源码
- [**23**星][12m] [C++] [wanttobeno/screenshot](https://github.com/wanttobeno/screenshot) 仿QQ截图,C++实现的截图软件Demo
- [**23**星][9m] [Perl] [vti/cpan-audit](https://github.com/vti/cpan-audit) Check CPAN modules for known security vulnerabilities
-- [**23**星][3m] [C++] [vertextoedge/windowfunctiontracer](https://github.com/vertextoedge/windowfunctiontracer) Window Executable file Function tracer using Debugging API
-- [**23**星][2y] [C++] [verideth/repen](https://github.com/verideth/repen) Simple disassembler, going to support lots of architectures. Very easy to read and understand as well :)
+- [**23**星][2y] [C++] [verideth/repen](https://github.com/verideth/repen) Simple C8 disassembler
- [**23**星][1y] [JS] [veggiedefender/marveloptics_malware](https://github.com/veggiedefender/marveloptics_malware) Deobfuscated + reverse engineered javascript malware
- [**23**星][3m] [C#] [vchirikov/gotodnspy](https://github.com/vchirikov/gotodnspy) GoTo dnSpy from Visual Studio 2017
- [**23**星][3y] [Java] [vah13/burpcrlfplugin](https://github.com/vah13/burpcrlfplugin) Another plugin for CRLF vulnerability detection
+- [**23**星][6m] [Swift] [universonic/shadowsocks-macos](https://github.com/universonic/shadowsocks-macos) Shadowsocks Client for Apple macOS
- [**23**星][3y] [Py] [tylabs/quicksand_tools](https://github.com/tylabs/quicksand_tools) API access to QuickSand.io
- [**23**星][4m] [C] [tumi8/zmap](https://github.com/tumi8/zmap) ZMapv6: Internet Scanner with IPv6 capabilities
- [**23**星][3y] [C#] [tum-i22/vot4cs](https://github.com/tum-i22/vot4cs) vot4cs:C#虚拟化混淆工具
- [**23**星][3y] [C] [true-systems/om5p-ac-v2-unlocker](https://github.com/true-systems/om5p-ac-v2-unlocker) Open Mesh OM5P-AC v2 Unlocker (U-Boot 1.1.4 based)
- [**23**星][10m] [C++] [trojancyborg/ida_jni_rename](https://github.com/trojancyborg/ida_jni_rename) IDA JNI clal rename
-- [**23**星][2m] [Dockerfile] [trojan-gfw/trojan-docker](https://github.com/trojan-gfw/trojan-docker) Dockerfile for building a trojan docker image.
- [**23**星][2y] [HTML] [tothi/ctfs](https://github.com/tothi/ctfs) some example ctf writeups
+- [**23**星][15d] [Shell] [torworld/fastrelay](https://github.com/torworld/fastrelay) Making it easier to run your own Tor Relay Node.
- [**23**星][2y] [Py] [tomrittervg/ct-tools](https://github.com/tomrittervg/ct-tools) Random tools to perform Certificate Transparency-related stuff
- [**23**星][2y] [Py] [tintinweb/unbox](https://github.com/tintinweb/unbox) Unbox is a convenient one-click unpack and decompiler tool that wraps existing 3rd party applications like IDA Pro, JD-Cli, Dex2Src, and others to provide a convenient archiver liker command line interfaces to unpack and decompile various types of files
+- [**23**星][2m] [Py] [theevilbit/exploits](https://github.com/theevilbit/exploits)
- [**23**星][1y] [Py] [the404hacking/xsscan](https://github.com/the404hacking/xsscan) XsSCan | Web Application XSS Scanner | Coded By Sir.4m1R [Mr.Hidden]
- [**23**星][2y] [Java] [techguy-bhushan/xssrequestfilters](https://github.com/techguy-bhushan/xssrequestfilters) Light weight library for Filter the Cross-site scripting in request For Spring Framwork / Spring-Boot, logic can be use for servlet based(without using spring framework) application
- [**23**星][3y] [JS] [techgaun/xss-payloads](https://github.com/techgaun/xss-payloads) Collection of XSS Payloads from various sources
- [**23**星][2y] [JS] [team-copper/captar](https://github.com/team-copper/captar) Augmented Reality Geolocation Capture-the-Flag Mobile Game Capstone Project
- [**23**星][3y] [Py] [te-k/malware-classification](https://github.com/te-k/malware-classification) Data and code for malware classification using machine learning (for fun, not production)
+- [**23**星][4d] [Go] [tdh8316/investigo](https://github.com/tdh8316/investigo) The minimal Go implementation of Sherlock -
- [**23**星][5m] [HTML] [tarafans/collections](https://github.com/tarafans/collections) A medley of PoCs and exploits
- [**23**星][4y] [XSLT] [stixproject/stix-to-html](https://github.com/stixproject/stix-to-html) Convert STIX XML to HTML
-- [**23**星][1y] [C++] [sshsshy/zerotrace](https://github.com/sshsshy/zerotrace)
+- [**23**星][2y] [C++] [sshsshy/zerotrace](https://github.com/sshsshy/zerotrace)
- [**23**星][1y] [Shell] [sourcerer-io/sourcerer-blog](https://github.com/sourcerer-io/sourcerer-blog) Assets and examples for blog.sourcerer.io
- [**23**星][2y] [Py] [somu1795/shodan_raspi](https://github.com/somu1795/shodan_raspi) Hack Raspberry Pi(s) across the world !
-- [**23**星][3y] [PowerShell] [skons/ms17-0100](https://github.com/skons/ms17-0100) Mixing up CVE and MS like a pro
+- [**23**星][3y] [PS] [skons/ms17-0100](https://github.com/skons/ms17-0100) Mixing up CVE and MS like a pro
- [**23**星][2y] [Py] [simonuvarov/expdev](https://github.com/simonuvarov/expdev)
- [**23**星][4y] [Py] [shengqi158/weak_password_detect](https://github.com/shengqi158/weak_password_detect) 多线程探测弱密码程序
- [**23**星][4y] [Py] [shadowsocksfork/shadowsocksfork](https://github.com/shadowsocksfork/shadowsocksfork) A fork of shadowsocks 2.8.2
-- [**23**星][3y] [Py] [sciencemanx/ctf-tools](https://github.com/sciencemanx/ctf-tools) Attack-Defend CTF Tools
-- [**23**星][11m] [scanfsec/cve-2018-15982](https://github.com/scanfsec/cve-2018-15982) Aggressor Script to launch IE driveby for CVE-2018-15982.
+- [**23**星][7m] [Py] [seyptoo/7z-bruteforce](https://github.com/seyptoo/7z-bruteforce) This repository consists of bruteforce to a 7z file, and it can be very useful in the penetration tests
+- [**23**星][4y] [PHP] [secwiki/exp](https://github.com/secwiki/exp) 收集各种各样的exp
+- [**23**星][2m] [Shell] [samuelhbne/vpn-launchpad](https://github.com/samuelhbne/vpn-launchpad) Builds Shadowsocks VPN server on AWS EC2 with QR code support. Works on Ubuntu, OSX and Debian variants including Raspbian.
- [**23**星][2y] [Py] [s3xy/cve-2017-10271](https://github.com/s3xy/cve-2017-10271) Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful …
- [**23**星][4y] [JS] [rwestergren/simple-hash-xss](https://github.com/rwestergren/simple-hash-xss)
- [**23**星][1m] [JS] [roemhildtg/spectre-canjs](https://github.com/roemhildtg/spectre-canjs) A WIP data administration component library built on the Spectre.css framework enabled with CanJS
- [**23**星][2y] [PHP] [riyazwalikar/sql-injection-training-app](https://github.com/riyazwalikar/sql-injection-training-app) A simple PHP application that can be used to demonstrate and train participants to detect and exploit SQL Injection vulnerabilities.
- [**23**星][3y] [Py] [remnux/distro](https://github.com/remnux/distro) This repository contains supplementary files for building and using the REMnux Linux distribution. See
- [**23**星][1y] [Go] [releasel0ck/blind-sql-injector](https://github.com/releasel0ck/blind-sql-injector) 手工盲注辅助注入工具
+- [**23**星][2y] [C] [rednaga/keystore-shim](https://github.com/rednaga/keystore-shim) Shim to grab keystore backed data
- [**23**星][3y] [Go] [redhat-cip/skydive](https://github.com/redhat-cip/skydive) An open source real-time network topology and protocols analyzer
- [**23**星][4m] [Py] [radare/diaphora](https://github.com/radare/diaphora) Diaphora, a Free and Open Source program diffing tool
- [**23**星][11m] [PHP] [r0nen/ctf](https://github.com/r0nen/ctf) CTF Writeups
- [**23**星][2y] [ptresearch/intelme-crypto](https://github.com/ptresearch/intelme-crypto)
- [**23**星][2y] [proteas/afl-swift](https://github.com/proteas/afl-swift) use afl to fuzz swift program
+- [**23**星][11m] [Py] [privcount/privcount](https://github.com/privcount/privcount) Privacy-preserving Tor statistics aggregation tool that implements the secret-sharing variant of the PrivEx algorithm.
- [**23**星][2y] [Py] [pieterbork/blueborne](https://github.com/pieterbork/blueborne) Scan/Exploit Blueborne CVE-2017-0785
- [**23**星][1y] [Py] [pielco11/t2b-framework](https://github.com/pielco11/t2b-framework) Cross-Platform Post Exploitation Toolkit
- [**23**星][3y] [Py] [pfalcon/ida-xtensa2](https://github.com/pfalcon/ida-xtensa2) IDAPython plugin for Tensilica Xtensa (as seen in ESP8266), version 2
+- [**23**星][2m] [Py] [paloaltonetworks/autofocus-lenz](https://github.com/paloaltonetworks/autofocus-lenz) A command line utility to aid in using autofocus for IR and research
- [**23**星][12m] [C#] [padovah4ck/redsharp](https://github.com/padovah4ck/redsharp) Penetration Test / Read Team - C# tools repository
- [**23**星][2y] [C] [p4p1/p4p1](https://github.com/p4p1/p4p1) Reverse shell for remote administration
- [**23**星][3m] [Py] [ozzi-/tld_scanner](https://github.com/ozzi-/tld_scanner) Scan all possible TLD's for a given domain name
- [**23**星][1y] [Assembly] [osandamalith/pesecinfo](https://github.com/osandamalith/pesecinfo) A simple tool to view important DLL Characteristics and change DEP and ASLR
- [**23**星][11m] [Shell] [optixal/dotfiles](https://github.com/optixal/dotfiles)
-- [**23**星][12d] [Java] [opticfusion1/mcantimalware](https://github.com/opticfusion1/mcantimalware) Anti-Malware for minecraft
-- [**23**星][3y] [C] [opensise/cve_poc_collect](https://github.com/opensise/cve_poc_collect) 这里会收集各种类型的CVE PoC 和EXP ,仅用来学习漏洞挖掘相关技术..
- [**23**星][3y] [Shell] [opensecurityresearch/ciphertest](https://github.com/opensecurityresearch/ciphertest) A better SSL cipher checker using gnutls
-- [**23**星][2y] [Shell] [oniondecoy/installer](https://github.com/oniondecoy/installer) A platform to run private unannounced Honeypots as Tor Hidden Services (aka Onion Decoys) inside the Tor Network.
- [**23**星][1y] [Go] [olihough86/stinkyphish](https://github.com/olihough86/stinkyphish) Monitor Certificate Transparency Logs For Phishing Domains
-- [**23**星][9d] [Py] [nullpxl/nullctf](https://github.com/nullpxl/nullctf) A Discord bot that provides ctf tools for collaboration in Discord servers!
+- [**23**星][11d] [Py] [nullpxl/nullctf](https://github.com/nullpxl/nullctf) A Discord bot that provides ctf tools for collaboration in Discord servers!
- [**23**星][7y] [Ruby] [nuke99/sqlnuke](https://github.com/nuke99/sqlnuke) SQLNuke | Fast Performing MYSQL Injection load_file() Fuzzer
- [**23**星][2y] [C] [nucypher/nucypher-pre-python](https://github.com/nucypher/nucypher-pre-python) nucypher-pre-python:Python 实现的“代理重加密(Proxy Re-Encryption)”算法
- [**23**星][4y] [Py] [nitscan/inlinux](https://github.com/nitscan/inlinux) 内网渗透信息收集脚本
-- [**23**星][1y] [PowerShell] [netspi/sqlc2](https://github.com/netspi/sqlc2) SQLC2 is a PowerShell script for deploying and managing a command and control system that uses SQL Server as both the control server and the agent.
+- [**23**星][1y] [PS] [netspi/sqlc2](https://github.com/netspi/sqlc2) SQLC2 is a PowerShell script for deploying and managing a command and control system that uses SQL Server as both the control server and the agent.
- [**23**星][6y] [Py] [nccgroup/xcavator](https://github.com/nccgroup/xcavator) A network data locater using credentials obtained during penetration tests
- [**23**星][2y] [C++] [nccgroup/bleboy](https://github.com/nccgroup/bleboy) BLEBoy is a training tool to teach users about BLE security by providing a single BLE peripheral that can be used to experiment with each BLE pairing method and demonstrates GATT security concepts.
-- [**23**星][11m] [C] [nardholio/cve-2016-0728](https://github.com/nardholio/cve-2016-0728)
+- [**23**星][12m] [C] [nardholio/cve-2016-0728](https://github.com/nardholio/cve-2016-0728)
- [**23**星][2m] [Pascal] [nannib/imm2virtual](https://github.com/nannib/imm2virtual) This is a GUI (for Windows 64 bit) for a procedure to virtualize your EWF(E01), DD (raw), AFF disk image file without converting it, directly with VirtualBox, forensically proof.
+- [**23**星][2y] [Shell] [mricon/tor-relay-bootstrap-rpi](https://github.com/mricon/tor-relay-bootstrap-rpi) Script to bootstrap a Debian server to be a set-and-forget Tor relay
+- [**23**星][8m] [PHP] [mrahmadt/smartgw](https://github.com/mrahmadt/smartgw) Domain based VPN Gateway/Proxy for all devices
- [**23**星][3y] [HTML] [mortenschenk/bypassing_cfg_seh](https://github.com/mortenschenk/bypassing_cfg_seh) Using SEH to bypass CFG
- [**23**星][1y] [C] [moccajoghurt/drvmap_secure](https://github.com/moccajoghurt/drvmap_secure)
-- [**23**星][17d] [C] [microsoft/modsecurity](https://github.com/microsoft/modsecurity) ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analys…
+- [**23**星][19d] [C] [microsoft/modsecurity](https://github.com/microsoft/modsecurity) ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analys…
+- [**23**星][3y] [Py] [merkjinx/saddam-plus-plus](https://github.com/merkjinx/saddam-plus-plus) open source DDoS Amplification Tool with scanners.
- [**23**星][5m] [meitar/awesome-malware](https://github.com/meitar/awesome-malware)
+- [**23**星][8d] [Shell] [meisterp/torbrowser-overlay](https://github.com/meisterp/torbrowser-overlay) Gentoo overlay for Tor Browser related ebuilds
- [**23**星][6m] [JS] [mcibique/express-security](https://github.com/mcibique/express-security) nodejs + express security and performance boilerplate.
- [**23**星][5m] [C++] [mbrengel/memscrimper](https://github.com/mbrengel/memscrimper) Code for the DIMVA 2018 paper: "MemScrimper: Time- and Space-Efficient Storage of Malware Sandbox Memory Dumps"
- [**23**星][3y] [C++] [matviy/leaguereplayhook](https://github.com/matviy/leaguereplayhook) Library for interacting with the League of Legends Spectator/Replay Client
@@ -15938,29 +17192,34 @@ for CVE details based on the nmap report.
- [**23**星][3y] [Py] [markusteufelberger/afl-ddmin-mod](https://github.com/markusteufelberger/afl-ddmin-mod) Test case minimizer for afl-fuzz
- [**23**星][4y] [C] [marcograss/cve-2014-4323](https://github.com/marcograss/cve-2014-4323) cve-2014-4323 poc
- [**23**星][6m] [C] [maikel233/x-hook-for-csgo](https://github.com/maikel233/x-hook-for-csgo) Aimtux for Windows.
-- [**23**星][1y] [Py] [m4rktn/jogan](https://github.com/m4rktn/jogan) Pentest Tools & Packages Installer [Linux/Termux]
+- [**23**星][4y] [PHP] [lxj616/dvwa-wooyun](https://github.com/lxj616/dvwa-wooyun) It is a DVWA with some plugins based on real wooyun bug reports
+- [**23**星][1y] [C] [lucascouto/krackattack-all-zero-tk-key](https://github.com/lucascouto/krackattack-all-zero-tk-key) This code has base on a code made by Mathy Vanhoef (
- [**23**星][1y] [C] [logicaltrust/minerva_lib](https://github.com/logicaltrust/minerva_lib) polish fuzzy lop - fuzzer for libraries/APIs/*
- [**23**星][7y] [C] [liblit/murphy](https://github.com/liblit/murphy) language-agnostic tool that helps developers discover and isolate run-time failures in their programs by simulating difficult-to-reproduce but completely-legitimate interactions between the application and the kernel
- [**23**星][5y] [C++] [liamkarlmitchell/signaturescanner](https://github.com/liamkarlmitchell/signaturescanner) I wanted a nicer signature scanner that worked the way I wanted. Include however you want in your own DLL project.
-- [**23**星][3m] [Shell] [leviathan36/wifibang](https://github.com/leviathan36/wifibang) wifi attacks suite
- [**23**星][3m] [Go] [leoid/mysql-injection-exfiltration-optimization](https://github.com/leoid/mysql-injection-exfiltration-optimization) MySQL Injection Exfoliation Optimization
- [**23**星][7y] [Py] [lbragues/pasteminer](https://github.com/lbragues/pasteminer) Find useful stuff in pastebin
- [**23**星][4y] [Py] [laudarch/shellsploit](https://github.com/laudarch/shellsploit) Mutation Of Vıruses
-- [**23**星][1m] [kylebing/sslist](https://github.com/kylebing/sslist) 优化访问速度的小型 gfw (Great Fire Wall) 规则列表 gfwlist
+- [**23**星][2d] [kylebing/sslist](https://github.com/kylebing/sslist) 优化访问速度的小型 gfw (Great Fire Wall) 规则列表 gfwlist
- [**23**星][3y] [Py] [kx499/ostip](https://github.com/kx499/ostip)
- [**23**星][3y] [C++] [kuqadk3/winrarer-ransomware](https://github.com/kuqadk3/winrarer-ransomware)
- [**23**星][3m] [Assembly] [mwkmwkmwk/cpuadventure](https://github.com/mwkmwkmwk/cpuadventure) CPU Adventure task from Dragon CTF 2019 teaser
- [**23**星][4y] [JS] [kolanich/cleanunwantedupdates](https://github.com/kolanich/cleanunwantedupdates) A set of scripts to detect updates of Microsoft (TM) Windows (TM) OS which harm users' privacy and uninstall them
- [**23**星][2y] [C] [kelvinhack/screencapattack](https://github.com/kelvinhack/screencapattack)
-- [**23**星][7m] [TypeScript] [jvilk/mitmproxy-node](https://github.com/jvilk/mitmproxy-node) A bridge between Python's mitmproxy and Node.JS programs. Rewrite network requests using Node.JS!
+- [**23**星][6y] [C] [jyang772/hideprocesshookmdl](https://github.com/jyang772/hideprocesshookmdl) A simple rootkit to hide a process
+- [**23**星][7m] [TS] [jvilk/mitmproxy-node](https://github.com/jvilk/mitmproxy-node) A bridge between Python's mitmproxy and Node.JS programs. Rewrite network requests using Node.JS!
- [**23**星][6m] [C] [junxzm1990/afl-pt](https://github.com/junxzm1990/afl-pt)
-- [**23**星][6m] [Py] [jpiechowka/zip-shotgun](https://github.com/jpiechowka/zip-shotgun) Utility script to test zip file upload functionality (and possible extraction of zip files) for vulnerabilities (aka Zip Slip)
-- [**23**星][3y] [Shell] [josefkarasek/docker101](https://github.com/josefkarasek/docker101) Docker for absolute beginners. Learn how to get and run Docker containers. Created for the Brno Docker meetup group.
+- [**23**星][2m] [Py] [jplesperance/redis-sniffer](https://github.com/jplesperance/redis-sniffer) A Redis event sniffer and logging utility.
+- [**23**星][7m] [Py] [jpiechowka/zip-shotgun](https://github.com/jpiechowka/zip-shotgun) Utility script to test zip file upload functionality (and possible extraction of zip files) for vulnerabilities (aka Zip Slip)
+- [**23**星][4y] [Shell] [josefkarasek/docker101](https://github.com/josefkarasek/docker101) Docker for absolute beginners. Learn how to get and run Docker containers. Created for the Brno Docker meetup group.
- [**23**星][4m] [Py] [jonathansalwan/x-tunnel-opaque-predicates](https://github.com/jonathansalwan/x-tunnel-opaque-predicates) IDA+Triton plugin in order to extract opaque predicates using a Forward-Bounded DSE. Example with X-Tunnel.
- [**23**星][2m] [jmscory/security-tool-chest](https://github.com/jmscory/security-tool-chest) A list of useful security and obvescation tools useful for red and blue teaming activities. A list made possible by the provided references.
- [**23**星][4y] [PHP] [jgamblin/nmap-for-slack](https://github.com/jgamblin/nmap-for-slack) Custom slash command to do a basic nmap scan from within Slack
+- [**23**星][2y] [JS] [jamesacampbell/elector](https://github.com/jamesacampbell/elector) TOR BROWSER IN ELECTRON
- [**23**星][3y] [Java] [jackuhan/loginhook](https://github.com/jackuhan/loginhook) xposed的hook案例
-- [**23**星][2y] [Shell] [jacksongl/npm-vuln-poc](https://github.com/jacksongl/npm-vuln-poc) Vulnerabilities discovered in npm repository [Berkeley PL & Security Research].
+- [**23**星][1y] [Py] [j40903272/malconv-keras](https://github.com/j40903272/malconv-keras) This is the implementation of MalConv proposed in [Malware Detection by Eating a Whole EXE](
+- [**23**星][12m] [ObjC] [rpwnage/warri0r](https://github.com/RPwnage/Warri0r) ios 12 Sandbox escape POC
+- [**23**星][10d] [PHP] [ip2location/ip2proxy-php](https://github.com/ip2location/ip2proxy-php) PHP module for IP2Proxy database lookup. It allows user to query an IP address if it was being used as open proxy, web proxy, VPN anonymizer and TOR exits.
- [**23**星][1y] [C] [ioactive/kmdf_re](https://github.com/ioactive/kmdf_re) 辅助逆向KMDF驱动
- [**23**星][3y] [C++] [insomnihack/teaser-2017](https://github.com/insomnihack/teaser-2017)
- [**23**星][5y] [Ruby] [insomnihack/insomnihack-2015](https://github.com/insomnihack/insomnihack-2015) Repository for Insomni'hack finals 2015
@@ -15969,30 +17228,33 @@ for CVE details based on the nmap report.
- [**23**星][10m] [Nim] [imgp3dev/drmitm](https://github.com/imgp3dev/drmitm) DrMITM is a program designed to globally log all traffic of a website.
- [**23**星][2y] [C] [ieeeicsg/ieee_taggant_system](https://github.com/ieeeicsg/ieee_taggant_system) Taggant System developed by the Malware Working Group of ICSG (Industry Connections Security Group) under the umbrella of IEEE
- [**23**星][1y] [Java] [realbearcat/jackson-cve-2017-17485](https://github.com/RealBearcat/Jackson-CVE-2017-17485) Jackson 反序列化
+- [**23**星][9m] [Py] [hpd0ger/supertags](https://github.com/hpd0ger/supertags) 一个Burpsuite插件,用于检测隐藏的XSS
- [**23**星][7m] [Py] [horusteknoloji/tr-phishinglist](https://github.com/horusteknoloji/tr-phishinglist) Türkiye'ye Yönelik Zararlı Bağlantı Erişim Engelleme Listesi
+- [**23**星][3y] [Go] [hgfischer/domainerator](https://github.com/hgfischer/domainerator) Simple application written in Go that combines two wordlists and a list of TLDs to form domain names and check if they are already registered.
- [**23**星][3y] [C] [hedgeh/sewindows](https://github.com/hedgeh/sewindows) 在Windows上建立一个开源的强制访问控制框架及SDK。使Windows平台的应用开发者,可以不用关心操作系统底层技术,只用进行简单的SDK调用或配置就可以保护自己的应用程序。
-- [**23**星][6y] [Ruby] [hackedteam/rcs-backdoor](https://github.com/hackedteam/rcs-backdoor) Backdoor implementation in Ruby (testing)
-- [**23**星][1y] [Py] [gynvael/arcanesector](https://github.com/gynvael/arcanesector) Arcane Sector game - a CTF task, or old-school (MMO)RPG - depending on the perspective. The code is of terrible quality, you have been warned!
+- [**23**星][1y] [C] [hardenedbsd/secadm](https://github.com/hardenedbsd/secadm) HardenedBSD Security Administration
+- [**23**星][3y] [hani1990/phith0n-mind-map](https://github.com/hani1990/phith0n-mind-map)
- [**23**星][3y] [C] [guidovranken/openssl-x509-vulnerabilities](https://github.com/guidovranken/openssl-x509-vulnerabilities)
- [**23**星][2y] [PHP] [graniet/physics-command](https://github.com/graniet/physics-command) 硬件系统分析平台(例如:树莓派3B)
-- [**23**星][2m] [C++] [grammatech/gtirb-pprinter](https://github.com/grammatech/gtirb-pprinter) Pretty printer from GTIRB to assembly code
-- [**23**星][3m] [Py] [ghostofgoes/adles](https://github.com/ghostofgoes/adles) Automated Deployment of Lab Environments System (ADLES)
+- [**23**星][2d] [C++] [grammatech/gtirb-pprinter](https://github.com/grammatech/gtirb-pprinter) Pretty printer from GTIRB to assembly code
+- [**23**星][7m] [JS] [gnuhpc/kibana-multitenant-proxy](https://github.com/gnuhpc/kibana-multitenant-proxy) A proxy behind nginx while before kibana (4.x, 5.x) to provide data isolation for different users
- [**23**星][3y] [Py] [german-namestnikov/unhidens](https://github.com/german-namestnikov/unhidens) Small DNS Recon utility, allows you to obtain some useful info about NS-servers placed behind relays, firewalls, etc.
- [**23**星][10m] [Go] [gen0cide/hasherbasher](https://github.com/gen0cide/hasherbasher) SQL injection via bruteforced MD5 hash reflection of random strings
- [**23**星][2y] [Jupyter Notebook] [geekonlinecode/malware-machine-learning](https://github.com/geekonlinecode/malware-machine-learning) Malware Machine Learning
- [**23**星][4y] [Rust] [gcarq/arp-spoof](https://github.com/gcarq/arp-spoof) Minimal ARP-Spoofing tool written in Rust
- [**23**星][1y] [ActionScript] [ga1ois/recon-2018-montreal](https://github.com/ga1ois/recon-2018-montreal)
-- [**23**星][3y] [Py] [freenas/middleware](https://github.com/freenas/middleware) New FreeNAS 10 Middleware
- [**23**星][2y] [PHP] [freak3dot/wp-smart-honeypot](https://github.com/freak3dot/wp-smart-honeypot) Wordpress plugin to reduce comment spam with a smarter honeypot.
- [**23**星][6y] [Py] [feliam/cve-2013-2729](https://github.com/feliam/cve-2013-2729)
-- [**23**星][9m] [C++] [fare9/pba_analysis_tools](https://github.com/fare9/pba_analysis_tools) My own versions from the programs of the book "Practical Binary Analysis"
+- [**23**星][1y] [Py] [farisv/appledos](https://github.com/farisv/appledos) Messing Apple devices on the network with CVE-2018-4407 (heap overflow in bad packet handling)
- [**23**星][5y] [exp-sky/hitcon-2014-ie-11-0day-windows-8.1-exploit](https://github.com/exp-sky/hitcon-2014-ie-11-0day-windows-8.1-exploit) HitCon 2014 : IE 11 0day & Windows 8.1 Exploit
- [**23**星][1y] [C++] [ewhitehats/kovtertools](https://github.com/ewhitehats/kovtertools)
- [**23**星][4y] [HTML] [etherpot/contract](https://github.com/etherpot/contract)
-- [**23**星][2y] [PowerShell] [elevenpaths/usbhiddennetworks](https://github.com/elevenpaths/usbhiddennetworks)
+- [**23**星][7m] [C] [enfuzz/enfuzz](https://github.com/enfuzz/enfuzz)
+- [**23**星][2y] [PS] [elevenpaths/usbhiddennetworks](https://github.com/elevenpaths/usbhiddennetworks)
- [**23**星][4m] [Py] [elespike/burp-cph](https://github.com/elespike/burp-cph) Custom Parameter Handler extension for Burp Suite.
-- [**23**星][4m] [PowerShell] [dpaulson45/exchangelogcollector](https://github.com/dpaulson45/exchangelogcollector) Exchange Log Collection Script
+- [**23**星][4m] [PS] [dpaulson45/exchangelogcollector](https://github.com/dpaulson45/exchangelogcollector) Exchange Log Collection Script
- [**23**星][2y] [C++] [dougallj/dj_ida_plugins](https://github.com/dougallj/dj_ida_plugins) 向Hex-Rays反编译器添加VMX intrinsics
+- [**23**星][2m] [C++] [dns-oarc/dnsmeter](https://github.com/dns-oarc/dnsmeter) Tool for testing performance of nameservers
- [**23**星][8m] [C] [djhohnstein/wlbsctrl_poc](https://github.com/djhohnstein/wlbsctrl_poc) C++ POC code for the wlbsctrl.dll hijack on IKEEXT
- [**23**星][1y] [Java] [distrinet/xsr-framework](https://github.com/distrinet/xsr-framework) A framework for automatic testing of third-party request and cookie policy implementations
- [**23**星][2m] [JS] [devwerks/xss-cheatsheet](https://github.com/devwerks/xss-cheatsheet) XSS Cheatsheet - A collection of XSS attack vectors
@@ -16000,33 +17262,32 @@ for CVE details based on the nmap report.
- [**23**星][1y] [Ruby] [dev-sec/chef-mysql-hardening](https://github.com/dev-sec/chef-mysql-hardening) This chef cookbook provides security configuration for mysql.
- [**23**星][1y] [Ruby] [dev-sec/chef-apache-hardening](https://github.com/dev-sec/chef-apache-hardening)
- [**23**星][2y] [Vue] [deturium/school-bus](https://github.com/deturium/school-bus) 浙江大学AAA战队开放 CTF 练习平台新前端
-- [**23**星][1m] [Py] [desword/pwn_execrise](https://github.com/desword/pwn_execrise) A collection of pwn execrise
- [**23**星][1y] [c++] [dax89/r2gui](https://github.com/dax89/r2gui) Unofficial Qt5 frontend for Radare2
- [**23**星][3y] [C] [davidbuchanan314/cowroot](https://github.com/davidbuchanan314/cowroot) Universal Android root tool based on CVE-2016-5195. Watch this space.
- [**23**星][3y] [C] [david-reguera-garcia-dreg/phook](https://github.com/david-reguera-garcia-dreg/phook) Full DLL Hooking, phrack 65
+- [**23**星][11m] [dariubs/awesome-proxy](https://github.com/dariubs/awesome-proxy) A collaborative list of awesome proxy servers and resources. Feel free to contribute!
- [**23**星][1y] [C#] [damonmohammadbagher/nativepayload_ip6dns](https://github.com/damonmohammadbagher/nativepayload_ip6dns) C# code for Transferring Backdoor Payloads by IPv6 Address (AAAA) records and DNS Traffic also Bypassing Anti-viruses
+- [**23**星][1y] [Py] [damian89/commoncrawlparser](https://github.com/damian89/commoncrawlparser) Simple multi threaded tool to extract domain related data from commoncrawl.org
- [**23**星][3y] [Py] [d4vinci/anti_killer](https://github.com/d4vinci/anti_killer) Kill Any Antivirus Using Python For Windows Users .
- [**23**星][2m] [Py] [cyberheartmi9/cve-2017-8295](https://github.com/cyberheartmi9/cve-2017-8295)
-- [**23**星][21d] [C++] [curl/curl-fuzzer](https://github.com/curl/curl-fuzzer) Quality assurance testing for the curl project
+- [**23**星][23d] [C++] [curl/curl-fuzzer](https://github.com/curl/curl-fuzzer) Quality assurance testing for the curl project
- [**23**星][5y] [C] [ctu-iig/802.11p-linux](https://github.com/ctu-iig/802.11p-linux) mac80211/wireless next tree
- [**23**星][7y] [C++] [cr4sh/ida-ubigraph](https://github.com/cr4sh/ida-ubigraph) IDA Pro plug-in and tools for displaying 3D graphs of procedures using UbiGraph
-- [**23**星][12d] [Py] [costa-group/ethir](https://github.com/costa-group/ethir) A framework for high-level Analysis of Ethereum Bytecode
+- [**23**星][7d] [Py] [costa-group/ethir](https://github.com/costa-group/ethir) A framework for high-level Analysis of Ethereum Bytecode
- [**23**星][1m] [Py] [cornerpirate/cve-offline](https://github.com/cornerpirate/cve-offline) An easy to grep dump of the NVD database showing only; CVE-ID, CVSS Risk Score, and Summary.
- [**23**星][6y] [commonexploits/weape](https://github.com/commonexploits/weape) Weape-Wireless-EAP-Extractor
- [**23**星][11m] [Py] [coldshell/malware-scripts](https://github.com/coldshell/malware-scripts)
- [**23**星][11m] [coldev/coldevprolayer](https://github.com/coldev/coldevprolayer) Protect your PHP code with obfuscation and encryption
-- [**23**星][2y] [PowerShell] [codingo/retrieve-windows-wifi-passwords](https://github.com/codingo/retrieve-windows-wifi-passwords) Retreives the SSID names and passwords in cleartext for each Wifi network stored on the computer running this powershell script and output to JSON.
- [**23**星][3y] [C] [cn33liz/hsevd-arbitraryoverwrite](https://github.com/cn33liz/hsevd-arbitraryoverwrite) HackSys Extreme Vulnerable Driver - ArbitraryOverwrite Exploit
- [**23**星][5y] [Ruby] [claudijd/bnat](https://github.com/claudijd/bnat) "Broken NAT" - A suite of tools focused on detecting and interacting with publicly available BNAT scenerios
-- [**23**星][3y] [C++] [chausner/1337patch](https://github.com/chausner/1337patch) Simple command-line tool to apply patches exported by x64dbg to running processes
+- [**23**星][3y] [Py] [chengable/safe_code](https://github.com/chengable/safe_code) absolute safe code
- [**23**星][5y] [C++] [certcc/dranzer](https://github.com/certcc/dranzer) Dranzer is a tool that enables users to examine effective techniques for fuzz testing ActiveX controls
-- [**23**星][10m] [XSLT] [capt-meelo/massmap](https://github.com/capt-meelo/massmap) Combined port scanning w/ Masscan's speed & Nmap's scanning features.
- [**23**星][3y] [JS] [calmh/yardstick](https://github.com/calmh/yardstick) [UNMAINTAINED] Javascript code metrics
- [**23**星][2y] [bxlcity/malware](https://github.com/bxlcity/malware)
-- [**23**星][5y] [Py] [burningcodes/dexconfuse](https://github.com/burningcodes/dexconfuse) 简易dex混淆器
- [**23**星][1y] [Py] [buckhacker/subdomaintakeovertools](https://github.com/buckhacker/subdomaintakeovertools)
+- [**23**星][2y] [Py] [brunneis/scihub-downloader](https://github.com/brunneis/scihub-downloader) Sci-Hub PDF downloader through Tor Network (Docker image)
- [**23**星][4y] [brucecio9999/cryptowire-advanced-autoit-ransomware-project](https://github.com/brucecio9999/cryptowire-advanced-autoit-ransomware-project) This is a advanced ransomware example made in AutoIt
-- [**23**星][8d] [JS] [bowlingtoolkit/discord-bots-hack-code](https://github.com/bowlingtoolkit/discord-bots-hack-code) Discord Bots Hacking
+- [**23**星][6m] [Jupyter Notebook] [briansrebrenik/final_project](https://github.com/briansrebrenik/final_project) Using Twitter Ego Network Analysis to Detect Sources of Fake News
- [**23**星][3m] [Py] [bitthebyte/domainker](https://github.com/bitthebyte/domainker) BugBounty Tool
- [**23**星][5y] [C++] [behzad-a/dytan](https://github.com/behzad-a/dytan) Dytan Taint Analysis Framework on Linux 64-bit
- [**23**星][2y] [C++] [balika011/belf](https://github.com/balika011/belf) Balika011's PlayStation 4 ELF loader for IDA Pro 7.0/7.1
@@ -16037,46 +17298,56 @@ for CVE details based on the nmap report.
- [**23**星][3y] [C] [armedpot/honeytrap](https://github.com/armedpot/honeytrap) Last download from git://git.carnivore.it/honeytrap.git of Honytrap by Tillmann Werner
- [**23**星][2m] [C] [arizvisa/ndk](https://github.com/arizvisa/ndk) A local copy of Alex Ionescu's seemingly abandoned native-nt-toolkit project containing knowledge inherited from the ReactOS project.
- [**23**星][2y] [C++] [apriorit/svchostdemo](https://github.com/apriorit/svchostdemo) Demo service that runs in svchost.exe
+- [**23**星][3y] [ObjC] [apestalk/debugwindow](https://github.com/apestalk/debugwindow) 一个在真机上测试时方便查看输出日志的小工具。(A debug tool which helps you view the console logs on the device when you test you APP.)
+- [**23**星][7m] [Py] [antisomnus/sniffer](https://github.com/antisomnus/sniffer) Simple sniffer using scapy and PyQt5 on Windows 10
- [**23**星][12m] [Py] [anotherik/rogueap-detector](https://github.com/anotherik/rogueap-detector) Rogue Access Point Detector
+- [**23**星][6m] [Py] [anhkgg/get52pojietools](https://github.com/anhkgg/get52pojietools) 一个批量下载52pojie爱盘中资源的小脚本。
- [**23**星][5m] [Py] [alexander-hanel/hansel](https://github.com/alexander-hanel/hansel) IDA搜索插件
-- [**23**星][11d] [Py] [aff4/pyaff4](https://github.com/aff4/pyaff4) The Python implementation of the AFF4 standard.
-- [**23**星][1y] [C++] [adrianyy/x64-syscall](https://github.com/adrianyy/x64-syscall) x64 syscall caller in C++.
-- [**23**星][2y] [Py] [admintony/sql-injection](https://github.com/admintony/sql-injection) 解决sqlmap不能跑的注入
+- [**23**星][13d] [Py] [aff4/pyaff4](https://github.com/aff4/pyaff4) The Python implementation of the AFF4 standard.
- [**23**星][2y] [abhishekkr/eden_guide_to_hacking](https://github.com/abhishekkr/eden_guide_to_hacking) its quick to read, broadway guide to HACKING ~ for anyone to have grasp of important concepts and skills which makes up the knowledge base of a hacker
+- [**23**星][3y] [C] [93aef0ce4dd141ece6f5/packer](https://github.com/93aef0ce4dd141ece6f5/packer) PoC executable packer using resources
- [**23**星][3y] [PHP] [3xp10it/xwebshell](https://github.com/3xp10it/xwebshell) 免杀webshell
- [**23**星][1y] [JS] [0xsobky/xssbuster](https://github.com/0xsobky/xssbuster) XSSB is a proactive DOM sanitizer, defending against client-side injection attacks!
-- [**23**星][18d] [Py] [00xc/h2buster](https://github.com/00xc/h2buster) A fast, threaded, recursive, web directory brute-force scanner over HTTP/2.
-- [**22**星][3d] [Py] [skybulk/bin2sc](https://github.com/skybulk/bin2sc) Binary to shellcode
-- [**22**星][27d] [Java] [snail007/goproxy-ss-plugin-android](https://github.com/snail007/goproxy-ss-plugin-android) goproxy安卓全局代理,ss goproxy安卓插件, goproxy :
+- [**23**星][2y] [Py] [0x024/ms](https://github.com/0x024/ms) 我的monitor system--智能家庭监控系统
+- [**22**星][2y] [C#] [xadamxk/usb-rubber-ducky-app](https://github.com/xadamxk/usb-rubber-ducky-app)
+- [**22**星][2d] [TS] [cedx/reverse-proxy.js](https://github.com/cedx/reverse-proxy.js) Personal reverse proxy server supporting WebSockets.
+- [**22**星][] [Py] [wisepythagoras/website-fingerprinting](https://github.com/wisepythagoras/website-fingerprinting) Deanonymizing Tor or VPN users with website fingerprinting and machine learning.
+- [**22**星][6d] [Go] [hahwul/websocket-connection-smuggler](https://github.com/hahwul/websocket-connection-smuggler) websocket-connection-smuggler
+- [**22**星][29d] [Java] [snail007/goproxy-ss-plugin-android](https://github.com/snail007/goproxy-ss-plugin-android) goproxy安卓全局代理,ss goproxy安卓插件, goproxy :
+- [**22**星][21d] [Py] [k8gege/pyladon](https://github.com/k8gege/pyladon) Ladon NetScan For Python (PortScan/OnlinePC/VulScan/Struts2/Weblogic/Exploit/GetShell/MS17010)
+- [**22**星][4y] [Py] [epsylon/anontwi](https://github.com/epsylon/anontwi) Anontwi is a tool for OAuth2 applications (such as: GNUSocial, Twitter) that provides different layers of encryption, privacy methods and proxy features.
- [**22**星][2y] [C] [nsacyber/driver-collider](https://github.com/nsacyber/driver-collider) Blocks drivers from loading by using a name collision technique. #nsacyber
-- [**22**星][3m] [Shell] [owasp/honeypot-project](https://github.com/owasp/honeypot-project)
-- [**22**星][3y] [Py] [mthbernardes/demoniware](https://github.com/mthbernardes/demoniware) Telegram BotNet
-- [**22**星][18d] [Py] [angr/archr](https://github.com/angr/archr) Target-centric program analysis.
- [**22**星][4y] [C] [shadowsocks/openssl-android](https://github.com/shadowsocks/openssl-android) A fork of OpenSSL for shadowsocks-android
-- [**22**星][6m] [JS] [greenwolf/eslint-security-scanner-configs](https://github.com/greenwolf/eslint-security-scanner-configs) eslintrc.js config files for running static analysis on JavaScript to identify security issues.
- [**22**星][9m] [CSS] [ytisf/apate](https://github.com/ytisf/apate) Your Friendly Neighbourhood Honeypot Maker and Manager
+- [**22**星][3y] [Py] [dxa4481/mimikittenz4linux](https://github.com/dxa4481/mimikittenz4linux) Steals cleartext passwords from webservices, by reading the memory of browsers
- [**22**星][2y] [Py] [d35m0nd142/joomla-components-exploits-auto-updating-scanner](https://github.com/d35m0nd142/joomla-components-exploits-auto-updating-scanner) Auto Updater Joomla Components and Exploits Scanner
-- [**22**星][1m] [JS] [xyntax/xctf-2019-tfboys](https://github.com/xyntax/xctf-2019-tfboys) source code of XCTF 2019 Final web task "tfboys"
+- [**22**星][2m] [JS] [xyntax/xctf-2019-tfboys](https://github.com/xyntax/xctf-2019-tfboys) source code of XCTF 2019 Final web task "tfboys"
- [**22**星][2y] [Go] [nachowski/warpwallet_cracker](https://github.com/nachowski/warpwallet_cracker) A brute-force cracker in Go for the WarpWallet Challenge 2
-- [**22**星][8d] [learnteachcode/code-coffee-compendium](https://github.com/learnteachcode/code-coffee-compendium) curated resource compendium, maintained by the Baldwin Park code & coffee study group
-- [**22**星][3m] [Ruby] [mitre-cyber-academy/ctf-scoreboard](https://github.com/mitre-cyber-academy/ctf-scoreboard) Repository for the MITRE Capture the Flag scoreboard.
+- [**22**星][10d] [learnteachcode/code-coffee-compendium](https://github.com/learnteachcode/code-coffee-compendium) curated resource compendium, maintained by the Baldwin Park code & coffee study group
+- [**22**星][1m] [Py] [5h4d0wb0y/socialbrute](https://github.com/5h4d0wb0y/socialbrute) It attempts to crack social networks using a brute force dictionary attack.
+- [**22**星][29d] [Py] [torpyorg/torpy](https://github.com/torpyorg/torpy) Pure python Tor client implementation of the Tor protocol
+- [**22**星][5d] [Ruby] [mitre-cyber-academy/ctf-scoreboard](https://github.com/mitre-cyber-academy/ctf-scoreboard) Repository for the MITRE Capture the Flag scoreboard.
- [**22**星][6m] [Batchfile] [dylanbai8/c2ray](https://github.com/dylanbai8/c2ray) C2ray 一款windows下的极简 V2ray 客户端
-- [**22**星][3y] [C++] [aixxe/cstrike-basehook-linux](https://github.com/aixxe/cstrike-basehook-linux) Internal project base for Counter-Strike: Source on Linux.
-- [**22**星][2m] [C] [adde88/hostapd-mana-openwrt](https://github.com/adde88/hostapd-mana-openwrt) hostapd-mana - build-files, and installation-files for OpenWRT
+- [**22**星][1m] [Go] [tismayil/rsdl](https://github.com/tismayil/rsdl) Subdomain Scan With Ping Method.
+- [**22**星][3m] [C] [adde88/hostapd-mana-openwrt](https://github.com/adde88/hostapd-mana-openwrt) hostapd-mana - build-files, and installation-files for OpenWRT
- [**22**星][5y] [C] [andyvand/atherosromkit](https://github.com/andyvand/atherosromkit) Atheros ROM modding and recovery kit
- [**22**星][7y] [brycethomas/liber80211](https://github.com/brycethomas/liber80211) 802.11 monitor mode for Android without root.
-- [**22**星][29d] [lbherrera/writeups](https://github.com/lbherrera/writeups)
+- [**22**星][1m] [lbherrera/writeups](https://github.com/lbherrera/writeups)
- [**22**星][2m] [Dockerfile] [kizzx2/docker-openvpn-client-socks](https://github.com/kizzx2/docker-openvpn-client-socks) Expose an OpenVPN tunnel as a SOCKS proxy
+- [**22**星][9m] [Py] [geekscrapy/bingraph](https://github.com/geekscrapy/bingraph) Simple tool to graph files for quick analysis
+- [**22**星][3m] [Go] [geek1011/easy-novnc](https://github.com/geek1011/easy-novnc) Run a noVNC instance, web UI, and multi-host proxy with a single binary.
- [**22**星][3m] [Py] [circl/forensic-tools](https://github.com/circl/forensic-tools) CIRCL system forensic tools or a jumble of tools to support forensic
-- [**22**星][12d] [Py] [penetrate2hack/itwsv](https://github.com/penetrate2hack/itwsv) ITWSV- Integrated Tool for Web Security Vulnerability
-- [**22**星][15d] [Py] [z3pp/zfuzz](https://github.com/z3pp/zfuzz) Simple python web fuzzer
-- [**22**星][2m] [C++] [legendl3n/smarthooker](https://github.com/legendl3n/smarthooker) The smartest hooking library.
+- [**22**星][2m] [Py] [adriangranados/wifiexplorer-sensor](https://github.com/adriangranados/wifiexplorer-sensor) Enables remote scanning in WiFi Explorer Pro
+- [**22**星][6m] [JS] [rndinfosecguy/vulture](https://github.com/rndinfosecguy/vulture) WhatsApp Online Tracker
+- [**22**星][3y] [JS] [yuiitsu/unproxy](https://github.com/yuiitsu/unproxy) chrome代理扩展
+- [**22**星][14d] [Py] [penetrate2hack/itwsv](https://github.com/penetrate2hack/itwsv) ITWSV- Integrated Tool for Web Security Vulnerability
+- [**22**星][3m] [C++] [legendl3n/smarthooker](https://github.com/legendl3n/smarthooker) The smartest hooking library.
- [**22**星][1m] [C#] [lowleveldesign/concerto](https://github.com/lowleveldesign/concerto) A simple tool to create TLS certificates for development purposes.
-- [**22**星][11d] [Shell] [mzfr/hackthebox-writeups](https://github.com/mzfr/HackTheBox-writeups) Writeups for all the HTB machines I have done
+- [**22**星][3d] [Shell] [mzfr/hackthebox-writeups](https://github.com/mzfr/HackTheBox-writeups) Writeups for all the HTB machines I have done
+- [**22**星][2m] [PHP] [marcocesarato/php-aio-security](https://github.com/marcocesarato/PHP-AIO-Security) The objective of this class is offer an automatic system of protection for developers's projects and simplify some security operations as the check of CSRF or XSS all in a simple class. Infact you could just call the main method to have better security yet without too much complicated operations.
- [**22**星][3y] [C] [jianpingzju/hypro](https://github.com/jianpingzju/Hypro) VMI on BitVisor to detect hidden rootkits.
-- [**22**星][3y] [Py] [cylance/idpanel](https://github.com/cylance/IDPanel) Identify botnet panels with Ensembled Decision Trees
- [**22**星][3m] [Py] [avast/retdec-regression-tests-framework](https://github.com/avast/retdec-regression-tests-framework) A framework for writing and running regression tests for RetDec and related tools.
-- [**22**星][4y] [TypeScript] [auth0-blog/ionic2-auth](https://github.com/auth0-blog/ionic2-auth)
+- [**22**星][4y] [TS] [auth0-blog/ionic2-auth](https://github.com/auth0-blog/ionic2-auth)
- [**22**星][2y] [PHP] [vysecurity/basicauth](https://github.com/vysecurity/basicAuth) Basic Auth Phish page
- [**22**星][1y] [Go] [zxsecurity/glugger](https://github.com/zxsecurity/glugger) The fastest (and least featureful) DNS bruteforcer in the South
- [**22**星][2y] [Py] [zigzag2050/mzphp2-deobfuscator](https://github.com/zigzag2050/mzphp2-deobfuscator) A de-obfuscate tool for code generated by mzphp2. 用于解混淆mzphp2加密的php文件的工具。
@@ -16084,17 +17355,16 @@ for CVE details based on the nmap report.
- [**22**星][2y] [C#] [zerokilo/directedgraphswv](https://github.com/zerokilo/directedgraphswv) Directed Graph Editor and Library, also XEX decompiler 3
- [**22**星][6y] [Py] [zachhuff386/dashcam](https://github.com/zachhuff386/dashcam) Raspberry Pi/BeagleBone Black dashcam
- [**22**星][2y] [Assembly] [yifengyou/x86-assembly-language-from-real-mode-to-protection-mode](https://github.com/yifengyou/x86-assembly-language-from-real-mode-to-protection-mode) x86汇编语言 从实模式到保护模式
-- [**22**星][2m] [xxpe3/clash_raspberrypi](https://github.com/xxpe3/clash_raspberrypi) Clash for ARMv6L
-- [**22**星][3m] [C] [ww9210/kernel4.20_bpf_lpe](https://github.com/ww9210/kernel4.20_bpf_lpe) exploit code for a bpf heap overflow vulnerability
+- [**22**星][4y] [Visual Basic .NET] [wpatoolkit/cap-converter](https://github.com/wpatoolkit/cap-converter) A small GUI tool for converting between cap and hccap files.
- [**22**星][1y] [HTML] [websecurify/acme-no-login-ng](https://github.com/websecurify/acme-no-login-ng) Demonstrates a login bypass attack against a sample MongoDB/NodeJS/AngularJS application
- [**22**星][1y] [Py] [webbreacher/emailwhois](https://github.com/webbreacher/emailwhois) Look up an email domain (@example.com), using Python, across all known domains.
- [**22**星][3m] [wangray/windbg-for-gdb-users](https://github.com/wangray/windbg-for-gdb-users) "Pwntools does not support Windows. Use a real OS ;)" — Zach Riggle, 2015
- [**22**星][5m] [Dockerfile] [vmayoral/basic_robot_cybersecurity](https://github.com/vmayoral/basic_robot_cybersecurity) An introductory series of cybersecurity for robots with a somewhat comprehensive step-by-step tutorials.
- [**22**星][4y] [C] [uvbs/vmpdbg2](https://github.com/uvbs/vmpdbg2)
-- [**22**星][6m] [Swift] [universonic/shadowsocks-macos](https://github.com/universonic/shadowsocks-macos) Shadowsocks Client for Apple macOS
- [**22**星][1y] [Py] [tyranid/canape](https://github.com/tyranid/canape) canape:网络测试工具,专为测试二进制协议(也可用于测试其他任意协议),内置标准网络代理,可使用户捕获和修改服务器的流量
+- [**22**星][4y] [PHP] [tux-00/network_miner](https://github.com/tux-00/network_miner) Network Miner generates a network map by sending SNMP requests (LLDP/CDP/EDP).
+- [**22**星][3y] [Py] [tromey/gdb-helpers](https://github.com/tromey/gdb-helpers) GDB helper scripts
- [**22**星][5y] [C#] [tophertimzen/shellcodetester](https://github.com/tophertimzen/shellcodetester) GUI Application in C# to run and disassemble shellcode
-- [**22**星][2m] [Py] [theevilbit/exploits](https://github.com/theevilbit/exploits)
- [**22**星][3y] [Py] [thedr1ver/wipster](https://github.com/thedr1ver/wipster) Web Interface Portal & Security Threat Engine for REMnux
- [**22**星][1y] [CSS] [textileio/dapp-template](https://github.com/textileio/dapp-template) a basic template to build simple ipfs-based browser dapps
- [**22**星][1y] [C#] [technikempire/windivertsharp](https://github.com/technikempire/windivertsharp) A minimal .NET binding over WinDivert
@@ -16107,25 +17377,31 @@ for CVE details based on the nmap report.
- [**22**星][1y] [PHP] [svelizdonoso/asyrv](https://github.com/svelizdonoso/asyrv) ASYRV es una aplicación escrita en PHP/MySQL, con Servicios Web mal desarrollados(SOAP/REST/XML), esperando ayudar a los entusiastas de la seguridad informática a comprender esta tecnología tan utilizada hoy en día por las Organizaciones.
- [**22**星][2y] [C] [superironbob/pdbwriter](https://github.com/superironbob/pdbwriter) A small tool to produce a dummy pdb for an executable with symbols at addresses from a file
- [**22**星][4y] [sunkehappy/ios-reverse-engineering-tools-backup](https://github.com/sunkehappy/ios-reverse-engineering-tools-backup) Some guys find the old lsof could not be downloaded. But I have it and I want to share it.
-- [**22**星][4m] [Py] [steved3/kit_hunter](https://github.com/steved3/kit_hunter) A basic phishing kit scanner for dedicated and semi-dedicated hosting
-- [**22**星][28d] [Py] [stamparm/dnslog](https://github.com/stamparm/dnslog) Minimalistic DNS logging tool
+- [**22**星][5m] [Py] [steved3/kit_hunter](https://github.com/steved3/kit_hunter) A basic phishing kit scanner for dedicated and semi-dedicated hosting
+- [**22**星][3y] [C#] [stephenhaunts/safepad](https://github.com/stephenhaunts/safepad) SafePad : Encrypted Text Editor. This text editor uses very strong encryption to let you protect your secrets. Great for storing passwords, credit card details or any else that you want to keep safe.
+- [**22**星][1m] [Py] [stamparm/dnslog](https://github.com/stamparm/dnslog) Minimalistic DNS logging tool
- [**22**星][12m] [Py] [st2labs/sipi](https://github.com/st2labs/sipi) Simple IP Information Tools for Reputation Data Analysis
-- [**22**星][26d] [Java] [spring-cloud/spring-cloud-scheduler](https://github.com/spring-cloud/spring-cloud-scheduler)
+- [**22**星][29d] [Java] [spring-cloud/spring-cloud-scheduler](https://github.com/spring-cloud/spring-cloud-scheduler)
- [**22**星][1y] [JS] [sipcapture/homer-ui](https://github.com/sipcapture/homer-ui) HOMER 5: Front-End (UI)
- [**22**星][5y] [Py] [siliconblade/volatility](https://github.com/siliconblade/volatility) volatility
- [**22**星][2y] [Java] [silentsignal/burp-uuid](https://github.com/silentsignal/burp-uuid) UUID issues for Burp Suite
- [**22**星][7m] [Java] [silentsignal/burp-requests](https://github.com/silentsignal/burp-requests) Copy as requests plugin for Burp Suite
- [**22**星][3y] [C++] [sensepost/misc-windows-hacking](https://github.com/sensepost/misc-windows-hacking) Miscellaneous projects related to attacking Windows.
- [**22**星][1y] [Py] [sebastienbr/volatility](https://github.com/sebastienbr/volatility) Utilities for the memory forensics framework
-- [**22**星][8d] [C#] [scenegate/yarhl](https://github.com/scenegate/yarhl) Yet Another ROM Hacking Library
+- [**22**星][9d] [C#] [scenegate/yarhl](https://github.com/scenegate/yarhl) Yet Another ROM Hacking Library
- [**22**星][2y] [Py] [saulty4ish/fuzzsafedog](https://github.com/saulty4ish/fuzzsafedog) 安全狗sql注入绕过
-- [**22**星][2m] [Shell] [samuelhbne/vpn-launchpad](https://github.com/samuelhbne/vpn-launchpad) Builds Shadowsocks VPN server on AWS EC2 with QR code support. Works on Ubuntu, OSX and Debian variants including Raspbian.
- [**22**星][3y] [C] [sagi/android_pocs](https://github.com/sagi/android_pocs) Android Vulnerability Reports and POCs.
+- [**22**星][5d] [CSS] [saferwall/saferwall](https://github.com/saferwall/saferwall) A hackable malware sandbox for the 21st Century
- [**22**星][1y] [Py] [russianotter/networking](https://github.com/russianotter/networking) All My Main Networking Programs
- [**22**星][11m] [C++] [rolfrolles/miscellaneous](https://github.com/rolfrolles/miscellaneous) Small programs and scripts that do not require their own repositories
- [**22**星][6y] [C++] [robotastic/smartnet-scanner](https://github.com/robotastic/smartnet-scanner) GNURadio based scanner for SmartNet II Digital radio systems.
- [**22**星][1y] [Py] [reivhax/chimay-red-tiny](https://github.com/reivhax/chimay-red-tiny) This is a minified exploit for mikrotik routers. It does not require any aditional modules to run.
- [**22**星][2y] [C] [rednixon/stegdetect](https://github.com/rednixon/stegdetect) Stegdetect is an automated tool for detecting steganographic content in images.
+- [**22**星][2m] [Py] [rceninja/re-scripts](https://github.com/rceninja/re-scripts)
+ - [Hyperv-Scripts](https://github.com/rceninja/re-scripts/tree/master/scripts/Hyperv-Scripts)
+ - [IA32-MSR-Decoder](https://github.com/rceninja/re-scripts/tree/master/scripts/IA32-MSR-Decoder) 查找并解码所有的MSR码
+ - [IA32-VMX-Helper](https://github.com/rceninja/re-scripts/tree/master/scripts/IA32-VMX-Helper) 查找并解码所有的MSR/VMCS码
+- [**22**星][2m] [Py] [random-robbie/bugbountydork](https://github.com/random-robbie/bugbountydork) Bug Bounty Dork
- [**22**星][7y] [Ruby] [raesene/owasp_web_app_testing_cheatsheet_converter](https://github.com/raesene/owasp_web_app_testing_cheatsheet_converter) OWASP Web Application Testing Cheat Sheet converted to tool formats
- [**22**星][4m] [Dockerfile] [raesene/dockerized-security-tools](https://github.com/raesene/dockerized-security-tools) Dockerfiles for security tools
- [**22**星][2m] [C] [radare/libdemangle](https://github.com/radare/libdemangle) A simple library focusing on demangling symbols for different programing languages
@@ -16134,14 +17410,15 @@ for CVE details based on the nmap report.
- [**22**星][3y] [PHP] [powerscript/getdatareport](https://github.com/powerscript/getdatareport) Get information client with getdatareport (Plugin)
- [**22**星][2m] [JS] [polyverse/envisen](https://github.com/polyverse/envisen) ROP gadget finder and analysis in pure Javascript
- [**22**星][3y] [HTML] [pdjstone/cloudpets-web-bluetooth](https://github.com/pdjstone/cloudpets-web-bluetooth) Demo of CloudPets toy functionality using Web Bluetooth
+- [**22**星][8m] [Shell] [payloadsecurity/vxcommunity](https://github.com/payloadsecurity/vxcommunity) This repository contains free Hybrid Analysis contributions to the IT-Security community
- [**22**星][1y] [C] [paul-tew/lifer](https://github.com/paul-tew/lifer) Windows link file forensic examiner
- [**22**星][3y] [C++] [patois/idaplugins](https://github.com/patois/idaplugins) Random IDA scripts, plugins, example code (some of it may be old and not working anymore)
-- [**22**星][2m] [Py] [paloaltonetworks/autofocus-lenz](https://github.com/paloaltonetworks/autofocus-lenz) A command line utility to aid in using autofocus for IR and research
-- [**22**星][27d] [owasp/owasp-swag](https://github.com/owasp/owasp-swag) Swag for the OWASP projects and chapters
+- [**22**星][29d] [owasp/owasp-swag](https://github.com/owasp/owasp-swag) Swag for the OWASP projects and chapters
- [**22**星][3y] [Assembly] [osandamalith/anti-debug](https://github.com/osandamalith/anti-debug) Some of the Anti-Debugging Tricks
- [**22**星][3y] [Py] [op7ic/shadowbroker-smb-scanner](https://github.com/op7ic/shadowbroker-smb-scanner) shadowbroker SMB exploit scanner. Scans for ETERNALSYNERGY ETERNALBLUE ETERNALROMANCE ETHERNALCHAMPION
- [**22**星][4y] [Py] [onethawt/idapyscripts](https://github.com/onethawt/idapyscripts) IDAPython脚本
- [DataXrefCounter ](https://github.com/onethawt/idapyscripts/blob/master/dataxrefcounter.py) 枚举指定区段的所有交叉引用,计算使用频率
+- [**22**星][2d] [Py] [oasis-open/cti-stix-validator](https://github.com/oasis-open/cti-stix-validator) OASIS TC Open Repository: Validator for STIX 2.0 JSON normative requirements and best practices
- [**22**星][1y] [Py] [nirizr/idasix](https://github.com/nirizr/idasix) IDAPython兼容库。创建平滑的IDA开发流程,使相同代码可应用于多个IDA/IDAPython版本
- [**22**星][5y] [Py] [nihilus/idascope](https://github.com/nihilus/idascope) 辅助恶意代码逆向(Bitbucket上的代码较新)
- [**22**星][1y] [Py] [nicksanzotta/linkscrape](https://github.com/nicksanzotta/linkscrape) A LinkedIn user/company enumeration tool.
@@ -16149,14 +17426,16 @@ for CVE details based on the nmap report.
- [**22**星][6y] [Py] [mothran/tlslite](https://github.com/mothran/tlslite) TLS Library in python
- [**22**星][4y] [Py] [monnappa22/linux_mem_diff_tool](https://github.com/monnappa22/linux_mem_diff_tool) Script to perform Linux Memory Diff Analysis Using Volatility
- [**22**星][7y] [Py] [milo2012/burpsql](https://github.com/milo2012/burpsql) Automating SQL injection using Burp Proxy Logs and SQLMap
-- [**22**星][3y] [Py] [merkjinx/saddam-plus-plus](https://github.com/merkjinx/saddam-plus-plus) open source DDoS Amplification Tool with scanners.
+- [**22**星][5d] [PHP] [middlewares/payload](https://github.com/middlewares/payload) PSR-15 middleware to parse the body of the request with support for json, csv and url-encode
- [**22**星][3y] [Swift] [melvinsh/burptoggle](https://github.com/melvinsh/burptoggle) Status bar application for OS X to toggle the state of the system HTTP/HTTPS proxy.
- [**22**星][1y] [C++] [meetpatty/basiliskii-vita](https://github.com/meetpatty/basiliskii-vita)
- [**22**星][5m] [HTML] [mdn/pab](https://github.com/mdn/pab) MDN Web Docs Product Advisory Board
- [**22**星][2y] [Py] [mdegrazia/onionpeeler](https://github.com/mdegrazia/onionpeeler) Python script to batch query the Tor Relays and Bridges
- [**22**星][4y] [Ruby] [martinvigo/metasploit-framework](https://github.com/martinvigo/metasploit-framework) Metasploit Framework
+- [**22**星][1y] [Py] [marcovaldong/isgan](https://github.com/marcovaldong/isgan) Implementation of "Invisible Steganography via Generative Adversarial Networks" (
- [**22**星][1y] [C#] [malcomvetter/antidebug](https://github.com/malcomvetter/antidebug) PoC: Prevent a debugger from attaching to managed .NET processes via a watcher process code pattern.
-- [**22**星][1y] [C] [lucascouto/krackattack-all-zero-tk-key](https://github.com/lucascouto/krackattack-all-zero-tk-key) This code has base on a code made by Mathy Vanhoef (
+- [**22**星][2d] [Dockerfile] [mablanco/docker-osmedeus](https://github.com/mablanco/docker-osmedeus) Docker image for Osmedeus, a fully automated offensive security tool for reconnaissance and vulnerability scanning
+- [**22**星][30d] [Py] [lylemi/saker](https://github.com/lylemi/saker) Flexible Penetrate Testing Auxiliary Suite
- [**22**星][1y] [Py] [lorenzb/submarine_sends](https://github.com/lorenzb/submarine_sends) A proof-of-concept implementation of Submarine Sends for Ethereum
- [**22**星][2y] [C] [lorecioni/imagesplicingdetection](https://github.com/lorecioni/imagesplicingdetection) Illuminant inconsistencies for image splicing detection in forensics
- [**22**星][2m] [Py] [lockgit/py](https://github.com/lockgit/py) rsa,base64,ac,kmp,svm,knn,mitm,hash table...
@@ -16165,76 +17444,89 @@ for CVE details based on the nmap report.
- [**22**星][2y] [Py] [leonardonve/dns2proxy_hsts](https://github.com/leonardonve/dns2proxy_hsts) DNS2Proxy offensive proxy version for HSTS
- [**22**星][1y] [Py] [leoid/encoder](https://github.com/leoid/encoder) Alphanumeric Encoder
- [**22**星][4y] [C#] [leechristensen/offensivepowershelltasking](https://github.com/leechristensen/offensivepowershelltasking) Run multiple PowerShell scripts concurrently in different app domains!
-- [**22**星][2y] [TypeScript] [lavalamp-/ws-frontend-community](https://github.com/lavalamp-/ws-frontend-community) Web Sight Front-end Community Edition
+- [**22**星][2y] [TS] [lavalamp-/ws-frontend-community](https://github.com/lavalamp-/ws-frontend-community) Web Sight Front-end Community Edition
+- [**22**星][1y] [Shell] [lamableu/morfeus_gui](https://github.com/lamableu/morfeus_gui) control your moRFeus device from your Linux-computer or Raspberry Pi
- [**22**星][1y] [Go] [lakevilladom/goskylar](https://github.com/lakevilladom/goskylar) 基于Golang开发的企业级外网端口资产扫描
- [**22**星][2y] [lac-japan/owasp-mobile-top-10-2016](https://github.com/lac-japan/owasp-mobile-top-10-2016) OWASP Mobile Top 10 2016 日本語訳
- [**22**星][8m] [Py] [laanwj/dwarf_to_c](https://github.com/laanwj/dwarf_to_c) Tool to recover C headers (types, function signatures) from DWARF debug data
- [**22**星][3y] [Py] [kutio/liblll](https://github.com/kutio/liblll) python library to manage and reduce lattices
-- [**22**星][6m] [Py] [keithjjones/malgazer](https://github.com/keithjjones/malgazer) A Python malware analysis library.
+- [**22**星][6m] [Shell] [kitsun3sec/pentest-cheat-sheets](https://github.com/kitsun3sec/pentest-cheat-sheets) A collection of snippets of codes and commands to make your life easier!
- [**22**星][4y] [Scala] [katjahahn/jwscan](https://github.com/katjahahn/jwscan) Scanner for Jar to EXE wrapper like Launch4j, Exe4j, JSmooth, Jar2Exe
- [**22**星][4y] [PHP] [k1p0d/zeus_reports_len](https://github.com/k1p0d/zeus_reports_len) Remote timing attack exploit against most Zeus/Zbot variants including Citadel, Ice9, Zeus 2.3, KINS/ZeusVM etc..
-- [**22**星][6y] [C] [jyang772/hideprocesshookmdl](https://github.com/jyang772/hideprocesshookmdl) A simple rootkit to hide a process
- [**22**星][2y] [Perl] [jusafing/pnaf](https://github.com/jusafing/pnaf) Passive Network Audit Framework
-- [**22**星][2m] [Py] [jplesperance/redis-sniffer](https://github.com/jplesperance/redis-sniffer) A Redis event sniffer and logging utility.
- [**22**星][3y] [C] [josephjkong/designing-bsd-rootkits](https://github.com/josephjkong/designing-bsd-rootkits) Code from the book "Designing BSD Rootkits: An Introduction to Kernel Hacking"
- [**22**星][3y] [Shell] [johntroony/luks-ops](https://github.com/johntroony/luks-ops) A bash script to automate the most basic usage of LUKS volumes in Linux VPS
- [**22**星][1y] [Py] [jiangsir404/xss-sql-fuzz](https://github.com/jiangsir404/xss-sql-fuzz) burpsuite 插件对GP所有参数(过滤特殊参数)一键自动添加xss sql payload 进行fuzz
+- [**22**星][5m] [Py] [jhermann/dependency-check-py](https://github.com/jhermann/dependency-check-py)
- [**22**星][4y] [Go] [jgrahamc/torexit](https://github.com/jgrahamc/torexit) Small program to read lists of Tor exit nodes and draw picture showing when they join/leave list
- [**22**星][6y] [C++] [jbremer/pyn](https://github.com/jbremer/pyn) Awesome Python bindings for Pintool
- [**22**星][1y] [Shell] [jas502n/st2-046-poc](https://github.com/jas502n/st2-046-poc) st2-046-poc CVE-2017-5638
- [**22**星][5y] [C++] [jandre/brosquery](https://github.com/jandre/brosquery) module for osquery to load Bro logs into tables
-- [**22**星][1y] [Py] [j40903272/malconv-keras](https://github.com/j40903272/malconv-keras) This is the implementation of MalConv proposed in [Malware Detection by Eating a Whole EXE](
- [**22**星][6m] [JS] [inverseintegral/ctf_writeups](https://github.com/inverseintegral/ctf_writeups)
- [**22**星][2y] [Py] [invasi0nz/lo0sr](https://github.com/invasi0nz/lo0sr) Lo0sR is a simple python Keylogger with many functions.
- [**22**星][2y] [Go] [integrii/wormhole](https://github.com/integrii/wormhole)
-- [**22**星][15d] [Py] [ins1gn1a/netntlm-hashcat](https://github.com/ins1gn1a/netntlm-hashcat) Converts John The Ripper/Cain format hashes (singular, or in bulk) to HashCat compatible hash format.
+- [**22**星][17d] [Py] [ins1gn1a/netntlm-hashcat](https://github.com/ins1gn1a/netntlm-hashcat) Converts John The Ripper/Cain format hashes (singular, or in bulk) to HashCat compatible hash format.
- [**22**星][4y] [Py] [infectedpacket/vxvault](https://github.com/infectedpacket/vxvault) Malware management program and tools
- [**22**星][3y] [C] [iaik/prefetch](https://github.com/iaik/prefetch) This repository contains several tools to perform Prefetch Side-Channel Attacks
- [**22**星][3y] [C] [iagox86/ctfworkshop-2017](https://github.com/iagox86/ctfworkshop-2017)
- [**22**星][11m] [Py] [hypnoze57/fshell](https://github.com/hypnoze57/fshell) My python3 implementation of a Forward Shell
-- [**22**星][11m] [C] [hfiref0x/bsodscreen](https://github.com/hfiref0x/bsodscreen) BSOD Screensaver
+- [**22**星][11m] [Py] [howmp/comfinder](https://github.com/howmp/comfinder) 查找标记COM组件中的函数
+- [**22**星][2y] [Py] [hongfeioo/userdevicetracker](https://github.com/hongfeioo/userdevicetracker) 快速定位一个IP或MAC在你的网络中的位置,是网络工程师提高工作效率的利器,也可以为CMDB提供基础网络数据。
+- [**22**星][3y] [Py] [hoainam1989/training-application-security](https://github.com/hoainam1989/training-application-security) This repository for training application security.
+- [**22**星][12m] [C] [hfiref0x/bsodscreen](https://github.com/hfiref0x/bsodscreen) BSOD Screensaver
- [**22**星][3y] [C] [hexhive/epoxy](https://github.com/hexhive/epoxy) Root Repo for the EPOXY tool that applies Privilege Overlays on bare-metal systems
+- [**22**星][2y] [C] [herwonowr/catchme](https://github.com/herwonowr/catchme) CatchME - WiFi Fun Box "Having Fun with ESP8266"
+- [**22**星][1y] [C] [hackerwarehouse/hw-dc26-badge](https://github.com/hackerwarehouse/hw-dc26-badge) Hacker Warehouse electronic badge that was made for DEF CON 26
- [**22**星][2y] [C] [h3xx/jphs](https://github.com/h3xx/jphs) jphide & seek steganography tools
- [**22**星][3y] [Py] [guelfoweb/fbid](https://github.com/guelfoweb/fbid) Show info about the author by facebook photo url
- [**22**星][4m] [Java] [guardianproject/jtorctl](https://github.com/guardianproject/jtorctl) deprecated fork of Java Tor Control Library
- [**22**星][3y] [JS] [gregkcarson/googleappscriptse](https://github.com/gregkcarson/googleappscriptse) Social Engineering Abusing Google App Scripts
- [**22**星][2y] [C++] [grcasanova/supervirus](https://github.com/grcasanova/supervirus) Project aimed at creating a malware able to evolve and adapt to the various host machines through metamorphic modifications, spontaneous mutations, code imitation and DNA programming to enable/disable functionalities
- [**22**星][2y] [PHP] [gr33ntii/malware-collection](https://github.com/gr33ntii/malware-collection)
+- [**22**星][1y] [Go] [ginuerzh/gosocks5](https://github.com/ginuerzh/gosocks5) golang and SOCKS5
- [**22**星][8m] [BitBake] [ghsec/bbprofiles](https://github.com/ghsec/bbprofiles) Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that improve an active and passive scanner by yourself. This extension requires Burp Suite Pro.
-- [**22**星][4y] [Objective-C] [gdssecurity/osx-continuity-dialer-poc](https://github.com/gdssecurity/osx-continuity-dialer-poc)
+- [**22**星][4y] [ObjC] [gdssecurity/osx-continuity-dialer-poc](https://github.com/gdssecurity/osx-continuity-dialer-poc)
- [**22**星][8y] [Java] [frohoff/jdeserialize](https://github.com/frohoff/jdeserialize) From
-- [**22**星][4m] [Py] [fmagin/angr-cli](https://github.com/fmagin/angr-cli) Repo for various angr ipython features to give it more of a cli feeling
+- [**22**星][3y] [Py] [freenas/middleware](https://github.com/freenas/middleware) New FreeNAS 10 Middleware
+- [**22**星][4d] [Py] [fmagin/angr-cli](https://github.com/fmagin/angr-cli) Repo for various angr ipython features to give it more of a cli feeling
- [**22**星][3y] [Py] [firmadyne/extractor](https://github.com/firmadyne/extractor) Kernel and filesystem extractor
- [**22**星][6y] [Shell] [find-evil/msf-install-script-os-x-lion-mountain-lion](https://github.com/find-evil/msf-install-script-os-x-lion-mountain-lion) Script to automate installation of Metasploit Framework on OS X Lion & Mountain Lion
- [**22**星][2y] [JS] [feedhenry/mobile-security](https://github.com/feedhenry/mobile-security) FeedHenry Mobile Security
- [**22**星][1m] [JS] [fcavallarin/htcrawl](https://github.com/fcavallarin/htcrawl) Htcrawl is nodejs module for the recursive crawling of single page applications (SPA) using javascript
- [**22**星][1y] [HTML] [fastly/waf_testbed](https://github.com/fastly/waf_testbed) Chef Cookbook which provisions apache+mod_security+owasp-crs
-- [**22**星][1y] [Py] [farisv/appledos](https://github.com/farisv/appledos) Messing Apple devices on the network with CVE-2018-4407 (heap overflow in bad packet handling)
+- [**22**星][9m] [C++] [fare9/pba_analysis_tools](https://github.com/fare9/pba_analysis_tools) My own versions from the programs of the book "Practical Binary Analysis"
+- [**22**星][9m] [Py] [f0re1gners/ejudge](https://github.com/f0re1gners/ejudge) EOJ 评测核心 沙箱接口
- [**22**星][7m] [f-secure/elevation-of-privacy](https://github.com/f-secure/elevation-of-privacy) Privacy Cards for Software Developers
-- [**22**星][6m] [Java] [ettic-team/endpointfinder-burp](https://github.com/ettic-team/endpointfinder-burp)
-- [**22**星][1m] [Py] [ekiojp/dfex](https://github.com/ekiojp/dfex) DNS File EXfiltration
+- [**22**星][7m] [Java] [ettic-team/endpointfinder-burp](https://github.com/ettic-team/endpointfinder-burp)
+- [**22**星][3y] [Java] [ernw/burpsuite-extensions](https://github.com/ernw/burpsuite-extensions) A collection of Burp Suite extensions
+- [**22**星][6m] [JS] [entropystring/javascript](https://github.com/entropystring/javascript) EntropyString for JavaScript
+- [**22**星][5d] [Py] [endgameinc/malware_evasion_competition](https://github.com/endgameinc/malware_evasion_competition)
+- [**22**星][3y] [PHP] [emanuil/php-reaper](https://github.com/emanuil/php-reaper) PHP tool to scan ADOdb code for SQL Injections
+- [**22**星][2m] [Py] [ekiojp/dfex](https://github.com/ekiojp/dfex) DNS File EXfiltration
- [**22**星][3y] [Py] [ehabhussein/ollydbg-binary-execution-visualizer](https://github.com/ehabhussein/ollydbg-binary-execution-visualizer) reverse engineering, visual binary analysis
-- [**22**星][10m] [dfir-it/supreme-backdoor-factory](https://github.com/dfir-it/supreme-backdoor-factory) This repository contains additional files mentioned in the blog post
+- [**22**星][2y] [C++] [dragonquesthero/kernel-force-delete](https://github.com/dragonquesthero/kernel-force-delete) force delete runing .exe application file.or delete any locked file
+- [**22**星][1y] [Py] [digiampietro/adbtools2](https://github.com/digiampietro/adbtools2) Tools for hacking ADB Epicentro routers, including firmware modification and VOIP password recovery.
- [**22**星][1y] [Ruby] [defcon-russia/metasploit-framework](https://github.com/defcon-russia/metasploit-framework) Metasploit Framework
-- [**22**星][3y] [PowerShell] [davehardy20/invoke-winrmattack](https://github.com/davehardy20/invoke-winrmattack) PowerShell cmdlet to push PowerShell attack modules to a remote system via PSRemoting and if required enable WinRM remotely.
-- [**22**星][11m] [dariubs/awesome-proxy](https://github.com/dariubs/awesome-proxy) A collaborative list of awesome proxy servers and resources. Feel free to contribute!
+- [**22**星][3y] [PS] [davehardy20/invoke-winrmattack](https://github.com/davehardy20/invoke-winrmattack) PowerShell cmdlet to push PowerShell attack modules to a remote system via PSRemoting and if required enable WinRM remotely.
- [**22**星][2y] [Py] [dariosharp/szpy](https://github.com/dariosharp/szpy) Z3 Symbolic Execution python
- [**22**星][4y] [Shell] [d3f4ultt/princesofpaypal](https://github.com/d3f4ultt/princesofpaypal) A security write-up about the Paypal API & data leakage
- [**22**星][3y] [C++] [d35m0nd142/kadabra](https://github.com/d35m0nd142/kadabra) [DEPRECATED] Kadabra is my automatic LFI Exploiter and Scanner, written in C++ and a couple extern module in Python.
- [**22**星][3y] [Py] [cujanovic/cve-2016-8610-poc](https://github.com/cujanovic/cve-2016-8610-poc) CVE-2016-8610 (SSL Death Alert) PoC
- [**22**星][3y] [Scala] [criteo/vizsql](https://github.com/criteo/vizsql) Scala and SQL happy together.
-- [**22**星][20d] [Scala] [criteo/slab](https://github.com/criteo/slab) An extensible Scala framework for creating monitoring dashboards.
+- [**22**星][22d] [Scala] [criteo/slab](https://github.com/criteo/slab) An extensible Scala framework for creating monitoring dashboards.
+- [**22**星][6m] [Py] [conmarap/website-fingerprinting](https://github.com/conmarap/website-fingerprinting) Deanonymizing Tor or VPN users with website fingerprinting and machine learning.
- [**22**星][11m] [Shell] [cogset/shadowsocks](https://github.com/cogset/shadowsocks) Shadowsocks in Docker
- [**22**星][2y] [C#] [cobbr/insecurepowershellhost](https://github.com/cobbr/insecurepowershellhost) InsecurePowerShellHost is a .NET Core host process for InsecurePowerShell, a version of PowerShell Core v6.0.0 with key security features removed.
- [**22**星][5y] [C] [citypw/suterusu](https://github.com/citypw/suterusu) An LKM rootkit targeting Linux 2.6/3.x on x86(_64), and ARM
-- [**22**星][3y] [Py] [chengable/safe_code](https://github.com/chengable/safe_code) absolute safe code
- [**22**星][3y] [C] [cert-polska/nymaim-tools](https://github.com/cert-polska/nymaim-tools)
- [**22**星][2y] [C] [celesteblue-dev/ps4-pkg2usb](https://github.com/celesteblue-dev/ps4-pkg2usb) PS4 payload (based on Vortex’s dumper) to dump and run fake PKGs on USB.
- [**22**星][3y] [Java] [cblichmann/idajava](https://github.com/cblichmann/idajava) Java integration for Hex-Rays IDA Pro
- [**22**星][5y] [C++] [casualx/libex](https://github.com/casualx/libex) C++ Helper Library for myself
+- [**22**星][10m] [XSLT] [capt-meelo/massmap](https://github.com/capt-meelo/massmap) Combined port scanning w/ Masscan's speed & Nmap's scanning features.
- [**22**星][4y] [Py] [camoufl4g3/sqli-payload-fuzz3r](https://github.com/camoufl4g3/sqli-payload-fuzz3r)
- [**22**星][3y] [C++] [bronzeme/ssdt_hook_x64](https://github.com/bronzeme/ssdt_hook_x64)
- [**22**星][6y] [C#] [brandonprry/vulnerable_xxe](https://github.com/brandonprry/vulnerable_xxe) A C# web handler that is vulnerable to XXE with PoC. This is to serve as an example of what vulnerable C# code looks like.
+- [**22**星][3m] [CSS] [braindead-sec/rogue-captive](https://github.com/braindead-sec/rogue-captive) Rogue Captive Portal for Raspberry Pi
- [**22**星][11m] [C#] [borjamerino/dns-polygraph](https://github.com/borjamerino/dns-polygraph) Tool designed to study the answers of your DNS resolver and make easier the identification of techniques such as DNS Hijacking/Poisoning
- [**22**星][1y] [Py] [blazeinfosec/cve-2017-10366_peoplesoft](https://github.com/blazeinfosec/cve-2017-10366_peoplesoft) CVE-2017-10366: Oracle PeopleSoft 8.54, 8.55, 8.56 Java deserialization exploit
- [**22**星][2y] [C] [billy-ellis/arm-gadget-finder](https://github.com/billy-ellis/arm-gadget-finder) Work-in-progress open source ROP gadget finder for 32-bit ARM binaries
@@ -16242,114 +17534,137 @@ for CVE details based on the nmap report.
- [**22**星][2y] [HTML] [beardog108/snow10](https://github.com/beardog108/snow10) Use whitespace and unicode chars for steganography
- [**22**星][4m] [C++] [bb107/winsudo](https://github.com/bb107/winsudo) Execute commands as local system.
- [**22**星][2y] [Py] [battelle/reductio](https://github.com/battelle/reductio) An exploration of code homeomorphism
+- [**22**星][1y] [asuri-team/dproxy](https://github.com/asuri-team/dproxy) Massive Distributed Dynamic Proxy
- [**22**星][1y] [C#] [arkhist/hacklinks](https://github.com/arkhist/hacklinks) Hacklinks is an open source online game about hacking.
- [**22**星][2y] [Py] [argilo/nrsc-5](https://github.com/argilo/nrsc-5) Prototype implementation of HD Radio (NRSC-5). Superseded by
- [**22**星][3y] [C++] [apriorit/simple-antirootkit-sst-unhooker](https://github.com/apriorit/simple-antirootkit-sst-unhooker) This is a demo project to illustrate the way to verify and restore original SST in case of some malware hooks
- [**22**星][3y] [Py] [ansible/ansible-blog-examples](https://github.com/ansible/ansible-blog-examples) Example playbooks from posts on the Ansible blog (
-- [**22**星][17d] [Rust] [aloxaf/rbkcrack](https://github.com/aloxaf/rbkcrack) Crack legacy zip encryption with Biham and Kocher's known plaintext attack. 使用明文攻击破解加密的 zip 文件
+- [**22**星][19d] [Rust] [aloxaf/rbkcrack](https://github.com/aloxaf/rbkcrack) Crack legacy zip encryption with Biham and Kocher's known plaintext attack. 使用明文攻击破解加密的 zip 文件
- [**22**星][3y] [Py] [almco/panorama](https://github.com/almco/panorama) Fast incident overview
-- [**22**星][1y] [Objective-C] [alexmx/insider](https://github.com/alexmx/insider) Insider sets a backdoor into your app for testing tools like Appium, Calabash, Frank, etc.
+- [**22**星][1y] [ObjC] [alexmx/insider](https://github.com/alexmx/insider) Insider sets a backdoor into your app for testing tools like Appium, Calabash, Frank, etc.
- [**22**星][2y] [Shell] [aflgo/oss-fuzz](https://github.com/aflgo/oss-fuzz) OSS-Fuzz - integrated with AFLGo for Patch Testing
+- [**22**星][2y] [Py] [abatchy17/rop-emporium](https://github.com/abatchy17/rop-emporium) Solutions for ROP Emporium challenges (
- [**22**星][6y] [Java] [aatxe/openmaple](https://github.com/aatxe/openmaple) A fast MapleStory emulator aiming to bring openness back to the private server community.
-- [**22**星][3y] [C] [93aef0ce4dd141ece6f5/packer](https://github.com/93aef0ce4dd141ece6f5/packer) PoC executable packer using resources
- [**22**星][3y] [5z1punch/my_php_kernel_handbook_for_pwn](https://github.com/5z1punch/my_php_kernel_handbook_for_pwn) 这一切的开始,都要从我爷爷在悬崖下捡到一本白帽子讲web安全说起
- [**22**星][2y] [Py] [0xsearches/sandcastle](https://github.com/0xsearches/sandcastle)
- [**22**星][3y] [PHP] [0x584a/fuzzxssphp](https://github.com/0x584a/fuzzxssphp) PHP版本的反射型xss扫描,支持GET,POST
- [**22**星][4y] [LaNMaSteR53/honeybadger](https://bitbucket.org/lanmaster53/honeybadger)
-- [**21**星][19d] [Py] [k8gege/pyladon](https://github.com/k8gege/pyladon) Ladon NetScan For Python (PortScan/OnlinePC/VulScan/Struts2/Weblogic/Exploit/GetShell/MS17010)
+- [**21**星][2y] [Py] [sorz/ssmanager](https://github.com/sorz/ssmanager) A python module managing large amount of running Shadowsocks server instances.
+- [**21**星][1y] [Dockerfile] [alibo/goquiet-shadowsocks-docker](https://github.com/alibo/goquiet-shadowsocks-docker) A Docker image for Shadowsocks over GoQuiet
+- [**21**星][6m] [Py] [coallaoh/whitenblackbox](https://github.com/coallaoh/whitenblackbox) Towards Reverse-Engineering Black-Box Neural Networks, ICLR'18
+- [**21**星][] [Py] [technowlogy-pushpender/technowlogger](https://github.com/technowlogy-pushpender/technowlogger) TechNowLogger is Windows/Linux Keylogger Generator which sends key-logs via email with other juicy target info
+- [**21**星][1y] [Py] [ins1gn1a/pwdlyser-cli](https://github.com/ins1gn1a/pwdlyser-cli) Python-based CLI Password Analyser (Reporting Tool)
+- [**21**星][2y] [JS] [shangxinbo/cardinal](https://github.com/shangxinbo/cardinal) A socks and http proxy by nodejs for you to over GWF
- [**21**星][1y] [Java] [wrbug/charles-crack](https://github.com/wrbug/charles-crack) charles破解
- [**21**星][6y] [Py] [ganapati/spaf](https://github.com/ganapati/spaf) Static Php Analysis and Fuzzer
- [**21**星][4y] [Py] [jofpin/compaxss](https://github.com/jofpin/compaxss) Bypass XSS Reflected Cross-site scripting
- [**21**星][5y] [C++] [sweetsoftware/ftpkeylogger](https://github.com/sweetsoftware/ftpkeylogger) Simple keylogger for Windows with HTML output and FTP upload.
+- [**21**星][4y] [Py] [juliocesarfort/webshotter](https://github.com/juliocesarfort/webshotter) A multi-threaded Python tool to generate screenshot of websites
+- [**21**星][2y] [0x90/firmware-arsenal](https://github.com/0x90/firmware-arsenal) Tools and scripts for firmware reverse engeneering
+- [**21**星][3y] [Py] [mthbernardes/demoniware](https://github.com/mthbernardes/demoniware) Telegram BotNet
- [**21**星][8y] [Java] [spiderlabs/cerealbox](https://github.com/spiderlabs/cerealbox) Arduino-based network monitor
- [**21**星][3y] [Py] [f-secure/headless-scanner-driver](https://github.com/f-secure/headless-scanner-driver) A Burp Suite extension that starts scanning on requests it sees, and dumps results on standard output
-- [**21**星][17d] [CSS] [mitre/mitre.github.io](https://github.com/mitre/mitre.github.io) Open Source software from The MITRE Corporation
+- [**21**星][19d] [CSS] [mitre/mitre.github.io](https://github.com/mitre/mitre.github.io) Open Source software from The MITRE Corporation
- [**21**星][2y] [C] [reswitched/rcm-modchips](https://github.com/reswitched/rcm-modchips) Collection of "modchip" designs for launching payloads via the Tegra RCM bug (CVE-2018-6242)
+- [**21**星][2y] [C#] [functionclub/localproxy](https://github.com/functionclub/localproxy) 一键更改系统本地IE代理的小工具
- [**21**星][1y] [C++] [awnumar/nixbot](https://github.com/awnumar/nixbot) Lightweight TCP botnet coded in C++
- [**21**星][1y] [JS] [shadowsocks/shadowsocks-hub-api](https://github.com/shadowsocks/shadowsocks-hub-api) A set of open and standard restful APIs for managing shadowsocks users, servers, nodes, products, accounts, and traffic.
-- [**21**星][22d] [bkth/optimize_rce_chakra](https://github.com/bkth/optimize_rce_chakra) keynote I gave at GreHack 2019
+- [**21**星][24d] [bkth/optimize_rce_chakra](https://github.com/bkth/optimize_rce_chakra) keynote I gave at GreHack 2019
+- [**21**星][30d] [Shell] [gwolf3/visshous](https://github.com/gwolf3/visshous)
- [**21**星][1y] [Java] [netindev/allatori-v3.0](https://github.com/netindev/allatori-v3.0) Allatori v3.0 source code.
-- [**21**星][28d] [Py] [verabe/veriman](https://github.com/verabe/veriman) Analysis tool for Solidity smart contracts. Prototype.
-- [**21**星][1m] [Py] [5h4d0wb0y/socialbrute](https://github.com/5h4d0wb0y/socialbrute) It attempts to crack social networks using a brute force dictionary attack.
+- [**21**星][30d] [Py] [verabe/veriman](https://github.com/verabe/veriman) Analysis tool for Solidity smart contracts. Prototype.
- [**21**星][1y] [unexpectedby/sqli-dork-repository](https://github.com/unexpectedby/sqli-dork-repository) Dorks Hacking Database for educational proposal
-- [**21**星][1m] [Go] [tismayil/rsdl](https://github.com/tismayil/rsdl) Subdomain Scan With Ping Method.
+- [**21**星][3d] [CSS] [cacti/documentation](https://github.com/cacti/documentation) Documentation for Cacti, Spine, RRDProxy and more
- [**21**星][7y] [Shell] [tjetzinger/cloudcrackinstaller](https://github.com/tjetzinger/cloudcrackinstaller) A script to install Crunch, Pyrit and Cowpatty on a running Amazon EC2 Cluster GPU Instance to crack WPA and WPA2 keys.
-- [**21**星][4m] [PowerShell] [nyan-x-cat/malwareshell](https://github.com/nyan-x-cat/malwareshell) Create a powershell malware loader to run C#.cs code on runtime
-- [**21**星][2m] [Py] [adriangranados/wifiexplorer-sensor](https://github.com/adriangranados/wifiexplorer-sensor) Enables remote scanning in WiFi Explorer Pro
-- [**21**星][11d] [TypeScript] [paulmillr/noble-ed25519](https://github.com/paulmillr/noble-ed25519) Noble ed25519. High-security, easily auditable, 0-dep, 1-file pubkey, scalarmult & EDDSA
-- [**21**星][26d] [Py] [hash3lizer/wifijammer](https://github.com/hash3lizer/wifijammer) Wireless Jammer to Disconnect Nearby Access-Points and Stations.
+- [**21**星][3y] [Py] [initbrain/python-wi-fi-positioning-system](https://github.com/initbrain/python-wi-fi-positioning-system) Python Wi-Fi Positioning System - Wi-Fi geolocation script using the Google Geolocation API
+- [**21**星][3m] [yeahhub/kali-linux-ebooks](https://github.com/yeahhub/kali-linux-ebooks) Top 20 Kali Linux Related E-books (Free Download)
+- [**21**星][4m] [PS] [nyan-x-cat/malwareshell](https://github.com/nyan-x-cat/malwareshell) Create a powershell malware loader to run C#.cs code on runtime
+- [**21**星][13d] [TS] [paulmillr/noble-ed25519](https://github.com/paulmillr/noble-ed25519) Noble ed25519. High-security, easily auditable, 0-dep, 1-file pubkey, scalarmult & EDDSA
+- [**21**星][28d] [Py] [hash3lizer/wifijammer](https://github.com/hash3lizer/wifijammer) Wireless Jammer to Disconnect Nearby Access-Points and Stations.
+- [**21**星][17d] [Py] [z3pp/zfuzz](https://github.com/z3pp/zfuzz) Simple python web fuzzer
- [**21**星][4y] [Ruby] [vallejocc/hacking-busybox-control](https://github.com/vallejocc/Hacking-Busybox-Control) Some metasploit scripts to help to control busybox based embedded devices
- [**21**星][3y] [C] [newbee119/iot_bot](https://github.com/NewBee119/IoT_bot) A sample IoT bot origin from Mirai
-- [**21**星][2m] [PHP] [marcocesarato/php-aio-security](https://github.com/marcocesarato/PHP-AIO-Security) The objective of this class is offer an automatic system of protection for developers's projects and simplify some security operations as the check of CSRF or XSS all in a simple class. Infact you could just call the main method to have better security yet without too much complicated operations.
+- [**21**星][3y] [Py] [cylance/idpanel](https://github.com/cylance/IDPanel) Identify botnet panels with Ensembled Decision Trees
- [**21**星][1y] [JS] [mindpointgroup/stig-cli](https://github.com/MindPointGroup/stig-cli) A CLI for perusing DISA STIG content Mac, Linux, and Windows Compatible
- [**21**星][4y] [Rust] [auth0-blog/rust-api-example](https://github.com/auth0-blog/rust-api-example) Example of a RESTful API in Rust
- [**21**星][2y] [Py] [chiefychief/router_pwner](https://github.com/ChiefyChief/router_pwner) Dynamically id routers and attempt to compromise
- [**21**星][5y] [C++] [r-lyeh-archived/moon9](https://github.com/r-lyeh-archived/moon9) a game framework. warning: wip, dev, unstable, radiation hazard, defcon 3
- [**21**星][1m] [Py] [csirtgadgets/csirtg-smrt-v1](https://github.com/csirtgadgets/csirtg-smrt-v1) the fastest way to consume threat intelligence.
-- [**21**星][13d] [Shell] [cryptomator/cryptomator-mac](https://github.com/cryptomator/cryptomator-mac) Cryptomator .dmg image for Mac
+- [**21**星][15d] [Shell] [cryptomator/cryptomator-mac](https://github.com/cryptomator/cryptomator-mac) Cryptomator .dmg image for Mac
- [**21**星][5y] [C] [zliu-fd/windivertproxy](https://github.com/zliu-fd/windivertproxy) Proxy any program via WinDivert to a specific server
- [**21**星][3y] [Java] [zhaozepeng/safewebview](https://github.com/zhaozepeng/safewebview) 修复 4.2 之下 JS 漏洞的 WebView
+- [**21**星][1y] [zecopro/wpa-passwords](https://github.com/zecopro/wpa-passwords) the best and small passwords lists to crack handshake wpa-wpa2
- [**21**星][9y] [C] [zapotek/cdpsnarf](https://github.com/zapotek/cdpsnarf) CDPSnarf is a network sniffer exclusively written to extract information from CDP (Cisco Discovery Protocol) packets.
- [**21**星][3y] [Py] [xorpd/fcatalog_client](https://github.com/xorpd/fcatalog_client) fcatalog idapython client
- [**21**星][2y] [Vue] [xinali/penework](https://github.com/xinali/penework) Penetration Test Framwork
- [**21**星][4y] [C++] [xbased/xhook](https://github.com/xbased/xhook) Hook Windows API. supports Win7/8/10 x86 and x64 platform.
- [**21**星][2y] [xazlsec/ctf-project-lists](https://github.com/xazlsec/ctf-project-lists) 由信安之路团队成员收集整理的与 CTF 相关的 Github 项目地址,如果你由更好的项目请将项目地址发送到:myh0st@foxmail.com
-- [**21**星][9m] [PowerShell] [wurstcommander/win10appremove](https://github.com/wurstcommander/win10appremove) A Powershell-Script for removing / debloating Windows 10 apps. Mandatory apps which can't be uninstalled via start menu will be removed too.
-- [**21**星][4y] [Visual Basic] [wpatoolkit/cap-converter](https://github.com/wpatoolkit/cap-converter) A small GUI tool for converting between cap and hccap files.
+- [**21**星][9m] [PS] [wurstcommander/win10appremove](https://github.com/wurstcommander/win10appremove) A Powershell-Script for removing / debloating Windows 10 apps. Mandatory apps which can't be uninstalled via start menu will be removed too.
- [**21**星][2y] [Shell] [wolfvan/some-samples](https://github.com/wolfvan/some-samples) Malware captured with honeypots
- [**21**星][3y] [CSS] [wizardforcel/kali-linux-cookbook-zh](https://github.com/wizardforcel/kali-linux-cookbook-zh)
- [**21**星][5y] [Py] [windbgscripts/pykd](https://github.com/windbgscripts/pykd) This contains Helpful PYKD (Python Extension for Windbg) scripts
- [**21**星][4y] [C] [warcraft23/virus-and-windows-api-programing](https://github.com/warcraft23/virus-and-windows-api-programing) 中科大13级计算机病毒分析与WindowsAPI编程 授课老师:郭大侠
- [**21**星][1y] [Py] [v-p-b/similarninja](https://github.com/v-p-b/similarninja) similarninja: Binary Ninja插件, 用于二进制文件的控制流程图(CFG)匹配
+- [**21**星][9d] [Py] [unstabl3/recce](https://github.com/unstabl3/recce) Domain availbility checker
- [**21**星][2y] [Py] [unamer/ctfhelper](https://github.com/unamer/ctfhelper) A simple Burp extension for scanning stuffs in CTF
- [**21**星][1y] [Py] [ucnt/aws-s3-bruteforce](https://github.com/ucnt/aws-s3-bruteforce) (DEPRECATED) Amazon AWS S3 Bucket Name Bruteforce
+- [**21**星][1y] [Go] [txn2/n2proxy](https://github.com/txn2/n2proxy) Contraband filtering reverse proxy for plain http and SSL.
- [**21**星][1y] [CSS] [tuhinshubhra/uboat-panel](https://github.com/tuhinshubhra/uboat-panel) Panel for the HTTP botnet UBoat -
- [**21**星][2y] [troydo42/awesome-pen-test](https://github.com/troydo42/awesome-pen-test) Experiment with penetration testing Guides and Tools for WordPress, iOS, MacOS, Wifi and Car
- [**21**星][3y] [Py] [threatstream/symhash](https://github.com/threatstream/symhash)
+- [**21**星][2y] [C#] [thomdixon/saltwatertaffy](https://github.com/thomdixon/saltwatertaffy) An nmap wrapper library for .NET
- [**21**星][3y] [Py] [thomaskeck/pyshellcode](https://github.com/thomaskeck/pyshellcode) Execute ShellCode / "Inline-Assembler" in Python
- [**21**星][1y] [Py] [the-c0d3r/pynmap](https://github.com/the-c0d3r/pynmap) A serious attempt to implement multi-threading to nmap module, which would result in faster scanning speed. I know that one can write NSE scripts for multi-threaded scanning with it, but I wanted to try it on python.
+- [**21**星][1m] [Py] [teamseri0us/pocs](https://github.com/teamseri0us/pocs)
- [**21**星][6y] [Py] [syworks/wifi-harvester](https://github.com/syworks/wifi-harvester) For collecting probed SSID name by wireless devices, Access point detail and connected clients.
- [**21**星][1y] [Py] [syno3/babymux](https://github.com/syno3/babymux) pentesting tool for noob hackers.Runs on linux and termux
- [**21**星][2y] [Py] [swisskyrepo/whid_toolkit](https://github.com/swisskyrepo/whid_toolkit) Simple script for the WHID injector - a rubberducky wifi
-- [**21**星][15d] [HTML] [sushi2k/owasp-mstg](https://github.com/sushi2k/owasp-mstg) The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security testing and reverse engineering.
+- [**21**星][2d] [HTML] [sushi2k/owasp-mstg](https://github.com/sushi2k/owasp-mstg) The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security testing and reverse engineering.
- [**21**星][5y] [stolas/windbg-darktheme](https://github.com/stolas/windbg-darktheme) A dark theme for WinDBG.
+- [**21**星][26d] [Shell] [stevemcgrath/docker-nessus_scanner](https://github.com/stevemcgrath/docker-nessus_scanner) Nessus Scanner Docker Image
+- [**21**星][29d] [status-im/awesome-secure-messaging](https://github.com/status-im/awesome-secure-messaging) A curated collection of links for secure messaging.
+- [**21**星][4m] [C] [sslab-gatech/fuzzification](https://github.com/sslab-gatech/fuzzification) We hinder fuzzing
- [**21**星][10y] [C++] [sporst/ida-pro-plugins](https://github.com/sporst/ida-pro-plugins) Collection of IDA Pro plugins I wrote over the years
- [**21**星][2y] [Py] [spec-sec/securechat](https://github.com/spec-sec/securechat) Encrypted chat server and client written in Python
- [**21**星][1y] [spchal/hacklu2018](https://github.com/spchal/hacklu2018) Telco training
+- [**21**星][2d] [sophoslabs/iocs](https://github.com/sophoslabs/iocs) Sophos-originated indicators-of-compromise from published reports
- [**21**星][1y] [Rust] [smirnovvad/rbuster](https://github.com/smirnovvad/rbuster) yet another dirbuster
- [**21**星][2y] [Py] [sirpsycho/firecall](https://github.com/sirpsycho/firecall) firecall: 直接向Cisco ASA防火墙发送命令, 无需登录防火墙后再做修改
+- [**21**星][10d] [Batchfile] [simplevulnerabilitymanager/svm](https://github.com/simplevulnerabilitymanager/svm) Program to perform vulnerability analysis and automatically generate a report
- [**21**星][5y] [shieldfy/awesome-pentest](https://github.com/shieldfy/awesome-pentest) A collection of awesome penetration testing resources, tools and other shiny things
- [**21**星][1y] [sharsi1/sublazerwlst](https://github.com/sharsi1/sublazerwlst) Bundle of wordlists for brute-forcing subdomains (World + RUSSIA based).
- [**21**星][3y] [Go] [shakenetwork/onionscan](https://github.com/shakenetwork/onionscan) OnionScan暗网爬虫是一个免费的开源工具,用于调查黑网。 OnionScan is a free and open source tool for investigating the Dark Web
- [**21**星][3y] [C#] [shadowsocks-plus/shadowsocks-plus-win](https://github.com/shadowsocks-plus/shadowsocks-plus-win) An installer for SSPlus local proxy on Windows
-- [**21**星][7m] [Py] [seyptoo/7z-bruteforce](https://github.com/seyptoo/7z-bruteforce) This repository consists of bruteforce to a 7z file, and it can be very useful in the penetration tests
- [**21**星][10m] [Shell] [sensepost/common-substr](https://github.com/sensepost/common-substr) Simple awk script to extract the most common substrings from an input text. Built for password cracking.
+- [**21**星][3y] [HTML] [secwiki/wooyun_articles](https://github.com/secwiki/wooyun_articles) drops.wooyun.org 乌云Drops文章备份
- [**21**星][4y] [PHP] [secwiki/webshell](https://github.com/secwiki/webshell) This is a webshell open source project
-- [**21**星][29d] [Dockerfile] [secbone/docker-ss-libev](https://github.com/secbone/docker-ss-libev) A mini docker image of Shadowsocks-libev only 15M in size
+- [**21**星][5y] [ActionScript] [securityobscurity/cve-2015-0313](https://github.com/securityobscurity/cve-2015-0313)
+- [**21**星][1m] [Dockerfile] [secbone/docker-ss-libev](https://github.com/secbone/docker-ss-libev) A mini docker image of Shadowsocks-libev only 15M in size
- [**21**星][5m] [Shell] [sec0ps/va-pt](https://github.com/sec0ps/va-pt) VAPT is a Vulnerability Assessment and Penetration Testing toolkit. It merges the most common tools from Kali and SamuraiWTF into one platform and places them onto an Ubuntu or Raspbian platform.
+- [**21**星][15d] [Py] [saucer-man/penetration-script](https://github.com/saucer-man/penetration-script) 渗透测试脚本
- [**21**星][1y] [C++] [sanketkarpe/anwi](https://github.com/sanketkarpe/anwi) ANWI - All New Wireless IDS
- [**21**星][4y] [Py] [sam-b/z3-stuff](https://github.com/sam-b/z3-stuff) z3 scripts and ctf challenge solutions.
- [**21**星][10m] [Py] [sadeghhayeri/lol-hacking](https://github.com/sadeghhayeri/lol-hacking) My Hacking Activities!
+- [**21**星][1m] [Shell] [rustybird/qubes-split-browser](https://github.com/rustybird/qubes-split-browser) Tor Browser in a Qubes DisposableVM, with persistent bookmarks and login credentials
- [**21**星][11m] [Smarty] [ropnop/pentest_charts](https://github.com/ropnop/pentest_charts) Some helpful Helm Charts for pentesters
- [**21**星][7m] [rootup/phdays9](https://github.com/rootup/phdays9) My fuzzing workshop from PHDays9
- [**21**星][3y] [Py] [roo7break/serialator](https://github.com/roo7break/serialator) Python script to exploit CVE-2015-4852.
- [**21**星][2y] [C++] [riscybusiness/jadoube](https://github.com/riscybusiness/jadoube)
- [**21**星][9m] [HTML] [ridter/cs_custom_404](https://github.com/ridter/cs_custom_404) Cobalt strike custom 404 page
-- [**21**星][2m] [PowerShell] [rgl/visual-studio-community-vagrant](https://github.com/rgl/visual-studio-community-vagrant) Vagrant Environment for Visual Studio Community
+- [**21**星][5d] [PS] [rgl/visual-studio-community-vagrant](https://github.com/rgl/visual-studio-community-vagrant) Vagrant Environment for Visual Studio Community
- [**21**星][1y] [C] [rfalke/decompiler-subjects](https://github.com/rfalke/decompiler-subjects) Tests cases for binary decompilers
- [**21**星][5y] [Java] [retme7/launchanywhere_poc_by_retme_bug_7699048](https://github.com/retme7/launchanywhere_poc_by_retme_bug_7699048) source code & PoC file of launchAnyWhere problem
- [**21**星][3y] [Py] [reflare/afl-monitor](https://github.com/reflare/afl-monitor) A monitoring script for AFL
-- [**21**星][2m] [Py] [rceninja/re-scripts](https://github.com/rceninja/re-scripts)
- - [Hyperv-Scripts](https://github.com/rceninja/re-scripts/tree/master/scripts/Hyperv-Scripts)
- - [IA32-MSR-Decoder](https://github.com/rceninja/re-scripts/tree/master/scripts/IA32-MSR-Decoder) 查找并解码所有的MSR码
- - [IA32-VMX-Helper](https://github.com/rceninja/re-scripts/tree/master/scripts/IA32-VMX-Helper) 查找并解码所有的MSR/VMCS码
+- [**21**星][3y] [Go] [rdkr/oniongen-go](https://github.com/rdkr/oniongen-go)
+- [**21**星][13d] [Java] [rcenvironment/rce](https://github.com/rcenvironment/rce) Distributed, workflow-driven integration environment
- [**21**星][2y] [Ruby] [rapid7/msfrpc-client](https://github.com/rapid7/msfrpc-client) Rapid7 Metasploit API client library written in Ruby
-- [**21**星][2m] [Py] [random-robbie/bugbountydork](https://github.com/random-robbie/bugbountydork) Bug Bounty Dork
- [**21**星][11m] [Java] [ramshazar/orangetsai-springboot-actuator-poc](https://github.com/ramshazar/orangetsai-springboot-actuator-poc)
-- [**21**星][3y] [PowerShell] [raikia/get-reconinfo](https://github.com/raikia/get-reconinfo) A powershell script that prints a lot of IP and connection info to the screen
+- [**21**星][3y] [PS] [raikia/get-reconinfo](https://github.com/raikia/get-reconinfo) A powershell script that prints a lot of IP and connection info to the screen
+- [**21**星][6m] [r3mlab/datajournalism-resources](https://github.com/r3mlab/datajournalism-resources) A compilation of links to datajournalism & OSINT tools, guides and resources I find useful to keep at hand.
- [**21**星][2m] [Py] [pyke369/exabgp-helpers](https://github.com/pyke369/exabgp-helpers) ExaBGP helpers scripts
- [**21**星][3m] [Ruby] [pwelch/virustotal_api](https://github.com/pwelch/virustotal_api) Ruby Gem for VirusTotal API
- [**21**星][10m] [Py] [pure-l0g1c/keylogger](https://github.com/pure-l0g1c/keylogger) A simple keylogger that uses Gmail as a C&C
+- [**21**星][2y] [Py] [pure-l0g1c/aircrack](https://github.com/pure-l0g1c/aircrack) Automatic Wifi Cracker. Uses Airodump, Aircrack, Aireplay
- [**21**星][4y] [Shell] [psrcek/kali-mitm-evil-twin](https://github.com/psrcek/kali-mitm-evil-twin) A script that creates a wifi hotspot on kali linux that can view usernames and passwords of ssl logins.
- [**21**星][1m] [Java] [portswigger/json-web-tokens](https://github.com/portswigger/json-web-tokens) JWT Support for Burp
- [**21**星][3m] [Java] [portswigger/freddy-deserialization-bug-finder](https://github.com/portswigger/freddy-deserialization-bug-finder)
@@ -16357,14 +17672,18 @@ for CVE details based on the nmap report.
- [**21**星][4y] [Py] [peterfillmore/rfidiot](https://github.com/peterfillmore/rfidiot) python RFID / NFC library & tools
- [**21**星][5y] [C] [pastcompute/lca2015-radare2-tutorial](https://github.com/pastcompute/lca2015-radare2-tutorial) Examples and demos for my LCA2015 radare2 tutorial
- [**21**星][2m] [Py] [ouroboros/juusankoubou](https://github.com/ouroboros/juusankoubou) 「十三工房」
-- [**21**星][3y] [Visual Basic] [osandamalith/vbshellcode](https://github.com/osandamalith/vbshellcode) Making shellcode UD -
+- [**21**星][3y] [Visual Basic .NET] [osandamalith/vbshellcode](https://github.com/osandamalith/vbshellcode) Making shellcode UD -
- [**21**星][3y] [Py] [odedlaz/uberlogs](https://github.com/odedlaz/uberlogs) make logging fun again
+- [**21**星][5y] [C] [nyx0/dll-inj3cti0n](https://github.com/nyx0/dll-inj3cti0n) Another dll injection tool.
- [**21**星][2y] [C] [nviso-be/nexus_5_bootloader_unpacker](https://github.com/nviso-be/nexus_5_bootloader_unpacker) A bootloader imgdata unpacker for Nexus 4, 5 and 7 smartphones as well as imgdata tool for Nexus 5.
- [**21**星][3m] [Py] [nlitsme/idascripts](https://github.com/nlitsme/idascripts) 枚举多种类型数据:Texts/NonFuncs/...
- [enumerators](https://github.com/nlitsme/idascripts/blob/master/enumerators.py) Enumeration utilities for idapython
- [**21**星][8m] [Py] [nguyenkhong/cracknetdrive3](https://github.com/nguyenkhong/cracknetdrive3)
- [**21**星][3y] [Py] [neurobin/letsacme](https://github.com/neurobin/letsacme) A tiny script to issue and renew TLS/SSL certificate from Let's Encrypt
+- [**21**星][3y] [Go] [netxfly/xsec-ssh-firewall](https://github.com/netxfly/xsec-ssh-firewall) 一个简易的ssh密码防暴力破解程序
- [**21**星][4y] [Py] [neo23x0/prisma](https://github.com/neo23x0/prisma) Command Line STDOUT Colorer
+- [**21**星][2y] [HTML] [neargle/secnewsbak](https://github.com/neargle/secnewsbak) 备份SecNews失效的Drops.Wooyun文章
+- [**21**星][2y] [Java] [mtxiaowangzi/java-ee-vulnweb](https://github.com/mtxiaowangzi/java-ee-vulnweb) 用于演示Java Web项目中,漏洞的成因及修复方案,可用于黑盒测试和白盒测试,部分修复方案可用于生产环境。
- [**21**星][2y] [Py] [mstxq17/dbleakscan](https://github.com/mstxq17/dbleakscan) this scanner try to scan some dbbak or ctf #源码泄露
- [**21**星][3y] [C++] [morpav/zceq_solver](https://github.com/morpav/zceq_solver) CPU solver for Zcash's variant of Equihash problem
- [**21**星][1y] [C#] [mojtabatajik/besafe](https://github.com/mojtabatajik/besafe) BeSafe is robust threat analyzer which help to protect your desktop environment and know what's happening around you
@@ -16375,100 +17694,118 @@ for CVE details based on the nmap report.
- [**21**星][2y] [C++] [microsoft/firewalleventmonitor](https://github.com/microsoft/firewalleventmonitor) Listens for Firewall rule match events generated by Microsoft Hyper-V Virtual Filter Protocol (VFP) extension.
- [**21**星][2y] [Py] [mdsecresearch/thriftdecoder](https://github.com/mdsecresearch/thriftdecoder) Apache Thrift Decoder
- [**21**星][10m] [PHP] [mariusbalcytis/gentle-force](https://github.com/mariusbalcytis/gentle-force) Brute-force, error and request rate limiting
-- [**21**星][1y] [Py] [marcovaldong/isgan](https://github.com/marcovaldong/isgan) Implementation of "Invisible Steganography via Generative Adversarial Networks" (
+- [**21**星][3m] [Py] [marcolivierbouch/dirbpy](https://github.com/marcolivierbouch/dirbpy) This is the new version of dirb in python
- [**21**星][5m] [Py] [manhnho/shellsum](https://github.com/manhnho/shellsum) A defense tool - detect web shells in local directories via md5sum
- [**21**星][3y] [C++] [malwares/malware](https://github.com/malwares/malware) Malware Samples. Uploaded to GitHub for those want to analyse the code.
+- [**21**星][5y] [C++] [lynnux/holyshit](https://github.com/lynnux/holyshit) ollydbg plugin, the goal is to make life easier. The project is DEAD!
- [**21**星][5y] [JS] [longtian/cache_attack_in_javascript](https://github.com/longtian/cache_attack_in_javascript) Perform cache attack using javascript
- [**21**星][2y] [Shell] [linuxlite/spectre-meltdown-checker-automated](https://github.com/linuxlite/spectre-meltdown-checker-automated) An Automated Spectre Meltdown downloader and checker
- [**21**星][2y] [Py] [kudelskisecurity/check_all_apks](https://github.com/kudelskisecurity/check_all_apks) Check All APK's -- scripts for checking your phone for malware
+- [**21**星][2y] [Py] [kslgroup/threadmap](https://github.com/kslgroup/threadmap) threadmap plugin for Volatility Foundation
- [**21**星][2y] [Py] [krrr/wstan](https://github.com/krrr/wstan) Tunneling TCP in WebSocket (ssh -D alternative)
+- [**21**星][5y] [Java] [khai-tran/burpjdser](https://github.com/khai-tran/burpjdser)
- [**21**星][3y] [C++] [k0keoyo/cve-2015-2546-exploit](https://github.com/k0keoyo/cve-2015-2546-exploit)
- [**21**星][2y] [Py] [jzadeh/aktaion2](https://github.com/jzadeh/aktaion2) Python implementation of the Aktaion project
- [**21**星][7m] [Py] [joda32/certcrunchy](https://github.com/joda32/certcrunchy) Just a silly recon tool that uses data from SSL Certificates to find potential host names
- [**21**星][9y] [Shell] [jfernandez/ddos-deflate](https://github.com/jfernandez/ddos-deflate) custom DDoS Deflate clone
- [**21**星][2y] [C] [jerome-ps/jn516xsniffer](https://github.com/jerome-ps/jn516xsniffer) Transform a Xiaomi Zigbee gadget into a Zigbee sniffer.
- [**21**星][3y] [Groovy] [jenkinsci-cert/security-218](https://github.com/jenkinsci-cert/security-218)
+- [**21**星][2y] [jasklabs/blackhat2017](https://github.com/jasklabs/blackhat2017) Data sets and examples for Jask Labs Blackhat 2017 Handout: Top 10 Machine Learning Cyber Security Use Cases
+- [**21**星][3m] [C] [jackullrich/trunpe](https://github.com/jackullrich/trunpe) A modified RunPE (process hollowing) technique avoiding the usage of SetThreadContext by appending a TLS section which calls the original entrypoint.
- [**21**星][2y] [ivmachiavelli/osint_opendata](https://github.com/ivmachiavelli/osint_opendata) A collection of Open Data for the data freaks out there.
- [**21**星][1y] [Py] [ins1gn1a/pwdlyser](https://github.com/ins1gn1a/pwdlyser) pwdlyser:密码分析工具,Python编写
- [**21**星][6y] [Py] [ikoniaris/kippo-malware](https://github.com/ikoniaris/kippo-malware) Download all malicious files from a Kippo SSH honeypot database
- [**21**星][2y] [Ruby] [realbearcat/cve-2018-1297](https://github.com/RealBearcat/CVE-2018-1297) Apache Jmeter RMI 反序列化
-- [**21**星][8m] [Py] [hpd0ger/supertags](https://github.com/hpd0ger/supertags) 一个Burpsuite插件,用于检测隐藏的XSS
-- [**21**星][11m] [Py] [howmp/comfinder](https://github.com/howmp/comfinder) 查找标记COM组件中的函数
- [**21**星][4y] [C++] [holmesian/gh0st-light](https://github.com/holmesian/gh0st-light) 精简之后的老东西
-- [**21**星][3y] [Py] [hoainam1989/training-application-security](https://github.com/hoainam1989/training-application-security) This repository for training application security.
- [**21**星][5m] [Py] [hash3lizer/subrake](https://github.com/hash3lizer/subrake) A powerful Subdomain Scanner & Validator for Reconnaissance.
- [**21**星][2y] [Py] [harris21/afot](https://github.com/harris21/afot) Automation Forensics Tool for Windows
- [**21**星][3y] [C] [hackerdom/phdctf-2017](https://github.com/hackerdom/phdctf-2017) PHDays Online CTF 2017. Developed with ♥ by Hackerdom team
+- [**21**星][6y] [C] [hackedteam/vector-silent](https://github.com/hackedteam/vector-silent) Silent installer
- [**21**星][3y] [Py] [hack-all-the-things/charsetinspect](https://github.com/hack-all-the-things/charsetinspect) A script that inspects multi-byte character sets looking for characters with specific user-defined properties
+- [**21**星][2y] [PHP] [gwen001/vhost-brute](https://github.com/gwen001/vhost-brute) A PHP tool to brute force vhost configured on a server.
- [**21**星][12m] [C++] [gtoad/android_anti_debug](https://github.com/gtoad/android_anti_debug) An example of android anti-debug.
- [**21**星][2y] [Go] [gnolizuh/quictun](https://github.com/gnolizuh/quictun) The simplest tunnel service based on QUIC.
- [**21**星][2m] [Py] [gh0x0st/buffer_overflow](https://github.com/gh0x0st/buffer_overflow) Just another OSCP prep guide into buffer overflows using Python
-- [**21**星][3y] [PowerShell] [fuzzysecurity/capstonekeystone-powershell](https://github.com/fuzzysecurity/capstonekeystone-powershell) PowerShell Module Bindings for Capstone/Keystone
+- [**21**星][3m] [gh0st-404/zs-personal-infiltration-syste](https://github.com/gh0st-404/zs-personal-infiltration-syste) 泽少个人渗透系统 Zs Personal Infiltration Syste
+- [**21**星][3y] [PS] [fuzzysecurity/capstonekeystone-powershell](https://github.com/fuzzysecurity/capstonekeystone-powershell) PowerShell Module Bindings for Capstone/Keystone
- [**21**星][2y] [Shell] [funilrys/funceble](https://github.com/funilrys/funceble) [ARCHIVED] Please report to
- [**21**星][2m] [Py] [flarn2006/bhstools](https://github.com/flarn2006/bhstools) Tools for interacting with Brinks BHS-3000 and BHS-4000 / IntelliBus, custom firmware for BHS-4000
- [**21**星][1y] [Py] [fjh658/hexrayspytools](https://github.com/fjh658/hexrayspytools) Ida Pro plugin
- [**21**星][4y] [fabiobaroni/awesome-pentest](https://github.com/fabiobaroni/awesome-pentest) A collection of awesome penetration testing resources, tools and other shiny things
- [**21**星][1m] [Shell] [fabaff/fsl-test-bench](https://github.com/fabaff/fsl-test-bench) FSL Test bench - Ansible playbook repository to setup a save environment for security auditing and testing. It can be used for teaching security testing methodologies, testing tools, learning, and playing.
-- [**21**星][27d] [Py] [f5networks/f5-google-gdm-templates](https://github.com/f5networks/f5-google-gdm-templates) Google Deployment Templates for quickly deploying BIG-IP services in Google Cloud Platform
-- [**21**星][3y] [Java] [ernw/burpsuite-extensions](https://github.com/ernw/burpsuite-extensions) A collection of Burp Suite extensions
-- [**21**星][16d] [Java] [ericsson/ecaudit](https://github.com/ericsson/ecaudit) Ericsson Audit plug-in for Apache Cassandra
+- [**21**星][6d] [Py] [f5networks/f5-google-gdm-templates](https://github.com/f5networks/f5-google-gdm-templates) Google Deployment Templates for quickly deploying BIG-IP services in Google Cloud Platform
+- [**21**星][10m] [Go] [extremecoders-re/go-dispatch-proxy](https://github.com/extremecoders-re/go-dispatch-proxy) SOCKS5 load balancing proxy developed in Go, combines multiple internet connections
+- [**21**星][18d] [Java] [ericsson/ecaudit](https://github.com/ericsson/ecaudit) Ericsson Audit plug-in for Apache Cassandra
- [**21**星][3y] [Jupyter Notebook] [equalitie/bothound](https://github.com/equalitie/bothound) Automatic attack detector and botnet classifier
- [**21**星][4m] [C#] [empier/memoryeditor](https://github.com/empier/memoryeditor) [C#]Main.exe < - > [C_DLL] < - > [C_KERNEL] = Memory_Editor via Kernel
-- [**21**星][3y] [PHP] [emanuil/php-reaper](https://github.com/emanuil/php-reaper) PHP tool to scan ADOdb code for SQL Injections
-- [**21**星][12m] [C++] [edwig/sslsocket](https://github.com/edwig/sslsocket) Two sided secure/insecure socket that can do SSL/TLS connections without the need for OpenSSL libraries. It uses the standard WinCrypt modules
+- [**21**星][1y] [C++] [edwig/sslsocket](https://github.com/edwig/sslsocket) Two sided secure/insecure socket that can do SSL/TLS connections without the need for OpenSSL libraries. It uses the standard WinCrypt modules
- [**21**星][2y] [edoverflow/security-policy-specification-standard](https://github.com/edoverflow/security-policy-specification-standard) This document proposes a way of standardising the structure, language, and grammar used in security policies.
- [**21**星][7m] [Py] [duchengyao/hkdvr_login](https://github.com/duchengyao/hkdvr_login) 批量扫描海康威视视频监控并尝试登录的脚本
- [**21**星][7y] [C] [dsmatter/brootus](https://github.com/dsmatter/brootus) An educational Linux Kernel Rootkit
- [**21**星][1y] [C] [droberson/icmp-backdoor](https://github.com/droberson/icmp-backdoor) Backdoor that listens for specially crafted ICMP packets and spawns reverse shells.
- [**21**星][7m] [Py] [drbeni/malquarium](https://github.com/drbeni/malquarium) Malquarium - Modern Malware Repository
-- [**21**星][2y] [C++] [dragonquesthero/kernel-force-delete](https://github.com/dragonquesthero/kernel-force-delete) force delete runing .exe application file.or delete any locked file
-- [**21**星][3y] [C++] [dinamsky/malware-botnets](https://github.com/dinamsky/malware-botnets)
+- [**21**星][3m] [digitaldisarray/osint-tools](https://github.com/digitaldisarray/osint-tools)
- [**21**星][3y] [Py] [digitalbond/ctf-challenges](https://github.com/digitalbond/ctf-challenges) Challenges from past S4 (SCADA Security Scientific Symposium) Capture-the-Flag contests.
-- [**21**星][1y] [Py] [digiampietro/adbtools2](https://github.com/digiampietro/adbtools2) Tools for hacking ADB Epicentro routers, including firmware modification and VOIP password recovery.
-- [**21**星][2m] [TypeScript] [dialogs/electron-ssl-pinning](https://github.com/dialogs/electron-ssl-pinning) Prevents MITM in Electron applications
+- [**21**星][2m] [TS] [dialogs/electron-ssl-pinning](https://github.com/dialogs/electron-ssl-pinning) Prevents MITM in Electron applications
+- [**21**星][1m] [Perl] [dheiland-r7/snmp](https://github.com/dheiland-r7/snmp) SNMP data gather scripts
+- [**21**星][10m] [dfir-it/supreme-backdoor-factory](https://github.com/dfir-it/supreme-backdoor-factory) This repository contains additional files mentioned in the blog post
+- [**21**星][2d] [C++] [deeponion/deeponion](https://github.com/deeponion/deeponion) Official Source Repo for DeepOnion - Anonymous Cryptocurrency on TOR (based on the latest codebase from litecoin/bitcoin)
+- [**21**星][4y] [Py] [decalage2/oledump-contrib](https://github.com/decalage2/oledump-contrib) The oledump-contrib repository contains plugins and enhancements for the oledump tool published by Didier Stevens.
- [**21**星][1y] [Smali] [dan7800/vulnerableandroidapporacle](https://github.com/dan7800/vulnerableandroidapporacle)
- [**21**星][4m] [C] [cyclaero/void-zones-tools](https://github.com/cyclaero/void-zones-tools) Prepare a list of void zones that can be readily feed into Unbound on FreeBSD
- [**21**星][5y] [C++] [cr4sh/prl_guest_to_host](https://github.com/cr4sh/prl_guest_to_host) Guest to host VM escape exploit for Parallels Desktop
- [**21**星][1y] [HTML] [consensys/evm-analyzer-benchmark-suite](https://github.com/consensys/evm-analyzer-benchmark-suite) A benchmark suite for evaluating the precision of EVM code analysis tools.
- [**21**星][1y] [C] [codereba/netmon](https://github.com/codereba/netmon) network filter driver that control network send speed, based on windows tdi framework.
- [**21**星][1y] [PHP] [codeclimate/codeclimate-phpcodesniffer](https://github.com/codeclimate/codeclimate-phpcodesniffer) Code Climate Engine for PHP Code Sniffer
+- [**21**星][2y] [Java] [codahale/grpc-proxy](https://github.com/codahale/grpc-proxy) A gRPC service which proxies requests to an HTTP server.
+- [**21**星][8m] [Java] [codahale/aes-gcm-siv](https://github.com/codahale/aes-gcm-siv) A Java implementation of AES-GCM-SIV (RFC 8452).
- [**21**星][2y] [C] [circl/pcapdj](https://github.com/circl/pcapdj) pcapdj - dispatch pcap files
- [**21**星][7m] [Py] [christhecoolhut/instruction-stomp](https://github.com/christhecoolhut/instruction-stomp) Cross-architecture instruction counting for CTF solving
+- [**21**星][21d] [JS] [chef-koch/bypass-adblockers](https://github.com/chef-koch/bypass-adblockers) Malvertising campaign that successfully bypasses ad blockers to deliver their malicious payload
- [**21**星][6y] [Py] [carlpulley/volatility](https://github.com/carlpulley/volatility) A collection of Volatility Framework plugins.
- [**21**星][10y] [C] [bringhurst/xnufuzz](https://github.com/bringhurst/xnufuzz) An XNU kernel fuzz tool
- [**21**星][5y] [Py] [brenns10/pywall](https://github.com/brenns10/pywall) Python firewall.
- [**21**星][4m] [Py] [botherder/snoopdroid](https://github.com/botherder/snoopdroid) Extract packages from an Android device
-- [**21**星][9d] [beerisgood/windows10_hardening](https://github.com/beerisgood/windows10_hardening) My Windows 10 x64 security hardening guide
+- [**21**星][4d] [beerisgood/windows10_hardening](https://github.com/beerisgood/windows10_hardening) My Windows 10 x64 security hardening guide
- [**21**星][6m] [Py] [beched/abi-decompiler](https://github.com/beched/abi-decompiler) Ethereum (EVM) smart contracts reverse engineering helper utility
- [**21**星][9m] [Ruby] [audibleblink/doubletap](https://github.com/audibleblink/doubletap) Password spraying on sites that require 2+ page loads and dynamic nonces
-- [**21**星][3y] [Visual Basic] [appsecco/winmanipulate](https://github.com/appsecco/winmanipulate) A simple tool to manipulate window objects in Windows
+- [**21**星][5m] [JS] [assafmo/istorexit](https://github.com/assafmo/istorexit) Check if an IP is a Tor exit node
+- [**21**星][3y] [C++] [arpitn30/nipper-ng](https://github.com/arpitn30/nipper-ng) Automatically exported from code.google.com/p/nipper-ng
+- [**21**星][3y] [Visual Basic .NET] [appsecco/winmanipulate](https://github.com/appsecco/winmanipulate) A simple tool to manipulate window objects in Windows
- [**21**星][6m] [PHP] [appsecco/sqlinjection-training-app](https://github.com/appsecco/sqlinjection-training-app) A simple PHP application to learn SQL Injection detection and exploitation techniques.
+- [**21**星][10d] [Shell] [apache-labor/labor](https://github.com/apache-labor/labor)
- [**21**星][3y] [CSS] [aozhimin/ios-reverse-engineering-presentation](https://github.com/aozhimin/ios-reverse-engineering-presentation) iOS Reverse Engineering Presentation
- [**21**星][3y] [aozhimin/ios-monitor-resources](https://github.com/aozhimin/ios-monitor-resources) 对各厂商的 iOS SDK 性能监控方案的整理和收集后的资源
- [**21**星][10m] [Java] [ankokuty/hakoniwabadstore](https://github.com/ankokuty/hakoniwabadstore) 箱庭BadStore
+- [**21**星][2m] [Shell] [angela-d/autohosts](https://github.com/angela-d/autohosts) Automate hosts file updates on Linux and MacOS. Block Firefox telemetry, Google snooping and web trackers at the root.
+- [**21**星][4y] [C#] [alphadelta/png-mask](https://github.com/alphadelta/png-mask) PNG Steganography Software
- [**21**星][2y] [Java] [alcarl/nfcproxy](https://github.com/alcarl/nfcproxy) 用两个安卓手机的nfc功能截取iso14443交互数据 fork by
- [**21**星][2y] [C] [al-homedawy/injector](https://github.com/al-homedawy/injector) A Windows driver used to facilitate DLL injection
- [**21**星][4y] [C#] [adamcaudill/curvelock](https://github.com/adamcaudill/curvelock) Experimental File & Message Encryption for Windows
- [**21**星][3m] [acutronicrobotics/mara_threat_model](https://github.com/acutronicrobotics/mara_threat_model) Threat Model analysis for MARA modular robot
-- [**21**星][2y] [Py] [abatchy17/rop-emporium](https://github.com/abatchy17/rop-emporium) Solutions for ROP Emporium challenges (
+- [**21**星][2m] [Py] [7dog7/masscan_to_nmap](https://github.com/7dog7/masscan_to_nmap) 基于masscan和nmap的快速端口扫描和指纹识别工具,优化版本(获取标题,页面长度,过滤防火墙)
- [**21**星][3y] [55-aa/cve-2015-0057](https://github.com/55-aa/cve-2015-0057) 翻译文章,CVE-2015-0057漏洞在32位和64位系统上的利用。Exploiting the win32k!xxxEnableWndSBArrows use-after-free (CVE 2015-0057) bug on both 32-bit and 64-bit(Aaron Adams of NCC )
- [**21**星][7y] [C] [0xroot/whitesnow](https://github.com/0xroot/whitesnow) An experimental rootkit for Android
- [**21**星][1y] [Py] [0x09al/my-exploits](https://github.com/0x09al/my-exploits) My public exploit collection.
+- [**20**星][6d] [Py] [quark-engine/quark-engine](https://github.com/quark-engine/quark-engine)
+- [**20**星][2d] [Py] [beardog108/onionr](https://github.com/beardog108/onionr) Private Decentralized Communication Network
+- [**20**星][6m] [Go] [contextualist/proxlet](https://github.com/contextualist/proxlet) a POC, naïve implemetation of serverless reverse proxy for any website
+- [**20**星][30d] [Java] [naveenrudra/rttm](https://github.com/naveenrudra/rttm) Real Time Threat Monitoring Tool
- [**20**星][2y] [HTML] [pwn20wndstuff/pwn20wndstuff.github.io](https://github.com/pwn20wndstuff/pwn20wndstuff.github.io)
-- [**20**星][7d] [C#] [damonmohammadbagher/nativepayload_reverseshell](https://github.com/damonmohammadbagher/nativepayload_reverseshell) This is Simple C# Source code to Bypass almost "all" AVS, (kaspersky v19, Eset v12 v13 ,Trend-Micro v16, Comodo & Windows Defender Bypassed via this method Very Simple)
- [**20**星][1y] [Py] [tostapunk/pc-control-telegram-bot](https://github.com/tostapunk/pc-control-telegram-bot) Control your PC directly from Telegram!
-- [**20**星][2m] [starnightcyber/subdomains](https://github.com/starnightcyber/subdomains) 互联网公司子域名收集
+- [**20**星][1m] [scriptingxss/owasp-fstm](https://github.com/scriptingxss/owasp-fstm) The Firmware Security Testing Methodology (FSTM) is composed of nine stages tailored to enable security researchers, software developers, consultants, hobbyists, and Information Security professionals with conducting firmware security assessments.
- [**20**星][4m] [C] [netik/dc27_badge](https://github.com/netik/dc27_badge) Defcon 27 "DaBomb!" badge.
-- [**20**星][9d] [Py] [natescarlet/gfwlist.acl](https://github.com/natescarlet/gfwlist.acl)
+- [**20**星][11d] [Py] [natescarlet/gfwlist.acl](https://github.com/natescarlet/gfwlist.acl)
- [**20**星][5m] [HTML] [0xkira/pwn-dash-docset](https://github.com/0xkira/pwn-dash-docset) latest x86_64 assembly language and pwntools dash docset
-- [**20**星][1m] [Py] [mephi42/ida-kallsyms](https://github.com/mephi42/ida-kallsyms) (No Doc)
-- [**20**星][3y] [Py] [initbrain/python-wi-fi-positioning-system](https://github.com/initbrain/python-wi-fi-positioning-system) Python Wi-Fi Positioning System - Wi-Fi geolocation script using the Google Geolocation API
+- [**20**星][2m] [Java] [alpheratzteam/obfuscator](https://github.com/alpheratzteam/obfuscator) Java Obfuscator
+- [**20**星][2m] [Py] [mephi42/ida-kallsyms](https://github.com/mephi42/ida-kallsyms) (No Doc)
- [**20**星][1m] [foxhex0ne/slides](https://github.com/foxhex0ne/slides) Will try to put here slides from now on when I give a talk
- [**20**星][1y] [Py] [hyuunnn/ida_python_scripts](https://github.com/hyuunnn/ida_python_scripts) ida python scripts
-- [**20**星][25d] [cypurr-collective/cypurr-prezes](https://github.com/cypurr-collective/cypurr-prezes) presentation materials for our cryptoparties
+- [**20**星][11m] [Go] [nogoegst/onionize](https://github.com/nogoegst/onionize) create an onion site from a directory, file, zip or an HTTP(S) site
+- [**20**星][3m] [Java] [aress31/flarequench](https://github.com/aress31/flarequench) Burp Suite plugin that adds additional checks to the passive scanner to reveal the origin IP(s) of Cloudflare-protected web applications.
- [**20**星][3y] [Py] [inndy/formatstring-exploit](https://github.com/inndy/formatstring-exploit) Dead simple format string exploit payload generator
- [**20**星][1y] [Py] [sniperoj/attack-defense-platform](https://github.com/sniperoj/attack-defense-platform) A framework that help to create CTF Attack with Defense competition quickly
-- [**20**星][11d] [Java] [daimler/sechub](https://github.com/daimler/sechub) SecHub - one central and easy way to use different security tools with one API/Client
+- [**20**星][2d] [Java] [daimler/sechub](https://github.com/daimler/sechub) SecHub - one central and easy way to use different security tools with one API/Client
- [**20**星][7m] [HTML] [casework/case](https://github.com/casework/CASE) Cyber-investigation Analysis Standard Expression (CASE) Ontology
- [**20**星][3y] [ulexec/windowsmalwaresourcecode](https://github.com/ulexec/WindowsMalwareSourceCode) Collection of Source Code of Various Malware Targeting the Windows Platform
- [**20**星][3y] [unexpectedby/automated-malware-analysis-list](https://github.com/unexpectedBy/Automated-Malware-Analysis-List) My personal Automated Malware Analysis Sandboxes and Services
@@ -16479,41 +17816,43 @@ for CVE details based on the nmap report.
- [**20**星][3y] [Go] [thanasisk/go-ssh-cracker](https://github.com/thanasisk/go-ssh-cracker) A simple ssh private key password recovery tool written in Go
- [**20**星][11m] [Py] [fsecurelabs/captcha_cracking](https://github.com/FSecureLABS/captcha_cracking) Helper scripts and tutorial for cracking text-based CAPTCHAs
- [**20**星][8m] [aws-samples/aws-redshift-spectrum-poc](https://github.com/aws-samples/aws-redshift-spectrum-poc) Cloudformation and SQL scripts used to replicate a POC environment from the "Data Lake to Data Warehouse: Enhancing Customer 360 with Amazon Redshift Spectrum" post
+- [**20**星][5m] [Py] [zznop/binjago](https://github.com/zznop/binjago) Binary Ninja plugin for ROP gadget calculation
- [**20**星][3y] [Py] [ztrix/idascript](https://github.com/ztrix/idascript) Full functional idascript with stdin/stdout handled
- [**20**星][2y] [C#] [zoebear/radia](https://github.com/zoebear/radia) 创建一个用于可视化代码的交互式、沉浸式环境,辅助二进制文件逆向
+- [**20**星][2y] [ObjC] [zjjno/cornerstonehook](https://github.com/zjjno/cornerstonehook) Cornerstone破解
- [**20**星][1y] [C] [zhuhuibeishadiao/drivermaper](https://github.com/zhuhuibeishadiao/drivermaper) map driver to memory
+- [**20**星][9m] [C++] [zhongyang219/simplenotepad](https://github.com/zhongyang219/simplenotepad) 这是一个可以代替Windows记事本的软件,除了包含记事本原有的功能外,还有编码格式转换、十六进制查看编辑、文件二进制比较、编码批量转换的功能。
- [**20**星][1y] [Py] [zhl2008/ctf-framework](https://github.com/zhl2008/ctf-framework) Hence
- [**20**星][3m] [C#] [zerokilo/pdbdumpwv](https://github.com/zerokilo/pdbdumpwv) PDB Dumping Tool
-- [**20**星][1y] [zecopro/wpa-passwords](https://github.com/zecopro/wpa-passwords) the best and small passwords lists to crack handshake wpa-wpa2
- [**20**星][3y] [C++] [yujokang/epex](https://github.com/yujokang/epex) Tool for detecting error handling bugs
- [**20**星][3y] [CSS] [youngyangyang04/nosqlinjectionattackdemo](https://github.com/youngyangyang04/nosqlinjectionattackdemo) NoSQLInjectionAttackDemo is website demo for test NoSQL Injection. There are two website demos in this project and all databases are mongoDB
- [**20**星][1y] [Lua] [yoshifan/ram-watch-cheat-engine](https://github.com/yoshifan/ram-watch-cheat-engine) Lua script framework for RAM watch displays using Cheat Engine, with a focus on Dolphin emulator.
+- [**20**星][1y] [xiaoqx/pocs](https://github.com/xiaoqx/pocs) pocs of tested targets
- [**20**星][3y] [CSS] [xeushack/fake-login-page](https://github.com/xeushack/fake-login-page) A fake login page for use in a phishing attack
- [**20**星][8m] [x-f1v3/cve-2019-3396](https://github.com/x-f1v3/cve-2019-3396) Confluence Widget Connector path traversal (CVE-2019-3396)
-- [**20**星][19d] [watterott/candiy-shield](https://github.com/watterott/candiy-shield) CAN-Bus Shield for Arduino based on Microchip MCP2515 or MCP2517FD CAN Controller
+- [**20**星][21d] [watterott/candiy-shield](https://github.com/watterott/candiy-shield) CAN-Bus Shield for Arduino based on Microchip MCP2515 or MCP2517FD CAN Controller
- [**20**星][6m] [PHP] [w181496/fuckfastcgi](https://github.com/w181496/fuckfastcgi) [Tool] Forge PHP FastCGI protocol to RCE with strict disable_functions
- [**20**星][1y] [Py] [vortexau/mooscan](https://github.com/vortexau/mooscan) A scanner for Moodle LMS
+- [**20**星][3d] [Go] [virustotal/vt-go](https://github.com/virustotal/vt-go) The official Go client library for VirusTotal API
- [**20**星][2y] [JS] [vagabondan/ric-nomp](https://github.com/vagabondan/ric-nomp) SEGWIT, Dash 12.1 generation transaction format support and many bugfixes from almost all forks at github were implemented here on 2017-10-04. You can create Issues but code contribution is much more preferable.
+- [**20**星][2y] [Py] [undefinedd/extract0r-](https://github.com/undefinedd/extract0r-)
- [**20**星][1y] [C#] [ukncsc/mail-check](https://github.com/ukncsc/mail-check)
- [**20**星][3y] [JS] [tunnelshade/pocuito](https://github.com/tunnelshade/pocuito) A tiny chrome extension to record and replay your web application proof-of-concepts.
- [**20**星][10m] [Makefile] [tum-i22/munch](https://github.com/tum-i22/munch) Greybox fuzzer for optimizing function coverage and finding low-level vulnerabilities in C programs
-- [**20**星][3y] [PowerShell] [trullj/sticky-keys-scanner](https://github.com/trullj/sticky-keys-scanner) A PowerShell function that scans for the existence of a Sticky Keys backdoor.
+- [**20**星][3y] [PS] [trullj/sticky-keys-scanner](https://github.com/trullj/sticky-keys-scanner) A PowerShell function that scans for the existence of a Sticky Keys backdoor.
- [**20**星][3y] [Java] [topolik/ois-dos](https://github.com/topolik/ois-dos) Java Deserialization
- [**20**星][3y] [Py] [toolsprods/sniffvpn](https://github.com/toolsprods/sniffvpn) Traffic monitor for your VPN
- [**20**星][5y] [C] [tongzeyu/hooksysenter](https://github.com/tongzeyu/hooksysenter) hook sysenter,重载内核,下硬件断点到debugport,防止debugport清零
-- [**20**星][2y] [C#] [thomdixon/saltwatertaffy](https://github.com/thomdixon/saltwatertaffy) An nmap wrapper library for .NET
- [**20**星][1y] [Py] [thisissecurity/sinkhole](https://github.com/thisissecurity/sinkhole) Miscellanous scripts used for malware analysis
- [**20**星][1m] [Go] [theredspy15/multi-go](https://github.com/theredspy15/multi-go) A multi-tool made in Go, and aimed at security experts to make life a little more convenient
- [**20**星][8m] [C++] [terencechow/pwnedpasswords](https://github.com/terencechow/pwnedpasswords) PwnedPasswords as a Service
- [**20**星][2y] [Py] [techbliss/x64dbg_script_editor](https://github.com/techbliss/x64dbg_script_editor) x64dbg Script editor v2.0
+- [**20**星][3m] [Rust] [tafia/hyper-proxy](https://github.com/tafia/hyper-proxy) A proxy connector for Hyper-based crates
- [**20**星][5y] [C++] [sweetsoftware/simplebackdoor](https://github.com/sweetsoftware/simplebackdoor) Remote Windows shell
- [**20**星][4y] [PHP] [stypr/ctf](https://github.com/stypr/ctf) Web-based CTF challenge writeups (2011~2015).
-- [**20**星][24d] [Shell] [stevemcgrath/docker-nessus_scanner](https://github.com/stevemcgrath/docker-nessus_scanner) Nessus Scanner Docker Image
- [**20**星][6y] [Ruby] [staaldraad/metasploit](https://github.com/staaldraad/metasploit) Metasploit things, modules, plugins, exploits
-- [**20**星][5m] [Py] [sslmate/ct-honeybee](https://github.com/sslmate/ct-honeybee) Lightweight program that pollinates STHs between Certificate Transparency logs and auditors
-- [**20**星][4m] [C] [sslab-gatech/fuzzification](https://github.com/sslab-gatech/fuzzification) We hinder fuzzing
+- [**20**星][6m] [Py] [sslmate/ct-honeybee](https://github.com/sslmate/ct-honeybee) Lightweight program that pollinates STHs between Certificate Transparency logs and auditors
- [**20**星][11m] [Py] [spacepatcher/firehol-ip-aggregator](https://github.com/spacepatcher/firehol-ip-aggregator) Application for keeping feeds from FireHOL
-- [**20**星][3m] [sophoslabs/iocs](https://github.com/sophoslabs/iocs) Sophos-originated indicators-of-compromise from published reports
- [**20**星][5y] [snifer/l4bsforandroid](https://github.com/snifer/l4bsforandroid) Repositorio de APK para Hacking y Seguridad
- [**20**星][10m] [slowmist/awesome-blockchain-bug-bounty](https://github.com/slowmist/awesome-blockchain-bug-bounty) A comprehensive curated list of available Blockchain Bug Bounty Programs.
- [**20**星][4m] [Java] [skocur/image-cipher](https://github.com/skocur/image-cipher) Steganography software for encrypting text into image that uses modified version of LSB (Least Significant Bit) algorithm.
@@ -16521,24 +17860,23 @@ for CVE details based on the nmap report.
- [**20**星][4y] [Py] [sinkmanu/cookiescanner](https://github.com/sinkmanu/cookiescanner) Tool for check the cookie flag in multiple sites
- [**20**星][1y] [Erlang] [silentsignal/sslproxy](https://github.com/silentsignal/sslproxy) Generic HTTPS proxy for logging non-HTTP traffic
- [**20**星][4y] [Py] [shwetankarora/gsm-packets-analysis-framework](https://github.com/shwetankarora/gsm-packets-analysis-framework)
-- [**20**星][3y] [HTML] [secwiki/wooyun_articles](https://github.com/secwiki/wooyun_articles) drops.wooyun.org 乌云Drops文章备份
-- [**20**星][5y] [ActionScript] [securityobscurity/cve-2015-0313](https://github.com/securityobscurity/cve-2015-0313)
+- [**20**星][8y] [Ruby] [sensepost/squeeza](https://github.com/sensepost/squeeza) SQL Injection without the pain of syringes.
+- [**20**星][3m] [Py] [sensepost/punch-q](https://github.com/sensepost/punch-q)
- [**20**星][3y] [Py] [securitymb/burp-exceptions](https://github.com/securitymb/burp-exceptions) Simple trick to increase readability of exceptions raised by Burp extensions written in Python
- [**20**星][1y] [Py] [securityinnovation/ofxpostern](https://github.com/securityinnovation/ofxpostern) Vulnerability scanner for OFX servers
-- [**20**星][8m] [C++] [secrary/findloop](https://github.com/secrary/findloop) 使用DyRIO查找执行次数过多的代码块
-- [**20**星][2y] [C] [scotpaul/keylog](https://github.com/scotpaul/keylog) A simple C keylogger for Linux
+- [**20**星][9m] [C++] [secrary/findloop](https://github.com/secrary/findloop) 使用DyRIO查找执行次数过多的代码块
- [**20**星][2y] [sampi/create-react-app-hack](https://github.com/sampi/create-react-app-hack) Hacking create-react-app to work with Preact & LESS without ejecting
- [**20**星][7y] [MATLAB] [samhooke/steganography](https://github.com/samhooke/steganography) Image & video steganography in Matlab
- [**20**星][3y] [Py] [saelo/33c3ctf-repl](https://github.com/saelo/33c3ctf-repl) Code and exploit for the "read-eval-pwn loop" challenge of 33C3 CTF
- [**20**星][10m] [Java] [rub-nds/joseph](https://github.com/rub-nds/joseph)
+- [**20**星][1m] [Shell] [rtrouton/create_macos_recovery](https://github.com/rtrouton/create_macos_recovery) Tool for repairing the Recovery volume (APFS) or partition (HFS+) on Macs running macOS 10.13.x or later.
- [**20**星][2y] [JS] [rohitjoshi9023/brutal-wordlist-generator](https://github.com/rohitjoshi9023/brutal-wordlist-generator) Brutal Wordlist Generator is a java based Application software used to generate the wordlist with best of UX interface
- [**20**星][4m] [C++] [revspbird/hightlight](https://github.com/revspbird/hightlight) 反编译窗口中代码块和括号高亮
- [**20**星][6m] [C#] [reclassnet/reclass.net-frostbiteplugin](https://github.com/reclassnet/reclass.net-frostbiteplugin) A ReClass.NET plugin which displays type infos of Frostbite classes and adds the WeakPtr node.
-- [**20**星][3y] [Go] [rdkr/oniongen-go](https://github.com/rdkr/oniongen-go)
-- [**20**星][2y] [PowerShell] [rasta-mouse/invoke-loginprompt](https://github.com/rasta-mouse/invoke-loginprompt) Invokes a Windows Security Login Prompt and outputs the clear text password.
+- [**20**星][2y] [JS] [rd17/detor](https://github.com/rd17/detor)
+- [**20**星][2y] [PS] [rasta-mouse/invoke-loginprompt](https://github.com/rasta-mouse/invoke-loginprompt) Invokes a Windows Security Login Prompt and outputs the clear text password.
- [**20**星][4m] [Py] [rapid7/metasploit-baseline-builder](https://github.com/rapid7/metasploit-baseline-builder) Created by Jeffrey Martin via the GitHub Connector
-- [**20**星][6m] [r3mlab/datajournalism-resources](https://github.com/r3mlab/datajournalism-resources) A compilation of links to datajournalism & OSINT tools, guides and resources I find useful to keep at hand.
-- [**20**星][2y] [Py] [pure-l0g1c/aircrack](https://github.com/pure-l0g1c/aircrack) Automatic Wifi Cracker. Uses Airodump, Aircrack, Aireplay
+- [**20**星][1y] [ranchoice/44con2018](https://github.com/ranchoice/44con2018) Slides of 44Con 2018
- [**20**星][3y] [C++] [progmboy/vul_analyze_doc](https://github.com/progmboy/vul_analyze_doc)
- [**20**星][2y] [Java] [pnfsoftware/pleaserop](https://github.com/pnfsoftware/pleaserop) Architecture-agnostic ROP gadget finder using JEB's IR
- [**20**星][7m] [Rust] [plus-postech/soma](https://github.com/plus-postech/soma) Cross-platform CTF problem container manager
@@ -16548,61 +17886,58 @@ for CVE details based on the nmap report.
- [**20**星][3y] [HTML] [pentestbox/pentest-box-tools](https://github.com/pentestbox/pentest-box-tools) PentestBox Tools Website
- [**20**星][3y] [C++] [patois/ndsldr](https://github.com/patois/ndsldr) Nintendo DS ROM loader module for IDA Pro
- [**20**星][2y] [C] [opsxcq/exploit-cve-2016-7434](https://github.com/opsxcq/exploit-cve-2016-7434) NTPD remote DOS exploit and vulnerable container
-- [**20**星][3y] [PowerShell] [oldb00t/aggressorscripts](https://github.com/oldb00t/aggressorscripts) Cobaltstrike Aggressor Scripts
+- [**20**星][3y] [PS] [oldb00t/aggressorscripts](https://github.com/oldb00t/aggressorscripts) Cobaltstrike Aggressor Scripts
- [**20**星][2y] [C#] [olanderofc/officebrute](https://github.com/olanderofc/officebrute) OfficeBrute - brute force protected word documents
- [**20**星][1y] [Batchfile] [olafhartong/ta-sysmon-deploy](https://github.com/olafhartong/ta-sysmon-deploy) Deploy and maintain Symon through the Splunk Deployment Sever
- [**20**星][1y] [c] [odzhan/propagate](https://github.com/odzhan/propagate) PROPagate code injection technique example
-- [**20**星][5y] [C] [nyx0/dll-inj3cti0n](https://github.com/nyx0/dll-inj3cti0n) Another dll injection tool.
- [**20**星][8m] [C#] [nyan-x-cat/lime-loader](https://github.com/nyan-x-cat/lime-loader) Download a .NET payload and run it on memory
- [**20**星][2y] [Shell] [nullarray/sysenum](https://github.com/nullarray/sysenum) Simple Bash script to retrieve basic system information.
- [**20**星][2y] [Py] [nullarray/pyparser-cve](https://github.com/nullarray/pyparser-cve) Multi source CVE/exploit parser.
+- [**20**星][26d] [C++] [nonlinear-chaos-order-etc/i2pchat](https://github.com/nonlinear-chaos-order-etc/i2pchat)
- [**20**星][2y] [C++] [nkga/self-updater](https://github.com/nkga/self-updater) Framework for secure self-updating software, written in C++/Win32.
- [**20**星][2y] [C] [nkga/cheat-driver](https://github.com/nkga/cheat-driver) Kernel mode driver for reading/writing process memory. C/Win32.
+- [**20**星][3y] [Py] [njsmith/machomachomangler](https://github.com/njsmith/machomachomangler) Tools for mangling Mach-O and PE binaries
- [**20**星][6y] [Shell] [netspi/binrev](https://github.com/netspi/binrev)
-- [**20**星][2y] [HTML] [neargle/secnewsbak](https://github.com/neargle/secnewsbak) 备份SecNews失效的Drops.Wooyun文章
- [**20**星][2y] [C] [neargle/cve-2018-6574-poc](https://github.com/neargle/cve-2018-6574-poc) CVE-2018-6574 POC : golang 'go get' remote command execution during source code build
- [**20**星][1y] [Py] [ne0nd0g/adpasswordhealth](https://github.com/ne0nd0g/adpasswordhealth) A tool to evaluate the password health of Active Directory accounts.
- [**20**星][3y] [nd13/penetration-testing-and-hacking](https://github.com/nd13/penetration-testing-and-hacking) Collection of tips, tools and tutorials around infosec
- [**20**星][3y] [Py] [ncatlin/lockwatcher](https://github.com/ncatlin/lockwatcher) Anti-forensic monitor program: watches for signs of tampering and purges keys/shuts everything down.
- [**20**星][2y] [C] [nbulischeck/debugfs-backdoor](https://github.com/nbulischeck/debugfs-backdoor) PoC code using debugfs to store files in memory and execute them
- [**20**星][1y] [Py] [n0tty/random-hacking-scripts](https://github.com/n0tty/random-hacking-scripts) A collection of scripts made duing my personal research
-- [**20**星][22d] [C++] [mullvad/libwfp](https://github.com/mullvad/libwfp) C++ library for interacting with the Windows Filtering Platform (WFP)
-- [**20**星][2y] [Java] [mtxiaowangzi/java-ee-vulnweb](https://github.com/mtxiaowangzi/java-ee-vulnweb) 用于演示Java Web项目中,漏洞的成因及修复方案,可用于黑盒测试和白盒测试,部分修复方案可用于生产环境。
+- [**20**星][24d] [C++] [mullvad/libwfp](https://github.com/mullvad/libwfp) C++ library for interacting with the Windows Filtering Platform (WFP)
- [**20**星][7m] [C] [mtth-bfft/ntsec](https://github.com/mtth-bfft/ntsec) Standalone tool to explore the security model of Windows and its NT kernel. Use it to introspect privilege assignments and access right assignments, enumerate attack surfaces from the point of view of a sandboxed process, etc.
- [**20**星][2y] [C++] [mrexodia/ceautoattach](https://github.com/mrexodia/ceautoattach) Tool to automatically make Cheat Engine attach to a process via the command line.
- [**20**星][7y] [JS] [mozilla/mortar-layouts](https://github.com/mozilla/mortar-layouts) A small library for constructing app UIs with backbone.js.
- [**20**星][2y] [XSLT] [mozilla-services/shavar-plugin-blocklist](https://github.com/mozilla-services/shavar-plugin-blocklist)
-- [**20**星][3y] [PowerShell] [mortenschenk/babuska-dolls](https://github.com/mortenschenk/babuska-dolls)
-- [**20**星][1m] [Py] [mntn0x/poc](https://github.com/mntn0x/poc) 一些漏洞检测/利用脚本
+- [**20**星][3y] [PS] [mortenschenk/babuska-dolls](https://github.com/mortenschenk/babuska-dolls)
+- [**20**星][7d] [Py] [mntn0x/poc](https://github.com/mntn0x/poc) 一些漏洞检测/利用脚本
- [**20**星][5y] [Py] [mk-fg/nflog-zmq-pcap-pipe](https://github.com/mk-fg/nflog-zmq-pcap-pipe) Tool to collect nflog and pipe it to a pcap stream/file over network (0mq) for real-time (or close to) analysis
- [**20**星][9m] [misp/misp-compliance](https://github.com/misp/misp-compliance) Legal, procedural and policies document templates for operating MISP and information sharing communities
- [**20**星][5y] [Py] [milo2012/pentest_automation](https://github.com/milo2012/pentest_automation)
-- [**20**星][10d] [PHP] [middlewares/payload](https://github.com/middlewares/payload) PSR-15 middleware to parse the body of the request with support for json, csv and url-encode
-- [**20**星][7d] [HTML] [mfthomps/labtainers](https://github.com/mfthomps/labtainers) Labtainers: A Docker-based cyber lab framework
+- [**20**星][9d] [HTML] [mfthomps/labtainers](https://github.com/mfthomps/labtainers) Labtainers: A Docker-based cyber lab framework
- [**20**星][4y] [Shell] [merces/scripts](https://github.com/merces/scripts) cuz life is scriptable...
- [**20**星][2y] [ActionScript] [mdsecactivebreach/cve-2018-4878](https://github.com/mdsecactivebreach/cve-2018-4878)
-- [**20**星][2y] [PowerShell] [mdsecactivebreach/angrypuppy](https://github.com/mdsecactivebreach/angrypuppy) Bloodhound Attack Path Automation in CobaltStrike
+- [**20**星][2y] [PS] [mdsecactivebreach/angrypuppy](https://github.com/mdsecactivebreach/angrypuppy) Bloodhound Attack Path Automation in CobaltStrike
+- [**20**星][2y] [mayter/sec-charts](https://github.com/mayter/sec-charts) 更新了更多的思维导图。
- [**20**星][1y] [Ruby] [martinvigo/ransombile](https://github.com/martinvigo/ransombile) Ransombile is a tool that can be used in different scenarios to compromise someone’s digital life when having physical access to a locked mobile device
- [**20**星][7m] [Py] [manhnho/brutality](https://github.com/manhnho/brutality) A fuzzer for any GET entries
- [**20**星][9m] [Py] [makinacorpus/spynner](https://github.com/makinacorpus/spynner) Programmatic web browsing module with AJAX support for Python
-- [**20**星][2m] [Dockerfile] [mablanco/docker-osmedeus](https://github.com/mablanco/docker-osmedeus) Docker image for Osmedeus, a fully automated offensive security tool for reconnaissance and vulnerability scanning
-- [**20**星][5y] [C++] [lynnux/holyshit](https://github.com/lynnux/holyshit) ollydbg plugin, the goal is to make life easier. The project is DEAD!
- [**20**星][7m] [C#] [lowleveldesign/diagnostics-tools](https://github.com/lowleveldesign/diagnostics-tools)
- [**20**星][3m] [C] [lnslbrty/potd](https://github.com/lnslbrty/potd) A high scalable low to medium interactive SSH/TCP honeypot using Linux Namespaces, capabilities, seccomp, cgroups designed for OpenWrt and IoT devices.
-- [**20**星][2y] [PowerShell] [linuz/powerhungry](https://github.com/linuz/powerhungry) Experimental PowerShell tools for Penetration Testing / Red Teaming
+- [**20**星][2y] [PS] [linuz/powerhungry](https://github.com/linuz/powerhungry) Experimental PowerShell tools for Penetration Testing / Red Teaming
- [**20**星][2y] [JS] [lersh/potatostream](https://github.com/lersh/potatostream) Shadowsocks like Proxy,Written by nodejs
-- [**20**星][3y] [C] [leixiangwu/cse509-rootkit](https://github.com/leixiangwu/cse509-rootkit) After attackers manage to gain access to a remote (or local) machine and elevate their privileges to "root", they typically want to maintain their access, while hiding their presence from the normal users and administrators of the system. This basic rootkit works on the Linux operating system and is a loadable kernel module which when loaded int…
- [**20**星][1y] [Shell] [kyonli/asuswrt-v2ray](https://github.com/kyonli/asuswrt-v2ray) Transparent proxy based on V2Ray
- [**20**星][2y] [Go] [kudelskisecurity/go-manger-attack](https://github.com/kudelskisecurity/go-manger-attack) This is a toy implementation in Go of Manger's chosen-ciphertext attack on RSA-OAEP
- [**20**星][2y] [Py] [kudelskisecurity/cryptochallenge17](https://github.com/kudelskisecurity/cryptochallenge17) Kudelski Security's 2017 crypto challenge
-- [**20**星][2y] [Py] [kslgroup/threadmap](https://github.com/kslgroup/threadmap) threadmap plugin for Volatility Foundation
- [**20**星][3y] [Ruby] [kingsabri/burp_suite_extension_ruby](https://github.com/kingsabri/burp_suite_extension_ruby) BurpSuite Extension Ruby Template to speed up building a Burp Extension using Ruby
-- [**20**星][5y] [Java] [khai-tran/burpjdser](https://github.com/khai-tran/burpjdser)
- [**20**星][7y] [Py] [kevthehermit/yaramail](https://github.com/kevthehermit/yaramail) Yara Scanner For IMAP Feeds and saved Streams
- [**20**星][6m] [TeX] [kevateam/ctf-attack-defense](https://github.com/kevateam/ctf-attack-defense) Attack-defense platform
- [**20**星][2y] [Py] [kelwin/peda](https://github.com/kelwin/peda) PEDA - Python Exploit Development Assistance for GDB
- [**20**星][5y] [kdpryor/linuxvolprofiles](https://github.com/kdpryor/linuxvolprofiles) Volatility Linux Profiles
+- [**20**星][3m] [Ruby] [karneades/defensomania](https://github.com/karneades/defensomania) Defensomania is a card game for security monitoring and incident response teams.
- [**20**星][9y] [Diff] [jrmuizel/kemufuzzer](https://github.com/jrmuizel/kemufuzzer) Automatically exported from code.google.com/p/kemufuzzer
+- [**20**星][3m] [C++] [jovibor/libpe](https://github.com/jovibor/libpe) Library for tinkering with PE/PE+ binaries.
+- [**20**星][3y] [C] [joswr1ght/asleap](https://github.com/joswr1ght/asleap) Asleap - Cisco LEAP and Generic MS-CHAPv2 Dictionary Attack
- [**20**星][9m] [Py] [jordisk/thehive2sigma](https://github.com/jordisk/thehive2sigma) Python script to automatically create sigma rules from The hive observables
- [**20**星][5y] [JS] [jonstewart/sifter](https://github.com/jonstewart/sifter) Indexed search and clustering tool for digital forensics
- [**20**星][4y] [C] [jonathanseals/ios-kexec-utils](https://github.com/jonathanseals/ios-kexec-utils) I'm taking a break, I swear
@@ -16612,8 +17947,6 @@ for CVE details based on the nmap report.
- [**20**星][2y] [Py] [jidar/smith](https://github.com/jidar/smith) A client/server style agent meant for testing connectivity to and from a machine on a network.
- [**20**星][2y] [Py] [jiayunhan/opanalyzer](https://github.com/jiayunhan/opanalyzer) The unofficial release of the tool we used in the EuroS&P 2017 paper: Open Doors for Bob and Mallory: Open Port Usage in Android Apps and Security Implications.
- [**20**星][7y] [Py] [jeffbryner/kinectasploitv2](https://github.com/jeffbryner/kinectasploitv2) kinectasploitv2
-- [**20**星][2y] [jasklabs/blackhat2017](https://github.com/jasklabs/blackhat2017) Data sets and examples for Jask Labs Blackhat 2017 Handout: Top 10 Machine Learning Cyber Security Use Cases
-- [**20**星][2m] [C] [jackullrich/trunpe](https://github.com/jackullrich/trunpe) A modified RunPE (process hollowing) technique avoiding the usage of SetThreadContext by appending a TLS section which calls the original entrypoint.
- [**20**星][2y] [C] [izuolan/pshell](https://github.com/izuolan/pshell) ICMP/IP tunnel manager for Linux.
- [**20**星][1y] [ivan1ee/regasm_installutil_applockerbypass](https://github.com/ivan1ee/regasm_installutil_applockerbypass) AppLocker Bypass With Regasm/InstallUtil
- [**20**星][1y] [Java] [it-gorillaz/lnk2pwn](https://github.com/it-gorillaz/lnk2pwn) Malicious Shortcut(.lnk) Generator
@@ -16629,38 +17962,39 @@ for CVE details based on the nmap report.
- [Decoder](https://github.com/hyuunnn/ida_python_scripts/tree/master/Decoder) Multiple malware decoders
- [**20**星][2y] [Py] [hrushikeshk/enum.py](https://github.com/hrushikeshk/enum.py) A tool to enumerate network services
- [**20**星][2y] [Py] [hexabin/apkstat](https://github.com/hexabin/apkstat) Automated Information Retrieval From APKs For Initial Analysis
-- [**20**星][6y] [C] [hackedteam/vector-silent](https://github.com/hackedteam/vector-silent) Silent installer
+- [**20**星][4m] [Ruby] [heroku/omniauth-heroku](https://github.com/heroku/omniauth-heroku) OmniAuth strategy for Heroku
- [**20**星][5y] [AutoIt] [habohitron/habohitron](https://github.com/habohitron/habohitron)
- [**20**星][5m] [Py] [guedou/flashre](https://github.com/guedou/flashre) tools to reverse the Toshiba FlashAir SD cards
- [**20**星][8m] [graylog2/graylog-guide-snort](https://github.com/graylog2/graylog-guide-snort) How to send structured Snort IDS alert logs into Graylog
- [**20**星][2y] [C] [gravity-postquantum/prune-horst](https://github.com/gravity-postquantum/prune-horst) Signature scheme submitted to NIST's Post-Quantum Cryptography Project
+- [**20**星][2y] [Jupyter Notebook] [grananqvist/machine-learning-web-application-firewall-and-dataset](https://github.com/grananqvist/machine-learning-web-application-firewall-and-dataset)
- [**20**星][1y] [Py] [gosecure/gophish-cli](https://github.com/gosecure/gophish-cli) Gophish Python cli to perform huge phishing campaigns
- [**20**星][5m] [Py] [gilks/enumerid](https://github.com/gilks/enumerid) Enumerate RIDs using pure Python
- [**20**星][9m] [Rust] [gamozolabs/slime_tree](https://github.com/gamozolabs/slime_tree) Worst Android kernel fuzzer
- [**20**星][2y] [C++] [ez8-co/ezpp](https://github.com/ez8-co/ezpp)
-- [**20**星][14d] [extremecoders-re/re-list](https://github.com/extremecoders-re/re-list) A list of open source reverse engineering tools with a focus on binary analysis
+- [**20**星][16d] [extremecoders-re/re-list](https://github.com/extremecoders-re/re-list) A list of open source reverse engineering tools with a focus on binary analysis
+- [**20**星][3y] [C] [exploit-install/thefatrat](https://github.com/exploit-install/thefatrat) An easy tool to generate backdoor with msfvenom (a part from metasploit framework). This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software protection
+- [**20**星][2y] [Py] [euniceylee/waves](https://github.com/euniceylee/waves) raspberry pi project that visualizes sound waves
- [**20**星][2y] [Py] [erpscanteam/cve-2018-2636](https://github.com/erpscanteam/cve-2018-2636) ERPScan Public POC for CVE-2018-2636
- [**20**星][11m] [WebAssembly] [eosessentials/eos-proxy-token](https://github.com/eosessentials/eos-proxy-token) Proxy token to allow mitigating EOSIO Ram exploit
+- [**20**星][14d] [Ruby] [envato/unwrappr](https://github.com/envato/unwrappr)
- [**20**星][9m] [Py] [enigmatos/fuzzlon](https://github.com/enigmatos/fuzzlon) 802.15.4 Fuzzer
-- [**20**星][5m] [Py] [endgameinc/malware_evasion_competition](https://github.com/endgameinc/malware_evasion_competition)
-- [**20**星][3m] [C] [en14c/erebus](https://github.com/en14c/erebus) Poc for ELF64 runtime infection via GOT poisoning technique by elfmaster
+- [**20**星][4m] [C] [en14c/erebus](https://github.com/en14c/erebus) Poc for ELF64 runtime infection via GOT poisoning technique by elfmaster
- [**20**星][2y] [Py] [embedi/dji-ws-tools](https://github.com/embedi/dji-ws-tools) DJI Assistant 2 web socket server exploitation tools
- [**20**星][1y] [Py] [ekultek/strutter](https://github.com/ekultek/strutter) Proof of Concept for CVE-2018-11776
- [**20**星][1m] [edwardqiu/awesome-infosec](https://github.com/edwardqiu/awesome-infosec) A curated list of awesome infosec blog posts, courses, books and more!
- [**20**星][3y] [TeX] [edelahozuah/awesome-tls-security](https://github.com/edelahozuah/awesome-tls-security) A collection of (not-so, yet) awesome resources related to TLS, PKI and related stuff
- [**20**星][10m] [eddietcc/cvenotes](https://github.com/eddietcc/cvenotes)
- [**20**星][1y] [C] [downwithup/cve-2018-16712](https://github.com/downwithup/cve-2018-16712) PoC Code for CVE-2018-16712 (exploit by MmMapIoSpace)
-- [**20**星][2m] [digitaldisarray/osint-tools](https://github.com/digitaldisarray/osint-tools)
+- [**20**星][3y] [C++] [dinamsky/malware-botnets](https://github.com/dinamsky/malware-botnets)
- [**20**星][5y] [Py] [digitalbond/ibal](https://github.com/digitalbond/ibal) 辅助Bootrom分析
-- [**20**星][1m] [Perl] [dheiland-r7/snmp](https://github.com/dheiland-r7/snmp) SNMP data gather scripts
- [**20**星][9m] [Java] [delicioushorse/writeups](https://github.com/delicioushorse/writeups)
- [**20**星][2y] [deepwn/dn2.io](https://github.com/deepwn/dn2.io) [ Domain Name to I/O ] Development DNS & Security Data Transportation & Pentesting with SCA and Steganography.
-- [**20**星][7d] [C++] [deeponion/deeponion](https://github.com/deeponion/deeponion) Official Source Repo for DeepOnion - Anonymous Cryptocurrency on TOR (based on the latest codebase from litecoin/bitcoin)
-- [**20**星][4y] [Py] [decalage2/oledump-contrib](https://github.com/decalage2/oledump-contrib) The oledump-contrib repository contains plugins and enhancements for the oledump tool published by Didier Stevens.
+- [**20**星][5m] [Py] [dearbytes/opensource-endpoint-monitoring](https://github.com/dearbytes/opensource-endpoint-monitoring) This repository contains all the config files and scripts used for our Open Source Endpoint monitoring project.
- [**20**星][7y] [Ruby] [darkoperator/nessus-bridge-for-metasploit](https://github.com/darkoperator/nessus-bridge-for-metasploit) nessus plugin for metasploit to connect to a nessus server
- [**20**星][3y] [Py] [danilabs/rexploit](https://github.com/danilabs/rexploit) RExploit (Router Exploitation) is a tool that search exploits for any router SOHO. It is written on Python and QT.
- [**20**星][1y] [Py] [danielhenrymantilla/shellcode-factory](https://github.com/danielhenrymantilla/shellcode-factory) Tool to create and test shellcodes from custom assembly sources (with some encoding options)
-- [**20**星][2y] [PowerShell] [danielbohannon/devsec-defense](https://github.com/danielbohannon/devsec-defense) Accompanying PowerShell Modules for DevSec Defense Presentation
+- [**20**星][2y] [PS] [danielbohannon/devsec-defense](https://github.com/danielbohannon/devsec-defense) Accompanying PowerShell Modules for DevSec Defense Presentation
- [**20**星][3y] [C#] [damonmohammadbagher/fakefilemaker](https://github.com/damonmohammadbagher/fakefilemaker) Social Engineering: Simple way to make a fake file for Backdoors
- [**20**星][6y] [Py] [d4rkcat/stackflow](https://github.com/d4rkcat/stackflow) Universal stack-based buffer overfow exploitation tool
- [**20**星][1y] [C++] [d00rt/hijacked_lokibot_version](https://github.com/d00rt/hijacked_lokibot_version)
@@ -16670,33 +18004,34 @@ for CVE details based on the nmap report.
- [**20**星][3y] [JS] [ctf-thanos/ctf-writeups](https://github.com/ctf-thanos/ctf-writeups) A writeup summary for CTF problems.
- [**20**星][7m] [Java] [cryptomator/siv-mode](https://github.com/cryptomator/siv-mode) RFC 5297 SIV mode of operation in Java
- [**20**星][11m] [HTML] [cryptolok/epmg](https://github.com/cryptolok/epmg) EPMG:跨平台、最安全、“不存储密码(storageless)”的密码管理器
+- [**20**星][3d] [Java] [cronn-de/ssh-proxy](https://github.com/cronn-de/ssh-proxy) Pure Java implementation for SSH port tunneling that understands ProxyJump and ProxyCommand
- [**20**星][6m] [Shell] [corb3nik/pwnbox](https://github.com/corb3nik/pwnbox) A VM for RE and Pwn
- [**20**星][2y] [JS] [codedotjs/twifo-cli](https://github.com/codedotjs/twifo-cli)
+- [**20**星][16d] [HTML] [cloudfoundry-incubator/haproxy-boshrelease](https://github.com/cloudfoundry-incubator/haproxy-boshrelease) A BOSH release for haproxy (based on cf-release's haproxy job)
- [**20**星][6m] [Batchfile] [cldrn/insecureprogrammingdb](https://github.com/cldrn/insecureprogrammingdb) Insecure programming functions database
- [**20**星][2y] [Py] [chrisjd20/cve-2017-9805.py](https://github.com/chrisjd20/cve-2017-9805.py) Better Exploit Code For CVE 2017 9805 apache struts
-- [**20**星][19d] [JS] [chef-koch/bypass-adblockers](https://github.com/chef-koch/bypass-adblockers) Malvertising campaign that successfully bypasses ad blockers to deliver their malicious payload
+- [**20**星][1y] [Py] [cbrnrd/netsploit](https://github.com/cbrnrd/netsploit)
- [**20**星][5y] [Py] [catalyst256/watcher](https://github.com/catalyst256/watcher) Maltego with a twist of wireless
- [**20**星][3y] [Go] [c1982/ripego](https://github.com/c1982/ripego) IP Whois Golang Package
- [**20**星][2m] [Py] [brianlam38/sec-cheatsheets](https://github.com/brianlam38/sec-cheatsheets) Cheatsheets on security vulnerabilities and exploits.
- [**20**星][3y] [C] [bnagy/osx-afl-llvm](https://github.com/bnagy/osx-afl-llvm) Barely working LLVM mode for AFL on OSX
- [**20**星][11m] [C] [blacchat/rkorova](https://github.com/blacchat/rkorova) ld_preload userland rootkit
- [**20**星][2y] [C] [bisoon/ps4-api-server](https://github.com/bisoon/ps4-api-server) PS4API server to handle client request for read/write to game memory
+- [**20**星][1m] [Go] [binject/shellcode](https://github.com/binject/shellcode) Shellcode library as a Go package
- [**20**星][5m] [C++] [arsunt/tr2main](https://github.com/arsunt/tr2main) Tomb Raider II Injector Dynamic Library
-- [**20**星][3y] [C++] [arpitn30/nipper-ng](https://github.com/arpitn30/nipper-ng) Automatically exported from code.google.com/p/nipper-ng
- [**20**星][3y] [Py] [arinkverma/google-foobar](https://github.com/arinkverma/google-foobar) Read about google foobar at HackerNews
+- [**20**星][20d] [Smali] [aress31/sci](https://github.com/aress31/sci) Framework designed to automate the process of assembly code injection (trojanising) within Android applications.
- [**20**星][2y] [Py] [arbazkiraak/hackbot](https://github.com/arbazkiraak/hackbot) Telegram Bot (Initial Development)
- [**20**星][3y] [C++] [apriorit/antirootkit-anti-splicer](https://github.com/apriorit/antirootkit-anti-splicer) The project is a demo solution for one of the anti-rootkit techniques aimed on overcoming splicers
-- [**20**星][8d] [Shell] [apache-labor/labor](https://github.com/apache-labor/labor)
- [**20**星][6y] [C++] [antirootkit/bdarkit](https://github.com/antirootkit/bdarkit) just an lite AntiRootkit for interesting
- [**20**星][5y] [C] [android-rooting-tools/libmsm_vfe_read_exploit](https://github.com/android-rooting-tools/libmsm_vfe_read_exploit) CVE-2014-4321 exploit
- [**20**星][3y] [C++] [andrewgaspar/km-stl](https://github.com/andrewgaspar/km-stl) A drop-in replacement for the C++ STL for kernel mode Windows drivers. The goal is to have implementations for things like the standard algorithms that don't require memory allocations or exceptions, and for implementations of type traits and other compile-time related headers. Full implementation of the STL is a non-goal.
- [**20**星][7y] [PHP] [amitnaik/php-backdoor](https://github.com/amitnaik/php-backdoor) This is php backdoor hack to access directory, access to mysql, access to execute shell command
-- [**20**星][4y] [C#] [alphadelta/png-mask](https://github.com/alphadelta/png-mask) PNG Steganography Software
+- [**20**星][1m] [JS] [alcideio/pipeline](https://github.com/alcideio/pipeline) Alcide Kubernetes Advisor ... Cluster Hygiene & Security Scanner - Pipeline Integration
- [**20**星][3y] [C] [a232319779/phantom-3-standard](https://github.com/a232319779/phantom-3-standard) Used hackrf one to sniffer nrf24l0 and so on wireless packet.Application in PHANTOM 3 STANDARD RC signal sniffer.
-- [**20**星][2m] [Py] [7dog7/masscan_to_nmap](https://github.com/7dog7/masscan_to_nmap) 基于masscan和nmap的快速端口扫描和指纹识别工具,优化版本(获取标题,页面长度,过滤防火墙)
- [**20**星][3y] [Py] [73696e65/ctf-notes](https://github.com/73696e65/ctf-notes)
- [**20**星][2y] [Py] [649/netscraped-exploit](https://github.com/649/netscraped-exploit) Framework for obtaining all the credentials stored in vulnerable Netwave IP cameras. Can be used to break into IP cameras, use for research only.
- [**20**星][2y] [HTML] [649/chrome-sandbox-exploit](https://github.com/649/chrome-sandbox-exploit) [Patched] Sandbox escape Chrome exploit. Allows the execution of local binaries, read/write functions and exfiltration of Chrome OAuth tokens to remote server. More info:
- [**20**星][4y] [Py] [0x90/wifuzz](https://github.com/0x90/wifuzz) Automatically exported from code.google.com/p/wifuzz
- [**20**星][3y] [Go] [0x4445565a/portanoia](https://github.com/0x4445565a/portanoia) A tool that sets a honeypot port and runs a command against every IP that connects to it.
-- [**20**星][10d] [Py] [0x25/useful](https://github.com/0x25/useful) useful pentest note
\ No newline at end of file
+- [**20**星][7d] [Py] [0x25/useful](https://github.com/0x25/useful) useful pentest note
\ No newline at end of file
diff --git a/Readme_full_en.md b/Readme_full_en.md
index 5ce334e..47d02c6 100644
--- a/Readme_full_en.md
+++ b/Readme_full_en.md
@@ -3,924 +3,995 @@
- Because Github can not show all lines, this page only show the first 1000 tools sorted by star count. [Read Full Version Here](https://github.com/alphaSeclab/sec-tool-list/blob/master/Readme_full_en.md)
# Tool List
-- [**34521**Star][14d] [C++] [x64dbg/x64dbg](https://github.com/x64dbg/x64dbg) An open-source x64/x32 debugger for windows.
-- [**33781**Star][8d] [Py] [minimaxir/big-list-of-naughty-strings](https://github.com/minimaxir/big-list-of-naughty-strings) The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.
-- [**32724**Star][2m] [hack-with-github/awesome-hacking](https://github.com/hack-with-github/awesome-hacking) A collection of various awesome lists for hackers, pentesters and security researchers
-- [**30396**Star][12d] [Go] [fatedier/frp](https://github.com/fatedier/frp) A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.
-- [**25942**Star][7d] [Py] [certbot/certbot](https://github.com/certbot/certbot) Certbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any other CA that uses the ACME protocol.
-- [**25522**Star][26d] [Swift] [shadowsocks/shadowsocksx-ng](https://github.com/shadowsocks/shadowsocksx-ng) Next Generation of ShadowsocksX
-- [**25087**Star][13d] [Go] [v2ray/v2ray-core](https://github.com/v2ray/v2ray-core) A platform for building proxies to bypass network restrictions.
-- [**24589**Star][7d] [trimstray/the-book-of-secret-knowledge](https://github.com/trimstray/the-book-of-secret-knowledge) A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.
-- [**22517**Star][12d] [Shell] [mathiasbynens/dotfiles](https://github.com/mathiasbynens/dotfiles)
-- [**21751**Star][7d] [PHP] [danielmiessler/seclists](https://github.com/danielmiessler/seclists) SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
-- [**21668**Star][10d] [Go] [filosottile/mkcert](https://github.com/filosottile/mkcert) A simple zero-config tool to make locally trusted development certificates with any names you'd like.
-- [**20619**Star][9d] [Java] [skylot/jadx](https://github.com/skylot/jadx) Dex to Java decompiler
-- [**20089**Star][2m] [Shell] [streisandeffect/streisand](https://github.com/StreisandEffect/streisand) Streisand sets up a new server running your choice of WireGuard, OpenConnect, OpenSSH, OpenVPN, Shadowsocks, sslh, Stunnel, or a Tor bridge. It also generates custom instructions for all of these services. At the end of the run you are given an HTML file with instructions that can be shared with friends, family members, and fellow activists.
-- [**19651**Star][2m] [Jupyter Notebook] [camdavidsonpilon/probabilistic-programming-and-bayesian-methods-for-hackers](https://github.com/camdavidsonpilon/probabilistic-programming-and-bayesian-methods-for-hackers) aka "Bayesian Methods for Hackers": An introduction to Bayesian methods + probabilistic programming with a computation/understanding-first, mathematics-second point of view. All in pure Python ;)
-- [**18996**Star][7d] [Ruby] [rapid7/metasploit-framework](https://github.com/rapid7/metasploit-framework) Metasploit Framework
-- [**18648**Star][3y] [fallibleinc/security-guide-for-developers](https://github.com/fallibleinc/security-guide-for-developers) Security Guide for Developers (实用性开发人员安全须知)
-- [**18381**Star][7d] [Java] [nationalsecurityagency/ghidra](https://github.com/nationalsecurityagency/ghidra) Ghidra is a software reverse engineering (SRE) framework
-- [**18220**Star][8d] [Java] [alibaba/arthas](https://github.com/alibaba/arthas) Alibaba Java Diagnostic Tool Arthas
-- [**17555**Star][4y] [Go] [inconshreveable/ngrok](https://github.com/inconshreveable/ngrok) Introspected tunnels to localhost
-- [**16951**Star][14d] [Py] [mitmproxy/mitmproxy](https://github.com/mitmproxy/mitmproxy) An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
-- [**16681**Star][7d] [C#] [powershell/powershell](https://github.com/powershell/powershell) PowerShell for every system!
-- [**15756**Star][8d] [Py] [sqlmapproject/sqlmap](https://github.com/sqlmapproject/sqlmap) Automatic SQL injection and database takeover tool
-- [**15694**Star][9m] [micropoor/micro8](https://github.com/micropoor/micro8) Gitbook
-- [**15627**Star][7d] [C] [curl/curl](https://github.com/curl/curl) A command line tool and library for transferring data with URL syntax, supporting HTTP, HTTPS, FTP, FTPS, GOPHER, TFTP, SCP, SFTP, SMB, TELNET, DICT, LDAP, LDAPS, FILE, IMAP, SMTP, POP3, RTSP and RTMP. libcurl offers a myriad of powerful features
-- [**14661**Star][1m] [gfwlist/gfwlist](https://github.com/gfwlist/gfwlist) gfwlist
-- [**14478**Star][26d] [Java] [tencent/tinker](https://github.com/tencent/tinker) Tinker is a hot-fix solution library for Android, it supports dex, library and resources update without reinstall apk.
-- [**13627**Star][9m] [JS] [bannedbook/fanqiang](https://github.com/bannedbook/fanqiang) 翻墙-科学上网
-- [**13183**Star][26d] [Py] [corentinj/real-time-voice-cloning](https://github.com/corentinj/real-time-voice-cloning) Clone a voice in 5 seconds to generate arbitrary speech in real-time
-- [**13081**Star][17d] [Go] [jesseduffield/lazydocker](https://github.com/jesseduffield/lazydocker) The lazier way to manage everything docker
-- [**12920**Star][10d] [Py] [cool-rr/pysnooper](https://github.com/cool-rr/pysnooper) Never use print for debugging again
-- [**12641**Star][9d] [C] [shadowsocks/shadowsocks-libev](https://github.com/shadowsocks/shadowsocks-libev) libev port of shadowsocks
-- [**12453**Star][7d] [C#] [0xd4d/dnspy](https://github.com/0xd4d/dnspy) .NET debugger and assembly editor
-- [**12203**Star][14d] [Java] [signalapp/signal-android](https://github.com/signalapp/Signal-Android) A private messenger for Android.
-- [**11935**Star][1m] [Go] [buger/goreplay](https://github.com/buger/goreplay) capturing and replaying live HTTP traffic into a test environment in order to continuously test your system with real data. It can be used to increase confidence in code deployments, configuration changes and infrastructure changes.
-- [**11829**Star][17d] [C] [openssl/openssl](https://github.com/openssl/openssl) TLS/SSL and crypto library
-- [**11490**Star][7d] [C] [radareorg/radare2](https://github.com/radareorg/radare2) unix-like reverse engineering framework and commandline tools
-- [**11361**Star][3m] [C] [robertdavidgraham/masscan](https://github.com/robertdavidgraham/masscan) TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.
-- [**11246**Star][1m] [facert/awesome-spider](https://github.com/facert/awesome-spider) 爬虫集合
-- [**11225**Star][13d] [getlantern/download](https://github.com/getlantern/download) Lantern官方版本下载 蓝灯 翻墙 科学上网 外网 加速器 梯子 路由
-- [**11174**Star][7d] [Java] [oracle/graal](https://github.com/oracle/graal) Run Programs Faster Anywhere
-- [**11106**Star][2m] [Jupyter Notebook] [selfteaching/the-craft-of-selfteaching](https://github.com/selfteaching/the-craft-of-selfteaching) One has no future if one couldn't teach themself.
-- [**11047**Star][7d] [Py] [swisskyrepo/payloadsallthethings](https://github.com/swisskyrepo/payloadsallthethings) A list of useful payloads and bypass for Web Application Security and Pentest/CTF
-- [**11013**Star][2y] [Objective-C] [bang590/jspatch](https://github.com/bang590/jspatch) JSPatch bridge Objective-C and Javascript using the Objective-C runtime. You can call any Objective-C class and method in JavaScript by just including a small engine. JSPatch is generally used to hotfix iOS App.
-- [**11008**Star][8d] [Py] [owasp/cheatsheetseries](https://github.com/owasp/cheatsheetseries) The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
-- [**10902**Star][12d] [Objective-C] [flipboard/flex](https://github.com/flipboard/flex) An in-app debugging and exploration tool for iOS
-- [**10886**Star][2m] [CSS] [hacker0x01/hacker101](https://github.com/hacker0x01/hacker101) Hacker101
-- [**10761**Star][2y] [CoffeeScript] [dropbox/zxcvbn](https://github.com/dropbox/zxcvbn) Low-Budget Password Strength Estimation
-- [**10742**Star][13d] [enaqx/awesome-pentest](https://github.com/enaqx/awesome-pentest) A collection of awesome penetration testing resources, tools and other shiny things
-- [**10738**Star][17d] [Java] [konloch/bytecode-viewer](https://github.com/konloch/bytecode-viewer) A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)
-- [**10107**Star][8d] [Go] [goharbor/harbor](https://github.com/goharbor/harbor) An open source trusted cloud native registry project that stores, signs, and scans content.
-- [**9844**Star][11d] [ruanyf/weekly](https://github.com/ruanyf/weekly) 科技爱好者周刊,每周五发布
-- [**9804**Star][8m] [imthenachoman/how-to-secure-a-linux-server](https://github.com/imthenachoman/how-to-secure-a-linux-server) An evolving how-to guide for securing a Linux server.
-- [**9349**Star][12d] [Ruby] [postalhq/postal](https://github.com/postalhq/postal) complete and fully featured mail server for use by websites & web servers
-- [**9229**Star][3m] [JS] [localtunnel/localtunnel](https://github.com/localtunnel/localtunnel) expose yourself
-- [**9182**Star][8d] [Go] [cnlh/nps](https://github.com/cnlh/nps) 一款轻量级、功能强大的内网穿透代理服务器。支持tcp、udp流量转发,支持内网http代理、内网socks5代理,同时支持snappy压缩、站点保护、加密传输、多路复用、header修改等。支持web图形化管理,集成多用户模式。
-- [**9178**Star][10d] [Java] [ibotpeaches/apktool](https://github.com/ibotpeaches/apktool) A tool for reverse engineering Android apk files
-- [**9141**Star][8d] [C#] [icsharpcode/ilspy](https://github.com/icsharpcode/ilspy) .NET Decompiler
-- [**9064**Star][27d] [JS] [valve/fingerprintjs2](https://github.com/valve/fingerprintjs2) Modern & flexible browser fingerprinting library
-- [**9003**Star][9d] [PowerShell] [lukesampson/scoop](https://github.com/lukesampson/scoop) A command-line installer for Windows.
-- [**8995**Star][2m] [vitalysim/awesome-hacking-resources](https://github.com/vitalysim/awesome-hacking-resources) A collection of hacking / penetration testing resources to make you better!
-- [**8988**Star][9d] [Py] [sherlock-project/sherlock](https://github.com/sherlock-project/sherlock) Find Usernames Across Social Networks
-- [**8847**Star][6m] [Go] [rkt/rkt](https://github.com/rkt/rkt) rkt is a pod-native container engine for Linux. It is composable, secure, and built on standards.
-- [**8712**Star][15d] [C] [gentilkiwi/mimikatz](https://github.com/gentilkiwi/mimikatz) A little tool to play with Windows security
-- [**8597**Star][26d] [Java] [android-hacker/virtualxposed](https://github.com/android-hacker/virtualxposed) A simple app to use Xposed without root, unlock the bootloader or modify system image, etc.
-- [**8495**Star][1m] [microsoft/wsl](https://github.com/microsoft/WSL) Issues found on WSL
-- [**8408**Star][2y] [brannondorsey/wifi-cracking](https://github.com/brannondorsey/wifi-cracking) Crack WPA/WPA2 Wi-Fi Routers with Airodump-ng and Aircrack-ng/Hashcat
-- [**8399**Star][27d] [Py] [wifiphisher/wifiphisher](https://github.com/wifiphisher/wifiphisher) 流氓AP框架, 用于RedTeam和Wi-Fi安全测试
-- [**8033**Star][7d] [trimstray/the-practical-linux-hardening-guide](https://github.com/trimstray/the-practical-linux-hardening-guide) This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).
-- [**7992**Star][2m] [Py] [facebook/chisel](https://github.com/facebook/chisel) Chisel is a collection of LLDB commands to assist debugging iOS apps.
-- [**7952**Star][3y] [Go] [cyfdecyf/cow](https://github.com/cyfdecyf/cow) HTTP proxy written in Go. COW can automatically identify blocked sites and use parent proxies to access.
-- [**7936**Star][4y] [Objective-C] [shadowsocks/shadowsocks-ios](https://github.com/shadowsocks/shadowsocks-ios) Removed according to regulations.
-- [**7806**Star][3m] [C++] [shiqiyu/libfacedetection](https://github.com/shiqiyu/libfacedetection) An open source library for face detection in images. The face detection speed can reach 1500FPS.
-- [**7696**Star][7d] [JS] [gchq/cyberchef](https://github.com/gchq/cyberchef) The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis
-- [**7685**Star][7d] [Go] [git-lfs/git-lfs](https://github.com/git-lfs/git-lfs) Git extension for versioning large files
-- [**7628**Star][22d] [Java] [java-decompiler/jd-gui](https://github.com/java-decompiler/jd-gui) A standalone Java Decompiler GUI
-- [**7498**Star][27d] [Py] [threat9/routersploit](https://github.com/threat9/routersploit) Exploitation Framework for Embedded Devices
-- [**7371**Star][12d] [Go] [snail007/goproxy](https://github.com/snail007/goproxy) Proxy是高性能全功能的http代理、https代理、socks5代理、内网穿透、内网穿透p2p、内网穿透代理、内网穿透反向代理、内网穿透服务器、Websocket代理、TCP代理、UDP代理、DNS代理、DNS加密代理,代理API认证,全能跨平台代理服务器。
-- [**7365**Star][1m] [Py] [s0md3v/xsstrike](https://github.com/s0md3v/XSStrike) Most advanced XSS scanner.
-- [**7205**Star][17d] [Java] [lionsoul2014/ip2region](https://github.com/lionsoul2014/ip2region) Ip2region is a offline IP location library with accuracy rate of 99.9% and 0.0x millseconds searching performance. DB file is less then 5Mb with all ip address stored. binding for Java,PHP,C,Python,Nodejs,Golang,C#,lua. Binary,B-tree,Memory searching algorithm
-- [**7174**Star][7m] [Shell] [teddysun/shadowsocks_install](https://github.com/teddysun/shadowsocks_install) Auto Install Shadowsocks Server for CentOS/Debian/Ubuntu
-- [**6994**Star][14d] [Go] [future-architect/vuls](https://github.com/future-architect/vuls) Agent-less vulnerability scanner for Linux, FreeBSD, Container Image, Running Container, WordPress, Programming language libraries, Network devices
-- [**6968**Star][2m] [JS] [cs01/gdbgui](https://github.com/cs01/gdbgui) Browser-based frontend to gdb (gnu debugger). Add breakpoints, view the stack, visualize data structures, and more in C, C++, Go, Rust, and Fortran. Run gdbgui from the terminal and a new tab will open in your browser.
-- [**6956**Star][10d] [C] [hashcat/hashcat](https://github.com/hashcat/hashcat) World's fastest and most advanced password recovery utility
-- [**6954**Star][13d] [Go] [nats-io/nats-server](https://github.com/nats-io/nats-server) High-Performance server for NATS, the cloud native messaging system.
-- [**6950**Star][9d] [greatfire/wiki](https://github.com/greatfire/wiki) 自由浏览
-- [**6917**Star][3m] [Java] [pxb1988/dex2jar](https://github.com/pxb1988/dex2jar) Tools to work with android .dex and java .class files
-- [**6844**Star][2m] [Go] [sqshq/sampler](https://github.com/sqshq/sampler) A tool for shell commands execution, visualization and alerting. Configured with a simple YAML file.
-- [**6788**Star][17d] [Shell] [awslabs/git-secrets](https://github.com/awslabs/git-secrets) Prevents you from committing secrets and credentials into git repositories
-- [**6708**Star][9m] [Java] [amitshekhariitbhu/android-debug-database](https://github.com/amitshekhariitbhu/android-debug-database) A library for debugging android databases and shared preferences - Make Debugging Great Again
-- [**6678**Star][3y] [C++] [alibaba/andfix](https://github.com/alibaba/andfix) AndFix is a library that offer hot-fix for Android App.
-- [**6639**Star][9d] [Java] [zaproxy/zaproxy](https://github.com/zaproxy/zaproxy) The OWASP ZAP core project
-- [**6557**Star][11d] [Py] [networkx/networkx](https://github.com/networkx/networkx) Official NetworkX source code repository.
-- [**6455**Star][1m] [Py] [h2y/shadowrocket-adblock-rules](https://github.com/h2y/shadowrocket-adblock-rules) 提供多款 Shadowrocket 规则,带广告过滤功能。用于 iOS 未越狱设备选择性地自动翻墙。
-- [**6449**Star][11d] [Shell] [cisofy/lynis](https://github.com/cisofy/lynis) Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
-- [**6440**Star][9m] [HTML] [open-power-workgroup/hospital](https://github.com/open-power-workgroup/hospital) OpenPower工作组收集汇总的医院开放数据
-- [**6413**Star][15d] [Go] [bettercap/bettercap](https://github.com/bettercap/bettercap) The Swiss Army knife for 802.11, BLE and Ethernet networks reconnaissance and MITM attacks.
-- [**6284**Star][27d] [Py] [seatgeek/fuzzywuzzy](https://github.com/seatgeek/fuzzywuzzy) Fuzzy String Matching in Python
-- [**6182**Star][2m] [Py] [yandex/gixy](https://github.com/yandex/gixy) Nginx configuration static analyzer
-- [**6170**Star][6m] [rmerl/asuswrt-merlin](https://github.com/rmerl/asuswrt-merlin) Enhanced version of Asus's router firmware (Asuswrt) (legacy code base)
-- [**6158**Star][3y] [PowerShell] [powershellmafia/powersploit](https://github.com/PowerShellMafia/PowerSploit) PowerSploit - A PowerShell Post-Exploitation Framework
-- [**6130**Star][1y] [Hack] [facebook/fbctf](https://github.com/facebook/fbctf) Platform to host Capture the Flag competitions
-- [**6124**Star][9m] [Py] [schollz/howmanypeoplearearound](https://github.com/schollz/howmanypeoplearearound) Count the number of people around you
-- [**6100**Star][7d] [JS] [avwo/whistle](https://github.com/avwo/whistle) HTTP, HTTP2, HTTPS, Websocket debugging proxy
-- [**6061**Star][2y] [C] [jgamblin/mirai-source-code](https://github.com/jgamblin/mirai-source-code) Leaked Mirai Source Code for Research/IoC Development Purposes
-- [**6025**Star][14d] [Go] [quay/clair](https://github.com/quay/clair) Vulnerability Static Analysis for Containers
-- [**6025**Star][14d] [Go] [quay/clair](https://github.com/quay/clair) Vulnerability Static Analysis for Containers
-- [**6002**Star][11d] [Py] [cyrus-and/gdb-dashboard](https://github.com/cyrus-and/gdb-dashboard) Modular visual interface for GDB in Python
-- [**5996**Star][20d] [berzerk0/probable-wordlists](https://github.com/berzerk0/probable-wordlists) Version 2 is live! Wordlists sorted by probability originally created for password generation and testing - make sure your passwords aren't popular!
-- [**5948**Star][2m] [Java] [google/android-classyshark](https://github.com/google/android-classyshark) Analyze any Android/Java based app or game
-- [**5935**Star][29d] [Py] [gallopsled/pwntools](https://github.com/gallopsled/pwntools) CTF framework and exploit development library
-- [**5870**Star][6m] [JS] [haotian-wang/google-access-helper](https://github.com/haotian-wang/google-access-helper) 谷歌访问助手破解版
-- [**5850**Star][8d] [C++] [radareorg/cutter](https://github.com/radareorg/cutter) Reverse Engineering Platform powered by radare2
-- [**5845**Star][2m] [Gnuplot] [nasa-jpl/open-source-rover](https://github.com/nasa-jpl/open-source-rover) A build-it-yourself, 6-wheel rover based on the rovers on Mars!
-- [**5811**Star][7m] [JS] [sindresorhus/fkill-cli](https://github.com/sindresorhus/fkill-cli) Fabulously kill processes. Cross-platform.
-- [**5764**Star][3m] [Objective-C] [square/ponydebugger](https://github.com/square/ponydebugger) Remote network and data debugging for your native iOS app using Chrome Developer Tools
-- [**5738**Star][1y] [qinyuhang/shadowsocksx-ng-r](https://github.com/qinyuhang/shadowsocksx-ng-r) Next Generation of ShadowsocksX
-- [**5738**Star][2y] [Py] [newsapps/beeswithmachineguns](https://github.com/newsapps/beeswithmachineguns) A utility for arming (creating) many bees (micro EC2 instances) to attack (load test) targets (web applications).
-- [**5719**Star][2m] [C] [spacehuhn/esp8266_deauther](https://github.com/spacehuhn/esp8266_deauther) Cheap WiFi hacks
-- [**5715**Star][8m] [C] [xoreaxeaxeax/movfuscator](https://github.com/xoreaxeaxeax/movfuscator) The single instruction C compiler
-- [**5674**Star][22d] [JS] [swagger-api/swagger-editor](https://github.com/swagger-api/swagger-editor) Swagger Editor
-- [**5653**Star][16d] [Go] [casbin/casbin](https://github.com/casbin/casbin) An authorization library that supports access control models like ACL, RBAC, ABAC in Golang
-- [**5605**Star][1m] [C] [rofl0r/proxychains-ng](https://github.com/rofl0r/proxychains-ng) proxychains ng (new generation) - a preloader which hooks calls to sockets in dynamically linked programs and redirects it through one or more socks/http proxies. continuation of the unmaintained proxychains project. the sf.net page is currently not updated, use releases from github release page instead.
-- [**5578**Star][8d] [Ruby] [presidentbeef/brakeman](https://github.com/presidentbeef/brakeman) A static analysis security vulnerability scanner for Ruby on Rails applications
-- [**5521**Star][18d] [rshipp/awesome-malware-analysis](https://github.com/rshipp/awesome-malware-analysis) A curated list of awesome malware analysis tools and resources.
-- [**5517**Star][27d] [Roff] [max2max/freess](https://github.com/max2max/freess) 免费ss账号 免费shadowsocks账号 免费v2ray账号 (长期更新)
-- [**5456**Star][8m] [carpedm20/awesome-hacking](https://github.com/carpedm20/awesome-hacking) A curated list of awesome Hacking tutorials, tools and resources
-- [**5417**Star][2y] [Rust] [autumnai/leaf](https://github.com/autumnai/leaf) Open Machine Intelligence Framework for Hackers. (GPU/CPU)
-- [**5392**Star][2m] [Py] [axi0mx/ipwndfu](https://github.com/axi0mx/ipwndfu) open-source jailbreaking tool for many iOS devices
-- [**5353**Star][5m] [C] [pwn20wndstuff/undecimus](https://github.com/pwn20wndstuff/undecimus) unc0ver jailbreak for iOS 11.0 - 12.4
-- [**5317**Star][7d] [Py] [mlflow/mlflow](https://github.com/mlflow/mlflow) Open source platform for the machine learning lifecycle
-- [**5307**Star][9d] [Go] [zricethezav/gitleaks](https://github.com/zricethezav/gitleaks) Audit git repos for secrets
-- [**5207**Star][7m] [Py] [usarmyresearchlab/dshell](https://github.com/usarmyresearchlab/dshell) Dshell is a network forensic analysis framework.
-- [**5165**Star][1m] [Py] [refirmlabs/binwalk](https://github.com/ReFirmLabs/binwalk) a fast, easy to use tool for analyzing, reverse engineering, and extracting firmware images.
+- [**45523**Star][11d] [C#] [shadowsocks/shadowsocks-windows](https://github.com/shadowsocks/shadowsocks-windows) If you want to keep a secret, you must also hide it from yourself.
+- [**34554**Star][16d] [C++] [x64dbg/x64dbg](https://github.com/x64dbg/x64dbg) An open-source x64/x32 debugger for windows.
+- [**33926**Star][10d] [Py] [minimaxir/big-list-of-naughty-strings](https://github.com/minimaxir/big-list-of-naughty-strings) The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.
+- [**32844**Star][2m] [hack-with-github/awesome-hacking](https://github.com/hack-with-github/awesome-hacking) A collection of various awesome lists for hackers, pentesters and security researchers
+- [**32022**Star][4y] [Py] [shadowsocks/shadowsocks](https://github.com/shadowsocks/shadowsocks)
+- [**30689**Star][14d] [Go] [fatedier/frp](https://github.com/fatedier/frp) A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.
+- [**27836**Star][2d] [Kotlin] [shadowsocks/shadowsocks-android](https://github.com/shadowsocks/shadowsocks-android) A shadowsocks client for Android
+- [**25977**Star][2d] [Py] [certbot/certbot](https://github.com/certbot/certbot) Certbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any other CA that uses the ACME protocol.
+- [**25643**Star][28d] [Swift] [shadowsocks/shadowsocksx-ng](https://github.com/shadowsocks/shadowsocksx-ng) Next Generation of ShadowsocksX
+- [**25330**Star][3d] [Go] [v2ray/v2ray-core](https://github.com/v2ray/v2ray-core) A platform for building proxies to bypass network restrictions.
+- [**24826**Star][2d] [xitu/gold-miner](https://github.com/xitu/gold-miner)
+- [**24727**Star][5d] [trimstray/the-book-of-secret-knowledge](https://github.com/trimstray/the-book-of-secret-knowledge) A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.
+- [**22556**Star][14d] [Shell] [mathiasbynens/dotfiles](https://github.com/mathiasbynens/dotfiles)
+- [**21874**Star][9d] [PHP] [danielmiessler/seclists](https://github.com/danielmiessler/seclists) SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
+- [**21778**Star][12d] [Go] [filosottile/mkcert](https://github.com/filosottile/mkcert) A simple zero-config tool to make locally trusted development certificates with any names you'd like.
+- [**20680**Star][5d] [Java] [skylot/jadx](https://github.com/skylot/jadx) Dex to Java decompiler
+- [**20159**Star][5d] [Shell] [streisandeffect/streisand](https://github.com/StreisandEffect/streisand) Streisand sets up a new server running your choice of WireGuard, OpenConnect, OpenSSH, OpenVPN, Shadowsocks, sslh, Stunnel, or a Tor bridge. It also generates custom instructions for all of these services. At the end of the run you are given an HTML file with instructions that can be shared with friends, family members, and fellow activists.
+- [**19692**Star][2m] [Jupyter Notebook] [camdavidsonpilon/probabilistic-programming-and-bayesian-methods-for-hackers](https://github.com/camdavidsonpilon/probabilistic-programming-and-bayesian-methods-for-hackers) aka "Bayesian Methods for Hackers": An introduction to Bayesian methods + probabilistic programming with a computation/understanding-first, mathematics-second point of view. All in pure Python ;)
+- [**19212**Star][1y] [alvin9999/new-pac](https://github.com/alvin9999/new-pac) 科学/自由上网,免费ss/ssr/v2ray/goflyway账号,搭建教程
+- [**19076**Star][2d] [Ruby] [rapid7/metasploit-framework](https://github.com/rapid7/metasploit-framework) Metasploit Framework
+- [**18676**Star][3y] [fallibleinc/security-guide-for-developers](https://github.com/fallibleinc/security-guide-for-developers) Security Guide for Developers (实用性开发人员安全须知)
+- [**18476**Star][2d] [Java] [nationalsecurityagency/ghidra](https://github.com/nationalsecurityagency/ghidra) Ghidra is a software reverse engineering (SRE) framework
+- [**18390**Star][3d] [Java] [alibaba/arthas](https://github.com/alibaba/arthas) Alibaba Java Diagnostic Tool Arthas
+- [**17641**Star][4y] [Go] [inconshreveable/ngrok](https://github.com/inconshreveable/ngrok) Introspected tunnels to localhost
+- [**17069**Star][6d] [Py] [mitmproxy/mitmproxy](https://github.com/mitmproxy/mitmproxy) An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
+- [**16769**Star][2d] [C#] [powershell/powershell](https://github.com/powershell/powershell) PowerShell for every system!
+- [**15824**Star][2d] [Py] [sqlmapproject/sqlmap](https://github.com/sqlmapproject/sqlmap) Automatic SQL injection and database takeover tool
+- [**15731**Star][9m] [micropoor/micro8](https://github.com/micropoor/micro8) Gitbook
+- [**15718**Star][3d] [C] [curl/curl](https://github.com/curl/curl) A command line tool and library for transferring data with URL syntax, supporting HTTP, HTTPS, FTP, FTPS, GOPHER, TFTP, SCP, SFTP, SMB, TELNET, DICT, LDAP, LDAPS, FILE, IMAP, SMTP, POP3, RTSP and RTMP. libcurl offers a myriad of powerful features
+- [**15363**Star][21d] [Py] [drduh/macos-security-and-privacy-guide](https://github.com/drduh/macOS-Security-and-Privacy-Guide) Guide to securing and improving privacy on macOS
+- [**14744**Star][1m] [gfwlist/gfwlist](https://github.com/gfwlist/gfwlist) gfwlist
+- [**14518**Star][7d] [Java] [tencent/tinker](https://github.com/tencent/tinker) Tinker is a hot-fix solution library for Android, it supports dex, library and resources update without reinstall apk.
+- [**13736**Star][9m] [JS] [bannedbook/fanqiang](https://github.com/bannedbook/fanqiang) 翻墙-科学上网
+- [**13548**Star][28d] [Py] [corentinj/real-time-voice-cloning](https://github.com/corentinj/real-time-voice-cloning) Clone a voice in 5 seconds to generate arbitrary speech in real-time
+- [**13241**Star][19d] [Go] [jesseduffield/lazydocker](https://github.com/jesseduffield/lazydocker) The lazier way to manage everything docker
+- [**12966**Star][12d] [Py] [cool-rr/pysnooper](https://github.com/cool-rr/pysnooper) Never use print for debugging again
+- [**12742**Star][3d] [Vue] [liyasthomas/postwoman](https://github.com/liyasthomas/postwoman)
+- [**12693**Star][8d] [C] [shadowsocks/shadowsocks-libev](https://github.com/shadowsocks/shadowsocks-libev) libev port of shadowsocks
+- [**12544**Star][9d] [C#] [0xd4d/dnspy](https://github.com/0xd4d/dnspy) .NET debugger and assembly editor
+- [**12325**Star][2m] [Ruby] [diaspora/diaspora](https://github.com/diaspora/diaspora) A privacy-aware, distributed, open source social network.
+- [**12241**Star][5d] [Java] [signalapp/signal-android](https://github.com/signalapp/Signal-Android) A private messenger for Android.
+- [**11977**Star][1m] [Go] [buger/goreplay](https://github.com/buger/goreplay) capturing and replaying live HTTP traffic into a test environment in order to continuously test your system with real data. It can be used to increase confidence in code deployments, configuration changes and infrastructure changes.
+- [**11890**Star][6d] [C] [openssl/openssl](https://github.com/openssl/openssl) TLS/SSL and crypto library
+- [**11530**Star][2d] [C] [radareorg/radare2](https://github.com/radareorg/radare2) unix-like reverse engineering framework and commandline tools
+- [**11418**Star][3m] [C] [robertdavidgraham/masscan](https://github.com/robertdavidgraham/masscan) TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.
+- [**11404**Star][2d] [getlantern/download](https://github.com/getlantern/download) Lantern官方版本下载 蓝灯 翻墙 科学上网 外网 加速器 梯子 路由
+- [**11342**Star][1m] [facert/awesome-spider](https://github.com/facert/awesome-spider) 爬虫集合
+- [**11278**Star][2d] [Java] [oracle/graal](https://github.com/oracle/graal) Run Programs Faster Anywhere
+- [**11200**Star][5d] [Py] [swisskyrepo/payloadsallthethings](https://github.com/swisskyrepo/payloadsallthethings) A list of useful payloads and bypass for Web Application Security and Pentest/CTF
+- [**11143**Star][2m] [Jupyter Notebook] [selfteaching/the-craft-of-selfteaching](https://github.com/selfteaching/the-craft-of-selfteaching) One has no future if one couldn't teach themself.
+- [**11110**Star][5d] [Py] [owasp/cheatsheetseries](https://github.com/owasp/cheatsheetseries) The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
+- [**11016**Star][2y] [ObjC] [bang590/jspatch](https://github.com/bang590/jspatch) JSPatch bridge Objective-C and Javascript using the Objective-C runtime. You can call any Objective-C class and method in JavaScript by just including a small engine. JSPatch is generally used to hotfix iOS App.
+- [**10925**Star][2d] [ObjC] [flipboard/flex](https://github.com/flipboard/flex) An in-app debugging and exploration tool for iOS
+- [**10907**Star][2m] [CSS] [hacker0x01/hacker101](https://github.com/hacker0x01/hacker101) Hacker101
+- [**10830**Star][15d] [enaqx/awesome-pentest](https://github.com/enaqx/awesome-pentest) A collection of awesome penetration testing resources, tools and other shiny things
+- [**10780**Star][2y] [CoffeeScript] [dropbox/zxcvbn](https://github.com/dropbox/zxcvbn) Low-Budget Password Strength Estimation
+- [**10757**Star][19d] [Java] [konloch/bytecode-viewer](https://github.com/konloch/bytecode-viewer) A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)
+- [**10318**Star][5d] [ruanyf/weekly](https://github.com/ruanyf/weekly) 科技爱好者周刊,每周五发布
+- [**10226**Star][3d] [Go] [goharbor/harbor](https://github.com/goharbor/harbor) An open source trusted cloud native registry project that stores, signs, and scans content.
+- [**9830**Star][8m] [imthenachoman/how-to-secure-a-linux-server](https://github.com/imthenachoman/how-to-secure-a-linux-server) An evolving how-to guide for securing a Linux server.
+- [**9613**Star][4d] [Py] [sherlock-project/sherlock](https://github.com/sherlock-project/sherlock) Find Usernames Across Social Networks
+- [**9389**Star][3d] [Go] [cnlh/nps](https://github.com/cnlh/nps) 一款轻量级、功能强大的内网穿透代理服务器。支持tcp、udp流量转发,支持内网http代理、内网socks5代理,同时支持snappy压缩、站点保护、加密传输、多路复用、header修改等。支持web图形化管理,集成多用户模式。
+- [**9358**Star][6d] [Ruby] [postalhq/postal](https://github.com/postalhq/postal) complete and fully featured mail server for use by websites & web servers
+- [**9266**Star][3m] [JS] [localtunnel/localtunnel](https://github.com/localtunnel/localtunnel) expose yourself
+- [**9229**Star][12d] [Java] [ibotpeaches/apktool](https://github.com/ibotpeaches/apktool) A tool for reverse engineering Android apk files
+- [**9185**Star][2d] [C#] [icsharpcode/ilspy](https://github.com/icsharpcode/ilspy) .NET Decompiler
+- [**9148**Star][29d] [JS] [valve/fingerprintjs2](https://github.com/valve/fingerprintjs2) Modern & flexible browser fingerprinting library
+- [**9069**Star][11d] [PS] [lukesampson/scoop](https://github.com/lukesampson/scoop) A command-line installer for Windows.
+- [**9015**Star][2m] [vitalysim/awesome-hacking-resources](https://github.com/vitalysim/awesome-hacking-resources) A collection of hacking / penetration testing resources to make you better!
+- [**8854**Star][6m] [Go] [rkt/rkt](https://github.com/rkt/rkt) rkt is a pod-native container engine for Linux. It is composable, secure, and built on standards.
+- [**8739**Star][17d] [C] [gentilkiwi/mimikatz](https://github.com/gentilkiwi/mimikatz) A little tool to play with Windows security
+- [**8646**Star][28d] [Java] [android-hacker/virtualxposed](https://github.com/android-hacker/virtualxposed) A simple app to use Xposed without root, unlock the bootloader or modify system image, etc.
+- [**8525**Star][1m] [microsoft/wsl](https://github.com/microsoft/WSL) Issues found on WSL
+- [**8443**Star][7m] [Shell] [233boy/v2ray](https://github.com/233boy/v2ray) 最好用的 V2Ray 一键安装脚本 & 管理脚本
+- [**8424**Star][2d] [Py] [wifiphisher/wifiphisher](https://github.com/wifiphisher/wifiphisher) 流氓AP框架, 用于RedTeam和Wi-Fi安全测试
+- [**8420**Star][2y] [brannondorsey/wifi-cracking](https://github.com/brannondorsey/wifi-cracking) Crack WPA/WPA2 Wi-Fi Routers with Airodump-ng and Aircrack-ng/Hashcat
+- [**8044**Star][9d] [trimstray/the-practical-linux-hardening-guide](https://github.com/trimstray/the-practical-linux-hardening-guide) This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).
+- [**8002**Star][2m] [Py] [facebook/chisel](https://github.com/facebook/chisel) Chisel is a collection of LLDB commands to assist debugging iOS apps.
+- [**7986**Star][1m] [Py] [mailpile/mailpile](https://github.com/mailpile/mailpile) A free & open modern, fast email client with user-friendly encryption and privacy features
+- [**7965**Star][3y] [Go] [cyfdecyf/cow](https://github.com/cyfdecyf/cow) HTTP proxy written in Go. COW can automatically identify blocked sites and use parent proxies to access.
+- [**7945**Star][4y] [ObjC] [shadowsocks/shadowsocks-ios](https://github.com/shadowsocks/shadowsocks-ios) Removed according to regulations.
+- [**7840**Star][6d] [C++] [shiqiyu/libfacedetection](https://github.com/shiqiyu/libfacedetection) An open source library for face detection in images. The face detection speed can reach 1500FPS.
+- [**7731**Star][3d] [JS] [gchq/cyberchef](https://github.com/gchq/cyberchef) The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis
+- [**7712**Star][2d] [Go] [git-lfs/git-lfs](https://github.com/git-lfs/git-lfs) Git extension for versioning large files
+- [**7670**Star][24d] [Java] [java-decompiler/jd-gui](https://github.com/java-decompiler/jd-gui) A standalone Java Decompiler GUI
+- [**7524**Star][29d] [Py] [threat9/routersploit](https://github.com/threat9/routersploit) Exploitation Framework for Embedded Devices
+- [**7474**Star][9d] [Go] [snail007/goproxy](https://github.com/snail007/goproxy) Proxy是高性能全功能的http代理、https代理、socks5代理、内网穿透、内网穿透p2p、内网穿透代理、内网穿透反向代理、内网穿透服务器、Websocket代理、TCP代理、UDP代理、DNS代理、DNS加密代理,代理API认证,全能跨平台代理服务器。
+- [**7412**Star][1m] [C++] [shadowsocks/shadowsocks-qt5](https://github.com/shadowsocks/shadowsocks-qt5) A cross-platform shadowsocks GUI client
+- [**7397**Star][1m] [Py] [s0md3v/xsstrike](https://github.com/s0md3v/XSStrike) Most advanced XSS scanner.
+- [**7246**Star][19d] [Java] [lionsoul2014/ip2region](https://github.com/lionsoul2014/ip2region) Ip2region is a offline IP location library with accuracy rate of 99.9% and 0.0x millseconds searching performance. DB file is less then 5Mb with all ip address stored. binding for Java,PHP,C,Python,Nodejs,Golang,C#,lua. Binary,B-tree,Memory searching algorithm
+- [**7186**Star][7m] [Shell] [teddysun/shadowsocks_install](https://github.com/teddysun/shadowsocks_install) Auto Install Shadowsocks Server for CentOS/Debian/Ubuntu
+- [**7017**Star][16d] [Go] [future-architect/vuls](https://github.com/future-architect/vuls) Agent-less vulnerability scanner for Linux, FreeBSD, Container Image, Running Container, WordPress, Programming language libraries, Network devices
+- [**6989**Star][5d] [C] [hashcat/hashcat](https://github.com/hashcat/hashcat) World's fastest and most advanced password recovery utility
+- [**6984**Star][2d] [Go] [nats-io/nats-server](https://github.com/nats-io/nats-server) High-Performance server for NATS, the cloud native messaging system.
+- [**6984**Star][2m] [JS] [cs01/gdbgui](https://github.com/cs01/gdbgui) Browser-based frontend to gdb (gnu debugger). Add breakpoints, view the stack, visualize data structures, and more in C, C++, Go, Rust, and Fortran. Run gdbgui from the terminal and a new tab will open in your browser.
+- [**6957**Star][11d] [greatfire/wiki](https://github.com/greatfire/wiki) 自由浏览
+- [**6949**Star][3m] [Java] [pxb1988/dex2jar](https://github.com/pxb1988/dex2jar) Tools to work with android .dex and java .class files
+- [**6869**Star][2m] [Go] [sqshq/sampler](https://github.com/sqshq/sampler) A tool for shell commands execution, visualization and alerting. Configured with a simple YAML file.
+- [**6812**Star][19d] [Shell] [awslabs/git-secrets](https://github.com/awslabs/git-secrets) Prevents you from committing secrets and credentials into git repositories
+- [**6732**Star][9m] [Java] [amitshekhariitbhu/android-debug-database](https://github.com/amitshekhariitbhu/android-debug-database) A library for debugging android databases and shared preferences - Make Debugging Great Again
+- [**6683**Star][3d] [Java] [zaproxy/zaproxy](https://github.com/zaproxy/zaproxy) The OWASP ZAP core project
+- [**6682**Star][3y] [C++] [alibaba/andfix](https://github.com/alibaba/andfix) AndFix is a library that offer hot-fix for Android App.
+- [**6668**Star][12d] [C++] [keepassxreboot/keepassxc](https://github.com/keepassxreboot/keepassxc) KeePassXC is a cross-platform community-driven port of the Windows application “Keepass Password Safe”.
+- [**6595**Star][3d] [Py] [networkx/networkx](https://github.com/networkx/networkx) Official NetworkX source code repository.
+- [**6555**Star][6m] [Go] [shadowsocks/shadowsocks-go](https://github.com/shadowsocks/shadowsocks-go) go port of shadowsocks (Deprecated)
+- [**6518**Star][1m] [Py] [h2y/shadowrocket-adblock-rules](https://github.com/h2y/shadowrocket-adblock-rules) 提供多款 Shadowrocket 规则,带广告过滤功能。用于 iOS 未越狱设备选择性地自动翻墙。
+- [**6462**Star][5d] [Shell] [cisofy/lynis](https://github.com/cisofy/lynis) Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
+- [**6451**Star][17d] [Go] [bettercap/bettercap](https://github.com/bettercap/bettercap) The Swiss Army knife for 802.11, BLE and Ethernet networks reconnaissance and MITM attacks.
+- [**6448**Star][9m] [HTML] [open-power-workgroup/hospital](https://github.com/open-power-workgroup/hospital) OpenPower工作组收集汇总的医院开放数据
+- [**6310**Star][29d] [Py] [seatgeek/fuzzywuzzy](https://github.com/seatgeek/fuzzywuzzy) Fuzzy String Matching in Python
+- [**6197**Star][2m] [ObjC] [johnno1962/injectionforxcode](https://github.com/johnno1962/injectionforxcode) Runtime Code Injection for Objective-C & Swift
+- [**6194**Star][3y] [PS] [powershellmafia/powersploit](https://github.com/PowerShellMafia/PowerSploit) PowerSploit - A PowerShell Post-Exploitation Framework
+- [**6192**Star][2m] [Py] [yandex/gixy](https://github.com/yandex/gixy) Nginx configuration static analyzer
+- [**6187**Star][6m] [rmerl/asuswrt-merlin](https://github.com/rmerl/asuswrt-merlin) Enhanced version of Asus's router firmware (Asuswrt) (legacy code base)
+- [**6146**Star][2d] [JS] [avwo/whistle](https://github.com/avwo/whistle) HTTP, HTTP2, HTTPS, Websocket debugging proxy
+- [**6137**Star][1y] [Hack] [facebook/fbctf](https://github.com/facebook/fbctf) Platform to host Capture the Flag competitions
+- [**6128**Star][9m] [Py] [schollz/howmanypeoplearearound](https://github.com/schollz/howmanypeoplearearound) Count the number of people around you
+- [**6092**Star][15d] [Go] [usefathom/fathom](https://github.com/usefathom/fathom) Fathom Lite. Simple, privacy-focused website analytics. Built with Golang & Preact.
+- [**6074**Star][16d] [Go] [quay/clair](https://github.com/quay/clair) Vulnerability Static Analysis for Containers
+- [**6074**Star][16d] [Go] [quay/clair](https://github.com/quay/clair) Vulnerability Static Analysis for Containers
+- [**6073**Star][5m] [Java] [qihoo360/replugin](https://github.com/qihoo360/replugin) RePlugin - A flexible, stable, easy-to-use Android Plug-in Framework
+- [**6070**Star][2y] [C] [jgamblin/mirai-source-code](https://github.com/jgamblin/mirai-source-code) Leaked Mirai Source Code for Research/IoC Development Purposes
+- [**6021**Star][3d] [Py] [cyrus-and/gdb-dashboard](https://github.com/cyrus-and/gdb-dashboard) Modular visual interface for GDB in Python
+- [**6017**Star][7d] [berzerk0/probable-wordlists](https://github.com/berzerk0/probable-wordlists) Version 2 is live! Wordlists sorted by probability originally created for password generation and testing - make sure your passwords aren't popular!
+- [**5972**Star][2m] [Java] [google/android-classyshark](https://github.com/google/android-classyshark) Analyze any Android/Java based app or game
+- [**5968**Star][2d] [Py] [gallopsled/pwntools](https://github.com/gallopsled/pwntools) CTF framework and exploit development library
+- [**5942**Star][6m] [JS] [haotian-wang/google-access-helper](https://github.com/haotian-wang/google-access-helper) 谷歌访问助手破解版
+- [**5888**Star][2d] [Py] [asciimoo/searx](https://github.com/asciimoo/searx) searx:网络元数据搜索引擎。汇总70 多个搜索引擎的搜素结果,避免用户被追踪或者被分析。可与 Tor 结合使用
+- [**5879**Star][2d] [C++] [radareorg/cutter](https://github.com/radareorg/cutter) Reverse Engineering Platform powered by radare2
+- [**5871**Star][2m] [Gnuplot] [nasa-jpl/open-source-rover](https://github.com/nasa-jpl/open-source-rover) A build-it-yourself, 6-wheel rover based on the rovers on Mars!
+- [**5815**Star][7m] [JS] [sindresorhus/fkill-cli](https://github.com/sindresorhus/fkill-cli) Fabulously kill processes. Cross-platform.
+- [**5773**Star][1y] [qinyuhang/shadowsocksx-ng-r](https://github.com/qinyuhang/shadowsocksx-ng-r) Next Generation of ShadowsocksX
+- [**5766**Star][3m] [ObjC] [square/ponydebugger](https://github.com/square/ponydebugger) Remote network and data debugging for your native iOS app using Chrome Developer Tools
+- [**5762**Star][2m] [C] [spacehuhn/esp8266_deauther](https://github.com/spacehuhn/esp8266_deauther) Cheap WiFi hacks
+- [**5742**Star][2y] [Py] [newsapps/beeswithmachineguns](https://github.com/newsapps/beeswithmachineguns) A utility for arming (creating) many bees (micro EC2 instances) to attack (load test) targets (web applications).
+- [**5740**Star][8m] [C] [xoreaxeaxeax/movfuscator](https://github.com/xoreaxeaxeax/movfuscator) The single instruction C compiler
+- [**5694**Star][9d] [JS] [swagger-api/swagger-editor](https://github.com/swagger-api/swagger-editor) Swagger Editor
+- [**5693**Star][2d] [Go] [casbin/casbin](https://github.com/casbin/casbin) An authorization library that supports access control models like ACL, RBAC, ABAC in Golang
+- [**5626**Star][1m] [C] [rofl0r/proxychains-ng](https://github.com/rofl0r/proxychains-ng) proxychains ng (new generation) - a preloader which hooks calls to sockets in dynamically linked programs and redirects it through one or more socks/http proxies. continuation of the unmaintained proxychains project. the sf.net page is currently not updated, use releases from github release page instead.
+- [**5593**Star][10d] [Ruby] [presidentbeef/brakeman](https://github.com/presidentbeef/brakeman) A static analysis security vulnerability scanner for Ruby on Rails applications
+- [**5565**Star][29d] [Roff] [max2max/freess](https://github.com/max2max/freess) 免费ss账号 免费shadowsocks账号 免费v2ray账号 (长期更新)
+- [**5540**Star][20d] [rshipp/awesome-malware-analysis](https://github.com/rshipp/awesome-malware-analysis) A curated list of awesome malware analysis tools and resources.
+- [**5476**Star][8m] [carpedm20/awesome-hacking](https://github.com/carpedm20/awesome-hacking) A curated list of awesome Hacking tutorials, tools and resources
+- [**5417**Star][2m] [Py] [axi0mx/ipwndfu](https://github.com/axi0mx/ipwndfu) open-source jailbreaking tool for many iOS devices
+- [**5413**Star][2y] [Rust] [autumnai/leaf](https://github.com/autumnai/leaf) Open Machine Intelligence Framework for Hackers. (GPU/CPU)
+- [**5371**Star][5m] [C] [pwn20wndstuff/undecimus](https://github.com/pwn20wndstuff/undecimus) unc0ver jailbreak for iOS 11.0 - 12.4
+- [**5371**Star][2d] [Py] [mlflow/mlflow](https://github.com/mlflow/mlflow) Open source platform for the machine learning lifecycle
+- [**5324**Star][4d] [Go] [zricethezav/gitleaks](https://github.com/zricethezav/gitleaks) Audit git repos for secrets
+- [**5205**Star][7m] [Py] [usarmyresearchlab/dshell](https://github.com/usarmyresearchlab/dshell) Dshell is a network forensic analysis framework.
+- [**5196**Star][3m] [Py] [ytisf/thezoo](https://github.com/ytisf/thezoo) A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.
+- [**5192**Star][1m] [Py] [refirmlabs/binwalk](https://github.com/ReFirmLabs/binwalk) a fast, easy to use tool for analyzing, reverse engineering, and extracting firmware images.
- [IDA插件](https://github.com/ReFirmLabs/binwalk/tree/master/src/scripts)
- [binwalk](https://github.com/ReFirmLabs/binwalk/tree/master/src/binwalk)
-- [**5165**Star][1y] [JS] [samyk/poisontap](https://github.com/samyk/poisontap) Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.
-- [**5163**Star][3m] [Py] [ytisf/thezoo](https://github.com/ytisf/thezoo) A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.
-- [**5121**Star][13d] [PHP] [tennc/webshell](https://github.com/tennc/webshell) This is a webshell open source project
-- [**5111**Star][18d] [Shell] [vulhub/vulhub](https://github.com/vulhub/vulhub) Pre-Built Vulnerable Environments Based on Docker-Compose
-- [**5096**Star][4m] [Py] [n1nj4sec/pupy](https://github.com/n1nj4sec/pupy) Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) remote administration and post-exploitation tool mainly written in python
-- [**5092**Star][19d] [C++] [avast/retdec](https://github.com/avast/retdec) RetDec is a retargetable machine-code decompiler based on LLVM.
-- [**5067**Star][2m] [sbilly/awesome-security](https://github.com/sbilly/awesome-security) A collection of awesome software, libraries, documents, books, resources and cools stuffs about security.
-- [**5054**Star][2m] [Shell] [stackexchange/blackbox](https://github.com/stackexchange/blackbox) Safely store secrets in Git/Mercurial/Subversion
-- [**5036**Star][8d] [Go] [dnscrypt/dnscrypt-proxy](https://github.com/DNSCrypt/dnscrypt-proxy) dnscrypt-proxy 2 - A flexible DNS proxy, with support for encrypted DNS protocols.
-- [**5028**Star][1m] [Java] [meituan-dianping/walle](https://github.com/meituan-dianping/walle) Android Signature V2 Scheme签名下的新一代渠道包打包神器
-- [**5026**Star][4y] [Py] [shadowsocksr-backup/shadowsocksr](https://github.com/shadowsocksr-backup/shadowsocksr) Python port of ShadowsocksR
-- [**5023**Star][4m] [PowerShell] [empireproject/empire](https://github.com/EmpireProject/Empire) 后渗透框架. Windows客户端用PowerShell, Linux/OSX用Python. 之前PowerShell Empire和Python EmPyre的组合
-- [**5010**Star][15d] [HTML] [owasp/owasp-mstg](https://github.com/owasp/owasp-mstg) The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security development, testing and reverse engineering.
-- [**4990**Star][1m] [Py] [snare/voltron](https://github.com/snare/voltron) A hacky debugger UI for hackers
-- [**4941**Star][10d] [Go] [inlets/inlets](https://github.com/inlets/inlets) Expose your local endpoints to the Internet
-- [**4928**Star][13d] [ASP] [hq450/fancyss](https://github.com/hq450/fancyss) fancyss is a project providing tools to across the GFW on asuswrt/merlin based router.
-- [**4924**Star][20d] [Py] [trustedsec/social-engineer-toolkit](https://github.com/trustedsec/social-engineer-toolkit) The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.
-- [**4909**Star][1y] [Go] [yinghuocho/firefly-proxy](https://github.com/yinghuocho/firefly-proxy) A proxy software to help circumventing the Great Firewall.
-- [**4892**Star][11m] [Go] [bitly/oauth2_proxy](https://github.com/bitly/oauth2_proxy) A reverse proxy that provides authentication with Google, Github or other provider
-- [**4872**Star][2m] [Rust] [sharkdp/hexyl](https://github.com/sharkdp/hexyl) A command-line hex viewer
-- [**4872**Star][7m] [Java] [guardianproject/haven](https://github.com/guardianproject/haven) Haven is for people who need a way to protect their personal spaces and possessions without compromising their own privacy, through an Android app and on-device sensors
-- [**4868**Star][9d] [Shell] [denisidoro/navi](https://github.com/denisidoro/navi) An interactive cheatsheet tool for the command-line
-- [**4862**Star][7d] [JS] [mobsf/mobile-security-framework-mobsf](https://github.com/MobSF/Mobile-Security-Framework-MobSF) Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
-- [**4838**Star][10d] [Go] [gcla/termshark](https://github.com/gcla/termshark) A terminal UI for tshark, inspired by Wireshark
-- [**4835**Star][8d] [Py] [alessandroz/lazagne](https://github.com/alessandroz/lazagne) Credentials recovery project
-- [**4816**Star][10d] [C] [offensive-security/exploitdb](https://github.com/offensive-security/exploitdb) The official Exploit Database repository
-- [**4793**Star][8m] [Py] [10se1ucgo/disablewintracking](https://github.com/10se1ucgo/disablewintracking) Uses some known methods that attempt to minimize tracking in Windows 10
-- [**4771**Star][7d] [C] [google/oss-fuzz](https://github.com/google/oss-fuzz) OSS-Fuzz - continuous fuzzing of open source software.
-- [**4752**Star][7d] [C++] [facebook/redex](https://github.com/facebook/redex) A bytecode optimizer for Android apps
-- [**4717**Star][7d] [Swift] [yanue/v2rayu](https://github.com/yanue/v2rayu) V2rayU,基于v2ray核心的mac版客户端,用于科学上网,使用swift编写,支持vmess,shadowsocks,socks5等服务协议,支持订阅, 支持二维码,剪贴板导入,手动配置,二维码分享等
-- [**4710**Star][8d] [C++] [paddlepaddle/paddle-lite](https://github.com/PaddlePaddle/Paddle-Lite) Multi-platform high performance deep learning inference engine (『飞桨』多平台高性能深度学习预测引擎)
-- [**4675**Star][7d] [C++] [coatisoftware/sourcetrail](https://github.com/coatisoftware/sourcetrail) Sourcetrail - free and open-source interactive source explorer
-- [**4651**Star][7d] [Py] [manisso/fsociety](https://github.com/manisso/fsociety) fsociety Hacking Tools Pack – A Penetration Testing Framework
-- [**4630**Star][6m] [powershell/win32-openssh](https://github.com/powershell/win32-openssh) Win32 port of OpenSSH
-- [**4627**Star][16d] [C] [google/ios-webkit-debug-proxy](https://github.com/google/ios-webkit-debug-proxy) A DevTools proxy (Chrome Remote Debugging Protocol) for iOS devices (Safari Remote Web Inspector).
-- [**4616**Star][8d] [JS] [beefproject/beef](https://github.com/beefproject/beef) The Browser Exploitation Framework Project
-- [**4611**Star][19d] [Py] [secdev/scapy](https://github.com/secdev/scapy) Scapy: the Python-based interactive packet manipulation program & library. Supports Python 2 & Python 3.
-- [**4575**Star][11m] [Py] [ecthros/uncaptcha2](https://github.com/ecthros/uncaptcha2) defeating the latest version of ReCaptcha with 91% accuracy
-- [**4574**Star][10d] [Go] [ginuerzh/gost](https://github.com/ginuerzh/gost) GO Simple Tunnel - a simple tunnel written in golang
-- [**4551**Star][1y] [C] [upx/upx](https://github.com/upx/upx) UPX - the Ultimate Packer for eXecutables
-- [**4549**Star][8d] [C++] [mozilla/rr](https://github.com/mozilla/rr) Record and Replay Framework
-- [**4526**Star][10d] [Ruby] [wpscanteam/wpscan](https://github.com/wpscanteam/wpscan) WPScan is a free, for non-commercial use, black box WordPress Vulnerability Scanner written for security professionals and blog maintainers to test the security of their WordPress websites.
-- [**4523**Star][12d] [C] [jedisct1/dsvpn](https://github.com/jedisct1/dsvpn) A Dead Simple VPN.
-- [**4485**Star][18d] [TypeScript] [apis-guru/graphql-voyager](https://github.com/apis-guru/graphql-voyager)
-- [**4454**Star][1y] [Go] [wallix/awless](https://github.com/wallix/awless) A Mighty CLI for AWS
-- [**4444**Star][16d] [Py] [jopohl/urh](https://github.com/jopohl/urh) Universal Radio Hacker: investigate wireless protocols like a boss
-- [**4426**Star][22d] [Py] [jofpin/trape](https://github.com/jofpin/trape) People tracker on the Internet: OSINT analysis and research tool by Jose Pino
-- [**4398**Star][9d] [Makefile] [frida/frida](https://github.com/frida/frida) Clone this repo to build Frida
-- [**4387**Star][2m] [Shell] [zardus/ctf-tools](https://github.com/zardus/ctf-tools) Some setup scripts for security research tools.
-- [**4343**Star][13d] [Swift] [signalapp/signal-ios](https://github.com/signalapp/Signal-iOS) A private messenger for iOS.
-- [**4339**Star][12m] [Py] [lennylxx/ipv6-hosts](https://github.com/lennylxx/ipv6-hosts) Fork of
-- [**4310**Star][29d] [JS] [cure53/dompurify](https://github.com/cure53/dompurify) a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
-- [**4307**Star][5m] [Py] [diafygi/acme-tiny](https://github.com/diafygi/acme-tiny) A tiny script to issue and renew TLS certs from Let's Encrypt
-- [**4262**Star][1m] [Py] [tensorflow/cleverhans](https://github.com/tensorflow/cleverhans) An adversarial example library for constructing attacks, building defenses, and benchmarking both
-- [**4261**Star][1m] [Shell] [ashishb/android-security-awesome](https://github.com/ashishb/android-security-awesome) A collection of android security related resources
-- [**4256**Star][11m] [JS] [butterproject/butter-desktop](https://github.com/butterproject/butter-desktop) All the free parts of Popcorn Time
-- [**4243**Star][9d] [Rust] [timvisee/ffsend](https://github.com/timvisee/ffsend) Easily and securely share files from the command line
-- [**4210**Star][4m] [Py] [dxa4481/trufflehog](https://github.com/dxa4481/trufflehog) Searches through git repositories for high entropy strings and secrets, digging deep into commit history
-- [**4195**Star][16d] [Go] [gophish/gophish](https://github.com/gophish/gophish) Open-Source Phishing Toolkit
-- [**4195**Star][2m] [Py] [evilsocket/opensnitch](https://github.com/evilsocket/opensnitch) a GNU/Linux port of the Little Snitch application firewall
-- [**4190**Star][7m] [Objective-C] [alonemonkey/monkeydev](https://github.com/alonemonkey/monkeydev) CaptainHook Tweak、Logos Tweak and Command-line Tool、Patch iOS Apps, Without Jailbreak.
-- [**4186**Star][9d] [qazbnm456/awesome-web-security](https://github.com/qazbnm456/awesome-web-security) Curated list of Web Security materials and resources
-- [**4183**Star][1y] [Go] [michenriksen/gitrob](https://github.com/michenriksen/gitrob) Reconnaissance tool for GitHub organizations
-- [**4175**Star][11d] [we5ter/scanners-box](https://github.com/we5ter/scanners-box) A powerful hacker toolkit collected more than 10 categories of open source scanners from Github - 安全行业从业者自研开源扫描器合辑
-- [**4165**Star][2y] [forter/security-101-for-saas-startups](https://github.com/forter/security-101-for-saas-startups) security tips for startups
-- [**4148**Star][12m] [JS] [kdzwinel/betwixt](https://github.com/kdzwinel/betwixt) Betwixt will help you analyze web traffic outside the browser using familiar Chrome DevTools interface.
-- [**4105**Star][5m] [Py] [spiderclub/haipproxy](https://github.com/spiderclub/haipproxy)
-- [**4092**Star][2m] [Py] [aboul3la/sublist3r](https://github.com/aboul3la/sublist3r) Fast subdomains enumeration tool for penetration testers
-- [**4091**Star][7d] [Java] [spring-projects/spring-security](https://github.com/spring-projects/spring-security) Spring Security
-- [**4083**Star][2y] [Py] [xoreaxeaxeax/sandsifter](https://github.com/xoreaxeaxeax/sandsifter) sandsifter:x86 处理器 Fuzzer,查找 Intel 的隐藏指令和 CPU bug
-- [**4069**Star][9m] [wtsxdev/reverse-engineering](https://github.com/wtsxdev/reverse-engineering) List of awesome reverse engineering resources
-- [**4039**Star][1m] [JS] [sigalor/whatsapp-web-reveng](https://github.com/sigalor/whatsapp-web-reveng) Reverse engineering WhatsApp Web.
-- [**4033**Star][7d] [Py] [google/clusterfuzz](https://github.com/google/clusterfuzz) Scalable fuzzing infrastructure.
-- [**4023**Star][2m] [Java] [jesusfreke/smali](https://github.com/jesusfreke/smali) smali/baksmali
-- [**4015**Star][3m] [JS] [cuckoosandbox/cuckoo](https://github.com/cuckoosandbox/cuckoo) Cuckoo Sandbox is an automated dynamic malware analysis system
-- [**3989**Star][1y] [JS] [travist/jsencrypt](https://github.com/travist/jsencrypt) A Javascript library to perform OpenSSL RSA Encryption, Decryption, and Key Generation.
-- [**3985**Star][20d] [drduh/yubikey-guide](https://github.com/drduh/yubikey-guide) Guide to using YubiKey for GPG and SSH
-- [**3955**Star][3m] [Py] [nullarray/autosploit](https://github.com/nullarray/autosploit) Automated Mass Exploiter
-- [**3936**Star][13d] [Go] [dexidp/dex](https://github.com/dexidp/dex) OpenID Connect Identity (OIDC) and OAuth 2.0 Provider with Pluggable Connectors
-- [**3929**Star][2m] [JS] [apsdehal/awesome-ctf](https://github.com/apsdehal/awesome-ctf) A curated list of CTF frameworks, libraries, resources and softwares
-- [**3929**Star][2m] [JS] [apsdehal/awesome-ctf](https://github.com/apsdehal/awesome-ctf) A curated list of CTF frameworks, libraries, resources and softwares
-- [**3925**Star][4m] [PHP] [paragonie/awesome-appsec](https://github.com/paragonie/awesome-appsec) A curated list of resources for learning about application security
-- [**3916**Star][7d] [Py] [angr/angr](https://github.com/angr/angr) A powerful and user-friendly binary analysis platform!
-- [**3908**Star][14d] [Rust] [svenstaro/genact](https://github.com/svenstaro/genact) a nonsense activity generator
-- [**3907**Star][1m] [C] [aquynh/capstone](https://github.com/aquynh/capstone) Capstone disassembly/disassembler framework: Core (Arm, Arm64, BPF, EVM, M68K, M680X, MOS65xx, Mips, PPC, RISCV, Sparc, SystemZ, TMS320C64x, Web Assembly, X86, X86_64, XCore) + bindings.
-- [**3896**Star][2y] [C#] [shadowsocksr-backup/shadowsocksr-csharp](https://github.com/shadowsocksr-backup/shadowsocksr-csharp)
-- [**3876**Star][7d] [C++] [baldurk/renderdoc](https://github.com/baldurk/renderdoc) RenderDoc is a stand-alone graphics debugging tool.
-- [**3856**Star][2m] [PHP] [fuzzdb-project/fuzzdb](https://github.com/fuzzdb-project/fuzzdb) Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
-- [**3841**Star][8m] [Go] [eranyanay/1m-go-websockets](https://github.com/eranyanay/1m-go-websockets) handling 1M websockets connections in Go
-- [**3837**Star][15d] [JS] [shadowsocks/shadowsocks-manager](https://github.com/shadowsocks/shadowsocks-manager) A shadowsocks manager tool for multi user and traffic control.
-- [**3836**Star][11d] [Py] [secureauthcorp/impacket](https://github.com/SecureAuthCorp/impacket) Impacket is a collection of Python classes for working with network protocols.
-- [**3832**Star][2m] [Objective-C] [sveinbjornt/sloth](https://github.com/sveinbjornt/sloth) Mac app that shows all open files, directories and sockets in use by all running processes. Nice GUI for lsof.
-- [**3825**Star][4y] [iosre/iosappreverseengineering](https://github.com/iosre/iosappreverseengineering) The world’s 1st book of very detailed iOS App reverse engineering skills :)
-- [**3781**Star][13d] [hq450/fancyss_history_package](https://github.com/hq450/fancyss_history_package) 科学上网插件的离线安装包储存在这里
-- [**3770**Star][30d] [jivoi/awesome-osint](https://github.com/jivoi/awesome-osint) A curated list of amazingly awesome open source intelligence tools and resources
-- [**3763**Star][5y] [shadowsocksr-backup/shadowsocks-rss](https://github.com/shadowsocksr-backup/shadowsocks-rss) ShadowsocksR update rss, SSR organization
-- [**3754**Star][10m] [Py] [longld/peda](https://github.com/longld/peda) Python Exploit Development Assistance for GDB
-- [**3749**Star][2m] [Go] [microsoft/ethr](https://github.com/microsoft/ethr) Ethr is a Network Performance Measurement Tool for TCP, UDP & HTTP.
-- [**3739**Star][2m] [PHP] [ethicalhack3r/dvwa](https://github.com/ethicalhack3r/DVWA) Damn Vulnerable Web Application (DVWA)
-- [**3739**Star][2m] [Py] [paralax/awesome-honeypots](https://github.com/paralax/awesome-honeypots) an awesome list of honeypot resources
-- [**3731**Star][1m] [C] [iaik/meltdown](https://github.com/iaik/meltdown) This repository contains several applications, demonstrating the Meltdown bug.
-- [**3731**Star][13d] [Go] [hashicorp/consul-template](https://github.com/hashicorp/consul-template) Template rendering, notifier, and supervisor for
-- [**3718**Star][4m] [Py] [malwaredllc/byob](https://github.com/malwaredllc/byob) BYOB (Build Your Own Botnet)
-- [**3681**Star][11d] [jjqqkk/chromium](https://github.com/jjqqkk/chromium) Chromium browser with SSL VPN. Use this browser to unblock websites.
-- [**3679**Star][2y] [JS] [samyk/evercookie](https://github.com/samyk/evercookie) Produces persistent, respawning "super" cookies in a browser, abusing over a dozen techniques. Its goal is to identify users after they've removed standard cookies and other privacy data such as Flash cookies (LSOs), HTML5 storage, SilverLight storage, and others.
-- [**3675**Star][8d] [HTML] [hamukazu/lets-get-arrested](https://github.com/hamukazu/lets-get-arrested) This project is intended to protest against the police in Japan
-- [**3660**Star][1y] [Py] [misterch0c/shadowbroker](https://github.com/misterch0c/shadowbroker) The Shadow Brokers "Lost In Translation" leak
-- [**3653**Star][4m] [C] [facebook/fishhook](https://github.com/facebook/fishhook) A library that enables dynamically rebinding symbols in Mach-O binaries running on iOS.
-- [**3647**Star][8d] [JS] [lesspass/lesspass](https://github.com/lesspass/lesspass)
-- [**3645**Star][26d] [C#] [0xd4d/de4dot](https://github.com/0xd4d/de4dot) .NET deobfuscator and unpacker.
-- [**3640**Star][4m] [C] [secwiki/windows-kernel-exploits](https://github.com/secwiki/windows-kernel-exploits) windows-kernel-exploits Windows平台提权漏洞集合
-- [**3639**Star][2y] [Py] [qiyeboy/ipproxypool](https://github.com/qiyeboy/ipproxypool) IPProxyPool代理池项目,提供代理ip
-- [**3624**Star][29d] [acl4ssr/acl4ssr](https://github.com/acl4ssr/acl4ssr) SSR 去广告ACL规则/SS完整GFWList规则,Telegram频道订阅地址
-- [**3621**Star][2m] [C] [atmosphere-nx/atmosphere](https://github.com/atmosphere-nx/atmosphere) Atmosphère is a work-in-progress customized firmware for the Nintendo Switch.
-- [**3615**Star][5y] [C#] [brandonlw/psychson](https://github.com/brandonlw/Psychson) Phison 2251-03 (2303) Custom Firmware & Existing Firmware Patches (BadUSB)
-- [**3612**Star][17d] [HTML] [consensys/smart-contract-best-practices](https://github.com/consensys/smart-contract-best-practices) A guide to smart contract security best practices
-- [**3598**Star][8d] [TypeScript] [javascript-obfuscator/javascript-obfuscator](https://github.com/javascript-obfuscator/javascript-obfuscator) A powerful obfuscator for JavaScript and Node.js
+- [**5167**Star][20d] [Shell] [vulhub/vulhub](https://github.com/vulhub/vulhub) Pre-Built Vulnerable Environments Based on Docker-Compose
+- [**5167**Star][1y] [JS] [samyk/poisontap](https://github.com/samyk/poisontap) Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.
+- [**5148**Star][6d] [PHP] [tennc/webshell](https://github.com/tennc/webshell) This is a webshell open source project
+- [**5123**Star][21d] [C++] [avast/retdec](https://github.com/avast/retdec) RetDec is a retargetable machine-code decompiler based on LLVM.
+- [**5118**Star][15d] [ObjC] [macpass/macpass](https://github.com/MacPass/MacPass) A native OS X KeePass client
+- [**5118**Star][4m] [Py] [n1nj4sec/pupy](https://github.com/n1nj4sec/pupy) Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) remote administration and post-exploitation tool mainly written in python
+- [**5089**Star][2d] [Go] [dnscrypt/dnscrypt-proxy](https://github.com/DNSCrypt/dnscrypt-proxy) dnscrypt-proxy 2 - A flexible DNS proxy, with support for encrypted DNS protocols.
+- [**5082**Star][2m] [sbilly/awesome-security](https://github.com/sbilly/awesome-security) A collection of awesome software, libraries, documents, books, resources and cools stuffs about security.
+- [**5065**Star][2m] [Shell] [stackexchange/blackbox](https://github.com/stackexchange/blackbox) Safely store secrets in Git/Mercurial/Subversion
+- [**5059**Star][1m] [Java] [meituan-dianping/walle](https://github.com/meituan-dianping/walle) Android Signature V2 Scheme签名下的新一代渠道包打包神器
+- [**5054**Star][4y] [Py] [shadowsocksr-backup/shadowsocksr](https://github.com/shadowsocksr-backup/shadowsocksr) Python port of ShadowsocksR
+- [**5042**Star][2d] [HTML] [owasp/owasp-mstg](https://github.com/owasp/owasp-mstg) The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security development, testing and reverse engineering.
+- [**5037**Star][4m] [PS] [empireproject/empire](https://github.com/EmpireProject/Empire) 后渗透框架. Windows客户端用PowerShell, Linux/OSX用Python. 之前PowerShell Empire和Python EmPyre的组合
+- [**5021**Star][2d] [Py] [mobsf/mobile-security-framework-mobsf](https://github.com/MobSF/Mobile-Security-Framework-MobSF) Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
+- [**5005**Star][2d] [C++] [coatisoftware/sourcetrail](https://github.com/coatisoftware/sourcetrail) Sourcetrail - free and open-source interactive source explorer
+- [**4996**Star][2d] [ASP] [hq450/fancyss](https://github.com/hq450/fancyss) fancyss is a project providing tools to across the GFW on asuswrt/merlin based router.
+- [**4996**Star][6d] [Go] [inlets/inlets](https://github.com/inlets/inlets) Expose your local endpoints to the Internet
+- [**4994**Star][1m] [Py] [snare/voltron](https://github.com/snare/voltron) A hacky debugger UI for hackers
+- [**4953**Star][22d] [Py] [trustedsec/social-engineer-toolkit](https://github.com/trustedsec/social-engineer-toolkit) The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.
+- [**4920**Star][2d] [TS] [jigsaw-code/outline-client](https://github.com/jigsaw-code/outline-client) Outline clients, developed by Jigsaw. The Outline clients use the popular Shadowsocks protocol, and lean on the Cordova and Electron frameworks to support Windows, Android / ChromeOS, Linux, iOS and macOS.
+- [**4913**Star][1y] [Go] [yinghuocho/firefly-proxy](https://github.com/yinghuocho/firefly-proxy) A proxy software to help circumventing the Great Firewall.
+- [**4909**Star][2d] [Shell] [denisidoro/navi](https://github.com/denisidoro/navi) An interactive cheatsheet tool for the command-line
+- [**4897**Star][11m] [Go] [bitly/oauth2_proxy](https://github.com/bitly/oauth2_proxy) A reverse proxy that provides authentication with Google, Github or other provider
+- [**4883**Star][2m] [Rust] [sharkdp/hexyl](https://github.com/sharkdp/hexyl) A command-line hex viewer
+- [**4881**Star][5d] [Java] [guardianproject/haven](https://github.com/guardianproject/haven) Haven is for people who need a way to protect their personal spaces and possessions without compromising their own privacy, through an Android app and on-device sensors
+- [**4869**Star][2d] [Swift] [yanue/v2rayu](https://github.com/yanue/v2rayu) V2rayU,基于v2ray核心的mac版客户端,用于科学上网,使用swift编写,支持vmess,shadowsocks,socks5等服务协议,支持订阅, 支持二维码,剪贴板导入,手动配置,二维码分享等
+- [**4867**Star][10d] [Py] [alessandroz/lazagne](https://github.com/alessandroz/lazagne) Credentials recovery project
+- [**4847**Star][3d] [Go] [gcla/termshark](https://github.com/gcla/termshark) A terminal UI for tshark, inspired by Wireshark
+- [**4841**Star][2d] [C] [offensive-security/exploitdb](https://github.com/offensive-security/exploitdb) The official Exploit Database repository
+- [**4803**Star][8m] [Py] [10se1ucgo/disablewintracking](https://github.com/10se1ucgo/disablewintracking) Uses some known methods that attempt to minimize tracking in Windows 10
+- [**4782**Star][2d] [C] [google/oss-fuzz](https://github.com/google/oss-fuzz) OSS-Fuzz - continuous fuzzing of open source software.
+- [**4761**Star][2d] [C++] [facebook/redex](https://github.com/facebook/redex) A bytecode optimizer for Android apps
+- [**4724**Star][2d] [C++] [paddlepaddle/paddle-lite](https://github.com/PaddlePaddle/Paddle-Lite) Multi-platform high performance deep learning inference engine (『飞桨』多平台高性能深度学习预测引擎)
+- [**4691**Star][9d] [Py] [manisso/fsociety](https://github.com/manisso/fsociety) fsociety Hacking Tools Pack – A Penetration Testing Framework
+- [**4639**Star][3d] [Py] [secdev/scapy](https://github.com/secdev/scapy) Scapy: the Python-based interactive packet manipulation program & library. Supports Python 2 & Python 3.
+- [**4638**Star][18d] [C] [google/ios-webkit-debug-proxy](https://github.com/google/ios-webkit-debug-proxy) A DevTools proxy (Chrome Remote Debugging Protocol) for iOS devices (Safari Remote Web Inspector).
+- [**4637**Star][6m] [powershell/win32-openssh](https://github.com/powershell/win32-openssh) Win32 port of OpenSSH
+- [**4633**Star][2d] [JS] [beefproject/beef](https://github.com/beefproject/beef) The Browser Exploitation Framework Project
+- [**4615**Star][12d] [Go] [ginuerzh/gost](https://github.com/ginuerzh/gost) GO Simple Tunnel - a simple tunnel written in golang
+- [**4589**Star][11m] [Py] [ecthros/uncaptcha2](https://github.com/ecthros/uncaptcha2) defeating the latest version of ReCaptcha with 91% accuracy
+- [**4583**Star][1y] [C] [upx/upx](https://github.com/upx/upx) UPX - the Ultimate Packer for eXecutables
+- [**4575**Star][4d] [C++] [mozilla/rr](https://github.com/mozilla/rr) Record and Replay Framework
+- [**4543**Star][4d] [Ruby] [wpscanteam/wpscan](https://github.com/wpscanteam/wpscan) WPScan is a free, for non-commercial use, black box WordPress Vulnerability Scanner written for security professionals and blog maintainers to test the security of their WordPress websites.
+- [**4529**Star][6d] [C] [jedisct1/dsvpn](https://github.com/jedisct1/dsvpn) A Dead Simple VPN.
+- [**4498**Star][6d] [TS] [apis-guru/graphql-voyager](https://github.com/apis-guru/graphql-voyager)
+- [**4459**Star][8d] [Py] [jopohl/urh](https://github.com/jopohl/urh) Universal Radio Hacker: investigate wireless protocols like a boss
+- [**4458**Star][1y] [Go] [wallix/awless](https://github.com/wallix/awless) A Mighty CLI for AWS
+- [**4449**Star][3d] [Go] [dragonflyoss/dragonfly](https://github.com/dragonflyoss/Dragonfly) Dragonfly is an intelligent P2P based image and file distribution system.
+- [**4446**Star][2d] [Makefile] [frida/frida](https://github.com/frida/frida) Clone this repo to build Frida
+- [**4443**Star][24d] [Py] [jofpin/trape](https://github.com/jofpin/trape) People tracker on the Internet: OSINT analysis and research tool by Jose Pino
+- [**4411**Star][2m] [Shell] [zardus/ctf-tools](https://github.com/zardus/ctf-tools) Some setup scripts for security research tools.
+- [**4359**Star][6d] [Swift] [signalapp/signal-ios](https://github.com/signalapp/Signal-iOS) A private messenger for iOS.
+- [**4346**Star][1m] [JS] [cure53/dompurify](https://github.com/cure53/dompurify) a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
+- [**4344**Star][12m] [Py] [lennylxx/ipv6-hosts](https://github.com/lennylxx/ipv6-hosts) Fork of
+- [**4313**Star][5m] [Py] [diafygi/acme-tiny](https://github.com/diafygi/acme-tiny) A tiny script to issue and renew TLS certs from Let's Encrypt
+- [**4283**Star][7d] [Py] [tensorflow/cleverhans](https://github.com/tensorflow/cleverhans) An adversarial example library for constructing attacks, building defenses, and benchmarking both
+- [**4280**Star][1m] [Shell] [ashishb/android-security-awesome](https://github.com/ashishb/android-security-awesome) A collection of android security related resources
+- [**4261**Star][5d] [Rust] [timvisee/ffsend](https://github.com/timvisee/ffsend) Easily and securely share files from the command line
+- [**4258**Star][11m] [JS] [butterproject/butter-desktop](https://github.com/butterproject/butter-desktop) All the free parts of Popcorn Time
+- [**4244**Star][2y] [imeiji/shadowsocks_install](https://github.com/imeiji/shadowsocks_install) Auto install shadowsocks server,thanks 秋水逸冰
+- [**4241**Star][4m] [Py] [dxa4481/trufflehog](https://github.com/dxa4481/trufflehog) Searches through git repositories for high entropy strings and secrets, digging deep into commit history
+- [**4215**Star][7m] [ObjC] [alonemonkey/monkeydev](https://github.com/alonemonkey/monkeydev) CaptainHook Tweak、Logos Tweak and Command-line Tool、Patch iOS Apps, Without Jailbreak.
+- [**4211**Star][9d] [Go] [gophish/gophish](https://github.com/gophish/gophish) Open-Source Phishing Toolkit
+- [**4205**Star][11d] [qazbnm456/awesome-web-security](https://github.com/qazbnm456/awesome-web-security) Curated list of Web Security materials and resources
+- [**4204**Star][1y] [Go] [michenriksen/gitrob](https://github.com/michenriksen/gitrob) Reconnaissance tool for GitHub organizations
+- [**4202**Star][2m] [Py] [evilsocket/opensnitch](https://github.com/evilsocket/opensnitch) a GNU/Linux port of the Little Snitch application firewall
+- [**4198**Star][2d] [Py] [openmined/pysyft](https://github.com/openmined/pysyft) A library for encrypted, privacy preserving machine learning
+- [**4190**Star][13d] [we5ter/scanners-box](https://github.com/we5ter/scanners-box) A powerful hacker toolkit collected more than 10 categories of open source scanners from Github - 安全行业从业者自研开源扫描器合辑
+- [**4171**Star][2y] [forter/security-101-for-saas-startups](https://github.com/forter/security-101-for-saas-startups) security tips for startups
+- [**4149**Star][12m] [JS] [kdzwinel/betwixt](https://github.com/kdzwinel/betwixt) Betwixt will help you analyze web traffic outside the browser using familiar Chrome DevTools interface.
+- [**4131**Star][5d] [Java] [spring-projects/spring-security](https://github.com/spring-projects/spring-security) Spring Security
+- [**4120**Star][5m] [Py] [spiderclub/haipproxy](https://github.com/spiderclub/haipproxy)
+- [**4120**Star][2m] [Py] [aboul3la/sublist3r](https://github.com/aboul3la/sublist3r) Fast subdomains enumeration tool for penetration testers
+- [**4096**Star][2y] [Py] [xoreaxeaxeax/sandsifter](https://github.com/xoreaxeaxeax/sandsifter) sandsifter:x86 处理器 Fuzzer,查找 Intel 的隐藏指令和 CPU bug
+- [**4092**Star][9m] [wtsxdev/reverse-engineering](https://github.com/wtsxdev/reverse-engineering) List of awesome reverse engineering resources
+- [**4046**Star][1m] [JS] [sigalor/whatsapp-web-reveng](https://github.com/sigalor/whatsapp-web-reveng) Reverse engineering WhatsApp Web.
+- [**4045**Star][2m] [Java] [jesusfreke/smali](https://github.com/jesusfreke/smali) smali/baksmali
+- [**4044**Star][2d] [Py] [google/clusterfuzz](https://github.com/google/clusterfuzz) Scalable fuzzing infrastructure.
+- [**4022**Star][22d] [drduh/yubikey-guide](https://github.com/drduh/yubikey-guide) Guide to using YubiKey for GPG and SSH
+- [**4021**Star][3m] [JS] [cuckoosandbox/cuckoo](https://github.com/cuckoosandbox/cuckoo) Cuckoo Sandbox is an automated dynamic malware analysis system
+- [**4000**Star][1y] [JS] [travist/jsencrypt](https://github.com/travist/jsencrypt) A Javascript library to perform OpenSSL RSA Encryption, Decryption, and Key Generation.
+- [**3967**Star][3m] [Py] [nullarray/autosploit](https://github.com/nullarray/autosploit) Automated Mass Exploiter
+- [**3961**Star][5d] [Go] [dexidp/dex](https://github.com/dexidp/dex) OpenID Connect Identity (OIDC) and OAuth 2.0 Provider with Pluggable Connectors
+- [**3953**Star][2m] [JS] [apsdehal/awesome-ctf](https://github.com/apsdehal/awesome-ctf) A curated list of CTF frameworks, libraries, resources and softwares
+- [**3953**Star][2m] [JS] [apsdehal/awesome-ctf](https://github.com/apsdehal/awesome-ctf) A curated list of CTF frameworks, libraries, resources and softwares
+- [**3937**Star][3d] [Py] [angr/angr](https://github.com/angr/angr) A powerful and user-friendly binary analysis platform!
+- [**3935**Star][4m] [PHP] [paragonie/awesome-appsec](https://github.com/paragonie/awesome-appsec) A curated list of resources for learning about application security
+- [**3933**Star][8m] [Go] [eranyanay/1m-go-websockets](https://github.com/eranyanay/1m-go-websockets) handling 1M websockets connections in Go
+- [**3923**Star][1m] [C] [aquynh/capstone](https://github.com/aquynh/capstone) Capstone disassembly/disassembler framework: Core (Arm, Arm64, BPF, EVM, M68K, M680X, MOS65xx, Mips, PPC, RISCV, Sparc, SystemZ, TMS320C64x, Web Assembly, X86, X86_64, XCore) + bindings.
+- [**3920**Star][2y] [C#] [shadowsocksr-backup/shadowsocksr-csharp](https://github.com/shadowsocksr-backup/shadowsocksr-csharp)
+- [**3915**Star][16d] [Rust] [svenstaro/genact](https://github.com/svenstaro/genact) a nonsense activity generator
+- [**3893**Star][2d] [C++] [baldurk/renderdoc](https://github.com/baldurk/renderdoc) RenderDoc is a stand-alone graphics debugging tool.
+- [**3878**Star][2m] [PHP] [fuzzdb-project/fuzzdb](https://github.com/fuzzdb-project/fuzzdb) Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
+- [**3869**Star][2d] [Py] [secureauthcorp/impacket](https://github.com/SecureAuthCorp/impacket) Impacket is a collection of Python classes for working with network protocols.
+- [**3848**Star][7d] [JS] [shadowsocks/shadowsocks-manager](https://github.com/shadowsocks/shadowsocks-manager) A shadowsocks manager tool for multi user and traffic control.
+- [**3845**Star][2d] [hq450/fancyss_history_package](https://github.com/hq450/fancyss_history_package) 科学上网插件的离线安装包储存在这里
+- [**3838**Star][2m] [ObjC] [sveinbjornt/sloth](https://github.com/sveinbjornt/sloth) Mac app that shows all open files, directories and sockets in use by all running processes. Nice GUI for lsof.
+- [**3831**Star][4y] [iosre/iosappreverseengineering](https://github.com/iosre/iosappreverseengineering) The world’s 1st book of very detailed iOS App reverse engineering skills :)
+- [**3813**Star][1m] [jivoi/awesome-osint](https://github.com/jivoi/awesome-osint) A curated list of amazingly awesome open source intelligence tools and resources
+- [**3799**Star][5y] [shadowsocksr-backup/shadowsocks-rss](https://github.com/shadowsocksr-backup/shadowsocks-rss) ShadowsocksR update rss, SSR organization
+- [**3767**Star][10m] [Py] [longld/peda](https://github.com/longld/peda) Python Exploit Development Assistance for GDB
+- [**3763**Star][2m] [Py] [paralax/awesome-honeypots](https://github.com/paralax/awesome-honeypots) an awesome list of honeypot resources
+- [**3755**Star][2m] [PHP] [ethicalhack3r/dvwa](https://github.com/ethicalhack3r/DVWA) Damn Vulnerable Web Application (DVWA)
+- [**3752**Star][2m] [Go] [microsoft/ethr](https://github.com/microsoft/ethr) Ethr is a Network Performance Measurement Tool for TCP, UDP & HTTP.
+- [**3736**Star][8d] [Go] [hashicorp/consul-template](https://github.com/hashicorp/consul-template) Template rendering, notifier, and supervisor for
+- [**3733**Star][2m] [C] [iaik/meltdown](https://github.com/iaik/meltdown) This repository contains several applications, demonstrating the Meltdown bug.
+- [**3730**Star][4m] [Py] [malwaredllc/byob](https://github.com/malwaredllc/byob) BYOB (Build Your Own Botnet)
+- [**3719**Star][6d] [jjqqkk/chromium](https://github.com/jjqqkk/chromium) Chromium browser with SSL VPN. Use this browser to unblock websites.
+- [**3713**Star][2d] [C] [atmosphere-nx/atmosphere](https://github.com/atmosphere-nx/atmosphere) Atmosphère is a work-in-progress customized firmware for the Nintendo Switch.
+- [**3684**Star][2y] [JS] [samyk/evercookie](https://github.com/samyk/evercookie) Produces persistent, respawning "super" cookies in a browser, abusing over a dozen techniques. Its goal is to identify users after they've removed standard cookies and other privacy data such as Flash cookies (LSOs), HTML5 storage, SilverLight storage, and others.
+- [**3682**Star][10d] [HTML] [hamukazu/lets-get-arrested](https://github.com/hamukazu/lets-get-arrested) This project is intended to protest against the police in Japan
+- [**3670**Star][2d] [JS] [lesspass/lesspass](https://github.com/lesspass/lesspass)
+- [**3668**Star][8d] [C#] [0xd4d/de4dot](https://github.com/0xd4d/de4dot) .NET deobfuscator and unpacker.
+- [**3667**Star][1y] [Py] [misterch0c/shadowbroker](https://github.com/misterch0c/shadowbroker) The Shadow Brokers "Lost In Translation" leak
+- [**3666**Star][5m] [C] [secwiki/windows-kernel-exploits](https://github.com/secwiki/windows-kernel-exploits) windows-kernel-exploits Windows平台提权漏洞集合
+- [**3663**Star][4m] [C] [facebook/fishhook](https://github.com/facebook/fishhook) A library that enables dynamically rebinding symbols in Mach-O binaries running on iOS.
+- [**3652**Star][4d] [acl4ssr/acl4ssr](https://github.com/acl4ssr/acl4ssr) SSR 去广告ACL规则/SS完整GFWList规则,Telegram频道订阅地址
+- [**3647**Star][2y] [Py] [qiyeboy/ipproxypool](https://github.com/qiyeboy/ipproxypool) IPProxyPool代理池项目,提供代理ip
+- [**3622**Star][6d] [TS] [javascript-obfuscator/javascript-obfuscator](https://github.com/javascript-obfuscator/javascript-obfuscator) A powerful obfuscator for JavaScript and Node.js
+- [**3621**Star][7d] [HTML] [consensys/smart-contract-best-practices](https://github.com/consensys/smart-contract-best-practices) A guide to smart contract security best practices
+- [**3619**Star][5y] [C#] [brandonlw/psychson](https://github.com/brandonlw/Psychson) Phison 2251-03 (2303) Custom Firmware & Existing Firmware Patches (BadUSB)
+- [**3611**Star][2m] [Java] [ffay/lanproxy](https://github.com/ffay/lanproxy) lanproxy是一个将局域网个人电脑、服务器代理到公网的内网穿透工具,支持tcp流量转发,可支持任何tcp上层协议(访问内网网站、本地支付接口调试、ssh访问、远程桌面...)。目前市面上提供类似服务的有花生壳、TeamView、GoToMyCloud等等,但要使用第三方的公网服务器就必须为第三方付费,并且这些服务都有各种各样的限制,此外,由于数据包会流经第三方,因此对数据安全也是一大隐患。技术交流QQ群 946273429
+- [**3604**Star][8d] [PS] [bloodhoundad/bloodhound](https://github.com/BloodHoundAD/BloodHound) a single page Javascript web application, uses graph theory to reveal the hidden and often unintended relationships within an Active Directory environment.
+- [**3598**Star][26d] [C++] [anbox/anbox](https://github.com/anbox/anbox) a container-based approach to boot a full Android system on a regular GNU/Linux system
- [**3597**Star][1y] [C#] [nummer/destroy-windows-10-spying](https://github.com/nummer/destroy-windows-10-spying) Destroy Windows Spying tool
-- [**3594**Star][2m] [Java] [ffay/lanproxy](https://github.com/ffay/lanproxy) lanproxy是一个将局域网个人电脑、服务器代理到公网的内网穿透工具,支持tcp流量转发,可支持任何tcp上层协议(访问内网网站、本地支付接口调试、ssh访问、远程桌面...)。目前市面上提供类似服务的有花生壳、TeamView、GoToMyCloud等等,但要使用第三方的公网服务器就必须为第三方付费,并且这些服务都有各种各样的限制,此外,由于数据包会流经第三方,因此对数据安全也是一大隐患。技术交流QQ群 946273429
-- [**3591**Star][3y] [Perl] [x0rz/eqgrp](https://github.com/x0rz/eqgrp) Decrypted content of eqgrp-auction-file.tar.xz
-- [**3587**Star][2m] [PowerShell] [bloodhoundad/bloodhound](https://github.com/BloodHoundAD/BloodHound) a single page Javascript web application, uses graph theory to reveal the hidden and often unintended relationships within an Active Directory environment.
-- [**3578**Star][24d] [C++] [anbox/anbox](https://github.com/anbox/anbox) a container-based approach to boot a full Android system on a regular GNU/Linux system
-- [**3565**Star][7d] [Shell] [drwetter/testssl.sh](https://github.com/drwetter/testssl.sh) Testing TLS/SSL encryption anywhere on any port
-- [**3560**Star][17d] [C] [nmap/nmap](https://github.com/nmap/nmap) Nmap - the Network Mapper. Github mirror of official SVN repository.
-- [**3544**Star][6y] [R] [johnmyleswhite/ml_for_hackers](https://github.com/johnmyleswhite/ml_for_hackers) Code accompanying the book "Machine Learning for Hackers"
+- [**3595**Star][3y] [Perl] [x0rz/eqgrp](https://github.com/x0rz/eqgrp) Decrypted content of eqgrp-auction-file.tar.xz
+- [**3583**Star][3d] [Shell] [drwetter/testssl.sh](https://github.com/drwetter/testssl.sh) Testing TLS/SSL encryption anywhere on any port
+- [**3580**Star][5d] [C] [nmap/nmap](https://github.com/nmap/nmap) Nmap - the Network Mapper. Github mirror of official SVN repository.
+- [**3562**Star][5d] [Pascal] [cheat-engine/cheat-engine](https://github.com/cheat-engine/cheat-engine) Cheat Engine. A development environment focused on modding
+- [**3542**Star][6y] [R] [johnmyleswhite/ml_for_hackers](https://github.com/johnmyleswhite/ml_for_hackers) Code accompanying the book "Machine Learning for Hackers"
+- [**3540**Star][6d] [blacckhathaceekr/pentesting-bible](https://github.com/blacckhathaceekr/pentesting-bible) links reaches 10000 links & 10000 pdf files .Learn Ethical Hacking and penetration testing .hundreds of ethical hacking & penetration testing & red team & cyber security & computer science resources.
- [**3538**Star][4m] [Shell] [chengr28/revokechinacerts](https://github.com/chengr28/revokechinacerts) Revoke Chinese certificates.
-- [**3525**Star][8d] [Pascal] [cheat-engine/cheat-engine](https://github.com/cheat-engine/cheat-engine) Cheat Engine. A development environment focused on modding
-- [**3503**Star][14d] [JS] [aol/moloch](https://github.com/aol/moloch) large scale, full packet capturing, indexing, and database system.
-- [**3494**Star][8m] [Go] [fanpei91/torsniff](https://github.com/fanpei91/torsniff) torsniff - a sniffer that sniffs torrents from BitTorrent network
-- [**3494**Star][8m] [Go] [fanpei91/torsniff](https://github.com/fanpei91/torsniff) a sniffer that sniffs torrents from BitTorrent network
-- [**3493**Star][3y] [C] [hak5darren/usb-rubber-ducky](https://github.com/hak5darren/usb-rubber-ducky)
-- [**3482**Star][9m] [C] [rpisec/mbe](https://github.com/rpisec/mbe) Course materials for Modern Binary Exploitation by RPISEC
-- [**3481**Star][13d] [blacckhathaceekr/pentesting-bible](https://github.com/blacckhathaceekr/pentesting-bible) links reaches 10000 links & 10000 pdf files .Learn Ethical Hacking and penetration testing .hundreds of ethical hacking & penetration testing & red team & cyber security & computer science resources.
-- [**3468**Star][5m] [PHP] [hanc00l/wooyun_public](https://github.com/hanc00l/wooyun_public) This repo is archived. Thanks for wooyun! 乌云公开漏洞、知识库爬虫和搜索 crawl and search for wooyun.org public bug(vulnerability) and drops
-- [**3464**Star][15d] [C] [cyan4973/xxhash](https://github.com/cyan4973/xxhash) Extremely fast non-cryptographic hash algorithm
-- [**3436**Star][7d] [C] [shellphish/how2heap](https://github.com/shellphish/how2heap) A repository for learning various heap exploitation techniques.
-- [**3431**Star][13d] [Java] [meituan-dianping/robust](https://github.com/meituan-dianping/robust) Robust is an Android HotFix solution with high compatibility and high stability. Robust can fix bugs immediately without a reboot.
-- [**3421**Star][13d] [Perl] [sullo/nikto](https://github.com/sullo/nikto) Nikto web server scanner
-- [**3412**Star][25d] [icodesign/potatso](https://github.com/icodesign/Potatso) Potatso is an iOS client that implements different proxies with the leverage of NetworkExtension framework in iOS 10+.
-- [**3392**Star][5m] [Go] [jpillora/chisel](https://github.com/jpillora/chisel) A fast TCP tunnel over HTTP
-- [**3387**Star][2y] [shadowsocksrr/shadowsocks-rss](https://github.com/shadowsocksrr/shadowsocks-rss) ShadowsocksR update rss, SSR organization
-- [**3383**Star][22d] [PowerShell] [samratashok/nishang](https://github.com/samratashok/nishang) Offensive PowerShell for red team, penetration testing and offensive security.
-- [**3326**Star][13d] [Py] [google/grr](https://github.com/google/grr) remote live forensics for incident response
-- [**3325**Star][5m] [C++] [wangyu-/udp2raw-tunnel](https://github.com/wangyu-/udp2raw-tunnel) A Tunnel which Turns UDP Traffic into Encrypted UDP/FakeTCP/ICMP Traffic by using Raw Socket,helps you Bypass UDP FireWalls(or Unstable UDP Environment)
-- [**3325**Star][7d] [jivoi/awesome-ml-for-cybersecurity](https://github.com/jivoi/awesome-ml-for-cybersecurity) Awesome Machine Learning for Cyber Security
-- [**3317**Star][7d] [Py] [stamparm/maltrail](https://github.com/stamparm/maltrail) Malicious traffic detection system
-- [**3317**Star][2y] [scanate/ethlist](https://github.com/scanate/ethlist) The Comprehensive Ethereum Reading List
-- [**3316**Star][2m] [C] [screetsec/thefatrat](https://github.com/screetsec/thefatrat) Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV softw…
-- [**3282**Star][8d] [Smarty] [anankke/sspanel-uim](https://github.com/anankke/sspanel-uim) Across the Great Wall we can reach every corner in the world
-- [**3280**Star][2m] [Swift] [yagiz/bagel](https://github.com/yagiz/bagel) a little native network debugging tool for iOS
-- [**3280**Star][20d] [C] [vanhauser-thc/thc-hydra](https://github.com/vanhauser-thc/thc-hydra) hydra
-- [**3269**Star][27d] [C] [microsoft/windows-driver-samples](https://github.com/microsoft/windows-driver-samples) This repo contains driver samples prepared for use with Microsoft Visual Studio and the Windows Driver Kit (WDK). It contains both Universal Windows Driver and desktop-only driver samples.
-- [**3267**Star][3m] [C] [nbs-system/naxsi](https://github.com/nbs-system/naxsi) NAXSI is an open-source, high performance, low rules maintenance WAF for NGINX
-- [**3266**Star][12d] [C] [virustotal/yara](https://github.com/virustotal/yara) The pattern matching swiss knife
-- [**3258**Star][2m] [Py] [volatilityfoundation/volatility](https://github.com/volatilityfoundation/volatility) An advanced memory forensics framework
-- [**3258**Star][5y] [C++] [google/lmctfy](https://github.com/google/lmctfy) lmctfy is the open source version of Google’s container stack, which provides Linux application containers.
-- [**3255**Star][7d] [C] [mikebrady/shairport-sync](https://github.com/mikebrady/shairport-sync) AirPlay audio player. Shairport Sync adds multi-room capability with Audio Synchronisation
-- [**3253**Star][7m] [JS] [sindresorhus/speed-test](https://github.com/sindresorhus/speed-test) Test your internet connection speed and ping using speedtest.net from the CLI
-- [**3234**Star][8d] [Java] [oldmanpushcart/greys-anatomy](https://github.com/oldmanpushcart/greys-anatomy) Java诊断工具
+- [**3533**Star][14d] [C] [tencent/tencentos-tiny](https://github.com/tencent/tencentos-tiny) 腾讯物联网终端操作系统
+- [**3514**Star][3y] [C] [hak5darren/usb-rubber-ducky](https://github.com/hak5darren/usb-rubber-ducky)
+- [**3510**Star][2d] [JS] [aol/moloch](https://github.com/aol/moloch) large scale, full packet capturing, indexing, and database system.
+- [**3501**Star][8m] [Go] [fanpei91/torsniff](https://github.com/fanpei91/torsniff) torsniff - a sniffer that sniffs torrents from BitTorrent network
+- [**3501**Star][8m] [Go] [fanpei91/torsniff](https://github.com/fanpei91/torsniff) a sniffer that sniffs torrents from BitTorrent network
+- [**3493**Star][9m] [C] [rpisec/mbe](https://github.com/rpisec/mbe) Course materials for Modern Binary Exploitation by RPISEC
+- [**3485**Star][5m] [PHP] [hanc00l/wooyun_public](https://github.com/hanc00l/wooyun_public) This repo is archived. Thanks for wooyun! 乌云公开漏洞、知识库爬虫和搜索 crawl and search for wooyun.org public bug(vulnerability) and drops
+- [**3481**Star][8d] [C] [cyan4973/xxhash](https://github.com/cyan4973/xxhash) Extremely fast non-cryptographic hash algorithm
+- [**3471**Star][2m] [C++] [trojan-gfw/trojan](https://github.com/trojan-gfw/trojan) An unidentifiable mechanism that helps you bypass GFW.
+- [**3442**Star][9d] [C] [shellphish/how2heap](https://github.com/shellphish/how2heap) A repository for learning various heap exploitation techniques.
+- [**3442**Star][8d] [Java] [meituan-dianping/robust](https://github.com/meituan-dianping/robust) Robust is an Android HotFix solution with high compatibility and high stability. Robust can fix bugs immediately without a reboot.
+- [**3441**Star][15d] [Perl] [sullo/nikto](https://github.com/sullo/nikto) Nikto web server scanner
+- [**3419**Star][9d] [C] [mikebrady/shairport-sync](https://github.com/mikebrady/shairport-sync) AirPlay audio player. Shairport Sync adds multi-room capability with Audio Synchronisation
+- [**3412**Star][27d] [icodesign/potatso](https://github.com/icodesign/Potatso) Potatso is an iOS client that implements different proxies with the leverage of NetworkExtension framework in iOS 10+.
+- [**3410**Star][5m] [Go] [jpillora/chisel](https://github.com/jpillora/chisel) A fast TCP tunnel over HTTP
+- [**3408**Star][24d] [PS] [samratashok/nishang](https://github.com/samratashok/nishang) Offensive PowerShell for red team, penetration testing and offensive security.
+- [**3397**Star][2y] [shadowsocksrr/shadowsocks-rss](https://github.com/shadowsocksrr/shadowsocks-rss) ShadowsocksR update rss, SSR organization
+- [**3344**Star][2d] [jivoi/awesome-ml-for-cybersecurity](https://github.com/jivoi/awesome-ml-for-cybersecurity) Awesome Machine Learning for Cyber Security
+- [**3343**Star][6d] [C] [screetsec/thefatrat](https://github.com/screetsec/thefatrat) Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV softw…
+- [**3340**Star][5m] [C++] [wangyu-/udp2raw-tunnel](https://github.com/wangyu-/udp2raw-tunnel) A Tunnel which Turns UDP Traffic into Encrypted UDP/FakeTCP/ICMP Traffic by using Raw Socket,helps you Bypass UDP FireWalls(or Unstable UDP Environment)
+- [**3334**Star][10d] [Smarty] [anankke/sspanel-uim](https://github.com/anankke/sspanel-uim) Across the Great Wall we can reach every corner in the world
+- [**3331**Star][15d] [Py] [google/grr](https://github.com/google/grr) remote live forensics for incident response
+- [**3330**Star][2d] [Py] [stamparm/maltrail](https://github.com/stamparm/maltrail) Malicious traffic detection system
+- [**3319**Star][2y] [scanate/ethlist](https://github.com/scanate/ethlist) The Comprehensive Ethereum Reading List
+- [**3303**Star][22d] [C] [vanhauser-thc/thc-hydra](https://github.com/vanhauser-thc/thc-hydra) hydra
+- [**3301**Star][2m] [Swift] [yagiz/bagel](https://github.com/yagiz/bagel) a little native network debugging tool for iOS
+- [**3298**Star][9d] [C++] [fireice-uk/xmr-stak](https://github.com/fireice-uk/xmr-stak) Free Monero RandomX Miner and unified CryptoNight miner
+- [**3285**Star][7d] [C] [microsoft/windows-driver-samples](https://github.com/microsoft/windows-driver-samples) This repo contains driver samples prepared for use with Microsoft Visual Studio and the Windows Driver Kit (WDK). It contains both Universal Windows Driver and desktop-only driver samples.
+- [**3278**Star][6d] [C] [virustotal/yara](https://github.com/virustotal/yara) The pattern matching swiss knife
+- [**3276**Star][3m] [C] [nbs-system/naxsi](https://github.com/nbs-system/naxsi) NAXSI is an open-source, high performance, low rules maintenance WAF for NGINX
+- [**3263**Star][10d] [Java] [oldmanpushcart/greys-anatomy](https://github.com/oldmanpushcart/greys-anatomy) Java诊断工具
+- [**3262**Star][2m] [Py] [volatilityfoundation/volatility](https://github.com/volatilityfoundation/volatility) An advanced memory forensics framework
+- [**3260**Star][8d] [Shell] [toniblyx/my-arsenal-of-aws-security-tools](https://github.com/toniblyx/my-arsenal-of-aws-security-tools) List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.
+- [**3260**Star][5y] [C++] [google/lmctfy](https://github.com/google/lmctfy) lmctfy is the open source version of Google’s container stack, which provides Linux application containers.
+- [**3259**Star][7m] [JS] [sindresorhus/speed-test](https://github.com/sindresorhus/speed-test) Test your internet connection speed and ping using speedtest.net from the CLI
+- [**3255**Star][4d] [ObjC] [objective-see/lulu](https://github.com/objective-see/lulu) LuLu is the free macOS firewall
+- [**3247**Star][29d] [JS] [koenkk/zigbee2mqtt](https://github.com/koenkk/zigbee2mqtt) Zigbee
+- [**3242**Star][16d] [Py] [laramies/theharvester](https://github.com/laramies/theharvester) E-mails, subdomains and names Harvester - OSINT
+- [**3238**Star][2d] [TS] [jigsaw-code/outline-server](https://github.com/jigsaw-code/outline-server) Outline Manager, developed by Jigsaw. The Outline Manager application creates and manages Outline servers, powered by Shadowsocks. It uses the Electron framework to offer support for Windows, macOS and Linux.
+- [**3236**Star][5m] [Go] [meshbird/meshbird](https://github.com/meshbird/meshbird) cloud-native multi-region multi-cloud decentralized private networking
- [**3234**Star][2y] [CSS] [jbtronics/crookedstylesheets](https://github.com/jbtronics/crookedstylesheets) Webpage tracking only using CSS (and no JS)
-- [**3232**Star][5m] [Go] [meshbird/meshbird](https://github.com/meshbird/meshbird) cloud-native multi-region multi-cloud decentralized private networking
-- [**3230**Star][2m] [Objective-C] [objective-see/lulu](https://github.com/objective-see/lulu) LuLu is the free macOS firewall
-- [**3225**Star][18d] [Shell] [toniblyx/my-arsenal-of-aws-security-tools](https://github.com/toniblyx/my-arsenal-of-aws-security-tools) List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.
-- [**3216**Star][14d] [Py] [laramies/theharvester](https://github.com/laramies/theharvester) E-mails, subdomains and names Harvester - OSINT
-- [**3215**Star][27d] [JS] [koenkk/zigbee2mqtt](https://github.com/koenkk/zigbee2mqtt) Zigbee
-- [**3214**Star][4y] [C] [shadowsocks/chinadns](https://github.com/shadowsocks/chinadns) Protect yourself against DNS poisoning in China.
-- [**3214**Star][2m] [Go] [dvyukov/go-fuzz](https://github.com/dvyukov/go-fuzz) Randomized testing for Go
-- [**3210**Star][11d] [C] [tmate-io/tmate](https://github.com/tmate-io/tmate) Instant Terminal Sharing
-- [**3210**Star][1m] [TypeScript] [google/incremental-dom](https://github.com/google/incremental-dom) An in-place DOM diffing library
-- [**3209**Star][8d] [C] [betaflight/betaflight](https://github.com/betaflight/betaflight) Open Source Flight Controller Firmware
-- [**3205**Star][2m] [Shell] [gfw-breaker/ssr-accounts](https://github.com/gfw-breaker/ssr-accounts) 一键部署Shadowsocks服务;免费Shadowsocks账号分享;免费SS账号分享; 翻墙;无界,自由门,SquirrelVPN
-- [**3202**Star][4m] [Objective-C] [naituw/ipapatch](https://github.com/naituw/ipapatch) Patch iOS Apps, The Easy Way, Without Jailbreak.
-- [**3201**Star][7m] [HTML] [leizongmin/js-xss](https://github.com/leizongmin/js-xss) Sanitize untrusted HTML (to prevent XSS) with a configuration specified by a Whitelist
-- [**3184**Star][7d] [Go] [mozilla/sops](https://github.com/mozilla/sops) Simple and flexible tool for managing secrets
-- [**3182**Star][3m] [C] [yarrick/iodine](https://github.com/yarrick/iodine) Official git repo for iodine dns tunnel
-- [**3182**Star][1y] [Py] [kootenpv/whereami](https://github.com/kootenpv/whereami) Uses WiFi signals and machine learning (sklearn's RandomForest) to predict where you are.
-- [**3180**Star][13d] [Py] [maurosoria/dirsearch](https://github.com/maurosoria/dirsearch) Web path scanner
-- [**3174**Star][8d] [Rich Text Format] [the-art-of-hacking/h4cker](https://github.com/The-Art-of-Hacking/h4cker) 资源收集:hacking、渗透、数字取证、事件响应、漏洞研究、漏洞开发、逆向
-- [**3168**Star][1m] [C++] [spiderlabs/modsecurity](https://github.com/spiderlabs/modsecurity) ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analys…
-- [**3164**Star][6m] [hslatman/awesome-threat-intelligence](https://github.com/hslatman/awesome-threat-intelligence) A curated list of Awesome Threat Intelligence resources
-- [**3163**Star][24d] [C] [magnumripper/johntheripper](https://github.com/magnumripper/johntheripper) This is the official repo for John the Ripper, "Jumbo" version. The "bleeding-jumbo" branch is based on 1.9.0-Jumbo-1 which was released on May 14, 2019. An import of the "core" version of john this jumbo was based on (or newer) is found in the "master" branch (CVS:
-- [**3156**Star][1m] [C] [valdikss/goodbyedpi](https://github.com/valdikss/goodbyedpi) GoodbyeDPI—Passive Deep Packet Inspection blocker and Active DPI circumvention utility (for Windows)
-- [**3145**Star][1y] [Shell] [toyodadoubi/doubi](https://github.com/toyodadoubi/doubi) 一个逗比写的各种逗比脚本~
-- [**3128**Star][2y] [shadowsocksr-backup/shadowsocksr-android](https://github.com/shadowsocksr-backup/shadowsocksr-android) A ShadowsocksR client for Android
-- [**3120**Star][10d] [C] [meetecho/janus-gateway](https://github.com/meetecho/janus-gateway) Janus WebRTC Server
-- [**3113**Star][28d] [CSS] [readthedocs/sphinx_rtd_theme](https://github.com/readthedocs/sphinx_rtd_theme) Sphinx theme for readthedocs.org
-- [**3112**Star][2m] [C++] [trojan-gfw/trojan](https://github.com/trojan-gfw/trojan) An unidentifiable mechanism that helps you bypass GFW.
-- [**3109**Star][7d] [Shell] [speed47/spectre-meltdown-checker](https://github.com/speed47/spectre-meltdown-checker) Spectre, Meltdown, Foreshadow, Fallout, RIDL, ZombieLoad vulnerability/mitigation checker for Linux & BSD
-- [**3109**Star][2m] [PowerShell] [fireeye/commando-vm](https://github.com/fireeye/commando-vm) Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@fireeye.com
-- [**3108**Star][4m] [C++] [px4/firmware](https://github.com/px4/firmware) PX4 Autopilot Software
-- [**3106**Star][7d] [C] [qemu/qemu](https://github.com/qemu/qemu) Official QEMU mirror. Please see
-- [**3103**Star][16d] [Shell] [1n3/sn1per](https://github.com/1n3/sn1per) Automated pentest framework for offensive security experts
-- [**3102**Star][7d] [JS] [duo-labs/cloudmapper](https://github.com/duo-labs/cloudmapper) CloudMapper helps you analyze your Amazon Web Services (AWS) environments.
-- [**3096**Star][28d] [meirwah/awesome-incident-response](https://github.com/meirwah/awesome-incident-response) A curated list of tools for incident response
-- [**3094**Star][2m] [Py] [byt3bl33d3r/crackmapexec](https://github.com/byt3bl33d3r/crackmapexec) A swiss army knife for pentesting networks
-- [**3091**Star][1m] [Java] [deathmarine/luyten](https://github.com/deathmarine/luyten) An Open Source Java Decompiler Gui for Procyon
-- [**3085**Star][10d] [Shell] [trimstray/htrace.sh](https://github.com/trimstray/htrace.sh) My simple Swiss Army knife for http/https troubleshooting and profiling.
-- [**3084**Star][11d] [Py] [tribler/tribler](https://github.com/tribler/tribler) Privacy enhanced BitTorrent client with P2P content discovery
-- [**3084**Star][8d] [Shell] [softwaredownload/openwrt-fanqiang](https://github.com/softwaredownload/openwrt-fanqiang) 最好的路由器翻墙、科学上网教程—OpenWrt—shadowsocks
-- [**3069**Star][9m] [JS] [jipegit/osxauditor](https://github.com/jipegit/osxauditor) OS X Auditor is a free Mac OS X computer forensics tool
-- [**3066**Star][3m] [C] [zmap/zmap](https://github.com/zmap/zmap) ZMap is a fast single packet network scanner designed for Internet-wide network surveys.
-- [**3065**Star][9d] [Go] [tencent/bk-cmdb](https://github.com/tencent/bk-cmdb) 蓝鲸智云配置平台(BlueKing CMDB)
-- [**3062**Star][1y] [Swift] [zhuhaow/spechtlite](https://github.com/zhuhaow/spechtlite) A rule-based proxy for macOS
-- [**3061**Star][20d] [C] [unicorn-engine/unicorn](https://github.com/unicorn-engine/unicorn) Unicorn CPU emulator framework (ARM, AArch64, M68K, Mips, Sparc, X86)
-- [**3059**Star][1m] [Java] [calebfenton/simplify](https://github.com/calebfenton/simplify) Generic Android Deobfuscator
-- [**3058**Star][7m] [Go] [michenriksen/aquatone](https://github.com/michenriksen/aquatone) A Tool for Domain Flyovers
-- [**3046**Star][4m] [C++] [google/robotstxt](https://github.com/google/robotstxt) The repository contains Google's robots.txt parser and matcher as a C++ library (compliant to C++11).
-- [**3041**Star][2m] [JS] [valve/fingerprintjs](https://github.com/valve/fingerprintjs) Anonymous browser fingerprint
-- [**3039**Star][3m] [Py] [spiderlabs/responder](https://github.com/spiderlabs/responder) a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.
-- [**3007**Star][9m] [C] [secwiki/linux-kernel-exploits](https://github.com/secwiki/linux-kernel-exploits) linux-kernel-exploits Linux平台提权漏洞集合
-- [**2991**Star][1y] [PHP] [owner888/phpspider](https://github.com/owner888/phpspider) 《我用爬虫一天时间“偷了”知乎一百万用户,只为证明PHP是世界上最好的语言 》所使用的程序
-- [**2983**Star][2m] [Go] [gwuhaolin/lightsocks](https://github.com/gwuhaolin/lightsocks) lightweight network obfuscate proxy, based on socks5, to replace shadowsocks
-- [**2982**Star][7d] [Lua] [ntop/ntopng](https://github.com/ntop/ntopng) Web-based Traffic and Security Network Traffic Monitoring
-- [**2978**Star][7d] [Py] [guardicore/monkey](https://github.com/guardicore/monkey) Infection Monkey - An automated pentest tool
-- [**2962**Star][14d] [Objective-C] [google/santa](https://github.com/google/santa) A binary whitelisting/blacklisting system for macOS
-- [**2947**Star][27d] [Go] [cookiey/yearning](https://github.com/cookiey/yearning) A most popular sql audit platform for mysql
-- [**2937**Star][13d] [JS] [webgoat/webgoat](https://github.com/webgoat/webgoat) A deliberately insecure Web Application
-- [**2937**Star][2y] [phith0n/mind-map](https://github.com/phith0n/mind-map) 各种安全相关思维导图整理收集
-- [**2936**Star][1m] [Py] [andresriancho/w3af](https://github.com/andresriancho/w3af) web application attack and audit framework, the open source web vulnerability scanner.
-- [**2935**Star][19d] [Py] [cowrie/cowrie](https://github.com/cowrie/cowrie) Cowrie SSH/Telnet Honeypot
-- [**2930**Star][1y] [Py] [danmcinerney/wifijammer](https://github.com/danmcinerney/wifijammer) Continuously jam all wifi clients/routers
-- [**2930**Star][11m] [Shell] [91yun/serverspeeder](https://github.com/91yun/serverspeeder) 锐速破解版
-- [**2927**Star][7d] [Zeek] [zeek/zeek](https://github.com/zeek/zeek) Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.
-- [**2916**Star][15d] [Py] [twintproject/twint](https://github.com/twintproject/twint) An advanced Twitter scraping & OSINT tool written in Python that doesn't use Twitter's API, allowing you to scrape a user's followers, following, Tweets and more while evading most API limitations.
-- [**2912**Star][2m] [Dockerfile] [thinkdevelop/free-ss-ssr](https://github.com/thinkdevelop/free-ss-ssr) SS账号、SSR账号、V2Ray账号
-- [**2907**Star][21d] [Go] [securego/gosec](https://github.com/securego/gosec) Golang security checker
-- [**2897**Star][1y] [Py] [byt3bl33d3r/mitmf](https://github.com/byt3bl33d3r/mitmf) Framework for Man-In-The-Middle attacks
-- [**2895**Star][10d] [C] [libfuse/sshfs](https://github.com/libfuse/sshfs) A network filesystem client to connect to SSH servers
-- [**2892**Star][11d] [secfigo/awesome-fuzzing](https://github.com/secfigo/awesome-fuzzing) A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Development like root cause analysis.
-- [**2891**Star][20d] [Py] [trustedsec/ptf](https://github.com/trustedsec/ptf) a way for modular support for up-to-date tools.
-- [**2876**Star][7m] [C] [p-h-c/phc-winner-argon2](https://github.com/p-h-c/phc-winner-argon2) The password hash Argon2, winner of PHC
-- [**2874**Star][4y] [Objective-C] [maciekish/iresign](https://github.com/maciekish/iresign) iReSign allows iDevice app bundles (.ipa) files to be signed or resigned with a digital certificate from Apple for distribution. This tool is aimed at enterprises users, for enterprise deployment, when the person signing the app is different than the person(s) developing it.
-- [**2851**Star][10d] [JS] [evilsocket/pwnagotchi](https://github.com/evilsocket/pwnagotchi) Deep Reinforcement Learning instrumenting bettercap for WiFi pwning.
-- [**2850**Star][8d] [C] [lxc/lxc](https://github.com/lxc/lxc) LXC - Linux Containers
-- [**2840**Star][5m] [Py] [instantbox/instantbox](https://github.com/instantbox/instantbox) Get a clean, ready-to-go Linux box in seconds.
-- [**2838**Star][11d] [Objective-C] [facebook/idb](https://github.com/facebook/idb) idb is a flexible command line interface for automating iOS simulators and devices
-- [**2834**Star][8m] [C++] [wangyu-/udpspeeder](https://github.com/wangyu-/udpspeeder) A Tunnel which Improves your Network Quality on a High-latency Lossy Link by using Forward Error Correction,for All Traffics(TCP/UDP/ICMP)
-- [**2830**Star][9d] [HTML] [ctf-wiki/ctf-wiki](https://github.com/ctf-wiki/ctf-wiki) CTF Wiki Online. Come and join us, we need you!
-- [**2829**Star][21d] [C] [ossec/ossec-hids](https://github.com/ossec/ossec-hids) Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.
-- [**2825**Star][15d] [Py] [espressif/esptool](https://github.com/espressif/esptool) ESP8266 and ESP32 serial bootloader utility
-- [**2825**Star][8m] [Shell] [goreliu/wsl-terminal](https://github.com/goreliu/wsl-terminal) Terminal emulator for Windows Subsystem for Linux (WSL)
-- [**2823**Star][12d] [Go] [99designs/aws-vault](https://github.com/99designs/aws-vault) A vault for securely storing and accessing AWS credentials in development environments
-- [**2820**Star][1m] [Assembly] [cirosantilli/x86-bare-metal-examples](https://github.com/cirosantilli/x86-bare-metal-examples) Dozens of minimal operating systems to learn x86 system programming. Tested on Ubuntu 17.10 host in QEMU 2.10 and real hardware. Userland cheat at:
-- [**2819**Star][2y] [CSS] [maxchehab/css-keylogging](https://github.com/maxchehab/css-keylogging) Chrome extension and Express server that exploits keylogging abilities of CSS.
-- [**2815**Star][4m] [C] [juliocesarfort/public-pentesting-reports](https://github.com/juliocesarfort/public-pentesting-reports) Curated list of public penetration test reports released by several consulting firms and academic security groups
-- [**2810**Star][28d] [C] [tmk/tmk_keyboard](https://github.com/tmk/tmk_keyboard) Keyboard firmwares for Atmel AVR and Cortex-M
-- [**2810**Star][2m] [infosecn1nja/red-teaming-toolkit](https://github.com/infosecn1nja/red-teaming-toolkit) A collection of open source and commercial tools that aid in red team operations.
-- [**2805**Star][1m] [paulsec/awesome-sec-talks](https://github.com/paulsec/awesome-sec-talks) A collected list of awesome security talks
-- [**2804**Star][8m] [C#] [quasar/quasarrat](https://github.com/quasar/quasarrat) Remote Administration Tool for Windows
-- [**2802**Star][9m] [Py] [plasma-disassembler/plasma](https://github.com/plasma-disassembler/plasma) Plasma is an interactive disassembler for x86/ARM/MIPS. It can generates indented pseudo-code with colored syntax.
-- [**2787**Star][17d] [Py] [androguard/androguard](https://github.com/androguard/androguard) Reverse engineering, Malware and goodware analysis of Android applications ... and more (ninja !)
-- [**2783**Star][2y] [C] [seclab-ucr/intang](https://github.com/seclab-ucr/intang) research project for circumventing the "TCP reset attack" from the Great Firewall of China (GFW) by disrupting/desynchronizing the TCP Control Block (TCB) on the censorship devices.
-- [**2779**Star][28d] [Makefile] [shadowsocks/openwrt-shadowsocks](https://github.com/shadowsocks/openwrt-shadowsocks) Shadowsocks-libev for OpenWrt/LEDE
-- [**2776**Star][4y] [Lua] [loveshell/ngx_lua_waf](https://github.com/loveshell/ngx_lua_waf) ngx_lua_waf是一个基于lua-nginx-module(openresty)的web应用防火墙
-- [**2767**Star][2m] [Go] [kgretzky/evilginx2](https://github.com/kgretzky/evilginx2) Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication
-- [**2763**Star][1m] [JS] [trufflesuite/ganache-cli](https://github.com/trufflesuite/ganache-cli) Fast Ethereum RPC client for testing and development
-- [**2761**Star][10d] [Py] [jrohy/multi-v2ray](https://github.com/jrohy/multi-v2ray) v2ray easy delpoy & manage tool, support multiple user & protocol manage
-- [**2755**Star][7d] [C++] [qtox/qtox](https://github.com/qtox/qtox) qTox is a chat, voice, video, and file transfer IM client using the encrypted peer-to-peer Tox protocol.
-- [**2746**Star][8d] [C] [processhacker/processhacker](https://github.com/processhacker/processhacker) A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware.
-- [**2736**Star][8m] [Py] [p0cl4bs/wifi-pumpkin](https://github.com/P0cL4bs/WiFi-Pumpkin) Framework for Rogue Wi-Fi Access Point Attack
-- [**2736**Star][1y] [C] [vanhoefm/krackattacks-scripts](https://github.com/vanhoefm/krackattacks-scripts) test if clients or access points (APs) are affected by the KRACK attack against WPA2
-- [**2735**Star][7d] [TypeScript] [webhintio/hint](https://github.com/webhintio/hint)
-- [**2731**Star][22d] [Makefile] [theos/theos](https://github.com/theos/theos) A cross-platform suite of tools for building and deploying software for iOS and other platforms.
-- [**2727**Star][2m] [secwiki/sec-chart](https://github.com/secwiki/sec-chart) 安全思维导图集合
-- [**2727**Star][3y] [Py] [hephaest0s/usbkill](https://github.com/hephaest0s/usbkill) an anti-forensic kill-switch that waits for a change on your USB ports and then immediately shuts down your computer.
-- [**2726**Star][16d] [JS] [cyu/rack-cors](https://github.com/cyu/rack-cors) Rack Middleware for handling Cross-Origin Resource Sharing (CORS), which makes cross-origin AJAX possible.
-- [**2715**Star][21d] [JS] [s0md3v/awesomexss](https://github.com/s0md3v/AwesomeXSS) Awesome XSS stuff
-- [**2701**Star][3y] [Eagle] [samyk/magspoof](https://github.com/samyk/magspoof) A portable device that can spoof/emulate any magnetic stripe, credit card or hotel card "wirelessly", even on standard magstripe (non-NFC/RFID) readers. It can disable Chip&PIN and predict AMEX card numbers with 100% accuracy.
-- [**2700**Star][1m] [C] [taviso/loadlibrary](https://github.com/taviso/loadlibrary) Porting Windows Dynamic Link Libraries to Linux
-- [**2683**Star][4m] [Objective-C] [dantheman827/ios-app-signer](https://github.com/dantheman827/ios-app-signer) This is an app for OS X that can (re)sign apps and bundle them into ipa files that are ready to be installed on an iOS device.
-- [**2681**Star][1m] [Objective-C] [kjcracks/clutch](https://github.com/kjcracks/clutch) Fast iOS executable dumper
-- [**2665**Star][7d] [Go] [google/syzkaller](https://github.com/google/syzkaller) syzkaller is an unsupervised coverage-guided kernel fuzzer
-- [**2660**Star][7d] [PowerShell] [redcanaryco/atomic-red-team](https://github.com/redcanaryco/atomic-red-team) Small and highly portable detection tests based on MITRE's ATT&CK.
-- [**2660**Star][1y] [Py] [mame82/p4wnp1](https://github.com/mame82/p4wnp1) P4wnP1 is a highly customizable USB attack platform, based on a low cost Raspberry Pi Zero or Raspberry Pi Zero W.
-- [**2658**Star][12d] [Go] [aquasecurity/trivy](https://github.com/aquasecurity/trivy) A Simple and Comprehensive Vulnerability Scanner for Containers, Suitable for CI
-- [**2648**Star][3m] [Py] [drivendata/cookiecutter-data-science](https://github.com/drivendata/cookiecutter-data-science) A logical, reasonably standardized, but flexible project structure for doing and sharing data science work.
-- [**2643**Star][2m] [rmusser01/infosec_reference](https://github.com/rmusser01/infosec_reference) An Information Security Reference That Doesn't Suck
-- [**2638**Star][3m] [Java] [frohoff/ysoserial](https://github.com/frohoff/ysoserial) A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
-- [**2634**Star][2m] [xairy/linux-kernel-exploitation](https://github.com/xairy/linux-kernel-exploitation) A bunch of links related to Linux kernel exploitation
-- [**2633**Star][3m] [Java] [teevity/ice](https://github.com/teevity/ice) AWS Usage Tool
-- [**2633**Star][1y] [HTML] [chybeta/web-security-learning](https://github.com/chybeta/web-security-learning) Web-Security-Learning
-- [**2622**Star][15d] [JS] [bkimminich/juice-shop](https://github.com/bkimminich/juice-shop) OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
-- [**2619**Star][8m] [leandromoreira/linux-network-performance-parameters](https://github.com/leandromoreira/linux-network-performance-parameters) Learn where some of the network sysctl variables fit into the Linux/Kernel network flow
-- [**2610**Star][2m] [Swift] [zhuhaow/nekit](https://github.com/zhuhaow/nekit) A toolkit for Network Extension Framework
-- [**2601**Star][3y] [Ruby] [arachni/arachni](https://github.com/arachni/arachni) Web Application Security Scanner Framework
-- [**2600**Star][21d] [JS] [knownsec/kcon](https://github.com/knownsec/kcon) KCon is a famous Hacker Con powered by Knownsec Team.
-- [**2598**Star][8d] [JS] [popcorn-official/popcorn-desktop](https://github.com/popcorn-official/popcorn-desktop) Popcorn Time is a multi-platform, free software BitTorrent client that includes an integrated media player. Desktop ( Windows / Mac / Linux ) a Butter-Project Fork
-- [**2589**Star][19d] [C++] [fanout/pushpin](https://github.com/fanout/pushpin) Reverse proxy for realtime web services
-- [**2588**Star][1m] [pditommaso/awesome-pipeline](https://github.com/pditommaso/awesome-pipeline) A curated list of awesome pipeline toolkits inspired by Awesome Sysadmin
-- [**2570**Star][2m] [C] [huntergregal/mimipenguin](https://github.com/huntergregal/mimipenguin) dump 当前Linux用户的登录密码
-- [**2565**Star][1m] [Shell] [medicean/vulapps](https://github.com/medicean/vulapps) 快速搭建各种漏洞环境(Various vulnerability environment)
-- [**2564**Star][8y] [C] [id-software/quake](https://github.com/id-software/quake) Quake GPL Source Release
-- [**2563**Star][5m] [Java] [google/binnavi](https://github.com/google/binnavi) a binary analysis IDE that allows to inspect, navigate, edit and annotate control flow graphs and call graphs of disassembled code.
-- [**2555**Star][1m] [C] [esnet/iperf](https://github.com/esnet/iperf) A TCP, UDP, and SCTP network bandwidth measurement tool
-- [**2554**Star][2y] [evilsocket/bettercap](https://github.com/evilsocket/bettercap) DEPRECATED, bettercap developement moved here:
-- [**2547**Star][3m] [Py] [greenwolf/social_mapper](https://github.com/Greenwolf/social_mapper) 对多个社交网站的用户Profile图片进行大规模的人脸识别
-- [**2537**Star][6m] [C] [geohot/qira](https://github.com/geohot/qira) QEMU Interactive Runtime Analyser
+- [**3233**Star][9d] [Go] [mozilla/sops](https://github.com/mozilla/sops) Simple and flexible tool for managing secrets
+- [**3228**Star][2d] [C] [betaflight/betaflight](https://github.com/betaflight/betaflight) Open Source Flight Controller Firmware
+- [**3223**Star][2m] [Shell] [gfw-breaker/ssr-accounts](https://github.com/gfw-breaker/ssr-accounts) 一键部署Shadowsocks服务;免费Shadowsocks账号分享;免费SS账号分享; 翻墙;无界,自由门,SquirrelVPN
+- [**3222**Star][6d] [C] [tmate-io/tmate](https://github.com/tmate-io/tmate) Instant Terminal Sharing
+- [**3222**Star][6d] [Go] [dvyukov/go-fuzz](https://github.com/dvyukov/go-fuzz) Randomized testing for Go
+- [**3221**Star][4y] [C] [shadowsocks/chinadns](https://github.com/shadowsocks/chinadns) Protect yourself against DNS poisoning in China.
+- [**3213**Star][1m] [TS] [google/incremental-dom](https://github.com/google/incremental-dom) An in-place DOM diffing library
+- [**3210**Star][7m] [HTML] [leizongmin/js-xss](https://github.com/leizongmin/js-xss) Sanitize untrusted HTML (to prevent XSS) with a configuration specified by a Whitelist
+- [**3209**Star][5m] [ObjC] [naituw/ipapatch](https://github.com/naituw/ipapatch) Patch iOS Apps, The Easy Way, Without Jailbreak.
+- [**3208**Star][4m] [C] [yarrick/iodine](https://github.com/yarrick/iodine) Official git repo for iodine dns tunnel
+- [**3205**Star][15d] [Py] [maurosoria/dirsearch](https://github.com/maurosoria/dirsearch) Web path scanner
+- [**3202**Star][10d] [Rich Text Format] [the-art-of-hacking/h4cker](https://github.com/The-Art-of-Hacking/h4cker) 资源收集:hacking、渗透、数字取证、事件响应、漏洞研究、漏洞开发、逆向
+- [**3187**Star][1y] [Py] [kootenpv/whereami](https://github.com/kootenpv/whereami) Uses WiFi signals and machine learning (sklearn's RandomForest) to predict where you are.
+- [**3187**Star][6m] [hslatman/awesome-threat-intelligence](https://github.com/hslatman/awesome-threat-intelligence) A curated list of Awesome Threat Intelligence resources
+- [**3186**Star][1m] [C++] [spiderlabs/modsecurity](https://github.com/spiderlabs/modsecurity) ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analys…
+- [**3180**Star][27d] [C] [magnumripper/johntheripper](https://github.com/magnumripper/johntheripper) This is the official repo for John the Ripper, "Jumbo" version. The "bleeding-jumbo" branch is based on 1.9.0-Jumbo-1 which was released on May 14, 2019. An import of the "core" version of john this jumbo was based on (or newer) is found in the "master" branch (CVS:
+- [**3169**Star][1m] [C] [valdikss/goodbyedpi](https://github.com/valdikss/goodbyedpi) GoodbyeDPI—Passive Deep Packet Inspection blocker and Active DPI circumvention utility (for Windows)
+- [**3162**Star][1y] [Shell] [toyodadoubi/doubi](https://github.com/toyodadoubi/doubi) 一个逗比写的各种逗比脚本~
+- [**3159**Star][3d] [JS] [minbrowser/min](https://github.com/minbrowser/min) A fast, minimal browser that protects your privacy
+- [**3140**Star][6d] [C] [meetecho/janus-gateway](https://github.com/meetecho/janus-gateway) Janus WebRTC Server
+- [**3137**Star][2y] [shadowsocksr-backup/shadowsocksr-android](https://github.com/shadowsocksr-backup/shadowsocksr-android) A ShadowsocksR client for Android
+- [**3134**Star][2d] [C++] [px4/firmware](https://github.com/px4/firmware) PX4 Autopilot Software
+- [**3125**Star][3d] [Shell] [1n3/sn1per](https://github.com/1n3/sn1per) Automated pentest framework for offensive security experts
+- [**3123**Star][30d] [meirwah/awesome-incident-response](https://github.com/meirwah/awesome-incident-response) A curated list of tools for incident response
+- [**3123**Star][2m] [PS] [fireeye/commando-vm](https://github.com/fireeye/commando-vm) Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@fireeye.com
+- [**3122**Star][5d] [Go] [uber/kraken](https://github.com/uber/kraken) P2P Docker registry capable of distributing TBs of data in seconds
+- [**3121**Star][30d] [CSS] [readthedocs/sphinx_rtd_theme](https://github.com/readthedocs/sphinx_rtd_theme) Sphinx theme for readthedocs.org
+- [**3121**Star][8d] [JS] [duo-labs/cloudmapper](https://github.com/duo-labs/cloudmapper) CloudMapper helps you analyze your Amazon Web Services (AWS) environments.
+- [**3118**Star][3d] [Shell] [speed47/spectre-meltdown-checker](https://github.com/speed47/spectre-meltdown-checker) Spectre, Meltdown, Foreshadow, Fallout, RIDL, ZombieLoad vulnerability/mitigation checker for Linux & BSD
+- [**3113**Star][2d] [C] [qemu/qemu](https://github.com/qemu/qemu) Official QEMU mirror. Please see
+- [**3107**Star][2m] [Py] [byt3bl33d3r/crackmapexec](https://github.com/byt3bl33d3r/crackmapexec) A swiss army knife for pentesting networks
+- [**3106**Star][7d] [Java] [deathmarine/luyten](https://github.com/deathmarine/luyten) An Open Source Java Decompiler Gui for Procyon
+- [**3105**Star][10d] [Shell] [softwaredownload/openwrt-fanqiang](https://github.com/softwaredownload/openwrt-fanqiang) 最好的路由器翻墙、科学上网教程—OpenWrt—shadowsocks
+- [**3088**Star][9d] [Shell] [trimstray/htrace.sh](https://github.com/trimstray/htrace.sh) My simple Swiss Army knife for http/https troubleshooting and profiling.
+- [**3087**Star][3d] [Py] [tribler/tribler](https://github.com/tribler/tribler) Privacy enhanced BitTorrent client with P2P content discovery
+- [**3085**Star][11d] [Go] [tencent/bk-cmdb](https://github.com/tencent/bk-cmdb) 蓝鲸智云配置平台(BlueKing CMDB)
+- [**3084**Star][22d] [C] [unicorn-engine/unicorn](https://github.com/unicorn-engine/unicorn) Unicorn CPU emulator framework (ARM, AArch64, M68K, Mips, Sparc, X86)
+- [**3080**Star][3m] [C] [zmap/zmap](https://github.com/zmap/zmap) ZMap is a fast single packet network scanner designed for Internet-wide network surveys.
+- [**3076**Star][7m] [Go] [michenriksen/aquatone](https://github.com/michenriksen/aquatone) A Tool for Domain Flyovers
+- [**3071**Star][9m] [JS] [jipegit/osxauditor](https://github.com/jipegit/osxauditor) OS X Auditor is a free Mac OS X computer forensics tool
+- [**3065**Star][1m] [Java] [calebfenton/simplify](https://github.com/calebfenton/simplify) Generic Android Deobfuscator
+- [**3063**Star][1y] [Swift] [zhuhaow/spechtlite](https://github.com/zhuhaow/spechtlite) A rule-based proxy for macOS
+- [**3052**Star][2m] [JS] [valve/fingerprintjs](https://github.com/valve/fingerprintjs) Anonymous browser fingerprint
+- [**3049**Star][4m] [C++] [google/robotstxt](https://github.com/google/robotstxt) The repository contains Google's robots.txt parser and matcher as a C++ library (compliant to C++11).
+- [**3043**Star][3m] [Py] [spiderlabs/responder](https://github.com/spiderlabs/responder) a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.
+- [**3029**Star][2m] [Go] [gwuhaolin/lightsocks](https://github.com/gwuhaolin/lightsocks) lightweight network obfuscate proxy, based on socks5, to replace shadowsocks
+- [**3027**Star][9m] [C] [secwiki/linux-kernel-exploits](https://github.com/secwiki/linux-kernel-exploits) linux-kernel-exploits Linux平台提权漏洞集合
+- [**3001**Star][1y] [PHP] [owner888/phpspider](https://github.com/owner888/phpspider) 《我用爬虫一天时间“偷了”知乎一百万用户,只为证明PHP是世界上最好的语言 》所使用的程序
+- [**2991**Star][2d] [JS] [ntop/ntopng](https://github.com/ntop/ntopng) Web-based Traffic and Security Network Traffic Monitoring
+- [**2986**Star][7d] [Py] [guardicore/monkey](https://github.com/guardicore/monkey) Infection Monkey - An automated pentest tool
+- [**2969**Star][29d] [Go] [cookiey/yearning](https://github.com/cookiey/yearning) A most popular sql audit platform for mysql
+- [**2968**Star][2d] [ObjC] [google/santa](https://github.com/google/santa) A binary whitelisting/blacklisting system for macOS
+- [**2955**Star][4d] [Py] [twintproject/twint](https://github.com/twintproject/twint) An advanced Twitter scraping & OSINT tool written in Python that doesn't use Twitter's API, allowing you to scrape a user's followers, following, Tweets and more while evading most API limitations.
+- [**2955**Star][11d] [Go] [dominikh/go-tools](https://github.com/dominikh/go-tools) Staticcheck – a collection of static analysis tools for working with Go code
+- [**2949**Star][8d] [JS] [webgoat/webgoat](https://github.com/webgoat/webgoat) A deliberately insecure Web Application
+- [**2948**Star][2m] [Dockerfile] [thinkdevelop/free-ss-ssr](https://github.com/thinkdevelop/free-ss-ssr) SS账号、SSR账号、V2Ray账号
+- [**2947**Star][1m] [Py] [andresriancho/w3af](https://github.com/andresriancho/w3af) web application attack and audit framework, the open source web vulnerability scanner.
+- [**2945**Star][2y] [phith0n/mind-map](https://github.com/phith0n/mind-map) 各种安全相关思维导图整理收集
+- [**2942**Star][21d] [Py] [cowrie/cowrie](https://github.com/cowrie/cowrie) Cowrie SSH/Telnet Honeypot
+- [**2936**Star][1y] [Py] [danmcinerney/wifijammer](https://github.com/danmcinerney/wifijammer) Continuously jam all wifi clients/routers
+- [**2933**Star][2d] [Zeek] [zeek/zeek](https://github.com/zeek/zeek) Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.
+- [**2932**Star][11m] [Shell] [91yun/serverspeeder](https://github.com/91yun/serverspeeder) 锐速破解版
+- [**2920**Star][23d] [Go] [securego/gosec](https://github.com/securego/gosec) Golang security checker
+- [**2916**Star][2d] [JS] [evilsocket/pwnagotchi](https://github.com/evilsocket/pwnagotchi) Deep Reinforcement Learning instrumenting bettercap for WiFi pwning.
+- [**2915**Star][12d] [C] [libfuse/sshfs](https://github.com/libfuse/sshfs) A network filesystem client to connect to SSH servers
+- [**2909**Star][2d] [Py] [trustedsec/ptf](https://github.com/trustedsec/ptf) a way for modular support for up-to-date tools.
+- [**2901**Star][1y] [Py] [byt3bl33d3r/mitmf](https://github.com/byt3bl33d3r/mitmf) Framework for Man-In-The-Middle attacks
+- [**2897**Star][3d] [secfigo/awesome-fuzzing](https://github.com/secfigo/awesome-fuzzing) A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Development like root cause analysis.
+- [**2883**Star][7m] [C] [p-h-c/phc-winner-argon2](https://github.com/p-h-c/phc-winner-argon2) The password hash Argon2, winner of PHC
+- [**2877**Star][4y] [ObjC] [maciekish/iresign](https://github.com/maciekish/iresign) iReSign allows iDevice app bundles (.ipa) files to be signed or resigned with a digital certificate from Apple for distribution. This tool is aimed at enterprises users, for enterprise deployment, when the person signing the app is different than the person(s) developing it.
+- [**2858**Star][2d] [C] [lxc/lxc](https://github.com/lxc/lxc) LXC - Linux Containers
+- [**2850**Star][2d] [HTML] [ctf-wiki/ctf-wiki](https://github.com/ctf-wiki/ctf-wiki) CTF Wiki Online. Come and join us, we need you!
+- [**2850**Star][4d] [Go] [99designs/aws-vault](https://github.com/99designs/aws-vault) A vault for securely storing and accessing AWS credentials in development environments
+- [**2845**Star][2d] [ObjC] [facebook/idb](https://github.com/facebook/idb) idb is a flexible command line interface for automating iOS simulators and devices
+- [**2842**Star][5m] [Py] [instantbox/instantbox](https://github.com/instantbox/instantbox) Get a clean, ready-to-go Linux box in seconds.
+- [**2840**Star][23d] [C] [ossec/ossec-hids](https://github.com/ossec/ossec-hids) Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.
+- [**2840**Star][2m] [infosecn1nja/red-teaming-toolkit](https://github.com/infosecn1nja/red-teaming-toolkit) A collection of open source and commercial tools that aid in red team operations.
+- [**2839**Star][8m] [C++] [wangyu-/udpspeeder](https://github.com/wangyu-/udpspeeder) A Tunnel which Improves your Network Quality on a High-latency Lossy Link by using Forward Error Correction,for All Traffics(TCP/UDP/ICMP)
+- [**2837**Star][17d] [Py] [espressif/esptool](https://github.com/espressif/esptool) ESP8266 and ESP32 serial bootloader utility
+- [**2834**Star][8m] [Shell] [goreliu/wsl-terminal](https://github.com/goreliu/wsl-terminal) Terminal emulator for Windows Subsystem for Linux (WSL)
+- [**2829**Star][4m] [C] [juliocesarfort/public-pentesting-reports](https://github.com/juliocesarfort/public-pentesting-reports) Curated list of public penetration test reports released by several consulting firms and academic security groups
+- [**2829**Star][1m] [Assembly] [cirosantilli/x86-bare-metal-examples](https://github.com/cirosantilli/x86-bare-metal-examples) Dozens of minimal operating systems to learn x86 system programming. Tested on Ubuntu 17.10 host in QEMU 2.10 and real hardware. Userland cheat at:
+- [**2823**Star][2y] [CSS] [maxchehab/css-keylogging](https://github.com/maxchehab/css-keylogging) Chrome extension and Express server that exploits keylogging abilities of CSS.
+- [**2820**Star][7d] [C] [tmk/tmk_keyboard](https://github.com/tmk/tmk_keyboard) Keyboard firmwares for Atmel AVR and Cortex-M
+- [**2814**Star][8m] [C#] [quasar/quasarrat](https://github.com/quasar/quasarrat) Remote Administration Tool for Windows
+- [**2814**Star][5d] [Py] [jrohy/multi-v2ray](https://github.com/jrohy/multi-v2ray) v2ray easy delpoy & manage tool, support multiple user & protocol manage
+- [**2808**Star][2m] [paulsec/awesome-sec-talks](https://github.com/paulsec/awesome-sec-talks) A collected list of awesome security talks
+- [**2803**Star][9m] [Py] [plasma-disassembler/plasma](https://github.com/plasma-disassembler/plasma) Plasma is an interactive disassembler for x86/ARM/MIPS. It can generates indented pseudo-code with colored syntax.
+- [**2798**Star][19d] [Py] [androguard/androguard](https://github.com/androguard/androguard) Reverse engineering, Malware and goodware analysis of Android applications ... and more (ninja !)
+- [**2793**Star][6d] [C] [klange/toaruos](https://github.com/klange/toaruos) A completely-from-scratch hobby operating system: bootloader, kernel, drivers, C library, and userspace including a composited graphical UI, dynamic linker, syntax-highlighting text editor, network stack, etc.
+- [**2793**Star][2m] [Go] [kgretzky/evilginx2](https://github.com/kgretzky/evilginx2) Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication
+- [**2791**Star][7d] [C++] [xmrig/xmrig](https://github.com/xmrig/xmrig) xmrig: 门罗币挖矿代码 CPU 版
+- [**2789**Star][4y] [Lua] [loveshell/ngx_lua_waf](https://github.com/loveshell/ngx_lua_waf) ngx_lua_waf是一个基于lua-nginx-module(openresty)的web应用防火墙
+- [**2783**Star][30d] [Makefile] [shadowsocks/openwrt-shadowsocks](https://github.com/shadowsocks/openwrt-shadowsocks) Shadowsocks-libev for OpenWrt/LEDE
+- [**2782**Star][2y] [C] [seclab-ucr/intang](https://github.com/seclab-ucr/intang) research project for circumventing the "TCP reset attack" from the Great Firewall of China (GFW) by disrupting/desynchronizing the TCP Control Block (TCB) on the censorship devices.
+- [**2777**Star][9d] [C++] [qtox/qtox](https://github.com/qtox/qtox) qTox is a chat, voice, video, and file transfer IM client using the encrypted peer-to-peer Tox protocol.
+- [**2769**Star][4d] [C] [processhacker/processhacker](https://github.com/processhacker/processhacker) A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware.
+- [**2766**Star][1m] [JS] [trufflesuite/ganache-cli](https://github.com/trufflesuite/ganache-cli) Fast Ethereum RPC client for testing and development
+- [**2756**Star][2m] [secwiki/sec-chart](https://github.com/secwiki/sec-chart) 安全思维导图集合
+- [**2742**Star][5d] [TS] [webhintio/hint](https://github.com/webhintio/hint)
+- [**2742**Star][24d] [Makefile] [theos/theos](https://github.com/theos/theos) A cross-platform suite of tools for building and deploying software for iOS and other platforms.
+- [**2741**Star][8m] [Py] [p0cl4bs/wifi-pumpkin](https://github.com/P0cL4bs/WiFi-Pumpkin) Framework for Rogue Wi-Fi Access Point Attack
+- [**2739**Star][23d] [JS] [s0md3v/awesomexss](https://github.com/s0md3v/AwesomeXSS) Awesome XSS stuff
+- [**2737**Star][1y] [C] [vanhoefm/krackattacks-scripts](https://github.com/vanhoefm/krackattacks-scripts) test if clients or access points (APs) are affected by the KRACK attack against WPA2
+- [**2735**Star][18d] [JS] [cyu/rack-cors](https://github.com/cyu/rack-cors) Rack Middleware for handling Cross-Origin Resource Sharing (CORS), which makes cross-origin AJAX possible.
+- [**2730**Star][3y] [Py] [hephaest0s/usbkill](https://github.com/hephaest0s/usbkill) an anti-forensic kill-switch that waits for a change on your USB ports and then immediately shuts down your computer.
+- [**2717**Star][2d] [PS] [redcanaryco/atomic-red-team](https://github.com/redcanaryco/atomic-red-team) Small and highly portable detection tests based on MITRE's ATT&CK.
+- [**2713**Star][1m] [C] [taviso/loadlibrary](https://github.com/taviso/loadlibrary) Porting Windows Dynamic Link Libraries to Linux
+- [**2703**Star][3y] [Eagle] [samyk/magspoof](https://github.com/samyk/magspoof) A portable device that can spoof/emulate any magnetic stripe, credit card or hotel card "wirelessly", even on standard magstripe (non-NFC/RFID) readers. It can disable Chip&PIN and predict AMEX card numbers with 100% accuracy.
+- [**2701**Star][3d] [Go] [aquasecurity/trivy](https://github.com/aquasecurity/trivy) A Simple and Comprehensive Vulnerability Scanner for Containers, Suitable for CI
+- [**2698**Star][7d] [ObjC] [dantheman827/ios-app-signer](https://github.com/dantheman827/ios-app-signer) This is an app for OS X that can (re)sign apps and bundle them into ipa files that are ready to be installed on an iOS device.
+- [**2690**Star][1m] [ObjC] [kjcracks/clutch](https://github.com/kjcracks/clutch) Fast iOS executable dumper
+- [**2682**Star][22d] [Go] [google/syzkaller](https://github.com/google/syzkaller) syzkaller is an unsupervised coverage-guided kernel fuzzer
+- [**2681**Star][1y] [Py] [mame82/p4wnp1](https://github.com/mame82/p4wnp1) P4wnP1 is a highly customizable USB attack platform, based on a low cost Raspberry Pi Zero or Raspberry Pi Zero W.
+- [**2674**Star][3m] [Py] [drivendata/cookiecutter-data-science](https://github.com/drivendata/cookiecutter-data-science) A logical, reasonably standardized, but flexible project structure for doing and sharing data science work.
+- [**2662**Star][2m] [rmusser01/infosec_reference](https://github.com/rmusser01/infosec_reference) An Information Security Reference That Doesn't Suck
+- [**2654**Star][17d] [JS] [bkimminich/juice-shop](https://github.com/bkimminich/juice-shop) OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
+- [**2652**Star][3m] [Java] [frohoff/ysoserial](https://github.com/frohoff/ysoserial) A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
+- [**2645**Star][2m] [xairy/linux-kernel-exploitation](https://github.com/xairy/linux-kernel-exploitation) A bunch of links related to Linux kernel exploitation
+- [**2645**Star][1y] [HTML] [chybeta/web-security-learning](https://github.com/chybeta/web-security-learning) Web-Security-Learning
+- [**2641**Star][1y] [C] [ckolivas/cgminer](https://github.com/ckolivas/cgminer) ASIC and FPGA miner in c for bitcoin
+- [**2640**Star][2d] [Go] [slackhq/nebula](https://github.com/slackhq/nebula) A scalable overlay networking tool with a focus on performance, simplicity and security
+- [**2637**Star][4m] [Java] [teevity/ice](https://github.com/teevity/ice) AWS Usage Tool
+- [**2625**Star][8m] [leandromoreira/linux-network-performance-parameters](https://github.com/leandromoreira/linux-network-performance-parameters) Learn where some of the network sysctl variables fit into the Linux/Kernel network flow
+- [**2615**Star][2m] [Swift] [zhuhaow/nekit](https://github.com/zhuhaow/nekit) A toolkit for Network Extension Framework
+- [**2612**Star][4d] [JS] [popcorn-official/popcorn-desktop](https://github.com/popcorn-official/popcorn-desktop) Popcorn Time is a multi-platform, free software BitTorrent client that includes an integrated media player. Desktop ( Windows / Mac / Linux ) a Butter-Project Fork
+- [**2607**Star][3y] [Ruby] [arachni/arachni](https://github.com/arachni/arachni) Web Application Security Scanner Framework
+- [**2603**Star][23d] [JS] [knownsec/kcon](https://github.com/knownsec/kcon) KCon is a famous Hacker Con powered by Knownsec Team.
+- [**2601**Star][1m] [pditommaso/awesome-pipeline](https://github.com/pditommaso/awesome-pipeline) A curated list of awesome pipeline toolkits inspired by Awesome Sysadmin
+- [**2596**Star][21d] [C++] [fanout/pushpin](https://github.com/fanout/pushpin) Reverse proxy for realtime web services
+- [**2581**Star][3d] [Go] [adguardteam/adguardhome](https://github.com/adguardteam/adguardhome) Network-wide ads & trackers blocking DNS server
+- [**2581**Star][1m] [Shell] [medicean/vulapps](https://github.com/medicean/vulapps) 快速搭建各种漏洞环境(Various vulnerability environment)
+- [**2575**Star][2m] [C] [huntergregal/mimipenguin](https://github.com/huntergregal/mimipenguin) dump 当前Linux用户的登录密码
+- [**2574**Star][8y] [C] [id-software/quake](https://github.com/id-software/quake) Quake GPL Source Release
+- [**2568**Star][1m] [C] [esnet/iperf](https://github.com/esnet/iperf) A TCP, UDP, and SCTP network bandwidth measurement tool
+- [**2566**Star][2d] [C++] [danmar/cppcheck](https://github.com/danmar/cppcheck) static analysis of C/C++ code
+- [**2565**Star][5m] [Java] [google/binnavi](https://github.com/google/binnavi) a binary analysis IDE that allows to inspect, navigate, edit and annotate control flow graphs and call graphs of disassembled code.
+- [**2562**Star][3m] [Py] [greenwolf/social_mapper](https://github.com/Greenwolf/social_mapper) 对多个社交网站的用户Profile图片进行大规模的人脸识别
+- [**2553**Star][2y] [evilsocket/bettercap](https://github.com/evilsocket/bettercap) DEPRECATED, bettercap developement moved here:
+- [**2551**Star][9d] [Py] [cloudflare/flan](https://github.com/cloudflare/flan) A pretty sweet vulnerability scanner
+- [**2549**Star][6m] [C] [geohot/qira](https://github.com/geohot/qira) QEMU Interactive Runtime Analyser
+- [**2543**Star][19d] [Py] [hugsy/gef](https://github.com/hugsy/gef) GDB Enhanced Features for exploit devs & reversers
+- [**2542**Star][23d] [Go] [drk1wi/modlishka](https://github.com/drk1wi/modlishka) Modlishka. Reverse Proxy.
+- [**2533**Star][8m] [offensive-security/kali-nethunter](https://github.com/offensive-security/kali-nethunter) The Kali NetHunter Project
- [**2533**Star][2y] [Py] [google/nogotofail](https://github.com/google/nogotofail) An on-path blackbox network traffic security testing tool
-- [**2532**Star][8m] [offensive-security/kali-nethunter](https://github.com/offensive-security/kali-nethunter) The Kali NetHunter Project
-- [**2530**Star][17d] [Py] [hugsy/gef](https://github.com/hugsy/gef) GDB Enhanced Features for exploit devs & reversers
-- [**2521**Star][21d] [Go] [drk1wi/modlishka](https://github.com/drk1wi/modlishka) Modlishka. Reverse Proxy.
-- [**2520**Star][3y] [HTML] [dirtycow/dirtycow.github.io](https://github.com/dirtycow/dirtycow.github.io) Dirty COW
-- [**2515**Star][24d] [C] [yrutschle/sslh](https://github.com/yrutschle/sslh) Applicative Protocol Multiplexer (e.g. share SSH and HTTPS on the same port)
-- [**2510**Star][11d] [Shell] [teddysun/across](https://github.com/teddysun/across) This is a shell script for configure and start WireGuard VPN server
-- [**2505**Star][3m] [kbandla/aptnotes](https://github.com/kbandla/aptnotes) Various public documents, whitepapers and articles about APT campaigns
-- [**2505**Star][3y] [C] [dhavalkapil/icmptunnel](https://github.com/dhavalkapil/icmptunnel) Transparently tunnel your IP traffic through ICMP echo and reply packets.
+- [**2526**Star][2d] [Shell] [teddysun/across](https://github.com/teddysun/across) This is a shell script for configure and start WireGuard VPN server
+- [**2525**Star][3y] [HTML] [dirtycow/dirtycow.github.io](https://github.com/dirtycow/dirtycow.github.io) Dirty COW
+- [**2522**Star][26d] [C] [yrutschle/sslh](https://github.com/yrutschle/sslh) Applicative Protocol Multiplexer (e.g. share SSH and HTTPS on the same port)
+- [**2516**Star][3m] [kbandla/aptnotes](https://github.com/kbandla/aptnotes) Various public documents, whitepapers and articles about APT campaigns
+- [**2508**Star][5m] [Go] [oj/gobuster](https://github.com/oj/gobuster) Directory/File, DNS and VHost busting tool written in Go
+- [**2507**Star][2m] [Java] [jboss-javassist/javassist](https://github.com/jboss-javassist/javassist) Java bytecode engineering toolkit
+- [**2507**Star][3y] [C] [dhavalkapil/icmptunnel](https://github.com/dhavalkapil/icmptunnel) Transparently tunnel your IP traffic through ICMP echo and reply packets.
- [**2503**Star][7m] [C++] [chengr28/pcap_dnsproxy](https://github.com/chengr28/pcap_dnsproxy) Pcap_DNSProxy, a local DNS server based on packet capturing
-- [**2495**Star][2m] [Java] [jboss-javassist/javassist](https://github.com/jboss-javassist/javassist) Java bytecode engineering toolkit
-- [**2488**Star][1y] [onlurking/awesome-infosec](https://github.com/onlurking/awesome-infosec) A curated list of awesome infosec courses and training resources.
-- [**2486**Star][26d] [Py] [ysrc/xunfeng](https://github.com/ysrc/xunfeng) 巡风是一款适用于企业内网的漏洞快速应急,巡航扫描系统。
-- [**2481**Star][5m] [Go] [oj/gobuster](https://github.com/oj/gobuster) Directory/File, DNS and VHost busting tool written in Go
-- [**2480**Star][8d] [Go] [adguardteam/adguardhome](https://github.com/adguardteam/adguardhome) Network-wide ads & trackers blocking DNS server
+- [**2501**Star][28d] [Py] [ysrc/xunfeng](https://github.com/ysrc/xunfeng) 巡风是一款适用于企业内网的漏洞快速应急,巡航扫描系统。
+- [**2498**Star][6m] [taichi-framework/taichi](https://github.com/taichi-framework/taichi) A framework to use Xposed module with or without Root/Unlock bootloader, supportting Android 5.0 ~ 10.0
+- [**2497**Star][6d] [onlurking/awesome-infosec](https://github.com/onlurking/awesome-infosec) A curated list of awesome infosec courses and training resources.
+- [**2488**Star][5y] [PHP] [audi-1/sqli-labs](https://github.com/audi-1/sqli-labs) SQLI labs to test error based, Blind boolean based, Time based.
- [**2480**Star][2y] [Py] [feross/spoofmac](https://github.com/feross/spoofmac) Spoof your MAC address
-- [**2473**Star][5y] [PHP] [audi-1/sqli-labs](https://github.com/audi-1/sqli-labs) SQLI labs to test error based, Blind boolean based, Time based.
-- [**2472**Star][11m] [JS] [weixin/miaow](https://github.com/weixin/Miaow) A set of plugins for Sketch include drawing links & marks, UI Kit & Color sync, font & text replacing.
-- [**2470**Star][6m] [taichi-framework/taichi](https://github.com/taichi-framework/taichi) A framework to use Xposed module with or without Root/Unlock bootloader, supportting Android 5.0 ~ 10.0
-- [**2463**Star][13d] [JS] [vitaly-t/pg-promise](https://github.com/vitaly-t/pg-promise) PostgreSQL interface for Node.js
-- [**2458**Star][3m] [C] [martin-ger/esp_wifi_repeater](https://github.com/martin-ger/esp_wifi_repeater) A full functional WiFi Repeater (correctly: a WiFi NAT Router)
-- [**2456**Star][4m] [Go] [ne0nd0g/merlin](https://github.com/ne0nd0g/merlin) Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.
-- [**2454**Star][24d] [C++] [pavel-odintsov/fastnetmon](https://github.com/pavel-odintsov/fastnetmon) very fast DDoS analyzer with sflow/netflow/mirror support
-- [**2453**Star][11m] [C#] [yck1509/confuserex](https://github.com/yck1509/confuserex) An open-source, free protector for .NET applications
+- [**2476**Star][11m] [JS] [weixin/miaow](https://github.com/weixin/Miaow) A set of plugins for Sketch include drawing links & marks, UI Kit & Color sync, font & text replacing.
+- [**2476**Star][4m] [Go] [ne0nd0g/merlin](https://github.com/ne0nd0g/merlin) Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.
+- [**2469**Star][6d] [JS] [vitaly-t/pg-promise](https://github.com/vitaly-t/pg-promise) PostgreSQL interface for Node.js
+- [**2466**Star][30d] [Py] [smicallef/spiderfoot](https://github.com/smicallef/spiderfoot) SpiderFoot, the most complete OSINT collection and reconnaissance tool.
+- [**2464**Star][3m] [C] [martin-ger/esp_wifi_repeater](https://github.com/martin-ger/esp_wifi_repeater) A full functional WiFi Repeater (correctly: a WiFi NAT Router)
+- [**2461**Star][11m] [C#] [yck1509/confuserex](https://github.com/yck1509/confuserex) An open-source, free protector for .NET applications
+- [**2461**Star][26d] [C++] [pavel-odintsov/fastnetmon](https://github.com/pavel-odintsov/fastnetmon) very fast DDoS analyzer with sflow/netflow/mirror support
+- [**2454**Star][21d] [Shell] [rebootuser/linenum](https://github.com/rebootuser/linenum) Scripted Local Linux Enumeration & Privilege Escalation Checks
- [**2451**Star][3y] [Py] [google/enjarify](https://github.com/google/enjarify) a tool for translating Dalvik bytecode to equivalent Java bytecode.
-- [**2441**Star][28d] [Py] [smicallef/spiderfoot](https://github.com/smicallef/spiderfoot) SpiderFoot, the most complete OSINT collection and reconnaissance tool.
-- [**2424**Star][7d] [PHP] [misp/misp](https://github.com/misp/misp) MISP (core software) - Open Source Threat Intelligence and Sharing Platform (formely known as Malware Information Sharing Platform)
-- [**2420**Star][19d] [Shell] [rebootuser/linenum](https://github.com/rebootuser/linenum) Scripted Local Linux Enumeration & Privilege Escalation Checks
-- [**2415**Star][1m] [Py] [0xinfection/awesome-waf](https://github.com/0xinfection/awesome-waf)
-- [**2412**Star][23d] [Py] [pwndbg/pwndbg](https://github.com/pwndbg/pwndbg) Exploit Development and Reverse Engineering with GDB Made Easy
-- [**2411**Star][3y] [Py] [arthepsy/ssh-audit](https://github.com/arthepsy/ssh-audit) SSH server auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)
-- [**2407**Star][1m] [TSQL] [rapid7/metasploitable3](https://github.com/rapid7/metasploitable3) Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities.
-- [**2404**Star][24d] [Py] [infobyte/faraday](https://github.com/infobyte/faraday) Collaborative Penetration Test and Vulnerability Management Platform
-- [**2399**Star][3y] [rpisec/malware](https://github.com/rpisec/malware) Course materials for Malware Analysis by RPISEC
+- [**2444**Star][2d] [PHP] [misp/misp](https://github.com/misp/misp) MISP (core software) - Open Source Threat Intelligence and Sharing Platform (formely known as Malware Information Sharing Platform)
+- [**2429**Star][1m] [Py] [0xinfection/awesome-waf](https://github.com/0xinfection/awesome-waf)
+- [**2423**Star][2d] [Py] [pwndbg/pwndbg](https://github.com/pwndbg/pwndbg) Exploit Development and Reverse Engineering with GDB Made Easy
+- [**2420**Star][1m] [TSQL] [rapid7/metasploitable3](https://github.com/rapid7/metasploitable3) Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities.
+- [**2417**Star][26d] [Py] [infobyte/faraday](https://github.com/infobyte/faraday) Collaborative Penetration Test and Vulnerability Management Platform
+- [**2416**Star][3y] [Py] [arthepsy/ssh-audit](https://github.com/arthepsy/ssh-audit) SSH server auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)
+- [**2411**Star][26d] [Py] [xmendez/wfuzz](https://github.com/xmendez/wfuzz) Web application fuzzer
+- [**2410**Star][8m] [Py] [lionsec/katoolin](https://github.com/lionsec/katoolin) Automatically install all Kali linux tools
+- [**2407**Star][3y] [rpisec/malware](https://github.com/rpisec/malware) Course materials for Malware Analysis by RPISEC
+- [**2404**Star][20d] [Java] [m66b/netguard](https://github.com/m66b/netguard) A simple way to block access to the internet per app
- [**2395**Star][3y] [OCaml] [facebookarchive/pfff](https://github.com/facebookarchive/pfff) Tools for code analysis, visualizations, or style-preserving source transformation.
-- [**2395**Star][24d] [Py] [xmendez/wfuzz](https://github.com/xmendez/wfuzz) Web application fuzzer
-- [**2391**Star][8m] [Py] [lionsec/katoolin](https://github.com/lionsec/katoolin) Automatically install all Kali linux tools
-- [**2381**Star][2y] [Py] [secretsquirrel/the-backdoor-factory](https://github.com/secretsquirrel/the-backdoor-factory) Patch PE, ELF, Mach-O binaries with shellcode (NOT Supported)
-- [**2375**Star][1y] [Py] [danmcinerney/lans.py](https://github.com/danmcinerney/lans.py) Inject code and spy on wifi users
+- [**2392**Star][1m] [Go] [xtaci/kcp-go](https://github.com/xtaci/kcp-go) A Crypto-Secure, Production-Grade Reliable-UDP Library for golang with FEC
+- [**2389**Star][8d] [C] [wireshark/wireshark](https://github.com/wireshark/wireshark) Read-only mirror of Wireshark's Git repository. GitHub won't let us disable pull requests. ☞ THEY WILL BE IGNORED HERE ☜ Please upload them at
+- [**2386**Star][2y] [Py] [secretsquirrel/the-backdoor-factory](https://github.com/secretsquirrel/the-backdoor-factory) Patch PE, ELF, Mach-O binaries with shellcode (NOT Supported)
+- [**2384**Star][2d] [Go] [owasp/amass](https://github.com/owasp/amass) In-depth Attack Surface Mapping and Asset Discovery
+- [**2381**Star][11m] [C] [haad/proxychains](https://github.com/haad/proxychains) a tool that forces any TCP connection made by any given application to follow through proxy like TOR or any other SOCKS4, SOCKS5 or HTTP(S) proxy. Supported auth-types: "user/pass" for SOCKS4/5, "basic" for HTTP.
+- [**2376**Star][2d] [Java] [mock-server/mockserver](https://github.com/mock-server/mockserver) MockServer enables easy mocking of any system you integrate with via HTTP or HTTPS with clients written in Java, JavaScript and Ruby. MockServer also includes a proxy that introspects all proxied traffic including encrypted SSL traffic and supports Port Forwarding, Web Proxying (i.e. HTTP proxy), HTTPS Tunneling Proxying (using HTTP CONNECT) and…
+- [**2376**Star][1y] [Py] [danmcinerney/lans.py](https://github.com/danmcinerney/lans.py) Inject code and spy on wifi users
+- [**2369**Star][7d] [security-onion-solutions/security-onion](https://github.com/security-onion-solutions/security-onion) Linux distro for intrusion detection, enterprise security monitoring, and log management
- [**2369**Star][2m] [TeX] [crypto101/book](https://github.com/crypto101/book) Crypto 101, the introductory book on cryptography.
-- [**2368**Star][7d] [C] [wireshark/wireshark](https://github.com/wireshark/wireshark) Read-only mirror of Wireshark's Git repository. GitHub won't let us disable pull requests. ☞ THEY WILL BE IGNORED HERE ☜ Please upload them at
-- [**2366**Star][7d] [Java] [mock-server/mockserver](https://github.com/mock-server/mockserver) MockServer enables easy mocking of any system you integrate with via HTTP or HTTPS with clients written in Java, JavaScript and Ruby. MockServer also includes a proxy that introspects all proxied traffic including encrypted SSL traffic and supports Port Forwarding, Web Proxying (i.e. HTTP proxy), HTTPS Tunneling Proxying (using HTTP CONNECT) and…
-- [**2366**Star][11m] [C] [haad/proxychains](https://github.com/haad/proxychains) a tool that forces any TCP connection made by any given application to follow through proxy like TOR or any other SOCKS4, SOCKS5 or HTTP(S) proxy. Supported auth-types: "user/pass" for SOCKS4/5, "basic" for HTTP.
-- [**2359**Star][1m] [Lua] [snabbco/snabb](https://github.com/snabbco/snabb) Simple and fast packet networking
-- [**2359**Star][13d] [security-onion-solutions/security-onion](https://github.com/security-onion-solutions/security-onion) Linux distro for intrusion detection, enterprise security monitoring, and log management
-- [**2359**Star][4m] [Go] [mlabouardy/komiser](https://github.com/mlabouardy/komiser)
-- [**2351**Star][8d] [C] [domoticz/domoticz](https://github.com/domoticz/domoticz) monitor and configure various devices like: Lights, Switches, various sensors/meters like Temperature, Rain, Wind, UV, Electra, Gas, Water and much more
-- [**2350**Star][1m] [Py] [ab77/netflix-proxy](https://github.com/ab77/netflix-proxy) Smart DNS proxy to watch Netflix
+- [**2366**Star][4m] [Go] [mlabouardy/komiser](https://github.com/mlabouardy/komiser)
+- [**2364**Star][2m] [Py] [ab77/netflix-proxy](https://github.com/ab77/netflix-proxy) Smart DNS proxy to watch Netflix
+- [**2362**Star][1m] [Lua] [snabbco/snabb](https://github.com/snabbco/snabb) Simple and fast packet networking
+- [**2357**Star][2d] [C] [domoticz/domoticz](https://github.com/domoticz/domoticz) monitor and configure various devices like: Lights, Switches, various sensors/meters like Temperature, Rain, Wind, UV, Electra, Gas, Water and much more
+- [**2352**Star][1m] [Py] [ctfd/ctfd](https://github.com/CTFd/CTFd) CTFs as you need them
+- [**2349**Star][11m] [hack-with-github/free-security-ebooks](https://github.com/hack-with-github/free-security-ebooks) Free Security and Hacking eBooks
- [**2342**Star][3m] [Go] [vuvuzela/vuvuzela](https://github.com/vuvuzela/vuvuzela) Private messaging system that hides metadata
-- [**2342**Star][12d] [Go] [owasp/amass](https://github.com/owasp/amass) In-depth Attack Surface Mapping and Asset Discovery
-- [**2338**Star][6y] [C] [stefanesser/dumpdecrypted](https://github.com/stefanesser/dumpdecrypted) Dumps decrypted mach-o files from encrypted iPhone applications from memory to disk. This tool is necessary for security researchers to be able to look under the hood of encryption.
-- [**2335**Star][11m] [hack-with-github/free-security-ebooks](https://github.com/hack-with-github/free-security-ebooks) Free Security and Hacking eBooks
-- [**2332**Star][1m] [Py] [ctfd/ctfd](https://github.com/CTFd/CTFd) CTFs as you need them
-- [**2330**Star][1m] [JS] [pa11y/pa11y](https://github.com/pa11y/pa11y) Pa11y is your automated accessibility testing pal
-- [**2324**Star][30d] [C] [hfiref0x/uacme](https://github.com/hfiref0x/uacme) Defeating Windows User Account Control
-- [**2317**Star][10d] [C] [tsl0922/ttyd](https://github.com/tsl0922/ttyd) Share your terminal over the web
-- [**2316**Star][5y] [C] [abrasive/shairport](https://github.com/abrasive/shairport) Airtunes emulator! Shairport is no longer maintained.
-- [**2302**Star][11m] [yeyintminthuhtut/awesome-red-teaming](https://github.com/yeyintminthuhtut/awesome-red-teaming) List of Awesome Red Teaming Resources
-- [**2302**Star][1y] [Java] [csploit/android](https://github.com/csploit/android) cSploit - The most complete and advanced IT security professional toolkit on Android.
-- [**2291**Star][3y] [Py] [lmacken/pyrasite](https://github.com/lmacken/pyrasite) Inject code into running Python processes
-- [**2277**Star][3m] [JS] [retirejs/retire.js](https://github.com/retirejs/retire.js) scanner detecting the use of JavaScript libraries with known vulnerabilities
-- [**2272**Star][3y] [Py] [therook/subbrute](https://github.com/therook/subbrute) A DNS meta-query spider that enumerates DNS records, and subdomains.
-- [**2272**Star][1m] [C] [moby/hyperkit](https://github.com/moby/hyperkit) A toolkit for embedding hypervisor capabilities in your application
-- [**2271**Star][22d] [JS] [talkingdata/inmap](https://github.com/talkingdata/inmap) 大数据地理可视化
-- [**2271**Star][2y] [Py] [rootphantomer/blasting_dictionary](https://github.com/rootphantomer/blasting_dictionary) 爆破字典
-- [**2267**Star][1m] [C] [aurorawright/luma3ds](https://github.com/aurorawright/luma3ds) Noob-proof (N)3DS "Custom Firmware"
-- [**2246**Star][16d] [dumb-password-rules/dumb-password-rules](https://github.com/dumb-password-rules/dumb-password-rules) Shaming sites with dumb password rules.
-- [**2244**Star][2y] [Go] [mehrdadrad/mylg](https://github.com/mehrdadrad/mylg) Network Diagnostic Tool
-- [**2242**Star][1m] [Shell] [v1s1t0r1sh3r3/airgeddon](https://github.com/v1s1t0r1sh3r3/airgeddon) This is a multi-use bash script for Linux systems to audit wireless networks.
-- [**2241**Star][13d] [HTML] [tikam02/devops-guide](https://github.com/tikam02/devops-guide) DevOps Guide from basic to advanced with Interview Questions and Notes
-- [**2241**Star][3m] [Py] [novnc/websockify](https://github.com/novnc/websockify) Websockify is a WebSocket to TCP proxy/bridge. This allows a browser to connect to any application/server/service. Implementations in Python, C, Node.js and Ruby.
-- [**2235**Star][1m] [Shell] [eliaskotlyar/xiaomi-dafang-hacks](https://github.com/eliaskotlyar/xiaomi-dafang-hacks)
+- [**2340**Star][6y] [C] [stefanesser/dumpdecrypted](https://github.com/stefanesser/dumpdecrypted) Dumps decrypted mach-o files from encrypted iPhone applications from memory to disk. This tool is necessary for security researchers to be able to look under the hood of encryption.
+- [**2340**Star][1m] [C] [hfiref0x/uacme](https://github.com/hfiref0x/uacme) Defeating Windows User Account Control
+- [**2337**Star][1m] [JS] [pa11y/pa11y](https://github.com/pa11y/pa11y) Pa11y is your automated accessibility testing pal
+- [**2335**Star][3d] [C] [tsl0922/ttyd](https://github.com/tsl0922/ttyd) Share your terminal over the web
+- [**2323**Star][3d] [C#] [netchx/netch](https://github.com/netchx/netch) Game accelerator. Support Socks5, Shadowsocks, ShadowsocksR, V2Ray protocol. UDP NAT FullCone
+- [**2321**Star][11m] [yeyintminthuhtut/awesome-red-teaming](https://github.com/yeyintminthuhtut/awesome-red-teaming) List of Awesome Red Teaming Resources
+- [**2318**Star][5y] [C] [abrasive/shairport](https://github.com/abrasive/shairport) Airtunes emulator! Shairport is no longer maintained.
+- [**2304**Star][1y] [Java] [csploit/android](https://github.com/csploit/android) cSploit - The most complete and advanced IT security professional toolkit on Android.
+- [**2301**Star][15d] [HTML] [tikam02/devops-guide](https://github.com/tikam02/devops-guide) DevOps Guide from basic to advanced with Interview Questions and Notes
+- [**2295**Star][3y] [Py] [lmacken/pyrasite](https://github.com/lmacken/pyrasite) Inject code into running Python processes
+- [**2287**Star][2y] [Py] [rootphantomer/blasting_dictionary](https://github.com/rootphantomer/blasting_dictionary) 爆破字典
+- [**2284**Star][1m] [C] [moby/hyperkit](https://github.com/moby/hyperkit) A toolkit for embedding hypervisor capabilities in your application
+- [**2283**Star][5m] [Py] [guohongze/adminset](https://github.com/guohongze/adminset) 自动化运维平台:CMDB、CD、DevOps、资产管理、任务编排、持续交付、系统监控、运维管理、配置管理
+- [**2282**Star][3y] [Py] [therook/subbrute](https://github.com/therook/subbrute) A DNS meta-query spider that enumerates DNS records, and subdomains.
+- [**2281**Star][3m] [JS] [retirejs/retire.js](https://github.com/retirejs/retire.js) scanner detecting the use of JavaScript libraries with known vulnerabilities
+- [**2276**Star][24d] [JS] [talkingdata/inmap](https://github.com/talkingdata/inmap) 大数据地理可视化
+- [**2274**Star][1m] [Shell] [v1s1t0r1sh3r3/airgeddon](https://github.com/v1s1t0r1sh3r3/airgeddon) This is a multi-use bash script for Linux systems to audit wireless networks.
+- [**2270**Star][1m] [C] [aurorawright/luma3ds](https://github.com/aurorawright/luma3ds) Noob-proof (N)3DS "Custom Firmware"
+- [**2255**Star][3m] [Py] [novnc/websockify](https://github.com/novnc/websockify) Websockify is a WebSocket to TCP proxy/bridge. This allows a browser to connect to any application/server/service. Implementations in Python, C, Node.js and Ruby.
+- [**2252**Star][18d] [dumb-password-rules/dumb-password-rules](https://github.com/dumb-password-rules/dumb-password-rules) Shaming sites with dumb password rules.
+- [**2252**Star][1m] [Shell] [eliaskotlyar/xiaomi-dafang-hacks](https://github.com/eliaskotlyar/xiaomi-dafang-hacks)
+- [**2248**Star][12d] [PS] [k8gege/k8tools](https://github.com/k8gege/k8tools) K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)
+- [**2245**Star][2y] [Go] [mehrdadrad/mylg](https://github.com/mehrdadrad/mylg) Network Diagnostic Tool
- [**2226**Star][5y] [Go] [filosottile/heartbleed](https://github.com/filosottile/heartbleed) A checker (site and tool) for CVE-2014-0160
-- [**2222**Star][8d] [C#] [netchx/netch](https://github.com/netchx/netch) Game accelerator. Support Socks5, Shadowsocks, ShadowsocksR, V2Ray protocol. UDP NAT FullCone
-- [**2218**Star][7d] [Py] [cloudflare/flan](https://github.com/cloudflare/flan) A pretty sweet vulnerability scanner
+- [**2217**Star][1y] [JS] [cure53/h5sc](https://github.com/cure53/h5sc) HTML5 Security Cheatsheet - A collection of HTML5 related XSS attack vectors
- [**2215**Star][6y] [C++] [codebutler/firesheep](https://github.com/codebutler/firesheep) A Firefox extension that demonstrates HTTP session hijacking attacks.
-- [**2211**Star][1y] [JS] [cure53/h5sc](https://github.com/cure53/h5sc) HTML5 Security Cheatsheet - A collection of HTML5 related XSS attack vectors
-- [**2204**Star][10d] [PowerShell] [k8gege/k8tools](https://github.com/k8gege/k8tools) K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)
-- [**2203**Star][1m] [C] [texane/stlink](https://github.com/texane/stlink) stm32 discovery line linux programmer
-- [**2201**Star][11d] [Go] [google/mtail](https://github.com/google/mtail) extract whitebox monitoring data from application logs for collection in a timeseries database
-- [**2187**Star][21d] [C++] [google/bloaty](https://github.com/google/bloaty) Bloaty McBloatface: a size profiler for binaries
+- [**2213**Star][2d] [Go] [aquasecurity/kube-bench](https://github.com/aquasecurity/kube-bench) Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark
+- [**2211**Star][1m] [C] [texane/stlink](https://github.com/texane/stlink) stm32 discovery line linux programmer
+- [**2211**Star][6d] [Go] [google/mtail](https://github.com/google/mtail) extract whitebox monitoring data from application logs for collection in a timeseries database
+- [**2209**Star][22d] [Rust] [cloudflare/boringtun](https://github.com/cloudflare/boringtun) an implementation of the WireGuard® protocol designed for portability and speed.
+- [**2192**Star][23d] [C++] [google/bloaty](https://github.com/google/bloaty) Bloaty McBloatface: a size profiler for binaries
+- [**2189**Star][1m] [sobolevn/awesome-cryptography](https://github.com/sobolevn/awesome-cryptography) A curated list of cryptography resources and links.
+- [**2187**Star][7d] [getlantern/lantern-binaries](https://github.com/getlantern/lantern-binaries) Lantern installers binary downloads.
+- [**2186**Star][1y] [Py] [datasploit/datasploit](https://github.com/DataSploit/datasploit) 对指定目标执行多种侦查技术:企业、人、电话号码、比特币地址等
- [**2184**Star][3y] [enddo/awesome-windows-exploitation](https://github.com/enddo/awesome-windows-exploitation) A curated list of awesome Windows Exploitation resources, and shiny things. Inspired by awesom
-- [**2182**Star][1y] [Py] [datasploit/datasploit](https://github.com/DataSploit/datasploit) 对指定目标执行多种侦查技术:企业、人、电话号码、比特币地址等
-- [**2177**Star][1m] [JS] [secgroundzero/warberry](https://github.com/secgroundzero/warberry) WarBerryPi - Tactical Exploitation
-- [**2171**Star][14d] [C] [armmbed/mbedtls](https://github.com/armmbed/mbedtls) An open source, portable, easy to use, readable and flexible SSL library
-- [**2168**Star][16d] [getlantern/lantern-binaries](https://github.com/getlantern/lantern-binaries) Lantern installers binary downloads.
-- [**2167**Star][29d] [sobolevn/awesome-cryptography](https://github.com/sobolevn/awesome-cryptography) A curated list of cryptography resources and links.
-- [**2158**Star][2m] [Go] [mmatczuk/go-http-tunnel](https://github.com/mmatczuk/go-http-tunnel) Fast and secure tunnels over HTTP/2
-- [**2156**Star][1m] [C] [conorpp/u2f-zero](https://github.com/conorpp/u2f-zero) U2F USB token optimized for physical security, affordability, and style
-- [**2155**Star][1y] [C++] [maestron/botnets](https://github.com/maestron/botnets) This is a collection of #botnet source codes, unorganized. For EDUCATIONAL PURPOSES ONLY
+- [**2183**Star][2d] [C] [armmbed/mbedtls](https://github.com/armmbed/mbedtls) An open source, portable, easy to use, readable and flexible SSL library
+- [**2179**Star][1m] [JS] [secgroundzero/warberry](https://github.com/secgroundzero/warberry) WarBerryPi - Tactical Exploitation
+- [**2173**Star][1y] [JS] [iam4x/pokemongo-webspoof](https://github.com/iam4x/pokemongo-webspoof)
+- [**2163**Star][2m] [Go] [mmatczuk/go-http-tunnel](https://github.com/mmatczuk/go-http-tunnel) Fast and secure tunnels over HTTP/2
+- [**2162**Star][1y] [C++] [maestron/botnets](https://github.com/maestron/botnets) This is a collection of #botnet source codes, unorganized. For EDUCATIONAL PURPOSES ONLY
+- [**2159**Star][1m] [Py] [commixproject/commix](https://github.com/commixproject/commix) Automated All-in-One OS command injection and exploitation tool.
+- [**2158**Star][9m] [exakat/php-static-analysis-tools](https://github.com/exakat/php-static-analysis-tools) A reviewed list of useful PHP static analysis tools
+- [**2158**Star][1m] [C] [conorpp/u2f-zero](https://github.com/conorpp/u2f-zero) U2F USB token optimized for physical security, affordability, and style
+- [**2158**Star][2m] [PHP] [antonioribeiro/tracker](https://github.com/antonioribeiro/tracker) Tracker gathers a lot of information from your requests to identify and store
- [**2153**Star][6y] [Ruby] [plamoni/siriproxy](https://github.com/plamoni/siriproxy) A (tampering) proxy server for Apple's Siri
-- [**2152**Star][29d] [Py] [commixproject/commix](https://github.com/commixproject/commix) Automated All-in-One OS command injection and exploitation tool.
-- [**2151**Star][9m] [exakat/php-static-analysis-tools](https://github.com/exakat/php-static-analysis-tools) A reviewed list of useful PHP static analysis tools
-- [**2146**Star][14d] [Java] [google/wycheproof](https://github.com/google/wycheproof) Project Wycheproof tests crypto libraries against known attacks.
-- [**2127**Star][1m] [Py] [jonathansalwan/ropgadget](https://github.com/jonathansalwan/ropgadget) This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC and MIPS architectures.
-- [**2124**Star][2m] [Py] [trustedsec/unicorn](https://github.com/trustedsec/unicorn) Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.
-- [**2123**Star][16d] [Assembly] [pret/pokered](https://github.com/pret/pokered) disassembly of Pokémon Red/Blue
-- [**2114**Star][7m] [Py] [calebmadrigal/trackerjacker](https://github.com/calebmadrigal/trackerjacker) Like nmap for mapping wifi networks you're not connected to, plus device tracking
-- [**2112**Star][1y] [Py] [rub-nds/pret](https://github.com/rub-nds/pret) Printer Exploitation Toolkit - The tool that made dumpster diving obsolete.
+- [**2149**Star][8d] [Java] [google/wycheproof](https://github.com/google/wycheproof) Project Wycheproof tests crypto libraries against known attacks.
+- [**2138**Star][2m] [Py] [trustedsec/unicorn](https://github.com/trustedsec/unicorn) Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.
+- [**2132**Star][1m] [Py] [jonathansalwan/ropgadget](https://github.com/jonathansalwan/ropgadget) This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC and MIPS architectures.
+- [**2127**Star][18d] [Assembly] [pret/pokered](https://github.com/pret/pokered) disassembly of Pokémon Red/Blue
+- [**2122**Star][2y] [Py] [rub-nds/pret](https://github.com/rub-nds/pret) Printer Exploitation Toolkit - The tool that made dumpster diving obsolete.
+- [**2118**Star][4d] [goq/telegram-list](https://github.com/goq/telegram-list) List of telegram groups, channels & bots // Список интересных групп, каналов и ботов телеграма // Список чатов для программистов
+- [**2117**Star][1m] [Py] [elceef/dnstwist](https://github.com/elceef/dnstwist) Domain name permutation engine for detecting typo squatting, phishing and corporate espionage
+- [**2116**Star][7m] [Py] [calebmadrigal/trackerjacker](https://github.com/calebmadrigal/trackerjacker) Like nmap for mapping wifi networks you're not connected to, plus device tracking
+- [**2115**Star][2d] [Py] [fortynorthsecurity/eyewitness](https://github.com/FortyNorthSecurity/EyeWitness) EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.
+- [**2114**Star][7y] [C++] [lloyd/node-memwatch](https://github.com/lloyd/node-memwatch) A NodeJS library to keep an eye on your memory usage, and discover and isolate leaks.
- [**2107**Star][4y] [C] [hashcat/hashcat-legacy](https://github.com/hashcat/hashcat-legacy) Advanced CPU-based password recovery utility
-- [**2105**Star][7d] [goq/telegram-list](https://github.com/goq/telegram-list) List of telegram groups, channels & bots // Список интересных групп, каналов и ботов телеграма // Список чатов для программистов
-- [**2105**Star][1m] [Py] [elceef/dnstwist](https://github.com/elceef/dnstwist) Domain name permutation engine for detecting typo squatting, phishing and corporate espionage
-- [**2103**Star][8m] [Py] [linkedin/qark](https://github.com/linkedin/qark) Tool to look for several security related Android application vulnerabilities
-- [**2098**Star][19d] [Py] [fortynorthsecurity/eyewitness](https://github.com/FortyNorthSecurity/EyeWitness) EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.
-- [**2098**Star][21d] [infoslack/awesome-web-hacking](https://github.com/infoslack/awesome-web-hacking) A list of web application security
-- [**2090**Star][3m] [yeahhub/hacking-security-ebooks](https://github.com/yeahhub/hacking-security-ebooks) Top 100 Hacking & Security E-Books (Free Download)
-- [**2081**Star][8d] [C] [flatpak/flatpak](https://github.com/flatpak/flatpak) Linux application sandboxing and distribution framework
-- [**2071**Star][30d] [Go] [theupdateframework/notary](https://github.com/theupdateframework/notary) Notary is a project that allows anyone to have trust over arbitrary collections of data
-- [**2069**Star][20d] [Ruby] [urbanadventurer/whatweb](https://github.com/urbanadventurer/whatweb) Next generation web scanner
-- [**2062**Star][9m] [jermic/android-crack-tool](https://github.com/jermic/android-crack-tool)
-- [**2051**Star][4m] [Py] [whaleshark-team/cobra](https://github.com/WhaleShark-Team/cobra) Source Code Security Audit (源代码安全审计)
-- [**2049**Star][1y] [bluscreenofjeff/red-team-infrastructure-wiki](https://github.com/bluscreenofjeff/red-team-infrastructure-wiki) Wiki to collect Red Team infrastructure hardening resources
-- [**2047**Star][6m] [Go] [maxmcd/webtty](https://github.com/maxmcd/webtty) Share a terminal session over WebRTC
-- [**2041**Star][2y] [Py] [derv82/wifite](https://github.com/derv82/wifite) an automated wireless attack tool.
-- [**2037**Star][10d] [Py] [nabla-c0d3/sslyze](https://github.com/nabla-c0d3/sslyze) Fast and powerful SSL/TLS server scanning library.
-- [**2036**Star][2m] [C++] [lordnoteworthy/al-khaser](https://github.com/lordnoteworthy/al-khaser) Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.
-- [**2035**Star][2m] [tanprathan/mobileapp-pentest-cheatsheet](https://github.com/tanprathan/mobileapp-pentest-cheatsheet) The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.
-- [**2035**Star][8m] [Shell] [foospidy/payloads](https://github.com/foospidy/payloads) Git All the Payloads! A collection of web attack payloads.
-- [**2032**Star][7d] [C++] [openthread/openthread](https://github.com/openthread/openthread) OpenThread released by Google is an open-source implementation of the Thread networking protocol
-- [**2032**Star][1m] [edoverflow/bugbounty-cheatsheet](https://github.com/edoverflow/bugbounty-cheatsheet) A list of interesting payloads, tips and tricks for bug bounty hunters.
-- [**2024**Star][5y] [CoffeeScript] [shadowsocks/shadowsocks-gui](https://github.com/shadowsocks/shadowsocks-gui) Shadowsocks GUI client
-- [**2020**Star][20d] [Objective-C] [ios-control/ios-deploy](https://github.com/ios-control/ios-deploy) Install and debug iPhone apps from the command line, without using Xcode
-- [**2017**Star][3m] [C++] [darthton/blackbone](https://github.com/darthton/blackbone) Windows memory hacking library
-- [**2016**Star][3y] [Swift] [urinx/iosapphook](https://github.com/urinx/iosapphook) 专注于非越狱环境下iOS应用逆向研究,从dylib注入,应用重签名到App Hook
-- [**2014**Star][8d] [Py] [sensepost/objection](https://github.com/sensepost/objection) runtimemobile exploration
-- [**2012**Star][1y] [C] [xoreaxeaxeax/rosenbridge](https://github.com/xoreaxeaxeax/rosenbridge) Hardware backdoors in some x86 CPUs
-- [**2006**Star][9m] [C] [dekunukem/nintendo_switch_reverse_engineering](https://github.com/dekunukem/nintendo_switch_reverse_engineering) A look at inner workings of Joycon and Nintendo Switch
-- [**2004**Star][4y] [C] [probablycorey/wax](https://github.com/probablycorey/wax) Wax is now being maintained by alibaba
-- [**1999**Star][8d] [Java] [jeremylong/dependencycheck](https://github.com/jeremylong/dependencycheck) OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
-- [**1998**Star][13d] [Shell] [wulabing/v2ray_ws-tls_bash_onekey](https://github.com/wulabing/v2ray_ws-tls_bash_onekey) V2Ray Nginx+vmess+ws+tls/ http2 over tls 一键安装脚本
-- [**1992**Star][25d] [Swift] [github/softu2f](https://github.com/github/softu2f) Software U2F authenticator for macOS
-- [**1991**Star][29d] [qazbnm456/awesome-cve-poc](https://github.com/qazbnm456/awesome-cve-poc) A curated list of CVE PoCs.
-- [**1990**Star][4m] [swiftonsecurity/sysmon-config](https://github.com/swiftonsecurity/sysmon-config) Sysmon configuration file template with default high-quality event tracing
-- [**1988**Star][4y] [Go] [yahoo/gryffin](https://github.com/yahoo/gryffin) Gryffin is a large scale web security scanning platform.
-- [**1987**Star][7m] [Py] [fsecurelabs/drozer](https://github.com/FSecureLABS/drozer) The Leading Security Assessment Framework for Android.
-- [**1983**Star][2y] [dloss/python-pentest-tools](https://github.com/dloss/python-pentest-tools) Python tools for penetration testers
-- [**1983**Star][2m] [C++] [asmjit/asmjit](https://github.com/asmjit/asmjit) Complete x86/x64 JIT and AOT Assembler for C++
-- [**1976**Star][3m] [infosecn1nja/ad-attack-defense](https://github.com/infosecn1nja/ad-attack-defense) Attack and defend active directory using modern post exploitation adversary tradecraft activity
-- [**1967**Star][26d] [Java] [genymobile/gnirehtet](https://github.com/genymobile/gnirehtet) Gnirehtet provides reverse tethering for Android
-- [**1965**Star][9m] [JS] [weichiachang/stacks-cli](https://github.com/weichiachang/stacks-cli) Check website stack from the terminal
-- [**1963**Star][11d] [HTML] [gtfobins/gtfobins.github.io](https://github.com/gtfobins/gtfobins.github.io) Curated list of Unix binaries that can be exploited to bypass system security restrictions
-- [**1963**Star][27d] [Java] [elderdrivers/edxposed](https://github.com/elderdrivers/edxposed) Elder driver Xposed Framework.
-- [**1962**Star][1m] [Py] [momosecurity/aswan](https://github.com/momosecurity/aswan) 陌陌风控系统静态规则引擎,零基础简易便捷的配置多种复杂规则,实时高效管控用户异常行为。
-- [**1958**Star][26d] [C#] [mathewsachin/captura](https://github.com/mathewsachin/captura) Capture Screen, Audio, Cursor, Mouse Clicks and Keystrokes
-- [**1957**Star][9d] [Go] [ullaakut/cameradar](https://github.com/Ullaakut/cameradar) Cameradar hacks its way into RTSP videosurveillance cameras
-- [**1954**Star][1y] [BitBake] [1n3/intruderpayloads](https://github.com/1n3/intruderpayloads) A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.
-- [**1946**Star][2y] [obfuscator-llvm/obfuscator](https://github.com/obfuscator-llvm/obfuscator) Obfuscator-LLVM
-- [**1945**Star][7d] [Perl] [spiderlabs/owasp-modsecurity-crs](https://github.com/spiderlabs/owasp-modsecurity-crs) OWASP ModSecurity Core Rule Set (CRS) Project (Official Repository)
-- [**1940**Star][3y] [C#] [lazocoder/windows-hacks](https://github.com/lazocoder/windows-hacks) Creative and unusual things that can be done with the Windows API.
-- [**1939**Star][2m] [C] [microsoft/procdump-for-linux](https://github.com/microsoft/procdump-for-linux) A Linux version of the ProcDump Sysinternals tool
-- [**1938**Star][27d] [Py] [nixawk/pentest-wiki](https://github.com/nixawk/pentest-wiki) PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.
-- [**1938**Star][14d] [Py] [cea-sec/miasm](https://github.com/cea-sec/miasm) Reverse engineering framework in Python
-- [**1926**Star][17d] [Go] [mpolden/echoip](https://github.com/mpolden/echoip) IP address lookup service
-- [**1913**Star][5m] [C] [darkk/redsocks](https://github.com/darkk/redsocks) transparent TCP-to-proxy redirector
-- [**1912**Star][3m] [toolswatch/blackhat-arsenal-tools](https://github.com/toolswatch/blackhat-arsenal-tools) Official Black Hat Arsenal Security Tools Repository
-- [**1911**Star][3y] [Py] [aoncyberlabs/windows-exploit-suggester](https://github.com/AonCyberLabs/Windows-Exploit-Suggester) This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules available for the missing bulletins.
-- [**1911**Star][8d] [C] [ntop/ndpi](https://github.com/ntop/ndpi) Open Source Deep Packet Inspection Software Toolkit
-- [**1909**Star][3d] [Go] [projectdiscovery/subfinder](https://github.com/projectdiscovery/subfinder) Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.
-- [**1909**Star][9d] [Py] [j3ssie/osmedeus](https://github.com/j3ssie/osmedeus) Fully automated offensive security framework for reconnaissance and vulnerability scanning
-- [**1908**Star][7d] [C++] [powerdns/pdns](https://github.com/powerdns/pdns) PowerDNS
-- [**1907**Star][16d] [Py] [lanjelot/patator](https://github.com/lanjelot/patator) Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.
-- [**1906**Star][13d] [CSS] [cyb3rward0g/helk](https://github.com/cyb3rward0g/helk) The Hunting ELK
-- [**1902**Star][7d] [Go] [solo-io/gloo](https://github.com/solo-io/gloo) An Envoy-Powered API Gateway
-- [**1901**Star][3m] [Go] [minishift/minishift](https://github.com/minishift/minishift) Run OpenShift 3.x locally
-- [**1892**Star][19d] [C] [chipsec/chipsec](https://github.com/chipsec/chipsec) Platform Security Assessment Framework
-- [**1891**Star][7d] [Py] [mozilla/mozdef](https://github.com/mozilla/mozdef) Mozilla Enterprise Defense Platform
-- [**1886**Star][8d] [Go] [chaitin/xray](https://github.com/chaitin/xray) xray 安全评估工具 | 使用之前务必先阅读文档
-- [**1880**Star][14d] [C++] [mhammond/pywin32](https://github.com/mhammond/pywin32) Python for Windows (pywin32) Extensions
-- [**1878**Star][4m] [C] [shadowsocks/simple-obfs](https://github.com/shadowsocks/simple-obfs) A simple obfuscating tool (Deprecated)
-- [**1876**Star][7d] [Shell] [toniblyx/prowler](https://github.com/toniblyx/prowler) AWS Security Best Practices Assessment, Auditing, Hardening and Forensics Readiness Tool. It follows guidelines of the CIS Amazon Web Services Foundations Benchmark and DOZENS of additional checks including GDPR and HIPAA (+100). Official CIS for AWS guide:
-- [**1876**Star][5y] [C++] [tum-vision/lsd_slam](https://github.com/tum-vision/lsd_slam) LSD-SLAM
-- [**1876**Star][4m] [Py] [python-security/pyt](https://github.com/python-security/pyt) A Static Analysis Tool for Detecting Security Vulnerabilities in Python Web Applications
-- [**1876**Star][6m] [Java] [fuzion24/justtrustme](https://github.com/fuzion24/justtrustme) An xposed module that disables SSL certificate checking for the purposes of auditing an app with cert pinning
-- [**1876**Star][1y] [Py] [aploium/zmirror](https://github.com/aploium/zmirror) The next-gen reverse proxy for full site mirroring
-- [**1869**Star][13d] [YARA] [yara-rules/rules](https://github.com/yara-rules/rules) Repository of yara rules
-- [**1868**Star][1y] [Py] [derv82/wifite2](https://github.com/derv82/wifite2) Rewrite of the popular wireless network auditor, "wifite"
-- [**1867**Star][2m] [Py] [pycqa/bandit](https://github.com/pycqa/bandit) find common security issues in Python code.
-- [**1864**Star][7d] [C] [merbanan/rtl_433](https://github.com/merbanan/rtl_433) Program to decode traffic from Devices that are broadcasting on 433.9 MHz like temperature sensors
-- [**1863**Star][4y] [Objective-C] [xcodeghostsource/xcodeghost](https://github.com/xcodeghostsource/xcodeghost) "XcodeGhost" Source
-- [**1861**Star][10m] [PHP] [bartblaze/php-backdoors](https://github.com/bartblaze/php-backdoors) A collection of PHP backdoors. For educational or testing purposes only.
-- [**1861**Star][4m] [Java] [adoptopenjdk/jitwatch](https://github.com/adoptopenjdk/jitwatch) Log analyser / visualiser for Java HotSpot JIT compiler. Inspect inlining decisions, hot methods, bytecode, and assembly. View results in the JavaFX user interface.
-- [**1858**Star][10d] [Py] [aquasecurity/kube-hunter](https://github.com/aquasecurity/kube-hunter) Hunt for security weaknesses in Kubernetes clusters
-- [**1857**Star][21d] [C] [tinyproxy/tinyproxy](https://github.com/tinyproxy/tinyproxy) a light-weight HTTP/HTTPS proxy daemon for POSIX operating systems
-- [**1857**Star][7d] [olivierlaflamme/cheatsheet-god](https://github.com/olivierlaflamme/cheatsheet-god) Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet
-- [**1849**Star][11m] [C++] [googlecreativelab/open-nsynth-super](https://github.com/googlecreativelab/open-nsynth-super) Open NSynth Super is an experimental physical interface for the NSynth algorithm
-- [**1848**Star][29d] [C] [github/glb-director](https://github.com/github/glb-director) GitHub Load Balancer Director and supporting tooling.
-- [**1846**Star][8m] [Py] [netflix-skunkworks/stethoscope](https://github.com/Netflix-Skunkworks/stethoscope) Personalized, user-focused recommendations for employee information security.
-- [**1845**Star][2m] [Py] [pwnlandia/mhn](https://github.com/pwnlandia/mhn) Modern Honey Network
-- [**1844**Star][8d] [TypeScript] [snyk/snyk](https://github.com/snyk/snyk) CLI and build-time tool to find & fix known vulnerabilities in open-source dependencies
-- [**1842**Star][1y] [Java] [jindrapetrik/jpexs-decompiler](https://github.com/jindrapetrik/jpexs-decompiler) JPEXS Free Flash Decompiler
-- [**1841**Star][13d] [C++] [acidanthera/lilu](https://github.com/acidanthera/Lilu) Arbitrary kext and process patching on macOS
+- [**2105**Star][8m] [Py] [linkedin/qark](https://github.com/linkedin/qark) Tool to look for several security related Android application vulnerabilities
+- [**2103**Star][3m] [yeahhub/hacking-security-ebooks](https://github.com/yeahhub/hacking-security-ebooks) Top 100 Hacking & Security E-Books (Free Download)
+- [**2103**Star][23d] [infoslack/awesome-web-hacking](https://github.com/infoslack/awesome-web-hacking) A list of web application security
+- [**2095**Star][2d] [C] [wireguard/wireguard](https://github.com/wireguard/wireguard) fast, modern, secure kernel VPN tunnel
+- [**2093**Star][22d] [Ruby] [urbanadventurer/whatweb](https://github.com/urbanadventurer/whatweb) Next generation web scanner
+- [**2084**Star][5d] [C] [flatpak/flatpak](https://github.com/flatpak/flatpak) Linux application sandboxing and distribution framework
+- [**2078**Star][1m] [Go] [theupdateframework/notary](https://github.com/theupdateframework/notary) Notary is a project that allows anyone to have trust over arbitrary collections of data
+- [**2071**Star][15d] [Shell] [wulabing/v2ray_ws-tls_bash_onekey](https://github.com/wulabing/v2ray_ws-tls_bash_onekey) V2Ray Nginx+vmess+ws+tls/ http2 over tls 一键安装脚本
+- [**2066**Star][9m] [jermic/android-crack-tool](https://github.com/jermic/android-crack-tool)
+- [**2058**Star][4m] [Py] [whaleshark-team/cobra](https://github.com/WhaleShark-Team/cobra) Source Code Security Audit (源代码安全审计)
+- [**2057**Star][1y] [bluscreenofjeff/red-team-infrastructure-wiki](https://github.com/bluscreenofjeff/red-team-infrastructure-wiki) Wiki to collect Red Team infrastructure hardening resources
+- [**2054**Star][7d] [swiftonsecurity/sysmon-config](https://github.com/swiftonsecurity/sysmon-config) Sysmon configuration file template with default high-quality event tracing
+- [**2051**Star][2m] [tanprathan/mobileapp-pentest-cheatsheet](https://github.com/tanprathan/mobileapp-pentest-cheatsheet) The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.
+- [**2048**Star][6m] [Go] [maxmcd/webtty](https://github.com/maxmcd/webtty) Share a terminal session over WebRTC
+- [**2047**Star][1m] [edoverflow/bugbounty-cheatsheet](https://github.com/edoverflow/bugbounty-cheatsheet) A list of interesting payloads, tips and tricks for bug bounty hunters.
+- [**2045**Star][2m] [C++] [lordnoteworthy/al-khaser](https://github.com/lordnoteworthy/al-khaser) Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.
+- [**2045**Star][8m] [Shell] [foospidy/payloads](https://github.com/foospidy/payloads) Git All the Payloads! A collection of web attack payloads.
+- [**2043**Star][12d] [Py] [nabla-c0d3/sslyze](https://github.com/nabla-c0d3/sslyze) Fast and powerful SSL/TLS server scanning library.
+- [**2042**Star][2y] [Py] [derv82/wifite](https://github.com/derv82/wifite) an automated wireless attack tool.
+- [**2039**Star][5d] [C++] [openthread/openthread](https://github.com/openthread/openthread) OpenThread released by Google is an open-source implementation of the Thread networking protocol
+- [**2033**Star][2d] [ObjC] [ios-control/ios-deploy](https://github.com/ios-control/ios-deploy) Install and debug iPhone apps from the command line, without using Xcode
+- [**2033**Star][2d] [Py] [sensepost/objection](https://github.com/sensepost/objection) runtimemobile exploration
+- [**2029**Star][3d] [Go] [goodrain/rainbond](https://github.com/goodrain/rainbond) Enterprise application cloud operating system(企业应用云操作系统)
+- [**2025**Star][5y] [CoffeeScript] [shadowsocks/shadowsocks-gui](https://github.com/shadowsocks/shadowsocks-gui) Shadowsocks GUI client
+- [**2024**Star][2d] [C++] [darthton/blackbone](https://github.com/darthton/blackbone) Windows memory hacking library
+- [**2017**Star][3y] [Swift] [urinx/iosapphook](https://github.com/urinx/iosapphook) 专注于非越狱环境下iOS应用逆向研究,从dylib注入,应用重签名到App Hook
+- [**2016**Star][23d] [Java] [genymobile/gnirehtet](https://github.com/genymobile/gnirehtet) Gnirehtet provides reverse tethering for Android
+- [**2016**Star][9m] [C] [dekunukem/nintendo_switch_reverse_engineering](https://github.com/dekunukem/nintendo_switch_reverse_engineering) A look at inner workings of Joycon and Nintendo Switch
+- [**2014**Star][1y] [C] [xoreaxeaxeax/rosenbridge](https://github.com/xoreaxeaxeax/rosenbridge) Hardware backdoors in some x86 CPUs
+- [**2014**Star][5d] [Java] [jeremylong/dependencycheck](https://github.com/jeremylong/dependencycheck) OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
+- [**2005**Star][4y] [C] [probablycorey/wax](https://github.com/probablycorey/wax) Wax is now being maintained by alibaba
+- [**2003**Star][2m] [Go] [skynetservices/skydns](https://github.com/skynetservices/skydns) DNS service discovery for etcd
+- [**2000**Star][1m] [qazbnm456/awesome-cve-poc](https://github.com/qazbnm456/awesome-cve-poc) A curated list of CVE PoCs.
+- [**1996**Star][29d] [Java] [elderdrivers/edxposed](https://github.com/elderdrivers/edxposed) Elder driver Xposed Framework.
+- [**1994**Star][7m] [Py] [fsecurelabs/drozer](https://github.com/FSecureLABS/drozer) The Leading Security Assessment Framework for Android.
+- [**1994**Star][3m] [infosecn1nja/ad-attack-defense](https://github.com/infosecn1nja/ad-attack-defense) Attack and defend active directory using modern post exploitation adversary tradecraft activity
+- [**1994**Star][27d] [Swift] [github/softu2f](https://github.com/github/softu2f) Software U2F authenticator for macOS
+- [**1992**Star][5d] [C#] [mathewsachin/captura](https://github.com/mathewsachin/captura) Capture Screen, Audio, Cursor, Mouse Clicks and Keystrokes
+- [**1990**Star][8d] [HTML] [gtfobins/gtfobins.github.io](https://github.com/gtfobins/gtfobins.github.io) Curated list of Unix binaries that can be exploited to bypass system security restrictions
+- [**1989**Star][4y] [Go] [yahoo/gryffin](https://github.com/yahoo/gryffin) Gryffin is a large scale web security scanning platform.
+- [**1989**Star][2m] [C++] [asmjit/asmjit](https://github.com/asmjit/asmjit) Complete x86/x64 JIT and AOT Assembler for C++
+- [**1987**Star][2y] [dloss/python-pentest-tools](https://github.com/dloss/python-pentest-tools) Python tools for penetration testers
+- [**1977**Star][5d] [Go] [projectdiscovery/subfinder](https://github.com/projectdiscovery/subfinder) Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.
+- [**1977**Star][5d] [Go] [projectdiscovery/subfinder](https://github.com/projectdiscovery/subfinder) 使用Passive Sources, Search Engines, Pastebins, Internet Archives等查找子域名
+- [**1972**Star][1m] [Py] [momosecurity/aswan](https://github.com/momosecurity/aswan) 陌陌风控系统静态规则引擎,零基础简易便捷的配置多种复杂规则,实时高效管控用户异常行为。
+- [**1971**Star][5d] [Py] [j3ssie/osmedeus](https://github.com/j3ssie/osmedeus) Fully automated offensive security framework for reconnaissance and vulnerability scanning
+- [**1966**Star][11d] [Go] [ullaakut/cameradar](https://github.com/Ullaakut/cameradar) Cameradar hacks its way into RTSP videosurveillance cameras
+- [**1966**Star][9m] [JS] [weichiachang/stacks-cli](https://github.com/weichiachang/stacks-cli) Check website stack from the terminal
+- [**1966**Star][1y] [BitBake] [1n3/intruderpayloads](https://github.com/1n3/intruderpayloads) A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.
+- [**1955**Star][7d] [Perl] [spiderlabs/owasp-modsecurity-crs](https://github.com/spiderlabs/owasp-modsecurity-crs) OWASP ModSecurity Core Rule Set (CRS) Project (Official Repository)
+- [**1953**Star][2y] [obfuscator-llvm/obfuscator](https://github.com/obfuscator-llvm/obfuscator) Obfuscator-LLVM
+- [**1952**Star][1y] [Go] [hyperhq/hyperd](https://github.com/hyperhq/hyperd) HyperContainer Daemon
+- [**1951**Star][8d] [Py] [cea-sec/miasm](https://github.com/cea-sec/miasm) Reverse engineering framework in Python
+- [**1947**Star][29d] [Py] [nixawk/pentest-wiki](https://github.com/nixawk/pentest-wiki) PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.
+- [**1945**Star][5d] [C] [microsoft/procdump-for-linux](https://github.com/microsoft/procdump-for-linux) A Linux version of the ProcDump Sysinternals tool
+- [**1942**Star][3y] [C#] [lazocoder/windows-hacks](https://github.com/lazocoder/windows-hacks) Creative and unusual things that can be done with the Windows API.
+- [**1938**Star][4m] [C] [meituan-dianping/logan](https://github.com/meituan-dianping/logan) Logan is a lightweight case logging system based on mobile platform.
+- [**1938**Star][7d] [Go] [zalando/skipper](https://github.com/zalando/skipper) An HTTP router and reverse proxy for service composition, including use cases like Kubernetes Ingress
+- [**1935**Star][19d] [Go] [mpolden/echoip](https://github.com/mpolden/echoip) IP address lookup service
+- [**1933**Star][5m] [C] [darkk/redsocks](https://github.com/darkk/redsocks) transparent TCP-to-proxy redirector
+- [**1923**Star][3y] [Py] [aoncyberlabs/windows-exploit-suggester](https://github.com/AonCyberLabs/Windows-Exploit-Suggester) This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules available for the missing bulletins.
+- [**1920**Star][4y] [Py] [ziggear/shadowsocks](https://github.com/ziggear/shadowsocks) backup of
+- [**1920**Star][2d] [C++] [powerdns/pdns](https://github.com/powerdns/pdns) PowerDNS
+- [**1920**Star][9d] [CSS] [cyb3rward0g/helk](https://github.com/cyb3rward0g/helk) The Hunting ELK
+- [**1918**Star][3m] [toolswatch/blackhat-arsenal-tools](https://github.com/toolswatch/blackhat-arsenal-tools) Official Black Hat Arsenal Security Tools Repository
+- [**1917**Star][2d] [C] [ntop/ndpi](https://github.com/ntop/ndpi) Open Source Deep Packet Inspection Software Toolkit
+- [**1915**Star][18d] [Py] [lanjelot/patator](https://github.com/lanjelot/patator) Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.
+- [**1914**Star][7d] [Go] [solo-io/gloo](https://github.com/solo-io/gloo) An Envoy-Powered API Gateway
+- [**1914**Star][2d] [chaitin/xray](https://github.com/chaitin/xray) xray 安全评估工具 | 使用之前务必先阅读文档
+- [**1903**Star][3m] [Go] [minishift/minishift](https://github.com/minishift/minishift) Run OpenShift 3.x locally
+- [**1901**Star][9d] [C] [chipsec/chipsec](https://github.com/chipsec/chipsec) Platform Security Assessment Framework
+- [**1900**Star][1y] [Py] [derv82/wifite2](https://github.com/derv82/wifite2) Rewrite of the popular wireless network auditor, "wifite"
+- [**1898**Star][3d] [C++] [mhammond/pywin32](https://github.com/mhammond/pywin32) Python for Windows (pywin32) Extensions
+- [**1896**Star][7d] [Shell] [toniblyx/prowler](https://github.com/toniblyx/prowler) AWS Security Best Practices Assessment, Auditing, Hardening and Forensics Readiness Tool. It follows guidelines of the CIS Amazon Web Services Foundations Benchmark and DOZENS of additional checks including GDPR and HIPAA (+100). Official CIS for AWS guide:
+- [**1893**Star][6d] [Py] [mozilla/mozdef](https://github.com/mozilla/mozdef) Mozilla Enterprise Defense Platform
+- [**1893**Star][6m] [Java] [fuzion24/justtrustme](https://github.com/fuzion24/justtrustme) An xposed module that disables SSL certificate checking for the purposes of auditing an app with cert pinning
+- [**1886**Star][4m] [C] [shadowsocks/simple-obfs](https://github.com/shadowsocks/simple-obfs) A simple obfuscating tool (Deprecated)
+- [**1884**Star][1y] [Py] [aploium/zmirror](https://github.com/aploium/zmirror) The next-gen reverse proxy for full site mirroring
+- [**1880**Star][4m] [Py] [python-security/pyt](https://github.com/python-security/pyt) A Static Analysis Tool for Detecting Security Vulnerabilities in Python Web Applications
+- [**1878**Star][16d] [YARA] [yara-rules/rules](https://github.com/yara-rules/rules) Repository of yara rules
+- [**1878**Star][5y] [C++] [tum-vision/lsd_slam](https://github.com/tum-vision/lsd_slam) LSD-SLAM
+- [**1878**Star][2m] [Py] [pycqa/bandit](https://github.com/pycqa/bandit) find common security issues in Python code.
+- [**1877**Star][2d] [C] [merbanan/rtl_433](https://github.com/merbanan/rtl_433) Program to decode traffic from Devices that are broadcasting on 433.9 MHz like temperature sensors
+- [**1876**Star][9d] [olivierlaflamme/cheatsheet-god](https://github.com/olivierlaflamme/cheatsheet-god) Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet
+- [**1876**Star][27d] [hmaverickadams/beginner-network-pentesting](https://github.com/hmaverickadams/beginner-network-pentesting) Notes for Beginner Network Pentesting Course
+- [**1873**Star][12d] [Py] [aquasecurity/kube-hunter](https://github.com/aquasecurity/kube-hunter) Hunt for security weaknesses in Kubernetes clusters
+- [**1870**Star][5d] [C#] [hmbsbige/shadowsocksr-windows](https://github.com/hmbsbige/shadowsocksr-windows) 【自用】Bug-Oriented Programming
+- [**1869**Star][6d] [Java] [adoptopenjdk/jitwatch](https://github.com/adoptopenjdk/jitwatch) Log analyser / visualiser for Java HotSpot JIT compiler. Inspect inlining decisions, hot methods, bytecode, and assembly. View results in the JavaFX user interface.
+- [**1865**Star][6d] [C++] [acidanthera/lilu](https://github.com/acidanthera/Lilu) Arbitrary kext and process patching on macOS
+- [**1865**Star][10m] [PHP] [bartblaze/php-backdoors](https://github.com/bartblaze/php-backdoors) A collection of PHP backdoors. For educational or testing purposes only.
+- [**1864**Star][23d] [C] [tinyproxy/tinyproxy](https://github.com/tinyproxy/tinyproxy) a light-weight HTTP/HTTPS proxy daemon for POSIX operating systems
+- [**1862**Star][4y] [ObjC] [xcodeghostsource/xcodeghost](https://github.com/xcodeghostsource/xcodeghost) "XcodeGhost" Source
+- [**1860**Star][9d] [Lua] [vulnerscom/nmap-vulners](https://github.com/vulnerscom/nmap-vulners) NSE script based on Vulners.com API
+- [**1857**Star][5m] [bypass007/emergency-response-notes](https://github.com/bypass007/emergency-response-notes) 应急响应实战笔记,一个安全工程师的自我修养。
+- [**1855**Star][2m] [Py] [pwnlandia/mhn](https://github.com/pwnlandia/mhn) Modern Honey Network
+- [**1854**Star][5d] [TS] [snyk/snyk](https://github.com/snyk/snyk) CLI and build-time tool to find & fix known vulnerabilities in open-source dependencies
+- [**1854**Star][11m] [C++] [googlecreativelab/open-nsynth-super](https://github.com/googlecreativelab/open-nsynth-super) Open NSynth Super is an experimental physical interface for the NSynth algorithm
+- [**1853**Star][2d] [Py] [bregman-arie/devops-interview-questions](https://github.com/bregman-arie/devops-interview-questions) Linux, Jenkins, AWS, SRE, Prometheus, Docker, Python, Ansible, Git, Kubernetes, Terraform, OpenStack, SQL, NoSQL, Azure, GCP, DNS, Elastic
+- [**1853**Star][4m] [Shell] [arismelachroinos/lscript](https://github.com/arismelachroinos/lscript) The LAZY script will make your life easier, and of course faster.
+- [**1852**Star][3d] [C] [github/glb-director](https://github.com/github/glb-director) GitHub Load Balancer Director and supporting tooling.
+- [**1851**Star][1y] [Java] [jindrapetrik/jpexs-decompiler](https://github.com/jindrapetrik/jpexs-decompiler) JPEXS Free Flash Decompiler
+- [**1848**Star][6m] [Assembly] [pooler/cpuminer](https://github.com/pooler/cpuminer) cpuminer:莱特币和比特币的多线程 CPU 矿机
+- [**1847**Star][8m] [Py] [netflix-skunkworks/stethoscope](https://github.com/Netflix-Skunkworks/stethoscope) Personalized, user-focused recommendations for employee information security.
+- [**1842**Star][1m] [Jupyter Notebook] [hunters-forge/threathunter-playbook](https://github.com/hunters-forge/ThreatHunter-Playbook) A Threat hunter's playbook to aid the development of techniques and hypothesis for hunting campaigns.
+- [**1842**Star][1y] [Java] [yeriomin/yalpstore](https://github.com/yeriomin/yalpstore) Download apks from Google Play Store
+- [**1842**Star][2d] [C++] [pytorch/glow](https://github.com/pytorch/glow) Compiler for Neural Network hardware accelerators
- [**1841**Star][2m] [C] [retroplasma/earth-reverse-engineering](https://github.com/retroplasma/earth-reverse-engineering) Reversing Google's 3D satellite mode
-- [**1839**Star][4m] [bypass007/emergency-response-notes](https://github.com/bypass007/emergency-response-notes) 应急响应实战笔记,一个安全工程师的自我修养。
-- [**1837**Star][4m] [Lua] [vulnerscom/nmap-vulners](https://github.com/vulnerscom/nmap-vulners) NSE script based on Vulners.com API
-- [**1836**Star][3y] [Java] [chora10/cknife](https://github.com/chora10/cknife) Cknife
-- [**1835**Star][1y] [Java] [yeriomin/yalpstore](https://github.com/yeriomin/yalpstore) Download apks from Google Play Store
-- [**1833**Star][25d] [hmaverickadams/beginner-network-pentesting](https://github.com/hmaverickadams/beginner-network-pentesting) Notes for Beginner Network Pentesting Course
-- [**1832**Star][4m] [Shell] [arismelachroinos/lscript](https://github.com/arismelachroinos/lscript) The LAZY script will make your life easier, and of course faster.
-- [**1830**Star][7d] [C++] [pytorch/glow](https://github.com/pytorch/glow) Compiler for Neural Network hardware accelerators
-- [**1829**Star][1y] [Py] [jinnlynn/genpac](https://github.com/jinnlynn/genpac) PAC/Dnsmasq/Wingy file Generator, working with gfwlist, support custom rules.
-- [**1827**Star][1m] [Jupyter Notebook] [hunters-forge/threathunter-playbook](https://github.com/hunters-forge/ThreatHunter-Playbook) A Threat hunter's playbook to aid the development of techniques and hypothesis for hunting campaigns.
-- [**1827**Star][2m] [Go] [influxdata/kapacitor](https://github.com/influxdata/kapacitor) Open source framework for processing, monitoring, and alerting on time series data
-- [**1827**Star][1y] [CSS] [ctfs/write-ups-2015](https://github.com/ctfs/write-ups-2015) Wiki-like CTF write-ups repository, maintained by the community. 2015
-- [**1819**Star][13d] [Py] [trailofbits/manticore](https://github.com/trailofbits/manticore) Symbolic execution tool
-- [**1816**Star][19d] [C] [mgba-emu/mgba](https://github.com/mgba-emu/mgba) mGBA Game Boy Advance Emulator
-- [**1814**Star][7d] [Py] [bregman-arie/devops-interview-questions](https://github.com/bregman-arie/devops-interview-questions) Linux, Jenkins, AWS, SRE, Prometheus, Docker, Python, Ansible, Git, Kubernetes, Terraform, OpenStack, SQL, NoSQL, Azure, GCP, DNS, Elastic
-- [**1808**Star][6m] [C++] [iagox86/dnscat2](https://github.com/iagox86/dnscat2) create an encrypted command-and-control (C&C) channel over the DNS protocol, which is an effective tunnel out of almost every network.
-- [**1806**Star][5m] [Py] [veil-framework/veil](https://github.com/veil-framework/veil) generate metasploit payloads that bypass common anti-virus solutions
-- [**1801**Star][3y] [Objective-C] [kpwn/yalu102](https://github.com/kpwn/yalu102) incomplete iOS 10.2 jailbreak for 64 bit devices by qwertyoruiopz and marcograssi
-- [**1801**Star][2m] [djadmin/awesome-bug-bounty](https://github.com/djadmin/awesome-bug-bounty) A comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.
-- [**1788**Star][28d] [Go] [gdamore/tcell](https://github.com/gdamore/tcell) Tcell is an alternate terminal package, similar in some ways to termbox, but better in others.
-- [**1785**Star][11m] [Py] [ctfs/write-ups-2017](https://github.com/ctfs/write-ups-2017) Wiki-like CTF write-ups repository, maintained by the community. 2017
-- [**1784**Star][7d] [C#] [hmbsbige/shadowsocksr-windows](https://github.com/hmbsbige/shadowsocksr-windows) 【自用】Bug-Oriented Programming
-- [**1783**Star][7m] [Py] [lijiejie/subdomainsbrute](https://github.com/lijiejie/subdomainsbrute) A fast sub domain brute tool for pentesters
-- [**1777**Star][18d] [PHP] [ezyang/htmlpurifier](https://github.com/ezyang/htmlpurifier) Standards compliant HTML filter written in PHP
-- [**1776**Star][13d] [C++] [apitrace/apitrace](https://github.com/apitrace/apitrace) Tools for tracing OpenGL, Direct3D, and other graphics APIs
-- [**1775**Star][4y] [caesar0301/awesome-pcaptools](https://github.com/caesar0301/awesome-pcaptools) A collection of tools developed by other researchers in the Computer Science area to process network traces. All the right reserved for the original authors.
-- [**1774**Star][1y] [aozhimin/ios-monitor-platform](https://github.com/aozhimin/ios-monitor-platform)
-- [**1770**Star][3y] [Objective-C] [alibaba/wax](https://github.com/alibaba/wax) Wax is a framework that lets you write native iPhone apps in Lua.
-- [**1768**Star][13d] [Shell] [leebaird/discover](https://github.com/leebaird/discover) Custom bash scripts used to automate various penetration testing tasks including recon, scanning, parsing, and creating malicious payloads and listeners with Metasploit.
-- [**1764**Star][3m] [Py] [epinna/weevely3](https://github.com/epinna/weevely3) Weaponized web shell
-- [**1759**Star][12d] [C] [google/wuffs](https://github.com/google/wuffs) Wrangling Untrusted File Formats Safely
-- [**1757**Star][7m] [C++] [wrbug/dumpdex](https://github.com/wrbug/dumpdex) Android unpack
-- [**1757**Star][2y] [CSS] [b374k/b374k](https://github.com/b374k/b374k) PHP Webshell with handy features
-- [**1749**Star][2m] [onethawt/idaplugins-list](https://github.com/onethawt/idaplugins-list) A list of IDA Plugins
-- [**1747**Star][8d] [17mon/china_ip_list](https://github.com/17mon/china_ip_list)
-- [**1743**Star][12m] [JS] [puppeteer/examples](https://github.com/puppeteer/examples) Use case-driven examples for using Puppeteer and headless chrome
-- [**1740**Star][8d] [PHP] [wordpress/wordpress-coding-standards](https://github.com/wordpress/wordpress-coding-standards) PHP_CodeSniffer rules (sniffs) to enforce WordPress coding conventions
+- [**1839**Star][3y] [Java] [chora10/cknife](https://github.com/chora10/cknife) Cknife
+- [**1838**Star][1y] [Py] [jinnlynn/genpac](https://github.com/jinnlynn/genpac) PAC/Dnsmasq/Wingy file Generator, working with gfwlist, support custom rules.
+- [**1830**Star][2m] [Go] [influxdata/kapacitor](https://github.com/influxdata/kapacitor) Open source framework for processing, monitoring, and alerting on time series data
+- [**1828**Star][3m] [JS] [coreybutler/node-windows](https://github.com/coreybutler/node-windows) Windows support for Node.JS scripts (daemons, eventlog, UAC, etc).
+- [**1828**Star][1y] [CSS] [ctfs/write-ups-2015](https://github.com/ctfs/write-ups-2015) Wiki-like CTF write-ups repository, maintained by the community. 2015
+- [**1824**Star][5d] [Py] [trailofbits/manticore](https://github.com/trailofbits/manticore) Symbolic execution tool
+- [**1819**Star][6d] [C] [mgba-emu/mgba](https://github.com/mgba-emu/mgba) mGBA Game Boy Advance Emulator
+- [**1818**Star][2m] [djadmin/awesome-bug-bounty](https://github.com/djadmin/awesome-bug-bounty) A comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.
+- [**1815**Star][5m] [Py] [veil-framework/veil](https://github.com/veil-framework/veil) generate metasploit payloads that bypass common anti-virus solutions
+- [**1814**Star][6m] [C++] [iagox86/dnscat2](https://github.com/iagox86/dnscat2) create an encrypted command-and-control (C&C) channel over the DNS protocol, which is an effective tunnel out of almost every network.
+- [**1804**Star][10d] [Go] [gdamore/tcell](https://github.com/gdamore/tcell) Tcell is an alternate terminal package, similar in some ways to termbox, but better in others.
+- [**1801**Star][12m] [Go] [intelsdi-x/snap](https://github.com/intelsdi-x/snap) an open telemetry framework designed to simplify the collection, processing and publishing of system data through a single API.
+- [**1800**Star][3y] [ObjC] [kpwn/yalu102](https://github.com/kpwn/yalu102) incomplete iOS 10.2 jailbreak for 64 bit devices by qwertyoruiopz and marcograssi
+- [**1795**Star][7m] [Py] [lijiejie/subdomainsbrute](https://github.com/lijiejie/subdomainsbrute) A fast sub domain brute tool for pentesters
+- [**1790**Star][12m] [Py] [ctfs/write-ups-2017](https://github.com/ctfs/write-ups-2017) Wiki-like CTF write-ups repository, maintained by the community. 2017
+- [**1785**Star][1y] [aozhimin/ios-monitor-platform](https://github.com/aozhimin/ios-monitor-platform)
+- [**1784**Star][16d] [Shell] [pirate/wireguard-docs](https://github.com/pirate/wireguard-docs)
+- [**1781**Star][15d] [Shell] [leebaird/discover](https://github.com/leebaird/discover) Custom bash scripts used to automate various penetration testing tasks including recon, scanning, parsing, and creating malicious payloads and listeners with Metasploit.
+- [**1779**Star][4y] [caesar0301/awesome-pcaptools](https://github.com/caesar0301/awesome-pcaptools) A collection of tools developed by other researchers in the Computer Science area to process network traces. All the right reserved for the original authors.
+- [**1778**Star][15d] [C++] [apitrace/apitrace](https://github.com/apitrace/apitrace) Tools for tracing OpenGL, Direct3D, and other graphics APIs
+- [**1777**Star][7m] [C++] [wrbug/dumpdex](https://github.com/wrbug/dumpdex) Android unpack
+- [**1777**Star][7d] [PHP] [ezyang/htmlpurifier](https://github.com/ezyang/htmlpurifier) Standards compliant HTML filter written in PHP
+- [**1777**Star][5d] [Go] [convox/rack](https://github.com/convox/rack) Private PaaS built on native AWS services for maximum privacy and minimum upkeep
+- [**1774**Star][3y] [ObjC] [tapwork/heapinspector-for-ios](https://github.com/tapwork/heapinspector-for-ios) Find memory issues & leaks in your iOS app without instruments
+- [**1774**Star][3m] [Py] [epinna/weevely3](https://github.com/epinna/weevely3) Weaponized web shell
+- [**1772**Star][2y] [JS] [cazala/coin-hive](https://github.com/cazala/coin-hive) CoinHive cryptocurrency miner for node.js
+- [**1770**Star][3y] [ObjC] [alibaba/wax](https://github.com/alibaba/wax) Wax is a framework that lets you write native iPhone apps in Lua.
+- [**1761**Star][6d] [C] [google/wuffs](https://github.com/google/wuffs) Wrangling Untrusted File Formats Safely
+- [**1761**Star][2y] [CSS] [b374k/b374k](https://github.com/b374k/b374k) PHP Webshell with handy features
+- [**1760**Star][3y] [Go] [elastic/logstash-forwarder](https://github.com/elastic/logstash-forwarder) An experiment to cut logs in preparation for processing elsewhere. Replaced by Filebeat:
+- [**1758**Star][12m] [JS] [puppeteer/examples](https://github.com/puppeteer/examples) Use case-driven examples for using Puppeteer and headless chrome
+- [**1756**Star][10d] [17mon/china_ip_list](https://github.com/17mon/china_ip_list)
+- [**1754**Star][2m] [onethawt/idaplugins-list](https://github.com/onethawt/idaplugins-list) A list of IDA Plugins
+- [**1747**Star][2d] [PHP] [wordpress/wordpress-coding-standards](https://github.com/wordpress/wordpress-coding-standards) PHP_CodeSniffer rules (sniffs) to enforce WordPress coding conventions
+- [**1745**Star][1y] [PS] [fuzzysecurity/powershell-suite](https://github.com/fuzzysecurity/powershell-suite) My musings with PowerShell
+- [**1744**Star][1y] [coreb1t/awesome-pentest-cheat-sheets](https://github.com/coreb1t/awesome-pentest-cheat-sheets) Collection of the cheat sheets useful for pentesting
+- [**1742**Star][3m] [tunz/js-vuln-db](https://github.com/tunz/js-vuln-db) A collection of JavaScript engine CVEs with PoCs
+- [**1739**Star][21d] [ngalongc/bug-bounty-reference](https://github.com/ngalongc/bug-bounty-reference) Inspired by
- [**1738**Star][2y] [Go] [vzex/dog-tunnel](https://github.com/vzex/dog-tunnel) p2p tunnel,(udp mode work with kcp,
-- [**1734**Star][3m] [tunz/js-vuln-db](https://github.com/tunz/js-vuln-db) A collection of JavaScript engine CVEs with PoCs
-- [**1732**Star][1y] [coreb1t/awesome-pentest-cheat-sheets](https://github.com/coreb1t/awesome-pentest-cheat-sheets) Collection of the cheat sheets useful for pentesting
-- [**1727**Star][2m] [PHP] [orangetw/my-ctf-web-challenges](https://github.com/orangetw/my-ctf-web-challenges) Collection of CTF Web challenges I made
-- [**1726**Star][3y] [Go] [s-rah/onionscan](https://github.com/s-rah/onionscan) OnionScan is a free and open source tool for investigating the Dark Web.
-- [**1723**Star][6m] [Smali] [ahmyth/ahmyth-android-rat](https://github.com/ahmyth/ahmyth-android-rat) Android Remote Administration Tool
-- [**1722**Star][1y] [PowerShell] [fuzzysecurity/powershell-suite](https://github.com/fuzzysecurity/powershell-suite) My musings with PowerShell
-- [**1720**Star][19d] [ngalongc/bug-bounty-reference](https://github.com/ngalongc/bug-bounty-reference) Inspired by
-- [**1718**Star][1m] [PowerShell] [fireeye/flare-vm](https://github.com/fireeye/flare-vm) FireEye Labs Advanced Reverse Engineering
-- [**1717**Star][7d] [C] [google/honggfuzz](https://github.com/google/honggfuzz) Security oriented fuzzer with powerful analysis options. Supports evolutionary, feedback-driven fuzzing based on code coverage (software- and hardware-based)
-- [**1714**Star][2m] [Go] [subfinder/subfinder](https://github.com/subfinder/subfinder) 使用Passive Sources, Search Engines, Pastebins, Internet Archives等查找子域名
-- [**1709**Star][9m] [Py] [constverum/proxybroker](https://github.com/constverum/proxybroker) Proxy [Finder | Checker | Server]. HTTP(S) & SOCKS
-- [**1708**Star][10d] [Ruby] [cliffe/secgen](https://github.com/cliffe/secgen) Create randomly insecure VMs
-- [**1705**Star][4m] [Py] [lgandx/responder](https://github.com/lgandx/responder) Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.
-- [**1702**Star][1y] [Java] [ac-pm/inspeckage](https://github.com/ac-pm/inspeckage) Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)
-- [**1695**Star][1m] [Go] [eth0izzle/shhgit](https://github.com/eth0izzle/shhgit) Find GitHub secrets in real time
-- [**1694**Star][3m] [PHP] [xtr4nge/fruitywifi](https://github.com/xtr4nge/fruitywifi) FruityWiFi is a wireless network auditing tool. The application can be installed in any Debian based system (Jessie) adding the extra packages. Tested in Debian, Kali Linux, Kali Linux ARM (Raspberry Pi), Raspbian (Raspberry Pi), Pwnpi (Raspberry Pi), Bugtraq, NetHunter.
-- [**1694**Star][3y] [CoffeeScript] [okturtles/dnschain](https://github.com/okturtles/dnschain) A blockchain-based DNS + HTTP server that fixes HTTPS security, and more!
-- [**1694**Star][1y] [Swift] [haxpor/potatso](https://github.com/haxpor/potatso) Potatso is an iOS client that implements Shadowsocks proxy with the leverage of NetworkExtension framework. ***This project is unmaintained, try taking a look at this fork
-- [**1694**Star][14d] [Go] [hashicorp/memberlist](https://github.com/hashicorp/memberlist) Golang package for gossip based membership and failure detection
-- [**1693**Star][8m] [Py] [guelfoweb/knock](https://github.com/guelfoweb/knock) Knock Subdomain Scan
-- [**1693**Star][7d] [TSQL] [brentozarultd/sql-server-first-responder-kit](https://github.com/brentozarultd/sql-server-first-responder-kit) sp_Blitz, sp_BlitzCache, sp_BlitzFirst, sp_BlitzIndex, and other SQL Server scripts for health checks and performance tuning.
-- [**1693**Star][3m] [Py] [anorov/cloudflare-scrape](https://github.com/anorov/cloudflare-scrape) A Python module to bypass Cloudflare's anti-bot page.
-- [**1691**Star][6m] [Py] [yelp/osxcollector](https://github.com/yelp/osxcollector) A forensic evidence collection & analysis toolkit for OS X
-- [**1687**Star][4m] [JS] [expressjs/csurf](https://github.com/expressjs/csurf) CSRF token middleware
-- [**1685**Star][5m] [C] [networkprotocol/netcode.io](https://github.com/networkprotocol/netcode.io) A protocol for secure client/server connections over UDP
-- [**1682**Star][8m] [Makefile] [raspberrypi/noobs](https://github.com/raspberrypi/noobs) NOOBS (New Out Of Box Software) - An easy Operating System install manager for the Raspberry Pi
-- [**1682**Star][1y] [owasp/devguide](https://github.com/owasp/devguide) The OWASP Guide
-- [**1681**Star][13d] [HTML] [chromium/badssl.com](https://github.com/chromium/badssl.com)
-- [**1681**Star][9m] [CSS] [bagder/http2-explained](https://github.com/bagder/http2-explained) A detailed document explaining and documenting HTTP/2, the successor to the widely popular HTTP/1.1 protocol
-- [**1676**Star][28d] [Swift] [pmusolino/wormholy](https://github.com/pmusolino/wormholy) iOS network debugging, like a wizard 🧙♂️
-- [**1675**Star][4m] [R] [briatte/awesome-network-analysis](https://github.com/briatte/awesome-network-analysis) A curated list of awesome network analysis resources.
-- [**1674**Star][2m] [Py] [rootm0s/winpwnage](https://github.com/rootm0s/winpwnage) UAC bypass, Elevate, Persistence and Execution methods
-- [**1668**Star][7m] [C++] [yegord/snowman](https://github.com/yegord/snowman) a native code to C/C++ decompiler, supporting x86, AMD64, and ARM architectures
+- [**1735**Star][2m] [PHP] [orangetw/my-ctf-web-challenges](https://github.com/orangetw/my-ctf-web-challenges) Collection of CTF Web challenges I made
+- [**1731**Star][1m] [PS] [fireeye/flare-vm](https://github.com/fireeye/flare-vm) FireEye Labs Advanced Reverse Engineering
+- [**1730**Star][3y] [Go] [s-rah/onionscan](https://github.com/s-rah/onionscan) OnionScan is a free and open source tool for investigating the Dark Web.
+- [**1730**Star][6m] [Smali] [ahmyth/ahmyth-android-rat](https://github.com/ahmyth/ahmyth-android-rat) Android Remote Administration Tool
+- [**1723**Star][14d] [selierlin/share-ssr-v2ray](https://github.com/selierlin/share-ssr-v2ray)
+- [**1719**Star][4d] [C] [google/honggfuzz](https://github.com/google/honggfuzz) Security oriented fuzzer with powerful analysis options. Supports evolutionary, feedback-driven fuzzing based on code coverage (software- and hardware-based)
+- [**1718**Star][9m] [Py] [constverum/proxybroker](https://github.com/constverum/proxybroker) Proxy [Finder | Checker | Server]. HTTP(S) & SOCKS
+- [**1717**Star][4m] [Py] [lgandx/responder](https://github.com/lgandx/responder) Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.
+- [**1714**Star][5d] [Ruby] [cliffe/secgen](https://github.com/cliffe/secgen) Create randomly insecure VMs
+- [**1710**Star][1m] [Go] [eth0izzle/shhgit](https://github.com/eth0izzle/shhgit) Find GitHub secrets in real time
+- [**1709**Star][3m] [Py] [anorov/cloudflare-scrape](https://github.com/anorov/cloudflare-scrape) A Python module to bypass Cloudflare's anti-bot page.
+- [**1709**Star][1y] [Java] [ac-pm/inspeckage](https://github.com/ac-pm/inspeckage) Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)
+- [**1707**Star][3d] [TSQL] [brentozarultd/sql-server-first-responder-kit](https://github.com/brentozarultd/sql-server-first-responder-kit) sp_Blitz, sp_BlitzCache, sp_BlitzFirst, sp_BlitzIndex, and other SQL Server scripts for health checks and performance tuning.
+- [**1706**Star][16d] [Go] [hashicorp/memberlist](https://github.com/hashicorp/memberlist) Golang package for gossip based membership and failure detection
+- [**1700**Star][8m] [Py] [guelfoweb/knock](https://github.com/guelfoweb/knock) Knock Subdomain Scan
+- [**1697**Star][9m] [CSS] [bagder/http2-explained](https://github.com/bagder/http2-explained) A detailed document explaining and documenting HTTP/2, the successor to the widely popular HTTP/1.1 protocol
+- [**1696**Star][3m] [PHP] [xtr4nge/fruitywifi](https://github.com/xtr4nge/fruitywifi) FruityWiFi is a wireless network auditing tool. The application can be installed in any Debian based system (Jessie) adding the extra packages. Tested in Debian, Kali Linux, Kali Linux ARM (Raspberry Pi), Raspbian (Raspberry Pi), Pwnpi (Raspberry Pi), Bugtraq, NetHunter.
+- [**1696**Star][1y] [Swift] [haxpor/potatso](https://github.com/haxpor/potatso) Potatso is an iOS client that implements Shadowsocks proxy with the leverage of NetworkExtension framework. ***This project is unmaintained, try taking a look at this fork
+- [**1695**Star][6m] [Py] [yelp/osxcollector](https://github.com/yelp/osxcollector) A forensic evidence collection & analysis toolkit for OS X
+- [**1695**Star][3y] [CoffeeScript] [okturtles/dnschain](https://github.com/okturtles/dnschain) A blockchain-based DNS + HTTP server that fixes HTTPS security, and more!
+- [**1689**Star][5m] [C] [networkprotocol/netcode.io](https://github.com/networkprotocol/netcode.io) A protocol for secure client/server connections over UDP
+- [**1687**Star][5m] [JS] [expressjs/csurf](https://github.com/expressjs/csurf) CSRF token middleware
+- [**1687**Star][15d] [HTML] [chromium/badssl.com](https://github.com/chromium/badssl.com)
+- [**1686**Star][8m] [Makefile] [raspberrypi/noobs](https://github.com/raspberrypi/noobs) NOOBS (New Out Of Box Software) - An easy Operating System install manager for the Raspberry Pi
+- [**1685**Star][4m] [R] [briatte/awesome-network-analysis](https://github.com/briatte/awesome-network-analysis) A curated list of awesome network analysis resources.
+- [**1683**Star][1y] [owasp/devguide](https://github.com/owasp/devguide) The OWASP Guide
+- [**1682**Star][3m] [Py] [rootm0s/winpwnage](https://github.com/rootm0s/winpwnage) UAC bypass, Elevate, Persistence and Execution methods
+- [**1677**Star][30d] [Swift] [pmusolino/wormholy](https://github.com/pmusolino/wormholy) iOS network debugging, like a wizard 🧙♂️
+- [**1674**Star][2d] [C++] [microsoft/detours](https://github.com/microsoft/detours) Detours is a software package for monitoring and instrumenting API calls on Windows. It is distributed in source code form.
+- [**1671**Star][7m] [C++] [yegord/snowman](https://github.com/yegord/snowman) a native code to C/C++ decompiler, supporting x86, AMD64, and ARM architectures
- [IDA插件](https://github.com/yegord/snowman/tree/master/src/ida-plugin)
- [snowman](https://github.com/yegord/snowman/tree/master/src/snowman) QT界面
- [nocode](https://github.com/yegord/snowman/tree/master/src/nocode) 命令行工具
- [nc](https://github.com/yegord/snowman/tree/master/src/nc) 核心代码,可作为库使用
-- [**1665**Star][6m] [C++] [microsoft/detours](https://github.com/microsoft/detours) Detours is a software package for monitoring and instrumenting API calls on Windows. It is distributed in source code form.
-- [**1662**Star][12d] [selierlin/share-ssr-v2ray](https://github.com/selierlin/share-ssr-v2ray)
-- [**1662**Star][4y] [Java] [dodola/hotfix](https://github.com/dodola/hotfix) 安卓App热补丁动态修复框架
-- [**1659**Star][7d] [Java] [apache/geode](https://github.com/apache/geode) Apache Geode
-- [**1655**Star][6m] [C] [easyhook/easyhook](https://github.com/easyhook/easyhook) The reinvention of Windows API Hooking
-- [**1654**Star][3m] [JS] [tylerbrock/mongo-hacker](https://github.com/tylerbrock/mongo-hacker) MongoDB Shell Enhancements for Hackers
-- [**1653**Star][2m] [NSIS] [angryip/ipscan](https://github.com/angryip/ipscan) Angry IP Scanner - fast and friendly network scanner
-- [**1651**Star][7d] [Py] [cea-sec/ivre](https://github.com/cea-sec/ivre) Network recon framework.
-- [**1650**Star][2y] [Shell] [juude/droidreverse](https://github.com/juude/droidreverse) reverse engineering tools for android
-- [**1649**Star][10m] [JS] [evilcos/xssor2](https://github.com/evilcos/xssor2) XSS'OR - Hack with JavaScript.
-- [**1647**Star][3m] [Py] [boppreh/keyboard](https://github.com/boppreh/keyboard) Hook and simulate global keyboard events on Windows and Linux.
-- [**1646**Star][8d] [roave/securityadvisories](https://github.com/roave/securityadvisories) ensures that your application doesn't have installed dependencies with known security vulnerabilities
-- [**1646**Star][8d] [JS] [ghacksuserjs/ghacks-user.js](https://github.com/ghacksuserjs/ghacks-user.js) An ongoing comprehensive user.js template for configuring and hardening Firefox privacy, security and anti-fingerprinting
+- [**1668**Star][2m] [NSIS] [angryip/ipscan](https://github.com/angryip/ipscan) Angry IP Scanner - fast and friendly network scanner
+- [**1666**Star][2d] [Java] [apache/geode](https://github.com/apache/geode) Apache Geode
+- [**1663**Star][4y] [Java] [dodola/hotfix](https://github.com/dodola/hotfix) 安卓App热补丁动态修复框架
+- [**1661**Star][6m] [C] [easyhook/easyhook](https://github.com/easyhook/easyhook) The reinvention of Windows API Hooking
+- [**1661**Star][2d] [Py] [cea-sec/ivre](https://github.com/cea-sec/ivre) Network recon framework.
+- [**1659**Star][10d] [roave/securityadvisories](https://github.com/roave/securityadvisories) ensures that your application doesn't have installed dependencies with known security vulnerabilities
+- [**1656**Star][6d] [JS] [tylerbrock/mongo-hacker](https://github.com/tylerbrock/mongo-hacker) MongoDB Shell Enhancements for Hackers
+- [**1655**Star][3m] [Py] [boppreh/keyboard](https://github.com/boppreh/keyboard) Hook and simulate global keyboard events on Windows and Linux.
+- [**1654**Star][2d] [JS] [ghacksuserjs/ghacks-user.js](https://github.com/ghacksuserjs/ghacks-user.js) An ongoing comprehensive user.js template for configuring and hardening Firefox privacy, security and anti-fingerprinting
+- [**1652**Star][2y] [Shell] [juude/droidreverse](https://github.com/juude/droidreverse) reverse engineering tools for android
+- [**1652**Star][7m] [dsasmblr/game-hacking](https://github.com/dsasmblr/game-hacking) Tutorials, tools, and more as related to reverse engineering video games.
+- [**1651**Star][10m] [JS] [evilcos/xssor2](https://github.com/evilcos/xssor2) XSS'OR - Hack with JavaScript.
+- [**1650**Star][1m] [Py] [ehco1996/django-sspanel](https://github.com/ehco1996/django-sspanel) 用diango开发的全新的shadowsocks网络面板
+- [**1650**Star][7d] [HTML] [clong/detectionlab](https://github.com/clong/detectionlab) Vagrant & Packer scripts to build a lab environment complete with security tooling and logging best practices
+- [**1649**Star][1y] [Py] [evyatarmeged/raccoon](https://github.com/evyatarmeged/raccoon) A high performance offensive security tool for reconnaissance and vulnerability scanning
+- [**1648**Star][2d] [C#] [jbevain/cecil](https://github.com/jbevain/cecil) Cecil is a library to inspect, modify and create .NET programs and libraries.
- [**1645**Star][3y] [JS] [camwiegert/baffle](https://github.com/camwiegert/baffle) A tiny javascript library for obfuscating and revealing text in DOM elements.
-- [**1643**Star][1m] [C#] [jbevain/cecil](https://github.com/jbevain/cecil) Cecil is a library to inspect, modify and create .NET programs and libraries.
-- [**1641**Star][1y] [Py] [evyatarmeged/raccoon](https://github.com/evyatarmeged/raccoon) A high performance offensive security tool for reconnaissance and vulnerability scanning
-- [**1641**Star][6m] [dsasmblr/game-hacking](https://github.com/dsasmblr/game-hacking) Tutorials, tools, and more as related to reverse engineering video games.
-- [**1639**Star][1m] [Py] [ehco1996/django-sspanel](https://github.com/ehco1996/django-sspanel) 用diango开发的全新的shadowsocks网络面板
-- [**1637**Star][13d] [HTML] [clong/detectionlab](https://github.com/clong/detectionlab) Vagrant & Packer scripts to build a lab environment complete with security tooling and logging best practices
-- [**1636**Star][11m] [Java] [fesh0r/fernflower](https://github.com/fesh0r/fernflower) Unofficial mirror of FernFlower Java decompiler (All pulls should be submitted upstream)
-- [**1635**Star][4y] [Py] [ctfs/write-ups-2014](https://github.com/ctfs/write-ups-2014) Wiki-like CTF write-ups repository, maintained by the community. 2014
-- [**1635**Star][4m] [Java] [jaredrummler/androidprocesses](https://github.com/jaredrummler/androidprocesses) DEPRECATED
-- [**1635**Star][4y] [Py] [ctfs/write-ups-2014](https://github.com/ctfs/write-ups-2014) Wiki-like CTF write-ups repository, maintained by the community. 2014
-- [**1629**Star][9m] [tylerha97/awesome-reversing](https://github.com/tylerha97/awesome-reversing) A curated list of awesome reversing resources
-- [**1627**Star][12d] [Go] [awnumar/memguard](https://github.com/awnumar/memguard) Secure software enclave for storage of sensitive information in memory.
-- [**1627**Star][9d] [sarojaba/awesome-devblog](https://github.com/sarojaba/awesome-devblog) 어썸데브블로그. 국내 개발 블로그 모음(only 실명으로).
-- [**1620**Star][14d] [JS] [efforg/privacybadger](https://github.com/efforg/privacybadger) Privacy Badger is a browser extension that automatically learns to block invisible trackers.
-- [**1616**Star][2y] [jhaddix/tbhm](https://github.com/jhaddix/tbhm) The Bug Hunters Methodology
-- [**1614**Star][2m] [Shell] [internetwache/gittools](https://github.com/internetwache/gittools) find websites with their .git repository available to the public
-- [**1612**Star][4m] [CSS] [functionclub/v2ray.fun](https://github.com/functionclub/v2ray.fun) 正在开发的全新 V2ray.Fun
-- [**1611**Star][2m] [Go] [ysrc/yulong-hids](https://github.com/ysrc/yulong-hids) 一款由 YSRC 开源的主机入侵检测系统
-- [**1610**Star][7m] [Go] [sipt/shuttle](https://github.com/sipt/shuttle) A web proxy in Golang with amazing features.
-- [**1608**Star][2y] [JS] [addyosmani/a11y](https://github.com/addyosmani/a11y) Accessibility audit tooling for the web (beta)
-- [**1607**Star][3y] [Makefile] [drizzlerisk/drizzledumper](https://github.com/drizzlerisk/drizzledumper) a memory-search-based Android unpack tool.
-- [**1605**Star][27d] [PHP] [c0ny1/upload-labs](https://github.com/c0ny1/upload-labs) 一个帮你总结所有类型的上传漏洞的靶场
-- [**1604**Star][10m] [C] [nmikhailov/validity90](https://github.com/nmikhailov/validity90) Reverse engineering of Validity/Synaptics 138a:0090, 138a:0094, 138a:0097, 06cb:0081, 06cb:009a fingerprint readers protocol
-- [**1602**Star][1y] [Py] [nccgroup/scout2](https://github.com/nccgroup/Scout2) Security auditing tool for AWS environments
+- [**1643**Star][9m] [tylerha97/awesome-reversing](https://github.com/tylerha97/awesome-reversing) A curated list of awesome reversing resources
+- [**1643**Star][11m] [Java] [fesh0r/fernflower](https://github.com/fesh0r/fernflower) Unofficial mirror of FernFlower Java decompiler (All pulls should be submitted upstream)
+- [**1638**Star][4y] [Py] [ctfs/write-ups-2014](https://github.com/ctfs/write-ups-2014) Wiki-like CTF write-ups repository, maintained by the community. 2014
+- [**1638**Star][11m] [C] [dlundquist/sniproxy](https://github.com/dlundquist/sniproxy) Proxies incoming HTTP and TLS connections based on the hostname contained in the initial request of the TCP session.
+- [**1638**Star][4y] [Py] [ctfs/write-ups-2014](https://github.com/ctfs/write-ups-2014) Wiki-like CTF write-ups repository, maintained by the community. 2014
+- [**1636**Star][4m] [Java] [jaredrummler/androidprocesses](https://github.com/jaredrummler/androidprocesses) DEPRECATED
+- [**1634**Star][14d] [Go] [awnumar/memguard](https://github.com/awnumar/memguard) Secure software enclave for storage of sensitive information in memory.
+- [**1631**Star][6m] [Objective-C++] [tencent/oomdetector](https://github.com/tencent/oomdetector) OOMDetector is a memory monitoring component for iOS which provides you with OOM monitoring, memory allocation monitoring, memory leak detection and other functions.
+- [**1630**Star][6d] [JS] [efforg/privacybadger](https://github.com/efforg/privacybadger) Privacy Badger is a browser extension that automatically learns to block invisible trackers.
+- [**1630**Star][29d] [PHP] [c0ny1/upload-labs](https://github.com/c0ny1/upload-labs) 一个帮你总结所有类型的上传漏洞的靶场
+- [**1629**Star][5d] [sarojaba/awesome-devblog](https://github.com/sarojaba/awesome-devblog) 어썸데브블로그. 국내 개발 블로그 모음(only 실명으로).
+- [**1624**Star][2y] [jhaddix/tbhm](https://github.com/jhaddix/tbhm) The Bug Hunters Methodology
+- [**1624**Star][4m] [CSS] [functionclub/v2ray.fun](https://github.com/functionclub/v2ray.fun) 正在开发的全新 V2ray.Fun
+- [**1621**Star][2m] [Shell] [internetwache/gittools](https://github.com/internetwache/gittools) find websites with their .git repository available to the public
+- [**1618**Star][28d] [Java] [tiann/epic](https://github.com/tiann/epic) Dynamic java method AOP hook for Android(continution of Dexposed on ART), Supporting 4.0~10.0
+- [**1615**Star][2y] [JS] [addyosmani/a11y](https://github.com/addyosmani/a11y) Accessibility audit tooling for the web (beta)
+- [**1614**Star][2m] [Go] [ysrc/yulong-hids](https://github.com/ysrc/yulong-hids) 一款由 YSRC 开源的主机入侵检测系统
+- [**1614**Star][7m] [Go] [sipt/shuttle](https://github.com/sipt/shuttle) A web proxy in Golang with amazing features.
+- [**1612**Star][3y] [Makefile] [drizzlerisk/drizzledumper](https://github.com/drizzlerisk/drizzledumper) a memory-search-based Android unpack tool.
+- [**1608**Star][9m] [JS] [localtunnel/server](https://github.com/localtunnel/server) server for localtunnel.me
+- [**1608**Star][10m] [C] [nmikhailov/validity90](https://github.com/nmikhailov/validity90) Reverse engineering of Validity/Synaptics 138a:0090, 138a:0094, 138a:0097, 06cb:0081, 06cb:009a fingerprint readers protocol
+- [**1606**Star][2d] [C++] [lief-project/lief](https://github.com/lief-project/lief) Library to Instrument Executable Formats
- [**1602**Star][6m] [Py] [w1109790800/penetration](https://github.com/w1109790800/penetration) 渗透 超全面的渗透资料
-- [**1600**Star][8d] [C++] [lief-project/lief](https://github.com/lief-project/lief) Library to Instrument Executable Formats
-- [**1599**Star][9m] [JS] [localtunnel/server](https://github.com/localtunnel/server) server for localtunnel.me
-- [**1596**Star][5m] [Py] [mozilla/cipherscan](https://github.com/mozilla/cipherscan) A very simple way to find out which SSL ciphersuites are supported by a target.
-- [**1596**Star][3m] [Py] [knownsec/pocsuite](https://github.com/knownsec/pocsuite) This project has stopped to maintenance, please to
-- [**1593**Star][26d] [Java] [tiann/epic](https://github.com/tiann/epic) Dynamic java method AOP hook for Android(continution of Dexposed on ART), Supporting 4.0~10.0
-- [**1588**Star][13d] [Java] [spotbugs/spotbugs](https://github.com/spotbugs/spotbugs) SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.
-- [**1583**Star][6m] [Ruby] [brunofacca/zen-rails-security-checklist](https://github.com/brunofacca/zen-rails-security-checklist) Checklist of security precautions for Ruby on Rails applications.
-- [**1580**Star][1y] [C] [qihoo360/phptrace](https://github.com/qihoo360/phptrace) A tracing and troubleshooting tool for PHP scripts.
-- [**1580**Star][7d] [Go] [bitnami-labs/sealed-secrets](https://github.com/bitnami-labs/sealed-secrets) A Kubernetes controller and tool for one-way encrypted Secrets
-- [**1577**Star][4y] [l3m0n/pentest_study](https://github.com/l3m0n/pentest_study) 从零开始内网渗透学习
-- [**1577**Star][1m] [Objective-C] [ealeksandrov/provisionql](https://github.com/ealeksandrov/provisionql) Quick Look plugin for apps and provisioning profile files
-- [**1575**Star][26d] [C] [ntop/n2n](https://github.com/ntop/n2n) Peer-to-peer VPN
-- [**1574**Star][22d] [ivrodriguezca/re-ios-apps](https://github.com/ivrodriguezca/re-ios-apps) A completely free, open source and online course about Reverse Engineering iOS Applications.
-- [**1563**Star][2y] [C] [samyk/pwnat](https://github.com/samyk/pwnat) The only tool and technique to punch holes through firewalls/NATs where both clients and server can be behind separate NATs without any 3rd party involvement. Pwnat uses a newly developed technique, exploiting a property of NAT translation tables, with no 3rd party, port forwarding, DMZ, router administrative requirements, STUN/TURN/UPnP/ICE, or…
-- [**1563**Star][12d] [C] [codahale/bcrypt-ruby](https://github.com/codahale/bcrypt-ruby) Ruby binding for the OpenBSD bcrypt() password hashing algorithm, allowing you to easily store a secure hash of your users' passwords.
-- [**1562**Star][17d] [C] [p-gen/smenu](https://github.com/p-gen/smenu) Terminal utility that reads words from standard input or from a file and creates an interactive selection window just below the cursor. The selected word(s) are sent to standard output for further processing.
-- [**1560**Star][14d] [Java] [gchq/gaffer](https://github.com/gchq/Gaffer) A large-scale entity and relation database supporting aggregation of properties
-- [**1557**Star][2m] [C] [firmianay/ctf-all-in-one](https://github.com/firmianay/ctf-all-in-one) CTF竞赛入门指南
-- [**1556**Star][12d] [Go] [caffix/amass](https://github.com/caffix/amass) In-depth Attack Surface Mapping and Asset Discovery
-- [**1555**Star][1y] [Py] [unkl4b/gitminer](https://github.com/unkl4b/gitminer) Tool for advanced mining for content on Github
-- [**1552**Star][12d] [Py] [k4m4/kickthemout](https://github.com/k4m4/kickthemout) kick devices out of your network and enjoy all the bandwidth for yourself.
-- [**1550**Star][8m] [Py] [m4ll0k/wascan](https://github.com/m4ll0k/WAScan) WAScan - Web Application Scanner
-- [**1547**Star][1y] [C] [ctfs/write-ups-2016](https://github.com/ctfs/write-ups-2016) Wiki-like CTF write-ups repository, maintained by the community. 2016
-- [**1545**Star][6y] [Py] [google/pyringe](https://github.com/google/pyringe) Debugger capable of attaching to and injecting code into python processes.
-- [**1544**Star][1m] [Shell] [mzet-/linux-exploit-suggester](https://github.com/mzet-/linux-exploit-suggester) Linux privilege escalation auditing tool
-- [**1544**Star][3m] [PHP] [mewebstudio/captcha](https://github.com/mewebstudio/captcha) Captcha for Laravel 5 & 6
-- [**1542**Star][1m] [Py] [joxeankoret/diaphora](https://github.com/joxeankoret/diaphora) program diffing
+- [**1601**Star][1y] [Py] [nccgroup/scout2](https://github.com/nccgroup/Scout2) Security auditing tool for AWS environments
+- [**1601**Star][5m] [Py] [mozilla/cipherscan](https://github.com/mozilla/cipherscan) A very simple way to find out which SSL ciphersuites are supported by a target.
+- [**1600**Star][5d] [Go] [bitnami-labs/sealed-secrets](https://github.com/bitnami-labs/sealed-secrets) A Kubernetes controller and tool for one-way encrypted Secrets
+- [**1599**Star][2y] [JS] [keraf/nocoin](https://github.com/keraf/nocoin) No Coin is a tiny browser extension aiming to block coin miners such as Coinhive.
+- [**1598**Star][15d] [Java] [spotbugs/spotbugs](https://github.com/spotbugs/spotbugs) SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.
+- [**1597**Star][3m] [Py] [knownsec/pocsuite](https://github.com/knownsec/pocsuite) This project has stopped to maintenance, please to
+- [**1591**Star][28d] [C] [ntop/n2n](https://github.com/ntop/n2n) Peer-to-peer VPN
+- [**1591**Star][24d] [ivrodriguezca/re-ios-apps](https://github.com/ivrodriguezca/re-ios-apps) A completely free, open source and online course about Reverse Engineering iOS Applications.
+- [**1584**Star][6m] [Ruby] [brunofacca/zen-rails-security-checklist](https://github.com/brunofacca/zen-rails-security-checklist) Checklist of security precautions for Ruby on Rails applications.
+- [**1583**Star][4y] [l3m0n/pentest_study](https://github.com/l3m0n/pentest_study) 从零开始内网渗透学习
+- [**1582**Star][1m] [ObjC] [ealeksandrov/provisionql](https://github.com/ealeksandrov/provisionql) Quick Look plugin for apps and provisioning profile files
+- [**1581**Star][1y] [C] [qihoo360/phptrace](https://github.com/qihoo360/phptrace) A tracing and troubleshooting tool for PHP scripts.
+- [**1570**Star][2m] [C] [firmianay/ctf-all-in-one](https://github.com/firmianay/ctf-all-in-one) CTF竞赛入门指南
+- [**1569**Star][2y] [C] [samyk/pwnat](https://github.com/samyk/pwnat) The only tool and technique to punch holes through firewalls/NATs where both clients and server can be behind separate NATs without any 3rd party involvement. Pwnat uses a newly developed technique, exploiting a property of NAT translation tables, with no 3rd party, port forwarding, DMZ, router administrative requirements, STUN/TURN/UPnP/ICE, or…
+- [**1569**Star][29d] [Py] [opendevops-cn/opendevops](https://github.com/opendevops-cn/opendevops) CODO是一款为用户提供企业多混合云、一站式DevOps、自动化运维、完全开源的云管理平台、自动化运维平台
+- [**1566**Star][14d] [C] [codahale/bcrypt-ruby](https://github.com/codahale/bcrypt-ruby) Ruby binding for the OpenBSD bcrypt() password hashing algorithm, allowing you to easily store a secure hash of your users' passwords.
+- [**1565**Star][17d] [Go] [sofastack/sofa-mosn](https://github.com/sofastack/sofa-mosn) MOSN is a modular observable smart network which can be used in service mesh deployed as a data plane sidecar.
+- [**1562**Star][19d] [C] [p-gen/smenu](https://github.com/p-gen/smenu) Terminal utility that reads words from standard input or from a file and creates an interactive selection window just below the cursor. The selected word(s) are sent to standard output for further processing.
+- [**1562**Star][14d] [Py] [k4m4/kickthemout](https://github.com/k4m4/kickthemout) kick devices out of your network and enjoy all the bandwidth for yourself.
+- [**1561**Star][16d] [Java] [gchq/gaffer](https://github.com/gchq/Gaffer) A large-scale entity and relation database supporting aggregation of properties
+- [**1560**Star][1y] [Py] [unkl4b/gitminer](https://github.com/unkl4b/gitminer) Tool for advanced mining for content on Github
+- [**1560**Star][6d] [Go] [caffix/amass](https://github.com/caffix/amass) In-depth Attack Surface Mapping and Asset Discovery
+- [**1557**Star][8m] [Py] [m4ll0k/wascan](https://github.com/m4ll0k/WAScan) WAScan - Web Application Scanner
+- [**1556**Star][15d] [Go] [eolinker/goku-api-gateway](https://github.com/eolinker/goku-api-gateway) A Powerful HTTP API Gateway in pure golang!Goku API Gateway (中文名:悟空 API 网关)是一个基于 Golang开发的微服务网关,能够实现高性能 HTTP API 转发、服务编排、多租户管理、API 访问权限控制等目的,拥有强大的自定义插件系统可以自行扩展,并且提供友好的图形化配置界面,能够快速帮助企业进行 API 服务治理、提高 API 服务的稳定性和安全性。
+- [**1555**Star][1m] [Shell] [mzet-/linux-exploit-suggester](https://github.com/mzet-/linux-exploit-suggester) Linux privilege escalation auditing tool
+- [**1549**Star][7d] [PHP] [mewebstudio/captcha](https://github.com/mewebstudio/captcha) Captcha for Laravel 5 & 6
+- [**1549**Star][1m] [Py] [joxeankoret/diaphora](https://github.com/joxeankoret/diaphora) program diffing
+- [**1548**Star][1y] [C] [ctfs/write-ups-2016](https://github.com/ctfs/write-ups-2016) Wiki-like CTF write-ups repository, maintained by the community. 2016
+- [**1544**Star][15d] [C] [raspberrypi/userland](https://github.com/raspberrypi/userland) Source code for ARM side libraries for interfacing to Raspberry Pi GPU.
+- [**1544**Star][6y] [Py] [google/pyringe](https://github.com/google/pyringe) Debugger capable of attaching to and injecting code into python processes.
+- [**1543**Star][2d] [Go] [juju/juju](https://github.com/juju/juju) Simple, secure devops tooling built to manage today's complex applications wherever you run your software.
+- [**1541**Star][2y] [Py] [awolfly9/ipproxytool](https://github.com/awolfly9/ipproxytool) python ip proxy tool scrapy crawl. 抓取大量免费代理 ip,提取有效 ip 使用
- [**1540**Star][2y] [C++] [hteso/iaito](https://github.com/hteso/iaito) A Qt and C++ GUI for radare2 reverse engineering framework
-- [**1536**Star][2y] [Py] [awolfly9/ipproxytool](https://github.com/awolfly9/ipproxytool) python ip proxy tool scrapy crawl. 抓取大量免费代理 ip,提取有效 ip 使用
-- [**1533**Star][2y] [C] [ezlippi/webbench](https://github.com/ezlippi/webbench) Webbench是Radim Kolar在1997年写的一个在linux下使用的非常简单的网站压测工具。它使用fork()模拟多个客户端同时访问我们设定的URL,测试网站在压力下工作的性能,最多可以模拟3万个并发连接去测试网站的负载能力。官网地址:
-- [**1532**Star][13d] [C] [raspberrypi/userland](https://github.com/raspberrypi/userland) Source code for ARM side libraries for interfacing to Raspberry Pi GPU.
-- [**1531**Star][7d] [Py] [lifting-bits/mcsema](https://github.com/lifting-bits/mcsema) Framework for lifting x86, amd64, and aarch64 program binaries to LLVM bitcode
+- [**1539**Star][2y] [C] [ezlippi/webbench](https://github.com/ezlippi/webbench) Webbench是Radim Kolar在1997年写的一个在linux下使用的非常简单的网站压测工具。它使用fork()模拟多个客户端同时访问我们设定的URL,测试网站在压力下工作的性能,最多可以模拟3万个并发连接去测试网站的负载能力。官网地址:
+- [**1537**Star][9d] [Py] [lifting-bits/mcsema](https://github.com/lifting-bits/mcsema) Framework for lifting x86, amd64, and aarch64 program binaries to LLVM bitcode
- [IDA7插件](https://github.com/lifting-bits/mcsema/tree/master/tools/mcsema_disass/ida7) 用于反汇编二进制文件并生成控制流程图
- [IDA插件](https://github.com/lifting-bits/mcsema/tree/master/tools/mcsema_disass/ida) 用于反汇编二进制文件并生成控制流程图
- [Binja插件](https://github.com/lifting-bits/mcsema/tree/master/tools/mcsema_disass/binja) 用于反汇编二进制文件并生成控制流程图
- [mcsema](https://github.com/lifting-bits/mcsema/tree/master/mcsema)
-- [**1530**Star][7d] [Go] [juju/juju](https://github.com/juju/juju) Simple, secure devops tooling built to manage today's complex applications wherever you run your software.
-- [**1528**Star][3y] [Py] [x0rz/eqgrp_lost_in_translation](https://github.com/x0rz/eqgrp_lost_in_translation) Decrypted content of odd.tar.xz.gpg, swift.tar.xz.gpg and windows.tar.xz.gpg
-- [**1527**Star][11d] [emijrp/awesome-awesome](https://github.com/emijrp/awesome-awesome) A curated list of awesome curated lists of many topics.
-- [**1525**Star][10d] [Java] [ukanth/afwall](https://github.com/ukanth/afwall) AFWall+ (Android Firewall +) - iptables based firewall for Android
-- [**1521**Star][1y] [HTML] [qiwihui/hiwifi-ss](https://github.com/qiwihui/hiwifi-ss) 极路由+ss配置
-- [**1520**Star][4m] [TypeScript] [spring-guides/tut-spring-security-and-angular-js](https://github.com/spring-guides/tut-spring-security-and-angular-js) Spring Security and Angular:: A tutorial on how to use Spring Security with a single page application with various backend architectures, ranging from a simple single server to an API gateway with OAuth2 authentication.
-- [**1520**Star][20d] [C++] [nmap/npcap](https://github.com/nmap/npcap) Nmap Project's packet sniffing library for Windows, based on WinPcap/Libpcap improved with NDIS 6 and LWF.
-- [**1519**Star][10m] [PowerShell] [joefitzgerald/packer-windows](https://github.com/joefitzgerald/packer-windows) Windows templates that can be used to create boxes for Vagrant using Packer
-- [**1516**Star][9m] [Py] [google/rekall](https://github.com/google/rekall) Rekall Memory Forensic Framework
+- [**1536**Star][4d] [Java] [ukanth/afwall](https://github.com/ukanth/afwall) AFWall+ (Android Firewall +) - iptables based firewall for Android
+- [**1533**Star][13d] [emijrp/awesome-awesome](https://github.com/emijrp/awesome-awesome) A curated list of awesome curated lists of many topics.
+- [**1532**Star][3y] [Py] [x0rz/eqgrp_lost_in_translation](https://github.com/x0rz/eqgrp_lost_in_translation) Decrypted content of odd.tar.xz.gpg, swift.tar.xz.gpg and windows.tar.xz.gpg
+- [**1526**Star][2d] [C++] [nmap/npcap](https://github.com/nmap/npcap) Nmap Project's packet sniffing library for Windows, based on WinPcap/Libpcap improved with NDIS 6 and LWF.
+- [**1522**Star][1y] [HTML] [qiwihui/hiwifi-ss](https://github.com/qiwihui/hiwifi-ss) 极路由+ss配置
+- [**1521**Star][4m] [TS] [spring-guides/tut-spring-security-and-angular-js](https://github.com/spring-guides/tut-spring-security-and-angular-js) Spring Security and Angular:: A tutorial on how to use Spring Security with a single page application with various backend architectures, ranging from a simple single server to an API gateway with OAuth2 authentication.
+- [**1521**Star][3d] [C] [jiangwenyuan/nuster](https://github.com/jiangwenyuan/nuster) A high performance HTTP proxy cache server and RESTful NoSQL cache server based on HAProxy
+- [**1519**Star][10m] [PS] [joefitzgerald/packer-windows](https://github.com/joefitzgerald/packer-windows) Windows templates that can be used to create boxes for Vagrant using Packer
+- [**1518**Star][9m] [Py] [google/rekall](https://github.com/google/rekall) Rekall Memory Forensic Framework
+- [**1517**Star][8d] [Py] [zerosum0x0/koadic](https://github.com/zerosum0x0/koadic) Koadic C3 COM Command & Control - JScript RAT
+- [**1516**Star][5m] [snowming04/the-hacker-playbook-3-translation](https://github.com/snowming04/the-hacker-playbook-3-translation) 对 The Hacker Playbook 3 的翻译。
+- [**1514**Star][3y] [Py] [sensepost/regeorg](https://github.com/sensepost/regeorg) The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.
- [**1510**Star][1y] [dripcap/dripcap](https://github.com/dripcap/dripcap)
-- [**1509**Star][21d] [Py] [zerosum0x0/koadic](https://github.com/zerosum0x0/koadic) Koadic C3 COM Command & Control - JScript RAT
-- [**1506**Star][3y] [Py] [sensepost/regeorg](https://github.com/sensepost/regeorg) The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.
-- [**1504**Star][5m] [snowming04/the-hacker-playbook-3-translation](https://github.com/snowming04/the-hacker-playbook-3-translation) 对 The Hacker Playbook 3 的翻译。
-- [**1503**Star][2y] [Py] [eldraco/domain_analyzer](https://github.com/eldraco/domain_analyzer) Analyze the security of any domain by finding all the information possible. Made in python.
-- [**1501**Star][25d] [Py] [hannob/snallygaster](https://github.com/hannob/snallygaster) Tool to scan for secret files on HTTP servers
-- [**1500**Star][2m] [Shell] [haugene/docker-transmission-openvpn](https://github.com/haugene/docker-transmission-openvpn) Docker container running Transmission torrent client with WebUI over an OpenVPN tunnel
-- [**1491**Star][4m] [Py] [epinna/tplmap](https://github.com/epinna/tplmap) Server-Side Template Injection and Code Injection Detection and Exploitation Tool
-- [**1490**Star][10d] [YARA] [cybermonitor/apt_cybercriminal_campagin_collections](https://github.com/cybermonitor/apt_cybercriminal_campagin_collections) APT & CyberCriminal Campaign Collection
-- [**1487**Star][7m] [Py] [ahupp/python-magic](https://github.com/ahupp/python-magic) A python wrapper for libmagic
-- [**1485**Star][2y] [Kotlin] [gh0u1l5/wechatmagician](https://github.com/gh0u1l5/wechatmagician) WechatMagician is a Xposed module written in Kotlin, that allows you to completely control your Wechat.
-- [**1482**Star][7m] [C++] [wangyu-/tinyfecvpn](https://github.com/wangyu-/tinyfecvpn) A VPN Designed for Lossy Links, with Build-in Forward Error Correction(FEC) Support. Improves your Network Quality on a High-latency Lossy Link.
-- [**1478**Star][7d] [C] [sleuthkit/sleuthkit](https://github.com/sleuthkit/sleuthkit) The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.
-- [**1475**Star][12d] [Py] [bitsadmin/wesng](https://github.com/bitsadmin/wesng) Windows Exploit Suggester - Next Generation
-- [**1474**Star][1y] [C++] [f1xpl/openauto](https://github.com/f1xpl/openauto) AndroidAuto headunit emulator
-- [**1472**Star][7d] [Shell] [blackarch/blackarch](https://github.com/blackarch/blackarch) BlackArch Linux is an Arch Linux-based distribution for penetration testers and security researchers.
-- [**1468**Star][16d] [Go] [google/keytransparency](https://github.com/google/keytransparency) A transparent and secure way to look up public keys.
-- [**1468**Star][3m] [C] [iqiyi/xhook](https://github.com/iqiyi/xhook) a PLT (Procedure Linkage Table) hook library for Android native ELF
-- [**1466**Star][2m] [C++] [jmpews/hookzz](https://github.com/jmpews/hookzz) a hook framework for arm/arm64/ios/android, and [dev] branch is being refactored.
-- [**1465**Star][3y] [Py] [veil-framework/veil-evasion](https://github.com/Veil-Framework/Veil-Evasion) a tool designed to generate metasploit payloads that bypass common anti-virus solutions.
-- [**1465**Star][25d] [minimaxir/hacker-news-undocumented](https://github.com/minimaxir/hacker-news-undocumented) Some of the hidden norms about Hacker News not otherwise covered in the Guidelines and the FAQ.
-- [**1462**Star][6y] [C] [alibaba/lvs](https://github.com/alibaba/lvs) A distribution of Linux Virtual Server with some advanced features. It introduces a new packet forwarding method - FULLNAT other than NAT/Tunneling/DirectRouting, and defense mechanism against synflooding attack - SYNPROXY.
-- [**1460**Star][14d] [C] [ufrisk/pcileech](https://github.com/ufrisk/pcileech) Direct Memory Access (DMA) Attack Software
-- [**1457**Star][1y] [C++] [acaudwell/logstalgia](https://github.com/acaudwell/logstalgia) a visualization tool that replays or streams web server access logs as a retro arcade game simulation.
-- [**1456**Star][27d] [Go] [neex/phuip-fpizdam](https://github.com/neex/phuip-fpizdam) Exploit for CVE-2019-11043
-- [**1450**Star][1y] [Py] [d4vinci/cr3dov3r](https://github.com/d4vinci/cr3dov3r) Know the dangers of credential reuse attacks.
-- [**1448**Star][6m] [Py] [enablesecurity/wafw00f](https://github.com/enablesecurity/wafw00f) identify and fingerprint Web Application Firewall (WAF) products protecting a website.
-- [**1447**Star][3m] [edoverflow/can-i-take-over-xyz](https://github.com/edoverflow/can-i-take-over-xyz) "Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.
-- [**1446**Star][11d] [C++] [srslte/srslte](https://github.com/srslte/srslte) Open source SDR LTE software suite from Software Radio Systems (SRS)
-- [**1442**Star][6m] [Py] [oros42/imsi-catcher](https://github.com/oros42/imsi-catcher) This program show you IMSI numbers of cellphones around you.
-- [**1441**Star][19d] [C] [tianocore/edk2](https://github.com/tianocore/edk2) A modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications
-- [**1441**Star][1m] [C] [ctcaer/hekate](https://github.com/ctcaer/hekate) Nintendo Switch Bootloader - CTCaer mod
-- [**1439**Star][3y] [tiancode/learn-hacking](https://github.com/tiancode/learn-hacking) 开始学习Kali Linux 各种破解教程 渗透测试 逆向工程 HackThisSite挑战问题解答
-- [**1439**Star][3y] [tiancode/learn-hacking](https://github.com/tiancode/learn-hacking) 开始学习Kali Linux 各种破解教程 渗透测试 逆向工程 HackThisSite挑战问题解答
-- [**1438**Star][3m] [C++] [vaibhavpandeyvpz/apkstudio](https://github.com/vaibhavpandeyvpz/apkstudio) Open-source, cross platform Qt based IDE for reverse-engineering Android application packages.
-- [**1433**Star][18d] [Go] [skydive-project/skydive](https://github.com/skydive-project/skydive) An open source real-time network topology and protocols analyzer
-- [**1433**Star][1y] [TypeScript] [pedronauck/reworm](https://github.com/pedronauck/reworm)
-- [**1433**Star][12d] [C++] [microsoft/seal](https://github.com/microsoft/seal) Microsoft SEAL is an easy-to-use and powerful homomorphic encryption library.
-- [**1430**Star][7d] [Go] [google/gapid](https://github.com/google/gapid) Graphics API Debugger
-- [**1428**Star][7d] [Py] [rocky/python-uncompyle6](https://github.com/rocky/python-uncompyle6) A cross-version Python bytecode decompiler
-- [**1427**Star][6m] [C++] [x64dbg/scyllahide](https://github.com/x64dbg/scyllahide) Advanced usermode anti-anti-debugger
+- [**1508**Star][2m] [Shell] [haugene/docker-transmission-openvpn](https://github.com/haugene/docker-transmission-openvpn) Docker container running Transmission torrent client with WebUI over an OpenVPN tunnel
+- [**1505**Star][2y] [Py] [eldraco/domain_analyzer](https://github.com/eldraco/domain_analyzer) Analyze the security of any domain by finding all the information possible. Made in python.
+- [**1504**Star][27d] [Py] [hannob/snallygaster](https://github.com/hannob/snallygaster) Tool to scan for secret files on HTTP servers
+- [**1499**Star][5d] [YARA] [cybermonitor/apt_cybercriminal_campagin_collections](https://github.com/cybermonitor/apt_cybercriminal_campagin_collections) APT & CyberCriminal Campaign Collection
+- [**1497**Star][4m] [Py] [epinna/tplmap](https://github.com/epinna/tplmap) Server-Side Template Injection and Code Injection Detection and Exploitation Tool
+- [**1489**Star][5d] [Py] [ahupp/python-magic](https://github.com/ahupp/python-magic) A python wrapper for libmagic
+- [**1486**Star][2y] [Kotlin] [gh0u1l5/wechatmagician](https://github.com/gh0u1l5/wechatmagician) WechatMagician is a Xposed module written in Kotlin, that allows you to completely control your Wechat.
+- [**1485**Star][7m] [C++] [wangyu-/tinyfecvpn](https://github.com/wangyu-/tinyfecvpn) A VPN Designed for Lossy Links, with Build-in Forward Error Correction(FEC) Support. Improves your Network Quality on a High-latency Lossy Link.
+- [**1482**Star][7d] [Py] [bitsadmin/wesng](https://github.com/bitsadmin/wesng) Windows Exploit Suggester - Next Generation
+- [**1481**Star][2d] [C] [sleuthkit/sleuthkit](https://github.com/sleuthkit/sleuthkit) The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.
+- [**1480**Star][1y] [C++] [f1xpl/openauto](https://github.com/f1xpl/openauto) AndroidAuto headunit emulator
+- [**1479**Star][3d] [C] [ctcaer/hekate](https://github.com/ctcaer/hekate) Nintendo Switch Bootloader - CTCaer mod
+- [**1478**Star][8d] [C] [iqiyi/xhook](https://github.com/iqiyi/xhook) a PLT (Procedure Linkage Table) hook library for Android native ELF
+- [**1477**Star][2d] [Shell] [blackarch/blackarch](https://github.com/blackarch/blackarch) BlackArch Linux is an Arch Linux-based distribution for penetration testers and security researchers.
+- [**1476**Star][2m] [C++] [jmpews/hookzz](https://github.com/jmpews/hookzz) a hook framework for arm/arm64/ios/android, and [dev] branch is being refactored.
+- [**1471**Star][27d] [minimaxir/hacker-news-undocumented](https://github.com/minimaxir/hacker-news-undocumented) Some of the hidden norms about Hacker News not otherwise covered in the Guidelines and the FAQ.
+- [**1470**Star][3y] [Py] [veil-framework/veil-evasion](https://github.com/Veil-Framework/Veil-Evasion) a tool designed to generate metasploit payloads that bypass common anti-virus solutions.
+- [**1470**Star][2d] [Go] [google/keytransparency](https://github.com/google/keytransparency) A transparent and secure way to look up public keys.
+- [**1469**Star][6y] [C] [alibaba/lvs](https://github.com/alibaba/lvs) A distribution of Linux Virtual Server with some advanced features. It introduces a new packet forwarding method - FULLNAT other than NAT/Tunneling/DirectRouting, and defense mechanism against synflooding attack - SYNPROXY.
+- [**1466**Star][29d] [Go] [neex/phuip-fpizdam](https://github.com/neex/phuip-fpizdam) Exploit for CVE-2019-11043
+- [**1464**Star][6m] [Py] [oros42/imsi-catcher](https://github.com/oros42/imsi-catcher) This program show you IMSI numbers of cellphones around you.
+- [**1463**Star][7d] [C] [ufrisk/pcileech](https://github.com/ufrisk/pcileech) Direct Memory Access (DMA) Attack Software
+- [**1462**Star][9d] [edoverflow/can-i-take-over-xyz](https://github.com/edoverflow/can-i-take-over-xyz) "Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.
+- [**1459**Star][3d] [Py] [enablesecurity/wafw00f](https://github.com/enablesecurity/wafw00f) identify and fingerprint Web Application Firewall (WAF) products protecting a website.
+- [**1458**Star][1y] [C++] [acaudwell/logstalgia](https://github.com/acaudwell/logstalgia) a visualization tool that replays or streams web server access logs as a retro arcade game simulation.
+- [**1455**Star][1y] [Py] [d4vinci/cr3dov3r](https://github.com/d4vinci/cr3dov3r) Know the dangers of credential reuse attacks.
+- [**1453**Star][13d] [C++] [srslte/srslte](https://github.com/srslte/srslte) Open source SDR LTE software suite from Software Radio Systems (SRS)
+- [**1451**Star][2d] [Py] [rocky/python-uncompyle6](https://github.com/rocky/python-uncompyle6) A cross-version Python bytecode decompiler
+- [**1447**Star][3y] [tiancode/learn-hacking](https://github.com/tiancode/learn-hacking) 开始学习Kali Linux 各种破解教程 渗透测试 逆向工程 HackThisSite挑战问题解答
+- [**1447**Star][3y] [tiancode/learn-hacking](https://github.com/tiancode/learn-hacking) 开始学习Kali Linux 各种破解教程 渗透测试 逆向工程 HackThisSite挑战问题解答
+- [**1447**Star][2m] [Py] [neo23x0/loki](https://github.com/neo23x0/loki) Loki - Simple IOC and Incident Response Scanner
+- [**1446**Star][5d] [C] [tianocore/edk2](https://github.com/tianocore/edk2) A modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications
+- [**1446**Star][20d] [Go] [skydive-project/skydive](https://github.com/skydive-project/skydive) An open source real-time network topology and protocols analyzer
+- [**1446**Star][14d] [C++] [microsoft/seal](https://github.com/microsoft/seal) Microsoft SEAL is an easy-to-use and powerful homomorphic encryption library.
+- [**1445**Star][3m] [C++] [vaibhavpandeyvpz/apkstudio](https://github.com/vaibhavpandeyvpz/apkstudio) Open-source, cross platform Qt based IDE for reverse-engineering Android application packages.
+- [**1437**Star][5d] [Go] [google/gapid](https://github.com/google/gapid) Graphics API Debugger
+- [**1436**Star][20d] [Kotlin] [cypherpunkarmory/userland](https://github.com/cypherpunkarmory/userland) The easiest way to run a Linux distribution or application on Android
+- [**1433**Star][11m] [C] [tpruvot/ccminer](https://github.com/tpruvot/ccminer) CUDA Open Source miner project, for most nvidia cards
+- [**1433**Star][1y] [TS] [pedronauck/reworm](https://github.com/pedronauck/reworm)
+- [**1432**Star][6m] [C++] [x64dbg/scyllahide](https://github.com/x64dbg/scyllahide) Advanced usermode anti-anti-debugger
+- [**1432**Star][2m] [C] [feralinteractive/gamemode](https://github.com/feralinteractive/gamemode) Optimise Linux system performance on demand
+- [**1429**Star][5y] [C++] [gdbinit/machoview](https://github.com/gdbinit/machoview) MachOView fork
+- [**1427**Star][9d] [ObjC] [nabla-c0d3/ssl-kill-switch2](https://github.com/nabla-c0d3/ssl-kill-switch2) Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS and OS X Apps
+- [**1426**Star][20d] [C++] [plasma-umass/coz](https://github.com/plasma-umass/coz) Finding Code that Counts with Causal Profiling
+- [**1426**Star][4y] [C++] [aappleby/smhasher](https://github.com/aappleby/smhasher) Automatically exported from code.google.com/p/smhasher
- [**1425**Star][3m] [Go] [google/stenographer](https://github.com/google/stenographer) Stenographer is a packet capture solution which aims to quickly spool all packets to disk, then provide simple, fast access to subsets of those packets. Discussion/announcements at stenographer@googlegroups.com
-- [**1423**Star][8y] [Py] [moxie0/sslstrip](https://github.com/moxie0/sslstrip) A tool for exploiting Moxie Marlinspike's SSL "stripping" attack.
-- [**1423**Star][18d] [Kotlin] [cypherpunkarmory/userland](https://github.com/cypherpunkarmory/userland) The easiest way to run a Linux distribution or application on Android
-- [**1422**Star][2m] [C] [feralinteractive/gamemode](https://github.com/feralinteractive/gamemode) Optimise Linux system performance on demand
-- [**1421**Star][3y] [mandatoryprogrammer/northkoreadnsleak](https://github.com/mandatoryprogrammer/northkoreadnsleak) Snapshot of North Korea's DNS data taken from zone transfers.
-- [**1421**Star][4y] [C++] [aappleby/smhasher](https://github.com/aappleby/smhasher) Automatically exported from code.google.com/p/smhasher
-- [**1420**Star][10m] [Java] [aslody/legend](https://github.com/aslody/legend) A framework for hook java methods.
-- [**1419**Star][2m] [Py] [neo23x0/loki](https://github.com/neo23x0/loki) Loki - Simple IOC and Incident Response Scanner
-- [**1419**Star][3y] [Py] [nathanlopez/stitch](https://github.com/nathanlopez/stitch) Python Remote Administration Tool (RAT)
-- [**1419**Star][12d] [Go] [google/google-ctf](https://github.com/google/google-ctf) Google CTF
-- [**1419**Star][5y] [C++] [gdbinit/machoview](https://github.com/gdbinit/machoview) MachOView fork
-- [**1417**Star][1m] [Py] [xdavidhu/mitmap](https://github.com/xdavidhu/mitmap)
-- [**1417**Star][5m] [PHP] [s4n7h0/xvwa](https://github.com/s4n7h0/xvwa) XVWA is a badly coded web application written in PHP/MySQL that helps security enthusiasts to learn application security.
-- [**1416**Star][1m] [Go] [barnybug/cli53](https://github.com/barnybug/cli53) Command line tool for Amazon Route 53
-- [**1415**Star][3y] [C] [antirez/dump1090](https://github.com/antirez/dump1090) Dump1090 is a simple Mode S decoder for RTLSDR devices
-- [**1413**Star][7m] [Objective-C] [nabla-c0d3/ssl-kill-switch2](https://github.com/nabla-c0d3/ssl-kill-switch2) Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS and OS X Apps
-- [**1411**Star][11d] [C] [ettercap/ettercap](https://github.com/ettercap/ettercap) Ettercap Project
-- [**1410**Star][8d] [Go] [cosmos72/gomacro](https://github.com/cosmos72/gomacro) Interactive Go interpreter and debugger with REPL, Eval, generics and Lisp-like macros
-- [**1409**Star][4m] [yadox666/the-hackers-hardware-toolkit](https://github.com/yadox666/the-hackers-hardware-toolkit) The best hacker's gadgets for Red Team pentesters and security researchers.
-- [**1408**Star][22d] [Java] [chrisk44/hijacker](https://github.com/chrisk44/hijacker) Aircrack, Airodump, Aireplay, MDK3 and Reaver GUI Application for Android
-- [**1407**Star][7d] [C] [namhyung/uftrace](https://github.com/namhyung/uftrace) Function (graph) tracer for user-space
-- [**1406**Star][1m] [C++] [google/nsjail](https://github.com/google/nsjail) A light-weight process isolation tool, making use of Linux namespaces and seccomp-bpf syscall filters (with help of the kafel bpf language)
-- [**1402**Star][5m] [gitguardian/apisecuritybestpractices](https://github.com/gitguardian/apisecuritybestpractices) Resources to help you keep secrets (API keys, database credentials, certificates, ...) out of source code and remediate the issue in case of a leaked API key. Made available by GitGuardian.
-- [**1402**Star][7d] [C++] [eteran/edb-debugger](https://github.com/eteran/edb-debugger) edb is a cross platform AArch32/x86/x86-64 debugger.
+- [**1424**Star][8y] [Py] [moxie0/sslstrip](https://github.com/moxie0/sslstrip) A tool for exploiting Moxie Marlinspike's SSL "stripping" attack.
+- [**1424**Star][11m] [Java] [aslody/legend](https://github.com/aslody/legend) A framework for hook java methods.
+- [**1423**Star][14d] [Go] [google/google-ctf](https://github.com/google/google-ctf) Google CTF
+- [**1422**Star][3y] [Py] [nathanlopez/stitch](https://github.com/nathanlopez/stitch) Python Remote Administration Tool (RAT)
+- [**1422**Star][3y] [mandatoryprogrammer/northkoreadnsleak](https://github.com/mandatoryprogrammer/northkoreadnsleak) Snapshot of North Korea's DNS data taken from zone transfers.
+- [**1419**Star][1m] [Py] [xdavidhu/mitmap](https://github.com/xdavidhu/mitmap)
+- [**1419**Star][3y] [C] [antirez/dump1090](https://github.com/antirez/dump1090) Dump1090 is a simple Mode S decoder for RTLSDR devices
+- [**1418**Star][5m] [PHP] [s4n7h0/xvwa](https://github.com/s4n7h0/xvwa) XVWA is a badly coded web application written in PHP/MySQL that helps security enthusiasts to learn application security.
+- [**1417**Star][4m] [yadox666/the-hackers-hardware-toolkit](https://github.com/yadox666/the-hackers-hardware-toolkit) The best hacker's gadgets for Red Team pentesters and security researchers.
+- [**1417**Star][4d] [Rust] [shadowsocks/shadowsocks-rust](https://github.com/shadowsocks/shadowsocks-rust) A Rust port of shadowsocks
+- [**1417**Star][1m] [Go] [barnybug/cli53](https://github.com/barnybug/cli53) Command line tool for Amazon Route 53
+- [**1415**Star][7d] [C] [z3apa3a/3proxy](https://github.com/z3apa3a/3proxy) 3proxy - tiny free proxy server
+- [**1414**Star][8d] [C] [ettercap/ettercap](https://github.com/ettercap/ettercap) Ettercap Project
+- [**1413**Star][24d] [XSLT] [lolbas-project/lolbas](https://github.com/lolbas-project/lolbas) Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
+- [**1413**Star][24d] [Java] [chrisk44/hijacker](https://github.com/chrisk44/hijacker) Aircrack, Airodump, Aireplay, MDK3 and Reaver GUI Application for Android
+- [**1412**Star][9d] [C] [namhyung/uftrace](https://github.com/namhyung/uftrace) Function (graph) tracer for user-space
+- [**1412**Star][5m] [gitguardian/apisecuritybestpractices](https://github.com/gitguardian/apisecuritybestpractices) Resources to help you keep secrets (API keys, database credentials, certificates, ...) out of source code and remediate the issue in case of a leaked API key. Made available by GitGuardian.
+- [**1411**Star][7d] [C++] [eteran/edb-debugger](https://github.com/eteran/edb-debugger) edb is a cross platform AArch32/x86/x86-64 debugger.
+- [**1411**Star][3d] [Go] [cosmos72/gomacro](https://github.com/cosmos72/gomacro) Interactive Go interpreter and debugger with REPL, Eval, generics and Lisp-like macros
+- [**1410**Star][3m] [Go] [hellogcc/100-gdb-tips](https://github.com/hellogcc/100-gdb-tips) A collection of gdb tips. 100 maybe just mean many here.
+- [**1408**Star][3m] [HTML] [owasp/top10](https://github.com/owasp/top10) Official OWASP Top 10 Document Repository
+- [**1407**Star][4d] [C++] [google/nsjail](https://github.com/google/nsjail) A light-weight process isolation tool, making use of Linux namespaces and seccomp-bpf syscall filters (with help of the kafel bpf language)
+- [**1405**Star][1y] [HTML] [gwuhaolin/blog](https://github.com/gwuhaolin/blog) 浩麟的技术博客
+- [**1405**Star][1y] [C++] [dotnet/llilc](https://github.com/dotnet/llilc) This repo contains LLILC, an LLVM based compiler for .NET Core. It includes a set of cross-platform .NET code generation tools that enables compilation of MSIL byte code to LLVM supported platforms.
+- [**1404**Star][7d] [Java] [chinashiyu/gfw.press](https://github.com/chinashiyu/gfw.press) GFW.Press新一代军用级高强度加密抗干扰网络数据高速传输软件
+- [**1403**Star][2d] [Go] [crazy-max/windowsspyblocker](https://github.com/crazy-max/windowsspyblocker)
- [**1401**Star][9m] [JS] [anttiviljami/browser-autofill-phishing](https://github.com/anttiviljami/browser-autofill-phishing) A simple demo of phishing by abusing the browser autofill feature
-- [**1400**Star][3m] [HTML] [owasp/top10](https://github.com/owasp/top10) Official OWASP Top 10 Document Repository
-- [**1400**Star][1y] [C++] [dotnet/llilc](https://github.com/dotnet/llilc) This repo contains LLILC, an LLVM based compiler for .NET Core. It includes a set of cross-platform .NET code generation tools that enables compilation of MSIL byte code to LLVM supported platforms.
-- [**1399**Star][25d] [Go] [crazy-max/windowsspyblocker](https://github.com/crazy-max/windowsspyblocker)
-- [**1399**Star][7d] [Java] [chinashiyu/gfw.press](https://github.com/chinashiyu/gfw.press) GFW.Press新一代军用级高强度加密抗干扰网络数据高速传输软件
-- [**1397**Star][7d] [Rust] [shadowsocks/shadowsocks-rust](https://github.com/shadowsocks/shadowsocks-rust) A Rust port of shadowsocks
-- [**1395**Star][1y] [Go] [filosottile/whosthere](https://github.com/filosottile/whosthere) A ssh server that knows who you are
-- [**1393**Star][25d] [C] [quiet/org.quietmodem.quiet](https://github.com/quiet/org.quietmodem.quiet) Quiet for Android - TCP over sound
-- [**1393**Star][3y] [PowerShell] [putterpanda/mimikittenz](https://github.com/putterpanda/mimikittenz) A post-exploitation powershell tool for extracting juicy info from memory.
-- [**1391**Star][22d] [XSLT] [lolbas-project/lolbas](https://github.com/lolbas-project/lolbas) Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
-- [**1388**Star][14d] [Swift] [johnno1962/injectioniii](https://github.com/johnno1962/injectioniii) Re-write of Injection for Xcode in (mostly) Swift4
-- [**1387**Star][1y] [HTML] [gwuhaolin/blog](https://github.com/gwuhaolin/blog) 浩麟的技术博客
-- [**1387**Star][2y] [JS] [sqren/fb-sleep-stats](https://github.com/sqren/fb-sleep-stats) Use Facebook to track your friends’ sleeping habits
-- [**1386**Star][18d] [C++] [plasma-umass/coz](https://github.com/plasma-umass/coz) Finding Code that Counts with Causal Profiling
-- [**1384**Star][4y] [PHP] [johntroony/php-webshells](https://github.com/johntroony/php-webshells) Common php webshells. Do not host the file(s) on your server!
-- [**1383**Star][14d] [C++] [jonathansalwan/triton](https://github.com/jonathansalwan/triton) Triton is a Dynamic Binary Analysis (DBA) framework. It provides internal components like a Dynamic Symbolic Execution (DSE) engine, a dynamic taint engine, AST representations of the x86, x86-64 and AArch64 Instructions Set Architecture (ISA), SMT simplification passes, an SMT solver interface and, the last but not least, Python bindings.
-- [**1383**Star][8d] [Py] [ekultek/whatwaf](https://github.com/ekultek/whatwaf) Detect and bypass web application firewalls and protection systems
-- [**1381**Star][11m] [Py] [eth0izzle/bucket-stream](https://github.com/eth0izzle/bucket-stream) Find interesting Amazon S3 Buckets by watching certificate transparency logs.
-- [**1380**Star][2m] [C] [z3apa3a/3proxy](https://github.com/z3apa3a/3proxy) 3proxy - tiny free proxy server
-- [**1380**Star][11d] [Shell] [drduh/pwd.sh](https://github.com/drduh/pwd.sh) GPG symmetric password manager
-- [**1377**Star][11d] [OCaml] [mirage/mirage](https://github.com/mirage/mirage) MirageOS is a library operating system that constructs unikernels
-- [**1376**Star][6m] [Py] [almandin/fuxploider](https://github.com/almandin/fuxploider) File upload vulnerability scanner and exploitation tool.
-- [**1375**Star][10m] [JS] [intika/librefox](https://github.com/intika/librefox) Firefox with privacy enhancements
+- [**1399**Star][16d] [Swift] [johnno1962/injectioniii](https://github.com/johnno1962/injectioniii) Re-write of Injection for Xcode in (mostly) Swift4
+- [**1397**Star][1y] [Go] [filosottile/whosthere](https://github.com/filosottile/whosthere) A ssh server that knows who you are
+- [**1396**Star][3y] [PS] [putterpanda/mimikittenz](https://github.com/putterpanda/mimikittenz) A post-exploitation powershell tool for extracting juicy info from memory.
+- [**1395**Star][27d] [C] [quiet/org.quietmodem.quiet](https://github.com/quiet/org.quietmodem.quiet) Quiet for Android - TCP over sound
+- [**1393**Star][4d] [atarity/deploy-your-own-saas](https://github.com/atarity/deploy-your-own-saas) List of "only yours" cloud services for everyday needs
+- [**1393**Star][9d] [Py] [ekultek/whatwaf](https://github.com/ekultek/whatwaf) Detect and bypass web application firewalls and protection systems
+- [**1392**Star][16d] [C++] [jonathansalwan/triton](https://github.com/jonathansalwan/triton) Triton is a Dynamic Binary Analysis (DBA) framework. It provides internal components like a Dynamic Symbolic Execution (DSE) engine, a dynamic taint engine, AST representations of the x86, x86-64 and AArch64 Instructions Set Architecture (ISA), SMT simplification passes, an SMT solver interface and, the last but not least, Python bindings.
+- [**1388**Star][4y] [PHP] [johntroony/php-webshells](https://github.com/johntroony/php-webshells) Common php webshells. Do not host the file(s) on your server!
+- [**1387**Star][11m] [Py] [eth0izzle/bucket-stream](https://github.com/eth0izzle/bucket-stream) Find interesting Amazon S3 Buckets by watching certificate transparency logs.
+- [**1386**Star][2y] [JS] [sqren/fb-sleep-stats](https://github.com/sqren/fb-sleep-stats) Use Facebook to track your friends’ sleeping habits
+- [**1384**Star][5d] [JS] [ix64/unlock-music](https://github.com/ix64/unlock-music) Unlock encrypted music file in browser. 在浏览器中解锁加密的音乐文件。
+- [**1381**Star][6m] [Py] [almandin/fuxploider](https://github.com/almandin/fuxploider) File upload vulnerability scanner and exploitation tool.
+- [**1380**Star][15d] [C] [dynamorio/drmemory](https://github.com/dynamorio/drmemory) Memory Debugger for Windows, Linux, Mac, and Android
+- [**1380**Star][13d] [Shell] [drduh/pwd.sh](https://github.com/drduh/pwd.sh) GPG symmetric password manager
+- [**1378**Star][13d] [OCaml] [mirage/mirage](https://github.com/mirage/mirage) MirageOS is a library operating system that constructs unikernels
+- [**1378**Star][2d] [JS] [lockfale/osint-framework](https://github.com/lockfale/osint-framework) OSINT Framework
+- [**1375**Star][15d] [Go] [unrolled/secure](https://github.com/unrolled/secure) HTTP middleware for Go that facilitates some quick security wins.
+- [**1375**Star][11m] [JS] [intika/librefox](https://github.com/intika/librefox) Firefox with privacy enhancements
- [**1374**Star][4y] [C++] [valvesoftware/vogl](https://github.com/valvesoftware/vogl) OpenGL capture / playback debugger.
-- [**1373**Star][13d] [C] [dynamorio/drmemory](https://github.com/dynamorio/drmemory) Memory Debugger for Windows, Linux, Mac, and Android
-- [**1365**Star][9m] [PowerShell] [danielbohannon/invoke-obfuscation](https://github.com/danielbohannon/invoke-obfuscation) PowerShell Obfuscator
-- [**1364**Star][5m] [Py] [s0md3v/striker](https://github.com/s0md3v/Striker) Striker is an offensive information and vulnerability scanner.
-- [**1363**Star][29d] [C] [zyantific/zydis](https://github.com/zyantific/zydis) Fast and lightweight x86/x86-64 disassembler library
-- [**1361**Star][3y] [C++] [aslody/turbodex](https://github.com/aslody/turbodex) fast load dex in memory.
-- [**1360**Star][6m] [Py] [vulnerscom/getsploit](https://github.com/vulnerscom/getsploit) Command line utility for searching and downloading exploits
-- [**1360**Star][2m] [Py] [fireeye/flare-floss](https://github.com/fireeye/flare-floss) Automatically extract obfuscated strings from malware.
+- [**1373**Star][5m] [Py] [s0md3v/striker](https://github.com/s0md3v/Striker) Striker is an offensive information and vulnerability scanner.
+- [**1373**Star][9m] [PS] [danielbohannon/invoke-obfuscation](https://github.com/danielbohannon/invoke-obfuscation) PowerShell Obfuscator
+- [**1371**Star][1m] [C] [zyantific/zydis](https://github.com/zyantific/zydis) Fast and lightweight x86/x86-64 disassembler library
+- [**1365**Star][9d] [Go] [cortesi/modd](https://github.com/cortesi/modd) A flexible developer tool that runs processes and responds to filesystem changes
+- [**1363**Star][2m] [Py] [fireeye/flare-floss](https://github.com/fireeye/flare-floss) Automatically extract obfuscated strings from malware.
- [floss](https://github.com/fireeye/flare-floss/tree/master/floss)
- [IDA插件](https://github.com/fireeye/flare-floss/blob/master/scripts/idaplugin.py)
-- [**1358**Star][7d] [Go] [cortesi/modd](https://github.com/cortesi/modd) A flexible developer tool that runs processes and responds to filesystem changes
-- [**1357**Star][24d] [JS] [lockfale/osint-framework](https://github.com/lockfale/osint-framework) OSINT Framework
-- [**1355**Star][6m] [C++] [phpv8/v8js](https://github.com/phpv8/v8js) V8 Javascript Engine for PHP — This PHP extension embeds the Google V8 Javascript Engine
-- [**1355**Star][1m] [grrrdog/java-deserialization-cheat-sheet](https://github.com/grrrdog/java-deserialization-cheat-sheet) The cheat sheet about Java Deserialization vulnerabilities
-- [**1355**Star][2m] [C] [googleprojectzero/winafl](https://github.com/googleprojectzero/winafl) A fork of AFL for fuzzing Windows binaries
-- [**1348**Star][23d] [C] [x64dbg/x64dbgpy](https://github.com/x64dbg/x64dbgpy) Automating x64dbg using Python, Snapshots:
-- [**1348**Star][4m] [C] [taviso/ctftool](https://github.com/taviso/ctftool) Interactive CTF Exploration Tool
-- [**1348**Star][3y] [Py] [joaomatosf/jexboss](https://github.com/joaomatosf/jexboss) Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool
-- [**1347**Star][13d] [Go] [unrolled/secure](https://github.com/unrolled/secure) HTTP middleware for Go that facilitates some quick security wins.
-- [**1347**Star][3m] [C++] [raspberrypi/tools](https://github.com/raspberrypi/tools)
+- [**1363**Star][3y] [C++] [aslody/turbodex](https://github.com/aslody/turbodex) fast load dex in memory.
+- [**1362**Star][1m] [grrrdog/java-deserialization-cheat-sheet](https://github.com/grrrdog/java-deserialization-cheat-sheet) The cheat sheet about Java Deserialization vulnerabilities
+- [**1361**Star][7m] [Py] [vulnerscom/getsploit](https://github.com/vulnerscom/getsploit) Command line utility for searching and downloading exploits
+- [**1361**Star][6m] [C++] [phpv8/v8js](https://github.com/phpv8/v8js) V8 Javascript Engine for PHP — This PHP extension embeds the Google V8 Javascript Engine
+- [**1359**Star][2m] [C] [googleprojectzero/winafl](https://github.com/googleprojectzero/winafl) A fork of AFL for fuzzing Windows binaries
+- [**1355**Star][10m] [HTML] [thelinuxchoice/blackeye](https://github.com/thelinuxchoice/blackeye) The most complete Phishing Tool, with 32 templates +1 customizable
+- [**1354**Star][2d] [Py] [mitre/caldera](https://github.com/mitre/caldera) Automated Adversary Emulation
+- [**1352**Star][3y] [Py] [joaomatosf/jexboss](https://github.com/joaomatosf/jexboss) Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool
+- [**1351**Star][3m] [C++] [raspberrypi/tools](https://github.com/raspberrypi/tools)
+- [**1350**Star][4m] [C] [taviso/ctftool](https://github.com/taviso/ctftool) Interactive CTF Exploration Tool
+- [**1349**Star][3y] [Py] [ddevault/evilpass](https://github.com/ddevault/evilpass) Slightly evil password strength checker
+- [**1349**Star][19d] [C++] [rikkaapps/riru](https://github.com/rikkaapps/riru) Inject zygote process by replace libmemtrack
+- [**1349**Star][5m] [Py] [lijiejie/githack](https://github.com/lijiejie/githack) A `.git` folder disclosure exploit
+- [**1348**Star][10m] [rebeyond/behinder](https://github.com/rebeyond/behinder) “冰蝎”动态二进制加密网站管理客户端
- [**1347**Star][11m] [Rust] [das-labor/panopticon](https://github.com/das-labor/panopticon) A libre cross-platform disassembler.
-- [**1346**Star][3y] [Py] [ddevault/evilpass](https://github.com/ddevault/evilpass) Slightly evil password strength checker
- [**1346**Star][2y] [HTML] [daxeel/blockshell](https://github.com/daxeel/blockshell) A command line utility for learning Blockchain technical concepts likechaining, mining, proof of work etc.
-- [**1344**Star][10m] [HTML] [thelinuxchoice/blackeye](https://github.com/thelinuxchoice/blackeye) The most complete Phishing Tool, with 32 templates +1 customizable
-- [**1343**Star][5m] [Py] [lijiejie/githack](https://github.com/lijiejie/githack) A `.git` folder disclosure exploit
-- [**1343**Star][3m] [Go] [hellogcc/100-gdb-tips](https://github.com/hellogcc/100-gdb-tips) A collection of gdb tips. 100 maybe just mean many here.
-- [**1342**Star][7d] [Py] [mitre/caldera](https://github.com/mitre/caldera) Automated Adversary Emulation
-- [**1341**Star][10d] [Go] [securitywithoutborders/hardentools](https://github.com/securitywithoutborders/hardentools) Hardentools is a utility that disables a number of risky Windows features.
-- [**1341**Star][2m] [Go] [davrodpin/mole](https://github.com/davrodpin/mole) cli app to create ssh tunnels
-- [**1339**Star][21d] [Py] [s0md3v/arjun](https://github.com/s0md3v/Arjun) HTTP parameter discovery suite.
-- [**1339**Star][12m] [XSLT] [api0cradle/lolbas](https://github.com/api0cradle/lolbas) Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
-- [**1338**Star][21d] [Go] [microcosm-cc/bluemonday](https://github.com/microcosm-cc/bluemonday) a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS
-- [**1338**Star][7m] [Py] [feeicn/gsil](https://github.com/feeicn/gsil) GitHub Sensitive Information Leakage
-- [**1337**Star][1y] [Py] [carmaa/inception](https://github.com/carmaa/inception) a physical memory manipulation and hacking tool exploiting PCI-based DMA. The tool can attack over FireWire, Thunderbolt, ExpressCard, PC Card and any other PCI/PCIe interfaces.
-- [**1336**Star][6y] [Perl] [intelisecurelabs/linux_exploit_suggester](https://github.com/InteliSecureLabs/Linux_Exploit_Suggester) Linux Exploit Suggester; based on operating system release number
-- [**1336**Star][3m] [Py] [maratyszcza/peachpy](https://github.com/maratyszcza/peachpy) x86-64 assembler embedded in Python
-- [**1333**Star][17d] [C++] [rikkaapps/riru](https://github.com/rikkaapps/riru) Inject zygote process by replace libmemtrack
-- [**1331**Star][2m] [C++] [mfontanini/libtins](https://github.com/mfontanini/libtins) High-level, multiplatform C++ network packet sniffing and crafting library.
-- [**1331**Star][1y] [C] [gamelinux/passivedns](https://github.com/gamelinux/passivedns) A network sniffer that logs all DNS server replies for use in a passive DNS setup
-- [**1329**Star][1m] [CSS] [undeadsec/socialfish](https://github.com/undeadsec/socialfish) Educational Phishing Tool & Information Collector
-- [**1329**Star][10m] [rebeyond/behinder](https://github.com/rebeyond/behinder) “冰蝎”动态二进制加密网站管理客户端
-- [**1329**Star][1y] [kirikira/vtemplate](https://github.com/kirikira/vtemplate) v2ray的模板们
-- [**1328**Star][1y] [C] [madeye/proxydroid](https://github.com/madeye/proxydroid) Global Proxy for Android
-- [**1326**Star][11d] [C++] [purplei2p/i2pd](https://github.com/purplei2p/i2pd) a full-featured C++ implementation of I2P client
-- [**1324**Star][2y] [CoffeeScript] [atmos/camo](https://github.com/atmos/camo) all about making insecure assets look secure
-- [**1323**Star][1y] [Py] [marten4n6/evilosx](https://github.com/marten4n6/evilosx) An evil RAT (Remote Administration Tool) for macOS / OS X.
-- [**1322**Star][3m] [HTML] [thehive-project/thehive](https://github.com/thehive-project/thehive) a Scalable, Open Source and Free Security Incident Response Platform
-- [**1321**Star][6m] [Go] [ssllabs/ssllabs-scan](https://github.com/ssllabs/ssllabs-scan) A command-line reference-implementation client for SSL Labs APIs, designed for automated and/or bulk testing.
-- [**1321**Star][1y] [C++] [rehints/hexrayscodexplorer](https://github.com/rehints/hexrayscodexplorer) Hex-Rays Decompiler plugin for better code navigation
+- [**1345**Star][25d] [C] [x64dbg/x64dbgpy](https://github.com/x64dbg/x64dbgpy) Automating x64dbg using Python, Snapshots:
+- [**1345**Star][12d] [Go] [securitywithoutborders/hardentools](https://github.com/securitywithoutborders/hardentools) Hardentools is a utility that disables a number of risky Windows features.
+- [**1344**Star][23d] [Go] [microcosm-cc/bluemonday](https://github.com/microcosm-cc/bluemonday) a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS
+- [**1343**Star][23d] [Py] [s0md3v/arjun](https://github.com/s0md3v/Arjun) HTTP parameter discovery suite.
+- [**1342**Star][12m] [C] [luke-jr/bfgminer](https://github.com/luke-jr/bfgminer) Modular ASIC/FPGA miner written in C, featuring overclocking, monitoring, fan speed control and remote interface capabilities.
+- [**1342**Star][2m] [Go] [davrodpin/mole](https://github.com/davrodpin/mole) cli app to create ssh tunnels
+- [**1342**Star][1y] [Py] [carmaa/inception](https://github.com/carmaa/inception) a physical memory manipulation and hacking tool exploiting PCI-based DMA. The tool can attack over FireWire, Thunderbolt, ExpressCard, PC Card and any other PCI/PCIe interfaces.
+- [**1341**Star][3m] [Py] [maratyszcza/peachpy](https://github.com/maratyszcza/peachpy) x86-64 assembler embedded in Python
+- [**1341**Star][1y] [XSLT] [api0cradle/lolbas](https://github.com/api0cradle/lolbas) Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
+- [**1340**Star][1y] [kirikira/vtemplate](https://github.com/kirikira/vtemplate) v2ray的模板们
+- [**1340**Star][7m] [Py] [feeicn/gsil](https://github.com/feeicn/gsil) GitHub Sensitive Information Leakage
+- [**1339**Star][6y] [Perl] [intelisecurelabs/linux_exploit_suggester](https://github.com/InteliSecureLabs/Linux_Exploit_Suggester) Linux Exploit Suggester; based on operating system release number
+- [**1338**Star][1m] [CSS] [undeadsec/socialfish](https://github.com/undeadsec/socialfish) Educational Phishing Tool & Information Collector
+- [**1337**Star][1y] [C] [madeye/proxydroid](https://github.com/madeye/proxydroid) Global Proxy for Android
+- [**1336**Star][3m] [HTML] [thehive-project/thehive](https://github.com/thehive-project/thehive) a Scalable, Open Source and Free Security Incident Response Platform
+- [**1335**Star][2m] [C++] [mfontanini/libtins](https://github.com/mfontanini/libtins) High-level, multiplatform C++ network packet sniffing and crafting library.
+- [**1334**Star][4y] [mengskysama/shadowsocks](https://github.com/mengskysama/shadowsocks) A fast tunnel proxy that helps you bypass firewalls
+- [**1333**Star][1y] [C] [gamelinux/passivedns](https://github.com/gamelinux/passivedns) A network sniffer that logs all DNS server replies for use in a passive DNS setup
+- [**1328**Star][2d] [C++] [purplei2p/i2pd](https://github.com/purplei2p/i2pd) a full-featured C++ implementation of I2P client
+- [**1328**Star][1y] [Py] [marten4n6/evilosx](https://github.com/marten4n6/evilosx) An evil RAT (Remote Administration Tool) for macOS / OS X.
+- [**1328**Star][2y] [CoffeeScript] [atmos/camo](https://github.com/atmos/camo) all about making insecure assets look secure
+- [**1327**Star][7m] [Go] [ssllabs/ssllabs-scan](https://github.com/ssllabs/ssllabs-scan) A command-line reference-implementation client for SSL Labs APIs, designed for automated and/or bulk testing.
+- [**1327**Star][3d] [C] [intel/haxm](https://github.com/intel/haxm) cross-platform hardware-assisted virtualization engine (hypervisor), widely used as an accelerator for Android Emulator and QEMU
+- [**1327**Star][10m] [C#] [cenmrev/v2rayw](https://github.com/cenmrev/v2rayw) GUI for v2ray-core on Windows
+- [**1325**Star][21d] [C] [dtag-dev-sec/tpotce](https://github.com/dtag-dev-sec/tpotce) 创建多蜜罐平台T-Pot ISO 镜像
+- [**1324**Star][1y] [C++] [rehints/hexrayscodexplorer](https://github.com/rehints/hexrayscodexplorer) Hex-Rays Decompiler plugin for better code navigation
View Details
@@ -932,142 +1003,143 @@
-- [**1318**Star][2m] [jaredthecoder/awesome-vehicle-security](https://github.com/jaredthecoder/awesome-vehicle-security)
-- [**1315**Star][1y] [mortenoir1/virtualbox_e1000_0day](https://github.com/mortenoir1/virtualbox_e1000_0day) VirtualBox E1000 Guest-to-Host Escape
-- [**1312**Star][12d] [C] [oisf/suricata](https://github.com/OISF/suricata) a network IDS, IPS and NSM engine
-- [**1311**Star][2y] [Py] [worawit/ms17-010](https://github.com/worawit/ms17-010) MS17-010
-- [**1311**Star][18d] [C] [intel/haxm](https://github.com/intel/haxm) cross-platform hardware-assisted virtualization engine (hypervisor), widely used as an accelerator for Android Emulator and QEMU
-- [**1310**Star][3m] [PowerShell] [peewpw/invoke-psimage](https://github.com/peewpw/invoke-psimage) Encodes a PowerShell script in the pixels of a PNG file and generates a oneliner to execute
-- [**1310**Star][10m] [C] [fancycode/memorymodule](https://github.com/fancycode/memorymodule) Library to load a DLL from memory.
-- [**1309**Star][10m] [C#] [cenmrev/v2rayw](https://github.com/cenmrev/v2rayw) GUI for v2ray-core on Windows
-- [**1305**Star][12m] [Py] [xyntax/poc-t](https://github.com/xyntax/poc-t) remote vulnerability PoC/EXP framework
-- [**1305**Star][3m] [Lua] [scipag/vulscan](https://github.com/scipag/vulscan) Advanced vulnerability scanning with Nmap NSE
-- [**1305**Star][18d] [C] [dtag-dev-sec/tpotce](https://github.com/dtag-dev-sec/tpotce) 创建多蜜罐平台T-Pot ISO 镜像
-- [**1303**Star][17d] [Py] [consensys/mythril](https://github.com/ConsenSys/mythril) Security analysis tool for EVM bytecode. Supports smart contracts built for Ethereum, Quorum, Vechain, Roostock, Tron and other EVM-compatible blockchains.
-- [**1303**Star][15d] [nikitavoloboev/privacy-respecting](https://github.com/nikitavoloboev/privacy-respecting) Curated List of Privacy Respecting Services and Software
+- [**1323**Star][2d] [Go] [xiaoming2028/freenet](https://github.com/xiaoming2028/freenet) 科学上网/梯子/自由上网/翻墙 SS/SSR/V2Ray/Brook 搭建教程
+- [**1323**Star][2m] [jaredthecoder/awesome-vehicle-security](https://github.com/jaredthecoder/awesome-vehicle-security)
+- [**1322**Star][3d] [C] [oisf/suricata](https://github.com/OISF/suricata) a network IDS, IPS and NSM engine
+- [**1319**Star][2y] [Py] [worawit/ms17-010](https://github.com/worawit/ms17-010) MS17-010
+- [**1317**Star][1y] [mortenoir1/virtualbox_e1000_0day](https://github.com/mortenoir1/virtualbox_e1000_0day) VirtualBox E1000 Guest-to-Host Escape
+- [**1316**Star][3m] [PS] [peewpw/invoke-psimage](https://github.com/peewpw/invoke-psimage) Encodes a PowerShell script in the pixels of a PNG file and generates a oneliner to execute
+- [**1314**Star][10m] [C] [fancycode/memorymodule](https://github.com/fancycode/memorymodule) Library to load a DLL from memory.
+- [**1311**Star][1m] [C++] [shadowsocks/libqtshadowsocks](https://github.com/shadowsocks/libqtshadowsocks) A lightweight and ultra-fast shadowsocks library written in C++14 with Qt framework
+- [**1309**Star][12m] [Py] [xyntax/poc-t](https://github.com/xyntax/poc-t) remote vulnerability PoC/EXP framework
+- [**1309**Star][3m] [Lua] [scipag/vulscan](https://github.com/scipag/vulscan) Advanced vulnerability scanning with Nmap NSE
+- [**1307**Star][19d] [Py] [consensys/mythril](https://github.com/ConsenSys/mythril) Security analysis tool for EVM bytecode. Supports smart contracts built for Ethereum, Quorum, Vechain, Roostock, Tron and other EVM-compatible blockchains.
+- [**1307**Star][27d] [C] [boywhp/fcn](https://github.com/boywhp/fcn) free connect your private network from anywhere
+- [**1304**Star][17d] [nikitavoloboev/privacy-respecting](https://github.com/nikitavoloboev/privacy-respecting) Curated List of Privacy Respecting Services and Software
+- [**1304**Star][7d] [C] [cisco-talos/pyrebox](https://github.com/cisco-talos/pyrebox) Python scriptable Reverse Engineering Sandbox, a Virtual Machine instrumentation and inspection framework based on QEMU
- [**1303**Star][4m] [C++] [klee/klee](https://github.com/klee/klee) KLEE Symbolic Execution Engine
-- [**1300**Star][18d] [C] [cisco-talos/pyrebox](https://github.com/cisco-talos/pyrebox) Python scriptable Reverse Engineering Sandbox, a Virtual Machine instrumentation and inspection framework based on QEMU
-- [**1297**Star][1y] [Go] [evilsocket/xray](https://github.com/evilsocket/xray) XRay is a tool for recon, mapping and OSINT gathering from public networks.
-- [**1293**Star][1y] [Shell] [dana-at-cp/backdoor-apk](https://github.com/dana-at-cp/backdoor-apk) backdoor-apk is a shell script that simplifies the process of adding a backdoor to any Android APK file. Users of this shell script should have working knowledge of Linux, Bash, Metasploit, Apktool, the Android SDK, smali, etc. This shell script is provided as-is without warranty of any kind and is intended for educational purposes only.
-- [**1291**Star][27d] [Java] [android-hacker/exposed](https://github.com/android-hacker/exposed) A library to use Xposed without root or recovery(or modify system image etc..).
-- [**1290**Star][2y] [Go] [malfunkt/hyperfox](https://github.com/malfunkt/hyperfox) HTTP/HTTPs MITM proxy and traffic recorder with on-the-fly TLS cert generation.
-- [**1289**Star][2m] [C] [traviscross/mtr](https://github.com/traviscross/mtr) Official repository for mtr, a network diagnostic tool
-- [**1288**Star][4y] [C++] [microsoft/microsoft-pdb](https://github.com/microsoft/microsoft-pdb) Information from Microsoft about the PDB format. We'll try to keep this up to date. Just trying to help the CLANG/LLVM community get onto Windows.
-- [**1287**Star][19d] [JS] [icymind/vrouter](https://github.com/icymind/vrouter) 一个基于 VirtualBox 和 openwrt 构建的项目, 旨在实现 macOS / Windows 平台的透明代理.
-- [**1284**Star][2m] [Py] [virtualabs/btlejack](https://github.com/virtualabs/btlejack) Bluetooth Low Energy Swiss-army knife
-- [**1284**Star][5m] [JS] [feross/spoof](https://github.com/feross/spoof) Easily spoof your MAC address in macOS, Windows, & Linux!
-- [**1278**Star][9m] [michalmalik/linux-re-101](https://github.com/michalmalik/linux-re-101) A collection of resources for linux reverse engineering
-- [**1278**Star][4y] [Py] [elvanderb/tcp-32764](https://github.com/elvanderb/tcp-32764) some codes and notes about the backdoor listening on TCP-32764 in linksys WAG200G.
-- [**1277**Star][10d] [PHP] [friendsofphp/security-advisories](https://github.com/friendsofphp/security-advisories) A database of PHP security advisories
-- [**1277**Star][27d] [Go] [dreadl0ck/netcap](https://github.com/dreadl0ck/netcap) A framework for secure and scalable network traffic analysis -
-- [**1275**Star][24d] [Py] [viper-framework/viper](https://github.com/viper-framework/viper) Binary analysis and management framework
-- [**1273**Star][1m] [Py] [pyauth/pyotp](https://github.com/pyauth/pyotp) Python One-Time Password Library
-- [**1273**Star][2m] [Py] [codingo/reconnoitre](https://github.com/codingo/reconnoitre) A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.
-- [**1272**Star][1y] [JS] [sakurity/securelogin](https://github.com/sakurity/securelogin) a decentralized authentication protocol for websites and apps
-- [**1270**Star][2m] [C] [seemoo-lab/nexmon](https://github.com/seemoo-lab/nexmon) The C-based Firmware Patching Framework for Broadcom/Cypress WiFi Chips that enables Monitor Mode, Frame Injection and much more
-- [**1270**Star][1y] [PowerShell] [dafthack/mailsniper](https://github.com/dafthack/mailsniper) a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.
-- [**1270**Star][1m] [Py] [bethgelab/foolbox](https://github.com/bethgelab/foolbox) Python toolbox to create adversarial examples that fool neural networks in PyTorch, TensorFlow, Keras, …
-- [**1268**Star][2m] [Java] [googlearchive/android-runtimepermissions](https://github.com/googlearchive/android-RuntimePermissions) This sample has been deprecated/archived. Check this repo for related samples:
-- [**1268**Star][1y] [Py] [ethereum/pyethapp](https://github.com/ethereum/pyethapp)
-- [**1266**Star][2m] [Py] [ganapati/rsactftool](https://github.com/ganapati/rsactftool) RSA attack tool (mainly for ctf) - retreive private key from weak public key and/or uncipher data
-- [**1265**Star][9d] [Shell] [firehol/blocklist-ipsets](https://github.com/firehol/blocklist-ipsets) ipsets dynamically updated with firehol's update-ipsets.sh script
-- [**1265**Star][9d] [Shell] [firehol/blocklist-ipsets](https://github.com/firehol/blocklist-ipsets) ipsets dynamically updated with firehol's update-ipsets.sh script
-- [**1262**Star][3m] [Go] [solo-io/squash](https://github.com/solo-io/squash) The debugger for microservices
-- [**1261**Star][3m] [Py] [alessandroz/beroot](https://github.com/alessandroz/beroot) Privilege Escalation Project - Windows / Linux / Mac
-- [**1259**Star][11m] [Py] [unapibageek/ctfr](https://github.com/unapibageek/ctfr) Abusing Certificate Transparency logs for getting HTTPS websites subdomains.
-- [**1255**Star][7m] [PHP] [ganlvtech/down_52pojie_cn](https://github.com/ganlvtech/down_52pojie_cn) A single page file explorer that can be hosted on static website. 吾爱破解论坛 爱盘
-- [**1255**Star][13d] [C] [aircrack-ng/aircrack-ng](https://github.com/aircrack-ng/aircrack-ng) WiFi security auditing tools suite
-- [**1253**Star][2y] [JS] [samyk/skyjack](https://github.com/samyk/skyjack) A drone engineered to autonomously seek out, hack, and wirelessly take full control over any other Parrot or 3DR drones within wireless or flying distance, creating an army of zombie drones under your control.
-- [**1250**Star][1m] [PowerShell] [hak5/bashbunny-payloads](https://github.com/hak5/bashbunny-payloads) The Official Bash Bunny Payload Repository
-- [**1248**Star][2y] [Py] [vaguileradiaz/tinfoleak](https://github.com/vaguileradiaz/tinfoleak) The most complete open-source tool for Twitter intelligence analysis
-- [**1248**Star][4m] [JS] [bubenshchykov/ngrok](https://github.com/bubenshchykov/ngrok) Expose your localhost to the web. Node wrapper for ngrok.
-- [**1245**Star][2m] [Go] [xiaoming2028/freenet](https://github.com/xiaoming2028/freenet) 科学上网/梯子/自由上网/翻墙 SSR/V2Ray/Brook 最全搭建教程
-- [**1245**Star][15d] [JS] [archerysec/archerysec](https://github.com/archerysec/archerysec) Centralize Vulnerability Assessment and Management for DevSecOps Team
-- [**1244**Star][2y] [Objective-C] [krausefx/detect.location](https://github.com/krausefx/detect.location) An easy way to access the user's iOS location data without actually having access
-- [**1242**Star][4y] [firesuncn/bluelotus_xssreceiver](https://github.com/firesuncn/bluelotus_xssreceiver) XSS平台 CTF工具 Web安全工具
-- [**1242**Star][1m] [Vue] [chaitin/passionfruit](https://github.com/chaitin/passionfruit) [WIP] Crappy iOS app analyzer
+- [**1300**Star][1y] [Shell] [dana-at-cp/backdoor-apk](https://github.com/dana-at-cp/backdoor-apk) backdoor-apk is a shell script that simplifies the process of adding a backdoor to any Android APK file. Users of this shell script should have working knowledge of Linux, Bash, Metasploit, Apktool, the Android SDK, smali, etc. This shell script is provided as-is without warranty of any kind and is intended for educational purposes only.
+- [**1299**Star][6d] [Go] [hacklcx/hfish](https://github.com/hacklcx/hfish) Extend the enterprise security test open source honeypot system , Record hacker attacks. 扩展企业安全测试主动诱导型开源蜜罐框架系统,记录黑客攻击手段
+- [**1298**Star][1y] [Go] [evilsocket/xray](https://github.com/evilsocket/xray) XRay is a tool for recon, mapping and OSINT gathering from public networks.
+- [**1293**Star][4y] [C++] [microsoft/microsoft-pdb](https://github.com/microsoft/microsoft-pdb) Information from Microsoft about the PDB format. We'll try to keep this up to date. Just trying to help the CLANG/LLVM community get onto Windows.
+- [**1293**Star][5m] [JS] [feross/spoof](https://github.com/feross/spoof) Easily spoof your MAC address in macOS, Windows, & Linux!
+- [**1293**Star][29d] [Java] [android-hacker/exposed](https://github.com/android-hacker/exposed) A library to use Xposed without root or recovery(or modify system image etc..).
+- [**1291**Star][6d] [C] [traviscross/mtr](https://github.com/traviscross/mtr) Official repository for mtr, a network diagnostic tool
+- [**1291**Star][2y] [Go] [malfunkt/hyperfox](https://github.com/malfunkt/hyperfox) HTTP/HTTPs MITM proxy and traffic recorder with on-the-fly TLS cert generation.
+- [**1289**Star][2m] [Py] [virtualabs/btlejack](https://github.com/virtualabs/btlejack) Bluetooth Low Energy Swiss-army knife
+- [**1289**Star][21d] [JS] [icymind/vrouter](https://github.com/icymind/vrouter) 一个基于 VirtualBox 和 openwrt 构建的项目, 旨在实现 macOS / Windows 平台的透明代理.
+- [**1285**Star][12d] [PHP] [friendsofphp/security-advisories](https://github.com/friendsofphp/security-advisories) A database of PHP security advisories
+- [**1283**Star][9m] [michalmalik/linux-re-101](https://github.com/michalmalik/linux-re-101) A collection of resources for linux reverse engineering
+- [**1283**Star][2m] [Py] [codingo/reconnoitre](https://github.com/codingo/reconnoitre) A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.
+- [**1279**Star][2m] [C] [seemoo-lab/nexmon](https://github.com/seemoo-lab/nexmon) The C-based Firmware Patching Framework for Broadcom/Cypress WiFi Chips that enables Monitor Mode, Frame Injection and much more
+- [**1279**Star][9m] [Go] [perlin-network/noise](https://github.com/perlin-network/noise) A decentralized P2P networking stack written in Go.
+- [**1279**Star][4y] [Py] [elvanderb/tcp-32764](https://github.com/elvanderb/tcp-32764) some codes and notes about the backdoor listening on TCP-32764 in linksys WAG200G.
+- [**1278**Star][26d] [Py] [viper-framework/viper](https://github.com/viper-framework/viper) Binary analysis and management framework
+- [**1277**Star][4d] [Shell] [firehol/blocklist-ipsets](https://github.com/firehol/blocklist-ipsets) ipsets dynamically updated with firehol's update-ipsets.sh script
+- [**1277**Star][8d] [Py] [pyauth/pyotp](https://github.com/pyauth/pyotp) Python One-Time Password Library
+- [**1277**Star][4d] [Shell] [firehol/blocklist-ipsets](https://github.com/firehol/blocklist-ipsets) ipsets dynamically updated with firehol's update-ipsets.sh script
+- [**1277**Star][29d] [Go] [dreadl0ck/netcap](https://github.com/dreadl0ck/netcap) A framework for secure and scalable network traffic analysis -
+- [**1277**Star][1m] [Py] [bethgelab/foolbox](https://github.com/bethgelab/foolbox) Python toolbox to create adversarial examples that fool neural networks in PyTorch, TensorFlow, Keras, …
+- [**1273**Star][1y] [PS] [dafthack/mailsniper](https://github.com/dafthack/mailsniper) a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.
+- [**1271**Star][1y] [JS] [sakurity/securelogin](https://github.com/sakurity/securelogin) a decentralized authentication protocol for websites and apps
+- [**1271**Star][2m] [Py] [ganapati/rsactftool](https://github.com/ganapati/rsactftool) RSA attack tool (mainly for ctf) - retreive private key from weak public key and/or uncipher data
+- [**1270**Star][3m] [Py] [alessandroz/beroot](https://github.com/alessandroz/beroot) Privilege Escalation Project - Windows / Linux / Mac
+- [**1269**Star][3m] [Java] [googlearchive/android-runtimepermissions](https://github.com/googlearchive/android-RuntimePermissions) This sample has been deprecated/archived. Check this repo for related samples:
+- [**1269**Star][3m] [Go] [solo-io/squash](https://github.com/solo-io/squash) The debugger for microservices
+- [**1269**Star][1y] [Py] [ethereum/pyethapp](https://github.com/ethereum/pyethapp)
+- [**1267**Star][7m] [PHP] [ganlvtech/down_52pojie_cn](https://github.com/ganlvtech/down_52pojie_cn) A single page file explorer that can be hosted on static website. 吾爱破解论坛 爱盘
+- [**1267**Star][2d] [C] [aircrack-ng/aircrack-ng](https://github.com/aircrack-ng/aircrack-ng) WiFi security auditing tools suite
+- [**1263**Star][4d] [JS] [forwardemail/free-email-forwarding](https://github.com/forwardemail/free-email-forwarding)
+- [**1261**Star][11m] [Py] [unapibageek/ctfr](https://github.com/unapibageek/ctfr) Abusing Certificate Transparency logs for getting HTTPS websites subdomains.
+- [**1260**Star][12m] [PHP] [you2php/delete](https://github.com/you2php/delete) (迫于压力,本项目停止维护,请尽快fork代码。1月1日之后删除项目)[免翻墙工具]A free and open-source youtube video proxy script [Written in PHP]
+- [**1256**Star][1m] [PS] [hak5/bashbunny-payloads](https://github.com/hak5/bashbunny-payloads) The Official Bash Bunny Payload Repository
+- [**1255**Star][2y] [JS] [samyk/skyjack](https://github.com/samyk/skyjack) A drone engineered to autonomously seek out, hack, and wirelessly take full control over any other Parrot or 3DR drones within wireless or flying distance, creating an army of zombie drones under your control.
+- [**1253**Star][4d] [JS] [archerysec/archerysec](https://github.com/archerysec/archerysec) Centralize Vulnerability Assessment and Management for DevSecOps Team
+- [**1253**Star][4m] [JS] [bubenshchykov/ngrok](https://github.com/bubenshchykov/ngrok) Expose your localhost to the web. Node wrapper for ngrok.
+- [**1251**Star][3d] [Shell] [mitchellkrogza/nginx-ultimate-bad-bot-blocker](https://github.com/mitchellkrogza/nginx-ultimate-bad-bot-blocker) Nginx Block Bad Bots, Spam Referrer Blocker, Vulnerability Scanners, User-Agents, Malware, Adware, Ransomware, Malicious Sites, with anti-DDOS, Wordpress Theme Detector Blocking and Fail2Ban Jail for Repeat Offenders
+- [**1250**Star][2y] [Py] [vaguileradiaz/tinfoleak](https://github.com/vaguileradiaz/tinfoleak) The most complete open-source tool for Twitter intelligence analysis
+- [**1247**Star][1m] [Vue] [chaitin/passionfruit](https://github.com/chaitin/passionfruit) [WIP] Crappy iOS app analyzer
+- [**1244**Star][3m] [michalmalik/osx-re-101](https://github.com/michalmalik/osx-re-101) A collection of resources for OSX/iOS reverse engineering.
+- [**1244**Star][2y] [ObjC] [krausefx/detect.location](https://github.com/krausefx/detect.location) An easy way to access the user's iOS location data without actually having access
+- [**1243**Star][3m] [Shell] [rootsongjc/kubernetes-vagrant-centos-cluster](https://github.com/rootsongjc/kubernetes-vagrant-centos-cluster) Setting up a distributed Kubernetes cluster along with Istio service mesh locally with Vagrant and VirtualBox, only PoC or Demo use.
+- [**1243**Star][10m] [C] [a0rtega/pafish](https://github.com/a0rtega/pafish) Pafish is a demonstration tool that employs several techniques to detect sandboxes and analysis environments in the same way as malware families do.
+- [**1242**Star][9d] [Py] [thekingofduck/fuzzdicts](https://github.com/thekingofduck/fuzzdicts) Web Pentesting Fuzz 字典,一个就够了。
+- [**1241**Star][4y] [firesuncn/bluelotus_xssreceiver](https://github.com/firesuncn/bluelotus_xssreceiver) XSS平台 CTF工具 Web安全工具
- [**1241**Star][1y] [Ruby] [eliotsykes/rails-security-checklist](https://github.com/eliotsykes/rails-security-checklist)
-- [**1240**Star][10m] [C] [a0rtega/pafish](https://github.com/a0rtega/pafish) Pafish is a demonstration tool that employs several techniques to detect sandboxes and analysis environments in the same way as malware families do.
-- [**1239**Star][2m] [michalmalik/osx-re-101](https://github.com/michalmalik/osx-re-101) A collection of resources for OSX/iOS reverse engineering.
-- [**1235**Star][1m] [Go] [hacklcx/hfish](https://github.com/hacklcx/hfish) Extend the enterprise security test open source honeypot system , Record hacker attacks. 扩展企业安全测试主动诱导型开源蜜罐框架系统,记录黑客攻击手段
-- [**1235**Star][2m] [Go] [google/martian](https://github.com/google/martian) Martian is a library for building custom HTTP/S proxies
-- [**1232**Star][3m] [Shell] [rootsongjc/kubernetes-vagrant-centos-cluster](https://github.com/rootsongjc/kubernetes-vagrant-centos-cluster) Setting up a distributed Kubernetes cluster along with Istio service mesh locally with Vagrant and VirtualBox, only PoC or Demo use.
-- [**1231**Star][3y] [Py] [desaster/kippo](https://github.com/desaster/kippo) Kippo - SSH Honeypot
-- [**1230**Star][7d] [Shell] [mitchellkrogza/nginx-ultimate-bad-bot-blocker](https://github.com/mitchellkrogza/nginx-ultimate-bad-bot-blocker) Nginx Block Bad Bots, Spam Referrer Blocker, Vulnerability Scanners, User-Agents, Malware, Adware, Ransomware, Malicious Sites, with anti-DDOS, Wordpress Theme Detector Blocking and Fail2Ban Jail for Repeat Offenders
-- [**1230**Star][5m] [chalker/notes](https://github.com/chalker/notes) Some public notes
-- [**1228**Star][1y] [Kotlin] [gh0u1l5/wechatspellbook](https://github.com/gh0u1l5/wechatspellbook) 使用Kotlin编写的开源微信插件框架,底层需要 Xposed 或 VirtualXposed 等Hooking框架的支持,而顶层可以轻松对接Java、Kotlin、Scala等JVM系语言。让程序员能够在几分钟内编写出简单的微信插件,随意揉捏微信的内部逻辑。
-- [**1228**Star][8m] [Py] [flipkart-incubator/astra](https://github.com/flipkart-incubator/astra) Automated Security Testing For REST API's
-- [**1224**Star][1m] [C] [datatheorem/trustkit](https://github.com/datatheorem/trustkit) Easy SSL pinning validation and reporting for iOS, macOS, tvOS and watchOS.
-- [**1223**Star][3y] [CoffeeScript] [shadowsocks/shadowsocks-nodejs](https://github.com/shadowsocks/shadowsocks-nodejs)
-- [**1222**Star][3y] [C] [tsudakageyu/minhook](https://github.com/tsudakageyu/minhook) The Minimalistic x86/x64 API Hooking Library for Windows
-- [**1222**Star][27d] [C++] [nasa-sw-vnv/ikos](https://github.com/nasa-sw-vnv/ikos) Static analyzer for C/C++ based on the theory of Abstract Interpretation.
-- [**1222**Star][1y] [Py] [danmcinerney/net-creds](https://github.com/danmcinerney/net-creds) Sniffs sensitive data from interface or pcap
-- [**1220**Star][1y] [Go] [cloudflare/redoctober](https://github.com/cloudflare/redoctober) Go server for two-man rule style file encryption and decryption.
-- [**1219**Star][5y] [cure53/xsschallengewiki](https://github.com/cure53/XSSChallengeWiki) Welcome to the XSS Challenge Wiki!
-- [**1219**Star][4m] [Py] [owtf/owtf](https://github.com/owtf/owtf) a framework which tries to unite great tools and make pen testing more efficient
-- [**1218**Star][11d] [Py] [google/timesketch](https://github.com/google/timesketch) Collaborative forensic timeline analysis
-- [**1218**Star][26d] [Java] [find-sec-bugs/find-sec-bugs](https://github.com/find-sec-bugs/find-sec-bugs) The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)
-- [**1218**Star][5y] [cure53/xsschallengewiki](https://github.com/cure53/xsschallengewiki) Welcome to the XSS Challenge Wiki!
-- [**1217**Star][1y] [C#] [cn33liz/p0wnedshell](https://github.com/cn33liz/p0wnedshell) PowerShell Runspace Post Exploitation Toolkit
-- [**1216**Star][26d] [Go] [jsha/minica](https://github.com/jsha/minica) minica is a small, simple CA intended for use in situations where the CA operator also operates each host where a certificate will be used.
-- [**1212**Star][10d] [C] [dynamorio/dynamorio](https://github.com/dynamorio/dynamorio) Dynamic Instrumentation Tool Platform
-- [**1207**Star][8d] [JS] [jpcertcc/logontracer](https://github.com/jpcertcc/logontracer) Investigate malicious Windows logon by visualizing and analyzing Windows event log
-- [**1205**Star][3m] [Java] [javiersantos/piracychecker](https://github.com/javiersantos/piracychecker) An Android library that prevents your app from being pirated / cracked using Google Play Licensing (LVL), APK signature protection and more. API 14+ required.
-- [**1204**Star][7d] [Objective-C] [onionbrowser/onionbrowser](https://github.com/onionbrowser/onionbrowser) An open-source, privacy-enhancing web browser for iOS, utilizing the Tor anonymity network
-- [**1204**Star][3m] [JS] [davidbau/seedrandom](https://github.com/davidbau/seedrandom) seeded random number generator for Javascript
-- [**1203**Star][30d] [Py] [codingo/nosqlmap](https://github.com/codingo/NoSQLMap) Automated NoSQL database enumeration and web application exploitation tool.
-- [**1201**Star][7d] [Java] [linkedin/dexmaker](https://github.com/linkedin/dexmaker) A utility for doing compile or runtime code generation targeting Android's Dalvik VM
-- [**1200**Star][3m] [C] [droe/sslsplit](https://github.com/droe/sslsplit) Transparent SSL/TLS interception
-- [**1199**Star][1y] [felixgr/secure-ios-app-dev](https://github.com/felixgr/secure-ios-app-dev) Collection of the most common vulnerabilities found in iOS applications
-- [**1198**Star][24d] [Py] [thekingofduck/fuzzdicts](https://github.com/thekingofduck/fuzzdicts) Web Pentesting Fuzz 字典,一个就够了。
-- [**1196**Star][1y] [Go] [rancher/convoy](https://github.com/rancher/convoy) A Docker volume plugin, managing persistent container volumes.
-- [**1194**Star][2y] [C] [saminiir/level-ip](https://github.com/saminiir/level-ip) a Linux userspace TCP/IP stack, implemented with TUN/TAP devices.
-- [**1194**Star][7m] [riusksk/secbook](https://github.com/riusksk/secbook) 信息安全从业者书单推荐
-- [**1193**Star][18d] [Py] [cve-search/cve-search](https://github.com/cve-search/cve-search) perform local searches for known vulnerabilities
-- [**1192**Star][17d] [YARA] [horsicq/detect-it-easy](https://github.com/horsicq/detect-it-easy) Program for determining types of files for Windows, Linux and MacOS.
-- [**1191**Star][6y] [gdbinit/gdbinit](https://github.com/gdbinit/gdbinit) Gdbinit for OS X, iOS and others - x86, x86_64 and ARM
-- [**1191**Star][9m] [C] [f0rb1dd3n/reptile](https://github.com/f0rb1dd3n/reptile) LKM Linux rootkit
-- [**1190**Star][3m] [Py] [jtesta/ssh-mitm](https://github.com/jtesta/ssh-mitm) SSH man-in-the-middle tool
+- [**1240**Star][2m] [Go] [google/martian](https://github.com/google/martian) Martian is a library for building custom HTTP/S proxies
+- [**1238**Star][1y] [Kotlin] [gh0u1l5/wechatspellbook](https://github.com/gh0u1l5/wechatspellbook) 使用Kotlin编写的开源微信插件框架,底层需要 Xposed 或 VirtualXposed 等Hooking框架的支持,而顶层可以轻松对接Java、Kotlin、Scala等JVM系语言。让程序员能够在几分钟内编写出简单的微信插件,随意揉捏微信的内部逻辑。
+- [**1233**Star][3y] [Py] [desaster/kippo](https://github.com/desaster/kippo) Kippo - SSH Honeypot
+- [**1230**Star][8m] [Py] [flipkart-incubator/astra](https://github.com/flipkart-incubator/astra) Automated Security Testing For REST API's
+- [**1229**Star][5m] [chalker/notes](https://github.com/chalker/notes) Some public notes
+- [**1228**Star][3y] [C] [tsudakageyu/minhook](https://github.com/tsudakageyu/minhook) The Minimalistic x86/x64 API Hooking Library for Windows
+- [**1228**Star][3d] [C++] [nasa-sw-vnv/ikos](https://github.com/nasa-sw-vnv/ikos) Static analyzer for C/C++ based on the theory of Abstract Interpretation.
+- [**1227**Star][6d] [C] [datatheorem/trustkit](https://github.com/datatheorem/trustkit) Easy SSL pinning validation and reporting for iOS, macOS, tvOS and watchOS.
+- [**1227**Star][1y] [Py] [danmcinerney/net-creds](https://github.com/danmcinerney/net-creds) Sniffs sensitive data from interface or pcap
+- [**1225**Star][28d] [Java] [find-sec-bugs/find-sec-bugs](https://github.com/find-sec-bugs/find-sec-bugs) The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)
+- [**1224**Star][3y] [CoffeeScript] [shadowsocks/shadowsocks-nodejs](https://github.com/shadowsocks/shadowsocks-nodejs)
+- [**1223**Star][28d] [Go] [jsha/minica](https://github.com/jsha/minica) minica is a small, simple CA intended for use in situations where the CA operator also operates each host where a certificate will be used.
+- [**1222**Star][5y] [cure53/xsschallengewiki](https://github.com/cure53/XSSChallengeWiki) Welcome to the XSS Challenge Wiki!
+- [**1222**Star][4m] [Py] [owtf/owtf](https://github.com/owtf/owtf) a project focused on penetration testing efficiency and alignment of security tests to security standards like the OWASP Testing Guide (v3 and v4), the OWASP Top 10, PTES and NIST so that pentesters will have more time to
+- [**1222**Star][5y] [cure53/xsschallengewiki](https://github.com/cure53/xsschallengewiki) Welcome to the XSS Challenge Wiki!
+- [**1221**Star][5d] [Py] [harismuneer/ultimate-facebook-scraper](https://github.com/harismuneer/ultimate-facebook-scraper)
+- [**1221**Star][13d] [Py] [google/timesketch](https://github.com/google/timesketch) Collaborative forensic timeline analysis
+- [**1221**Star][1y] [Go] [cloudflare/redoctober](https://github.com/cloudflare/redoctober) Go server for two-man rule style file encryption and decryption.
+- [**1220**Star][1y] [C#] [cn33liz/p0wnedshell](https://github.com/cn33liz/p0wnedshell) PowerShell Runspace Post Exploitation Toolkit
+- [**1215**Star][6d] [C] [dynamorio/dynamorio](https://github.com/dynamorio/dynamorio) Dynamic Instrumentation Tool Platform
+- [**1213**Star][10d] [JS] [jpcertcc/logontracer](https://github.com/jpcertcc/logontracer) Investigate malicious Windows logon by visualizing and analyzing Windows event log
+- [**1209**Star][1m] [Py] [codingo/nosqlmap](https://github.com/codingo/NoSQLMap) Automated NoSQL database enumeration and web application exploitation tool.
+- [**1208**Star][6d] [ObjC] [onionbrowser/onionbrowser](https://github.com/onionbrowser/onionbrowser) An open-source, privacy-enhancing web browser for iOS, utilizing the Tor anonymity network
+- [**1207**Star][7m] [riusksk/secbook](https://github.com/riusksk/secbook) 信息安全从业者书单推荐
+- [**1206**Star][7d] [Java] [linkedin/dexmaker](https://github.com/linkedin/dexmaker) A utility for doing compile or runtime code generation targeting Android's Dalvik VM
+- [**1206**Star][3m] [Java] [javiersantos/piracychecker](https://github.com/javiersantos/piracychecker) An Android library that prevents your app from being pirated / cracked using Google Play Licensing (LVL), APK signature protection and more. API 14+ required.
+- [**1206**Star][3m] [JS] [davidbau/seedrandom](https://github.com/davidbau/seedrandom) seeded random number generator for Javascript
+- [**1205**Star][4d] [YARA] [horsicq/detect-it-easy](https://github.com/horsicq/detect-it-easy) Program for determining types of files for Windows, Linux and MacOS.
+- [**1204**Star][5d] [dweinstein/awesome-frida](https://github.com/dweinstein/awesome-frida) A curated list of Frida resources
+- [**1202**Star][1y] [felixgr/secure-ios-app-dev](https://github.com/felixgr/secure-ios-app-dev) Collection of the most common vulnerabilities found in iOS applications
+- [**1202**Star][3m] [C] [droe/sslsplit](https://github.com/droe/sslsplit) Transparent SSL/TLS interception
+- [**1201**Star][2y] [C] [saminiir/level-ip](https://github.com/saminiir/level-ip) a Linux userspace TCP/IP stack, implemented with TUN/TAP devices.
+- [**1201**Star][3m] [C] [dgiese/dustcloud](https://github.com/dgiese/dustcloud) Xiaomi Smart Home Device Reverse Engineering and Hacking
+- [**1201**Star][23d] [Py] [achillean/shodan-python](https://github.com/achillean/shodan-python) The official Python library for Shodan
+- [**1200**Star][11m] [JS] [mame82/p4wnp1_aloa](https://github.com/mame82/p4wnp1_aloa) turns a Rapsberry Pi Zero W into a flexible, low-cost platform for pentesting, red teaming and physical engagements ... or into "A Little Offensive Appliance".
+- [**1198**Star][1y] [Go] [rancher/convoy](https://github.com/rancher/convoy) A Docker volume plugin, managing persistent container volumes.
+- [**1198**Star][8m] [joe-shenouda/awesome-cyber-skills](https://github.com/joe-shenouda/awesome-cyber-skills) A curated list of hacking environments where you can train your cyber skills legally and safely
+- [**1198**Star][20d] [Py] [cve-search/cve-search](https://github.com/cve-search/cve-search) perform local searches for known vulnerabilities
+- [**1197**Star][9m] [C] [f0rb1dd3n/reptile](https://github.com/f0rb1dd3n/reptile) LKM Linux rootkit
+- [**1192**Star][1m] [Go] [smallstep/certificates](https://github.com/smallstep/certificates) An online certificate authority and related tools for secure automated certificate management, so you can use TLS everywhere.
+- [**1192**Star][7y] [Py] [mothran/mongol](https://github.com/mothran/mongol) A simple python tool to pinpoint the IP addresses of machines working for the Great Firewall of China.
+- [**1192**Star][6y] [gdbinit/gdbinit](https://github.com/gdbinit/gdbinit) Gdbinit for OS X, iOS and others - x86, x86_64 and ARM
+- [**1191**Star][3m] [Py] [jtesta/ssh-mitm](https://github.com/jtesta/ssh-mitm) SSH man-in-the-middle tool
- [**1189**Star][3y] [Roff] [matiasinsaurralde/facebook-tunnel](https://github.com/matiasinsaurralde/facebook-tunnel) Tunneling Internet traffic over Facebook chat.
-- [**1189**Star][8m] [joe-shenouda/awesome-cyber-skills](https://github.com/joe-shenouda/awesome-cyber-skills) A curated list of hacking environments where you can train your cyber skills legally and safely
-- [**1188**Star][4m] [dweinstein/awesome-frida](https://github.com/dweinstein/awesome-frida) A curated list of Frida resources
-- [**1187**Star][7y] [Py] [mothran/mongol](https://github.com/mothran/mongol) A simple python tool to pinpoint the IP addresses of machines working for the Great Firewall of China.
-- [**1186**Star][21d] [Py] [achillean/shodan-python](https://github.com/achillean/shodan-python) The official Python library for Shodan
-- [**1185**Star][14d] [C] [luigirizzo/netmap](https://github.com/luigirizzo/netmap) an framework for very fast packet I/O from userspace
-- [**1182**Star][3m] [C] [dgiese/dustcloud](https://github.com/dgiese/dustcloud) Xiaomi Smart Home Device Reverse Engineering and Hacking
-- [**1182**Star][10m] [C] [blechschmidt/massdns](https://github.com/blechschmidt/massdns) A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)
-- [**1180**Star][2y] [Java] [weexteam/hackernews-app-powered-by-apache-weex](https://github.com/weexteam/hackernews-App-powered-by-Apache-Weex) A mobile app for Hacker News, which is powered by Weex and Vue.
-- [**1180**Star][7m] [ssrarchive/shadowsocks-rss](https://github.com/ssrarchive/shadowsocks-rss) Shadowsocksr project backup
-- [**1180**Star][12d] [Py] [lyft/cartography](https://github.com/lyft/cartography) Cartography is a Python tool that consolidates infrastructure assets and the relationships between them in an intuitive graph view powered by a Neo4j database.
-- [**1179**Star][2y] [C] [mubix/post-exploitation](https://github.com/mubix/post-exploitation) Post Exploitation Collection
-- [**1175**Star][1m] [Go] [smallstep/certificates](https://github.com/smallstep/certificates) An online certificate authority and related tools for secure automated certificate management, so you can use TLS everywhere.
-- [**1174**Star][2m] [jadagates/shadowsocksbio](https://github.com/jadagates/shadowsocksbio) 记录一下SS的前世今生,以及一个简单的教程总结
-- [**1174**Star][5y] [Py] [hackappcom/ibrute](https://github.com/hackappcom/ibrute) AppleID bruteforce p0c
-- [**1174**Star][23d] [Shell] [anudeepnd/whitelist](https://github.com/anudeepnd/whitelist) A simple tool to add commonly white listed domains to your Pi-Hole setup.
-- [**1172**Star][12d] [C] [the-tcpdump-group/tcpdump](https://github.com/the-tcpdump-group/tcpdump) the TCPdump network dissector
-- [**1165**Star][20d] [Go] [genuinetools/reg](https://github.com/genuinetools/reg) Docker registry v2 command line client and repo listing generator with security checks.
-- [**1165**Star][26d] [Py] [cujanovic/ssrf-testing](https://github.com/cujanovic/ssrf-testing) SSRF (Server Side Request Forgery) testing resources
-- [**1163**Star][15d] [Py] [programa-stic/barf-project](https://github.com/programa-stic/barf-project) A multiplatform open source Binary Analysis and Reverse engineering Framework
-- [**1158**Star][6y] [PHP] [lucb1e/cookielesscookies](https://github.com/lucb1e/cookielesscookies) Demo of tracking using etags instead of cookies (or localstorage or anything else)
-- [**1155**Star][4m] [C] [skeeto/endlessh](https://github.com/skeeto/endlessh) SSH tarpit that slowly sends an endless banner
-- [**1155**Star][11m] [JS] [mame82/p4wnp1_aloa](https://github.com/mame82/p4wnp1_aloa) turns a Rapsberry Pi Zero W into a flexible, low-cost platform for pentesting, red teaming and physical engagements ... or into "A Little Offensive Appliance".
-- [**1154**Star][3m] [Go] [mozilla/mig](https://github.com/mozilla/mig) Distributed & real time digital forensics at the speed of the cloud
-- [**1152**Star][20d] [m4ll0k/awesome-hacking-tools](https://github.com/m4ll0k/awesome-hacking-tools) Awesome Hacking Tools
-- [**1151**Star][8d] [JS] [lirantal/is-website-vulnerable](https://github.com/lirantal/is-website-vulnerable) finds publicly known security vulnerabilities in a website's frontend JavaScript libraries
-- [**1151**Star][12d] [Py] [p4-team/ctf](https://github.com/p4-team/ctf) Ctf solutions from p4 team
-- [**1150**Star][3m] [Go] [shadowsocks/v2ray-plugin](https://github.com/shadowsocks/v2ray-plugin) A SIP003 plugin based on v2ray
-- [**1150**Star][24d] [JS] [alonemonkey/frida-ios-dump](https://github.com/alonemonkey/frida-ios-dump) pull decrypted ipa from jailbreak device
-- [**1149**Star][7m] [Py] [mebus/cupp](https://github.com/mebus/cupp) Common User Passwords Profiler (CUPP)
-- [**1145**Star][1y] [HTML] [nsacyber/windows-secure-host-baseline](https://github.com/nsacyber/Windows-Secure-Host-Baseline) Configuration guidance for implementing the Windows 10 and Windows Server 2016 DoD Secure Host Baseline settings. #nsacyber
-- [**1145**Star][13d] [Go] [pusher/oauth2_proxy](https://github.com/pusher/oauth2_proxy) A reverse proxy that provides authentication with Google, Github or other providers.
-- [**1142**Star][4m] [C++] [cgdb/cgdb](https://github.com/cgdb/cgdb) Console front-end to the GNU debugger
-- [**1141**Star][3y] [PowerShell] [powershellempire/powertools](https://github.com/powershellempire/powertools) PowerTools is a collection of PowerShell projects with a focus on offensive operations.
-- [**1140**Star][2m] [HTML] [cure53/httpleaks](https://github.com/cure53/httpleaks) HTTPLeaks - All possible ways, a website can leak HTTP requests
-- [**1138**Star][11m] [Py] [certsocietegenerale/fir](https://github.com/certsocietegenerale/fir) Fast Incident Response
-- [**1137**Star][1m] [TypeScript] [mgechev/ngrev](https://github.com/mgechev/ngrev) Tool for reverse engineering of Angular applications
-- [**1136**Star][7m] [hikariobfuscator/hikari](https://github.com/HikariObfuscator/Hikari) LLVM Obfuscator
-- [**1136**Star][2y] [Py] [hackathonhackers/personal-sites](https://github.com/hackathonhackers/personal-sites) List of Hackathon Hackers' personal sites.
-- [**1134**Star][20d] [Py] [13o-bbr-bbq/machine_learning_security](https://github.com/13o-bbr-bbq/machine_learning_security) Source code about machine learning and security.
+- [**1189**Star][10m] [C] [blechschmidt/massdns](https://github.com/blechschmidt/massdns) A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)
+- [**1189**Star][25d] [Shell] [anudeepnd/whitelist](https://github.com/anudeepnd/whitelist) A simple tool to add commonly white listed domains to your Pi-Hole setup.
+- [**1188**Star][2m] [jadagates/shadowsocksbio](https://github.com/jadagates/shadowsocksbio) 记录一下SS的前世今生,以及一个简单的教程总结
+- [**1187**Star][6d] [Py] [lyft/cartography](https://github.com/lyft/cartography) Cartography is a Python tool that consolidates infrastructure assets and the relationships between them in an intuitive graph view powered by a Neo4j database.
+- [**1186**Star][3d] [C] [luigirizzo/netmap](https://github.com/luigirizzo/netmap) an framework for very fast packet I/O from userspace
+- [**1185**Star][2y] [C] [mubix/post-exploitation](https://github.com/mubix/post-exploitation) Post Exploitation Collection
+- [**1181**Star][8d] [C] [the-tcpdump-group/tcpdump](https://github.com/the-tcpdump-group/tcpdump) the TCPdump network dissector
+- [**1179**Star][2y] [Java] [weexteam/hackernews-app-powered-by-apache-weex](https://github.com/weexteam/hackernews-App-powered-by-Apache-Weex) A mobile app for Hacker News, which is powered by Weex and Vue.
+- [**1178**Star][4m] [C] [ambrop72/badvpn](https://github.com/ambrop72/badvpn) NCD scripting language, tun2socks proxifier, P2P VPN
+- [**1177**Star][7m] [ssrarchive/shadowsocks-rss](https://github.com/ssrarchive/shadowsocks-rss) Shadowsocksr project backup
+- [**1175**Star][5y] [Py] [hackappcom/ibrute](https://github.com/hackappcom/ibrute) AppleID bruteforce p0c
+- [**1174**Star][28d] [Py] [cujanovic/ssrf-testing](https://github.com/cujanovic/ssrf-testing) SSRF (Server Side Request Forgery) testing resources
+- [**1173**Star][3m] [Go] [shadowsocks/v2ray-plugin](https://github.com/shadowsocks/v2ray-plugin) A SIP003 plugin based on v2ray
+- [**1171**Star][6d] [JS] [lirantal/is-website-vulnerable](https://github.com/lirantal/is-website-vulnerable) finds publicly known security vulnerabilities in a website's frontend JavaScript libraries
+- [**1168**Star][22d] [Go] [genuinetools/reg](https://github.com/genuinetools/reg) Docker registry v2 command line client and repo listing generator with security checks.
+- [**1166**Star][1m] [Go] [shawn1m/overture](https://github.com/shawn1m/overture) A customized DNS forwarder written in Go
+- [**1165**Star][26d] [JS] [alonemonkey/frida-ios-dump](https://github.com/alonemonkey/frida-ios-dump) pull decrypted ipa from jailbreak device
+- [**1164**Star][17d] [Py] [programa-stic/barf-project](https://github.com/programa-stic/barf-project) A multiplatform open source Binary Analysis and Reverse engineering Framework
+- [**1164**Star][4y] [Ruby] [cryptosphere/cryptosphere](https://github.com/cryptosphere/cryptosphere) Encrypted peer-to-peer web application platform for decentralized, privacy-preserving applications
+- [**1162**Star][4m] [C] [skeeto/endlessh](https://github.com/skeeto/endlessh) SSH tarpit that slowly sends an endless banner
+- [**1162**Star][15d] [Go] [pusher/oauth2_proxy](https://github.com/pusher/oauth2_proxy) A reverse proxy that provides authentication with Google, Github or other providers.
+- [**1162**Star][1m] [TS] [mgechev/ngrev](https://github.com/mgechev/ngrev) Tool for reverse engineering of Angular applications
+- [**1159**Star][6y] [PHP] [lucb1e/cookielesscookies](https://github.com/lucb1e/cookielesscookies) Demo of tracking using etags instead of cookies (or localstorage or anything else)
+- [**1158**Star][22d] [m4ll0k/awesome-hacking-tools](https://github.com/m4ll0k/awesome-hacking-tools) Awesome Hacking Tools
+- [**1156**Star][7d] [Py] [p4-team/ctf](https://github.com/p4-team/ctf) Ctf solutions from p4 team
+- [**1155**Star][3m] [Go] [mozilla/mig](https://github.com/mozilla/mig) Distributed & real time digital forensics at the speed of the cloud
+- [**1151**Star][8m] [Py] [mebus/cupp](https://github.com/mebus/cupp) Common User Passwords Profiler (CUPP)
+- [**1150**Star][1y] [HTML] [nsacyber/windows-secure-host-baseline](https://github.com/nsacyber/Windows-Secure-Host-Baseline) Configuration guidance for implementing the Windows 10 and Windows Server 2016 DoD Secure Host Baseline settings. #nsacyber
+- [**1147**Star][1m] [Jupyter Notebook] [ibm/adversarial-robustness-toolbox](https://github.com/ibm/adversarial-robustness-toolbox) Python library for adversarial machine learning, attacks and defences for neural networks, logistic regression, decision trees, SVM, gradient boosted trees, Gaussian processes and more with multiple framework support
+- [**1145**Star][22d] [Py] [13o-bbr-bbq/machine_learning_security](https://github.com/13o-bbr-bbq/machine_learning_security) Source code about machine learning and security.
- [Security_and_MachineLearning](https://github.com/13o-bbr-bbq/machine_learning_security/tree/master/Security_and_MachineLearning) The elementary training course of Machine learning for security engineer.
- [Vulnerabilities_of_ML](https://github.com/13o-bbr-bbq/machine_learning_security/blob/master/Vulnerabilities_of_ML/) Summary of Machine Learning vulnerability.
@@ -1083,97 +1155,113 @@
- [Recommender](https://github.com/13o-bbr-bbq/machine_learning_security/tree/master/Recommender) Recommend optimal injection code for detecting web app vulnerabilities.
- [Saivs](https://github.com/13o-bbr-bbq/machine_learning_security/tree/master/Saivs) an artificial intelligence to find vulnerabilities in Web applications.
-- [**1133**Star][10d] [C] [xroche/httrack](https://github.com/xroche/httrack) download a World Wide website from the Internet to a local directory, building recursively all directories, getting html, images, and other files from the server to your computer.
-- [**1133**Star][19d] [Batchfile] [ckjbug/hacking](https://github.com/ckjbug/hacking)
+- [**1144**Star][3y] [PS] [powershellempire/powertools](https://github.com/powershellempire/powertools) a collection of PowerShell projects with a focus on offensive operations.
+ - [PewPewPew](https://github.com/powershellempire/powertools/tree/master/PewPewPew) scripts that utilize a common pattern to host a script on a PowerShell webserver, invoke the IEX download cradle to download/execute the target code and post the results back to the server, and then post-process any results.
+ - [PowerBreach](https://github.com/powershellempire/powertools/tree/master/PowerBreach) a backdoor toolkit that aims to provide the user a wide variety of methods to backdoor a system.
+ - [PowerPick](https://github.com/powershellempire/powertools/tree/master/PowerPick) allowing the execution of Powershell functionality without the use of Powershell.exe
+- [**1143**Star][2d] [C] [nethack/nethack](https://github.com/nethack/nethack) Official NetHack Git Repository
+- [**1143**Star][4m] [C++] [cgdb/cgdb](https://github.com/cgdb/cgdb) Console front-end to the GNU debugger
+- [**1142**Star][7m] [hikariobfuscator/hikari](https://github.com/HikariObfuscator/Hikari) LLVM Obfuscator
+- [**1140**Star][5d] [w00t3k/awesome-cellular-hacking](https://github.com/w00t3k/awesome-cellular-hacking) Awesome-Cellular-Hacking
+- [**1140**Star][2m] [HTML] [cure53/httpleaks](https://github.com/cure53/httpleaks) HTTPLeaks - All possible ways, a website can leak HTTP requests
+- [**1139**Star][12d] [C] [xroche/httrack](https://github.com/xroche/httrack) download a World Wide website from the Internet to a local directory, building recursively all directories, getting html, images, and other files from the server to your computer.
+- [**1139**Star][4m] [Py] [rhinosecuritylabs/pacu](https://github.com/rhinosecuritylabs/pacu) The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.
+- [**1139**Star][21d] [Batchfile] [ckjbug/hacking](https://github.com/ckjbug/hacking)
+- [**1139**Star][11m] [Py] [certsocietegenerale/fir](https://github.com/certsocietegenerale/fir) Fast Incident Response
+- [**1138**Star][2d] [C] [shadowsocksr-live/shadowsocksr-native](https://github.com/shadowsocksr-live/shadowsocksr-native) 从容翻越党国敏感日 ShadowsocksR (SSR) native implementation for all platforms, GFW terminator
+- [**1138**Star][2y] [Py] [hackathonhackers/personal-sites](https://github.com/hackathonhackers/personal-sites) List of Hackathon Hackers' personal sites.
+- [**1138**Star][5d] [Py] [darkoperator/dnsrecon](https://github.com/darkoperator/dnsrecon) DNS Enumeration Script
+- [**1135**Star][6m] [nebgnahz/awesome-iot-hacks](https://github.com/nebgnahz/awesome-iot-hacks) A Collection of Hacks in IoT Space so that we can address them (hopefully).
+- [**1134**Star][4m] [Vue] [0xbug/hawkeye](https://github.com/0xbug/hawkeye) GitHub 泄露监控系统(GitHub Sensitive Information Leakage Monitor Spider)
- [**1132**Star][2y] [C++] [x64dbg/gleebug](https://github.com/x64dbg/gleebug) Debugging Framework for Windows.
-- [**1132**Star][6m] [nebgnahz/awesome-iot-hacks](https://github.com/nebgnahz/awesome-iot-hacks) A Collection of Hacks in IoT Space so that we can address them (hopefully).
-- [**1132**Star][1m] [Jupyter Notebook] [ibm/adversarial-robustness-toolbox](https://github.com/ibm/adversarial-robustness-toolbox) Python library for adversarial machine learning, attacks and defences for neural networks, logistic regression, decision trees, SVM, gradient boosted trees, Gaussian processes and more with multiple framework support
-- [**1131**Star][2y] [Py] [out0fmemory/goagent-always-available](https://github.com/out0fmemory/goagent-always-available) 一直可用的GoAgent,会定时扫描可用的google gae ip,提供可自动化获取ip运行的版本
-- [**1130**Star][7d] [C] [nethack/nethack](https://github.com/nethack/nethack) Official NetHack Git Repository
-- [**1130**Star][8m] [Py] [darkoperator/dnsrecon](https://github.com/darkoperator/dnsrecon) DNS Enumeration Script
-- [**1129**Star][4m] [Py] [rhinosecuritylabs/pacu](https://github.com/rhinosecuritylabs/pacu) The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.
-- [**1128**Star][5m] [Py] [qyriad/fusee-launcher](https://github.com/Qyriad/fusee-launcher) work-in-progress launcher for one of the Tegra X1 bootROM exploits
-- [**1125**Star][2m] [Go] [mmcloughlin/avo](https://github.com/mmcloughlin/avo) Generate x86 Assembly with Go
-- [**1125**Star][8m] [C++] [cppcon/cppcon2018](https://github.com/cppcon/cppcon2018) Slides and other materials from CppCon 2018
-- [**1124**Star][20d] [HTML] [securitytxt/security-txt](https://github.com/securitytxt/security-txt) A proposed standard that allows websites to define security policies.
-- [**1124**Star][12d] [C++] [crosire/reshade](https://github.com/crosire/reshade) A generic post-processing injector for games and video software.
-- [**1124**Star][4m] [Vue] [0xbug/hawkeye](https://github.com/0xbug/hawkeye) GitHub 泄露监控系统(GitHub Sensitive Information Leakage Monitor Spider)
-- [**1122**Star][3m] [Py] [openai/neural-mmo](https://github.com/openai/neural-mmo) Code for the paper "Neural MMO: A Massively Multiagent Game Environment for Training and Evaluating Intelligent Agents"
-- [**1121**Star][8m] [majikarp/awesome-programming-books](https://github.com/majikarp/awesome-programming-books)
-- [**1117**Star][10m] [Py] [openrce/sulley](https://github.com/openrce/sulley) A pure-python fully automated and unattended fuzzing framework.
-- [**1117**Star][10m] [evilsocket/bleah](https://github.com/evilsocket/bleah) This repository is DEPRECATED, please use bettercap as this tool has been ported to its BLE modules.
-- [**1116**Star][3m] [Py] [thoughtfuldev/eagleeye](https://github.com/thoughtfuldev/eagleeye) Stalk your Friends. Find their Instagram, FB and Twitter Profiles using Image Recognition and Reverse Image Search.
-- [**1116**Star][1m] [bo0om/fuzz.txt](https://github.com/bo0om/fuzz.txt) Potentially dangerous files
-- [**1114**Star][1y] [Objective-C] [yulingtianxia/fishchat](https://github.com/yulingtianxia/fishchat) Hook WeChat.app on non-jailbroken devices.
-- [**1114**Star][28d] [w00t3k/awesome-cellular-hacking](https://github.com/w00t3k/awesome-cellular-hacking) Awesome-Cellular-Hacking
-- [**1114**Star][11d] [Java] [huangyz0918/androidwm](https://github.com/huangyz0918/androidwm) An android image watermark library that supports invisible digital watermarks (steganography).
-- [**1113**Star][1y] [aoh/radamsa](https://github.com/aoh/radamsa) a general-purpose fuzzer
-- [**1111**Star][5m] [Java] [manbanggroup/phantom](https://github.com/manbanggroup/phantom) 唯一零 Hook 稳定占坑类 Android 热更新插件化方案
-- [**1110**Star][14d] [PowerShell] [microsoftdocs/virtualization-documentation](https://github.com/MicrosoftDocs/Virtualization-Documentation) Place to store our documentation, code samples, etc for public consumption.
-- [**1110**Star][3y] [Objective-C] [dyci/dyci-main](https://github.com/dyci/dyci-main) Dynamic Code Injection Tool for Objective-C
-- [**1110**Star][18d] [C] [blacksphere/blackmagic](https://github.com/blacksphere/blackmagic) In application debugger for ARM Cortex microcontrollers.
-- [**1109**Star][18d] [C++] [keystone-engine/keystone](https://github.com/keystone-engine/keystone) Keystone assembler framework: Core (Arm, Arm64, Hexagon, Mips, PowerPC, Sparc, SystemZ & X86) + bindings
-- [**1109**Star][2m] [Py] [john-kurkowski/tldextract](https://github.com/john-kurkowski/tldextract) Accurately separate the TLD from the registered domain and subdomains of a URL, using the Public Suffix List.
-- [**1109**Star][3y] [Shell] [fritz-smh/yi-hack](https://github.com/fritz-smh/yi-hack) Xiaomi Yi Ants camera hack
+- [**1132**Star][2y] [Py] [out0fmemory/goagent-always-available](https://github.com/out0fmemory/goagent-always-available) 一直可用的GoAgent,会定时扫描可用的google gae ip,提供可自动化获取ip运行的版本
+- [**1131**Star][5m] [Py] [qyriad/fusee-launcher](https://github.com/Qyriad/fusee-launcher) work-in-progress launcher for one of the Tegra X1 bootROM exploits
+- [**1130**Star][8m] [majikarp/awesome-programming-books](https://github.com/majikarp/awesome-programming-books)
+- [**1130**Star][2d] [C++] [crosire/reshade](https://github.com/crosire/reshade) A generic post-processing injector for games and video software.
+- [**1129**Star][22d] [HTML] [securitytxt/security-txt](https://github.com/securitytxt/security-txt) A proposed standard that allows websites to define security policies.
+- [**1128**Star][8m] [C++] [cppcon/cppcon2018](https://github.com/cppcon/cppcon2018) Slides and other materials from CppCon 2018
+- [**1127**Star][3m] [Go] [mmcloughlin/avo](https://github.com/mmcloughlin/avo) Generate x86 Assembly with Go
+- [**1125**Star][3m] [Py] [openai/neural-mmo](https://github.com/openai/neural-mmo) Code for the paper "Neural MMO: A Massively Multiagent Game Environment for Training and Evaluating Intelligent Agents"
+- [**1123**Star][7d] [C#] [nicehash/nicehashminer](https://github.com/nicehash/NiceHashMiner) NiceHash Miner
+- [**1122**Star][13d] [Java] [huangyz0918/androidwm](https://github.com/huangyz0918/androidwm) An android image watermark library that supports invisible digital watermarks (steganography).
+- [**1120**Star][3m] [Py] [thoughtfuldev/eagleeye](https://github.com/thoughtfuldev/eagleeye) Stalk your Friends. Find their Instagram, FB and Twitter Profiles using Image Recognition and Reverse Image Search.
+- [**1120**Star][2m] [bo0om/fuzz.txt](https://github.com/bo0om/fuzz.txt) Potentially dangerous files
+- [**1118**Star][10m] [Py] [openrce/sulley](https://github.com/openrce/sulley) A pure-python fully automated and unattended fuzzing framework.
+- [**1117**Star][1y] [paulsec/awesome-windows-domain-hardening](https://github.com/PaulSec/awesome-windows-domain-hardening) A curated list of awesome Security Hardening techniques for Windows.
+- [**1117**Star][3d] [C] [blacksphere/blackmagic](https://github.com/blacksphere/blackmagic) In application debugger for ARM Cortex microcontrollers.
+- [**1116**Star][6d] [PS] [microsoftdocs/virtualization-documentation](https://github.com/MicrosoftDocs/Virtualization-Documentation) Place to store our documentation, code samples, etc for public consumption.
+- [**1115**Star][1y] [ObjC] [yulingtianxia/fishchat](https://github.com/yulingtianxia/fishchat) Hook WeChat.app on non-jailbroken devices.
+- [**1115**Star][10m] [evilsocket/bleah](https://github.com/evilsocket/bleah) This repository is DEPRECATED, please use bettercap as this tool has been ported to its BLE modules.
+- [**1115**Star][1y] [aoh/radamsa](https://github.com/aoh/radamsa) a general-purpose fuzzer
+- [**1114**Star][3d] [Py] [hhyo/archery](https://github.com/hhyo/archery) SQL 审核查询平台
+- [**1113**Star][5m] [Java] [manbanggroup/phantom](https://github.com/manbanggroup/phantom) 唯一零 Hook 稳定占坑类 Android 热更新插件化方案
+- [**1113**Star][20d] [C++] [keystone-engine/keystone](https://github.com/keystone-engine/keystone) Keystone assembler framework: Core (Arm, Arm64, Hexagon, Mips, PowerPC, Sparc, SystemZ & X86) + bindings
+- [**1113**Star][2m] [Py] [john-kurkowski/tldextract](https://github.com/john-kurkowski/tldextract) Accurately separate the TLD from the registered domain and subdomains of a URL, using the Public Suffix List.
+- [**1110**Star][3y] [Shell] [fritz-smh/yi-hack](https://github.com/fritz-smh/yi-hack) Xiaomi Yi Ants camera hack
+- [**1110**Star][3y] [ObjC] [dyci/dyci-main](https://github.com/dyci/dyci-main) Dynamic Code Injection Tool for Objective-C
+- [**1110**Star][8m] [Py] [0x00-0x00/shellpop](https://github.com/0x00-0x00/shellpop) Pop shells like a master.
+- [**1109**Star][1y] [Py] [wibiti/uncompyle2](https://github.com/wibiti/uncompyle2) Python 2.7 decompiler
+- [**1108**Star][2d] [C++] [facebookincubator/oomd](https://github.com/facebookincubator/oomd) A userspace out-of-memory killer
- [**1108**Star][1y] [Py] [byt3bl33d3r/gcat](https://github.com/byt3bl33d3r/gcat) A PoC backdoor that uses Gmail as a C&C server
-- [**1106**Star][1y] [Py] [wibiti/uncompyle2](https://github.com/wibiti/uncompyle2) Python 2.7 decompiler
-- [**1104**Star][7d] [C++] [facebookincubator/oomd](https://github.com/facebookincubator/oomd) A userspace out-of-memory killer
-- [**1102**Star][21d] [slowmist/knowledge-base](https://github.com/slowmist/knowledge-base) Knowledge Base 慢雾安全团队知识库
-- [**1102**Star][8d] [C++] [google/sandboxed-api](https://github.com/google/sandboxed-api) Sandboxed API automatically generates sandboxes for C/C++ libraries
-- [**1101**Star][1y] [paulsec/awesome-windows-domain-hardening](https://github.com/PaulSec/awesome-windows-domain-hardening) A curated list of awesome Security Hardening techniques for Windows.
-- [**1101**Star][8m] [Py] [0x00-0x00/shellpop](https://github.com/0x00-0x00/shellpop) Pop shells like a master.
-- [**1099**Star][5m] [zbetcheckin/security_list](https://github.com/zbetcheckin/security_list) Great security list for fun and profit
-- [**1098**Star][1y] [Objective-C] [neoneggplant/eggshell](https://github.com/neoneggplant/eggshell) iOS/macOS/Linux Remote Administration Tool
-- [**1097**Star][1y] [Py] [bugcrowd/hunt](https://github.com/bugcrowd/HUNT) Burp和ZAP的扩展收集
-- [**1097**Star][5m] [Py] [coffeehb/some-poc-or-exp](https://github.com/coffeehb/some-poc-or-exp) 各种漏洞poc、Exp的收集或编写
-- [**1096**Star][2y] [Py] [ring04h/wydomain](https://github.com/ring04h/wydomain) to discover subdomains of your target domain
-- [**1095**Star][2m] [PHP] [tuhinshubhra/red_hawk](https://github.com/tuhinshubhra/red_hawk) All in one tool for Information Gathering, Vulnerability Scanning and Crawling. A must have tool for all penetration testers
-- [**1094**Star][8d] [C] [solokeys/solo](https://github.com/solokeys/solo) open security key supporting FIDO2 & U2F over USB + NFC
-- [**1094**Star][17d] [Go] [sensepost/ruler](https://github.com/sensepost/ruler) A tool to abuse Exchange services
-- [**1093**Star][1y] [PowerShell] [rasta-mouse/sherlock](https://github.com/rasta-mouse/sherlock) PowerShell script to quickly find missing software patches for local privilege escalation vulnerabilities.
-- [**1092**Star][8m] [Ruby] [lionsec/xerosploit](https://github.com/lionsec/xerosploit) Efficient and advanced man in the middle framework
-- [**1092**Star][18d] [OCaml] [binaryanalysisplatform/bap](https://github.com/binaryanalysisplatform/bap) Binary Analysis Platform
-- [**1087**Star][10m] [Py] [secforce/sparta](https://github.com/secforce/sparta) Network Infrastructure Penetration Testing Tool
-- [**1084**Star][13d] [C] [containers/bubblewrap](https://github.com/containers/bubblewrap) Unprivileged sandboxing tool
-- [**1083**Star][11d] [Py] [gerbenjavado/linkfinder](https://github.com/gerbenjavado/linkfinder) A python script that finds endpoints in JavaScript files
-- [**1083**Star][8d] [C++] [cxbx-reloaded/cxbx-reloaded](https://github.com/cxbx-reloaded/cxbx-reloaded) Xbox (Original) Emulator
-- [**1081**Star][26d] [Go] [looterz/grimd](https://github.com/looterz/grimd) Fast dns proxy that can run anywhere, built to black-hole internet advertisements and malware servers.
-- [**1081**Star][22d] [Verilog] [cliffordwolf/picorv32](https://github.com/cliffordwolf/picorv32) PicoRV32 - A Size-Optimized RISC-V CPU
-- [**1080**Star][10d] [Py] [harismuneer/ultimate-facebook-scraper](https://github.com/harismuneer/ultimate-facebook-scraper)
-- [**1080**Star][2m] [Go] [nadoo/glider](https://github.com/nadoo/glider) a forward proxy with multiple protocols support, and also a dns forwarding server with ipset management features(like dnsmasq).
-- [**1077**Star][6y] [C] [stephenfewer/reflectivedllinjection](https://github.com/stephenfewer/reflectivedllinjection) Reflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process.
-- [**1076**Star][1m] [snoopysecurity/awesome-burp-extensions](https://github.com/snoopysecurity/awesome-burp-extensions) A curated list of amazingly awesome Burp Extensions
-- [**1075**Star][3m] [Py] [storyyeller/krakatau](https://github.com/storyyeller/krakatau) Java decompiler, assembler, and disassembler
-- [**1074**Star][8m] [Go] [sevlyar/go-daemon](https://github.com/sevlyar/go-daemon) A library for writing system daemons in golang.
-- [**1074**Star][2m] [Py] [stampery/mongoaudit](https://github.com/stampery/mongoaudit)
-- [**1074**Star][7d] [PHP] [automattic/jetpack](https://github.com/automattic/jetpack) Increase your traffic, view your stats, speed up your site, and protect yourself from hackers with Jetpack.
-- [**1073**Star][2m] [PHP] [nbs-system/php-malware-finder](https://github.com/nbs-system/php-malware-finder) Detect potentially malicious PHP files
+- [**1105**Star][5m] [zbetcheckin/security_list](https://github.com/zbetcheckin/security_list) Great security list for fun and profit
+- [**1103**Star][10d] [C] [solokeys/solo](https://github.com/solokeys/solo) open security key supporting FIDO2 & U2F over USB + NFC
+- [**1103**Star][23d] [slowmist/knowledge-base](https://github.com/slowmist/knowledge-base) Knowledge Base 慢雾安全团队知识库
+- [**1103**Star][1y] [ObjC] [neoneggplant/eggshell](https://github.com/neoneggplant/eggshell) iOS/macOS/Linux Remote Administration Tool
+- [**1103**Star][7d] [C++] [google/sandboxed-api](https://github.com/google/sandboxed-api) Sandboxed API automatically generates sandboxes for C/C++ libraries
+- [**1102**Star][1y] [Py] [bugcrowd/hunt](https://github.com/bugcrowd/HUNT) Burp和ZAP的扩展收集
+- [**1100**Star][13d] [Py] [gerbenjavado/linkfinder](https://github.com/gerbenjavado/linkfinder) A python script that finds endpoints in JavaScript files
+- [**1100**Star][5m] [Py] [coffeehb/some-poc-or-exp](https://github.com/coffeehb/some-poc-or-exp) 各种漏洞poc、Exp的收集或编写
+- [**1099**Star][19d] [Go] [sensepost/ruler](https://github.com/sensepost/ruler) A tool to abuse Exchange services
+- [**1097**Star][2y] [Py] [ring04h/wydomain](https://github.com/ring04h/wydomain) to discover subdomains of your target domain
+- [**1097**Star][7d] [OCaml] [binaryanalysisplatform/bap](https://github.com/binaryanalysisplatform/bap) Binary Analysis Platform
+- [**1097**Star][9m] [C] [baoleiji/qilinbaoleiji](https://github.com/baoleiji/qilinbaoleiji) 堡垒机-麒麟堡垒机,集堡垒机、SSLVPN-堡垒机内置、动态口令-堡垒机内置、应用审计-堡垒机内置、数据库审计-堡垒机内置、CA证书-堡垒机内置-堡垒机内置、云桌面-堡垒机内置、密码自动修改为一体的堡垒机系统
+- [**1096**Star][2m] [PHP] [tuhinshubhra/red_hawk](https://github.com/tuhinshubhra/red_hawk) All in one tool for Information Gathering, Vulnerability Scanning and Crawling. A must have tool for all penetration testers
+- [**1096**Star][1y] [PS] [rasta-mouse/sherlock](https://github.com/rasta-mouse/sherlock) PowerShell script to quickly find missing software patches for local privilege escalation vulnerabilities.
+- [**1095**Star][8m] [Ruby] [lionsec/xerosploit](https://github.com/lionsec/xerosploit) Efficient and advanced man in the middle framework
+- [**1092**Star][10m] [Py] [secforce/sparta](https://github.com/secforce/sparta) Network Infrastructure Penetration Testing Tool
+- [**1091**Star][3m] [JS] [leng-yue/lengyue-vcode](https://github.com/leng-yue/lengyue-vcode) 各种滑动验证码识别 [腾讯云] [易盾] [Vaptcha] [Geetest] [极验] 各种网站破解
+- [**1090**Star][15d] [C] [containers/bubblewrap](https://github.com/containers/bubblewrap) Unprivileged sandboxing tool
+- [**1090**Star][1m] [snoopysecurity/awesome-burp-extensions](https://github.com/snoopysecurity/awesome-burp-extensions) A curated list of amazingly awesome Burp Extensions
+- [**1090**Star][24d] [Verilog] [cliffordwolf/picorv32](https://github.com/cliffordwolf/picorv32) PicoRV32 - A Size-Optimized RISC-V CPU
+- [**1088**Star][28d] [Go] [looterz/grimd](https://github.com/looterz/grimd) Fast dns proxy that can run anywhere, built to black-hole internet advertisements and malware servers.
+- [**1087**Star][10d] [C++] [cxbx-reloaded/cxbx-reloaded](https://github.com/cxbx-reloaded/cxbx-reloaded) Xbox (Original) Emulator
+- [**1086**Star][6y] [C] [stephenfewer/reflectivedllinjection](https://github.com/stephenfewer/reflectivedllinjection) Reflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process.
+- [**1084**Star][2m] [Go] [nadoo/glider](https://github.com/nadoo/glider) a forward proxy with multiple protocols support, and also a dns forwarding server with ipset management features(like dnsmasq).
+- [**1083**Star][3m] [Py] [landgrey/pydictor](https://github.com/landgrey/pydictor) A powerful and useful hacker dictionary builder for a brute-force attack
+- [**1082**Star][8m] [Go] [sevlyar/go-daemon](https://github.com/sevlyar/go-daemon) A library for writing system daemons in golang.
+- [**1080**Star][2m] [PHP] [nbs-system/php-malware-finder](https://github.com/nbs-system/php-malware-finder) Detect potentially malicious PHP files
+- [**1078**Star][2d] [PHP] [automattic/jetpack](https://github.com/automattic/jetpack) Increase your traffic, view your stats, speed up your site, and protect yourself from hackers with Jetpack.
+- [**1077**Star][3m] [Py] [storyyeller/krakatau](https://github.com/storyyeller/krakatau) Java decompiler, assembler, and disassembler
+- [**1076**Star][2m] [Py] [stampery/mongoaudit](https://github.com/stampery/mongoaudit)
+- [**1075**Star][3d] [Py] [offensive-security/exploitdb-bin-sploits](https://github.com/offensive-security/exploitdb-bin-sploits) Exploit Database binary exploits located in the /sploits directory
+- [**1073**Star][3m] [C] [tpruvot/cpuminer-multi](https://github.com/tpruvot/cpuminer-multi) crypto cpuminer (linux + windows)
+- [**1073**Star][1m] [guardrailsio/awesome-golang-security](https://github.com/guardrailsio/awesome-golang-security) Awesome Golang Security resources
+- [**1072**Star][1m] [C++] [whitequark/unfork](https://github.com/whitequark/unfork) unfork(2) is the inverse of fork(2). sort of.
- [**1072**Star][2y] [C++] [fireice-uk/xmr-stak-cpu](https://github.com/fireice-uk/xmr-stak-cpu) Monero CPU miner
-- [**1071**Star][3m] [C] [tpruvot/cpuminer-multi](https://github.com/tpruvot/cpuminer-multi) crypto cpuminer (linux + windows)
-- [**1070**Star][3m] [Py] [landgrey/pydictor](https://github.com/landgrey/pydictor) A powerful and useful hacker dictionary builder for a brute-force attack
+- [**1071**Star][3d] [Py] [googleprojectzero/domato](https://github.com/googleprojectzero/domato) DOM fuzzer
+- [**1071**Star][6m] [C] [tcurdt/iproxy](https://github.com/tcurdt/iproxy) Let's you connect your laptop to the iPhone to surf the web.
+- [**1071**Star][5m] [Py] [nccgroup/winpayloads](https://github.com/nccgroup/winpayloads) Undetectable Windows Payload Generation
+- [**1071**Star][7m] [Py] [lucifer1993/struts-scan](https://github.com/lucifer1993/struts-scan) struts2漏洞全版本检测和利用工具
- [**1070**Star][3y] [C] [citusdata/pg_shard](https://github.com/citusdata/pg_shard) ATTENTION: pg_shard is superseded by Citus, its more powerful replacement
-- [**1066**Star][5m] [Py] [nccgroup/winpayloads](https://github.com/nccgroup/winpayloads) Undetectable Windows Payload Generation
-- [**1066**Star][7m] [Py] [lucifer1993/struts-scan](https://github.com/lucifer1993/struts-scan) struts2漏洞全版本检测和利用工具
-- [**1065**Star][1m] [C++] [whitequark/unfork](https://github.com/whitequark/unfork) unfork(2) is the inverse of fork(2). sort of.
-- [**1063**Star][14d] [Py] [offensive-security/exploitdb-bin-sploits](https://github.com/offensive-security/exploitdb-bin-sploits) Exploit Database binary exploits located in the /sploits directory
-- [**1063**Star][29d] [guardrailsio/awesome-golang-security](https://github.com/guardrailsio/awesome-golang-security) Awesome Golang Security resources
-- [**1062**Star][3m] [C] [zerosum0x0/cve-2019-0708](https://github.com/zerosum0x0/cve-2019-0708) Scanner PoC for CVE-2019-0708 RDP RCE vuln
-- [**1060**Star][2y] [wtsxdev/machine-learning-for-cyber-security](https://github.com/wtsxdev/machine-learning-for-cyber-security) Curated list of tools and resources related to the use of machine learning for cyber security
-- [**1060**Star][11d] [C] [shadowsocksr-live/shadowsocksr-native](https://github.com/shadowsocksr-live/shadowsocksr-native) 从容翻越党国敏感日 ShadowsocksR (SSR) native implementation for all platforms, GFW terminator
-- [**1060**Star][7m] [PowerShell] [nytrorst/netripper](https://github.com/nytrorst/netripper) Smart traffic sniffing for penetration testers
-- [**1059**Star][2m] [Py] [googleprojectzero/domato](https://github.com/googleprojectzero/domato) DOM fuzzer
-- [**1057**Star][3m] [Py] [infosec-au/altdns](https://github.com/infosec-au/altdns) Generates permutations, alterations and mutations of subdomains and then resolves them
-- [**1055**Star][25d] [C] [quiet/quiet](https://github.com/quiet/quiet) Transmit data with sound. Includes binaries for soundcards and .wav files.
-- [**1053**Star][3y] [Perl] [samyk/usbdriveby](https://github.com/samyk/usbdriveby) USBdriveby exploits the trust of USB devices by emulating an HID keyboard and mouse, installing a cross-platform firewall-evading backdoor, and rerouting DNS within seconds of plugging it in.
-- [**1052**Star][7d] [Py] [forseti-security/forseti-security](https://github.com/forseti-security/forseti-security) A community-driven collection of open source tools to improve the security of your Google Cloud Platform environments
-- [**1052**Star][5m] [C] [tcurdt/iproxy](https://github.com/tcurdt/iproxy) Let's you connect your laptop to the iPhone to surf the web.
-- [**1052**Star][20d] [Rust] [fgribreau/mailchecker](https://github.com/fgribreau/mailchecker) Cross-language email validation
-- [**1051**Star][2m] [Kotlin] [ingokegel/jclasslib](https://github.com/ingokegel/jclasslib) jclasslib bytecode viewer is a tool that visualizes all aspects of compiled Java class files and the contained bytecode.
-- [**1051**Star][7m] [C] [cr-marcstevens/sha1collisiondetection](https://github.com/cr-marcstevens/sha1collisiondetection) Library and command line tool to detect SHA-1 collision in a file
-- [**1049**Star][13d] [C++] [simsong/tcpflow](https://github.com/simsong/tcpflow) TCP/IP packet demultiplexer. Download from:
-- [**1048**Star][7d] [Py] [yelp/detect-secrets](https://github.com/yelp/detect-secrets) An enterprise friendly way of detecting and preventing secrets in code.
-- [**1046**Star][1m] [Boo] [byt3bl33d3r/silenttrinity](https://github.com/byt3bl33d3r/silenttrinity) An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR
-- [**1044**Star][13d] [Py] [fireeye/flare-ida](https://github.com/fireeye/flare-ida) Multiple IDA plugins and IDAPython scripts
+- [**1068**Star][5y] [Py] [observerss/textfilter](https://github.com/observerss/textfilter) 敏感词过滤的几种实现+某1w词敏感词库
+- [**1065**Star][3m] [C] [zerosum0x0/cve-2019-0708](https://github.com/zerosum0x0/cve-2019-0708) Scanner PoC for CVE-2019-0708 RDP RCE vuln
+- [**1065**Star][7m] [PS] [nytrorst/netripper](https://github.com/nytrorst/netripper) Smart traffic sniffing for penetration testers
+- [**1063**Star][2y] [wtsxdev/machine-learning-for-cyber-security](https://github.com/wtsxdev/machine-learning-for-cyber-security) Curated list of tools and resources related to the use of machine learning for cyber security
+- [**1062**Star][27d] [C] [quiet/quiet](https://github.com/quiet/quiet) Transmit data with sound. Includes binaries for soundcards and .wav files.
+- [**1061**Star][3m] [Py] [infosec-au/altdns](https://github.com/infosec-au/altdns) Generates permutations, alterations and mutations of subdomains and then resolves them
+- [**1060**Star][2d] [Py] [forseti-security/forseti-security](https://github.com/forseti-security/forseti-security) A community-driven collection of open source tools to improve the security of your Google Cloud Platform environments
+- [**1057**Star][3y] [Perl] [samyk/usbdriveby](https://github.com/samyk/usbdriveby) USBdriveby exploits the trust of USB devices by emulating an HID keyboard and mouse, installing a cross-platform firewall-evading backdoor, and rerouting DNS within seconds of plugging it in.
+- [**1056**Star][9d] [Py] [yelp/detect-secrets](https://github.com/yelp/detect-secrets) An enterprise friendly way of detecting and preventing secrets in code.
+- [**1056**Star][9d] [Kotlin] [ingokegel/jclasslib](https://github.com/ingokegel/jclasslib) jclasslib bytecode viewer is a tool that visualizes all aspects of compiled Java class files and the contained bytecode.
+- [**1056**Star][5d] [Rust] [fgribreau/mailchecker](https://github.com/fgribreau/mailchecker) Cross-language email validation
+- [**1054**Star][9d] [C++] [simsong/tcpflow](https://github.com/simsong/tcpflow) TCP/IP packet demultiplexer. Download from:
+- [**1052**Star][7m] [C] [cr-marcstevens/sha1collisiondetection](https://github.com/cr-marcstevens/sha1collisiondetection) Library and command line tool to detect SHA-1 collision in a file
+- [**1052**Star][2m] [Boo] [byt3bl33d3r/silenttrinity](https://github.com/byt3bl33d3r/silenttrinity) An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR
+- [**1051**Star][9d] [C++] [wavm/wavm](https://github.com/WAVM/WAVM) WebAssembly Virtual Machine
+- [**1051**Star][27d] [Py] [sundowndev/phoneinfoga](https://github.com/sundowndev/phoneinfoga) Advanced information gathering & OSINT tool for phone numbers
+- [**1050**Star][3d] [Rust] [zboxfs/zbox](https://github.com/zboxfs/zbox) Zero-details, privacy-focused in-app file system.
+- [**1049**Star][14d] [Py] [yzddmr6/webshell-venom](https://github.com/yzddmr6/webshell-venom) 免杀webshell无限生成工具(利用随机异或无限免杀D盾)
+- [**1048**Star][15d] [Py] [fireeye/flare-ida](https://github.com/fireeye/flare-ida) Multiple IDA plugins and IDAPython scripts
- [StackStrings](https://github.com/fireeye/flare-ida/blob/master/plugins/stackstrings_plugin.py) recovery of manually constructed strings described [here](http://www.fireeye.com/blog/threat-research/2014/08/flare-ida-pro-script-series-automatic-recovery-of-constructed-strings-in-malware.html)
- [Struct Typer](https://github.com/fireeye/flare-ida/blob/master/plugins/struct_typer_plugin.py) implements the struct typing described [here](https://www.mandiant.com/blog/applying-function-types-structure-fields-ida/)
- [ApplyCalleeType](https://github.com/fireeye/flare-ida/blob/master/python/flare/apply_callee_type.py) specify or choose a function type for indirect calls as described [here](https://www.fireeye.com/blog/threat-research/2015/04/flare_ida_pro_script.html)
@@ -1183,497 +1271,526 @@
- [MSDN Annotations](https://github.com/fireeye/flare-ida/tree/master/python/flare/IDB_MSDN_Annotator) adds MSDN information from a XML file to the IDB database. [more info](https://www.fireeye.com/blog/threat-research/2014/09/flare-ida-pro-script-series-msdn-annotations-ida-pro-for-malware-analysis.html)
- [ironstrings](https://github.com/fireeye/flare-ida/tree/master/python/flare/ironstrings) uses code emulation to recover constructed strings (stackstrings) from malware
- [Shellcode Hashes](https://github.com/fireeye/flare-ida/tree/master/shellcode_hashes) create the database for hash search described in [here](https://www.mandiant.com/blog/precalculated-string-hashes-reverse-engineering-shellcode/)
-- [**1040**Star][2m] [C] [trailofbits/ctf](https://github.com/trailofbits/ctf) CTF Field Guide
-- [**1039**Star][12d] [C++] [wavm/wavm](https://github.com/WAVM/WAVM) WebAssembly Virtual Machine
-- [**1039**Star][5m] [Py] [woj-ciech/kamerka](https://github.com/woj-ciech/kamerka) Build interactive map of cameras from Shodan
-- [**1038**Star][8m] [Py] [lucifer1993/angelsword](https://github.com/lucifer1993/angelsword) Python3编写的CMS漏洞检测框架
-- [**1038**Star][9m] [Shell] [firehol/firehol](https://github.com/firehol/firehol) A firewall for humans...
-- [**1037**Star][12d] [Py] [yzddmr6/webshell-venom](https://github.com/yzddmr6/webshell-venom) 免杀webshell无限生成工具(利用随机异或无限免杀D盾)
-- [**1035**Star][1y] [Batchfile] [nextronsystems/aptsimulator](https://github.com/NextronSystems/APTSimulator) A toolset to make a system look as if it was the victim of an APT attack
-- [**1034**Star][2m] [C] [xairy/kernel-exploits](https://github.com/xairy/kernel-exploits) My proof-of-concept exploits for the Linux kernel
-- [**1034**Star][1m] [C] [t6x/reaver-wps-fork-t6x](https://github.com/t6x/reaver-wps-fork-t6x) a brute force attack against Wifi Protected Setup (WPS) registrar PINs in order to recover WPA/WPA2 passphrases
-- [**1033**Star][7m] [HTML] [sindresorhus/devtools-detect](https://github.com/sindresorhus/devtools-detect) Detect if DevTools is open and its orientation
-- [**1032**Star][3m] [Py] [h4ckforjob/dirmap](https://github.com/h4ckforjob/dirmap) An advanced web directory & file scanning tool that will be more powerful than DirBuster, Dirsearch, cansina, and Yu Jian.一个高级web目录、文件扫描工具,功能将会强于DirBuster、Dirsearch、cansina、御剑。
-- [**1032**Star][13d] [HTML] [defectdojo/django-defectdojo](https://github.com/defectdojo/django-defectdojo) DefectDojo is an open-source application vulnerability correlation and security orchestration tool.
-- [**1032**Star][4y] [C] [crmulliner/adbi](https://github.com/crmulliner/adbi) Android Dynamic Binary Instrumentation Toolkit
-- [**1031**Star][4m] [PowerShell] [kevin-robertson/inveigh](https://github.com/kevin-robertson/inveigh) Windows PowerShell ADIDNS/LLMNR/mDNS/NBNS spoofer/man-in-the-middle tool
-- [**1031**Star][1y] [PowerShell] [danmcinerney/icebreaker](https://github.com/danmcinerney/icebreaker) Gets plaintext Active Directory credentials if you're on the internal network but outside the AD environment
-- [**1029**Star][2y] [PowerShell] [nccgroup/redsnarf](https://github.com/nccgroup/redsnarf) pen-testing / red-teaming tool for Windows environments
-- [**1028**Star][3y] [C++] [zyq8709/dexhunter](https://github.com/zyq8709/dexhunter) General Automatic Unpacking Tool for Android Dex Files
-- [**1024**Star][2y] [Objective-C] [zhengmin1989/ios_ice_and_fire](https://github.com/zhengmin1989/ios_ice_and_fire) iOS冰与火之歌
-- [**1023**Star][6m] [stephenturner/oneliners](https://github.com/stephenturner/oneliners) Useful bash one-liners for bioinformatics.
-- [**1022**Star][5m] [C] [govolution/avet](https://github.com/govolution/avet) AntiVirus Evasion Tool
-- [**1019**Star][1y] [naetw/ctf-pwn-tips](https://github.com/naetw/ctf-pwn-tips) Here record some tips about pwn. Something is obsoleted and won't be updated. Sorry about that.
-- [**1019**Star][3m] [Py] [byt3bl33d3r/deathstar](https://github.com/byt3bl33d3r/deathstar) Automate getting Domain Admin using Empire
-- [**1017**Star][25d] [Py] [sundowndev/phoneinfoga](https://github.com/sundowndev/phoneinfoga) Advanced information gathering & OSINT tool for phone numbers
-- [**1015**Star][29d] [C] [s0lst1c3/eaphammer](https://github.com/s0lst1c3/eaphammer) Targeted evil twin attacks against WPA2-Enterprise networks. Indirect wireless pivots using hostile portal attacks.
+- [**1046**Star][20d] [denji/awesome-http-benchmark](https://github.com/denji/awesome-http-benchmark) HTTP(S) benchmark tools, testing/debugging, & restAPI (RESTful)
+- [**1045**Star][5m] [Py] [woj-ciech/kamerka](https://github.com/woj-ciech/kamerka) Build interactive map of cameras from Shodan
+- [**1044**Star][9m] [Shell] [firehol/firehol](https://github.com/firehol/firehol) A firewall for humans...
+- [**1041**Star][2m] [C] [trailofbits/ctf](https://github.com/trailofbits/ctf) CTF Field Guide
+- [**1041**Star][3m] [Py] [h4ckforjob/dirmap](https://github.com/h4ckforjob/dirmap) An advanced web directory & file scanning tool that will be more powerful than DirBuster, Dirsearch, cansina, and Yu Jian.一个高级web目录、文件扫描工具,功能将会强于DirBuster、Dirsearch、cansina、御剑。
+- [**1040**Star][8m] [Py] [lucifer1993/angelsword](https://github.com/lucifer1993/angelsword) Python3编写的CMS漏洞检测框架
+- [**1040**Star][4m] [PS] [kevin-robertson/inveigh](https://github.com/kevin-robertson/inveigh) Windows PowerShell ADIDNS/LLMNR/mDNS/NBNS spoofer/man-in-the-middle tool
+- [**1040**Star][2m] [JS] [freetubeapp/freetube](https://github.com/freetubeapp/freetube) An Open Source YouTube app for privacy
+- [**1040**Star][1m] [Py] [ezaquarii/vpn-at-home](https://github.com/ezaquarii/vpn-at-home) 1-click, self-hosted deployment of OpenVPN with DNS ad blocking sinkhole
+- [**1039**Star][1y] [Batchfile] [nextronsystems/aptsimulator](https://github.com/NextronSystems/APTSimulator) A toolset to make a system look as if it was the victim of an APT attack
+- [**1038**Star][1m] [C] [t6x/reaver-wps-fork-t6x](https://github.com/t6x/reaver-wps-fork-t6x) a brute force attack against Wifi Protected Setup (WPS) registrar PINs in order to recover WPA/WPA2 passphrases
+- [**1038**Star][7m] [nanopool/claymore-dual-miner](https://github.com/nanopool/claymore-dual-miner) Claymore's Dual Ethereum+Decred_Siacoin_Lbry AMD+NVIDIA GPU Miner
+- [**1037**Star][2m] [C] [xairy/kernel-exploits](https://github.com/xairy/kernel-exploits) My proof-of-concept exploits for the Linux kernel
+- [**1037**Star][7m] [HTML] [sindresorhus/devtools-detect](https://github.com/sindresorhus/devtools-detect) Detect if DevTools is open and its orientation
+- [**1036**Star][15d] [HTML] [defectdojo/django-defectdojo](https://github.com/defectdojo/django-defectdojo) DefectDojo is an open-source application vulnerability correlation and security orchestration tool.
+- [**1036**Star][5y] [C] [crmulliner/adbi](https://github.com/crmulliner/adbi) Android Dynamic Binary Instrumentation Toolkit
+- [**1032**Star][3y] [C++] [zyq8709/dexhunter](https://github.com/zyq8709/dexhunter) General Automatic Unpacking Tool for Android Dex Files
+- [**1032**Star][1y] [PS] [danmcinerney/icebreaker](https://github.com/danmcinerney/icebreaker) Gets plaintext Active Directory credentials if you're on the internal network but outside the AD environment
+- [**1029**Star][20d] [Py] [nccgroup/scoutsuite](https://github.com/nccgroup/scoutsuite) Multi-Cloud Security Auditing Tool
+- [**1029**Star][2y] [PS] [nccgroup/redsnarf](https://github.com/nccgroup/redsnarf) a pen-testing / red-teaming tool retrieving hashes and credentials from Windows workstations, servers and domain controllers using OpSec Safe Techniques
+- [**1029**Star][5m] [C] [govolution/avet](https://github.com/govolution/avet) AntiVirus Evasion Tool
+- [**1029**Star][29d] [denji/nginx-tuning](https://github.com/denji/nginx-tuning) NGINX tuning for best performance
+- [**1028**Star][18d] [Py] [ct-open-source/tuya-convert](https://github.com/ct-open-source/tuya-convert) A collection of scripts to flash Tuya IoT devices to alternative firmwares
+- [**1025**Star][6m] [stephenturner/oneliners](https://github.com/stephenturner/oneliners) Useful bash one-liners for bioinformatics.
+- [**1025**Star][2y] [ObjC] [zhengmin1989/ios_ice_and_fire](https://github.com/zhengmin1989/ios_ice_and_fire) iOS冰与火之歌
+- [**1024**Star][12m] [Go] [twitchyliquid64/subnet](https://github.com/twitchyliquid64/subnet) Simple, auditable & elegant VPN, built with TLS mutual authentication and TUN.
+- [**1024**Star][1y] [naetw/ctf-pwn-tips](https://github.com/naetw/ctf-pwn-tips) Here record some tips about pwn. Something is obsoleted and won't be updated. Sorry about that.
+- [**1021**Star][3m] [Py] [byt3bl33d3r/deathstar](https://github.com/byt3bl33d3r/deathstar) Automate getting Domain Admin using Empire
+- [**1019**Star][27d] [Shell] [trimstray/sandmap](https://github.com/trimstray/sandmap) Nmap on steroids. Simple CLI with the ability to run pure Nmap engine, 31 modules with 459 scan profiles.
+- [**1018**Star][1m] [C] [s0lst1c3/eaphammer](https://github.com/s0lst1c3/eaphammer) Targeted evil twin attacks against WPA2-Enterprise networks. Indirect wireless pivots using hostile portal attacks.
+- [**1018**Star][9m] [Go] [maliceio/malice](https://github.com/maliceio/malice) VirusTotal Wanna Be - Now with 100% more Hipster
+- [**1014**Star][3m] [HTML] [owasp/nodegoat](https://github.com/owasp/nodegoat) 学习OWASP安全威胁Top10如何应用到Web App的,以及如何处理
- [**1014**Star][2y] [JS] [umpox/zero-width-detection](https://github.com/umpox/zero-width-detection) Invisibly inserting usernames into text with Zero-Width Characters
-- [**1014**Star][18d] [Py] [nccgroup/scoutsuite](https://github.com/nccgroup/scoutsuite) Multi-Cloud Security Auditing Tool
+- [**1014**Star][11d] [Py] [securestate/king-phisher](https://github.com/securestate/king-phisher) Phishing Campaign Toolkit
+- [**1014**Star][5m] [C++] [everdox/infinityhook](https://github.com/everdox/infinityhook) Hook system calls, context switches, page faults and more.
+- [**1014**Star][1y] [Py] [d4vinci/dr0p1t-framework](https://github.com/d4vinci/dr0p1t-framework) create an advanced stealthy dropper that bypass most AVs and have a lot of tricks
- [**1014**Star][3y] [C++] [aguinet/wannakey](https://github.com/aguinet/wannakey) Wannacry in-memory key recovery
-- [**1012**Star][25d] [Shell] [trimstray/sandmap](https://github.com/trimstray/sandmap) Nmap on steroids. Simple CLI with the ability to run pure Nmap engine, 31 modules with 459 scan profiles.
-- [**1012**Star][1y] [Py] [d4vinci/dr0p1t-framework](https://github.com/d4vinci/dr0p1t-framework) create an advanced stealthy dropper that bypass most AVs and have a lot of tricks
-- [**1011**Star][3m] [HTML] [owasp/nodegoat](https://github.com/owasp/nodegoat) 学习OWASP安全威胁Top10如何应用到Web App的,以及如何处理
-- [**1010**Star][9m] [Go] [maliceio/malice](https://github.com/maliceio/malice) VirusTotal Wanna Be - Now with 100% more Hipster
-- [**1006**Star][1m] [Go] [justinas/nosurf](https://github.com/justinas/nosurf) CSRF protection middleware for Go.
-- [**1005**Star][1y] [JS] [0xsobky/hackvault](https://github.com/0xsobky/hackvault) A container repository for my public web hacks!
-- [**1004**Star][9d] [Py] [securestate/king-phisher](https://github.com/securestate/king-phisher) Phishing Campaign Toolkit
-- [**1004**Star][5m] [C++] [everdox/infinityhook](https://github.com/everdox/infinityhook) Hook system calls, context switches, page faults and more.
+- [**1011**Star][8d] [Rich Text Format] [decalage2/oletools](https://github.com/decalage2/oletools) oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.
+- [**1009**Star][1y] [C] [ionescu007/simplevisor](https://github.com/ionescu007/simplevisor) a simple, portable, Intel VT-x hypervisor with two specific goals: using the least amount of assembly code (10 lines), and having the smallest amount of VMX-related code to support dynamic hyperjacking and unhyperjacking (that is, virtualizing the host state from within the host). It works on Windows and UEFI.
+- [**1008**Star][24d] [Swift] [rockbruno/swiftshield](https://github.com/rockbruno/swiftshield) wift/OBJ-C Obfuscator
+- [**1008**Star][5d] [JS] [monzo/response](https://github.com/monzo/response) Monzo's real-time incident response and reporting tool
+- [**1008**Star][1y] [JS] [0xsobky/hackvault](https://github.com/0xsobky/hackvault) A container repository for my public web hacks!
+- [**1007**Star][1m] [Go] [justinas/nosurf](https://github.com/justinas/nosurf) CSRF protection middleware for Go.
- [**1004**Star][1y] [Py] [entropy1337/infernal-twin](https://github.com/entropy1337/infernal-twin) wireless hacking - This is automated wireless hacking tool
-- [**1003**Star][1y] [C] [ionescu007/simplevisor](https://github.com/ionescu007/simplevisor) a simple, portable, Intel VT-x hypervisor with two specific goals: using the least amount of assembly code (10 lines), and having the smallest amount of VMX-related code to support dynamic hyperjacking and unhyperjacking (that is, virtualizing the host state from within the host). It works on Windows and UEFI.
-- [**1001**Star][11m] [Batchfile] [sagishahar-zz/lpeworkshop](https://github.com/sagishahar-zz/lpeworkshop) Windows / Linux Local Privilege Escalation Workshop
+- [**1002**Star][24d] [C] [hacksysteam/hacksysextremevulnerabledriver](https://github.com/hacksysteam/hacksysextremevulnerabledriver) HackSys Extreme Vulnerable Windows Driver
+- [**1002**Star][1m] [C] [google/fuzzer-test-suite](https://github.com/google/fuzzer-test-suite) Set of tests for fuzzing engines
+- [**1001**Star][7m] [sundowndev/hacker-roadmap](https://github.com/sundowndev/hacker-roadmap)
+- [**1001**Star][9m] [onethawt/reverseengineering-reading-list](https://github.com/onethawt/reverseengineering-reading-list) A list of Reverse Engineering articles, books, and papers
+- [**1000**Star][11m] [Batchfile] [sagishahar-zz/lpeworkshop](https://github.com/sagishahar-zz/lpeworkshop) Windows / Linux Local Privilege Escalation Workshop
- [**1000**Star][5m] [adolfintel/windows10-privacy](https://github.com/adolfintel/windows10-privacy) Windows 10 Privacy Guide
-- [**999**Star][1m] [C] [google/fuzzer-test-suite](https://github.com/google/fuzzer-test-suite) Set of tests for fuzzing engines
-- [**999**Star][16d] [Py] [ct-open-source/tuya-convert](https://github.com/ct-open-source/tuya-convert) A collection of scripts to flash Tuya IoT devices to alternative firmwares
+- [**999**Star][28d] [C] [bt3gl/pentesting-toolkit](https://github.com/bt3gl/Pentesting-Toolkit) Tools for pentesting, CTFs & wargames.
+- [**999**Star][2m] [ObjC] [lmirosevic/gbdeviceinfo](https://github.com/lmirosevic/gbdeviceinfo) Detects the hardware, software and display of the current iOS or Mac OS X device at runtime.
- [**999**Star][8m] [Go] [adtac/autovpn](https://github.com/adtac/autovpn) THIS PROJECT IS UNMAINTAINED.
-- [**997**Star][5m] [Ruby] [mdp/rotp](https://github.com/mdp/rotp) Ruby One Time Password library
-- [**997**Star][22d] [C] [hacksysteam/hacksysextremevulnerabledriver](https://github.com/hacksysteam/hacksysextremevulnerabledriver) HackSys Extreme Vulnerable Windows Driver
-- [**997**Star][2y] [Py] [danmcinerney/xsscrapy](https://github.com/danmcinerney/xsscrapy) XSS spider - 66/66 wavsep XSS detected
-- [**996**Star][2m] [Objective-C] [lmirosevic/gbdeviceinfo](https://github.com/lmirosevic/gbdeviceinfo) Detects the hardware, software and display of the current iOS or Mac OS X device at runtime.
-- [**994**Star][9m] [Go] [gencebay/httplive](https://github.com/gencebay/httplive) HTTP Request & Response Service, Mock HTTP
-- [**993**Star][1m] [Py] [x0rz/phishing_catcher](https://github.com/x0rz/phishing_catcher) Phishing catcher using Certstream
-- [**993**Star][21d] [JS] [monzo/response](https://github.com/monzo/response) Monzo's real-time incident response and reporting tool
-- [**992**Star][9m] [onethawt/reverseengineering-reading-list](https://github.com/onethawt/reverseengineering-reading-list) A list of Reverse Engineering articles, books, and papers
-- [**992**Star][12m] [C#] [kenvix/usbcopyer](https://github.com/kenvix/usbcopyer) 插上U盘自动按需复制文件
-- [**990**Star][3y] [JS] [yahooarchive/xss-filters](https://github.com/YahooArchive/xss-filters) Secure XSS Filters.
+- [**998**Star][5m] [Ruby] [mdp/rotp](https://github.com/mdp/rotp) Ruby One Time Password library
+- [**998**Star][12m] [C#] [kenvix/usbcopyer](https://github.com/kenvix/usbcopyer) 插上U盘自动按需复制文件
+- [**998**Star][2y] [Py] [danmcinerney/xsscrapy](https://github.com/danmcinerney/xsscrapy) XSS spider - 66/66 wavsep XSS detected
+- [**997**Star][12m] [PHP] [secwiki/cms-hunter](https://github.com/secwiki/cms-hunter) CMS漏洞测试用例集合
+- [**996**Star][1m] [Py] [x0rz/phishing_catcher](https://github.com/x0rz/phishing_catcher) Phishing catcher using Certstream
+- [**995**Star][9m] [Go] [gencebay/httplive](https://github.com/gencebay/httplive) HTTP Request & Response Service, Mock HTTP
+- [**992**Star][4m] [C] [gsliepen/tinc](https://github.com/gsliepen/tinc) a VPN daemon
- [**990**Star][1y] [Py] [tylous/sniffair](https://github.com/tylous/sniffair) A framework for wireless pentesting.
-- [**990**Star][10d] [Rich Text Format] [decalage2/oletools](https://github.com/decalage2/oletools) oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.
-- [**989**Star][12m] [PHP] [secwiki/cms-hunter](https://github.com/secwiki/cms-hunter) CMS漏洞测试用例集合
-- [**985**Star][10m] [Py] [xiphosresearch/exploits](https://github.com/xiphosresearch/exploits) Miscellaneous exploit code
-- [**984**Star][1m] [C] [wiire-a/pixiewps](https://github.com/wiire-a/pixiewps) An offline Wi-Fi Protected Setup brute-force utility
-- [**984**Star][22d] [Swift] [rockbruno/swiftshield](https://github.com/rockbruno/swiftshield) wift/OBJ-C Obfuscator
-- [**983**Star][1y] [HTML] [sensepost/mana](https://github.com/sensepost/mana) *DEPRECATED* mana toolkit for wifi rogue AP attacks and MitM
-- [**983**Star][10d] [Py] [jekil/awesome-hacking](https://github.com/jekil/awesome-hacking) Awesome hacking is an awesome collection of hacking tools.
-- [**981**Star][3m] [Py] [ekultek/bluekeep](https://github.com/ekultek/bluekeep) Proof of concept for CVE-2019-0708
-- [**980**Star][7m] [sundowndev/hacker-roadmap](https://github.com/sundowndev/hacker-roadmap)
-- [**978**Star][1m] [C] [zardus/preeny](https://github.com/zardus/preeny) Some helpful preload libraries for pwning stuff.
-- [**978**Star][1m] [Py] [syss-research/seth](https://github.com/syss-research/seth) Perform a MitM attack and extract clear text credentials from RDP connections
-- [**977**Star][1y] [Py] [fsecurelabs/needle](https://github.com/FSecureLABS/needle) The iOS Security Testing Framework
-- [**977**Star][4m] [Go] [nosequeldeebee/blockchain-tutorial](https://github.com/nosequeldeebee/blockchain-tutorial) Write and publish your own blockchain in less than 200 lines of Go
-- [**976**Star][21d] [JS] [lukechilds/reverse-shell](https://github.com/lukechilds/reverse-shell) Reverse Shell as a Service
+- [**988**Star][3d] [C#] [k8gege/ladon](https://github.com/k8gege/ladon) 大型内网渗透扫描器&Cobalt Strike,包含信息收集/端口扫描/服务识别/网络资产/密码爆破/漏洞检测/漏洞利用。漏洞检测含MS17010、Weblogic、ActiveMQ、Tomcat等,密码口令爆破含(Mysql、Oracle、MSSQL)、FTP、SSH(Linux)、VNC、Windows(IPC、WMI、SMB)等,可高度自定义插件支持.NET程序集、DLL(C#/Delphi/VC)、PowerShell等语言编写的插件,支持通过配置INI批量调用任意外部程序或命令,EXP生成器一键生成Web漏洞POC,可快速扩展扫描或利用能力。支持Cobalt Strike插件化直接内存加载Ladon扫描快速拓展内网横向移动
+- [**988**Star][3y] [JS] [yahooarchive/xss-filters](https://github.com/YahooArchive/xss-filters) Secure XSS Filters.
+- [**988**Star][4m] [Go] [nosequeldeebee/blockchain-tutorial](https://github.com/nosequeldeebee/blockchain-tutorial) Write and publish your own blockchain in less than 200 lines of Go
+- [**987**Star][10m] [Py] [xiphosresearch/exploits](https://github.com/xiphosresearch/exploits) Miscellaneous exploit code
+- [**987**Star][3d] [Py] [jekil/awesome-hacking](https://github.com/jekil/awesome-hacking) Awesome hacking is an awesome collection of hacking tools.
+- [**986**Star][1m] [C] [wiire-a/pixiewps](https://github.com/wiire-a/pixiewps) An offline Wi-Fi Protected Setup brute-force utility
+- [**986**Star][1y] [HTML] [sensepost/mana](https://github.com/sensepost/mana) *DEPRECATED* mana toolkit for wifi rogue AP attacks and MitM
+- [**986**Star][3m] [Py] [ekultek/bluekeep](https://github.com/ekultek/bluekeep) Proof of concept for CVE-2019-0708
+- [**981**Star][1y] [Py] [fsecurelabs/needle](https://github.com/FSecureLABS/needle) The iOS Security Testing Framework
+- [**980**Star][1m] [C] [zardus/preeny](https://github.com/zardus/preeny) Some helpful preload libraries for pwning stuff.
+- [**980**Star][2m] [Py] [syss-research/seth](https://github.com/syss-research/seth) Perform a MitM attack and extract clear text credentials from RDP connections
+- [**979**Star][1m] [hoshsadiq/adblock-nocoin-list](https://github.com/hoshsadiq/adblock-nocoin-list) Block lists to prevent JavaScript miners
+- [**978**Star][23d] [JS] [lukechilds/reverse-shell](https://github.com/lukechilds/reverse-shell) Reverse Shell as a Service
+- [**978**Star][12d] [Py] [kiminewt/pyshark](https://github.com/kiminewt/pyshark) Python wrapper for tshark, allowing python packet parsing using wireshark dissectors
+- [**978**Star][2m] [Jupyter Notebook] [hyperparticle/one-pixel-attack-keras](https://github.com/hyperparticle/one-pixel-attack-keras) Keras implementation of "One pixel attack for fooling deep neural networks" using differential evolution on Cifar10 and ImageNet
+- [**978**Star][3y] [Py] [dowsnature/dowsdns](https://github.com/dowsnature/dowsdns) 快速翻跃中国防火墙
+- [**978**Star][26d] [Jupyter Notebook] [aarshayj/analytics_vidhya](https://github.com/aarshayj/analytics_vidhya) Codes related to activities on AV including articles, hackathons and discussions.
+- [**976**Star][7m] [0x4d31/awesome-threat-detection](https://github.com/0x4d31/awesome-threat-detection) A curated list of awesome threat detection and hunting resources
+- [**975**Star][3y] [Py] [synack/knockknock](https://github.com/synack/knockknock) displays persistent items (scripts, commands, binaries, etc.), that are set to execute automatically on OS X
- [**975**Star][2y] [Py] [moosedojo/apt2](https://github.com/moosedojo/apt2) automated penetration toolkit
-- [**975**Star][24d] [Jupyter Notebook] [aarshayj/analytics_vidhya](https://github.com/aarshayj/analytics_vidhya) Codes related to activities on AV including articles, hackathons and discussions.
-- [**974**Star][3y] [Py] [synack/knockknock](https://github.com/synack/knockknock) displays persistent items (scripts, commands, binaries, etc.), that are set to execute automatically on OS X
-- [**974**Star][2m] [Jupyter Notebook] [hyperparticle/one-pixel-attack-keras](https://github.com/hyperparticle/one-pixel-attack-keras) Keras implementation of "One pixel attack for fooling deep neural networks" using differential evolution on Cifar10 and ImageNet
-- [**973**Star][10d] [Py] [kiminewt/pyshark](https://github.com/kiminewt/pyshark) Python wrapper for tshark, allowing python packet parsing using wireshark dissectors
-- [**971**Star][27d] [Py] [x64dbg/docs](https://github.com/x64dbg/docs) x64dbg Documentation
-- [**971**Star][7m] [Py] [m57/dnsteal](https://github.com/m57/dnsteal) DNS Exfiltration tool for stealthily sending files over DNS requests.
-- [**969**Star][1m] [HTML] [n0tr00t/sreg](https://github.com/n0tr00t/sreg) 可对使用者通过输入email、phone、username的返回用户注册的所有互联网护照信息。
-- [**969**Star][3m] [ctfs/resources](https://github.com/ctfs/resources) A general collection of information, tools, and tips regarding CTFs and similar security competitions
-- [**968**Star][7m] [0x4d31/awesome-threat-detection](https://github.com/0x4d31/awesome-threat-detection) A curated list of awesome threat detection and hunting resources
-- [**967**Star][3y] [Java] [androidvts/android-vts](https://github.com/androidvts/android-vts) Android Vulnerability Test Suite - In the spirit of open data collection, and with the help of the community, let's take a pulse on the state of Android security. NowSecure presents an on-device app to test for recent device vulnerabilities.
-- [**966**Star][2m] [Go] [vishvananda/netlink](https://github.com/vishvananda/netlink) Simple netlink library for go.
-- [**966**Star][2m] [C] [olimex/olinuxino](https://github.com/olimex/olinuxino) OLINUXINO is Open Source / Open Hardware, low cost from EUR 24 Linux Industrial grade Single Board Computer capable to operate -25+85C
+- [**974**Star][24d] [Rust] [sozu-proxy/sozu](https://github.com/sozu-proxy/sozu) Sōzu HTTP reverse proxy, configurable at runtime, fast and safe, built in Rust. It is awesome! Ping us on gitter to know more
+- [**973**Star][2m] [Py] [ondyari/faceforensics](https://github.com/ondyari/faceforensics) Github of the FaceForensics dataset
+- [**973**Star][1m] [HTML] [n0tr00t/sreg](https://github.com/n0tr00t/sreg) 可对使用者通过输入email、phone、username的返回用户注册的所有互联网护照信息。
+- [**973**Star][7m] [Py] [m57/dnsteal](https://github.com/m57/dnsteal) DNS Exfiltration tool for stealthily sending files over DNS requests.
+- [**973**Star][12m] [Java] [huolizhuminh/networkpacketcapture](https://github.com/huolizhuminh/networkpacketcapture) It is used to capture network packet via Android VPN.
+- [**972**Star][6d] [C++] [herumi/xbyak](https://github.com/herumi/xbyak) a JIT assembler for x86(IA-32)/x64(AMD64, x86-64) MMX/SSE/SSE2/SSE3/SSSE3/SSE4/FPU/AVX/AVX2/AVX-512 by C++ header
+- [**971**Star][29d] [Py] [x64dbg/docs](https://github.com/x64dbg/docs) x64dbg Documentation
+- [**971**Star][27d] [Go] [vishvananda/netlink](https://github.com/vishvananda/netlink) Simple netlink library for go.
+- [**971**Star][3m] [ctfs/resources](https://github.com/ctfs/resources) A general collection of information, tools, and tips regarding CTFs and similar security competitions
+- [**969**Star][4m] [Assembly] [corkami/pocs](https://github.com/corkami/pocs) Proof of Concepts (PE, PDF...)
+- [**968**Star][5m] [C] [rbsec/sslscan](https://github.com/rbsec/sslscan) sslscan tests SSL/TLS enabled services to discover supported cipher suites
+- [**968**Star][2m] [C] [olimex/olinuxino](https://github.com/olimex/olinuxino) OLINUXINO is Open Source / Open Hardware, low cost from EUR 24 Linux Industrial grade Single Board Computer capable to operate -25+85C
+- [**967**Star][8m] [Py] [selwin/python-user-agents](https://github.com/selwin/python-user-agents) A Python library that provides an easy way to identify devices like mobile phones, tablets and their capabilities by parsing (browser) user agent strings.
+- [**967**Star][4m] [Go] [dominicbreuker/pspy](https://github.com/dominicbreuker/pspy) a command line tool designed to snoop on processes without need for root permissions
- [**966**Star][3y] [C] [cybellum/doubleagent](https://github.com/cybellum/doubleagent) Zero-Day Code Injection and Persistence Technique
-- [**966**Star][4m] [Assembly] [corkami/pocs](https://github.com/corkami/pocs) Proof of Concepts (PE, PDF...)
-- [**965**Star][5m] [C] [rbsec/sslscan](https://github.com/rbsec/sslscan) sslscan tests SSL/TLS enabled services to discover supported cipher suites
-- [**964**Star][8m] [Py] [selwin/python-user-agents](https://github.com/selwin/python-user-agents) A Python library that provides an easy way to identify devices like mobile phones, tablets and their capabilities by parsing (browser) user agent strings.
-- [**963**Star][11d] [C++] [herumi/xbyak](https://github.com/herumi/xbyak) a JIT assembler for x86(IA-32)/x64(AMD64, x86-64) MMX/SSE/SSE2/SSE3/SSSE3/SSE4/FPU/AVX/AVX2/AVX-512 by C++ header
-- [**963**Star][4m] [Go] [dominicbreuker/pspy](https://github.com/dominicbreuker/pspy) Monitor linux processes without root permissions
-- [**961**Star][19d] [C] [bt3gl/pentesting-toolkit](https://github.com/bt3gl/Pentesting-Toolkit) Tools for pentesting, CTFs & wargames.
+- [**966**Star][3y] [Java] [androidvts/android-vts](https://github.com/androidvts/android-vts) Android Vulnerability Test Suite - In the spirit of open data collection, and with the help of the community, let's take a pulse on the state of Android security. NowSecure presents an on-device app to test for recent device vulnerabilities.
+- [**965**Star][5d] [C++] [dvorka/mindforger](https://github.com/dvorka/mindforger) Thinking notebook and Markdown IDE.
+- [**965**Star][1m] [C#] [cobbr/covenant](https://github.com/cobbr/covenant) Covenant is a collaborative .NET C2 framework for red teamers.
+- [**964**Star][7m] [PHP] [jenssegers/optimus](https://github.com/jenssegers/optimus) id transformation With this library, you can transform your internal id's to obfuscated integers based on Knuth's integer has和
+- [**962**Star][4m] [Py] [0xinfection/tidos-framework](https://github.com/0xInfection/TIDoS-Framework) The Offensive Manual Web Application Penetration Testing Framework.
+- [**962**Star][3d] [bromite/bromite](https://github.com/bromite/bromite) Bromite is Chromium plus ad blocking and privacy enhancements; take back your browser!
+- [**962**Star][3y] [Py] [abatchy17/windowsexploits](https://github.com/abatchy17/windowsexploits) Windows exploits, mostly precompiled. Not being updated. Check
+- [**961**Star][4y] [pillarjs/understanding-csrf](https://github.com/pillarjs/understanding-csrf) What are CSRF tokens and how do they work?
+- [**961**Star][1m] [PS] [netspi/powerupsql](https://github.com/netspi/powerupsql) A PowerShell Toolkit for Attacking SQL Server
- [**961**Star][3y] [Go] [jaksi/sshesame](https://github.com/jaksi/sshesame) A fake SSH server that lets everyone in and logs their activity
-- [**960**Star][7m] [PHP] [jenssegers/optimus](https://github.com/jenssegers/optimus) id transformation With this library, you can transform your internal id's to obfuscated integers based on Knuth's integer has和
-- [**960**Star][9m] [C++] [dvorka/mindforger](https://github.com/dvorka/mindforger) Thinking notebook and Markdown IDE.
-- [**959**Star][4y] [pillarjs/understanding-csrf](https://github.com/pillarjs/understanding-csrf) What are CSRF tokens and how do they work?
-- [**958**Star][4m] [Py] [0xinfection/tidos-framework](https://github.com/0xInfection/TIDoS-Framework) The Offensive Manual Web Application Penetration Testing Framework.
-- [**956**Star][2m] [Py] [ondyari/faceforensics](https://github.com/ondyari/faceforensics) Github of the FaceForensics dataset
-- [**956**Star][3y] [Py] [abatchy17/windowsexploits](https://github.com/abatchy17/windowsexploits) Windows exploits, mostly precompiled. Not being updated. Check
-- [**955**Star][2m] [JS] [pillarjs/cookies](https://github.com/pillarjs/cookies) Signed and unsigned cookies based on Keygrip
-- [**953**Star][4m] [Py] [hatriot/zarp](https://github.com/hatriot/zarp) Network Attack Tool
-- [**953**Star][25d] [Py] [fireeye/flare-fakenet-ng](https://github.com/fireeye/flare-fakenet-ng) Next Generation Dynamic Network Analysis Tool
-- [**952**Star][1m] [PowerShell] [netspi/powerupsql](https://github.com/netspi/powerupsql) A PowerShell Toolkit for Attacking SQL Server
-- [**952**Star][1m] [C#] [cobbr/covenant](https://github.com/cobbr/covenant) Covenant is a collaborative .NET C2 framework for red teamers.
-- [**950**Star][8d] [C++] [hasherezade/pe-sieve](https://github.com/hasherezade/pe-sieve) Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).
-- [**947**Star][2y] [Py] [arnaucube/coffeeminer](https://github.com/arnaucube/coffeeMiner) collaborative (mitm) cryptocurrency mining pool in wifi networks
-- [**947**Star][1y] [JS] [fabienvauchelles/scrapoxy](https://github.com/fabienvauchelles/scrapoxy) Scrapoxy hides your scraper behind a cloud. It starts a pool of proxies to send your requests. Now, you can crawl without thinking about blacklisting!
+- [**957**Star][2m] [JS] [pillarjs/cookies](https://github.com/pillarjs/cookies) Signed and unsigned cookies based on Keygrip
+- [**956**Star][2d] [Py] [shmilylty/oneforall](https://github.com/shmilylty/oneforall) subdomain collect
+- [**956**Star][27d] [Py] [fireeye/flare-fakenet-ng](https://github.com/fireeye/flare-fakenet-ng) Next Generation Dynamic Network Analysis Tool
+- [**955**Star][7d] [C++] [hasherezade/pe-sieve](https://github.com/hasherezade/pe-sieve) Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).
+- [**953**Star][4m] [Py] [hatriot/zarp](https://github.com/hatriot/zarp) a network attack tool centered around the exploitation of local networks
+- [**952**Star][12d] [HTML] [sprov065/v2-ui](https://github.com/sprov065/v2-ui) 支持多协议多用户的 v2ray 面板,Support multi-protocol multi-user v2ray panel
+- [**952**Star][1y] [JS] [fabienvauchelles/scrapoxy](https://github.com/fabienvauchelles/scrapoxy) Scrapoxy hides your scraper behind a cloud. It starts a pool of proxies to send your requests. Now, you can crawl without thinking about blacklisting!
+- [**951**Star][8d] [Py] [mozilla/openwpm](https://github.com/mozilla/OpenWPM) A web privacy measurement framework
+- [**951**Star][2y] [C] [fdiskyou/injectallthethings](https://github.com/fdiskyou/injectallthethings) Seven different DLL injection techniques in one single project.
+- [**950**Star][2y] [Py] [trycatchhcf/cloakify](https://github.com/trycatchhcf/cloakify) CloakifyFactory - Data Exfiltration & Infiltration In Plain Sight; Convert any filetype into list of everyday strings, using Text-Based Steganography; Evade DLP/MLS Devices, Defeat Data Whitelisting Controls, Social Engineering of Analysts, Evade AV Detection
+- [**948**Star][2y] [Py] [arnaucube/coffeeminer](https://github.com/arnaucube/coffeeMiner) collaborative (mitm) cryptocurrency mining pool in wifi networks
- [**947**Star][6m] [C] [dhavalkapil/heap-exploitation](https://github.com/dhavalkapil/heap-exploitation) This book on heap exploitation is a guide to understanding the internals of glibc's heap and various attacks possible on the heap structure.
-- [**946**Star][10d] [C#] [k8gege/ladon](https://github.com/k8gege/ladon) 大型内网渗透扫描器&Cobalt Strike,包含信息收集/端口扫描/服务识别/网络资产/密码爆破/漏洞检测/漏洞利用。漏洞检测含MS17010、Weblogic、ActiveMQ、Tomcat等,密码口令爆破含(Mysql、Oracle、MSSQL)、FTP、SSH(Linux)、VNC、Windows(IPC、WMI、SMB)等,可高度自定义插件支持.NET程序集、DLL(C#/Delphi/VC)、PowerShell等语言编写的插件,支持通过配置INI批量调用任意外部程序或命令,EXP生成器一键生成Web漏洞POC,可快速扩展扫描或利用能力。支持Cobalt Strike插件化直接内存加载Ladon扫描快速拓展内网横向移动
-- [**945**Star][17d] [Py] [mozilla/openwpm](https://github.com/mozilla/OpenWPM) A web privacy measurement framework
-- [**945**Star][2y] [Py] [trycatchhcf/cloakify](https://github.com/trycatchhcf/cloakify) CloakifyFactory - Data Exfiltration & Infiltration In Plain Sight; Convert any filetype into list of everyday strings, using Text-Based Steganography; Evade DLP/MLS Devices, Defeat Data Whitelisting Controls, Social Engineering of Analysts, Evade AV Detection
-- [**943**Star][2y] [C] [fdiskyou/injectallthethings](https://github.com/fdiskyou/injectallthethings) Seven different DLL injection techniques in one single project.
-- [**942**Star][4m] [Py] [intelxed/xed](https://github.com/intelxed/xed) x86 encoder decoder
-- [**942**Star][9d] [bromite/bromite](https://github.com/bromite/bromite) Bromite is Chromium plus ad blocking and privacy enhancements; take back your browser!
+- [**947**Star][8d] [HTML] [darksecdevelopers/hiddeneye](https://github.com/darksecdevelopers/hiddeneye) Modern Phishing Tool With Advanced Functionality And Multiple Tunnelling Services [ Android-Support-Available ]
+- [**946**Star][9d] [Py] [sashs/ropper](https://github.com/sashs/ropper) Display information about files in different file formats and find gadgets to build rop chains for different architectures (x86/x86_64, ARM/ARM64, MIPS, PowerPC, SPARC64). For disassembly ropper uses the awesome Capstone Framework.
+- [**946**Star][4d] [Go] [ffuf/ffuf](https://github.com/ffuf/ffuf) Fast web fuzzer written in Go
+- [**946**Star][2m] [C] [basil00/divert](https://github.com/basil00/divert) Windows Packet Divert
+- [**944**Star][2m] [C++] [cisco-talos/clamav-devel](https://github.com/Cisco-Talos/clamav-devel) ClamAV Development - FAQ is here:
+- [**944**Star][2y] [C#] [invoke-ir/powerforensics](https://github.com/invoke-ir/powerforensics) PowerForensics provides an all in one platform for live disk forensic analysis
+- [**944**Star][4m] [Py] [intelxed/xed](https://github.com/intelxed/xed) x86 encoder decoder
+- [**943**Star][13d] [Py] [theupdateframework/tuf](https://github.com/theupdateframework/tuf) A framework for securing software update systems
+- [**942**Star][2y] [HTML] [chybeta/software-security-learning](https://github.com/chybeta/software-security-learning) Software-Security-Learning
+- [**941**Star][3m] [zhaoweih/shadowsocks-tutorial](https://github.com/zhaoweih/shadowsocks-tutorial)
- [**940**Star][5y] [Py] [mothran/bunny](https://github.com/mothran/bunny) Bunny is a wireless. meshing, darknet that uses 802.11 to hide its communications
-- [**940**Star][28d] [Py] [sashs/ropper](https://github.com/sashs/ropper) Display information about files in different file formats and find gadgets to build rop chains for different architectures (x86/x86_64, ARM/ARM64, MIPS, PowerPC, SPARC64). For disassembly ropper uses the awesome Capstone Framework.
-- [**940**Star][2y] [C#] [invoke-ir/powerforensics](https://github.com/invoke-ir/powerforensics) PowerForensics provides an all in one platform for live disk forensic analysis
-- [**940**Star][2m] [C] [basil00/divert](https://github.com/basil00/divert) Windows Packet Divert
+- [**940**Star][10m] [Shell] [1n3/findsploit](https://github.com/1n3/findsploit) Find exploits in local and online databases instantly
- [**939**Star][1y] [JS] [netflix-skunkworks/sleepy-puppy](https://github.com/Netflix-Skunkworks/sleepy-puppy) Sleepy Puppy XSS Payload Management Framework
-- [**939**Star][3y] [Py] [countercept/doublepulsar-detection-script](https://github.com/countercept/doublepulsar-detection-script) A python2 script for sweeping a network to find windows systems compromised with the DOUBLEPULSAR implant.
-- [**938**Star][2m] [C++] [cisco-talos/clamav-devel](https://github.com/Cisco-Talos/clamav-devel) ClamAV Development - FAQ is here:
-- [**937**Star][2y] [Perl] [infobyte/evilgrade](https://github.com/infobyte/evilgrade) a modular framework that allows the user to take advantage of poor upgrade implementations by injecting fake updates
-- [**937**Star][2y] [HTML] [chybeta/software-security-learning](https://github.com/chybeta/software-security-learning) Software-Security-Learning
-- [**936**Star][11d] [Py] [theupdateframework/tuf](https://github.com/theupdateframework/tuf) A framework for securing software update systems
-- [**935**Star][1y] [Java] [google/firing-range](https://github.com/google/firing-range) a test bed for web application security scanners, providing synthetic, wide coverage for an array of vulnerabilities.
-- [**935**Star][3m] [Py] [christophetd/cloudflair](https://github.com/christophetd/cloudflair) a tool to find origin servers of websites protected by CloudFlare who are publicly exposed and don't restrict network access to the CloudFlare IP ranges as they should
-- [**935**Star][10m] [Shell] [1n3/findsploit](https://github.com/1n3/findsploit) Find exploits in local and online databases instantly
-- [**933**Star][9d] [Py] [shmilylty/oneforall](https://github.com/shmilylty/oneforall) 子域收集工具
-- [**933**Star][12m] [Py] [gaasedelen/lighthouse](https://github.com/gaasedelen/lighthouse) Code Coverage Explorer for IDA Pro & Binary Ninja
+- [**939**Star][12m] [Py] [gaasedelen/lighthouse](https://github.com/gaasedelen/lighthouse) Code Coverage Explorer for IDA Pro & Binary Ninja
- [coverage-frida](https://github.com/gaasedelen/lighthouse/blob/master/coverage/frida/README.md) 使用Frida收集信息
- [coverage-pin](https://github.com/gaasedelen/lighthouse/blob/master/coverage/pin/README.md) 使用Pin收集覆盖信息
- [插件](https://github.com/gaasedelen/lighthouse/blob/master/plugin/lighthouse_plugin.py) 支持IDA和BinNinja
-- [**932**Star][2y] [C++] [securesocketfunneling/ssf](https://github.com/securesocketfunneling/ssf) Secure Socket Funneling - Network tool and toolkit - TCP and UDP port forwarding, SOCKS proxy, remote shell, standalone and cross platform
-- [**931**Star][2y] [deepspaceharbor/awesome-ai-security](https://github.com/DeepSpaceHarbor/Awesome-AI-Security)
-- [**931**Star][2y] [Py] [tomchop/malcom](https://github.com/tomchop/malcom) Malcom - Malware Communications Analyzer
+- [**939**Star][3y] [Py] [countercept/doublepulsar-detection-script](https://github.com/countercept/doublepulsar-detection-script) A python2 script for sweeping a network to find windows systems compromised with the DOUBLEPULSAR implant.
+- [**939**Star][3m] [Py] [christophetd/cloudflair](https://github.com/christophetd/cloudflair) a tool to find origin servers of websites protected by CloudFlare who are publicly exposed and don't restrict network access to the CloudFlare IP ranges as they should
+- [**939**Star][4m] [bugcrowd/bugcrowd_university](https://github.com/bugcrowd/bugcrowd_university) Open source education content for the researcher community
+- [**938**Star][9m] [wtsxdev/penetration-testing](https://github.com/wtsxdev/penetration-testing) List of awesome penetration testing resources, tools and other shiny things
+- [**938**Star][17d] [Py] [knownsec/pocsuite3](https://github.com/knownsec/pocsuite3) remote vulnerability testing framework developed by the Knownsec 404 Team.
+- [**938**Star][2y] [Perl] [infobyte/evilgrade](https://github.com/infobyte/evilgrade) a modular framework that allows the user to take advantage of poor upgrade implementations by injecting fake updates
+- [**936**Star][2y] [deepspaceharbor/awesome-ai-security](https://github.com/DeepSpaceHarbor/Awesome-AI-Security)
+- [**936**Star][2y] [C++] [securesocketfunneling/ssf](https://github.com/securesocketfunneling/ssf) Secure Socket Funneling - Network tool and toolkit - TCP and UDP port forwarding, SOCKS proxy, remote shell, standalone and cross platform
+- [**935**Star][1y] [Java] [google/firing-range](https://github.com/google/firing-range) a test bed for web application security scanners, providing synthetic, wide coverage for an array of vulnerabilities.
+- [**935**Star][2m] [Py] [d4vinci/one-lin3r](https://github.com/d4vinci/one-lin3r) Gives you one-liners that aids in penetration testing operations, privilege escalation and more
+- [**934**Star][13d] [Ruby] [david942j/one_gadget](https://github.com/david942j/one_gadget) The best tool for finding one gadget RCE in libc.so.6
+- [**933**Star][2y] [Py] [tomchop/malcom](https://github.com/tomchop/malcom) Malcom - Malware Communications Analyzer
+- [**931**Star][30d] [Py] [nullsecuritynet/tools](https://github.com/nullsecuritynet/tools) Security and Hacking Tools, Exploits, Proof of Concepts, Shellcodes, Scripts.
+- [**930**Star][5m] [threathuntingproject/threathunting](https://github.com/threathuntingproject/threathunting) An informational repo about hunting for adversaries in your IT environment.
- [**930**Star][7d] [C++] [kde/heaptrack](https://github.com/kde/heaptrack) A heap memory profiler for Linux
-- [**930**Star][2m] [Py] [d4vinci/one-lin3r](https://github.com/d4vinci/one-lin3r) Gives you one-liners that aids in penetration testing operations, privilege escalation and more
-- [**928**Star][7m] [Py] [osirislab/hack-night](https://github.com/osirislab/Hack-Night) a sobering introduction to offensive security
+- [**930**Star][6d] [OCaml] [airbus-seclab/bincat](https://github.com/airbus-seclab/bincat) a static Binary Code Analysis Toolkit, designed to help reverse engineers, directly from IDA or using Python for automation.
+- [**929**Star][7m] [Py] [osirislab/hack-night](https://github.com/osirislab/Hack-Night) a sobering introduction to offensive security
+- [**928**Star][3y] [C] [tyilo/insert_dylib](https://github.com/tyilo/insert_dylib) Command line utility for inserting a dylib load command into a Mach-O binary
- [**928**Star][9m] [C] [microsoft/windows-driver-frameworks](https://github.com/microsoft/windows-driver-frameworks) a set of libraries that make it simple to write high-quality device drivers.
-- [**928**Star][11d] [Ruby] [david942j/one_gadget](https://github.com/david942j/one_gadget) The best tool for finding one gadget RCE in libc.so.6
-- [**927**Star][28d] [Py] [nullsecuritynet/tools](https://github.com/nullsecuritynet/tools) Security and Hacking Tools, Exploits, Proof of Concepts, Shellcodes, Scripts.
-- [**927**Star][12d] [OCaml] [airbus-seclab/bincat](https://github.com/airbus-seclab/bincat) a static Binary Code Analysis Toolkit, designed to help reverse engineers, directly from IDA or using Python for automation.
+- [**927**Star][2y] [C++] [genoil/cpp-ethereum](https://github.com/genoil/cpp-ethereum) [Warning: Repo inactive] Ethereum GPU miner with OpenCL, CUDA and stratum support
+- [**927**Star][1y] [Py] [m4n3dw0lf/pythem](https://github.com/m4n3dw0lf/pythem) pentest framework
- [**927**Star][4m] [Py] [airbnb/binaryalert](https://github.com/airbnb/binaryalert) Serverless, Real-time & Retroactive Malware Detection.
-- [**926**Star][4m] [threathuntingproject/threathunting](https://github.com/threathuntingproject/threathunting) An informational repo about hunting for adversaries in your IT environment.
-- [**925**Star][9m] [wtsxdev/penetration-testing](https://github.com/wtsxdev/penetration-testing) List of awesome penetration testing resources, tools and other shiny things
-- [**924**Star][3y] [C] [tyilo/insert_dylib](https://github.com/tyilo/insert_dylib) Command line utility for inserting a dylib load command into a Mach-O binary
-- [**924**Star][1y] [Py] [m4n3dw0lf/pythem](https://github.com/m4n3dw0lf/pythem) pentest framework
-- [**923**Star][3m] [zhaoweih/shadowsocks-tutorial](https://github.com/zhaoweih/shadowsocks-tutorial)
-- [**923**Star][3y] [Eagle] [samyk/keysweeper](https://github.com/samyk/keysweeper) KeySweeper is a stealthy Arduino-based device, camouflaged as a functioning USB wall charger, that wirelessly and passively sniffs, decrypts, logs and reports back (over GSM) all keystrokes from any Microsoft wireless keyboard in the vicinity.
-- [**923**Star][4m] [bugcrowd/bugcrowd_university](https://github.com/bugcrowd/bugcrowd_university) Open source education content for the researcher community
+- [**926**Star][3y] [Eagle] [samyk/keysweeper](https://github.com/samyk/keysweeper) KeySweeper is a stealthy Arduino-based device, camouflaged as a functioning USB wall charger, that wirelessly and passively sniffs, decrypts, logs and reports back (over GSM) all keystrokes from any Microsoft wireless keyboard in the vicinity.
+- [**925**Star][8m] [JS] [song-li/cross_browser](https://github.com/song-li/cross_browser) cross_browser_fingerprinting
+- [**924**Star][5m] [PHP] [tidesec/wdscanner](https://github.com/tidesec/wdscanner) WDScanner平台目前实现了如下功能:分布式web漏洞扫描、客户管理、漏洞定期扫描、子域名枚举、端口扫描、网站爬虫、暗链检测、坏链检测、网站指纹搜集、专项漏洞检测、代理搜集及部署等功能。
+- [**924**Star][1y] [C++] [miek/inspectrum](https://github.com/miek/inspectrum) analysing captured signals, primarily from software-defined radio receivers.
+- [**924**Star][3d] [Py] [eliben/pyelftools](https://github.com/eliben/pyelftools) Parsing ELF and DWARF in Python
+- [**923**Star][3m] [Ruby] [weppos/whois](https://github.com/weppos/whois) An intelligent — pure Ruby — WHOIS client and parser.
+- [**923**Star][2m] [Py] [tuhinshubhra/cmseek](https://github.com/tuhinshubhra/cmseek) CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and over 170 other CMSs
+- [**923**Star][3m] [Py] [sa7mon/s3scanner](https://github.com/sa7mon/s3scanner) Scan for open AWS S3 buckets and dump the contents
- [**922**Star][1y] [Shell] [ywb94/openwrt-ssr](https://github.com/ywb94/openwrt-ssr) ShadowsocksR-libev for OpenWrt
-- [**922**Star][8m] [JS] [song-li/cross_browser](https://github.com/song-li/cross_browser) cross_browser_fingerprinting
-- [**922**Star][15d] [Py] [knownsec/pocsuite3](https://github.com/knownsec/pocsuite3) remote vulnerability testing framework developed by the Knownsec 404 Team.
-- [**922**Star][2y] [JS] [diracdeltas/sniffly](https://github.com/diracdeltas/sniffly) Sniffing browser history using HSTS
-- [**921**Star][3m] [Ruby] [weppos/whois](https://github.com/weppos/whois) An intelligent — pure Ruby — WHOIS client and parser.
-- [**920**Star][2m] [Py] [tuhinshubhra/cmseek](https://github.com/tuhinshubhra/cmseek) CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and over 170 other CMSs
-- [**920**Star][2y] [HTML] [snorby/snorby](https://github.com/snorby/snorby) Ruby On Rails Application For Network Security Monitoring
-- [**919**Star][2y] [C#] [jaredhaight/psattack](https://github.com/jaredhaight/psattack) A portable console aimed at making pentesting with PowerShell a little easier.
-- [**919**Star][17d] [HTML] [darksecdevelopers/hiddeneye](https://github.com/darksecdevelopers/hiddeneye) Modern Phishing Tool With Advanced Functionality And Multiple Tunnelling Services [ Android-Support-Available ]
-- [**918**Star][6m] [JS] [reswitched/pegaswitch](https://github.com/reswitched/pegaswitch) PegaSwitch is an exploit toolkit for the Nintendo Switch
-- [**918**Star][1m] [Py] [eliben/pyelftools](https://github.com/eliben/pyelftools) Parsing ELF and DWARF in Python
-- [**916**Star][1y] [C++] [miek/inspectrum](https://github.com/miek/inspectrum) analysing captured signals, primarily from software-defined radio receivers.
-- [**915**Star][1m] [Go] [opensec-cn/kunpeng](https://github.com/opensec-cn/kunpeng) POC Framework
-- [**915**Star][19d] [Go] [grafeas/grafeas](https://github.com/grafeas/grafeas) Artifact Metadata API
-- [**914**Star][14d] [C#] [googleprojectzero/sandbox-attacksurface-analysis-tools](https://github.com/googleprojectzero/sandbox-attacksurface-analysis-tools) Set of tools to analyze and attack Windows sandboxes.
-- [**914**Star][2m] [Py] [sa7mon/s3scanner](https://github.com/sa7mon/s3scanner) Scan for open AWS S3 buckets and dump the contents
-- [**914**Star][7y] [designativedave/androrat](https://github.com/designativedave/androrat) Remote Administration Tool for Android devices
-- [**914**Star][6m] [PowerShell] [api0cradle/ultimateapplockerbypasslist](https://github.com/api0cradle/ultimateapplockerbypasslist) The goal of this repository is to document the most common techniques to bypass AppLocker.
-- [**913**Star][5m] [PHP] [tidesec/wdscanner](https://github.com/tidesec/wdscanner) WDScanner平台目前实现了如下功能:分布式web漏洞扫描、客户管理、漏洞定期扫描、子域名枚举、端口扫描、网站爬虫、暗链检测、坏链检测、网站指纹搜集、专项漏洞检测、代理搜集及部署等功能。
-- [**912**Star][1m] [tom0li/collection-document](https://github.com/tom0li/collection-document) Collection of quality safety articles
-- [**912**Star][8m] [C] [0x90/wifi-arsenal](https://github.com/0x90/wifi-arsenal) WiFi arsenal
-- [**911**Star][2m] [TeX] [ethereum/yellowpaper](https://github.com/ethereum/yellowpaper) The "Yellow Paper": Ethereum's formal specification
-- [**911**Star][18d] [C#] [elevenpaths/foca](https://github.com/elevenpaths/foca) Tool to find metadata and hidden information in the documents.
-- [**909**Star][10d] [HTML] [sprov065/v2-ui](https://github.com/sprov065/v2-ui) 支持多协议多用户的 v2ray 面板,Support multi-protocol multi-user v2ray panel
+- [**922**Star][2y] [C#] [jaredhaight/psattack](https://github.com/jaredhaight/psattack) A portable console aimed at making pentesting with PowerShell a little easier.
+- [**921**Star][2d] [Go] [grafeas/grafeas](https://github.com/grafeas/grafeas) Artifact Metadata API
+- [**921**Star][2y] [JS] [diracdeltas/sniffly](https://github.com/diracdeltas/sniffly) Sniffing browser history using HSTS
+- [**919**Star][2y] [HTML] [snorby/snorby](https://github.com/snorby/snorby) Ruby On Rails Application For Network Security Monitoring
+- [**918**Star][2d] [C#] [googleprojectzero/sandbox-attacksurface-analysis-tools](https://github.com/googleprojectzero/sandbox-attacksurface-analysis-tools) Set of tools to analyze and attack Windows sandboxes.
+- [**918**Star][1m] [Go] [opensec-cn/kunpeng](https://github.com/opensec-cn/kunpeng) POC Framework
+- [**918**Star][6m] [PS] [api0cradle/ultimateapplockerbypasslist](https://github.com/api0cradle/ultimateapplockerbypasslist) The goal of this repository is to document the most common techniques to bypass AppLocker.
+- [**917**Star][1m] [tom0li/collection-document](https://github.com/tom0li/collection-document) Collection of quality safety articles
+- [**917**Star][6m] [JS] [reswitched/pegaswitch](https://github.com/reswitched/pegaswitch) PegaSwitch is an exploit toolkit for the Nintendo Switch
+- [**916**Star][7y] [designativedave/androrat](https://github.com/designativedave/androrat) Remote Administration Tool for Android devices
+- [**914**Star][8m] [C] [0x90/wifi-arsenal](https://github.com/0x90/wifi-arsenal) WiFi arsenal
+- [**913**Star][23d] [Go] [square/ghostunnel](https://github.com/square/ghostunnel) A simple SSL/TLS proxy with mutual authentication for securing non-TLS services
+- [**912**Star][8m] [ObjC] [tobefuturer/restore-symbol](https://github.com/tobefuturer/restore-symbol) A reverse engineering tool to restore stripped symbol table for iOS app.
+- [**912**Star][2m] [TeX] [ethereum/yellowpaper](https://github.com/ethereum/yellowpaper) The "Yellow Paper": Ethereum's formal specification
+- [**912**Star][7d] [C#] [elevenpaths/foca](https://github.com/elevenpaths/foca) Tool to find metadata and hidden information in the documents.
+- [**912**Star][3y] [Rust] [dagenix/rust-crypto](https://github.com/dagenix/rust-crypto) A (mostly) pure-Rust implementation of various cryptographic algorithms.
+- [**912**Star][7m] [cn0xroot/rfsec-toolkit](https://github.com/cn0xroot/rfsec-toolkit) RFSec-ToolKit is a collection of Radio Frequency Communication Protocol Hacktools.无线通信协议相关的工具集,可借助SDR硬件+相关工具对无线通信进行研究。Collect with ♥ by HackSmith
+- [**910**Star][8m] [HTML] [thelinuxchoice/shellphish](https://github.com/thelinuxchoice/shellphish) Phishing Tool for 18 social media: Instagram, Facebook, Snapchat, Github, Twitter, Yahoo, Protonmail, Spotify, Netflix, Linkedin, Wordpress, Origin, Steam, Microsoft, InstaFollowers, Gitlab, Pinterest
+- [**910**Star][9m] [Shell] [ivanilves/xiringuito](https://github.com/ivanilves/xiringuito) SSH-based "VPN for poors"
+- [**910**Star][8d] [C] [arm-software/arm-trusted-firmware](https://github.com/arm-software/arm-trusted-firmware) a reference implementation of secure world software for Arm A-Profile architectures (Armv8-A and Armv7-A), including an Exception Level 3 (EL3) Secure Monitor.
+- [**909**Star][2y] [Py] [sweetsoftware/ares](https://github.com/sweetsoftware/ares) Python botnet and backdoor
- [**909**Star][7y] [Java] [sonyxperiadev/apkanalyser](https://github.com/sonyxperiadev/apkanalyser)
-- [**909**Star][6m] [cn0xroot/rfsec-toolkit](https://github.com/cn0xroot/rfsec-toolkit) RFSec-ToolKit is a collection of Radio Frequency Communication Protocol Hacktools.无线通信协议相关的工具集,可借助SDR硬件+相关工具对无线通信进行研究。Collect with ♥ by HackSmith
-- [**908**Star][2y] [Py] [sweetsoftware/ares](https://github.com/sweetsoftware/ares) Python botnet and backdoor
-- [**908**Star][1y] [Swift] [skreweverything/swift-keylogger](https://github.com/skreweverything/swift-keylogger) Keylogger for mac written in Swift using HID
-- [**907**Star][5y] [Py] [pwnieexpress/raspberry_pwn](https://github.com/pwnieexpress/raspberry_pwn) A Raspberry Pi pentesting suite by Pwnie Express
-- [**907**Star][3y] [Rust] [dagenix/rust-crypto](https://github.com/dagenix/rust-crypto) A (mostly) pure-Rust implementation of various cryptographic algorithms.
+- [**909**Star][1y] [Swift] [skreweverything/swift-keylogger](https://github.com/skreweverything/swift-keylogger) Keylogger for mac written in Swift using HID
+- [**908**Star][5y] [Py] [pwnieexpress/raspberry_pwn](https://github.com/pwnieexpress/raspberry_pwn) A Raspberry Pi pentesting suite by Pwnie Express
+- [**907**Star][7y] [C] [jbangert/trapcc](https://github.com/jbangert/trapcc) Computing with traps
- [**906**Star][7m] [C++] [dfhack/dfhack](https://github.com/DFHack/dfhack) Memory hacking library for Dwarf Fortress and a set of tools that use it
-- [**906**Star][8m] [Objective-C] [tobefuturer/restore-symbol](https://github.com/tobefuturer/restore-symbol) A reverse engineering tool to restore stripped symbol table for iOS app.
-- [**906**Star][7y] [C] [jbangert/trapcc](https://github.com/jbangert/trapcc) Computing with traps
-- [**906**Star][11d] [C] [arm-software/arm-trusted-firmware](https://github.com/arm-software/arm-trusted-firmware) Read-only mirror of Trusted Firmware-A
-- [**904**Star][3y] [Java] [summitt/burp-non-http-extension](https://github.com/summitt/burp-non-http-extension) Non-HTTP Protocol Extension (NoPE) Proxy and DNS for Burp Suite.
-- [**904**Star][3m] [Objective-C] [ptoomey3/keychain-dumper](https://github.com/ptoomey3/keychain-dumper) A tool to check which keychain items are available to an attacker once an iOS device has been jailbroken
-- [**903**Star][21d] [Go] [square/ghostunnel](https://github.com/square/ghostunnel) A simple SSL/TLS proxy with mutual authentication for securing non-TLS services
-- [**903**Star][17d] [Py] [mschwager/fierce](https://github.com/mschwager/fierce) A DNS reconnaissance tool for locating non-contiguous IP space.
-- [**902**Star][8m] [HTML] [thelinuxchoice/shellphish](https://github.com/thelinuxchoice/shellphish) Phishing Tool for 18 social media: Instagram, Facebook, Snapchat, Github, Twitter, Yahoo, Protonmail, Spotify, Netflix, Linkedin, Wordpress, Origin, Steam, Microsoft, InstaFollowers, Gitlab, Pinterest
-- [**902**Star][1y] [Go] [huacnlee/flora-kit](https://github.com/huacnlee/flora-kit) 基于 shadowsocks-go 做的完善实现,完全兼容 Surge 的配置文件
+- [**906**Star][3y] [Java] [summitt/burp-non-http-extension](https://github.com/summitt/burp-non-http-extension) Non-HTTP Protocol Extension (NoPE) Proxy and DNS for Burp Suite.
+- [**906**Star][19d] [Py] [mschwager/fierce](https://github.com/mschwager/fierce) A DNS reconnaissance tool for locating non-contiguous IP space.
+- [**906**Star][5m] [Py] [m0rtem/cloudfail](https://github.com/m0rtem/cloudfail) Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network
+- [**905**Star][2d] [C++] [seladb/pcapplusplus](https://github.com/seladb/pcapplusplus) PcapPlusPlus is a multiplatform C++ library for capturing, parsing and crafting of network packets. It is designed to be efficient, powerful and easy to use. It provides C++ wrappers for the most popular packet processing engines such as libpcap, WinPcap, DPDK and PF_RING.
+- [**904**Star][3m] [ObjC] [ptoomey3/keychain-dumper](https://github.com/ptoomey3/keychain-dumper) A tool to check which keychain items are available to an attacker once an iOS device has been jailbroken
+- [**904**Star][1y] [Go] [huacnlee/flora-kit](https://github.com/huacnlee/flora-kit) 基于 shadowsocks-go 做的完善实现,完全兼容 Surge 的配置文件
+- [**903**Star][6y] [C] [visgean/zeus](https://github.com/visgean/zeus) NOT MY CODE! Zeus trojan horse - leaked in 2011, I am not the author. I have created this repository to make the access for study as easy as possible.
+- [**903**Star][6d] [C] [cossacklabs/themis](https://github.com/cossacklabs/themis) Easy to use cryptographic framework for data protection: secure messaging with forward secrecy and secure data storage. Has unified APIs across 12 platforms.
+- [**902**Star][28d] [Go] [mehrdadrad/radvpn](https://github.com/mehrdadrad/radvpn) Decentralized VPN
+- [**901**Star][8d] [Py] [hasecuritysolutions/vulnwhisperer](https://github.com/HASecuritySolutions/VulnWhisperer) Create actionable data from your Vulnerability Scans
- [**901**Star][1y] [Py] [nixawk/labs](https://github.com/nixawk/labs) Vulnerability Labs for security analysis
-- [**899**Star][6y] [C] [visgean/zeus](https://github.com/visgean/zeus) NOT MY CODE! Zeus trojan horse - leaked in 2011, I am not the author. I have created this repository to make the access for study as easy as possible.
-- [**899**Star][10d] [C] [cossacklabs/themis](https://github.com/cossacklabs/themis) Easy to use cryptographic framework for data protection: secure messaging with forward secrecy and secure data storage. Has unified APIs across 12 platforms.
-- [**897**Star][3m] [Py] [hasecuritysolutions/vulnwhisperer](https://github.com/HASecuritySolutions/VulnWhisperer) Create actionable data from your Vulnerability Scans
- [**897**Star][5y] [Java] [wszf/androrat](https://github.com/wszf/androrat) Remote Administration Tool for Android
-- [**896**Star][2y] [Ruby] [whitewidowscanner/whitewidow](https://github.com/whitewidowscanner/whitewidow) SQL Vulnerability Scanner
-- [**896**Star][5m] [Py] [m0rtem/cloudfail](https://github.com/m0rtem/cloudfail) Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network
-- [**895**Star][10m] [C++] [secrary/injectproc](https://github.com/secrary/injectproc) Process Injection Techniques [This project is not maintained anymore]
-- [**893**Star][12d] [C++] [adafruit/adafruit_ssd1306](https://github.com/adafruit/adafruit_ssd1306) Arduino library for SSD1306 monochrome 128x64 and 128x32 OLEDs
-- [**892**Star][1m] [Py] [woj-ciech/leaklooker](https://github.com/woj-ciech/leaklooker) Find open databases - Powered by Binaryedge.io
-- [**891**Star][11m] [JS] [levskaya/jslinux-deobfuscated](https://github.com/levskaya/jslinux-deobfuscated) An old version of Mr. Bellard's JSLinux rewritten to be human readable, hand deobfuscated and annotated.
-- [**888**Star][11d] [Shell] [dominicbreuker/stego-toolkit](https://github.com/dominicbreuker/stego-toolkit) Collection of steganography tools - helps with CTF challenges
+- [**897**Star][13d] [Shell] [dominicbreuker/stego-toolkit](https://github.com/dominicbreuker/stego-toolkit) Collection of steganography tools - helps with CTF challenges
+- [**896**Star][1m] [Py] [woj-ciech/leaklooker](https://github.com/woj-ciech/leaklooker) Find open databases - Powered by Binaryedge.io
+- [**896**Star][10m] [C++] [secrary/injectproc](https://github.com/secrary/injectproc) Process Injection Techniques [This project is not maintained anymore]
+- [**896**Star][14d] [C++] [adafruit/adafruit_ssd1306](https://github.com/adafruit/adafruit_ssd1306) Arduino library for SSD1306 monochrome 128x64 and 128x32 OLEDs
+- [**894**Star][2y] [Ruby] [whitewidowscanner/whitewidow](https://github.com/whitewidowscanner/whitewidow) SQL Vulnerability Scanner
+- [**894**Star][3m] [Py] [trustedsec/hate_crack](https://github.com/trustedsec/hate_crack) A tool for automating cracking methodologies through Hashcat from the TrustedSec team.
+- [**893**Star][11m] [JS] [levskaya/jslinux-deobfuscated](https://github.com/levskaya/jslinux-deobfuscated) An old version of Mr. Bellard's JSLinux rewritten to be human readable, hand deobfuscated and annotated.
+- [**891**Star][4m] [derpopo/uabe](https://github.com/derpopo/uabe) Unity Assets Bundle Extractor
+- [**890**Star][30d] [Go] [smallstep/cli](https://github.com/smallstep/cli) 🧰 A zero trust swiss army knife for working with X509, OAuth, JWT, OATH OTP, etc.
+- [**889**Star][9d] [Py] [swisskyrepo/ssrfmap](https://github.com/swisskyrepo/ssrfmap) Automatic SSRF fuzzer and exploitation tool
+- [**888**Star][11d] [C] [buserror/simavr](https://github.com/buserror/simavr) simavr is a lean, mean and hackable AVR simulator for linux & OSX
- [**887**Star][12m] [Py] [rev3rsesecurity/webmap](https://github.com/rev3rsesecurity/webmap) Nmap Web Dashboard and Reporting
-- [**886**Star][2m] [Py] [trustedsec/hate_crack](https://github.com/trustedsec/hate_crack) A tool for automating cracking methodologies through Hashcat from the TrustedSec team.
+- [**887**Star][2y] [Perl] [p0pr0ck5/lua-resty-waf](https://github.com/p0pr0ck5/lua-resty-waf) High-performance WAF built on the OpenResty stack
+- [**886**Star][2y] [PS] [windowsexploits/exploits](https://github.com/windowsexploits/exploits) Windows Exploits
+- [**886**Star][9d] [Py] [ajinabraham/nodejsscan](https://github.com/ajinabraham/nodejsscan) NodeJsScan is a static security code scanner for Node.js applications.
- [**885**Star][4m] [C] [theofficialflow/h-encore](https://github.com/theofficialflow/h-encore) Fully chained kernel exploit for the PS Vita on firmwares 3.65-3.68
-- [**885**Star][4m] [derpopo/uabe](https://github.com/derpopo/uabe) Unity Assets Bundle Extractor
+- [**885**Star][5m] [JS] [dpnishant/appmon](https://github.com/dpnishant/appmon) an automated framework for monitoring and tampering system API calls of native macOS, iOS and android apps. It is based on Frida.
- [**884**Star][2y] [Py] [nsacyber/gosecure](https://github.com/nsacyber/goSecure) An easy to use and portable Virtual Private Network (VPN) system built with Linux and a Raspberry Pi. #nsacyber
-- [**884**Star][8d] [C] [buserror/simavr](https://github.com/buserror/simavr) simavr is a lean, mean and hackable AVR simulator for linux & OSX
-- [**883**Star][2y] [Perl] [p0pr0ck5/lua-resty-waf](https://github.com/p0pr0ck5/lua-resty-waf) High-performance WAF built on the OpenResty stack
-- [**882**Star][28d] [Go] [smallstep/cli](https://github.com/smallstep/cli) 🧰 A zero trust swiss army knife for working with X509, OAuth, JWT, OATH OTP, etc.
-- [**881**Star][2y] [PowerShell] [windowsexploits/exploits](https://github.com/windowsexploits/exploits) Windows Exploits
-- [**880**Star][1m] [Py] [swisskyrepo/ssrfmap](https://github.com/swisskyrepo/ssrfmap) Automatic SSRF fuzzer and exploitation tool
-- [**880**Star][5m] [JS] [dpnishant/appmon](https://github.com/dpnishant/appmon) Documentation:
-- [**880**Star][7d] [Py] [ajinabraham/nodejsscan](https://github.com/ajinabraham/nodejsscan) NodeJsScan is a static security code scanner for Node.js applications.
-- [**877**Star][25d] [C++] [whid-injector/whid](https://github.com/whid-injector/whid) WiFi HID Injector - An USB Rubberducky / BadUSB On Steroids.
+- [**884**Star][27d] [C++] [whid-injector/whid](https://github.com/whid-injector/whid) WiFi HID Injector - An USB Rubberducky / BadUSB On Steroids.
+- [**882**Star][4m] [Kotlin] [eycorsican/kitsunebi-android](https://github.com/eycorsican/kitsunebi-android) A fully-featured V2Ray client for Android.
+- [**879**Star][5d] [Py] [derekselander/lldb](https://github.com/derekselander/lldb) A collection of LLDB aliases/regexes and Python scripts to aid in your debugging sessions
+- [**879**Star][7d] [C] [apple/cups](https://github.com/apple/cups) a standards-based, open source printing system
+- [**878**Star][3d] [JS] [opencti-platform/opencti](https://github.com/opencti-platform/opencti) Open Cyber Threat Intelligence Platform
+- [**878**Star][3y] [bastilleresearch/mousejack](https://github.com/bastilleresearch/mousejack) MouseJack device discovery and research tools
+- [**878**Star][21d] [aptnotes/data](https://github.com/aptnotes/data) APTnotes data
+- [**877**Star][1m] [HTML] [hookmaster/frida-all-in-one](https://github.com/hookmaster/frida-all-in-one) 《FRIDA操作手册》by
+- [**877**Star][2m] [C] [504ensicslabs/lime](https://github.com/504ensicslabs/lime) LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices, such as those powered by Android. The tool supports acquiring memory either to the file system of the device or over the network. LiME is unique in that it is the first tool that allows full memory captures f…
+- [**876**Star][2d] [C] [u-boot/u-boot](https://github.com/u-boot/u-boot) "Das U-Boot" Source Tree
+- [**876**Star][4m] [CSS] [outflanknl/redelk](https://github.com/outflanknl/redelk) tracking and alarming about Blue Team activities as well as better usability in long term operations.
+- [**875**Star][10m] [C++] [wisk/medusa](https://github.com/wisk/medusa) An open source interactive disassembler
+- [**875**Star][2m] [Ruby] [w181496/web-ctf-cheatsheet](https://github.com/w181496/web-ctf-cheatsheet) Web CTF CheatSheet
- [**875**Star][2y] [Py] [marcwebbie/passpie](https://github.com/marcwebbie/passpie) Command-line password manager
-- [**875**Star][3y] [bastilleresearch/mousejack](https://github.com/bastilleresearch/mousejack) MouseJack device discovery and research tools
-- [**874**Star][10m] [C++] [wisk/medusa](https://github.com/wisk/medusa) An open source interactive disassembler
-- [**873**Star][2y] [C] [paboldin/meltdown-exploit](https://github.com/paboldin/meltdown-exploit) Meltdown exploit
-- [**873**Star][4m] [CSS] [outflanknl/redelk](https://github.com/outflanknl/redelk) Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.
-- [**873**Star][2m] [C] [504ensicslabs/lime](https://github.com/504ensicslabs/lime) LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices, such as those powered by Android. The tool supports acquiring memory either to the file system of the device or over the network. LiME is unique in that it is the first tool that allows full memory captures f…
-- [**872**Star][12d] [C] [u-boot/u-boot](https://github.com/u-boot/u-boot) "Das U-Boot" Source Tree
-- [**872**Star][7d] [JS] [opencti-platform/opencti](https://github.com/opencti-platform/opencti) Open Cyber Threat Intelligence Platform
-- [**872**Star][7d] [C] [apple/cups](https://github.com/apple/cups) a standards-based, open source printing system
-- [**871**Star][7m] [Py] [erocarrera/pefile](https://github.com/erocarrera/pefile) pefile is a Python module to read and work with PE (Portable Executable) files
-- [**871**Star][19d] [aptnotes/data](https://github.com/aptnotes/data) APTnotes data
-- [**870**Star][8m] [Py] [redacted/xkcd-password-generator](https://github.com/redacted/xkcd-password-generator) Generate secure multiword passwords/passphrases, inspired by XKCD
-- [**869**Star][3m] [Py] [w-digital-scanner/w9scan](https://github.com/w-digital-scanner/w9scan) Plug-in type web vulnerability scanner
-- [**869**Star][18d] [Go] [itchyny/bed](https://github.com/itchyny/bed) Binary editor written in Go
-- [**868**Star][2y] [C] [aircrack-ng/aircrack-ng-archive](https://github.com/aircrack-ng/aircrack-ng-archive) Pre-migration repository. New repository ➙
-- [**868**Star][5m] [Py] [derekselander/lldb](https://github.com/derekselander/lldb) A collection of LLDB aliases/regexes and Python scripts to aid in your debugging sessions
-- [**867**Star][1m] [C] [cisco/joy](https://github.com/cisco/joy) 捕获和分析网络流数据和intraflow数据,用于网络研究、取证和安全监视
+- [**875**Star][7m] [Py] [erocarrera/pefile](https://github.com/erocarrera/pefile) pefile is a Python module to read and work with PE (Portable Executable) files
+- [**874**Star][3m] [Py] [w-digital-scanner/w9scan](https://github.com/w-digital-scanner/w9scan) Plug-in type web vulnerability scanner
+- [**874**Star][8m] [Py] [redacted/xkcd-password-generator](https://github.com/redacted/xkcd-password-generator) Generate secure multiword passwords/passphrases, inspired by XKCD
+- [**872**Star][1m] [C] [cisco/joy](https://github.com/cisco/joy) 捕获和分析网络流数据和intraflow数据,用于网络研究、取证和安全监视
+- [**871**Star][2y] [C] [paboldin/meltdown-exploit](https://github.com/paboldin/meltdown-exploit) Meltdown exploit
+- [**871**Star][3m] [escapingbug/awesome-browser-exploit](https://github.com/escapingbug/awesome-browser-exploit) awesome list of browser exploitation tutorials
+- [**870**Star][1m] [C] [zhaojh329/rtty](https://github.com/zhaojh329/rtty) Access your device's terminal from anywhere via the web.
+- [**870**Star][20d] [Go] [itchyny/bed](https://github.com/itchyny/bed) Binary editor written in Go
+- [**870**Star][1m] [Py] [al0ne/vxscan](https://github.com/al0ne/vxscan) python3写的综合扫描工具,主要用来存活验证,敏感文件探测(目录扫描/js泄露接口/html注释泄露),WAF/CDN识别,端口扫描,指纹/服务识别,操作系统识别,POC扫描,SQL注入,绕过CDN,查询旁站等功能,主要用来甲方自测或乙方授权测试,请勿用来搞破坏。
+- [**870**Star][6m] [Go] [40t/go-sniffer](https://github.com/40t/go-sniffer)
+- [**867**Star][2y] [C] [aircrack-ng/aircrack-ng-archive](https://github.com/aircrack-ng/aircrack-ng-archive) Pre-migration repository. New repository ➙
- [**867**Star][3m] [Java] [googlearchive/android-bluetoothlegatt](https://github.com/googlearchive/android-BluetoothLeGatt) Migrated:
-- [**867**Star][1m] [HTML] [hookmaster/frida-all-in-one](https://github.com/hookmaster/frida-all-in-one) 《FRIDA操作手册》by
-- [**866**Star][1m] [C] [zhaojh329/rtty](https://github.com/zhaojh329/rtty) Access your device's terminal from anywhere via the web.
-- [**865**Star][2m] [Ruby] [w181496/web-ctf-cheatsheet](https://github.com/w181496/web-ctf-cheatsheet) Web CTF CheatSheet
-- [**864**Star][2y] [C++] [illera88/ponce](https://github.com/illera88/ponce) Symbolic Execution just one-click away!
-- [**864**Star][10m] [Shell] [esc0rtd3w/wifi-hacker](https://github.com/esc0rtd3w/wifi-hacker) Shell Script For Attacking Wireless Connections Using Built-In Kali Tools. Supports All Securities (WEP, WPS, WPA, WPA2)
-- [**863**Star][8m] [C++] [google/security-research-pocs](https://github.com/google/security-research-pocs) Proof-of-concept codes created as part of security research done by Google Security Team.
-- [**863**Star][4m] [Go] [fireeye/gocrack](https://github.com/fireeye/gocrack) a management frontend for password cracking tools written in Go
-- [**863**Star][3m] [escapingbug/awesome-browser-exploit](https://github.com/escapingbug/awesome-browser-exploit) awesome list of browser exploitation tutorials
-- [**862**Star][4m] [Kotlin] [eycorsican/kitsunebi-android](https://github.com/eycorsican/kitsunebi-android) A fully-featured V2Ray client for Android.
-- [**862**Star][10m] [Visual Basic] [mdsecactivebreach/sharpshooter](https://github.com/mdsecactivebreach/sharpshooter) Payload Generation Framework
+- [**867**Star][8m] [C++] [google/security-research-pocs](https://github.com/google/security-research-pocs) Proof-of-concept codes created as part of security research done by Google Security Team.
+- [**867**Star][4m] [Go] [fireeye/gocrack](https://github.com/fireeye/gocrack) a management frontend for password cracking tools written in Go
+- [**866**Star][10m] [Shell] [esc0rtd3w/wifi-hacker](https://github.com/esc0rtd3w/wifi-hacker) Shell Script For Attacking Wireless Connections Using Built-In Kali Tools. Supports All Securities (WEP, WPS, WPA, WPA2)
+- [**865**Star][10m] [Visual Basic .NET] [mdsecactivebreach/sharpshooter](https://github.com/mdsecactivebreach/sharpshooter) Payload Generation Framework
+- [**865**Star][2y] [C++] [illera88/ponce](https://github.com/illera88/ponce) Symbolic Execution just one-click away!
+- [**865**Star][8d] [PHP] [ambionics/phpggc](https://github.com/ambionics/phpggc) PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.
+- [**863**Star][9d] [Batchfile] [mr-xn/burpsuite-collections](https://github.com/mr-xn/burpsuite-collections) BurpSuite收集:包括不限于 Burp 文章、破解版、插件(非BApp Store)、汉化等相关教程,欢迎添砖加瓦---burpsuite-pro burpsuite-extender burpsuite cracked-version hackbar hacktools fuzzing fuzz-testing burp-plugin burp-extensions bapp-store brute-force-attacks brute-force-passwords waf sqlmap jar
+- [**863**Star][15d] [Java] [lamster2018/easyprotector](https://github.com/lamster2018/easyprotector) a simple way to check root/virtual app/emulator/xposed framework/tracer/debugger.
+- [**862**Star][3d] [explife0011/awesome-windows-kernel-security-development](https://github.com/explife0011/awesome-windows-kernel-security-development) windows kernel security development
+- [**861**Star][10d] [Py] [jimmy201602/webterminal](https://github.com/jimmy201602/webterminal) ssh rdp vnc telnet sftp bastion/jump web putty xshell terminal jumpserver audit realtime monitor rz/sz 堡垒机 云桌面 linux devops sftp websocket file management rz/sz 自动化运维 审计 录像 文件管理 sftp上传 实时监控 录像回放 网页版rz/sz上传下载 django
- [**860**Star][2m] [jonascz/how-to-prevent-scraping](https://github.com/jonascz/how-to-prevent-scraping) The ultimate guide on preventing Website Scraping
-- [**859**Star][6m] [Go] [40t/go-sniffer](https://github.com/40t/go-sniffer)
-- [**857**Star][7m] [Py] [s0md3v/recondog](https://github.com/s0md3v/ReconDog) Reconnaissance Swiss Army Knife
-- [**857**Star][1m] [Py] [al0ne/vxscan](https://github.com/al0ne/vxscan) python3写的综合扫描工具,主要用来存活验证,敏感文件探测(目录扫描/js泄露接口/html注释泄露),WAF/CDN识别,端口扫描,指纹/服务识别,操作系统识别,POC扫描,SQL注入,绕过CDN,查询旁站等功能,主要用来甲方自测或乙方授权测试,请勿用来搞破坏。
-- [**856**Star][1y] [Ruby] [enjoiz/xxeinjector](https://github.com/enjoiz/xxeinjector) Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.
-- [**855**Star][8d] [explife0011/awesome-windows-kernel-security-development](https://github.com/explife0011/awesome-windows-kernel-security-development) windows kernel security development
-- [**854**Star][10m] [Shell] [shadowsocks/luci-app-shadowsocks](https://github.com/shadowsocks/luci-app-shadowsocks) OpenWrt/LEDE LuCI for Shadowsocks-libev
-- [**854**Star][2y] [CoffeeScript] [onplus/shadowsocks-heroku](https://github.com/onplus/shadowsocks-heroku) 一键部署 Free Shadowsocks-Heroku
-- [**853**Star][4m] [Py] [lijiejie/bbscan](https://github.com/lijiejie/bbscan) A vulnerability scanner focus on scanning large number of targets in short time with a minimal set of rules.
-- [**852**Star][1m] [ignitetechnologies/privilege-escalation](https://github.com/ignitetechnologies/privilege-escalation) This cheasheet is aimed at the CTF Players and Beginners to help them understand the fundamentals of Privilege Escalation with examples.
-- [**852**Star][7d] [Py] [circl/ail-framework](https://github.com/circl/ail-framework) AIL framework - Analysis Information Leak framework
+- [**860**Star][7m] [Py] [s0md3v/recondog](https://github.com/s0md3v/ReconDog) Reconnaissance Swiss Army Knife
+- [**858**Star][10m] [Shell] [shadowsocks/luci-app-shadowsocks](https://github.com/shadowsocks/luci-app-shadowsocks) OpenWrt/LEDE LuCI for Shadowsocks-libev
+- [**858**Star][18d] [Py] [ticarpi/jwt_tool](https://github.com/ticarpi/jwt_tool) a toolkit for validating, forging and cracking JWTs (JSON Web Tokens).
+- [**858**Star][2m] [ignitetechnologies/privilege-escalation](https://github.com/ignitetechnologies/privilege-escalation) This cheasheet is aimed at the CTF Players and Beginners to help them understand the fundamentals of Privilege Escalation with examples.
+- [**858**Star][1y] [Ruby] [enjoiz/xxeinjector](https://github.com/enjoiz/xxeinjector) Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.
+- [**857**Star][4d] [JS] [mellow-io/mellow](https://github.com/mellow-io/mellow) Mellow is a rule-based global transparent proxy client for Windows, macOS and Linux.
+- [**857**Star][2d] [Py] [circl/ail-framework](https://github.com/circl/ail-framework) AIL framework - Analysis Information Leak framework
+- [**856**Star][4m] [Py] [lijiejie/bbscan](https://github.com/lijiejie/bbscan) A vulnerability scanner focus on scanning large number of targets in short time with a minimal set of rules.
+- [**855**Star][2y] [CoffeeScript] [onplus/shadowsocks-heroku](https://github.com/onplus/shadowsocks-heroku) 一键部署 Free Shadowsocks-Heroku
+- [**855**Star][3d] [C++] [google/uiforetw](https://github.com/google/uiforetw) User interface for recording and managing ETW traces
+- [**854**Star][10m] [Shell] [thelinuxchoice/userrecon](https://github.com/thelinuxchoice/userrecon) Find usernames across over 75 social networks
+- [**854**Star][3m] [Py] [649/memcrashed-ddos-exploit](https://github.com/649/memcrashed-ddos-exploit) DDoS attack tool for sending forged UDP packets to vulnerable Memcached servers obtained using Shodan API
+- [**853**Star][2y] [PS] [curi0usjack/luckystrike](https://github.com/curi0usJack/luckystrike) A PowerShell based utility for the creation of malicious Office macro documents.
+- [**853**Star][2m] [JS] [vksrc/github-monitor](https://github.com/vksrc/github-monitor) Github Sensitive Information Leakage Monitor(Github信息泄漏监控系统)
+- [**853**Star][2m] [Go] [ukhomeoffice/repo-security-scanner](https://github.com/ukhomeoffice/repo-security-scanner) CLI tool that finds secrets accidentally committed to a git repo, eg passwords, private keys
+- [**853**Star][7m] [Go] [misecurity/x-patrol](https://github.com/misecurity/x-patrol) github泄露扫描系统
+- [**852**Star][2d] [C++] [henrypp/simplewall](https://github.com/henrypp/simplewall) Simple tool to configure Windows Filtering Platform (WFP) which can configure network activity on your computer.
+- [**852**Star][3y] [C++] [0vercl0k/rp](https://github.com/0vercl0k/rp) rp++ is a full-cpp written tool that aims to find ROP sequences in PE/Elf/Mach-O x86/x64 binaries. It is open-source and has been tested on several OS: Debian / Windows 8.1 / Mac OSX Lion (10.7.3). Moreover, it is x64 compatible and supports Intel syntax. Standalone executables can also be directly downloaded.
- [**851**Star][1m] [Go] [sahilm/fuzzy](https://github.com/sahilm/fuzzy) Go library that provides fuzzy string matching optimized for filenames and code symbols in the style of Sublime Text, VSCode, IntelliJ IDEA et al.
-- [**851**Star][7m] [Go] [misecurity/x-patrol](https://github.com/misecurity/x-patrol) github泄露扫描系统
-- [**851**Star][3m] [Py] [649/memcrashed-ddos-exploit](https://github.com/649/memcrashed-ddos-exploit) DDoS attack tool for sending forged UDP packets to vulnerable Memcached servers obtained using Shodan API
-- [**850**Star][2m] [Go] [ukhomeoffice/repo-security-scanner](https://github.com/ukhomeoffice/repo-security-scanner) CLI tool that finds secrets accidentally committed to a git repo, eg passwords, private keys
-- [**850**Star][3y] [Py] [hubert3/isniff-gps](https://github.com/hubert3/isniff-gps) Passive sniffing tool for capturing and visualising WiFi location data disclosed by iOS devices
-- [**850**Star][15d] [PHP] [ambionics/phpggc](https://github.com/ambionics/phpggc) PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.
-- [**849**Star][2y] [PowerShell] [curi0usjack/luckystrike](https://github.com/curi0usJack/luckystrike) A PowerShell based utility for the creation of malicious Office macro documents.
-- [**849**Star][10m] [Shell] [thelinuxchoice/userrecon](https://github.com/thelinuxchoice/userrecon) Find usernames across over 75 social networks
-- [**847**Star][12m] [PHP] [walkor/shadowsocks-php](https://github.com/walkor/shadowsocks-php) A php port of shadowsocks based on workerman. A socks5 proxy written in PHP.
-- [**847**Star][2m] [JS] [vksrc/github-monitor](https://github.com/vksrc/github-monitor) Github Sensitive Information Leakage Monitor(Github信息泄漏监控系统)
+- [**851**Star][13d] [Py] [nil0x42/phpsploit](https://github.com/nil0x42/phpsploit) Stealth post-exploitation framework
+- [**851**Star][3y] [Py] [hubert3/isniff-gps](https://github.com/hubert3/isniff-gps) Passive sniffing tool for capturing and visualising WiFi location data disclosed by iOS devices
+- [**851**Star][7d] [JS] [cloudsploit/scans](https://github.com/cloudsploit/scans) Cloud security configuration checks
+- [**850**Star][1m] [C] [spacehuhn/wifi_ducky](https://github.com/spacehuhn/wifi_ducky) Upload, save and run keystroke injection payloads with an ESP8266 + ATMEGA32U4
+- [**849**Star][3d] [C] [zerbea/hcxtools](https://github.com/zerbea/hcxtools) Portable solution for capturing wlan traffic and conversion to hashcat formats (recommended by hashcat) and to John the Ripper formats. hcx: h = hash, c = capture, convert and calculate candidates, x = different hashtypes
+- [**849**Star][29d] [Roff] [slimm609/checksec.sh](https://github.com/slimm609/checksec.sh) a bash script to check the properties of executables (like PIE, RELRO, PaX, Canaries, ASLR, Fortify Source).
+- [**849**Star][5d] [Py] [lylemi/learn-web-hacking](https://github.com/lylemi/learn-web-hacking) Study Notes For Web Hacking
+- [**848**Star][12m] [PHP] [walkor/shadowsocks-php](https://github.com/walkor/shadowsocks-php) A php port of shadowsocks based on workerman. A socks5 proxy written in PHP.
- [**847**Star][4y] [utkusen/hidden-tear](https://github.com/utkusen/hidden-tear) an open source ransomware honeypot
-- [**846**Star][11d] [Py] [nil0x42/phpsploit](https://github.com/nil0x42/phpsploit) Stealth post-exploitation framework
-- [**846**Star][13d] [Java] [lamster2018/easyprotector](https://github.com/lamster2018/easyprotector) 一行代码检测XP/调试/多开/模拟器/root
-- [**846**Star][17d] [JS] [cloudsploit/scans](https://github.com/cloudsploit/scans) Cloud security configuration checks
-- [**846**Star][3y] [C++] [0vercl0k/rp](https://github.com/0vercl0k/rp) rp++ is a full-cpp written tool that aims to find ROP sequences in PE/Elf/Mach-O x86/x64 binaries. It is open-source and has been tested on several OS: Debian / Windows 8.1 / Mac OSX Lion (10.7.3). Moreover, it is x64 compatible and supports Intel syntax. Standalone executables can also be directly downloaded.
+- [**847**Star][2y] [Py] [nccgroup/demiguise](https://github.com/nccgroup/demiguise) HTA encryption tool for RedTeams
+- [**847**Star][3m] [Py] [anorov/pysocks](https://github.com/anorov/pysocks) A SOCKS proxy client and wrapper for Python.
+- [**846**Star][2d] [Shell] [firmadyne/firmadyne](https://github.com/firmadyne/firmadyne) Platform for emulation and dynamic analysis of Linux-based firmware
+- [**846**Star][3y] [C] [examplecode/mproxy](https://github.com/examplecode/mproxy) c 语言实现的一个最小的http代理,支持翻墙
- [**845**Star][1y] [Py] [kgretzky/evilginx](https://github.com/kgretzky/evilginx) man-in-the-middle attack framework used for phishing credentials and session cookies of any web service
-- [**845**Star][3m] [Py] [anorov/pysocks](https://github.com/anorov/pysocks) A SOCKS proxy client and wrapper for Python.
-- [**844**Star][2y] [Py] [nccgroup/demiguise](https://github.com/nccgroup/demiguise) HTA encryption tool for RedTeams
-- [**843**Star][1m] [C] [spacehuhn/wifi_ducky](https://github.com/spacehuhn/wifi_ducky) Upload, save and run keystroke injection payloads with an ESP8266 + ATMEGA32U4
-- [**843**Star][8m] [JS] [serpicoproject/serpico](https://github.com/serpicoproject/serpico) SimplE RePort wrIting and COllaboration tool
-- [**842**Star][10d] [Py] [lylemi/learn-web-hacking](https://github.com/lylemi/learn-web-hacking) Study Notes For Web Hacking / Web安全学习笔记
+- [**844**Star][3m] [Py] [x90skysn3k/brutespray](https://github.com/x90skysn3k/brutespray) Brute-Forcing from Nmap output - Automatically attempts default creds on found services.
+- [**844**Star][8m] [JS] [serpicoproject/serpico](https://github.com/serpicoproject/serpico) a penetration testing report generation and collaboration tool
+- [**844**Star][3d] [C++] [openzwave/open-zwave](https://github.com/openzwave/open-zwave) a C++ library to control Z-Wave Networks via a USB Z-Wave Controller.
+- [**844**Star][3d] [YARA] [neo23x0/signature-base](https://github.com/neo23x0/signature-base) Signature base for my scanner tools
+- [**843**Star][6m] [C] [brendan-rius/c-jwt-cracker](https://github.com/brendan-rius/c-jwt-cracker) JWT brute force cracker written in C
- [**842**Star][3y] [Shell] [hellofwy/ss-bash](https://github.com/hellofwy/ss-bash) Shadowsocks流量管理脚本
-- [**842**Star][30d] [C++] [google/uiforetw](https://github.com/google/uiforetw) User interface for recording and managing ETW traces
-- [**842**Star][15d] [C] [emsec/chameleonmini](https://github.com/emsec/chameleonmini) The ChameleonMini is a versatile contactless smartcard emulator compliant to NFC. The ChameleonMini was developed by
-- [**841**Star][27d] [Roff] [slimm609/checksec.sh](https://github.com/slimm609/checksec.sh) a bash script to check the properties of executables (like PIE, RELRO, PaX, Canaries, ASLR, Fortify Source).
-- [**841**Star][8d] [C++] [openzwave/open-zwave](https://github.com/openzwave/open-zwave) a C++ library to control Z-Wave Networks via a USB Z-Wave Controller.
-- [**841**Star][3y] [C] [gurnec/hashcheck](https://github.com/gurnec/hashcheck) HashCheck Shell Extension for Windows with added SHA2, SHA3, and multithreading; originally from code.kliu.org
-- [**840**Star][12d] [C++] [seladb/pcapplusplus](https://github.com/seladb/pcapplusplus) PcapPlusPlus is a multiplatform C++ library for capturing, parsing and crafting of network packets. It is designed to be efficient, powerful and easy to use. It provides C++ wrappers for the most popular packet processing engines such as libpcap, WinPcap, DPDK and PF_RING.
-- [**840**Star][21d] [C++] [henrypp/simplewall](https://github.com/henrypp/simplewall) Simple tool to configure Windows Filtering Platform (WFP) which can configure network activity on your computer.
-- [**840**Star][3m] [Shell] [firmadyne/firmadyne](https://github.com/firmadyne/firmadyne) Platform for emulation and dynamic analysis of Linux-based firmware
-- [**838**Star][26d] [YARA] [neo23x0/signature-base](https://github.com/neo23x0/signature-base) Signature base for my scanner tools
-- [**837**Star][10d] [C] [zerbea/hcxtools](https://github.com/zerbea/hcxtools) Portable solution for capturing wlan traffic and conversion to hashcat formats (recommended by hashcat) and to John the Ripper formats. hcx: h = hash, c = capture, convert and calculate candidates, x = different hashtypes
-- [**837**Star][3m] [Py] [x90skysn3k/brutespray](https://github.com/x90skysn3k/brutespray) Brute-Forcing from Nmap output - Automatically attempts default creds on found services.
-- [**837**Star][2m] [Go] [henson/proxypool](https://github.com/henson/proxypool) Golang实现的IP代理池
-- [**836**Star][1m] [C] [facebook/transform360](https://github.com/facebook/transform360) Transform360 is an equirectangular to cubemap transform for 360 video.
-- [**836**Star][1y] [HTML] [ustayready/credsniper](https://github.com/ustayready/credsniper) CredSniper is a phishing framework written with the Python micro-framework Flask and Jinja2 templating which supports capturing 2FA tokens.
-- [**836**Star][7d] [trimstray/iptables-essentials](https://github.com/trimstray/iptables-essentials) Common Firewall Rules and Commands.
-- [**836**Star][16d] [Py] [ticarpi/jwt_tool](https://github.com/ticarpi/jwt_tool) a toolkit for validating, forging and cracking JWTs (JSON Web Tokens).
-- [**835**Star][7d] [Java] [sleuthkit/autopsy](https://github.com/sleuthkit/autopsy) Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by law enforcement, military, and corporate examiners to investigate what happened on a computer. You can even use it to recover photos from your camera's memory card.
-- [**835**Star][3y] [Py] [ring04h/weakfilescan](https://github.com/ring04h/weakfilescan) 动态多线程敏感信息泄露检测工具
-- [**835**Star][7m] [Shell] [niklasb/libc-database](https://github.com/niklasb/libc-database) Build a database of libc offsets to simplify exploitation
-- [**835**Star][1y] [Shell] [kpwn/iosre](https://github.com/kpwn/iosre) iOS Reverse Engineering
-- [**835**Star][13d] [Py] [jordanpotti/awsbucketdump](https://github.com/jordanpotti/awsbucketdump) Security Tool to Look For Interesting Files in S3 Buckets
-- [**834**Star][25d] [PHP] [raikia/fiercephish](https://github.com/Raikia/FiercePhish) FiercePhish is a full-fledged phishing framework to manage all phishing engagements. It allows you to track separate phishing campaigns, schedule sending of emails, and much more.
-- [**834**Star][6m] [C] [brendan-rius/c-jwt-cracker](https://github.com/brendan-rius/c-jwt-cracker) JWT brute force cracker written in C
-- [**834**Star][26d] [C#] [borntoberoot/networkmanager](https://github.com/borntoberoot/networkmanager) A powerful tool for managing networks and troubleshoot network problems!
-- [**833**Star][7m] [Objective-C] [sevenbits/mac-linux-usb-loader](https://github.com/sevenbits/mac-linux-usb-loader) Boot Linux on your Mac, easily
-- [**833**Star][5y] [Py] [pentestmonkey/windows-privesc-check](https://github.com/pentestmonkey/windows-privesc-check) Standalone Executable to Check for Simple Privilege Escalation Vectors on Windows Systems
-- [**833**Star][3m] [JS] [creditease-sec/insight](https://github.com/creditease-sec/insight) 洞察-宜信集应用系统资产管理、漏洞全生命周期管理、安全知识库管理三位一体的平台。
-- [**832**Star][13d] [Haskell] [galoisinc/cryptol](https://github.com/galoisinc/cryptol) The Language of Cryptography
-- [**831**Star][12d] [v33ru/iotsecurity101](https://github.com/v33ru/iotsecurity101) From IoT Pentesting to IoT Security
-- [**830**Star][25d] [Batchfile] [mr-xn/burpsuite-collections](https://github.com/mr-xn/burpsuite-collections) BurpSuite收集:包括不限于 Burp 文章、破解版、插件(非BApp Store)、汉化等相关教程,欢迎添砖加瓦---burpsuite-pro burpsuite-extender burpsuite cracked-version hackbar hacktools fuzzing fuzz-testing burp-plugin burp-extensions bapp-store brute-force-attacks brute-force-passwords waf sqlmap jar
-- [**830**Star][1m] [cugu/awesome-forensics](https://github.com/cugu/awesome-forensics) A curated list of awesome forensic analysis tools and resources
-- [**829**Star][5m] [Py] [ma1co/sony-pmca-re](https://github.com/ma1co/sony-pmca-re) Reverse engineering Sony PlayMemories Camera Apps
+- [**842**Star][3y] [C] [gurnec/hashcheck](https://github.com/gurnec/hashcheck) HashCheck Shell Extension for Windows with added SHA2, SHA3, and multithreading; originally from code.kliu.org
+- [**842**Star][5d] [C] [emsec/chameleonmini](https://github.com/emsec/chameleonmini) The ChameleonMini is a versatile contactless smartcard emulator compliant to NFC. The ChameleonMini was developed by
+- [**841**Star][9d] [trimstray/iptables-essentials](https://github.com/trimstray/iptables-essentials) Common Firewall Rules and Commands.
+- [**841**Star][3y] [Py] [ring04h/weakfilescan](https://github.com/ring04h/weakfilescan) 动态多线程敏感信息泄露检测工具
+- [**840**Star][2m] [Go] [henson/proxypool](https://github.com/henson/proxypool) Golang实现的IP代理池
+- [**840**Star][5m] [Java] [dragonite-network/dragonite-java](https://github.com/dragonite-network/dragonite-java) A reliable application level data transport protocol based on UDP, highly optimized for lossy & unstable networks. (Java version)
+- [**840**Star][28d] [C#] [borntoberoot/networkmanager](https://github.com/borntoberoot/networkmanager) A powerful tool for managing networks and troubleshoot network problems!
+- [**839**Star][15d] [Py] [jordanpotti/awsbucketdump](https://github.com/jordanpotti/awsbucketdump) Security Tool to Look For Interesting Files in S3 Buckets
+- [**838**Star][1m] [C] [facebook/transform360](https://github.com/facebook/transform360) Transform360 is an equirectangular to cubemap transform for 360 video.
+- [**838**Star][1y] [HTML] [ustayready/credsniper](https://github.com/ustayready/credsniper) CredSniper is a phishing framework written with the Python micro-framework Flask and Jinja2 templating which supports capturing 2FA tokens.
+- [**837**Star][27d] [PHP] [raikia/fiercephish](https://github.com/Raikia/FiercePhish) FiercePhish is a full-fledged phishing framework to manage all phishing engagements. It allows you to track separate phishing campaigns, schedule sending of emails, and much more.
+- [**837**Star][5y] [Py] [pentestmonkey/windows-privesc-check](https://github.com/pentestmonkey/windows-privesc-check) Standalone Executable to Check for Simple Privilege Escalation Vectors on Windows Systems
+- [**837**Star][3m] [JS] [creditease-sec/insight](https://github.com/creditease-sec/insight) 洞察-宜信集应用系统资产管理、漏洞全生命周期管理、安全知识库管理三位一体的平台。
+- [**836**Star][2d] [Java] [sleuthkit/autopsy](https://github.com/sleuthkit/autopsy) Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by law enforcement, military, and corporate examiners to investigate what happened on a computer. You can even use it to recover photos from your camera's memory card.
+- [**836**Star][7m] [Shell] [niklasb/libc-database](https://github.com/niklasb/libc-database) Build a database of libc offsets to simplify exploitation
+- [**836**Star][1y] [Shell] [kpwn/iosre](https://github.com/kpwn/iosre) iOS Reverse Engineering
+- [**833**Star][14d] [v33ru/iotsecurity101](https://github.com/v33ru/iotsecurity101) From IoT Pentesting to IoT Security
+- [**833**Star][7m] [ObjC] [sevenbits/mac-linux-usb-loader](https://github.com/sevenbits/mac-linux-usb-loader) Boot Linux on your Mac, easily
+- [**832**Star][5d] [Haskell] [galoisinc/cryptol](https://github.com/galoisinc/cryptol) The Language of Cryptography
+- [**832**Star][1m] [cugu/awesome-forensics](https://github.com/cugu/awesome-forensics) A curated list of awesome forensic analysis tools and resources
+- [**831**Star][17d] [C#] [pwntester/ysoserial.net](https://github.com/pwntester/ysoserial.net) Deserialization payload generator for a variety of .NET formatters
+- [**831**Star][5m] [Py] [ma1co/sony-pmca-re](https://github.com/ma1co/sony-pmca-re) Reverse engineering Sony PlayMemories Camera Apps
+- [**830**Star][2d] [C++] [tasvideos/bizhawk](https://github.com/tasvideos/bizhawk) BizHawk is a multi-system emulator written in C#. BizHawk provides nice features for casual gamers such as full screen, and joypad support in addition to full rerecording and debugging tools for all system cores.
+- [**830**Star][24d] [redhuntlabs/redhunt-os](https://github.com/redhuntlabs/redhunt-os) Virtual Machine for Adversary Emulation and Threat Hunting
+- [**830**Star][9m] [Py] [ietf-wg-acme/acme](https://github.com/ietf-wg-acme/acme) A protocol for automating certificate issuance
+- [**829**Star][5y] [halfkiss/zjdroid](https://github.com/halfkiss/zjdroid) Android app dynamic reverse tool based on Xposed framework.
+- [**828**Star][4y] [etsy/midas](https://github.com/etsy/midas) Mac Intrusion Detection Analysis System
+- [**827**Star][7m] [Go] [tiagorlampert/chaos](https://github.com/tiagorlampert/chaos) a PoC that allow generate payloads and control remote operating system
- [**827**Star][11m] [sandboxescaper/randomrepo](https://github.com/sandboxescaper/randomrepo) Repo for random stuff
-- [**827**Star][23d] [Go] [ffuf/ffuf](https://github.com/ffuf/ffuf) Fast web fuzzer written in Go
-- [**826**Star][22d] [redhuntlabs/redhunt-os](https://github.com/redhuntlabs/redhunt-os) Virtual Machine for Adversary Emulation and Threat Hunting
-- [**826**Star][4y] [etsy/midas](https://github.com/etsy/midas) Mac Intrusion Detection Analysis System
+- [**826**Star][7m] [Batchfile] [kkkgo/kms_vl_all](https://github.com/kkkgo/kms_vl_all)
+- [**826**Star][9d] [JS] [cypress-io/cypress-example-recipes](https://github.com/cypress-io/cypress-example-recipes) Various recipes for testing common scenarios with Cypress
- [**825**Star][2y] [PHP] [zhufaner/shadowsocks-manage-system](https://github.com/zhufaner/shadowsocks-manage-system) 科学上网管理系统
-- [**824**Star][27d] [Py] [salesforce/ja3](https://github.com/salesforce/ja3) a standard for creating SSL client fingerprints in an easy to produce and shareable way.
-- [**824**Star][9m] [Py] [ietf-wg-acme/acme](https://github.com/ietf-wg-acme/acme) A protocol for automating certificate issuance
-- [**823**Star][2m] [C++] [redasmorg/redasm](https://github.com/redasmorg/redasm) The OpenSource Disassembler
-- [**823**Star][5y] [halfkiss/zjdroid](https://github.com/halfkiss/zjdroid) Android app dynamic reverse tool based on Xposed framework.
-- [**822**Star][7d] [C++] [tasvideos/bizhawk](https://github.com/tasvideos/bizhawk) BizHawk is a multi-system emulator written in C#. BizHawk provides nice features for casual gamers such as full screen, and joypad support in addition to full rerecording and debugging tools for all system cores.
-- [**822**Star][4y] [PowerShell] [clymb3r/powershell](https://github.com/clymb3r/powershell) Useful PowerShell scripts
-- [**821**Star][7m] [Go] [tiagorlampert/chaos](https://github.com/tiagorlampert/chaos) a PoC that allow generate payloads and control remote operating system
-- [**820**Star][1m] [Py] [corelan/mona](https://github.com/corelan/mona) Corelan Repository for mona.py
-- [**819**Star][6y] [Py] [ilektrojohn/creepy](https://github.com/ilektrojohn/creepy) A geolocation OSINT tool. Offers geolocation information gathering through social networking platforms.
-- [**819**Star][16d] [Py] [yampelo/beagle](https://github.com/yampelo/beagle) Beagle is an incident response and digital forensics tool which transforms security logs and data into graphs.
-- [**819**Star][7d] [GLSL] [khronosgroup/spirv-cross](https://github.com/khronosgroup/spirv-cross) a practical tool and library for performing reflection on SPIR-V and disassembling SPIR-V back to high level languages.
-- [**818**Star][15d] [C#] [pwntester/ysoserial.net](https://github.com/pwntester/ysoserial.net) Deserialization payload generator for a variety of .NET formatters
-- [**818**Star][21d] [C] [emmericp/ixy](https://github.com/emmericp/ixy) Simple userspace packet processing for educational purposes
-- [**817**Star][6m] [numirias/security](https://github.com/numirias/security) Some of my security stuff and vulnerabilities. Nothing advanced. More to come.
-- [**816**Star][1m] [Java] [stealthcopter/androidnetworktools](https://github.com/stealthcopter/androidnetworktools) Set of useful android network tools
-- [**816**Star][7d] [cveproject/cvelist](https://github.com/cveproject/cvelist) Pilot program for CVE submission through GitHub
-- [**815**Star][2m] [Py] [jeffzh3ng/fuxi](https://github.com/jeffzh3ng/fuxi) Penetration Testing Platform
-- [**815**Star][19d] [PHP] [symfony/security-csrf](https://github.com/symfony/security-csrf) The Security CSRF (cross-site request forgery) component provides a class CsrfTokenManager for generating and validating CSRF tokens.
-- [**815**Star][27d] [Elixir] [nccgroup/sobelow](https://github.com/nccgroup/sobelow) Security-focused static analysis for the Phoenix Framework
-- [**815**Star][7d] [JS] [cypress-io/cypress-example-recipes](https://github.com/cypress-io/cypress-example-recipes) Various recipes for testing common scenarios with Cypress
-- [**815**Star][2y] [PowerShell] [besimorhino/powercat](https://github.com/besimorhino/powercat) netshell features all in version 2 powershell
-- [**814**Star][27d] [C] [rust-fuzz/afl.rs](https://github.com/rust-fuzz/afl.rs)
+- [**825**Star][21d] [PHP] [symfony/security-csrf](https://github.com/symfony/security-csrf) a class CsrfTokenManager for generating and validating CSRF tokens
+- [**825**Star][29d] [Py] [salesforce/ja3](https://github.com/salesforce/ja3) a standard for creating SSL client fingerprints in an easy to produce and shareable way.
+- [**825**Star][2m] [C++] [redasmorg/redasm](https://github.com/redasmorg/redasm) The OpenSource Disassembler
+- [**824**Star][3d] [GLSL] [khronosgroup/spirv-cross](https://github.com/khronosgroup/spirv-cross) a practical tool and library for performing reflection on SPIR-V and disassembling SPIR-V back to high level languages.
+- [**824**Star][5m] [Shell] [danielmiessler/robotsdisallowed](https://github.com/danielmiessler/robotsdisallowed) A curated list of the most common and most interesting robots.txt disallowed directories.
+- [**824**Star][4y] [PS] [clymb3r/powershell](https://github.com/clymb3r/powershell) Useful PowerShell scripts
+- [**823**Star][1m] [Py] [corelan/mona](https://github.com/corelan/mona) Corelan Repository for mona.py
+- [**823**Star][2y] [PS] [besimorhino/powercat](https://github.com/besimorhino/powercat) netshell features all in version 2 powershell
+- [**822**Star][24d] [Shell] [zfl9/ss-tproxy](https://github.com/zfl9/ss-tproxy) SS/SSR/V2Ray/Socks5 透明代理 for Linux
+- [**822**Star][2d] [Py] [kerlomz/captcha_trainer](https://github.com/kerlomz/captcha_trainer) This project is based on CNN5/ResNet+BLSTM/LSTM/GRU/SRU/BSRU+CTC to realize verification code identification. This project is only for training the model.
+- [**821**Star][6y] [Py] [ilektrojohn/creepy](https://github.com/ilektrojohn/creepy) A geolocation OSINT tool. Offers geolocation information gathering through social networking platforms.
+- [**821**Star][9d] [Py] [yampelo/beagle](https://github.com/yampelo/beagle) Beagle is an incident response and digital forensics tool which transforms security logs and data into graphs.
+- [**821**Star][8d] [Elixir] [nccgroup/sobelow](https://github.com/nccgroup/sobelow) Security-focused static analysis for the Phoenix Framework
+- [**821**Star][2d] [cveproject/cvelist](https://github.com/cveproject/cvelist) Pilot program for CVE submission through GitHub
+- [**820**Star][24d] [C] [emmericp/ixy](https://github.com/emmericp/ixy) Simple userspace packet processing for educational purposes
+- [**819**Star][1m] [Java] [stealthcopter/androidnetworktools](https://github.com/stealthcopter/androidnetworktools) Set of useful android network tools
+- [**819**Star][2m] [Py] [jeffzh3ng/fuxi](https://github.com/jeffzh3ng/fuxi) Penetration Testing Platform
+- [**819**Star][2m] [AutoIt] [bioruebe/uniextract2](https://github.com/bioruebe/uniextract2) Universal Extractor 2 is an unofficial updated and extended version of the original UniExtract by Jared Breland. It brings several hundred changes including community-wanted ones such as a batch mode, auto-updater and scan-only-functionality.
+- [**818**Star][6m] [numirias/security](https://github.com/numirias/security) Some of my security stuff and vulnerabilities. Nothing advanced. More to come.
+- [**817**Star][2m] [Shell] [shr3ddersec/shr3dkit](https://github.com/shr3ddersec/shr3dkit) Red Team Tool Kit
+- [**816**Star][29d] [C] [rust-fuzz/afl.rs](https://github.com/rust-fuzz/afl.rs)
- [**814**Star][2y] [Py] [pirate/security-growler](https://github.com/pirate/security-growler)
-- [**813**Star][5m] [Shell] [danielmiessler/robotsdisallowed](https://github.com/danielmiessler/robotsdisallowed) A curated list of the most common and most interesting robots.txt disallowed directories.
-- [**812**Star][8d] [JS] [mellow-io/mellow](https://github.com/mellow-io/mellow) Mellow is a rule-based global transparent proxy client for Windows, macOS and Linux.
-- [**812**Star][2y] [Ruby] [elevenpaths/eternalblue-doublepulsar-metasploit](https://github.com/elevenpaths/eternalblue-doublepulsar-metasploit) Module of Metasploit to exploit the vulnerability Eternalblue-Doublepulsar.
-- [**811**Star][8m] [Py] [nccgroup/featherduster](https://github.com/nccgroup/featherduster) An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction
-- [**811**Star][2m] [feeicn/security-ppt](https://github.com/feeicn/security-ppt) 大安全各领域各公司各会议分享的PPT
-- [**811**Star][25d] [C] [dynup/kpatch](https://github.com/dynup/kpatch) live kernel patching
-- [**810**Star][2m] [Shell] [shr3ddersec/shr3dkit](https://github.com/shr3ddersec/shr3dkit) Red Team Tool Kit
-- [**810**Star][5y] [Objective-C] [isecpartners/ios-ssl-kill-switch](https://github.com/isecpartners/ios-ssl-kill-switch) Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS Apps
-- [**809**Star][1y] [Py] [utkusen/leviathan](https://github.com/utkusen/leviathan) wide range mass audit toolkit
-- [**809**Star][1y] [Py] [utkusen/leviathan](https://github.com/utkusen/leviathan) wide range mass audit toolkit
-- [**809**Star][2y] [C] [timwr/cve-2016-5195](https://github.com/timwr/cve-2016-5195) CVE-2016-5195 (dirtycow/dirtyc0w) proof of concept for Android
-- [**809**Star][2m] [AutoIt] [bioruebe/uniextract2](https://github.com/bioruebe/uniextract2) Universal Extractor 2 is an unofficial updated and extended version of the original UniExtract by Jared Breland. It brings several hundred changes including community-wanted ones such as a batch mode, auto-updater and scan-only-functionality.
-- [**808**Star][13d] [JS] [sindresorhus/is-online](https://github.com/sindresorhus/is-online) Check if the internet connection is up
-- [**808**Star][7y] [C] [inquisb/icmpsh](https://github.com/inquisb/icmpsh) Simple reverse ICMP shell
-- [**807**Star][22d] [Shell] [zfl9/ss-tproxy](https://github.com/zfl9/ss-tproxy) SS/SSR/V2Ray/Socks5 透明代理 for Linux
-- [**807**Star][3m] [C] [strazzere/android-unpacker](https://github.com/strazzere/android-unpacker) Android Unpacker presented at Defcon 22: Android Hacker Protection Level 0
+- [**814**Star][3m] [feeicn/security-ppt](https://github.com/feeicn/security-ppt) 大安全各领域各公司各会议分享的PPT
+- [**814**Star][5d] [C] [dynup/kpatch](https://github.com/dynup/kpatch) live kernel patching
+- [**813**Star][2y] [Ruby] [elevenpaths/eternalblue-doublepulsar-metasploit](https://github.com/elevenpaths/eternalblue-doublepulsar-metasploit) Module of Metasploit to exploit the vulnerability Eternalblue-Doublepulsar.
+- [**812**Star][15d] [JS] [sindresorhus/is-online](https://github.com/sindresorhus/is-online) Check if the internet connection is up
+- [**811**Star][1y] [Py] [utkusen/leviathan](https://github.com/utkusen/leviathan) wide range mass audit toolkit
+- [**811**Star][1y] [Py] [utkusen/leviathan](https://github.com/utkusen/leviathan) wide range mass audit toolkit
+- [**811**Star][2y] [C] [timwr/cve-2016-5195](https://github.com/timwr/cve-2016-5195) CVE-2016-5195 (dirtycow/dirtyc0w) proof of concept for Android
+- [**811**Star][5y] [ObjC] [isecpartners/ios-ssl-kill-switch](https://github.com/isecpartners/ios-ssl-kill-switch) Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS Apps
+- [**811**Star][7y] [C] [inquisb/icmpsh](https://github.com/inquisb/icmpsh) Simple reverse ICMP shell
+- [**810**Star][8m] [Py] [nccgroup/featherduster](https://github.com/nccgroup/featherduster) An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction
+- [**809**Star][1y] [C++] [tencent/tscancode](https://github.com/tencent/tscancode) A static code analyzer for C++, C#, Lua
+- [**808**Star][2y] [C#] [nicehash/nicehashminer-archived](https://github.com/nicehash/nicehashminer-archived) NiceHash easy to use CPU&GPU Miner
+- [**808**Star][3m] [C] [strazzere/android-unpacker](https://github.com/strazzere/android-unpacker) Android Unpacker presented at Defcon 22: Android Hacker Protection Level 0
+- [**806**Star][1m] [Swift] [googleprojectzero/fuzzilli](https://github.com/googleprojectzero/fuzzilli) A JavaScript Engine Fuzzer
+- [**806**Star][3y] [Py] [fuzzbunch/fuzzbunch](https://github.com/fuzzbunch/fuzzbunch) NSA finest tool
- [**806**Star][2y] [Ruby] [dmayer/idb](https://github.com/dmayer/idb) simplify some common tasks for iOS pentesting and research
-- [**804**Star][3y] [Py] [fuzzbunch/fuzzbunch](https://github.com/fuzzbunch/fuzzbunch) NSA finest tool
-- [**803**Star][3y] [shmilylty/awesome-hacking](https://github.com/shmilylty/awesome-hacking) awesome hacking chinese version
+- [**805**Star][17d] [Ruby] [rastating/wordpress-exploit-framework](https://github.com/rastating/wordpress-exploit-framework) A Ruby framework designed to aid in the penetration testing of WordPress systems.
+- [**805**Star][5m] [C++] [ptrkrysik/gr-gsm](https://github.com/ptrkrysik/gr-gsm) Gnuradio blocks and tools for receiving GSM transmissions
+- [**804**Star][2y] [Swift] [zhuhaow/specht](https://github.com/zhuhaow/specht) A rule-based proxy app built with Network Extension for macOS
+- [**804**Star][3y] [shmilylty/awesome-hacking](https://github.com/shmilylty/awesome-hacking) awesome hacking chinese version
+- [**804**Star][6d] [Py] [jivoi/pentest](https://github.com/jivoi/pentest) pentest
+- [**803**Star][2m] [Py] [acmesec/ctfcracktools](https://github.com/Acmesec/CTFCrackTools) China's first CTFTools framework
- [**803**Star][3y] [te-k/flexidie](https://github.com/te-k/flexidie) Source code and binaries of FlexiSpy from the Flexidie dump
-- [**802**Star][15d] [Ruby] [rastating/wordpress-exploit-framework](https://github.com/rastating/wordpress-exploit-framework) A Ruby framework designed to aid in the penetration testing of WordPress systems.
-- [**801**Star][5m] [C++] [ptrkrysik/gr-gsm](https://github.com/ptrkrysik/gr-gsm) Gnuradio blocks and tools for receiving GSM transmissions
+- [**803**Star][2y] [Go] [schollz/find-lf](https://github.com/schollz/find-lf) Track the location of every Wi-Fi device (
+- [**802**Star][3m] [Py] [techgaun/github-dorks](https://github.com/techgaun/github-dorks) Collection of github dorks and helper tool to automate the process of checking dorks
+- [**802**Star][3m] [Py] [secforce/tunna](https://github.com/secforce/tunna) Tunna is a set of tools which will wrap and tunnel any TCP communication over HTTP. It can be used to bypass network restrictions in fully firewalled environments.
+- [**802**Star][2m] [Py] [hellman/xortool](https://github.com/hellman/xortool) A tool to analyze multi-byte xor cipher
+- [**802**Star][1m] [Shell] [andreyvit/create-dmg](https://github.com/andreyvit/create-dmg) A shell script to build fancy DMGs
+- [**801**Star][2y] [vysecurity/redtips](https://github.com/vysecurity/RedTips) Red Team Tips as posted by
- [**801**Star][3y] [C#] [netflix/fido](https://github.com/netflix/fido) an orchestration layer used to automate the incident response process by evaluating, assessing and responding to malware
-- [**800**Star][2y] [vysecurity/redtips](https://github.com/vysecurity/RedTips) Red Team Tips as posted by
+- [**801**Star][2d] [Py] [ericsson/codechecker](https://github.com/ericsson/codechecker) CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy
+- [**800**Star][28d] [Rust] [edu4rdshl/findomain](https://github.com/edu4rdshl/findomain) The fastest and cross-platform subdomain enumerator, don't waste your time.
+- [**800**Star][6d] [C++] [aslody/whale](https://github.com/aslody/whale) Hook Framework for Android/IOS/Linux/MacOS
- [**799**Star][6y] [Pascal] [prof7bit/torchat](https://github.com/prof7bit/torchat) Decentralized anonymous instant messenger on top of Tor Hidden Services
-- [**798**Star][2m] [Py] [acmesec/ctfcracktools](https://github.com/Acmesec/CTFCrackTools) China's first CTFTools framework
-- [**798**Star][3m] [Py] [secforce/tunna](https://github.com/secforce/tunna) Tunna is a set of tools which will wrap and tunnel any TCP communication over HTTP. It can be used to bypass network restrictions in fully firewalled environments.
-- [**798**Star][1y] [Objective-C] [igrsoft/kismac2](https://github.com/igrsoft/kismac2) KisMAC is a free, open source wireless stumbling and security tool for Mac OS X.
-- [**798**Star][1m] [Shell] [andreyvit/create-dmg](https://github.com/andreyvit/create-dmg) A shell script to build fancy DMGs
-- [**797**Star][2m] [Py] [hellman/xortool](https://github.com/hellman/xortool) A tool to analyze multi-byte xor cipher
-- [**797**Star][1m] [Swift] [googleprojectzero/fuzzilli](https://github.com/googleprojectzero/fuzzilli) A JavaScript Engine Fuzzer
+- [**799**Star][1y] [ObjC] [igrsoft/kismac2](https://github.com/igrsoft/kismac2) KisMAC is a free, open source wireless stumbling and security tool for Mac OS X.
+- [**799**Star][3m] [Py] [awslabs/aws-config-rules](https://github.com/awslabs/aws-config-rules) [Node, Python, Java] Repository of sample Custom Rules for AWS Config.
+- [**798**Star][3d] [Py] [complianceascode/content](https://github.com/ComplianceAsCode/content) Security compliance content in SCAP, Bash, Ansible, and other formats
+- [**798**Star][8d] [proxymanapp/proxyman](https://github.com/proxymanapp/proxyman) Modern and Delightful HTTP Debugging Proxy for macOS, iOS and Android
+- [**798**Star][11m] [Py] [mak-/parameth](https://github.com/mak-/parameth) brute discover GET and POST parameters
+- [**797**Star][3y] [Go] [ryhanson/phishery](https://github.com/ryhanson/phishery) An SSL Enabled Basic Auth Credential Harvester with a Word Document Template URL Injector
- [**797**Star][3y] [Go] [codahale/sneaker](https://github.com/codahale/sneaker) A tool for securely storing secrets on S3 using Amazon KMS.
-- [**796**Star][2y] [Go] [schollz/find-lf](https://github.com/schollz/find-lf) Track the location of every Wi-Fi device (
-- [**796**Star][20d] [Py] [jivoi/pentest](https://github.com/jivoi/pentest)
-- [**796**Star][8d] [Py] [ericsson/codechecker](https://github.com/ericsson/codechecker) CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy
- [**795**Star][7m] [Py] [phaethon/kamene](https://github.com/phaethon/kamene) Network packet and pcap file crafting/sniffing/manipulation/visualization security tool. Originally forked from scapy in 2015 and providing python3 compatibility since then.
-- [**795**Star][7m] [C++] [aslody/whale](https://github.com/aslody/whale) Hook Framework for Android/IOS/Linux/MacOS
-- [**794**Star][11m] [Py] [mak-/parameth](https://github.com/mak-/parameth) brute discover GET and POST parameters
-- [**794**Star][3m] [Py] [awslabs/aws-config-rules](https://github.com/awslabs/aws-config-rules) [Node, Python, Java] Repository of sample Custom Rules for AWS Config.
-- [**793**Star][7d] [Py] [complianceascode/content](https://github.com/ComplianceAsCode/content) Security compliance content in SCAP, Bash, Ansible, and other formats
-- [**793**Star][20d] [Py] [yeti-platform/yeti](https://github.com/yeti-platform/yeti) Your Everyday Threat Intelligence
-- [**793**Star][3y] [Go] [ryhanson/phishery](https://github.com/ryhanson/phishery) An SSL Enabled Basic Auth Credential Harvester with a Word Document Template URL Injector
-- [**791**Star][3m] [Py] [techgaun/github-dorks](https://github.com/techgaun/github-dorks) Collection of github dorks and helper tool to automate the process of checking dorks
-- [**791**Star][3y] [Py] [empireproject/empyre](https://github.com/empireproject/empyre) A post-exploitation OS X/Linux agent written in Python 2.7
+- [**795**Star][22d] [Py] [yeti-platform/yeti](https://github.com/yeti-platform/yeti) Your Everyday Threat Intelligence
+- [**794**Star][2m] [sh4hin/androl4b](https://github.com/sh4hin/androl4b) A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis
+- [**793**Star][3y] [Py] [empireproject/empyre](https://github.com/empireproject/empyre) A post-exploitation OS X/Linux agent written in Python 2.7
+- [**791**Star][4m] [Py] [srinivas11789/pcapxray](https://github.com/srinivas11789/pcapxray) A Network Forensics Tool
- [**790**Star][2y] [Go] [evilsocket/dnssearch](https://github.com/evilsocket/dnssearch) A subdomain enumeration tool.
-- [**789**Star][2m] [sh4hin/androl4b](https://github.com/sh4hin/androl4b) A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis
-- [**789**Star][26d] [Rust] [edu4rdshl/findomain](https://github.com/edu4rdshl/findomain) The fastest and cross-platform subdomain enumerator, don't waste your time.
-- [**789**Star][3y] [C++] [bwall/hashpump](https://github.com/bwall/hashpump) A tool to exploit the hash length extension attack in various hashing algorithms
-- [**787**Star][4m] [Py] [srinivas11789/pcapxray](https://github.com/srinivas11789/pcapxray) A Network Forensics Tool
+- [**790**Star][3y] [C++] [bwall/hashpump](https://github.com/bwall/hashpump) A tool to exploit the hash length extension attack in various hashing algorithms
+- [**789**Star][10m] [C#] [terminals-origin/terminals](https://github.com/terminals-origin/terminals) Terminals is a secure, multi tab terminal services/remote desktop client. It uses Terminal Services ActiveX Client (mstscax.dll). The project started from the need of controlling multiple connections simultaneously. It is a complete replacement for the mstsc.exe (Terminal Services) client. This is official source moved from Codeplex.
+- [**789**Star][2d] [C] [fwupd/fwupd](https://github.com/fwupd/fwupd) A simple daemon to allow session software to update firmware
+- [**788**Star][3d] [Java] [zstackio/zstack](https://github.com/zstackio/zstack) ZStack - the open-source IaaS software
+- [**787**Star][1m] [CSS] [smartping/smartping](https://github.com/smartping/smartping) 综合性网络质量(PING)检测工具,支持正/反向PING绘图、互PING拓扑绘图与报警、全国PING延迟地图与在线检测工具等功能
- [**787**Star][2y] [Shell] [screetsec/dracnmap](https://github.com/screetsec/dracnmap) Dracnmap is an open source program which is using to exploit the network and gathering information with nmap help. Nmap command comes with lots of options that can make the utility more robust and difficult to follow for new users. Hence Dracnmap is designed to perform fast scaning with the utilizing script engine of nmap and nmap can perform va…
-- [**784**Star][2m] [C] [netsniff-ng/netsniff-ng](https://github.com/netsniff-ng/netsniff-ng) A Swiss army knife for your daily Linux network plumbing.
-- [**784**Star][8d] [C] [fwupd/fwupd](https://github.com/fwupd/fwupd) A simple daemon to allow session software to update firmware
-- [**784**Star][8d] [Java] [zstackio/zstack](https://github.com/zstackio/zstack) ZStack - the open-source IaaS software
-- [**783**Star][4y] [Assembly] [xoreaxeaxeax/sinkhole](https://github.com/xoreaxeaxeax/sinkhole) Architectural privilege escalation on x86
-- [**783**Star][8m] [Go] [parsiya/hacking-with-go](https://github.com/parsiya/hacking-with-go) Golang for Security Professionals
-- [**783**Star][27d] [Ruby] [net-ssh/net-ssh](https://github.com/net-ssh/net-ssh) Pure Ruby implementation of an SSH (protocol 2) client
-- [**783**Star][2y] [C] [jklmnn/imagejs](https://github.com/jklmnn/imagejs) Small tool to package javascript into a valid image file.
-- [**783**Star][2m] [Go] [dreddsa5dies/gohacktools](https://github.com/dreddsa5dies/gohacktools) Hacker tools on Go (Golang)
+- [**787**Star][2m] [Py] [numba/llvmlite](https://github.com/numba/llvmlite) A lightweight LLVM python binding for writing JIT compilers
+- [**787**Star][1m] [microsoft/msrc-security-research](https://github.com/microsoft/msrc-security-research) Security Research from the Microsoft Security Response Center (MSRC)
+- [**786**Star][2m] [Go] [dreddsa5dies/gohacktools](https://github.com/dreddsa5dies/gohacktools) Hacker tools on Go (Golang)
+- [**785**Star][2m] [C] [netsniff-ng/netsniff-ng](https://github.com/netsniff-ng/netsniff-ng) A Swiss army knife for your daily Linux network plumbing.
+- [**785**Star][12d] [Go] [rebuy-de/aws-nuke](https://github.com/rebuy-de/aws-nuke) Nuke a whole AWS account and delete all its resources.
+- [**785**Star][2y] [C] [jklmnn/imagejs](https://github.com/jklmnn/imagejs) Small tool to package javascript into a valid image file.
+- [**784**Star][4y] [Assembly] [xoreaxeaxeax/sinkhole](https://github.com/xoreaxeaxeax/sinkhole) Architectural privilege escalation on x86
+- [**784**Star][5m] [TSQL] [threathunterx/nebula](https://github.com/threathunterx/nebula) "星云"业务风控系统,主工程
+- [**784**Star][8m] [Go] [parsiya/hacking-with-go](https://github.com/parsiya/hacking-with-go) Golang for Security Professionals
+- [**784**Star][7m] [Java] [blankeer/mdwechat](https://github.com/blankeer/mdwechat) 一个能让微信 Material Design 化的 Xposed 模块
+- [**784**Star][2m] [Py] [bishopfox/gitgot](https://github.com/bishopfox/gitgot) Semi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets.
+- [**784**Star][3y] [Go] [armon/go-socks5](https://github.com/armon/go-socks5) SOCKS5 server in Golang
+- [**782**Star][11m] [v2-dev/awesome-social-engineering](https://github.com/v2-dev/awesome-social-engineering) A curated list of awesome social engineering resources.
- [**782**Star][3y] [Go] [summitroute/osxlockdown](https://github.com/summitroute/osxlockdown) [No longer maintained] Apple OS X tool to audit for, and remediate, security configuration settings.
-- [**782**Star][7m] [Java] [blankeer/mdwechat](https://github.com/blankeer/mdwechat) 一个能让微信 Material Design 化的 Xposed 模块
-- [**781**Star][5m] [TSQL] [threathunterx/nebula](https://github.com/threathunterx/nebula) "星云"业务风控系统,主工程
-- [**781**Star][30d] [microsoft/msrc-security-research](https://github.com/microsoft/msrc-security-research) Security Research from the Microsoft Security Response Center (MSRC)
-- [**781**Star][3y] [Go] [armon/go-socks5](https://github.com/armon/go-socks5) SOCKS5 server in Golang
+- [**782**Star][29d] [Ruby] [net-ssh/net-ssh](https://github.com/net-ssh/net-ssh) Pure Ruby implementation of an SSH (protocol 2) client
+- [**782**Star][1y] [PS] [kevin-robertson/invoke-thehash](https://github.com/kevin-robertson/invoke-thehash) PowerShell functions for performing pass the hash WMI and SMB tasks
+- [**780**Star][2m] [C] [nixos/patchelf](https://github.com/nixos/patchelf) A small utility to modify the dynamic linker and RPATH of ELF executables
- [**780**Star][4y] [C++] [denandz/keefarce](https://github.com/denandz/keefarce) Extracts passwords from a KeePass 2.x database, directly from memory.
- [**779**Star][2y] [Py] [secretsquirrel/bdfproxy](https://github.com/secretsquirrel/bdfproxy) Patch Binaries via MITM: BackdoorFactory + mitmProxy. (NOT SUPPORTED)
-- [**779**Star][2m] [Py] [numba/llvmlite](https://github.com/numba/llvmlite) A lightweight LLVM python binding for writing JIT compilers
-- [**779**Star][1y] [PowerShell] [kevin-robertson/invoke-thehash](https://github.com/kevin-robertson/invoke-thehash) PowerShell Pass The Hash Utils
-- [**778**Star][10d] [Go] [rebuy-de/aws-nuke](https://github.com/rebuy-de/aws-nuke) Nuke a whole AWS account and delete all its resources.
-- [**778**Star][2m] [C] [nixos/patchelf](https://github.com/nixos/patchelf) A small utility to modify the dynamic linker and RPATH of ELF executables
-- [**777**Star][11m] [v2-dev/awesome-social-engineering](https://github.com/v2-dev/awesome-social-engineering) A curated list of awesome social engineering resources.
+- [**779**Star][1m] [Py] [konradit/gopro-py-api](https://github.com/konradit/gopro-py-api) Unofficial GoPro API Library for Python - connect to GoPro via WiFi.
+- [**777**Star][7d] [Go] [kolide/fleet](https://github.com/kolide/fleet) A flexible control server for osquery fleets
+- [**777**Star][1m] [Py] [kevthehermit/ratdecoders](https://github.com/kevthehermit/ratdecoders) Python Decoders for Common Remote Access Trojans
+- [**777**Star][8d] [C#] [justcoding121/titanium-web-proxy](https://github.com/justcoding121/titanium-web-proxy) A cross-platform asynchronous HTTP(S) proxy server in C#.
- [**777**Star][2m] [Py] [gosecure/malboxes](https://github.com/gosecure/malboxes) Builds malware analysis Windows VMs so that you don't have to.
-- [**776**Star][1m] [Py] [konradit/gopro-py-api](https://github.com/konradit/gopro-py-api) Unofficial GoPro API Library for Python - connect to GoPro via WiFi.
-- [**776**Star][2m] [Py] [bishopfox/gitgot](https://github.com/bishopfox/gitgot) Semi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets.
-- [**775**Star][1y] [C++] [polysync/oscc](https://github.com/polysync/oscc) Open Source Car Control
+- [**777**Star][2y] [C++] [dor1s/libfuzzer-workshop](https://github.com/dor1s/libfuzzer-workshop) Repository for materials of "Modern fuzzing of C/C++ Projects" workshop.
+- [**777**Star][15d] [Go] [bishopfox/sliver](https://github.com/bishopfox/sliver) a general purpose cross-platform implant framework that supports C2 over Mutual-TLS, HTTP(S), and DNS
+- [**777**Star][14d] [Shell] [aqzt/kjyw](https://github.com/aqzt/kjyw) 快捷运维,代号kjyw,项目基于shell、python,运维脚本工具库,收集各类运维常用工具脚本,实现快速安装nginx、mysql、php、redis、nagios、运维经常使用的脚本等等...
+- [**776**Star][2y] [Py] [marvis/pytorch-caffe-darknet-convert](https://github.com/marvis/pytorch-caffe-darknet-convert) convert between pytorch, caffe prototxt/weights and darknet cfg/weights
+- [**776**Star][1y] [C++] [polysync/oscc](https://github.com/polysync/oscc) Open Source Car Control
+- [**776**Star][2m] [C++] [nodejs/llnode](https://github.com/nodejs/llnode) An lldb plugin for Node.js and V8, which enables inspection of JavaScript states for insights into Node.js processes and their core dumps.
+- [**775**Star][12m] [HTML] [sense-of-security/adrecon](https://github.com/sense-of-security/adrecon) gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment.
- [**775**Star][2y] [Py] [dagrz/aws_pwn](https://github.com/dagrz/aws_pwn) A collection of AWS penetration testing junk
-- [**774**Star][2m] [C++] [nodejs/llnode](https://github.com/nodejs/llnode) An lldb plugin for Node.js and V8, which enables inspection of JavaScript states for insights into Node.js processes and their core dumps.
-- [**774**Star][2y] [C++] [dor1s/libfuzzer-workshop](https://github.com/dor1s/libfuzzer-workshop) Repository for materials of "Modern fuzzing of C/C++ Projects" workshop.
+- [**774**Star][2y] [TS] [uwnetworkslab/uproxy-p2p](https://github.com/uwnetworkslab/uproxy-p2p) Internet without borders
- [**774**Star][4y] [amq/firefox-debloat](https://github.com/amq/firefox-debloat) Stop Firefox leaking data about you
- [**773**Star][2y] [Py] [viralmaniar/passhunt](https://github.com/viralmaniar/passhunt) Passhunt is a simple tool for searching of default credentials for network devices, web applications and more. Search through 523 vendors and their 2084 default passwords.
-- [**773**Star][2y] [TypeScript] [uwnetworkslab/uproxy-p2p](https://github.com/uwnetworkslab/uproxy-p2p) Internet without borders
-- [**771**Star][12m] [HTML] [sense-of-security/adrecon](https://github.com/sense-of-security/adrecon) gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment.
-- [**771**Star][20d] [Go] [kolide/fleet](https://github.com/kolide/fleet) A flexible control server for osquery fleets
-- [**771**Star][1m] [Py] [kevthehermit/ratdecoders](https://github.com/kevthehermit/ratdecoders) Python Decoders for Common Remote Access Trojans
-- [**771**Star][9d] [C#] [justcoding121/titanium-web-proxy](https://github.com/justcoding121/titanium-web-proxy) A cross-platform asynchronous HTTP(S) proxy server in C#.
+- [**772**Star][8d] [payloadbox/xss-payload-list](https://github.com/payloadbox/xss-payload-list) Cross Site Scripting ( XSS ) Vulnerability Payload List
+- [**772**Star][10d] [Go] [liamg/tfsec](https://github.com/liamg/tfsec)
- [**771**Star][4y] [C++] [google/rowhammer-test](https://github.com/google/rowhammer-test) Test DRAM for bit flips caused by the rowhammer problem
-- [**769**Star][13d] [Go] [bishopfox/sliver](https://github.com/bishopfox/sliver) Implant framework
+- [**769**Star][2y] [HTML] [wi-fi-analyzer/fluxion](https://github.com/wi-fi-analyzer/fluxion) Offical repo for fluxion
+- [**769**Star][2d] [C++] [shekyan/slowhttptest](https://github.com/shekyan/slowhttptest) Application Layer DoS attack simulator
+- [**769**Star][2m] [HTML] [rewardone/oscprepo](https://github.com/rewardone/oscprepo) A list of commands, scripts, resources, and more that I have gathered and attempted to consolidate for use as OSCP (and more) study material. Commands in 'Usefulcommands' Keepnote. Bookmarks and reading material in 'BookmarkList' Keepnote. Reconscan in scripts folder.
+- [**769**Star][2d] [Py] [jtpereyda/boofuzz](https://github.com/jtpereyda/boofuzz) A fork and successor of the Sulley Fuzzing Framework
+- [**769**Star][4d] [C#] [damianh/proxykit](https://github.com/damianh/proxykit) A toolkit to create code-first HTTP reverse proxies on ASP.NET Core
- [**768**Star][5y] [Py] [shadowsocks/chinadns-python](https://github.com/shadowsocks/chinadns-python) Protect yourself against DNS poisoning in China.
-- [**767**Star][2m] [HTML] [rewardone/oscprepo](https://github.com/rewardone/oscprepo) A list of commands, scripts, resources, and more that I have gathered and attempted to consolidate for use as OSCP (and more) study material. Commands in 'Usefulcommands' Keepnote. Bookmarks and reading material in 'BookmarkList' Keepnote. Reconscan in scripts folder.
-- [**766**Star][2y] [HTML] [wi-fi-analyzer/fluxion](https://github.com/wi-fi-analyzer/fluxion) Offical repo for fluxion
-- [**766**Star][1m] [Py] [vesche/scanless](https://github.com/vesche/scanless) online port scan scraper
-- [**766**Star][12d] [Shell] [aqzt/kjyw](https://github.com/aqzt/kjyw) 快捷运维,代号kjyw,项目基于shell、python,运维脚本工具库,收集各类运维常用工具脚本,实现快速安装nginx、mysql、php、redis、nagios、运维经常使用的脚本等等...
+- [**768**Star][1m] [Py] [vesche/scanless](https://github.com/vesche/scanless) online port scan scraper
+- [**768**Star][2d] [Java] [tmobile/pacbot](https://github.com/tmobile/pacbot) PacBot (Policy as Code Bot)
+- [**767**Star][2m] [daviddias/awesome-hacking-locations](https://github.com/daviddias/awesome-hacking-locations)
+- [**767**Star][3d] [JS] [brianlovin/security-checklist](https://github.com/brianlovin/security-checklist) A checklist for staying safe on the internet
+- [**766**Star][7d] [C++] [snort3/snort3](https://github.com/snort3/snort3) Snort++
- [**765**Star][5y] [C#] [azzvx/gogotester](https://github.com/azzvx/gogotester)
-- [**765**Star][2m] [daviddias/awesome-hacking-locations](https://github.com/daviddias/awesome-hacking-locations)
-- [**765**Star][1m] [C++] [shekyan/slowhttptest](https://github.com/shekyan/slowhttptest) Application Layer DoS attack simulator
-- [**764**Star][10d] [Py] [jtpereyda/boofuzz](https://github.com/jtpereyda/boofuzz) A fork and successor of the Sulley Fuzzing Framework
-- [**764**Star][11d] [C#] [damianh/proxykit](https://github.com/damianh/proxykit) A toolkit to create code-first HTTP reverse proxies on ASP.NET Core
-- [**764**Star][8d] [JS] [brianlovin/security-checklist](https://github.com/brianlovin/security-checklist) A checklist for staying safe on the internet
-- [**762**Star][2m] [Java] [tmobile/pacbot](https://github.com/tmobile/pacbot) PacBot (Policy as Code Bot)
+- [**765**Star][1y] [pfarb/awesome-crypto-papers](https://github.com/pfarb/awesome-crypto-papers) A curated list of cryptography papers, articles, tutorials and howtos.
+- [**765**Star][15d] [axtmueller/windows-kernel-explorer](https://github.com/axtmueller/windows-kernel-explorer) A free but powerful Windows kernel research tool.
+- [**764**Star][7m] [Py] [gkbrk/slowloris](https://github.com/gkbrk/slowloris) an HTTP Denial of Service attack that affects threaded servers
+- [**764**Star][2m] [Py] [ashutosh1206/crypton](https://github.com/ashutosh1206/crypton) Library consisting of explanation and implementation of all the existing attacks on various Encryption Systems, Digital Signatures, Authentication methods along with example challenges from CTFs
+- [**763**Star][1y] [Java] [mbechler/marshalsec](https://github.com/mbechler/marshalsec) Java Unmarshaller Security - Turning your data into code execution
+- [**763**Star][10m] [Py] [hlldz/spookflare](https://github.com/hlldz/spookflare) Loader, dropper generator with multiple features for bypassing client-side and network-side countermeasures.
+- [**762**Star][7y] [grugq/portal](https://github.com/grugq/portal) Personal Onion Router To Assure Liberty
- [**762**Star][11m] [C++] [comaeio/porosity](https://github.com/comaeio/porosity) *UNMAINTAINED* Decompiler and Security Analysis tool for Blockchain-based Ethereum Smart-Contracts
-- [**761**Star][10m] [Py] [hlldz/spookflare](https://github.com/hlldz/spookflare) Loader, dropper generator with multiple features for bypassing client-side and network-side countermeasures.
-- [**761**Star][7y] [grugq/portal](https://github.com/grugq/portal) Personal Onion Router To Assure Liberty
-- [**760**Star][17d] [C++] [snort3/snort3](https://github.com/snort3/snort3) Snort++
-- [**760**Star][13d] [axtmueller/windows-kernel-explorer](https://github.com/axtmueller/windows-kernel-explorer) A free but powerful Windows kernel research tool.
-- [**759**Star][7d] [HTML] [payloadbox/xss-payload-list](https://github.com/payloadbox/xss-payload-list) Cross Site Scripting ( XSS ) Vulnerability Payload List
-- [**759**Star][1y] [Java] [mbechler/marshalsec](https://github.com/mbechler/marshalsec) Java Unmarshaller Security - Turning your data into code execution
-- [**758**Star][4m] [Py] [s0md3v/hash-buster](https://github.com/s0md3v/Hash-Buster) Crack hashes in seconds.
-- [**758**Star][1y] [pfarb/awesome-crypto-papers](https://github.com/pfarb/awesome-crypto-papers) A curated list of cryptography papers, articles, tutorials and howtos.
-- [**758**Star][5m] [Py] [lgandx/pcredz](https://github.com/lgandx/pcredz) This tool extracts Credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, SMTP, FTP, IMAP, etc from a pcap file or from a live interface.
-- [**757**Star][20d] [Go] [thoughtworks/talisman](https://github.com/thoughtworks/talisman) By hooking into the pre-push hook provided by Git, Talisman validates the outgoing changeset for things that look suspicious - such as authorization tokens and private keys.
-- [**757**Star][1m] [Py] [snovvcrash/usbrip](https://github.com/snovvcrash/usbrip) Simple CLI forensics tool for tracking USB device artifacts (history of USB events) on GNU/Linux
-- [**757**Star][18d] [Py] [mubix/shellshocker-pocs](https://github.com/mubix/shellshocker-pocs) Collection of Proof of Concepts and Potential Targets for #ShellShocker
-- [**756**Star][8m] [Py] [misterbianco/boopsuite](https://github.com/MisterBianco/BoopSuite) 无线审计与安全测试
-- [**756**Star][2m] [Py] [ashutosh1206/crypton](https://github.com/ashutosh1206/crypton) Library consisting of explanation and implementation of all the existing attacks on various Encryption Systems, Digital Signatures, Authentication methods along with example challenges from CTFs
-- [**755**Star][3y] [masatokinugawa/filterbypass](https://github.com/masatokinugawa/filterbypass) Browser's XSS Filter Bypass Cheat Sheet
-- [**754**Star][1y] [Py] [greatsct/greatsct](https://github.com/greatsct/greatsct) The project is called Great SCT (Great Scott). Great SCT is an open source project to generate application white list bypasses. This tool is intended for BOTH red and blue team.
-- [**754**Star][3y] [Py] [eastee/rebreakcaptcha](https://github.com/eastee/rebreakcaptcha) A logic vulnerability, dubbed ReBreakCaptcha, which lets you easily bypass Google's ReCaptcha v2 anywhere on the web
+- [**761**Star][20d] [Py] [mubix/shellshocker-pocs](https://github.com/mubix/shellshocker-pocs) Collection of Proof of Concepts and Potential Targets for #ShellShocker
+- [**761**Star][3m] [jakejarvis/awesome-shodan-queries](https://github.com/jakejarvis/awesome-shodan-queries)
+- [**760**Star][4m] [Py] [s0md3v/hash-buster](https://github.com/s0md3v/Hash-Buster) Crack hashes in seconds.
+- [**760**Star][8m] [Py] [misterbianco/boopsuite](https://github.com/MisterBianco/BoopSuite) 无线审计与安全测试
+- [**760**Star][22d] [Go] [thoughtworks/talisman](https://github.com/thoughtworks/talisman) By hooking into the pre-push hook provided by Git, Talisman validates the outgoing changeset for things that look suspicious - such as authorization tokens and private keys.
+- [**760**Star][1m] [Py] [snovvcrash/usbrip](https://github.com/snovvcrash/usbrip) Simple CLI forensics tool for tracking USB device artifacts (history of USB events) on GNU/Linux
+- [**760**Star][5m] [Py] [lgandx/pcredz](https://github.com/lgandx/pcredz) This tool extracts Credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, SMTP, FTP, IMAP, etc from a pcap file or from a live interface.
+- [**760**Star][4m] [Go] [haccer/subjack](https://github.com/haccer/subjack) Subdomain Takeover tool written in Go
+- [**759**Star][3y] [masatokinugawa/filterbypass](https://github.com/masatokinugawa/filterbypass) Browser's XSS Filter Bypass Cheat Sheet
+- [**756**Star][1m] [Py] [nekmo/dirhunt](https://github.com/nekmo/dirhunt) Find web directories without bruteforce
+- [**756**Star][1y] [Py] [greatsct/greatsct](https://github.com/greatsct/greatsct) generate metasploit payloads that bypass common anti-virus solutions and application whitelisting solutions.
+- [**755**Star][3y] [Py] [eastee/rebreakcaptcha](https://github.com/eastee/rebreakcaptcha) A logic vulnerability, dubbed ReBreakCaptcha, which lets you easily bypass Google's ReCaptcha v2 anywhere on the web
+- [**755**Star][2d] [Go] [banzaicloud/bank-vaults](https://github.com/banzaicloud/bank-vaults) A Vault swiss-army knife: a K8s operator, Go client with automatic token renewal, automatic configuration, multiple unseal options and more. A CLI tool to init, unseal and configure Vault (auth methods, secret engines). Direct secret injection into Pods.
+- [**754**Star][6d] [Ruby] [rubysec/ruby-advisory-db](https://github.com/rubysec/ruby-advisory-db) A database of vulnerable Ruby Gems
+- [**753**Star][4m] [Py] [threatexpress/domainhunter](https://github.com/threatexpress/domainhunter) Checks expired domains for categorization/reputation and Archive.org history to determine good candidates for phishing and C2 domain names
- [**753**Star][2y] [Py] [redballoonshenanigans/monitordarkly](https://github.com/redballoonshenanigans/monitordarkly) Poc, Presentation of Monitor OSD Exploitation, and shenanigans of high quality.
-- [**752**Star][7m] [Py] [gkbrk/slowloris](https://github.com/gkbrk/slowloris) Low bandwidth DoS tool. Slowloris rewrite in Python.
-- [**751**Star][1m] [Py] [nekmo/dirhunt](https://github.com/nekmo/dirhunt) Find web directories without bruteforce
-- [**751**Star][17d] [Py] [korcankaraokcu/pince](https://github.com/korcankaraokcu/pince) A reverse engineering tool that'll supply the place of Cheat Engine for linux
-- [**751**Star][10m] [PowerShell] [davehull/kansa](https://github.com/davehull/kansa) A Powershell incident response framework
-- [**750**Star][22d] [Ruby] [rubysec/ruby-advisory-db](https://github.com/rubysec/ruby-advisory-db) A database of vulnerable Ruby Gems
+- [**753**Star][4m] [Shell] [nahamsec/lazyrecon](https://github.com/nahamsec/lazyrecon) automate your reconnaissance process in an organized fashion
+- [**753**Star][19d] [Py] [korcankaraokcu/pince](https://github.com/korcankaraokcu/pince) A reverse engineering tool that'll supply the place of Cheat Engine for linux
+- [**752**Star][5d] [C] [wolfssl/wolfssl](https://github.com/wolfssl/wolfssl) wolfSSL (formerly CyaSSL) is a small, fast, portable implementation of TLS/SSL for embedded devices to the cloud. wolfSSL supports up to TLS 1.3!
+- [**752**Star][10m] [PS] [davehull/kansa](https://github.com/davehull/kansa) A Powershell incident response framework
+- [**751**Star][2d] [Py] [rajkumrdusad/tool-x](https://github.com/rajkumrdusad/tool-x) Tool-X is a kali linux hacking Tool installer. Tool-X developed for termux and other android terminals. using Tool-X you can install almost 370+ hacking tools in termux app and other linux based distributions.
+- [**751**Star][23d] [Java] [owasp/securityshepherd](https://github.com/owasp/securityshepherd) Web and mobile application security training platform
+- [**749**Star][15d] [HTML] [tennc/fuzzdb](https://github.com/tennc/fuzzdb) 一个fuzzdb扩展库
- [**749**Star][2y] [PHP] [sektioneins/pcc](https://github.com/sektioneins/pcc) PHP Secure Configuration Checker
-- [**749**Star][8d] [Go] [liamg/tfsec](https://github.com/liamg/tfsec)
-- [**748**Star][4m] [Py] [threatexpress/domainhunter](https://github.com/threatexpress/domainhunter) Checks expired domains for categorization/reputation and Archive.org history to determine good candidates for phishing and C2 domain names
+- [**748**Star][2y] [Go] [pforemski/dingo](https://github.com/pforemski/dingo) A DNS client in Go that supports Google DNS over HTTPS
- [**748**Star][2y] [Py] [d35m0nd142/lfisuite](https://github.com/d35m0nd142/lfisuite) Totally Automatic LFI Exploiter (+ Reverse Shell) and Scanner
-- [**747**Star][2y] [Go] [pforemski/dingo](https://github.com/pforemski/dingo) A DNS client in Go that supports Google DNS over HTTPS
-- [**747**Star][21d] [Java] [owasp/securityshepherd](https://github.com/owasp/securityshepherd) Web and mobile application security training platform
+- [**748**Star][2m] [Py] [buffer/thug](https://github.com/buffer/thug) Python low-interaction honeyclient
- [**747**Star][11m] [Py] [infobyte/spoilerwall](https://github.com/infobyte/spoilerwall) Spoilerwall introduces a brand new concept in the field of network hardening. Avoid being scanned by spoiling movies on all your ports!
-- [**746**Star][7d] [C] [wolfssl/wolfssl](https://github.com/wolfssl/wolfssl) wolfSSL (formerly CyaSSL) is a small, fast, portable implementation of TLS/SSL for embedded devices to the cloud. wolfSSL supports up to TLS 1.3!
-- [**746**Star][13d] [HTML] [tennc/fuzzdb](https://github.com/tennc/fuzzdb) 一个fuzzdb扩展库
-- [**746**Star][3m] [jakejarvis/awesome-shodan-queries](https://github.com/jakejarvis/awesome-shodan-queries)
-- [**746**Star][4y] [fabiobaroni/awesome-exploit-development](https://github.com/fabiobaroni/awesome-exploit-development) A curated list of resources (books, tutorials, courses, tools and vulnerable applications) for learning about Exploit Development
-- [**745**Star][4m] [Shell] [nahamsec/lazyrecon](https://github.com/nahamsec/lazyrecon) automate your reconnaissance process in an organized fashion
-- [**745**Star][3y] [PHP] [googleinurl/scanner-inurlbr](https://github.com/googleinurl/scanner-inurlbr) Advanced search in search engines, enables analysis provided to exploit GET / POST capturing emails & urls, with an internal custom validation junction for each target / url found.
-- [**745**Star][2m] [Py] [buffer/thug](https://github.com/buffer/thug) Python low-interaction honeyclient
+- [**747**Star][4y] [fabiobaroni/awesome-exploit-development](https://github.com/fabiobaroni/awesome-exploit-development) A curated list of resources (books, tutorials, courses, tools and vulnerable applications) for learning about Exploit Development
+- [**747**Star][6m] [Go] [cbeuw/goquiet](https://github.com/cbeuw/goquiet) A Shadowsocks obfuscation plugin utilising domain fronting to evade deep packet inspection
+- [**747**Star][4m] [aleenzz/cobalt_strike_wiki](https://github.com/aleenzz/cobalt_strike_wiki) Cobalt Strike系列
+- [**746**Star][3y] [PHP] [googleinurl/scanner-inurlbr](https://github.com/googleinurl/scanner-inurlbr) Advanced search in search engines, enables analysis provided to exploit GET / POST capturing emails & urls, with an internal custom validation junction for each target / url found.
+- [**745**Star][1y] [Py] [oddcod3/phantom-evasion](https://github.com/oddcod3/phantom-evasion) Python AV evasion tool capable to generate FUD executable even with the most common 32 bit metasploit payload(exe/elf/dmg/apk)
- [**744**Star][5y] [C++] [zerovm/zerovm](https://github.com/zerovm/zerovm) Open-source lightweight virtualization platform
-- [**744**Star][7d] [Go] [banzaicloud/bank-vaults](https://github.com/banzaicloud/bank-vaults) A Vault swiss-army knife: a K8s operator, Go client with automatic token renewal, automatic configuration, multiple unseal options and more. A CLI tool to init, unseal and configure Vault (auth methods, secret engines). Direct secret injection into Pods.
-- [**742**Star][25d] [Go] [activecm/rita](https://github.com/activecm/rita) Real Intelligence Threat Analytics
-- [**741**Star][9d] [Py] [rajkumrdusad/tool-x](https://github.com/rajkumrdusad/tool-x) Tool-X is a kali linux hacking Tool installer. Tool-X developed for termux and other android terminals. using Tool-X you can install almost 263 hacking tools in termux app and other linux based distributions.
-- [**741**Star][1y] [Py] [oddcod3/phantom-evasion](https://github.com/oddcod3/phantom-evasion) Python AV evasion tool capable to generate FUD executable even with the most common 32 bit metasploit payload(exe/elf/dmg/apk)
-- [**741**Star][5m] [C] [neurobin/shc](https://github.com/neurobin/shc) Shell script compiler
-- [**741**Star][6m] [Go] [cbeuw/goquiet](https://github.com/cbeuw/goquiet) A Shadowsocks obfuscation plugin utilising domain fronting to evade deep packet inspection
+- [**744**Star][1y] [Perl] [moham3driahi/th3inspector](https://github.com/moham3driahi/th3inspector) All in one tool for Information Gathering
+- [**744**Star][8d] [Go] [activecm/rita](https://github.com/activecm/rita) Real Intelligence Threat Analytics
+- [**743**Star][5m] [C] [neurobin/shc](https://github.com/neurobin/shc) Shell script compiler
+- [**743**Star][27d] [HTML] [m4cs/babysploit](https://github.com/m4cs/babysploit) a penetration testing toolkit aimed at making it easy to learn how to use bigger, more complicated frameworks like Metasploit
+- [**743**Star][11d] [Py] [jendrikseipp/vulture](https://github.com/jendrikseipp/vulture) Find dead Python code
+- [**742**Star][1m] [Py] [khast3x/h8mail](https://github.com/khast3x/h8mail) Password Breach Hunting and Email OSINT tool, locally or using premium services. Supports chasing down related email
+- [**741**Star][9d] [trimstray/linux-hardening-checklist](https://github.com/trimstray/linux-hardening-checklist) Simple checklist to help you deploying the most important areas of the GNU/Linux production systems - work in progress.
+- [**741**Star][4y] [ObjC] [kjcracks/yololib](https://github.com/kjcracks/yololib) dylib injector for mach-o binaries
+- [**741**Star][3y] [C] [gentilkiwi/wanakiwi](https://github.com/gentilkiwi/wanakiwi) Automated wanadecrypt with key recovery if lucky
+- [**741**Star][3d] [C++] [csmith-project/creduce](https://github.com/csmith-project/creduce) C-Reduce, a C program reducer
- [**740**Star][1m] [C] [yrp604/rappel](https://github.com/yrp604/rappel) A linux-based assembly REPL for x86, amd64, armv7, and armv8
- [**740**Star][6m] [Go] [talkingdata/owl](https://github.com/talkingdata/owl) distributed monitoring system
-- [**740**Star][2y] [C] [gentilkiwi/wanakiwi](https://github.com/gentilkiwi/wanakiwi) Automated wanadecrypt with key recovery if lucky
-- [**739**Star][20d] [Py] [ricterz/genpass](https://github.com/ricterz/genpass) 中国特色的弱口令生成器
+- [**740**Star][1y] [C#] [eladshamir/internal-monologue](https://github.com/eladshamir/internal-monologue) Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS
+- [**739**Star][22d] [Py] [ricterz/genpass](https://github.com/ricterz/genpass) 中国特色的弱口令生成器
- [**739**Star][2y] [Swift] [novatecconsulting/facerecognition-in-arkit](https://github.com/novatecconsulting/facerecognition-in-arkit) Detects faces using the Vision-API and runs the extracted face through a CoreML-model to identiy the specific persons.
-- [**739**Star][4m] [aleenzz/cobalt_strike_wiki](https://github.com/aleenzz/cobalt_strike_wiki) Cobalt Strike系列
-- [**738**Star][5m] [PowerShell] [hausec/adape-script](https://github.com/hausec/adape-script) Active Directory Assessment and Privilege Escalation Script
-- [**738**Star][30d] [C++] [csmith-project/creduce](https://github.com/csmith-project/creduce) C-Reduce, a C program reducer
-- [**737**Star][7d] [trimstray/linux-hardening-checklist](https://github.com/trimstray/linux-hardening-checklist) Simple checklist to help you deploying the most important areas of the GNU/Linux production systems - work in progress.
-- [**737**Star][1y] [Perl] [moham3driahi/th3inspector](https://github.com/moham3driahi/th3inspector) All in one tool for Information Gathering
-- [**736**Star][25d] [HTML] [m4cs/babysploit](https://github.com/m4cs/babysploit)
-- [**736**Star][4y] [Objective-C] [kjcracks/yololib](https://github.com/kjcracks/yololib) dylib injector for mach-o binaries
-- [**735**Star][1y] [Py] [uber-common/metta](https://github.com/uber-common/metta) An information security preparedness tool to do adversarial simulation.
-- [**735**Star][7m] [sandboxescaper/polarbearrepo](https://github.com/sandboxescaper/polarbearrepo)
-- [**735**Star][9d] [Py] [jendrikseipp/vulture](https://github.com/jendrikseipp/vulture) Find dead Python code
-- [**735**Star][1y] [C#] [eladshamir/internal-monologue](https://github.com/eladshamir/internal-monologue) Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS
-- [**735**Star][6m] [Py] [devttys0/ida](https://github.com/devttys0/ida) Collection of IDA Python plugins/scripts/modules.
+- [**739**Star][5m] [PS] [hausec/adape-script](https://github.com/hausec/adape-script) Active Directory Assessment and Privilege Escalation Script
+- [**738**Star][1y] [Py] [uber-common/metta](https://github.com/uber-common/metta) An information security preparedness tool to do adversarial simulation.
+- [**738**Star][2y] [Py] [toolswatch/vfeed](https://github.com/toolswatch/vfeed) The Correlated CVE Vulnerability And Threat Intelligence Database API
+- [**738**Star][15d] [Jupyter Notebook] [bukosabino/ta](https://github.com/bukosabino/ta) Technical Analysis Library using Pandas (Python)
+- [**737**Star][3y] [HTML] [xyntax/1000php](https://github.com/xyntax/1000php) 1000个PHP代码审计案例(2016.7以前乌云公开漏洞)
+- [**737**Star][5d] [C] [rapid7/metasploit-payloads](https://github.com/rapid7/metasploit-payloads) Unified repository for different Metasploit Framework payloads
+- [**736**Star][6m] [C] [unamer/vmware_escape](https://github.com/unamer/vmware_escape) VMware Escape Exploit before VMware WorkStation 12.5.5
+- [**736**Star][6m] [Py] [devttys0/ida](https://github.com/devttys0/ida) Collection of IDA Python plugins/scripts/modules.
- [wpsearch](https://github.com/devttys0/ida/blob/master/scripts/wpsearch.py) Searches for immediate values commonly founds in MIPS WPS checksum implementations.
@@ -1686,333 +1803,354 @@
- [mipslocalvars](https://github.com/devttys0/ida/tree/master/plugins/mipslocalvars) Names stack variables used by the compiler for storing registers on the stack, simplifying stack data analysis (MIPS only)
- [mipsrop](https://github.com/devttys0/ida/tree/master/plugins/mipsrop) Allows you to search for suitable ROP gadgets in MIPS executable code; Built-in methods to search for common ROP gadgets
- [rizzo](https://github.com/devttys0/ida/tree/master/plugins/rizzo) Identifies and re-names functions between two or more IDBs
+- [**735**Star][7m] [sandboxescaper/polarbearrepo](https://github.com/sandboxescaper/polarbearrepo)
+- [**735**Star][6d] [C++] [google/shaderc](https://github.com/google/shaderc) A collection of tools, libraries, and tests for Vulkan shader compilation.
+- [**735**Star][10d] [Shell] [dokku/dokku-letsencrypt](https://github.com/dokku/dokku-letsencrypt) BETA: Automatic Let's Encrypt TLS Certificate installation for dokku
- [**735**Star][1y] [Py] [averagesecurityguy/scripts](https://github.com/averagesecurityguy/scripts) Scripts I use during pentest engagements.
-- [**733**Star][6m] [C] [unamer/vmware_escape](https://github.com/unamer/vmware_escape) VMware Escape Exploit before VMware WorkStation 12.5.5
-- [**733**Star][2y] [Py] [toolswatch/vfeed](https://github.com/toolswatch/vfeed) The Correlated CVE Vulnerability And Threat Intelligence Database API
-- [**732**Star][8d] [Shell] [dokku/dokku-letsencrypt](https://github.com/dokku/dokku-letsencrypt) BETA: Automatic Let's Encrypt TLS Certificate installation for dokku
-- [**731**Star][27d] [C] [iaik/zombieload](https://github.com/iaik/zombieload) Proof-of-concept for the ZombieLoad attack
-- [**731**Star][11d] [C++] [google/shaderc](https://github.com/google/shaderc) A collection of tools, libraries, and tests for Vulkan shader compilation.
+- [**734**Star][3d] [TS] [casbin/node-casbin](https://github.com/casbin/node-casbin) An authorization library that supports access control models like ACL, RBAC, ABAC in Node.js
+- [**733**Star][2y] [Java] [gcssloop/encrypt](https://github.com/gcssloop/encrypt) [暂停维护]Android 加密解密工具包。
+- [**732**Star][3m] [C] [rdesktop/rdesktop](https://github.com/rdesktop/rdesktop) rdesktop is an open source UNIX client for connecting to Windows Remote Desktop Services, capably of natively speaking Remote Desktop Protocol (RDP) in order to present the user's Windows desktop. rdesktop is known to work with Windows server version ranging from NT 4 terminal server to Windows 2012 R2.
+- [**732**Star][27d] [HTML] [pagerduty/incident-response-docs](https://github.com/pagerduty/incident-response-docs) PagerDuty's Incident Response Documentation.
+- [**731**Star][2y] [JS] [xl7dev/burpsuite](https://github.com/xl7dev/burpsuite) BurpSuite using the document and some extensions
+- [**731**Star][9m] [Py] [mr-un1k0d3r/dkmc](https://github.com/mr-un1k0d3r/dkmc) DKMC - Dont kill my cat - Malicious payload evasion tool
+- [**731**Star][29d] [C] [iaik/zombieload](https://github.com/iaik/zombieload) Proof-of-concept for the ZombieLoad attack
- [**731**Star][4m] [Lua] [cldrn/nmap-nse-scripts](https://github.com/cldrn/nmap-nse-scripts) My collection of nmap NSE scripts
-- [**731**Star][13d] [Jupyter Notebook] [bukosabino/ta](https://github.com/bukosabino/ta) Technical Analysis Library using Pandas (Python)
- [**731**Star][2y] [Py] [alex/letsencrypt-aws](https://github.com/alex/letsencrypt-aws)
+- [**730**Star][2m] [JS] [mandatoryprogrammer/xsshunter](https://github.com/mandatoryprogrammer/xsshunter) The XSS Hunter service - a portable version of XSSHunter.com
- [**730**Star][3y] [C++] [ionescu007/lxss](https://github.com/ionescu007/lxss) Fun with the Windows Subsystem for Linux (WSL/LXSS)
-- [**729**Star][1m] [C] [rapid7/metasploit-payloads](https://github.com/rapid7/metasploit-payloads) Unified repository for different Metasploit Framework payloads
-- [**729**Star][25d] [HTML] [pagerduty/incident-response-docs](https://github.com/pagerduty/incident-response-docs) PagerDuty's Incident Response Documentation.
+- [**729**Star][3d] [C] [pmem/pmdk](https://github.com/pmem/pmdk) Persistent Memory Development Kit
- [**729**Star][1y] [Ruby] [chaps-io/access-granted](https://github.com/chaps-io/access-granted) Multi-role and whitelist based authorization gem for Rails (and not only Rails!)
-- [**728**Star][2y] [JS] [xl7dev/burpsuite](https://github.com/xl7dev/burpsuite) BurpSuite using the document and some extensions
-- [**727**Star][6m] [Py] [ztgrace/changeme](https://github.com/ztgrace/changeme) A default credential scanner.
-- [**727**Star][1m] [C++] [stealth/sshttp](https://github.com/stealth/sshttp) SSH/HTTP(S) multiplexer. Run a webserver and a sshd on the same port w/o changes.
-- [**727**Star][2m] [JS] [mandatoryprogrammer/xsshunter](https://github.com/mandatoryprogrammer/xsshunter) The XSS Hunter service - a portable version of XSSHunter.com
-- [**726**Star][1y] [Py] [rfunix/pompem](https://github.com/rfunix/pompem) Find exploit tool
-- [**726**Star][10m] [PowerShell] [l0ss/grouper](https://github.com/l0ss/grouper) A PowerShell script for helping to find vulnerable settings in AD Group Policy. (deprecated, use Grouper2 instead!)
-- [**726**Star][1m] [Py] [khast3x/h8mail](https://github.com/khast3x/h8mail) Password Breach Hunting and Email OSINT tool, locally or using premium services. Supports chasing down related email
-- [**725**Star][1y] [Py] [the-robot/sqliv](https://github.com/the-robot/sqliv) massive SQL injection vulnerability scanner
-- [**725**Star][2m] [C] [jedisct1/minisign](https://github.com/jedisct1/minisign) A dead simple tool to sign files and verify digital signatures.
-- [**724**Star][21d] [TypeScript] [casbin/node-casbin](https://github.com/casbin/node-casbin) An authorization library that supports access control models like ACL, RBAC, ABAC in Node.js
-- [**723**Star][7d] [Py] [globaleaks/globaleaks](https://github.com/globaleaks/globaleaks) The Open-Source Whistleblowing Software
-- [**723**Star][6m] [Assembly] [cirosantilli/x86-assembly-cheat](https://github.com/cirosantilli/x86-assembly-cheat) the bulk of the x86 instruction examples with assertions.
-- [**723**Star][6m] [Go] [anshumanbh/git-all-secrets](https://github.com/anshumanbh/git-all-secrets) A tool to capture all the git secrets by leveraging multiple open source git searching tools
-- [**722**Star][8m] [C] [mempodippy/vlany](https://github.com/mempodippy/vlany) Linux LD_PRELOAD rootkit (x86 and x86_64 architectures)
-- [**721**Star][8d] [Perl] [gouveaheitor/nipe](https://github.com/GouveaHeitor/nipe) Nipe is a script to make Tor Network your default gateway.
-- [**721**Star][3y] [HTML] [xyntax/1000php](https://github.com/xyntax/1000php) 1000个PHP代码审计案例(2016.7以前乌云公开漏洞)
-- [**721**Star][1m] [C++] [facebook/threatexchange](https://github.com/facebook/threatexchange) Share threat information with vetted partners
+- [**728**Star][6m] [Py] [ztgrace/changeme](https://github.com/ztgrace/changeme) A default credential scanner.
+- [**727**Star][1y] [Py] [the-robot/sqliv](https://github.com/the-robot/sqliv) massive SQL injection vulnerability scanner
+- [**727**Star][10m] [PS] [l0ss/grouper](https://github.com/l0ss/grouper) A PowerShell script for helping to find vulnerable settings in AD Group Policy. (deprecated, use Grouper2 instead!)
+- [**726**Star][1m] [C++] [stealth/sshttp](https://github.com/stealth/sshttp) SSH/HTTP(S) multiplexer. Run a webserver and a sshd on the same port w/o changes.
+- [**726**Star][2m] [C] [jedisct1/minisign](https://github.com/jedisct1/minisign) A dead simple tool to sign files and verify digital signatures.
+- [**726**Star][5d] [Py] [anchore/anchore-engine](https://github.com/anchore/anchore-engine) A service that analyzes docker images and applies user-defined acceptance policies to allow automated container image validation and certification
+- [**725**Star][1y] [Py] [rfunix/pompem](https://github.com/rfunix/pompem) Find exploit tool
+- [**725**Star][3d] [Py] [globaleaks/globaleaks](https://github.com/globaleaks/globaleaks) The Open-Source Whistleblowing Software
+- [**725**Star][6m] [Assembly] [cirosantilli/x86-assembly-cheat](https://github.com/cirosantilli/x86-assembly-cheat) the bulk of the x86 instruction examples with assertions.
+- [**725**Star][2d] [Py] [abhinavsingh/proxy.py](https://github.com/abhinavsingh/proxy.py) ⚡⚡⚡Fast, Lightweight, Pluggable, TLS interception capable proxy server focused on Network monitoring, controls & Application development, testing, debugging
+- [**724**Star][10d] [Perl] [gouveaheitor/nipe](https://github.com/GouveaHeitor/nipe) Nipe is a script to make Tor Network your default gateway.
+- [**724**Star][3m] [Java] [isafeblue/trackray](https://github.com/isafeblue/trackray) 溯光 (TrackRay) 3 beta⚡渗透测试框架(资产扫描|指纹识别|暴力破解|网页爬虫|端口扫描|漏洞扫描|代码审计|AWVS|NMAP|Metasploit|SQLMap)
+- [**724**Star][6m] [Go] [anshumanbh/git-all-secrets](https://github.com/anshumanbh/git-all-secrets) A tool to capture all the git secrets by leveraging multiple open source git searching tools
+- [**723**Star][8d] [C] [strace/strace](https://github.com/strace/strace) strace is a diagnostic, debugging and instructional userspace utility for Linux
+- [**723**Star][8m] [C] [mempodippy/vlany](https://github.com/mempodippy/vlany) Linux LD_PRELOAD rootkit (x86 and x86_64 architectures)
+- [**722**Star][2m] [Py] [shawndevans/smbmap](https://github.com/shawndevans/smbmap) SMBMap is a handy SMB enumeration tool
+- [**722**Star][1y] [Py] [keystone-engine/keypatch](https://github.com/keystone-engine/keypatch) Multi-architecture assembler for IDA Pro. Powered by Keystone Engine.
+- [**722**Star][1m] [C++] [facebook/threatexchange](https://github.com/facebook/threatexchange) Share threat information with vetted partners
+- [**722**Star][3m] [Py] [cloudflare/bpftools](https://github.com/cloudflare/bpftools) BPF Tools - packet analyst toolkit
+- [**721**Star][3d] [CSS] [w-digital-scanner/w12scan](https://github.com/w-digital-scanner/w12scan) a network asset discovery engine that can automatically aggregate related assets for analysis and use
+- [**721**Star][2m] [JS] [kohgylw/kiftd](https://github.com/kohgylw/kiftd) sky driver & cloud driver open source server application : kiftd . welcome to the home page:
+- [**721**Star][1m] [Py] [diyan/pywinrm](https://github.com/diyan/pywinrm) Python library for Windows Remote Management (WinRM)
- [**720**Star][6m] [Py] [zyantific/idaskins](https://github.com/zyantific/idaskins) Plugin providing advanced skinning support for IDA Pro utilizing Qt stylesheets, similar to CSS.
-- [**720**Star][12m] [Py] [keystone-engine/keypatch](https://github.com/keystone-engine/keypatch) Multi-architecture assembler for IDA Pro. Powered by Keystone Engine.
-- [**719**Star][7d] [C] [pmem/pmdk](https://github.com/pmem/pmdk) Persistent Memory Development Kit
-- [**719**Star][9m] [Py] [mr-un1k0d3r/dkmc](https://github.com/mr-un1k0d3r/dkmc) DKMC - Dont kill my cat - Malicious payload evasion tool
-- [**719**Star][3m] [Py] [cloudflare/bpftools](https://github.com/cloudflare/bpftools) BPF Tools - packet analyst toolkit
-- [**717**Star][11d] [C] [strace/strace](https://github.com/strace/strace) strace is a diagnostic, debugging and instructional userspace utility for Linux
-- [**716**Star][10m] [C] [ztane/python-levenshtein](https://github.com/ztane/python-levenshtein) The Levenshtein Python C extension module contains functions for fast computation of Levenshtein distance and string similarity
-- [**716**Star][2m] [Py] [shawndevans/smbmap](https://github.com/shawndevans/smbmap) SMBMap is a handy SMB enumeration tool
+- [**720**Star][10m] [C] [ztane/python-levenshtein](https://github.com/ztane/python-levenshtein) The Levenshtein Python C extension module contains functions for fast computation of Levenshtein distance and string similarity
+- [**719**Star][7d] [Py] [skelsec/pypykatz](https://github.com/skelsec/pypykatz) Mimikatz implementation in pure Python
+- [**719**Star][7m] [C] [meyerd/n2n](https://github.com/meyerd/n2n) A development branch of the n2n p2p vpn software
+- [**718**Star][1y] [Shell] [c0ny1/vulstudy](https://github.com/c0ny1/vulstudy) 使用docker快速搭建各大漏洞学习平台,目前可以一键搭建12个平台。
+- [**717**Star][1y] [JS] [melonproject/oyente](https://github.com/melonproject/oyente) An Analysis Tool for Smart Contracts
+- [**716**Star][8d] [voorivex/pentest-guide](https://github.com/voorivex/pentest-guide) Penetration tests guide based on OWASP including test cases, resources and examples.
- [**716**Star][2y] [Py] [madeye/sssniff](https://github.com/madeye/sssniff) sssniff:ShadowSocks流量嗅探
-- [**715**Star][1y] [JS] [melonproject/oyente](https://github.com/melonproject/oyente) An Analysis Tool for Smart Contracts
+- [**715**Star][1m] [streaak/keyhacks](https://github.com/streaak/keyhacks) Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.
- [**715**Star][2y] [kristate/krackinfo](https://github.com/kristate/krackinfo) Vendor Response Matrix for KRACK WPA2 (Key Reinstallation Attack)
+- [**715**Star][10d] [Py] [f-secure/see](https://github.com/f-secure/see) a framework for building test automation in secured Environments
+- [**715**Star][2m] [Java] [col-e/recaf](https://github.com/col-e/recaf) A modern Java bytecode editor
+- [**714**Star][2m] [HTML] [j00ru/windows-syscalls](https://github.com/j00ru/windows-syscalls) Windows System Call Tables (NT/2000/XP/2003/Vista/2008/7/2012/8/10)
- [**714**Star][11m] [PHP] [defuse/password-hashing](https://github.com/defuse/password-hashing) Password hashing code.
-- [**713**Star][3m] [Java] [isafeblue/trackray](https://github.com/isafeblue/trackray) 溯光 (TrackRay) 3 beta⚡渗透测试框架(资产扫描|指纹识别|暴力破解|网页爬虫|端口扫描|漏洞扫描|代码审计|AWVS|NMAP|Metasploit|SQLMap)
-- [**713**Star][7d] [Py] [anchore/anchore-engine](https://github.com/anchore/anchore-engine) A service that analyzes docker images and applies user-defined acceptance policies to allow automated container image validation and certification
+- [**714**Star][1y] [Java] [d3vilbug/hackbar](https://github.com/d3vilbug/hackbar) HackBar plugin for Burpsuite
+- [**713**Star][4m] [Py] [rhinosecuritylabs/security-research](https://github.com/rhinosecuritylabs/security-research) Exploits written by the Rhino Security Labs team
+- [**713**Star][3d] [Py] [idapython/src](https://github.com/idapython/src) IDAPython project for Hex-Ray's IDA Pro
- [**713**Star][5m] [Py] [adamlaurie/rfidiot](https://github.com/adamlaurie/rfidiot) python RFID / NFC library & tools
-- [**712**Star][1y] [snifer/security-cheatsheets](https://github.com/snifer/security-cheatsheets) A collection of cheatsheets for various infosec tools and topics.
+- [**712**Star][1y] [C#] [p3nt4/powershdll](https://github.com/p3nt4/powershdll) Run PowerShell with rundll32. Bypass software restrictions.
+- [**712**Star][9d] [C] [openvisualcloud/svt-av1](https://github.com/openvisualcloud/svt-av1) Welcome to the GitHub repo for the SVT-AV1! Help us grow the community by subscribing to our SVT-AV1 mailing list!
- [**712**Star][3y] [JS] [mozilla/node-client-sessions](https://github.com/mozilla/node-client-sessions) secure sessions stored in cookies
-- [**712**Star][2m] [HTML] [j00ru/windows-syscalls](https://github.com/j00ru/windows-syscalls) Windows System Call Tables (NT/2000/XP/2003/Vista/2008/7/2012/8/10)
-- [**712**Star][1m] [Py] [diyan/pywinrm](https://github.com/diyan/pywinrm) Python library for Windows Remote Management (WinRM)
-- [**712**Star][1y] [Java] [d3vilbug/hackbar](https://github.com/d3vilbug/hackbar) HackBar plugin for Burpsuite v1.0
-- [**712**Star][2m] [Java] [col-e/recaf](https://github.com/col-e/recaf) A modern Java bytecode editor
-- [**712**Star][7d] [Py] [abhinavsingh/proxy.py](https://github.com/abhinavsingh/proxy.py) ⚡⚡⚡Fast, Lightweight, Pluggable, TLS interception capable proxy server focused on Network monitoring, controls & Application development, testing, debugging
-- [**711**Star][3m] [CSS] [w-digital-scanner/w12scan](https://github.com/w-digital-scanner/w12scan) a network asset discovery engine that can automatically aggregate related assets for analysis and use
-- [**711**Star][4m] [Py] [rhinosecuritylabs/security-research](https://github.com/rhinosecuritylabs/security-research) Exploits written by the Rhino Security Labs team
+- [**712**Star][2d] [Go] [gruntwork-io/cloud-nuke](https://github.com/gruntwork-io/cloud-nuke) A tool for cleaning up your cloud accounts by nuking (deleting) all resources within it
+- [**712**Star][3d] [C] [aircrack-ng/rtl8812au](https://github.com/aircrack-ng/rtl8812au) RTL8812AU/21AU and RTL8814AU driver with monitor mode and frame injection
+- [**711**Star][4d] [C++] [tandasat/hyperplatform](https://github.com/tandasat/hyperplatform) Intel VT-x based hypervisor aiming to provide a thin VM-exit filtering platform on Windows.
+- [**711**Star][1y] [snifer/security-cheatsheets](https://github.com/snifer/security-cheatsheets) A collection of cheatsheets for various infosec tools and topics.
- [**711**Star][3y] [C++] [nicehash/nheqminer](https://github.com/nicehash/nheqminer) Equihash miner for NiceHash
-- [**711**Star][25d] [Py] [idapython/src](https://github.com/idapython/src) IDAPython project for Hex-Ray's IDA Pro
-- [**711**Star][4m] [Go] [haccer/subjack](https://github.com/haccer/subjack) Subdomain Takeover tool written in Go
-- [**711**Star][8d] [Py] [f-secure/see](https://github.com/f-secure/see) Sandboxed Execution Environment
-- [**710**Star][14d] [voorivex/pentest-guide](https://github.com/voorivex/pentest-guide) Penetration tests guide based on OWASP including test cases, resources and examples.
-- [**710**Star][7d] [Py] [skelsec/pypykatz](https://github.com/skelsec/pypykatz) Mimikatz implementation in pure Python
-- [**709**Star][1y] [C#] [p3nt4/powershdll](https://github.com/p3nt4/powershdll) Run PowerShell with rundll32. Bypass software restrictions.
-- [**709**Star][1m] [JS] [kohgylw/kiftd](https://github.com/kohgylw/kiftd) sky driver & cloud driver open source server application : kiftd . welcome to the home page:
-- [**708**Star][17d] [Scala] [linkedin/photon-ml](https://github.com/linkedin/photon-ml) A scalable machine learning library on Apache Spark
-- [**708**Star][3m] [C++] [tandasat/hyperplatform](https://github.com/tandasat/hyperplatform) Intel VT-x based hypervisor aiming to provide a thin VM-exit filtering platform on Windows.
+- [**710**Star][2y] [Java] [rover12421/shakaapktool](https://github.com/rover12421/shakaapktool) ShakaApktool
+- [**709**Star][2y] [HTML] [rapid7/hackazon](https://github.com/rapid7/hackazon) A modern vulnerable web app
+- [**709**Star][2m] [C] [nuand/bladerf](https://github.com/nuand/bladerf) bladeRF USB 3.0 Superspeed Software Defined Radio Source Code
+- [**709**Star][2y] [Py] [google/ssl_logger](https://github.com/google/ssl_logger) Decrypts and logs a process's SSL traffic.
+- [**709**Star][4m] [bit4woo/python_sec](https://github.com/bit4woo/python_sec) python安全和代码审计相关资料收集 resource collection of python security and code review
+- [**708**Star][2d] [ly0n/awesome-robotic-tooling](https://github.com/ly0n/awesome-robotic-tooling) Robotic resources and tools for professional robotic development with ROS in C++ and Python.
+- [**708**Star][19d] [Scala] [linkedin/photon-ml](https://github.com/linkedin/photon-ml) A scalable machine learning library on Apache Spark
- [**708**Star][2y] [Go] [sidkshatriya/dontbug](https://github.com/sidkshatriya/dontbug) Dontbug is a reverse debugger for PHP
-- [**708**Star][2y] [Py] [google/ssl_logger](https://github.com/google/ssl_logger) Decrypts and logs a process's SSL traffic.
-- [**708**Star][1y] [Shell] [c0ny1/vulstudy](https://github.com/c0ny1/vulstudy) 使用docker快速搭建各大漏洞学习平台,目前可以一键搭建12个平台。
-- [**707**Star][1m] [streaak/keyhacks](https://github.com/streaak/keyhacks) Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.
-- [**707**Star][2y] [Java] [rover12421/shakaapktool](https://github.com/rover12421/shakaapktool) ShakaApktool
-- [**707**Star][2y] [HTML] [rapid7/hackazon](https://github.com/rapid7/hackazon) A modern vulnerable web app
-- [**707**Star][2m] [C] [nuand/bladerf](https://github.com/nuand/bladerf) bladeRF USB 3.0 Superspeed Software Defined Radio Source Code
+- [**708**Star][7m] [Py] [giacomolaw/keylogger](https://github.com/giacomolaw/keylogger) A simple keylogger for Windows, Linux and Mac
+- [**707**Star][5d] [Go] [pomerium/pomerium](https://github.com/pomerium/pomerium) Pomerium is an identity-aware access proxy.
+- [**707**Star][3m] [Py] [sevagas/macro_pack](https://github.com/sevagas/macro_pack) automatize obfuscation and generation of Office documents, VB scripts, shortcuts, and other formats for pentest, demo, and social engineering assessments. The goal of macro_pack is to simplify exploitation, antimalware bypass, and automatize the process from malicious macro and script generation to fin…
- [**707**Star][11m] [HTML] [juansacco/exploitpack](https://github.com/juansacco/exploitpack) Exploit Pack -The next generation exploit framework
-- [**707**Star][7m] [Py] [giacomolaw/keylogger](https://github.com/giacomolaw/keylogger) A simple keylogger for Windows, Linux and Mac
-- [**706**Star][12d] [C] [openvisualcloud/svt-av1](https://github.com/openvisualcloud/svt-av1) Welcome to the GitHub repo for the SVT-AV1! Help us grow the community by subscribing to our SVT-AV1 mailing list!
-- [**706**Star][21d] [Go] [gruntwork-io/cloud-nuke](https://github.com/gruntwork-io/cloud-nuke) A tool for cleaning up your cloud accounts by nuking (deleting) all resources within it
-- [**706**Star][4m] [JS] [crits/crits](https://github.com/crits/crits) Collaborative Research Into Threats
-- [**704**Star][3y] [PowerShell] [gimini/powermemory](https://github.com/gimini/powermemory) Exploit the credentials present in files and memory
-- [**704**Star][4m] [bit4woo/python_sec](https://github.com/bit4woo/python_sec) python安全和代码审计相关资料收集 resource collection of python security and code review
-- [**703**Star][2y] [PowerShell] [samratashok/kautilya](https://github.com/samratashok/kautilya) Kautilya - Tool for easy use of Human Interface Devices for offensive security and penetration testing.
-- [**703**Star][10d] [C] [aircrack-ng/rtl8812au](https://github.com/aircrack-ng/rtl8812au) RTL8812AU/21AU and RTL8814AU driver with monitor mode and frame injection
-- [**701**Star][4y] [Py] [androbugs/androbugs_framework](https://github.com/androbugs/androbugs_framework) AndroBugs Framework is an efficient Android vulnerability scanner that helps developers or hackers find potential security vulnerabilities in Android applications. No need to install on Windows.
+- [**707**Star][5m] [JS] [crits/crits](https://github.com/crits/crits) Collaborative Research Into Threats
+- [**706**Star][27d] [PHP] [ssl/ezxss](https://github.com/ssl/ezxss) ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.
+- [**705**Star][3y] [PS] [gimini/powermemory](https://github.com/gimini/powermemory) Exploit the credentials present in files and memory
+- [**705**Star][4y] [Py] [androbugs/androbugs_framework](https://github.com/androbugs/androbugs_framework) AndroBugs Framework is an efficient Android vulnerability scanner that helps developers or hackers find potential security vulnerabilities in Android applications. No need to install on Windows.
+- [**704**Star][5d] [hackplayers/hackthebox-writeups](https://github.com/hackplayers/hackthebox-writeups) Writeups for HacktheBox 'boot2root' machines
+- [**704**Star][2y] [PS] [samratashok/kautilya](https://github.com/samratashok/kautilya) a toolkit which provides various payloads for a Human Interface Device which may help in breaking in a computer during penetration tests.
+- [**704**Star][9d] [Py] [mushorg/conpot](https://github.com/mushorg/conpot) ICS/SCADA honeypot
+- [**703**Star][1y] [Jupyter Notebook] [anishathalye/obfuscated-gradients](https://github.com/anishathalye/obfuscated-gradients) Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples
+- [**702**Star][4m] [C++] [darthton/xenos](https://github.com/darthton/xenos) Windows dll injector
+- [**701**Star][5y] [C] [malcolmrobb/dump1090](https://github.com/malcolmrobb/dump1090) Dump1090 is a simple Mode S decoder for RTLSDR devices
+- [**701**Star][1m] [C++] [cmu-sei/pharos](https://github.com/cmu-sei/pharos) Automated static analysis tools for binary programs
- [**700**Star][2y] [yichengchen/shadowsocksx-r](https://github.com/yichengchen/shadowsocksx-r) Next Generation of ShadowsocksX
-- [**700**Star][3m] [Py] [sevagas/macro_pack](https://github.com/sevagas/macro_pack) automatize obfuscation and generation of Office documents, VB scripts, shortcuts, and other formats for pentest, demo, and social engineering assessments. The goal of macro_pack is to simplify exploitation, antimalware bypass, and automatize the process from malicious macro and script generation to fin…
-- [**700**Star][1m] [C++] [cmu-sei/pharos](https://github.com/cmu-sei/pharos) Automated static analysis tools for binary programs
-- [**699**Star][5y] [C] [malcolmrobb/dump1090](https://github.com/malcolmrobb/dump1090) Dump1090 is a simple Mode S decoder for RTLSDR devices
-- [**699**Star][8d] [Ruby] [intrigueio/intrigue-core](https://github.com/intrigueio/intrigue-core) Discover Your Attack Surface
-- [**699**Star][4m] [C++] [darthton/xenos](https://github.com/darthton/xenos) Windows dll injector
-- [**698**Star][4y] [Py] [gunnery/gunnery](https://github.com/gunnery/gunnery) Remote task execution tool
-- [**698**Star][1y] [Jupyter Notebook] [anishathalye/obfuscated-gradients](https://github.com/anishathalye/obfuscated-gradients) Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples
-- [**697**Star][13d] [C#] [mganss/htmlsanitizer](https://github.com/mganss/htmlsanitizer) Cleans HTML to avoid XSS attacks
-- [**697**Star][1y] [Py] [bugscanteam/dnslog](https://github.com/bugscanteam/dnslog) 监控 DNS 解析记录和 HTTP 访问记录的工具。
+- [**700**Star][15d] [C#] [multipoolminer/multipoolminer](https://github.com/multipoolminer/multipoolminer) Monitors crypto mining pools in real-time in order to find the most profitable for your machine. Controls any miner that is available via command line.
+- [**699**Star][8d] [C#] [mganss/htmlsanitizer](https://github.com/mganss/htmlsanitizer) Cleans HTML to avoid XSS attacks
+- [**699**Star][10d] [Ruby] [intrigueio/intrigue-core](https://github.com/intrigueio/intrigue-core) Discover Your Attack Surface
+- [**699**Star][4y] [Py] [gunnery/gunnery](https://github.com/gunnery/gunnery) Remote task execution tool
+- [**699**Star][1y] [Py] [bugscanteam/dnslog](https://github.com/bugscanteam/dnslog) 监控 DNS 解析记录和 HTTP 访问记录的工具。
+- [**698**Star][22d] [C] [scanmem/scanmem](https://github.com/scanmem/scanmem) memory scanner for Linux
+- [**698**Star][2m] [Py] [mjg59/python-broadlink](https://github.com/mjg59/python-broadlink) Python module for controlling Broadlink RM2/3 (Pro) remote controls, A1 sensor platforms and SP2/3 smartplugs
+- [**697**Star][8m] [C] [hfiref0x/tdl](https://github.com/hfiref0x/tdl) Driver loader for bypassing Windows x64 Driver Signature Enforcement
- [**697**Star][4m] [CSS] [ajinabraham/cmsscan](https://github.com/ajinabraham/cmsscan) Scan Wordpress, Drupal, Joomla, vBulletin websites for Security issues
-- [**696**Star][25d] [PHP] [ssl/ezxss](https://github.com/ssl/ezxss) ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.
-- [**696**Star][20d] [C] [scanmem/scanmem](https://github.com/scanmem/scanmem) memory scanner for Linux
-- [**696**Star][8d] [Py] [mushorg/conpot](https://github.com/mushorg/conpot) ICS/SCADA honeypot
-- [**694**Star][2y] [Py] [sensepost/det](https://github.com/sensepost/det) (extensible) Data Exfiltration Toolkit (DET)
-- [**694**Star][2m] [Py] [mjg59/python-broadlink](https://github.com/mjg59/python-broadlink) Python module for controlling Broadlink RM2/3 (Pro) remote controls, A1 sensor platforms and SP2/3 smartplugs
-- [**694**Star][8m] [C] [hfiref0x/tdl](https://github.com/hfiref0x/tdl) Driver loader for bypassing Windows x64 Driver Signature Enforcement
-- [**693**Star][11d] [hackplayers/hackthebox-writeups](https://github.com/hackplayers/hackthebox-writeups) Writeups for HacktheBox 'boot2root' machines
-- [**693**Star][5m] [C++] [stealth/opmsg](https://github.com/stealth/opmsg) opmsg message encryption
+- [**696**Star][2m] [C#] [harleyqu1nn/aggressorscripts](https://github.com/harleyqu1nn/aggressorscripts) Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources
+- [**695**Star][3m] [uknowsec/active-directory-pentest-notes](https://github.com/uknowsec/active-directory-pentest-notes) 个人域渗透学习笔记
+- [**695**Star][5m] [C++] [stealth/opmsg](https://github.com/stealth/opmsg) opmsg message encryption
+- [**695**Star][2y] [Py] [sensepost/det](https://github.com/sensepost/det) a proof of concept to perform Data Exfiltration using either single or multiple channel(s) at the same time.
+- [**693**Star][1m] [YARA] [rednaga/apkid](https://github.com/rednaga/apkid) Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android
- [**693**Star][3m] [netflix/security-bulletins](https://github.com/netflix/security-bulletins) Security Bulletins that relate to Netflix Open Source
-- [**693**Star][2m] [C#] [harleyqu1nn/aggressorscripts](https://github.com/harleyqu1nn/aggressorscripts) Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources
+- [**693**Star][2m] [Go] [dliv3/venom](https://github.com/dliv3/venom) Venom - A Multi-hop Proxy for Penetration Testers
- [**692**Star][3y] [Ruby] [phatworx/devise_security_extension](https://github.com/phatworx/devise_security_extension) An enterprise security extension for devise, trying to meet industrial standard security demands for web applications.
-- [**691**Star][3m] [uknowsec/active-directory-pentest-notes](https://github.com/uknowsec/active-directory-pentest-notes) 个人域渗透学习笔记
-- [**691**Star][8m] [JS] [zyfworks/steam-key](https://github.com/zyfworks/steam-key) Online activation tool for Steam.
-- [**691**Star][1m] [YARA] [rednaga/apkid](https://github.com/rednaga/apkid) Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android
-- [**689**Star][5m] [C++] [google/certificate-transparency](https://github.com/google/certificate-transparency) Auditing for TLS certificates.
-- [**688**Star][5y] [C] [vmt/udis86](https://github.com/vmt/udis86) Disassembler Library for x86 and x86-64
+- [**692**Star][3d] [HTML] [owasp/asvs](https://github.com/owasp/asvs) Application Security Verification Standard
+- [**691**Star][15d] [C] [shadow/shadow](https://github.com/shadow/shadow) shadow:独特的离散事件(discrete-event)网络仿真器/模拟器,可以通过模拟互联网拓扑运行真正的应用程序,如 Tor 和 Bitcoin
+- [**691**Star][5m] [C++] [google/certificate-transparency](https://github.com/google/certificate-transparency) Auditing for TLS certificates.
+- [**691**Star][2m] [C++] [bareflank/hypervisor](https://github.com/bareflank/hypervisor) lightweight hypervisor SDK written in C++ with support for Windows, Linux and UEFI
+- [**690**Star][8m] [JS] [zyfworks/steam-key](https://github.com/zyfworks/steam-key) Online activation tool for Steam.
+- [**690**Star][5y] [C] [vmt/udis86](https://github.com/vmt/udis86) Disassembler Library for x86 and x86-64
+- [**690**Star][2d] [C] [powershell/openssh-portable](https://github.com/powershell/openssh-portable) Portable OpenSSH, all Win32-OpenSSH releases and wiki are managed at
+- [**690**Star][7m] [Py] [mr-un1k0d3r/powerlessshell](https://github.com/mr-un1k0d3r/powerlessshell) rely on MSBuild.exe to remotely execute PowerShell scripts and commands without spawning powershell.exe.
+- [**689**Star][28d] [Java] [wrbug/developerhelper](https://github.com/wrbug/developerhelper) 帮助开发人员快速开发的工具
+- [**688**Star][6m] [Py] [mobier/shadowsocksr-speed](https://github.com/mobier/shadowsocksr-speed) SSR 批量测试节点有效带宽
- [**688**Star][7y] [Ruby] [juuso/bozocrack](https://github.com/juuso/bozocrack) A silly & effective MD5 cracker in Ruby
-- [**687**Star][7m] [Py] [mr-un1k0d3r/powerlessshell](https://github.com/mr-un1k0d3r/powerlessshell) Run PowerShell command without invoking powershell.exe
-- [**687**Star][2m] [Go] [dliv3/venom](https://github.com/dliv3/venom) Venom - A Multi-hop Proxy for Penetration Testers
-- [**686**Star][21d] [OCaml] [moby/vpnkit](https://github.com/moby/vpnkit) A toolkit for embedding VPN capabilities in your application
-- [**686**Star][7d] [C] [powershell/openssh-portable](https://github.com/powershell/openssh-portable) Portable OpenSSH, all Win32-OpenSSH releases and wiki are managed at
-- [**686**Star][7d] [Java] [peergos/peergos](https://github.com/peergos/peergos) A decentralised, secure file storage and social network
-- [**686**Star][8m] [Py] [kiorky/spynner](https://github.com/kiorky/spynner) Programmatic web browsing module with AJAX support for Python
-- [**685**Star][2m] [C#] [cobbr/sharpsploit](https://github.com/cobbr/sharpsploit) SharpSploit is a .NET post-exploitation library written in C#
-- [**685**Star][8m] [Shell] [1n3/brutex](https://github.com/1n3/brutex) Automatically brute force all services running on a target.
-- [**684**Star][1y] [C] [saelo/pwn2own2018](https://github.com/saelo/pwn2own2018) Pwn2Own 2018 Safari+macOS 漏洞利用链
-- [**684**Star][10m] [Py] [merrychap/shellen](https://github.com/merrychap/shellen) an interactive shellcoding environment.
-- [**682**Star][9m] [Shell] [dmarmor/epichrome](https://github.com/dmarmor/epichrome) An application (Epichrome.app) and Chrome extension (Epichrome Helper) to create and use Chrome-based SSBs on Mac OSX.
-- [**681**Star][12m] [HTML] [zhengmin1989/myarticles](https://github.com/zhengmin1989/myarticles) 蒸米的文章(iOS冰与火之歌系列,一步一步学ROP系列,安卓动态调试七种武器系列等)
-- [**681**Star][22d] [HTML] [owasp/asvs](https://github.com/owasp/asvs) Application Security Verification Standard
-- [**681**Star][5m] [leezj9671/pentest_interview](https://github.com/leezj9671/pentest_interview) 个人准备渗透测试和安全面试的经验之谈,和去部分厂商的面试题,干货真的满满~
-- [**680**Star][10m] [Objective-C] [unixpickle/jamwifi](https://github.com/unixpickle/jamwifi) A GUI, easy to use WiFi network jammer for Mac OS X
-- [**679**Star][17d] [Py] [rurik/noriben](https://github.com/rurik/noriben) Portable, Simple, Malware Analysis Sandbox
-- [**679**Star][1m] [Py] [iceyhexman/onlinetools](https://github.com/iceyhexman/onlinetools) 在线cms识别|信息泄露|工控|系统|物联网安全|cms漏洞扫描|nmap端口扫描|子域名获取|待续..
-- [**679**Star][11d] [Py] [grayddq/gscan](https://github.com/grayddq/gscan) 本程序旨在为安全应急响应人员对Linux主机排查时提供便利,实现主机侧Checklist的自动全面化检测,根据检测结果自动数据聚合,进行黑客攻击路径溯源。
-- [**679**Star][2m] [andrewjkerr/security-cheatsheets](https://github.com/andrewjkerr/security-cheatsheets)
-- [**678**Star][2m] [Swift] [yenom/bitcoinkit](https://github.com/yenom/BitcoinKit) Bitcoin protocol toolkit for Swift
+- [**688**Star][13d] [Py] [grayddq/gscan](https://github.com/grayddq/gscan) 本程序旨在为安全应急响应人员对Linux主机排查时提供便利,实现主机侧Checklist的自动全面化检测,根据检测结果自动数据聚合,进行黑客攻击路径溯源。
+- [**688**Star][2m] [C#] [cobbr/sharpsploit](https://github.com/cobbr/sharpsploit) SharpSploit is a .NET post-exploitation library written in C#
+- [**687**Star][2d] [Java] [peergos/peergos](https://github.com/peergos/peergos) A decentralised, secure file storage and social network
+- [**687**Star][8m] [Py] [kiorky/spynner](https://github.com/kiorky/spynner) Programmatic web browsing module with AJAX support for Python
+- [**687**Star][2y] [C] [1n3/privesc](https://github.com/1n3/privesc) A collection of Windows, Linux and MySQL privilege escalation scripts and exploits.
+- [**687**Star][8m] [Shell] [1n3/brutex](https://github.com/1n3/brutex) Automatically brute force all services running on a target.
+- [**686**Star][23d] [OCaml] [moby/vpnkit](https://github.com/moby/vpnkit) A toolkit for embedding VPN capabilities in your application
+- [**686**Star][10m] [Py] [merrychap/shellen](https://github.com/merrychap/shellen) an interactive shellcoding environment.
+- [**686**Star][5m] [leezj9671/pentest_interview](https://github.com/leezj9671/pentest_interview) pentest interview experience
+- [**685**Star][1y] [C] [saelo/pwn2own2018](https://github.com/saelo/pwn2own2018) Pwn2Own 2018 Safari+macOS 漏洞利用链
+- [**685**Star][1m] [Py] [iceyhexman/onlinetools](https://github.com/iceyhexman/onlinetools) 在线cms识别|信息泄露|工控|系统|物联网安全|cms漏洞扫描|nmap端口扫描|子域名获取|待续..
+- [**683**Star][12m] [HTML] [zhengmin1989/myarticles](https://github.com/zhengmin1989/myarticles) 蒸米的文章(iOS冰与火之歌系列,一步一步学ROP系列,安卓动态调试七种武器系列等)
+- [**683**Star][5y] [C] [antirez/hping](https://github.com/antirez/hping) send custom TCP/IP packets and to display target replies like ping do with ICMP replies
+- [**683**Star][2m] [JS] [animir/node-rate-limiter-flexible](https://github.com/animir/node-rate-limiter-flexible) Node.js rate limit requests by key with atomic increments. Protection from DDoS and Brute-Force attacks in process Memory, Redis, MongoDb, Memcached, MySQL, PostgreSQL, Cluster or PM
+- [**681**Star][11m] [ObjC] [unixpickle/jamwifi](https://github.com/unixpickle/jamwifi) A GUI, easy to use WiFi network jammer for Mac OS X
+- [**681**Star][19d] [Py] [rurik/noriben](https://github.com/rurik/noriben) Portable, Simple, Malware Analysis Sandbox
+- [**680**Star][6m] [Py] [paranoidninja/carboncopy](https://github.com/paranoidninja/carboncopy) A tool which creates a spoofed certificate of any online website and signs an Executable for AV Evasion. Works for both Windows and Linux
+- [**680**Star][9m] [Shell] [dmarmor/epichrome](https://github.com/dmarmor/epichrome) An application (Epichrome.app) and Chrome extension (Epichrome Helper) to create and use Chrome-based SSBs on Mac OSX.
+- [**680**Star][2m] [andrewjkerr/security-cheatsheets](https://github.com/andrewjkerr/security-cheatsheets)
+- [**679**Star][2m] [Swift] [yenom/bitcoinkit](https://github.com/yenom/BitcoinKit) Bitcoin protocol toolkit for Swift
+- [**679**Star][1y] [PS] [arvanaghi/sessiongopher](https://github.com/Arvanaghi/SessionGopher) a PowerShell tool that uses WMI to extract saved session information for remote access tools such as WinSCP, PuTTY, SuperPuTTY, FileZilla, and Microsoft Remote Desktop. It can be run remotely or locally.
+- [**678**Star][2d] [Java] [ron190/jsql-injection](https://github.com/ron190/jsql-injection) a Java application for automatic SQL database injection.
+- [**678**Star][2m] [Go] [pquerna/otp](https://github.com/pquerna/otp) One Time Password utilities Go
+- [**678**Star][2d] [Kotlin] [mygod/vpnhotspot](https://github.com/mygod/vpnhotspot) Share your VPN connection over hotspot or repeater! (root required)
- [**678**Star][2y] [Py] [kkevsterrr/backdoorme](https://github.com/kkevsterrr/backdoorme) powerful auto-backdooring utility
-- [**677**Star][5m] [Py] [mobier/shadowsocksr-speed](https://github.com/mobier/shadowsocksr-speed) SSR 批量测试节点有效带宽
-- [**676**Star][8d] [Java] [ron190/jsql-injection](https://github.com/ron190/jsql-injection) a Java application for automatic SQL database injection.
-- [**676**Star][5y] [C] [antirez/hping](https://github.com/antirez/hping) send custom TCP/IP packets and to display target replies like ping do with ICMP replies
-- [**676**Star][11d] [XSLT] [adon90/pentest_compilation](https://github.com/adon90/pentest_compilation) Compilation of commands, tips and scripts that helped me throughout Vulnhub, Hackthebox, OSCP and real scenarios
-- [**675**Star][26d] [Java] [wrbug/developerhelper](https://github.com/wrbug/developerhelper) 帮助开发人员快速开发的工具
-- [**675**Star][27d] [ptresearch/attackdetection](https://github.com/ptresearch/attackdetection) Attack Detection
-- [**674**Star][7m] [PHP] [ircmaxell/php-compiler](https://github.com/ircmaxell/php-compiler) A compiler. For PHP
-- [**674**Star][7m] [C] [google/boringssl](https://github.com/google/boringssl) Mirror of BoringSSL
-- [**673**Star][1y] [PowerShell] [arvanaghi/sessiongopher](https://github.com/Arvanaghi/SessionGopher) SessionGopher is a PowerShell tool that uses WMI to extract saved session information for remote access tools such as WinSCP, PuTTY, SuperPuTTY, FileZilla, and Microsoft Remote Desktop. It can be run remotely or locally.
-- [**673**Star][2m] [Go] [pquerna/otp](https://github.com/pquerna/otp) TOTP library for Go
+- [**678**Star][3d] [Py] [kevthehermit/pastehunter](https://github.com/kevthehermit/pastehunter) Scanning pastebin with yara rules
+- [**677**Star][29d] [ptresearch/attackdetection](https://github.com/ptresearch/attackdetection) searches for new vulnerabilities and 0-days, reproduces it and creates PoC exploits to understand how these security flaws work and how related attacks can be detected on the network layer
+- [**677**Star][1m] [Go] [google/gofuzz](https://github.com/google/gofuzz) Fuzz testing for go.
+- [**677**Star][13d] [XSLT] [adon90/pentest_compilation](https://github.com/adon90/pentest_compilation) Compilation of commands, tips and scripts that helped me throughout Vulnhub, Hackthebox, OSCP and real scenarios
+- [**676**Star][10d] [C] [zerbea/hcxdumptool](https://github.com/zerbea/hcxdumptool) Small tool to capture packets from wlan devices.
+- [**676**Star][5m] [C#] [outflanknl/evilclippy](https://github.com/outflanknl/evilclippy) A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows.
+- [**675**Star][5d] [C] [google/boringssl](https://github.com/google/boringssl) Mirror of BoringSSL
+- [**674**Star][7m] [Java] [pagalaxylab/yahfa](https://github.com/PAGalaxyLab/YAHFA) Yet Another Hook Framework for ART
+- [**674**Star][3y] [PHP] [xl7dev/webshell](https://github.com/xl7dev/webshell) Webshell && Backdoor Collection
+- [**674**Star][3y] [Batchfile] [ufologist/onekey-decompile-apk](https://github.com/ufologist/onekey-decompile-apk) 一步到位反编译apk工具(onekey decompile apk)
+- [**674**Star][1y] [Py] [endgameinc/rta](https://github.com/endgameinc/rta) a framework of scripts designed to allow blue teams to test their detection capabilities against malicious tradecraft, modeled after MITRE ATT&CK.
+- [**674**Star][1y] [C] [billy-ellis/exploit-challenges](https://github.com/billy-ellis/exploit-challenges) A collection of vulnerable ARM binaries for practicing exploit development
+- [**673**Star][2y] [Py] [trycatchhcf/dumpsterfire](https://github.com/trycatchhcf/dumpsterfire) A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event s…
- [**673**Star][8m] [offensive-security/kali-arm-build-scripts](https://github.com/offensive-security/kali-arm-build-scripts) Kali Linux ARM build scripts
-- [**673**Star][1m] [Kotlin] [mygod/vpnhotspot](https://github.com/mygod/vpnhotspot) Share your VPN connection over hotspot or repeater! (root required)
-- [**673**Star][9d] [Py] [kevthehermit/pastehunter](https://github.com/kevthehermit/pastehunter) Scanning pastebin with yara rules
-- [**673**Star][1y] [C] [billy-ellis/exploit-challenges](https://github.com/billy-ellis/exploit-challenges) A collection of vulnerable ARM binaries for practicing exploit development
-- [**672**Star][3y] [PHP] [xl7dev/webshell](https://github.com/xl7dev/webshell) Webshell && Backdoor Collection
-- [**672**Star][7m] [Go] [honeytrap/honeytrap](https://github.com/honeytrap/honeytrap) Advanced Honeypot framework.
-- [**671**Star][3y] [Batchfile] [ufologist/onekey-decompile-apk](https://github.com/ufologist/onekey-decompile-apk) 一步到位反编译apk工具(onekey decompile apk)
-- [**671**Star][6y] [C] [robertdavidgraham/heartleech](https://github.com/robertdavidgraham/heartleech) Demonstrates the "heartbleed" problem using full OpenSSL stack
-- [**671**Star][1m] [Go] [google/gofuzz](https://github.com/google/gofuzz) Fuzz testing for go.
+- [**673**Star][7m] [PHP] [ircmaxell/php-compiler](https://github.com/ircmaxell/php-compiler) A compiler. For PHP
+- [**673**Star][7m] [Go] [honeytrap/honeytrap](https://github.com/honeytrap/honeytrap) Advanced Honeypot framework.
+- [**672**Star][4m] [Py] [v3n0m-scanner/v3n0m-scanner](https://github.com/v3n0m-scanner/v3n0m-scanner) Popular Pentesting scanner in Python3.6 for SQLi/XSS/LFI/RFI and other Vulns
+- [**672**Star][22d] [C#] [obfuscar/obfuscar](https://github.com/obfuscar/obfuscar) Open source obfuscation tool for .NET assemblies
+- [**672**Star][2m] [Ruby] [mozilla/ssh_scan](https://github.com/mozilla/ssh_scan) A prototype SSH configuration and policy scanner (Blog:
+- [**672**Star][7d] [Py] [blackorbird/apt_report](https://github.com/blackorbird/apt_report) Interesting apt report collection and some special ioc express
+- [**671**Star][10m] [JS] [theori-io/pwnjs](https://github.com/theori-io/pwnjs) A Javascript library for browser exploitation
- [**671**Star][5m] [bloodzer0/ossa](https://github.com/bloodzer0/ossa) Open-Source Security Architecture | 开源安全架构
-- [**670**Star][7m] [Java] [pagalaxylab/yahfa](https://github.com/PAGalaxyLab/YAHFA) Yet Another Hook Framework for ART
-- [**670**Star][2y] [Py] [trycatchhcf/dumpsterfire](https://github.com/trycatchhcf/dumpsterfire) "Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event s…
-- [**670**Star][10m] [JS] [theori-io/pwnjs](https://github.com/theori-io/pwnjs) A Javascript library for browser exploitation
-- [**670**Star][4m] [C#] [outflanknl/evilclippy](https://github.com/outflanknl/evilclippy) A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows.
+- [**670**Star][4y] [praetorian-code/hob0rules](https://github.com/praetorian-code/Hob0Rules) Password cracking rules for Hashcat based on statistics and industry patterns
+- [**670**Star][4d] [C#] [uxmal/reko](https://github.com/uxmal/reko) Reko is a binary decompiler.
+- [**670**Star][6y] [C] [robertdavidgraham/heartleech](https://github.com/robertdavidgraham/heartleech) Demonstrates the "heartbleed" problem using full OpenSSL stack
- [**670**Star][3y] [Py] [n1nj4sec/memorpy](https://github.com/n1nj4sec/memorpy) Python library using ctypes to search/edit windows / linux / macOS / SunOS programs memory
-- [**670**Star][2m] [Ruby] [mozilla/ssh_scan](https://github.com/mozilla/ssh_scan) A prototype SSH configuration and policy scanner (Blog:
-- [**670**Star][1y] [Py] [endgameinc/rta](https://github.com/endgameinc/rta)
-- [**670**Star][2m] [JS] [animir/node-rate-limiter-flexible](https://github.com/animir/node-rate-limiter-flexible) Node.js rate limit requests by key with atomic increments. Protection from DDoS and Brute-Force attacks in process Memory, Redis, MongoDb, Memcached, MySQL, PostgreSQL, Cluster or PM
-- [**670**Star][2y] [C] [1n3/privesc](https://github.com/1n3/privesc) A collection of Windows, Linux and MySQL privilege escalation scripts and exploits.
-- [**669**Star][4m] [Py] [v3n0m-scanner/v3n0m-scanner](https://github.com/v3n0m-scanner/v3n0m-scanner) Popular Pentesting scanner in Python3.6 for SQLi/XSS/LFI/RFI and other Vulns
-- [**669**Star][7d] [C#] [uxmal/reko](https://github.com/uxmal/reko) Reko is a binary decompiler.
-- [**668**Star][4y] [praetorian-code/hob0rules](https://github.com/praetorian-code/Hob0Rules) Password cracking rules for Hashcat based on statistics and industry patterns
-- [**666**Star][20d] [C#] [obfuscar/obfuscar](https://github.com/obfuscar/obfuscar) Open source obfuscation tool for .NET assemblies
-- [**666**Star][2y] [Py] [lijiejie/htpwdscan](https://github.com/lijiejie/htpwdscan) A python HTTP weak pass scanner
-- [**666**Star][1m] [doridori/android-security-reference](https://github.com/doridori/android-security-reference) A W.I.P Android Security Ref
-- [**666**Star][18d] [Py] [blackorbird/apt_report](https://github.com/blackorbird/apt_report) Interesting apt report collection and some special ioc express
-- [**664**Star][8d] [C] [zerbea/hcxdumptool](https://github.com/zerbea/hcxdumptool) Small tool to capture packets from wlan devices.
-- [**664**Star][6m] [Py] [paranoidninja/carboncopy](https://github.com/paranoidninja/carboncopy) A tool which creates a spoofed certificate of any online website and signs an Executable for AV Evasion. Works for both Windows and Linux
-- [**664**Star][2y] [Py] [jhaddix/domain](https://github.com/jhaddix/domain) Setup script for Regon-ng
-- [**664**Star][7y] [Java] [honeynet/apkinspector](https://github.com/honeynet/apkinspector) APKinspector is a powerful GUI tool for analysts to analyze the Android applications.
-- [**664**Star][1y] [dsasmblr/hacking-online-games](https://github.com/dsasmblr/hacking-online-games) A curated list of tutorials/resources for hacking online games.
-- [**664**Star][1y] [Go] [0x09al/raven](https://github.com/0x09al/raven) raven is a Linkedin information gathering tool that can be used by pentesters to gather information about an organization employees using Linkedin.
-- [**663**Star][10m] [C++] [zrax/pycdc](https://github.com/zrax/pycdc) C++ python bytecode disassembler and decompiler
+- [**669**Star][11d] [Shell] [wslutilities/wslu](https://github.com/wslutilities/wslu) A collection of utilities for Windows 10 Linux Subsystems
+- [**668**Star][8d] [C++] [leggedrobotics/darknet_ros](https://github.com/leggedrobotics/darknet_ros) YOLO ROS: Real-Time Object Detection for ROS
+- [**668**Star][23d] [HCL] [rhinosecuritylabs/cloudgoat](https://github.com/rhinosecuritylabs/cloudgoat) CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool
+- [**667**Star][10m] [C++] [zrax/pycdc](https://github.com/zrax/pycdc) C++ python bytecode disassembler and decompiler
+- [**667**Star][2y] [Py] [lijiejie/htpwdscan](https://github.com/lijiejie/htpwdscan) A python HTTP weak pass scanner
+- [**667**Star][11d] [Py] [kbandla/dpkt](https://github.com/kbandla/dpkt) fast, simple packet creation / parsing, with definitions for the basic TCP/IP protocols
+- [**667**Star][3m] [C#] [ghostpack/rubeus](https://github.com/ghostpack/rubeus) a C# toolset for raw Kerberos interaction and abuses.
+- [**667**Star][1y] [dsasmblr/hacking-online-games](https://github.com/dsasmblr/hacking-online-games) A curated list of tutorials/resources for hacking online games.
+- [**667**Star][1m] [doridori/android-security-reference](https://github.com/doridori/android-security-reference) A W.I.P Android Security Ref
+- [**667**Star][17d] [Py] [anouarbensaad/vulnx](https://github.com/anouarbensaad/vulnx) An Intelligent Bot Auto Shell Injector that detect vulnerabilities in multiple types of CMS
+- [**666**Star][8m] [Py] [m4ll0k/wpseku](https://github.com/m4ll0k/wpseku) WPSeku - Wordpress Security Scanner
+- [**665**Star][6m] [C] [robertdavidgraham/rdpscan](https://github.com/robertdavidgraham/rdpscan) A quick scanner for the CVE-2019-0708 "BlueKeep" vulnerability.
+- [**665**Star][2y] [Py] [jhaddix/domain](https://github.com/jhaddix/domain) Setup script for Regon-ng
+- [**665**Star][7y] [Java] [honeynet/apkinspector](https://github.com/honeynet/apkinspector) APKinspector is a powerful GUI tool for analysts to analyze the Android applications.
+- [**665**Star][23d] [C] [google/afl](https://github.com/google/afl) american fuzzy lop - a security-oriented fuzzer
+- [**664**Star][8d] [Py] [jazzband/django-axes](https://github.com/jazzband/django-axes) Keep track of failed login attempts in Django-powered sites.
+- [**664**Star][7d] [Py] [gwen001/pentest-tools](https://github.com/gwen001/pentest-tools) My collection of custom tools I use in my daily.
+- [**664**Star][6m] [Py] [droope/droopescan](https://github.com/droope/droopescan) A plugin-based scanner that aids security researchers in identifying issues with several CMSs, mainly Drupal & Silverstripe.
+- [**663**Star][11m] [C#] [wwillv/godofhacker](https://github.com/wwillv/godofhacker) 黑客神器
- [**663**Star][2y] [shadowsocksr-backup/shadowsocksx-ng](https://github.com/shadowsocksr-backup/shadowsocksx-ng) Next Generation of ShadowsocksX
-- [**663**Star][8m] [Py] [m4ll0k/wpseku](https://github.com/m4ll0k/wpseku) WPSeku - Wordpress Security Scanner
-- [**663**Star][6m] [Py] [droope/droopescan](https://github.com/droope/droopescan) A plugin-based scanner that aids security researchers in identifying issues with several CMSs, mainly Drupal & Silverstripe.
-- [**662**Star][11m] [C#] [wwillv/godofhacker](https://github.com/wwillv/godofhacker) 黑客神器
-- [**662**Star][3m] [C#] [ghostpack/rubeus](https://github.com/ghostpack/rubeus) Trying to tame the three-headed dog.
+- [**663**Star][6m] [C++] [gossip-sjtu/armariris](https://github.com/gossip-sjtu/armariris) 孤挺花(Armariris) -- 由上海交通大学密码与计算机安全实验室维护的LLVM混淆框架
+- [**663**Star][28d] [Java] [google/conscrypt](https://github.com/google/conscrypt) Conscrypt is a Java Security Provider that implements parts of the Java Cryptography Extension and Java Secure Socket Extension.
+- [**663**Star][5m] [Py] [aploium/shootback](https://github.com/aploium/shootback) a reverse TCP tunnel let you access target behind NAT or firewall
+- [**663**Star][1y] [Go] [0x09al/raven](https://github.com/0x09al/raven) raven is a Linkedin information gathering tool that can be used by pentesters to gather information about an organization employees using Linkedin.
+- [**662**Star][9m] [C] [samdenty/wi-pwn](https://github.com/samdenty/Wi-PWN) performs deauth attacks on cheap Arduino boards
+- [**662**Star][4d] [JS] [sadeghhayeri/greentunnel](https://github.com/sadeghhayeri/greentunnel) Green Tunnel is an anti-censorship utility designed to bypass DPI system that are put in place by various ISPs to block access to certain websites.
+- [**662**Star][6m] [Py] [golismero/golismero](https://github.com/golismero/golismero) an open source framework for security testing. It's currently geared towards web security, but it can easily be expanded to other kinds of scans.
- [**661**Star][2y] [Py] [ysrc/gourdscanv2](https://github.com/ysrc/gourdscanv2) 被动式漏洞扫描系统
-- [**661**Star][6m] [C] [robertdavidgraham/rdpscan](https://github.com/robertdavidgraham/rdpscan) A quick scanner for the CVE-2019-0708 "BlueKeep" vulnerability.
-- [**661**Star][5m] [Py] [aploium/shootback](https://github.com/aploium/shootback) a reverse TCP tunnel let you access target behind NAT or firewall
-- [**661**Star][15d] [Py] [anouarbensaad/vulnx](https://github.com/anouarbensaad/vulnx) An Intelligent Bot Auto Shell Injector that detect vulnerabilities in multiple types of CMS
-- [**660**Star][9d] [Shell] [wslutilities/wslu](https://github.com/wslutilities/wslu) A collection of utilities for Windows 10 Linux Subsystems
-- [**660**Star][21d] [HCL] [rhinosecuritylabs/cloudgoat](https://github.com/rhinosecuritylabs/cloudgoat) CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool
- [**660**Star][3y] [Ruby] [igrigorik/em-proxy](https://github.com/igrigorik/em-proxy) EventMachine Proxy DSL for writing high-performance transparent / intercepting proxies in Ruby
-- [**660**Star][26d] [Java] [google/conscrypt](https://github.com/google/conscrypt) Conscrypt is a Java Security Provider that implements parts of the Java Cryptography Extension and Java Secure Socket Extension.
-- [**660**Star][6m] [Py] [golismero/golismero](https://github.com/golismero/golismero) GoLismero - The Web Knife
- [**660**Star][1y] [Py] [deepzec/bad-pdf](https://github.com/deepzec/bad-pdf) create malicious PDF file to steal NTLM(NTLMv1/NTLMv2) Hashes from windows machines
-- [**659**Star][9d] [Py] [kbandla/dpkt](https://github.com/kbandla/dpkt) fast, simple packet creation / parsing, with definitions for the basic TCP/IP protocols
-- [**659**Star][6m] [C++] [gossip-sjtu/armariris](https://github.com/gossip-sjtu/armariris) 孤挺花(Armariris) -- 由上海交通大学密码与计算机安全实验室维护的LLVM混淆框架
+- [**660**Star][1y] [chybeta/code-audit-challenges](https://github.com/chybeta/code-audit-challenges) Code-Audit-Challenges
+- [**660**Star][1m] [Kotlin] [chuckerteam/chucker](https://github.com/chuckerteam/chucker) simplifies the inspection of HTTP(S) requests/responses, and Throwables fired by your Android App
+- [**659**Star][24d] [redhuntlabs/awesome-asset-discovery](https://github.com/redhuntlabs/awesome-asset-discovery) List of Awesome Asset Discovery Resources
- [**659**Star][2y] [Py] [galkan/crowbar](https://github.com/galkan/crowbar) brute forcing tool that can be used during penetration tests. It is developed to support protocols that are not currently supported by thc-hydra and other popular brute forcing tools.
+- [**658**Star][2y] [Py] [travisfsmith/sweetsecurity](https://github.com/travisfsmith/sweetsecurity) Network Security Monitoring on Raspberry Pi type devices
+- [**658**Star][8m] [Shell] [rfxn/linux-malware-detect](https://github.com/rfxn/linux-malware-detect) Linux Malware Detection (LMD)
+- [**658**Star][8d] [Py] [igogo-x86/hexrayspytools](https://github.com/igogo-x86/hexrayspytools) assists in the creation of classes/structures and detection of virtual tables
- [**658**Star][6m] [TeX] [bettercrypto/applied-crypto-hardening](https://github.com/bettercrypto/applied-crypto-hardening) Best Current Practices regarding secure online communication and configuration of services using cryptography.
-- [**657**Star][2y] [Py] [travisfsmith/sweetsecurity](https://github.com/travisfsmith/sweetsecurity) Network Security Monitoring on Raspberry Pi type devices
-- [**657**Star][21d] [C] [google/afl](https://github.com/google/afl) american fuzzy lop - a security-oriented fuzzer
-- [**656**Star][16d] [Py] [igogo-x86/hexrayspytools](https://github.com/igogo-x86/hexrayspytools) assists in the creation of classes/structures and detection of virtual tables
-- [**656**Star][1y] [Rust] [endgameinc/xori](https://github.com/endgameinc/xori) Xori is an automation-ready disassembly and static analysis library for PE32, 32+ and shellcode
-- [**656**Star][1y] [chybeta/code-audit-challenges](https://github.com/chybeta/code-audit-challenges) Code-Audit-Challenges
-- [**654**Star][9d] [the-akira/computer-science-resources](https://github.com/the-akira/Computer-Science-Resources) A list of resources in different fields of Computer Science (multiple languages)
-- [**654**Star][8m] [C] [samdenty/wi-pwn](https://github.com/samdenty/Wi-PWN) performs deauth attacks on cheap Arduino boards
-- [**654**Star][9m] [Java] [vulnerscom/burp-vulners-scanner](https://github.com/vulnerscom/burp-vulners-scanner) Vulnerability scanner based on vulners.com search API
-- [**654**Star][8m] [Shell] [rfxn/linux-malware-detect](https://github.com/rfxn/linux-malware-detect) Linux Malware Detection (LMD)
-- [**654**Star][1m] [Kotlin] [chuckerteam/chucker](https://github.com/chuckerteam/chucker) simplifies the inspection of HTTP(S) requests/responses, and Throwables fired by your Android App
-- [**653**Star][9m] [Jupyter Notebook] [supercowpowers/data_hacking](https://github.com/SuperCowPowers/data_hacking) Data Hacking Project
-- [**653**Star][6m] [Go] [yawning/obfs4](https://github.com/yawning/obfs4) The obfourscator (Courtesy mirror)
-- [**652**Star][8m] [C] [wifidog/wifidog-gateway](https://github.com/wifidog/wifidog-gateway) Repository for the wifidog-gateway captive portal designed for embedded systems
-- [**652**Star][4y] [Py] [praetorian-code/pentestly](https://github.com/praetorian-code/pentestly) Python and Powershell internal penetration testing framework
-- [**652**Star][22d] [redhuntlabs/awesome-asset-discovery](https://github.com/redhuntlabs/awesome-asset-discovery) List of Awesome Asset Discovery Resources
+- [**657**Star][2m] [Py] [tib3rius/autorecon](https://github.com/tib3rius/autorecon) AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.
+- [**657**Star][5m] [Perl] [jondonas/linux-exploit-suggester-2](https://github.com/jondonas/linux-exploit-suggester-2) Next-Generation Linux Kernel Exploit Suggester
+- [**657**Star][1y] [Rust] [endgameinc/xori](https://github.com/endgameinc/xori) Xori is an automation-ready disassembly and static analysis library for PE32, 32+ and shellcode
+- [**656**Star][2d] [the-akira/computer-science-resources](https://github.com/the-akira/Computer-Science-Resources) A list of resources in different fields of Computer Science (multiple languages)
+- [**656**Star][9m] [Java] [vulnerscom/burp-vulners-scanner](https://github.com/vulnerscom/burp-vulners-scanner) Vulnerability scanner based on vulners.com search API
+- [**656**Star][2d] [Py] [quentinhardy/odat](https://github.com/quentinhardy/odat) Oracle Database Attacking Tool
+- [**655**Star][9m] [Jupyter Notebook] [supercowpowers/data_hacking](https://github.com/SuperCowPowers/data_hacking) Data Hacking Project
+- [**655**Star][6m] [Go] [yawning/obfs4](https://github.com/yawning/obfs4) The obfourscator (Courtesy mirror)
+- [**655**Star][6m] [Perl] [moham3driahi/xattacker](https://github.com/moham3driahi/xattacker) X Attacker Tool ☣ Website Vulnerability Scanner & Auto Exploiter
+- [**654**Star][6m] [Py] [rabbitmask/weblogicscan](https://github.com/rabbitmask/weblogicscan) Weblogic一键漏洞检测工具,V1.3
+- [**654**Star][2m] [Py] [hisxo/gitgraber](https://github.com/hisxo/gitgraber) monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe...
+- [**654**Star][18d] [Shell] [diego-treitos/linux-smart-enumeration](https://github.com/diego-treitos/linux-smart-enumeration) Linux enumeration tool for pentesting and CTFs with verbosity levels
+- [**653**Star][8m] [C] [wifidog/wifidog-gateway](https://github.com/wifidog/wifidog-gateway) Repository for the wifidog-gateway captive portal designed for embedded systems
+- [**653**Star][4y] [Py] [praetorian-code/pentestly](https://github.com/praetorian-code/pentestly) Python and Powershell internal penetration testing framework
+- [**653**Star][2y] [C] [fail0verflow/shofel2](https://github.com/fail0verflow/shofel2) Tegra X1 bootrom exploit
+- [**653**Star][20d] [Java] [dineshshetty/android-insecurebankv2](https://github.com/dineshshetty/android-insecurebankv2) Vulnerable Android application for developers and security enthusiasts to learn about Android insecurities
+- [**652**Star][3y] [C] [rentzsch/mach_inject](https://github.com/rentzsch/mach_inject) interprocess code injection for Mac OS X
+- [**651**Star][10m] [Roff] [palantir/windows-event-forwarding](https://github.com/palantir/windows-event-forwarding) A repository for using windows event forwarding for incident detection and response
- [**651**Star][1y] [Py] [knownsec/rd_checklist](https://github.com/knownsec/rd_checklist) 知道创宇研发技能表
-- [**651**Star][2y] [C] [fail0verflow/shofel2](https://github.com/fail0verflow/shofel2) Tegra X1 bootrom exploit
-- [**650**Star][11d] [JS] [sadeghhayeri/greentunnel](https://github.com/sadeghhayeri/greentunnel) Green Tunnel is an anti-censorship utility designed to bypass DPI system that are put in place by various ISPs to block access to certain websites.
-- [**650**Star][3y] [C] [rentzsch/mach_inject](https://github.com/rentzsch/mach_inject) interprocess code injection for Mac OS X
-- [**650**Star][5m] [Perl] [jondonas/linux-exploit-suggester-2](https://github.com/jondonas/linux-exploit-suggester-2) Next-Generation Linux Kernel Exploit Suggester
-- [**649**Star][2m] [Py] [quentinhardy/odat](https://github.com/quentinhardy/odat) Oracle Database Attacking Tool
-- [**649**Star][2y] [C++] [nathancastle/bootshellcredentialprovider](https://github.com/nathancastle/bootshellcredentialprovider) Windows 10 Credential Provider intended to simplify the process of logging directly into alternative shells to Windows Explorer.
-- [**649**Star][6m] [Perl] [moham3driahi/xattacker](https://github.com/moham3driahi/xattacker) X Attacker Tool ☣ Website Vulnerability Scanner & Auto Exploiter
-- [**649**Star][18d] [Java] [dineshshetty/android-insecurebankv2](https://github.com/dineshshetty/android-insecurebankv2) Vulnerable Android application for developers and security enthusiasts to learn about Android insecurities
-- [**648**Star][2y] [C] [eugnis/spectre-attack](https://github.com/eugnis/spectre-attack) Example of using revealed "Spectre" exploit (CVE-2017-5753 and CVE-2017-5715)
-- [**647**Star][3y] [Objective-C] [isecpartners/introspy-ios](https://github.com/isecpartners/introspy-ios) Security profiling for blackbox iOS
-- [**647**Star][16d] [Shell] [diego-treitos/linux-smart-enumeration](https://github.com/diego-treitos/linux-smart-enumeration) Linux enumeration tool for pentesting and CTFs with verbosity levels
+- [**650**Star][4m] [C#] [shack2/snetcracker](https://github.com/shack2/snetcracker) 超级弱口令检查工具是一款Windows平台的弱口令审计工具,支持批量多线程检查,可快速发现弱密码、弱口令账号,密码支持和用户名结合进行检查,大大提高成功率,支持自定义服务端口和字典。
+- [**650**Star][2y] [C++] [nathancastle/bootshellcredentialprovider](https://github.com/nathancastle/bootshellcredentialprovider) Windows 10 Credential Provider intended to simplify the process of logging directly into alternative shells to Windows Explorer.
+- [**649**Star][1m] [Shell] [toutyrater/v2ray-guide](https://github.com/toutyrater/v2ray-guide)
+- [**649**Star][6m] [PHP] [l3m0n/bypass_disable_functions_shell](https://github.com/l3m0n/bypass_disable_functions_shell) Bypass Disable Functions Shell
+- [**649**Star][2y] [C] [eugnis/spectre-attack](https://github.com/eugnis/spectre-attack) Example of using revealed "Spectre" exploit (CVE-2017-5753 and CVE-2017-5715)
+- [**649**Star][15d] [YARA] [eset/malware-ioc](https://github.com/eset/malware-ioc) Indicators of Compromises (IOC) of our various investigations
+- [**648**Star][3y] [ObjC] [isecpartners/introspy-ios](https://github.com/isecpartners/introspy-ios) Security profiling for blackbox iOS
+- [**647**Star][1y] [Py] [simplysecurity/simplyemail](https://github.com/SimplySecurity/SimplyEmail) Email recon made fast and easy, with a framework to build on
+- [**647**Star][9m] [ObjC] [chenxiancai/stcobfuscator](https://github.com/chenxiancai/stcobfuscator) iOS全局自动化 代码混淆 工具!支持cocoapod组件代码一并 混淆,完美避开hardcode方法、静态库方法和系统库方法!
- [**646**Star][3y] [Java] [facebookarchive/proguard](https://github.com/facebookarchive/proguard) A fork of ProGuard.
-- [**646**Star][10m] [Roff] [palantir/windows-event-forwarding](https://github.com/palantir/windows-event-forwarding) A repository for using windows event forwarding for incident detection and response
-- [**645**Star][1y] [Py] [simplysecurity/simplyemail](https://github.com/SimplySecurity/SimplyEmail) Email recon made fast and easy, with a framework to build on
-- [**645**Star][6m] [PHP] [l3m0n/bypass_disable_functions_shell](https://github.com/l3m0n/bypass_disable_functions_shell) 一个各种方式突破Disable_functions达到命令执行的shell
- [**645**Star][5y] [Shell] [hannob/bashcheck](https://github.com/hannob/bashcheck) test script for shellshocker and related vulnerabilities
-- [**644**Star][13d] [YARA] [eset/malware-ioc](https://github.com/eset/malware-ioc) Indicators of Compromises (IOC) of our various investigations
-- [**643**Star][1m] [Py] [tib3rius/autorecon](https://github.com/tib3rius/autorecon) AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.
-- [**643**Star][4m] [C#] [shack2/snetcracker](https://github.com/shack2/snetcracker) 超级弱口令检查工具是一款Windows平台的弱口令审计工具,支持批量多线程检查,可快速发现弱密码、弱口令账号,密码支持和用户名结合进行检查,大大提高成功率,支持自定义服务端口和字典。
+- [**645**Star][1y] [Java] [faizann24/wifi-bruteforcer-fsecurify](https://github.com/faizann24/wifi-bruteforcer-fsecurify) Android application to brute force WiFi passwords without requiring a rooted device.
+- [**644**Star][5m] [C++] [eliboa/tegrarcmgui](https://github.com/eliboa/tegrarcmgui) C++ GUI for TegraRcmSmash (Fusée Gelée exploit for Nintendo Switch)
+- [**644**Star][5m] [JS] [draios/sysdig-inspect](https://github.com/draios/sysdig-inspect) A powerful opensource interface for container troubleshooting and security investigation
+- [**643**Star][3m] [Py] [gquere/pwn_jenkins](https://github.com/gquere/pwn_jenkins) Notes about attacking Jenkins servers
+- [**643**Star][2y] [C] [coolstar/electra](https://github.com/coolstar/electra) Electra iOS 11.0 - 11.1.2 jailbreak toolkit based on async_awake
+- [**642**Star][22d] [C++] [thingpulse/esp8266-weather-station](https://github.com/ThingPulse/esp8266-weather-station) New version of the ESP8266 Weather Station
- [**642**Star][4y] [Py] [paulsec/twittor](https://github.com/paulsec/twittor) A fully featured backdoor that uses Twitter as a C&C server
-- [**642**Star][5m] [JS] [draios/sysdig-inspect](https://github.com/draios/sysdig-inspect) A powerful opensource interface for container troubleshooting and security investigation
-- [**642**Star][2y] [C] [coolstar/electra](https://github.com/coolstar/electra) Electra iOS 11.0 - 11.1.2 jailbreak toolkit based on async_awake
-- [**642**Star][9m] [Objective-C] [chenxiancai/stcobfuscator](https://github.com/chenxiancai/stcobfuscator) iOS全局自动化 代码混淆 工具!支持cocoapod组件代码一并 混淆,完美避开hardcode方法、静态库方法和系统库方法!
+- [**642**Star][5m] [PHP] [mattiasgeniar/php-exploit-scripts](https://github.com/mattiasgeniar/php-exploit-scripts) A collection of PHP exploit scripts, found when investigating hacked servers. These are stored for educational purposes and to test fuzzers and vulnerability scanners. Feel free to contribute.
+- [**642**Star][10m] [Dockerfile] [aquasecurity/microscanner](https://github.com/aquasecurity/microscanner) Scan your container images for package vulnerabilities with Aqua Security
- [**641**Star][5m] [Py] [pyupio/safety](https://github.com/pyupio/safety) Safety checks your installed dependencies for known security vulnerabilities
-- [**641**Star][1y] [Java] [faizann24/wifi-bruteforcer-fsecurify](https://github.com/faizann24/wifi-bruteforcer-fsecurify) Android application to brute force WiFi passwords without requiring a rooted device.
-- [**640**Star][20d] [C++] [thingpulse/esp8266-weather-station](https://github.com/ThingPulse/esp8266-weather-station) New version of the ESP8266 Weather Station
+- [**641**Star][2y] [harmj0y/cheatsheets](https://github.com/harmj0y/cheatsheets) Cheat sheets for various projects.
+- [**641**Star][1y] [Go] [ga0/netgraph](https://github.com/ga0/netgraph) A cross platform http sniffer with a web UI
+- [**640**Star][2y] [Shell] [kitten/setup-simple-ipsec-l2tp-vpn](https://github.com/kitten/setup-simple-ipsec-l2tp-vpn) Setup a simple IPSec/L2TP VPN Server for Ubuntu and Debian
- [**640**Star][3m] [C++] [stevemk14ebr/polyhook](https://github.com/stevemk14ebr/polyhook) x86/x64 C++ Hooking Library
-- [**640**Star][6m] [Py] [rabbitmask/weblogicscan](https://github.com/rabbitmask/weblogicscan) Weblogic一键漏洞检测工具,V1.3
-- [**640**Star][5m] [PHP] [mattiasgeniar/php-exploit-scripts](https://github.com/mattiasgeniar/php-exploit-scripts) A collection of PHP exploit scripts, found when investigating hacked servers. These are stored for educational purposes and to test fuzzers and vulnerability scanners. Feel free to contribute.
-- [**640**Star][2y] [harmj0y/cheatsheets](https://github.com/harmj0y/cheatsheets) Cheat sheets for various projects.
-- [**640**Star][3m] [Py] [gquere/pwn_jenkins](https://github.com/gquere/pwn_jenkins) Notes about attacking Jenkins servers
-- [**640**Star][1y] [Go] [ga0/netgraph](https://github.com/ga0/netgraph) A cross platform http sniffer with a web UI
+- [**640**Star][3d] [Java] [ganyao114/sandhook](https://github.com/ganyao114/sandhook) Android ART Hook/Native Inline Hook/Single Instruction Hook - support 4.4 - 10.0 32/64 bit - Xposed API Compat
+- [**639**Star][3d] [Go] [ullaakut/gorsair](https://github.com/ullaakut/gorsair) Gorsair hacks its way into remote docker containers that expose their APIs
+- [**639**Star][7d] [Py] [thewhiteh4t/seeker](https://github.com/thewhiteh4t/seeker) Accurately Locate Smartphones using Social Engineering
- [**639**Star][1y] [Py] [lmco/laikaboss](https://github.com/lmco/laikaboss) Laika BOSS: Object Scanning System
-- [**639**Star][2m] [Py] [hisxo/gitgraber](https://github.com/hisxo/gitgraber) monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe...
-- [**639**Star][5m] [C++] [eliboa/tegrarcmgui](https://github.com/eliboa/tegrarcmgui) C++ GUI for TegraRcmSmash (Fusée Gelée exploit for Nintendo Switch)
-- [**638**Star][8d] [Go] [ullaakut/gorsair](https://github.com/ullaakut/gorsair) Gorsair hacks its way into remote docker containers that expose their APIs
-- [**638**Star][8m] [cryptogenic/exploit-writeups](https://github.com/cryptogenic/exploit-writeups) A collection where my current and future writeups for exploits/CTF will go
+- [**639**Star][8m] [Py] [klen/pylama](https://github.com/klen/pylama) Code audit tool for python.
+- [**639**Star][23d] [C] [kernelslacker/trinity](https://github.com/kernelslacker/trinity) Linux system call fuzzer
+- [**639**Star][8m] [cryptogenic/exploit-writeups](https://github.com/cryptogenic/exploit-writeups) A collection where my current and future writeups for exploits/CTF will go
- [**638**Star][11m] [HTML] [bl4de/security_whitepapers](https://github.com/bl4de/security_whitepapers) Collection of misc IT Security related whitepapers, presentations, slides - hacking, bug bounty, web application security, XSS, CSRF, SQLi
-- [**637**Star][4m] [smgorelik/windows-rce-exploits](https://github.com/smgorelik/windows-rce-exploits) The exploit samples database is a repository for **RCE** (remote code execution) exploits and Proof-of-Concepts for **WINDOWS**, the samples are uploaded for education purposes for red and blue teams.
-- [**637**Star][21d] [C] [kernelslacker/trinity](https://github.com/kernelslacker/trinity) Linux system call fuzzer
-- [**636**Star][1m] [Shell] [toutyrater/v2ray-guide](https://github.com/toutyrater/v2ray-guide)
-- [**636**Star][8m] [Py] [klen/pylama](https://github.com/klen/pylama) Code audit tool for python.
+- [**637**Star][1y] [Py] [floodsung/learningtocompare_fsl](https://github.com/floodsung/LearningToCompare_FSL) PyTorch code for CVPR 2018 paper: Learning to Compare: Relation Network for Few-Shot Learning (Few-Shot Learning part)
+- [**637**Star][5m] [smgorelik/windows-rce-exploits](https://github.com/smgorelik/windows-rce-exploits) The exploit samples database is a repository for **RCE** (remote code execution) exploits and Proof-of-Concepts for **WINDOWS**, the samples are uploaded for education purposes for red and blue teams.
+- [**637**Star][4m] [Jupyter Notebook] [parrt/lolviz](https://github.com/parrt/lolviz) A simple Python data-structure visualization tool for lists of lists, lists, dictionaries; primarily for use in Jupyter notebooks / presentations
+- [**637**Star][26d] [Ruby] [markets/invisible_captcha](https://github.com/markets/invisible_captcha) Simple and flexible spam protection solution for Rails applications.
+
+- [**637**Star][2y] [PHP] [duoergun0729/1book](https://github.com/duoergun0729/1book) 《Web安全之机器学习入门》
+- [**636**Star][2y] [C] [qihoo360/mysql-sniffer](https://github.com/qihoo360/mysql-sniffer) mysql-sniffer is a network traffic analyzer tool for mysql, it is developed by Qihoo DBA and infrastructure team
+- [**636**Star][3y] [PS] [hlldz/invoke-phant0m](https://github.com/hlldz/invoke-phant0m) Windows Event Log Killer
- [**636**Star][1y] [JS] [alcuadrado/hieroglyphy](https://github.com/alcuadrado/hieroglyphy) Transform any javascript code to an equivalent sequence of ()[]{}!+ characters that runs in the browser!
-- [**635**Star][2y] [C] [qihoo360/mysql-sniffer](https://github.com/qihoo360/mysql-sniffer) mysql-sniffer is a network traffic analyzer tool for mysql, it is developed by Qihoo DBA and infrastructure team
-- [**635**Star][4m] [Jupyter Notebook] [parrt/lolviz](https://github.com/parrt/lolviz) A simple Python data-structure visualization tool for lists of lists, lists, dictionaries; primarily for use in Jupyter notebooks / presentations
+- [**635**Star][2m] [C++] [apple/swift-lldb](https://github.com/apple/swift-lldb) This is the version of LLDB that supports the Swift programming language & REPL.
+- [**635**Star][15d] [webdigi/aws-vpn-server-setup](https://github.com/webdigi/aws-vpn-server-setup) Setup your own private, secure, free* VPN on the Amazon AWS Cloud in 10 minutes. CloudFormation
+- [**635**Star][1y] [Swift] [phynet/ios-url-schemes](https://github.com/phynet/ios-url-schemes) a github solution from my gist of iOS list for urls schemes
+- [**635**Star][6d] [C++] [nodejs/node-addon-api](https://github.com/nodejs/node-addon-api) Module for using N-API from C++
- [**635**Star][2y] [Py] [mschwager/dhcpwn](https://github.com/mschwager/dhcpwn) testing DHCP IP exhaustion attacks, sniff local DHCP traffic
-- [**634**Star][2m] [C++] [apple/swift-lldb](https://github.com/apple/swift-lldb) This is the version of LLDB that supports the Swift programming language & REPL.
-- [**634**Star][1y] [Swift] [phynet/ios-url-schemes](https://github.com/phynet/ios-url-schemes) a github solution from my gist of iOS list for urls schemes
+- [**635**Star][11d] [Py] [igio90/dwarf](https://github.com/igio90/dwarf) Full featured multi arch/os debugger built on top of PyQt5 and frida
+- [**635**Star][10m] [Py] [dirkjanm/privexchange](https://github.com/dirkjanm/privexchange) Exchange your privileges for Domain Admin privs by abusing Exchange
+- [**634**Star][4y] [PHP] [emposha/php-shell-detector](https://github.com/emposha/php-shell-detector) Web Shell Detector – is a php script that helps you find and identify php/cgi(perl)/asp/aspx shells. Web Shell Detector has a “web shells” signature database that helps to identify “web shell” up to 99%.
- [**633**Star][6m] [C] [travisgoodspeed/md380tools](https://github.com/travisgoodspeed/md380tools) Python tools and patched firmware for the TYT-MD380
-- [**633**Star][3y] [PowerShell] [hlldz/invoke-phant0m](https://github.com/hlldz/invoke-phant0m) Windows Event Log Killer
-- [**633**Star][21d] [Java] [ganyao114/sandhook](https://github.com/ganyao114/sandhook) Android ART Hook/Native Inline Hook/Single Instruction Hook - support 4.4 - 10.0 32/64 bit - Xposed API Compat
-- [**633**Star][4y] [PHP] [emposha/php-shell-detector](https://github.com/emposha/php-shell-detector) Web Shell Detector – is a php script that helps you find and identify php/cgi(perl)/asp/aspx shells. Web Shell Detector has a “web shells” signature database that helps to identify “web shell” up to 99%.
-- [**632**Star][1y] [Py] [floodsung/learningtocompare_fsl](https://github.com/floodsung/LearningToCompare_FSL) PyTorch code for CVPR 2018 paper: Learning to Compare: Relation Network for Few-Shot Learning (Few-Shot Learning part)
-- [**632**Star][9d] [Py] [igio90/dwarf](https://github.com/igio90/dwarf) Full featured multi arch/os debugger built on top of PyQt5 and frida
-- [**632**Star][10m] [Py] [dirkjanm/privexchange](https://github.com/dirkjanm/privexchange) Exchange your privileges for Domain Admin privs by abusing Exchange
-- [**632**Star][6m] [Py] [binarydefense/artillery](https://github.com/binarydefense/artillery) The Artillery Project is an open-source blue team tool designed to protect Linux and Windows operating systems through multiple methods.
+- [**633**Star][6m] [Py] [binarydefense/artillery](https://github.com/binarydefense/artillery) The Artillery Project is an open-source blue team tool designed to protect Linux and Windows operating systems through multiple methods.
+- [**632**Star][9m] [webbreacher/offensiveinterview](https://github.com/webbreacher/offensiveinterview) Interview questions to screen offensive (red team/pentest) candidates
- [**631**Star][4y] [CoffeeScript] [shadowsocks/shadowsocks-chromeapp](https://github.com/shadowsocks/shadowsocks-chromeapp) Chrome client for shadowsocks
- [**631**Star][10m] [Py] [mehulj94/braindamage](https://github.com/mehulj94/braindamage) Remote administration tool which uses Telegram as a C&C server
-- [**629**Star][9m] [webbreacher/offensiveinterview](https://github.com/webbreacher/offensiveinterview) Interview questions to screen offensive (red team/pentest) candidates
-- [**629**Star][10m] [Dockerfile] [aquasecurity/microscanner](https://github.com/aquasecurity/microscanner) Scan your container images for package vulnerabilities with Aqua Security
+- [**630**Star][5m] [Go] [zmap/zgrab](https://github.com/zmap/zgrab) A Banner Grabber, in Go
+- [**629**Star][8m] [Shell] [g0tmi1k/msfpc](https://github.com/g0tmi1k/msfpc) MSFvenom Payload Creator (MSFPC)
+- [**629**Star][2y] [C] [client9/libinjection](https://github.com/client9/libinjection) SQL / SQLI tokenizer parser analyzer
+- [**629**Star][5m] [ankane/secure_rails](https://github.com/ankane/secure_rails) Rails security best practices
- [**629**Star][4m] [3gstudent/pentest-and-development-tips](https://github.com/3gstudent/pentest-and-development-tips) A collection of pentest and development tips
-- [**628**Star][8m] [Shell] [g0tmi1k/msfpc](https://github.com/g0tmi1k/msfpc) MSFvenom Payload Creator (MSFPC)
-- [**628**Star][5m] [Go] [zmap/zgrab](https://github.com/zmap/zgrab) A Banner Grabber, in Go
-- [**626**Star][13d] [PowerShell] [olafhartong/sysmon-modular](https://github.com/olafhartong/sysmon-modular) A repository of sysmon configuration modules
-- [**626**Star][2y] [C] [client9/libinjection](https://github.com/client9/libinjection) SQL / SQLI tokenizer parser analyzer
-- [**626**Star][5m] [ankane/secure_rails](https://github.com/ankane/secure_rails) Rails security best practices
-- [**625**Star][2y] [C++] [codilime/veles](https://github.com/codilime/veles) Binary data analysis and visualization tool
-- [**624**Star][2y] [C] [shadowsocksr-backup/shadowsocksr-libev](https://github.com/shadowsocksr-backup/shadowsocksr-libev) libev port of ShadowsocksR
-- [**624**Star][7m] [yeyintminthuhtut/awesome-advanced-windows-exploitation-references](https://github.com/yeyintminthuhtut/Awesome-Advanced-Windows-Exploitation-References) List of Awesome Advanced Windows Exploitation References
-- [**623**Star][23d] [Ruby] [markets/invisible_captcha](https://github.com/markets/invisible_captcha) Simple and flexible spam protection solution for Rails applications.
-
-- [**623**Star][4y] [jeanphorn/wordlist](https://github.com/jeanphorn/wordlist) Collection of some common wordlists such as RDP password, user name list, ssh password wordlist for brute force. IP Cameras Default Passwords.
-- [**623**Star][3y] [C] [chokepoint/azazel](https://github.com/chokepoint/azazel) Azazel is a userland rootkit based off of the original LD_PRELOAD technique from Jynx rootkit. It is more robust and has additional features, and focuses heavily around anti-debugging and anti-detection.
-- [**622**Star][2y] [C] [tgraf/bmon](https://github.com/tgraf/bmon) bandwidth monitor and rate estimator
-- [**622**Star][1y] [C] [nfc-tools/mfoc](https://github.com/nfc-tools/mfoc) Mifare Classic Offline Cracker
-- [**622**Star][2y] [Py] [0xbug/sqliscanner](https://github.com/0xbug/sqliscanner) Automatic SQL injection with Charles and sqlmap api
+- [**628**Star][2d] [PS] [olafhartong/sysmon-modular](https://github.com/olafhartong/sysmon-modular) A repository of sysmon configuration modules
+- [**628**Star][2y] [C++] [codilime/veles](https://github.com/codilime/veles) Binary data analysis and visualization tool
+- [**627**Star][7m] [yeyintminthuhtut/awesome-advanced-windows-exploitation-references](https://github.com/yeyintminthuhtut/Awesome-Advanced-Windows-Exploitation-References) List of Awesome Advanced Windows Exploitation References
+- [**626**Star][1y] [C] [nfc-tools/mfoc](https://github.com/nfc-tools/mfoc) Mifare Classic Offline Cracker
+- [**626**Star][4y] [jeanphorn/wordlist](https://github.com/jeanphorn/wordlist) Collection of some common wordlists such as RDP password, user name list, ssh password wordlist for brute force. IP Cameras Default Passwords.
+- [**625**Star][2y] [C] [shadowsocksr-backup/shadowsocksr-libev](https://github.com/shadowsocksr-backup/shadowsocksr-libev) libev port of ShadowsocksR
+- [**625**Star][11m] [C++] [ohpe/juicy-potato](https://github.com/ohpe/juicy-potato) A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM.
+- [**625**Star][3y] [C] [chokepoint/azazel](https://github.com/chokepoint/azazel) Azazel is a userland rootkit based off of the original LD_PRELOAD technique from Jynx rootkit. It is more robust and has additional features, and focuses heavily around anti-debugging and anti-detection.
+- [**625**Star][2m] [Py] [alichtman/stronghold](https://github.com/alichtman/stronghold) Easily configure macOS security settings from the terminal.
+- [**624**Star][4y] [JS] [n0wa11/gfw_whitelist](https://github.com/n0wa11/gfw_whitelist) A Pac File of the Whitelisted Websites for the Great Firewall of China (GFW)
+- [**624**Star][2d] [arkadiyt/bounty-targets-data](https://github.com/arkadiyt/bounty-targets-data) This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/etc) that are eligible for reports
+- [**623**Star][2y] [C] [tgraf/bmon](https://github.com/tgraf/bmon) bandwidth monitor and rate estimator
+- [**623**Star][3m] [C] [gdabah/distorm](https://github.com/gdabah/distorm) Powerful Disassembler Library For x86/AMD64
+- [**622**Star][9d] [Py] [virt-manager/virt-manager](https://github.com/virt-manager/virt-manager) Desktop tool for managing virtual machines via libvirt
+- [**622**Star][6m] [Java] [sigploiter/sigploit](https://github.com/sigploiter/sigploit) Telecom Signaling Exploitation Framework - SS7, GTP, Diameter & SIP
+- [**622**Star][3m] [PHP] [hongrisec/php-audit-labs](https://github.com/hongrisec/php-audit-labs) 一个关于PHP的代码审计项目
+- [**621**Star][2y] [turbo/openftp4](https://github.com/turbo/openftp4) A list of all FTP servers in IPv4 that allow anonymous logins.
- [**621**Star][3m] [Py] [3xp10it/xwaf](https://github.com/3xp10it/xwaf) Automatic bypass (brute force) waf
-- [**621**Star][6m] [Java] [sigploiter/sigploit](https://github.com/sigploiter/sigploit) Telecom Signaling Exploitation Framework - SS7, GTP, Diameter & SIP
-- [**621**Star][3m] [C] [gdabah/distorm](https://github.com/gdabah/distorm) Powerful Disassembler Library For x86/AMD64
-- [**620**Star][14d] [Py] [virt-manager/virt-manager](https://github.com/virt-manager/virt-manager) Desktop tool for managing virtual machines via libvirt
+- [**621**Star][5m] [Py] [deibit/cansina](https://github.com/deibit/cansina) Web Content Discovery Tool
+- [**621**Star][2y] [Py] [0xbug/sqliscanner](https://github.com/0xbug/sqliscanner) Automatic SQL injection with Charles and sqlmap api
+- [**620**Star][9m] [Py] [epsylon/ufonet](https://github.com/epsylon/ufonet) a toolkit designed to launch DDoS and DoS attacks.
- [**620**Star][5m] [JS] [derhuerst/tcp-over-websockets](https://github.com/derhuerst/tcp-over-websockets) Tunnel TCP through WebSockets.
-- [**619**Star][19d] [C++] [nodejs/node-addon-api](https://github.com/nodejs/node-addon-api) Module for using N-API from C++
-- [**619**Star][4y] [JS] [n0wa11/gfw_whitelist](https://github.com/n0wa11/gfw_whitelist) A Pac File of the Whitelisted Websites for the Great Firewall of China (GFW)
+- [**619**Star][5y] [PHP] [pr0x13/idict](https://github.com/pr0x13/idict) iCloud Apple iD BruteForcer
+- [**619**Star][10m] [PS] [mattifestation/powershellarsenal](https://github.com/mattifestation/powershellarsenal) A PowerShell Module Dedicated to Reverse Engineering
- [**619**Star][4y] [Go] [leo-stone/hack-petya](https://github.com/leo-stone/hack-petya) search key to restore petya encrypted mft
-- [**619**Star][2m] [Py] [alichtman/stronghold](https://github.com/alichtman/stronghold) Easily configure macOS security settings from the terminal.
-- [**618**Star][10m] [PowerShell] [mattifestation/powershellarsenal](https://github.com/mattifestation/powershellarsenal) A PowerShell Module Dedicated to Reverse Engineering
-- [**618**Star][2y] [PHP] [duoergun0729/1book](https://github.com/duoergun0729/1book) 《Web安全之机器学习入门》
-- [**618**Star][5m] [Py] [deibit/cansina](https://github.com/deibit/cansina) Web Content Discovery Tool
-- [**617**Star][5y] [PHP] [pr0x13/idict](https://github.com/pr0x13/idict) iCloud Apple iD BruteForcer
-- [**617**Star][11m] [C++] [ohpe/juicy-potato](https://github.com/ohpe/juicy-potato) A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM.
+- [**618**Star][4m] [bypass007/safety-project-collection](https://github.com/bypass007/safety-project-collection) 收集一些比较优秀的开源安全项目,以帮助甲方安全从业人员构建企业安全能力。
+- [**617**Star][1y] [Lua] [unixhot/waf](https://github.com/unixhot/waf) 使用Nginx+Lua实现的WAF(版本v1.0)
+- [**617**Star][12d] [C] [thewover/donut](https://github.com/thewover/donut) Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters
- [**617**Star][1y] [Go] [lunixbochs/usercorn](https://github.com/lunixbochs/usercorn) dynamic binary analysis via platform emulation
-- [**617**Star][3m] [PHP] [hongrisec/php-audit-labs](https://github.com/hongrisec/php-audit-labs) 一个关于PHP的代码审计项目
-- [**617**Star][9m] [Py] [epsylon/ufonet](https://github.com/epsylon/ufonet) UFONet - Denial of Service Toolkit
-- [**615**Star][3m] [C] [matheus-garbelini/esp32_esp8266_attacks](https://github.com/matheus-garbelini/esp32_esp8266_attacks) Proof of Concept of ESP32/8266 Wi-Fi vulnerabilties (CVE-2019-12586, CVE-2019-12587, CVE-2019-12588)
-- [**614**Star][1y] [Lua] [unixhot/waf](https://github.com/unixhot/waf) 使用Nginx+Lua实现的WAF(版本v1.0)
-- [**613**Star][4m] [bypass007/safety-project-collection](https://github.com/bypass007/safety-project-collection) 收集一些比较优秀的开源安全项目,以帮助甲方安全从业人员构建企业安全能力。
-- [**613**Star][9m] [Py] [al-azif/ps4-exploit-host](https://github.com/al-azif/ps4-exploit-host) Easy PS4 Exploit Hosting
-- [**613**Star][1y] [Py] [adamcaudill/equationgroupleak](https://github.com/adamcaudill/equationgroupleak) Archive of leaked Equation Group materials
-- [**612**Star][10d] [HTML] [v2ray/manual](https://github.com/v2ray/manual) Source code for
+- [**616**Star][3d] [HTML] [v2ray/manual](https://github.com/v2ray/manual) Source code for
+- [**616**Star][1y] [Shell] [wireghoul/htshells](https://github.com/wireghoul/htshells) Self contained web shells and other attacks via .htaccess files.
+- [**616**Star][3m] [C] [matheus-garbelini/esp32_esp8266_attacks](https://github.com/matheus-garbelini/esp32_esp8266_attacks) Proof of Concept of ESP32/8266 Wi-Fi vulnerabilties (CVE-2019-12586, CVE-2019-12587, CVE-2019-12588)
+- [**616**Star][21d] [Go] [evilsocket/arc](https://github.com/evilsocket/arc) A manager for your secrets.
+- [**615**Star][4m] [Lua] [jx-sec/jxwaf](https://github.com/jx-sec/jxwaf) JXWAF(锦衣盾)是一款基于openresty(nginx+lua)开发的web应用防火墙
+- [**615**Star][1y] [jiangsir404/audit-learning](https://github.com/jiangsir404/audit-learning) 记录自己对《代码审计》的理解和总结,对危险函数的深入分析以及在p牛的博客和代码审计圈的收获
+- [**614**Star][3y] [ObjC] [macmade/keychaincracker](https://github.com/macmade/keychaincracker) macOS keychain cracking tool
+- [**614**Star][6y] [Assembly] [adriancable/8086tiny](https://github.com/adriancable/8086tiny) Official repository for 8086tiny: a tiny PC emulator/virtual machine
+- [**614**Star][1y] [Py] [adamcaudill/equationgroupleak](https://github.com/adamcaudill/equationgroupleak) Archive of leaked Equation Group materials
+- [**613**Star][1m] [C++] [acidanthera/virtualsmc](https://github.com/acidanthera/virtualsmc) SMC emulator layer
+- [**613**Star][2m] [Py] [sourcelair/ceryx](https://github.com/sourcelair/ceryx) Dynamic reverse proxy based on NGINX OpenResty with an API
+- [**613**Star][1y] [langyanduan/reborn](https://github.com/langyanduan/reborn) The missing proxy for macOS
+- [**613**Star][2y] [Py] [fanhuaandluomu/geetest_break](https://github.com/fanhuaandluomu/geetest_break) 极验验证码破解-源码+手册
+- [**612**Star][10m] [Py] [zdresearch/owasp-nettacker](https://github.com/zdresearch/OWASP-Nettacker) Automated Penetration Testing Framework
- [**612**Star][1y] [Ruby] [thesp0nge/dawnscanner](https://github.com/thesp0nge/dawnscanner) Dawn is a static analysis security scanner for ruby written web applications. It supports Sinatra, Padrino and Ruby on Rails frameworks.
-- [**612**Star][25d] [C] [quiet/quiet-lwip](https://github.com/quiet/quiet-lwip) create TCP and UDP connections over an audio channel
-- [**611**Star][1y] [Shell] [wireghoul/htshells](https://github.com/wireghoul/htshells) Self contained htaccess shells and attacks
+- [**612**Star][27d] [C] [quiet/quiet-lwip](https://github.com/quiet/quiet-lwip) create TCP and UDP connections over an audio channel
+- [**612**Star][3m] [Py] [netflix/repokid](https://github.com/netflix/repokid) AWS Least Privilege for Distributed, High-Velocity Deployment
+- [**612**Star][6m] [Py] [eliasgranderubio/dagda](https://github.com/eliasgranderubio/dagda) a tool to perform static analysis of known vulnerabilities, trojans, viruses, malware & other malicious threats in docker images/containers and to monitor the docker daemon and running docker containers for detecting anomalous activities
+- [**612**Star][3m] [Go] [eldadru/ksniff](https://github.com/eldadru/ksniff) Kubectl plugin to ease sniffing on kubernetes pods using tcpdump and wireshark
+- [**612**Star][3m] [Shell] [ashishb/osx-and-ios-security-awesome](https://github.com/ashishb/osx-and-ios-security-awesome) OSX and iOS related security tools
+- [**612**Star][9m] [Py] [al-azif/ps4-exploit-host](https://github.com/al-azif/ps4-exploit-host) Easy PS4 Exploit Hosting
- [**611**Star][4y] [Batchfile] [windowslies/blockwindows](https://github.com/windowslies/blockwindows) Stop Windows 10 Nagging and Spying. Works with Win7-10
-- [**611**Star][3m] [Py] [netflix/repokid](https://github.com/netflix/repokid) AWS Least Privilege for Distributed, High-Velocity Deployment
-- [**611**Star][3y] [Objective-C] [macmade/keychaincracker](https://github.com/macmade/keychaincracker) macOS keychain cracking tool
-- [**611**Star][19d] [Go] [evilsocket/arc](https://github.com/evilsocket/arc) A manager for your secrets.
-- [**611**Star][3m] [Shell] [ashishb/osx-and-ios-security-awesome](https://github.com/ashishb/osx-and-ios-security-awesome) OSX and iOS related security tools
-- [**610**Star][4m] [Lua] [jx-sec/jxwaf](https://github.com/jx-sec/jxwaf) JXWAF(锦衣盾)是一款基于openresty(nginx+lua)开发的web应用防火墙
-- [**610**Star][1y] [jiangsir404/audit-learning](https://github.com/jiangsir404/audit-learning) 记录自己对《代码审计》的理解和总结,对危险函数的深入分析以及在p牛的博客和代码审计圈的收获
-- [**610**Star][2y] [Py] [fanhuaandluomu/geetest_break](https://github.com/fanhuaandluomu/geetest_break) 极验验证码破解-源码+手册
-- [**609**Star][4m] [Py] [faizann24/xsspy](https://github.com/faizann24/xsspy) Web Application XSS Scanner
-- [**609**Star][6m] [Py] [eliasgranderubio/dagda](https://github.com/eliasgranderubio/dagda) a tool to perform static analysis of known vulnerabilities, trojans, viruses, malware & other malicious threats in docker images/containers and to monitor the docker daemon and running docker containers for detecting anomalous activities
-- [**609**Star][6y] [Assembly] [adriancable/8086tiny](https://github.com/adriancable/8086tiny) Official repository for 8086tiny: a tiny PC emulator/virtual machine
+- [**611**Star][4m] [Py] [faizann24/xsspy](https://github.com/faizann24/xsspy) Web Application XSS Scanner
+- [**611**Star][8m] [denji/golang-tls](https://github.com/denji/golang-tls) Simple Golang HTTPS/TLS Examples
- [**608**Star][7m] [JS] [vincentcox/stacoan](https://github.com/vincentcox/stacoan) StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications.
-- [**608**Star][12d] [Py] [thewhiteh4t/seeker](https://github.com/thewhiteh4t/seeker) Accurately Locate Smartphones using Social Engineering
-- [**606**Star][7m] [denji/golang-tls](https://github.com/denji/golang-tls) Simple Golang HTTPS/TLS Examples
-- [**605**Star][10d] [C] [thewover/donut](https://github.com/thewover/donut) Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters
-- [**604**Star][3m] [Py] [matlink/gplaycli](https://github.com/matlink/gplaycli) Google Play Downloader via Command line
-- [**604**Star][3m] [Py] [0xgalz/virtuailor](https://github.com/0xgalz/virtuailor) IDAPython tool for C++ vtables reconstruction
+- [**607**Star][24d] [PS] [farag2/windows-10-setup-script](https://github.com/farag2/windows-10-setup-script) Script to setup Windows 10 1903/1909
+- [**607**Star][3m] [Py] [matlink/gplaycli](https://github.com/matlink/gplaycli) Google Play Downloader via Command line
+- [**607**Star][8m] [Shell] [cokebar/gfwlist2dnsmasq](https://github.com/cokebar/gfwlist2dnsmasq) A shell script which convert gfwlist into dnsmasq rules. Python version:
+- [**607**Star][1y] [C#] [bonesoul/coiniumserv](https://github.com/bonesoul/coiniumserv) Next-gen crypto currency mining pool software
+- [**606**Star][2y] [PS] [peewpw/invoke-wcmdump](https://github.com/peewpw/invoke-wcmdump) PowerShell Script to Dump Windows Credentials from the Credential Manager
+- [**606**Star][7m] [aleenzz/mysql_sql_bypass_wiki](https://github.com/aleenzz/mysql_sql_bypass_wiki) mysql注入,bypass的一些心得
+- [**606**Star][9m] [C#] [0xbadjuju/tokenvator](https://github.com/0xbadjuju/tokenvator) A tool to elevate privilege with Windows Tokens
+- [**605**Star][15d] [404notf0und/ai-for-security-learning](https://github.com/404notf0und/ai-for-security-learning) 安全场景、基于AI的安全算法和安全数据分析学习资料整理
+- [**605**Star][3m] [Py] [0xgalz/virtuailor](https://github.com/0xgalz/virtuailor) IDAPython tool for C++ vtables reconstruction
View Details
@@ -2032,1273 +2170,1311 @@
-- [**603**Star][10m] [Py] [zdresearch/owasp-nettacker](https://github.com/zdresearch/OWASP-Nettacker) Automated Penetration Testing Framework
-- [**603**Star][2y] [PowerShell] [peewpw/invoke-wcmdump](https://github.com/peewpw/invoke-wcmdump) PowerShell Script to Dump Windows Credentials from the Credential Manager
-- [**603**Star][3m] [Go] [eldadru/ksniff](https://github.com/eldadru/ksniff) Kubectl plugin to ease sniffing on kubernetes pods using tcpdump and wireshark
-- [**603**Star][8m] [Shell] [cokebar/gfwlist2dnsmasq](https://github.com/cokebar/gfwlist2dnsmasq) A shell script which convert gfwlist into dnsmasq rules. Python version:
-- [**602**Star][1y] [C] [scottybauer/android_kernel_cve_pocs](https://github.com/scottybauer/android_kernel_cve_pocs) A list of my CVE's with POCs
+- [**604**Star][2m] [Swift] [gradients/gradients](https://github.com/Gradients/Gradients) A curated collection of 180 splendid gradients made in swift
+- [**604**Star][10d] [Shell] [securityftw/cs-suite](https://github.com/securityftw/cs-suite) Cloud Security Suite - One stop tool for auditing the security posture of AWS/GCP/Azure infrastructure.
+- [**603**Star][1y] [C] [scottybauer/android_kernel_cve_pocs](https://github.com/scottybauer/android_kernel_cve_pocs) A list of my CVE's with POCs
+- [**602**Star][28d] [Max] [maktm/flirtdb](https://github.com/Maktm/FLIRTDB) A community driven collection of IDA FLIRT signature files
+- [**602**Star][19d] [Py] [webrecorder/pywb](https://github.com/webrecorder/pywb) Core Python Web Archiving Toolkit for replay and recording of web archives
+- [**602**Star][6m] [C] [pelya/android-keyboard-gadget](https://github.com/pelya/android-keyboard-gadget) Convert your Android device into USB keyboard/mouse, control your PC from your Android device remotely, including BIOS/bootloader.
+- [**602**Star][7y] [Py] [m0mchil/poclbm](https://github.com/m0mchil/poclbm) poclbm:比特币挖掘
- [**602**Star][2y] [Py] [bhdresh/cve-2017-0199](https://github.com/bhdresh/cve-2017-0199) Exploit toolkit CVE-2017-0199 - v4.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft Office RCE. It could generate a malicious RTF/PPSX file and deliver metasploit / meterpreter / other payload to victim without any complex configuration.
-- [**602**Star][7d] [arkadiyt/bounty-targets-data](https://github.com/arkadiyt/bounty-targets-data) This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/etc) that are eligible for reports
-- [**601**Star][2m] [Swift] [gradients/gradients](https://github.com/Gradients/Gradients) A curated collection of 180 splendid gradients made in swift
- [**601**Star][3y] [Py] [omriher/captipper](https://github.com/omriher/captipper) Malicious HTTP traffic explorer
-- [**601**Star][7m] [aleenzz/mysql_sql_bypass_wiki](https://github.com/aleenzz/mysql_sql_bypass_wiki) mysql注入,bypass的一些心得
-- [**600**Star][17d] [Py] [webrecorder/pywb](https://github.com/webrecorder/pywb) Core Python Web Archiving Toolkit for replay and recording of web archives
-- [**600**Star][8d] [Shell] [securityftw/cs-suite](https://github.com/securityftw/cs-suite) Cloud Security Suite - One stop tool for auditing the security posture of AWS/GCP/Azure infrastructure.
-- [**600**Star][4y] [Py] [hatriot/clusterd](https://github.com/hatriot/clusterd) application server attack toolkit
-- [**599**Star][26d] [Max] [maktm/flirtdb](https://github.com/Maktm/FLIRTDB) A community driven collection of IDA FLIRT signature files
-- [**599**Star][6m] [C] [pelya/android-keyboard-gadget](https://github.com/pelya/android-keyboard-gadget) Convert your Android device into USB keyboard/mouse, control your PC from your Android device remotely, including BIOS/bootloader.
-- [**599**Star][13d] [404notf0und/ai-for-security-learning](https://github.com/404notf0und/ai-for-security-learning) 安全场景、基于AI的安全算法和安全数据分析学习资料整理
-- [**598**Star][1y] [PowerShell] [fortynorthsecurity/wmimplant](https://github.com/FortyNorthSecurity/WMImplant) This is a PowerShell based tool that is designed to act like a RAT. Its interface is that of a shell where any command that is supported is translated into a WMI-equivalent for use on a network/remote machine. WMImplant is WMI based.
+- [**601**Star][2d] [C#] [microsoft/clrmd](https://github.com/microsoft/clrmd) Microsoft.Diagnostics.Runtime is a set of APIs for introspecting processes and dumps.
+- [**601**Star][2y] [HTML] [jiji262/wooyun_articles](https://github.com/jiji262/wooyun_articles) drops.wooyun.org 乌云Drops文章备份
+- [**601**Star][4y] [Py] [hatriot/clusterd](https://github.com/hatriot/clusterd) application server attack toolkit
+- [**601**Star][9m] [Java] [c0ny1/chunked-coding-converter](https://github.com/c0ny1/chunked-coding-converter) Burp suite 分块传输辅助插件
+- [**600**Star][30d] [C++] [mdhiggins/esp8266-http-ir-blaster](https://github.com/mdhiggins/esp8266-http-ir-blaster) ESP8266 Compatible IR Blaster that accepts HTTP commands for use with services like Amazon Echo
+- [**599**Star][3d] [Py] [witten/borgmatic](https://github.com/witten/borgmatic) Simple, configuration-driven backup software for servers and workstations
+- [**599**Star][2y] [Py] [secretsquirrel/sigthief](https://github.com/secretsquirrel/sigthief) Stealing Signatures and Making One Invalid Signature at a Time
+- [**599**Star][5d] [ntkernel/lantern](https://github.com/ntkernel/lantern) V2Ray配置文件,蓝灯(Lantern)破解,手机版+win版
+- [**598**Star][1y] [PS] [fortynorthsecurity/wmimplant](https://github.com/FortyNorthSecurity/WMImplant) This is a PowerShell based tool that is designed to act like a RAT. Its interface is that of a shell where any command that is supported is translated into a WMI-equivalent for use on a network/remote machine. WMImplant is WMI based.
- [**598**Star][1y] [Shell] [pires/kubernetes-vagrant-coreos-cluster](https://github.com/pires/kubernetes-vagrant-coreos-cluster) Kubernetes cluster (for testing purposes) made easy with Vagrant and CoreOS.
-- [**598**Star][7d] [C#] [microsoft/clrmd](https://github.com/microsoft/clrmd) Microsoft.Diagnostics.Runtime is a set of APIs for introspecting processes and dumps.
-- [**597**Star][2y] [Py] [secretsquirrel/sigthief](https://github.com/secretsquirrel/sigthief) Stealing Signatures and Making One Invalid Signature at a Time
-- [**597**Star][28d] [C++] [mdhiggins/esp8266-http-ir-blaster](https://github.com/mdhiggins/esp8266-http-ir-blaster) ESP8266 Compatible IR Blaster that accepts HTTP commands for use with services like Amazon Echo
-- [**597**Star][2y] [HTML] [jiji262/wooyun_articles](https://github.com/jiji262/wooyun_articles) drops.wooyun.org 乌云Drops文章备份
-- [**596**Star][9m] [C#] [0xbadjuju/tokenvator](https://github.com/0xbadjuju/tokenvator) A tool to elevate privilege with Windows Tokens
-- [**595**Star][9d] [Py] [witten/borgmatic](https://github.com/witten/borgmatic) Simple, configuration-driven backup software for servers and workstations
-- [**595**Star][2m] [PowerShell] [ramblingcookiemonster/powershell](https://github.com/ramblingcookiemonster/powershell) Various PowerShell functions and scripts
-- [**595**Star][6m] [C] [hashcat/hashcat-utils](https://github.com/hashcat/hashcat-utils) Small utilities that are useful in advanced password cracking
-- [**594**Star][4y] [Makefile] [zhengmin1989/thesevenweapons](https://github.com/zhengmin1989/thesevenweapons) 安卓动态调试七种武器
+- [**597**Star][18d] [Py] [nongiach/arm_now](https://github.com/nongiach/arm_now) a qemu powered tool that allows instant setup of virtual machines on arm cpu, mips, powerpc, nios2, x86 and more, for reverse, exploit, fuzzing and programming purpose.
+- [**597**Star][1m] [Py] [hslatman/awesome-industrial-control-system-security](https://github.com/hslatman/awesome-industrial-control-system-security) A curated list of resources related to Industrial Control System (ICS) security.
+- [**597**Star][6m] [C] [hashcat/hashcat-utils](https://github.com/hashcat/hashcat-utils) Small utilities that are useful in advanced password cracking
+- [**597**Star][3d] [YARA] [didierstevens/didierstevenssuite](https://github.com/didierstevens/didierstevenssuite) No Documentation
+- [**597**Star][12d] [Go] [antoniomika/sish](https://github.com/antoniomika/sish) An open source serveo/ngrok alternative. HTTP(S)/WS(S)/TCP Tunnels to localhost using only SSH.
+- [**596**Star][1m] [siguza/ios-resources](https://github.com/siguza/ios-resources) Useful resources for iOS hacking
+- [**596**Star][2m] [PS] [ramblingcookiemonster/powershell](https://github.com/ramblingcookiemonster/powershell) Various PowerShell functions and scripts
+- [**596**Star][5d] [azure/aks](https://github.com/azure/aks) Azure Kubernetes Service
+- [**595**Star][4y] [Makefile] [zhengmin1989/thesevenweapons](https://github.com/zhengmin1989/thesevenweapons) 安卓动态调试七种武器
+- [**595**Star][16d] [C] [openvpn/openvpn-gui](https://github.com/openvpn/openvpn-gui) OpenVPN GUI is a graphical frontend for OpenVPN running on Windows XP / Vista / 7 / 8. It creates an icon in the notification area from which you can control OpenVPN to start/stop your VPN tunnels, view the log and do other useful things.
+- [**595**Star][5m] [fabrimagic72/malware-samples](https://github.com/fabrimagic72/malware-samples) A collection of malware samples caught by several honeypots i manage
+- [**595**Star][7d] [Go] [cloudflare/cloudflared](https://github.com/cloudflare/cloudflared) Argo Tunnel client
+- [**595**Star][1y] [Py] [brannondorsey/passgan](https://github.com/brannondorsey/passgan) A Deep Learning Approach for Password Guessing (
+- [**594**Star][23d] [Py] [glasgowembedded/glasgow](https://github.com/GlasgowEmbedded/glasgow) Scots Army Knife for electronics
+- [**594**Star][3m] [Py] [thewhiteh4t/pwnedornot](https://github.com/thewhiteh4t/pwnedornot) OSINT Tool for Finding Passwords of Compromised Email Addresses
+- [**594**Star][6m] [Py] [dmpayton/django-admin-honeypot](https://github.com/dmpayton/django-admin-honeypot)
- [**594**Star][3y] [C++] [breakingmalwareresearch/atom-bombing](https://github.com/breakingmalwareresearch/atom-bombing) Brand New Code Injection for Windows
-- [**593**Star][16d] [Py] [nongiach/arm_now](https://github.com/nongiach/arm_now) a qemu powered tool that allows instant setup of virtual machines on arm cpu, mips, powerpc, nios2, x86 and more, for reverse, exploit, fuzzing and programming purpose.
-- [**593**Star][1m] [YARA] [didierstevens/didierstevenssuite](https://github.com/didierstevens/didierstevenssuite) Please no pull requests for this repository. Thanks!
-- [**593**Star][1y] [Py] [brannondorsey/passgan](https://github.com/brannondorsey/passgan) A Deep Learning Approach for Password Guessing (
-- [**592**Star][21d] [Py] [glasgowembedded/glasgow](https://github.com/GlasgowEmbedded/glasgow) Scots Army Knife for electronics
-- [**592**Star][1m] [siguza/ios-resources](https://github.com/siguza/ios-resources) Useful resources for iOS hacking
-- [**592**Star][14d] [C] [openvpn/openvpn-gui](https://github.com/openvpn/openvpn-gui) OpenVPN GUI is a graphical frontend for OpenVPN running on Windows XP / Vista / 7 / 8. It creates an icon in the notification area from which you can control OpenVPN to start/stop your VPN tunnels, view the log and do other useful things.
-- [**592**Star][6m] [Py] [dmpayton/django-admin-honeypot](https://github.com/dmpayton/django-admin-honeypot)
-- [**592**Star][9m] [Java] [c0ny1/chunked-coding-converter](https://github.com/c0ny1/chunked-coding-converter) Burp suite 分块传输辅助插件
-- [**591**Star][3m] [Py] [thewhiteh4t/pwnedornot](https://github.com/thewhiteh4t/pwnedornot) OSINT Tool for Finding Passwords of Compromised Email Addresses
-- [**591**Star][2m] [Py] [pwning/public-writeup](https://github.com/pwning/public-writeup) CTF write-ups by Plaid Parliament of Pwning
-- [**591**Star][5m] [fabrimagic72/malware-samples](https://github.com/fabrimagic72/malware-samples) A collection of malware samples caught by several honeypots i manage
-- [**591**Star][18d] [azure/aks](https://github.com/azure/aks) Azure Kubernetes Service
+- [**593**Star][18d] [PHP] [zhuifengshaonianhanlu/pikachu](https://github.com/zhuifengshaonianhanlu/pikachu) 一个好玩的Web安全-漏洞测试平台
+- [**593**Star][8d] [Py] [trustedsec/trevorc2](https://github.com/trustedsec/trevorc2) a legitimate website (browsable) that tunnels client/server communications for covert command execution.
+- [**593**Star][6d] [C] [mrexodia/titanhide](https://github.com/mrexodia/titanhide) a driver intended to hide debuggers from certain processes
+- [**592**Star][2m] [Py] [pwning/public-writeup](https://github.com/pwning/public-writeup) CTF write-ups by Plaid Parliament of Pwning
+- [**592**Star][1m] [HTML] [owasp/railsgoat](https://github.com/owasp/railsgoat) A vulnerable version of Rails that follows the OWASP Top 10
+- [**592**Star][2y] [Go] [nim4/dbshield](https://github.com/nim4/dbshield) Database firewall written in Go
+- [**591**Star][2y] [Py] [sc0tfree/mentalist](https://github.com/sc0tfree/mentalist) a graphical tool for custom wordlist generation. It utilizes common human paradigms for constructing passwords and can output the full wordlist as well as rules compatible with Hashcat and John the Ripper.
+- [**591**Star][3m] [Go] [moul/sshportal](https://github.com/moul/sshportal) Transparent SSH bastion
- [**590**Star][2y] [Go] [timest/goscan](https://github.com/timest/goscan) goscan is a simple and efficient IPv4 network scanner that discovers all active devices on local subnet.
- [**590**Star][11m] [pandazheng/ioshackstudy](https://github.com/pandazheng/ioshackstudy) IOS安全学习资料汇总
-- [**590**Star][1m] [HTML] [owasp/railsgoat](https://github.com/owasp/railsgoat) A vulnerable version of Rails that follows the OWASP Top 10
-- [**590**Star][1m] [ntkernel/lantern](https://github.com/ntkernel/lantern) V2Ray配置文件,蓝灯(Lantern)破解,手机版+win版
-- [**590**Star][2y] [Go] [nim4/dbshield](https://github.com/nim4/dbshield) Database firewall written in Go
-- [**590**Star][30d] [Py] [hslatman/awesome-industrial-control-system-security](https://github.com/hslatman/awesome-industrial-control-system-security) A curated list of resources related to Industrial Control System (ICS) security.
+- [**590**Star][2y] [Py] [eldraco/salamandra](https://github.com/eldraco/salamandra) Salamandra is a tool to find spy microphones that use radio freq to transmit. It uses SDR.
- [**590**Star][7y] [Py] [dabeaz/bitey](https://github.com/dabeaz/bitey) Import LLVM bitcode directly into Python and use it as an extension module.
-- [**589**Star][2y] [Py] [eldraco/salamandra](https://github.com/eldraco/salamandra) Salamandra is a tool to find spy microphones that use radio freq to transmit. It uses SDR.
-- [**588**Star][20d] [Py] [trustedsec/trevorc2](https://github.com/trustedsec/trevorc2) a legitimate website (browsable) that tunnels client/server communications for covert command execution.
-- [**588**Star][14d] [Go] [cloudflare/cloudflared](https://github.com/cloudflare/cloudflared) Argo Tunnel client
-- [**588**Star][6m] [Ruby] [bit4woo/summit_ppt](https://github.com/bit4woo/summit_ppt) 各种安全大会PPT PDF
+- [**590**Star][6m] [Ruby] [bit4woo/summit_ppt](https://github.com/bit4woo/summit_ppt) 各种安全大会PPT PDF
+- [**589**Star][3m] [Py] [pahaz/sshtunnel](https://github.com/pahaz/sshtunnel) SSH tunnels to remote server.
+- [**589**Star][1y] [brunty/awesome-checker-services](https://github.com/brunty/awesome-checker-services) List of links to the various checkers out there on the web for sites, domains, security etc
+- [**589**Star][1m] [Py] [1n3/blackwidow](https://github.com/1n3/blackwidow) A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.
+- [**588**Star][28d] [Go] [nytimes/gziphandler](https://github.com/nytimes/gziphandler) Go middleware to gzip HTTP responses
+- [**587**Star][13d] [C++] [lhy0403/qv2ray](https://github.com/lhy0403/qv2ray) v2ray linux Windows macOS GUI, 使用 Qt & c++, 支持 vmess ss socks,支持 vmess:// 扫描二维码,路由编辑,附带 Windows/Plasma 工具栏
- [**587**Star][3y] [Perl 6] [rapid7/iotseeker](https://github.com/rapid7/iotseeker) scan a network for specific types of IoT devices to detect if they are using the default, factory set credentials.
-- [**587**Star][26d] [Go] [nytimes/gziphandler](https://github.com/nytimes/gziphandler) Go middleware to gzip HTTP responses
-- [**587**Star][2y] [Swift] [krisyu/swift14macosapps](https://github.com/krisyu/swift14macosapps) approaching macOS development using swift with 14 mini projects.
+- [**587**Star][3y] [hack-with-github/windows](https://github.com/hack-with-github/windows) Awesome tools to exploit Windows !
- [**587**Star][3y] [C] [cr4sh/thinkpwn](https://github.com/cr4sh/thinkpwn) Lenovo ThinkPad System Management Mode arbitrary code execution 0day exploit
-- [**586**Star][3m] [Py] [pahaz/sshtunnel](https://github.com/pahaz/sshtunnel) SSH tunnels to remote server.
-- [**586**Star][1m] [Py] [1n3/blackwidow](https://github.com/1n3/blackwidow) A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.
+- [**586**Star][12d] [lirantal/awesome-nodejs-security](https://github.com/lirantal/awesome-nodejs-security) Awesome Node.js Security resources
+- [**586**Star][2y] [Swift] [krisyu/swift14macosapps](https://github.com/krisyu/swift14macosapps) approaching macOS development using swift with 14 mini projects.
+- [**585**Star][2m] [Py] [thinkst/opencanary](https://github.com/thinkst/opencanary) Modular and decentralised honeypot
- [**585**Star][8m] [Java] [olacabs/jackhammer](https://github.com/olacabs/jackhammer) One Security vulnerability assessment/management tool to solve all the security team problems.
-- [**585**Star][3y] [hack-with-github/windows](https://github.com/hack-with-github/windows) Awesome tools to exploit Windows !
+- [**585**Star][21d] [C++] [henrypp/memreduct](https://github.com/henrypp/memreduct) Lightweight real-time memory management application to monitor and clean system memory on your computer.
+- [**585**Star][4y] [certsocietegenerale/irm](https://github.com/certsocietegenerale/irm) Incident Response Methodologies
- [**584**Star][8m] [Py] [woj-ciech/danger-zone](https://github.com/woj-ciech/danger-zone) Correlate data between domains, IPs and email addresses, present it as a graph and store everything into Elasticsearch and JSON files.
- [**584**Star][9m] [C++] [secrary/makin](https://github.com/secrary/makin) reveal anti-debugging and anti-VM tricks
-- [**584**Star][2y] [Java] [findbugsproject/findbugs](https://github.com/findbugsproject/findbugs) The new home of the FindBugs project
-- [**584**Star][4y] [certsocietegenerale/irm](https://github.com/certsocietegenerale/irm) Incident Response Methodologies
-- [**584**Star][10d] [Go] [antoniomika/sish](https://github.com/antoniomika/sish) An open source serveo/ngrok alternative. HTTP(S)/WS(S)/TCP Tunnels to localhost using only SSH.
-- [**583**Star][2y] [Py] [sc0tfree/mentalist](https://github.com/sc0tfree/mentalist) a graphical tool for custom wordlist generation. It utilizes common human paradigms for constructing passwords and can output the full wordlist as well as rules compatible with Hashcat and John the Ripper.
-- [**583**Star][10d] [lirantal/awesome-nodejs-security](https://github.com/lirantal/awesome-nodejs-security) Awesome Node.js Security resources
+- [**584**Star][1m] [PS] [monoxgas/srdi](https://github.com/monoxgas/srdi) Shellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode
+- [**584**Star][2y] [Java] [findbugsproject/findbugs](https://github.com/findbugsproject/findbugs) a program which uses static analysis to look for bugs in Java code
+- [**584**Star][11d] [Ruby] [dev-sec/ansible-ssh-hardening](https://github.com/dev-sec/ansible-ssh-hardening) This Ansible role provides numerous security-related ssh configurations, providing all-round base protection.
+- [**583**Star][2d] [Py] [vivisect/vivisect](https://github.com/vivisect/vivisect)
+- [**583**Star][3y] [C] [ktap/ktap](https://github.com/ktap/ktap) a new scripting dynamic tracing tool for Linux
- [**583**Star][5m] [d30sa1/rootkits-list-download](https://github.com/d30sa1/rootkits-list-download) the list of all rootkits found so far on github and other sites.
-- [**582**Star][16d] [PHP] [zhuifengshaonianhanlu/pikachu](https://github.com/zhuifengshaonianhanlu/pikachu) 一个好玩的Web安全-漏洞测试平台
-- [**582**Star][7d] [Py] [vivisect/vivisect](https://github.com/vivisect/vivisect)
-- [**582**Star][2m] [Py] [thinkst/opencanary](https://github.com/thinkst/opencanary) Modular and decentralised honeypot
-- [**582**Star][17d] [C] [mrexodia/titanhide](https://github.com/mrexodia/titanhide) Hiding kernel-driver for x86/x64.
-- [**582**Star][3y] [C] [ktap/ktap](https://github.com/ktap/ktap) a new scripting dynamic tracing tool for Linux
+- [**582**Star][8d] [Py] [facebookincubator/weasel](https://github.com/facebookincubator/weasel) DNS covert channel implant for Red Teams.
+- [**582**Star][1y] [Py] [softscheck/tplink-smartplug](https://github.com/softscheck/tplink-smartplug) TP-Link WiFi SmartPlug Client and Wireshark Dissector
+- [**582**Star][7m] [Py] [ekultek/zeus-scanner](https://github.com/ekultek/zeus-scanner) Advanced reconnaissance utility
+- [**582**Star][2m] [Go] [dimitarpetrov/stegify](https://github.com/dimitarpetrov/stegify) Go tool for LSB steganography, capable of hiding any file within an image.
+- [**581**Star][1y] [Py] [spencerdodd/kernelpop](https://github.com/spencerdodd/kernelpop) kernel privilege escalation enumeration and exploitation framework
+- [**581**Star][2m] [C++] [secrary/andromeda](https://github.com/secrary/andromeda) Andromeda - Interactive Reverse Engineering Tool for Android Applications
+- [**581**Star][9m] [Py] [romanz/amodem](https://github.com/romanz/amodem) transmit a file between 2 computers, using a simple headset, allowing true air-gapped communication (via a speaker and a microphone), or an audio cable (for higher transmission speed)
- [**581**Star][3y] [Py] [mlsecproject/combine](https://github.com/mlsecproject/combine) Tool to gather Threat Intelligence indicators from publicly available sources
-- [**581**Star][9d] [Ruby] [dev-sec/ansible-ssh-hardening](https://github.com/dev-sec/ansible-ssh-hardening) This Ansible role provides numerous security-related ssh configurations, providing all-round base protection.
+- [**581**Star][24d] [Ruby] [hackplayers/evil-winrm](https://github.com/hackplayers/evil-winrm) The ultimate WinRM shell for hacking/pentesting
- [**581**Star][1y] [JS] [cryptogenic/ps4-5.05-kernel-exploit](https://github.com/cryptogenic/ps4-5.05-kernel-exploit) A fully implemented kernel exploit for the PS4 on 5.05FW
-- [**580**Star][1y] [Py] [spencerdodd/kernelpop](https://github.com/spencerdodd/kernelpop) kernel privilege escalation enumeration and exploitation framework
+- [**581**Star][3d] [clarketm/proxy-list](https://github.com/clarketm/proxy-list) A list of free, public, forward proxy servers. UPDATED DAILY!
- [**580**Star][2m] [C] [pyca/bcrypt](https://github.com/pyca/bcrypt) Modern(-ish) password hashing for your software and your servers
-- [**580**Star][19d] [C++] [henrypp/memreduct](https://github.com/henrypp/memreduct) Lightweight real-time memory management application to monitor and clean system memory on your computer.
-- [**580**Star][13d] [Py] [gwen001/pentest-tools](https://github.com/gwen001/pentest-tools) Custom pentesting tools
-- [**580**Star][7m] [Py] [ekultek/zeus-scanner](https://github.com/ekultek/zeus-scanner) Advanced reconnaissance utility
+- [**580**Star][2y] [PHP] [pentestgeek/phishing-frenzy](https://github.com/pentestgeek/phishing-frenzy) Ruby on Rails Phishing Framework
+- [**580**Star][6m] [nshalabi/sysmontools](https://github.com/nshalabi/sysmontools) Utilities for Sysmon
+- [**580**Star][7m] [Py] [googlecloudplatform/flask-talisman](https://github.com/googlecloudplatform/flask-talisman) HTTP security headers for Flask
- [**580**Star][2y] [Py] [ant4g0nist/lisa.py](https://github.com/ant4g0nist/lisa.py) -An Exploit Dev Swiss Army Knife.
-- [**579**Star][2y] [PHP] [pentestgeek/phishing-frenzy](https://github.com/pentestgeek/phishing-frenzy) Ruby on Rails Phishing Framework
+- [**579**Star][1y] [CSS] [functionclub/ssr-bash-python](https://github.com/functionclub/ssr-bash-python) 一个SSR多用户控制脚本
- [**579**Star][1y] [Go] [manifoldco/torus-cli](https://github.com/manifoldco/torus-cli) A secure, shared workspace for secrets
+- [**579**Star][1m] [C] [getdnsapi/stubby](https://github.com/getdnsapi/stubby) Stubby is the name given to a mode of using getdns which enables it to act as a local DNS Privacy stub resolver (using DNS-over-TLS).
+- [**579**Star][1y] [Java] [federicodotta/brida](https://github.com/federicodotta/brida) The new bridge between Burp Suite and Frida!
- [**579**Star][4y] [80vul/phpcodz](https://github.com/80vul/phpcodz) Php Codz Hacking
-- [**578**Star][9m] [Py] [romanz/amodem](https://github.com/romanz/amodem) transmit a file between 2 computers, using a simple headset, allowing true air-gapped communication (via a speaker and a microphone), or an audio cable (for higher transmission speed)
+- [**578**Star][1y] [C#] [tyranid/dotnettojscript](https://github.com/tyranid/dotnettojscript) A tool to create a JScript file which loads a .NET v2 assembly from memory.
+- [**578**Star][6m] [Py] [timthony/self_drive](https://github.com/timthony/self_drive) 基于树莓派的自动驾驶小车,利用树莓派和tensorflow实现小车在赛道的自动驾驶。(Self-driving car based on raspberry pi(tensorflow))
+- [**578**Star][3y] [Pascal] [t-d-k/librecrypt](https://github.com/t-d-k/librecrypt) Transparent on-the-fly disk encryption for Windows. LUKS compatible.
- [**578**Star][10m] [mtivadar/windows10_ntfs_crash_dos](https://github.com/mtivadar/windows10_ntfs_crash_dos) PoC for a NTFS crash that I discovered, in various Windows versions
-- [**577**Star][3y] [Pascal] [t-d-k/librecrypt](https://github.com/t-d-k/librecrypt) Transparent on-the-fly disk encryption for Windows. LUKS compatible.
-- [**577**Star][1y] [Py] [softscheck/tplink-smartplug](https://github.com/softscheck/tplink-smartplug) TP-Link WiFi SmartPlug Client and Wireshark Dissector
-- [**577**Star][2m] [C++] [secrary/andromeda](https://github.com/secrary/andromeda) Andromeda - Interactive Reverse Engineering Tool for Android Applications
+- [**577**Star][1y] [C++] [qbdi/qbdi](https://github.com/QBDI/QBDI) A Dynamic Binary Instrumentation framework based on LLVM.
- [**577**Star][12m] [HTML] [r00t-3xp10it/morpheus](https://github.com/r00t-3xp10it/morpheus) Morpheus - Automating Ettercap TCP/IP (MITM-hijacking Tool)
-- [**577**Star][2m] [Go] [dimitarpetrov/stegify](https://github.com/dimitarpetrov/stegify) Go tool for LSB steganography, capable of hiding any file within an image.
-- [**576**Star][1y] [C#] [tyranid/dotnettojscript](https://github.com/tyranid/dotnettojscript) A tool to create a JScript file which loads a .NET v2 assembly from memory.
-- [**576**Star][5m] [nshalabi/sysmontools](https://github.com/nshalabi/sysmontools) Utilities for Sysmon
-- [**576**Star][7m] [Py] [googlecloudplatform/flask-talisman](https://github.com/googlecloudplatform/flask-talisman) HTTP security headers for Flask
+- [**576**Star][24d] [PS] [threatexpress/red-team-scripts](https://github.com/threatexpress/red-team-scripts) A collection of Red Team focused tools, scripts, and notes
+- [**576**Star][3d] [Go] [mysteriumnetwork/node](https://github.com/mysteriumnetwork/node) Mysterium Node - VPN server and client for Mysterium Network
+- [**576**Star][3m] [Py] [jonluca/anubis](https://github.com/jonluca/anubis) Subdomain enumeration and information gathering tool
- [**576**Star][2y] [Py] [dutchgraa/crackcoin](https://github.com/dutchgraa/crackcoin) Very basic blockchain-free cryptocurrency PoC in Python
-- [**575**Star][1y] [CSS] [functionclub/ssr-bash-python](https://github.com/functionclub/ssr-bash-python) 一个SSR多用户控制脚本
-- [**575**Star][1y] [C++] [qbdi/qbdi](https://github.com/QBDI/QBDI) A Dynamic Binary Instrumentation framework based on LLVM.
+- [**575**Star][18d] [Go] [yggdrasil-network/yggdrasil-go](https://github.com/yggdrasil-network/yggdrasil-go) An experiment in scalable routing as an encrypted IPv6 overlay network
+- [**575**Star][2m] [Go] [shopify/kubeaudit](https://github.com/shopify/kubeaudit) kubeaudit helps you audit your Kubernetes clusters against common security controls
- [**575**Star][2y] [JS] [shadowsocks-plus/shadowsocks-plus](https://github.com/shadowsocks-plus/shadowsocks-plus)
-- [**575**Star][3m] [Py] [jonluca/anubis](https://github.com/jonluca/anubis) Subdomain enumeration and information gathering tool
+- [**575**Star][9m] [Py] [fox-it/mitm6](https://github.com/fox-it/mitm6) exploits the default configuration of Windows to take over the default DNS server
- [**574**Star][1m] [Py] [nekmo/amazon-dash](https://github.com/nekmo/amazon-dash) Hack your Amazon Dash to run what you want.
-- [**574**Star][22d] [PowerShell] [threatexpress/red-team-scripts](https://github.com/threatexpress/red-team-scripts) A collection of Red Team focused tools, scripts, and notes
+- [**574**Star][6m] [PHP] [s3inlc/hashtopolis](https://github.com/s3inlc/hashtopolis) A Hashcat wrapper for distributed hashcracking
+- [**574**Star][5m] [Py] [nidem/kerberoast](https://github.com/nidem/kerberoast) a series of tools for attacking MS Kerberos implementations
+- [**574**Star][4m] [Py] [neo23x0/yargen](https://github.com/neo23x0/yargen) yarGen is a generator for YARA rules
+- [**574**Star][3y] [C] [iagox86/hash_extender](https://github.com/iagox86/hash_extender)
+- [**574**Star][4y] [C#] [elevenpaths/evilfoca](https://github.com/elevenpaths/evilfoca) Tool to analyze and test security in IPv4 and IPv6 data networks
+- [**574**Star][14d] [Perl] [bollwarm/sectoolset](https://github.com/bollwarm/sectoolset) The security tool(project) Set from github
+- [**573**Star][2y] [C++] [zneak/fcd](https://github.com/zneak/fcd) An optimizing decompiler
- [**573**Star][4y] [C++] [microsoft/iediagnosticsadapter](https://github.com/microsoft/iediagnosticsadapter) IE Diagnostics Adapter is a standalone exe that enables tools to debug and diagnose IE11 using the Chrome remote debug protocol.
- [**573**Star][3y] [C] [jgarzik/cpuminer](https://github.com/jgarzik/cpuminer) CPU miner for bitcoin
-- [**573**Star][3y] [C] [iagox86/hash_extender](https://github.com/iagox86/hash_extender)
-- [**573**Star][4y] [C#] [elevenpaths/evilfoca](https://github.com/elevenpaths/evilfoca) Tool to analyze and test security in IPv4 and IPv6 data networks
-- [**572**Star][2y] [C++] [zneak/fcd](https://github.com/zneak/fcd) An optimizing decompiler
+- [**573**Star][3m] [Perl] [alisamtechnology/atscan](https://github.com/alisamtechnology/atscan) Advanced dork Search & Mass Exploit Scanner
+- [**572**Star][27d] [Py] [0kee-team/watchad](https://github.com/0kee-team/watchad) AD Security Intrusion Detection System
+- [**572**Star][2y] [Py] [nnamon/linux-exploitation-course](https://github.com/nnamon/linux-exploitation-course) A Course on Intermediate Level Linux Exploitation
+- [**572**Star][2y] [hack-with-github/awesome-security-gists](https://github.com/hack-with-github/awesome-security-gists) A collection of various GitHub gists for hackers, pentesters and security researchers
- [**572**Star][2m] [HTML] [gwillem/magento-malware-scanner](https://github.com/gwillem/magento-malware-scanner) Scanner, signatures and the largest collection of Magento malware
-- [**572**Star][1m] [C] [getdnsapi/stubby](https://github.com/getdnsapi/stubby) Stubby is the name given to a mode of using getdns which enables it to act as a local DNS Privacy stub resolver (using DNS-over-TLS).
-- [**572**Star][8d] [clarketm/proxy-list](https://github.com/clarketm/proxy-list) A list of free, public, forward proxy servers. UPDATED DAILY!
-- [**572**Star][3y] [HTML] [bitdust/wamacry](https://github.com/bitdust/wamacry) a fake WannaCry
+- [**572**Star][16d] [Java] [alexzaitsev/apk-dependency-graph](https://github.com/alexzaitsev/apk-dependency-graph) Android class dependency visualizer. This tool helps to visualize the current state of the project.
+- [**571**Star][10d] [Py] [nsacyber/walkoff](https://github.com/nsacyber/WALKOFF) A flexible, easy to use, automation framework allowing users to integrate their capabilities and devices to cut through the repetitive, tedious tasks slowing them down. #nsacyber
- [**571**Star][11m] [Py] [ddevault/pass-rotate](https://github.com/ddevault/pass-rotate) A tool and library for rotating your password on online services
-- [**571**Star][5m] [Py] [nidem/kerberoast](https://github.com/nidem/kerberoast) a series of tools for attacking MS Kerberos implementations
-- [**571**Star][8m] [Py] [fox-it/mitm6](https://github.com/fox-it/mitm6) exploits the default configuration of Windows to take over the default DNS server
-- [**571**Star][14d] [Java] [alexzaitsev/apk-dependency-graph](https://github.com/alexzaitsev/apk-dependency-graph) Android class dependency visualizer. This tool helps to visualize the current state of the project.
-- [**570**Star][16d] [Go] [yggdrasil-network/yggdrasil-go](https://github.com/yggdrasil-network/yggdrasil-go) An experiment in scalable routing as an encrypted IPv6 overlay network
-- [**570**Star][2y] [Py] [nnamon/linux-exploitation-course](https://github.com/nnamon/linux-exploitation-course) A Course on Intermediate Level Linux Exploitation
-- [**570**Star][1y] [Java] [federicodotta/brida](https://github.com/federicodotta/brida) The new bridge between Burp Suite and Frida!
-- [**570**Star][12d] [Perl] [bollwarm/sectoolset](https://github.com/bollwarm/sectoolset) The security tool(project) Set from github
+- [**571**Star][4y] [Go] [fzipp/gocyclo](https://github.com/fzipp/gocyclo) Calculate cyclomatic complexities of functions in Go source code.
+- [**571**Star][3y] [HTML] [bitdust/wamacry](https://github.com/bitdust/wamacry) a fake WannaCry
+- [**570**Star][2m] [Py] [tarunkant/gopherus](https://github.com/tarunkant/gopherus) This tool generates gopher link for exploiting SSRF and gaining RCE in various servers
+- [**570**Star][23d] [C] [jhallen/joes-sandbox](https://github.com/jhallen/joes-sandbox)
+- [**570**Star][18d] [Py] [graphenex/graphenex](https://github.com/graphenex/graphenex) Automated System Hardening Framework
+- [**570**Star][2y] [PS] [411hall/jaws](https://github.com/411hall/jaws) JAWS - Just Another Windows (Enum) Script
+- [**569**Star][7m] [ObjC] [rpetrich/captainhook](https://github.com/rpetrich/captainhook) Common hooking/monkey patching headers for Objective-C on Mac OS X and iPhone OS. MIT licensed
- [**569**Star][4y] [Py] [musalbas/heartbleed-masstest](https://github.com/musalbas/heartbleed-masstest) Multi-threaded tool for scanning many hosts for CVE-2014-0160.
-- [**569**Star][1m] [PowerShell] [monoxgas/srdi](https://github.com/monoxgas/srdi) Shellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode
-- [**569**Star][2y] [hack-with-github/awesome-security-gists](https://github.com/hack-with-github/awesome-security-gists) A collection of various GitHub gists for hackers, pentesters and security researchers
-- [**569**Star][10d] [Java] [guardianproject/netcipher](https://github.com/guardianproject/netcipher) a library for Android that provides multiple means to improve network security in mobile applications
-- [**569**Star][16d] [Py] [graphenex/graphenex](https://github.com/graphenex/graphenex) Automated System Hardening Framework
-- [**569**Star][1y] [C] [externalist/exploit_playground](https://github.com/externalist/exploit_playground) Analysis of public exploits or my 1day exploits
-- [**569**Star][3m] [Perl] [alisamtechnology/atscan](https://github.com/alisamtechnology/atscan) Advanced dork Search & Mass Exploit Scanner
-- [**568**Star][1y] [Solidity] [crytic/not-so-smart-contracts](https://github.com/crytic/not-so-smart-contracts) Examples of Solidity security issues
-- [**568**Star][2m] [Go] [shopify/kubeaudit](https://github.com/shopify/kubeaudit) kubeaudit helps you audit your Kubernetes clusters against common security controls
-- [**568**Star][7m] [Objective-C] [rpetrich/captainhook](https://github.com/rpetrich/captainhook) Common hooking/monkey patching headers for Objective-C on Mac OS X and iPhone OS. MIT licensed
-- [**568**Star][21d] [C] [jhallen/joes-sandbox](https://github.com/jhallen/joes-sandbox)
-- [**568**Star][2y] [PowerShell] [411hall/jaws](https://github.com/411hall/jaws) JAWS - Just Another Windows (Enum) Script
-- [**567**Star][6m] [PHP] [s3inlc/hashtopolis](https://github.com/s3inlc/hashtopolis) A Hashcat wrapper for distributed hashcracking
-- [**567**Star][4m] [Py] [neo23x0/yargen](https://github.com/neo23x0/yargen) yarGen is a generator for YARA rules
-- [**567**Star][4y] [Go] [fzipp/gocyclo](https://github.com/fzipp/gocyclo) Calculate cyclomatic complexities of functions in Go source code.
-- [**566**Star][8d] [Py] [nsacyber/walkoff](https://github.com/nsacyber/WALKOFF) A flexible, easy to use, automation framework allowing users to integrate their capabilities and devices to cut through the repetitive, tedious tasks slowing them down. #nsacyber
-- [**566**Star][2m] [Py] [tarunkant/gopherus](https://github.com/tarunkant/gopherus) This tool generates gopher link for exploiting SSRF and gaining RCE in various servers
-- [**566**Star][10m] [JS] [raineorshine/solgraph](https://github.com/raineorshine/solgraph) Visualize Solidity control flow for smart contract security analysis.
-- [**566**Star][2y] [C] [matthijskooijman/arduino-lmic](https://github.com/matthijskooijman/arduino-lmic) LoraWAN-in-C library, adapted to run under the Arduino environment
-- [**565**Star][6d] [Py] [facebookincubator/weasel](https://github.com/facebookincubator/weasel) DNS covert channel implant for Red Teams.
-- [**565**Star][5m] [C++] [sgan81/apfs-fuse](https://github.com/sgan81/apfs-fuse) FUSE driver for APFS (Apple File System)
-- [**565**Star][3m] [C++] [lowpowerlab/rfm69](https://github.com/lowpowerlab/rfm69) RFM69 library for RFM69W, RFM69HW, RFM69CW, RFM69HCW (semtech SX1231, SX1231H)
+- [**569**Star][12d] [Java] [guardianproject/netcipher](https://github.com/guardianproject/netcipher) a library for Android that provides multiple means to improve network security in mobile applications
+- [**569**Star][5m] [Py] [codingo/vhostscan](https://github.com/codingo/vhostscan) A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.
+- [**568**Star][1y] [Solidity] [crytic/not-so-smart-contracts](https://github.com/crytic/not-so-smart-contracts) examples of common Ethereum smart contract vulnerabilities, including code from real smart contracts.
+- [**568**Star][5m] [C++] [sgan81/apfs-fuse](https://github.com/sgan81/apfs-fuse) FUSE driver for APFS (Apple File System)
+- [**568**Star][11m] [Py] [genetic-malware/ebowla](https://github.com/genetic-malware/ebowla) Framework for Making Environmental Keyed Payloads (NO LONGER SUPPORTED)
+- [**568**Star][2d] [HTML] [fate0/proxylist](https://github.com/fate0/proxylist) proxylist, generate by fate0/getproxy project in every 15 minute
+- [**568**Star][1y] [C] [externalist/exploit_playground](https://github.com/externalist/exploit_playground) Analysis of public exploits or my 1day exploits
+- [**567**Star][2y] [Visual Basic .NET] [mdsecactivebreach/cactustorch](https://github.com/mdsecactivebreach/cactustorch) Payload Generation for Adversary Simulations
+- [**567**Star][2y] [C] [matthijskooijman/arduino-lmic](https://github.com/matthijskooijman/arduino-lmic) LoraWAN-in-C library, adapted to run under the Arduino environment
+- [**567**Star][3m] [C++] [lowpowerlab/rfm69](https://github.com/lowpowerlab/rfm69) RFM69 library for RFM69W, RFM69HW, RFM69CW, RFM69HCW (semtech SX1231, SX1231H)
+- [**566**Star][11m] [JS] [raineorshine/solgraph](https://github.com/raineorshine/solgraph) Visualize Solidity control flow for smart contract security analysis.
+- [**566**Star][10m] [C] [justinsteven/dostackbufferoverflowgood](https://github.com/justinsteven/dostackbufferoverflowgood) The Presentation and Tutorial for Cross-Site Scripters Who Can't Stack Buffer Overflow Good and Want to Do Other Stuff Good Too
+- [**565**Star][3y] [HTML] [salesforce/vulnreport](https://github.com/salesforce/vulnreport) pentesting management and automation platform by Salesforce Product Security
+- [**565**Star][21d] [ObjC] [hdb-li/lldebugtool](https://github.com/hdb-li/lldebugtool) LLDebugTool is a debugging tool for developers and testers that can help you analyze and manipulate data in non-xcode situations.
- [**565**Star][6m] [C#] [fremag/memoscope.net](https://github.com/fremag/memoscope.net) Dump and analyze .Net applications memory ( a gui for WinDbg and ClrMd )
- [**565**Star][3y] [Py] [edwardz246003/iis_exploit](https://github.com/edwardz246003/iis_exploit) Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header beginning with "If: Port Knocking
-- [**510**Star][3m] [Java] [megatronking/stringfog](https://github.com/megatronking/stringfog) 一款自动对字节码中的字符串进行加密Android插件工具
-- [**510**Star][3y] [Py] [jesparza/peepdf](https://github.com/jesparza/peepdf) Powerful Python tool to analyze PDF documents
-- [**510**Star][10m] [Py] [fbessez/tinder](https://github.com/fbessez/tinder) Official November 2019 Documentation for Tinder's API
-- [**509**Star][11d] [C] [mohuihui/antispy](https://github.com/mohuihui/antispy) AntiSpy is a free but powerful anti virus and rootkits toolkit.It offers you the ability with the highest privileges that can detect,analyze and restore various kernel modifications and hooks.With its assistance,you can easily spot and neutralize malwares hidden from normal detectors.
+- [**511**Star][5m] [C++] [shuax/greenchrome](https://github.com/shuax/greenchrome) 超好用的Chrome浏览器增强软件
+- [**511**Star][30d] [Java] [rub-nds/tls-attacker](https://github.com/rub-nds/tls-attacker) TLS-Attacker is a Java-based framework for analyzing TLS libraries. It is developed by the Ruhr University Bochum (
+- [**511**Star][2d] [C#] [michaelgrafnetter/dsinternals](https://github.com/michaelgrafnetter/dsinternals) Directory Services Internals (DSInternals) PowerShell Module and Framework
+- [**511**Star][2y] [C] [larryli/putty](https://github.com/larryli/putty) PuTTY 中文版,原
+- [**510**Star][29d] [no-github/digital-privacy](https://github.com/no-github/digital-privacy) 一个关于数字隐私搜集、保护、清理集一体的方案,外加开源信息收集(OSINT)对抗
+- [**510**Star][3d] [Perl] [mrash/fwknop](https://github.com/mrash/fwknop) Single Packet Authorization > Port Knocking
+- [**510**Star][9d] [C++] [miki151/keeperrl](https://github.com/miki151/keeperrl) Source code of KeeperRL
- [**509**Star][2y] [Py] [robindavid/lsb-steganography](https://github.com/robindavid/lsb-steganography) Python program to steganography files into images using the Least Significant Bit.
- [**509**Star][3y] [Py] [reyammer/shellnoob](https://github.com/reyammer/shellnoob) A shellcode writing toolkit
- [**509**Star][5m] [C] [nurupo/rootkit](https://github.com/nurupo/rootkit) Linux rootkit for Ubuntu 16.04 and 10.04 (Linux Kernels 4.4.0 and 2.6.32), both i386 and amd64
-- [**508**Star][5m] [C++] [shuax/greenchrome](https://github.com/shuax/greenchrome) 增强Chrome的工具
-- [**507**Star][2y] [C] [samyk/opensesame](https://github.com/samyk/opensesame) OpenSesame attacks wireless garages and can open most fixed-code garages and gates in seconds using a Mattel toy
-- [**507**Star][1m] [Py] [platomav/meanalyzer](https://github.com/platomav/meanalyzer) Intel Engine Firmware Analysis Tool
-- [**507**Star][14d] [Py] [mozillasecurity/funfuzz](https://github.com/mozillasecurity/funfuzz) A collection of fuzzers in a harness for testing the SpiderMonkey JavaScript engine.
-- [**506**Star][2y] [Py] [sjvasquez/web-traffic-forecasting](https://github.com/sjvasquez/web-traffic-forecasting) Kaggle | Web Traffic Forecasting
+- [**509**Star][12m] [Go] [mthbernardes/gtrs](https://github.com/mthbernardes/gtrs) uses Google Translator as a proxy to send arbitrary commands to an infected machine
+- [**508**Star][3m] [C++] [xmrig/xmrig-nvidia](https://github.com/xmrig/xmrig-nvidia) xmrig-nvidia: 门罗币挖矿代码 N卡版本
+- [**508**Star][2y] [Py] [sjvasquez/web-traffic-forecasting](https://github.com/sjvasquez/web-traffic-forecasting) Kaggle | Web Traffic Forecasting
+- [**508**Star][2y] [C] [samyk/opensesame](https://github.com/samyk/opensesame) OpenSesame attacks wireless garages and can open most fixed-code garages and gates in seconds using a Mattel toy
+- [**508**Star][1m] [Py] [platomav/meanalyzer](https://github.com/platomav/meanalyzer) Intel Engine Firmware Analysis Tool
+- [**508**Star][2m] [Groovy] [bryansharp/hibeaver](https://github.com/bryansharp/hibeaver) a gradle plugin for java byte code manipulation and AOP design by modifying project byte code during build of the package, or modifying byte code within Jar independently.
+- [**507**Star][11m] [Py] [idarlingteam/idarling](https://github.com/IDArlingTeam/IDArling) a collaborative reverse engineering plugin for IDA Pro and Hex-Rays
+- [**507**Star][5d] [Py] [mozillasecurity/funfuzz](https://github.com/mozillasecurity/funfuzz) A collection of fuzzers in a harness for testing the SpiderMonkey JavaScript engine.
+- [**507**Star][7d] [Py] [certtools/intelmq](https://github.com/certtools/intelmq) IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
- [**506**Star][5m] [Py] [rabbitstack/fibratus](https://github.com/rabbitstack/fibratus) Tool for exploration and tracing of the Windows kernel
-- [**506**Star][26d] [no-github/digital-privacy](https://github.com/no-github/digital-privacy) 一个关于数字隐私搜集、保护、清理集一体的方案,外加开源信息收集(OSINT)对抗
-- [**506**Star][2y] [C] [larryli/putty](https://github.com/larryli/putty) PuTTY 中文版,原
-- [**505**Star][11m] [Py] [idarlingteam/idarling](https://github.com/IDArlingTeam/IDArling) a collaborative reverse engineering plugin for IDA Pro and Hex-Rays
-- [**505**Star][11d] [Py] [certtools/intelmq](https://github.com/certtools/intelmq) IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
-- [**505**Star][2m] [Groovy] [bryansharp/hibeaver](https://github.com/bryansharp/hibeaver) a gradle plugin for java byte code manipulation and AOP design by modifying project byte code during build of the package, or modifying byte code within Jar independently.
-- [**504**Star][3y] [OCaml] [trustinsoft/tis-interpreter](https://github.com/trustinsoft/tis-interpreter) An interpreter for finding subtle bugs in programs written in standard C
-- [**504**Star][4m] [PHP] [nettitude/xss_payloads](https://github.com/nettitude/xss_payloads) Exploitation for XSS
+- [**506**Star][4m] [PHP] [nettitude/xss_payloads](https://github.com/nettitude/xss_payloads) Exploitation for XSS
+- [**506**Star][7m] [C] [iovisor/ply](https://github.com/iovisor/ply) Dynamic Tracing in Linux
+- [**506**Star][5m] [PHP] [delight-im/php-auth](https://github.com/delight-im/php-auth) Authentication for PHP. Simple, lightweight and secure.
+- [**505**Star][5d] [Py] [theresafewconors/sooty](https://github.com/theresafewconors/sooty) The SOC Analysts all-in-one CLI tool to automate and speed up workflow.
+- [**505**Star][8m] [JS] [mindedsecurity/jstillery](https://github.com/mindedsecurity/jstillery) Advanced JavaScript Deobfuscation via Partial Evaluation
+- [**505**Star][4m] [Java] [happylishang/cacheemulatorchecker](https://github.com/happylishang/cacheemulatorchecker) Android模拟器检测,检测Android模拟器 ,获取相对真实的IMEI AndroidId 序列号 MAC地址等,作为DeviceID,应对防刷需求等
+- [**504**Star][2d] [C] [greenbone/openvas](https://github.com/greenbone/openvas) Open Vulnerability Assessment Scanner
+- [**504**Star][3y] [OCaml] [trustinsoft/tis-interpreter](https://github.com/trustinsoft/tis-interpreter) detects subtle bugs in C programs that may not have eye-visible effects when executing the same programs compiled in the traditional way.
+- [**504**Star][3m] [Go] [timothyye/godns](https://github.com/timothyye/godns) A dynamic DNS client tool, supports AliDNS, Cloudflare, Google Domains, DNSPod, HE.net & DuckDNS, written in Go.
- [**504**Star][3m] [mutability/dump1090](https://github.com/mutability/dump1090) Dump1090 is a simple Mode S decoder for RTLSDR devices
-- [**503**Star][12d] [PowerShell] [s3cur3th1ssh1t/winpwn](https://github.com/S3cur3Th1sSh1t/WinPwn) Automation for internal Windows Penetrationtest / AD-Security
+- [**503**Star][2y] [Java] [nsacyber/grassmarlin](https://github.com/nsacyber/GRASSMARLIN) Provides situational awareness of Industrial Control Systems (ICS) and Supervisory Control and Data Acquisition (SCADA) networks in support of network security assessments. #nsacyber
+- [**503**Star][12m] [C] [google/ktsan](https://github.com/google/ktsan) a fast data race detector for the Linux kernel
+- [**502**Star][2y] [C++] [andrivet/advobfuscator](https://github.com/andrivet/advobfuscator) Obfuscation library based on C++11/14 and metaprogramming
- [**502**Star][2y] [JS] [kevva/wifi-password](https://github.com/kevva/wifi-password) Get current wifi password
-- [**502**Star][8m] [JS] [mindedsecurity/jstillery](https://github.com/mindedsecurity/jstillery) Advanced JavaScript Deobfuscation via Partial Evaluation
+- [**502**Star][3m] [Go] [cyberark/summon](https://github.com/cyberark/summon) CLI that provides on-demand secrets access for common DevOps tools
+- [**502**Star][1m] [Py] [storyyeller/enjarify](https://github.com/storyyeller/enjarify) 将Dalvik字节码转为对应的Java字节码(google Fork版)
- [**502**Star][9m] [C#] [lowleveldesign/wtrace](https://github.com/lowleveldesign/wtrace) Command line tracing tool for Windows, based on ETW.
- [**502**Star][7m] [Py] [lijiejie/ds_store_exp](https://github.com/lijiejie/ds_store_exp) A .DS_Store file disclosure exploit. It parses .DS_Store file and downloads files recursively.
-- [**502**Star][7m] [C] [iovisor/ply](https://github.com/iovisor/ply) Dynamic Tracing in Linux
-- [**502**Star][4m] [PHP] [delight-im/php-auth](https://github.com/delight-im/php-auth) Authentication for PHP. Simple, lightweight and secure.
-- [**501**Star][2y] [Java] [nsacyber/grassmarlin](https://github.com/nsacyber/GRASSMARLIN) Provides situational awareness of Industrial Control Systems (ICS) and Supervisory Control and Data Acquisition (SCADA) networks in support of network security assessments. #nsacyber
-- [**501**Star][3m] [Go] [cyberark/summon](https://github.com/cyberark/summon) CLI that provides on-demand secrets access for common DevOps tools
-- [**501**Star][4m] [Java] [happylishang/cacheemulatorchecker](https://github.com/happylishang/cacheemulatorchecker) Android模拟器检测,检测Android模拟器 ,获取相对真实的IMEI AndroidId 序列号 MAC地址等,作为DeviceID,应对防刷需求等
-- [**501**Star][2y] [Py] [chybeta/cmspoc](https://github.com/chybeta/cmspoc) A CMS Exploit Framework
-- [**501**Star][2m] [Py] [byt3bl33d3r/sprayingtoolkit](https://github.com/byt3bl33d3r/sprayingtoolkit) Scripts to make password spraying attacks against Lync/S4B & OWA a lot quicker, less painful and more efficient
-- [**500**Star][2y] [C++] [andrivet/advobfuscator](https://github.com/andrivet/advobfuscator) Obfuscation library based on C++11/14 and metaprogramming
-- [**500**Star][29d] [C#] [michaelgrafnetter/dsinternals](https://github.com/michaelgrafnetter/dsinternals) Directory Services Internals (DSInternals) PowerShell Module and Framework
-- [**500**Star][12m] [C] [google/ktsan](https://github.com/google/ktsan) KernelThreadSanitizer, a fast data race detector for the Linux kernel
+- [**502**Star][2y] [Py] [chybeta/cmspoc](https://github.com/chybeta/cmspoc) A CMS Exploit Framework
+- [**502**Star][2m] [Py] [byt3bl33d3r/sprayingtoolkit](https://github.com/byt3bl33d3r/sprayingtoolkit) Scripts to make password spraying attacks against Lync/S4B & OWA a lot quicker, less painful and more efficient
+- [**501**Star][7d] [JS] [shadowsocks/shadowsocks-org](https://github.com/shadowsocks/shadowsocks-org)
+- [**501**Star][20d] [owasp/wstg](https://github.com/owasp/wstg) The OWASP Web Security Testing Guide includes a "best practice" penetration testing framework which users can implement in their own organizations and a "low level" penetration testing guide that describes techniques for testing most common web application and web service security issues.
+- [**501**Star][20d] [owasp/wstg](https://github.com/OWASP/wstg) The OWASP Web Security Testing Guide includes a "best practice" penetration testing framework which users can implement in their own organizations and a "low level" penetration testing guide that describes techniques for testing most common web application and web service security issues.
+- [**501**Star][22d] [Go] [genuinetools/amicontained](https://github.com/genuinetools/amicontained) Container introspection tool. Find out what container runtime is being used as well as features available.
+- [**500**Star][25d] [PS] [stefanscherer/packer-windows](https://github.com/stefanscherer/packer-windows) Windows Templates for Packer: Win10, Server 2016, 1709, 1803, 1809, 2019, 1903, Insider with Docker
+- [**500**Star][20d] [JS] [sindresorhus/public-ip](https://github.com/sindresorhus/public-ip) Get your public IP address - very fast!
+- [**500**Star][9m] [C] [nowsecure/fsmon](https://github.com/nowsecure/fsmon) monitor filesystem on iOS / OS X / Android / FirefoxOS / Linux
- [**500**Star][3y] [C] [gaffe23/linux-inject](https://github.com/gaffe23/linux-inject) Tool for injecting a shared object into a Linux process
-- [**499**Star][2m] [JS] [shadowsocks/shadowsocks-org](https://github.com/shadowsocks/shadowsocks-org)
-- [**499**Star][1m] [Py] [storyyeller/enjarify](https://github.com/storyyeller/enjarify) 将Dalvik字节码转为对应的Java字节码(google Fork版)
+- [**499**Star][2m] [JS] [acmesec/pocbox](https://github.com/Acmesec/PoCBox) 赏金猎人的脆弱性测试辅助平台
- [**499**Star][3y] [C] [huawei/huawei_liteos_kernel](https://github.com/huawei/huawei_liteos_kernel)
-- [**499**Star][7y] [C] [ghughes/fruitstrap](https://github.com/ghughes/fruitstrap) Install and debug iPhone apps from the command line, without using Xcode
+- [**499**Star][8d] [Swift] [google/science-journal-ios](https://github.com/google/science-journal-ios) Use the sensors in your mobile devices to perform science experiments. Science doesn’t just happen in the classroom or lab—tools like Science Journal let you see how the world works with just your phone.
- [**499**Star][7y] [Java] [chainsdd/superuser](https://github.com/chainsdd/superuser) Android superuser permissions app (from Zinx)
+- [**499**Star][3m] [Py] [awslabs/aws-security-benchmark](https://github.com/awslabs/aws-security-benchmark) Open source demos, concept and guidance related to the AWS CIS Foundation framework.
+- [**498**Star][17d] [xrkk/awesome-ida](https://github.com/xrkk/awesome-ida) moved to:
+- [**498**Star][8m] [Py] [tp4a/teleport](https://github.com/tp4a/teleport) Teleport是一款简单易用的堡垒机系统。
- [**498**Star][4y] [Assembly] [xoreaxeaxeax/repsych](https://github.com/xoreaxeaxeax/repsych) Psychological warfare in reverse engineering
- [**498**Star][4y] [Py] [vector35/deprecated-binaryninja-python](https://github.com/vector35/deprecated-binaryninja-python) Deprecated Binary Ninja prototype written in Python
+- [**498**Star][9m] [C++] [kirschju/demovfuscator](https://github.com/kirschju/demovfuscator) A work-in-progress deobfuscator for movfuscated binaries
- [**498**Star][2m] [govolution/betterdefaultpasslist](https://github.com/govolution/betterdefaultpasslist)
-- [**498**Star][25d] [Swift] [google/science-journal-ios](https://github.com/google/science-journal-ios) Use the sensors in your mobile devices to perform science experiments. Science doesn’t just happen in the classroom or lab—tools like Science Journal let you see how the world works with just your phone.
+- [**498**Star][7y] [C] [ghughes/fruitstrap](https://github.com/ghughes/fruitstrap) Install and debug iPhone apps from the command line, without using Xcode
+- [**498**Star][8m] [ernw/hardening](https://github.com/ernw/hardening) Repository of Hardening Guides
+- [**498**Star][2y] [PS] [danielbohannon/invoke-cradlecrafter](https://github.com/danielbohannon/invoke-cradlecrafter) PowerShell Remote Download Cradle Generator & Obfuscator
- [**498**Star][3y] [C] [android-rooting-tools/android_run_root_shell](https://github.com/android-rooting-tools/android_run_root_shell)
-- [**497**Star][9m] [C++] [kirschju/demovfuscator](https://github.com/kirschju/demovfuscator) A work-in-progress deobfuscator for movfuscated binaries
-- [**496**Star][8m] [Py] [tp4a/teleport](https://github.com/tp4a/teleport) Teleport是一款简单易用的堡垒机系统。
+- [**497**Star][8m] [Shell] [stamusnetworks/selks](https://github.com/stamusnetworks/selks) A Suricata based IDS/IPS distro
+- [**497**Star][2y] [C++] [rbei-etas/busmaster](https://github.com/rbei-etas/busmaster) simulate, analyze and test data bus systems such as CAN.
+- [**497**Star][6m] [Visual Basic .NET] [nyan-x-cat/lime-rat](https://github.com/nyan-x-cat/lime-rat) LimeRAT | Simple, yet powerful remote administration tool for Windows (RAT)
+- [**497**Star][29d] [netbiosx/checklists](https://github.com/netbiosx/checklists) Pentesting checklists for various engagements
+- [**497**Star][2m] [C] [m0nad/diamorphine](https://github.com/m0nad/diamorphine) LKM rootkit for Linux Kernels 2.6.x/3.x/4.x (x86 and x86_64)
+- [**497**Star][7m] [ASP] [landgrey/webshell-detect-bypass](https://github.com/landgrey/webshell-detect-bypass) 绕过专业工具检测的Webshell研究文章和免杀的Webshell
+- [**496**Star][24d] [C#] [akiver/csgo-demos-manager](https://github.com/akiver/csgo-demos-manager)
+- [**496**Star][2m] [xairy/vmware-exploitation](https://github.com/xairy/vmware-exploitation) A bunch of links related to VMware escape exploits
- [**496**Star][2y] [C] [triaquae/crazyeye](https://github.com/triaquae/crazyeye) OpenSource IT Automation Software
-- [**496**Star][8m] [Shell] [stamusnetworks/selks](https://github.com/stamusnetworks/selks) A Suricata based IDS/IPS distro
- [**496**Star][2y] [JS] [rptec/squid-pac](https://github.com/rptec/squid-pac) 利用国外VPS搭建多协议代理服务,squid PAC代理服务器,25端口翻墙 ....墙已加高,https网站已失效,普通站点仍可代理..建议使用ssr替代
-- [**496**Star][6m] [Visual Basic] [nyan-x-cat/lime-rat](https://github.com/nyan-x-cat/lime-rat) LimeRAT | Simple, yet powerful remote administration tool for Windows (RAT)
-- [**496**Star][9m] [C] [nowsecure/fsmon](https://github.com/nowsecure/fsmon) monitor filesystem on iOS / OS X / Android / FirefoxOS / Linux
-- [**496**Star][12m] [PLpgSQL] [nologic/idaref](https://github.com/nologic/idaref) IDA Pro Instruction Reference Plugin
-- [**496**Star][20d] [Go] [genuinetools/amicontained](https://github.com/genuinetools/amicontained) Container introspection tool. Find out what container runtime is being used as well as features available.
-- [**496**Star][8m] [ernw/hardening](https://github.com/ernw/hardening) Repository of Hardening Guides
-- [**496**Star][2y] [PowerShell] [danielbohannon/invoke-cradlecrafter](https://github.com/danielbohannon/invoke-cradlecrafter) PowerShell Remote Download Cradle Generator & Obfuscator
-- [**495**Star][22d] [C#] [akiver/csgo-demos-manager](https://github.com/akiver/csgo-demos-manager)
-- [**495**Star][18d] [owasp/wstg](https://github.com/owasp/wstg) The OWASP Web Security Testing Guide includes a "best practice" penetration testing framework which users can implement in their own organizations and a "low level" penetration testing guide that describes techniques for testing most common web application and web service security issues.
-- [**495**Star][18d] [owasp/wstg](https://github.com/OWASP/wstg) The OWASP Web Security Testing Guide includes a "best practice" penetration testing framework which users can implement in their own organizations and a "low level" penetration testing guide that describes techniques for testing most common web application and web service security issues.
-- [**495**Star][1y] [XSLT] [honze-net/nmap-bootstrap-xsl](https://github.com/honze-net/nmap-bootstrap-xsl) A Nmap XSL implementation with Bootstrap.
-- [**494**Star][2m] [Perl 6] [rezasp/joomscan](https://github.com/rezasp/joomscan) OWASP Joomla Vulnerability Scanner Project
-- [**494**Star][26d] [netbiosx/checklists](https://github.com/netbiosx/checklists) Pentesting checklists for various engagements
+- [**496**Star][24d] [C] [r0hi7/binexp](https://github.com/r0hi7/binexp) Linux Binary Exploitation
+- [**496**Star][1y] [PLpgSQL] [nologic/idaref](https://github.com/nologic/idaref) IDA Pro Instruction Reference Plugin
+- [**496**Star][1y] [XSLT] [honze-net/nmap-bootstrap-xsl](https://github.com/honze-net/nmap-bootstrap-xsl) A Nmap XSL implementation with Bootstrap.
+- [**496**Star][5d] [C] [anestisb/vdexextractor](https://github.com/anestisb/vdexextractor) Tool to decompile & extract Android Dex bytecode from Vdex files
+- [**495**Star][9m] [manoelt/50m_ctf_writeup](https://github.com/manoelt/50m_ctf_writeup) $50 Million CTF from Hackerone - Writeup
+- [**495**Star][7m] [Py] [initstring/dirty_sock](https://github.com/initstring/dirty_sock) Linux privilege escalation exploit via snapd (CVE-2019-7304)
+- [**495**Star][1y] [Py] [c0ny1/upload-fuzz-dic-builder](https://github.com/c0ny1/upload-fuzz-dic-builder) 上传漏洞fuzz字典生成脚本
+- [**494**Star][2y] [tengzhangchao/sec-box](https://github.com/tengzhangchao/sec-box) information security Tools Box (信息安全工具以及资源集合)
+- [**494**Star][2m] [PHP] [nzedb/nzedb](https://github.com/nzedb/nzedb) automatically scans usenet, similar to the way web spiders scan the internet
- [**494**Star][2y] [Go] [evilsocket/sg1](https://github.com/evilsocket/sg1) A wanna be swiss army knife for data encryption, exfiltration and covert communication.
-- [**494**Star][3m] [Py] [awslabs/aws-security-benchmark](https://github.com/awslabs/aws-security-benchmark) Open source demos, concept and guidance related to the AWS CIS Foundation framework.
-- [**493**Star][8d] [C] [greenbone/openvas](https://github.com/greenbone/openvas) Open Vulnerability Assessment Scanner
-- [**493**Star][2y] [C++] [rbei-etas/busmaster](https://github.com/rbei-etas/busmaster) BUSMASTER is an Open Source Software tool to simulate, analyze and test data bus systems such as CAN. BUSMASTER was conceptualized, designed and implemented by Robert Bosch Engineering and Business Solutions (RBEI). Presently it is a joint project of RBEI and ETAS GmbH.
-- [**493**Star][5y] [Py] [offensivepython/nscan](https://github.com/offensivepython/nscan) Fast internet-wide scanner
-- [**493**Star][7m] [Py] [initstring/dirty_sock](https://github.com/initstring/dirty_sock) Linux privilege escalation exploit via snapd (CVE-2019-7304)
-- [**492**Star][2m] [JS] [acmesec/pocbox](https://github.com/Acmesec/PoCBox) 赏金猎人的脆弱性测试辅助平台
-- [**492**Star][2y] [tengzhangchao/sec-box](https://github.com/tengzhangchao/sec-box) information security Tools Box (信息安全工具以及资源集合)
-- [**492**Star][2m] [PHP] [nzedb/nzedb](https://github.com/nzedb/nzedb) a fork of nnplus(2011) | NNTP / Usenet / Newsgroup indexer.
-- [**492**Star][2m] [C] [m0nad/diamorphine](https://github.com/m0nad/diamorphine) LKM rootkit for Linux Kernels 2.6.x/3.x/4.x (x86 and x86_64)
-- [**492**Star][7m] [ASP] [landgrey/webshell-detect-bypass](https://github.com/landgrey/webshell-detect-bypass) 绕过专业工具检测的Webshell研究文章和免杀的Webshell
-- [**492**Star][23d] [Go] [cossacklabs/acra](https://github.com/cossacklabs/acra) Database security suite for data-driven apps: database proxy with strong selective encryption, search through encrypted data, SQL injections prevention, intrusion detection, honeypots. Supports client-side and proxy-side encryption. Works for SQL databases and (limited functionality) for NoSQL databases.
-- [**491**Star][2y] [sergey-pronin/awesome-vulnerability-research](https://github.com/sergey-pronin/Awesome-Vulnerability-Research)
-- [**491**Star][7m] [Py] [danigargu/heap-viewer](https://github.com/danigargu/heap-viewer) An IDA Pro plugin to examine the glibc heap, focused on exploit development
-- [**491**Star][1y] [Py] [c0ny1/upload-fuzz-dic-builder](https://github.com/c0ny1/upload-fuzz-dic-builder) 上传漏洞fuzz字典生成脚本
-- [**490**Star][18d] [JS] [sindresorhus/public-ip](https://github.com/sindresorhus/public-ip) Get your public IP address - very fast!
-- [**490**Star][2y] [PowerShell] [powershellmafia/cimsweep](https://github.com/powershellmafia/cimsweep) CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.
-- [**490**Star][4m] [Py] [maddiestone/idapythonembeddedtoolkit](https://github.com/maddiestone/idapythonembeddedtoolkit) a set of script to automate many of the steps associated with statically analyzing, or reverse engineering, the firmware of embedded devices in IDA Pro.
-- [**490**Star][2y] [b-mueller/android_app_security_checklist](https://github.com/b-mueller/android_app_security_checklist) Android App Security Checklist
-- [**489**Star][2y] [C++] [turbo/kpti-poc-collection](https://github.com/turbo/kpti-poc-collection) Meltdown/Spectre PoC src collection.
-- [**489**Star][4m] [PHP] [susers/writeups](https://github.com/susers/writeups) 国内各大CTF赛题及writeup整理
-- [**489**Star][3y] [PowerShell] [secabstraction/powercat](https://github.com/secabstraction/powercat) A PowerShell TCP/IP swiss army knife.
-- [**489**Star][18d] [Py] [scottbez1/splitflap](https://github.com/scottbez1/splitflap) DIY split-flap display
-- [**489**Star][22d] [C] [r0hi7/binexp](https://github.com/r0hi7/binexp) Linux Binary Exploitation
-- [**489**Star][9m] [manoelt/50m_ctf_writeup](https://github.com/manoelt/50m_ctf_writeup) $50 Million CTF from Hackerone - Writeup
+- [**494**Star][5d] [Go] [cossacklabs/acra](https://github.com/cossacklabs/acra) Database security suite. Database proxy with field-level encryption, search through encrypted data, SQL injections prevention, intrusion detection, honeypots. Supports client-side and proxy-side ("transparent") encryption. SQL, NoSQL.
+- [**493**Star][4m] [PHP] [susers/writeups](https://github.com/susers/writeups) 国内各大CTF赛题及writeup整理
+- [**493**Star][2m] [Perl 6] [rezasp/joomscan](https://github.com/rezasp/joomscan) OWASP Joomla Vulnerability Scanner Project
+- [**493**Star][5y] [Py] [offensivepython/nscan](https://github.com/offensivepython/nscan) a fast Network scanner optimized for internet-wide scanning purposes and inspired by Masscan and Zmap.
+- [**493**Star][1m] [C] [hasherezade/demos](https://github.com/hasherezade/demos) Demos of various injection techniques found in malware
+- [**492**Star][2y] [sergey-pronin/awesome-vulnerability-research](https://github.com/sergey-pronin/Awesome-Vulnerability-Research)
+- [**492**Star][7m] [Py] [danigargu/heap-viewer](https://github.com/danigargu/heap-viewer) An IDA Pro plugin to examine the glibc heap, focused on exploit development
+- [**491**Star][9d] [nahamsec/resources-for-beginner-bug-bounty-hunters](https://github.com/nahamsec/resources-for-beginner-bug-bounty-hunters) A list of resources for those interested in getting started in bug bounties
+- [**491**Star][11m] [C] [yangyangwithgnu/bypass_disablefunc_via_ld_preload](https://github.com/yangyangwithgnu/bypass_disablefunc_via_ld_preload) bypass disable_functions via LD_PRELOA (no need /usr/sbin/sendmail)
+- [**491**Star][15d] [Py] [wetw0rk/sickle](https://github.com/wetw0rk/sickle) Payload development tool
+- [**491**Star][20d] [Py] [scottbez1/splitflap](https://github.com/scottbez1/splitflap) DIY split-flap display
+- [**491**Star][2y] [PS] [powershellmafia/cimsweep](https://github.com/powershellmafia/cimsweep) CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.
+- [**491**Star][4m] [Py] [maddiestone/idapythonembeddedtoolkit](https://github.com/maddiestone/idapythonembeddedtoolkit) a set of script to automate many of the steps associated with statically analyzing, or reverse engineering, the firmware of embedded devices in IDA Pro.
+- [**491**Star][14d] [JS] [iddoeldor/frida-snippets](https://github.com/iddoeldor/frida-snippets) Hand-crafted Frida examples
+- [**490**Star][16d] [Py] [typeerror/domained](https://github.com/TypeError/domained) Multi Tool Subdomain Enumeration
+- [**490**Star][2y] [C++] [turbo/kpti-poc-collection](https://github.com/turbo/kpti-poc-collection) Meltdown/Spectre PoC src collection.
+- [**490**Star][27d] [Shell] [trimstray/multitor](https://github.com/trimstray/multitor) Shell脚本, 创建多个Tor实例, 并使用HAProxy实现负载均衡
+- [**490**Star][2m] [Ruby] [kaich/codeobscure](https://github.com/kaich/codeobscure) code obscure for object-c project. 方便强大的OC工程代码自动混淆工具
+- [**489**Star][6y] [C] [bitly/simplehttp](https://github.com/bitly/simplehttp) a family of libraries and daemons for building scalable web infrastructure
+- [**489**Star][3m] [Py] [yanxiu0614/subdomain3](https://github.com/yanxiu0614/subdomain3) A new generation of tool for discovering subdomains( ip , cdn and so on)
+- [**489**Star][26d] [C] [tihmstar/tsschecker](https://github.com/tihmstar/tsschecker) a powerfull tool to check tss signing status of various devices and firmwares
+- [**489**Star][3y] [PS] [secabstraction/powercat](https://github.com/secabstraction/powercat) A PowerShell TCP/IP swiss army knife that works with Netcat & Ncat
+- [**489**Star][1y] [C] [mikeryan/crackle](https://github.com/mikeryan/crackle) Crack and decrypt BLE encryption
- [**489**Star][1y] [Shell] [leonteale/pentestpackage](https://github.com/leonteale/pentestpackage) a package of Pentest scripts I have made or commonly use
-- [**488**Star][15d] [xrkk/awesome-ida](https://github.com/xrkk/awesome-ida) Awesome IDA Pro resources collections: open source repos and blog posts. For Github Repos, extra info included: Star, Last Commit Time, Main Programming Language. For blog post, title/link and post time is included. Update Regularly!
-- [**488**Star][13d] [Py] [wetw0rk/sickle](https://github.com/wetw0rk/sickle) Payload development tool
-- [**488**Star][25d] [Shell] [trimstray/multitor](https://github.com/trimstray/multitor) Shell脚本, 创建多个Tor实例, 并使用HAProxy实现负载均衡
-- [**488**Star][23d] [PowerShell] [stefanscherer/packer-windows](https://github.com/stefanscherer/packer-windows) Windows Templates for Packer: Win10, Server 2016, 1709, 1803, 1809, 2019, 1903, Insider with Docker
-- [**488**Star][1y] [C] [mikeryan/crackle](https://github.com/mikeryan/crackle) Crack and decrypt BLE encryption
-- [**488**Star][29d] [C] [hasherezade/demos](https://github.com/hasherezade/demos) Demos of various injection techniques found in malware
-- [**488**Star][2m] [Go] [gen2brain/cam2ip](https://github.com/gen2brain/cam2ip) 将任何网络摄像头转换为IP 摄像机
-- [**488**Star][1y] [Py] [alexhude/uemu](https://github.com/alexhude/uemu) Tiny cute emulator plugin for IDA based on unicorn.
-- [**487**Star][6y] [C] [bitly/simplehttp](https://github.com/bitly/simplehttp) a family of libraries and daemons for building scalable web infrastructure
-- [**487**Star][2m] [xairy/vmware-exploitation](https://github.com/xairy/vmware-exploitation) A bunch of links related to VMware escape exploits
-- [**487**Star][7d] [Py] [theresafewconors/sooty](https://github.com/theresafewconors/sooty) The SOC Analysts all-in-one CLI tool to automate and speed up workflow.
+- [**489**Star][15d] [C] [jiayy/android_vuln_poc-exp](https://github.com/jiayy/android_vuln_poc-exp) This project contains pocs and exploits for vulneribilities I found (mostly)
+- [**489**Star][10m] [Py] [insecurityofthings/jackit](https://github.com/insecurityofthings/jackit) Exploit Code for Mousejack
+- [**489**Star][2y] [b-mueller/android_app_security_checklist](https://github.com/b-mueller/android_app_security_checklist) Android App Security Checklist
+- [**489**Star][10d] [Go] [arminc/clair-scanner](https://github.com/arminc/clair-scanner) Docker containers vulnerability scan
+- [**489**Star][4d] [Py] [alexhude/uemu](https://github.com/alexhude/uemu) Tiny cute emulator plugin for IDA based on unicorn.
+- [**488**Star][2d] [Py] [trailofbits/deepstate](https://github.com/trailofbits/deepstate) A unit test-like interface for fuzzing and symbolic execution
+- [**488**Star][5y] [Py] [infodox/python-pty-shells](https://github.com/infodox/python-pty-shells) Python PTY backdoors - full PTY or nothing!
+- [**488**Star][2m] [Go] [gen2brain/cam2ip](https://github.com/gen2brain/cam2ip) Turn any webcam into an IP camera
+- [**488**Star][1y] [PS] [dafthack/domainpasswordspray](https://github.com/dafthack/domainpasswordspray) DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!
+- [**488**Star][1y] [Py] [attify/firmware-analysis-toolkit](https://github.com/attify/firmware-analysis-toolkit) Toolkit to emulate firmware and analyse it for security vulnerabilities
+- [**487**Star][10m] [Ruby] [sidaf/homebrew-pentest](https://github.com/sidaf/homebrew-pentest) a Tap containing some Homebrew formulas consisting of penetration testing related tools.
+- [**487**Star][7d] [Go] [psiphon-labs/psiphon-tunnel-core](https://github.com/psiphon-labs/psiphon-tunnel-core) Psiphon client and server components implemented in Go. These components provides core tunnel functionality, handling all aspects of evading blocking and relaying traffic through Psiphon.
+- [**487**Star][1y] [C] [nfc-tools/mfcuk](https://github.com/nfc-tools/mfcuk) MiFare Classic Universal toolKit (MFCUK)
- [**487**Star][4y] [JS] [mandatoryprogrammer/sonar.js](https://github.com/mandatoryprogrammer/sonar.js) 通过 WebRTC IP 枚举,结合 WebSockets 和外部资源指纹,来识别内网主机的漏洞并发动攻击的框架
-- [**487**Star][5y] [Py] [infodox/python-pty-shells](https://github.com/infodox/python-pty-shells) Python PTY backdoors - full PTY or nothing!
-- [**486**Star][14d] [Py] [typeerror/domained](https://github.com/TypeError/domained) Multi Tool Subdomain Enumeration
-- [**486**Star][11m] [C] [yangyangwithgnu/bypass_disablefunc_via_ld_preload](https://github.com/yangyangwithgnu/bypass_disablefunc_via_ld_preload) bypass disable_functions via LD_PRELOA (no need /usr/sbin/sendmail)
-- [**486**Star][7d] [Py] [trailofbits/deepstate](https://github.com/trailofbits/deepstate) A unit test-like interface for fuzzing and symbolic execution
+- [**487**Star][18d] [Rust] [kpcyrd/sn0int](https://github.com/kpcyrd/sn0int) Semi-automatic OSINT framework and package manager
+- [**487**Star][13d] [Py] [ctxis/cape](https://github.com/ctxis/cape) Malware Configuration And Payload Extraction
+- [**487**Star][6m] [PHP] [cfreal/exploits](https://github.com/cfreal/exploits) Some of my exploits.
+- [**486**Star][5m] [PHP] [wonderkun/ctf_web](https://github.com/wonderkun/ctf_web) a project aim to collect CTF web practices .
- [**486**Star][1y] [Py] [shawarkhanethicalhacker/brutexss](https://github.com/shawarkhanethicalhacker/brutexss) BruteXSS - Cross-Site Scripting Bruteforcer
-- [**486**Star][7d] [Go] [psiphon-labs/psiphon-tunnel-core](https://github.com/psiphon-labs/psiphon-tunnel-core) Psiphon client and server components implemented in Go. These components provides core tunnel functionality, handling all aspects of evading blocking and relaying traffic through Psiphon.
-- [**486**Star][1y] [C] [nfc-tools/mfcuk](https://github.com/nfc-tools/mfcuk) MiFare Classic Universal toolKit (MFCUK)
+- [**486**Star][2y] [Py] [khalilbijjou/wafninja](https://github.com/khalilbijjou/wafninja) WAFNinja is a tool which contains two functions to attack Web Application Firewalls.
- [**486**Star][11m] [Go] [evanmiller/hecate](https://github.com/evanmiller/hecate) The Hex Editor From Hell
-- [**486**Star][1y] [PowerShell] [dafthack/domainpasswordspray](https://github.com/dafthack/domainpasswordspray) DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!
-- [**485**Star][2y] [Py] [xyuanmu/xx-mini](https://github.com/xyuanmu/xx-mini)
-- [**485**Star][2y] [Py] [khalilbijjou/wafninja](https://github.com/khalilbijjou/wafninja) WAFNinja is a tool which contains two functions to attack Web Application Firewalls.
-- [**485**Star][13d] [C] [jiayy/android_vuln_poc-exp](https://github.com/jiayy/android_vuln_poc-exp) This project contains pocs and exploits for vulneribilities I found (mostly)
-- [**485**Star][10m] [Py] [insecurityofthings/jackit](https://github.com/insecurityofthings/jackit) Exploit Code for Mousejack
+- [**485**Star][2m] [Py] [fcavallarin/htcap](https://github.com/fcavallarin/htcap) htcap is a web application scanner able to crawl single page application (SPA) recursively by intercepting ajax calls and DOM changes.
+- [**485**Star][10m] [C] [theofficialflow/nonpdrm](https://github.com/theofficialflow/nonpdrm) A plugin that allows you to bypass DRM protection on any PS Vita content
+- [**485**Star][1m] [radareorg/awesome-radare2](https://github.com/radareorg/awesome-radare2) A curated list of awesome projects, articles and the other materials powered by Radare2
+- [**485**Star][10d] [C] [projectacrn/acrn-hypervisor](https://github.com/projectacrn/acrn-hypervisor) Project ACRN hypervisor
+- [**485**Star][1y] [lmy375/awesome-vmp](https://github.com/lmy375/awesome-vmp) VM analysis materials
+- [**485**Star][1m] [hugetiny/awesome-vpn](https://github.com/hugetiny/awesome-vpn) A curated list of awesome free VPNs and proxies.免费的代理,科学上网,翻墙,梯子大集合
- [**484**Star][2y] [Py] [zdresearch/owasp-zsc](https://github.com/zdresearch/OWASP-ZSC) Shellcode/Obfuscate Code Generator
-- [**484**Star][6m] [PHP] [cfreal/exploits](https://github.com/cfreal/exploits) Some of my exploits.
-- [**484**Star][8d] [Go] [arminc/clair-scanner](https://github.com/arminc/clair-scanner) Docker containers vulnerability scan
-- [**484**Star][1y] [C] [anestisb/vdexextractor](https://github.com/anestisb/vdexextractor) Tool to decompile & extract Android Dex bytecode from Vdex files
-- [**483**Star][10m] [C] [theofficialflow/nonpdrm](https://github.com/theofficialflow/nonpdrm) A plugin that allows you to bypass DRM protection on any PS Vita content
-- [**483**Star][10m] [Ruby] [sidaf/homebrew-pentest](https://github.com/sidaf/homebrew-pentest) Homebrew Tap - Pen Test Tools
-- [**483**Star][1m] [radareorg/awesome-radare2](https://github.com/radareorg/awesome-radare2) A curated list of awesome projects, articles and the other materials powered by Radare2
-- [**483**Star][7m] [Py] [netflix-skunkworks/diffy](https://github.com/netflix-skunkworks/diffy) Diffy is a triage tool used during cloud-centric security incidents, to help digital forensics and incident response (DFIR) teams quickly identify suspicious hosts on which to focus their response.
-- [**483**Star][2m] [Go] [gorilla/csrf](https://github.com/gorilla/csrf) gorilla/csrf provides Cross Site Request Forgery (CSRF) prevention middleware for Go web applications & services
+- [**484**Star][2y] [Py] [xyuanmu/xx-mini](https://github.com/xyuanmu/xx-mini) XX-Net 精简版
+- [**484**Star][8d] [Py] [netflix-skunkworks/diffy](https://github.com/netflix-skunkworks/diffy) Diffy is a triage tool used during cloud-centric security incidents, to help digital forensics and incident response (DFIR) teams quickly identify suspicious hosts on which to focus their response.
+- [**484**Star][2m] [Go] [gorilla/csrf](https://github.com/gorilla/csrf) provides CSRF prevention middleware for Go web applications & services
+- [**483**Star][15d] [C++] [ce-programming/cemu](https://github.com/CE-Programming/CEmu) Third-party TI-84 Plus CE / TI-83 Premium CE emulator, focused on developer features
- [**483**Star][3y] [Py] [erevus-cn/pocscan](https://github.com/erevus-cn/pocscan) Will to be a niubility scan-framework
-- [**483**Star][1y] [Py] [attify/firmware-analysis-toolkit](https://github.com/attify/firmware-analysis-toolkit) Toolkit to emulate firmware and analyse it for security vulnerabilities
-- [**482**Star][2m] [Py] [fcavallarin/htcap](https://github.com/fcavallarin/htcap) htcap is a web application scanner able to crawl single page application (SPA) recursively by intercepting ajax calls and DOM changes.
-- [**482**Star][5m] [PHP] [wonderkun/ctf_web](https://github.com/wonderkun/ctf_web) a project aim to collect CTF web practices .
+- [**483**Star][1y] [JS] [emilbayes/secure-password](https://github.com/emilbayes/secure-password) Making Password storage safer for all
+- [**483**Star][2y] [Py] [armissecurity/blueborne](https://github.com/armissecurity/blueborne) PoC scripts demonstrating the BlueBorne vulnerabilities
+- [**482**Star][28d] [PHP] [zhuzhichao/ip-location-zh](https://github.com/zhuzhichao/ip-location-zh) 获取 IP 地址的真实地理位置
+- [**482**Star][9m] [Py] [r35tart/rw_password](https://github.com/r35tart/rw_password) 此项目用来提取收集以往泄露的密码中符合条件的强弱密码
- [**482**Star][3m] [C] [microsoft/symcrypt](https://github.com/microsoft/symcrypt) Cryptographic library
+- [**482**Star][7d] [Py] [iti/ics-security-tools](https://github.com/iti/ics-security-tools) Tools, tips, tricks, and more for exploring ICS Security.
+- [**482**Star][2y] [PS] [gofetchad/gofetch](https://github.com/gofetchad/gofetch) automatically exercise an attack plan generated by the BloodHound application.
+- [**482**Star][11m] [Shell] [craigz28/firmwalker](https://github.com/craigz28/firmwalker) A simple bash script for searching the extracted or mounted firmware file system.
+- [**482**Star][1y] [Java] [continuumsecurity/bdd-security](https://github.com/continuumsecurity/bdd-security) a security testing framework that uses Behaviour Driven Development concepts to create self-verifying security specifications.
+- [**481**Star][1m] [Py] [yassineaboukir/sublert](https://github.com/yassineaboukir/sublert) Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific organizations and issued TLS/SSL certificate.
- [**481**Star][2y] [C] [realjtg/meltdown](https://github.com/realjtg/meltdown) Meltdown PoC for reading passwords from Google Chrome.
+- [**481**Star][8m] [C] [nongiach/sudo_inject](https://github.com/nongiach/sudo_inject) [Linux] Two Privilege Escalation techniques abusing sudo token
- [**481**Star][4m] [C] [limpkin/mooltipass](https://github.com/limpkin/mooltipass) Github repository dedicated to the mooltipass project
-- [**481**Star][1m] [hugetiny/awesome-vpn](https://github.com/hugetiny/awesome-vpn) A curated list of awesome free VPNs and proxies.免费的代理,科学上网,翻墙,梯子大集合
-- [**481**Star][1y] [JS] [emilbayes/secure-password](https://github.com/emilbayes/secure-password) Making Password storage safer for all
-- [**481**Star][2y] [Py] [armissecurity/blueborne](https://github.com/armissecurity/blueborne) PoC scripts demonstrating the BlueBorne vulnerabilities
-- [**480**Star][13d] [C++] [ce-programming/cemu](https://github.com/CE-Programming/CEmu) Third-party TI-84 Plus CE / TI-83 Premium CE emulator, focused on developer features
+- [**480**Star][2m] [Java] [tornaco/x-apm](https://github.com/tornaco/x-apm) 应用管理 Xposed
- [**480**Star][3y] [Py] [lgandx/poc](https://github.com/lgandx/poc) Various PoCs
-- [**480**Star][16d] [Rust] [kpcyrd/sn0int](https://github.com/kpcyrd/sn0int) Semi-automatic OSINT framework and package manager
-- [**480**Star][2y] [PowerShell] [gofetchad/gofetch](https://github.com/gofetchad/gofetch) GoFetch is a tool to automatically exercise an attack plan generated by the BloodHound application.
-- [**480**Star][11m] [Shell] [craigz28/firmwalker](https://github.com/craigz28/firmwalker) Script for searching the extracted firmware file system for goodies!
-- [**480**Star][1y] [Java] [continuumsecurity/bdd-security](https://github.com/continuumsecurity/bdd-security) BDD Automated Security Tests for Web Applications
+- [**480**Star][2d] [Java] [joychou93/java-sec-code](https://github.com/joychou93/java-sec-code) Java Web Common Vulnerabilities and Security Code.
+- [**480**Star][1y] [Swift] [icepa/icepa](https://github.com/icepa/icepa) iOS system-wide VPN based Tor client
+- [**480**Star][2m] [C#] [chmorgan/sharppcap](https://github.com/chmorgan/sharppcap) Official repository - Fully managed, cross platform (Windows, Mac, Linux) .NET library for capturing packets
+- [**480**Star][4d] [Batchfile] [chef-koch/regtweaks](https://github.com/chef-koch/regtweaks) Windows Registry Tweaks (Win 7 - Win 10)
- [**479**Star][3y] [JS] [vincentchanx/shadowsocks-over-websocket](https://github.com/vincentchanx/shadowsocks-over-websocket) 免费使用 Heroku 部署 shadowsocks
-- [**479**Star][1y] [lmy375/awesome-vmp](https://github.com/lmy375/awesome-vmp) VM analysis materials
-- [**479**Star][1y] [Swift] [icepa/icepa](https://github.com/icepa/icepa) iOS system-wide VPN based Tor client
-- [**479**Star][7d] [Batchfile] [chef-koch/regtweaks](https://github.com/chef-koch/regtweaks) Windows Registry Tweaks (Win 7 - Win 10)
+- [**479**Star][8m] [Java] [chengdedeng/waf](https://github.com/chengdedeng/waf)
+- [**479**Star][2y] [Objective-C++] [bishopfox/bfinject](https://github.com/bishopfox/bfinject) Dylib injection for iOS 11.0 - 11.1.2 with LiberiOS and Electra jailbreaks
+- [**479**Star][3m] [Py] [bashfuscator/bashfuscator](https://github.com/bashfuscator/bashfuscator) A fully configurable and extendable Bash obfuscation framework. This tool is intended to help both red team and blue team.
+- [**479**Star][1m] [Py] [aoii103/darknet_chinesetrading](https://github.com/aoii103/darknet_chinesetrading) Darknet Chinese Market Trading Crawl and Monitor
- [**478**Star][2m] [C++] [opengenus/quark](https://github.com/opengenus/quark) Stay happy while offline | World's first offline search engine.
+- [**478**Star][8m] [Dockerfile] [mikesplain/openvas-docker](https://github.com/mikesplain/openvas-docker) A Docker container for Openvas
- [**478**Star][1y] [JS] [koto/xsschef](https://github.com/koto/xsschef) Chrome extension Exploitation Framework
-- [**478**Star][12d] [JS] [iddoeldor/frida-snippets](https://github.com/iddoeldor/frida-snippets) Hand-crafted Frida examples
-- [**478**Star][2m] [C#] [chmorgan/sharppcap](https://github.com/chmorgan/sharppcap) Official repository - Fully managed, cross platform (Windows, Mac, Linux) .NET library for capturing packets
-- [**478**Star][2y] [Objective-C++] [bishopfox/bfinject](https://github.com/bishopfox/bfinject) Dylib injection for iOS 11.0 - 11.1.2 with LiberiOS and Electra jailbreaks
-- [**477**Star][7d] [nahamsec/resources-for-beginner-bug-bounty-hunters](https://github.com/nahamsec/resources-for-beginner-bug-bounty-hunters) A list of resources for those interested in getting started in bug bounties
-- [**477**Star][8m] [C] [nongiach/sudo_inject](https://github.com/nongiach/sudo_inject) [Linux] Two Privilege Escalation techniques abusing sudo token
-- [**477**Star][1m] [Java] [joychou93/java-sec-code](https://github.com/joychou93/java-sec-code) Java common vulnerabilities and security code.
-- [**477**Star][8m] [Java] [chengdedeng/waf](https://github.com/chengdedeng/waf)
+- [**477**Star][1y] [C++] [tandasat/ddimon](https://github.com/tandasat/ddimon) Monitoring and controlling kernel API calls with stealth hook using EPT
+- [**477**Star][2y] [Py] [pjlantz/droidbox](https://github.com/pjlantz/droidbox) Dynamic analysis of Android apps
+- [**477**Star][5m] [JS] [ehrishirajsharma/swiftnessx](https://github.com/ehrishirajsharma/swiftnessx) A cross-platform note-taking & target-tracking app for penetration testers.
- [**476**Star][1y] [Go] [yinqiwen/gsnova](https://github.com/yinqiwen/gsnova) Private proxy solution & network troubleshooting tool.
-- [**476**Star][8m] [Dockerfile] [mikesplain/openvas-docker](https://github.com/mikesplain/openvas-docker) A Docker container for Openvas
-- [**476**Star][2m] [Py] [iti/ics-security-tools](https://github.com/iti/ics-security-tools) Tools, tips, tricks, and more for exploring ICS Security.
-- [**475**Star][1m] [Py] [yassineaboukir/sublert](https://github.com/yassineaboukir/sublert) Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific organizations and issued TLS/SSL certificate.
-- [**475**Star][1m] [Java] [wagiro/burpbounty](https://github.com/wagiro/burpbounty) Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through a very intuitive graphical interface.
-- [**475**Star][2m] [Java] [tornaco/x-apm](https://github.com/tornaco/x-apm) 应用管理 Xposed
+- [**476**Star][4m] [Py] [xillwillx/skiptracer](https://github.com/xillwillx/skiptracer) OSINT python webscaping framework
+- [**476**Star][1m] [xiangpasama/jdsrc-small-classroom](https://github.com/xiangpasama/jdsrc-small-classroom) 京东SRC小课堂系列文章
+- [**476**Star][1m] [Java] [wagiro/burpbounty](https://github.com/wagiro/burpbounty) Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through a very intuitive graphical interface.
+- [**476**Star][3y] [Lua] [viruscamp/luadec](https://github.com/viruscamp/luadec) Lua Decompiler for lua 5.1 , 5.2 and 5.3
+- [**476**Star][1y] [ksluckow/awesome-symbolic-execution](https://github.com/ksluckow/awesome-symbolic-execution) A curated list of awesome symbolic execution resources including essential research papers, lectures, videos, and tools.
+- [**475**Star][5d] [Py] [hunters-forge/mordor](https://github.com/hunters-forge/mordor) Re-play Adversarial Techniques
+- [**475**Star][6y] [Ruby] [zed-0xff/zsteg](https://github.com/zed-0xff/zsteg) detect stegano-hidden data in PNG & BMP
- [**475**Star][2y] [C#] [tlaster/yourav](https://github.com/tlaster/yourav) 宇宙级最轻量杀毒软件
-- [**475**Star][1y] [C++] [tandasat/ddimon](https://github.com/tandasat/ddimon) Monitoring and controlling kernel API calls with stealth hook using EPT
-- [**475**Star][2y] [Py] [pjlantz/droidbox](https://github.com/pjlantz/droidbox) Dynamic analysis of Android apps
+- [**475**Star][2y] [Ruby] [ring0lab/catphish](https://github.com/ring0lab/catphish) 用于网络钓鱼及企业间谍活动。Ruby编写
- [**475**Star][1y] [C] [nanshihui/scan-t](https://github.com/nanshihui/scan-t) a new crawler based on python with more function including Network fingerprint search
-- [**475**Star][5m] [JS] [ehrishirajsharma/swiftnessx](https://github.com/ehrishirajsharma/swiftnessx) A cross-platform note-taking & target-tracking app for penetration testers.
+- [**475**Star][2y] [C++] [jessek/hashdeep](https://github.com/jessek/hashdeep) md5deep, a set of cross-platform tools to compute hashes, or message digests, for any number of files while optionally recursively digging through the directory structure
- [**474**Star][3y] [CoffeeScript] [rastapasta/pokemon-go-mitm](https://github.com/rastapasta/pokemon-go-mitm)
-- [**474**Star][3y] [Lua] [viruscamp/luadec](https://github.com/viruscamp/luadec) Lua Decompiler for lua 5.1 , 5.2 and 5.3
-- [**474**Star][2y] [Ruby] [ring0lab/catphish](https://github.com/ring0lab/catphish) 用于网络钓鱼及企业间谍活动。Ruby编写
-- [**474**Star][8m] [Py] [r35tart/rw_password](https://github.com/r35tart/rw_password) 此项目用来提取收集以往泄露的密码中符合条件的强弱密码
+- [**474**Star][3m] [Shell] [staz0t/hashcatch](https://github.com/staz0t/hashcatch) Capture handshakes of nearby WiFi networks automatically
- [**474**Star][3y] [Py] [4w4k3/beelogger](https://github.com/4w4k3/beelogger) Generate Gmail Emailing Keyloggers to Windows.
-- [**473**Star][6y] [Ruby] [zed-0xff/zsteg](https://github.com/zed-0xff/zsteg) detect stegano-hidden data in PNG & BMP
-- [**473**Star][4m] [Py] [xillwillx/skiptracer](https://github.com/xillwillx/skiptracer) OSINT python webscaping framework
-- [**473**Star][3m] [Shell] [staz0t/hashcatch](https://github.com/staz0t/hashcatch) Capture handshakes of nearby WiFi networks automatically
-- [**473**Star][29d] [JS] [lyxhh/lxhtoolhttpdecrypt](https://github.com/lyxhh/lxhtoolhttpdecrypt) Simple Android/iOS protocol analysis and utilization tool
-- [**473**Star][1m] [Py] [aoii103/darknet_chinesetrading](https://github.com/aoii103/darknet_chinesetrading)
-- [**472**Star][1y] [ksluckow/awesome-symbolic-execution](https://github.com/ksluckow/awesome-symbolic-execution) A curated list of awesome symbolic execution resources including essential research papers, lectures, videos, and tools.
-- [**472**Star][3m] [Py] [bashfuscator/bashfuscator](https://github.com/bashfuscator/bashfuscator) A fully configurable and extendable Bash obfuscation framework. This tool is intended to help both red team and blue team.
-- [**472**Star][2y] [Ruby] [0xsauby/yasuo](https://github.com/0xsauby/yasuo) ruby 脚本,扫描网络中存在漏洞的第三方 web app
-- [**471**Star][2y] [C++] [jessek/hashdeep](https://github.com/jessek/hashdeep)
-- [**471**Star][8m] [Java] [alpha1e0/pentestdb](https://github.com/alpha1e0/pentestdb) WEB渗透测试数据库
-- [**470**Star][14d] [C] [tklengyel/drakvuf](https://github.com/tklengyel/drakvuf) DRAKVUF Black-box Binary Analysis
-- [**470**Star][2m] [Go] [square/certigo](https://github.com/square/certigo) A utility to examine and validate certificates in a variety of formats
-- [**470**Star][9m] [Py] [aker-gateway/aker](https://github.com/aker-gateway/aker) SSH bastion/jump host/jumpserver
+- [**473**Star][2m] [C#] [rasta-mouse/watson](https://github.com/rasta-mouse/watson) Enumerate missing KBs and suggest exploits for useful Privilege Escalation vulnerabilities
+- [**473**Star][1m] [JS] [lyxhh/lxhtoolhttpdecrypt](https://github.com/lyxhh/lxhtoolhttpdecrypt) Simple Android/iOS protocol analysis and utilization tool
+- [**473**Star][2y] [Ruby] [0xsauby/yasuo](https://github.com/0xsauby/yasuo) ruby 脚本,扫描网络中存在漏洞的第三方 web app
+- [**472**Star][9d] [C] [tklengyel/drakvuf](https://github.com/tklengyel/drakvuf) DRAKVUF Black-box Binary Analysis
+- [**472**Star][26d] [pixelcyber/thor](https://github.com/pixelcyber/thor) HTTP Sniffer/Capture on iOS for Network Debug & Inspect.
+- [**472**Star][8m] [Java] [alpha1e0/pentestdb](https://github.com/alpha1e0/pentestdb) web pentest database
+- [**471**Star][12m] [itrump/ssfree](https://github.com/itrump/ssfree) provide shadowsocks free tutorial and free account
+- [**471**Star][1m] [TS] [mitre-attack/attack-navigator](https://github.com/mitre-attack/attack-navigator) Web app that provides basic navigation and annotation of ATT&CK matrices
+- [**471**Star][6m] [palantir/osquery-configuration](https://github.com/palantir/osquery-configuration) 使用 osquery 做事件检测和响应
+- [**471**Star][3m] [Py] [olafhartong/threathunting](https://github.com/olafhartong/threathunting) A Splunk app mapped to MITRE ATT&CK to guide your threat hunts
+- [**471**Star][9m] [Py] [aker-gateway/aker](https://github.com/aker-gateway/aker) SSH bastion/jump host/jumpserver
+- [**470**Star][11m] [Py] [wapiflapi/villoc](https://github.com/wapiflapi/villoc) Visualization of heap operations.
+- [**470**Star][8m] [C++] [glmcdona/process-dump](https://github.com/glmcdona/process-dump) Windows tool for dumping malware PE files from memory back to disk for analysis.
+- [**470**Star][5d] [JS] [codemanki/cloudscraper](https://github.com/codemanki/cloudscraper) Node.js library to bypass cloudflare's anti-ddos page
+- [**470**Star][1m] [Py] [bit4woo/teemo](https://github.com/bit4woo/teemo) A Domain Name & Email Address Collection Tool
+- [**469**Star][9d] [Py] [fportantier/habu](https://github.com/fportantier/habu) Hacking Toolkit
- [**469**Star][5m] [Solidity] [provable-things/ethereum-api](https://github.com/provable-things/ethereum-api) Provable API for Ethereum smart contracts
-- [**469**Star][29d] [xiangpasama/jdsrc-small-classroom](https://github.com/xiangpasama/jdsrc-small-classroom) 京东SRC小课堂系列文章
-- [**469**Star][11m] [Py] [wapiflapi/villoc](https://github.com/wapiflapi/villoc) Visualization of heap operations.
+- [**469**Star][2m] [Go] [square/certigo](https://github.com/square/certigo) A utility to examine and validate certificates in a variety of formats
+- [**469**Star][2m] [Py] [netzob/netzob](https://github.com/netzob/netzob) Protocol Reverse Engineering, Modeling and Fuzzing
+- [**469**Star][3y] [C] [lucyoa/kernel-exploits](https://github.com/lucyoa/kernel-exploits)
+- [**469**Star][11m] [PHP] [l3m0n/pentest_tools](https://github.com/l3m0n/pentest_tools) collection of pentest tools
+- [**469**Star][2d] [C] [jayddee/cpuminer-opt](https://github.com/jayddee/cpuminer-opt) Optimized multi algo CPU miner
+- [**469**Star][1y] [hack-with-github/powerful-plugins](https://github.com/hack-with-github/powerful-plugins) Powerful plugins and add-ons for hackers
+- [**469**Star][3y] [Shell] [g0tmi1k/os-scripts](https://github.com/g0tmi1k/os-scripts) Personal Collection of Operating Systems Scripts
+- [**469**Star][8m] [C++] [everettjf/machoexplorer](https://github.com/everettjf/machoexplorer) [WIP] Explore MachO File on macOS and Windows
- [**469**Star][4y] [Ruby] [crossref/pdfextract](https://github.com/crossref/pdfextract) MOVED TO
+- [**469**Star][7d] [Go] [arvanaghi/checkplease](https://github.com/arvanaghi/checkplease) Sandbox evasion modules written in PowerShell, Python, Go, Ruby, C, C#, Perl, and Rust.
+- [**469**Star][4d] [Py] [aidaho12/haproxy-wi](https://github.com/aidaho12/haproxy-wi) Web interface for managing Haproxy servers
+- [**469**Star][2y] [adi0x90/attifyos](https://github.com/adi0x90/attifyos) IoT 安全评估/渗透测试工具包
+- [**468**Star][10d] [C] [skeeto/enchive](https://github.com/skeeto/enchive) Encrypted personal archives
- [**468**Star][2y] [Smali] [sensepost/kwetza](https://github.com/sensepost/kwetza) Python 脚本,将 Meterpreter payload 注入 Andorid App
+- [**468**Star][9d] [Py] [fportantier/habu](https://github.com/fportantier/habu) Hacking Toolkit to teach (and learn) some concepts about Python and Network Hacking.
- [**468**Star][4y] [JS] [philbooth/complexity-report](https://github.com/philbooth/complexity-report) [UNMAINTAINED] Software complexity analysis for JavaScript projects
-- [**468**Star][8m] [C++] [everettjf/machoexplorer](https://github.com/everettjf/machoexplorer) [WIP] Explore MachO File on macOS and Windows
+- [**468**Star][2d] [C] [libreswan/libreswan](https://github.com/libreswan/libreswan) an Internet Key Exchange (IKE) implementation for Linux.
+- [**468**Star][2y] [C] [leurak/memz](https://github.com/leurak/memz) A trojan made for Danooct1's User Made Malware Series.
+- [**468**Star][7y] [Shell] [kosborn/p2p-adb](https://github.com/kosborn/p2p-adb) Phone to Phone Android Debug Bridge - A project for "debugging" phones... from other phones.
- [**468**Star][4y] [Py] [dxa4481/wpa2-halfhandshake-crack](https://github.com/dxa4481/wpa2-halfhandshake-crack) This is a POC to show it is possible to capture enough of a handshake with a user from a fake AP to crack a WPA2 network without knowing the passphrase of the actual AP.
+- [**468**Star][2m] [Py] [coleifer/micawber](https://github.com/coleifer/micawber) a small library for extracting rich content from urls
- [**467**Star][4y] [Py] [einstein-/decompiler](https://github.com/EiNSTeiN-/decompiler) A decompiler with multiple backend support, written in Python. Works with IDA and Capstone.
-- [**467**Star][6m] [palantir/osquery-configuration](https://github.com/palantir/osquery-configuration) 使用 osquery 做事件检测和响应
-- [**467**Star][3m] [Py] [olafhartong/threathunting](https://github.com/olafhartong/threathunting) A Splunk app mapped to MITRE ATT&CK to guide your threat hunts
-- [**467**Star][2m] [Py] [netzob/netzob](https://github.com/netzob/netzob) Protocol Reverse Engineering, Modeling and Fuzzing
-- [**467**Star][11m] [PHP] [l3m0n/pentest_tools](https://github.com/l3m0n/pentest_tools) 收集一些小型实用的工具
-- [**467**Star][3y] [Shell] [g0tmi1k/os-scripts](https://github.com/g0tmi1k/os-scripts) Personal Collection of Operating Systems Scripts
-- [**467**Star][2m] [Py] [coleifer/micawber](https://github.com/coleifer/micawber) a small library for extracting rich content from urls
-- [**467**Star][2y] [adi0x90/attifyos](https://github.com/adi0x90/attifyos) IoT 安全评估/渗透测试工具包
+- [**467**Star][3m] [Java] [strazzere/anti-emulator](https://github.com/strazzere/anti-emulator) Android Anti-Emulator
+- [**467**Star][1y] [C] [laruence/taint](https://github.com/laruence/taint) Taint is a PHP extension, used for detecting XSS codes
+- [**467**Star][5y] [Perl] [jbittel/httpry](https://github.com/jbittel/httpry) HTTP logging and information retrieval tool
- [**466**Star][3m] [miscreant/meta](https://github.com/miscreant/meta) 具备错误使用抗性的(Misuse-resistant )对称加密库,支持 AES-SIV (RFC5297) 和 CHAIN/STREAM
-- [**466**Star][3m] [Java] [strazzere/anti-emulator](https://github.com/strazzere/anti-emulator) Android Anti-Emulator
-- [**466**Star][2m] [C#] [rasta-mouse/watson](https://github.com/rasta-mouse/watson) Enumerate missing KBs and suggest exploits for useful Privilege Escalation vulnerabilities
-- [**466**Star][24d] [pixelcyber/thor](https://github.com/pixelcyber/thor) HTTP Sniffer/Capture on iOS for Network Debug & Inspect.
-- [**466**Star][7d] [C] [libreswan/libreswan](https://github.com/libreswan/libreswan) an Internet Key Exchange (IKE) implementation for Linux.
-- [**466**Star][7y] [Shell] [kosborn/p2p-adb](https://github.com/kosborn/p2p-adb) Phone to Phone Android Debug Bridge - A project for "debugging" phones... from other phones.
-- [**466**Star][1m] [Py] [bit4woo/teemo](https://github.com/bit4woo/teemo) A Domain Name & Email Address Collection Tool
-- [**466**Star][10d] [Go] [arvanaghi/checkplease](https://github.com/arvanaghi/checkplease) Sandbox evasion modules written in PowerShell, Python, Go, Ruby, C, C#, Perl, and Rust.
+- [**466**Star][21d] [Py] [k8gege/k8cscan](https://github.com/k8gege/k8cscan) K8Cscan大型内网渗透自定义插件化扫描神器,包含信息收集、网络资产、漏洞扫描、密码爆破、漏洞利用,程序采用多线程批量扫描大型内网多个IP段C段主机,目前插件包含: C段旁注扫描、子域名扫描、Ftp密码爆破、Mysql密码爆破、Oracle密码爆破、MSSQL密码爆破、Windows/Linux系统密码爆破、存活主机扫描、端口扫描、Web信息探测、操作系统版本探测、Cisco思科设备扫描等,支持调用任意外部程序或脚本,支持Cobalt Strike联动
+- [**466**Star][3m] [PS] [evotecit/pswinreporting](https://github.com/evotecit/pswinreporting) This PowerShell Module has multiple functionalities, but one of the signature features of this module is the ability to parse Security logs on Domain Controllers providing easy to use access to AD Events.
+- [**466**Star][6d] [C] [bootleg/ret-sync](https://github.com/bootleg/ret-sync) a set of plugins that help to synchronize a debugging session (WinDbg/GDB/LLDB/OllyDbg/OllyDbg2/x64dbg) with IDA/Ghidra disassemblers
+ - [GDB插件](https://github.com/bootleg/ret-sync/tree/master/ext_gdb)
+ - [Ghidra插件](https://github.com/bootleg/ret-sync/tree/master/ext_ghidra)
+ - [IDA插件](https://github.com/bootleg/ret-sync/tree/master/ext_ida)
+ - [LLDB](https://github.com/bootleg/ret-sync/tree/master/ext_lldb)
+ - [OD](https://github.com/bootleg/ret-sync/tree/master/ext_olly1)
+ - [OD2](https://github.com/bootleg/ret-sync/tree/master/ext_olly2)
+ - [WinDgb](https://github.com/bootleg/ret-sync/tree/master/ext_windbg/sync)
+ - [x64dbg](https://github.com/bootleg/ret-sync/tree/master/ext_x64dbg)
+- [**466**Star][26d] [C#] [akaion/bleak](https://github.com/akaion/bleak) A Windows native DLL injection library that supports several methods of injection.
+- [**465**Star][3y] [Py] [trustedsec/meterssh](https://github.com/trustedsec/meterssh) MeterSSH is a way to take shellcode, inject it into memory then tunnel whatever port you want to over SSH to mask any type of communications as a normal SSH connection. The way it works is by injecting shellcode into memory, then wrapping a port spawned (meterpeter in this case) by the shellcode over SSH back to the attackers machine. Then conne…
- [**465**Star][1y] [Py] [ptresearch/unme11](https://github.com/ptresearch/unme11) Intel ME 11.x Firmware Images Unpacker
-- [**465**Star][3y] [C] [lucyoa/kernel-exploits](https://github.com/lucyoa/kernel-exploits)
-- [**465**Star][2y] [C] [leurak/memz](https://github.com/leurak/memz) A trojan made for Danooct1's User Made Malware Series.
-- [**465**Star][12m] [C] [laruence/taint](https://github.com/laruence/taint) Taint is a PHP extension, used for detecting XSS codes
-- [**465**Star][1y] [hack-with-github/powerful-plugins](https://github.com/hack-with-github/powerful-plugins) Powerful plugins and add-ons for hackers
-- [**465**Star][8m] [C++] [glmcdona/process-dump](https://github.com/glmcdona/process-dump) Windows tool for dumping malware PE files from memory back to disk for analysis.
-- [**465**Star][2y] [Py] [firstlookmedia/pdf-redact-tools](https://github.com/firstlookmedia/pdf-redact-tools) a set of tools to help with securely redacting and stripping metadata from documents before publishing
-- [**464**Star][1m] [TypeScript] [mitre-attack/attack-navigator](https://github.com/mitre-attack/attack-navigator) Web app that provides basic navigation and annotation of ATT&CK matrices
-- [**464**Star][1m] [Py] [hunters-forge/mordor](https://github.com/hunters-forge/mordor) Re-play Adversarial Techniques
-- [**464**Star][3y] [Py] [trustedsec/meterssh](https://github.com/trustedsec/meterssh) MeterSSH is a way to take shellcode, inject it into memory then tunnel whatever port you want to over SSH to mask any type of communications as a normal SSH connection. The way it works is by injecting shellcode into memory, then wrapping a port spawned (meterpeter in this case) by the shellcode over SSH back to the attackers machine. Then conne…
-- [**464**Star][29d] [Py] [stamparm/dsvw](https://github.com/stamparm/dsvw) Damn Small Vulnerable Web
+- [**465**Star][1m] [LLVM] [jonathansalwan/tigress_protection](https://github.com/jonathansalwan/tigress_protection) Playing with the Tigress binary protection. Break some of its protections and solve some of its challenges. Automatic deobfuscation using symbolic execution, taint analysis and LLVM.
+- [**465**Star][1m] [Go] [gen0cide/gscript](https://github.com/gen0cide/gscript) framework to rapidly implement custom droppers for all three major operating systems
+- [**464**Star][26d] [JS] [siujoeng-lau/workers-proxy](https://github.com/siujoeng-lau/workers-proxy) Lightweight reverse proxy implemented with Cloudflare Workers.
+- [**464**Star][4m] [Py] [viralmaniar/powershell-rat](https://github.com/viralmaniar/powershell-rat) Python based backdoor that uses Gmail to exfiltrate data through attachment. This RAT will help during red team engagements to backdoor any Windows machines. It tracks the user activity using screen capture and sends it to an attacker as an e-mail attachment.
+- [**464**Star][1m] [Py] [stamparm/dsvw](https://github.com/stamparm/dsvw) Damn Small Vulnerable Web
- [**464**Star][2y] [C] [shinyquagsire23/switch-fightstick](https://github.com/shinyquagsire23/switch-fightstick) Proof-of-Concept LUFA Project for the Nintendo Switch. Pretends to be a HORI Pokken Pad which only prints Splatoon 2 Posts
-- [**464**Star][1m] [LLVM] [jonathansalwan/tigress_protection](https://github.com/jonathansalwan/tigress_protection) Playing with the Tigress binary protection. Break some of its protections and solve some of its challenges. Automatic deobfuscation using symbolic execution, taint analysis and LLVM.
-- [**464**Star][5y] [Perl] [jbittel/httpry](https://github.com/jbittel/httpry) HTTP logging and information retrieval tool
+- [**464**Star][8m] [Java] [owasp/owasp-webscarab](https://github.com/owasp/owasp-webscarab) OWASP WebScarab
+- [**464**Star][9d] [C] [irontec/sngrep](https://github.com/irontec/sngrep) Ncurses SIP Messages flow viewer
+- [**464**Star][2y] [Py] [firstlookmedia/pdf-redact-tools](https://github.com/firstlookmedia/pdf-redact-tools) a set of tools to help with securely redacting and stripping metadata from documents before publishing
- [**464**Star][6y] [Py] [bramcohen/dissidentx](https://github.com/bramcohen/dissidentx) Bram's steganographic framework
-- [**464**Star][24d] [C#] [akaion/bleak](https://github.com/akaion/bleak) A Windows native DLL injection library that supports several methods of injection.
-- [**464**Star][2y] [C++] [aimtuxofficial/aimtux](https://github.com/aimtuxofficial/aimtux) A large Linux csgo cheat/hack
-- [**464**Star][8d] [Py] [aidaho12/haproxy-wi](https://github.com/aidaho12/haproxy-wi) Web interface for managing Haproxy servers
-- [**463**Star][8d] [C] [skeeto/enchive](https://github.com/skeeto/enchive) Encrypted personal archives
- [**463**Star][3y] [remath/literature_review](https://github.com/remath/literature_review) Survey of program analysis research with a focus on machine code
-- [**463**Star][1m] [Go] [gen0cide/gscript](https://github.com/gen0cide/gscript) framework to rapidly implement custom droppers for all three major operating systems
-- [**462**Star][8m] [Java] [owasp/owasp-webscarab](https://github.com/owasp/owasp-webscarab) OWASP WebScarab
+- [**463**Star][5y] [pyrotek3/powershell-ad-recon](https://github.com/pyrotek3/powershell-ad-recon) PowerShell Scripts I find useful
+- [**463**Star][8d] [C++] [mikesart/gpuvis](https://github.com/mikesart/gpuvis) GPU Trace Visualizer
+- [**463**Star][6y] [C] [martona/mhook](https://github.com/martona/mhook) A Windows API hooking library
+- [**463**Star][2y] [Py] [coalfire-research/java-deserialization-exploits](https://github.com/coalfire-research/java-deserialization-exploits) A collection of curated Java Deserialization Exploits
+- [**463**Star][2y] [C++] [aimtuxofficial/aimtux](https://github.com/aimtuxofficial/aimtux) A large Linux csgo cheat/hack
+- [**462**Star][3m] [C++] [fsecurelabs/c3](https://github.com/FSecureLABS/C3) A framework for rapid prototyping of custom C2 channels, while still providing integration with existing offensive toolkits.
+- [**462**Star][17d] [Rust] [rust-fuzz/cargo-fuzz](https://github.com/rust-fuzz/cargo-fuzz) Command line helpers for fuzzing
- [**462**Star][7m] [C#] [microsoft/dbgshell](https://github.com/microsoft/dbgshell) A PowerShell front-end for the Windows debugger engine.
-- [**462**Star][3m] [PowerShell] [evotecit/pswinreporting](https://github.com/evotecit/pswinreporting) This PowerShell Module has multiple functionalities, but one of the signature features of this module is the ability to parse Security logs on Domain Controllers providing easy to use access to AD Events.
+- [**462**Star][10d] [Java] [lennartkoopmann/nzyme](https://github.com/lennartkoopmann/nzyme) Nzyme collects 802.11 management frames directly from the air and sends them to a Graylog (Open Source log management) setup for WiFi IDS, monitoring, and incident response. It only needs a JVM and a WiFi adapter that supports monitor mode.
+- [**462**Star][24d] [C] [jkornev/hidden](https://github.com/jkornev/hidden) Windows driver with usermode interface which can hide objects of file-system and registry, protect processes and etc
+- [**462**Star][7m] [Shell] [jgmdev/ddos-deflate](https://github.com/jgmdev/ddos-deflate) Fork of DDoS Deflate with fixes, improvements and new features.
+- [**462**Star][2y] [Go] [egebalci/hercules](https://github.com/egebalci/hercules) HERCULES is a special payload generator that can bypass antivirus softwares.
- [**462**Star][2y] [Py] [dchrastil/scrapedin](https://github.com/dchrastil/scrapedin) A tool to scrape LinkedIn without API restrictions for data reconnaissance
-- [**462**Star][2y] [Py] [coalfire-research/java-deserialization-exploits](https://github.com/coalfire-research/java-deserialization-exploits) A collection of curated Java Deserialization Exploits
-- [**461**Star][3m] [C++] [fsecurelabs/c3](https://github.com/FSecureLABS/C3) Custom Command and Control (C3). A framework for rapid prototyping of custom C2 channels, while still providing integration with existing offensive toolkits.
- [**461**Star][1y] [Py] [mehulj94/radium](https://github.com/mehulj94/Radium) Python keylogger with multiple features.
-- [**461**Star][3m] [Py] [yanxiu0614/subdomain3](https://github.com/yanxiu0614/subdomain3) A new generation of tool for discovering subdomains( ip , cdn and so on)
-- [**461**Star][15d] [Rust] [rust-fuzz/cargo-fuzz](https://github.com/rust-fuzz/cargo-fuzz) Command line helpers for fuzzing
-- [**461**Star][5y] [pyrotek3/powershell-ad-recon](https://github.com/pyrotek3/powershell-ad-recon) PowerShell Scripts I find useful
-- [**461**Star][5m] [C] [phoenhex/files](https://github.com/phoenhex/files)
-- [**461**Star][4m] [C++] [mikesart/gpuvis](https://github.com/mikesart/gpuvis) GPU Trace Visualizer
-- [**461**Star][8d] [Java] [lennartkoopmann/nzyme](https://github.com/lennartkoopmann/nzyme) Nzyme collects 802.11 management frames directly from the air and sends them to a Graylog (Open Source log management) setup for WiFi IDS, monitoring, and incident response. It only needs a JVM and a WiFi adapter that supports monitor mode.
-- [**461**Star][6m] [Shell] [jgmdev/ddos-deflate](https://github.com/jgmdev/ddos-deflate) Fork of DDoS Deflate with fixes, improvements and new features.
-- [**461**Star][13d] [gradiuscypher/infosec_getting_started](https://github.com/gradiuscypher/infosec_getting_started) A collection of resources/documentation/links/etc to help people learn about Infosec and break into the field.
-- [**460**Star][3m] [Py] [viralmaniar/powershell-rat](https://github.com/viralmaniar/powershell-rat) Python based backdoor that uses Gmail to exfiltrate data through attachment. This RAT will help during red team engagements to backdoor any Windows machines. It tracks the user activity using screen capture and sends it to an attacker as an e-mail attachment.
-- [**460**Star][4m] [C++] [emoon/prodbg](https://github.com/emoon/prodbg) Debugging the way it's meant to be done
+- [**461**Star][6m] [Shell] [vincentcox/bypass-firewalls-by-dns-history](https://github.com/vincentcox/bypass-firewalls-by-dns-history) Firewall bypass script based on DNS history records. This script will search for DNS A history records and check if the server replies for that domain. Handy for bugbounty hunters.
+- [**461**Star][8m] [Py] [ustayready/fireprox](https://github.com/ustayready/fireprox) AWS API Gateway management tool for creating on the fly HTTP pass-through proxies for unique IP rotation
+- [**461**Star][5m] [C] [phoenhex/files](https://github.com/phoenhex/files) Repository for exploits/POCs/presentation of the phoenhex team
+- [**461**Star][15d] [gradiuscypher/infosec_getting_started](https://github.com/gradiuscypher/infosec_getting_started) A collection of resources/documentation/links/etc to help people learn about Infosec and break into the field.
+- [**461**Star][4m] [C++] [emoon/prodbg](https://github.com/emoon/prodbg) Debugging the way it's meant to be done
+- [**461**Star][16d] [Java] [dsheirer/sdrtrunk](https://github.com/dsheirer/sdrtrunk) A cross-platform java application for decoding, monitoring, recording and streaming trunked mobile and related radio protocols using Software Defined Radios (SDR). Website:
+- [**461**Star][2y] [Py] [0xdeadbeefjerky/office-dde-payloads](https://github.com/0xdeadbeefjerky/office-dde-payloads) Collection of scripts and templates to generate Office documents embedded with the DDE, macro-less command execution technique.
+- [**460**Star][2y] [Kotlin] [v2ray-android/actinium](https://github.com/v2ray-android/actinium) A 3rd party V2Ray client for Android
+- [**460**Star][18d] [Py] [shellphish/rex](https://github.com/shellphish/rex) Shellphish's automated exploitation engine, originally created for the Cyber Grand Challenge.
+- [**460**Star][2m] [Py] [savio-code/fern-wifi-cracker](https://github.com/savio-code/fern-wifi-cracker) Automatically exported from code.google.com/p/fern-wifi-cracker
+- [**460**Star][10m] [Go] [netxfly/x-crack](https://github.com/netxfly/x-crack) Weak password scanner, Support: FTP/SSH/SNMP/MSSQL/MYSQL/PostGreSQL/REDIS/ElasticSearch/MONGODB
- [**460**Star][4m] [C++] [comaeio/opcde](https://github.com/comaeio/opcde) OPCDE Cybersecurity Conference Materials
-- [**460**Star][12d] [JS] [codemanki/cloudscraper](https://github.com/codemanki/cloudscraper) Node.js library to bypass cloudflare's anti-ddos page
-- [**459**Star][2y] [Kotlin] [v2ray-android/actinium](https://github.com/v2ray-android/actinium) A 3rd party V2Ray client for Android
-- [**459**Star][7d] [Py] [fportantier/habu](https://github.com/fportantier/habu) Hacking Toolkit
+- [**460**Star][9m] [C] [cofyc/dnscrypt-wrapper](https://github.com/cofyc/dnscrypt-wrapper) This is dnscrypt wrapper (server-side dnscrypt proxy), which helps to add dnscrypt support to any name resolver.
+- [**459**Star][29d] [Shell] [wireghoul/graudit](https://github.com/wireghoul/graudit) a simple script and signature sets that allows you to find potential security flaws in source code using the GNU utility grep
+- [**459**Star][6m] [Py] [threezh1/jsfinder](https://github.com/threezh1/jsfinder) JSFinder is a tool for quickly extracting URLs and subdomains from JS files on a website.
- [**459**Star][1y] [C] [ntruchsess/arduino_uip](https://github.com/ntruchsess/arduino_uip) A plugin-replacement of the stock Arduino Ethernet library for ENC28J60 shields and breakout boards. Full support for persistent (streaming) TCP-connections and UDP (Client and Server each), ARP, ICMP, DHCP and DNS. Build around Adam Dunkels uIP Stack. Further developed version can be found on
-- [**459**Star][22d] [C] [jkornev/hidden](https://github.com/jkornev/hidden) Windows driver with usermode interface which can hide objects of file-system and registry, protect processes and etc
-- [**459**Star][2y] [Go] [egebalci/hercules](https://github.com/egebalci/hercules) HERCULES is a special payload generator that can bypass antivirus softwares.
-- [**459**Star][14d] [Java] [dsheirer/sdrtrunk](https://github.com/dsheirer/sdrtrunk) A cross-platform java application for decoding, monitoring, recording and streaming trunked mobile and related radio protocols using Software Defined Radios (SDR). Website:
-- [**459**Star][2y] [Py] [0xdeadbeefjerky/office-dde-payloads](https://github.com/0xdeadbeefjerky/office-dde-payloads) Collection of scripts and templates to generate Office documents embedded with the DDE, macro-less command execution technique.
-- [**458**Star][8m] [Py] [ustayready/fireprox](https://github.com/ustayready/fireprox) AWS API Gateway management tool for creating on the fly HTTP pass-through proxies for unique IP rotation
-- [**458**Star][16d] [Py] [shellphish/rex](https://github.com/shellphish/rex) Shellphish's automated exploitation engine, originally created for the Cyber Grand Challenge.
-- [**458**Star][2m] [Py] [savio-code/fern-wifi-cracker](https://github.com/savio-code/fern-wifi-cracker) Automatically exported from code.google.com/p/fern-wifi-cracker
+- [**459**Star][1y] [HTML] [metnew/uxss-db](https://github.com/metnew/uxss-db)
+- [**459**Star][1y] [Cycript] [codermjlee/mjcript](https://github.com/codermjlee/mjcript) 【越狱-逆向】基于Cycript实现的一些实用函数
+- [**459**Star][9m] [Py] [christhecoolhut/zeratool](https://github.com/christhecoolhut/zeratool) Automatic Exploit Generation (AEG) and remote flag capture for exploitable CTF problems
+- [**458**Star][4m] [mel0day/redteam-bcs](https://github.com/mel0day/redteam-bcs) BCS(北京网络安全大会)2019 红队行动会议重点内容
+- [**458**Star][3y] [valvesoftware/csgo-osx-linux](https://github.com/ValveSoftware/csgo-osx-linux) Counter-Strike: Global Offensive
+- [**458**Star][8m] [C] [sandeepmistry/arduino-nrf5](https://github.com/sandeepmistry/arduino-nrf5) Arduino Core for Nordic Semiconductor nRF5 based boards
- [**458**Star][3m] [PHP] [nette/latte](https://github.com/nette/latte) ☕ Latte: the intuitive and fast template engine for those who want the most secure PHP sites.
-- [**458**Star][6y] [C] [martona/mhook](https://github.com/martona/mhook) A Windows API hooking library
-- [**458**Star][19d] [Py] [k8gege/k8cscan](https://github.com/k8gege/k8cscan) K8Cscan大型内网渗透自定义插件化扫描神器,包含信息收集、网络资产、漏洞扫描、密码爆破、漏洞利用,程序采用多线程批量扫描大型内网多个IP段C段主机,目前插件包含: C段旁注扫描、子域名扫描、Ftp密码爆破、Mysql密码爆破、Oracle密码爆破、MSSQL密码爆破、Windows/Linux系统密码爆破、存活主机扫描、端口扫描、Web信息探测、操作系统版本探测、Cisco思科设备扫描等,支持调用任意外部程序或脚本,支持Cobalt Strike联动
+- [**458**Star][4y] [JS] [ghostwords/chameleon](https://github.com/ghostwords/chameleon) Browser fingerprinting protection for everybody.
+- [**458**Star][2d] [C] [exim/exim](https://github.com/exim/exim) Exim Mail Transport Agent - source, testsuite and documentation
+- [**457**Star][3y] [Py] [vpnguy-zz/ntpdos](https://github.com/vpnguy-zz/ntpdos) Create a DDOS attack using NTP servers
- [**457**Star][3m] [Py] [blacknbunny/cve-2018-10933](https://github.com/blacknbunny/CVE-2018-10933) Spawn to shell without any credentials by using CVE-2018-10933 (LibSSH)
-- [**457**Star][3y] [valvesoftware/csgo-osx-linux](https://github.com/ValveSoftware/csgo-osx-linux) Counter-Strike: Global Offensive
-- [**457**Star][6m] [Shell] [vincentcox/bypass-firewalls-by-dns-history](https://github.com/vincentcox/bypass-firewalls-by-dns-history) Firewall bypass script based on DNS history records. This script will search for DNS A history records and check if the server replies for that domain. Handy for bugbounty hunters.
-- [**457**Star][10m] [Go] [netxfly/x-crack](https://github.com/netxfly/x-crack) Weak password scanner, Support: FTP/SSH/SNMP/MSSQL/MYSQL/PostGreSQL/REDIS/ElasticSearch/MONGODB
-- [**457**Star][4y] [JS] [ghostwords/chameleon](https://github.com/ghostwords/chameleon) Browser fingerprinting protection for everybody.
-- [**457**Star][9m] [C] [cofyc/dnscrypt-wrapper](https://github.com/cofyc/dnscrypt-wrapper) This is dnscrypt wrapper (server-side dnscrypt proxy), which helps to add dnscrypt support to any name resolver.
-- [**457**Star][9m] [Py] [christhecoolhut/zeratool](https://github.com/christhecoolhut/zeratool) Automatic Exploit Generation (AEG) and remote flag capture for exploitable CTF problems
-- [**457**Star][8d] [C] [bootleg/ret-sync](https://github.com/bootleg/ret-sync) a set of plugins that help to synchronize a debugging session (WinDbg/GDB/LLDB/OllyDbg/OllyDbg2/x64dbg) with IDA/Ghidra disassemblers
- - [GDB插件](https://github.com/bootleg/ret-sync/tree/master/ext_gdb)
- - [Ghidra插件](https://github.com/bootleg/ret-sync/tree/master/ext_ghidra)
- - [IDA插件](https://github.com/bootleg/ret-sync/tree/master/ext_ida)
- - [LLDB](https://github.com/bootleg/ret-sync/tree/master/ext_lldb)
- - [OD](https://github.com/bootleg/ret-sync/tree/master/ext_olly1)
- - [OD2](https://github.com/bootleg/ret-sync/tree/master/ext_olly2)
- - [WinDgb](https://github.com/bootleg/ret-sync/tree/master/ext_windbg/sync)
- - [x64dbg](https://github.com/bootleg/ret-sync/tree/master/ext_x64dbg)
-- [**456**Star][1y] [HTML] [metnew/uxss-db](https://github.com/metnew/uxss-db)
-- [**456**Star][4m] [C] [jarun/keysniffer](https://github.com/jarun/keysniffer)
+- [**457**Star][1m] [C#] [tyranid/oleviewdotnet](https://github.com/tyranid/oleviewdotnet) A .net OLE/COM viewer and inspector to merge functionality of OleView and Test Container
+- [**457**Star][4m] [C] [jarun/keysniffer](https://github.com/jarun/keysniffer)
+- [**457**Star][6m] [PHP] [flozz/p0wny-shell](https://github.com/flozz/p0wny-shell) Single-file PHP shell
+- [**456**Star][26d] [PHP] [pk-fr/yakpro-po](https://github.com/pk-fr/yakpro-po) YAK Pro - Php Obfuscator
- [**456**Star][3y] [C] [haka-security/haka](https://github.com/haka-security/haka) a collection of tools that allows capturing TCP/IP packets and filtering them based on Lua policy files.
-- [**456**Star][6m] [PHP] [flozz/p0wny-shell](https://github.com/flozz/p0wny-shell) Single-file PHP shell
-- [**456**Star][7d] [C] [exim/exim](https://github.com/exim/exim) Exim Mail Transport Agent - source, testsuite and documentation
-- [**456**Star][1y] [Cycript] [codermjlee/mjcript](https://github.com/codermjlee/mjcript) 【越狱-逆向】基于Cycript实现的一些实用函数
-- [**455**Star][3y] [Py] [vpnguy-zz/ntpdos](https://github.com/vpnguy-zz/ntpdos) Create a DDOS attack using NTP servers
-- [**455**Star][2y] [Py] [yukinoshita47/yuki-chan-the-auto-pentest](https://github.com/yukinoshita47/yuki-chan-the-auto-pentest) Automate Pentest Tool
-- [**455**Star][27d] [Shell] [wireghoul/graudit](https://github.com/wireghoul/graudit) grep rough audit - source code auditing tool
-- [**455**Star][24d] [PHP] [pk-fr/yakpro-po](https://github.com/pk-fr/yakpro-po) YAK Pro - Php Obfuscator
-- [**455**Star][4y] [C] [lucasjones/cpuminer-multi](https://github.com/lucasjones/cpuminer-multi) Multi-algo CPUMiner & Reference Cryptonote Miner (JSON-RPC 2.0)
-- [**455**Star][2y] [Py] [embedi/cve-2017-11882](https://github.com/embedi/cve-2017-11882) Proof-of-Concept exploits for CVE-2017-11882
-- [**454**Star][2y] [Jupyter Notebook] [saurabhmathur96/clickbait-detector](https://github.com/saurabhmathur96/clickbait-detector) Detects clickbait headlines using deep learning.
-- [**454**Star][8m] [C] [sandeepmistry/arduino-nrf5](https://github.com/sandeepmistry/arduino-nrf5) Arduino Core for Nordic Semiconductor nRF5 based boards
-- [**454**Star][2m] [Py] [globaleaks/tor2web](https://github.com/globaleaks/tor2web) Tor2web is an HTTP proxy software that enables access to Tor Hidden Services by mean of common web browsers
-- [**453**Star][6m] [Py] [threezh1/jsfinder](https://github.com/threezh1/jsfinder) JSFinder is a tool for quickly extracting URLs and subdomains from JS files on a website.
-- [**453**Star][11d] [Py] [rabobank-cdc/dettect](https://github.com/rabobank-cdc/dettect) Detect Tactics, Techniques & Combat Threats
-- [**453**Star][11m] [Py] [mandatoryprogrammer/tldr](https://github.com/mandatoryprogrammer/tldr) TLDR (TLD Records) is a continually updated DNS archive of zone transfer attempts again all existing TLD nameservers as well as the root servers.
-- [**453**Star][2y] [Py] [idanr1986/cuckoo-droid](https://github.com/idanr1986/cuckoo-droid) Automated Android Malware Analysis with Cuckoo Sandbox.
-- [**453**Star][6m] [Py] [dr0op/weblogicscan](https://github.com/dr0op/weblogicscan) 增强版WeblogicScan、检测结果更精确、插件化、添加CVE-2019-2618,CVE-2019-2729检测,Python3支持
+- [**456**Star][2m] [Py] [globaleaks/tor2web](https://github.com/globaleaks/tor2web) Tor2web is an HTTP proxy software that enables access to Tor Hidden Services by mean of common web browsers
+- [**455**Star][2y] [Py] [yukinoshita47/yuki-chan-the-auto-pentest](https://github.com/yukinoshita47/yuki-chan-the-auto-pentest) an Automated Penetration Testing tool this tool will auditing all standard security test method for you.
+- [**455**Star][2y] [Jupyter Notebook] [saurabhmathur96/clickbait-detector](https://github.com/saurabhmathur96/clickbait-detector) Detects clickbait headlines using deep learning.
+- [**455**Star][7d] [Py] [rabobank-cdc/dettect](https://github.com/rabobank-cdc/dettect) Detect Tactics, Techniques & Combat Threats
+- [**455**Star][8d] [PS] [mr-un1k0d3r/redteampowershellscripts](https://github.com/mr-un1k0d3r/redteampowershellscripts) Various PowerShell scripts that may be useful during red team exercise
+- [**455**Star][11m] [Py] [mandatoryprogrammer/tldr](https://github.com/mandatoryprogrammer/tldr) TLDR (TLD Records) is a continually updated DNS archive of zone transfer attempts again all existing TLD nameservers as well as the root servers.
+- [**455**Star][2y] [Py] [idanr1986/cuckoo-droid](https://github.com/idanr1986/cuckoo-droid) Automated Android Malware Analysis with Cuckoo Sandbox.
+- [**455**Star][6m] [Py] [dr0op/weblogicscan](https://github.com/dr0op/weblogicscan) 增强版WeblogicScan、检测结果更精确、插件化、添加CVE-2019-2618,CVE-2019-2729检测,Python3支持
+- [**454**Star][3m] [JS] [sindresorhus/get-port](https://github.com/sindresorhus/get-port) Get an available port
+- [**454**Star][4y] [C] [lucasjones/cpuminer-multi](https://github.com/lucasjones/cpuminer-multi) Multi-algo CPUMiner & Reference Cryptonote Miner (JSON-RPC 2.0)
+- [**454**Star][2y] [Py] [embedi/cve-2017-11882](https://github.com/embedi/cve-2017-11882) Proof-of-Concept exploits for CVE-2017-11882
+- [**453**Star][1y] [Go] [ncsa/ssh-auditor](https://github.com/ncsa/ssh-auditor) The best way to scan for weak ssh passwords on your network
+- [**453**Star][1y] [CSS] [fmstrat/diy-ipmi](https://github.com/fmstrat/diy-ipmi) A DIY IPMI / IP KVM system utilizing the Raspberry Pi
- [**453**Star][2y] [C] [cr4sh/openreil](https://github.com/cr4sh/openreil) Open source library that implements translator and tools for REIL (Reverse Engineering Intermediate Language)
-- [**453**Star][1y] [bfuzzy/auditd-attack](https://github.com/bfuzzy/auditd-attack) A Linux Auditd rule set mapped to MITRE's Attack Framework
-- [**452**Star][4m] [mel0day/redteam-bcs](https://github.com/mel0day/redteam-bcs) BCS(北京网络安全大会)2019 红队行动会议重点内容
-- [**452**Star][1y] [Go] [ncsa/ssh-auditor](https://github.com/ncsa/ssh-auditor) The best way to scan for weak ssh passwords on your network
-- [**452**Star][6m] [Py] [n1xbyte/cve-2019-0708](https://github.com/n1xbyte/cve-2019-0708) dump
+- [**453**Star][7d] [Py] [census-instrumentation/opencensus-python](https://github.com/census-instrumentation/opencensus-python) A stats collection and distributed tracing framework
+- [**453**Star][9m] [C++] [ahupowerdns/hello-dns](https://github.com/ahupowerdns/hello-dns) Hello and welcome to DNS!
+- [**452**Star][3m] [PS] [rvrsh3ll/misc-powershell-scripts](https://github.com/rvrsh3ll/misc-powershell-scripts) Random Tools
+- [**452**Star][7m] [Py] [n1xbyte/cve-2019-0708](https://github.com/n1xbyte/cve-2019-0708) dump
+- [**452**Star][10m] [C] [martinmarinov/tempestsdr](https://github.com/martinmarinov/tempestsdr) Remote video eavesdropping using a software-defined radio platform
- [**452**Star][4y] [clowwindy/shadowsocks-libev](https://github.com/clowwindy/shadowsocks-libev)
-- [**452**Star][9m] [C++] [ahupowerdns/hello-dns](https://github.com/ahupowerdns/hello-dns) Hello and welcome to DNS!
-- [**451**Star][15d] [Py] [controlscanmdr/cyphon](https://github.com/controlscanmdr/cyphon) Open source incident management and response platform.
+- [**452**Star][1y] [bfuzzy/auditd-attack](https://github.com/bfuzzy/auditd-attack) A Linux Auditd rule set mapped to MITRE's Attack Framework
+- [**451**Star][5d] [SystemVerilog] [lowrisc/opentitan](https://github.com/lowrisc/opentitan) Open source silicon root of trust
+- [**451**Star][17d] [Py] [controlscanmdr/cyphon](https://github.com/controlscanmdr/cyphon) Open source incident management and response platform.
+- [**451**Star][2m] [Java] [windysha/xpatch](https://github.com/windysha/xpatch) 免Root实现app加载Xposed插件工具。This is a tool to repackage apk file, then the apk can load any xposed modules installed in the device. It is another way to hook an app without root device.
- [**451**Star][3y] [C++] [vusec/drammer](https://github.com/vusec/drammer) Native binary for testing Android phones for the Rowhammer bug
-- [**451**Star][1m] [C#] [tyranid/oleviewdotnet](https://github.com/tyranid/oleviewdotnet) A .net OLE/COM viewer and inspector to merge functionality of OleView and Test Container
-- [**451**Star][3m] [JS] [sindresorhus/get-port](https://github.com/sindresorhus/get-port) Get an available port
-- [**451**Star][8m] [C++] [rek7/mxtract](https://github.com/rek7/mxtract) Offensive Memory Extractor & Analyzer
-- [**451**Star][7d] [Py] [census-instrumentation/opencensus-python](https://github.com/census-instrumentation/opencensus-python) A stats collection and distributed tracing framework
+- [**451**Star][2y] [PS] [spiderlabs/portia](https://github.com/spiderlabs/portia) Portia aims to automate a number of techniques commonly performed on internal network penetration tests after a low privileged account has been compromised.
+- [**451**Star][8m] [C++] [rek7/mxtract](https://github.com/rek7/mxtract) an opensource linux based tool that analyzes and dumps memory.
+- [**451**Star][8d] [meitar/awesome-cybersecurity-blueteam](https://github.com/meitar/awesome-cybersecurity-blueteam)
+- [**451**Star][7d] [PHP] [akaunting/firewall](https://github.com/akaunting/firewall) Web Application Firewall (WAF) package for Laravel
+- [**450**Star][2m] [Py] [scwuaptx/pwngdb](https://github.com/scwuaptx/pwngdb) gdb for pwn
- [**450**Star][8y] [Perl] [aoncyberlabs/padbuster](https://github.com/AonCyberLabs/PadBuster) Automated script for performing Padding Oracle attacks
-- [**450**Star][2y] [PowerShell] [spiderlabs/portia](https://github.com/spiderlabs/portia) Portia aims to automate a number of techniques commonly performed on internal network penetration tests after a low privileged account has been compromised.
+- [**450**Star][2m] [Py] [super-l/superl-url](https://github.com/super-l/superl-url) 根据关键词,对搜索引擎内容检索结果的网址内容进行采集的一款轻量级软程序。 程序主要运用于安全渗透测试项目,以及批量评估各类CMS系统0DAY的影响程度,同时也是批量采集自己获取感兴趣的网站的一个小程序~~ 可自动从搜索引擎采集相关网站的真实地址与标题等信息,可保存为文件,自动去除重复URL。同时,也可以自定义忽略多条域名等。
- [**450**Star][4m] [Py] [s0md3v/goop](https://github.com/s0md3v/goop) Google Search Scraper
+- [**450**Star][4m] [C++] [omerya/invisi-shell](https://github.com/omerya/invisi-shell) Hide your Powershell script in plain sight. Bypass all Powershell security features
- [**450**Star][3y] [C] [nccgroup/triforceafl](https://github.com/nccgroup/triforceafl) AFL/QEMU fuzzing with full-system emulation.
- [**450**Star][3m] [m1ghtym0/browser-pwn](https://github.com/m1ghtym0/browser-pwn) An updated collection of resources targeting browser-exploitation.
- [**450**Star][4y] [Py] [alienvault-labs/alienvaultlabs](https://github.com/alienvault-labs/alienvaultlabs) Alienvault Labs Projects Random Stuff
-- [**449**Star][3m] [PowerShell] [rvrsh3ll/misc-powershell-scripts](https://github.com/rvrsh3ll/misc-powershell-scripts) Random Tools
-- [**449**Star][4m] [C++] [omerya/invisi-shell](https://github.com/omerya/invisi-shell) Hide your Powershell script in plain sight. Bypass all Powershell security features
+- [**449**Star][11m] [Kotlin] [shadowsocks/kcptun-android](https://github.com/shadowsocks/kcptun-android) kcptun for Android.
+- [**449**Star][2d] [PS] [mantvydasb/redteam-tactics-and-techniques](https://github.com/mantvydasb/RedTeam-Tactics-and-Techniques) Red Teaming Tactics and Techniques
+- [**449**Star][3m] [Go] [stripe/safesql](https://github.com/stripe/safesql) Static analysis tool for Golang that protects against SQL injections
- [**449**Star][5m] [PHP] [kasperskylab/klara](https://github.com/kasperskylab/klara) Kaspersky's GReAT KLara
-- [**449**Star][11d] [Py] [ctxis/cape](https://github.com/ctxis/cape) Malware Configuration And Payload Extraction
-- [**448**Star][2m] [Py] [scwuaptx/pwngdb](https://github.com/scwuaptx/pwngdb) gdb for pwn
-- [**448**Star][10d] [PowerShell] [mr-un1k0d3r/redteampowershellscripts](https://github.com/mr-un1k0d3r/redteampowershellscripts) Various PowerShell scripts that may be useful during red team exercise
-- [**447**Star][11m] [Kotlin] [shadowsocks/kcptun-android](https://github.com/shadowsocks/kcptun-android) kcptun for Android.
-- [**447**Star][1m] [Py] [super-l/superl-url](https://github.com/super-l/superl-url) 根据关键词,对搜索引擎内容检索结果的网址内容进行采集的一款轻量级软程序。 程序主要运用于安全渗透测试项目,以及批量评估各类CMS系统0DAY的影响程度,同时也是批量采集自己获取感兴趣的网站的一个小程序~~ 可自动从搜索引擎采集相关网站的真实地址与标题等信息,可保存为文件,自动去除重复URL。同时,也可以自定义忽略多条域名等。
-- [**447**Star][10m] [C] [martinmarinov/tempestsdr](https://github.com/martinmarinov/tempestsdr) Remote video eavesdropping using a software-defined radio platform
-- [**447**Star][5m] [JS] [coalfire-research/npk](https://github.com/coalfire-research/npk) A mostly-serverless distributed hash cracking platform
-- [**447**Star][2m] [PHP] [akaunting/firewall](https://github.com/akaunting/firewall) Web Application Firewall (WAF) package for Laravel
-- [**446**Star][6y] [Go] [titanous/heartbleeder](https://github.com/titanous/heartbleeder) OpenSSL CVE-2014-0160 Heartbleed vulnerability test
-- [**446**Star][3m] [Go] [stripe/safesql](https://github.com/stripe/safesql) Static analysis tool for Golang that protects against SQL injections
-- [**446**Star][1y] [JS] [simonepri/upash](https://github.com/simonepri/upash)
-- [**446**Star][2y] [POV-Ray SDL] [hzqst/syscall-monitor](https://github.com/hzqst/syscall-monitor) a system monitor program (like Sysinternal's Process Monitor) using Intel VT-X/EPT for Windows7+
-- [**446**Star][5m] [Py] [cchio/deep-pwning](https://github.com/cchio/deep-pwning) Metasploit for machine learning.
-- [**445**Star][8m] [YARA] [ghidraninja/ghidra_scripts](https://github.com/ghidraninja/ghidra_scripts) Scripts for the Ghidra software reverse engineering suite.
+- [**449**Star][6m] [JS] [coalfire-research/npk](https://github.com/coalfire-research/npk) A mostly-serverless distributed hash cracking platform
+- [**448**Star][14d] [Py] [s0md3v/corsy](https://github.com/s0md3v/corsy) CORS Misconfiguration Scanner
+- [**448**Star][10d] [C++] [ondrejbudai/hidviz](https://github.com/ondrejbudai/hidviz) in-depth analysis of USB HID devices communication
+- [**448**Star][2m] [Shell] [l-n-s/wireguard-install](https://github.com/l-n-s/wireguard-install) WireGuard VPN server installer
+- [**448**Star][8m] [YARA] [ghidraninja/ghidra_scripts](https://github.com/ghidraninja/ghidra_scripts) Scripts for the Ghidra software reverse engineering suite.
- [binwalk](https://github.com/ghidraninja/ghidra_scripts/blob/master/binwalk.py) Runs binwalk on the current program and bookmarks the findings
- [yara](https://github.com/ghidraninja/ghidra_scripts/blob/master/yara.py) Automatically find crypto constants in the loaded program - allows to very quickly identify crypto code.
- [swift_demangler](https://github.com/ghidraninja/ghidra_scripts/blob/master/swift_demangler.py) Automatically demangle swift function names
- [golang_renamer](https://github.com/ghidraninja/ghidra_scripts/blob/master/golang_renamer.py) Restores function names from a stripped Go binary
-- [**444**Star][19d] [Py] [sidechannelmarvels/deadpool](https://github.com/sidechannelmarvels/deadpool) Repository of various public white-box cryptographic implementations and their practical attacks.
-- [**444**Star][5m] [PowerShell] [sans-blue-team/deepbluecli](https://github.com/sans-blue-team/deepbluecli) a PowerShell Module for Threat Hunting via Windows Event Logs
-- [**444**Star][8y] [Py] [openrce/paimei](https://github.com/openrce/paimei) A reverse engineering framework written in Python.
-- [**444**Star][11m] [C++] [ntquery/scylla](https://github.com/ntquery/scylla) Imports Reconstructor
-- [**444**Star][12d] [C#] [malwareinfosec/ekfiddle](https://github.com/malwareinfosec/ekfiddle) A framework based on the Fiddler web debugger to study Exploit Kits, malvertising and malicious traffic in general.
+- [**447**Star][3d] [Py] [sidechannelmarvels/deadpool](https://github.com/sidechannelmarvels/deadpool) Repository of various public white-box cryptographic implementations and their practical attacks.
+- [**447**Star][5m] [PS] [sans-blue-team/deepbluecli](https://github.com/sans-blue-team/deepbluecli) a PowerShell Module for Threat Hunting via Windows Event Logs
+- [**447**Star][11m] [C++] [ntquery/scylla](https://github.com/ntquery/scylla) Imports Reconstructor
+- [**447**Star][7m] [HTML] [ctf-wiki/ctf-challenges](https://github.com/ctf-wiki/ctf-challenges)
+- [**447**Star][3m] [C] [cloudflare/cloudflare-blog](https://github.com/cloudflare/cloudflare-blog) Cloudflare Blog code samples
+- [**447**Star][5m] [Py] [cchio/deep-pwning](https://github.com/cchio/deep-pwning) Metasploit for machine learning.
+- [**447**Star][3y] [aptive/penetration-testing-tools](https://github.com/aptive/penetration-testing-tools) make a single repository for all the commonly used penetration testing tools, typically tools that don't exist within Kali or other penetration testing distros.
+- [**447**Star][4m] [C++] [alexhude/friend](https://github.com/alexhude/friend) Flexible Register/Instruction Extender aNd Documentation
+- [**446**Star][6y] [Go] [titanous/heartbleeder](https://github.com/titanous/heartbleeder) OpenSSL CVE-2014-0160 Heartbleed vulnerability test
+- [**446**Star][1y] [JS] [simonepri/upash](https://github.com/simonepri/upash) allow you to have a clean and easy-to-use API to use any password hashing algorithm seamlessly in your application.
+- [**446**Star][14d] [Py] [nsonaniya2010/subdomainizer](https://github.com/nsonaniya2010/subdomainizer) A tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github.
+- [**446**Star][5d] [C++] [khronosgroup/spirv-tools](https://github.com/khronosgroup/spirv-tools) provides an API and commands for processing SPIR-V module
+- [**446**Star][2y] [POV-Ray SDL] [hzqst/syscall-monitor](https://github.com/hzqst/syscall-monitor) a system monitor program (like Sysinternal's Process Monitor) using Intel VT-X/EPT for Windows7+
+- [**445**Star][6m] [C] [riverloopsec/killerbee](https://github.com/riverloopsec/killerbee) IEEE 802.15.4/ZigBee Security Research Toolkit
+- [**444**Star][5d] [Shell] [r00t-3xp10it/fakeimageexploiter](https://github.com/r00t-3xp10it/fakeimageexploiter) Use a Fake image.jpg to exploit targets (hide known file extensions)
+- [**444**Star][6d] [C#] [malwareinfosec/ekfiddle](https://github.com/malwareinfosec/ekfiddle) A framework based on the Fiddler web debugger to study Exploit Kits, malvertising and malicious traffic in general.
- [**444**Star][1y] [Rust] [ierror/ssh-permit-a38](https://github.com/ierror/ssh-permit-a38) Central management and deployment for SSH keys
-- [**444**Star][3y] [aptive/penetration-testing-tools](https://github.com/aptive/penetration-testing-tools) Penetration Testing tools - one repo to clone them all... containing latest pen testing tools
-- [**444**Star][4m] [C++] [alexhude/friend](https://github.com/alexhude/friend) Flexible Register/Instruction Extender aNd Documentation
-- [**443**Star][6m] [C] [riverloopsec/killerbee](https://github.com/riverloopsec/killerbee) IEEE 802.15.4/ZigBee Security Research Toolkit
+- [**444**Star][2y] [ObjC] [aburgh/disk-arbitrator](https://github.com/aburgh/disk-arbitrator) A Mac OS X forensic utility which manages file system mounting in support of forensic procedures.
+- [**443**Star][6m] [Go] [solo-io/sqoop](https://github.com/solo-io/sqoop) The GraphQL Engine powered by Gloo
+- [**443**Star][8y] [Py] [openrce/paimei](https://github.com/openrce/paimei) A reverse engineering framework written in Python.
- [**443**Star][7m] [jnusimba/miscsecnotes](https://github.com/jnusimba/miscsecnotes) some learning notes about Web/Cloud/Docker Security、 Penetration Test、 Security Building
-- [**443**Star][3y] [Py] [jekyc/wig](https://github.com/jekyc/wig) WebApp Information Gatherer
- [**443**Star][11m] [Batchfile] [ion-storm/sysmon-config](https://github.com/ion-storm/sysmon-config) Advanced Sysmon configuration, Installer & Auto Updater with high-quality event tracing
-- [**443**Star][3m] [C] [cloudflare/cloudflare-blog](https://github.com/cloudflare/cloudflare-blog) Cloudflare Blog code samples
-- [**443**Star][2y] [Objective-C] [aburgh/disk-arbitrator](https://github.com/aburgh/disk-arbitrator) A Mac OS X forensic utility which manages file system mounting in support of forensic procedures.
+- [**443**Star][1m] [Py] [gameye98/lazymux](https://github.com/gameye98/lazymux) termux tool installer
+- [**443**Star][3y] [Py] [brianwrf/hackutils](https://github.com/brianwrf/hackutils) a hack tool kit for pentest and web security research, which is based on BeautifulSoup bs4 module
+- [**443**Star][6m] [Py] [albinowax/activescanplusplus](https://github.com/albinowax/activescanplusplus) ActiveScan++ Burp Suite Plugin
- [**442**Star][6m] [C#] [sdrapkin/securitydriven.inferno](https://github.com/sdrapkin/securitydriven.inferno)
-- [**442**Star][12d] [Py] [nsonaniya2010/subdomainizer](https://github.com/nsonaniya2010/subdomainizer) A tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github.
+- [**442**Star][2m] [Go] [retroplasma/flyover-reverse-engineering](https://github.com/retroplasma/flyover-reverse-engineering) Reversing Apple's 3D satellite mode
- [**442**Star][1y] [Py] [jfoote/exploitable](https://github.com/jfoote/exploitable) The 'exploitable' GDB plugin. I don't work at CERT anymore, but here is the original homepage:
-- [**442**Star][7m] [HTML] [ctf-wiki/ctf-challenges](https://github.com/ctf-wiki/ctf-challenges)
-- [**442**Star][3y] [Py] [brianwrf/hackutils](https://github.com/brianwrf/hackutils) It is a hack tool kit for pentest and web security research.
-- [**441**Star][1y] [Go] [ice3man543/subover](https://github.com/ice3man543/subover) A Powerful Subdomain Takeover Tool
-- [**440**Star][5m] [C++] [ajkhoury/reclassex](https://github.com/ajkhoury/ReClassEx) ReClassEx
-- [**440**Star][6m] [Go] [solo-io/sqoop](https://github.com/solo-io/sqoop) The GraphQL Engine powered by Gloo
-- [**440**Star][10m] [Shell] [r00t-3xp10it/fakeimageexploiter](https://github.com/r00t-3xp10it/fakeimageexploiter) Use a Fake image.jpg to exploit targets (hide known file extensions)
-- [**440**Star][7d] [C++] [khronosgroup/spirv-tools](https://github.com/khronosgroup/spirv-tools) provides an API and commands for processing SPIR-V module
+- [**442**Star][3y] [Py] [jekyc/wig](https://github.com/jekyc/wig) a web application information gathering tool, which can identify numerous Content Management Systems and other administrative applications.
+- [**442**Star][1y] [Go] [ice3man543/subover](https://github.com/ice3man543/subover) A Powerful Subdomain Takeover Tool
+- [**441**Star][6m] [C++] [ajkhoury/reclassex](https://github.com/ajkhoury/ReClassEx) ReClassEx
+- [**441**Star][1y] [C] [ryancdotorg/brainflayer](https://github.com/ryancdotorg/brainflayer) A proof-of-concept cracker for cryptocurrency brainwallets and other low entropy key alogrithms.
+- [**441**Star][3y] [Py] [ring04h/wyproxy](https://github.com/ring04h/wyproxy) proxying and recording HTTP/HTTPs/Socks5 proxy flow, save to MYSQL database.
+- [**441**Star][1m] [Go] [cbeuw/cloak](https://github.com/cbeuw/cloak) A universal pluggable transport utilising TLS domain fronting to evade deep packet inspection and active probing from state-level adversaries
+- [**441**Star][6d] [Jupyter Notebook] [borealisai/advertorch](https://github.com/borealisai/advertorch) A Toolbox for Adversarial Robustness Research
- [**440**Star][4y] [C#] [keepwn/altman](https://github.com/keepwn/altman) the cross platform webshell tool in .NET
-- [**440**Star][1m] [Py] [gameye98/lazymux](https://github.com/gameye98/lazymux) termux tool installer
-- [**440**Star][1y] [JS] [brannondorsey/whonow](https://github.com/brannondorsey/whonow) A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)
-- [**439**Star][1y] [C] [ryancdotorg/brainflayer](https://github.com/ryancdotorg/brainflayer) A proof-of-concept cracker for cryptocurrency brainwallets and other low entropy key alogrithms.
-- [**439**Star][3y] [Py] [ring04h/wyproxy](https://github.com/ring04h/wyproxy) proxying and recording HTTP/HTTPs/Socks5 proxy flow, save to MYSQL database.
+- [**440**Star][2y] [JS] [brannondorsey/whonow](https://github.com/brannondorsey/whonow) A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)
- [**439**Star][3m] [C++] [pstavirs/ostinato](https://github.com/pstavirs/ostinato) Packet/Traffic Generator and Analyzer
+- [**439**Star][1m] [Py] [polymorf/findcrypt-yara](https://github.com/polymorf/findcrypt-yara) IDA pro plugin to find crypto constants (and more)
+- [**439**Star][4y] [Java] [payatu/diva-android](https://github.com/payatu/diva-android) DIVA Android - Damn Insecure and vulnerable App for Android
- [**439**Star][4y] [Py] [nimia/public_drown_scanner](https://github.com/nimia/public_drown_scanner)
-- [**439**Star][12d] [meitar/awesome-cybersecurity-blueteam](https://github.com/meitar/awesome-cybersecurity-blueteam)
-- [**439**Star][3y] [CSS] [graniet/chromebackdoor](https://github.com/graniet/chromebackdoor) Chromebackdoor is a PoC of pentest tool, this tool use a MITB technique for generate a windows executable ".exe" after launch run a malicious extension or script on most popular browsers, and send all DOM datas on command and control.
+- [**439**Star][2y] [magoo/redteam-plan](https://github.com/magoo/redteam-plan) Issues to consider when planning a red team exercise.
+- [**439**Star][3y] [CSS] [graniet/chromebackdoor](https://github.com/graniet/chromebackdoor) a PoC of pentest tool, use a MITB technique for generate a windows executable ".exe" after launch run a malicious extension or script on most popular browsers, and send all DOM datas on command and control.
+- [**439**Star][12d] [Py] [google/vulncode-db](https://github.com/google/vulncode-db) a database for vulnerabilities and their corresponding source code if available
+- [**439**Star][2d] [C] [facebook/openbmc](https://github.com/facebook/openbmc) OpenBMC is an open software framework to build a complete Linux image for a Board Management Controller (BMC).
- [**439**Star][1y] [JS] [digitalsecurity/btlejuice](https://github.com/digitalsecurity/btlejuice) BtleJuice Bluetooth Smart (LE) Man-in-the-Middle framework
-- [**439**Star][6m] [Py] [albinowax/activescanplusplus](https://github.com/albinowax/activescanplusplus) ActiveScan++ Burp Suite Plugin
-- [**438**Star][19d] [SystemVerilog] [lowrisc/opentitan](https://github.com/lowrisc/opentitan) Open source silicon root of trust
-- [**437**Star][4y] [Java] [payatu/diva-android](https://github.com/payatu/diva-android) DIVA Android - Damn Insecure and vulnerable App for Android
-- [**437**Star][7m] [maddiestone/androidappre](https://github.com/maddiestone/androidappre) Android App Reverse Engineering Workshop
-- [**437**Star][7d] [C] [facebook/openbmc](https://github.com/facebook/openbmc) OpenBMC is an open software framework to build a complete Linux image for a Board Management Controller (BMC).
-- [**436**Star][16d] [C++] [stevemk14ebr/polyhook_2_0](https://github.com/stevemk14ebr/polyhook_2_0) C++17, x86/x64 Hooking Libary v2.0
-- [**436**Star][19d] [TypeScript] [fuzzitdev/jsfuzz](https://github.com/fuzzitdev/jsfuzz) coverage guided fuzz testing for javascript
-- [**436**Star][8m] [PowerShell] [nsacyber/event-forwarding-guidance](https://github.com/nsacyber/Event-Forwarding-Guidance) Configuration guidance for implementing collection of security relevant Windows Event Log events by using Windows Event Forwarding. #nsacyber
-- [**436**Star][2y] [magoo/redteam-plan](https://github.com/magoo/redteam-plan) Issues to consider when planning a red team exercise.
+- [**439**Star][1m] [Py] [brendan-w/python-obd](https://github.com/brendan-w/python-obd) OBD-II serial module for reading engine data
+- [**438**Star][2d] [C++] [stevemk14ebr/polyhook_2_0](https://github.com/stevemk14ebr/polyhook_2_0) C++17, x86/x64 Hooking Libary v2.0
+- [**438**Star][8m] [PS] [nsacyber/event-forwarding-guidance](https://github.com/nsacyber/Event-Forwarding-Guidance) Configuration guidance for implementing collection of security relevant Windows Event Log events by using Windows Event Forwarding. #nsacyber
+- [**438**Star][9d] [mitre/cti](https://github.com/mitre/cti) Cyber Threat Intelligence Repository expressed in STIX 2.0
+- [**438**Star][4y] [Py] [laramies/metagoofil](https://github.com/laramies/metagoofil) a tool for extracting metadata of public documents (pdf,doc,xls,ppt,etc) availables in the target websites
+- [**438**Star][24d] [Py] [j00ru/ctf-tasks](https://github.com/j00ru/ctf-tasks) An archive of low-level CTF challenges developed over the years
+- [**437**Star][5m] [Java] [graxcode/jbytemod-beta](https://github.com/graxcode/jbytemod-beta) Java bytecode editor
+- [**437**Star][2y] [PHP] [arrexel/phpbash](https://github.com/arrexel/phpbash) A semi-interactive PHP shell compressed into a single file.
+- [**436**Star][1m] [TSQL] [404notf0und/security-data-analysis-and-visualization](https://github.com/404notf0und/security-data-analysis-and-visualization) 2018-2020青年安全圈-活跃技术博主/博客
+- [**436**Star][3d] [TS] [fuzzitdev/jsfuzz](https://github.com/fuzzitdev/jsfuzz) coverage guided fuzz testing for javascript
+- [**436**Star][2y] [Py] [undeadsec/evilurl](https://github.com/undeadsec/evilurl) Generate unicode evil domains for IDN Homograph Attack and detect them.
+- [**436**Star][2y] [Vim script] [tmhedberg/simpylfold](https://github.com/tmhedberg/simpylfold) No-BS Python code folding for Vim
+- [**436**Star][2m] [Py] [romanzaikin/burpextension-whatsapp-decryption-checkpoint](https://github.com/romanzaikin/burpextension-whatsapp-decryption-checkpoint) This tool was created during our research at Checkpoint Software Technologies on Whatsapp Protocol (This repository will be updated after BlackHat 2019)
+- [**436**Star][6d] [Py] [ionelmc/python-hunter](https://github.com/ionelmc/python-hunter) Hunter is a flexible code tracing toolkit.
- [**436**Star][4y] [Py] [foxglovesec/javaunserializeexploits](https://github.com/foxglovesec/javaunserializeexploits)
-- [**436**Star][3m] [Go] [ethereumproject/go-ethereum](https://github.com/ethereumproject/go-ethereum) Go language implementation of the original/classic design of the Ethereum protocol
-- [**436**Star][1m] [Py] [brendan-w/python-obd](https://github.com/brendan-w/python-obd) OBD-II serial module for reading engine data
-- [**435**Star][2y] [Vim script] [tmhedberg/simpylfold](https://github.com/tmhedberg/simpylfold) No-BS Python code folding for Vim
-- [**435**Star][2m] [Py] [romanzaikin/burpextension-whatsapp-decryption-checkpoint](https://github.com/romanzaikin/burpextension-whatsapp-decryption-checkpoint) This tool was created during our research at Checkpoint Software Technologies on Whatsapp Protocol (This repository will be updated after BlackHat 2019)
+- [**436**Star][4m] [Go] [ethereumproject/go-ethereum](https://github.com/ethereumproject/go-ethereum) Go language implementation of the original/classic design of the Ethereum protocol
+- [**436**Star][2y] [PS] [danielbohannon/revoke-obfuscation](https://github.com/danielbohannon/revoke-obfuscation) PowerShell Obfuscation Detection Framework
+- [**436**Star][4m] [ctftraining/ctftraining](https://github.com/ctftraining/ctftraining) CTF Training 经典赛题复现环境
+- [**436**Star][2d] [JS] [ayms/node-tor](https://github.com/ayms/node-tor) Javascript implementation of the Tor (or Tor like) anonymizer project (The Onion Router)
+- [**436**Star][2m] [Py] [admintony/prepare-for-awd](https://github.com/admintony/prepare-for-awd) AWD攻防赛脚本集合
+- [**436**Star][1y] [Py] [0x4d31/honeylambda](https://github.com/0x4d31/honeylambda) honeyλ - a simple, serverless application designed to create and monitor fake HTTP endpoints (i.e. URL honeytokens) automatically, on top of AWS Lambda and Amazon API Gateway
- [**435**Star][11m] [Py] [neohapsis/bbqsql](https://github.com/neohapsis/bbqsql) SQL Injection Exploitation Tool
- [**435**Star][3y] [C] [mncoppola/suterusu](https://github.com/mncoppola/suterusu) An LKM rootkit targeting Linux 2.6/3.x on x86(_64), and ARM
-- [**435**Star][4y] [Py] [laramies/metagoofil](https://github.com/laramies/metagoofil) Metadata harvester
-- [**435**Star][25d] [Py] [ionelmc/python-hunter](https://github.com/ionelmc/python-hunter) Hunter is a flexible code tracing toolkit.
-- [**435**Star][10d] [Py] [google/vulncode-db](https://github.com/google/vulncode-db) a database for vulnerabilities and their corresponding source code if available
-- [**435**Star][1y] [Py] [0x4d31/honeylambda](https://github.com/0x4d31/honeylambda) honeyλ - a simple, serverless application designed to create and monitor fake HTTP endpoints (i.e. URL honeytokens) automatically, on top of AWS Lambda and Amazon API Gateway
- [**434**Star][4m] [Py] [ridter/redis-rce](https://github.com/ridter/redis-rce) Redis 4.x/5.x RCE
-- [**434**Star][7d] [mitre/cti](https://github.com/mitre/cti) Cyber Threat Intelligence Repository expressed in STIX 2.0
-- [**434**Star][22d] [Py] [j00ru/ctf-tasks](https://github.com/j00ru/ctf-tasks) An archive of low-level CTF challenges developed over the years
+- [**434**Star][4m] [Go] [coyim/coyim](https://github.com/coyim/coyim) a safe and secure chat client
- [**434**Star][8m] [Go] [client9/ipcat](https://github.com/client9/ipcat) Categorization of IP Addresses
-- [**434**Star][2y] [PHP] [arrexel/phpbash](https://github.com/arrexel/phpbash) A semi-interactive PHP shell compressed into a single file.
-- [**433**Star][2y] [Py] [undeadsec/evilurl](https://github.com/undeadsec/evilurl) Generate unicode evil domains for IDN Homograph Attack and detect them.
-- [**433**Star][5m] [Java] [graxcode/jbytemod-beta](https://github.com/graxcode/jbytemod-beta) Java bytecode editor
-- [**433**Star][2y] [PowerShell] [danielbohannon/revoke-obfuscation](https://github.com/danielbohannon/revoke-obfuscation) PowerShell Obfuscation Detection Framework
-- [**433**Star][4m] [Go] [coyim/coyim](https://github.com/coyim/coyim) a safe and secure chat client
-- [**433**Star][1m] [JS] [ayms/node-tor](https://github.com/ayms/node-tor) Javascript implementation of the Tor (or Tor like) anonymizer project (The Onion Router)
-- [**432**Star][3y] [Py] [secureworks/dcept](https://github.com/secureworks/dcept) A tool for deploying and detecting use of Active Directory honeytokens
-- [**432**Star][8y] [C++] [moxie0/sslsniff](https://github.com/moxie0/sslsniff) A tool for automated MITM attacks on SSL connections.
-- [**432**Star][1m] [Go] [gorilla/securecookie](https://github.com/gorilla/securecookie) Package gorilla/securecookie encodes and decodes authenticated and optionally encrypted cookie values for Go web applications.
+- [**433**Star][3y] [Py] [secureworks/dcept](https://github.com/secureworks/dcept) A tool for deploying and detecting use of Active Directory honeytokens
+- [**433**Star][8y] [C++] [moxie0/sslsniff](https://github.com/moxie0/sslsniff) A tool for automated MITM attacks on SSL connections.
+- [**432**Star][8m] [Py] [aws-samples/aws-waf-sample](https://github.com/aws-samples/aws-waf-sample) This repository contains example scripts and sets of rules for the AWS WAF service. Please be aware that the applicability of these examples to specific workloads may vary.
+- [**432**Star][7m] [Ruby] [tidesec/fuzzscanner](https://github.com/tidesec/fuzzscanner) 一个主要用于信息搜集的工具集,主要是用于对网站子域名、开放端口、端口指纹、c段地址、敏感目录等信息进行批量搜集。
+- [**432**Star][7y] [C] [juuso/keychaindump](https://github.com/juuso/keychaindump) A proof-of-concept tool for reading OS X keychain passwords
+- [**432**Star][12m] [Shell] [jactor-sue/deepin-apps-installation](https://github.com/jactor-sue/deepin-apps-installation) 本仓库介绍如何在基于Ubuntu的系统上安装Deepin移植的软件
+- [**432**Star][2m] [Go] [gorilla/securecookie](https://github.com/gorilla/securecookie) Package gorilla/securecookie encodes and decodes authenticated and optionally encrypted cookie values for Go web applications.
- [**432**Star][2m] [Ruby] [aderyabin/sniffer](https://github.com/aderyabin/sniffer) Log and Analyze Outgoing HTTP Requests
- [**431**Star][1y] [HTML] [dnfwah/dnfwah](https://github.com/DNFWAH/DNFWAH) It's an ezine: DO NOT FUCK WITH A HACKER
-- [**431**Star][1m] [Py] [polymorf/findcrypt-yara](https://github.com/polymorf/findcrypt-yara) IDA pro plugin to find crypto constants (and more)
-- [**431**Star][7y] [C] [juuso/keychaindump](https://github.com/juuso/keychaindump) A proof-of-concept tool for reading OS X keychain passwords
+- [**431**Star][2m] [Py] [pan-unit42/public_tools](https://github.com/pan-unit42/public_tools)
+- [**431**Star][9m] [Go] [amyangxyz/assassingo](https://github.com/amyangxyz/assassingo) An extensible and concurrency pentest framework in Go, also with WebGUI
- [**431**Star][4y] [C] [alonho/pytrace](https://github.com/alonho/pytrace) pytrace is a fast python tracer. it records function calls, arguments and return values. can be used for debugging and profiling.
-- [**430**Star][1m] [TSQL] [404notf0und/security-data-analysis-and-visualization](https://github.com/404notf0und/security-data-analysis-and-visualization) 2018-2020青年安全圈-活跃技术博主/博客
+- [**430**Star][2d] [Py] [w-digital-scanner/w13scan](https://github.com/w-digital-scanner/w13scan) Passive Security Scanner (被动式安全扫描器)
+- [**430**Star][26d] [C] [guardianproject/orbot](https://github.com/guardianproject/orbot) The Github home of Orbot: Tor on Android (Also available on gitlab!)
+- [**430**Star][2m] [Py] [superhedgy/attacksurfacemapper](https://github.com/superhedgy/attacksurfacemapper) AttackSurfaceMapper is a tool that aims to automate the reconnaissance process.
- [**430**Star][2y] [C] [siguza/iohideous](https://github.com/siguza/iohideous) IOHIDFamily 0day
-- [**430**Star][4y] [JS] [mozilla/scanjs](https://github.com/mozilla/scanjs) [DEPRECATED] Static analysis tool for javascript code.
-- [**430**Star][6m] [Pascal] [mojtabatajik/robber](https://github.com/mojtabatajik/robber) Robber is open source tool for finding executables prone to DLL hijacking
+- [**430**Star][4y] [JS] [mozilla/scanjs](https://github.com/mozilla/scanjs) Static analysis tool for javascript code.
+- [**430**Star][7m] [Pascal] [mojtabatajik/robber](https://github.com/mojtabatajik/robber) Robber is open source tool for finding executables prone to DLL hijacking
- [**430**Star][1y] [meitar/awesome-lockpicking](https://github.com/meitar/awesome-lockpicking) A curated list of awesome guides, tools, and other resources relating to the security and compromise of locks, safes, and keys.
- [**430**Star][2y] [Py] [lightbulb-framework/lightbulb-framework](https://github.com/lightbulb-framework/lightbulb-framework) Tools for auditing WAFS
-- [**430**Star][2y] [Objective-C] [keith/hopper-swift-demangle](https://github.com/keith/hopper-swift-demangle) A Hopper plugin for demangle Swift symbols
+- [**430**Star][2y] [ObjC] [keith/hopper-swift-demangle](https://github.com/keith/hopper-swift-demangle) A Hopper plugin for demangle Swift symbols
+- [**430**Star][4m] [Py] [crocs-muni/roca](https://github.com/crocs-muni/roca) ROCA: Infineon RSA key vulnerability
- [**430**Star][11m] [captainarash/the_holy_book_of_x86](https://github.com/captainarash/the_holy_book_of_x86) A simple guide to x86 architecture, assembly, memory management, paging, segmentation, SMM, BIOS....
-- [**430**Star][2m] [Py] [admintony/prepare-for-awd](https://github.com/admintony/prepare-for-awd) AWD攻防赛脚本集合
-- [**429**Star][2m] [Java] [aosp-mirror/platform_dalvik](https://github.com/aosp-mirror/platform_dalvik)
-- [**429**Star][8m] [Py] [aws-samples/aws-waf-sample](https://github.com/aws-samples/aws-waf-sample) This repository contains example scripts and sets of rules for the AWS WAF service. Please be aware that the applicability of these examples to specific workloads may vary.
-- [**429**Star][26d] [Py] [stamparm/fetch-some-proxies](https://github.com/stamparm/fetch-some-proxies) Simple Python script for fetching "some" (usable) proxies
-- [**429**Star][4m] [ctftraining/ctftraining](https://github.com/ctftraining/ctftraining) CTF Training 经典赛题复现环境
-- [**429**Star][4m] [Py] [crocs-muni/roca](https://github.com/crocs-muni/roca) ROCA: Infineon RSA key vulnerability
-- [**428**Star][3m] [Perl] [wireghoul/dotdotpwn](https://github.com/wireghoul/dotdotpwn) DotDotPwn - The Directory Traversal Fuzzer
+- [**430**Star][28d] [C#] [0xd4d/iced](https://github.com/0xd4d/iced) x86/x64 disassembler, instruction decoder & encoder
+- [**429**Star][1m] [Java] [aosp-mirror/platform_dalvik](https://github.com/aosp-mirror/platform_dalvik)
+- [**429**Star][28d] [Py] [stamparm/fetch-some-proxies](https://github.com/stamparm/fetch-some-proxies) Simple Python script for fetching "some" (usable) proxies
+- [**428**Star][1m] [C] [sciresm/hactool](https://github.com/sciresm/hactool) hactool is a tool to view information about, decrypt, and extract common file formats for the Nintendo Switch, especially Nintendo Content Archives.
+- [**428**Star][3d] [C++] [ridiculousfish/libdivide](https://github.com/ridiculousfish/libdivide) Official git repository for libdivide: optimized integer division
- [**428**Star][3m] [Py] [payatu/tiredful-api](https://github.com/payatu/tiredful-api) An intentionally designed broken web application based on REST API.
-- [**428**Star][2y] [Objective-C] [jackrex/fakewechatloc](https://github.com/jackrex/fakewechatloc) 手把手教你制作一款iOS越狱App
-- [**428**Star][1m] [Go] [cbeuw/cloak](https://github.com/cbeuw/cloak) A universal pluggable transport utilising TLS domain fronting to evade deep packet inspection and active probing from state-level adversaries
-- [**428**Star][1m] [Jupyter Notebook] [borealisai/advertorch](https://github.com/borealisai/advertorch) A Toolbox for Adversarial Robustness Research
-- [**427**Star][1m] [C] [sciresm/hactool](https://github.com/sciresm/hactool) hactool is a tool to view information about, decrypt, and extract common file formats for the Nintendo Switch, especially Nintendo Content Archives.
-- [**427**Star][2m] [Py] [obsidianforensics/hindsight](https://github.com/obsidianforensics/hindsight) Internet history forensics for Google Chrome/Chromium
-- [**427**Star][26d] [C#] [0xd4d/iced](https://github.com/0xd4d/iced) x86/x64 disassembler, instruction decoder & encoder
-- [**426**Star][7m] [Ruby] [tidesec/fuzzscanner](https://github.com/tidesec/fuzzscanner) 一个主要用于信息搜集的工具集,主要是用于对网站子域名、开放端口、端口指纹、c段地址、敏感目录等信息进行批量搜集。
-- [**426**Star][1y] [C] [novicelive/research-rootkit](https://github.com/novicelive/research-rootkit) LibZeroEvil & the Research Rootkit project.
-- [**426**Star][11m] [Shell] [jactor-sue/deepin-apps-installation](https://github.com/jactor-sue/deepin-apps-installation) 本仓库介绍如何在基于Ubuntu的系统上安装Deepin移植的软件
-- [**426**Star][1y] [Py] [evilsocket/smali_emulator](https://github.com/evilsocket/smali_emulator) This software will emulate a smali source file generated by apktool.
-- [**426**Star][7d] [Shell] [energizedprotection/block](https://github.com/energizedprotection/block) Let's make an annoyance free, better open internet, altogether!
-- [**426**Star][10m] [Py] [appsecco/bugcrowd-levelup-subdomain-enumeration](https://github.com/appsecco/bugcrowd-levelup-subdomain-enumeration) This repository contains all the material from the talk "Esoteric sub-domain enumeration techniques" given at Bugcrowd LevelUp 2017 virtual conference
-- [**425**Star][2m] [Py] [pan-unit42/public_tools](https://github.com/pan-unit42/public_tools)
-- [**425**Star][2m] [Py] [nullhypothesis/exitmap](https://github.com/nullhypothesis/exitmap) A fast and modular scanner for Tor exit relays.
-- [**424**Star][4y] [HTML] [praetorian-code/dvrf](https://github.com/praetorian-code/DVRF) The Damn Vulnerable Router Firmware Project
-- [**424**Star][2m] [Py] [superhedgy/attacksurfacemapper](https://github.com/superhedgy/attacksurfacemapper) AttackSurfaceMapper is a tool that aims to automate the reconnaissance process.
-- [**424**Star][2m] [C++] [ridiculousfish/libdivide](https://github.com/ridiculousfish/libdivide) Official git repository for libdivide: optimized integer division
-- [**424**Star][7d] [C] [newaetech/chipwhisperer](https://github.com/newaetech/chipwhisperer) thecomplete open-source toolchain for side-channel power analysis and glitchingattacks
+- [**428**Star][2m] [Py] [obsidianforensics/hindsight](https://github.com/obsidianforensics/hindsight) Internet history forensics for Google Chrome/Chromium
+- [**428**Star][2y] [ObjC] [jackrex/fakewechatloc](https://github.com/jackrex/fakewechatloc) 手把手教你制作一款iOS越狱App
+- [**428**Star][2y] [Py] [evilsocket/smali_emulator](https://github.com/evilsocket/smali_emulator) This software will emulate a smali source file generated by apktool.
+- [**428**Star][2y] [JS] [bradoyler/xmr-miner](https://github.com/bradoyler/xmr-miner) Web-based Cryptocurrency miner, built with Vue.js
+- [**428**Star][10m] [Py] [appsecco/bugcrowd-levelup-subdomain-enumeration](https://github.com/appsecco/bugcrowd-levelup-subdomain-enumeration) This repository contains all the material from the talk "Esoteric sub-domain enumeration techniques" given at Bugcrowd LevelUp 2017 virtual conference
+- [**427**Star][3m] [Perl] [wireghoul/dotdotpwn](https://github.com/wireghoul/dotdotpwn) DotDotPwn - The Directory Traversal Fuzzer
+- [**427**Star][1y] [C] [novicelive/research-rootkit](https://github.com/novicelive/research-rootkit) LibZeroEvil & the Research Rootkit project.
+- [**427**Star][8d] [TeX] [corkami/docs](https://github.com/corkami/docs) documentations, slides decks...
+- [**426**Star][2m] [Py] [nullhypothesis/exitmap](https://github.com/nullhypothesis/exitmap) A fast and modular scanner for Tor exit relays.
+- [**426**Star][1y] [Py] [endgameinc/gym-malware](https://github.com/endgameinc/gym-malware) a malware manipulation environment for OpenAI's gym
+- [**425**Star][4y] [HTML] [praetorian-code/dvrf](https://github.com/praetorian-code/DVRF) The Damn Vulnerable Router Firmware Project
+- [**425**Star][2y] [rsmudge/malleable-c2-profiles](https://github.com/rsmudge/malleable-c2-profiles) Malleable C2 is a domain specific language to redefine indicators in Beacon's communication. This repository is a collection of Malleable C2 profiles that you may use. These profiles work with Cobalt Strike 3.x.
+- [**425**Star][11m] [Py] [lordamit/brightness](https://github.com/lordamit/brightness) Brightness Controller
+- [**424**Star][7y] [C] [spinkham/skipfish](https://github.com/spinkham/skipfish) Web application security scanner created by lcamtuf for google - Unofficial Mirror
+- [**424**Star][3m] [PS] [p3nt4/invoke-socksproxy](https://github.com/p3nt4/invoke-socksproxy) Socks proxy server using powershell. Supports local and reverse connections for pivoting.
+- [**424**Star][3d] [Go] [openshift/odo](https://github.com/openshift/odo) OpenShift Do - Fast, iterative OpenShift development
+- [**424**Star][9d] [C] [newaetech/chipwhisperer](https://github.com/newaetech/chipwhisperer) thecomplete open-source toolchain for side-channel power analysis and glitchingattacks
+- [**424**Star][3m] [JS] [lolimay/shadowsocks-deepin](https://github.com/lolimay/shadowsocks-deepin)
+- [**424**Star][3m] [Py] [jotygill/openpyn-nordvpn](https://github.com/jotygill/openpyn-nordvpn) Easily connect to and switch between, OpenVPN servers hosted by NordVPN on Linux (+patch leakes)
- [**424**Star][4y] [C++] [jonathansalwan/pintools](https://github.com/jonathansalwan/pintools) Pintool example and PoC for dynamic binary analysis
-- [**423**Star][7y] [C] [spinkham/skipfish](https://github.com/spinkham/skipfish) Web application security scanner created by lcamtuf for google - Unofficial Mirror
-- [**423**Star][7d] [Go] [openshift/odo](https://github.com/openshift/odo) OpenShift Do - Fast, iterative OpenShift development
+- [**424**Star][5m] [iovisor/bpf-docs](https://github.com/iovisor/bpf-docs) Presentations and docs
+- [**424**Star][2d] [Shell] [energizedprotection/block](https://github.com/energizedprotection/block) Let's make an annoyance free, better open internet, altogether!
+- [**424**Star][7d] [Java] [dependencytrack/dependency-track](https://github.com/dependencytrack/dependency-track) Dependency-Track is an intelligent Supply Chain Component Analysis platform that allows organizations to identify and reduce risk from the use of third-party and open source components.
+- [**423**Star][1y] [PHP] [ysrc/webshell-sample](https://github.com/ysrc/webshell-sample) 收集自网络各处的 webshell 样本,用于测试 webshell 扫描器检测率。
+- [**423**Star][3d] [xuanhun/hackingresource](https://github.com/xuanhun/hackingresource) “玄魂工作室--安全圈” 知识星球内资源汇总
+- [**423**Star][1y] [ring04h/papers](https://github.com/ring04h/papers) my security summit papers
+- [**423**Star][4m] [re4lity/hacking-with-golang](https://github.com/re4lity/hacking-with-golang) Golang安全资源合集
- [**423**Star][3y] [Makefile] [mindmac/androideagleeye](https://github.com/mindmac/androideagleeye) An Xposed and adbi based module which is capable of hooking both Java and Native methods targeting Android OS.
-- [**423**Star][11m] [Py] [lordamit/brightness](https://github.com/lordamit/brightness) Brightness Controller
- [**423**Star][10m] [C] [hardenedlinux/linux-exploit-development-tutorial](https://github.com/hardenedlinux/linux-exploit-development-tutorial) a series tutorial for linux exploit development to newbie.
-- [**423**Star][1y] [Py] [endgameinc/gym-malware](https://github.com/endgameinc/gym-malware) a malware manipulation environment for OpenAI's gym
-- [**423**Star][7d] [TeX] [corkami/docs](https://github.com/corkami/docs) documentations, slides decks...
-- [**422**Star][7d] [PowerShell] [mantvydasb/redteam-tactics-and-techniques](https://github.com/mantvydasb/RedTeam-Tactics-and-Techniques) Red Teaming Tactics and Techniques
-- [**422**Star][2m] [Py] [w-digital-scanner/w13scan](https://github.com/w-digital-scanner/w13scan) Passive Security Scanner (被动式安全扫描器)
+- [**423**Star][4m] [Shell] [ashishb/android-malware](https://github.com/ashishb/android-malware) Collection of android malware samples
+- [**423**Star][30d] [Awk] [alecmuffett/eotk](https://github.com/alecmuffett/eotk) Enterprise Onion Toolkit
+- [**422**Star][2y] [fwgs/cs16-client](https://github.com/fwgs/cs16-client) Counter-Strike 1.6 rewritten client.dll. Without VGUI, ParticleMan and ecology friendy.
- [**422**Star][1y] [Py] [shmilylty/cheetah](https://github.com/shmilylty/cheetah) a very fast brute force webshell password tool
-- [**422**Star][2y] [Go] [subgraph/oz](https://github.com/subgraph/oz) a sandboxing system targeting everyday workstation applications
-- [**422**Star][1y] [ring04h/papers](https://github.com/ring04h/papers) my security summit papers
-- [**422**Star][3m] [PowerShell] [p3nt4/invoke-socksproxy](https://github.com/p3nt4/invoke-socksproxy) Socks proxy server using powershell. Supports local and reverse connections for pivoting.
-- [**422**Star][3y] [Py] [mengskysama/shadowsocks-rm](https://github.com/mengskysama/shadowsocks-rm) A fast tunnel proxy that helps you bypass firewalls
+- [**422**Star][4m] [Go] [yl2chen/cidranger](https://github.com/yl2chen/cidranger) Fast IP to CIDR lookup in Golang
+- [**422**Star][2y] [Lua] [xsec-lab/x-waf](https://github.com/xsec-lab/x-waf) 适用于中小企业的云waf
- [**422**Star][10m] [Py] [d4vinci/cuteit](https://github.com/d4vinci/cuteit) IP obfuscator made to make a malicious ip a bit cuter
-- [**422**Star][4m] [Shell] [ashishb/android-malware](https://github.com/ashishb/android-malware) Collection of android malware samples
-- [**421**Star][2y] [fwgs/cs16-client](https://github.com/fwgs/cs16-client) Counter-Strike 1.6 rewritten client.dll. Without VGUI, ParticleMan and ecology friendy.
-- [**421**Star][28d] [Awk] [alecmuffett/eotk](https://github.com/alecmuffett/eotk) Enterprise Onion Toolkit
-- [**420**Star][3y] [riusksk/vul_war](https://github.com/riusksk/vul_war) 《漏洞战争:软件漏洞分析精要》配套资料
-- [**420**Star][1y] [PHP] [ysrc/webshell-sample](https://github.com/ysrc/webshell-sample) 收集自网络各处的 webshell 样本,用于测试 webshell 扫描器检测率。
-- [**420**Star][4m] [Go] [yl2chen/cidranger](https://github.com/yl2chen/cidranger) Fast IP to CIDR lookup in Golang
-- [**420**Star][2y] [Lua] [xsec-lab/x-waf](https://github.com/xsec-lab/x-waf) 适用于中小企业的云waf
-- [**420**Star][2y] [C++] [unamer/cve-2018-8120](https://github.com/unamer/cve-2018-8120) CVE-2018-8120 Windows LPE exploit
-- [**420**Star][13d] [Java] [dependencytrack/dependency-track](https://github.com/dependencytrack/dependency-track) Dependency-Track is an intelligent Supply Chain Component Analysis platform that allows organizations to identify and reduce risk from the use of third-party and open source components.
-- [**419**Star][2y] [rsmudge/malleable-c2-profiles](https://github.com/rsmudge/malleable-c2-profiles) Malleable C2 is a domain specific language to redefine indicators in Beacon's communication. This repository is a collection of Malleable C2 profiles that you may use. These profiles work with Cobalt Strike 3.x.
-- [**419**Star][3m] [JS] [lolimay/shadowsocks-deepin](https://github.com/lolimay/shadowsocks-deepin)
-- [**419**Star][3m] [Shell] [jsamr/bootiso](https://github.com/jsamr/bootiso) A bash script to securely create a bootable USB device from one ISO file. Just curl it, chmod it and go!
-- [**419**Star][5m] [iovisor/bpf-docs](https://github.com/iovisor/bpf-docs) Presentations and docs
-- [**419**Star][4y] [Shell] [imagetragick/pocs](https://github.com/imagetragick/pocs) Proof of Concepts for CVE-2016–3714
-- [**419**Star][1y] [JS] [ciscocsirt/gosint](https://github.com/ciscocsirt/gosint) collecting, processing, and exporting high quality indicators of compromise (IOCs).
-- [**418**Star][17d] [C] [mcgill-dmas/kam1n0-community](https://github.com/McGill-DMaS/Kam1n0-Community) a scalable assembly management and analysis platform
+- [**421**Star][19d] [C] [mcgill-dmas/kam1n0-community](https://github.com/McGill-DMaS/Kam1n0-Community) a scalable assembly management and analysis platform
- [IDA插件](https://github.com/McGill-DMaS/Kam1n0-Community/tree/master2.x/kam1n0-clients/ida-plugin)
- [kam1n0](https://github.com/McGill-DMaS/Kam1n0-Community/tree/master2.x/kam1n0)
+- [**421**Star][3y] [riusksk/vul_war](https://github.com/riusksk/vul_war) 《漏洞战争:软件漏洞分析精要》配套资料
+- [**421**Star][11m] [Lua] [w3h/icsmaster](https://github.com/w3h/icsmaster) ICS/SCADA Security Resource
+- [**421**Star][2y] [C++] [unamer/cve-2018-8120](https://github.com/unamer/cve-2018-8120) CVE-2018-8120 Windows LPE exploit
+- [**421**Star][1y] [Py] [thehackingsage/hacktronian](https://github.com/thehackingsage/hacktronian) All in One Hacking Tool for Linux & Android
+- [**421**Star][2y] [Go] [subgraph/oz](https://github.com/subgraph/oz) a sandboxing system targeting everyday workstation applications
+- [**421**Star][3y] [Py] [mengskysama/shadowsocks-rm](https://github.com/mengskysama/shadowsocks-rm) A fast tunnel proxy that helps you bypass firewalls
+- [**421**Star][2m] [Rust] [kpcyrd/sniffglue](https://github.com/kpcyrd/sniffglue) Secure multithreaded packet sniffer
+- [**421**Star][1y] [JS] [ciscocsirt/gosint](https://github.com/ciscocsirt/gosint) collecting, processing, and exporting high quality indicators of compromise (IOCs).
+- [**420**Star][5m] [Java] [bit4woo/recaptcha](https://github.com/bit4woo/recaptcha) reCAPTCHA = REcognize CAPTCHA: A Burp Suite Extender that recognize CAPTCHA and use for intruder payload 自动识别图形验证码并用于burp intruder爆破模块的插件
+- [**420**Star][3m] [Shell] [jsamr/bootiso](https://github.com/jsamr/bootiso) A bash script to securely create a bootable USB device from one ISO file. Just curl it, chmod it and go!
+- [**420**Star][3m] [jack-liang/kalitools](https://github.com/jack-liang/kalitools) Kali Linux工具清单
+- [**420**Star][2m] [C] [desowin/usbpcap](https://github.com/desowin/usbpcap) USB packet capture for Windows
+- [**419**Star][4y] [Shell] [imagetragick/pocs](https://github.com/imagetragick/pocs) Proof of Concepts for CVE-2016–3714
+- [**419**Star][1y] [Py] [ekultek/pybelt](https://github.com/ekultek/pybelt) The hackers tool belt
+- [**419**Star][16d] [Perl] [chinarulezzz/pixload](https://github.com/chinarulezzz/pixload) Image Payload Creating/Injecting tools
+- [**419**Star][4y] [ObjC] [asido/systemmonitor](https://github.com/asido/systemmonitor) iOS application providing you all information about your device - hardware, operating system, processor, memory, GPU, network interface, storage and battery, including OpenGL powered visual representation in real time.
+- [**419**Star][5m] [C] [anssi-fr/ad-control-paths](https://github.com/anssi-fr/ad-control-paths) Active Directory Control Paths auditing and graphing tools
- [**418**Star][2y] [opentechfund/secure-email](https://github.com/opentechfund/secure-email) Overview of projects working on next-generation secure email.
+- [**418**Star][11m] [Shell] [nilotpalbiswas/auto-root-exploit](https://github.com/nilotpalbiswas/auto-root-exploit) Auto Root Exploit Tool
- [**418**Star][3m] [Py] [misterch0c/malsploitbase](https://github.com/misterch0c/malsploitbase) Malware exploits
-- [**418**Star][2m] [C] [desowin/usbpcap](https://github.com/desowin/usbpcap) USB packet capture for Windows
-- [**418**Star][14d] [Perl] [chinarulezzz/pixload](https://github.com/chinarulezzz/pixload) Image Payload Creating/Injecting tools
-- [**418**Star][4y] [Objective-C] [asido/systemmonitor](https://github.com/asido/systemmonitor) iOS application providing you all information about your device - hardware, operating system, processor, memory, GPU, network interface, storage and battery, including OpenGL powered visual representation in real time.
-- [**417**Star][5m] [Java] [bit4woo/recaptcha](https://github.com/bit4woo/recaptcha) reCAPTCHA = REcognize CAPTCHA: A Burp Suite Extender that recognize CAPTCHA and use for intruder payload 自动识别图形验证码并用于burp intruder爆破模块的插件
-- [**417**Star][11m] [Shell] [nilotpalbiswas/auto-root-exploit](https://github.com/nilotpalbiswas/auto-root-exploit) Auto Root Exploit Tool
-- [**417**Star][1y] [Py] [ekultek/pybelt](https://github.com/ekultek/pybelt) The hackers tool belt
-- [**417**Star][3m] [C] [deeponion/deeponion-legacy](https://github.com/deeponion/deeponion-legacy) Official Source Repo for DeepOnion - Anonymous Cryptocurrency on TOR Network (legacy)
+- [**418**Star][1y] [Go] [kragniz/tor-controller](https://github.com/kragniz/tor-controller) Run Tor onion services on Kubernetes
+- [**418**Star][11m] [C] [jpr5/ngrep](https://github.com/jpr5/ngrep) ngrep is like GNU grep applied to the network layer. It's a PCAP-based tool that allows you to specify an extended regular or hexadecimal expression to match against data payloads of packets. It understands many kinds of protocols, including IPv4/6, TCP, UDP, ICMPv4/6, IGMP and Raw, across a wide variety of interface types, and understands BPF f…
+- [**418**Star][3m] [Py] [honeynet/droidbot](https://github.com/honeynet/droidbot) A lightweight test input generator for Android. Similar to Monkey, but with more intelligence and cool features!
+- [**418**Star][10d] [dropsofzut/awesome-security-weixin-official-accounts](https://github.com/dropsofzut/awesome-security-weixin-official-accounts) 网络安全类公众号推荐,欢迎大家推荐
+- [**418**Star][3y] [Py] [chishaxie/blindwatermark](https://github.com/chishaxie/blindwatermark) 盲水印 by python
+- [**418**Star][7m] [7kbstorm/7kbscan-webpathbrute](https://github.com/7kbstorm/7kbscan-webpathbrute) Web Path Brute Discovery
+- [**417**Star][1m] [Kotlin] [hmbsbige/shadowsocksr-android](https://github.com/hmbsbige/shadowsocksr-android) A ShadowsocksR client for Android, written in Kotlin.
+- [**417**Star][1y] [Py] [veekxt/v2ray-template](https://github.com/veekxt/v2ray-template) v2ray 模板,v2ray 配置生成工具
+- [**417**Star][2m] [C] [openresty/luajit2](https://github.com/openresty/luajit2) OpenResty's Branch of LuaJIT 2
+- [**417**Star][5m] [C] [mykter/afl-training](https://github.com/mykter/afl-training) Exercises to learn how to fuzz with American Fuzzy Lop
+- [**417**Star][7d] [C++] [simonkagstrom/kcov](https://github.com/simonkagstrom/kcov) Code coverage tool for compiled programs, Python and Bash which uses debugging information to collect and report data without special compilation options
+- [**417**Star][11m] [ObjC] [mxabc/devdatatool](https://github.com/mxabc/devdatatool) 编码转换、摘要(hash)、加解密(MD5、SHA、SHA3、SM3、HMAC、DES、3DES、AES、SM4)
+- [**417**Star][14d] [PHP] [mm0r1/exploits](https://github.com/mm0r1/exploits) Pwn stuff.
+- [**417**Star][3y] [C++] [malwares/botnet](https://github.com/malwares/botnet) Botnet
+- [**417**Star][2d] [C] [deeponion/deeponion-legacy](https://github.com/deeponion/deeponion-legacy) Official Source Repo for DeepOnion - Anonymous Cryptocurrency on TOR Network (legacy)
+- [**417**Star][1y] [JS] [chokcoco/httphijack](https://github.com/chokcoco/httphijack) 使用Javascript实现前端防御http劫持及防御XSS攻击,并且对可疑攻击进行上报
+- [**417**Star][8m] [Py] [awslabs/aws-waf-security-automations](https://github.com/awslabs/aws-waf-security-automations) This solution automatically deploys a single web access control list (web ACL) with a set of AWS WAF rules designed to filter common web-based attacks.
- [**416**Star][3m] [Rust] [exodusvpn/exodus](https://github.com/ExodusVPN/exodus) network proxy and tunnel (VPN)
-- [**416**Star][20d] [xuanhun/hackingresource](https://github.com/xuanhun/hackingresource) “玄魂工作室--安全圈” 知识星球内资源汇总
-- [**416**Star][3y] [C++] [malwares/botnet](https://github.com/malwares/botnet) Botnet
-- [**416**Star][3m] [C] [frida/frida-python](https://github.com/frida/frida-python) Frida Python bindings
+- [**416**Star][3y] [Py] [x3omdax/penbox](https://github.com/x3omdax/penbox) A Penetration Testing Framework - The Tool With All The Tools
+- [**416**Star][10m] [Py] [powerscript/katanaframework](https://github.com/powerscript/katanaframework) a framework written in python for making penetration testing, based on a simple and comprehensive structure for anyone to use, modify and share
+- [**416**Star][6d] [C] [frida/frida-python](https://github.com/frida/frida-python) Frida Python bindings
- [**416**Star][2y] [JS] [evilcos/xssor](https://github.com/evilcos/xssor) XSSOR:方便XSS与CSRF的工具,
-- [**416**Star][5m] [C] [anssi-fr/ad-control-paths](https://github.com/anssi-fr/ad-control-paths) Active Directory Control Paths auditing and graphing tools
- [**415**Star][1y] [zhengmin1989/greatiosjailbreakmaterial](https://github.com/zhengmin1989/greatiosjailbreakmaterial) Great iOS Jailbreak Material! - I read hundreds of papers and PPTs. Only list the most useful materials here!
-- [**415**Star][3y] [Py] [x3omdax/penbox](https://github.com/x3omdax/penbox) PenBox - A Penetration Testing Framework - The Tool With All The Tools , The Hacker's Repo
-- [**415**Star][2m] [C++] [simonkagstrom/kcov](https://github.com/simonkagstrom/kcov) Code coverage tool for compiled programs, Python and Bash which uses debugging information to collect and report data without special compilation options
+- [**415**Star][8m] [Shell] [sroberts/awesome-iocs](https://github.com/sroberts/awesome-iocs) A collection of sources of indicators of compromise.
- [**415**Star][5m] [preos-security/awesome-firmware-security](https://github.com/preos-security/awesome-firmware-security) Awesome Firmware Security & Other Helpful Documents
-- [**415**Star][10m] [Py] [powerscript/katanaframework](https://github.com/powerscript/katanaframework) The New Hacking Framework
-- [**415**Star][12d] [PHP] [mm0r1/exploits](https://github.com/mm0r1/exploits) Pwn stuff.
-- [**415**Star][14d] [C] [libvmi/libvmi](https://github.com/libvmi/libvmi) The official home of the LibVMI project is at
-- [**415**Star][1y] [Go] [kragniz/tor-controller](https://github.com/kragniz/tor-controller) Run Tor onion services on Kubernetes
-- [**415**Star][11m] [C] [jpr5/ngrep](https://github.com/jpr5/ngrep) ngrep is like GNU grep applied to the network layer. It's a PCAP-based tool that allows you to specify an extended regular or hexadecimal expression to match against data payloads of packets. It understands many kinds of protocols, including IPv4/6, TCP, UDP, ICMPv4/6, IGMP and Raw, across a wide variety of interface types, and understands BPF f…
-- [**415**Star][3m] [Py] [honeynet/droidbot](https://github.com/honeynet/droidbot) A lightweight test input generator for Android. Similar to Monkey, but with more intelligence and cool features!
-- [**415**Star][1y] [JS] [chokcoco/httphijack](https://github.com/chokcoco/httphijack) 使用Javascript实现前端防御http劫持及防御XSS攻击,并且对可疑攻击进行上报
-- [**415**Star][7m] [Py] [awslabs/aws-waf-security-automations](https://github.com/awslabs/aws-waf-security-automations) This solution automatically deploys a single web access control list (web ACL) with a set of AWS WAF rules designed to filter common web-based attacks.
-- [**414**Star][11m] [Lua] [w3h/icsmaster](https://github.com/w3h/icsmaster) ICS/SCADA Security Resource
+- [**415**Star][3m] [C] [odzhan/injection](https://github.com/odzhan/injection) Windows process injection methods
+- [**415**Star][3d] [C] [libvmi/libvmi](https://github.com/libvmi/libvmi) The official home of the LibVMI project is at
+- [**415**Star][2d] [Py] [graalvm/graalpython](https://github.com/graalvm/graalpython) A Python 3 implementation built on GraalVM
+- [**415**Star][2d] [Py] [forensicartifacts/artifacts](https://github.com/forensicartifacts/artifacts) Digital Forensics Artifact Repository
+- [**415**Star][3y] [Py] [ciscocsirt/malspider](https://github.com/ciscocsirt/malspider) Malspider is a web spidering framework that detects characteristics of web compromises.
+- [**414**Star][10m] [Py] [autocracy/python-ipy](https://github.com/autocracy/python-ipy) IPy are a Python class and tools for handling of IPv4 and IPv6 addresses and networks. It is similar to Net::IP Perl module.
+- [**414**Star][11d] [hunters-forge/ossem](https://github.com/hunters-forge/OSSEM) Open Source Security Events Metadata (OSSEM)
+- [**414**Star][3m] [Scala] [thehive-project/cortex](https://github.com/TheHive-Project/Cortex) a Powerful Observable Analysis and Active Response Engine
+- [**414**Star][5d] [Shell] [thesecondsun/bashark](https://github.com/thesecondsun/bashark) Bash post exploitation toolkit
+- [**414**Star][23d] [Py] [sibson/redbeat](https://github.com/sibson/redbeat) RedBeat is a Celery Beat Scheduler that stores the scheduled tasks and runtime metadata in Redis.
+- [**414**Star][5d] [C] [samba-team/samba](https://github.com/samba-team/samba) he standard Windows interoperability suite of programs for Linux and Unix
+- [**414**Star][2y] [Py] [ridter/cve-2017-11882](https://github.com/ridter/cve-2017-11882) CVE-2017-11882 from
+- [**414**Star][3y] [pgaijin66/xss-payloads](https://github.com/pgaijin66/xss-payloads) List of advanced XSS payloads
+- [**414**Star][5m] [Java] [nccgroup/freddy](https://github.com/nccgroup/freddy) Automatically identify deserialisation issues in Java and .NET applications by using active and passive scans
- [**414**Star][2y] [Py] [kvasirsecurity/kvasir](https://github.com/kvasirsecurity/kvasir) Penetration Test Data Management
-- [**414**Star][5y] [Java] [jeremyh/jbcrypt](https://github.com/jeremyh/jbcrypt) A Java implementation of OpenBSD's Blowfish password hashing code
-- [**414**Star][8d] [dropsofzut/awesome-security-weixin-official-accounts](https://github.com/dropsofzut/awesome-security-weixin-official-accounts) 网络安全类公众号推荐,欢迎大家推荐
-- [**414**Star][3y] [Py] [ciscocsirt/malspider](https://github.com/ciscocsirt/malspider) Malspider is a web spidering framework that detects characteristics of web compromises.
-- [**414**Star][3y] [Py] [chishaxie/blindwatermark](https://github.com/chishaxie/blindwatermark) 盲水印 by python
-- [**413**Star][11m] [TypeScript] [polymer/prpl-server](https://github.com/Polymer/prpl-server) An HTTP server for Node designed to serve PRPL apps in production.
-- [**413**Star][5m] [C] [mykter/afl-training](https://github.com/mykter/afl-training) Exercises to learn how to fuzz with American Fuzzy Lop
-- [**413**Star][1y] [Py] [thehackingsage/hacktronian](https://github.com/thehackingsage/hacktronian) All in One Hacking Tool for Linux & Android
+- [**414**Star][23d] [C#] [jbe2277/waf](https://github.com/jbe2277/waf) Win Application Framework (WAF) is a lightweight Framework that helps you to create well structured XAML Applications.
+- [**414**Star][5d] [Py] [dashingsoft/pyarmor](https://github.com/dashingsoft/pyarmor) A tool used to obfuscate python scripts, bind obfuscated scripts to fixed machine or expire obfuscated scripts.
+- [**414**Star][4d] [Py] [chef-koch/nsablocklist](https://github.com/chef-koch/nsablocklist) HOSTS file and research project to block all known NSA / GCHQ / C.I.A. / F.B.I. spying server
+- [**414**Star][10m] [Py] [autocracy/python-ipy](https://github.com/autocracy/python-ipy) IPy are a Python class and tools for handling of IPv4 and IPv6 addresses and networks. It is similar to Net::IP Perl module.
+- [**413**Star][25d] [Py] [epsylon/xsser](https://github.com/epsylon/xsser) Cross Site "Scripter" (aka XSSer) is an automatic -framework- to detect, exploit and report XSS vulnerabilities in web-based applications.
+- [**413**Star][3m] [C++] [avast/retdec-idaplugin](https://github.com/avast/retdec-idaplugin) RetDec plugin for IDA
+- [**413**Star][1y] [PHP] [wupco/weblogger](https://github.com/wupco/weblogger) 针对ctf线下赛流量抓取(php)、真实环境流量抓取分析的工具
+- [**413**Star][29d] [C++] [tenable/routeros](https://github.com/tenable/routeros) various tools and exploits developed while performing security research on MikroTik's RouterOS.
+- [**413**Star][5m] [Py] [stanislav-web/opendoor](https://github.com/stanislav-web/opendoor) OWASP WEB Directory Scanner
+- [**413**Star][3y] [prife/virtualappdoc](https://github.com/prife/virtualappdoc)
- [**413**Star][4y] [Py] [ngalongc/autolocalprivilegeescalation](https://github.com/ngalongc/autolocalprivilegeescalation) An automated script that download potential exploit for linux kernel from exploitdb, and compile them automatically
-- [**413**Star][5m] [Java] [nccgroup/freddy](https://github.com/nccgroup/freddy) Automatically identify deserialisation issues in Java and .NET applications by using active and passive scans
- [**413**Star][4y] [Java] [lukefalsina/grab-n-run](https://github.com/lukefalsina/grab-n-run) Grab’n Run, a simple and effective Java Library for Android projects to secure dynamic code loading.
- [**413**Star][2y] [Py] [kromtech/s3-inspector](https://github.com/kromtech/s3-inspector) Tool to check AWS S3 bucket permissions
-- [**413**Star][21d] [C#] [jbe2277/waf](https://github.com/jbe2277/waf) Win Application Framework (WAF) is a lightweight Framework that helps you to create well structured XAML Applications.
+- [**413**Star][5y] [Java] [jeremyh/jbcrypt](https://github.com/jeremyh/jbcrypt) A Java implementation of OpenBSD's Blowfish password hashing code
- [**413**Star][2y] [C] [henkaku/henkaku](https://github.com/henkaku/henkaku) Homebrew enabler for PS Vita
-- [**413**Star][29d] [Py] [forensicartifacts/artifacts](https://github.com/forensicartifacts/artifacts) Digital Forensics Artifact Repository
- [**413**Star][4y] [C++] [demi6od/smashing_the_browser](https://github.com/demi6od/smashing_the_browser) Smashing The Browser: From Vulnerability Discovery To Exploit
-- [**413**Star][10m] [Py] [autocracy/python-ipy](https://github.com/autocracy/python-ipy) IPy are a Python class and tools for handling of IPv4 and IPv6 addresses and networks. It is similar to Net::IP Perl module.
-- [**412**Star][3m] [Scala] [thehive-project/cortex](https://github.com/TheHive-Project/Cortex) a Powerful Observable Analysis and Active Response Engine
-- [**412**Star][8m] [Shell] [sroberts/awesome-iocs](https://github.com/sroberts/awesome-iocs) A collection of sources of indicators of compromise.
-- [**412**Star][20d] [Py] [sibson/redbeat](https://github.com/sibson/redbeat) RedBeat is a Celery Beat Scheduler that stores the scheduled tasks and runtime metadata in Redis.
-- [**412**Star][2y] [Py] [ridter/cve-2017-11882](https://github.com/ridter/cve-2017-11882) CVE-2017-11882 from
-- [**411**Star][23d] [Py] [epsylon/xsser](https://github.com/epsylon/xsser) Cross Site "Scripter" (aka XSSer) is an automatic -framework- to detect, exploit and report XSS vulnerabilities in web-based applications.
+- [**413**Star][9d] [C] [aarond10/https_dns_proxy](https://github.com/aarond10/https_dns_proxy) A lightweight DNS-over-HTTPS proxy.
+- [**412**Star][11m] [TS] [polymer/prpl-server](https://github.com/Polymer/prpl-server) An HTTP server for Node designed to serve PRPL apps in production.
+- [**412**Star][2y] [vasanthk/web-security-basics](https://github.com/vasanthk/web-security-basics) Web security concepts
+- [**412**Star][4m] [C] [hfiref0x/vboxhardenedloader](https://github.com/hfiref0x/vboxhardenedloader) VirtualBox VM detection mitigation loader
+- [**412**Star][2d] [Java] [batfish/batfish](https://github.com/batfish/batfish) Batfish is a network configuration analysis tool that can find bugs and guarantee the correctness of (planned or current) network configurations. It enables network engineers to rapidly and safely evolve their network, without fear of outages or security breaches.
+- [**412**Star][2y] [Py] [51x/whp](https://github.com/51x/whp) Micro$oft Windows Hacking Pack
+- [**411**Star][5m] [Ruby] [praetorian-code/purple-team-attack-automation](https://github.com/praetorian-code/purple-team-attack-automation) Praetorian's public release of our Metasploit automation of MITRE ATT&CK™ TTPs
- [**411**Star][7y] [Java] [wg/scrypt](https://github.com/wg/scrypt) Java implementation of scrypt
-- [**411**Star][2y] [vasanthk/web-security-basics](https://github.com/vasanthk/web-security-basics) Web security concepts
-- [**411**Star][5m] [Py] [stanislav-web/opendoor](https://github.com/stanislav-web/opendoor) OWASP WEB Directory Scanner
-- [**411**Star][9d] [C] [samba-team/samba](https://github.com/samba-team/samba) he standard Windows interoperability suite of programs for Linux and Unix
-- [**411**Star][3y] [prife/virtualappdoc](https://github.com/prife/virtualappdoc)
-- [**411**Star][3m] [C] [odzhan/injection](https://github.com/odzhan/injection) Windows process injection methods
-- [**411**Star][4m] [C] [hfiref0x/vboxhardenedloader](https://github.com/hfiref0x/vboxhardenedloader) VirtualBox VM detection mitigation loader
-- [**410**Star][2m] [C] [openresty/luajit2](https://github.com/openresty/luajit2) OpenResty's Branch of LuaJIT 2
+- [**411**Star][25d] [Py] [osnr/horrifying-pdf-experiments](https://github.com/osnr/horrifying-pdf-experiments)
+- [**411**Star][2y] [Py] [operatorequals/covertutils](https://github.com/operatorequals/covertutils) A framework for Backdoor development!
+- [**411**Star][4m] [ObjC] [lavabit/libdime](https://github.com/lavabit/libdime) The DIME resolver library and command line utilities.
+- [**411**Star][23d] [C++] [hoshimin/kernel-bridge](https://github.com/hoshimin/kernel-bridge) Windows kernel hacking framework, driver template, hypervisor and API written on C++
+- [**411**Star][3m] [Pascal] [felipedaragon/sandcat](https://github.com/felipedaragon/sandcat) An open-source, pentest and developer-oriented web browser, using the power of Lua
+- [**411**Star][9d] [Py] [corkami/collisions](https://github.com/corkami/collisions) Hash collisions and their exploitations
+- [**411**Star][3y] [C] [0x27/linux.mirai](https://github.com/0x27/linux.mirai) Leaked Linux.Mirai Source Code for Research/IoC Development Purposes
- [**410**Star][9m] [Assembly] [mewmew/dissection](https://github.com/mewmew/dissection) The dissection of a simple "hello world" ELF binary.
-- [**410**Star][3m] [Objective-C] [lavabit/libdime](https://github.com/lavabit/libdime) The DIME resolver library and command line utilities.
-- [**410**Star][21d] [C++] [hoshimin/kernel-bridge](https://github.com/hoshimin/kernel-bridge) Windows kernel hacking framework, driver template, hypervisor and API written on C++
+- [**410**Star][11m] [C] [titansec/openwaf](https://github.com/titansec/openwaf) Web security protection system based on openresty
+- [**410**Star][25d] [Go] [gcla/gowid](https://github.com/gcla/gowid) Compositional widgets for terminal user interfaces, written in Go, inspired by urwid.
+- [**410**Star][6m] [Py] [dnsviz/dnsviz](https://github.com/dnsviz/dnsviz) s a tool suite for analysis and visualization of Domain Name System (DNS) behavior, including its security extensions (DNSSEC)
+- [**410**Star][4m] [Shell] [d4rk007/redghost](https://github.com/d4rk007/redghost) Linux post exploitation framework written in bash designed to assist red teams in persistence, reconnaissance, privilege escalation and leaving no trace.
+- [**410**Star][3m] [C++] [cobaltfusion/debugviewpp](https://github.com/cobaltfusion/debugviewpp) DebugView++, collects, views, filters your application logs, and highlights information that is important to you!
- [**410**Star][2y] [Py] [cloudburst/libheap](https://github.com/cloudburst/libheap) python library to examine ptmalloc (the glibc userland heap implementation)
-- [**410**Star][2y] [Py] [51x/whp](https://github.com/51x/whp) Micro$oft Windows Hacking Pack
-- [**410**Star][3y] [C] [0x27/linux.mirai](https://github.com/0x27/linux.mirai) Leaked Linux.Mirai Source Code for Research/IoC Development Purposes
-- [**409**Star][3y] [C] [robertyim/shadowsocksx](https://github.com/RobertYim/ShadowsocksX) Fork of shadowsocks-iOS
-- [**409**Star][9d] [hunters-forge/ossem](https://github.com/hunters-forge/OSSEM) Open Source Security Events Metadata (OSSEM)
-- [**409**Star][9m] [Py] [linklayer/pyvit](https://github.com/linklayer/pyvit) Python Vehicle Interface Toolkit
-- [**409**Star][27d] [C++] [tenable/routeros](https://github.com/tenable/routeros) RouterOS Security Research Tooling and Proof of Concepts
-- [**409**Star][23d] [Py] [osnr/horrifying-pdf-experiments](https://github.com/osnr/horrifying-pdf-experiments)
-- [**409**Star][2y] [Py] [operatorequals/covertutils](https://github.com/operatorequals/covertutils) A framework for Backdoor development!
+- [**409**Star][28d] [husnainfareed/awesome-ethical-hacking-resources](https://github.com/husnainfareed/Awesome-Ethical-Hacking-Resources)
+- [**409**Star][9m] [Py] [linklayer/pyvit](https://github.com/linklayer/pyvit) toolkit for interfacing with cars from Python. It aims to implement common hardware interfaces and protocols used in the automotive systems
+- [**409**Star][3m] [Py] [windsooon/cherry](https://github.com/Windsooon/cherry) text classification - no machine learning knowledge needed
+- [**409**Star][2y] [zyfworks/ssr-backup](https://github.com/zyfworks/ssr-backup) ShadowsocksR backups
+- [**409**Star][4d] [Py] [ytisf/pyexfil](https://github.com/ytisf/pyexfil) A Python Package for Data Exfiltration
- [**409**Star][2y] [Py] [ojasookert/cve-2017-0785](https://github.com/ojasookert/cve-2017-0785) Blueborne CVE-2017-0785 Android information leak vulnerability
-- [**409**Star][3m] [jack-liang/kalitools](https://github.com/jack-liang/kalitools) Kali Linux工具清单
-- [**409**Star][23d] [Go] [gcla/gowid](https://github.com/gcla/gowid) Compositional widgets for terminal user interfaces, written in Go, inspired by urwid.
-- [**409**Star][6m] [Py] [dnsviz/dnsviz](https://github.com/dnsviz/dnsviz) s a tool suite for analysis and visualization of Domain Name System (DNS) behavior, including its security extensions (DNSSEC)
-- [**409**Star][9d] [Py] [chef-koch/nsablocklist](https://github.com/chef-koch/nsablocklist) HOSTS file and research project to block all known NSA / GCHQ / C.I.A. / F.B.I. spying server
-- [**408**Star][26d] [husnainfareed/awesome-ethical-hacking-resources](https://github.com/husnainfareed/Awesome-Ethical-Hacking-Resources)
-- [**408**Star][5m] [Ruby] [praetorian-code/purple-team-attack-automation](https://github.com/praetorian-code/purple-team-attack-automation) Praetorian's public release of our Metasploit automation of MITRE ATT&CK™ TTPs
-- [**408**Star][3y] [pgaijin66/xss-payloads](https://github.com/pgaijin66/xss-payloads) List of advanced XSS payloads
+- [**409**Star][2y] [Py] [nahamsec/jsparser](https://github.com/nahamsec/jsparser) using Tornado and JSBeautifier to parse relative URLs from JavaScript files
+- [**409**Star][5m] [Py] [itayc0hen/a-journey-into-radare2](https://github.com/itayc0hen/a-journey-into-radare2) A series of tutorials about radare2 framework from
+- [**409**Star][2m] [CSS] [angea/pocorgtfo](https://github.com/angea/pocorgtfo) a "PoC or GTFO" mirror with extra article index, direct links and clean PDFs.
+- [**408**Star][5d] [JS] [0vercl0k/cve-2019-11708](https://github.com/0vercl0k/cve-2019-11708) Full exploit chain (CVE-2019-11708 & CVE-2019-9810) against Firefox on Windows 64-bit.
+- [**408**Star][2y] [Py] [xapax/oscp](https://github.com/xapax/oscp)
+- [**408**Star][3y] [C] [robertyim/shadowsocksx](https://github.com/RobertYim/ShadowsocksX) Fork of shadowsocks-iOS
+- [**408**Star][7d] [C] [ufrisk/memprocfs](https://github.com/ufrisk/memprocfs) The Memory Process File System
+- [**408**Star][29d] [C++] [souhardya/uboat](https://github.com/souhardya/uboat) HTTP Botnet Project
+- [**408**Star][2y] [Py] [rub-syssec/kafl](https://github.com/rub-syssec/kafl) Code for the USENIX 2017 paper: kAFL: Hardware-Assisted Feedback Fuzzing for OS Kernels
- [**408**Star][2y] [C++] [lyle-nel/siga](https://github.com/lyle-nel/siga) Population based metaheuristic for password cracking. Siga(Simple genetic algorithm)
-- [**408**Star][8d] [Py] [graalvm/graalpython](https://github.com/graalvm/graalpython) A Python 3 implementation built on GraalVM
-- [**408**Star][4m] [Shell] [d4rk007/redghost](https://github.com/d4rk007/redghost) Linux post exploitation framework written in bash designed to assist red teams in persistence, reconnaissance, privilege escalation and leaving no trace.
-- [**408**Star][7d] [Go] [cloudfoundry/gorouter](https://github.com/cloudfoundry/gorouter) CF Router
-- [**408**Star][2m] [CSS] [angea/pocorgtfo](https://github.com/angea/pocorgtfo) a "PoC or GTFO" mirror with extra article index, direct links and clean PDFs.
-- [**407**Star][2y] [Py] [xapax/oscp](https://github.com/xapax/oscp)
-- [**407**Star][2y] [zyfworks/ssr-backup](https://github.com/zyfworks/ssr-backup) ShadowsocksR backups
-- [**407**Star][8d] [Py] [ytisf/pyexfil](https://github.com/ytisf/pyexfil) A Python Package for Data Exfiltration
-- [**407**Star][5m] [Shell] [thesecondsun/bashark](https://github.com/thesecondsun/bashark) Bash post exploitation toolkit
-- [**407**Star][2y] [Py] [nahamsec/jsparser](https://github.com/nahamsec/jsparser) using Tornado and JSBeautifier to parse relative URLs from JavaScript files
+- [**408**Star][2y] [Java] [fourbrother/kstools](https://github.com/fourbrother/kstools) Android中自动爆破签名工具
+- [**408**Star][2y] [C] [devshane/zork](https://github.com/devshane/zork) The DUNGEON (Zork I) source
+- [**408**Star][8d] [Go] [cloudfoundry/gorouter](https://github.com/cloudfoundry/gorouter) CF Router
+- [**407**Star][1y] [C] [ww9210/linux_kernel_exploits](https://github.com/ww9210/linux_kernel_exploits) Repo for FUZE project. I will also publish some Linux kernel LPE exploits for various real world kernel vulnerabilities here. the samples are uploaded for education purposes for red and blue teams.
+- [**407**Star][15d] [Java] [spring-cloud/spring-cloud-security](https://github.com/spring-cloud/spring-cloud-security) Security concerns for distributed applications implemented in Spring
+- [**407**Star][3m] [PS] [officedev/o365-investigationtooling](https://github.com/officedev/o365-investigationtooling)
+- [**407**Star][7m] [Java] [nccgroup/burpsuitehttpsmuggler](https://github.com/nccgroup/burpsuitehttpsmuggler) A Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniques
+- [**407**Star][3y] [PHP] [naneau/php-obfuscator](https://github.com/naneau/php-obfuscator) A parsing PHP obfuscator
- [**407**Star][8m] [Py] [mitrecnd/chopshop](https://github.com/mitrecnd/chopshop) Protocol Analysis/Decoder Framework
-- [**407**Star][5m] [Py] [itayc0hen/a-journey-into-radare2](https://github.com/itayc0hen/a-journey-into-radare2) A series of tutorials about radare2 framework from
-- [**407**Star][2y] [Java] [fourbrother/kstools](https://github.com/fourbrother/kstools) Android中自动爆破签名工具
-- [**407**Star][3m] [Pascal] [felipedaragon/sandcat](https://github.com/felipedaragon/sandcat) An open-source, pentest and developer-oriented web browser, using the power of Lua
-- [**407**Star][7d] [Py] [dashingsoft/pyarmor](https://github.com/dashingsoft/pyarmor) A tool used to obfuscate python scripts, bind obfuscated scripts to fixed machine or expire obfuscated scripts.
-- [**406**Star][1y] [Py] [veekxt/v2ray-template](https://github.com/veekxt/v2ray-template) v2ray 模板,v2ray 配置生成工具
-- [**406**Star][3m] [C++] [avast/retdec-idaplugin](https://github.com/avast/retdec-idaplugin) RetDec plugin for IDA
-- [**406**Star][1y] [C] [ww9210/linux_kernel_exploits](https://github.com/ww9210/linux_kernel_exploits) Repo for FUZE project. I will also publish some Linux kernel LPE exploits for various real world kernel vulnerabilities here. the samples are uploaded for education purposes for red and blue teams.
-- [**406**Star][1y] [PHP] [wupco/weblogger](https://github.com/wupco/weblogger) 针对ctf线下赛流量抓取(php)、真实环境流量抓取分析的工具
-- [**406**Star][11m] [C] [titansec/openwaf](https://github.com/titansec/openwaf) Web security protection system based on openresty
-- [**406**Star][8m] [kai5263499/osx-security-awesome](https://github.com/kai5263499/osx-security-awesome) A collection of OSX and iOS security resources
+- [**407**Star][8m] [kai5263499/osx-security-awesome](https://github.com/kai5263499/osx-security-awesome) A collection of OSX and iOS security resources
+- [**407**Star][18d] [Py] [bl4de/security-tools](https://github.com/bl4de/security-tools) Collection of small security tools created mostly in Python. CTFs, pentests and so on
+- [**407**Star][1m] [Ruby] [arkadiyt/aws_public_ips](https://github.com/arkadiyt/aws_public_ips) Fetch all public IP addresses tied to your AWS account. Works with IPv4/IPv6, Classic/VPC networking, and across all AWS services
+- [**406**Star][24d] [PHP] [spatie/ssl-certificate](https://github.com/spatie/ssl-certificate) A class to validate SSL certificates
+- [**406**Star][17d] [Py] [jiangxufeng/v2rayl](https://github.com/jiangxufeng/v2rayl) v2ray linux GUI客户端,支持订阅、vemss、ss等协议,自动更新订阅、检查版本更新
+- [**406**Star][1m] [C++] [wbenny/hvpp](https://github.com/wbenny/hvpp) hvpp is a lightweight Intel x64/VT-x hypervisor written in C++ focused primarily on virtualization of already running operating system
+- [**406**Star][1y] [Java] [testwhat/smaliex](https://github.com/testwhat/smaliex) A wrapper to get de-optimized dex from odex/oat/vdex.
+- [**406**Star][9d] [Rust] [m4b/goblin](https://github.com/m4b/goblin) An impish, cross-platform binary parsing crate, written in Rust
- [**406**Star][1y] [Py] [fossfreedom/indicator-sysmonitor](https://github.com/fossfreedom/indicator-sysmonitor) Ubuntu application indicator to show various system parameters
-- [**406**Star][2y] [C] [devshane/zork](https://github.com/devshane/zork) The DUNGEON (Zork I) source
-- [**405**Star][1m] [C++] [wbenny/hvpp](https://github.com/wbenny/hvpp) hvpp is a lightweight Intel x64/VT-x hypervisor written in C++ focused primarily on virtualization of already running operating system
+- [**406**Star][3y] [Py] [breenmachine/httpscreenshot](https://github.com/breenmachine/httpscreenshot)
+- [**405**Star][1m] [Py] [lanmaster53/recon-ng](https://github.com/lanmaster53/recon-ng) Open Source Intelligence gathering tool aimed at reducing the time spent harvesting information from open sources.
+- [**405**Star][29d] [Shell] [s0md3v/diggy](https://github.com/s0md3v/Diggy) Extract endpoints from apk files.
+- [**405**Star][3d] [Py] [crytic/slither](https://github.com/crytic/slither) Static Analyzer for Solidity
+- [**405**Star][3y] [Py] [xitu/macos-security-and-privacy-guide](https://github.com/xitu/macos-security-and-privacy-guide) A practical guide to securing macOS.
- [**405**Star][1y] [C++] [vah13/extracttvpasswords](https://github.com/vah13/extracttvpasswords) tool to extract passwords from TeamViewer memory using Frida
-- [**405**Star][2y] [Py] [rub-syssec/kafl](https://github.com/rub-syssec/kafl) Code for the USENIX 2017 paper: kAFL: Hardware-Assisted Feedback Fuzzing for OS Kernels
-- [**405**Star][2m] [Go] [retroplasma/flyover-reverse-engineering](https://github.com/retroplasma/flyover-reverse-engineering) Reversing Apple's 3D satellite mode
-- [**405**Star][4m] [re4lity/hacking-with-golang](https://github.com/re4lity/hacking-with-golang) Golang安全资源合集
+- [**405**Star][3m] [C#] [shack2/supersqlinjectionv1](https://github.com/shack2/supersqlinjectionv1) 超级SQL注入工具(SSQLInjection)是一款基于HTTP协议自组包的SQL注入工具,采用C#开发,直接操作TCP会话来进行HTTP交互,支持出现在HTTP协议任意位置的SQL注入,支持各种类型的SQL注入,支持HTTPS模式注入;支持以盲注、错误显示、Union注入等方式来获取数据;支持Access/MySQL/SQLServer/Oracle/PostgreSQL/DB2/SQLite/Informix等数据库;支持手动灵活的进行SQL注入绕过,可自定义进行字符替换等绕过注入防护。本工具为渗透测试人员、信息安全工程师等掌握SQL注入技能的人员设计,需要使用人员对SQL注入有一定了解。
- [**405**Star][5y] [Py] [paloaltonetworks/wirelurkerdetector](https://github.com/paloaltonetworks/wirelurkerdetector) Script for detecting the WireLurker malware family
-- [**405**Star][3m] [PowerShell] [officedev/o365-investigationtooling](https://github.com/officedev/o365-investigationtooling)
-- [**405**Star][3y] [PHP] [naneau/php-obfuscator](https://github.com/naneau/php-obfuscator) A parsing PHP obfuscator
-- [**405**Star][5y] [Objective-C] [mp0w/ios-headers](https://github.com/mp0w/ios-headers) iOS 5.0/5.1/6.0/6.1/7.0/7.1/8.0/8.1 Headers of All Frameworks (private and not) + SpringBoard
-- [**405**Star][7d] [Py] [corkami/collisions](https://github.com/corkami/collisions) Hash collisions and their exploitations
+- [**405**Star][5y] [ObjC] [mp0w/ios-headers](https://github.com/mp0w/ios-headers) iOS 5.0/5.1/6.0/6.1/7.0/7.1/8.0/8.1 Headers of All Frameworks (private and not) + SpringBoard
- [**405**Star][1y] [C] [coalfire-research/ios-11.1.2-15b202-jailbreak](https://github.com/coalfire-research/ios-11.1.2-15b202-jailbreak) iOS 11.1.2 (15B202) Jailbreak
-- [**405**Star][3y] [Py] [breenmachine/httpscreenshot](https://github.com/breenmachine/httpscreenshot)
-- [**405**Star][16d] [Py] [bl4de/security-tools](https://github.com/bl4de/security-tools) Collection of small security tools created mostly in Python. CTFs, pentests and so on
-- [**405**Star][1m] [Ruby] [arkadiyt/aws_public_ips](https://github.com/arkadiyt/aws_public_ips) Fetch all public IP addresses tied to your AWS account. Works with IPv4/IPv6, Classic/VPC networking, and across all AWS services
-- [**404**Star][3m] [Py] [windsooon/cherry](https://github.com/Windsooon/cherry) text classification - no machine learning knowledge needed
-- [**404**Star][3y] [Py] [xitu/macos-security-and-privacy-guide](https://github.com/xitu/macos-security-and-privacy-guide) A practical guide to securing macOS.
- [**404**Star][3m] [C] [thundercls/xanalyzer](https://github.com/thundercls/xanalyzer) xAnalyzer plugin for x64dbg
-- [**404**Star][1y] [Java] [testwhat/smaliex](https://github.com/testwhat/smaliex) A wrapper to get de-optimized dex from odex/oat/vdex.
- [**404**Star][5y] [Ruby] [svent/jsdetox](https://github.com/svent/jsdetox) A Javascript malware analysis tool
-- [**404**Star][13d] [Java] [spring-cloud/spring-cloud-security](https://github.com/spring-cloud/spring-cloud-security) Security concerns for distributed applications implemented in Spring
+- [**404**Star][3y] [C++] [iaik/rowhammerjs](https://github.com/iaik/rowhammerjs) A Remote Software-Induced Fault Attack in JavaScript
+- [**404**Star][17d] [Java] [google/closure-templates](https://github.com/google/closure-templates) A client- and server-side templating system that helps you dynamically build reusable HTML and UI elements
+- [**404**Star][1y] [Go] [chaitin/cloudwalker](https://github.com/chaitin/cloudwalker) CloudWalker Platform
- [**404**Star][2y] [JS] [cagataycali/xss-listener](https://github.com/cagataycali/xss-listener)
-- [**404**Star][3y] [CSS] [710leo/zvuldrill](https://github.com/710leo/zvuldrill) Web漏洞演练平台
-- [**403**Star][26d] [Shell] [s0md3v/diggy](https://github.com/s0md3v/Diggy) Extract endpoints from apk files.
-- [**403**Star][17d] [Py] [crytic/slither](https://github.com/crytic/slither) Static Analyzer for Solidity
+- [**404**Star][2y] [Makefile] [bettermanbao/openwrt-shadowsocksr-libev-full](https://github.com/bettermanbao/openwrt-shadowsocksr-libev-full) ShadowsocksR-libev-full for OpenWrt
+- [**403**Star][2y] [Ruby] [fuzzapi/fuzzapi](https://github.com/Fuzzapi/fuzzapi) Fuzzapi is a tool used for REST API pentesting and uses API_Fuzzer gem
+- [**403**Star][5y] [vk496/linset](https://github.com/vk496/linset) Evil Twin Attack Bash script
- [**403**Star][2y] [C++] [rootm0s/injectors](https://github.com/rootm0s/injectors)
-- [**403**Star][7m] [Java] [nccgroup/burpsuitehttpsmuggler](https://github.com/nccgroup/burpsuitehttpsmuggler) A Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniques
-- [**403**Star][3y] [C++] [iaik/rowhammerjs](https://github.com/iaik/rowhammerjs) A Remote Software-Induced Fault Attack in JavaScript
+- [**403**Star][23d] [Py] [nsmfoo/antivmdetection](https://github.com/nsmfoo/antivmdetection) Script to create templates to use with VirtualBox to make vm detection harder
+- [**403**Star][9d] [JS] [handshake-org/hsd](https://github.com/handshake-org/hsd) Handshake Daemon & Full Node
+- [**403**Star][9m] [C] [darthton/hyperbone](https://github.com/darthton/hyperbone) Minimalistic VT-x hypervisor with hooks
+- [**403**Star][2y] [PS] [danielbohannon/invoke-dosfuscation](https://github.com/danielbohannon/invoke-dosfuscation) Cmd.exe Command Obfuscation Generator & Detection Test Harness
- [**403**Star][10m] [Py] [christruncer/pentestscripts](https://github.com/christruncer/pentestscripts) Scripts that are useful for me on pen tests
-- [**403**Star][2y] [Makefile] [bettermanbao/openwrt-shadowsocksr-libev-full](https://github.com/bettermanbao/openwrt-shadowsocksr-libev-full) ShadowsocksR-libev-full for OpenWrt
-- [**402**Star][2y] [Ruby] [fuzzapi/fuzzapi](https://github.com/Fuzzapi/fuzzapi) Fuzzapi is a tool used for REST API pentesting and uses API_Fuzzer gem
-- [**402**Star][5y] [vk496/linset](https://github.com/vk496/linset) Evil Twin Attack Bash script
+- [**403**Star][3y] [CSS] [710leo/zvuldrill](https://github.com/710leo/zvuldrill) Web漏洞演练平台
+- [**402**Star][2m] [C] [liudf0716/xkcptun](https://github.com/liudf0716/xkcptun) xkcptun is kcp tunnel for OpenWRT&LEDE, implemented in c language
+- [**402**Star][3y] [C#] [zenlulz/memorysharp](https://github.com/zenlulz/memorysharp) A C# based memory editing library targeting Windows applications, offering various functions to extract and inject data and codes into remote processes to allow interoperability.
- [**402**Star][5y] [Py] [syworks/waidps](https://github.com/syworks/waidps) Wireless Auditing, Intrusion Detection & Prevention System
-- [**402**Star][21d] [Py] [nsmfoo/antivmdetection](https://github.com/nsmfoo/antivmdetection) Script to create templates to use with VirtualBox to make vm detection harder
-- [**402**Star][7d] [JS] [handshake-org/hsd](https://github.com/handshake-org/hsd) Handshake Daemon & Full Node
-- [**402**Star][15d] [Java] [google/closure-templates](https://github.com/google/closure-templates) A client- and server-side templating system that helps you dynamically build reusable HTML and UI elements
-- [**402**Star][2y] [PowerShell] [danielbohannon/invoke-dosfuscation](https://github.com/danielbohannon/invoke-dosfuscation) Cmd.exe Command Obfuscation Generator & Detection Test Harness
-- [**402**Star][1y] [Go] [chaitin/cloudwalker](https://github.com/chaitin/cloudwalker) CloudWalker Platform
+- [**402**Star][3y] [C++] [rwfpl/rewolf-wow64ext](https://github.com/rwfpl/rewolf-wow64ext) Helper library for x86 programs that runs under WOW64 layer on x64 versions of Microsoft Windows operating systems.
+- [**402**Star][4m] [Java] [megatronking/netbare](https://github.com/megatronking/netbare) Net packets capture & injection library designed for Android
+- [**402**Star][2y] [C] [fuzion24/androidkernelexploitationplayground](https://github.com/fuzion24/androidkernelexploitationplayground)
+- [**402**Star][10m] [Go] [evilsocket/shellz](https://github.com/evilsocket/shellz) shellz is a small utility to track and control your ssh, telnet, web and custom shells and tunnels.
- [**402**Star][4y] [Py] [1an0rmus/tekdefense-automater](https://github.com/1an0rmus/tekdefense-automater) Automater - IP URL and MD5 OSINT Analysis
-- [**401**Star][3y] [C#] [zenlulz/memorysharp](https://github.com/zenlulz/memorysharp) A C# based memory editing library targeting Windows applications, offering various functions to extract and inject data and codes into remote processes to allow interoperability.
-- [**401**Star][20d] [HTML] [w3c/webappsec](https://github.com/w3c/webappsec) Web Application Security Working Group repo
-- [**401**Star][27d] [C++] [souhardya/uboat](https://github.com/souhardya/uboat) HTTP Botnet Project
-- [**401**Star][3m] [C#] [shack2/supersqlinjectionv1](https://github.com/shack2/supersqlinjectionv1) 超级SQL注入工具(SSQLInjection)是一款基于HTTP协议自组包的SQL注入工具,采用C#开发,直接操作TCP会话来进行HTTP交互,支持出现在HTTP协议任意位置的SQL注入,支持各种类型的SQL注入,支持HTTPS模式注入;支持以盲注、错误显示、Union注入等方式来获取数据;支持Access/MySQL/SQLServer/Oracle/PostgreSQL/DB2/SQLite/Informix等数据库;支持手动灵活的进行SQL注入绕过,可自定义进行字符替换等绕过注入防护。本工具为渗透测试人员、信息安全工程师等掌握SQL注入技能的人员设计,需要使用人员对SQL注入有一定了解。
-- [**401**Star][10m] [Go] [evilsocket/shellz](https://github.com/evilsocket/shellz) shellz is a small utility to track and control your ssh, telnet, web and custom shells and tunnels.
-- [**401**Star][8m] [C] [darthton/hyperbone](https://github.com/darthton/hyperbone) Minimalistic VT-x hypervisor with hooks
-- [**401**Star][9m] [Go] [amyangxyz/assassingo](https://github.com/amyangxyz/assassingo) An extensible and concurrency pentest framework in Go, also with WebGUI. Feel free to CONTRIBUTE!
+- [**401**Star][22d] [HTML] [w3c/webappsec](https://github.com/w3c/webappsec) Web Application Security Working Group repo
+- [**401**Star][4y] [Py] [sleventyeleven/linuxprivchecker](https://github.com/sleventyeleven/linuxprivchecker) a Linux Privilege Escalation Check Script
+- [**401**Star][21d] [ObjC] [sap/macos-enterprise-privileges](https://github.com/sap/macos-enterprise-privileges) For Mac users in an Enterprise environment this app ensures secure environment and yet gives the User control over administration of their machine by elevating their level of access to Administrator privilege on macOS X. Users can set the time frame using Preferences to perform specific tasks such as install or remove an application.
+- [**401**Star][6y] [Java] [isecpartners/introspy-android](https://github.com/isecpartners/introspy-android) Security profiling for blackbox Android
+- [**401**Star][3d] [JS] [aztecprotocol/aztec](https://github.com/aztecprotocol/aztec) Public repository for the AZTEC protocol
- [**400**Star][1m] [Py] [fbngrm/matroschka](https://github.com/fbngrm/Matroschka) Python steganography tool to hide images or text in images
-- [**400**Star][3y] [C++] [rwfpl/rewolf-wow64ext](https://github.com/rwfpl/rewolf-wow64ext) Helper library for x86 programs that runs under WOW64 layer on x64 versions of Microsoft Windows operating systems.
-- [**400**Star][6y] [Java] [isecpartners/introspy-android](https://github.com/isecpartners/introspy-android) Security profiling for blackbox Android
-- [**400**Star][2y] [C] [fuzion24/androidkernelexploitationplayground](https://github.com/fuzion24/androidkernelexploitationplayground)
-- [**399**Star][19d] [Objective-C] [sap/macos-enterprise-privileges](https://github.com/sap/macos-enterprise-privileges) For Mac users in an Enterprise environment this app ensures secure environment and yet gives the User control over administration of their machine by elevating their level of access to Administrator privilege on macOS X. Users can set the time frame using Preferences to perform specific tasks such as install or remove an application.
+- [**400**Star][5d] [Java] [spring-cloud/spring-cloud-gcp](https://github.com/spring-cloud/spring-cloud-gcp) Integration for Google Cloud Platform APIs with Spring
+- [**400**Star][11m] [skyblueeternal/thinkphp-rce-poc-collection](https://github.com/skyblueeternal/thinkphp-rce-poc-collection) thinkphp v5.x 远程代码执行漏洞-POC集合
+- [**400**Star][1y] [Py] [jpaulmora/pyrit](https://github.com/jpaulmora/pyrit) The famous WPA precomputed cracker, Migrated from Google.
+- [**400**Star][12m] [Py] [dstmath/frida-unpack](https://github.com/dstmath/frida-unpack) unpack script based on frida
+- [**399**Star][6d] [C++] [lifting-bits/remill](https://github.com/lifting-bits/remill) Library for lifting of x86, amd64, and aarch64 machine code to LLVM bitcode
- [**399**Star][2y] [Java] [pqpo/inputmethodholder](https://github.com/pqpo/inputmethodholder) A keyboard listener for Android which by hooking the InputMethodManager. 通过hook监听系统键盘显示
-- [**399**Star][2m] [Rust] [kpcyrd/sniffglue](https://github.com/kpcyrd/sniffglue) Secure multithreaded packet sniffer
+- [**399**Star][2y] [Py] [ezelf/cve-2018-9995_dvr_credentials](https://github.com/ezelf/cve-2018-9995_dvr_credentials) (CVE-2018-9995) Get DVR Credentials
- [**399**Star][11m] [JS] [eviltik/evilscan](https://github.com/eviltik/evilscan) NodeJS Simple Network Scanner
-- [**399**Star][3m] [C++] [cobaltfusion/debugviewpp](https://github.com/cobaltfusion/debugviewpp) DebugView++, collects, views, filters your application logs, and highlights information that is important to you!
+- [**399**Star][4d] [Go] [dan-v/rattlesnakeos-stack](https://github.com/dan-v/rattlesnakeos-stack) Build your own privacy and security focused Android OS in the cloud on a continuous basis with OTA updates.
- [**399**Star][5m] [Py] [cea-sec/sibyl](https://github.com/cea-sec/sibyl) A Miasm2 based function divination.
-- [**398**Star][1m] [Py] [lanmaster53/recon-ng](https://github.com/lanmaster53/recon-ng) Open Source Intelligence gathering tool aimed at reducing the time spent harvesting information from open sources.
-- [**398**Star][7d] [Java] [spring-cloud/spring-cloud-gcp](https://github.com/spring-cloud/spring-cloud-gcp) Integration for Google Cloud Platform APIs with Spring
-- [**398**Star][11m] [skyblueeternal/thinkphp-rce-poc-collection](https://github.com/skyblueeternal/thinkphp-rce-poc-collection) thinkphp v5.x 远程代码执行漏洞-POC集合
-- [**398**Star][8d] [C] [freifunk-gluon/gluon](https://github.com/freifunk-gluon/gluon) a modular framework for creating OpenWrt-based firmwares for wireless mesh nodes
-- [**398**Star][2y] [Py] [ezelf/cve-2018-9995_dvr_credentials](https://github.com/ezelf/cve-2018-9995_dvr_credentials) (CVE-2018-9995) Get DVR Credentials
-- [**398**Star][12m] [Py] [dstmath/frida-unpack](https://github.com/dstmath/frida-unpack) unpack script based on frida
-- [**398**Star][7d] [JS] [aztecprotocol/aztec](https://github.com/aztecprotocol/aztec) Public repository for the AZTEC protocol
+- [**399**Star][3y] [Java] [ac-pm/sslunpinning_xposed](https://github.com/ac-pm/sslunpinning_xposed) Android Xposed Module to bypass SSL certificate validation (Certificate Pinning).
+- [**399**Star][2y] [JS] [0xdea/frida-scripts](https://github.com/0xdea/frida-scripts) A collection of my Frida.re instrumentation scripts to facilitate reverse engineering of mobile apps.
+- [**398**Star][3y] [Py] [sekoialab/fastir_collector](https://github.com/sekoialab/fastir_collector) collects different artefacts on live Windows and records the results in csv or json files. With the analyses of these artefacts, an early compromission can be detected.
+- [**398**Star][3y] [C] [kablaa/ctf-workshop](https://github.com/kablaa/ctf-workshop) Challenges for Binary Exploitation Workshop
+- [**398**Star][1y] [Py] [grayddq/publicmonitors](https://github.com/grayddq/publicmonitors) 对公网IP列表进行端口服务扫描,发现周期内的端口服务变化情况和弱口令安全风险
+- [**398**Star][4d] [C] [freifunk-gluon/gluon](https://github.com/freifunk-gluon/gluon) a modular framework for creating OpenWrt-based firmwares for wireless mesh nodes
+- [**398**Star][4m] [PHP] [floedesigntechnologies/phpcs-security-audit](https://github.com/floedesigntechnologies/phpcs-security-audit) phpcs-security-audit is a set of PHP_CodeSniffer rules that finds vulnerabilities and weaknesses related to security in PHP code
+- [**398**Star][3m] [Go] [cloudflare/mitmengine](https://github.com/cloudflare/mitmengine) A MITM (monster-in-the-middle) detection tool. Used to build MALCOLM:
- [**397**Star][2m] [Py] [x899/chrome_password_grabber](https://github.com/x899/chrome_password_grabber) Get unencrypted 'Saved Password' from Google Chrome
-- [**397**Star][7d] [C++] [lifting-bits/remill](https://github.com/lifting-bits/remill) Library for lifting of x86, amd64, and aarch64 machine code to LLVM bitcode
-- [**397**Star][3y] [Py] [sekoialab/fastir_collector](https://github.com/sekoialab/fastir_collector)
+- [**397**Star][2m] [HTML] [thinkst/canarytokens](https://github.com/thinkst/canarytokens) Canarytokens helps track activity and actions on your network.
- [**397**Star][3y] [Scala] [philwantsfish/shard](https://github.com/philwantsfish/shard) A command line tool to detect shared passwords
-- [**397**Star][3m] [Go] [cloudflare/mitmengine](https://github.com/cloudflare/mitmengine) A MITM (monster-in-the-middle) detection tool. Used to build MALCOLM:
-- [**397**Star][7m] [7kbstorm/7kbscan-webpathbrute](https://github.com/7kbstorm/7kbscan-webpathbrute) 7kbscan-WebPathBrute Web路径暴力探测工具
-- [**397**Star][2y] [JS] [0xdea/frida-scripts](https://github.com/0xdea/frida-scripts) A collection of my Frida.re instrumentation scripts to facilitate reverse engineering of mobile apps.
-- [**396**Star][2m] [HTML] [thinkst/canarytokens](https://github.com/thinkst/canarytokens) Canarytokens helps track activity and actions on your network.
-- [**396**Star][3m] [Py] [mushorg/glastopf](https://github.com/mushorg/glastopf) Web Application Honeypot
+- [**397**Star][3m] [ph055a/osint-collection](https://github.com/ph055a/osint-collection) Maintained collection of OSINT related resources. (All Free & Actionable)
+- [**397**Star][3m] [Py] [mushorg/glastopf](https://github.com/mushorg/glastopf) Web Application Honeypot
+- [**397**Star][3m] [Py] [duo-labs/cloudtracker](https://github.com/duo-labs/cloudtracker) CloudTracker helps you find over-privileged IAM users and roles by comparing CloudTrail logs with current IAM policies.
+- [**396**Star][14d] [Java] [spring-cloud/spring-cloud-aws](https://github.com/spring-cloud/spring-cloud-aws) Integration for Amazon Web Services APIs with Spring
+- [**396**Star][2y] [Py] [se55i0n/dbscanner](https://github.com/se55i0n/dbscanner) 自动扫描内网常见sql、no-sql数据库脚本(mysql、mssql、oracle、postgresql、redis、mongodb、memcached、elasticsearch),包含未授权访问及常规弱口令检测
+- [**396**Star][2y] [Java] [routerkeygen/routerkeygenandroid](https://github.com/routerkeygen/routerkeygenandroid) Router Keygen generate default WPA/WEP keys for several routers.
+- [**396**Star][1y] [Go] [riobard/go-shadowsocks2](https://github.com/riobard/go-shadowsocks2) Experimental Shadowsocks in Go. Stable fork at
+- [**396**Star][3d] [Py] [moloch--/rootthebox](https://github.com/moloch--/rootthebox) A Game of Hackers (CTF Scoreboard & Game Manager)
- [**396**Star][6y] [Py] [milo2012/osintstalker](https://github.com/milo2012/osintstalker) osintstalker
-- [**396**Star][3y] [C] [kablaa/ctf-workshop](https://github.com/kablaa/ctf-workshop) Challenges for Binary Exploitation Workshop
-- [**396**Star][1y] [Py] [grayddq/publicmonitors](https://github.com/grayddq/publicmonitors) 对公网IP列表进行端口服务扫描,发现周期内的端口服务变化情况和弱口令安全风险
+- [**396**Star][1m] [Logos] [limneos/classdump-dyld](https://github.com/limneos/classdump-dyld) Class-dump any Mach-o file without extracting it from dyld_shared_cache
+- [**396**Star][3y] [Py] [ioactive/jdwp-shellifier](https://github.com/ioactive/jdwp-shellifier) be used by pentesters against active JDWP service, in order to gain Remote Code Execution.
- [**396**Star][7m] [HTML] [gexos/hacking-tools-repository](https://github.com/gexos/hacking-tools-repository) A list of security/hacking tools that have been collected from the internet. Suggestions are welcomed.
-- [**396**Star][19d] [Go] [dan-v/rattlesnakeos-stack](https://github.com/dan-v/rattlesnakeos-stack) Build your own privacy and security focused Android OS in the cloud on a continuous basis with OTA updates.
-- [**396**Star][2y] [PowerShell] [cryps1s/darksurgeon](https://github.com/cryps1s/darksurgeon) DARKSURGEON is a Windows packer project to empower incident response, digital forensics, malware analysis, and network defense.
-- [**396**Star][3y] [Java] [ac-pm/sslunpinning_xposed](https://github.com/ac-pm/sslunpinning_xposed) Android Xposed Module to bypass SSL certificate validation (Certificate Pinning).
-- [**395**Star][1m] [Kotlin] [hmbsbige/shadowsocksr-android](https://github.com/hmbsbige/shadowsocksr-android) A ShadowsocksR client for Android, written in Kotlin.
-- [**395**Star][12d] [Java] [spring-cloud/spring-cloud-aws](https://github.com/spring-cloud/spring-cloud-aws) Integration for Amazon Web Services APIs with Spring
-- [**395**Star][3m] [ph055a/osint-collection](https://github.com/ph055a/osint-collection) Maintained collection of OSINT related resources. (All Free & Actionable)
-- [**395**Star][9d] [Py] [moloch--/rootthebox](https://github.com/moloch--/rootthebox) A Game of Hackers (CTF Scoreboard & Game Manager)
-- [**395**Star][2y] [C] [fireyfly/pixd](https://github.com/fireyfly/pixd) visualizing binary data using a colour palette
-- [**395**Star][3m] [Py] [duo-labs/cloudtracker](https://github.com/duo-labs/cloudtracker) CloudTracker helps you find over-privileged IAM users and roles by comparing CloudTrail logs with current IAM policies.
-- [**395**Star][10m] [Ruby] [dreadlocked/drupalgeddon2](https://github.com/dreadlocked/drupalgeddon2) Exploit for Drupal v7.x + v8.x (Drupalgeddon 2 / CVE-2018-7600 / SA-CORE-2018-002)
-- [**394**Star][12d] [Py] [s0md3v/corsy](https://github.com/s0md3v/corsy) CORS Misconfiguration Scanner
+- [**396**Star][2y] [C] [fireyfly/pixd](https://github.com/fireyfly/pixd) visualizing binary data using a colour palette
+- [**396**Star][10m] [Ruby] [dreadlocked/drupalgeddon2](https://github.com/dreadlocked/drupalgeddon2) Exploit for Drupal v7.x + v8.x (Drupalgeddon 2 / CVE-2018-7600 / SA-CORE-2018-002)
+- [**396**Star][2y] [PS] [cryps1s/darksurgeon](https://github.com/cryps1s/darksurgeon) DARKSURGEON is a Windows packer project to empower incident response, digital forensics, malware analysis, and network defense.
+- [**396**Star][4m] [ansjdnakjdnajkd/ios](https://github.com/ansjdnakjdnajkd/ios) Most usable tools for iOS penetration testing
+- [**395**Star][2y] [C++] [hatriot/token-priv](https://github.com/hatriot/token-priv) Token Privilege Research
+- [**395**Star][2d] [Go] [graniet/operative-framework](https://github.com/graniet/operative-framework) operative framework is a OSINT investigation framework, you can interact with multiple targets, execute multiple modules, create links with target, export rapport to PDF file, add note to target or results, interact with RESTFul API, write your own modules.
+- [**395**Star][2y] [JS] [derjanb/hamiyoca](https://github.com/derjanb/hamiyoca) Hash me if you can - A Bitcoin miner that supports pure Javscript, WebWorker and WebGL mining.
+- [**395**Star][4y] [PHP] [breakthenet/hackme-sql-injection-challenges](https://github.com/breakthenet/hackme-sql-injection-challenges) Pen test your "friend's" online MMORPG game - specific focus, sql injection opportunities
+- [**394**Star][11d] [Makefile] [kuoruan/openwrt-v2ray](https://github.com/kuoruan/openwrt-v2ray) V2Ray for OpenWrt
+- [**394**Star][6d] [Py] [eerkunt/terraform-compliance](https://github.com/eerkunt/terraform-compliance) a lightweight, security focused, BDD test framework against terraform.
- [**394**Star][1y] [sweis/crypto-might-not-suck](https://github.com/sweis/crypto-might-not-suck) List of crypto projects that might not suck
-- [**394**Star][4y] [Py] [sleventyeleven/linuxprivchecker](https://github.com/sleventyeleven/linuxprivchecker) a Linux Privilege Escalation Check Script
- [**394**Star][4y] [C++] [sektioneins/suidguard](https://github.com/sektioneins/suidguard) SUIDGuard - a TrustedBSD Kernel Extension that adds mitigations to protect SUID/SGID processes a bit more
-- [**394**Star][29d] [Logos] [limneos/classdump-dyld](https://github.com/limneos/classdump-dyld) Class-dump any Mach-o file without extracting it from dyld_shared_cache
-- [**394**Star][1y] [Py] [jpaulmora/pyrit](https://github.com/jpaulmora/pyrit) The famous WPA precomputed cracker, Migrated from Google.
-- [**394**Star][3y] [Py] [ioactive/jdwp-shellifier](https://github.com/ioactive/jdwp-shellifier)
-- [**394**Star][4m] [PHP] [floedesigntechnologies/phpcs-security-audit](https://github.com/floedesigntechnologies/phpcs-security-audit) phpcs-security-audit is a set of PHP_CodeSniffer rules that finds vulnerabilities and weaknesses related to security in PHP code
-- [**394**Star][4y] [PHP] [breakthenet/hackme-sql-injection-challenges](https://github.com/breakthenet/hackme-sql-injection-challenges) Pen test your "friend's" online MMORPG game - specific focus, sql injection opportunities
-- [**393**Star][11m] [Swift] [ibm/mac-ibm-enrollment-app](https://github.com/ibm/mac-ibm-enrollment-app) The Mac@IBM enrollment app makes setting up macOS with Jamf Pro more intuitive for users and easier for IT. The application offers IT admins the ability to gather additional information about their users during setup, allows users to customize their enrollment by selecting apps or bundles of apps to install during setup, and provides users with …
-- [**393**Star][1y] [hillbrad/u2freviews](https://github.com/hillbrad/u2freviews) Reviews of U2F devices
-- [**393**Star][2y] [C++] [hatriot/token-priv](https://github.com/hatriot/token-priv) Token Privilege Research
-- [**393**Star][3m] [Go] [graniet/operative-framework](https://github.com/graniet/operative-framework) operative framework is a OSINT investigation framework, you can interact with multiple targets, execute multiple modules, create links with target, export rapport to PDF file, add note to target or results, interact with RESTFul API, write your own modules.
-- [**393**Star][1y] [Py] [cr4shcod3/pureblood](https://github.com/cr4shcod3/pureblood) A Penetration Testing Framework created for Hackers / Pentester / Bug Hunter
+- [**394**Star][11m] [Swift] [ibm/mac-ibm-enrollment-app](https://github.com/ibm/mac-ibm-enrollment-app) The Mac@IBM enrollment app makes setting up macOS with Jamf Pro more intuitive for users and easier for IT. The application offers IT admins the ability to gather additional information about their users during setup, allows users to customize their enrollment by selecting apps or bundles of apps to install during setup, and provides users with …
+- [**394**Star][1y] [hillbrad/u2freviews](https://github.com/hillbrad/u2freviews) Reviews of U2F devices
+- [**394**Star][1y] [Py] [cr4shcod3/pureblood](https://github.com/cr4shcod3/pureblood) A Penetration Testing Framework created for Hackers / Pentester / Bug Hunter
+- [**393**Star][11m] [Py] [mitre/multiscanner](https://github.com/mitre/multiscanner) Modular file scanning/analysis framework
+- [**393**Star][1y] [Go] [tomnomnom/waybackurls](https://github.com/tomnomnom/waybackurls) Fetch all the URLs that the Wayback Machine knows about for a domain
+- [**393**Star][1y] [Shell] [killswitch-gui/cobaltstrike-toolkit](https://github.com/killswitch-gui/cobaltstrike-toolkit) Some useful scripts for CobaltStrike
+- [**393**Star][1m] [YARA] [guelfoweb/peframe](https://github.com/guelfoweb/peframe) PEframe is a open source tool to perform static analysis on Portable Executable malware and malicious MS Office documents.
+- [**393**Star][2y] [Java] [federicodotta/java-deserialization-scanner](https://github.com/federicodotta/java-deserialization-scanner) All-in-one plugin for Burp Suite for the detection and the exploitation of Java deserialization vulnerabilities
+- [**393**Star][2y] [Py] [fate0/pychrome](https://github.com/fate0/pychrome) A Python Package for the Google Chrome Dev Protocol [threading base]
+- [**393**Star][12m] [Py] [essandess/isp-data-pollution](https://github.com/essandess/isp-data-pollution) ISP Data Pollution to Protect Private Browsing History with Obfuscation
+- [**393**Star][1m] [Py] [clr2of8/dpat](https://github.com/clr2of8/dpat) Domain Password Audit Tool for Pentesters
- [**393**Star][2y] [JS] [chpmrc/zero-width-chrome-extension](https://github.com/chpmrc/zero-width-chrome-extension) Replace scary zero-width characters with funny emojis
-- [**393**Star][4m] [ansjdnakjdnajkd/ios](https://github.com/ansjdnakjdnajkd/ios) Most usable tools for iOS penetration testing
- [**392**Star][4y] [Py] [zhengmin1989/rop_step_by_step](https://github.com/zhengmin1989/rop_step_by_step) 一步一步学ROP
-- [**392**Star][11m] [Py] [mitre/multiscanner](https://github.com/mitre/multiscanner) Modular file scanning/analysis framework
- [**392**Star][7m] [Py] [jm33-m0/mec](https://github.com/jm33-m0/mec) for concurrent exploiting
+- [**392**Star][12m] [C++] [googleprojectzero/functionsimsearch](https://github.com/googleprojectzero/functionsimsearch) Some C++ example code to demonstrate how to perform code similarity searches using SimHashing.
+- [**392**Star][1y] [C#] [squalr/squalr](https://github.com/squalr/squalr) performant Memory Editing software that allows users to create and share cheats in their windows desktop games
- [**392**Star][7m] [Py] [savon-noir/python-libnmap](https://github.com/savon-noir/python-libnmap) libnmap is a python library to run nmap scans, parse and diff scan results. It supports python 2.6 up to 3.4. It's wonderful.
-- [**392**Star][1y] [Go] [riobard/go-shadowsocks2](https://github.com/riobard/go-shadowsocks2) Experimental Shadowsocks in Go. Stable fork at
- [**392**Star][7m] [Py] [repoog/gitprey](https://github.com/repoog/gitprey) Searching sensitive files and contents in GitHub associated to company name or other key words
-- [**392**Star][10d] [Rust] [m4b/goblin](https://github.com/m4b/goblin) An impish, cross-platform binary parsing crate, written in Rust
-- [**392**Star][1y] [Shell] [killswitch-gui/cobaltstrike-toolkit](https://github.com/killswitch-gui/cobaltstrike-toolkit) Some useful scripts for CobaltStrike
-- [**392**Star][1m] [YARA] [guelfoweb/peframe](https://github.com/guelfoweb/peframe) PEframe is a open source tool to perform static analysis on Portable Executable malware and malicious MS Office documents.
-- [**392**Star][2y] [Py] [fate0/pychrome](https://github.com/fate0/pychrome) A Python Package for the Google Chrome Dev Protocol [threading base]
-- [**392**Star][12m] [Py] [essandess/isp-data-pollution](https://github.com/essandess/isp-data-pollution) ISP Data Pollution to Protect Private Browsing History with Obfuscation
-- [**392**Star][1m] [Py] [clr2of8/dpat](https://github.com/clr2of8/dpat) Domain Password Audit Tool for Pentesters
-- [**391**Star][12m] [C++] [googleprojectzero/functionsimsearch](https://github.com/googleprojectzero/functionsimsearch) Some C++ example code to demonstrate how to perform code similarity searches using SimHashing.
-- [**391**Star][2y] [Py] [se55i0n/dbscanner](https://github.com/se55i0n/dbscanner) 自动扫描内网常见sql、no-sql数据库脚本(mysql、mssql、oracle、postgresql、redis、mongodb、memcached、elasticsearch),包含未授权访问及常规弱口令检测
+- [**392**Star][1m] [Py] [nginxinc/nginx-ldap-auth](https://github.com/nginxinc/nginx-ldap-auth) Example of LDAP authentication using ngx_http_auth_request_module
+- [**392**Star][3d] [Scala] [lihaoyi/utest](https://github.com/lihaoyi/utest) A simple testing framework for Scala
+- [**392**Star][3y] [C#] [harmj0y/keethief](https://github.com/harmj0y/keethief) extraction of KeePass 2.X key material from memory, as well as the backdooring and enumeration of the KeePass trigger system.
+
+
+- [**392**Star][12d] [PS] [d0nkeys/redteam](https://github.com/d0nkeys/redteam) Red Team Scripts
+- [**392**Star][12m] [C++] [cseagle/sk3wldbg](https://github.com/cseagle/sk3wldbg) Debugger plugin for IDA Pro backed by the Unicorn Engine
+- [**392**Star][1y] [Py] [chrismaddalena/odin](https://github.com/chrismaddalena/odin) Automated network asset, email, and social media profile discovery and cataloguing.
+- [**391**Star][9m] [Py] [williballenthin/python-evtx](https://github.com/williballenthin/python-evtx) Pure Python parser for recent Windows Event Log files (.evtx)
+- [**391**Star][2y] [r0ysue/osg-translationteam](https://github.com/r0ysue/osg-translationteam) 看雪iOS安全小组的翻译团队作品集合,如有勘误,欢迎斧正!
- [**391**Star][10m] [Go] [mozilla/masche](https://github.com/mozilla/masche) MIG Memory Forensic library
- [**391**Star][1y] [Go] [mauri870/ransomware](https://github.com/mauri870/ransomware) A POC Windows crypto-ransomware (Academic)
-- [**391**Star][12m] [C++] [cseagle/sk3wldbg](https://github.com/cseagle/sk3wldbg) Debugger plugin for IDA Pro backed by the Unicorn Engine
+- [**391**Star][3y] [JS] [mandatoryprogrammer/judasdns](https://github.com/mandatoryprogrammer/judasdns) Nameserver DNS poisoning attacks made easy
+- [**391**Star][7d] [C] [hasherezade/hollows_hunter](https://github.com/hasherezade/hollows_hunter) Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
- [**391**Star][2y] [Py] [conorpp/btproxy](https://github.com/conorpp/btproxy) Man in the Middle analysis tool for Bluetooth.
-- [**390**Star][1y] [Go] [tomnomnom/waybackurls](https://github.com/tomnomnom/waybackurls) Fetch all the URLs that the Wayback Machine knows about for a domain
+- [**391**Star][6m] [JS] [capacitorset/box-js](https://github.com/capacitorset/box-js) A tool for studying JavaScript malware.
+- [**391**Star][2m] [Py] [bitbrute/evillimiter](https://github.com/bitbrute/evillimiter) Tool that limits bandwidth of devices on the same network without access.
+- [**390**Star][28d] [ym2011/securitymanagement](https://github.com/ym2011/securitymanagement) share with you some knowledge for Information Security Management,ISO27001,Information Security Class Protect ,SDLC,etc.
+- [**390**Star][29d] [Shell] [yadominjinta/atilo](https://github.com/yadominjinta/atilo) Linux installer for termux
+- [**390**Star][2y] [Shell] [und3rf10w/kali-anonsurf](https://github.com/und3rf10w/kali-anonsurf) A port of ParrotSec's stealth and anonsurf modules to Kali Linux
+- [**390**Star][14d] [Shell] [th3xace/sudo_killer](https://github.com/th3xace/sudo_killer) A tool to identify and exploit sudo rules' misconfigurations and vulnerabilities within sudo
- [**390**Star][2y] [C++] [swwwolf/wdbgark](https://github.com/swwwolf/wdbgark) WinDBG Anti-RootKit Extension
- [**390**Star][3y] [stamparm/eternalrocks](https://github.com/stamparm/eternalrocks) EternalRocks worm
-- [**390**Star][1y] [C#] [squalr/squalr](https://github.com/squalr/squalr) Squalr Memory Editor - Game Hacking Tool Written in C#
- [**390**Star][6y] [C++] [p0sixspwn/p0sixspwn](https://github.com/p0sixspwn/p0sixspwn) Released in accordance with GPL licensing.
-- [**390**Star][1m] [Py] [nginxinc/nginx-ldap-auth](https://github.com/nginxinc/nginx-ldap-auth) Example of LDAP authentication using ngx_http_auth_request_module
-- [**390**Star][4m] [Java] [megatronking/netbare](https://github.com/megatronking/netbare) Net packets capture & injection library designed for Android
-- [**390**Star][3y] [JS] [mandatoryprogrammer/judasdns](https://github.com/mandatoryprogrammer/judasdns) Nameserver DNS poisoning attacks made easy
-- [**390**Star][23d] [Scala] [lihaoyi/utest](https://github.com/lihaoyi/utest) A simple testing framework for Scala
- [**390**Star][1y] [C] [laurelai/decompile-dump](https://github.com/laurelai/decompile-dump) Partial stuxnet source decompiled with hexrays, if anyone has better decompile tools feel free to contribute better versions.
-- [**390**Star][3y] [C#] [harmj0y/keethief](https://github.com/harmj0y/keethief) Methods for attacking KeePass 2.X databases, including extracting of encryption key material from memory.
-- [**390**Star][10d] [PowerShell] [d0nkeys/redteam](https://github.com/d0nkeys/redteam) Red Team Scripts by d0nkeys (ex SnadoTeam)
-- [**390**Star][1y] [Py] [chrismaddalena/odin](https://github.com/chrismaddalena/odin) Automated network asset, email, and social media profile discovery and cataloguing.
-- [**390**Star][6m] [JS] [capacitorset/box-js](https://github.com/capacitorset/box-js) A tool for studying JavaScript malware.
-- [**389**Star][9m] [Py] [williballenthin/python-evtx](https://github.com/williballenthin/python-evtx) Pure Python parser for recent Windows Event Log files (.evtx)
-- [**389**Star][2y] [r0ysue/osg-translationteam](https://github.com/r0ysue/osg-translationteam) 看雪iOS安全小组的翻译团队作品集合,如有勘误,欢迎斧正!
+- [**389**Star][9m] [Shell] [microsoft/linux-vm-tools](https://github.com/microsoft/linux-vm-tools) Hyper-V Linux Guest VM Enhancements
+- [**389**Star][10m] [Py] [rustyshackleford221/oscp-prep](https://github.com/rustyshackleford221/oscp-prep) A comprehensive guide/material for anyone looking to get into infosec or take the OSCP exam
+- [**389**Star][26d] [Py] [paulgclark/waveconverter](https://github.com/paulgclark/waveconverter) An Open Source tool for RF reverse engineering.
- [**389**Star][12m] [Shell] [mthbernardes/sshlooter](https://github.com/mthbernardes/sshlooter) Script to steal passwords from ssh.
-- [**389**Star][4y] [Objective-C] [kpwn/tpwn](https://github.com/kpwn/tpwn) xnu local privilege escalation via cve-2015-???? & cve-2015-???? for 10.10.5, 0day at the time | poc or gtfo
-- [**389**Star][21d] [JS] [joeferner/node-http-mitm-proxy](https://github.com/joeferner/node-http-mitm-proxy) HTTP Man In The Middle (MITM) Proxy
-- [**389**Star][14d] [C] [hasherezade/hollows_hunter](https://github.com/hasherezade/hollows_hunter) Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
+- [**389**Star][2m] [milabs/awesome-linux-rootkits](https://github.com/milabs/awesome-linux-rootkits) awesome-linux-rootkits
+- [**389**Star][1y] [JS] [linushenze/webkit-regex-exploit](https://github.com/linushenze/webkit-regex-exploit)
+- [**389**Star][4y] [ObjC] [kpwn/tpwn](https://github.com/kpwn/tpwn) xnu local privilege escalation via cve-2015-???? & cve-2015-???? for 10.10.5, 0day at the time | poc or gtfo
+- [**389**Star][23d] [JS] [joeferner/node-http-mitm-proxy](https://github.com/joeferner/node-http-mitm-proxy) HTTP Man In The Middle (MITM) Proxy
+- [**389**Star][16d] [Py] [idaholab/malcolm](https://github.com/idaholab/malcolm) Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files) and Zeek logs.
+- [**389**Star][6m] [C++] [hasherezade/dll_to_exe](https://github.com/hasherezade/dll_to_exe) Converts a DLL into EXE
- [**389**Star][3y] [Py] [gstarnberger/uncompyle](https://github.com/gstarnberger/uncompyle) Python decompiler
-- [**389**Star][2y] [Java] [federicodotta/java-deserialization-scanner](https://github.com/federicodotta/java-deserialization-scanner) All-in-one plugin for Burp Suite for the detection and the exploitation of Java deserialization vulnerabilities
-- [**389**Star][14d] [Py] [bdcht/amoco](https://github.com/bdcht/amoco) yet another tool for analysing binaries
+- [**389**Star][25d] [C] [coolervoid/0d1n](https://github.com/coolervoid/0d1n) Web security tool to make fuzzing at HTTP/S, Beta
+- [**389**Star][2d] [C#] [collinbarrett/filterlists](https://github.com/collinbarrett/filterlists) independent, comprehensive directory of filter and host lists for advertisements, trackers, malware, and annoyances.
+- [**389**Star][16d] [Py] [bdcht/amoco](https://github.com/bdcht/amoco) yet another tool for analysing binaries
- [**389**Star][3m] [Go] [alphasoc/flightsim](https://github.com/alphasoc/flightsim) A utility to generate malicious network traffic and evaluate controls
-- [**388**Star][12d] [Shell] [th3xace/sudo_killer](https://github.com/th3xace/sudo_killer) A tool to identify and exploit sudo rules' misconfigurations and vulnerabilities within sudo
-- [**388**Star][2y] [PowerShell] [shellntel/scripts](https://github.com/shellntel/scripts) A collection of scripts from the security professionals at www.shellntel.com.
+- [**388**Star][2y] [PS] [shellntel/scripts](https://github.com/shellntel/scripts) A collection of scripts from the security professionals at www.shellntel.com.
- [**388**Star][2y] [Perl] [rapid7/metasploit-vulnerability-emulator](https://github.com/rapid7/metasploit-vulnerability-emulator) Created by Jin Qian via the GitHub Connector
-- [**388**Star][24d] [Py] [paulgclark/waveconverter](https://github.com/paulgclark/waveconverter) An Open Source tool for RF reverse engineering.
- [**388**Star][2y] [Py] [mricon/rev-proxy-grapher](https://github.com/mricon/rev-proxy-grapher) Reverse proxy grapher
-- [**388**Star][1y] [JS] [linushenze/webkit-regex-exploit](https://github.com/linushenze/webkit-regex-exploit)
-- [**388**Star][6m] [C++] [hasherezade/dll_to_exe](https://github.com/hasherezade/dll_to_exe) Converts a DLL into EXE
-- [**388**Star][3m] [Ruby] [elastic/puppet-elasticsearch](https://github.com/elastic/puppet-elasticsearch) Elasticsearch Puppet module
-- [**387**Star][2y] [Shell] [und3rf10w/kali-anonsurf](https://github.com/und3rf10w/kali-anonsurf) A port of ParrotSec's stealth and anonsurf modules to Kali Linux
+- [**388**Star][3y] [Py] [mandatoryprogrammer/cloudflare_enum](https://github.com/mandatoryprogrammer/cloudflare_enum) Cloudflare DNS Enumeration Tool for Pentesters
+- [**387**Star][3m] [PS] [cyberark/aclight](https://github.com/cyberark/ACLight) A script for advanced discovery of Privileged Accounts - includes Shadow Admins
- [**387**Star][1m] [tobiasbueschel/awesome-pokemon](https://github.com/tobiasbueschel/awesome-pokemon) A curated list of awesome Pokémon & Pokémon GO resources, tools and more.
-- [**387**Star][2m] [milabs/awesome-linux-rootkits](https://github.com/milabs/awesome-linux-rootkits) awesome-linux-rootkits
-- [**387**Star][3y] [Py] [mandatoryprogrammer/cloudflare_enum](https://github.com/mandatoryprogrammer/cloudflare_enum) Cloudflare DNS Enumeration Tool for Pentesters
-- [**387**Star][14d] [Py] [idaholab/malcolm](https://github.com/idaholab/malcolm) Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files) and Zeek logs.
+- [**387**Star][1m] [Java] [tiagorlampert/saint](https://github.com/tiagorlampert/saint) a Spyware Generator for Windows systems written in Java
+- [**387**Star][1m] [Py] [riotgames/cloud-inquisitor](https://github.com/riotgames/cloud-inquisitor) Enforce ownership and data security within AWS
+- [**387**Star][3y] [Py] [funkandwagnalls/ranger](https://github.com/funkandwagnalls/ranger) A tool for security professionals to access and interact with remote Microsoft Windows based systems.
- [**387**Star][2y] [Py] [frizb/vanquish](https://github.com/frizb/vanquish) Vanquish is Kali Linux based Enumeration Orchestrator. Vanquish leverages the opensource enumeration tools on Kali to perform multiple active information gathering phases.
-- [**387**Star][11d] [Ruby] [digininja/cewl](https://github.com/digininja/cewl) CeWL is a Custom Word List Generator
-- [**386**Star][3m] [PowerShell] [cyberark/aclight](https://github.com/cyberark/ACLight) A script for advanced discovery of Privileged Accounts - includes Shadow Admins
-- [**386**Star][3y] [Objective-C] [kpwn/yalu](https://github.com/kpwn/yalu) incomplete ios 8.4.1 jailbreak by Kim Jong Cracks (8.4.1 codesign & sandbox bypass w/ LPE to root & untether)
+- [**387**Star][4m] [Ruby] [elastic/puppet-elasticsearch](https://github.com/elastic/puppet-elasticsearch) Elasticsearch Puppet module
+- [**387**Star][13d] [Ruby] [digininja/cewl](https://github.com/digininja/cewl) CeWL is a Custom Word List Generator
+- [**387**Star][3m] [JS] [710leo/urlooker](https://github.com/710leo/urlooker) 企业级url监控
+- [**387**Star][3y] [Py] [36hours/idaemu](https://github.com/36hours/idaemu) an IDA Pro Plugin use for emulating code in IDA Pro.
+- [**386**Star][3y] [ObjC] [kpwn/yalu](https://github.com/kpwn/yalu) incomplete ios 8.4.1 jailbreak by Kim Jong Cracks (8.4.1 codesign & sandbox bypass w/ LPE to root & untether)
- [**386**Star][2y] [Java] [irsdl/iis-shortname-scanner](https://github.com/irsdl/iis-shortname-scanner) latest version of scanners for IIS short filename (8.3) disclosure vulnerability
-- [**386**Star][7d] [C#] [collinbarrett/filterlists](https://github.com/collinbarrett/filterlists) independent, comprehensive directory of filter and host lists for advertisements, trackers, malware, and annoyances.
-- [**386**Star][3y] [Py] [36hours/idaemu](https://github.com/36hours/idaemu) an IDA Pro Plugin use for emulating code in IDA Pro.
-- [**385**Star][9m] [Shell] [microsoft/linux-vm-tools](https://github.com/microsoft/linux-vm-tools) Hyper-V Linux Guest VM Enhancements
-- [**385**Star][4m] [Py] [ynvb/die](https://github.com/ynvb/die) an IDA python plugin designed to enrich IDA`s static analysis with dynamic data
+- [**386**Star][12m] [Assembly] [hasherezade/pe_to_shellcode](https://github.com/hasherezade/pe_to_shellcode) Converts PE into a shellcode
+- [**386**Star][7m] [Py] [google/upvote](https://github.com/google/upvote) A multi-platform binary whitelisting solution
+- [**386**Star][15d] [HTML] [blabla1337/skf-flask](https://github.com/blabla1337/skf-flask) Security Knowledge Framework (SKF) Python Flask / Angular project
+- [**386**Star][5m] [C#] [bitsadmin/nopowershell](https://github.com/bitsadmin/nopowershell) PowerShell rebuilt in C# for Red Teaming purposes
+- [**385**Star][11d] [Haskell] [crytic/echidna](https://github.com/crytic/echidna) Ethereum fuzz testing framework
+- [**385**Star][5m] [Py] [ynvb/die](https://github.com/ynvb/die) an IDA python plugin designed to enrich IDA`s static analysis with dynamic data
+- [**385**Star][9d] [Py] [maqp/tfc](https://github.com/maqp/tfc) Tinfoil Chat - Onion-routed, endpoint secure messaging system
- [**385**Star][2y] [m0l1ce/wooyunallbugs](https://github.com/m0l1ce/wooyunallbugs) wooyun_all_bugs
-- [**385**Star][3y] [Py] [funkandwagnalls/ranger](https://github.com/funkandwagnalls/ranger) A tool for security professionals to access and interact with remote Microsoft Windows based systems.
-- [**385**Star][13d] [HTML] [blabla1337/skf-flask](https://github.com/blabla1337/skf-flask) Security Knowledge Framework (SKF) Python Flask / Angular project
-- [**385**Star][5m] [C#] [bitsadmin/nopowershell](https://github.com/bitsadmin/nopowershell) PowerShell rebuilt in C# for Red Teaming purposes
-- [**384**Star][26d] [ym2011/securitymanagement](https://github.com/ym2011/securitymanagement) share with you some knowledge for Information Security Management,ISO27001,Information Security Class Protect ,SDLC,etc.
-- [**384**Star][27d] [Shell] [yadominjinta/atilo](https://github.com/yadominjinta/atilo) Linux installer for termux
-- [**384**Star][1m] [Java] [tiagorlampert/saint](https://github.com/tiagorlampert/saint) a Spyware Generator for Windows systems written in Java
+- [**385**Star][1y] [Ruby] [aphyr/tund](https://github.com/aphyr/tund) SSH reverse tunnel daemon
+- [**384**Star][8m] [C] [zerosum0x0/smbdoor](https://github.com/zerosum0x0/smbdoor) Windows kernel backdoor via registering a malicious SMB handler
+- [**384**Star][7m] [tidesec/tide](https://github.com/tidesec/tide) 目前实现了网络空间资产探测、指纹检索、漏洞检测、漏洞全生命周期管理、poc定向检测、暗链检测、挂马监测、敏感字检测、DNS监测、网站可用性监测、漏洞库管理、安全预警等等~
- [**384**Star][1y] [C++] [stanfordpl/x64asm](https://github.com/stanfordpl/x64asm) x86-64 assembler library
- [**384**Star][4y] [PHP] [spiderlabs/mcir](https://github.com/spiderlabs/mcir) The Magical Code Injection Rainbow! MCIR is a framework for building configurable vulnerability testbeds. MCIR is also a collection of configurable vulnerability testbeds.
-- [**384**Star][1m] [Py] [riotgames/cloud-inquisitor](https://github.com/riotgames/cloud-inquisitor) Enforce ownership and data security within AWS
+- [**384**Star][2y] [Assembly] [sgayou/kindle-5.6.5-jailbreak](https://github.com/sgayou/kindle-5.6.5-jailbreak) Kindle 5.6.5 exploitation tools.
+- [**384**Star][3y] [Py] [sensepost/dns-shell](https://github.com/sensepost/dns-shell) DNS-Shell is an interactive Shell over DNS channel
+- [**384**Star][1m] [C#] [microsoft/binskim](https://github.com/microsoft/binskim) A binary static analysis tool that provides security and correctness results for Windows Portable Executable and *nix ELF binary formats
+- [**384**Star][2m] [C++] [llvm-mirror/lldb](https://github.com/llvm-mirror/lldb) Mirror of official lldb git repository located at
- [**384**Star][9m] [Ruby] [hatbashbr/hatcloud](https://github.com/hatbashbr/hatcloud) discontinued
-- [**384**Star][7m] [Py] [google/upvote](https://github.com/google/upvote) A multi-platform binary whitelisting solution
-- [**384**Star][7m] [C] [coolervoid/0d1n](https://github.com/coolervoid/0d1n) Web security tool to make fuzzing at HTTP/S, Beta
-- [**383**Star][2m] [C] [ufrisk/memprocfs](https://github.com/ufrisk/memprocfs) The Memory Process File System
+- [**384**Star][2y] [C++] [equalitie/np1sec](https://github.com/equalitie/np1sec) A library for off-the-record (deniable authenticated forward secure confidential) multiparty messaging
+- [**383**Star][6d] [Makefile] [crifan/scientific_network_summary](https://github.com/crifan/scientific_network_summary) 总结关于科学上网的概念方法及工具
- [**383**Star][3y] [Ruby] [stephenfewer/grinder](https://github.com/stephenfewer/grinder) Grinder is a system to automate the fuzzing of web browsers and the management of a large number of crashes.
-- [**383**Star][2y] [Assembly] [sgayou/kindle-5.6.5-jailbreak](https://github.com/sgayou/kindle-5.6.5-jailbreak) Kindle 5.6.5 exploitation tools.
-- [**383**Star][3y] [Py] [sensepost/dns-shell](https://github.com/sensepost/dns-shell) DNS-Shell is an interactive Shell over DNS channel
+- [**383**Star][25d] [C++] [simsong/bulk_extractor](https://github.com/simsong/bulk_extractor) bulk_extractor
- [**383**Star][1y] [JS] [securing/gattacker](https://github.com/securing/gattacker) A Node.js package for BLE (Bluetooth Low Energy) security assessment using Man-in-the-Middle and other attacks
- [**383**Star][2m] [Py] [ptresearch/inteltxe-poc](https://github.com/ptresearch/inteltxe-poc) Intel Management Engine JTAG Proof of Concept
-- [**383**Star][2m] [C++] [llvm-mirror/lldb](https://github.com/llvm-mirror/lldb) Mirror of official lldb git repository located at
-- [**383**Star][2y] [C++] [equalitie/np1sec](https://github.com/equalitie/np1sec) A library for off-the-record (deniable authenticated forward secure confidential) multiparty messaging
+- [**383**Star][3m] [PHP] [msurguy/honeypot](https://github.com/msurguy/honeypot) a simple and effective way to defer some of the spam bots that come to your site
+- [**383**Star][1y] [HTML] [maestron/reverse-engineering-tutorials](https://github.com/maestron/reverse-engineering-tutorials) Reverse Engineering Tutorials
- [**383**Star][1y] [Java] [davidbuchanan314/nxloader](https://github.com/davidbuchanan314/nxloader) My first Android app: Launch Fusée Gelée payloads from stock Android (CVE-2018-6242)
-- [**382**Star][9d] [Haskell] [crytic/echidna](https://github.com/crytic/echidna) Ethereum fuzz testing framework
-- [**382**Star][8m] [C] [zerosum0x0/smbdoor](https://github.com/zerosum0x0/smbdoor) Windows kernel backdoor via registering a malicious SMB handler
-- [**382**Star][7m] [tidesec/tide](https://github.com/tidesec/tide) 目前实现了网络空间资产探测、指纹检索、漏洞检测、漏洞全生命周期管理、poc定向检测、暗链检测、挂马监测、敏感字检测、DNS监测、网站可用性监测、漏洞库管理、安全预警等等~
+- [**382**Star][22d] [PHP] [terrylinooo/shieldon](https://github.com/terrylinooo/shieldon) Web Application Firewall (WAF) for PHP.
+- [**382**Star][30d] [Py] [stamparm/dsss](https://github.com/stamparm/dsss) Damn Small SQLi Scanner
- [**382**Star][2m] [Py] [sab0tag3d/siet](https://github.com/sab0tag3d/siet) Smart Install Exploitation Tool
-- [**382**Star][10m] [Py] [rustyshackleford221/oscp-prep](https://github.com/rustyshackleford221/oscp-prep) A comprehensive guide/material for anyone looking to get into infosec or take the OSCP exam
-- [**382**Star][3m] [PHP] [msurguy/honeypot](https://github.com/msurguy/honeypot) Simple spam prevention package for Laravel applications
-- [**382**Star][1y] [HTML] [maestron/reverse-engineering-tutorials](https://github.com/maestron/reverse-engineering-tutorials) Reverse Engineering Tutorials
+- [**382**Star][3m] [Py] [p1r06u3/opencanary_web](https://github.com/p1r06u3/opencanary_web) The web management platform of honeypot
+- [**382**Star][2y] [Java] [nickstadb/barmie](https://github.com/nickstadb/barmie) enumerating and attacking Java RMI (Remote Method Invocation) services.
- [**382**Star][2m] [Shell] [kabachook/k8s-security](https://github.com/kabachook/k8s-security) Kubernetes security notes and best practices
-- [**382**Star][12m] [Assembly] [hasherezade/pe_to_shellcode](https://github.com/hasherezade/pe_to_shellcode) Converts PE into a shellcode
- [**382**Star][2y] [Py] [fireeye/reelphish](https://github.com/fireeye/reelphish)
- [**382**Star][1y] [Py] [ex0dus-0x/brut3k1t](https://github.com/ex0dus-0x/brut3k1t) security-oriented bruteforce framework
-- [**382**Star][1y] [Ruby] [aphyr/tund](https://github.com/aphyr/tund) SSH reverse tunnel daemon
-- [**381**Star][28d] [Py] [stamparm/dsss](https://github.com/stamparm/dsss) Damn Small SQLi Scanner
-- [**381**Star][23d] [C++] [simsong/bulk_extractor](https://github.com/simsong/bulk_extractor) This is the development tree. For downloads please see:
-- [**381**Star][4y] [Py] [sensepost/snoopy-ng](https://github.com/sensepost/snoopy-ng) Snoopy v2.0 - modular digital terrestrial tracking framework
-- [**381**Star][11d] [Ruby] [puppetlabs/puppetlabs-mysql](https://github.com/puppetlabs/puppetlabs-mysql) MySQL Puppet Module / Manifests + Types & Providers
-- [**381**Star][1m] [C#] [microsoft/binskim](https://github.com/microsoft/binskim) A binary static analysis tool that provides security and correctness results for Windows Portable Executable and *nix ELF binary formats
-- [**381**Star][7d] [Py] [maqp/tfc](https://github.com/maqp/tfc) Tinfoil Chat - Onion-routed, endpoint secure messaging system
+- [**382**Star][1m] [Go] [cretz/bine](https://github.com/cretz/bine) Go library for accessing and embedding Tor clients and servers
+- [**381**Star][28d] [C++] [0x09al/rdpthief](https://github.com/0x09al/rdpthief) Extracting Clear Text Passwords from mstsc.exe using API Hooking.
+- [**381**Star][2m] [thejambo/awesome-testing](https://github.com/thejambo/awesome-testing) A curated list of testing resources
+- [**381**Star][4y] [Py] [sensepost/snoopy-ng](https://github.com/sensepost/snoopy-ng) modular digital terrestrial tracking framework
+- [**381**Star][28d] [JS] [nccgroup/tracy](https://github.com/nccgroup/tracy) A tool designed to assist with finding all sinks and sources of a web application and display these results in a digestible manner.
+- [**381**Star][2m] [Jupyter Notebook] [microsoft/windowsdefenderatp-hunting-queries](https://github.com/microsoft/windowsdefenderatp-hunting-queries) Sample queries for Advanced hunting in Microsoft Defender ATP
+- [**381**Star][1y] [C] [markus-go/bonesi](https://github.com/markus-go/bonesi) BoNeSi - the DDoS Botnet Simulator
- [**381**Star][5y] [JS] [le4f/pcap-analyzer](https://github.com/le4f/pcap-analyzer) online pcap forensic
-- [**380**Star][5y] [Py] [mfrister/pushproxy](https://github.com/mfrister/pushproxy) A man-in-the-middle proxy for iOS and OS X device push connections
-- [**380**Star][2m] [thejambo/awesome-testing](https://github.com/thejambo/awesome-testing) A curated list of testing resources
+- [**381**Star][7m] [Py] [hurricanelabs/machinae](https://github.com/hurricanelabs/machinae) Machinae Security Intelligence Collector
+- [**381**Star][10m] [Py] [hahwul/a2sv](https://github.com/hahwul/a2sv) Auto Scanning to SSL Vulnerability
+- [**381**Star][1y] [JS] [empireproject/empire-gui](https://github.com/empireproject/empire-gui) a graphical interface to the Empire post-exploitation Framework
+- [**381**Star][2m] [dsopas/assessment-mindset](https://github.com/dsopas/assessment-mindset) Security Mindmap that could be useful for the infosec community when doing pentest, bug bounty or red-team assessments.
+- [**381**Star][4y] [Py] [deresz/funcap](https://github.com/deresz/funcap) IDA Pro script to add some useful runtime info to static analysis
+- [**381**Star][11m] [C] [coolstar/electra1131](https://github.com/coolstar/electra1131) Electra for iOS 11.0 - 11.3.1
+- [**381**Star][1m] [C#] [bloodhoundad/sharphound](https://github.com/bloodhoundad/sharphound) C# Rewrite of the BloodHound Ingestor
+- [**381**Star][4m] [C++] [bastibl/gr-ieee802-11](https://github.com/bastibl/gr-ieee802-11) IEEE 802.11 a/g/p Transceiver
+- [**380**Star][12d] [TS] [shroudedcode/apk-mitm](https://github.com/shroudedcode/apk-mitm)
- [**380**Star][2y] [C] [sandeepmistry/arduino-bleperipheral](https://github.com/sandeepmistry/arduino-bleperipheral) An Arduino library for creating custom BLE peripherals with Nordic Semiconductor's nRF8001 or nR51822.
+- [**380**Star][10m] [C] [robertfisk/usg](https://github.com/robertfisk/usg) The USG is Good, not Bad
- [**380**Star][3y] [JS] [risingstack/protect](https://github.com/risingstack/protect) Proactively protect your Node.js web services
-- [**380**Star][21d] [C++] [msoos/cryptominisat](https://github.com/msoos/cryptominisat) An advanced SAT solver
+- [**380**Star][2d] [Ruby] [puppetlabs/puppetlabs-mysql](https://github.com/puppetlabs/puppetlabs-mysql) MySQL Puppet Module / Manifests + Types & Providers
+- [**380**Star][7d] [C++] [msoos/cryptominisat](https://github.com/msoos/cryptominisat) An advanced SAT solver
- [**380**Star][3y] [C] [micrictor/stuxnet](https://github.com/micrictor/stuxnet) Open-source decompile of Stuxnet/myRTUs
-- [**380**Star][10m] [Py] [hahwul/a2sv](https://github.com/hahwul/a2sv) Auto Scanning to SSL Vulnerability
-- [**380**Star][3m] [Py] [foospidy/honeypy](https://github.com/foospidy/honeypy) A low to medium interaction honeypot.
-- [**380**Star][2m] [dsopas/assessment-mindset](https://github.com/dsopas/assessment-mindset) Security Mindmap that could be useful for the infosec community when doing pentest, bug bounty or red-team assessments.
-- [**380**Star][4y] [Py] [deresz/funcap](https://github.com/deresz/funcap) IDA Pro script to add some useful runtime info to static analysis
-- [**380**Star][11m] [C] [coolstar/electra1131](https://github.com/coolstar/electra1131) Electra for iOS 11.0 - 11.3.1
-- [**380**Star][4m] [C++] [bastibl/gr-ieee802-11](https://github.com/bastibl/gr-ieee802-11) IEEE 802.11 a/g/p Transceiver
+- [**380**Star][4m] [Py] [foospidy/honeypy](https://github.com/foospidy/honeypy) A low to medium interaction honeypot.
+- [**380**Star][3m] [Jupyter Notebook] [endgameinc/ember](https://github.com/endgameinc/ember) a collection of features from PE files that serve as a benchmark dataset for researchers.
+- [**379**Star][5y] [Py] [mfrister/pushproxy](https://github.com/mfrister/pushproxy) A man-in-the-middle proxy for iOS and OS X device push connections
+- [**379**Star][3y] [slyth11907/cheatsheets](https://github.com/slyth11907/cheatsheets) Helped during my OSCP lab days.
- [**379**Star][1y] [Py] [rhinosecuritylabs/sleuthql](https://github.com/rhinosecuritylabs/sleuthql) Python3 Burp History parsing tool to discover potential SQL injection points. To be used in tandem with SQLmap.
-- [**379**Star][2y] [Java] [nickstadb/barmie](https://github.com/nickstadb/barmie) Java RMI enumeration and attack tool.
-- [**379**Star][26d] [JS] [nccgroup/tracy](https://github.com/nccgroup/tracy) A tool designed to assist with finding all sinks and sources of a web application and display these results in a digestible manner.
-- [**379**Star][1m] [Jupyter Notebook] [microsoft/windowsdefenderatp-hunting-queries](https://github.com/microsoft/windowsdefenderatp-hunting-queries) Sample queries for Advanced hunting in Microsoft Defender ATP
+- [**379**Star][1y] [CSS] [nowsecure/secure-mobile-development](https://github.com/nowsecure/secure-mobile-development) A Collection of Secure Mobile Development Best Practices
- [**379**Star][3m] [Rust] [microsoft/lain](https://github.com/microsoft/lain) A fuzzer framework built in Rust
-- [**379**Star][7m] [Py] [hurricanelabs/machinae](https://github.com/hurricanelabs/machinae) Machinae Security Intelligence Collector
-- [**379**Star][1y] [JS] [empireproject/empire-gui](https://github.com/empireproject/empire-gui) Empire client application
+- [**379**Star][7m] [jnusimba/androidsecnotes](https://github.com/jnusimba/androidsecnotes) some learning notes about Android Security
+- [**379**Star][7d] [C++] [google/binexport](https://github.com/google/binexport) Export disassemblies into Protocol Buffers and to BinNavi databases
+- [**379**Star][2y] [ObjC] [codermjlee/mjapptools](https://github.com/codermjlee/mjapptools) 【越狱-逆向】处理iOS APP信息的命令行工具
+- [**378**Star][7m] [unprovable/pentesthardware](https://github.com/unprovable/pentesthardware) Kinda useful notes collated together publicly
- [**378**Star][2y] [Shell] [screetsec/microsploit](https://github.com/screetsec/microsploit) Fast and easy create backdoor office exploitation using module metasploit packet , Microsoft Office , Open Office , Macro attack , Buffer Overflow
-- [**378**Star][10m] [C] [robertfisk/usg](https://github.com/robertfisk/usg) The USG is Good, not Bad
-- [**378**Star][3m] [Py] [p1r06u3/opencanary_web](https://github.com/p1r06u3/opencanary_web) The web management platform of honeypot
-- [**378**Star][1y] [C] [markus-go/bonesi](https://github.com/markus-go/bonesi) BoNeSi - the DDoS Botnet Simulator
+- [**378**Star][2y] [TeX] [mimoo/rsa-and-lll-attacks](https://github.com/mimoo/rsa-and-lll-attacks) attacking RSA via lattice reductions (LLL)
- [**378**Star][9m] [Py] [k4m4/onioff](https://github.com/k4m4/onioff) inspecting Deep Web URLs (or onions).
-- [**378**Star][1m] [C++] [google/binexport](https://github.com/google/binexport) Export disassemblies into Protocol Buffers and to BinNavi databases
+- [**378**Star][4m] [C] [hackgnar/ble_ctf](https://github.com/hackgnar/ble_ctf) A Bluetooth low energy capture the flag
+- [**378**Star][1m] [C] [furrtek/portapack-havoc](https://github.com/furrtek/portapack-havoc) Custom firmware for the HackRF SDR + PortaPack H1 addon
+- [**378**Star][13d] [Ruby] [david942j/seccomp-tools](https://github.com/david942j/seccomp-tools) Provide powerful tools for seccomp analysis. targeted to (but not limited to) analyze seccomp sandbox in CTF pwn challenges
- [**378**Star][1y] [PHP] [bo0om/php_imap_open_exploit](https://github.com/bo0om/php_imap_open_exploit) Bypassing disabled exec functions in PHP (c) CRLF
-- [**377**Star][12d] [Py] [eerkunt/terraform-compliance](https://github.com/eerkunt/terraform-compliance) a lightweight, security focused, BDD test framework against terraform.
-- [**377**Star][6m] [unprovable/pentesthardware](https://github.com/unprovable/pentesthardware) Kinda useful notes collated together publicly
-- [**377**Star][3y] [slyth11907/cheatsheets](https://github.com/slyth11907/cheatsheets) Helped during my OSCP lab days.
-- [**377**Star][2y] [PowerShell] [gfoss/psrecon](https://github.com/gfoss/psrecon)
-- [**377**Star][2y] [Objective-C] [codermjlee/mjapptools](https://github.com/codermjlee/mjapptools) 【越狱-逆向】处理iOS APP信息的命令行工具
+- [**378**Star][1m] [Py] [0x4d31/fatt](https://github.com/0x4d31/fatt) FATT /fingerprintAllTheThings - a pyshark based script for extracting network metadata and fingerprints from pcap files and live network traffic
+- [**377**Star][2y] [PS] [gfoss/psrecon](https://github.com/gfoss/psrecon) gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted data, hashes PowerShell and various system properties, and sends the data off to the security team
+- [**377**Star][27d] [Py] [fox-it/bloodhound.py](https://github.com/fox-it/bloodhound.py) a Python based ingestor for BloodHound, based on Impacket.
- [**377**Star][1y] [ansible/ansible-lockdown](https://github.com/ansible/ansible-lockdown) Ansible playbook roles for security
-- [**376**Star][9d] [Makefile] [kuoruan/openwrt-v2ray](https://github.com/kuoruan/openwrt-v2ray) V2Ray for OpenWrt
-- [**376**Star][10m] [Py] [wyatu/cve-2018-20250](https://github.com/wyatu/cve-2018-20250) exp for
-- [**376**Star][2y] [TeX] [mimoo/rsa-and-lll-attacks](https://github.com/mimoo/rsa-and-lll-attacks) attacking RSA via lattice reductions (LLL)
-- [**376**Star][4m] [C] [hackgnar/ble_ctf](https://github.com/hackgnar/ble_ctf) A Bluetooth low energy capture the flag
-- [**376**Star][1m] [Py] [0x4d31/fatt](https://github.com/0x4d31/fatt) FATT /fingerprintAllTheThings - a pyshark based script for extracting network metadata and fingerprints from pcap files and live network traffic
+- [**376**Star][6m] [Ruby] [mdp/gibberish](https://github.com/mdp/gibberish) Simple Ruby encryption module
+- [**376**Star][8m] [C] [ridter/pentest](https://github.com/ridter/pentest) tools
+- [**376**Star][27d] [Py] [random-robbie/my-shodan-scripts](https://github.com/random-robbie/my-shodan-scripts) Collection of Scripts for shodan searching stuff.
+- [**376**Star][1m] [HTML] [howsecureismypassword/hsimp](https://github.com/howsecureismypassword/hsimp) How Secure is My Password for your own website
+- [**376**Star][4y] [C#] [goliate/hidden-tear](https://github.com/goliate/hidden-tear) ransomware open-sources
+- [**376**Star][16d] [Ruby] [dradis/dradis-ce](https://github.com/dradis/dradis-ce) Colllaboration and reporting for IT Security teams
+- [**376**Star][2m] [Py] [dinotools/dionaea](https://github.com/dinotools/dionaea) Home of the dionaea honeypot
+- [**376**Star][5y] [C++] [clymb3r/kdexploitme](https://github.com/clymb3r/kdexploitme) A kernel driver to practice writing exploits against, as well as some example exploits using public techniques.
+- [**376**Star][2y] [Py] [0x4d31/burpa](https://github.com/0x4d31/burpa) Burp-Automator: A Burp Suite Automation Tool with Slack Integration. It can be used with Jenkins and Selenium to automate Dynamic Application Security Testing (DAST).
+- [**375**Star][10m] [Py] [wyatu/cve-2018-20250](https://github.com/wyatu/cve-2018-20250) exp for
- [**375**Star][3y] [C] [sensepost/usabuse](https://github.com/sensepost/usabuse) Universal Serial aBUSe is a project to demonstrate the risks of hardware bypasses of software security by Rogan Dawes at SensePost.
- [**375**Star][7m] [Py] [secrary/ssma](https://github.com/secrary/ssma) SSMA - Simple Static Malware Analyzer [This project is not maintained anymore]
-- [**375**Star][8m] [C] [ridter/pentest](https://github.com/ridter/pentest) tools
-- [**375**Star][1y] [CSS] [nowsecure/secure-mobile-development](https://github.com/nowsecure/secure-mobile-development) A Collection of Secure Mobile Development Best Practices
+- [**375**Star][1y] [Py] [rhynorater/cve-2018-15473-exploit](https://github.com/rhynorater/cve-2018-15473-exploit) Exploit written in Python for CVE-2018-15473 with threading and export formats
+- [**375**Star][3y] [Go] [q3k/crowbar](https://github.com/q3k/crowbar) Tunnel TCP over a plain HTTP session (warning: mediocre Go code)
+- [**375**Star][2m] [Java] [nccgroup/autorepeater](https://github.com/nccgroup/autorepeater) Automated HTTP Request Repeating With Burp Suite
+- [**375**Star][2m] [Py] [maldevel/emailharvester](https://github.com/maldevel/emailharvester) Email addresses harvester
- [**375**Star][1y] [C++] [liveoverflow/pwnadventure3](https://github.com/liveoverflow/pwnadventure3) PwnAdventure3 Server
- [**375**Star][5y] [C] [jvns/kernel-module-fun](https://github.com/jvns/kernel-module-fun) Some fun things you can do with kernel modules (all "bad ideas")
- [**375**Star][6y] [C] [heardrwt/revealloader](https://github.com/heardrwt/revealloader) Reveal Loader dynamically loads libReveal.dylib (Reveal.app support) into iOS apps on jailbroken devices.
-- [**375**Star][4y] [C#] [goliate/hidden-tear](https://github.com/goliate/hidden-tear) ransomware open-sources
-- [**375**Star][3m] [Jupyter Notebook] [endgameinc/ember](https://github.com/endgameinc/ember) a collection of features from PE files that serve as a benchmark dataset for researchers.
-- [**375**Star][5y] [C++] [clymb3r/kdexploitme](https://github.com/clymb3r/kdexploitme) A kernel driver to practice writing exploits against, as well as some example exploits using public techniques.
+- [**375**Star][3y] [C++] [evilsocket/arminject](https://github.com/evilsocket/arminject) An application to dynamically inject a shared object into a running process on ARM architectures.
+- [**375**Star][2y] [aozhimin/ios-debug-hacks](https://github.com/aozhimin/ios-debug-hacks)
- [**375**Star][2y] [Py] [1111joe1111/ida_ea](https://github.com/1111joe1111/ida_ea) A set of exploitation/reversing aids for IDA
-- [**375**Star][2y] [Py] [0x4d31/burpa](https://github.com/0x4d31/burpa) Burp-Automator: A Burp Suite Automation Tool with Slack Integration. It can be used with Jenkins and Selenium to automate Dynamic Application Security Testing (DAST).
-- [**374**Star][3y] [Go] [q3k/crowbar](https://github.com/q3k/crowbar) Tunnel TCP over a plain HTTP session (warning: mediocre Go code)
-- [**374**Star][2m] [Java] [nccgroup/autorepeater](https://github.com/nccgroup/autorepeater) Automated HTTP Request Repeating With Burp Suite
-- [**374**Star][2m] [Py] [maldevel/emailharvester](https://github.com/maldevel/emailharvester) Email addresses harvester
-- [**374**Star][7m] [jnusimba/androidsecnotes](https://github.com/jnusimba/androidsecnotes) some learning notes about Android Security
-- [**374**Star][3y] [C++] [evilsocket/arminject](https://github.com/evilsocket/arminject) An application to dynamically inject a shared object into a running process on ARM architectures.
-- [**374**Star][11d] [Ruby] [david942j/seccomp-tools](https://github.com/david942j/seccomp-tools) Provide powerful tools for seccomp analysis
-- [**374**Star][1m] [C#] [bloodhoundad/sharphound](https://github.com/bloodhoundad/sharphound) The BloodHound C# Ingestor
+- [**374**Star][4m] [Py] [xuanhun/pythonhackingbook1](https://github.com/xuanhun/pythonhackingbook1) Python黑客编程之极速入门
+- [**374**Star][21d] [C++] [tihmstar/futurerestore](https://github.com/tihmstar/futurerestore) A hacked up idevicerestore wrapper, which allows specifying SEP and Baseband for restoring
+- [**374**Star][21d] [Py] [skavngr/rapidscan](https://github.com/skavngr/rapidscan) | The Multi-Tool Web Vulnerability Scanner.
+- [**374**Star][3m] [Shell] [screetsec/vegile](https://github.com/screetsec/vegile) This tool will setting up your backdoor/rootkits when backdoor already setup it will be hidden your spesisifc process,unlimited your session in metasploit and transparent. Even when it killed, it will re-run again. There always be a procces which while run another process,So we can assume that this procces is unstopable like a Ghost in The Shell
+- [**374**Star][8m] [opencybertranslationproject/linux-basics-for-hackers](https://github.com/opencybertranslationproject/linux-basics-for-hackers) 书籍《Linux Basics for Hackers》2019版中文翻译版
+- [**374**Star][14d] [Py] [fkie-cad/fact_core](https://github.com/fkie-cad/fact_core) Firmware Analysis and Comparison Tool
+- [**374**Star][2m] [C++] [crypto2011/idr](https://github.com/crypto2011/idr) Interactive Delphi Reconstructor
+- [**373**Star][6m] [Py] [vysecurity/domlink](https://github.com/vysecurity/DomLink) A tool to link a domain with registered organisation names and emails, to other domains.
- [**373**Star][10m] [c] [cryptsetup/cryptsetup](https://gitlab.com/cryptsetup/cryptsetup)
-- [**373**Star][1y] [Py] [rhynorater/cve-2018-15473-exploit](https://github.com/rhynorater/cve-2018-15473-exploit) Exploit written in Python for CVE-2018-15473 with threading and export formats
-- [**373**Star][2m] [Py] [dinotools/dionaea](https://github.com/dinotools/dionaea) Home of the dionaea honeypot
-- [**373**Star][2m] [C++] [crypto2011/idr](https://github.com/crypto2011/idr) Interactive Delphi Reconstructor
-- [**373**Star][2y] [aozhimin/ios-debug-hacks](https://github.com/aozhimin/ios-debug-hacks)
-- [**372**Star][2y] [PowerShell] [xorrior/remoterecon](https://github.com/xorrior/remoterecon) Remote Recon and Collection
-- [**372**Star][19d] [C++] [tihmstar/futurerestore](https://github.com/tihmstar/futurerestore) A hacked up idevicerestore wrapper, which allows specifying SEP and Baseband for restoring
-- [**372**Star][2m] [Shell] [screetsec/vegile](https://github.com/screetsec/vegile) This tool will setting up your backdoor/rootkits when backdoor already setup it will be hidden your spesisifc process,unlimited your session in metasploit and transparent. Even when it killed, it will re-run again. There always be a procces which while run another process,So we can assume that this procces is unstopable like a Ghost in The Shell
+- [**373**Star][21d] [zer0yu/cybersecurityrss](https://github.com/zer0yu/cybersecurityrss) RSS: 优秀的个人情报来源
+- [**373**Star][5m] [xtiankisutsa/awesome-mobile-ctf](https://github.com/xtiankisutsa/awesome-mobile-ctf) This is a curated list of mobile based CTFs, write-ups and vulnerable apps. Most of them are android based due to the popularity of the platform.
+- [**373**Star][2y] [PS] [xorrior/remoterecon](https://github.com/xorrior/remoterecon) Remote Recon and Collection
+- [**373**Star][8d] [JS] [nowsecure/r2frida](https://github.com/nowsecure/r2frida) Radare2 and Frida better together.
+- [**373**Star][5d] [C++] [microsoft/llvm-mctoll](https://github.com/microsoft/llvm-mctoll) statically (AOT) translates (or raises) binaries to LLVM IR
- [**372**Star][2y] [Elixir] [robinmonjo/coincoin](https://github.com/robinmonjo/coincoin) Blockchain based cryptocurrency proof-of-concept in Elixir. Feedback welcome
-- [**372**Star][25d] [Py] [random-robbie/my-shodan-scripts](https://github.com/random-robbie/my-shodan-scripts) Collection of Scripts for shodan searching stuff.
+- [**372**Star][1y] [Shell] [ptb/mac-setup](https://github.com/ptb/mac-setup)
+- [**372**Star][2m] [Py] [pielco11/fav-up](https://github.com/pielco11/fav-up) IP lookup from favicon using Shodan
+- [**372**Star][2d] [C++] [netis/packet-agent](https://github.com/netis/packet-agent) A toolset for network packet capture, forwarding and analysis via GRE/Cloud.
+- [**372**Star][26d] [JS] [nccgroup/singularity](https://github.com/nccgroup/singularity) A DNS rebinding attack framework.
+- [**372**Star][3d] [C++] [namecoin/namecoin-core](https://github.com/namecoin/namecoin-core) Reimplementation of Namecoin on top of the current Bitcoin Core codebase.
+- [**372**Star][3y] [C++] [m00nrise/processhider](https://github.com/m00nrise/processhider) Post-exploitation tool for hiding processes from monitoring applications
+- [**372**Star][2m] [AngelScript] [inquest/malware-samples](https://github.com/inquest/malware-samples) A collection of malware samples and relevant dissection information, most probably referenced from
+- [**372**Star][10d] [hkbakke/bash-insulter](https://github.com/hkbakke/bash-insulter) Insults the user when typing wrong command
- [**372**Star][3y] [georgiaw/smartphone-pentest-framework](https://github.com/georgiaw/smartphone-pentest-framework) Repository for the Smartphone Pentest Framework (SPF)
-- [**371**Star][6m] [Py] [vysecurity/domlink](https://github.com/vysecurity/DomLink) A tool to link a domain with registered organisation names and emails, to other domains.
-- [**371**Star][18d] [zer0yu/cybersecurityrss](https://github.com/zer0yu/cybersecurityrss) RSS: 优秀的个人情报来源
-- [**371**Star][1y] [Shell] [ptb/mac-setup](https://github.com/ptb/mac-setup)
-- [**371**Star][8m] [opencybertranslationproject/linux-basics-for-hackers](https://github.com/opencybertranslationproject/linux-basics-for-hackers) 书籍《Linux Basics for Hackers》2019版中文翻译版
-- [**371**Star][24d] [JS] [nccgroup/singularity](https://github.com/nccgroup/singularity) A DNS rebinding attack framework.
+- [**372**Star][2m] [Py] [dedsecinside/torbot](https://github.com/dedsecinside/torbot) Dark Web OSINT Tool
+- [**372**Star][1y] [Go] [cardigann/cardigann](https://github.com/cardigann/cardigann) A proxy server for adding new indexers to Sonarr, SickRage and other media managers
+- [**371**Star][21d] [cisco-talos/clamav-faq](https://github.com/cisco-talos/clamav-faq) ClamAV FAQ
+- [**371**Star][3y] [PHP] [nikicat/web-malware-collection](https://github.com/nikicat/web-malware-collection) Clone of svn repository of
- [**371**Star][6m] [Rust] [gamozolabs/orange_slice](https://github.com/gamozolabs/orange_slice) A research kernel and hypervisor attempting to get fully deterministic emulation with minimum performance cost
-- [**371**Star][14d] [Ruby] [dradis/dradis-ce](https://github.com/dradis/dradis-ce) Colllaboration and reporting for IT Security teams
-- [**370**Star][2m] [renwax23/xss-payloads](https://github.com/renwax23/xss-payloads) List of XSS Vectors/Payloads
-- [**370**Star][25d] [JS] [nowsecure/r2frida](https://github.com/nowsecure/r2frida) Radare2 and Frida better together.
-- [**370**Star][3y] [PHP] [nikicat/web-malware-collection](https://github.com/nikicat/web-malware-collection) Clone of svn repository of
-- [**370**Star][8d] [C++] [namecoin/namecoin-core](https://github.com/namecoin/namecoin-core) Reimplementation of Namecoin on top of the current Bitcoin Core codebase.
+- [**371**Star][2y] [C] [cr4sh/windowsregistryrootkit](https://github.com/cr4sh/windowsregistryrootkit) Kernel rootkit, that lives inside the Windows registry values data
+- [**371**Star][3y] [Py] [androidhooker/hooker](https://github.com/androidhooker/hooker) Hooker is an opensource project for dynamic analyses of Android applications. This project provides various tools and applications that can be use to automaticaly intercept and modify any API calls made by a targeted application.
+- [**371**Star][4y] [JS] [allfro/burpkit](https://github.com/allfro/burpkit) Next-gen BurpSuite penetration testing tool
+- [**370**Star][2m] [Dockerfile] [onplus/v2hero](https://github.com/onplus/v2hero) All Free . Deploy V2Ray to Heroku . v2ray学习参考
+- [**370**Star][7m] [Py] [s0md3v/cloak](https://github.com/s0md3v/Cloak) Cloak can backdoor any python script with some tricks.
+- [**370**Star][2m] [Py] [tmr232/sark](https://github.com/tmr232/sark) IDAPython Made Easy
+- [**370**Star][7m] [Py] [tidesec/tidefinger](https://github.com/tidesec/tidefinger) Fingerprinting tool.
+- [**370**Star][4y] [Py] [rrenaud/gibberish-detector](https://github.com/rrenaud/gibberish-detector) A small program to detect gibberish using a Markov Chain
+- [**370**Star][3m] [renwax23/xss-payloads](https://github.com/renwax23/xss-payloads) List of XSS Vectors/Payloads
- [**370**Star][2m] [Py] [lyft/metadataproxy](https://github.com/lyft/metadataproxy) A proxy for AWS's metadata service that gives out scoped IAM credentials from STS
-- [**370**Star][12d] [Py] [fkie-cad/fact_core](https://github.com/fkie-cad/fact_core) Firmware Analysis and Comparison Tool
-- [**370**Star][2y] [C] [cr4sh/windowsregistryrootkit](https://github.com/cr4sh/windowsregistryrootkit) Kernel rootkit, that lives inside the Windows registry values data
-- [**370**Star][15d] [PHP] [blackarch/webshells](https://github.com/blackarch/webshells) Various webshells. We accept pull requests for additions to this collection.
-- [**370**Star][3y] [Py] [androidhooker/hooker](https://github.com/androidhooker/hooker) Hooker is an opensource project for dynamic analyses of Android applications. This project provides various tools and applications that can be use to automaticaly intercept and modify any API calls made by a targeted application.
-- [**370**Star][4y] [JS] [allfro/burpkit](https://github.com/allfro/burpkit) Next-gen BurpSuite penetration testing tool
+- [**370**Star][2y] [C++] [breenmachine/rottenpotatong](https://github.com/breenmachine/rottenpotatong) New version of RottenPotato as a C++ DLL and standalone C++ binary - no need for meterpreter or other tools.
+- [**370**Star][17d] [PHP] [blackarch/webshells](https://github.com/blackarch/webshells) Various webshells. We accept pull requests for additions to this collection.
+- [**370**Star][1y] [C++] [alonemonkey/iosrebook](https://github.com/alonemonkey/iosrebook) 《iOS应用逆向与安全》随书源码
- [**369**Star][5y] [Go] [vishvananda/wormhole](https://github.com/vishvananda/wormhole) A smart proxy to connect docker containers.
-- [**369**Star][15d] [Py] [jiangxufeng/v2rayl](https://github.com/jiangxufeng/v2rayl) v2ray linux GUI客户端,支持订阅、vemss、ss等协议,自动更新订阅、检查版本更新
+- [**369**Star][22d] [Py] [pdbpp/pdbpp](https://github.com/pdbpp/pdbpp) pdb++, a drop-in replacement for pdb (the Python debugger)
+- [**369**Star][3m] [C++] [werkamsus/lilith](https://github.com/werkamsus/lilith) Lilith, The Open Source C++ Remote Administration Tool (RAT)
+- [**369**Star][9d] [Shell] [trimstray/otseca](https://github.com/trimstray/otseca) security auditing tool to search and dump system configuration. It allows you to generate reports in HTML or RAW-HTML formats.
+- [**369**Star][9m] [Py] [sibears/idagolanghelper](https://github.com/sibears/idagolanghelper) Set of IDA Pro scripts for parsing GoLang types information stored in compiled binary
+- [**369**Star][4m] [Py] [p1sec/qcsuper](https://github.com/p1sec/qcsuper) QCSuper is a tool communicating with Qualcomm-based phones and modems, allowing to capture raw 2G/3G/4G radio frames, among other things.
- [**369**Star][7y] [Py] [moxie0/knockknock](https://github.com/moxie0/knockknock) A simple, secure, and stealthy port knocking implementation that does not use libpcap or bind to a socket interface.
-- [**369**Star][2m] [Py] [dedsecinside/torbot](https://github.com/dedsecinside/torbot) Dark Web OSINT Tool
-- [**369**Star][1y] [C++] [alonemonkey/iosrebook](https://github.com/alonemonkey/iosrebook) 《iOS应用逆向与安全》随书源码
-- [**368**Star][5m] [xtiankisutsa/awesome-mobile-ctf](https://github.com/xtiankisutsa/awesome-mobile-ctf) This is a curated list of mobile based CTFs, write-ups and vulnerable apps. Most of them are android based due to the popularity of the platform.
-- [**368**Star][2m] [Py] [tmr232/sark](https://github.com/tmr232/sark) IDAPython Made Easy
+- [**369**Star][5m] [C] [hzqst/vmwarehardenedloader](https://github.com/hzqst/vmwarehardenedloader) Vmware Hardened VM detection mitigation loader (anti anti-vm)
+- [**369**Star][1m] [Py] [emtunc/slackpirate](https://github.com/emtunc/slackpirate) Slack Enumeration and Extraction Tool - extract sensitive information from a Slack Workspace
+- [**368**Star][2y] [Java] [zc-zh-001/shadowsocks-share](https://github.com/zc-zh-001/shadowsocks-share) 示例站点
+- [**368**Star][3m] [lcatro/source-and-fuzzing](https://github.com/lcatro/Source-and-Fuzzing) 一些阅读源码和Fuzzing 的经验,涵盖黑盒与白盒测试..
+- [**368**Star][1y] [C] [battelle/afl-unicorn](https://github.com/Battelle/afl-unicorn) afl-unicorn lets you fuzz any piece of binary that can be emulated by Unicorn Engine.
+- [**368**Star][8d] [Ruby] [winrb/winrm](https://github.com/winrb/winrm) Ruby library for Windows Remote Management
- [**368**Star][7y] [C++] [opensecurityresearch/dllinjector](https://github.com/opensecurityresearch/dllinjector) dll injection tool that implements various methods
- [**368**Star][2y] [Py] [lightos/credmap](https://github.com/lightos/credmap) The Credential Mapper
- [**368**Star][3y] [C++] [jlospinoso/gargoyle](https://github.com/jlospinoso/gargoyle) A memory scanning evasion technique
- [**368**Star][2y] [jaybosamiya/security-notes](https://github.com/jaybosamiya/security-notes)
-- [**368**Star][25d] [Py] [fox-it/bloodhound.py](https://github.com/fox-it/bloodhound.py) A Python based ingestor for BloodHound
+- [**368**Star][2y] [Shell] [functionclub/yankeebbr](https://github.com/functionclub/yankeebbr) 来自Loc大佬Yankee魔改的BBR的Debian一键安装包
- [**368**Star][6m] [Swift] [evermeer/passportscanner](https://github.com/evermeer/passportscanner) Scan the MRZ code of a passport and extract the firstname, lastname, passport number, nationality, date of birth, expiration date and personal numer.
-- [**368**Star][2y] [C++] [breenmachine/rottenpotatong](https://github.com/breenmachine/rottenpotatong) New version of RottenPotato as a C++ DLL and standalone C++ binary - no need for meterpreter or other tools.
-- [**367**Star][2y] [Java] [zc-zh-001/shadowsocks-share](https://github.com/zc-zh-001/shadowsocks-share) 示例站点
-- [**367**Star][1m] [Ruby] [winrb/winrm](https://github.com/winrb/winrm) Ruby library for Windows Remote Management
-- [**367**Star][9m] [Py] [sibears/idagolanghelper](https://github.com/sibears/idagolanghelper) Set of IDA Pro scripts for parsing GoLang types information stored in compiled binary
-- [**367**Star][4y] [Py] [rrenaud/gibberish-detector](https://github.com/rrenaud/gibberish-detector) A small program to detect gibberish using a Markov Chain
-- [**367**Star][2m] [Py] [pielco11/fav-up](https://github.com/pielco11/fav-up) IP lookup from favicon using Shodan
-- [**367**Star][5m] [C] [hzqst/vmwarehardenedloader](https://github.com/hzqst/vmwarehardenedloader) Vmware Hardened VM detection mitigation loader (anti anti-vm)
-- [**367**Star][8d] [hkbakke/bash-insulter](https://github.com/hkbakke/bash-insulter) Insults the user when typing wrong command
-- [**367**Star][11m] [Py] [crypt0s/fakedns](https://github.com/crypt0s/fakedns) A regular-expression based python MITM DNS server with support for DNS Rebinding attacks
-- [**367**Star][10y] [C] [brl/obfuscated-openssh](https://github.com/brl/obfuscated-openssh)
-- [**366**Star][26d] [C++] [0x09al/rdpthief](https://github.com/0x09al/rdpthief) Extracting Clear Text Passwords from mstsc.exe using API Hooking.
-- [**366**Star][7m] [Py] [s0md3v/cloak](https://github.com/s0md3v/Cloak) Cloak can backdoor any python script with some tricks.
-- [**366**Star][3m] [lcatro/source-and-fuzzing](https://github.com/lcatro/Source-and-Fuzzing) 一些阅读源码和Fuzzing 的经验,涵盖黑盒与白盒测试..
-- [**366**Star][2y] [Py] [vysecurity/morphhta](https://github.com/vysecurity/morphHTA) morphHTA - Morphing Cobalt Strike's evil.HTA
-- [**366**Star][2y] [wtsxdev/malware-analysis](https://github.com/wtsxdev/malware-analysis) List of awesome malware analysis tools and resources
-- [**366**Star][3y] [Java] [ssun125/lanmitm](https://github.com/ssun125/lanmitm) Android中间人攻击测试工具
-- [**366**Star][12d] [C++] [microsoft/llvm-mctoll](https://github.com/microsoft/llvm-mctoll) statically (AOT) translates (or raises) binaries to LLVM IR
-- [**366**Star][2m] [AngelScript] [inquest/malware-samples](https://github.com/inquest/malware-samples) A collection of malware samples and relevant dissection information, most probably referenced from
-- [**366**Star][2y] [feicong/sec_skills](https://github.com/feicong/sec_skills) 软件安全工程师技能表
-- [**366**Star][1m] [Py] [emtunc/slackpirate](https://github.com/emtunc/slackpirate) Slack Enumeration and Extraction Tool - extract sensitive information from a Slack Workspace
-- [**366**Star][4m] [Ruby] [digininja/pipal](https://github.com/digininja/pipal) Pipal, THE password analyser
-- [**366**Star][1y] [JS] [brannondorsey/dns-rebind-toolkit](https://github.com/brannondorsey/dns-rebind-toolkit) A front-end JavaScript toolkit for creating DNS rebinding attacks.
-- [**366**Star][5y] [C] [arialdomartini/morris-worm](https://github.com/arialdomartini/morris-worm) The original Morris Worm source code
-- [**365**Star][25d] [Shell] [trimstray/otseca](https://github.com/trimstray/otseca) security auditing tool to search and dump system configuration. It allows you to generate reports in HTML or RAW-HTML formats.
-- [**365**Star][7m] [Py] [tidesec/tidefinger](https://github.com/tidesec/tidefinger) TideFinger——指纹识别小工具,汲取整合了多个web指纹库,结合了多种指纹检测方法,让指纹检测更快捷、准确。
-- [**365**Star][1y] [C++] [szechyjs/dsd](https://github.com/szechyjs/dsd) Digital Speech Decoder
-- [**365**Star][4m] [Py] [p1sec/qcsuper](https://github.com/p1sec/qcsuper) QCSuper is a tool communicating with Qualcomm-based phones and modems, allowing to capture raw 2G/3G/4G radio frames, among other things.
-- [**365**Star][2m] [Elm] [elm-community/elm-test](https://github.com/elm-community/elm-test) moved to elm-explorations/test
-- [**365**Star][21d] [chenerlich/fcl](https://github.com/chenerlich/fcl) FCL (Fileless Command Lines) - Known command lines of fileless malicious executions
-- [**365**Star][2y] [Py] [cclabsinc/rfcrack](https://github.com/cclabsinc/rfcrack) A Software Defined Radio Attack Tool
-- [**365**Star][2y] [TypeScript] [cazala/coin-hive-stratum](https://github.com/cazala/coin-hive-stratum) use CoinHive's JavaScript miner on any stratum pool
-- [**365**Star][6m] [Py] [carnal0wnage/weirdaal](https://github.com/carnal0wnage/weirdaal) WeirdAAL (AWS Attack Library)
-- [**365**Star][10m] [Py] [awslabs/aws-security-automation](https://github.com/awslabs/aws-security-automation) Collection of scripts and resources for DevSecOps and Automated Incident Response Security
-- [**365**Star][2y] [Py] [ajinabraham/owasp-xenotix-xss-exploit-framework](https://github.com/ajinabraham/owasp-xenotix-xss-exploit-framework) OWASP Xenotix XSS Exploit Framework is an advanced Cross Site Scripting (XSS) vulnerability detection and exploitation framework.
-- [**364**Star][2m] [Dockerfile] [onplus/v2hero](https://github.com/onplus/v2hero) All Free . Deploy V2Ray to Heroku . v2ray学习参考
-- [**364**Star][7d] [Java] [zaproxy/zap-extensions](https://github.com/zaproxy/zap-extensions) OWASP ZAP Add-ons
-- [**364**Star][4y] [Py] [ywolf/f-nascan](https://github.com/ywolf/f-nascan) Scanning a network asset information script
-- [**364**Star][3m] [C++] [werkamsus/lilith](https://github.com/werkamsus/lilith) Lilith, The Open Source C++ Remote Administration Tool (RAT)
-- [**364**Star][1y] [PowerShell] [netspi/pesecurity](https://github.com/netspi/pesecurity) PowerShell module to check if a Windows binary (EXE/DLL) has been compiled with ASLR, DEP, SafeSEH, StrongNaming, and Authenticode.
-- [**364**Star][2m] [Py] [l4ys/lazyida](https://github.com/l4ys/lazyida) Make your IDA Lazy!
+- [**368**Star][11m] [Py] [crypt0s/fakedns](https://github.com/crypt0s/fakedns) A regular-expression based python MITM DNS server with support for DNS Rebinding attacks
+- [**367**Star][3y] [Java] [ssun125/lanmitm](https://github.com/ssun125/lanmitm) Android中间人攻击测试工具
+- [**367**Star][5d] [Py] [realgam3/pymultitor](https://github.com/realgam3/pymultitor) pymultitor:Python 多线程 Tor 脚本
+- [**367**Star][1m] [Py] [micahflee/torbrowser-launcher](https://github.com/micahflee/torbrowser-launcher) Securely and easily download, verify, install, and launch Tor Browser in Linux
+- [**367**Star][2m] [Py] [l4ys/lazyida](https://github.com/l4ys/lazyida) Make your IDA Lazy!
View Details
@@ -3312,950 +3488,999 @@
+- [**367**Star][8m] [PS] [ferreirasc/oscp](https://github.com/ferreirasc/oscp) oscp study
+- [**367**Star][2y] [feicong/sec_skills](https://github.com/feicong/sec_skills) 软件安全工程师技能表
+- [**367**Star][11m] [Py] [enablesecurity/sipvicious](https://github.com/enablesecurity/sipvicious) SIPVicious suite is a set of security tools that can be used to audit SIP based VoIP systems.
+- [**367**Star][4m] [Ruby] [digininja/pipal](https://github.com/digininja/pipal) Pipal, THE password analyser
+- [**367**Star][2y] [Py] [cclabsinc/rfcrack](https://github.com/cclabsinc/rfcrack) A Software Defined Radio Attack Tool
+- [**367**Star][10y] [C] [brl/obfuscated-openssh](https://github.com/brl/obfuscated-openssh)
+- [**367**Star][2y] [JS] [brannondorsey/dns-rebind-toolkit](https://github.com/brannondorsey/dns-rebind-toolkit) A front-end JavaScript toolkit for creating DNS rebinding attacks.
+- [**367**Star][11m] [Py] [awslabs/aws-security-automation](https://github.com/awslabs/aws-security-automation) Collection of scripts and resources for DevSecOps and Automated Incident Response Security
+- [**367**Star][2y] [Py] [ajinabraham/owasp-xenotix-xss-exploit-framework](https://github.com/ajinabraham/owasp-xenotix-xss-exploit-framework) OWASP Xenotix XSS Exploit Framework is an advanced Cross Site Scripting (XSS) vulnerability detection and exploitation framework.
+- [**366**Star][2y] [Py] [vysecurity/morphhta](https://github.com/vysecurity/morphHTA) morphHTA - Morphing Cobalt Strike's evil.HTA
+- [**366**Star][5d] [Java] [zaproxy/zap-extensions](https://github.com/zaproxy/zap-extensions) OWASP ZAP Add-ons
+- [**366**Star][4y] [Py] [ywolf/f-nascan](https://github.com/ywolf/f-nascan) Scanning a network asset information script
+- [**366**Star][2y] [wtsxdev/malware-analysis](https://github.com/wtsxdev/malware-analysis) List of awesome malware analysis tools and resources
+- [**366**Star][1y] [PS] [netspi/pesecurity](https://github.com/netspi/pesecurity) PowerShell module to check if a Windows binary (EXE/DLL) has been compiled with ASLR, DEP, SafeSEH, StrongNaming, and Authenticode.
+- [**366**Star][3m] [Py] [neo23x0/munin](https://github.com/neo23x0/munin) Online hash checker for Virustotal and other services
+- [**366**Star][2m] [PS] [gdedrouas/exchange-ad-privesc](https://github.com/gdedrouas/exchange-ad-privesc) Exchange privilege escalations to Active Directory
+- [**366**Star][2y] [PHP] [attackercan/regexp-security-cheatsheet](https://github.com/attackercan/regexp-security-cheatsheet)
+- [**365**Star][3m] [Py] [pageauc/pi-timolo](https://github.com/pageauc/pi-timolo) Raspberry PI-TIMOLO ( PI-TImelapse, MOtion, LOwLight ) uses RPI picamera and python for Remote Headless Security Monitoring & Auto Sync files with rclone remote storage services. Auto Twilight Transitions and Low Light Camera Settings. This project is featured on Awesome List
+- [**365**Star][29d] [Shell] [matthewpierson/1033-ota-downgrader](https://github.com/matthewpierson/1033-ota-downgrader) First ever tool to downgrade ANY iPhone 5s, ANY iPad Air and (almost any) iPad Mini 2 to 10.3.3 with OTA blobs + checkm8!
+- [**365**Star][1y] [hannob/vulns](https://github.com/hannob/vulns) Named vulnerabilities and their practical impact
+- [**365**Star][2m] [Elm] [elm-community/elm-test](https://github.com/elm-community/elm-test) moved to elm-explorations/test
+- [**365**Star][23d] [chenerlich/fcl](https://github.com/chenerlich/fcl) FCL (Fileless Command Lines) - Known command lines of fileless malicious executions
+- [**365**Star][2y] [TS] [cazala/coin-hive-stratum](https://github.com/cazala/coin-hive-stratum) use CoinHive's JavaScript miner on any stratum pool
+- [**365**Star][7m] [Py] [carnal0wnage/weirdaal](https://github.com/carnal0wnage/weirdaal) WeirdAAL (AWS Attack Library)
+- [**365**Star][5y] [C] [arialdomartini/morris-worm](https://github.com/arialdomartini/morris-worm) The original Morris Worm source code
+- [**364**Star][9m] [C++] [tripwire/tripwire-open-source](https://github.com/tripwire/tripwire-open-source) Open Source Tripwire®
+- [**364**Star][1y] [C++] [szechyjs/dsd](https://github.com/szechyjs/dsd) Digital Speech Decoder
- [**364**Star][2y] [C] [k0keoyo/kdriver-fuzzer](https://github.com/k0keoyo/kdriver-fuzzer)
-- [**364**Star][8m] [PowerShell] [ferreirasc/oscp](https://github.com/ferreirasc/oscp) oscp study
-- [**364**Star][11m] [Py] [enablesecurity/sipvicious](https://github.com/enablesecurity/sipvicious) SIPVicious suite is a set of security tools that can be used to audit SIP based VoIP systems.
-- [**364**Star][2y] [PHP] [attackercan/regexp-security-cheatsheet](https://github.com/attackercan/regexp-security-cheatsheet)
-- [**363**Star][1y] [C] [battelle/afl-unicorn](https://github.com/Battelle/afl-unicorn) afl-unicorn lets you fuzz any piece of binary that can be emulated by Unicorn Engine.
+- [**364**Star][10m] [Go] [frichetten/cve-2019-5736-poc](https://github.com/frichetten/cve-2019-5736-poc) PoC for CVE-2019-5736
+- [**363**Star][2y] [ObjC] [wzqcongcong/macsubstrate](https://github.com/wzqcongcong/macsubstrate) Substrate for macOS
+- [**363**Star][1y] [Shell] [writeups/ios](https://github.com/writeups/ios) Here you can find write ups for iOS Vulnerabilities that have been released.
- [**363**Star][10m] [C++] [thosakwe/t2b](https://github.com/thosakwe/t2b) A wicked-powerful text macro language for building binary files.
+- [**363**Star][1m] [C++] [steven-michaud/hookcase](https://github.com/steven-michaud/hookcase) Tool for reverse engineering macOS/OS X
+- [**363**Star][8d] [Go] [sslmate/certspotter](https://github.com/sslmate/certspotter) Certificate Transparency Log Monitor
+- [**363**Star][14d] [C#] [security-code-scan/security-code-scan](https://github.com/security-code-scan/security-code-scan) Vulnerability Patterns Detector for C# and VB.NET
- [**363**Star][2y] [Py] [rc0r/afl-utils](https://github.com/rc0r/afl-utils) Utilities for automated crash sample processing/analysis, easy afl-fuzz job management and corpus optimization
- [**363**Star][2y] [petoolse/petools](https://github.com/petoolse/petools) PE Tools - Portable executable (PE) manipulation toolkit
-- [**363**Star][3m] [Py] [pageauc/pi-timolo](https://github.com/pageauc/pi-timolo) Raspberry PI-TIMOLO ( PI-TImelapse, MOtion, LOwLight ) uses RPI picamera and python for Remote Headless Security Monitoring & Auto Sync files with rclone remote storage services. Auto Twilight Transitions and Low Light Camera Settings. This project is featured on Awesome List
-- [**363**Star][3m] [Py] [neo23x0/munin](https://github.com/neo23x0/munin) Online hash checker for Virustotal and other services
-- [**363**Star][1m] [Py] [micahflee/torbrowser-launcher](https://github.com/micahflee/torbrowser-launcher) Securely and easily download, verify, install, and launch Tor Browser in Linux
-- [**363**Star][2m] [PowerShell] [gdedrouas/exchange-ad-privesc](https://github.com/gdedrouas/exchange-ad-privesc) Exchange privilege escalations to Active Directory
+- [**363**Star][5y] [PHP] [onesourcecat/phpvulhunter](https://github.com/onesourcecat/phpvulhunter) A tool that can scan php vulnerabilities automatically using static analysis methods
+- [**363**Star][2y] [Shell] [m4sc3r4n0/evil-droid](https://github.com/m4sc3r4n0/evil-droid) a framework that create & generate & embed apk payload to penetrate android platforms
+- [**363**Star][5d] [C++] [istio/proxy](https://github.com/istio/proxy) The Istio proxy components.
+- [**363**Star][2y] [Erlang] [ernw/ss7maper](https://github.com/ernw/ss7maper) SS7 MAP (pen-)testing toolkit.
+- [**363**Star][1y] [Go] [alexkohler/prealloc](https://github.com/alexkohler/prealloc) prealloc is a Go static analysis tool to find slice declarations that could potentially be preallocated.
- [**363**Star][11m] [Py] [ajinabraham/xenotix-python-keylogger](https://github.com/ajinabraham/xenotix-python-keylogger) Xenotix Python Keylogger for Windows.
-- [**362**Star][4m] [Py] [xuanhun/pythonhackingbook1](https://github.com/xuanhun/pythonhackingbook1) Python黑客编程之极速入门
-- [**362**Star][2y] [Objective-C] [wzqcongcong/macsubstrate](https://github.com/wzqcongcong/macsubstrate) Substrate for macOS
-- [**362**Star][1y] [Shell] [writeups/ios](https://github.com/writeups/ios) Here you can find write ups for iOS Vulnerabilities that have been released.
-- [**362**Star][9m] [C++] [tripwire/tripwire-open-source](https://github.com/tripwire/tripwire-open-source) Open Source Tripwire®
-- [**362**Star][7d] [Go] [sslmate/certspotter](https://github.com/sslmate/certspotter) Certificate Transparency Log Monitor
-- [**362**Star][19d] [Py] [skavngr/rapidscan](https://github.com/skavngr/rapidscan) | The Multi-Tool Web Vulnerability Scanner.
-- [**362**Star][12d] [C#] [security-code-scan/security-code-scan](https://github.com/security-code-scan/security-code-scan) Vulnerability Patterns Detector for C# and VB.NET
+- [**362**Star][4d] [CSS] [d2-projects/folder-explorer](https://github.com/d2-projects/folder-explorer) 分析文件目录,统计数据并以树形结构和图表的形式展示结果,也可以导出多种格式留存 | Analyse your folders and display the results in tree and statistical charts. If necessary, this software can help you export multiple file formats
+- [**362**Star][10m] [Py] [secynic/ipwhois](https://github.com/secynic/ipwhois) Retrieve and parse whois data for IPv4 and IPv6 addresses
- [**362**Star][2y] [Py] [roglew/pappy-proxy](https://github.com/roglew/pappy-proxy) An intercepting proxy for web application testing
-- [**362**Star][8d] [C++] [ondrejbudai/hidviz](https://github.com/ondrejbudai/hidviz) in-depth analysis of USB HID devices communication
-- [**362**Star][12m] [hannob/vulns](https://github.com/hannob/vulns) Named vulnerabilities and their practical impact
+- [**362**Star][2m] [C] [rgov/thunderbolt3unblocker](https://github.com/rgov/thunderbolt3unblocker) Enable unsupported Thunderbolt 3 peripherals on macOS
- [**362**Star][3y] [C] [gbrindisi/malware](https://github.com/gbrindisi/malware) malware source codes
-- [**362**Star][10m] [Go] [frichetten/cve-2019-5736-poc](https://github.com/frichetten/cve-2019-5736-poc) PoC for CVE-2019-5736
-- [**362**Star][2y] [Erlang] [ernw/ss7maper](https://github.com/ernw/ss7maper) SS7 MAP (pen-)testing toolkit. DISCONTINUED REPO, please use:
-- [**361**Star][1m] [C++] [steven-michaud/hookcase](https://github.com/steven-michaud/hookcase) Tool for reverse engineering macOS/OS X
-- [**361**Star][2m] [C] [rgov/thunderbolt3unblocker](https://github.com/rgov/thunderbolt3unblocker) Enable unsupported Thunderbolt 3 peripherals on macOS
-- [**361**Star][2y] [Shell] [m4sc3r4n0/evil-droid](https://github.com/m4sc3r4n0/evil-droid)
+- [**362**Star][9m] [fr0gger/awesome-ida-x64-olly-plugin](https://github.com/fr0gger/awesome-ida-x64-olly-plugin) Awesome IDA, x64DBG & OllyDBG plugin
+- [**362**Star][5m] [Makefile] [crifan/android_app_security_crack](https://github.com/crifan/android_app_security_crack) 安卓应用的安全和破解
+- [**362**Star][2y] [bluscreenofjeff/aggressorscripts](https://github.com/bluscreenofjeff/aggressorscripts) Aggressor scripts for use with Cobalt Strike 3.0+
+- [**361**Star][4y] [Go] [inconshreveable/srvdir](https://github.com/inconshreveable/srvdir) Expose any folder as an HTTPS fileserver
+- [**361**Star][3y] [C] [fsecurelabs/kernelfuzzer](https://github.com/FSecureLABS/KernelFuzzer) Cross Platform Kernel Fuzzer Framework
+- [**361**Star][21d] [Py] [tenable/poc](https://github.com/tenable/poc) Proof of Concepts
+- [**361**Star][9y] [C] [psgroove/psgroove](https://github.com/psgroove/psgroove) PSGroove
+- [**361**Star][2m] [Java] [patrickfav/uber-apk-signer](https://github.com/patrickfav/uber-apk-signer) A cli tool that helps signing and zip aligning single or multiple Android application packages (APKs) with either debug or provided release certificates. It supports v1, v2 and v3 Android signing scheme has an embedded debug keystore and auto verifies after signing.
+- [**360**Star][4m] [Py] [visipedia/inat_comp](https://github.com/visipedia/inat_comp) iNaturalist competition details
- [**360**Star][3y] [C] [rafael-santiago/pig](https://github.com/rafael-santiago/pig) A Linux packet crafting tool.
+- [**360**Star][7m] [Py] [orangetw/awesome-jenkins-rce-2019](https://github.com/orangetw/awesome-jenkins-rce-2019) There is no pre-auth RCE in Jenkins since May 2017, but this is the one!
+- [**360**Star][1m] [Go] [optiopay/klar](https://github.com/optiopay/klar) Integration of Clair and Docker Registry
- [**360**Star][4y] [mozilla/minion](https://github.com/mozilla/minion) a security testing framework built by Mozilla to bridge the gap between developers and security testers.
-- [**360**Star][2y] [bluscreenofjeff/aggressorscripts](https://github.com/bluscreenofjeff/aggressorscripts) Aggressor scripts for use with Cobalt Strike 3.0+
+- [**360**Star][10d] [Py] [davidtavarez/pwndb](https://github.com/davidtavarez/pwndb) Search for leaked credentials
+- [**360**Star][14d] [Py] [checkpointsw/karta](https://github.com/checkpointsw/karta) source code assisted fast binary matching plugin for IDA
- [**360**Star][2m] [Py] [a0rtega/metame](https://github.com/a0rtega/metame) metame is a metamorphic code engine for arbitrary executables
-- [**359**Star][3y] [C] [fsecurelabs/kernelfuzzer](https://github.com/FSecureLABS/KernelFuzzer) Cross Platform Kernel Fuzzer Framework
+- [**359**Star][3y] [C] [xiaoweime/wprotect](https://github.com/xiaoweime/wprotect) uses code-virtualization technic to protect binary from being reverse-engineered or unwanted modified.
- [**359**Star][4m] [C++] [wbenny/pdbex](https://github.com/wbenny/pdbex) pdbex is a utility for reconstructing structures and unions from the PDB into compilable C headers
-- [**359**Star][10m] [Py] [secynic/ipwhois](https://github.com/secynic/ipwhois) Retrieve and parse whois data for IPv4 and IPv6 addresses
+- [**359**Star][2y] [udpsec/awesome-vpn](https://github.com/udpsec/awesome-vpn) 科学上网的有趣项目集锦,欢迎大家pr自己喜欢的项目到这里。
- [**359**Star][4y] [HTML] [mubix/post-exploitation-wiki](https://github.com/mubix/post-exploitation-wiki) Post Exploitation Wiki
+- [**359**Star][1m] [C#] [andrew-schofield/keepass2-haveibeenpwned](https://github.com/andrew-schofield/keepass2-haveibeenpwned) Simple Have I Been Pwned checker for KeePass
- [**358**Star][4y] [Py] [bugscanteam/hackhttp](https://github.com/bugscanteam/hackhttp) Hackhttp is an HTTP library, written in Python.
-- [**358**Star][3m] [C++] [googleprojectzero/brokentype](https://github.com/googleprojectzero/BrokenType) TrueType and OpenType font fuzzing toolset
-- [**358**Star][2y] [udpsec/awesome-vpn](https://github.com/udpsec/awesome-vpn) 科学上网的有趣项目集锦,欢迎大家pr自己喜欢的项目到这里。
+- [**358**Star][4m] [C++] [googleprojectzero/brokentype](https://github.com/googleprojectzero/BrokenType) TrueType and OpenType font fuzzing toolset
- [**358**Star][4m] [C] [the-cracker-technology/andrax-mobile-pentest](https://github.com/the-cracker-technology/andrax-mobile-pentest) ANDRAX The first and unique Penetration Testing platform for Android smartphones
-- [**358**Star][19d] [Py] [tenable/poc](https://github.com/tenable/poc) Proof of Concepts
-- [**358**Star][7m] [Py] [orangetw/awesome-jenkins-rce-2019](https://github.com/orangetw/awesome-jenkins-rce-2019) There is no pre-auth RCE in Jenkins since May 2017, but this is the one!
-- [**358**Star][9m] [fr0gger/awesome-ida-x64-olly-plugin](https://github.com/fr0gger/awesome-ida-x64-olly-plugin) Awesome IDA, x64DBG & OllyDBG plugin
-- [**358**Star][7d] [fkromer/awesome-ros2](https://github.com/fkromer/awesome-ros2) The Robot Operating System Version 2.0 is awesome!
-- [**358**Star][8d] [Py] [davidtavarez/pwndb](https://github.com/davidtavarez/pwndb) Search for leaked credentials
+- [**358**Star][6m] [C#] [technitiumsoftware/dnsserver](https://github.com/technitiumsoftware/dnsserver) Technitium DNS Server
+- [**358**Star][3d] [Java] [spring-cloud/spring-cloud-commons](https://github.com/spring-cloud/spring-cloud-commons) Common classes used in different Spring Cloud implementations
+- [**358**Star][3y] [Py] [sangaline/advanced-web-scraping-tutorial](https://github.com/sangaline/advanced-web-scraping-tutorial) The Zipru scraper developed in the Advanced Web Scraping Tutorial.
- [**358**Star][5y] [C] [crmulliner/ddi](https://github.com/crmulliner/ddi) Dynamic Dalvik Instrumentation Toolkit
-- [**358**Star][12d] [Py] [checkpointsw/karta](https://github.com/checkpointsw/karta) source code assisted fast binary matching plugin for IDA
- [**358**Star][2y] [C++] [can1357/cve-2018-8897](https://github.com/can1357/cve-2018-8897) Arbitrary code execution with kernel privileges using CVE-2018-8897.
-- [**357**Star][4m] [Py] [visipedia/inat_comp](https://github.com/visipedia/inat_comp) iNaturalist competition details
+- [**358**Star][4y] [Py] [ahhh/reverse_dns_shell](https://github.com/ahhh/reverse_dns_shell) A python reverse shell that uses DNS as the c2 channel
+- [**357**Star][23d] [JS] [saucxs/watermark-dom](https://github.com/saucxs/watermark-dom) watermark.js是网站的水印组件,降低数据泄密风险。1、版本,2、水印插件-使用,3、水印插件-testTool(测试工具),4、内置方法,5、支持各种属性配置使用,等等。欢迎访问:
- [**357**Star][3y] [Py] [spender-sandbox/cuckoo-modified](https://github.com/spender-sandbox/cuckoo-modified) Modified edition of cuckoo
-- [**357**Star][8d] [C#] [sonarsource/sonar-dotnet](https://github.com/sonarsource/sonar-dotnet) Code analyzer for C# and VB.NET projects
-- [**357**Star][21d] [Objective-C] [prateek147/dvia](https://github.com/prateek147/dvia) Damn Vulnerable iOS App (DVIA) is an iOS application that is damn vulnerable. Its main goal is to provide a platform to mobile security enthusiasts/professionals or students to test their iOS penetration testing skills in a legal environment. This application covers all the common vulnerabilities found in iOS applications (following OWASP top 10…
+- [**357**Star][6d] [C#] [sonarsource/sonar-dotnet](https://github.com/sonarsource/sonar-dotnet) static code analyser for C# and VB.NET languages used as an extension for the SonarQube and SonarCloud platforms.
+- [**357**Star][11d] [C] [rfk/pyenchant](https://github.com/rfk/pyenchant) spellchecking library for python
+- [**357**Star][23d] [ObjC] [prateek147/dvia](https://github.com/prateek147/dvia) Damn Vulnerable iOS App (DVIA) is an iOS application that is damn vulnerable. Its main goal is to provide a platform to mobile security enthusiasts/professionals or students to test their iOS penetration testing skills in a legal environment. This application covers all the common vulnerabilities found in iOS applications (following OWASP top 10…
+- [**357**Star][14d] [Kotlin] [portswigger/turbo-intruder](https://github.com/portswigger/turbo-intruder) Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results.
- [**357**Star][2y] [JS] [kamikat/tttfi](https://github.com/kamikat/tttfi) Middleware for IFTTT.
+- [**357**Star][2m] [Java] [hubspot/jinjava](https://github.com/hubspot/jinjava) Jinja template engine for Java
+- [**357**Star][3y] [C++] [gamehackingbook/gamehackingcode](https://github.com/gamehackingbook/gamehackingcode) Code for the book 《Game Hacking: Developing Autonomous Bots for Online Games.》
+- [**357**Star][9d] [fkromer/awesome-ros2](https://github.com/fkromer/awesome-ros2) The Robot Operating System Version 2.0 is awesome!
- [**357**Star][7m] [PHP] [fate0/prvd](https://github.com/fate0/prvd) PHP Runtime Vulnerability Detection
- [**357**Star][2m] [Py] [denyhosts/denyhosts](https://github.com/denyhosts/denyhosts) Automated host blocking from SSH brute force attacks
-- [**357**Star][5m] [Makefile] [crifan/android_app_security_crack](https://github.com/crifan/android_app_security_crack) 安卓应用的安全和破解
+- [**357**Star][5m] [Java] [bit4woo/domain_hunter](https://github.com/bit4woo/domain_hunter) A Burp Suite Extender that try to find sub-domain, similar-domain and related-domain of an organization, not only a domain! 利用burp收集整个企业、组织的域名(不仅仅是单个主域名)的插件
- [**357**Star][4m] [Py] [a3sal0n/cyberthreathunting](https://github.com/a3sal0n/cyberthreathunting) A collection of resources for Threat Hunters
+- [**356**Star][4y] [Py] [mitmproxy/pathod](https://github.com/mitmproxy/pathod)
- [**356**Star][4y] [Py] [aoncyberlabs/evilabigail](https://github.com/AonCyberLabs/EvilAbigail) Automated Linux evil maid attack
-- [**356**Star][3y] [C] [xiaoweime/wprotect](https://github.com/xiaoweime/wprotect) uses code-virtualization technic to protect binary from being reverse-engineered or unwanted modified.
+- [**356**Star][5m] [Py] [xtiankisutsa/mara_framework](https://github.com/xtiankisutsa/mara_framework) MARA is a Mobile Application Reverse engineering and Analysis Framework. It is a toolkit that puts together commonly used mobile application reverse engineering and analysis tools to assist in testing mobile applications against the OWASP mobile security threats.
- [**356**Star][8m] [C] [vulnreproduction/linuxflaw](https://github.com/vulnreproduction/linuxflaw) This repo records all the vulnerabilities of linux software I have reproduced in my local workspace
-- [**356**Star][1y] [C] [rhdunn/espeak](https://github.com/rhdunn/espeak) eSpeak NG is an open source speech synthesizer that supports 101 languages and accents.
-- [**356**Star][9d] [C] [rfk/pyenchant](https://github.com/rfk/pyenchant) spellchecking library for python
-- [**356**Star][2m] [Java] [patrickfav/uber-apk-signer](https://github.com/patrickfav/uber-apk-signer) A cli tool that helps signing and zip aligning single or multiple Android application packages (APKs) with either debug or provided release certificates. It supports v1, v2 and v3 Android signing scheme has an embedded debug keystore and auto verifies after signing.
+- [**356**Star][2y] [Py] [ustayready/credking](https://github.com/ustayready/credking) Password spraying using AWS Lambda for IP rotation
+- [**356**Star][5m] [C++] [trendmicro/tlsh](https://github.com/trendmicro/tlsh) a fuzzy matching library
+- [**356**Star][8d] [C] [rhdunn/espeak](https://github.com/rhdunn/espeak) eSpeak NG is an open source speech synthesizer that supports 101 languages and accents.
- [**356**Star][2y] [Makefile] [opensecurityresearch/hostapd-wpe](https://github.com/opensecurityresearch/hostapd-wpe) Modified hostapd to facilitate AP impersonation attacks
+- [**356**Star][6m] [Go] [lukechampine/jsteg](https://github.com/lukechampine/jsteg) JPEG steganography
+- [**356**Star][2m] [Py] [hell0w0rld0/github-hunter](https://github.com/hell0w0rld0/github-hunter) This tool is for sensitive information searching on Github - The Fast Version here:
+- [**356**Star][1y] [C] [emptymonkey/revsh](https://github.com/emptymonkey/revsh) A reverse shell with terminal support, data tunneling, and advanced pivoting capabilities.
- [**356**Star][5y] [Py] [ebranca/owasp-pysec](https://github.com/ebranca/owasp-pysec) OWASP Python Security Project
-- [**356**Star][5m] [Java] [bit4woo/domain_hunter](https://github.com/bit4woo/domain_hunter) A Burp Suite Extender that try to find sub-domain, similar-domain and related-domain of an organization, not only a domain! 利用burp收集整个企业、组织的域名(不仅仅是单个主域名)的插件
-- [**356**Star][1m] [C#] [andrew-schofield/keepass2-haveibeenpwned](https://github.com/andrew-schofield/keepass2-haveibeenpwned) Simple Have I Been Pwned checker for KeePass
-- [**356**Star][4y] [Py] [ahhh/reverse_dns_shell](https://github.com/ahhh/reverse_dns_shell) A python reverse shell that uses DNS as the c2 channel
-- [**355**Star][7d] [Java] [spring-cloud/spring-cloud-commons](https://github.com/spring-cloud/spring-cloud-commons) Common classes used in different Spring Cloud implementations
-- [**355**Star][3m] [snyk/zip-slip-vulnerability](https://github.com/snyk/zip-slip-vulnerability) Zip Slip Vulnerability (Arbitrary file write through archive extraction)
+- [**356**Star][2m] [Py] [chenjj/corscanner](https://github.com/chenjj/corscanner) Fast CORS misconfiguration vulnerabilities scanner
+- [**355**Star][17d] [Shell] [dnscrypt/dnscrypt-server-docker](https://github.com/dnscrypt/dnscrypt-server-docker) A Docker image for a non-censoring, non-logging, DNSSEC-capable, DNSCrypt-enabled DNS resolver
+- [**355**Star][17d] [Java] [wycm/selenium-geetest-crack](https://github.com/wycm/selenium-geetest-crack) selenium破解滑动验证码
- [**355**Star][2y] [Py] [scalingexcellence/scrapybook](https://github.com/scalingexcellence/scrapybook) Scrapy Book Code
-- [**355**Star][3y] [Py] [sangaline/advanced-web-scraping-tutorial](https://github.com/sangaline/advanced-web-scraping-tutorial) The Zipru scraper developed in the Advanced Web Scraping Tutorial.
-- [**355**Star][5y] [PHP] [onesourcecat/phpvulhunter](https://github.com/onesourcecat/phpvulhunter) A tool that can scan php vulnerabilities automatically using static analysis methods
-- [**355**Star][2m] [Py] [hell0w0rld0/github-hunter](https://github.com/hell0w0rld0/github-hunter) This tool is for sensitive information searching on Github - The Fast Version here:
-- [**355**Star][1y] [C] [emptymonkey/revsh](https://github.com/emptymonkey/revsh) A reverse shell with terminal support, data tunneling, and advanced pivoting capabilities.
+- [**355**Star][1m] [C++] [openvpn/openvpn3](https://github.com/openvpn/openvpn3) OpenVPN 3 is a C++ class library that implements the functionality of an OpenVPN client, and is protocol-compatible with the OpenVPN 2.x branch.
+- [**355**Star][3y] [Py] [gallopsled/pwntools-write-ups](https://github.com/gallopsled/pwntools-write-ups) A colleciton of CTF write-ups all using pwntools
- [**355**Star][3y] [JS] [antimalware/manul](https://github.com/antimalware/manul) Antimalware tool for websites
-- [**354**Star][15d] [Shell] [dnscrypt/dnscrypt-server-docker](https://github.com/dnscrypt/dnscrypt-server-docker) A Docker image for a non-censoring, non-logging, DNSSEC-capable, DNSCrypt-enabled DNS resolver
-- [**354**Star][5m] [Py] [xtiankisutsa/mara_framework](https://github.com/xtiankisutsa/mara_framework) MARA is a Mobile Application Reverse engineering and Analysis Framework. It is a toolkit that puts together commonly used mobile application reverse engineering and analysis tools to assist in testing mobile applications against the OWASP mobile security threats.
+- [**355**Star][2m] [C#] [3f/dllexport](https://github.com/3f/dllexport) .NET DllExport
+- [**354**Star][4m] [C] [intel/libipt](https://github.com/intel/libipt) libipt - an Intel(R) Processor Trace decoder library
+- [**354**Star][7m] [PHP] [s0md3v/nano](https://github.com/s0md3v/nano) a family of PHP web shells which are code golfed for stealth.
+- [**354**Star][2m] [JS] [fsecurelabs/dref](https://github.com/FSecureLABS/dref) DNS Rebinding Exploitation Framework
- [**354**Star][3y] [virajkulkarni14/webdevelopersecuritychecklist](https://github.com/virajkulkarni14/webdevelopersecuritychecklist) A checklist of important security issues you should consider when creating a web application.
-- [**354**Star][2y] [Py] [ustayready/credking](https://github.com/ustayready/credking) Password spraying using AWS Lambda for IP rotation
-- [**354**Star][5m] [C++] [trendmicro/tlsh](https://github.com/trendmicro/tlsh) a fuzzy matching library
+- [**354**Star][3m] [snyk/zip-slip-vulnerability](https://github.com/snyk/zip-slip-vulnerability) Zip Slip Vulnerability (Arbitrary file write through archive extraction)
+- [**354**Star][8y] [Py] [openrce/pydbg](https://github.com/openrce/pydbg) A pure-python win32 debugger interface.
+- [**354**Star][2m] [C] [nccgroup/phantap](https://github.com/nccgroup/phantap) Phantom Tap (PhanTap) - an ‘invisible’ network tap aimed at red teams
+- [**354**Star][8d] [Py] [lockgit/hacking](https://github.com/lockgit/hacking) hacking is a kind of spirit !
+- [**354**Star][2y] [Shell] [koenbuyens/kalirouter](https://github.com/koenbuyens/kalirouter) intercepting kali router
- [**354**Star][1y] [Py] [i3visio/osrframework](https://github.com/i3visio/osrframework) providing API and tools to perform more accurate online researches.
-- [**354**Star][2m] [Java] [hubspot/jinjava](https://github.com/hubspot/jinjava) Jinja template engine for Java
-- [**353**Star][4m] [C] [intel/libipt](https://github.com/intel/libipt) libipt - an Intel(R) Processor Trace decoder library
-- [**353**Star][8y] [Py] [openrce/pydbg](https://github.com/openrce/pydbg) A pure-python win32 debugger interface.
-- [**353**Star][18d] [C] [liji32/sameboy](https://github.com/liji32/sameboy) Game Boy and Game Boy Color emulator written in C
+- [**354**Star][2d] [C#] [digitalruby/ipban](https://github.com/digitalruby/ipban) Monitors failed logins and bad behavior and bans ip addresses on Windows and Linux. Highly configurable, lean and powerful.
+- [**354**Star][3y] [C] [adtac/fssb](https://github.com/adtac/fssb) A filesystem sandbox for Linux using syscall intercepts.
+- [**353**Star][16d] [Go] [quay/jwtproxy](https://github.com/quay/jwtproxy) An HTTP-Proxy that adds AuthN through JWTs
+- [**353**Star][13d] [TeX] [vlsergey/infosec](https://github.com/vlsergey/infosec) Учебное пособие по защите информации кафедры радиотехники и систем управления МФТИ
+- [**353**Star][2d] [Java] [portswigger/http-request-smuggler](https://github.com/PortSwigger/http-request-smuggler) an extension for Burp Suite designed to help you launch HTTP Request Smuggling attack
+- [**353**Star][2d] [Shell] [ukncsc/lme](https://github.com/ukncsc/lme) Logging Made Easy
- [**353**Star][5m] [Py] [hasherezade/malware_analysis](https://github.com/hasherezade/malware_analysis) Various snippets created during malware analysis
+- [**353**Star][15d] [Py] [gosecure/pyrdp](https://github.com/gosecure/pyrdp) RDP man-in-the-middle (mitm) and library for Python 3 with the ability to watch connections live or after the fact
- [**353**Star][2y] [C++] [glsl-debugger/glsl-debugger](https://github.com/glsl-debugger/glsl-debugger) GLSL source level debugger.
-- [**353**Star][3y] [Py] [gallopsled/pwntools-write-ups](https://github.com/gallopsled/pwntools-write-ups) A colleciton of CTF write-ups all using pwntools
- [**353**Star][1m] [Ruby] [dev-sec/chef-os-hardening](https://github.com/dev-sec/chef-os-hardening) This chef cookbook provides numerous security-related configurations, providing all-round base protection.
-- [**353**Star][3y] [C] [adtac/fssb](https://github.com/adtac/fssb) A filesystem sandbox for Linux using syscall intercepts.
+- [**353**Star][7d] [Py] [depthsecurity/armory](https://github.com/depthsecurity/armory) Armory is a tool meant to take in a lot of external and discovery data from a lot of tools, add it to a database and correlate all of related information.
+- [**353**Star][16d] [Go] [quay/jwtproxy](https://github.com/quay/jwtproxy) An HTTP-Proxy that adds AuthN through JWTs
- [**352**Star][2m] [C] [tboox/vm86](https://github.com/tboox/vm86) a very simple and lightweight x86 virtual machine
-- [**352**Star][7m] [PHP] [s0md3v/nano](https://github.com/s0md3v/nano) a family of PHP web shells which are code golfed for stealth.
-- [**352**Star][1m] [JS] [fsecurelabs/dref](https://github.com/FSecureLABS/dref) DNS Rebinding Exploitation Framework
-- [**352**Star][11d] [Kotlin] [portswigger/turbo-intruder](https://github.com/portswigger/turbo-intruder) Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results.
-- [**352**Star][2m] [C] [nccgroup/phantap](https://github.com/nccgroup/phantap) Phantom Tap (PhanTap) - an ‘invisible’ network tap aimed at red teams
-- [**352**Star][3y] [Objective-C] [naituw/hackingfacebook](https://github.com/naituw/hackingfacebook) Kill Facebook for iOS's SSL Pinning
+- [**352**Star][2y] [C++] [zerosum0x0/winrepl](https://github.com/zerosum0x0/winrepl) x86 and x64 assembly "read-eval-print loop" shell for Windows
+- [**352**Star][5m] [Makefile] [xdite/internet-security](https://github.com/xdite/internet-security) 互联网资安风控实战
+- [**352**Star][2d] [wenzel/awesome-virtualization](https://github.com/wenzel/awesome-virtualization) Collection of resources about Virtualization
+- [**352**Star][3y] [ObjC] [naituw/hackingfacebook](https://github.com/naituw/hackingfacebook) Kill Facebook for iOS's SSL Pinning
- [**352**Star][3m] [Shell] [maldevel/pentestkit](https://github.com/maldevel/pentestkit) Useful tools and scripts used during Penetration Tests.
-- [**352**Star][6m] [Go] [lukechampine/jsteg](https://github.com/lukechampine/jsteg) JPEG steganography
-- [**352**Star][2y] [Shell] [koenbuyens/kalirouter](https://github.com/koenbuyens/kalirouter) intercepting kali router
-- [**351**Star][14d] [Go] [quay/jwtproxy](https://github.com/quay/jwtproxy) An HTTP-Proxy that adds AuthN through JWTs
+- [**352**Star][3d] [C#] [leaguesandbox/gameserver](https://github.com/leaguesandbox/gameserver) League Sandbox's Game Server
+- [**352**Star][4y] [fireeye/iocs](https://github.com/fireeye/iocs) FireEye Publicly Shared Indicators of Compromise (IOCs)
+- [**351**Star][2m] [Shell] [vitalysim/totalrecon](https://github.com/vitalysim/totalrecon) TotalRecon installs all the recon tools you need
+- [**351**Star][10d] [hackerschoice/thc-tesla-powerwall2-hack](https://github.com/hackerschoice/thc-tesla-powerwall2-hack) TESLA PowerWall 2 Security Shenanigans
+- [**351**Star][2m] [C#] [vletoux/pingcastle](https://github.com/vletoux/pingcastle) Get Active Directory Security at 80% in 20% of the time
+- [**351**Star][6m] [Java] [syvaidya/openstego](https://github.com/syvaidya/openstego) OpenStego is a steganography application that provides two functionalities: a) Data Hiding: It can hide any data within a cover file (e.g. images). b) Watermarking: Watermarking files (e.g. images) with an invisible signature. It can be used to detect unauthorized file copying.
+- [**351**Star][1m] [C++] [sslab-gatech/qsym](https://github.com/sslab-gatech/qsym) A Practical Concolic Execution Engine Tailored for Hybrid Fuzzing
- [**351**Star][6y] [C] [rentzsch/mach_override](https://github.com/rentzsch/mach_override) runtime function overriding for Mac OS X
- [**351**Star][2y] [TeX] [plailect/keyshuffling](https://github.com/plailect/keyshuffling) Keyshuffling Attack for Persistent Early Code Execution in the Nintendo 3DS Secure Bootchain
- [**351**Star][8m] [C] [p0cl4bs/kadimus](https://github.com/p0cl4bs/kadimus) Kadimus is a tool to check sites to lfi vulnerability , and also exploit it...
-- [**351**Star][14d] [Py] [lockgit/hacking](https://github.com/lockgit/hacking) hacking is a kind of spirit !
-- [**351**Star][11d] [C#] [leaguesandbox/gameserver](https://github.com/leaguesandbox/gameserver) League Sandbox's Game Server
-- [**351**Star][13d] [Py] [gosecure/pyrdp](https://github.com/gosecure/pyrdp) RDP man-in-the-middle (mitm) and library for Python 3 with the ability to watch connections live or after the fact
-- [**351**Star][3y] [C++] [gamehackingbook/gamehackingcode](https://github.com/gamehackingbook/gamehackingcode) Example code for the book
-- [**351**Star][4y] [fireeye/iocs](https://github.com/fireeye/iocs) FireEye Publicly Shared Indicators of Compromise (IOCs)
-- [**351**Star][23d] [Py] [depthsecurity/armory](https://github.com/depthsecurity/armory) Armory is a tool meant to take in a lot of external and discovery data from a lot of tools, add it to a database and correlate all of related information.
-- [**351**Star][14d] [Go] [quay/jwtproxy](https://github.com/quay/jwtproxy) An HTTP-Proxy that adds AuthN through JWTs
-- [**351**Star][2m] [Py] [chenjj/corscanner](https://github.com/chenjj/corscanner) Fast CORS misconfiguration vulnerabilities scanner
-- [**350**Star][2m] [Shell] [vitalysim/totalrecon](https://github.com/vitalysim/totalrecon) TotalRecon installs all the recon tools you need
-- [**350**Star][11d] [TeX] [vlsergey/infosec](https://github.com/vlsergey/infosec) Учебное пособие по защите информации кафедры радиотехники и систем управления МФТИ
-- [**350**Star][2y] [C++] [zerosum0x0/winrepl](https://github.com/zerosum0x0/winrepl) x86 and x64 assembly "read-eval-print loop" shell for Windows
-- [**350**Star][15d] [Java] [wycm/selenium-geetest-crack](https://github.com/wycm/selenium-geetest-crack) selenium破解滑动验证码
-- [**350**Star][11d] [Shell] [ukncsc/lme](https://github.com/ukncsc/lme) Logging Made Easy
+- [**351**Star][5m] [b3nac/android-reports-and-resources](https://github.com/b3nac/android-reports-and-resources) A big list of Android Hackerone disclosed reports and other resources.
+- [**351**Star][12m] [Py] [aancw/belati](https://github.com/aancw/belati) The Traditional Swiss Army Knife for OSINT
+- [**350**Star][7m] [C] [turing-technician/fasthook](https://github.com/turing-technician/fasthook) Android ART Hook
+- [**350**Star][1m] [Go] [tomnomnom/httprobe](https://github.com/tomnomnom/httprobe) Take a list of domains and probe for working HTTP and HTTPS servers
+- [**350**Star][2y] [notsosecure/password_cracking_rules](https://github.com/notsosecure/password_cracking_rules) One rule to crack all passwords. or atleast we hope so.
- [**350**Star][2y] [Py] [mazen160/struts-pwn](https://github.com/mazen160/struts-pwn) An exploit for Apache Struts CVE-2017-5638
+- [**350**Star][2y] [Shell] [mazen160/firefox-security-toolkit](https://github.com/mazen160/firefox-security-toolkit) A tool that transforms Firefox browsers into a penetration testing suite
+- [**350**Star][2d] [Ruby] [jjyg/metasm](https://github.com/jjyg/metasm) This is the main repository for metasm, a free assembler / disassembler / compiler written in ruby
+- [**350**Star][7m] [Py] [iphelix/pack](https://github.com/iphelix/pack) PACK (Password Analysis and Cracking Kit)
+- [**350**Star][11d] [Shell] [fanyueciyuan/eazy-for-ss](https://github.com/fanyueciyuan/eazy-for-ss) A Bypassgfw Collection
- [**350**Star][1m] [Py] [devrandom/gitian-builder](https://github.com/devrandom/gitian-builder) Build packages in a secure deterministic fashion inside a VM
-- [**350**Star][12m] [Py] [aancw/belati](https://github.com/aancw/belati) The Traditional Swiss Army Knife for OSINT
-- [**349**Star][6m] [Java] [syvaidya/openstego](https://github.com/syvaidya/openstego) OpenStego is a steganography application that provides two functionalities: a) Data Hiding: It can hide any data within a cover file (e.g. images). b) Watermarking: Watermarking files (e.g. images) with an invisible signature. It can be used to detect unauthorized file copying.
-- [**349**Star][2y] [Shell] [mazen160/firefox-security-toolkit](https://github.com/mazen160/firefox-security-toolkit) A tool that transforms Firefox browsers into a penetration testing suite
+- [**349**Star][2m] [JS] [whitequark/ipaddr.js](https://github.com/whitequark/ipaddr.js) IP address manipulation library in JavaScript
+- [**349**Star][2d] [C] [vanhauser-thc/aflplusplus](https://github.com/vanhauser-thc/aflplusplus) afl 2.56b with community patches
+- [**349**Star][4m] [Py] [tatanus/spf](https://github.com/tatanus/spf) SpeedPhishing Framework
+- [**349**Star][5m] [Py] [swisskyrepo/wordpresscan](https://github.com/swisskyrepo/wordpresscan) WPScan rewritten in Python + some WPSeku ideas
+- [**349**Star][20d] [C] [liji32/sameboy](https://github.com/liji32/sameboy) Game Boy and Game Boy Color emulator written in C
- [**349**Star][7m] [Haskell] [jpmorganchase/constellation](https://github.com/jpmorganchase/constellation) Peer-to-peer encrypted message exchange
- [**349**Star][2m] [C] [jedisct1/swift-sodium](https://github.com/jedisct1/swift-sodium) Safe and easy to use crypto for iOS and macOS
-- [**349**Star][19d] [TeX] [haifengl/bigdata](https://github.com/haifengl/bigdata) Introduction to Big Data
-- [**349**Star][9d] [Shell] [fanyueciyuan/eazy-for-ss](https://github.com/fanyueciyuan/eazy-for-ss) A Bypassgfw Collection
-- [**349**Star][8d] [C#] [digitalruby/ipban](https://github.com/digitalruby/ipban) Monitors failed logins and bad behavior and bans ip addresses on Windows and Linux. Highly configurable, lean and powerful.
-- [**348**Star][2m] [JS] [whitequark/ipaddr.js](https://github.com/whitequark/ipaddr.js) IP address manipulation library in JavaScript
-- [**348**Star][15d] [wenzel/awesome-virtualization](https://github.com/wenzel/awesome-virtualization) Collection of resources about Virtualization
-- [**348**Star][2m] [C#] [vletoux/pingcastle](https://github.com/vletoux/pingcastle) Get Active Directory Security at 80% in 20% of the time
-- [**348**Star][4m] [Py] [tatanus/spf](https://github.com/tatanus/spf) SpeedPhishing Framework
-- [**348**Star][1m] [C++] [sslab-gatech/qsym](https://github.com/sslab-gatech/qsym) A Practical Concolic Execution Engine Tailored for Hybrid Fuzzing
-- [**348**Star][10d] [TypeScript] [shroudedcode/apk-mitm](https://github.com/shroudedcode/apk-mitm)
+- [**349**Star][3m] [Brainfuck] [hexhive/printbf](https://github.com/hexhive/printbf) Brainfuck interpreter inside printf
+- [**349**Star][21d] [TeX] [haifengl/bigdata](https://github.com/haifengl/bigdata) Introduction to Big Data
+- [**349**Star][6m] [Shell] [hackplayers/4nonimizer](https://github.com/hackplayers/4nonimizer) A bash script for anonymizing the public IP used to browsing Internet, managing the connection to TOR network and to different VPNs providers (OpenVPN)
+- [**349**Star][5d] [Py] [alecmuffett/real-world-onion-sites](https://github.com/alecmuffett/real-world-onion-sites) This is a list of substantial, commercial-or-social-good mainstream websites which provide onion services.
+- [**348**Star][2m] [Java] [droidefense/engine](https://github.com/droidefense/engine) Droidefense: Advance Android Malware Analysis Framework
+- [**348**Star][1m] [C] [seccomp/libseccomp](https://github.com/seccomp/libseccomp) an easy to use, platform independent, interface to the Linux Kernel's syscall filtering mechanism
+- [**348**Star][1y] [PS] [rootclay/powershell-attack-guide](https://github.com/rootclay/powershell-attack-guide) Powershell Attack Guide
- [**348**Star][2y] [Py] [maldevel/gdog](https://github.com/maldevel/gdog) A fully featured Windows backdoor that uses Gmail as a C&C server
-- [**348**Star][21d] [Ruby] [jjyg/metasm](https://github.com/jjyg/metasm) This is the main repository for metasm, a free assembler / disassembler / compiler written in ruby
-- [**348**Star][7m] [Py] [iphelix/pack](https://github.com/iphelix/pack) PACK (Password Analysis and Cracking Kit)
+- [**348**Star][2y] [PS] [fuzzysecurity/pskernel-primitives](https://github.com/fuzzysecurity/pskernel-primitives) Exploit primitives for PowerShell
+- [**348**Star][2m] [Java] [esapi/esapi-java-legacy](https://github.com/esapi/esapi-java-legacy) ESAPI (The OWASP Enterprise Security API) is a free, open source, web application security control library that makes it easier for programmers to write lower-risk applications.
- [**348**Star][3y] [C] [cr4sh/smmbackdoor](https://github.com/cr4sh/smmbackdoor) System Management Mode backdoor for UEFI
- [**347**Star][2m] [Shell] [orlikoski/skadi](https://github.com/orlikoski/Skadi) collection, processing and advanced analysis of forensic artifacts and images.
-- [**347**Star][2m] [Java] [droidefense/engine](https://github.com/droidefense/engine) Droidefense: Advance Android Malware Analysis Framework
-- [**347**Star][5m] [Makefile] [xdite/internet-security](https://github.com/xdite/internet-security) 互联网资安风控实战
+- [**347**Star][10m] [C] [wapiflapi/exrs](https://github.com/wapiflapi/exrs) Exercises for learning Reverse Engineering and Exploitation.
- [**347**Star][4y] [Java] [rsmudge/cortana-scripts](https://github.com/rsmudge/cortana-scripts) A collection of Cortana scripts that you may use with Armitage and Cobalt Strike 2.x. Cortana Scripts are not compatible with Cobalt Strike 3.x. Cobalt Strike 3.x uses a variant of Cortana called Aggressor Script.
-- [**347**Star][1y] [PowerShell] [rootclay/powershell-attack-guide](https://github.com/rootclay/powershell-attack-guide) Powershell攻击指南----黑客后渗透之道
- [**347**Star][1y] [Py] [quickbreach/smbetray](https://github.com/quickbreach/smbetray) SMB MiTM tool with a focus on attacking clients through file content swapping, lnk swapping, as well as compromising any data passed over the wire in cleartext.
-- [**347**Star][2y] [notsosecure/password_cracking_rules](https://github.com/notsosecure/password_cracking_rules) One rule to crack all passwords. or atleast we hope so.
-- [**347**Star][3y] [C++] [m00nrise/processhider](https://github.com/m00nrise/processhider) Post-exploitation tool for hiding processes from monitoring applications
+- [**347**Star][2y] [Py] [nopernik/sshpry](https://github.com/nopernik/sshpry) Seamlessly spy on SSH session like it is your tty
+- [**347**Star][2y] [Ruby] [jobertabma/virtual-host-discovery](https://github.com/jobertabma/virtual-host-discovery) A script to enumerate virtual hosts on a server.
- [**347**Star][5y] [C] [inquisb/shellcodeexec](https://github.com/inquisb/shellcodeexec) Script to execute in memory a sequence of opcodes
-- [**347**Star][3m] [Brainfuck] [hexhive/printbf](https://github.com/hexhive/printbf) Brainfuck interpreter inside printf
-- [**347**Star][2y] [PowerShell] [fuzzysecurity/pskernel-primitives](https://github.com/fuzzysecurity/pskernel-primitives) Exploit primitives for PowerShell
-- [**347**Star][2m] [Java] [esapi/esapi-java-legacy](https://github.com/esapi/esapi-java-legacy) ESAPI (The OWASP Enterprise Security API) is a free, open source, web application security control library that makes it easier for programmers to write lower-risk applications.
- [**347**Star][6m] [C] [earthquake/chw00t](https://github.com/earthquake/chw00t) Unices chroot breaking tool
-- [**346**Star][9m] [C] [wapiflapi/exrs](https://github.com/wapiflapi/exrs) Exercises for learning Reverse Engineering and Exploitation.
-- [**346**Star][4m] [Py] [swisskyrepo/wordpresscan](https://github.com/swisskyrepo/wordpresscan) WPScan rewritten in Python + some WPSeku ideas
-- [**346**Star][1m] [C] [seccomp/libseccomp](https://github.com/seccomp/libseccomp) an easy to use, platform independent, interface to the Linux Kernel's syscall filtering mechanism
+- [**347**Star][2y] [dostoevskylabs/dostoevsky-pentest-notes](https://github.com/dostoevskylabs/dostoevsky-pentest-notes) Notes for taking the OSCP in 2097. Read in book form on GitBook
+- [**347**Star][4d] [Shell] [archstrike/archstrike](https://github.com/archstrike/archstrike) An Arch Linux repository for security professionals and enthusiasts. Done the Arch Way and optimized for i686, x86_64, ARMv6, ARMv7 and ARMv8.
+- [**346**Star][1m] [Py] [ym2011/pest](https://github.com/ym2011/PEST) Here is some simple and useful scripts for penetration.
+- [**346**Star][3m] [C#] [rasta-mouse/tikitorch](https://github.com/rasta-mouse/tikitorch) Process Injection
+- [**346**Star][12d] [hongrisec/web-security-attack](https://github.com/hongrisec/web-security-attack) Web安全相关内容
+- [**346**Star][25d] [C#] [fuzzysecurity/sharp-suite](https://github.com/fuzzysecurity/sharp-suite) My musings with C#
+- [**346**Star][2y] [enzet/symbolic-execution](https://github.com/enzet/symbolic-execution) History of symbolic execution (as well as SAT/SMT solving, fuzzing, and taint data tracking)
- [**346**Star][11m] [Py] [darkspiritz/darkspiritz](https://github.com/darkspiritz/darkspiritz) A penetration testing framework for Linux, MacOS, and Windows systems.
-- [**345**Star][3m] [C#] [rasta-mouse/tikitorch](https://github.com/rasta-mouse/tikitorch) Process Injection
+- [**346**Star][1y] [C] [bretley/how2exploit_binary](https://github.com/bretley/how2exploit_binary) An in depth tutorial on how to do binary exploitation
- [**345**Star][2y] [Go] [propervillain/moistpetal](https://github.com/propervillain/moistpetal) Open source offensive security platform for red team, by red team.
-- [**345**Star][2y] [enzet/symbolic-execution](https://github.com/enzet/symbolic-execution) History of symbolic execution (as well as SAT/SMT solving, fuzzing, and taint data tracking)
-- [**345**Star][7d] [Shell] [archstrike/archstrike](https://github.com/archstrike/archstrike) An Arch Linux repository for security professionals and enthusiasts. Done the Arch Way and optimized for i686, x86_64, ARMv6, ARMv7 and ARMv8.
+- [**345**Star][4m] [Java] [google/graphicsfuzz](https://github.com/google/graphicsfuzz) A testing framework for automatically finding and simplifying bugs in graphics shader compilers.
+- [**345**Star][1y] [C] [codermjlee/mjcodeobfuscation](https://github.com/codermjlee/mjcodeobfuscation) 一个用于代码混淆和字符串加密的Mac小Demo
- [**345**Star][3y] [Py] [animeshshaw/hash-algorithm-identifier](https://github.com/animeshshaw/hash-algorithm-identifier) A python tool to identify different Hash Function Algorithms
-- [**344**Star][30d] [Py] [ym2011/pest](https://github.com/ym2011/PEST) Here is some simple and useful scripts for penetration.
-- [**344**Star][7m] [C] [turing-technician/fasthook](https://github.com/turing-technician/fasthook) Android ART Hook
-- [**344**Star][2y] [Ruby] [jobertabma/virtual-host-discovery](https://github.com/jobertabma/virtual-host-discovery) A script to enumerate virtual hosts on a server.
-- [**344**Star][4m] [Java] [google/graphicsfuzz](https://github.com/google/graphicsfuzz) A testing framework for automatically finding and simplifying bugs in graphics shader compilers.
-- [**344**Star][2y] [dostoevskylabs/dostoevsky-pentest-notes](https://github.com/dostoevskylabs/dostoevsky-pentest-notes) Notes for taking the OSCP in 2097. Read in book form on GitBook
-- [**344**Star][1y] [C] [bretley/how2exploit_binary](https://github.com/bretley/how2exploit_binary) An in depth tutorial on how to do binary exploitation
-- [**344**Star][5m] [b3nac/android-reports-and-resources](https://github.com/b3nac/android-reports-and-resources) A big list of Android Hackerone disclosed reports and other resources.
+- [**344**Star][8d] [Perl] [keydet89/regripper2.8](https://github.com/keydet89/regripper2.8) extracting/parsing information (keys, values, data) from the Registry and presenting it for analysis.
+- [**344**Star][7y] [benvium/libimobiledevice-macosx](https://github.com/benvium/libimobiledevice-macosx) Binary distribution of the libimobiledevice library for Mac OS X
- [**344**Star][5m] [Py] [adrianvollmer/powerhub](https://github.com/adrianvollmer/powerhub) A post exploitation tool based on a web application, focusing on bypassing endpoint protection and application whitelisting
-- [**343**Star][2m] [Ruby] [sunitparekh/data-anonymization](https://github.com/sunitparekh/data-anonymization) Want to use production data for testing, data-anonymization can help you.
+- [**343**Star][1y] [valvesoftware/source-1-games](https://github.com/valvesoftware/source-1-games) Source 1 based games such as TF2 and Counter-Strike: Source
+- [**343**Star][2m] [Ruby] [sunitparekh/data-anonymization](https://github.com/sunitparekh/data-anonymization) helps you build anonymized production data dumps which you can use for performance testing, security testing, debugging and development.
- [**343**Star][1y] [Py] [theopolis/uefi-firmware-parser](https://github.com/theopolis/uefi-firmware-parser) Parse BIOS/Intel ME/UEFI firmware related structures: Volumes, FileSystems, Files, etc
+- [**343**Star][6d] [C++] [nativescript/android-runtime](https://github.com/nativescript/android-runtime) Android runtime for NativeScript (based on V8)
+- [**343**Star][2y] [leelikar/deepweb](https://github.com/leelikar/deepweb) 暗网网址大全TOR
- [**343**Star][2y] [hannob/meltdownspectre-patches](https://github.com/hannob/meltdownspectre-patches) Summary of the patch status for Meltdown / Spectre
-- [**343**Star][2y] [Py] [eplox/tcp-starvation](https://github.com/eplox/tcp-starvation)
-- [**343**Star][1y] [C] [codermjlee/mjcodeobfuscation](https://github.com/codermjlee/mjcodeobfuscation) 一个用于代码混淆和字符串加密的Mac小Demo
+- [**343**Star][2y] [Py] [eplox/tcp-starvation](https://github.com/eplox/tcp-starvation) TCP-Starvation vulnerability
+- [**343**Star][2y] [C++] [ele7enxxh/poc-exp](https://github.com/ele7enxxh/poc-exp) poc or exp of android vulnerability
+- [**343**Star][12m] [Assembly] [egebalci/amber](https://github.com/egebalci/amber) a reflective PE packer for bypassing security products and mitigations
+- [**343**Star][12m] [Ruby] [calebfenton/dex-oracle](https://github.com/calebfenton/dex-oracle) A pattern based Dalvik deobfuscator which uses limited execution to improve semantic analysis
- [**343**Star][2y] [Shell] [brannondorsey/mitm-router](https://github.com/brannondorsey/mitm-router) mitm-router:将任何一台Linux 计算机转变成公开的 Wi-Fi 网络,并且默认Man-in-the-middle 所有 http 流量
-- [**343**Star][7y] [benvium/libimobiledevice-macosx](https://github.com/benvium/libimobiledevice-macosx) Binary distribution of the libimobiledevice library for Mac OS X
-- [**343**Star][7d] [Py] [alecmuffett/real-world-onion-sites](https://github.com/alecmuffett/real-world-onion-sites) This is a list of substantial, commercial-or-social-good mainstream websites which provide onion services.
-- [**342**Star][1y] [valvesoftware/source-1-games](https://github.com/valvesoftware/source-1-games) Source 1 based games such as TF2 and Counter-Strike: Source
-- [**342**Star][2y] [C++] [usb-tools/usbproxy-legacy](https://github.com/usb-tools/USBProxy-legacy) A proxy for USB devices, libUSB and gadgetFS - this project is unmaintained, try here:
+- [**342**Star][1y] [Py] [varbaek/xsser](https://github.com/varbaek/xsser) From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017 + Extras
+- [**342**Star][9d] [C++] [thezdi/poc](https://github.com/thezdi/poc) Proofs-of-concept
+- [**342**Star][2m] [C#] [steamdatabase/valveresourceformat](https://github.com/steamdatabase/valveresourceformat) Valve's Source 2 resource file format (also known as Stupid Valve Format) parser and decompiler.
- [**342**Star][8m] [Py] [skorov/ridrelay](https://github.com/skorov/ridrelay) Enumerate usernames on a domain where you have no creds by using SMB Relay with low priv.
+- [**342**Star][4d] [Shell] [r00t-3xp10it/backdoorppt](https://github.com/r00t-3xp10it/backdoorppt) transform your payload.exe into one fake word doc (.ppt)
- [**342**Star][5y] [Py] [neohapsis/neopi](https://github.com/neohapsis/neopi) a Python script that uses a variety of statistical methods to detect obfuscated and encrypted content within text/script files
-- [**342**Star][13d] [C++] [nativescript/android-runtime](https://github.com/nativescript/android-runtime) Android runtime for NativeScript (based on V8)
-- [**342**Star][2y] [leelikar/deepweb](https://github.com/leelikar/deepweb) 暗网网址大全TOR
-- [**342**Star][17d] [Perl] [keydet89/regripper2.8](https://github.com/keydet89/regripper2.8) RegRipper version 2.8
-- [**342**Star][22d] [Augeas] [hercules-team/augeas](https://github.com/hercules-team/augeas) A configuration editing tool and API
-- [**342**Star][23d] [C#] [fuzzysecurity/sharp-suite](https://github.com/fuzzysecurity/sharp-suite) My musings with C#
-- [**342**Star][2y] [C++] [ele7enxxh/poc-exp](https://github.com/ele7enxxh/poc-exp) poc or exp of android vulnerability
-- [**342**Star][12m] [Ruby] [calebfenton/dex-oracle](https://github.com/calebfenton/dex-oracle) A pattern based Dalvik deobfuscator which uses limited execution to improve semantic analysis
-- [**341**Star][1y] [Py] [varbaek/xsser](https://github.com/varbaek/xsser) From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017 + Extras
+- [**342**Star][4y] [Shell] [marshyski/quick-secure](https://github.com/marshyski/quick-secure) Quickly secure UNIX/Linux systems
+- [**342**Star][24d] [Augeas] [hercules-team/augeas](https://github.com/hercules-team/augeas) A configuration editing tool and API
+- [**342**Star][18d] [Py] [fgeek/pyfiscan](https://github.com/fgeek/pyfiscan) Free web-application vulnerability and version scanner
+- [**341**Star][1y] [Shell] [dylanbai8/onekey_caddy_php7_sqlite3](https://github.com/dylanbai8/onekey_caddy_php7_sqlite3) 小内存 VPS 一键搭建 Caddy+PHP7+Sqlite3 环境 (支持VPS最小内存64M),一键翻墙 caddy+web(php+sqlite3)+v2ray+bbr。
+- [**341**Star][2y] [C++] [usb-tools/usbproxy-legacy](https://github.com/usb-tools/USBProxy-legacy) A proxy for USB devices, libUSB and gadgetFS - this project is unmaintained, try here:
+- [**341**Star][6m] [C] [zeex/subhook](https://github.com/zeex/subhook) Simple hooking library for C/C++ (x86 only, 32/64-bit, no dependencies)
+- [**341**Star][10m] [yarnpkg/rfcs](https://github.com/yarnpkg/rfcs) RFCs for changes to Yarn
+- [**341**Star][2m] [Go] [wweir/sower](https://github.com/wweir/sower) Sower is a cross-platform intelligent transparent proxy solution.
- [**341**Star][2y] [Py] [sslab-gatech/drk](https://github.com/sslab-gatech/drk) breaks kernel address space layout randomization (KASLR) by exploiting TLB and decoded i-cache side channel.
- [**341**Star][2y] [Py] [sarfata/voodooprivacy](https://github.com/sarfata/voodooprivacy) Roll your own VPN server on Amazon EC2 and battle-ready firewall for OS X
-- [**341**Star][11m] [Shell] [r00t-3xp10it/backdoorppt](https://github.com/r00t-3xp10it/backdoorppt) transform your payload.exe into one fake word doc (.ppt)
-- [**341**Star][1m] [Py] [leitbogioro/ssr.go](https://github.com/leitbogioro/ssr.go) A new shadowsocksR config manager
+- [**341**Star][8m] [Java] [portswigger/param-miner](https://github.com/portswigger/param-miner) identifies hidden, unlinked parameters. It's particularly useful for finding web cache poisoning vulnerabilities
+- [**341**Star][4m] [Java] [portswigger/backslash-powered-scanner](https://github.com/portswigger/backslash-powered-scanner) Finds unknown classes of injection vulnerabilities
+- [**341**Star][1m] [Shell] [nullarray/roothelper](https://github.com/nullarray/roothelper) A Bash script that downloads and unzips scripts that will aid with privilege escalation on a Linux system.
- [**341**Star][9m] [Py] [iphelix/dnschef](https://github.com/iphelix/dnschef) DNSChef - DNS proxy for Penetration Testers and Malware Analysts
- [**341**Star][2y] [C] [hfiref0x/dsefix](https://github.com/hfiref0x/dsefix) Windows x64 Driver Signature Enforcement Overrider
- [**341**Star][3y] [Py] [fengxuangit/fox-scan](https://github.com/fengxuangit/fox-scan) Fox-scan is a initiative and passive SQL Injection vulnerable Test tools.
-- [**341**Star][11m] [C] [blendin/3snake](https://github.com/blendin/3snake) reads memory from sshd and sudo system calls that handle password based authentication
-- [**340**Star][10m] [yarnpkg/rfcs](https://github.com/yarnpkg/rfcs) RFCs for changes to Yarn
+- [**341**Star][5d] [Py] [darryllane/bluto](https://github.com/darryllane/bluto) DNS Recon | Brute Forcer | DNS Zone Transfer | DNS Wild Card Checks | DNS Wild Card Brute Forcer | Email Enumeration | Staff Enumeration | Compromised Account Checking
+- [**341**Star][26d] [D] [cybershadow/rabcdasm](https://github.com/cybershadow/rabcdasm) Robust ABC (ActionScript Bytecode) [Dis-]Assembler
+- [**341**Star][2y] [Py] [c0ny1/xxe-lab](https://github.com/c0ny1/xxe-lab) 一个包含php,java,python,C#等各种语言版本的XXE漏洞Demo
- [**340**Star][1m] [veracode-research/solr-injection](https://github.com/veracode-research/solr-injection) Apache Solr Injection Research
- [**340**Star][3m] [C] [thorkill/eresi](https://github.com/thorkill/eresi) The ERESI Reverse Engineering Software Interface
-- [**340**Star][1m] [C#] [steamdatabase/valveresourceformat](https://github.com/steamdatabase/valveresourceformat) Valve's Source 2 resource file format (also known as Stupid Valve Format) parser and decompiler.
+- [**340**Star][5m] [C] [theofficialflow/trinity](https://github.com/theofficialflow/trinity) Trinity Exploit - Emulator Escape
+- [**340**Star][6m] [teoseller/osquery-attck](https://github.com/teoseller/osquery-attck) Mapping the MITRE ATT&CK Matrix with Osquery
+- [**340**Star][4m] [Py] [stamusnetworks/scirius](https://github.com/stamusnetworks/scirius) Scirius is a web application for Suricata ruleset management.
+- [**340**Star][2m] [softwareunderground/awesome-open-geoscience](https://github.com/softwareunderground/awesome-open-geoscience) Curated from repositories that make our lives as geoscientists, hackers and data wranglers easier or just more awesome
- [**340**Star][2y] [slowmist/eos-bp-nodes-security-checklist](https://github.com/slowmist/eos-bp-nodes-security-checklist) EOS bp nodes security checklist
+- [**340**Star][2y] [Py] [securityinnovation/authmatrix](https://github.com/securityinnovation/authmatrix) AuthMatrix is a Burp Suite extension that provides a simple way to test authorization in web applications and web services.
+- [**340**Star][2y] [Go] [rapidloop/vlan-nats](https://github.com/rapidloop/vlan-nats) Virtual LAN over NATS
+- [**340**Star][2d] [Py] [qwj/python-proxy](https://github.com/qwj/python-proxy) HTTP/Socks4/Socks5/Shadowsocks/ShadowsocksR/SSH/Redirect/Pf TCP/UDP asynchronous tunnel proxy implemented in Python 3 asyncio.
+- [**340**Star][2d] [Py] [qilingframework/qiling](https://github.com/qilingframework/qiling) Qiling Advanced Binary Emulation framework
- [**340**Star][2y] [Py] [pathetiq/burpsmartbuster](https://github.com/pathetiq/burpsmartbuster) A Burp Suite content discovery plugin that add the smart into the Buster!
-- [**340**Star][16d] [Py] [fgeek/pyfiscan](https://github.com/fgeek/pyfiscan) Free web-application vulnerability and version scanner
-- [**340**Star][12m] [Assembly] [egebalci/amber](https://github.com/egebalci/amber) Reflective PE packer.
-- [**340**Star][2m] [Py] [darryllane/bluto](https://github.com/darryllane/bluto) DNS Recon | Brute Forcer | DNS Zone Transfer | DNS Wild Card Checks | DNS Wild Card Brute Forcer | Email Enumeration | Staff Enumeration | Compromised Account Checking
+- [**340**Star][1m] [Py] [leitbogioro/ssr.go](https://github.com/leitbogioro/ssr.go) A new shadowsocksR config manager
+- [**340**Star][2m] [JS] [dns-oarc/packetq](https://github.com/dns-oarc/packetq) A tool that provides a basic SQL-frontend to PCAP-files
+- [**340**Star][2y] [Py] [bugscanteam/githack](https://github.com/bugscanteam/githack) .git 泄漏利用工具,可还原历史版本
+- [**340**Star][11m] [C] [blendin/3snake](https://github.com/blendin/3snake) reads memory from sshd and sudo system calls that handle password based authentication
- [**340**Star][1m] [veracode-research/solr-injection](https://github.com/veracode-research/solr-injection) Apache Solr Injection Research
-- [**339**Star][5m] [C] [zeex/subhook](https://github.com/zeex/subhook) Simple hooking library for C/C++ (x86 only, 32/64-bit, no dependencies)
+- [**340**Star][2m] [Ruby] [anaynayak/aws-security-viz](https://github.com/anaynayak/aws-security-viz) Visualize your aws security groups.
+- [**339**Star][1y] [C++] [qax-a-team/eventcleaner](https://github.com/QAX-A-Team/EventCleaner) A tool mainly to erase specified records from Windows event logs, with additional functionalities.
- [**339**Star][5y] [JS] [yndi/darkjpeg](https://github.com/yndi/darkjpeg) JPEG steganography web service
+- [**339**Star][2m] [C] [trailofbits/cb-multios](https://github.com/trailofbits/cb-multios) DARPA Challenges Sets for Linux, Windows, and macOS
- [**339**Star][1y] [Py] [tophanttechnology/osprey](https://github.com/tophanttechnology/osprey) vul detect framework
-- [**339**Star][5m] [C] [theofficialflow/trinity](https://github.com/theofficialflow/trinity) Trinity Exploit - Emulator Escape
-- [**339**Star][2y] [Go] [rapidloop/vlan-nats](https://github.com/rapidloop/vlan-nats) Virtual LAN over NATS
-- [**339**Star][7m] [Java] [portswigger/param-miner](https://github.com/portswigger/param-miner) identifies hidden, unlinked parameters. It's particularly useful for finding web cache poisoning vulnerabilities
-- [**339**Star][4m] [Java] [portswigger/backslash-powered-scanner](https://github.com/portswigger/backslash-powered-scanner) Finds unknown classes of injection vulnerabilities
-- [**339**Star][1m] [Shell] [nullarray/roothelper](https://github.com/nullarray/roothelper) A Bash script that downloads and unzips scripts that will aid with privilege escalation on a Linux system.
+- [**339**Star][1y] [Java] [rub-nds/ws-attacker](https://github.com/rub-nds/ws-attacker) a modular framework for web services penetration testing.
+- [**339**Star][11m] [Py] [joxeankoret/nightmare](https://github.com/joxeankoret/nightmare) A distributed fuzzing testing suite with web administration
- [**339**Star][11m] [JS] [gabemarshall/brosec](https://github.com/gabemarshall/brosec) Brosec - An interactive reference tool to help security professionals utilize useful payloads and commands.
-- [**339**Star][2y] [Py] [c0ny1/xxe-lab](https://github.com/c0ny1/xxe-lab) 一个包含php,java,python,C#等各种语言版本的XXE漏洞Demo
-- [**339**Star][2y] [Py] [bugscanteam/githack](https://github.com/bugscanteam/githack) .git 泄漏利用工具,可还原历史版本
-- [**338**Star][1y] [C++] [qax-a-team/eventcleaner](https://github.com/QAX-A-Team/EventCleaner) A tool mainly to erase specified records from Windows event logs, with additional functionalities.
-- [**338**Star][7d] [C] [vanhauser-thc/aflplusplus](https://github.com/vanhauser-thc/aflplusplus) afl++ is afl 2.56b with community patches, AFLfast power schedules, qemu 3.1 upgrade + laf-intel support, MOpt mutators, InsTrim instrumentation, unicorn_mode and a lot more!
+- [**339**Star][10d] [Py] [1120362990/vulnerability-list](https://github.com/1120362990/vulnerability-list) 在渗透测试中快速检测常见中间件、组件的高危漏洞。
+- [**338**Star][2d] [Go] [v2ray/domain-list-community](https://github.com/v2ray/domain-list-community) Community managed domain list
+- [**338**Star][28d] [Shell] [umputun/nginx-le](https://github.com/umputun/nginx-le) Nginx with automatic let's encrypt (docker image)
- [**338**Star][1y] [Ruby] [srcclr/commit-watcher](https://github.com/srcclr/commit-watcher) Find interesting and potentially hazardous commits in git projects
-- [**338**Star][4m] [Py] [qwj/python-proxy](https://github.com/qwj/python-proxy) HTTP/Socks4/Socks5/Shadowsocks/ShadowsocksR/SSH/Redirect/Pf TCP/UDP asynchronous tunnel proxy implemented in Python 3 asyncio.
+- [**338**Star][2y] [Py] [pepitoh/vbad](https://github.com/pepitoh/vbad) VBA Obfuscation Tools combined with an MS office document generator
- [**338**Star][2m] [PHP] [opsxcq/exploit-cve-2016-10033](https://github.com/opsxcq/exploit-cve-2016-10033) PHPMailer < 5.2.18 Remote Code Execution exploit and vulnerable container
-- [**338**Star][4y] [PowerShell] [kevin-robertson/tater](https://github.com/kevin-robertson/tater) Tater is a PowerShell implementation of the Hot Potato Windows Privilege Escalation exploit from
-- [**338**Star][11m] [Py] [joxeankoret/nightmare](https://github.com/joxeankoret/nightmare) A distributed fuzzing testing suite with web administration
+- [**338**Star][2y] [C] [natebrune/silk-guardian](https://github.com/natebrune/silk-guardian) << Silk Guardian >> is an anti-forensic kill-switch that waits for a change on your usb ports and then wipes your ram, deletes precious files, and turns off your computer.
+- [**338**Star][4y] [PS] [kevin-robertson/tater](https://github.com/kevin-robertson/tater) Tater is a PowerShell implementation of the Hot Potato Windows Privilege Escalation exploit from
- [**338**Star][5m] [Py] [initstring/passphrase-wordlist](https://github.com/initstring/passphrase-wordlist) Passphrase wordlist and hashcat rules for offline cracking of long, complex passwords
-- [**337**Star][1y] [Shell] [dylanbai8/onekey_caddy_php7_sqlite3](https://github.com/dylanbai8/onekey_caddy_php7_sqlite3) 小内存 VPS 一键搭建 Caddy+PHP7+Sqlite3 环境 (支持VPS最小内存64M),一键翻墙 caddy+web(php+sqlite3)+v2ray+bbr。
-- [**337**Star][2m] [C] [trailofbits/cb-multios](https://github.com/trailofbits/cb-multios) DARPA Challenges Sets for Linux, Windows, and macOS
-- [**337**Star][4m] [Py] [stamusnetworks/scirius](https://github.com/stamusnetworks/scirius) Scirius is a web application for Suricata ruleset management.
-- [**337**Star][2y] [Py] [securityinnovation/authmatrix](https://github.com/securityinnovation/authmatrix) AuthMatrix is a Burp Suite extension that provides a simple way to test authorization in web applications and web services.
-- [**337**Star][1y] [Java] [rub-nds/ws-attacker](https://github.com/rub-nds/ws-attacker) WS-Attacker is a modular framework for web services penetration testing. It is developed by the Chair of Network and Data Security, Ruhr University Bochum (
-- [**337**Star][2y] [Py] [pepitoh/vbad](https://github.com/pepitoh/vbad) VBA Obfuscation Tools combined with an MS office document generator
-- [**337**Star][2y] [C] [natebrune/silk-guardian](https://github.com/natebrune/silk-guardian) << Silk Guardian >> is an anti-forensic kill-switch that waits for a change on your usb ports and then wipes your ram, deletes precious files, and turns off your computer.
-- [**337**Star][3y] [C#] [ben0xa/nps](https://github.com/ben0xa/nps) Not PowerShell
-- [**337**Star][2m] [Ruby] [anaynayak/aws-security-viz](https://github.com/anaynayak/aws-security-viz) Visualize your aws security groups.
-- [**336**Star][20d] [Py] [pdbpp/pdbpp](https://github.com/pdbpp/pdbpp) pdb++, a drop-in replacement for pdb (the Python debugger)
-- [**336**Star][2m] [softwareunderground/awesome-open-geoscience](https://github.com/softwareunderground/awesome-open-geoscience) Curated from repositories that make our lives as geoscientists, hackers and data wranglers easier or just more awesome
+- [**338**Star][7m] [C] [git-hulk/tcpkit](https://github.com/git-hulk/tcpkit) A tool analyzes tcp packets with Lua
+- [**338**Star][3d] [Ruby] [cyberark/conjur](https://github.com/cyberark/conjur) CyberArk Conjur automatically secures secrets used by privileged users and machine identities
+- [**338**Star][3y] [C#] [ben0xa/nps](https://github.com/ben0xa/nps) Not PowerShell
+- [**338**Star][3m] [Py] [alexmojaki/snoop](https://github.com/alexmojaki/snoop) A powerful set of Python debugging tools, based on PySnooper
+- [**337**Star][4m] [C] [merces/pev](https://github.com/merces/pev) The PE file analysis toolkit
+- [**337**Star][2y] [C] [mbevand/silentarmy](https://github.com/mbevand/silentarmy) Zcash miner optimized for AMD & Nvidia GPUs
+- [**337**Star][4d] [C] [lemire/code-used-on-daniel-lemire-s-blog](https://github.com/lemire/code-used-on-daniel-lemire-s-blog) This is a repository for the code posted on my blog
+- [**337**Star][8m] [Py] [dirkjanm/ldapdomaindump](https://github.com/dirkjanm/ldapdomaindump) Active Directory information dumper via LDAP
+- [**336**Star][6d] [Java] [sap/vulnerability-assessment-tool](https://github.com/sap/vulnerability-assessment-tool) Analyses your Java and Python applications for open-source dependencies with known vulnerabilities, using both static analysis and testing to determine code context and usage for greater accuracy.
- [**336**Star][6y] [C] [orangetw/tsh](https://github.com/orangetw/tsh) Tiny SHell is an open-source UNIX backdoor.
-- [**336**Star][4m] [C] [merces/pev](https://github.com/merces/pev) The PE file analysis toolkit
+- [**336**Star][6m] [Py] [fbkcs/thunderdns](https://github.com/fbkcs/thunderdns) This tool can forward TCP traffic over DNS protocol. Non-compile clients + socks5 support.
- [**336**Star][3m] [Java] [denimgroup/threadfix](https://github.com/denimgroup/threadfix) a software vulnerability management platform. This GitHub site is far out of date. Please go to
- [**336**Star][4y] [HTML] [cxxr/lostpass](https://github.com/cxxr/lostpass) Pixel-perfect LastPass phishing
-- [**336**Star][1m] [Py] [codingo/interlace](https://github.com/codingo/interlace) Easily turn single threaded command line applications into a fast, multi-threaded application with CIDR and glob support.
- [**336**Star][3y] [Shell] [0xm3r/cgpwn](https://github.com/0xm3r/cgpwn) A lightweight VM for hardware hacking, RE (fuzzing, symEx, exploiting etc) and wargaming tasks
-- [**335**Star][11d] [C] [lemire/code-used-on-daniel-lemire-s-blog](https://github.com/lemire/code-used-on-daniel-lemire-s-blog) This is a repository for the code posted on my blog
-- [**335**Star][6m] [Py] [fbkcs/thunderdns](https://github.com/fbkcs/thunderdns) This tool can forward TCP traffic over DNS protocol. Non-compile clients + socks5 support.
-- [**335**Star][8m] [Py] [dirkjanm/ldapdomaindump](https://github.com/dirkjanm/ldapdomaindump) Active Directory information dumper via LDAP
-- [**335**Star][13d] [Ruby] [cyberark/conjur](https://github.com/cyberark/conjur) CyberArk Conjur automatically secures secrets used by privileged users and machine identities
-- [**335**Star][2y] [PowerShell] [arno0x/powershellscripts](https://github.com/arno0x/powershellscripts) Collection of PowerShell scripts
-- [**334**Star][26d] [Shell] [umputun/nginx-le](https://github.com/umputun/nginx-le) Nginx with automatic let's encrypt (docker image)
-- [**334**Star][7d] [C++] [thezdi/poc](https://github.com/thezdi/poc) Proofs-of-concept
-- [**334**Star][6m] [teoseller/osquery-attck](https://github.com/teoseller/osquery-attck) Mapping the MITRE ATT&CK Matrix with Osquery
-- [**334**Star][21d] [Java] [sap/vulnerability-assessment-tool](https://github.com/sap/vulnerability-assessment-tool) Analyses your Java and Python applications for open-source dependencies with known vulnerabilities, using both static analysis and testing to determine code context and usage for greater accuracy.
-- [**334**Star][9d] [Py] [artisan-roaster-scope/artisan](https://github.com/artisan-roaster-scope/artisan) helps coffee roasters record, analyze, and control roast profiles
-- [**334**Star][8d] [Py] [1120362990/vulnerability-list](https://github.com/1120362990/vulnerability-list) 在渗透测试中快速检测常见中间件、组件的高危漏洞。
-- [**333**Star][7d] [Coq] [symbiflow/prjxray](https://github.com/symbiflow/prjxray) Documenting the Xilinx 7-series bit-stream format.
-- [**333**Star][6m] [Dockerfile] [mykings/docker-vulnerability-environment](https://github.com/mykings/docker-vulnerability-environment) Use the docker to build a vulnerability environment
+- [**335**Star][29d] [stardustsky/saidict](https://github.com/stardustsky/saidict) 弱口令,敏感目录,敏感文件等渗透测试常用攻击字典
+- [**335**Star][4m] [Py] [chris408/ct-exposer](https://github.com/chris408/ct-exposer) An OSINT tool that discovers sub-domains by searching Certificate Transparency logs
+- [**335**Star][3d] [Py] [artisan-roaster-scope/artisan](https://github.com/artisan-roaster-scope/artisan) helps coffee roasters record, analyze, and control roast profiles
+- [**335**Star][2y] [PS] [arno0x/powershellscripts](https://github.com/arno0x/powershellscripts) Collection of PowerShell scripts
+- [**334**Star][3m] [Py] [romanz/trezor-agent](https://github.com/romanz/trezor-agent) Hardware-based SSH/PGP agent
+- [**334**Star][2m] [Py] [raikia/uhoh365](https://github.com/raikia/uhoh365) A script that can see if an email address is valid in Office365 (user/email enumeration). This does not perform any login attempts, is unthrottled, and is incredibly useful for social engineering assessments to find which emails exist and which don't.
+- [**334**Star][3y] [Py] [nccgroup/abptts](https://github.com/nccgroup/abptts) TCP tunneling over HTTP/HTTPS for web application servers
+- [**334**Star][3d] [JS] [meituan-dianping/lyrebird](https://github.com/meituan-dianping/lyrebird) 基于拦截以及模拟HTTP/HTTPS网络请求的面向移动应用的插件化测试工作台
+- [**334**Star][2d] [Shell] [loyess/shell](https://github.com/loyess/shell) Shadowsocks-libev with plugins one-click installation. For example: v2ray-plugin, kcptun, simple-obfs, goquiet, cloak...
+- [**334**Star][2y] [C#] [foxglovesec/rottenpotato](https://github.com/foxglovesec/rottenpotato) RottenPotato local privilege escalation from service account to SYSTEM
+- [**333**Star][9d] [TeX] [radareorg/radare2book](https://github.com/radareorg/radare2book) Radare2 official book
+- [**333**Star][2y] [HTML] [superkieran/wooyundrops](https://github.com/superkieran/wooyundrops) Wooyun知识库,乌云知识库,
+- [**333**Star][1y] [C++] [rv8-io/rv8](https://github.com/rv8-io/rv8) RISC-V simulator for x86-64
+- [**333**Star][8m] [Py] [rek7/fireelf](https://github.com/rek7/fireelf) Fileless Linux Malware Framework
+- [**333**Star][4m] [Py] [rbsec/dnscan](https://github.com/rbsec/dnscan) a python wordlist-based DNS subdomain scanner.
+- [**333**Star][7m] [Dockerfile] [mykings/docker-vulnerability-environment](https://github.com/mykings/docker-vulnerability-environment) Use the docker to build a vulnerability environment
+- [**333**Star][9m] [JS] [mhzed/wstunnel](https://github.com/mhzed/wstunnel) tunnel over websocket
+- [**333**Star][6d] [PS] [mgeeky/penetration-testing-tools](https://github.com/mgeeky/penetration-testing-tools) A collection of my Penetration Testing scripts, tools, cheatsheets collected over years, used during real-world assignments or collected from various good quality sources.
- [**333**Star][12m] [Py] [mdsecactivebreach/linkedint](https://github.com/mdsecactivebreach/linkedint) A LinkedIn scraper for reconnaissance during adversary simulation
+- [**333**Star][8d] [C] [mattiwatti/efiguard](https://github.com/mattiwatti/efiguard) Disable PatchGuard and DSE at boot time
- [**333**Star][3y] [Py] [jandre/safe-commit-hook](https://github.com/jandre/safe-commit-hook) pre-commit hook for Git that checks for suspicious files.
-- [**333**Star][10d] [hongrisec/web-security-attack](https://github.com/hongrisec/web-security-attack) Web安全相关内容
-- [**333**Star][4m] [Py] [chris408/ct-exposer](https://github.com/chris408/ct-exposer) An OSINT tool that discovers sub-domains by searching Certificate Transparency logs
-- [**332**Star][10d] [Go] [v2ray/domain-list-community](https://github.com/v2ray/domain-list-community) Community managed domain list
-- [**332**Star][2y] [Py] [sgayou/medfusion-4000-research](https://github.com/sgayou/medfusion-4000-research) Medfusion 4000 security research & a MQX RCE.
-- [**332**Star][1y] [C++] [rv8-io/rv8](https://github.com/rv8-io/rv8) RISC-V simulator for x86-64
+- [**332**Star][1y] [Py] [leapsecurity/inspy](https://github.com/leapsecurity/InSpy) A python based LinkedIn enumeration tool
+- [**332**Star][11d] [Go] [unixpickle/gobfuscate](https://github.com/unixpickle/gobfuscate) Obfuscate Go binaries and packages
+- [**332**Star][2d] [Coq] [symbiflow/prjxray](https://github.com/symbiflow/prjxray) Documenting the Xilinx 7-series bit-stream format.
+- [**332**Star][8m] [Py] [romanvm/python-web-pdb](https://github.com/romanvm/python-web-pdb) Web-based remote UI for Python's PDB debugger
- [**332**Star][1y] [Ruby] [packetfu/packetfu](https://github.com/packetfu/packetfu) a mid-level packet manipulation library for Ruby
- [**332**Star][7m] [offensive-security/kali-linux-recipes](https://github.com/offensive-security/kali-linux-recipes) Kali Linux Recipes
-- [**332**Star][9m] [JS] [mhzed/wstunnel](https://github.com/mhzed/wstunnel) tunnel over websocket
-- [**332**Star][11d] [PowerShell] [mgeeky/penetration-testing-tools](https://github.com/mgeeky/penetration-testing-tools) A collection of my Penetration Testing scripts, tools, cheatsheets collected over years, used during real-world assignments or collected from various good quality sources.
+- [**332**Star][12m] [Py] [joxeankoret/pigaios](https://github.com/joxeankoret/pigaios) A tool for matching and diffing source codes directly against binaries.
- [**332**Star][5y] [Py] [graydon/bors](https://github.com/graydon/bors) Integration robot for buildbot and github
-- [**332**Star][2y] [C#] [foxglovesec/rottenpotato](https://github.com/foxglovesec/rottenpotato) RottenPotato local privilege escalation from service account to SYSTEM
-- [**332**Star][24d] [D] [cybershadow/rabcdasm](https://github.com/cybershadow/rabcdasm) Robust ABC (ActionScript Bytecode) [Dis-]Assembler
+- [**332**Star][6d] [Java] [datatheorem/trustkit-android](https://github.com/datatheorem/trustkit-android) Easy SSL pinning validation and reporting for Android.
- [**332**Star][3y] [Logos] [bishopfox/ispy](https://github.com/bishopfox/ispy) A reverse engineering framework for iOS
-- [**331**Star][1y] [Py] [leapsecurity/inspy](https://github.com/leapsecurity/InSpy) A python based LinkedIn enumeration tool
-- [**331**Star][1y] [Py] [vmware/liota](https://github.com/vmware/liota)
-- [**331**Star][2y] [HTML] [superkieran/wooyundrops](https://github.com/superkieran/wooyundrops) Wooyun知识库,乌云知识库,
+- [**332**Star][11m] [c] [tildeslash/monit](https://bitbucket.org/tildeslash/monit)
+- [**331**Star][7m] [Py] [s0md3v/jshell](https://github.com/s0md3v/JShell) JShell - Get a JavaScript shell with XSS.
+- [**331**Star][7m] [C] [wbenny/injdrv](https://github.com/wbenny/injdrv) proof-of-concept Windows Driver for injecting DLL into user-mode processes using APC
+- [**331**Star][6y] [JS] [toolness/security-adventure](https://github.com/toolness/security-adventure) Go on an educational Web security adventure!
+- [**331**Star][5m] [Go] [sysdream/hershell](https://github.com/sysdream/hershell) a simple TCP reverse shell written in Go.
- [**331**Star][1y] [snyk/vulnerabilitydb](https://github.com/snyk/vulnerabilitydb) Snyk's public vulnerability database
-- [**331**Star][8m] [Py] [romanvm/python-web-pdb](https://github.com/romanvm/python-web-pdb) Web-based remote UI for Python's PDB debugger
-- [**331**Star][8m] [Py] [rek7/fireelf](https://github.com/rek7/fireelf) Fileless Linux Malware Framework
-- [**331**Star][30d] [C] [pwarren/rtl-entropy](https://github.com/pwarren/rtl-entropy) An entropy generator using SDR peripherals, including rtl-sdr and BladeRF
+- [**331**Star][2y] [Py] [sgayou/medfusion-4000-research](https://github.com/sgayou/medfusion-4000-research) Medfusion 4000 security research & a MQX RCE.
+- [**331**Star][1m] [C] [pwarren/rtl-entropy](https://github.com/pwarren/rtl-entropy) An entropy generator using SDR peripherals, including rtl-sdr and BladeRF
- [**331**Star][9m] [C] [olimex/diy-laptop](https://github.com/olimex/diy-laptop) Do It Yourself Open Source Hardware and Software Modular Hacker's Friendly Laptop
- [**331**Star][1m] [Java] [nationalsecurityagency/timely](https://github.com/nationalsecurityagency/timely) Accumulo backed time series database
- [**331**Star][1y] [Py] [flipkart-incubator/rta](https://github.com/flipkart-incubator/rta) Red team Arsenal - An intelligent scanner to detect security vulnerabilities in company's layer 7 assets.
- [**331**Star][7y] [Java] [brutall/brut.apktool](https://github.com/brutall/brut.apktool) A tool for reverse engineering Android apk files
-- [**330**Star][7m] [Py] [s0md3v/jshell](https://github.com/s0md3v/JShell) JShell - Get a JavaScript shell with XSS.
+- [**331**Star][29d] [Jupyter Notebook] [beeva/beeva-best-practices](https://github.com/beeva/beeva-best-practices) Best Practices and Style Guides in BEEVA
- [**330**Star][3y] [C++] [xilun/cbwin](https://github.com/xilun/cbwin) Launch Windows programs from "Bash on Ubuntu on Windows" (WSL)
-- [**330**Star][1m] [Go] [tomnomnom/httprobe](https://github.com/tomnomnom/httprobe) Take a list of domains and probe for working HTTP and HTTPS servers
-- [**330**Star][5m] [Go] [sysdream/hershell](https://github.com/sysdream/hershell) a simple TCP reverse shell written in Go.
-- [**330**Star][11d] [C] [spurious/sdl-mirror](https://github.com/spurious/sdl-mirror) An unofficial, automated SDL2 and SDL1.2 HG mirror.
-- [**330**Star][4m] [Py] [rbsec/dnscan](https://github.com/rbsec/dnscan) a python wordlist-based DNS subdomain scanner.
-- [**330**Star][2m] [C] [mattiwatti/efiguard](https://github.com/mattiwatti/efiguard) Disable PatchGuard and DSE at boot time
-- [**330**Star][19d] [Shell] [loyess/shell](https://github.com/loyess/shell) Shadowsocks-libev with plugins one-click installation. For example: v2ray-plugin, kcptun, simple-obfs, goquiet, cloak...
-- [**330**Star][12m] [Py] [joxeankoret/pigaios](https://github.com/joxeankoret/pigaios) A tool for matching and diffing source codes directly against binaries.
+- [**330**Star][1y] [Py] [vmware/liota](https://github.com/vmware/liota)
+- [**330**Star][2d] [C] [spurious/sdl-mirror](https://github.com/spurious/sdl-mirror) An unofficial, automated SDL2 and SDL1.2 HG mirror.
+- [**330**Star][4m] [C++] [safebreach-labs/pinjectra](https://github.com/safebreach-labs/pinjectra) Pinjectra is a C/C++ OOP-like library that implements Process Injection techniques (with focus on Windows 10 64-bit)
+- [**330**Star][7m] [Java] [jaegertracing/jaeger-kubernetes](https://github.com/jaegertracing/jaeger-kubernetes) Support for deploying Jaeger into Kubernetes
- [**330**Star][10m] [C#] [ghostpack/sharpdump](https://github.com/ghostpack/sharpdump) SharpDump is a C# port of PowerSploit's Out-Minidump.ps1 functionality.
+- [**330**Star][1m] [Py] [daniestevez/gr-satellites](https://github.com/daniestevez/gr-satellites) GNU Radio decoders for several Amateur satellites
+- [**330**Star][2y] [Py] [cyberheartmi9/cve-2017-12617](https://github.com/cyberheartmi9/cve-2017-12617) Apache Tomcat < 9.0.1 (Beta) / < 8.5.23 / < 8.0.47 / < 7.0.8 - JSP Upload Bypass / Remote Code Execution
+- [**330**Star][4m] [Go] [capsule8/capsule8](https://github.com/capsule8/capsule8) cloud-native behavioral security monitoring
- [**330**Star][5y] [Py] [byt3bl33d3r/pth-toolkit](https://github.com/byt3bl33d3r/pth-toolkit) Modified version of the passing-the-hash tool collection made to work straight out of the box
-- [**329**Star][11d] [TeX] [radareorg/radare2book](https://github.com/radareorg/radare2book) r1 book transcription to r2
-- [**329**Star][6y] [JS] [toolness/security-adventure](https://github.com/toolness/security-adventure) Go on an educational Web security adventure!
+- [**330**Star][15d] [JS] [auth0/repo-supervisor](https://github.com/auth0/repo-supervisor) Scan your code for security misconfiguration, search for passwords and secrets.
- [**329**Star][3y] [Java] [seven456/safewebview](https://github.com/seven456/safewebview) Android Safe WebView、解决WebView的Js对象注入漏洞、支持网页将JS函数(function)传到Java层,方便回调;
-- [**329**Star][3y] [Py] [nccgroup/abptts](https://github.com/nccgroup/abptts) TCP tunneling over HTTP/HTTPS for web application servers
-- [**329**Star][8d] [JS] [meituan-dianping/lyrebird](https://github.com/meituan-dianping/lyrebird) 基于拦截以及模拟HTTP/HTTPS网络请求的面向移动应用的插件化测试工作台
+- [**329**Star][1y] [C++] [polidea/siriusobfuscator](https://github.com/polidea/siriusobfuscator) a tool for performing source-to-source obfuscation of Swift projects
+- [**329**Star][3m] [Py] [pfalcon/scratchabit](https://github.com/pfalcon/scratchabit) Easily retargetable and hackable interactive disassembler with IDAPython-compatible plugin API
- [**329**Star][4y] [C#] [koczkatamas/cve-2016-0051](https://github.com/koczkatamas/cve-2016-0051) EoP (Win7) & BSoD (Win10) PoC for CVE-2016-0051 (MS-016)
- [**329**Star][5m] [Py] [knipknap/exscript](https://github.com/knipknap/exscript) A Python module making Telnet and SSH easy
-- [**329**Star][2y] [Py] [cyberheartmi9/cve-2017-12617](https://github.com/cyberheartmi9/cve-2017-12617) Apache Tomcat < 9.0.1 (Beta) / < 8.5.23 / < 8.0.47 / < 7.0.8 - JSP Upload Bypass / Remote Code Execution
-- [**328**Star][7m] [C] [wbenny/injdrv](https://github.com/wbenny/injdrv) proof-of-concept Windows Driver for injecting DLL into user-mode processes using APC
-- [**328**Star][9d] [Go] [unixpickle/gobfuscate](https://github.com/unixpickle/gobfuscate) Obfuscate Go binaries and packages
+- [**329**Star][3y] [Visual Basic .NET] [khr0x40sh/macroshop](https://github.com/khr0x40sh/macroshop) Collection of scripts to aid in delivering payloads via Office Macros. Most are python. See
+- [**329**Star][10m] [Py] [justicerage/freedomfighting](https://github.com/justicerage/freedomfighting) A collection of scripts which may come in handy during your freedom fighting activities.
+- [**329**Star][5d] [Java] [jaegertracing/jaeger-client-java](https://github.com/jaegertracing/jaeger-client-java) Jaeger Bindings for Java OpenTracing API
+- [**329**Star][2m] [CSS] [guyoung/captfencoder](https://github.com/guyoung/captfencoder) CaptfEncoder是一款跨平台网络安全工具套件,提供网络安全相关编码转换、古典密码、密码学、特殊编码等工具,并聚合各类在线工具。
+- [**329**Star][2d] [Java] [bit4woo/knife](https://github.com/bit4woo/knife) A burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅
+- [**329**Star][1y] [Shell] [1n3/goohak](https://github.com/1n3/goohak) Automatically Launch Google Hacking Queries Against A Target Domain
+- [**328**Star][7m] [TS] [plasma-umass/bleak](https://github.com/plasma-umass/bleak) BLeak: Automatically Debugging Memory Leaks in Web Applications
+- [**328**Star][2d] [stamparm/ipsum](https://github.com/stamparm/ipsum) Daily feed of bad IPs (with blacklist hit scores)
- [**328**Star][1y] [JS] [shmakov/honeypot](https://github.com/shmakov/honeypot) Low interaction honeypot that displays real time attacks
-- [**328**Star][4m] [C++] [safebreach-labs/pinjectra](https://github.com/safebreach-labs/pinjectra) Pinjectra is a C/C++ OOP-like library that implements Process Injection techniques (with focus on Windows 10 64-bit)
-- [**328**Star][3m] [Py] [pfalcon/scratchabit](https://github.com/pfalcon/scratchabit) Easily retargetable and hackable interactive disassembler with IDAPython-compatible plugin API
- [**328**Star][3y] [Pascal] [malwares/remote-access-trojan](https://github.com/malwares/remote-access-trojan) Windows Remote-Access-Trojan
- [**328**Star][2y] [C#] [liberxue/wechatyunchart](https://github.com/liberxue/wechatyunchart) 微信多开多账号机器人 云客服系统 微商营销 系统web协议一键登录 非公众号微信机器人微信群管家 微信自动回复 微信定时发送消息 微信多账号登录 微信网页版本协议多开 一键登录 红包数量提醒 微信用户识别男女签名备注地理位置等,群发 自动发消息 定时发消息 群消息监控 机器人回复 ,定时回复,超时回复 聊天记录保存,聊天记录查看
-- [**328**Star][10m] [Py] [justicerage/freedomfighting](https://github.com/justicerage/freedomfighting) A collection of scripts which may come in handy during your freedom fighting activities.
-- [**328**Star][1m] [PowerShell] [joelgmsec/autordpwn](https://github.com/joelgmsec/autordpwn) The Shadow Attack Framework
-- [**328**Star][10d] [Py] [efforg/starttls-everywhere](https://github.com/efforg/starttls-everywhere) A system for ensuring & authenticating STARTTLS encryption between mail servers
-- [**328**Star][5m] [Java] [datatheorem/trustkit-android](https://github.com/datatheorem/trustkit-android) Easy SSL pinning validation and reporting for Android.
-- [**328**Star][1m] [Py] [daniestevez/gr-satellites](https://github.com/daniestevez/gr-satellites) GNU Radio decoders for several Amateur satellites
-- [**328**Star][4m] [Go] [capsule8/capsule8](https://github.com/capsule8/capsule8) cloud-native behavioral security monitoring
-- [**327**Star][11d] [Java] [portswigger/http-request-smuggler](https://github.com/PortSwigger/http-request-smuggler) an extension for Burp Suite designed to help you launch HTTP Request Smuggling attack
-- [**327**Star][7d] [stamparm/ipsum](https://github.com/stamparm/ipsum) Daily feed of bad IPs (with blacklist hit scores)
+- [**328**Star][3y] [Py] [faizann24/fwaf-machine-learning-driven-web-application-firewall](https://github.com/faizann24/fwaf-machine-learning-driven-web-application-firewall) Machine learning driven web application firewall to detect malicious queries with high accuracy.
+- [**328**Star][12d] [Py] [efforg/starttls-everywhere](https://github.com/efforg/starttls-everywhere) A system for ensuring & authenticating STARTTLS encryption between mail servers
+- [**328**Star][11m] [C] [e-ago/bitcracker](https://github.com/e-ago/bitcracker) BitCracker is the first open source password cracking tool for memory units encrypted with BitLocker
+- [**328**Star][3m] [Py] [defaultnamehere/cookie_crimes](https://github.com/defaultnamehere/cookie_crimes) Read local Chrome cookies without root or decrypting
+- [**328**Star][4m] [C] [csete/gpredict](https://github.com/csete/gpredict) a real time satellite tracking and orbit prediction program
+for the Linux desktop
+- [**328**Star][1m] [TS] [algolia/hn-search](https://github.com/algolia/hn-search) Hacker News Search
+- [**327**Star][16d] [Py] [datadriventests/ddt](https://github.com/datadriventests/ddt) Data-Driven Tests for Python Unittest
+- [**327**Star][3m] [Shell] [vanhoefm/modwifi](https://github.com/vanhoefm/modwifi)
+- [**327**Star][15d] [Java] [spring-cloud/spring-cloud-openfeign](https://github.com/spring-cloud/spring-cloud-openfeign) Support for using OpenFeign in Spring Cloud apps
+- [**327**Star][1m] [C] [royhills/arp-scan](https://github.com/royhills/arp-scan) The ARP Scanner
- [**327**Star][3y] [JS] [qgy18/pangolin](https://github.com/qgy18/pangolin) A light weight http tunnels to localhost.
- [**327**Star][4y] [JS] [pwnsdx/randomdns](https://github.com/pwnsdx/randomdns) improve the security, privacy and anonymity of DNSCrypt
-- [**327**Star][1y] [C++] [polidea/siriusobfuscator](https://github.com/polidea/siriusobfuscator) a tool for performing source-to-source obfuscation of Swift projects
-- [**327**Star][7m] [Java] [jaegertracing/jaeger-kubernetes](https://github.com/jaegertracing/jaeger-kubernetes) Support for deploying Jaeger into Kubernetes
-- [**327**Star][3y] [Py] [faizann24/fwaf-machine-learning-driven-web-application-firewall](https://github.com/faizann24/fwaf-machine-learning-driven-web-application-firewall) Machine learning driven web application firewall to detect malicious queries with high accuracy.
-- [**327**Star][11m] [C] [e-ago/bitcracker](https://github.com/e-ago/bitcracker) BitCracker is the first open source password cracking tool for memory units encrypted with BitLocker
-- [**327**Star][3m] [Py] [defaultnamehere/cookie_crimes](https://github.com/defaultnamehere/cookie_crimes) Read local Chrome cookies without root or decrypting
+- [**327**Star][6m] [Go] [nhoya/gosint](https://github.com/nhoya/gosint) OSINT Swiss Army Knife
+- [**327**Star][30d] [Py] [m8r0wn/nullinux](https://github.com/m8r0wn/nullinux) Internal penetration testing tool for Linux that can be used to enumerate OS information, domain information, shares, directories, and users through SMB.
+- [**327**Star][2m] [PS] [joelgmsec/autordpwn](https://github.com/joelgmsec/autordpwn) The Shadow Attack Framework
+- [**327**Star][9d] [Py] [fireeye/stringsifter](https://github.com/fireeye/stringsifter) A machine learning tool that automatically ranks strings based on their relevance for malware analysis.
- [**327**Star][3y] [Ruby] [antisnatchor/phishlulz](https://github.com/antisnatchor/phishlulz)
-- [**327**Star][1m] [TypeScript] [algolia/hn-search](https://github.com/algolia/hn-search) Hacker News Search
-- [**327**Star][1y] [Shell] [1n3/goohak](https://github.com/1n3/goohak) Automatically Launch Google Hacking Queries Against A Target Domain
+- [**326**Star][22d] [Go] [square/sharkey](https://github.com/square/sharkey) Sharkey is a service for managing certificates for use by OpenSSH
- [**326**Star][10m] [Py] [samhaxr/hackbox](https://github.com/samhaxr/hackbox) HackBox is the combination of awesome techniques. [1] - Xss [2] - Exploits [3] - Subdomain scanner [4] - Whois Lookup [5] - SSRF Injection [6] - Nmap Auto banner [7] - Js Url parser [8] - Web Headers [9] - Listener [10] - Current Network Stats [11] - CORS Misconfig [12] - AWS S3 Misconfig
- [**326**Star][9m] [pxlpnk/awesome-ruby-security](https://github.com/pxlpnk/awesome-ruby-security) Awesome Ruby Security resources
-- [**326**Star][28d] [Py] [m8r0wn/nullinux](https://github.com/m8r0wn/nullinux) Internal penetration testing tool for Linux that can be used to enumerate OS information, domain information, shares, directories, and users through SMB.
-- [**326**Star][2m] [Java] [jaegertracing/jaeger-client-java](https://github.com/jaegertracing/jaeger-client-java) Jaeger Bindings for Java OpenTracing API
-- [**326**Star][2m] [CSS] [guyoung/captfencoder](https://github.com/guyoung/captfencoder) CaptfEncoder是一款跨平台网络安全工具套件,提供网络安全相关编码转换、古典密码、密码学、特殊编码等工具,并聚合各类在线工具。
-- [**326**Star][4m] [C] [csete/gpredict](https://github.com/csete/gpredict) a real time satellite tracking and orbit prediction program
-for the Linux desktop
+- [**326**Star][2d] [Batchfile] [mitchellkrogza/ultimate.hosts.blacklist](https://github.com/mitchellkrogza/ultimate.hosts.blacklist) The Ultimate Unified Hosts file for protecting your network, computer, smartphones and Wi-Fi devices against millions of bad web sites. Protect your children and family from gaining access to bad web sites and protect your devices and pc from being infected with Malware or Ransomware.
+- [**326**Star][2y] [Java] [mar-v-in/arthook](https://github.com/mar-v-in/arthook) Library for hooking on ART
+- [**326**Star][3m] [Shell] [extremeshok/clamav-unofficial-sigs](https://github.com/extremeshok/clamav-unofficial-sigs) ClamAV Unofficial Signatures Updater maintained by eXtremeSHOK.com
+- [**326**Star][6y] [C] [diegocr/netcat](https://github.com/diegocr/netcat) NetCat for Windows
+- [**326**Star][4m] [C++] [cedarctic/digispark-scripts](https://github.com/cedarctic/digispark-scripts) USB Rubber Ducky type scripts written for the DigiSpark.
- [**326**Star][2y] [Py] [baldassarrefe/deep-koalarization](https://github.com/baldassarrefe/deep-koalarization) Keras/Tensorflow implementation of our paper Grayscale Image Colorization using deep CNN and Inception-ResNet-v2 (
-- [**326**Star][13d] [JS] [auth0/repo-supervisor](https://github.com/auth0/repo-supervisor) Scan your code for security misconfiguration, search for passwords and secrets.
-- [**325**Star][14d] [Py] [datadriventests/ddt](https://github.com/datadriventests/ddt) Data-Driven Tests for Python Unittest
+- [**325**Star][27d] [C++] [secure-software-engineering/phasar](https://github.com/secure-software-engineering/phasar) A LLVM-based static analysis framework.
+- [**325**Star][2m] [C] [xelerance/xl2tpd](https://github.com/xelerance/xl2tpd) an implementation of the Layer 2 Tunnelling Protocol (RFC 2661)
- [**325**Star][3m] [Py] [vulmon/vulmap](https://github.com/vulmon/vulmap) Vulmap Online Local Vulnerability Scanners Project
-- [**325**Star][3m] [Shell] [vanhoefm/modwifi](https://github.com/vanhoefm/modwifi)
-- [**325**Star][27d] [stardustsky/saidict](https://github.com/stardustsky/saidict) 弱口令,敏感目录,敏感文件等渗透测试常用攻击字典
-- [**325**Star][20d] [Go] [square/sharkey](https://github.com/square/sharkey) Sharkey is a service for managing certificates for use by OpenSSH
-- [**325**Star][13d] [PHP] [scheb/two-factor-bundle](https://github.com/scheb/two-factor-bundle) Two-factor authentication for Symfony applications
-- [**325**Star][30d] [C] [royhills/arp-scan](https://github.com/royhills/arp-scan) The ARP Scanner
-- [**325**Star][6m] [Go] [nhoya/gosint](https://github.com/nhoya/gosint) OSINT Swiss Army Knife
-- [**325**Star][3y] [Visual Basic] [khr0x40sh/macroshop](https://github.com/khr0x40sh/macroshop) Collection of scripts to aid in delivering payloads via Office Macros. Most are python. See
+- [**325**Star][3d] [PHP] [scheb/two-factor-bundle](https://github.com/scheb/two-factor-bundle) Two-factor authentication for Symfony applications
+- [**325**Star][5m] [Go] [saturnsvoid/gobot2](https://github.com/saturnsvoid/gobot2) Second Version of The GoBot Botnet, But more advanced.
+- [**325**Star][3y] [Shell] [nsakey/nsa-rules](https://github.com/nsakey/nsa-rules) Password cracking rules and masks for hashcat that I generated from cracked passwords.
+- [**325**Star][3y] [mikesiko/practicalmalwareanalysis-labs](https://github.com/mikesiko/practicalmalwareanalysis-labs) Binaries for the book Practical Malware Analysis
- [**325**Star][2y] [TeX] [ivyl/rootkit](https://github.com/ivyl/rootkit) Sample Rootkit for Linux
-- [**325**Star][7d] [Py] [fireeye/stringsifter](https://github.com/fireeye/stringsifter) A machine learning tool that automatically ranks strings based on their relevance for malware analysis.
-- [**324**Star][2m] [C] [xelerance/xl2tpd](https://github.com/xelerance/xl2tpd) an implementation of the Layer 2 Tunnelling Protocol (RFC 2661)
+- [**325**Star][6d] [Py] [initstring/linkedin2username](https://github.com/initstring/linkedin2username) Generate username lists for companies on LinkedIn
+- [**324**Star][1y] [Java] [ysrc/liudao](https://github.com/ysrc/liudao) “六道”实时业务风控系统
+- [**324**Star][11m] [Py] [secwiki/office-exploits](https://github.com/secwiki/office-exploits) office-exploits Office漏洞集合
- [**324**Star][2y] [Rust] [pravic/winapi-kmd-rs](https://github.com/pravic/winapi-kmd-rs) Windows Kernel-Mode Drivers written in Rust
-- [**324**Star][3y] [Shell] [nsakey/nsa-rules](https://github.com/nsakey/nsa-rules) Password cracking rules and masks for hashcat that I generated from cracked passwords.
- [**324**Star][1y] [JS] [nccgroup/wssip](https://github.com/nccgroup/wssip) Application for capturing, modifying and sending custom WebSocket data from client to server and vice versa.
-- [**324**Star][7d] [Batchfile] [mitchellkrogza/ultimate.hosts.blacklist](https://github.com/mitchellkrogza/ultimate.hosts.blacklist) The Ultimate Unified Hosts file for protecting your network, computer, smartphones and Wi-Fi devices against millions of bad web sites. Protect your children and family from gaining access to bad web sites and protect your devices and pc from being infected with Malware or Ransomware.
-- [**324**Star][3y] [mikesiko/practicalmalwareanalysis-labs](https://github.com/mikesiko/practicalmalwareanalysis-labs) Binaries for the book Practical Malware Analysis
+- [**324**Star][8m] [Py] [jasonstrimpel/volatility-trading](https://github.com/jasonstrimpel/volatility-trading) A complete set of volatility estimators based on Euan Sinclair's Volatility Trading
- [**324**Star][5y] [C] [ioerror/tlsdate](https://github.com/ioerror/tlsdate) secure parasitic rdate replacement
-- [**324**Star][6y] [C] [diegocr/netcat](https://github.com/diegocr/netcat) NetCat for Windows
+- [**324**Star][5m] [JS] [hr/crypter](https://github.com/hr/crypter) An innovative, convenient and secure cross-platform encryption app
+- [**324**Star][11m] [Py] [alessandroz/lazagneforensic](https://github.com/alessandroz/lazagneforensic) Windows passwords decryption from dump files
+- [**323**Star][9d] [PS] [fortynorthsecurity/egress-assess](https://github.com/FortyNorthSecurity/Egress-Assess) Egress-Assess is a tool used to test egress data detection capabilities
+- [**323**Star][29d] [Shell] [zmarch/orc](https://github.com/zmarch/orc) Orc is a post-exploitation framework for Linux written in Bash
- [**323**Star][3y] [C] [vusec/revanc](https://github.com/vusec/revanc) Reverse Engineering Page Table Caches in Your Processor
-- [**323**Star][13d] [Java] [spring-cloud/spring-cloud-openfeign](https://github.com/spring-cloud/spring-cloud-openfeign) Support for using OpenFeign in Spring Cloud apps
- [**323**Star][10m] [QMake] [ncatlin/rgat](https://github.com/ncatlin/rgat) 指令追踪可视化, 辅助建立目标行为和代码之间的连接.
-- [**323**Star][5m] [Py] [initstring/linkedin2username](https://github.com/initstring/linkedin2username) Generate username lists for companies on LinkedIn
-- [**323**Star][5m] [JS] [hr/crypter](https://github.com/hr/crypter) An innovative, convenient and secure cross-platform encryption app
-- [**323**Star][4m] [C++] [cedarctic/digispark-scripts](https://github.com/cedarctic/digispark-scripts) USB Rubber Ducky type scripts written for the DigiSpark.
-- [**323**Star][4m] [Java] [bit4woo/knife](https://github.com/bit4woo/knife) A burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅
-- [**323**Star][11m] [Py] [alessandroz/lazagneforensic](https://github.com/alessandroz/lazagneforensic) Windows passwords decryption from dump files
-- [**322**Star][17d] [PowerShell] [fortynorthsecurity/egress-assess](https://github.com/FortyNorthSecurity/Egress-Assess) Egress-Assess is a tool used to test egress data detection capabilities
-- [**322**Star][1y] [Java] [ysrc/liudao](https://github.com/ysrc/liudao) “六道”实时业务风控系统
-- [**322**Star][2y] [Java] [mar-v-in/arthook](https://github.com/mar-v-in/arthook) Library for hooking on ART
-- [**322**Star][3m] [Shell] [extremeshok/clamav-unofficial-sigs](https://github.com/extremeshok/clamav-unofficial-sigs) ClamAV Unofficial Signatures Updater maintained by eXtremeSHOK.com
-- [**322**Star][2m] [Objective-C] [auth0/simplekeychain](https://github.com/auth0/simplekeychain) A Keychain helper for iOS to make it very simple to store/obtain values from iOS Keychain
-- [**321**Star][25d] [C++] [secure-software-engineering/phasar](https://github.com/secure-software-engineering/phasar) A LLVM-based static analysis framework.
-- [**321**Star][3m] [Solidity] [provable-things/ethereum-examples](https://github.com/provable-things/ethereum-examples) Code examples showing how to use the Provable API on Ethereum
+- [**323**Star][3y] [Py] [ius/rsatool](https://github.com/ius/rsatool) rsatool can be used to calculate RSA and RSA-CRT parameters
+- [**323**Star][21d] [Py] [atc-project/atomic-threat-coverage](https://github.com/atc-project/atomic-threat-coverage) Actionable analytics designed to combat threats based on MITRE's ATT&CK.
+- [**322**Star][3d] [HTML] [tanjiti/sec_profile](https://github.com/tanjiti/sec_profile) 爬取secwiki和xuanwu.github.io/sec.today,分析安全信息站点、安全趋势、提取安全工作者账号(twitter,weixin,github等)
+- [**322**Star][1y] [C] [smartdone/dexdump](https://github.com/smartdone/dexdump) 快速脱一代壳的xposed插件
+- [**322**Star][2m] [ObjC] [auth0/simplekeychain](https://github.com/auth0/simplekeychain) A Keychain helper for iOS to make it very simple to store/obtain values from iOS Keychain
+- [**322**Star][1y] [C++] [alicanakyol/sems](https://github.com/alicanakyol/sems) Virtualbox, VirtualMachine, Cuckoo, Anubis, ThreatExpert, Sandboxie, QEMU, Analysis Tools Detection Tools
- [**321**Star][4y] [Py] [ztrix/zio](https://github.com/ztrix/zio) easy-to-use io library for pwning development, supporting an unified interface for local process pwning and TCP socket io
-- [**321**Star][27d] [Shell] [zmarch/orc](https://github.com/zmarch/orc) Orc is a post-exploitation framework for Linux written in Bash
- [**321**Star][7m] [C#] [yalcinyolalan/wssat](https://github.com/yalcinyolalan/wssat) web service security scanning tool which provides a dynamic environment to add, update or delete vulnerabilities by just editing its configuration files
+- [**321**Star][4y] [Perl] [truongkma/ctf-tools](https://github.com/truongkma/ctf-tools) tổng hợp tool ctf
+- [**321**Star][1m] [Go] [tomnomnom/assetfinder](https://github.com/tomnomnom/assetfinder) Find domains and subdomains related to a given domain
- [**321**Star][2y] [PHP] [tanjiti/webshellsample](https://github.com/tanjiti/webshellsample) webshell sample for WebShell Log Analysis
-- [**321**Star][1y] [C] [smartdone/dexdump](https://github.com/smartdone/dexdump) 快速脱一代壳的xposed插件
-- [**321**Star][5m] [Go] [saturnsvoid/gobot2](https://github.com/saturnsvoid/gobot2) Second Version of The GoBot Botnet, But more advanced.
-- [**321**Star][3m] [PowerShell] [kmkz/pentesting](https://github.com/kmkz/pentesting) Tricks for penetration testing
-- [**321**Star][3y] [Py] [ius/rsatool](https://github.com/ius/rsatool) rsatool can be used to calculate RSA and RSA-CRT parameters
-- [**321**Star][2m] [HTML] [coinbase/salus](https://github.com/coinbase/salus) Security scanner coordinator
-- [**321**Star][1y] [C++] [alicanakyol/sems](https://github.com/alicanakyol/sems) Virtualbox, VirtualMachine, Cuckoo, Anubis, ThreatExpert, Sandboxie, QEMU, Analysis Tools Detection Tools
-- [**320**Star][10d] [Py] [vector35/binaryninja-api](https://github.com/vector35/binaryninja-api) Public API, examples, documentation and issues for Binary Ninja
-- [**320**Star][2y] [Kotlin] [ollide/intellij-java2smali](https://github.com/ollide/intellij-java2smali) A plugin for IntelliJ IDEA & Android Studio to easily compile Java & Kotlin files to smali.
-- [**320**Star][11m] [cryin/paper](https://github.com/cryin/paper) Web Security Technology & Vulnerability Analysis Whitepapers
-- [**319**Star][4y] [Perl] [truongkma/ctf-tools](https://github.com/truongkma/ctf-tools) tổng hợp tool ctf
-- [**319**Star][7d] [HTML] [tanjiti/sec_profile](https://github.com/tanjiti/sec_profile) 爬取secwiki和xuanwu.github.io/sec.today,分析安全信息站点、安全趋势、提取安全工作者账号(twitter,weixin,github等)
-- [**319**Star][25d] [C++] [silverf0x/rpcview](https://github.com/silverf0x/rpcview) RpcView is a free tool to explore and decompile Microsoft RPC interfaces
+- [**321**Star][2y] [Kotlin] [ollide/intellij-java2smali](https://github.com/ollide/intellij-java2smali) A plugin for IntelliJ IDEA & Android Studio to easily compile Java & Kotlin files to smali.
+- [**321**Star][3m] [PS] [kmkz/pentesting](https://github.com/kmkz/pentesting) Tricks for penetration testing
+- [**321**Star][8d] [C] [google/safeside](https://github.com/google/safeside) Understand and mitigate software-observable side-channels
+- [**321**Star][24d] [C] [dyninst/dyninst](https://github.com/dyninst/dyninst) Tools for binary instrumentation, analysis, and modification.
+- [**320**Star][22d] [Py] [mr-un1k0d3r/scshell](https://github.com/mr-un1k0d3r/scshell) Fileless lateral movement tool that relies on ChangeServiceConfigA to run command
+- [**320**Star][3m] [Solidity] [provable-things/ethereum-examples](https://github.com/provable-things/ethereum-examples) Code examples showing how to use the Provable API on Ethereum
+- [**320**Star][9m] [JS] [zyszys/awesome-captcha](https://github.com/zyszys/awesome-captcha)
+- [**320**Star][2d] [Py] [vector35/binaryninja-api](https://github.com/vector35/binaryninja-api) Public API, examples, documentation and issues for Binary Ninja
+- [**320**Star][2m] [Py] [owasp/owasp-vwad](https://github.com/owasp/owasp-vwad) The OWASP Vulnerable Web Applications Directory Project (VWAD) is a comprehensive and well maintained registry of all known vulnerable web applications currently available.
+- [**320**Star][12m] [cryin/paper](https://github.com/cryin/paper) Web Security Technology & Vulnerability Analysis Whitepapers
+- [**320**Star][2m] [HTML] [coinbase/salus](https://github.com/coinbase/salus) Security scanner coordinator
+- [**319**Star][3m] [xsleaks/xsleaks](https://github.com/xsleaks/xsleaks) A collection of browser-based side channel attack vectors.
+- [**319**Star][27d] [Go] [wangyihang/platypus](https://github.com/wangyihang/platypus) A modern multiple reverse shell sessions/clients manager via terminal written in go
+- [**319**Star][7d] [C#] [tmoonlight/nsmartproxy](https://github.com/tmoonlight/nsmartproxy) NSmartProxy是一款开源免费的内网穿透工具。采用.NET CORE的全异步模式打造。(NSmartProxy is an open source reverse proxy tool that creates a secure tunnel from a public endpoint to a locally service.)
+- [**319**Star][27d] [C++] [silverf0x/rpcview](https://github.com/silverf0x/rpcview) RpcView is a free tool to explore and decompile Microsoft RPC interfaces
+- [**319**Star][1y] [Py] [securing/dumpsterdiver](https://github.com/securing/dumpsterdiver) Tool to search secrets in various filetypes.
- [**319**Star][4m] [HTML] [intezer/linux-explorer](https://github.com/intezer/linux-explorer) Easy-to-use live forensics toolbox for Linux endpoints
-- [**319**Star][22d] [C] [dyninst/dyninst](https://github.com/dyninst/dyninst) Tools for binary instrumentation, analysis, and modification.
-- [**319**Star][2y] [Objective-C] [doadam/ziva](https://github.com/doadam/ziva) An iOS kernel exploit designated to work on all iOS devices <= 10.3.1
+- [**319**Star][1m] [C] [hfiref0x/syscalltables](https://github.com/hfiref0x/syscalltables) Windows NT x64 Syscall tables
+- [**319**Star][2y] [ObjC] [doadam/ziva](https://github.com/doadam/ziva) An iOS kernel exploit designated to work on all iOS devices <= 10.3.1
+- [**319**Star][13d] [cryptax/confsec](https://github.com/cryptax/confsec) Security, hacking conferences (list)
+- [**319**Star][24d] [Py] [census/shadow](https://github.com/census/shadow) jemalloc heap exploitation framework
+- [**319**Star][2m] [Py] [admintony/svnexploit](https://github.com/admintony/svnexploit) SvnExploit支持SVN源代码泄露全版本Dump源码
- [**319**Star][9m] [Py] [a2u/cve-2018-7600](https://github.com/a2u/cve-2018-7600)
+- [**318**Star][20d] [trustedsec/physical-docs](https://github.com/trustedsec/physical-docs) This is a collection of legal wording and documentation used for physical security assessments. The goal is to hopefully allow this as a template for other companies to use and to protect themselves when conducting physical security assessments.
- [**318**Star][1y] [Ruby] [carletonstuberg/browser-backdoor](https://github.com/CarletonStuberg/browser-backdoor) BrowserBackdoor is an Electron Application with a JavaScript WebSocket Backdoor and a Ruby Command-Line Listener
-- [**318**Star][9d] [Java] [wiglenet/wigle-wifi-wardriving](https://github.com/wiglenet/wigle-wifi-wardriving) Nethugging client for Android, from wigle.net
+- [**318**Star][3d] [Java] [wiglenet/wigle-wifi-wardriving](https://github.com/wiglenet/wigle-wifi-wardriving) Nethugging client for Android, from wigle.net
- [**318**Star][1y] [C#] [spiderlabs/dohc2](https://github.com/spiderlabs/dohc2) DoHC2 allows the ExternalC2 library from Ryan Hanson (
-- [**318**Star][1y] [Py] [securing/dumpsterdiver](https://github.com/securing/dumpsterdiver) Tool to search secrets in various filetypes.
-- [**318**Star][2m] [C] [rehints/publications](https://github.com/rehints/publications) Conference slides and White-papers
-- [**318**Star][3y] [C++] [pipesocks/pipesocks](https://github.com/pipesocks/pipesocks) A pipe-like SOCKS5 tunnel system.
-- [**318**Star][8m] [Py] [jasonstrimpel/volatility-trading](https://github.com/jasonstrimpel/volatility-trading) A complete set of volatility estimators based on Euan Sinclair's Volatility Trading
+- [**318**Star][3m] [C] [rehints/publications](https://github.com/rehints/publications) Conference slides and White-papers
- [**318**Star][3y] [Py] [j91321/rext](https://github.com/j91321/rext) Router EXploitation Toolkit - small toolkit for easy creation and usage of various python scripts that work with embedded devices.
+- [**318**Star][18d] [C] [frida/frida-core](https://github.com/frida/frida-core) Frida core library intended for static linking into bindings
- [**318**Star][2y] [C] [fireeye/rvmi](https://github.com/fireeye/rvmi) A New Paradigm For Full System Analysis
-- [**318**Star][22d] [Py] [census/shadow](https://github.com/census/shadow) jemalloc heap exploitation framework
+- [**318**Star][12m] [crazywa1ker/darthsidious-chinese](https://github.com/crazywa1ker/darthsidious-chinese) DarthSidious 中文版
+- [**318**Star][10m] [Py] [cisco-sas/kitty](https://github.com/cisco-sas/kitty) Fuzzing framework written in python
+- [**318**Star][7d] [JS] [chichou/bagbak](https://github.com/ChiChou/bagbak) Yet another frida based iOS dumpdecrypted, works on iOS 13 with checkra1n and supports decrypting app extensions
- [**318**Star][2y] [C++] [bastilleresearch/gr-lora](https://github.com/bastilleresearch/gr-lora) GNU Radio OOT module implementing the LoRa PHY, based on
-- [**318**Star][19d] [Py] [atc-project/atomic-threat-coverage](https://github.com/atc-project/atomic-threat-coverage) Actionable analytics designed to combat threats based on MITRE's ATT&CK.
-- [**317**Star][2m] [Py] [raikia/uhoh365](https://github.com/raikia/uhoh365) A script that can see if an email address is valid in Office365 (user/email enumeration). This does not perform any login attempts, is unthrottled, and is incredibly useful for social engineering assessments to find which emails exist and which don't.
- [**317**Star][2y] [ysrc/f-scrack](https://github.com/ysrc/f-scrack) F-Scrack is a single file bruteforcer supports multi-protocol
+- [**317**Star][6m] [Py] [williballenthin/python-idb](https://github.com/williballenthin/python-idb) a library for accessing the contents of IDA Pro databases
+- [**317**Star][4m] [JS] [vngkv123/asiagaming](https://github.com/vngkv123/asiagaming) Chrome, Safari Exploitation
+- [**317**Star][5y] [shadowsocksr-rm/shadowsocks-rss](https://github.com/shadowsocksr-rm/shadowsocks-rss) ShadowsocksR update rss, SSR organization
- [**317**Star][3y] [C] [sdhand/x11fs](https://github.com/sdhand/x11fs) A tool for manipulating X windows
-- [**317**Star][1m] [Py] [owasp/owasp-vwad](https://github.com/owasp/owasp-vwad) The OWASP Vulnerable Web Applications Directory Project (VWAD) is a comprehensive and well maintained registry of all known vulnerable web applications currently available.
-- [**317**Star][7y] [Py] [moxie0/chapcrack](https://github.com/moxie0/chapcrack) A tool for parsing and decrypting MS-CHAPv2 network handshakes
+- [**317**Star][4m] [push0ebp/sig-database](https://github.com/push0ebp/sig-database) IDA FLIRT Signature Database
+- [**317**Star][13d] [JS] [privacypass/challenge-bypass-extension](https://github.com/privacypass/challenge-bypass-extension) the Privacy Pass extension implements the Privacy Pass protocol for providing a private authentication mechanism during web browsing.
+- [**317**Star][3y] [C++] [pipesocks/pipesocks](https://github.com/pipesocks/pipesocks) A pipe-like SOCKS5 tunnel system.
+- [**317**Star][7d] [C] [phaag/nfdump](https://github.com/phaag/nfdump) Netflow processing tools
+- [**317**Star][1m] [Visual Basic .NET] [nccgroup/vcg](https://github.com/nccgroup/vcg) Code security scanning tool.
- [**317**Star][2y] [marcan/speculation-bugs](https://github.com/marcan/speculation-bugs) Docs and resources on CPU Speculative Execution bugs
-- [**317**Star][11d] [cryptax/confsec](https://github.com/cryptax/confsec) Security, hacking conferences (list)
-- [**317**Star][12m] [crazywa1ker/darthsidious-chinese](https://github.com/crazywa1ker/darthsidious-chinese) DarthSidious 中文版
-- [**316**Star][6m] [Py] [williballenthin/python-idb](https://github.com/williballenthin/python-idb) a library for accessing the contents of IDA Pro databases
-- [**316**Star][25d] [Go] [wangyihang/platypus](https://github.com/wangyihang/platypus) A modern multiple reverse shell sessions/clients manager via terminal written in go
-- [**316**Star][12d] [C#] [tmoonlight/nsmartproxy](https://github.com/tmoonlight/nsmartproxy) NSmartProxy是一款开源免费的内网穿透工具。采用.NET CORE的全异步模式打造。(NSmartProxy is an open source reverse proxy tool that creates a secure tunnel from a public endpoint to a locally service.)
-- [**316**Star][5y] [shadowsocksr-rm/shadowsocks-rss](https://github.com/shadowsocksr-rm/shadowsocks-rss) ShadowsocksR update rss, SSR organization
-- [**316**Star][11m] [Py] [secwiki/office-exploits](https://github.com/secwiki/office-exploits) office-exploits Office漏洞集合
-- [**316**Star][30d] [C] [hfiref0x/syscalltables](https://github.com/hfiref0x/syscalltables) Windows NT x64 Syscall tables
+- [**317**Star][1y] [C++] [m0n0ph1/process-hollowing](https://github.com/m0n0ph1/process-hollowing) Great explanation of Process Hollowing (a Technique often used in Malware)
+- [**317**Star][5y] [C++] [frida/cryptoshark](https://github.com/frida/cryptoshark) Self-optimizing cross-platform code tracer based on dynamic recompilation
+- [**317**Star][2m] [HTML] [eugenekolo/sec-tools](https://github.com/eugenekolo/sec-tools) A set of security related tools
+- [**317**Star][3y] [C] [chobits/tapip](https://github.com/chobits/tapip) user-mode TCP/IP stack based on linux tap device
+- [**316**Star][6d] [PHP] [anonaddy/anonaddy](https://github.com/anonaddy/anonaddy) Anonymous email forwarding
+- [**316**Star][5d] [Java] [spongepowered/mixin](https://github.com/spongepowered/mixin) Mixin is a trait/mixin and bytecode weaving framework for Java using ASM
+- [**316**Star][3y] [C] [scumjr/dirtycow-vdso](https://github.com/scumjr/dirtycow-vdso) PoC for Dirty COW (CVE-2016-5195)
+- [**316**Star][2m] [C] [ohjeongwook/darungrim](https://github.com/ohjeongwook/darungrim) A patch analysis tool
+ - [IDA插件](https://github.com/ohjeongwook/darungrim/tree/master/Src/IDAPlugin)
+ - [DGEngine](https://github.com/ohjeongwook/darungrim/tree/master/Src/DGEngine)
+- [**316**Star][7y] [Py] [moxie0/chapcrack](https://github.com/moxie0/chapcrack) A tool for parsing and decrypting MS-CHAPv2 network handshakes
+- [**316**Star][3d] [C++] [knxd/knxd](https://github.com/knxd/knxd) a very common building automation protocol which runs on dedicated 9600-baud wire as well as IP multicast
- [**316**Star][1y] [PHP] [grt1st/wooyun_search](https://github.com/grt1st/wooyun_search) 乌云公开漏洞、知识库搜索 search from wooyun.org
-- [**316**Star][12d] [C] [google/safeside](https://github.com/google/safeside) Understand and mitigate software-observable side-channels
-- [**316**Star][16d] [C] [frida/frida-core](https://github.com/frida/frida-core) Frida core library intended for static linking into bindings
-- [**316**Star][5y] [C++] [frida/cryptoshark](https://github.com/frida/cryptoshark) Self-optimizing cross-platform code tracer based on dynamic recompilation
+- [**316**Star][2y] [Py] [ethventures/cryptotracker](https://github.com/ethventures/cryptotracker) A complete open source system for tracking and visualizing cryptocurrency price movements on leading exchanges
- [**316**Star][8m] [HTML] [ethereum/ethereum-org](https://github.com/ethereum/ethereum-org) [ARCHIVED] Ethereum Foundation website from 2016-2019
-- [**316**Star][3y] [C] [chobits/tapip](https://github.com/chobits/tapip) user-mode TCP/IP stack based on linux tap device
-- [**316**Star][21d] [C] [ascii-boxes/boxes](https://github.com/ascii-boxes/boxes) Command line ASCII boxes unlimited!
+- [**316**Star][24d] [C] [ascii-boxes/boxes](https://github.com/ascii-boxes/boxes) Command line ASCII boxes unlimited!
+- [**315**Star][11d] [trimstray/technical-whitepapers](https://github.com/trimstray/technical-whitepapers) Collection of IT whitepapers, presentations, pdfs; hacking, web app security, db, reverse engineering and more; EN/PL.
- [**315**Star][2y] [Py] [tnich/honssh](https://github.com/tnich/honssh) log all SSH communications between a client and server.
- [**315**Star][1y] [C] [tharina/blackhoodie-2018-workshop](https://github.com/tharina/blackhoodie-2018-workshop) Slides and challenges for my binary exploitation workshop at BlackHoodie 2018.
- [**315**Star][5y] [C] [seastorm/puttyrider](https://github.com/seastorm/puttyrider) Hijack Putty sessions in order to sniff conversation and inject Linux commands.
-- [**315**Star][11d] [JS] [privacypass/challenge-bypass-extension](https://github.com/privacypass/challenge-bypass-extension) the Privacy Pass extension implements the Privacy Pass protocol for providing a private authentication mechanism during web browsing.
-- [**315**Star][2m] [C] [ohjeongwook/darungrim](https://github.com/ohjeongwook/darungrim) A patch analysis tool
- - [IDA插件](https://github.com/ohjeongwook/darungrim/tree/master/Src/IDAPlugin)
- - [DGEngine](https://github.com/ohjeongwook/darungrim/tree/master/Src/DGEngine)
-- [**315**Star][2m] [HTML] [eugenekolo/sec-tools](https://github.com/eugenekolo/sec-tools) A set of security related tools
-- [**315**Star][2y] [Py] [ethventures/cryptotracker](https://github.com/ethventures/cryptotracker) A complete open source system for tracking and visualizing cryptocurrency price movements on leading exchanges
-- [**315**Star][10m] [Py] [cisco-sas/kitty](https://github.com/cisco-sas/kitty) Fuzzing framework written in python
-- [**315**Star][24d] [Py] [circl/lookyloo](https://github.com/circl/lookyloo) Lookyloo is a web interface allowing to scrape a website and then displays a tree of domains calling each other.
-- [**315**Star][2m] [Py] [admintony/svnexploit](https://github.com/admintony/svnexploit) SvnExploit支持SVN源代码泄露全版本Dump源码
-- [**314**Star][4m] [JS] [vngkv123/asiagaming](https://github.com/vngkv123/asiagaming) Chrome, Safari Exploitation
-- [**314**Star][1m] [Go] [tomnomnom/assetfinder](https://github.com/tomnomnom/assetfinder) Find domains and subdomains related to a given domain
-- [**314**Star][15d] [Java] [spongepowered/mixin](https://github.com/spongepowered/mixin) Mixin is a trait/mixin and bytecode weaving framework for Java using ASM
+- [**315**Star][8m] [Py] [n0fate/chainbreaker](https://github.com/n0fate/chainbreaker) Mac OS X Keychain Forensic Tool
+- [**315**Star][26d] [Py] [circl/lookyloo](https://github.com/circl/lookyloo) Lookyloo is a web interface allowing to scrape a website and then displays a tree of domains calling each other.
+- [**314**Star][1y] [Go] [benjojo/bgp-battleships](https://github.com/benjojo/bgp-battleships) Play battleships using BGP
+- [**314**Star][6m] [waylau/vpngate-mirrors](https://github.com/waylau/vpngate-mirrors) Here are the newset VPN Gate web site’s mirrors .With the VPN Gate, you can get through your government's firewall to browse restricted websites.提供最新的访问 VPN Gate 镜像网站,通过使用 VPN 自由访问互联网(翻墙)!
+- [**314**Star][5d] [C++] [trailofbits/pe-parse](https://github.com/trailofbits/pe-parse) Principled, lightweight C/C++ PE parser
+- [**314**Star][3y] [PHP] [snoopysecurity/dvws](https://github.com/snoopysecurity/dvws) Damn Vulnerable Web Services is an insecure web application with multiple vulnerable web service components that can be used to learn real world web service vulnerabilities.
- [**314**Star][3y] [Py] [saelo/armpwn](https://github.com/saelo/armpwn) Repository to train/learn memory corruption on the ARM platform.
-- [**314**Star][8d] [C++] [psi-rockin/dobiestation](https://github.com/psi-rockin/dobiestation) A dog-themed PS2 emulator
+- [**314**Star][7d] [C++] [psi-rockin/dobiestation](https://github.com/psi-rockin/dobiestation) A dog-themed PS2 emulator
- [**314**Star][2y] [PHP] [offensive-security/masscan-web-ui](https://github.com/offensive-security/masscan-web-ui) MASSCAN Web UI
-- [**314**Star][1m] [Visual Basic] [nccgroup/vcg](https://github.com/nccgroup/vcg) Code security scanning tool.
-- [**314**Star][8m] [Py] [n0fate/chainbreaker](https://github.com/n0fate/chainbreaker) Mac OS X Keychain Forensic Tool
+- [**314**Star][5m] [Py] [mvrozanti/rat-via-telegram](https://github.com/mvrozanti/rat-via-telegram) Windows Remote Administration Tool via Telegram
+- [**314**Star][12m] [Gherkin] [middleman/middleman-blog](https://github.com/middleman/middleman-blog) Blog Engine Extension
+- [**314**Star][4y] [C] [jvinet/knock](https://github.com/jvinet/knock) A port-knocking daemon
+- [**314**Star][8m] [JS] [jivesearch/jivesearch](https://github.com/jivesearch/jivesearch) A search engine that doesn't track you.
+- [**314**Star][4m] [Py] [hash3lizer/wifibroot](https://github.com/hash3lizer/wifibroot) A WiFi Pentest Cracking tool for WPA/WPA2 (Handshake, PMKID, Cracking, EAPOL, Deauthentication)
+- [**314**Star][2y] [PS] [dafthack/powermeta](https://github.com/dafthack/powermeta) PowerMeta searches for publicly available files hosted on various websites for a particular domain by using specially crafted Google, and Bing searches. It then allows for the download of those files from the target domain. After retrieving the files, the metadata associated with them can be analyzed by PowerMeta. Some interesting things commonl…
- [**314**Star][1m] [Shell] [brainfucksec/kalitorify](https://github.com/brainfucksec/kalitorify) Transparent proxy through Tor for Kali Linux OS
-- [**313**Star][1y] [Go] [benjojo/bgp-battleships](https://github.com/benjojo/bgp-battleships) Play battleships using BGP
-- [**313**Star][3m] [xsleaks/xsleaks](https://github.com/xsleaks/xsleaks) A collection of browser-based side channel attack vectors.
+- [**314**Star][5m] [Shell] [1n3/reverseapk](https://github.com/1n3/reverseapk) Quickly analyze and reverse engineer Android packages
- [**313**Star][2y] [Py] [sebdah/scrapy-mongodb](https://github.com/sebdah/scrapy-mongodb) MongoDB pipeline for Scrapy. This module supports both MongoDB in standalone setups and replica sets. scrapy-mongodb will insert the items to MongoDB as soon as your spider finds data to extract.
-- [**313**Star][3y] [C] [scumjr/dirtycow-vdso](https://github.com/scumjr/dirtycow-vdso) PoC for Dirty COW (CVE-2016-5195)
-- [**313**Star][12m] [Gherkin] [middleman/middleman-blog](https://github.com/middleman/middleman-blog) Blog Engine Extension
-- [**313**Star][14d] [Py] [google/turbinia](https://github.com/google/turbinia) Automation and Scaling of Digital Forensics Tools
-- [**313**Star][2y] [PowerShell] [dafthack/powermeta](https://github.com/dafthack/powermeta) PowerMeta searches for publicly available files hosted on various websites for a particular domain by using specially crafted Google, and Bing searches. It then allows for the download of those files from the target domain. After retrieving the files, the metadata associated with them can be analyzed by PowerMeta. Some interesting things commonl…
-- [**313**Star][10m] [PowerShell] [cyb3rward0g/invoke-attackapi](https://github.com/cyb3rward0g/invoke-attackapi) A PowerShell script to interact with the MITRE ATT&CK Framework via its own API
-- [**313**Star][5m] [Shell] [1n3/reverseapk](https://github.com/1n3/reverseapk) Quickly analyze and reverse engineer Android packages
-- [**312**Star][9d] [trimstray/technical-whitepapers](https://github.com/trimstray/technical-whitepapers) Collection of IT whitepapers, presentations, pdfs; hacking, web app security, db, reverse engineering and more; EN/PL.
-- [**312**Star][4m] [HTML] [koutto/jok3r](https://github.com/koutto/jok3r) Jok3r v3 BETA 2 - Network and Web Pentest Automation Framework
+- [**313**Star][2d] [Py] [google/turbinia](https://github.com/google/turbinia) Automation and Scaling of Digital Forensics Tools
+- [**313**Star][5d] [Java] [erudika/para](https://github.com/erudika/para) Open source back-end server for web, mobile and IoT. The backend for busy developers. (self-hosted or hosted)
+- [**313**Star][10m] [PS] [cyb3rward0g/invoke-attackapi](https://github.com/cyb3rward0g/invoke-attackapi) A PowerShell script to interact with the MITRE ATT&CK Framework via its own API
+- [**313**Star][3y] [Py] [chinoogawa/fbht](https://github.com/chinoogawa/fbht) Facebook Hacking Tool
+- [**313**Star][10d] [Shell] [al0ne/linuxcheck](https://github.com/al0ne/linuxcheck) linux信息收集/应急响应/常见后门检测脚本
+- [**312**Star][3m] [Shell] [zw963/asuswrt-merlin-transparent-proxy](https://github.com/zw963/asuswrt-merlin-transparent-proxy) transparent proxy base on ss, v2ray, ipset, iptables, chinadns on asuswrt merlin.
+- [**312**Star][5m] [Java] [shengqi158/fastjson-remote-code-execute-poc](https://github.com/shengqi158/fastjson-remote-code-execute-poc) fastjson remote code execute poc
+- [**312**Star][7m] [C] [pmem/syscall_intercept](https://github.com/pmem/syscall_intercept) The system call intercepting library
+- [**312**Star][3m] [Ruby] [owasp/glue](https://github.com/owasp/glue) Application Security Automation
+- [**312**Star][2y] [Py] [nneonneo/sha1collider](https://github.com/nneonneo/sha1collider) Build two PDFs that have different content but identical SHA1 sums.
+- [**312**Star][21d] [YARA] [needmorecowbell/hamburglar](https://github.com/needmorecowbell/hamburglar) collect useful information from urls, directories, and files
+- [**312**Star][23d] [C#] [malware-dev/mdk-se](https://github.com/malware-dev/mdk-se) Malware's Development Kit for SE
+- [**312**Star][3d] [Java] [leibnitz27/cfr](https://github.com/leibnitz27/cfr) This is the public repository for the CFR Java decompiler
+- [**312**Star][4m] [HTML] [koutto/jok3r](https://github.com/koutto/jok3r) a Python3 CLI application which is aimed at helping penetration testers for network infrastructure and web black-box security tests.
+- [**312**Star][3y] [C++] [fdiskyou/hunter](https://github.com/fdiskyou/hunter) (l)user hunter using WinAPI calls only
- [**312**Star][3m] [Py] [dpwe/audfprint](https://github.com/dpwe/audfprint) Landmark-based audio fingerprinting
-- [**312**Star][3y] [Py] [chinoogawa/fbht](https://github.com/chinoogawa/fbht) Facebook Hacking Tool
+- [**312**Star][5m] [Py] [cisco-talos/mutiny-fuzzer](https://github.com/cisco-talos/mutiny-fuzzer)
+- [**312**Star][4m] [TeX] [chronaeon/beigepaper](https://github.com/chronaeon/beigepaper) Rewrite of the Yellowpaper in non-Yellowpaper syntax.
+- [**312**Star][1y] [Py] [christophetd/censys-subdomain-finder](https://github.com/christophetd/censys-subdomain-finder) ⚡ Perform subdomain enumeration using the certificate transparency logs from Censys.
- [**312**Star][2y] [C] [caseyscarborough/keylogger](https://github.com/caseyscarborough/keylogger) A no-frills keylogger for Mac OS X.
+- [**312**Star][2y] [burntmybagel/oscp-prep](https://github.com/burntmybagel/oscp-prep) A list of the resources I use as I get ready for the exam
- [**312**Star][3y] [Py] [blankwall/macheap](https://github.com/blankwall/macheap) OS X malloc introspection tool
-- [**311**Star][23d] [C++] [trailofbits/pe-parse](https://github.com/trailofbits/pe-parse) Principled, lightweight C/C++ PE parser
-- [**311**Star][3y] [PHP] [snoopysecurity/dvws](https://github.com/snoopysecurity/dvws) Damn Vulnerable Web Services is an insecure web application with multiple vulnerable web service components that can be used to learn real world web service vulnerabilities.
-- [**311**Star][6m] [C] [pmem/syscall_intercept](https://github.com/pmem/syscall_intercept) The system call intercepting library
-- [**311**Star][3m] [Ruby] [owasp/glue](https://github.com/owasp/glue) Application Security Automation
-- [**311**Star][5m] [Py] [mvrozanti/rat-via-telegram](https://github.com/mvrozanti/rat-via-telegram) Windows Remote Administration Tool via Telegram
+- [**311**Star][6y] [Py] [shadowsocks/shadowdns](https://github.com/shadowsocks/shadowdns) A DNS forwarder using Shadowsocks as the server
+- [**311**Star][3m] [PHP] [elfsundae/laravel-hashid](https://github.com/elfsundae/laravel-hashid) Obfuscate your data by generating reversible, non-sequential, URL-safe identifiers.
+- [**311**Star][5y] [C] [jenssegers/rtl8188-hostapd](https://github.com/jenssegers/rtl8188-hostapd) hostapd for Realtek RTL8188
+- [**311**Star][11d] [HTML] [vanhauser-thc/thc-archive](https://github.com/vanhauser-thc/thc-archive) All releases of the security research group (a.k.a. hackers) The Hacker's Choice
+- [**311**Star][1y] [Py] [twelvesec/gasmask](https://github.com/twelvesec/gasmask) Information gathering tool - OSINT
+- [**311**Star][8m] [C] [tomac/yersinia](https://github.com/tomac/yersinia) A framework for layer 2 attacks
+- [**311**Star][1y] [Py] [stormshadow07/hacktheworld](https://github.com/stormshadow07/hacktheworld) An Python Script For Generating Payloads that Bypasses All Antivirus so far .
+- [**311**Star][1y] [Py] [sharadkumar97/osint-spy](https://github.com/sharadkumar97/osint-spy) Performs OSINT scan on email/domain/ip_address/organization using OSINT-SPY. It can be used by Data Miners, Infosec Researchers, Penetration Testers and cyber crime investigator in order to find deep information about their target. If you want to ask something please feel free to reach out to me at sharad@osint-spy.com
+- [**311**Star][8m] [Py] [screetsec/brutesploit](https://github.com/screetsec/brutesploit) BruteSploit is a collection of method for automated Generate, Bruteforce and Manipulation wordlist with interactive shell. That can be used during a penetration test to enumerate and maybe can be used in CTF for manipulation,combine,transform and permutation some words or file text :p
- [**311**Star][2y] [Py] [munki/createosxinstallpkg](https://github.com/munki/createosxinstallpkg) Tools for packaging OS X installers
-- [**311**Star][4y] [C] [jvinet/knock](https://github.com/jvinet/knock) A port-knocking daemon
-- [**311**Star][3m] [Py] [circl/circlean](https://github.com/circl/circlean) USB key cleaner
-- [**311**Star][4m] [TeX] [chronaeon/beigepaper](https://github.com/chronaeon/beigepaper) Rewrite of the Yellowpaper in non-Yellowpaper syntax.
-- [**310**Star][5y] [Py] [shadowsocks/shadowdns](https://github.com/shadowsocks/shadowdns) A DNS forwarder using Shadowsocks as the server
-- [**310**Star][18d] [trustedsec/physical-docs](https://github.com/trustedsec/physical-docs) This is a collection of legal wording and documentation used for physical security assessments. The goal is to hopefully allow this as a template for other companies to use and to protect themselves when conducting physical security assessments.
-- [**310**Star][3m] [PHP] [elfsundae/laravel-hashid](https://github.com/elfsundae/laravel-hashid) Obfuscate your data by generating reversible, non-sequential, URL-safe identifiers.
-- [**310**Star][5y] [C] [jenssegers/rtl8188-hostapd](https://github.com/jenssegers/rtl8188-hostapd) hostapd for Realtek RTL8188
-- [**310**Star][5m] [Java] [shengqi158/fastjson-remote-code-execute-poc](https://github.com/shengqi158/fastjson-remote-code-execute-poc) fastjson remote code execute poc
+- [**311**Star][2y] [Shell] [milesrichardson/docker-onion-nmap](https://github.com/milesrichardson/docker-onion-nmap) Scan .onion hidden services with nmap using Tor, proxychains and dnsmasq in a minimal alpine Docker container.
+- [**311**Star][6y] [TeX] [alobbs/macchanger](https://github.com/alobbs/macchanger) makes the maniputation of MAC addresses of network interfaces easier.
- [**310**Star][3y] [Shell] [screetsec/lalin](https://github.com/screetsec/lalin) this script automatically install any package for pentest with uptodate tools , and lazy command for run the tools like lazynmap , install another and update to new #actually for lazy people hahaha #and Lalin is remake the lazykali with fixed bugs , added new features and uptodate tools . It's compatible with the latest release of Kali (Rolling)
-- [**310**Star][8m] [Py] [screetsec/brutesploit](https://github.com/screetsec/brutesploit) BruteSploit is a collection of method for automated Generate, Bruteforce and Manipulation wordlist with interactive shell. That can be used during a penetration test to enumerate and maybe can be used in CTF for manipulation,combine,transform and permutation some words or file text :p
- [**310**Star][4m] [Py] [salesforce/hassh](https://github.com/salesforce/hassh) HASSH is a network fingerprinting standard which can be used to identify specific Client and Server SSH implementations. The fingerprints can be easily stored, searched and shared in the form of a small MD5 fingerprint.
-- [**310**Star][2y] [Py] [nneonneo/sha1collider](https://github.com/nneonneo/sha1collider) Build two PDFs that have different content but identical SHA1 sums.
-- [**310**Star][19d] [YARA] [needmorecowbell/hamburglar](https://github.com/needmorecowbell/hamburglar) collect useful information from urls, directories, and files
-- [**310**Star][2y] [Shell] [milesrichardson/docker-onion-nmap](https://github.com/milesrichardson/docker-onion-nmap) Scan .onion hidden services with nmap using Tor, proxychains and dnsmasq in a minimal alpine Docker container.
- [**310**Star][3y] [OCaml] [microsoft/slayer](https://github.com/microsoft/slayer) SLAyer is an automatic formal verification tool that uses separation logic to verify memory safety of C programs.
-- [**310**Star][21d] [C#] [malware-dev/mdk-se](https://github.com/malware-dev/mdk-se) Malware's Development Kit for SE
+- [**310**Star][3m] [PS] [kevin-robertson/powermad](https://github.com/kevin-robertson/powermad) PowerShell MachineAccountQuota and DNS exploit tools
- [**310**Star][2y] [Py] [ioactive/xdiff](https://github.com/ioactive/xdiff) Extended Differential Fuzzing Framework
-- [**310**Star][4m] [Py] [hash3lizer/wifibroot](https://github.com/hash3lizer/wifibroot) A WiFi Pentest Cracking tool for WPA/WPA2 (Handshake, PMKID, Cracking, EAPOL, Deauthentication)
-- [**310**Star][3y] [C++] [fdiskyou/hunter](https://github.com/fdiskyou/hunter) (l)user hunter using WinAPI calls only
-- [**310**Star][12d] [Java] [erudika/para](https://github.com/erudika/para) Open source back-end server for web, mobile and IoT. The backend for busy developers. (self-hosted or hosted)
-- [**310**Star][5m] [Py] [cisco-talos/mutiny-fuzzer](https://github.com/cisco-talos/mutiny-fuzzer)
-- [**310**Star][1y] [Py] [christophetd/censys-subdomain-finder](https://github.com/christophetd/censys-subdomain-finder) ⚡ Perform subdomain enumeration using the certificate transparency logs from Censys.
-- [**309**Star][3m] [Shell] [zw963/asuswrt-merlin-transparent-proxy](https://github.com/zw963/asuswrt-merlin-transparent-proxy) transparent proxy base on ss, v2ray, ipset, iptables, chinadns on asuswrt merlin.
-- [**309**Star][8m] [C] [tomac/yersinia](https://github.com/tomac/yersinia) A framework for layer 2 attacks
+- [**310**Star][2y] [C++] [exploitagency/esploitv2](https://github.com/exploitagency/esploitv2) WiFi Keystroke Injection Tool designed for an Atmega 32u4/ESP8266 Paired via Serial (Cactus WHID Firmware). Also features Serial, HTTP, and PASV FTP exfiltration methods and an integrated Credential Harvester Phishing tool called ESPortal.
+- [**310**Star][5y] [C++] [dedis/dissent](https://github.com/dedis/dissent) Provably Anonymous Overlay
+- [**310**Star][11m] [Ruby] [darkoperator/metasploit-plugins](https://github.com/darkoperator/metasploit-plugins) Plugins for Metasploit Framework
+- [**310**Star][3m] [Py] [circl/circlean](https://github.com/circl/circlean) USB key cleaner
+- [**310**Star][1y] [1522402210/2018-blackhat-tools-list](https://github.com/1522402210/2018-blackhat-tools-list) 2018 BlackHat Tools List
+- [**309**Star][7m] [ring04h/pentest](https://github.com/ring04h/pentest) pentest stuff
+- [**309**Star][2y] [Shell] [kennyn510/wpa2-wordlists](https://github.com/kennyn510/wpa2-wordlists) A collection of wordlists dictionaries for password cracking
+- [**309**Star][8m] [Py] [wangyihang/webshell-sniper](https://github.com/wangyihang/webshell-sniper) A webshell manager via terminal
+- [**309**Star][1y] [Py] [tintinweb/scapy-ssl_tls](https://github.com/tintinweb/scapy-ssl_tls) SSL/TLS layers for scapy the interactive packet manipulation tool
- [**309**Star][3y] [scadastrangelove/scadapass](https://github.com/scadastrangelove/scadapass) SCADA StrangeLove Default/Hardcoded Passwords List
- [**309**Star][4y] [Py] [packetloop/packetpig](https://github.com/packetloop/packetpig) Open Source Big Data Security Analytics
-- [**309**Star][19d] [PHP] [nakiami/mellivora](https://github.com/nakiami/mellivora) Mellivora is a CTF engine written in PHP
-- [**309**Star][11d] [Java] [leibnitz27/cfr](https://github.com/leibnitz27/cfr) This is the public repository for the CFR Java decompiler
-- [**309**Star][11m] [Ruby] [darkoperator/metasploit-plugins](https://github.com/darkoperator/metasploit-plugins) Plugins for Metasploit Framework
-- [**309**Star][2y] [burntmybagel/oscp-prep](https://github.com/burntmybagel/oscp-prep) A list of the resources I use as I get ready for the exam
-- [**308**Star][12d] [Py] [ym2011/poc-exp](https://github.com/ym2011/poc-exp) Collecting and writing PoC or EXP for vulnerabilities on some application
-- [**308**Star][8m] [Py] [wangyihang/webshell-sniper](https://github.com/wangyihang/webshell-sniper) A webshell manager via terminal
-- [**308**Star][1y] [Py] [tintinweb/scapy-ssl_tls](https://github.com/tintinweb/scapy-ssl_tls) SSL/TLS layers for scapy the interactive packet manipulation tool
+- [**309**Star][7m] [HTML] [nccgroup/crosssitecontenthijacking](https://github.com/nccgroup/crosssitecontenthijacking) Content hijacking proof-of-concept using Flash, PDF and Silverlight
+- [**309**Star][21d] [PHP] [nakiami/mellivora](https://github.com/nakiami/mellivora) Mellivora is a CTF engine written in PHP
+- [**309**Star][1m] [C] [lordnoteworthy/cpu-internals](https://github.com/lordnoteworthy/cpu-internals) Intel / AMD CPU Internals
+- [**309**Star][1y] [PHP] [helloxz/ipinfo](https://github.com/helloxz/ipinfo) 整合多接口的IP查询工具。
+- [**309**Star][1y] [Java] [ebryx/aes-killer](https://github.com/ebryx/aes-killer) Burp plugin to decrypt AES Encrypted traffic of mobile apps on the fly
+- [**309**Star][2y] [Py] [armbues/ioc_parser](https://github.com/armbues/ioc_parser) Tool to extract indicators of compromise from security reports in PDF format
+- [**308**Star][14d] [Py] [ym2011/poc-exp](https://github.com/ym2011/poc-exp) Collecting and writing PoC or EXP for vulnerabilities on some application
- [**308**Star][4y] [Py] [stripe/topmodel](https://github.com/stripe/topmodel) Standard evaluations for binary classifiers so you don't have to
-- [**308**Star][1y] [Py] [stormshadow07/hacktheworld](https://github.com/stormshadow07/hacktheworld) An Python Script For Generating Payloads that Bypasses All Antivirus so far .
+- [**308**Star][3d] [Nim] [status-im/nimbus](https://github.com/status-im/nimbus) an Ethereum 1.0 & 2.0 Client for Resource-Restricted Devices
- [**308**Star][1y] [Java] [s4n7h0/halcyon](https://github.com/s4n7h0/halcyon) First IDE for Nmap Script (NSE) Development.
-- [**308**Star][4m] [PowerShell] [enigma0x3/misc-powershell-stuff](https://github.com/enigma0x3/misc-powershell-stuff) random powershell goodness
-- [**308**Star][1y] [Java] [ebryx/aes-killer](https://github.com/ebryx/aes-killer) Burp plugin to decrypt AES Encrypted traffic of mobile apps on the fly
+- [**308**Star][1y] [C++] [nevermoe/unity_metadata_loader](https://github.com/nevermoe/unity_metadata_loader) load strings and method/class names in global-metadata.dat to IDA
+- [**308**Star][2y] [C++] [kirillkovalenko/nssm](https://github.com/kirillkovalenko/nssm) Non-Sucking Service Manager
+- [**308**Star][4m] [PS] [enigma0x3/misc-powershell-stuff](https://github.com/enigma0x3/misc-powershell-stuff) random powershell goodness
+- [**308**Star][25d] [C#] [ch0pin/aviator](https://github.com/ch0pin/aviator) Antivirus evasion project
+- [**308**Star][21d] [PS] [canix1/adaclscanner](https://github.com/canix1/adaclscanner) Repo for ADACLScan.ps1 - Your number one script for ACL's in Active Directory
- [**308**Star][3y] [Py] [bishopfox/spoofcheck](https://github.com/bishopfox/spoofcheck) Simple script that checks a domain for email protections
-- [**308**Star][6y] [TeX] [alobbs/macchanger](https://github.com/alobbs/macchanger) makes the maniputation of MAC addresses of network interfaces easier.
-- [**307**Star][20d] [Py] [mr-un1k0d3r/scshell](https://github.com/mr-un1k0d3r/scshell) Fileless lateral movement tool that relies on ChangeServiceConfigA to run command
-- [**307**Star][2y] [Shell] [kennyn510/wpa2-wordlists](https://github.com/kennyn510/wpa2-wordlists) A collection of wordlists dictionaries for password cracking
-- [**307**Star][9d] [HTML] [vanhauser-thc/thc-archive](https://github.com/vanhauser-thc/thc-archive) All releases of the security research group (a.k.a. hackers) The Hacker's Choice
-- [**307**Star][1y] [Py] [twelvesec/gasmask](https://github.com/twelvesec/gasmask) Information gathering tool - OSINT
-- [**307**Star][8d] [Nim] [status-im/nimbus](https://github.com/status-im/nimbus) an Ethereum 1.0 & 2.0 Client for Resource-Restricted Devices
+- [**308**Star][4y] [Py] [arecker/bennedetto](https://github.com/arecker/bennedetto) the turn-based budget
+- [**308**Star][5m] [Py] [algo7/bluekeep_cve-2019-0708_poc_to_exploit](https://github.com/algo7/bluekeep_cve-2019-0708_poc_to_exploit) Porting BlueKeep PoC from
- [**307**Star][5m] [C] [sixstars/ctf](https://github.com/sixstars/ctf) A writeup summary for CTF competitions, problems.
-- [**307**Star][1y] [Py] [sharadkumar97/osint-spy](https://github.com/sharadkumar97/osint-spy) Performs OSINT scan on email/domain/ip_address/organization using OSINT-SPY. It can be used by Data Miners, Infosec Researchers, Penetration Testers and cyber crime investigator in order to find deep information about their target. If you want to ask something please feel free to reach out to me at sharad@osint-spy.com
-- [**307**Star][4m] [push0ebp/sig-database](https://github.com/push0ebp/sig-database) IDA FLIRT Signature Database
-- [**307**Star][1y] [C++] [nevermoe/unity_metadata_loader](https://github.com/nevermoe/unity_metadata_loader) load strings and method/class names in global-metadata.dat to IDA
+- [**307**Star][10d] [Swift] [securing/iossecuritysuite](https://github.com/securing/iossecuritysuite) iOS platform security & anti-tampering Swift library
+- [**307**Star][9m] [ObjC] [qhd/anymethodlog](https://github.com/qhd/anymethodlog) Log any method call of object in Objective-C
- [**307**Star][3y] [Ruby] [michenriksen/birdwatcher](https://github.com/michenriksen/birdwatcher) Data analysis and OSINT framework for Twitter
-- [**307**Star][1y] [C++] [m0n0ph1/process-hollowing](https://github.com/m0n0ph1/process-hollowing) Great explanation of Process Hollowing (a Technique often used in Malware)
-- [**307**Star][2y] [C++] [exploitagency/esploitv2](https://github.com/exploitagency/esploitv2) WiFi Keystroke Injection Tool designed for an Atmega 32u4/ESP8266 Paired via Serial (Cactus WHID Firmware). Also features Serial, HTTP, and PASV FTP exfiltration methods and an integrated Credential Harvester Phishing tool called ESPortal.
-- [**307**Star][5m] [Py] [algo7/bluekeep_cve-2019-0708_poc_to_exploit](https://github.com/algo7/bluekeep_cve-2019-0708_poc_to_exploit) Porting BlueKeep PoC from
-- [**307**Star][1y] [1522402210/2018-blackhat-tools-list](https://github.com/1522402210/2018-blackhat-tools-list) 2018 BlackHat Tools List
-- [**306**Star][25d] [Java] [widdix/aws-s3-virusscan](https://github.com/widdix/aws-s3-virusscan) Free Antivirus for S3 Buckets
+- [**307**Star][5m] [Batchfile] [frizb/windows-privilege-escalation](https://github.com/frizb/windows-privilege-escalation) Windows Privilege Escalation Techniques and Scripts
+- [**306**Star][2d] [dnscrypt/dnscrypt-resolvers](https://github.com/dnscrypt/dnscrypt-resolvers) Lists of public DNSCrypt-enabled DNS resolvers
+- [**306**Star][2y] [Go] [q2h1cg/dnsbrute](https://github.com/Q2h1Cg/dnsbrute) a fast domain brute tool
+- [**306**Star][5m] [Py] [travitch/whole-program-llvm](https://github.com/travitch/whole-program-llvm) A wrapper script to build whole-program LLVM bitcode files
- [**306**Star][2y] [C] [tomwimmenhove/subarufobrob](https://github.com/tomwimmenhove/subarufobrob) Hijack a Subaru's key fob and steal all the things
- [**306**Star][2y] [Py] [timsutton/python-macadmin-tools](https://github.com/timsutton/python-macadmin-tools) List of open-source Python-based Mac sysadmin tools
- [**306**Star][2y] [Py] [p1kachu/v0lt](https://github.com/p1kachu/v0lt) Security CTF Toolkit (Not maintained anymore)
-- [**306**Star][3m] [PowerShell] [kevin-robertson/powermad](https://github.com/kevin-robertson/powermad) PowerShell MachineAccountQuota and DNS exploit tools
-- [**306**Star][1m] [PowerShell] [darkoperator/posh-secmod](https://github.com/darkoperator/posh-secmod) PowerShell Module with Security cmdlets for security work
-- [**306**Star][2y] [Py] [armbues/ioc_parser](https://github.com/armbues/ioc_parser) Tool to extract indicators of compromise from security reports in PDF format
-- [**306**Star][4y] [Py] [arecker/bennedetto](https://github.com/arecker/bennedetto) the turn-based budget
-- [**305**Star][6m] [ring04h/pentest](https://github.com/ring04h/pentest) 渗透测试用到的东东
+- [**306**Star][11d] [C#] [nyan-x-cat/asyncrat-c-sharp](https://github.com/nyan-x-cat/asyncrat-c-sharp) Open-Source Remote Administration Tool For Windows C# (RAT)
+- [**306**Star][2y] [C] [nationalsecurityagency/dcp](https://github.com/nationalsecurityagency/dcp) Digest, stat, and copy files from one location to another in the same read pass
+- [**306**Star][3m] [Ruby] [m0nad/hellraiser](https://github.com/m0nad/hellraiser) Vulnerability Scanner
+- [**306**Star][20d] [C] [jhuisi/charm](https://github.com/jhuisi/charm) A Framework for Rapidly Prototyping Cryptosystems
+- [**306**Star][5y] [C++] [draperlaboratory/fracture](https://github.com/draperlaboratory/fracture) an architecture-independent decompiler to LLVM IR
+- [**306**Star][1m] [PS] [darkoperator/posh-secmod](https://github.com/darkoperator/posh-secmod) PowerShell Module with Security cmdlets for security work
+- [**306**Star][2m] [Py] [coalfire-research/slackor](https://github.com/coalfire-research/slackor) A Golang implant that uses Slack as a command and control server
+- [**306**Star][6d] [Py] [baderj/domain_generation_algorithms](https://github.com/baderj/domain_generation_algorithms) Some results of my DGA reversing efforts
- [**305**Star][2y] [PHP] [walkor/workerman-statistics](https://github.com/walkor/workerman-statistics) 一个分布式统计监控系统 包含PHP客户端 、服务端
-- [**305**Star][2y] [Go] [q2h1cg/dnsbrute](https://github.com/Q2h1Cg/dnsbrute) a fast domain brute tool
-- [**305**Star][5m] [Py] [travitch/whole-program-llvm](https://github.com/travitch/whole-program-llvm) A wrapper script to build whole-program LLVM bitcode files
-- [**305**Star][7d] [Swift] [securing/iossecuritysuite](https://github.com/securing/iossecuritysuite) iOS platform security & anti-tampering Swift library
-- [**305**Star][9m] [Objective-C] [qhd/anymethodlog](https://github.com/qhd/anymethodlog) Log any method call of object in Objective-C
-- [**305**Star][2y] [C] [nationalsecurityagency/dcp](https://github.com/nationalsecurityagency/dcp) Digest, stat, and copy files from one location to another in the same read pass
-- [**305**Star][2y] [C++] [kirillkovalenko/nssm](https://github.com/kirillkovalenko/nssm) Non-Sucking Service Manager
-- [**305**Star][18d] [C] [jhuisi/charm](https://github.com/jhuisi/charm) A Framework for Rapidly Prototyping Cryptosystems
-- [**305**Star][5m] [Batchfile] [frizb/windows-privilege-escalation](https://github.com/frizb/windows-privilege-escalation) Windows Privilege Escalation Techniques and Scripts
-- [**305**Star][5y] [C++] [draperlaboratory/fracture](https://github.com/draperlaboratory/fracture) an architecture-independent decompiler to LLVM IR
-- [**305**Star][2m] [Py] [coalfire-research/slackor](https://github.com/coalfire-research/slackor) A Golang implant that uses Slack as a command and control server
-- [**304**Star][8d] [dnscrypt/dnscrypt-resolvers](https://github.com/dnscrypt/dnscrypt-resolvers) Lists of public DNSCrypt-enabled DNS resolvers
+- [**305**Star][1y] [C#] [vmcall/loadlibrayy](https://github.com/vmcall/loadlibrayy) x64 manualmapper with kernel elevation and thread hijacking capabilities
+- [**305**Star][2y] [Py] [wisedoge/proxypool](https://github.com/wisedoge/proxypool) 跨语言IP代理池,Python实现。
+- [**305**Star][2d] [Java] [widdix/aws-s3-virusscan](https://github.com/widdix/aws-s3-virusscan) Free Antivirus for S3 Buckets
+- [**305**Star][5m] [Batchfile] [lmc999/auto-add-routes](https://github.com/lmc999/auto-add-routes) China Route for VPN
+- [**305**Star][1m] [CSS] [justinmeiners/lc3-vm](https://github.com/justinmeiners/lc3-vm) Write your own virtual machine for the LC-3 computer!
+- [**305**Star][2y] [Java] [joaomatosf/javadeserh2hc](https://github.com/joaomatosf/javadeserh2hc) Sample codes written for the Hackers to Hackers Conference magazine 2017 (H2HC).
+- [**305**Star][14d] [bigsinger/androididchanger](https://github.com/bigsinger/androididchanger) Xposed Module for Changing Android Device Info
+- [**305**Star][11m] [Py] [basucert/winboxpoc](https://github.com/basucert/winboxpoc) Proof of Concept of Winbox Critical Vulnerability (CVE-2018-14847)
+- [**305**Star][2y] [JS] [arno0x/dnsexfiltrator](https://github.com/arno0x/dnsexfiltrator) Data exfiltration over DNS request covert channel
+- [**304**Star][2y] [Shell] [sirzdy/shadowsocks](https://github.com/sirzdy/shadowsocks) 与 ShadowSocks 有关的教程、文件等
+- [**304**Star][1y] [Py] [fsecurelabs/win_driver_plugin](https://github.com/FSecureLABS/win_driver_plugin) A tool to help when dealing with Windows IOCTL codes or reversing Windows drivers.
+- [**304**Star][2m] [Py] [hatching/vmcloak](https://github.com/hatching/vmcloak) Automated Virtual Machine Generation and Cloaking for Cuckoo Sandbox.
- [**304**Star][2y] [Shell] [ugukkylbklaom/vultr-ss-firewall](https://github.com/ugukkylbklaom/vultr-ss-firewall) 一整套网络加速方案(SS),速度,安全,便捷 面面俱到,操作简单,适合非IT专业人士
+- [**304**Star][10m] [PHP] [steverobbins/magescan](https://github.com/steverobbins/magescan) Scan a Magento site for information
- [**304**Star][8m] [Ruby] [secgen/secgen](https://github.com/secgen/secgen) Generate vulnerable virtual machines on the fly (current team development is taking place in the cliffe/SecGen fork)
- [**304**Star][3y] [Shell] [safebreach-labs/pwndsh](https://github.com/safebreach-labs/pwndsh) Post-exploitation framework (and an interactive shell) developed in Bash shell scripting
- [**304**Star][3y] [C] [raspberrypi/maynard](https://github.com/raspberrypi/maynard) Desktop environment for Wayland
+- [**304**Star][12m] [Py] [r3vn/badkarma](https://github.com/r3vn/badkarma) network reconnaissance toolkit
- [**304**Star][7m] [Py] [nccgroup/cyber-defence](https://github.com/nccgroup/cyber-defence) Information released publicly by NCC Group's Cyber Defence team
+- [**304**Star][1m] [C] [nagyd/sdlpop](https://github.com/nagyd/sdlpop) An open-source port of Prince of Persia, based on the disassembly of the DOS version.
- [**304**Star][2y] [C++] [m0n0ph1/malware-1](https://github.com/m0n0ph1/malware-1) Malware source code samples leaked online uploaded to GitHub for those who want to analyze the code.
-- [**304**Star][1m] [C] [lordnoteworthy/cpu-internals](https://github.com/lordnoteworthy/cpu-internals) Intel / AMD CPU Internals
- [**304**Star][2y] [JS] [kristian-lange/net-glimpse](https://github.com/kristian-lange/net-glimpse) 1) Real-time visualization of network traffic (Ethernet and Internet), and 2) Streaming of header data from your network interfaces via WebSockets
-- [**304**Star][1m] [CSS] [justinmeiners/lc3-vm](https://github.com/justinmeiners/lc3-vm) Write your own virtual machine for the LC-3 computer!
+- [**304**Star][4m] [JS] [hynekpetrak/malware-jail](https://github.com/hynekpetrak/malware-jail) Sandbox for semi-automatic Javascript malware analysis, deobfuscation and payload extraction. Written for Node.js
+- [**304**Star][21d] [JS] [ethereum/devp2p](https://github.com/ethereum/devp2p) Ethereum peer-to-peer networking specifications
- [**304**Star][4y] [Py] [clusterhq/powerstrip](https://github.com/clusterhq/powerstrip) A tool for prototyping Docker extensions
-- [**304**Star][19d] [PowerShell] [canix1/adaclscanner](https://github.com/canix1/adaclscanner) Repo for ADACLScan.ps1 - Your number one script for ACL's in Active Directory
-- [**304**Star][2y] [JS] [arno0x/dnsexfiltrator](https://github.com/arno0x/dnsexfiltrator) Data exfiltration over DNS request covert channel
-- [**303**Star][8d] [hackerschoice/thc-tesla-powerwall2-hack](https://github.com/hackerschoice/thc-tesla-powerwall2-hack) TESLA PowerWall 2 Security Shenanigans
-- [**303**Star][1y] [Py] [fsecurelabs/win_driver_plugin](https://github.com/FSecureLABS/win_driver_plugin) A tool to help when dealing with Windows IOCTL codes or reversing Windows drivers.
-- [**303**Star][2m] [Py] [hatching/vmcloak](https://github.com/hatching/vmcloak) Automated Virtual Machine Generation and Cloaking for Cuckoo Sandbox.
-- [**303**Star][10m] [PHP] [steverobbins/magescan](https://github.com/steverobbins/magescan) Scan a Magento site for information
+- [**303**Star][9m] [JS] [ning1022/sqlinjectionwiki](https://github.com/ning1022/SQLInjectionWiki) 一个专注于聚合和记录各种SQL注入方法的wiki
- [**303**Star][2y] [Py] [spritz-research-group/skype-type](https://github.com/spritz-research-group/skype-type) Don't Skype & Type! Keyboard acoustic eavesdropping tool.
- [**303**Star][1m] [Py] [salls/angrop](https://github.com/salls/angrop) a rop gadget finder and chain builder
- [**303**Star][1m] [Py] [rhinosecuritylabs/cves](https://github.com/rhinosecuritylabs/cves) A collection of proof-of-concept exploit scripts written by the team at Rhino Security Labs for various CVEs.
-- [**303**Star][7m] [HTML] [nccgroup/crosssitecontenthijacking](https://github.com/nccgroup/crosssitecontenthijacking) Content hijacking proof-of-concept using Flash, PDF and Silverlight
-- [**303**Star][1m] [C] [nagyd/sdlpop](https://github.com/nagyd/sdlpop) An open-source port of Prince of Persia, based on the disassembly of the DOS version.
-- [**303**Star][3m] [Ruby] [m0nad/hellraiser](https://github.com/m0nad/hellraiser) Vulnerability Scanner
- [**303**Star][3y] [Perl] [julienbedard/browsersploit](https://github.com/julienbedard/browsersploit) BrowserExploit is an advanced browser exploit pack for doing internal and external pentesting, helping gaining access to internal computers.
-- [**303**Star][2y] [Java] [joaomatosf/javadeserh2hc](https://github.com/joaomatosf/javadeserh2hc) Sample codes written for the Hackers to Hackers Conference magazine 2017 (H2HC).
- [**303**Star][3m] [Ruby] [fozavci/viproy-voipkit](https://github.com/fozavci/viproy-voipkit) Pen-Test Kit for Metasploit Framework
-- [**303**Star][23d] [C#] [ch0pin/aviator](https://github.com/ch0pin/aviator) Antivirus evasion project
-- [**302**Star][9m] [JS] [ning1022/sqlinjectionwiki](https://github.com/ning1022/SQLInjectionWiki) 一个专注于聚合和记录各种SQL注入方法的wiki
+- [**303**Star][14d] [C#] [dynatrace/superdump](https://github.com/dynatrace/superdump) A service for automated crash-dump analysis
+- [**303**Star][21d] [Py] [christhecoolhut/firmware_slap](https://github.com/christhecoolhut/firmware_slap) Discovering vulnerabilities in firmware through concolic analysis and function clustering.
+- [**303**Star][2m] [Py] [3ndg4me/autoblue-ms17-010](https://github.com/3ndg4me/autoblue-ms17-010) This is just an semi-automated fully working, no-bs, non-metasploit version of the public exploit code for MS17-010
+- [**302**Star][3m] [Py] [xinsss/conf-for-surge-shadowrocket](https://github.com/xinsss/conf-for-surge-shadowrocket) Surge Shadowrocket conf
+- [**302**Star][4m] [Py] [zhaoweiho/securitymanageframwork](https://github.com/zhaoweiho/securitymanageframwork) Security Manage Framwork is a security management platform for enterprise intranet, which includes asset management, vulnerability management, account management, knowledge base management, security scanning automation function modules, and can be used for internal security management. This platform is designed to help Party A with fewer securit…
- [**302**Star][1m] [Py] [xdavidhu/langhost](https://github.com/xdavidhu/langhost) A LAN dropbox chatbot controllable via Telegram
-- [**302**Star][4m] [Py] [rootviii/proxy_requests](https://github.com/rootviii/proxy_requests) a class that uses scraped proxies to make an http GET/POST request (Python requests)
+- [**302**Star][1m] [Shell] [vitaly-kamluk/bitscout](https://github.com/vitaly-kamluk/bitscout) Remote forensics meta tool
+- [**302**Star][10m] [Shell] [swoodford/aws](https://github.com/swoodford/aws) A collection of bash shell scripts for automating various tasks with Amazon Web Services using the AWS CLI and jq.
+- [**302**Star][1y] [Dockerfile] [ston3o/docker-hacklab](https://github.com/ston3o/docker-hacklab) My personal hacklab, create your own.
+- [**302**Star][2m] [JS] [robbendebiene/gesturefy](https://github.com/robbendebiene/gesturefy) Navigate, operate and browse faster with mouse gestures! A customizable Firefox mouse gesture add-on with a variety of different commands.
- [**302**Star][4y] [Py] [lekensteyn/pacemaker](https://github.com/lekensteyn/pacemaker) Heartbleed (CVE-2014-0160) client exploit
+- [**302**Star][3y] [C++] [kgretzky/obfusion](https://github.com/kgretzky/obfusion) C++ X86 Code Obfuscation Library
- [**302**Star][1y] [Shell] [jas502n/st2-057](https://github.com/jas502n/st2-057) St2-057 Poc Example
- [**302**Star][7m] [Java] [ilmila/j2eescan](https://github.com/ilmila/j2eescan) J2EEScan is a plugin for Burp Suite Proxy. The goal of this plugin is to improve the test coverage during web application penetration tests on J2EE applications.
-- [**302**Star][4m] [JS] [hynekpetrak/malware-jail](https://github.com/hynekpetrak/malware-jail) Sandbox for semi-automatic Javascript malware analysis, deobfuscation and payload extraction. Written for Node.js
- [**302**Star][11m] [Assembly] [guitmz/virii](https://github.com/guitmz/virii) Collection of ancient computer virus source codes
-- [**302**Star][12d] [bigsinger/androididchanger](https://github.com/bigsinger/androididchanger) Xposed Module for Changing Android Device Info
-- [**302**Star][11m] [Py] [basucert/winboxpoc](https://github.com/basucert/winboxpoc) Proof of Concept of Winbox Critical Vulnerability (CVE-2018-14847)
-- [**302**Star][14d] [Py] [baderj/domain_generation_algorithms](https://github.com/baderj/domain_generation_algorithms) Some results of my DGA reversing efforts
-- [**302**Star][2m] [Py] [3ndg4me/autoblue-ms17-010](https://github.com/3ndg4me/autoblue-ms17-010) This is just an semi-automated fully working, no-bs, non-metasploit version of the public exploit code for MS17-010
-- [**301**Star][1y] [C#] [vmcall/loadlibrayy](https://github.com/vmcall/loadlibrayy) x64 manualmapper with kernel elevation and thread hijacking capabilities
+- [**302**Star][6y] [Py] [astrand/pyobfuscate](https://github.com/astrand/pyobfuscate) a source code obfuscator
+- [**301**Star][13d] [C#] [zodiacon/procmonx](https://github.com/zodiacon/procmonx) Extended Process Monitor-like tool based on Event Tracing for Windows
+- [**301**Star][6d] [Py] [vmware/tern](https://github.com/vmware/tern) Open Source compliance for containers
- [**301**Star][1y] [Py] [two06/inception](https://github.com/two06/inception) Provides In-memory compilation and reflective loading of C# apps for AV evasion.
-- [**301**Star][10m] [Shell] [swoodford/aws](https://github.com/swoodford/aws) A collection of bash shell scripts for automating various tasks with Amazon Web Services using the AWS CLI and jq.
-- [**301**Star][1y] [Dockerfile] [ston3o/docker-hacklab](https://github.com/ston3o/docker-hacklab) My personal hacklab, create your own.
-- [**301**Star][19d] [JS] [ethereum/devp2p](https://github.com/ethereum/devp2p) Ethereum peer-to-peer networking specifications
-- [**301**Star][12d] [C#] [dynatrace/superdump](https://github.com/dynatrace/superdump) A service for automated crash-dump analysis
-- [**301**Star][6y] [Py] [astrand/pyobfuscate](https://github.com/astrand/pyobfuscate) a source code obfuscator
+- [**301**Star][30d] [Py] [stamparm/dsxs](https://github.com/stamparm/dsxs) Damn Small XSS Scanner
+- [**301**Star][4m] [Py] [rootviii/proxy_requests](https://github.com/rootviii/proxy_requests) a class that uses scraped proxies to make an http GET/POST request (Python requests)
+- [**301**Star][3y] [Py] [ring04h/wyportmap](https://github.com/ring04h/wyportmap) 目标端口扫描+系统服务指纹识别
+- [**301**Star][16d] [Py] [qubesos/qubes-secpack](https://github.com/qubesos/qubes-secpack) Qubes Security Pack
+- [**301**Star][2m] [no-github/dork-admin](https://github.com/no-github/dork-admin) 盘点近年来的数据泄露、供应链污染事件
+- [**301**Star][2m] [Go] [fairwindsops/rbac-lookup](https://github.com/fairwindsops/rbac-lookup) Easily find roles and cluster roles attached to any user, service account, or group name in your Kubernetes cluster
+- [**301**Star][2m] [JS] [bettercap/caplets](https://github.com/bettercap/caplets) bettercap scripts (caplets) and proxy modules.
+- [**301**Star][13d] [PHP] [bepsvpt/secure-headers](https://github.com/bepsvpt/secure-headers) PHP Secure Headers
+- [**301**Star][2m] [Py] [austin-taylor/flare](https://github.com/austin-taylor/flare) An analytical framework for network traffic and behavioral analytics
+- [**301**Star][2m] [C] [9176324/shark](https://github.com/9176324/shark) Turn off PatchGuard in real time for win7 (7600) ~ win10 (18950).
- [**300**Star][11m] [Py] [mr-un1k0d3r/catmyphish](https://github.com/Mr-Un1k0d3r/CatMyPhish) Search for categorized domain
-- [**300**Star][2m] [Py] [skylined/bugid](https://github.com/skylined/bugid) Detect, analyze and uniquely identify crashes in Windows applications
-- [**300**Star][2m] [JS] [robbendebiene/gesturefy](https://github.com/robbendebiene/gesturefy) Navigate, operate and browse faster with mouse gestures! A customizable Firefox mouse gesture add-on with a variety of different commands.
-- [**300**Star][3y] [Py] [ring04h/wyportmap](https://github.com/ring04h/wyportmap) 目标端口扫描+系统服务指纹识别
+- [**300**Star][5m] [Py] [wangyihang/githacker](https://github.com/wangyihang/githacker) a multiple threads tool to detect whether a site has git source leaks, and has the ability to download the site source to the local
+- [**300**Star][9d] [Py] [skylined/bugid](https://github.com/skylined/bugid) Detect, analyze and uniquely identify crashes in Windows applications
- [**300**Star][9m] [C] [raspberrypi/quake3](https://github.com/raspberrypi/quake3) provide a baseline Quake 3 which may be used
for further development
-- [**300**Star][12m] [Py] [r3vn/badkarma](https://github.com/r3vn/badkarma) network reconnaissance toolkit
- [**300**Star][3y] [Java] [nvisium/xssvalidator](https://github.com/nvisium/xssvalidator) This is a burp intruder extender that is designed for automation and validation of XSS vulnerabilities.
-- [**300**Star][2m] [no-github/dork-admin](https://github.com/no-github/dork-admin) 盘点近年来的数据泄露、供应链污染事件
-- [**300**Star][3y] [C++] [kgretzky/obfusion](https://github.com/kgretzky/obfusion) C++ X86 Code Obfuscation Library
-- [**300**Star][2m] [Py] [austin-taylor/flare](https://github.com/austin-taylor/flare) An analytical framework for network traffic and behavioral analytics
-- [**299**Star][28d] [Py] [stamparm/dsxs](https://github.com/stamparm/dsxs) Damn Small XSS Scanner
-- [**299**Star][14d] [Py] [qubesos/qubes-secpack](https://github.com/qubesos/qubes-secpack) Qubes Security Pack
-- [**299**Star][1y] [C] [nektra/deviare2](https://github.com/nektra/deviare2) Deviare API Hook
+- [**300**Star][1y] [C] [nektra/deviare2](https://github.com/nektra/deviare2) Deviare API Hook
+- [**300**Star][2m] [Shell] [mitchellkrogza/apache-ultimate-bad-bot-blocker](https://github.com/mitchellkrogza/apache-ultimate-bad-bot-blocker) Apache Block Bad Bots, (Referer) Spam Referrer Blocker, Vulnerability Scanners, Malware, Adware, Ransomware, Malicious Sites, Wordpress Theme Detectors and Fail2Ban Jail for Repeat Offenders
+- [**300**Star][7m] [Py] [0xacb/viewgen](https://github.com/0xacb/viewgen) viewgen is a ViewState tool capable of generating both signed and encrypted payloads with leaked validation keys
+- [**299**Star][2m] [C] [vusec/vuzzer](https://github.com/vusec/vuzzer) depends heavily on a modeified version of DataTracker, which in turn depends on LibDFT pintool.
+- [**299**Star][26d] [C] [tarsnap/scrypt](https://github.com/tarsnap/scrypt) The scrypt key derivation function was originally developed for use in the Tarsnap online backup system and is designed to be far more secure against hardware brute-force attacks than alternative functions such as PBKDF2 or bcrypt.
+- [**299**Star][3m] [JS] [smartdone/frida-scripts](https://github.com/smartdone/frida-scripts) frida scripts
+- [**299**Star][9m] [C++] [secrary/idenlib](https://github.com/secrary/idenlib) Library Function Identification [prototype project - signatures might change in future releases]
+- [**299**Star][2m] [C#] [ossindex/devaudit](https://github.com/ossindex/devaudit) Open-source, cross-platform, multi-purpose security auditing tool
- [**299**Star][11m] [Py] [mseclab/pyjfuzz](https://github.com/mseclab/pyjfuzz) PyJFuzz - Python JSON Fuzzer
- [**299**Star][3y] [C] [miohtama/python-levenshtein](https://github.com/miohtama/python-levenshtein) The Levenshtein Python C extension module contains functions for fast computation of Levenshtein distance and string similarity
+- [**299**Star][2y] [Py] [hellman/libformatstr](https://github.com/hellman/libformatstr) Simplify format string exploitation.
- [**299**Star][5y] [Perl] [fwaeytens/dnsenum](https://github.com/fwaeytens/dnsenum) dnsenum is a perl script that enumerates DNS information
-- [**299**Star][19d] [Py] [christhecoolhut/firmware_slap](https://github.com/christhecoolhut/firmware_slap) Discovering vulnerabilities in firmware through concolic analysis and function clustering.
+- [**299**Star][7m] [C++] [cyphunk/jtagenum](https://github.com/cyphunk/jtagenum) Given an Arduino compatible microcontroller or Raspberry PI (experimental), JTAGenum scans pins[] for basic JTAG functionality and can be used to enumerate the Instruction Register for undocumented instructions. Props to JTAG scanner and Arduinull which came before JTAGenum and forwhich much of the code and logic is based on. Feel free to branch…
+- [**299**Star][4m] [Py] [cyberark/kubiscan](https://github.com/cyberark/kubiscan) A tool to scan Kubernetes cluster for risky permissions
- [**299**Star][1y] [Py] [bhdresh/cve-2017-8759](https://github.com/bhdresh/cve-2017-8759) Exploit toolkit CVE-2017-8759 - v1.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft .NET Framework RCE. It could generate a malicious RTF file and deliver metasploit / meterpreter / other payload to victim without any complex configuration.
-- [**299**Star][11d] [PHP] [bepsvpt/secure-headers](https://github.com/bepsvpt/secure-headers) PHP Secure Headers
+- [**299**Star][2m] [Py] [alexandreborges/malwoverview](https://github.com/alexandreborges/malwoverview) Malwoverview.py is a first response tool to perform an initial and quick triage in a directory containing malware samples, specific malware sample, suspect URL and domains. Additionally, it allows to download and send samples to main online sandboxes.
- [**299**Star][5m] [0xradi/owasp-web-checklist](https://github.com/0xradi/owasp-web-checklist) OWASP Web Application Security Testing Checklist
-- [**298**Star][4m] [Py] [zhaoweiho/securitymanageframwork](https://github.com/zhaoweiho/securitymanageframwork) Security Manage Framwork is a security management platform for enterprise intranet, which includes asset management, vulnerability management, account management, knowledge base management, security scanning automation function modules, and can be used for internal security management. This platform is designed to help Party A with fewer securit…
-- [**298**Star][1m] [C] [vusec/vuzzer](https://github.com/vusec/vuzzer) depends heavily on a modeified version of DataTracker, which in turn depends on LibDFT pintool.
-- [**298**Star][4y] [samyk/proxygambit](https://github.com/samyk/proxygambit) Anonymize and fracture network traffic/Internet access over a point-to-point wireless link or through TCP->GSM->wifi tunnel (advanced resurrection of ProxyHam)
-- [**298**Star][2m] [C#] [ossindex/devaudit](https://github.com/ossindex/devaudit) Open-source, cross-platform, multi-purpose security auditing tool
-- [**298**Star][2m] [Shell] [mitchellkrogza/apache-ultimate-bad-bot-blocker](https://github.com/mitchellkrogza/apache-ultimate-bad-bot-blocker) Apache Block Bad Bots, (Referer) Spam Referrer Blocker, Vulnerability Scanners, Malware, Adware, Ransomware, Malicious Sites, Wordpress Theme Detectors and Fail2Ban Jail for Repeat Offenders
-- [**298**Star][7m] [C++] [cyphunk/jtagenum](https://github.com/cyphunk/jtagenum) Given an Arduino compatible microcontroller or Raspberry PI (experimental), JTAGenum scans pins[] for basic JTAG functionality and can be used to enumerate the Instruction Register for undocumented instructions. Props to JTAG scanner and Arduinull which came before JTAGenum and forwhich much of the code and logic is based on. Feel free to branch…
+- [**299**Star][2y] [Shell] [0x90/kali-scripts](https://github.com/0x90/kali-scripts) Some usefull scripts for KaliLinux
+- [**298**Star][4y] [Py] [zer0h/httpscan](https://github.com/zer0h/httpscan) 一个爬虫式的网段Web主机发现小工具 # A HTTP Service detector with a crawler from IP/CIDR
+- [**298**Star][1y] [Java] [vmware/burp-rest-api](https://github.com/vmware/burp-rest-api) REST/JSON API to the Burp Suite security tool.
+- [**298**Star][2y] [C++] [rootm0s/protectors](https://github.com/rootm0s/protectors)
+- [**298**Star][1y] [PS] [onelogicalmyth/zeroday-powershell](https://github.com/onelogicalmyth/zeroday-powershell) A PowerShell example of the Windows zero day priv esc
+- [**298**Star][2y] [krausefx/steal.password](https://github.com/krausefx/steal.password) Easily get the user's Apple ID password, just by asking
+- [**298**Star][2y] [C] [igrr/esptool-ck](https://github.com/igrr/esptool-ck) ESP8266 build/flash helper tool by Christian Klippel
+- [**298**Star][4y] [Py] [emposha/shell-detector](https://github.com/emposha/shell-detector) Shell Detector – is a application that helps you find and identify php/cgi(perl)/asp/aspx shells. Shell Detector has a “web shells” signature database that helps to identify “web shell” up to 99%.
+- [**298**Star][3m] [Py] [cisco-talos/ghida](https://github.com/cisco-talos/ghida) an IDA Pro plugin that integrates the Ghidra decompiler in IDA.
- [**298**Star][2m] [Py] [christhecoolhut/pinctf](https://github.com/christhecoolhut/pinctf) Using Intel's PIN tool to solve CTF problems
-- [**298**Star][29d] [JS] [chichou/bagbak](https://github.com/ChiChou/bagbak) Yet another frida based iOS dumpdecrypted
+- [**298**Star][2m] [Py] [bishopfox/eyeballer](https://github.com/bishopfox/eyeballer) Convolutional neural network for analyzing pentest screenshots
+- [**298**Star][2m] [HTML] [balsn/ctf_writeup](https://github.com/balsn/ctf_writeup) CTF writeups from Balsn
- [**298**Star][6y] [Py] [andresriancho/nimbostratus](https://github.com/andresriancho/nimbostratus) Tools for fingerprinting and exploiting Amazon cloud infrastructures
-- [**298**Star][2m] [Py] [alexandreborges/malwoverview](https://github.com/alexandreborges/malwoverview) Malwoverview.py is a first response tool to perform an initial and quick triage in a directory containing malware samples, specific malware sample, suspect URL and domains. Additionally, it allows to download and send samples to main online sandboxes.
-- [**298**Star][7m] [Py] [0xacb/viewgen](https://github.com/0xacb/viewgen) viewgen is a ViewState tool capable of generating both signed and encrypted payloads with leaked validation keys
-- [**297**Star][3m] [Py] [xinsss/conf-for-surge-shadowrocket](https://github.com/xinsss/conf-for-surge-shadowrocket) Surge Shadowrocket conf
-- [**297**Star][4y] [Py] [zer0h/httpscan](https://github.com/zer0h/httpscan) 一个爬虫式的网段Web主机发现小工具 # A HTTP Service detector with a crawler from IP/CIDR
-- [**297**Star][1m] [Shell] [vitaly-kamluk/bitscout](https://github.com/vitaly-kamluk/bitscout) Remote forensics meta tool
-- [**297**Star][24d] [C] [tarsnap/scrypt](https://github.com/tarsnap/scrypt) The scrypt key derivation function was originally developed for use in the Tarsnap online backup system and is designed to be far more secure against hardware brute-force attacks than alternative functions such as PBKDF2 or bcrypt.
-- [**297**Star][3m] [Py] [saghul/aiodns](https://github.com/saghul/aiodns) Simple DNS resolver for asyncio
-- [**297**Star][2y] [C++] [rootm0s/protectors](https://github.com/rootm0s/protectors)
+- [**297**Star][2y] [C] [pwning/docs](https://github.com/pwning/docs) Tips, Tricks, and Suggestions for Running a CTF
+- [**297**Star][9d] [JS] [w3c/webappsec-trusted-types](https://github.com/w3c/webappsec-trusted-types) A browser API to prevent DOM-Based Cross Site Scripting in modern web applications.
+- [**297**Star][12m] [Shell] [yw9381/burp_suite_doc_zh_cn](https://github.com/yw9381/burp_suite_doc_zh_cn) 这是基于Burp Suite官方文档翻译而来的中文版文档
+- [**297**Star][2y] [Py] [trustedsec/nps_payload](https://github.com/trustedsec/nps_payload) This script will generate payloads for basic intrusion detection avoidance. It utilizes publicly demonstrated techniques from several different sources. Written by Larry Spohn (
+- [**297**Star][2d] [C++] [squalr/squally](https://github.com/squalr/squally) 2D Platformer Game for Teaching Game Hacking - C++/cocos2d-x
+- [**297**Star][4d] [Java] [shred/acme4j](https://github.com/shred/acme4j) a protocol that a certificate authority (CA) and an applicant can use to automate the process of verification and certificate issuance
+- [**297**Star][4y] [samyk/proxygambit](https://github.com/samyk/proxygambit) Anonymize and fracture network traffic/Internet access over a point-to-point wireless link or through TCP->GSM->wifi tunnel (advanced resurrection of ProxyHam)
+- [**297**Star][18d] [Go] [ropnop/kerbrute](https://github.com/ropnop/kerbrute) A tool to perform Kerberos pre-auth bruteforcing
- [**297**Star][4y] [Py] [orf/cyborg](https://github.com/orf/cyborg) Python web scraping framework
-- [**297**Star][1y] [PowerShell] [onelogicalmyth/zeroday-powershell](https://github.com/onelogicalmyth/zeroday-powershell) A PowerShell example of the Windows zero day priv esc
-- [**297**Star][2y] [krausefx/steal.password](https://github.com/krausefx/steal.password) Easily get the user's Apple ID password, just by asking
+- [**297**Star][7d] [Py] [mozillasecurity/dharma](https://github.com/mozillasecurity/dharma) Generation-based, context-free grammar fuzzer.
- [**297**Star][3y] [Go] [janeczku/rancher-letsencrypt](https://github.com/janeczku/rancher-letsencrypt) A Rancher service that obtains free SSL/TLS certificates from the Let's Encrypt CA, adds them to Rancher's certificate store and manages renewal and propagation of updated certificates to load balancer
- [**297**Star][2y] [PHP] [interference-security/empire-web](https://github.com/interference-security/empire-web) PowerShell Empire Web Interface
-- [**297**Star][2y] [C] [igrr/esptool-ck](https://github.com/igrr/esptool-ck) ESP8266 build/flash helper tool by Christian Klippel
-- [**297**Star][2y] [Py] [hellman/libformatstr](https://github.com/hellman/libformatstr) Simplify format string exploitation.
-- [**297**Star][1m] [HTML] [balsn/ctf_writeup](https://github.com/balsn/ctf_writeup) CTF writeups from Balsn
-- [**297**Star][2y] [Shell] [0x90/kali-scripts](https://github.com/0x90/kali-scripts) Some usefull scripts for KaliLinux
-- [**296**Star][2y] [C] [pwning/docs](https://github.com/pwning/docs) Tips, Tricks, and Suggestions for Running a CTF
-- [**296**Star][12m] [Shell] [yw9381/burp_suite_doc_zh_cn](https://github.com/yw9381/burp_suite_doc_zh_cn) 这是基于Burp Suite官方文档翻译而来的中文版文档
-- [**296**Star][1y] [Java] [vmware/burp-rest-api](https://github.com/vmware/burp-rest-api) REST/JSON API to the Burp Suite security tool.
-- [**296**Star][2y] [Py] [trustedsec/nps_payload](https://github.com/trustedsec/nps_payload) This script will generate payloads for basic intrusion detection avoidance. It utilizes publicly demonstrated techniques from several different sources. Written by Larry Spohn (
-- [**296**Star][8d] [C++] [squalr/squally](https://github.com/squalr/squally) 2D Platformer Game for Teaching Game Hacking - C++/cocos2d-x
-- [**296**Star][5m] [Py] [mozillasecurity/dharma](https://github.com/mozillasecurity/dharma) Generation-based, context-free grammar fuzzer.
-- [**296**Star][4y] [Py] [emposha/shell-detector](https://github.com/emposha/shell-detector) Shell Detector – is a application that helps you find and identify php/cgi(perl)/asp/aspx shells. Shell Detector has a “web shells” signature database that helps to identify “web shell” up to 99%.
-- [**296**Star][3m] [Py] [cisco-talos/ghida](https://github.com/cisco-talos/ghida) an IDA Pro plugin that integrates the Ghidra decompiler in IDA.
-- [**296**Star][2m] [JS] [bettercap/caplets](https://github.com/bettercap/caplets) bettercap scripts (caplets) and proxy modules.
-- [**296**Star][2m] [C] [9176324/shark](https://github.com/9176324/shark) Turn off PatchGuard in real time for win7 (7600) ~ win10 (18950).
+- [**297**Star][2m] [C#] [fireeye/sharpersist](https://github.com/fireeye/sharpersist) Windows persistence toolkit
+- [**297**Star][9m] [C] [basil00/reqrypt](https://github.com/basil00/reqrypt) A censorship circumvention tool
+- [**297**Star][2y] [Py] [allyshka/rogue-mysql-server](https://github.com/allyshka/rogue-mysql-server) MySQL fake server for read files of connected clients
+- [**296**Star][8m] [C++] [wangyu-/udp2raw-multiplatform](https://github.com/wangyu-/udp2raw-multiplatform) multi-platform(cross-platform) version of udp2raw-tunnel, which supports Windows/Mac/BSD natively
+- [**296**Star][2d] [ugvf2009/miles](https://github.com/ugvf2009/miles) 二爷翻墙,专注翻墙30年,但没有掌握核心科技^_^
+- [**296**Star][2y] [C++] [sensepost/rattler](https://github.com/sensepost/rattler) Automated DLL Enumerator
+- [**296**Star][3m] [Py] [saghul/aiodns](https://github.com/saghul/aiodns) Simple DNS resolver for asyncio
+- [**296**Star][4m] [C++] [rolfrolles/hexraysdeob](https://github.com/rolfrolles/hexraysdeob) Hex-Rays microcode API plugin for breaking an obfuscating compiler
+- [**296**Star][2d] [C++] [hasherezade/bearparser](https://github.com/hasherezade/bearparser) Portable Executable parsing library (from PE-bear)
+- [**296**Star][7d] [Py] [govanguard/legion](https://github.com/govanguard/legion) Legion is an open source, easy-to-use, super-extensible and semi-automated network penetration testing tool that aids in discovery, reconnaissance and exploitation of information systems.
+- [**296**Star][7m] [Py] [edent/bmw-i-remote](https://github.com/edent/bmw-i-remote) A reverse engineered interface for the BMW i3 Electric Car
+- [**296**Star][2y] [Shell] [checkpointsw/android_unpacker](https://github.com/checkpointsw/android_unpacker) A (hopefully) generic unpacker for packed Android apps.
+- [**296**Star][5m] [PLpgSQL] [amachanic/sp_whoisactive](https://github.com/amachanic/sp_whoisactive) sp_whoisactive
+- [**295**Star][4d] [JS] [aws-samples/aws-serverless-security-workshop](https://github.com/aws-samples/aws-serverless-security-workshop) In this workshop, you will learn techniques to secure a serverless application built with AWS Lambda, Amazon API Gateway and RDS Aurora. We will cover AWS services and features you can leverage to improve the security of a serverless applications in 5 domains: identity & access management, code, data, infrastructure, logging & monitoring.
+- [**295**Star][6m] [Java] [teamwalrus/walrus](https://github.com/TeamWalrus/Walrus) An Android app that lets you use your access control card cloning devices in the field.
- [**295**Star][4m] [Shell] [anti-ddos/anti-ddos](https://github.com/anti-ddos/Anti-DDOS)
-- [**295**Star][11d] [C#] [zodiacon/procmonx](https://github.com/zodiacon/procmonx) Extended Process Monitor-like tool based on Event Tracing for Windows
-- [**295**Star][5m] [Py] [wangyihang/githacker](https://github.com/wangyihang/githacker) a multiple threads tool to detect whether a site has git source leaks, and has the ability to download the site source to the local
-- [**295**Star][1m] [Java] [shred/acme4j](https://github.com/shred/acme4j) a protocol that a certificate authority (CA) and an applicant can use to automate the process of verification and certificate issuance
+- [**295**Star][1y] [JS] [xxxily/fiddler-plus](https://github.com/xxxily/fiddler-plus) 自定义的Fiddler规则,多环境切换、解决跨域开发、快速调试线上代码必备|高效调试分析利器
+- [**295**Star][2y] [swiftonsecurity/swiftfilter](https://github.com/swiftonsecurity/swiftfilter) Exchange Transport rules to detect and enable response to phishing
- [**295**Star][1y] [Shell] [sevagas/swap_digger](https://github.com/sevagas/swap_digger) swap_digger is a tool used to automate Linux swap analysis during post-exploitation or forensics. It automates swap extraction and searches for Linux user credentials, web forms credentials, web forms emails, http basic authentication, Wifi SSID and keys, etc.
+- [**295**Star][3y] [C] [s2e/s2e-old](https://github.com/s2e/s2e-old) This is the archived S2E 1.0 repo. We do not maintain it anymore.
- [**295**Star][7m] [Py] [s0md3v/zen](https://github.com/s0md3v/zen) Find emails of Github users
- [**295**Star][5m] [C#] [raikia/credninja](https://github.com/raikia/credninja) A multithreaded tool designed to identify if credentials are valid, invalid, or local admin valid credentials within a network at-scale via SMB, plus now with a user hunter
-- [**295**Star][2y] [PowerShell] [outflanknl/invoke-adlabdeployer](https://github.com/outflanknl/invoke-adlabdeployer) Automated deployment of Windows and Active Directory test lab networks. Useful for red and blue teams.
+- [**295**Star][2y] [PS] [outflanknl/invoke-adlabdeployer](https://github.com/outflanknl/invoke-adlabdeployer) Automated deployment of Windows and Active Directory test lab networks. Useful for red and blue teams.
+- [**295**Star][4d] [C++] [hasherezade/libpeconv](https://github.com/hasherezade/libpeconv) A library to load, manipulate, dump PE files. See also:
- [**295**Star][1y] [C#] [ghostpack/sharpup](https://github.com/ghostpack/sharpup) SharpUp is a C# port of various PowerUp functionality.
+- [**295**Star][3d] [Shell] [fdiskyou/zines](https://github.com/fdiskyou/zines) Mirror of my favourite hacking Zines for the lulz, nostalgy, and reference
- [**295**Star][1m] [JS] [doyensec/electronegativity](https://github.com/doyensec/electronegativity) Electronegativity is a tool to identify misconfigurations and security anti-patterns in Electron applications.
-- [**295**Star][2y] [Shell] [checkpointsw/android_unpacker](https://github.com/checkpointsw/android_unpacker) A (hopefully) generic unpacker for packed Android apps.
-- [**295**Star][9m] [C] [basil00/reqrypt](https://github.com/basil00/reqrypt) A censorship circumvention tool
- [**295**Star][3m] [Java] [amaembo/huntbugs](https://github.com/amaembo/huntbugs) Java bytecode static analyzer
-- [**294**Star][8m] [C++] [wangyu-/udp2raw-multiplatform](https://github.com/wangyu-/udp2raw-multiplatform) multi-platform(cross-platform) version of udp2raw-tunnel, which supports Windows/Mac/BSD natively
-- [**294**Star][6m] [Java] [teamwalrus/walrus](https://github.com/TeamWalrus/Walrus) An Android app that lets you use your access control card cloning devices in the field.
-- [**294**Star][7d] [JS] [w3c/webappsec-trusted-types](https://github.com/w3c/webappsec-trusted-types) A browser API to prevent DOM-Based Cross Site Scripting in modern web applications.
-- [**294**Star][1y] [JS] [xxxily/fiddler-plus](https://github.com/xxxily/fiddler-plus) 自定义的Fiddler规则,多环境切换、解决跨域开发、快速调试线上代码必备|高效调试分析利器
-- [**294**Star][2y] [swiftonsecurity/swiftfilter](https://github.com/swiftonsecurity/swiftfilter) Exchange Transport rules to detect and enable response to phishing
-- [**294**Star][2y] [C++] [sensepost/rattler](https://github.com/sensepost/rattler) Automated DLL Enumerator
-- [**294**Star][9m] [C++] [secrary/idenlib](https://github.com/secrary/idenlib) Library Function Identification [prototype project - signatures might change in future releases]
+- [**294**Star][3d] [C] [ebwi11/agentsmith-hids](https://github.com/EBWi11/AgentSmith-HIDS) Low performance loss and by LKM technology HIDS tool, from E_Bwill.
+- [**294**Star][1y] [Py] [anasaboureada/penetration-testing-study-notes](https://github.com/AnasAboureada/Penetration-Testing-Study-Notes) Penetration Testing notes, resources and scripts
+- [**294**Star][6y] [Py] [xiaomi-sa/smartdns](https://github.com/xiaomi-sa/smartdns) 基于Twisted实现的智能dns系统
+- [**294**Star][2y] [Py] [ricmoo/pyaes](https://github.com/ricmoo/pyaes) Pure-Python implementation of AES block-cipher and common modes of operation.
+- [**294**Star][9m] [C] [rhboot/shim](https://github.com/rhboot/shim) a trivial EFI application that, when run, attempts to open and execute another application
+- [**294**Star][1m] [Lua] [pentesteracademy/patoolkit](https://github.com/pentesteracademy/patoolkit) a collection of traffic analysis plugins to extend the functionality of Wireshark from a micro-analysis tool and protocol dissector to the macro analyzer and threat hunter.
- [**294**Star][3y] [Py] [n1nj4sec/pr0cks](https://github.com/n1nj4sec/pr0cks) python script setting up a transparent proxy to forward all TCP and DNS traffic through a SOCKS / SOCKS5 or HTTP(CONNECT) proxy using iptables -j REDIRECT target
+- [**294**Star][2m] [Go] [mdsecactivebreach/o365-attack-toolkit](https://github.com/mdsecactivebreach/o365-attack-toolkit) A toolkit to attack Office365
+- [**294**Star][7m] [HTML] [maaaaz/androwarn](https://github.com/maaaaz/androwarn) Yet another static code analyzer for malicious Android applications
- [**294**Star][3y] [lucyoa/ctf-wiki](https://github.com/lucyoa/ctf-wiki) Hacking techniques useful during CTFs
-- [**294**Star][6m] [Py] [edent/bmw-i-remote](https://github.com/edent/bmw-i-remote) A reverse engineered interface for the BMW i3 Electric Car
+- [**294**Star][7m] [Shell] [eschultze/urlextractor](https://github.com/eschultze/urlextractor) Information gathering & website reconnaissance |
+- [**294**Star][10m] [Shell] [ctf-wiki/ctf-tools](https://github.com/ctf-wiki/ctf-tools) CTF 工具集合
- [**294**Star][1y] [Shell] [cryptolok/ghostinthenet](https://github.com/cryptolok/ghostinthenet) Ultimate Network Stealther that makes Linux a Ghost In The Net and protects from MITM/DOS/scan
-- [**294**Star][2m] [Py] [bishopfox/eyeballer](https://github.com/bishopfox/eyeballer) Convolutional neural network for analyzing pentest screenshots
-- [**294**Star][2y] [Py] [allyshka/rogue-mysql-server](https://github.com/allyshka/rogue-mysql-server) MySQL fake server for read files of connected clients
+- [**294**Star][8m] [Py] [boy-hack/w8fuckcdn](https://github.com/boy-hack/w8fuckcdn) Get website IP address by scanning the entire net
+- [**294**Star][1y] [CSS] [appsecco/dvna](https://github.com/appsecco/dvna) Damn Vulnerable NodeJS Application
+- [**294**Star][12d] [TS] [acekyd/made-in-nigeria](https://github.com/acekyd/made-in-nigeria) It is rumored that Nigerians only know how to consume tools and not create them. Here is a curation of awesome tools built by Nigerians that can be used by anybody and from anywhere in the world.
- [**294**Star][2y] [C] [aanarchyy/bully](https://github.com/aanarchyy/bully) a new implementation of the WPS brute force attack
-- [**293**Star][1y] [Py] [anasaboureada/penetration-testing-study-notes](https://github.com/AnasAboureada/Penetration-Testing-Study-Notes) Penetration Testing notes, resources and scripts
-- [**293**Star][3m] [JS] [smartdone/frida-scripts](https://github.com/smartdone/frida-scripts) frida scripts
-- [**293**Star][3y] [C] [s2e/s2e-old](https://github.com/s2e/s2e-old) This is the archived S2E 1.0 repo. We do not maintain it anymore.
-- [**293**Star][4m] [C++] [rolfrolles/hexraysdeob](https://github.com/rolfrolles/hexraysdeob) Hex-Rays microcode API plugin for breaking an obfuscating compiler
-- [**293**Star][8d] [qubesos/qubes-issues](https://github.com/qubesos/qubes-issues) The Qubes OS Project issue tracker
-- [**293**Star][4m] [C] [pulkin/esp8266-injection-example](https://github.com/pulkin/esp8266-injection-example) Example project to demonstrate packet injection / sniffer capabilities of ESP8266 IC.
-- [**293**Star][1m] [Lua] [pentesteracademy/patoolkit](https://github.com/pentesteracademy/patoolkit) PA Toolkit is a collection of traffic analysis plugins focused on security
-- [**293**Star][9d] [C#] [nyan-x-cat/asyncrat-c-sharp](https://github.com/nyan-x-cat/asyncrat-c-sharp) Open-Source Remote Administration Tool For Windows C# (RAT)
+- [**293**Star][4m] [C] [shadowsocks/simple-obfs-android](https://github.com/shadowsocks/simple-obfs-android) A simple obfuscating tool for Android
+- [**293**Star][8m] [vysecurity/domainfrontinglists](https://github.com/vysecurity/DomainFrontingLists) A list of Domain Frontable Domains by CDN
+- [**293**Star][14d] [C++] [xmrig/xmrig-proxy](https://github.com/xmrig/xmrig-proxy) Monero (XMR) Stratum protocol proxy
+- [**293**Star][7m] [Py] [vulscanteam/vulscan](https://github.com/vulscanteam/vulscan) vulscan 扫描系统:最新的poc&exp漏洞扫描,redis未授权、敏感文件、java反序列化、tomcat命令执行及各种未授权扫描等...
+- [**293**Star][4y] [trustedsec/artillery](https://github.com/trustedsec/artillery) The Artillery Project is an open-source blue team tool designed to protect Linux and Windows operating systems through multiple methods.
+- [**293**Star][6m] [YARA] [supportintelligence/icewater](https://github.com/supportintelligence/icewater) 16,432 Free Yara rules created by
+- [**293**Star][1m] [Py] [strazzere/golang_loader_assist](https://github.com/strazzere/golang_loader_assist) Making GO reversing easier in IDA Pro
+- [**293**Star][6m] [C] [skx/simple.vm](https://github.com/skx/simple.vm) Simple virtual machine which inteprets bytecode.
+- [**293**Star][10m] [HTML] [s1gh/ctf-literature](https://github.com/s1gh/ctf-literature) Collection of free books, papers and articles related to CTF challenges.
+- [**293**Star][10d] [qubesos/qubes-issues](https://github.com/qubesos/qubes-issues) The Qubes OS Project issue tracker
+- [**293**Star][5m] [C] [pulkin/esp8266-injection-example](https://github.com/pulkin/esp8266-injection-example) Example project to demonstrate packet injection / sniffer capabilities of ESP8266 IC.
- [**293**Star][2y] [C++] [minhaskamal/trojancockroach](https://github.com/minhaskamal/trojancockroach) A Stealthy Trojan Spyware (keylogger-spyware-malware-worm-spy-virus-fud-undetectable-computer-windows-pc-c-c++)
+- [**293**Star][2m] [C] [mboehme/aflfast](https://github.com/mboehme/aflfast) AFLFast (extends AFL with Power Schedules)
- [**293**Star][2m] [Scala] [jmcardon/tsec](https://github.com/jmcardon/tsec) Type-safe general-cryptography library -
+- [**293**Star][15d] [Visual Basic .NET] [itm4n/vba-runpe](https://github.com/itm4n/vba-runpe) A VBA implementation of the RunPE technique or how to bypass application whitelisting.
- [**293**Star][3y] [invoke-ir/forensicposters](https://github.com/invoke-ir/forensicposters)
-- [**293**Star][9d] [C++] [hasherezade/bearparser](https://github.com/hasherezade/bearparser) Portable Executable parsing library (from PE-bear)
-- [**293**Star][11d] [Shell] [fdiskyou/zines](https://github.com/fdiskyou/zines) Mirror of my favourite hacking Zines for the lulz, nostalgy, and reference
-- [**293**Star][8m] [Py] [boy-hack/w8fuckcdn](https://github.com/boy-hack/w8fuckcdn) Get website IP address by scanning the entire net
-- [**293**Star][1y] [CSS] [appsecco/dvna](https://github.com/appsecco/dvna) Damn Vulnerable NodeJS Application
-- [**292**Star][8m] [vysecurity/domainfrontinglists](https://github.com/vysecurity/DomainFrontingLists) A list of Domain Frontable Domains by CDN
-- [**292**Star][6y] [Py] [xiaomi-sa/smartdns](https://github.com/xiaomi-sa/smartdns) 基于Twisted实现的智能dns系统
-- [**292**Star][7m] [Py] [vulscanteam/vulscan](https://github.com/vulscanteam/vulscan) vulscan 扫描系统:最新的poc&exp漏洞扫描,redis未授权、敏感文件、java反序列化、tomcat命令执行及各种未授权扫描等...
-- [**292**Star][4y] [trustedsec/artillery](https://github.com/trustedsec/artillery) The Artillery Project is an open-source blue team tool designed to protect Linux and Windows operating systems through multiple methods.
-- [**292**Star][1m] [Py] [strazzere/golang_loader_assist](https://github.com/strazzere/golang_loader_assist) Making GO reversing easier in IDA Pro
+- [**293**Star][8m] [C] [gianlucaborello/libprocesshider](https://github.com/gianlucaborello/libprocesshider) Hide a process under Linux using the ld preloader (
+- [**292**Star][1m] [Py] [lucifer1993/tpscan](https://github.com/lucifer1993/tpscan) 一键ThinkPHP漏洞检测
- [**292**Star][5y] [C++] [smartdec/smartdec](https://github.com/smartdec/smartdec) SmartDec decompiler
- [IDA插件](https://github.com/smartdec/smartdec/tree/master/src/ida-plugin)
- [nocode](https://github.com/smartdec/smartdec/tree/master/src/nocode) 命令行反编译器
- [smartdec](https://github.com/smartdec/smartdec/tree/master/src/smartdec) 带GUI界面的反编译器
- [nc](https://github.com/smartdec/smartdec/tree/master/src/nc) 反编译器的核心代码
-- [**292**Star][6m] [C] [skx/simple.vm](https://github.com/skx/simple.vm) Simple virtual machine which inteprets bytecode.
-- [**292**Star][8d] [Py] [qilingframework/qiling](https://github.com/qilingframework/qiling) Qiling Advanced Binary Emulation framework
-- [**292**Star][8y] [Objective-C] [nst/spyphone](https://github.com/nst/spyphone) This project shows the kind of data a rogue iPhone application can collect.
-- [**292**Star][2m] [Go] [mdsecactivebreach/o365-attack-toolkit](https://github.com/mdsecactivebreach/o365-attack-toolkit) A toolkit to attack Office365
-- [**292**Star][2m] [C] [mboehme/aflfast](https://github.com/mboehme/aflfast) AFLFast (extends AFL with Power Schedules)
-- [**292**Star][6m] [HTML] [maaaaz/androwarn](https://github.com/maaaaz/androwarn) Yet another static code analyzer for malicious Android applications
+- [**292**Star][8y] [ObjC] [nst/spyphone](https://github.com/nst/spyphone) This project shows the kind of data a rogue iPhone application can collect.
+- [**292**Star][4y] [Py] [northbit/metaphor](https://github.com/northbit/metaphor) Stagefright with ASLR bypass
+- [**292**Star][2d] [Zeek] [mitre-attack/car](https://github.com/mitre-attack/car) Cyber Analytics Repository
- [**292**Star][11m] [JS] [jeija/bluefluff](https://github.com/jeija/bluefluff) Reverse Engineering Furby Connect's Bluetooth Protocol and Update Format
-- [**292**Star][13d] [Visual Basic] [itm4n/vba-runpe](https://github.com/itm4n/vba-runpe) A VBA implementation of the RunPE technique or how to bypass application whitelisting.
-- [**292**Star][8m] [C] [gianlucaborello/libprocesshider](https://github.com/gianlucaborello/libprocesshider) Hide a process under Linux using the ld preloader (
-- [**292**Star][10m] [Shell] [ctf-wiki/ctf-tools](https://github.com/ctf-wiki/ctf-tools) CTF 工具集合
+- [**292**Star][16d] [Java] [ganyao114/sandvxposed](https://github.com/ganyao114/sandvxposed) Xposed environment without root (OS 5.0 - 10.0)
+- [**292**Star][2m] [Py] [fplyth0ner-combie/bug-project-framework](https://github.com/fplyth0ner-combie/bug-project-framework) 漏洞利用框架模块分享仓库
+- [**292**Star][1y] [findneo/newbie-security-list](https://github.com/findneo/newbie-security-list) 网络安全学习资料,欢迎补充
+- [**292**Star][3d] [Java] [adjust/android_sdk](https://github.com/adjust/android_sdk) This is the Android SDK of Adjust
+- [**291**Star][11m] [Shell] [cyb0r9/socialbox](https://github.com/Cyb0r9/SocialBox) SocialBox is a Bruteforce Attack Framework [ Facebook , Gmail , Instagram ,Twitter ] , Coded By Belahsan Ouerghi
+- [**291**Star][5m] [enkomio/taipan](https://github.com/enkomio/Taipan) Web application vulnerability scanner
- [**291**Star][2m] [Py] [vulnerscom/api](https://github.com/vulnerscom/api) Python 2/3 library for the Vulners Database
-- [**291**Star][10m] [HTML] [s1gh/ctf-literature](https://github.com/s1gh/ctf-literature) Collection of free books, papers and articles related to CTF challenges.
-- [**291**Star][16d] [Go] [ropnop/kerbrute](https://github.com/ropnop/kerbrute) A tool to perform Kerberos pre-auth bruteforcing
-- [**291**Star][2y] [Py] [ricmoo/pyaes](https://github.com/ricmoo/pyaes) Pure-Python implementation of AES block-cipher and common modes of operation.
-- [**291**Star][9m] [C] [rhboot/shim](https://github.com/rhboot/shim) a trivial EFI application that, when run, attempts to open and execute another application
-- [**291**Star][4y] [Py] [northbit/metaphor](https://github.com/northbit/metaphor) Stagefright with ASLR bypass
+- [**291**Star][3y] [Py] [ustwo/mastermind](https://github.com/ustwo/mastermind) Man in the middle testing
+- [**291**Star][10d] [C++] [tevador/randomx](https://github.com/tevador/randomx) Proof of work algorithm based on random code execution
+- [**291**Star][2y] [Py] [orangetw/tiny-url-fuzzer](https://github.com/orangetw/tiny-url-fuzzer) A tiny and cute URL fuzzer
+- [**291**Star][4m] [C#] [mvelazc0/defcon27_csharp_workshop](https://github.com/mvelazc0/defcon27_csharp_workshop) Writing custom backdoor payloads with C# - Defcon 27
+- [**291**Star][2y] [Java] [kingsollyu/appenv](https://github.com/kingsollyu/appenv) 应用变量
+- [**291**Star][6m] [C] [kholia/dedrop](https://github.com/kholia/dedrop) Looking inside the (Drop) box. Security Analysis of Dropbox. Updated WOOT '13 paper and other goodies.
- [**291**Star][3y] [Py] [kevthehermit/volutility](https://github.com/kevthehermit/volutility) Web App for Volatility framework
-- [**291**Star][14d] [C++] [hasherezade/libpeconv](https://github.com/hasherezade/libpeconv) A library to load, manipulate, dump PE files. See also:
-- [**291**Star][2m] [Py] [govanguard/legion](https://github.com/govanguard/legion) Legion is an open source, easy-to-use, super-extensible and semi-automated network penetration testing tool that aids in discovery, reconnaissance and exploitation of information systems.
-- [**291**Star][2m] [Py] [fplyth0ner-combie/bug-project-framework](https://github.com/fplyth0ner-combie/bug-project-framework) 漏洞利用框架模块分享仓库
-- [**291**Star][1y] [findneo/newbie-security-list](https://github.com/findneo/newbie-security-list) 网络安全学习资料,欢迎补充
+- [**291**Star][2y] [JS] [ffay/proxygateway](https://github.com/ffay/proxygateway) Proxy Gateway基于openresty(nginx lua module)开发,可以作为接口网关(api gateway)使用,整合业务模块接口,微服务治理聚合,通过web配置界面,能够轻松进行代理配置管理,支持负载均衡,服务器状态检测等
- [**291**Star][1y] [C] [fail0verflow/ps4-kexec](https://github.com/fail0verflow/ps4-kexec) Implementation of the kexec system call for PS4
-- [**291**Star][7m] [Shell] [eschultze/urlextractor](https://github.com/eschultze/urlextractor) Information gathering & website reconnaissance |
-- [**291**Star][4y] [Perl] [bishopfox/theos-jailed](https://github.com/bishopfox/theos-jailed) A version of Theos/CydiaSubstrate for non-jailbroken iOS devices
-- [**290**Star][4m] [C] [shadowsocks/simple-obfs-android](https://github.com/shadowsocks/simple-obfs-android) A simple obfuscating tool for Android
-- [**290**Star][3y] [Py] [cokebar/gfwlist2dnsmasq_python](https://github.com/cokebar/gfwlist2dnsmasq_python) Just another python script to auto-generate dnsmasq ipset rules using gfwlist. Shell script version:
-- [**290**Star][6m] [YARA] [supportintelligence/icewater](https://github.com/supportintelligence/icewater) 16,432 Free Yara rules created by
-- [**290**Star][2y] [Py] [orangetw/tiny-url-fuzzer](https://github.com/orangetw/tiny-url-fuzzer) A tiny and cute URL fuzzer
-- [**290**Star][4m] [C#] [mvelazc0/defcon27_csharp_workshop](https://github.com/mvelazc0/defcon27_csharp_workshop) Writing custom backdoor payloads with C# - Defcon 27
-- [**290**Star][4m] [C#] [l0ss/grouper2](https://github.com/l0ss/grouper2) Find vulnerabilities in AD Group Policy
-- [**290**Star][2y] [Java] [kingsollyu/appenv](https://github.com/kingsollyu/appenv) 应用变量
-- [**290**Star][6m] [C] [kholia/dedrop](https://github.com/kholia/dedrop) Looking inside the (Drop) box. Security Analysis of Dropbox. Updated WOOT '13 paper and other goodies.
-- [**290**Star][1y] [Py] [flipkart-incubator/watchdog](https://github.com/flipkart-incubator/watchdog) A Comprehensive Security Scanning and a Vulnerability Management Tool.
-- [**290**Star][2m] [C#] [fireeye/sharpersist](https://github.com/fireeye/sharpersist) Windows persistence toolkit
-- [**290**Star][2y] [HTML] [dxa4481/cssinjection](https://github.com/dxa4481/cssinjection) Stealing CSRF tokens with CSS injection (without iFrames)
-- [**290**Star][4m] [PLpgSQL] [amachanic/sp_whoisactive](https://github.com/amachanic/sp_whoisactive) sp_whoisactive
-- [**290**Star][25d] [Java] [adjust/android_sdk](https://github.com/adjust/android_sdk) This is the Android SDK of Adjust
-- [**290**Star][10d] [TypeScript] [acekyd/made-in-nigeria](https://github.com/acekyd/made-in-nigeria) It is rumored that Nigerians only know how to consume tools and not create them. Here is a curation of awesome tools built by Nigerians that can be used by anybody and from anywhere in the world.
-- [**290**Star][10m] [C] [a1ext/labeless](https://github.com/a1ext/labeless) Seamless synchronization of labels, function names, comments and global variables (w/wo demangling); Dynamic dumping of debugged process memory regions
+- [**291**Star][10m] [C] [a1ext/labeless](https://github.com/a1ext/labeless) Seamless synchronization of labels, function names, comments and global variables (w/wo demangling); Dynamic dumping of debugged process memory regions
- [IDA插件](https://github.com/a1ext/labeless/tree/master/labeless_ida)
- [OD](https://github.com/a1ext/labeless/tree/master/labeless_olly)
- [OD2](https://github.com/a1ext/labeless/tree/master/labeless_olly2)
- [x64dbg](https://github.com/a1ext/labeless/tree/master/labeless_x64dbg)
-- [**289**Star][3y] [PowerShell] [fortynorthsecurity/wmiops](https://github.com/FortyNorthSecurity/WMIOps) This repo is for WMIOps, a powershell script which uses WMI for various purposes across a network.
-- [**289**Star][5m] [marcinguy/cve-2019-2107](https://github.com/marcinguy/cve-2019-2107) CVE-2019-2107
-- [**289**Star][10m] [Py] [immunit/drupwn](https://github.com/immunit/drupwn) Drupal enumeration & exploitation tool
+- [**290**Star][1y] [Py] [gallopsled/pwntools-tutorial](https://github.com/gallopsled/pwntools-tutorial) Tutorials for getting started with Pwntools
+- [**290**Star][3y] [Py] [cokebar/gfwlist2dnsmasq_python](https://github.com/cokebar/gfwlist2dnsmasq_python) Just another python script to auto-generate dnsmasq ipset rules using gfwlist. Shell script version:
+- [**290**Star][3m] [C++] [xmrig/xmrig-amd](https://github.com/xmrig/xmrig-amd) xmrig-amd: 门罗币挖矿代码 A卡版本
+- [**290**Star][5m] [marcinguy/cve-2019-2107](https://github.com/marcinguy/cve-2019-2107) CVE-2019-2107
+- [**290**Star][4m] [C#] [l0ss/grouper2](https://github.com/l0ss/grouper2) Find vulnerabilities in AD Group Policy
+- [**290**Star][10m] [Py] [immunit/drupwn](https://github.com/immunit/drupwn) Drupal enumeration & exploitation tool
+- [**290**Star][1y] [Py] [flipkart-incubator/watchdog](https://github.com/flipkart-incubator/watchdog) A Comprehensive Security Scanning and a Vulnerability Management Tool.
+- [**290**Star][2y] [HTML] [dxa4481/cssinjection](https://github.com/dxa4481/cssinjection) Stealing CSRF tokens with CSS injection (without iFrames)
+- [**290**Star][1m] [Go] [decomp/decomp](https://github.com/decomp/decomp) Components of a decompilation pipeline.
+- [**290**Star][4y] [Perl] [bishopfox/theos-jailed](https://github.com/bishopfox/theos-jailed) A version of Theos/CydiaSubstrate for non-jailbroken iOS devices
+- [**290**Star][2m] [Py] [a1ext/auto_re](https://github.com/a1ext/auto_re) IDA PRO auto-renaming plugin with tagging support
+- [**289**Star][15d] [Roff] [ysurac/openmptcprouter](https://github.com/ysurac/openmptcprouter) OpenMPTCProuter is an open source solution to aggregate multiple internet connections using Multipath TCP (MPTCP) on OpenWrt
+- [**289**Star][6m] [JS] [joshuaferrara/node-csgo](https://github.com/joshuaferrara/node-csgo) A node-steam plugin for Counter-Strike: Global Offensive.
+- [**289**Star][3y] [PS] [fortynorthsecurity/wmiops](https://github.com/FortyNorthSecurity/WMIOps) This repo is for WMIOps, a powershell script which uses WMI for various purposes across a network.
+- [**289**Star][4d] [PHP] [voku/anti-xss](https://github.com/voku/anti-xss)
+- [**289**Star][7m] [Py] [ropnop/windapsearch](https://github.com/ropnop/windapsearch) Python script to enumerate users, groups and computers from a Windows domain through LDAP queries
+- [**289**Star][2m] [JS] [pownjs/pown-recon](https://github.com/pownjs/pown-recon) A powerful target reconnaissance framework powered by graph theory.
+- [**289**Star][5m] [Py] [opsdisk/pagodo](https://github.com/opsdisk/pagodo) pagodo (Passive Google Dork) - Automate Google Hacking Database scraping
+- [**289**Star][3m] [JS] [kspearrin/ff-password-exporter](https://github.com/kspearrin/ff-password-exporter) Easily export your passwords from Firefox.
+- [**289**Star][2y] [Py] [kootenpv/gittyleaks](https://github.com/kootenpv/gittyleaks) Discover where your sensitive data has been leaked.
- [**289**Star][2y] [Py] [gbrindisi/xsssniper](https://github.com/gbrindisi/xsssniper) An automatic XSS discovery tool
-- [**289**Star][14d] [Java] [ganyao114/sandvxposed](https://github.com/ganyao114/sandvxposed) Xposed environment without root (OS 5.0 - 10.0)
-- [**289**Star][2m] [Py] [a1ext/auto_re](https://github.com/a1ext/auto_re) IDA PRO auto-renaming plugin with tagging support
-- [**288**Star][1y] [Py] [gallopsled/pwntools-tutorial](https://github.com/gallopsled/pwntools-tutorial) Tutorials for getting started with Pwntools
-- [**288**Star][6m] [JS] [joshuaferrara/node-csgo](https://github.com/joshuaferrara/node-csgo) A node-steam plugin for Counter-Strike: Global Offensive.
-- [**288**Star][11m] [Shell] [cyb0r9/socialbox](https://github.com/Cyb0r9/SocialBox) SocialBox is a Bruteforce Attack Framework [ Facebook , Gmail , Instagram ,Twitter ] , Coded By Belahsan Ouerghi
-- [**288**Star][5m] [enkomio/taipan](https://github.com/enkomio/Taipan) Web application vulnerability scanner
+- [**289**Star][2y] [C] [creaktive/tsh](https://github.com/creaktive/tsh) Tiny SHell - An open-source UNIX backdoor
+- [**289**Star][4d] [Shell] [adferrand/docker-letsencrypt-dns](https://github.com/adferrand/docker-letsencrypt-dns) Docker with Certbot + Lexicon to provide Let's Encrypt SSL certificates validated by DNS challenges
+- [**288**Star][1y] [Py] [zhl2008/awd-platform](https://github.com/zhl2008/awd-platform) a project to set up your awd environment(web challenges only) quickly
- [**288**Star][7m] [Py] [williballenthin/python-registry](https://github.com/williballenthin/python-registry) Read access to Windows Registry files.
-- [**288**Star][28d] [PHP] [voku/anti-xss](https://github.com/voku/anti-xss)
-- [**288**Star][2m] [JS] [pownjs/pown-recon](https://github.com/pownjs/pown-recon) A powerful target reconnaissance framework powered by graph theory.
-- [**288**Star][8d] [PHP] [phpmussel/phpmussel](https://github.com/phpmussel/phpmussel) PHP-based anti-virus anti-trojan anti-malware solution.
+- [**288**Star][2y] [Py] [websploit/websploit](https://github.com/websploit/websploit) websploit is an advanced MITM framework
+- [**288**Star][4d] [C] [troglobit/nemesis](https://github.com/troglobit/nemesis) A command-line network packet crafting and injection utility
+- [**288**Star][2d] [Py] [sosreport/sos](https://github.com/sosreport/sos) A unified tool for collecting system logs and other debug information
+- [**288**Star][5m] [C++] [rampagex/firmware-mod-kit](https://github.com/rampagex/firmware-mod-kit) Automatically exported from code.google.com/p/firmware-mod-kit
+- [**288**Star][10d] [PHP] [phpmussel/phpmussel](https://github.com/phpmussel/phpmussel) PHP-based anti-virus anti-trojan anti-malware solution.
+- [**288**Star][7m] [JS] [ma3k4h3d/papers](https://github.com/ma3k4h3d/papers) Some papers about cyber security
- [**288**Star][12m] [Java] [indywidualny/faceslim](https://github.com/indywidualny/faceslim) Web App for Facebook. Lightweight, ad-free, chat support and modern look.
- [**288**Star][3y] [Py] [dhilipsiva/webapp-checklist](https://github.com/dhilipsiva/webapp-checklist) Technical details that a programmer of a web application should consider before making the site public.
-- [**288**Star][2y] [C] [creaktive/tsh](https://github.com/creaktive/tsh) Tiny SHell - An open-source UNIX backdoor
+- [**288**Star][3y] [C++] [develbranch/tinyantivirus](https://github.com/develbranch/tinyantivirus) TinyAntivirus is an open source antivirus engine designed for detecting polymorphic virus and disinfecting it.
- [**288**Star][3m] [Py] [covertcodes/multitun](https://github.com/covertcodes/multitun) Tunnel arbitrary traffic through an innocuous WebSocket. Clients can 'see' each other, resulting in a stealth WebSocket VPN.
-- [**287**Star][8d] [C] [ebwi11/agentsmith-hids](https://github.com/EBWi11/AgentSmith-HIDS) Low performance loss and by LKM technology HIDS tool, from E_Bwill.
-- [**287**Star][1y] [Py] [zhl2008/awd-platform](https://github.com/zhl2008/awd-platform) a project to set up your awd environment(web challenges only) quickly
+- [**288**Star][10m] [C++] [anhkgg/superdllhijack](https://github.com/anhkgg/superdllhijack) SuperDllHijack:A general DLL hijack technology, don't need to manually export the same function interface of the DLL, so easy! 一种通用Dll劫持技术,不再需要手工导出Dll的函数接口了
+- [**287**Star][6m] [Shell] [greenwolf/spray](https://github.com/Greenwolf/Spray) A Password Spraying tool for Active Directory Credentials by Jacob Wilkin(Greenwolf)
+- [**287**Star][1y] [Py] [klsecservices/rpivot](https://github.com/klsecservices/rpivot) socks4 reverse proxy for penetration testing
+- [**287**Star][8m] [C] [tangsilian/android-vuln](https://github.com/tangsilian/android-vuln) 安卓内核提权漏洞分析
- [**287**Star][2m] [Py] [utiso/dorkbot](https://github.com/utiso/dorkbot) Command-line tool to scan Google search results for vulnerabilities
- [**287**Star][2m] [Shell] [tehw0lf/airbash](https://github.com/tehw0lf/airbash) A POSIX-compliant, fully automated WPA PSK handshake capture script aimed at penetration testing
-- [**287**Star][2m] [Py] [sosreport/sos](https://github.com/sosreport/sos) A unified tool for collecting system logs and other debug information
-- [**287**Star][1y] [C++] [paranoidninja/pandoras-box](https://github.com/paranoidninja/pandoras-box) This repo contains my custom scripts for Penetration Testing and Red Team Assessments. I will keep on updating this repo as and when I get time.
-- [**287**Star][1m] [Shell] [matthewpierson/1033-ota-downgrader](https://github.com/matthewpierson/1033-ota-downgrader) First ever tool to downgrade ANY iPhone 5s, ANY iPad Air and (almost any) iPad Mini 2 to 10.3.3 with OTA blobs + checkm8!
+- [**287**Star][10m] [C] [samhocevar/zzuf](https://github.com/samhocevar/zzuf)
+- [**287**Star][1y] [C++] [paranoidninja/pandoras-box](https://github.com/paranoidninja/pandoras-box) custom scripts for Penetration Testing and Red Team Assessments.
+- [**287**Star][23d] [HTML] [mozillasecurity/fuzzdata](https://github.com/mozillasecurity/fuzzdata) Fuzzing resources for feeding various fuzzers with input.
+- [**287**Star][9d] [C#] [matterpreter/offensivecsharp](https://github.com/matterpreter/offensivecsharp) Collection of Offensive C# Tooling
- [**287**Star][1y] [Py] [manwhoami/mmetokendecrypt](https://github.com/manwhoami/mmetokendecrypt) Decrypts and extracts iCloud and MMe authorization tokens on Apple macOS / OS X. No user authentication needed. 🏅🌩
-- [**287**Star][2y] [Py] [kootenpv/gittyleaks](https://github.com/kootenpv/gittyleaks) Discover where your sensitive data has been leaked.
+- [**287**Star][4m] [Py] [lufeirider/cve-2019-2725](https://github.com/lufeirider/cve-2019-2725) CVE-2019-2725 命令回显
+- [**287**Star][2y] [C++] [godaddy/procfilter](https://github.com/godaddy/procfilter) A YARA-integrated process denial framework for Windows
- [**287**Star][11m] [C++] [gamozolabs/applepie](https://github.com/gamozolabs/applepie) A hypervisor for fuzzing built with WHVP and Bochs
- [**287**Star][12m] [C] [dgoulet/torsocks](https://github.com/dgoulet/torsocks) Library to torify application - NOTE: upstream has been moved to
-- [**287**Star][3y] [C++] [develbranch/tinyantivirus](https://github.com/develbranch/tinyantivirus) TinyAntivirus is an open source antivirus engine designed for detecting polymorphic virus and disinfecting it.
-- [**287**Star][1m] [Go] [decomp/decomp](https://github.com/decomp/decomp) Components of a decompilation pipeline.
-- [**287**Star][10m] [C++] [anhkgg/superdllhijack](https://github.com/anhkgg/superdllhijack) SuperDllHijack:A general DLL hijack technology, don't need to manually export the same function interface of the DLL, so easy! 一种通用Dll劫持技术,不再需要手工导出Dll的函数接口了
+- [**287**Star][6m] [Shell] [0ki/mikrotik-tools](https://github.com/0ki/mikrotik-tools) Tools for Mikrotik devices - universal jailbreak tool
- [**286**Star][1y] [C] [str8outtaheap/heapwn](https://github.com/str8outtaheap/heapwn) Linux Heap Exploitation Practice
+- [**286**Star][21d] [Go] [zmap/zgrab2](https://github.com/zmap/zgrab2) Go Application Layer Scanner
- [**286**Star][1m] [Py] [xdavidhu/portspider](https://github.com/xdavidhu/portspider) A lightning fast multithreaded network scanner framework with modules.
- [**286**Star][1y] [Java] [webgoat/webgoat-legacy](https://github.com/webgoat/webgoat-legacy) Legacy WebGoat 6.0 - Deliberately insecure JavaEE application
-- [**286**Star][7d] [C] [troglobit/nemesis](https://github.com/troglobit/nemesis) A command-line network packet crafting and injection utility
-- [**286**Star][10m] [C] [samhocevar/zzuf](https://github.com/samhocevar/zzuf)
-- [**286**Star][4m] [Py] [lufeirider/cve-2019-2725](https://github.com/lufeirider/cve-2019-2725) CVE-2019-2725 命令回显
-- [**286**Star][3m] [JS] [kspearrin/ff-password-exporter](https://github.com/kspearrin/ff-password-exporter) Easily export your passwords from Firefox.
-- [**286**Star][2y] [C++] [godaddy/procfilter](https://github.com/godaddy/procfilter) A YARA-integrated process denial framework for Windows
+- [**286**Star][4d] [Lua] [theherogac/autoplugin](https://github.com/theherogac/autoplugin) Autoplugin for PSVITA
+- [**286**Star][7m] [C++] [mattiwatti/pplkiller](https://github.com/mattiwatti/pplkiller) Protected Processes Light Killer
+- [**286**Star][2y] [ivmachiavelli/osint_team_links](https://github.com/ivmachiavelli/osint_team_links) Links for the OSINT Team
- [**286**Star][3m] [Py] [feliam/pysymemu](https://github.com/feliam/pysymemu) An intel 64 symbolic emulator
+- [**286**Star][7m] [Py] [cesar-rodriguez/terrascan](https://github.com/cesar-rodriguez/terrascan) Collection of security and best practice test for static code analysis of terraform templates
- [**286**Star][5y] [Py] [aaronportnoy/toolbag](https://github.com/aaronportnoy/toolbag) The IDA Toolbag is a plugin providing supplemental functionality to Hex-Rays IDA Pro disassembler.
-- [**285**Star][6m] [Shell] [greenwolf/spray](https://github.com/Greenwolf/Spray) A Password Spraying tool for Active Directory Credentials by Jacob Wilkin(Greenwolf)
-- [**285**Star][1y] [Py] [klsecservices/rpivot](https://github.com/klsecservices/rpivot) socks4 reverse proxy for penetration testing
-- [**285**Star][2y] [Py] [websploit/websploit](https://github.com/websploit/websploit) websploit is an advanced MITM framework
+- [**285**Star][7m] [C] [thingpulse/esp8266-weather-station-color](https://github.com/ThingPulse/esp8266-weather-station-color) ESP8266 Weather Station in Color using ILI9341 TFT 240x320 display
+- [**285**Star][10m] [wallarm/awesome-nginx-security](https://github.com/wallarm/awesome-nginx-security)
+- [**285**Star][22d] [Shell] [petit-miner/blueberry-pi](https://github.com/petit-miner/blueberry-pi) Blueberry PI
+- [**285**Star][10m] [ntruopensourceproject/ntru-crypto](https://github.com/ntruopensourceproject/ntru-crypto) Open Source NTRU Public Key Cryptography and Reference Code
- [**285**Star][3y] [Py] [nanshihui/poccollect](https://github.com/nanshihui/poccollect) a plenty of poc based on python
-- [**285**Star][21d] [HTML] [mozillasecurity/fuzzdata](https://github.com/mozillasecurity/fuzzdata) Fuzzing resources for feeding various fuzzers with input.
- [**285**Star][5m] [JS] [mike-goodwin/owasp-threat-dragon](https://github.com/mike-goodwin/owasp-threat-dragon) An open source, online threat modelling tool from OWASP
-- [**285**Star][7d] [C#] [matterpreter/offensivecsharp](https://github.com/matterpreter/offensivecsharp) Collection of Offensive C# Tooling
- [**285**Star][3y] [Go] [longxboy/lunnel](https://github.com/longxboy/lunnel) fast reverse-proxy
- [**285**Star][4y] [C++] [kennytm/miscellaneous](https://github.com/kennytm/miscellaneous) This repository contains stuff which would be helpful for jailbroken iOS development.
+- [**285**Star][1y] [Py] [fox-it/aclpwn.py](https://github.com/fox-it/aclpwn.py) Active Directory ACL exploitation with BloodHound
- [**285**Star][2y] [evilsocket/bettercap-proxy-modules](https://github.com/evilsocket/bettercap-proxy-modules) This repository contains some bettercap transparent proxy example modules.
- [**285**Star][2y] [Py] [eik00d/cantoolz](https://github.com/eik00d/cantoolz) CANToolz - framework for black-box CAN network analysis
- [**285**Star][2y] [C] [devio/walruss](https://github.com/devio/walruss) PC-Wahl 10 Hacking Tools
- [**285**Star][1y] [Py] [code-scan/dzscan](https://github.com/code-scan/dzscan) Dzscan
- [**285**Star][2y] [Java] [cnfree/eclipse-class-decompiler](https://github.com/cnfree/eclipse-class-decompiler) Eclipse Class Decompiler integrates JD, Jad, FernFlower, CFR, Procyon seamlessly with Eclipse and allows Java developers to debug class files without source code directly
- [**285**Star][3m] [Py] [apache/incubator-spot](https://github.com/apache/incubator-spot) Mirror of Apache Spot
-- [**284**Star][8m] [C] [tangsilian/android-vuln](https://github.com/tangsilian/android-vuln) 安卓内核提权漏洞分析
-- [**284**Star][10m] [wallarm/awesome-nginx-security](https://github.com/wallarm/awesome-nginx-security)
+- [**284**Star][1m] [JS] [agoric/ses](https://github.com/agoric/ses) SES (Secure EcmaScript) is a secure runtime for running third-party code safely
+- [**284**Star][2m] [Py] [yzddmr6/webcrack](https://github.com/yzddmr6/webcrack) 网站后台弱口令/万能密码批量检测工具
- [**284**Star][3y] [C] [unix-thrust/beurk](https://github.com/unix-thrust/beurk) BEURK Experimental Unix RootKit
-- [**284**Star][5m] [C++] [rampagex/firmware-mod-kit](https://github.com/rampagex/firmware-mod-kit) Automatically exported from code.google.com/p/firmware-mod-kit
-- [**284**Star][5m] [Py] [opsdisk/pagodo](https://github.com/opsdisk/pagodo) pagodo (Passive Google Dork) - Automate Google Hacking Database scraping
-- [**284**Star][7m] [JS] [ma3k4h3d/papers](https://github.com/ma3k4h3d/papers) Some papers about cyber security
+- [**284**Star][9d] [Py] [target/strelka](https://github.com/target/strelka) Real-time, container-based file scanning at enterprise scale
+- [**284**Star][12m] [Py] [mrash/afl-cov](https://github.com/mrash/afl-cov) Produce code coverage results with gcov from afl-fuzz test cases
+- [**284**Star][1m] [Py] [lorexxar/cobra-w](https://github.com/lorexxar/cobra-w) Cobra-W -> Cobra-White 白盒源代码审计工具-白帽子版
- [**284**Star][2y] [Swift] [krausefx/watch.user](https://github.com/krausefx/watch.user) Every iOS app you ever gave permission to use your camera can record you any time it runs - without notice
+- [**284**Star][12m] [Py] [justicerage/ffm](https://github.com/justicerage/ffm) Freedom Fighting Mode: open source hacking harness
+- [**284**Star][2y] [Shell] [jobertabma/recon.sh](https://github.com/jobertabma/recon.sh) A toolset to track and organize output of reconnaissance tools
- [**284**Star][1y] [Shell] [ha71/namechk](https://github.com/ha71/namechk) Osint tool based on namechk.com for checking usernames on more than 100 websites, forums and social networks.
- [**284**Star][4y] [C] [firnsy/barnyard2](https://github.com/firnsy/barnyard2) Barnyard2 is a dedicated spooler for Snort's unified2 binary output format.
-- [**284**Star][6m] [Shell] [0ki/mikrotik-tools](https://github.com/0ki/mikrotik-tools) Tools for Mikrotik devices - universal jailbreak tool
-- [**283**Star][8d] [ugvf2009/miles](https://github.com/ugvf2009/miles) 二爷翻墙,专注翻墙30年,但没有掌握核心科技^_^
-- [**283**Star][7m] [C] [thingpulse/esp8266-weather-station-color](https://github.com/ThingPulse/esp8266-weather-station-color) ESP8266 Weather Station in Color using ILI9341 TFT 240x320 display
-- [**283**Star][9d] [Lua] [theherogac/autoplugin](https://github.com/theherogac/autoplugin) Autoplugin for PSVITA
-- [**283**Star][7d] [Py] [target/strelka](https://github.com/target/strelka) Real-time, container-based file scanning at enterprise scale
+- [**284**Star][5d] [Go] [cruise-automation/fwanalyzer](https://github.com/cruise-automation/fwanalyzer) a tool to analyze filesystem images for security
+- [**284**Star][6m] [Go] [anshumanbh/tko-subs](https://github.com/anshumanbh/tko-subs) A tool that can help detect and takeover subdomains with dead DNS records
+- [**284**Star][6m] [Py] [airbus-seclab/cpu_rec](https://github.com/airbus-seclab/cpu_rec) Recognize cpu instructions in an arbitrary binary file
+- [**283**Star][3m] [C++] [yuanyuanxiang/simpleremoter](https://github.com/yuanyuanxiang/simpleremoter) 基于gh0st的远程控制器:实现了终端管理、进程管理、窗口管理、远程桌面、文件管理、语音管理、视频管理、服务管理、注册表管理等功能,优化全部代码及整理排版,修复内存泄漏缺陷,程序运行稳定。此项目初版见:
+- [**283**Star][9d] [C] [tomb5/tomb5](https://github.com/tomb5/tomb5) Chronicles Disassembly translated to C source code.
+- [**283**Star][4m] [tanprathan/owasp-testing-checklist](https://github.com/tanprathan/owasp-testing-checklist) OWASP based Web Application Security Testing Checklist is an Excel based checklist which helps you to track the status of completed and pending test cases.
+- [**283**Star][5m] [Go] [suyashkumar/ssl-proxy](https://github.com/suyashkumar/ssl-proxy)
+- [**283**Star][1y] [Rust] [superandroidanalyzer/super](https://github.com/superandroidanalyzer/super) Secure, Unified, Powerful and Extensible Rust Android Analyzer
- [**283**Star][2y] [Java] [simbiose/encryption](https://github.com/simbiose/encryption) Encryption is a simple way to encrypt and decrypt strings on Android and Java project.
-- [**283**Star][3m] [Py] [shenril/sitadel](https://github.com/shenril/sitadel) Web Application Security Scanner
-- [**283**Star][12m] [Py] [mrash/afl-cov](https://github.com/mrash/afl-cov) Produce code coverage results with gcov from afl-fuzz test cases
-- [**283**Star][7m] [C++] [mattiwatti/pplkiller](https://github.com/mattiwatti/pplkiller) Protected Processes Light Killer
+- [**283**Star][4m] [Py] [shenril/sitadel](https://github.com/shenril/sitadel) Web Application Security Scanner
+- [**283**Star][7d] [Py] [punch-cyber/stoq](https://github.com/punch-cyber/stoq) simplify the mundane and repetitive tasks an analyst is required to do
+- [**283**Star][1y] [Py] [mazen160/struts-pwn_cve-2018-11776](https://github.com/mazen160/struts-pwn_cve-2018-11776) An exploit for Apache Struts CVE-2018-11776
+- [**283**Star][3y] [C] [matt-wu/aes](https://github.com/matt-wu/aes) Understanding AES & Rijndael
- [**283**Star][7m] [Java] [katjahahn/portex](https://github.com/katjahahn/portex) Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness
-- [**283**Star][12m] [Py] [justicerage/ffm](https://github.com/justicerage/ffm) Freedom Fighting Mode: open source hacking harness
+- [**283**Star][9m] [C] [jiaoxianjun/btle](https://github.com/jiaoxianjun/btle) Bluetooth Low Energy (BLE) packet sniffer and generator for both standard and non standard (raw bit).
- [**283**Star][2y] [C++] [google/syzygy](https://github.com/google/syzygy) a suite of tools for the instrumentation of COFF object files and PE binaries
- [**283**Star][1y] [Java] [elkokc/reflector](https://github.com/elkokc/reflector) Burp plugin able to find reflected XSS on page in real-time while browsing on site
-- [**283**Star][7m] [Py] [cesar-rodriguez/terrascan](https://github.com/cesar-rodriguez/terrascan) Collection of security and best practice test for static code analysis of terraform templates
+- [**283**Star][3y] [HTML] [buddhalabs/packetstorm-exploits](https://github.com/buddhalabs/packetstorm-exploits) Collection of publicly available exploits from Packetstorm
+- [**282**Star][3y] [Go] [geohot/lolrecaptcha](https://github.com/geohot/lolrecaptcha) We try to break the recaptcha for the Merry Christmas for all!
- [**282**Star][2y] [Py] [0xislamtaha/python-rootkit](https://github.com/0xIslamTaha/Python-Rootkit) Python Remote Administration Tool (RAT) to gain meterpreter session
+- [**282**Star][9m] [C#] [nsacyber/windows-event-log-messages](https://github.com/nsacyber/Windows-Event-Log-Messages) Retrieves the definitions of Windows Event Log messages embedded in Windows binaries and provides them in discoverable formats. #nsacyber
- [**282**Star][1y] [HTML] [googleprojectzero/p0tools](https://github.com/googleprojectzero/p0tools) Project Zero Docs and Tools
-- [**282**Star][8d] [C++] [tevador/randomx](https://github.com/tevador/randomx) Proof of work algorithm based on random code execution
-- [**282**Star][7m] [Py] [ropnop/windapsearch](https://github.com/ropnop/windapsearch) Python script to enumerate users, groups and computers from a Windows domain through LDAP queries
-- [**282**Star][2y] [Shell] [jobertabma/recon.sh](https://github.com/jobertabma/recon.sh) A toolset to track and organize output of reconnaissance tools
-- [**282**Star][2y] [ivmachiavelli/osint_team_links](https://github.com/ivmachiavelli/osint_team_links) Links for the OSINT Team
+- [**282**Star][3d] [Py] [qiskit/qiskit-aqua](https://github.com/Qiskit/qiskit-aqua) Aqua provides a library and tools to build applications for noisy quantum computers.
+- [**282**Star][3m] [Py] [thekingofduck/easyxsspayload](https://github.com/thekingofduck/easyxsspayload) XssPayload List . Usage:
+- [**282**Star][2y] [Py] [ssooking/ctfdefense](https://github.com/ssooking/ctfdefense) Some tools for CTF off line
+- [**282**Star][5m] [Perl] [shirkdog/pulledpork](https://github.com/shirkdog/pulledpork) Pulled Pork for Snort and Suricata rule management (from Google code)
+- [**282**Star][8m] [Py] [phage-nz/ph0neutria](https://github.com/phage-nz/ph0neutria) ph0neutria is a malware zoo builder that sources samples straight from the wild. Everything is stored in Viper for ease of access and manageability.
+- [**282**Star][5d] [PS] [nullbind/powershellery](https://github.com/nullbind/powershellery) This repo contains Powershell scripts used for general hackery.
+- [**282**Star][3y] [C] [leaflabs/libmaple](https://github.com/leaflabs/libmaple) [INACTIVE] C and C++ library for STM32 ARM Cortex-M3 development boards.
+- [**282**Star][3m] [Py] [joxeankoret/pyew](https://github.com/joxeankoret/pyew) Official repository for Pyew.
+- [**282**Star][2m] [Java] [exalab/anlinux-app](https://github.com/exalab/anlinux-app) AnLinux allow you to run Linux on Android without root access.
+- [**282**Star][22d] [drduh/debian-privacy-server-guide](https://github.com/drduh/debian-privacy-server-guide) Guide to using a remote Debian server for security and privacy services
- [**282**Star][1y] [Ruby] [danmcinerney/pentest-machine](https://github.com/danmcinerney/pentest-machine) Automates some pentest jobs via nmap xml file
-- [**282**Star][13d] [Go] [cruise-automation/fwanalyzer](https://github.com/cruise-automation/fwanalyzer) a tool to analyze filesystem images
- [**282**Star][1y] [JS] [chrisallenlane/novahot](https://github.com/chrisallenlane/novahot) A webshell framework for penetration testers.
-- [**281**Star][1m] [JS] [agoric/ses](https://github.com/agoric/ses) SES (Secure EcmaScript) is a secure runtime for running third-party code safely
-- [**281**Star][9m] [C#] [nsacyber/windows-event-log-messages](https://github.com/nsacyber/Windows-Event-Log-Messages) Retrieves the definitions of Windows Event Log messages embedded in Windows binaries and provides them in discoverable formats. #nsacyber
-- [**281**Star][3m] [C++] [yuanyuanxiang/simpleremoter](https://github.com/yuanyuanxiang/simpleremoter) 基于gh0st的远程控制器:实现了终端管理、进程管理、窗口管理、远程桌面、文件管理、语音管理、视频管理、服务管理、注册表管理等功能,优化全部代码及整理排版,修复内存泄漏缺陷,程序运行稳定。此项目初版见:
-- [**281**Star][7d] [C] [tomb5/tomb5](https://github.com/tomb5/tomb5) Chronicles Disassembly translated to C source code.
-- [**281**Star][5m] [Go] [suyashkumar/ssl-proxy](https://github.com/suyashkumar/ssl-proxy)
-- [**281**Star][1y] [Rust] [superandroidanalyzer/super](https://github.com/superandroidanalyzer/super) Secure, Unified, Powerful and Extensible Rust Android Analyzer
-- [**281**Star][8m] [Py] [phage-nz/ph0neutria](https://github.com/phage-nz/ph0neutria) ph0neutria is a malware zoo builder that sources samples straight from the wild. Everything is stored in Viper for ease of access and manageability.
-- [**281**Star][20d] [Shell] [petit-miner/blueberry-pi](https://github.com/petit-miner/blueberry-pi) Blueberry PI
+- [**282**Star][2y] [Py] [bit4woo/passmaker](https://github.com/bit4woo/passmaker) 可以自定义规则的密码字典生成器,支持图形界面 A password-generator that base on the rules that you specified
+- [**282**Star][2m] [C] [ayeks/sgx-hardware](https://github.com/ayeks/sgx-hardware) This is a list of hardware which is supports Intel SGX - Software Guard Extensions.
+- [**281**Star][3y] [C++] [googleprojectzero/symboliclink-testing-tools](https://github.com/googleprojectzero/symboliclink-testing-tools) a small suite of tools to test various symbolic link types of Windows
+- [**281**Star][1y] [CSS] [w-digital-scanner/w11scan](https://github.com/w-digital-scanner/w11scan) 分布式WEB指纹识别平台 Distributed WEB fingerprint identification platform
+- [**281**Star][9y] [Py] [ptoomey3/evilarc](https://github.com/ptoomey3/evilarc) Create tar/zip archives that can exploit directory traversal vulnerabilities
- [**281**Star][1y] [Py] [novicelive/bintut](https://github.com/novicelive/bintut) Teach you a binary exploitation for great good.
-- [**281**Star][1y] [Py] [mazen160/struts-pwn_cve-2018-11776](https://github.com/mazen160/struts-pwn_cve-2018-11776) An exploit for Apache Struts CVE-2018-11776
-- [**281**Star][3y] [C] [matt-wu/aes](https://github.com/matt-wu/aes) Understanding AES & Rijndael
+- [**281**Star][3m] [PHP] [nico3333fr/csp-useful](https://github.com/nico3333fr/csp-useful) Collection of scripts, thoughts about CSP (Content Security Policy)
+- [**281**Star][4y] [Py] [monnappa22/limon](https://github.com/monnappa22/limon) Limon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators of Linux malware. It allows one to inspect Linux malware before execution, during execution, and after execution (post-mortem analysis) by performing static, dynamic and memory analysis using open s…
+- [**281**Star][8m] [Py] [micropyramid/forex-python](https://github.com/micropyramid/forex-python) Foreign exchange rates, Bitcoin price index and currency conversion using ratesapi.io
- [**281**Star][4y] [Py] [mandatoryprogrammer/xssless](https://github.com/mandatoryprogrammer/xssless) An automated XSS payload generator written in python.
-- [**281**Star][3y] [C] [leaflabs/libmaple](https://github.com/leaflabs/libmaple) [INACTIVE] C and C++ library for STM32 ARM Cortex-M3 development boards.
-- [**281**Star][3m] [Py] [joxeankoret/pyew](https://github.com/joxeankoret/pyew) Official repository for Pyew.
-- [**281**Star][1y] [Py] [fox-it/aclpwn.py](https://github.com/fox-it/aclpwn.py) Active Directory ACL exploitation with BloodHound
-- [**281**Star][20d] [drduh/debian-privacy-server-guide](https://github.com/drduh/debian-privacy-server-guide) Guide to using a remote Debian server for security and privacy services
-- [**281**Star][2m] [C] [ayeks/sgx-hardware](https://github.com/ayeks/sgx-hardware) This is a list of hardware which is supports Intel SGX - Software Guard Extensions.
-- [**280**Star][1m] [Py] [lucifer1993/tpscan](https://github.com/lucifer1993/tpscan) 一键ThinkPHP漏洞检测
-- [**280**Star][25d] [Shell] [trimstray/mkchain](https://github.com/trimstray/mkchain) Open source tool to help you build a valid SSL certificate chain.
-- [**280**Star][4m] [tanprathan/owasp-testing-checklist](https://github.com/tanprathan/owasp-testing-checklist) OWASP based Web Application Security Testing Checklist is an Excel based checklist which helps you to track the status of completed and pending test cases.
-- [**280**Star][4m] [Perl] [shirkdog/pulledpork](https://github.com/shirkdog/pulledpork) Pulled Pork for Snort and Suricata rule management (from Google code)
+- [**281**Star][10m] [maaaaz/impacket-examples-windows](https://github.com/maaaaz/impacket-examples-windows) The great impacket example scripts compiled for Windows
+- [**281**Star][1m] [Py] [cwerling/psptool](https://github.com/cwerling/psptool) Display, extract, and manipulate PSP firmware inside UEFI images
+- [**281**Star][9m] [Py] [chenjiandongx/async-proxy-pool](https://github.com/chenjiandongx/async-proxy-pool)
+- [**281**Star][6m] [Shell] [chaifeng/ufw-docker](https://github.com/chaifeng/ufw-docker) To fix the Docker and UFW security flaw without disabling iptables
+- [**281**Star][1m] [C] [aflsmart/aflsmart](https://github.com/aflsmart/aflsmart) Smart Greybox Fuzzing (
+- [**280**Star][2y] [Go] [unixpickle/kahoot-hack](https://github.com/unixpickle/kahoot-hack) Reverse engineering kahoot.it
+- [**280**Star][1m] [Py] [0xinfection/xsrfprobe](https://github.com/0xInfection/XSRFProbe) The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
+- [**280**Star][27d] [Shell] [trimstray/mkchain](https://github.com/trimstray/mkchain) Open source tool to help you build a valid SSL certificate chain.
+- [**280**Star][2y] [Py] [xoreaxeaxeax/reductio](https://github.com/xoreaxeaxeax/reductio) An exploration of code homeomorphism
+- [**280**Star][8d] [Py] [tomato42/tlsfuzzer](https://github.com/tomato42/tlsfuzzer) SSL and TLS protocol test suite and fuzzer
- [**280**Star][2y] [C++] [sam-b/windows_kernel_address_leaks](https://github.com/sam-b/windows_kernel_address_leaks) Examples of leaking Kernel Mode information from User Mode on Windows
-- [**280**Star][21d] [Py] [punch-cyber/stoq](https://github.com/punch-cyber/stoq) simplify the mundane and repetitive tasks an analyst is required to do
-- [**280**Star][9y] [Py] [ptoomey3/evilarc](https://github.com/ptoomey3/evilarc) Create tar/zip archives that can exploit directory traversal vulnerabilities
-- [**280**Star][20d] [PowerShell] [nullbind/powershellery](https://github.com/nullbind/powershellery) This repo contains Powershell scripts used for general hackery.
+- [**280**Star][3m] [Py] [hacktoolspack/hack-tools](https://github.com/hacktoolspack/hack-tools) hack tools
- [**280**Star][4y] [Py] [fuzzing/mffa](https://github.com/fuzzing/mffa) Media Fuzzing Framework for Android
-- [**280**Star][24d] [Py] [facebook/fbkutils](https://github.com/facebook/fbkutils) A variety of utilities built and maintained by Facebook's Linux Kernel Team that we wish to share with the community.
-- [**280**Star][9m] [Py] [chenjiandongx/async-proxy-pool](https://github.com/chenjiandongx/async-proxy-pool)
-- [**279**Star][2y] [Go] [unixpickle/kahoot-hack](https://github.com/unixpickle/kahoot-hack) Reverse engineering kahoot.it
-- [**279**Star][2y] [Py] [xoreaxeaxeax/reductio](https://github.com/xoreaxeaxeax/reductio) An exploration of code homeomorphism
-- [**279**Star][1y] [CSS] [w-digital-scanner/w11scan](https://github.com/w-digital-scanner/w11scan) 分布式WEB指纹识别平台 Distributed WEB fingerprint identification platform
-- [**279**Star][7d] [Py] [tomato42/tlsfuzzer](https://github.com/tomato42/tlsfuzzer) SSL and TLS protocol test suite and fuzzer
-- [**279**Star][3m] [Py] [thekingofduck/easyxsspayload](https://github.com/thekingofduck/easyxsspayload) XssPayload List . Usage:
+- [**280**Star][27d] [Py] [fireeye/flare-emu](https://github.com/fireeye/flare-emu) marries a supported binary analysis framework, such as IDA Pro or Radare2, with Unicorn’s emulation framework to provide the user with an easy to use and flexible interface for scripting emulation tasks
+- [**280**Star][26d] [Py] [facebook/fbkutils](https://github.com/facebook/fbkutils) A variety of utilities built and maintained by Facebook's Linux Kernel Team that we wish to share with the community.
+- [**280**Star][12d] [Py] [ekultek/whatbreach](https://github.com/ekultek/whatbreach) OSINT tool to find breached emails, databases, pastes, and relevant information
+- [**280**Star][1m] [C++] [changeofpace/viviennevmm](https://github.com/changeofpace/viviennevmm) VivienneVMM is a stealthy debugging framework implemented via an Intel VT-x hypervisor.
+- [**280**Star][3y] [C] [andreafabrizi/prism](https://github.com/andreafabrizi/prism) PRISM is an user space stealth reverse shell backdoor, written in pure C.
+- [**280**Star][7m] [aleenzz/mssql_sql_bypass_wiki](https://github.com/aleenzz/mssql_sql_bypass_wiki) MSSQL注入提权,bypass的一些总结
+- [**280**Star][1m] [Py] [0xinfection/xsrfprobe](https://github.com/0xinfection/xsrfprobe) The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
+- [**280**Star][2m] [C] [0xdea/exploits](https://github.com/0xdea/exploits) A handy collection of my public exploits, all in one place.
+- [**279**Star][2m] [Py] [bennington-distributed-systems-2017/darkdarkgo](https://github.com/bennington-distributed-systems-2017/darkdarkgo) Modeled Google and Bing to build a distributed search engine for the dark web
+- [**279**Star][1y] [Py] [rassec/pentester-fully-automatic-scanner](https://github.com/rassec/pentester-fully-automatic-scanner) DNS Subdomain● Brute force ● Web Spider ● Nmap Scan ● etc
+- [**279**Star][1y] [Py] [rassec/pentester-fully-automatic-scanner](https://github.com/RASSec/pentestER-Fully-automatic-scanner) DNS Subdomain● Brute force ● Web Spider ● Nmap Scan ● etc
+- [**279**Star][3d] [Shell] [wuseman/emagnet](https://github.com/wuseman/emagnet) Emagnet is a tool for find leaked databases with 97.1% accurate to grab mail + password together from pastebin leaks. Support for brute forcing spotify accounts, instagram accounts, ssh servers, microsoft rdp clients and gmail accounts
- [**279**Star][2y] [C++] [rovo89/android_art](https://github.com/rovo89/android_art) Android ART with modifications for the Xposed framework.
- [**279**Star][6m] [Py] [ridter/exchange2domain](https://github.com/ridter/exchange2domain) CVE-2018-8581
+- [**279**Star][3y] [Py] [pmsosa/duckhunt](https://github.com/pmsosa/duckhunt) Prevent RubberDucky (or other keystroke injection) attacks
- [**279**Star][2m] [Py] [pbiernat/ripr](https://github.com/pbiernat/ripr) Package Binary Code as a Python class using Binary Ninja and Unicorn Engine
-- [**279**Star][4y] [Py] [monnappa22/limon](https://github.com/monnappa22/limon) Limon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators of Linux malware. It allows one to inspect Linux malware before execution, during execution, and after execution (post-mortem analysis) by performing static, dynamic and memory analysis using open s…
+- [**279**Star][8m] [Py] [nightbringer21/fridump](https://github.com/nightbringer21/fridump) A universal memory dumper using Frida
+- [**279**Star][6m] [Py] [mthbernardes/rsg](https://github.com/mthbernardes/rsg) generate various ways to do a reverse shell
- [**279**Star][5y] [ApacheConf] [micahflee/fixubuntu](https://github.com/micahflee/fixubuntu) This is the code that powers https://fixubuntu.com/.
-- [**279**Star][9m] [C] [jiaoxianjun/btle](https://github.com/jiaoxianjun/btle) Bluetooth Low Energy (BLE) packet sniffer and generator for both standard and non standard (raw bit).
-- [**279**Star][2m] [Py] [hacktoolspack/hack-tools](https://github.com/hacktoolspack/hack-tools) hack tools
+- [**279**Star][3y] [Py] [maldevel/ipgeolocation](https://github.com/maldevel/ipgeolocation) Retrieve IP Geolocation information
+- [**279**Star][5y] [JS] [fix-macosx/fix-macosx](https://github.com/fix-macosx/fix-macosx) This is the code that powers https://fix-macosx.com/.
+- [**279**Star][3y] [C] [firefart/dirtycow](https://github.com/firefart/dirtycow)
- [**279**Star][2m] [C#] [fireeye/silketw](https://github.com/fireeye/silketw) flexible C# wrappers for ETW
- [**279**Star][1y] [C++] [fireeye/flare-wmi](https://github.com/fireeye/flare-wmi) various documentation and code projects that describe the Windows Management Instrumentation (WMI) technology
-- [**279**Star][25d] [Py] [fireeye/flare-emu](https://github.com/fireeye/flare-emu) marries a supported binary analysis framework, such as IDA Pro or Radare2, with Unicorn’s emulation framework to provide the user with an easy to use and flexible interface for scripting emulation tasks
-- [**279**Star][1m] [Py] [cwerling/psptool](https://github.com/cwerling/psptool) Display, extract, and manipulate PSP firmware inside UEFI images
-- [**279**Star][1m] [C++] [changeofpace/viviennevmm](https://github.com/changeofpace/viviennevmm) VivienneVMM is a stealthy debugging framework implemented via an Intel VT-x hypervisor.
-- [**279**Star][3y] [HTML] [buddhalabs/packetstorm-exploits](https://github.com/buddhalabs/packetstorm-exploits) Collection of publicly available exploits from Packetstorm
-- [**279**Star][3y] [C] [andreafabrizi/prism](https://github.com/andreafabrizi/prism) PRISM is an user space stealth reverse shell backdoor, written in pure C.
-- [**279**Star][6m] [Py] [airbus-seclab/cpu_rec](https://github.com/airbus-seclab/cpu_rec) Recognize cpu instructions in an arbitrary binary file
-- [**278**Star][3d] [JS] [0vercl0k/cve-2019-11708](https://github.com/0vercl0k/cve-2019-11708) Full exploit chain (CVE-2019-11708 & CVE-2019-9810) against Firefox on Windows 64-bit.
-- [**278**Star][1y] [Py] [rassec/pentester-fully-automatic-scanner](https://github.com/rassec/pentester-fully-automatic-scanner) DNS Subdomain● Brute force ● Web Spider ● Nmap Scan ● etc
-- [**278**Star][1m] [Py] [0xinfection/xsrfprobe](https://github.com/0xInfection/XSRFProbe) The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
-- [**278**Star][7d] [PowerShell] [microsoftdocs/windows-driver-docs](https://github.com/MicrosoftDocs/windows-driver-docs) The official Windows Driver Kit documentation sources
-- [**278**Star][1y] [Py] [rassec/pentester-fully-automatic-scanner](https://github.com/RASSec/pentestER-Fully-automatic-scanner) DNS Subdomain● Brute force ● Web Spider ● Nmap Scan ● etc
-- [**278**Star][9d] [Py] [qiskit/qiskit-aqua](https://github.com/Qiskit/qiskit-aqua) Aqua provides a library and tools to build applications for noisy quantum computers.
-- [**278**Star][2y] [Py] [ssooking/ctfdefense](https://github.com/ssooking/ctfdefense) Some tools for CTF off line
-- [**278**Star][8m] [Py] [nightbringer21/fridump](https://github.com/nightbringer21/fridump) A universal memory dumper using Frida
-- [**278**Star][3m] [PHP] [nico3333fr/csp-useful](https://github.com/nico3333fr/csp-useful) Collection of scripts, thoughts about CSP (Content Security Policy)
-- [**278**Star][6m] [Py] [mthbernardes/rsg](https://github.com/mthbernardes/rsg) generate various ways to do a reverse shell
-- [**278**Star][5y] [JS] [fix-macosx/fix-macosx](https://github.com/fix-macosx/fix-macosx) This is the code that powers https://fix-macosx.com/.
-- [**278**Star][2m] [Java] [exalab/anlinux-app](https://github.com/exalab/anlinux-app) AnLinux allow you to run Linux on Android without root access.
+- [**279**Star][23d] [C] [droberson/ssh-honeypot](https://github.com/droberson/ssh-honeypot) Fake sshd that logs ip addresses, usernames, and passwords.
+- [**279**Star][2m] [Java] [appium/sign](https://github.com/appium/sign) Sign.jar automatically signs an apk with the Android test certificate.
+- [**279**Star][1y] [C] [abeluck/stegdetect](https://github.com/abeluck/stegdetect) UNMAINTAINED. USE AT OWN RISK. Stegdetect is an automated tool for detecting steganographic content in images.
+- [**279**Star][2d] [a2u/free-proxy-list](https://github.com/a2u/free-proxy-list)
+- [**278**Star][2d] [PS] [microsoftdocs/windows-driver-docs](https://github.com/MicrosoftDocs/windows-driver-docs) The official Windows Driver Kit documentation sources
+- [**278**Star][1y] [Py] [fsecurelabs/wepwnise](https://github.com/FSecureLABS/wePWNise) WePWNise generates architecture independent VBA code to be used in Office documents or templates and automates bypassing application control and exploit mitigation software.
+- [**278**Star][3y] [JS] [wuchangming/https-mitm-proxy-handbook](https://github.com/wuchangming/https-mitm-proxy-handbook) 基于Node.js的HTTPS MITM(中间人)代理的原理和实现
+- [**278**Star][11d] [Java] [optimatika/ojalgo](https://github.com/optimatika/ojalgo) Java code that has to do with mathematics, linear algebra and optimisation.
+- [**278**Star][2m] [Py] [mcw0/poc](https://github.com/mcw0/poc) Issues has been disabled for these PoC's, as they are simply PoC, Public Domain and unsupported.
+- [**278**Star][2y] [Py] [iniqua/plecost](https://github.com/iniqua/plecost) Wordpress finger printer Tool
+- [**278**Star][18d] [Py] [hnfull/intensio-obfuscator](https://github.com/hnfull/intensio-obfuscator) Obfuscate a python code 2.x and 3.x
+- [**278**Star][15d] [Py] [franccesco/getaltname](https://github.com/franccesco/getaltname) Extract subdomains from SSL certificates in HTTPS sites.
- [**278**Star][2y] [JS] [dpnishant/raptor](https://github.com/dpnishant/raptor) Web-based Source Code Vulnerability Scanner
-- [**278**Star][10d] [C++] [crosire/d3d8to9](https://github.com/crosire/d3d8to9) A D3D8 pseudo-driver which converts API calls and bytecode shaders to equivalent D3D9 ones.
-- [**278**Star][6m] [Shell] [chaifeng/ufw-docker](https://github.com/chaifeng/ufw-docker) To fix the Docker and UFW security flaw without disabling iptables
-- [**278**Star][2y] [Py] [bit4woo/passmaker](https://github.com/bit4woo/passmaker) 可以自定义规则的密码字典生成器,支持图形界面 A password-generator that base on the rules that you specified
-- [**278**Star][1y] [C] [abeluck/stegdetect](https://github.com/abeluck/stegdetect) UNMAINTAINED. USE AT OWN RISK. Stegdetect is an automated tool for detecting steganographic content in images.
-- [**278**Star][7d] [a2u/free-proxy-list](https://github.com/a2u/free-proxy-list)
-- [**278**Star][1m] [Py] [0xinfection/xsrfprobe](https://github.com/0xinfection/xsrfprobe) The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
-- [**278**Star][2m] [C] [0xdea/exploits](https://github.com/0xdea/exploits) A handy collection of my public exploits, all in one place.
-- [**277**Star][1y] [Py] [fsecurelabs/wepwnise](https://github.com/FSecureLABS/wePWNise) WePWNise generates architecture independent VBA code to be used in Office documents or templates and automates bypassing application control and exploit mitigation software.
-- [**277**Star][3y] [C++] [googleprojectzero/symboliclink-testing-tools](https://github.com/googleprojectzero/symboliclink-testing-tools) a small suite of tools to test various symbolic link types of Windows
+- [**278**Star][12d] [C++] [crosire/d3d8to9](https://github.com/crosire/d3d8to9) A D3D8 pseudo-driver which converts API calls and bytecode shaders to equivalent D3D9 ones.
+- [**278**Star][10d] [HTML] [bl4de/ctf](https://github.com/bl4de/ctf) CTF (Capture The Flag) writeups, code snippets, notes, scripts
- [**277**Star][3m] [Java] [ztosec/secscan-authcheck](https://github.com/ztosec/secscan-authcheck) 越权检测工具
- [**277**Star][12m] [Py] [wyatu/cve-2018-8581](https://github.com/wyatu/cve-2018-8581) CVE-2018-8581 | Microsoft Exchange Server Elevation of Privilege Vulnerability
-- [**277**Star][29d] [Py] [sneakerhax/runbooks](https://github.com/sneakerhax/runbooks) Command references, posts, and resources for different topics
+- [**277**Star][2y] [Assembly] [tinysec/windows-syscall-table](https://github.com/tinysec/windows-syscall-table) windows syscall table from xp ~ 10 rs4
+- [**277**Star][1m] [Py] [sneakerhax/runbooks](https://github.com/sneakerhax/runbooks) Command references, posts, and resources for different topics
- [**277**Star][7m] [C] [rieck/malheur](https://github.com/rieck/malheur) A Tool for Automatic Analysis of Malware Behavior
- [**277**Star][6m] [Perl] [rezasp/vbscan](https://github.com/rezasp/vbscan) OWASP VBScan is a Black Box vBulletin Vulnerability Scanner
-- [**277**Star][3y] [Py] [pmsosa/duckhunt](https://github.com/pmsosa/duckhunt) Prevent RubberDucky (or other keystroke injection) attacks
-- [**277**Star][2m] [Py] [mcw0/poc](https://github.com/mcw0/poc) Issues has been disabled for these PoC's, as they are simply PoC, Public Domain and unsupported.
-- [**277**Star][3y] [Py] [maldevel/ipgeolocation](https://github.com/maldevel/ipgeolocation) Retrieve IP Geolocation information
+- [**277**Star][15d] [C] [o-gs/dji-firmware-tools](https://github.com/o-gs/dji-firmware-tools) Tools for handling firmwares of DJI products, with focus on quadcopters.
- [**277**Star][2m] [C] [lfittl/libpg_query](https://github.com/lfittl/libpg_query) C library for accessing the PostgreSQL parser outside of the server environment
-- [**277**Star][2y] [Py] [iniqua/plecost](https://github.com/iniqua/plecost) Wordpress finger printer Tool
-- [**277**Star][10d] [Py] [ekultek/whatbreach](https://github.com/ekultek/whatbreach) OSINT tool to find breached emails, databases, pastes, and relevant information
-- [**277**Star][21d] [C] [droberson/ssh-honeypot](https://github.com/droberson/ssh-honeypot) Fake sshd that logs ip addresses, usernames, and passwords.
-- [**277**Star][12d] [disclose/disclose](https://github.com/disclose/disclose) Driving safety, simplicity, and standardization in vulnerability disclosure.
-- [**277**Star][8d] [HTML] [bl4de/ctf](https://github.com/bl4de/ctf) CTF (Capture The Flag) writeups, code snippets, notes, scripts
-- [**277**Star][1m] [C] [aflsmart/aflsmart](https://github.com/aflsmart/aflsmart) Smart Greybox Fuzzing (
-- [**276**Star][19d] [Go] [zmap/zgrab2](https://github.com/zmap/zgrab2) Go Application Layer Scanner
-- [**276**Star][2y] [Assembly] [tinysec/windows-syscall-table](https://github.com/tinysec/windows-syscall-table) windows syscall table from xp ~ 10 rs4
+- [**277**Star][12m] [C++] [jmmartinez/easy-just-in-time](https://github.com/jmmartinez/easy-just-in-time) LLVM Optimization to extract a function, embedded in its intermediate representation in the binary, and execute it using the LLVM Just-In-Time compiler.
+- [**277**Star][15d] [Py] [hugsy/defcon_27_windbg_workshop](https://github.com/hugsy/defcon_27_windbg_workshop) DEFCON 27 workshop - Modern Debugging with WinDbg Preview
+- [**277**Star][14d] [disclose/disclose](https://github.com/disclose/disclose) Driving safety, simplicity, and standardization in vulnerability disclosure.
+- [**277**Star][20d] [Java] [c0ny1/fastjsonexploit](https://github.com/c0ny1/fastjsonexploit) Fastjson vulnerability quickly exploits the framework(fastjson漏洞快速利用框架)
+- [**276**Star][11d] [C] [jedisct1/pure-ftpd](https://github.com/jedisct1/pure-ftpd) Pure FTP server
+- [**276**Star][1m] [C] [grapheneos/hardened_malloc](https://github.com/GrapheneOS/hardened_malloc) Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability / integration over time.
+- [**276**Star][5y] [C++] [tsiv/ccminer-cryptonight](https://github.com/tsiv/ccminer-cryptonight)
- [**276**Star][2y] [C] [taviso/rbndr](https://github.com/taviso/rbndr) Simple DNS Rebinding Service
-- [**276**Star][9d] [Java] [optimatika/ojalgo](https://github.com/optimatika/ojalgo) Java code that has to do with mathematics, linear algebra and optimisation.
-- [**276**Star][8m] [Py] [micropyramid/forex-python](https://github.com/micropyramid/forex-python) Foreign exchange rates, Bitcoin price index and currency conversion using ratesapi.io
-- [**276**Star][1m] [Py] [lorexxar/cobra-w](https://github.com/lorexxar/cobra-w) Cobra-W -> Cobra-White 白盒源代码审计工具-白帽子版
-- [**276**Star][9d] [Py] [liuchangfreeman/c--compiler](https://github.com/liuchangfreeman/c--compiler) C--compiler which implements LL(1)\LR(0)\SLR\LR(1) and semantic analysis and MIPS generate
-- [**276**Star][12m] [C++] [jmmartinez/easy-just-in-time](https://github.com/jmmartinez/easy-just-in-time) LLVM Optimization to extract a function, embedded in its intermediate representation in the binary, and execute it using the LLVM Just-In-Time compiler.
-- [**276**Star][4y] [XSLT] [ironbee/ironbee](https://github.com/ironbee/ironbee) Universal web application security sensor intended for real-time monitoring and defense.
-- [**276**Star][12m] [Py] [hongrisec/ctf-training](https://github.com/hongrisec/ctf-training) 收集各大比赛的题目和Writeup
-- [**276**Star][5m] [geerlingguy/ansible-role-security](https://github.com/geerlingguy/ansible-role-security) Ansible Role - Security
-- [**276**Star][3m] [Shell] [cryptolok/aslray](https://github.com/cryptolok/aslray) Linux ELF x32/x64 ASLR DEP/NX bypass exploit with stack-spraying
-- [**276**Star][2m] [Java] [appium/sign](https://github.com/appium/sign) Sign.jar automatically signs an apk with the Android test certificate.
-- [**275**Star][7d] [Shell] [wuseman/emagnet](https://github.com/wuseman/emagnet) Emagnet is a tool for find leaked databases with 97.1% accurate to grab mail + password together from pastebin leaks. Support for brute forcing spotify accounts, instagram accounts, ssh servers, microsoft rdp clients and gmail accounts
-- [**275**Star][3m] [C] [sensepost/hostapd-mana](https://github.com/sensepost/hostapd-mana) SensePost's modified hostapd for wifi attacks.
-- [**275**Star][1m] [Go] [rmikehodges/hidensneak](https://github.com/rmikehodges/hidensneak) a CLI for ephemeral penetration testing
-- [**275**Star][7d] [Java] [nationalsecurityagency/datawave](https://github.com/nationalsecurityagency/datawave) DataWave is an ingest/query framework that leverages Apache Accumulo to provide fast, secure data access.
-- [**275**Star][27d] [Go] [kubernetes-sigs/application](https://github.com/kubernetes-sigs/application) Application metadata descriptor CRD
-- [**275**Star][13d] [Py] [hugsy/defcon_27_windbg_workshop](https://github.com/hugsy/defcon_27_windbg_workshop) DEFCON 27 workshop - Modern Debugging with WinDbg Preview
-- [**275**Star][16d] [Py] [hnfull/intensio-obfuscator](https://github.com/hnfull/intensio-obfuscator) Obfuscate a python code 2.x and 3.x
-- [**275**Star][13d] [Py] [franccesco/getaltname](https://github.com/franccesco/getaltname) Extract subdomains from SSL certificates in HTTPS sites.
-- [**275**Star][3y] [Java] [fourbrother/icodetools](https://github.com/fourbrother/icodetools) Android中动态自动插入代码到apk中工具
-- [**275**Star][1y] [Java] [florent37/android-nosql](https://github.com/florent37/android-nosql) Lightweight, simple structured NoSQL database for Android
-- [**275**Star][2y] [Java] [commonsguy/cwac-security](https://github.com/commonsguy/cwac-security) CWAC-Security: Helping You Help Your Users Defend Their Data
-- [**275**Star][2y] [Py] [anssi-fr/polichombr](https://github.com/anssi-fr/polichombr) Collaborative malware analysis framework
-- [**275**Star][8d] [Shell] [al0ne/linuxcheck](https://github.com/al0ne/linuxcheck) linux信息收集/应急响应/常见后门检测脚本
-- [**275**Star][4m] [Py] [18f/domain-scan](https://github.com/18f/domain-scan) A lightweight pipeline, locally or in Lambda, for scanning things like HTTPS, third party service use, and web accessibility.
-- [**274**Star][6m] [Py] [k8gege/cve-2019-0708](https://github.com/k8gege/cve-2019-0708) 3389远程桌面代码执行漏洞CVE-2019-0708批量检测工具(Rdpscan Bluekeep Check)
-- [**274**Star][17d] [JS] [aws-samples/aws-serverless-security-workshop](https://github.com/aws-samples/aws-serverless-security-workshop) In this workshop, you will learn techniques to secure a serverless application built with AWS Lambda, Amazon API Gateway and RDS Aurora. We will cover AWS services and features you can leverage to improve the security of a serverless applications in 5 domains: identity & access management, code, data, infrastructure, logging & monitoring.
-- [**274**Star][3m] [Vue] [zerx0r/kage](https://github.com/Zerx0r/Kage) Kage is Graphical User Interface for Metasploit Meterpreter and Session Handler
-- [**274**Star][3y] [JS] [wuchangming/https-mitm-proxy-handbook](https://github.com/wuchangming/https-mitm-proxy-handbook) 基于Node.js的HTTPS MITM(中间人)代理的原理和实现
-- [**274**Star][20d] [Go] [openzipkin/zipkin-go](https://github.com/openzipkin/zipkin-go) Zipkin tracer library for go
-- [**274**Star][20d] [Go] [muraenateam/muraena](https://github.com/muraenateam/muraena) Muraena is an almost-transparent reverse proxy aimed at automating phishing and post-phishing activities.
-- [**274**Star][10m] [maaaaz/impacket-examples-windows](https://github.com/maaaaz/impacket-examples-windows) The great impacket example scripts compiled for Windows
-- [**274**Star][3m] [Py] [jpcertcc/aa-tools](https://github.com/jpcertcc/aa-tools) Multiple RE plugins and scripts
+- [**276**Star][1m] [Go] [rmikehodges/hidensneak](https://github.com/rmikehodges/hidensneak) assists in managing attack infrastructure for penetration testers by providing an interface to rapidly deploy, manage, and take down various cloud services
+- [**276**Star][2d] [Java] [nationalsecurityagency/datawave](https://github.com/nationalsecurityagency/datawave) DataWave is an ingest/query framework that leverages Apache Accumulo to provide fast, secure data access.
+- [**276**Star][11d] [Py] [liuchangfreeman/c--compiler](https://github.com/liuchangfreeman/c--compiler) C--compiler which implements LL(1)\LR(0)\SLR\LR(1) and semantic analysis and MIPS generate
+- [**276**Star][3m] [Py] [jpcertcc/aa-tools](https://github.com/jpcertcc/aa-tools) Multiple RE plugins and scripts
- [apt17scan.py](https://github.com/jpcertcc/aa-tools/blob/master/apt17scan.py) Volatility plugin for detecting APT17 related malware and extracting its config
- [emdivi_postdata_decoder](https://github.com/jpcertcc/aa-tools/blob/master/emdivi_postdata_decoder.py) Python script for decoding Emdivi's post data
- [emdivi_string_decryptor](https://github.com/jpcertcc/aa-tools/blob/master/emdivi_string_decryptor.py) IDAPython script for decrypting strings inside Emdivi
@@ -4268,3089 +4493,3308 @@ for further development
- [wellmess_cookie_decode](https://github.com/jpcertcc/aa-tools/blob/master/wellmess_cookie_decode.py) Python script for decoding WellMess's cookie data (support Python2)
- [cobaltstrikescan](https://github.com/jpcertcc/aa-tools/blob/master/cobaltstrikescan.py) Volatility plugin for detecting Cobalt Strike Beacon and extracting its config
- [tscookie_data_decode](https://github.com/jpcertcc/aa-tools/blob/master/tscookie_data_decode.py) Python script for decrypting and parsing TSCookie configure data
-- [**274**Star][3y] [C] [firefart/dirtycow](https://github.com/firefart/dirtycow)
+- [**276**Star][4y] [XSLT] [ironbee/ironbee](https://github.com/ironbee/ironbee) Universal web application security sensor intended for real-time monitoring and defense.
+- [**276**Star][12m] [Py] [hongrisec/ctf-training](https://github.com/hongrisec/ctf-training) 收集各大比赛的题目和Writeup
+- [**276**Star][1y] [Java] [ewilded/shelling](https://github.com/ewilded/shelling) SHELLING - a comprehensive OS command injection payload generator
+- [**276**Star][2y] [Py] [dirtyfilthy/freshonions-torscraper](https://github.com/dirtyfilthy/freshonions-torscraper) Fresh Onions is an open source TOR spider / hidden service onion crawler hosted at zlal32teyptf4tvi.onion
+- [**276**Star][12d] [C#] [dahall/vanara](https://github.com/dahall/vanara) A set of .NET libraries for Windows implementing PInvoke calls to many native Windows APIs with supporting wrappers.
+- [**276**Star][3m] [Shell] [cryptolok/aslray](https://github.com/cryptolok/aslray) Linux ELF x32/x64 ASLR DEP/NX bypass exploit with stack-spraying
+- [**276**Star][2y] [Py] [anssi-fr/polichombr](https://github.com/anssi-fr/polichombr) Collaborative malware analysis framework
+- [**276**Star][4m] [Py] [18f/domain-scan](https://github.com/18f/domain-scan) A lightweight pipeline, locally or in Lambda, for scanning things like HTTPS, third party service use, and web accessibility.
+- [**275**Star][10d] [TS] [javascript-obfuscator/webpack-obfuscator](https://github.com/javascript-obfuscator/webpack-obfuscator) javascript-obfuscator plugin for Webpack
+- [**275**Star][3m] [Vue] [zerx0r/kage](https://github.com/Zerx0r/Kage) Kage is Graphical User Interface for Metasploit Meterpreter and Session Handler
+- [**275**Star][7m] [Shell] [venshine/decompile-apk](https://github.com/venshine/decompile-apk) auto decompile function for produce Java source code and resources from Android Apk files that displayed on GUI.
+- [**275**Star][3m] [C] [sensepost/hostapd-mana](https://github.com/sensepost/hostapd-mana) SensePost's modified hostapd for wifi attacks.
+- [**275**Star][7d] [Go] [openzipkin/zipkin-go](https://github.com/openzipkin/zipkin-go) Zipkin tracer library for go
+- [**275**Star][5m] [geerlingguy/ansible-role-security](https://github.com/geerlingguy/ansible-role-security) Ansible Role - Security
+- [**275**Star][3y] [Java] [fourbrother/icodetools](https://github.com/fourbrother/icodetools) Android中动态自动插入代码到apk中工具
+- [**275**Star][1y] [Java] [florent37/android-nosql](https://github.com/florent37/android-nosql) Lightweight, simple structured NoSQL database for Android
+- [**275**Star][2y] [Java] [commonsguy/cwac-security](https://github.com/commonsguy/cwac-security) CWAC-Security: Helping You Help Your Users Defend Their Data
+- [**274**Star][6m] [Py] [k8gege/cve-2019-0708](https://github.com/k8gege/cve-2019-0708) 3389远程桌面代码执行漏洞CVE-2019-0708批量检测工具(Rdpscan Bluekeep Check)
+- [**274**Star][8d] [C] [br101/horst](https://github.com/br101/horst) “horst” - lightweight IEEE802.11 wireless LAN analyzer with a text interface
+- [**274**Star][3y] [Py] [ptr32void/ostrica](https://github.com/ptr32void/ostrica)
+- [**274**Star][1y] [PHP] [psecio/parse](https://github.com/psecio/parse) Parse: A Static Security Scanner
+- [**274**Star][3d] [Perl] [owasp/o-saft](https://github.com/owasp/o-saft) O-Saft - OWASP SSL advanced forensic tool
+- [**274**Star][22d] [Go] [muraenateam/muraena](https://github.com/muraenateam/muraena) Muraena is an almost-transparent reverse proxy aimed at automating phishing and post-phishing activities.
+- [**274**Star][2y] [Java] [mateuszk87/badintent](https://github.com/mateuszk87/badintent) Intercept, modify, repeat and attack Android's Binder transactions using Burp Suite
+- [**274**Star][29d] [Go] [kubernetes-sigs/application](https://github.com/kubernetes-sigs/application) Application metadata descriptor CRD
+- [**274**Star][12m] [C] [jmk-foofus/medusa](https://github.com/jmk-foofus/medusa) Medusa is a speedy, parallel, and modular, login brute-forcer.
+- [**274**Star][3y] [C] [iaik/cjag](https://github.com/iaik/cjag) CJAG is an open-source implementation of our cache-based jamming agreement.
- [**274**Star][1y] [C++] [dekimir/ramfuzz](https://github.com/dekimir/ramfuzz) Combining Unit Tests, Fuzzing, and AI
-- [**274**Star][18d] [Java] [c0ny1/fastjsonexploit](https://github.com/c0ny1/fastjsonexploit) Fastjson vulnerability quickly exploits the framework(fastjson漏洞快速利用框架)
-- [**273**Star][1m] [C] [grapheneos/hardened_malloc](https://github.com/GrapheneOS/hardened_malloc) Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability / integration over time.
-- [**273**Star][3y] [Py] [ptr32void/ostrica](https://github.com/ptr32void/ostrica)
-- [**273**Star][1y] [PHP] [psecio/parse](https://github.com/psecio/parse) Parse: A Static Security Scanner
-- [**273**Star][13d] [C] [o-gs/dji-firmware-tools](https://github.com/o-gs/dji-firmware-tools) Tools for handling firmwares of DJI products, with focus on quadcopters.
+- [**274**Star][21d] [C] [beckus/qemu_stm32](https://github.com/beckus/qemu_stm32) QEMU with an STM32 microcontroller implementation
+- [**274**Star][7m] [C++] [aekras1a/updated-carbanak-source-with-plugins](https://github.com/aekras1a/updated-carbanak-source-with-plugins)
+- [**274**Star][3d] [Py] [abhi-r3v0/adhrit](https://github.com/abhi-r3v0/adhrit) Android Security Suite for APK reversing, in-depth reconnaissance and static bytecode analysis based on Ghera benchmarks.
+- [**273**Star][8m] [C] [rofl0r/microsocks](https://github.com/rofl0r/microsocks) tiny, portable SOCKS5 server with very moderate resource usage
+- [**273**Star][4m] [Py] [mariovilas/winappdbg](https://github.com/mariovilas/winappdbg) WinAppDbg Debugger
- [**273**Star][2y] [Go] [kisesy/gscan_quic](https://github.com/kisesy/gscan_quic) Google Quic 扫描工具
-- [**273**Star][12m] [C] [jmk-foofus/medusa](https://github.com/jmk-foofus/medusa) Medusa is a speedy, parallel, and modular, login brute-forcer.
- [**273**Star][2y] [C++] [isometric/bucketcompressiontrick](https://github.com/isometric/bucketcompressiontrick) Cool trick to store 4 5-bit values in one 16-bit value.
-- [**273**Star][4m] [Py] [invernizzi/scapy-http](https://github.com/invernizzi/scapy-http) Support for HTTP in Scapy
-- [**273**Star][3y] [C] [iaik/cjag](https://github.com/iaik/cjag) CJAG is an open-source implementation of our cache-based jamming agreement.
-- [**273**Star][19d] [C] [beckus/qemu_stm32](https://github.com/beckus/qemu_stm32) QEMU with an STM32 microcontroller implementation
-- [**272**Star][8m] [C] [rofl0r/microsocks](https://github.com/rofl0r/microsocks) tiny, portable SOCKS5 server with very moderate resource usage
+- [**272**Star][2m] [C++] [windytan/redsea](https://github.com/windytan/redsea) A lightweight RDS to JSON decoder
+- [**272**Star][16d] [C++] [steve-m/kalibrate-rtl](https://github.com/steve-m/kalibrate-rtl) fork of
- [**272**Star][4y] [C] [robertdavidgraham/pemcrack](https://github.com/robertdavidgraham/pemcrack) Cracks SSL PEM files that hold encrypted private keys. Brute forces or dictionary cracks. This code is extraordinarily slow, DON'T JUDGE ME!!!
- [**272**Star][3m] [Py] [pysmt/pysmt](https://github.com/pysmt/pysmt) A library for SMT formulae manipulation and solving
-- [**272**Star][7d] [Perl] [owasp/o-saft](https://github.com/owasp/o-saft) O-Saft - OWASP SSL advanced forensic tool
-- [**272**Star][2y] [Java] [mateuszk87/badintent](https://github.com/mateuszk87/badintent) Intercept, modify, repeat and attack Android's Binder transactions using Burp Suite
+- [**272**Star][3d] [PS] [nettitude/poshc2](https://github.com/nettitude/PoshC2) Python Server for PoshC2
+- [**272**Star][3d] [PS] [nettitude/poshc2](https://github.com/nettitude/poshc2) Python Server for PoshC2
+- [**272**Star][8m] [Py] [mozillasecurity/peach](https://github.com/mozillasecurity/peach) Peach is a fuzzing framework which uses a DSL for building fuzzers and an observer based architecture to execute and monitor them.
- [**272**Star][3y] [Py] [joxeankoret/multiav](https://github.com/joxeankoret/multiav) MultiAV scanner with Python and JSON API. Disclaimer: I don't maintain it any more.
+- [**272**Star][1y] [Shell] [jgamblin/carhackingtools](https://github.com/jgamblin/carhackingtools) Install and Configure Common Car Hacking Tools.
+- [**272**Star][4m] [Py] [invernizzi/scapy-http](https://github.com/invernizzi/scapy-http) Support for HTTP in Scapy
+- [**272**Star][8d] [Py] [ghostop14/sparrow-wifi](https://github.com/ghostop14/sparrow-wifi) Next-Gen GUI-based WiFi and Bluetooth Analyzer for Linux
- [**272**Star][2y] [C++] [gellin/teamviewer_permissions_hook_v1](https://github.com/gellin/teamviewer_permissions_hook_v1) A proof of concept injectable C++ dll, that uses naked inline hooking and direct memory modification to change your TeamViewer permissions.
- [**272**Star][1y] [Py] [gbafana25/esp8266_honeypot](https://github.com/gbafana25/esp8266_honeypot) THE ESP8266 HONEYPOT: A PROJECT TO TRAP SCRIPT KIDDIES EVERYWHRE!!
-- [**272**Star][2y] [Py] [dirtyfilthy/freshonions-torscraper](https://github.com/dirtyfilthy/freshonions-torscraper) Fresh Onions is an open source TOR spider / hidden service onion crawler hosted at zlal32teyptf4tvi.onion
- [**272**Star][2y] [Java] [crowhawk/magictoe](https://github.com/crowhawk/magictoe) 基于webmagic + springboot + mybatis的Java爬虫,使用Echarts进行数据可视化分析,提供了从爬虫获取数据到数据持久化、数据可视化分析以及构建简单的代理池等一整套解决方案模板。
-- [**272**Star][7m] [C++] [aekras1a/updated-carbanak-source-with-plugins](https://github.com/aekras1a/updated-carbanak-source-with-plugins)
-- [**272**Star][8d] [Py] [abhi-r3v0/adhrit](https://github.com/abhi-r3v0/adhrit) Android Security Suite for Reversing, SCA and Reconnaissance.
-- [**271**Star][8d] [TypeScript] [javascript-obfuscator/webpack-obfuscator](https://github.com/javascript-obfuscator/webpack-obfuscator) javascript-obfuscator plugin for Webpack
-- [**271**Star][2m] [C++] [windytan/redsea](https://github.com/windytan/redsea) A lightweight RDS to JSON decoder
-- [**271**Star][7m] [Shell] [venshine/decompile-apk](https://github.com/venshine/decompile-apk) auto decompile function for produce Java source code and resources from Android Apk files that displayed on GUI.
-- [**271**Star][14d] [C++] [steve-m/kalibrate-rtl](https://github.com/steve-m/kalibrate-rtl) fork of
+- [**271**Star][2y] [C] [bishopfox/bfdecrypt](https://github.com/bishopfox/bfdecrypt) Utility to decrypt App Store apps on jailbroken iOS 11.x
+- [**271**Star][7m] [Py] [s0md3v/breacher](https://github.com/s0md3v/Breacher) An advanced multithreaded admin panel finder written in python.
+- [**271**Star][2d] [Py] [shaypal5/cachier](https://github.com/shaypal5/cachier) Persistent, stale-free, local and cross-machine caching for Python functions.
+- [**271**Star][7m] [s0md3v/mypapers](https://github.com/s0md3v/mypapers) Repository for hosting my research papers
- [**271**Star][2y] [Java] [reoky/android-crackme-challenge](https://github.com/reoky/android-crackme-challenge) A collection of reverse engineering challenges for learning about the Android operating system and mobile security.
- [**271**Star][3y] [Py] [quandyfactory/dicttoxml](https://github.com/quandyfactory/dicttoxml) Simple library to convert a Python dictionary or other native data type into a valid XML string.
+- [**271**Star][23d] [Swift] [prateek147/dvia-v2](https://github.com/prateek147/dvia-v2) Damn Vulnerable iOS App (DVIA) is an iOS application that is damn vulnerable. Its main goal is to provide a platform to mobile security enthusiasts/professionals or students to test their iOS penetration testing skills in a legal environment. This project is developed and maintained by @prateekg147. The vulnerabilities and solutions covered in t…
+- [**271**Star][10m] [Py] [pisupply/papirus](https://github.com/pisupply/papirus) Resources for PaPiRus ePaper eInk displays
- [**271**Star][8m] [offensive-security/nethunter-lrt](https://github.com/offensive-security/nethunter-lrt) The Nethunter Linux Root Toolkit is a collection of bash scripts which install Nethunter onto a supported device.
-- [**271**Star][8m] [Py] [mozillasecurity/peach](https://github.com/mozillasecurity/peach) Peach is a fuzzing framework which uses a DSL for building fuzzers and an observer based architecture to execute and monitor them.
+- [**271**Star][10m] [Vala] [naxuroqa/venom](https://github.com/naxuroqa/venom) a modern Tox client for the GNU/Linux desktop
+- [**271**Star][17d] [C#] [mkaring/confuserex](https://github.com/mkaring/confuserex) An open-source, free protector for .NET applications
+- [**271**Star][3y] [Py] [lgandx/responder-windows](https://github.com/lgandx/responder-windows) Responder Windows Version Beta
- [**271**Star][3y] [jinyu121/surgerule](https://github.com/jinyu121/surgerule) Deprecate since 2016
- [**271**Star][3y] [Py] [inaz2/roputils](https://github.com/inaz2/roputils) A Return-oriented Programming toolkit
+- [**271**Star][2m] [JS] [hynekpetrak/javascript-malware-collection](https://github.com/hynekpetrak/javascript-malware-collection) Collection of almost 40.000 javascript malware samples
- [**271**Star][2y] [Py] [hadi999/nxcrypt](https://github.com/hadi999/nxcrypt) NXcrypt - 'python backdoor' framework
+- [**271**Star][5y] [Scala] [fix-macosx/net-monitor](https://github.com/fix-macosx/net-monitor) Toolkit for auditing "phone home" behavior on Mac OS X Yosemite.
- [**271**Star][3y] [C] [cisco-talos/mbrfilter](https://github.com/cisco-talos/mbrfilter) Cisco Talos MBR Filter Driver
- [**271**Star][2y] [C] [can1357/theperfectinjector](https://github.com/can1357/theperfectinjector) Literally, the perfect injector.
- [**271**Star][2y] [JS] [bugbountyforum/xss-radar](https://github.com/bugbountyforum/xss-radar)
-- [**270**Star][7m] [Py] [s0md3v/breacher](https://github.com/s0md3v/Breacher) An advanced multithreaded admin panel finder written in python.
+- [**270**Star][3m] [mattnotmax/cyberchef-recipes](https://github.com/mattnotmax/cyberchef-recipes) A list of cyber-chef recipes
+- [**270**Star][2d] [HTML] [vernesong/openclash](https://github.com/vernesong/openclash) A Clash Client For OpenWrt
+- [**270**Star][4y] [C++] [cisco-talos/moflow](https://github.com/Cisco-Talos/moflow) Release Branches for MoFlow
- [**270**Star][1y] [Shell] [zephrfish/dockerattack](https://github.com/zephrfish/dockerattack) Various Tools and Docker Images
-- [**270**Star][2m] [Objective-C] [veorq/siphash](https://github.com/veorq/siphash) High-speed pseudorandom function (reference code)
-- [**270**Star][10m] [Py] [pisupply/papirus](https://github.com/pisupply/papirus) Resources for PaPiRus ePaper eInk displays
-- [**270**Star][3y] [Py] [lgandx/responder-windows](https://github.com/lgandx/responder-windows) Responder Windows Version Beta
+- [**270**Star][3m] [ObjC] [veorq/siphash](https://github.com/veorq/siphash) High-speed pseudorandom function (reference code)
+- [**270**Star][12m] [Shell] [thelinuxchoice/instainsane](https://github.com/thelinuxchoice/instainsane) Multi-threaded Instagram Brute Forcer (100 attemps at once)
+- [**270**Star][1y] [JS] [ropnop/serverless_toolkit](https://github.com/ropnop/serverless_toolkit) A collection of useful Serverless functions I use when pentesting
+- [**270**Star][6y] [C] [robertdavidgraham/isowall](https://github.com/robertdavidgraham/isowall) This is a mini-firewall that completely isolates a target device from the local network.
+- [**270**Star][6d] [JS] [protofire/solhint](https://github.com/protofire/solhint) Security and Style Guide validations.
+- [**270**Star][16d] [PHP] [pan-unit42/iocs](https://github.com/pan-unit42/iocs) Indicators from Unit 42 Public Reports
+- [**270**Star][1m] [Py] [nccgroup/pmapper](https://github.com/nccgroup/pmapper) A tool for quickly evaluating IAM permissions in AWS.
+- [**270**Star][6m] [Java] [nationalsecurityagency/lemongrenade](https://github.com/nationalsecurityagency/lemongrenade) Data-driven automation platform
- [**270**Star][5y] [leonardonve/sslstrip2](https://github.com/leonardonve/sslstrip2) SSLStrip version to defeat HSTS
-- [**270**Star][5y] [Scala] [fix-macosx/net-monitor](https://github.com/fix-macosx/net-monitor) Toolkit for auditing "phone home" behavior on Mac OS X Yosemite.
+- [**270**Star][3y] [C] [laginimaineb/extractkeymaster](https://github.com/laginimaineb/extractkeymaster) Exploit that extracts Qualcomm's KeyMaster keys using CVE-2015-6639 and CVE-2016-2431
- [**270**Star][5y] [C] [conradev/dumpdecrypted](https://github.com/conradev/dumpdecrypted) Dumps decrypted mach-o files from encrypted iPhone applications from memory to disk. This tool is necessary for security researchers to be able to look under the hood of encryption.
-- [**269**Star][6m] [Py] [abhisharma404/vault](https://github.com/abhisharma404/vault) swiss army knife for hackers
-- [**269**Star][4y] [C++] [cisco-talos/moflow](https://github.com/Cisco-Talos/moflow) Release Branches for MoFlow
-- [**269**Star][2m] [Py] [xfreed0m/rdpassspray](https://github.com/xfreed0m/rdpassspray) Python3 tool to perform password spraying using RDP
+- [**270**Star][11m] [Py] [appsecco/the-art-of-subdomain-enumeration](https://github.com/appsecco/the-art-of-subdomain-enumeration) This repository contains all the supplement material for the book "The art of sub-domain enumeration"
+- [**269**Star][10m] [Shell] [thelinuxchoice/instashell](https://github.com/thelinuxchoice/instashell) Multi-threaded Instagram Brute Forcer without password limit
+- [**269**Star][18d] [Dockerfile] [pengchujin/v2raydocker](https://github.com/pengchujin/v2raydocker) 一键v2ray ws + tls 方便就完事了
+- [**269**Star][4d] [Py] [abhisharma404/vault](https://github.com/abhisharma404/vault) swiss army knife for hackers
+- [**269**Star][7d] [Py] [xfreed0m/rdpassspray](https://github.com/xfreed0m/rdpassspray) Python3 tool to perform password spraying using RDP
- [**269**Star][2y] [Py] [toyakula/luna](https://github.com/toyakula/luna) luna webscanner
- [**269**Star][2y] [sam-b/windows_kernel_resources](https://github.com/sam-b/windows_kernel_resources) Papers, blogposts, tutorials etc for learning about Windows kernel exploitation, internals and (r|b)ootkits
-- [**269**Star][7m] [s0md3v/mypapers](https://github.com/s0md3v/mypapers) Repository for hosting my research papers
-- [**269**Star][6y] [C] [robertdavidgraham/isowall](https://github.com/robertdavidgraham/isowall) This is a mini-firewall that completely isolates a target device from the local network.
- [**269**Star][3y] [ptresearch/me-disablement](https://github.com/ptresearch/me-disablement)
-- [**269**Star][2m] [JS] [protofire/solhint](https://github.com/protofire/solhint) Security and Style Guide validations.
-- [**269**Star][1m] [Py] [nccgroup/pmapper](https://github.com/nccgroup/pmapper) A tool for quickly evaluating IAM permissions in AWS.
-- [**269**Star][3m] [Py] [mariovilas/winappdbg](https://github.com/mariovilas/winappdbg) WinAppDbg Debugger
+- [**269**Star][9d] [Rust] [nccgroup/dirble](https://github.com/nccgroup/dirble) Fast directory scanning and scraping tool
+- [**269**Star][3m] [mattnotmax/cyberchef-recipes](https://github.com/mattnotmax/cyberchef-recipes) A list of cyber-chef recipes
- [**269**Star][2y] [Py] [lunarca/simpleemailspoofer](https://github.com/lunarca/simpleemailspoofer) A simple Python CLI to spoof emails.
-- [**269**Star][3y] [C] [laginimaineb/extractkeymaster](https://github.com/laginimaineb/extractkeymaster) Exploit that extracts Qualcomm's KeyMaster keys using CVE-2015-6639 and CVE-2016-2431
+- [**269**Star][4m] [PHP] [lawrenceamer/0xsp-mongoose](https://github.com/lawrenceamer/0xsp-mongoose) Privilege Escalation Enumeration Toolkit (64/32 ) , fast , intelligent enumeration with Web API integration . Mastering Your Own Finding
- [**269**Star][2y] [Py] [eth0izzle/needl](https://github.com/eth0izzle/needl) Take back your privacy. Lose yourself in the haystack.
-- [**269**Star][10m] [Py] [appsecco/the-art-of-subdomain-enumeration](https://github.com/appsecco/the-art-of-subdomain-enumeration) This repository contains all the supplement material for the book "The art of sub-domain enumeration"
+- [**269**Star][7m] [Go] [cloudfoundry/java-buildpack-memory-calculator](https://github.com/cloudfoundry/java-buildpack-memory-calculator) Cloud Foundry JVM Memory Calculator
- [**269**Star][1y] [Shell] [abedalqaderswedan1/aswcrypter](https://github.com/abedalqaderswedan1/aswcrypter) An Bash&Python Script For Generating Payloads that Bypasses All Antivirus so far [FUD]
- [**269**Star][11m] [Py] [LaNMaSteR53/recon-ng](https://bitbucket.org/lanmaster53/recon-ng)
+- [**268**Star][6m] [Shell] [yangchuansheng/love-gfw](https://github.com/yangchuansheng/love-gfw)
- [**268**Star][3y] [HTML] [xem/minix86](https://github.com/xem/minix86) x86 (MS-DOS) documentation, disassembler and emulator - WIP
+- [**268**Star][10m] [C++] [wbenny/mini-tor](https://github.com/wbenny/mini-tor) proof-of-concept implementation of tor protocol using Microsoft CNG/CryptoAPI
- [**268**Star][1y] [Go] [tomsteele/blacksheepwall](https://github.com/tomsteele/blacksheepwall) blacksheepwall is a hostname reconnaissance tool
-- [**268**Star][7d] [Py] [shaypal5/cachier](https://github.com/shaypal5/cachier) Persistent, stale-free, local and cross-machine caching for Python functions.
-- [**268**Star][7d] [Rust] [nccgroup/dirble](https://github.com/nccgroup/dirble) Fast directory scanning and scraping tool
-- [**268**Star][6m] [Java] [nationalsecurityagency/lemongrenade](https://github.com/nationalsecurityagency/lemongrenade) Data-driven automation platform
-- [**268**Star][15d] [C#] [mkaring/confuserex](https://github.com/mkaring/confuserex) An open-source, free protector for .NET applications
+- [**268**Star][22d] [Py] [peikexin9/deepxplore](https://github.com/peikexin9/deepxplore) DeepXplore code release
+- [**268**Star][6d] [JS] [nodejs/security-wg](https://github.com/nodejs/security-wg) Node.js Security Working Group
- [**268**Star][3y] [Java] [matthiaskaiser/jmet](https://github.com/matthiaskaiser/jmet) Java Message Exploitation Tool
- [**268**Star][4y] [C] [leechristensen/unmanagedpowershell](https://github.com/leechristensen/unmanagedpowershell) Executes PowerShell from an unmanaged process
-- [**268**Star][1m] [Py] [ledger-donjon/lascar](https://github.com/ledger-donjon/lascar) Ledger's Advanced Side-Channel Analysis Repository
+- [**268**Star][8d] [Py] [ledger-donjon/lascar](https://github.com/ledger-donjon/lascar) Ledger's Advanced Side-Channel Analysis Repository
- [**268**Star][6m] [Py] [juhakivekas/multidiff](https://github.com/juhakivekas/multidiff) Binary data diffing for multiple objects or streams of data
-- [**268**Star][2m] [JS] [hynekpetrak/javascript-malware-collection](https://github.com/hynekpetrak/javascript-malware-collection) Collection of almost 40.000 javascript malware samples
-- [**268**Star][4m] [Py] [den1al/jsshell](https://github.com/den1al/jsshell) An interactive multi-user web JS shell
+- [**268**Star][4y] [Py] [jboone/tpms](https://github.com/jboone/tpms) Tire Pressure Monitoring System decoding tools.
+- [**268**Star][6d] [Java] [jackofmosttrades/gadgetinspector](https://github.com/jackofmosttrades/gadgetinspector) A byte code analyzer for finding deserialization gadget chains in Java applications
+- [**268**Star][11m] [Py] [ionelmc/python-manhole](https://github.com/ionelmc/python-manhole) Debugging manhole for python applications.
+- [**268**Star][3y] [insidetrust/statistically-likely-usernames](https://github.com/insidetrust/statistically-likely-usernames) Wordlists for creating statistically likely username lists for use in password attacks and security testing
+- [**268**Star][3y] [Py] [ghirensics/ghiro](https://github.com/ghirensics/ghiro) Automated image forensics tool
+- [**268**Star][19d] [Py] [eset/ipyida](https://github.com/eset/ipyida) IPython console integration for IDA Pro
+- [**268**Star][4d] [Py] [den1al/jsshell](https://github.com/den1al/jsshell) An interactive multi-user web JS shell
- [**268**Star][1y] [Py] [c0rel0ader/east](https://github.com/c0rel0ader/east) Exploits and Security Tools Framework 2.0.1
-- [**267**Star][7m] [C] [br101/horst](https://github.com/br101/horst) “horst” - lightweight IEEE802.11 wireless LAN analyzer with a text interface
-- [**267**Star][10m] [C++] [wbenny/mini-tor](https://github.com/wbenny/mini-tor) proof-of-concept implementation of tor protocol using Microsoft CNG/CryptoAPI
+- [**267**Star][2m] [Java] [w296488320/nullproguard](https://github.com/w296488320/nullproguard) 空白混淆 源码
- [**267**Star][3m] [Java] [vida-nyu/ache](https://github.com/vida-nyu/ache) ACHE is a web crawler for domain-specific search.
+- [**267**Star][1y] [Py] [ucsb-seclab/bootstomp](https://github.com/ucsb-seclab/bootstomp) a bootloader vulnerability finder
- [**267**Star][4y] [C] [samsung/adbi](https://github.com/samsung/adbi) Android Dynamic Binary Instrumentation tool for tracing Android native layer
-- [**267**Star][3y] [Java] [rsmudge/armitage](https://github.com/rsmudge/armitage) a graphical cyber attack management tool for Metasploit that
-visualizes your targets, recommends exploits, and exposes the advanced
-capabilities of the framework.
-- [**267**Star][1y] [JS] [ropnop/serverless_toolkit](https://github.com/ropnop/serverless_toolkit) A collection of useful Serverless functions I use when pentesting
-- [**267**Star][13d] [JS] [nodejs/security-wg](https://github.com/nodejs/security-wg) Node.js Security Working Group
-- [**267**Star][11m] [Py] [ionelmc/python-manhole](https://github.com/ionelmc/python-manhole) Debugging manhole for python applications.
+- [**267**Star][1m] [Py] [quitten/autorize](https://github.com/quitten/autorize) Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application security people work and allow them perform an automatic authorization tests
+- [**267**Star][2y] [Py] [hegusung/avsignseek](https://github.com/hegusung/avsignseek) Tool written in python3 to determine where the AV signature is located in a binary/payload
- [**267**Star][1m] [Py] [google/grr-doc](https://github.com/google/grr-doc) Documentation for the GRR Rapid Reponse framework
-- [**267**Star][3y] [Py] [ghirensics/ghiro](https://github.com/ghirensics/ghiro) Automated image forensics tool
-- [**267**Star][17d] [Py] [eset/ipyida](https://github.com/eset/ipyida) IPython console integration for IDA Pro
- [**267**Star][2y] [C] [cameronswinoga/yabfc](https://github.com/cameronswinoga/yabfc) Yet Another Brainfuck Compiler; No dependencies and from the ground up
- [**267**Star][4y] [C] [blankwall/macdbg](https://github.com/blankwall/macdbg) Simple easy to use C and python debugging framework for OSX
-- [**266**Star][2m] [Java] [w296488320/nullproguard](https://github.com/w296488320/nullproguard) 空白混淆 源码
-- [**266**Star][1m] [Py] [quitten/autorize](https://github.com/quitten/autorize) Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application security people work and allow them perform an automatic authorization tests
-- [**266**Star][20d] [Py] [peikexin9/deepxplore](https://github.com/peikexin9/deepxplore) DeepXplore code release
+- [**266**Star][4d] [zodiacon/alltools](https://github.com/zodiacon/alltools) All reasonably stable tools
+- [**266**Star][3y] [waylau/free-vpn](https://github.com/waylau/free-vpn) We Provide Newset Free VPN Service. PC, mobile phones and network appliances, no software installation. With the VPN Service,you can get through your government's firewall to browse restricted websites.提供最新的免费的 VPN 服务,通过使用 VPN 自由访问互联网(翻墙)!无论是PC端,移动端都无需安装客户端。
+- [**266**Star][2y] [Shell] [superkojiman/pwnbox](https://github.com/superkojiman/pwnbox) Docker container with tools for binary reverse engineering and exploitation.
+- [**266**Star][3y] [Java] [subgraph/vega](https://github.com/subgraph/vega) Subgraph Vega
+- [**266**Star][3y] [Java] [rsmudge/armitage](https://github.com/rsmudge/armitage) a graphical cyber attack management tool for Metasploit that
+visualizes your targets, recommends exploits, and exposes the advanced
+capabilities of the framework.
+- [**266**Star][2y] [paloaltonetworks/minemeld](https://github.com/paloaltonetworks/minemeld) Main MineMeld documentation repo
+- [**266**Star][5m] [C] [outflanknl/dumpert](https://github.com/outflanknl/dumpert) LSASS memory dumper using direct system calls and API unhooking.
- [**266**Star][1y] [l1k/osxparanoia](https://github.com/l1k/osxparanoia) Preventing OS X from phoning home to Cupertino
-- [**266**Star][1y] [Shell] [jgamblin/carhackingtools](https://github.com/jgamblin/carhackingtools) Install and Configure Common Car Hacking Tools.
-- [**266**Star][4y] [Py] [jboone/tpms](https://github.com/jboone/tpms) Tire Pressure Monitoring System decoding tools.
-- [**266**Star][2y] [Py] [hegusung/avsignseek](https://github.com/hegusung/avsignseek) Tool written in python3 to determine where the AV signature is located in a binary/payload
-- [**266**Star][1y] [Java] [ewilded/shelling](https://github.com/ewilded/shelling) SHELLING - a comprehensive OS command injection payload generator
-- [**266**Star][3y] [Visual Basic] [cn33liz/starfighters](https://github.com/cn33liz/starfighters) A JavaScript and VBScript Based Empire Launcher, which runs within their own embedded PowerShell Host.
+- [**266**Star][3m] [Py] [kupferlauncher/kupfer](https://github.com/kupferlauncher/kupfer) kupfer, smart, quick launcher. `master' is kupfer's release branch.
+- [**266**Star][2y] [TeX] [hjl-tools/x86-psabi](https://github.com/hjl-tools/x86-psabi) x86 psABI download
+- [**266**Star][11m] [Py] [hakril/pythonforwindows](https://github.com/hakril/pythonforwindows) A codebase aimed to make interaction with Windows and native execution easier
+- [**266**Star][21d] [JS] [d3/d3-interpolate](https://github.com/d3/d3-interpolate) Interpolate numbers, colors, strings, arrays, objects, whatever!
+- [**266**Star][9m] [Dockerfile] [cryptax/androidre](https://github.com/cryptax/androidre) Reverse engineering Android
+- [**266**Star][3y] [Visual Basic .NET] [cn33liz/starfighters](https://github.com/cn33liz/starfighters) A JavaScript and VBScript Based Empire Launcher, which runs within their own embedded PowerShell Host.
- [**266**Star][2y] [beahunt3r/windows-hunting](https://github.com/beahunt3r/windows-hunting) aid windows threat hunters to look for some common artifacts during their day to day operations
-- [**265**Star][13d] [Py] [nucypher/nucypher](https://github.com/nucypher/nucypher) A decentralized network offering accessible, intuitive, and extensible cryptographic runtimes and interfaces for secrets management and dynamic access control.
-- [**265**Star][1m] [Makefile] [pop-os/iso](https://github.com/pop-os/iso) ools necessary for building Pop!_OS ISOs.
-- [**265**Star][1y] [Py] [ucsb-seclab/bootstomp](https://github.com/ucsb-seclab/bootstomp) a bootloader vulnerability finder
-- [**265**Star][2y] [Shell] [superkojiman/pwnbox](https://github.com/superkojiman/pwnbox) Docker container with tools for binary reverse engineering and exploitation.
+- [**266**Star][4m] [C] [bcoles/kernel-exploits](https://github.com/bcoles/kernel-exploits) Various kernel exploits
+- [**265**Star][2d] [Py] [nucypher/nucypher](https://github.com/nucypher/nucypher) A decentralized network offering accessible, intuitive, and extensible cryptographic runtimes and interfaces for secrets management and dynamic access control.
+- [**265**Star][3m] [JS] [hawkeyesec/scanner-cli](https://github.com/hawkeyesec/scanner-cli) A project security/vulnerability/risk scanning tool
+- [**265**Star][12m] [Py] [trycatchhcf/packetwhisper](https://github.com/trycatchhcf/packetwhisper) Stealthily exfiltrate data and defeat attribution using DNS queries and text-based steganography. Avoid the problems associated with typical DNS exfiltration methods. Transfer data between systems without the communicating devices directly connecting to each other or to a common endpoint. No need to control a DNS Name Server.
- [**265**Star][2y] [PHP] [sqlmapproject/testenv](https://github.com/sqlmapproject/testenv) A collection of web pages vulnerable to SQL injection flaws
-- [**265**Star][14d] [PHP] [pan-unit42/iocs](https://github.com/pan-unit42/iocs) Indicators from Unit 42 Public Reports
-- [**265**Star][3m] [mattnotmax/cyberchef-recipes](https://github.com/mattnotmax/cyberchef-recipes) A list of cyber-chef recipes
-- [**265**Star][1y] [Java] [jackofmosttrades/gadgetinspector](https://github.com/jackofmosttrades/gadgetinspector) A byte code analyzer for finding deserialization gadget chains in Java applications
-- [**265**Star][9m] [Dockerfile] [cryptax/androidre](https://github.com/cryptax/androidre) Reverse engineering Android
+- [**265**Star][3y] [Go] [pwaller/goupx](https://github.com/pwaller/goupx) Fix golang compiled binaries on x86_64 so that they can be packed with UPX
+- [**265**Star][2m] [Assembly] [pret/pokeyellow](https://github.com/pret/pokeyellow) Disassembly of Pokemon Yellow
+- [**265**Star][1y] [JS] [portswigger/hackability](https://github.com/portswigger/hackability) Probe a rendering engine for vulnerabilities and other features
+- [**265**Star][2y] [PS] [invoke-ir/ace](https://github.com/invoke-ir/ace) Automated, Collection, and Enrichment Platform
+- [**265**Star][2m] [C#] [hackplayers/salsa-tools](https://github.com/hackplayers/salsa-tools) Salsa Tools - ShellReverse TCP/UDP/ICMP/DNS/SSL/BINDTCP/Shellcode/SILENTTRINITY and AV bypass, AMSI patched
+- [**265**Star][4m] [Py] [fwkz/riposte](https://github.com/fwkz/riposte) Python package for wrapping applications inside a tailored interactive shell
+- [**265**Star][7d] [Py] [exodus-privacy/exodus](https://github.com/exodus-privacy/exodus) Platform to audit trackers used by Android application
+- [**265**Star][3d] [Py] [earthquake/xfltreat](https://github.com/earthquake/xfltreat) XFLTReaT tunnelling framework
- [**265**Star][4y] [C++] [breakingmalware/powerloaderex](https://github.com/breakingmalware/powerloaderex) Advanced Code Injection Technique for x32 / x64
+- [**265**Star][7d] [Py] [armmbed/mbed-cli](https://github.com/armmbed/mbed-cli) Arm Mbed Command Line Interface
- [**265**Star][2y] [Py] [antojoseph/frida-android-hooks](https://github.com/antojoseph/frida-android-hooks) Lets you hook Method Calls in Frida ( Android )
-- [**265**Star][6m] [Go] [anshumanbh/tko-subs](https://github.com/anshumanbh/tko-subs) A tool that can help detect and takeover subdomains with dead DNS records
-- [**264**Star][3m] [JS] [hawkeyesec/scanner-cli](https://github.com/hawkeyesec/scanner-cli) A project security/vulnerability/risk scanning tool
-- [**264**Star][12m] [Shell] [thelinuxchoice/instainsane](https://github.com/thelinuxchoice/instainsane) Multi-threaded Instagram Brute Forcer (100 attemps at once)
+- [**265**Star][7d] [Go] [adguardteam/dnsproxy](https://github.com/adguardteam/dnsproxy) Simple DNS proxy with DoH, DoT, and DNSCrypt support
+- [**264**Star][1m] [Makefile] [pop-os/iso](https://github.com/pop-os/iso) ools necessary for building Pop!_OS ISOs.
+- [**264**Star][2m] [C++] [theevilbit/injection](https://github.com/theevilbit/injection) various process injection technique
+- [**264**Star][4m] [Go] [skx/tunneller](https://github.com/skx/tunneller) Allow internal services, running on localhost, to be accessed over the internet..
- [**264**Star][4y] [Py] [rpp0/aggr-inject](https://github.com/rpp0/aggr-inject) Remote frame injection PoC by exploiting a standard compliant A-MPDU aggregation vulnerability in 802.11n networks.
-- [**264**Star][3y] [Go] [pwaller/goupx](https://github.com/pwaller/goupx) Fix golang compiled binaries on x86_64 so that they can be packed with UPX
-- [**264**Star][2m] [Assembly] [pret/pokeyellow](https://github.com/pret/pokeyellow) Disassembly of Pokemon Yellow
-- [**264**Star][1y] [JS] [portswigger/hackability](https://github.com/portswigger/hackability) Probe a rendering engine for vulnerabilities and other features
+- [**264**Star][3y] [C++] [professor-plum/reflective-driver-loader](https://github.com/professor-plum/reflective-driver-loader) injection technique base off Reflective DLL injection
- [**264**Star][6y] [C] [pakt/ropc](https://github.com/pakt/ropc) A Turing complete ROP compiler
-- [**264**Star][2y] [PowerShell] [invoke-ir/ace](https://github.com/invoke-ir/ace) Automated, Collection, and Enrichment Platform
-- [**264**Star][11m] [Py] [hakril/pythonforwindows](https://github.com/hakril/pythonforwindows) A codebase aimed to make interaction with Windows and native execution easier
-- [**264**Star][4m] [Py] [fwkz/riposte](https://github.com/fwkz/riposte) Python package for wrapping applications inside a tailored interactive shell
-- [**264**Star][7d] [Py] [exodus-privacy/exodus](https://github.com/exodus-privacy/exodus) Platform to audit trackers used by Android application
-- [**264**Star][2y] [Py] [earthquake/xfltreat](https://github.com/earthquake/xfltreat) XFLTReaT tunnelling framework
-- [**264**Star][19d] [JS] [d3/d3-interpolate](https://github.com/d3/d3-interpolate) Interpolate numbers, colors, strings, arrays, objects, whatever!
+- [**264**Star][3y] [Py] [mame82/duck2spark](https://github.com/mame82/duck2spark) Converter for raw RubberDucky payloads to Digispark Arduino IDE Sketch source.
+- [**264**Star][3m] [Go] [lightningnetwork/lightning-onion](https://github.com/lightningnetwork/lightning-onion) Onion Routed Micropayments for the Lightning Network
+- [**264**Star][21d] [Py] [hubblestack/hubble](https://github.com/hubblestack/hubble) Hubble is a modular, open-source security compliance framework. The project provides on-demand profile-based auditing, real-time security event notifications, alerting, and reporting. HubbleStack is a free and open source project made possible by Adobe.
+- [**264**Star][3d] [C] [eua/wxhexeditor](https://github.com/eua/wxhexeditor) wxHexEditor official GIT repo
- [**264**Star][3y] [Java] [codewatchorg/bypasswaf](https://github.com/codewatchorg/bypasswaf) Add headers to all Burp requests to bypass some WAF products
-- [**264**Star][4m] [C] [bcoles/kernel-exploits](https://github.com/bcoles/kernel-exploits) Various kernel exploits
-- [**263**Star][30d] [zodiacon/alltools](https://github.com/zodiacon/alltools) All reasonably stable tools
-- [**263**Star][12m] [Py] [trycatchhcf/packetwhisper](https://github.com/trycatchhcf/packetwhisper) Stealthily exfiltrate data and defeat attribution using DNS queries and text-based steganography. Avoid the problems associated with typical DNS exfiltration methods. Transfer data between systems without the communicating devices directly connecting to each other or to a common endpoint. No need to control a DNS Name Server.
-- [**263**Star][3y] [Java] [subgraph/vega](https://github.com/subgraph/vega) Subgraph Vega
-- [**263**Star][3y] [C++] [professor-plum/reflective-driver-loader](https://github.com/professor-plum/reflective-driver-loader) injection technique base off Reflective DLL injection
+- [**264**Star][8d] [Py] [azure/azure-storage-python](https://github.com/azure/azure-storage-python) Microsoft Azure Storage Library for Python
+- [**264**Star][3y] [C++] [antire-book/dont_panic](https://github.com/antire-book/dont_panic) Linux bind shell with anti-reverse engineering techniques
+- [**263**Star][2y] [dloss/binary-parsing](https://github.com/dloss/binary-parsing) A list of generic tools for parsing binary data structures, such as file formats, network protocols or bitstreams
+- [**263**Star][8m] [Shell] [thelinuxchoice/saycheese](https://github.com/thelinuxchoice/saycheese) Grab target's webcam shots by link
+- [**263**Star][8m] [Java] [adonespitogo/adobot](https://github.com/adonespitogo/adobot) Open-source android spyware
+- [**263**Star][8d] [C++] [souffle-lang/souffle](https://github.com/souffle-lang/souffle) Soufflé is a variant of Datalog for tool designers crafting analyses in Horn clauses. Soufflé synthesizes a native parallel C++ program from a logic specification.
- [**263**Star][7m] [Py] [pe3zx/huawei-block-list](https://github.com/pe3zx/huawei-block-list) Captured DNS requests from Huawei P30 Pro to a block list
-- [**263**Star][2y] [paloaltonetworks/minemeld](https://github.com/paloaltonetworks/minemeld) Main MineMeld documentation repo
-- [**263**Star][7d] [PowerShell] [nettitude/poshc2](https://github.com/nettitude/PoshC2) Python Server for PoshC2
-- [**263**Star][7d] [PowerShell] [nettitude/poshc2](https://github.com/nettitude/poshc2) Python Server for PoshC2
- [**263**Star][2y] [Py] [lightos/panoptic](https://github.com/lightos/panoptic) Panoptic is an open source penetration testing tool that automates the process of search and retrieval of content for common log and config files through path traversal vulnerabilities.
-- [**263**Star][3m] [Go] [lightningnetwork/lightning-onion](https://github.com/lightningnetwork/lightning-onion) Onion Routed Micropayments for the Lightning Network
-- [**263**Star][3m] [Py] [kupferlauncher/kupfer](https://github.com/kupferlauncher/kupfer) kupfer, smart, quick launcher. `master' is kupfer's release branch.
-- [**263**Star][19d] [Py] [hubblestack/hubble](https://github.com/hubblestack/hubble) Hubble is a modular, open-source security compliance framework. The project provides on-demand profile-based auditing, real-time security event notifications, alerting, and reporting. HubbleStack is a free and open source project made possible by Adobe.
-- [**263**Star][2y] [TeX] [hjl-tools/x86-psabi](https://github.com/hjl-tools/x86-psabi) x86 psABI download
-- [**263**Star][2y] [Py] [enddo/smod](https://github.com/enddo/smod) MODBUS Penetration Testing Framework
+- [**263**Star][5m] [CSS] [l4wio/ctf-challenges-by-me](https://github.com/l4wio/ctf-challenges-by-me) Pwnable|Web Security|Cryptography CTF-style challenges
+- [**263**Star][4d] [C++] [fransbouma/injectablegenericcamerasystem](https://github.com/fransbouma/injectablegenericcamerasystem) This is a generic camera system to be used as the base for cameras for taking screenshots within games. The main purpose of the system is to hijack the in-game 3D camera by overwriting values in its camera structure with our own values so we can control where the camera is located, it's pitch/yaw/roll values, its FoV and the camera's look vector.
+- [**263**Star][9d] [Py] [firstlookmedia/gpgsync](https://github.com/firstlookmedia/gpgsync) let users always have up-to-date OpenPGP public keys for other members of their organization.
+- [**263**Star][2y] [Py] [enddo/smod](https://github.com/enddo/smod) a modular framework with every kind of diagnostic and offensive feature you could need in order to pentest modbus protocol
+- [**263**Star][2y] [Py] [dkovar/analyzemft](https://github.com/dkovar/analyzemft) fully parse the MFT file from an NTFS filesystem and present the results as accurately as possible in multiple format
- [**263**Star][5m] [C++] [d35ha/callobfuscator](https://github.com/d35ha/callobfuscator) Obfuscate specific windows apis with different apis
-- [**263**Star][21d] [Py] [armmbed/mbed-cli](https://github.com/armmbed/mbed-cli) Arm Mbed Command Line Interface
-- [**263**Star][3y] [C++] [antire-book/dont_panic](https://github.com/antire-book/dont_panic) Linux bind shell with anti-reverse engineering techniques
-- [**263**Star][8d] [Go] [adguardteam/dnsproxy](https://github.com/adguardteam/dnsproxy) Simple DNS proxy with DoH, DoT, and DNSCrypt support
- [**262**Star][8m] [offensive-security/nethunter-app](https://github.com/offensive-security/nethunter-app) NetHunter android application
-- [**262**Star][8m] [Java] [adonespitogo/adobot](https://github.com/adonespitogo/adobot) Open-source android spyware
- [**262**Star][4y] [Py] [cisco-talos/ropmemu](https://github.com/Cisco-Talos/ROPMEMU) ROPMEMU is a framework to analyze, dissect and decompile complex code-reuse attacks.
- [**262**Star][2m] [Go] [zmap/zdns](https://github.com/zmap/zdns) Fast CLI DNS Lookup Tool
-- [**262**Star][3m] [Go] [wanchain/go-wanchain](https://github.com/wanchain/go-wanchain) Wanchain Client Source Code
+- [**262**Star][2y] [HTML] [wisec/domxsswiki](https://github.com/wisec/domxsswiki) Automatically exported from code.google.com/p/domxsswiki
- [**262**Star][7y] [Py] [stripe-ctf/stripe-ctf-2.0](https://github.com/stripe-ctf/stripe-ctf-2.0) Capture the Flag: Web Edition
-- [**262**Star][3m] [Py] [no0be/dnslivery](https://github.com/no0be/dnslivery) Easy files and payloads delivery over DNS
+- [**262**Star][3m] [HTML] [sp1d3r/swf_json_csrf](https://github.com/sp1d3r/swf_json_csrf) simplify the SWF-based JSON CSRF exploitation
+- [**262**Star][2m] [Go] [sensepost/godoh](https://github.com/sensepost/godoh) A DNS-over-HTTPS Command & Control Proof of Concept
+- [**262**Star][4m] [C] [portcullislabs/linikatz](https://github.com/portcullislabs/linikatz) attack AD on UNIX
- [**262**Star][8m] [Py] [needmorecowbell/sniff-paste](https://github.com/needmorecowbell/sniff-paste) Pastebin OSINT Harvester
-- [**262**Star][5m] [CSS] [l4wio/ctf-challenges-by-me](https://github.com/l4wio/ctf-challenges-by-me) Pwnable|Web Security|Cryptography CTF-style challenges
-- [**262**Star][2m] [C#] [hackplayers/salsa-tools](https://github.com/hackplayers/salsa-tools) Salsa Tools - ShellReverse TCP/UDP/ICMP/DNS/SSL/BINDTCP/Shellcode/SILENTTRINITY and AV bypass, AMSI patched
+- [**262**Star][1y] [PHP] [mrsqar-ye/badmod](https://github.com/mrsqar-ye/badmod) CMS auto detect and exploit.
+- [**262**Star][2y] [Java] [maxcamillo/android-keystore-password-recover](https://github.com/maxcamillo/android-keystore-password-recover) Automatically exported from code.google.com/p/android-keystore-password-recover
+- [**262**Star][7m] [Shell] [lieanu/libcsearcher](https://github.com/lieanu/libcsearcher) glibc offset search for ctf.
+- [**262**Star][1y] [PS] [fox-it/invoke-aclpwn](https://github.com/fox-it/invoke-aclpwn)
- [**262**Star][1y] [Ruby] [evait-security/envizon](https://github.com/evait-security/envizon) network visualization tool with focus on red / blue team requirements
-- [**262**Star][2y] [Py] [dkovar/analyzemft](https://github.com/dkovar/analyzemft) fully parse the MFT file from an NTFS filesystem and present the results as accurately as possible in multiple format
+- [**262**Star][6m] [Batchfile] [diogo-fernan/ir-rescue](https://github.com/diogo-fernan/ir-rescue) A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.
+- [**262**Star][1y] [C++] [chadski/sharpneedle](https://github.com/chadski/sharpneedle) Inject C# code into a running process
- [**262**Star][11m] [Py] [ant4g0nist/susanoo](https://github.com/ant4g0nist/susanoo) A REST API security testing framework.
-- [**261**Star][2y] [dloss/binary-parsing](https://github.com/dloss/binary-parsing) A list of generic tools for parsing binary data structures, such as file formats, network protocols or bitstreams
+- [**262**Star][1m] [C#] [airvpn/eddie](https://github.com/airvpn/eddie) OpenVPN UI
+- [**261**Star][7y] [C++] [sin5678/gh0st](https://github.com/sin5678/gh0st) a open source remote administrator tool
+- [**261**Star][2y] [Py] [zhangchenchen/proxyspider](https://github.com/zhangchenchen/proxyspider) 代理IP 采集程序
- [**261**Star][1m] [Py] [xdavidhu/probesniffer](https://github.com/xdavidhu/probesniffer)
-- [**261**Star][2y] [HTML] [wisec/domxsswiki](https://github.com/wisec/domxsswiki) Automatically exported from code.google.com/p/domxsswiki
-- [**261**Star][2m] [C++] [theevilbit/injection](https://github.com/theevilbit/injection) various process injection technique
-- [**261**Star][3m] [HTML] [sp1d3r/swf_json_csrf](https://github.com/sp1d3r/swf_json_csrf) simplify the SWF-based JSON CSRF exploitation
-- [**261**Star][3m] [Objective-C] [preemptive/ppios-rename](https://github.com/preemptive/ppios-rename) Symbol obfuscator for iOS apps
-- [**261**Star][4m] [C] [portcullislabs/linikatz](https://github.com/portcullislabs/linikatz) attack AD on UNIX
+- [**261**Star][1y] [JS] [roccomuso/netcat](https://github.com/roccomuso/netcat) Netcat client and server modules written in pure Javascript for Node.j
+- [**261**Star][7y] [C] [quarkslab/quarkspwdump](https://github.com/quarkslab/quarkspwdump) Dump various types of Windows credentials without injecting in any process.
+- [**261**Star][3m] [ObjC] [preemptive/ppios-rename](https://github.com/preemptive/ppios-rename) Symbol obfuscator for iOS apps
- [**261**Star][1y] [C] [pornin/cttk](https://github.com/pornin/cttk) Constant-Time Toolkit
- [**261**Star][1y] [Dockerfile] [pgorczak/srslte-docker-emulated](https://github.com/pgorczak/srslte-docker-emulated) Minimal end-to-end LTE. Dockerized and emulated radio over shared memory.
+- [**261**Star][3y] [Py] [pablocelayes/rsa-wiener-attack](https://github.com/pablocelayes/rsa-wiener-attack) A Python implementation of the Wiener attack on RSA public-key encryption scheme.
+- [**261**Star][3m] [Py] [no0be/dnslivery](https://github.com/no0be/dnslivery) Easy files and payloads delivery over DNS
+- [**261**Star][7d] [C++] [niemand-sec/anticheat-testing-framework](https://github.com/niemand-sec/anticheat-testing-framework) Framework to test any Anti-Cheat
- [**261**Star][5y] [C] [mysql/mysql-proxy](https://github.com/mysql/mysql-proxy) MySQL Proxy is a simple program that sits between your client and MySQL server(s) and that can monitor, analyze or transform their communication. Its flexibility allows for a wide variety of uses, including load balancing, failover, query analysis, query filtering and modification, and many more.
-- [**261**Star][1y] [PHP] [mrsqar-ye/badmod](https://github.com/mrsqar-ye/badmod) CMS auto detect and exploit.
-- [**261**Star][2y] [Java] [maxcamillo/android-keystore-password-recover](https://github.com/maxcamillo/android-keystore-password-recover) Automatically exported from code.google.com/p/android-keystore-password-recover
-- [**261**Star][3y] [Py] [mame82/duck2spark](https://github.com/mame82/duck2spark) Converter for raw RubberDucky payloads to Digispark Arduino IDE Sketch source.
+- [**261**Star][9m] [C] [landhb/hideprocess](https://github.com/landhb/hideprocess) A basic Direct Kernel Object Manipulation rootkit that removes a process from the EPROCESS list, hiding it from the Task Manager
- [**261**Star][3y] [jmpews/pwn2exploit](https://github.com/jmpews/pwn2exploit) all mine papers, pwn & exploit
-- [**261**Star][1y] [PowerShell] [fox-it/invoke-aclpwn](https://github.com/fox-it/invoke-aclpwn)
-- [**261**Star][7d] [Py] [firstlookmedia/gpgsync](https://github.com/firstlookmedia/gpgsync) let users always have up-to-date OpenPGP public keys for other members of their organization.
+- [**261**Star][7m] [JS] [jesusprubio/strong-node](https://github.com/jesusprubio/strong-node)
- [**261**Star][1m] [Py] [felixweyne/imaginaryc2](https://github.com/felixweyne/imaginaryc2) Imaginary C2 is a python tool which aims to help in the behavioral (network) analysis of malware. Imaginary C2 hosts a HTTP server which captures HTTP requests towards selectively chosen domains/IPs. Additionally, the tool aims to make it easy to replay captured Command-and-Control responses/served payloads.
-- [**261**Star][24d] [C] [eua/wxhexeditor](https://github.com/eua/wxhexeditor) wxHexEditor official GIT repo
+- [**261**Star][1y] [C++] [ewhitehats/invisiblepersistence](https://github.com/ewhitehats/invisiblepersistence) Persisting in the Windows registry "invisibly"
- [**261**Star][3y] [Py] [ecthros/pina-colada](https://github.com/ecthros/pina-colada) A powerful and extensible wireless drop box
-- [**261**Star][6m] [Batchfile] [diogo-fernan/ir-rescue](https://github.com/diogo-fernan/ir-rescue) A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.
-- [**261**Star][7m] [Go] [cloudfoundry/java-buildpack-memory-calculator](https://github.com/cloudfoundry/java-buildpack-memory-calculator) Cloud Foundry JVM Memory Calculator
-- [**261**Star][1y] [C++] [chadski/sharpneedle](https://github.com/chadski/sharpneedle) Inject C# code into a running process
-- [**261**Star][4m] [Py] [azure/azure-storage-python](https://github.com/azure/azure-storage-python) Microsoft Azure Storage Library for Python
-- [**260**Star][16d] [Dockerfile] [pengchujin/v2raydocker](https://github.com/pengchujin/v2raydocker) 一键v2ray ws + tls 方便就完事了
-- [**260**Star][7y] [C++] [sin5678/gh0st](https://github.com/sin5678/gh0st) a open source remote administrator tool
-- [**260**Star][2m] [Py] [yzddmr6/webcrack](https://github.com/yzddmr6/webcrack) 网站后台弱口令/万能密码批量检测工具
-- [**260**Star][4m] [Go] [skx/tunneller](https://github.com/skx/tunneller) Allow internal services, running on localhost, to be accessed over the internet..
-- [**260**Star][1y] [JS] [roccomuso/netcat](https://github.com/roccomuso/netcat) Netcat client and server modules written in pure Javascript for Node.j
-- [**260**Star][7y] [C] [quarkslab/quarkspwdump](https://github.com/quarkslab/quarkspwdump) Dump various types of Windows credentials without injecting in any process.
-- [**260**Star][5m] [C++] [niemand-sec/anticheat-testing-framework](https://github.com/niemand-sec/anticheat-testing-framework) Framework for testing any Anti-Cheat
+- [**261**Star][3y] [Py] [dorneanu/smalisca](https://github.com/dorneanu/smalisca) Static Code Analysis for Smali files
+- [**261**Star][6d] [Go] [carbonblack/binee](https://github.com/carbonblack/binee) binary emulation environment
+- [**261**Star][3m] [Py] [amimo/dcc](https://github.com/amimo/dcc) DCC (Dex-to-C Compiler) is method-based aot compiler that can translate DEX code to C code.
+- [**260**Star][2y] [C#] [v2ray/v2rayn](https://github.com/v2ray/v2rayn) A Windows GUI client for V2Ray.
+- [**260**Star][11m] [Py] [hysnsec/devsecops-studio](https://github.com/hysnsec/DevSecOps-Studio) DevSecOps Distribution - Virtual Environment to learn DevSecOps
+- [**260**Star][3m] [Py] [m4ll0k/konan](https://github.com/m4ll0k/Konan) Konan - Advanced Web Application Dir Scanner
+- [**260**Star][4m] [payloadbox/command-injection-payload-list](https://github.com/payloadbox/command-injection-payload-list)
+- [**260**Star][2d] [Go] [wanchain/go-wanchain](https://github.com/wanchain/go-wanchain) Wanchain Client Source Code
+- [**260**Star][7m] [Py] [quitten/doser.py](https://github.com/quitten/doser.py) DoS tool for HTTP requests (inspired by hulk but has more functionalities)
- [**260**Star][11m] [C] [nbulischeck/tyton](https://github.com/nbulischeck/tyton) Kernel-Mode Rootkit Hunter
-- [**260**Star][7m] [Shell] [lieanu/libcsearcher](https://github.com/lieanu/libcsearcher) glibc offset search for ctf.
-- [**260**Star][9m] [C] [landhb/hideprocess](https://github.com/landhb/hideprocess) A basic Direct Kernel Object Manipulation rootkit that removes a process from the EPROCESS list, hiding it from the Task Manager
-- [**260**Star][3y] [insidetrust/statistically-likely-usernames](https://github.com/insidetrust/statistically-likely-usernames) Wordlists for creating statistically likely username lists for use in password attacks and security testing
-- [**260**Star][1y] [C++] [ewhitehats/invisiblepersistence](https://github.com/ewhitehats/invisiblepersistence) Persisting in the Windows registry "invisibly"
-- [**260**Star][2y] [Py] [cryptolok/morphaes](https://github.com/cryptolok/morphaes) IDPS & SandBox & AntiVirus STEALTH KILLER. MorphAES is the world's first polymorphic shellcode engine, with metamorphic properties and capability to bypass sandboxes, which makes it undetectable for an IDPS, it's cross-platform as well and library-independent.
+- [**260**Star][3d] [Java] [mr-xn/penetration_testing_poc](https://github.com/mr-xn/penetration_testing_poc) About penetration-testing python-script poc html-poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce
- [**260**Star][6m] [Py] [andsens/bootstrap-vz](https://github.com/andsens/bootstrap-vz) Bootstrap Debian images for virtualized environments
- [**260**Star][1y] [C++] [alpha1ab/cve-2018-8120](https://github.com/alpha1ab/cve-2018-8120) CVE-2018-8120 Exploit for Win2003 Win2008 WinXP Win7
-- [**259**Star][2y] [C#] [v2ray/v2rayn](https://github.com/v2ray/v2rayn) A Windows GUI client for V2Ray.
-- [**259**Star][11m] [Py] [hysnsec/devsecops-studio](https://github.com/hysnsec/DevSecOps-Studio) DevSecOps Distribution - Virtual Environment to learn DevSecOps
-- [**259**Star][3y] [Py] [pablocelayes/rsa-wiener-attack](https://github.com/pablocelayes/rsa-wiener-attack) A Python implementation of the Wiener attack on RSA public-key encryption scheme.
+- [**259**Star][7m] [Py] [s0md3v/sqlmate](https://github.com/s0md3v/sqlmate) A friend of SQLmap which will do what you always expected from SQLmap.
+- [**259**Star][1y] [Py] [wipi-hunter/pidense](https://github.com/wipi-hunter/pidense) Monitor illegal wireless network activities.
+- [**259**Star][28d] [Ruby] [rapid7/recog](https://github.com/rapid7/recog) Pattern recognition for hosts, services, and content
+- [**259**Star][3d] [Ruby] [puppetlabs/puppetlabs-firewall](https://github.com/puppetlabs/puppetlabs-firewall) Puppet Firewall Module
+- [**259**Star][4y] [Py] [netxfly/passive_scan](https://github.com/netxfly/passive_scan) 基于http代理的web漏洞扫描器的实现
+- [**259**Star][6m] [Py] [mbro95/portablecellnetwork](https://github.com/mbro95/portablecellnetwork) Utilize a Raspberry Pi and a Nuand BladeRF to generate your own portable local cell network
- [**259**Star][4y] [Ruby] [lubyruffy/fofa](https://github.com/lubyruffy/fofa) fofa website
-- [**259**Star][3m] [Py] [giantbranch/python-hacker-code](https://github.com/giantbranch/python-hacker-code) 《python黑帽子:黑客与渗透测试编程之道》代码及实验文件,字典等
-- [**259**Star][11d] [C++] [fransbouma/injectablegenericcamerasystem](https://github.com/fransbouma/injectablegenericcamerasystem) This is a generic camera system to be used as the base for cameras for taking screenshots within games. The main purpose of the system is to hijack the in-game 3D camera by overwriting values in its camera structure with our own values so we can control where the camera is located, it's pitch/yaw/roll values, its FoV and the camera's look vector.
-- [**259**Star][3m] [Smali] [bin4ry/deejayeye-modder](https://github.com/bin4ry/deejayeye-modder)
-- [**258**Star][7m] [Py] [s0md3v/sqlmate](https://github.com/s0md3v/sqlmate) A friend of SQLmap which will do what you always expected from SQLmap.
-- [**258**Star][26d] [Ruby] [rapid7/recog](https://github.com/rapid7/recog) Pattern recognition for hosts, services, and content
-- [**258**Star][7m] [Py] [quitten/doser.py](https://github.com/quitten/doser.py) DoS tool for HTTP requests (inspired by hulk but has more functionalities)
-- [**258**Star][4y] [Py] [netxfly/passive_scan](https://github.com/netxfly/passive_scan) 基于http代理的web漏洞扫描器的实现
-- [**258**Star][6m] [Py] [mbro95/portablecellnetwork](https://github.com/mbro95/portablecellnetwork) Utilize a Raspberry Pi and a Nuand BladeRF to generate your own portable local cell network
-- [**258**Star][4m] [PHP] [lawrenceamer/0xsp-mongoose](https://github.com/lawrenceamer/0xsp-mongoose) Privilege Escalation Enumeration Toolkit (64/32 ) , fast , intelligent enumeration with Web API integration . Mastering Your Own Finding
+- [**259**Star][4m] [Py] [giantbranch/python-hacker-code](https://github.com/giantbranch/python-hacker-code) 《python黑帽子:黑客与渗透测试编程之道》代码及实验文件,字典等
+- [**259**Star][8m] [Elixir] [elixiumnetwork/elixium_core](https://github.com/elixiumnetwork/elixium_core) A privacy-preserving decentralized application network
+- [**259**Star][2y] [Py] [cryptolok/morphaes](https://github.com/cryptolok/morphaes) IDPS & SandBox & AntiVirus STEALTH KILLER. MorphAES is the world's first polymorphic shellcode engine, with metamorphic properties and capability to bypass sandboxes, which makes it undetectable for an IDPS, it's cross-platform as well and library-independent.
+- [**259**Star][2y] [Py] [countercept/python-exe-unpacker](https://github.com/countercept/python-exe-unpacker) A helper script for unpacking and decompiling EXEs compiled from python code.
+- [**258**Star][7y] [eugeneching/ida-consonance](https://github.com/eugeneching/ida-consonance) Consonance, a dark color theme for IDA.
+- [**258**Star][1y] [Py] [pycqa/mccabe](https://github.com/pycqa/mccabe) McCabe complexity checker for Python
+- [**258**Star][2y] [Go] [netxfly/xsec-ip-database](https://github.com/netxfly/xsec-ip-database) Malicious ip database
- [**258**Star][7y] [Java] [isecpartners/android-ssl-bypass](https://github.com/isecpartners/android-ssl-bypass) Black box tool to bypass SSL verification on Android, even when pinning is used.
- [**258**Star][2m] [PHP] [incredibleindishell/ssrf_vulnerable_lab](https://github.com/incredibleindishell/ssrf_vulnerable_lab) This Lab contain the sample codes which are vulnerable to Server-Side Request Forgery attack
- [**258**Star][3y] [Perl] [fuzyll/defcon-vm](https://github.com/fuzyll/defcon-vm) Files from my DEFCON CTF VM.
-- [**258**Star][3y] [Java] [flankerhqd/jaadas](https://github.com/flankerhqd/jaadas) Joint Advanced Defect assEsment for android applications
-- [**258**Star][27d] [Py] [diogo-fernan/malsub](https://github.com/diogo-fernan/malsub) A Python RESTful API framework for online malware analysis and threat intelligence services.
+- [**258**Star][29d] [Py] [diogo-fernan/malsub](https://github.com/diogo-fernan/malsub) A Python RESTful API framework for online malware analysis and threat intelligence services.
- [**258**Star][1y] [C++] [dga-mi-ssi/yaco](https://github.com/dga-mi-ssi/yaco) a Hex-Rays IDA plugin enabling collaborative reverse-engineering on IDA databases for multiple users
-- [**258**Star][12d] [Go] [carbonblack/binee](https://github.com/carbonblack/binee) binary emulation environment
+- [**258**Star][1m] [Py] [cedricbonhomme/stegano](https://github.com/cedricbonhomme/stegano) Stegano is a pure Python steganography module.
+- [**258**Star][3y] [C#] [brandonprry/gray_hat_csharp_code](https://github.com/brandonprry/gray_hat_csharp_code) This repository contains full code examples from the book Gray Hat C#
+- [**258**Star][3d] [Smali] [bin4ry/deejayeye-modder](https://github.com/bin4ry/deejayeye-modder)
+- [**258**Star][2m] [C] [basil00/torwall](https://github.com/basil00/torwall) Tallow - Transparent Tor for Windows
+- [**258**Star][30d] [anyeduke/enterprise-security-skill](https://github.com/anyeduke/enterprise-security-skill) 用于记录企业安全规划,建设,运营,攻防的相关资源
+- [**258**Star][2d] [HTML] [ansible/community](https://github.com/ansible/community) This repository is for management of all Ansible community related initiatives.
+- [**257**Star][21d] [C] [radareorg/r2dec-js](https://github.com/radareorg/r2dec-js) radare2 plugin - converts asm to pseudo-C code.
- [**257**Star][2m] [C#] [orlikoski/cylr](https://github.com/orlikoski/CyLR) CyLR - Live Response Collection Tool
- [**257**Star][3m] [Rust] [radareorg/radeco](https://github.com/radareorg/radeco) radare2-based decompiler and symbol executor
-- [**257**Star][7y] [eugeneching/ida-consonance](https://github.com/eugeneching/ida-consonance) Consonance, a dark color theme for IDA.
+- [**257**Star][2y] [Go] [zboya/gomitmproxy](https://github.com/zboya/gomitmproxy) gomitmproxy是想用golang语言实现[mitmproxy],实现http(s)代理
+- [**257**Star][21d] [C] [radareorg/r2dec-js](https://github.com/radareorg/r2dec-js) radare2 plugin - converts asm to pseudo-C code.
+- [**257**Star][2y] [voulnet/cve-2017-8759-exploit-sample](https://github.com/voulnet/cve-2017-8759-exploit-sample) Running CVE-2017-8759 exploit sample.
+- [**257**Star][2y] [Py] [thetwitchy/xxer](https://github.com/thetwitchy/xxer) A blind XXE injection callback handler. Uses HTTP and FTP to extract information. Originally written in Ruby by ONsec-Lab.
- [**257**Star][2m] [Go] [sachaos/tcpterm](https://github.com/sachaos/tcpterm) tcpterm is a packet visualizer in TUI.
-- [**257**Star][18d] [rustsec/advisory-db](https://github.com/rustsec/advisory-db) Security advisory database for Rust crates published through crates.io
-- [**257**Star][1y] [Py] [pycqa/mccabe](https://github.com/pycqa/mccabe) McCabe complexity checker for Python
+- [**257**Star][20d] [rustsec/advisory-db](https://github.com/rustsec/advisory-db) Security advisory database for Rust crates published through crates.io
+- [**257**Star][4m] [Py] [rrwick/basecalling-comparison](https://github.com/rrwick/basecalling-comparison) A comparison of different Oxford Nanopore basecallers
+- [**257**Star][3y] [Py] [rolisoft/reconscan](https://github.com/rolisoft/reconscan) Network reconnaissance and vulnerability assessment tools.
+- [**257**Star][3y] [Py] [rockymeza/wifi](https://github.com/rockymeza/wifi) [unmaintained] WiFi tools for linux
+- [**257**Star][18d] [C++] [rob--/memoryjs](https://github.com/rob--/memoryjs) Read and write process memory in NodeJS (finally!)
- [**257**Star][2m] [C++] [poweradminllc/paexec](https://github.com/poweradminllc/paexec) Remote execution, like PsExec
- [**257**Star][5y] [Py] [pbartek/pyobd-pi](https://github.com/pbartek/pyobd-pi) Fixes to pyobd for Raspberry Pi / BeagleBone Black
- [**257**Star][10m] [C] [p0f/p0f](https://github.com/p0f/p0f) p0f unofficial git repo
-- [**257**Star][2y] [Go] [netxfly/xsec-ip-database](https://github.com/netxfly/xsec-ip-database) Malicious ip database
-- [**257**Star][27d] [Py] [frint0/email-enum](https://github.com/frint0/email-enum) Email-Enum searches mainstream websites and tells you if an email is registered! #DEPRECATED
-- [**257**Star][2y] [Py] [countercept/python-exe-unpacker](https://github.com/countercept/python-exe-unpacker) A helper script for unpacking and decompiling EXEs compiled from python code.
-- [**257**Star][1m] [Py] [cedricbonhomme/stegano](https://github.com/cedricbonhomme/stegano) Stegano is a pure Python steganography module.
-- [**257**Star][3y] [C#] [brandonprry/gray_hat_csharp_code](https://github.com/brandonprry/gray_hat_csharp_code) This repository contains full code examples from the book Gray Hat C#
-- [**256**Star][19d] [C] [radareorg/r2dec-js](https://github.com/radareorg/r2dec-js) radare2 plugin - converts asm to pseudo-C code.
-- [**256**Star][3m] [Py] [m4ll0k/konan](https://github.com/m4ll0k/Konan) Konan - Advanced Web Application Dir Scanner
-- [**256**Star][2y] [Go] [zboya/gomitmproxy](https://github.com/zboya/gomitmproxy) gomitmproxy是想用golang语言实现[mitmproxy],实现http(s)代理
-- [**256**Star][19d] [C] [radareorg/r2dec-js](https://github.com/radareorg/r2dec-js) radare2 plugin - converts asm to pseudo-C code.
-- [**256**Star][2y] [voulnet/cve-2017-8759-exploit-sample](https://github.com/voulnet/cve-2017-8759-exploit-sample) Running CVE-2017-8759 exploit sample.
+- [**257**Star][2y] [Java] [l-jinbin/apksignaturekiller](https://github.com/l-jinbin/apksignaturekiller) 一键破解APK签名校验
+- [**257**Star][12m] [Shell] [karek314/macos-home-call-drop](https://github.com/karek314/macos-home-call-drop) Simple shell script to fix macOS privacy issues and remove mostly useless macOS calls to cupertino
+- [**257**Star][3y] [PHP] [hackademic/hackademic](https://github.com/hackademic/hackademic) the main hackademic code repository
+- [**257**Star][14d] [Py] [guimaizi/get_domain](https://github.com/guimaizi/get_domain) domain collect and monitor
+- [**257**Star][29d] [Py] [frint0/email-enum](https://github.com/frint0/email-enum) Email-Enum searches mainstream websites and tells you if an email is registered! #DEPRECATED
+- [**257**Star][3y] [Java] [flankerhqd/jaadas](https://github.com/flankerhqd/jaadas) Joint Advanced Defect assEsment for android applications
+- [**257**Star][1y] [Java] [danicuestasuarez/nmapgui](https://github.com/danicuestasuarez/nmapgui) Advanced Graphical User Interface for NMap
+- [**257**Star][2y] [Py] [chrizator/netattack2](https://github.com/chrizator/netattack2) An advanced network scan and attack script based on GUI. 2nd version of no-GUI netattack.
+- [**257**Star][1y] [Py] [berzerk0/bewgor](https://github.com/berzerk0/bewgor) Bull's Eye Wordlist Generator - Does your password rely on predictable patterns of accessible info?
+- [**256**Star][10m] [Py] [crytic/ethersplay](https://github.com/crytic/ethersplay) EVM dissassembler
+- [**256**Star][7m] [Py] [xairy/easy-linux-pwn](https://github.com/xairy/easy-linux-pwn) A set of Linux binary exploitation tasks for beginners on various architectures
- [**256**Star][2y] [Py] [unamer/cve-2017-11882](https://github.com/unamer/cve-2017-11882) CVE-2017-11882 Exploit accepts over 17k bytes long command/code in maximum.
-- [**256**Star][2y] [TypeScript] [srar/memcachedos](https://github.com/srar/memcachedos) Memcache 反射DDOS攻击脚本经供学习参考使用
-- [**256**Star][7d] [C++] [souffle-lang/souffle](https://github.com/souffle-lang/souffle) Soufflé is a variant of Datalog for tool designers crafting analyses in Horn clauses. Soufflé synthesizes a native parallel C++ program from a logic specification.
-- [**256**Star][2m] [Go] [sensepost/godoh](https://github.com/sensepost/godoh) A DNS-over-HTTPS Command & Control Proof of Concept
+- [**256**Star][3y] [Py] [thomastjdev/wmd](https://github.com/thomastjdev/wmd) Python framework for IT security tools
+- [**256**Star][2y] [TS] [srar/memcachedos](https://github.com/srar/memcachedos) Memcache 反射DDOS攻击脚本经供学习参考使用
+- [**256**Star][4y] [Py] [smaash/snitch](https://github.com/smaash/snitch) information gathering via dorks
- [**256**Star][5m] [C] [rub-syssec/omen](https://github.com/rub-syssec/omen) Ordered Markov ENumerator - Password Guesser
-- [**256**Star][4m] [Py] [rrwick/basecalling-comparison](https://github.com/rrwick/basecalling-comparison) A comparison of different Oxford Nanopore basecallers
-- [**256**Star][2y] [Py] [rolisoft/reconscan](https://github.com/rolisoft/reconscan) Network reconnaissance and vulnerability assessment tools.
-- [**256**Star][3y] [Py] [rockymeza/wifi](https://github.com/rockymeza/wifi) [unmaintained] WiFi tools for linux
-- [**256**Star][12m] [Shell] [karek314/macos-home-call-drop](https://github.com/karek314/macos-home-call-drop) Simple shell script to fix macOS privacy issues and remove mostly useless macOS calls to cupertino
-- [**256**Star][3y] [PHP] [hackademic/hackademic](https://github.com/hackademic/hackademic) the main hackademic code repository
-- [**256**Star][1m] [Py] [ghostop14/sparrow-wifi](https://github.com/ghostop14/sparrow-wifi) Next-Gen GUI-based WiFi and Bluetooth Analyzer for Linux
-- [**256**Star][3y] [Py] [dorneanu/smalisca](https://github.com/dorneanu/smalisca) Static Code Analysis for Smali files
-- [**256**Star][1y] [Java] [danicuestasuarez/nmapgui](https://github.com/danicuestasuarez/nmapgui) Advanced Graphical User Interface for NMap
-- [**256**Star][2m] [Shell] [cytoscape/cytoscape](https://github.com/cytoscape/cytoscape) an open source platform for network analysis and visualization
-- [**256**Star][2y] [Py] [chrizator/netattack2](https://github.com/chrizator/netattack2) An advanced network scan and attack script based on GUI. 2nd version of no-GUI netattack.
-- [**256**Star][1y] [Py] [berzerk0/bewgor](https://github.com/berzerk0/bewgor) Bull's Eye Wordlist Generator - Does your password rely on predictable patterns of accessible info?
-- [**256**Star][2m] [C] [basil00/torwall](https://github.com/basil00/torwall) Tallow - Transparent Tor for Windows
-- [**256**Star][28d] [anyeduke/enterprise-security-skill](https://github.com/anyeduke/enterprise-security-skill) 用于记录企业安全规划,建设,运营,攻防的相关资源
-- [**255**Star][11d] [HTML] [vernesong/openclash](https://github.com/vernesong/openclash) A Clash Client For OpenWrt
+- [**256**Star][2d] [Java] [ripe-ncc/whois](https://github.com/ripe-ncc/whois) RIPE Database whois code repository
+- [**256**Star][3m] [Py] [rhinosecuritylabs/iprotate_burp_extension](https://github.com/rhinosecuritylabs/iprotate_burp_extension) Extension for Burp Suite which uses AWS API Gateway to rotate your IP on every request.
+- [**256**Star][10m] [C++] [ramadhanamizudin/malware](https://github.com/ramadhanamizudin/malware) Malware Samples. Uploaded to GitHub for those want to analyse the code. Code mostly from:
+- [**256**Star][7d] [Py] [minio/minio-py](https://github.com/minio/minio-py) MinIO Client SDK for Python
+- [**256**Star][1y] [Py] [m4ll0k/galileo](https://github.com/m4ll0k/galileo) Galileo - Web Application Audit Framework
+- [**256**Star][9m] [Go] [erbbysam/dnsgrep](https://github.com/erbbysam/dnsgrep) Quickly Search Large DNS Datasets
+- [**256**Star][3m] [Py] [clemfromspace/scrapy-selenium](https://github.com/clemfromspace/scrapy-selenium) Scrapy middleware to handle javascript pages using selenium
+- [**256**Star][2y] [Ruby] [bcoles/ssrf_proxy](https://github.com/bcoles/ssrf_proxy) SSRF Proxy facilitates tunneling HTTP communications through servers vulnerable to Server-Side Request Forgery.
+- [**256**Star][2m] [C] [a2nkf/macos-kernel-exploit](https://github.com/a2nkf/macos-kernel-exploit) macOS Kernel Exploit for CVE-2019-8781. Credit for the bug goes to
- [**255**Star][6m] [nsacyber/hardware-and-firmware-security-guidance](https://github.com/nsacyber/Hardware-and-Firmware-Security-Guidance) Guidance for the Spectre, Meltdown, Speculative Store Bypass, Rogue System Register Read, Lazy FP State Restore, Bounds Check Bypass Store, TLBleed, and L1TF/Foreshadow vulnerabilities as well as general hardware and firmware security guidance. #nsacyber
- [**255**Star][3m] [Py] [lorentzenman/sheepl](https://github.com/lorentzenman/sheepl) Creating realistic user behaviour for supporting tradecraft development within lab environments
-- [**255**Star][10m] [Py] [crytic/ethersplay](https://github.com/crytic/ethersplay) EVM dissassembler
-- [**255**Star][1y] [Py] [wipi-hunter/pidense](https://github.com/wipi-hunter/pidense) Monitor illegal wireless network activities.
+- [**255**Star][5m] [zhaoweiho/web-sec-interview](https://github.com/zhaoweiho/web-sec-interview) Information Security (Web Security/Penetration Testing Direction) Interview Questions/Solutions 信息安全(Web安全/渗透测试方向)面试题/解题思路
- [**255**Star][3y] [C] [w-shackleton/android-netspoof](https://github.com/w-shackleton/android-netspoof) Network Spoofer
-- [**255**Star][3y] [Py] [thomastjdev/wmd](https://github.com/thomastjdev/wmd) Python framework for IT security tools
-- [**255**Star][2y] [Py] [thetwitchy/xxer](https://github.com/thetwitchy/xxer) A blind XXE injection callback handler. Uses HTTP and FTP to extract information. Originally written in Ruby by ONsec-Lab.
- [**255**Star][1y] [Py] [stephenmcd/hot-redis](https://github.com/stephenmcd/hot-redis) Rich Python data types for Redis
-- [**255**Star][16d] [C++] [rob--/memoryjs](https://github.com/rob--/memoryjs) Read and write process memory in NodeJS (finally!)
+- [**255**Star][16d] [Java] [spring-cloud/spring-cloud-task](https://github.com/spring-cloud/spring-cloud-task) Short lived microservices with Spring Batch
+- [**255**Star][4y] [C] [roxas75/rxtools](https://github.com/roxas75/rxtools) rxTools
+- [**255**Star][3m] [Py] [qunarcorp/open_dnsdb](https://github.com/qunarcorp/open_dnsdb) OpenDnsdb 是去哪儿网OPS团队开源的基于Python语言的DNS管理系统
+- [**255**Star][3m] [HTML] [pagerduty/security-training](https://github.com/pagerduty/security-training) Public version of PagerDuty's employee security training courses.
- [**255**Star][5y] [Vim script] [ngmy/vim-rubocop](https://github.com/ngmy/vim-rubocop) The Vim RuboCop plugin runs RuboCop and displays the results in Vim
-- [**255**Star][28d] [Py] [minio/minio-py](https://github.com/minio/minio-py) MinIO Client SDK for Python
-- [**255**Star][1y] [Py] [m4ll0k/galileo](https://github.com/m4ll0k/galileo) Galileo - Web Application Audit Framework
-- [**255**Star][2y] [Java] [l-jinbin/apksignaturekiller](https://github.com/l-jinbin/apksignaturekiller) 一键破解APK签名校验
-- [**255**Star][7m] [JS] [jesusprubio/strong-node](https://github.com/jesusprubio/strong-node)
-- [**255**Star][2y] [Ruby] [bcoles/ssrf_proxy](https://github.com/bcoles/ssrf_proxy) SSRF Proxy facilitates tunneling HTTP communications through servers vulnerable to Server-Side Request Forgery.
-- [**255**Star][2m] [C] [a2nkf/macos-kernel-exploit](https://github.com/a2nkf/macos-kernel-exploit) macOS Kernel Exploit for CVE-2019-8781. Credit for the bug goes to
-- [**254**Star][2y] [PowerShell] [p3nt4/invoke-piper](https://github.com/p3nt4/Invoke-Piper) Forward local or remote tcp ports through SMB pipes.
-- [**254**Star][4m] [payloadbox/command-injection-payload-list](https://github.com/payloadbox/command-injection-payload-list)
-- [**254**Star][7m] [Py] [xairy/easy-linux-pwn](https://github.com/xairy/easy-linux-pwn) A set of Linux binary exploitation tasks for beginners on various architectures
-- [**254**Star][14d] [Java] [spring-cloud/spring-cloud-task](https://github.com/spring-cloud/spring-cloud-task) Short lived microservices with Spring Batch
+- [**255**Star][1y] [Shell] [m4ll0k/autonse](https://github.com/m4ll0k/autonse) Massive NSE (Nmap Scripting Engine) AutoSploit and AutoScanner
+- [**255**Star][3y] [Py] [lijiejie/iis_shortname_scanner](https://github.com/lijiejie/iis_shortname_scanner) an IIS shortname Scanner
+- [**255**Star][3m] [Jupyter Notebook] [jmartinezheras/2018-machinelearning-lectures-esa](https://github.com/jmartinezheras/2018-machinelearning-lectures-esa) Machine Learning Lectures at the European Space Agency (ESA) in 2018
+- [**255**Star][2m] [Shell] [cytoscape/cytoscape](https://github.com/cytoscape/cytoscape) an open source platform for network analysis and visualization
+- [**255**Star][3y] [Py] [airsage/petrel](https://github.com/airsage/petrel) Tools for writing, submitting, debugging, and monitoring Storm topologies in pure Python
+- [**254**Star][2y] [PS] [p3nt4/invoke-piper](https://github.com/p3nt4/Invoke-Piper) Forward local or remote tcp ports through SMB pipes.
+- [**254**Star][2y] [PS] [xorrior/randomps-scripts](https://github.com/xorrior/randomps-scripts) PowerShell Scripts focused on Post-Exploitation Capabilities
+- [**254**Star][1y] [Py] [wenfengshi/ddos-dos-tools](https://github.com/wenfengshi/ddos-dos-tools) some sort of ddos-tools
+- [**254**Star][4m] [Racket] [tyrchen/racket-book](https://github.com/tyrchen/racket-book) My racket study documentation
- [**254**Star][7y] [Java] [sporst/swfretools](https://github.com/sporst/swfretools) SWF file reverse engineering tools
-- [**254**Star][7d] [Java] [ripe-ncc/whois](https://github.com/ripe-ncc/whois) RIPE Database whois code repository
-- [**254**Star][3m] [Py] [rhinosecuritylabs/iprotate_burp_extension](https://github.com/rhinosecuritylabs/iprotate_burp_extension) Extension for Burp Suite which uses AWS API Gateway to rotate your IP on every request.
-- [**254**Star][3m] [HTML] [pagerduty/security-training](https://github.com/pagerduty/security-training) Public version of PagerDuty's employee security training courses.
-- [**254**Star][3y] [Py] [lijiejie/iis_shortname_scanner](https://github.com/lijiejie/iis_shortname_scanner) an IIS shortname Scanner
+- [**254**Star][3m] [Shell] [projectzeroindia/cve-2019-11510](https://github.com/projectzeroindia/cve-2019-11510) Exploit for Arbitrary File Read on Pulse Secure SSL VPN (CVE-2019-11510)
+- [**254**Star][5m] [Go] [lesnuages/hershell](https://github.com/lesnuages/hershell) Multiplatform reverse shell generator
+- [**254**Star][7m] [Go] [lavalamp-/ipv666](https://github.com/lavalamp-/ipv666) Golang IPv6 address enumeration
- [**254**Star][1y] [PHP] [interference-security/dvws](https://github.com/interference-security/dvws) OWSAP Damn Vulnerable Web Sockets (DVWS) is a vulnerable web application which works on web sockets for client-server communication.
+- [**254**Star][22d] [Py] [google/docker-explorer](https://github.com/google/docker-explorer) A tool to help forensicate offline docker acquisitions
- [**254**Star][3y] [Haskell] [galoisinc/haskell-tor](https://github.com/galoisinc/haskell-tor) A Haskell implementation of the Tor protocol.
- [**254**Star][3m] [PHP] [dotboris/vuejs-serverside-template-xss](https://github.com/dotboris/vuejs-serverside-template-xss) Demo of a Vue.js app that mixes both clientside templates and serverside templates leading to an XSS vulnerability
-- [**254**Star][3y] [Py] [airsage/petrel](https://github.com/airsage/petrel) Tools for writing, submitting, debugging, and monitoring Storm topologies in pure Python
- [**254**Star][2y] [Py] [1n3/wordpress-xmlrpc-brute-force-exploit](https://github.com/1n3/wordpress-xmlrpc-brute-force-exploit) Wordpress XMLRPC System Multicall Brute Force Exploit (0day) by 1N3 @ CrowdShield
-- [**253**Star][8m] [Shell] [thelinuxchoice/saycheese](https://github.com/thelinuxchoice/saycheese) Grab target's webcam shots by link
-- [**253**Star][6m] [Shell] [ctfhacker/epictreasure](https://github.com/ctfhacker/EpicTreasure) Batteries included CTF VM
-- [**253**Star][5m] [zhaoweiho/web-sec-interview](https://github.com/zhaoweiho/web-sec-interview) Information Security (Web Security/Penetration Testing Direction) Interview Questions/Solutions 信息安全(Web安全/渗透测试方向)面试题/解题思路
-- [**253**Star][2y] [PowerShell] [xorrior/randomps-scripts](https://github.com/xorrior/randomps-scripts) PowerShell Scripts focused on Post-Exploitation Capabilities
-- [**253**Star][4m] [Racket] [tyrchen/racket-book](https://github.com/tyrchen/racket-book) My racket study documentation
-- [**253**Star][4y] [Py] [smaash/snitch](https://github.com/smaash/snitch) information gathering via dorks
-- [**253**Star][14d] [C] [proftpd/proftpd](https://github.com/proftpd/proftpd) a highly configurable FTP daemon for Unix and Unix-like operating systems
-- [**253**Star][26d] [C] [pbhogan/scrypt](https://github.com/pbhogan/scrypt) A Ruby gem with native C extension for the scrypt password hashing algorithm.
-- [**253**Star][1y] [Shell] [m4ll0k/autonse](https://github.com/m4ll0k/autonse) Massive NSE (Nmap Scripting Engine) AutoSploit and AutoScanner
-- [**253**Star][7m] [Go] [lavalamp-/ipv666](https://github.com/lavalamp-/ipv666) Golang IPv6 address enumeration
-- [**253**Star][3m] [Jupyter Notebook] [jmartinezheras/2018-machinelearning-lectures-esa](https://github.com/jmartinezheras/2018-machinelearning-lectures-esa) Machine Learning Lectures at the European Space Agency (ESA) in 2018
-- [**253**Star][13d] [C] [icing/mod_md](https://github.com/icing/mod_md) Let's Encrypt (ACME) support for Apache httpd
-- [**253**Star][20d] [Py] [google/docker-explorer](https://github.com/google/docker-explorer) A tool to help forensicate offline docker acquisitions
+- [**253**Star][2m] [Go] [ihciah/rabbit-tcp](https://github.com/ihciah/rabbit-tcp) A multi-connection TCP forwarder/accelerator
+- [**253**Star][9d] [PS] [bc-security/empire](https://github.com/bc-security/empire) Empire is a PowerShell and Python post-exploitation agent.
+- [**253**Star][3m] [C] [seemoo-lab/owl](https://github.com/seemoo-lab/owl) An open Apple Wireless Direct Link (AWDL) implementation written in C
+- [**253**Star][16d] [thelsa/cs-checklist](https://github.com/thelsa/cs-checklist) PC客户端(C-S架构)渗透测试checklist / Client side(C-S) penestration checklist
+- [**253**Star][1m] [TS] [tensorflow/tfjs-tsne](https://github.com/tensorflow/tfjs-tsne) a improved tSNE implementation that runs in the browser.
+- [**253**Star][3y] [Py] [rickey-g/fancybear](https://github.com/rickey-g/fancybear) Fancy Bear Source Code
+- [**253**Star][5d] [C] [proftpd/proftpd](https://github.com/proftpd/proftpd) a highly configurable FTP daemon for Unix and Unix-like operating systems
+- [**253**Star][28d] [C] [pbhogan/scrypt](https://github.com/pbhogan/scrypt) A Ruby gem with native C extension for the scrypt password hashing algorithm.
+- [**253**Star][12m] [Java] [owasp/owasp-java-encoder](https://github.com/owasp/owasp-java-encoder) The OWASP Java Encoder is a Java 1.5+ simple-to-use drop-in high-performance encoder class with no dependencies and little baggage. This project will help Java web developers defend against Cross Site Scripting!
+- [**253**Star][16d] [C] [icing/mod_md](https://github.com/icing/mod_md) Let's Encrypt (ACME) support for Apache httpd
+- [**253**Star][5d] [Py] [duo-labs/dlint](https://github.com/duo-labs/dlint) Dlint is a tool for encouraging best coding practices and helping ensure we're writing secure Python code.
- [**253**Star][4y] [Py] [danmcinerney/fakeap](https://github.com/danmcinerney/fakeap) Create fake AP in Kali with 1 command
+- [**253**Star][21d] [Py] [cloudflare/python-cloudflare](https://github.com/cloudflare/python-cloudflare) Python wrapper for the Cloudflare Client API v4
- [**253**Star][1y] [C] [benjamin-42/trident](https://github.com/benjamin-42/trident)
-- [**253**Star][14d] [HTML] [ansible/community](https://github.com/ansible/community) This repository is for management of all Ansible community related initiatives.
-- [**253**Star][3m] [Py] [amimo/dcc](https://github.com/amimo/dcc) DCC (Dex-to-C Compiler) is method-based aot compiler that can translate DEX code to C code.
-- [**252**Star][3m] [Shell] [sprov065/sprov-ui](https://github.com/sprov065/sprov-ui) 一个支持多协议多用户的v2ray Web面板
-- [**252**Star][12m] [C++] [comaeio/swishdbgext](https://github.com/comaeio/SwishDbgExt) Incident Response & Digital Forensics Debugging Extension
+- [**253**Star][2m] [Py] [b16f00t/whapa](https://github.com/b16f00t/whapa) WhatsApp Parser Toolset v1.14
+- [**253**Star][3d] [Jupyter Notebook] [aws-samples/aws-security-workshops](https://github.com/aws-samples/aws-security-workshops) A collection of the latest AWS Security workshops
+- [**252**Star][6m] [Shell] [ctfhacker/epictreasure](https://github.com/ctfhacker/EpicTreasure) Batteries included CTF VM
+- [**252**Star][1y] [C++] [comaeio/swishdbgext](https://github.com/comaeio/SwishDbgExt) Incident Response & Digital Forensics Debugging Extension
- [**252**Star][4y] [Shell] [nccgroup/vlan-hopping---frogger](https://github.com/nccgroup/vlan-hopping---frogger) Simple VLAN enumeration and hopping script.
- [**252**Star][1y] [C] [v-e-o/poc](https://github.com/v-e-o/poc) PoC of CVE/Exploit
-- [**252**Star][3y] [Py] [rickey-g/fancybear](https://github.com/rickey-g/fancybear) Fancy Bear Source Code
-- [**252**Star][10m] [C++] [ramadhanamizudin/malware](https://github.com/ramadhanamizudin/malware) Malware Samples. Uploaded to GitHub for those want to analyse the code. Code mostly from:
-- [**252**Star][3m] [Py] [qunarcorp/open_dnsdb](https://github.com/qunarcorp/open_dnsdb) OpenDnsdb 是去哪儿网OPS团队开源的基于Python语言的DNS管理系统
-- [**252**Star][11m] [Java] [owasp/owasp-java-encoder](https://github.com/owasp/owasp-java-encoder) The OWASP Java Encoder is a Java 1.5+ simple-to-use drop-in high-performance encoder class with no dependencies and little baggage. This project will help Java web developers defend against Cross Site Scripting!
-- [**252**Star][14d] [Vue] [nluedtke/linux_kernel_cves](https://github.com/nluedtke/linux_kernel_cves) Tracking CVEs for the linux Kernel
+- [**252**Star][4m] [Py] [thewhiteh4t/finalrecon](https://github.com/thewhiteh4t/finalrecon) OSINT Tool for All-In-One Web Reconnaissance
+- [**252**Star][4d] [ObjC] [strongbox-password-safe/strongbox](https://github.com/strongbox-password-safe/strongbox) A KeePass/Password Safe Client for iOS and OS X
+- [**252**Star][2d] [Vue] [nluedtke/linux_kernel_cves](https://github.com/nluedtke/linux_kernel_cves) Tracking CVEs for the linux Kernel
- [**252**Star][6m] [HTML] [mikewest/http-state-tokens](https://github.com/mikewest/http-state-tokens) Incrementally better HTTP state management.
-- [**252**Star][1y] [PowerShell] [mdsecresearch/lyncsniper](https://github.com/mdsecresearch/lyncsniper) A tool for penetration testing Skype for Business and Lync deployments
+- [**252**Star][1y] [PS] [mdsecresearch/lyncsniper](https://github.com/mdsecresearch/lyncsniper) a tool for penetration testing Lync and Skype for Business deployments hosted either on premise or in Office 365.
- [**252**Star][10m] [jeffzh3ng/insectsawake](https://github.com/jeffzh3ng/insectsawake) Network Vulnerability Scanner
- [**252**Star][5m] [Py] [jcesarstef/dotdotslash](https://github.com/jcesarstef/dotdotslash) Search for Directory Traversal Vulnerabilities
+- [**252**Star][7m] [Py] [itskindred/procspy](https://github.com/itskindred/procspy) Python tool that monitors and logs user-run commands on a Linux system for either offensive or defensive purposes..
+- [**252**Star][9m] [Visual Basic .NET] [houjingyi233/office-exploit-case-study](https://github.com/houjingyi233/office-exploit-case-study)
- [**252**Star][2y] [C] [hfiref0x/cve-2015-1701](https://github.com/hfiref0x/cve-2015-1701) Win32k LPE vulnerability used in APT attack
-- [**252**Star][9m] [Go] [erbbysam/dnsgrep](https://github.com/erbbysam/dnsgrep) Quickly Search Large DNS Datasets
-- [**252**Star][19d] [Py] [cloudflare/python-cloudflare](https://github.com/cloudflare/python-cloudflare) Python wrapper for the Cloudflare Client API v4
-- [**252**Star][3m] [Py] [clemfromspace/scrapy-selenium](https://github.com/clemfromspace/scrapy-selenium) Scrapy middleware to handle javascript pages using selenium
-- [**251**Star][4y] [Py] [whitepacket/zib-trojan](https://github.com/whitepacket/zib-trojan) The Open Tor Botnet (ZIB); Python-based forever-FUD IRC Trojan
-- [**251**Star][1m] [TypeScript] [tensorflow/tfjs-tsne](https://github.com/tensorflow/tfjs-tsne) a improved tSNE implementation that runs in the browser.
-- [**251**Star][21d] [Swift] [prateek147/dvia-v2](https://github.com/prateek147/dvia-v2) Damn Vulnerable iOS App (DVIA) is an iOS application that is damn vulnerable. Its main goal is to provide a platform to mobile security enthusiasts/professionals or students to test their iOS penetration testing skills in a legal environment. This project is developed and maintained by @prateekg147. The vulnerabilities and solutions covered in t…
-- [**251**Star][5m] [Go] [lesnuages/hershell](https://github.com/lesnuages/hershell) Multiplatform reverse shell generator
-- [**251**Star][7m] [Py] [itskindred/procspy](https://github.com/itskindred/procspy) Python tool that monitors and logs user-run commands on a Linux system for either offensive or defensive purposes..
-- [**251**Star][9m] [Visual Basic] [houjingyi233/office-exploit-case-study](https://github.com/houjingyi233/office-exploit-case-study)
-- [**251**Star][12d] [Py] [guimaizi/get_domain](https://github.com/guimaizi/get_domain) domain collect and monitor
-- [**251**Star][2y] [Objective-C] [feicong/macbook](https://github.com/feicong/macbook) 《macOS软件安全与逆向分析》随书源码
-- [**251**Star][9m] [C] [chef-koch/android-vulnerabilities-overview](https://github.com/chef-koch/android-vulnerabilities-overview) An small overview of known Android vulnerabilities
+- [**252**Star][2y] [Py] [deadpix3l/cryptsky](https://github.com/deadpix3l/cryptsky) A simple, fully python ransomware PoC
+- [**252**Star][9m] [C] [chef-koch/android-vulnerabilities-overview](https://github.com/chef-koch/android-vulnerabilities-overview) An small overview of known Android vulnerabilities
+- [**252**Star][5y] [Py] [allfro/sploitego](https://github.com/allfro/sploitego) a local pen-test transform package that uses the Canari Framework for local transform execution in Maltego.
+- [**251**Star][6m] [isafeblue/mind-map](https://github.com/isafeblue/mind-map) 超详细的渗透测试思维导图
+- [**251**Star][3m] [Shell] [sprov065/sprov-ui](https://github.com/sprov065/sprov-ui) 一个支持多协议多用户的v2ray Web面板
+- [**251**Star][5m] [Shell] [thesecondsun/revssl](https://github.com/thesecondsun/revssl) A simple script that automates generation of OpenSSL reverse shells
+- [**251**Star][30d] [Py] [rvrsh3ll/findfrontabledomains](https://github.com/rvrsh3ll/findfrontabledomains) Search for potential frontable domains
+- [**251**Star][5m] [Py] [redteamoperations/pivotsuite](https://github.com/redteamoperations/pivotsuite) Network Pivoting Toolkit
+- [**251**Star][1m] [Py] [platomav/mcextractor](https://github.com/platomav/mcextractor) Intel, AMD, VIA & Freescale Microcode Extraction Tool
+- [**251**Star][2y] [Java] [panhongwei/tracereader](https://github.com/panhongwei/tracereader) android小工具,通过读取trace文件,回溯整个整个程序执行调用树。
+- [**251**Star][5m] [Java] [nfcgate/nfcgate](https://github.com/nfcgate/nfcgate) An NFC relay application for Android
+- [**251**Star][13d] [Swift] [netyouli/whc_scan](https://github.com/netyouli/whc_scan) 高效强大扫描分析iOS和Android项目里没有使用的类Mac开源工具,清理项目垃圾类,让项目结构干净清爽,升级维护得心应手. Efficient and powerful scanning analysis iOS and Android project no classes used in Mac open source tools, cleaning rubbish class project, make project structure clean and relaxed, upgrade maintenance
+- [**251**Star][1y] [Py] [kootenpv/sky](https://github.com/kootenpv/sky) a web scraping framework
+- [**251**Star][4m] [C#] [kevin-robertson/inveighzero](https://github.com/kevin-robertson/inveighzero) Windows C# LLMNR/mDNS/NBNS/DNS spoofer/man-in-the-middle tool
+- [**251**Star][6d] [Py] [jaegertracing/jaeger-client-python](https://github.com/jaegertracing/jaeger-client-python) Jaeger Bindings for Python OpenTracing API
+- [**251**Star][2y] [ObjC] [feicong/macbook](https://github.com/feicong/macbook) 《macOS软件安全与逆向分析》随书源码
+- [**251**Star][2m] [Py] [cvandeplas/pystemon](https://github.com/cvandeplas/pystemon) Monitoring tool for PasteBin-alike sites written in Python. Inspired by pastemon
- [**251**Star][1y] [C#] [brianhama/de4dot](https://github.com/brianhama/de4dot) .NET deobfuscator and unpacker.
-- [**251**Star][5y] [Py] [allfro/sploitego](https://github.com/allfro/sploitego) Maltego Penetration Testing Transforms
-- [**250**Star][7d] [PowerShell] [bc-security/empire](https://github.com/bc-security/empire) Empire is a PowerShell and Python post-exploitation agent.
-- [**250**Star][3m] [C] [seemoo-lab/owl](https://github.com/seemoo-lab/owl) An open Apple Wireless Direct Link (AWDL) implementation written in C
-- [**250**Star][6m] [isafeblue/mind-map](https://github.com/isafeblue/mind-map) 超详细的渗透测试思维导图
+- [**250**Star][15d] [neo23x0/auditd](https://github.com/neo23x0/auditd) Best Practice Auditd Configuration
- [**250**Star][3y] [Py] [prahladyeri/hotspotd](https://github.com/prahladyeri/hotspotd) Simple daemon to create a wifi hotspot on Linux
- [**250**Star][11m] [crytic/awesome-ethereum-security](https://github.com/crytic/awesome-ethereum-security) A curated list of awesome Ethereum security references
-- [**250**Star][9m] [Py] [wh0ale/src-experience](https://github.com/wh0ale/src-experience) 工欲善其事,必先利其器
-- [**250**Star][5m] [Shell] [thesecondsun/revssl](https://github.com/thesecondsun/revssl) A simple script that automates generation of OpenSSL reverse shells
-- [**250**Star][5m] [Py] [redteamoperations/pivotsuite](https://github.com/redteamoperations/pivotsuite) Network Pivoting Toolkit
-- [**250**Star][2y] [Java] [panhongwei/tracereader](https://github.com/panhongwei/tracereader) android小工具,通过读取trace文件,回溯整个整个程序执行调用树。
-- [**250**Star][2y] [PowerShell] [killswitch-gui/pentesting-scripts](https://github.com/killswitch-gui/pentesting-scripts) A ton of helpful tools
+- [**250**Star][4y] [Py] [wooyun/tangscan](https://github.com/wooyun/tangscan) TangScan
+- [**250**Star][4y] [Py] [whitepacket/zib-trojan](https://github.com/whitepacket/zib-trojan) The Open Tor Botnet (ZIB); Python-based forever-FUD IRC Trojan
+- [**250**Star][10m] [Py] [wh0ale/src-experience](https://github.com/wh0ale/src-experience) 工欲善其事,必先利其器
+- [**250**Star][4y] [PHP] [phpwhois/phpwhois](https://github.com/phpwhois/phpwhois) phpWhois general repository
+- [**250**Star][6d] [TS] [ninoseki/mitaka](https://github.com/ninoseki/mitaka) A browser extension for OSINT search
+- [**250**Star][20d] [C] [nccgroup/sniffle](https://github.com/nccgroup/sniffle) A sniffer for Bluetooth 5 and 4.x LE
+- [**250**Star][2y] [PS] [killswitch-gui/pentesting-scripts](https://github.com/killswitch-gui/pentesting-scripts) A ton of helpful tools
- [**250**Star][1y] [Py] [igio90/frick](https://github.com/igio90/frick) aka the first debugger built on top of frida
-- [**250**Star][2y] [Py] [deadpix3l/cryptsky](https://github.com/deadpix3l/cryptsky) A simple, fully python ransomware PoC
+- [**250**Star][3y] [C] [guanchao/appprotect](https://github.com/guanchao/appprotect) 整理一些app常见的加固方法,包括java层、native层和资源文件加固等
+- [**250**Star][4m] [Py] [fsgmhoward/shadowsocks-py-mu](https://github.com/fsgmhoward/shadowsocks-py-mu) A fast tunnel proxy server for multiple users
+- [**250**Star][2y] [Py] [dbgx/lldb.nvim](https://github.com/dbgx/lldb.nvim) Debugger integration with a focus on ease-of-use.
- [**250**Star][3y] [Py] [census/choronzon](https://github.com/census/choronzon) An evolutionary knowledge-based fuzzer
-- [**250**Star][21d] [Jupyter Notebook] [aws-samples/aws-security-workshops](https://github.com/aws-samples/aws-security-workshops) A collection of the latest AWS Security workshops
- [**250**Star][1y] [Py] [avramit/instahack](https://github.com/avramit/instahack) Instagram bruteforce tool
- [**250**Star][3y] [Py] [asweigart/codebreaker](https://github.com/asweigart/codebreaker) "Hacking Secret Ciphers with Python" programs
-- [**249**Star][4y] [Py] [wooyun/tangscan](https://github.com/wooyun/tangscan) TangScan
-- [**249**Star][28d] [Py] [rvrsh3ll/findfrontabledomains](https://github.com/rvrsh3ll/findfrontabledomains) Search for potential frontable domains
+- [**249**Star][15d] [Py] [zephrfish/googd0rker](https://github.com/zephrfish/googd0rker) GoogD0rker is a tool for firing off google dorks against a target domain, it is purely for OSINT against a specific target domain. READ the readme before messaging or tweeting me.
+- [**249**Star][16d] [Java] [xuxueli/xxl-excel](https://github.com/xuxueli/xxl-excel) A flexible tool for translating Java objects and Excel documents.(Java对象和Excel转换工具XXL-EXCEL)
+- [**249**Star][6d] [C] [tpm2-software/tpm2-tools](https://github.com/tpm2-software/tpm2-tools) The source repository for the TPM (Trusted Platform Module) 2 tools
+- [**249**Star][25d] [Py] [tipam/pi3d](https://github.com/tipam/pi3d) Simple, yet powerful, 3D Python graphics library for beginners and school children running on the Raspberry Pi.
- [**249**Star][7y] [rentzsch/mach_star](https://github.com/rentzsch/mach_star) code injection and function overriding for Mac OS X
-- [**249**Star][3m] [Shell] [projectzeroindia/cve-2019-11510](https://github.com/projectzeroindia/cve-2019-11510) Exploit for Arbitrary File Read on Pulse Secure SSL VPN (CVE-2019-11510)
-- [**249**Star][4y] [PHP] [phpwhois/phpwhois](https://github.com/phpwhois/phpwhois) phpWhois general repository
-- [**249**Star][1y] [Py] [kootenpv/sky](https://github.com/kootenpv/sky) a web scraping framework
-- [**249**Star][4m] [C#] [kevin-robertson/inveighzero](https://github.com/kevin-robertson/inveighzero) Windows C# LLMNR/mDNS/NBNS/DNS spoofer/man-in-the-middle tool
+- [**249**Star][2m] [owasp/api-security](https://github.com/owasp/api-security) OWASP API Security Project
+- [**249**Star][3y] [Py] [livz/cloacked-pixel](https://github.com/livz/cloacked-pixel) LSB steganography and detection
+- [**249**Star][2y] [Mask] [lcatro/fuzzing-imagemagick](https://github.com/lcatro/fuzzing-imagemagick) OpenSource My ImageMagick Fuzzer ..
- [**249**Star][3y] [JS] [jesusprubio/bluebox-ng](https://github.com/jesusprubio/bluebox-ng) Pentesting framework using Node.js powers, focused in VoIP.
- [**249**Star][8m] [C] [jakeajames/rootlessjb](https://github.com/jakeajames/rootlessjb)
- [**249**Star][2y] [Py] [intezer/docker-ida](https://github.com/intezer/docker-ida) Run IDA Pro disassembler in Docker containers for automating, scaling and distributing the use of IDAPython scripts.
-- [**249**Star][12d] [C] [gpg/gnupg](https://github.com/gpg/gnupg) The GNU Privacy Guard
-- [**249**Star][4m] [Py] [fsgmhoward/shadowsocks-py-mu](https://github.com/fsgmhoward/shadowsocks-py-mu) A fast tunnel proxy server for multiple users
-- [**249**Star][12d] [Py] [duo-labs/dlint](https://github.com/duo-labs/dlint) Dlint is a tool for encouraging best coding practices and helping ensure we're writing secure Python code.
-- [**249**Star][2y] [Py] [dbgx/lldb.nvim](https://github.com/dbgx/lldb.nvim) Debugger integration with a focus on ease-of-use.
-- [**249**Star][2m] [Py] [cvandeplas/pystemon](https://github.com/cvandeplas/pystemon) Monitoring tool for PasteBin-alike sites written in Python. Inspired by pastemon
+- [**249**Star][2d] [C] [gpg/gnupg](https://github.com/gpg/gnupg) The GNU Privacy Guard
+- [**249**Star][2y] [Java] [godlikewangjun/dexknife-wj](https://github.com/godlikewangjun/dexknife-wj) apk加固插件 带签名校验、dex加密、资源混淆
+- [**249**Star][6d] [HTML] [gfw-breaker/open-proxy](https://github.com/gfw-breaker/open-proxy) 一键部署被墙网站反向代理; 免翻墙访问被禁网站
+- [**249**Star][8m] [Py] [dirkjanm/adidnsdump](https://github.com/dirkjanm/adidnsdump) Active Directory Integrated DNS dumping by any authenticated user
- [**249**Star][2y] [Py] [0x4d31/salt-scanner](https://github.com/0x4d31/salt-scanner) Linux vulnerability scanner based on Salt Open and Vulners audit API, with Slack notifications and JIRA integration
+- [**248**Star][1m] [Rust] [falconre/falcon](https://github.com/falconre/falcon) Formal Binary Analysis Framework in Rust
- [**248**Star][1y] [batchfile] [zerodot1/coinblockerlists](https://github.com/zerodot1/coinblockerlists) Simple lists that can help prevent cryptomining in the browser or other applications.
+- [**248**Star][1m] [PS] [sdcampbell/internal-pentest-playbook](https://github.com/sdcampbell/internal-pentest-playbook) Internal Network Penetration Test Playbook
+- [**248**Star][2y] [Py] [rxwx/cve-2018-0802](https://github.com/rxwx/cve-2018-0802) PoC Exploit for CVE-2018-0802 (and optionally CVE-2017-11882)
- [**248**Star][1m] [Py] [quantopian/qdb](https://github.com/quantopian/qdb) Quantopian Remote Debugger for Python
- [**248**Star][2y] [Java] [portswigger/collaborator-everywhere](https://github.com/portswigger/collaborator-everywhere) A Burp Suite Pro extension which augments your proxy traffic by injecting non-invasive headers designed to reveal backend systems by causing pingbacks to Burp Collaborator
-- [**248**Star][11d] [Swift] [netyouli/whc_scan](https://github.com/netyouli/whc_scan) 高效强大扫描分析iOS和Android项目里没有使用的类Mac开源工具,清理项目垃圾类,让项目结构干净清爽,升级维护得心应手. Efficient and powerful scanning analysis iOS and Android project no classes used in Mac open source tools, cleaning rubbish class project, make project structure clean and relaxed, upgrade maintenance
-- [**248**Star][18d] [C] [nccgroup/sniffle](https://github.com/nccgroup/sniffle) A sniffer for Bluetooth 5 and 4.x LE
- [**248**Star][2y] [C++] [minhaskamal/stupidkeylogger](https://github.com/minhaskamal/stupidkeylogger) A Terrific Keystroke Recorder (keylogger-key-logger-spyware-spy-trojan-simple-virus-for-windows-10-7-xp-smart-c-c++-cpp-code)
-- [**248**Star][2y] [Mask] [lcatro/fuzzing-imagemagick](https://github.com/lcatro/fuzzing-imagemagick) OpenSource My ImageMagick Fuzzer ..
-- [**248**Star][12d] [Py] [jaegertracing/jaeger-client-python](https://github.com/jaegertracing/jaeger-client-python) Jaeger Bindings for Python OpenTracing API
- [**248**Star][5y] [Ruby] [hakirisec/hakiri_toolbelt](https://github.com/hakirisec/hakiri_toolbelt) Secure Ruby apps with Hakiri
-- [**248**Star][3y] [C] [guanchao/appprotect](https://github.com/guanchao/appprotect) 整理一些app常见的加固方法,包括java层、native层和资源文件加固等
- [**248**Star][2y] [C] [dosomder/iovyroot](https://github.com/dosomder/iovyroot) CVE-2015-1805 root tool
-- [**248**Star][2m] [Py] [b16f00t/whapa](https://github.com/b16f00t/whapa) WhatsApp Parser Toolset v1.14
-- [**247**Star][1m] [Rust] [falconre/falcon](https://github.com/falconre/falcon) Formal Binary Analysis Framework in Rust
-- [**247**Star][13d] [Py] [zephrfish/googd0rker](https://github.com/zephrfish/googd0rker) GoogD0rker is a tool for firing off google dorks against a target domain, it is purely for OSINT against a specific target domain. READ the readme before messaging or tweeting me.
-- [**247**Star][1y] [Py] [wenfengshi/ddos-dos-tools](https://github.com/wenfengshi/ddos-dos-tools) some sort of ddos-tools
+- [**247**Star][1y] [Py] [warflop/cloudbunny](https://github.com/warflop/cloudbunny) CloudBunny is a tool to capture the real IP of the server that uses a WAF as a proxy or protection. In this tool we used three search engines to search domain information: Shodan, Censys and Zoomeye.
- [**247**Star][5m] [C++] [tonychen56/hackertools](https://github.com/tonychen56/hackertools) 使用MFC编写的病毒技术合集
-- [**247**Star][23d] [Py] [tipam/pi3d](https://github.com/tipam/pi3d) Simple, yet powerful, 3D Python graphics library for beginners and school children running on the Raspberry Pi.
-- [**247**Star][2m] [Shell] [solomonsklash/chomp-scan](https://github.com/solomonsklash/chomp-scan) A scripted pipeline of tools to streamline the bug bounty/penetration test reconnaissance phase, so you can focus on chomping bugs.
-- [**247**Star][5m] [Java] [nfcgate/nfcgate](https://github.com/nfcgate/nfcgate) An NFC relay application for Android
+- [**247**Star][2y] [Py] [spaze/oprah-proxy](https://github.com/spaze/oprah-proxy) Generate credentials for Opera's "browser VPN"
+- [**247**Star][3m] [Shell] [solomonsklash/chomp-scan](https://github.com/solomonsklash/chomp-scan) A scripted pipeline of tools to streamline the bug bounty/penetration test reconnaissance phase, so you can focus on chomping bugs.
- [**247**Star][4y] [Py] [n0tr00t/beebeeto-framework](https://github.com/n0tr00t/beebeeto-framework) Beebeeto FrameWork
-- [**247**Star][3y] [Py] [livz/cloacked-pixel](https://github.com/livz/cloacked-pixel) LSB steganography and detection
-- [**247**Star][2y] [PowerShell] [leoloobeek/lapstoolkit](https://github.com/leoloobeek/lapstoolkit) Tool to audit and attack LAPS environments
-- [**247**Star][2m] [Py] [gildasio/h2t](https://github.com/gildasio/h2t) h2t (HTTP Hardening Tool) scans a website and suggests security headers to apply
+- [**247**Star][1y] [Perl] [mrash/psad](https://github.com/mrash/psad) Intrusion Detection and Log Analysis with iptables
+- [**247**Star][22d] [C] [mame82/logitacker](https://github.com/mame82/logitacker) Enumerate and test Logitech wireless input devices for vulnerabilities with a nRF52840 radio dongle.
+- [**247**Star][5m] [JS] [lewisardern/bxss](https://github.com/lewisardern/bxss) bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.
+- [**247**Star][2y] [PS] [leoloobeek/lapstoolkit](https://github.com/leoloobeek/lapstoolkit) Tool to audit and attack LAPS environments
+- [**247**Star][1y] [Py] [hsury/geetest3-crack](https://github.com/hsury/geetest3-crack)
+- [**247**Star][4m] [C] [gbps/gbhv](https://github.com/gbps/gbhv) Simple x86-64 VT-x Hypervisor with EPT Hooking
+- [**247**Star][2y] [Shell] [freelancepentester/ddos-script](https://github.com/freelancepentester/ddos-script) All things to do after installing Kali Linux and Add more awesome hacking tools to your Kali Linux system
+- [**247**Star][1m] [Java] [fanhua1994/dzfilter](https://github.com/fanhua1994/dzfilter) 【停止维护】使用DFA算法实现的内容安全,反垃圾,智能鉴黄,敏感词过滤,不良信息检测,文本校验,敏感词检测,包括关键词提取,过滤html标签等。
- [**247**Star][2y] [Go] [dzonerzy/gowapt](https://github.com/dzonerzy/gowapt) Go Web Application Penetration Test
-- [**247**Star][7m] [Py] [dirkjanm/adidnsdump](https://github.com/dirkjanm/adidnsdump) Active Directory Integrated DNS dumping by any authenticated user
-- [**246**Star][14d] [Java] [xuxueli/xxl-excel](https://github.com/xuxueli/xxl-excel) A flexible tool for translating Java objects and Excel documents.(Java对象和Excel转换工具XXL-EXCEL)
-- [**246**Star][1y] [Py] [warflop/cloudbunny](https://github.com/warflop/cloudbunny) CloudBunny is a tool to capture the real IP of the server that uses a WAF as a proxy or protection. In this tool we used three search engines to search domain information: Shodan, Censys and Zoomeye.
-- [**246**Star][14d] [C] [tpm2-software/tpm2-tools](https://github.com/tpm2-software/tpm2-tools) The source repository for the TPM (Trusted Platform Module) 2 tools
+- [**247**Star][3m] [Py] [corrad1nho/qomui](https://github.com/corrad1nho/qomui) Qomui (Qt OpenVPN Management UI)
+- [**246**Star][1y] [Py] [boppreh/mouse](https://github.com/boppreh/mouse) Hook and simulate global mouse events in pure Python
+- [**246**Star][1y] [Shell] [dylanbai8/v2ray_h2-tls_website_onekey](https://github.com/dylanbai8/v2ray_h2-tls_website_onekey) V2RAY 基于 CADDY 的 VMESS+H2+TLS+Website(Use Host)+Rinetd BBR 一键安装脚本
+- [**246**Star][10d] [Shell] [bkuhlmann/mac_os-config](https://github.com/bkuhlmann/mac_os-config) Shell scripts for customized macOS machine setup and configuration.
+- [**246**Star][17d] [Py] [susmithkrishnan/torghost](https://github.com/SusmithKrishnan/torghost) Tor anonimizer
+- [**246**Star][6d] [Java] [nats-io/nats.java](https://github.com/nats-io/nats.java) Java client for NATS
- [**246**Star][3y] [Py] [tcstool/fireaway](https://github.com/tcstool/fireaway) Next Generation Firewall Audit and Bypass Tool
-- [**246**Star][2y] [Py] [spaze/oprah-proxy](https://github.com/spaze/oprah-proxy) Generate credentials for Opera's "browser VPN"
-- [**246**Star][2y] [Py] [rxwx/cve-2018-0802](https://github.com/rxwx/cve-2018-0802) PoC Exploit for CVE-2018-0802 (and optionally CVE-2017-11882)
+- [**246**Star][20d] [C++] [s0uthwest/futurerestore](https://github.com/s0uthwest/futurerestore) iOS upgrade and downgrade tool utilizing SHSH blobs
- [**246**Star][1y] [Py] [rub-syssec/microcode](https://github.com/rub-syssec/microcode) Microcode Updates for the USENIX 2017 paper: Reverse Engineering x86 Processor Microcode
-- [**246**Star][1m] [Py] [platomav/mcextractor](https://github.com/platomav/mcextractor) Intel, AMD, VIA & Freescale Microcode Extraction Tool
-- [**246**Star][1y] [Perl] [mrash/psad](https://github.com/mrash/psad) Intrusion Detection and Log Analysis with iptables
-- [**246**Star][12d] [Java] [mr-xn/penetration_testing_poc](https://github.com/mr-xn/penetration_testing_poc) 渗透测试有关的POC、EXP、脚本、提权、小工具等,欢迎补充、完善---About penetration-testing python-script poc html-poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce
- [**246**Star][2y] [Py] [maian-tool/maian](https://github.com/maian-tool/maian) automatic tool for finding trace vulnerabilities in Ethereum smart contracts
-- [**246**Star][5m] [JS] [lewisardern/bxss](https://github.com/lewisardern/bxss) bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.
- [**246**Star][3y] [C] [jamesbarlow/icmptunnel](https://github.com/jamesbarlow/icmptunnel) Tunnel IP over ICMP.
-- [**246**Star][2y] [Shell] [freelancepentester/ddos-script](https://github.com/freelancepentester/ddos-script) All things to do after installing Kali Linux and Add more awesome hacking tools to your Kali Linux system
+- [**246**Star][4y] [Py] [jackgitgz/cnblogsspider](https://github.com/jackgitgz/cnblogsspider) 用scrapy采集cnblogs列表页爬虫
+- [**246**Star][2m] [Py] [gildasio/h2t](https://github.com/gildasio/h2t) h2t (HTTP Hardening Tool) scans a website and suggests security headers to apply
+- [**246**Star][2y] [Py] [gdelugre/ida-arm-system-highlight](https://github.com/gdelugre/ida-arm-system-highlight) IDA script for highlighting and decoding ARM system instructions
+- [**246**Star][4m] [Py] [bontchev/pcodedmp](https://github.com/bontchev/pcodedmp) A VBA p-code disassembler
+- [**246**Star][4y] [C] [begeekmyfriend/cuckoofilter](https://github.com/begeekmyfriend/cuckoofilter) Substitute for bloom filter.
- [**246**Star][4m] [C] [ampotos/dynstruct](https://github.com/ampotos/dynstruct) Reverse engineering tool for automatic structure recovering and memory use analysis based on DynamoRIO and Capstone
- [**245**Star][7y] [Ruby] [urbanesec/zackattack](https://github.com/urbanesec/ZackAttack) Unveiled at DEF CON 20, NTLM Relaying to ALL THE THINGS!
- [**245**Star][2y] [ludiosarchive/unfixed-security-bugs](https://github.com/ludiosarchive/unfixed-security-bugs) A list of publicly known but unfixed security bugs
-- [**245**Star][2y] [Py] [xyuanmu/checkiptools](https://github.com/xyuanmu/checkiptools) CheckIPTools 扫描谷歌IP以及实用IP转换小工具
-- [**245**Star][1m] [PowerShell] [sdcampbell/internal-pentest-playbook](https://github.com/sdcampbell/internal-pentest-playbook) Internal Network Penetration Test Playbook
+- [**245**Star][9d] [C++] [strazzere/android-scripts](https://github.com/strazzere/android-scripts) Collection of Android reverse engineering scripts
+- [**245**Star][2y] [C#] [sparkfunx/skimmer_scanner](https://github.com/sparkfunx/skimmer_scanner) A mobile app for detecting bluetooth gas pump credit card skimmers
- [**245**Star][5m] [Shell] [peterpt/eternal_scanner](https://github.com/peterpt/eternal_scanner) An internet scanner for exploit CVE-2017-0144 (Eternal Blue) & CVE-2017-0145 (Eternal Romance)
- [**245**Star][3y] [Java] [neophob/pixelcontroller](https://github.com/neophob/pixelcontroller) (LED) Matrix Control Software, supports various Hardware, Keywords: LED Matrix, OSC, Realtime, VJ, Arduino, Teensy, RPI
-- [**245**Star][4y] [Py] [jackgitgz/cnblogsspider](https://github.com/jackgitgz/cnblogsspider) 用scrapy采集cnblogs列表页爬虫
+- [**245**Star][4m] [PS] [nccgroup/azucar](https://github.com/nccgroup/azucar) Security auditing tool for Azure environments
- [**245**Star][3m] [Py] [inquest/threatingestor](https://github.com/inquest/threatingestor) Extract and aggregate threat intelligence.
-- [**245**Star][4m] [C] [gbps/gbhv](https://github.com/gbps/gbhv) Simple x86-64 VT-x Hypervisor with EPT Hooking
+- [**245**Star][16d] [C++] [evpo/encryptpad](https://github.com/evpo/encryptpad) Minimalist secure text editor and binary encryptor that implements RFC 4880 Open PGP format: symmetrically encrypted, compressed and integrity protected. The editor can protect files with passwords, key files or both.
- [**245**Star][7m] [ethicalhack3r/wordpress_plugin_security_testing_cheat_sheet](https://github.com/ethicalhack3r/wordpress_plugin_security_testing_cheat_sheet) WordPress Plugin Security Testing Cheat Sheet
+- [**245**Star][2y] [PHP] [enygma/expose](https://github.com/enygma/expose) An Intrusion Detection System library loosely based on PHP IDS
- [**245**Star][2y] [JS] [cryptogenic/ps4-4.55-kernel-exploit](https://github.com/cryptogenic/ps4-4.55-kernel-exploit) A fully implemented kernel exploit for the PS4 on 4.55FW
- [**245**Star][12m] [Py] [crowdstrike/forensics](https://github.com/crowdstrike/forensics) Scripts and code referenced in CrowdStrike blog posts
-- [**245**Star][4y] [C] [begeekmyfriend/cuckoofilter](https://github.com/begeekmyfriend/cuckoofilter) Substitute for bloom filter.
-- [**244**Star][15d] [Py] [susmithkrishnan/torghost](https://github.com/SusmithKrishnan/torghost) Tor anonimizer
-- [**244**Star][2m] [Java] [nats-io/nats.java](https://github.com/nats-io/nats.java) Java client for NATS
+- [**245**Star][20d] [Java] [c0ny1/jsencrypter](https://github.com/c0ny1/jsencrypter) 一个用于加密传输爆破的Burp Suite插件
- [**244**Star][2y] [C] [zer0mem0ry/kernelbhop](https://github.com/zer0mem0ry/kernelbhop) Cheat that uses a driver instead WinAPI for Reading / Writing memory.
+- [**244**Star][2y] [Py] [xyuanmu/checkiptools](https://github.com/xyuanmu/checkiptools) CheckIPTools 扫描谷歌IP以及实用IP转换小工具
+- [**244**Star][11d] [Py] [voulnet/barq](https://github.com/voulnet/barq) The AWS Cloud Post Exploitation framework!
- [**244**Star][8m] [C++] [ucsb-seclab/difuze](https://github.com/ucsb-seclab/difuze) Fuzzer for Linux Kernel Drivers
-- [**244**Star][7d] [C++] [strazzere/android-scripts](https://github.com/strazzere/android-scripts) Collection of Android reverse engineering scripts
-- [**244**Star][18d] [C++] [s0uthwest/futurerestore](https://github.com/s0uthwest/futurerestore) iOS upgrade and downgrade tool utilizing SHSH blobs
- [**244**Star][4m] [Java] [righettod/poc-graphql](https://github.com/righettod/poc-graphql) Research on GraphQL from an AppSec point of view.
+- [**244**Star][1m] [platomav/cpumicrocodes](https://github.com/platomav/cpumicrocodes) Intel, AMD, VIA & Freescale CPU Microcode Repositories
+- [**244**Star][2y] [Shell] [pentester-io/commonspeak](https://github.com/pentester-io/commonspeak) Content discovery wordlists generated using BigQuery
+- [**244**Star][2y] [Py] [neohapsis/creddump7](https://github.com/neohapsis/creddump7)
- [**244**Star][3y] [misterch0c/awesome-hacking](https://github.com/misterch0c/awesome-hacking) A collection of various awesome lists for hackers, pentesters and security researchers
+- [**244**Star][2m] [C++] [microsoft/krabsetw](https://github.com/microsoft/krabsetw) KrabsETW provides a modern C++ wrapper and a .NET wrapper around the low-level ETW trace consumption functions.
- [**244**Star][4y] [Py] [metac0rtex/githarvester](https://github.com/metac0rtex/githarvester) harvesting information from GitHub
-- [**244**Star][1y] [Py] [hsury/geetest3-crack](https://github.com/hsury/geetest3-crack)
-- [**244**Star][2y] [Py] [gdelugre/ida-arm-system-highlight](https://github.com/gdelugre/ida-arm-system-highlight) IDA script for highlighting and decoding ARM system instructions
+- [**244**Star][3m] [C] [leebrotherston/tls-fingerprinting](https://github.com/leebrotherston/tls-fingerprinting) TLS Fingerprinting
+- [**244**Star][2y] [Py] [jakespringer/angr_ctf](https://github.com/jakespringer/angr_ctf)
+- [**244**Star][4m] [Py] [initroot/burpjslinkfinder](https://github.com/initroot/burpjslinkfinder) Burp Extension for a passive scanning JS files for endpoint links.
+- [**244**Star][2y] [hsis007/useful_websites_for_pentester](https://github.com/hsis007/useful_websites_for_pentester) This repository is to make life of the pentester easy as it is a collection of the websites that can be used by pentesters for day to day studies and to remain updated.
- [**244**Star][5y] [C++] [gametutorials/tutorials](https://github.com/gametutorials/tutorials) This holds the tutorials for GameTutorials.com
-- [**244**Star][14d] [C++] [evpo/encryptpad](https://github.com/evpo/encryptpad) Minimalist secure text editor and binary encryptor that implements RFC 4880 Open PGP format: symmetrically encrypted, compressed and integrity protected. The editor can protect files with passwords, key files or both.
-- [**244**Star][30d] [Py] [cisco-config-analysis-tool/ccat](https://github.com/cisco-config-analysis-tool/ccat) Cisco Config Analysis Tool
-- [**244**Star][4m] [Py] [bontchev/pcodedmp](https://github.com/bontchev/pcodedmp) A VBA p-code disassembler
+- [**244**Star][2y] [C] [espressif/esp32-nesemu](https://github.com/espressif/esp32-nesemu) Proof-of-concept NES emulator for the ESP32
+- [**244**Star][3y] [Py] [donnchac/onionbalance](https://github.com/donnchac/onionbalance) OnionBalance provides load-balancing and redundancy for Tor hidden services
+- [**244**Star][8d] [Py] [cisco-config-analysis-tool/ccat](https://github.com/cisco-config-analysis-tool/ccat) Cisco Config Analysis Tool
- [**244**Star][2y] [HTML] [arno0x/embedinhtml](https://github.com/arno0x/embedinhtml) Embed and hide any file in an HTML file
- [**244**Star][9m] [Py] [antoniococo/sharpyshell](https://github.com/antoniococo/sharpyshell) SharPyShell - tiny and obfuscated ASP.NET webshell for C# web applications
- [**244**Star][1y] [C#] [0xbadjuju/wheresmyimplant](https://github.com/0xbadjuju/wheresmyimplant) A Bring Your Own Land Toolkit that Doubles as a WMI Provider
+- [**244**Star][8m] [0x4d31/awesome-oscp](https://github.com/0x4d31/awesome-oscp) A curated list of awesome OSCP resources
+- [**243**Star][23d] [Py] [0xeb-bp/bluekeep](https://github.com/0xeb-bp/bluekeep) Public work for CVE-2019-0708
+- [**243**Star][13d] [Py] [orlikoski/cdqr](https://github.com/orlikoski/CDQR) The Cold Disk Quick Response (CDQR) tool is a fast and easy to use forensic artifact parsing tool that works on disk images, mounted drives and extracted artifacts from Windows, Linux, MacOS, and Android devices
+- [**243**Star][3m] [Py] [usb-tools/facedancer](https://github.com/usb-tools/Facedancer) modern FaceDancer core for multiple devices-- including GreatFET
+- [**243**Star][2d] [CSS] [steamdatabase/gametracking-dota2](https://github.com/steamdatabase/gametracking-dota2)
- [**243**Star][3y] [Py] [sensepost/autodane](https://github.com/sensepost/autodane) Auto Domain Admin and Network Exploitation.
-- [**243**Star][2y] [Py] [neohapsis/creddump7](https://github.com/neohapsis/creddump7)
+- [**243**Star][4y] [Py] [rockerflower/shadowsocks](https://github.com/rockerflower/shadowsocks)
- [**243**Star][4m] [C++] [nektra/deviare-inproc](https://github.com/nektra/deviare-inproc) Deviare In Process Instrumentation Engine
- [**243**Star][2y] [Py] [mindpointgroup/cloudfrunt](https://github.com/mindpointgroup/cloudfrunt) A tool for identifying misconfigured CloudFront domains
-- [**243**Star][2m] [C++] [microsoft/krabsetw](https://github.com/microsoft/krabsetw) KrabsETW provides a modern C++ wrapper and a .NET wrapper around the low-level ETW trace consumption functions.
-- [**243**Star][2y] [Py] [jakespringer/angr_ctf](https://github.com/jakespringer/angr_ctf)
-- [**243**Star][4m] [Py] [initroot/burpjslinkfinder](https://github.com/initroot/burpjslinkfinder) Burp Extension for a passive scanning JS files for endpoint links.
+- [**243**Star][3m] [Shell] [leviathan36/kaboom](https://github.com/leviathan36/kaboom) An automated pentest tool
- [**243**Star][3y] [C] [hyln9/vikiroot](https://github.com/hyln9/vikiroot) CVE-2016-5195 (Dirty COW) PoC for Android 6.0.1 Marshmallow
-- [**243**Star][2y] [hsis007/useful_websites_for_pentester](https://github.com/hsis007/useful_websites_for_pentester) This repository is to make life of the pentester easy as it is a collection of the websites that can be used by pentesters for day to day studies and to remain updated.
- [**243**Star][2y] [C++] [fireice-uk/xmr-stak-nvidia](https://github.com/fireice-uk/xmr-stak-nvidia) Monero NVIDIA miner
- [**243**Star][3m] [JS] [antswordproject/ant](https://github.com/antswordproject/ant) 实时上线的 XSS 盲打平台
- [**242**Star][4y] [C++] [piker-alpha/macosxbootloader](https://github.com/piker-alpha/macosxbootloader) Pike's bootloader
-- [**242**Star][11d] [Py] [orlikoski/cdqr](https://github.com/orlikoski/CDQR) The Cold Disk Quick Response (CDQR) tool is a fast and easy to use forensic artifact parsing tool that works on disk images, mounted drives and extracted artifacts from Windows, Linux, MacOS, and Android devices
+- [**242**Star][6d] [Go] [grafeas/kritis](https://github.com/grafeas/kritis) Deploy-time Policy Enforcer for Kubernetes applications
- [**242**Star][9m] [C] [pegasuslab/ghosttunnel](https://github.com/PegasusLab/GhostTunnel) GhostTunnel is a covert backdoor transmission method that can be used in an isolated environment.
+- [**242**Star][4m] [C] [pagalaxylab/unifuzzer](https://github.com/PAGalaxyLab/uniFuzzer) A fuzzing tool for closed-source binaries based on Unicorn and LibFuzzer
- [**242**Star][10m] [C++] [revng/revng](https://github.com/revng/revng) the core repository of the rev.ng project (mirror)
+- [**242**Star][12m] [xcsh/unity-game-hacking](https://github.com/xcsh/unity-game-hacking) A guide for hacking unity games
- [**242**Star][3y] [PHP] [tdifg/webshell](https://github.com/tdifg/webshell) WebShell Collect
-- [**242**Star][2y] [C#] [sparkfunx/skimmer_scanner](https://github.com/sparkfunx/skimmer_scanner) A mobile app for detecting bluetooth gas pump credit card skimmers
+- [**242**Star][7m] [Lua] [rvn0xsy/nse_vuln](https://github.com/rvn0xsy/nse_vuln) Nmap扫描、漏洞利用脚本
- [**242**Star][2y] [Py] [nirvik/iwant](https://github.com/nirvik/iwant) Commandline tool for searching and downloading files in LAN network, without any central server
- [**242**Star][1y] [Go] [netspi/goddi](https://github.com/netspi/goddi) goddi (go dump domain info) dumps Active Directory domain information
-- [**242**Star][20d] [C] [mame82/logitacker](https://github.com/mame82/logitacker) Enumerate and test Logitech wireless input devices for vulnerabilities with a nRF52840 radio dongle.
+- [**242**Star][2y] [Py] [minhnhat93/tf-sndcgan](https://github.com/minhnhat93/tf-sndcgan) Tensorflow Implementation of the paper "Spectral Normalization for Generative Adversarial Networks" (ICML 2017 workshop)
+- [**242**Star][4y] [C++] [meeloo/xspray](https://github.com/meeloo/xspray) A front end for lldb on OS X for Mac and iOS targets, with a twist
+- [**242**Star][9m] [Py] [mazen160/bfac](https://github.com/mazen160/bfac) An automated tool that checks for backup artifacts that may disclose the web-application's source code.
+- [**242**Star][2m] [C] [llvm-mirror/compiler-rt](https://github.com/llvm-mirror/compiler-rt) Mirror of official compiler-rt git repository located at
- [**242**Star][8m] [Py] [lionsec/wifresti](https://github.com/lionsec/wifresti) Find your wireless network password in Windows , Linux and Mac OS
-- [**242**Star][3m] [C] [leebrotherston/tls-fingerprinting](https://github.com/leebrotherston/tls-fingerprinting) TLS Fingerprinting
+- [**242**Star][2y] [C#] [jephthai/openpasswordfilter](https://github.com/jephthai/openpasswordfilter) An open source custom password filter DLL and userspace service to better protect / control Active Directory domain passwords.
- [**242**Star][2y] [Shell] [h0nus/roguesploit](https://github.com/h0nus/roguesploit) Powerfull Wi-Fi trap!
-- [**242**Star][2y] [C] [espressif/esp32-nesemu](https://github.com/espressif/esp32-nesemu) Proof-of-concept NES emulator for the ESP32
-- [**242**Star][3y] [Py] [donnchac/onionbalance](https://github.com/donnchac/onionbalance) OnionBalance provides load-balancing and redundancy for Tor hidden services
+- [**242**Star][28d] [cujanovic/open-redirect-payloads](https://github.com/cujanovic/open-redirect-payloads) Open Redirect Payloads
+- [**242**Star][1m] [croqaz/awesome-decentralized](https://github.com/croqaz/awesome-decentralized)
+- [**242**Star][2m] [Java] [c0ny1/passive-scan-client](https://github.com/c0ny1/passive-scan-client) Burp被动扫描流量转发插件
- [**242**Star][3m] [Py] [atexio/mercure](https://github.com/atexio/mercure) for security managers who want to train their colleague to phishing.
-- [**241**Star][21d] [Py] [0xeb-bp/bluekeep](https://github.com/0xeb-bp/bluekeep) Public work for CVE-2019-0708
-- [**241**Star][1y] [Shell] [dylanbai8/v2ray_h2-tls_website_onekey](https://github.com/dylanbai8/v2ray_h2-tls_website_onekey) V2RAY 基于 CADDY 的 VMESS+H2+TLS+Website(Use Host)+Rinetd BBR 一键安装脚本
-- [**241**Star][4m] [C] [pagalaxylab/unifuzzer](https://github.com/PAGalaxyLab/uniFuzzer) A fuzzing tool for closed-source binaries based on Unicorn and LibFuzzer
+- [**241**Star][9d] [Rust] [hippolot/anevicon](https://github.com/Hippolot/anevicon)
- [**241**Star][6y] [Py] [zigoo0/webpwn3r](https://github.com/zigoo0/webpwn3r) WebPwn3r - Web Applications Security Scanner.
-- [**241**Star][4m] [Py] [thewhiteh4t/finalrecon](https://github.com/thewhiteh4t/finalrecon) OSINT Tool for All-In-One Web Reconnaissance
-- [**241**Star][7d] [CSS] [steamdatabase/gametracking-dota2](https://github.com/steamdatabase/gametracking-dota2)
-- [**241**Star][2m] [owasp/api-security](https://github.com/owasp/api-security) OWASP API Security Project
-- [**241**Star][2y] [Py] [minhnhat93/tf-sndcgan](https://github.com/minhnhat93/tf-sndcgan) Tensorflow Implementation of the paper "Spectral Normalization for Generative Adversarial Networks" (ICML 2017 workshop)
-- [**241**Star][4y] [C++] [meeloo/xspray](https://github.com/meeloo/xspray) A front end for lldb on OS X for Mac and iOS targets, with a twist
-- [**241**Star][3m] [Shell] [leviathan36/kaboom](https://github.com/leviathan36/kaboom) An automated pentest tool
+- [**241**Star][6m] [JS] [we11cheng/wcshadowrocket](https://github.com/we11cheng/wcshadowrocket) iOS Shadowrocket(砸壳重签,仅供参考,添加节点存在问题)。另一个fq项目potatso源码参见:
+- [**241**Star][7m] [C++] [smaffer/vgax](https://github.com/smaffer/vgax) VGA library for Arduino UNO
+- [**241**Star][1y] [Java] [shiltemann/ctf-writeups-public](https://github.com/shiltemann/ctf-writeups-public) Writeups for infosec Capture the Flag events by team Galaxians
+- [**241**Star][3m] [JS] [owasp/dvsa](https://github.com/owasp/dvsa) a Damn Vulnerable Serverless Application
+- [**241**Star][8m] [Py] [openstack/syntribos](https://github.com/openstack/syntribos) Python API security testing tool from OpenStack Security Group
- [**241**Star][2y] [Py] [leonardonve/dns2proxy](https://github.com/leonardonve/dns2proxy) Offensive DNS server
- [**241**Star][1y] [kinimiwar/penetration-testing](https://github.com/kinimiwar/penetration-testing) List of awesome penetration testing resources, tools and other shiny things
+- [**241**Star][1y] [Py] [hgascon/pulsar](https://github.com/hgascon/pulsar) Protocol Learning and Stateful Fuzzing
- [**241**Star][5m] [C] [compsec-snu/razzer](https://github.com/compsec-snu/razzer) A Kernel fuzzer focusing on race bugs
-- [**241**Star][17d] [Java] [c0ny1/jsencrypter](https://github.com/c0ny1/jsencrypter) 一个用于加密传输爆破的Burp Suite插件
-- [**240**Star][7d] [Rust] [hippolot/anevicon](https://github.com/Hippolot/anevicon)
+- [**241**Star][3y] [C] [astsam/rtl8812au](https://github.com/astsam/rtl8812au) RTL8812AU/21AU and RTL8814AU driver with monitor mode and frame injection
+- [**241**Star][10m] [psiphon/psiphon-circumvention-system](https://bitbucket.org/psiphon/psiphon-circumvention-system)
+- [**240**Star][3m] [JS] [mattcg/socks5-http-client](https://github.com/mattcg/socks5-http-client) SOCKS v5 HTTP client implementation in JavaScript for Node.js.
+- [**240**Star][5m] [crytic/evm-opcodes](https://github.com/crytic/evm-opcodes) Ethereum opcodes and instruction reference
- [**240**Star][1y] [C++] [woxihuannisja/bangcle](https://github.com/woxihuannisja/bangcle) The second generation Android Hardening Protection
-- [**240**Star][7m] [C++] [smaffer/vgax](https://github.com/smaffer/vgax) VGA library for Arduino UNO
+- [**240**Star][2y] [ObjC] [sticktron/g0blin](https://github.com/sticktron/g0blin) a work-in-progress jailbreak for iOS 10.3.x (A7-A9)
+- [**240**Star][3y] [JS] [samsung/jalangi2](https://github.com/samsung/jalangi2) Dynamic analysis framework for JavaScript
- [**240**Star][1y] [Ruby] [rastating/joomlavs](https://github.com/rastating/joomlavs) A black box, Ruby powered, Joomla vulnerability scanner
-- [**240**Star][2y] [Shell] [pentester-io/commonspeak](https://github.com/pentester-io/commonspeak) Content discovery wordlists generated using BigQuery
+- [**240**Star][6m] [Java] [petercunha/jenkins-rce](https://github.com/petercunha/jenkins-rce)
- [**240**Star][3y] [Py] [pcbje/gransk](https://github.com/pcbje/gransk) Document processing for investigations
-- [**240**Star][8m] [Py] [openstack/syntribos](https://github.com/openstack/syntribos) Python API security testing tool from OpenStack Security Group
-- [**240**Star][19d] [Py] [mez0cc/ms17-010-python](https://github.com/mez0cc/ms17-010-python) MS17-010: Python and Meterpreter
-- [**240**Star][8m] [Py] [mazen160/bfac](https://github.com/mazen160/bfac) An automated tool that checks for backup artifacts that may disclose the web-application's source code.
-- [**240**Star][10d] [Py] [mandatoryprogrammer/trusttrees](https://github.com/mandatoryprogrammer/trusttrees) a script to recursively follow all the possible delegation paths for a target domain and graph the relationships between various nameservers along the way.
-- [**240**Star][2m] [C] [llvm-mirror/compiler-rt](https://github.com/llvm-mirror/compiler-rt) Mirror of official compiler-rt git repository located at
-- [**240**Star][2y] [C#] [jephthai/openpasswordfilter](https://github.com/jephthai/openpasswordfilter) An open source custom password filter DLL and userspace service to better protect / control Active Directory domain passwords.
+- [**240**Star][5d] [JS] [myetherwallet/ethereum-lists](https://github.com/myetherwallet/ethereum-lists) A repository for maintaining lists of things like malicious URLs, fake token addresses, and so forth. We love lists.
+- [**240**Star][8m] [C++] [mstfknn/malware-sample-library](https://github.com/mstfknn/malware-sample-library) Malware sample library.
+- [**240**Star][21d] [Py] [mez0cc/ms17-010-python](https://github.com/mez0cc/ms17-010-python) MS17-010: Python and Meterpreter
+- [**240**Star][12d] [Py] [mandatoryprogrammer/trusttrees](https://github.com/mandatoryprogrammer/trusttrees) a script to recursively follow all the possible delegation paths for a target domain and graph the relationships between various nameservers along the way.
+- [**240**Star][2y] [C] [limneos/mobileminer](https://github.com/limneos/mobileminer) CPU Miner for ARM64 iOS Devices
+- [**240**Star][2m] [Java] [kwart/jd-cmd](https://github.com/kwart/jd-cmd) Command line Java Decompiler
+- [**240**Star][2y] [C] [jas502n/0day-security-software-vulnerability-analysis-technology](https://github.com/jas502n/0day-security-software-vulnerability-analysis-technology) 0day安全_软件漏洞分析技术
- [**240**Star][3y] [Py] [intrepidusgroup/mallory](https://github.com/intrepidusgroup/mallory) Mallory - MiTM TCP and UDP Proxy
-- [**240**Star][1y] [Py] [hgascon/pulsar](https://github.com/hgascon/pulsar) Protocol Learning and Stateful Fuzzing
- [**240**Star][3y] [Shell] [g0tmi1k/debian-ssh](https://github.com/g0tmi1k/debian-ssh) Debian OpenSSL Predictable PRNG (CVE-2008-0166)
-- [**240**Star][2y] [PowerShell] [dafthack/hostrecon](https://github.com/dafthack/hostrecon) This function runs a number of checks on a system to help provide situational awareness to a penetration tester during the reconnaissance phase. It gathers information about the local system, users, and domain information. It does not use any 'net', 'ipconfig', 'whoami', 'netstat', or other system commands to help avoid detection.
-- [**240**Star][26d] [cujanovic/open-redirect-payloads](https://github.com/cujanovic/open-redirect-payloads) Open Redirect Payloads
-- [**240**Star][3y] [C] [astsam/rtl8812au](https://github.com/astsam/rtl8812au) RTL8812AU/21AU and RTL8814AU driver with monitor mode and frame injection
-- [**240**Star][1m] [Py] [a3sal0n/falcongate](https://github.com/a3sal0n/falcongate) A smart gateway to stop hackers and Malware attacks
-- [**239**Star][5m] [crytic/evm-opcodes](https://github.com/crytic/evm-opcodes) Ethereum opcodes and instruction reference
+- [**240**Star][9m] [JS] [exodusintel/cve-2019-5786](https://github.com/exodusintel/cve-2019-5786) FileReader Exploit
+- [**240**Star][4d] [Shell] [essandess/macos-fortress](https://github.com/essandess/macos-fortress) Firewall and Privatizing Proxy for Trackers, Attackers, Malware, Adware, and Spammers with Anti-Virus On-Demand and On-Access Scanning (PF, squid, privoxy, hphosts, dshield, emergingthreats, hostsfile, PAC file, clamav)
+- [**240**Star][2y] [PS] [dafthack/hostrecon](https://github.com/dafthack/hostrecon) This function runs a number of checks on a system to help provide situational awareness to a penetration tester during the reconnaissance phase. It gathers information about the local system, users, and domain information. It does not use any 'net', 'ipconfig', 'whoami', 'netstat', or other system commands to help avoid detection.
+- [**240**Star][6y] [C++] [clinicallyinane/shellcode_launcher](https://github.com/clinicallyinane/shellcode_launcher) Shellcode launcher utility
+- [**240**Star][2m] [Py] [a3sal0n/falcongate](https://github.com/a3sal0n/falcongate) A smart gateway to stop hackers and Malware attacks
+- [**239**Star][1y] [C++] [zhuhaow/libnekit](https://github.com/zhuhaow/libnekit) Efficient and Flexible Network Utility Library
- [**239**Star][7m] [Py] [beeware/bugjar](https://github.com/beeware/bugjar) A interactive graphical debugger for Python code.
- [**239**Star][2y] [Py] [xhujoy/pysc2-agents](https://github.com/xhujoy/pysc2-agents) This is a simple implementation of DeepMind's PySC2 RL agents.
-- [**239**Star][2y] [PowerShell] [und3rf10w/aggressor-scripts](https://github.com/und3rf10w/aggressor-scripts) Aggressor scripts I've made for Cobalt Strike
-- [**239**Star][1y] [Java] [shiltemann/ctf-writeups-public](https://github.com/shiltemann/ctf-writeups-public) Writeups for infosec Capture the Flag events by team Galaxians
-- [**239**Star][3y] [JS] [samsung/jalangi2](https://github.com/samsung/jalangi2) Dynamic analysis framework for JavaScript
-- [**239**Star][7m] [Lua] [rvn0xsy/nse_vuln](https://github.com/rvn0xsy/nse_vuln) Nmap扫描、漏洞利用脚本
+- [**239**Star][2y] [PS] [und3rf10w/aggressor-scripts](https://github.com/und3rf10w/aggressor-scripts) Aggressor scripts I've made for Cobalt Strike
+- [**239**Star][2m] [Py] [sc1341/instagramosint](https://github.com/sc1341/instagramosint) An Instagram Open Source Intelligence Tool
+- [**239**Star][1m] [PHP] [psecio/versionscan](https://github.com/psecio/versionscan) A PHP version scanner for reporting possible vulnerabilities
- [**239**Star][2y] [Py] [panagiks/rspet](https://github.com/panagiks/rspet) RSPET (Reverse Shell and Post Exploitation Tool) is a Python based reverse shell equipped with functionalities that assist in a post exploitation scenario.
- [**239**Star][2y] [Py] [nettitude/prowl](https://github.com/nettitude/prowl) an email harvesting tool that scrapes Yahoo for Linkedin profiles associated to the users search terms and identifies job titles
-- [**239**Star][4m] [PowerShell] [nccgroup/azucar](https://github.com/nccgroup/azucar) Security auditing tool for Azure environments
-- [**239**Star][2m] [Java] [kwart/jd-cmd](https://github.com/kwart/jd-cmd) Command line Java Decompiler
+- [**239**Star][5d] [Makefile] [kframework/evm-semantics](https://github.com/kframework/evm-semantics) K Semantics of the Ethereum Virtual Machine (EVM)
- [**239**Star][5m] [C++] [facebook/ds2](https://github.com/facebook/ds2) Debug server for lldb.
-- [**239**Star][20d] [Shell] [essandess/macos-fortress](https://github.com/essandess/macos-fortress) Firewall and Privatizing Proxy for Trackers, Attackers, Malware, Adware, and Spammers with Anti-Virus On-Demand and On-Access Scanning (PF, squid, privoxy, hphosts, dshield, emergingthreats, hostsfile, PAC file, clamav)
- [**239**Star][10m] [Py] [epickrram/grav](https://github.com/epickrram/grav) Performance visualisation tools
- [**239**Star][3y] [Go] [egebalci/egesploit](https://github.com/egebalci/egesploit) EGESPLOIT is a golang library for malware development
- [**239**Star][10m] [PHP] [delight-im/php-privacypolicy](https://github.com/delight-im/php-privacypolicy) Programmatically composable privacy policies for humans and machines
-- [**239**Star][8m] [0x4d31/awesome-oscp](https://github.com/0x4d31/awesome-oscp) A curated list of awesome OSCP resources
-- [**238**Star][3m] [Py] [usb-tools/facedancer](https://github.com/usb-tools/Facedancer) modern FaceDancer core for multiple devices-- including GreatFET
-- [**238**Star][12m] [xcsh/unity-game-hacking](https://github.com/xcsh/unity-game-hacking) A guide for hacking unity games
-- [**238**Star][6m] [JS] [we11cheng/wcshadowrocket](https://github.com/we11cheng/wcshadowrocket) iOS Shadowrocket(砸壳重签,仅供参考,添加节点存在问题)。另一个fq项目potatso源码参见:
-- [**238**Star][1m] [PHP] [psecio/versionscan](https://github.com/psecio/versionscan) A PHP version scanner for reporting possible vulnerabilities
+- [**239**Star][2y] [Py] [battelle/sandsifter](https://github.com/battelle/sandsifter) The x86 processor fuzzer
+- [**239**Star][13d] [Py] [avatartwo/avatar2](https://github.com/avatartwo/avatar2) Python core of avatar²
+- [**238**Star][3m] [Go] [jpillora/ipfilter](https://github.com/jpillora/ipfilter) A package for IP Filtering in Go (golang)
+- [**238**Star][2y] [C] [zerosum0x0/defcon-25-workshop](https://github.com/zerosum0x0/defcon-25-workshop) Windows Post-Exploitation / Malware Forward Engineering DEF CON 25 Workshop
- [**238**Star][2y] [Py] [preempt/credssp](https://github.com/preempt/credssp) A code demonstrating CVE-2018-0886
-- [**238**Star][3m] [JS] [owasp/dvsa](https://github.com/owasp/dvsa) a Damn Vulnerable Serverless Application
-- [**238**Star][5m] [C] [outflanknl/dumpert](https://github.com/outflanknl/dumpert) LSASS memory dumper using direct system calls and API unhooking.
+- [**238**Star][8d] [pe3zx/my-infosec-awesome](https://github.com/pe3zx/my-infosec-awesome) My curated list of awesome links, resources and tools on infosec related topics
+- [**238**Star][2m] [Java] [nickstadb/serializationdumper](https://github.com/nickstadb/serializationdumper) A tool to dump Java serialization streams in a more human readable form.
- [**238**Star][1y] [Py] [matthewclarkmay/geoip-attack-map](https://github.com/matthewclarkmay/geoip-attack-map) Cyber security geoip attack map that follows syslog and parses IPs/port numbers to visualize attackers in real time.
-- [**238**Star][7d] [Makefile] [kframework/evm-semantics](https://github.com/kframework/evm-semantics) K Semantics of the Ethereum Virtual Machine (EVM)
+- [**238**Star][4y] [C] [jethrogb/uefireverse](https://github.com/jethrogb/uefireverse) Tools to help with Reverse Engineering UEFI-based firmware
- [**238**Star][5y] [C] [jduck/asus-cmd](https://github.com/jduck/asus-cmd) ASUS Router infosvr UDP Broadcast root Command Execution
- [**238**Star][4y] [HTML] [ikarienator/phantomjs_hide_and_seek](https://github.com/ikarienator/phantomjs_hide_and_seek) Some ideas around spoofing and detecting user agents.
-- [**238**Star][9m] [JS] [exodusintel/cve-2019-5786](https://github.com/exodusintel/cve-2019-5786) FileReader Exploit
-- [**238**Star][1m] [Java] [ata4/bspsrc](https://github.com/ata4/bspsrc) A Source engine map decompiler
-- [**237**Star][1y] [C++] [zhuhaow/libnekit](https://github.com/zhuhaow/libnekit) Efficient and Flexible Network Utility Library
-- [**237**Star][2y] [C] [zerosum0x0/defcon-25-workshop](https://github.com/zerosum0x0/defcon-25-workshop) Windows Post-Exploitation / Malware Forward Engineering DEF CON 25 Workshop
-- [**237**Star][29d] [pe3zx/my-infosec-awesome](https://github.com/pe3zx/my-infosec-awesome) My curated list of awesome links, resources and tools on infosec related topics
-- [**237**Star][8m] [C++] [mstfknn/malware-sample-library](https://github.com/mstfknn/malware-sample-library) Malware sample library.
-- [**237**Star][4y] [C] [jethrogb/uefireverse](https://github.com/jethrogb/uefireverse) Tools to help with Reverse Engineering UEFI-based firmware
+- [**238**Star][8d] [JS] [frenchyeti/dexcalibur](https://github.com/frenchyeti/dexcalibur) Dynamic binary instrumentation tool designed for Android application and powered by Frida. It disassembles dex, analyzes it statically, generates hooks, discovers reflected methods, stores intercepted data and does new things from it. Its aim is to be an all-in-one Android reverse engineering platform.
+- [**238**Star][2m] [Java] [ata4/bspsrc](https://github.com/ata4/bspsrc) A Source engine map decompiler
+- [**238**Star][9d] [Py] [a13xp0p0v/kconfig-hardened-check](https://github.com/a13xp0p0v/kconfig-hardened-check) A script for checking the hardening options in the Linux kernel config
+- [**237**Star][7d] [Py] [tencent/qt4a](https://github.com/tencent/qt4a) QTA driver for Android app
+- [**237**Star][22d] [Py] [pyhackertarget/hackertarget](https://github.com/pyhackertarget/hackertarget) attack surface discovery and identification of security vulnerabilities
+- [**237**Star][3y] [Py] [trustedsec/tap](https://github.com/trustedsec/tap) The TrustedSec Attack Platform is a reliable method for droppers on an infrastructure in order to ensure established connections to an organization.
+- [**237**Star][1m] [Py] [timlib/webxray](https://github.com/timlib/webxray) webxray is a tool for analyzing third-party content on webpages and identifying the companies which collect user data.
+- [**237**Star][2m] [Java] [samlraider/samlraider](https://github.com/samlraider/samlraider) SAML2 Burp Extension
+- [**237**Star][21d] [pomerium/awesome-zero-trust](https://github.com/pomerium/awesome-zero-trust) A curated collection of awesome resources for the zero-trust security model.
+- [**237**Star][2y] [Ruby] [nahamsec/hostilesubbruteforcer](https://github.com/nahamsec/hostilesubbruteforcer)
+- [**237**Star][4m] [PS] [microsoft/aaronlocker](https://github.com/microsoft/aaronlocker) Robust and practical application whitelisting for Windows
+- [**237**Star][9d] [Py] [inforion/idapython-cheatsheet](https://github.com/inforion/idapython-cheatsheet) Scripts and cheatsheets for IDAPython
+- [**237**Star][9m] [harmoc/ctftools](https://github.com/harmoc/ctftools) Personal CTF Toolkit
+- [**237**Star][2d] [JS] [hackademix/noscript](https://github.com/hackademix/noscript) The popular NoScript Security Suite browser extension.
- [**237**Star][10m] [C] [geosn0w/osirisjailbreak12](https://github.com/geosn0w/osirisjailbreak12) iOS 12.0 -> 12.1.2 Incomplete Osiris Jailbreak with CVE-2019-6225 by GeoSn0w (FCE365)
+- [**237**Star][3y] [Py] [ftramer/steal-ml](https://github.com/ftramer/steal-ml) Model extraction attacks on Machine-Learning-as-a-Service platforms.
- [**237**Star][2y] [C] [ele7enxxh/android-afl](https://github.com/ele7enxxh/android-afl) Fuzzing Android program with american fuzzy lop (AFL)
+- [**237**Star][28d] [Rust] [danleh/wasabi](https://github.com/danleh/wasabi) A dynamic analysis framework for WebAssembly programs.
- [**237**Star][3y] [C++] [damellis/cellphone2](https://github.com/damellis/cellphone2) Second iteration of the DIY cellphone (based on the Arduino GSM shield).
+- [**237**Star][8m] [Py] [daenerys-sre/source](https://github.com/daenerys-sre/source) A framework for interoperability between IDA and Ghidra
- [**237**Star][3m] [cujanovic/markdown-xss-payloads](https://github.com/cujanovic/markdown-xss-payloads) XSS payloads for exploiting Markdown syntax
-- [**237**Star][6y] [C++] [clinicallyinane/shellcode_launcher](https://github.com/clinicallyinane/shellcode_launcher) Shellcode launcher utility
-- [**237**Star][2y] [Py] [battelle/sandsifter](https://github.com/battelle/sandsifter) The x86 processor fuzzer
-- [**237**Star][11d] [Py] [avatartwo/avatar2](https://github.com/avatartwo/avatar2) Python core of avatar²
-- [**237**Star][7d] [Py] [a13xp0p0v/kconfig-hardened-check](https://github.com/a13xp0p0v/kconfig-hardened-check) A script for checking the hardening options in the Linux kernel config
-- [**236**Star][21d] [Py] [tencent/qt4a](https://github.com/tencent/qt4a) QTA driver for Android app
+- [**237**Star][6m] [Py] [cuckoosandbox/community](https://github.com/cuckoosandbox/community) Repository of modules and signatures contributed by the community
+- [**237**Star][4m] [JS] [consensys/surya](https://github.com/consensys/surya) A set of utilities for exploring Solidity contracts
+- [**237**Star][28d] [JS] [bet4it/hyperpwn](https://github.com/bet4it/hyperpwn) A hyper plugin to provide a flexible GDB GUI with the help of GEF, pwndbg or peda
+- [**237**Star][2y] [Py] [arno0x/wsc2](https://github.com/arno0x/wsc2) A WebSocket C2 Tool
+- [**236**Star][2y] [Go] [zyfworks/anothersteamcommunityfix](https://github.com/zyfworks/anothersteamcommunityfix) 通过修改hosts转发HTTP请求的方式临时性修复SteamCommunity在中国大陆无法访问的小工具
+- [**236**Star][11m] [C] [r3x/how2kernel](https://github.com/r3x/how2kernel) This Repository aims at giving a basic idea about Kernel Exploitation.
+- [**236**Star][3m] [Py] [cylance/cybot](https://github.com/cylance/CyBot) Open Source Threat Intelligence Chat Bot
- [**236**Star][3m] [Py] [brad-sp/cuckoo-modified](https://github.com/brad-sp/cuckoo-modified) Modified edition of cuckoo
-- [**236**Star][3y] [Py] [trustedsec/tap](https://github.com/trustedsec/tap) The TrustedSec Attack Platform is a reliable method for droppers on an infrastructure in order to ensure established connections to an organization.
-- [**236**Star][1m] [Py] [timlib/webxray](https://github.com/timlib/webxray) webxray is a tool for analyzing third-party content on webpages and identifying the companies which collect user data.
+- [**236**Star][5d] [w0lfschild/macos_headers](https://github.com/w0lfschild/macos_headers) a class dump of most Apple Applications and Frameworks on macOS
+- [**236**Star][7m] [C++] [strivexjun/xantidebug](https://github.com/strivexjun/xantidebug) VMProtect 3.x Anti-debug Method Improved
- [**236**Star][4y] [C] [softethervpn/win10pcap](https://github.com/softethervpn/win10pcap) WinPcap for Windows 10 (NDIS 6.x driver model)
-- [**236**Star][2m] [Py] [sc1341/instagramosint](https://github.com/sc1341/instagramosint) An Instagram Open Source Intelligence Tool
-- [**236**Star][2m] [Java] [samlraider/samlraider](https://github.com/samlraider/samlraider) SAML2 Burp Extension
-- [**236**Star][15d] [JS] [hackademix/noscript](https://github.com/hackademix/noscript) The popular NoScript Security Suite browser extension.
-- [**236**Star][3y] [Py] [ftramer/steal-ml](https://github.com/ftramer/steal-ml) Model extraction attacks on Machine-Learning-as-a-Service platforms.
+- [**236**Star][2y] [C++] [pellegre/libcrafter](https://github.com/pellegre/libcrafter) A high level C++ network packet sniffing and crafting library.
+- [**236**Star][3d] [HCL] [nozaq/terraform-aws-secure-baseline](https://github.com/nozaq/terraform-aws-secure-baseline) Terraform module to set up your AWS account with the secure baseline configuration based on CIS Amazon Web Services Foundations.
+- [**236**Star][2y] [Py] [nccgroup/shocker](https://github.com/nccgroup/shocker) A tool to find and exploit servers vulnerable to Shellshock
+- [**236**Star][2m] [JS] [martinzhou2015/srcms](https://github.com/martinzhou2015/srcms) SRCMS企业应急响应与缺陷管理系统
+- [**236**Star][24d] [C] [kubo/plthook](https://github.com/kubo/plthook) Hook function calls by replacing PLT(Procedure Linkage Table) entries.
- [**236**Star][11m] [Go] [fardog/secureoperator](https://github.com/fardog/secureoperator) A DNS-protocol proxy for DNS-over-HTTPS providers, such as Google and Cloudflare
-- [**236**Star][25d] [Rust] [danleh/wasabi](https://github.com/danleh/wasabi) A dynamic analysis framework for WebAssembly programs.
-- [**236**Star][8m] [Py] [daenerys-sre/source](https://github.com/daenerys-sre/source) A framework for interoperability between IDA and Ghidra
-- [**236**Star][6m] [Py] [cuckoosandbox/community](https://github.com/cuckoosandbox/community) Repository of modules and signatures contributed by the community
-- [**236**Star][4m] [JS] [consensys/surya](https://github.com/consensys/surya) A set of utilities for exploring Solidity contracts
+- [**236**Star][11m] [duoergun0729/2book](https://github.com/duoergun0729/2book) 《Web安全之深度学习实战》
- [**236**Star][5y] [C] [conix-security/zer0m0n](https://github.com/conix-security/zer0m0n) zer0m0n driver for cuckoo sandbox
-- [**236**Star][2y] [Py] [arno0x/wsc2](https://github.com/arno0x/wsc2) A WebSocket C2 Tool
-- [**235**Star][11m] [C] [r3x/how2kernel](https://github.com/r3x/how2kernel) This Repository aims at giving a basic idea about Kernel Exploitation.
-- [**235**Star][3m] [Py] [cylance/cybot](https://github.com/cylance/CyBot) Open Source Threat Intelligence Chat Bot
+- [**235**Star][27d] [C] [cmu-sei/scale](https://github.com/cmu-sei/scale) SCALe (Source Code Analysis Lab) is a static analysis aggregator/correlator which enables a source code analyst to combine static analysis results from multiple tools into one interface, and also provides mappings for diagnostics from the tools to the SEI CERT Secure Coding standards.
+- [**235**Star][3m] [Swift] [shadowsocksr-live/ishadowsocksr](https://github.com/shadowsocksr-live/ishadowsocksr) ShadowsocksR for iOS, come from
+- [**235**Star][4m] [C#] [fsecurelabs/sharpgpoabuse](https://github.com/FSecureLABS/SharpGPOAbuse) take advantage of a user's edit rights on a Group Policy Object (GPO) in order to compromise the objects that are controlled by that GPO.
+- [**235**Star][1y] [Py] [3summer/ctf-rsa-tool](https://github.com/3summer/CTF-RSA-tool) a little tool help CTFer solve RSA problem
- [**235**Star][6y] [Py] [xen0ph0n/yaragenerator](https://github.com/xen0ph0n/yaragenerator) quick, simple, and effective yara rule creation to isolate malware families and other malicious objects of interest
-- [**235**Star][2y] [C++] [pellegre/libcrafter](https://github.com/pellegre/libcrafter) A high level C++ network packet sniffing and crafting library.
-- [**235**Star][2y] [Ruby] [nahamsec/hostilesubbruteforcer](https://github.com/nahamsec/hostilesubbruteforcer)
-- [**235**Star][2m] [JS] [martinzhou2015/srcms](https://github.com/martinzhou2015/srcms) SRCMS企业应急响应与缺陷管理系统
+- [**235**Star][3y] [Py] [withdk/badusb2-mitm-poc](https://github.com/withdk/badusb2-mitm-poc) BadUSB 2.0 USB-HID MiTM POC
+- [**235**Star][1m] [C] [wbenny/ia32-doc](https://github.com/wbenny/ia32-doc) IA32-doc is a project which aims to put as many definitions from the Intel Manual into machine-processable format as possible
+- [**235**Star][1m] [C#] [tyranid/exploitremotingservice](https://github.com/tyranid/exploitremotingservice) A tool to exploit .NET Remoting Services
+- [**235**Star][1y] [Java] [nccgroup/burpsuiteloggerplusplus](https://github.com/nccgroup/burpsuiteloggerplusplus) Burp Suite Logger++: Log activities of all the tools in Burp Suite
+- [**235**Star][4y] [Py] [mwielgoszewski/python-paddingoracle](https://github.com/mwielgoszewski/python-paddingoracle) A portable, padding oracle exploit API
- [**235**Star][1y] [JS] [holyvier/prototype-pollution-nsec18](https://github.com/holyvier/prototype-pollution-nsec18) Content released at NorthSec 2018 for my talk on prototype pollution
+- [**235**Star][8m] [Go] [gocaio/goca](https://github.com/gocaio/goca) Goca Scanner
+- [**235**Star][2y] [Py] [evait-security/weeman](https://github.com/evait-security/weeman) HTTP server for phishing in python
- [**235**Star][1m] [HTML] [edoverflow/bugbountyguide](https://github.com/edoverflow/bugbountyguide) Bug Bounty Guide is a launchpad for bug bounty programs and bug bounty hunters.
+- [**235**Star][10m] [Py] [cryin/javaid](https://github.com/cryin/javaid) java source code static code analysis and danger function identify prog
- [**235**Star][9m] [Py] [codeinthehole/purl](https://github.com/codeinthehole/purl) A simple, immutable URL class with a clean API for interrogation and manipulation.
-- [**235**Star][2m] [Java] [c0ny1/passive-scan-client](https://github.com/c0ny1/passive-scan-client) Burp被动扫描流量转发插件
+- [**235**Star][9m] [Py] [airbus-seclab/ilo4_toolbox](https://github.com/airbus-seclab/ilo4_toolbox) Toolbox for HPE iLO4 & iLO5 analysis
- [**235**Star][10m] [JS] [adamyordan/cve-2019-1003000-jenkins-rce-poc](https://github.com/adamyordan/cve-2019-1003000-jenkins-rce-poc) Jenkins RCE Proof-of-Concept: SECURITY-1266 / CVE-2019-1003000 (Script Security), CVE-2019-1003001 (Pipeline: Groovy), CVE-2019-1003002 (Pipeline: Declarative)
-- [**234**Star][3y] [Py] [withdk/badusb2-mitm-poc](https://github.com/withdk/badusb2-mitm-poc) BadUSB 2.0 USB-HID MiTM POC
-- [**234**Star][29d] [C] [wbenny/ia32-doc](https://github.com/wbenny/ia32-doc) IA32-doc is a project which aims to put as many definitions from the Intel Manual into machine-processable format as possible
-- [**234**Star][1m] [C#] [tyranid/exploitremotingservice](https://github.com/tyranid/exploitremotingservice) A tool to exploit .NET Remoting Services
+- [**234**Star][5m] [Shell] [hak5/packetsquirrel-payloads](https://github.com/hak5/packetsquirrel-payloads) The Official Packet Squirrel Payload Repository
+- [**234**Star][10d] [C#] [xenocoderce/neo-confuserex](https://github.com/xenocoderce/neo-confuserex) Updated ConfuserEX, an open-source, free obfuscator for .NET applications
+- [**234**Star][2y] [TS] [weichx/cerialize](https://github.com/weichx/cerialize) Easy serialization through ES7/Typescript annotations
- [**234**Star][11m] [C] [reisyukaku/reinand](https://github.com/reisyukaku/reinand) Minimalist 3DS custom firmware.
- [**234**Star][4y] [Py] [pyana/pyana](https://github.com/pyana/pyana) Analyzing the Windows shellcode
-- [**234**Star][1m] [platomav/cpumicrocodes](https://github.com/platomav/cpumicrocodes) Intel, AMD, VIA & Freescale CPU Microcode Repositories
-- [**234**Star][1y] [Java] [nccgroup/burpsuiteloggerplusplus](https://github.com/nccgroup/burpsuiteloggerplusplus) Burp Suite Logger++: Log activities of all the tools in Burp Suite
-- [**234**Star][7d] [JS] [myetherwallet/ethereum-lists](https://github.com/myetherwallet/ethereum-lists) A repository for maintaining lists of things like malicious URLs, fake token addresses, and so forth. We love lists.
-- [**234**Star][4y] [Py] [mwielgoszewski/python-paddingoracle](https://github.com/mwielgoszewski/python-paddingoracle) A portable, padding oracle exploit API
-- [**234**Star][4y] [PowerShell] [invoke-ir/uproot](https://github.com/invoke-ir/uproot) Currently not updated for WMIEvent module...
-- [**234**Star][9m] [harmoc/ctftools](https://github.com/harmoc/ctftools) Personal CTF Toolkit
-- [**234**Star][8m] [Go] [gocaio/goca](https://github.com/gocaio/goca) Goca Scanner
+- [**234**Star][21d] [Julia] [jrevels/cassette.jl](https://github.com/jrevels/cassette.jl) Overdub Your Julia Code
+- [**234**Star][4y] [PS] [invoke-ir/uproot](https://github.com/invoke-ir/uproot) Currently not updated for WMIEvent module...
+- [**234**Star][1y] [Ruby] [hahwul/droid-hunter](https://github.com/hahwul/droid-hunter) (deprecated) Android application vulnerability analysis and Android pentest tool
+- [**234**Star][2m] [C] [grant-h/qu1ckr00t](https://github.com/grant-h/qu1ckr00t) A PoC application demonstrating the power of an Android kernel arbitrary R/W.
+- [**234**Star][2d] [Ruby] [fabric8io/fluent-plugin-kubernetes_metadata_filter](https://github.com/fabric8io/fluent-plugin-kubernetes_metadata_filter) Enrich your fluentd events with Kubernetes metadata
- [**234**Star][1y] [Java] [difcareer/sqlmap4burp](https://github.com/difcareer/sqlmap4burp) sqlmap embed in burpsuite
- [**234**Star][1m] [C] [didi/kemon](https://github.com/didi/kemon) An Open-Source Pre and Post Callback-Based Framework for macOS Kernel Monitoring.
-- [**234**Star][9m] [Py] [airbus-seclab/ilo4_toolbox](https://github.com/airbus-seclab/ilo4_toolbox) Toolbox for HPE iLO4 & iLO5 analysis
+- [**234**Star][7m] [JS] [cliqz-oss/local-sheriff](https://github.com/cliqz-oss/local-sheriff) Think of Local sheriff as a recon tool in your browser (WebExtension). While you normally browse the internet, Local Sheriff works in the background to empower you in identifying what data points (PII) are being shared / leaked to which all third-parties.
- [**234**Star][6y] [Py] [adastra-thw/pyhacks](https://github.com/adastra-thw/pyhacks) Python Scripts for Hacking .
- [**233**Star][2y] [wizardforcel/web-hacking-101-zh](https://github.com/wizardforcel/web-hacking-101-zh)
- [**233**Star][2y] [Py] [robotattackorg/robot-detect](https://github.com/robotattackorg/robot-detect) Detection script for the ROBOT vulnerability
+- [**233**Star][7m] [Py] [patois/dsync](https://github.com/patois/dsync) IDAPython plugin that synchronizes disassembler and decompiler views
- [**233**Star][2y] [palantir/alerting-detection-strategy-framework](https://github.com/palantir/alerting-detection-strategy-framework) A framework for developing alerting and detection strategies for incident response.
-- [**233**Star][24d] [HCL] [nozaq/terraform-aws-secure-baseline](https://github.com/nozaq/terraform-aws-secure-baseline) Terraform module to set up your AWS account with the secure baseline configuration based on CIS Amazon Web Services Foundations.
- [**233**Star][10m] [Py] [nethunteros/punter](https://github.com/nethunteros/punter) Hunt domain names using DNSDumpster, WHOIS, Reverse WHOIS, Shodan, Crimeflare
-- [**233**Star][1y] [Py] [nccgroup/shocker](https://github.com/nccgroup/shocker) A tool to find and exploit servers vulnerable to Shellshock
-- [**233**Star][4m] [PowerShell] [microsoft/aaronlocker](https://github.com/microsoft/aaronlocker) Robust and practical application whitelisting for Windows
- [**233**Star][6m] [Py] [maaaaz/nmaptocsv](https://github.com/maaaaz/nmaptocsv) A simple python script to convert Nmap output to CSV
- [**233**Star][2y] [C] [larsbrinkhoff/httptunnel](https://github.com/larsbrinkhoff/httptunnel) Bidirectional data stream tunnelled in HTTP requests.
-- [**233**Star][22d] [C] [kubo/plthook](https://github.com/kubo/plthook) Hook function calls by replacing PLT(Procedure Linkage Table) entries.
-- [**233**Star][19d] [Julia] [jrevels/cassette.jl](https://github.com/jrevels/cassette.jl) Overdub Your Julia Code
-- [**233**Star][7d] [Py] [inforion/idapython-cheatsheet](https://github.com/inforion/idapython-cheatsheet) Scripts and cheatsheets for IDAPython
-- [**233**Star][1y] [Ruby] [hahwul/droid-hunter](https://github.com/hahwul/droid-hunter) (deprecated) Android application vulnerability analysis and Android pentest tool
-- [**233**Star][2y] [Py] [evait-security/weeman](https://github.com/evait-security/weeman) HTTP server for phishing in python
-- [**233**Star][4m] [C] [devnoname120/vhbb](https://github.com/devnoname120/vhbb) Browse, download, and launch Vita homebrews!
-- [**233**Star][10m] [Py] [cryin/javaid](https://github.com/cryin/javaid) java source code static code analysis and danger function identify prog
-- [**233**Star][7m] [JS] [cliqz-oss/local-sheriff](https://github.com/cliqz-oss/local-sheriff) Think of Local sheriff as a recon tool in your browser (WebExtension). While you normally browse the internet, Local Sheriff works in the background to empower you in identifying what data points (PII) are being shared / leaked to which all third-parties.
-- [**233**Star][23d] [Common Lisp] [cffi/cffi](https://github.com/cffi/cffi) The Common Foreign Function Interface
-- [**233**Star][26d] [Go] [apuigsech/seekret](https://github.com/apuigsech/seekret) Go library and command line to seek for secrets on various sources.
-- [**232**Star][5m] [Shell] [hak5/packetsquirrel-payloads](https://github.com/hak5/packetsquirrel-payloads) The Official Packet Squirrel Payload Repository
-- [**232**Star][4m] [C#] [fsecurelabs/sharpgpoabuse](https://github.com/FSecureLABS/SharpGPOAbuse) take advantage of a user's edit rights on a Group Policy Object (GPO) in order to compromise the objects that are controlled by that GPO.
-- [**232**Star][1y] [Py] [3summer/ctf-rsa-tool](https://github.com/3summer/CTF-RSA-tool) a little tool help CTFer solve RSA problem
+- [**233**Star][2y] [JS] [google/password-alert](https://github.com/google/password-alert) A Chrome Extension to help protect against phishing attacks.
+- [**233**Star][2m] [Py] [gilligan/vim-lldb](https://github.com/gilligan/vim-lldb) lldb debugger integration plugin for vim
+- [**233**Star][4d] [Common Lisp] [cffi/cffi](https://github.com/cffi/cffi) The Common Foreign Function Interface
+- [**233**Star][28d] [Go] [apuigsech/seekret](https://github.com/apuigsech/seekret) Go library and command line to seek for secrets on various sources.
+- [**232**Star][2m] [C] [yifengyou/the-design-and-implementation-of-a-64-bit-os](https://github.com/yifengyou/The-design-and-implementation-of-a-64-bit-os) 《一个64位操作系统的设计与实现》读书笔记&随书源码
- [**232**Star][2m] [Ruby] [zt2/sqli-hunter](https://github.com/zt2/sqli-hunter) SQLi-Hunter is a simple HTTP proxy server and a SQLMAP API wrapper that makes digging SQLi easy.
-- [**232**Star][2y] [Py] [utds3lab/multiverse](https://github.com/utds3lab/multiverse) A static binary rewriter that does not use heuristics
- [**232**Star][5y] [C] [sztupy/luadec51](https://github.com/sztupy/luadec51) Lua Decompiler for Lua version 5.1
-- [**232**Star][7m] [C++] [strivexjun/xantidebug](https://github.com/strivexjun/xantidebug) VMProtect 3.x Anti-debug Method Improved
- [**232**Star][5y] [PHP] [smaash/quasibot](https://github.com/smaash/quasibot) complex webshell manager, quasi-http botnet.
-- [**232**Star][2m] [Java] [nickstadb/serializationdumper](https://github.com/nickstadb/serializationdumper) A tool to dump Java serialization streams in a more human readable form.
+- [**232**Star][2m] [C++] [richkmeli/richkware](https://github.com/richkmeli/richkware) Framework for building Windows malware, written in C++
- [**232**Star][9m] [Go] [masterzen/winrm](https://github.com/masterzen/winrm) Command-line tool and library for Windows remote command execution in Go
- [**232**Star][4y] [C] [markjandrews/wrk-v1.2](https://github.com/markjandrews/wrk-v1.2) Windows Research Kernel
-- [**232**Star][2y] [JS] [google/password-alert](https://github.com/google/password-alert) A Chrome Extension to help protect against phishing attacks.
+- [**232**Star][16d] [C#] [icsharpcode/avaloniailspy](https://github.com/icsharpcode/avaloniailspy) Avalonia-based .NET Decompiler (port of ILSpy)
+- [**232**Star][2m] [Propeller Spin] [grandideastudio/jtagulator](https://github.com/grandideastudio/jtagulator) Assisted discovery of on-chip debug interfaces
- [**232**Star][2y] [C++] [fireeye/simplifygraph](https://github.com/fireeye/simplifygraph) IDA Pro plugin to assist with complex graphs
- [**232**Star][4y] [JS] [firebug/firebug.next](https://github.com/firebug/firebug.next) Next Firebug generation built on top of native Firefox developer tools
-- [**232**Star][1m] [Ruby] [fabric8io/fluent-plugin-kubernetes_metadata_filter](https://github.com/fabric8io/fluent-plugin-kubernetes_metadata_filter) Enrich your fluentd events with Kubernetes metadata
+- [**232**Star][9d] [Java] [dexpatcher/dexpatcher-tool](https://github.com/dexpatcher/dexpatcher-tool) Android Dalvik bytecode patcher.
+- [**232**Star][4m] [C] [devnoname120/vhbb](https://github.com/devnoname120/vhbb) Browse, download, and launch Vita homebrews!
- [**232**Star][2y] [d33tah/call-for-wpa3](https://github.com/d33tah/call-for-wpa3) Call for WPA3 - what's wrong with WPA2 security and how to fix it
- [**232**Star][6m] [cr0hn/nosqlinjection_wordlists](https://github.com/cr0hn/nosqlinjection_wordlists) This repository contains payload to test NoSQL Injections
- [**232**Star][3y] [C] [canbus-triple/canbus-triple](https://github.com/canbus-triple/canbus-triple) CANBus Triple – The car hacking platform
-- [**231**Star][3m] [Swift] [shadowsocksr-live/ishadowsocksr](https://github.com/shadowsocksr-live/ishadowsocksr) ShadowsocksR for iOS, come from
-- [**231**Star][20d] [Py] [pyhackertarget/hackertarget](https://github.com/pyhackertarget/hackertarget) attack surface discovery and identification of security vulnerabilities
+- [**232**Star][3m] [Py] [boy-hack/airbug](https://github.com/boy-hack/airbug) Airbug(空气洞),收集漏洞poc用于安全产品
+- [**231**Star][10m] [HTML] [nicehash/excavator](https://github.com/nicehash/excavator) NiceHash's proprietary low-level CUDA miner
+- [**231**Star][1m] [HTML] [badd1e/disclosures](https://github.com/badd1e/disclosures) Zero-day and N-day security vulnerability notes, analysis, and proof-of-concepts
+- [**231**Star][6d] [HTML] [dependency-check/dependency-check-sonar-plugin](https://github.com/dependency-check/dependency-check-sonar-plugin) Integrates Dependency-Check reports into SonarQube
- [**231**Star][1y] [Jupyter Notebook] [wesleyraptor/streamingphish](https://github.com/wesleyraptor/streamingphish) Python-based utility that uses supervised machine learning to detect phishing domains from the Certificate Transparency log network.
+- [**231**Star][2y] [Py] [utds3lab/multiverse](https://github.com/utds3lab/multiverse) A static binary rewriter that does not use heuristics
+- [**231**Star][3y] [C#] [thrdev/socks5](https://github.com/thrdev/socks5) A full-fledged high-performance socks5 proxy server written in C#. Plugin support included.
+- [**231**Star][4m] [Java] [thisislibra/androidprojectcreator](https://github.com/thisislibra/androidprojectcreator) Convert an APK to an Android Studio Project using multiple open-source decompilers
- [**231**Star][2y] [C++] [silentbreaksec/throwback](https://github.com/silentbreaksec/throwback) HTTP/S Beaconing Implant
- [**231**Star][4y] [Shell] [nccgroup/metasploitavevasion](https://github.com/nccgroup/metasploitavevasion) Metasploit AV Evasion Tool
- [**231**Star][3y] [HTML] [mongodb-labs/disasm](https://github.com/mongodb-labs/disasm) Interactive Disassembler GUI - This Repository is NOT a supported MongoDB product
+- [**231**Star][2y] [Shell] [linuz/sticky-keys-slayer](https://github.com/linuz/sticky-keys-slayer) Scans for accessibility tools backdoors via RDP
- [**231**Star][2y] [Jupyter Notebook] [james91b/ida_ipython](https://github.com/james91b/ida_ipython) An IDA Pro Plugin for embedding an IPython Kernel
+- [**231**Star][1y] [C++] [ionescu007/simpleator](https://github.com/ionescu007/simpleator) Simpleator ("Simple-ator") is an innovative Windows-centric x64 user-mode application emulator that leverages several new features that were added in Windows 10 Spring Update (1803), also called "Redstone 4", with additional improvements that were made in Windows 10 October Update (1809), aka "Redstone 5".
- [**231**Star][2y] [C] [hardenedlinux/grsecurity-101-tutorials](https://github.com/hardenedlinux/grsecurity-101-tutorials) 增强 Linux 内核安全的内核补丁集
-- [**231**Star][2m] [C] [grant-h/qu1ckr00t](https://github.com/grant-h/qu1ckr00t) A PoC application demonstrating the power of an Android kernel arbitrary R/W.
-- [**231**Star][2m] [Propeller Spin] [grandideastudio/jtagulator](https://github.com/grandideastudio/jtagulator) Assisted discovery of on-chip debug interfaces
-- [**231**Star][2m] [Py] [gilligan/vim-lldb](https://github.com/gilligan/vim-lldb) lldb debugger integration plugin for vim
-- [**231**Star][26d] [JS] [bet4it/hyperpwn](https://github.com/bet4it/hyperpwn) A hyper plugin to provide a flexible GDB GUI with the help of GEF, pwndbg or peda
+- [**231**Star][7m] [Shell] [fransr/bountyplz](https://github.com/fransr/bountyplz) Automated security reporting from markdown templates (HackerOne and Bugcrowd are currently the platforms supported)
+- [**231**Star][3m] [Py] [evilmog/ntlmv1-multi](https://github.com/evilmog/ntlmv1-multi) NTLMv1 Multitool
+- [**231**Star][2d] [euphrat1ca/security_w1k1](https://github.com/euphrat1ca/security_w1k1) collect
- [**231**Star][2y] [C] [battelle/movfuscator](https://github.com/battelle/movfuscator) The single instruction C compiler
- [**230**Star][10m] [C++] [googleprojectzero/bochspwn-reloaded](https://github.com/googleprojectzero/bochspwn-reloaded) A Bochs-based instrumentation performing kernel memory taint tracking to detect disclosure of uninitialized memory to ring 3
-- [**230**Star][2y] [TypeScript] [weichx/cerialize](https://github.com/weichx/cerialize) Easy serialization through ES7/Typescript annotations
+- [**230**Star][2d] [C] [shchmue/lockpick_rcm](https://github.com/shchmue/lockpick_rcm) Nintendo Switch encryption key derivation bare metal RCM payload
+- [**230**Star][5y] [Shell] [s3jensen/iret](https://github.com/s3jensen/iret)
+- [**230**Star][7d] [PS] [rsmudge/elevatekit](https://github.com/rsmudge/elevatekit) The Elevate Kit demonstrates how to use third-party privilege escalation attacks with Cobalt Strike's Beacon payload.
- [**230**Star][5m] [HTML] [rootup/bfuzz](https://github.com/rootup/bfuzz) Fuzzing Browsers
-- [**230**Star][2m] [C++] [richkmeli/richkware](https://github.com/richkmeli/richkware) Framework for building Windows malware, written in C++
- [**230**Star][3y] [C] [omriiluz/nrf24-btle-decoder](https://github.com/omriiluz/nrf24-btle-decoder) Sniff and decode NRF24L01+ and Bluetooth Low Energy using RTL-SDR
-- [**230**Star][9d] [TypeScript] [ninoseki/mitaka](https://github.com/ninoseki/mitaka) A browser extension for OSINT search
-- [**230**Star][12m] [C++] [ionescu007/simpleator](https://github.com/ionescu007/simpleator) Simpleator ("Simple-ator") is an innovative Windows-centric x64 user-mode application emulator that leverages several new features that were added in Windows 10 Spring Update (1803), also called "Redstone 4", with additional improvements that were made in Windows 10 October Update (1809), aka "Redstone 5".
-- [**230**Star][7m] [Shell] [fransr/bountyplz](https://github.com/fransr/bountyplz) Automated security reporting from markdown templates (HackerOne and Bugcrowd are currently the platforms supported)
-- [**230**Star][3m] [Py] [evilmog/ntlmv1-multi](https://github.com/evilmog/ntlmv1-multi) NTLMv1 Multitool
+- [**230**Star][2y] [C++] [nickcano/xenoscan](https://github.com/nickcano/xenoscan) Open source memory scanner written in C++
+- [**230**Star][2m] [PS] [miriamxyra/eventlist](https://github.com/miriamxyra/eventlist) help improving your Audit capabilities and to help to build your Security Operation Center.
+- [**230**Star][3y] [Visual Basic .NET] [malwares/crypter](https://github.com/malwares/crypter) Windows Crypter
+- [**230**Star][8m] [C] [ctz/cifra](https://github.com/ctz/cifra) A collection of cryptographic primitives targeted at embedded use.
- [**230**Star][2m] [Java] [commonsguy/cwac-netsecurity](https://github.com/commonsguy/cwac-netsecurity) CWAC-NetSecurity: Simplifying Secure Internet Access
+- [**230**Star][3y] [Perl] [brendangregg/heatmap](https://github.com/brendangregg/heatmap) Heat map generation tools
+- [**230**Star][4m] [Py] [beaengine/beaengine](https://github.com/beaengine/beaengine) BeaEngine disasm project
- [**230**Star][1y] [Py] [audibleblink/doxycannon](https://github.com/audibleblink/doxycannon) A poorman's proxycannon and botnet, using docker, ovpn files, and a dante socks5 proxy
-- [**229**Star][30d] [HTML] [badd1e/disclosures](https://github.com/badd1e/disclosures) Zero-day and N-day security vulnerability notes, analysis, and proof-of-concepts
-- [**229**Star][27d] [HTML] [dependency-check/dependency-check-sonar-plugin](https://github.com/dependency-check/dependency-check-sonar-plugin) Integrates Dependency-Check reports into SonarQube
-- [**229**Star][8d] [C#] [xenocoderce/neo-confuserex](https://github.com/xenocoderce/neo-confuserex) Updated ConfuserEX, an open-source, free obfuscator for .NET applications
-- [**229**Star][7m] [Objective-C] [uliwitness/ulikit](https://github.com/uliwitness/ulikit) Miscellaneous open-sourced MacOS Cocoa code by yours truly.
-- [**229**Star][4m] [Java] [thisislibra/androidprojectcreator](https://github.com/thisislibra/androidprojectcreator) Convert an APK to an Android Studio Project using multiple open-source decompilers
-- [**229**Star][5y] [Shell] [s3jensen/iret](https://github.com/s3jensen/iret)
-- [**229**Star][6m] [Py] [patois/dsync](https://github.com/patois/dsync) IDAPython plugin that synchronizes disassembler and decompiler views
-- [**229**Star][2y] [C++] [nickcano/xenoscan](https://github.com/nickcano/xenoscan) Open source memory scanner written in C++
+- [**229**Star][1y] [C] [iceonsun/rsock](https://github.com/iceonsun/rsock) The best companion of kcptun
+- [**229**Star][1y] [Java] [xxxyanchenxxx/virtualappex](https://github.com/xxxyanchenxxx/virtualappex) VirtualApp 9.0适配
+- [**229**Star][4m] [JS] [varchashva/letsmapyournetwork](https://github.com/varchashva/letsmapyournetwork) Lets Map Your Network enables you to visualise your physical network in form of graph with zero manual error
+- [**229**Star][7m] [ObjC] [uliwitness/ulikit](https://github.com/uliwitness/ulikit) Miscellaneous open-sourced MacOS Cocoa code by yours truly.
+- [**229**Star][6y] [squonk42/tl-wr703n](https://github.com/squonk42/tl-wr703n) Reverse Engineering work on the TP-LINK TL-WR703N 150M 802.11n Wi-Fi Router
+- [**229**Star][9m] [C++] [microsoft/windbg-samples](https://github.com/microsoft/windbg-samples) Sample extensions, scripts, and API uses for WinDbg.
- [**229**Star][2y] [Batchfile] [mdsecactivebreach/rdpinception](https://github.com/mdsecactivebreach/rdpinception) A proof of concept for the RDP Inception Attack
-- [**229**Star][2y] [Shell] [linuz/sticky-keys-slayer](https://github.com/linuz/sticky-keys-slayer) Scans for accessibility tools backdoors via RDP
- [**229**Star][5y] [keesj/gomo](https://github.com/keesj/gomo) Wiki pages about Android internals
-- [**229**Star][2y] [Java] [ikkisoft/serialkiller](https://github.com/ikkisoft/serialkiller) Look-Ahead Java Deserialization Library
-- [**229**Star][14d] [C#] [icsharpcode/avaloniailspy](https://github.com/icsharpcode/avaloniailspy) Avalonia-based .NET Decompiler (port of ILSpy)
-- [**229**Star][7d] [OCaml] [fstarlang/kremlin](https://github.com/fstarlang/kremlin) KreMLin is a tool for extracting low-level F* programs to readable C code
+- [**229**Star][4m] [C++] [justasmasiulis/lazy_importer](https://github.com/justasmasiulis/lazy_importer) library for importing functions from dlls in a hidden, reverse engineer unfriendly way
+- [**229**Star][2d] [OCaml] [fstarlang/kremlin](https://github.com/fstarlang/kremlin) KreMLin is a tool for extracting low-level F* programs to readable C code
- [**229**Star][2m] [C] [elfmaster/libelfmaster](https://github.com/elfmaster/libelfmaster) Secure ELF parsing/loading library for forensics reconstruction of malware, and robust reverse engineering tools
- [**229**Star][4y] [Py] [danmcinerney/elite-proxy-finder](https://github.com/danmcinerney/elite-proxy-finder) Finds public elite anonymity proxies and concurrently tests them
-- [**229**Star][7m] [C] [ctz/cifra](https://github.com/ctz/cifra) A collection of cryptographic primitives targeted at embedded use.
-- [**229**Star][3y] [Perl] [brendangregg/heatmap](https://github.com/brendangregg/heatmap) Heat map generation tools
- [**229**Star][4y] [JS] [brainshave/ancient-oak](https://github.com/brainshave/ancient-oak) Immutable data trees in JavaScript.
- [**229**Star][1y] [Shell] [aplura/tango](https://github.com/aplura/tango) Honeypot Intelligence with Splunk
- [**229**Star][1y] [Py] [amiller/honeybadgerbft](https://github.com/amiller/honeybadgerbft) The Honey Badger of BFT Protocols
+- [**229**Star][2y] [CoffeeScript] [521xueweihan/shadowsocks-heroku](https://github.com/521xueweihan/shadowsocks-heroku) 本项目已删除
+- [**228**Star][5m] [aleenzz/php_bug_wiki](https://github.com/aleenzz/php_bug_wiki) 代码审计相关的一些知识
+- [**228**Star][3y] [C] [klsecservices/invoke-vnc](https://github.com/klsecservices/Invoke-Vnc) executes a VNC agent in-memory and initiates a reverse connection, or binds to a specified port.
- [**228**Star][1y] [C++] [wwwg/wasmdec](https://github.com/wwwg/wasmdec) WebAssembly to C decompiler
-- [**228**Star][19d] [w0lfschild/macos_headers](https://github.com/w0lfschild/macos_headers) a class dump of most Apple Applications and Frameworks on macOS
+- [**228**Star][3m] [Py] [whitel1st/docem](https://github.com/whitel1st/docem) Uility to embed XXE and XSS payloads in docx,odt,pptx,etc (OXML_XEE on steroids)
+- [**228**Star][1m] [Py] [webbreacher/whatsmyname](https://github.com/webbreacher/whatsmyname) This repository has the unified data required to perform user enumeration on various websites. Content is in a JSON file and can easily be used in other projects.
+- [**228**Star][28d] [C] [vusec/ridl](https://github.com/vusec/ridl) RIDL test suite and exploits
- [**228**Star][4y] [Py] [trustedsec/spraywmi](https://github.com/trustedsec/spraywmi) SprayWMI is an easy way to get mass shells on systems that support WMI. Much more effective than PSEXEC as it does not leave remnants on a system.
- [**228**Star][4m] [C] [tishion/mmloader](https://github.com/tishion/mmloader) A library for loading dll module bypassing windows PE loader from memory (x86/x64)
-- [**228**Star][6y] [squonk42/tl-wr703n](https://github.com/squonk42/tl-wr703n) Reverse Engineering work on the TP-LINK TL-WR703N 150M 802.11n Wi-Fi Router
+- [**228**Star][11m] [C] [stephenbradshaw/vulnserver](https://github.com/stephenbradshaw/vulnserver) Vulnerable server used for learning software exploitation
+- [**228**Star][2m] [C++] [soarqin/finalhe](https://github.com/soarqin/finalhe) Final h-encore, a tool to push h-encore exploit for PS VITA/PS TV automatically
- [**228**Star][3y] [C++] [secrary/infectpe](https://github.com/secrary/infectpe) Inject custom code into PE file [This project is not maintained anymore]
-- [**228**Star][3y] [Visual Basic] [malwares/crypter](https://github.com/malwares/crypter) Windows Crypter
+- [**228**Star][6d] [HTML] [patrowl/patrowlmanager](https://github.com/patrowl/patrowlmanager) PatrOwl - Open Source, Smart and Scalable Security Operations Orchestration Platform
+- [**228**Star][2y] [C] [opsxcq/exploit-cve-2017-7494](https://github.com/opsxcq/exploit-cve-2017-7494) SambaCry exploit and vulnerable container (CVE-2017-7494)
+- [**228**Star][4y] [C] [maijin/workshop2015](https://github.com/maijin/workshop2015)
- [**228**Star][1y] [Py] [leapsecurity/libssh-scanner](https://github.com/leapsecurity/libssh-scanner) Script to identify hosts vulnerable to CVE-2018-10933
+- [**228**Star][2m] [Py] [johnnykv/heralding](https://github.com/johnnykv/heralding) Credentials catching honeypot
- [**228**Star][9m] [Py] [ivanvza/arpy](https://github.com/ivanvza/arpy) Mac OSX ARP spoof (MiTM) tool that can also plug into Gource
-- [**228**Star][8d] [JS] [frenchyeti/dexcalibur](https://github.com/frenchyeti/dexcalibur) Dynamic binary instrumentation tool designed for Android application and powered by Frida. It disassembles dex, analyzes it statically, generates hooks, discovers reflected methods, stores intercepted data and does new things from it. Its aim is to be an all-in-one Android reverse engineering platform.
+- [**228**Star][2y] [Java] [ikkisoft/serialkiller](https://github.com/ikkisoft/serialkiller) Look-Ahead Java Deserialization Library
+- [**228**Star][9m] [Py] [honeynet/beeswarm](https://github.com/honeynet/beeswarm) Honeypot deployment made easy
+- [**228**Star][2d] [C] [frida/frida-gum](https://github.com/frida/frida-gum) Low-level code instrumentation library used by frida-core
+- [**228**Star][2y] [Py] [fortunec00kie/bug-monitor](https://github.com/fortunec00kie/bug-monitor) Seebug、structs、cve漏洞实时监控推送系统
+- [**228**Star][1y] [C#] [djhohnstein/sharpweb](https://github.com/djhohnstein/sharpweb) .NET 2.0 CLR project to retrieve saved browser credentials from Google Chrome, Mozilla Firefox and Microsoft Internet Explorer/Edge.
+- [**228**Star][3d] [Java] [constellation-app/constellation](https://github.com/constellation-app/constellation) A graph-focused data visualisation and interactive analysis application.
+- [**228**Star][26d] [Go] [cloudflare/xdpcap](https://github.com/cloudflare/xdpcap) tcpdump like XDP packet capture
- [**228**Star][2m] [Py] [anon-exploiter/sitebroker](https://github.com/anon-exploiter/sitebroker) A cross-platform python based utility for information gathering and penetration testing automation!
-- [**227**Star][3y] [C] [klsecservices/invoke-vnc](https://github.com/klsecservices/Invoke-Vnc) executes a VNC agent in-memory and initiates a reverse connection, or binds to a specified port.
-- [**227**Star][3y] [PowerShell] [xyntax/badusb-code](https://github.com/xyntax/badusb-code) 收集badusb的一些利用方式及代码
+- [**228**Star][2y] [PHP] [adamdoupe/wackopicko](https://github.com/adamdoupe/wackopicko) WackoPicko is a vulnerable web application used to test web application vulnerability scanners.
+- [**227**Star][3y] [PS] [xyntax/badusb-code](https://github.com/xyntax/badusb-code) 收集badusb的一些利用方式及代码
- [**227**Star][7m] [C] [wkz/ply](https://github.com/wkz/ply) Light-weight Dynamic Tracer for Linux
- [**227**Star][3y] [Swift] [trailofbits/secureenclavecrypto](https://github.com/trailofbits/secureenclavecrypto) Demonstration library for using the Secure Enclave on iOS
-- [**227**Star][11m] [C] [stephenbradshaw/vulnserver](https://github.com/stephenbradshaw/vulnserver) Vulnerable server used for learning software exploitation
+- [**227**Star][1y] [C#] [tevora-threat/sharpview](https://github.com/tevora-threat/sharpview) C# implementation of harmj0y's PowerView
+- [**227**Star][2y] [C#] [t3ntman/social-engineering-payloads](https://github.com/t3ntman/social-engineering-payloads) Collection of social engineering payloads
+- [**227**Star][9m] [Go] [stevenaldinger/decker](https://github.com/stevenaldinger/decker) Declarative penetration testing orchestration framework
+- [**227**Star][3y] [Py] [scrapy-plugins/scrapy-jsonrpc](https://github.com/scrapy-plugins/scrapy-jsonrpc) Scrapy extension to control spiders using JSON-RPC
- [**227**Star][2y] [Py] [requests/requests-ntlm](https://github.com/requests/requests-ntlm) NTLM authentication support for Requests.
- [**227**Star][7m] [Shell] [r00t-3xp10it/meterpreter_paranoid_mode-ssl](https://github.com/r00t-3xp10it/meterpreter_paranoid_mode-ssl) Meterpreter Paranoid Mode - SSL/TLS connections
-- [**227**Star][9m] [C++] [microsoft/windbg-samples](https://github.com/microsoft/windbg-samples) Sample extensions, scripts, and API uses for WinDbg.
+- [**227**Star][7m] [Py] [paradoxis/stegcracker](https://github.com/paradoxis/stegcracker) Steganography brute-force utility to uncover hidden data inside files
+- [**227**Star][9d] [Py] [mzfr/gtfo](https://github.com/mzfr/gtfo) Search gtfobins and lolbas files from your terminal
- [**227**Star][2y] [Py] [mazen160/struts-pwn_cve-2017-9805](https://github.com/mazen160/struts-pwn_cve-2017-9805) An exploit for Apache Struts CVE-2017-9805
-- [**227**Star][1y] [Py] [marekrei/sequence-labeler](https://github.com/marekrei/sequence-labeler) Neural network sequence labeling model
-- [**227**Star][4y] [C] [maijin/workshop2015](https://github.com/maijin/workshop2015)
-- [**227**Star][9m] [Py] [honeynet/beeswarm](https://github.com/honeynet/beeswarm) Honeypot deployment made easy
-- [**227**Star][14d] [C] [frida/frida-gum](https://github.com/frida/frida-gum) Low-level code instrumentation library used by frida-core
-- [**227**Star][2y] [Py] [fortunec00kie/bug-monitor](https://github.com/fortunec00kie/bug-monitor) Seebug、structs、cve漏洞实时监控推送系统
-- [**227**Star][8d] [euphrat1ca/security_w1k1](https://github.com/euphrat1ca/security_w1k1) collect
+- [**227**Star][2m] [C] [leecher1337/ntvdmx64](https://github.com/leecher1337/ntvdmx64) Run Microsoft Windows NTVDM (DOS) on 64bit Editions
+- [**227**Star][2d] [C] [ipsn/go-libtor](https://github.com/ipsn/go-libtor) Self-contained Tor from Go
+- [**227**Star][3m] [C++] [dreamstalker/rehlds](https://github.com/dreamstalker/rehlds) Reverse-engineered HLDS
- [**227**Star][3m] [C] [dongdongshe/neuzz](https://github.com/dongdongshe/neuzz) neural network assisted fuzzer
-- [**227**Star][4m] [Py] [beaengine/beaengine](https://github.com/beaengine/beaengine) BeaEngine disasm project
+- [**227**Star][3y] [Perl] [davidpepper/fierce-domain-scanner](https://github.com/davidpepper/fierce-domain-scanner) Fierce.pl Domain Scanner
+- [**227**Star][10m] [Py] [calidog/certstream-python](https://github.com/calidog/certstream-python) Python library for connecting to CertStream
+- [**227**Star][2y] [Py] [automatingosint/osint_public](https://github.com/automatingosint/osint_public)
+- [**227**Star][4y] [Py] [allfro/pymetasploit](https://github.com/allfro/pymetasploit) A full-fledged msfrpc library for Metasploit framework.
+- [**226**Star][1y] [lanjelot/kb](https://github.com/lanjelot/kb) Respositoy of all my notes on infosec I have been building up over the years
- [**226**Star][3y] [Py] [praetorian-code/pyshell](https://github.com/praetorian-code/pyshell) PyShell makes interacting with web-based command injection less painful, emulating the feel of an interactive shell as much as possible.
- [**226**Star][8m] [PHP] [wmjonssen/centcount-analytics](https://github.com/wmjonssen/centcount-analytics) An open-source web analytics software. Developed by PHP + MySQL + Redis, Can be easily deployed on your own server, 100% data ownership.
-- [**226**Star][3m] [Py] [whitel1st/docem](https://github.com/whitel1st/docem) Uility to embed XXE and XSS payloads in docx,odt,pptx,etc (OXML_XEE on steroids)
-- [**226**Star][1m] [Py] [webbreacher/whatsmyname](https://github.com/webbreacher/whatsmyname) This repository has the unified data required to perform user enumeration on various websites. Content is in a JSON file and can easily be used in other projects.
-- [**226**Star][26d] [C] [vusec/ridl](https://github.com/vusec/ridl) RIDL test suite and exploits
- [**226**Star][2m] [Py] [volatilityfoundation/profiles](https://github.com/volatilityfoundation/profiles) Volatility profiles for Linux and Mac OS X
- [**226**Star][3y] [Py] [uber/focuson](https://github.com/uber/focuson) A tool to surface security issues in python code
- [**226**Star][4y] [Py] [trevp/tlslite](https://github.com/trevp/tlslite) TLS Library in python
-- [**226**Star][1y] [C#] [tevora-threat/sharpview](https://github.com/tevora-threat/sharpview) C# implementation of harmj0y's PowerView
-- [**226**Star][2y] [C#] [t3ntman/social-engineering-payloads](https://github.com/t3ntman/social-engineering-payloads) Collection of social engineering payloads
-- [**226**Star][9m] [Go] [stevenaldinger/decker](https://github.com/stevenaldinger/decker) Declarative penetration testing orchestration framework
-- [**226**Star][2m] [C++] [soarqin/finalhe](https://github.com/soarqin/finalhe) Final h-encore, a tool to push h-encore exploit for PS VITA/PS TV automatically
-- [**226**Star][3y] [Py] [scrapy-plugins/scrapy-jsonrpc](https://github.com/scrapy-plugins/scrapy-jsonrpc) Scrapy extension to control spiders using JSON-RPC
-- [**226**Star][11d] [TypeScript] [qtgate/qtgate-desktop-client](https://github.com/qtgate/qtgate-desktop-client) Become a trustworthy ally for the Internet Freedom
+- [**226**Star][7d] [TS] [qtgate/qtgate-desktop-client](https://github.com/qtgate/qtgate-desktop-client) Become a trustworthy ally for the Internet Freedom
- [**226**Star][1y] [Go] [opennota/check](https://github.com/opennota/check) A set of utilities for checking Go sources. This repository has migrated to
- [**226**Star][1y] [Go] [netxfly/sec_check](https://github.com/netxfly/sec_check) Cross platform security detection tool
-- [**226**Star][2m] [PowerShell] [miriamxyra/eventlist](https://github.com/miriamxyra/eventlist) help improving your Audit capabilities and to help to build your Security Operation Center.
-- [**226**Star][2m] [Py] [johnnykv/heralding](https://github.com/johnnykv/heralding) Credentials catching honeypot
+- [**226**Star][1y] [Py] [marekrei/sequence-labeler](https://github.com/marekrei/sequence-labeler) Neural network sequence labeling model
- [**226**Star][4y] [Py] [hood3drob1n/jsrat-py](https://github.com/hood3drob1n/jsrat-py) This is my implementation of JSRat.ps1 in Python so you can now run the attack server from any OS instead of being limited to a Windows OS with Powershell enabled.
- [**226**Star][6m] [Rust] [gamozolabs/mesos](https://github.com/gamozolabs/mesos) Binary coverage tool without binary modification for Windows
-- [**226**Star][11m] [duoergun0729/2book](https://github.com/duoergun0729/2book) 《Web安全之深度学习实战》
-- [**226**Star][3m] [C++] [dreamstalker/rehlds](https://github.com/dreamstalker/rehlds) Reverse-engineered HLDS
-- [**226**Star][7d] [Java] [dexpatcher/dexpatcher-tool](https://github.com/dexpatcher/dexpatcher-tool) Android Dalvik bytecode patcher.
-- [**226**Star][3y] [Perl] [davidpepper/fierce-domain-scanner](https://github.com/davidpepper/fierce-domain-scanner) Fierce.pl Domain Scanner
-- [**226**Star][3m] [Py] [boy-hack/airbug](https://github.com/boy-hack/airbug) Airbug(空气洞),收集漏洞poc用于安全产品
+- [**226**Star][8d] [Py] [elevenpaths/homepwn](https://github.com/elevenpaths/homepwn) HomePwn - Swiss Army Knife for Pentesting of IoT Devices
+- [**226**Star][4m] [Py] [duo-labs/isthislegit](https://github.com/duo-labs/isthislegit) Dashboard to collect, analyze, and respond to reported phishing emails.
+- [**226**Star][1m] [cpuu/awesome-fuzzing](https://github.com/cpuu/awesome-fuzzing) A curated list of awesome Fuzzing(or Fuzz Testing) for software security
+- [**226**Star][2m] [Go] [brompwnie/botb](https://github.com/brompwnie/botb) A container analysis and exploitation tool for pentesters and engineers.
+- [**226**Star][6m] [Py] [blark/aiodnsbrute](https://github.com/blark/aiodnsbrute) Python 3.5+ DNS asynchronous brute force utility
- [**226**Star][2y] [Py] [alibaba/iossecaudit](https://github.com/alibaba/iossecaudit) iOS Security Audit Toolit - A semi-automatic tool for iOS App security audit and iOS reverse engineering
-- [**226**Star][2y] [PHP] [adamdoupe/wackopicko](https://github.com/adamdoupe/wackopicko) WackoPicko is a vulnerable web application used to test web application vulnerability scanners.
-- [**225**Star][5m] [aleenzz/php_bug_wiki](https://github.com/aleenzz/php_bug_wiki) 代码审计相关的一些知识
+- [**225**Star][1y] [dustyfresh/php-vulnerability-audit-cheatsheet](https://github.com/dustyfresh/php-vulnerability-audit-cheatsheet) This will assist you in the finding of potentially vulnerable PHP code. Each type of grep command is categorized in the type of vulnerabilities you generally find with that function.
- [**225**Star][5y] [Ruby] [pwnwiki/q](https://github.com/pwnwiki/q) Exploit Pack for Metasploit - Collection of modules gathered across time and internets
-- [**225**Star][1y] [Java] [xxxyanchenxxx/virtualappex](https://github.com/xxxyanchenxxx/virtualappex) VirtualApp 9.0适配
-- [**225**Star][4m] [JS] [varchashva/letsmapyournetwork](https://github.com/varchashva/letsmapyournetwork) Lets Map Your Network enables you to visualise your physical network in form of graph with zero manual error
-- [**225**Star][8d] [HTML] [patrowl/patrowlmanager](https://github.com/patrowl/patrowlmanager) PatrOwl - Open Source, Smart and Scalable Security Operations Orchestration Platform
-- [**225**Star][7m] [Py] [paradoxis/stegcracker](https://github.com/paradoxis/stegcracker) Steganography brute-force utility to uncover hidden data inside files
-- [**225**Star][2y] [C] [opsxcq/exploit-cve-2017-7494](https://github.com/opsxcq/exploit-cve-2017-7494) SambaCry exploit and vulnerable container (CVE-2017-7494)
+- [**225**Star][13d] [JS] [txthinking/blackwhite](https://github.com/txthinking/blackwhite) Domain, CIDR, IP black/white list, PAC generator
+- [**225**Star][1y] [C++] [ucsb-seclab/dr_checker](https://github.com/ucsb-seclab/dr_checker) A Soundy Vulnerability Detection Tool for Linux Kernel Drivers
+- [**225**Star][1m] [C] [snar/bgpq3](https://github.com/snar/bgpq3) bgp filtering automation tool
+- [**225**Star][1m] [Py] [sethsec/celerystalk](https://github.com/sethsec/celerystalk) An asynchronous enumeration & vulnerability scanner. Run all the tools on all the hosts.
+- [**225**Star][7d] [o-mg/demonseed](https://github.com/o-mg/demonseed) minimal malicious USB cabl
- [**225**Star][5y] [Py] [nccgroup/umap](https://github.com/nccgroup/umap) The USB host security assessment tool
- [**225**Star][5y] [Py] [nanyomy/dht-woodworm](https://github.com/nanyomy/dht-woodworm) this python repo is used to get the info_hash from DHT network, enjoy it
-- [**225**Star][7d] [Py] [mzfr/gtfo](https://github.com/mzfr/gtfo) Search gtfobins and lolbas files from your terminal
-- [**225**Star][5y] [Objective-C] [limneos/weak_classdump](https://github.com/limneos/weak_classdump) Cycript real-time classdump . An alternative for encrypted binaries
+- [**225**Star][5y] [ObjC] [limneos/weak_classdump](https://github.com/limneos/weak_classdump) Cycript real-time classdump . An alternative for encrypted binaries
+- [**225**Star][4m] [JS] [jtmelton/appsensor](https://github.com/jtmelton/appsensor) A toolkit for building self-defending applications through real-time event detection and response
+- [**225**Star][2m] [Py] [jackeriss/email_my_pc](https://github.com/jackeriss/email_my_pc) 远程监控电脑,也许一切只需要一封邮件。
+- [**225**Star][2y] [fuzzysecurity/defcon25](https://github.com/fuzzysecurity/defcon25) UAC 0day, all day!
- [**225**Star][3m] [Py] [eth0izzle/the-endorser](https://github.com/eth0izzle/the-endorser) An OSINT tool that allows you to draw out relationships between people on LinkedIn via endorsements/skills.
+- [**225**Star][2m] [Py] [crowdstrike/automactc](https://github.com/crowdstrike/automactc) Automated Mac Forensic Triage Collector
- [**225**Star][3y] [chaitin/sqlchop](https://github.com/chaitin/sqlchop) [DEPRECATED]A novel SQL injection detection engine built on top of SQL tokenizing and syntax analysis.
-- [**225**Star][10m] [Py] [calidog/certstream-python](https://github.com/calidog/certstream-python) Python library for connecting to CertStream
-- [**225**Star][2y] [Py] [automatingosint/osint_public](https://github.com/automatingosint/osint_public)
-- [**225**Star][4y] [Py] [allfro/pymetasploit](https://github.com/allfro/pymetasploit) A full-fledged msfrpc library for Metasploit framework.
-- [**224**Star][1y] [dustyfresh/php-vulnerability-audit-cheatsheet](https://github.com/dustyfresh/php-vulnerability-audit-cheatsheet) This will assist you in the finding of potentially vulnerable PHP code. Each type of grep command is categorized in the type of vulnerabilities you generally find with that function.
+- [**224**Star][8m] [Py] [sethmlarson/virtualbox-python](https://github.com/sethmlarson/virtualbox-python) Complete implementation of VirtualBox's COM API with a Pythonic interface.
- [**224**Star][4y] [Java] [nowsecure/android-forensics](https://github.com/nowsecure/android-forensics) Open source Android Forensics app and framework
-- [**224**Star][12d] [GLSL] [westpointltd/tls_prober](https://github.com/westpointltd/tls_prober) A tool to fingerprint SSL/TLS servers
-- [**224**Star][1m] [C] [snar/bgpq3](https://github.com/snar/bgpq3) bgp filtering automation tool
+- [**224**Star][14d] [GLSL] [westpointltd/tls_prober](https://github.com/westpointltd/tls_prober) A tool to fingerprint SSL/TLS servers
- [**224**Star][4m] [C] [semmle/securityexploits](https://github.com/semmle/securityexploits) PoC exploits from the Semmle Security Research team
+- [**224**Star][2y] [Py] [rub-syssec/syntia](https://github.com/rub-syssec/syntia) Program synthesis based deobfuscation framework for the USENIX 2017 paper "Syntia: Synthesizing the Semantics of Obfuscated Code"
+- [**224**Star][5m] [Py] [rub-nds/corstest](https://github.com/rub-nds/corstest) A simple CORS misconfiguration scanner
- [**224**Star][4y] [PHP] [ripsscanner/rips](https://github.com/ripsscanner/rips) RIPS - A static source code analyser for vulnerabilities in PHP scripts
- [**224**Star][6m] [ANTLR] [myriadrf/limesdr-usb](https://github.com/myriadrf/limesdr-usb) USB 3.0 version of the LimeSDR board
-- [**224**Star][7d] [Py] [jamesturk/django-honeypot](https://github.com/jamesturk/django-honeypot)
-- [**224**Star][2y] [fuzzysecurity/defcon25](https://github.com/fuzzysecurity/defcon25) UAC 0day, all day!
+- [**224**Star][1m] [C] [libyal/libfvde](https://github.com/libyal/libfvde) Library and tools to access FileVault Drive Encryption (FVDE) encrypted volumes
+- [**224**Star][6d] [Py] [kmyk/online-judge-tools](https://github.com/kmyk/online-judge-tools) Tools for online judge services. Downloading sample cases, Testing/Submitting your code, and various utilities.
+- [**224**Star][9d] [Py] [jamesturk/django-honeypot](https://github.com/jamesturk/django-honeypot)
+- [**224**Star][1y] [Shell] [edoverflow/megplus](https://github.com/edoverflow/megplus) Automated reconnaissance wrapper — TomNomNom's meg on steroids. [DEPRECATED]
+- [**224**Star][2d] [Py] [cyberreboot/poseidon](https://github.com/cyberreboot/poseidon) Poseidon is a python-based application that leverages software defined networks (SDN) to acquire and then feed network traffic to a number of machine learning techniques. The machine learning algorithms classify and predict both the type of device and if the device is acting normally or abnormally.
+- [**224**Star][1y] [PHP] [cuckoosandbox/monitor](https://github.com/cuckoosandbox/monitor) The new Cuckoo Monitor.
- [**224**Star][1y] [Shell] [ctfs/write-ups-2018](https://github.com/ctfs/write-ups-2018) Wiki-like CTF write-ups repository, maintained by the community. 2018
-- [**224**Star][2m] [Py] [crowdstrike/automactc](https://github.com/crowdstrike/automactc) Automated Mac Forensic Triage Collector
-- [**224**Star][1m] [cpuu/awesome-fuzzing](https://github.com/cpuu/awesome-fuzzing) A curated list of awesome Fuzzing(or Fuzz Testing) for software security
-- [**224**Star][6m] [Py] [blark/aiodnsbrute](https://github.com/blark/aiodnsbrute) Python 3.5+ DNS asynchronous brute force utility
- [**224**Star][3y] [Py] [az0ne/github_nuggests](https://github.com/az0ne/github_nuggests) 自动爬取Github上文件敏感信息泄露,抓取邮箱密码并自动登录邮箱验证,支持126,qq,sina,163邮箱
- [**224**Star][3y] [PHP] [aszone/avenger-sh](https://github.com/aszone/avenger-sh) Project for finding vunerabilities in mass.
-- [**224**Star][1y] [Py] [9b/chirp](https://github.com/9b/chirp) Interface to manage and centralize Google Alert information
+- [**224**Star][2y] [Py] [9b/chirp](https://github.com/9b/chirp) Interface to manage and centralize Google Alert information
- [**224**Star][7m] [Java] [0xalexei/infiltrate2019](https://github.com/0xalexei/infiltrate2019) INFILTRATE 2019 Demo Materials
-- [**223**Star][24d] [C++] [boomerangdecompiler/boomerang](https://github.com/BoomerangDecompiler/boomerang) Boomerang Decompiler - Fighting the code-rot :)
+- [**223**Star][26d] [C++] [boomerangdecompiler/boomerang](https://github.com/BoomerangDecompiler/boomerang) Boomerang Decompiler - Fighting the code-rot :)
+- [**223**Star][3m] [Java] [virb3/trustmealready](https://github.com/virb3/trustmealready) Disable SSL verification and pinning on Android, system-wide
- [**223**Star][2y] [Go] [vedhavyas/zwfp](https://github.com/vedhavyas/zwfp) Zero-Width fingerprinting
-- [**223**Star][25d] [Py] [secureworks/dalton](https://github.com/secureworks/dalton) Suricata and Snort IDS rule and pcap testing system
+- [**223**Star][1m] [Dockerfile] [thinkst/canarytokens-docker](https://github.com/thinkst/canarytokens-docker) Docker configuration to quickly setup your own Canarytokens.
+- [**223**Star][4y] [Ruby] [strazzere/apkfuscator](https://github.com/strazzere/apkfuscator) A generic DEX file obfuscator and munger
+- [**223**Star][27d] [Py] [secureworks/dalton](https://github.com/secureworks/dalton) Suricata and Snort IDS rule and pcap testing system
+- [**223**Star][2m] [Shell] [screetsec/sudomy](https://github.com/screetsec/sudomy) Sudomy is a subdomain enumeration tool, created using a bash script, to analyze domains and collect subdomains in fast and comprehensive way . Report output in HTML or CSV format
+- [**223**Star][6m] [Py] [ruped24/toriptables2](https://github.com/ruped24/toriptables2) Tor Iptables script is an anonymizer that sets up iptables and tor to route all services and traffic including DNS through the Tor network.
- [**223**Star][5m] [JS] [pavanw3b/sh00t](https://github.com/pavanw3b/sh00t) Security Testing is not as simple as right click > Scan. It's messy, a tough game. What if you had missed to test just that one thing and had to regret later? Sh00t is a highly customizable, intelligent platform that understands the life of bug hunters and emphasizes on manual security testing.
- [**223**Star][10m] [C] [muquit/mailsend](https://github.com/muquit/mailsend) A program to send mail via SMTP from command line
- [**223**Star][2y] [Max] [maroueneboubakri/lscan](https://github.com/maroueneboubakri/lscan) lscan is a library identification tool on statically linked/stripped binaries
-- [**223**Star][1m] [C] [libyal/libfvde](https://github.com/libyal/libfvde) Library and tools to access FileVault Drive Encryption (FVDE) encrypted volumes
-- [**223**Star][2y] [C] [jas502n/0day-security-software-vulnerability-analysis-technology](https://github.com/jas502n/0day-security-software-vulnerability-analysis-technology) 0day安全_软件漏洞分析技术
+- [**223**Star][1y] [Java] [ewilded/psychopath](https://github.com/ewilded/psychopath) psychoPATH - an advanced path traversal tool. Features: evasive techniques, dynamic web root list generation, output encoding, site map-searching payload generator, LFI mode, nix & windows support, single byte generator, payload export.
- [**223**Star][10m] [C#] [equifox/ksdumper](https://github.com/equifox/ksdumper) Dumping processes using the power of kernel space !
- [**223**Star][3y] [Py] [dxa4481/snapper](https://github.com/dxa4481/snapper) A security tool for grabbing screenshots of many web hosts
-- [**223**Star][4m] [Py] [duo-labs/isthislegit](https://github.com/duo-labs/isthislegit) Dashboard to collect, analyze, and respond to reported phishing emails.
- [**223**Star][11m] [Perl] [daniel-nichter/hackmysql.com](https://github.com/daniel-nichter/hackmysql.com) Deprecated tools from HackMySQL.com
+- [**223**Star][6m] [JS] [cr0hn/vulnerable-node](https://github.com/cr0hn/vulnerable-node) A very vulnerable web site written in NodeJS with the purpose of have a project with identified vulnerabilities to test the quality of security analyzers tools tools
+- [**223**Star][2m] [Go] [caddyserver/forwardproxy](https://github.com/caddyserver/forwardproxy) Forward proxy plugin for the Caddy web server
+- [**223**Star][2m] [Py] [brent-stone/can_reverse_engineering](https://github.com/brent-stone/can_reverse_engineering) Automated Payload Reverse Engineering Pipeline for the Controller Area Network (CAN) protocol
- [**223**Star][6y] [Shell] [brav0hax/easy-creds](https://github.com/brav0hax/easy-creds) leverages tools for stealing credentials during a pen test
- [**223**Star][2y] [Py] [beetlechunks/redsails](https://github.com/beetlechunks/redsails) RedSails is a Python based post-exploitation project aimed at bypassing host based security monitoring and logging. DerbyCon 2017 Talk:
-- [**222**Star][1y] [lanjelot/kb](https://github.com/lanjelot/kb) Respositoy of all my notes on infosec I have been building up over the years
+- [**222**Star][3y] [Java] [guardianproject/lildebi](https://github.com/guardianproject/lildebi) UNMAINTAINED please adopt! we can no longer maintain this
- [**222**Star][1y] [C++] [wnagzihxa1n/browsersecurity](https://github.com/wnagzihxa1n/browsersecurity) 我在学习浏览器安全过程中整理的漏洞分析笔记与相关的学习资料
-- [**222**Star][2m] [vixentael/my-talks](https://github.com/vixentael/my-talks) List of my talks and workshops: security engineering, applied cryptography, secure software development
-- [**222**Star][1y] [C++] [ucsb-seclab/dr_checker](https://github.com/ucsb-seclab/dr_checker) A Soundy Vulnerability Detection Tool for Linux Kernel Drivers
-- [**222**Star][4y] [Ruby] [strazzere/apkfuscator](https://github.com/strazzere/apkfuscator) A generic DEX file obfuscator and munger
+- [**222**Star][13d] [PHP] [wapmorgan/phpcodefixer](https://github.com/wapmorgan/phpcodefixer) Analyzer of PHP code to search issues with deprecated functionality in newer interpreter versions.
+- [**222**Star][2d] [vixentael/my-talks](https://github.com/vixentael/my-talks) List of my talks and workshops: security engineering, applied cryptography, secure software development
+- [**222**Star][1y] [Py] [tkcert/mail-security-tester](https://github.com/tkcert/mail-security-tester) A testing framework for mail security and filtering solutions.
- [**222**Star][2y] [Ruby] [sophsec/ruby-nmap](https://github.com/sophsec/ruby-nmap) A Rubyful interface to the Nmap exploration tool and security / port scanner.
-- [**222**Star][11d] [HTML] [sectalks/sectalks](https://github.com/sectalks/sectalks) CTFs, solutions and presentations
-- [**222**Star][2y] [Py] [rub-syssec/syntia](https://github.com/rub-syssec/syntia) Program synthesis based deobfuscation framework for the USENIX 2017 paper "Syntia: Synthesizing the Semantics of Obfuscated Code"
+- [**222**Star][13d] [HTML] [sectalks/sectalks](https://github.com/sectalks/sectalks) CTFs, solutions and presentations
- [**222**Star][3m] [Py] [rivermont/spidy](https://github.com/rivermont/spidy) The simple, easy to use command line web crawler.
+- [**222**Star][12m] [C++] [rexdf/commandtrayhost](https://github.com/rexdf/commandtrayhost) A command line program monitor systray for Windows
- [**222**Star][2y] [C] [lgeek/spec_poc_arm](https://github.com/lgeek/spec_poc_arm) Dump privileged ARM system registers from usermode using variant 3a of Meltdown
+- [**222**Star][4y] [lavalamp-/password-lists](https://github.com/lavalamp-/password-lists) Password lists for use in penetration testing situations, broken up by TLD.
+- [**222**Star][7m] [Py] [kingkaki/weblogic-scan](https://github.com/kingkaki/weblogic-scan) weblogic 漏洞扫描工具
- [**222**Star][2y] [JS] [jameshabben/evolve](https://github.com/jameshabben/evolve) Web interface for the Volatility Memory Forensics Framework
- [**222**Star][2y] [C++] [intelpt/windowsintelpt](https://github.com/intelpt/windowsintelpt) This driver implements the Intel Processor Trace functionality in Intel Skylake architecture for Microsoft Windows
- [**222**Star][2y] [C] [iaik/armageddon](https://github.com/iaik/armageddon) This repository contains tools to perform modern cache attacks on ARM.
-- [**222**Star][1y] [Java] [ewilded/psychopath](https://github.com/ewilded/psychopath) psychoPATH - an advanced path traversal tool. Features: evasive techniques, dynamic web root list generation, output encoding, site map-searching payload generator, LFI mode, nix & windows support, single byte generator, payload export.
-- [**222**Star][1y] [PHP] [cuckoosandbox/monitor](https://github.com/cuckoosandbox/monitor) The new Cuckoo Monitor.
-- [**222**Star][2y] [Perl] [csirtgadgets/massive-octo-spice](https://github.com/csirtgadgets/massive-octo-spice) DEPRECATED - USE v3 (bearded-avenger)
-- [**222**Star][1m] [Java] [constellation-app/constellation](https://github.com/constellation-app/constellation) A graph-focused data visualisation and interactive analysis application.
-- [**222**Star][2m] [Go] [brompwnie/botb](https://github.com/brompwnie/botb) A container analysis and exploitation tool for pentesters and engineers.
-- [**221**Star][8m] [Py] [sethmlarson/virtualbox-python](https://github.com/sethmlarson/virtualbox-python) Complete implementation of VirtualBox's COM API with a Pythonic interface.
-- [**221**Star][11d] [PHP] [wapmorgan/phpcodefixer](https://github.com/wapmorgan/phpcodefixer) Analyzer of PHP code to search issues with deprecated functionality in newer interpreter versions.
-- [**221**Star][27d] [PowerShell] [tonyphipps/meerkat](https://github.com/tonyphipps/meerkat) A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.
-- [**221**Star][1y] [Py] [tkcert/mail-security-tester](https://github.com/tkcert/mail-security-tester) A testing framework for mail security and filtering solutions.
-- [**221**Star][1m] [Py] [sethsec/celerystalk](https://github.com/sethsec/celerystalk) An asynchronous enumeration & vulnerability scanner. Run all the tools on all the hosts.
-- [**221**Star][6m] [Py] [ruped24/toriptables2](https://github.com/ruped24/toriptables2) Tor Iptables script is an anonymizer that sets up iptables and tor to route all services and traffic including DNS through the Tor network.
+- [**222**Star][3m] [Py] [caringcaribou/caringcaribou](https://github.com/caringcaribou/caringcaribou) A friendly car security exploration tool for the CAN bus
+- [**222**Star][4m] [PS] [byt3bl33d3r/offensivedlr](https://github.com/byt3bl33d3r/offensivedlr) Toolbox containing research notes & PoC code for weaponizing .NET's DLR
+- [**222**Star][3y] [axi0mx/alloc8](https://github.com/axi0mx/alloc8) Write-up for alloc8 untethered bootrom exploit for iPhone 3GS
+- [**221**Star][2d] [C] [googleprojectzero/ktrw](https://github.com/googleprojectzero/ktrw) An iOS kernel debugger based on a KTRR bypass for A11 iPhones that works with LLDB.
+- [**221**Star][10m] [Java] [uprootlabs/gngr](https://github.com/uprootlabs/gngr) a cross-platform browser focussed on privacy.
+- [**221**Star][29d] [PS] [tonyphipps/meerkat](https://github.com/tonyphipps/meerkat) A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.
+- [**221**Star][1y] [C] [openorbis/mira-project](https://github.com/openorbis/mira-project) The Homebrew Platform
- [**221**Star][2y] [Py] [ofek/privy](https://github.com/ofek/privy) An easy, fast lib to correctly password-protect your data
-- [**221**Star][1m] [o-mg/demonseed](https://github.com/o-mg/demonseed) minimal malicious USB cabl
-- [**221**Star][2m] [Py] [mushorg/snare](https://github.com/mushorg/snare) Super Next generation Advanced Reactive honEypot
-- [**221**Star][4y] [lavalamp-/password-lists](https://github.com/lavalamp-/password-lists) Password lists for use in penetration testing situations, broken up by TLD.
-- [**221**Star][10d] [Py] [kmyk/online-judge-tools](https://github.com/kmyk/online-judge-tools) Tools for online judge services. Downloading sample cases, Testing/Submitting your code, and various utilities.
-- [**221**Star][12m] [C] [gkdr/lurch](https://github.com/gkdr/lurch) XEP-0384: OMEMO Encryption for libpurple.
-- [**221**Star][1y] [Shell] [edoverflow/megplus](https://github.com/edoverflow/megplus) Automated reconnaissance wrapper — TomNomNom's meg on steroids. [DEPRECATED]
-- [**221**Star][3m] [Py] [caringcaribou/caringcaribou](https://github.com/caringcaribou/caringcaribou) A friendly car security exploration tool for the CAN bus
-- [**221**Star][4m] [PowerShell] [byt3bl33d3r/offensivedlr](https://github.com/byt3bl33d3r/offensivedlr) Toolbox containing research notes & PoC code for weaponizing .NET's DLR
-- [**221**Star][2m] [Py] [brent-stone/can_reverse_engineering](https://github.com/brent-stone/can_reverse_engineering) Automated Payload Reverse Engineering Pipeline for the Controller Area Network (CAN) protocol
-- [**221**Star][3y] [axi0mx/alloc8](https://github.com/axi0mx/alloc8) Write-up for alloc8 untethered bootrom exploit for iPhone 3GS
+- [**221**Star][3d] [Py] [mushorg/snare](https://github.com/mushorg/snare) Super Next generation Advanced Reactive honEypot
+- [**221**Star][6m] [Py] [malwarecantfly/vba2graph](https://github.com/malwarecantfly/vba2graph) Generate call graphs from VBA code, for easier analysis of malicious documents.
+- [**221**Star][1y] [C] [hashcat/princeprocessor](https://github.com/hashcat/princeprocessor) Standalone password candidate generator using the PRINCE algorithm
+- [**221**Star][2y] [C++] [ha7ilm/qtcsdr](https://github.com/ha7ilm/qtcsdr) It turns your Raspberry Pi 2 and RTL-SDR into an amateur radio transceiver! (Released under BSD license.)
+- [**221**Star][2y] [Perl] [csirtgadgets/massive-octo-spice](https://github.com/csirtgadgets/massive-octo-spice) DEPRECATED - USE v3 (bearded-avenger)
+- [**221**Star][3m] [Go] [cloudflare/tls-tris](https://github.com/cloudflare/tls-tris) crypto/tls, now with 100% more 1.3. THE API IS NOT STABLE AND DOCUMENTATION IS NOT GUARANTEED.
+- [**221**Star][11m] [Py] [chris408/known_hosts-hashcat](https://github.com/chris408/known_hosts-hashcat) A guide and tool for cracking ssh known_hosts files with hashcat
- [**221**Star][3y] [Smarty] [analytically/haproxy-ddos](https://github.com/analytically/haproxy-ddos) DDOS and attack resilient HAProxy configuration. To be used behind CloudFlare.
-- [**220**Star][24d] [Py] [volatilityfoundation/community](https://github.com/volatilityfoundation/community) Volatility plugins developed and maintained by the community
-- [**220**Star][1m] [Dockerfile] [thinkst/canarytokens-docker](https://github.com/thinkst/canarytokens-docker) Docker configuration to quickly setup your own Canarytokens.
-- [**220**Star][12m] [C++] [rexdf/commandtrayhost](https://github.com/rexdf/commandtrayhost) A command line program monitor systray for Windows
+- [**221**Star][3y] [1u4nx/exploit-exercises-nebula](https://github.com/1u4nx/exploit-exercises-nebula) Exploit-Exercises Nebula全攻略——Linux平台下的漏洞分析入门
+- [**220**Star][7m] [Shell] [t0xst/linux](https://github.com/t0xst/linux) linux安全检查
+- [**220**Star][26d] [Py] [volatilityfoundation/community](https://github.com/volatilityfoundation/community) Volatility plugins developed and maintained by the community
+- [**220**Star][5m] [Shell] [vedetta-com/vedetta](https://github.com/vedetta-com/vedetta) OpenBSD Router Boilerplate
+- [**220**Star][8m] [Go] [valyala/goloris](https://github.com/valyala/goloris) Slowloris for nginx DoS. Written in go
+- [**220**Star][2y] [sh4hin/mobileapp-pentest-cheatsheet](https://github.com/sh4hin/mobileapp-pentest-cheatsheet) The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.
+- [**220**Star][3y] [Standard ML] [rootkovska/codehash.db](https://github.com/rootkovska/codehash.db) A public database for software and firmware hashes
+- [**220**Star][4y] [C] [rapid7/meterpreter](https://github.com/rapid7/meterpreter) THIS REPO IS OBSOLETE. USE
- [**220**Star][11m] [PHP] [paragonie/anti-csrf](https://github.com/paragonie/anti-csrf) Full-Featured Anti-CSRF Library
-- [**220**Star][1y] [C] [openorbis/mira-project](https://github.com/openorbis/mira-project) The Homebrew Platform
- [**220**Star][8m] [opennetworkingfoundation/delta](https://github.com/opennetworkingfoundation/delta) PROJECT DELTA: SDN SECURITY EVALUATION FRAMEWORK
-- [**220**Star][6m] [Py] [malwarecantfly/vba2graph](https://github.com/malwarecantfly/vba2graph) Generate call graphs from VBA code, for easier analysis of malicious documents.
- [**220**Star][1y] [Go] [maksadbek/tcpovericmp](https://github.com/maksadbek/tcpovericmp) TCP implementation over ICMP protocol to bypass firewalls
- [**220**Star][8m] [letoram/senseye](https://github.com/letoram/senseye) Dynamic Visual Debugging / Reverse Engineering Toolsuite
- [**220**Star][2y] [Py] [kbdancer/tplinkkey](https://github.com/kbdancer/tplinkkey) 根据TPLINK系列路由器存在的漏洞批量扫描获取wifi密码
-- [**220**Star][4m] [C++] [justasmasiulis/lazy_importer](https://github.com/justasmasiulis/lazy_importer) library for importing functions from dlls in a hidden, reverse engineer unfriendly way
-- [**220**Star][4y] [PowerShell] [jseidl/babadook](https://github.com/jseidl/babadook) Connection-less Powershell Persistent and Resilient Backdoor
+- [**220**Star][4y] [PS] [jseidl/babadook](https://github.com/jseidl/babadook) Connection-less Powershell Persistent and Resilient Backdoor
+- [**220**Star][2m] [Py] [initstring/uptux](https://github.com/initstring/uptux) Linux privilege escalation checks (systemd, dbus, socket fun, etc)
+- [**220**Star][12m] [C] [gkdr/lurch](https://github.com/gkdr/lurch) XEP-0384: OMEMO Encryption for libpurple.
- [**220**Star][2y] [Py] [feicong/jni_helper](https://github.com/feicong/jni_helper) Android SO automatic injection
-- [**220**Star][6m] [JS] [cr0hn/vulnerable-node](https://github.com/cr0hn/vulnerable-node) A very vulnerable web site written in NodeJS with the purpose of have a project with identified vulnerabilities to test the quality of security analyzers tools tools
-- [**220**Star][2m] [Go] [cloudflare/tls-tris](https://github.com/cloudflare/tls-tris) crypto/tls, now with 100% more 1.3. THE API IS NOT STABLE AND DOCUMENTATION IS NOT GUARANTEED.
-- [**220**Star][11m] [Py] [chris408/known_hosts-hashcat](https://github.com/chris408/known_hosts-hashcat) A guide and tool for cracking ssh known_hosts files with hashcat
+- [**220**Star][1y] [C#] [easy66/monohooker](https://github.com/easy66/monohooker) hook C# method at runtime without modify dll file (such as UnityEditor.dll)
- [**220**Star][2y] [C++] [bee13oy/av_kernel_vulns](https://github.com/bee13oy/av_kernel_vulns) Pocs for Antivirus Software‘s Kernel Vulnerabilities
+- [**220**Star][2y] [Py] [artkond/cisco-snmp-rce](https://github.com/artkond/cisco-snmp-rce) Cisco IOS SNMP RCE PoC
- [**219**Star][2y] [itrump/shadowsocksrss](https://github.com/itrump/shadowsocksrss) shadowsocksR backup, windows / android / mac downloads, source code backup
-- [**219**Star][14d] [Py] [wazuh/wazuh-ruleset](https://github.com/wazuh/wazuh-ruleset) ruleset is used to detect attacks, intrusions, software misuse, configuration problems, application errors, malware, rootkits, system anomalies or security policy violations.
+- [**219**Star][4m] [security-checklist/php-security-check-list](https://github.com/security-checklist/php-security-check-list) PHP Security Check List [ EN ]
+- [**219**Star][16d] [Py] [wazuh/wazuh-ruleset](https://github.com/wazuh/wazuh-ruleset) ruleset is used to detect attacks, intrusions, software misuse, configuration problems, application errors, malware, rootkits, system anomalies or security policy violations.
- [**219**Star][2y] [Py] [vlall/darksearch](https://github.com/vlall/darksearch) query cached onion sites, irc chatrooms, various pdfs, game chats, blackhat forums etc
-- [**219**Star][3m] [Java] [virb3/trustmealready](https://github.com/virb3/trustmealready) Disable SSL verification and pinning on Android, system-wide
-- [**219**Star][4m] [Shell] [vedetta-com/vedetta](https://github.com/vedetta-com/vedetta) OpenBSD Router Boilerplate
- [**219**Star][8m] [Py] [skewwg/vulscan](https://github.com/skewwg/vulscan) 漏洞扫描:st2、tomcat、未授权访问等等
-- [**219**Star][2y] [sh4hin/mobileapp-pentest-cheatsheet](https://github.com/sh4hin/mobileapp-pentest-cheatsheet) The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.
-- [**219**Star][4y] [C] [rapid7/meterpreter](https://github.com/rapid7/meterpreter) THIS REPO IS OBSOLETE. USE
+- [**219**Star][8d] [sab0tag3d/mitm-cheatsheet](https://github.com/sab0tag3d/mitm-cheatsheet) All MITM attacks in one place.
+- [**219**Star][5m] [ObjC] [rickyzhang82/tethering](https://github.com/rickyzhang82/tethering) Proxy and DNS Server on iOS
+- [**219**Star][2y] [Shell] [r00t-3xp10it/trojanizer](https://github.com/r00t-3xp10it/trojanizer) Trojanize your payload - WinRAR (SFX) automatization - under Linux distros
+- [**219**Star][12m] [Shell] [nviso-be/magisktrustusercerts](https://github.com/nviso-be/magisktrustusercerts) A Magisk module that automatically adds user certificates to the system root CA store
- [**219**Star][2y] [Ruby] [nahamsec/lazys3](https://github.com/nahamsec/lazys3)
-- [**219**Star][2m] [Py] [initstring/uptux](https://github.com/initstring/uptux) Linux privilege escalation checks (systemd, dbus, socket fun, etc)
-- [**219**Star][1y] [C] [hashcat/princeprocessor](https://github.com/hashcat/princeprocessor) Standalone password candidate generator using the PRINCE algorithm
-- [**219**Star][2y] [C++] [ha7ilm/qtcsdr](https://github.com/ha7ilm/qtcsdr) It turns your Raspberry Pi 2 and RTL-SDR into an amateur radio transceiver! (Released under BSD license.)
+- [**219**Star][2y] [Go] [gamexg/proxyclient](https://github.com/gamexg/proxyclient) golang 代理库,和net一致的API。支持 socks4、socks4a、socks5、http、https 等代理协议。
+- [**219**Star][2m] [C] [david942j/ctf-writeups](https://github.com/david942j/ctf-writeups) Collection of scripts and writeups
- [**219**Star][8m] [Py] [coalfire-research/deathmetal](https://github.com/coalfire-research/deathmetal) Red team & penetration testing tools to exploit the capabilities of Intel AMT
-- [**219**Star][2y] [Py] [artkond/cisco-snmp-rce](https://github.com/artkond/cisco-snmp-rce) Cisco IOS SNMP RCE PoC
-- [**219**Star][3y] [1u4nx/exploit-exercises-nebula](https://github.com/1u4nx/exploit-exercises-nebula) Exploit-Exercises Nebula全攻略——Linux平台下的漏洞分析入门
-- [**218**Star][4m] [security-checklist/php-security-check-list](https://github.com/security-checklist/php-security-check-list) PHP Security Check List [ EN ]
+- [**219**Star][7m] [bhdresh/dejavu](https://github.com/bhdresh/dejavu) deception framework which can be used to deploy decoys across the infrastructure
+- [**219**Star][1y] [basilfx/tradfri-hacking](https://github.com/basilfx/tradfri-hacking) Hacking the IKEA TRÅDFRI light bulbs and accessories.
+- [**218**Star][1m] [PHP] [zigoo0/jsonbee](https://github.com/zigoo0/jsonbee) A ready to use JSONP endpoints/payloads to help bypass content security policy (CSP) of different websites.
- [**218**Star][8m] [JS] [zhuyingda/veneno](https://github.com/zhuyingda/veneno) 用Node.js编写的Web安全测试框架
-- [**218**Star][8m] [Go] [valyala/goloris](https://github.com/valyala/goloris) Slowloris for nginx DoS. Written in go
- [**218**Star][3y] [C] [sslab-gatech/opensgx](https://github.com/sslab-gatech/opensgx) An open platform for Intel SGX Environments & Prerequisites
- [**218**Star][1y] [PHP] [softius/php-cross-domain-proxy](https://github.com/softius/php-cross-domain-proxy) PHP Proxy for Cross Domain Requests
-- [**218**Star][1m] [PowerShell] [rsmudge/elevatekit](https://github.com/rsmudge/elevatekit) The Elevate Kit demonstrates how to use third-party privilege escalation attacks with Cobalt Strike's Beacon payload.
- [**218**Star][1y] [JS] [roccomuso/kickthemout](https://github.com/roccomuso/kickthemout) Kick devices off your network by performing an ARP Spoof attack with Node.js.
- [**218**Star][1y] [Py] [nccgroup/driverbuddy](https://github.com/nccgroup/driverbuddy) IDA Python script to assist with the reverse engineering of Windows kernel drivers.
- [**218**Star][6m] [Py] [mgeeky/tomcatwardeployer](https://github.com/mgeeky/tomcatwardeployer) Apache Tomcat auto WAR deployment & pwning penetration testing tool.
-- [**218**Star][7m] [Py] [kingkaki/weblogic-scan](https://github.com/kingkaki/weblogic-scan) weblogic 漏洞扫描工具
+- [**218**Star][1y] [Py] [mazen160/server-status_pwn](https://github.com/mazen160/server-status_pwn) A script that monitors and extracts requested URLs and clients connected to the service by exploiting publicly accessible Apache server-status instances.
+- [**218**Star][11m] [AppleScript] [lifepillar/csvkeychain](https://github.com/lifepillar/csvkeychain) Import/export between Apple Keychain.app and plain CSV file.
+- [**218**Star][9m] [jesusprubio/awesome-nodejs-pentest](https://github.com/jesusprubio/awesome-nodejs-pentest)
+- [**218**Star][8m] [ivan1ee/net-deserialize](https://github.com/ivan1ee/net-deserialize) 总结了十篇.Net反序列化文章,持续更新
- [**218**Star][10m] [C] [feexd/pocs](https://github.com/feexd/pocs)
-- [**218**Star][1y] [C#] [djhohnstein/sharpweb](https://github.com/djhohnstein/sharpweb) .NET 2.0 CLR project to retrieve saved browser credentials from Google Chrome, Mozilla Firefox and Microsoft Internet Explorer/Edge.
-- [**218**Star][2m] [C] [david942j/ctf-writeups](https://github.com/david942j/ctf-writeups) Collection of scripts and writeups
- [**218**Star][2m] [C++] [d3v1l401/findcrypt-ghidra](https://github.com/d3v1l401/findcrypt-ghidra) IDA Pro's FindCrypt ported to Ghidra, with an updated and customizable signature database
+- [**218**Star][2y] [cure53/browser-sec-whitepaper](https://github.com/cure53/browser-sec-whitepaper) Cure53 Browser Security White Paper
- [**218**Star][2y] [Py] [chromium/web-page-replay](https://github.com/chromium/web-page-replay) Record live Web pages and use them for local performance testing!
- [**218**Star][3m] [Shell] [blacktop/docker-cuckoo](https://github.com/blacktop/docker-cuckoo) Cuckoo Sandbox Dockerfile
- [**217**Star][10m] [JS] [jopyth/mmm-remote-control](https://github.com/jopyth/mmm-remote-control) Magic Mirror Module to shutdown or configure your mirror
-- [**217**Star][1m] [PHP] [zigoo0/jsonbee](https://github.com/zigoo0/jsonbee) A ready to use JSONP endpoints/payloads to help bypass content security policy (CSP) of different websites.
-- [**217**Star][1m] [C] [shchmue/lockpick_rcm](https://github.com/shchmue/lockpick_rcm) Nintendo Switch encryption key derivation bare metal RCM payload
+- [**217**Star][10m] [Py] [mckinsey666/vocabs](https://github.com/Mckinsey666/vocabs) A lightweight online dictionary integration to the command line
+- [**217**Star][2y] [C++] [spacehuhn/arduinopcap](https://github.com/spacehuhn/arduinopcap) A library for creating and sending .pcap files for Wireshark and other programms.
- [**217**Star][1y] [Py] [sensepost/spartan](https://github.com/sensepost/spartan) Frontpage and Sharepoint fingerprinting and attack tool.
-- [**217**Star][2m] [Shell] [screetsec/sudomy](https://github.com/screetsec/sudomy) Sudomy is a subdomain enumeration tool, created using a bash script, to analyze domains and collect subdomains in fast and comprehensive way . Report output in HTML or CSV format
-- [**217**Star][2y] [Shell] [r00t-3xp10it/trojanizer](https://github.com/r00t-3xp10it/trojanizer) Trojanize your payload - WinRAR (SFX) automatization - under Linux distros
+- [**217**Star][3y] [Py] [rajeshmajumdar/brutexss](https://github.com/rajeshmajumdar/brutexss) BruteXSS is a tool written in python simply to find XSS vulnerabilities in web application. This tool was originally developed by Shawar Khan in CLI. I just redesigned it and made it GUI for more convienience.
+- [**217**Star][3d] [C++] [p4lang/p4c](https://github.com/p4lang/p4c) P4_16 prototype compiler
+- [**217**Star][27d] [Py] [nteseyes/pylane](https://github.com/nteseyes/pylane) An python vm injector with debug tools, based on gdb.
- [**217**Star][2y] [Py] [maxwellkoh/2fassassin](https://github.com/maxwellkoh/2fassassin) Bypass Two-Factor-Authentication
-- [**217**Star][11m] [AppleScript] [lifepillar/csvkeychain](https://github.com/lifepillar/csvkeychain) Import/export between Apple Keychain.app and plain CSV file.
-- [**217**Star][28d] [C] [libyal/libesedb](https://github.com/libyal/libesedb) Library and tools to access the Extensible Storage Engine (ESE) Database File (EDB) format.
+- [**217**Star][2d] [C] [libyal/libesedb](https://github.com/libyal/libesedb) Library and tools to access the Extensible Storage Engine (ESE) Database File (EDB) format.
+- [**217**Star][9m] [Go] [justmao945/mallory](https://github.com/justmao945/mallory) HTTP/HTTPS proxy over SSH
- [**217**Star][9m] [Go] [joncooperworks/judas](https://github.com/joncooperworks/judas) a phishing proxy
-- [**217**Star][8m] [ivan1ee/net-deserialize](https://github.com/ivan1ee/net-deserialize) 总结了十篇.Net反序列化文章,持续更新
+- [**217**Star][4m] [Py] [isaacdelly/plutus](https://github.com/isaacdelly/plutus) An automated bitcoin wallet collider that brute forces random wallet addresses
- [**217**Star][4m] [Py] [iojw/socialscan](https://github.com/iojw/socialscan) Check email address and username availability on online platforms with 100% accuracy
-- [**217**Star][1y] [foobarto/redteam-notebook](https://github.com/foobarto/redteam-notebook) Collection of commands, tips and tricks and references I found useful during preparation for OSCP exam.
-- [**217**Star][1y] [C#] [easy66/monohooker](https://github.com/easy66/monohooker) hook C# method at runtime without modify dll file (such as UnityEditor.dll)
-- [**217**Star][14d] [Puppet] [dev-sec/puppet-os-hardening](https://github.com/dev-sec/puppet-os-hardening) This puppet module provides numerous security-related configurations, providing all-round base protection.
-- [**217**Star][2y] [cure53/browser-sec-whitepaper](https://github.com/cure53/browser-sec-whitepaper) Cure53 Browser Security White Paper
-- [**217**Star][7m] [bhdresh/dejavu](https://github.com/bhdresh/dejavu) deception framework which can be used to deploy decoys across the infrastructure
-- [**217**Star][2y] [Py] [003random/003recon](https://github.com/003random/003recon) Some tools to automate recon - 003random
-- [**216**Star][7d] [C] [googleprojectzero/ktrw](https://github.com/googleprojectzero/ktrw) An iOS kernel debugger based on a KTRR bypass for A11 iPhones that works with LLDB.
-- [**216**Star][10m] [Py] [mckinsey666/vocabs](https://github.com/Mckinsey666/vocabs) A lightweight online dictionary integration to the command line
+- [**217**Star][1y] [Py] [dionach/cmsmap](https://github.com/dionach/cmsmap) CMSmap is a python open source CMS scanner that automates the process of detecting security flaws of the most popular CMSs.
+- [**217**Star][16d] [Puppet] [dev-sec/puppet-os-hardening](https://github.com/dev-sec/puppet-os-hardening) This puppet module provides numerous security-related configurations, providing all-round base protection.
+- [**217**Star][2y] [PS] [arno0x/dbc2](https://github.com/arno0x/dbc2) DBC2 (DropboxC2) is a modular post-exploitation tool, composed of an agent running on the victim's machine, a controler, running on any machine, powershell modules, and Dropbox servers as a means of communication.
- [**216**Star][3y] [Java] [zhengmin1989/wechatsportcheat](https://github.com/zhengmin1989/wechatsportcheat) 手把手教你当微信运动第一名 – 利用Android Hook进行微信运动作弊
+- [**216**Star][23d] [JS] [strangerealintel/cyberthreatintel](https://github.com/strangerealintel/cyberthreatintel) Analysis of malware and Cyber Threat Intel of APT and cybercriminals groups
- [**216**Star][6y] [Shell] [silverfoxx/pwnstar](https://github.com/silverfoxx/pwnstar) PwnSTAR (Pwn SofT-Ap scRipt) - for all your fake-AP needs!
-- [**216**Star][3y] [Py] [rajeshmajumdar/brutexss](https://github.com/rajeshmajumdar/brutexss) BruteXSS is a tool written in python simply to find XSS vulnerabilities in web application. This tool was originally developed by Shawar Khan in CLI. I just redesigned it and made it GUI for more convienience.
-- [**216**Star][12m] [Shell] [nviso-be/magisktrustusercerts](https://github.com/nviso-be/magisktrustusercerts) A Magisk module that automatically adds user certificates to the system root CA store
-- [**216**Star][1y] [Py] [mazen160/server-status_pwn](https://github.com/mazen160/server-status_pwn) A script that monitors and extracts requested URLs and clients connected to the service by exploiting publicly accessible Apache server-status instances.
+- [**216**Star][10m] [puresec/awesome-serverless-security](https://github.com/puresec/awesome-serverless-security) A curated list of awesome serverless security resources such as (e)books, articles, whitepapers, blogs and research papers.
+- [**216**Star][1y] [PS] [lukebaggett/dnscat2-powershell](https://github.com/lukebaggett/dnscat2-powershell) A Powershell client for dnscat2, an encrypted DNS command and control tool.
- [**216**Star][2m] [Py] [icsec/airpwn-ng](https://github.com/icsec/airpwn-ng) force the target's browser to do what we want
-- [**216**Star][6m] [Py] [gmr/queries](https://github.com/gmr/queries) PostgreSQL database access simplified
-- [**216**Star][2y] [PowerShell] [arno0x/dbc2](https://github.com/arno0x/dbc2) DBC2 (DropboxC2) is a modular post-exploitation tool, composed of an agent running on the victim's machine, a controler, running on any machine, powershell modules, and Dropbox servers as a means of communication.
-- [**215**Star][2y] [C#] [azure99/shadowsocksrcsm](https://github.com/azure99/shadowsocksrcsm) SSRC#魔改版,修复原版链接并进行人性化修改
+- [**216**Star][5m] [guardrailsio/awesome-dotnet-security](https://github.com/guardrailsio/awesome-dotnet-security) Awesome .NET Security Resources
+- [**216**Star][6d] [JS] [giper45/dockersecurityplayground](https://github.com/giper45/dockersecurityplayground) A Microservices-based framework for the study of Network Security and Penetration Test techniques
+- [**216**Star][1y] [foobarto/redteam-notebook](https://github.com/foobarto/redteam-notebook) Collection of commands, tips and tricks and references I found useful during preparation for OSCP exam.
+- [**216**Star][3y] [Py] [darryllane/bluto-old](https://github.com/darryllane/bluto-old) Recon, Subdomain Bruting, Zone Transfers
+- [**216**Star][2y] [Py] [003random/003recon](https://github.com/003random/003recon) Some tools to automate recon - 003random
+- [**215**Star][25d] [JS] [saul/demofile](https://github.com/saul/demofile) Node.js library for parsing Counter-Strike: Global Offensive demo files
+- [**215**Star][3m] [Py] [shodansploit/shodansploit](https://github.com/shodansploit/shodansploit)
- [**215**Star][3m] [C++] [lifting-bits/grr](https://github.com/lifting-bits/grr) High-throughput fuzzer and emulator of DECREE binaries
- [**215**Star][1y] [C] [meliot/filewatcher](https://github.com/meliot/filewatcher) A simple auditing utility for macOS
- [**215**Star][2m] [C] [xyzz/gamecard-microsd](https://github.com/xyzz/gamecard-microsd) microSD adapter for PlayStation Vita
- [**215**Star][1y] [PHP] [wofeiwo/webcgi-exploits](https://github.com/wofeiwo/webcgi-exploits) Multi-language web CGI interfaces exploits.
- [**215**Star][2y] [Py] [thiber-org/userline](https://github.com/thiber-org/userline) Query and report user logons relations from MS Windows Security Events
+- [**215**Star][9m] [C] [sleinen/samplicator](https://github.com/sleinen/samplicator) Send copies of (UDP) datagrams to multiple receivers, with optional sampling and spoofing
- [**215**Star][11m] [C#] [rainwayapp/warden](https://github.com/rainwayapp/warden) Warden.NET is an easy to use process management library for keeping track of processes on Windows.
+- [**215**Star][7d] [Py] [rackerlabs/scantron](https://github.com/rackerlabs/scantron) A distributed nmap / masscan scanning framework
- [**215**Star][5y] [Py] [qgriffith/openeats](https://github.com/qgriffith/openeats) Recipe Management Site created in Django
-- [**215**Star][8d] [C++] [p4lang/p4c](https://github.com/p4lang/p4c) P4_16 prototype compiler
-- [**215**Star][25d] [Py] [nteseyes/pylane](https://github.com/nteseyes/pylane) An python vm injector with debug tools, based on gdb.
+- [**215**Star][1y] [Go] [orderbynull/lottip](https://github.com/orderbynull/lottip) Simple MySQL proxy for query logging with web GUI
- [**215**Star][3y] [Py] [mkorman90/volatilitybot](https://github.com/mkorman90/volatilitybot) An automated memory analyzer for malware samples and memory dumps
-- [**215**Star][1y] [PowerShell] [lukebaggett/dnscat2-powershell](https://github.com/lukebaggett/dnscat2-powershell) A Powershell client for dnscat2, an encrypted DNS command and control tool.
+- [**215**Star][2y] [Py] [mailinneberg/blueborne](https://github.com/mailinneberg/blueborne) Purpose only! The dangers of Bluetooth implementations: Unveiling zero day vulnerabilities and security flaws in modern Bluetooth stacks.
- [**215**Star][6y] [Perl] [llaera/slowloris.pl](https://github.com/llaera/slowloris.pl) A new DOS Perl Programm
-- [**215**Star][5m] [guardrailsio/awesome-dotnet-security](https://github.com/guardrailsio/awesome-dotnet-security) Awesome .NET Security Resources
+- [**215**Star][2y] [Py] [lennonchin/code-confuse-plugin](https://github.com/lennonchin/code-confuse-plugin) A plugin to confuse codes in iOS Platform.
+- [**215**Star][1m] [Py] [khast3x/redcloud](https://github.com/khast3x/redcloud) Comfy & powerful Red Team Infrastructure deployement using Docker
+- [**215**Star][1m] [Py] [inquest/python-iocextract](https://github.com/inquest/python-iocextract) Defanged Indicator of Compromise (IOC) Extractor.
+- [**215**Star][2m] [C] [hyc/fcrackzip](https://github.com/hyc/fcrackzip) A braindead program for cracking encrypted ZIP archives. Forked from
+- [**215**Star][6m] [Py] [gmr/queries](https://github.com/gmr/queries) PostgreSQL database access simplified
- [**215**Star][2y] [Py] [famavott/osint-scraper](https://github.com/famavott/osint-scraper) Social Recon
-- [**215**Star][1y] [Py] [dionach/cmsmap](https://github.com/dionach/cmsmap) CMSmap is a python open source CMS scanner that automates the process of detecting security flaws of the most popular CMSs.
-- [**215**Star][3y] [Py] [darryllane/bluto-old](https://github.com/darryllane/bluto-old) Recon, Subdomain Bruting, Zone Transfers
- [**215**Star][3m] [PHP] [cyrus-and/fracker](https://github.com/cyrus-and/fracker) PHP function tracker
- [**215**Star][5y] [Py] [bonsaiviking/nfspy](https://github.com/bonsaiviking/nfspy) ID-spoofing NFS client
-- [**215**Star][1y] [basilfx/tradfri-hacking](https://github.com/basilfx/tradfri-hacking) Hacking the IKEA TRÅDFRI light bulbs and accessories.
-- [**214**Star][23d] [JS] [saul/demofile](https://github.com/saul/demofile) Node.js library for parsing Counter-Strike: Global Offensive demo files
-- [**214**Star][9m] [C] [sleinen/samplicator](https://github.com/sleinen/samplicator) Send copies of (UDP) datagrams to multiple receivers, with optional sampling and spoofing
-- [**214**Star][3m] [sab0tag3d/mitm-cheatsheet](https://github.com/sab0tag3d/mitm-cheatsheet) All MITM attacks in one place.
+- [**214**Star][2y] [C#] [azure99/shadowsocksrcsm](https://github.com/azure99/shadowsocksrcsm) SSRC#魔改版,修复原版链接并进行人性化修改
+- [**214**Star][1y] [Py] [threatresponse/aws_ir](https://github.com/threatresponse/aws_ir) Python installable command line utiltity for mitigation of host and key compromises.
+- [**214**Star][11m] [Shell] [proxycannon/proxycannon-ng](https://github.com/proxycannon/proxycannon-ng) A private botnet using multiple cloud environments for pentesters and red teamers. - Built by the community during a hackathon at the WWHF 2018 security conference
+- [**214**Star][9m] [PS] [outflanknl/excel4-dcom](https://github.com/outflanknl/excel4-dcom) PowerShell and Cobalt Strike scripts for lateral movement using Excel 4.0 / XLM macros via DCOM (direct shellcode injection in Excel.exe)
+- [**214**Star][6d] [C] [open-mpi/hwloc](https://github.com/open-mpi/hwloc) Hardware locality (hwloc)
- [**214**Star][4y] [Py] [mitsuhiko/python-regex-scanner](https://github.com/mitsuhiko/python-regex-scanner) Demo of how to use the underlying SRE engine to build a regex scanner
-- [**214**Star][2y] [Py] [mailinneberg/blueborne](https://github.com/mailinneberg/blueborne) Purpose only! The dangers of Bluetooth implementations: Unveiling zero day vulnerabilities and security flaws in modern Bluetooth stacks.
-- [**214**Star][1m] [Py] [khast3x/redcloud](https://github.com/khast3x/redcloud) Comfy & powerful Red Team Infrastructure deployement using Docker
-- [**214**Star][8m] [jesusprubio/awesome-nodejs-pentest](https://github.com/jesusprubio/awesome-nodejs-pentest)
-- [**214**Star][7d] [Go] [jasonish/evebox](https://github.com/jasonish/evebox) Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search
-- [**214**Star][4m] [Py] [isaacdelly/plutus](https://github.com/isaacdelly/plutus) An automated bitcoin wallet collider that brute forces random wallet addresses
-- [**214**Star][1m] [Py] [inquest/python-iocextract](https://github.com/inquest/python-iocextract) Defanged Indicator of Compromise (IOC) Extractor.
-- [**214**Star][12d] [Py] [hyperspy/hyperspy](https://github.com/hyperspy/hyperspy) Multidimensional data analysis
-- [**214**Star][2m] [C] [hyc/fcrackzip](https://github.com/hyc/fcrackzip) A braindead program for cracking encrypted ZIP archives. Forked from
+- [**214**Star][9d] [Go] [jasonish/evebox](https://github.com/jasonish/evebox) Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search
+- [**214**Star][2d] [Py] [hyperspy/hyperspy](https://github.com/hyperspy/hyperspy) Multidimensional data analysis
- [**214**Star][4y] [C] [fuzzysecurity/unix-privesc](https://github.com/fuzzysecurity/unix-privesc) Local UNIX PrivEsc Aggregation
+- [**214**Star][6m] [C#] [erfg12/memory.dll](https://github.com/erfg12/memory.dll) C# Hacking library for making PC game trainers.
- [**214**Star][2m] [C] [dns-oarc/dnscap](https://github.com/dns-oarc/dnscap) Network capture utility designed specifically for DNS traffic
-- [**214**Star][2y] [C++] [bromiumlabs/packerattacker](https://github.com/bromiumlabs/packerattacker) C++ application that uses memory and code hooks to detect packers
+- [**214**Star][6d] [Shell] [controlplaneio/kubesec](https://github.com/controlplaneio/kubesec) Security risk analysis for Kubernetes resources
+- [**213**Star][7m] [Py] [xhak9x/fbi](https://github.com/xhak9x/fbi) Facebook Information
+- [**213**Star][3y] [C++] [xdnice/pcshare](https://github.com/xdnice/pcshare) PCShare是一款强大的远程控制软件,可以监视目标机器屏幕、注册表、文件系统等。
+- [**213**Star][2y] [Py] [wwong99/pentest-notes](https://github.com/wwong99/pentest-notes)
- [**213**Star][2y] [Py] [trustedsec/egressbuster](https://github.com/trustedsec/egressbuster) Egressbuster is a method to check egress filtering and identify if ports are allowed. If they are, you can automatically spawn a shell.
-- [**213**Star][1y] [Py] [threatresponse/aws_ir](https://github.com/threatresponse/aws_ir) Python installable command line utiltity for mitigation of host and key compromises.
+- [**213**Star][1m] [C] [trailofbits/krf](https://github.com/trailofbits/krf) A kernelspace syscall interceptor and randomized faulter
+- [**213**Star][9m] [Py] [teag1e/burpcollector](https://github.com/teag1e/burpcollector) 通过BurpSuite来构建自己的爆破字典,可以通过字典爆破来发现隐藏资产。
+- [**213**Star][2m] [Java] [tdunning/log-synth](https://github.com/tdunning/log-synth) Generates more or less realistic log data for testing simple aggregation queries.
+- [**213**Star][5m] [Py] [spiderlabs/hosthunter](https://github.com/spiderlabs/hosthunter) HostHunter a recon tool for discovering hostnames using OSINT techniques.
- [**213**Star][2y] [C#] [shanek2/invtero.net](https://github.com/shanek2/invtero.net) A high speed (Gbps) Forensics, Memory integrity & assurance. Includes offensive & defensive memory capabilities. Find/Extract processes, hypervisors (including nested) in memory dumps using microarchitechture independent Virtual Machiene Introspection techniques
- [**213**Star][5m] [Py] [quoscient/octopus](https://github.com/quoscient/octopus) Security Analysis tool for WebAssembly module and Blockchain Smart Contracts (BTC/ETH/NEO/EOS)
- [**213**Star][5m] [Py] [pynetwork/pypcap](https://github.com/pynetwork/pypcap) python libpcap module, forked from code.google.com/p/pypcap, now actively maintained
-- [**213**Star][10m] [puresec/awesome-serverless-security](https://github.com/puresec/awesome-serverless-security) A curated list of awesome serverless security resources such as (e)books, articles, whitepapers, blogs and research papers.
-- [**213**Star][11m] [Shell] [proxycannon/proxycannon-ng](https://github.com/proxycannon/proxycannon-ng) A private botnet using multiple cloud environments for pentesters and red teamers. - Built by the community during a hackathon at the WWHF 2018 security conference
- [**213**Star][1y] [Kotlin] [paphonb/androidp-ify](https://github.com/paphonb/androidp-ify) [Xposed] Use features introduced in Android P on your O+ Device!
- [**213**Star][2y] [C++] [nu1lctf/n1ctf-2018](https://github.com/nu1lctf/n1ctf-2018) Official repository containing files related to N1CTF 2018.
+- [**213**Star][5m] [C] [n0b0dycn/redis-rogue-server](https://github.com/n0b0dycn/redis-rogue-server) Redis(<=5.0.5) RCE
- [**213**Star][4y] [HTML] [musalbas/address-spoofing-poc](https://github.com/musalbas/address-spoofing-poc) Chrome address spoofing vulnerability proof-of-concept for HTTPS. (Original by David Leo.)
-- [**213**Star][2y] [Py] [lennonchin/code-confuse-plugin](https://github.com/lennonchin/code-confuse-plugin) A plugin to confuse codes in iOS Platform.
- [**213**Star][1y] [Py] [kurobeats/fimap](https://github.com/kurobeats/fimap) fimap is a little python tool which can find, prepare, audit, exploit and even google automatically for local and remote file inclusion bugs in webapps.
-- [**213**Star][16d] [JS] [giper45/dockersecurityplayground](https://github.com/giper45/dockersecurityplayground) A Microservices-based framework for the study of Network Security and Penetration Test techniques
+- [**213**Star][3m] [Py] [jordanpotti/cloudscraper](https://github.com/jordanpotti/cloudscraper) Tool to enumerate targets in search of cloud resources. S3 Buckets, Azure Blobs, Digital Ocean Storage Space.
+- [**213**Star][2y] [C++] [jamesp6000/wsprrypi](https://github.com/jamesp6000/wsprrypi) Raspberry Pi WSPR transmitter using NTP based frequency calibration
+- [**213**Star][1m] [Go] [improbable-eng/kedge](https://github.com/improbable-eng/kedge) kEdge - Kubernetes Edge Proxy for gRPC and HTTP Microservices
- [**213**Star][1y] [Py] [feicong/lua_re](https://github.com/feicong/lua_re) reverse engineering for lua(lua/luac/luajit/lua_dec/lua_loader/lua_proc)
-- [**213**Star][5m] [C#] [erfg12/memory.dll](https://github.com/erfg12/memory.dll) C# Hacking library for making PC game trainers.
+- [**213**Star][1y] [Py] [evict/poc_cve-2018-1002105](https://github.com/evict/poc_cve-2018-1002105) PoC for CVE-2018-1002105.
+- [**213**Star][2y] [Py] [euphrat1ca/fuzzdb-collect](https://github.com/euphrat1ca/fuzzdb-collect) 网络上安全资源的搜集
- [**213**Star][3y] [C#] [dxflatline/flatpipes](https://github.com/dxflatline/flatpipes) A TCP proxy over named pipes. Originally created for maintaining a meterpreter session over 445 for less network alarms.
- [**213**Star][4y] [Py] [ctfs/write-ups-2013](https://github.com/ctfs/write-ups-2013) Wiki-like CTF write-ups repository, maintained by the community. 2013
- [**213**Star][4y] [PLpgSQL] [cseagle/freedom](https://github.com/cseagle/freedom) capstone based disassembler for extracting to binnavi
+- [**213**Star][5m] [Shell] [cryptolok/crykex](https://github.com/cryptolok/crykex) Linux Memory Cryptographic Keys Extractor
- [**213**Star][5m] [Py] [coffeehb/tools](https://github.com/coffeehb/tools) 一些实用的python脚本
-- [**212**Star][1m] [C] [trailofbits/krf](https://github.com/trailofbits/krf) A kernelspace syscall interceptor and randomized faulter
-- [**212**Star][2m] [Java] [tdunning/log-synth](https://github.com/tdunning/log-synth) Generates more or less realistic log data for testing simple aggregation queries.
-- [**212**Star][21d] [JS] [strangerealintel/cyberthreatintel](https://github.com/strangerealintel/cyberthreatintel) Analysis of malware and Cyber Threat Intel of APT and cybercriminals groups
-- [**212**Star][4m] [Py] [spiderlabs/hosthunter](https://github.com/spiderlabs/hosthunter) HostHunter a recon tool for discovering hostnames using OSINT techniques.
-- [**212**Star][11d] [Ruby] [puppetlabs/puppetlabs-postgresql](https://github.com/puppetlabs/puppetlabs-postgresql) Puppet module for managing PostgreSQL
-- [**212**Star][9m] [Go] [justmao945/mallory](https://github.com/justmao945/mallory) HTTP/HTTPS proxy over SSH
+- [**213**Star][2y] [C++] [bromiumlabs/packerattacker](https://github.com/bromiumlabs/packerattacker) C++ application that uses memory and code hooks to detect packers
+- [**213**Star][8m] [Py] [atlas0fd00m/rfcat](https://github.com/atlas0fd00m/rfcat) swiss-army knife of ISM band radio
+- [**212**Star][2y] [hackathonhackers/groups](https://github.com/hackathonhackers/groups) A listing of all the subgroups of Hackathon Hackers
+- [**212**Star][3m] [C++] [atxsinn3r/vulncases](https://github.com/atxsinn3r/VulnCases) Oh it's just a bunch of vulns for references.
+- [**212**Star][1y] [C] [suvllian/process-inject](https://github.com/suvllian/process-inject) 在Windows环境下的进程注入方法:远程线程注入、创建进程挂起注入、反射注入、APCInject、SetWindowHookEX注入
+- [**212**Star][2d] [Py] [sofianehamlaoui/lockdoor-framework](https://github.com/sofianehamlaoui/lockdoor-framework)
+- [**212**Star][3d] [Ruby] [puppetlabs/puppetlabs-postgresql](https://github.com/puppetlabs/puppetlabs-postgresql) Puppet module for managing PostgreSQL
+- [**212**Star][16d] [Py] [nyxgeek/lyncsmash](https://github.com/nyxgeek/lyncsmash) locate and attack Lync/Skype for Business
+- [**212**Star][4m] [Shell] [neo23x0/fenrir](https://github.com/neo23x0/fenrir) Simple Bash IOC Scanner
- [**212**Star][2m] [Julia] [juliaci/benchmarktools.jl](https://github.com/juliaci/benchmarktools.jl) A benchmarking framework for the Julia language
-- [**212**Star][3m] [Py] [jordanpotti/cloudscraper](https://github.com/jordanpotti/cloudscraper) Tool to enumerate targets in search of cloud resources. S3 Buckets, Azure Blobs, Digital Ocean Storage Space.
+- [**212**Star][2y] [Shell] [johnnyxmas/scancannon](https://github.com/johnnyxmas/scancannon) Combines the speed of masscan with the reliability and detailed enumeration of nmap
- [**212**Star][2y] [Shell] [jakewmeyer/geo](https://github.com/jakewmeyer/geo) A Bash utility for easy wan, lan, router, dns, mac address, and geolocation output,
-- [**212**Star][1y] [Py] [evict/poc_cve-2018-1002105](https://github.com/evict/poc_cve-2018-1002105) PoC for CVE-2018-1002105.
+- [**212**Star][4m] [Py] [infosecn1nja/maliciousmacromsbuild](https://github.com/infosecn1nja/maliciousmacromsbuild) Generates Malicious Macro and Execute Powershell or Shellcode via MSBuild Application Whitelisting Bypass.
- [**212**Star][2m] [Py] [eset/malware-research](https://github.com/eset/malware-research) Code written as part of our various malware investigations
-- [**212**Star][5m] [Shell] [cryptolok/crykex](https://github.com/cryptolok/crykex) Linux Memory Cryptographic Keys Extractor
-- [**211**Star][2y] [hackathonhackers/groups](https://github.com/hackathonhackers/groups) A listing of all the subgroups of Hackathon Hackers
-- [**211**Star][3m] [C++] [atxsinn3r/vulncases](https://github.com/atxsinn3r/VulnCases) Oh it's just a bunch of vulns for references.
+- [**212**Star][2y] [PS] [cobbr/psamsi](https://github.com/cobbr/psamsi) PSAmsi is a tool for auditing and defeating AMSI signatures.
- [**211**Star][7m] [HTML] [facebook/delegatedrecoveryspecification](https://github.com/facebook/DelegatedRecoverySpecification) Allows an application to delegate the capability to recover an account to an account controlled by the same user or entity at a third party service provider.
- [**211**Star][3y] [Py] [newbee119/telnet-scanner](https://github.com/NewBee119/telnet-scanner) telnet服务密码撞库
-- [**211**Star][3m] [Py] [shodansploit/shodansploit](https://github.com/shodansploit/shodansploit)
- [**211**Star][3m] [Shell] [xu-jian/vps](https://github.com/xu-jian/vps) 个人笔记汇总
-- [**211**Star][3y] [C++] [xdnice/pcshare](https://github.com/xdnice/pcshare) PCShare是一款强大的远程控制软件,可以监视目标机器屏幕、注册表、文件系统等。
-- [**211**Star][1y] [C] [suvllian/process-inject](https://github.com/suvllian/process-inject) 在Windows环境下的进程注入方法:远程线程注入、创建进程挂起注入、反射注入、APCInject、SetWindowHookEX注入
-- [**211**Star][9m] [PowerShell] [outflanknl/excel4-dcom](https://github.com/outflanknl/excel4-dcom) PowerShell and Cobalt Strike scripts for lateral movement using Excel 4.0 / XLM macros via DCOM (direct shellcode injection in Excel.exe)
-- [**211**Star][4m] [Shell] [neo23x0/fenrir](https://github.com/neo23x0/fenrir) Simple Bash IOC Scanner
-- [**211**Star][5m] [C] [n0b0dycn/redis-rogue-server](https://github.com/n0b0dycn/redis-rogue-server) Redis(<=5.0.5) RCE
-- [**211**Star][2m] [C] [leecher1337/ntvdmx64](https://github.com/leecher1337/ntvdmx64) Run Microsoft Windows NTVDM (DOS) on 64bit Editions
+- [**211**Star][1m] [C++] [trailofbits/winchecksec](https://github.com/trailofbits/winchecksec) Checksec, but for Windows: static detection of executable's opt-in security mitigations
+- [**211**Star][3d] [C++] [thalium/icebox](https://github.com/thalium/icebox) Virtual Machine Introspection, Tracing & Debugging
+- [**211**Star][7m] [C] [owasp/igoat](https://github.com/owasp/igoat) OWASP iGoat - A Learning Tool for iOS App Pentesting and Security by Swaroop Yermalkar
+- [**211**Star][9m] [Py] [nullarray/dorknet](https://github.com/nullarray/dorknet) Selenium powered Python script to automate searching for vulnerable web apps.
+- [**211**Star][1y] [Py] [mateuszk87/pcapviz](https://github.com/mateuszk87/pcapviz) Visualize network topologies and collect graph statistics based on pcap files
+- [**211**Star][1y] [C#] [leechristensen/spoolsample](https://github.com/leechristensen/spoolsample) PoC tool to coerce Windows hosts authenticate to other machines via the MS-RPRN RPC interface. This is possible via other protocols as well.
+- [**211**Star][10m] [jeansgit/redteam](https://github.com/jeansgit/redteam) RedTeam资料收集整理
+- [**211**Star][7m] [Py] [jas502n/cnvd-c-2019-48814](https://github.com/jas502n/cnvd-c-2019-48814) WebLogic wls9-async反序列化远程命令执行漏洞
- [**211**Star][1m] [Py] [inquest/omnibus](https://github.com/inquest/omnibus) The OSINT Omnibus (beta release)
- [**211**Star][9m] [Py] [gosecure/php7-opcache-override](https://github.com/gosecure/php7-opcache-override) Security-related PHP7 OPcache abuse tools and demo
-- [**211**Star][2y] [PowerShell] [cobbr/psamsi](https://github.com/cobbr/psamsi) PSAmsi is a tool for auditing and defeating AMSI signatures.
- [**211**Star][4m] [Ruby] [bdmac/strong_password](https://github.com/bdmac/strong_password) Entropy-based password strength checking for Ruby and Rails.
-- [**211**Star][8m] [Py] [atlas0fd00m/rfcat](https://github.com/atlas0fd00m/rfcat) swiss-army knife of ISM band radio
-- [**210**Star][8d] [C++] [thalium/icebox](https://github.com/thalium/icebox) Virtual Machine Introspection, Tracing & Debugging
+- [**211**Star][2y] [Py] [arno0x/ntlmrelaytoews](https://github.com/arno0x/ntlmrelaytoews) ntlm relay attack to Exchange Web Services
+- [**211**Star][20d] [Shell] [aress31/wirespy](https://github.com/aress31/wirespy) Framework designed to automate various wireless networks attacks (the project was presented on Pentester Academy TV's toolbox in 2017).
+- [**210**Star][1y] [Py] [elmundio87/terraform_validate](https://github.com/elmundio87/terraform_validate) Assists in the enforcement of user-defined standards in Terraform
+- [**210**Star][9m] [Go] [cloudflare/cloudflare-ingress-controller](https://github.com/cloudflare/cloudflare-ingress-controller) A Kubernetes ingress controller for Cloudflare's Argo Tunnels
+- [**210**Star][1m] [Shell] [zfl9/gfwlist2privoxy](https://github.com/zfl9/gfwlist2privoxy) 将 gfwlist.txt(Adblock Plus 规则)转换为 privoxy.action
- [**210**Star][1y] [C++] [tandasat/pgresarch](https://github.com/tandasat/pgresarch) PatchGuard Research
- [**210**Star][4m] [PHP] [rizer0/log-killer](https://github.com/rizer0/log-killer) Clear all your logs in [linux/windows] servers
-- [**210**Star][9d] [Py] [rackerlabs/scantron](https://github.com/rackerlabs/scantron) A distributed nmap / masscan scanning framework
-- [**210**Star][7m] [C] [owasp/igoat](https://github.com/owasp/igoat) OWASP iGoat - A Learning Tool for iOS App Pentesting and Security by Swaroop Yermalkar
- [**210**Star][11m] [Go] [ooclab/otunnel](https://github.com/ooclab/otunnel) peer-to-peer tunnel tool
-- [**210**Star][14d] [Py] [nyxgeek/lyncsmash](https://github.com/nyxgeek/lyncsmash) locate and attack Lync/Skype for Business
-- [**210**Star][11m] [Java] [neo23x0/fnord](https://github.com/neo23x0/fnord) Pattern Extractor for Obfuscated Code
-- [**210**Star][1y] [Py] [mateuszk87/pcapviz](https://github.com/mateuszk87/pcapviz) Visualize network topologies and collect graph statistics based on pcap files
+- [**210**Star][5m] [Py] [nucypher/nufhe](https://github.com/nucypher/nufhe) NuCypher fully homomorphic encryption (NuFHE) library implemented in Python
+- [**210**Star][12m] [Java] [neo23x0/fnord](https://github.com/neo23x0/fnord) Pattern Extractor for Obfuscated Code
+- [**210**Star][3m] [C++] [mapbox/jni.hpp](https://github.com/mapbox/jni.hpp) A modern, type-safe, header-only, C++14 wrapper for JNI
- [**210**Star][2y] [Py] [kamorin/dhcpig](https://github.com/kamorin/dhcpig) DHCP exhaustion script written in python using scapy network library
+- [**210**Star][16d] [Java] [jikesrvm/jikesrvm](https://github.com/jikesrvm/jikesrvm) Jikes RVM (Research Virtual Machine)
- [**210**Star][7y] [haohaolee/shadowsocks-openwrt](https://github.com/haohaolee/shadowsocks-openwrt) A package of shadowsocks for OpenWrt
-- [**210**Star][2y] [Py] [euphrat1ca/fuzzdb-collect](https://github.com/euphrat1ca/fuzzdb-collect) 网络上安全资源的搜集
+- [**210**Star][4m] [C++] [eternityx/deadcell-csgo](https://github.com/eternityx/deadcell-csgo) Full source to the CS:GO cheat
+- [**210**Star][4m] [Java] [dschanoeh/kayak](https://github.com/dschanoeh/kayak) Kayak is a CAN bus analysis tool based on SocketCAN
+- [**210**Star][8m] [JS] [dirtbags/pcapdb](https://github.com/dirtbags/pcapdb) A Distributed, Search-Optimized Full Packet Capture System
- [**210**Star][6m] [Py] [dirkjanm/krbrelayx](https://github.com/dirkjanm/krbrelayx) Kerberos unconstrained delegation abuse toolkit
- [**210**Star][1y] [Py] [danmcinerney/msf-autoshell](https://github.com/danmcinerney/msf-autoshell) Feed the tool a .nessus file and it will automatically get you MSF shell
-- [**210**Star][2y] [Py] [arno0x/ntlmrelaytoews](https://github.com/arno0x/ntlmrelaytoews) ntlm relay attack to Exchange Web Services
+- [**209**Star][6d] [Py] [f0cker/crackq](https://github.com/f0cker/crackq) CrackQ: A Python Hashcat cracking queue system
- [**209**Star][2y] [PHP] [defuse/crackstation-hashdb](https://github.com/defuse/crackstation-hashdb) CrackStation.net's Lookup Table Implementation.
+- [**209**Star][2y] [C] [fsecurelabs/osxfuzz](https://github.com/FSecureLABS/OSXFuzz) macOS Kernel Fuzzer
- [**209**Star][7m] [C++] [googleprojectzero/bochspwn](https://github.com/googleprojectzero/bochspwn) A Bochs-based instrumentation project designed to log kernel memory references, to identify "double fetches" and other OS vulnerabilities
-- [**209**Star][9m] [Go] [cloudflare/cloudflare-ingress-controller](https://github.com/cloudflare/cloudflare-ingress-controller) A Kubernetes ingress controller for Cloudflare's Argo Tunnels
+- [**209**Star][3y] [Shell] [ztgrace/sticky_keys_hunter](https://github.com/ztgrace/sticky_keys_hunter) A script to test an RDP host for sticky keys and utilman backdoor.
- [**209**Star][3y] [Java] [subgraph/orchid](https://github.com/subgraph/orchid)
- [**209**Star][2y] [C] [silvermoonsecurity/passivefuzzframeworkosx](https://github.com/silvermoonsecurity/passivefuzzframeworkosx) This framework is for fuzzing OSX kernel vulnerability based on passive inline hook mechanism in kernel mode.
-- [**209**Star][15d] [sigp/solidity-security-blog](https://github.com/sigp/solidity-security-blog) Comprehensive list of known attack vectors and common anti-patterns
+- [**209**Star][17d] [sigp/solidity-security-blog](https://github.com/sigp/solidity-security-blog) Comprehensive list of known attack vectors and common anti-patterns
+- [**209**Star][2m] [Py] [si9int/cc.py](https://github.com/si9int/cc.py) Extracting URLs of a specific target based on the results of "commoncrawl.org"
- [**209**Star][2y] [JS] [shutterstock/lil-brother](https://github.com/shutterstock/lil-brother) Track clicks and other client-side events on web pages
+- [**209**Star][1m] [shogunlab/awesome-hyper-v-exploitation](https://github.com/shogunlab/awesome-hyper-v-exploitation) A curated list of Hyper-V exploitation resources, fuzzing and vulnerability research.
- [**209**Star][3y] [C++] [shinnok/johnny](https://github.com/shinnok/johnny) The GUI frontend to the John the Ripper password cracker
- [**209**Star][7m] [PHP] [samdark/yii2-webshell](https://github.com/samdark/yii2-webshell) Web shell allows to run yii console commands using a browser
-- [**209**Star][9m] [Py] [nullarray/dorknet](https://github.com/nullarray/dorknet) Selenium powered Python script to automate searching for vulnerable web apps.
-- [**209**Star][3m] [C++] [mapbox/jni.hpp](https://github.com/mapbox/jni.hpp) A modern, type-safe, header-only, C++14 wrapper for JNI
-- [**209**Star][1y] [C#] [leechristensen/spoolsample](https://github.com/leechristensen/spoolsample) PoC tool to coerce Windows hosts authenticate to other machines via the MS-RPRN RPC interface. This is possible via other protocols as well.
-- [**209**Star][27d] [Py] [leancloud/satori](https://github.com/leancloud/satori) LeanCloud 维护的监控系统
-- [**209**Star][2y] [Shell] [johnnyxmas/scancannon](https://github.com/johnnyxmas/scancannon) Combines the speed of masscan with the reliability and detailed enumeration of nmap
-- [**209**Star][10m] [jeansgit/redteam](https://github.com/jeansgit/redteam) RedTeam资料收集整理
+- [**209**Star][1y] [MATLAB] [lts4/deepfool](https://github.com/lts4/deepfool) A simple and accurate method to fool deep neural networks
+- [**209**Star][29d] [Py] [leancloud/satori](https://github.com/leancloud/satori) LeanCloud 维护的监控系统
+- [**209**Star][2y] [k0keoyo/some-kernel-fuzzing-paper](https://github.com/k0keoyo/some-kernel-fuzzing-paper) Some kernel fuzzing paper about windows and linux
- [**209**Star][5m] [C] [hunter-ht-2018/ptfuzzer](https://github.com/hunter-ht-2018/ptfuzzer) Improving AFL by using Intel PT to collect branch information
-- [**209**Star][8m] [JS] [dirtbags/pcapdb](https://github.com/dirtbags/pcapdb) A Distributed, Search-Optimized Full Packet Capture System
+- [**209**Star][2m] [Java] [h3xstream/http-script-generator](https://github.com/h3xstream/http-script-generator) ZAP/Burp plugin that generate script to reproduce a specific HTTP request (Intended for fuzzing or scripted attacks)
+- [**209**Star][8m] [Py] [djm/python-scrapyd-api](https://github.com/djm/python-scrapyd-api) A Python wrapper for working with Scrapyd's API.
+- [**209**Star][3d] [decalage2/awesome-security-hardening](https://github.com/decalage2/awesome-security-hardening) A collection of awesome security hardening guides, tools and other resources
- [**209**Star][2y] [Py] [danigargu/explodingcan](https://github.com/danigargu/explodingcan) An implementation of NSA's ExplodingCan exploit in Python
- [**209**Star][7m] [C] [coolervoid/raptor_waf](https://github.com/coolervoid/raptor_waf) Raptor - WAF - Web application firewall using DFA [ Current version ] - Beta
- [**209**Star][4m] [HTML] [ajinabraham/droid-application-fuzz-framework](https://github.com/ajinabraham/droid-application-fuzz-framework) Android application fuzzing framework with fuzzers and crash monitor.
- [**209**Star][2m] [adguardteam/adguardforwindows](https://github.com/adguardteam/adguardforwindows) AdGuard for Windows open bug tracker
-- [**208**Star][1y] [Py] [elmundio87/terraform_validate](https://github.com/elmundio87/terraform_validate) Assists in the enforcement of user-defined standards in Terraform
-- [**208**Star][2y] [C] [fsecurelabs/osxfuzz](https://github.com/FSecureLABS/OSXFuzz) macOS Kernel Fuzzer
- [**208**Star][2m] [Shell] [hak5/lanturtle-modules](https://github.com/hak5/lanturtle-modules) The Official LAN Turtle Module Repository
-- [**208**Star][3y] [Shell] [ztgrace/sticky_keys_hunter](https://github.com/ztgrace/sticky_keys_hunter) A script to test an RDP host for sticky keys and utilman backdoor.
-- [**208**Star][7m] [Py] [xhak9x/fbi](https://github.com/xhak9x/fbi) Facebook Information
-- [**208**Star][9m] [Py] [teag1e/burpcollector](https://github.com/teag1e/burpcollector) 通过BurpSuite来构建自己的爆破字典,可以通过字典爆破来发现隐藏资产。
-- [**208**Star][1m] [shogunlab/awesome-hyper-v-exploitation](https://github.com/shogunlab/awesome-hyper-v-exploitation) A curated list of Hyper-V exploitation resources, fuzzing and vulnerability research.
-- [**208**Star][29d] [Py] [seahoh/gotox](https://github.com/seahoh/gotox) 本地自动代理,修改自 goagent。
-- [**208**Star][2y] [k0keoyo/some-kernel-fuzzing-paper](https://github.com/k0keoyo/some-kernel-fuzzing-paper) Some kernel fuzzing paper about windows and linux
-- [**208**Star][7m] [Py] [jas502n/cnvd-c-2019-48814](https://github.com/jas502n/cnvd-c-2019-48814) WebLogic wls9-async反序列化远程命令执行漏洞
-- [**208**Star][5m] [PowerShell] [harmj0y/damp](https://github.com/harmj0y/damp) The Discretionary ACL Modification Project: Persistence Through Host-based Security Descriptor Modification
-- [**208**Star][2m] [Java] [h3xstream/http-script-generator](https://github.com/h3xstream/http-script-generator) ZAP/Burp plugin that generate script to reproduce a specific HTTP request (Intended for fuzzing or scripted attacks)
-- [**208**Star][4m] [Java] [dschanoeh/kayak](https://github.com/dschanoeh/kayak) Kayak is a CAN bus analysis tool based on SocketCAN
+- [**208**Star][1m] [Py] [seahoh/gotox](https://github.com/seahoh/gotox) 本地自动代理,修改自 goagent。
+- [**208**Star][2y] [Py] [pirate-crew/iptv](https://github.com/pirate-crew/iptv) Search and perform brute force attacks on illegal IPTV Servers
+- [**208**Star][6m] [PHP] [momosecurity/rhizobia_p](https://github.com/momosecurity/rhizobia_p) PHP安全SDK及编码规范
+- [**208**Star][6m] [Perl] [modzero/mod0burpuploadscanner](https://github.com/modzero/mod0burpuploadscanner) HTTP file upload scanner for Burp Proxy
+- [**208**Star][2m] [C] [joyent/mdb_v8](https://github.com/joyent/mdb_v8) postmortem debugging for Node.js and other V8-based programs
+- [**208**Star][5m] [PS] [harmj0y/damp](https://github.com/harmj0y/damp) The Discretionary ACL Modification Project: Persistence Through Host-based Security Descriptor Modification
+- [**208**Star][2y] [emilyanncr/windows-post-exploitation](https://github.com/emilyanncr/windows-post-exploitation) Windows post-exploitation tools, resources, techniques and commands to use during post-exploitation phase of penetration test. Contributions are appreciated. Enjoy!
- [**208**Star][2y] [Py] [bluscreenofjeff/malleable-c2-randomizer](https://github.com/bluscreenofjeff/malleable-c2-randomizer) A script to randomize Cobalt Strike Malleable C2 profiles and reduce the chances of flagging signature-based detection controls
- [**208**Star][8m] [Py] [blueboxgroup/ursula](https://github.com/blueboxgroup/ursula) Ansible playbooks for operating OpenStack - Powering Blue Box Cloud.
- [**208**Star][3y] [Py] [agoragames/kairos](https://github.com/agoragames/kairos) Python module for time series data in Redis and Mongo
+- [**207**Star][2m] [Py] [edboffical/bsp](https://github.com/edboffical/bsp) shadowsocks多用户、流量、限时管理接口
+- [**207**Star][9d] [Py] [byt3bl33d3r/witnessme](https://github.com/byt3bl33d3r/witnessme) Web Inventory tool, takes screenshots of webpages using Pyppeteer (headless Chrome/Chromium) and provides some extra bells & whistles to make life easier.
- [**207**Star][2y] [Go] [sun8911879/shadowsocksr](https://github.com/sun8911879/shadowsocksr) ShadowsocksR(SSR) for Go library
-- [**207**Star][1m] [Shell] [zfl9/gfwlist2privoxy](https://github.com/zfl9/gfwlist2privoxy) 将 gfwlist.txt(Adblock Plus 规则)转换为 privoxy.action
-- [**207**Star][2y] [Py] [wwong99/pentest-notes](https://github.com/wwong99/pentest-notes)
-- [**207**Star][9d] [Py] [voulnet/barq](https://github.com/voulnet/barq) The AWS Cloud Post Exploitation framework!
+- [**207**Star][1m] [Ruby] [v2ray/homebrew-v2ray](https://github.com/v2ray/homebrew-v2ray) The homebrew tap for v2ray-core.
+- [**207**Star][2y] [C#] [them4hd1/vayne-rat](https://github.com/them4hd1/vayne-rat) An Advanced C# .NET Rat, It’s Stable and Contains Many Features.
- [**207**Star][5y] [C] [sorbo/tcpcrypt](https://github.com/sorbo/tcpcrypt) a protocol that attempts to encrypt (almost) all of your network traffic
-- [**207**Star][2y] [Py] [pirate-crew/iptv](https://github.com/pirate-crew/iptv) Search and perform brute force attacks on illegal IPTV Servers
+- [**207**Star][2y] [Go] [netxfly/xsec-proxy-scanner](https://github.com/netxfly/xsec-proxy-scanner) proxy canner
- [**207**Star][2y] [JS] [konklone/shaaaaaaaaaaaaa](https://github.com/konklone/shaaaaaaaaaaaaa) Check if a website has weak SHA-1 TLS certificates.
-- [**207**Star][2m] [C] [joyent/mdb_v8](https://github.com/joyent/mdb_v8) postmortem debugging for Node.js and other V8-based programs
-- [**207**Star][8m] [Py] [djm/python-scrapyd-api](https://github.com/djm/python-scrapyd-api) A Python wrapper for working with Scrapyd's API.
+- [**207**Star][2m] [Py] [jwilk/python-afl](https://github.com/jwilk/python-afl) American Fuzzy Lop fork server and instrumentation for pure-Python code
+- [**207**Star][7m] [Py] [invictus1306/beebug](https://github.com/invictus1306/beebug) A tool for checking exploitability
- [**207**Star][1y] [C] [crozone/spectrepoc](https://github.com/crozone/spectrepoc) Proof of concept code for the Spectre CPU exploit.
-- [**207**Star][13d] [Shell] [controlplaneio/kubesec](https://github.com/controlplaneio/kubesec) Security risk analysis for Kubernetes resources
+- [**207**Star][4d] [TS] [bevry/getmac](https://github.com/bevry/getmac) Get the mac address of the current machine you are on via Node.js
- [**207**Star][4y] [C++] [altf4/untwister](https://github.com/altf4/untwister) Seed recovery tool for PRNGs
- [**207**Star][8m] [1hack0/facebook-bug-bounty-write-ups](https://github.com/1hack0/facebook-bug-bounty-write-ups) Hunting Bugs for Fun and Profit
-- [**206**Star][2y] [toleda/wireless_half-mini](https://github.com/toleda/wireless_half-mini) macOS Airport Half Mini (WiFi and Bluetooth)
-- [**206**Star][3m] [Py] [openstack/hacking](https://github.com/openstack/hacking) OpenStack Hacking Style Checks
+- [**206**Star][3y] [Go] [yinghuocho/gotun2socks](https://github.com/yinghuocho/gotun2socks) A Golang implementation of tun2socks
+- [**206**Star][15d] [Java] [owasp/mstg-hacking-playground](https://github.com/OWASP/MSTG-Hacking-Playground) 不安全的iOS/Android App集合
- [**206**Star][2y] [C] [yifanlu/taihen](https://github.com/yifanlu/taihen) CFW framework for PS Vita
-- [**206**Star][5m] [Py] [rub-nds/corstest](https://github.com/rub-nds/corstest) A simple CORS misconfiguration scanner
+- [**206**Star][2y] [Java] [udark/underdark-android](https://github.com/udark/underdark-android) Bluetooth peer-to-peer mesh networking for Android
+- [**206**Star][23d] [Py] [stamparm/identywaf](https://github.com/stamparm/identywaf) Blind WAF identification tool
- [**206**Star][2y] [C] [royhills/ike-scan](https://github.com/royhills/ike-scan) The IKE Scanner
-- [**206**Star][6m] [PHP] [momosecurity/rhizobia_p](https://github.com/momosecurity/rhizobia_p) PHP安全SDK及编码规范
-- [**206**Star][4y] [PowerShell] [mattifestation/wmi_backdoor](https://github.com/mattifestation/wmi_backdoor) A PoC WMI backdoor presented at Black Hat 2015
+- [**206**Star][8m] [C++] [rogue-kdc/cve-2019-0841](https://github.com/rogue-kdc/cve-2019-0841) PoC code for CVE-2019-0841 Privilege Escalation vulnerability
+- [**206**Star][1y] [Py] [orf/xcat](https://github.com/orf/xcat) Automate XPath injection attacks to retrieve documents
+- [**206**Star][4y] [PS] [mattifestation/wmi_backdoor](https://github.com/mattifestation/wmi_backdoor) A PoC WMI backdoor presented at Black Hat 2015
- [**206**Star][1y] [Py] [malicialab/avclass](https://github.com/malicialab/avclass) AVClass malware labeling tool
-- [**206**Star][1y] [MATLAB] [lts4/deepfool](https://github.com/lts4/deepfool) A simple and accurate method to fool deep neural networks
-- [**206**Star][18d] [Go] [kotakanbe/go-cve-dictionary](https://github.com/kotakanbe/go-cve-dictionary) Build a local copy of CVE (NVD and Japanese JVN). Server mode for easy querying.
-- [**206**Star][2y] [emilyanncr/windows-post-exploitation](https://github.com/emilyanncr/windows-post-exploitation) Windows post-exploitation tools, resources, techniques and commands to use during post-exploitation phase of penetration test. Contributions are appreciated. Enjoy!
-- [**206**Star][2m] [C] [derrekr/fastboot3ds](https://github.com/derrekr/fastboot3ds) A homebrew bootloader for the Nintendo 3DS that is similar to android's fastboot.
+- [**206**Star][20d] [Go] [kotakanbe/go-cve-dictionary](https://github.com/kotakanbe/go-cve-dictionary) Build a local copy of CVE (NVD and Japanese JVN). Server mode for easy querying.
+- [**206**Star][9y] [JS] [jwhitehorn/jsminer](https://github.com/jwhitehorn/jsminer) A Javascript Bitcoin miner
+- [**206**Star][1y] [faizann24/resources-for-learning-hacking](https://github.com/faizann24/resources-for-learning-hacking) All the resources I could find for learning Ethical Hacking and penetration testing.
+- [**206**Star][7d] [C] [derrekr/fastboot3ds](https://github.com/derrekr/fastboot3ds) A homebrew bootloader for the Nintendo 3DS that is similar to android's fastboot.
- [**206**Star][3y] [Py] [countercept/doublepulsar-c2-traffic-decryptor](https://github.com/countercept/doublepulsar-c2-traffic-decryptor) A python2 script for processing a PCAP file to decrypt C2 traffic sent to DOUBLEPULSAR implant
+- [**206**Star][5y] [C] [cbuchner1/ccminer](https://github.com/cbuchner1/ccminer) Christian Buchner's & Christian H.'s CUDA miner project
+- [**206**Star][2y] [0x4d31/deception-as-detection](https://github.com/0x4d31/deception-as-detection) Deception based detection techniques mapped to the MITRE’s ATT&CK framework
+- [**205**Star][3m] [JS] [yzddmr6/as_webshell_venom](https://github.com/yzddmr6/as_webshell_venom) 免杀webshell无限生成工具蚁剑版
+- [**205**Star][27d] [C++] [apt69/comahawk](https://github.com/apt69/comahawk) Privilege Escalation: Weaponizing CVE-2019-1405 and CVE-2019-1322
+- [**205**Star][2y] [C#] [shinlor/v2rays](https://github.com/shinlor/v2rays) 一个V2Ray的Windows客户端
+- [**205**Star][2y] [toleda/wireless_half-mini](https://github.com/toleda/wireless_half-mini) macOS Airport Half Mini (WiFi and Bluetooth)
- [**205**Star][9m] [C] [paradoxis/php-backdoor](https://github.com/Paradoxis/PHP-Backdoor) Your interpreter isn’t safe anymore — The PHP module backdoor
-- [**205**Star][13d] [Java] [owasp/mstg-hacking-playground](https://github.com/OWASP/MSTG-Hacking-Playground) 不安全的iOS/Android App集合
-- [**205**Star][12d] [D] [dlang-community/d-scanner](https://github.com/dlang-community/D-Scanner) Swiss-army knife for D source code
+- [**205**Star][14d] [D] [dlang-community/d-scanner](https://github.com/dlang-community/D-Scanner) Swiss-army knife for D source code
- [**205**Star][3y] [Go] [praetorian-code/trudy](https://github.com/praetorian-code/trudy) A transparent proxy that can modify and drop traffic for arbitrary TCP connections.
-- [**205**Star][2y] [Java] [udark/underdark-android](https://github.com/udark/underdark-android) Bluetooth peer-to-peer mesh networking for Android
-- [**205**Star][21d] [Py] [stamparm/identywaf](https://github.com/stamparm/identywaf) Blind WAF identification tool
-- [**205**Star][2m] [Py] [si9int/cc.py](https://github.com/si9int/cc.py) Extracting URLs of a specific target based on the results of "commoncrawl.org"
-- [**205**Star][8m] [C++] [rogue-kdc/cve-2019-0841](https://github.com/rogue-kdc/cve-2019-0841) PoC code for CVE-2019-0841 Privilege Escalation vulnerability
-- [**205**Star][1y] [Py] [orf/xcat](https://github.com/orf/xcat) Automate XPath injection attacks to retrieve documents
+- [**205**Star][3m] [Py] [openstack/hacking](https://github.com/openstack/hacking) OpenStack Hacking Style Checks
+- [**205**Star][15d] [vschiavoni/sgx-papers](https://github.com/vschiavoni/sgx-papers) A list of system papers using/about Intel SGX
+- [**205**Star][5m] [YARA] [th3hurrican3/pepper](https://github.com/th3hurrican3/pepper) An open source script to perform malware static analysis on Portable Executable
+- [**205**Star][6y] [Lua] [spiderlabs/nmap-tools](https://github.com/spiderlabs/nmap-tools) SpiderLabs shared Nmap Tools
+- [**205**Star][5y] [C] [snare/ida-efiutils](https://github.com/snare/ida-efiutils) Some scripts for IDA Pro to assist with reverse engineering EFI binaries
+- [**205**Star][1y] [Go] [raz-varren/xsshell](https://github.com/raz-varren/xsshell) XSS反向Shell框架
+- [**205**Star][4y] [Shell] [rand0m1ze/ezsploit](https://github.com/rand0m1ze/ezsploit) Linux bash script automation for metasploit
+- [**205**Star][16d] [Py] [patois/idacyber](https://github.com/patois/idacyber) Data Visualization Plugin for IDA Pro
- [**205**Star][2y] [OCaml] [montyly/gueb](https://github.com/montyly/gueb) Static analyzer detecting Use-After-Free on binary
-- [**205**Star][2m] [Py] [jwilk/python-afl](https://github.com/jwilk/python-afl) American Fuzzy Lop fork server and instrumentation for pure-Python code
+- [**205**Star][16d] [Py] [m4ll0k/smbrute](https://github.com/m4ll0k/smbrute) SMB Protocol Bruteforce
+- [**205**Star][2m] [Shell] [keepwannabe/remot3d](https://github.com/keepwannabe/remot3d) is a simple tool created for large pentesters as well as just for the pleasure of defacers to control server by backdoors
+- [**205**Star][1y] [JS] [jpcertcc/sysmonsearch](https://github.com/jpcertcc/sysmonsearch) Investigate suspicious activity by visualizing Sysmon's event log
- [**205**Star][2m] [C] [jasonwhite/ducible](https://github.com/jasonwhite/ducible) A tool to make Windows builds reproducible.
-- [**205**Star][10m] [C#] [enkomio/shed](https://github.com/enkomio/shed) .NET runtime inspector
-- [**205**Star][9d] [TypeScript] [bevry/getmac](https://github.com/bevry/getmac) Get the mac address of the current machine you are on via Node.js
-- [**205**Star][2y] [0x4d31/deception-as-detection](https://github.com/0x4d31/deception-as-detection) Deception based detection techniques mapped to the MITRE’s ATT&CK framework
-- [**204**Star][3m] [JS] [yzddmr6/as_webshell_venom](https://github.com/yzddmr6/as_webshell_venom) 免杀webshell无限生成工具蚁剑版
-- [**204**Star][7d] [Py] [mzfr/rsh](https://github.com/mzfr/rsh) generate reverse shell from CLI for linux and Windows.
-- [**204**Star][2y] [C#] [shinlor/v2rays](https://github.com/shinlor/v2rays) 一个V2Ray的Windows客户端
-- [**204**Star][1m] [Ruby] [v2ray/homebrew-v2ray](https://github.com/v2ray/homebrew-v2ray) The homebrew tap for v2ray-core.
+- [**205**Star][10m] [C] [hzqst/unicorn_pe](https://github.com/hzqst/unicorn_pe) Unicorn PE is an unicorn based instrumentation project designed to emulate code execution for windows PE files.
+- [**205**Star][11m] [C#] [enkomio/shed](https://github.com/enkomio/shed) .NET runtime inspector
+- [**205**Star][2m] [Py] [elevenpaths/ibombshell](https://github.com/elevenpaths/ibombshell) Tool to deploy a post-exploitation prompt at any time
+- [**205**Star][1y] [Go] [akagi201/cryptotrader](https://github.com/akagi201/cryptotrader) A cryptocurrency trader for all famous exchanges
+- [**204**Star][9d] [Py] [mzfr/rsh](https://github.com/mzfr/rsh) generate reverse shell from CLI for linux and Windows.
+- [**204**Star][2y] [JS] [xmcp/gofw](https://github.com/xmcp/gofw) Chrome 扩展:麻麻再也不用担心 Google API 抽风了
- [**204**Star][4y] [Py] [aoncyberlabs/xxe-recursive-download](https://github.com/AonCyberLabs/xxe-recursive-download)
-- [**204**Star][2m] [PowerShell] [wiredpulse/posh-r2](https://github.com/wiredpulse/posh-r2) PowerShell - Rapid Response... For the incident responder in you!
-- [**204**Star][13d] [vschiavoni/sgx-papers](https://github.com/vschiavoni/sgx-papers) A list of system papers using/about Intel SGX
-- [**204**Star][2y] [C#] [them4hd1/vayne-rat](https://github.com/them4hd1/vayne-rat) An Advanced C# .NET Rat, It’s Stable and Contains Many Features.
-- [**204**Star][6y] [Lua] [spiderlabs/nmap-tools](https://github.com/spiderlabs/nmap-tools) SpiderLabs shared Nmap Tools
-- [**204**Star][5y] [C] [snare/ida-efiutils](https://github.com/snare/ida-efiutils) Some scripts for IDA Pro to assist with reverse engineering EFI binaries
-- [**204**Star][4y] [Shell] [rand0m1ze/ezsploit](https://github.com/rand0m1ze/ezsploit) Linux bash script automation for metasploit
+- [**204**Star][1y] [HTML] [xsscx/commodity-injection-signatures](https://github.com/xsscx/commodity-injection-signatures) Commodity Injection Signatures, Malicious Inputs, XSS, HTTP Header Injection, XXE, RCE, Javascript, XSLT
+- [**204**Star][2y] [C++] [rfidtool/esp-rfid-tool](https://github.com/rfidtool/esp-rfid-tool) A tool for logging data/testing devices with a Wiegand Interface. Can be used to create a portable RFID reader or installed directly into an existing installation. Provides access to a web based interface using WiFi in AP or Client mode. Will work with nearly all devices that contain a standard 5V Wiegand interface. Primary target group is 26-37…
+- [**204**Star][6d] [Java] [owasp/benchmark](https://github.com/owasp/benchmark) OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web app written in Java, it supports analysis by Static (SAST), Dynamic (DAST), and Runtime (IAST) tools that support Java. The idea is that since it is fully runnable and all the vulnerabilities are actually expl…
+- [**204**Star][5d] [C] [niluje/kindletool](https://github.com/niluje/kindletool) A tool for creating & extracting Kindle updates and more
- [**204**Star][10y] [C] [nextgens/tor](https://github.com/nextgens/tor) Tor is free software and an open network that helps you defend against a form of network surveillance that threatens personal freedom and privacy, confidential business activities and relationships, and state security known as traffic analysis.
-- [**204**Star][2y] [Go] [netxfly/xsec-proxy-scanner](https://github.com/netxfly/xsec-proxy-scanner) proxy canner
-- [**204**Star][5m] [Perl] [modzero/mod0burpuploadscanner](https://github.com/modzero/mod0burpuploadscanner) HTTP file upload scanner for Burp Proxy
-- [**204**Star][14d] [Py] [m4ll0k/smbrute](https://github.com/m4ll0k/smbrute) SMB Protocol Bruteforce
-- [**204**Star][1y] [JS] [jpcertcc/sysmonsearch](https://github.com/jpcertcc/sysmonsearch) Investigate suspicious activity by visualizing Sysmon's event log
-- [**204**Star][6m] [Py] [invictus1306/beebug](https://github.com/invictus1306/beebug) A tool for checking exploitability
-- [**204**Star][4m] [Py] [infosecn1nja/maliciousmacromsbuild](https://github.com/infosecn1nja/maliciousmacromsbuild) Generates Malicious Macro and Execute Powershell or Shellcode via MSBuild Application Whitelisting Bypass.
-- [**204**Star][1m] [TypeScript] [helmetjs/csp](https://github.com/helmetjs/csp) Content Security Policy middleware
+- [**204**Star][1m] [TS] [helmetjs/csp](https://github.com/helmetjs/csp) Content Security Policy middleware
- [**204**Star][6y] [CoffeeScript] [fw42/honeymap](https://github.com/fw42/honeymap) Real-time websocket stream of GPS events on a fancy SVG world map
- [**204**Star][1y] [Py] [fireeye/idawasm](https://github.com/fireeye/idawasm) IDA Pro loader and processor modules for WebAssembly
-- [**204**Star][1y] [faizann24/resources-for-learning-hacking](https://github.com/faizann24/resources-for-learning-hacking) All the resources I could find for learning Ethical Hacking and penetration testing.
- [**204**Star][2y] [Java] [facebookresearch/asynchronousratchetingtree](https://github.com/facebookresearch/asynchronousratchetingtree) On Ends-to-Ends Encryption: Asynchronous Group Messaging with Strong Security Guarantees
- [**204**Star][2y] [evnm/research-in-production](https://github.com/evnm/research-in-production) A collection of research papers categorized by real-world systems that enact them
-- [**204**Star][4m] [C++] [eternityx/deadcell-csgo](https://github.com/eternityx/deadcell-csgo) Full source to the CS:GO cheat
-- [**204**Star][2m] [Py] [elevenpaths/ibombshell](https://github.com/elevenpaths/ibombshell) Tool to deploy a post-exploitation prompt at any time
- [**204**Star][1y] [C#] [damonmohammadbagher/nativepayload_dns](https://github.com/damonmohammadbagher/nativepayload_dns) C# code for Transferring Backdoor Payloads by DNS Traffic and Bypassing Anti-viruses
+- [**204**Star][4m] [HCL] [byt3bl33d3r/red-baron](https://github.com/byt3bl33d3r/red-baron) Automate creating resilient, disposable, secure and agile infrastructure for Red Teams
+- [**204**Star][30d] [C#] [b4rtik/redpeanut](https://github.com/b4rtik/redpeanut) RedPeanut is a small RAT developed in .Net Core 2 and its agent in .Net 3.5 / 4.0.
- [**204**Star][1y] [C++] [azonenberg/openfpga](https://github.com/azonenberg/openfpga) Open FPGA tools
+- [**204**Star][4m] [Shell] [anshumanbh/brutesubs](https://github.com/anshumanbh/brutesubs) An automation framework for running multiple open sourced subdomain bruteforcing tools (in parallel) using your own wordlists via Docker Compose
- [**204**Star][6y] [C#] [0xd4d/antinet](https://github.com/0xd4d/antinet) .NET anti-managed debugger and anti-profiler code
-- [**203**Star][2y] [JS] [xmcp/gofw](https://github.com/xmcp/gofw) Chrome 扩展:麻麻再也不用担心 Google API 抽风了
-- [**203**Star][6m] [JS] [wingleung/save-page-state](https://github.com/wingleung/save-page-state) A chrome extension to save the state of a page for further analysis
+- [**203**Star][7m] [JS] [wingleung/save-page-state](https://github.com/wingleung/save-page-state) A chrome extension to save the state of a page for further analysis
- [**203**Star][2y] [Py] [rootlabs/smap](https://github.com/suraj-root/smap) Handy tool for shellcode analysis
- [**203**Star][1y] [C#] [spiderlabs/sharpcompile](https://github.com/spiderlabs/sharpcompile) SharpCompile is an aggressor script for Cobalt Strike which allows you to compile and execute C# in realtime. This is a more slick approach than manually compiling an .NET assembly and loading it into Cobalt Strike. The project aims to make it easier to move away from adhoc PowerShell execution instead creating a temporary assembly and executing…
-- [**203**Star][1y] [Go] [raz-varren/xsshell](https://github.com/raz-varren/xsshell) XSS反向Shell框架
+- [**203**Star][7m] [JS] [sixstars/starctf2019](https://github.com/sixstars/starctf2019) official source code of *CTF2019
+- [**203**Star][1y] [Py] [shaohua0116/group-normalization-tensorflow](https://github.com/shaohua0116/group-normalization-tensorflow) A TensorFlow implementation of Group Normalization on the task of image classification
+- [**203**Star][2m] [Py] [rpisec/llvm-deobfuscator](https://github.com/rpisec/llvm-deobfuscator)
- [**203**Star][2y] [C] [peperunas/injectopi](https://github.com/peperunas/injectopi) A set of tutorials about code injection for Windows.
-- [**203**Star][14d] [Py] [patois/idacyber](https://github.com/patois/idacyber) Data Visualization Plugin for IDA Pro
- [**203**Star][1y] [Py] [omergunal/pot](https://github.com/omergunal/pot) Phishing on Twitter
-- [**203**Star][5m] [Py] [nucypher/nufhe](https://github.com/nucypher/nufhe) NuCypher fully homomorphic encryption (NuFHE) library implemented in Python
-- [**203**Star][7d] [C] [niluje/kindletool](https://github.com/niluje/kindletool) A tool for creating & extracting Kindle updates and more
-- [**203**Star][2m] [Shell] [keepwannabe/remot3d](https://github.com/keepwannabe/remot3d) is a simple tool created for large pentesters as well as just for the pleasure of defacers to control server by backdoors
- [**203**Star][3y] [C] [google/kasan](https://github.com/google/kasan) KernelAddressSanitizer, a fast memory error detector for the Linux kernel
- [**203**Star][3y] [C] [deadbits/insecureprogramming](https://github.com/deadbits/insecureprogramming) mirror of gera's insecure programming examples |
-- [**203**Star][4m] [Shell] [anshumanbh/brutesubs](https://github.com/anshumanbh/brutesubs) An automation framework for running multiple open sourced subdomain bruteforcing tools (in parallel) using your own wordlists via Docker Compose
+- [**202**Star][4m] [jiansiting/kali-windows](https://github.com/jiansiting/kali-windows) Kali Windows
+- [**202**Star][2y] [Py] [newbee119/ti_collector](https://github.com/NewBee119/Ti_Collector) 本项目致力于收集网上公开来源的威胁情报,主要关注信誉类威胁情报(如IP/域名等),以及事件类威胁情报。
+- [**202**Star][2m] [Ruby] [vonahisec/leprechaun](https://github.com/vonahisec/leprechaun) This tool is used to map out the network data flow to help penetration testers identify potentially valuable targets.
- [**202**Star][3m] [C++] [mc-imperial/jfs](https://github.com/mc-imperial/jfs) an experimental constraint solverdesigned to investigate using coverage guided fuzzing as an incomplete strategyfor solving boolean, BitVector, and floating-point constraints.
-- [**202**Star][1y] [HTML] [xsscx/commodity-injection-signatures](https://github.com/xsscx/commodity-injection-signatures) Commodity Injection Signatures, Malicious Inputs, XSS, HTTP Header Injection, XXE, RCE, Javascript, XSLT
+- [**202**Star][2m] [PS] [wiredpulse/posh-r2](https://github.com/wiredpulse/posh-r2) PowerShell - Rapid Response... For the incident responder in you!
- [**202**Star][2y] [weilaihui/ss-net](https://github.com/weilaihui/ss-net) 共享shadowsocks主机
- [**202**Star][2y] [Py] [tkmru/nao](https://github.com/tkmru/nao) Simple No-meaning Assembly Omitter for IDA Pro (CURRENTLY UNDER DEVELOPMENT)
-- [**202**Star][1y] [PowerShell] [sud0woodo/dcomrade](https://github.com/sud0woodo/dcomrade) Powershell script for enumerating vulnerable DCOM Applications
-- [**202**Star][7m] [JS] [sixstars/starctf2019](https://github.com/sixstars/starctf2019) official source code of *CTF2019
-- [**202**Star][1y] [Py] [shaohua0116/group-normalization-tensorflow](https://github.com/shaohua0116/group-normalization-tensorflow) A TensorFlow implementation of Group Normalization on the task of image classification
-- [**202**Star][2y] [C++] [rfidtool/esp-rfid-tool](https://github.com/rfidtool/esp-rfid-tool) A tool for logging data/testing devices with a Wiegand Interface. Can be used to create a portable RFID reader or installed directly into an existing installation. Provides access to a web based interface using WiFi in AP or Client mode. Will work with nearly all devices that contain a standard 5V Wiegand interface. Primary target group is 26-37…
-- [**202**Star][16d] [Java] [owasp/benchmark](https://github.com/owasp/benchmark) OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web app written in Java, it supports analysis by Static (SAST), Dynamic (DAST), and Runtime (IAST) tools that support Java. The idea is that since it is fully runnable and all the vulnerabilities are actually expl…
-- [**202**Star][3m] [C++] [oisf/libhtp](https://github.com/oisf/libhtp) LibHTP is a security-aware parser for the HTTP protocol and the related bits and pieces.
+- [**202**Star][1y] [PS] [sud0woodo/dcomrade](https://github.com/sud0woodo/dcomrade) Powershell script for enumerating vulnerable DCOM Applications
+- [**202**Star][6d] [stuhirst/awssecurity](https://github.com/stuhirst/awssecurity) for AWS Security material
+- [**202**Star][2m] [C++] [oisf/libhtp](https://github.com/oisf/libhtp) LibHTP is a security-aware parser for the HTTP protocol and the related bits and pieces.
- [**202**Star][3y] [Py] [mseclab/nathan](https://github.com/mseclab/nathan) Android Emulator for mobile security testing
- [**202**Star][4y] [Py] [m57/ardt](https://github.com/m57/ardt) Akamai Reflective DDoS Tool - Attack the origin host behind the Akamai Edge hosts and DDoS protection offered by Akamai services.
- [**202**Star][1y] [Erlang] [kudelskisecurity/scannerl](https://github.com/kudelskisecurity/scannerl) scannerl:模块化、分布式指纹识别引擎,在单个主机运行即可扫描数千目标,也可轻松的部署到多台主机
- [**202**Star][3y] [C++] [k2/ehtrace](https://github.com/k2/ehtrace) ATrace is a tool for tracing execution of binaries on Windows.
+- [**202**Star][1y] [C] [gtoad/android_inline_hook](https://github.com/gtoad/android_inline_hook) Build an so file to automatically do the android_native_hook work. Supports thumb-2/arm32 and ARM64 ! With this, tools like Xposed can do android native hook.
- [**202**Star][7m] [Py] [greekn/rce-bug](https://github.com/greekn/rce-bug) 新漏洞感知项目 主要帮助大家 记录一些重大漏洞 漏洞方面的细节
- [**202**Star][6y] [Py] [gifts/rogue-mysql-server](https://github.com/gifts/rogue-mysql-server) Rogue MySql Server
- [**202**Star][1y] [Shell] [fics/atcmd](https://github.com/fics/atcmd) Android AT command scripts and firmware extraction
+- [**202**Star][8m] [Py] [f5networks/f5-common-python](https://github.com/f5networks/f5-common-python) Python SDK for configuration and monitoring of F5® BIG-IP® devices via the iControl® REST API.
- [**202**Star][2y] [Py] [euske/pyrexecd](https://github.com/euske/pyrexecd) Standalone SSH server for Windows
-- [**202**Star][12d] [Py] [doomedraven/virustotalapi](https://github.com/doomedraven/virustotalapi) VirusTotal Full api
+- [**202**Star][3y] [Py] [endgameinc/dga_predict](https://github.com/endgameinc/dga_predict) Predicting Domain Generation Algorithms using LSTMs
+- [**202**Star][7m] [C] [doublelabyrinth/how-does-navicat-encrypt-password](https://github.com/doublelabyrinth/how-does-navicat-encrypt-password) This repository tells you how Navicat encrypts database password.
+- [**202**Star][14d] [Py] [doomedraven/virustotalapi](https://github.com/doomedraven/virustotalapi) VirusTotal Full api
- [**202**Star][5m] [TeX] [decrypto-org/rupture](https://github.com/decrypto-org/rupture) A framework for BREACH and other compression-based crypto attacks
-- [**202**Star][4m] [HCL] [byt3bl33d3r/red-baron](https://github.com/byt3bl33d3r/red-baron) Automate creating resilient, disposable, secure and agile infrastructure for Red Teams
-- [**202**Star][6m] [C#] [bedthegod/confuserex-mod-by-bed](https://github.com/bedthegod/confuserex-mod-by-bed) Beds Protector | Best free obfuscation out right now
-- [**202**Star][18d] [Shell] [aress31/wirespy](https://github.com/aress31/wirespy) Framework designed to automate various wireless networks attacks (the project was presented on Pentester Academy TV's toolbox in 2017).
-- [**201**Star][7d] [Py] [byt3bl33d3r/witnessme](https://github.com/byt3bl33d3r/witnessme) Web Inventory tool, takes screenshots of webpages using Pyppeteer (headless Chrome/Chromium) and provides some extra bells & whistles to make life easier.
-- [**201**Star][2y] [Py] [newbee119/ti_collector](https://github.com/NewBee119/Ti_Collector) 本项目致力于收集网上公开来源的威胁情报,主要关注信誉类威胁情报(如IP/域名等),以及事件类威胁情报。
+- [**202**Star][2y] [Java] [cgutman/adblib](https://github.com/cgutman/adblib) A Java library implementation of the ADB network protocol
+- [**202**Star][3d] [Py] [angr/cle](https://github.com/angr/cle) CLE Loads Everything (at least, many binary formats!)
+- [**201**Star][20d] [C++] [can1357/byepg](https://github.com/can1357/byepg) Defeating Patchguard universally for Windows 8, Windows 8.1 and all versions of Windows 10 regardless of HVCI
- [**201**Star][4m] [Py] [yelp/threat_intel](https://github.com/yelp/threat_intel) Threat Intelligence APIs
-- [**201**Star][26d] [stuhirst/awssecurity](https://github.com/stuhirst/awssecurity) for AWS Security material
+- [**201**Star][2d] [Shell] [x1mdev/reconpi](https://github.com/x1mdev/reconpi) ReconPi - A lightweight recon tool that performs extensive scanning with the latest tools.
+- [**201**Star][4m] [Py] [thesph1nx/absolutezero](https://github.com/thesph1nx/absolutezero) Python APT Backdoor 1.0.0.1
- [**201**Star][7m] [Java] [rolfrolles/ghidrapal](https://github.com/rolfrolles/ghidrapal) Ghidra Program Analysis Library(No Doc)
- [**201**Star][11m] [Py] [medbenali/cyberscan](https://github.com/medbenali/cyberscan) Network's Forensics ToolKit
+- [**201**Star][1y] [JS] [lmammino/jwt-cracker](https://github.com/lmammino/jwt-cracker) jwt-cracker:HS256JWT 令牌暴力破解工具,只对弱密码有效
+- [**201**Star][2m] [C++] [kalymos/psnee](https://github.com/kalymos/psnee) PsNee, an open source stealth modchip for the Sony Playstation 1
- [**201**Star][2y] [Py] [joker25000/devploit](https://github.com/joker25000/devploit)
-- [**201**Star][10m] [C] [hzqst/unicorn_pe](https://github.com/hzqst/unicorn_pe) Unicorn PE is an unicorn based instrumentation project designed to emulate code execution for windows PE files.
-- [**201**Star][1y] [C] [gtoad/android_inline_hook](https://github.com/gtoad/android_inline_hook) Build an so file to automatically do the android_native_hook work. Supports thumb-2/arm32 and ARM64 ! With this, tools like Xposed can do android native hook.
-- [**201**Star][8m] [Py] [f5networks/f5-common-python](https://github.com/f5networks/f5-common-python) Python SDK for configuration and monitoring of F5® BIG-IP® devices via the iControl® REST API.
-- [**201**Star][3y] [Py] [endgameinc/dga_predict](https://github.com/endgameinc/dga_predict) Predicting Domain Generation Algorithms using LSTMs
-- [**201**Star][2y] [Java] [cgutman/adblib](https://github.com/cgutman/adblib) A Java library implementation of the ADB network protocol
-- [**201**Star][2m] [Ruby] [appfolio/gemsurance](https://github.com/appfolio/gemsurance) Gem vulnerability checker using rubysec/ruby-advisory-db
-- [**200**Star][4m] [jiansiting/kali-windows](https://github.com/jiansiting/kali-windows) Kali Windows
-- [**200**Star][18d] [C++] [can1357/byepg](https://github.com/can1357/byepg) Defeating Patchguard universally for Windows 8, Windows 8.1 and all versions of Windows 10 regardless of HVCI
-- [**200**Star][4m] [Py] [thesph1nx/absolutezero](https://github.com/thesph1nx/absolutezero) Python APT Backdoor 1.0.0.1
+- [**201**Star][23d] [Rust] [jedisct1/rust-doh](https://github.com/jedisct1/rust-doh) A fast and secure DoH (DNS-over-HTTP) server proxy written in Rust.
+- [**201**Star][11m] [Py] [infamoussyn/rogue](https://github.com/infamoussyn/rogue) An extensible toolkit providing penetration testers an easy-to-use platform to deploy Access Points during penetration testing and red team engagements.
+- [**201**Star][2y] [SourcePawn] [fnmsd/awvs_script_decode](https://github.com/fnmsd/awvs_script_decode) 解密好的AWVS10.5 data/script/目录下的脚本
+- [**201**Star][6m] [C#] [bedthegod/confuserex-mod-by-bed](https://github.com/bedthegod/confuserex-mod-by-bed) Beds Protector | Best free obfuscation out right now
+- [**201**Star][6m] [Py] [ares-x/awd-predator-framework](https://github.com/ares-x/awd-predator-framework) AWD攻防赛webshell批量利用框架
+- [**201**Star][3m] [Ruby] [appfolio/gemsurance](https://github.com/appfolio/gemsurance) Gem vulnerability checker using rubysec/ruby-advisory-db
+- [**200**Star][26d] [Jupyter Notebook] [hunters-forge/attack-python-client](https://github.com/hunters-forge/ATTACK-Python-Client) Python Script to access ATT&CK content available in STIX via a public TAXII server
+- [**200**Star][3y] [Py] [tuuunya/webdirscan](https://github.com/TuuuNya/webdirscan) 跨平台的web目录扫描工具
+- [**200**Star][1y] [newbee119/threat-intelligence](https://github.com/NewBee119/threat-intelligence) 收集的一些国外能提供提供威胁情报的公司,涵盖网络安全、工控安全、终端安全、移动安全等领域
+- [**200**Star][3y] [tuuunya/fuzz_dict](https://github.com/TuuuNya/fuzz_dict) 常用的一些fuzz及爆破字典,欢迎大神继续提供新的字典及分类。
- [**200**Star][1y] [Py] [sec-bit/awesome-buggy-erc20-tokens](https://github.com/sec-bit/awesome-buggy-erc20-tokens) A Collection of Vulnerabilities in ERC20 Smart Contracts With Tokens Affected
- [**200**Star][5m] [C++] [rainers/cv2pdb](https://github.com/rainers/cv2pdb) converter of DMD CodeView/DWARF debug information to PDB files
-- [**200**Star][1y] [JS] [lmammino/jwt-cracker](https://github.com/lmammino/jwt-cracker) jwt-cracker:HS256JWT 令牌暴力破解工具,只对弱密码有效
-- [**200**Star][11m] [Py] [infamoussyn/rogue](https://github.com/infamoussyn/rogue) An extensible toolkit providing penetration testers an easy-to-use platform to deploy Access Points during penetration testing and red team engagements.
+- [**200**Star][7m] [PS] [powershell/operation-validation-framework](https://github.com/powershell/operation-validation-framework) executing validation of the operation of a system
+- [**200**Star][10m] [HTML] [mxmssh/drltrace](https://github.com/mxmssh/drltrace) Drltrace is a library calls tracer for Windows and Linux applications.
+- [**200**Star][2y] [Py] [linw1995/lightsocks-python](https://github.com/linw1995/lightsocks-python)
+- [**200**Star][4m] [C] [jas502n/cve-2019-13272](https://github.com/jas502n/cve-2019-13272) Linux 4.10 < 5.1.17 PTRACE_TRACEME local root
+- [**200**Star][6m] [Py] [hellogoldsnakeman/masnmapscan-v1.0](https://github.com/hellogoldsnakeman/masnmapscan-v1.0) 一款端口扫描器。整合了masscan和nmap两款扫描器,masscan扫描端口,nmap扫描端口对应服务,二者结合起来实现了又快又好地扫描。并且加入了防火墙的功能
+- [**200**Star][1y] [C] [hashcat/kwprocessor](https://github.com/hashcat/kwprocessor) Advanced keyboard-walk generator with configureable basechars, keymap and routes
- [**200**Star][2y] [Py] [dragen1860/learningtocompare-pytorch](https://github.com/dragen1860/learningtocompare-pytorch) Pytorch Implementation for CVPR2018 Paper: Learning to Compare: Relation Network for Few-Shot Learning
-- [**200**Star][7m] [C] [doublelabyrinth/how-does-navicat-encrypt-password](https://github.com/doublelabyrinth/how-does-navicat-encrypt-password) This repository tells you how Navicat encrypts database password.
+- [**200**Star][5m] [Py] [doyensec/graph-ql](https://github.com/doyensec/graph-ql) GraphQL Security Research Material
+- [**200**Star][6m] [Py] [dowjones/hammer](https://github.com/dowjones/hammer) Dow Jones Hammer : Protect the cloud with the power of the cloud(AWS)
- [**200**Star][2y] [C] [david-reguera-garcia-dreg/anticuckoo](https://github.com/david-reguera-garcia-dreg/anticuckoo) A tool to detect and crash Cuckoo Sandbox
+- [**200**Star][3y] [C] [crowdstrike/tortilla](https://github.com/crowdstrike/tortilla) solution for Windows that transparently routes all TCP and DNS traffic through Tor
- [**200**Star][3y] [C] [cnlohr/espthernet](https://github.com/cnlohr/espthernet) ESP8266 10-Base-T Ethernet Driver
- [**200**Star][1y] [C] [bazad/blanket](https://github.com/bazad/blanket) CVE-2018-4280: Mach port replacement vulnerability in launchd on iOS 11.2.6 leading to sandbox escape, privilege escalation, and codesigning bypass.
+- [**200**Star][12d] [anudeepnd/blacklist](https://github.com/anudeepnd/blacklist) Curated and well-maintained host file to block ads, tracking, cryptomining and more! Updated regularly.
- [**199**Star][10m] [Py] [kevthehermit/ducktoolkit](https://github.com/kevthehermit/ducktoolkit) Encoding Tools for Rubber Ducky
- [**199**Star][2m] [Py] [tylous/vibe](https://github.com/tylous/vibe) A framework for stealthy domain reconnaissance
-- [**199**Star][24d] [Jupyter Notebook] [hunters-forge/attack-python-client](https://github.com/hunters-forge/ATTACK-Python-Client) Python Script to access ATT&CK content available in STIX via a public TAXII server
-- [**199**Star][1y] [newbee119/threat-intelligence](https://github.com/NewBee119/threat-intelligence) 收集的一些国外能提供提供威胁情报的公司,涵盖网络安全、工控安全、终端安全、移动安全等领域
- [**199**Star][3y] [Assembly] [vector35/pwnadventurez](https://github.com/vector35/pwnadventurez) NES zombie survival game made to be hacked
-- [**199**Star][2y] [Objective-C] [tihmstar/doubleh3lix](https://github.com/tihmstar/doubleh3lix) Jailbreak for iOS 10.x 64bit devices without KTRR
-- [**199**Star][3y] [PHP] [redteamsecurity/plugbot-plug](https://github.com/redteamsecurity/plugbot-plug) The "bot" component of the PlugBot project
+- [**199**Star][2m] [C] [uninett/mod_auth_mellon](https://github.com/uninett/mod_auth_mellon) An Apache module with a simple SAML 2.0 service provider
+- [**199**Star][2y] [ObjC] [tihmstar/doubleh3lix](https://github.com/tihmstar/doubleh3lix) Jailbreak for iOS 10.x 64bit devices without KTRR
+- [**199**Star][1y] [ObjC] [sunweiliang/neteasemusiccrack](https://github.com/sunweiliang/neteasemusiccrack) iOS网易云音乐 免VIP下载、去广告、去更新 无需越狱...
+- [**199**Star][2m] [C++] [secrary/drsemu](https://github.com/secrary/drsemu) 根据动态行为检测恶意代码并进行分类
+- [**199**Star][3y] [PHP] [redteamsecuritytraining/plugbot-plug](https://github.com/redteamsecuritytraining/PlugBot-Plug) The "bot" component of the PlugBot project
- [**199**Star][1y] [C++] [quarkslab/binmap](https://github.com/quarkslab/binmap) system scanner
-- [**199**Star][7m] [PowerShell] [powershell/operation-validation-framework](https://github.com/powershell/operation-validation-framework) executing validation of the operation of a system
-- [**199**Star][10m] [HTML] [mxmssh/drltrace](https://github.com/mxmssh/drltrace) Drltrace is a library calls tracer for Windows and Linux applications.
-- [**199**Star][2m] [C++] [kalymos/psnee](https://github.com/kalymos/psnee) PsNee, an open source stealth modchip for the Sony Playstation 1
-- [**199**Star][6m] [Py] [hellogoldsnakeman/masnmapscan-v1.0](https://github.com/hellogoldsnakeman/masnmapscan-v1.0) 一款端口扫描器。整合了masscan和nmap两款扫描器,masscan扫描端口,nmap扫描端口对应服务,二者结合起来实现了又快又好地扫描。并且加入了防火墙的功能
-- [**199**Star][1y] [C] [hashcat/kwprocessor](https://github.com/hashcat/kwprocessor) Advanced keyboard-walk generator with configureable basechars, keymap and routes
-- [**199**Star][2y] [SourcePawn] [fnmsd/awvs_script_decode](https://github.com/fnmsd/awvs_script_decode) 解密好的AWVS10.5 data/script/目录下的脚本
+- [**199**Star][12m] [iamcryptoki/snowden-archive](https://github.com/iamcryptoki/snowden-archive)
+- [**199**Star][2y] [iaik/kaiser](https://github.com/iaik/kaiser) Kernel Address Isolation to have Side-channels Efficiently Removed
+- [**199**Star][2y] [Go] [ezekg/git-hound](https://github.com/ezekg/git-hound) Git plugin that prevents sensitive data from being committed.
- [**199**Star][2y] [Java] [ernw/androtickler](https://github.com/ernw/androtickler) Penetration testing and auditing toolkit for Android apps.
+- [**199**Star][1y] [Dockerfile] [eadom/ctf_xinetd](https://github.com/eadom/ctf_xinetd) A docker repository for deploying pwnable challenges in CTF
+- [**199**Star][3y] [C] [dismantl/linux-injector](https://github.com/dismantl/linux-injector) Utility for injecting executable code into a running process on x86/x64 Linux
- [**199**Star][4y] [JS] [cturt/ps4-playground](https://github.com/cturt/ps4-playground) A set of PS4 experiments using the WebKit exploit
- [**199**Star][3y] [Py] [climate-mirror/datasets](https://github.com/climate-mirror/datasets) For tracking data mirroring progress
-- [**199**Star][9d] [Py] [angr/cle](https://github.com/angr/cle) CLE Loads Everything (at least, many binary formats!)
+- [**198**Star][4m] [Py] [googleprojectzero/ios-messaging-tools](https://github.com/googleprojectzero/ios-messaging-tools) several tools Project Zero uses to test iPhone messaging
- [**198**Star][2y] [Py] [alienvault-otx/apiv2](https://github.com/AlienVault-OTX/ApiV2) quickly identify related infrastructure and malware
+- [**198**Star][2m] [Py] [thehive-project/thehivedocs](https://github.com/TheHive-Project/TheHiveDocs) Documentation of TheHive
- [**198**Star][1y] [Py] [wipi-hunter/pikarma](https://github.com/WiPi-Hunter/PiKarma) Detects wireless network attacks performed by KARMA module
-- [**198**Star][12d] [Swift] [auth0/lock.swift](https://github.com/auth0/Lock.swift) A Swift & iOS framework to authenticate using Auth0 and with a Native Look & Feel
-- [**198**Star][3y] [Py] [tuuunya/webdirscan](https://github.com/TuuuNya/webdirscan) 跨平台的web目录扫描工具
+- [**198**Star][8d] [Swift] [auth0/lock.swift](https://github.com/auth0/Lock.swift) A Swift & iOS framework to authenticate using Auth0 and with a Native Look & Feel
- [**198**Star][5y] [rutkai/pentest-bookmarks](https://github.com/rutkai/pentest-bookmarks) A collection of penetration testing related sites
-- [**198**Star][2m] [Ruby] [vonahisec/leprechaun](https://github.com/vonahisec/leprechaun) This tool is used to map out the network data flow to help penetration testers identify potentially valuable targets.
-- [**198**Star][2m] [C] [uninett/mod_auth_mellon](https://github.com/uninett/mod_auth_mellon) An Apache module with a simple SAML 2.0 service provider
-- [**198**Star][1y] [Objective-C] [sunweiliang/neteasemusiccrack](https://github.com/sunweiliang/neteasemusiccrack) iOS网易云音乐 免VIP下载、去广告、去更新 无需越狱...
-- [**198**Star][2m] [C++] [secrary/drsemu](https://github.com/secrary/drsemu) 根据动态行为检测恶意代码并进行分类
-- [**198**Star][5m] [PowerShell] [mkellerman/invoke-commandas](https://github.com/mkellerman/invoke-commandas) Invoke Command As System/Interactive/GMSA/User on Local/Remote machine & returns PSObjects.
+- [**198**Star][7m] [C] [zombiecraig/icsim](https://github.com/zombiecraig/icsim) Instrument Cluster Simulator
+- [**198**Star][9d] [Java] [spring-cloud-samples/spring-cloud-contract-samples](https://github.com/spring-cloud-samples/spring-cloud-contract-samples) Samples for Spring Cloud Contract project
+- [**198**Star][2y] [proteas/native-lldb-for-ios](https://github.com/proteas/native-lldb-for-ios) native LLDB(v3.8) for iOS
+- [**198**Star][8m] [Py] [nccgroup/g-scout](https://github.com/nccgroup/g-scout) Google Cloud Platform Security Tool
+- [**198**Star][5m] [PS] [mkellerman/invoke-commandas](https://github.com/mkellerman/invoke-commandas) Invoke Command As System/Interactive/GMSA/User on Local/Remote machine & returns PSObjects.
- [**198**Star][1y] [Py] [mike01/pypacker](https://github.com/mike01/pypacker) packet manipulation lib for Python
- [**198**Star][2m] [Py] [meejah/txtorcon](https://github.com/meejah/txtorcon) Twisted-based asynchronous Tor control protocol implementation. Includes unit-tests, examples, state-tracking code and configuration abstraction.
- [**198**Star][2y] [Go] [magoo/authtables](https://github.com/magoo/authtables) AuthTables is a microservice that helps detect "Account Take Over" caused by simple credential theft. If bad actors are stealing your users passwords, AuthTables may be useful.
- [**198**Star][2y] [C] [lsds/spectre-attack-sgx](https://github.com/lsds/spectre-attack-sgx) Spectre attack against SGX enclave
-- [**198**Star][21d] [Rust] [jedisct1/rust-doh](https://github.com/jedisct1/rust-doh) A fast and secure DoH (DNS-over-HTTP) server proxy written in Rust.
-- [**198**Star][4m] [C] [jas502n/cve-2019-13272](https://github.com/jas502n/cve-2019-13272) Linux 4.10 < 5.1.17 PTRACE_TRACEME local root
- [**198**Star][2y] [C#] [jaredhaight/psattackbuildtool](https://github.com/jaredhaight/psattackbuildtool) A tool for building PS>Attack, an offensive PowerShell console that makes it easy for pentesters to use PowerShell.
- [**198**Star][3y] [Py] [isofew/sssniff](https://github.com/isofew/sssniff) ShadowSocks(SS) traffic sniffer
-- [**198**Star][2y] [iaik/kaiser](https://github.com/iaik/kaiser) Kernel Address Isolation to have Side-channels Efficiently Removed
- [**198**Star][6m] [Py] [google/in-silico-labeling](https://github.com/google/in-silico-labeling) Code for In silico labeling: Predicting fluorescent labels in unlabeled images
-- [**198**Star][6m] [Py] [dowjones/hammer](https://github.com/dowjones/hammer) Dow Jones Hammer : Protect the cloud with the power of the cloud(AWS)
-- [**198**Star][3y] [C] [dismantl/linux-injector](https://github.com/dismantl/linux-injector) Utility for injecting executable code into a running process on x86/x64 Linux
-- [**197**Star][3y] [tuuunya/fuzz_dict](https://github.com/TuuuNya/fuzz_dict) 常用的一些fuzz及爆破字典,欢迎大神继续提供新的字典及分类。
-- [**197**Star][7m] [C] [zombiecraig/icsim](https://github.com/zombiecraig/icsim) Instrument Cluster Simulator
-- [**197**Star][15d] [Shell] [x1mdev/reconpi](https://github.com/x1mdev/reconpi) ReconPi - A lightweight recon tool that performs extensive scanning with the latest tools.
-- [**197**Star][2y] [Objective-C] [siguza/v0rtex](https://github.com/siguza/v0rtex) IOSurface exploit
+- [**198**Star][5m] [C#] [ghostpack/sharpdpapi](https://github.com/ghostpack/sharpdpapi) SharpDPAPI is a C# port of some Mimikatz DPAPI functionality.
+- [**198**Star][3y] [Py] [faizann24/using-machine-learning-to-detect-malicious-urls](https://github.com/faizann24/using-machine-learning-to-detect-malicious-urls) Machine Learning and Security | Using machine learning to detect malicious URLs
+- [**198**Star][4y] [Py] [f8left/decllvm](https://github.com/f8left/decllvm) IDA plugin for OLLVM analysis
+- [**198**Star][2d] [C] [beave/sagan](https://github.com/beave/sagan) Sagan uses a 'Snort like' engine and rules to analyze logs (syslog/event log/snmptrap/netflow/etc)
+- [**198**Star][5m] [Py] [athre0z/wasm](https://github.com/athre0z/wasm) WebAssembly decoder & disassembler library
+- [**197**Star][4m] [Kotlin] [shadowsocks/v2ray-plugin-android](https://github.com/shadowsocks/v2ray-plugin-android) A SIP003 V2ray plugin on Android
+- [**197**Star][2y] [ObjC] [siguza/v0rtex](https://github.com/siguza/v0rtex) IOSurface exploit
+- [**197**Star][6d] [C#] [secana/penet](https://github.com/secana/penet) Portable Executable (PE) library written in .Net
- [**197**Star][7y] [C++] [scanlime/arduino-lelo-remote](https://github.com/scanlime/arduino-lelo-remote) Arduino library for remote-control Lelo vibrators
- [**197**Star][1y] [Py] [s1kr10s/apache-struts-v3](https://github.com/s1kr10s/apache-struts-v3)
-- [**197**Star][2m] [Py] [rpisec/llvm-deobfuscator](https://github.com/rpisec/llvm-deobfuscator)
-- [**197**Star][2y] [proteas/native-lldb-for-ios](https://github.com/proteas/native-lldb-for-ios) native LLDB(v3.8) for iOS
-- [**197**Star][8m] [Py] [nccgroup/g-scout](https://github.com/nccgroup/g-scout) Google Cloud Platform Security Tool
+- [**197**Star][4y] [Java] [pwntester/serialkillerbypassgadgetcollection](https://github.com/pwntester/serialkillerbypassgadgetcollection) Collection of bypass gadgets to extend and wrap ysoserial payloads
- [**197**Star][2y] [Go] [minio/concert](https://github.com/minio/concert) Concert is a console based certificate generation tool for letsencrypt.org.
-- [**197**Star][2y] [Py] [linw1995/lightsocks-python](https://github.com/linw1995/lightsocks-python)
-- [**197**Star][12m] [iamcryptoki/snowden-archive](https://github.com/iamcryptoki/snowden-archive)
-- [**197**Star][3y] [Py] [faizann24/using-machine-learning-to-detect-malicious-urls](https://github.com/faizann24/using-machine-learning-to-detect-malicious-urls) Machine Learning and Security | Using machine learning to detect malicious URLs
-- [**197**Star][4y] [Py] [f8left/decllvm](https://github.com/f8left/decllvm) IDA plugin for OLLVM analysis
-- [**197**Star][1y] [Dockerfile] [eadom/ctf_xinetd](https://github.com/eadom/ctf_xinetd) A docker repository for deploying pwnable challenges in CTF
+- [**197**Star][3m] [infosecn1nja/awesome-mitre-attack](https://github.com/infosecn1nja/awesome-mitre-attack) A curated list of awesome resources related to Mitre ATT&CK™ Framework
+- [**197**Star][2y] [C] [domblack/php-scrypt](https://github.com/domblack/php-scrypt) A PHP wrapper fo the scrypt hashing algorithm
- [**197**Star][2y] [Py] [detuxsandbox/detux](https://github.com/detuxsandbox/detux) The Multiplatform Linux Sandbox
-- [**197**Star][25d] [decalage2/awesome-security-hardening](https://github.com/decalage2/awesome-security-hardening) A collection of awesome security hardening guides, tools and other resources
-- [**197**Star][8d] [OCaml] [bitblaze-fuzzball/fuzzball](https://github.com/bitblaze-fuzzball/fuzzball) Vine-based Binary Symbolic Execution
-- [**197**Star][18d] [F#] [b2r2-org/b2r2](https://github.com/b2r2-org/b2r2) B2R2 is a collection of useful algorithms, functions, and tools for binary analysis.
-- [**197**Star][5m] [Py] [athre0z/wasm](https://github.com/athre0z/wasm) WebAssembly decoder & disassembler library
-- [**197**Star][6m] [Py] [ares-x/awd-predator-framework](https://github.com/ares-x/awd-predator-framework) AWD攻防赛webshell批量利用框架
-- [**197**Star][10d] [anudeepnd/blacklist](https://github.com/anudeepnd/blacklist) Curated and well-maintained host file to block ads, tracking, cryptomining and more! Updated regularly.
-- [**196**Star][4m] [Py] [googleprojectzero/ios-messaging-tools](https://github.com/googleprojectzero/ios-messaging-tools) several tools Project Zero uses to test iPhone messaging
-- [**196**Star][1m] [Py] [thehive-project/thehivedocs](https://github.com/TheHive-Project/TheHiveDocs) Documentation of TheHive
+- [**197**Star][4m] [cryptoseb/cryptopaper](https://github.com/cryptoseb/cryptopaper) Privacy, Security, and Anonymity For Every Internet User.
+- [**197**Star][2m] [Py] [cisco-talos/decept](https://github.com/cisco-talos/decept) Decept Network Protocol Proxy
+- [**197**Star][2d] [OCaml] [bitblaze-fuzzball/fuzzball](https://github.com/bitblaze-fuzzball/fuzzball) Vine-based Binary Symbolic Execution
+- [**197**Star][20d] [F#] [b2r2-org/b2r2](https://github.com/b2r2-org/b2r2) B2R2 is a collection of useful algorithms, functions, and tools for binary analysis.
+- [**197**Star][5d] [Py] [angr/angr-management](https://github.com/angr/angr-management) A GUI for angr. Being developed *very* slowly.
+- [**197**Star][2y] [ObjC] [alonemonkey/dumpdecrypted](https://github.com/alonemonkey/dumpdecrypted) Dumps decrypted mach-o files from encrypted applications、framework or app extensions.
+- [**196**Star][2m] [ignitetechnologies/hackthebox-ctf-writeups](https://github.com/ignitetechnologies/hackthebox-ctf-writeups) This cheasheet is aimed at the CTF Players and Beginners to help them sort Hack The Box Labs on the basis of Operating System and Difficulty.
+- [**196**Star][12d] [JS] [ret2got/disasm.pro](https://github.com/ret2got/disasm.pro) A realtime assembler/disassembler (formerly known as disasm.ninja)
+- [**196**Star][5m] [C#] [zodiacon/drivermon](https://github.com/zodiacon/drivermon) Monitor activity of any driver
- [**196**Star][2y] [Py] [yvesalexandre/bandicoot](https://github.com/yvesalexandre/bandicoot) an open-source python toolbox to analyze mobile phone metadata
-- [**196**Star][5m] [YARA] [th3hurrican3/pepper](https://github.com/th3hurrican3/pepper) An open source script to perform malware static analysis on Portable Executable
-- [**196**Star][7d] [Java] [spring-cloud-samples/spring-cloud-contract-samples](https://github.com/spring-cloud-samples/spring-cloud-contract-samples) Samples for Spring Cloud Contract project
+- [**196**Star][2y] [Py] [sqlab/symgdb](https://github.com/sqlab/symgdb) symbolic execution plugin for gdb
- [**196**Star][3y] [Ruby] [spiderlabs/malware-analysis](https://github.com/spiderlabs/malware-analysis) A repository of tools and scripts related to malware analysis
+- [**196**Star][25d] [Py] [seemoo-lab/internalblue](https://github.com/seemoo-lab/internalblue) Bluetooth experimentation framework for Broadcom and Cypress chips.
- [**196**Star][2y] [C] [saaramar/execve_exploit](https://github.com/saaramar/execve_exploit) Hardcore corruption of my execve() vulnerability in WSL
+- [**196**Star][10m] [JS] [rook2pawn/node-ddos](https://github.com/rook2pawn/node-ddos) Stop denial of service attacks, configurable allowable burst rate.
+- [**196**Star][3y] [C] [robertdavidgraham/telnetlogger](https://github.com/robertdavidgraham/telnetlogger) Simulates enough of a Telnet connection in order to log failed login attempts.
- [**196**Star][1y] [Py] [pstirparo/mac4n6](https://github.com/pstirparo/mac4n6) Collection of forensics artifacs location for Mac OS X and iOS
- [**196**Star][8m] [JS] [pillarjs/csrf](https://github.com/pillarjs/csrf) Logic behind CSRF token creation and verification.
-- [**196**Star][2y] [C] [domblack/php-scrypt](https://github.com/domblack/php-scrypt) A PHP wrapper fo the scrypt hashing algorithm
-- [**196**Star][2m] [Py] [cisco-talos/decept](https://github.com/cisco-talos/decept) Decept Network Protocol Proxy
+- [**196**Star][3d] [C] [denandz/fuzzotron](https://github.com/denandz/fuzzotron) A TCP/UDP based network daemon fuzzer
+- [**196**Star][3y] [Ruby] [crowecybersecurity/ps1encode](https://github.com/crowecybersecurity/ps1encode) Script used to generate and encode a PowerShell based Metasploit payloads.
- [**196**Star][2y] [Java] [abstractj/kalium](https://github.com/abstractj/kalium) Java binding to the Networking and Cryptography (NaCl) library with the awesomeness of libsodium
-- [**195**Star][1m] [ignitetechnologies/hackthebox-ctf-writeups](https://github.com/ignitetechnologies/hackthebox-ctf-writeups) This cheasheet is aimed at the CTF Players and Beginners to help them sort Hack The Box Labs on the basis of Operating System and Difficulty.
-- [**195**Star][1m] [Py] [yingcong/facelet_bank](https://github.com/yingcong/facelet_bank) Facelet-Bank for Fast Portrait Manipulation (pytorch)
-- [**195**Star][9d] [Py] [sofianehamlaoui/lockdoor-framework](https://github.com/sofianehamlaoui/lockdoor-framework)
-- [**195**Star][2m] [C#] [secana/penet](https://github.com/secana/penet) Portable Executable (PE) library written in .Net
-- [**195**Star][3y] [C] [robertdavidgraham/telnetlogger](https://github.com/robertdavidgraham/telnetlogger) Simulates enough of a Telnet connection in order to log failed login attempts.
+- [**195**Star][3y] [Py] [falseen/shadowsocks-pyqt](https://github.com/falseen/shadowsocks-pyqt) 一个用PyQt5实现的shadowsocks 客户端, 可以在 windows、linux、OSX 等平台上运行
+- [**195**Star][8d] [C++] [spacehuhn/wifiduck](https://github.com/spacehuhn/wifiduck) Wireless keystroke injection attack platform
+- [**195**Star][2m] [Py] [yingcong/facelet_bank](https://github.com/yingcong/facelet_bank) Facelet-Bank for Fast Portrait Manipulation (pytorch)
+- [**195**Star][25d] [Lua] [ocsaf/freevulnsearch](https://github.com/ocsaf/freevulnsearch) Free and open NMAP NSE script to query vulnerabilities via the cve-search.org API.
- [**195**Star][1y] [Java] [nocheatplus/nocheatplus](https://github.com/nocheatplus/nocheatplus) Anti cheating plugin for Minecraft (Bukkit/Spigot).
+- [**195**Star][9m] [Py] [mpgn/cve-2019-0192](https://github.com/mpgn/cve-2019-0192) RCE on Apache Solr using deserialization of untrusted data via jmx.serviceUrl
- [**195**Star][3y] [mechaphish/mecha-docs](https://github.com/mechaphish/mecha-docs) Documentation for the Mechanical Phish.
- [**195**Star][1y] [Batchfile] [knightmare2600/shadowbrokers](https://github.com/knightmare2600/shadowbrokers) Guides, Tools, Tips and such for working with the Shadow Brokers dumps
-- [**195**Star][2m] [C] [denandz/fuzzotron](https://github.com/denandz/fuzzotron) A TCP/UDP based network daemon fuzzer
+- [**195**Star][9m] [hannoch/scaner](https://github.com/hannoch/scaner) scanner collection
- [**195**Star][4m] [Ruby] [delvelabs/vane](https://github.com/delvelabs/vane) A GPL fork of the popular wordpress vulnerability scanner WPScan
-- [**195**Star][4m] [cryptoseb/cryptopaper](https://github.com/cryptoseb/cryptopaper) Privacy, Security, and Anonymity For Every Internet User.
-- [**195**Star][3y] [Ruby] [crowecybersecurity/ps1encode](https://github.com/crowecybersecurity/ps1encode) Script used to generate and encode a PowerShell based Metasploit payloads.
-- [**195**Star][12m] [C++] [cararasu/holodec](https://github.com/cararasu/holodec) Decompiler for x86 and x86-64 ELF binaries
+- [**195**Star][2y] [Py] [cheetz/sslscrape](https://github.com/cheetz/sslscrape) SSLScrape | A scanning tool for scaping hostnames from SSL certificates.
+- [**195**Star][1y] [C++] [cararasu/holodec](https://github.com/cararasu/holodec) Decompiler for x86 and x86-64 ELF binaries
+- [**195**Star][4m] [Py] [boy-hack/hack-requests](https://github.com/boy-hack/hack-requests) 给黑客们使用的http底层网络库
- [**195**Star][3m] [Groovy] [alvarosanchez/grails-spring-security-rest](https://github.com/alvarosanchez/grails-spring-security-rest) Grails plugin to implement token-based, RESTful authentication using Spring Security
-- [**195**Star][2y] [Objective-C] [alonemonkey/dumpdecrypted](https://github.com/alonemonkey/dumpdecrypted) Dumps decrypted mach-o files from encrypted applications、framework or app extensions.
+- [**195**Star][23d] [C] [aircrack-ng/mdk4](https://github.com/aircrack-ng/mdk4) a proof-of-concept tool to exploit common IEEE 802.11 protocol weaknesses.
+- [**195**Star][3m] [04x/icg-autoexploiterbot](https://github.com/04x/icg-autoexploiterbot) Wordpress
+- [**194**Star][2m] [Java] [trojan-gfw/igniter](https://github.com/trojan-gfw/igniter) A trojan client for Android (UNDER CONSTRUCTION).
+- [**194**Star][11m] [Py] [hackatnow/djangohunter](https://github.com/hackatnow/djangohunter) Tool designed to help identify incorrectly configured Django applications that are exposing sensitive information.
- [**194**Star][7y] [Java] [nvisium-jack-mannino/owasp-goatdroid-project](https://github.com/nvisium-jack-mannino/OWASP-GoatDroid-Project) *This project is no longer maintained* OWASP GoatDroid is a fully functional and self-contained training environment for educating developers and testers on Android security. GoatDroid requires minimal dependencies and is ideal for both Android beginners as well as more advanced users. The project currently includes two applications: FourGoats, …
- [**194**Star][1y] [Rust] [genet-app/genet](https://github.com/genet-app/genet) 网络分析工具, 界面版, 跨平台
-- [**194**Star][5m] [C#] [zodiacon/drivermon](https://github.com/zodiacon/drivermon) Monitor activity of any driver
-- [**194**Star][11m] [JS] [zer4tul/hacker-howto](https://github.com/zer4tul/hacker-howto) 本文原文由知名Hacker Eric S. Raymond 所撰写,教你如何成为一名黑客。
+- [**194**Star][9m] [zardus/wargame-nexus](https://github.com/zardus/wargame-nexus) An sorted and updated list of security wargame sites.
- [**194**Star][3y] [Py] [xairy/mipt-ctf](https://github.com/xairy/mipt-ctf) A small course on CTF (wargames) for beginners [in Russian]
-- [**194**Star][2y] [Py] [sqlab/symgdb](https://github.com/sqlab/symgdb) symbolic execution plugin for gdb
+- [**194**Star][1y] [C++] [unapibageek/cbm](https://github.com/unapibageek/cbm) Car Backdoor Maker
- [**194**Star][10y] [Ruby] [sfeley/candy](https://github.com/sfeley/candy) Transparent persistence for MongoDB
-- [**194**Star][2m] [PowerShell] [sadprocessor/somestuff](https://github.com/sadprocessor/somestuff) Some PowerShell Stuff
-- [**194**Star][10m] [JS] [rook2pawn/node-ddos](https://github.com/rook2pawn/node-ddos) Stop denial of service attacks, configurable allowable burst rate.
+- [**194**Star][2m] [PS] [sadprocessor/somestuff](https://github.com/sadprocessor/somestuff) Some PowerShell Stuff
+- [**194**Star][8m] [Py] [ropnop/impacket_static_binaries](https://github.com/ropnop/impacket_static_binaries) Standalone binaries for Linux/Windows of Impacket's examples
+- [**194**Star][5m] [C++] [panda-re/lava](https://github.com/panda-re/lava) 大规模自动化漏洞Addition工具
- [**194**Star][5y] [C#] [nccgroup/upnp-pentest-toolkit](https://github.com/nccgroup/upnp-pentest-toolkit) UPnP Pentest Toolkit for Windows
-- [**194**Star][9m] [Py] [mpgn/cve-2019-0192](https://github.com/mpgn/cve-2019-0192) RCE on Apache Solr using deserialization of untrusted data via jmx.serviceUrl
- [**194**Star][3y] [JS] [mhils/honeyproxy](https://github.com/mhils/honeyproxy) This project is now part of
- [**194**Star][8m] [Py] [lingerhk/hacking_script](https://github.com/lingerhk/hacking_script) 开发或收集的一些网络安全方面的脚本、小工具
-- [**194**Star][3m] [infosecn1nja/awesome-mitre-attack](https://github.com/infosecn1nja/awesome-mitre-attack) A curated list of awesome resources related to Mitre ATT&CK™ Framework
-- [**194**Star][5m] [C#] [ghostpack/sharpdpapi](https://github.com/ghostpack/sharpdpapi) SharpDPAPI is a C# port of some Mimikatz DPAPI functionality.
+- [**194**Star][3d] [Java] [ldtteam/minecolonies](https://github.com/ldtteam/minecolonies) Minecolonies minecraft mod
+- [**194**Star][3m] [jdonsec/allthingsssrf](https://github.com/jdonsec/allthingsssrf) This is a collection of writeups, cheatsheets, videos, books related to SSRF in one single location
- [**194**Star][2y] [Py] [f3d0x0/gpon](https://github.com/f3d0x0/gpon) Exploit for Remote Code Execution on GPON home routers (CVE-2018-10562) written in Python. Initially disclosed by VPNMentor (
-- [**194**Star][12d] [Py] [elevenpaths/homepwn](https://github.com/elevenpaths/homepwn) HomePwn - Swiss Army Knife for Pentesting of IoT Devices
+- [**194**Star][11m] [Visual Basic .NET] [dragokas/hijackthis](https://github.com/dragokas/hijackthis) A free utility that finds malware, adware and other security threats
- [**194**Star][5m] [Go] [cuishark/cuishark](https://github.com/cuishark/cuishark) A protocol analyzer like a wireshark on CUI. cuishark is using libwireshark to analyze packets.
- [**194**Star][11m] [JS] [comotion/vsf](https://github.com/comotion/vsf) Varnish Security Firewall
-- [**194**Star][2y] [Py] [cheetz/sslscrape](https://github.com/cheetz/sslscrape) SSLScrape | A scanning tool for scaping hostnames from SSL certificates.
-- [**194**Star][2m] [Py] [auth0/auth0-python](https://github.com/auth0/auth0-python) All information regarding using Auth0 with Python
-- [**193**Star][11m] [Py] [hackatnow/djangohunter](https://github.com/hackatnow/djangohunter) Tool designed to help identify incorrectly configured Django applications that are exposing sensitive information.
+- [**194**Star][11m] [Py] [hackatnow/djangohunter](https://github.com/hackatnow/djangohunter) Tool designed to help identify incorrectly configured Django applications that are exposing sensitive information.
+- [**193**Star][6m] [Shell] [suniceman/ss-fly](https://github.com/suniceman/ss-fly) 一键脚本搭建ss/ssr并开启bbr内核加速(Ubuntu/CentOS/Debian)
+- [**193**Star][2y] [PS] [vysecurity/angrypuppy](https://github.com/vysecurity/ANGRYPUPPY) Bloodhound Attack Path Automation in CobaltStrike
+- [**193**Star][1m] [ObjC] [ripperhe/debugo](https://github.com/ripperhe/Debugo)
- [**193**Star][2y] [Py] [abdulrah33m/cl0nemast3r](https://github.com/Abdulrah33m/Cl0neMast3r) Git all your favorite tools in one click
-- [**193**Star][3y] [Ruby] [zed-0xff/pedump](https://github.com/zed-0xff/pedump) dump windows PE files using ruby
-- [**193**Star][9m] [zardus/wargame-nexus](https://github.com/zardus/wargame-nexus) An sorted and updated list of security wargame sites.
+- [**193**Star][11m] [JS] [zer4tul/hacker-howto](https://github.com/zer4tul/hacker-howto) 本文原文由知名Hacker Eric S. Raymond 所撰写,教你如何成为一名黑客。
+- [**193**Star][3m] [C++] [xortroll/emuiibo](https://github.com/xortroll/emuiibo) Virtual amiibo (amiibo emulation) system for Nintendo Switch
- [**193**Star][3y] [Go] [vesche/lonely-shell](https://github.com/vesche/lonely-shell) poc https reverse shell
-- [**193**Star][1y] [C++] [unapibageek/cbm](https://github.com/unapibageek/cbm) Car Backdoor Maker
+- [**193**Star][9m] [Batchfile] [tai7sy/fuckcdn](https://github.com/tai7sy/fuckcdn) CDN真实IP扫描,易语言开发
- [**193**Star][11m] [Py] [scanlime/coastermelt](https://github.com/scanlime/coastermelt) An effort to make open source firmware for burning anything other than Blu-Ray data onto plastic discs with a BD-R drive.
-- [**193**Star][4y] [Java] [pwntester/serialkillerbypassgadgetcollection](https://github.com/pwntester/serialkillerbypassgadgetcollection) Collection of bypass gadgets to extend and wrap ysoserial payloads
-- [**193**Star][5m] [C++] [panda-re/lava](https://github.com/panda-re/lava) 大规模自动化漏洞Addition工具
-- [**193**Star][8d] [Java] [ldtteam/minecolonies](https://github.com/ldtteam/minecolonies) Minecolonies minecraft mod
+- [**193**Star][1m] [Shell] [roddhjav/pass-tomb](https://github.com/roddhjav/pass-tomb) A pass extension that helps you to keep the whole tree of password encrypted inside a tomb.
+- [**193**Star][3d] [CSS] [owasp/samm](https://github.com/owasp/samm)
+- [**193**Star][4m] [C] [nowsecure/frida-cycript](https://github.com/nowsecure/frida-cycript) Cycript fork powered by Frida.
+- [**193**Star][6m] [C++] [linushenze/keysteal](https://github.com/linushenze/keysteal) A macOS <= 10.14.3 Keychain exploit
- [**193**Star][1m] [Py] [joxeankoret/cosa-nostra](https://github.com/joxeankoret/cosa-nostra) Cosa Nostra, a FOSS graph based malware clusterization toolkit.
-- [**193**Star][9m] [hannoch/scaner](https://github.com/hannoch/scaner) scanner collection
+- [**193**Star][2m] [C#] [jakobbotsch/fuzzlyn](https://github.com/jakobbotsch/fuzzlyn) Fuzzer for the .NET toolchains, developed as a project for the 2018 Language-Based Security course at Aarhus University.
+- [**193**Star][2m] [C++] [googleprojectzero/street-party](https://github.com/googleprojectzero/street-party) Street Party is a suite of tools that allows the RTP streams of video conferencing implementations to be viewed and modified.
- [**193**Star][1y] [Py] [frizb/bypassing-web-application-firewalls](https://github.com/frizb/bypassing-web-application-firewalls) A series of python scripts for generating weird character combinations for bypassing web application firewalls (WAF) and XSS blockers
- [**193**Star][2y] [Py] [francisck/danderspritz_docs](https://github.com/francisck/danderspritz_docs) The goal of this project is to examine, reverse, and document the different modules available in the Equation Group's DanderSpritz post-exploitation framework leaked by the ShadowBrokers
- [**193**Star][8m] [Py] [fastly/ftw](https://github.com/fastly/ftw) ftw:WAF 测试框架
+- [**193**Star][1y] [C] [ehsahil/recon-my-way](https://github.com/ehsahil/recon-my-way) This repository created for personal use and added tools from my latest blog post.
+- [**193**Star][9d] [JS] [dvandal/cryptonote-nodejs-pool](https://github.com/dvandal/cryptonote-nodejs-pool) Mining pool for all CryptoNote based coins using Cryptonight, Cryptonight Light and Cryptonight Heavy algorithms
+- [**193**Star][3m] [Java] [derekbabb/cybersecurity](https://github.com/derekbabb/cybersecurity) A curriculum for a high school cyber security course.
- [**193**Star][6y] [C] [datasoft/honeyd](https://github.com/datasoft/honeyd) virtual honeypots
- [**193**Star][3y] [C#] [codeshark-dev/nofuserex](https://github.com/codeshark-dev/nofuserex) Free deobfuscator for ConfuserEx.
- [**193**Star][4y] [Clojure] [clojurewerkz/meltdown](https://github.com/clojurewerkz/meltdown) Clojure interface to Reactor, an event-driven programming and stream processing toolkit for the JVM
-- [**193**Star][21d] [C] [aircrack-ng/mdk4](https://github.com/aircrack-ng/mdk4) a proof-of-concept tool to exploit common IEEE 802.11 protocol weaknesses.
-- [**193**Star][11m] [Py] [hackatnow/djangohunter](https://github.com/hackatnow/djangohunter) Tool designed to help identify incorrectly configured Django applications that are exposing sensitive information.
-- [**193**Star][2m] [04x/icg-autoexploiterbot](https://github.com/04x/icg-autoexploiterbot) Wordpress
+- [**193**Star][21d] [C] [cathugger/mkp224o](https://github.com/cathugger/mkp224o) vanity address generator for tor onion v3 (ed25519) hidden services
+- [**193**Star][5m] [C++] [boyan-milanov/ropgenerator](https://github.com/boyan-milanov/ropgenerator) ROPGenerator is a tool that helps you building ROP exploits by finding and chaining gadgets together
+- [**193**Star][2m] [Py] [auth0/auth0-python](https://github.com/auth0/auth0-python) All information regarding using Auth0 with Python
+- [**192**Star][23d] [Go] [cruise-automation/k-rail](https://github.com/cruise-automation/k-rail) Kubernetes security tool for policy enforcement
- [**192**Star][4y] [Py] [isecpartners/libtech-auditing-cheatsheet](https://github.com/isecpartners/libtech-auditing-cheatsheet)
-- [**192**Star][2y] [PowerShell] [vysecurity/angrypuppy](https://github.com/vysecurity/ANGRYPUPPY) Bloodhound Attack Path Automation in CobaltStrike
+- [**192**Star][3y] [Ruby] [zed-0xff/pedump](https://github.com/zed-0xff/pedump) dump windows PE files using ruby
+- [**192**Star][2m] [Py] [unipacker/unipacker](https://github.com/unipacker/unipacker) Automatic and platform-independent unpacker for Windows binaries based on emulation
- [**192**Star][6y] [Py] [smeegesec/hashtag](https://github.com/smeegesec/hashtag) Password Hash Identification
-- [**192**Star][30d] [Shell] [roddhjav/pass-tomb](https://github.com/roddhjav/pass-tomb) A pass extension that helps you to keep the whole tree of password encrypted inside a tomb.
-- [**192**Star][22d] [Lua] [ocsaf/freevulnsearch](https://github.com/ocsaf/freevulnsearch) Free and open NMAP NSE script to query vulnerabilities via the cve-search.org API.
-- [**192**Star][4m] [C] [nowsecure/frida-cycript](https://github.com/nowsecure/frida-cycript) Cycript fork powered by Frida.
+- [**192**Star][4y] [C++] [mubix/netview](https://github.com/mubix/netview) Netview enumerates systems using WinAPI calls
- [**192**Star][2y] [Java] [mesosphere/cassandra-mesos-deprecated](https://github.com/mesosphere/cassandra-mesos-deprecated) [DEPRECATED] This project is deprecated. It will be archived on December 1, 2017.
-- [**192**Star][6m] [C++] [linushenze/keysteal](https://github.com/linushenze/keysteal) A macOS <= 10.14.3 Keychain exploit
-- [**192**Star][29d] [Py] [lazza/recuperabit](https://github.com/lazza/recuperabit) A tool for forensic file system reconstruction.
-- [**192**Star][3m] [jdonsec/allthingsssrf](https://github.com/jdonsec/allthingsssrf) This is a collection of writeups, cheatsheets, videos, books related to SSRF in one single location
-- [**192**Star][2m] [C#] [jakobbotsch/fuzzlyn](https://github.com/jakobbotsch/fuzzlyn) Fuzzer for the .NET toolchains, developed as a project for the 2018 Language-Based Security course at Aarhus University.
-- [**192**Star][2m] [C++] [googleprojectzero/street-party](https://github.com/googleprojectzero/street-party) Street Party is a suite of tools that allows the RTP streams of video conferencing implementations to be viewed and modified.
-- [**192**Star][7d] [Go] [google/certificate-transparency-go](https://github.com/google/certificate-transparency-go) Auditing for TLS certificates, Go code.
+- [**192**Star][1y] [Py] [malwaredllc/bamf](https://github.com/malwaredllc/bamf) BAMF (Backdoor Access Machine Farmer)
+- [**192**Star][5m] [Go] [lc/secretz](https://github.com/lc/secretz) secretz, minimizing the large attack surface of Travis CI
+- [**192**Star][1m] [Py] [lazza/recuperabit](https://github.com/lazza/recuperabit) A tool for forensic file system reconstruction.
+- [**192**Star][11m] [C] [ionescu007/winipt](https://github.com/ionescu007/winipt) The Windows Library for Intel Process Trace (WinIPT) is a project that leverages the new Intel Processor Trace functionality exposed by Windows 10 Redstone 5 (1809), through a set of libraries and a command-line tool.
+- [**192**Star][8d] [Go] [google/certificate-transparency-go](https://github.com/google/certificate-transparency-go) Auditing for TLS certificates, Go code.
+- [**192**Star][1m] [furrtek/dmg-cpu-inside](https://github.com/furrtek/dmg-cpu-inside) Reverse-engineered schematics for DMG-CPU-B
- [**192**Star][1y] [Py] [foospidy/dbdat](https://github.com/foospidy/dbdat) performs numerous checks on a database to evaluate security.
-- [**192**Star][11m] [Visual Basic] [dragokas/hijackthis](https://github.com/dragokas/hijackthis) A free utility that finds malware, adware and other security threats
+- [**192**Star][3m] [Py] [dionach/phemail](https://github.com/dionach/phemail) PhEmail is a python open source phishing email tool that automates the process of sending phishing emails as part of a social engineering test
+- [**192**Star][2y] [Assembly] [cybereason/siofra](https://github.com/cybereason/siofra) a tool designed to identify and exploit DLL hijacking vulnerabilities in Windows programs
- [**192**Star][5y] [ActionScript] [cure53/flashbang](https://github.com/cure53/flashbang) Project "Flashbang" - An open-source Flash-security helper
-- [**192**Star][19d] [C] [cathugger/mkp224o](https://github.com/cathugger/mkp224o) vanity address generator for tor onion v3 (ed25519) hidden services
- [**192**Star][2y] [C++] [caledoniaproject/xlcloudclient](https://github.com/caledoniaproject/xlcloudclient) 迅雷离线Linux客户端,多种漏洞利用 ;-P 大家慢慢挖掘吧 哈哈 觉得好就点下 Star / Fork 吧
+- [**192**Star][2y] [Py] [brucetg/pentest-tools](https://github.com/brucetg/pentest-tools) 内网渗透工具
- [**192**Star][2y] [C] [bindecy/hugedirtycowpoc](https://github.com/bindecy/hugedirtycowpoc) A POC for the Huge Dirty Cow vulnerability (CVE-2017-1000405)
-- [**192**Star][28d] [C#] [b4rtik/redpeanut](https://github.com/b4rtik/redpeanut) RedPeanut is a small RAT developed in .Net Core 2 and its agent in .Net 3.5 / 4.0.
-- [**192**Star][11d] [Py] [angr/angr-management](https://github.com/angr/angr-management) A GUI for angr. Being developed *very* slowly.
-- [**191**Star][25d] [C++] [apt69/comahawk](https://github.com/apt69/comahawk) Privilege Escalation: Weaponizing CVE-2019-1405 and CVE-2019-1322
+- [**192**Star][12m] [Py] [0xr0/shellver](https://github.com/0xr0/shellver) Reverse Shell Cheat Sheet TooL
+- [**191**Star][2m] [Java] [tongxiji/shadowsocks-java](https://github.com/tongxiji/shadowsocks-java) shadowsocks server base on netty4 , tcp & udp full support,
+- [**191**Star][3y] [Go] [koding/tunnel](https://github.com/koding/tunnel) Tunnel proxy package in Go
+- [**191**Star][2y] [Java] [p3gleg/pwnback](https://github.com/P3GLEG/PwnBack) Burp Extender plugin that generates a sitemap of a website using Wayback Machine
+- [**191**Star][1y] [HTML] [yaseng/iot-security-wiki](https://github.com/yaseng/iot-security-wiki) IOT security wiki
- [**191**Star][3y] [Py] [xyntax/dirbrute](https://github.com/xyntax/dirbrute) 多线程WEB目录爆破工具 [Multi-thread WEB directory blasting tool(with dics inside) ]
-- [**191**Star][3m] [C++] [xortroll/emuiibo](https://github.com/xortroll/emuiibo) Virtual amiibo (amiibo emulation) system for Nintendo Switch
- [**191**Star][2y] [Py] [viralmaniar/wifi-dumper](https://github.com/viralmaniar/wifi-dumper) This is an open source tool to dump the wifi profiles and cleartext passwords of the connected access points on the Windows machine. This tool will help you in a Wifi penetration testing. Furthermore, it is useful while performing red team or an internal infrastructure engagements.
+- [**191**Star][3m] [Shell] [unbinilium/twist](https://github.com/unbinilium/twist) A light script for you to setup shadowsocks-libev server with high-speed connections and newest powerful features
- [**191**Star][7m] [Py] [tintinweb/pub](https://github.com/tintinweb/pub) Vulnerability Notes, PoC Exploits and Write-Ups for security issues disclosed by tintinweb
+- [**191**Star][20d] [Py] [skyscanner/lambdaguard](https://github.com/skyscanner/lambdaguard) AWS Serverless Security
- [**191**Star][2m] [JS] [sindresorhus/internal-ip](https://github.com/sindresorhus/internal-ip) Get your internal IP address
- [**191**Star][4m] [Py] [sham00n/buster](https://github.com/sham00n/buster) An advanced tool for email reconnaissance
-- [**191**Star][8m] [JS] [or3stis/apparatus](https://github.com/or3stis/apparatus) A graphical security analysis tool for IoT networks
+- [**191**Star][4m] [ObjC] [riusksk/secconarchive](https://github.com/riusksk/secconarchive) Security Conference Archive
+- [**191**Star][2m] [Py] [projectante/dnsgen](https://github.com/projectante/dnsgen) Generates combination of domain names from the provided input.
+- [**191**Star][6m] [pochubs/pochubs](https://github.com/pochubs/pochubs) PocHubs是为了整合网上知名开源框架的漏洞详细和POC
- [**191**Star][2m] [onesecure/shadowagentnotes](https://github.com/onesecure/shadowagentnotes)
-- [**191**Star][4y] [C++] [mubix/netview](https://github.com/mubix/netview) Netview enumerates systems using WinAPI calls
+- [**191**Star][2m] [Py] [niklasrosenstein/pydoc-markdown](https://github.com/niklasrosenstein/pydoc-markdown) Create Python API documentation in Markdown format.
+- [**191**Star][3m] [Py] [jrspruitt/ubi_reader](https://github.com/jrspruitt/ubi_reader) Collection of Python scripts for reading information about and extracting data from UBI and UBIFS images.
- [**191**Star][4y] [C++] [isecpartners/jailbreak](https://github.com/isecpartners/jailbreak) Jailbreak
-- [**191**Star][4y] [JS] [isecpartners/introspy-analyzer](https://github.com/isecpartners/introspy-analyzer) a set of iOS and Android tools designed to help understand what an iOS or Android application is doing at runtime and assist in the identification of potential security issues.
-- [**191**Star][10m] [C] [ionescu007/winipt](https://github.com/ionescu007/winipt) The Windows Library for Intel Process Trace (WinIPT) is a project that leverages the new Intel Processor Trace functionality exposed by Windows 10 Redstone 5 (1809), through a set of libraries and a command-line tool.
-- [**191**Star][2y] [PowerShell] [gimini/mimidbg](https://github.com/gimini/mimidbg) PowerShell oneliner to retrieve wdigest passwords from the memory
+- [**191**Star][2y] [PS] [gimini/mimidbg](https://github.com/gimini/mimidbg) PowerShell oneliner to retrieve wdigest passwords from the memory
+- [**191**Star][26d] [Py] [ghostmanager/ghostwriter](https://github.com/ghostmanager/ghostwriter) The SpecterOps project management and reporting engine
- [**191**Star][7m] [Shell] [gaenserich/hostsblock](https://github.com/gaenserich/hostsblock) an ad- and malware-blocking script for Linux
-- [**191**Star][1m] [furrtek/dmg-cpu-inside](https://github.com/furrtek/dmg-cpu-inside) Reverse-engineered schematics for DMG-CPU-B
- [**191**Star][4y] [HTML] [faber03/androidmalwareevaluatingtools](https://github.com/faber03/androidmalwareevaluatingtools) Evaluation tools for malware Android
-- [**191**Star][1y] [C] [ehsahil/recon-my-way](https://github.com/ehsahil/recon-my-way) This repository created for personal use and added tools from my latest blog post.
-- [**191**Star][3m] [Py] [dionach/phemail](https://github.com/dionach/phemail) PhEmail is a python open source phishing email tool that automates the process of sending phishing emails as part of a social engineering test
-- [**191**Star][2y] [Assembly] [cybereason/siofra](https://github.com/cybereason/siofra) a tool designed to identify and exploit DLL hijacking vulnerabilities in Windows programs
-- [**191**Star][2y] [Py] [brucetg/pentest-tools](https://github.com/brucetg/pentest-tools) 内网渗透工具
-- [**191**Star][4m] [Py] [boy-hack/hack-requests](https://github.com/boy-hack/hack-requests) 给黑客们使用的http底层网络库
-- [**191**Star][12m] [Py] [0xr0/shellver](https://github.com/0xr0/shellver) Reverse Shell Cheat Sheet TooL
-- [**190**Star][2y] [Py] [sheldoncoupeheure/autosqli](https://github.com/sheldoncoupeheure/AutoSQLi) An automatic SQL Injection tool which takes advantage of ~DorkNet~ Googler, Ddgr, WhatWaf and sqlmap.
-- [**190**Star][6m] [JS] [xiaokanghub/frida-android-unpack](https://github.com/xiaokanghub/frida-android-unpack) this unpack script for Android O and Android P
+- [**191**Star][7d] [Go] [esrrhs/pingtunnel](https://github.com/esrrhs/pingtunnel) a tool that advertises tcp/udp/sock5 traffic as icmp traffic for forwarding.流量转发工具.
+- [**191**Star][11m] [Py] [emersonelectricco/fsf](https://github.com/emersonelectricco/fsf) File Scanning Framework
+- [**191**Star][13d] [Shell] [drduh/purse](https://github.com/drduh/purse) GPG asymmetric (YubiKey) password manager
+- [**191**Star][7m] [C] [andikleen/simple-pt](https://github.com/andikleen/simple-pt) Simple Intel CPU processor tracing on Linux
+- [**191**Star][1y] [Py] [ak1t4/open-redirect-scanner](https://github.com/ak1t4/open-redirect-scanner) open-redirect-scanner:open redirect subdomains scanner
+- [**191**Star][12m] [JS] [78778443/permeate](https://github.com/78778443/permeate) 一个用于渗透透测试演练的WEB系统,用于提升寻找网站能力,也可以用于web安全教学
+- [**190**Star][17d] [Py] [skelsec/jackdaw](https://github.com/skelsec/jackdaw) gather gather gather
+- [**190**Star][12m] [Py] [zerokeeper/webeye](https://github.com/zerokeeper/webeye) 快速简单地识别WEB服务器类型、CMS类型、WAF类型、WHOIS信息、以及语言框架的小脚本
+- [**190**Star][9d] [JS] [xiaokanghub/frida-android-unpack](https://github.com/xiaokanghub/frida-android-unpack) this unpack script for Android O and Android P
- [**190**Star][3y] [C++] [wapiflapi/veles](https://github.com/wapiflapi/veles) Visual reverse engineering tool.
-- [**190**Star][2m] [Py] [unipacker/unipacker](https://github.com/unipacker/unipacker) Automatic and platform-independent unpacker for Windows binaries based on emulation
-- [**190**Star][3m] [Shell] [unbinilium/twist](https://github.com/unbinilium/twist) A light script for you to setup shadowsocks-libev server with high-speed connections and newest powerful features
- [**190**Star][1y] [PHP] [smarttang/w3a_soc](https://github.com/smarttang/w3a_soc) Web日志审计与网络监控集合一身的平台
-- [**190**Star][23d] [Py] [seemoo-lab/internalblue](https://github.com/seemoo-lab/internalblue) Bluetooth experimentation framework for Broadcom and Cypress chips.
-- [**190**Star][8m] [Py] [ropnop/impacket_static_binaries](https://github.com/ropnop/impacket_static_binaries) Standalone binaries for Linux/Windows of Impacket's examples
- [**190**Star][2m] [JS] [quarkslab/irma](https://github.com/quarkslab/irma) IRMA is an asynchronous & customizable analysis system for suspicious files.
- [**190**Star][2m] [Ruby] [philnash/pwned](https://github.com/philnash/pwned) An easy, Ruby way to use the Pwned Passwords API.
+- [**190**Star][8m] [JS] [or3stis/apparatus](https://github.com/or3stis/apparatus) A graphical security analysis tool for IoT networks
- [**190**Star][2m] [noorqureshi/kali-linux-cheatsheet](https://github.com/noorqureshi/kali-linux-cheatsheet) Kali Linux Cheat Sheet for Penetration Testers
+- [**190**Star][2y] [C] [nongiach/cve](https://github.com/nongiach/cve)
- [**190**Star][1y] [Py] [nettitude/scrounger](https://github.com/nettitude/scrounger) Mobile application testing toolkit
- [**190**Star][2y] [Py] [neex/gifoeb](https://github.com/neex/gifoeb) exploit for ImageMagick's uninitialized memory disclosure in gif coder
- [**190**Star][2y] [Py] [mxdg/passbytcp](https://github.com/mxdg/passbytcp) 内网 tcp 穿透
-- [**190**Star][1y] [Py] [malwaredllc/bamf](https://github.com/malwaredllc/bamf) BAMF (Backdoor Access Machine Farmer)
-- [**190**Star][3y] [HTML] [liveoverflow/lo_nintendoswitch](https://github.com/liveoverflow/lo_nintendoswitch) Some of my PoC stuff for the Nintendo Switch
+- [**190**Star][3m] [Py] [milo2012/metasploithelper](https://github.com/milo2012/metasploithelper) metasploitHelper
- [**190**Star][3m] [Shell] [lateralblast/lunar](https://github.com/lateralblast/lunar) A UNIX security auditing tool based on several security frameworks
-- [**190**Star][24d] [Py] [ghostmanager/ghostwriter](https://github.com/ghostmanager/ghostwriter) The SpecterOps project management and reporting engine
+- [**190**Star][4y] [JS] [isecpartners/introspy-analyzer](https://github.com/isecpartners/introspy-analyzer) a set of iOS and Android tools designed to help understand what an iOS or Android application is doing at runtime and assist in the identification of potential security issues.
+- [**190**Star][12m] [Go] [gravitational/cve-2018-1002105](https://github.com/gravitational/cve-2018-1002105) Test utility for cve-2018-1002105
- [**190**Star][7m] [Py] [g0tmi1k/exe2hex](https://github.com/g0tmi1k/exe2hex) encodes an executable binary file into ASCII text format
-- [**190**Star][11m] [Py] [emersonelectricco/fsf](https://github.com/emersonelectricco/fsf) File Scanning Framework
-- [**190**Star][3m] [Java] [derekbabb/cybersecurity](https://github.com/derekbabb/cybersecurity) A curriculum for a high school cyber security course.
-- [**190**Star][5m] [C++] [boyan-milanov/ropgenerator](https://github.com/boyan-milanov/ropgenerator) ROPGenerator is a tool that helps you building ROP exploits by finding and chaining gadgets together
+- [**190**Star][7m] [Py] [corelan/windbglib](https://github.com/corelan/windbglib) Public repository for windbglib, a wrapper around pykd.pyd (for Windbg), used by mona.py
+- [**190**Star][2y] [JS] [chichou/etacsufbo](https://github.com/chichou/etacsufbo) 基于 AST 变换的简易 Javascript 反混淆辅助工具
+- [**190**Star][4y] [C++] [aslody/elfhook](https://github.com/aslody/elfhook) modify PLT to hook api, supported android 5\6.
- [**190**Star][6y] [Py] [andrewf/pcap2har](https://github.com/andrewf/pcap2har) A convertor from .pcap network capture files to HTTP Archive files.
-- [**190**Star][12m] [JS] [78778443/permeate](https://github.com/78778443/permeate) 一个用于渗透透测试演练的WEB系统,用于提升寻找网站能力,也可以用于web安全教学
- [**190**Star][9m] [Go] [0x4d31/honeybits](https://github.com/0x4d31/honeybits) A PoC tool designed to enhance the effectiveness of your traps by spreading breadcrumbs & honeytokens across your systems to lure the attacker toward your honeypots
-- [**189**Star][4m] [Kotlin] [shadowsocks/v2ray-plugin-android](https://github.com/shadowsocks/v2ray-plugin-android) A SIP003 V2ray plugin on Android
-- [**189**Star][3y] [Go] [koding/tunnel](https://github.com/koding/tunnel) Tunnel proxy package in Go
-- [**189**Star][2y] [Java] [p3gleg/pwnback](https://github.com/P3GLEG/PwnBack) Burp Extender plugin that generates a sitemap of a website using Wayback Machine
-- [**189**Star][28d] [Py] [ydkhatri/mac_apt](https://github.com/ydkhatri/mac_apt) macOS Artifact Parsing Tool
-- [**189**Star][1y] [Py] [thesecondsun/shellab](https://github.com/thesecondsun/shellab) Linux and Windows shellcode enrichment utility
-- [**189**Star][18d] [Py] [skyscanner/lambdaguard](https://github.com/skyscanner/lambdaguard) AWS Serverless Security
+- [**189**Star][2y] [Kotlin] [borisf/classyshark-bytecode-viewer](https://github.com/borisf/classyshark-bytecode-viewer) Browse your Java/Kotlin compiled code
+- [**189**Star][2d] [Py] [duo-labs/parliament](https://github.com/duo-labs/parliament) AWS IAM linting library
+- [**189**Star][9m] [JS] [noahziheng/ssr-helper](https://github.com/noahziheng/ssr-helper) A CLI helper of ShadowsocksR Python
+- [**189**Star][2y] [C] [sud01oo/processinjection](https://github.com/sud01oo/ProcessInjection) Some ways to inject a DLL into a alive process
+- [**189**Star][2y] [Py] [sheldoncoupeheure/autosqli](https://github.com/sheldoncoupeheure/AutoSQLi) An automatic SQL Injection tool which takes advantage of ~DorkNet~ Googler, Ddgr, WhatWaf and sqlmap.
+- [**189**Star][5d] [Py] [ydkhatri/mac_apt](https://github.com/ydkhatri/mac_apt) macOS Artifact Parsing Tool
+- [**189**Star][2y] [Go] [woj-ciech/osint](https://github.com/woj-ciech/osint)
+- [**189**Star][8d] [Py] [webfp/tor-browser-selenium](https://github.com/webfp/tor-browser-selenium) Tor Browser automation with Selenium.
- [**189**Star][2y] [Py] [sherjilozair/dqn](https://github.com/sherjilozair/dqn) Basic DQN implementation
-- [**189**Star][4m] [Objective-C] [riusksk/secconarchive](https://github.com/riusksk/secconarchive) Security Conference Archive
+- [**189**Star][5y] [C++] [rwfpl/rewolf-x86-virtualizer](https://github.com/rwfpl/rewolf-x86-virtualizer) Simple VM based x86 PE (portable exectuable) protector.
- [**189**Star][1y] [Java] [rebeyond/memshell](https://github.com/rebeyond/memshell) a webshell resides in the memory of java web server
-- [**189**Star][2y] [C] [nongiach/cve](https://github.com/nongiach/cve)
-- [**189**Star][2m] [Py] [niklasrosenstein/pydoc-markdown](https://github.com/niklasrosenstein/pydoc-markdown) Create Python API documentation in Markdown format.
-- [**189**Star][11d] [Py] [mozillasecurity/grizzly](https://github.com/mozillasecurity/grizzly) A cross-platform browser fuzzing framework
+- [**189**Star][1m] [Py] [phype/telnet-iot-honeypot](https://github.com/phype/telnet-iot-honeypot) Python telnet honeypot for catching botnet binaries
+- [**189**Star][13d] [Py] [mozillasecurity/grizzly](https://github.com/mozillasecurity/grizzly) A cross-platform browser fuzzing framework
+- [**189**Star][8m] [Py] [m4ll0k/takeover](https://github.com/m4ll0k/takeover) 子域名漏洞扫描器
+- [**189**Star][3y] [HTML] [liveoverflow/lo_nintendoswitch](https://github.com/liveoverflow/lo_nintendoswitch) Some of my PoC stuff for the Nintendo Switch
- [**189**Star][9m] [C++] [kelvinhack/khypervisor](https://github.com/kelvinhack/khypervisor) kHypervisor is a lightweight bluepill-like nested VMM for Windows, it provides and emulating a basic function of Intel VT-x
-- [**189**Star][3m] [Py] [jrspruitt/ubi_reader](https://github.com/jrspruitt/ubi_reader) Collection of Python scripts for reading information about and extracting data from UBI and UBIFS images.
- [**189**Star][4y] [Py] [jduck/cve-2015-1538-1](https://github.com/jduck/cve-2015-1538-1) An exploit for CVE-2015-1538-1 - Google Stagefright ‘stsc’ MP4 Atom Integer Overflow Remote Code Execution
- [**189**Star][7y] [C++] [hzphreak/vminjector](https://github.com/hzphreak/vminjector) DLL Injection tool to unlock guest VMs
-- [**189**Star][12m] [Go] [gravitational/cve-2018-1002105](https://github.com/gravitational/cve-2018-1002105) Test utility for cve-2018-1002105
- [**189**Star][1y] [Go] [floyernick/fleep-go](https://github.com/floyernick/fleep-go) 根据文件的"magic number"判定文件的格式, Go语言编写
-- [**189**Star][2y] [PowerShell] [cybereason/invoke-wmilm](https://github.com/cybereason/invoke-wmilm) a PoC script for various methods to acheive authenticated remote code execution via WMI
-- [**189**Star][7m] [Py] [corelan/windbglib](https://github.com/corelan/windbglib) Public repository for windbglib, a wrapper around pykd.pyd (for Windbg), used by mona.py
+- [**189**Star][6d] [OCaml] [fkie-cad/cwe_checker](https://github.com/fkie-cad/cwe_checker) cwe_checker finds vulnerable patterns in binary executables
+- [**189**Star][2y] [PS] [cybereason/invoke-wmilm](https://github.com/cybereason/invoke-wmilm) a PoC script for various methods to acheive authenticated remote code execution via WMI
- [**189**Star][1m] [Shell] [controlplaneio/netassert](https://github.com/controlplaneio/netassert) Network security testing for DevSecOps workflows
- [**189**Star][3y] [Shell] [b3rito/yodo](https://github.com/b3rito/yodo) Local Privilege Escalation
- [**189**Star][5m] [PHP] [automattic/camptix](https://github.com/automattic/camptix) an easy to use and flexible event ticketing plugin created
-- [**189**Star][4y] [C++] [aslody/elfhook](https://github.com/aslody/elfhook) modify PLT to hook api, supported android 5\6.
-- [**189**Star][7m] [C] [andikleen/simple-pt](https://github.com/andikleen/simple-pt) Simple Intel CPU processor tracing on Linux
-- [**189**Star][1y] [Py] [ak1t4/open-redirect-scanner](https://github.com/ak1t4/open-redirect-scanner) open-redirect-scanner:open redirect subdomains scanner
-- [**188**Star][6m] [Shell] [suniceman/ss-fly](https://github.com/suniceman/ss-fly) 一键脚本搭建ss/ssr并开启bbr内核加速(Ubuntu/CentOS/Debian)
-- [**188**Star][2y] [C] [sud01oo/processinjection](https://github.com/sud01oo/ProcessInjection) Some ways to inject a DLL into a alive process
-- [**188**Star][12m] [Py] [zerokeeper/webeye](https://github.com/zerokeeper/webeye) 快速简单地识别WEB服务器类型、CMS类型、WAF类型、WHOIS信息、以及语言框架的小脚本
-- [**188**Star][9m] [Batchfile] [tai7sy/fuckcdn](https://github.com/tai7sy/fuckcdn) CDN真实IP扫描,易语言开发
-- [**188**Star][5y] [C++] [rwfpl/rewolf-x86-virtualizer](https://github.com/rwfpl/rewolf-x86-virtualizer) Simple VM based x86 PE (portable exectuable) protector.
+- [**189**Star][2m] [ObjC] [alexxy/netdiscover](https://github.com/alexxy/netdiscover) a network address discovering tool
+- [**189**Star][2m] [Py] [alainiamburg/sniffrom](https://github.com/alainiamburg/sniffrom) A tool for passive data capture and reconnaissance of serial flash chips. It is used in conjunction with a Saleae logic analyzer to reconstruct flash memory contents and extract contextual information about device operations.
+- [**188**Star][1y] [Py] [thesecondsun/shellab](https://github.com/thesecondsun/shellab) Linux and Windows shellcode enrichment utility
+- [**188**Star][2m] [Py] [scwuaptx/ctf](https://github.com/scwuaptx/ctf) Some CTF write up
- [**188**Star][4y] [Java] [ripe-ncc/hadoop-pcap](https://github.com/ripe-ncc/hadoop-pcap) Hadoop library to read packet capture (PCAP) files
- [**188**Star][4m] [C] [reswitched/libtransistor](https://github.com/reswitched/libtransistor) Open source toolchain for Switch development
-- [**188**Star][6m] [pochubs/pochubs](https://github.com/pochubs/pochubs) PocHubs是为了整合网上知名开源框架的漏洞详细和POC
-- [**188**Star][1m] [Py] [phype/telnet-iot-honeypot](https://github.com/phype/telnet-iot-honeypot) Python telnet honeypot for catching botnet binaries
-- [**188**Star][1y] [Perl] [moham3driahi/xbruteforcer](https://github.com/moham3driahi/xbruteforcer) X Brute Forcer Tool
-- [**188**Star][3m] [Py] [milo2012/metasploithelper](https://github.com/milo2012/metasploithelper) metasploitHelper
+- [**188**Star][4y] [Py] [paulsec/hqlmap](https://github.com/paulsec/hqlmap) (Deprecated) HQLmap, Automatic tool to exploit HQL injections
+- [**188**Star][25d] [Py] [osquery/osquery-python](https://github.com/osquery/osquery-python) Python bindings for osquery's Thrift API
+- [**188**Star][2y] [Perl] [moham3driahi/xbruteforcer](https://github.com/moham3driahi/xbruteforcer) X Brute Forcer Tool
- [**188**Star][4m] [Py] [milo2012/cve-2018-13379](https://github.com/milo2012/cve-2018-13379) CVE-2018-13379
- [**188**Star][2m] [Py] [matrix1001/welpwn](https://github.com/matrix1001/welpwn) make pwnning an art, freeing you from dozens of meaningless jobs
- [**188**Star][1y] [Py] [malwarereversebrasil/malwaresearch](https://github.com/malwarereversebrasil/malwaresearch) A command line tool to find malwares on http://openmalware.org
-- [**188**Star][5m] [Go] [lc/secretz](https://github.com/lc/secretz) secretz, minimizing the large attack surface of Travis CI
- [**188**Star][4y] [krmaxwell/coding-entertainment](https://github.com/krmaxwell/coding-entertainment) Puzzles, challenges, games, CTFs, and other entertainment via coding
+- [**188**Star][1m] [Rust] [kpcyrd/badtouch](https://github.com/kpcyrd/badtouch) 可编程的网络验证破解的库, Rust编写
- [**188**Star][6y] [Java] [jsontest/jsontest](https://github.com/jsontest/jsontest) JSON Testing Service - JSONTest.com
+- [**188**Star][2m] [Shell] [jagerzhang/cckiller](https://github.com/jagerzhang/cckiller) Linux轻量级CC攻击防御工具脚本
+- [**188**Star][3m] [Py] [internetarchive/warcprox](https://github.com/internetarchive/warcprox) WARC writing MITM HTTP/S proxy
- [**188**Star][3y] [C] [hashcat/maskprocessor](https://github.com/hashcat/maskprocessor) High-Performance word generator with a per-position configureable charset
-- [**188**Star][11d] [Shell] [drduh/purse](https://github.com/drduh/purse) GPG asymmetric (YubiKey) password manager
+- [**188**Star][2m] [PHP] [gallopyd/domain-tool](https://github.com/gallopyd/domain-tool) 微信域名拦截检测、QQ域名拦截检测、域名Whois查询:
- [**188**Star][10m] [Haskell] [cifasis/quickfuzz](https://github.com/cifasis/quickfuzz) An experimental grammar fuzzer in Haskell using QuickCheck
-- [**188**Star][2y] [JS] [chichou/etacsufbo](https://github.com/chichou/etacsufbo) 基于 AST 变换的简易 Javascript 反混淆辅助工具
-- [**188**Star][2m] [Objective-C] [alexxy/netdiscover](https://github.com/alexxy/netdiscover) a network address discovering tool
-- [**188**Star][2m] [Py] [alainiamburg/sniffrom](https://github.com/alainiamburg/sniffrom) A tool for passive data capture and reconnaissance of serial flash chips. It is used in conjunction with a Saleae logic analyzer to reconstruct flash memory contents and extract contextual information about device operations.
- [**188**Star][2y] [C++] [ahxr/ghost](https://github.com/ahxr/ghost) a light RAT that gives the server/attacker full remote access to the user's command-line interprete
-- [**187**Star][2y] [Go] [woj-ciech/osint](https://github.com/woj-ciech/osint)
-- [**187**Star][1m] [Py] [webfp/tor-browser-selenium](https://github.com/webfp/tor-browser-selenium) Tor Browser automation with Selenium.
+- [**187**Star][2m] [ObjC] [shadowsocksr-live/ssrmac](https://github.com/shadowsocksr-live/ssrmac) ShadowsocksR (SSR) client for macOS
+- [**187**Star][16d] [PHP] [0blio/caesar](https://github.com/0blio/Caesar) An HTTP based RAT (Remote Administration Tool) that allows you to remotely control devices from your browser
- [**187**Star][3m] [Py] [swisskyrepo/damnwebscanner](https://github.com/swisskyrepo/damnwebscanner) Another web vulnerabilities scanner, this extension works on Chrome and Opera
-- [**187**Star][4y] [Py] [paulsec/hqlmap](https://github.com/paulsec/hqlmap) (Deprecated) HQLmap, Automatic tool to exploit HQL injections
+- [**187**Star][3m] [slowmist/papers](https://github.com/slowmist/papers) SlowMist Vulnerability Research Advisories
+- [**187**Star][17d] [Py] [rastating/shiva](https://github.com/rastating/shiva) An Ansible playbook to provision a host for penetration testing and CTF challenges
+- [**187**Star][6m] [PS] [phink-team/cobaltstrike-ms17-010](https://github.com/phink-team/cobaltstrike-ms17-010) cobaltstrike ms17-010 module and some other
- [**187**Star][5y] [Ruby] [m4rco-/dorothy2](https://github.com/m4rco-/dorothy2) A malware/botnet analysis framework written in Ruby.
-- [**187**Star][8m] [Py] [m4ll0k/takeover](https://github.com/m4ll0k/takeover) 子域名漏洞扫描器
- [**187**Star][2y] [C] [laanwj/etna_viv](https://github.com/laanwj/etna_viv) Etnaviv is a project to build a FOSS driver for the Vivante GCxxx series of embedded GPUs - laanwj's personal fork - upstream is
-- [**187**Star][30d] [Rust] [kpcyrd/badtouch](https://github.com/kpcyrd/badtouch) 可编程的网络验证破解的库, Rust编写
- [**187**Star][2y] [Py] [kokjo/universalrop](https://github.com/kokjo/universalrop) universalrop:使用unicorn 和 z3 生成 ROP 链
-- [**187**Star][2m] [Py] [internetarchive/warcprox](https://github.com/internetarchive/warcprox) WARC writing MITM HTTP/S proxy
+- [**187**Star][14d] [Shell] [kalilinuxtricksyt/easysploit](https://github.com/kalilinuxtricksyt/easysploit) EasySploit - Metasploit automation (EASIER and FASTER than EVER)
+- [**187**Star][2y] [Visual Basic .NET] [joesecurity/pafishmacro](https://github.com/joesecurity/pafishmacro) Pafish Macro is a Macro enabled Office Document to detect malware analysis systems and sandboxes. It uses evasion & detection techniques implemented by malicious documents.
- [**187**Star][1y] [Py] [he1m4n6a/findwebshell](https://github.com/he1m4n6a/findwebshell) findWebshell是一款基于python开发的webshell检测工具。
- [**187**Star][9m] [C#] [goldshtn/minidumper](https://github.com/goldshtn/minidumper) Write minidumps of .NET processes with full memory, only CLR heaps, or no memory at all
-- [**187**Star][14d] [OCaml] [fkie-cad/cwe_checker](https://github.com/fkie-cad/cwe_checker) cwe_checker finds vulnerable patterns in binary executables
-- [**187**Star][11d] [Ruby] [erwanlr/fingerprinter](https://github.com/erwanlr/fingerprinter) CMS/LMS/Library etc Versions Fingerprinter
+- [**187**Star][13d] [Ruby] [erwanlr/fingerprinter](https://github.com/erwanlr/fingerprinter) CMS/LMS/Library etc Versions Fingerprinter
- [**187**Star][3y] [Py] [droope/pwlist](https://github.com/droope/pwlist) Password lists obtained from strangers attempting to log in to my server.
- [**187**Star][3y] [Py] [drizzlerisk/tunpacker](https://github.com/drizzlerisk/tunpacker) TUnpacker是一款Android脱壳工具
-- [**187**Star][5m] [Py] [doyensec/graph-ql](https://github.com/doyensec/graph-ql) GraphQL Security Research Material
+- [**187**Star][2m] [Py] [danigargu/dereferencing](https://github.com/danigargu/dereferencing) IDA Pro plugin that implements more user-friendly register and stack views
- [**187**Star][7m] [JS] [antoinevastel/fpscanner](https://github.com/antoinevastel/fpscanner)
+- [**187**Star][5d] [C] [aflgo/aflgo](https://github.com/aflgo/aflgo) Directed Greybox Fuzzing with AFL
+- [**186**Star][1y] [bo0om/waf-bypass-cheat-sheet](https://github.com/bo0om/waf-bypass-cheat-sheet) Another way to bypass WAF Cheat Sheet (draft)
+- [**186**Star][3y] [C] [tunz/afl-fuzz-js](https://github.com/tunz/afl-fuzz-js) afl-fuzz for javascript
+- [**186**Star][1y] [Py] [ha3mrx/ddos-attack](https://github.com/ha3mrx/ddos-attack) DDos-Attack Is A Python script online Attack
- [**186**Star][4m] [Py] [ex0dus-0x/doxbox](https://github.com/ex0dus-0x/doxbox) web-based OSINT and reconaissance toolkit
-- [**186**Star][4m] [C++] [chrisps/hexext](https://github.com/chrisps/Hexext) a plugin to improve the output of the hexrays decompiler through microcode manipulation.
+- [**186**Star][3y] [Lua] [automayt/ics-pcap](https://github.com/automayt/ics-pcap) A collection of ICS/SCADA PCAPs
- [**186**Star][3y] [Py] [xyntax/filesensor](https://github.com/xyntax/filesensor) 基于爬虫的动态敏感文件探测工具
-- [**186**Star][3m] [slowmist/papers](https://github.com/slowmist/papers) SlowMist Vulnerability Research Advisories
-- [**186**Star][2m] [Py] [scwuaptx/ctf](https://github.com/scwuaptx/ctf) Some CTF write up
+- [**186**Star][1y] [wooyundota/droiddrops](https://github.com/wooyundota/droiddrops) 梳理下自己之前写过的文章
+- [**186**Star][3y] [Shell] [wismna/hackpi](https://github.com/wismna/hackpi) Hacking tool inside a Raspberry Pi zero
+- [**186**Star][1m] [Shell] [tomdev/teh_s3_bucketeers](https://github.com/tomdev/teh_s3_bucketeers) S3 bucket 搜索引擎
+- [**186**Star][3y] [PS] [sekirkity/browsergather](https://github.com/sekirkity/browsergather) Fileless web browser information extraction
- [**186**Star][6y] [C] [saelo/cve-2014-0038](https://github.com/saelo/cve-2014-0038) Linux local root exploit for CVE-2014-0038
-- [**186**Star][15d] [Py] [rastating/shiva](https://github.com/rastating/shiva) An Ansible playbook to provision a host for penetration testing and CTF challenges
-- [**186**Star][6m] [PowerShell] [phink-team/cobaltstrike-ms17-010](https://github.com/phink-team/cobaltstrike-ms17-010) cobaltstrike ms17-010 module and some other
-- [**186**Star][23d] [Py] [osquery/osquery-python](https://github.com/osquery/osquery-python) Python bindings for osquery's Thrift API
-- [**186**Star][6m] [Objective-C] [nakiostudio/twitterx](https://github.com/nakiostudio/twitterx) Keeping Twitter for macOS alive with code injection
+- [**186**Star][5y] [Py] [rpp0/scapy-fakeap](https://github.com/rpp0/scapy-fakeap) Fake wireless Access Point (AP) implementation using Python and Scapy, intended for convenient testing of 802.11 protocols and implementations.
+- [**186**Star][24d] [C] [rfc1036/whois](https://github.com/rfc1036/whois) Intelligent WHOIS client
+- [**186**Star][8m] [offensive-security/cryptsetup-nuke-keys](https://github.com/offensive-security/cryptsetup-nuke-keys) A patch for cryptsetup which adds the option to nuke all keyslots given a certain passphrase.
+- [**186**Star][4y] [Java] [netspi/weblogicpassworddecryptor](https://github.com/netspi/weblogicpassworddecryptor) PowerShell script and Java code to decrypt WebLogic passwords
+- [**186**Star][6m] [ObjC] [nakiostudio/twitterx](https://github.com/nakiostudio/twitterx) Keeping Twitter for macOS alive with code injection
- [**186**Star][3y] [Ruby] [miketierney/artii](https://github.com/miketierney/artii) A small gem to generate ASCII art from text fed in to it
-- [**186**Star][2y] [Visual Basic] [joesecurity/pafishmacro](https://github.com/joesecurity/pafishmacro) Pafish Macro is a Macro enabled Office Document to detect malware analysis systems and sandboxes. It uses evasion & detection techniques implemented by malicious documents.
-- [**186**Star][2m] [Shell] [jagerzhang/cckiller](https://github.com/jagerzhang/cckiller) Linux轻量级CC攻击防御工具脚本
-- [**186**Star][8m] [PowerShell] [hansesecure/credgrap_ie_edge](https://github.com/hansesecure/credgrap_ie_edge) Extract stored credentials from Internet Explorer and Edge
-- [**186**Star][2m] [PHP] [gallopyd/domain-tool](https://github.com/gallopyd/domain-tool) 微信域名拦截检测、QQ域名拦截检测、域名Whois查询:
-- [**186**Star][3m] [C] [aflgo/aflgo](https://github.com/aflgo/aflgo) Directed Greybox Fuzzing with AFL
-- [**185**Star][3y] [C] [tunz/afl-fuzz-js](https://github.com/tunz/afl-fuzz-js) afl-fuzz for javascript
+- [**186**Star][2d] [Rust] [insanitybit/grapl](https://github.com/insanitybit/grapl) Graph platform for Detection and Response
+- [**186**Star][8m] [PS] [hansesecure/credgrap_ie_edge](https://github.com/hansesecure/credgrap_ie_edge) Extract stored credentials from Internet Explorer and Edge
+- [**186**Star][1y] [Py] [d4vinci/pastejacker](https://github.com/d4vinci/pastejacker) Hacking systems with the automation of PasteJacking attacks.
+- [**185**Star][3y] [Nginx] [awslabs/ecs-nginx-reverse-proxy](https://github.com/awslabs/ecs-nginx-reverse-proxy) Reference architecture for deploying Nginx on ECS, both as a basic static resource server, and as a reverse proxy in front of a dynamic application server.
+- [**185**Star][3y] [Py] [f-secure/mittn](https://github.com/f-secure/mittn) Mittn: Security test tool runner for test automation in CI
- [**185**Star][8m] [Rust] [nebgnahz/cv-rs](https://github.com/nebgnahz/cv-rs) Rust wrapper for OpenCV (manual at this point)
-- [**185**Star][9m] [JS] [noahziheng/ssr-helper](https://github.com/noahziheng/ssr-helper) A CLI helper of ShadowsocksR Python
-- [**185**Star][3y] [Lua] [automayt/ics-pcap](https://github.com/automayt/ics-pcap) A collection of ICS/SCADA PCAPs
-- [**185**Star][10d] [JS] [ret2got/disasm.pro](https://github.com/ret2got/disasm.pro) A realtime assembler/disassembler (formerly known as disasm.ninja)
-- [**185**Star][14d] [PHP] [0blio/caesar](https://github.com/0blio/Caesar) An HTTP based RAT (Remote Administration Tool) that allows you to remotely control devices from your browser
+- [**185**Star][4m] [C++] [chrisps/hexext](https://github.com/chrisps/Hexext) a plugin to improve the output of the hexrays decompiler through microcode manipulation.
- [**185**Star][1y] [yellowbyte/analysis-of-anti-analysis](https://github.com/yellowbyte/analysis-of-anti-analysis) writings on anti-reverse engineering
-- [**185**Star][3y] [Shell] [wismna/hackpi](https://github.com/wismna/hackpi) Hacking tool inside a Raspberry Pi zero
-- [**185**Star][1m] [Shell] [tomdev/teh_s3_bucketeers](https://github.com/tomdev/teh_s3_bucketeers) S3 bucket 搜索引擎
- [**185**Star][7y] [CoffeeScript] [shadowsocks/shadowsocks-dotcloud](https://github.com/shadowsocks/shadowsocks-dotcloud) a port of shadowsocks via websockets protocol, able to tunnel through HTTP proxy
- [**185**Star][2y] [Py] [savio-code/ghost-phisher](https://github.com/savio-code/ghost-phisher) 带 GUI的钓鱼工具
-- [**185**Star][22d] [C] [rfc1036/whois](https://github.com/rfc1036/whois) Intelligent WHOIS client
- [**185**Star][3y] [pwnsdx/badcode](https://github.com/pwnsdx/badcode) (Discontinued) BadCode is a signature database for static source code scanner that identify bad security practices.
+- [**185**Star][2y] [Py] [ninijay/pycurity](https://github.com/ninijay/pycurity) Python Security Scripts
- [**185**Star][5y] [C++] [nihilus/scyllahide](https://github.com/nihilus/scyllahide) an x64/x86 usermode Anti-Anti-Debug library
-- [**185**Star][4y] [Java] [netspi/weblogicpassworddecryptor](https://github.com/netspi/weblogicpassworddecryptor) PowerShell script and Java code to decrypt WebLogic passwords
- [**185**Star][6y] [mynameismeerkat/pyretic](https://github.com/mynameismeerkat/pyretic) pyREtic is an extensible framework for in-memory Python bytecode reverse engineering
- [**185**Star][1y] [Py] [mr-un1k0d3r/unibyav](https://github.com/mr-un1k0d3r/unibyav)
- [**185**Star][6m] [Py] [lijiejie/idea_exploit](https://github.com/lijiejie/idea_exploit) Gather sensitive information from (.idea) folder for pentesters
-- [**185**Star][12m] [PowerShell] [felixweyne/processspawncontrol](https://github.com/felixweyne/processspawncontrol) a Powershell tool which aims to help in the behavioral (process) analysis of malware. PsC suspends newly launched processes, and gives the analyst the option to either keep the process suspended, or to resume it.
+- [**185**Star][1y] [Py] [hexhive/t-fuzz](https://github.com/hexhive/t-fuzz)
+- [**185**Star][12m] [PS] [felixweyne/processspawncontrol](https://github.com/felixweyne/processspawncontrol) a Powershell tool which aims to help in the behavioral (process) analysis of malware. PsC suspends newly launched processes, and gives the analyst the option to either keep the process suspended, or to resume it.
- [**185**Star][3y] [Go] [eahydra/socks](https://github.com/eahydra/socks) socks -- a proxy server.
-- [**185**Star][1y] [Py] [d4vinci/pastejacker](https://github.com/d4vinci/pastejacker) Hacking systems with the automation of PasteJacking attacks.
-- [**185**Star][7m] [Py] [certcc/certfuzz](https://github.com/certcc/certfuzz) This project contains the source code for the CERT Basic Fuzzing Framework (BFF) and the CERT Failure Observation Engine (FOE).
+- [**185**Star][6y] [Py] [danmcinerney/dnsspoof](https://github.com/danmcinerney/dnsspoof) DNS spoofer. Drops DNS responses from the router and replaces it with the spoofed DNS response
+- [**185**Star][2d] [Py] [certcc/certfuzz](https://github.com/certcc/certfuzz) This project contains the source code for the CERT Basic Fuzzing Framework (BFF) and the CERT Failure Observation Engine (FOE).
+- [**185**Star][7m] [Java] [bypass007/nessus_to_report](https://github.com/bypass007/nessus_to_report) Nessus中文报告自动化脚本
- [**185**Star][3y] [Py] [andy10101/apkdetecter](https://github.com/andy10101/apkdetecter) Android Apk查壳工具及源代码
-- [**184**Star][2m] [Objective-C] [shadowsocksr-live/ssrmac](https://github.com/shadowsocksr-live/ssrmac) ShadowsocksR (SSR) client for macOS
+- [**185**Star][3y] [ObjC] [alonemonkey/macreverse](https://github.com/alonemonkey/macreverse) MacReverse Tools and Demo
- [**184**Star][8m] [offensive-security/nethunter-devices](https://github.com/offensive-security/nethunter-devices) NetHunter Devices
-- [**184**Star][3y] [Py] [f-secure/mittn](https://github.com/f-secure/mittn) Mittn: Security test tool runner for test automation in CI
-- [**184**Star][2y] [PowerShell] [xtr4nge/fruityc2](https://github.com/xtr4nge/fruityc2) FruityC2 is a post-exploitation (and open source) framework based on the deployment of agents on compromised machines. Agents are managed from a web interface under the control of an operator.
-- [**184**Star][1y] [wooyundota/droiddrops](https://github.com/wooyundota/droiddrops) 梳理下自己之前写过的文章
+- [**184**Star][1y] [PHP] [yaofeifly/vub_env](https://github.com/yaofeifly/vub_env) 跟踪真实漏洞相关靶场环境搭建
+- [**184**Star][2y] [PS] [xtr4nge/fruityc2](https://github.com/xtr4nge/fruityc2) FruityC2 is a post-exploitation (and open source) framework based on the deployment of agents on compromised machines. Agents are managed from a web interface under the control of an operator.
- [**184**Star][3m] [Py] [stixproject/python-stix](https://github.com/stixproject/python-stix) A Python library for parsing, manipulating, and generating STIX content.
-- [**184**Star][3y] [PowerShell] [sekirkity/browsergather](https://github.com/sekirkity/browsergather) Fileless web browser information extraction
-- [**184**Star][5y] [Py] [rpp0/scapy-fakeap](https://github.com/rpp0/scapy-fakeap) Fake wireless Access Point (AP) implementation using Python and Scapy, intended for convenient testing of 802.11 protocols and implementations.
+- [**184**Star][5m] [JS] [s0md3v/quark](https://github.com/s0md3v/quark) Quark is a data visualization framework.
+- [**184**Star][24d] [Py] [rhinosecuritylabs/ccat](https://github.com/rhinosecuritylabs/ccat) Cloud Container Attack Tool (CCAT) is a tool for testing security of container environments.
- [**184**Star][3y] [CSS] [r00tkillah/horsepill](https://github.com/r00tkillah/horsepill) a PoC of a ramdisk based containerizing root kit
-- [**184**Star][12d] [Shell] [kalilinuxtricksyt/easysploit](https://github.com/kalilinuxtricksyt/easysploit) EasySploit - Metasploit automation (EASIER and FASTER than EVER)
-- [**184**Star][8d] [Rust] [insanitybit/grapl](https://github.com/insanitybit/grapl) Graph platform for Detection and Response
-- [**184**Star][1y] [Py] [hexhive/t-fuzz](https://github.com/hexhive/t-fuzz)
-- [**184**Star][3y] [Py] [hatbashbr/shodanhat](https://github.com/hatbashbr/shodanhat) search for hosts info with shodan
+- [**184**Star][2m] [Py] [pure-l0g1c/loki](https://github.com/pure-l0g1c/loki) Remote Access Tool/Botnet
+- [**184**Star][2m] [Py] [naategh/pyck](https://github.com/naategh/pyck) A collection of useful Python hacking scripts for beginners
+- [**184**Star][2y] [C++] [killvxk/disablewin10patchguardpoc](https://github.com/killvxk/disablewin10patchguardpoc) pseudo-code to show how to disable patchguard with win10
+- [**184**Star][3y] [Shell] [jivoi/openssh-backdoor-kit](https://github.com/jivoi/openssh-backdoor-kit)
+- [**184**Star][2d] [Go] [getlantern/lantern](https://github.com/getlantern/lantern) Lantern官方版本下载 蓝灯 翻墙 科学上网 外网 加速器 梯子 路由 lantern censorship-circumvention censorship gfw vpn accelerator
- [**184**Star][1y] [C++] [fuwaneko/node-protobuf](https://github.com/fuwaneko/node-protobuf) Google Protocol Buffers wrapper for Node.js [UNMAINTAINED]
-- [**184**Star][6y] [Py] [danmcinerney/dnsspoof](https://github.com/danmcinerney/dnsspoof) DNS spoofer. Drops DNS responses from the router and replaces it with the spoofed DNS response
-- [**184**Star][1m] [Py] [danigargu/dereferencing](https://github.com/danigargu/dereferencing) IDA Pro plugin that implements more user-friendly register and stack views
-- [**184**Star][3y] [Objective-C] [alonemonkey/macreverse](https://github.com/alonemonkey/macreverse) MacReverse Tools and Demo
-- [**183**Star][1y] [Py] [ha3mrx/ddos-attack](https://github.com/ha3mrx/ddos-attack) DDos-Attack Is A Python script online Attack
-- [**183**Star][25d] [Py] [angr/pyvex](https://github.com/angr/pyvex) Python bindings for Valgrind's VEX IR.
-- [**183**Star][1y] [PHP] [yaofeifly/vub_env](https://github.com/yaofeifly/vub_env) 跟踪真实漏洞相关靶场环境搭建
+- [**184**Star][3d] [enovella/tee-reversing](https://github.com/enovella/tee-reversing) A curated list of public TEE resources for learning how to reverse-engineer and achieve trusted code execution on ARM devices
+- [**184**Star][3y] [Pascal] [bowlofstew/rootkit.com](https://github.com/bowlofstew/rootkit.com) Mirror of users section of rootkit.com
+- [**184**Star][20d] [C++] [blackint3/openark](https://github.com/blackint3/openark) OpenArk is a open source anti-rookit(ARK) tool on Windows.
+- [**184**Star][2d] [Go] [asciimoo/morty](https://github.com/asciimoo/morty) morty:去除恶意HTML标签和属性,去除外部资源引用以防止第三方信息泄露
+- [**183**Star][3d] [C#] [carlospolop/privilege-escalation-awesome-scripts-suite](https://github.com/carlospolop/privilege-escalation-awesome-scripts-suite) PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
+- [**183**Star][1y] [Perl] [portswigger/upload-scanner](https://github.com/portswigger/upload-scanner) HTTP file upload scanner for Burp Proxy
+- [**183**Star][10d] [Lua] [kuoruan/luci-app-v2ray](https://github.com/kuoruan/luci-app-v2ray) LuCI support for V2Ray
+- [**183**Star][2m] [Py] [angr/pyvex](https://github.com/angr/pyvex) Python bindings for Valgrind's VEX IR.
- [**183**Star][4y] [Py] [xen0ph0n/virustotal_api_tool](https://github.com/xen0ph0n/virustotal_api_tool) A Tool To Leverage Virus Total's Private API Key
-- [**183**Star][24d] [C] [wizardmac/readstat](https://github.com/wizardmac/readstat) Command-line tool (+ C library) for converting SAS, Stata, and SPSS files
+- [**183**Star][26d] [C] [wizardmac/readstat](https://github.com/wizardmac/readstat) Command-line tool (+ C library) for converting SAS, Stata, and SPSS files
- [**183**Star][2y] [Py] [wavestone-cdt/hadoop-attack-library](https://github.com/wavestone-cdt/hadoop-attack-library) A collection of pentest tools and resources targeting Hadoop environments
+- [**183**Star][2m] [Ruby] [tresacton/dspectrumgui](https://github.com/tresacton/dspectrumgui) The goal of this app is to make it trivial to demodulate most basic RF transmission, and provide a digital worksheet for your reverse engineering efforts.
+- [**183**Star][2y] [Smali] [sslab-gatech/avpass](https://github.com/sslab-gatech/avpass) Tool for leaking and bypassing Android malware detection system
- [**183**Star][1y] [C++] [sidechannelmarvels/tracer](https://github.com/sidechannelmarvels/tracer) Set of Dynamic Binary Instrumentation and visualization tools for execution traces.
-- [**183**Star][5m] [JS] [s0md3v/quark](https://github.com/s0md3v/quark) Quark is a data visualization framework.
+- [**183**Star][2m] [Java] [sensepost/mallet](https://github.com/sensepost/mallet) Mallet is an intercepting proxy for arbitrary protocols
+- [**183**Star][10m] [sapphirex00/threat-hunting](https://github.com/sapphirex00/threat-hunting) Personal compilation of APT malware from whitepaper releases, documents and own research
+- [**183**Star][5m] [Py] [s0md3v/orbit](https://github.com/s0md3v/orbit) Blockchain Transactions Investigation Tool
- [**183**Star][4y] [rmusser01/cheatsheets](https://github.com/rmusser01/cheatsheets) Penetration Testing/Security Cheatsheets
- [**183**Star][3m] [radareorg/r2con](https://github.com/radareorg/r2con) Radare Congress Stuff
+- [**183**Star][10m] [Py] [r4stl1n/ssh-brute-forcer](https://github.com/r4stl1n/ssh-brute-forcer) A Simple Multi-Threaded SSH Brute Forcer
+- [**183**Star][2y] [Py] [plazmaz/lnkup](https://github.com/plazmaz/lnkup) Generates malicious LNK file payloads for data exfiltration
+- [**183**Star][2y] [Go] [petercunha/goat](https://github.com/petercunha/goat) a trojan created in Go, using Twitter as a the C&C server
- [**183**Star][2y] [Py] [paulsec/api-dnsdumpster.com](https://github.com/paulsec/api-dnsdumpster.com) (Unofficial) Python API for
-- [**183**Star][2y] [Py] [ninijay/pycurity](https://github.com/ninijay/pycurity) Python Security Scripts
+- [**183**Star][3d] [Py] [mzfr/liffy](https://github.com/mzfr/liffy) Local file inclusion exploitation tool
- [**183**Star][3y] [Py] [misterch0c/firminator_backend](https://github.com/misterch0c/firminator_backend) The first open source vulnerability scanner for firmwares
-- [**183**Star][2y] [C++] [killvxk/disablewin10patchguardpoc](https://github.com/killvxk/disablewin10patchguardpoc) pseudo-code to show how to disable patchguard with win10
- [**183**Star][2y] [Py] [joxeankoret/cve-2017-7494](https://github.com/joxeankoret/cve-2017-7494) Remote root exploit for the SAMBA CVE-2017-7494 vulnerability
-- [**183**Star][3y] [Shell] [jivoi/openssh-backdoor-kit](https://github.com/jivoi/openssh-backdoor-kit)
+- [**183**Star][2y] [C#] [ioncodes/dnpatch](https://github.com/ioncodes/dnpatch) .NET Patcher library using dnlib
+- [**183**Star][9d] [CSS] [hongkonggong/tldr-digital-security](https://github.com/hongkonggong/tldr-digital-security) TLDR Digital Safety Checklist
+- [**183**Star][3y] [Py] [hatbashbr/shodanhat](https://github.com/hatbashbr/shodanhat) search for hosts info with shodan
+- [**183**Star][30d] [feeicn/securityinterviewquestions](https://github.com/feeicn/securityinterviewquestions) 网络信息安全从业者面试指南(持续补充各公司招聘题目和侧重点)
+- [**183**Star][5m] [XSLT] [ernw/nmap-parse-output](https://github.com/ernw/nmap-parse-output) Converts/manipulates/extracts data from a Nmap scan output.
+- [**183**Star][11m] [Py] [crowecybersecurity/ad-ldap-enum](https://github.com/crowecybersecurity/ad-ldap-enum) An LDAP based Active Directory user and group enumeration tool
+- [**183**Star][3d] [C#] [carlospolop/privilege-escalation-awesome-scripts-suite](https://github.com/carlospolop/privilege-escalation-awesome-scripts-suite) PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
- [**183**Star][4y] [Py] [breenmachine/dnsftp](https://github.com/breenmachine/dnsftp) Client/Server scripts to transfer files over DNS. Client scripts are small and only use native tools on the host OS.
-- [**183**Star][3y] [Pascal] [bowlofstew/rootkit.com](https://github.com/bowlofstew/rootkit.com) Mirror of users section of rootkit.com
-- [**183**Star][18d] [C++] [blackint3/openark](https://github.com/blackint3/openark) OpenArk is a open source anti-rookit(ARK) tool on Windows.
-- [**183**Star][2m] [Go] [asciimoo/morty](https://github.com/asciimoo/morty) morty:去除恶意HTML标签和属性,去除外部资源引用以防止第三方信息泄露
+- [**183**Star][2y] [C#] [bhdresh/lazykatz](https://github.com/bhdresh/lazykatz) Lazykatz is an automation developed to extract credentials from remote targets protected with AV and/or application whitelisting software.
- [**183**Star][6m] [Py] [3xp10it/xcdn](https://github.com/3xp10it/xcdn) Try to find out the real ip behind cdn
+- [**182**Star][7d] [Py] [aas-n/spraykatz](https://github.com/aas-n/spraykatz) A tool to spray love around the world.
+- [**182**Star][3y] [CSS] [kali-docs-cn/kali-linux-cookbook-zh](https://github.com/kali-docs-cn/kali-linux-cookbook-zh)
- [**182**Star][4y] [C++] [zecure/shadowd](https://github.com/zecure/shadowd) The Shadow Daemon web application firewall server
- [**182**Star][10m] [Py] [welchbj/bscan](https://github.com/welchbj/bscan) an asynchronous target enumeration tool
- [**182**Star][2m] [Py] [vector35/community-plugins](https://github.com/vector35/community-plugins) Repository for community provided Binary Ninja plugins
+- [**182**Star][6m] [Java] [spring-io/nohttp](https://github.com/spring-io/nohttp) A project for ensuring that https is used
- [**182**Star][7m] [Py] [s0md3v/bolt](https://github.com/s0md3v/bolt) CSRF Scanner
+- [**182**Star][2m] [C++] [rumpkernel/rumprun-packages](https://github.com/rumpkernel/rumprun-packages) Ready-made packages of software for running on the Rumprun unikernel
- [**182**Star][1y] [Rust] [rabbitstack/rabbitc](https://github.com/rabbitstack/rabbitc) Micro container runtime
-- [**182**Star][10m] [Py] [r4stl1n/ssh-brute-forcer](https://github.com/r4stl1n/ssh-brute-forcer) A Simple Multi-Threaded SSH Brute Forcer
-- [**182**Star][2y] [Go] [petercunha/goat](https://github.com/petercunha/goat) a trojan created in Go, using Twitter as a the C&C server
- [**182**Star][7m] [C] [owasp/igoat-swift](https://github.com/owasp/igoat-swift) OWASP iGoat (Swift) - A Damn Vulnerable Swift Application for iOS
- [**182**Star][2m] [noraj/oscp-exam-report-template-markdown](https://github.com/noraj/oscp-exam-report-template-markdown) OSCP Exam Report Template in Markdown
-- [**182**Star][2m] [Py] [naategh/pyck](https://github.com/naategh/pyck) A collection of useful Python hacking scripts for beginners
-- [**182**Star][19d] [Go] [milo2012/pathbrute](https://github.com/milo2012/pathbrute) 服务器目录/文件爆破工具
-- [**182**Star][13d] [Py] [jpcertcc/malconfscan](https://github.com/jpcertcc/malconfscan) Volatility plugin for extracts configuration data of known malware
+- [**182**Star][16d] [Py] [natlas/natlas](https://github.com/natlas/natlas) Scaling Network Scanning. Changes prior to 1.0 may cause difficult to avoid backwards incompatibilities. You've been warned.
+- [**182**Star][7d] [Go] [milo2012/pathbrute](https://github.com/milo2012/pathbrute) 服务器目录/文件爆破工具
+- [**182**Star][6m] [Py] [metachar/mercury](https://github.com/metachar/mercury) Mercury is a hacking tool used to collect information and use the information to further hurt the target
+- [**182**Star][5y] [knoy/icloudhacker](https://github.com/knoy/icloudhacker) Arduino code to brute force Macbook's 4-digit iCloud PINs
+- [**182**Star][7d] [Py] [jpcertcc/malconfscan](https://github.com/jpcertcc/malconfscan) Volatility plugin for extracts configuration data of known malware
- [**182**Star][5m] [C++] [jackullrich/shellcodestdio](https://github.com/jackullrich/shellcodestdio) An extensible framework for easily writing compiler optimized position independent x86 / x64 shellcode for windows platforms.
- [**182**Star][3m] [Py] [j3ssie/iposint](https://github.com/j3ssie/iposint)
-- [**182**Star][2y] [C#] [ioncodes/dnpatch](https://github.com/ioncodes/dnpatch) .NET Patcher library using dnlib
- [**182**Star][5y] [C] [gdbinit/onyx-the-black-cat](https://github.com/gdbinit/onyx-the-black-cat) Kernel extension to disable anti-debug tricks and other useful XNU "features"
-- [**182**Star][11m] [Py] [crowecybersecurity/ad-ldap-enum](https://github.com/crowecybersecurity/ad-ldap-enum) An LDAP based Active Directory user and group enumeration tool
- [**182**Star][3y] [Py] [cldrn/rainmap-lite](https://github.com/cldrn/rainmap-lite) Web界面,从浏览器中启动Nmap扫描. 界面是响应式, 可在手机/平板/PC浏览器中使用
- [**182**Star][4y] [Pascal] [chiggins/malware_sources](https://github.com/chiggins/malware_sources) I found all of these samples on MalwareTech through Twitter somewhere
+- [**182**Star][1y] [Dockerfile] [cboin/re_lab](https://github.com/cboin/re_lab) 包含一些逆向工具的Docker容器
- [**182**Star][2m] [Py] [carlashley/tccprofile](https://github.com/carlashley/tccprofile) Creates a TCC profile for new Privacy Payloads in macOS Mojave
+- [**182**Star][11m] [Py] [boy-hack/gwhatweb](https://github.com/boy-hack/gwhatweb) 网站CMS识别
- [**182**Star][5y] [Py] [bishopfox/rickmote](https://github.com/bishopfox/rickmote) The Rickmote Controller: Hijack TVs using Google Chromecast
-- [**182**Star][2y] [C#] [bhdresh/lazykatz](https://github.com/bhdresh/lazykatz) Lazykatz is an automation developed to extract credentials from remote targets protected with AV and/or application whitelisting software.
+- [**182**Star][2y] [PS] [absolomb/windowsenum](https://github.com/absolomb/windowsenum) A Powershell Privilege Escalation Enumeration Script.
- [**182**Star][5m] [Py] [abdulgaphy/r3con1z3r](https://github.com/abdulgaphy/r3con1z3r) R3con1z3r is a lightweight Web information gathering tool with an intuitive features written in python. it provides a powerful environment in which open source intelligence (OSINT) web-based footprinting can be conducted quickly and thoroughly.
-- [**181**Star][1y] [Perl] [portswigger/upload-scanner](https://github.com/portswigger/upload-scanner) HTTP file upload scanner for Burp Proxy
+- [**182**Star][10m] [Py] [0x27/ciscorv320dump](https://github.com/0x27/ciscorv320dump) CVE-2019-1652 /CVE-2019-1653 Exploits For Dumping Cisco RV320 Configurations & Debugging Data AND Remote Root Exploit!
+- [**182**Star][4y] [Py] [0vercl0k/z3-playground](https://github.com/0vercl0k/z3-playground) A repository to store Z3-python scripts you can use as examples, reminders, whatever.
+- [**181**Star][8m] [shadowsocks/papers](https://github.com/shadowsocks/papers) List of papers related to shadowsocks
- [**181**Star][2y] [Py] [0x09al/wordsteal](https://github.com/0x09AL/WordSteal) This script will create a POC that will steal NTML hashes from a remote computer. Do not use this for illegal purposes.The author does not keep responsibility for any illegal action you do.
-- [**181**Star][1y] [HTML] [yaseng/iot-security-wiki](https://github.com/yaseng/iot-security-wiki) IOT security wiki
-- [**181**Star][1m] [Ruby] [tresacton/dspectrumgui](https://github.com/tresacton/dspectrumgui) The goal of this app is to make it trivial to demodulate most basic RF transmission, and provide a digital worksheet for your reverse engineering efforts.
-- [**181**Star][2y] [Smali] [sslab-gatech/avpass](https://github.com/sslab-gatech/avpass) Tool for leaking and bypassing Android malware detection system
+- [**181**Star][16d] [TS] [tensult/cloud-reports](https://github.com/tensult/cloud-reports) Scans your AWS cloud resources and generates reports. Check out free hosted version:
+- [**181**Star][1m] [Go] [staaldraad/xxeserv](https://github.com/staaldraad/xxeserv) A mini webserver with FTP support for XXE payloads
- [**181**Star][2y] [spacehuhn/arduinoarpspoof](https://github.com/spacehuhn/arduinoarpspoof) Kicks out everyone in your LAN via with an enc28j60 ethernet controller and Arduino.
-- [**181**Star][2y] [Py] [solusipse/spectrology](https://github.com/solusipse/spectrology) Images to audio files with corresponding spectrograms encoder.
-- [**181**Star][10m] [sapphirex00/threat-hunting](https://github.com/sapphirex00/threat-hunting) Personal compilation of APT malware from whitepaper releases, documents and own research
+- [**181**Star][1m] [Py] [so87/oscp-pwk](https://github.com/so87/oscp-pwk) This is my cheatsheet and scripts developed while taking the Offensive Security Penetration Testing with Kali Linux course.
- [**181**Star][2y] [C#] [ryhanson/externalc2](https://github.com/ryhanson/externalc2) A library for integrating communication channels with the Cobalt Strike External C2 server
-- [**181**Star][2m] [C++] [rumpkernel/rumprun-packages](https://github.com/rumpkernel/rumprun-packages) Ready-made packages of software for running on the Rumprun unikernel
-- [**181**Star][2m] [Py] [pure-l0g1c/loki](https://github.com/pure-l0g1c/loki) Remote Access Tool/Botnet
-- [**181**Star][2y] [Py] [plazmaz/lnkup](https://github.com/plazmaz/lnkup) Generates malicious LNK file payloads for data exfiltration
-- [**181**Star][7d] [Py] [mzfr/liffy](https://github.com/mzfr/liffy) Local file inclusion exploitation tool
-- [**181**Star][7m] [lucifer1993/cmsprint](https://github.com/lucifer1993/cmsprint) CMS和中间件指纹库
-- [**181**Star][5y] [knoy/icloudhacker](https://github.com/knoy/icloudhacker) Arduino code to brute force Macbook's 4-digit iCloud PINs
+- [**181**Star][10m] [Py] [riramar/hsecscan](https://github.com/riramar/hsecscan) A security scanner for HTTP response headers.
+- [**181**Star][8m] [lucifer1993/cmsprint](https://github.com/lucifer1993/cmsprint) CMS和中间件指纹库
+- [**181**Star][3y] [C] [kriswebdev/android_aircrack](https://github.com/kriswebdev/android_aircrack) Aircrack-ng command-line for Android. Binaries & source.
- [**181**Star][6m] [Py] [keithjjones/hostintel](https://github.com/keithjjones/hostintel) A modular Python application to collect intelligence for malicious hosts.
+- [**181**Star][5y] [jasonqng/chinese-keywords](https://github.com/jasonqng/chinese-keywords) Collected sensitive Chinese keywords from various sources; for censorship testing and searching for sensitive content
- [**181**Star][4y] [C++] [jacob-baines/elfparser](https://github.com/jacob-baines/elfparser) Cross Platform ELF analysis
-- [**181**Star][28d] [feeicn/securityinterviewquestions](https://github.com/feeicn/securityinterviewquestions) 网络信息安全从业者面试指南(持续补充各公司招聘题目和侧重点)
+- [**181**Star][2m] [Go] [hehnope/slurp](https://github.com/hehnope/slurp) Evaluate the security of S3 buckets
+- [**181**Star][8d] [Py] [fireeye/pwnauth](https://github.com/fireeye/pwnauth)
+- [**181**Star][2m] [Py] [eth-sri/debin](https://github.com/eth-sri/debin) Machine Learning to Deobfuscate Binaries
- [**181**Star][2m] [Py] [delvelabs/tachyon](https://github.com/delvelabs/tachyon) Fast http dead file finder.
- [**181**Star][5y] [C++] [darkwallet/darkleaks](https://github.com/darkwallet/darkleaks) Decentralised Information Black Market
-- [**181**Star][1y] [Dockerfile] [cboin/re_lab](https://github.com/cboin/re_lab) 包含一些逆向工具的Docker容器
-- [**181**Star][11m] [Py] [boy-hack/gwhatweb](https://github.com/boy-hack/gwhatweb) 网站CMS识别
-- [**181**Star][2y] [PowerShell] [absolomb/windowsenum](https://github.com/absolomb/windowsenum) A Powershell Privilege Escalation Enumeration Script.
+- [**181**Star][3y] [Py] [ctxis/wsuspect-proxy](https://github.com/ctxis/wsuspect-proxy) WSUSpect Proxy - a tool for MITM'ing insecure WSUS connections
+- [**181**Star][2y] [PS] [cobbr/obfuscatedempire](https://github.com/cobbr/obfuscatedempire) ObfuscatedEmpire is a fork of Empire with Invoke-Obfuscation integrated directly into it's functionality.
+- [**181**Star][3y] [Py] [anantshri/svn-extractor](https://github.com/anantshri/svn-extractor) simple script to extract all web resources by means of .SVN folder exposed over network.
- [**181**Star][3y] [Py] [4w4k3/repy2exe](https://github.com/4w4k3/repy2exe) A Reverse Engineering Tool for py2exe applications.
-- [**181**Star][10m] [Py] [0x27/ciscorv320dump](https://github.com/0x27/ciscorv320dump) CVE-2019-1652 /CVE-2019-1653 Exploits For Dumping Cisco RV320 Configurations & Debugging Data AND Remote Root Exploit!
-- [**181**Star][4y] [Py] [0vercl0k/z3-playground](https://github.com/0vercl0k/z3-playground) A repository to store Z3-python scripts you can use as examples, reminders, whatever.
-- [**180**Star][8m] [shadowsocks/papers](https://github.com/shadowsocks/papers) List of papers related to shadowsocks
-- [**180**Star][3y] [CSS] [kali-docs-cn/kali-linux-cookbook-zh](https://github.com/kali-docs-cn/kali-linux-cookbook-zh)
+- [**180**Star][9d] [Py] [absozed/dockerpwn.py](https://github.com/absozed/dockerpwn.py) Python automation of Docker.sock abuse
+- [**180**Star][7m] [Go] [knownsec/gsm](https://github.com/knownsec/gsm) 使用树莓派配合硬件来进行短信转发
- [**180**Star][12m] [C++] [zsshen/probedroid](https://github.com/zsshen/probedroid) A SDK for the creation of analysis tools without obtaining app source code in order to profile runtime performance, examine code coverage, and track high-risk behaviors of a given app on Android 5.0 and above.
- [**180**Star][7m] [Java] [yubico/ykneo-openpgp](https://github.com/yubico/ykneo-openpgp) OpenPGP applet for the YubiKey NEO
-- [**180**Star][14d] [TypeScript] [tensult/cloud-reports](https://github.com/tensult/cloud-reports) Scans your AWS cloud resources and generates reports. Check out free hosted version:
-- [**180**Star][2m] [Java] [sensepost/mallet](https://github.com/sensepost/mallet) Mallet is an intercepting proxy for arbitrary protocols
-- [**180**Star][5m] [Py] [s0md3v/orbit](https://github.com/s0md3v/orbit) Blockchain Transactions Investigation Tool
+- [**180**Star][27d] [Py] [the-useless-one/pywerview](https://github.com/the-useless-one/pywerview) A (partial) Python rewriting of PowerSploit's PowerView
+- [**180**Star][2y] [Py] [tenrec-builders/pi-scan](https://github.com/tenrec-builders/pi-scan) Pi Scan is a simple, robust capture appliance for book scanners. It runs on a Raspberry Pi 2.
+- [**180**Star][5d] [Py] [tarcisio-marinho/gonnacry](https://github.com/tarcisio-marinho/gonnacry) A Linux Ransomware
+- [**180**Star][3m] [Py] [spiderlabs/ikeforce](https://github.com/spiderlabs/ikeforce)
+- [**180**Star][2y] [Py] [solusipse/spectrology](https://github.com/solusipse/spectrology) Images to audio files with corresponding spectrograms encoder.
+- [**180**Star][3m] [C#] [rasta-mouse/amsiscanbufferbypass](https://github.com/rasta-mouse/amsiscanbufferbypass) Circumvent AMSI by patching AmsiScanBuffer
+- [**180**Star][5m] [PS] [phillips321/adaudit](https://github.com/phillips321/adaudit) 自动域名审计
+- [**180**Star][22d] [JS] [nowsecure/node-applesign](https://github.com/nowsecure/node-applesign) NodeJS module and commandline utility for re-signing iOS applications (IPA files).
+- [**180**Star][2y] [Py] [nopernik/sshpry2.0](https://github.com/nopernik/sshpry2.0) SSHPry v2 - Spy & Control os SSH Connected client's TTY
+- [**180**Star][4d] [Py] [misp/misp-galaxy](https://github.com/misp/misp-galaxy) Clusters and elements to attach to MISP events or attributes (like threat actors)
- [**180**Star][8m] [C#] [marx-yu/wopihost](https://github.com/marx-yu/wopihost) Office Online Server Wopi Host implement, No need Cobalt. Support DOCX, XLSX, PPTX online editing.
- [**180**Star][2y] [PHP] [lcatro/php-webshell-bypass-waf](https://github.com/lcatro/php-webshell-bypass-waf) 分享PHP WebShell 绕过WAF 的一些经验 Share some experience about PHP WebShell bypass WAF and Anti-AV
-- [**180**Star][3y] [C] [kriswebdev/android_aircrack](https://github.com/kriswebdev/android_aircrack) Aircrack-ng command-line for Android. Binaries & source.
- [**180**Star][1m] [Py] [joxeankoret/idamagicstrings](https://github.com/joxeankoret/idamagicstrings) An IDA Python script to extract information from string constants.
- [**180**Star][2y] [Py] [jeffxue/web-log-parser](https://github.com/jeffxue/web-log-parser) web日志分析工具
-- [**180**Star][2m] [C++] [google/libprotobuf-mutator](https://github.com/google/libprotobuf-mutator) Library for structured fuzzing with protobuffers
+- [**180**Star][2y] [Shell] [ha71/whatcms](https://github.com/ha71/whatcms) CMS Detection and Exploit Kit based on Whatcms.org API
- [**180**Star][4y] [JS] [gamexg/shadowsocks_admin](https://github.com/gamexg/shadowsocks_admin) 一个 shadowsocks 服务器多账号管理系统,后端使用 shadowsocks-go 。支持多节点、流量限制等功能。
- [**180**Star][1y] [Py] [fnk0c/cangibrina](https://github.com/fnk0c/cangibrina) A fast and powerfull dashboard (admin) finder
-- [**180**Star][1m] [Py] [fireeye/pwnauth](https://github.com/fireeye/pwnauth)
-- [**180**Star][2m] [Py] [eth-sri/debin](https://github.com/eth-sri/debin) Machine Learning to Deobfuscate Binaries
-- [**180**Star][4m] [XSLT] [ernw/nmap-parse-output](https://github.com/ernw/nmap-parse-output) Converts/manipulates/extracts data from a Nmap scan output.
-- [**180**Star][21d] [enovella/tee-reversing](https://github.com/enovella/tee-reversing) A curated list of public TEE resources for learning how to reverse-engineer and achieve trusted code execution on ARM devices
-- [**180**Star][3y] [Py] [ctxis/wsuspect-proxy](https://github.com/ctxis/wsuspect-proxy) WSUSpect Proxy - a tool for MITM'ing insecure WSUS connections
-- [**180**Star][3y] [Py] [anantshri/svn-extractor](https://github.com/anantshri/svn-extractor) simple script to extract all web resources by means of .SVN folder exposed over network.
-- [**179**Star][8d] [Py] [duo-labs/parliament](https://github.com/duo-labs/parliament) AWS IAM linting library
+- [**180**Star][6d] [PHP] [divineomega/password_exposed](https://github.com/divineomega/password_exposed)
+- [**179**Star][4y] [Py] [offlinemark/poet](https://github.com/offlinemark/poet) Post-exploitation tool
+- [**179**Star][12m] [Shell] [thelinuxchoice/locator](https://github.com/thelinuxchoice/locator) Geolocator, Ip Tracker, Device Info by URL (Serveo and Ngrok)
+- [**179**Star][6m] [Py] [fox-it/cve-2019-1040-scanner](https://github.com/fox-it/cve-2019-1040-scanner)
- [**179**Star][4y] [Py] [offlinemark/poet](https://github.com/offlinemark/poet) Post-exploitation tool
-- [**179**Star][14d] [thelsa/cs-checklist](https://github.com/thelsa/cs-checklist) PC客户端(C-S架构)渗透测试checklist / Client side(C-S) penestration checklist
-- [**179**Star][20d] [Py] [yelp/py_zipkin](https://github.com/yelp/py_zipkin) Provides utilities to facilitate the usage of Zipkin in Python
-- [**179**Star][2y] [Py] [tenrec-builders/pi-scan](https://github.com/tenrec-builders/pi-scan) Pi Scan is a simple, robust capture appliance for book scanners. It runs on a Raspberry Pi 2.
-- [**179**Star][6m] [Java] [spring-io/nohttp](https://github.com/spring-io/nohttp) A project for ensuring that https is used
-- [**179**Star][3m] [Py] [spiderlabs/ikeforce](https://github.com/spiderlabs/ikeforce)
+- [**179**Star][4m] [TeX] [hackl/tikz-network](https://github.com/hackl/tikz-network) A tool to visualize complex networks in LaTeX
+- [**179**Star][22d] [Py] [yelp/py_zipkin](https://github.com/yelp/py_zipkin) Provides utilities to facilitate the usage of Zipkin in Python
+- [**179**Star][3y] [Py] [videns/vulners-scanner](https://github.com/videns/vulners-scanner) Vulnerability scanner based on vulners.com audit API
+- [**179**Star][5m] [C] [therealsaumil/static-arm-bins](https://github.com/therealsaumil/static-arm-bins) 静态编译的arm二进制文件, 用于调试和运行时分析
+- [**179**Star][9m] [Py] [spamscope/spamscope](https://github.com/spamscope/spamscope) Fast Advanced Spam Analysis Tool
+- [**179**Star][12d] [Shell] [silverpoision/rock-on](https://github.com/silverpoision/rock-on) Rock-On is a all in one Recon tool that will just get a single entry of the Domain name and do all of the work alone.
+- [**179**Star][2d] [Py] [rndinfosecguy/scavenger](https://github.com/rndinfosecguy/scavenger) Crawler (Bot) searching for credential leaks on different paste sites.
- [**179**Star][3y] [Py] [redteamsecurity/autonessus](https://github.com/redteamsecurity/autonessus) This script communicates with the Nessus API in an attempt to help with automating scans. Depending on the flag issued with the script, you can list all scans, list all policies, start, stop, pause, and resume a scan.
-- [**179**Star][2y] [Py] [nopernik/sshpry2.0](https://github.com/nopernik/sshpry2.0) SSHPry v2 - Spy & Control os SSH Connected client's TTY
+- [**179**Star][1m] [Py] [nolze/msoffcrypto-tool](https://github.com/nolze/msoffcrypto-tool) Python tool and library for decrypting MS Office files with passwords or other keys
- [**179**Star][4y] [Shell] [nccgroup/cisco-snmp-enumeration](https://github.com/nccgroup/cisco-snmp-enumeration) Automated Cisco SNMP Enumeration, Brute Force, Configuration Download and Password Cracking
-- [**179**Star][14d] [Py] [natlas/natlas](https://github.com/natlas/natlas) Scaling Network Scanning. Changes prior to 1.0 may cause difficult to avoid backwards incompatibilities. You've been warned.
- [**179**Star][4y] [Py] [offlinemark/poet](https://github.com/offlinemark/poet) Post-exploitation tool
-- [**179**Star][6m] [Py] [metachar/mercury](https://github.com/metachar/mercury) Mercury is a hacking tool used to collect information and use the information to further hurt the target
+- [**179**Star][13d] [Py] [meliht/mr.sip](https://github.com/meliht/mr.sip) SIP-Based Audit and Attack Tool
- [**179**Star][2y] [Shell] [malaohu/ssr-with-net-speeder](https://github.com/malaohu/ssr-with-net-speeder) Shadowsocksr with net speeder
-- [**179**Star][4y] [Objective-C] [iosre/hippocamphairsalon](https://github.com/iosre/hippocamphairsalon) A simple universal memory editor (game trainer) on OSX/iOS
-- [**179**Star][1y] [Py] [iagcl/watchmen](https://github.com/iagcl/watchmen) (Not maintained anymore) Watchmen - AWS account compliance using centrally managed Config Rules
-- [**179**Star][2m] [Go] [hehnope/slurp](https://github.com/hehnope/slurp) Evaluate the security of S3 buckets
+- [**179**Star][7m] [kaonashi-passwords/kaonashi](https://github.com/kaonashi-passwords/kaonashi) Wordlist, rules and masks from Kaonashi project (RootedCON 2019)
+- [**179**Star][4y] [ObjC] [iosre/hippocamphairsalon](https://github.com/iosre/hippocamphairsalon) A simple universal memory editor (game trainer) on OSX/iOS
+- [**179**Star][4m] [Py] [hanul93/kicomav](https://github.com/hanul93/kicomav) KicomAV is an open source (GPL v2) antivirus engine designed for detecting malware and disinfecting it.
+- [**179**Star][2m] [C++] [google/libprotobuf-mutator](https://github.com/google/libprotobuf-mutator) Library for structured fuzzing with protobuffers
- [**179**Star][6y] [C] [devttys0/littleblackbox](https://github.com/devttys0/littleblackbox) Database of private SSL/SSH keys for embedded devices
-- [**179**Star][2y] [PowerShell] [cobbr/obfuscatedempire](https://github.com/cobbr/obfuscatedempire) ObfuscatedEmpire is a fork of Empire with Invoke-Obfuscation integrated directly into it's functionality.
+- [**179**Star][4m] [Py] [blackarch/wordlistctl](https://github.com/blackarch/wordlistctl) Fetch, install and search wordlist archives from websites and torrent peers.
- [**179**Star][7m] [C++] [arsenalrecon/arsenal-image-mounter](https://github.com/arsenalrecon/arsenal-image-mounter) Arsenal Image Mounter mounts the contents of disk images as complete disks in Microsoft Windows.
- [**179**Star][3m] [Py] [anssi-fr/secuml](https://github.com/anssi-fr/secuml) Machine Learning for Computer Security
- [**179**Star][11m] [Py] [acceis/leakscraper](https://github.com/acceis/leakscraper) LeakScraper is an efficient set of tools to process and visualize huge text files containing credentials. Theses tools are designed to help penetration testers and redteamers doing OSINT by gathering credentials belonging to their target.
-- [**178**Star][6m] [Py] [fox-it/cve-2019-1040-scanner](https://github.com/fox-it/cve-2019-1040-scanner)
-- [**178**Star][4m] [TeX] [hackl/tikz-network](https://github.com/hackl/tikz-network) A tool to visualize complex networks in LaTeX
-- [**178**Star][7m] [Go] [knownsec/gsm](https://github.com/knownsec/gsm) 使用树莓派配合硬件来进行短信转发
-- [**178**Star][4y] [Objective-C] [x43x61x69/otx](https://github.com/x43x61x69/otx) The Mach-O disassembler. Now 64bit and Xcode 6 compatible.
-- [**178**Star][5m] [C] [therealsaumil/static-arm-bins](https://github.com/therealsaumil/static-arm-bins) 静态编译的arm二进制文件, 用于调试和运行时分析
-- [**178**Star][25d] [Py] [the-useless-one/pywerview](https://github.com/the-useless-one/pywerview) A (partial) Python rewriting of PowerSploit's PowerView
-- [**178**Star][1m] [Py] [tarcisio-marinho/gonnacry](https://github.com/tarcisio-marinho/gonnacry) A Linux Ransomware
-- [**178**Star][1m] [Go] [staaldraad/xxeserv](https://github.com/staaldraad/xxeserv) A mini webserver with FTP support for XXE payloads
-- [**178**Star][9m] [Py] [spamscope/spamscope](https://github.com/spamscope/spamscope) Fast Advanced Spam Analysis Tool
-- [**178**Star][10m] [Py] [riramar/hsecscan](https://github.com/riramar/hsecscan) A security scanner for HTTP response headers.
-- [**178**Star][3m] [C#] [rasta-mouse/amsiscanbufferbypass](https://github.com/rasta-mouse/amsiscanbufferbypass) Circumvent AMSI by patching AmsiScanBuffer
-- [**178**Star][5m] [PowerShell] [phillips321/adaudit](https://github.com/phillips321/adaudit) 自动域名审计
+- [**179**Star][20d] [JS] [0vercl0k/cve-2019-9810](https://github.com/0vercl0k/cve-2019-9810) Exploit for CVE-2019-9810 Firefox on Windows 64-bit.
+- [**178**Star][11m] [zekesnider/nintendoswitchrestapi](https://github.com/zekesnider/nintendoswitchrestapi) Reverse engineered REST API used in the Nintendo Switch app for iOS. Includes documentation on Splatoon 2's API.
+- [**178**Star][4y] [ObjC] [x43x61x69/otx](https://github.com/x43x61x69/otx) The Mach-O disassembler. Now 64bit and Xcode 6 compatible.
+- [**178**Star][3m] [C] [soxrok2212/pskracker](https://github.com/soxrok2212/pskracker) An all-in-one WPA/WPS toolkit
+- [**178**Star][1y] [PS] [samratashok/admodule](https://github.com/samratashok/admodule) Microsoft signed ActiveDirectory PowerShell module
+- [**178**Star][2y] [C] [phoenixos/kernel](https://github.com/phoenixos/kernel) PhoenixOS Kernel Open Source Code
+- [**178**Star][8m] [pandazheng/threat-intelligence-analyst](https://github.com/pandazheng/threat-intelligence-analyst) 威胁情报,恶意样本分析,开源Malware代码收集
- [**178**Star][2y] [Swift] [nvisium/swift.nv](https://github.com/nvisium/swift.nv) Security Training Tool that demonstrates common mobile application vulnerabilities using Swift in iOS
- [**178**Star][6m] [C] [neurodroid/cryptonite](https://github.com/neurodroid/cryptonite) EncFS and TrueCrypt on Android
- [**178**Star][2y] [Py] [netflix-skunkworks/repulsive-grizzly](https://github.com/netflix-skunkworks/repulsive-grizzly) Application Layer DoS Testing Framework
-- [**178**Star][17d] [Py] [misp/misp-galaxy](https://github.com/misp/misp-galaxy) Clusters and elements to attach to MISP events or attributes (like threat actors)
- [**178**Star][2y] [Py] [maldevel/canisrufus](https://github.com/maldevel/canisrufus) canisrufus:Python 编写的后门,使用 Github 做 C&C
- [**178**Star][3m] [lengjibo/att-ck-cn](https://github.com/lengjibo/att-ck-cn) ATT&CK实操
-- [**178**Star][7m] [kaonashi-passwords/kaonashi](https://github.com/kaonashi-passwords/kaonashi) Wordlist, rules and masks from Kaonashi project (RootedCON 2019)
+- [**178**Star][1y] [Py] [iagcl/watchmen](https://github.com/iagcl/watchmen) (Not maintained anymore) Watchmen - AWS account compliance using centrally managed Config Rules
- [**178**Star][6m] [Py] [hasherezade/ida_ifl](https://github.com/hasherezade/ida_ifl) IFL - Interactive Functions List (plugin for IDA Pro)
-- [**178**Star][4m] [Py] [hanul93/kicomav](https://github.com/hanul93/kicomav) KicomAV is an open source (GPL v2) antivirus engine designed for detecting malware and disinfecting it.
-- [**178**Star][4m] [Py] [blackarch/wordlistctl](https://github.com/blackarch/wordlistctl) Fetch, install and search wordlist archives from websites and torrent peers.
+- [**178**Star][3y] [Ruby] [espreto/wpsploit](https://github.com/espreto/wpsploit) WPSploit - Exploiting Wordpress With Metasploit
+- [**178**Star][4m] [JS] [authcov/authcov](https://github.com/authcov/authcov) Web app authorization coverage scanning
- [**178**Star][2y] [aozhimin/mosec-2017](https://github.com/aozhimin/mosec-2017) 盘古团队和 POC 主办的移动安全技术峰会
- [**178**Star][2y] [C++] [0x09al/dns-persist](https://github.com/0x09al/dns-persist) DNS-Persist is a post-exploitation agent which uses DNS for command and control.
-- [**177**Star][12m] [Shell] [thelinuxchoice/locator](https://github.com/thelinuxchoice/locator) Geolocator, Ip Tracker, Device Info by URL (Serveo and Ngrok)
- [**177**Star][4m] [C++] [samyk/combobreaker](https://github.com/samyk/combobreaker) Motorized, portable, 3D printed, Arduino-based combination lock cracker
- [**177**Star][11m] [Go] [fnzv/net-shield](https://github.com/fnzv/net-Shield) An Easy and Simple Anti-DDoS solution for VPS,Dedicated Servers and IoT devices - Beta
-- [**177**Star][3y] [Py] [videns/vulners-scanner](https://github.com/videns/vulners-scanner) Vulnerability scanner based on vulners.com audit API
-- [**177**Star][3m] [C] [soxrok2212/pskracker](https://github.com/soxrok2212/pskracker) An all-in-one WPA/WPS toolkit
-- [**177**Star][1m] [Py] [so87/oscp-pwk](https://github.com/so87/oscp-pwk) This is my cheatsheet and scripts developed while taking the Offensive Security Penetration Testing with Kali Linux course.
+- [**177**Star][2y] [Py] [woj-ciech/daily-dose-of-malware](https://github.com/woj-ciech/daily-dose-of-malware) Script lets you gather malicious software and c&c servers from open source platforms like Malshare, Malcode, Google, Cymon - vxvault, cybercrime tracker and c2 for Pony.
+- [**177**Star][6m] [Py] [trailofbits/binjascripts](https://github.com/trailofbits/binjascripts) Scripts for Binary Ninja
+- [**177**Star][6y] [Py] [syworks/wireless-ids](https://github.com/syworks/wireless-ids) Ability to detect suspicious activity such as (WEP/WPA/WPS) attack by sniffing the air for wireless packets.
- [**177**Star][3m] [JS] [sindresorhus/is-reachable](https://github.com/sindresorhus/is-reachable) Check if servers are reachable
-- [**177**Star][10d] [Shell] [silverpoision/rock-on](https://github.com/silverpoision/rock-on) Rock-On is a all in one Recon tool that will just get a single entry of the Domain name and do all of the work alone.
- [**177**Star][2y] [rapid7/sonar](https://github.com/rapid7/sonar) Project Sonar
- [**177**Star][1y] [random-robbie/bugbounty-scans](https://github.com/random-robbie/bugbounty-scans) aquatone results for sites with bug bountys
-- [**177**Star][2y] [C] [phoenixos/kernel](https://github.com/phoenixos/kernel) PhoenixOS Kernel Open Source Code
-- [**177**Star][8m] [pandazheng/threat-intelligence-analyst](https://github.com/pandazheng/threat-intelligence-analyst) 威胁情报,恶意样本分析,开源Malware代码收集
- [**177**Star][2y] [C] [mcarpenter/afl](https://github.com/mcarpenter/afl) DEPRECATED. Will be removed 09/2019. Please see
- [**177**Star][1y] [Py] [johnlatwc/pypowershellxray](https://github.com/johnlatwc/pypowershellxray) Python script to decode common encoded PowerShell scripts
-- [**177**Star][2y] [Shell] [ha71/whatcms](https://github.com/ha71/whatcms) CMS Detection and Exploit Kit based on Whatcms.org API
-- [**177**Star][26d] [Go] [esrrhs/pingtunnel](https://github.com/esrrhs/pingtunnel) a tool that advertises tcp/udp/sock5 traffic as icmp traffic for forwarding.
-- [**177**Star][3y] [Ruby] [espreto/wpsploit](https://github.com/espreto/wpsploit) WPSploit - Exploiting Wordpress With Metasploit
+- [**177**Star][5m] [Shell] [ginjachris/pentmenu](https://github.com/ginjachris/pentmenu) A bash script for recon and DOS attacks
- [**177**Star][8m] [eoftedal/writings](https://github.com/eoftedal/writings) blog posts
-- [**177**Star][10d] [Py] [dictation-toolbox/aenea](https://github.com/dictation-toolbox/aenea) Client-server library for using voice macros from Dragon NaturallySpeaking and Dragonfly on remote/non-windows hosts.
-- [**177**Star][7m] [PowerShell] [decoder-it/psgetsystem](https://github.com/decoder-it/psgetsystem) getsystem via parent process using ps1 & embeded c#
-- [**177**Star][4m] [JS] [authcov/authcov](https://github.com/authcov/authcov) Web app authorization coverage scanning
+- [**177**Star][12d] [Py] [dictation-toolbox/aenea](https://github.com/dictation-toolbox/aenea) Client-server library for using voice macros from Dragon NaturallySpeaking and Dragonfly on remote/non-windows hosts.
+- [**177**Star][7m] [PS] [decoder-it/psgetsystem](https://github.com/decoder-it/psgetsystem) getsystem via parent process using ps1 & embeded c#
+- [**177**Star][15d] [Py] [critical-start/pastebin_scraper](https://github.com/critical-start/pastebin_scraper) monitor pastebin for interesting information
+- [**177**Star][3m] [C] [cloudflare/mmproxy](https://github.com/cloudflare/mmproxy) mmproxy, the magical PROXY protocol gateway
- [**176**Star][7m] [JS] [openwisp/netjsongraph.js](https://github.com/openwisp/netjsongraph.js) NetJSON NetworkGraph visualizer based on d3.js
-- [**176**Star][11m] [zekesnider/nintendoswitchrestapi](https://github.com/zekesnider/nintendoswitchrestapi) Reverse engineered REST API used in the Nintendo Switch app for iOS. Includes documentation on Splatoon 2's API.
-- [**176**Star][22d] [HTML] [zaproxy/zap-core-help](https://github.com/zaproxy/zap-core-help) The help files for the OWASP ZAP core
-- [**176**Star][26d] [Py] [yassineaboukir/asnlookup](https://github.com/yassineaboukir/asnlookup) Leverage ASN to look up IP addresses (IPv4 & IPv6) owned by a specific organization for reconnaissance purposes, then run port scanning on it.
-- [**176**Star][2y] [C] [riscure/rhme-2016](https://github.com/riscure/rhme-2016) Rhme2 challenge (2016)
-- [**176**Star][20d] [JS] [nowsecure/node-applesign](https://github.com/nowsecure/node-applesign) NodeJS module and commandline utility for re-signing iOS applications (IPA files).
-- [**176**Star][1m] [Py] [nolze/msoffcrypto-tool](https://github.com/nolze/msoffcrypto-tool) Python tool and library for decrypting MS Office files with passwords or other keys
-- [**176**Star][17d] [Py] [mschwager/gitem](https://github.com/mschwager/gitem) A Github organization reconnaissance tool.
+- [**176**Star][3d] [HTML] [zaproxy/zap-core-help](https://github.com/zaproxy/zap-core-help) The help files for the OWASP ZAP core
+- [**176**Star][1y] [C++] [ysrc/antivirtualapp](https://github.com/ysrc/antivirtualapp) 检测当前app是否运行在VirtualApp虚拟机中
+- [**176**Star][28d] [Py] [yassineaboukir/asnlookup](https://github.com/yassineaboukir/asnlookup) Leverage ASN to look up IP addresses (IPv4 & IPv6) owned by a specific organization for reconnaissance purposes, then run port scanning on it.
+- [**176**Star][13d] [Py] [thekingofduck/filemonitor](https://github.com/thekingofduck/filemonitor) 文件变化实时监控工具(代码审计/黑盒/白盒审计辅助工具)
+- [**176**Star][2m] [rust-fuzz/trophy-case](https://github.com/rust-fuzz/trophy-case)
+- [**176**Star][3y] [C] [riscure/rhme-2016](https://github.com/riscure/rhme-2016) Rhme2 challenge (2016)
+- [**176**Star][19d] [Py] [mschwager/gitem](https://github.com/mschwager/gitem) A Github organization reconnaissance tool.
- [**176**Star][2m] [Py] [mrschyte/nmap-converter](https://github.com/mrschyte/nmap-converter) Python script for converting nmap reports into XLS
+- [**176**Star][3m] [Py] [martinvigo/email2phonenumber](https://github.com/martinvigo/email2phonenumber) A OSINT tool to obtain a target's phone number just by having his email address
- [**176**Star][4y] [Go] [jrozner/sonar](https://github.com/jrozner/sonar) Self contained cross platform DNS recon tool
- [**176**Star][1y] [C#] [jaredhaight/sharpattack](https://github.com/jaredhaight/sharpattack) A simple wrapper for C# tools
- [**176**Star][2y] [Shell] [ioactive/repossessed](https://github.com/ioactive/repossessed) A project designed to parse public source code repositories and find various types of vulnerabilities.
- [**176**Star][3y] [hexorg/cheatenginetables](https://github.com/hexorg/cheatenginetables) Repository of tables for CheatEngine
-- [**176**Star][5m] [Shell] [ginjachris/pentmenu](https://github.com/ginjachris/pentmenu) A bash script for recon and DOS attacks
- [**176**Star][6y] [C] [gat3way/hashkill](https://github.com/gat3way/hashkill) hashkill password recovery tool
- [**176**Star][4y] [Shell] [floyd-fuh/tiny-mitm-proxy](https://github.com/floyd-fuh/tiny-mitm-proxy) Probably one of the smallest SSL MITM proxies you can make
- [**176**Star][11m] [C] [fate0/xmark](https://github.com/fate0/xmark) A PHP7 extension that can hook most functions/classes and parts of opcodes
- [**176**Star][4y] [Py] [csababarta/ntdsxtract](https://github.com/csababarta/ntdsxtract) Active Directory forensic framework
-- [**176**Star][3m] [C] [cloudflare/mmproxy](https://github.com/cloudflare/mmproxy) mmproxy, the magical PROXY protocol gateway
- [**176**Star][4y] [PHP] [chuckfw/owaspbwa](https://github.com/chuckfw/owaspbwa) OWASP Broken Web Applications Project
- [**176**Star][2y] [Shell] [bitvijays/pentest-scripts](https://github.com/bitvijays/pentest-scripts) 渗透用脚本
+- [**176**Star][4y] [C#] [alphadelta/secure-desktop](https://github.com/alphadelta/secure-desktop) Anti-keylogger/anti-rat application for Windows
+- [**176**Star][11m] [Java] [aalhuz/navex](https://github.com/aalhuz/navex) is an exploit generation framework for web applications.
- [**175**Star][2y] [C++] [fireice-uk/xmr-stak-amd](https://github.com/fireice-uk/xmr-stak-amd) Monero AMD miner
-- [**175**Star][2y] [PowerShell] [fsecurelabs/azurite](https://github.com/FSecureLABS/Azurite) Enumeration and reconnaissance activities in the Microsoft Azure Cloud.
+- [**175**Star][16d] [Java] [0kee-team/javaprobe](https://github.com/0kee-team/javaprobe) A Java runtime information-gathering tool which uses the Java Attach API for information acquisition
+- [**175**Star][2y] [PS] [fsecurelabs/azurite](https://github.com/FSecureLABS/Azurite) Enumeration and reconnaissance activities in the Microsoft Azure Cloud.
- [**175**Star][1m] [C] [radareorg/radare2-extras](https://github.com/radareorg/radare2-extras) Source graveyard and random candy for radare2
- [**175**Star][3y] [Shell] [praetorian-code/mitm-vm](https://github.com/praetorian-code/mitm-vm) An easy-to-deploy virtual machine that can provide flexible man-in-the-middle capabilities.
-- [**175**Star][1y] [C++] [ysrc/antivirtualapp](https://github.com/ysrc/antivirtualapp) 检测当前app是否运行在VirtualApp虚拟机中
-- [**175**Star][6m] [Py] [trailofbits/binjascripts](https://github.com/trailofbits/binjascripts) Scripts for Binary Ninja
- [**175**Star][4m] [Py] [techbliss/python_editor](https://github.com/techbliss/python_editor) Better CodeEditor for Ida Pro.
-- [**175**Star][6y] [Py] [syworks/wireless-ids](https://github.com/syworks/wireless-ids) Ability to detect suspicious activity such as (WEP/WPA/WPS) attack by sniffing the air for wireless packets.
+- [**175**Star][1y] [sysml/lightvm](https://github.com/sysml/lightvm) a virtualization solution based on Xen that is optimized to offer fast boot-times regardless of the number of active VMs
- [**175**Star][2y] [sie504/struts-s2-xxx](https://github.com/sie504/struts-s2-xxx) 整理收集Struts2漏洞环境
-- [**175**Star][3y] [Java] [secure-software-engineering/droidbench](https://github.com/secure-software-engineering/droidbench) A micro-benchmark suite to assess the stability of taint-analysis tools for Android
- [**175**Star][4y] [Py] [secforce/snmp-brute](https://github.com/secforce/snmp-brute) Fast SNMP brute force, enumeration, CISCO config downloader and password cracking script.
- [**175**Star][5y] [JS] [samyk/quickjack](https://github.com/samyk/quickjack) Quickjack is a point-and-click tool for intuitively producing advanced clickjacking and frame slicing attacks.
-- [**175**Star][1y] [PowerShell] [samratashok/admodule](https://github.com/samratashok/admodule) Microsoft signed ActiveDirectory PowerShell module
+- [**175**Star][2y] [Perl] [portcullislabs/enum4linux](https://github.com/portcullislabs/enum4linux) enum4Linux is a Linux alternative to enum.exe for enumerating data from Windows and Samba hosts.
+- [**175**Star][9m] [PHP] [paragonie/password_lock](https://github.com/paragonie/password_lock) Wraps Bcrypt-SHA2 in Authenticated Encryption
- [**175**Star][3y] [Go] [nats-io/nats-top](https://github.com/nats-io/nats-top) A top-like tool for monitoring NATS servers.
+- [**175**Star][2y] [Java] [ms0x0/dayu](https://github.com/ms0x0/dayu) 一款开源指纹识别工具。
+- [**175**Star][2y] [Py] [jasonish/py-idstools](https://github.com/jasonish/py-idstools) idstools: Snort and Suricata Rule and Event Utilities in Python (Including a Rule Update Tool)
+- [**175**Star][2m] [C#] [jaegertracing/jaeger-client-csharp](https://github.com/jaegertracing/jaeger-client-csharp) C# client (tracer) for Jaeger
+- [**175**Star][9m] [guardrailsio/awesome-java-security](https://github.com/guardrailsio/awesome-java-security) Awesome Java Security Resources
- [**175**Star][7y] [Py] [gdssecurity/gwt-penetration-testing-toolset](https://github.com/gdssecurity/gwt-penetration-testing-toolset) A set of tools made to assist in penetration testing GWT applications. Additional details about these tools can be found on my OWASP Appsec DC slides available here:
- [**175**Star][3y] [C#] [gangzhuo/kcptun-gui-windows](https://github.com/gangzhuo/kcptun-gui-windows) GUI for kcptun (
-- [**175**Star][13d] [Py] [critical-start/pastebin_scraper](https://github.com/critical-start/pastebin_scraper) monitor pastebin for interesting information
+- [**175**Star][3m] [C#] [dionach/ntdsaudit](https://github.com/dionach/ntdsaudit) An Active Directory audit utility
+- [**175**Star][9m] [HTML] [cryptogenic/ps4-6.20-webkit-code-execution-exploit](https://github.com/cryptogenic/ps4-6.20-webkit-code-execution-exploit) A WebKit exploit using CVE-2018-4441 to obtain RCE on PS4 6.20.
- [**175**Star][4y] [Ruby] [brav0hax/smbexec](https://github.com/brav0hax/smbexec) A rapid psexec style attack with samba tools
-- [**175**Star][4m] [C] [acama/xrop](https://github.com/acama/xrop) Tool to generate ROP gadgets for ARM, AARCH64, x86, MIPS, PPC, RISCV, SH4 and SPARC
-- [**175**Star][11m] [Java] [aalhuz/navex](https://github.com/aalhuz/navex) is an exploit generation framework for web applications.
+- [**175**Star][1y] [Shell] [brannondorsey/sniff-probes](https://github.com/brannondorsey/sniff-probes) Plug-and-play bash script for sniffing 802.11 probes requests
+- [**175**Star][5m] [C] [acama/xrop](https://github.com/acama/xrop) Tool to generate ROP gadgets for ARM, AARCH64, x86, MIPS, PPC, RISCV, SH4 and SPARC
- [**175**Star][1y] [Py] [0xbug/biu-framework](https://github.com/0xbug/biu-framework) Security Scan Framework For Enterprise Intranet Based Services
-- [**174**Star][14d] [Java] [0kee-team/javaprobe](https://github.com/0kee-team/javaprobe) A Java runtime information-gathering tool which uses the Java Attach API for information acquisition
+- [**174**Star][2d] [Go] [jaeles-project/jaeles](https://github.com/jaeles-project/jaeles) The Swiss Army knife for automated Web Application Testing
- [**174**Star][7m] [Py] [osirislab/ctf-solutions](https://github.com/osirislab/CTF-Solutions) Solutions to a variety of Capture The Flag challenges from different competitions.
-- [**174**Star][2y] [Py] [woj-ciech/daily-dose-of-malware](https://github.com/woj-ciech/daily-dose-of-malware) Script lets you gather malicious software and c&c servers from open source platforms like Malshare, Malcode, Google, Cymon - vxvault, cybercrime tracker and c2 for Pony.
+- [**174**Star][11m] [PS] [qax-a-team/cobaltstrike-toolset](https://github.com/QAX-A-Team/CobaltStrike-Toolset) Aggressor Script, Kits, Malleable C2 Profiles, External C2 and so on
+- [**174**Star][1y] [PHP] [securitypaper/mail_fishing](https://github.com/SecurityPaper/mail_fishing) 甲方安全工程师必备,内部钓鱼系统
- [**174**Star][2y] [Py] [virtuesecurity/aws-extender](https://github.com/virtuesecurity/aws-extender) AWS Extender (Cloud Storage Tester) is a Burp plugin to assess permissions of cloud storage containers on AWS, Google Cloud and Azure.
-- [**174**Star][11d] [Py] [thekingofduck/filemonitor](https://github.com/thekingofduck/filemonitor) 文件变化实时监控工具(代码审计/黑盒/白盒审计辅助工具)
-- [**174**Star][1y] [sysml/lightvm](https://github.com/sysml/lightvm) a virtualization solution based on Xen that is optimized to offer fast boot-times regardless of the number of active VMs
+- [**174**Star][4m] [Py] [tweksteen/jenkins-decrypt](https://github.com/tweksteen/jenkins-decrypt) Credentials dumper for Jenkins
+- [**174**Star][6m] [HTML] [trishmapow/rf-jam-replay](https://github.com/trishmapow/rf-jam-replay) Jam and replay attack on vehicle keyless entry systems.
+- [**174**Star][2m] [C++] [threeme3/wsprrypi](https://github.com/threeme3/wsprrypi) Bareback LF/MF/HF/VHF WSPR transmitter using a Raspberry Pi
- [**174**Star][5y] [Py] [smarnach/pyexiftool](https://github.com/smarnach/pyexiftool) a Python library to communicate with an instance of Phil Harvey's excellent ExifTool command-line application.
-- [**174**Star][2y] [Perl] [portcullislabs/enum4linux](https://github.com/portcullislabs/enum4linux) enum4Linux is a Linux alternative to enum.exe for enumerating data from Windows and Samba hosts.
-- [**174**Star][10d] [HTML] [openvizsla/ov_ftdi](https://github.com/openvizsla/ov_ftdi) FT2232H-based USB sniffer
-- [**174**Star][11d] [Py] [meliht/mr.sip](https://github.com/meliht/mr.sip) SIP-Based Audit and Attack Tool
+- [**174**Star][4y] [Py] [shadowsocks-backup/shadowsocks](https://github.com/shadowsocks-backup/shadowsocks)
+- [**174**Star][3y] [Java] [secure-software-engineering/droidbench](https://github.com/secure-software-engineering/droidbench) A micro-benchmark suite to assess the stability of taint-analysis tools for Android
+- [**174**Star][6d] [HTML] [openvizsla/ov_ftdi](https://github.com/openvizsla/ov_ftdi) FT2232H-based USB sniffer
+- [**174**Star][2m] [Py] [markbaggett/srum-dump](https://github.com/markbaggett/srum-dump) A forensics tool to convert the data in the Windows srum (System Resource Usage Monitor) database to an xlsx spreadsheet.
+- [**174**Star][6m] [Go] [liamg/furious](https://github.com/liamg/furious) Golang IP/port scanner with SYN (stealth) scanning and device manufacturer identification
+- [**174**Star][1y] [Dockerfile] [kozmic/laravel-poc-cve-2018-15133](https://github.com/kozmic/laravel-poc-cve-2018-15133) PoC for CVE-2018-15133 (Laravel unserialize vulnerability)
+- [**174**Star][1y] [JS] [knownsec/wam](https://github.com/knownsec/wam) Web App Monitor
+- [**174**Star][1y] [Go] [ice3man543/hawkeye](https://github.com/ice3man543/hawkeye) Hawkeye filesystem analysis tool
- [**174**Star][4y] [C] [hvqzao/foolav](https://github.com/hvqzao/foolav) Pentest tool for antivirus evasion and running arbitrary payload on target Wintel host
-- [**174**Star][9m] [guardrailsio/awesome-java-security](https://github.com/guardrailsio/awesome-java-security) Awesome Java Security Resources
+- [**174**Star][3m] [fkie-cad/awesome-embedded-and-iot-security](https://github.com/fkie-cad/awesome-embedded-and-iot-security) A curated list of awesome embedded and IoT security resources.
- [**174**Star][2y] [Java] [fengyouchao/sockslib](https://github.com/fengyouchao/sockslib) A Java library of SOCKS5 protocol including client and server
- [**174**Star][2y] [Py] [duo-labs/idapython](https://github.com/duo-labs/idapython) a few Python modules developed for use with IDA Pro from the researchers at Duo Labs.
- [cortex_m_firmware](https://github.com/duo-labs/idapython/blob/master/cortex_m_firmware.py) grooms an IDA Pro database containing firmware from an ARM Cortex M microcontroller.
- [amnesia](https://github.com/duo-labs/idapython/blob/master/amnesia.py) an IDAPython module designed to use byte level heuristics to find ARM thumb instructions in undefined bytes in an IDA Pro database
- [REobjc](https://github.com/duo-labs/idapython/blob/master/reobjc.py) an IDAPython module designed to make proper cross references between calling functions and called functions in Objective-C methods
-- [**174**Star][3m] [C#] [dionach/ntdsaudit](https://github.com/dionach/ntdsaudit) An Active Directory audit utility
-- [**174**Star][9m] [HTML] [cryptogenic/ps4-6.20-webkit-code-execution-exploit](https://github.com/cryptogenic/ps4-6.20-webkit-code-execution-exploit) A WebKit exploit using CVE-2018-4441 to obtain RCE on PS4 6.20.
- [**174**Star][2m] [Py] [comthings/pandwarf](https://github.com/comthings/pandwarf) RF analysis tool with a sub-1 GHz wireless transceiver controlled by a smartphone or
- [**174**Star][1m] [Py] [codewatchorg/sqlipy](https://github.com/codewatchorg/sqlipy) sqlipy: Burp Suite 插件, 使用 SQLMap API 集成SQLMap
- [**174**Star][1m] [Java] [calebfenton/apkfile](https://github.com/calebfenton/apkfile) Android app analysis and feature extraction library
-- [**174**Star][27d] [azure/azure-storage-java](https://github.com/azure/azure-storage-java) Microsoft Azure Storage Library for Java
-- [**174**Star][4y] [C#] [alphadelta/secure-desktop](https://github.com/alphadelta/secure-desktop) Anti-keylogger/anti-rat application for Windows
-- [**173**Star][21d] [Jupyter Notebook] [alienvault-otx/otx-python-sdk](https://github.com/AlienVault-OTX/OTX-Python-SDK) The Python SDK for AlienVault OTX
-- [**173**Star][11m] [PowerShell] [qax-a-team/cobaltstrike-toolset](https://github.com/QAX-A-Team/CobaltStrike-Toolset) Aggressor Script, Kits, Malleable C2 Profiles, External C2 and so on
-- [**173**Star][1y] [PHP] [securitypaper/mail_fishing](https://github.com/SecurityPaper/mail_fishing) 甲方安全工程师必备,内部钓鱼系统
+- [**174**Star][29d] [azure/azure-storage-java](https://github.com/azure/azure-storage-java) Microsoft Azure Storage Library for Java
+- [**174**Star][4m] [Py] [antonin-deniau/cave_miner](https://github.com/antonin-deniau/cave_miner) Search for code cave in all binaries
+- [**174**Star][1m] [PHP] [78778443/xssplatform](https://github.com/78778443/xssplatform) 一个经典的XSS渗透管理平台
+- [**174**Star][2y] [PS] [3gstudent/list-rdp-connections-history](https://github.com/3gstudent/list-rdp-connections-history) Use powershell to list the RDP Connections History of logged-in users or all users
+- [**173**Star][8m] [dgiese/dustcloud-documentation](https://github.com/dgiese/dustcloud-documentation) Xiaomi Smart Home Device Reverse Engineering and Hacking - Documentation Repo
+- [**173**Star][4m] [PHP] [opensec-cn/chip](https://github.com/opensec-cn/chip) a simple tool to detect potential security threat in php code
+- [**173**Star][16d] [microsvuln/awesome-afl](https://github.com/microsvuln/awesome-afl) A curated list of different AFL forks and AFL inspired fuzzers with detailed equivalent academic papers with AFL-fuzzing tutorials
+- [**173**Star][1m] [Py] [fsecurelabs/jandroid](https://github.com/fsecurelabs/jandroid)
+- [**173**Star][1m] [Go] [gavinguan24/ahri](https://github.com/gavinguan24/ahri) Ahri is an intranet sharing tool. Like VPN
+- [**173**Star][6d] [Py] [alienvault-otx/otx-python-sdk](https://github.com/AlienVault-OTX/OTX-Python-SDK) The Python SDK for AlienVault OTX
+- [**173**Star][1y] [Py] [apt55/google_explorer](https://github.com/APT55/google_explorer) Mass exploitation tool in python
+- [**173**Star][2m] [C#] [zodiacon/kernelexplorer](https://github.com/zodiacon/kernelexplorer)
- [**173**Star][3m] [JS] [zjonsson/node-unzipper](https://github.com/zjonsson/node-unzipper) node.js cross-platform unzip using streams
-- [**173**Star][2y] [C++] [zerocoin/libzerocoin](https://github.com/zerocoin/libzerocoin) Zerocoin: C++ lib for anonymous extension to bitcoin
- [**173**Star][7y] [Py] [trivio/common_crawl_index](https://github.com/trivio/common_crawl_index) billions of pages randomly crawled from the internet
-- [**173**Star][2m] [rust-fuzz/trophy-case](https://github.com/rust-fuzz/trophy-case)
- [**173**Star][1m] [C] [rokups/virtual-reality](https://github.com/rokups/virtual-reality) Stealthy backdoor for Windows operating systems
- [**173**Star][6m] [Java] [ota4j-team/opentest4j](https://github.com/ota4j-team/opentest4j) Open Test Alliance for the JVM
- [**173**Star][4y] [Py] [osandamalith/lfifreak](https://github.com/osandamalith/lfifreak) A unique automated LFi Exploiter with Bind/Reverse Shells
- [**173**Star][4m] [Dockerfile] [obscuritylabs/rai](https://github.com/obscuritylabs/rai) Rapid Attack Infrastructure (RAI)
-- [**173**Star][12d] [C] [netoptimizer/network-testing](https://github.com/netoptimizer/network-testing) Network Testing Tools for testing the Linux network stack
+- [**173**Star][14d] [C] [netoptimizer/network-testing](https://github.com/netoptimizer/network-testing) Network Testing Tools for testing the Linux network stack
- [**173**Star][2y] [Py] [nccgroup/aws-recipes](https://github.com/nccgroup/aws-recipes) A number of Recipes for AWS
-- [**173**Star][2y] [Java] [ms0x0/dayu](https://github.com/ms0x0/dayu) 一款开源指纹识别工具。
-- [**173**Star][2m] [Py] [markbaggett/srum-dump](https://github.com/markbaggett/srum-dump) A forensics tool to convert the data in the Windows srum (System Resource Usage Monitor) database to an xlsx spreadsheet.
-- [**173**Star][1y] [JS] [knownsec/wam](https://github.com/knownsec/wam) Web App Monitor
+- [**173**Star][7d] [C] [microsoft/pqcrypto-sidh](https://github.com/microsoft/pqcrypto-sidh) SIDH Library is a fast and portable software library that implements state-of-the-art supersingular isogeny cryptographic schemes. The chosen parameters aim to provide security against attackers running a large-scale quantum computer, and security against classical algorithms.
+- [**173**Star][1y] [ObjC] [macmade/filevaultcracker](https://github.com/macmade/filevaultcracker) macOS FileVault cracking tool
+- [**173**Star][5d] [C] [lttng/lttng-tools](https://github.com/lttng/lttng-tools) The lttng-tools project provides a session daemon (lttng-sessiond) that acts as a tracing registry, the "lttng" command line for tracing control, a lttng-ctl library for tracing control and a lttng-relayd for network streaming.
+- [**173**Star][6m] [Py] [lmco/dart](https://github.com/lmco/dart) DART is a test documentation tool created by the Lockheed Martin Red Team to document and report on penetration tests, especially in isolated network environments.
+- [**173**Star][7m] [C#] [krzys-h/undertalemodtool](https://github.com/krzys-h/undertalemodtool) The most complete tool for modding, decompiling and unpacking Undertale (and other Game Maker: Studio games!)
- [**173**Star][11m] [C++] [jonatan1024/clrinject](https://github.com/jonatan1024/clrinject) 将 C#EXE 或 DLL 程序集注入任意CLR 运行时或者其他进程的 AppDomain
-- [**173**Star][3y] [PowerShell] [infocyte/pshunt](https://github.com/infocyte/pshunt) Powershell Threat Hunting Module
+- [**173**Star][3m] [JS] [infusion/node-dhcp](https://github.com/infusion/node-dhcp) A DHCP server and client written in pure JavaScript
+- [**173**Star][3y] [PS] [infocyte/pshunt](https://github.com/infocyte/pshunt) Powershell Threat Hunting Module
- [**173**Star][1y] [C#] [ikende/beetle.dt](https://github.com/ikende/beetle.dt) 分布式压力测试工具
-- [**173**Star][1y] [Go] [ice3man543/hawkeye](https://github.com/ice3man543/hawkeye) Hawkeye filesystem analysis tool
- [**173**Star][7y] [Py] [grutz/h3c-pt-tools](https://github.com/grutz/h3c-pt-tools) Huawei/H3C/HP Penetration Testing Tools
+- [**173**Star][2y] [C] [geosn0w/reverse-engineering-tutorials](https://github.com/geosn0w/reverse-engineering-tutorials) Some Reverse Engineering Tutorials for Beginners
+- [**173**Star][2m] [Shell] [duy13/vddos-protection](https://github.com/duy13/vddos-protection) Welcome to vDDoS, a HTTP(S) DDoS Protection Reverse Proxy. Thank you for using!
+- [**173**Star][4m] [dhaval17/awsome-security-write-ups-and-pocs](https://github.com/dhaval17/awsome-security-write-ups-and-pocs) Awesome Writeups and POCs
- [**173**Star][4y] [Py] [dc3l1ne/blasting_dictionary](https://github.com/dc3l1ne/blasting_dictionary) 爆破字典
+- [**173**Star][3m] [cptgibbon/house-of-corrosion](https://github.com/cptgibbon/house-of-corrosion) A description of the "House of Corrosion" GLIBC heap exploitation technique.
- [**173**Star][3y] [Py] [comsecuris/shannonre](https://github.com/comsecuris/shannonre) Helpful scripts for various tasks performed during reverse engineering the Shannon Baseband with the goal to exploit the Samsung Galaxy S6
- [**173**Star][2y] [Py] [cldrn/macphish](https://github.com/cldrn/macphish) macphish:Office 宏 Payload 生成器(Mac 版)
-- [**173**Star][1y] [Shell] [brannondorsey/sniff-probes](https://github.com/brannondorsey/sniff-probes) Plug-and-play bash script for sniffing 802.11 probes requests
-- [**173**Star][3m] [Py] [antonin-deniau/cave_miner](https://github.com/antonin-deniau/cave_miner) Search for code cave in all binaries
-- [**173**Star][2y] [PowerShell] [3gstudent/list-rdp-connections-history](https://github.com/3gstudent/list-rdp-connections-history) Use powershell to list the RDP Connections History of logged-in users or all users
-- [**173**Star][18d] [JS] [0vercl0k/cve-2019-9810](https://github.com/0vercl0k/cve-2019-9810) Exploit for CVE-2019-9810 Firefox on Windows 64 bits.
-- [**172**Star][1y] [Py] [apt55/google_explorer](https://github.com/APT55/google_explorer) Mass exploitation tool in python
-- [**172**Star][2m] [C#] [zodiacon/kernelexplorer](https://github.com/zodiacon/kernelexplorer)
+- [**173**Star][2m] [Py] [busescanfly/pretty](https://github.com/busescanfly/pretty) "PRinter Exploitation Toolkit" LAN automation tool
+- [**173**Star][2y] [CSS] [bhdresh/socialengineeringpayloads](https://github.com/bhdresh/socialengineeringpayloads) This is a collection of social engineering tricks and payloads being used for credential theft and spear phishing attacks.
+- [**172**Star][24d] [OCaml] [mirage/alcotest](https://github.com/mirage/alcotest) A lightweight and colourful test framework
+- [**172**Star][10d] [Py] [fireeye/fidl](https://github.com/fireeye/fidl) A sane API for IDA Pro's decompiler. Useful for malware RE and vulnerability research
+- [**172**Star][2y] [C++] [zerocoin/libzerocoin](https://github.com/zerocoin/libzerocoin) Zerocoin: C++ lib for anonymous extension to bitcoin
- [**172**Star][2y] [C] [xerub/extra_recipe](https://github.com/xerub/extra_recipe) extra_recipe:Exception-orientedexploitation
-- [**172**Star][1y] [C++] [samyk/frisky](https://github.com/samyk/frisky) Instruments to assist in binary application reversing and augmentation, geared towards walled gardens like iOS and macOS
+- [**172**Star][2y] [PS] [ubeeri/invoke-usersimulator](https://github.com/ubeeri/invoke-usersimulator) Simulates common user behaviour on local and remote Windows hosts.
+- [**172**Star][2y] [Py] [tr3jer/dnsautorebinding](https://github.com/tr3jer/dnsautorebinding) ssrf、ssrfIntranetFuzz、dnsRebinding、recordEncode、dnsPoisoning、Support ipv4/ipv6
+- [**172**Star][3y] [Py] [tonybeltramelli/deep-spying](https://github.com/tonybeltramelli/deep-spying) Spying using Smartwatch and Deep Learning
+- [**172**Star][6m] [C++] [strivexjun/driverinjectdll](https://github.com/strivexjun/driverinjectdll) Using Driver Global Injection dll, it can hide DLL modules
+- [**172**Star][4d] [C++] [samyk/frisky](https://github.com/samyk/frisky) Instruments to assist in binary application reversing and augmentation, geared towards walled gardens like iOS and macOS
- [**172**Star][2y] [Py] [omergunal/hackerbot](https://github.com/omergunal/hackerbot) chatbot 和 hacking 工具的结合版
- [**172**Star][1y] [Py] [niloofarkheirkhah/nili](https://github.com/niloofarkheirkhah/nili) nili:网络扫描工具,中间人,协议逆向工程和 Fuzzing
-- [**172**Star][1y] [Objective-C] [macmade/filevaultcracker](https://github.com/macmade/filevaultcracker) macOS FileVault cracking tool
-- [**172**Star][14d] [C] [lttng/lttng-tools](https://github.com/lttng/lttng-tools) The lttng-tools project provides a session daemon (lttng-sessiond) that acts as a tracing registry, the "lttng" command line for tracing control, a lttng-ctl library for tracing control and a lttng-relayd for network streaming.
+- [**172**Star][11m] [Py] [metachar/hatch](https://github.com/metachar/hatch) Hatch is a brute force tool that is used to brute force most websites
- [**172**Star][1m] [ASP] [lowleveldesign/debug-recipes](https://github.com/lowleveldesign/debug-recipes) My notes collected while debugging various .NET and Windows problems.
-- [**172**Star][6m] [Py] [lmco/dart](https://github.com/lmco/dart) DART is a test documentation tool created by the Lockheed Martin Red Team to document and report on penetration tests, especially in isolated network environments.
-- [**172**Star][7m] [C#] [krzys-h/undertalemodtool](https://github.com/krzys-h/undertalemodtool) The most complete tool for modding, decompiling and unpacking Undertale (and other Game Maker: Studio games!)
+- [**172**Star][6d] [Shell] [lavabit/robox](https://github.com/lavabit/robox) The tools needed to robotically create/configure/provision a large number of operating systems, for a variety of hypervisors, using packer.
+- [**172**Star][3y] [C] [henkaku/offline-installer](https://github.com/henkaku/offline-installer)
- [**172**Star][2m] [JS] [hapijs/crumb](https://github.com/hapijs/crumb) CSRF crumb generation and validation for hapi
+- [**172**Star][4y] [JS] [fnando/password_strength](https://github.com/fnando/password_strength) Check password strength against several rules. Includes ActiveRecord/ActiveModel support.
+- [**172**Star][2m] [Py] [fgsect/unicorefuzz](https://github.com/fgsect/unicorefuzz) Fuzzing the Kernel Using AFL-Unicorn
- [**172**Star][1y] [JS] [brannondorsey/host-validation](https://github.com/brannondorsey/host-validation) Express.js middleware for "Host" and "Referer" header validation to protect against DNS rebinding attacks.
- [**172**Star][3y] [Py] [4w4k3/insanity-framework](https://github.com/4w4k3/insanity-framework) Generate Payloads and Control Remote Machines. [Discontinued]
-- [**172**Star][3y] [Py] [4shadoww/hakkuframework](https://github.com/4shadoww/hakkuframework) Hakku Framework penetration testing
-- [**171**Star][7d] [Py] [absozed/dockerpwn.py](https://github.com/absozed/dockerpwn.py) Python automation of Docker.sock abuse
+- [**171**Star][1m] [Py] [out0fmemory/qqwry.dat](https://github.com/out0fmemory/qqwry.dat) 自动更新的纯真ip库,每天自动更新
- [**171**Star][2y] [vysecurity/cve-2017-8759](https://github.com/vysecurity/CVE-2017-8759) CVE-2017-8759 - A vulnerability in the SOAP WDSL parser.
+- [**171**Star][7m] [C] [ciyze/windows-rootkits](https://github.com/ciyze/Windows-Rootkits)
- [**171**Star][6m] [C] [noracodes/crackmes](https://github.com/NoraCodes/crackmes) Some CrackMe codes for Linux x86/x86_64
-- [**171**Star][6m] [HTML] [trishmapow/rf-jam-replay](https://github.com/trishmapow/rf-jam-replay) Jam and replay attack on vehicle keyless entry systems.
-- [**171**Star][3y] [Py] [tonybeltramelli/deep-spying](https://github.com/tonybeltramelli/deep-spying) Spying using Smartwatch and Deep Learning
-- [**171**Star][6m] [C++] [strivexjun/driverinjectdll](https://github.com/strivexjun/driverinjectdll) Using Driver Global Injection dll, it can hide DLL modules
+- [**171**Star][10m] [winmin/awesome-vm-exploit](https://github.com/winmin/awesome-vm-exploit) share some useful archives about vm and qemu escape exploit.
+- [**171**Star][10m] [Shell] [trustedsec/hardcidr](https://github.com/trustedsec/hardcidr) hardCIDR is a Linux Bash script, but also functions under macOS. Your mileage may vary on other distros. The script with no specified options will query ARIN and a pool of BGP route servers. The route server is selected at random at runtime.
- [**171**Star][6m] [JS] [sindresorhus/ipify](https://github.com/sindresorhus/ipify) Get your public IP address
- [**171**Star][2y] [Ruby] [section9labs/cartero](https://github.com/section9labs/cartero) Cartero - Social Engineering Framework
+- [**171**Star][2m] [C#] [samueltulach/virustotaluploader](https://github.com/samueltulach/virustotaluploader) C# Open-Source Winforms application for uploading files to VirusTotal
- [**171**Star][3y] [PHP] [rpisec/hackthevote](https://github.com/rpisec/hackthevote) Handouts, setup scripts, sources, and solutions for challenges from Hack The Vote
+- [**171**Star][2m] [Java] [rohanpadhye/jqf](https://github.com/rohanpadhye/jqf) JQF + Zest: Coverage-guided semantic fuzzing for Java.
- [**171**Star][10m] [C] [q3k/cve-2019-5736-poc](https://github.com/q3k/cve-2019-5736-poc) Unweaponized Proof of Concept for CVE-2019-5736 (Docker escape)
- [**171**Star][4y] [JS] [philbooth/escomplex](https://github.com/philbooth/escomplex) Software complexity analysis of JavaScript-family abstract syntax trees
-- [**171**Star][1y] [Objective-C] [objective-see/donotdisturb](https://github.com/objective-see/donotdisturb) Detect Evil Maid Attacks
-- [**171**Star][13d] [C] [microsoft/pqcrypto-sidh](https://github.com/microsoft/pqcrypto-sidh) SIDH Library is a fast and portable software library that implements state-of-the-art supersingular isogeny cryptographic schemes. The chosen parameters aim to provide security against attackers running a large-scale quantum computer, and security against classical algorithms.
-- [**171**Star][11m] [Py] [metachar/hatch](https://github.com/metachar/hatch) Hatch is a brute force tool that is used to brute force most websites
-- [**171**Star][3m] [Py] [martinvigo/email2phonenumber](https://github.com/martinvigo/email2phonenumber) A OSINT tool to obtain a target's phone number just by having his email address
+- [**171**Star][3y] [C++] [phat3/pindemonium](https://github.com/phat3/pindemonium) A pintool in order to unpack malware
+- [**171**Star][1y] [ObjC] [objective-see/donotdisturb](https://github.com/objective-see/donotdisturb) Detect Evil Maid Attacks
+- [**171**Star][5m] [C#] [nettitude/sharpsocks](https://github.com/nettitude/sharpsocks) Tunnellable HTTP/HTTPS socks4a proxy written in C# and deployable via PowerShell
- [**171**Star][10m] [Shell] [lcashdol/exploits](https://github.com/lcashdol/exploits) Exploits for various CVEs
-- [**171**Star][1y] [Dockerfile] [kozmic/laravel-poc-cve-2018-15133](https://github.com/kozmic/laravel-poc-cve-2018-15133) PoC for CVE-2018-15133 (Laravel unserialize vulnerability)
- [**171**Star][3y] [kayrus/kubelet-exploit](https://github.com/kayrus/kubelet-exploit)
-- [**171**Star][2m] [C#] [jaegertracing/jaeger-client-csharp](https://github.com/jaegertracing/jaeger-client-csharp) C# client (tracer) for Jaeger
-- [**171**Star][3m] [JS] [infusion/node-dhcp](https://github.com/infusion/node-dhcp) A DHCP server and client written in pure JavaScript
+- [**171**Star][11m] [Java] [joychou93/webshell](https://github.com/joychou93/webshell) 入侵分析时发现的Webshell后门
+- [**171**Star][6m] [C++] [hoangprod/andrewspecial](https://github.com/hoangprod/andrewspecial) AndrewSpecial, dumping lsass' memory stealthily and bypassing "Cilence" since 2019.
+- [**171**Star][2d] [C] [heimdal/heimdal](https://github.com/heimdal/heimdal) a Kerberos 5 implementation
- [**171**Star][4y] [Shell] [halpomeranz/lmg](https://github.com/halpomeranz/lmg) Script for automating Linux memory capture and analysis
- [**171**Star][1m] [Py] [gleeda/memtriage](https://github.com/gleeda/memtriage) Allows you to quickly query a Windows machine for RAM artifacts
-- [**171**Star][2y] [C] [geosn0w/reverse-engineering-tutorials](https://github.com/geosn0w/reverse-engineering-tutorials) Some Reverse Engineering Tutorials for Beginners
-- [**171**Star][4y] [JS] [fnando/password_strength](https://github.com/fnando/password_strength) Check password strength against several rules. Includes ActiveRecord/ActiveModel support.
-- [**171**Star][2m] [Shell] [duy13/vddos-protection](https://github.com/duy13/vddos-protection) Welcome to vDDoS, a HTTP(S) DDoS Protection Reverse Proxy. Thank you for using!
+- [**171**Star][12m] [C#] [fullmetalcache/powerline](https://github.com/fullmetalcache/powerline)
+- [**171**Star][9m] [C++] [ecx86/classinformer-ida7](https://github.com/ecx86/classinformer-ida7) ClassInformer backported for IDA Pro 7.0
+- [**171**Star][2m] [Ruby] [devise-security/devise-security](https://github.com/devise-security/devise-security) A security extension for devise, meeting industrial standard security demands for web applications.
- [**171**Star][1m] [C] [curl/doh](https://github.com/curl/doh) stand-alone application for DoH (DNS-over-HTTPS) name resolves and lookups
-- [**171**Star][2m] [Py] [busescanfly/pretty](https://github.com/busescanfly/pretty) "PRinter Exploitation Toolkit" LAN automation tool
- [**171**Star][7m] [Py] [bilelmoussaoui/authenticator](https://github.com/bilelmoussaoui/authenticator) 2FA code generator for GNOME
-- [**171**Star][2y] [CSS] [bhdresh/socialengineeringpayloads](https://github.com/bhdresh/socialengineeringpayloads) This is a collection of social engineering tricks and payloads being used for credential theft and spear phishing attacks.
- [**171**Star][2y] [C++] [bayshorenetworks/yextend](https://github.com/bayshorenetworks/yextend) Yara integrated software to handle archive file data.
- [**171**Star][2y] [Go] [arwmq9b6/dnsproxy](https://github.com/arwmq9b6/dnsproxy) 防 DNS 缓存污染,兼顾查询质量与速度
-- [**171**Star][1m] [PHP] [78778443/xssplatform](https://github.com/78778443/xssplatform) 一个经典的XSS渗透管理平台
+- [**171**Star][12m] [Py] [andreafioraldi/idangr](https://github.com/andreafioraldi/idangr) Use angr in the IDA Pro debugger generating a state from the current debug session
+- [**171**Star][3y] [Py] [4shadoww/hakkuframework](https://github.com/4shadoww/hakkuframework) Hakku Framework penetration testing
- [**170**Star][2y] [Go] [out0fmemory/goproxy-always-available](https://github.com/out0fmemory/goproxy-always-available) fork from goproxy Becaust it closed!! 1632版本自动扫描可用ip
-- [**170**Star][22d] [OCaml] [mirage/alcotest](https://github.com/mirage/alcotest) A lightweight and colourful test framework
-- [**170**Star][8d] [Lua] [kuoruan/luci-app-v2ray](https://github.com/kuoruan/luci-app-v2ray) LuCI support for V2Ray
- [**170**Star][3m] [Rust] [phra/rustbuster](https://github.com/phra/rustbuster) A Comprehensive Web Fuzzer and Content Discovery Tool
-- [**170**Star][1m] [Go] [gavinguan24/ahri](https://github.com/gavinguan24/ahri) Ahri is an intranet sharing tool. Like VPN
-- [**170**Star][6m] [C] [ciyze/windows-rootkits](https://github.com/ciyze/Windows-Rootkits)
-- [**170**Star][10m] [winmin/awesome-vm-exploit](https://github.com/winmin/awesome-vm-exploit) share some useful archives about vm and qemu escape exploit.
- [**170**Star][1y] [Py] [vergl4s/instarecon](https://github.com/vergl4s/instarecon) Automated digital reconnaissance
-- [**170**Star][7m] [HTML] [tylert/pocorgtfo](https://github.com/tylert/pocorgtfo) International Journal of Proof-of-Concept or Get The F*** Out (PoC||GTFO or PoC or GTFO)
+- [**170**Star][8m] [HTML] [tylert/pocorgtfo](https://github.com/tylert/pocorgtfo) International Journal of Proof-of-Concept or Get The F*** Out (PoC||GTFO or PoC or GTFO)
+- [**170**Star][15d] [Py] [skyscanner/cfripper](https://github.com/skyscanner/cfripper) Lambda function to "rip apart" a CloudFormation template and check it for security compliance.
- [**170**Star][2y] [Py] [securingsam/krackdetector](https://github.com/securingsam/krackdetector) a Python script to detect possible KRACK attacks against client devices on your network
- [**170**Star][1y] [PHP] [robocoder/rips-scanner](https://github.com/robocoder/rips-scanner) RIPS - A static source code analyser for vulnerabilities in PHP scripts
- [**170**Star][1y] [ramen0x3f/aggressorscripts](https://github.com/ramen0x3f/aggressorscripts)
- [**170**Star][3y] [HTML] [purpleteam/snarf](https://github.com/purpleteam/snarf) Snarf man-in-the-middle / relay suite
-- [**170**Star][3y] [C++] [phat3/pindemonium](https://github.com/phat3/pindemonium) A pintool in order to unpack malware
-- [**170**Star][5y] [Py] [paulsec/csrft](https://github.com/paulsec/csrft) A lightweight CSRF Toolkit for easy Proof of concept
+- [**170**Star][6y] [Py] [paulsec/csrft](https://github.com/paulsec/csrft) A lightweight CSRF Toolkit for easy Proof of concept
- [**170**Star][2y] [Py] [omri9741/cve-2017-7494](https://github.com/omri9741/cve-2017-7494) Samba 漏洞(CVE-2017-7494)PoC
-- [**170**Star][7d] [Py] [misp/pymisp](https://github.com/misp/pymisp) Python library using the MISP Rest API
-- [**170**Star][1y] [PowerShell] [mattifestation/pssysmontools](https://github.com/mattifestation/pssysmontools) Sysmon Tools for PowerShell
-- [**170**Star][6m] [Go] [liamg/furious](https://github.com/liamg/furious) Golang IP/port scanner with SYN (stealth) scanning and device manufacturer identification
-- [**170**Star][11m] [Java] [joychou93/webshell](https://github.com/joychou93/webshell) 入侵分析时发现的Webshell后门
+- [**170**Star][6d] [Py] [misp/pymisp](https://github.com/misp/pymisp) Python library using the MISP Rest API
+- [**170**Star][1y] [PS] [mattifestation/pssysmontools](https://github.com/mattifestation/pssysmontools) Sysmon Tools for PowerShell
+- [**170**Star][1y] [PS] [mattifestation/pic_bindshell](https://github.com/mattifestation/pic_bindshell) Position Independent Windows Shellcode Written in C
+- [**170**Star][3y] [Py] [luyishisi/nyspider](https://github.com/luyishisi/nyspider) 各种爬虫---大众点评,安居客,58,人人贷,拍拍贷, IT桔子,拉勾网,豆瓣,搜房网,ASO100,气象数据,猫眼电影,链家,PM25.in...
+- [**170**Star][6m] [C] [0xkira/qemu-vm-escape](https://github.com/0xKira/qemu-vm-escape) an exploit for CVE-2019-6778
- [**170**Star][10m] [HTML] [jensvoid/lorg](https://github.com/jensvoid/lorg) Apache Logfile Security Analyzer
-- [**170**Star][6m] [C++] [hoangprod/andrewspecial](https://github.com/hoangprod/andrewspecial) AndrewSpecial, dumping lsass' memory stealthily and bypassing "Cilence" since 2019.
-- [**170**Star][13d] [C] [heimdal/heimdal](https://github.com/heimdal/heimdal) a Kerberos 5 implementation
-- [**170**Star][12m] [C#] [fullmetalcache/powerline](https://github.com/fullmetalcache/powerline)
- [**170**Star][1m] [Shell] [edoverflow/contact.sh](https://github.com/edoverflow/contact.sh) An OSINT tool to find contacts in order to report security vulnerabilities.
-- [**170**Star][9m] [C++] [ecx86/classinformer-ida7](https://github.com/ecx86/classinformer-ida7) ClassInformer backported for IDA Pro 7.0
- [**170**Star][1y] [C#] [eaglexiang/eagle.tunnel.dotnet.core](https://github.com/eaglexiang/eagle.tunnel.dotnet.core) 稳定易用的代理工具
-- [**170**Star][4m] [dhaval17/awsome-security-write-ups-and-pocs](https://github.com/dhaval17/awsome-security-write-ups-and-pocs) Awesome Writeups and POCs
- [**170**Star][3y] [C] [cyrus-and/mysql-unsha1](https://github.com/cyrus-and/mysql-unsha1) 无需明文密码,认证MySQL服务器
- [**170**Star][2y] [PHP] [cryin/assetsview](https://github.com/cryin/assetsview) Assets View资产发现、网络拓扑管理系统
- [**170**Star][3y] [C++] [cr4sh/fwexpl](https://github.com/cr4sh/fwexpl) PC firmware exploitation tool and library
-- [**170**Star][12d] [JS] [cert-polska/mquery](https://github.com/cert-polska/mquery) YARA malware query accelerator (web frontend)
+- [**170**Star][14d] [JS] [cert-polska/mquery](https://github.com/cert-polska/mquery) YARA malware query accelerator (web frontend)
+- [**170**Star][2m] [C] [beehive-lab/mambo](https://github.com/beehive-lab/mambo) ARM运行时二进制文件修改工具,低耗版。
- [**170**Star][2y] [Py] [awhitehatter/mailoney](https://github.com/awhitehatter/mailoney) An SMTP Honeypot
-- [**170**Star][1y] [C] [autopear/ipainstaller](https://github.com/autopear/ipainstaller) Install IPA from command line
-- [**169**Star][1m] [Py] [fsecurelabs/jandroid](https://github.com/fsecurelabs/jandroid)
-- [**169**Star][1m] [Py] [hpfeeds/hpfeeds](https://github.com/hpfeeds/hpfeeds) Honeynet Project generic authenticated datafeed protocol
+- [**170**Star][2m] [CSS] [7dog7/bottleneckosmosis](https://github.com/7dog7/bottleneckosmosis) 瓶颈渗透,web渗透,red红队,fuzz param,注释,js字典,ctf
+- [**169**Star][3d] [Py] [hpfeeds/hpfeeds](https://github.com/hpfeeds/hpfeeds) Honeynet Project generic authenticated datafeed protocol
- [**169**Star][2m] [JS] [wuchangming/node-mitmproxy](https://github.com/wuchangming/node-mitmproxy) node-mitmproxy is an extensible man-in-the-middle(MITM) proxy server for HTTP/HTTPS base on Node.js.
-- [**169**Star][10m] [Shell] [trustedsec/hardcidr](https://github.com/trustedsec/hardcidr) hardCIDR is a Linux Bash script, but also functions under macOS. Your mileage may vary on other distros. The script with no specified options will query ARIN and a pool of BGP route servers. The route server is selected at random at runtime.
-- [**169**Star][2m] [C#] [samueltulach/virustotaluploader](https://github.com/samueltulach/virustotaluploader) C# Open-Source Winforms application for uploading files to VirusTotal
+- [**169**Star][2y] [Py] [undeadsec/debinject](https://github.com/undeadsec/debinject) Inject malicious code into *.debs
+- [**169**Star][4m] [Py] [racepwn/racepwn](https://github.com/racepwn/racepwn) a librace library and a racepwn utility that are designed to test a race condition attack through protocols that use a TCP connection
+- [**169**Star][1m] [PS] [olafhartong/attackdatamap](https://github.com/olafhartong/attackdatamap) A datasource assessment on an event level to show potential coverage or the MITRE ATT&CK framework
- [**169**Star][6m] [C] [octomagon/davegrohl](https://github.com/octomagon/davegrohl) A Password Cracker for macOS
+- [**169**Star][7m] [Shell] [munki/bootstrappr](https://github.com/munki/bootstrappr) A bare-bones tool to install a set of packages on a target volume.
- [**169**Star][8m] [Go] [mimah/gomet](https://github.com/mimah/gomet) Multi-platform agent written in Golang. TCP forwarding, socks5, tunneling, pivoting, shell, download, exec
-- [**169**Star][1y] [PowerShell] [mattifestation/pic_bindshell](https://github.com/mattifestation/pic_bindshell) Position Independent Windows Shellcode Written in C
-- [**169**Star][3y] [Py] [luyishisi/nyspider](https://github.com/luyishisi/nyspider) 各种爬虫---大众点评,安居客,58,人人贷,拍拍贷, IT桔子,拉勾网,豆瓣,搜房网,ASO100,气象数据,猫眼电影,链家,PM25.in...
-- [**169**Star][14d] [Shell] [lavabit/robox](https://github.com/lavabit/robox) The tools needed to robotically create/configure/provision a large number of operating systems, for a variety of hypervisors, using packer.
-- [**169**Star][6m] [C] [0xkira/qemu-vm-escape](https://github.com/0xKira/qemu-vm-escape) an exploit for CVE-2019-6778
+- [**169**Star][16d] [Py] [in-toto/in-toto](https://github.com/in-toto/in-toto) in-toto is a framework to protect supply chain integrity.
- [**169**Star][2y] [Py] [googulator/teslacrack](https://github.com/googulator/teslacrack) Decryptor for the TeslaCrypt malware
- [**169**Star][5y] [Puppet] [garethr/pentesting-playground](https://github.com/garethr/pentesting-playground) Code for installing various security minded tools onto Vagrant powered virtual machines
-- [**169**Star][2m] [Py] [fgsect/unicorefuzz](https://github.com/fgsect/unicorefuzz) Fuzzing the Kernel Using AFL-Unicorn
-- [**169**Star][2m] [C] [beehive-lab/mambo](https://github.com/beehive-lab/mambo) ARM运行时二进制文件修改工具,低耗版。
-- [**169**Star][12m] [Py] [andreafioraldi/idangr](https://github.com/andreafioraldi/idangr) Use angr in the IDA Pro debugger generating a state from the current debug session
+- [**169**Star][2y] [Ruby] [fuzzapi/api-fuzzer](https://github.com/fuzzapi/api-fuzzer) API Fuzzer which allows to fuzz request attributes using common pentesting techniques and lists vulnerabilities
+- [**169**Star][3y] [cn33liz/msbuildshell](https://github.com/cn33liz/msbuildshell) MSBuildShell, a Powershell Host running within MSBuild.exe
+- [**169**Star][11m] [C] [carolemieux/afl-rb](https://github.com/carolemieux/afl-rb) AFL Fuzz 工具的修改版,针对 Rare Branches
+- [**169**Star][1y] [C] [autopear/ipainstaller](https://github.com/autopear/ipainstaller) Install IPA from command line
- [**169**Star][2y] [Py] [3gstudent/worse-pdf](https://github.com/3gstudent/worse-pdf) Turn a normal PDF file into malicious.Use to steal Net-NTLM Hashes from windows machines.
-- [**168**Star][14d] [microsvuln/awesome-afl](https://github.com/microsvuln/awesome-afl) A curated list of different AFL forks and AFL inspired fuzzers with detailed equivalent academic papers with AFL-fuzzing tutorials
+- [**168**Star][3d] [C++] [radareorg/r2ghidra-dec](https://github.com/radareorg/r2ghidra-dec) Deep ghidra decompiler integration for radare2
- [**168**Star][6m] [Py] [zerosteiner/mayhem](https://github.com/zerosteiner/mayhem) Runtime Process Manipulation
- [**168**Star][2y] [C#] [x41sec/browser-security-whitepaper-2017](https://github.com/x41sec/browser-security-whitepaper-2017) X41 Browser Security White Paper - Tools and PoCs
-- [**168**Star][2y] [Py] [undeadsec/debinject](https://github.com/undeadsec/debinject) Inject malicious code into *.debs
+- [**168**Star][9m] [Clojure] [weavejester/crypto-password](https://github.com/weavejester/crypto-password) Library for securely hashing passwords
- [**168**Star][1y] [Shell] [tokyoneon/armor](https://github.com/tokyoneon/armor) Armor is a simple Bash script designed to create encrypted macOS payloads capable of evading antivirus scanners.
-- [**168**Star][13d] [Py] [skyscanner/cfripper](https://github.com/skyscanner/cfripper) Lambda function to "rip apart" a CloudFormation template and check it for security compliance.
+- [**168**Star][4m] [C++] [strivexjun/aheadlib-x86-x64](https://github.com/strivexjun/aheadlib-x86-x64) hijack dll Source Code Generator. support x86/x64
+- [**168**Star][2y] [spacehuhn/wifi_keylogger](https://github.com/spacehuhn/wifi_keylogger) DIY Arduino Wi-Fi Keylogger (Proof of Concept)
- [**168**Star][4y] [C] [silver13/h8mini-acro](https://github.com/silver13/h8mini-acro) acro firmware for eachine H8 mini
-- [**168**Star][2m] [Java] [rohanpadhye/jqf](https://github.com/rohanpadhye/jqf) JQF + Zest: Coverage-guided semantic fuzzing for Java.
-- [**168**Star][7d] [Py] [rndinfosecguy/scavenger](https://github.com/rndinfosecguy/scavenger) Crawler (Bot) searching for credential leaks on different paste sites.
+- [**168**Star][7m] [JS] [sentinel-official/sentinel](https://github.com/sentinel-official/sentinel) Sentinel is an interoperable secure network layer offering the Sentinel Service Chain exclusively for distributed & decentralized native services like - dVPN, Sentrix (dChat and dVoIP) and more.
+- [**168**Star][5m] [PHP] [scr34m/php-malware-scanner](https://github.com/scr34m/php-malware-scanner) Scans PHP files for malwares and known threats
- [**168**Star][11m] [Py] [ridter/cve-2018-15982_exp](https://github.com/ridter/cve-2018-15982_exp) exp of CVE-2018-15982
-- [**168**Star][22d] [Py] [rhinosecuritylabs/ccat](https://github.com/rhinosecuritylabs/ccat) Cloud Container Attack Tool (CCAT) is a tool for testing security of container environments.
+- [**168**Star][3d] [C++] [radareorg/r2ghidra-dec](https://github.com/radareorg/r2ghidra-dec) Deep ghidra decompiler integration for radare2
+- [**168**Star][2m] [JS] [puresec/serverless-puresec-cli](https://github.com/puresec/serverless-puresec-cli) Serverless plugin for least privileges.
- [**168**Star][4y] [Shell] [pr0x13/ibrutr](https://github.com/pr0x13/ibrutr) iCloud Bruteforce PoC - with MultiCurl
-- [**168**Star][1m] [PowerShell] [olafhartong/attackdatamap](https://github.com/olafhartong/attackdatamap) A datasource assessment on an event level to show potential coverage or the MITRE ATT&CK framework
-- [**168**Star][5m] [C#] [nettitude/sharpsocks](https://github.com/nettitude/sharpsocks) Tunnellable HTTP/HTTPS socks4a proxy written in C# and deployable via PowerShell
-- [**168**Star][1m] [C#] [n0dec/malwless](https://github.com/n0dec/malwless) Test Blue Team detections without running any attack.
-- [**168**Star][7m] [Shell] [munki/bootstrappr](https://github.com/munki/bootstrappr) A bare-bones tool to install a set of packages on a target volume.
+- [**168**Star][2m] [C#] [n0dec/malwless](https://github.com/n0dec/malwless) Test Blue Team detections without running any attack.
- [**168**Star][11m] [Py] [mnkgrover08-zz/whatsapp_automation](https://github.com/mnkgrover08-zz/whatsapp_automation) Whatsapp Automation is a collection of APIs that interact with WhatsApp messenger running in an Android emulator, allowing developers to build projects that automate sending and receiving messages, adding new contacts and broadcasting messages multiple contacts.
-- [**168**Star][2y] [PowerShell] [javelinnetworks/honeypotbuster](https://github.com/javelinnetworks/honeypotbuster)
+- [**168**Star][2y] [Py] [mdsecactivebreach/chameleon](https://github.com/mdsecactivebreach/chameleon) A tool for evading Proxy categorisation
+- [**168**Star][4d] [Java] [mcdcorp/opentest](https://github.com/mcdcorp/opentest) Open source test automation tool for web applications, mobile apps and APIs
+- [**168**Star][1y] [Java] [k-tamura/easybuggy](https://github.com/k-tamura/easybuggy) Too buggy web application
+- [**168**Star][2y] [PS] [javelinnetworks/honeypotbuster](https://github.com/javelinnetworks/honeypotbuster)
+- [**168**Star][6y] [Py] [infodox/python-dll-injection](https://github.com/infodox/python-dll-injection) Python toolkit for injecting DLL files into running processes on Windows
- [**168**Star][5m] [C++] [immunant/selfrando](https://github.com/immunant/selfrando) Function order shuffling to defend against ROP and other types of code reuse
- [**168**Star][2y] [HTML] [ihebski/angryfuzzer](https://github.com/ihebski/angryfuzzer) Tools for information gathering
-- [**168**Star][4m] [Py] [googlecloudplatform/psq](https://github.com/googlecloudplatform/psq) Cloud Pub/Sub Task Queue for Python
-- [**168**Star][2y] [Ruby] [fuzzapi/api-fuzzer](https://github.com/fuzzapi/api-fuzzer) API Fuzzer which allows to fuzz request attributes using common pentesting techniques and lists vulnerabilities
+- [**168**Star][3m] [Py] [gnebbia/pdlist](https://github.com/gnebbia/pdlist) A passive subdomain finder
- [**168**Star][4y] [Go] [filosottile/cve-2016-2107](https://github.com/filosottile/cve-2016-2107) Simple test for the May 2016 OpenSSL padding oracle (CVE-2016-2107)
- [**168**Star][6y] [JS] [evilcos/xssprobe](https://github.com/evilcos/xssprobe) xss probe to steal page info: browser, ua, lang, referer, location, toplocation, cookie, domain, title, screen, flash, etc.
- [**168**Star][4y] [Py] [dynetics/malfunction](https://github.com/dynetics/malfunction) Malware Analysis Tool using Function Level Fuzzy Hashing
-- [**168**Star][3y] [cn33liz/msbuildshell](https://github.com/cn33liz/msbuildshell) MSBuildShell, a Powershell Host running within MSBuild.exe
+- [**168**Star][26d] [chbrian/awesome-adversarial-examples-dl](https://github.com/chbrian/awesome-adversarial-examples-dl) A curated list of awesome resources for adversarial examples in deep learning
- [**168**Star][6m] [PHP] [blackhole1/webrtcxss](https://github.com/blackhole1/webrtcxss) 利用XSS入侵内网(Use XSS automation Invade intranet)
+- [**168**Star][2m] [TSQL] [baidu-security/app-env-docker](https://github.com/baidu-security/app-env-docker) 基于 Docker 的真实应用测试环境
+- [**168**Star][11m] [Java] [anbai-inc/javaweb-codereview](https://github.com/anbai-inc/javaweb-codereview) 演示java代码审计的示例程序
- [**168**Star][3y] [Shell] [0x90/wps-scripts](https://github.com/0x90/wps-scripts) WPS hacking scripts
-- [**167**Star][8m] [dgiese/dustcloud-documentation](https://github.com/dgiese/dustcloud-documentation) Xiaomi Smart Home Device Reverse Engineering and Hacking - Documentation Repo
- [**167**Star][3y] [JS] [norma-inc/atear](https://github.com/norma-inc/atear) Wireless Hacking, WiFi Security, Vulnerability Analyzer, Pentestration
- [**167**Star][4y] [Py] [praetorian-code/gladius](https://github.com/praetorian-code/gladius) Automated Responder/secretsdump.py cracking
- [**167**Star][8y] [Py] [zynamics/objc-helper-plugin-ida](https://github.com/zynamics/objc-helper-plugin-ida) Simplifies working with Objective-C binaries in IDA Pro
- [**167**Star][4y] [C] [vlad902/hacking-team-windows-kernel-lpe](https://github.com/vlad902/hacking-team-windows-kernel-lpe) Previously-0day exploit from the Hacking Team leak, written by Eugene Ching/Qavar.
- [**167**Star][1y] [Py] [tintinweb/ida-batch_decompile](https://github.com/tintinweb/ida-batch_decompile) IDA Batch Decompile plugin and script for Hex-Ray's IDA Pro that adds the ability to batch decompile multiple files and their imports with additional annotations (xref, stack var size) to the pseudocode .c file
- [**167**Star][1y] [sumas/oscp-cheatsheet-god](https://github.com/sumas/oscp-cheatsheet-god)
-- [**167**Star][4m] [C++] [strivexjun/aheadlib-x86-x64](https://github.com/strivexjun/aheadlib-x86-x64) hijack dll Source Code Generator. support x86/x64
-- [**167**Star][2y] [spacehuhn/wifi_keylogger](https://github.com/spacehuhn/wifi_keylogger) DIY Arduino Wi-Fi Keylogger (Proof of Concept)
-- [**167**Star][5m] [PHP] [scr34m/php-malware-scanner](https://github.com/scr34m/php-malware-scanner) Scans PHP files for malwares and known threats
+- [**167**Star][28d] [ObjC] [subito-it/sbtuitesttunnel](https://github.com/subito-it/sbtuitesttunnel) Enable network mocks and more in UI Tests
+- [**167**Star][1y] [Py] [spiderlabs/scavenger](https://github.com/spiderlabs/scavenger) is a multi-threaded post-exploitation scanning tool for scavenging systems, finding most frequently used files and folders as well as "interesting" files containing sensitive information.
+- [**167**Star][2y] [Py] [smokeleeteveryday/ctf_writeups](https://github.com/smokeleeteveryday/ctf_writeups) CTF Writeups
+- [**167**Star][5y] [JS] [skycrab/leakscan](https://github.com/skycrab/leakscan) 在线漏洞扫描
+- [**167**Star][8d] [JS] [sereneblue/chameleon](https://github.com/sereneblue/chameleon) A WebExtension port of Random Agent Spoofer
- [**167**Star][1y] [Swift] [rlovelett/langserver-swift](https://github.com/rlovelett/langserver-swift) A Swift implementation of the open Language Server Protocol.
-- [**167**Star][2m] [JS] [puresec/serverless-puresec-cli](https://github.com/puresec/serverless-puresec-cli) Serverless plugin for least privileges.
-- [**167**Star][2y] [PowerShell] [peewpw/invoke-bsod](https://github.com/peewpw/invoke-bsod) For when you want a computer to be done - without admin!
+- [**167**Star][5d] [Java] [pwittchen/reactivewifi](https://github.com/pwittchen/reactivewifi) Android library listening available WiFi Access Points and related information with RxJava Observables
+- [**167**Star][6d] [C] [odzhan/shellcode](https://github.com/odzhan/shellcode) Shellcodes for Windows/Linux/BSD running on x86, AMD64, ARM, ARM64
- [**167**Star][2y] [Py] [northernsec/cve-scan](https://github.com/northernsec/cve-scan) Scan systems with NMap and parse the output to a list of CVE's, CWE's and DPE's
- [**167**Star][5y] [CSS] [nknetobserver/nknetobserver.github.io](https://github.com/nknetobserver/nknetobserver.github.io) Scans of North Korean IP Space
- [**167**Star][2y] [C++] [mortenschenk/bhusa2017](https://github.com/mortenschenk/bhusa2017) Content from presentation at BHUSA 2017
-- [**167**Star][7d] [C++] [mipt-ilab/mipt-mips](https://github.com/mipt-ilab/mipt-mips) Cycle-accurate pre-silicon simulator of RISC-V and MIPS CPUs
-- [**167**Star][2y] [Py] [mdsecactivebreach/chameleon](https://github.com/mdsecactivebreach/chameleon) A tool for evading Proxy categorisation
-- [**167**Star][12d] [Java] [mcdcorp/opentest](https://github.com/mcdcorp/opentest) Open source test automation tool for web applications, mobile apps and APIs
+- [**167**Star][2d] [C++] [mipt-ilab/mipt-mips](https://github.com/mipt-ilab/mipt-mips) Cycle-accurate pre-silicon simulator of RISC-V and MIPS CPUs
- [**167**Star][2y] [Rust] [loggerhead/shadowsocks-rust](https://github.com/loggerhead/shadowsocks-rust) Oh my implementation of Shadowsocks in Rust
-- [**167**Star][1y] [Java] [k-tamura/easybuggy](https://github.com/k-tamura/easybuggy) Too buggy web application
-- [**167**Star][3m] [Py] [gnebbia/pdlist](https://github.com/gnebbia/pdlist) A passive subdomain finder
+- [**167**Star][3y] [C] [hugsy/proxenet](https://github.com/hugsy/proxenet) The ONLY hacker friendly proxy for webapp pentests.
+- [**167**Star][4m] [Py] [googlecloudplatform/psq](https://github.com/googlecloudplatform/psq) Cloud Pub/Sub Task Queue for Python
+- [**167**Star][8m] [Py] [githacktools/billcipher](https://github.com/githacktools/billcipher) Information Gathering tool for a Website or IP address
- [**167**Star][1y] [Java] [ge0rg/memorizingtrustmanager](https://github.com/ge0rg/memorizingtrustmanager) A "plugin" for Android Java to allow asking the user about SSL certificates
-- [**167**Star][26d] [JS] [eggjs/egg-security](https://github.com/eggjs/egg-security) Security plugin for egg, force performance too.
-- [**167**Star][24d] [chbrian/awesome-adversarial-examples-dl](https://github.com/chbrian/awesome-adversarial-examples-dl) A curated list of awesome resources for adversarial examples in deep learning
-- [**167**Star][11m] [C] [carolemieux/afl-rb](https://github.com/carolemieux/afl-rb) AFL Fuzz 工具的修改版,针对 Rare Branches
-- [**167**Star][7m] [Java] [bypass007/nessus_to_report](https://github.com/bypass007/nessus_to_report) Nessus中文报告自动化脚本
+- [**167**Star][28d] [JS] [eggjs/egg-security](https://github.com/eggjs/egg-security) Security plugin for egg, force performance too.
+- [**167**Star][8m] [PS] [dviros/credsleaker](https://github.com/dviros/credsleaker) Credsleaker allows an attacker to craft a highly convincing credentials prompt using Windows Security, validate it against the DC and in turn leak it via an HTTP request.
+- [**167**Star][4m] [C] [droe/xnumon](https://github.com/droe/xnumon) monitor macOS for malicious activity
+- [**167**Star][1y] [HTML] [c4o/chinesedarkwebcrawler](https://github.com/c4o/chinesedarkwebcrawler) 中文暗网爬虫
+- [**167**Star][17d] [Py] [botherder/targetedthreats](https://github.com/botherder/targetedthreats) Collection of IOCs related to targeting of civil society
+- [**167**Star][2m] [JS] [bencoder/js13k-2019](https://github.com/bencoder/js13k-2019) xx142-b2.exe. An entry for js13kgames 2019
- [**167**Star][1y] [Py] [belane/linux-soft-exploit-suggester](https://github.com/belane/linux-soft-exploit-suggester) linux-soft-exploit-suggester:通过 exploit database 搜索 Linux 系统中有漏洞的软件
- [**167**Star][1y] [Py] [bazad/ida_kernelcache](https://github.com/bazad/ida_kernelcache) An IDA Toolkit for analyzing iOS kernelcaches
-- [**167**Star][2m] [TSQL] [baidu-security/app-env-docker](https://github.com/baidu-security/app-env-docker) 基于 Docker 的真实应用测试环境
-- [**166**Star][11d] [C++] [radareorg/r2ghidra-dec](https://github.com/radareorg/r2ghidra-dec) Deep ghidra decompiler integration for radare2
+- [**166**Star][5y] [PHP] [pentestmonkey/php-reverse-shell](https://github.com/pentestmonkey/php-reverse-shell)
+- [**166**Star][4y] [C] [zeek/packet-bricks](https://github.com/zeek/packet-bricks) A netmap-based packet layer for distributing and filtering traffic.
+- [**166**Star][16d] [C] [progmem/switch-fightstick](https://github.com/progmem/switch-fightstick) Proof-of-Concept LUFA Project for the Nintendo Switch. Uses reverse-engineering of the Pokken Tournament Pro Pad for the Wii U and Switch System v3.0.0
- [**166**Star][1y] [Py] [wipi-hunter/pisavar](https://github.com/WiPi-Hunter/PiSavar) Detects PineAP module and starts deauthentication attack
-- [**166**Star][26d] [Objective-C] [subito-it/sbtuitesttunnel](https://github.com/subito-it/sbtuitesttunnel) Enable network mocks and more in UI Tests
-- [**166**Star][1y] [Py] [spiderlabs/scavenger](https://github.com/spiderlabs/scavenger) is a multi-threaded post-exploitation scanning tool for scavenging systems, finding most frequently used files and folders as well as "interesting" files containing sensitive information.
-- [**166**Star][2y] [Py] [smokeleeteveryday/ctf_writeups](https://github.com/smokeleeteveryday/ctf_writeups) CTF Writeups
-- [**166**Star][21d] [Py] [securestate/termineter](https://github.com/securestate/termineter) Smart Meter Security Testing Framework
+- [**166**Star][9d] [Shell] [offensive-security/exploitdb-papers](https://github.com/offensive-security/exploitdb-papers) exploit-database-papers
+- [**166**Star][10m] [Py] [tijme/angularjs-csti-scanner](https://github.com/tijme/angularjs-csti-scanner) Automated client-side template injection (sandbox escape/bypass) detection for AngularJS.
+- [**166**Star][23d] [Py] [securestate/termineter](https://github.com/securestate/termineter) Smart Meter Security Testing Framework
- [**166**Star][7y] [PHP] [secrule/falcon](https://github.com/secrule/falcon) Falcon是一款基于inotify-tools 开发的Web服务器文件监控平台 能够实时监控Web目录文件变化(新增,修改,删除),判断文件内容是否包含恶意代码,自动隔离常见Webshell,保证Web目录文件安全
-- [**166**Star][11d] [C++] [radareorg/r2ghidra-dec](https://github.com/radareorg/r2ghidra-dec) Deep ghidra decompiler integration for radare2
-- [**166**Star][3m] [PowerShell] [r3mrum/psdecode](https://github.com/r3mrum/psdecode) PowerShell script for deobfuscating encoded PowerShell scripts
+- [**166**Star][3m] [Vala] [ricotz/plank](https://github.com/ricotz/plank) the simplest dock on the planet
+- [**166**Star][3m] [PS] [r3mrum/psdecode](https://github.com/r3mrum/psdecode) PowerShell script for deobfuscating encoded PowerShell scripts
- [**166**Star][7m] [proteas/unstripped-ios-kernels](https://github.com/proteas/unstripped-ios-kernels) Unstripped iOS Kernels
+- [**166**Star][2y] [Py] [priyankgada/python-for-hackers](https://github.com/priyankgada/python-for-hackers) Python for Hackers - Youtube Tutorials - Priyank Gada
+- [**166**Star][2y] [PS] [peewpw/invoke-bsod](https://github.com/peewpw/invoke-bsod) For when you want a computer to be done - without admin!
- [**166**Star][10m] [Py] [mpgn/poodle-poc](https://github.com/mpgn/poodle-poc)
- [**166**Star][2y] [Py] [monrocoury/forensic-tools](https://github.com/monrocoury/forensic-tools) A collection of tools for forensic analysis
- [**166**Star][1y] [Py] [milo2012/pentest_scripts](https://github.com/milo2012/pentest_scripts)
-- [**166**Star][6y] [Py] [infodox/python-dll-injection](https://github.com/infodox/python-dll-injection) Python toolkit for injecting DLL files into running processes on Windows
-- [**166**Star][3y] [C] [hugsy/proxenet](https://github.com/hugsy/proxenet) The ONLY hacker friendly proxy for webapp pentests.
- [**166**Star][1y] [Py] [hanc00l/weblogic_unserialize_exploit](https://github.com/hanc00l/weblogic_unserialize_exploit) java unserialize vul for weblogic exploit
-- [**166**Star][3m] [fkie-cad/awesome-embedded-and-iot-security](https://github.com/fkie-cad/awesome-embedded-and-iot-security) A curated list of awesome embedded and IoT security resources.
-- [**166**Star][8m] [PowerShell] [dviros/credsleaker](https://github.com/dviros/credsleaker) Credsleaker allows an attacker to craft a highly convincing credentials prompt using Windows Security, validate it against the DC and in turn leak it via an HTTP request.
-- [**166**Star][4m] [C] [droe/xnumon](https://github.com/droe/xnumon) monitor macOS for malicious activity
-- [**166**Star][3m] [cptgibbon/house-of-corrosion](https://github.com/cptgibbon/house-of-corrosion) A description of the "House of Corrosion" GLIBC heap exploitation technique.
+- [**166**Star][2y] [Java] [cryptocubik/browserprint](https://github.com/cryptocubik/browserprint) An open-source browser fingerprinting suite.
- [**166**Star][3y] [Haskell] [corsis/portfusion](https://github.com/corsis/portfusion) Haskell-powered cross-platform transport-layer distributed reverse / forward proxy & tunneling solution – currently available for all TCP protocols (RDP, VNC, HTTP(S), SSH, ...).
-- [**166**Star][1y] [HTML] [c4o/chinesedarkwebcrawler](https://github.com/c4o/chinesedarkwebcrawler) 中文暗网爬虫
-- [**166**Star][15d] [Py] [botherder/targetedthreats](https://github.com/botherder/targetedthreats) Collection of IOCs related to targeting of civil society
- [**166**Star][2y] [C++] [bigric3/cve-2018-8120](https://github.com/bigric3/cve-2018-8120)
+- [**166**Star][3y] [Shell] [backlion/hack-for-tools](https://github.com/backlion/hack-for-tools) 常用的黑客神器
- [**166**Star][1y] [Py] [azizaltuntas/camelishing](https://github.com/azizaltuntas/camelishing) Social Engineering Tool
-- [**166**Star][11m] [Java] [anbai-inc/javaweb-codereview](https://github.com/anbai-inc/javaweb-codereview) 演示java代码审计的示例程序
- [**166**Star][2m] [Shell] [1n3/massbleed](https://github.com/1n3/massbleed) MassBleed SSL Vulnerability Scanner
-- [**165**Star][20d] [Shell] [offensive-security/exploitdb-papers](https://github.com/offensive-security/exploitdb-papers) exploit-database-papers
+- [**165**Star][2y] [C++] [spacehuhn/packetmonitor32](https://github.com/spacehuhn/packetmonitor32) ESP32 Packet Monitor + SD card!
- [**165**Star][7y] [Perl] [yuri-gushin/roboo](https://github.com/yuri-gushin/roboo) uses advanced non-interactive HTTP challenge/response mechanisms to detect and subsequently mitigate HTTP robots
- [**165**Star][5y] [Perl] [xme/hoover](https://github.com/xme/hoover) Wireless Probe Requests Sniffer
-- [**165**Star][2y] [PowerShell] [ubeeri/invoke-usersimulator](https://github.com/ubeeri/invoke-usersimulator) Simulates common user behaviour on local and remote Windows hosts.
-- [**165**Star][10m] [Py] [tijme/angularjs-csti-scanner](https://github.com/tijme/angularjs-csti-scanner) Automated client-side template injection (sandbox escape/bypass) detection for AngularJS.
+- [**165**Star][2m] [C++] [westerndigitalcorporation/swerv-iss](https://github.com/westerndigitalcorporation/swerv-iss) Western Digital’s Open Source RISC-V SweRV Instruction Set Simulator
- [**165**Star][3y] [Py] [sowish/lnscan](https://github.com/sowish/lnscan) 详细的内部网络信息扫描器
-- [**165**Star][5y] [JS] [skycrab/leakscan](https://github.com/skycrab/leakscan) 在线漏洞扫描
- [**165**Star][3m] [Scheme] [siraben/zkeme80](https://github.com/siraben/zkeme80) An assembler and operating system for the TI-84+ written in Scheme, Forth and Z80 assembly.
- [**165**Star][7m] [Ruby] [r00t-3xp10it/msf-auxiliarys](https://github.com/r00t-3xp10it/msf-auxiliarys) My collection of metasploit auxiliary post-modules
- [**165**Star][5y] [Roff] [opendns/security_ninjas_appsec_training](https://github.com/opendns/security_ninjas_appsec_training) OpenDNS application security training program
+- [**165**Star][2y] [Shell] [moexin/easy-v2ray](https://github.com/moexin/easy-v2ray) 简单的V2ray一键配置包,小白也能简单上手。
- [**165**Star][1y] [C] [jioundai/bluedroid](https://github.com/jioundai/bluedroid) PoCs of Vulnerabilities on Bluedroid
+- [**165**Star][4m] [JS] [grempe/diceware](https://github.com/grempe/diceware) A tool for generating strong Diceware passwords, with entropy and crack time estimates.
- [**165**Star][2y] [C++] [google/pawn](https://github.com/google/pawn) 从基于 Intel 的工作站和笔记本电脑中提取 BIOS 固件
-- [**165**Star][8m] [Py] [githacktools/billcipher](https://github.com/githacktools/billcipher) Information Gathering tool for a Website or IP address
- [**165**Star][3y] [Standard ML] [gamelinux/prads](https://github.com/gamelinux/prads) Passive Real-time Asset Detection System
+- [**165**Star][2m] [C] [fullmetal5/bluebomb](https://github.com/fullmetal5/bluebomb) A Bluetooth exploit for the Nintendo Wii.
- [**165**Star][2y] [C] [cyassl/cyassl](https://github.com/cyassl/cyassl) Please use wolfSSL now instead:
+- [**165**Star][9m] [C++] [creepsky/creepminer](https://github.com/creepsky/creepminer) Burstcoin C++ CPU and GPU Miner
- [**165**Star][4m] [C++] [creddefense/creddefense](https://github.com/creddefense/creddefense) Credential and Red Teaming Defense for Windows Environments
- [**165**Star][2m] [Py] [chtd/psycopg2cffi](https://github.com/chtd/psycopg2cffi) Port to cffi with some speed improvements
- [**165**Star][1y] [Py] [certcc/keyfinder](https://github.com/certcc/keyfinder) A tool for finding and analyzing private (and public) key files, including support for Android APK files.
-- [**165**Star][9d] [Py] [adamcaudill/yawast](https://github.com/adamcaudill/yawast) YAWAST ...where a pentest starts. Security Toolkit for Web-based Applications
-- [**164**Star][2m] [Java] [trojan-gfw/igniter](https://github.com/trojan-gfw/igniter) A trojan client for Android (UNDER CONSTRUCTION).
-- [**164**Star][11d] [Rust] [hippolot/finshir](https://github.com/Hippolot/finshir)
-- [**164**Star][2m] [C++] [westerndigitalcorporation/swerv-iss](https://github.com/westerndigitalcorporation/swerv-iss) Western Digital’s Open Source RISC-V SweRV Instruction Set Simulator
+- [**165**Star][3d] [Py] [adamcaudill/yawast](https://github.com/adamcaudill/yawast) YAWAST ...where a pentest starts. Security Toolkit for Web-based Applications
+- [**164**Star][2m] [Java] [lilifengcode/burpsuite-plugins-usage](https://github.com/lilifengcode/burpsuite-plugins-usage) Burpsuite-Plugins-Usage
+- [**164**Star][13d] [Rust] [hippolot/finshir](https://github.com/Hippolot/finshir)
+- [**164**Star][9m] [thehackingsage/hackdroid](https://github.com/thehackingsage/hackdroid) Penetration Testing Apps for Android
- [**164**Star][3m] [Swift] [ryasnoy/applocker](https://github.com/ryasnoy/applocker) AppLocker - simple lock screen for iOS Application ( Swift 4+, iOS 9.0+) Touch ID / Face ID
-- [**164**Star][3m] [Vala] [ricotz/plank](https://github.com/ricotz/plank) the simplest dock on the planet
-- [**164**Star][2y] [Py] [priyankgada/python-for-hackers](https://github.com/priyankgada/python-for-hackers) Python for Hackers - Youtube Tutorials - Priyank Gada
+- [**164**Star][2d] [Py] [paloaltonetworks/ansible-pan](https://github.com/paloaltonetworks/ansible-pan) Ansible modules for Palo Alto Networks NGFWs
- [**164**Star][3y] [JS] [nvisium/django.nv](https://github.com/nvisium/django.nv) Vulnerable Django Application
-- [**164**Star][2y] [Shell] [moexin/easy-v2ray](https://github.com/moexin/easy-v2ray) 简单的V2ray一键配置包,小白也能简单上手。
+- [**164**Star][2y] [JS] [nospaceships/node-net-ping](https://github.com/nospaceships/node-net-ping) Ping and trace route to many hosts at once.
+- [**164**Star][8d] [C#] [mr-un1k0d3r/redteamcsharpscripts](https://github.com/mr-un1k0d3r/redteamcsharpscripts) C# Script used for Red Team
+- [**164**Star][11m] [Py] [mosuan/filescan](https://github.com/mosuan/filescan) 敏感文件扫描 / 二次判断降低误报率 / 扫描内容规则化 / 多目录扫描
- [**164**Star][3m] [mdrights/digital-rights](https://github.com/mdrights/digital-rights) Promote digital rights in China
+- [**164**Star][2y] [Py] [manisso/crips](https://github.com/manisso/crips) IP Tools To quickly get information about IP Address's, Web Pages and DNS records.
- [**164**Star][3y] [C] [jedisct1/blacknurse](https://github.com/jedisct1/blacknurse) BlackNurse attack PoC
- [**164**Star][4y] [C] [jdbirdwell/afl](https://github.com/jdbirdwell/afl) american fuzzy lop for network fuzzing (unofficial) -- official afl site is
-- [**164**Star][4m] [JS] [grempe/diceware](https://github.com/grempe/diceware) A tool for generating strong Diceware passwords, with entropy and crack time estimates.
+- [**164**Star][3y] [C#] [jamesjlinden/unity-decompiled](https://github.com/jamesjlinden/unity-decompiled)
- [**164**Star][11m] [Py] [ghostmanager/domaincheck](https://github.com/ghostmanager/domaincheck) DomainCheck is designed to assist operators with monitoring changes related to their domain names. This includes negative changes in categorization, VirusTotal detections, and appearances on malware blacklists. DomainCheck currently works only with NameCheap.
- [**164**Star][2y] [Py] [fs0c131y/aadhaarsearchengine](https://github.com/fs0c131y/aadhaarsearchengine) Find Aadhaar cards thanks to Google
+- [**164**Star][2m] [C] [elementsproject/secp256k1-zkp](https://github.com/elementsproject/secp256k1-zkp) Experimental fork of libsecp256k1 with support for pedersen commitments and range proofs.
+- [**164**Star][1y] [Py] [c0ny1/pwcracker](https://github.com/c0ny1/pwcracker) 一款插件化的密码爆破框架
- [**164**Star][3y] [Shell] [brandonprry/wicked_cool_shell_scripts_2e](https://github.com/brandonprry/wicked_cool_shell_scripts_2e) Full shell scripts for the second edition of Wicked Cool Shell Scripts
-- [**164**Star][3y] [Shell] [backlion/hack-for-tools](https://github.com/backlion/hack-for-tools) 常用的黑客神器
-- [**164**Star][6m] [PowerShell] [alsidofficial/wsuspendu](https://github.com/alsidofficial/wsuspendu) Implement WSUSpendu attack
-- [**163**Star][5y] [PHP] [pentestmonkey/php-reverse-shell](https://github.com/pentestmonkey/php-reverse-shell)
-- [**163**Star][13d] [C] [progmem/switch-fightstick](https://github.com/progmem/switch-fightstick) Proof-of-Concept LUFA Project for the Nintendo Switch. Uses reverse-engineering of the Pokken Tournament Pro Pad for the Wii U and Switch System v3.0.0
+- [**164**Star][2y] [PS] [ankh2054/windows-pentest](https://github.com/ankh2054/windows-pentest) Windows Pentest Scripts
+- [**164**Star][6m] [PS] [alsidofficial/wsuspendu](https://github.com/alsidofficial/wsuspendu) Implement WSUSpendu attack
+- [**163**Star][2y] [sniperoj/attack-defense-framework](https://github.com/SniperOJ/Attack-Defense-Framework)
- [**163**Star][5y] [Py] [q2h1cg/cms-exploit-framework](https://github.com/Q2h1Cg/CMS-Exploit-Framework) CMS Exploit Framework
+- [**163**Star][26d] [PS] [dsccommunity/activedirectorydsc](https://github.com/dsccommunity/ActiveDirectoryDsc) contains DSC resources for deployment and configuration of Active Directory.
- [**163**Star][6m] [C] [bytecode77/r77-rootkit](https://github.com/bytecode77/r77-rootkit) Ring 3 Rootkit DLL
+- [**163**Star][2y] [HTML] [threatexpress/metatwin](https://github.com/threatexpress/metatwin) The project is designed as a file resource cloner. Metadata, including digital signature, is extracted from one file and injected into another.
- [**163**Star][1y] [Py] [walkerfuz/morph](https://github.com/walkerfuz/morph) An open source fuzzing framework for fun.
- [**163**Star][6m] [Py] [wafpassproject/wafpass](https://github.com/wafpassproject/wafpass) wafpass:利用所有Payload 的绕过技巧分析参数,旨在为安全解决方案(例如WAF)确定基准。
- [**163**Star][4y] [C] [uptimejp/sql_firewall](https://github.com/uptimejp/sql_firewall) SQL Firewall Extension for PostgreSQL
-- [**163**Star][19d] [Py] [swisskyrepo/graphqlmap](https://github.com/swisskyrepo/graphqlmap) GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes.
+- [**163**Star][3y] [C] [teran-mckinney/raru](https://github.com/teran-mckinney/raru) raru: run as random user
+- [**163**Star][21d] [Py] [swisskyrepo/graphqlmap](https://github.com/swisskyrepo/graphqlmap) GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes.
- [**163**Star][3y] [Py] [sourcekris/rsactftool](https://github.com/sourcekris/rsactftool) RSA CTF Tool - Tool to attack RSA public keys and ciphertexts in common ways
- [**163**Star][3y] [C] [scslab/tcpcrypt](https://github.com/scslab/tcpcrypt) Fast TCP encryption
- [**163**Star][2y] [Py] [rxwx/cve-2017-8570](https://github.com/rxwx/cve-2017-8570) Proof of Concept exploit for CVE-2017-8570
-- [**163**Star][4m] [Py] [racepwn/racepwn](https://github.com/racepwn/racepwn) a librace library and a racepwn utility that are designed to test a race condition attack through protocols that use a TCP connection
-- [**163**Star][3m] [Py] [pinterest/thrift-tools](https://github.com/pinterest/thrift-tools) thrift-tools is a library and a set of tools to introspect Apache Thrift traffic.
-- [**163**Star][2y] [JS] [nospaceships/node-net-ping](https://github.com/nospaceships/node-net-ping) Ping and trace route to many hosts at once.
-- [**163**Star][11m] [Py] [mosuan/filescan](https://github.com/mosuan/filescan) 敏感文件扫描 / 二次判断降低误报率 / 扫描内容规则化 / 多目录扫描
+- [**163**Star][4m] [Py] [pinterest/thrift-tools](https://github.com/pinterest/thrift-tools) thrift-tools is a library and a set of tools to introspect Apache Thrift traffic.
+- [**163**Star][2y] [C] [oalabs/blobrunner](https://github.com/oalabs/blobrunner) Quickly debug shellcode extracted during malware analysis
- [**163**Star][3y] [Makefile] [kost/nmap-android](https://github.com/kost/nmap-android) Nmap on Android - Makefile/diff/scripts to build it with Android NDK
-- [**163**Star][3y] [C#] [jamesjlinden/unity-decompiled](https://github.com/jamesjlinden/unity-decompiled)
+- [**163**Star][12d] [C++] [jrfonseca/drmingw](https://github.com/jrfonseca/drmingw) Postmortem debugging tools for MinGW.
- [**163**Star][8m] [hd421/monitoring-systems-cheat-sheet](https://github.com/hd421/monitoring-systems-cheat-sheet) A cheat sheet for pentesters and researchers about vulnerabilities in well-known monitoring systems.
- [**163**Star][2y] [Shell] [functionclub/fail2ban](https://github.com/functionclub/fail2ban) 最简单的防止SSH暴力破解的脚本
-- [**163**Star][2m] [C] [elementsproject/secp256k1-zkp](https://github.com/elementsproject/secp256k1-zkp) Experimental fork of libsecp256k1 with support for pedersen commitments and range proofs.
+- [**163**Star][3m] [JS] [friedrith/node-wifi](https://github.com/friedrith/node-wifi)
- [**163**Star][10m] [C] [davidgfnet/wireshark-whatsapp](https://github.com/davidgfnet/wireshark-whatsapp) Whatsapp dissector plugin for wireshark
+- [**163**Star][2y] [PS] [cyberark/riskyspn](https://github.com/cyberark/riskyspn) Detect and abuse risky SPNs
- [**163**Star][1y] [Py] [boy-hack/poc-t](https://github.com/boy-hack/poc-t) 基于poc-t 并在此基础上增加批量功能!
- [**163**Star][2m] [C++] [bastibl/gr-ieee802-15-4](https://github.com/bastibl/gr-ieee802-15-4) IEEE 802.15.4 ZigBee Transceiver
-- [**163**Star][2y] [PowerShell] [ankh2054/windows-pentest](https://github.com/ankh2054/windows-pentest) Windows Pentest Scripts
-- [**163**Star][5m] [C++] [a5-/gamerfood_csgo](https://github.com/a5-/gamerfood_csgo) Fully featured CSGO cheat by Team Gamerfood
+- [**163**Star][4m] [Py] [alpha1e0/kiwi](https://github.com/alpha1e0/kiwi) kiwi:安全源码审计工具
+- [**162**Star][18d] [Groovy] [jeremylong/dependency-check-gradle](https://github.com/jeremylong/dependency-check-gradle) The dependency-check gradle plugin allows projects to monitor dependent libraries for known, published vulnerabilities.
- [**162**Star][2y] [Py] [hackatnow/shodanwave](https://github.com/hackatnow/shodanwave) Shodanwave is a tool for exploring and obtaining information from Netwave IP Camera.
-- [**162**Star][2y] [sniperoj/attack-defense-framework](https://github.com/SniperOJ/Attack-Defense-Framework)
+- [**162**Star][3y] [Py] [chenjiandongx/github-spider](https://github.com/chenjiandongx/Github-spider) Github 仓库及用户分析爬虫
- [**162**Star][4y] [Py] [osirislab/fentanyl](https://github.com/osirislab/Fentanyl) an IDAPython script that makes patching significantly easier
-- [**162**Star][2y] [HTML] [threatexpress/metatwin](https://github.com/threatexpress/metatwin) The project is designed as a file resource cloner. Metadata, including digital signature, is extracted from one file and injected into another.
- [**162**Star][2m] [Py] [x64dbg/x64dbgida](https://github.com/x64dbg/x64dbgida) Official x64dbg plugin for IDA Pro.
- [**162**Star][3y] [Py] [wh1t3rh1n0/air-hammer](https://github.com/wh1t3rh1n0/air-hammer) A WPA Enterprise horizontal brute-force attack tool
+- [**162**Star][2m] [Shell] [securityriskadvisors/vectr](https://github.com/securityriskadvisors/vectr) VECTR is a tool that facilitates tracking of your red and blue team testing activities to measure detection and prevention capabilities across different attack scenarios
+- [**162**Star][1y] [Py] [saltstack/salt-contrib](https://github.com/saltstack/salt-contrib) Salt Module Contributions
- [**162**Star][8m] [Py] [sa7mon/miniprint](https://github.com/sa7mon/miniprint) A medium interaction printer honeypot
-- [**162**Star][1m] [Py] [paloaltonetworks/ansible-pan](https://github.com/paloaltonetworks/ansible-pan) Ansible modules for Palo Alto Networks NGFWs
- [**162**Star][1m] [Py] [opentimestamps/opentimestamps-client](https://github.com/opentimestamps/opentimestamps-client) Command-line tool to create and validate timestamp proofs with the OpenTimestamps protocol
-- [**162**Star][25d] [Py] [neo23x0/yaranalyzer](https://github.com/neo23x0/yaranalyzer) Yara Rule Analyzer and Statistics
+- [**162**Star][27d] [Py] [neo23x0/yaranalyzer](https://github.com/neo23x0/yaranalyzer) Yara Rule Analyzer and Statistics
- [**162**Star][2m] [Py] [mykings/python-masscan](https://github.com/mykings/python-masscan) python-masscan is a python library which helps in using masscan port scanner.
-- [**162**Star][2y] [Py] [manisso/crips](https://github.com/manisso/crips) IP Tools To quickly get information about IP Address's, Web Pages and DNS records.
-- [**162**Star][10d] [C++] [jrfonseca/drmingw](https://github.com/jrfonseca/drmingw) Postmortem debugging tools for MinGW.
- [**162**Star][6y] [XSLT] [ironbee/waf-research](https://github.com/ironbee/waf-research) WAF Research
-- [**162**Star][5y] [PowerShell] [harmj0y/powerup](https://github.com/harmj0y/powerup) This version of PowerUp is now unsupported. See
+- [**162**Star][10m] [Scala] [input-output-hk/mantis](https://github.com/input-output-hk/mantis) A Scala based client for Ethereum Classic.
+- [**162**Star][5y] [PS] [harmj0y/powerup](https://github.com/harmj0y/powerup) This version of PowerUp is now unsupported. See
- [**162**Star][6y] [C] [gdbinit/readmem](https://github.com/gdbinit/readmem) A small OS X/iOS userland util to dump processes memory
- [**162**Star][2y] [C] [gabrielrcouto/reaver-wps](https://github.com/gabrielrcouto/reaver-wps) Brute force attack against Wifi Protected Setup
- [**162**Star][2y] [C++] [encounter/futurerestore](https://github.com/encounter/futurerestore) (unmaintained) iOS upgrade and downgrade tool utilizing SHSH blobs (unofficial fork supporting iOS 11 and newer devices)
-- [**162**Star][29d] [Visual Basic] [dzzie/sysanalyzer](https://github.com/dzzie/sysanalyzer) Automated malcode analysis system - read more ->
+- [**162**Star][1m] [Visual Basic .NET] [dzzie/sysanalyzer](https://github.com/dzzie/sysanalyzer) Automated malcode analysis system - read more ->
- [**162**Star][4m] [C] [dyne/dnscrypt-proxy](https://github.com/dyne/dnscrypt-proxy) DNSCrypt-Proxy repository, frankly maintained for what it does (no new features planned)
+- [**162**Star][7m] [Py] [dyboy2017/wtf_scan](https://github.com/dyboy2017/wtf_scan) 一款WEB端的在线敏感资产扫描器,扫描网站中的指纹、漏洞及相关敏感信息,针对已经识别的CMS指纹,进行二次0day扫描利用,一键GetShell也不是不可能!!!
+- [**162**Star][2y] [Shell] [danilabs/tools-tbhm](https://github.com/danilabs/tools-tbhm) Tools of "The Bug Hunters Methodology V2 by
- [**162**Star][7m] [Py] [d4stiny/dell-support-assist-rce-poc](https://github.com/d4stiny/dell-support-assist-rce-poc)
-- [**162**Star][2y] [PowerShell] [cyberark/riskyspn](https://github.com/cyberark/riskyspn) Detect and abuse risky SPNs
- [**162**Star][5m] [Py] [cvandeplas/elk-forensics](https://github.com/cvandeplas/elk-forensics) ELK configuration files for Forensic Analysts and Incident Handlers (unmaintained)
- [**162**Star][2m] [JS] [ant4g0nist/vegvisir](https://github.com/ant4g0nist/vegvisir) 基于浏览器的LLDB 调试器
-- [**162**Star][4m] [Py] [alpha1e0/kiwi](https://github.com/alpha1e0/kiwi) kiwi:安全源码审计工具
+- [**162**Star][5m] [C++] [a5-/gamerfood_csgo](https://github.com/a5-/gamerfood_csgo) Fully featured CSGO cheat by Team Gamerfood
- [**162**Star][2y] [Py] [hackatnow/shodanwave](https://github.com/hackatnow/shodanwave) Shodanwave is a tool for exploring and obtaining information from Netwave IP Camera.
- [**161**Star][1y] [Java] [iqiyi/dexsplitter](https://github.com/iqiyi/dexsplitter) Analyze contribution rate of each module to the apk size
-- [**161**Star][3y] [Py] [chenjiandongx/github-spider](https://github.com/chenjiandongx/Github-spider) Github 仓库及用户分析爬虫
-- [**161**Star][2m] [Java] [lilifengcode/burpsuite-plugins-usage](https://github.com/lilifengcode/burpsuite-plugins-usage) Burpsuite-Plugins-Usage
+- [**161**Star][24d] [C#] [hmbsbige/nattypetester](https://github.com/hmbsbige/nattypetester) 测试当前网络的NAT类型(STUN)
- [**161**Star][4y] [Py] [appknox/afe](https://github.com/appknox/AFE) Android Framework for Exploitation, is a framework for exploiting android based devices
- [**161**Star][2y] [Py] [tulpar/tulpar](https://github.com/tulpar/tulpar) Tulpar - Web Vulnerability Scanner
+- [**161**Star][2m] [Py] [lc/theftfuzzer](https://github.com/lc/theftfuzzer) TheftFuzzer is a tool that fuzzes Cross-Origin Resource Sharing implementations for common misconfigurations.
+- [**161**Star][8m] [C++] [momo5502/cod-exploits](https://github.com/momo5502/cod-exploits)
+- [**161**Star][6m] [Py] [yassineaboukir/cve-2018-0296](https://github.com/yassineaboukir/cve-2018-0296) Script to test for Cisco ASA path traversal vulnerability (CVE-2018-0296) and extract system information.
+- [**161**Star][11m] [HTML] [yaph/domxssscanner](https://github.com/yaph/domxssscanner) DOMXSS Scanner is an online tool to scan source code for DOM based XSS vulnerabilities
+- [**161**Star][7m] [C#] [xorrior/random-csharptools](https://github.com/xorrior/random-csharptools) Collection of CSharp Assemblies focused on Post-Exploitation Capabilities
+- [**161**Star][2m] [Py] [wish-i-was/femida](https://github.com/wish-i-was/femida) Automated blind-xss search for Burp Suite
- [**161**Star][1y] [Py] [veorq/blueflower](https://github.com/veorq/blueflower) a grep -r for secrets
- [**161**Star][1m] [Py] [staticafi/symbiotic](https://github.com/staticafi/symbiotic) Symbiotic is a tool for finding bugs in computer programs based on instrumentation, program slicing and KLEE
- [**161**Star][2y] [secwiki/hack-movie](https://github.com/secwiki/hack-movie) 黑客相关的电视剧/电影/纪录片
-- [**161**Star][1y] [Py] [saltstack/salt-contrib](https://github.com/saltstack/salt-contrib) Salt Module Contributions
+- [**161**Star][15d] [Py] [regala/burp-scope-monitor](https://github.com/regala/burp-scope-monitor) Burp Suite Extension to monitor new scope
+- [**161**Star][6m] [C] [rapid7/mettle](https://github.com/rapid7/mettle) This is an implementation of a native-code Meterpreter, designed for portability, embeddability, and low resource utilization.
- [**161**Star][2y] [Py] [rajeshmajumdar/ploitkit](https://github.com/rajeshmajumdar/ploitkit) The Hacker's ToolBox
- [**161**Star][8y] [C] [poelzi/openchronos](https://github.com/poelzi/openchronos) Open Source Firmware for the TI EZ430-Chronos Watch
- [**161**Star][3y] [Py] [pentesteres/delorean](https://github.com/pentesteres/delorean) NTP Main-in-the-Middle tool
- [**161**Star][3y] [Go] [openwhitebox/aes](https://github.com/openwhitebox/aes) Implementations of white-box AES constructions and their cryptanalyses.
-- [**161**Star][5m] [C] [odzhan/shellcode](https://github.com/odzhan/shellcode) Shellcodes for Windows/Linux/BSD running on x86, AMD64, ARM, ARM64
-- [**161**Star][2y] [C] [oalabs/blobrunner](https://github.com/oalabs/blobrunner) Quickly debug shellcode extracted during malware analysis
- [**161**Star][2y] [netbiosx/default-credentials](https://github.com/netbiosx/default-credentials) Default usernames and passwords for various systems (VoIP,IPMI,Oracle).
-- [**161**Star][1m] [C#] [mr-un1k0d3r/redteamcsharpscripts](https://github.com/mr-un1k0d3r/redteamcsharpscripts) C# Script used for Red Team
+- [**161**Star][1y] [msuhanov/regf](https://github.com/msuhanov/regf) Windows registry file format specification
- [**161**Star][3y] [miserlou/mackenzie](https://github.com/miserlou/mackenzie) AWS Lambda Infection Toolkit // Persistent Lambda Malware PoC
+- [**161**Star][1y] [jnusimba/linuxsecnotes](https://github.com/jnusimba/linuxsecnotes) some learning notes about Linux Security
- [**161**Star][5m] [C] [jakeajames/jelbreklib](https://github.com/jakeajames/jelbreklib) Give me tfp0, I give you jelbrek
-- [**161**Star][10m] [Scala] [input-output-hk/mantis](https://github.com/input-output-hk/mantis) A Scala based client for Ethereum Classic.
-- [**161**Star][3m] [JS] [friedrith/node-wifi](https://github.com/friedrith/node-wifi)
+- [**161**Star][3y] [Py] [hkm/whoishere.py](https://github.com/hkm/whoishere.py) WIFI Client Detection - Identify people by assigning a name to a device performing a wireless probe request.
+- [**161**Star][3y] [Shell] [hiroshimanrise/anonym8](https://github.com/hiroshimanrise/anonym8) Sets Transparent proxy tunnel through Tor, I2P, Privoxy, Polipo and modify DNS; Include Anonymizing Relay Monitor (arm), macchanger and wipe (Cleans ram/cache & swap-space) features, ID spoofing has never been so easy.
- [**161**Star][3m] [Java] [eth-sri/securify](https://github.com/eth-sri/securify) Security Scanner for Ethereum Smart Contracts
-- [**161**Star][13d] [C++] [devinacker/bsnes-plus](https://github.com/devinacker/bsnes-plus) debug-oriented fork of bsnes
-- [**161**Star][25d] [Py] [davedoesdev/python-jwt](https://github.com/davedoesdev/python-jwt) Python module for generating and verifying JSON Web Tokens
-- [**161**Star][2y] [Shell] [danilabs/tools-tbhm](https://github.com/danilabs/tools-tbhm) Tools of "The Bug Hunters Methodology V2 by
+- [**161**Star][8m] [C] [eniac/faas](https://github.com/eniac/faas) Factoring as a Service
+- [**161**Star][2y] [Go] [elithrar/simple-scrypt](https://github.com/elithrar/simple-scrypt) A convenience library for generating, comparing and inspecting password hashes using the scrypt KDF in Go
+- [**161**Star][4d] [C++] [devinacker/bsnes-plus](https://github.com/devinacker/bsnes-plus) debug-oriented fork of bsnes
+- [**161**Star][8m] [HTML] [decal/werdlists](https://github.com/decal/werdlists)
+- [**161**Star][27d] [Py] [davedoesdev/python-jwt](https://github.com/davedoesdev/python-jwt) Python module for generating and verifying JSON Web Tokens
- [**161**Star][3y] [Py] [ctfs/write-ups-tools](https://github.com/ctfs/write-ups-tools) A collection of tools used to maintain and create CTF write-up folders
-- [**161**Star][10d] [Py] [citizenlab/test-lists](https://github.com/citizenlab/test-lists) URL testing lists intended for discovering website censorship
-- [**161**Star][1y] [Py] [c0ny1/pwcracker](https://github.com/c0ny1/pwcracker) 一款插件化的密码爆破框架
+- [**161**Star][5d] [Py] [citizenlab/test-lists](https://github.com/citizenlab/test-lists) URL testing lists intended for discovering website censorship
+- [**161**Star][3m] [Py] [blacktop/virustotal-api](https://github.com/blacktop/virustotal-api) Virus Total Public/Private/Intel API
+- [**161**Star][3y] [Py] [artkond/cisco-rce](https://github.com/artkond/cisco-rce) CVE-2017-3881 Cisco Catalyst Remote Code Execution PoC
+- [**161**Star][21d] [C] [altramayor/gatekeeper](https://github.com/altramayor/gatekeeper) First open source DDoS protection system
- [**161**Star][2y] [Py] [aim4r/voldiff](https://github.com/aim4r/voldiff) Malware Memory Footprint Analysis based on Volatility
-- [**160**Star][16d] [Groovy] [jeremylong/dependency-check-gradle](https://github.com/jeremylong/dependency-check-gradle) The dependency-check gradle plugin allows projects to monitor dependent libraries for known, published vulnerabilities.
-- [**160**Star][24d] [PowerShell] [dsccommunity/activedirectorydsc](https://github.com/dsccommunity/ActiveDirectoryDsc) contains DSC resources for deployment and configuration of Active Directory.
-- [**160**Star][2m] [Py] [lc/theftfuzzer](https://github.com/lc/theftfuzzer) TheftFuzzer is a tool that fuzzes Cross-Origin Resource Sharing implementations for common misconfigurations.
+- [**161**Star][5d] [Shell] [0xmachos/mosl](https://github.com/0xmachos/mosl) Bash script to audit and fix macOS Catalina (10.15.x) security settings
+- [**161**Star][6m] [0xbug/biu](https://github.com/0xbug/biu) 网络资产发现、漏洞扫描
+- [**160**Star][24d] [JS] [paperseller/chn-iplist](https://github.com/paperseller/chn-iplist) Chnroutes rules for routers、Shadowrocket、Quantumult、Kitsunebi、acl、BifrostV、v2rayNG、clash、pac、v2ray config file.
- [**160**Star][10m] [C] [iaik/sgxrop](https://github.com/IAIK/sgxrop) The code to the SGX-ROP paper
-- [**160**Star][8m] [C++] [momo5502/cod-exploits](https://github.com/momo5502/cod-exploits)
- [**160**Star][2y] [C] [ninjaprawn/async_wake-fun](https://github.com/ninjaprawn/async_wake-fun) iOS/MacOS 11 内核双释放漏洞 exp
-- [**160**Star][11m] [HTML] [yaph/domxssscanner](https://github.com/yaph/domxssscanner) DOMXSS Scanner is an online tool to scan source code for DOM based XSS vulnerabilities
-- [**160**Star][6m] [C#] [xorrior/random-csharptools](https://github.com/xorrior/random-csharptools) Collection of CSharp Assemblies focused on Post-Exploitation Capabilities
-- [**160**Star][2m] [Py] [wish-i-was/femida](https://github.com/wish-i-was/femida) Automated blind-xss search for Burp Suite
-- [**160**Star][9m] [thehackingsage/hackdroid](https://github.com/thehackingsage/hackdroid) Penetration Testing Apps for Android
-- [**160**Star][12m] [splunk/botsv1](https://github.com/splunk/botsv1) A sample security dataset and CTF platform
+- [**160**Star][3y] [C] [yifanlu/psvimgtools](https://github.com/yifanlu/psvimgtools) Decrypt Vita CMA backups
+- [**160**Star][19d] [AGS Script] [tinyfpga/tinyfpga-bootloader](https://github.com/tinyfpga/tinyfpga-bootloader) An open source USB bootloader for FPGAs
+- [**160**Star][2y] [Java] [the404hacking/androrat](https://github.com/the404hacking/androrat) AndroRAT | Remote Administrator Tool for Android OS Hacking
+- [**160**Star][1y] [splunk/botsv1](https://github.com/splunk/botsv1) A sample security dataset and CTF platform
- [**160**Star][4y] [PHP] [spiderlabs/cryptomg](https://github.com/spiderlabs/cryptomg) CryptOMG is a configurable CTF style test bed that highlights common flaws in cryptographic implementations.
- [**160**Star][3y] [C++] [sakshamsharma/http-over-protocol](https://github.com/sakshamsharma/http-over-protocol) HOP: A proxy server to enable arbitrary protocols behind an HTTP proxy
-- [**160**Star][13d] [Py] [regala/burp-scope-monitor](https://github.com/regala/burp-scope-monitor) Burp Suite Extension to monitor new scope
-- [**160**Star][6m] [C] [rapid7/mettle](https://github.com/rapid7/mettle) This is an implementation of a native-code Meterpreter, designed for portability, embeddability, and low resource utilization.
- [**160**Star][3m] [JS] [mrgeffitas/ironsquirrel](https://github.com/mrgeffitas/ironsquirrel) Encrypted exploit delivery for the masses
- [**160**Star][3y] [Py] [moha99sa/evilap_defender](https://github.com/moha99sa/evilap_defender) Protect your Wireless Network from Evil Access Points!
- [**160**Star][2y] [Py] [matiasb/unpy2exe](https://github.com/matiasb/unpy2exe) Extract .pyc files from executables created with py2exe
-- [**160**Star][1y] [jnusimba/linuxsecnotes](https://github.com/jnusimba/linuxsecnotes) some learning notes about Linux Security
-- [**160**Star][3y] [Shell] [hiroshimanrise/anonym8](https://github.com/hiroshimanrise/anonym8) Sets Transparent proxy tunnel through Tor, I2P, Privoxy, Polipo and modify DNS; Include Anonymizing Relay Monitor (arm), macchanger and wipe (Cleans ram/cache & swap-space) features, ID spoofing has never been so easy.
+- [**160**Star][2m] [JS] [lelinhtinh/de4js](https://github.com/lelinhtinh/de4js) JavaScript Deobfuscator and Unpacker
+- [**160**Star][3y] [Ruby] [kost/dockscan](https://github.com/kost/dockscan) dockscan:docker安全漏洞扫描和审计工具。
+- [**160**Star][8m] [klionsec/redteammanual](https://github.com/klionsec/redteammanual)
+- [**160**Star][2y] [Py] [juancarlospaco/css-html-js-minify](https://github.com/juancarlospaco/css-html-js-minify) StandAlone Async cross-platform Minifier for the Web.
+- [**160**Star][3m] [C#] [hunniccyber/sharpsniper](https://github.com/hunniccyber/sharpsniper) Find specific users in active directory via their username and logon IP address
- [**160**Star][2m] [C++] [gregwar/fatcat](https://github.com/gregwar/fatcat) FAT filesystems explore, extract, repair, and forensic tool
- [**160**Star][1y] [HTML] [exploitprotocol/mobile-security-wiki](https://github.com/exploitprotocol/mobile-security-wiki)
-- [**160**Star][8m] [C] [eniac/faas](https://github.com/eniac/faas) Factoring as a Service
-- [**160**Star][2y] [Go] [elithrar/simple-scrypt](https://github.com/elithrar/simple-scrypt) A convenience library for generating, comparing and inspecting password hashes using the scrypt KDF in Go
+- [**160**Star][15d] [Shell] [dshield-isc/dshield](https://github.com/dshield-isc/dshield) DShield Raspberry Pi Sensor
- [**160**Star][2y] [C] [dhavalkapil/libdheap](https://github.com/dhavalkapil/libdheap) A shared (dynamic) library that can be transparently injected into different processes to detect memory corruption in glibc heap
-- [**160**Star][8m] [HTML] [decal/werdlists](https://github.com/decal/werdlists)
- [**160**Star][3m] [Py] [d0c-s4vage/gramfuzz](https://github.com/d0c-s4vage/gramfuzz) gramfuzz is a grammar-based fuzzer that lets one define complex grammars to generate text and binary data formats.
-- [**160**Star][3m] [Py] [blacktop/virustotal-api](https://github.com/blacktop/virustotal-api) Virus Total Public/Private/Intel API
-- [**160**Star][16d] [JS] [bkimminich/juice-shop-ctf](https://github.com/bkimminich/juice-shop-ctf) Juice Shop CTF 环境配置工具
-- [**160**Star][3y] [Py] [artkond/cisco-rce](https://github.com/artkond/cisco-rce) CVE-2017-3881 Cisco Catalyst Remote Code Execution PoC
+- [**160**Star][18d] [JS] [bkimminich/juice-shop-ctf](https://github.com/bkimminich/juice-shop-ctf) Juice Shop CTF 环境配置工具
- [**160**Star][3y] [Py] [504ensicslabs/damm](https://github.com/504ensicslabs/damm) Differential Analysis of Malware in Memory
-- [**159**Star][10d] [HTML] [v2ray/v2ray.github.io](https://github.com/v2ray/v2ray.github.io) V2Ray Portal
+- [**159**Star][3d] [HTML] [v2ray/v2ray.github.io](https://github.com/v2ray/v2ray.github.io) V2Ray Portal
+- [**159**Star][7m] [PS] [nickrod518/powershell-scripts](https://github.com/nickrod518/powershell-scripts) PowerShell scripts ranging from SCCM, MSO, AD, and other corporate enterprise uses... to sending cat facts to coworkers.
- [**159**Star][7m] [C] [zhuhuibeishadiao/newhidedriverex](https://github.com/zhuhuibeishadiao/newhidedriverex) Hide Driver By MiProcessLoaderEntry
-- [**159**Star][3y] [C] [yifanlu/psvimgtools](https://github.com/yifanlu/psvimgtools) Decrypt Vita CMA backups
-- [**159**Star][6m] [Py] [yassineaboukir/cve-2018-0296](https://github.com/yassineaboukir/cve-2018-0296) Script to test for Cisco ASA path traversal vulnerability (CVE-2018-0296) and extract system information.
+- [**159**Star][4m] [whoisflynn/oscp-exam-report-template](https://github.com/whoisflynn/oscp-exam-report-template) Modified template for the OSCP Exam and Labs. Used during my passing attempt
+- [**159**Star][1m] [F#] [softsec-kaist/codealchemist](https://github.com/softsec-kaist/codealchemist) Semantics-aware Code Generation for Finding JS engine Vulnerabilities
- [**159**Star][2m] [smilezxlee/crackediosapps](https://github.com/smilezxlee/crackediosapps) iOS端破解版App集合,包含破解版QQ、破解版抖音、破解版百度网盘、破解版麻花、钉钉打卡助手、破解版墨墨背单词、破解版网易云音乐、破解版芒果TV
+- [**159**Star][9m] [Py] [sch3m4/androidpatternlock](https://github.com/sch3m4/androidpatternlock) A little Python tool to crack the Pattern Lock on Android devices
- [**159**Star][4y] [Py] [plaguescanner/plaguescanner](https://github.com/plaguescanner/plaguescanner) Open source multiple AV scanner framework
+- [**159**Star][2y] [C] [phhusson/super-bootimg](https://github.com/phhusson/super-bootimg) Tools to edit Android boot.img. NDK buildable, to be usable in an update.zip
- [**159**Star][3y] [Py] [nneonneo/eqgrp-free-file](https://github.com/nneonneo/eqgrp-free-file) Free sampling of files from the purported Equation Group hack.
+- [**159**Star][2m] [Py] [nforest/droidimg](https://github.com/nforest/droidimg) Android/Linux vmlinux loader
- [**159**Star][5y] [Py] [netspi/sshkey-grab](https://github.com/netspi/sshkey-grab) Grab ssh keys from ssh-agent
- [**159**Star][5m] [Java] [netspi/javaserialkiller](https://github.com/netspi/javaserialkiller) Burp extension to perform Java Deserialization Attacks
-- [**159**Star][1y] [msuhanov/regf](https://github.com/msuhanov/regf) Windows registry file format specification
-- [**159**Star][3y] [Ruby] [kost/dockscan](https://github.com/kost/dockscan) dockscan:docker安全漏洞扫描和审计工具。
-- [**159**Star][8m] [klionsec/redteammanual](https://github.com/klionsec/redteammanual)
-- [**159**Star][2y] [Py] [juancarlospaco/css-html-js-minify](https://github.com/juancarlospaco/css-html-js-minify) StandAlone Async cross-platform Minifier for the Web.
+- [**159**Star][26d] [C++] [mxmssh/manul](https://github.com/mxmssh/manul) Manul is a coverage-guided parallel fuzzer for open-source and blackbox binaries on Windows, Linux and MacOS
+- [**159**Star][1y] [malwarearchaeology/attack](https://github.com/malwarearchaeology/attack) MITRE ATT&CK Windows Logging Cheat Sheets
+- [**159**Star][3m] [Go] [lukasikic/subzy](https://github.com/lukasikic/subzy) Subdomain takeover vulnerability checker
+- [**159**Star][1y] [JS] [logicalhacking/dvhma](https://github.com/logicalhacking/dvhma) Damn Vulnerable Hybrid Mobile App (DVHMA) is an hybrid mobile app (for Android) that intentionally contains vulnerabilities.
+- [**159**Star][5m] [JS] [k4m4/dcipher-cli](https://github.com/k4m4/dcipher-cli) Crack hashes using online rainbow & lookup table attack services, right from your terminal
- [**159**Star][2y] [C++] [hussein-aitlahcen/blackhole](https://github.com/hussein-aitlahcen/blackhole) C# RAT (Remote Administration Tool)
-- [**159**Star][3y] [Py] [hkm/whoishere.py](https://github.com/hkm/whoishere.py) WIFI Client Detection - Identify people by assigning a name to a device performing a wireless probe request.
-- [**159**Star][2m] [C] [fullmetal5/bluebomb](https://github.com/fullmetal5/bluebomb) A Bluetooth exploit for the Nintendo Wii.
-- [**159**Star][7m] [Py] [dyboy2017/wtf_scan](https://github.com/dyboy2017/wtf_scan) 一款WEB端的在线敏感资产扫描器,扫描网站中的指纹、漏洞及相关敏感信息,针对已经识别的CMS指纹,进行二次0day扫描利用,一键GetShell也不是不可能!!!
-- [**159**Star][13d] [Shell] [dshield-isc/dshield](https://github.com/dshield-isc/dshield) DShield Raspberry Pi Sensor
-- [**159**Star][2y] [TypeScript] [cupslab/password_meter](https://github.com/cupslab/password_meter) 数据驱动的密码测量仪表,可对密码进行强度和可用性检测
+- [**159**Star][17d] [Java] [gantman/jail-monkey](https://github.com/gantman/jail-monkey) A React Native library for identifying if a phone is rooted or mocking locations
+- [**159**Star][2y] [TS] [cupslab/password_meter](https://github.com/cupslab/password_meter) 数据驱动的密码测量仪表,可对密码进行强度和可用性检测
- [**159**Star][10m] [Py] [censys/censys-python](https://github.com/censys/censys-python) Python Library for Censys
-- [**159**Star][19d] [C] [altramayor/gatekeeper](https://github.com/altramayor/gatekeeper) First open source DDoS protection system
-- [**159**Star][15d] [Shell] [0xmachos/mosl](https://github.com/0xmachos/mosl) Bash script to audit and fix macOS Catalina (10.15.x) security settings
-- [**159**Star][6m] [0xbug/biu](https://github.com/0xbug/biu) 网络资产发现、漏洞扫描
-- [**158**Star][8d] [Py] [fireeye/fidl](https://github.com/fireeye/fidl) A sane API for IDA Pro's decompiler. Useful for malware RE and vulnerability research
+- [**159**Star][11m] [Go] [botherder/kraken](https://github.com/botherder/kraken) Cross-platform Yara scanner written in Go
+- [**158**Star][20d] [Java] [fuzzitdev/javafuzz](https://github.com/fuzzitdev/javafuzz) coverage guided fuzz testing for java
+- [**158**Star][1m] [Py] [travisfoley/dfirtriage](https://github.com/travisfoley/dfirtriage) Digital forensic acquisition tool for Windows based incident response.
+- [**158**Star][1y] [Go] [remeh/sizedwaitgroup](https://github.com/remeh/sizedwaitgroup) SizedWaitGroup has the same role and close to the same API as the Golang sync.WaitGroup but it adds a limit on the amount of goroutines started concurrently.
- [**158**Star][6y] [Ruby] [resque/resque-loner](https://github.com/resque/resque-loner) Support for unique jobs in Resque: Only one job with the same payload per queue.
- [**158**Star][4y] [Go] [vyrus001/go-mimikatz](https://github.com/vyrus001/go-mimikatz) A wrapper around a pre-compiled version of the Mimikatz executable for the purpose of anti-virus evasion.
-- [**158**Star][2y] [Java] [the404hacking/androrat](https://github.com/the404hacking/androrat) AndroRAT | Remote Administrator Tool for Android OS Hacking
+- [**158**Star][4y] [Shell] [theresalu/rspiducky](https://github.com/theresalu/rspiducky)
- [**158**Star][8m] [C] [tboox/itrace](https://github.com/tboox/itrace) Trace objc method call for ios and mac
-- [**158**Star][29d] [F#] [softsec-kaist/codealchemist](https://github.com/softsec-kaist/codealchemist) Semantics-aware Code Generation for Finding JS engine Vulnerabilities
-- [**158**Star][2m] [Shell] [securityriskadvisors/vectr](https://github.com/securityriskadvisors/vectr) VECTR is a tool that facilitates tracking of your red and blue team testing activities to measure detection and prevention capabilities across different attack scenarios
- [**158**Star][2y] [HTML] [secmob/pwnfest2016](https://github.com/secmob/pwnfest2016) full exploit of pwnfest2016, slide and full text of syscan2017
-- [**158**Star][9m] [Py] [sch3m4/androidpatternlock](https://github.com/sch3m4/androidpatternlock) A little Python tool to crack the Pattern Lock on Android devices
-- [**158**Star][13d] [Batchfile] [pyn3rd/cve-2019-0232](https://github.com/pyn3rd/cve-2019-0232) Apache Tomcat Remote Code Execution on Windows
+- [**158**Star][5m] [samanl33t/awesome-mainframe-hacking](https://github.com/samanl33t/awesome-mainframe-hacking)
+- [**158**Star][15d] [Batchfile] [pyn3rd/cve-2019-0232](https://github.com/pyn3rd/cve-2019-0232) Apache Tomcat Remote Code Execution on Windows
- [**158**Star][2y] [Py] [phishai/phish-ai-api](https://github.com/phishai/phish-ai-api) phish.ai 公开和私有的API接口, Python编写
-- [**158**Star][2y] [C] [phhusson/super-bootimg](https://github.com/phhusson/super-bootimg) Tools to edit Android boot.img. NDK buildable, to be usable in an update.zip
- [**158**Star][9m] [Shell] [nullarray/intrec-pack](https://github.com/nullarray/intrec-pack) Intelligence and Reconnaissance Package/Bundle installer.
-- [**158**Star][2m] [Py] [nforest/droidimg](https://github.com/nforest/droidimg) Android/Linux vmlinux loader
- [**158**Star][1y] [Py] [musicmancorley/briarids](https://github.com/musicmancorley/briarids) An All-In-One home intrusion detection system (IDS) solution for the Raspberry PI.
-- [**158**Star][3m] [Go] [lukasikic/subzy](https://github.com/lukasikic/subzy) Subdomain takeover vulnerability checker
- [**158**Star][2y] [Py] [kuburan/txtool](https://github.com/kuburan/txtool) an easy pentesting tool.
-- [**158**Star][5m] [JS] [k4m4/dcipher-cli](https://github.com/k4m4/dcipher-cli) Crack hashes using online rainbow & lookup table attack services, right from your terminal
- [**158**Star][1y] [joychou93/sks](https://github.com/joychou93/sks) Security Knowledge Structure(安全知识汇总)
+- [**158**Star][2m] [C#] [jlospinoso/beamgun](https://github.com/jlospinoso/beamgun) A rogue-USB-device defeat program for Windows.
- [**158**Star][2y] [Py] [jeffball55/rop_compiler](https://github.com/jeffball55/rop_compiler) An open source, multi-architecture ROP compiler written in python
-- [**158**Star][3m] [C#] [hunniccyber/sharpsniper](https://github.com/hunniccyber/sharpsniper) Find specific users in active directory via their username and logon IP address
+- [**158**Star][2y] [javierolmedo/shodan-filters](https://github.com/javierolmedo/shodan-filters) A list of shodan filters
+- [**158**Star][9d] [Py] [itsmehacker/darkscrape](https://github.com/itsmehacker/darkscrape) OSINT Tool For Scraping Dark Websites
+- [**158**Star][3m] [C++] [ion28/bluespawn](https://github.com/ion28/bluespawn) Windows-based Active Defense and EDR tool to empower Blue Teams
- [**158**Star][1y] [Py] [hadiasghari/pyasn](https://github.com/hadiasghari/pyasn) Python IP address to Autonomous System Number lookup module. (Supports fast local lookups, and historical lookups using archived BGP dumps.)
- [**158**Star][3y] [Java] [googlecloudplatform/endpoints-codelab-android](https://github.com/googlecloudplatform/endpoints-codelab-android) endpoints-codelab-android
-- [**158**Star][1m] [LLVM] [galoisinc/reopt](https://github.com/galoisinc/reopt) A tool for analyzing x86-64 binaries.
+- [**158**Star][7d] [LLVM] [galoisinc/reopt](https://github.com/galoisinc/reopt) A tool for analyzing x86-64 binaries.
- [**158**Star][5y] [C] [fuzion24/androidobfuscation-ndk](https://github.com/fuzion24/androidobfuscation-ndk) Example of obfuscating an Android NDK project using O-LLVM
-- [**157**Star][22d] [JS] [paperseller/chn-iplist](https://github.com/paperseller/chn-iplist) Chnroutes rules for routers、Shadowrocket、Quantumult、Kitsunebi、acl、BifrostV、v2rayNG、clash、pac、v2ray config file.
-- [**157**Star][6m] [PowerShell] [nickrod518/powershell-scripts](https://github.com/nickrod518/powershell-scripts) PowerShell scripts ranging from SCCM, MSO, AD, and other corporate enterprise uses... to sending cat facts to coworkers.
-- [**157**Star][1y] [Go] [remeh/sizedwaitgroup](https://github.com/remeh/sizedwaitgroup) SizedWaitGroup has the same role and close to the same API as the Golang sync.WaitGroup but it adds a limit on the amount of goroutines started concurrently.
-- [**157**Star][4y] [Shell] [theresalu/rspiducky](https://github.com/theresalu/rspiducky)
+- [**158**Star][1y] [C++] [doublelabyrinth/010editor-keygen](https://github.com/doublelabyrinth/010editor-keygen) A keygen for 010Editor
+- [**158**Star][4y] [Py] [crown-prince/python_poc](https://github.com/crown-prince/python_poc) 一款python编写的Web安全检测PoC&&EXP框架
+- [**158**Star][2m] [Py] [c0rvax/project-black](https://github.com/c0rvax/project-black) Pentest/BugBounty progress control with scanning modules
+- [**158**Star][4y] [Py] [blazeinfosec/bt2](https://github.com/blazeinfosec/bt2) 电报后门,使用电报做C&C 服务器
+- [**158**Star][1y] [Py] [bayotop/off-by-slash](https://github.com/bayotop/off-by-slash) off-by-slash: Bupr扩展, 检测利用Nginx错误配置导致的重名遍历(alias traversal)
+- [**158**Star][1m] [C#] [andrewlock/netescapades.aspnetcore.securityheaders](https://github.com/andrewlock/netescapades.aspnetcore.securityheaders) Small package to allow adding security headers to ASP.NET Core websites
+- [**158**Star][2y] [Py] [alephsecurity/abootool](https://github.com/alephsecurity/abootool) abootool:基于静态知识(从bootloader 镜像中提取的字符串)动态 fuzz 隐藏的 fastboot OEM 指令
+- [**157**Star][16d] [C++] [lifting-bits/rellic](https://github.com/lifting-bits/rellic) Rellic produces goto-free C output from LLVM bitcode
+- [**157**Star][6m] [Py] [ecstatic-nobel/osweep](https://github.com/ecstatic-nobel/OSweep) Don't Just Search OSINT. Sweep It.
+- [**157**Star][1y] [Py] [ultrasecurity/webkiller](https://github.com/ultrasecurity/webkiller) 多功能渗透测试辅助脚本
+- [**157**Star][7m] [JS] [tidesec/proxy_pool](https://github.com/tidesec/proxy_pool) Proxy_Pool(代理资源池),一个小巧的代理ip抓取+评估+存储+展示的一体化的工具,包括了web展示和接口。
+- [**157**Star][3y] [Py] [theevilbit/exploit_generator](https://github.com/theevilbit/exploit_generator) Automated Exploit generation with WinDBG
- [**157**Star][2y] [swannman/ircapabilities](https://github.com/swannman/ircapabilities) Incident Response Hierarchy of Needs
-- [**157**Star][5m] [samanl33t/awesome-mainframe-hacking](https://github.com/samanl33t/awesome-mainframe-hacking)
+- [**157**Star][2y] [C] [spajed/processrefund](https://github.com/spajed/processrefund) An attempt at Process Doppelgänging
+- [**157**Star][3m] [PS] [shiva108/ctf-notes](https://github.com/shiva108/ctf-notes) Everything needed for doing CTFs
+- [**157**Star][5m] [Rust] [rust-fuzz/honggfuzz-rs](https://github.com/rust-fuzz/honggfuzz-rs) Fuzz your Rust code with Google-developed Honggfuzz !
- [**157**Star][4y] [C#] [radiowar/nfcgui](https://github.com/radiowar/nfcgui) GUI tool for NFC protocol analysis
-- [**157**Star][24d] [C++] [mxmssh/manul](https://github.com/mxmssh/manul) Manul is a coverage-guided parallel fuzzer for open-source and blackbox binaries on Windows, Linux and MacOS
+- [**157**Star][1y] [C++] [openats/openats](https://github.com/openats/openats) 天线追踪系统
+- [**157**Star][2m] [C++] [nitrokey/nitrokey-app](https://github.com/nitrokey/nitrokey-app) Nitrokey's Application (Win, Linux, Mac)
- [**157**Star][6m] [mrmugiwara/ctf-tools](https://github.com/mrmugiwara/ctf-tools) Useful CTF Tools
-- [**157**Star][1y] [JS] [logicalhacking/dvhma](https://github.com/logicalhacking/dvhma) Damn Vulnerable Hybrid Mobile App (DVHMA) is an hybrid mobile app (for Android) that intentionally contains vulnerabilities.
+- [**157**Star][2y] [C] [lctf/lctf2017](https://github.com/lctf/lctf2017) Source code, writeups and exps in LCTF2017.
+- [**157**Star][6m] [C] [kkamagui/shadow-box-for-x86](https://github.com/kkamagui/shadow-box-for-x86) Lightweight and Practical Kernel Protector for x86 (Presented at BlackHat Asia 2017/2018, beVX 2018 and HITBSecConf 2017)
- [**157**Star][8y] [C++] [kavika13/remcom](https://github.com/kavika13/remcom) Remote Command Executor: A OSS replacement for PsExec and RunAs - or Telnet without having to install a server. Take your pick :)
- [**157**Star][3y] [HTML] [jonnyhightower/neet](https://github.com/jonnyhightower/neet) Neet - Network Enumeration and Exploitation Tool
- [**157**Star][2y] [Py] [joker25000/optiva-framework](https://github.com/joker25000/optiva-framework) Optiva-Framework
-- [**157**Star][2m] [C#] [jlospinoso/beamgun](https://github.com/jlospinoso/beamgun) A rogue-USB-device defeat program for Windows.
-- [**157**Star][2y] [javierolmedo/shodan-filters](https://github.com/javierolmedo/shodan-filters) A list of shodan filters
-- [**157**Star][11d] [Py] [itsmehacker/darkscrape](https://github.com/itsmehacker/darkscrape) OSINT Tool For Scraping Dark Websites
+- [**157**Star][2y] [Py] [galkan/flashlight](https://github.com/galkan/flashlight) Pentesters spend too much time during information gathering phase. Flashlight (Fener) provides services to scan network/ports and gather information rapidly on target networks. So Flashlight should be the choice to automate discovery step during a penetration test. In this article, usage of Flashligh application will be explained.
+- [**157**Star][4m] [C++] [fritzone/obfy](https://github.com/fritzone/obfy) A tiny C++ obfuscation framework
+- [**157**Star][3y] [Py] [facert/github_search](https://github.com/facert/github_search) 根据 keywords 搜索 github 上面的 repos, 并通过 web 展示
- [**157**Star][9y] [C] [comex/star](https://github.com/comex/star) the code behind the second incarnation of jailbreakme.com
-- [**157**Star][4y] [Py] [blazeinfosec/bt2](https://github.com/blazeinfosec/bt2) 电报后门,使用电报做C&C 服务器
-- [**157**Star][13d] [Py] [angr/heaphopper](https://github.com/angr/heaphopper) HeapHopper is a bounded model checking framework for Heap-implementations
-- [**157**Star][2y] [Py] [alephsecurity/abootool](https://github.com/alephsecurity/abootool) abootool:基于静态知识(从bootloader 镜像中提取的字符串)动态 fuzz 隐藏的 fastboot OEM 指令
-- [**156**Star][14d] [C++] [lifting-bits/rellic](https://github.com/lifting-bits/rellic) Rellic produces goto-free C output from LLVM bitcode
+- [**157**Star][15d] [Py] [angr/heaphopper](https://github.com/angr/heaphopper) HeapHopper is a bounded model checking framework for Heap-implementations
+- [**157**Star][3y] [Py] [4w4k3/umbrella](https://github.com/4w4k3/umbrella) 用于渗透的File Dropper
+- [**156**Star][24d] [SourcePawn] [splewis/csgo-practice-mode](https://github.com/splewis/csgo-practice-mode) CS:GO Sourcemod plugin for private team/individual practice servers
- [**156**Star][3y] [Go] [wille/cry](https://github.com/wille/cry) Cross platform PoC ransomware written in Go
-- [**156**Star][1y] [Py] [ultrasecurity/webkiller](https://github.com/ultrasecurity/webkiller) 多功能渗透测试辅助脚本
+- [**156**Star][3y] [C++] [zer0mem0ry/runpe](https://github.com/zer0mem0ry/runpe) Code that allows running another windows PE in the same address space as the host process.
+- [**156**Star][3y] [Ruby] [waterlink/rack-reverse-proxy](https://github.com/waterlink/rack-reverse-proxy) A Reverse Proxy for Rack
- [**156**Star][2m] [SystemVerilog] [ufrisk/pcileech-fpga](https://github.com/ufrisk/pcileech-fpga) FPGA 模块,可与 PCILeech DMA(Direct Memory Access )攻击软件组合使用
-- [**156**Star][17d] [AGS Script] [tinyfpga/tinyfpga-bootloader](https://github.com/tinyfpga/tinyfpga-bootloader) An open source USB bootloader for FPGAs
-- [**156**Star][2y] [C] [spajed/processrefund](https://github.com/spajed/processrefund) An attempt at Process Doppelgänging
+- [**156**Star][2y] [Py] [tintinweb/striptls](https://github.com/tintinweb/striptls) proxy poc implementation of STARTTLS stripping attacks
- [**156**Star][11m] [C] [soldierx/libhijack](https://github.com/soldierx/libhijack) Runtime Process Infection Made Easy
-- [**156**Star][4m] [Rust] [rust-fuzz/honggfuzz-rs](https://github.com/rust-fuzz/honggfuzz-rs) Fuzz your Rust code with Google-developed Honggfuzz !
- [**156**Star][2y] [C++] [rossja/tinynuke](https://github.com/rossja/tinynuke) zeus-style banking trojan
-- [**156**Star][1y] [C++] [openats/openats](https://github.com/openats/openats) 天线追踪系统
+- [**156**Star][3m] [Py] [rhinosecuritylabs/cloud-security-research](https://github.com/rhinosecuritylabs/cloud-security-research) Cloud-related research releases from the Rhino Security Labs team.
+- [**156**Star][2y] [PS] [psconfeu/2018](https://github.com/psconfeu/2018) PowerShell Conference Europe 2018 Slides and Demo Scripts
+- [**156**Star][1y] [YARA] [mikesxrs/open-source-yara-rules](https://github.com/mikesxrs/open-source-yara-rules) YARA Rules I come across on the internet
- [**156**Star][2y] [C++] [mharjac/bad_ducky](https://github.com/mharjac/bad_ducky) Rubber Ducky compatible clone based on CJMCU BadUSB HW.
+- [**156**Star][6m] [Shell] [maldevel/blue-team](https://github.com/maldevel/blue-team) Blue Team Scripts
+- [**156**Star][1y] [Py] [madengr/ham2mon](https://github.com/madengr/ham2mon) GNU Radio based SDR scanner for narrow band FM demodulation
+- [**156**Star][2y] [Go] [ls0f/gortcp](https://github.com/ls0f/gortcp) 内网穿透、远程文件上传下载、命令执行
- [**156**Star][1y] [Java] [lightless233/java-unserialization-study](https://github.com/lightless233/java-unserialization-study) QAQ Just study unserialize vulnerabilities in Java :)
-- [**156**Star][1m] [JS] [lelinhtinh/de4js](https://github.com/lelinhtinh/de4js) JavaScript Deobfuscator and Unpacker
-- [**156**Star][2y] [C] [lctf/lctf2017](https://github.com/lctf/lctf2017) Source code, writeups and exps in LCTF2017.
-- [**156**Star][6m] [C] [kkamagui/shadow-box-for-x86](https://github.com/kkamagui/shadow-box-for-x86) Lightweight and Practical Kernel Protector for x86 (Presented at BlackHat Asia 2017/2018, beVX 2018 and HITBSecConf 2017)
- [**156**Star][9y] [Py] [jonty/idiocy](https://github.com/jonty/idiocy) Idiocy is a warning shot to people browsing the internet insecurely.
-- [**156**Star][3m] [C++] [ion28/bluespawn](https://github.com/ion28/bluespawn) Windows-based Active Defense and EDR tool to empower Blue Teams
-- [**156**Star][1y] [TypeScript] [handsomeone/scout](https://github.com/handsomeone/scout) 可能是东半球最灵活的 URL 监控系统
-- [**156**Star][2y] [Py] [galkan/flashlight](https://github.com/galkan/flashlight) Pentesters spend too much time during information gathering phase. Flashlight (Fener) provides services to scan network/ports and gather information rapidly on target networks. So Flashlight should be the choice to automate discovery step during a penetration test. In this article, usage of Flashligh application will be explained.
+- [**156**Star][2m] [JS] [interference-security/frida-scripts](https://github.com/interference-security/frida-scripts) Frida Scripts
+- [**156**Star][18d] [C] [hfiref0x/ntcall64](https://github.com/hfiref0x/ntcall64) Windows NT x64 syscall fuzzer
+- [**156**Star][1m] [JS] [henices/chrome-proxy-helper](https://github.com/henices/chrome-proxy-helper) Chrome PROXY extension, set proxy for Chrome browser
+- [**156**Star][1y] [TS] [handsomeone/scout](https://github.com/handsomeone/scout) 可能是东半球最灵活的 URL 监控系统
+- [**156**Star][23d] [Py] [gprmax/gprmax](https://github.com/gprmax/gprmax) gprMax is open source software that simulates electromagnetic wave propagation using the Finite-Difference Time-Domain (FDTD) method for numerical modelling of Ground Penetrating Radar (GPR)
+- [**156**Star][3y] [C++] [gbonacini/cve-2016-5195](https://github.com/gbonacini/cve-2016-5195) A CVE-2016-5195 exploit example.
- [**156**Star][1y] [Py] [fireeye/geologonalyzer](https://github.com/fireeye/geologonalyzer) GeoLogonalyzer is a utility to analyze remote access logs for anomalies such as travel feasibility and data center sources.
- [**156**Star][3y] [Py] [fire30/ps4-3.55-code-execution-poc](https://github.com/fire30/ps4-3.55-code-execution-poc)
-- [**156**Star][3y] [Py] [facert/github_search](https://github.com/facert/github_search) 根据 keywords 搜索 github 上面的 repos, 并通过 web 展示
- [**156**Star][8m] [dsignr/disallowed-usernames](https://github.com/dsignr/disallowed-usernames) An open source database of disallowed usernames for software projects to prevent phishing and impersonation.
+- [**156**Star][2d] [C#] [djkaty/il2cppinspector](https://github.com/djkaty/il2cppinspector) The easy way to extract types and metadata from Unity IL2CPP binaries
- [**156**Star][9m] [dckc/awesome-ocap](https://github.com/dckc/awesome-ocap) Awesome Object Capabilities andCapability-based Security
-- [**156**Star][4y] [Py] [crown-prince/python_poc](https://github.com/crown-prince/python_poc) 一款python编写的Web安全检测PoC&&EXP框架
-- [**156**Star][8m] [Visual Basic] [christophetd/spoofing-office-macro](https://github.com/christophetd/spoofing-office-macro) a VBA macro spawning a process with a spoofed parent and command line.
-- [**156**Star][6m] [Objective-C] [chichou/sploits](https://github.com/chichou/sploits) CVE-2018-4310
+- [**156**Star][8m] [Visual Basic .NET] [christophetd/spoofing-office-macro](https://github.com/christophetd/spoofing-office-macro) a VBA macro spawning a process with a spoofed parent and command line.
+- [**156**Star][6m] [ObjC] [chichou/sploits](https://github.com/chichou/sploits) CVE-2018-4310
- [**156**Star][4m] [Py] [certcc/trommel](https://github.com/certcc/trommel) Sift Through Embedded Device Files to Identify Potential Vulnerable Indicators
-- [**156**Star][11m] [Go] [botherder/kraken](https://github.com/botherder/kraken) Cross-platform Yara scanner written in Go
+- [**156**Star][2m] [Go] [c-sto/recursebuster](https://github.com/c-sto/recursebuster) rapid content discovery tool for recursively querying webservers, handy in pentesting and web application assessments
- [**156**Star][4y] [Py] [borjamerino/pazuzu](https://github.com/borjamerino/pazuzu) Reflective DLL to run binaries from memory
- [**156**Star][2y] [PHP] [bo0om/cve-2017-5124](https://github.com/bo0om/cve-2017-5124) Chrome < 62 uxss exploit (CVE-2017-5124)
-- [**156**Star][1y] [Py] [bayotop/off-by-slash](https://github.com/bayotop/off-by-slash) off-by-slash: Bupr扩展, 检测利用Nginx错误配置导致的重名遍历(alias traversal)
- [**156**Star][2y] [C] [armadito/armadito-av](https://github.com/armadito/armadito-av) Armadito antivirus main repository
-- [**156**Star][3y] [Py] [4w4k3/umbrella](https://github.com/4w4k3/umbrella) 用于渗透的File Dropper
-- [**155**Star][22d] [C#] [hmbsbige/nattypetester](https://github.com/hmbsbige/nattypetester) 测试当前网络的NAT类型(STUN)
+- [**156**Star][1y] [C#] [anthemtotheego/sharpcradle](https://github.com/anthemtotheego/sharpcradle)
+- [**156**Star][13d] [Scala] [albuch/sbt-dependency-check](https://github.com/albuch/sbt-dependency-check) SBT Plugin for OWASP DependencyCheck. Monitor your dependencies and report if there are any publicly known vulnerabilities (e.g. CVEs).
+- [**155**Star][2m] [Go] [ihciah/go-shadowsocks-magic](https://github.com/ihciah/go-shadowsocks-magic) A shadowsocks implementation in golang with Multi-connection Acceleration
- [**155**Star][11m] [feeicn/vulture](https://github.com/feeicn/vulture) 分布式近实时全覆盖资产和漏洞扫描器
-- [**155**Star][6m] [Py] [ecstatic-nobel/osweep](https://github.com/ecstatic-nobel/OSweep) Don't Just Search OSINT. Sweep It.
+- [**155**Star][3m] [C] [ajkhoury/uefi-bootkit](https://github.com/ajkhoury/UEFI-Bootkit) A small bootkit which does not rely on x64 assembly.
- [**155**Star][2y] [Py] [crytic/ida-evm](https://github.com/crytic/ida-evm) IDA Processor Module for the Ethereum Virtual Machine (EVM)
-- [**155**Star][3y] [C++] [zer0mem0ry/runpe](https://github.com/zer0mem0ry/runpe) Code that allows running another windows PE in the same address space as the host process.
+- [**155**Star][3y] [Py] [z0noxz/powerstager](https://github.com/z0noxz/powerstager) powerstager:创建可执行文件,用于下载PowerShell Payload,将其加载到内存,并使用混淆的EC方法运行
- [**155**Star][3y] [C] [x0rz/ssh-honeypot](https://github.com/x0rz/ssh-honeypot) Fake sshd that logs ip addresses, usernames, and passwords.
-- [**155**Star][3y] [Ruby] [waterlink/rack-reverse-proxy](https://github.com/waterlink/rack-reverse-proxy) A Reverse Proxy for Rack
-- [**155**Star][7m] [JS] [tidesec/proxy_pool](https://github.com/tidesec/proxy_pool) Proxy_Pool(代理资源池),一个小巧的代理ip抓取+评估+存储+展示的一体化的工具,包括了web展示和接口。
-- [**155**Star][3y] [Py] [theevilbit/exploit_generator](https://github.com/theevilbit/exploit_generator) Automated Exploit generation with WinDBG
+- [**155**Star][4m] [Shell] [weaveworks/tcptracer-bpf](https://github.com/weaveworks/tcptracer-bpf) eBPF program using kprobes to trace TCP events without run-time compilation dependencies
+- [**155**Star][8m] [Shell] [viralmaniar/i-see-you](https://github.com/viralmaniar/i-see-you) ISeeYou is a Bash and Javascript tool to find the exact location of the users during social engineering or phishing engagements. Using exact location coordinates an attacker can perform preliminary reconnaissance which will help them in performing further targeted attacks.
- [**155**Star][1y] [Py] [sublimelinter/sublimelinter-shellcheck](https://github.com/sublimelinter/sublimelinter-shellcheck) This linter plugin for SublimeLinter provides an interface to shellcheck.
+- [**155**Star][10d] [Java] [spring-cloud/spring-cloud-vault](https://github.com/spring-cloud/spring-cloud-vault) Configuration Integration with HashiCorp Vault
+- [**155**Star][4m] [Assembly] [smealum/butthax](https://github.com/smealum/butthax) lovense hush buttplug exploit chain
- [**155**Star][8m] [Common Lisp] [oblivia-simplex/roper](https://github.com/oblivia-simplex/roper) Return Oriented Programme Evolution with ROPER
+- [**155**Star][2m] [Py] [nucypher/pyumbral](https://github.com/nucypher/pyumbral) NuCypher's reference implementation of Umbral (threshold proxy re-encryption) using OpenSSL and Cryptography.io
- [**155**Star][4y] [Py] [n0tr00t/beehive](https://github.com/n0tr00t/beehive) Beehive is an open-source vulnerability detection framework based on Beebeeto-framework. Security researcher can use it to find vulnerability, exploits, subsequent attacks, etc.
-- [**155**Star][1y] [malwarearchaeology/attack](https://github.com/malwarearchaeology/attack) MITRE ATT&CK Windows Logging Cheat Sheets
-- [**155**Star][1y] [Py] [madengr/ham2mon](https://github.com/madengr/ham2mon) GNU Radio based SDR scanner for narrow band FM demodulation
-- [**155**Star][2y] [Go] [ls0f/gortcp](https://github.com/ls0f/gortcp) 内网穿透、远程文件上传下载、命令执行
-- [**155**Star][9m] [Ruby] [hatlord/snmpwn](https://github.com/hatlord/snmpwn) An SNMPv3 User Enumerator and Attack tool
-- [**155**Star][21d] [Py] [gprmax/gprmax](https://github.com/gprmax/gprmax) gprMax is open source software that simulates electromagnetic wave propagation using the Finite-Difference Time-Domain (FDTD) method for numerical modelling of Ground Penetrating Radar (GPR)
-- [**155**Star][4m] [C++] [fritzone/obfy](https://github.com/fritzone/obfy) A tiny C++ obfuscation framework
+- [**155**Star][4m] [mac4n6/presentations](https://github.com/mac4n6/presentations) Presentation Archives for my macOS and iOS Related Research
+- [**155**Star][27d] [Java] [itzsomebody/radon](https://github.com/itzsomebody/radon) A crappy Java bytecode obfuscator (meaning: not for production use)
+- [**155**Star][10m] [Ruby] [hatlord/snmpwn](https://github.com/hatlord/snmpwn) An SNMPv3 User Enumerator and Attack tool
- [**155**Star][7y] [evilcos/xss.swf](https://github.com/evilcos/xss.swf) a tiny tool for swf hacking, just browse it:)
- [**155**Star][3y] [JS] [escomplex/complexity-report](https://github.com/escomplex/complexity-report) **UNMAINTAINED** Software complexity analysis for JavaScript projects
+- [**155**Star][11m] [Py] [epsylon/cintruder](https://github.com/epsylon/cintruder) Captcha Intruder (CIntruder) is an automatic pentesting tool to bypass captchas.
- [**155**Star][6y] [C] [defuse/sockstress](https://github.com/defuse/sockstress) Sockstress (TCP DoS) implementation.
+- [**155**Star][2y] [Ruby] [chrislee35/passivedns-client](https://github.com/chrislee35/passivedns-client) passivedns-client provides a library and a query tool for querying several passive DNS providers
- [**155**Star][5y] [C] [arisada/midgetpack](https://github.com/arisada/midgetpack) midgetpack is a multiplatform secure ELF packer
-- [**155**Star][1y] [C#] [anthemtotheego/sharpcradle](https://github.com/anthemtotheego/sharpcradle)
-- [**155**Star][1m] [C#] [andrewlock/netescapades.aspnetcore.securityheaders](https://github.com/andrewlock/netescapades.aspnetcore.securityheaders) Small package to allow adding security headers to ASP.NET Core websites
-- [**155**Star][11d] [Scala] [albuch/sbt-dependency-check](https://github.com/albuch/sbt-dependency-check) SBT Plugin for OWASP DependencyCheck. Monitor your dependencies and report if there are any publicly known vulnerabilities (e.g. CVEs).
+- [**155**Star][11d] [Py] [antichown/subdomain-takeover](https://github.com/antichown/subdomain-takeover) Subdomain Takeover Scanner | Subdomain Takeover Tool | by 0x94
- [**155**Star][2m] [C] [airbus-seclab/crashos](https://github.com/airbus-seclab/crashos) crashos:一个极简的操作系统,通过创建畸形的系统配置,导致 hypervisor 崩溃,从而辅助 hypervisor 漏洞研究
-- [**154**Star][18d] [Java] [fuzzitdev/javafuzz](https://github.com/fuzzitdev/javafuzz) coverage guided fuzz testing for java
-- [**154**Star][3y] [Visual Basic] [mwsrc/plasmarat](https://github.com/mwsrc/PlasmaRAT) Remote Access Trojan(RAT), Miner, DDoS
-- [**154**Star][3y] [Py] [z0noxz/powerstager](https://github.com/z0noxz/powerstager) powerstager:创建可执行文件,用于下载PowerShell Payload,将其加载到内存,并使用混淆的EC方法运行
-- [**154**Star][4m] [Shell] [weaveworks/tcptracer-bpf](https://github.com/weaveworks/tcptracer-bpf) eBPF program using kprobes to trace TCP events without run-time compilation dependencies
+- [**154**Star][4d] [Py] [zeddyu/http-smuggling-lab](https://github.com/zeddyu/http-smuggling-lab) Use HTTP Smuggling Lab to learn HTTP Smuggling.
+- [**154**Star][3y] [Visual Basic .NET] [mwsrc/plasmarat](https://github.com/mwsrc/PlasmaRAT) Remote Access Trojan(RAT), Miner, DDoS
+- [**154**Star][7m] [C#] [wohlstand/destroy-windows-10-spying](https://github.com/wohlstand/destroy-windows-10-spying) Destroy Windows Spying tool
- [**154**Star][10m] [Py] [vulnerscom/zabbix-threat-control](https://github.com/vulnerscom/zabbix-threat-control) Zabbix vulnerability assessment plugin
-- [**154**Star][8m] [Shell] [viralmaniar/i-see-you](https://github.com/viralmaniar/i-see-you) ISeeYou is a Bash and Javascript tool to find the exact location of the users during social engineering or phishing engagements. Using exact location coordinates an attacker can perform preliminary reconnaissance which will help them in performing further targeted attacks.
-- [**154**Star][2y] [Py] [tintinweb/striptls](https://github.com/tintinweb/striptls) proxy poc implementation of STARTTLS stripping attacks
+- [**154**Star][6d] [Go] [ullaakut/nmap](https://github.com/ullaakut/nmap) Idiomatic nmap library for go developers
+- [**154**Star][4m] [threatexpress/malleable-c2](https://github.com/threatexpress/malleable-c2) Cobalt Strike Malleable C2 Design and Reference Guide
- [**154**Star][3y] [C] [stonedreamforest/naiheqiao](https://github.com/stonedreamforest/naiheqiao) open-source x86/x64 usermode anti-anti-debug plugin
-- [**154**Star][8d] [Java] [spring-cloud/spring-cloud-vault](https://github.com/spring-cloud/spring-cloud-vault) Configuration Integration with HashiCorp Vault
-- [**154**Star][4m] [Assembly] [smealum/butthax](https://github.com/smealum/butthax) lovense hush buttplug exploit chain
+- [**154**Star][11m] [C] [sjvermeu/cvechecker](https://github.com/sjvermeu/cvechecker) Command-line utility to scan the system and report on potential vulnerabilities, based on public CVE data
- [**154**Star][2y] [Py] [secretsquirrel/fido](https://github.com/secretsquirrel/fido) Teaching old shellcode new tricks
- [**154**Star][2y] [C] [scen/osxinj](https://github.com/scen/osxinj) osx dylib injection
-- [**154**Star][2m] [Py] [rhinosecuritylabs/cloud-security-research](https://github.com/rhinosecuritylabs/cloud-security-research) Cloud-related research releases from the Rhino Security Labs team.
- [**154**Star][3m] [Java] [rednaga/axmlprinter](https://github.com/rednaga/axmlprinter) Library for parsing and printing compiled Android manifest files
- [**154**Star][2m] [Java] [reddr/libscout](https://github.com/reddr/libscout) Third-party library detector for Java/Android apps
-- [**154**Star][16d] [Pascal] [passbyyou888/zserver4d](https://github.com/passbyyou888/zserver4d) ZServer4D 是一套从商业项目剥离而出的云服务器中间件,可以承载百万级的分布式负载服务,并且支持IoT及内网穿透
+- [**154**Star][13d] [Shell] [realtho/partyloud](https://github.com/realtho/partyloud) A simple tool to generate fake web browsing and mitigate tracking
+- [**154**Star][5m] [Py] [ragibson/steganography](https://github.com/ragibson/steganography) Least Significant Bit Steganography for bitmap images (.bmp and .png), WAV sound files, and byte sequences. Simple LSB Steganalysis (LSB extraction) for bitmap images.
+- [**154**Star][5d] [Pascal] [passbyyou888/zserver4d](https://github.com/passbyyou888/zserver4d) ZServer4D 是一套从商业项目剥离而出的云服务器中间件,可以承载百万级的分布式负载服务,并且支持IoT及内网穿透
- [**154**Star][2y] [PHP] [paralax/lfi-labs](https://github.com/paralax/lfi-labs) small set of PHP scripts to practice exploiting LFI, RFI and CMD injection vulns
-- [**154**Star][2m] [Py] [nucypher/pyumbral](https://github.com/nucypher/pyumbral) NuCypher's reference implementation of Umbral (threshold proxy re-encryption) using OpenSSL and Cryptography.io
- [**154**Star][2m] [Rust] [net-reflow/reflow](https://github.com/net-reflow/reflow) Content-routable socks5 proxy switcher for your entire LAN.
- [**154**Star][2y] [Py] [moyix/creddump](https://github.com/moyix/creddump) Automatically exported from code.google.com/p/creddump
-- [**154**Star][1y] [YARA] [mikesxrs/open-source-yara-rules](https://github.com/mikesxrs/open-source-yara-rules) YARA Rules I come across on the internet
-- [**154**Star][6m] [Shell] [maldevel/blue-team](https://github.com/maldevel/blue-team) Blue Team Scripts
-- [**154**Star][4m] [mac4n6/presentations](https://github.com/mac4n6/presentations) Presentation Archives for my macOS and iOS Related Research
+- [**154**Star][6d] [Go] [mimoo/disco](https://github.com/mimoo/disco) a protocol to encrypt communications and a cryptographic library based on Disco
- [**154**Star][4y] [Py] [kbandla/immunitydebugger](https://github.com/kbandla/immunitydebugger) ImmunityDebugger
-- [**154**Star][25d] [Java] [itzsomebody/radon](https://github.com/itzsomebody/radon) A crappy Java bytecode obfuscator (meaning: not for production use)
-- [**154**Star][16d] [C] [hfiref0x/ntcall64](https://github.com/hfiref0x/ntcall64) Windows NT x64 syscall fuzzer
-- [**154**Star][11m] [Py] [epsylon/cintruder](https://github.com/epsylon/cintruder) Captcha Intruder (CIntruder) is an automatic pentesting tool to bypass captchas.
-- [**154**Star][2y] [Ruby] [chrislee35/passivedns-client](https://github.com/chrislee35/passivedns-client) passivedns-client provides a library and a query tool for querying several passive DNS providers
-- [**154**Star][2m] [Py] [c0rvax/project-black](https://github.com/c0rvax/project-black) Pentest/BugBounty progress control with scanning modules
-- [**154**Star][2m] [CSS] [7dog7/bottleneckosmosis](https://github.com/7dog7/bottleneckosmosis) 瓶颈渗透,web渗透,red红队,fuzz param,注释,js字典,ctf
+- [**154**Star][4m] [AutoIt] [jschicht/rawcopy](https://github.com/jschicht/rawcopy) copy files off NTFS volumes by using low level disk reading method
+- [**154**Star][10m] [Shell] [joukewitteveen/netctl](https://github.com/joukewitteveen/netctl) Profile based systemd network management
+- [**154**Star][27d] [Go] [jollheef/out-of-tree](https://github.com/jollheef/out-of-tree) out-of-tree kernel {module, exploit} development tool
+- [**154**Star][2d] [Py] [nccgroup/keimpx](https://github.com/nccgroup/keimpx) Check for valid credentials across a network over SMB
+- [**154**Star][2y] [C] [ifding/radare2-tutorial](https://github.com/ifding/radare2-tutorial) Reverse Engineering using Radare2
+- [**154**Star][29d] [hl2guide/all-in-one-customized-adblock-list](https://github.com/hl2guide/all-in-one-customized-adblock-list) An all-in-one adblock list that thoroughly blocks trackers, popup ads, ads, unwanted cookies, fake news, cookie warning messages, unwanted comment sections, crypto-coin mining, YouTube clutter, Twitter guff and social network hassles. Development is halted at version 2.8.
+- [**154**Star][9m] [C++] [changeofpace/self-remapping-code](https://github.com/changeofpace/self-remapping-code) This program remaps its image to prevent the page protection of pages contained in the image from being modified via NtProtectVirtualMemory.
+- [**154**Star][7m] [C#] [anthemtotheego/sharpexec](https://github.com/anthemtotheego/sharpexec) an offensive security C# tool designed to aid with lateral movement
- [**154**Star][2y] [Ruby] [0x09al/cve-2018-8174-msf](https://github.com/0x09al/cve-2018-8174-msf) CVE-2018-8174 - VBScript memory corruption exploit.
- [**153**Star][4y] [Go] [inconshreveable/go-tunnel](https://github.com/inconshreveable/go-tunnel) [DEPRECATED] Tunnel to localhost as a library
-- [**153**Star][22d] [SourcePawn] [splewis/csgo-practice-mode](https://github.com/splewis/csgo-practice-mode) CS:GO Sourcemod plugin for private team/individual practice servers
-- [**153**Star][3m] [C] [ajkhoury/uefi-bootkit](https://github.com/ajkhoury/UEFI-Bootkit) A small bootkit which does not rely on x64 assembly.
+- [**153**Star][11m] [CSS] [kali-docs-cn/kali-linux-web-pentest-cookbook-zh](https://github.com/kali-docs-cn/kali-linux-web-pentest-cookbook-zh)
+- [**153**Star][2y] [Java] [zjlywjh001/phrackctf-platform-team](https://github.com/zjlywjh001/phrackctf-platform-team) CTF platfrom(Team Version) developed by Jarvis from Phrack Team. 做一个功能最全的CTF平台。
+- [**153**Star][3m] [HTML] [zer0yu/berserker](https://github.com/zer0yu/berserker) A list of useful payloads for Web Application Security and Pentest/CTF
+- [**153**Star][3y] [ysrc/androidobfusedictionary](https://github.com/ysrc/androidobfusedictionary) Android ProGuard变态混淆字典
- [**153**Star][1y] [voidfyoo/cve-2018-3191](https://github.com/voidfyoo/cve-2018-3191) CVE-2018-3191 payload generator
+- [**153**Star][8m] [valdikss/super-uefiinsecureboot-disk](https://github.com/valdikss/super-uefiinsecureboot-disk) Super UEFIinSecureBoot Disk: Boot any OS or .efi file without disabling UEFI Secure Boot
- [**153**Star][3y] [Ruby] [urbanadventurer/username-anarchy](https://github.com/urbanadventurer/username-anarchy) Username tools for penetration testing
- [**153**Star][3m] [Py] [trustedsec/ridenum](https://github.com/trustedsec/ridenum) Rid_enum is a null session RID cycle attack for brute forcing domain controllers.
-- [**153**Star][4m] [threatexpress/malleable-c2](https://github.com/threatexpress/malleable-c2) Cobalt Strike Malleable C2 Design and Reference Guide
-- [**153**Star][11m] [C] [sjvermeu/cvechecker](https://github.com/sjvermeu/cvechecker) Command-line utility to scan the system and report on potential vulnerabilities, based on public CVE data
-- [**153**Star][2m] [PowerShell] [shiva108/ctf-notes](https://github.com/shiva108/ctf-notes) Everything needed for doing CTFs
+- [**153**Star][2y] [ASP] [testsecer/webshell](https://github.com/testsecer/webshell) 这是一个WebShell收集项目
- [**153**Star][4y] [Py] [samyoyo/weeman](https://github.com/samyoyo/weeman) HTTP Server for phishing in Python
-- [**153**Star][2m] [Py] [renatahodovan/fuzzinator](https://github.com/renatahodovan/fuzzinator) Fuzzinator Random Testing Framework
-- [**153**Star][2y] [PowerShell] [psconfeu/2018](https://github.com/psconfeu/2018) PowerShell Conference Europe 2018 Slides and Demo Scripts
+- [**153**Star][3d] [Py] [renatahodovan/fuzzinator](https://github.com/renatahodovan/fuzzinator) Fuzzinator Random Testing Framework
- [**153**Star][10m] [Ruby] [palkan/n_plus_one_control](https://github.com/palkan/n_plus_one_control) RSpec and Minitest matchers to prevent N+1 queries problem
- [**153**Star][2y] [HTML] [mpirnat/lets-be-bad-guys](https://github.com/mpirnat/lets-be-bad-guys) A deliberately-vulnerable website and exercises for teaching about the OWASP Top 10
-- [**153**Star][1m] [Go] [mimoo/disco](https://github.com/mimoo/disco) a protocol to encrypt communications and a cryptographic library based on Disco
- [**153**Star][8m] [Py] [k0retux/fuddly](https://github.com/k0retux/fuddly) Fuzzing/数据操纵(Data Manipulation)框架
-- [**153**Star][4m] [AutoIt] [jschicht/rawcopy](https://github.com/jschicht/rawcopy) copy files off NTFS volumes by using low level disk reading method
-- [**153**Star][25d] [Go] [jollheef/out-of-tree](https://github.com/jollheef/out-of-tree) out-of-tree kernel {module, exploit} development tool
-- [**153**Star][11d] [Py] [inquisb/keimpx](https://github.com/inquisb/keimpx) Check for valid credentials across a network over SMB
-- [**153**Star][9m] [C++] [changeofpace/self-remapping-code](https://github.com/changeofpace/self-remapping-code) This program remaps its image to prevent the page protection of pages contained in the image from being modified via NtProtectVirtualMemory.
-- [**153**Star][7m] [C#] [anthemtotheego/sharpexec](https://github.com/anthemtotheego/sharpexec) an offensive security C# tool designed to aid with lateral movement
+- [**153**Star][2y] [JS] [cazala/react-coin-hive](https://github.com/cazala/react-coin-hive) Mine cryptocurrency while your users haven't engaged with your content lately
+- [**153**Star][2y] [Py] [atlassian/localstack](https://github.com/atlassian/localstack)
- [**153**Star][12m] [Go] [adguardteam/adguarddns](https://github.com/adguardteam/adguarddns) Public DNS resolver that protects you from ad trackers
+- [**153**Star][5m] [Shell] [0xmitsurugi/gimmecredz](https://github.com/0xmitsurugi/gimmecredz) You're a #pentester and you totally pwn that linux box, congrats! Now what? You can launch gimmecredz.sh which will try to extract all passwords from known locations.
- [**153**Star][3y] [Makefile] [0x36/vpnpivot](https://github.com/0x36/vpnpivot) Explore the network using VPNPivot tool
-- [**152**Star][11m] [CSS] [kali-docs-cn/kali-linux-web-pentest-cookbook-zh](https://github.com/kali-docs-cn/kali-linux-web-pentest-cookbook-zh)
+- [**152**Star][7m] [Py] [vysecurity/linkedint](https://github.com/vysecurity/linkedint) LinkedIn Recon Tool
+- [**152**Star][12d] [C#] [vivami/sauroneye](https://github.com/vivami/sauroneye) Search tool to find specific files containing specific words, i.e. files containing passwords..
- [**152**Star][2y] [Py] [0xbing/wukong-agent](https://github.com/0xbing/wukong-agent) Web scan foundation framework
-- [**152**Star][2y] [Java] [zjlywjh001/phrackctf-platform-team](https://github.com/zjlywjh001/phrackctf-platform-team) CTF platfrom(Team Version) developed by Jarvis from Phrack Team. 做一个功能最全的CTF平台。
-- [**152**Star][3m] [HTML] [zer0yu/berserker](https://github.com/zer0yu/berserker) A list of useful payloads for Web Application Security and Pentest/CTF
-- [**152**Star][8m] [valdikss/super-uefiinsecureboot-disk](https://github.com/valdikss/super-uefiinsecureboot-disk) Super UEFIinSecureBoot Disk: Boot any OS or .efi file without disabling UEFI Secure Boot
+- [**152**Star][1y] [Py] [vanpersiexp/expcamera](https://github.com/vanpersiexp/expcamera) Exploit Netwave and GoAhead IP Camera
+- [**152**Star][6d] [Py] [thehive-project/cortex-analyzers](https://github.com/thehive-project/cortex-analyzers) Cortex Analyzers Repository
- [**152**Star][4y] [thecreeper/privacyfox](https://github.com/thecreeper/privacyfox) PrivacyFox tweaks various preferences in Firefox in order to enhance the privacy of users; it will also try to enforce these changes to maintain your privacy online.
-- [**152**Star][6m] [PowerShell] [stealthbits/poshkatz](https://github.com/stealthbits/poshkatz) PowerShell module for Mimikatz
+- [**152**Star][6m] [PS] [stealthbits/poshkatz](https://github.com/stealthbits/poshkatz) PowerShell module for Mimikatz
- [**152**Star][2y] [JS] [snooze6/fios](https://github.com/snooze6/fios) small proof of concept gui for auditing iOS applications based on objection
-- [**152**Star][5m] [Py] [ragibson/steganography](https://github.com/ragibson/steganography) Least Significant Bit Steganography for bitmap images (.bmp and .png), WAV sound files, and byte sequences. Simple LSB Steganalysis (LSB extraction) for bitmap images.
+- [**152**Star][7d] [Py] [shirosaidev/sharesniffer](https://github.com/shirosaidev/sharesniffer) 远程文件系统自动嗅探、挂载和爬取
+- [**152**Star][2m] [Py] [richiercyrus/venator](https://github.com/richiercyrus/venator) Venator is a python tool used to gather data for proactive detection of malicious activity on macOS devices.
+- [**152**Star][4d] [C] [pkroma/processhacker](https://github.com/pkroma/processhacker) A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware—mirror of
- [**152**Star][5y] [C++] [mothran/aflpin](https://github.com/mothran/aflpin) aflpin enables afl to fuzz blackbox binaries using a pin tool to trace execution branches.
- [**152**Star][2y] [Py] [laie/worldsfirstsha2vulnerability](https://github.com/laie/worldsfirstsha2vulnerability) Sha256 vulnerability for full rounds. Circular hash attack.
+- [**152**Star][3y] [C] [ixty/xarch_shellcode](https://github.com/ixty/xarch_shellcode) Cross Architecture Shellcode in C
- [**152**Star][7y] [Py] [intrepidusgroup/imdmtools](https://github.com/intrepidusgroup/imdmtools) Intrepidus Group's iOS MDM tools
-- [**152**Star][2m] [JS] [interference-security/frida-scripts](https://github.com/interference-security/frida-scripts) Frida Scripts
-- [**152**Star][2y] [C] [ifding/radare2-tutorial](https://github.com/ifding/radare2-tutorial) Reverse Engineering using Radare2
- [**152**Star][6m] [Objective-C++] [gaoshilei/mmplugin](https://github.com/gaoshilei/mmplugin) 微信自动抢红包、修改运动步数、朋友圈小视频转发等功能(无需越狱),附微信重签名教程
+- [**152**Star][2y] [Java] [floyd-fuh/jks-private-key-cracker-hashcat](https://github.com/floyd-fuh/jks-private-key-cracker-hashcat) Nail in the JKS coffin - Cracking passwords of private key entries in a JKS file
+- [**152**Star][8y] [dotfighter/torshammer](https://github.com/dotfighter/torshammer) Tor's hammer. Slow post DDOS tool written in python.
- [**152**Star][7y] [C] [dannvix/keylogger-osx](https://github.com/dannvix/keylogger-osx) Very simple keylogger for self-quantifying on Mac OS X
-- [**152**Star][2m] [Go] [c-sto/recursebuster](https://github.com/c-sto/recursebuster) rapid content discovery tool for recursively querying webservers, handy in pentesting and web application assessments
-- [**152**Star][2y] [Py] [atlassian/localstack](https://github.com/atlassian/localstack)
-- [**152**Star][9d] [Py] [antichown/subdomain-takeover](https://github.com/antichown/subdomain-takeover) Subdomain Takeover Scanner | Subdomain Takeover Tool | by 0x94
+- [**152**Star][3m] [Shell] [countercept/snake](https://github.com/countercept/snake) snake - a malware storage zoo
+- [**152**Star][2d] [Shell] [bitnami/bitnami-docker-nginx](https://github.com/bitnami/bitnami-docker-nginx) Bitnami nginx Docker Image
- [**152**Star][1m] [C] [angr/patcherex](https://github.com/angr/patcherex) Shellphish's automated patching engine, originally created for the Cyber Grand Challenge.
-- [**151**Star][3y] [PowerShell] [nsacyber/pass-the-hash-guidance](https://github.com/nsacyber/pass-the-hash-guidance) Configuration guidance for implementing Pass-the-Hash mitigations. #nsacyber
+- [**151**Star][1y] [Java] [zhangjiupeng/agentx](https://github.com/zhangjiupeng/agentx) Shadowsocks升级版,支持协议伪装和流量压缩,易于扩展,可统计流量
+- [**151**Star][3y] [PS] [nsacyber/pass-the-hash-guidance](https://github.com/nsacyber/pass-the-hash-guidance) Configuration guidance for implementing Pass-the-Hash mitigations. #nsacyber
+- [**151**Star][23d] [C] [tiiffi/mcrcon](https://github.com/tiiffi/mcrcon) Rcon client for Minecraft
+- [**151**Star][1m] [C] [processhacker/plugins-extra](https://github.com/processhacker/plugins-extra) These are highly unstable, buggy, incomplete plugins that are not included with Process Hacker by default.
+- [**151**Star][3y] [zbetcheckin/pdf_analysis](https://github.com/zbetcheckin/pdf_analysis) Several PDF analysis reassembled with additional tips and tools
- [**151**Star][2y] [Rust] [trailofbits/flying-sandbox-monster](https://github.com/trailofbits/flying-sandbox-monster) sandboxes the Malware Protection engine in an AppContainer on Windows, written in Rust.
-- [**151**Star][2m] [Py] [thehive-project/cortex-analyzers](https://github.com/thehive-project/cortex-analyzers) Cortex Analyzers Repository
-- [**151**Star][12m] [Py] [shirosaidev/sharesniffer](https://github.com/shirosaidev/sharesniffer) 远程文件系统自动嗅探、挂载和爬取
-- [**151**Star][8d] [HTML] [retest/recheck-web](https://github.com/retest/recheck-web) recheck for web apps – change comparison tool with local Golden Masters, Git-like ignore syntax and "Unbreakable Selenium" tests.
+- [**151**Star][1y] [Py] [souhardya/zerodoor](https://github.com/souhardya/zerodoor) A script written lazily for generating cross-platform backdoors on the go :)
+- [**151**Star][2y] [CSS] [saadeghi/browser-hack-sass-mixins](https://github.com/saadeghi/browser-hack-sass-mixins) Browser hack sass mixin - Apply your SCSS to a specific browser - CSS hacks for: IE, Chrome, Firefox, Edge, Opera
+- [**151**Star][2d] [HTML] [retest/recheck-web](https://github.com/retest/recheck-web) recheck for web apps – change comparison tool with local Golden Masters, Git-like ignore syntax and "Unbreakable Selenium" tests.
- [**151**Star][2y] [Py] [reswitched/cagetheunicorn](https://github.com/reswitched/cagetheunicorn) Debugging/emulating environment for Switch code
-- [**151**Star][11d] [Shell] [realtho/partyloud](https://github.com/realtho/partyloud) A simple tool to generate fake web browsing and mitigate tracking
- [**151**Star][2y] [Java] [psiinon/bodgeit](https://github.com/psiinon/bodgeit) The BodgeIt Store is a vulnerable web application which is currently aimed at people who are new to pen testing.
-- [**151**Star][8d] [C] [pkroma/processhacker](https://github.com/pkroma/processhacker) A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware—mirror of
+- [**151**Star][5m] [Assembly] [peterferrie/win-exec-calc-shellcode](https://github.com/peterferrie/win-exec-calc-shellcode) A small, null-free Windows shellcode that executes calc.exe (x86/x64, all OS/SPs)
+- [**151**Star][6y] [onx/cih](https://github.com/onx/cih) The source code of the CIH virus
- [**151**Star][2y] [CSS] [m6a-uds/ssrf-lab](https://github.com/m6a-uds/ssrf-lab) Lab for exploring SSRF vulnerabilities
-- [**151**Star][21d] [C] [libimobiledevice/libirecovery](https://github.com/libimobiledevice/libirecovery) Library and utility to talk to iBoot/iBSS via USB on Mac OS X, Windows, and Linux
+- [**151**Star][8d] [C] [libimobiledevice/libirecovery](https://github.com/libimobiledevice/libirecovery) Library and utility to talk to iBoot/iBSS via USB on Mac OS X, Windows, and Linux
+- [**151**Star][2m] [Java] [leadroyal/fastjson-blacklist](https://github.com/leadroyal/fastjson-blacklist)
- [**151**Star][2y] [C++] [l3cr0f/dccwbypassuac](https://github.com/l3cr0f/dccwbypassuac) Windows 8.1 and 10 UAC bypass abusing WinSxS in "dccw.exe".
-- [**151**Star][4m] [Py] [kacperszurek/burp_wp](https://github.com/kacperszurek/burp_wp) Find known vulnerabilities in WordPress plugins and themes using Burp Suite proxy. WPScan like plugin for Burp.
+- [**151**Star][5m] [Py] [kacperszurek/burp_wp](https://github.com/kacperszurek/burp_wp) Find known vulnerabilities in WordPress plugins and themes using Burp Suite proxy. WPScan like plugin for Burp.
- [**151**Star][2y] [Py] [k4m4/dymerge](https://github.com/k4m4/dymerge) takes given wordlists and merges them into one dynamic dictionary that can then be used as ammunition for a successful dictionary based (or bruteforce) attack.
-- [**151**Star][28d] [Py] [jymcheong/autottp](https://github.com/jymcheong/autottp) Automated Tactics Techniques & Procedures
-- [**151**Star][3y] [PowerShell] [johnnydep/owa-toolkit](https://github.com/johnnydep/owa-toolkit) Powershell module to assist in attacking Exchange/Outlook Web Access
-- [**151**Star][27d] [jeremymain/gpuprofiler](https://github.com/jeremymain/gpuprofiler) Understand your application and workflow resource requirements
-- [**151**Star][3y] [C] [ixty/xarch_shellcode](https://github.com/ixty/xarch_shellcode) Cross Architecture Shellcode in C
+- [**151**Star][30d] [Py] [jymcheong/autottp](https://github.com/jymcheong/autottp) Automated Tactics Techniques & Procedures
+- [**151**Star][3y] [PS] [johnnydep/owa-toolkit](https://github.com/johnnydep/owa-toolkit) Powershell module to assist in attacking Exchange/Outlook Web Access
+- [**151**Star][1y] [Py] [jiangsir404/php-code-audit](https://github.com/jiangsir404/php-code-audit) php code audit for cms vulnerabilities / 代码审计,对一些大型cms漏洞的复现研究,更新源码和漏洞exp
+- [**151**Star][29d] [jeremymain/gpuprofiler](https://github.com/jeremymain/gpuprofiler) Understand your application and workflow resource requirements
+- [**151**Star][2m] [Py] [iamblackhacker/facebook-bruteforce](https://github.com/iamblackhacker/facebook-bruteforce) Bruteforce attack on Facebook account using python script
- [**151**Star][5y] [Shell] [hellman/fixenv](https://github.com/hellman/fixenv) Fix stack addresses (when no ASLR) with and without debugging
+- [**151**Star][3m] [C] [hasherezade/process_doppelganging](https://github.com/hasherezade/process_doppelganging) 进程注入技术 Process Doppelganging 的实现代码
- [**151**Star][8m] [Py] [githacktools/leaked](https://github.com/githacktools/leaked) Leaked? 2.1 - A Checking tool for Hash codes, Passwords and Emails leaked
-- [**151**Star][3y] [C++] [gbonacini/cve-2016-5195](https://github.com/gbonacini/cve-2016-5195) A CVE-2016-5195 exploit example.
-- [**151**Star][2y] [Java] [floyd-fuh/jks-private-key-cracker-hashcat](https://github.com/floyd-fuh/jks-private-key-cracker-hashcat) Nail in the JKS coffin - Cracking passwords of private key entries in a JKS file
- [**151**Star][1y] [css] [eun/ctf.tf](https://github.com/eun/ctf.tf) A database of collected CTFs and their solutions.
-- [**151**Star][8y] [dotfighter/torshammer](https://github.com/dotfighter/torshammer) Tor's hammer. Slow post DDOS tool written in python.
-- [**151**Star][8d] [Shell] [bitnami/bitnami-docker-nginx](https://github.com/bitnami/bitnami-docker-nginx) Bitnami nginx Docker Image
+- [**151**Star][3y] [Shell] [buguroo/cuckooautoinstall](https://github.com/buguroo/cuckooautoinstall) Auto Installer Script for Cuckoo Sandbox
- [**151**Star][2y] [JS] [alexzzz9/ps4-5.01-webkit-exploit-poc](https://github.com/alexzzz9/ps4-5.01-webkit-exploit-poc) PS4 5.01 WebKit Exploit PoC
-- [**150**Star][1y] [Py] [vanpersiexp/expcamera](https://github.com/vanpersiexp/expcamera) Exploit Netwave and GoAhead IP Camera
+- [**150**Star][13d] [C] [ray-cp/vm-escape](https://github.com/ray-cp/vm-escape) some interesting vm-escape game
- [**150**Star][1m] [Py] [tintinweb/ecdsa-private-key-recovery](https://github.com/tintinweb/ecdsa-private-key-recovery) A simple library to recover the private key of ECDSA and DSA signatures sharing the same nonce k and therefore having identical signature parameter r
- [**150**Star][3m] [Py] [stuhli/dfirtrack](https://github.com/stuhli/dfirtrack) 数字取证, 与事件响应追踪. 基于Django
- [**150**Star][9y] [Shell] [spiderlabs/jboss-autopwn](https://github.com/spiderlabs/jboss-autopwn) A JBoss script for obtaining remote shell access
-- [**150**Star][1y] [Py] [souhardya/zerodoor](https://github.com/souhardya/zerodoor) A script written lazily for generating cross-platform backdoors on the go :)
- [**150**Star][1y] [Py] [shawarkhanethicalhacker/d-tect](https://github.com/shawarkhanethicalhacker/d-tect) D-TECT - Pentesting the Modern Web
- [**150**Star][2y] [Py] [sensepost/userenum](https://github.com/sensepost/userenum) Domain user enumeration tool
- [**150**Star][3y] [C++] [scateu/kalibrate-hackrf](https://github.com/scateu/kalibrate-hackrf) kalibrate for hackrf
-- [**150**Star][2y] [CSS] [saadeghi/browser-hack-sass-mixins](https://github.com/saadeghi/browser-hack-sass-mixins) Browser hack sass mixin - Apply your SCSS to a specific browser - CSS hacks for: IE, Chrome, Firefox, Edge, Opera
-- [**150**Star][2m] [Py] [richiercyrus/venator](https://github.com/richiercyrus/venator) Venator is a python tool used to gather data for proactive detection of malicious activity on macOS devices.
-- [**150**Star][5m] [Assembly] [peterferrie/win-exec-calc-shellcode](https://github.com/peterferrie/win-exec-calc-shellcode) A small, null-free Windows shellcode that executes calc.exe (x86/x64, all OS/SPs)
+- [**150**Star][12d] [Py] [rogerhu/gdb-heap](https://github.com/rogerhu/gdb-heap) Heap Analyzer for Python
+- [**150**Star][5y] [Py] [rep/dionaea](https://github.com/rep/dionaea) dionaea low interaction honeypot (forked from dionaea.carnivore.it)
- [**150**Star][2y] [Py] [orppra/ropa](https://github.com/orppra/ropa) ROP 链创建工具, 带界面, 基于 Ropper
-- [**150**Star][6y] [onx/cih](https://github.com/onx/cih) The source code of the CIH virus
+- [**150**Star][5m] [Py] [moyix/pdbparse](https://github.com/moyix/pdbparse) Python code to parse Microsoft PDB files
+- [**150**Star][1y] [C] [matthiaskramm/swftools](https://github.com/matthiaskramm/swftools) Utilities for editing and generating Adobe Flash (SWF) files.
- [**150**Star][2y] [Py] [malwaretech/trickbot-toolkit](https://github.com/malwaretech/trickbot-toolkit) A collection of tools for dealing with TrickBot
- [**150**Star][2y] [Go] [kudelskisecurity/cdf](https://github.com/kudelskisecurity/cdf) automatically test the correctness and security of cryptographic software
-- [**150**Star][2m] [Py] [iamblackhacker/facebook-bruteforce](https://github.com/iamblackhacker/facebook-bruteforce) Bruteforce attack on Facebook account using python script
- [**150**Star][1y] [Shell] [hiruna/wifi-txpower-unlocker](https://github.com/hiruna/wifi-txpower-unlocker) bash 脚本, 从 Central Regulatory Domain Agent 和 Wireles Regulatory Database 获取源, 生成修改版的 regulatory.bin 并 patch 内核, 以解锁 WiFi TX power
- [**150**Star][6y] [Py] [hiddenillusion/analyzepe](https://github.com/hiddenillusion/analyzepe) Wraps around various tools and provides some additional checks/information to produce a centralized report of a PE file.
-- [**150**Star][14d] [Py] [gdbinit/lldbinit](https://github.com/gdbinit/lldbinit) A gdbinit clone for LLDB
+- [**150**Star][16d] [Py] [gdbinit/lldbinit](https://github.com/gdbinit/lldbinit) A gdbinit clone for LLDB
- [**150**Star][2y] [Py] [ga-ryo/idafuzzy](https://github.com/ga-ryo/idafuzzy) Fuzzy search tool for IDA Pro.
- [**150**Star][7m] [Py] [fox-it/adconnectdump](https://github.com/fox-it/adconnectdump) Dump Azure AD Connect credentials for Azure AD and Active Directory
- [**150**Star][3y] [Py] [enginebai/pymedium](https://github.com/enginebai/pymedium) Unofficial Medium Python Flask API and SDK
- [**150**Star][2y] [dragonquesthero/awesome-windows-security-development](https://github.com/dragonquesthero/awesome-windows-security-development) awesome-windows-security-development
-- [**150**Star][3y] [Shell] [buguroo/cuckooautoinstall](https://github.com/buguroo/cuckooautoinstall) Auto Installer Script for Cuckoo Sandbox
+- [**150**Star][1y] [C#] [codewhitesec/lethalhta](https://github.com/codewhitesec/lethalhta) Lateral Movement technique using DCOM and HTA
+- [**150**Star][2y] [Py] [cls1991/ng](https://github.com/cls1991/ng) 获取未连接的 Wifi 的密码
- [**150**Star][1y] [Py] [ax330d/hrdev](https://github.com/ax330d/hrdev) Hex-Rays Decompiler Enhanced View
- [**150**Star][3y] [Py] [alschwalm/foresight](https://github.com/alschwalm/foresight) A tool for predicting the output of random number generators
-- [**150**Star][4m] [Shell] [0xmitsurugi/gimmecredz](https://github.com/0xmitsurugi/gimmecredz) You're a #pentester and you totally pwn that linux box, congrats! Now what? You can launch gimmecredz.sh which will try to extract all passwords from known locations.
-- [**149**Star][11d] [C] [ray-cp/vm-escape](https://github.com/ray-cp/vm-escape) some interesting vm-escape game
+- [**150**Star][2y] [C] [alexdenisov/bitcode_retriever](https://github.com/alexdenisov/bitcode_retriever) Retrieves Bitcode from Mach-O binaries
+- [**150**Star][2y] [Py] [aipengjie/sensitivefilescan](https://github.com/aipengjie/sensitivefilescan)
- [**149**Star][1y] [C++] [ajkhoury/sigmaker-x64](https://github.com/ajkhoury/SigMaker-x64) IDA Pro 7.0 compatible SigMaker plugin
-- [**149**Star][30d] [C] [processhacker/plugins-extra](https://github.com/processhacker/plugins-extra) These are highly unstable, buggy, incomplete plugins that are not included with Process Hacker by default.
-- [**149**Star][7m] [C#] [wohlstand/destroy-windows-10-spying](https://github.com/wohlstand/destroy-windows-10-spying) Destroy Windows Spying tool
+- [**149**Star][11m] [Go] [znly/strobfus](https://github.com/znly/strobfus) String obfuscation
+- [**149**Star][1m] [C] [wmkhoo/taintgrind](https://github.com/wmkhoo/taintgrind) A taint-tracking plugin for the Valgrind memory checking tool
- [**149**Star][11m] [Py] [wangshub/hmpa-pi](https://github.com/wangshub/hmpa-pi) 在树莓派上,利用 Wireshark 扫描附近网络 WiFi 设备,并对扫描结果通过邮件或者微信进行推送
-- [**149**Star][9d] [Go] [ullaakut/nmap](https://github.com/ullaakut/nmap) Idiomatic nmap library for go developers
+- [**149**Star][4y] [trietptm/sql-injection-payloads](https://github.com/trietptm/sql-injection-payloads) SQL Injection Payloads for Burp Suite, OWASP Zed Attack Proxy,...
- [**149**Star][1y] [C] [theofficialflow/update365](https://github.com/theofficialflow/update365) Custom Firmware 3.65 HENkaku Ensō Updater for PS Vita
-- [**149**Star][15d] [Py] [swehner/foos](https://github.com/swehner/foos) Instant replay system for foosball table
+- [**149**Star][17d] [Py] [swehner/foos](https://github.com/swehner/foos) Instant replay system for foosball table
- [**149**Star][8m] [Py] [safebreach-labs/sireprat](https://github.com/safebreach-labs/sireprat) Remote Command Execution as SYSTEM on Windows IoT Core
- [**149**Star][2m] [JS] [rwjblue/ember-cli-content-security-policy](https://github.com/rwjblue/ember-cli-content-security-policy) use Content Security Policy (CSP) in your project
-- [**149**Star][5y] [Py] [rep/dionaea](https://github.com/rep/dionaea) dionaea low interaction honeypot (forked from dionaea.carnivore.it)
-- [**149**Star][18d] [HTML] [neal1991/gshark](https://github.com/neal1991/gshark) Scan for sensitive information easily and effectively.
-- [**149**Star][29d] [Py] [nccgroup/idahunt](https://github.com/nccgroup/idahunt) a framework to analyze binaries with IDA Pro and hunt for things in IDA Pro
+- [**149**Star][20d] [HTML] [neal1991/gshark](https://github.com/neal1991/gshark) Scan for sensitive information easily and effectively.
+- [**149**Star][1m] [Py] [nccgroup/idahunt](https://github.com/nccgroup/idahunt) a framework to analyze binaries with IDA Pro and hunt for things in IDA Pro
- [**149**Star][3y] [Java] [mwielgoszewski/jython-burp-api](https://github.com/mwielgoszewski/jython-burp-api) Develop Burp extensions in Jython
-- [**149**Star][5m] [Py] [moyix/pdbparse](https://github.com/moyix/pdbparse) Python code to parse Microsoft PDB files
-- [**149**Star][1y] [C] [matthiaskramm/swftools](https://github.com/matthiaskramm/swftools) Utilities for editing and generating Adobe Flash (SWF) files.
-- [**149**Star][2m] [Java] [leadroyal/fastjson-blacklist](https://github.com/leadroyal/fastjson-blacklist)
-- [**149**Star][12m] [Py] [jiangsir404/php-code-audit](https://github.com/jiangsir404/php-code-audit) php code audit for cms vulnerabilities / 代码审计,对一些大型cms漏洞的复现研究,更新源码和漏洞exp
-- [**149**Star][27d] [hl2guide/all-in-one-customized-adblock-list](https://github.com/hl2guide/all-in-one-customized-adblock-list) An all-in-one adblock list that thoroughly blocks trackers, popup ads, ads, unwanted cookies, fake news, cookie warning messages, unwanted comment sections, crypto-coin mining, YouTube clutter, Twitter guff and social network hassles. Development is halted at version 2.8.
+- [**149**Star][1y] [PS] [mattifestation/psreflect](https://github.com/mattifestation/psreflect) Easily define in-memory enums, structs, and Win32 functions in PowerShell
+- [**149**Star][6y] [C++] [kaiserfarrell/malware](https://github.com/kaiserfarrell/malware) virus collection source code
+- [**149**Star][9d] [C] [jovanbulck/sgx-step](https://github.com/jovanbulck/sgx-step) A practical attack framework for precise enclave execution control
+- [**149**Star][2m] [Ruby] [jekyll/github-metadata](https://github.com/jekyll/github-metadata) Jekyll plugin to propagate the `site.github` namespace and set default values for use with GitHub Pages.
- [**149**Star][4y] [C++] [hiwincn/htran](https://github.com/hiwincn/htran) HTran is a connection bouncer, a kind of proxy server. A “listener” program is hacked stealthily onto an unsuspecting host anywhere on the Internet. When it receives signals from the actual target system, it redirects it to the hacker’s server.
-- [**149**Star][3m] [C] [hasherezade/process_doppelganging](https://github.com/hasherezade/process_doppelganging) 进程注入技术 Process Doppelganging 的实现代码
+- [**149**Star][7m] [Py] [ethereum/evmlab](https://github.com/ethereum/evmlab) Utilities for interacting with the Ethereum virtual machine
- [**149**Star][2m] [Py] [eth-sri/diffai](https://github.com/eth-sri/diffai) 用于保护神经网络抵御攻击的库
+- [**149**Star][2y] [JS] [djadmin/passw0rd](https://github.com/djadmin/passw0rd)
- [**149**Star][2y] [Shell] [dhavalkapil/luaver](https://github.com/dhavalkapil/luaver) Lua Version Manager - Managing and switching between different versions of Lua, LuaJIT and Luarocks made easy
- [**149**Star][5y] [Py] [devttys0/wps](https://github.com/devttys0/wps) WPS related utilities
-- [**149**Star][2m] [Shell] [countercept/snake](https://github.com/countercept/snake) snake - a malware storage zoo
-- [**149**Star][1y] [C#] [codewhitesec/lethalhta](https://github.com/codewhitesec/lethalhta) Lateral Movement technique using DCOM and HTA
-- [**149**Star][2y] [Py] [cls1991/ng](https://github.com/cls1991/ng) 获取未连接的 Wifi 的密码
+- [**149**Star][3y] [Jupyter Notebook] [dchad/malware-detection](https://github.com/dchad/malware-detection) Malware Detection and Classification Using Machine Learning
+- [**149**Star][1y] [chryzsh/awesome-windows-security](https://github.com/chryzsh/awesome-windows-security) List of Awesome Windows Security Resources
+- [**149**Star][20d] [JS] [certsocietegenerale/swordphish-awareness](https://github.com/certsocietegenerale/swordphish-awareness) Swordphish Phishing Awareness Tool
+- [**149**Star][1y] [brucetg/app_security](https://github.com/brucetg/app_security)
- [**149**Star][4y] [Py] [arxsys/dff](https://github.com/arxsys/dff) DFF (Digital Forensics Framework) is a Forensics Framework coming with command line and graphical interfaces. DFF can be used to investigate hard drives and volatile memory and create reports about user and system activities.
-- [**149**Star][2y] [C] [alexdenisov/bitcode_retriever](https://github.com/alexdenisov/bitcode_retriever) Retrieves Bitcode from Mach-O binaries
-- [**149**Star][1y] [PowerShell] [airbus-seclab/powersap](https://github.com/airbus-seclab/powersap) powersap:PowershellSAP 评估工具。所有公开且流行/有效的工具的PowerShell 重制版,例如 Bizploit、Metasploitauxiliary 模块、网络收集的 Python 脚本。
-- [**149**Star][2y] [Py] [aipengjie/sensitivefilescan](https://github.com/aipengjie/sensitivefilescan)
+- [**149**Star][1y] [PS] [airbus-seclab/powersap](https://github.com/airbus-seclab/powersap) powersap:PowershellSAP 评估工具。所有公开且流行/有效的工具的PowerShell 重制版,例如 Bizploit、Metasploitauxiliary 模块、网络收集的 Python 脚本。
- [**149**Star][8m] [C] [adrianyy/eacreversing](https://github.com/adrianyy/eacreversing) Reversing EasyAntiCheat.
-- [**148**Star][21d] [C] [tiiffi/mcrcon](https://github.com/tiiffi/mcrcon) Rcon client for Minecraft
-- [**148**Star][7m] [Py] [vysecurity/linkedint](https://github.com/vysecurity/linkedint) LinkedIn Recon Tool
-- [**148**Star][1m] [Py] [travisfoley/dfirtriage](https://github.com/travisfoley/dfirtriage) Digital forensic acquisition tool for Windows based incident response.
+- [**149**Star][11m] [Py] [649/crashcast-exploit](https://github.com/649/crashcast-exploit) This tool allows you mass play any YouTube video, terminate apps and rename Chromecast device(s) obtained from Shodan.io
+- [**149**Star][3y] [Java] [1998lixin/wechat-database](https://github.com/1998lixin/wechat-database) 破解微信数据库 获取想要的数据
- [**148**Star][12m] [Java] [wnagzihxa1n/ctf-mobile](https://github.com/wnagzihxa1n/CTF-Mobile) CTF Solutions by me
- [**148**Star][2m] [C] [cntools/cnping](https://github.com/cntools/cnping) Minimal Graphical IPV4 Ping Tool
-- [**148**Star][11m] [Go] [znly/strobfus](https://github.com/znly/strobfus) String obfuscation
-- [**148**Star][3y] [zbetcheckin/pdf_analysis](https://github.com/zbetcheckin/pdf_analysis) Several PDF analysis reassembled with additional tips and tools
-- [**148**Star][29d] [C] [wmkhoo/taintgrind](https://github.com/wmkhoo/taintgrind) A taint-tracking plugin for the Valgrind memory checking tool
-- [**148**Star][4y] [trietptm/sql-injection-payloads](https://github.com/trietptm/sql-injection-payloads) SQL Injection Payloads for Burp Suite, OWASP Zed Attack Proxy,...
+- [**148**Star][5d] [Py] [tuhinshubhra/extanalysis](https://github.com/tuhinshubhra/extanalysis) Browser Extension Analysis Framework - Scan, Analyse Chrome and firefox extensions for vulnerabilities and intels
- [**148**Star][3m] [Py] [trailofbits/protofuzz](https://github.com/trailofbits/protofuzz) Google Protocol Buffers message generator
-- [**148**Star][10d] [Py] [rogerhu/gdb-heap](https://github.com/rogerhu/gdb-heap) Heap Analyzer for Python
+- [**148**Star][9m] [C] [trailofbits/onesixtyone](https://github.com/trailofbits/onesixtyone) Fast SNMP Scanner
+- [**148**Star][6m] [Py] [thekingofduck/burpfakeip](https://github.com/thekingofduck/burpfakeip) 一个用于伪造ip地址进行爆破的Burp Suite插件
+- [**148**Star][3m] [Py] [secdec/adapt](https://github.com/secdec/adapt) WebApp自动化渗透测试工具
- [**148**Star][1y] [Py] [raminfp/linux_exploit_development](https://github.com/raminfp/linux_exploit_development) Linux Exploit Development Techniques
+- [**148**Star][6m] [Shell] [petermosmans/security-scripts](https://github.com/petermosmans/security-scripts) A collection of security related Python and Bash shell scripts. Analyze hosts on generic security vulnerabilities. Wrapper around popular tools like nmap (portscanner), nikto (webscanner) and testssl.sh (SSL/TLS scanner)
- [**148**Star][2y] [owenliang/php-fpm-code-analysis](https://github.com/owenliang/php-fpm-code-analysis) php-fpm源码分析
- [**148**Star][2y] [C] [ortegaalfredo/kscope](https://github.com/ortegaalfredo/kscope) Small tool to visualize small differences on syscall timing
-- [**148**Star][1y] [PowerShell] [nexxai/cryptoblocker](https://github.com/nexxai/cryptoblocker) A script to deploy File Server Resource Manager and associated scripts to block infected users
+- [**148**Star][1y] [PS] [nexxai/cryptoblocker](https://github.com/nexxai/cryptoblocker) A script to deploy File Server Resource Manager and associated scripts to block infected users
- [**148**Star][5y] [Py] [mveytsman/dilettante](https://github.com/mveytsman/dilettante) Maven central doesn't do SSL when serving you JARs. Dilettante is a MiTM proxy for exploiting that.
+- [**148**Star][9m] [mpgn/cve-2019-5418](https://github.com/mpgn/cve-2019-5418) CVE-2019-5418 - File Content Disclosure on Ruby on Rails
+- [**148**Star][19d] [C] [microchiptech/cryptoauthlib](https://github.com/microchiptech/cryptoauthlib) Library for interacting with the Crypto Authentication secure elements
- [**148**Star][5m] [PHP] [mebjas/csrf-protector-php](https://github.com/mebjas/csrf-protector-php) CSRF Protector library: standalone library for CSRF mitigation
-- [**148**Star][1y] [PowerShell] [mattifestation/psreflect](https://github.com/mattifestation/psreflect) Easily define in-memory enums, structs, and Win32 functions in PowerShell
- [**148**Star][3y] [HTML] [luxiaok/dnsmasqweb](https://github.com/luxiaok/dnsmasqweb) 基于DNSmasq的DNS解析、以及DHCP地址分配系统
-- [**148**Star][22d] [leonjza/awesome-nmap-grep](https://github.com/leonjza/awesome-nmap-grep) Awesome Nmap Grep
-- [**148**Star][7d] [C] [jovanbulck/sgx-step](https://github.com/jovanbulck/sgx-step) A practical attack framework for precise enclave execution control
+- [**148**Star][24d] [leonjza/awesome-nmap-grep](https://github.com/leonjza/awesome-nmap-grep) Awesome Nmap Grep
+- [**148**Star][10d] [Py] [ivandokov/phockup](https://github.com/ivandokov/phockup) Media sorting tool to organize photos and videos from your camera in folders by year, month and day.
- [**148**Star][1y] [Py] [hugsy/binja-retdec](https://github.com/hugsy/binja-retdec) Binary Ninja plugin to decompile binaries using RetDec API
- [**148**Star][9m] [C++] [googleprojectzero/comparecoverage](https://github.com/googleprojectzero/comparecoverage) Clang instrumentation module for tracing variable and buffer comparisons in C/C++ and saving the coverage data to .sancov files
+- [**148**Star][3y] [C] [felixwilhelm/mario_baslr](https://github.com/felixwilhelm/mario_baslr) PoC for breaking hypervisor ASLR using branch target buffer collisions
- [**148**Star][5y] [C++] [f-secure/sulo](https://github.com/f-secure/sulo) Dynamic instrumentation tool for Adobe Flash Player built on Intel Pin
-- [**148**Star][7m] [Py] [ethereum/evmlab](https://github.com/ethereum/evmlab) Utilities for interacting with the Ethereum virtual machine
-- [**148**Star][26d] [C++] [dekuan/vwfirewall](https://github.com/dekuan/vwfirewall) 微盾®VirtualWall®防火墙整套源代码
+- [**148**Star][2y] [C] [elfmaster/skeksi_virus](https://github.com/elfmaster/skeksi_virus) Devestating and awesome Linux X86_64 ELF Virus
+- [**148**Star][28d] [C++] [dekuan/vwfirewall](https://github.com/dekuan/vwfirewall) 微盾®VirtualWall®防火墙整套源代码
+- [**148**Star][11m] [Ruby] [darkoperator/meterpreter-scripts](https://github.com/darkoperator/meterpreter-scripts) Meterpreter Scripts that I'm working on
- [**148**Star][9m] [C] [darkabode/zerokit](https://github.com/darkabode/zerokit) Zerokit/GAPZ rootkit (non buildable and only for researching)
-- [**148**Star][11m] [Py] [649/crashcast-exploit](https://github.com/649/crashcast-exploit) This tool allows you mass play any YouTube video, terminate apps and rename Chromecast device(s) obtained from Shodan.io
+- [**148**Star][12m] [C] [caesar0301/http-sniffer](https://github.com/caesar0301/http-sniffer) A multi-threading tool to sniff TCP flow statistics and embedded HTTP headers from PCAP file. Each TCP flow carrying HTTP is exported to text file in json format.
+- [**148**Star][11m] [Py] [bhavsec/reconspider](https://github.com/bhavsec/reconspider)
+- [**148**Star][1y] [Py] [anselal/antminer-monitor](https://github.com/anselal/antminer-monitor) Cryptocurrency mining hardware monitor using a simple web interface
- [**148**Star][1y] [Py] [0xalexei/windowsdefendertools](https://github.com/0xalexei/windowsdefendertools) Tools for instrumenting Windows Defender's mpengine.dll
-- [**147**Star][3y] [ysrc/androidobfusedictionary](https://github.com/ysrc/androidobfusedictionary) Android ProGuard变态混淆字典
+- [**147**Star][10m] [Shell] [v2ray/dist](https://github.com/v2ray/dist) Mirror of V2Ray core releases
+- [**147**Star][8d] [HTML] [izar/pytm](https://github.com/izar/pytm) A Pythonic framework for threat modeling
+- [**147**Star][10m] [Py] [zhovner/mfdread](https://github.com/zhovner/mfdread) Mifare 1k/4k dumps parser in human readable format
- [**147**Star][4y] [C] [valdikss/openvpn-fix-dns-leak-plugin](https://github.com/valdikss/openvpn-fix-dns-leak-plugin) OpenVPN plugin to fix Windows DNS Leaks
- [**147**Star][2y] [Py] [valardragon/ctf-crypto](https://github.com/valardragon/ctf-crypto) Contains tools for solving RSA and other crypto problems in CTFs.
-- [**147**Star][2y] [ASP] [testsecer/webshell](https://github.com/testsecer/webshell) 这是一个WebShell收集项目
- [**147**Star][1y] [C++] [tandasat/memorymon](https://github.com/tandasat/memorymon) Detecting execution of kernel memory where is not backed by any image file
- [**147**Star][3y] [C] [sysprogs/virtualkd](https://github.com/sysprogs/virtualkd)
- [**147**Star][5y] [C] [strazzere/android-lkms](https://github.com/strazzere/android-lkms) Android Loadable Kernel Modules - mostly used for reversing and debugging on controlled systems/emulators
- [**147**Star][2y] [Py] [stfpeak/ctf](https://github.com/stfpeak/ctf) some experience in CTFs
-- [**147**Star][3m] [Py] [secdec/adapt](https://github.com/secdec/adapt) WebApp自动化渗透测试工具
+- [**147**Star][6m] [shramos/awesome-cybersecurity-datasets](https://github.com/shramos/awesome-cybersecurity-datasets) A curated list of amazingly awesome Cybersecurity datasets
- [**147**Star][3y] [Py] [risksense-ops/cve-2016-6366](https://github.com/risksense-ops/cve-2016-6366) Public repository for improvements to the EXTRABACON exploit
+- [**147**Star][2y] [C] [r-a-w/torproxy](https://github.com/r-a-w/torproxy) TorProxy is a tool which uses netfilter hooks in the linux kernel to route all network traffic through the Tor network
- [**147**Star][3y] [Py] [mpgn/padding-oracle-attack](https://github.com/mpgn/padding-oracle-attack) An exploit for the Padding Oracle Attack
-- [**147**Star][9m] [mpgn/cve-2019-5418](https://github.com/mpgn/cve-2019-5418) CVE-2019-5418 - File Content Disclosure on Ruby on Rails
-- [**147**Star][2y] [PowerShell] [milo2012/portia](https://github.com/milo2012/portia) portia:自动化内网渗透测试工具
-- [**147**Star][17d] [C] [microchiptech/cryptoauthlib](https://github.com/microchiptech/cryptoauthlib) Library for interacting with the Crypto Authentication secure elements
+- [**147**Star][2y] [PS] [milo2012/portia](https://github.com/milo2012/portia) portia:自动化内网渗透测试工具
+- [**147**Star][2y] [Py] [mandiant/ioc_writer](https://github.com/mandiant/ioc_writer)
- [**147**Star][2y] [Shell] [madmantm/ubuntu-pentest-tools](https://github.com/madmantm/ubuntu-pentest-tools) Script to install security tools, on ubuntu, i follow each new releases.
-- [**147**Star][6y] [C++] [kaiserfarrell/malware](https://github.com/kaiserfarrell/malware) virus collection source code
- [**147**Star][1y] [C++] [justasmasiulis/nt_wrapper](https://github.com/justasmasiulis/nt_wrapper) A wrapper library around native windows sytem APIs
-- [**147**Star][2m] [Ruby] [jekyll/github-metadata](https://github.com/jekyll/github-metadata) Jekyll plugin to propagate the `site.github` namespace and set default values for use with GitHub Pages.
-- [**147**Star][24d] [Shell] [hardenedlinux/debian-gnu-linux-profiles](https://github.com/hardenedlinux/debian-gnu-linux-profiles) Debian GNU/Linux based Services Profiles
+- [**147**Star][3d] [Shell] [hardenedlinux/debian-gnu-linux-profiles](https://github.com/hardenedlinux/debian-gnu-linux-profiles) Debian GNU/Linux based Services Profiles
- [**147**Star][1y] [JS] [gabemarshall/microctfs](https://github.com/gabemarshall/microctfs) Small CTF challenges running on Docker
- [**147**Star][2m] [Py] [frint0/mass-pwn-vbulletin](https://github.com/frint0/mass-pwn-vbulletin) Identify vulnerable (RCE) vBulletin 5.0.0 - 5.5.4 instances using Shodan (CVE-2019-16759)
-- [**147**Star][3y] [C] [felixwilhelm/mario_baslr](https://github.com/felixwilhelm/mario_baslr) PoC for breaking hypervisor ASLR using branch target buffer collisions
- [**147**Star][3y] [C#] [endgameinc/py2exedecompiler](https://github.com/endgameinc/py2exedecompiler) Decompiles Exe created by Py2Exe using uncompyle6 for both python 2 and 3.
-- [**147**Star][2y] [C] [elfmaster/skeksi_virus](https://github.com/elfmaster/skeksi_virus) Devestating and awesome Linux X86_64 ELF Virus
+- [**147**Star][18d] [C++] [emsec/hal](https://github.com/emsec/hal) HAL – The Hardware Analyzer
- [**147**Star][3y] [Py] [drizzlerisk/bunpacker](https://github.com/drizzlerisk/bunpacker) BUnpacker是一款Android脱壳工具
- [**147**Star][2m] [Ruby] [dev-sec/ansible-nginx-hardening](https://github.com/dev-sec/ansible-nginx-hardening) This Ansible role provides secure nginx configurations.
-- [**147**Star][11m] [Ruby] [darkoperator/meterpreter-scripts](https://github.com/darkoperator/meterpreter-scripts) Meterpreter Scripts that I'm working on
- [**147**Star][1m] [C] [cyrus-and/zizzania](https://github.com/cyrus-and/zizzania) Automated DeAuth attack
+- [**147**Star][2m] [C#] [cyberark/zbang](https://github.com/cyberark/zbang) zBang is a risk assessment tool that detects potential privileged account threats
+- [**147**Star][11m] [C#] [cobbr/sharpgen](https://github.com/cobbr/sharpgen) SharpGen is a .NET Core console application that utilizes the Rosyln C# compiler to quickly cross-compile .NET Framework console applications or libraries.
- [**147**Star][6m] [C++] [checkpointsw/invizzzible](https://github.com/checkpointsw/invizzzible) InviZzzible is a tool for assessment of your virtual environments in an easy and reliable way. It contains the most recent and up to date detection and evasion techniques as well as fixes for them.
-- [**147**Star][18d] [JS] [certsocietegenerale/swordphish-awareness](https://github.com/certsocietegenerale/swordphish-awareness) Swordphish Phishing Awareness Tool
-- [**147**Star][12m] [C] [caesar0301/http-sniffer](https://github.com/caesar0301/http-sniffer) A multi-threading tool to sniff TCP flow statistics and embedded HTTP headers from PCAP file. Each TCP flow carrying HTTP is exported to text file in json format.
+- [**147**Star][22d] [Py] [bugcrowd/vulnerability-rating-taxonomy](https://github.com/bugcrowd/vulnerability-rating-taxonomy) Bugcrowd’s baseline priority ratings for common security vulnerabilities
+- [**147**Star][3y] [Py] [biosbits/bits](https://github.com/biosbits/bits) BIOS Implementation Test Suite
- [**147**Star][11m] [Shell] [aturl/awesome-anti-gfw](https://github.com/aturl/awesome-anti-gfw) 突破网络审查和封锁的开源工具清单。
-- [**146**Star][20d] [Py] [aas-n/spraykatz](https://github.com/aas-n/spraykatz) A tool to spray love around the world.
-- [**146**Star][20d] [PHP] [dunglas/dunglasangularcsrfbundle](https://github.com/dunglas/dunglasangularcsrfbundle) Automatic CSRF protection for JavaScript apps using a Symfony API
+- [**147**Star][7m] [C] [0x00pf/0x00sec_code](https://github.com/0x00pf/0x00sec_code) Code for my 0x00sec.org posts
+- [**146**Star][8d] [C] [immunityinc/libptrace](https://github.com/immunityinc/libptrace) An event driven multi-core process debugging, tracing, and manipulation framework.
+- [**146**Star][3m] [hmaverickadams/tcm-security-sample-pentest-report](https://github.com/hmaverickadams/tcm-security-sample-pentest-report) Sample pentest report provided by TCM Security
+- [**146**Star][5m] [C++] [darthton/polychaos](https://github.com/darthton/polychaos) PE permutation library
+- [**146**Star][22d] [PHP] [dunglas/dunglasangularcsrfbundle](https://github.com/dunglas/dunglasangularcsrfbundle) Automatic CSRF protection for JavaScript apps using a Symfony API
- [**146**Star][5m] [C#] [mr-un1k0d3r/maliciousclickoncegenerator](https://github.com/Mr-Un1k0d3r/MaliciousClickOnceGenerator) Quick Malicious ClickOnceGenerator for Red Team
- [**146**Star][2y] [Py] [vduddu/malware](https://github.com/vduddu/malware) Rootkits | Backdoors | Sniffers | Virus | Ransomware | Steganography | Cryptography | Shellcodes | Webshells | Keylogger | Botnets | Worms | Other Network Tools
- [**146**Star][2y] [Py] [undeadsec/enigma](https://github.com/undeadsec/enigma) Multiplatform payload dropper
-- [**146**Star][9m] [C] [trailofbits/onesixtyone](https://github.com/trailofbits/onesixtyone) Fast SNMP Scanner
-- [**146**Star][2y] [Py] [tr3jer/dnsautorebinding](https://github.com/tr3jer/dnsautorebinding) ssrf、ssrfIntranetFuzz、dnsRebinding、recordEncode、dnsPoisoning、Support ipv4/ipv6
-- [**146**Star][1y] [Objective-C] [tihmstar/jelbrektime](https://github.com/tihmstar/jelbrektime) An developer jailbreak for Apple watch S3 watchOS 4.1
+- [**146**Star][1y] [ObjC] [tihmstar/jelbrektime](https://github.com/tihmstar/jelbrektime) An developer jailbreak for Apple watch S3 watchOS 4.1
- [**146**Star][3m] [Ruby] [seattlerb/ruby2ruby](https://github.com/seattlerb/ruby2ruby) a means of generating pure ruby code easily from RubyParser compatible
- [**146**Star][1y] [JS] [saelo/cve-2018-4233](https://github.com/saelo/cve-2018-4233) Exploit for CVE-2018-4233, a WebKit JIT optimization bug used during Pwn2Own 2018
- [**146**Star][11m] [Py] [ritiek/scribd-downloader](https://github.com/ritiek/scribd-downloader) A scribd-downloader that just works
- [**146**Star][5y] [HTML] [pwnwiki/kaliwiki](https://github.com/pwnwiki/kaliwiki) Unofficial Kali Documentation Project
-- [**146**Star][3y] [C] [pustladi/windows-2000](https://github.com/pustladi/windows-2000) Microsoft Windows 2000 Professional — (Source Codes)
-- [**146**Star][6m] [Shell] [petermosmans/security-scripts](https://github.com/petermosmans/security-scripts) A collection of security related Python and Bash shell scripts. Analyze hosts on generic security vulnerabilities. Wrapper around popular tools like nmap (portscanner), nikto (webscanner) and testssl.sh (SSL/TLS scanner)
- [**146**Star][6m] [olafhartong/sysmon-cheatsheet](https://github.com/olafhartong/sysmon-cheatsheet) All sysmon event types and their fields explained
-- [**146**Star][1m] [misterch0c/what_is_this_c2](https://github.com/misterch0c/what_is_this_c2) For all these times you're asking yourself "what is this panel again?"
+- [**146**Star][4m] [Java] [netsoss/headless-burp](https://github.com/netsoss/headless-burp) Automate security tests using Burp Suite.
+- [**146**Star][3y] [C] [nccgroup/triforcelinuxsyscallfuzzer](https://github.com/nccgroup/triforcelinuxsyscallfuzzer) A linux system call fuzzer using TriforceAFL
+- [**146**Star][6d] [misterch0c/what_is_this_c2](https://github.com/misterch0c/what_is_this_c2) For all these times you're asking yourself "what is this panel again?"
- [**146**Star][2y] [Py] [mhelwig/apk-anal](https://github.com/mhelwig/apk-anal) Android APK analyzer based on radare2 and others.
-- [**146**Star][9d] [C] [mate-desktop/caja](https://github.com/mate-desktop/caja) Caja, the file manager for the MATE desktop
-- [**146**Star][2y] [Py] [mandiant/ioc_writer](https://github.com/mandiant/ioc_writer)
+- [**146**Star][11d] [C] [mate-desktop/caja](https://github.com/mate-desktop/caja) Caja, the file manager for the MATE desktop
- [**146**Star][2y] [Go] [magisterquis/sshhipot](https://github.com/magisterquis/sshhipot) High-interaction MitM SSH honeypot
+- [**146**Star][9m] [Java] [lanchon/haystack](https://github.com/lanchon/haystack) Signature Spoofing Patcher for Android
+- [**146**Star][4m] [HTML] [l4bf0x/phishingpretexts](https://github.com/l4bf0x/phishingpretexts) A library of pretexts to use on offensive phishing engagements.
- [**146**Star][11m] [Shell] [kevlar1818/is_my_password_pwned](https://github.com/kevlar1818/is_my_password_pwned) How often does your password appear in the Pwned Passwords database? Uses the k-anonymity API.
- [**146**Star][1y] [Py] [jekil/hardentheworld](https://github.com/jekil/hardentheworld) Harden the world is a community driven project to develop hardening guidelines and checklists for common software and devices.
-- [**146**Star][8d] [Py] [ivandokov/phockup](https://github.com/ivandokov/phockup) Media sorting tool to organize photos and videos from your camera in folders by year, month and day.
-- [**146**Star][22d] [Perl] [henshin/filebuster](https://github.com/henshin/filebuster) An extremely fast and flexible web fuzzer
+- [**146**Star][24d] [Perl] [henshin/filebuster](https://github.com/henshin/filebuster) An extremely fast and flexible web fuzzer
+- [**146**Star][3m] [PostScript] [guardianproject/orfox](https://github.com/guardianproject/orfox) UPDATE: Orfox is being replaced by Tor Browser for Android. All future work and comments will be handled by Tor Project.
- [**146**Star][3y] [C] [gentilkiwi/wanadecrypt](https://github.com/gentilkiwi/wanadecrypt) A decryptor for Wanacry (you need the private key!)
+- [**146**Star][27d] [Py] [futuresharks/rpi-security](https://github.com/futuresharks/rpi-security) A security system written in python to run on a Raspberry Pi with motion detection and mobile notifications
- [**146**Star][4m] [Py] [fireeye/pywintrace](https://github.com/fireeye/pywintrace) Python 编写的 ETW(Event Tracing for Windows) Wrapper
- [**146**Star][3m] [C] [fgont/ipv6toolkit](https://github.com/fgont/ipv6toolkit) SI6 Networks' IPv6 Toolkit
-- [**146**Star][1y] [C++] [doublelabyrinth/010editor-keygen](https://github.com/doublelabyrinth/010editor-keygen) A keygen for 010Editor
+- [**146**Star][2d] [Shell] [entynetproject/ehtools](https://github.com/entynetproject/ehtools) Wi-Fi tools keep getting more and more accessible to beginners, and the Ehtools Framework is a framework of serious penetration tools that can be explored easily from within it. This powerful and simple tool can be used for everything from installing new add-ons to grabbing a WPA handshake in a matter of seconds. Plus, it's easy to install, set …
+- [**146**Star][1m] [Ruby] [dev-sec/ssh-baseline](https://github.com/dev-sec/ssh-baseline) DevSec SSH Baseline - InSpec Profile
+- [**146**Star][2m] [Py] [decoxviii/karma](https://github.com/decoxviii/karma) Find leaked emails with your passwords
- [**146**Star][4y] [Lua] [davidm/lua-inspect](https://github.com/davidm/lua-inspect) Lua code analysis, with plugins for HTML and SciTE
-- [**146**Star][2m] [C#] [cyberark/zbang](https://github.com/cyberark/zbang) zBang is a risk assessment tool that detects potential privileged account threats
-- [**146**Star][11m] [C#] [cobbr/sharpgen](https://github.com/cobbr/sharpgen) SharpGen is a .NET Core console application that utilizes the Rosyln C# compiler to quickly cross-compile .NET Framework console applications or libraries.
-- [**146**Star][1y] [brucetg/app_security](https://github.com/brucetg/app_security)
+- [**146**Star][1m] [Py] [chrispetrou/hrshell](https://github.com/chrispetrou/hrshell) HRShell is an HTTPS/HTTP reverse shell built with flask. It is an advanced C2 server with many features & capabilities.
- [**146**Star][5y] [C++] [blankwall/python_pin](https://github.com/blankwall/python_pin)
+- [**146**Star][18d] [Py] [bash-c/pwn_repo](https://github.com/bash-c/pwn_repo) To store some CTF_pwn_bins and exploits for self-practice
- [**146**Star][2y] [Py] [appsecco/vulnerable-apps](https://github.com/appsecco/vulnerable-apps)
- [**146**Star][1y] [Py] [andresriancho/race-condition-exploit](https://github.com/andresriancho/race-condition-exploit) Tool to help with the exploitation of web application race conditions
-- [**145**Star][6d] [C] [immunityinc/libptrace](https://github.com/immunityinc/libptrace) An event driven multi-core process debugging, tracing, and manipulation framework.
-- [**145**Star][3m] [hmaverickadams/tcm-security-sample-pentest-report](https://github.com/hmaverickadams/tcm-security-sample-pentest-report) Sample pentest report provided by TCM Security
-- [**145**Star][9m] [Shell] [v2ray/dist](https://github.com/v2ray/dist) Mirror of V2Ray core releases
+- [**146**Star][2m] [C++] [alschwalm/dwarfexport](https://github.com/alschwalm/dwarfexport) Export dwarf debug information from IDA Pro
+- [**145**Star][4m] [Py] [reb311ion/rebel-framework](https://github.com/reb311ion/rebel-framework) Advanced and easy to use penetration testing framework
- [**145**Star][3y] [C] [sciencemanx/dress](https://github.com/sciencemanx/dress) add symbols back into a stripped ELF binary (~strip)
-- [**145**Star][10m] [Py] [zhovner/mfdread](https://github.com/zhovner/mfdread) Mifare 1k/4k dumps parser in human readable format
- [**145**Star][2y] [C] [yepher/razberry](https://github.com/yepher/razberry) Notes About ZWave and RazBerry
+- [**145**Star][20d] [Py] [wenzel/pyvmidbg](https://github.com/wenzel/pyvmidbg) LibVMI-based debug server, implemented in Python. Building a guest aware, stealth and agentless full-system debugger
- [**145**Star][3y] [PHP] [webshellpub/awsome-webshell](https://github.com/webshellpub/awsome-webshell) webshell样本大合集。收集各种webshell用于webshell分析与发现。——
+- [**145**Star][5m] [ObjC] [ursachec/cpaproxy](https://github.com/ursachec/cpaproxy) A thin Objective-C wrapper around Tor.
+- [**145**Star][3m] [CSS] [rubyfu/rubyfu](https://github.com/rubyfu/rubyfu) Rubyfu, where Ruby goes evil!
- [**145**Star][2m] [Py] [ripe-atlas-community/ripe-atlas-community-contrib](https://github.com/ripe-atlas-community/ripe-atlas-community-contrib) Repository for links towards tools written during hackathons, and a collection of contributions by the community of the RIPE Atlas visualizations, tools for analysing measurements data and other scripts
- [**145**Star][10m] [Dockerfile] [remnux/docker](https://github.com/remnux/docker) This repository contains Dockerfiles for building Docker images of popular malware analysis tools. See
-- [**145**Star][1y] [Objective-C] [psychotea/meridianjb](https://github.com/psychotea/meridianjb) An iOS 10.x Jailbreak for all 64-bit devices.
+- [**145**Star][3y] [C] [pustladi/windows-2000](https://github.com/pustladi/windows-2000) Microsoft Windows 2000 Professional — (Source Codes)
+- [**145**Star][1y] [ObjC] [psychotea/meridianjb](https://github.com/psychotea/meridianjb) An iOS 10.x Jailbreak for all 64-bit devices.
- [**145**Star][1y] [Shell] [projectatomic/container-storage-setup](https://github.com/projectatomic/container-storage-setup) Service to set up storage for Docker and other container systems
-- [**145**Star][4m] [Java] [netsoss/headless-burp](https://github.com/netsoss/headless-burp) Automate security tests using Burp Suite.
-- [**145**Star][3y] [C] [nccgroup/triforcelinuxsyscallfuzzer](https://github.com/nccgroup/triforcelinuxsyscallfuzzer) A linux system call fuzzer using TriforceAFL
+- [**145**Star][4y] [JS] [nowsecure/owasp-password-strength-test](https://github.com/nowsecure/owasp-password-strength-test) OWASP Password Strength Test for Node.js
- [**145**Star][4y] [R] [mlsecproject/tiq-test](https://github.com/mlsecproject/tiq-test) Threat Intelligence Quotient Test - Dataviz and Statistical Analysis of TI feeds
+- [**145**Star][7d] [JS] [mike-works/web-security-fundamentals](https://github.com/mike-works/web-security-fundamentals)
+- [**145**Star][1m] [C#] [mihaifm/hibpofflinecheck](https://github.com/mihaifm/hibpofflinecheck) Keepass plugin that performs offline and online checks against HaveIBeenPwned passwords
- [**145**Star][1y] [Py] [marty90/pychromedevtools](https://github.com/marty90/pychromedevtools) PyChromeDevTools is a python module that allows one to interact with Google Chrome using Chrome DevTools Protocol within a Python script.
+- [**145**Star][6m] [Py] [macr0phag3/githubmonitor](https://github.com/macr0phag3/githubmonitor) 根据关键字与 hosts 生成的关键词,利用 github 提供的 api,监控 git 泄漏。
- [**145**Star][4y] [C++] [lcatro/network_backdoor_scanner](https://github.com/lcatro/network_backdoor_scanner) This is a backdoor about discover network device ,and it can hidden reverse connecting the hacker's server with encrypt commuication 后渗透后门程序,适合在已经攻陷的内网中做下一步的网络信息扫描..
-- [**145**Star][9m] [Java] [lanchon/haystack](https://github.com/lanchon/haystack) Signature Spoofing Patcher for Android
-- [**145**Star][4m] [HTML] [l4bf0x/phishingpretexts](https://github.com/l4bf0x/phishingpretexts) A library of pretexts to use on offensive phishing engagements.
- [**145**Star][9m] [Py] [kacperszurek/exploits](https://github.com/kacperszurek/exploits) exploits
- [**145**Star][5m] [AutoIt] [igromanru/dark-souls-iii-cheat-engine-guide](https://github.com/igromanru/dark-souls-iii-cheat-engine-guide) Latest CE table and guide for Dark Souls 3
-- [**145**Star][25d] [Py] [futuresharks/rpi-security](https://github.com/futuresharks/rpi-security) A security system written in python to run on a Raspberry Pi with motion detection and mobile notifications
- [**145**Star][3y] [Py] [elcodigok/wphardening](https://github.com/elcodigok/wphardening) Wordpress 安全加固工具
-- [**145**Star][3y] [Jupyter Notebook] [dchad/malware-detection](https://github.com/dchad/malware-detection) Malware Detection and Classification Using Machine Learning
+- [**145**Star][5m] [Py] [echowei/deeptraffic](https://github.com/echowei/deeptraffic) Deep Learning models for network traffic classification
+- [**145**Star][25d] [C++] [cybermaggedon/cyberprobe](https://github.com/cybermaggedon/cyberprobe) Capturing, analysing and responding to cyber attacks
- [**145**Star][2y] [Ruby] [conradirwin/dotgpg](https://github.com/conradirwin/dotgpg) A secure and easy-to-use store for your production secrets
-- [**145**Star][1y] [chryzsh/awesome-windows-security](https://github.com/chryzsh/awesome-windows-security) List of Awesome Windows Security Resources
-- [**145**Star][1m] [Py] [chrispetrou/hrshell](https://github.com/chrispetrou/hrshell) HRShell is an HTTPS/HTTP reverse shell built with flask. It is an advanced C2 server with many features & capabilities.
-- [**145**Star][20d] [Py] [bugcrowd/vulnerability-rating-taxonomy](https://github.com/bugcrowd/vulnerability-rating-taxonomy) Bugcrowd’s baseline priority ratings for common security vulnerabilities
-- [**145**Star][16d] [Py] [bash-c/pwn_repo](https://github.com/bash-c/pwn_repo) To store some CTF_pwn_bins and exploits for self-practice
-- [**145**Star][2m] [C++] [alschwalm/dwarfexport](https://github.com/alschwalm/dwarfexport) Export dwarf debug information from IDA Pro
+- [**145**Star][1y] [Go] [brimstone/go-shellcode](https://github.com/brimstone/go-shellcode) Load shellcode into a new process
- [**145**Star][11m] [Py] [airbuscyber/grap](https://github.com/airbuscyber/grap) define and match graph patterns within binaries
- [**144**Star][5y] [Py] [ring04h/thorns](https://github.com/ring04h/thorns) thorns_project 分布式异步队列系统
-- [**144**Star][14d] [Py] [izar/pytm](https://github.com/izar/pytm) A Pythonic framework for threat modeling
-- [**144**Star][18d] [Py] [wenzel/pyvmidbg](https://github.com/wenzel/pyvmidbg) LibVMI-based debug server, implemented in Python. Building a guest aware, stealth and agentless full-system debugger
+- [**144**Star][3y] [ObjC] [project-imas/security-check](https://github.com/project-imas/security-check) Application level, attached debug detect and jailbreak checking
+- [**144**Star][3y] [Ruby] [yahooarchive/rtrace](https://github.com/yahooarchive/rtrace) Rtrace is an x86/x86_64 native code debugger written in Ruby with zero dependencies
+- [**144**Star][4y] [ObjC] [etsy/bughunt-ios](https://github.com/etsy/bughunt-ios)
- [**144**Star][1y] [Py] [viralmaniar/remote-desktop-caching-](https://github.com/viralmaniar/remote-desktop-caching-) This tool allows one to recover old RDP (mstsc) session information in the form of broken PNG files. These PNG files allows Red Team member to extract juicy information such as LAPS passwords or any sensitive information on the screen. Blue Team member can reconstruct PNG files to see what an attacker did on a compromised host. It is extremely u…
- [**144**Star][4y] [C] [ud2/advisories](https://github.com/ud2/advisories) Security advisories
-- [**144**Star][6m] [Py] [thekingofduck/burpfakeip](https://github.com/thekingofduck/burpfakeip) 一个用于伪造ip地址进行爆破的Burp Suite插件
-- [**144**Star][6m] [shramos/awesome-cybersecurity-datasets](https://github.com/shramos/awesome-cybersecurity-datasets) A curated list of amazingly awesome Cybersecurity datasets
-- [**144**Star][7d] [Go] [rverton/webanalyze](https://github.com/rverton/webanalyze) Port of Wappalyzer (uncovers technologies used on websites) in Go to automate scanning.
-- [**144**Star][3m] [CSS] [rubyfu/rubyfu](https://github.com/rubyfu/rubyfu) Rubyfu, where Ruby goes evil!
+- [**144**Star][4m] [Java] [shack2/javaserializetools](https://github.com/shack2/javaserializetools) Java反序列化漏洞利用工具V1.0 Java反序列化相关漏洞的检查工具,采用JDK 1.8+NetBeans8.2开发,软件运行必须安装JDK 1.8或者以上版本。 支持:weblogic xml反序列化漏洞 CVE-2017-10271/CNVD-C-2019-48814/CVE-2019-2725检查。
+- [**144**Star][20d] [Shell] [securecodebox/securecodebox](https://github.com/securecodebox/securecodebox) SecureCodeBox - continuous secure delivery out of the box
+- [**144**Star][10d] [Go] [rverton/webanalyze](https://github.com/rverton/webanalyze) Port of Wappalyzer (uncovers technologies used on websites) in Go to automate scanning.
- [**144**Star][7y] [C] [rsmudge/metasploit-loader](https://github.com/rsmudge/metasploit-loader) A client compatible with Metasploit's staging protocol
- [**144**Star][5y] [PHP] [pentestgeek/phishing-frenzy-templates](https://github.com/pentestgeek/phishing-frenzy-templates) Phishing Scenarios Used for Phishing Frenzy
- [**144**Star][7y] [Shell] [offensive-security/hid-backdoor-peensy](https://github.com/offensive-security/hid-backdoor-peensy) Reliable Teensy Penetration Testing Payload
-- [**144**Star][4y] [JS] [nowsecure/owasp-password-strength-test](https://github.com/nowsecure/owasp-password-strength-test) OWASP Password Strength Test for Node.js
+- [**144**Star][4m] [Py] [nccgroup/umap2](https://github.com/nccgroup/umap2) Umap2 is the second revision of NCC Group's python based USB host security assessment tool.
+- [**144**Star][4m] [Py] [nccgroup/fuzzowski](https://github.com/nccgroup/fuzzowski) the Network Protocol Fuzzer that we will want to use.
- [**144**Star][6m] [Py] [nashcontrol/bounty-monitor](https://github.com/nashcontrol/bounty-monitor) Leverage certificate transparency live feed to monitor for newly issued subdomain certificates (last 90 days, configurable), for domains participating in bug bounty programs.
- [**144**Star][2y] [Shell] [n0pe-sled/postfix-server-setup](https://github.com/n0pe-sled/postfix-server-setup)
-- [**144**Star][1m] [C#] [mihaifm/hibpofflinecheck](https://github.com/mihaifm/hibpofflinecheck) Keepass plugin that performs offline and online checks against HaveIBeenPwned passwords
- [**144**Star][2y] [Py] [mdsecactivebreach/powerdns](https://github.com/mdsecactivebreach/powerdns) Powershell DNS Delivery
-- [**144**Star][6m] [Py] [macr0phag3/githubmonitor](https://github.com/macr0phag3/githubmonitor) 根据关键字与 hosts 生成的关键词,利用 github 提供的 api,监控 git 泄漏。
+- [**144**Star][3y] [HTML] [landley/aboriginal](https://github.com/landley/aboriginal) provides virtual Linux images you can boot under QEMU, within which you can compile and test any software you like.
- [**144**Star][4y] [Java] [kantega/notsoserial](https://github.com/kantega/notsoserial) Java Agent which mitigates deserialisation attacks by making certain classes unserializable
- [**144**Star][1y] [C] [geosn0w/osiris-jailbreak](https://github.com/geosn0w/osiris-jailbreak) An incomplete iOS 11.2 -> iOS 11.3.1 Jailbreak
-- [**144**Star][30d] [Shell] [entynetproject/ehtools](https://github.com/entynetproject/ehtools) Wi-Fi tools keep getting more and more accessible to beginners, and the Ehtools Framework is a framework of serious penetration tools that can be explored easily from within it. This powerful and simple tool can be used for everything from installing new add-ons to grabbing a WPA handshake in a matter of seconds. Plus, it's easy to install, set …
+- [**144**Star][3d] [fdiskyou/threat-intel](https://github.com/fdiskyou/threat-intel) Archive of publicly available threat INTel reports (mostly APT Reports but not limited to).
- [**144**Star][2y] [Shell] [depoon/iosdylibinjectiondemo](https://github.com/depoon/iosdylibinjectiondemo) Using this Repository to demo how to inject dynamic libraries into cracked ipa files for jailed iOS devices
- [**144**Star][2y] [Py] [davidpany/wmi_forensics](https://github.com/davidpany/wmi_forensics)
+- [**144**Star][14d] [PHP] [danwin/hosting](https://github.com/danwin/hosting) This is a setup for a TOR based shared hosting server
- [**144**Star][2y] [chan9390/awesome-mitm](https://github.com/chan9390/awesome-mitm) Curated List of MitM frameworks on GitHub
-- [**144**Star][3y] [Py] [biosbits/bits](https://github.com/biosbits/bits) BIOS Implementation Test Suite
-- [**144**Star][7m] [C] [0x00pf/0x00sec_code](https://github.com/0x00pf/0x00sec_code) Code for my 0x00sec.org posts
-- [**143**Star][10d] [security-cheatsheet/reverse-shell-cheatsheet](https://github.com/security-cheatsheet/reverse-shell-cheatsheet)
+- [**144**Star][15d] [Py] [andresriancho/enumerate-iam](https://github.com/andresriancho/enumerate-iam) Enumerate the permissions associated with AWS credential set
+- [**143**Star][4m] [Py] [daeken/httprebind](https://github.com/daeken/httprebind) Automatic tool for DNS rebinding-based SSRF attacks
+- [**143**Star][30d] [Shell] [sclorg/s2i-python-container](https://github.com/sclorg/s2i-python-container) Python container images based on Red Hat Software Collections and intended for OpenShift and general usage, that provide a platform for building and running Python applications. Users can choose between Red Hat Enterprise Linux, Fedora, and CentOS based images.
+- [**143**Star][12d] [security-cheatsheet/reverse-shell-cheatsheet](https://github.com/security-cheatsheet/reverse-shell-cheatsheet)
- [**143**Star][1y] [Py] [checkymander/imessagesbackdoor](https://github.com/checkymander/iMessagesBackdoor) A script to help set up an event handler in order to install a persistent backdoor that can be activated by sending a message.
- [**143**Star][7m] [C++] [zombiecraig/udsim](https://github.com/zombiecraig/udsim) a graphical simulator that can emulate different modules in a vehicle and respond to UDS request.
+- [**143**Star][7m] [Py] [vinayakumarr/network-intrusion-detection](https://github.com/vinayakumarr/network-intrusion-detection) Network Intrusion Detection KDDCup '99', NSL-KDD and UNSW-NB15
- [**143**Star][2y] [JS] [theori-io/zer0con2018_bpak](https://github.com/theori-io/zer0con2018_bpak) 为Google Chrome创建1-dayExploit(Zer0Con)
- [**143**Star][3y] [CSS] [sensepost/jack](https://github.com/sensepost/jack) Drag and Drop ClickJacking PoC development assistance tool.
-- [**143**Star][18d] [Shell] [securecodebox/securecodebox](https://github.com/securecodebox/securecodebox) SecureCodeBox - continuous secure delivery out of the box
- [**143**Star][3y] [HTML] [secmob/badkernel](https://github.com/secmob/badkernel) Full exploit of CVE-2016-6754(BadKernel) and slide of SyScan360 2016
+- [**143**Star][2y] [C] [salls/kernel-exploits](https://github.com/salls/kernel-exploits) Some kernel exploits
- [**143**Star][2y] [C] [rodionovd/liblorgnette](https://github.com/rodionovd/liblorgnette) Interprocess dlsym() for OS X & iOS
- [**143**Star][3y] [Assembly] [ricardojrdez/anti-analysis-tricks](https://github.com/ricardojrdez/anti-analysis-tricks) Bunch of techniques potentially used by malware to detect analysis environments
+- [**143**Star][2m] [C++] [raspberrypi/piserver](https://github.com/raspberrypi/piserver) Raspberry Pi Server wizard to serve Raspbian to network booting Pis
- [**143**Star][5m] [Java] [quentinhardy/jndiat](https://github.com/quentinhardy/jndiat) 渗透工具, 通过T3协议攻击Weblogic服务器
- [**143**Star][3m] [Py] [nuid/nebulousad](https://github.com/nuid/nebulousad) NebulousAD automated credential auditing tool.
-- [**143**Star][4m] [Py] [nccgroup/umap2](https://github.com/nccgroup/umap2) Umap2 is the second revision of NCC Group's python based USB host security assessment tool.
+- [**143**Star][2d] [C] [ntpsec/ntpsec](https://github.com/ntpsec/ntpsec) The Network Time Protocol suite, refactored GitHub is a mirror of
+- [**143**Star][8m] [ASP] [misterch0c/apt34](https://github.com/misterch0c/apt34) APT34/OILRIG leak
+- [**143**Star][8d] [C] [libyal/libpff](https://github.com/libyal/libpff) Library and tools to access the Personal Folder File (PFF) and the Offline Folder File (OFF) format
+- [**143**Star][2m] [C] [grimm-co/killerbeez](https://github.com/grimm-co/killerbeez) A distributed fuzzer which aims to pull in the best technologies, make them play nicely together, and run on multiple O/Ses.
+- [**143**Star][10m] [Shell] [essandess/macos-openvpn-server](https://github.com/essandess/macos-openvpn-server) macOS OpenVPN Server and Client Configuration (OpenVPN, Tunnelblick, PF)
- [**143**Star][8m] [Py] [dvopsway/datasploit](https://github.com/dvopsway/datasploit) A tool to perform various OSINT techniques, aggregate all the raw data, visualise it on a dashboard, and facilitate alerting and monitoring on the data.
- [**143**Star][3y] [Py] [codexgigassys/codex-backend](https://github.com/codexgigassys/codex-backend) Codex Gigas malware DNA profiling search engine discovers malware patterns and characteristics assisting individuals who are attracted in malware hunting.
-- [**143**Star][7d] [Rust] [brycx/orion](https://github.com/brycx/orion) Easy and usable rust crypto
-- [**143**Star][1y] [Go] [brimstone/go-shellcode](https://github.com/brimstone/go-shellcode) Load shellcode into a new process
-- [**143**Star][10m] [Py] [bhavsec/reconspider](https://github.com/bhavsec/reconspider)
+- [**143**Star][8d] [Rust] [brycx/orion](https://github.com/brycx/orion) Easy and usable rust crypto
+- [**143**Star][3y] [Py] [blackye/lalascan](https://github.com/blackye/lalascan) 自主开发的分布式web漏洞扫描框架,集合webkit爬虫,Subdomain子域名发现,sqli、反射xss、Domxss等owasp top10漏洞扫描和边界资产发现能力。同时为通用CMS POC扫描提供了插件扩展平台
+- [**143**Star][1m] [bin2415/fuzzing_paper](https://github.com/bin2415/fuzzing_paper) puzzing related paper
- [**143**Star][4y] [JS] [ben174/hsts-cookie](https://github.com/ben174/hsts-cookie) Creates a HSTS Supercookie to fingerprint a browser
-- [**143**Star][13d] [Py] [andresriancho/enumerate-iam](https://github.com/andresriancho/enumerate-iam) Enumerate the permissions associated with AWS credential set
- [**143**Star][1y] [Shell] [adi90x/rancher-active-proxy](https://github.com/adi90x/rancher-active-proxy) All in one active reverse proxy for Rancher !
-- [**142**Star][8d] [Go] [jaeles-project/jaeles](https://github.com/jaeles-project/jaeles) The Swiss Army knife for automated Web Application Testing
+- [**143**Star][1y] [Py] [aatlasis/chiron](https://github.com/aatlasis/chiron) An IPv6 Security Assessment framework with advanced IPv6 Extension Headers manipulation capabilities.
+- [**142**Star][11m] [C++] [virustotal/qt-virustotal-uploader](https://github.com/virustotal/qt-virustotal-uploader) VirusTotal Uploader written in C++ using QT framework
+- [**142**Star][4y] [JS] [urinx/browspy](https://github.com/urinx/browspy) 浏览器用户全部信息收集js
- [**142**Star][1m] [Py] [mubix/osx-wificleaner](https://github.com/mubix/osx-wificleaner) Cleans out "open" wireless connections from OSX machine
-- [**142**Star][28d] [Shell] [sclorg/s2i-python-container](https://github.com/sclorg/s2i-python-container) Python container images based on Red Hat Software Collections and intended for OpenShift and general usage, that provide a platform for building and running Python applications. Users can choose between Red Hat Enterprise Linux, Fedora, and CentOS based images.
-- [**142**Star][4m] [Py] [reb311ion/rebel-framework](https://github.com/reb311ion/rebel-framework) Advanced and easy to use penetration testing framework
- [**142**Star][4y] [C] [valdikss/p0f-mtu](https://github.com/valdikss/p0f-mtu) p0f with patches to save MTU value and export it via API (for VPN detection)
- [**142**Star][2m] [Py] [usableprivacy/upribox](https://github.com/usableprivacy/upribox) Usable Privacy Box
- [**142**Star][1y] [Go] [target/portauthority](https://github.com/target/portauthority) API that leverages Clair to scan Docker Registries and Kubernetes Clusters for vulnerabilities
+- [**142**Star][3y] [PS] [sw4mpf0x/powerlurk](https://github.com/sw4mpf0x/powerlurk) Malicious WMI Events using PowerShell
- [**142**Star][3y] [Java] [secarmalabs/psychopath](https://github.com/secarmalabs/psychopath) psychoPATH - hunting file uploads & LFI in the dark. This tool is a customisable payload generator designed for blindly detecting LFI & web file upload implementations allowing to write files into the webroot (aka document root). The "blind" aspect is the key here and is inherent to dynamic testing usually conducted with no access to the source …
-- [**142**Star][2y] [C] [salls/kernel-exploits](https://github.com/salls/kernel-exploits) Some kernel exploits
-- [**142**Star][8d] [C] [ntpsec/ntpsec](https://github.com/ntpsec/ntpsec) The Network Time Protocol suite, refactored GitHub is a mirror of
+- [**142**Star][3y] [Py] [safebreach-labs/pacdoor](https://github.com/safebreach-labs/pacdoor) Proof-of-concept JavaScript malware implemented as a Proxy Auto-Configuration (PAC) File
+- [**142**Star][2y] [Py] [ridter/rtf_11882_0802](https://github.com/ridter/rtf_11882_0802) PoC for CVE-2018-0802 And CVE-2017-11882
+- [**142**Star][10m] [Java] [rani-i/mi365locker](https://github.com/rani-i/mi365locker) Xiaomi Mi365 Scooter locker
+- [**142**Star][1y] [Py] [packtpublishing/mastering-machine-learning-for-penetration-testing](https://github.com/packtpublishing/mastering-machine-learning-for-penetration-testing) Mastering Machine Learning for Penetration Testing, published by Packt
- [**142**Star][2y] [Java] [nickstadb/deserlab](https://github.com/nickstadb/deserlab) Java deserialization exploitation lab.
-- [**142**Star][4m] [Py] [nccgroup/fuzzowski](https://github.com/nccgroup/fuzzowski) the Network Protocol Fuzzer that we will want to use.
- [**142**Star][3y] [Shell] [nccgroup/chuckle](https://github.com/nccgroup/chuckle) An automated SMB relay exploitation script.
-- [**142**Star][8m] [ASP] [misterch0c/apt34](https://github.com/misterch0c/apt34) APT34/OILRIG leak
- [**142**Star][2y] [Ruby] [michenriksen/searchpass](https://github.com/michenriksen/searchpass) searchpass:离线搜索网络设备、Web应用程序等的默认凭据
- [**142**Star][3y] [C] [mdsecresearch/publications](https://github.com/mdsecresearch/publications) A list of published research documents
- [**142**Star][2m] [C] [mak-/mak_it-linux-rootkit](https://github.com/mak-/mak_it-linux-rootkit) This is a linux rootkit using many of the techniques described on
-- [**142**Star][28d] [C] [libyal/libpff](https://github.com/libyal/libpff) Library and tools to access the Personal Folder File (PFF) and the Offline Folder File (OFF) format
- [**142**Star][3y] [PHP] [laurent22/so-sql-injections](https://github.com/laurent22/so-sql-injections) SQL injection vulnerabilities in Stack Overflow PHP questions
- [**142**Star][11m] [Go] [justinazoff/bro-pdns](https://github.com/justinazoff/bro-pdns) Passive DNS collection using Bro
-- [**142**Star][1m] [PowerShell] [jaredcatkinson/psreflect-functions](https://github.com/jaredcatkinson/psreflect-functions) Module to provide PowerShell functions that abstract Win32 API functions
+- [**142**Star][2y] [Py] [julieeen/kleefl](https://github.com/julieeen/kleefl) kleefl:结合了符号执行的Fuzzer,针对普通 C/C++ 应用程序
+- [**142**Star][1m] [PS] [jaredcatkinson/psreflect-functions](https://github.com/jaredcatkinson/psreflect-functions) Module to provide PowerShell functions that abstract Win32 API functions
- [**142**Star][2y] [PHP] [drego85/ddos-php-script](https://github.com/drego85/ddos-php-script) Script to perform a DoS or DDoS UDP Flood by PHP
+- [**142**Star][1y] [C] [dots-tb/lolicon](https://github.com/dots-tb/lolicon) Small vita shell ran from kernel that allows for actual overclocking
- [**142**Star][9m] [Py] [dlcowen/fseventsparser](https://github.com/dlcowen/fseventsparser) Parser for OSX/iOS FSEvents Logs
-- [**142**Star][23d] [C++] [cybermaggedon/cyberprobe](https://github.com/cybermaggedon/cyberprobe) Capturing, analysing and responding to cyber attacks
+- [**142**Star][3m] [C] [covertcodes/freqwatch](https://github.com/covertcodes/freqwatch) Keep track of the airwaves with RTL-SDR; snoop and capture everything into a DB
+- [**142**Star][3m] [Pascal] [coldzer0/cmulator](https://github.com/coldzer0/cmulator) Cmulator is ( x86 - x64 ) Scriptable Reverse Engineering Sandbox Emulator for shellcode and PE binaries . Based on Unicorn & Zydis Engine & javascript
+- [**142**Star][5m] [Py] [codingo/minesweeper](https://github.com/codingo/minesweeper) A Burpsuite plugin (BApp) to aid in the detection of scripts being loaded from over 23000 malicious cryptocurrency mining domains (cryptojacking).
- [**142**Star][3y] [C] [clearlinux/cve-check-tool](https://github.com/clearlinux/cve-check-tool) Original Automated CVE Checking Tool
-- [**142**Star][3y] [Py] [blackye/lalascan](https://github.com/blackye/lalascan) 自主开发的分布式web漏洞扫描框架,集合webkit爬虫,Subdomain子域名发现,sqli、反射xss、Domxss等owasp top10漏洞扫描和边界资产发现能力。同时为通用CMS POC扫描提供了插件扩展平台
-- [**142**Star][24d] [Ruby] [bitzesty/devise_zxcvbn](https://github.com/bitzesty/devise_zxcvbn) Devise plugin to reject weak passwords using zxcvbn
-- [**142**Star][29d] [bin2415/fuzzing_paper](https://github.com/bin2415/fuzzing_paper) puzzing related paper
+- [**142**Star][8m] [Py] [bloodhoundad/bloodhound-tools](https://github.com/bloodhoundad/bloodhound-tools) Miscellaneous tools for BloodHound
+- [**142**Star][26d] [Ruby] [bitzesty/devise_zxcvbn](https://github.com/bitzesty/devise_zxcvbn) Devise plugin to reject weak passwords using zxcvbn
- [**142**Star][2y] [Py] [balidani/tinyctf-platform](https://github.com/balidani/tinyctf-platform) Yet another CTF platform
-- [**142**Star][8d] [Py] [argp/iboot64helper](https://github.com/argp/iboot64helper) IDAPython loader to help with AArch64 iBoot, iBEC, and SecureROM reverse engineering
-- [**142**Star][1y] [Py] [aatlasis/chiron](https://github.com/aatlasis/chiron) An IPv6 Security Assessment framework with advanced IPv6 Extension Headers manipulation capabilities.
-- [**141**Star][11m] [C++] [virustotal/qt-virustotal-uploader](https://github.com/virustotal/qt-virustotal-uploader) VirusTotal Uploader written in C++ using QT framework
-- [**141**Star][4m] [whoisflynn/oscp-exam-report-template](https://github.com/whoisflynn/oscp-exam-report-template) Modified template for the OSCP Exam and Labs. Used during my passing attempt
+- [**142**Star][10d] [Py] [argp/iboot64helper](https://github.com/argp/iboot64helper) IDAPython loader to help with AArch64 iBoot, iBEC, and SecureROM reverse engineering
+- [**141**Star][7d] [Py] [volatilityfoundation/volatility3](https://github.com/volatilityfoundation/volatility3) Volatility 3.0 development
+- [**141**Star][3y] [kejane/securityrss](https://github.com/kejane/SecurityRSS) 网络安全相关的RSS订阅列表
- [**141**Star][5y] [PHP] [veerupandey/penetration-testing-toolkit](https://github.com/veerupandey/penetration-testing-toolkit) A web interface to automate Scanning, Generating metasploit payload, Network Testing,Exploring CMS,Information Gathering and much more
- [**141**Star][2y] [C] [tyranid/windows-logical-eop-workshop](https://github.com/tyranid/windows-logical-eop-workshop) source code for my Windows Logical Privilege Escalation workshop examples
+- [**141**Star][9m] [C] [trailofbits/osquery-extensions](https://github.com/trailofbits/osquery-extensions) osquery extensions by Trail of Bits
- [**141**Star][3y] [C] [thispc/psiphon](https://github.com/thispc/psiphon) A multi-functional version of a popular network circumvention tool
-- [**141**Star][3y] [PowerShell] [sw4mpf0x/powerlurk](https://github.com/sw4mpf0x/powerlurk) Malicious WMI Events using PowerShell
+- [**141**Star][11m] [Py] [t4d/phishingkithunter](https://github.com/t4d/phishingkithunter) Find phishing kits which use your brand/organization's files and image.
+- [**141**Star][1m] [Java] [superblaubeere27/obfuscator](https://github.com/superblaubeere27/obfuscator) A java obfuscator (GUI)
- [**141**Star][2y] [Py] [snare/binjatron](https://github.com/snare/binjatron) Binary Ninja plugin for Voltron integration
-- [**141**Star][3m] [Java] [shack2/javaserializetools](https://github.com/shack2/javaserializetools) Java反序列化漏洞利用工具V1.0 Java反序列化相关漏洞的检查工具,采用JDK 1.8+NetBeans8.2开发,软件运行必须安装JDK 1.8或者以上版本。 支持:weblogic xml反序列化漏洞 CVE-2017-10271/CNVD-C-2019-48814/CVE-2019-2725检查。
+- [**141**Star][4m] [Go] [skx/simple-vpn](https://github.com/skx/simple-vpn) A simple VPN allowing mesh-like communication between nodes, over websockets
- [**141**Star][2y] [Py] [secureworks/flowsynth](https://github.com/secureworks/flowsynth) a network packet capture compiler
- [**141**Star][2y] [Py] [sarah314/spypi](https://github.com/sarah314/spypi) An (un-)ethical hacking-station based on Raspberry Pi and Python
-- [**141**Star][3y] [Py] [safebreach-labs/pacdoor](https://github.com/safebreach-labs/pacdoor) Proof-of-concept JavaScript malware implemented as a Proxy Auto-Configuration (PAC) File
-- [**141**Star][2y] [Py] [ridter/rtf_11882_0802](https://github.com/ridter/rtf_11882_0802) PoC for CVE-2018-0802 And CVE-2017-11882
-- [**141**Star][2m] [C++] [raspberrypi/piserver](https://github.com/raspberrypi/piserver) Raspberry Pi Server wizard to serve Raspbian to network booting Pis
-- [**141**Star][10m] [Java] [rani-i/mi365locker](https://github.com/rani-i/mi365locker) Xiaomi Mi365 Scooter locker
-- [**141**Star][23d] [PHP] [openzipkin/zipkin-php](https://github.com/openzipkin/zipkin-php) official PHP Tracer implementation for Zipkin
+- [**141**Star][5y] [Java] [retme7/cve-2014-7911_poc](https://github.com/retme7/cve-2014-7911_poc) Local root exploit for Nexus5 Android 4.4.4(KTU84P)
+- [**141**Star][25d] [PHP] [openzipkin/zipkin-php](https://github.com/openzipkin/zipkin-php) official PHP Tracer implementation for Zipkin
+- [**141**Star][8m] [ObjC] [objective-see/reikey](https://github.com/objective-see/reikey) Malware and other applications may install persistent keyboard "event taps" to intercept your keystrokes. ReiKey can scan, detect, and monitor for such taps!
- [**141**Star][6m] [C++] [oatpp/oatpp-examples](https://github.com/oatpp/oatpp-examples) List of example projects of how to use oat++ framework
- [**141**Star][2y] [Py] [nviso-be/binsnitch](https://github.com/nviso-be/binsnitch) Detect silent (unwanted) changes to files on your system
- [**141**Star][2y] [Ruby] [nccgroup/binproxy](https://github.com/nccgroup/binproxy) BinProxy is a proxy for arbitrary TCP connections. You can define custom message formats using the BinData gem.
-- [**141**Star][20d] [JS] [mike-works/web-security-fundamentals](https://github.com/mike-works/web-security-fundamentals)
- [**141**Star][4m] [Shell] [mbahadou/postenum](https://github.com/mbahadou/postenum) Postenum is a clean, nice and easy tool for basic/advanced privilege escalation techniques. Postenum tool is intended to be executed locally on a Linux box.
+- [**141**Star][1y] [landgrey/upload-labs-writeup](https://github.com/landgrey/upload-labs-writeup) upload-labs writeup
- [**141**Star][3y] [Py] [kgretzky/python-x86-obfuscator](https://github.com/kgretzky/python-x86-obfuscator) This is a **WIP** tool that performs shellcode obfuscation in x86 instruction set.
+- [**141**Star][4m] [Py] [karmenzind/fp-server](https://github.com/karmenzind/fp-server) Free proxy server, continuously crawling and providing proxies, based on Tornado and Scrapy. 免费代理服务器,基于Tornado和Scrapy,在本地搭建属于自己的代理池
- [**141**Star][1m] [Java] [joshjdevl/libsodium-jni](https://github.com/joshjdevl/libsodium-jni) (Android) Networking and Cryptography Library (NaCL) JNI binding. JNI is utilized for fastest access to native code. Accessible either in Android or Java application. Uses SWIG to generate Java JNI bindings. SWIG definitions are extensible to other languages.
+- [**141**Star][3y] [C] [jongates/jon](https://github.com/jongates/jon) jon 是一款LINUX系统攻防工具箱,包含扫描,入侵,痕迹清理,木马,网站测试等各种黑客工具。Jon is a toolbox of Linux, including scanning, intrusion, trace cleaning, Trojan horse, website testing and other hacker tools.
- [**141**Star][6m] [Py] [integrity-sa/burpcollaborator-docker](https://github.com/integrity-sa/burpcollaborator-docker) This repository includes a set of scripts to install a Burp Collaborator Server in a docker environment, using a LetsEncrypt wildcard certificate. The objective is to simplify as much as possible the process of setting up and maintaining the server.
- [**141**Star][3m] [PHP] [incredibleindishell/cors-vulnerable-lab](https://github.com/incredibleindishell/cors-vulnerable-lab) Sample vulnerable code and its exploit code
- [**141**Star][2y] [C++] [honorarybot/pulsedbg](https://github.com/honorarybot/pulsedbg) Hypervisor-based debugger
- [**141**Star][2y] [C++] [hjc4869/uacbypass](https://github.com/hjc4869/uacbypass) A demo to bypass windows 10 default UAC configuration using IFileOperation and dll hijacking
- [**141**Star][2y] [Py] [gumblex/ptproxy](https://github.com/gumblex/ptproxy) Turn any pluggable transport for Tor into an obfuscating TCP tunnel.
-- [**141**Star][2m] [C] [grimm-co/killerbeez](https://github.com/grimm-co/killerbeez) A distributed fuzzer which aims to pull in the best technologies, make them play nicely together, and run on multiple O/Ses.
- [**141**Star][3m] [CoffeeScript] [furqansoftware/node-whois](https://github.com/furqansoftware/node-whois) A simple WHOIS client for NodeJS
-- [**141**Star][18d] [fdiskyou/threat-intel](https://github.com/fdiskyou/threat-intel) Archive of publicly available threat INTel reports (mostly APT Reports but not limited to).
-- [**141**Star][10m] [Shell] [essandess/macos-openvpn-server](https://github.com/essandess/macos-openvpn-server) macOS OpenVPN Server and Client Configuration (OpenVPN, Tunnelblick, PF)
-- [**141**Star][3m] [C] [covertcodes/freqwatch](https://github.com/covertcodes/freqwatch) Keep track of the airwaves with RTL-SDR; snoop and capture everything into a DB
-- [**141**Star][3m] [Pascal] [coldzer0/cmulator](https://github.com/coldzer0/cmulator) Cmulator is ( x86 - x64 ) Scriptable Reverse Engineering Sandbox Emulator for shellcode and PE binaries . Based on Unicorn & Zydis Engine & javascript
+- [**141**Star][7m] [C] [coolervoid/hiddenwall](https://github.com/coolervoid/hiddenwall) Tool to generate a Linux kernel module for custom rules with Netfilter hooking. (block ports, Hidden mode, rootkit functions etc)
- [**141**Star][1y] [Py] [bruce30262/twindbg](https://github.com/bruce30262/twindbg) PEDA-like debugger UI for WinDbg
-- [**141**Star][14d] [Py] [blueudp/deep-explorer](https://github.com/blueudp/deep-explorer) Deep Explorer is a tool developed in python which purpose is the search of hidden services in tor network, using Ahmia Browser and crawling the links obtained
+- [**141**Star][1y] [Py] [brain-research/tensorfuzz](https://github.com/brain-research/tensorfuzz) A library for performing coverage guided fuzzing of neural networks
+- [**141**Star][16d] [Py] [blueudp/deep-explorer](https://github.com/blueudp/deep-explorer) Deep Explorer is a tool developed in python which purpose is the search of hidden services in tor network, using Ahmia Browser and crawling the links obtained
+- [**141**Star][4y] [Py] [blackye/jenkins](https://github.com/blackye/jenkins) Jenkins漏洞探测、用户抓取爆破
+- [**140**Star][1m] [uknowsec/sharptoolsaggressor](https://github.com/uknowsec/sharptoolsaggressor) 内网渗透中常用的c#程序整合成cs脚本,直接内存加载。持续更新~
+- [**140**Star][14d] [JS] [dfirkuiper/kuiper](https://github.com/dfirkuiper/kuiper) a digital investigation platform that provides a capabilities for the investigation team and individuals to parse, search, visualize collected evidences (evidences could be collected by fast traige script like Hoarder)
- [**140**Star][2y] [Py] [we5ter/gsdf](https://github.com/We5ter/GSDF) 基于谷歌SSL透明证书的子域名查询工具
- [**140**Star][1m] [Shell] [cloudfoundry-incubator/docker-boshrelease](https://github.com/cloudfoundry-incubator/docker-boshrelease) Docker BOSH Release
- [**140**Star][1y] [Java] [tomsteele/burpbuddy](https://github.com/tomsteele/burpbuddy) burpbuddy exposes Burp Suites's extender API over the network through various mediums, with the goal of enabling development in any language without the restrictions of the JVM
-- [**140**Star][3y] [Objective-C] [zhengmin1989/os-x-10.11.6-exp-via-pegasus](https://github.com/zhengmin1989/os-x-10.11.6-exp-via-pegasus) Local privilege escalation for OS X 10.11.6 via PEGASUS
-- [**140**Star][25d] [Py] [wmliang/pe-afl](https://github.com/wmliang/pe-afl)
+- [**140**Star][3y] [ObjC] [zhengmin1989/os-x-10.11.6-exp-via-pegasus](https://github.com/zhengmin1989/os-x-10.11.6-exp-via-pegasus) Local privilege escalation for OS X 10.11.6 via PEGASUS
+- [**140**Star][27d] [Py] [wmliang/pe-afl](https://github.com/wmliang/pe-afl)
- [**140**Star][3y] [Py] [vvalien/sharpmeter](https://github.com/vvalien/sharpmeter) A Simple Way To Make Meterpreter Reverse Payloads
-- [**140**Star][7m] [Py] [vinayakumarr/network-intrusion-detection](https://github.com/vinayakumarr/network-intrusion-detection) Network Intrusion Detection KDDCup '99', NSL-KDD and UNSW-NB15
-- [**140**Star][9m] [C] [trailofbits/osquery-extensions](https://github.com/trailofbits/osquery-extensions) osquery extensions by Trail of Bits
- [**140**Star][2y] [C++] [talos-vulndev/afl-dyninst](https://github.com/talos-vulndev/afl-dyninst) American Fuzzy Lop + Dyninst == AFL Fuzzing blackbox binaries
-- [**140**Star][11m] [Py] [t4d/phishingkithunter](https://github.com/t4d/phishingkithunter) Find phishing kits which use your brand/organization's files and image.
+- [**140**Star][2y] [Shell] [systematicat/hack-captive-portals](https://github.com/systematicat/hack-captive-portals) Hack any Captive portal using MAC-spoofing technique
- [**140**Star][2y] [Py] [sumanj/frankencert](https://github.com/sumanj/frankencert) Adversarial Testing of Certificate Validation in SSL/TLS Implementations
- [**140**Star][4y] [Py] [shengqi158/pyvulhunter](https://github.com/shengqi158/pyvulhunter) python audit tool 审计 注入 inject
- [**140**Star][2m] [Py] [scrapinghub/python-scrapinghub](https://github.com/scrapinghub/python-scrapinghub) A client interface for Scrapinghub's API
- [**140**Star][5y] [Shell] [s7ephen/osx-sandbox--seatbelt--profiles](https://github.com/s7ephen/osx-sandbox--seatbelt--profiles) A repository for configuration profiles for OSX's Seatbelt Application Sandbox
-- [**140**Star][5y] [Java] [retme7/cve-2014-7911_poc](https://github.com/retme7/cve-2014-7911_poc) Local root exploit for Nexus5 Android 4.4.4(KTU84P)
+- [**140**Star][5m] [Py] [ridter/cve-2019-1040](https://github.com/ridter/cve-2019-1040) CVE-2019-1040 with Exchange
- [**140**Star][3m] [Py] [pybind/python_example](https://github.com/pybind/python_example) Example pybind11 module built with a Python-based build system
- [**140**Star][10m] [Py] [payloadsecurity/vxapi](https://github.com/payloadsecurity/vxapi) A generic interface and CLI for all endpoints of the Falcon Sandbox API
-- [**140**Star][1y] [Py] [packtpublishing/mastering-machine-learning-for-penetration-testing](https://github.com/packtpublishing/mastering-machine-learning-for-penetration-testing) Mastering Machine Learning for Penetration Testing, published by Packt
-- [**140**Star][8m] [Objective-C] [objective-see/reikey](https://github.com/objective-see/reikey) Malware and other applications may install persistent keyboard "event taps" to intercept your keystrokes. ReiKey can scan, detect, and monitor for such taps!
+- [**140**Star][2y] [Py] [nullarray/cypher](https://github.com/nullarray/cypher) Pythonic ransomware proof of concept.
+- [**140**Star][4y] [C++] [nihilus/hexrays_tools](https://github.com/nihilus/hexrays_tools) Assist in creation of new structure definitions / virtual calls detection
+- [**140**Star][2d] [C#] [microsoft/windowsprotocoltestsuites](https://github.com/microsoft/windowsprotocoltestsuites) Windows Protocol Test Suites provide interoperability testing against an implementation of the Windows open specifications.
+- [**140**Star][2m] [C#] [med0x2e/gadgettojscript](https://github.com/med0x2e/gadgettojscript) A tool for generating .NET serialized gadgets that can trigger .NET assembly load/execution when deserialized using BinaryFormatter from JS/VBS/VBA based scripts.
- [**140**Star][2y] [Java] [lorenzoongithub/nudge4j](https://github.com/lorenzoongithub/nudge4j) Get inside your JVM
- [**140**Star][1y] [laxa/hackingtools](https://github.com/laxa/hackingtools) Exhaustive list of hacking tools
- [**140**Star][6y] [Tcl] [koto/mosquito](https://github.com/koto/mosquito) XSS exploitation tool - access victims through HTTP proxy
-- [**140**Star][2y] [Py] [julieeen/kleefl](https://github.com/julieeen/kleefl) kleefl:结合了符号执行的Fuzzer,针对普通 C/C++ 应用程序
-- [**140**Star][3y] [C] [jongates/jon](https://github.com/jongates/jon) jon 是一款LINUX系统攻防工具箱,包含扫描,入侵,痕迹清理,木马,网站测试等各种黑客工具。Jon is a toolbox of Linux, including scanning, intrusion, trace cleaning, Trojan horse, website testing and other hacker tools.
- [**140**Star][7y] [C] [johnath/beep](https://github.com/johnath/beep) beep is a command line tool for linux that beeps the PC speaker
- [**140**Star][2y] [C] [ixty/mandibule](https://github.com/ixty/mandibule) 向远程进程注入ELF文件
- [**140**Star][4y] [HTML] [hexgolems/schem](https://github.com/hexgolems/schem) A debugger frontend
-- [**140**Star][6m] [Visual Basic] [dzzie/pdfstreamdumper](https://github.com/dzzie/pdfstreamdumper) research tool for the analysis of malicious pdf documents. make sure to run the installer first to get all of the 3rd party dlls installed correctly.
+- [**140**Star][2y] [guanchao/androidchecklist](https://github.com/guanchao/androidchecklist) Android应用审计checklist整理
+- [**140**Star][7m] [Visual Basic .NET] [dzzie/pdfstreamdumper](https://github.com/dzzie/pdfstreamdumper) research tool for the analysis of malicious pdf documents. make sure to run the installer first to get all of the 3rd party dlls installed correctly.
- [**140**Star][4y] [Py] [dzonerzy/acunetix_0day](https://github.com/dzonerzy/acunetix_0day) Acunetix 0day RCE
+- [**140**Star][3y] [C] [dismantl/improvedreflectivedllinjection](https://github.com/dismantl/improvedreflectivedllinjection) An improvement of the original reflective DLL injection technique by Stephen Fewer of Harmony Security
+- [**140**Star][2m] [C++] [dfir-orc/dfir-orc](https://github.com/dfir-orc/dfir-orc) Forensics artefact collection tool for systems running Microsoft Windows
- [**140**Star][1y] [Py] [codypierce/hackers-grep](https://github.com/codypierce/hackers-grep) hackers-grep is a utility to search for strings in PE executables including imports, exports, and debug symbols
-- [**140**Star][5m] [Py] [codingo/minesweeper](https://github.com/codingo/minesweeper) A Burpsuite plugin (BApp) to aid in the detection of scripts being loaded from over 23000 malicious cryptocurrency mining domains (cryptojacking).
- [**140**Star][3y] [C#] [cn33liz/cscriptshell](https://github.com/cn33liz/cscriptshell) CScriptShell, a Powershell Host running within cscript.exe
- [**140**Star][2y] [PHP] [bugku/bwvs](https://github.com/bugku/bwvs) Web漏洞渗透测试靶场
-- [**140**Star][1y] [Py] [brain-research/tensorfuzz](https://github.com/brain-research/tensorfuzz) A library for performing coverage guided fuzzing of neural networks
-- [**140**Star][4y] [Py] [blackye/jenkins](https://github.com/blackye/jenkins) Jenkins漏洞探测、用户抓取爆破
- [**140**Star][3y] [JS] [atiger77/dionaea](https://github.com/atiger77/dionaea) 基于Docker的蜜罐系统
- [**139**Star][3y] [Py] [n1nj4sec/mimipy](https://github.com/n1nj4sec/mimipy) port of mimipenguin.sh in python with some additional protection features
-- [**139**Star][3m] [Py] [daeken/httprebind](https://github.com/daeken/httprebind) Automatic tool for DNS rebinding-based SSRF attacks
+- [**139**Star][8d] [C#] [0xd4d/jitdasm](https://github.com/0xd4d/jitdasm) Disassemble jitted .NET methods
+- [**139**Star][7d] [Rust] [bytecodealliance/wasmparser](https://github.com/bytecodealliance/wasmparser) A simple event-driven library for parsing WebAssembly binary files
+- [**139**Star][2m] [crytic/blockchain-security-contacts](https://github.com/crytic/blockchain-security-contacts) Directory of security contacts for blockchain companies
+- [**139**Star][2d] [Java] [zaproxy/zap-hud](https://github.com/zaproxy/zap-hud) 看ZAP如何解决安全工具的UX特别难用的问题
+- [**139**Star][4m] [Py] [wangyihang/sourceleakhacker](https://github.com/wangyihang/sourceleakhacker) a muilt-thread web source leak detector
- [**139**Star][1y] [Py] [und3rf10w/external_c2_framework](https://github.com/und3rf10w/external_c2_framework) Python api for usage with cobalt strike's External C2 specification
-- [**139**Star][2m] [C] [twogood/unshield](https://github.com/twogood/unshield) Tool and library to extract CAB files from InstallShield installers
+- [**139**Star][4d] [C] [twogood/unshield](https://github.com/twogood/unshield) Tool and library to extract CAB files from InstallShield installers
+- [**139**Star][3m] [Py] [technicaldada/hackerpro](https://github.com/technicaldada/hackerpro) All in One Hacking Tool for Linux & Android (Termux). Hackers are welcome in our blog
+- [**139**Star][2y] [spoock1024/web-security](https://github.com/spoock1024/web-security) Web安全中比较好的文章
- [**139**Star][4y] [Py] [spiderlabs/cribdrag](https://github.com/spiderlabs/cribdrag) cribdrag - an interactive crib dragging tool for cryptanalysis on ciphertext generated with reused or predictable stream cipher keys
- [**139**Star][3y] [Py] [skochinsky/me-tools](https://github.com/skochinsky/me-tools) Tools for working with Intel ME
-- [**139**Star][1y] [Py] [santatic/web2attack](https://github.com/santatic/web2attack) Web hacking framework with tools, exploits by python
+- [**139**Star][2d] [Py] [santatic/web2attack](https://github.com/santatic/web2attack) Web hacking framework with tools, exploits by python
- [**139**Star][2y] [C] [saleemrashid/ledger-mcu-backdoor](https://github.com/saleemrashid/ledger-mcu-backdoor) Proof of concept for Ledger MCU exploit
-- [**139**Star][5m] [Py] [ridter/cve-2019-1040](https://github.com/ridter/cve-2019-1040) CVE-2019-1040 with Exchange
- [**139**Star][1m] [Py] [rhinosecuritylabs/gcpbucketbrute](https://github.com/rhinosecuritylabs/gcpbucketbrute) A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated.
+- [**139**Star][5d] [recolic/awesome-hust](https://github.com/recolic/awesome-hust) HUST experiments, reports, and useful tools.
- [**139**Star][1m] [HTML] [proabiral/inception](https://github.com/proabiral/inception) A highly configurable tool to check for whatever you like against any number of hosts.
-- [**139**Star][2y] [Py] [nullarray/cypher](https://github.com/nullarray/cypher) Pythonic ransomware proof of concept.
+- [**139**Star][2m] [Verilog] [osresearch/spispy](https://github.com/osresearch/spispy) An open source SPI flash emulator and monitor
+- [**139**Star][2m] [nathanchance/android-kernel-clang](https://github.com/nathanchance/android-kernel-clang) Information on compiling Android kernels with Clang
- [**139**Star][9m] [Py] [mtivadar/qiew](https://github.com/mtivadar/qiew) Home of Qiew - Reverse engineering tool
-- [**139**Star][2m] [C#] [med0x2e/gadgettojscript](https://github.com/med0x2e/gadgettojscript) A tool for generating .NET serialized gadgets that can trigger .NET assembly load/execution when deserialized using BinaryFormatter from JS/VBS/VBA based scripts.
+- [**139**Star][4m] [Py] [mgeeky/expdevbadchars](https://github.com/mgeeky/expdevbadchars) Bad Characters highlighter for exploit development purposes supporting multiple input formats while comparing.
- [**139**Star][4y] [Py] [lauixdata/wechat_hack](https://github.com/lauixdata/wechat_hack) 微信黑客攻击平台 - 已经废弃
- [**139**Star][2y] [l3m0n/linux_information](https://github.com/l3m0n/linux_information) 自动化收集linux信息
+- [**139**Star][17d] [Jupyter Notebook] [kelu124/echomods](https://github.com/kelu124/echomods) Open source ultrasound processing modules and building blocks
- [**139**Star][2m] [C#] [juunas11/aspnetcore-security-headers](https://github.com/juunas11/aspnetcore-security-headers) Middleware for adding security headers to an ASP.NET Core application.
+- [**139**Star][6m] [Py] [jaxbcd/zeebsploit](https://github.com/jaxbcd/zeebsploit) web scanner - exploitation - information gathering
- [**139**Star][7m] [Py] [iphelix/ida-sploiter](https://github.com/iphelix/ida-sploiter) a plugin for Hex-Ray's IDA Pro disassembler designed to enhance IDA's capabilities as an exploit development and vulnerability research tool.
- [**139**Star][11m] [C++] [guidovranken/libfuzzer-gv](https://github.com/guidovranken/libfuzzer-gv) 加强版 libFuzzer:超快速Fuzzing 的新技巧
-- [**139**Star][2y] [guanchao/androidchecklist](https://github.com/guanchao/androidchecklist) Android应用审计checklist整理
-- [**139**Star][22d] [C] [glv2/bruteforce-luks](https://github.com/glv2/bruteforce-luks) Try to find the password of a LUKS encrypted volume.
+- [**139**Star][24d] [C] [glv2/bruteforce-luks](https://github.com/glv2/bruteforce-luks) Try to find the password of a LUKS encrypted volume.
- [**139**Star][2y] [C] [gkaindl/meltdown-poc](https://github.com/gkaindl/meltdown-poc) A quick PoC to try out the "meltdown" timing attack.
+- [**139**Star][11m] [C++] [finixbit/elf-parser](https://github.com/finixbit/elf-parser) Lightweight elf binary parser with no external dependencies - Sections, Symbols, Relocations, Segments
- [**139**Star][2y] [C] [eterna1/puszek-rootkit](https://github.com/eterna1/puszek-rootkit) linux rootkit
-- [**139**Star][5m] [Py] [echowei/deeptraffic](https://github.com/echowei/deeptraffic) Deep Learning models for network traffic classification
-- [**139**Star][2m] [C++] [dfir-orc/dfir-orc](https://github.com/dfir-orc/dfir-orc) Forensics artefact collection tool for systems running Microsoft Windows
+- [**139**Star][10m] [PS] [empireproject/psinject](https://github.com/empireproject/psinject) Inject PowerShell into any process
- [**139**Star][2m] [Py] [cboesecurity/password_pwncheck](https://github.com/cboesecurity/password_pwncheck) Kerberos / Windows AD / Linux PAM password change check against breached lists (HIBP), and other rules
- [**139**Star][1y] [Py] [c0r3dump3d/osueta](https://github.com/c0r3dump3d/osueta) A simple Python script to exploit the OpenSSH User Enumeration Timing Attack.
- [**139**Star][5y] [PHP] [btoplak/joomla-anti-malware-scan-script--jamss-](https://github.com/btoplak/joomla-anti-malware-scan-script--jamss-) a Joomla! and WordPress Security script that automatically scans the Joomla! or Wordpress files for some patterns and "fingerprints" of malware, trojans or other injections into PHP code
+- [**139**Star][11m] [Py] [bignerd95/winboxexploit](https://github.com/bignerd95/winboxexploit) Proof of Concept of Winbox Critical Vulnerability
- [**139**Star][2m] [Scala] [azure/azure-cosmosdb-spark](https://github.com/azure/azure-cosmosdb-spark) Apache Spark Connector for Azure Cosmos DB
- [**139**Star][6y] [Ruby] [aidanns/vagrant-reload](https://github.com/aidanns/vagrant-reload) A plugin that allows you to reload a Vagrant plugin as a provisioning step.
-- [**138**Star][8d] [C++] [tenzir/vast](https://github.com/tenzir/vast) a scalable foundation for a security operations center (SOC): a rich data model for security data, high-throughput ingestion of telemetry, low-latency search, and flexible export in various formats.
-- [**138**Star][8d] [Java] [zaproxy/zap-hud](https://github.com/zaproxy/zap-hud) 看ZAP如何解决安全工具的UX特别难用的问题
+- [**138**Star][3m] [ckjbug/xmind-learning](https://github.com/ckjbug/xmind-learning) 各种安全相关思维导图整理收集
+- [**138**Star][7m] [JS] [wzdnzd/shadowsocksx-ng-r](https://github.com/wzdnzd/shadowsocksx-ng-r) Shadowsocks Client for MacOS
+- [**138**Star][2d] [C++] [tenzir/vast](https://github.com/tenzir/vast) a scalable foundation for a security operations center (SOC): a rich data model for security data, high-throughput ingestion of telemetry, low-latency search, and flexible export in various formats.
+- [**138**Star][1m] [Py] [darkarp/chromepass](https://github.com/darkarp/chromepass) Chromepass - Hacking Chrome Saved Passwords
- [**138**Star][8m] [Shell] [wazehell/pe-linux](https://github.com/wazehell/pe-linux) Linux Privilege Escalation Tool By WazeHell
- [**138**Star][7m] [Shell] [vcheckzen/familycloudspeederinshell](https://github.com/vcheckzen/familycloudspeederinshell) [ 天翼家庭云/天翼云盘提速 Shell 版 ] A Shell Implementation of FamilyCloudSpeeder, ESurfing
- [**138**Star][1y] [Py] [ultimatelabs/zoom](https://github.com/ultimatelabs/zoom) Automatic & lightning fast wordpress vulnerability scanner
- [**138**Star][1y] [C++] [tromp/equihash](https://github.com/tromp/equihash) multi-parameter Equihash proof-of-work multi-threaded C solvers
-- [**138**Star][3m] [Py] [technicaldada/hackerpro](https://github.com/technicaldada/hackerpro) All in One Hacking Tool for Linux & Android (Termux). Hackers are welcome in our blog
+- [**138**Star][3m] [Py] [threatexpress/cs2modrewrite](https://github.com/threatexpress/cs2modrewrite) Convert Cobalt Strike profiles to modrewrite scripts
+- [**138**Star][9m] [C++] [thefox/keylogger](https://github.com/thefox/keylogger) Keylogger for Windows.
+- [**138**Star][12m] [C] [tharina/35c3ctf](https://github.com/tharina/35c3ctf) 35C3 Junior CTF pwnables
- [**138**Star][8y] [JS] [substack/node-password-reset](https://github.com/substack/node-password-reset) middleware for password reset emails
-- [**138**Star][2y] [spoock1024/web-security](https://github.com/spoock1024/web-security) Web安全中比较好的文章
- [**138**Star][1m] [Shell] [shellhub/shellhub](https://github.com/shellhub/shellhub) shell script hub
-- [**138**Star][4y] [C++] [nihilus/hexrays_tools](https://github.com/nihilus/hexrays_tools) Assist in creation of new structure definitions / virtual calls detection
-- [**138**Star][4m] [Py] [mgeeky/expdevbadchars](https://github.com/mgeeky/expdevbadchars) Bad Characters highlighter for exploit development purposes supporting multiple input formats while comparing.
-- [**138**Star][1y] [landgrey/upload-labs-writeup](https://github.com/landgrey/upload-labs-writeup) upload-labs writeup
-- [**138**Star][3y] [Objective-C] [kpwn/935csbypass](https://github.com/kpwn/935csbypass) codesign bypass (get out of rop without JIT)
+- [**138**Star][7y] [C] [quarkslab/dreamboot](https://github.com/quarkslab/dreamboot) UEFI bootkit
+- [**138**Star][7m] [C++] [macmade/dyld_cache_extract](https://github.com/macmade/dyld_cache_extract) A macOS utility to extract dynamic libraries from the dyld_shared_cache of macOS and iOS.
- [**138**Star][2y] [Py] [jrbancel/chromagnon](https://github.com/jrbancel/chromagnon) Chrome/Chromium Forensic Tool : Parses History, Visited Links, Downloaded Files and Cache
+- [**138**Star][2y] [ObjC] [jiangbolee/changelocation](https://github.com/jiangbolee/changelocation) 改变自己的定位地址(免越狱打卡)
- [**138**Star][7m] [C] [jgm/lunamark](https://github.com/jgm/lunamark) Lua library for conversion between markup formats
- [**138**Star][6y] [Py] [jezdez/django-discover-runner](https://github.com/jezdez/django-discover-runner) A Django test runner based on unittest2's test discovery.
-- [**138**Star][6m] [Py] [jaxbcd/zeebsploit](https://github.com/jaxbcd/zeebsploit) web scanner - exploitation - information gathering
- [**138**Star][4m] [Go] [greenboxal/dns-heaven](https://github.com/greenboxal/dns-heaven) 通过/etc/resolv.conf 启用本地 DNS stack 来修复(愚蠢的) macOS DNS stack
+- [**138**Star][2y] [Py] [google/tcp_killer](https://github.com/google/tcp_killer) 关闭 Linux或 MacOS 的 Tcp 端口
- [**138**Star][6m] [C] [glv2/bruteforce-wallet](https://github.com/glv2/bruteforce-wallet) Try to find the password of an encrypted Peercoin (or Bitcoin, Litecoin, etc...) wallet file.
-- [**138**Star][11m] [C++] [finixbit/elf-parser](https://github.com/finixbit/elf-parser) Lightweight elf binary parser with no external dependencies - Sections, Symbols, Relocations, Segments
+- [**138**Star][10m] [Py] [gawen/virustotal](https://github.com/gawen/virustotal)
- [**138**Star][8m] [JS] [exodusintel/chromium-941743](https://github.com/exodusintel/chromium-941743) Chrome v8 1Day Exploit by István Kurucsai
- [**138**Star][4m] [CSS] [epfl-vlsc/memoro](https://github.com/epfl-vlsc/memoro) 堆详情查探器, 可查看进程分配堆的位置和时间, 以及进程如何使用堆内存
-- [**138**Star][10m] [PowerShell] [empireproject/psinject](https://github.com/empireproject/psinject) Inject PowerShell into any process
- [**138**Star][2m] [C] [dgiardini/rtl-ais](https://github.com/dgiardini/rtl-ais) A simple AIS tuner and generic dual-frequency FM demodulator
+- [**138**Star][2m] [C] [dekunukem/kbord](https://github.com/dekunukem/kbord) Scriptable mechanical keypad with OLED display and RGB backlight.
- [**138**Star][2y] [Py] [cyberark/shimit](https://github.com/cyberark/shimit) A tool that implements the Golden SAML attack
-- [**138**Star][7m] [C] [coolervoid/hiddenwall](https://github.com/coolervoid/hiddenwall) Tool to generate a Linux kernel module for custom rules with Netfilter hooking. (block ports, Hidden mode, rootkit functions etc)
+- [**138**Star][16d] [Go] [cloudflare/cfssl_trust](https://github.com/cloudflare/cfssl_trust) CFSSL's CA trust store repository
- [**138**Star][6m] [Perl] [caledoniaproject/jenkins-cli-exploit](https://github.com/caledoniaproject/jenkins-cli-exploit) Jenkins CommonCollections Exploit
-- [**138**Star][22d] [C] [antelle/argon2-browser](https://github.com/antelle/argon2-browser) Argon2 library compiled for browser runtime
-- [**138**Star][8m] [Py] [ale5000-git/tingle](https://github.com/ale5000-git/tingle) Android patcher
-- [**137**Star][3m] [ckjbug/xmind-learning](https://github.com/ckjbug/xmind-learning) 各种安全相关思维导图整理收集
+- [**138**Star][24d] [C] [antelle/argon2-browser](https://github.com/antelle/argon2-browser) Argon2 library compiled for browser runtime
+- [**138**Star][9m] [Py] [ale5000-git/tingle](https://github.com/ale5000-git/tingle) Android patcher
- [**137**Star][4y] [Py] [pentestmonkey/pysecdump](https://github.com/pentestmonkey/pysecdump) Python-based tool to dump security information from Windows systems
- [**137**Star][9m] [Go] [snail007/shadowtunnel](https://github.com/snail007/shadowtunnel) secure tunnel which help you protecting your tcp traffic between your machine and your service on remote.
- [**137**Star][1m] [JS] [fcavallarin/domdig](https://github.com/fcavallarin/domdig) DOM XSS scanner for Single Page Applications
- [**137**Star][11m] [Shell] [tacticthreat/penetrationtesting-notes](https://github.com/tacticthreat/PenetrationTesting-Notes) Penetration Testing Notes and Playbook (PTP)
- [**137**Star][8m] [Py] [mdudek-ics/trisis-triton-hatman](https://github.com/MDudek-ICS/TRISIS-TRITON-HATMAN) Repository containting original and decompiled files of TRISIS/TRITON/HATMAN malware
-- [**137**Star][1m] [Py] [darkarp/chromepass](https://github.com/darkarp/chromepass) Chromepass - Hacking Chrome Saved Passwords
+- [**137**Star][18d] [Shell] [reb311ion/tornado](https://github.com/reb311ion/tornado) All in one MITM tool .
- [**137**Star][4y] [C] [xairy/kaslr-bypass-via-prefetch](https://github.com/xairy/kaslr-bypass-via-prefetch) A proof-of-concept KASLR bypass for the Linux kernel via timing prefetch (dilettante implementation, better read the original paper:
-- [**137**Star][5y] [Objective-C] [tyranid/ie11sandboxescapes](https://github.com/tyranid/ie11sandboxescapes) Some example source code for fixed IE11 sandbox escapes.
+- [**137**Star][5y] [ObjC] [tyranid/ie11sandboxescapes](https://github.com/tyranid/ie11sandboxescapes) Some example source code for fixed IE11 sandbox escapes.
- [**137**Star][2y] [Java] [tinylcy/classanalyzer](https://github.com/tinylcy/classanalyzer) A Java Class File Disassembler
-- [**137**Star][9m] [C++] [thefox/keylogger](https://github.com/thefox/keylogger) Keylogger for Windows.
-- [**137**Star][2y] [Shell] [systematicat/hack-captive-portals](https://github.com/systematicat/hack-captive-portals) Hack any Captive portal using MAC-spoofing technique
-- [**137**Star][30d] [Java] [superblaubeere27/obfuscator](https://github.com/superblaubeere27/obfuscator) A java obfuscator (GUI)
- [**137**Star][8y] [stefanesser/ida-ios-toolkit](https://github.com/stefanesser/ida-ios-toolkit) Collection of idapython scripts for dealing with the iOS kernelcache
-- [**137**Star][4y] [PowerShell] [secabstraction/wmisploit](https://github.com/secabstraction/wmisploit) a small set of PowerShell scripts that leverage the WMI service, for post-exploitation use
+- [**137**Star][4y] [PS] [secabstraction/wmisploit](https://github.com/secabstraction/wmisploit) a small set of PowerShell scripts that leverage the WMI service, for post-exploitation use
- [**137**Star][1y] [Py] [quentinhardy/scriptsandexploits](https://github.com/quentinhardy/scriptsandexploits) Some scripts and exploits
-- [**137**Star][7y] [C] [quarkslab/dreamboot](https://github.com/quarkslab/dreamboot) UEFI bootkit
- [**137**Star][4y] [Py] [puniaze/portdog](https://github.com/puniaze/portdog) network anomaly detector aimed to detect port scanning techniques
+- [**137**Star][2m] [HTML] [nusenu/ansible-relayor](https://github.com/nusenu/ansible-relayor) An Ansible Role for Tor Relay Operators
- [**137**Star][9m] [Py] [nh2/strace-pipes-presentation](https://github.com/nh2/strace-pipes-presentation) 利用strace+管道/socket进行调试
- [**137**Star][1y] [Java] [netspi/wsdler](https://github.com/netspi/wsdler) WSDL Parser extension for Burp
- [**137**Star][3y] [Py] [misterch0c/twitterbftd](https://github.com/misterch0c/twitterbftd) Twitter Back From The Dead looks in a user tweets history for domain names that are available for registration
-- [**137**Star][7m] [C++] [macmade/dyld_cache_extract](https://github.com/macmade/dyld_cache_extract) A macOS utility to extract dynamic libraries from the dyld_shared_cache of macOS and iOS.
-- [**137**Star][24d] [PowerShell] [lazywinadmin/adsips](https://github.com/lazywinadmin/adsips) PowerShell module to interact with Active Directory using ADSI and the System.DirectoryServices namespace (.NET Framework)
+- [**137**Star][26d] [PS] [lazywinadmin/adsips](https://github.com/lazywinadmin/adsips) PowerShell module to interact with Active Directory using ADSI and the System.DirectoryServices namespace (.NET Framework)
- [**137**Star][3y] [C] [koutto/ioctlbf](https://github.com/koutto/ioctlbf) Windows Kernel Drivers fuzzer
- [**137**Star][10m] [Py] [johndekroon/serializekiller](https://github.com/johndekroon/serializekiller) Mass scanner for the Java serialize bug
+- [**137**Star][2m] [ignitetechnologies/ctf-difficulty](https://github.com/ignitetechnologies/ctf-difficulty) This cheasheet is aimed at the CTF Players and Beginners to help them sort the CTF Challenges on the basis of Difficulties.
+- [**137**Star][2m] [ObjC] [icepa/tor.framework](https://github.com/icepa/tor.framework) Tor framework for the iCepa project
+- [**137**Star][2y] [Java] [helios-decompiler/standalone-app](https://github.com/helios-decompiler/standalone-app) All-in-one Java reverse engineering tool
+- [**137**Star][7m] [C] [hc0d3r/mysql-magic](https://github.com/hc0d3r/mysql-magic) dump mysql client password from memory
- [**137**Star][2y] [greymd/cve-2017-1000117](https://github.com/greymd/cve-2017-1000117) Check Git's vulnerability CVE-2017-1000117
-- [**137**Star][7d] [C++] [grammatech/ddisasm](https://github.com/grammatech/ddisasm) A fast and accurate disassembler
-- [**137**Star][2y] [Py] [google/tcp_killer](https://github.com/google/tcp_killer) 关闭 Linux或 MacOS 的 Tcp 端口
+- [**137**Star][9d] [C++] [grammatech/ddisasm](https://github.com/grammatech/ddisasm) A fast and accurate disassembler
+- [**137**Star][2y] [Py] [gradiusx/hevd-python-solutions](https://github.com/gradiusx/hevd-python-solutions) Python solutions for the HackSysTeam Extreme Vulnerable Driver
- [**137**Star][2y] [Java] [gnaixx/hidex-hack](https://github.com/gnaixx/hidex-hack) anti reverse by hack dex file
- [**137**Star][7m] [Py] [giovanifss/gitmails](https://github.com/giovanifss/gitmails) An information gathering tool to collect git commit emails in version control host services
-- [**137**Star][10m] [Py] [gawen/virustotal](https://github.com/gawen/virustotal)
- [**137**Star][3y] [C] [ebursztein/malusb](https://github.com/ebursztein/malusb) Malicious USB
-- [**137**Star][3y] [C] [dismantl/improvedreflectivedllinjection](https://github.com/dismantl/improvedreflectivedllinjection) An improvement of the original reflective DLL injection technique by Stephen Fewer of Harmony Security
+- [**137**Star][17d] [Ruby] [dev-sec/chef-ssh-hardening](https://github.com/dev-sec/chef-ssh-hardening) This chef cookbook provides secure ssh-client and ssh-server configurations.
- [**137**Star][3y] [C] [cr4sh/peibackdoor](https://github.com/cr4sh/peibackdoor) PEI stage backdoor for UEFI compatible firmware
-- [**137**Star][14d] [Go] [cloudflare/cfssl_trust](https://github.com/cloudflare/cfssl_trust) CFSSL's CA trust store repository
-- [**137**Star][11m] [Py] [bignerd95/winboxexploit](https://github.com/bignerd95/winboxexploit) Proof of Concept of Winbox Critical Vulnerability
+- [**137**Star][5y] [Py] [byt3bl33d3r/sslstrip2](https://github.com/byt3bl33d3r/sslstrip2) A mirror of the original SSLstrip+ code by Leonardo Nve
- [**137**Star][3y] [JS] [as0ler/frida-scripts](https://github.com/as0ler/frida-scripts) Repository including some useful frida script for iOS Reversing
- [**137**Star][2y] [Py] [anhkgg/pyrat](https://github.com/anhkgg/pyrat) PyRat,a rat by python xmlrpc
- [**137**Star][5m] [C] [akayn/demos](https://github.com/akayn/demos) Windows Kernel Exploitation. Static & dynamic analysis, exploits & vuln research. Mitigations bypass's, genric bug-class's.
+- [**137**Star][1y] [PLpgSQL] [1eez/103976](https://github.com/1eez/103976) 103976个英语单词库(sql版,csv版,Excel版)包含英文单词,中文翻译,单词的词性及多种词义,执行SQL语句就可以生成表,支持SQL Server,MySQL等多种数据库
+- [**136**Star][9d] [Scala] [shiftleftsecurity/joern](https://github.com/shiftleftsecurity/joern) Open-source code analysis platform for C/C++ based on code property graphs
- [**136**Star][2y] [Py] [vysecurity/ipfuscator](https://github.com/vysecurity/IPFuscator) IPFuscator - A tool to automatically generate alternative IP representations
+- [**136**Star][14d] [PS] [lazywinadmin/monitor-adgroupmembership](https://github.com/lazywinadmin/Monitor-ADGroupMembership) PowerShell script to monitor Active Directory groups and send an email when someone is changing the membership
- [**136**Star][6y] [Py] [osirislab/ctf-challenges](https://github.com/osirislab/CTF-Challenges) A repository of challenges from various CTF competitions.
-- [**136**Star][2y] [PowerShell] [gpoguy/getvulnerablegpo](https://github.com/gpoguy/getvulnerablegpo) PowerShell script to find 'vulnerable' security-related GPOs that should be hardended
-- [**136**Star][16d] [Shell] [reb311ion/tornado](https://github.com/reb311ion/tornado) All in one MITM tool .
+- [**136**Star][2y] [PS] [gpoguy/getvulnerablegpo](https://github.com/gpoguy/getvulnerablegpo) PowerShell script to find 'vulnerable' security-related GPOs that should be hardended
+- [**136**Star][1y] [nsacyber/unfetter](https://github.com/nsacyber/unfetter) Identifies defensive gaps in security posture by leveraging Mitre's ATT&CK framework. #nsacyber
- [**136**Star][2m] [JS] [jesusprubio/shodan-client](https://github.com/jesusprubio/shodan-client)
- [**136**Star][6y] [C++] [zer0fl4g/nanomite](https://github.com/zer0fl4g/nanomite) Graphical Debugger for x64 and x86 on Windows
+- [**136**Star][8m] [Py] [yt1g3r/cve-2019-3396_exp](https://github.com/yt1g3r/cve-2019-3396_exp) CVE-2019-3396 confluence SSTI RCE
+- [**136**Star][3y] [Java] [ysrc/anti-emulator](https://github.com/ysrc/anti-emulator) 基于文件特征的Android模拟器检测
- [**136**Star][1y] [C] [xvortex/ps4-hen-vtx](https://github.com/xvortex/ps4-hen-vtx) A fully implemented kernel exploit for the PS4 with HEN
-- [**136**Star][4m] [Py] [wangyihang/sourceleakhacker](https://github.com/wangyihang/sourceleakhacker) a muilt-thread web source leak detector
+- [**136**Star][12m] [JS] [thx/magix-inspector](https://github.com/thx/magix-inspector) magix项目调试分析工具
- [**136**Star][4m] [Jupyter Notebook] [threathuntingproject/hunter](https://github.com/threathuntingproject/hunter) A threat hunting / data analysis environment based on Python, Pandas, PySpark and Jupyter Notebook.
-- [**136**Star][3m] [Py] [threatexpress/cs2modrewrite](https://github.com/threatexpress/cs2modrewrite) Convert Cobalt Strike profiles to modrewrite scripts
-- [**136**Star][11m] [C] [tharina/35c3ctf](https://github.com/tharina/35c3ctf) 35C3 Junior CTF pwnables
-- [**136**Star][10m] [Py] [scrapinghub/scrapy-training](https://github.com/scrapinghub/scrapy-training) Scrapy Training companion code
+- [**136**Star][7y] [C] [t57root/pwnginx](https://github.com/t57root/pwnginx) Pwn nginx - a nginx backdoor provides shell access, socks5 tunneling, http password sniffing.
+- [**136**Star][28d] [Py] [swisskyrepo/vulny-code-static-analysis](https://github.com/swisskyrepo/vulny-code-static-analysis) Basic script to detect vulnerabilities into a PHP source code using statical analysis, based on regex
+- [**136**Star][4y] [scfwse/blockchinasoftware](https://github.com/scfwse/blockchinasoftware) 国产安全软件免疫补丁
- [**136**Star][4m] [C] [rmmh/abbrase](https://github.com/rmmh/abbrase) password generation based on abbreviating phrases made with markov chains
-- [**136**Star][2m] [Verilog] [osresearch/spispy](https://github.com/osresearch/spispy) An open source SPI flash emulator and monitor
- [**136**Star][1y] [Py] [nirizr/rematch](https://github.com/nirizr/rematch) REmatch, a complete binary diffing framework that is free and strives to be open source and community driven.
- [**136**Star][6y] [Py] [nightnord/ljd](https://github.com/nightnord/ljd) LuaJIT raw-bytecode decompiler
-- [**136**Star][2m] [nathanchance/android-kernel-clang](https://github.com/nathanchance/android-kernel-clang) Information on compiling Android kernels with Clang
-- [**136**Star][13d] [Py] [misp/misp-modules](https://github.com/misp/misp-modules) Modules for expansion services, import and export in MISP
-- [**136**Star][8d] [C#] [microsoft/windowsprotocoltestsuites](https://github.com/microsoft/windowsprotocoltestsuites) Windows Protocol Test Suites provide interoperability testing against an implementation of the Windows open specifications.
-- [**136**Star][4m] [PowerShell] [leechristensen/random](https://github.com/leechristensen/random) Assorted scripts and one off things
-- [**136**Star][3y] [PowerShell] [latkin/1poshword](https://github.com/latkin/1poshword) PowerShell client for 1Password
+- [**136**Star][3d] [Py] [misp/misp-modules](https://github.com/misp/misp-modules) Modules for expansion services, import and export in MISP
+- [**136**Star][1y] [HTML] [maestron/hacking-tutorials](https://github.com/maestron/hacking-tutorials) hacking-tutorials
+- [**136**Star][3m] [Go] [leviathan1995/fari-proxy](https://github.com/leviathan1995/fari-proxy) To freedom
+- [**136**Star][4m] [PS] [leechristensen/random](https://github.com/leechristensen/random) Assorted scripts and one off things
- [**136**Star][3y] [kurobeats/pentest-bookmarks](https://github.com/kurobeats/pentest-bookmarks) Open Penetration Testing Bookmarks Collection
+- [**136**Star][2m] [C] [kubo/funchook](https://github.com/kubo/funchook) Funchook - an API Hook Library
+- [**136**Star][3y] [ObjC] [kpwn/935csbypass](https://github.com/kpwn/935csbypass) codesign bypass (get out of rop without JIT)
+- [**136**Star][2y] [Shell] [junbaor/shell_script](https://github.com/junbaor/shell_script) 一键安装 shadowsocks,支持 chacha20-ietf-poly1305 加密方式
- [**136**Star][7m] [Py] [itskindred/moddetective](https://github.com/itskindred/moddetective) modDetective is a small Python tool that chronologizes files based on modification time in order to investigate recent system activity.
-- [**136**Star][2m] [ignitetechnologies/ctf-difficulty](https://github.com/ignitetechnologies/ctf-difficulty) This cheasheet is aimed at the CTF Players and Beginners to help them sort the CTF Challenges on the basis of Difficulties.
-- [**136**Star][2y] [Java] [helios-decompiler/standalone-app](https://github.com/helios-decompiler/standalone-app) All-in-one Java reverse engineering tool
-- [**136**Star][7m] [C] [hc0d3r/mysql-magic](https://github.com/hc0d3r/mysql-magic) dump mysql client password from memory
- [**136**Star][3y] [Py] [hasameli/foghorn](https://github.com/hasameli/foghorn) The foghorn project is a DNS proxy intended to reduce user exposure to phishing and other malicious items that can be interdicted by DNS greylisting
-- [**136**Star][1y] [JS] [h3xstream/burp-retire-js](https://github.com/h3xstream/burp-retire-js) Burp/ZAP/Maven extension that integrate Retire.js repository to find vulnerable Javascript libraries.
+- [**136**Star][2d] [JS] [h3xstream/burp-retire-js](https://github.com/h3xstream/burp-retire-js) Burp/ZAP/Maven extension that integrate Retire.js repository to find vulnerable Javascript libraries.
- [**136**Star][7y] [Py] [gdssecurity/wifitap](https://github.com/gdssecurity/wifitap) wifitap updated for BT5r3
+- [**136**Star][2y] [Py] [duoergun0729/3book](https://github.com/duoergun0729/3book) 《Web安全之强化学习与GAN》
- [**136**Star][3y] [Java] [dodola/deepinvirtualapp](https://github.com/dodola/deepinvirtualapp) VirtualApp的技术文档和各个技术点拆解demo
-- [**136**Star][15d] [Ruby] [dev-sec/chef-ssh-hardening](https://github.com/dev-sec/chef-ssh-hardening) This chef cookbook provides secure ssh-client and ssh-server configurations.
+- [**136**Star][4m] [Py] [derekhe/proxypool](https://github.com/derekhe/proxypool) 高质量免费代理池——每日1w+代理资源滚动更新
- [**136**Star][2y] [Py] [ctxis/canape](https://github.com/ctxis/canape) CANAPE Network Testing Tool
+- [**136**Star][8d] [C#] [chrisnas/debuggingextensions](https://github.com/chrisnas/debuggingextensions) Host of debugging-related extensions such as post-mortem tools or WinDBG extensions
- [**136**Star][3y] [C] [chris-johnston/binarykeyboard](https://github.com/chris-johnston/binarykeyboard) A keyboard with two buttons that types in binary.
+- [**136**Star][1m] [TS] [chame1eon/jnitrace](https://github.com/chame1eon/jnitrace) A Frida based tool that traces usage of the JNI API in Android apps.
+- [**136**Star][4m] [JS] [chabou/hyper-pane](https://github.com/chabou/hyper-pane) Extension for Hyper.app to enhance pane navigation.
+- [**136**Star][2y] [Rust] [bryant/argon2rs](https://github.com/bryant/argon2rs) The pure-Rust password hashing library running on Argon2.
+- [**136**Star][2m] [Py] [bo0om/parampampam](https://github.com/bo0om/parampampam) brute discover GET and POST parameters.
- [**136**Star][4y] [Go] [bearded-web/bearded](https://github.com/bearded-web/bearded)
-- [**136**Star][12m] [C] [alex3434/wmi-static-spoofer](https://github.com/alex3434/wmi-static-spoofer) Spoofing the Windows 10 HDD/diskdrive serialnumber from kernel without hooking
-- [**135**Star][8d] [Py] [volatilityfoundation/volatility3](https://github.com/volatilityfoundation/volatility3) Volatility 3.0 development
-- [**135**Star][10m] [PowerShell] [vysecurity/aggressor-vysec](https://github.com/vysecurity/Aggressor-VYSEC) CobaltStrike Aggressor Scripts
-- [**135**Star][1y] [nsacyber/unfetter](https://github.com/nsacyber/unfetter) Identifies defensive gaps in security posture by leveraging Mitre's ATT&CK framework. #nsacyber
+- [**136**Star][7d] [Py] [arizvisa/ida-minsc](https://github.com/arizvisa/ida-minsc) a plugin for IDA Pro that assists a user with scripting the IDAPython plugin that is bundled with the disassembler.
+- [**136**Star][14d] [PS] [antoniococo/conptyshell](https://github.com/antoniococo/conptyshell) ConPtyShell - Fully Interactive Reverse Shell for Windows
+- [**136**Star][1y] [C] [alex3434/wmi-static-spoofer](https://github.com/alex3434/wmi-static-spoofer) Spoofing the Windows 10 HDD/diskdrive serialnumber from kernel without hooking
+- [**136**Star][2y] [Go] [aiportal/wechat-proxy](https://github.com/aiportal/wechat-proxy) 微信代理服务
+- [**135**Star][13d] [JS] [snyk/goof](https://github.com/snyk/goof) Super vulnerable todo list application
+- [**135**Star][11m] [PS] [vysecurity/aggressor-vysec](https://github.com/vysecurity/Aggressor-VYSEC) CobaltStrike Aggressor Scripts
+- [**135**Star][12m] [Shell] [onmyway133/swiftsnippets](https://github.com/onmyway133/SwiftSnippets) A collection of Swift snippets to be used in Xcode
- [**135**Star][1y] [Py] [crytic/rattle](https://github.com/crytic/rattle) evm binary static analysis
-- [**135**Star][8m] [Py] [yt1g3r/cve-2019-3396_exp](https://github.com/yt1g3r/cve-2019-3396_exp) CVE-2019-3396 confluence SSTI RCE
+- [**135**Star][13d] [Haskell] [jackmiranda/herms](https://github.com/JackMiranda/herms) a Haskell-based Recipe Manager (yes, food recipes) for the command line
- [**135**Star][2y] [JS] [usscltd/dorks](https://github.com/usscltd/dorks) google hack database automation tool
- [**135**Star][2y] [thec00n/smart-contract-honeypots](https://github.com/thec00n/smart-contract-honeypots) a collection of smart contract honeypots.
- [**135**Star][3y] [Ruby] [tagomoris/fluent-plugin-secure-forward](https://github.com/tagomoris/fluent-plugin-secure-forward) input/output plugin to forward fluentd messages over SSL with authentication.
-- [**135**Star][7y] [C] [t57root/pwnginx](https://github.com/t57root/pwnginx) Pwn nginx - a nginx backdoor provides shell access, socks5 tunneling, http password sniffing.
-- [**135**Star][26d] [Py] [swisskyrepo/vulny-code-static-analysis](https://github.com/swisskyrepo/vulny-code-static-analysis) Basic script to detect vulnerabilities into a PHP source code using statical analysis, based on regex
- [**135**Star][3y] [Py] [sviehb/jefferson](https://github.com/sviehb/jefferson) JFFS2 filesystem extraction tool
- [**135**Star][6y] [Java] [sectooladdict/wavsep](https://github.com/sectooladdict/wavsep) The Web Application Vulnerability Scanner Evaluation Project
-- [**135**Star][24d] [recolic/awesome-hust](https://github.com/recolic/awesome-hust) HUST experiments, reports, and useful tools.
- [**135**Star][2y] [C#] [poshsec/poshsecframework](https://github.com/poshsec/poshsecframework) A framework for PowerShell and PoshSec scripts for network management, security, and maintenance.
-- [**135**Star][2y] [Py] [pjlantz/hale](https://github.com/pjlantz/hale) Botnet command & control monitor
-- [**135**Star][1y] [Shell] [peterjaric/archaeologit](https://github.com/peterjaric/archaeologit) 扫描GitHub repo的历史, 按指定模式查找敏感信息, 例如用户名密码
+- [**135**Star][8d] [pomerium/awesome-security-audits](https://github.com/pomerium/awesome-security-audits) A collection of public security audits.
+- [**135**Star][2y] [Shell] [peterjaric/archaeologit](https://github.com/peterjaric/archaeologit) 扫描GitHub repo的历史, 按指定模式查找敏感信息, 例如用户名密码
- [**135**Star][4y] [osandamalith/exe2image](https://github.com/osandamalith/exe2image) A simple utility to convert EXE files to JPEG images and vice versa.
-- [**135**Star][1y] [HTML] [maestron/hacking-tutorials](https://github.com/maestron/hacking-tutorials) hacking-tutorials
-- [**135**Star][28d] [Py] [m8r0wn/subscraper](https://github.com/m8r0wn/subscraper) External pentest and bug bounty tool to perform subdomain enumeration through various techniques. SubScraper will provide information such as HTTP & DNS lookups to aid in potential next steps.
-- [**135**Star][8m] [PowerShell] [logrhythm-labs/pie](https://github.com/logrhythm-labs/pie) Phishing Intelligence Engine
+- [**135**Star][5d] [Py] [oasis-open/cti-python-stix2](https://github.com/oasis-open/cti-python-stix2) OASIS TC Open Repository: Python APIs for STIX 2
+- [**135**Star][7y] [Ruby] [mubix/vt-notify](https://github.com/mubix/vt-notify) Get email notification when Virus Total has a copy of your binary.
+- [**135**Star][30d] [Py] [m8r0wn/subscraper](https://github.com/m8r0wn/subscraper) External pentest and bug bounty tool to perform subdomain enumeration through various techniques. SubScraper will provide information such as HTTP & DNS lookups to aid in potential next steps.
+- [**135**Star][8m] [PS] [logrhythm-labs/pie](https://github.com/logrhythm-labs/pie) Phishing Intelligence Engine
+- [**135**Star][3y] [PS] [latkin/1poshword](https://github.com/latkin/1poshword) PowerShell client for 1Password
- [**135**Star][1y] [Go] [lanrat/certgraph](https://github.com/lanrat/certgraph) 抓取 SSL 证书并创建有向图, 图中每个域都是一个节点, 域的证书的替代名称作为节点的边
+- [**135**Star][3y] [Py] [laginimaineb/android_fde_bruteforce](https://github.com/laginimaineb/android_fde_bruteforce) Scripts to bruteforce Android's Full Disk Encryption off the device
- [**135**Star][2y] [Rust] [kpcyrd/rshijack](https://github.com/kpcyrd/rshijack) TCP连接劫持
- [**135**Star][3y] [C] [keenerd/rtl-sdr-misc](https://github.com/keenerd/rtl-sdr-misc) A bucket of various work-in-progress rtl-sdr ideas.
-- [**135**Star][2y] [Shell] [junbaor/shell_script](https://github.com/junbaor/shell_script) 一键安装 shadowsocks,支持 chacha20-ietf-poly1305 加密方式
+- [**135**Star][7m] [Shell] [itskindred/jalesc](https://github.com/itskindred/jalesc) Just Another Linux Enumeration Script: A Bash script for locally enumerating a compromised Linux box
- [**135**Star][3y] [C++] [ioactive/i-know-where-your-page-lives](https://github.com/ioactive/i-know-where-your-page-lives) I Know Where Your Page Lives: Derandomizing the latest Windows 10 Kernel - ZeroNights 2016
-- [**135**Star][2m] [C] [dekunukem/kbord](https://github.com/dekunukem/kbord) Scriptable mechanical keypad with OLED display and RGB backlight.
-- [**135**Star][20d] [C] [davidbuchanan314/tardis](https://github.com/davidbuchanan314/tardis) Trace And Rewrite Delays In Syscalls: Hooking time-related Linux syscalls to warp a process's perspective of time, using ptrace.
+- [**135**Star][11m] [C++] [herumi/msoffice](https://github.com/herumi/msoffice) A tool/lib to encrypt/decrypt Microsoft Office Document
+- [**135**Star][7m] [C] [dzzie/scdbg](https://github.com/dzzie/scdbg) note: current build is VS_LIBEMU project. This cross platform gcc build is for Linux users but is no longer updated. modification of the libemu sctest project to add basic debugger capabilities and more output useful for manual RE. The newer version will run under WINE
+- [**135**Star][5m] [PHP] [designsecurity/progpilot](https://github.com/designsecurity/progpilot) A static analysis tool for security
+- [**135**Star][22d] [C] [davidbuchanan314/tardis](https://github.com/davidbuchanan314/tardis) Trace And Rewrite Delays In Syscalls: Hooking time-related Linux syscalls to warp a process's perspective of time, using ptrace.
- [**135**Star][3y] [C] [cryptosphere/sysrandom](https://github.com/cryptosphere/sysrandom) Secure random number generation for Ruby using system RNG facilities
-- [**135**Star][4m] [JS] [chabou/hyper-pane](https://github.com/chabou/hyper-pane) Extension for Hyper.app to enhance pane navigation.
-- [**135**Star][25d] [Py] [certcc/tapioca](https://github.com/certcc/tapioca) CERT Tapioca for MITM network analysis
+- [**135**Star][8d] [Py] [certcc/tapioca](https://github.com/certcc/tapioca) CERT Tapioca for MITM network analysis
- [**135**Star][7m] [Py] [cbhue/pyfuscation](https://github.com/cbhue/pyfuscation) Obfuscate powershell scripts by replacing Function names, Variables and Parameters.
-- [**135**Star][2y] [Rust] [bryant/argon2rs](https://github.com/bryant/argon2rs) The pure-Rust password hashing library running on Argon2.
-- [**135**Star][8m] [Py] [bloodhoundad/bloodhound-tools](https://github.com/bloodhoundad/bloodhound-tools) Miscellaneous tools for BloodHound
-- [**135**Star][8d] [Py] [arizvisa/ida-minsc](https://github.com/arizvisa/ida-minsc) a plugin for IDA Pro that assists a user with scripting the IDAPython plugin that is bundled with the disassembler.
- [**135**Star][2m] [Py] [arch4ngel/eavesarp](https://github.com/arch4ngel/eavesarp) Analyze ARP requests to identify intercommunicating hosts and stale network address configurations (SNACs)
-- [**135**Star][12d] [PowerShell] [antoniococo/conptyshell](https://github.com/antoniococo/conptyshell) ConPtyShell - Fully Interactive Reverse Shell for Windows
- [**135**Star][2m] [Go] [0xrawsec/whids](https://github.com/0xrawsec/whids) Open Source Endpoint Detection System for Windows
-- [**134**Star][11d] [JS] [snyk/goof](https://github.com/snyk/goof) Super vulnerable todo list application
-- [**134**Star][7d] [Rust] [bytecodealliance/wasmparser](https://github.com/bytecodealliance/wasmparser) A simple event-driven library for parsing WebAssembly binary files
-- [**134**Star][12d] [PowerShell] [lazywinadmin/monitor-adgroupmembership](https://github.com/lazywinadmin/Monitor-ADGroupMembership) PowerShell script to monitor Active Directory groups and send an email when someone is changing the membership
-- [**134**Star][12m] [Shell] [onmyway133/swiftsnippets](https://github.com/onmyway133/SwiftSnippets) A collection of Swift snippets to be used in Xcode
+- [**134**Star][6d] [Py] [dhondta/dronesploit](https://github.com/dhondta/dronesploit) Drone pentesting framework console
+- [**134**Star][24d] [Go] [getlantern/http-proxy](https://github.com/getlantern/http-proxy) HTTP Proxy with TLS support
+- [**134**Star][2d] [Shell] [adroitadorkhan/energizedprotection](https://github.com/AdroitAdorKhan/EnergizedProtection) A merged collection of hosts from reputable sources. #StayEnergized!
- [**134**Star][4y] [Ruby] [dradis/dradis-legacy](https://github.com/dradis/dradis-legacy) This is a LEGACY repo head to
+- [**134**Star][10m] [C] [yadutaf/tracepkt](https://github.com/yadutaf/tracepkt) 跟踪 Linux 系统 PING 数据包跨网络接口和命名空间的路线,支持 IPv4 及 IPv6
- [**134**Star][2m] [Py] [wudimahua/firewall](https://github.com/wudimahua/firewall) 美国国家安全局NSA下属方程式黑客组织(Equation Group)被The Shadow Brokers(影子经纪人)hack出来的并免费分享的源码
+- [**134**Star][9d] [C++] [thiagoralves/openplc_v3](https://github.com/thiagoralves/openplc_v3) OpenPLC Runtime version 3
- [**134**Star][5m] [tarraschk/richelieu](https://github.com/tarraschk/richelieu) List of the most common French passwords
- [**134**Star][1y] [Py] [soledad208/cve-2018-10933](https://github.com/soledad208/cve-2018-10933) CVE-2018-10933 very simple POC
- [**134**Star][2y] [C] [silentsignal/sheep-wolf](https://github.com/silentsignal/sheep-wolf) 现实中早已有MD5 碰撞攻击的实例,然而一些安全软件依然已 MD5 标识恶意样本。此工具用于检测安全工具内部是否使用 MD5 标识样本
- [**134**Star][3m] [Py] [seomoz/reppy](https://github.com/seomoz/reppy) Modern robots.txt Parser for Python
-- [**134**Star][10m] [PowerShell] [securemode/invoke-apex](https://github.com/securemode/invoke-apex) A PowerShell-based toolkit and framework consisting of a collection of techniques and tradecraft for use in red team, post-exploitation, adversary simulation, or other offensive security tasks.
+- [**134**Star][10m] [PS] [securemode/invoke-apex](https://github.com/securemode/invoke-apex) A PowerShell-based toolkit and framework consisting of a collection of techniques and tradecraft for use in red team, post-exploitation, adversary simulation, or other offensive security tasks.
+- [**134**Star][11m] [Py] [scrapinghub/scrapy-training](https://github.com/scrapinghub/scrapy-training) Scrapy Training companion code
- [**134**Star][3m] [Py] [revng/llvmcpy](https://github.com/revng/llvmcpy) Python bindings for LLVM auto-generated from the LLVM-C API
- [**134**Star][2y] [Py] [random-robbie/jira-scan](https://github.com/random-robbie/jira-scan) CVE-2017-9506 - SSRF
-- [**134**Star][18d] [C++] [pichi-router/pichi](https://github.com/pichi-router/pichi) Flexible Rule-Based Proxy
+- [**134**Star][2y] [Py] [pjlantz/hale](https://github.com/pjlantz/hale) Botnet command & control monitor
+- [**134**Star][20d] [C++] [pichi-router/pichi](https://github.com/pichi-router/pichi) Flexible Rule-Based Proxy
+- [**134**Star][5y] [PHP] [phith0n/xsshtml](https://github.com/phith0n/xsshtml) php富文本过滤类,XSS Filter
- [**134**Star][4m] [C++] [phildo/expandpass](https://github.com/phildo/expandpass) Implements a simple nested grammar for expanding passwords
- [**134**Star][3y] [Shell] [pasahitz/zirikatu](https://github.com/pasahitz/zirikatu) Fud Payload generator script
-- [**134**Star][2y] [Objective-C] [objective-see/sniffmk](https://github.com/objective-see/sniffmk) sniff mouse and keyboard events
-- [**134**Star][12d] [Py] [oasis-open/cti-python-stix2](https://github.com/oasis-open/cti-python-stix2) OASIS TC Open Repository: Python APIs for STIX 2
+- [**134**Star][5d] [Go] [palantir/policy-bot](https://github.com/palantir/policy-bot) A GitHub App that enforces approval policies on pull requests
+- [**134**Star][3d] [C] [openmpt/openmpt](https://github.com/openmpt/openmpt) Official read-only git mirror of the OpenMPT and libopenmpt subversion repository at
+- [**134**Star][3d] [Py] [omegak2/pypoe](https://github.com/omegak2/pypoe) Collection of Python Tools for Path of Exile
+- [**134**Star][2y] [ObjC] [objective-see/sniffmk](https://github.com/objective-see/sniffmk) sniff mouse and keyboard events
+- [**134**Star][1m] [C] [nomorefood/putty-cac](https://github.com/nomorefood/putty-cac) Windows Secure Shell Client With Support For Smart Cards & Certificates
- [**134**Star][1y] [C++] [nitram2342/degate](https://github.com/nitram2342/degate) Open source software for chip reverse engineering.
+- [**134**Star][3d] [Py] [netevert/pockint](https://github.com/netevert/pockint) A portable OSINT Swiss Army Knife for DFIR/OSINT professionals
- [**134**Star][5m] [Shell] [nccgroup/bkscan](https://github.com/nccgroup/bkscan) BlueKeep scanner supporting NLA
-- [**134**Star][7y] [Ruby] [mubix/vt-notify](https://github.com/mubix/vt-notify) Get email notification when Virus Total has a copy of your binary.
+- [**134**Star][6m] [Go] [mylxsw/remote-tail](https://github.com/mylxsw/remote-tail) RemoteTail用于同步监控多台服务器日志文件变更,一句话说就是多主机的远程tail。
- [**134**Star][2y] [Py] [mohamednourtn/terminator](https://github.com/mohamednourtn/terminator) Terminator metasploit payload generator
-- [**134**Star][3y] [Py] [laginimaineb/android_fde_bruteforce](https://github.com/laginimaineb/android_fde_bruteforce) Scripts to bruteforce Android's Full Disk Encryption off the device
-- [**134**Star][8m] [PowerShell] [klionsec/decryption-tool](https://github.com/klionsec/decryption-tool)
+- [**134**Star][2y] [mafutian/software](https://github.com/mafutian/software) 破解版工具/软件
+- [**134**Star][8m] [PS] [klionsec/decryption-tool](https://github.com/klionsec/decryption-tool)
- [**134**Star][3y] [Swift] [kidneyband/potatso-ios](https://github.com/kidneyband/potatso-ios) Potatso is an iOS client that implements Shadowsocks proxy with the leverage of NetworkExtension framework in iOS 9.
- [**134**Star][9m] [Py] [jzadeh/aktaion](https://github.com/jzadeh/aktaion) Open Source ML tool and data samples for Exploit and Phishing Research
- [**134**Star][3m] [PHP] [jorijn/laravel-security-checker](https://github.com/jorijn/laravel-security-checker) Added Laravel functionality to SensioLabs Security Checker. Adds a command to check for, and optionally emails you, vulnerabilities when they affect you.
-- [**134**Star][6m] [Shell] [itskindred/jalesc](https://github.com/itskindred/jalesc) Just Another Linux Enumeration Script: A Bash script for locally enumerating a compromised Linux box
-- [**134**Star][11m] [C++] [herumi/msoffice](https://github.com/herumi/msoffice) A tool/lib to encrypt/decrypt Microsoft Office Document
-- [**134**Star][2y] [Py] [gradiusx/hevd-python-solutions](https://github.com/gradiusx/hevd-python-solutions) Python solutions for the HackSysTeam Extreme Vulnerable Driver
-- [**134**Star][6m] [C] [dzzie/scdbg](https://github.com/dzzie/scdbg) note: current build is VS_LIBEMU project. This cross platform gcc build is for Linux users but is no longer updated. modification of the libemu sctest project to add basic debugger capabilities and more output useful for manual RE. The newer version will run under WINE
+- [**134**Star][1y] [Makefile] [jonathansalwan/binary-samples](https://github.com/jonathansalwan/binary-samples) Samples of binary with different formats and architectures. A test suite for your binary analysis tools.
+- [**134**Star][3m] [C] [guillem96/argon-nx](https://github.com/guillem96/argon-nx) an immutable payload which is injected to your Nintendo Switch via Fusee Gelee exploit.
+- [**134**Star][5y] [C] [goldshtn/windbg-extensions](https://github.com/goldshtn/windbg-extensions) Various extensions for WinDbg
+- [**134**Star][1y] [ellerbrock/docker-security-images](https://github.com/ellerbrock/docker-security-images)
- [**134**Star][1y] [Py] [dionach/reposcanner](https://github.com/dionach/reposcanner) Python script to scan Git repos for interesting strings
-- [**134**Star][5m] [PHP] [designsecurity/progpilot](https://github.com/designsecurity/progpilot) A static analysis tool for security
+- [**134**Star][1y] [Swift] [danleechina/mixplaintext](https://github.com/danleechina/mixplaintext) 可对 Xcode 项目工程所有的 objective-c 文件内包含的明文进行加密混淆,提高逆向分析难度。
- [**134**Star][4y] [Shell] [commonexploits/port-scan-automation](https://github.com/commonexploits/port-scan-automation) Automate NMAP Scans and Generate Custom Nessus Policies Automatically
-- [**134**Star][14d] [C#] [chrisnas/debuggingextensions](https://github.com/chrisnas/debuggingextensions) Host of debugging-related extensions such as post-mortem tools or WinDBG extensions
+- [**134**Star][3m] [YARA] [citizenlab/malware-indicators](https://github.com/citizenlab/malware-indicators) Citizen Lab Malware Reports
- [**134**Star][3y] [Py] [blacktop/malice](https://github.com/blacktop/malice) VirusTotal Wanna Be
- [**134**Star][2y] [Py] [binarydefense/auto-ossec](https://github.com/binarydefense/auto-ossec) automatically provision OSSEC agents for both Linux and Windows
- [**134**Star][5y] [Py] [ashdnazg/pyreshark](https://github.com/ashdnazg/pyreshark) A Wireshark plugin providing a simple interface for writing dissectors in Python.
+- [**134**Star][4m] [PS] [anssi-fr/adtimeline](https://github.com/anssi-fr/adtimeline) PowerShell script creating a timeline of Active Directory changes with replication metadata
+- [**134**Star][3y] [akibsayyed/safeseven](https://github.com/akibsayyed/safeseven) SS7 Assessment Tool
- [**134**Star][2y] [HTML] [4b5f5f4b/exploits](https://github.com/4b5f5f4b/exploits)
- [**134**Star][1m] [0xhelloworld/public](https://github.com/0xhelloworld/public) stuff i'm willing to share with the world lol
-- [**133**Star][22d] [Go] [getlantern/http-proxy](https://github.com/getlantern/http-proxy) HTTP Proxy with TLS support
-- [**133**Star][7d] [Shell] [adroitadorkhan/energizedprotection](https://github.com/AdroitAdorKhan/EnergizedProtection) A merged collection of hosts from reputable sources. #StayEnergized!
-- [**133**Star][11d] [Haskell] [jackmiranda/herms](https://github.com/JackMiranda/herms) a Haskell-based Recipe Manager (yes, food recipes) for the command line
-- [**133**Star][10m] [C] [yadutaf/tracepkt](https://github.com/yadutaf/tracepkt) 跟踪 Linux 系统 PING 数据包跨网络接口和命名空间的路线,支持 IPv4 及 IPv6
+- [**133**Star][4y] [C++] [qihoo360/artdumper](https://github.com/qihoo360/artdumper) 从oat文件中dump出来dex的工具
+- [**133**Star][2m] [Kotlin] [gosecure/dtd-finder](https://github.com/gosecure/dtd-finder) List DTDs and generate XXE payloads using those local DTDs.
+- [**133**Star][29d] [Batchfile] [pr0cf5/kernel-exploit-practice](https://github.com/pr0cf5/kernel-exploit-practice) repository for kernel exploit practice
+- [**133**Star][2d] [Py] [baidu-security/openrasp-iast](https://github.com/baidu-security/openrasp-iast) IAST 灰盒扫描工具
+- [**133**Star][1y] [Py] [zxlie/website-ssl.sh](https://github.com/zxlie/website-ssl.sh) 低门槛跨入Https大门!网站ssl证书自动生成工具(http到https的转变),燥起来吧!
+- [**133**Star][1y] [Py] [youngyangyang04/nosqlattack](https://github.com/youngyangyang04/nosqlattack) NoSQLAttack is an open source Python tool to automate exploit MongoDB server IP on Internet and disclose the database data by MongoDB default configuration weaknesses and injection attacks.
- [**133**Star][5y] [Java] [wanchouchou/apkprotect](https://github.com/wanchouchou/apkprotect) 通付盾第一代安全加固方案
+- [**133**Star][1y] [Py] [threatresponse/margaritashotgun](https://github.com/threatresponse/margaritashotgun) Remote Memory Acquisition Tool
+- [**133**Star][7m] [shipcod3/mysapadventures](https://github.com/shipcod3/mysapadventures) A quick methodology on testing / hacking SAP Applications for n00bz and bug bounty hunters
+- [**133**Star][2y] [sashs/arm_exploitation](https://github.com/sashs/arm_exploitation) Exploitation on ARM-based Systems (Troopers18)
- [**133**Star][2y] [C] [potmdehex/multipath_kfree](https://github.com/potmdehex/multipath_kfree) low effort jb
- [**133**Star][9m] [Shell] [nullarray/mida-multitool](https://github.com/nullarray/mida-multitool) Bash script purposed for system enumeration, vulnerability identification and privilege escalation.
-- [**133**Star][1m] [C] [nomorefood/putty-cac](https://github.com/nomorefood/putty-cac) Windows Secure Shell Client With Support For Smart Cards & Certificates
- [**133**Star][2y] [C++] [nezha-dt/nezha](https://github.com/nezha-dt/nezha) nezha:高效的domain-independent differential fuzzer
-- [**133**Star][2m] [Py] [nccgroup/thetick](https://github.com/nccgroup/thetick) A simple embedded Linux backdoor.
-- [**133**Star][2y] [mafutian/software](https://github.com/mafutian/software) 破解版工具/软件
-- [**133**Star][2m] [C] [kubo/funchook](https://github.com/kubo/funchook) Funchook - an API Hook Library
+- [**133**Star][3m] [Py] [nccgroup/thetick](https://github.com/nccgroup/thetick) A simple embedded Linux backdoor.
+- [**133**Star][2d] [Py] [manifoldai/docker-cookiecutter-data-science](https://github.com/manifoldai/docker-cookiecutter-data-science) A fork of the cookiecutter-data-science leveraging Docker for local development.
+- [**133**Star][7m] [C++] [luis-hebendanz/0pack](https://github.com/luis-hebendanz/0pack) A novel technique to hide code from debuggers
- [**133**Star][3y] [PHP] [ksanchezcld/hacking_cheat_sheet](https://github.com/ksanchezcld/hacking_cheat_sheet) All my Hacking|Pentesting Notes
+- [**133**Star][9m] [PHP] [k4mpr3t/b4tm4n](https://github.com/k4mpr3t/b4tm4n) Php webshell
+- [**133**Star][4y] [C] [jvoisin/pangu](https://github.com/jvoisin/pangu) Toolkit to detect/crash/attack GNU debugging-related tools
- [**133**Star][4m] [Py] [hannob/optionsbleed](https://github.com/hannob/optionsbleed) a proof of concept code to test for the Optionsbleed bug in Apache httpd (CVE-2017-9798)
-- [**133**Star][5y] [C] [goldshtn/windbg-extensions](https://github.com/goldshtn/windbg-extensions) Various extensions for WinDbg
+- [**133**Star][23d] [Ruby] [hahwul/xspear](https://github.com/hahwul/xspear) Powerfull XSS Scanning and Parameter analysis tool&gem
- [**133**Star][1y] [CSS] [gbrindisi/wordpot](https://github.com/gbrindisi/wordpot) A Wordpress Honeypot
- [**133**Star][3y] [C++] [felixwilhelm/xenpwn](https://github.com/felixwilhelm/xenpwn) Xenpwn is a toolkit for memory access tracing using hardware-assisted virtualization
- [**133**Star][1y] [Shell] [europa502/sharp](https://github.com/europa502/sharp) An anti-ARP-spoofing application software that use active and passive scanning methods to detect and remove any ARP-spoofer from the network.
-- [**133**Star][1y] [ellerbrock/docker-security-images](https://github.com/ellerbrock/docker-security-images)
-- [**133**Star][13d] [C] [drahnr/oregano](https://github.com/drahnr/oregano) Schematic capture and circuit simulator
+- [**133**Star][15d] [C] [drahnr/oregano](https://github.com/drahnr/oregano) Schematic capture and circuit simulator
- [**133**Star][10m] [C#] [davidfowl/multiprotocolaspnetcore](https://github.com/davidfowl/multiprotocolaspnetcore) Multi-protocol Server with ASP.NET Core and Kestrel
-- [**133**Star][1y] [PowerShell] [darkoperator/posh-sysmon](https://github.com/darkoperator/posh-sysmon) PowerShell module for creating and managing Sysinternals Sysmon config files.
+- [**133**Star][1y] [PS] [darkoperator/posh-sysmon](https://github.com/darkoperator/posh-sysmon) PowerShell module for creating and managing Sysinternals Sysmon config files.
+- [**133**Star][1m] [Py] [csirtgadgets/bearded-avenger](https://github.com/csirtgadgets/bearded-avenger) CIF v3 -- the fastest way to consume threat intelligence
- [**133**Star][9m] [JS] [crowdstrike/falcon-orchestrator](https://github.com/crowdstrike/falcon-orchestrator) CrowdStrike Falcon Orchestrator provides automated workflow and response capabilities
+- [**133**Star][3y] [C++] [chenenyu/androidsecurity](https://github.com/chenenyu/androidsecurity) Android安全实践
- [**133**Star][1y] [Py] [carlosgprado/jarvis](https://github.com/carlosgprado/jarvis) "Just Another ReVersIng Suite" or whatever other bullshit you can think of
- [IDA插件](https://github.com/carlosgprado/jarvis/tree/master/IDAPlugin)
- [PinTracer](https://github.com/carlosgprado/jarvis/tree/master/PinTracer)
- [**133**Star][4y] [C] [bwall/pemcracker](https://github.com/bwall/pemcracker) Tool to crack encrypted PEM files
-- [**133**Star][2m] [Py] [bo0om/parampampam](https://github.com/bo0om/parampampam) brute discover GET and POST parameters.
-- [**133**Star][4m] [PowerShell] [anssi-fr/adtimeline](https://github.com/anssi-fr/adtimeline) PowerShell script creating a timeline of Active Directory changes with replication metadata
+- [**133**Star][2y] [Py] [bharshbarger/autosint](https://github.com/bharshbarger/autosint) Tool to automate common OSINT tasks
+- [**133**Star][11m] [Ruby] [bahaabdelwahed/killshot](https://github.com/bahaabdelwahed/killshot) A Penetration Testing Framework, Information gathering tool & Website Vulnerability Scanner
- [**133**Star][8y] [Perl] [anestisb/webacoo](https://github.com/anestisb/webacoo) Web Backdoor Cookie Script-Kit
-- [**133**Star][3y] [akibsayyed/safeseven](https://github.com/akibsayyed/safeseven) SS7 Assessment Tool
- [**133**Star][3m] [Py] [1n3/exploits](https://github.com/1n3/exploits) Exploits by 1N3 @CrowdShield
-- [**132**Star][10d] [C#] [vivami/sauroneye](https://github.com/vivami/sauroneye) Search tool to find specific files containing specific words, i.e. files containing passwords..
-- [**132**Star][7d] [Scala] [shiftleftsecurity/joern](https://github.com/shiftleftsecurity/joern) Open-source code analysis platform for C/C++ based on code property graphs
+- [**132**Star][2m] [Shell] [starttoaster/docker-traefik](https://github.com/starttoaster/docker-traefik) Script to setup Traefik reverse-proxy in Docker with Compose
+- [**132**Star][2y] [Py] [chenjiandongx/soksaccounts](https://github.com/chenjiandongx/soksaccounts) Shadowsocks 账号爬虫
+- [**132**Star][2m] [C#] [lithnet/ad-password-protection](https://github.com/lithnet/ad-password-protection) Active Directory password filter featuring breached password checking and custom complexity rules
- [**132**Star][4m] [PHP] [zsxsoft/my-ctf-challenges](https://github.com/zsxsoft/my-ctf-challenges) My CTF Challenges
-- [**132**Star][2m] [Py] [tuhinshubhra/extanalysis](https://github.com/tuhinshubhra/extanalysis) Browser Extension Analysis Framework - Scan and Analyse Chrome and firefox extensions for vulnerabilities and intels
-- [**132**Star][7d] [C++] [thiagoralves/openplc_v3](https://github.com/thiagoralves/openplc_v3) OpenPLC Runtime version 3
+- [**132**Star][4y] [JS] [walkdoer/life-time-tracker](https://github.com/walkdoer/Life-Time-Tracker) 个人时间跟踪,可视化个人活动数据,管理个人生活,利用过去来指导未来,基于柳比歇夫的统计方法
+- [**132**Star][12m] [Dockerfile] [theonemule/docker-waf](https://github.com/theonemule/docker-waf) An NGINX and ModSecurity based Web Application Firewall for Docker
- [**132**Star][1y] [Py] [thehive-project/hippocampe](https://github.com/thehive-project/hippocampe) Threat Feed Aggregation, Made Easy
- [**132**Star][4m] [Py] [tensorflow/tensorboard-plugin-example](https://github.com/tensorflow/tensorboard-plugin-example)
- [**132**Star][5y] [C] [smealum/ninjhax](https://github.com/smealum/ninjhax) 3ds homebrew-enabling exploit for 4.0-9.2
-- [**132**Star][2y] [sashs/arm_exploitation](https://github.com/sashs/arm_exploitation) Exploitation on ARM-based Systems (Troopers18)
+- [**132**Star][2y] [sky8964/home](https://github.com/sky8964/home) 【墙外到墙内搬运工】郭文贵 推特党 兲朝浮世绘 小民之心 辛灏年 曹长青 袁红冰 旗袍 袁腾飞 翻墙 科学上网 | 搬运工 自由 民主 法治 宪政 人权 平等 视频 音频 文字版 在线 播放 下载 民运 维权 王岐山 孟建柱 孙力军 傅振华 江棉恒 江泽民 习近平 温家宝 王芳 董卿 杨澜 周小平 吴征 唐柏桥 e租宝 泛亚 共产党 赵家 盜国贼 内幕 黑暗 灾难 专政 上访 游行 暴乱 欺骗 谎言 腐败 通奸 权贵 马航 老兵 活摘 启蒙 墙外 墙内 防火墙 防火长城 功夫网 党文化 民阵 爆料 九评 杨建利 郭宝胜 昭明 反共 法轮功 自媒体 Youtube 油管 推特 Twitter 网盘 传播 关注 五毛 自干五 特务 红二代 红三代 官二代 土共 共匪
+- [**132**Star][3d] [Py] [rvn0xsy/cooolis-ms](https://github.com/rvn0xsy/cooolis-ms) Cooolis-ms is a server that supports the Metasploit Framework RPC. It is used to work with the Shellcode and PE loader. To some extent, it bypasses the static killing of anti-virus software, and allows the Cooolis-ms server to communicate with the Metasploit server. Separation.
- [**132**Star][10m] [C] [regehr/ub-canaries](https://github.com/regehr/ub-canaries) collection of C/C++ programs that try to get compilers to exploit undefined behavior
+- [**132**Star][2m] [Py] [rastrea2r/rastrea2r](https://github.com/rastrea2r/rastrea2r) Collecting & Hunting for IOCs with gusto and style
+- [**132**Star][2y] [Py] [pwning/defcon25-public](https://github.com/pwning/defcon25-public) Publicly released tools/plugins from PPP for DEFCON 25 CTF Finals
- [**132**Star][6m] [CMake] [pothosware/pothossdr](https://github.com/pothosware/pothossdr) Pothos SDR windows development environment
-- [**132**Star][5y] [PHP] [phith0n/xsshtml](https://github.com/phith0n/xsshtml) php富文本过滤类,XSS Filter
-- [**132**Star][24d] [Go] [palantir/policy-bot](https://github.com/palantir/policy-bot) A GitHub App that enforces approval policies on pull requests
-- [**132**Star][17d] [Py] [omegak2/pypoe](https://github.com/omegak2/pypoe) Collection of Python Tools for Path of Exile
-- [**132**Star][8d] [Lua] [nnposter/nndefaccts](https://github.com/nnposter/nndefaccts) nnposter's alternate fingerprint dataset for Nmap script http-default-accounts
-- [**132**Star][20d] [PowerShell] [netspi/powershell](https://github.com/netspi/powershell) NetSPI PowerShell Scripts
+- [**132**Star][10d] [Lua] [nnposter/nndefaccts](https://github.com/nnposter/nndefaccts) nnposter's alternate fingerprint dataset for Nmap script http-default-accounts
+- [**132**Star][22d] [PS] [netspi/powershell](https://github.com/netspi/powershell) NetSPI PowerShell Scripts
- [**132**Star][7m] [Py] [mitrecnd/whodat](https://github.com/mitrecnd/whodat) Pivotable Reverse WhoIs / PDNS Fusion with Registrant Tracking & Alerting plus API for automated queries (JSON/CSV/TXT)
-- [**132**Star][8m] [Py] [manifoldai/docker-cookiecutter-data-science](https://github.com/manifoldai/docker-cookiecutter-data-science) A fork of the cookiecutter-data-science leveraging Docker for local development.
- [**132**Star][4y] [Py] [korelogicsecurity/mastiff](https://github.com/korelogicsecurity/mastiff) Malware static analysis framework
+- [**132**Star][5d] [C] [jnider/delinker](https://github.com/jnider/delinker) Unlinks a binary executable to get back a set of .o object files for further transformation and re-linking.
- [**132**Star][1m] [jlopp/physical-bitcoin-attacks](https://github.com/jlopp/physical-bitcoin-attacks) A list of known attacks against Bitcoin / crypto asset owning entities that occurred in meatspace.
+- [**132**Star][8m] [Py] [jas502n/cve-2019-2618](https://github.com/jas502n/cve-2019-2618) Weblogic Upload Vuln(Need username password)-CVE-2019-2618
+- [**132**Star][2m] [Py] [ivan1ee/struts2-057-exp](https://github.com/ivan1ee/struts2-057-exp) s2-057 最新漏洞分析和EXP脚本
- [**132**Star][8m] [C] [hfiref0x/wdextract](https://github.com/hfiref0x/wdextract) Extract Windows Defender database from vdm files and unpack it
-- [**132**Star][19d] [Go] [fanpei91/gap-proxy](https://github.com/fanpei91/gap-proxy) gap-proxy 是一个加速网络的 SOCKS5 安全代理工具。
-- [**132**Star][5m] [PowerShell] [cyberark/ketshash](https://github.com/cyberark/ketshash) 基于事件查看器日志,检测可疑的特权 NTLM 连接, 尤其是 Pass-The-Hash 攻击
-- [**132**Star][1m] [Py] [csirtgadgets/bearded-avenger](https://github.com/csirtgadgets/bearded-avenger) CIF v3 -- the fastest way to consume threat intelligence
+- [**132**Star][21d] [Go] [fanpei91/gap-proxy](https://github.com/fanpei91/gap-proxy) gap-proxy 是一个加速网络的 SOCKS5 安全代理工具。
+- [**132**Star][6y] [esxgx/easy-ecc](https://github.com/esxgx/easy-ecc) Simple and secure ECC and ECDSA
+- [**132**Star][3y] [Batchfile] [eliteandroidapps/whatsapp-key-db-extractor](https://github.com/eliteandroidapps/whatsapp-key-db-extractor) Allows WhatsApp users to extract their cipher key and databases on non-rooted Android devices.
+- [**132**Star][2m] [Py] [defense-cyber-crime-center/dc3-mwcp](https://github.com/defense-cyber-crime-center/dc3-mwcp)
+- [**132**Star][5m] [PS] [cyberark/ketshash](https://github.com/cyberark/ketshash) 基于事件查看器日志,检测可疑的特权 NTLM 连接, 尤其是 Pass-The-Hash 攻击
- [**132**Star][4y] [HTML] [code-scan/brodomain](https://github.com/code-scan/brodomain) 兄弟域名查询
-- [**132**Star][3m] [YARA] [citizenlab/malware-indicators](https://github.com/citizenlab/malware-indicators) Citizen Lab Malware Reports
-- [**132**Star][1m] [TypeScript] [chame1eon/jnitrace](https://github.com/chame1eon/jnitrace) A Frida based tool that traces usage of the JNI API in Android apps.
-- [**132**Star][2y] [Py] [bharshbarger/autosint](https://github.com/bharshbarger/autosint) Tool to automate common OSINT tasks
-- [**132**Star][11m] [Ruby] [bahaabdelwahed/killshot](https://github.com/bahaabdelwahed/killshot) A Penetration Testing Framework, Information gathering tool & Website Vulnerability Scanner
-- [**132**Star][14d] [C] [arsv/minibase](https://github.com/arsv/minibase) small static userspace tools for Linux
-- [**132**Star][1m] [Java] [apache/commons-compress](https://github.com/apache/commons-compress) Mirror of Apache Commons Compress
+- [**132**Star][11d] [Shell] [cfn-modules/docs](https://github.com/cfn-modules/docs) Rapid CloudFormation: Modular, production ready, open source.
+- [**132**Star][2m] [Py] [batuhaniskr/twitter-intelligence](https://github.com/batuhaniskr/twitter-intelligence) Twitter Intelligence OSINT project performs tracking and analysis of the Twitter
+- [**132**Star][16d] [C] [arsv/minibase](https://github.com/arsv/minibase) small static userspace tools for Linux
+- [**132**Star][3y] [aqzt/sso](https://github.com/aqzt/sso) 项目主要是汇集整理服务器安全运维规范,包括运维工程师必须遵守的规范、服务器运维中注意事项、故障避免手段等文档,帮助运维工程师避免服务器安全和运维故障,方便运维工程师学习成长。
+- [**132**Star][4d] [Java] [apache/commons-compress](https://github.com/apache/commons-compress) Mirror of Apache Commons Compress
- [**132**Star][4y] [Py] [andrewmohawk/rfcathelpers](https://github.com/andrewmohawk/rfcathelpers) Helper scripts for RfCat devices
-- [**132**Star][2y] [Visual Basic] [alibawazeeer/rat-njrat-0.7d-modded-source-code](https://github.com/alibawazeeer/rat-njrat-0.7d-modded-source-code) NJR
-- [**131**Star][1y] [PowerShell] [nsacyber/applocker-guidance](https://github.com/nsacyber/applocker-guidance) Configuration guidance for implementing application whitelisting with AppLocker. #nsacyber
+- [**132**Star][2y] [Visual Basic .NET] [alibawazeeer/rat-njrat-0.7d-modded-source-code](https://github.com/alibawazeeer/rat-njrat-0.7d-modded-source-code) NJR
+- [**131**Star][1y] [PS] [nsacyber/applocker-guidance](https://github.com/nsacyber/applocker-guidance) Configuration guidance for implementing application whitelisting with AppLocker. #nsacyber
+- [**131**Star][3y] [Py] [hanc00l/wifitest](https://github.com/hanc00l/wifitest) 一个简单的wifi弱口令暴破的python脚本,可自动实时破解,不需要使用aircrack-ng抓包
- [**131**Star][4y] [okturtles/blockchainid](https://github.com/okturtles/blockchainid) Decentralized alternative to Facebook Login and OpenID
-- [**131**Star][6m] [JS] [wzdnzd/shadowsocksx-ng-r](https://github.com/wzdnzd/shadowsocksx-ng-r) Shadowsocks Client for MacOS
+- [**131**Star][2y] [Shell] [coldhakca/tor-relay-bootstrap](https://github.com/coldhakca/tor-relay-bootstrap) Script to bootstrap a Debian server to be a set-and-forget Tor relay
- [**131**Star][2y] [JS] [oyyd/encryptsocks](https://github.com/oyyd/encryptsocks) Encrypt your socks transmission.
-- [**131**Star][2y] [Py] [chenjiandongx/soksaccounts](https://github.com/chenjiandongx/soksaccounts) Shadowsocks 账号爬虫
+- [**131**Star][2y] [C#] [m0xiaoxi/ctftools](https://github.com/m0xiaoxi/CTFtools) 本项目主要搜集一些关于信息安全攻防相关的知识与工具,便于个人的渗透工作。
- [**131**Star][4y] [Py] [ricterz/websocket-injection](https://github.com/ricterz/websocket-injection) WebSocket 中转注入工具
-- [**131**Star][12d] [JS] [dfirkuiper/kuiper](https://github.com/dfirkuiper/kuiper) a digital investigation platform that provides a capabilities for the investigation team and individuals to parse, search, visualize collected evidences (evidences could be collected by fast traige script like Hoarder)
-- [**131**Star][1y] [Py] [youngyangyang04/nosqlattack](https://github.com/youngyangyang04/nosqlattack) NoSQLAttack is an open source Python tool to automate exploit MongoDB server IP on Internet and disclose the database data by MongoDB default configuration weaknesses and injection attacks.
+- [**131**Star][2y] [C] [airbus-seclab/ramooflax](https://github.com/airbus-seclab/ramooflax) a bare metal (type 1) VMM (hypervisor) with a python remote control API
+- [**131**Star][2y] [C++] [vmcall/latebros](https://github.com/vmcall/latebros) x64 usermode rootkit
+- [**131**Star][5m] [Py] [zeropwn/spyse.py](https://github.com/zeropwn/spyse.py) Python API wrapper and command-line client for the tools hosted on spyse.com.
+- [**131**Star][2m] [TS] [xyfir/ptorx](https://github.com/xyfir/ptorx)
- [**131**Star][1y] [wpscanteam/wpscan-v3](https://github.com/wpscanteam/wpscan-v3) THIS REPOSITORY HAS BEEN MOVED TO
- [**131**Star][6y] [ActionScript] [wordpress/secure-swfupload](https://github.com/wordpress/secure-swfupload) A fork of the long-abandoned SWFUpload project, maintained by WordPress and others to ensure that a secure version of SWFUpload exists. Report security vulnerabilities to swfupload-security@wordpress.org.
-- [**131**Star][24d] [Py] [wangyihang/exploit-framework](https://github.com/wangyihang/exploit-framework)
-- [**131**Star][1y] [Py] [threatresponse/margaritashotgun](https://github.com/threatresponse/margaritashotgun) Remote Memory Acquisition Tool
+- [**131**Star][26d] [Py] [wangyihang/exploit-framework](https://github.com/wangyihang/exploit-framework)
+- [**131**Star][1y] [PHP] [tools2/zend-decoder](https://github.com/tools2/zend-decoder) 还原ZendGuard处理后的php代码
- [**131**Star][3y] [HTML] [theori-io/chakra-2016-11](https://github.com/theori-io/chakra-2016-11) Proof-of-Concept exploit for Edge bugs (CVE-2016-7200 & CVE-2016-7201)
-- [**131**Star][3y] [PowerShell] [tevora-threat/eternal_blue_powershell](https://github.com/tevora-threat/eternal_blue_powershell) Port of eternal blue exploits to powershell
+- [**131**Star][3y] [PS] [tevora-threat/eternal_blue_powershell](https://github.com/tevora-threat/eternal_blue_powershell) Port of eternal blue exploits to powershell
- [**131**Star][10m] [Rust] [shnatsel/libdiffuzz](https://github.com/shnatsel/libdiffuzz) Custom memory allocator that helps discover reads from uninitialized memory
-- [**131**Star][7m] [shipcod3/mysapadventures](https://github.com/shipcod3/mysapadventures) A quick methodology on testing / hacking SAP Applications for n00bz and bug bounty hunters
- [**131**Star][3y] [Py] [schumilo/vusbf](https://github.com/schumilo/vusbf)
- [**131**Star][7y] [C] [saurik/mempodroid](https://github.com/saurik/mempodroid)
- [**131**Star][3y] [Py] [safebreach-labs/pyekaboo](https://github.com/safebreach-labs/pyekaboo) Proof-of-concept program that is able to to hijack/hook/proxy Python module(s) thanks to $PYTHONPATH variable
- [**131**Star][2y] [Ruby] [rapid7/nexpose-client](https://github.com/rapid7/nexpose-client) DEPRECATED: Rapid7 Nexpose API client library written in Ruby
- [**131**Star][5m] [JS] [owasp/passfault](https://github.com/owasp/passfault) OWASP Passfault evaluates passwords and enforces password policy in a completely different way.
-- [**131**Star][8d] [C] [openmpt/openmpt](https://github.com/openmpt/openmpt) Official read-only git mirror of the OpenMPT and libopenmpt subversion repository at
- [**131**Star][1y] [Py] [nopernik/mpdns](https://github.com/nopernik/mpdns) Multi-Purpose DNS Server
+- [**131**Star][1y] [Py] [mschwager/0wned](https://github.com/mschwager/0wned) Code execution via Python package installation.
+- [**131**Star][2d] [JS] [mozilla/fxa](https://github.com/mozilla/fxa) Monorepo for Firefox Accounts
- [**131**Star][5y] [Java] [mogwaisec/mjet](https://github.com/mogwaisec/mjet) Mogwai Java Management Extensions (JMX) Exploitation Toolkit
-- [**131**Star][7m] [C++] [luis-hebendanz/0pack](https://github.com/luis-hebendanz/0pack) A novel technique to hide code from debuggers
-- [**131**Star][9m] [PHP] [k4mpr3t/b4tm4n](https://github.com/k4mpr3t/b4tm4n) Php webshell
-- [**131**Star][4y] [C] [jvoisin/pangu](https://github.com/jvoisin/pangu) Toolkit to detect/crash/attack GNU debugging-related tools
-- [**131**Star][15d] [C] [jnider/delinker](https://github.com/jnider/delinker) Unlinks a binary executable to get back a set of .o object files for further transformation and re-linking.
+- [**131**Star][2y] [C#] [m0xiaoxi/ctftools](https://github.com/m0xiaoxi/ctftools) 本项目主要搜集一些关于信息安全攻防相关的知识与工具,便于个人的渗透工作。
+- [**131**Star][2y] [MATLAB] [lts4/universal](https://github.com/lts4/universal) Universal adversarial perturbations
- [**131**Star][2y] [Py] [jlospinoso/memcachedump](https://github.com/jlospinoso/memcachedump) Use your Shodan API Key to dump all the contents of exposed memcached servers.
- [**131**Star][2y] [Shell] [jgamblin/quickinstall](https://github.com/jgamblin/quickinstall) A Shell Script To Take Care Of Ubuntu Basics
- [**131**Star][3y] [C] [jcadduono/android_external_dirtycow](https://github.com/jcadduono/android_external_dirtycow) CVE-2016-5195 (dirtycow/dirtyc0w) - recowvery fork
-- [**131**Star][8m] [Py] [jas502n/cve-2019-2618](https://github.com/jas502n/cve-2019-2618) Weblogic Upload Vuln(Need username password)-CVE-2019-2618
-- [**131**Star][2m] [Py] [ivan1ee/struts2-057-exp](https://github.com/ivan1ee/struts2-057-exp) s2-057 最新漏洞分析和EXP脚本
+- [**131**Star][9m] [JS] [htfy96/v2ray-config-gen](https://github.com/htfy96/v2ray-config-gen) V2Ray Configuration generator
- [**131**Star][4m] [C] [hoshimin/hooklib](https://github.com/hoshimin/hooklib) The functions interception library written on pure C and NativeAPI with UserMode and KernelMode support
+- [**131**Star][4y] [C] [hiteshd/android-rootkit](https://github.com/hiteshd/android-rootkit) A rootkit for Android. Based on "Android platform based linux kernel rootkit" from Phrack Issue 68
- [**131**Star][6y] [Py] [hiddenillusion/analyzepdf](https://github.com/hiddenillusion/analyzepdf) Tool to help analyze PDF files
+- [**131**Star][1m] [Java] [games647/fastlogin](https://github.com/games647/fastlogin) Checks if a minecraft player has a valid paid account. If so, they can skip offline authentication automatically. (premium auto login)
- [**131**Star][6y] [Java] [fuzion24/androidziparbitrage](https://github.com/fuzion24/androidziparbitrage) Exploit for Android Zip bugs: 8219321, 9695860, and 9950697
-- [**131**Star][6y] [esxgx/easy-ecc](https://github.com/esxgx/easy-ecc) Simple and secure ECC and ECDSA
- [**131**Star][7m] [Go] [empijei/wapty](https://github.com/empijei/wapty) Go语言编写的Burp的替代品。(已不再维护)
-- [**131**Star][3y] [Batchfile] [eliteandroidapps/whatsapp-key-db-extractor](https://github.com/eliteandroidapps/whatsapp-key-db-extractor) Allows WhatsApp users to extract their cipher key and databases on non-rooted Android devices.
- [**131**Star][3m] [PHP] [edsonmedina/php_testability](https://github.com/edsonmedina/php_testability) Analyses and reports testability issues of a php codebase
-- [**131**Star][2m] [Py] [defense-cyber-crime-center/dc3-mwcp](https://github.com/defense-cyber-crime-center/dc3-mwcp)
+- [**131**Star][7m] [Java] [comsecuris/gdbghidra](https://github.com/comsecuris/gdbghidra) a visual bridge between a GDB session and GHIDRA
+- [**131**Star][1y] [Py] [cisco-talos/bass](https://github.com/cisco-talos/bass) a framework designed to automatically generate antivirus signatures from samples belonging to previously generated malware clusters
- [**131**Star][2y] [Py] [chrisrimondi/vulntoes](https://github.com/chrisrimondi/vulntoes) Vulnerability Data in ES
+- [**131**Star][2m] [C] [celesteblue-dev/psvita-re-tools](https://github.com/celesteblue-dev/psvita-re-tools) A bundle of RE tools for analyzing and modding PSVita OS
+- [**131**Star][2d] [Shell] [binhex/arch-rtorrentvpn](https://github.com/binhex/arch-rtorrentvpn) Docker build script for Arch Linux base with ruTorrent, rTorrent, Flood, Privoxy and OpenVPN
+- [**131**Star][6d] [Shell] [beta-tester/rpi-pxe-server](https://github.com/beta-tester/rpi-pxe-server) setup a Raspberry Pi as an PXE-Server
+- [**131**Star][1m] [Go] [arnaucube/go-snark](https://github.com/arnaucube/go-snark) zkSNARK library implementation in Go
- [**131**Star][2y] [PHP] [anssi-fr/ad-permissions](https://github.com/anssi-fr/ad-permissions) Active Directory permissions (ACL/ACE) auditing tools
-- [**130**Star][2y] [C] [airbus-seclab/ramooflax](https://github.com/airbus-seclab/ramooflax) a bare metal (type 1) VMM (hypervisor) with a python remote control API
-- [**130**Star][2y] [C++] [vmcall/latebros](https://github.com/vmcall/latebros) x64 usermode rootkit
-- [**130**Star][5m] [Py] [zeropwn/spyse.py](https://github.com/zeropwn/spyse.py) Python API wrapper and command-line client for the tools hosted on spyse.com.
+- [**131**Star][1y] [C++] [3gstudent/eventlogedit-evtx--evolution](https://github.com/3gstudent/eventlogedit-evtx--evolution) Remove individual lines from Windows XML Event Log (EVTX) files
+- [**131**Star][1y] [Py] [0x09al/dropboxc2c](https://github.com/0x09al/dropboxc2c) DropboxC2C is a post-exploitation agent which uses Dropbox Infrastructure for command and control operations.
- [**130**Star][2y] [Py] [zcutlip/bowcaster](https://github.com/zcutlip/bowcaster) Exploit Development Framework
-- [**130**Star][1y] [PowerShell] [xor-function/fathomless](https://github.com/xor-function/fathomless) A collection of post-exploitation tools for network red teaming. (Migrating to Fathomless Project)
+- [**130**Star][1y] [PS] [xor-function/fathomless](https://github.com/xor-function/fathomless) A collection of post-exploitation tools for network red teaming. (Migrating to Fathomless Project)
- [**130**Star][2y] [C#] [xiaoxiaoleo/windows_pentest_tools](https://github.com/xiaoxiaoleo/windows_pentest_tools) My pentest tools used two years ago. Part1
-- [**130**Star][1y] [PHP] [tools2/zend-decoder](https://github.com/tools2/zend-decoder) 还原ZendGuard处理后的php代码
-- [**130**Star][12m] [Dockerfile] [theonemule/docker-waf](https://github.com/theonemule/docker-waf) An NGINX and ModSecurity based Web Application Firewall for Docker
+- [**130**Star][6m] [Py] [wfzsec/awd_attack_framework](https://github.com/wfzsec/awd_attack_framework) awd攻防常用脚本+不死马+crontab+防御方法
+- [**130**Star][1y] [Py] [wangyihang/reverse-shell-manager](https://github.com/wangyihang/reverse-shell-manager)
+- [**130**Star][4m] [theofficialflow/h-encore-2](https://github.com/theofficialflow/h-encore-2) Fully chained kernel exploit for the PS Vita on firmwares 3.65-3.72
+- [**130**Star][9m] [Shell] [tenable/router_badusb](https://github.com/tenable/router_badusb) BadUSB in Routers
+- [**130**Star][2m] [Py] [shieldersec/webtech](https://github.com/shieldersec/webtech) Identify technologies used on websites.
- [**130**Star][2y] [Py] [ropnop/windows_sshagent_extract](https://github.com/ropnop/windows_sshagent_extract) PoC code to extract private keys from Windows 10's built in ssh-agent service
- [**130**Star][9m] [C++] [quarkslab/arybo](https://github.com/quarkslab/arybo) Manipulation, canonicalization and identification of mixed boolean-arithmetic symbolic expressions
-- [**130**Star][2y] [Py] [pwning/defcon25-public](https://github.com/pwning/defcon25-public) Publicly released tools/plugins from PPP for DEFCON 25 CTF Finals
-- [**130**Star][7m] [TypeScript] [phiresky/nmap-log-parse](https://github.com/phiresky/nmap-log-parse) Logs which devices are in your local network and draws graphs
-- [**130**Star][1y] [Py] [mschwager/0wned](https://github.com/mschwager/0wned) Code execution via Python package installation.
+- [**130**Star][7m] [TS] [phiresky/nmap-log-parse](https://github.com/phiresky/nmap-log-parse) Logs which devices are in your local network and draws graphs
+- [**130**Star][23d] [Shell] [oktasecuritylabs/passprotect-js](https://github.com/oktasecuritylabs/passprotect-js) A simple JavaScript library to help you protect your users' passwords
+- [**130**Star][3y] [Java] [mwsrc/betterandrorat](https://github.com/mwsrc/betterandrorat) Android Remote Access Trojan
+- [**130**Star][9m] [HTML] [minhaskamal/cuteviruscollection](https://github.com/minhaskamal/cuteviruscollection) A Collection of Cute But Deadly Viruses (small-unharmful-annoying-harmless-funny-malware-virus-worm-windows-xp-7-10)
- [**130**Star][3m] [Go] [malfunkt/arpfox](https://github.com/malfunkt/arpfox) An arpspoof alternative (written in Go) that injects spoofed ARP packets into a LAN
-- [**130**Star][2y] [MATLAB] [lts4/universal](https://github.com/lts4/universal) Universal adversarial perturbations
+- [**130**Star][1m] [Py] [log2timeline/dfvfs](https://github.com/log2timeline/dfvfs) Digital Forensics Virtual File System (dfVFS)
- [**130**Star][8m] [Py] [landgrey/abuse-ssl-bypass-waf](https://github.com/landgrey/abuse-ssl-bypass-waf) Bypassing WAF by abusing SSL/TLS Ciphers
-- [**130**Star][4y] [C] [hiteshd/android-rootkit](https://github.com/hiteshd/android-rootkit) A rootkit for Android. Based on "Android platform based linux kernel rootkit" from Phrack Issue 68
-- [**130**Star][21d] [Ruby] [hahwul/xspear](https://github.com/hahwul/xspear) Powerfull XSS Scanning and Parameter analysis tool&gem
+- [**130**Star][7m] [Py] [kd8bny/limeaide](https://github.com/kd8bny/limeaide) A python application designed to remotely dump RAM of a Linux client and create a volatility profile for later analysis on your local host.
+- [**130**Star][9d] [inquest/yara-rules](https://github.com/inquest/yara-rules) A collection of YARA rules we wish to share with the world, most probably referenced from
+- [**130**Star][3y] [Py] [infosec-au/enumxff](https://github.com/infosec-au/enumxff) Enumerating IPs in X-Forwarded-Headers to bypass 403 restrictions
+- [**130**Star][2y] [PHP] [incredibleindishell/sqlite-lab](https://github.com/incredibleindishell/sqlite-lab) This code is vulnerable to SQL Injection and having SQLite database. For SQLite database, SQL Injection payloads are different so it is for fun. Just enjoy it \m/
- [**130**Star][4y] [Lua] [glennzw/shodan-hq-nse](https://github.com/glennzw/shodan-hq-nse) Shodan HQ nmap plugin - passively scan targets
+- [**130**Star][7m] [gaerae/awesome-algorithms-education](https://github.com/gaerae/awesome-algorithms-education) A curated list to learning and practicing about algorithm.
+- [**130**Star][2m] [Py] [decoxviii/userrecon-py](https://github.com/decoxviii/userrecon-py) Username recognition on various websites.
- [**130**Star][2y] [Py] [comsecuris/ida_strcluster](https://github.com/comsecuris/ida_strcluster) extending IDA's string navigation capabilities
-- [**130**Star][1y] [Py] [cisco-talos/bass](https://github.com/cisco-talos/bass) a framework designed to automatically generate antivirus signatures from samples belonging to previously generated malware clusters
-- [**130**Star][2m] [C] [celesteblue-dev/psvita-re-tools](https://github.com/celesteblue-dev/psvita-re-tools) A bundle of RE tools for analyzing and modding PSVita OS
- [**130**Star][1y] [Py] [blacknbunny/mcreator](https://github.com/blacknbunny/mcreator) 反向Shell生成器, 自带AV绕过技术
- [**130**Star][2m] [Py] [benjeems/packetstrider](https://github.com/benjeems/packetstrider) A network packet forensics tool for SSH
-- [**130**Star][2m] [Py] [batuhaniskr/twitter-intelligence](https://github.com/batuhaniskr/twitter-intelligence) Twitter Intelligence OSINT project performs tracking and analysis of the Twitter
- [**130**Star][3m] [Py] [apperian/ios-checkipa](https://github.com/apperian/ios-checkipa) Scans an IPA file and parses its Info.plist and embedded.mobileprovision files. Performs checks of expected key/value relationships and displays the results.
- [**130**Star][2y] [Py] [andrewaeva/dga](https://github.com/andrewaeva/dga) The repository that contains the algorithms for generating domain names, dictionaries of malicious domain names. Developed to research the possibility of applying machine learning and neural networks to detect and classify malicious domains.
-- [**130**Star][28d] [PHP] [ahref-group/ss-panel-smarty-edition](https://github.com/ahref-group/ss-panel-smarty-edition) Forked from
-- [**130**Star][1y] [C++] [3gstudent/eventlogedit-evtx--evolution](https://github.com/3gstudent/eventlogedit-evtx--evolution) Remove individual lines from Windows XML Event Log (EVTX) files
-- [**130**Star][1y] [Py] [0x09al/dropboxc2c](https://github.com/0x09al/dropboxc2c) DropboxC2C is a post-exploitation agent which uses Dropbox Infrastructure for command and control operations.
-- [**129**Star][3y] [Py] [hanc00l/wifitest](https://github.com/hanc00l/wifitest) 一个简单的wifi弱口令暴破的python脚本,可自动实时破解,不需要使用aircrack-ng抓包
-- [**129**Star][4y] [C] [stefanesser/opensource_taig](https://github.com/stefanesser/opensource_taig) Lets create an open source version of the latest TaiG jailbreak.
+- [**130**Star][30d] [PHP] [ahref-group/ss-panel-smarty-edition](https://github.com/ahref-group/ss-panel-smarty-edition) Forked from
+- [**130**Star][2m] [Py] [3xpl017/netpwn](https://github.com/3xpl017/netpwn) Tool made to automate tasks of pentesting.
+- [**129**Star][2m] [C++] [michalmonday/supremeduck](https://github.com/michalmonday/supremeduck) Wireless "Rubber ducky" controlled by smartphone.
- [**129**Star][3y] [Swift] [magic-akari/wannacry](https://github.com/magic-akari/wannacry)
-- [**129**Star][2y] [C#] [m0xiaoxi/ctftools](https://github.com/m0xiaoxi/CTFtools) 本项目主要搜集一些关于信息安全攻防相关的知识与工具,便于个人的渗透工作。
-- [**129**Star][27d] [Batchfile] [pr0cf5/kernel-exploit-practice](https://github.com/pr0cf5/kernel-exploit-practice) repository for kernel exploit practice
-- [**129**Star][1m] [C#] [lithnet/ad-password-protection](https://github.com/lithnet/ad-password-protection) Active Directory password filter featuring breached password checking and custom complexity rules
+- [**129**Star][3m] [Py] [kootenpv/access_points](https://github.com/kootenpv/access_points) Scan your WiFi and get access point information and signal quality
- [**129**Star][2y] [Py] [nccgroup/susanrtti](https://github.com/nccgroup/SusanRTTI) Another RTTI Parsing IDA plugin
+- [**129**Star][2d] [TS] [wkovacs64/pwned](https://github.com/wkovacs64/pwned) A command-line tool for querying the 'Have I been pwned?' service.
+- [**129**Star][10m] [Shell] [weaknetlabs/penetration-testing-grimoire](https://github.com/weaknetlabs/penetration-testing-grimoire) Custom Tools and Notes from my own Penetration Testing Experience
- [**129**Star][2y] [C#] [v2ray/v2ray-panel-master](https://github.com/v2ray/v2ray-panel-master) Deprecated
-- [**129**Star][3m] [theofficialflow/h-encore-2](https://github.com/theofficialflow/h-encore-2) Fully chained kernel exploit for the PS Vita on firmwares 3.65-3.72
-- [**129**Star][8m] [Shell] [tenable/router_badusb](https://github.com/tenable/router_badusb) BadUSB in Routers
-- [**129**Star][7d] [Py] [swimlane/pyattck](https://github.com/swimlane/pyattck) A Python Module to interact with the Mitre ATT&CK Framework
+- [**129**Star][1y] [C#] [ustayready/casperstager](https://github.com/ustayready/casperstager) PoC for persisting .NET payloads in Windows Notification Facility (WNF) state names using low-level Windows Kernel API calls.
+- [**129**Star][7m] [Py] [tarlogicsecurity/chankro](https://github.com/tarlogicsecurity/chankro) Herramienta para evadir disable_functions y open_basedir
+- [**129**Star][2d] [Py] [swimlane/pyattck](https://github.com/swimlane/pyattck) A Python Module to interact with the Mitre ATT&CK Framework
- [**129**Star][2m] [Py] [svenito/exploit-pattern](https://github.com/svenito/exploit-pattern) generate and search pattern string for exploit development
- [**129**Star][6y] [Go] [stripe-ctf/octopus](https://github.com/stripe-ctf/octopus) Many-armed network simulator
- [**129**Star][2y] [C] [smeso/mtpwn](https://github.com/smeso/mtpwn) PoC exploit for arbitrary file read/write in locked Samsung Android device via MTP (SVE-2017-10086)
+- [**129**Star][6d] [JS] [smartcontractsecurity/swc-registry](https://github.com/smartcontractsecurity/swc-registry) Smart Contract Weakness Classification and Test Cases
+- [**129**Star][4y] [C++] [slauc91/anticheat](https://github.com/slauc91/anticheat) RootKit & Cheat Scanner - Windows
- [**129**Star][4y] [HTML] [skylined/localnetworkscanner](https://github.com/skylined/localnetworkscanner) PoC Javascript that scans your local network when you open a webpage
-- [**129**Star][2y] [sky8964/home](https://github.com/sky8964/home) 【墙外到墙内搬运工】郭文贵 推特党 兲朝浮世绘 小民之心 辛灏年 曹长青 袁红冰 旗袍 袁腾飞 翻墙 科学上网 | 搬运工 自由 民主 法治 宪政 人权 平等 视频 音频 文字版 在线 播放 下载 民运 维权 王岐山 孟建柱 孙力军 傅振华 江棉恒 江泽民 习近平 温家宝 王芳 董卿 杨澜 周小平 吴征 唐柏桥 e租宝 泛亚 共产党 赵家 盜国贼 内幕 黑暗 灾难 专政 上访 游行 暴乱 欺骗 谎言 腐败 通奸 权贵 马航 老兵 活摘 启蒙 墙外 墙内 防火墙 防火长城 功夫网 党文化 民阵 爆料 九评 杨建利 郭宝胜 昭明 反共 法轮功 自媒体 Youtube 油管 推特 Twitter 网盘 传播 关注 五毛 自干五 特务 红二代 红三代 官二代 土共 共匪
- [**129**Star][1y] [C] [siguza/cl0ver](https://github.com/siguza/cl0ver) tfp0 for iOS 9.0-9.3.4
- [**129**Star][7m] [C++] [schnocker/noeye](https://github.com/schnocker/noeye) An usermode BE Rootkit Bypass
-- [**129**Star][2m] [Py] [rastrea2r/rastrea2r](https://github.com/rastrea2r/rastrea2r) Collecting & Hunting for IOCs with gusto and style
+- [**129**Star][7m] [JS] [pownjs/pown](https://github.com/pownjs/pown) Pown.js is a security testing an exploitation toolkit built on top of Node.js and NPM.
+- [**129**Star][7m] [OCaml] [plum-umd/redexer](https://github.com/plum-umd/redexer) The Redexer binary instrumentation framework for Dalvik bytecode
- [**129**Star][2y] [Go] [netxfly/xsec-traffic](https://github.com/netxfly/xsec-traffic) 恶意流量分析程序
-- [**129**Star][3y] [Java] [mwsrc/betterandrorat](https://github.com/mwsrc/betterandrorat) Android Remote Access Trojan
-- [**129**Star][9m] [HTML] [minhaskamal/cuteviruscollection](https://github.com/minhaskamal/cuteviruscollection) A Collection of Cute But Deadly Viruses (small-unharmful-annoying-harmless-funny-malware-virus-worm-windows-xp-7-10)
-- [**129**Star][2y] [C#] [m0xiaoxi/ctftools](https://github.com/m0xiaoxi/ctftools) 本项目主要搜集一些关于信息安全攻防相关的知识与工具,便于个人的渗透工作。
-- [**129**Star][1m] [Py] [log2timeline/dfvfs](https://github.com/log2timeline/dfvfs) Digital Forensics Virtual File System (dfVFS)
-- [**129**Star][7m] [Py] [kd8bny/limeaide](https://github.com/kd8bny/limeaide) A python application designed to remotely dump RAM of a Linux client and create a volatility profile for later analysis on your local host.
-- [**129**Star][3y] [Py] [infosec-au/enumxff](https://github.com/infosec-au/enumxff) Enumerating IPs in X-Forwarded-Headers to bypass 403 restrictions
-- [**129**Star][2y] [PHP] [incredibleindishell/sqlite-lab](https://github.com/incredibleindishell/sqlite-lab) This code is vulnerable to SQL Injection and having SQLite database. For SQLite database, SQL Injection payloads are different so it is for fun. Just enjoy it \m/
-- [**129**Star][9m] [JS] [htfy96/v2ray-config-gen](https://github.com/htfy96/v2ray-config-gen) V2Ray Configuration generator
+- [**129**Star][4m] [HTML] [mxk/win10-secure-baseline-gpo](https://github.com/mxk/win10-secure-baseline-gpo) Windows 10 and Server 2016 Secure Baseline Group Policy
+- [**129**Star][7m] [Shell] [munki/installr](https://github.com/munki/installr) A tool designed for use in Recovery boot to do a "fresh" install of macOS and additional packages.
+- [**129**Star][2y] [mandatoryprogrammer/russiadnsleak](https://github.com/mandatoryprogrammer/russiadnsleak) Summary and archives of leaked Russian TLD DNS data
+- [**129**Star][3y] [PHP] [malwares/exploitkit](https://github.com/malwares/exploitkit) Exploitkit
+- [**129**Star][1y] [Shell] [jsitech/relayer](https://github.com/jsitech/relayer) SMB Relay Attack Script
+- [**129**Star][4y] [Go] [jordan-wright/elastichoney](https://github.com/jordan-wright/elastichoney) A Simple Elasticsearch Honeypot
+- [**129**Star][3m] [Py] [j3ssie/metabigor](https://github.com/j3ssie/metabigor) Command line Search Engines Framework but without API key
+- [**129**Star][1m] [Py] [initstring/cloud_enum](https://github.com/initstring/cloud_enum) Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.
- [**129**Star][2y] [PHP] [hcamael/ctf_repo](https://github.com/hcamael/ctf_repo)
+- [**129**Star][11d] [C++] [hasherezade/iat_patcher](https://github.com/hasherezade/iat_patcher) Persistent IAT hooking application - based on bearparser
- [**129**Star][7m] [C++] [gossip-sjtu/tripledoggy](https://github.com/gossip-sjtu/tripledoggy) 基于clang static analyzer的源码漏洞检测插件
+- [**129**Star][21d] [gajos112/oscp](https://github.com/gajos112/oscp) Materials for OSCP exam
- [**129**Star][3y] [Py] [friedappleteam/frapl](https://github.com/friedappleteam/frapl) a reverse engineering framework created to simplify dynamic instrumentation with Frida
- [IDA插件](https://github.com/FriedAppleTeam/FRAPL/tree/master/Framework/FridaLink)
- [Frida脚本](https://github.com/FriedAppleTeam/FRAPL/tree/master/Framework/FRAPL)
- [**129**Star][4y] [Py] [elceef/bitlocker](https://github.com/elceef/bitlocker) Volatility Framework plugin for extracting BitLocker FVEK (Full Volume Encryption Key)
-- [**129**Star][2m] [Py] [decoxviii/userrecon-py](https://github.com/decoxviii/userrecon-py) Username recognition on various websites.
+- [**129**Star][1y] [Py] [ekultek/dagon](https://github.com/ekultek/dagon) Dagon:哈希破解和操纵系统,可以爆破多种哈希类型,创建爆破字典,自动哈希算法验证,从 Unicode 到 ASCII 的随机salt 生成等。
+- [**129**Star][2y] [Py] [dviros/rat-via-telegram](https://github.com/dviros/rat-via-telegram) Windows Remote Post Breach Tool via Telegram
- [**129**Star][6m] [Py] [cr0hn/enteletaor](https://github.com/cr0hn/enteletaor) Message Queue & Broker Injection tool
-- [**129**Star][7m] [Java] [comsecuris/gdbghidra](https://github.com/comsecuris/gdbghidra) a visual bridge between a GDB session and GHIDRA
+- [**129**Star][2y] [Py] [comsecuris/gdbida](https://github.com/comsecuris/gdbida) a visual bridge between a GDB session and IDA Pro's disassembler
+ - [IDA插件](https://github.com/comsecuris/gdbida/blob/master/ida_gdb_bridge.py)
+ - [GDB脚本](https://github.com/comsecuris/gdbida/blob/master/gdb_ida_bridge_client.py)
- [**129**Star][2y] [HTML] [chybeta/waf-bypass](https://github.com/chybeta/waf-bypass) WAF Bypass Cheatsheet
-- [**129**Star][9d] [Shell] [cfn-modules/docs](https://github.com/cfn-modules/docs) Rapid CloudFormation: Modular, production ready, open source.
- [**129**Star][2y] [Ruby] [benlaurie/objecthash](https://github.com/benlaurie/objecthash) A way to cryptographically hash objects (in the JSON-ish sense) that works cross-language. And, therefore, cross-encoding.
- [**129**Star][4y] [Go] [benjojo/dos_ssh](https://github.com/benjojo/dos_ssh) Use BIOS ram hacks to make a SSH server out of any INT 10 13h app (MS-DOS is one of those)
-- [**129**Star][3y] [aqzt/sso](https://github.com/aqzt/sso) 项目主要是汇集整理服务器安全运维规范,包括运维工程师必须遵守的规范、服务器运维中注意事项、故障避免手段等文档,帮助运维工程师避免服务器安全和运维故障,方便运维工程师学习成长。
- [**129**Star][6m] [C] [abhishekkr/n00brat](https://github.com/abhishekkr/n00brat) Remote Administration Toolkit (or Trojan) for POSiX (Linux/Unix) system working as a Web Service
-- [**129**Star][2m] [Py] [3xpl017/netpwn](https://github.com/3xpl017/netpwn) Tool made to automate tasks of pentesting.
- [**128**Star][4y] [Py] [snare/idiot](https://github.com/snare/idiot) Your best is an idiot
-- [**128**Star][2m] [Kotlin] [gosecure/dtd-finder](https://github.com/gosecure/dtd-finder) List DTDs and generate XXE payloads using those local DTDs.
-- [**128**Star][3m] [Py] [kootenpv/access_points](https://github.com/kootenpv/access_points) Scan your WiFi and get access point information and signal quality
+- [**128**Star][4y] [C] [stefanesser/opensource_taig](https://github.com/stefanesser/opensource_taig) Lets create an open source version of the latest TaiG jailbreak.
+- [**128**Star][20d] [Rust] [gamozolabs/fzero_fuzzer](https://github.com/gamozolabs/fzero_fuzzer) A fast Rust-based safe and thead-friendly grammar-based fuzz generator
- [**128**Star][2m] [C] [jollheef/lpe](https://github.com/jollheef/lpe) collection of verified Linux kernel exploits
+- [**128**Star][2y] [Py] [unfetter-discover/unfetter-analytic](https://github.com/unfetter-discover/unfetter-analytic) a framework for collecting events (process creation, network connections, Window Event Logs, etc.) from a client machine (Windows 7) and performing CAR analytics to detect potential adversary activity
+- [**128**Star][9m] [Vim script] [logico-ar/typewriter](https://github.com/logico-ar/typewriter) An iA Writer inspired color scheme. It has support for vim, vim airline, vim lightline, tmux and urxvt/xterm.
- [**128**Star][2y] [Shell] [newbee119/ssh-scanner](https://github.com/NewBee119/ssh-scanner) ssh password guessing,ssh登录密码破解
+- [**128**Star][6d] [Py] [you0708/ida](https://github.com/you0708/ida) A Python implementation of FindCrypt plugin.
+ - [IDA主题](https://github.com/you0708/ida/tree/master/theme)
+ - [findcrypt](https://github.com/you0708/ida/tree/master/idapython_tools/findcrypt) IDA FindCrypt/FindCrypt2 插件的Python版本
- [**128**Star][2y] [Java] [yandex/burp-molly-scanner](https://github.com/yandex/burp-molly-scanner) Turn your Burp suite into headless active web application vulnerability scanner
-- [**128**Star][10m] [Shell] [weaknetlabs/penetration-testing-grimoire](https://github.com/weaknetlabs/penetration-testing-grimoire) Custom Tools and Notes from my own Penetration Testing Experience
-- [**128**Star][1y] [Py] [wangyihang/reverse-shell-manager](https://github.com/wangyihang/reverse-shell-manager)
- [**128**Star][6y] [Py] [valdikss/billgates-botnet-tracker](https://github.com/valdikss/billgates-botnet-tracker) Some tools to monitor BillGates CnC servers
-- [**128**Star][1y] [C#] [ustayready/casperstager](https://github.com/ustayready/casperstager) PoC for persisting .NET payloads in Windows Notification Facility (WNF) state names using low-level Windows Kernel API calls.
-- [**128**Star][6m] [Py] [tarlogicsecurity/chankro](https://github.com/tarlogicsecurity/chankro) Herramienta para evadir disable_functions y open_basedir
+- [**128**Star][6m] [Py] [tuuunya/webpocket](https://github.com/tuuunya/webpocket) Exploit management framework
- [**128**Star][1m] [Py] [stratosphereips/stratospherelinuxips](https://github.com/stratosphereips/stratospherelinuxips) an intrusion prevention system that is based on behavioral detections and machine learning algorithms
-- [**128**Star][7m] [OCaml] [plum-umd/redexer](https://github.com/plum-umd/redexer) The Redexer binary instrumentation framework for Dalvik bytecode
-- [**128**Star][3m] [Py] [paulsec/det](https://github.com/paulsec/det) (extensible) Data Exfiltration Toolkit (DET)
+- [**128**Star][3m] [Py] [shellster/ldapper](https://github.com/shellster/ldapper) AD LDAP Command Line Searching that doesn't suck.
+- [**128**Star][1y] [C++] [s3team/vmhunt](https://github.com/s3team/vmhunt) Extraction and Simplification of Virtualized Binary Code
+- [**128**Star][4y] [PHP] [ramadhanamizudin/wordpress-scanner](https://github.com/ramadhanamizudin/wordpress-scanner) Wordpress Vulnerability Scanner
+- [**128**Star][24d] [PHP] [propaganistas/laravel-fakeid](https://github.com/propaganistas/laravel-fakeid) Automatic model ID obfuscation in routes for Laravel 5
+- [**128**Star][4m] [Py] [paulsec/det](https://github.com/paulsec/det) (extensible) Data Exfiltration Toolkit (DET)
- [**128**Star][2m] [Java] [openzipkin/brave-webmvc-example](https://github.com/openzipkin/brave-webmvc-example) See how much time Spring services spend on an http request. — Edit
-- [**128**Star][7m] [Shell] [munki/installr](https://github.com/munki/installr) A tool designed for use in Recovery boot to do a "fresh" install of macOS and additional packages.
- [**128**Star][5y] [Shell] [mrschyte/dockerpot](https://github.com/mrschyte/dockerpot) A docker based honeypot.
-- [**128**Star][7d] [JS] [mozilla/fxa](https://github.com/mozilla/fxa) Monorepo for Firefox Accounts
-- [**128**Star][2y] [mandatoryprogrammer/russiadnsleak](https://github.com/mandatoryprogrammer/russiadnsleak) Summary and archives of leaked Russian TLD DNS data
-- [**128**Star][3y] [PHP] [malwares/exploitkit](https://github.com/malwares/exploitkit) Exploitkit
+- [**128**Star][1y] [TeX] [maxking/linux-vulnerabilities-10-years](https://github.com/maxking/linux-vulnerabilities-10-years) My MS thesis on survey of a decade fo Linux Kernel CVEs, their categories and various mitigations that exist.
+- [**128**Star][30d] [Py] [m8r0wn/enumdb](https://github.com/m8r0wn/enumdb) MySQL/MSSQL 爆破和后渗透工具, 搜索数据库并提取敏感信息
- [**128**Star][1y] [C++] [m0n0ph1/iat-hooking-revisited](https://github.com/m0n0ph1/iat-hooking-revisited) Import address table (IAT) hooking is a well documented technique for intercepting calls to imported functions.
- [**128**Star][2y] [Shell] [lavalamp-/ws-docker-community](https://github.com/lavalamp-/ws-docker-community) Web Sight Docker Deployment
-- [**128**Star][1y] [Py] [kaniini/antissh](https://github.com/kaniini/antissh) An IRC bot which monitors for compromised embedded devices being used as proxies.
-- [**128**Star][17d] [TypeScript] [justinpealing/html-query-plan](https://github.com/justinpealing/html-query-plan) Display SQL Server Execution Plans in HTML
-- [**128**Star][1y] [Shell] [jsitech/relayer](https://github.com/jsitech/relayer) SMB Relay Attack Script
-- [**128**Star][4y] [Go] [jordan-wright/elastichoney](https://github.com/jordan-wright/elastichoney) A Simple Elasticsearch Honeypot
-- [**128**Star][1y] [Makefile] [jonathansalwan/binary-samples](https://github.com/jonathansalwan/binary-samples) Samples of binary with different formats and architectures. A test suite for your binary analysis tools.
-- [**128**Star][7d] [inquest/yara-rules](https://github.com/inquest/yara-rules) A collection of YARA rules we wish to share with the world, most probably referenced from
-- [**128**Star][9d] [C++] [hasherezade/iat_patcher](https://github.com/hasherezade/iat_patcher) Persistent IAT hooking application - based on bearparser
+- [**128**Star][19d] [TS] [justinpealing/html-query-plan](https://github.com/justinpealing/html-query-plan) Display SQL Server Execution Plans in HTML
+- [**128**Star][2m] [C++] [itm4n/usodllloader](https://github.com/itm4n/usodllloader) Windows - Weaponizing privileged file writes with the Update Session Orchestrator service
- [**128**Star][2y] [C] [gsmk/hexagon](https://github.com/gsmk/hexagon) IDA processor module for the hexagon (QDSP6) processor
- [**128**Star][8m] [Ruby] [firefart/wordpresspingbackportscanner](https://github.com/firefart/wordpresspingbackportscanner) WordpressPingbackPortScanner
-- [**128**Star][1y] [Py] [ekultek/dagon](https://github.com/ekultek/dagon) Dagon:哈希破解和操纵系统,可以爆破多种哈希类型,创建爆破字典,自动哈希算法验证,从 Unicode 到 ASCII 的随机salt 生成等。
-- [**128**Star][2y] [Py] [dviros/rat-via-telegram](https://github.com/dviros/rat-via-telegram) Windows Remote Post Breach Tool via Telegram
+- [**128**Star][1y] [Py] [deepzec/grok-backdoor](https://github.com/deepzec/grok-backdoor) Simple python backdoor with Ngrok tunnel support
- [**128**Star][3y] [HTML] [danladi/httppwnly](https://github.com/danladi/httppwnly) "Repeater" style XSS post-exploitation tool for mass browser control. Primarily a PoC to show why HttpOnly flag isn't a complete protection against session hijacking via XSS
-- [**128**Star][2y] [Py] [comsecuris/gdbida](https://github.com/comsecuris/gdbida) a visual bridge between a GDB session and IDA Pro's disassembler
- - [IDA插件](https://github.com/comsecuris/gdbida/blob/master/ida_gdb_bridge.py)
- - [GDB脚本](https://github.com/comsecuris/gdbida/blob/master/gdb_ida_bridge_client.py)
- [**128**Star][3m] [Py] [claudiugeorgiu/obfuscapk](https://github.com/claudiugeorgiu/obfuscapk) A black-box obfuscation tool for Android apps
-- [**128**Star][1m] [Go] [arnaucube/go-snark](https://github.com/arnaucube/go-snark) zkSNARK library implementation in Go
+- [**128**Star][12d] [Py] [bullseye0/shodan-eye](https://github.com/bullseye0/shodan-eye) Shodan Eye This tool collects all the information about all devices directly connected to the internet using the specified keywords that you enter. Author: Jolanda de Koff
- [**128**Star][1y] [C#] [anthemtotheego/sharpsploitconsole](https://github.com/anthemtotheego/sharpsploitconsole)
- [**128**Star][4y] [Py] [andrewhilts/snifflab](https://github.com/andrewhilts/snifflab) Scripts to create your own MITM'ing, packet sniffing WiFi access point
-- [**127**Star][2y] [Py] [unfetter-discover/unfetter-analytic](https://github.com/unfetter-discover/unfetter-analytic) a framework for collecting events (process creation, network connections, Window Event Logs, etc.) from a client machine (Windows 7) and performing CAR analytics to detect potential adversary activity
-- [**127**Star][9m] [Vim script] [logico-ar/typewriter](https://github.com/logico-ar/typewriter) An iA Writer inspired color scheme. It has support for vim, vim airline, vim lightline, tmux and urxvt/xterm.
-- [**127**Star][12d] [PHP] [breach-tw/breach.tw](https://github.com/breach-tw/breach.tw) A service that can track data breaches like "Have I Been Pwned", but it is specific for Taiwan.
-- [**127**Star][9d] [TypeScript] [wkovacs64/pwned](https://github.com/wkovacs64/pwned) A command-line tool for querying the 'Have I been pwned?' service.
-- [**127**Star][6m] [Py] [wfzsec/awd_attack_framework](https://github.com/wfzsec/awd_attack_framework) awd攻防常用脚本+不死马+crontab+防御方法
+- [**128**Star][3y] [C] [adamcaudill/ccsrch](https://github.com/adamcaudill/ccsrch) Cross-platform credit card (PAN) search tool for security assessments
+- [**127**Star][10m] [whid-injector/awesome-go-offensive-tools](https://github.com/whid-injector/awesome-go-offensive-tools) List of Awesome Offensive Tools written in GO
+- [**127**Star][5d] [PHP] [curtbraz/phishing-api](https://github.com/curtbraz/phishing-api) Comprehensive Web Based Phishing Suite of Tools for Rapid Deployment and Real-Time Alerting!
+- [**127**Star][2m] [C#] [fireeye/duedlligence](https://github.com/fireeye/duedlligence) Shellcode runner for all application whitelisting bypasses
+- [**127**Star][20d] [Py] [secureauthcorp/pysap](https://github.com/SecureAuthCorp/pysap) pysap is an open source Python library that provides modules for crafting and sending packets using SAP's NI, Diag, Enqueue, Router, Message Server, SNC, IGS and RFC protocols.
+- [**127**Star][14d] [PHP] [breach-tw/breach.tw](https://github.com/breach-tw/breach.tw) A service that can track data breaches like "Have I Been Pwned", but it is specific for Taiwan.
+- [**127**Star][1y] [HTML] [xhak9x/socialphish](https://github.com/xhak9x/socialphish) The most complete Phishing Tool, with 32 templates +1 customizable
- [**127**Star][2m] [Py] [v3aqb/fwlite](https://github.com/v3aqb/fwlite) A anti-censorship HTTP proxy with builtin shadowsocks support.
- [**127**Star][2m] [Go] [ullaakut/camerattack](https://github.com/ullaakut/camerattack) An attack tool designed to remotely disable CCTV camera streams (like in spy movies)
-- [**127**Star][6m] [Py] [tuuunya/webpocket](https://github.com/tuuunya/webpocket) Exploit management framework
- [**127**Star][1y] [Py] [spotify/gcp-audit](https://github.com/spotify/gcp-audit) A tool for auditing security properties of GCP projects.
- [**127**Star][3y] [CSS] [shellntel/vcr](https://github.com/shellntel/vcr) Vulnerability Compliance Report Tool used to parse Nessus files into html reports created by SynerComm, Inc.
+- [**127**Star][2m] [Rust] [rust-ammonia/ammonia](https://github.com/rust-ammonia/ammonia) Repair and secure untrusted HTML
- [**127**Star][2y] [Py] [rootlabs/nwatch](https://github.com/rootlabs/nwatch) a handy tool for host discovery, portscanning and operating system fingerprinting.
-- [**127**Star][4y] [PHP] [ramadhanamizudin/wordpress-scanner](https://github.com/ramadhanamizudin/wordpress-scanner) Wordpress Vulnerability Scanner
-- [**127**Star][22d] [PHP] [propaganistas/laravel-fakeid](https://github.com/propaganistas/laravel-fakeid) Automatic model ID obfuscation in routes for Laravel 5
-- [**127**Star][7m] [JS] [pownjs/pown](https://github.com/pownjs/pown) Pown.js is a security testing an exploitation toolkit built on top of Node.js and NPM.
+- [**127**Star][1y] [Py] [qiyeboy/baseproxy](https://github.com/qiyeboy/baseproxy) Asynchronous HTTP/HTTPS proxy that intercepts and modifies messages(异步http/https代理,可拦截修改报文)
+- [**127**Star][5m] [Shell] [pssss/security-baseline](https://github.com/pssss/security-baseline) Linux/Windows 安全加固脚本
- [**127**Star][5m] [Go] [mushorg/glutton](https://github.com/mushorg/glutton) Generic Low Interaction Honeypot
-- [**127**Star][20d] [C] [libyal/libewf](https://github.com/libyal/libewf) Libewf is a library to access the Expert Witness Compression Format (EWF)
+- [**127**Star][12m] [C++] [mq1n/nomercy](https://github.com/mq1n/nomercy) Open source anti cheat
+- [**127**Star][2y] [Go] [massung/chip-8](https://github.com/massung/chip-8) Assembler and Emulator in Go
+- [**127**Star][22d] [C] [libyal/libewf](https://github.com/libyal/libewf) Libewf is a library to access the Expert Witness Compression Format (EWF)
+- [**127**Star][9m] [leezj9671/offensiveinterview](https://github.com/leezj9671/offensiveinterview) 翻译国外的
+- [**127**Star][7m] [Go] [l3m0n/whatweb](https://github.com/l3m0n/whatweb) 更快速的进行Web应用指纹识别
+- [**127**Star][1y] [Py] [kaniini/antissh](https://github.com/kaniini/antissh) An IRC bot which monitors for compromised embedded devices being used as proxies.
- [**127**Star][4y] [C] [jndok/stfusip](https://github.com/jndok/stfusip) System Integrity Protection (SIP) bypass for OSX 10.11.1 - 10.11.2 - 10.11.3
-- [**127**Star][2m] [C++] [itm4n/usodllloader](https://github.com/itm4n/usodllloader) Windows - Weaponizing privileged file writes with the Update Session Orchestrator service
- [**127**Star][6y] [Py] [ikotler/hackersh](https://github.com/ikotler/hackersh) A free and open source command-line shell and scripting language designed especially for security testing
-- [**127**Star][2m] [Py] [google/ctfscoreboard](https://github.com/google/ctfscoreboard) Scoreboard for Capture The Flag competitions.
+- [**127**Star][2m] [grrrdog/weird_proxies](https://github.com/grrrdog/weird_proxies) Reverse proxies cheatsheet
- [**127**Star][2y] [C++] [gitmirar/meltdown-poc](https://github.com/gitmirar/meltdown-poc) A PoC implementation of the meltdown attack described in
- [**127**Star][1y] [C] [gamozolabs/falkervisor_grilled_cheese](https://github.com/gamozolabs/falkervisor_grilled_cheese)
- [**127**Star][5y] [Py] [fox-it/cryptophp](https://github.com/fox-it/cryptophp) CryptoPHP Indicators of Compromise
- [**127**Star][2y] [Py] [fireeye/flare-dbg](https://github.com/fireeye/flare-dbg) to aid malware reverse engineers in rapidly developing debugger scripts.
- [**127**Star][4y] [C] [fi01/cve-2015-3636](https://github.com/fi01/cve-2015-3636) PoC code for 32 bit Android OS
+- [**127**Star][7m] [enovella/r2frida-wiki](https://github.com/enovella/r2frida-wiki) This repo aims at providing practical examples on how to use r2frida
- [**127**Star][3m] [JS] [electrode-io/electrode-csrf-jwt](https://github.com/electrode-io/electrode-csrf-jwt) Stateless Cross-Site Request Forgery (CSRF) protection with JWT
-- [**127**Star][1y] [Py] [deepzec/grok-backdoor](https://github.com/deepzec/grok-backdoor) Simple python backdoor with Ngrok tunnel support
-- [**127**Star][4y] [Ruby] [darkarnium/secpub](https://github.com/darkarnium/secpub) Published security vulnerabilities and associated information.
+- [**127**Star][3y] [C] [davidbuchanan314/pwn-mbr](https://github.com/davidbuchanan314/pwn-mbr) A simple MBR hijack demonstration
+- [**127**Star][2d] [Py] [darkarnium/secpub](https://github.com/darkarnium/secpub) Published security vulnerabilities and associated information.
+- [**127**Star][3m] [Rust] [d0nutptr/sic](https://github.com/d0nutptr/sic) A tool to perform Sequential Import Chaining
+- [**127**Star][2m] [Py] [cyb0r9/ispy](https://github.com/cyb0r9/ispy) ispy V1.0 - Eternalblue(ms17-010)/Bluekeep(CVE-2019-0708) Scanner and exploit ( Metasploit automation )
- [**127**Star][6y] [C++] [crowdstrike/crowddetox](https://github.com/crowdstrike/crowddetox) CrowdStrike CrowdDetox Plugin for Hex-Rays,automatically removes junk code and variables from Hex-Rays function decompilation
-- [**127**Star][18d] [C] [cisco-talos/file2pcap](https://github.com/cisco-talos/file2pcap) make various types of packet captures containing the content of any file that you specify
+- [**127**Star][20d] [C] [cisco-talos/file2pcap](https://github.com/cisco-talos/file2pcap) make various types of packet captures containing the content of any file that you specify
- [**127**Star][3y] [Java] [chora10/fuzzdomain](https://github.com/chora10/fuzzdomain) FuzzDomain
+- [**127**Star][4y] [C++] [chago/advmp](https://github.com/chago/advmp) 大自然的搬运工-Android虚拟机保护Demo
- [**127**Star][4y] [Py] [caijiji/vulscritp](https://github.com/caijiji/vulscritp) 内网渗透脚本
- [**127**Star][1y] [Java] [bmax121/budhook](https://github.com/bmax121/budhook) An Android hook framework written like Xposed,based on YAHFA.
+- [**127**Star][5m] [Shell] [bet4it/build-an-efficient-pwn-environment](https://github.com/bet4it/build-an-efficient-pwn-environment) How to build an efficient pwn development environment in 2019
+- [**127**Star][3d] [Java] [baidu-security/openrasp-testcases](https://github.com/baidu-security/openrasp-testcases) OpenRASP 漏洞测试环境
- [**127**Star][4m] [HTML] [b-mueller/smashing-smart-contracts](https://github.com/b-mueller/smashing-smart-contracts) (HITBSecConf 2018)smashing smart contracts
-- [**127**Star][3y] [C] [adamcaudill/ccsrch](https://github.com/adamcaudill/ccsrch) Cross-platform credit card (PAN) search tool for security assessments
+- [**127**Star][5y] [Py] [0xpoly/centry](https://github.com/0xpoly/centry) Panic button for protection against cold boot attacks
- [**127**Star][2y] [Py] [0ang3el/easycsrf](https://github.com/0ang3el/easycsrf)
-- [**126**Star][2m] [C#] [fireeye/duedlligence](https://github.com/fireeye/duedlligence) Shellcode runner for all application whitelisting bypasses
+- [**126**Star][4y] [Py] [sektioneins/sandbox_toolkit](https://github.com/sektioneins/sandbox_toolkit) Toolkit for binary iOS / OS X sandbox profiles
- [**126**Star][4y] [Assembly] [osirislab/shellcode](https://github.com/osirislab/Shellcode) a repository of Shellcode written by students in NYU-Polytechnic's ISIS lab.
-- [**126**Star][18d] [Py] [secureauthcorp/pysap](https://github.com/SecureAuthCorp/pysap) pysap is an open source Python library that provides modules for crafting and sending packets using SAP's NI, Diag, Enqueue, Router, Message Server, SNC, IGS and RFC protocols.
-- [**126**Star][1y] [HTML] [xhak9x/socialphish](https://github.com/xhak9x/socialphish) The most complete Phishing Tool, with 32 templates +1 customizable
+- [**126**Star][2y] [Py] [opensourcesec/forager](https://github.com/opensourcesec/Forager) Multithreaded threat Intelligence gathering built with Python3
+- [**126**Star][5y] [CSS] [merces/aleph](https://github.com/merces/aleph) An Open Source Malware Analysis Pipeline System
- [**126**Star][1y] [C++] [urshadow/stringobfuscator](https://github.com/urshadow/stringobfuscator) Compile-time string obfuscation (C++14)
- [**126**Star][8m] [C] [treehacks/botnet-hackpack](https://github.com/treehacks/botnet-hackpack) Build a basic Command & Control botnet in C
- [**126**Star][10m] [C#] [terribledev/hardhat](https://github.com/terribledev/hardhat) Help secure .net core apps with various HTTP headers (such as CSP's)
@@ -7358,1161 +7802,1221 @@ capabilities of the framework.
- [**126**Star][10y] [C] [spotify/linux](https://github.com/spotify/linux) Spotify's Linux kernel for Debian-based systems
- [**126**Star][2y] [Py] [sparksharly/sharly](https://github.com/sparksharly/sharly) 基于HMM的web异常参数检测
- [**126**Star][4m] [JS] [sowdust/searchbook](https://github.com/sowdust/searchbook) A Firefox extension for executing some Graph-like searches against Facebook.
-- [**126**Star][4y] [C++] [slauc91/anticheat](https://github.com/slauc91/anticheat) RootKit & Cheat Scanner - Windows
-- [**126**Star][1y] [C++] [s3team/vmhunt](https://github.com/s3team/vmhunt) Extraction and Simplification of Virtualized Binary Code
-- [**126**Star][2m] [Rust] [rust-ammonia/ammonia](https://github.com/rust-ammonia/ammonia) Repair and secure untrusted HTML
-- [**126**Star][1y] [Py] [qiyeboy/baseproxy](https://github.com/qiyeboy/baseproxy) Asynchronous HTTP/HTTPS proxy that intercepts and modifies messages(异步http/https代理,可拦截修改报文)
+- [**126**Star][30d] [CSS] [redhatofficial/redhatofficial.github.io](https://github.com/redhatofficial/redhatofficial.github.io) The official Red Hat project page.
- [**126**Star][1y] [Py] [pyn3rd/cve-2018-3245](https://github.com/pyn3rd/cve-2018-3245) CVE-2018-3245-PoC
+- [**126**Star][2y] [Py] [pybind/cmake_example](https://github.com/pybind/cmake_example) Example pybind11 module built with a CMake-based build system
+- [**126**Star][2m] [PS] [nccgroup/accomplice](https://github.com/nccgroup/accomplice) Tools for discovery and abuse of COM hijacks
- [**126**Star][3m] [Py] [mvelazc0/oriana](https://github.com/mvelazc0/oriana) Oriana is a threat hunting tool that leverages a subset of Windows events to build relationships, calculate totals and run analytics. The results are presented in a Web layer to help defenders identify outliers and suspicious behavior on corporate environments.
+- [**126**Star][7m] [Go] [mritd/idgen](https://github.com/mritd/idgen) 一个使用 golang 编写的大陆身份证生成器
+- [**126**Star][4m] [C++] [marcosd4h/memhunter](https://github.com/marcosd4h/memhunter) Live hunting of code injection techniques
+- [**126**Star][12d] [Shell] [maravento/blackweb](https://github.com/maravento/blackweb) Domains Blacklist for Squid
- [**126**Star][4y] [PHP] [lietdai/doom](https://github.com/lietdai/doom) DOOM是在thorn上实现的分布式任务分发的ip端口漏洞扫描器
-- [**126**Star][9m] [leezj9671/offensiveinterview](https://github.com/leezj9671/offensiveinterview) 翻译国外的
-- [**126**Star][7m] [Go] [l3m0n/whatweb](https://github.com/l3m0n/whatweb) 更快速的进行Web应用指纹识别
+- [**126**Star][3m] [Roff] [kirtar22/litmus_test](https://github.com/kirtar22/litmus_test) Detecting ATT&CK techniques & tactics for Linux
- [**126**Star][4y] [Py] [jakecooper/oneplustwobot](https://github.com/jakecooper/oneplustwobot) A series of exploits used to jump the OnePlus reservation queue.
-- [**126**Star][3m] [Py] [j3ssie/metabigor](https://github.com/j3ssie/metabigor) Command line Search Engines Framework but without API key
-- [**126**Star][1m] [Py] [initstring/cloud_enum](https://github.com/initstring/cloud_enum) Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.
+- [**126**Star][2y] [C] [hfiref0x/zeroaccess](https://github.com/hfiref0x/zeroaccess) ZeroAccess v3 toolkit
- [**126**Star][2y] [C] [hardenedlinux/offensive_poc](https://github.com/hardenedlinux/offensive_poc) Writing PoC for fun and educate people take security seriously;-)
+- [**126**Star][2m] [Py] [google/ctfscoreboard](https://github.com/google/ctfscoreboard) Scoreboard for Capture The Flag competitions.
- [**126**Star][7m] [Py] [ex0dus-0x/dedsploit](https://github.com/ex0dus-0x/dedsploit) Network protocol auditing framework
-- [**126**Star][16d] [C++] [emsec/hal](https://github.com/emsec/hal) HAL – The Hardware Analyzer
- [**126**Star][2m] [PHP] [dragonbe/hibp](https://github.com/dragonbe/hibp) A composer package to verify if a password was previously used in a breach using Have I Been Pwned API.
- [**126**Star][2m] [Py] [doyler/securitytools](https://github.com/doyler/securitytools) A single repository for any security tools, scripts, documentation, etc. that I add
-- [**126**Star][17d] [C++] [detexploit/detexploit](https://github.com/detexploit/detexploit) OSS Vulnerability Scanner for Windows Platform
+- [**126**Star][19d] [C++] [detexploit/detexploit](https://github.com/detexploit/detexploit) OSS Vulnerability Scanner for Windows Platform
- [**126**Star][5m] [Py] [davidjacobson/safetext](https://github.com/davidjacobson/safetext) Script to remove homoglyphs and zero-width characters to allow for safe distribution of documents from anonymous sources.
- [**126**Star][1y] [JS] [danielstjules/blankshield](https://github.com/danielstjules/blankshield) Prevent reverse tabnabbing phishing attacks caused by _blank
- [**126**Star][3y] [C] [ctxis/rdp-replay](https://github.com/ctxis/rdp-replay) Replay RDP traffic from PCAP
- [**126**Star][1y] [Py] [cisco-talos/fnc-1](https://github.com/cisco-talos/fnc-1) Fake News Challenge
- [**126**Star][6y] [Lua] [bobsayshilol/luajit-decomp](https://github.com/bobsayshilol/luajit-decomp) LuaJIT decompiler
-- [**126**Star][5m] [Shell] [bet4it/build-an-efficient-pwn-environment](https://github.com/bet4it/build-an-efficient-pwn-environment) How to build an efficient pwn development environment in 2019
-- [**126**Star][8d] [Java] [baidu-security/openrasp-testcases](https://github.com/baidu-security/openrasp-testcases) OpenRASP 漏洞测试环境
-- [**126**Star][5y] [Py] [0xpoly/centry](https://github.com/0xpoly/centry) Panic button for protection against cold boot attacks
-- [**125**Star][4y] [Py] [sektioneins/sandbox_toolkit](https://github.com/sektioneins/sandbox_toolkit) Toolkit for binary iOS / OS X sandbox profiles
+- [**126**Star][6y] [atimorin/scada-tools](https://github.com/atimorin/scada-tools)
+- [**125**Star][9d] [Py] [d0g3-lab/h1ve](https://github.com/d0g3-lab/h1ve) An Easy / Quick / Cheap Integrated Platform
+- [**125**Star][2y] [C] [firmianay/life-long-learner](https://github.com/firmianay/life-long-learner) Personal Notes About Everything.
+- [**125**Star][17d] [xrkk/awesome-cyber-security](https://github.com/xrkk/awesome-cyber-security) [Moved to:
+- [**125**Star][19d] [JS] [maxmeng93/get-free-ss](https://github.com/maxmeng93/get-free-ss) 【停止维护】Node爬虫学习:自动爬取网络上公开的免费 SS\SSR 账号密码,并替换掉软件中旧的账号。
- [**125**Star][4y] [JS] [wisdom/regex-dos](https://github.com/Wisdom/RegEx-DoS)
-- [**125**Star][2y] [Py] [opensourcesec/forager](https://github.com/opensourcesec/Forager) Multithreaded threat Intelligence gathering built with Python3
-- [**125**Star][5y] [CSS] [merces/aleph](https://github.com/merces/aleph) An Open Source Malware Analysis Pipeline System
+- [**125**Star][30d] [Py] [yuxiaokui/intranet-penetration](https://github.com/yuxiaokui/intranet-penetration) 内网渗透必备工具。
- [**125**Star][2y] [vidar-team/hctf2017](https://github.com/vidar-team/hctf2017)
- [**125**Star][9m] [Py] [stamparm/hontel](https://github.com/stamparm/hontel) Telnet Honeypot
-- [**125**Star][2y] [Py] [pybind/cmake_example](https://github.com/pybind/cmake_example) Example pybind11 module built with a CMake-based build system
+- [**125**Star][12m] [Py] [sabri-zaki/easy_hack](https://github.com/sabri-zaki/easy_hack) Hack the World using Termux
- [**125**Star][7y] [pwnwiki/webappdefaultsdb](https://github.com/pwnwiki/webappdefaultsdb) A DB of known Web Application Admin URLS, Username/Password Combos and Exploits
-- [**125**Star][1y] [Perl] [philsmd/7z2hashcat](https://github.com/philsmd/7z2hashcat) extract information from password-protected .7z archives (and .sfx files) such that you can crack these "hashes" with hashcat
-- [**125**Star][2m] [PowerShell] [nccgroup/accomplice](https://github.com/nccgroup/accomplice) Tools for discovery and abuse of COM hijacks
-- [**125**Star][12m] [C++] [mq1n/nomercy](https://github.com/mq1n/nomercy) Open source anti cheat
-- [**125**Star][4m] [PowerShell] [mikefrobbins/powershell](https://github.com/mikefrobbins/powershell) PowerShell scripts and functions
-- [**125**Star][2y] [Go] [massung/chip-8](https://github.com/massung/chip-8) Assembler and Emulator in Go
-- [**125**Star][4m] [C++] [marcosd4h/memhunter](https://github.com/marcosd4h/memhunter) Live hunting of code injection techniques
+- [**125**Star][1m] [C] [projecthorus/radiosonde_auto_rx](https://github.com/projecthorus/radiosonde_auto_rx) Automatically Track Radiosonde Launches using RTLSDR
+- [**125**Star][20d] [Py] [picoctf/picoctf](https://github.com/picoctf/picoctf) The platform used to run picoCTF. A great framework to host any CTF.
+- [**125**Star][2d] [Perl] [philsmd/7z2hashcat](https://github.com/philsmd/7z2hashcat) extract information from password-protected .7z archives (and .sfx files) such that you can crack these "hashes" with hashcat
+- [**125**Star][1m] [osm0sis/android-busybox-ndk](https://github.com/osm0sis/android-busybox-ndk) Keeping track of instructions and patches for building busybox with the Android NDK
+- [**125**Star][9d] [C++] [omenscan/achoir](https://github.com/omenscan/achoir) Windows Live Artifacts Acquisition Script
+- [**125**Star][18d] [Go] [ns3777k/go-shodan](https://github.com/ns3777k/go-shodan) Shodan API client
+- [**125**Star][1m] [C++] [monoxgas/flyingafalseflag](https://github.com/monoxgas/flyingafalseflag) Slides and Code for the BHUSA 2019 talk: Flying a False Flag
+- [**125**Star][4m] [PS] [mikefrobbins/powershell](https://github.com/mikefrobbins/powershell) PowerShell scripts and functions
- [**125**Star][4y] [Py] [leastauthority/ethereum-analyses](https://github.com/leastauthority/ethereum-analyses)
+- [**125**Star][1y] [C] [lctf/lctf2018](https://github.com/lctf/lctf2018) Source code, writeups and exps in LCTF2018.
+- [**125**Star][9d] [C#] [jitbit/aspnetsaml](https://github.com/jitbit/aspnetsaml) Very simple SAML 2.0 consumer module for ASP.NET/C#
- [**125**Star][6m] [Py] [jinmo/ctfs](https://github.com/jinmo/ctfs) ctf exploit codes or writeups
- [**125**Star][2y] [Perl] [infoslack/sec-tools](https://github.com/infoslack/sec-tools) Docker images for infosec tools
- [**125**Star][3y] [JS] [infosec-au/little-doctor](https://github.com/infosec-au/little-doctor) a JavaScript worm that can exfiltrate files, microphone, webcam, and other data
- [**125**Star][3y] [PHP] [ikoniaris/kippo-graph](https://github.com/ikoniaris/kippo-graph) Visualize statistics from a Kippo SSH honeypot
-- [**125**Star][2m] [grrrdog/weird_proxies](https://github.com/grrrdog/weird_proxies) Reverse proxies cheatsheet
- [**125**Star][2y] [C++] [gpoulios/ropinjector](https://github.com/gpoulios/ropinjector) Patching ROP-encoded shellcodes into PEs
-- [**125**Star][7m] [enovella/r2frida-wiki](https://github.com/enovella/r2frida-wiki) This repo aims at providing practical examples on how to use r2frida
+- [**125**Star][5m] [Py] [fireeye/flare-qdb](https://github.com/fireeye/flare-qdb) Command-line and Python debugger for instrumenting and modifying native software behavior on Windows and Linux.
+- [**125**Star][4d] [JS] [feross/cs253.stanford.edu](https://github.com/feross/cs253.stanford.edu) CS 253 Web Security course at Stanford University
+- [**125**Star][3m] [Shell] [exalab/anlinux-resources](https://github.com/exalab/anlinux-resources) Image and Script for LinuxOnAndroid App
- [**125**Star][1y] [C] [emptymonkey/mimic](https://github.com/emptymonkey/mimic) Hide processes as a normal user in Linux.
-- [**125**Star][2y] [Py] [duoergun0729/3book](https://github.com/duoergun0729/3book) 《Web安全之强化学习与GAN》
- [**125**Star][2m] [Py] [deroko/lldbinit](https://github.com/deroko/lldbinit) Similar implementation of .gdbinit from fG
-- [**125**Star][7m] [Py] [danigargu/syms2elf](https://github.com/danigargu/syms2elf) A plugin for Hex-Ray's IDA Pro and radare2 to export the symbols recognized to the ELF symbol table
-- [**125**Star][2m] [Py] [cyb0r9/ispy](https://github.com/cyb0r9/ispy) ispy V1.0 - Eternalblue(ms17-010)/Bluekeep(CVE-2019-0708) Scanner and exploit ( Metasploit automation )
+- [**125**Star][7m] [Perl] [davisjam/vuln-regex-detector](https://github.com/davisjam/vuln-regex-detector) Detect vulnerable regexes in your project. REDOS, catastrophic backtracking.
+- [**125**Star][8m] [Py] [danigargu/syms2elf](https://github.com/danigargu/syms2elf) A plugin for Hex-Ray's IDA Pro and radare2 to export the symbols recognized to the ELF symbol table
- [**125**Star][3y] [Py] [codypierce/pyemu](https://github.com/codypierce/pyemu) x86 Emulator in Python
-- [**125**Star][6y] [atimorin/scada-tools](https://github.com/atimorin/scada-tools)
-- [**124**Star][2y] [C] [firmianay/life-long-learner](https://github.com/firmianay/life-long-learner) Personal Notes About Everything.
+- [**125**Star][8m] [Py] [chg-hou/enmicromsg.db-password-cracker](https://github.com/chg-hou/enmicromsg.db-password-cracker) Crack the password of EnMicroMsg.db with brute-force attack.
+- [**125**Star][10m] [Shell] [capt-meelo/lazyrecon](https://github.com/capt-meelo/lazyrecon) An automated approach to performing recon for bug bounty hunting and penetration testing.
+- [**125**Star][4y] [Py] [bwall/bamfdetect](https://github.com/bwall/bamfdetect) Identifies and extracts information from bots and other malware
+- [**125**Star][2y] [PS] [borntoberoot/powershell_ipv4networkscanner](https://github.com/borntoberoot/powershell_ipv4networkscanner) Powerful asynchronus IPv4 Network Scanner for PowerShell
+- [**124**Star][14d] [Py] [aquasecurity/tracee](https://github.com/aquasecurity/tracee) [EXPERIMENTAL] Container tracing using eBPF
+- [**124**Star][2m] [PHP] [binarymaster/3wifi](https://github.com/binarymaster/3wifi) 3WiFi Wireless Database
+- [**124**Star][5d] [JS] [lirantal/lockfile-lint](https://github.com/lirantal/lockfile-lint) Lint an npm or yarn lockfile to analyze and detect security issues
- [**124**Star][3y] [JS] [bakerface/wireless-tools](https://github.com/bakerface/wireless-tools) Wireless tools for Node.js
-- [**124**Star][28d] [Py] [yuxiaokui/intranet-penetration](https://github.com/yuxiaokui/intranet-penetration) 内网渗透必备工具。
+- [**124**Star][8d] [JS] [radareorg/radare2-r2pipe](https://github.com/radareorg/radare2-r2pipe) Access radare2 via pipe from any programming language!
+- [**124**Star][5m] [C++] [xorrior/raven](https://github.com/xorrior/raven) CobaltStrike External C2 for Websockets
+- [**124**Star][3y] [JS] [vtky/swizzler2](https://github.com/vtky/swizzler2) Swizzler2 - Hacking iOS applications
- [**124**Star][5y] [Py] [urule99/jsunpack-n](https://github.com/urule99/jsunpack-n) Automatically exported from code.google.com/p/jsunpack-n
+- [**124**Star][1y] [Shell] [thelinuxchoice/facebash](https://github.com/thelinuxchoice/facebash) Facebook Brute Forcer in shellscript using TOR
+- [**124**Star][6m] [Py] [thekingofduck/mysqlmonitor](https://github.com/thekingofduck/mysqlmonitor) MySQL实时监控工具(代码审计/黑盒/白盒审计辅助工具)
+- [**124**Star][17d] [Py] [t4d/stalkphish](https://github.com/t4d/stalkphish) StalkPhish - The Phishing kits stalker, harvesting phishing kits for investigations.
- [**124**Star][7y] [Py] [sysdream/pysqli](https://github.com/sysdream/pysqli) Python SQL injection framework
-- [**124**Star][28d] [CSS] [redhatofficial/redhatofficial.github.io](https://github.com/redhatofficial/redhatofficial.github.io) The official Red Hat project page.
+- [**124**Star][2m] [HTML] [sundaysec/android-exploits](https://github.com/sundaysec/android-exploits) A collection of android Exploits and Hacks
+- [**124**Star][7m] [C++] [saaramar/deterministic_lfh](https://github.com/saaramar/deterministic_lfh) Have fun with the LowFragmentationHeap
+- [**124**Star][4y] [Shell] [reider-roque/linpostexp](https://github.com/reider-roque/linpostexp) Linux post exploitation enumeration and exploit checking tools
- [**124**Star][3m] [Py] [platomav/biosutilities](https://github.com/platomav/biosutilities) Various BIOS Utilities for Modding/Research
-- [**124**Star][18d] [Py] [picoctf/picoctf](https://github.com/picoctf/picoctf) The platform used to run picoCTF. A great framework to host any CTF.
-- [**124**Star][8d] [C++] [omenscan/achoir](https://github.com/omenscan/achoir) Windows Live Artifacts Acquisition Script
-- [**124**Star][16d] [Go] [ns3777k/go-shodan](https://github.com/ns3777k/go-shodan) Shodan API client
+- [**124**Star][2m] [C#] [nyan-x-cat/lime-crypter](https://github.com/nyan-x-cat/lime-crypter) Simple obfuscation tool
- [**124**Star][3m] [C] [matrixssl/matrixssl](https://github.com/matrixssl/matrixssl) Lightweight Embedded SSL/TLS Implementation for IoT Devices
-- [**124**Star][28d] [Py] [m8r0wn/enumdb](https://github.com/m8r0wn/enumdb) MySQL/MSSQL 爆破和后渗透工具, 搜索数据库并提取敏感信息
-- [**124**Star][1y] [C] [lctf/lctf2018](https://github.com/lctf/lctf2018) Source code, writeups and exps in LCTF2018.
-- [**124**Star][7d] [C#] [jitbit/aspnetsaml](https://github.com/jitbit/aspnetsaml) Very simple SAML 2.0 consumer module for ASP.NET/C#
+- [**124**Star][1y] [Py] [leezj9671/socialdb_vue_flask](https://github.com/leezj9671/socialdb_vue_flask) 一个小型的较为简陋的社工库查询系统,使用Vue.js+Flask+MongoDB.可用52g, 本人不提供任何社工库资源. A tiny social engineering database system, including backend and frontend.
+- [**124**Star][4m] [Py] [lakiw/pcfg_cracker](https://github.com/lakiw/pcfg_cracker) Probabilistic Context Free Grammar (PCFG) password guess generator
- [**124**Star][4m] [Py] [igio90/uddbg](https://github.com/igio90/uddbg) A gdb like debugger that provide a runtime env to unicorn emulator and additionals features!
- [**124**Star][3m] [Py] [highmeh/pentest_scripts](https://github.com/highmeh/pentest_scripts) penetration testing scripts
-- [**124**Star][2y] [C] [hfiref0x/zeroaccess](https://github.com/hfiref0x/zeroaccess) ZeroAccess v3 toolkit
-- [**124**Star][7d] [C++] [grammatech/gtirb](https://github.com/grammatech/gtirb) Intermediate Representation for Binary analysis and transformation
-- [**124**Star][5m] [Py] [fireeye/flare-qdb](https://github.com/fireeye/flare-qdb) Command-line and Python debugger for instrumenting and modifying native software behavior on Windows and Linux.
+- [**124**Star][1m] [C++] [grammatech/gtirb](https://github.com/grammatech/gtirb) Intermediate Representation for Binary analysis and transformation
- [**124**Star][1y] [Shell] [dtag-dev-sec/t-pot-autoinstall](https://github.com/dtag-dev-sec/t-pot-autoinstall) Deprecated - Please use T-Pot Universal Installer
- [**124**Star][4y] [Py] [davidoren/cuckoosploit](https://github.com/davidoren/cuckoosploit) An environment for comprehensive, automated analysis of web-based exploits, based on Cuckoo sandbox.
-- [**124**Star][3y] [C] [davidbuchanan314/pwn-mbr](https://github.com/davidbuchanan314/pwn-mbr) A simple MBR hijack demonstration
-- [**124**Star][3m] [Rust] [d0nutptr/sic](https://github.com/d0nutptr/sic) A tool to perform Sequential Import Chaining
- [**124**Star][1y] [C#] [codecracker-tools/megadumper](https://github.com/codecracker-tools/megadumper) Dump native and .NET assemblies
-- [**124**Star][8m] [Py] [chg-hou/enmicromsg.db-password-cracker](https://github.com/chg-hou/enmicromsg.db-password-cracker) Crack the password of EnMicroMsg.db with brute-force attack.
+- [**124**Star][4d] [chef-koch/online-privacy-test-resource-list](https://github.com/chef-koch/online-privacy-test-resource-list) Privacy Online Test and Resource Compendium (POTARC) 🕵🏻
- [**124**Star][1y] [Py] [c0mmand3ropsec/cve-2017-10271](https://github.com/c0mmand3ropsec/cve-2017-10271) WebLogic Exploit
-- [**124**Star][4y] [Py] [bwall/bamfdetect](https://github.com/bwall/bamfdetect) Identifies and extracts information from bots and other malware
-- [**124**Star][10d] [Py] [bullseye0/shodan-eye](https://github.com/bullseye0/shodan-eye) Shodan Eye This tool collects all the information about all devices directly connected to the internet using the specified keywords that you enter. Author: Jolanda de Koff
- [**124**Star][2y] [Java] [brompwnie/uitkyk](https://github.com/brompwnie/uitkyk) Android Frida库, 用于分析App查找恶意行为
- [**124**Star][11m] [Shell] [antonlindstrom/passpwn](https://github.com/antonlindstrom/passpwn) 检查Unix密码管理器(pass)中的密码是否发生过泄露
- [**124**Star][3y] [JS] [antojoseph/diff-gui](https://github.com/antojoseph/diff-gui) GUI for Frida -Scripts
- [**124**Star][2y] [Py] [alonemonkey/antiantidebug](https://github.com/alonemonkey/antiantidebug) tweak、 lldb python for anti anti debug
- [**124**Star][2y] [HTML] [alienwithin/owasp-mth3l3m3nt-framework](https://github.com/alienwithin/owasp-mth3l3m3nt-framework) 辅助渗透测试与漏洞利用
-- [**123**Star][18d] [Rust] [gamozolabs/fzero_fuzzer](https://github.com/gamozolabs/fzero_fuzzer) A fast Rust-based safe and thead-friendly grammar-based fuzz generator
-- [**123**Star][11d] [JS] [lirantal/lockfile-lint](https://github.com/lirantal/lockfile-lint) Lint an npm or yarn lockfile to analyze and detect security issues
-- [**123**Star][29d] [JS] [radareorg/radare2-r2pipe](https://github.com/radareorg/radare2-r2pipe) Access radare2 via pipe from any programming language!
-- [**123**Star][8d] [Julia] [alertot/detectem](https://github.com/alertot/detectem) detect software and its version on websites.
+- [**124**Star][23d] [C++] [adamyaxley/obfuscate](https://github.com/adamyaxley/obfuscate) Guaranteed compile-time string literal obfuscation header-only library for C++14
+- [**123**Star][4d] [Julia] [alertot/detectem](https://github.com/alertot/detectem) detect software and its version on websites.
- [**123**Star][2m] [Go] [yahoo/yfuzz](https://github.com/yahoo/yfuzz) 利用 Kubernetes 实现分布式 fuzzing
- [**123**Star][11m] [C] [wenzel/r2vmi](https://github.com/wenzel/r2vmi) Hypervisor-Level Debugger based on Radare2 / LibVMI, using VMI IO and debug plugins
-- [**123**Star][3y] [JS] [vtky/swizzler2](https://github.com/vtky/swizzler2) Swizzler2 - Hacking iOS applications
+- [**123**Star][5m] [Py] [veerendra2/wifi-deauth-attack](https://github.com/veerendra2/wifi-deauth-attack) An automated script for deauthentication attack
- [**123**Star][4y] [Py] [ucsb-seclab/leakless](https://github.com/ucsb-seclab/leakless) Function redirection via ELF tricks.
+- [**123**Star][7y] [steamedfish/gfwiplist](https://github.com/steamedfish/gfwiplist) 可用于翻墙路由表的墙外IP列表
- [**123**Star][3m] [Go] [stalkr/dns-reverse-proxy](https://github.com/stalkr/dns-reverse-proxy) DNS Reverse Proxy
+- [**123**Star][4m] [PHP] [spidermate/b-xssrf](https://github.com/spidermate/b-xssrf) Toolkit to detect and keep track on Blind XSS, XXE & SSRF
+- [**123**Star][4m] [Py] [skyplabs/probequest](https://github.com/skyplabs/probequest) Toolkit for Playing with Wi-Fi Probe Requests
- [**123**Star][3m] [secure-data-analysis-data-sharing/data-analysis](https://github.com/secure-data-analysis-data-sharing/data-analysis) 资料分享
- [**123**Star][3y] [JS] [salesforce/secure-filters](https://github.com/salesforce/secure-filters) Anti-XSS Security Filters for EJS and More
- [**123**Star][2y] [Py] [riverloopsec/tumblerf](https://github.com/riverloopsec/tumblerf) a unified fuzzing framework for low-level RF and HW protocol/PHY/MAC analysis
- [**123**Star][5y] [Py] [ring04h/dirfuzz](https://github.com/ring04h/dirfuzz) 多线程网站目录穷举扫描
-- [**123**Star][4y] [Shell] [reider-roque/linpostexp](https://github.com/reider-roque/linpostexp) Linux post exploitation enumeration and exploit checking tools
- [**123**Star][6m] [PHP] [radenvodka/svscanner](https://github.com/radenvodka/svscanner) SVScanner - Scanner Vulnerability And MaSsive Exploit.
-- [**123**Star][1m] [Py] [radare/radare2ida](https://github.com/radare/radare2ida) Tools, documentation and scripts to move projects from IDA to R2 and viceversa
-- [**123**Star][1m] [C] [projecthorus/radiosonde_auto_rx](https://github.com/projecthorus/radiosonde_auto_rx) Automatically Track Radiosonde Launches using RTLSDR
+- [**123**Star][2m] [Py] [radare/radare2ida](https://github.com/radare/radare2ida) Tools, documentation and scripts to move projects from IDA to R2 and viceversa
+- [**123**Star][26d] [PS] [dsccommunity/xwebadministration](https://github.com/dsccommunity/xWebAdministration) This module contains DSC resources for deployment and configuration of web servers and components around those.
- [**123**Star][4y] [Py] [pentestmonkey/gateway-finder](https://github.com/pentestmonkey/gateway-finder) Tool to identify routers on the local LAN and paths to the Internet
- [**123**Star][1y] [Gherkin] [owasp-cloud-security/owasp-cloud-security](https://github.com/owasp-cloud-security/owasp-cloud-security) OWASP Cloud Security - Enabling conversations through threat and control stories
-- [**123**Star][1m] [osm0sis/android-busybox-ndk](https://github.com/osm0sis/android-busybox-ndk) Keeping track of instructions and patches for building busybox with the Android NDK
- [**123**Star][3y] [JS] [openmarshall/shortcutss](https://github.com/openmarshall/shortcutss) This is a Mac Shadowsocks client equipped with global shortcuts to switch proxy mode !
-- [**123**Star][3y] [PowerShell] [onelogicalmyth/automated-ad-setup](https://github.com/onelogicalmyth/automated-ad-setup) A PowerShell script that aims to have a fully configured domain built in under 10 minutes, but also apply security configuration and hardening.
+- [**123**Star][3y] [PS] [onelogicalmyth/automated-ad-setup](https://github.com/onelogicalmyth/automated-ad-setup) A PowerShell script that aims to have a fully configured domain built in under 10 minutes, but also apply security configuration and hardening.
+- [**123**Star][7m] [PS] [nyxgeek/o365recon](https://github.com/nyxgeek/o365recon) o365recon:PowerShell脚本,使用单个 cred 来转储完整的 o365 用户列表,组列表和组成员
- [**123**Star][11m] [Py] [niklasb/3dpwn](https://github.com/niklasb/3dpwn) VirtualBox 3D exploits & PoCs
- [**123**Star][2y] [Shell] [niclet/xiaomi_hack](https://github.com/niclet/xiaomi_hack) Xiaomi common hack for cameras (Mijia 360)
+- [**123**Star][2m] [C++] [nettitude/simplepeloader](https://github.com/nettitude/simplepeloader) In-Memory PE Loader
- [**123**Star][2y] [Shell] [nccgroup/lazydroid](https://github.com/nccgroup/lazydroid) bash script to facilitate some aspects of an Android application assessment
-- [**123**Star][1m] [C++] [monoxgas/flyingafalseflag](https://github.com/monoxgas/flyingafalseflag) Slides and Code for the BHUSA 2019 talk: Flying a False Flag
- [**123**Star][4y] [Py] [moloch--/csp-bypass](https://github.com/moloch--/csp-bypass) A Burp Plugin for Detecting Weaknesses in Content Security Policies
-- [**123**Star][1y] [TeX] [maxking/linux-vulnerabilities-10-years](https://github.com/maxking/linux-vulnerabilities-10-years) My MS thesis on survey of a decade fo Linux Kernel CVEs, their categories and various mitigations that exist.
-- [**123**Star][10d] [Shell] [maravento/blackweb](https://github.com/maravento/blackweb) Domains Blacklist for Squid
+- [**123**Star][3y] [malwares/dangerouszone](https://github.com/malwares/dangerouszone) Dangerous Malwares
+- [**123**Star][11m] [Pascal] [mahdisafsafi/debugengine](https://github.com/mahdisafsafi/debugengine) Delphi debug framework
- [**123**Star][7y] [Ruby] [livingsocial/keyspace](https://github.com/livingsocial/keyspace) Capability-based secure key management and credential storage
-- [**123**Star][4m] [Py] [lakiw/pcfg_cracker](https://github.com/lakiw/pcfg_cracker) Probabilistic Context Free Grammar (PCFG) password guess generator
+- [**123**Star][4m] [k0rz3n/googlehacking-page](https://github.com/k0rz3n/googlehacking-page) This is a summary of my study and use of Google hacking. I hope I can share it with you. If you like, please give me a star or fork it, thank you.
- [**123**Star][1y] [JS] [jonaslejon/tor-fingerprint](https://github.com/jonaslejon/tor-fingerprint) Tor Browser and Tails version fingerprint PoC
- [**123**Star][5m] [HTML] [jlleitschuh/zoom_vulnerability_poc](https://github.com/jlleitschuh/zoom_vulnerability_poc)
+- [**123**Star][7m] [Py] [jerrychan807/wspih](https://github.com/jerrychan807/wspih) Website Sensitive Personal Information Hunter 网站个人敏感信息文件扫描器
- [**123**Star][5y] [jacobsoo/androidslides](https://github.com/jacobsoo/androidslides)
+- [**123**Star][1y] [PS] [itm4n/ikeext-privesc](https://github.com/itm4n/ikeext-privesc) Windows IKEEXT DLL Hijacking Exploit Tool
- [**123**Star][3y] [Py] [inguma/bokken](https://github.com/inguma/bokken) Dear user: This is a git mirror of our Mercurial repository in
+- [**123**Star][1y] [PHP] [gwen001/s3-buckets-finder](https://github.com/gwen001/s3-buckets-finder) Find aws s3 buckets and extract datas.
- [**123**Star][1m] [Java] [graylog2/graylog-plugin-threatintel](https://github.com/graylog2/graylog-plugin-threatintel) Graylog Processing Pipeline functions to enrich log messages with IoC information from threat intelligence databases
+- [**123**Star][1m] [Go] [fuzzitdev/fuzzit](https://github.com/fuzzitdev/fuzzit) CLI to integrate continuous fuzzing with Fuzzit
- [**123**Star][8y] [evilcos/python-webshell](https://github.com/evilcos/python-webshell) webshell writen in python
+- [**123**Star][4y] [Py] [equalitie/learn2ban](https://github.com/equalitie/learn2ban) Open source machine learning DDOS detection tool
- [**123**Star][6y] [PHP] [disk0nn3ct/cookiecatcher](https://github.com/disk0nn3ct/cookiecatcher) assist in the exploitation of XSS (Cross Site Scripting) vulnerabilities within web applications to steal user session IDs
-- [**123**Star][7m] [Perl] [davisjam/vuln-regex-detector](https://github.com/davisjam/vuln-regex-detector) Detect vulnerable regexes in your project. REDOS, catastrophic backtracking.
+- [**123**Star][2y] [C] [coolervoid/mosca](https://github.com/coolervoid/mosca) Manual search tool to find bugs like a grep unix command - Beta
- [**123**Star][5y] [Shell] [chrisfosterelli/dockerrootplease](https://github.com/chrisfosterelli/dockerrootplease) Gives you root on the hostOS, if you're a member of the 'docker' group.
-- [**123**Star][8d] [chef-koch/online-privacy-test-resource-list](https://github.com/chef-koch/online-privacy-test-resource-list) Privacy Online Test and Resource Compendium (POTARC) 🕵🏻
- [**123**Star][3y] [C++] [cheetahsec/avmdbg](https://github.com/cheetahsec/avmdbg) a lightweight debugger for android virtual machine.
-- [**123**Star][10m] [Shell] [capt-meelo/lazyrecon](https://github.com/capt-meelo/lazyrecon) An automated approach to performing recon for bug bounty hunting and penetration testing.
-- [**123**Star][2y] [PowerShell] [borntoberoot/powershell_ipv4networkscanner](https://github.com/borntoberoot/powershell_ipv4networkscanner) Powerful asynchronus IPv4 Network Scanner for PowerShell
+- [**123**Star][2y] [Py] [blazeinfosec/pcrappyfuzzer](https://github.com/blazeinfosec/pcrappyfuzzer) pcrappyfuzzer:Scapy+ radamsa 的简单组合,从 pcap 文件中提取数据,执行快速 Fuzz
- [**123**Star][8m] [C++] [binspector/binspector](https://github.com/binspector/binspector) A binary format analysis tool
-- [**123**Star][21d] [C++] [adamyaxley/obfuscate](https://github.com/adamyaxley/obfuscate) Guaranteed compile-time string literal obfuscation header-only library for C++14
+- [**123**Star][19d] [JS] [0vercl0k/windbg-scripts](https://github.com/0vercl0k/windbg-scripts) A bunch of JavaScript extensions for WinDbg.
- [**122**Star][4y] [C] [trustedsec/pivoter](https://github.com/trustedsec/pivoter) Pivoter is a proxy tool for pentesters to have easier lateral movement.
+- [**122**Star][11m] [Shell] [wulabing/ssr-manyuser_glzjin_shell](https://github.com/wulabing/ssr-manyuser_glzjin_shell) sspanel v3 魔改版 后端一键安装配置管理脚本
+- [**122**Star][8m] [C++] [hmbsbige/getcndomainsandipv4](https://github.com/hmbsbige/getcndomainsandipv4) 获取国内 IP 和域名,生成路由表和 PAC 文件
+- [**122**Star][1m] [Py] [fuzzitdev/pythonfuzz](https://github.com/fuzzitdev/pythonfuzz) coverage guided fuzz testing for python
- [**122**Star][3y] [C] [nsacyber/control-flow-integrity](https://github.com/nsacyber/Control-Flow-Integrity) A proposed hardware-based method for stopping known memory corruption exploitation techniques. #nsacyber
- [**122**Star][2m] [Ruby] [chef/knife-openstack](https://github.com/chef/knife-openstack) Chef knife plug-in for OpenStack
- [**122**Star][4y] [C++] [lifting-bits/codereason](https://github.com/lifting-bits/codereason) Semantic Binary Code Analysis Framework
-- [**122**Star][2m] [Py] [you0708/ida](https://github.com/you0708/ida) A Python implementation of FindCrypt plugin.
- - [IDA主题](https://github.com/you0708/ida/tree/master/theme)
- - [findcrypt](https://github.com/you0708/ida/tree/master/idapython_tools/findcrypt) IDA FindCrypt/FindCrypt2 插件的Python版本
-- [**122**Star][5m] [C++] [xorrior/raven](https://github.com/xorrior/raven) CobaltStrike External C2 for Websockets
+- [**122**Star][2y] [Java] [zjlywjh001/phrackctf-platform-personal](https://github.com/zjlywjh001/phrackctf-platform-personal) CTF platfrom developed by Jarvis from Phrack Team. 做一个功能最全的CTF平台。
+- [**122**Star][2y] [C#] [zerosum0x0/runshellcode](https://github.com/zerosum0x0/runshellcode) .NET GUI program that runs shellcode
+- [**122**Star][5y] [C++] [zachriggle/ida-splode](https://github.com/zachriggle/ida-splode) Augmenting Static Reverse Engineering with Dynamic Analysis and Instrumentation
+ - [IDA插件](https://github.com/zachriggle/ida-splode/tree/master/py)
+ - [PinTool](https://github.com/zachriggle/ida-splode/tree/master/src)
- [**122**Star][1y] [C#] [xenocoderce/noisette-obfuscator](https://github.com/xenocoderce/noisette-obfuscator) An Obfuscator for .NET assembly
- [**122**Star][2y] [Py] [wossl33/wossl](https://github.com/wossl33/wossl) OpenSSL对称算法、哈希校验、非对称算法、证书管理、SSL安全
-- [**122**Star][5m] [Py] [veerendra2/wifi-deauth-attack](https://github.com/veerendra2/wifi-deauth-attack) An automated script for deauthentication attack
- [**122**Star][6y] [tombkeeper/shellcode_template_in_c](https://github.com/tombkeeper/shellcode_template_in_c)
-- [**122**Star][2m] [HTML] [sundaysec/android-exploits](https://github.com/sundaysec/android-exploits) A collection of android Exploits and Hacks
-- [**122**Star][7y] [steamedfish/gfwiplist](https://github.com/steamedfish/gfwiplist) 可用于翻墙路由表的墙外IP列表
-- [**122**Star][4m] [PHP] [spidermate/b-xssrf](https://github.com/spidermate/b-xssrf) Toolkit to detect and keep track on Blind XSS, XXE & SSRF
-- [**122**Star][3y] [PowerShell] [silverhack/voyeur](https://github.com/silverhack/voyeur) VOYEUR's main purpose is to generate a fast (and pretty) Active Directory report. The tool is developed entirely in PowerShell (a powerful scripting language) without dependencies (just .Net Framework 3.5 and Ofiice Excel if you want an useful and pretty report). The generated report is a perfect starting point for well-established forensic, inc…
-- [**122**Star][2m] [Py] [shieldersec/webtech](https://github.com/shieldersec/webtech) Identify technologies used on websites.
-- [**122**Star][11m] [Py] [sabri-zaki/easy_hack](https://github.com/sabri-zaki/easy_hack) Hack the World using Termux
-- [**122**Star][7m] [C++] [saaramar/deterministic_lfh](https://github.com/saaramar/deterministic_lfh) Have fun with the LowFragmentationHeap
+- [**122**Star][3y] [PS] [silverhack/voyeur](https://github.com/silverhack/voyeur) VOYEUR's main purpose is to generate a fast (and pretty) Active Directory report. The tool is developed entirely in PowerShell (a powerful scripting language) without dependencies (just .Net Framework 3.5 and Ofiice Excel if you want an useful and pretty report). The generated report is a perfect starting point for well-established forensic, inc…
- [**122**Star][4y] [Py] [raffaele-forte/climber](https://github.com/raffaele-forte/climber) Check UNIX/Linux systems for privilege escalation
-- [**122**Star][24d] [PowerShell] [dsccommunity/xwebadministration](https://github.com/dsccommunity/xWebAdministration) This module contains DSC resources for deployment and configuration of web servers and components around those.
-- [**122**Star][7m] [PowerShell] [nyxgeek/o365recon](https://github.com/nyxgeek/o365recon) o365recon:PowerShell脚本,使用单个 cred 来转储完整的 o365 用户列表,组列表和组成员
+- [**122**Star][2m] [Py] [netflix-skunkworks/policyuniverse](https://github.com/netflix-skunkworks/policyuniverse) Parse and Process AWS IAM Policies, Statements, ARNs, and wildcards.
+- [**122**Star][3y] [Ruby] [melvinsh/vcsmap](https://github.com/melvinsh/vcsmap) vcsmap is a plugin-based tool to scan public version control systems for sensitive information.
- [**122**Star][2m] [Py] [mdiazcl/fuzzbunch-debian](https://github.com/mdiazcl/fuzzbunch-debian) Fuzzbunch deployment for Debian - Intructions: Readme.md
-- [**122**Star][1y] [PowerShell] [mattifestation/bhusa2018_sysmon](https://github.com/mattifestation/bhusa2018_sysmon) All materials from our Black Hat 2018 "Subverting Sysmon" talk
-- [**122**Star][3y] [malwares/dangerouszone](https://github.com/malwares/dangerouszone) Dangerous Malwares
+- [**122**Star][1y] [PS] [mattifestation/bhusa2018_sysmon](https://github.com/mattifestation/bhusa2018_sysmon) All materials from our Black Hat 2018 "Subverting Sysmon" talk
- [**122**Star][3y] [C] [l0n3c0d3r/ceed](https://github.com/l0n3c0d3r/ceed) A tiny x86 compiler with ELF and PE target
- [**122**Star][2y] [PHP] [jamalc0m/wphunter](https://github.com/jamalc0m/wphunter) WPHunter A Wordpress Vulnerability Scanner
- [**122**Star][3y] [C++] [ivildeed/vmw_vmx_overloader](https://github.com/ivildeed/vmw_vmx_overloader) Loading unsigned code into kernel in Windows 10 (64) with help of VMware Workstation Pro/Player design flaw
- [**122**Star][2y] [Java] [isstac/kelinci](https://github.com/isstac/kelinci) AFL-based fuzzing for Java
- [**122**Star][4y] [irsl/adb-backup-apk-injection](https://github.com/irsl/adb-backup-apk-injection) Android ADB backup APK Injection POC
-- [**122**Star][1y] [PHP] [gwen001/s3-buckets-finder](https://github.com/gwen001/s3-buckets-finder) Find aws s3 buckets and extract datas.
- [**122**Star][3y] [Py] [grazfather/practicalmalwarelabs](https://github.com/grazfather/practicalmalwarelabs) Keep track of the labs from the book "Practical Malware Analysis"
+- [**122**Star][4m] [C++] [f4exb/dsdcc](https://github.com/f4exb/dsdcc) Digital Speech Decoder (DSD) rewritten as a C++ library
- [**122**Star][2y] [Java] [ezequielpereira/gae-rce](https://github.com/ezequielpereira/gae-rce) Google App Engine - Remote Code Execution bug ($36k bug bounty)
-- [**122**Star][4y] [Py] [equalitie/learn2ban](https://github.com/equalitie/learn2ban) Open source machine learning DDOS detection tool
- [**122**Star][2y] [Go] [egebalci/arcanus](https://github.com/egebalci/arcanus) ARCANUS is a customized payload generator/handler.
- [**122**Star][4m] [C] [dschanoeh/socketcand](https://github.com/dschanoeh/socketcand) A deprecated fork of socketcand. Please got to linux-can for the latest version.
- [**122**Star][4y] [PHP] [dermotblair/webvulscan](https://github.com/dermotblair/webvulscan) Web Application Vulnerability Scanner.
-- [**122**Star][2y] [C] [coolervoid/mosca](https://github.com/coolervoid/mosca) Manual search tool to find bugs like a grep unix command - Beta
+- [**122**Star][11m] [PHP] [damianofalcioni/ip-biter](https://github.com/damianofalcioni/ip-biter) The Hacker-friendly E-Mail (but not only) Tracking Framework
+- [**122**Star][3y] [JS] [cn33liz/jsmeter](https://github.com/cn33liz/jsmeter) JavaScript Reversed TCP Meterpreter Stager
+- [**122**Star][3m] [HTML] [chromium/trickuri](https://github.com/chromium/trickuri) to allow testing of applications' display of URLs.
- [**122**Star][2m] [Py] [chrispetrou/fdsploit](https://github.com/chrispetrou/fdsploit) File Inclusion & Directory Traversal fuzzing, enumeration & exploitation tool.
-- [**122**Star][2y] [Py] [blazeinfosec/pcrappyfuzzer](https://github.com/blazeinfosec/pcrappyfuzzer) pcrappyfuzzer:Scapy+ radamsa 的简单组合,从 pcap 文件中提取数据,执行快速 Fuzz
+- [**122**Star][12m] [Py] [axt/angr-utils](https://github.com/axt/angr-utils) Handy utilities for the angr binary analysis framework, most notably CFG visualization
+- [**122**Star][2y] [Py] [alephsecurity/firehorse](https://github.com/alephsecurity/firehorse) 漏洞开发与利用之: 在紧急加载模式(EDM,Emergency Download Mode)下刷机时使用的固件包(高通)
+- [**122**Star][28d] [Java] [al3xtjames/ghidra-firmware-utils](https://github.com/al3xtjames/ghidra-firmware-utils) Ghidra utilities for analyzing PC firmware
+- [**122**Star][2y] [Batchfile] [3gstudent/clr-injection](https://github.com/3gstudent/clr-injection) Use CLR to inject all the .NET apps
- [**122**Star][2y] [CSS] [0xbug/orangescan](https://github.com/0xbug/orangescan) 在线子域名信息收集工具
-- [**121**Star][7d] [C#] [carlospolop/privilege-escalation-awesome-scripts-suite](https://github.com/carlospolop/privilege-escalation-awesome-scripts-suite) PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
-- [**121**Star][11m] [Shell] [wulabing/ssr-manyuser_glzjin_shell](https://github.com/wulabing/ssr-manyuser_glzjin_shell) sspanel v3 魔改版 后端一键安装配置管理脚本
-- [**121**Star][8d] [PHP] [curtbraz/phishing-api](https://github.com/curtbraz/phishing-api) Comprehensive Web Based Phishing Suite of Tools for Rapid Deployment and Real-Time Alerting!
-- [**121**Star][1m] [Py] [fuzzitdev/pythonfuzz](https://github.com/fuzzitdev/pythonfuzz) coverage guided fuzz testing for python
+- [**121**Star][8m] [C] [xhuvom/darknetfaceid](https://github.com/xhuvom/darknetfaceid) A YOLO darknet implementation of facial recognition from automatic annotation of facial images.
+- [**121**Star][8d] [ukncsc/zero-trust-architecture](https://github.com/ukncsc/zero-trust-architecture) Principles to help you design and deploy a zero trust architecture
- [**121**Star][4y] [C] [cuckoosandbox/cuckoomon](https://github.com/cuckoosandbox/cuckoomon) DEPRECATED - replaced with "monitor"
-- [**121**Star][2y] [Java] [zjlywjh001/phrackctf-platform-personal](https://github.com/zjlywjh001/phrackctf-platform-personal) CTF platfrom developed by Jarvis from Phrack Team. 做一个功能最全的CTF平台。
-- [**121**Star][2y] [C#] [zerosum0x0/runshellcode](https://github.com/zerosum0x0/runshellcode) .NET GUI program that runs shellcode
-- [**121**Star][5y] [C++] [zachriggle/ida-splode](https://github.com/zachriggle/ida-splode) Augmenting Static Reverse Engineering with Dynamic Analysis and Instrumentation
- - [IDA插件](https://github.com/zachriggle/ida-splode/tree/master/py)
- - [PinTool](https://github.com/zachriggle/ida-splode/tree/master/src)
-- [**121**Star][15d] [Py] [t4d/stalkphish](https://github.com/t4d/stalkphish) StalkPhish - The Phishing kits stalker, harvesting phishing kits for investigations.
+- [**121**Star][2m] [Py] [yelp/amira](https://github.com/yelp/amira) Automated Malware Incident Response & Analysis
+- [**121**Star][2y] [we5ter/awesome-platforms](https://github.com/we5ter/awesome-platforms) A curated list of awesome security platforms,including CTF/Security Response Center/Bug Tracker and so on.
+- [**121**Star][11d] [HTML] [trendmicro/securecodingdojo](https://github.com/trendmicro/securecodingdojo) a platform for delivering secure coding training
+- [**121**Star][7m] [Py] [tidesec/web_pwd_common_crack](https://github.com/tidesec/web_pwd_common_crack) 通用web弱口令破解脚本,旨在批量检测那些没有验证码的管理后台,可用于刷分~
+- [**121**Star][2m] [Go] [teknogeek/ssrf-sheriff](https://github.com/teknogeek/ssrf-sheriff) A simple SSRF-testing sheriff written in Go
- [**121**Star][2y] [C] [sqlmapproject/udfhack](https://github.com/sqlmapproject/udfhack) Database takeover user-defined functions for MySQL and PostgreSQL
-- [**121**Star][4m] [Py] [skyplabs/probequest](https://github.com/skyplabs/probequest) Toolkit for Playing with Wi-Fi Probe Requests
- [**121**Star][2y] [C#] [schnocker/hleaker](https://github.com/schnocker/hleaker) An usermode alternative for DuplicateHandle.
- [**121**Star][4y] [sandysekharan/ctf-tool](https://github.com/sandysekharan/ctf-tool) A curated list of Capture The Flag (CTF) frameworks, libraries, resources and softwares.
+- [**121**Star][15d] [PS] [rgl/windows-2016-vagrant](https://github.com/rgl/windows-2016-vagrant) Windows 2012R2/10/2016/2019 Base Vagrant Box (
+- [**121**Star][6d] [Py] [renatahodovan/grammarinator](https://github.com/renatahodovan/grammarinator) ANTLR v4 grammar-based test generator
+- [**121**Star][24d] [Py] [redhuntlabs/burpsuite-asset_discover](https://github.com/redhuntlabs/burpsuite-asset_discover) Burp Suite extension to discover assets from HTTP response.
+- [**121**Star][3m] [Py] [redaelli/imago-forensics](https://github.com/redaelli/imago-forensics) Imago is a python tool that extract digital evidences from images.
+- [**121**Star][1m] [C++] [rebzzel/kiero](https://github.com/rebzzel/kiero) Universal graphical hook for a D3D9-D3D12, OpenGL and Vulcan based games.
- [**121**Star][3y] [Java] [rastapasta/pokemon-go-xposed](https://github.com/rastapasta/pokemon-go-xposed)
- [**121**Star][11m] [Shell] [qinghuas/ss-panel-and-ss-py-mu](https://github.com/qinghuas/ss-panel-and-ss-py-mu) SS Panel V3 前端/节点端安装脚本,及相关附属工具管理
-- [**121**Star][9d] [PowerShell] [dsccommunity/xpsdesiredstateconfiguration](https://github.com/dsccommunity/xPSDesiredStateConfiguration)
+- [**121**Star][11d] [PS] [dsccommunity/xpsdesiredstateconfiguration](https://github.com/dsccommunity/xPSDesiredStateConfiguration)
- [**121**Star][1y] [Py] [powdahound/redis-collectd-plugin](https://github.com/powdahound/redis-collectd-plugin) A Redis plugin for collectd.
-- [**121**Star][2m] [C#] [nyan-x-cat/lime-crypter](https://github.com/nyan-x-cat/lime-crypter) Simple obfuscation tool
-- [**121**Star][2m] [C++] [nettitude/simplepeloader](https://github.com/nettitude/simplepeloader) In-Memory PE Loader
-- [**121**Star][2m] [Py] [netflix-skunkworks/policyuniverse](https://github.com/netflix-skunkworks/policyuniverse) Parse and Process AWS IAM Policies, Statements, ARNs, and wildcards.
+- [**121**Star][10d] [C++] [phackt/stager.dll](https://github.com/phackt/stager.dll) Code from this article:
+- [**121**Star][3m] [XSLT] [pcapng/pcapng](https://github.com/pcapng/pcapng) PCAP next generation file format specification
+- [**121**Star][7m] [Py] [owasp/serverless-goat](https://github.com/owasp/serverless-goat) a serverless application demonstrating common serverless security flaws
- [**121**Star][1y] [nagwww/s3-leaks](https://github.com/nagwww/s3-leaks) List of S3 Hacks
-- [**121**Star][7d] [HTML] [mozillasecurity/fuzzmanager](https://github.com/mozillasecurity/fuzzmanager) A fuzzing management tools collection
-- [**121**Star][3y] [Ruby] [melvinsh/vcsmap](https://github.com/melvinsh/vcsmap) vcsmap is a plugin-based tool to scan public version control systems for sensitive information.
+- [**121**Star][3d] [HTML] [mozillasecurity/fuzzmanager](https://github.com/mozillasecurity/fuzzmanager) A fuzzing management tools collection
- [**121**Star][1m] [JS] [mazen160/xless](https://github.com/mazen160/xless) The Serverless Blind XSS App
- [**121**Star][3y] [malwares/webshell](https://github.com/malwares/webshell) WebShell Dump
-- [**121**Star][26d] [maddiestone/conpresentations](https://github.com/maddiestone/conpresentations) Slide decks from my conference presentations
-- [**121**Star][4y] [PowerShell] [maaaaz/crackmapexecwin](https://github.com/maaaaz/crackmapexecwin) The great CrackMapExec tool compiled for Windows
+- [**121**Star][28d] [maddiestone/conpresentations](https://github.com/maddiestone/conpresentations) Slide decks from my conference presentations
+- [**121**Star][4y] [PS] [maaaaz/crackmapexecwin](https://github.com/maaaaz/crackmapexecwin) The great CrackMapExec tool compiled for Windows
+- [**121**Star][3y] [HTML] [louchaooo/kali-tools-zh](https://github.com/louchaooo/kali-tools-zh)
- [**121**Star][7y] [Py] [liato/android-market-api-py](https://github.com/liato/android-market-api-py) A Python port of the java Android Market API.
-- [**121**Star][3m] [k0rz3n/googlehacking-page](https://github.com/k0rz3n/googlehacking-page) This is a summary of my study and use of Google hacking. I hope I can share it with you. If you like, please give me a star or fork it, thank you.
-- [**121**Star][5m] [AutoIt] [jschicht/mft2csv](https://github.com/jschicht/mft2csv) Extract $MFT record info and log it to a csv file.
+- [**121**Star][6m] [AutoIt] [jschicht/mft2csv](https://github.com/jschicht/mft2csv) Extract $MFT record info and log it to a csv file.
+- [**121**Star][1y] [Shell] [joanbono/snorter](https://github.com/joanbono/snorter) Snort + Barnyard2 + Pulledpork → The easy way!
+- [**121**Star][6y] [Py] [infodox/exploits](https://github.com/infodox/exploits) Some exploits and exploit development stuff.
- [**121**Star][4y] [Scala] [guillaumebort/scasm](https://github.com/guillaumebort/scasm) A a dynamic x86_64 assembler in Scala — Code for the live coding session @ Devoxx france 2016
-- [**121**Star][3y] [C] [glacierw/mba](https://github.com/glacierw/mba) Malware Behavior Analyzer
-- [**121**Star][19d] [gajos112/oscp](https://github.com/gajos112/oscp) Materials for OSCP exam
-- [**121**Star][3y] [PowerShell] [fuzzysecurity/hacksysteam-pskernelpwn](https://github.com/fuzzysecurity/hacksysteam-pskernelpwn) Accompanying blog posts on using PowerShell to exploit the @HackSysTeam Extreme Vulnerable Driver (HEVD).
+- [**121**Star][3y] [PS] [fuzzysecurity/hacksysteam-pskernelpwn](https://github.com/fuzzysecurity/hacksysteam-pskernelpwn) Accompanying blog posts on using PowerShell to exploit the @HackSysTeam Extreme Vulnerable Driver (HEVD).
- [**121**Star][2y] [Shell] [feicong/ida_for_mac_green](https://github.com/feicong/ida_for_mac_green) IDAPro for macOS
-- [**121**Star][4m] [C++] [f4exb/dsdcc](https://github.com/f4exb/dsdcc) Digital Speech Decoder (DSD) rewritten as a C++ library
-- [**121**Star][3m] [Shell] [exalab/anlinux-resources](https://github.com/exalab/anlinux-resources) Image and Script for LinuxOnAndroid App
+- [**121**Star][14d] [Go] [facebookincubator/nvdtools](https://github.com/facebookincubator/nvdtools) A set of tools to work with the feeds (vulnerabilities, CPE dictionary etc.) distributed by National Vulnerability Database (NVD)
- [**121**Star][2y] [Ruby] [ehloonion/onionmx](https://github.com/ehloonion/onionmx) Onion delivery, so delicious
-- [**121**Star][3y] [JS] [cn33liz/jsmeter](https://github.com/cn33liz/jsmeter) JavaScript Reversed TCP Meterpreter Stager
-- [**121**Star][7d] [C#] [carlospolop/privilege-escalation-awesome-scripts-suite](https://github.com/carlospolop/privilege-escalation-awesome-scripts-suite) PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
+- [**121**Star][10m] [Perl] [dave-theunsub/clamtk](https://github.com/dave-theunsub/clamtk) An easy to use, light-weight, on-demand virus scanner for Linux systems
+- [**121**Star][1m] [cujanovic/content-bruteforcing-wordlist](https://github.com/cujanovic/content-bruteforcing-wordlist) Wordlist for content(directory) bruteforce discovering with Burp or dirsearch
+- [**121**Star][2m] [Py] [ctxis/beemka](https://github.com/ctxis/beemka) Basic Electron Exploitation
+- [**121**Star][3y] [cloudsec/research](https://github.com/cloudsec/research) the core papers i researched about kernel security.
- [**121**Star][4y] [Batchfile] [brianwrf/winsystemhelper](https://github.com/brianwrf/winsystemhelper) A tool that checks and downloads scripts that will aid with privilege escalation on a Windows system.
+- [**121**Star][1y] [C] [bob-beck/libtls](https://github.com/bob-beck/libtls) libtls tutorial, exercises, test CA and exercise solutions
- [**121**Star][1y] [Java] [b3dk7/stegexpose](https://github.com/b3dk7/stegexpose) A steganalysis tool for detecting LSB steganography in images
-- [**121**Star][12m] [Py] [axt/angr-utils](https://github.com/axt/angr-utils) Handy utilities for the angr binary analysis framework, most notably CFG visualization
-- [**121**Star][2y] [Py] [alephsecurity/firehorse](https://github.com/alephsecurity/firehorse) 漏洞开发与利用之: 在紧急加载模式(EDM,Emergency Download Mode)下刷机时使用的固件包(高通)
- [**121**Star][7m] [C] [aczid/crypto1_bs](https://github.com/aczid/crypto1_bs) Bitsliced Crypto-1 brute-forcer
-- [**121**Star][2y] [Batchfile] [3gstudent/clr-injection](https://github.com/3gstudent/clr-injection) Use CLR to inject all the .NET apps
-- [**121**Star][17d] [JS] [0vercl0k/windbg-scripts](https://github.com/0vercl0k/windbg-scripts) A bunch of JavaScript extensions for WinDbg.
-- [**120**Star][17d] [JS] [maxmeng93/get-free-ss](https://github.com/maxmeng93/get-free-ss) Node爬虫学习:自动爬取网络上公开的免费 SS\SSR 账号密码,并替换掉软件中旧的账号。
-- [**120**Star][2m] [PHP] [binarymaster/3wifi](https://github.com/binarymaster/3wifi) 3WiFi Wireless Database
+- [**121**Star][1y] [PHP] [a0xnirudh/kurukshetra](https://github.com/a0xnirudh/kurukshetra) A framework for teaching secure coding by means of interactive problem solving.
+- [**121**Star][4y] [Shell] [91yun/vpn](https://github.com/91yun/vpn) vpn一键安装包
+- [**121**Star][3d] [C++] [0vercl0k/blazefox](https://github.com/0vercl0k/blazefox) Blazefox exploits for Windows 10 RS5 64-bit.
- [**120**Star][2y] [Go] [zxsecurity/steamer](https://github.com/zxsecurity/steamer) 导入、搜索和管理公开泄露的数据
-- [**120**Star][2m] [Py] [yelp/amira](https://github.com/yelp/amira) Automated Malware Incident Response & Analysis
- [**120**Star][3y] [Assembly] [yaseng/pentest](https://github.com/yaseng/pentest) some pentest scripts & tools by yaseng@uauc.net
- [**120**Star][4y] [Ruby] [yangbh/hammer](https://github.com/yangbh/hammer) A web vulnerability scanner framework
+- [**120**Star][3y] [Shell] [xmikos/cryptboot](https://github.com/xmikos/cryptboot) Encrypted boot partition manager with UEFI Secure Boot support
- [**120**Star][2y] [JS] [wofeiwo/website-analyzer](https://github.com/wofeiwo/website-analyzer) Analyze and display the Web technology of current page.
-- [**120**Star][2y] [we5ter/awesome-platforms](https://github.com/we5ter/awesome-platforms) A curated list of awesome security platforms,including CTF/Security Response Center/Bug Tracker and so on.
- [**120**Star][1y] [Py] [wavestone-cdt/wavecrack](https://github.com/wavestone-cdt/wavecrack) 多用户之间共享Hastcat cracking box 的 Web 界面
-- [**120**Star][7m] [Py] [tidesec/web_pwd_common_crack](https://github.com/tidesec/web_pwd_common_crack) 通用web弱口令破解脚本,旨在批量检测那些没有验证码的管理后台,可用于刷分~
-- [**120**Star][2m] [Go] [teknogeek/ssrf-sheriff](https://github.com/teknogeek/ssrf-sheriff) A simple SSRF-testing sheriff written in Go
- [**120**Star][2y] [Jupyter Notebook] [teamhg-memex/deep-deep](https://github.com/teamhg-memex/deep-deep) Adaptive crawler which uses Reinforcement Learning methods
-- [**120**Star][3m] [Py] [redaelli/imago-forensics](https://github.com/redaelli/imago-forensics) Imago is a python tool that extract digital evidences from images.
+- [**120**Star][2y] [Py] [szcf-weiya/sinaspider](https://github.com/szcf-weiya/sinaspider) 动态IP解决新浪的反爬虫机制,快速抓取内容。
+- [**120**Star][4y] [Py] [synack/dylibhijack](https://github.com/synack/dylibhijack) python utilities related to dylib hijacking on OS X
- [**120**Star][5m] [Py] [rabbitmask/weblogicscanlot](https://github.com/rabbitmask/weblogicscanlot) WeblogicScanLot系列,Weblogic漏洞批量检测工具,V2.2
- [**120**Star][3y] [Java] [pwntester/jre8u20_rce_gadget](https://github.com/pwntester/jre8u20_rce_gadget) JRE8u20_RCE_Gadget
- [**120**Star][2y] [Swift] [nsexceptional/runtime](https://github.com/nsexceptional/runtime) An Objective-C simulator written in Swift.
- [**120**Star][6y] [Lua] [nixuehan/belial](https://github.com/nixuehan/belial) 基于nginx lua module 的一个 waf .
- [**120**Star][8y] [Py] [mostawesomedude/construct](https://github.com/mostawesomedude/construct) Python binary parsing library
+- [**120**Star][1y] [Py] [mitre/cascade-server](https://github.com/mitre/cascade-server) a research project at MITRE which seeks to automate much of the investigative work a “blue-team” team would perform to determine the scope and maliciousness of suspicious behavior on a network using host data
- [**120**Star][1y] [Py] [mikesiegel/ews-crack](https://github.com/mikesiegel/ews-crack) 利用 EWS 绕过 Office365 2FA/MDM
- [**120**Star][2y] [C] [marsyy/littl_tools](https://github.com/marsyy/littl_tools)
-- [**120**Star][3y] [HTML] [louchaooo/kali-tools-zh](https://github.com/louchaooo/kali-tools-zh)
+- [**120**Star][2y] [Swift] [lxdcn/nepackettunnelvpndemo](https://github.com/lxdcn/nepackettunnelvpndemo) iOS VPN client implementation demo based on iOS9 NetworkExtension NETunnelProvider APIs
+- [**120**Star][18d] [Java] [kyhsgeekcode/android-disassembler](https://github.com/kyhsgeekcode/android-disassembler) Disassemble ANY files including .so (NDK, JNI), Windows PE(EXE, DLL, SYS, etc), linux binaries, libraries, and any other files such as pictures, audios, etc(for fun)files on Android. Capstone-based disassembler application on android. 안드로이드 NDK 공유 라이브러리, Windows 바이너리, etc,... 리버싱 앱
- [**120**Star][5m] [Rust] [kanishkarj/snoopy](https://github.com/kanishkarj/snoopy) A highly configurable multi-threaded packet sniffer and parser build in rust-lang.
- [**120**Star][5y] [jyny/pasc2at](https://github.com/jyny/pasc2at) 高级PHP应用程序漏洞审核技术 by 80vul
-- [**120**Star][1y] [Shell] [joanbono/snorter](https://github.com/joanbono/snorter) Snort + Barnyard2 + Pulledpork → The easy way!
- [**120**Star][2y] [C] [jimstudt/ook-decoder](https://github.com/jimstudt/ook-decoder) Ook-decoder reads On-Off Keying radio data commonly used in the 433MHz ISM bands using a software defined radio (SDR).
- [**120**Star][11m] [Shell] [itskindred/portpush](https://github.com/itskindred/portpush) A small Bash utility used for pivoting into internal networks upon compromising a public-facing host.
- [**120**Star][2m] [HTML] [intel/generic-sensor-demos](https://github.com/intel/generic-sensor-demos) applications that demonstrate how to use the Generic Sensor API.
-- [**120**Star][6y] [Py] [infodox/exploits](https://github.com/infodox/exploits) Some exploits and exploit development stuff.
+- [**120**Star][5m] [C++] [hasherezade/tiny_tracer](https://github.com/hasherezade/tiny_tracer) A Pin Tool for tracing API calls etc
+- [**120**Star][12m] [Py] [grunny/zap-cli](https://github.com/grunny/zap-cli) A simple tool for interacting with OWASP ZAP from the commandline.
+- [**120**Star][3y] [C] [glacierw/mba](https://github.com/glacierw/mba) Malware Behavior Analyzer
- [**120**Star][3y] [gasche/popl2016-papers](https://github.com/gasche/popl2016-papers) Links to publicly available preprints for the POPL'16 conference
-- [**120**Star][29d] [Go] [fuzzitdev/fuzzit](https://github.com/fuzzitdev/fuzzit) CLI to integrate continuous fuzzing with Fuzzit
- [**120**Star][3y] [Py] [exp-db/ai-driven-waf](https://github.com/exp-db/ai-driven-waf) Artificial intelligence-driven Web Firewall
+- [**120**Star][2y] [JS] [duo-labs/phinn](https://github.com/duo-labs/phinn) phinn:生成脱机 Chrome 扩展,使用 bespoke convolutional 神经网络来检测网络钓鱼攻击
- [**120**Star][8m] [C] [dimopouloselias/alpc-mmc-uac-bypass](https://github.com/dimopouloselias/alpc-mmc-uac-bypass) UAC Bypass with mmc via alpc
-- [**120**Star][10m] [PHP] [damianofalcioni/ip-biter](https://github.com/damianofalcioni/ip-biter) The Hacker-friendly E-Mail (but not only) Tracking Framework
-- [**120**Star][2m] [Py] [ctxis/beemka](https://github.com/ctxis/beemka) Basic Electron Exploitation
+- [**120**Star][1y] [C] [cylancevulnresearch/reflectivedllrefresher](https://github.com/cylancevulnresearch/reflectivedllrefresher) Universal Unhooking
- [**120**Star][1y] [Go] [cllunsford/aws-signing-proxy](https://github.com/cllunsford/aws-signing-proxy) Golang http proxy to transparently sign requests to AWS endpoints
+- [**120**Star][3m] [C] [changeofpace/overwatch-dump-fix](https://github.com/changeofpace/overwatch-dump-fix) x64dbg plugin which removes anti-dumping and obfuscation techniques from the popular FPS game Overwatch.
+- [**120**Star][7m] [Py] [c0ny1/workscripts](https://github.com/c0ny1/workscripts) 信息安全工程师工作常用脚本
- [**120**Star][9m] [byt3bl33d3r/ansibleplaybooks](https://github.com/byt3bl33d3r/ansibleplaybooks) A collection of Ansible Playbooks that configure Kali to use Fish & install a number of tools
- [**120**Star][4y] [Py] [breenmachine/javaunserializeexploits](https://github.com/breenmachine/javaunserializeexploits)
- [**120**Star][5y] [C++] [breakingmalware/selfie](https://github.com/breakingmalware/selfie) A Tool to Unpack Self-Modifying Code using DynamoRIO
-- [**120**Star][1y] [C] [bob-beck/libtls](https://github.com/bob-beck/libtls) libtls tutorial, exercises, test CA and exercise solutions
- [**120**Star][3m] [Py] [ashleysommer/sanic-cors](https://github.com/ashleysommer/sanic-cors) A Sanic extension for handling Cross Origin Resource Sharing (CORS), making cross-origin AJAX possible. Based on flask-cors by Cory Dolphin.
- [**120**Star][5y] [Go] [appnician/pastor](https://github.com/appnician/pastor) Pastor stores all your passwords without storing them anywhere.
-- [**120**Star][1y] [PHP] [a0xnirudh/kurukshetra](https://github.com/a0xnirudh/kurukshetra) A framework for teaching secure coding by means of interactive problem solving.
-- [**120**Star][4y] [Shell] [91yun/vpn](https://github.com/91yun/vpn) vpn一键安装包
+- [**119**Star][1y] [PHP] [walkor/php-socks5](https://github.com/walkor/php-socks5) socks5 proxy written in PHP based on workerman.
+- [**119**Star][3m] [neo23x0/vti-dorks](https://github.com/neo23x0/vti-dorks) Awesome VirusTotal Intelligence Search Queries
+- [**119**Star][1y] [Shell] [cyb0r9/winspy](https://github.com/Cyb0r9/winspy) WinSpy a Windows reverse shell Backdoor creator with an Automatic IP Poisener
- [**119**Star][1y] [imfht/educn-sqlscan](https://github.com/imfht/educn-sqlScan) 对全国edu域名以及其二级域名进行的一次Sql注入,预计花费时间为三天,结束时候将提交至漏洞平台
+- [**119**Star][2y] [Py] [klsecservices/bat-armor](https://github.com/klsecservices/bat-armor) Encode powershell payload into bat files
+- [**119**Star][5y] [C++] [zyantific/retypedef](https://github.com/zyantific/retypedef) Name substitution plugin for IDA Pro
+- [**119**Star][6m] [xiangbab/web-hack](https://github.com/xiangbab/web-hack) 一份网络安全入门的资料。
- [**119**Star][1y] [Py] [winheapexplorer/winheap-explorer](https://github.com/winheapexplorer/winheap-explorer) heap-based bugs detection in x86 machine code for Windows applications.
+- [**119**Star][1y] [Py] [williballenthin/indxparse](https://github.com/williballenthin/indxparse) Tool suite for inspecting NTFS artifacts.
- [**119**Star][9m] [Shell] [vishnudxb/automated-pentest](https://github.com/vishnudxb/automated-pentest) Minimal docker container of Parrot OS for running an automated scan & pentest report.
- [**119**Star][1y] [Py] [vanhoefm/blackhat17-pocs](https://github.com/vanhoefm/blackhat17-pocs) Proof of concepts of attacks against Wi-Fi implementations
-- [**119**Star][9d] [HTML] [trendmicro/securecodingdojo](https://github.com/trendmicro/securecodingdojo) a platform for delivering secure coding training
-- [**119**Star][4y] [Py] [synack/dylibhijack](https://github.com/synack/dylibhijack) python utilities related to dylib hijacking on OS X
+- [**119**Star][2y] [Py] [teamhg-memex/aquarium](https://github.com/teamhg-memex/aquarium) Splash + HAProxy + Docker Compose
- [**119**Star][6y] [Py] [stephenbrannon/iocextractor](https://github.com/stephenbrannon/iocextractor) IOC (Indicator of Compromise) Extractor: a program to help extract IOCs from text files.
- [**119**Star][1m] [C++] [stealth/lophttpd](https://github.com/stealth/lophttpd) lots of performance (or lots of porn, if you prefer) httpd: Easy, chrooted, fast and simple to use HTTP server for static content. Runs on Linux, BSD, Android and OSX/Darwin. It's free but if you like it, consider donating to the EFF:
- [**119**Star][5m] [C] [ryanries/passfiltex](https://github.com/ryanries/passfiltex) PassFiltEx. An Active Directory Password Filter.
-- [**119**Star][7m] [Py] [renatahodovan/grammarinator](https://github.com/renatahodovan/grammarinator) ANTLR v4 grammar-based test generator
-- [**119**Star][22d] [Py] [redhuntlabs/burpsuite-asset_discover](https://github.com/redhuntlabs/burpsuite-asset_discover) Burp Suite extension to discover assets from HTTP response.
-- [**119**Star][1m] [C++] [rebzzel/kiero](https://github.com/rebzzel/kiero) Universal graphical hook for a D3D9-D3D12, OpenGL and Vulcan based games.
- [**119**Star][4y] [Py] [packz/ropeme](https://github.com/packz/ropeme) ROPME is a set of python scripts to generate ROP gadgets and payload.
-- [**119**Star][10m] [PowerShell] [p0w3rsh3ll/autoruns](https://github.com/p0w3rsh3ll/autoruns)
-- [**119**Star][7m] [Py] [owasp/serverless-goat](https://github.com/owasp/serverless-goat) a serverless application demonstrating common serverless security flaws
+- [**119**Star][10m] [PS] [p0w3rsh3ll/autoruns](https://github.com/p0w3rsh3ll/autoruns)
- [**119**Star][3y] [Py] [neuroo/grabber](https://github.com/neuroo/grabber) [DON'T USE ME] plain ol' web apps scanner
-- [**119**Star][10d] [Py] [netevert/pockint](https://github.com/netevert/pockint) A portable OSINT Swiss Army Knife for DFIR/OSINT professionals
+- [**119**Star][3y] [Visual Basic .NET] [mwsrc/njrat](https://github.com/mwsrc/njrat) njRAT SRC Extract
- [**119**Star][2y] [C] [mniip/spectre-meltdown-poc](https://github.com/mniip/spectre-meltdown-poc) spectre meltdown poc
+- [**119**Star][10d] [Py] [misp/misp-taxonomies](https://github.com/misp/misp-taxonomies) Taxonomies used in MISP taxonomy system and can be used by other information sharing tool.
- [**119**Star][2y] [mawenjian/china-cdn-domain-whitelist](https://github.com/mawenjian/china-cdn-domain-whitelist) 中国CDN服务提供商域名白名单(China CDN Service Providers' Domain Whitelist)
-- [**119**Star][2y] [Swift] [lxdcn/nepackettunnelvpndemo](https://github.com/lxdcn/nepackettunnelvpndemo) iOS VPN client implementation demo based on iOS9 NetworkExtension NETunnelProvider APIs
- [**119**Star][9m] [Py] [jzadeh/chiron-elk](https://github.com/jzadeh/chiron-elk) Chiron Home Based ML Intrusion Detection System
-- [**119**Star][1y] [PowerShell] [itm4n/ikeext-privesc](https://github.com/itm4n/ikeext-privesc) Windows IKEEXT DLL Hijacking Exploit Tool
-- [**119**Star][18d] [C++] [intel/opencl-intercept-layer](https://github.com/intel/opencl-intercept-layer) Intercept Layer for Debugging and Analyzing OpenCL Applications
-- [**119**Star][19d] [Dockerfile] [harvard-itsecurity/docker-misp](https://github.com/harvard-itsecurity/docker-misp) Automated Docker MISP container - Malware Information Sharing Platform and Threat Sharing
-- [**119**Star][11m] [Py] [grunny/zap-cli](https://github.com/grunny/zap-cli) A simple tool for interacting with OWASP ZAP from the commandline.
+- [**119**Star][2y] [CoffeeScript] [joyqi/socket-pipe](https://github.com/joyqi/socket-pipe) forward your socket from one address to anoter without any configs
+- [**119**Star][2d] [C++] [intel/opencl-intercept-layer](https://github.com/intel/opencl-intercept-layer) Intercept Layer for Debugging and Analyzing OpenCL Applications
+- [**119**Star][2m] [C] [hydrabus/hydrafw](https://github.com/hydrabus/hydrafw) HydraFW official firmware for HydraBus/HydraNFC for researcher, hackers, students, embedded software developers or anyone interested in debugging/hacking/developing/penetration testing
+- [**119**Star][21d] [Dockerfile] [harvard-itsecurity/docker-misp](https://github.com/harvard-itsecurity/docker-misp) Automated Docker MISP container - Malware Information Sharing Platform and Threat Sharing
- [**119**Star][11m] [Py] [ghostmanager/shepherd](https://github.com/ghostmanager/shepherd) A Django application to help red team operators manage a library of domain names
-- [**119**Star][29d] [JS] [fergarrui/ethereum-security](https://github.com/fergarrui/ethereum-security) Security issues in Ethereum demonstrated in mocha tests. The fix is also demonstrated
+- [**119**Star][10d] [JS] [fuzzysecurity/fermion](https://github.com/fuzzysecurity/fermion) Fermion, an electron wrapper for Frida & Monaco.
+- [**119**Star][1m] [JS] [fergarrui/ethereum-security](https://github.com/fergarrui/ethereum-security) Security issues in Ethereum demonstrated in mocha tests. The fix is also demonstrated
- [**119**Star][4y] [Py] [fengxuangit/dede_exp_collect](https://github.com/fengxuangit/dede_exp_collect) collection dedecms exp use pocsuite framework 收集织梦的一些漏洞,并用pocsuite框架写出利用程序。打造一键日dede
-- [**119**Star][2y] [JS] [duo-labs/phinn](https://github.com/duo-labs/phinn) phinn:生成脱机 Chrome 扩展,使用 bespoke convolutional 神经网络来检测网络钓鱼攻击
-- [**119**Star][10m] [Perl] [dave-theunsub/clamtk](https://github.com/dave-theunsub/clamtk) An easy to use, light-weight, on-demand virus scanner for Linux systems
-- [**119**Star][1m] [cujanovic/content-bruteforcing-wordlist](https://github.com/cujanovic/content-bruteforcing-wordlist) Wordlist for content(directory) bruteforce discovering with Burp or dirsearch
+- [**119**Star][1y] [Py] [erdiaker/torrequest](https://github.com/erdiaker/torrequest) Simple Python interface for HTTP(s) requests over Tor
+- [**119**Star][2y] [C++] [earthquake/universaldvc](https://github.com/earthquake/universaldvc) Universal Dynamic Virtual Channel connector for Remote Desktop Services
+- [**119**Star][4d] [Shell] [cihanmehmet/sub.sh](https://github.com/cihanmehmet/sub.sh) Online Subdomain Detect Script
- [**119**Star][2y] [alecmuffett/the-onion-diaries](https://github.com/alecmuffett/the-onion-diaries) Blog-type notes about building Onion sites
- [**119**Star][4m] [C#] [akaion/jupiter](https://github.com/akaion/jupiter) A Windows virtual memory editing library with support for pattern scanning.
- [**119**Star][1m] [Shell] [a-dma/yubitouch](https://github.com/a-dma/yubitouch) Bash script for setting or clearing touch requirements for # cryptographic operations the OpenPGP application on a YubiKey 4
-- [**119**Star][7m] [C++] [0vercl0k/blazefox](https://github.com/0vercl0k/blazefox) Blazefox exploits for Windows 10 RS5 64-bit.
- [**118**Star][12m] [C] [saelo/35c3ctf](https://github.com/saelo/35c3ctf) Source code and exploits for some 35c3ctf challenges.
- [**118**Star][3m] [C++] [googleprojectzero/drsancov](https://github.com/googleprojectzero/drsancov) DynamoRIO plugin to get ASAN and SanitizerCoverage compatible output for closed-source executables
-- [**118**Star][3m] [neo23x0/vti-dorks](https://github.com/neo23x0/vti-dorks) Awesome VirusTotal Intelligence Search Queries
- [**118**Star][1y] [JS] [shadowsocks/shadowsocks-hub](https://github.com/shadowsocks/shadowsocks-hub) A web app managing shadowsocks users, servers, nodes, products, accounts, and traffic. Suitable for internal use by companies, organizations, and friends.
-- [**118**Star][15d] [xrkk/awesome-cyber-security](https://github.com/xrkk/awesome-cyber-security) [Draft]Awesome Cyber Security Resource Collection. Currently contains 8000+ open source repositories, and not very well classified. For each repository, extra info included: star count, commit count, last update time. This is the DRAFT version.
-- [**118**Star][28d] [Py] [jgilhutton/pyxiewps](https://github.com/jgilhutton/PyxieWPS) Pyxiewps is a wireless attack tool to retrieve the WPS pin in seconds.
+- [**118**Star][30d] [Py] [jgilhutton/pyxiewps](https://github.com/jgilhutton/PyxieWPS) Pyxiewps is a wireless attack tool to retrieve the WPS pin in seconds.
- [**118**Star][1y] [Py] [wipi-hunter/pifinger](https://github.com/WiPi-Hunter/PiFinger) determine whether the network we are connected for is opened by Wifi- Pineapple
-- [**118**Star][1y] [Shell] [cyb0r9/winspy](https://github.com/Cyb0r9/winspy) WinSpy a Windows reverse shell Backdoor creator with an Automatic IP Poisener
-- [**118**Star][2y] [Py] [klsecservices/bat-armor](https://github.com/klsecservices/bat-armor) Encode powershell payload into bat files
-- [**118**Star][5y] [C++] [zyantific/retypedef](https://github.com/zyantific/retypedef) Name substitution plugin for IDA Pro
- [**118**Star][2y] [Py] [yt1g3r/cve-2018-8174_exp](https://github.com/yt1g3r/cve-2018-8174_exp) CVE-2018-8174_python
-- [**118**Star][6m] [xiangbab/web-hack](https://github.com/xiangbab/web-hack) 一份网络安全入门的资料。
-- [**118**Star][1y] [Py] [williballenthin/indxparse](https://github.com/williballenthin/indxparse) Tool suite for inspecting NTFS artifacts.
- [**118**Star][3y] [C] [timwr/cve-2014-3153](https://github.com/timwr/cve-2014-3153) CVE-2014-3153 aka towelroot
-- [**118**Star][2y] [Py] [teamhg-memex/aquarium](https://github.com/teamhg-memex/aquarium) Splash + HAProxy + Docker Compose
- [**118**Star][1y] [lua] [tanjiti/icstools](https://github.com/tanjiti/icstools) ics security tools
- [**118**Star][9m] [Py] [skelsec/pypykatz_server](https://github.com/skelsec/pypykatz_server) the server part of a server-agent model credential acquiring tool based on pypykatz
- [**118**Star][2y] [Shell] [shipcod3/mazda_getinfo](https://github.com/shipcod3/mazda_getinfo) A PoC that the USB port is an attack surface for a Mazda car's infotainment system and how Mazda hacks are made
-- [**118**Star][22d] [Py] [rvn0xsy/cooolis-ms](https://github.com/rvn0xsy/cooolis-ms) Cooolis-ms is a server that supports the Metasploit Framework RPC. It is used to work with the Shellcode and PE loader. To some extent, it bypasses the static killing of anti-virus software, and allows the Cooolis-ms server to communicate with the Metasploit server. Separation.
+- [**118**Star][9m] [Java] [securityfirst/umbrella_android](https://github.com/securityfirst/umbrella_android) Digital and Physical Security Advice App
- [**118**Star][11m] [CSS] [rootkiter/earthworm](https://github.com/rootkiter/earthworm) Tool for tunnel
- [**118**Star][1y] [Py] [ridter/mailget](https://github.com/ridter/mailget) 通过脉脉用户猜测企业邮箱
-- [**118**Star][1y] [Py] [mitre/cascade-server](https://github.com/mitre/cascade-server) a research project at MITRE which seeks to automate much of the investigative work a “blue-team” team would perform to determine the scope and maliciousness of suspicious behavior on a network using host data
-- [**118**Star][8d] [Py] [misp/misp-taxonomies](https://github.com/misp/misp-taxonomies) Taxonomies used in MISP taxonomy system and can be used by other information sharing tool.
+- [**118**Star][5d] [PHP] [radenvodka/recsech](https://github.com/radenvodka/recsech) Recsech is a tool for doing Footprinting and Reconnaissance on the target web. Recsech collects information such as DNS Information, Sub Domains, HoneySpot Detected, Subdomain takeovers, Reconnaissance On Github and much more you can see in Features in tools .
- [**118**Star][6y] [Py] [meatballs1/burp-extensions](https://github.com/meatballs1/burp-extensions) Burp Suite Extensions
-- [**118**Star][16d] [Java] [kyhsgeekcode/android-disassembler](https://github.com/kyhsgeekcode/android-disassembler) Disassemble ANY files including .so (NDK, JNI), Windows PE(EXE, DLL, SYS, etc), linux binaries, libraries, and any other files such as pictures, audios, etc(for fun)files on Android. Capstone-based disassembler application on android. 안드로이드 NDK 공유 라이브러리, Windows 바이너리, etc,... 리버싱 앱
-- [**118**Star][2m] [C] [hydrabus/hydrafw](https://github.com/hydrabus/hydrafw) HydraFW official firmware for HydraBus/HydraNFC for researcher, hackers, students, embedded software developers or anyone interested in debugging/hacking/developing/penetration testing
+- [**118**Star][2y] [Py] [malus-security/sandblaster](https://github.com/malus-security/sandblaster) Reversing the Apple sandbox
+- [**118**Star][30d] [Py] [m8r0wn/crosslinked](https://github.com/m8r0wn/crosslinked) LinkedIn enumeration tool to extract valid employee names from an organization through search engine scraping. Names can be formatted in a defined naming convention for further security testing.
+- [**118**Star][1y] [Java] [liqinew/myutils](https://github.com/liqinew/myutils) 包含全方位的工具的工具项目
- [**118**Star][5m] [Shell] [hardenedlinux/stig-4-debian](https://github.com/hardenedlinux/stig-4-debian) Security Technical Implementation Guide for Debian
- [**118**Star][3y] [Py] [hackstoic/eqgrp-free-file](https://github.com/hackstoic/eqgrp-free-file) Free sampling of files from the purported Equation Group hack.
-- [**118**Star][8d] [JS] [fuzzysecurity/fermion](https://github.com/fuzzysecurity/fermion) Fermion, an electron wrapper for Frida & Monaco.
-- [**118**Star][1y] [Py] [erdiaker/torrequest](https://github.com/erdiaker/torrequest) Simple Python interface for HTTP(s) requests over Tor
+- [**118**Star][26d] [Go] [furduhlutur/yar](https://github.com/furduhlutur/yar) Yar is a tool for plunderin' organizations, users and/or repositories.
+- [**118**Star][2y] [C] [endgameinc/clrguard](https://github.com/endgameinc/clrguard) a proof of concept project to explore instrumenting the Common Language Runtime (CLR) for security purposes.
- [**118**Star][1m] [HTML] [edoverflow/proof-of-concepts](https://github.com/edoverflow/proof-of-concepts) A little collection of fun and creative proof of concepts to demonstrate the potential impact of a security vulnerability.
+- [**118**Star][6d] [Py] [domainaware/parsedmarc](https://github.com/domainaware/parsedmarc) 解析DMARC报告的Python脚本, 含cli
+- [**118**Star][3m] [PS] [danmcinerney/pymetasploit3](https://github.com/danmcinerney/pymetasploit3) Automation library for Metasploit
- [**118**Star][5y] [Shell] [d4rkcat/handshaker](https://github.com/d4rkcat/handshaker) Detect, capture, crack WPA/2 handshakes, WEP Keys and geotag with Android GPS
- [**118**Star][8y] [C] [cr4sh/ioctlfuzzer](https://github.com/cr4sh/ioctlfuzzer) Automatically exported from code.google.com/p/ioctlfuzzer
-- [**118**Star][3m] [C] [changeofpace/overwatch-dump-fix](https://github.com/changeofpace/overwatch-dump-fix) x64dbg plugin which removes anti-dumping and obfuscation techniques from the popular FPS game Overwatch.
+- [**118**Star][1m] [Py] [containers/udica](https://github.com/containers/udica) This repository contains a tool for generating SELinux security profiles for containers
- [**118**Star][1y] [Py] [amossys/memitm](https://github.com/amossys/memitm) Tool to make in memory man in the middle
-- [**117**Star][1y] [PHP] [walkor/php-socks5](https://github.com/walkor/php-socks5) socks5 proxy written in PHP based on workerman.
-- [**117**Star][11d] [Py] [meliot/shcheck](https://github.com/meliot/shcheck) check security headers on a target website
+- [**117**Star][13d] [Py] [meliot/shcheck](https://github.com/meliot/shcheck) check security headers on a target website
- [**117**Star][2y] [Py] [willphillipscvdemo/raspberry-pi-camera-motion-detection.](https://github.com/willphillipscvdemo/raspberry-pi-camera-motion-detection.) Using Python code with a Raspberry-Pi, PIR motion and a Picamera, you can create a device which will email you a snapshot image when someone enters your room.
- [**117**Star][1y] [C#] [vulnerator/vulnerator](https://github.com/vulnerator/vulnerator) The official distribution of the vulnerability parsing utility.
- [**117**Star][3y] [Py] [violentshell/rollmac](https://github.com/violentshell/rollmac) Automated WiFi limit evasion
+- [**117**Star][4y] [Lua] [ulissescastro/linux-native-backdoors](https://github.com/ulissescastro/linux-native-backdoors) Repository holding all alternatives of *nix backdoors.
- [**117**Star][4y] [Go] [tutumcloud/ngrok](https://github.com/tutumcloud/ngrok) Introspected tunnels to localhost
-- [**117**Star][2y] [Objective-C] [theori-io/zer0con2018_singi](https://github.com/theori-io/zer0con2018_singi)
+- [**117**Star][9m] [Java] [turing-technician/virtualfasthook](https://github.com/turing-technician/virtualfasthook) Android application hooking tool based on FastHook + VirtualApp
+- [**117**Star][3m] [PS] [thom-s/netsec-ps-scripts](https://github.com/thom-s/netsec-ps-scripts) Collection of PowerShell network security scripts for system administrators.
+- [**117**Star][2y] [ObjC] [theori-io/zer0con2018_singi](https://github.com/theori-io/zer0con2018_singi)
- [**117**Star][2y] [C++] [sysml/clickos](https://github.com/sysml/clickos) The Click modular router: fast modular packet processing and analysis
- [**117**Star][5y] [C] [squiffy/masochist](https://github.com/squiffy/masochist) XNU Rootkit Framework
- [**117**Star][5m] [Java] [spoofzu/deepviolet](https://github.com/spoofzu/deepviolet) Tool for introspection of SSL\TLS sessions
-- [**117**Star][4y] [C] [shellntel/backdoors](https://github.com/shellntel/backdoors)
-- [**117**Star][9m] [Java] [securityfirst/umbrella_android](https://github.com/securityfirst/umbrella_android) Digital and Physical Security Advice App
-- [**117**Star][15d] [Py] [saucer-man/saucerframe](https://github.com/saucer-man/saucerframe) python3批量poc检测工具
+- [**117**Star][5y] [C] [shellntel/backdoors](https://github.com/shellntel/backdoors)
+- [**117**Star][17d] [Py] [saucer-man/saucerframe](https://github.com/saucer-man/saucerframe) python3批量poc检测工具
- [**117**Star][8m] [C] [rednaga/native-shim](https://github.com/rednaga/native-shim) A "shim" for loading native jni files for Android active debugging
- [**117**Star][3y] [Java] [rafaeltoledo/android-security](https://github.com/rafaeltoledo/android-security) An app showcase of some techniques to improve Android app security
-- [**117**Star][8d] [Py] [perfectblue/ctf-writeups](https://github.com/perfectblue/ctf-writeups) Perfect Blue's CTF Writeups
+- [**117**Star][9d] [Py] [perfectblue/ctf-writeups](https://github.com/perfectblue/ctf-writeups) Perfect Blue's CTF Writeups
+- [**117**Star][11m] [Shell] [patpadgett/corkscrew](https://github.com/patpadgett/corkscrew) Corkscrew is a tool for tunneling SSH through HTTP proxies.
- [**117**Star][3y] [Py] [nitr4x/whichcdn](https://github.com/nitr4x/whichcdn) WhichCDN allows to detect if a given website is protected by a Content Delivery Network
-- [**117**Star][3y] [Visual Basic] [mwsrc/njrat](https://github.com/mwsrc/njrat) njRAT SRC Extract
-- [**117**Star][2y] [Py] [malus-security/sandblaster](https://github.com/malus-security/sandblaster) Reversing the Apple sandbox
-- [**117**Star][28d] [Py] [m8r0wn/crosslinked](https://github.com/m8r0wn/crosslinked) LinkedIn enumeration tool to extract valid employee names from an organization through search engine scraping. Names can be formatted in a defined naming convention for further security testing.
-- [**117**Star][1y] [Java] [liqinew/myutils](https://github.com/liqinew/myutils) 包含全方位的工具的工具项目
-- [**117**Star][2y] [PowerShell] [javelinnetworks/ir-tools](https://github.com/javelinnetworks/ir-tools) forensics of domain based attacks on an infected host
+- [**117**Star][3y] [Py] [nccgroup/hodor](https://github.com/nccgroup/hodor) Hodor! Fuzzer..
+- [**117**Star][2y] [PS] [javelinnetworks/ir-tools](https://github.com/javelinnetworks/ir-tools) forensics of domain based attacks on an infected host
- [**117**Star][2m] [Py] [hugsy/stuff](https://github.com/hugsy/stuff) Misc tools for reversing, exploit and pentest
- [**117**Star][3y] [Py] [honeynet/cuckooml](https://github.com/honeynet/cuckooml) Machine Learning for Cuckoo Sandbox
- [**117**Star][5y] [JS] [hadynz/xss-keylogger](https://github.com/hadynz/xss-keylogger) A keystroke logger to exploit XSS vulnerabilities in a site - for my personal Educational purposes only
-- [**117**Star][11d] [Py] [gridsync/gridsync](https://github.com/gridsync/gridsync) Synchronize local directories with Tahoe-LAFS storage grids
-- [**117**Star][2y] [C] [endgameinc/clrguard](https://github.com/endgameinc/clrguard) a proof of concept project to explore instrumenting the Common Language Runtime (CLR) for security purposes.
-- [**117**Star][2y] [C++] [earthquake/universaldvc](https://github.com/earthquake/universaldvc) Universal Dynamic Virtual Channel connector for Remote Desktop Services
+- [**117**Star][13d] [Py] [gridsync/gridsync](https://github.com/gridsync/gridsync) Synchronize local directories with Tahoe-LAFS storage grids
+- [**117**Star][5y] [Py] [gdssecurity/jetleak-testing-script](https://github.com/gdssecurity/jetleak-testing-script) Script to test if a server is vulnerable to the JetLeak vulnerability
+- [**117**Star][2y] [Py] [functionclub/uping](https://github.com/functionclub/uping) 一个24小时监测VPS延迟的工具
+- [**117**Star][2y] [Py] [ecapuano/web-traffic-generator](https://github.com/ecapuano/web-traffic-generator) A quick and dirty HTTP/S "organic" traffic generator.
- [**117**Star][4y] [Shell] [dholm/dotgdb](https://github.com/dholm/dotgdb) GDB scripts to add support for low level debugging and reverse engineering
-- [**117**Star][1y] [C] [cylancevulnresearch/reflectivedllrefresher](https://github.com/cylancevulnresearch/reflectivedllrefresher) Universal Unhooking
-- [**117**Star][15d] [Shell] [cihanmehmet/sub.sh](https://github.com/cihanmehmet/sub.sh) Online Subdomain Detect Script
+- [**117**Star][3y] [PHP] [dhayalanb/windows-php-reverse-shell](https://github.com/dhayalanb/windows-php-reverse-shell) Simple php reverse shell implemented using binary .
+- [**117**Star][7m] [Py] [danmcinerney/device-pharmer](https://github.com/danmcinerney/device-pharmer) Opens 1K+ IPs or Shodan search results and attempts to login
+- [**117**Star][5d] [Go] [cyberark/secretless-broker](https://github.com/cyberark/secretless-broker) Secure your apps by making them Secretless
+- [**117**Star][4y] [Py] [cvvt/dumpdex](https://github.com/cvvt/dumpdex) IDA python script to dynamically dump DEX in memory
- [**117**Star][2y] [Ruby] [bsidessf/ctf-2017-release](https://github.com/bsidessf/ctf-2017-release) Our released code for BSidesSF CTF 2017
- [**117**Star][1y] [Py] [bo0om/safiler](https://github.com/bo0om/safiler) Safari local file reader
- [**117**Star][4m] [Py] [bastibl/gr-keyfob](https://github.com/bastibl/gr-keyfob) Transceiver for Hella wireless car key fobs.
- [**117**Star][2m] [Java] [auth0/lock.android](https://github.com/auth0/lock.android) Android Library to authenticate using Auth0 and with a Native Look & Feel
- [**117**Star][1m] [Java] [aramrami/owasp-csrfguard](https://github.com/aramrami/owasp-csrfguard) OWASP CSRFGuard 3.1.0
-- [**117**Star][26d] [Java] [al3xtjames/ghidra-firmware-utils](https://github.com/al3xtjames/ghidra-firmware-utils) Ghidra utilities for analyzing PC firmware
+- [**117**Star][1y] [Go] [aprosvetova/xiaomi-kettle](https://github.com/aprosvetova/xiaomi-kettle) Xiaomi Kettle BLE protocol reverse-engineered
- [**117**Star][10m] [C] [adrianyy/rw_socket_driver](https://github.com/adrianyy/rw_socket_driver) Driver that uses network sockets to communicate with client and read/ write protected process memory.
- [**117**Star][2y] [C++] [0xphoenix/mazewalker](https://github.com/0xphoenix/mazewalker) Toolkit for enriching and speeding up static malware analysis
- [mazeui](https://github.com/0xphoenix/mazewalker/blob/master/MazeUI/mazeui.py) 在IDA中显示界面
- [PyScripts](https://github.com/0xPhoeniX/MazeWalker/tree/master/MazeTracer/PyScripts) Python脚本,处理收集到的数据
- [PinClient](https://github.com/0xPhoeniX/MazeWalker/tree/master/MazeTracer/src)
+- [**116**Star][1y] [C++] [lincolnhard/openpose-darknet](https://github.com/lincolnhard/openpose-darknet) Openpose implementation using darknet
- [**116**Star][3y] [PHP] [ircmaxell/stauros](https://github.com/ircmaxell/stauros) A fast XSS sanitization library for PHP
- [**116**Star][3y] [Shell] [cisco-talos/vboxhardening](https://github.com/cisco-talos/vboxhardening)
-- [**116**Star][12d] [Py] [baidu-security/openrasp-iast](https://github.com/baidu-security/openrasp-iast) IAST 灰盒扫描工具
-- [**116**Star][21d] [Kotlin] [babylonhealth/certificate-transparency-android](https://github.com/babylonhealth/certificate-transparency-android) Certificate transparency for Android and Java
+- [**116**Star][23d] [Kotlin] [babylonhealth/certificate-transparency-android](https://github.com/babylonhealth/certificate-transparency-android) Certificate transparency for Android and Java
- [**116**Star][8m] [C++] [ze0r/cve-2018-8639-exp](https://github.com/ze0r/cve-2018-8639-exp)
+- [**116**Star][3y] [Py] [y1ng1996/f-scrack](https://github.com/y1ng1996/f-scrack)
- [**116**Star][1y] [Py] [xerub/idastuff](https://github.com/xerub/idastuff) IDA Pro/Hexrays plugins, mainly targeted at ARM processors
- [**116**Star][1y] [Py] [victims/victims-cve-db](https://github.com/victims/victims-cve-db) CVE database store
- [**116**Star][10m] [C] [tylabs/quicksand_lite](https://github.com/tylabs/quicksand_lite) quicksand_lite:命令行工具,扫描 Office 文档 stream
-- [**116**Star][3m] [PowerShell] [thom-s/netsec-ps-scripts](https://github.com/thom-s/netsec-ps-scripts) Collection of PowerShell network security scripts for system administrators.
+- [**116**Star][27d] [PHP] [tide-emergency/yingji](https://github.com/tide-emergency/yingji) 应急相关内容积累
+- [**116**Star][7m] [C] [tarlogicsecurity/tickey](https://github.com/tarlogicsecurity/tickey) Tool to extract Kerberos tickets from Linux kernel keys.
- [**116**Star][2y] [C#] [tandasat/dotnethooking](https://github.com/tandasat/dotnethooking) Sample use cases of the .NET native code hooking technique
- [**116**Star][1y] [Go] [t94j0/airmaster](https://github.com/t94j0/airmaster) Use ExpiredDomains.net and BlueCoat to find useful domains for red team.
- [**116**Star][2y] [C++] [skylined/edgedbg](https://github.com/skylined/edgedbg) A simple command line exe to start and debug the Microsoft Edge browser.
- [**116**Star][3m] [Shell] [shubhampathak/autosetup](https://github.com/shubhampathak/autosetup) Auto setup is a bash script compatible with Debian based distributions to install and setup necessary programs.
- [**116**Star][3y] [Py] [shiva-spampot/shiva](https://github.com/shiva-spampot/shiva) Spam Honeypot with Intelligent Virtual Analyzer
+- [**116**Star][5m] [Py] [servian/aws-auto-remediate](https://github.com/servian/aws-auto-remediate) Open source application to instantly remediate common security issues through the use of AWS Config
- [**116**Star][7y] [C] [secmobi/amatutor](https://github.com/secmobi/amatutor) Android恶意代码分析教程
-- [**116**Star][4m] [PowerShell] [roflsandwich/chrome-password-dumper](https://github.com/roflsandwich/chrome-password-dumper)
-- [**116**Star][3m] [PHP] [radenvodka/recsech](https://github.com/radenvodka/recsech) Recsech is a tool for doing Footprinting and Reconnaissance on the target web. Recsech collects information such as DNS Information, Sub Domains, HoneySpot Detected, Subdomain takeovers, Reconnaissance On Github and much more you can see in Features in tools .
+- [**116**Star][4m] [PS] [roflsandwich/chrome-password-dumper](https://github.com/roflsandwich/chrome-password-dumper)
- [**116**Star][1y] [C] [nospaceships/raw-socket-sniffer](https://github.com/nospaceships/raw-socket-sniffer) Packet capture on Windows without a kernel driver
-- [**116**Star][3y] [Py] [nccgroup/hodor](https://github.com/nccgroup/hodor) Hodor! Fuzzer..
-- [**116**Star][9d] [Java] [nccgroup/decoder-improved](https://github.com/nccgroup/decoder-improved) Improved decoder for Burp Suite
+- [**116**Star][11d] [Java] [nccgroup/decoder-improved](https://github.com/nccgroup/decoder-improved) Improved decoder for Burp Suite
+- [**116**Star][6m] [Shell] [moreseclab/ddg_malware_clean_tool](https://github.com/moreseclab/ddg_malware_clean_tool) Watchdogs 、kthrotlds 挖矿蠕虫清理脚本。
+- [**116**Star][12m] [C++] [melonwxd/elfhooker](https://github.com/melonwxd/elfhooker) 兼容Android 32位和64位。基于EFL文件格式Hook的demo,hook了SurfaceFlinger进程的eglSwapBuffers函数,替换为new_eglSwapBuffers
- [**116**Star][1m] [Py] [markmckinnon/autopsy-plugins](https://github.com/markmckinnon/autopsy-plugins) Autopsy Python Plugins
- [**116**Star][4y] [Py] [mandatoryprogrammer/xsshunter_client](https://github.com/mandatoryprogrammer/xsshunter_client) Correlated injection proxy tool for XSS Hunter
- [**116**Star][9m] [C#] [linhlhq/cve-2019-0604](https://github.com/linhlhq/cve-2019-0604) CVE-2019-0604
- [**116**Star][1y] [Py] [landgrey/cve-2018-2894](https://github.com/landgrey/cve-2018-2894) CVE-2018-2894 WebLogic Unrestricted File Upload Lead To RCE Check Script
+- [**116**Star][17d] [C#] [joelverhagen/torsharp](https://github.com/joelverhagen/torsharp) Use Tor for your C# HTTP clients. Tor + Privoxy =
- [**116**Star][1y] [Py] [jin10086/ico-spider](https://github.com/jin10086/ico-spider) download ICO source code from etherscan
- [**116**Star][2y] [C++] [iaik/drama](https://github.com/iaik/drama) This repository contains examples of DRAMA reverse-engineering and side-channel attacks
+- [**116**Star][1y] [Py] [graniet/inspector](https://github.com/graniet/inspector) The Inspector tool is a privilege escalation helper (PoC), easy to deployed on web server, this tool can list process running with root, check kernel version, check history file, get possible exploit ...
- [**116**Star][1m] [govanguard/list-pentest-tools](https://github.com/govanguard/list-pentest-tools) A curated list of network penetration testing tools.
-- [**116**Star][5y] [Py] [gdssecurity/jetleak-testing-script](https://github.com/gdssecurity/jetleak-testing-script) Script to test if a server is vulnerable to the JetLeak vulnerability
-- [**116**Star][14d] [Py] [domainaware/parsedmarc](https://github.com/domainaware/parsedmarc) 解析DMARC报告的Python脚本, 含cli
+- [**116**Star][3y] [C] [gdabah/distormx](https://github.com/gdabah/distormx) The ultimate hooking library
+- [**116**Star][2y] [Go] [evilsocket/dirsearch](https://github.com/evilsocket/dirsearch) A Go implementation of dirsearch.
- [**116**Star][2y] [Java] [dannagle/packetsender-android](https://github.com/dannagle/packetsender-android) Packet Sender for Android, Send/Receive UDP/TCP
-- [**116**Star][6m] [Py] [danmcinerney/device-pharmer](https://github.com/danmcinerney/device-pharmer) Opens 1K+ IPs or Shodan search results and attempts to login
-- [**116**Star][7d] [Go] [cyberark/secretless-broker](https://github.com/cyberark/secretless-broker) Secure your apps by making them Secretless
-- [**116**Star][4y] [Py] [cvvt/dumpdex](https://github.com/cvvt/dumpdex) IDA python script to dynamically dump DEX in memory
+- [**116**Star][11m] [C] [d00rt/emotet_research](https://github.com/d00rt/emotet_research) documentation about the packer of Emotet and its unpacker.
- [**116**Star][4y] [C++] [critters/twang](https://github.com/critters/twang) Arduino-based 1D dungeon crawler
+- [**116**Star][5d] [C] [cr4sh/s6_pcie_microblaze](https://github.com/cr4sh/s6_pcie_microblaze) PCI Express DIY hacking toolkit for Xilinx SP605
- [**116**Star][2y] [Py] [coffeehb/struts2_check](https://github.com/coffeehb/struts2_check) 一个用于识别目标网站是否采用Struts2框架开发的工具demo
- [**116**Star][9y] [C] [chaoslawful/tcc](https://github.com/chaoslawful/tcc) track of Tiny C Compiler
+- [**116**Star][8y] [PHP] [cdhowie/bitcoin-mining-proxy](https://github.com/cdhowie/bitcoin-mining-proxy) Multi-pool, multi-worker proxy for Bitcoin miners, supporting long polling and pool failover
- [**116**Star][6y] [caomulaodao/xss-filter-evasion-cheat-sheet-cn](https://github.com/caomulaodao/xss-filter-evasion-cheat-sheet-cn) XSS_Filter_Evasion_Cheat_Sheet 中文版
-- [**116**Star][15d] [C++] [b4rtik/metasploit-execute-assembly](https://github.com/b4rtik/metasploit-execute-assembly) Custom Metasploit post module to executing a .NET Assembly from Meterpreter session
-- [**116**Star][1y] [Go] [aprosvetova/xiaomi-kettle](https://github.com/aprosvetova/xiaomi-kettle) Xiaomi Kettle BLE protocol reverse-engineered
-- [**116**Star][1m] [JS] [acmbvp/hacktoberfest](https://github.com/acmbvp/hacktoberfest) Make your first PR! ~ A beginner friendly repository made specifically for open source beginners. Add your profile, a blog or any program under any language (it can be anything from a hello-world program to a complex data structure algorithm) or update the existing one. Just make sure to add the file under the correct directory. Happy hacking!
+- [**116**Star][1y] [JS] [brannondorsey/distributed-password-cracking](https://github.com/brannondorsey/distributed-password-cracking) Borrow CPU cycles from visitor's web browsers to crack MD5 password hashes
+- [**116**Star][17d] [C++] [b4rtik/metasploit-execute-assembly](https://github.com/b4rtik/metasploit-execute-assembly) Custom Metasploit post module to executing a .NET Assembly from Meterpreter session
+- [**116**Star][9m] [Py] [ambionics/magento-exploits](https://github.com/ambionics/magento-exploits) Exploits for Magento 2.3.0 and lower
+- [**116**Star][14d] [CMake] [abhi-r3v0/evabs](https://github.com/abhi-r3v0/evabs) An open source Android application that is intentionally vulnerable so as to act as a learning platform for Android application security beginners.
+- [**115**Star][4y] [C++] [cisco-talos/tesladecrypt](https://github.com/Cisco-Talos/TeslaDecrypt) Decryption Tool
- [**115**Star][1y] [Py] [vallejocc/reverse-engineering-arsenal](https://github.com/vallejocc/Reverse-Engineering-Arsenal) Useful Scripts for helping in reverse engeenering
- [WinDbg](https://github.com/vallejocc/Reverse-Engineering-Arsenal/blob/master/WinDbg) WinDBG script collection
- [IDA-set_symbols_for_addresses](https://github.com/vallejocc/Reverse-Engineering-Arsenal/blob/master/IDA/set_symbols_for_addresses.py) asks you for a file containing pairs address - symbol. It walks all segments searching for DWORDs matching the addresses of the given file of pairs address - symbols, and it will name the variable containing the address with the symbol name
- [IDA-stack_strings_deobfuscator_1](https://github.com/vallejocc/Reverse-Engineering-Arsenal/blob/master/IDA/stack_strings_deobfuscator_1.py) Some malware families construct strings into the stack
- [RevealPE](https://github.com/vallejocc/Reverse-Engineering-Arsenal/tree/master/Standalone/RevealPE)
+- [**115**Star][3y] [C++] [yanncam/exe2powershell](https://github.com/yanncam/exe2powershell) exe2powershell - exe2bat reborn for modern Windows
- [**115**Star][8m] [Py] [woj-ciech/pepe](https://github.com/woj-ciech/pepe) Collect information about email addresses from Pastebin
+- [**115**Star][1y] [Shell] [wknapik/vpnfailsafe](https://github.com/wknapik/vpnfailsafe) IP leak prevention for OpenVPN
- [**115**Star][2y] [Py] [williballenthin/process-forest](https://github.com/williballenthin/process-forest) Reconstruct process trees from event logs
- [**115**Star][12m] [HTML] [wifiphisher/extra-phishing-pages](https://github.com/wifiphisher/extra-phishing-pages) Community-built scenarios for Wifiphisher
- [**115**Star][11m] [Py] [webbreacher/tilde_enum](https://github.com/webbreacher/tilde_enum) Takes a URL and checks the system for the tilde enum vuln and then find the files.
- [**115**Star][1y] [Py] [verctor/cs_xor64](https://github.com/verctor/cs_xor64) cobaltstrike xor64.bin补完计划
- [**115**Star][2y] [C] [valentinbreiz/ps4-linux-loader](https://github.com/valentinbreiz/ps4-linux-loader) A simple payload that let you run Linux on your 4.05 / 4.55 / 5.01 / 5.05 PS4
-- [**115**Star][4y] [Lua] [ulissescastro/linux-native-backdoors](https://github.com/ulissescastro/linux-native-backdoors) Repository holding all alternatives of *nix backdoors.
-- [**115**Star][9m] [Java] [turing-technician/virtualfasthook](https://github.com/turing-technician/virtualfasthook) Android application hooking tool based on FastHook + VirtualApp
-- [**115**Star][25d] [PHP] [tide-emergency/yingji](https://github.com/tide-emergency/yingji) 应急相关内容积累
-- [**115**Star][17d] [Shell] [therealsaumil/armx](https://github.com/therealsaumil/armx) ARM-X Firmware Emulation Framework
+- [**115**Star][19d] [Shell] [therealsaumil/armx](https://github.com/therealsaumil/armx) ARM-X Firmware Emulation Framework
- [**115**Star][1y] [Shell] [theflakes/ultimate-forensics-vm](https://github.com/theflakes/ultimate-forensics-vm) Evolving directions on building the best Open Source Forensics VM
-- [**115**Star][7m] [C] [tarlogicsecurity/tickey](https://github.com/tarlogicsecurity/tickey) Tool to extract Kerberos tickets from Linux kernel keys.
+- [**115**Star][8m] [AppleScript] [rtrouton/payload-free-package-creator](https://github.com/rtrouton/payload-free-package-creator)
- [**115**Star][2y] [Py] [penafieljlm/inquisitor](https://github.com/penafieljlm/inquisitor) Opinionated organisation-centric OSINT footprinting inspired from recon-ng and Maltego
-- [**115**Star][11m] [Shell] [patpadgett/corkscrew](https://github.com/patpadgett/corkscrew) Corkscrew is a tool for tunneling SSH through HTTP proxies.
- [**115**Star][3y] [Java] [njfox/java-deserialization-exploit](https://github.com/njfox/java-deserialization-exploit)
-- [**115**Star][6m] [Shell] [moreseclab/ddg_malware_clean_tool](https://github.com/moreseclab/ddg_malware_clean_tool) Watchdogs 、kthrotlds 挖矿蠕虫清理脚本。
-- [**115**Star][2m] [C#] [metalnem/sharpfuzz](https://github.com/metalnem/sharpfuzz) AFL-based fuzz testing for .NET
+- [**115**Star][5m] [Py] [n4nu/reversing-challenges-list](https://github.com/n4nu/reversing-challenges-list) CTF Reversing Challenges List
+- [**115**Star][5d] [C#] [metalnem/sharpfuzz](https://github.com/metalnem/sharpfuzz) AFL-based fuzz testing for .NET
- [**115**Star][3y] [Java] [mbechler/serianalyzer](https://github.com/mbechler/serianalyzer) A static byte code analyzer for Java deserialization gadget research
- [**115**Star][2y] [Ruby] [m4sc3r4n0/avoidz](https://github.com/m4sc3r4n0/avoidz) Avoidz tool to bypass most A.V softwares
-- [**115**Star][3m] [Py] [kmkz/exploit](https://github.com/kmkz/exploit) Exploits and advisories
+- [**115**Star][11m] [Py] [lucifer1993/alb](https://github.com/lucifer1993/alb) 攻击日志分析工具
+- [**115**Star][3y] [C++] [lcatro/vuln_javascript](https://github.com/lcatro/vuln_javascript) 模拟一个存在漏洞的JavaScript 运行环境,用来学习浏览器漏洞原理和练习如何编写Shellcode (a JavaScript Execute Envirment which study browser vuln and how to write Shellcode ) ..
+- [**115**Star][6d] [Py] [kmkz/exploit](https://github.com/kmkz/exploit) Exploits and advisories
- [**115**Star][1y] [Py] [khast3x/offensive-dockerfiles](https://github.com/khast3x/offensive-dockerfiles) Offensive tools as Dockerfiles. Lightweight & Ready to go
-- [**115**Star][29d] [Py] [jpdias/botnet-lab](https://github.com/jpdias/botnet-lab) An IRC based tool for testing the capabilities of a botnet.
+- [**115**Star][1m] [Py] [jpdias/botnet-lab](https://github.com/jpdias/botnet-lab) An IRC based tool for testing the capabilities of a botnet.
- [**115**Star][2y] [Py] [jko/nsearch](https://github.com/jko/nsearch) minimal script to help find script into the nse database
- [**115**Star][6y] [C#] [jerryhoff/webgoat.net](https://github.com/jerryhoff/webgoat.net) OWASP WebGoat.NET
+- [**115**Star][3m] [PS] [jcqsteven/ghosttunnel](https://github.com/jcqsteven/ghosttunnel) 基于360提出的Ghost Tunnel攻击复现
+- [**115**Star][1y] [C] [jas502n/cve-2018-17182](https://github.com/jas502n/cve-2018-17182) Linux 内核VMA-UAF 提权漏洞(CVE-2018-17182),0day
- [**115**Star][1y] [Py] [jamesjgoodwin/wreckuests](https://github.com/jamesjgoodwin/wreckuests) Wreckuests — yet another one hard-hitting tool to run DDoS atacks with HTTP-flood
- [**115**Star][9y] [C] [ice799/ltrace](https://github.com/ice799/ltrace) ltrace intercepts and records dynamic library calls which are called by an executed process and the signals received by that process. It can also intercept and print the system calls executed by the program.
- [**115**Star][2y] [C] [harsaroopdhillon/spectreexploit](https://github.com/harsaroopdhillon/spectreexploit) SpectreExploit POC
- [**115**Star][5y] [Py] [h01/proxyscanner](https://github.com/h01/proxyscanner) python HTTP代理扫描
-- [**115**Star][1y] [Py] [graniet/inspector](https://github.com/graniet/inspector) The Inspector tool is a privilege escalation helper (PoC), easy to deployed on web server, this tool can list process running with root, check kernel version, check history file, get possible exploit ...
- [**115**Star][8m] [C] [govolution/avepoc](https://github.com/govolution/avepoc) avepoc:一些免杀的 poc
- [**115**Star][2y] [gfwlist/tinylist](https://github.com/gfwlist/tinylist) Tiny version of gfwlist, focusing on common websites ONLY
-- [**115**Star][3y] [C] [gdabah/distormx](https://github.com/gdabah/distormx) The ultimate hooking library
-- [**115**Star][24d] [Go] [furduhlutur/yar](https://github.com/furduhlutur/yar) Yar is a tool for plunderin' organizations, users and/or repositories.
-- [**115**Star][12m] [PowerShell] [fox-it/invoke-credentialphisher](https://github.com/fox-it/invoke-credentialphisher)
-- [**115**Star][2y] [Py] [ecapuano/web-traffic-generator](https://github.com/ecapuano/web-traffic-generator) A quick and dirty HTTP/S "organic" traffic generator.
-- [**115**Star][3y] [PHP] [dhayalanb/windows-php-reverse-shell](https://github.com/dhayalanb/windows-php-reverse-shell) Simple php reverse shell implemented using binary .
+- [**115**Star][12m] [PS] [fox-it/invoke-credentialphisher](https://github.com/fox-it/invoke-credentialphisher)
- [**115**Star][4y] [JS] [demi6od/chromefuzzer](https://github.com/demi6od/chromefuzzer) fuzz
-- [**115**Star][11m] [C] [d00rt/emotet_research](https://github.com/d00rt/emotet_research) documentation about the packer of Emotet and its unpacker.
-- [**115**Star][29d] [Py] [containers/udica](https://github.com/containers/udica) This repository contains a tool for generating SELinux security profiles for containers
- [**115**Star][2y] [Py] [cantoolz/cantoolz](https://github.com/cantoolz/cantoolz) CANToolz - Black-box CAN network analysis framework
- [**115**Star][3y] [C] [c0d3z3r0/sudo-cve-2017-1000367](https://github.com/c0d3z3r0/sudo-cve-2017-1000367)
-- [**115**Star][1y] [JS] [brannondorsey/distributed-password-cracking](https://github.com/brannondorsey/distributed-password-cracking) Borrow CPU cycles from visitor's web browsers to crack MD5 password hashes
- [**115**Star][3y] [Batchfile] [bartblaze/disable-intel-amt](https://github.com/bartblaze/disable-intel-amt) Tool to disable Intel AMT on Windows
- [**115**Star][4m] [Java] [andprox/andprox](https://github.com/andprox/andprox) Native Android Proxmark3 client (no root required)
-- [**115**Star][9m] [Py] [ambionics/magento-exploits](https://github.com/ambionics/magento-exploits) Exploits for Magento 2.3.0 and lower
+- [**115**Star][1m] [JS] [acmbvp/hacktoberfest](https://github.com/acmbvp/hacktoberfest) Make your first PR! ~ A beginner friendly repository made specifically for open source beginners. Add your profile, a blog or any program under any language (it can be anything from a hello-world program to a complex data structure algorithm) or update the existing one. Just make sure to add the file under the correct directory. Happy hacking!
+- [**115**Star][3m] [Py] [360netlab/dga](https://github.com/360netlab/dga) Suspicious DGA from PDNS and Sandbox.
- [**114**Star][8y] [C++] [moxie0/tortunnel](https://github.com/moxie0/tortunnel) A partial Onion Proxy implementation that's designed to build single-hop circuits through Tor exit nodes
-- [**114**Star][4y] [C++] [cisco-talos/tesladecrypt](https://github.com/Cisco-Talos/TeslaDecrypt) Decryption Tool
+- [**114**Star][1y] [Shell] [fox-it/linux-luks-tpm-boot](https://github.com/fox-it/linux-luks-tpm-boot) A guide for setting up LUKS boot with a key from TPM in Linux
+- [**114**Star][5m] [PHP] [m0xiaoxi/ctf_web_docker](https://github.com/m0xiaoxi/ctf_web_docker) dockers for CTF_Web.
+- [**114**Star][4d] [Py] [realsanjay/domainrecon](https://github.com/realsanjay/DomainRecon) Based on URL and Organization Name, collect the IP Ranges, subdomains using various tools like Amass, subfinder, etc.. And check for uphost and Run Masscan to grap CNAME entries, take the screenshot of all the found subdomains using WebScreeShot and more...
+- [**114**Star][2y] [JS] [fsecurelabs/cve-2018-4121](https://github.com/FSecureLABS/CVE-2018-4121) macOS 10.13.3 (17D47) Safari Wasm Exploit
+- [**114**Star][10m] [Ruby] [hdm/inetdata](https://github.com/hdm/inetdata) Internet data acquisition
+- [**114**Star][11m] [C] [zombiecraig/uds-server](https://github.com/zombiecraig/uds-server) CAN UDS Simulator and Fuzzer
+- [**114**Star][8d] [C] [zmrbak/pcwechathook](https://github.com/zmrbak/pcwechathook) 云课堂《2019 PC微信 探秘》示例代码
+- [**114**Star][6d] [Rust] [zcash/librustzcash](https://github.com/zcash/librustzcash) Rust-language assets for Zcash
+- [**114**Star][2y] [C] [xiphosresearch/netelf](https://github.com/xiphosresearch/netelf) Run executables from memory, over the network, on Windows, Linux, OpenVMS... routers... spaceships... toasters etc.
+- [**114**Star][2y] [wpvsyou/mprop](https://github.com/wpvsyou/mprop) 修改Android prop脚本工具
+- [**114**Star][2y] [C++] [waryas/eupmaccess](https://github.com/waryas/eupmaccess) This DKOM exploit enables any app in usermode to access physical memory directly
- [**114**Star][6m] [C#] [tyranid/canape.core](https://github.com/tyranid/canape.core) A network proxy library written in C# for .NET Core based on CANAPE
- [**114**Star][6y] [CSS] [syphon1c/threatelligence](https://github.com/syphon1c/threatelligence) Threatelligence is a simple cyber threat intelligence feed collector, using Elasticsearch, Kibana and Python to automatically collect intelligence from custom or public sources. Automatically updates feeds and tries to further enhance data for dashboards.
+- [**114**Star][16d] [Java] [stringcare/androidlibrary](https://github.com/stringcare/androidlibrary) Android library to reveal or obfuscate strings and assets at runtime
- [**114**Star][6y] [spiderlabs/sqlol](https://github.com/spiderlabs/sqlol) A configurable SQL injection test-bed
- [**114**Star][2y] [Ruby] [skahwah/wordsmith](https://github.com/skahwah/wordsmith) The aim of Wordsmith is to assist with creating tailored wordlists. This is mostly based on geolocation.
-- [**114**Star][8m] [AppleScript] [rtrouton/payload-free-package-creator](https://github.com/rtrouton/payload-free-package-creator)
+- [**114**Star][11m] [Py] [saaramar/35c3_modern_windows_userspace_exploitation](https://github.com/saaramar/35c3_modern_windows_userspace_exploitation)
- [**114**Star][3y] [C] [rosgos/mirai-source-code](https://github.com/rosgos/mirai-source-code)
- [**114**Star][4y] [Perl] [reider-roque/pentest-tools](https://github.com/reider-roque/pentest-tools) Penetration testing scripts
- [**114**Star][4y] [Ruby] [patio11/wrightverification](https://github.com/patio11/wrightverification) (Failed) verification of the signature posted by Craig Wright on May 2, 2016
- [**114**Star][3y] [Java] [nil1666/auditdroid](https://github.com/nil1666/auditdroid) AduitDroid
-- [**114**Star][13d] [C#] [mr-un1k0d3r/minidump](https://github.com/mr-un1k0d3r/minidump) alternative to procdump
-- [**114**Star][1m] [Shell] [misp/misp-book](https://github.com/misp/misp-book) User guide of MISP
+- [**114**Star][15d] [C#] [mr-un1k0d3r/minidump](https://github.com/mr-un1k0d3r/minidump) alternative to procdump
+- [**114**Star][6d] [Shell] [misp/misp-book](https://github.com/misp/misp-book) User guide of MISP
+- [**114**Star][5m] [Py] [marcoramilli/malwaretrainingsets](https://github.com/marcoramilli/malwaretrainingsets) Free Malware Training Datasets for Machine Learning
- [**114**Star][1y] [C#] [malcomvetter/managedinjection](https://github.com/malcomvetter/managedinjection) A proof of concept for dynamically loading .net assemblies at runtime with only a minimal convention pre-knowledge
-- [**114**Star][11m] [Py] [lucifer1993/alb](https://github.com/lucifer1993/alb) 攻击日志分析工具
- [**114**Star][3y] [C#] [leurak/trollrat](https://github.com/leurak/trollrat) A remote trolling software mainly intended for Tech Support Scammers.
-- [**114**Star][3y] [C++] [lcatro/vuln_javascript](https://github.com/lcatro/vuln_javascript) 模拟一个存在漏洞的JavaScript 运行环境,用来学习浏览器漏洞原理和练习如何编写Shellcode (a JavaScript Execute Envirment which study browser vuln and how to write Shellcode ) ..
- [**114**Star][4y] [C] [kpwn/nullguard](https://github.com/kpwn/nullguard) kext kills all 32bit binaries lacking __PAGEZERO (required for exploitation of kernel NULL derefs)
-- [**114**Star][3m] [PowerShell] [jcqsteven/ghosttunnel](https://github.com/jcqsteven/ghosttunnel) 基于360提出的Ghost Tunnel攻击复现
-- [**114**Star][1y] [C] [jas502n/cve-2018-17182](https://github.com/jas502n/cve-2018-17182) Linux 内核VMA-UAF 提权漏洞(CVE-2018-17182),0day
-- [**114**Star][5m] [C++] [hasherezade/tiny_tracer](https://github.com/hasherezade/tiny_tracer) A Pin Tool for tracing API calls etc
-- [**114**Star][12d] [Go] [facebookincubator/nvdtools](https://github.com/facebookincubator/nvdtools) A set of tools to work with the feeds (vulnerabilities, CPE dictionary etc.) distributed by National Vulnerability Database (NVD)
+- [**114**Star][2y] [JS] [jaimehgb/raiwebwallet](https://github.com/jaimehgb/raiwebwallet) Raiblocks raiwallet.com wallet source code
- [**114**Star][3m] [Go] [eaglexiang/eagle.tunnel.go](https://github.com/eaglexiang/eagle.tunnel.go) 稳定的代理工具,比.NET版本更轻量和易用
-- [**114**Star][5y] [Py] [digital4rensics/malformity](https://github.com/digital4rensics/malformity) Malformity is a Maltego project based on the Canari framework for malicious binary and infrastructure research.
+- [**114**Star][7m] [PS] [dviros/excalibur](https://github.com/dviros/excalibur) Excalibur is an Eternalblue exploit payload based "Powershell" for the Bashbunny project.
+- [**114**Star][2y] [Py] [dragon2fly/vpngate-with-proxy](https://github.com/dragon2fly/vpngate-with-proxy) vpn gate client for linux, be able to connect to open vpn server through proxy
+- [**114**Star][6y] [Py] [digital4rensics/malformity](https://github.com/digital4rensics/malformity) Malformity is a Maltego project based on the Canari framework for malicious binary and infrastructure research.
- [**114**Star][2m] [Shell] [darkerego/mips-binaries](https://github.com/darkerego/mips-binaries) Various binaries for the mips architecture.
+- [**114**Star][4y] [Py] [danmcinerney/wifi-monitor](https://github.com/danmcinerney/wifi-monitor) Prints the IPs on your local network that're sending the most packets
+- [**114**Star][2d] [Shell] [concourse/git-resource](https://github.com/concourse/git-resource) tracks commits in a branch of a Git repository
+- [**114**Star][4m] [JS] [baronpan/sysmonhunter](https://github.com/baronpan/sysmonhunter) An easy ATT&CK-based Sysmon hunting tool, showing in Blackhat USA 2019 Arsenal
- [**114**Star][4y] [Shell] [anbud/droidducky](https://github.com/anbud/droidducky) SImple duckyscript interpreter in Bash.
- [**114**Star][2y] [Ruby] [airbus-seclab/warbirdvm](https://github.com/airbus-seclab/warbirdvm) An analysis of the Warbird virtual-machine protection for the CI!g_pStore
- [**114**Star][1y] [Py] [abhinavbom/threat-intelligence-hunter](https://github.com/abhinavbom/threat-intelligence-hunter) TIH is an intelligence tool that helps you in searching for IOCs across multiple openly available security feeds and some well known APIs. The idea behind the tool is to facilitate searching and storing of frequently added IOCs for creating your own local database of indicators.
- [**114**Star][9m] [C] [a13xp0p0v/kernel-hack-drill](https://github.com/a13xp0p0v/kernel-hack-drill) Linux kernel exploitation experiments
-- [**114**Star][3m] [Py] [360netlab/dga](https://github.com/360netlab/dga) Suspicious DGA from PDNS and Sandbox.
+- [**113**Star][7m] [Py] [decalage2/olefile](https://github.com/decalage2/olefile) olefile is a Python package to parse, read and write Microsoft OLE2 files (also called Structured Storage, Compound File Binary Format or Compound Document File Format), such as Microsoft Office 97-2003 documents, vbaProject.bin in MS Office 2007+ files, Image Composer and FlashPix files, Outlook messages, StickyNotes, several Microscopy file fo…
- [**113**Star][3y] [wtsxdev/vehicle-security](https://github.com/wtsxdev/vehicle-security) List of resources for learning about vehicle security and car hacking
-- [**113**Star][1y] [Shell] [fox-it/linux-luks-tpm-boot](https://github.com/fox-it/linux-luks-tpm-boot) A guide for setting up LUKS boot with a key from TPM in Linux
-- [**113**Star][5m] [PHP] [m0xiaoxi/ctf_web_docker](https://github.com/m0xiaoxi/ctf_web_docker) dockers for CTF_Web.
-- [**113**Star][1y] [Py] [realsanjay/domainrecon](https://github.com/realsanjay/DomainRecon) Based on URL, collect the subdomains using various tools like Sublist3r, recon-ng etc.. And check for subdomain take over and Run the EyeWitness to take the screenshot of all the found subdomains.
+- [**113**Star][2m] [C#] [infosecn1nja/sharpdoor](https://github.com/infosecn1nja/sharpdoor) SharpDoor is alternative RDPWrap written in C# to allowed multiple RDP (Remote Desktop) sessions by patching termsrv.dll file.
+- [**113**Star][9d] [portswigger/xss-cheatsheet-data](https://github.com/portswigger/xss-cheatsheet-data) This repository contains all the XSS cheatsheet data to allow contributions from the community.
- [**113**Star][5y] [Py] [nccgroup/zulu](https://github.com/nccgroup/zulu) The Zulu fuzzer
-- [**113**Star][2y] [JS] [fsecurelabs/cve-2018-4121](https://github.com/FSecureLABS/CVE-2018-4121) macOS 10.13.3 (17D47) Safari Wasm Exploit
-- [**113**Star][10m] [Ruby] [hdm/inetdata](https://github.com/hdm/inetdata) Internet data acquisition
- [**113**Star][3y] [Objective-C++] [yonsm/ipafine](https://github.com/yonsm/ipafine) iOS IPA package refine and resign
-- [**113**Star][3y] [Py] [y1ng1996/f-scrack](https://github.com/y1ng1996/f-scrack)
- [**113**Star][4y] [C] [wireshark/winpcap](https://github.com/wireshark/winpcap) The WinPcap packet capture library. Pull requests will be ignored. Please upload changes to
- [**113**Star][4m] [we5ter/flerken](https://github.com/we5ter/flerken) A Solution For Cross-Platform Obfuscated Commands Detection
-- [**113**Star][2y] [C++] [waryas/eupmaccess](https://github.com/waryas/eupmaccess) This DKOM exploit enables any app in usermode to access physical memory directly
-- [**113**Star][14d] [Java] [stringcare/androidlibrary](https://github.com/stringcare/androidlibrary) Android library to reveal or obfuscate strings and assets at runtime
- [**113**Star][1y] [Py] [securityclippy/elasticintel](https://github.com/securityclippy/elasticintel) Serverless, low cost, threat intel aggregation for enterprise or personal use, backed by ElasticSearch.
- [**113**Star][1y] [C++] [scgywx/fooking](https://github.com/scgywx/fooking) distributed gateway server(php game server, tcp server, websocket server)
-- [**113**Star][8d] [C++] [phackt/stager.dll](https://github.com/phackt/stager.dll) Code from this article:
- [**113**Star][1y] [Shell] [peterpt/eternal_check](https://github.com/peterpt/eternal_check) 检查指定IP是否有某些SMB漏洞, 比如永恒之蓝. 基于nmap
+- [**113**Star][23d] [Py] [p4-team/crypto-commons](https://github.com/p4-team/crypto-commons) Small python module for common CTF crypto functions
- [**113**Star][1m] [C#] [oj/clr-meterpreter](https://github.com/oj/clr-meterpreter) The full story of the CLR implementation of Meterpreter
-- [**113**Star][5m] [Py] [n4nu/reversing-challenges-list](https://github.com/n4nu/reversing-challenges-list) CTF Reversing Challenges List
-- [**113**Star][5m] [Py] [marcoramilli/malwaretrainingsets](https://github.com/marcoramilli/malwaretrainingsets) Free Malware Training Datasets for Machine Learning
+- [**113**Star][10m] [HTML] [mpgn/byp-sop](https://github.com/mpgn/byp-sop) 🏴☠️ Bypass Same Origin Policy with DNS-rebinding to retrieve local server files 🏴☠️
- [**113**Star][2y] [JS] [landgrey/dnstricker](https://github.com/landgrey/dnstricker) A simple dns resolver of dns-record and web-record log server for pentesting
+- [**113**Star][7m] [C] [jakkarth/icmptx](https://github.com/jakkarth/icmptx) IP-over-ICMP tunnel
- [**113**Star][5m] [Java] [guardianproject/iocipher](https://github.com/guardianproject/iocipher) make non-root mountable encrypted disk shares
-- [**113**Star][3y] [PowerShell] [fuzzysecurity/defcon24](https://github.com/fuzzysecurity/defcon24) DefCon24
+- [**113**Star][3y] [PS] [fuzzysecurity/defcon24](https://github.com/fuzzysecurity/defcon24) DefCon24
+- [**113**Star][10m] [Py] [fupinglee/mypython](https://github.com/fupinglee/mypython) 一些常用的Python脚本
+- [**113**Star][7m] [fabionoth/awesome-cyber-security](https://github.com/fabionoth/awesome-cyber-security) A collection of awesome software, libraries, documents, books, resources and cools stuffs about security.
- [**113**Star][3y] [Py] [exodusintel/disclosures](https://github.com/exodusintel/disclosures) all of Exodus Intelligence's disclosure material
- [**113**Star][4y] [Java] [evilsocket/pdusms](https://github.com/evilsocket/pdusms) PoC app for raw pdu manipulation on Android.
-- [**113**Star][6m] [Visual Basic] [dzzie/comraider](https://github.com/dzzie/comraider) ActiveX Fuzzing tool with GUI, object browser, system scanner, and distributed auditing capabilities
-- [**113**Star][7m] [PowerShell] [dviros/excalibur](https://github.com/dviros/excalibur) Excalibur is an Eternalblue exploit payload based "Powershell" for the Bashbunny project.
+- [**113**Star][6y] [edthamm/lootbooty](https://github.com/edthamm/lootbooty) WIreless Hacking Tools
+- [**113**Star][7m] [Visual Basic .NET] [dzzie/comraider](https://github.com/dzzie/comraider) ActiveX Fuzzing tool with GUI, object browser, system scanner, and distributed auditing capabilities
- [**113**Star][6m] [Py] [drego85/joomlascan](https://github.com/drego85/joomlascan) A free software to find the components installed in Joomla CMS, built out of the ashes of Joomscan.
+- [**113**Star][8m] [C++] [dragonquesthero/pubg-pak-hacker](https://github.com/dragonquesthero/pubg-pak-hacker) use windows kernel deriver hidden file and itself to Bypass BE
+- [**113**Star][11d] [Shell] [diladele/websafety](https://github.com/diladele/websafety) Simple and powerful web filter for HTTP and HTTPS traffic
- [**113**Star][5y] [Shell] [denny0223/scrabble](https://github.com/denny0223/scrabble) Simple tool to recover .git folder from remote server
-- [**113**Star][4m] [C#] [decoder-it/powershellveryless](https://github.com/decoder-it/powershellveryless) Constrained Language Mode + AMSI bypass all in one
-- [**113**Star][4y] [Py] [danmcinerney/wifi-monitor](https://github.com/danmcinerney/wifi-monitor) Prints the IPs on your local network that're sending the most packets
-- [**113**Star][3m] [PowerShell] [danmcinerney/pymetasploit3](https://github.com/danmcinerney/pymetasploit3) Automation library for Metasploit
-- [**113**Star][2y] [C] [cr4sh/s6_pcie_microblaze](https://github.com/cr4sh/s6_pcie_microblaze) PCI Express DIY hacking toolkit for Xilinx SP605
+- [**113**Star][5m] [C#] [decoder-it/powershellveryless](https://github.com/decoder-it/powershellveryless) Constrained Language Mode + AMSI bypass all in one
+- [**113**Star][4y] [C++] [chengchengcc/ark-tools](https://github.com/chengchengcc/ark-tools) Windows Ark tools and demo
- [**113**Star][2m] [bugcrowd/disclosure-policy](https://github.com/bugcrowd/disclosure-policy) Open Source Vulnerability Disclosure Framework. Maintained by Bugcrowd.
- [**113**Star][3y] [Py] [bjmayor/hacker](https://github.com/bjmayor/hacker) python绝技:运用python成为顶级黑客 这本书的源码
-- [**113**Star][4m] [JS] [baronpan/sysmonhunter](https://github.com/baronpan/sysmonhunter) An easy ATT&CK-based Sysmon hunting tool, showing in Blackhat USA 2019 Arsenal
-- [**113**Star][12d] [CMake] [abhi-r3v0/evabs](https://github.com/abhi-r3v0/evabs) An open source Android application that is intentionally vulnerable so as to act as a learning platform for Android application security beginners. The effort is to introduce beginners with very limited or zero knowledge to some of the major and commonly found real-world based Android application vulnerabilities in a story-based, interactive mod…
-- [**112**Star][7m] [Py] [decalage2/olefile](https://github.com/decalage2/olefile) olefile is a Python package to parse, read and write Microsoft OLE2 files (also called Structured Storage, Compound File Binary Format or Compound Document File Format), such as Microsoft Office 97-2003 documents, vbaProject.bin in MS Office 2007+ files, Image Composer and FlashPix files, Outlook messages, StickyNotes, several Microscopy file fo…
-- [**112**Star][13d] [ukncsc/zero-trust-architecture](https://github.com/ukncsc/zero-trust-architecture) Principles to help you design and deploy a zero trust architecture
+- [**112**Star][6m] [PS] [nsacyber/nsacyber.github.io](https://github.com/nsacyber/nsacyber.github.io) NSA Cybersecurity. Formerly known as NSA Information Assurance and the Information Assurance Directorate
- [**112**Star][6m] [v2rayv3/v2ray-sspanel-v3-mod_uim-plugin](https://github.com/v2rayv3/v2ray-sspanel-v3-mod_uim-plugin)
- [**112**Star][1m] [Py] [prodigysml/dr.-watson](https://github.com/prodigysml/dr.-watson) Dr. Watson is a simple Burp Suite extension that helps find assets, keys, subdomains, IP addresses, and other useful information! It's your very own discovery side kick, the Dr. Watson to your Sherlock!
+- [**112**Star][2m] [C++] [outflanknl/recon-ad](https://github.com/outflanknl/recon-ad) Recon-AD, an AD recon tool based on ADSI and reflective DLL’s
- [**112**Star][9m] [HTML] [xuechiyaobai/cve-2017-7092-poc](https://github.com/xuechiyaobai/CVE-2017-7092-PoC) This is the Pwn2Own 2017 Safari backup vul's exploit.
- [**112**Star][2y] [Py] [simplysecurity/simplytemplate](https://github.com/SimplySecurity/SimplyTemplate) Phishing Template Generation Made Easy
- [**112**Star][2y] [Py] [fsecurelabs/drozer-modules](https://github.com/FSecureLABS/drozer-modules) leading security testing framework for Android.
-- [**112**Star][11m] [C] [zombiecraig/uds-server](https://github.com/zombiecraig/uds-server) CAN UDS Simulator and Fuzzer
- [**112**Star][8m] [PHP] [xplico/xplico](https://github.com/xplico/xplico) Open Source Network Forensic Analysis Tool (NFAT)
-- [**112**Star][2y] [C] [xiphosresearch/netelf](https://github.com/xiphosresearch/netelf) Run executables from memory, over the network, on Windows, Linux, OpenVMS... routers... spaceships... toasters etc.
-- [**112**Star][2y] [wpvsyou/mprop](https://github.com/wpvsyou/mprop) 修改Android prop脚本工具
+- [**112**Star][3m] [C++] [x64dbg/scripts](https://github.com/x64dbg/scripts) A collection of x64dbg scripts. Feel free to submit a pull request to add your script.
- [**112**Star][9m] [Py] [williballenthin/evtxtract](https://github.com/williballenthin/evtxtract) EVTXtract recovers and reconstructs fragments of EVTX log files from raw binary data, including unallocated space and memory images.
+- [**112**Star][1y] [C] [vusec/hammertime](https://github.com/vusec/hammertime) a software suite for testing, profiling and simulating the Rowhammer DRAM defect, built on top of the RAMSES address translation library.
- [**112**Star][8m] [Py] [tkisason/unhash](https://github.com/tkisason/unhash) unhash is a set of tools designed to enable better password auditing
- [**112**Star][6m] [Vue] [tevora-threat/dragnet](https://github.com/tevora-threat/dragnet) Your Social Engineering Sidekick
+- [**112**Star][7y] [Py] [sroberts/malwarehouse](https://github.com/sroberts/malwarehouse) A warehouse for your malware
+- [**112**Star][2y] [Py] [sithis993/crypter](https://github.com/sithis993/crypter) Crypter - Python-based builder and ransomware compiled to Windows executable using PyInstaller
- [**112**Star][6m] [Py] [ruped24/killchain](https://github.com/ruped24/killchain) A unified console to perform the "kill chain" stages of attacks.
-- [**112**Star][21d] [Py] [p4-team/crypto-commons](https://github.com/p4-team/crypto-commons) Small python module for common CTF crypto functions
+- [**112**Star][11m] [C] [rup0rt/pcapfix](https://github.com/rup0rt/pcapfix) repair corrupted pcap files
+- [**112**Star][1y] [ridter/cs_chinese_support](https://github.com/ridter/cs_chinese_support) Cobalt strike 修改支持回显中文。
+- [**112**Star][10m] [Py] [plazmaz/sublist3r](https://github.com/plazmaz/sublist3r) Fast subdomains enumeration tool for penetration testers
+- [**112**Star][2y] [Shell] [pimps/wsuxploit](https://github.com/pimps/wsuxploit) wsuxploit:MiTM 漏洞利用脚本,用于将“假冒”更新注入到非 SSL WSUS 流量中
+- [**112**Star][2y] [Py] [orange-cyberdefense/fenrir-ocd](https://github.com/orange-cyberdefense/fenrir-ocd)
- [**112**Star][11m] [C] [opsxcq/docker-tor-hiddenservice-nginx](https://github.com/opsxcq/docker-tor-hiddenservice-nginx) Easily setup a hidden service inside the Tor network
- [**112**Star][5y] [opendns/public-domain-lists](https://github.com/opendns/public-domain-lists) OpenDNS public domain lists of domain names for training/testing classifiers
+- [**112**Star][6m] [C++] [nospaceships/node-raw-socket](https://github.com/nospaceships/node-raw-socket) Raw sockets for Node.js.
- [**112**Star][3y] [netbiosx/pentest-bookmarks](https://github.com/netbiosx/pentest-bookmarks) Database of websites for penetration testing
- [**112**Star][3y] [Py] [mthbernardes/artlas](https://github.com/mthbernardes/artlas) Apache Real Time Logs Analyzer System
-- [**112**Star][10m] [HTML] [mpgn/byp-sop](https://github.com/mpgn/byp-sop) 🏴☠️ Bypass Same Origin Policy with DNS-rebinding to retrieve local server files 🏴☠️
- [**112**Star][6y] [C] [mncoppola/rpef](https://github.com/mncoppola/rpef) Abstracts and expedites the process of backdooring stock firmware images for consumer/SOHO routers
+- [**112**Star][6d] [Java] [mkopylec/charon-spring-boot-starter](https://github.com/mkopylec/charon-spring-boot-starter) Reverse proxy implementation in form of a Spring Boot starter.
- [**112**Star][5y] [C] [mirror/reactos](https://github.com/mirror/reactos) svn://svn.reactos.org/reactos/trunk
+- [**112**Star][8m] [marcosvalle/awesome-windows-red-team](https://github.com/marcosvalle/awesome-windows-red-team) A curated list of awesome Windows frameworks, libraries, software and resources for Red Teams
- [**112**Star][4y] [Java] [ledgerhq/ledger-javacard](https://github.com/ledgerhq/ledger-javacard) Ledger Unplugged - Java Card implementation of Ledger Bitcoin Hardware Wallet
-- [**112**Star][7m] [Py] [jerrychan807/wspih](https://github.com/jerrychan807/wspih) Website Sensitive Personal Information Hunter 网站个人敏感信息文件扫描器
-- [**112**Star][7m] [C] [jakkarth/icmptx](https://github.com/jakkarth/icmptx) IP-over-ICMP tunnel
-- [**112**Star][27d] [Py] [hivesolutions/netius](https://github.com/hivesolutions/netius) Readable, simple and fast asynchronous non-blocking network apps
+- [**112**Star][29d] [Py] [hivesolutions/netius](https://github.com/hivesolutions/netius) Readable, simple and fast asynchronous non-blocking network apps
- [**112**Star][12m] [JS] [google/csp-evaluator](https://github.com/google/csp-evaluator) check if a Content Security Policy (CSP) serves as a strong mitigation against cross-site scripting attacks
- [**112**Star][11m] [Py] [ghost123gg/wep](https://github.com/ghost123gg/wep) A generator to weaponize Macro payloads that can evade EMET and utilises native VB migration.
-- [**112**Star][10m] [Py] [fupinglee/mypython](https://github.com/fupinglee/mypython) 一些常用的Python脚本
-- [**112**Star][6m] [fabionoth/awesome-cyber-security](https://github.com/fabionoth/awesome-cyber-security) A collection of awesome software, libraries, documents, books, resources and cools stuffs about security.
-- [**112**Star][6y] [edthamm/lootbooty](https://github.com/edthamm/lootbooty) WIreless Hacking Tools
-- [**112**Star][7m] [C++] [dragonquesthero/pubg-pak-hacker](https://github.com/dragonquesthero/pubg-pak-hacker) use windows kernel deriver hidden file and itself to Bypass BE
+- [**112**Star][1y] [funnykun/nessusreportinchinese](https://github.com/funnykun/nessusreportinchinese) 半自动化将 Nessus 英文报告(csv格式)生成中文 excel ,中文漏洞库已有700多条常见漏洞,后续再进一步加上新漏洞自动翻译,实现全自动化
- [**112**Star][4y] [Py] [ddcc/microparse](https://github.com/ddcc/microparse) Microcode parser for AMD, Intel, and VIA processors
-- [**112**Star][4y] [C++] [chengchengcc/ark-tools](https://github.com/chengchengcc/ark-tools) Windows Ark tools and demo
- [**112**Star][3y] [C++] [brock7/xdbg](https://github.com/brock7/xdbg) Open-source user-mode Anti-Anti-Debug plugin for x64dbg & cheatengine.
- [**112**Star][1y] [Py] [blueudp/dorkme](https://github.com/blueudp/dorkme) [WORKING IN V2, WITH PROXIES, CUSTOM USER AGENT... TO MUCH BETTER!]DorkMe is a tool designed with the purpose of making easier the searching of vulnerabilities with Google Dorks, such as SQL Injection vulnerabilities.
- [**112**Star][7m] [C++] [arno0x/tcprelayinjecter](https://github.com/arno0x/tcprelayinjecter) Tool for injecting a "TCP Relay" managed assembly into unmanaged processes
- [**112**Star][4y] [Py] [androidsecuritytools/lobotomy](https://github.com/androidsecuritytools/lobotomy) Android Security Toolkit
-- [**112**Star][5m] [Py] [andreafioraldi/angrgdb](https://github.com/andreafioraldi/angrgdb) Use angr inside GDB. Create an angr state from the current debugger state.
+- [**112**Star][6m] [Py] [andreafioraldi/angrgdb](https://github.com/andreafioraldi/angrgdb) Use angr inside GDB. Create an angr state from the current debugger state.
+- [**112**Star][1y] [Py] [alienvault-otx/yabin](https://github.com/alienvault-otx/yabin) A Yara rule generator for finding related samples and hunting
- [**112**Star][4y] [C++] [agwa/titus](https://github.com/agwa/titus) Totally Isolated TLS Unwrapping Server
+- [**112**Star][5y] [C++] [adamkramer/dll_hijack_detect](https://github.com/adamkramer/dll_hijack_detect) Detects DLL hijacking in running processes on Windows systems
+- [**112**Star][2y] [Py] [0x27/gitpass](https://github.com/0x27/gitpass) Open Source Your Password (Mismanagement)!
+- [**111**Star][12d] [Java] [tidesec/decrypt_weblogic_password](https://github.com/tidesec/decrypt_weblogic_password) 搜集了市面上绝大部分weblogic解密方式,整理了7种解密weblogic的方法及响应工具。
+- [**111**Star][6y] [Ruby] [spiderlabs/beef_injection_framework](https://github.com/spiderlabs/beef_injection_framework) Inject beef hooks into HTTP traffic and track hooked systems from cmdline
+- [**111**Star][10d] [CSS] [woj-ciech/kamerka-gui](https://github.com/woj-ciech/kamerka-gui) Ultimate Internet of Things/Industrial Control Systems reconnaissance tool.
- [**111**Star][4y] [C] [nsacyber/maplesyrup](https://github.com/nsacyber/Maplesyrup) Assesses CPU security of embedded devices. #nsacyber
-- [**111**Star][12d] [Rust] [zcash/librustzcash](https://github.com/zcash/librustzcash) Rust-language assets for Zcash
-- [**111**Star][3y] [C++] [yanncam/exe2powershell](https://github.com/yanncam/exe2powershell) exe2powershell - exe2bat reborn for modern Windows
-- [**111**Star][3m] [C++] [x64dbg/scripts](https://github.com/x64dbg/scripts) A collection of x64dbg scripts. Feel free to submit a pull request to add your script.
+- [**111**Star][7m] [Py] [w-digital-scanner/w12scan-client](https://github.com/w-digital-scanner/w12scan-client) 网络资产搜索发现引擎,w12scan 扫描端程序
+- [**111**Star][4m] [C] [zyw-200/firmafl](https://github.com/zyw-200/firmafl) FIRM-AFL is the first high-throughput greybox fuzzer for IoT firmware.
- [**111**Star][6m] [Py] [webarx-security/wpbullet](https://github.com/webarx-security/wpbullet) A static code analysis for WordPress (and PHP)
-- [**111**Star][3y] [PowerShell] [vletoux/ntlminjector](https://github.com/vletoux/ntlminjector) In case you didn't now how to restore the user password after a password reset (get the previous hash with DCSync)
+- [**111**Star][3y] [PS] [vletoux/ntlminjector](https://github.com/vletoux/ntlminjector) In case you didn't now how to restore the user password after a password reset (get the previous hash with DCSync)
- [**111**Star][2y] [Py] [tothi/pwn-hisilicon-dvr](https://github.com/tothi/pwn-hisilicon-dvr)
-- [**111**Star][7y] [Py] [sroberts/malwarehouse](https://github.com/sroberts/malwarehouse) A warehouse for your malware
-- [**111**Star][2y] [Py] [sithis993/crypter](https://github.com/sithis993/crypter) Crypter - Python-based builder and ransomware compiled to Windows executable using PyInstaller
- [**111**Star][1y] [Py] [seifreed/malware-scripts](https://github.com/seifreed/malware-scripts) Useful scripts related with malware
- [**111**Star][5m] [Py] [sagehack/cloud-buster](https://github.com/sagehack/cloud-buster) A Cloudflare resolver that works
-- [**111**Star][11m] [Py] [saaramar/35c3_modern_windows_userspace_exploitation](https://github.com/saaramar/35c3_modern_windows_userspace_exploitation)
-- [**111**Star][15d] [Clojure] [rm-hull/lein-nvd](https://github.com/rm-hull/lein-nvd) National Vulnerability Database dependency-checker plugin for Leiningen
+- [**111**Star][17d] [Clojure] [rm-hull/lein-nvd](https://github.com/rm-hull/lein-nvd) National Vulnerability Database dependency-checker plugin for Leiningen
- [**111**Star][2y] [Perl] [raikia/smbcrunch](https://github.com/raikia/smbcrunch) 3 tools that work together to simplify reconaissance of Windows File Shares
-- [**111**Star][10m] [Py] [plazmaz/sublist3r](https://github.com/plazmaz/sublist3r) Fast subdomains enumeration tool for penetration testers
-- [**111**Star][2y] [Py] [orange-cyberdefense/fenrir-ocd](https://github.com/orange-cyberdefense/fenrir-ocd)
+- [**111**Star][7m] [C++] [praetorian-code/vulcan](https://github.com/praetorian-code/vulcan) a tool to make it easy and fast to test various forms of injection
- [**111**Star][2y] [C] [openjailbreak/evasi0n6](https://github.com/openjailbreak/evasi0n6) Evasi0n6 Jailbreak by Evad3rs for iOS 6.0-6.1.2
- [**111**Star][12m] [PHP] [ollyxar/php-malware-detector](https://github.com/ollyxar/php-malware-detector) PHP malware detector
-- [**111**Star][6m] [C++] [nospaceships/node-raw-socket](https://github.com/nospaceships/node-raw-socket) Raw sockets for Node.js.
+- [**111**Star][2m] [Py] [nu1lctf/n1ctf-2019](https://github.com/nu1lctf/n1ctf-2019)
- [**111**Star][11m] [Shell] [mi-al/wifi-autopwner](https://github.com/mi-al/wifi-autopwner) script to automate searching and auditing Wi-Fi networks with weak security
+- [**111**Star][5m] [Shell] [merces/bashacks](https://github.com/merces/bashacks) Set of functions to increase productivity while hacking with Bash
+- [**111**Star][4y] [C] [mariovilas/shellcode_tools](https://github.com/mariovilas/shellcode_tools) Miscellaneous tools written in Python, mostly centered around shellcodes.
+- [**111**Star][2y] [Go] [lloydlabs/elf-strings](https://github.com/lloydlabs/elf-strings) read an ELF binary's string sections within a given binary. This is meant to be much like the strings UNIX utility, however is purpose built for ELF binaries.
+- [**111**Star][7m] [Shell] [leviathan36/trigmap](https://github.com/leviathan36/trigmap) A wrapper for Nmap to automate penetration testing
- [**111**Star][2y] [Py] [lcatro/php_source_audit_tools](https://github.com/lcatro/php_source_audit_tools) PHP 白盒分析工具,结合AST 和数据流跟踪分析代码,达到自动化白盒审计功能
- [**111**Star][3y] [Py] [kudelskisecurity/sgxfun](https://github.com/kudelskisecurity/sgxfun) SGX command-line tools and paper
+- [**111**Star][3m] [Java] [kakawait/cas-security-spring-boot-starter](https://github.com/kakawait/cas-security-spring-boot-starter) Spring boot starter for Apereo CAS client fully integrated with Spring security
- [**111**Star][11m] [C] [ionescu007/hdk](https://github.com/ionescu007/hdk) (unofficial) Hyper-V® Development Kit
- [**111**Star][6y] [CSS] [httphacker/gethead](https://github.com/httphacker/gethead) HTTP Header Analysis Vulnerability Tool
- [**111**Star][1y] [Py] [hook-s3c/cve-2018-11776-python-poc](https://github.com/hook-s3c/cve-2018-11776-python-poc) Working Python test and PoC for CVE-2018-11776, includes Docker lab
- [**111**Star][2y] [Py] [hook-s3c/blueborne-scanner](https://github.com/hook-s3c/blueborne-scanner) Bluetooth scanner for local devices that may be vulnerable to Blueborne exploit
-- [**111**Star][23d] [C#] [gaprogman/owaspheaders.core](https://github.com/gaprogman/owaspheaders.core) A .NET Core middleware for injecting the Owasp recommended HTTP Headers for increased security
-- [**111**Star][14d] [Py] [flyingcircusio/vulnix](https://github.com/flyingcircusio/vulnix) Vulnerability (CVE) scanner for Nix/NixOS.
+- [**111**Star][25d] [C#] [gaprogman/owaspheaders.core](https://github.com/gaprogman/owaspheaders.core) A .NET Core middleware for injecting the Owasp recommended HTTP Headers for increased security
+- [**111**Star][16d] [Py] [flyingcircusio/vulnix](https://github.com/flyingcircusio/vulnix) Vulnerability (CVE) scanner for Nix/NixOS.
+- [**111**Star][1y] [Java] [despector/despector](https://github.com/despector/despector) Java / Kotlin Decompiler and AST Library
- [**111**Star][1y] [C#] [damonmohammadbagher/meterpreter_payload_detection](https://github.com/damonmohammadbagher/meterpreter_payload_detection) Meterpreter_Payload_Detection.exe tool for detecting Meterpreter in memory like IPS-IDS and Forensics tool
- [**111**Star][3y] [Py] [cornell-brg/pydgin](https://github.com/cornell-brg/pydgin) A (Py)thon (D)SL for (G)enerating (In)struction set simulators.
- [**111**Star][3y] [Py] [codepr/creak](https://github.com/codepr/creak) Poison, reset, spoof, redirect MITM script
+- [**111**Star][2m] [checkmarx/js-scp](https://github.com/checkmarx/js-scp) JavaScript Secure Coding Practices guide
- [**111**Star][2y] [Py] [cfsworks/wavebird-reversing](https://github.com/cfsworks/wavebird-reversing) Reverse-engineering the WaveBird protocol for the betterment of mankind
- [**111**Star][2y] [Py] [cert-w/certitude](https://github.com/cert-w/certitude) The Seeker of IOC
-- [**111**Star][7m] [PowerShell] [audibleblink/gorsh](https://github.com/audibleblink/gorsh) A Golang Reverse Shell w/ a Tmux-driven psuedo-C2 Interface
-- [**111**Star][3y] [PowerShell] [arno0x/dnsdelivery](https://github.com/arno0x/dnsdelivery) DNSDelivery provides delivery and in memory execution of shellcode or .Net assembly using DNS requests delivery channel.
-- [**111**Star][1y] [Py] [alienvault-otx/yabin](https://github.com/alienvault-otx/yabin) A Yara rule generator for finding related samples and hunting
-- [**111**Star][5y] [C++] [adamkramer/dll_hijack_detect](https://github.com/adamkramer/dll_hijack_detect) Detects DLL hijacking in running processes on Windows systems
-- [**110**Star][29d] [C] [hasherezade/chimera_pe](https://github.com/hasherezade/chimera_pe) ChimeraPE (a PE injector type - alternative to: RunPE, ReflectiveLoader, etc) - a template for manual loading of EXE, loading imports payload-side
-- [**110**Star][6m] [PowerShell] [nsacyber/nsacyber.github.io](https://github.com/nsacyber/nsacyber.github.io) NSA Cybersecurity. Formerly known as NSA Information Assurance and the Information Assurance Directorate
-- [**110**Star][6y] [Ruby] [spiderlabs/beef_injection_framework](https://github.com/spiderlabs/beef_injection_framework) Inject beef hooks into HTTP traffic and track hooked systems from cmdline
+- [**111**Star][2y] [carloop/simulator](https://github.com/carloop/simulator) CAN bus simulator on the Rasperry Pi
+- [**111**Star][8d] [Py] [brieflyx/ctf-pwns](https://github.com/brieflyx/ctf-pwns) Some pwn challenges selected for training and education.
+- [**111**Star][2m] [Py] [bishopfox/zigdiggity](https://github.com/bishopfox/zigdiggity) A ZigBee hacking toolkit by Bishop Fox
+- [**111**Star][1y] [JS] [austintgriffith/bouncer-proxy](https://github.com/austintgriffith/bouncer-proxy) 👮🏻
+- [**111**Star][7m] [PS] [audibleblink/gorsh](https://github.com/audibleblink/gorsh) A Golang Reverse Shell w/ a Tmux-driven psuedo-C2 Interface
+- [**111**Star][3y] [PS] [arno0x/dnsdelivery](https://github.com/arno0x/dnsdelivery) DNSDelivery provides delivery and in memory execution of shellcode or .Net assembly using DNS requests delivery channel.
+- [**111**Star][2y] [Shell] [adrelanos/vpn-firewall](https://github.com/adrelanos/vpn-firewall) Leak Protection (Fail Safe Mechanism) for (Open)VPN
+- [**110**Star][1m] [C] [hasherezade/chimera_pe](https://github.com/hasherezade/chimera_pe) ChimeraPE (a PE injector type - alternative to: RunPE, ReflectiveLoader, etc) - a template for manual loading of EXE, loading imports payload-side
+- [**110**Star][3m] [suricata-rules/suricata-rules](https://github.com/suricata-rules/suricata-rules) Suricata IDS rules
- [**110**Star][3m] [C++] [barakat/cve-2019-16098](https://github.com/barakat/cve-2019-16098) Local privilege escalation PoC exploit for CVE-2019-16098
- [**110**Star][1m] [Py] [yuawn/ctf](https://github.com/yuawn/CTF) CTF write-ups and some wargame sites write-ups.
-- [**110**Star][4m] [C] [zyw-200/firmafl](https://github.com/zyw-200/firmafl) FIRM-AFL is the first high-throughput greybox fuzzer for IoT firmware.
+- [**110**Star][2y] [optixal/cehv10-notes](https://github.com/Optixal/CEHv10-Notes)
+- [**110**Star][8d] [Py] [bit4woo/code2sec.com](https://github.com/bit4woo/code2sec.com) xmind\code\articles for my personal blog 个人博客上的资源备份存储,也是个人分享的汇总
- [**110**Star][2y] [Smali] [xxxyanchenxxx/sigkill](https://github.com/xxxyanchenxxx/sigkill) 一键绕过App签名验证
- [**110**Star][2y] [Java] [x-ai/burpunlimitedre](https://github.com/x-ai/burpunlimitedre) This project !replace! BurpUnlimited of depend (BurpSutie version 1.7.27). It is NOT intended to replace them!
-- [**110**Star][8m] [C] [wbenny/ksocket](https://github.com/wbenny/ksocket) KSOCKET provides a very basic example how to make a network connections in the Windows Driver by using WSK
- [**110**Star][2y] [JS] [voidsec/webrtc-leak](https://github.com/voidsec/webrtc-leak) Check if your VPN leaks your IP address via the WebRTC technology
+- [**110**Star][1y] [Py] [unixfreak0037/officeparser](https://github.com/unixfreak0037/officeparser) Extract embedded files and macros from office documents.
+- [**110**Star][5m] [Go] [sudosammy/knary](https://github.com/sudosammy/knary) A simple HTTP(S) and DNS Canary bot with Slack/Discord/MS Teams & Pushover support
- [**110**Star][9m] [C] [strivexjun/memorymodulepp](https://github.com/strivexjun/memorymodulepp) Library to load a DLL from memory
- [**110**Star][2m] [C] [sipcapture/captagent](https://github.com/sipcapture/captagent) 100% Open-Source Packet Capture Agent for HEP
-- [**110**Star][7m] [C] [siguza/imobax](https://github.com/siguza/imobax) iOS Mobile Backup Extractor
+- [**110**Star][2d] [Go] [sero-cash/go-sero](https://github.com/sero-cash/go-sero) The Total Solution for Blockchain with Privacy Protecting
- [**110**Star][5y] [Ruby] [sensepost/heartbleed-poc](https://github.com/sensepost/heartbleed-poc) Test for SSL heartbeat vulnerability (CVE-2014-0160)
+- [**110**Star][10d] [C] [scribery/tlog](https://github.com/scribery/tlog) Terminal I/O logger
- [**110**Star][3y] [Py] [samgranger/eqgrp](https://github.com/samgranger/eqgrp) Mirror
-- [**110**Star][2y] [Objective-C] [rozbo/ios-pubgm-hack](https://github.com/rozbo/ios-pubgm-hack) iOS吃鸡辅助
+- [**110**Star][2y] [ObjC] [rozbo/ios-pubgm-hack](https://github.com/rozbo/ios-pubgm-hack) iOS吃鸡辅助
- [**110**Star][8m] [rose-compiler/rose-develop](https://github.com/rose-compiler/rose-develop) The latest development version of rose. It may not pass all regression tests.
-- [**110**Star][1y] [ridter/cs_chinese_support](https://github.com/ridter/cs_chinese_support) Cobalt strike 修改支持回显中文。
-- [**110**Star][7m] [C++] [praetorian-code/vulcan](https://github.com/praetorian-code/vulcan) a tool to make it easy and fast to test various forms of injection
+- [**110**Star][17d] [PS] [dsccommunity/networkingdsc](https://github.com/dsccommunity/NetworkingDsc)
- [**110**Star][3y] [JS] [nccgroup/typofinder](https://github.com/nccgroup/typofinder) A finder of domain typos showing country of IP address
-- [**110**Star][5m] [Java] [mkopylec/charon-spring-boot-starter](https://github.com/mkopylec/charon-spring-boot-starter) Reverse proxy implementation in form of a Spring Boot starter.
-- [**110**Star][5m] [Shell] [merces/bashacks](https://github.com/merces/bashacks) Set of functions to increase productivity while hacking with Bash
- [**110**Star][1y] [Shell] [mattymcfatty/honeypi](https://github.com/mattymcfatty/honeypi)
-- [**110**Star][4y] [C] [mariovilas/shellcode_tools](https://github.com/mariovilas/shellcode_tools) Miscellaneous tools written in Python, mostly centered around shellcodes.
-- [**110**Star][2y] [Go] [lloydlabs/elf-strings](https://github.com/lloydlabs/elf-strings) read an ELF binary's string sections within a given binary. This is meant to be much like the strings UNIX utility, however is purpose built for ELF binaries.
-- [**110**Star][7m] [Shell] [leviathan36/trigmap](https://github.com/leviathan36/trigmap) A wrapper for Nmap to automate penetration testing
-- [**110**Star][3m] [Java] [kakawait/cas-security-spring-boot-starter](https://github.com/kakawait/cas-security-spring-boot-starter) Spring boot starter for Apereo CAS client fully integrated with Spring security
+- [**110**Star][1y] [C#] [malcomvetter/csexec](https://github.com/malcomvetter/csexec) An implementation of PSExec in C#
- [**110**Star][8m] [C] [jwbensley/etherate](https://github.com/jwbensley/etherate) Linux CLI Ethernet and MPLS Testing Tool
-- [**110**Star][2m] [PowerShell] [jrentenaar/office-365-extractor](https://github.com/jrentenaar/office-365-extractor) The Office 365 Extractor is a tool that allows for complete and reliable extraction of the Unified Audit Log (UAL)
+- [**110**Star][2m] [PS] [jrentenaar/office-365-extractor](https://github.com/jrentenaar/office-365-extractor) The Office 365 Extractor is a tool that allows for complete and reliable extraction of the Unified Audit Log (UAL)
- [**110**Star][7y] [Py] [jgeralnik/pytroj](https://github.com/jgeralnik/pytroj) A tool for infected .pyc files with arbitrary code that spreads out to infect all other .pyc files
-- [**110**Star][29d] [C] [hasherezade/chimera_pe](https://github.com/hasherezade/chimera_pe) ChimeraPE (a PE injector type - alternative to: RunPE, ReflectiveLoader, etc) - a template for manual loading of EXE, loading imports payload-side
+- [**110**Star][1m] [C] [hasherezade/chimera_pe](https://github.com/hasherezade/chimera_pe) ChimeraPE (a PE injector type - alternative to: RunPE, ReflectiveLoader, etc) - a template for manual loading of EXE, loading imports payload-side
+- [**110**Star][3m] [Py] [h0nus/qrgen](https://github.com/h0nus/qrgen) Simple script for generating Malformed QRCodes.
- [**110**Star][3y] [JS] [fransr/template-generator](https://github.com/fransr/template-generator) A simple variable based template editor using handlebarjs+strapdownjs. The idea is to use variables in markdown based files to easily replace the variables with content. Data is saved temporarily in local storage. PHP is only needed to generate the list of files in the dropdown of templates.
- [**110**Star][2y] [Py] [fox-it/danderspritz-evtx](https://github.com/fox-it/danderspritz-evtx) Parse evtx files and detect use of the DanderSpritz eventlogedit module
+- [**110**Star][3y] [HTML] [dxa4481/xssjacking](https://github.com/dxa4481/xssjacking) Abusing Self-XSS and Clickjacking to trigger XSS
- [**110**Star][3m] [Java] [dogangcr/vulnerable-sso](https://github.com/dogangcr/vulnerable-sso) vulnerable single sign on
- [**110**Star][2y] [C++] [codewatchorg/sidestep](https://github.com/codewatchorg/sidestep) Yet another AV evasion tool
-- [**110**Star][2m] [checkmarx/js-scp](https://github.com/checkmarx/js-scp) JavaScript Secure Coding Practices guide
- [**110**Star][8m] [Py] [chaitanyaharitash/kimi](https://github.com/chaitanyaharitash/kimi) Script to generate malicious debian packages (debain trojans).
-- [**110**Star][2y] [carloop/simulator](https://github.com/carloop/simulator) CAN bus simulator on the Rasperry Pi
- [**110**Star][7y] [C++] [abhisek/pe-loader-sample](https://github.com/abhisek/pe-loader-sample) Proof of concept implementation of in-memory PE Loader based on ReflectiveDLLInjection Technique
- [**110**Star][4y] [Py] [1n3/xsstracer](https://github.com/1n3/xsstracer) A small python script to check for Cross-Site Tracing (XST)
-- [**109**Star][5m] [Go] [v2ray/ext](https://github.com/v2ray/ext) Utilities to support Project V
-- [**109**Star][2m] [C++] [outflanknl/recon-ad](https://github.com/outflanknl/recon-ad) Recon-AD, an AD recon tool based on ADSI and reflective DLL’s
+- [**109**Star][3d] [C] [wifiphisher/roguehostapd](https://github.com/wifiphisher/roguehostapd) Hostapd fork including Wi-Fi attacks and providing Python bindings with ctypes.
+- [**109**Star][21d] [SourcePawn] [shavitush/bhoptimer](https://github.com/shavitush/bhoptimer) A bunnyhop timer plugin for Counter-Strike: Source, Counter-Strike: Global Offensive and Team Fortress 2.
+- [**109**Star][4m] [PHP] [vvmelody/ctf-web-challenges](https://github.com/vvmelody/ctf-web-challenges)
- [**109**Star][1y] [Py] [meizjm3i/ctf-challenge](https://github.com/meizjm3i/CTF-Challenge) CTF题目收集
-- [**109**Star][3m] [Py] [bit4woo/code2sec.com](https://github.com/bit4woo/code2sec.com) xmind\code\articles for my personal blog 个人博客上的资源备份存储,也是个人分享的汇总
-- [**109**Star][13d] [C] [zmrbak/pcwechathook](https://github.com/zmrbak/pcwechathook) 云课堂《2019 PC微信 探秘》示例代码
+- [**109**Star][9m] [Shell] [xvass/vscan](https://github.com/xvass/vscan) vulnerability scanner tool using nmap and nse scripts
+- [**109**Star][8m] [C] [wbenny/ksocket](https://github.com/wbenny/ksocket) KSOCKET provides a very basic example how to make a network connections in the Windows Driver by using WSK
- [**109**Star][2y] [C++] [vegard/prog-fuzz](https://github.com/vegard/prog-fuzz) Compiler/source code fuzzing tool using AFL instrumentation
-- [**109**Star][1y] [Py] [unixfreak0037/officeparser](https://github.com/unixfreak0037/officeparser) Extract embedded files and macros from office documents.
- [**109**Star][1y] [C] [twelvesec/passcat](https://github.com/twelvesec/passcat) Passwords Recovery Tool
-- [**109**Star][5m] [Go] [sudosammy/knary](https://github.com/sudosammy/knary) A simple HTTP(S) and DNS Canary bot with Slack/Discord/MS Teams & Pushover support
+- [**109**Star][3y] [HTML] [theori-io/cve-2016-0189](https://github.com/theori-io/cve-2016-0189) Proof-of-Concept exploit for CVE-2016-0189 (VBScript Memory Corruption in IE11)
+- [**109**Star][7m] [C] [siguza/imobax](https://github.com/siguza/imobax) iOS Mobile Backup Extractor
- [**109**Star][2y] [C] [securestate/syringe](https://github.com/securestate/syringe) A General Purpose DLL & Code Injection Utility
-- [**109**Star][13d] [C] [scribery/tlog](https://github.com/scribery/tlog) Terminal I/O logger
+- [**109**Star][29d] [Ruby] [rapid7/metasploit-omnibus](https://github.com/rapid7/metasploit-omnibus) Packaging metasploit-framework with omnibus
- [**109**Star][4m] [Shell] [qax-a-team/weblogicenvironment](https://github.com/qax-a-team/weblogicenvironment) Weblogic环境搭建工具
-- [**109**Star][15d] [PowerShell] [dsccommunity/networkingdsc](https://github.com/dsccommunity/NetworkingDsc)
+- [**109**Star][2y] [PS] [proxb/powershell_scripts](https://github.com/proxb/powershell_scripts) Miscellaneous scripts for things that I have done; more scripts will arrive as I get time to update this repo.
- [**109**Star][2y] [C] [pbatard/bootimg-tools](https://github.com/pbatard/bootimg-tools) Android boot.img creation and extraction tools [NOTE: This project is NO LONGER maintained]
- [**109**Star][2y] [TeX] [p4t12ick/ypsilon](https://github.com/p4t12ick/ypsilon) Automated Use Case Testing
- [**109**Star][5m] [C++] [niklasb/hack2win-chrome](https://github.com/niklasb/hack2win-chrome) This is collaborative work of Ned Williamson and Niklas Baumstark
- [**109**Star][8m] [Py] [needmorecowbell/giggity](https://github.com/needmorecowbell/giggity) Wraps github api for openly available information about an organization, user, or repo
-- [**109**Star][4m] [Roff] [nb-star/security-operation](https://github.com/nb-star/security-operation) 安全运维技巧整理
-- [**109**Star][8m] [marcosvalle/awesome-windows-red-team](https://github.com/marcosvalle/awesome-windows-red-team) A curated list of awesome Windows frameworks, libraries, software and resources for Red Teams
-- [**109**Star][1y] [C#] [malcomvetter/csexec](https://github.com/malcomvetter/csexec) An implementation of PSExec in C#
+- [**109**Star][5m] [Roff] [nb-star/security-operation](https://github.com/nb-star/security-operation) 安全运维技巧整理
+- [**109**Star][3y] [Py] [moosedojo/mybff](https://github.com/moosedojo/mybff) myBFF - a Brute Force Framework
- [**109**Star][10m] [HTML] [m4cs/blackeye-python](https://github.com/m4cs/blackeye-python) BlackEye Phishing Kit in Python w Serveo Subdomain Creation | Educational Purposes Only
- [**109**Star][4y] [Ruby] [lubyruffy/wyquery](https://github.com/lubyruffy/wyquery) Wooyun查询系统
+- [**109**Star][8m] [linking12/tesla](https://github.com/linking12/tesla) Tesla is a gateway service that provides dynamic routing,waf,support spring cloud,gRPC,DUBBO and more.
- [**109**Star][1y] [C++] [joxeankoret/membugtool](https://github.com/joxeankoret/membugtool) A DBI tool to discover heap memory related bugs
+- [**109**Star][1y] [PHP] [joecampo/random-user-agent](https://github.com/joecampo/random-user-agent) Generate real random user-agents
- [**109**Star][3y] [Py] [jmortega/osint_tools_security_auditing](https://github.com/jmortega/osint_tools_security_auditing) osint_tools_security_auditing
- [**109**Star][1y] [Shell] [jgamblin/blackhat-macos-config](https://github.com/jgamblin/blackhat-macos-config) Configure Your Macbook For Blackhat
-- [**109**Star][4m] [Shell] [immmx/ubnt-mips-shadowsocks-libev](https://github.com/immmx/ubnt-mips-shadowsocks-libev) Cross complie shadowsocks for UBNT devices based on mipsel or mips64
- [**109**Star][2y] [C] [gvb84/pbscan](https://github.com/gvb84/pbscan) Faster and more efficient stateless SYN scanner and banner grabber due to userland TCP/IP stack usage.
- [**109**Star][1y] [Pascal] [greatis/anti-webminer](https://github.com/greatis/anti-webminer) Anti-WebMiner protects your PC against web cryptocurrency miners (JS scripts like Coinhive executed in the browser) by modifying Windows hosts file
- [**109**Star][2y] [C#] [goldshtn/etrace](https://github.com/goldshtn/etrace) Command-line tool for ETW tracing on files and real-time events
+- [**109**Star][5y] [fjvva/ecu-tool](https://github.com/fjvva/ecu-tool) Tool to communicate with vehicle ECUs based on Arduino
+- [**109**Star][3m] [JS] [elkentaro/kismetmobiledashboard](https://github.com/elkentaro/kismetmobiledashboard) Mobile UI for kismet
+- [**109**Star][11m] [Py] [ekultek/graffiti](https://github.com/ekultek/graffiti) A tool to generate obfuscated one liners to aid in penetration testing
- [**109**Star][6m] [JS] [detroitenglish/pw-pwnage-cfworker](https://github.com/detroitenglish/pw-pwnage-cfworker) Deploy a Cloudflare Worker to sanely score users' new passwords with zxcvbn AND check for matches against haveibeenpwned's 7.8+ billion breached accounts
- [**109**Star][2m] [C] [david-reguera-garcia-dreg/dbgchild](https://github.com/david-reguera-garcia-dreg/dbgchild) Debug Child Process Tool (auto attach)
+- [**109**Star][5m] [C++] [danielcardeenas/audiostego](https://github.com/danielcardeenas/audiostego) Audio file steganography. Hides files or text inside audio files and retrieve them automatically
- [**109**Star][12m] [JS] [cloudtracer/paskto](https://github.com/cloudtracer/paskto) Paskto - Passive Web Scanner
- [**109**Star][5y] [Py] [behindthefirewalls/parsero](https://github.com/behindthefirewalls/parsero) Parsero | Robots.txt audit tool
- [**109**Star][10m] [Py] [b3-v3r/hunner](https://github.com/b3-v3r/hunner) Hacking framework
-- [**108**Star][19d] [SourcePawn] [shavitush/bhoptimer](https://github.com/shavitush/bhoptimer) A bunnyhop timer plugin for Counter-Strike: Source, Counter-Strike: Global Offensive and Team Fortress 2.
-- [**108**Star][4m] [PHP] [vvmelody/ctf-web-challenges](https://github.com/vvmelody/ctf-web-challenges)
-- [**108**Star][2y] [optixal/cehv10-notes](https://github.com/Optixal/CEHv10-Notes)
-- [**108**Star][13d] [3had0w/fuzzing-dicts](https://github.com/3had0w/Fuzzing-Dicts) Web Security Dictionary
-- [**108**Star][9m] [Shell] [xvass/vscan](https://github.com/xvass/vscan) vulnerability scanner tool using nmap and nse scripts
-- [**108**Star][3y] [HTML] [theori-io/cve-2016-0189](https://github.com/theori-io/cve-2016-0189) Proof-of-Concept exploit for CVE-2016-0189 (VBScript Memory Corruption in IE11)
+- [**109**Star][2y] [C] [b-mueller/frida-detection-demo](https://github.com/b-mueller/frida-detection-demo) Some examples for detecting frida on Android
+- [**109**Star][6m] [Py] [anssi-fr/bmc-tools](https://github.com/anssi-fr/bmc-tools) RDP Bitmap Cache parser
+- [**109**Star][3m] [Py] [altjx/ipwn](https://github.com/altjx/ipwn)
+- [**108**Star][5m] [Go] [v2ray/ext](https://github.com/v2ray/ext) Utilities to support Project V
+- [**108**Star][7m] [C#] [virb3/de4dot-cex](https://github.com/virb3/de4dot-cex) de4dot deobfuscator with full support for vanilla ConfuserEx
+- [**108**Star][1y] [C] [fsecurelabs/xrulez](https://github.com/FSecureLABS/XRulez) A command line tool for creating malicious outlook rules
+- [**108**Star][3y] [vidar-team/hctf2016](https://github.com/vidar-team/HCTF2016) HCTF 2016 CHALLENGES
+- [**108**Star][15d] [3had0w/fuzzing-dicts](https://github.com/3had0w/Fuzzing-Dicts) Web Security Dictionary
+- [**108**Star][11m] [Py] [w3h/isf](https://github.com/w3h/isf) ISF(Industrial Security Exploitation Framework) is a exploitation framework based on Python.
- [**108**Star][3y] [Py] [souhardya/warchild](https://github.com/souhardya/warchild) War Child denial of service testing suite
-- [**108**Star][11d] [PHP] [sniperoj/attack-defense-challenges](https://github.com/sniperoj/attack-defense-challenges) Challenges of CTF Attack with Defense mode
+- [**108**Star][13d] [PHP] [sniperoj/attack-defense-challenges](https://github.com/sniperoj/attack-defense-challenges) Challenges of CTF Attack with Defense mode
- [**108**Star][3y] [JS] [sensepost/wadi](https://github.com/sensepost/wadi) Wadi Fuzzing Harness
-- [**108**Star][27d] [Ruby] [rapid7/metasploit-omnibus](https://github.com/rapid7/metasploit-omnibus) Packaging metasploit-framework with omnibus
-- [**108**Star][2y] [PowerShell] [proxb/powershell_scripts](https://github.com/proxb/powershell_scripts) Miscellaneous scripts for things that I have done; more scripts will arrive as I get time to update this repo.
+- [**108**Star][8m] [Py] [rootbsd/fridump3](https://github.com/rootbsd/fridump3) A universal memory dumper using Frida for Python 3
+- [**108**Star][1m] [C] [rohanpadhye/fuzzfactory](https://github.com/rohanpadhye/fuzzfactory) Domain-Specific Fuzzing with Waypoints
+- [**108**Star][3m] [JS] [rapid7/awsaml](https://github.com/rapid7/awsaml) Awsaml is an application for providing automatically rotated temporary AWS credentials.
- [**108**Star][3y] [projectretroscope/retroscope](https://github.com/projectretroscope/retroscope) Public release of the RetroScope Android memory forensics framework
-- [**108**Star][2y] [Shell] [pimps/wsuxploit](https://github.com/pimps/wsuxploit) wsuxploit:MiTM 漏洞利用脚本,用于将“假冒”更新注入到非 SSL WSUS 流量中
-- [**108**Star][2m] [Py] [nu1lctf/n1ctf-2019](https://github.com/nu1lctf/n1ctf-2019)
+- [**108**Star][2m] [Assembly] [platypew/picoctf-2018-writeup](https://github.com/platypew/picoctf-2018-writeup) Writeup for picoCTF 2018
- [**108**Star][10m] [Py] [mpgn/cve-2019-7238](https://github.com/mpgn/cve-2019-7238) 🐱💻 Poc of CVE-2019-7238 - Nexus Repository Manager 3 Remote Code Execution 🐱💻
-- [**108**Star][3y] [Py] [moosedojo/mybff](https://github.com/moosedojo/mybff) myBFF - a Brute Force Framework
+- [**108**Star][6m] [Py] [matiskay/html-similarity](https://github.com/matiskay/html-similarity) Compare html similarity using structural and style metrics
+- [**108**Star][5m] [C++] [mactec0/kernelmode-manual-mapping-through-iat](https://github.com/mactec0/kernelmode-manual-mapping-through-iat) Manual mapping without creating any threads, with rw only access
- [**108**Star][10m] [Py] [m4cs/darkspiritz](https://github.com/m4cs/darkspiritz)
-- [**108**Star][1m] [C] [libyal/libbde](https://github.com/libyal/libbde) Library and tools to access the BitLocker Drive Encryption (BDE) encrypted volumes
-- [**108**Star][1y] [PHP] [joecampo/random-user-agent](https://github.com/joecampo/random-user-agent) Generate real random user-agents
-- [**108**Star][3m] [Py] [h0nus/qrgen](https://github.com/h0nus/qrgen) Simple script for generating Malformed QRCodes.
+- [**108**Star][3d] [C] [libyal/libbde](https://github.com/libyal/libbde) Library and tools to access the BitLocker Drive Encryption (BDE) encrypted volumes
+- [**108**Star][4m] [Shell] [immmx/ubnt-mips-shadowsocks-libev](https://github.com/immmx/ubnt-mips-shadowsocks-libev) Cross complie shadowsocks for UBNT devices based on mipsel or mips64
+- [**108**Star][2y] [Py] [hansesecure/exploitdev](https://github.com/hansesecure/exploitdev)
- [**108**Star][2y] [geosn0w/myriam](https://github.com/geosn0w/myriam) A vulnerable iOS App with Security Challenges for the Security Researcher inside you.
-- [**108**Star][1y] [funnykun/nessusreportinchinese](https://github.com/funnykun/nessusreportinchinese) 半自动化将 Nessus 英文报告(csv格式)生成中文 excel ,中文漏洞库已有700多条常见漏洞,后续再进一步加上新漏洞自动翻译,实现全自动化
-- [**108**Star][9d] [C++] [frida/frida-node](https://github.com/frida/frida-node) Frida Node.js bindings
+- [**108**Star][6d] [C++] [frida/frida-node](https://github.com/frida/frida-node) Frida Node.js bindings
+- [**108**Star][18d] [Pascal] [fenix01/cheatengine-library](https://github.com/fenix01/cheatengine-library) Cheat Engine Library is based on CheatEngine a debugger and coding environment particularly aimed at games, but can also be used for other purposes like debugging applications and used in schools for teaching how computers work
+- [**108**Star][7m] [C++] [ez8-co/yapi](https://github.com/ez8-co/yapi) fusion injector that reduce differences between x64, wow64 and x86 processes
+- [**108**Star][7m] [Py] [evilsocket/ergo-pe-av](https://github.com/evilsocket/ergo-pe-av) 🧠 🦠 An artificial neural network and API to detect Windows malware, based on Ergo and LIEF.
- [**108**Star][3y] [C] [emptymonkey/shelljack](https://github.com/emptymonkey/shelljack) A keystroke / terminal logger for Linux.
- [**108**Star][4m] [Haxe] [empirectf/empirectf](https://github.com/empirectf/empirectf) EmpireCTF – write-ups, videos, capture the flag, cybersecurity
-- [**108**Star][3m] [JS] [elkentaro/kismetmobiledashboard](https://github.com/elkentaro/kismetmobiledashboard) Mobile UI for kismet
-- [**108**Star][3y] [HTML] [dxa4481/xssjacking](https://github.com/dxa4481/xssjacking) Abusing Self-XSS and Clickjacking to trigger XSS
-- [**108**Star][5m] [C++] [danielcardeenas/audiostego](https://github.com/danielcardeenas/audiostego) Audio file steganography. Hides files or text inside audio files and retrieve them automatically
- [**108**Star][2y] [Vim script] [chr4/sslsecure.vim](https://github.com/chr4/sslsecure.vim) Highlight insecure SSL configuration in Vim (works for all OpenSSL/ LibreSSL cipher strings, independent of the filetype)
-- [**108**Star][1m] [Py] [bishopfox/zigdiggity](https://github.com/bishopfox/zigdiggity) A ZigBee hacking toolkit by Bishop Fox
-- [**108**Star][2y] [C] [b-mueller/frida-detection-demo](https://github.com/b-mueller/frida-detection-demo) Some examples for detecting frida on Android
-- [**108**Star][6m] [Py] [anssi-fr/bmc-tools](https://github.com/anssi-fr/bmc-tools) RDP Bitmap Cache parser
-- [**108**Star][3m] [Py] [altjx/ipwn](https://github.com/altjx/ipwn)
-- [**107**Star][14d] [paralax/awesome-cybersecurity-internships](https://github.com/paralax/awesome-cybersecurity-internships) a list of cybersecurity internships
-- [**107**Star][6y] [Objective-C] [colemancda/wi-fi-crack](https://github.com/colemancda/wi-fi-crack) OS X GUI for Aircrack-NG
-- [**107**Star][12m] [C] [fsecurelabs/xrulez](https://github.com/FSecureLABS/XRulez) A command line tool for creating malicious outlook rules
-- [**107**Star][3y] [vidar-team/hctf2016](https://github.com/vidar-team/HCTF2016) HCTF 2016 CHALLENGES
-- [**107**Star][7m] [Py] [w-digital-scanner/w12scan-client](https://github.com/w-digital-scanner/w12scan-client) 网络资产搜索发现引擎,w12scan 扫描端程序
-- [**107**Star][30d] [Objective-C] [zydeco/aah](https://github.com/zydeco/aah) arm64 architecture handler
+- [**108**Star][7m] [binject/awesome-go-security](https://github.com/binject/awesome-go-security) A dedicated place for cool golang security projects
+- [**107**Star][17d] [paralax/awesome-cybersecurity-internships](https://github.com/paralax/awesome-cybersecurity-internships) a list of cybersecurity internships
+- [**107**Star][2d] [internetwache/ct_subdomains](https://github.com/internetwache/ct_subdomains) An hourly updated list of subdomains gathered from certificate transparency logs
+- [**107**Star][6m] [PS] [dafthack/check-localadminhash](https://github.com/dafthack/check-localadminhash) Check-LocalAdminHash is a PowerShell tool that attempts to authenticate to multiple hosts over either WMI or SMB using a password hash to determine if the provided credential is a local administrator. It's useful if you obtain a password hash for a user and want to see where they are local admin on a network. It is essentially a Frankenstein of …
+- [**107**Star][19d] [firmianay/security-paper](https://github.com/firmianay/security-paper) (与本人兴趣强相关的)各种安全or计算机资料收集
+- [**107**Star][14d] [Shell] [g666gle/basequery](https://github.com/g666gle/basequery) BaseQuery is a way to organize public combo-lists and data breaches in a way that you can easily search through everything
+- [**107**Star][4m] [Py] [xzkzdx/weixin-spider](https://github.com/xzkzdx/weixin-spider) 微信公众号爬虫,公众号历史文章,文章评论,文章阅读及在看数据,可视化web页面,可部署于Windows服务器。基于Python3之flask/mysql/redis/mitmproxy/pywin32等实现,高效微信爬虫,微信公众号爬虫,历史文章,文章评论,数据更新。
+- [**107**Star][6y] [ObjC] [colemancda/wi-fi-crack](https://github.com/colemancda/wi-fi-crack) OS X GUI for Aircrack-NG
+- [**107**Star][1m] [ObjC] [zydeco/aah](https://github.com/zydeco/aah) arm64 architecture handler
- [**107**Star][2y] [Shell] [xillwillx/cactustorch_ddeauto](https://github.com/xillwillx/cactustorch_ddeauto) OFFICE DDEAUTO Payload Generation script
- [**107**Star][1y] [PHP] [walkor/php-http-proxy](https://github.com/walkor/php-http-proxy) HTTP proxy written in PHP based on workerman.
-- [**107**Star][11m] [Py] [w3h/isf](https://github.com/w3h/isf) ISF(Industrial Security Exploitation Framework) is a exploitation framework based on Python.
- [**107**Star][6m] [Swift] [tuluobo/leiter](https://github.com/tuluobo/leiter) 一个基于 NEKit 的网络 Proxy App。
- [**107**Star][3y] [C++] [timeweb/ddosdetector](https://github.com/timeweb/ddosdetector) A flexible tool for analyzing network traffic and automation of the process of protection against DDoS attacks.
- [**107**Star][11m] [C++] [sidechannelmarvels/daredevil](https://github.com/sidechannelmarvels/daredevil) A tool to perform (higher-order) correlation power analysis attacks (CPA).
+- [**107**Star][5m] [JS] [ryanmarcus/dirty-json](https://github.com/ryanmarcus/dirty-json) A parser for invalid JSON
- [**107**Star][9m] [Emacs Lisp] [rubocop-hq/rubocop-emacs](https://github.com/rubocop-hq/rubocop-emacs) An Emacs interface for RuboCop
-- [**107**Star][7m] [Shell] [rpranshu/eternalview](https://github.com/rpranshu/eternalview) EternalView is an all in one basic information gathering and vulnerability assessment tool
-- [**107**Star][8m] [Py] [rootbsd/fridump3](https://github.com/rootbsd/fridump3) A universal memory dumper using Frida for Python 3
-- [**107**Star][6m] [PowerShell] [r4wd3r/rid-hijacking](https://github.com/r4wd3r/rid-hijacking) Windows RID Hijacking persistence technique
+- [**107**Star][8m] [Shell] [rpranshu/eternalview](https://github.com/rpranshu/eternalview) EternalView is an all in one basic information gathering and vulnerability assessment tool
+- [**107**Star][6m] [PS] [r4wd3r/rid-hijacking](https://github.com/r4wd3r/rid-hijacking) Windows RID Hijacking persistence technique
+- [**107**Star][2y] [Ruby] [porterhau5/bloodhound-owned](https://github.com/porterhau5/bloodhound-owned) A collection of files for adding and leveraging custom properties in BloodHound.
- [**107**Star][1y] [pgarba/switchidaproloader](https://github.com/pgarba/switchidaproloader) Loader for IDA Pro to support the Nintendo Switch NRO binaries
+- [**107**Star][2m] [JS] [p3nt4/nuages](https://github.com/p3nt4/nuages) A modular C2 framework
+- [**107**Star][1y] [PS] [p3nt4/invoke-tmpdavfs](https://github.com/p3nt4/invoke-tmpdavfs) Memory Backed Powershell WebDav Server
+- [**107**Star][3y] [C#] [p0cl4bs/hanzoinjection](https://github.com/p0cl4bs/hanzoinjection) injecting arbitrary codes in memory to bypass common antivirus solutions
- [**107**Star][2y] [Py] [orsinium/django-bruteforce-protection](https://github.com/orsinium/django-bruteforce-protection) Bruteforce protection for Django projects based on Redis. Simple, powerful, extendable.
- [**107**Star][1y] [JS] [offdev/zwsp-steg-js](https://github.com/offdev/zwsp-steg-js) 零宽度空间隐写术, 将隐藏的消息编码/解码为不可打印/可读的字符
-- [**107**Star][17d] [Py] [nasa/pvslib](https://github.com/nasa/pvslib) NASA PVS Library of Formal Developments
+- [**107**Star][19d] [Py] [nasa/pvslib](https://github.com/nasa/pvslib) NASA PVS Library of Formal Developments
- [**107**Star][8m] [C] [mudongliang/linuxflaw](https://github.com/mudongliang/linuxflaw) This repo records all the vulnerabilities of linux software I have reproduced in my local workspace
- [**107**Star][5y] [Py] [mspreitz/adel](https://github.com/mspreitz/adel) dumps all important SQLite Databases from a connected Android smartphone to the local disk and analyzes these files in a forensically accurate workflow
- [**107**Star][4y] [Py] [mozilla/garmr](https://github.com/mozilla/garmr) inspect the responses from websites for basic security requirements.
- [**107**Star][4y] [Py] [mit-ll/ll-fuzzer](https://github.com/mit-ll/ll-fuzzer) An automated NFC fuzzing framework for Android devices.
-- [**107**Star][26d] [Py] [misp/misp-warninglists](https://github.com/misp/misp-warninglists) Warning lists to inform users of MISP about potential false-positives or other information in indicators
+- [**107**Star][28d] [Py] [misp/misp-warninglists](https://github.com/misp/misp-warninglists) Warning lists to inform users of MISP about potential false-positives or other information in indicators
- [**107**Star][4y] [Py] [mdegrazia/sqlite-deleted-records-parser](https://github.com/mdegrazia/sqlite-deleted-records-parser) recover deleted entries in an SQLite database and places the output into either a TSV file or text file (-r)
- [**107**Star][3m] [C#] [matterpreter/shhmon](https://github.com/matterpreter/shhmon) Neutering Sysmon via driver unload
- [**107**Star][5y] [C] [malwaretech/tinyxpb](https://github.com/malwaretech/tinyxpb) Windows XP 32-Bit Bootkit
- [**107**Star][1y] [Py] [lizhongnian/btpanel-ss](https://github.com/lizhongnian/btpanel-ss) 基于宝塔Linux面板的shadowsocks可视化管理插件,本人博客,欢迎大家指导
+- [**107**Star][3d] [JS] [liyangready/mini-proxy](https://github.com/liyangready/mini-proxy) A very mini transparent proxy for http/https by NodeJS.Just like squid. 基于nodejs的迷你易用的proxy
- [**107**Star][3y] [liuchenx/surgeconfig](https://github.com/liuchenx/surgeconfig) surge app shadowsocks config
- [**107**Star][7m] [Py] [leoid/cve-2019-0708](https://github.com/leoid/cve-2019-0708) Only Hitting PoC [Tested on Windows Server 2008 r2]
+- [**107**Star][10d] [lattera/articles](https://github.com/lattera/articles) Various articles I've written
- [**107**Star][11m] [Py] [koush/efi-x99](https://github.com/koush/efi-x99) Hackintosh Guide: Gigabyte X99P-SLI, Intel 6950X, Nvidia Titan Xp
- [**107**Star][2y] [Go] [jthomas/serverless-pwned-passwords](https://github.com/jthomas/serverless-pwned-passwords) serverless-pwned-passwords:提供了1个API,用于从各种数据泄漏的巨大密码库中检查潜在密码
+- [**107**Star][3y] [ios-reverse-engineering-dev/swift-apps-reverse-engineering](https://github.com/ios-reverse-engineering-dev/swift-apps-reverse-engineering) Swift Apps Reverse Engineering reading book
- [**107**Star][5y] [C] [ioactive/melkor_elf_fuzzer](https://github.com/ioactive/melkor_elf_fuzzer) Melkor is a very intuitive and easy-to-use ELF file format fuzzer to find functional and security bugs in ELF parsers.
- [**107**Star][2y] [Java] [realbearcat/oracle-weblogic-cve-2017-10271](https://github.com/RealBearcat/Oracle-WebLogic-CVE-2017-10271) WebLogic Wls-wsat XMLDecoder 反序列化
-- [**107**Star][6m] [C++] [ez8-co/yapi](https://github.com/ez8-co/yapi) fusion injector that reduce differences between x64, wow64 and x86 processes
-- [**107**Star][10m] [Py] [ekultek/graffiti](https://github.com/ekultek/graffiti) A tool to generate obfuscated one liners to aid in penetration testing
+- [**107**Star][11m] [hongrisec/ai-machine-learning-security](https://github.com/hongrisec/ai-machine-learning-security) 一个关于人工智能渗透测试分析系列
+- [**107**Star][2y] [C] [holbertonschool/hack-the-virtual-memory](https://github.com/holbertonschool/hack-the-virtual-memory) This is a series of small articles / tutorials based around virtual memory. The goal is to learn some CS basics, but in a different and more practical way.
+- [**107**Star][1m] [Py] [ethereum/eth-tester](https://github.com/ethereum/eth-tester) Tool suite for testing ethereum applications.
- [**107**Star][1y] [Py] [egaus/maliciousmacrobot](https://github.com/egaus/maliciousmacrobot) Malicious Macro Bot Project
-- [**107**Star][1y] [Java] [despector/despector](https://github.com/despector/despector) Java / Kotlin Decompiler and AST Library
-- [**107**Star][2m] [Py] [danielplohmann/apiscout](https://github.com/danielplohmann/apiscout) simplifying Windows API import recovery on arbitrary memory dumps
+- [**107**Star][2y] [JS] [eboda/34c3ctf](https://github.com/eboda/34c3ctf) Challenge Sources & Exploits for the 34C3 CTF
+- [**107**Star][6m] [C#] [dannythesloth/vanillarat](https://github.com/dannythesloth/vanillarat) VanillaRat is an advanced remote administration tool completely coded in C# for Windows.
+- [**107**Star][4d] [Py] [danielplohmann/apiscout](https://github.com/danielplohmann/apiscout) simplifying Windows API import recovery on arbitrary memory dumps
+- [**107**Star][16d] [HTML] [cj123/canijailbreak.com](https://github.com/cj123/canijailbreak.com) a website which tells you whether you can jailbreak your iOS device.
- [**107**Star][7m] [Java] [c0d3p1ut0s/cve-2019-12086-jackson-databind-file-read](https://github.com/c0d3p1ut0s/cve-2019-12086-jackson-databind-file-read)
+- [**107**Star][2d] [PHP] [blackhacker511/blacknet](https://github.com/blackhacker511/blacknet) Free Advanced Windows BotNET with Secure PHP Panel
- [**107**Star][4m] [Py] [atlas0fd00m/cancat](https://github.com/atlas0fd00m/cancat) swiss army knife of Controller Area Networks (CAN) often used in cars and building automation, etc...
-- [**106**Star][9d] [Py] [vulhub/metadockers](https://github.com/vulhub/metadockers) Responsible for visualization the vulhub and docker
-- [**106**Star][12d] [portswigger/xss-cheatsheet-data](https://github.com/portswigger/xss-cheatsheet-data) This repository contains all the XSS cheatsheet data to allow contributions from the community.
-- [**106**Star][3m] [suricata-rules/suricata-rules](https://github.com/suricata-rules/suricata-rules) Suricata IDS rules
+- [**107**Star][4d] [Shell] [anandkumar11u/oscp-60days](https://github.com/anandkumar11u/oscp-60days) OSCP All Tools are Here ...!! ***
+- [**106**Star][11m] [Swift] [lettleprince/qladder](https://github.com/lettleprince/qladder) QLadder is a project for iOS client. It uses shadowsocks as server-side.
+- [**106**Star][11d] [Py] [vulhub/metadockers](https://github.com/vulhub/metadockers) Responsible for visualization the vulhub and docker
+- [**106**Star][18d] [Java] [astrelsky/ghidra-cpp-class-analyzer](https://github.com/astrelsky/ghidra-cpp-class-analyzer) Ghidra C++ Class and Run Time Type Information Analyzer
+- [**106**Star][2y] [Py] [cylance/introductiontomachinelearningforsecuritypros](https://github.com/cylance/IntroductionToMachineLearningForSecurityPros) Example code for our book Introduction to Artificial Intelligence for Security Professionals
+- [**106**Star][3y] [Py] [opensourcesec/cirtkit](https://github.com/opensourcesec/CIRTKit) Tools for the Computer Incident Response Team
- [**106**Star][2y] [C++] [zerosum0x0/puppetstrings](https://github.com/zerosum0x0/puppetstrings) Hitch a free ride to Ring 0 on Windows
- [**106**Star][4y] [C] [xobs/fernly](https://github.com/xobs/fernly) a simple operating system designed for use in the reverse engineering of the Fernvale CPU
- [**106**Star][2y] [Py] [xme/toolbox](https://github.com/xme/toolbox) Miscelaneous useful scripts for my day to day projects
- [**106**Star][9m] [webbreacher/orcs](https://github.com/webbreacher/orcs) OSINT Resource Classification System
- [**106**Star][6y] [Py] [uber/py-find-injection](https://github.com/uber/py-find-injection) Look for SQL injection attacks in python source code
+- [**106**Star][17d] [Py] [testerting/hacker101-ctf](https://github.com/testerting/hacker101-ctf) Hacker101 CTF Writeup
+- [**106**Star][3m] [C++] [tandasat/simplesvmhook](https://github.com/tandasat/simplesvmhook) SimpleSvmHook is a research purpose hypervisor for Windows on AMD processors.
+- [**106**Star][2y] [Py] [sparksharly/dl_for_xss](https://github.com/sparksharly/dl_for_xss) Deep learnning for detection with xss
- [**106**Star][2y] [Py] [shogunlab/shuriken](https://github.com/shogunlab/shuriken) Cross-Site Scripting (XSS) command line tool for testing lists of XSS payloads on web apps.
-- [**106**Star][26d] [Java] [sable/heros](https://github.com/sable/heros) IFDS/IDE Solver for Soot
-- [**106**Star][5m] [JS] [ryanmarcus/dirty-json](https://github.com/ryanmarcus/dirty-json) A parser for invalid JSON
+- [**106**Star][28d] [Java] [sable/heros](https://github.com/sable/heros) IFDS/IDE Solver for Soot
- [**106**Star][4y] [C] [rootkitsmm/win32k-fuzzer](https://github.com/rootkitsmm/win32k-fuzzer) Fuzz and Detect "Use After Free" vulnerability in win32k.sys ( Heap based )
-- [**106**Star][2y] [Ruby] [porterhau5/bloodhound-owned](https://github.com/porterhau5/bloodhound-owned) A collection of files for adding and leveraging custom properties in BloodHound.
-- [**106**Star][2m] [Assembly] [platypew/picoctf-2018-writeup](https://github.com/platypew/picoctf-2018-writeup) Writeup for picoCTF 2018
-- [**106**Star][2m] [JS] [p3nt4/nuages](https://github.com/p3nt4/nuages) A modular C2 framework
-- [**106**Star][1y] [PowerShell] [p3nt4/invoke-tmpdavfs](https://github.com/p3nt4/invoke-tmpdavfs) Memory Backed Powershell WebDav Server
-- [**106**Star][2y] [Py] [mozilla/django-session-csrf](https://github.com/mozilla/django-session-csrf) CSRF protection for Django without cookies.
-- [**106**Star][6m] [Py] [matiskay/html-similarity](https://github.com/matiskay/html-similarity) Compare html similarity using structural and style metrics
+- [**106**Star][2m] [PHP] [realender/dwpa](https://github.com/realender/dwpa) Distributed WPA PSK auditor
+- [**106**Star][12d] [Py] [pavelrevak/pystlink](https://github.com/pavelrevak/pystlink) Python tool for flashing and debugging STM32 devices using ST-LINK/V2
+- [**106**Star][2m] [Py] [neatmonster/amie](https://github.com/neatmonster/amie) A Minimalist Instruction Extender for the ARM architecture and IDA Pro
+- [**106**Star][4y] [Go] [mattbostock/go-ldpreload-backdoor](https://github.com/mattbostock/go-ldpreload-backdoor) LD_PRELOAD libc hooking using Go
- [**106**Star][4y] [Py] [mapleray/proxy_pool](https://github.com/mapleray/proxy_pool) python 代理池
-- [**106**Star][5m] [C++] [mactec0/kernelmode-manual-mapping-through-iat](https://github.com/mactec0/kernelmode-manual-mapping-through-iat) Manual mapping without creating any threads, with rw only access
- [**106**Star][3y] [Py] [lingerhk/fshell](https://github.com/lingerhk/fshell) 基于机器学习的分布式webshell检测系统
-- [**106**Star][8d] [lattera/articles](https://github.com/lattera/articles) Various articles I've written
- [**106**Star][4y] [C] [kohsuke/com4j](https://github.com/kohsuke/com4j) Type-safe Java/COM binding
- [**106**Star][6y] [Java] [isecpartners/android-opendebug](https://github.com/isecpartners/android-opendebug) Make any application debuggable
-- [**106**Star][11m] [hongrisec/ai-machine-learning-security](https://github.com/hongrisec/ai-machine-learning-security) 一个关于人工智能渗透测试分析系列
-- [**106**Star][2y] [C] [holbertonschool/hack-the-virtual-memory](https://github.com/holbertonschool/hack-the-virtual-memory) This is a series of small articles / tutorials based around virtual memory. The goal is to learn some CS basics, but in a different and more practical way.
-- [**106**Star][2y] [Py] [hansesecure/exploitdev](https://github.com/hansesecure/exploitdev)
-- [**106**Star][14d] [Py] [hanc00l/some_pocsuite](https://github.com/hanc00l/some_pocsuite) 用于漏洞排查的pocsuite3验证POC代码
+- [**106**Star][2m] [Py] [ickerwx/tcpproxy](https://github.com/ickerwx/tcpproxy) Intercepting TCP proxy to modify raw TCP streams using modules on incoming or outgoing traffic
+- [**106**Star][16d] [Py] [hanc00l/some_pocsuite](https://github.com/hanc00l/some_pocsuite) 用于漏洞排查的pocsuite3验证POC代码
- [**106**Star][2y] [Py] [guedou/jupyter-radare2](https://github.com/guedou/jupyter-radare2) Just a simple radare2 Jupyter kernel
- [**106**Star][5m] [Py] [graph-x/davscan](https://github.com/graph-x/davscan) Fingerprints servers, finds exploits, scans WebDAV. May or may not also make coffee.
- [**106**Star][2m] [Perl] [gottburgm/exploits](https://github.com/gottburgm/exploits) Containing Self Made Perl Reproducers / PoC Codes
- [**106**Star][12m] [JS] [fpass/fpass](https://github.com/fpass/fpass) 类似于 LastPass的密码管理工具
- [**106**Star][1m] [Py] [flosell/trailscraper](https://github.com/flosell/trailscraper) A command-line tool to get valuable information out of AWS CloudTrail
-- [**106**Star][16d] [Pascal] [fenix01/cheatengine-library](https://github.com/fenix01/cheatengine-library) Cheat Engine Library is based on CheatEngine a debugger and coding environment particularly aimed at games, but can also be used for other purposes like debugging applications and used in schools for teaching how computers work
- [**106**Star][4y] [Perl] [fastvpseestiou/antidoto](https://github.com/fastvpseestiou/antidoto) Linux antimalware and antirootkit tool
- [**106**Star][2y] [Py] [falseen/pysocket](https://github.com/falseen/pysocket) 通过monkey patch动态修改 socket 的项目。在不修改源码的情况下给 socket 增加一些诸如限制客户端数量、前置代理之类的功能。让我们将 Monkey Patch 进行到底吧!
- [**106**Star][3y] [Py] [fail0verflow/radeon-tools](https://github.com/fail0verflow/radeon-tools) Radeon reverse engineering tools
-- [**106**Star][7m] [Py] [evilsocket/ergo-pe-av](https://github.com/evilsocket/ergo-pe-av) 🧠 🦠 An artificial neural network and API to detect Windows malware, based on Ergo and LIEF.
-- [**106**Star][1m] [Py] [ethereum/eth-tester](https://github.com/ethereum/eth-tester) Tool suite for testing ethereum applications.
-- [**106**Star][2y] [JS] [eboda/34c3ctf](https://github.com/eboda/34c3ctf) Challenge Sources & Exploits for the 34C3 CTF
- [**106**Star][2m] [Ruby] [dev-sec/ansible-mysql-hardening](https://github.com/dev-sec/ansible-mysql-hardening) This Ansible role provides security configuration for MySQL.
- [**106**Star][3m] [C++] [comaeio/hibr2bin](https://github.com/comaeio/hibr2bin) Comae Hibernation File Decompressor
- [**106**Star][2y] [Java] [caledoniaproject/cve-2018-1270](https://github.com/caledoniaproject/cve-2018-1270) Spring messaging STOMP protocol RCE
- [**106**Star][3y] [JS] [boy-hack/webshellmanager](https://github.com/boy-hack/webshellmanager) w8ay 一句话WEB端管理工具
-- [**106**Star][3m] [Go] [bnagy/gapstone](https://github.com/bnagy/gapstone) gapstone is a Go binding for the capstone disassembly library
-- [**106**Star][3y] [PowerShell] [ben0xa/powershelldefense](https://github.com/ben0xa/powershelldefense) Some PowerShell Defensive Scripts
+- [**106**Star][4m] [Go] [bnagy/gapstone](https://github.com/bnagy/gapstone) gapstone is a Go binding for the capstone disassembly library
+- [**106**Star][3y] [PS] [ben0xa/powershelldefense](https://github.com/ben0xa/powershelldefense) Some PowerShell Defensive Scripts
- [**106**Star][2y] [Shell] [b3rito/yotter](https://github.com/b3rito/yotter) Bash 脚本, 执行侦察,然后使用 dirb 发现可能导致信息泄露的目录
- [**106**Star][3y] [JS] [attekett/nodefuzz](https://github.com/attekett/nodefuzz)
+- [**106**Star][2y] [Py] [anbai-inc/cve-2018-4878](https://github.com/anbai-inc/cve-2018-4878) CVE-2018-4878 样本
- [**106**Star][2m] [ajvb/awesome-tor](https://github.com/ajvb/awesome-tor) A list of awesome Tor related projects, articles, papers, etc
- [**106**Star][8m] [Py] [ajinabraham/webappsec](https://github.com/ajinabraham/webappsec) Web Application Security
- [**106**Star][3y] [Py] [aeondave/doork](https://github.com/aeondave/doork) Passive Vulnerability Auditor
- [**106**Star][1y] [Py] [aboutsecurity/rastrea2r](https://github.com/aboutsecurity/rastrea2r) Collecting & Hunting for IOCs with gusto and style
- [**106**Star][6m] [CSS] [0xitx/ida_nightfall](https://github.com/0xitx/ida_nightfall) A dark color theme for IDA Pro
-- [**105**Star][7d] [internetwache/ct_subdomains](https://github.com/internetwache/ct_subdomains) An hourly updated list of subdomains gathered from certificate transparency logs
+- [**105**Star][3y] [Py] [hanc00l/captcha-python-test](https://github.com/hanc00l/captcha-python-test) 学习验证码识别的相关技术,包括opencv、tesseract、机器学习算法(kNN和SVM)等,将原作者的算法改为python
- [**105**Star][10m] [Py] [ehco1996/shadowsocksr-deprecated](https://github.com/ehco1996/shadowsocksr-deprecated) ssr mod version for django-sspanel
-- [**105**Star][8d] [CSS] [woj-ciech/kamerka-gui](https://github.com/woj-ciech/kamerka-gui) Ultimate Internet of Things/Industrial Control Systems reconnaissance tool.
+- [**105**Star][1m] [Py] [0ang3el/websocket-smuggle](https://github.com/0ang3el/websocket-smuggle) Issues with WebSocket reverse proxying allowing to smuggle HTTP requests
- [**105**Star][1m] [C++] [josh0xa/threadboat](https://github.com/josh0xA/ThreadBoat) Program uses Thread Execution Hijacking to Inject Native Shellcode into a Standard Win32 Application
-- [**105**Star][3y] [Py] [opensourcesec/cirtkit](https://github.com/opensourcesec/CIRTKit) Tools for the Computer Incident Response Team
+- [**105**Star][4m] [w-digital-scanner/w10scan](https://github.com/w-digital-scanner/w10scan) 全自动搜索互联网漏洞
+- [**105**Star][2m] [Py] [vstinner/python-ptrace](https://github.com/vstinner/python-ptrace) a debugger using ptrace (Linux, BSD and Darwin system call to trace processes) written in Python
- [**105**Star][1y] [JS] [phishai/phish-protect](https://github.com/phishai/phish-protect) 警报并可能阻止IDN/Unicode域名的网站
- [**105**Star][5y] [C] [yurushao/droid_injectso](https://github.com/yurushao/droid_injectso) A shared libraries injection tool.
-- [**105**Star][21d] [C++] [thomasdullien/heap_history_viewer](https://github.com/thomasdullien/heap_history_viewer) A program to draw rectangles from heap traces.
+- [**105**Star][14d] [Go] [virustotal/vt-cli](https://github.com/virustotal/vt-cli) VirusTotal Command Line Interface
+- [**105**Star][2y] [Py] [tkcert/testssl.sh-webfrontend](https://github.com/tkcert/testssl.sh-webfrontend) Web Frontend for testssl.sh
+- [**105**Star][23d] [C++] [thomasdullien/heap_history_viewer](https://github.com/thomasdullien/heap_history_viewer) A program to draw rectangles from heap traces.
- [**105**Star][3y] [Py] [tengzhangchao/struts2_045-poc](https://github.com/tengzhangchao/struts2_045-poc) Struts2-045 POC
-- [**105**Star][2y] [Py] [sparksharly/dl_for_xss](https://github.com/sparksharly/dl_for_xss) Deep learnning for detection with xss
+- [**105**Star][20d] [Py] [t0thkr1s/revshellgen](https://github.com/t0thkr1s/revshellgen) Reverse shell generator written in Python.
+- [**105**Star][16d] [Shell] [spf-tools/spf-tools](https://github.com/spf-tools/spf-tools) Shell scripts for taming the SPF (Sender Policy Framework) records in order to fight 10-maximum-DNS-look-ups limit.
+- [**105**Star][3m] [soffensive/windowsblindread](https://github.com/soffensive/windowsblindread) A list of files / paths to probe when arbitrary files can be read on a Microsoft Windows operating system
- [**105**Star][1y] [Py] [shizzz477/msploitego](https://github.com/shizzz477/msploitego) 将Metasploit数据库导入到数据挖掘工具Maltego并进行分析的框架
- [**105**Star][6y] [Py] [secretsquirrel/recomposer](https://github.com/secretsquirrel/recomposer) Randomly changes Win32/64 PE Files for 'safer' uploading to malware and sandbox sites.
- [**105**Star][4y] [C++] [secmob/pocforcve-2015-1528](https://github.com/secmob/pocforcve-2015-1528) I'll submit the poc after blackhat
- [**105**Star][3y] [Py] [saferman/cupper](https://github.com/saferman/cupper) 社工密码生成器
- [**105**Star][10m] [PHP] [rub-nds/metadata-attacker](https://github.com/rub-nds/metadata-attacker) A tool to generate media files with malicious metadata
-- [**105**Star][1m] [C] [rohanpadhye/fuzzfactory](https://github.com/rohanpadhye/fuzzfactory) Domain-Specific Fuzzing with Waypoints
-- [**105**Star][5m] [Py] [roglew/guppy-proxy](https://github.com/roglew/guppy-proxy) 用于WebApp安全测试的拦截代理(intercepting proxy)
+- [**105**Star][6m] [Py] [roglew/guppy-proxy](https://github.com/roglew/guppy-proxy) 用于WebApp安全测试的拦截代理(intercepting proxy)
- [**105**Star][4y] [Java] [rednaga/dexhook](https://github.com/rednaga/dexhook) DexHook is a xposed module for capturing dynamically loaded dex files.
- [**105**Star][1y] [Py] [redlectroid/overthruster](https://github.com/redlectroid/overthruster) HID attack payload generator for Arduinos
+- [**105**Star][9m] [C++] [quarkslab/android-restriction-bypass](https://github.com/quarkslab/android-restriction-bypass) PoC to bypass Android restrictions
- [**105**Star][3y] [Py] [picoctf/picoctf-platform-2](https://github.com/picoctf/picoctf-platform-2) A genericized version of picoCTF 2014 that can be easily adapted to host CTF or programming competitions.
- [**105**Star][3y] [Py] [phith0n/python-xss-filter](https://github.com/phith0n/python-xss-filter) Based on native Python module HTMLParser purifier of HTML, To Clear all javascript in html
-- [**105**Star][3y] [C#] [p0cl4bs/hanzoinjection](https://github.com/p0cl4bs/hanzoinjection) injecting arbitrary codes in memory to bypass common antivirus solutions
-- [**105**Star][1m] [Py] [neatmonster/amie](https://github.com/neatmonster/amie) A Minimalist Instruction Extender for the ARM architecture and IDA Pro
+- [**105**Star][11d] [ObjC] [objective-see/processmonitor](https://github.com/objective-see/processmonitor) Process Monitor Library (based on Apple's new Endpoint Security Framework)
+- [**105**Star][2y] [Shell] [niclet/yi-hack-v2](https://github.com/niclet/yi-hack-v2) Xiaomi Yi Ants Camera 2 hack
- [**105**Star][3m] [Ruby] [naxg/cve_2019_0708_bluekeep_rce](https://github.com/naxg/cve_2019_0708_bluekeep_rce) bluekeep exploit
+- [**105**Star][2y] [Py] [mozilla/django-session-csrf](https://github.com/mozilla/django-session-csrf) CSRF protection for Django without cookies.
- [**105**Star][1y] [TeX] [monero-project/research-lab](https://github.com/monero-project/research-lab) A general repo for Monero Research Lab work in progress and completed work
+- [**105**Star][1y] [mitre/brawl-public-game-001](https://github.com/mitre/brawl-public-game-001) Data from a BRAWL Automated Adversary Emulation Exercise
- [**105**Star][3y] [Java] [mindmac/intentfuzzer](https://github.com/mindmac/intentfuzzer) A Tool to fuzz Intent on Android
- [**105**Star][2y] [Go] [mhmdiaa/second-order](https://github.com/mhmdiaa/second-order) 爬取web app, 收集 URL, 扫描second-order 子域名接管
-- [**105**Star][4y] [Go] [mattbostock/go-ldpreload-backdoor](https://github.com/mattbostock/go-ldpreload-backdoor) LD_PRELOAD libc hooking using Go
- [**105**Star][1y] [HTML] [lz1y/cve-2018-8420](https://github.com/lz1y/cve-2018-8420) 原PoC甚至符号都打错了!太不走心了!
-- [**105**Star][6m] [PowerShell] [leeberg/bluehive](https://github.com/leeberg/bluehive) PowerShell based Active Directory Honey User Account Management with Universal Dashboards
+- [**105**Star][14d] [leomaurodesenv/game-datasets](https://github.com/leomaurodesenv/game-datasets)
+- [**105**Star][6m] [PS] [leeberg/bluehive](https://github.com/leeberg/bluehive) PowerShell based Active Directory Honey User Account Management with Universal Dashboards
- [**105**Star][2y] [Py] [kkirsche/cve-2017-10271](https://github.com/kkirsche/cve-2017-10271) Oracle WebLogic WLS-WSAT Remote Code Execution Exploit (CVE-2017-10271)
-- [**105**Star][3y] [ios-reverse-engineering-dev/swift-apps-reverse-engineering](https://github.com/ios-reverse-engineering-dev/swift-apps-reverse-engineering) Swift Apps Reverse Engineering reading book
- [**105**Star][7y] [intrepidusgroup/trustme](https://github.com/intrepidusgroup/trustme) Disable certificate trust checks on iOS devices.
+- [**105**Star][2y] [Java] [ggrandes/bouncer](https://github.com/ggrandes/bouncer) Bouncer is a network TCP port redirector/forward proxy (like rinetd) with extra features like Reverse tunneling (like ssh -R), SSL tunneling (like stunnel), connection Failover, LoadBalancing and Clustering. In pure Java (BIO)
+- [**105**Star][2y] [C] [formyown/alesense-antivirus](https://github.com/formyown/alesense-antivirus) 一款拥有完整交互界面与驱动级拦截能力的开源杀毒软件
- [**105**Star][5y] [Py] [fooying/3102](https://github.com/fooying/3102) A domain/ip fuzzing tool for vulnerability mining
- [**105**Star][4m] [Py] [ex16x41/oscp-prep](https://github.com/ex16x41/oscp-prep) my oscp prep collection
- [**105**Star][2y] [Py] [danigargu/idatropy](https://github.com/danigargu/idatropy) a plugin for Hex-Ray's IDA Pro designed to generate charts of entropy and histograms using the power of idapython and matplotlib.
-- [**105**Star][14d] [HTML] [cj123/canijailbreak.com](https://github.com/cj123/canijailbreak.com) a website which tells you whether you can jailbreak your iOS device.
- [**105**Star][2y] [Ruby] [chrisallenlane/watchtower](https://github.com/chrisallenlane/watchtower) Watchtower is a Static Code Analysis tool designed to assist security auditors who are tasked with performing manual code reviews. It is platform- and language-agnostic.
-- [**105**Star][7m] [binject/awesome-go-security](https://github.com/binject/awesome-go-security) A dedicated place for cool golang security projects
+- [**105**Star][1m] [Java] [c0ny1/sqlmap4burp-plus-plus](https://github.com/c0ny1/sqlmap4burp-plus-plus) sqlmap4burp++是一款兼容Windows,mac,linux多个系统平台的Burp与sqlmap联动插件
- [**105**Star][1y] [Py] [binarydefense/goatrider](https://github.com/binarydefense/goatrider) GoatRider is a simple tool that will dynamically pull down Artillery Threat Intelligence Feeds, TOR, AlienVaults OTX, and the Alexa top 1 million websites and do a comparison to a hostname file or IP file.
- [**105**Star][3m] [Py] [armijnhemel/binaryanalysis-ng](https://github.com/armijnhemel/binaryanalysis-ng) Binary Analysis Next Generation (BANG)
-- [**105**Star][2y] [Py] [anbai-inc/cve-2018-4878](https://github.com/anbai-inc/cve-2018-4878) CVE-2018-4878 样本
+- [**105**Star][1y] [Py] [5alt/ultrarelay](https://github.com/5alt/ultrarelay) poison and relay NTLM credentials
- [**105**Star][3y] [Py] [3gstudent/smbtouch-scanner](https://github.com/3gstudent/smbtouch-scanner) Automatically scan the inner network to detect whether they are vulnerable.
+- [**105**Star][3m] [Py] [0xdezzy/cve-2019-11539](https://github.com/0xdezzy/cve-2019-11539) Exploit for the Post-Auth RCE vulnerability in Pulse Secure Connect
+- [**104**Star][2y] [Ruby] [axsuul/rails-reverse-proxy](https://github.com/axsuul/rails-reverse-proxy) A reverse proxy for Ruby on Rails
+- [**104**Star][5m] [Py] [kibodwapon/axis-1.4-rce-poc](https://github.com/kibodwapon/axis-1.4-rce-poc) Axis <=1.4 远程命令执行(RCE) POC
+- [**104**Star][10m] [Py] [thelinuxchoice/pyrat](https://github.com/thelinuxchoice/pyrat) Windows Remote Administration Tool (RAT)
+- [**104**Star][3d] [Go] [inlets/inletsctl](https://github.com/inlets/inletsctl) Fast HTTP (L7) and TCP (L4) tunnels written in Go
- [**104**Star][11m] [Java] [varunon9/remote-control-pc](https://github.com/varunon9/remote-control-pc) Control Laptop using Android. Remote control PC consists of android as well as desktop app written in Java to control laptop using phone.
-- [**104**Star][2y] [Py] [cylance/introductiontomachinelearningforsecuritypros](https://github.com/cylance/IntroductionToMachineLearningForSecurityPros) Example code for our book Introduction to Artificial Intelligence for Security Professionals
- [**104**Star][7m] [C++] [ajayrandhawa/keylogger](https://github.com/ajayrandhawa/Keylogger) Blackcat Keylogger is 100% invisible keylogger not only for users, but also undetectable by antivirus software. Blackcat keylogger Monitors all keystokes, Mouse clicks. It has a seperate process which continues capture system screenshot and send to ftp server in given time.
-- [**104**Star][4m] [w-digital-scanner/w10scan](https://github.com/w-digital-scanner/w10scan) 全自动搜索互联网漏洞
- [**104**Star][2y] [HTML] [ziplokk1/incapsula-cracker-py3](https://github.com/ziplokk1/incapsula-cracker-py3) Python3 compatible way to bypass sites guarded with Incapsula
- [**104**Star][2y] [C#] [tyranid/deviceguardbypasses](https://github.com/tyranid/deviceguardbypasses) A repository of some of my Windows 10 Device Guard Bypasses
- [**104**Star][3y] [JS] [trustedsec/ships](https://github.com/trustedsec/ships) The Shared Host Integrated Password System (SHIPS) is a solution to provide unique and rotated local super user or administrator passwords for environments where it is not possible or not appropriate to disable these local accounts. Clients may be configured to rotate passwords automatically. Stored passwords can be retrieved by desktop support …
- [**104**Star][4y] [C++] [trailofbits/appjaillauncher](https://github.com/trailofbits/appjaillauncher) CTF Challenge Framework for Windows 8 and above
-- [**104**Star][3m] [C++] [tandasat/simplesvmhook](https://github.com/tandasat/simplesvmhook) SimpleSvmHook is a research purpose hypervisor for Windows on AMD processors.
-- [**104**Star][18d] [Go] [stefanoj3/dirstalk](https://github.com/stefanoj3/dirstalk) a multi threaded application designed to brute force paths on web servers.
+- [**104**Star][20d] [Go] [stefanoj3/dirstalk](https://github.com/stefanoj3/dirstalk) a multi threaded application designed to brute force paths on web servers.
- [**104**Star][5y] [C] [sploitfun/lsploits](https://github.com/sploitfun/lsploits) Linux Exploits
-- [**104**Star][3m] [soffensive/windowsblindread](https://github.com/soffensive/windowsblindread) A list of files / paths to probe when arbitrary files can be read on a Microsoft Windows operating system
- [**104**Star][1y] [Py] [sidechannelmarvels/jeangrey](https://github.com/sidechannelmarvels/jeangrey) A tool to perform differential fault analysis attacks (DFA).
+- [**104**Star][2y] [Java] [secureskytechnology/study-struts2-s2-054_055-jackson-cve-2017-7525_cve-2017-15095](https://github.com/secureskytechnology/study-struts2-s2-054_055-jackson-cve-2017-7525_cve-2017-15095) Struts2の脆弱性S2-045, S2-055 および Jackson の脆弱性 CVE-2017-7525, CVE-2017-15095 の調査報告
- [**104**Star][3y] [C++] [secmob/mosec2016](https://github.com/secmob/mosec2016) The slides and exploit of mosec2016
- [**104**Star][6y] [santoku/santoku-linux](https://github.com/santoku/santoku-linux) Linux Distro for Mobile Security, Malware Analysis, and Forensics
-- [**104**Star][2m] [PHP] [realender/dwpa](https://github.com/realender/dwpa) Distributed WPA PSK auditor
- [**104**Star][11m] [Py] [re4son/kali-pi](https://github.com/re4son/kali-pi) Sticky Fingers Kali Pi
- [**104**Star][7m] [C#] [r-smith/splice-admin](https://github.com/r-smith/splice-admin) A remote Windows administration tool. You know you want it.
-- [**104**Star][9m] [C++] [quarkslab/android-restriction-bypass](https://github.com/quarkslab/android-restriction-bypass) PoC to bypass Android restrictions
- [**104**Star][12m] [Py] [ohmyadd/wetland](https://github.com/ohmyadd/wetland) A high interaction SSH honeypot
-- [**104**Star][9d] [Objective-C] [objective-see/processmonitor](https://github.com/objective-see/processmonitor) Process Monitor Library (based on Apple's new Endpoint Security Framework)
-- [**104**Star][3y] [Py] [noplay/scrapy-mongodb](https://github.com/noplay/scrapy-mongodb) Mongodb support for scrapy
- [**104**Star][1y] [C++] [nmulasmajic/syscall_exploit_cve-2018-8897](https://github.com/nmulasmajic/syscall_exploit_cve-2018-8897) Implements the POP/MOV SS (CVE-2018-8897) vulnerability by leveraging SYSCALL to perform a local privilege escalation (LPE).
-- [**104**Star][2y] [Shell] [niclet/yi-hack-v2](https://github.com/niclet/yi-hack-v2) Xiaomi Yi Ants Camera 2 hack
- [**104**Star][4y] [Go] [netxfly/transparent-proxy-scanner](https://github.com/netxfly/transparent-proxy-scanner) 基于vpn和透明代理的web漏洞扫描器的实现思路及demo
+- [**104**Star][17d] [Go] [netevert/dnsmorph](https://github.com/netevert/dnsmorph) 域名排列(permutation)引擎, Go编写
- [**104**Star][2y] [C#] [nccgroup/outlookleaktest](https://github.com/nccgroup/outlookleaktest) The Outlook HTML Leak Test Project
- [**104**Star][12m] [Perl] [mustlive/davoset](https://github.com/mustlive/davoset) DDoS attacks via other sites execution tool (DAVOSET) - it is command line tool for conducting DDoS attacks on the sites via Abuse of Functionality and XML External Entities vulnerabilities at other sites.
- [**104**Star][2y] [C++] [mlghuskie/nobastian](https://github.com/mlghuskie/nobastian) NoBastian - Universal Ring3 IPC based BattlEye/EAC/FaceIt/ESEA/MRAC bypass
-- [**104**Star][1y] [mitre/brawl-public-game-001](https://github.com/mitre/brawl-public-game-001) Data from a BRAWL Automated Adversary Emulation Exercise
- [**104**Star][2y] [Py] [mehdilauters/wifiscanmap](https://github.com/mehdilauters/wifiscanmap) an other wifi mapping tool
-- [**104**Star][22d] [Java] [mebigfatguy/fb-contrib](https://github.com/mebigfatguy/fb-contrib) a FindBugs/SpotBugs plugin for doing static code analysis for java code bases
+- [**104**Star][24d] [Java] [mebigfatguy/fb-contrib](https://github.com/mebigfatguy/fb-contrib) a FindBugs/SpotBugs plugin for doing static code analysis for java code bases
+- [**104**Star][30d] [Py] [m8r0wn/activereign](https://github.com/m8r0wn/activereign) A Network Enumeration and Attack Toolset
- [**104**Star][2m] [Shell] [luyg24/it_security](https://github.com/luyg24/it_security) 业内信息安全标准
-- [**104**Star][12d] [leomaurodesenv/game-datasets](https://github.com/leomaurodesenv/game-datasets)
+- [**104**Star][3m] [PHP] [langleyfoxall/laravel-nist-password-rules](https://github.com/langleyfoxall/laravel-nist-password-rules)
- [**104**Star][2y] [Shell] [joarleymoraes/net_guard](https://github.com/joarleymoraes/net_guard) 命令行工具, 利用 ARP 协议检测网络中的未知设备
- [**104**Star][3y] [Go] [jessfraz/tupperwarewithspears](https://github.com/jessfraz/tupperwarewithspears) Distributed load testing with containers, Apache benchmark, with OpenVSwitch for networking.
-- [**104**Star][2m] [Py] [ickerwx/tcpproxy](https://github.com/ickerwx/tcpproxy) Intercepting TCP proxy to modify raw TCP streams using modules on incoming or outgoing traffic
-- [**104**Star][2y] [Java] [ggrandes/bouncer](https://github.com/ggrandes/bouncer) Bouncer is a network TCP port redirector/forward proxy (like rinetd) with extra features like Reverse tunneling (like ssh -R), SSL tunneling (like stunnel), connection Failover, LoadBalancing and Clustering. In pure Java (BIO)
+- [**104**Star][2d] [C] [isc-projects/bind9](https://github.com/isc-projects/bind9) a complete, highly portable implementation of the DNS (Domain Name System) protocol.
+- [**104**Star][2y] [Kotlin] [heimashi/debug_view_kotlin](https://github.com/heimashi/debug_view_kotlin) 用kotlin实现的Android浮层调试控制台,实时的显示内存、FPS、文字log、app启动时间、Activity启动时间
- [**104**Star][1y] [C++] [ga0/pyprotect](https://github.com/ga0/pyprotect) A lightweight python code protector, makes your python project harder to reverse engineer
+- [**104**Star][3m] [Ruby] [dryruby/tor.rb](https://github.com/dryruby/tor.rb) Tor.rb is a Ruby library for interacting with the Tor anonymity network.
- [**104**Star][3y] [Java] [cvvt/apptroy](https://github.com/cvvt/apptroy) An Online Analysis System for Packed Android Malware
- [**104**Star][4y] [Shell] [cornerpirate/socat-shell](https://github.com/cornerpirate/socat-shell) Socat can be used to establish a reverse shell with bash tab completion and full shell functionality
- [**104**Star][3y] [C++] [cn33liz/tpminituacbypass](https://github.com/cn33liz/tpminituacbypass) Bypassing User Account Control (UAC) using TpmInit.exe
-- [**104**Star][12d] [C] [checkpointsw/scout](https://github.com/checkpointsw/scout) Instruction based research debugger
-- [**104**Star][1m] [Java] [c0ny1/sqlmap4burp-plus-plus](https://github.com/c0ny1/sqlmap4burp-plus-plus) sqlmap4burp++是一款兼容Windows,mac,linux多个系统平台的Burp与sqlmap联动插件
+- [**104**Star][14d] [C] [checkpointsw/scout](https://github.com/checkpointsw/scout) Instruction based research debugger
- [**104**Star][3y] [Py] [c0demap/codemap](https://github.com/c0demap/codemap) a binary analysis tool for "run-trace visualization" provided as IDA plugin.
- [IDA插件](https://github.com/c0demap/codemap/blob/master/idapythonrc.py)
- [Web服务器](https://github.com/c0demap/codemap/tree/master/codemap/server)
- [**104**Star][5y] [Py] [botherder/vxcage](https://github.com/botherder/vxcage) REST API based malware repository (abandoned)
+- [**104**Star][2y] [Py] [blindfuzzy/lhf](https://github.com/blindfuzzy/lhf) A modular recon tool for pentesting
+- [**104**Star][15d] [Swift] [auth0/auth0.swift](https://github.com/auth0/auth0.swift) Swift toolkit for Auth0 API
- [**104**Star][4y] [ActionScript] [adobe/avmplus](https://github.com/adobe/avmplus) Source code for the Actionscript virtual machine
-- [**104**Star][3m] [Py] [0xdezzy/cve-2019-11539](https://github.com/0xdezzy/cve-2019-11539) Exploit for the Post-Auth RCE vulnerability in Pulse Secure Connect
+- [**103**Star][4d] [Py] [sachinkamath/ntlmrecon](https://github.com/sachinkamath/ntlmrecon) A fast and flexible NTLM reconnaissance tool
- [**103**Star][3y] [wtsxdev/list-of-web-application-security](https://github.com/wtsxdev/list-of-web-application-security) List of web application security
-- [**103**Star][4m] [Py] [xzkzdx/weixin-spider](https://github.com/xzkzdx/weixin-spider) 微信公众号爬虫,公众号历史文章,文章评论,文章阅读及在看数据,可视化web页面,可部署于Windows服务器。基于Python3之flask/mysql/redis/mitmproxy/pywin32等实现,高效微信爬虫,微信公众号爬虫,历史文章,文章评论,数据更新。
-- [**103**Star][16d] [Java] [astrelsky/ghidra-cpp-class-analyzer](https://github.com/astrelsky/ghidra-cpp-class-analyzer) Ghidra C++ Class and Run Time Type Information Analyzer
+- [**103**Star][3y] [Py] [landgrey/taoman](https://github.com/landgrey/taoman) 快速收集
+- [**103**Star][2m] [Shell] [greycatz/cloudunflare](https://github.com/greycatz/cloudunflare) Reconnaissance Real IP address for Cloudflare Bypass
- [**103**Star][2y] [Brainfuck] [tegmen/regex-brainfuck-interpreter](https://github.com/Tegmen/RegEx-Brainfuck-Interpreter) A Brainfuck interpreter in RegEx only (using Find/Replace)
-- [**103**Star][1y] [Objective-C] [kealdishx/icmethoddigger](https://github.com/kealdishx/ICMethodDigger) An easy way to print almost methods including private methods (supported arm64 architecture devices).
-- [**103**Star][2m] [Py] [vstinner/python-ptrace](https://github.com/vstinner/python-ptrace) a debugger using ptrace (Linux, BSD and Darwin system call to trace processes) written in Python
+- [**103**Star][1y] [ObjC] [kealdishx/icmethoddigger](https://github.com/kealdishx/ICMethodDigger) An easy way to print almost methods including private methods (supported arm64 architecture devices).
+- [**103**Star][2m] [Py] [paulc/dnslib](https://github.com/paulc/dnslib) A Python library to encode/decode DNS wire-format packets
+- [**103**Star][23d] [JS] [wilddeer/sniffer](https://github.com/wilddeer/sniffer) browser/engine/os/device detection tool
- [**103**Star][2y] [Py] [wetw0rk/malicious-wordpress-plugin](https://github.com/wetw0rk/malicious-wordpress-plugin) malicious-wordpress-plugin:生成带反向 Shell 的 wordpress 插件
-- [**103**Star][19d] [Py] [virb3/apk-utilities](https://github.com/virb3/apk-utilities) Tools and scripts to manipulate Android APKs
+- [**103**Star][9d] [Py] [virb3/apk-utilities](https://github.com/virb3/apk-utilities) Tools and scripts to manipulate Android APKs
- [**103**Star][4m] [Go] [twistlock/cloud-discovery](https://github.com/twistlock/cloud-discovery) Cloud Discovery provides a point in time enumeration of all the cloud native platform services
- [**103**Star][4y] [Py] [tripwire/tardis](https://github.com/tripwire/tardis) Threat Analysis, Reconnaissance, and Data Intelligence System
-- [**103**Star][2y] [Py] [tkcert/testssl.sh-webfrontend](https://github.com/tkcert/testssl.sh-webfrontend) Web Frontend for testssl.sh
- [**103**Star][1y] [JS] [thecjw/frida-android-scripts](https://github.com/thecjw/frida-android-scripts) Some frida scripts
+- [**103**Star][1y] [Go] [sroberts/cacador](https://github.com/sroberts/cacador) 从文本块中提取常见的IoC
- [**103**Star][8m] [Py] [sibears/hrast](https://github.com/sibears/hrast) PoC of modifying HexRays AST
-- [**103**Star][2y] [Java] [secureskytechnology/study-struts2-s2-054_055-jackson-cve-2017-7525_cve-2017-15095](https://github.com/secureskytechnology/study-struts2-s2-054_055-jackson-cve-2017-7525_cve-2017-15095) Struts2の脆弱性S2-045, S2-055 および Jackson の脆弱性 CVE-2017-7525, CVE-2017-15095 の調査報告
- [**103**Star][3y] [Py] [samratashok/continuousintrusion](https://github.com/samratashok/continuousintrusion) Material related to my talks at various conferences on using Continuous Integration tools (Jenkins, Teamcity, Go, Hudson, CruiseControl) for penetration testing
- [**103**Star][3m] [rub-nds/tls-padding-oracles](https://github.com/rub-nds/tls-padding-oracles) New TLS Padding Oracles
- [**103**Star][1y] [Java] [quarantyne/quarantyne](https://github.com/quarantyne/quarantyne) Modern Web Firewall: stop account takeovers, weak passwords, cloud IPs, DoS attacks, disposable emails
- [**103**Star][6y] [Py] [pwnieexpress/pwn_plug_sources](https://github.com/pwnieexpress/pwn_plug_sources) Public source repository for the Pwn Plug platform.
- [**103**Star][1y] [Py] [preos-security/fwaudit](https://github.com/preos-security/fwaudit) Platform Firmware Auditing Tool
+- [**103**Star][2m] [PS] [powershell/windowscompatibility](https://github.com/powershell/windowscompatibility) Module that allows Windows PowerShell Modules to be used from PSCore6
- [**103**Star][6m] [C++] [not-wlan/drvmap](https://github.com/not-wlan/drvmap) driver mapper / capcom wrapper
-- [**103**Star][15d] [Go] [netevert/dnsmorph](https://github.com/netevert/dnsmorph) 域名排列(permutation)引擎, Go编写
-- [**103**Star][28d] [Py] [m8r0wn/activereign](https://github.com/m8r0wn/activereign) A Network Enumeration and Attack Toolset
+- [**103**Star][3y] [Py] [noplay/scrapy-mongodb](https://github.com/noplay/scrapy-mongodb) Mongodb support for scrapy
+- [**103**Star][23d] [C++] [m2team/privexec](https://github.com/m2team/privexec) Run the program with the specified permission level (C++17 required)
- [**103**Star][4y] [C] [m0n0ph1/win64-rovnix-vbr-bootkit](https://github.com/m0n0ph1/win64-rovnix-vbr-bootkit) Win64/Rovnix - Volume Boot Record Bootkit
- [**103**Star][3m] [Py] [lucasg/findrpc](https://github.com/lucasg/findrpc) Ida script to extract RPC interface from binaries
- [**103**Star][7m] [C] [joel16/psv-vsh-menu](https://github.com/joel16/psv-vsh-menu) A VSH menu tai-hen plugin for the PS VITA.
- [**103**Star][11m] [JS] [jasonsheh/sitescan](https://github.com/jasonsheh/sitescan) A tool help get the basic information of one site
-- [**103**Star][7d] [C] [isc-projects/bind9](https://github.com/isc-projects/bind9) a complete, highly portable implementation of the DNS (Domain Name System) protocol.
- [**103**Star][6y] [C] [infodox/tsh-sctp](https://github.com/infodox/tsh-sctp) An open-source UNIX backdoor
+- [**103**Star][1m] [Py] [infertux/zeyple](https://github.com/infertux/zeyple) Postfix filter/hook to automatically encrypt outgoing emails with PGP/GPG
+- [**103**Star][10m] [Py] [iluxonchik/blackhat-python-book](https://github.com/iluxonchik/blackhat-python-book) Code from Blackhat Python book
- [**103**Star][2y] [C++] [iceb0y/windows-container](https://github.com/iceb0y/windows-container) A lightweight sandbox for Windows application
+- [**103**Star][7m] [PS] [homjxi0e/poweravails](https://github.com/homjxi0e/poweravails) PowerAvails Powershell .NET Operating system
- [**103**Star][2y] [C++] [hasherezade/snippets](https://github.com/hasherezade/snippets) Various code snippets and small PoCs, to be used for tests or as ready-made skeletons.
-- [**103**Star][1y] [PowerShell] [harmj0y/asreproast](https://github.com/harmj0y/asreproast) Project that retrieves crackable hashes from KRB5 AS-REP responses for users without kerberoast preauthentication enabled.
+- [**103**Star][1y] [PS] [harmj0y/asreproast](https://github.com/harmj0y/asreproast) Project that retrieves crackable hashes from KRB5 AS-REP responses for users without kerberoast preauthentication enabled.
+- [**103**Star][3y] [C] [greensea/mptunnel](https://github.com/greensea/mptunnel) MPUDP Tunnel (User space MultiPath UDP)
- [**103**Star][2y] [gossithedog/threathunting](https://github.com/gossithedog/threathunting) Tools for hunting for threats.
+- [**103**Star][2y] [Java] [gosecure/csp-auditor](https://github.com/gosecure/csp-auditor) Burp and ZAP plugin to analyse Content-Security-Policy headers or generate template CSP configuration from crawling a Website
- [**103**Star][2m] [C++] [google/vxsig](https://github.com/google/vxsig) Automatically generate AV byte signatures from sets of similar binaries.
- [**103**Star][2y] [glinares/officemalware](https://github.com/glinares/officemalware)
- [**103**Star][2y] [Py] [gelim/censys](https://github.com/gelim/censys) Python code to query the Censys public scan database.
- [**103**Star][6y] [C] [gdbinit/hydra](https://github.com/gdbinit/hydra) A kernel extension and userland daemon to patch applications
- [**103**Star][12m] [fuchsia-mirror/garnet](https://github.com/fuchsia-mirror/garnet)
- [**103**Star][6m] [Py] [fireeye/flashmingo](https://github.com/fireeye/flashmingo) Automatic analysis of SWF files based on some heuristics. Extensible via plugins.
+- [**103**Star][4d] [F#] [enkomio/sacara](https://github.com/enkomio/sacara) A stack based intermediate language aimed at software protection by running in a software VM
- [**103**Star][1y] [Swift] [ehrishirajsharma/swiftness](https://github.com/ehrishirajsharma/swiftness) A note-taking macOS app for penetration-testers.
- [**103**Star][1y] [C++] [cbayet/exploit-cve-2017-6008](https://github.com/cbayet/exploit-cve-2017-6008) Exploits for CVE-2017-6008, a kernel pool buffer overflow leading to privilege escalation.
-- [**103**Star][2y] [Py] [blindfuzzy/lhf](https://github.com/blindfuzzy/lhf) A modular recon tool for pentesting
-- [**103**Star][7d] [PHP] [blackhacker511/blacknet](https://github.com/blackhacker511/blacknet) Free Advanced Windows BotNET with Secure PHP Panel
-- [**103**Star][4m] [Py] [b1eed/vulrec](https://github.com/b1eed/vulrec) 漏洞复现记录
+- [**103**Star][2d] [Py] [b1eed/vulrec](https://github.com/b1eed/vulrec) 漏洞复现记录
- [**103**Star][4y] [Py] [allyshka/pwngitmanager](https://github.com/allyshka/pwngitmanager) Git manager for pentesters
+- [**103**Star][7m] [Py] [alexmyg/andropytool](https://github.com/alexmyg/andropytool) A framework for automated extraction of static and dynamic features from Android applications
- [**103**Star][2y] [Py] [1111joe1111/tuts](https://github.com/1111joe1111/tuts) Reverse engineering tutorials
- [**102**Star][8m] [l3m0n/webfuzzattack](https://github.com/l3m0n/webfuzzattack) web模糊测试 - 将漏洞可能性放大
- [**102**Star][12m] [searking/ggfwzs_in_hack](https://github.com/searking/ggfwzs_in_hack) hack VIP for chrome-extension 谷歌访问助手
-- [**102**Star][1m] [Py] [0ang3el/websocket-smuggle](https://github.com/0ang3el/websocket-smuggle) Issues with WebSocket reverse proxying allowing to smuggle HTTP requests
+- [**102**Star][2y] [raikia/recon-ng-api-key-creation](https://github.com/raikia/recon-ng-api-key-creation) One of the biggest annoyances of using Recon-ng is getting everything set up to use it. So here I’ll outline the different API keys it can use and where to get them yourself.
- [**102**Star][2m] [Py] [mazen160/jwt-pwn](https://github.com/mazen160/jwt-pwn) Security Testing Scripts for JWT
-- [**102**Star][2m] [Py] [paulc/dnslib](https://github.com/paulc/dnslib) A Python library to encode/decode DNS wire-format packets
- [**102**Star][1y] [Py] [zwq0320/malicious_dynamic_behavior_detection_by_cnn](https://github.com/zwq0320/malicious_dynamic_behavior_detection_by_cnn) 使用CNN进行样本恶意动态行为检测
- [**102**Star][3y] [Go] [zaf/sipshock](https://github.com/zaf/sipshock) A scanner for SIP proxies vulnerable to Shellshock
- [**102**Star][11m] [C] [x41sec/x41-smartcard-fuzzing](https://github.com/x41sec/x41-smartcard-fuzzing) X41 Smartcard Fuzzer
- [**102**Star][2y] [Py] [wstart/db_baseline](https://github.com/wstart/db_baseline) 数据库基线检查工具
- [**102**Star][2y] [Py] [wolph/python-statsd](https://github.com/wolph/python-statsd) Python Client for the Etsy NodeJS Statsd Server
-- [**102**Star][21d] [JS] [wilddeer/sniffer](https://github.com/wilddeer/sniffer) browser/engine/os/device detection tool
- [**102**Star][6m] [Py] [vmavromatis/absolutely-proprietary](https://github.com/vmavromatis/absolutely-proprietary) Proprietary package detector for arch-based distros. Compares your installed packages against Parabola's package blacklist and then prints your Stallman Freedom Index (free/total).
-- [**102**Star][12d] [Go] [virustotal/vt-cli](https://github.com/virustotal/vt-cli) VirusTotal Command Line Interface
- [**102**Star][3y] [Py] [violentshell/rover](https://github.com/violentshell/rover) Proof of Concept code for CVE-2016-5696
- [**102**Star][3y] [veramine/detections](https://github.com/veramine/detections)
+- [**102**Star][1m] [Kotlin] [uber/crumb](https://github.com/uber/crumb) An annotation processor for breadcrumbing metadata across compilation boundaries.
- [**102**Star][3m] [Go] [tbiehn/curryfinger](https://github.com/tbiehn/curryfinger) CURRYFINGER - SNI & Host header spoofing utility.
-- [**102**Star][18d] [Py] [t0thkr1s/revshellgen](https://github.com/t0thkr1s/revshellgen) Reverse shell generator written in Python.
-- [**102**Star][1y] [Go] [sroberts/cacador](https://github.com/sroberts/cacador) 从文本块中提取常见的IoC
- [**102**Star][2y] [C++] [sensepost/gdi-palettes-exp](https://github.com/sensepost/gdi-palettes-exp) 滥用 GDI 对象来揭示内核漏洞利用
- [**102**Star][2y] [Go] [sakeven/httpproxy](https://github.com/sakeven/httpproxy) 基于 Go 开发,支持 http/1.1 以上版本的 HTTP(S) 代理。(Why not try out Mika?)
-- [**102**Star][2m] [PowerShell] [powershell/windowscompatibility](https://github.com/powershell/windowscompatibility) Module that allows Windows PowerShell Modules to be used from PSCore6
+- [**102**Star][1y] [JS] [rassec/a_scan_framework](https://github.com/rassec/a_scan_framework) Network Security Vulnerability Manage
+- [**102**Star][19d] [Py] [patois/idapyhelper](https://github.com/patois/idapyhelper) IDAPyHelper is a script for the Interactive Disassembler that helps writing IDAPython scripts and plugins.
- [**102**Star][3m] [C#] [padovah4ck/cve-2019-1253](https://github.com/padovah4ck/cve-2019-1253) Poc for CVE-2019-1253
- [**102**Star][3y] [Py] [n0fate/volafox](https://github.com/n0fate/volafox) Mac OS X Memory Analysis Toolkit
-- [**102**Star][10m] [Py] [mbevilacqua/appcompatprocessor](https://github.com/mbevilacqua/appcompatprocessor) "Evolving AppCompat/AmCache data analysis beyond grep"
+- [**102**Star][11m] [Py] [mbevilacqua/appcompatprocessor](https://github.com/mbevilacqua/appcompatprocessor) "Evolving AppCompat/AmCache data analysis beyond grep"
+- [**102**Star][4m] [Py] [matrix1001/heapinspect](https://github.com/matrix1001/heapinspect)
+- [**102**Star][24d] [C] [madeye/tcp_china](https://github.com/madeye/tcp_china) TCP China congestion control algorithm
- [**102**Star][3y] [Java] [liuyufei/sslkiller](https://github.com/liuyufei/sslkiller) SSLKiller is used for killing SSL verification functions on Android client side. With SSLKiller, You can intercept app's HTTPS communication packages between the client and server.
-- [**102**Star][8m] [PowerShell] [leeberg/bluecommand](https://github.com/leeberg/bluecommand) Dashboarding and Tooling front-end for PowerShell Empire using PowerShell Universal Dashboard
+- [**102**Star][8m] [PS] [leeberg/bluecommand](https://github.com/leeberg/bluecommand) Dashboarding and Tooling front-end for PowerShell Empire using PowerShell Universal Dashboard
- [**102**Star][6m] [Py] [kibodwapon/noeye](https://github.com/kibodwapon/noeye) A blind mode exploit framework (a dns server and a web app) that like wvs's AcuMonitor Service or burpsuite's collabrator or cloudeye
+- [**102**Star][1m] [Go] [jmpsec/osctrl](https://github.com/jmpsec/osctrl) Fast and efficient osquery management
- [**102**Star][3y] [JS] [jkingsman/bishop](https://github.com/jkingsman/bishop) Hunt for vulnerable websites as you browse.
-- [**102**Star][10m] [Py] [iluxonchik/blackhat-python-book](https://github.com/iluxonchik/blackhat-python-book) Code from Blackhat Python book
+- [**102**Star][6m] [Py] [janniskirschner/horn3t](https://github.com/janniskirschner/horn3t) Powerful Visual Subdomain Enumeration at the Click of a Mouse
+- [**102**Star][6d] [PHP] [io-developer/php-whois](https://github.com/io-developer/php-whois) PHP WHOIS provides parsed and raw whois lookup of domains and ASN routes. PHP 5.4+ and 7+ compatible
- [**102**Star][1m] [Py] [huuck/adbhoney](https://github.com/huuck/adbhoney) Low interaction honeypot designed for Android Debug Bridge over TCP/IP
-- [**102**Star][6m] [PowerShell] [homjxi0e/poweravails](https://github.com/homjxi0e/poweravails) PowerAvails Powershell .NET Operating system
-- [**102**Star][3y] [C] [greensea/mptunnel](https://github.com/greensea/mptunnel) MPUDP Tunnel (User space MultiPath UDP)
+- [**102**Star][2y] [C] [hc0d3r/sudohulk](https://github.com/hc0d3r/sudohulk) 使用ptraceHook系统调用execve, 监控并修改sudo命令的参数
- [**102**Star][2y] [C] [google/pg_page_verification](https://github.com/google/pg_page_verification) verify checksums on PostgreSQL data pages without having to load each page into shared buffer cache
-- [**102**Star][2y] [C] [formyown/alesense-antivirus](https://github.com/formyown/alesense-antivirus) 一款拥有完整交互界面与驱动级拦截能力的开源杀毒软件
- [**102**Star][3y] [feicong/android-app-sec](https://github.com/feicong/android-app-sec) ISC 2016安全训练营-安卓app逆向与安全防护 ppt
-- [**102**Star][10d] [F#] [enkomio/sacara](https://github.com/enkomio/sacara) A stack based intermediate language aimed at software protection by running in a software VM
- [**102**Star][1y] [edoverflow/bugbountywiki](https://github.com/edoverflow/bugbountywiki) The Bug Bounty Wiki
-- [**102**Star][1m] [TypeScript] [eddyverbruggen/nativescript-fingerprint-auth](https://github.com/eddyverbruggen/nativescript-fingerprint-auth)
+- [**102**Star][1m] [TS] [eddyverbruggen/nativescript-fingerprint-auth](https://github.com/eddyverbruggen/nativescript-fingerprint-auth)
- [**102**Star][1y] [Java] [duo-labs/xray](https://github.com/duo-labs/xray) X-Ray allows you to scan your Android device for security vulnerabilities that put your device at risk.
-- [**102**Star][6m] [C#] [dannythesloth/vanillarat](https://github.com/dannythesloth/vanillarat) VanillaRat is an advanced remote administration tool completely coded in C# for Windows.
+- [**102**Star][10m] [C++] [decred/gominer](https://github.com/decred/gominer) Go (golang) based GPU miner for Decred.
- [**102**Star][1y] [cujanovic/crlf-injection-payloads](https://github.com/cujanovic/crlf-injection-payloads) Payloads for CRLF Injection
-- [**102**Star][14d] [Py] [buffer/pylibemu](https://github.com/buffer/pylibemu) A Libemu Cython wrapper
+- [**102**Star][7d] [Py] [buffer/pylibemu](https://github.com/buffer/pylibemu) A Libemu Cython wrapper
- [**102**Star][3y] [C++] [azuregreen/injectcollection](https://github.com/azuregreen/injectcollection) A collection of injection via vc++ in ring3
-- [**102**Star][13d] [Swift] [auth0/auth0.swift](https://github.com/auth0/auth0.swift) Swift toolkit for Auth0 API
+- [**102**Star][6d] [PS] [awsmhacks/crackmapextreme](https://github.com/awsmhacks/crackmapextreme) For all your network pentesting needs
- [**102**Star][1y] [Py] [apg-intel/ipv6tools](https://github.com/apg-intel/ipv6tools) IPv6Tools is a robust modular framework that enables the ability to visually audit an IPv6 enabled network.
- [**102**Star][5m] [Py] [anx1ang/poc_pentest](https://github.com/anx1ang/poc_pentest)
+- [**102**Star][5y] [Py] [ajinabraham/static-dom-xss-scanner](https://github.com/ajinabraham/static-dom-xss-scanner) Static DOM XSS Scanner is a Static Analysis tool written in python that will iterate through all the JavaScript and HTML files under the given directory and will list out all the possible sources and sinks that may cause DOM XSS. At the end of the scan, the tool will generate an HTML report.
- [**102**Star][6m] [HTML] [ahmia/search](https://github.com/ahmia/search) Ahmia - Search Engine for onion services.
-- [**101**Star][10m] [Py] [thelinuxchoice/pyrat](https://github.com/thelinuxchoice/pyrat) Windows Remote Administration Tool (RAT)
-- [**101**Star][3y] [Py] [landgrey/taoman](https://github.com/landgrey/taoman) 快速收集
-- [**101**Star][10d] [Ruby] [arkadiyt/bounty-targets](https://github.com/arkadiyt/bounty-targets) This project crawls bug bounty platform scopes (like Hackerone/Bugcrowd/etc) hourly and dumps them into the bounty-targets-data repo
+- [**101**Star][8m] [Shell] [hmaverickadams/breach-parse](https://github.com/hmaverickadams/breach-parse) A tool for parsing breached passwords
+- [**101**Star][1m] [C#] [n1xbyte/donutcs](https://github.com/n1xbyte/donutcs) dem sharp donuts
+- [**101**Star][7d] [Ruby] [arkadiyt/bounty-targets](https://github.com/arkadiyt/bounty-targets) This project crawls bug bounty platform scopes (like Hackerone/Bugcrowd/etc) hourly and dumps them into the bounty-targets-data repo
- [**101**Star][9m] [polarislab/secpaper](https://github.com/PolarisLab/SecPaper) SecurityPaper For
-- [**101**Star][2y] [raikia/recon-ng-api-key-creation](https://github.com/raikia/recon-ng-api-key-creation) One of the biggest annoyances of using Recon-ng is getting everything set up to use it. So here I’ll outline the different API keys it can use and where to get them yourself.
- [**101**Star][4m] [Py] [6e726d/wig](https://github.com/6e726d/wig) Tools for 802.11 information gathering.
-- [**101**Star][2m] [Shell] [greycatz/cloudunflare](https://github.com/greycatz/cloudunflare) Reconnaissance Real IP address for Cloudflare Bypass
- [**101**Star][2y] [Py] [znuh/re-dected](https://github.com/znuh/re-dected) tools for playing with DECT
-- [**101**Star][15d] [HTML] [w3c/webappsec-csp](https://github.com/w3c/webappsec-csp) WebAppSec Content Security Policy
-- [**101**Star][30d] [Kotlin] [uber/crumb](https://github.com/uber/crumb) An annotation processor for breadcrumbing metadata across compilation boundaries.
-- [**101**Star][15d] [Py] [testerting/hacker101-ctf](https://github.com/testerting/hacker101-ctf) Hacker101 CTF Writeup
-- [**101**Star][3y] [Py] [tbgsecurity/splunk_shells](https://github.com/tbgsecurity/splunk_shells) Weaponizing Splunk with reverse and bind shells.
-- [**101**Star][5m] [Py] [spring-epfl/lightnion](https://github.com/spring-epfl/lightnion) A light version of Tor portable to the browser
+- [**101**Star][3m] [xx0hcd/malleable-c2-profiles](https://github.com/xx0hcd/malleable-c2-profiles) Cobalt Strike - Malleable C2 Profiles. A collection of profiles used in different projects using Cobalt Strike
+- [**101**Star][17d] [HTML] [w3c/webappsec-csp](https://github.com/w3c/webappsec-csp) WebAppSec Content Security Policy
+- [**101**Star][4y] [utkusen/eda2](https://github.com/utkusen/eda2) a more complex ransomware honeypot
+- [**101**Star][2y] [Java] [spiderlabs/airachnid-burp-extension](https://github.com/spiderlabs/airachnid-burp-extension) A Burp Extension to test applications for vulnerability to the Web Cache Deception attack
- [**101**Star][6m] [Py] [skysider/vulnpoc](https://github.com/skysider/vulnpoc) Vulnerability Verification Environment based on Docker
+- [**101**Star][4y] [Ruby] [sam-b/hashdata](https://github.com/sam-b/hashdata) A command line Hash Identifying tool.
- [**101**Star][8m] [Rust] [rub-syssec/nautilus](https://github.com/rub-syssec/nautilus) a grammar based feedback fuzzer
- [**101**Star][2m] [Py] [raw-packet/raw-packet](https://github.com/raw-packet/raw-packet) Raw-packet Project
-- [**101**Star][1y] [JS] [rassec/a_scan_framework](https://github.com/rassec/a_scan_framework) Network Security Vulnerability Manage
- [**101**Star][9m] [polarislab/secpaper](https://github.com/polarislab/secpaper) SecurityPaper For
-- [**101**Star][17d] [Py] [patois/idapyhelper](https://github.com/patois/idapyhelper) IDAPyHelper is a script for the Interactive Disassembler that helps writing IDAPython scripts and plugins.
+- [**101**Star][5d] [Dockerfile] [peterdavehello/tor-socks-proxy](https://github.com/peterdavehello/tor-socks-proxy) Setup Tor SOCKS5 proxy server with a < 10MB
+- [**101**Star][2m] [C] [onotelli/justniffer](https://github.com/onotelli/justniffer) Justniffer Just A Network TCP Packet Sniffer .Justniffer is a network protocol analyzer that captures network traffic and produces logs in a customized way, can emulate Apache web server log files, track response times and extract all "intercepted" files from the HTTP traffic
- [**101**Star][2m] [Java] [netspi/burp-extensions](https://github.com/netspi/burp-extensions) Central Repo for Burp extensions
+- [**101**Star][2y] [C++] [nccgroup/tpmgenie](https://github.com/nccgroup/tpmgenie) TPM Genie is an I2C bus interposer for discrete Trusted Platform Modules
- [**101**Star][3y] [Py] [n00py/norknork](https://github.com/n00py/norknork) Powershell Empire Persistence finder
- [**101**Star][1y] [Java] [mystech7/burp-hunter](https://github.com/mystech7/burp-hunter) XSS Hunter Burp Plugin
+- [**101**Star][1y] [Py] [mr-un1k0d3r/windows-signedbinary](https://github.com/mr-un1k0d3r/windows-signedbinary) Generate Windows Signed Binary With a Different Hash
- [**101**Star][2m] [Py] [mkorman90/regipy](https://github.com/mkorman90/regipy) Regipy is an os independent python library for parsing offline registry hives
- [**101**Star][1y] [Go] [milo2012/cve-2018-0296](https://github.com/milo2012/cve-2018-0296) Test CVE-2018-0296 and extract usernames
- [**101**Star][2y] [C++] [mfontanini/dot11decrypt](https://github.com/mfontanini/dot11decrypt) An 802.11 WEP/WPA2 on-the-fly decrypter.
- [**101**Star][3y] [mattifestation/deviceguardbypassmitigationrules](https://github.com/mattifestation/deviceguardbypassmitigationrules) A reference Device Guard code integrity policy consisting of FilePublisher deny rules for published Device Guard configuration bypasses
-- [**101**Star][3m] [Py] [matrix1001/heapinspect](https://github.com/matrix1001/heapinspect)
-- [**101**Star][22d] [C] [madeye/tcp_china](https://github.com/madeye/tcp_china) TCP China congestion control algorithm
- [**101**Star][1y] [Py] [macr0phag3/sniffer](https://github.com/macr0phag3/sniffer) A Sniffer for Open-WLAN
- [**101**Star][11m] [C] [kirillwow/ids_bypass](https://github.com/kirillwow/ids_bypass) 入侵检测系统(IDS)绕过PoC
- [**101**Star][4y] [Ruby] [joernchen/xxeserve](https://github.com/joernchen/xxeserve) XXE Out of Band Server.
-- [**101**Star][1m] [Go] [jmpsec/osctrl](https://github.com/jmpsec/osctrl) Fast and efficient osquery management
-- [**101**Star][2y] [C] [hc0d3r/sudohulk](https://github.com/hc0d3r/sudohulk) 使用ptraceHook系统调用execve, 监控并修改sudo命令的参数
-- [**101**Star][2y] [Java] [gosecure/csp-auditor](https://github.com/gosecure/csp-auditor) Burp and ZAP plugin to analyse Content-Security-Policy headers or generate template CSP configuration from crawling a Website
+- [**101**Star][2m] [ihebski/a-red-teamer-diaries](https://github.com/ihebski/a-red-teamer-diaries) RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.
- [**101**Star][1y] [Py] [google/closure-linter](https://github.com/google/closure-linter) Automatically exported from code.google.com/p/closure-linter
-- [**101**Star][4y] [PowerShell] [enigma0x3/invoke-loginprompt](https://github.com/enigma0x3/invoke-loginprompt) Invokes a Windows Security Login Prompt and outputs the clear text password.
+- [**101**Star][3m] [C++] [giovannidicanio/winreg](https://github.com/giovannidicanio/winreg) Convenient high-level C++ wrapper around the Windows Registry API
+- [**101**Star][4y] [PS] [enigma0x3/invoke-loginprompt](https://github.com/enigma0x3/invoke-loginprompt) Invokes a Windows Security Login Prompt and outputs the clear text password.
- [**101**Star][2y] [Objective-C++] [electrajailbreak/cydia](https://github.com/electrajailbreak/cydia) Cydia modified for iOS 11/Electra
- [**101**Star][8y] [C] [djrbliss/libplayground](https://github.com/djrbliss/libplayground) A simple framework for developing Linux kernel heap exploit techniques
-- [**101**Star][2y] [PowerShell] [darkoperator/defcon25_ps_workshop](https://github.com/darkoperator/defcon25_ps_workshop) Materials of Workshop presented at DEFCON 25
+- [**101**Star][2y] [PS] [darkoperator/defcon25_ps_workshop](https://github.com/darkoperator/defcon25_ps_workshop) Materials of Workshop presented at DEFCON 25
- [**101**Star][3m] [C#] [damonmohammadbagher/nativepayload_reverse_tcp](https://github.com/damonmohammadbagher/nativepayload_reverse_tcp) Meterpreter Encrypted Payload by C#
-- [**101**Star][7d] [C++] [cyclops-community/ctf](https://github.com/cyclops-community/ctf) Cyclops Tensor Framework: parallel arithmetic on multidimensional arrays
+- [**101**Star][8d] [C++] [cyclops-community/ctf](https://github.com/cyclops-community/ctf) Cyclops Tensor Framework: parallel arithmetic on multidimensional arrays
- [**101**Star][1y] [Java] [cornerpirate/java-stager](https://github.com/cornerpirate/java-stager) A PoC Java Stager which can download, compile, and execute a Java file in memory.
- [**101**Star][5y] [C++] [clymb3r/misc-windows-hacking](https://github.com/clymb3r/misc-windows-hacking) Miscellaneous projects related to attacking Windows.
- [**101**Star][2y] [Java] [clr2of8/gathercontacts](https://github.com/clr2of8/gathercontacts) A Burp Suite Extension to pull Employee Names from Google and Bing LinkedIn Search Results
+- [**101**Star][1y] [C#] [chrismaddalena/sharpcloud](https://github.com/chrismaddalena/sharpcloud) Simple C# for checking for the existence of credential files related to AWS, Microsoft Azure, and Google Compute.
- [**101**Star][2y] [Py] [ceh-tn/the-axer](https://github.com/ceh-tn/the-axer) replace the manual procedure of creating your payloads with msfvenom , making it easier and a lot quicker
- [**101**Star][1y] [JS] [blackhole1/autofindxssandcsrf](https://github.com/blackhole1/autofindxssandcsrf) 自动化检测页面是否存在XSS和CSRF漏洞的浏览器插件(A plugin for browser that checks automatically whether a page haves XSS and CSRF vulnerabilities)
- [**101**Star][2y] [C] [benjibobs/async_wake](https://github.com/benjibobs/async_wake) iOS 11.1.2 kernel exploit and PoC local kernel debugger by
- [**101**Star][2y] [C] [akayn/postexploits](https://github.com/akayn/postexploits) post exploitation: Keyloggers, UacByPass etc..
-- [**101**Star][5y] [Py] [ajinabraham/static-dom-xss-scanner](https://github.com/ajinabraham/static-dom-xss-scanner) Static DOM XSS Scanner is a Static Analysis tool written in python that will iterate through all the JavaScript and HTML files under the given directory and will list out all the possible sources and sinks that may cause DOM XSS. At the end of the scan, the tool will generate an HTML report.
-- [**101**Star][18d] [Py] [adulau/cve-search](https://github.com/adulau/cve-search) cve-search is a tool to import CVE (Common Vulnerabilities and Exposures) and CPE (Common Platform Enumeration) into a MongoDB to facilitate search and processing of CVEs.
-- [**100**Star][17d] [firmianay/security-paper](https://github.com/firmianay/security-paper) (与本人兴趣强相关的)各种安全or计算机资料收集
-- [**100**Star][7d] [Makefile] [honwen/openwrt-shadowsocksr](https://github.com/honwen/openwrt-shadowsocksr) ShadowsocksR-libev for OpenWrt/LEDE
+- [**101**Star][20d] [Py] [adulau/cve-search](https://github.com/adulau/cve-search) cve-search is a tool to import CVE (Common Vulnerabilities and Exposures) and CPE (Common Platform Enumeration) into a MongoDB to facilitate search and processing of CVEs.
+- [**101**Star][3m] [Java] [0ffffffffh/dragondance](https://github.com/0ffffffffh/dragondance) Binary code coverage visualizer plugin for Ghidra
+ - [Ghidra插件](https://github.com/0ffffffffh/dragondance/blob/master/README.md)
+ - [coverage-pin](https://github.com/0ffffffffh/dragondance/blob/master/coveragetools/README.md) 使用Pin收集信息
+- [**100**Star][6m] [C] [siguza/iometa](https://github.com/siguza/iometa) Just another IOKit class dumper
+- [**100**Star][9d] [Makefile] [honwen/openwrt-shadowsocksr](https://github.com/honwen/openwrt-shadowsocksr) ShadowsocksR-libev for OpenWrt/LEDE
+- [**100**Star][2d] [JS] [paradiseduo/shadowsocksx-ng-r8](https://github.com/paradiseduo/shadowsocksx-ng-r8) ShadowsocksX-NG-R for MacOS
+- [**100**Star][14d] [Shell] [snail007/proxy_admin_free](https://github.com/snail007/proxy_admin_free) A powerful web console of snail007/goproxy .
+- [**100**Star][3y] [C] [sciencemanx/ctf_import](https://github.com/sciencemanx/ctf_import) Run basic functions from stripped binaries cross platform
- [**100**Star][4y] [woolabs/reverseng](https://github.com/woolabs/reverseng) 《Reverse Engineering for Beginners》翻译
+- [**100**Star][3y] [Py] [williballenthin/shellbags](https://github.com/williballenthin/shellbags) Cross-platform, open-source shellbag parser
- [**100**Star][9m] [Shell] [vishnudxb/docker-blackeye](https://github.com/vishnudxb/docker-blackeye) Docker container for creating the phishing sites using Blackeye
-- [**100**Star][4y] [utkusen/eda2](https://github.com/utkusen/eda2) a more complex ransomware honeypot
+- [**100**Star][3y] [Py] [tbgsecurity/splunk_shells](https://github.com/tbgsecurity/splunk_shells) Weaponizing Splunk with reverse and bind shells.
- [**100**Star][2y] [Py] [syss-research/outis](https://github.com/syss-research/outis) outis is a custom Remote Administration Tool (RAT) or something like that. It was build to support various transport methods (like DNS) and platforms (like Powershell).
- [**100**Star][10m] [Go] [subutai-io/p2p](https://github.com/subutai-io/p2p) P2P Cloud project allows users to build their private networks.
+- [**100**Star][5m] [Py] [spring-epfl/lightnion](https://github.com/spring-epfl/lightnion) A light version of Tor portable to the browser
- [**100**Star][2y] [C] [shellster/dcsyncmonitor](https://github.com/shellster/dcsyncmonitor) Monitors for DCSYNC and DCSHADOW attacks and create custom Windows Events for these events.
- [**100**Star][1y] [Py] [securestate/eapeak](https://github.com/securestate/eapeak) Analysis Suite For EAP Enabled Wireless Networks
-- [**100**Star][2m] [C] [onotelli/justniffer](https://github.com/onotelli/justniffer) Justniffer Just A Network TCP Packet Sniffer .Justniffer is a network protocol analyzer that captures network traffic and produces logs in a customized way, can emulate Apache web server log files, track response times and extract all "intercepted" files from the HTTP traffic
+- [**100**Star][1y] [sapran/dontclickshit](https://github.com/sapran/dontclickshit) Як не стати кібер-жертвою
- [**100**Star][3y] [CSS] [nonce-disrespect/nonce-disrespect](https://github.com/nonce-disrespect/nonce-disrespect) Nonce-Disrespecting Adversaries: Practical Forgery Attacks on GCM in TLS
- [**100**Star][3m] [C] [nese-team/ourchallenges](https://github.com/nese-team/ourchallenges) writeups for our challenges
- [**100**Star][3y] [Py] [ncouture/mockssh](https://github.com/ncouture/mockssh) Mock an SSH server and define all commands it supports (Python, Twisted)
-- [**100**Star][2y] [C++] [nccgroup/tpmgenie](https://github.com/nccgroup/tpmgenie) TPM Genie is an I2C bus interposer for discrete Trusted Platform Modules
- [**100**Star][2m] [Py] [nccgroup/gitpwnd](https://github.com/nccgroup/gitpwnd) gitpwnd:网络渗透测试工具,可使攻击者向被攻击机器发送命令,并使用 git repo 作为 C&C 传输层接收结果
-- [**100**Star][1y] [Py] [mr-un1k0d3r/windows-signedbinary](https://github.com/mr-un1k0d3r/windows-signedbinary) Generate Windows Signed Binary With a Different Hash
+- [**100**Star][2m] [momika233/joomla-3.4.6-rce](https://github.com/momika233/joomla-3.4.6-rce) Joomla 3.4.6 – Remote Code Execution
- [**100**Star][5y] [JS] [malwarelu/malwasm](https://github.com/malwarelu/malwasm) Offline debugger for malware's reverse engineering
-- [**100**Star][21d] [C++] [m2team/privexec](https://github.com/m2team/privexec) Run the program with the specified permission level (C++17 required)
- [**100**Star][12m] [Py] [krintoxi/noobsec-toolkit](https://github.com/krintoxi/noobsec-toolkit) NoobSecToolkit is a Python Based Tool kit that brings together powerful security and anonymity tools and scripts with predefined security configurations and modifications. Making it very simple for students and the inexperienced to get started with offensive security!
+- [**100**Star][5d] [Java] [jpmorganchase/tessera](https://github.com/jpmorganchase/tessera) Enterprise Implementation of Quorum's transaction manager
- [**100**Star][4y] [Py] [jonathansalwan/abf](https://github.com/jonathansalwan/abf) Abstract Binary Format Manipulation - ELF, PE and Mach-O format
+- [**100**Star][1m] [jonaschn/awesome-he](https://github.com/jonaschn/awesome-he)
- [**100**Star][3y] [C] [jndok/iokit-dumper-arm64](https://github.com/jndok/iokit-dumper-arm64) tool for statically reconstructing the IOKit classes hierarchy from iOS kernelcache dumps
-- [**100**Star][6m] [Py] [janniskirschner/horn3t](https://github.com/janniskirschner/horn3t) Powerful Visual Subdomain Enumeration at the Click of a Mouse
- [**100**Star][4y] [C] [ionescu007/hookingnirvana](https://github.com/ionescu007/hookingnirvana) Recon 2015 Presentation from Alex Ionescu
-- [**100**Star][16d] [PHP] [io-developer/php-whois](https://github.com/io-developer/php-whois) PHP WHOIS provides parsed and raw whois lookup of domains and ASN routes. PHP 5.4+ and 7+ compatible
-- [**100**Star][3m] [C++] [giovannidicanio/winreg](https://github.com/giovannidicanio/winreg) Convenient high-level C++ wrapper around the Windows Registry API
- [**100**Star][2y] [Py] [g0rx/cve-2018-7600-drupal-rce](https://github.com/g0rx/cve-2018-7600-drupal-rce) CVE-2018-7600 Drupal RCE
-- [**100**Star][7m] [fox-it/cobaltstrike-extraneous-space](https://github.com/fox-it/cobaltstrike-extraneous-space) Historical list of {Cobalt Strike,NanoHTTPD} servers
+- [**100**Star][2y] [C++] [fvantienen/dji_rev](https://github.com/fvantienen/dji_rev) DJI Reverse engineering
+- [**100**Star][8m] [fox-it/cobaltstrike-extraneous-space](https://github.com/fox-it/cobaltstrike-extraneous-space) Historical list of {Cobalt Strike,NanoHTTPD} servers
+- [**100**Star][4y] [Py] [eset/vba-dynamic-hook](https://github.com/eset/vba-dynamic-hook) dynamically analyzes VBA macros inside Office documents by hooking function calls
+- [**100**Star][2m] [Py] [elevenpaths/uac-a-mola](https://github.com/elevenpaths/uac-a-mola)
- [**100**Star][3m] [Py] [cs01/pygdbmi](https://github.com/cs01/pygdbmi) A library to parse gdb mi output, as well as control gdb subprocesses
- [**100**Star][4y] [Py] [cr4sh/uefi_boot_script_expl](https://github.com/cr4sh/uefi_boot_script_expl) CHIPSEC module that exploits UEFI boot script table vulnerability
+- [**100**Star][2y] [C] [comsecuris/luaqemu](https://github.com/comsecuris/luaqemu) QEMU-based framework exposing several of QEMU-internal APIs to a LuaJIT core injected into QEMU itself. Among other things, this allows fast prototyping of target systems without any native code and minimal effort in Lua.
- [**100**Star][1y] [C] [cnlohr/fx3fun](https://github.com/cnlohr/fx3fun) Charles's playground for the Cypress FX3
-- [**100**Star][1y] [C#] [chrismaddalena/sharpcloud](https://github.com/chrismaddalena/sharpcloud) Simple C# for checking for the existence of credential files related to AWS, Microsoft Azure, and Google Compute.
- [**100**Star][5y] [Py] [blasty/moneyshot](https://github.com/blasty/moneyshot) A collection of python scripts to aid you in the final steps of binary exploitation or during the construction of buffers.
-- [**100**Star][9d] [Scala] [bigdatagenomics/mango](https://github.com/bigdatagenomics/mango) A scalable genome browser. Apache 2 licensed.
- [**100**Star][2y] [JS] [avlidienbrunn/bountydash](https://github.com/avlidienbrunn/bountydash) 从所有BugBounty平台收集你获取的奖励信息, 生成进度和漏洞类型信息图表等
+- [**100**Star][2y] [C++] [artsabintsev/ethminer-for-macos](https://github.com/artsabintsev/ethminer-for-macos) Ethereum GPU Miner for macOS.
- [**100**Star][1m] [Py] [angr/claripy](https://github.com/angr/claripy) An abstraction layer for constraint solvers.
-- [**100**Star][8m] [Objective-C] [anders/pwgen](https://github.com/anders/pwgen) password generator for OS X
+- [**100**Star][8m] [ObjC] [anders/pwgen](https://github.com/anders/pwgen) password generator for OS X
- [**100**Star][4y] [Py] [alexplaskett/qnxsecurity](https://github.com/alexplaskett/qnxsecurity) QNX and BB10 Security Tools
- [**100**Star][2y] [Py] [acceis/crypto_identifier](https://github.com/acceis/crypto_identifier) Crypto tool for pentest and ctf : try to uncipher data using multiple algorithms and block chaining modes. Usefull for a quick check on unknown cipher text and key dictionnary
- [**100**Star][11m] [1hack0/bug-bounty-101](https://github.com/1hack0/bug-bounty-101) Happy Hunting
-- [**100**Star][3m] [Java] [0ffffffffh/dragondance](https://github.com/0ffffffffh/dragondance) Binary code coverage visualizer plugin for Ghidra
- - [Ghidra插件](https://github.com/0ffffffffh/dragondance/blob/master/README.md)
- - [coverage-pin](https://github.com/0ffffffffh/dragondance/blob/master/coveragetools/README.md) 使用Pin收集信息
-- [**99**Star][8d] [JS] [javascript-obfuscator/javascript-obfuscator-ui](https://github.com/javascript-obfuscator/javascript-obfuscator-ui) A web UI to the JavaScript Obfuscator node.js package.
+- [**99**Star][2m] [Shell] [nfc-tools/milazycracker](https://github.com/nfc-tools/milazycracker) Mifare Classic Plus - Hardnested Attack Implementation for SCL3711 LibNFC USB reader
+- [**99**Star][10d] [JS] [javascript-obfuscator/javascript-obfuscator-ui](https://github.com/javascript-obfuscator/javascript-obfuscator-ui) A web UI to the JavaScript Obfuscator node.js package.
- [**99**Star][10m] [winterssy/miui-purify](https://github.com/winterssy/miui-purify) 个人兴趣项目存档,使用 apktool 魔改 MIUI ROM,去除 MIUI 系统新增的广告。
+- [**99**Star][14d] [Py] [devploit/xorpass](https://github.com/devploit/xorpass) Encoder to bypass WAF filters using XOR operations
+- [**99**Star][2d] [TSQL] [cisagov/cset](https://github.com/cisagov/cset) Cybersecurity Evaluation Tool
+- [**99**Star][17d] [PS] [dsccommunity/computermanagementdsc](https://github.com/dsccommunity/ComputerManagementDsc)
- [**99**Star][4m] [houjingyi233/cpu-vulnerability-collections](https://github.com/houjingyi233/CPU-vulnerability-collections)
- [**99**Star][2y] [Shell] [aoncyberlabs/cexigua](https://github.com/AonCyberLabs/Cexigua) Linux based inter-process code injection without ptrace(2)
-- [**99**Star][20d] [Py] [rapid7/le](https://github.com/rapid7/le) A command line utility for a convenient access to Logentries logging infrastructure.
+- [**99**Star][1m] [PHP] [gwillem/magevulndb](https://github.com/gwillem/magevulndb) Central repository for third party Magento extensions with known security issues.
+- [**99**Star][22d] [Py] [rapid7/le](https://github.com/rapid7/le) A command line utility for a convenient access to Logentries logging infrastructure.
- [**99**Star][2y] [antid0tecom/ios-kerneldocs](https://github.com/Antid0teCom/ios-kerneldocs) Various files helping to better understand the iOS / WatchOS / tvOS kernels
-- [**99**Star][3y] [C] [sciencemanx/ctf_import](https://github.com/sciencemanx/ctf_import) Run basic functions from stripped binaries cross platform
- [**99**Star][2y] [C++] [atxsinn3r/amsiscanner](https://github.com/atxsinn3r/amsiscanner) A C/C++ implementation of Microsoft's Antimalware Scan Interface
- [**99**Star][9m] [C#] [zodiacon/peexplorer](https://github.com/zodiacon/peexplorer) Portable Executable Explorer
- [**99**Star][3y] [Py] [ym2011/scanbackdoor](https://github.com/ym2011/scanbackdoor) Webshell扫描工具,通过各种规则和算法实现服务器脚本后门查杀
-- [**99**Star][3m] [xx0hcd/malleable-c2-profiles](https://github.com/xx0hcd/malleable-c2-profiles) Cobalt Strike - Malleable C2 Profiles. A collection of profiles used in different projects using Cobalt Strike
+- [**99**Star][2y] [C] [xerpi/ds4vita](https://github.com/xerpi/ds4vita)
- [**99**Star][1y] [Py] [wonderqs/blade](https://github.com/wonderqs/blade) A webshell connection tool with customized WAF bypass payloads
-- [**99**Star][3y] [Py] [williballenthin/shellbags](https://github.com/williballenthin/shellbags) Cross-platform, open-source shellbag parser
-- [**99**Star][25d] [Shell] [trimstray/massh-enum](https://github.com/trimstray/massh-enum) OpenSSH 2.3 up to 7.4 Mass Username Enumeration (CVE-2018-15473).
-- [**99**Star][2y] [Py] [trendmicro/defplorex](https://github.com/trendmicro/defplorex) 一种用于大规模电子犯罪取证的机器学习工具包
+- [**99**Star][27d] [Shell] [trimstray/massh-enum](https://github.com/trimstray/massh-enum) OpenSSH 2.3 up to 7.4 Mass Username Enumeration (CVE-2018-15473).
+- [**99**Star][14d] [C++] [trailofbits/sienna-locomotive](https://github.com/trailofbits/sienna-locomotive) A user-friendly fuzzing and crash triage tool for Windows
- [**99**Star][1y] [Py] [thehappydinoa/iosrestrictionbruteforce](https://github.com/thehappydinoa/iosrestrictionbruteforce) Crack iOS Restriction Passcodes with Python
-- [**99**Star][2y] [PowerShell] [testingpens/malwarepersistencescripts](https://github.com/testingpens/malwarepersistencescripts) A collection of scripts I've written to help red and blue teams with malware persistence techniques.
+- [**99**Star][2y] [PS] [testingpens/malwarepersistencescripts](https://github.com/testingpens/malwarepersistencescripts) A collection of scripts I've written to help red and blue teams with malware persistence techniques.
- [**99**Star][9y] [C] [tecknicaltom/dsniff](https://github.com/tecknicaltom/dsniff) dsniff is a collection of tools for network auditing and penetration testing.
- [**99**Star][12m] [target/webbreaker](https://github.com/target/webbreaker) 自动并集中管理DAST,将其作为 DevOps pipeline 的一部分。(DAST:Dynamic Application Security Test,动态应用程序安全测试)
- [**99**Star][3y] [C++] [tandasat/exploitcapcom](https://github.com/tandasat/exploitcapcom) This is a standalone exploit for a vulnerable feature in Capcom.sys
+- [**99**Star][2y] [Py] [sonickun/ctf-crypto-writeups](https://github.com/sonickun/ctf-crypto-writeups)
- [**99**Star][6m] [Py] [smythtech/sdnpwn](https://github.com/smythtech/sdnpwn) SDN 渗透测试工具包。(SDN:Software-Defined Networks,软件定义网络)
- [**99**Star][4y] [Py] [racwn/wp-file-analyser](https://github.com/racwn/wp-file-analyser) Find modified, missing and extra files in a WordPress directory
- [**99**Star][3y] [Java] [pwntester/s2-046-poc](https://github.com/pwntester/s2-046-poc) S2-046-PoC
- [**99**Star][2y] [Py] [pure-l0g1c/pulse](https://github.com/pure-l0g1c/pulse) Brute Force For Facebook,Instagram & Twitter
- [**99**Star][6m] [Shell] [parrotsec/anonsurf](https://github.com/parrotsec/anonsurf) parrot anonymous mode
-- [**99**Star][26d] [C++] [oxagast/ansvif](https://github.com/oxagast/ansvif) A Not So Very Intelligent Fuzzer: An advanced fuzzing framework designed to find vulnerabilities in C/C++ code.
-- [**99**Star][10m] [C] [nowrep/vita-shellbat](https://github.com/nowrep/vita-shellbat) taiHEN plugin that shows battery percent in statusbar
+- [**99**Star][28d] [C++] [oxagast/ansvif](https://github.com/oxagast/ansvif) A Not So Very Intelligent Fuzzer: An advanced fuzzing framework designed to find vulnerabilities in C/C++ code.
+- [**99**Star][1y] [PS] [nettitude/invoke-powerthief](https://github.com/nettitude/invoke-powerthief) The PowerThIEf, an Internet Explorer Post Exploitation library
- [**99**Star][2y] [Py] [mr-un1k0d3r/sct-obfuscator](https://github.com/mr-un1k0d3r/sct-obfuscator) Cobalt Strike SCT payload obfuscator
+- [**99**Star][2d] [TeX] [misp/misp-training](https://github.com/misp/misp-training) MISP trainings, threat intel and information sharing training materials with source code
+- [**99**Star][2m] [Py] [m4cs/traxss](https://github.com/m4cs/traxss) traxss | Automated XSS Vulnerability Scanner Currently In Development
- [**99**Star][3y] [lorexxar/feigong](https://github.com/lorexxar/feigong) Feigong,针对各种情况自由变化的mysql注入脚本,In view of the different things freely change the mysql injection script
- [**99**Star][2y] [CSS] [lmy375/pinvmp](https://github.com/lmy375/pinvmp) 虚拟化代码辅助分析工具
+- [**99**Star][30d] [Py] [lambdaconcept/minerva](https://github.com/lambdaconcept/minerva) A 32-bit RISC-V soft processor
- [**99**Star][2m] [Shell] [johanlike/djy-oneplus6-or-oneplus6t-nethunter-andrax-kernel](https://github.com/johanlike/djy-oneplus6-or-oneplus6t-nethunter-andrax-kernel) DJY Nethunter And Andrax Kernel Oneplus6-Oneplus6T
- [**99**Star][3y] [Java] [jkinder/jakstab](https://github.com/jkinder/jakstab) The Jakstab static analysis platform for binaries
- [**99**Star][3m] [Py] [intezer/memorypatchdetector](https://github.com/intezer/memorypatchdetector) Detects code differentials between executables in disk and the corresponding processes/modules in memory
- [**99**Star][2m] [C] [iaik/flush_flush](https://github.com/iaik/flush_flush) This repository contains examples of Flush+Flush cache attacks
- [**99**Star][11m] [hasherezade/pe-bear-releases](https://github.com/hasherezade/pe-bear-releases) PE-bear (builds only)
-- [**99**Star][2y] [C++] [fvantienen/dji_rev](https://github.com/fvantienen/dji_rev) DJI Reverse engineering
-- [**99**Star][3y] [flothrone/bootguard](https://github.com/flothrone/bootguard)
+- [**99**Star][1y] [Java] [ganyao114/va_doc](https://github.com/ganyao114/va_doc) VirtualApp 代码注释
- [**99**Star][5y] [Java] [finn-no/xss-html-filter](https://github.com/finn-no/xss-html-filter) Open Sourced HTML filtering utility for Java. Used to parse user-submitted input and sanitize it against potential cross site scripting attacks, malicious html, or simply badly formed html.
- [**99**Star][1y] [Py] [darx0r/stingray](https://github.com/darx0r/stingray) IDAPython plugin for finding function strings recursively
-- [**99**Star][2y] [C] [comsecuris/luaqemu](https://github.com/comsecuris/luaqemu) QEMU-based framework exposing several of QEMU-internal APIs to a LuaJIT core injected into QEMU itself. Among other things, this allows fast prototyping of target systems without any native code and minimal effort in Lua.
+- [**99**Star][3y] [C#] [cyberpoint/ruxcon2016etw](https://github.com/cyberpoint/ruxcon2016etw) Ruxcon2016 POC Code
- [**99**Star][3y] [C] [codelion/pathgrind](https://github.com/codelion/pathgrind) Path based Dynamic Analysis
+- [**99**Star][4m] [Py] [circl/url-abuse](https://github.com/circl/url-abuse) A Versatile Software for URL review, analysis and black-list reporting
- [**99**Star][3y] [Py] [bontchev/wlscrape](https://github.com/bontchev/wlscrape) A tool for scrapping the possible malware from the Wikileaks AKP leak
+- [**99**Star][4y] [JS] [bishopfox/cve-2016-1764](https://github.com/bishopfox/cve-2016-1764) Recovery of Plaintext iMessage Data Without Breaking Crypto
+- [**99**Star][8d] [Scala] [bigdatagenomics/mango](https://github.com/bigdatagenomics/mango) A scalable genome browser. Apache 2 licensed.
- [**99**Star][9m] [Py] [attactics/nmapgrapher](https://github.com/attactics/nmapgrapher) A tool to generate graph and other output from NMAP XML files
- [**99**Star][1y] [C#] [atredispartners/cve-2018-0952-systemcollector](https://github.com/atredispartners/cve-2018-0952-systemcollector) PoC for Privilege Escalation in Windows 10 Diagnostics Hub Standard Collector Service
-- [**98**Star][2m] [Shell] [nfc-tools/milazycracker](https://github.com/nfc-tools/milazycracker) Mifare Classic Plus - Hardnested Attack Implementation for SCL3711 LibNFC USB reader
-- [**98**Star][6m] [C] [siguza/iometa](https://github.com/siguza/iometa) Just another IOKit class dumper
- [**98**Star][4y] [C] [aquynh/unidos](https://github.com/aquynh/unidos) MSDOS emulator built on top of Unicorn engine
+- [**98**Star][7d] [Shell] [seajaysec/cypheroth](https://github.com/seajaysec/cypheroth) Automated, extensible toolset that runs cypher queries against Bloodhound's Neo4j backend and saves output to spreadsheets.
+- [**98**Star][3m] [C++] [marcosd4h/sysmonx](https://github.com/marcosd4h/sysmonx) An Augmented Drop-In Replacement of Sysmon
+- [**98**Star][23d] [chryzsh/awesome-bloodhound](https://github.com/chryzsh/awesome-bloodhound) A curated list of awesome BloodhoundAD resources
- [**98**Star][1m] [C] [radareorg/radare2-bindings](https://github.com/radareorg/radare2-bindings) Bindings of the r2 api for Valabind and friends
-- [**98**Star][1m] [PHP] [gwillem/magevulndb](https://github.com/gwillem/magevulndb) Central repository for third party Magento extensions with known security issues.
- [**98**Star][8m] [Py] [zsdlove/apkvulcheck](https://github.com/zsdlove/apkvulcheck) This is a tool to help androidcoder to check the flaws in their projects.
-- [**98**Star][2y] [C] [xerpi/ds4vita](https://github.com/xerpi/ds4vita)
+- [**98**Star][2y] [Py] [trendmicro/defplorex](https://github.com/trendmicro/defplorex) 一种用于大规模电子犯罪取证的机器学习工具包
- [**98**Star][9m] [Go] [superfly/wormhole](https://github.com/superfly/wormhole) Fly.io secure tunnel
- [**98**Star][4y] [Java] [summitt/burp-ysoserial](https://github.com/summitt/burp-ysoserial) YSOSERIAL Integration with burp suite
-- [**98**Star][2y] [Py] [sonickun/ctf-crypto-writeups](https://github.com/sonickun/ctf-crypto-writeups)
- [**98**Star][3y] [singe/wifi-frequency-hacker](https://github.com/singe/wifi-frequency-hacker) A modified frequency regulatory domain configuration that doesn't limit you.
- [**98**Star][2m] [Ruby] [simp/simp-core](https://github.com/simp/simp-core) The base SIMP build repository
- [**98**Star][4y] [PHP] [silentbreaksec/throwbacklp](https://github.com/silentbreaksec/throwbacklp) Listening Post for Throwback Implant
+- [**98**Star][2y] [Java] [securityriskadvisors/cmd.jsp](https://github.com/securityriskadvisors/cmd.jsp) A super small jsp webshell with file upload capabilities.
- [**98**Star][6y] [C++] [sdhash/sdhash](https://github.com/sdhash/sdhash) allows two arbitrary blobs of data to be compared for similarity based on common strings of binary data
- [**98**Star][1y] [Py] [scottgarner/beetbox](https://github.com/scottgarner/beetbox) Python code that powers the BeetBox.
-- [**98**Star][1y] [sapran/dontclickshit](https://github.com/sapran/dontclickshit) Як не стати кібер-жертвою
+- [**98**Star][1m] [Py] [sandialabs/dr_robot](https://github.com/sandialabs/dr_robot) This tool can be used to enumerate the subdomains associated with a company by aggregating the results of multiple OSINT (Open Source Intelligence) tools.
+- [**98**Star][11m] [Batchfile] [sagishahar/lpeworkshop](https://github.com/sagishahar/lpeworkshop) Windows/Linux本地提权工作室
- [**98**Star][3m] [Py] [phith0n/realworldctf](https://github.com/phith0n/realworldctf) My Real World CTF challenges
- [**98**Star][5y] [Py] [onesourcecat/scan-framework](https://github.com/onesourcecat/scan-framework) A framework used for Vulnerability scanning
+- [**98**Star][10m] [C] [nowrep/vita-shellbat](https://github.com/nowrep/vita-shellbat) taiHEN plugin that shows battery percent in statusbar
- [**98**Star][4m] [Py] [mushorg/tanner](https://github.com/mushorg/tanner) He who flays the hide
+- [**98**Star][4m] [C++] [mixaill/fakepdb](https://github.com/mixaill/fakepdb) 通过IDA数据库生成PDB文件
- [**98**Star][4m] [Py] [milo2012/cve-2018-13382](https://github.com/milo2012/cve-2018-13382) CVE-2018-13382
- [**98**Star][2y] [C] [micropython/micropython-unicorn](https://github.com/micropython/micropython-unicorn) 基于 Unicorn 模拟器的虚拟微控制器(virtual microcontroller),以及针对此虚拟微控制器的 MicroPython。
- [**98**Star][3y] [Py] [merculite/ble-security](https://github.com/merculite/ble-security) Hacking Bluetooth Low Energy Locks
@@ -8520,44 +9024,54 @@ capabilities of the framework.
- [**98**Star][3y] [Py] [matiasb/demiurge](https://github.com/matiasb/demiurge) PyQuery-based scraping micro-framework.
- [**98**Star][1m] [Go] [ls0f/cracker](https://github.com/ls0f/cracker) tunnel over http[s]
- [**98**Star][2y] [Py] [leesoh/yams](https://github.com/leesoh/yams) A collection of Ansible roles for automating infosec builds.
-- [**98**Star][28d] [Py] [lambdaconcept/minerva](https://github.com/lambdaconcept/minerva) A 32-bit RISC-V soft processor
- [**98**Star][2y] [ktecv2000/how-to-play-ctf](https://github.com/ktecv2000/how-to-play-ctf) CTF入門建議
+- [**98**Star][15d] [Shell] [konstruktoid/ansible-role-hardening](https://github.com/konstruktoid/ansible-role-hardening) Ansible role to apply a security baseline. Systemd edition.
- [**98**Star][8m] [Swift] [kofktu/sniffer](https://github.com/kofktu/sniffer) Networking activity logger for Swift
- [**98**Star][2y] [Py] [kitctf/writeups](https://github.com/kitctf/writeups) CTF writeups
-- [**98**Star][7d] [Java] [jpmorganchase/tessera](https://github.com/jpmorganchase/tessera) Enterprise Implementation of Quorum's transaction manager
- [**98**Star][1y] [C] [jakeajames/multi_path](https://github.com/jakeajames/multi_path) multi_path with root and sandbox escape
- [**98**Star][2y] [Java] [irsl/jackson-rce-via-spel](https://github.com/irsl/jackson-rce-via-spel) An example project that exploits the default typing issue in Jackson-databind via Spring application contexts and expressions
-- [**98**Star][3y] [Objective-C] [insidegui/darkmode](https://github.com/insidegui/darkmode) Enable "real dark mode" on OS X / macOS
+- [**98**Star][3y] [ObjC] [insidegui/darkmode](https://github.com/insidegui/darkmode) Enable "real dark mode" on OS X / macOS
- [**98**Star][3m] [Py] [guyingbo/shadowproxy](https://github.com/guyingbo/shadowproxy) A proxy server that implements Socks5/Shadowsocks/Redirect/HTTP (tcp) and Shadowsocks/TProxy/Tunnel (udp) protocols.
- [**98**Star][1y] [Ruby] [green-m/green-hat-suite](https://github.com/green-m/green-hat-suite) Green-hat-suite is a tool to generate meterpreter/shell which could evade antivirus.
- [**98**Star][2y] [Py] [google/legilimency](https://github.com/google/legilimency) A Memory Research Platform for iOS
- [**98**Star][3y] [Shell] [gebl/dirtycow-docker-vdso](https://github.com/gebl/dirtycow-docker-vdso)
-- [**98**Star][2m] [Py] [elevenpaths/uac-a-mola](https://github.com/elevenpaths/uac-a-mola)
-- [**98**Star][3y] [C#] [cyberpoint/ruxcon2016etw](https://github.com/cyberpoint/ruxcon2016etw) Ruxcon2016 POC Code
+- [**98**Star][5m] [Py] [fmk0/scripts](https://github.com/fmk0/scripts)
+- [**98**Star][3y] [flothrone/bootguard](https://github.com/flothrone/bootguard)
- [**98**Star][2y] [C++] [cojocar/bin2llvm](https://github.com/cojocar/bin2llvm) A binary to LLVM translator
-- [**98**Star][3y] [PowerShell] [chango77747/adenumerator](https://github.com/chango77747/adenumerator) Active Directory enumeration from non-domain system.
-- [**98**Star][7d] [PowerShell] [awsmhacks/crackmapextreme](https://github.com/awsmhacks/crackmapextreme) For all your network pentesting needs
+- [**98**Star][3y] [PS] [chango77747/adenumerator](https://github.com/chango77747/adenumerator) Active Directory enumeration from non-domain system.
+- [**98**Star][2m] [byt3bl33d3r/slides](https://github.com/byt3bl33d3r/slides) Slides from various talks that I've given over the years
+- [**98**Star][2y] [Py] [blackye/webdirdig](https://github.com/blackye/webdirdig) web敏感目录、信息泄漏批量扫描脚本,结合爬虫、目录深度遍历。
- [**98**Star][4m] [Pascal] [artlav/meteor_decoder](https://github.com/artlav/meteor_decoder) A portable decoder for METEOR M weather satellite LRPT signal
-- [**98**Star][7m] [Py] [alexmyg/andropytool](https://github.com/alexmyg/andropytool) A framework for automated extraction of static and dynamic features from Android applications
+- [**98**Star][4y] [Java] [andrewmichaelsmith/bluepot](https://github.com/andrewmichaelsmith/bluepot) Bluetooth Honeypot
- [**98**Star][1y] [Go] [0x09al/go-deliver](https://github.com/0x09al/go-deliver) Go-deliver is a payload delivery tool coded in Go.
-- [**97**Star][1y] [PowerShell] [hackplayers/empire-mod-hackplayers](https://github.com/hackplayers/empire-mod-hackplayers) PowerShell Empire mod to post-exploit the World!
+- [**97**Star][1y] [Go] [bechurch/reverse-proxy-demo](https://github.com/bechurch/reverse-proxy-demo)
+- [**97**Star][1y] [Py] [tonyseek/rsocks](https://github.com/tonyseek/rsocks) A SOCKS 4/5 reverse proxy server
+- [**97**Star][2d] [Py] [securisec/chepy](https://github.com/securisec/chepy) Chepy is a python lib/cli equivalent of the awesome CyberChef tool.
+- [**97**Star][1y] [PS] [hackplayers/empire-mod-hackplayers](https://github.com/hackplayers/empire-mod-hackplayers) PowerShell Empire mod to post-exploit the World!
- [**97**Star][11m] [R] [stephenturner/annotables](https://github.com/stephenturner/annotables) R data package for annotating/converting Gene IDs
+- [**97**Star][3m] [C] [virtualabs/radiobit](https://github.com/virtualabs/radiobit) Micro:Bit Radio framework
- [**97**Star][3m] [xyntax/security-conference-archive](https://github.com/xyntax/security-conference-archive) Collection of Security Conference Slides/Papers
+- [**97**Star][1m] [PHP] [cybercog/laravel-optimus](https://github.com/cybercog/laravel-optimus) Transform your internal id's to obfuscated integers based on Knuth's integer hash.
+- [**97**Star][28d] [C++] [4d61726b/virtualkd-redux](https://github.com/4d61726b/virtualkd-redux) VirtualKD-Redux - A revival and modernization of VirtualKD
+- [**97**Star][1m] [Py] [xct/ropstar](https://github.com/xct/ropstar) Automatic exploit generation for simple linux pwn challenges.
+- [**97**Star][20d] [Py] [pagalaxylab/vxhunter](https://github.com/PAGalaxyLab/vxhunter) A ToolSet for VxWorks Based Embedded Device Analyses.
+ - [R2](https://github.com/PAGalaxyLab/vxhunter/blob/master/firmware_tools/vxhunter_r2_py2.py)
+ - [IDA插件](https://github.com/PAGalaxyLab/vxhunter/blob/master/firmware_tools/vxhunter_ida.py)
+ - [Ghidra插件](https://github.com/PAGalaxyLab/vxhunter/tree/master/firmware_tools/ghidra)
- [**97**Star][2y] [CSS] [owasp/owasp-summit-2017](https://github.com/OWASP/owasp-summit-2017) Content for OWASP Summit 2017 site
+- [**97**Star][4y] [Java] [zencodex/hack-android](https://github.com/zencodex/hack-android) Collection tools for hack android, java
+- [**97**Star][3y] [Ruby] [zcgonvh/cve-2017-7269](https://github.com/zcgonvh/cve-2017-7269) cve-2017-7269:修订版msf模块
- [**97**Star][4m] [Py] [woanware/usbdeviceforensics](https://github.com/woanware/usbdeviceforensics) Python script for extracting USB information from Windows registry hives
- [**97**Star][3m] [C] [vmonaco/kloak](https://github.com/vmonaco/kloak) Keystroke-level online anonymization kernel: obfuscates typing behavior at the device level.
-- [**97**Star][12d] [C++] [trailofbits/sienna-locomotive](https://github.com/trailofbits/sienna-locomotive) A user-friendly fuzzing and crash triage tool for Windows
- [**97**Star][2y] [Go] [subgraph/fw-daemon](https://github.com/subgraph/fw-daemon) Subgraph Application Firewall
- [**97**Star][10m] [Shell] [sskaje/6in4](https://github.com/sskaje/6in4) IPv6-in-IPv4 Tunnel Server
-- [**97**Star][2y] [Java] [spiderlabs/airachnid-burp-extension](https://github.com/spiderlabs/airachnid-burp-extension) A Burp Extension to test applications for vulnerability to the Web Cache Deception attack
- [**97**Star][8m] [Shell] [shadowhatesyou/pipetap.sh](https://github.com/shadowhatesyou/pipetap.sh) This script invokes tcpdump over ssh piping to STDOUT, allowing remote use of wireshark
-- [**97**Star][2y] [Java] [securityriskadvisors/cmd.jsp](https://github.com/securityriskadvisors/cmd.jsp) A super small jsp webshell with file upload capabilities.
-- [**97**Star][1m] [Py] [sandialabs/dr_robot](https://github.com/sandialabs/dr_robot) This tool can be used to enumerate the subdomains associated with a company by aggregating the results of multiple OSINT (Open Source Intelligence) tools.
-- [**97**Star][2y] [Py] [robindavid/idasec](https://github.com/robindavid/idasec) IDA plugin for reverse-engineering and dynamic interactions with the Binsec platform
+- [**97**Star][5m] [C] [s0lst1c3/silentbridge](https://github.com/s0lst1c3/silentbridge) Silentbridge is a toolkit for bypassing 802.1x-2010 and 802.1x-2004.
+- [**97**Star][6y] [Py] [roglew/wifikill](https://github.com/roglew/wifikill) A python program to kick people off of wifi
- [**97**Star][4y] [Py] [ridter/myjsrat](https://github.com/ridter/myjsrat) This is JSRat.ps1 in Python
-- [**97**Star][2y] [PowerShell] [rhinosecuritylabs/aggressor-scripts](https://github.com/rhinosecuritylabs/aggressor-scripts) Aggregation of Cobalt Strike's aggressor scripts.
+- [**97**Star][2y] [PS] [rhinosecuritylabs/aggressor-scripts](https://github.com/rhinosecuritylabs/aggressor-scripts) Aggregation of Cobalt Strike's aggressor scripts.
- [**97**Star][9m] [Go] [renatoathaydes/go-hash](https://github.com/renatoathaydes/go-hash) Small utility to store secret information like passwords.
-- [**97**Star][2m] [Shell] [qubesos/qubes-antievilmaid](https://github.com/qubesos/qubes-antievilmaid) an implementation of a TPM-based dynamic (Intel TXT) trusted
+- [**97**Star][12d] [Shell] [qubesos/qubes-antievilmaid](https://github.com/qubesos/qubes-antievilmaid) an implementation of a TPM-based dynamic (Intel TXT) trusted
boot for dracut/initramfs-based OSes (Fedora, Qubes, etc.) with a primary goal
to prevent Evil Maid attacks.
- [**97**Star][4y] [C++] [quarkslab/qb-sync](https://github.com/quarkslab/qb-sync) add some helpful glue between IDA Pro and Windbg
@@ -8568,66 +9082,70 @@ to prevent Evil Maid attacks.
- [WinDbg](https://github.com/quarkslab/qb-sync/tree/master/ext_windbg/sync)
- [x64dbg](https://github.com/quarkslab/qb-sync/tree/master/ext_x64dbg)
- [**97**Star][2y] [Java] [piasy/fridaandroidtracer](https://github.com/piasy/fridaandroidtracer) A runnable jar that generate Javascript hook script to hook Android classes.
-- [**97**Star][7m] [PowerShell] [p3nt4/magiccopy](https://github.com/p3nt4/magiccopy) Powershell script to exfiltrate large files quickly and securely
+- [**97**Star][7m] [PS] [p3nt4/magiccopy](https://github.com/p3nt4/magiccopy) Powershell script to exfiltrate large files quickly and securely
- [**97**Star][1y] [Go] [netxfly/crack_ssh](https://github.com/netxfly/crack_ssh) go写的协程版的ssh\redis\mongodb弱口令破解工具
- [**97**Star][2y] [Go] [mxi4oyu/dockerxscan](https://github.com/mxi4oyu/dockerxscan) DockerXScan——Docker镜像漏洞扫描器
- [**97**Star][1y] [Py] [mitshell/libmich](https://github.com/mitshell/libmich) Easy developpement of formats [de]coding for network protocols (IP, mobile...) and files
- [**97**Star][2y] [Swift] [liruqi/mume-ios](https://github.com/liruqi/mume-ios) an iOS client that implements custom proxies with the leverage of Network Extension framework introduced by Apple since iOS 9
-- [**97**Star][13d] [Shell] [konstruktoid/ansible-role-hardening](https://github.com/konstruktoid/ansible-role-hardening) Ansible role to apply a security baseline. Systemd edition.
-- [**97**Star][1m] [jonaschn/awesome-he](https://github.com/jonaschn/awesome-he)
+- [**97**Star][30d] [C] [libyal/libevtx](https://github.com/libyal/libevtx) Library and tools to access the Windows XML Event Log (EVTX) format
- [**97**Star][1y] [C++] [jeremywildsmith/x86devirt](https://github.com/jeremywildsmith/x86devirt) A project that aims to automatically devirtualize code that has been virtualized using x86virt
+- [**97**Star][5m] [Py] [itsmehacker/cardpwn](https://github.com/itsmehacker/cardpwn) OSINT Tool to find Breached Credit Cards Information
- [**97**Star][1y] [C#] [holly-hacker/eazfixer](https://github.com/holly-hacker/eazfixer) A deobfuscation tool for Eazfuscator.
-- [**97**Star][1y] [Java] [ganyao114/va_doc](https://github.com/ganyao114/va_doc) VirtualApp 代码注释
+- [**97**Star][3y] [C] [georgenicolaou/w64owow64](https://github.com/georgenicolaou/w64owow64) Library that allows you to run 64bit code on a Wow64 32bit process
- [**97**Star][3y] [Py] [fdiskyou/kcshell](https://github.com/fdiskyou/kcshell) 交互式汇编/反汇编 Shell,Python3编写,基于Keystone/Capstone
+- [**97**Star][23d] [C++] [fdiskyou/iris](https://github.com/fdiskyou/iris) WinDbg extension to display Windows process mitigations
- [**97**Star][2y] [Py] [dakotanelson/sneaky-creeper](https://github.com/dakotanelson/sneaky-creeper) Get your APT on using social media as a tool for data exfiltration.
- [**97**Star][3y] [Py] [cx9527/strongdb](https://github.com/cx9527/strongdb) gdb plugin for android debugging
-- [**97**Star][4m] [Py] [circl/url-abuse](https://github.com/circl/url-abuse) A Versatile Software for URL review, analysis and black-list reporting
- [**97**Star][2y] [HTML] [chrisallenlane/drek](https://github.com/chrisallenlane/drek) drek:静态代码分析工具,用于执行以安全性为主的代码审计
-- [**97**Star][2m] [byt3bl33d3r/slides](https://github.com/byt3bl33d3r/slides) Slides from various talks that I've given over the years
-- [**97**Star][2y] [Py] [blackye/webdirdig](https://github.com/blackye/webdirdig) web敏感目录、信息泄漏批量扫描脚本,结合爬虫、目录深度遍历。
-- [**97**Star][4y] [Java] [andrewmichaelsmith/bluepot](https://github.com/andrewmichaelsmith/bluepot) Bluetooth Honeypot
- [**97**Star][6m] [Java] [an0nymous0/mybatisplugin-crack-javassist](https://github.com/an0nymous0/mybatisplugin-crack-javassist) Javassist实现的破解IDEA MybatisPlugin修改字节码工具,仅供学习用途。
+- [**97**Star][12m] [Assembly] [86hh/dreamloader](https://github.com/86hh/dreamloader) Simple 32/64-bit PEs loader.
+- [**97**Star][5y] [C++] [0vercl0k/ollydbg2-python](https://github.com/0vercl0k/ollydbg2-python) Scripting OllyDBG2 using Python is now possible!
+- [**96**Star][2m] [C++] [xiangweizeng/darknet2ncnn](https://github.com/xiangweizeng/darknet2ncnn) Darknet2ncnn converts the darknet model to the ncnn model
+- [**96**Star][5d] [Ruby] [bl4de/dictionaries](https://github.com/bl4de/dictionaries) Misc dictionaries for directory/file enumeration, username enumeration, password dictionary/bruteforce attacks
- [**96**Star][2m] [404notf0und/always-learning](https://github.com/404notf0und/always-learning) 404 Not Found的知识库:计算机基础、前端技术、编程技术、底层研究、安全技术、安全研究、人工智能、企业安全建设、安全发展、综合素质
-- [**96**Star][1m] [Shell] [seajaysec/cypheroth](https://github.com/seajaysec/cypheroth) Automated, extensible toolset that runs cypher queries against Bloodhound's Neo4j backend and saves output to spreadsheets.
-- [**96**Star][3m] [C++] [marcosd4h/sysmonx](https://github.com/marcosd4h/sysmonx) An Augmented Drop-In Replacement of Sysmon
-- [**96**Star][14d] [Py] [b17zr/ntlm_challenger](https://github.com/b17zr/ntlm_challenger) Parse NTLM over HTTP challenge messages
-- [**96**Star][7d] [TSQL] [cisagov/cset](https://github.com/cisagov/cset) Cybersecurity Evaluation Tool
+- [**96**Star][2y] [JS] [paulsec/shodan-firefox-addon](https://github.com/paulsec/shodan-firefox-addon) Shodan Firefox Add-on
+- [**96**Star][3m] [Java] [guardianproject/pixelknot](https://github.com/guardianproject/pixelknot) Image stego app using the F5 algorithm
+- [**96**Star][19d] [Py] [fboldewin/com-code-helper](https://github.com/fboldewin/com-code-helper) Two IDAPython Scripts help you to reconstruct Microsoft COM (Component Object Model) Code
+- [**96**Star][1m] [C#] [tyranid/windowsrpcclients](https://github.com/tyranid/windowsrpcclients) This respository is a collection of C# class libraries which implement RPC clients for various versions of the Windows Operating System from 7 to Windows 10.
+- [**96**Star][16d] [Py] [b17zr/ntlm_challenger](https://github.com/b17zr/ntlm_challenger) Parse NTLM over HTTP challenge messages
+- [**96**Star][1m] [smi1esec/web-security-note](https://github.com/Smi1eSEC/Web-Security-Note) Record some common Web security sites
- [**96**Star][11m] [Py] [presto412/captcha-cracker](https://github.com/Presto412/Captcha-Cracker) Cracks the Captcha at VIT University's Academics Portal
-- [**96**Star][15d] [PowerShell] [dsccommunity/computermanagementdsc](https://github.com/dsccommunity/ComputerManagementDsc)
-- [**96**Star][4y] [PowerShell] [nsacyber/certificate-authority-situational-awareness](https://github.com/nsacyber/Certificate-Authority-Situational-Awareness) Identifies unexpected and prohibited certificate authority certificates on Windows systems. #nsacyber
+- [**96**Star][25d] [Py] [nkargas/gen2-uhf-rfid-reader](https://github.com/nkargas/Gen2-UHF-RFID-Reader) Gen2 UHF RFID reader with USRP and GNU Radio. Tested with USRPN200 and GNU Radio v3.7.4
+- [**96**Star][4y] [PS] [nsacyber/certificate-authority-situational-awareness](https://github.com/nsacyber/Certificate-Authority-Situational-Awareness) Identifies unexpected and prohibited certificate authority certificates on Windows systems. #nsacyber
- [**96**Star][1y] [Shell] [xme/misp-docker](https://github.com/xme/misp-docker) Docker container for MISP
- [**96**Star][2y] [Py] [unix-ninja/shellfire](https://github.com/unix-ninja/shellfire) Exploitation shell for exploiting LFI, RFI, and command injection vulnerabilities
- [**96**Star][3y] [Py] [torque59/nosqlpot](https://github.com/torque59/nosqlpot) The NoSQL Honeypot Framework
+- [**96**Star][2y] [Java] [tengzhangchao/pycmd](https://github.com/tengzhangchao/pycmd) python+php+jsp WebShell(一句话木马)
- [**96**Star][5y] [sooshie/security-data-analysis](https://github.com/sooshie/security-data-analysis) A series of labs that will help users apply various data science techniques to security related data.
- [**96**Star][3y] [HTML] [skiptomyliu/solutions-bwapp](https://github.com/skiptomyliu/solutions-bwapp) In progress rough solutions to bWAPP / bee-box
- [**96**Star][3y] [secmobi/slides](https://github.com/secmobi/slides) My presentations in some recent security conferences
- [**96**Star][3y] [C] [s4n7h0/practical-reverse-engineering-using-radare2](https://github.com/s4n7h0/practical-reverse-engineering-using-radare2) Training Materials of Practical Reverse Engineering using Radare2
-- [**96**Star][5m] [C] [s0lst1c3/silentbridge](https://github.com/s0lst1c3/silentbridge) Silentbridge is a toolkit for bypassing 802.1x-2010 and 802.1x-2004.
-- [**96**Star][6y] [Py] [roglew/wifikill](https://github.com/roglew/wifikill) A python program to kick people off of wifi
+- [**96**Star][2y] [Py] [robindavid/idasec](https://github.com/robindavid/idasec) IDA plugin for reverse-engineering and dynamic interactions with the Binsec platform
+- [**96**Star][1y] [Py] [njcx/pocsuite_poc_collect](https://github.com/njcx/pocsuite_poc_collect) collection poc use pocsuite framework
- [**96**Star][2y] [Lua] [niallmcl/deep-android-malware-detection](https://github.com/niallmcl/deep-android-malware-detection) Code for Deep Android Malware Detection paper
- [**96**Star][3y] [Py] [neuroo/equip](https://github.com/neuroo/equip) Python bytecode instrumentation library
- [**96**Star][1y] [Py] [mrmtwoj/0day-mikrotik](https://github.com/mrmtwoj/0day-mikrotik)
- [**96**Star][4m] [HTML] [momenbasel/keyfinder](https://github.com/momenbasel/keyfinder) Keyfinder
-- [**96**Star][4m] [C++] [mixaill/fakepdb](https://github.com/mixaill/fakepdb) 通过IDA数据库生成PDB文件
+- [**96**Star][7m] [Py] [michyamrane/okadminfinder3](https://github.com/michyamrane/okadminfinder3) [ Admin panel finder / Admin Login Page Finder ] ¢σ∂є∂ ву
- [**96**Star][3y] [Py] [magicming200/tomcat-weak-password-scanner](https://github.com/magicming200/tomcat-weak-password-scanner) 醉考拉tomcat后台弱口令扫描器,命令行版+图形界面版。
-- [**96**Star][2m] [Py] [m4cs/traxss](https://github.com/m4cs/traxss) traxss | Automated XSS Vulnerability Scanner Currently In Development
- [**96**Star][3y] [C++] [luctalpe/wmimon](https://github.com/luctalpe/wmimon) Tool to monitor WMI activity on Windows
-- [**96**Star][28d] [C] [libyal/libevtx](https://github.com/libyal/libevtx) Library and tools to access the Windows XML Event Log (EVTX) format
+- [**96**Star][23d] [Py] [leeon123/cc-attack](https://github.com/leeon123/cc-attack) Using Socks4/5 proxy to make a multithread Http-flood/Https-flood (cc) attack.
- [**96**Star][5y] [Py] [le4f/dnsmaper](https://github.com/le4f/dnsmaper) 子域名枚举与地图标记
- [**96**Star][7y] [Py] [k3170makan/goodork](https://github.com/k3170makan/goodork) Command line go0gle dorking tool
- [**96**Star][2y] [Py] [jjf012/passivescanner](https://github.com/jjf012/passivescanner) a passive scanner based on Mitmproxy and Arachni
-- [**96**Star][2m] [ihebski/a-red-teamer-diaries](https://github.com/ihebski/a-red-teamer-diaries) RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.
+- [**96**Star][2y] [Java] [jgillam/burp-co2](https://github.com/jgillam/burp-co2) A collection of enhancements for Portswigger's popular Burp Suite web penetration testing tool.
+- [**96**Star][7y] [Py] [jeffbryner/pyioc](https://github.com/jeffbryner/pyioc) Python tools for IOC (Indicator of Compromise) handling
+- [**96**Star][3m] [Pascal] [hongludianxue/bailu-sed-tool](https://github.com/hongludianxue/bailu-sed-tool) 白鹿社工字典生成器,灵活与易用兼顾。
- [**96**Star][2y] [Py] [he1m4n6a/btscan](https://github.com/he1m4n6a/btscan) 批量漏洞扫描框架
+- [**96**Star][17d] [Ruby] [hahwul/mad-metasploit](https://github.com/hahwul/mad-metasploit) Metasploit custom modules, plugins, resource script and.. awesome metasploit collection
- [**96**Star][1m] [JS] [google/service-worker-detector](https://github.com/google/service-worker-detector) This extension detects if a website registers a Service Worker.
-- [**96**Star][2m] [C++] [glmcdona/strings2](https://github.com/glmcdona/strings2) extracting strings from binary data
-- [**96**Star][3y] [C] [georgenicolaou/w64owow64](https://github.com/georgenicolaou/w64owow64) Library that allows you to run 64bit code on a Wow64 32bit process
+- [**96**Star][7d] [C++] [glmcdona/strings2](https://github.com/glmcdona/strings2) extracting strings from binary data
- [**96**Star][2m] [geeksonsecurity/vuln-web-apps](https://github.com/geeksonsecurity/vuln-web-apps) A curated list of vulnerable web applications.
- [**96**Star][6m] [Shell] [gavinlyonsrepo/cylon](https://github.com/gavinlyonsrepo/cylon) Updates, maintenance, backups and system checks in a TUI menu driven bash shell script for an Arch based Linux distro
+- [**96**Star][20d] [Py] [felamos/weirdhta](https://github.com/felamos/weirdhta) A python tool to create obfuscated HTA script.
- [**96**Star][1y] [Pascal] [fdiskyou/www.rootkit.com](https://github.com/fdiskyou/www.rootkit.com)
-- [**96**Star][21d] [C++] [fdiskyou/iris](https://github.com/fdiskyou/iris) WinDbg extension to display Windows process mitigations
-- [**96**Star][5y] [Py] [eugeniodelfa/smali-cfgs](https://github.com/eugeniodelfa/smali-cfgs) Smali Control Flow Graph's
-- [**96**Star][4y] [Py] [eset/vba-dynamic-hook](https://github.com/eset/vba-dynamic-hook) dynamically analyzes VBA macros inside Office documents by hooking function calls
- [**96**Star][6y] [C] [enzolovesbacon/inficere](https://github.com/enzolovesbacon/inficere) Mac OS X rootkit - for learning purposes
+- [**96**Star][2d] [dxxzst/free-proxy-list](https://github.com/dxxzst/free-proxy-list) Free proxy list 免费的代理IP,定时更新,优先更新:
- [**96**Star][1y] [JS] [desudesutalk/desudesutalk](https://github.com/desudesutalk/desudesutalk) Steganography for imageboards
- [**96**Star][7m] [Swift] [depoon/networkinterceptor](https://github.com/depoon/networkinterceptor) iOS URLRequest interception framework
- [**96**Star][1y] [Py] [danmcinerney/msf-autopwn](https://github.com/danmcinerney/msf-autopwn) Autoexploitation of some of the most common vulnerabilities in wild
@@ -8637,193 +9155,197 @@ to prevent Evil Maid attacks.
- [**96**Star][3m] [Java] [bastienjalbert/topguw](https://github.com/bastienjalbert/topguw) A software to make easier some cracking GSM steps (known plaintext attack vector)
- [**96**Star][8m] [Shell] [baguswiratmaadi/catnip](https://github.com/baguswiratmaadi/catnip) Cat-Nip Automated Basic Pentest Tool - Designed For Kali Linux
- [**96**Star][2y] [JS] [anttikurittu/kirjuri](https://github.com/anttikurittu/kirjuri) Kirjuri is a web application for managing cases and physical forensic evidence items.
-- [**96**Star][7d] [Shell] [anandkumar11u/oscp-60days](https://github.com/anandkumar11u/oscp-60days) OSCP All Tools are Here ...!! ***
-- [**96**Star][11d] [Py] [airbus-cert/regrippy](https://github.com/airbus-cert/regrippy) a framework for reading and extracting useful forensics data from Windows registry hives
-- [**96**Star][12m] [Assembly] [86hh/dreamloader](https://github.com/86hh/dreamloader) Simple 32/64-bit PEs loader.
-- [**96**Star][5y] [C++] [0vercl0k/ollydbg2-python](https://github.com/0vercl0k/ollydbg2-python) Scripting OllyDBG2 using Python is now possible!
+- [**96**Star][13d] [Py] [airbus-cert/regrippy](https://github.com/airbus-cert/regrippy) a framework for reading and extracting useful forensics data from Windows registry hives
- [**96**Star][7y] [0day1day/mwcrawler](https://github.com/0day1day/mwcrawler) Python Malware Crawler for Zoos and Repositories
-- [**95**Star][4m] [Ruby] [bl4de/dictionaries](https://github.com/bl4de/dictionaries) Misc dictionaries for directory/file enumeration, username enumeration, password dictionary/bruteforce attacks
-- [**95**Star][1m] [C#] [n1xbyte/donutcs](https://github.com/n1xbyte/donutcs) dem sharp donuts
-- [**95**Star][7m] [C#] [virb3/de4dot-cex](https://github.com/virb3/de4dot-cex) de4dot deobfuscator with full support for vanilla ConfuserEx
-- [**95**Star][1m] [C#] [tyranid/windowsrpcclients](https://github.com/tyranid/windowsrpcclients) This respository is a collection of C# class libraries which implement RPC clients for various versions of the Windows Operating System from 7 to Windows 10.
-- [**95**Star][12d] [Py] [devploit/xorpass](https://github.com/devploit/xorpass) Encoder to bypass WAF filters using XOR operations
+- [**95**Star][25d] [C] [ssd-secure-disclosure/advisories](https://github.com/ssd-secure-disclosure/advisories) SSD Secure Disclosure Advisories
- [**95**Star][2m] [ashemery/linuxforensics](https://github.com/ashemery/LinuxForensics) Everything related to Linux Forensics
- [**95**Star][9m] [C] [sagaantheepic/sagaan-anticheat-v2.0](https://github.com/ContionMig/ContionMig-AntiCheat) Anti Cheat i made in my free time. Credits to everyone who helped are in the files and some are in the code. I will definitely improve this Anti Cheat along the way, now its just beta. Enjoy.
-- [**95**Star][23d] [Py] [nkargas/gen2-uhf-rfid-reader](https://github.com/nkargas/Gen2-UHF-RFID-Reader) Gen2 UHF RFID reader with USRP and GNU Radio. Tested with USRPN200 and GNU Radio v3.7.4
-- [**95**Star][2y] [Py] [radareorg/r2con2017](https://github.com/radareorg/r2con2017) r2con 2017 September 6-9
+- [**95**Star][1y] [sectool/redteam-hardware-toolkit](https://github.com/sectool/redteam-hardware-toolkit)
+- [**95**Star][1y] [Shell] [cyb0r9/quasar](https://github.com/Cyb0r9/quasar) An Information Gathering Framework For Lazy Penetration Testers
- [**95**Star][11m] [Java] [open-keychain/openpgp-api](https://github.com/open-keychain/openpgp-api) OpenPGP API library
- [**95**Star][2m] [Py] [ubuntu-mate/mate-dock-applet](https://github.com/ubuntu-mate/mate-dock-applet) application dock for the MATE panel
-- [**95**Star][4y] [Java] [zencodex/hack-android](https://github.com/zencodex/hack-android) Collection tools for hack android, java
-- [**95**Star][3y] [Ruby] [zcgonvh/cve-2017-7269](https://github.com/zcgonvh/cve-2017-7269) cve-2017-7269:修订版msf模块
-- [**95**Star][2y] [Objective-C] [xslim/mobiledevicemanager](https://github.com/xslim/mobiledevicemanager) Manage iOS devices through iTunes lib
+- [**95**Star][6d] [JS] [frida/frida-java-bridge](https://github.com/frida/frida-java-bridge) Java runtime interop from Frida
+- [**95**Star][2y] [ObjC] [xslim/mobiledevicemanager](https://github.com/xslim/mobiledevicemanager) Manage iOS devices through iTunes lib
- [**95**Star][3y] [Py] [v1cker/src_edu](https://github.com/v1cker/src_edu) 为各位出色的渗透工程师提供攻击目标。
-- [**95**Star][2y] [Java] [tengzhangchao/pycmd](https://github.com/tengzhangchao/pycmd) python+php+jsp WebShell(一句话木马)
+- [**95**Star][3y] [Py] [tehsyntx/loffice](https://github.com/tehsyntx/loffice) Lazy Office Analyzer
- [**95**Star][1m] [Py] [songguoxiong/wenshu_utils](https://github.com/songguoxiong/wenshu_utils) 裁判文书网 参数加解密工具库 for Python and Java
- [**95**Star][2y] [Pascal] [senjaxus/allakore_remote](https://github.com/senjaxus/allakore_remote) AllaKore Remote is Open Source Remote Access software written in Delphi Seattle.
- [**95**Star][2y] [Py] [safebreach-labs/mkmalwarefrom](https://github.com/safebreach-labs/mkmalwarefrom) Proof-of-concept two-stage dropper generator that uses bits from external sources
-- [**95**Star][2m] [Py] [pyudev/pyudev](https://github.com/pyudev/pyudev) Python bindings to libudev (with support for PyQt4, PySide, pygobject and wx)
+- [**95**Star][3y] [Shell] [ppabc/security_check](https://github.com/ppabc/security_check) LINUX安全检查脚本,支持centos5,centos6,ubuntu
- [**95**Star][1y] [Java] [pengzhile/atlassian-agent](https://github.com/pengzhile/atlassian-agent) Atlassian's productions crack.
- [**95**Star][2y] [Java] [oliverklee/pixy](https://github.com/oliverklee/pixy) Pixy is a scanner static code analysis tools that scans PHP applications for security vulnerabilities.
-- [**95**Star][1y] [Py] [njcx/pocsuite_poc_collect](https://github.com/njcx/pocsuite_poc_collect) collection poc use pocsuite framework
+- [**95**Star][3y] [Py] [nowsecure/samsung-ime-rce-poc](https://github.com/nowsecure/samsung-ime-rce-poc) Samsung Remote Code Execution as System User
+- [**95**Star][5y] [Py] [nihilus/ida-idc-scripts](https://github.com/nihilus/ida-idc-scripts) Varoius IDC-scripts I've collected during the years.
- [**95**Star][1y] [Py] [n4xh4ck5/cmssc4n](https://github.com/n4xh4ck5/cmssc4n) Tool to identify if a domain is a CMS such as Wordpress, Moodle, Joomla, Drupal or Prestashop
-- [**95**Star][7d] [TeX] [misp/misp-training](https://github.com/misp/misp-training) MISP trainings, threat intel and information sharing training materials with source code
- [**95**Star][1m] [JS] [microsoftedge/jsdbg](https://github.com/microsoftedge/jsdbg) Debugging extensions for Microsoft Edge and other Chromium-based browsers
-- [**95**Star][7m] [Py] [michyamrane/okadminfinder3](https://github.com/michyamrane/okadminfinder3) [ Admin panel finder / Admin Login Page Finder ] ¢σ∂є∂ ву
+- [**95**Star][3m] [Py] [matrix07ksa/brute_force](https://github.com/matrix07ksa/brute_force) Brute_Force_Attack Gmail Hotmail Twitter Facebook Netflix
- [**95**Star][1y] [Py] [martinvigo/voicemailautomator](https://github.com/martinvigo/voicemailautomator) A tool that serves as a Proof of Concept for the research I presented at DEF CON 26, "Compromising online accounts by cracking voicemail systems"
- [**95**Star][5y] [C++] [malwaretech/fakembr](https://github.com/malwaretech/fakembr) TDL4 style rootkit to spoof read/write requests to master boot record
+- [**95**Star][2y] [CSS] [malaohu/arukas-api](https://github.com/malaohu/arukas-api) Arukas API 自动获取IP和端口,SSR服务器订阅,Arukas 监测启动
+- [**95**Star][3m] [Py] [lonely-night/fastjson_gadgets_scanner](https://github.com/lonely-night/fastjson_gadgets_scanner)
- [**95**Star][2y] [Py] [localh0t/wildpwn](https://github.com/localh0t/wildpwn) unix wildcard attacks
- [**95**Star][2m] [Py] [jssimporter/jssimporter](https://github.com/jssimporter/jssimporter) Upload packages made with AutoPkg to your Jamf Pro server with customizable policies.
-- [**95**Star][2y] [Java] [jgillam/burp-co2](https://github.com/jgillam/burp-co2) A collection of enhancements for Portswigger's popular Burp Suite web penetration testing tool.
+- [**95**Star][4y] [Shell] [jlrodriguezf/whatspwn](https://github.com/jlrodriguezf/whatspwn) Linux tool used to extract sensitive data, inject backdoor or drop remote shells on android devices.
- [**95**Star][3y] [PHP] [jas502n/fuzz-wooyun-org](https://github.com/jas502n/fuzz-wooyun-org) WooYun Fuzz 库
-- [**95**Star][5m] [Py] [itsmehacker/cardpwn](https://github.com/itsmehacker/cardpwn) OSINT Tool to find Breached Credit Cards Information
-- [**95**Star][7d] [CSS] [hongkonggong/tldr-digital-security](https://github.com/hongkonggong/tldr-digital-security) TLDR Digital Safety Checklist
+- [**95**Star][2y] [Py] [jas502n/2018-qwb-ctf](https://github.com/jas502n/2018-qwb-ctf) 2018强网杯CTF___题目整理
+- [**95**Star][7y] [C#] [ilikenwf/darkagent](https://github.com/ilikenwf/darkagent) DarkAgent Remote Administration Tool RAT by DragonHunter
+- [**95**Star][2y] [guardianproject/tor-browser](https://github.com/guardianproject/tor-browser) UPDATE: Orfox is being replaced by Tor Browser for Android. All future work and comments will be handled by Tor Project.
- [**95**Star][2y] [Py] [gaasedelen/prefix](https://github.com/gaasedelen/prefix) Function Prefixing for IDA Pro
+- [**95**Star][1y] [HTML] [frizb/sourcecodesniffer](https://github.com/frizb/sourcecodesniffer) The Source Code Sniffer is a poor man’s static code analysis tool (SCA) that leverages regular expressions. Designed to highlight high risk functions (Injection, LFI/RFI, file uploads etc) across multiple languages (ASP, Java, CSharp, PHP, Perl, Python, JavaScript, HTML etc) in a highly configurable manner.
- [**95**Star][7y] [JS] [feross/fullscreen-api-attack](https://github.com/feross/fullscreen-api-attack) Demo of phishing attack on the native HTML5 full screen API.
-- [**95**Star][10m] [PowerShell] [equk/windows](https://github.com/equk/windows) tweaks for Windows
-- [**95**Star][4y] [PowerShell] [enigma0x3/invoke-altdsbackdoor](https://github.com/enigma0x3/invoke-altdsbackdoor)
+- [**95**Star][5y] [Py] [eugeniodelfa/smali-cfgs](https://github.com/eugeniodelfa/smali-cfgs) Smali Control Flow Graph's
+- [**95**Star][10m] [PS] [equk/windows](https://github.com/equk/windows) tweaks for Windows
+- [**95**Star][4y] [PS] [enigma0x3/invoke-altdsbackdoor](https://github.com/enigma0x3/invoke-altdsbackdoor)
- [**95**Star][2m] [C++] [dzzie/vs_libemu](https://github.com/dzzie/vs_libemu) Visual Studio 2008 port of the libemu library that includes scdbg.exe, a modification of the sctest project, that includes more hooks, interactive debugging, reporting features, and ability to work with file format exploit shellcode.
- [**95**Star][9y] [Py] [dugsong/pypcap](https://github.com/dugsong/pypcap) Automatically exported from code.google.com/p/pypcap
- [**95**Star][9m] [C#] [djhohnstein/eventlogparser](https://github.com/djhohnstein/eventlogparser) Parse PowerShell and Security event logs for sensitive information.
+- [**95**Star][8m] [Go] [covenantsql/cookiescanner](https://github.com/covenantsql/cookiescanner) Cookie Scanner for GDPR compliance
- [**95**Star][2m] [PHP] [commixproject/commix-testbed](https://github.com/commixproject/commix-testbed) A collection of web pages, vulnerable to command injection flaws.
-- [**95**Star][11d] [Py] [brieflyx/ctf-pwns](https://github.com/brieflyx/ctf-pwns) Some pwn challenges selected for training and education.
-- [**94**Star][2y] [JS] [paulsec/shodan-firefox-addon](https://github.com/paulsec/shodan-firefox-addon) Shodan Firefox Add-on
-- [**94**Star][1m] [PHP] [cybercog/laravel-optimus](https://github.com/cybercog/laravel-optimus) Transform your internal id's to obfuscated integers based on Knuth's integer hash.
-- [**94**Star][1m] [Py] [xct/ropstar](https://github.com/xct/ropstar) Automatic exploit generation for simple linux pwn challenges.
+- [**95**Star][12m] [bughunterid/hackeronedb](https://github.com/bughunterid/hackeronedb) The unofficial HackerOne disclosure Timeline
+- [**95**Star][2y] [Py] [blackploit/hash-identifier](https://github.com/blackploit/hash-identifier) Software to identify the different types of hashes used to encrypt data and especially passwords
+- [**95**Star][2y] [PS] [australiancybersecuritycentre/windows_event_logging](https://github.com/australiancybersecuritycentre/windows_event_logging) Windows Event Forwarding subscriptions, configuration files and scripts that assist with implementing ACSC's protect publication, Technical Guidance for Windows Event Logging.
+- [**94**Star][4m] [JS] [beepisla/csgo-crash-exploit](https://github.com/beepisla/csgo-crash-exploit) Allows you to crash any Windows user
+- [**94**Star][2y] [Shell] [functionclub/localecn](https://github.com/functionclub/localecn) 更改Linux服务器终端显示语言为中文的脚本
- [**94**Star][3y] [HTML] [sewellding/lfiboomctf](https://github.com/SewellDinG/LFIboomCTF) 本地文件包含漏洞&&PHP利用协议&&实践源码
- [**94**Star][4m] [C] [adamlaurie/chronic](https://github.com/AdamLaurie/ChronIC) A wearable Sub-GHz RF hacking tool
-- [**94**Star][18d] [Py] [pagalaxylab/vxhunter](https://github.com/PAGalaxyLab/vxhunter) A ToolSet for VxWorks Based Embedded Device Analyses.
- - [R2](https://github.com/PAGalaxyLab/vxhunter/blob/master/firmware_tools/vxhunter_r2_py2.py)
- - [IDA插件](https://github.com/PAGalaxyLab/vxhunter/blob/master/firmware_tools/vxhunter_ida.py)
- - [Ghidra插件](https://github.com/PAGalaxyLab/vxhunter/tree/master/firmware_tools/ghidra)
-- [**94**Star][1y] [Shell] [cyb0r9/quasar](https://github.com/Cyb0r9/quasar) An Information Gathering Framework For Lazy Penetration Testers
-- [**94**Star][2m] [JS] [frida/frida-java-bridge](https://github.com/frida/frida-java-bridge) Java runtime interop from Frida
+- [**94**Star][2y] [Py] [radareorg/r2con2017](https://github.com/radareorg/r2con2017) r2con 2017 September 6-9
- [**94**Star][2y] [C++] [waryas/umpmlib](https://github.com/waryas/umpmlib) A library to manipulate physical memory from usermode.
-- [**94**Star][5m] [JS] [w00dl3cs/exploit_playground](https://github.com/w00dl3cs/exploit_playground)
-- [**94**Star][8m] [PowerShell] [vletoux/smbscanner](https://github.com/vletoux/smbscanner) Smb Scanner from PingCastle
+- [**94**Star][3d] [JS] [w00dl3cs/exploit_playground](https://github.com/w00dl3cs/exploit_playground)
+- [**94**Star][8m] [PS] [vletoux/smbscanner](https://github.com/vletoux/smbscanner) Smb Scanner from PingCastle
- [**94**Star][4m] [Py] [thewhiteh4t/killcast](https://github.com/thewhiteh4t/killcast) Manipulate Chromecast Devices in your Network
+- [**94**Star][6y] [C++] [stealth/fraud-bridge](https://github.com/stealth/fraud-bridge) ICMP and DNS tunneling via IPv4 and IPv6
- [**94**Star][1m] [JS] [securityrat/securityrat](https://github.com/securityrat/securityrat) OWASP SecurityRAT (version 1.x) - Tool for handling security requirements in development
- [**94**Star][1m] [Py] [raikia/kali-setup](https://github.com/raikia/kali-setup) Script for Kali that adds a bunch of tools and customizes it to be much better
-- [**94**Star][2y] [Objective-C] [r0ysue/osg-teams](https://github.com/r0ysue/osg-teams) 希望大家在合作中学习姿势、提升技术、交流感情。比赛第二,友谊第一。
-- [**94**Star][3y] [Py] [nowsecure/samsung-ime-rce-poc](https://github.com/nowsecure/samsung-ime-rce-poc) Samsung Remote Code Execution as System User
-- [**94**Star][5y] [Py] [nihilus/ida-idc-scripts](https://github.com/nihilus/ida-idc-scripts) Varoius IDC-scripts I've collected during the years.
+- [**94**Star][2y] [ObjC] [r0ysue/osg-teams](https://github.com/r0ysue/osg-teams) 希望大家在合作中学习姿势、提升技术、交流感情。比赛第二,友谊第一。
+- [**94**Star][2m] [Py] [pyudev/pyudev](https://github.com/pyudev/pyudev) Python bindings to libudev (with support for PyQt4, PySide, pygobject and wx)
- [**94**Star][7y] [Shell] [nccgroup/port-scan-automation](https://github.com/nccgroup/port-scan-automation) Automate NMAP Scans and Generate Custom Nessus Policies Automatically
+- [**94**Star][7m] [Py] [mr-un1k0d3r/shellcoding](https://github.com/mr-un1k0d3r/shellcoding) Shellcoding utilities
- [**94**Star][1y] [Shell] [mindpointgroup/rhel6-stig](https://github.com/mindpointgroup/rhel6-stig) Ansible role for Red Hat 6 DISA STIG
+- [**94**Star][5m] [CSS] [mike-goodwin/owasp-threat-dragon-desktop](https://github.com/mike-goodwin/owasp-threat-dragon-desktop) An installable desktop variant of OWASP Threat Dragon
- [**94**Star][12m] [Batchfile] [mdsecactivebreach/sharppack](https://github.com/mdsecactivebreach/sharppack) insider threat assessments that lets you defeat application whitelisting to execute arbitrary DotNet and PowerShell tools.
+- [**94**Star][2y] [Py] [lorenzog/dns-parallel-prober](https://github.com/lorenzog/dns-parallel-prober) PoC for an adaptive parallelised DNS prober
- [**94**Star][6y] [lgrangeia/cupid](https://github.com/lgrangeia/cupid) Patch for hostapd and wpa_supplicant to attempt to exploit heartbleed on EAP-PEAP/TLS/TTLS connections
- [**94**Star][5m] [Py] [lanmaster53/honeybadger](https://github.com/lanmaster53/honeybadger) a framework for targeted geolocation
-- [**94**Star][4y] [Shell] [jlrodriguezf/whatspwn](https://github.com/jlrodriguezf/whatspwn) Linux tool used to extract sensitive data, inject backdoor or drop remote shells on android devices.
- [**94**Star][9m] [C] [jcs/login_duress](https://github.com/jcs/login_duress) A BSD authentication module for duress passwords
- [**94**Star][2y] [Py] [invictus1306/workshop-bsidesmunich2018](https://github.com/invictus1306/workshop-bsidesmunich2018) ARM shellcode and exploit development - BSidesMunich 2018
-- [**94**Star][7y] [C#] [ilikenwf/darkagent](https://github.com/ilikenwf/darkagent) DarkAgent Remote Administration Tool RAT by DragonHunter
- [**94**Star][2y] [Batchfile] [huntresslabs/evading-autoruns](https://github.com/huntresslabs/evading-autoruns) 几种用于逃避常见的驻留枚举工具的技术(Evading Autoruns,Derbycon 2017)
-- [**94**Star][3m] [Pascal] [hongludianxue/bailu-sed-tool](https://github.com/hongludianxue/bailu-sed-tool) 白鹿社工字典生成器,灵活与易用兼顾。
- [**94**Star][8m] [C++] [hlldz/apc-ppid](https://github.com/hlldz/apc-ppid) Adds a user-mode asynchronous procedure call (APC) object to the APC queue of the specified thread and spoof the Parent Process.
- [**94**Star][2y] [C++] [hasherezade/pe_recovery_tools](https://github.com/hasherezade/pe_recovery_tools) Helper tools for recovering dumped PE files
-- [**94**Star][15d] [Ruby] [hahwul/mad-metasploit](https://github.com/hahwul/mad-metasploit) Metasploit custom modules, plugins, resource script and.. awesome metasploit collection
-- [**94**Star][1y] [HTML] [frizb/sourcecodesniffer](https://github.com/frizb/sourcecodesniffer) The Source Code Sniffer is a poor man’s static code analysis tool (SCA) that leverages regular expressions. Designed to highlight high risk functions (Injection, LFI/RFI, file uploads etc) across multiple languages (ASP, Java, CSharp, PHP, Perl, Python, JavaScript, HTML etc) in a highly configurable manner.
+- [**94**Star][3y] [PS] [fuzzysecurity/capcom-rootkit](https://github.com/fuzzysecurity/capcom-rootkit) Capcom Rootkit POC
- [**94**Star][8y] [Py] [firefart/hashcollision-dos-poc](https://github.com/firefart/hashcollision-dos-poc) Proof of Concept for the PHP and JAVA Hashcollision Denial of service attack
-- [**94**Star][6m] [Visual Basic] [dzzie/idacompare](https://github.com/dzzie/idacompare) a plugin for IDA which is designed to help you line up functions across two separate disassemblies
+- [**94**Star][6m] [Java] [felberj/gotools](https://github.com/felberj/gotools) Plugin for Ghidra to assist reversing Golang binaries
+- [**94**Star][7m] [Visual Basic .NET] [dzzie/idacompare](https://github.com/dzzie/idacompare) a plugin for IDA which is designed to help you line up functions across two separate disassemblies
- [**94**Star][3y] [Py] [donnchac/ubuntu-apport-exploitation](https://github.com/donnchac/ubuntu-apport-exploitation) This project contains a PoC and exploit generator for a code execution bug in Ubuntu's Apport crash reporter
- [**94**Star][2y] [Java] [dexpatcher/dex2jar](https://github.com/dexpatcher/dex2jar) Unofficial dex2jar updated for Android 8
-- [**94**Star][2m] [PowerShell] [dbheise/vm_setup](https://github.com/dbheise/vm_setup) A collection of scripts to initialize a windows VM to run all the malwares!
+- [**94**Star][2m] [PS] [dbheise/vm_setup](https://github.com/dbheise/vm_setup) A collection of scripts to initialize a windows VM to run all the malwares!
- [**94**Star][11m] [Java] [cspf-founder/javavulnerablelab](https://github.com/cspf-founder/javavulnerablelab) Vulnerable Java based Web Application
- [**94**Star][6y] [Py] [crowdstrike/crowdfms](https://github.com/crowdstrike/crowdfms) CrowdStrike Feed Management System
-- [**94**Star][28d] [Scala] [criteo/cuttle](https://github.com/criteo/cuttle) An embedded job scheduler.
-- [**94**Star][8m] [Go] [covenantsql/cookiescanner](https://github.com/covenantsql/cookiescanner) Cookie Scanner for GDPR compliance
-- [**94**Star][12m] [bughunterid/hackeronedb](https://github.com/bughunterid/hackeronedb) The unofficial HackerOne disclosure Timeline
-- [**94**Star][2y] [Py] [blackthorne/codetective](https://github.com/blackthorne/codetective) a tool to determine the crypto/encoding algorithm used according to traces from its representation
-- [**94**Star][4y] [JS] [bishopfox/cve-2016-1764](https://github.com/bishopfox/cve-2016-1764) Recovery of Plaintext iMessage Data Without Breaking Crypto
-- [**94**Star][4m] [JS] [beepfelix/csgo-crash-exploit](https://github.com/beepfelix/csgo-crash-exploit) Allows you to crash any Windows user
-- [**94**Star][2y] [PowerShell] [australiancybersecuritycentre/windows_event_logging](https://github.com/australiancybersecuritycentre/windows_event_logging) Windows Event Forwarding subscriptions, configuration files and scripts that assist with implementing ACSC's protect publication, Technical Guidance for Windows Event Logging.
+- [**94**Star][3d] [Scala] [criteo/cuttle](https://github.com/criteo/cuttle) An embedded job scheduler.
+- [**94**Star][4y] [C++] [cossacklabs/0fc](https://github.com/cossacklabs/0fc) Anonymous web chat server, built on top of Themis/WebThemis
+- [**94**Star][3y] [JS] [compewter/copycat](https://github.com/compewter/copycat) Universal MITM web server
+- [**94**Star][7d] [Go] [colettecontreras/v2ray-ssrpanel-plugin](https://github.com/colettecontreras/v2ray-ssrpanel-plugin) A buildin V2ray plugin for SSRPanel to sync users from database to v2ray, to log traffics/system info
+- [**94**Star][2y] [Shell] [chorankates/h4ck](https://github.com/chorankates/h4ck) a collection of writeups and tools related to ~embedded device ~hacking
+- [**94**Star][4m] [JS] [beepisla/csgo-crash-exploit](https://github.com/BeepIsla/csgo-crash-exploit) Allows you to crash any Windows user
+- [**94**Star][5y] [Py] [atarantini/wpbf](https://github.com/atarantini/wpbf) Remotely test password strength of WordPress bloging software
+- [**94**Star][3y] [C] [arno0x/diverttcpconn](https://github.com/arno0x/diverttcpconn) A TCP packet diverter for Windows platform
- [**94**Star][3y] [appsecco/defcon24-infra-monitoring-workshop](https://github.com/appsecco/defcon24-infra-monitoring-workshop) Defcon24 Workshop Contents : Ninja Level Infrastructure Monitoring
- [**94**Star][1m] [Assembly] [alanvivona/pwnshop](https://github.com/alanvivona/pwnshop) Exploit Development and Reverse Engineering topics
-- [**93**Star][16d] [JS] [paradiseduo/shadowsocksx-ng-r8](https://github.com/paradiseduo/shadowsocksx-ng-r8) ShadowsocksX-NG-R for MacOS
-- [**93**Star][21d] [chryzsh/awesome-bloodhound](https://github.com/chryzsh/awesome-bloodhound) A curated list of awesome BloodhoundAD resources
-- [**93**Star][1m] [smi1esec/web-security-note](https://github.com/Smi1eSEC/Web-Security-Note) Record some common Web security sites
+- [**94**Star][7d] [Py] [0xprateek/stardox](https://github.com/0xprateek/stardox) Github stargazers information gathering tool
+- [**93**Star][10d] [Py] [gmdutra/cryptondie](https://github.com/gmdutra/cryptondie) PoC - cryptonDie is a ransomware developed for study purposes.
+- [**93**Star][3m] [Py] [in3tinct/see-surf](https://github.com/in3tinct/see-surf) Python based scanner to find potential SSRF parameters
+- [**93**Star][9d] [JS] [cn-panda/javacodeaudit](https://github.com/cn-panda/javacodeaudit) Learn java code auditing from scratch 一个Java 代码审计入门的小项目
+- [**93**Star][2d] [PS] [gtworek/psbits](https://github.com/gtworek/psbits) Simple (mainly PowerShell) solutions allowing you to dig a bit deeper than usual.
- [**93**Star][2y] [C] [duraki/virtualcar](https://github.com/duraki/virtualcar) A virtual car. Because you wouldn't download a car, would you?
+- [**93**Star][10d] [Py] [gmdutra/cryptondie](https://github.com/gmdutra/cryptondie) PoC - cryptonDie is a ransomware developed for study purposes.
- [**93**Star][11m] [C++] [ze0r/cve-2018-8453-exp](https://github.com/ze0r/cve-2018-8453-exp) cve-2018-8453 exp
- [**93**Star][2y] [C] [zcgonvh/ntdsdumpex](https://github.com/zcgonvh/ntdsdumpex) NTDS.dit offline dumper with non-elevated
- [**93**Star][4y] [Py] [zachriggle/peda](https://github.com/zachriggle/peda) PEDA - Python Exploit Development Assistance for GDB
- [**93**Star][3y] [Py] [wiredcraft/dopy](https://github.com/wiredcraft/dopy) Digital Ocean Python
-- [**93**Star][1m] [C] [weirdnox/emacs-gdb](https://github.com/weirdnox/emacs-gdb) GDB graphical interface for GNU Emacs
+- [**93**Star][2m] [C] [weirdnox/emacs-gdb](https://github.com/weirdnox/emacs-gdb) GDB graphical interface for GNU Emacs
- [**93**Star][5m] [Shell] [vincentbernat/eudyptula-boot](https://github.com/vincentbernat/eudyptula-boot) Boot a Linux kernel in a VM without a dedicated root filesystem.
- [**93**Star][10m] [Py] [tijme/not-your-average-web-crawler](https://github.com/tijme/not-your-average-web-crawler) A web crawler (for bug hunting) that gathers more than you can imagine.
- [**93**Star][5y] [Py] [thuxnder/dalvik-obfuscator](https://github.com/thuxnder/dalvik-obfuscator) a set of tools/scripts to obfuscate and manipulate dex files
- [**93**Star][4m] [Py] [themadinventor/ida-xtensa](https://github.com/themadinventor/ida-xtensa) IDAPython plugin for Tensilica Xtensa (as seen in ESP8266)
+- [**93**Star][2y] [C#] [them4hd1/pencrawler](https://github.com/them4hd1/pencrawler) An Advanced Web Crawler and DirBuster
- [**93**Star][5m] [Py] [teemu-l/execution-trace-viewer](https://github.com/teemu-l/execution-trace-viewer) Tool for viewing and analyzing execution traces
- [**93**Star][2y] [Java] [tdy218/ysoserial-cve-2018-2628](https://github.com/tdy218/ysoserial-cve-2018-2628) Some codes for bypassing Oracle WebLogic CVE-2018-2628 patch
- [**93**Star][1y] [C#] [stufus/reconerator](https://github.com/stufus/reconerator) C# Targeted Attack Reconnissance Tools
- [**93**Star][12m] [C] [stintel/vallumd](https://github.com/stintel/vallumd) Centralize or distribute IPset blacklists
- [**93**Star][3y] [Py] [stamparm/tsusen](https://github.com/stamparm/tsusen) Network traffic sensor
+- [**93**Star][2d] [Go] [sonatype-nexus-community/nancy](https://github.com/sonatype-nexus-community/nancy) A tool to check for vulnerabilities in your Golang dependencies, powered by Sonatype OSS Index
- [**93**Star][5m] [F#] [softsec-kaist/eclipser](https://github.com/softsec-kaist/eclipser) Grey-box Concolic Testing on Binary Code
- [**93**Star][1y] [Java] [sirmordred/angelaroot](https://github.com/sirmordred/angelaroot) An app which escalates root privilege on device and installs SuperSU through newly vulnerability "angela root" without unlocking bootloader
+- [**93**Star][25d] [PHP] [shirosaidev/diskover-web](https://github.com/shirosaidev/diskover-web) Web file manager, disk space usage, storage search engine and file system analytics for diskover
- [**93**Star][4y] [C] [scumjr/the-sea-watcher](https://github.com/scumjr/the-sea-watcher) Implementation of the SMM rootkit "The Watcher"
-- [**93**Star][2y] [PowerShell] [sadprocessor/empiredog](https://github.com/sadprocessor/empiredog) A collection of PowerShell Modules for BloodHound/Empire Orchestration
+- [**93**Star][2y] [PS] [sadprocessor/empiredog](https://github.com/sadprocessor/empiredog) A collection of PowerShell Modules for BloodHound/Empire Orchestration
- [**93**Star][4y] [JS] [ro31337/hacktunnel](https://github.com/ro31337/hacktunnel) HackTunnel is web-based peer-to-peer chat software for anonymous and encrypted communication written with Go language
- [**93**Star][1m] [C#] [retirenet/dotnet-retire](https://github.com/retirenet/dotnet-retire) Open source vulnerability scanner for .NET Core projects
-- [**93**Star][3y] [Shell] [ppabc/security_check](https://github.com/ppabc/security_check) LINUX安全检查脚本,支持centos5,centos6,ubuntu
+- [**93**Star][1y] [Jupyter Notebook] [positivetechnologies/seq2seq-web-attack-detection](https://github.com/positivetechnologies/seq2seq-web-attack-detection) The implementation of the Seq2Seq model for web attack detection. The Seq2Seq model is usually used in Neural Machine Translation. The main goal of this project is to demonstrate the relevance of the NLP approach for web security.
- [**93**Star][7y] [C] [planetbeing/ios-jailbreak-patchfinder](https://github.com/planetbeing/ios-jailbreak-patchfinder) Analyzes a binary iOS kernel to determine function offsets and where to apply the canonical jailbreak patches.
+- [**93**Star][4y] [C] [osandamalith/ipobfuscator](https://github.com/osandamalith/ipobfuscator) A simple tool to convert the IP to a DWORD IP
- [**93**Star][7y] [Ruby] [openwiresec/metasploit](https://github.com/openwiresec/metasploit)
+- [**93**Star][6m] [C#] [octokit/octokit.graphql.net](https://github.com/octokit/octokit.graphql.net) A GitHub GraphQL client library for .NET
- [**93**Star][11m] [HTML] [nytrorst/xssfuzzer](https://github.com/nytrorst/xssfuzzer) XSS Fuzzer is a tool which generates XSS payloads based on user-defined vectors and fuzzing lists.
-- [**93**Star][1y] [PowerShell] [nettitude/invoke-powerthief](https://github.com/nettitude/invoke-powerthief) The PowerThIEf, an Internet Explorer Post Exploitation library
- [**93**Star][10m] [JS] [n0tan3rd/squidwarc](https://github.com/n0tan3rd/squidwarc) Squidwarc is a high fidelity, user scriptable, archival crawler that uses Chrome or Chromium with or without a head
-- [**93**Star][7m] [Py] [mr-un1k0d3r/shellcoding](https://github.com/mr-un1k0d3r/shellcoding) Shellcoding utilities
+- [**93**Star][2y] [Swift] [ming1016/smck](https://github.com/ming1016/smck) 用 Swift 编写的工程代码静态分析命令行工具 smck
- [**93**Star][3y] [Go] [mauri870/powershell-reverse-http](https://github.com/mauri870/powershell-reverse-http)
- [**93**Star][7y] [C] [m0nad/dns-discovery](https://github.com/m0nad/dns-discovery) DNS-Discovery is a multithreaded subdomain bruteforcer.
-- [**93**Star][2y] [Py] [lorenzog/dns-parallel-prober](https://github.com/lorenzog/dns-parallel-prober) PoC for an adaptive parallelised DNS prober
+- [**93**Star][11d] [Go] [lu4p/torat](https://github.com/lu4p/torat) ToRat is a Remote Administation tool written in Go using Tor as a transport mechanism and RPC for communication
- [**93**Star][3y] [Py] [leonjza/ooktools](https://github.com/leonjza/ooktools) help with the reverse engineering of on-off keying data sources
- [**93**Star][2y] [C++] [kentonv/dvorak-qwerty](https://github.com/kentonv/dvorak-qwerty) "Dvorak-Qwerty ⌘" (DQ) keyboard layout for Windows and Unix/Linux/X
-- [**93**Star][2y] [Py] [jas502n/2018-qwb-ctf](https://github.com/jas502n/2018-qwb-ctf) 2018强网杯CTF___题目整理
- [**93**Star][1y] [Py] [integrity-sa/droidstatx](https://github.com/integrity-sa/droidstatx) Python tool that generates an Xmind map with all the information gathered and any evidence of possible vulnerabilities identified via static analysis. The map itself is an Android Application Pentesting Methodology component, which assists Pentesters to cover all important areas during an assessment.
- [**93**Star][2y] [C] [hdm/juniper-cve-2015-7755](https://github.com/hdm/juniper-cve-2015-7755) Notes, binaries, and related information from analysis of the CVE-2015-7755 & CVE-2015-7756 issues within Juniper ScreenOS
-- [**93**Star][3y] [PowerShell] [fuzzysecurity/capcom-rootkit](https://github.com/fuzzysecurity/capcom-rootkit) Capcom Rootkit POC
+- [**93**Star][3m] [Go] [grepplabs/kafka-proxy](https://github.com/grepplabs/kafka-proxy) Proxy connections to Kafka cluster. Connect through SOCKS Proxy, HTTP Proxy or to cluster running in Kubernetes.
- [**93**Star][2y] [C++] [femto-dev/femto](https://github.com/femto-dev/femto) Sequence Indexing and Search
-- [**93**Star][6m] [Java] [felberj/gotools](https://github.com/felberj/gotools) Plugin for Ghidra to assist reversing Golang binaries
-- [**93**Star][10d] [Shell] [dylanaraps/bin](https://github.com/dylanaraps/bin)
+- [**93**Star][11m] [C] [elfmaster/dsym_obfuscate](https://github.com/elfmaster/dsym_obfuscate) Obfuscates dynamic symbol table
+- [**93**Star][7d] [Shell] [dylanaraps/bin](https://github.com/dylanaraps/bin)
- [**93**Star][5y] [Py] [debasishm89/hack_audio_captcha](https://github.com/debasishm89/hack_audio_captcha) Collection of Scripts written to Solve/Crack Audio reCapcha Challenges
- [**93**Star][2y] [Py] [debasishm89/burpy](https://github.com/debasishm89/burpy) Portable and flexible web application security assessment tool.It parses Burp Suite log and performs various tests depending on the module provided and finally generate a HTML report.
- [**93**Star][3y] [Py] [cymmetria/mtpot](https://github.com/cymmetria/mtpot) Open Source Telnet Honeypot
-- [**93**Star][3y] [JS] [compewter/copycat](https://github.com/compewter/copycat) Universal MITM web server
-- [**93**Star][13d] [Shell] [clion007/dnsmasq](https://github.com/clion007/dnsmasq) 全自动dnsmasq及hosts科学上网,防DNS劫持及全面广告屏蔽脚本
+- [**93**Star][15d] [Shell] [clion007/dnsmasq](https://github.com/clion007/dnsmasq) 全自动dnsmasq及hosts科学上网,防DNS劫持及全面广告屏蔽脚本
+- [**93**Star][5y] [Shell] [ckuethe/usbarmory](https://github.com/ckuethe/usbarmory) Scripts, learnings, sample configurations, and random whining
- [**93**Star][3y] [Vim script] [citizenlab/malware-signatures](https://github.com/citizenlab/malware-signatures) Yara rules for malware families seen as part of targeted threats project
-- [**93**Star][2y] [Shell] [chorankates/h4ck](https://github.com/chorankates/h4ck) a collection of writeups and tools related to ~embedded device ~hacking
- [**93**Star][2y] [Ruby] [carnal0wnage/metasploit-code](https://github.com/carnal0wnage/metasploit-code) Metasploit modules that didn't make it into trunk for some reason or the other
-- [**93**Star][4y] [Py] [atarantini/wpbf](https://github.com/atarantini/wpbf) Remotely test password strength of WordPress bloging software
+- [**93**Star][2y] [Py] [blackthorne/codetective](https://github.com/blackthorne/codetective) a tool to determine the crypto/encoding algorithm used according to traces from its representation
+- [**93**Star][1y] [Shell] [arthastang/iot-implant-toolkit](https://github.com/arthastang/iot-implant-toolkit) Toolkit for implant attack of IoT devices
- [**93**Star][2y] [Py] [arno0x/webdavc2](https://github.com/arno0x/webdavc2) A WebDAV PROPFIND C2 tool
-- [**92**Star][3m] [Py] [in3tinct/see-surf](https://github.com/in3tinct/see-surf) Python based scanner to find potential SSRF parameters
-- [**92**Star][23d] [C] [ssd-secure-disclosure/advisories](https://github.com/ssd-secure-disclosure/advisories) SSD Secure Disclosure Advisories
+- [**93**Star][6m] [Py] [abaykan/crawlbox](https://github.com/abaykan/crawlbox) Web目录爆破脚本
+- [**92**Star][27d] [Py] [plazmaz/leaky-repo](https://github.com/plazmaz/leaky-repo) Benchmarking repo for secrets scanning
+- [**92**Star][2m] [Py] [gxfxyz/unblockchn](https://github.com/gxfxyz/unblockchn) Unblock CHN - Shadowsocks 回国解锁代理分流配置工具 (路由器 & Surge) - Unblock Youku 衍生工具
- [**92**Star][2m] [Py] [furniel/apk-changer](https://github.com/furniel/apk-changer) Command line program for modifying apk files
- [**92**Star][2m] [Py] [hyuunnn/hyara](https://github.com/hyuunnn/hyara) Yara rule making tool (IDA Pro & Binary Ninja Plugin)
-- [**92**Star][7m] [PowerShell] [mgreen27/invoke-liveresponse](https://github.com/mgreen27/Invoke-LiveResponse) Invoke-LiveResponse
+- [**92**Star][7m] [PS] [mgreen27/invoke-liveresponse](https://github.com/mgreen27/Invoke-LiveResponse) Invoke-LiveResponse
- [**92**Star][2y] [Shell] [offxec/thedoc](https://github.com/OffXec/TheDoc) TheDoc is a simple but very useful SQLMAP automator with built in admin finder, hash cracker(using hashca) and more!
-- [**92**Star][8d] [Py] [gmdutra/cryptondie](https://github.com/gmdutra/cryptondie) PoC - cryptonDie is a ransomware developed for study purposes.
+- [**92**Star][2d] [Go] [zonedb/zonedb](https://github.com/zonedb/zonedb) Public Zone Database
- [**92**Star][3y] [HTML] [xinali/wooyun](https://github.com/xinali/wooyun) wooyun public information backup
- [**92**Star][2y] [JS] [tinysec/vulnerability](https://github.com/tinysec/vulnerability) vulnerability:作者收集的Windows内核漏洞。
-- [**92**Star][3y] [PowerShell] [thepaulbenoit/winpirate](https://github.com/thepaulbenoit/winpirate) Automated sticky keys hack. Post exploitation it grabs browser passwords, history, and network passwords
-- [**92**Star][2y] [C#] [them4hd1/pencrawler](https://github.com/them4hd1/pencrawler) An Advanced Web Crawler and DirBuster
+- [**92**Star][4y] [HTML] [thezdi/abusing-silent-mitigations](https://github.com/thezdi/abusing-silent-mitigations) Understanding weaknesses within Internet Explorer's Isolated Heap and MemoryProtection
+- [**92**Star][3y] [PS] [thepaulbenoit/winpirate](https://github.com/thepaulbenoit/winpirate) Automated sticky keys hack. Post exploitation it grabs browser passwords, history, and network passwords
+- [**92**Star][12m] [Shell] [thelinuxchoice/brutecms](https://github.com/thelinuxchoice/brutecms) Multi-threaded CMS BruteForcer to WordPress, Joomla, Drupal, OpenCart
+- [**92**Star][1y] [Go] [tarlogicsecurity/sasshimi](https://github.com/tarlogicsecurity/sasshimi) SSH Tunnelling in "RAW mode", via STDIN/OUT without using forwarding channels
- [**92**Star][1y] [C++] [tandasat/guardmon](https://github.com/tandasat/guardmon) Hypervisor based tool for monitoring system register accesses.
- [**92**Star][11m] [Py] [stratosphereips/manati](https://github.com/stratosphereips/manati) A web-based tool to assist the work of the intuitive threat analysts.
-- [**92**Star][6y] [C++] [stealth/fraud-bridge](https://github.com/stealth/fraud-bridge) ICMP and DNS tunneling via IPv4 and IPv6
+- [**92**Star][2y] [C] [stonedreamforest/re_sysdiag](https://github.com/stonedreamforest/re_sysdiag) 逆向火绒安全软件驱动——sysdiag
+- [**92**Star][3y] [HTML] [stixproject/stix-viz](https://github.com/stixproject/stix-viz) STIX Visualization Tool
- [**92**Star][3y] [C++] [shmuelyr/captainhook](https://github.com/shmuelyr/captainhook) CaptainHook is perfect x86/x64 hook environment
- [**92**Star][7m] [C++] [sharepub/checkvm-sandbox](https://github.com/sharepub/checkvm-sandbox) source code
-- [**92**Star][3y] [PowerShell] [secvulture/dvta](https://github.com/secvulture/dvta) Damn Vulnerable Thick Client App
+- [**92**Star][3y] [PS] [secvulture/dvta](https://github.com/secvulture/dvta) Damn Vulnerable Thick Client App
- [**92**Star][1y] [reconjson/reconjson](https://github.com/reconjson/reconjson) ReconJSON is a project dedicated to creating a flexible and consistent JSON format across popular recon tools.
-- [**92**Star][1y] [Jupyter Notebook] [positivetechnologies/seq2seq-web-attack-detection](https://github.com/positivetechnologies/seq2seq-web-attack-detection) The implementation of the Seq2Seq model for web attack detection. The Seq2Seq model is usually used in Neural Machine Translation. The main goal of this project is to demonstrate the relevance of the NLP approach for web security.
+- [**92**Star][7d] [Go] [privacypass/challenge-bypass-server](https://github.com/privacypass/challenge-bypass-server) a TCP server that is compatible with the Privacy Pass browser extension
- [**92**Star][2y] [Go] [phillipmartin/gopassivedns](https://github.com/phillipmartin/gopassivedns) Network-based DNS logging in Go
-- [**92**Star][8m] [pagalaxylab/vulinfo](https://github.com/pagalaxylab/vulinfo) These are the vulnerabilities discovered by Galaxy Lab.
-- [**92**Star][4y] [C] [osandamalith/ipobfuscator](https://github.com/osandamalith/ipobfuscator) A simple tool to convert the IP to a DWORD IP
+- [**92**Star][9m] [pagalaxylab/vulinfo](https://github.com/pagalaxylab/vulinfo) These are the vulnerabilities discovered by Galaxy Lab.
+- [**92**Star][9d] [JS] [oznu/dns-zone-blacklist](https://github.com/oznu/dns-zone-blacklist) This project generates dnsmasq, bind and unbound zone files to be used in DNS based AD Blockers.
- [**92**Star][3y] [Hack] [oracle/kernel-fuzzing](https://github.com/oracle/kernel-fuzzing) Fuzzers for the Linux kernel
- [**92**Star][5y] [JS] [nihgwu/nevermore](https://github.com/nihgwu/nevermore) a shadowsocks client powered by node-webkit
- [**92**Star][5y] [Py] [neo23x0/dllrunner](https://github.com/neo23x0/dllrunner) Smart DLL execution for malware analysis in sandbox systems
-- [**92**Star][13d] [Java] [mvetsch/jwt4b](https://github.com/mvetsch/jwt4b) JWT Support for Burp
+- [**92**Star][8d] [Java] [mvetsch/jwt4b](https://github.com/mvetsch/jwt4b) JWT Support for Burp
- [**92**Star][8y] [Ruby] [mubix/not-in-pentesting-class](https://github.com/mubix/not-in-pentesting-class) The Dirty Secrets They Didn't Teach You In Pentesting Class
- [**92**Star][12m] [C] [mthbernardes/sshlooterc](https://github.com/mthbernardes/sshlooterc) It's the C version of
- [**92**Star][1y] [C] [mrschyte/pentestkoala](https://github.com/mrschyte/pentestkoala) pentestkoala:修改版dropbear SSH 服务器
-- [**92**Star][4m] [CSS] [mike-goodwin/owasp-threat-dragon-desktop](https://github.com/mike-goodwin/owasp-threat-dragon-desktop) An installable desktop variant of OWASP Threat Dragon
-- [**92**Star][4y] [PowerShell] [matthastings/dscompromised](https://github.com/matthastings/dscompromised) managing and infecting systems via Windows Desired State Configuration (DSC)
-- [**92**Star][22d] [Py] [log2timeline/dftimewolf](https://github.com/log2timeline/dftimewolf) A framework for orchestrating forensic collection, processing and data export
+- [**92**Star][4y] [PS] [matthastings/dscompromised](https://github.com/matthastings/dscompromised) managing and infecting systems via Windows Desired State Configuration (DSC)
+- [**92**Star][24d] [Py] [log2timeline/dftimewolf](https://github.com/log2timeline/dftimewolf) A framework for orchestrating forensic collection, processing and data export
- [**92**Star][6m] [Py] [localh0t/backfuzz](https://github.com/localh0t/backfuzz) protocol fuzzing toolkit
-- [**92**Star][16d] [Go] [likexian/whois-go](https://github.com/likexian/whois-go) Go module for domain and ip whois info query
+- [**92**Star][18d] [Go] [likexian/whois-go](https://github.com/likexian/whois-go) Go module for domain and ip whois info query
- [**92**Star][2y] [Py] [lcatro/webshell-detect-by-machine-learning](https://github.com/lcatro/webshell-detect-by-machine-learning) Use AI to identify WebShell
- [**92**Star][4y] [C] [kr105-zz/ps4-dlclose](https://github.com/kr105-zz/ps4-dlclose) Fully implemented dlclose exploit for PS4 fw 1.76 with included linux loader
- [**92**Star][4m] [knownsec/ethereum-smart-contracts-security-checklist](https://github.com/knownsec/ethereum-smart-contracts-security-checklist) Ethereum Smart Contracts Security CheckList From Knownsec 404 Team
@@ -8839,614 +9361,677 @@ to prevent Evil Maid attacks.
- [**92**Star][2y] [C++] [gdbinit/efiswissknife](https://github.com/gdbinit/efiswissknife) An IDA plugin to improve (U)EFI reversing
- [**92**Star][3y] [Py] [fengyouchao/webzmap](https://github.com/fengyouchao/webzmap) 通过web方式管理运行zmap扫描任务, 并提供 RESTful API 方便第三方程序调用控制zmap任务
- [**92**Star][5y] [JS] [etherdream/https_hijack_demo](https://github.com/etherdream/https_hijack_demo) HTTPS Frontend Hijack
-- [**92**Star][11m] [C] [elfmaster/dsym_obfuscate](https://github.com/elfmaster/dsym_obfuscate) Obfuscates dynamic symbol table
-- [**92**Star][5y] [Shell] [ckuethe/usbarmory](https://github.com/ckuethe/usbarmory) Scripts, learnings, sample configurations, and random whining
+- [**92**Star][2y] [C] [christian-roggia/open-myrtus](https://github.com/christian-roggia/open-myrtus) RCEed version of computer malware / rootkit MyRTUs / Stuxnet.
+- [**92**Star][8d] [Py] [chadsr/nordvpn-networkmanager](https://github.com/chadsr/nordvpn-networkmanager) A CLI tool for automating the importing, securing and usage of NordVPN (and in the future, more) OpenVPN servers through NetworkManager.
+- [**92**Star][2y] [PS] [borntoberoot/powershell_ipv4portscanner](https://github.com/borntoberoot/powershell_ipv4portscanner) Powerful asynchronus IPv4 Port Scanner for PowerShell
- [**92**Star][10m] [Py] [b1n4ry4rms/redteam-pentest-cheatsheets](https://github.com/b1n4ry4rms/redteam-pentest-cheatsheets) Red Teaming :: Penetration Testing :: Offensive Security :: OSCP :: OSCE :: CheatSheets :: Tools :: etc...
-- [**92**Star][1y] [TypeScript] [auth0-blog/mean-rsvp-auth0](https://github.com/auth0-blog/mean-rsvp-auth0) MEAN stack application with Auth0 (see sample deployed at
-- [**92**Star][3y] [C] [arno0x/diverttcpconn](https://github.com/arno0x/diverttcpconn) A TCP packet diverter for Windows platform
+- [**92**Star][1y] [TS] [auth0-blog/mean-rsvp-auth0](https://github.com/auth0-blog/mean-rsvp-auth0) MEAN stack application with Auth0 (see sample deployed at
+- [**92**Star][11m] [Shell] [antitree/private-tor-network](https://github.com/antitree/private-tor-network) Run an isolated instance of a tor network in Docker containers
- [**92**Star][1y] [Py] [andresriancho/websocket-fuzzer](https://github.com/andresriancho/websocket-fuzzer) HTML5 WebSocket message fuzzer
+- [**92**Star][2y] [PS] [alsidofficial/uncoverdcshadow](https://github.com/alsidofficial/uncoverdcshadow) A PowerShell utility to dynamically uncover a DCShadow attack
- [**92**Star][4m] [Py] [aedoo/allscanner](https://github.com/aedoo/allscanner) 数据库和其他服务的弱端口的弱口令检测以及未授权访问的集成检测工具。 Weak password blasting of weak ports and integrated detection tools for unauthorized access.
-- [**92**Star][6m] [Py] [abaykan/crawlbox](https://github.com/abaykan/crawlbox) Web目录爆破脚本
-- [**91**Star][17d] [Py] [fboldewin/com-code-helper](https://github.com/fboldewin/com-code-helper) Two IDAPython Scripts help you to reconstruct Microsoft COM (Component Object Model) Code
-- [**91**Star][1m] [Py] [lockedbyte/cryptovenom](https://github.com/lockedbyte/cryptovenom) Cryptovenom: The Cryptography Swiss Army Knife
+- [**92**Star][1m] [C#] [3xpl01tc0d3r/processinjection](https://github.com/3xpl01tc0d3r/processinjection) The program is designed to demonstrate various process injection techniques
+- [**91**Star][8m] [JS] [vksrc/captcha_orz](https://github.com/vksrc/captcha_orz) 验证码识别
+- [**91**Star][2m] [C] [zfl9/chinadns-ng](https://github.com/zfl9/chinadns-ng) chinadns next generation, refactoring with epoll and ipset
+- [**91**Star][3d] [Py] [lockedbyte/cryptovenom](https://github.com/lockedbyte/cryptovenom) Cryptovenom: The Cryptography Swiss Army Knife
+- [**91**Star][8m] [Py] [lc/230-oob](https://github.com/lc/230-OOB) An Out-of-Band XXE server for retrieving file contents over FTP.
- [**91**Star][1y] [Py] [fsecurelabs/z3_and_angr_binary_analysis_workshop](https://github.com/FSecureLABS/z3_and_angr_binary_analysis_workshop) Code and exercises for a workshop on z3 and angr
-- [**91**Star][1y] [sectool/redteam-hardware-toolkit](https://github.com/sectool/redteam-hardware-toolkit)
+- [**91**Star][3m] [CSS] [woj-ciech/socialpath](https://github.com/woj-ciech/socialpath) Track users across social media platforms
- [**91**Star][5y] [C] [wi-fi-analyzer/mdk3-master](https://github.com/wi-fi-analyzer/mdk3-master)
- [**91**Star][2y] [C] [wangyihang/apache-http-server-module-backdoor](https://github.com/wangyihang/apache-http-server-module-backdoor)
- [**91**Star][1y] [Py] [wagiro/pintool](https://github.com/wagiro/pintool) This tool can be useful for solving some reversing challenges in CTFs events.
-- [**91**Star][4y] [HTML] [thezdi/abusing-silent-mitigations](https://github.com/thezdi/abusing-silent-mitigations) Understanding weaknesses within Internet Explorer's Isolated Heap and MemoryProtection
-- [**91**Star][12m] [Shell] [thelinuxchoice/brutecms](https://github.com/thelinuxchoice/brutecms) Multi-threaded CMS BruteForcer to WordPress, Joomla, Drupal, OpenCart
-- [**91**Star][3y] [Py] [tehsyntx/loffice](https://github.com/tehsyntx/loffice) Lazy Office Analyzer
-- [**91**Star][1y] [Go] [tarlogicsecurity/sasshimi](https://github.com/tarlogicsecurity/sasshimi) SSH Tunnelling in "RAW mode", via STDIN/OUT without using forwarding channels
-- [**91**Star][3y] [HTML] [stixproject/stix-viz](https://github.com/stixproject/stix-viz) STIX Visualization Tool
-- [**91**Star][2y] [PowerShell] [stefanscherer/adfs2](https://github.com/stefanscherer/adfs2) Multi Vagrant environment with Active Directory
-- [**91**Star][19d] [Go] [sonatype-nexus-community/nancy](https://github.com/sonatype-nexus-community/nancy) A tool to check for vulnerabilities in your Golang dependencies, powered by Sonatype OSS Index
+- [**91**Star][2y] [PS] [stefanscherer/adfs2](https://github.com/stefanscherer/adfs2) Multi Vagrant environment with Active Directory
- [**91**Star][2y] [C] [secwiki/android-kernel-exploits](https://github.com/secwiki/android-kernel-exploits) android kernel exploits漏洞集合
+- [**91**Star][2y] [PS] [russelltomkins/active-directory](https://github.com/russelltomkins/active-directory) Collection of scripts for Querying and Managing Active Directory and Domain Controllers
- [**91**Star][2y] [Py] [pry0cc/proxydock](https://github.com/pry0cc/proxydock) ProxyDock is a Dockerfile and Bash script that converts your OpenVPN files into local proxies.
-- [**91**Star][2m] [Go] [privacypass/challenge-bypass-server](https://github.com/privacypass/challenge-bypass-server) a TCP server that is compatible with the Privacy Pass browser extension
- [**91**Star][4y] [Py] [pdjstone/wsuspect-proxy](https://github.com/pdjstone/wsuspect-proxy) Python tool to inject fake updates into unencrypted WSUS traffic
+- [**91**Star][10m] [Py] [p3pperp0tts/leaks_parser](https://github.com/p3pperp0tts/leaks_parser) Parser for data dumps Collection #1 / Collection #2-5
+- [**91**Star][3y] [Py] [n3tc4t/instabrute](https://github.com/n3tc4t/instabrute) Instagram password bruteforcer
- [**91**Star][11m] [Py] [n00py/hwacha](https://github.com/n00py/hwacha) Deploy payloads to *Nix systems en masse
+- [**91**Star][2m] [C#] [mihazupan/httptosocks5proxy](https://github.com/mihazupan/httptosocks5proxy) C# Http to Socks5 proxy implementation
- [**91**Star][5m] [Shell] [louwrentius/ppss](https://github.com/louwrentius/ppss) Parallel Processing Shell Script
- [**91**Star][3m] [Rust] [loiclec/fuzzcheck-rs](https://github.com/loiclec/fuzzcheck-rs) Structure-aware, in-process, coverage-guided, evolutionary fuzzing engine for Rust functions.
- [**91**Star][2y] [C++] [liulilittle/paperairplane](https://github.com/liulilittle/paperairplane) 一个类似于Proxifier的SOCKS5代理工具
+- [**91**Star][4y] [Py] [knownsec/vxpwn](https://github.com/knownsec/vxpwn) VxWorks漏洞挖掘相关
+- [**91**Star][9m] [Py] [johntroony/blisqy](https://github.com/johntroony/blisqy) Version 0.2 - Exploit Time-based blind-SQL injection in HTTP-Headers (MySQL/MariaDB).
- [**91**Star][4m] [C#] [jbe2277/dotnetpad](https://github.com/jbe2277/dotnetpad) The Waf DotNetPad is a simple and fast code editor that makes fun to program with C# or Visual Basic.
- [**91**Star][4y] [Py] [hvqzao/liffy](https://github.com/hvqzao/liffy) Local File Inclusion Exploitation Tool (mirror)
- [**91**Star][11m] [Ruby] [hdm/metasploit-framework](https://github.com/hdm/metasploit-framework) Metasploit Framework
+- [**91**Star][3y] [C] [hacksysteam/exploitation](https://github.com/hacksysteam/exploitation) Windows Software Exploitation
- [**91**Star][1y] [Go] [google/minions](https://github.com/google/minions) Distributed filesystem scanner
+- [**91**Star][4m] [Shell] [giantbranch/pwn-env-init](https://github.com/giantbranch/pwn-env-init) CTF PWN 做题环境一键搭建脚本
- [**91**Star][1y] [Py] [getsecnow/instagram-py](https://github.com/getsecnow/instagram-py) Simple Instagram brute force script written in python
- [**91**Star][3y] [C++] [gdelugre/shell-factory](https://github.com/gdelugre/shell-factory) C++-based shellcode builder
- [**91**Star][6m] [Py] [fortynorthsecurity/aggressorassessor](https://github.com/fortynorthsecurity/aggressorassessor) Aggressor scripts for phases of a pen test or red team assessment
-- [**91**Star][18d] [Py] [felamos/weirdhta](https://github.com/felamos/weirdhta) A python tool to create obfuscated HTA script.
+- [**91**Star][2y] [C++] [epam/nfstrace](https://github.com/epam/nfstrace) Network file system monitor and analyzer
- [**91**Star][9y] [C] [dugsong/libdnet](https://github.com/dugsong/libdnet) a simplified, portable interface to several low-level
networking routines
-- [**91**Star][2y] [C] [christian-roggia/open-myrtus](https://github.com/christian-roggia/open-myrtus) RCEed version of computer malware / rootkit MyRTUs / Stuxnet.
-- [**91**Star][2y] [PowerShell] [alsidofficial/uncoverdcshadow](https://github.com/alsidofficial/uncoverdcshadow) A PowerShell utility to dynamically uncover a DCShadow attack
-- [**91**Star][2m] [Py] [abusesa/abusehelper](https://github.com/abusesa/abusehelper) A framework for receiving and redistributing abuse feeds
+- [**91**Star][4m] [C++] [djformby/grfics](https://github.com/djformby/grfics) Graphical Realism Framework for Industrial Control Simulations
+- [**91**Star][1y] [Py] [arbazkiraak/certasset](https://github.com/arbazkiraak/certasset) Takes ip range, Scan all open SSL Certs, Grab Cnames
+- [**91**Star][3m] [Py] [abusesa/abusehelper](https://github.com/abusesa/abusehelper) A framework for receiving and redistributing abuse feeds
- [**91**Star][7m] [C] [abelcheung/rifiuti2](https://github.com/abelcheung/rifiuti2) Windows Recycle Bin analyser
+- [**91**Star][2y] [Java] [5gsd/aimsicdl](https://github.com/5gsd/aimsicdl) AIMSICD Lite (Android IMSI-Catcher Detector) - reloaded!
- [**91**Star][2y] [C] [3gstudent/inject-dll-by-process-doppelganging](https://github.com/3gstudent/inject-dll-by-process-doppelganging) Process Doppelgänging
- [**91**Star][1y] [001spartan/aggressor_scripts](https://github.com/001spartan/aggressor_scripts) A collection of useful scripts for Cobalt Strike
-- [**90**Star][13d] [Ruby] [shopify/browser_sniffer](https://github.com/shopify/browser_sniffer) Properly detect what browser you are dealing with
+- [**90**Star][11m] [Py] [hackatnow/stretcher](https://github.com/hackatnow/stretcher) Tool designed to help identify open Elasticsearch servers that are exposing sensitive information
+- [**90**Star][15d] [Ruby] [shopify/browser_sniffer](https://github.com/shopify/browser_sniffer) Properly detect what browser you are dealing with
+- [**90**Star][12m] [PS] [besimorhino/pause-process](https://github.com/besimorhino/pause-process) PowerShell script which allows pausing\unpausing Win32/64 exes
+- [**90**Star][4m] [Py] [google/python_portpicker](https://github.com/google/python_portpicker) A module to find available network ports for testing.
+- [**90**Star][9m] [C] [caesar0301/pkt2flow](https://github.com/caesar0301/pkt2flow) A simple utility to classify packets into flows. It's so simple that only one task is aimed to finish. For Deep Packet Inspection or flow classification, it's so common to analyze the feature of one specific flow. I have make the attempt to use made-ready tools like tcpflows, tcpslice, tcpsplit, but all these tools try to either decrease the tra…
+- [**90**Star][8m] [JS] [adonespitogo/adobot-io](https://github.com/adonespitogo/adobot-io) Android Spyware Server
+- [**90**Star][2y] [Py] [hackatnow/cromos](https://github.com/hackatnow/cromos) Cromos is a tool for downloading legitimate extensions of the Chrome Web Store and inject codes in the background of the application.
+- [**90**Star][1m] [Go] [ne1llee/v2ray2clash](https://github.com/ne1llee/v2ray2clash) V2ray、SSR subscribe convert to Clash、QuantumultX
- [**90**Star][2m] [Py] [radareorg/r2con2019](https://github.com/radareorg/r2con2019) slides and materials
-- [**90**Star][3m] [Py] [securisec/r2wiki](https://github.com/securisec/r2wiki) Radare 2 wiki
- [**90**Star][2y] [JS] [watson/monster-drift](https://github.com/watson/monster-drift) a radio controlled car with Node.js and HackRF.
- [**90**Star][1y] [C] [vv1ld/ps4hen](https://github.com/vv1ld/ps4hen) PS4 Homebrew ENabler based on Flatz writeup and using IDC's codebase
- [**90**Star][7m] [C] [vmcall/ayyxam](https://github.com/vmcall/ayyxam) Bypass for The Digital Exam Monitor developed by the Danish Ministry of Education (Den Digitale Prøvevagt) and ExamCookie
- [**90**Star][5m] [Py] [tomchop/volatility-autoruns](https://github.com/tomchop/volatility-autoruns) Autoruns plugin for the Volatility framework
+- [**90**Star][7m] [Rust] [tbrand/dystopia](https://github.com/tbrand/dystopia) Anonymity on the Internet by Transparent way.
+- [**90**Star][3y] [swiftonsecurity/phishingregex](https://github.com/swiftonsecurity/phishingregex) Backup of my phishing regular expression testing bench
- [**90**Star][2y] [HTML] [struct/research](https://github.com/struct/research) A repo for various research
-- [**90**Star][2y] [C] [stonedreamforest/re_sysdiag](https://github.com/stonedreamforest/re_sysdiag) 逆向火绒安全软件驱动——sysdiag
- [**90**Star][8y] [Java] [securitycompass/androidlabs](https://github.com/securitycompass/androidlabs) Android security labs
- [**90**Star][3y] [C++] [screetsec/pateensy](https://github.com/screetsec/pateensy) Payload for teensy like a rubber ducky but the syntax is different. this Human interfaes device ( HID attacks ). Penetration With Teensy
-- [**90**Star][2y] [PowerShell] [russelltomkins/active-directory](https://github.com/russelltomkins/active-directory) Collection of scripts for Querying and Managing Active Directory and Domain Controllers
+- [**90**Star][5d] [Py] [samsung/cotopaxi](https://github.com/samsung/cotopaxi) Set of tools for security testing of Internet of Things devices using specific network IoT protocols
- [**90**Star][1y] [C++] [rub-syssec/marx](https://github.com/rub-syssec/marx) Uncovering Class Hierarchies in C++ Programs
- [IDA导出](https://github.com/rub-syssec/marx/blob/master/ida_export/export.py)
- [IDA导入插件](https://github.com/rub-syssec/marx/tree/master/ida_import)
- [core](https://github.com/rub-syssec/marx/tree/master/src)
-- [**90**Star][1y] [PowerShell] [rasta-mouse/aggressor-script](https://github.com/rasta-mouse/aggressor-script) Collection of Aggressor Scripts for Cobalt Strike
-- [**90**Star][5y] [Objective-C] [project-imas/app-password](https://github.com/project-imas/app-password) Custom iOS user authentication mechanism (password with security questions for self reset)
+- [**90**Star][4y] [C] [rchiossi/dexterity](https://github.com/rchiossi/dexterity) Dex manipulation library
+- [**90**Star][1y] [PS] [rasta-mouse/aggressor-script](https://github.com/rasta-mouse/aggressor-script) Collection of Aggressor Scripts for Cobalt Strike
+- [**90**Star][7m] [Rust] [ragnaroek/mithril](https://github.com/ragnaroek/mithril) Pure Rust Monero Miner
+- [**90**Star][5y] [ObjC] [project-imas/app-password](https://github.com/project-imas/app-password) Custom iOS user authentication mechanism (password with security questions for self reset)
+- [**90**Star][14d] [C] [plusvic/yara](https://github.com/plusvic/yara) The pattern matching swiss knife
- [**90**Star][9m] [pandazheng/securitysite](https://github.com/pandazheng/securitysite) 收集了一些安全公司的博客
-- [**90**Star][10m] [Py] [p3pperp0tts/leaks_parser](https://github.com/p3pperp0tts/leaks_parser) Parser for data dumps Collection #1 / Collection #2-5
-- [**90**Star][2y] [PowerShell] [netbiosx/digital-signature-hijack](https://github.com/netbiosx/digital-signature-hijack) Binaries, PowerShell scripts and information about Digital Signature Hijacking.
+- [**90**Star][1y] [Shell] [ossiozac/raspberry-pi-zero-rubber-ducky-duckberry-pi](https://github.com/ossiozac/raspberry-pi-zero-rubber-ducky-duckberry-pi) A £10 Rubber Ducky USB HID! A USB device which emulates a keyboard and automates key entry.
+- [**90**Star][2m] [Py] [operatorequals/httpimport](https://github.com/operatorequals/httpimport) Module for remote in-memory Python package/module loading through HTTP/S
+- [**90**Star][2y] [PS] [netbiosx/digital-signature-hijack](https://github.com/netbiosx/digital-signature-hijack) Binaries, PowerShell scripts and information about Digital Signature Hijacking.
- [**90**Star][2y] [nccgroup/cve-2017-8759](https://github.com/nccgroup/cve-2017-8759) NCC Group's analysis and exploitation of CVE-2017-8759 along with further refinements
-- [**90**Star][3y] [Py] [n3tc4t/instabrute](https://github.com/n3tc4t/instabrute) Instagram password bruteforcer
- [**90**Star][8m] [JS] [mozillasecurity/octo](https://github.com/mozillasecurity/octo) A fuzzing library in JavaScript.
+- [**90**Star][1m] [Java] [mnemonic-no/act-platform](https://github.com/mnemonic-no/act-platform) Open platform for collection and exchange of threat intelligence information
- [**90**Star][3y] [Java] [mingyuan-xia/patdroid](https://github.com/mingyuan-xia/patdroid) A Program Analysis Toolkit for Android
- [**90**Star][3m] [Py] [malshare/malshare-toolkit](https://github.com/malshare/malshare-toolkit) Set of tools for interacting with Malshare
- [**90**Star][2y] [jollheef/libreoffice-remote-arbitrary-file-disclosure](https://github.com/jollheef/libreoffice-remote-arbitrary-file-disclosure) Proof of concept of LibreOffice remote arbitrary file disclosure vulnerability
-- [**90**Star][9m] [Py] [johntroony/blisqy](https://github.com/johntroony/blisqy) Version 0.2 - Exploit Time-based blind-SQL injection in HTTP-Headers (MySQL/MariaDB).
+- [**90**Star][5m] [HTML] [jbman223/earlyap](https://github.com/jbman223/earlyap) Proxy specifically available for AP scores to enable simple early access to your scores without any storing of your College Board account details or dealing with untrustable proxies.
- [**90**Star][2y] [Ruby] [isecpartners/tlspretense](https://github.com/isecpartners/tlspretense) A test framework for testing SSL/TLS client certificate validation.
-- [**90**Star][3y] [C] [hacksysteam/exploitation](https://github.com/hacksysteam/exploitation) Windows Software Exploitation
+- [**90**Star][6y] [C++] [igh0st/gh0st3.6_src](https://github.com/igh0st/gh0st3.6_src)
+- [**90**Star][2y] [C] [hfiref0x/vmde](https://github.com/hfiref0x/vmde) Source from VMDE paper, adapted to 2015
+- [**90**Star][2y] [Ruby] [hanshaze/ms17-010-eternalblue-winxp-win10](https://github.com/hanshaze/ms17-010-eternalblue-winxp-win10) EternalBlue Metasploit Port to various Windows Versions from Windows XP SP2 up to Windows 10 Pro
+- [**90**Star][3d] [C] [guidovranken/cryptofuzz](https://github.com/guidovranken/cryptofuzz)
- [**90**Star][1y] [C] [grimm-co/notquite0dayfriday](https://github.com/grimm-co/notquite0dayfriday) This is a repo which documents real bugs in real software to illustrate trends, learn how to prevent or find them more quickly.
-- [**90**Star][3m] [Shell] [giantbranch/pwn-env-init](https://github.com/giantbranch/pwn-env-init) CTF PWN 做题环境一键搭建脚本
+- [**90**Star][1m] [Py] [giantbranch/pwn_deploy_chroot](https://github.com/giantbranch/pwn_deploy_chroot) 可以方便地部署一个或者多个pwn题到一个docker容器中(使用chroot,并可以设置是否使用我自己写的catflag程序替换默认的/bin/sh程序,以增加安全性)
- [**90**Star][3m] [Py] [gast04/r4ge](https://github.com/gast04/r4ge) Symbolic Execution Tool in r2
- [**90**Star][7m] [C] [fireeye/flare-kscldr](https://github.com/fireeye/flare-kscldr) 内核中加载Shellcode: 实例、方法与工具
- [**90**Star][2m] [Ruby] [ffleming/timing_attack](https://github.com/ffleming/timing_attack) timing_attack:对 Webapp 执行 timing 攻击
- [**90**Star][1y] [Py] [elttam/advisories](https://github.com/elttam/advisories)
-- [**90**Star][3y] [PowerShell] [darkoperator/powershell_scripts](https://github.com/darkoperator/powershell_scripts) Powershell Scripts
+- [**90**Star][3y] [PS] [darkoperator/powershell_scripts](https://github.com/darkoperator/powershell_scripts) Powershell Scripts
+- [**90**Star][7d] [JS] [consensys/truffle-security](https://github.com/consensys/truffle-security) MythX smart contract security verification plugin for Truffle Framework
- [**90**Star][3y] [Py] [chrizator/netattack](https://github.com/chrizator/netattack) A simple python script to scan and attack wireless networks.
-- [**90**Star][1y] [Shell] [arthastang/iot-implant-toolkit](https://github.com/arthastang/iot-implant-toolkit) Toolkit for implant attack of IoT devices
+- [**90**Star][3y] [Py] [callmefeifei/svnhack](https://github.com/callmefeifei/svnhack) 一个Svn信息泄露辅助工具,可以使用这个脚本列取网站目录,读取源码文件以及下载整站代码。
+- [**90**Star][2m] [Ruby] [auth0/ruby-auth0](https://github.com/auth0/ruby-auth0) Ruby toolkit for Auth0 API
- [**90**Star][7m] [aprilahijriyan/w3brute](https://github.com/aprilahijriyan/w3brute) Automatic Web Application Brute Force Attack Tool
-- [**90**Star][4m] [adguardteam/adguardformac](https://github.com/adguardteam/adguardformac) Open bug tracker for Mac version of AdGuard
+- [**90**Star][1m] [Py] [akamai-threat-research/mqtt-pwn](https://github.com/akamai-threat-research/mqtt-pwn) MQTT-PWN intends to be a one-stop-shop for IoT Broker penetration-testing and security assessment operations.
+- [**90**Star][3m] [Java] [adubbz/ghidra-switch-loader](https://github.com/adubbz/ghidra-switch-loader) Nintendo Switch loader for Ghidra
- [**90**Star][4y] [JS] [adafruit/adafruit-io-node](https://github.com/adafruit/adafruit-io-node) A Node.js Adafruit IO Node.js Client, Local Server, & io.adafruit.com TLS Tunnel.
- [**90**Star][11m] [Py] [hackatnow/stretcher](https://github.com/hackatnow/stretcher) Tool designed to help identify open Elasticsearch servers that are exposing sensitive information
- [**90**Star][2y] [Py] [hackatnow/cromos](https://github.com/hackatnow/cromos) Cromos is a tool for downloading legitimate extensions of the Chrome Web Store and inject codes in the background of the application.
-- [**90**Star][2y] [Java] [5gsd/aimsicdl](https://github.com/5gsd/aimsicdl) AIMSICD Lite (Android IMSI-Catcher Detector) - reloaded!
-- [**90**Star][1m] [C#] [3xpl01tc0d3r/processinjection](https://github.com/3xpl01tc0d3r/processinjection) The program is designed to demonstrate various process injection techniques
-- [**90**Star][8d] [Py] [0xprateek/stardox](https://github.com/0xprateek/stardox) Github stargazers information gathering tool
-- [**89**Star][12m] [PowerShell] [besimorhino/pause-process](https://github.com/besimorhino/pause-process) PowerShell script which allows pausing\unpausing Win32/64 exes
-- [**89**Star][4m] [Py] [google/python_portpicker](https://github.com/google/python_portpicker) A module to find available network ports for testing.
+- [**90**Star][9m] [Py] [0x27/ssh_keyscanner](https://github.com/0x27/ssh_keyscanner) ssh public host key scanner using shodan
+- [**89**Star][5m] [Py] [lgandx/ccrawldns](https://github.com/lgandx/ccrawldns) This small utility retrieves from the CommonCrawl data set unique subdomains for a given domain name.
+- [**89**Star][7m] [Shell] [honwen/luci-app-shadowsocksr](https://github.com/honwen/luci-app-shadowsocksr) OpenWrt/LEDE LuCI for ShadowsocksR-libev
+- [**89**Star][3d] [Rust] [amaurymartiny/check-if-email-exists](https://github.com/amaurymartiny/check-if-email-exists) Check if an email address exists without sending any email.
- [**89**Star][7m] [Py] [lopseg/jsdir](https://github.com/Lopseg/Jsdir) Jsdir is a Burp Suite extension that extracts hidden paths from js files and beautifies it for further reading.
+- [**89**Star][1y] [C] [zerosteiner/reflective-polymorphism](https://github.com/zeroSteiner/reflective-polymorphism) Reflective Polymorphism
+- [**89**Star][3m] [Py] [securisec/r2wiki](https://github.com/securisec/r2wiki) Radare 2 wiki
- [**89**Star][5m] [Java] [llvm-but-worse/java-disassembler](https://github.com/LLVM-but-worse/java-disassembler) The Java Disassembler
-- [**89**Star][2y] [Objective-C] [wooyundota/dumpdex](https://github.com/wooyundota/dumpdex) Android Unpack tool based on Cydia
-- [**89**Star][3m] [CSS] [woj-ciech/socialpath](https://github.com/woj-ciech/socialpath) Track users across social media platforms
+- [**89**Star][10m] [C++] [zhunki/superion](https://github.com/zhunki/superion) Superion is a fuzzer which extends the famous AFL to support structured inputs such as JavaScript and XML.
+- [**89**Star][2y] [ObjC] [wooyundota/dumpdex](https://github.com/wooyundota/dumpdex) Android Unpack tool based on Cydia
- [**89**Star][1y] [Py] [willbengtson/trailblazer-aws](https://github.com/willbengtson/trailblazer-aws) Blazing CloudTrail since 2018
+- [**89**Star][1y] [PS] [vletoux/spoolerscanner](https://github.com/vletoux/spoolerscanner) Check if MS-RPRN is remotely available with powershell/c#
- [**89**Star][4m] [Py] [tomchop/unxor](https://github.com/tomchop/unxor) unXOR will search a XORed file and try to guess the key using known-plaintext attacks.
-- [**89**Star][7d] [Py] [tomato42/tlslite-ng](https://github.com/tomato42/tlslite-ng) New home of the TLS implementation in pure python
+- [**89**Star][9d] [Py] [tomato42/tlslite-ng](https://github.com/tomato42/tlslite-ng) New home of the TLS implementation in pure python
- [**89**Star][2y] [HTML] [tigzy/malware-repo](https://github.com/tigzy/malware-repo) Malware Repository Framework
+- [**89**Star][3m] [Py] [thomaspatzke/wase](https://github.com/thomaspatzke/wase) The Web Audit Search Engine - Index and Search HTTP Requests and Responses in Web Application Audits with ElasticSearch
+- [**89**Star][1y] [Shell] [thelinuxchoice/infog](https://github.com/thelinuxchoice/infog) Information Gathering Tool
- [**89**Star][1y] [Py] [thehive-project/thehive4py](https://github.com/thehive-project/thehive4py) Python API Client for TheHive
-- [**89**Star][3y] [swiftonsecurity/phishingregex](https://github.com/swiftonsecurity/phishingregex) Backup of my phishing regular expression testing bench
-- [**89**Star][23d] [PHP] [shirosaidev/diskover-web](https://github.com/shirosaidev/diskover-web) Web file manager, disk space usage, storage search engine and file system analytics for diskover
+- [**89**Star][4y] [C#] [smartbooks/smartspider](https://github.com/smartbooks/smartspider) 网络信息智能采集系统,是一款基于http协议的Web信息采集软件,应用于网站信息采集,信息安全监控等领域。
+- [**89**Star][2m] [C++] [sinakarvandi/process-magics](https://github.com/sinakarvandi/process-magics) This is a collection of interesting codes about Windows Process creation.
+- [**89**Star][2m] [C] [sfan5/fi6s](https://github.com/sfan5/fi6s) IPV6扫描器
- [**89**Star][5m] [C] [session-replay-tools/intercept](https://github.com/session-replay-tools/intercept) An auxiliary tool for tcpcopy and tcpburn
- [**89**Star][2y] [C#] [schillings/swordphish](https://github.com/schillings/swordphish) Schillings SwordPhish empowers organisations and engages its employees to establish the key component of any cyber security strategy: the Human Firewall.
- [**89**Star][2y] [HTML] [sam-b/windbg-plugins](https://github.com/sam-b/windbg-plugins) Any useful windbg plugins I've written.
- [**89**Star][4m] [Go] [richardlehane/siegfried](https://github.com/richardlehane/siegfried) signature-based file format identification
- [**89**Star][5y] [C] [retme7/cve-2014-4322_poc](https://github.com/retme7/cve-2014-4322_poc) Gain privileges:system -> root,as a part of
-- [**89**Star][1y] [PowerShell] [realoriginal/reflectivepotato](https://github.com/realoriginal/reflectivepotato) MSFRottenPotato built as a Reflective DLL.
-- [**89**Star][4y] [C] [rchiossi/dexterity](https://github.com/rchiossi/dexterity) Dex manipulation library
-- [**89**Star][12d] [C] [plusvic/yara](https://github.com/plusvic/yara) The pattern matching swiss knife
+- [**89**Star][1y] [PS] [realoriginal/reflectivepotato](https://github.com/realoriginal/reflectivepotato) MSFRottenPotato built as a Reflective DLL.
- [**89**Star][6m] [Py] [patois/hrdevhelper](https://github.com/patois/hrdevhelper) HexRays decompiler plugin that visualizes the ctree of decompiled functions.
- [**89**Star][3y] [JS] [particle-iot/spark-protocol](https://github.com/particle-iot/spark-protocol) Node.JS module for hosting direct encrypted CoAP socket connections
-- [**89**Star][6m] [C#] [octokit/octokit.graphql.net](https://github.com/octokit/octokit.graphql.net) A GitHub GraphQL client library for .NET
+- [**89**Star][24d] [C#] [notsosecure/blacklist3r](https://github.com/notsosecure/blacklist3r) project-blacklist3r
+- [**89**Star][5m] [C++] [niklasb/sploits](https://github.com/niklasb/sploits)
+- [**89**Star][8y] [C] [neuroo/runtime-tracer](https://github.com/neuroo/runtime-tracer) Dynamic tracing for binary applications (using PIN), IDA plugin to visualize and interact with the traces
+ - [PinTool](https://github.com/neuroo/runtime-tracer/tree/master/tracer)
+ - [IDA插件](https://github.com/neuroo/runtime-tracer/tree/master/ida-pin)
- [**89**Star][2y] [nanopool/claymore-xmr-miner](https://github.com/nanopool/claymore-xmr-miner) Claymore's CryptoNote GPU Miner
-- [**89**Star][1m] [Java] [mnemonic-no/act-platform](https://github.com/mnemonic-no/act-platform) Open platform for collection and exchange of threat intelligence information
-- [**89**Star][3y] [JS] [lovetingyuan/fq](https://github.com/lovetingyuan/fq) fq应用,基于nodejs和shadowsocks
-- [**89**Star][3y] [Objective-C] [jamie72/ipapatch](https://github.com/jamie72/ipapatch) Patch iOS Apps, The Easy Way, Without Jailbreak.
-- [**89**Star][6y] [C++] [igh0st/gh0st3.6_src](https://github.com/igh0st/gh0st3.6_src)
+- [**89**Star][5y] [JS] [laktak/vanilla-chrome](https://github.com/laktak/vanilla-chrome) Vanilla Cookie Manager is a Whitelist Manager that helps protect your privacy. Automatically removes unwanted cookies.
+- [**89**Star][2m] [Java] [julietkilo/canbabel](https://github.com/julietkilo/canbabel) Translator for several Controller Area Network (CAN) description formats
+- [**89**Star][3y] [ObjC] [jamie72/ipapatch](https://github.com/jamie72/ipapatch) Patch iOS Apps, The Easy Way, Without Jailbreak.
- [**89**Star][5y] [Py] [ifghou/wapiti](https://github.com/ifghou/wapiti) A web-application vulnerability scanner
+- [**89**Star][4y] [Py] [houqp/shell.py](https://github.com/houqp/shell.py) shell power for python
- [**89**Star][8m] [Shell] [hannob/tlshelpers](https://github.com/hannob/tlshelpers) A collection of shell scripts that help handling X.509 certificate and TLS issues
- [**89**Star][2y] [PHP] [graniet/gshark-framework](https://github.com/graniet/gshark-framework) gshark-framework:执行web post exploitation,可与多个 Web 后门交互,并执行自定义脚本
-- [**89**Star][2y] [PowerShell] [gimini/noah](https://github.com/gimini/noah) an agentless open source Incident Response framework based on PowerShell
-- [**89**Star][1m] [Py] [giantbranch/pwn_deploy_chroot](https://github.com/giantbranch/pwn_deploy_chroot) 可以方便地部署一个或者多个pwn题到一个docker容器中(使用chroot,并可以设置是否使用我自己写的catflag程序替换默认的/bin/sh程序,以增加安全性)
-- [**89**Star][2y] [C++] [epam/nfstrace](https://github.com/epam/nfstrace) Network file system monitor and analyzer
-- [**89**Star][15d] [JS] [ehmicky/test-each](https://github.com/ehmicky/test-each)
+- [**89**Star][2y] [PS] [gimini/noah](https://github.com/gimini/noah) an agentless open source Incident Response framework based on PowerShell
+- [**89**Star][10d] [JS] [ehmicky/test-each](https://github.com/ehmicky/test-each)
- [**89**Star][2y] [C#] [dsnezhkov/typhoon](https://github.com/dsnezhkov/typhoon) recon under the radar
- [**89**Star][7m] [Java] [docbleach/docbleach](https://github.com/docbleach/docbleach)
- [**89**Star][3y] [Java] [dobin/burpsentinel](https://github.com/dobin/burpsentinel) GUI Burp Plugin to ease discovering of security holes in web applications
- [**89**Star][2y] [Py] [dionysio/haveibeenpwned_lastpass](https://github.com/dionysio/haveibeenpwned_lastpass) Check if your lastpass passwords have been pwned by someone
+- [**89**Star][5m] [Ruby] [digininja/rsmangler](https://github.com/digininja/rsmangler) RSMangler will take a wordlist and perform various manipulations on it similar to those done by John the Ripper with a few extras.
- [**89**Star][6m] [Go] [devanshbatham/gorecon](https://github.com/devanshbatham/gorecon) Gorecon is a All in one Reconnaissance Tool , a.k.a swiss knife for Reconnaissance , A tool that every pentester/bughunter might wanna consider into their arsenal
-- [**89**Star][2y] [PowerShell] [danielbohannon/out-fincodedcommand](https://github.com/danielbohannon/out-fincodedcommand) POC Highlighting Obfuscation Techniques used by FIN threat actors based on cmd.exe's replace functionality and cmd.exe/powershell.exe's stdin command invocation capabilities
-- [**89**Star][2m] [JS] [consensys/truffle-security](https://github.com/consensys/truffle-security) MythX smart contract security verification plugin for Truffle Framework
+- [**89**Star][1y] [Py] [dc3l1ne/weblogic-weakpassword-scnner](https://github.com/dc3l1ne/weblogic-weakpassword-scnner)
+- [**89**Star][2y] [PS] [danielbohannon/out-fincodedcommand](https://github.com/danielbohannon/out-fincodedcommand) POC Highlighting Obfuscation Techniques used by FIN threat actors based on cmd.exe's replace functionality and cmd.exe/powershell.exe's stdin command invocation capabilities
- [**89**Star][4y] [Py] [cognosec/secbee](https://github.com/cognosec/secbee) a ZigBee security testing tool developed
- [**89**Star][2y] [C] [codecat/clawsearch](https://github.com/codecat/clawsearch) A memory scanner plugin for x64dbg, inspired by Cheat Engine.
-- [**89**Star][3m] [C] [capstone-rust/capstone-rs](https://github.com/capstone-rust/capstone-rs) high-level Capstone system bindings for Rust
-- [**89**Star][2y] [PowerShell] [borntoberoot/powershell_ipv4portscanner](https://github.com/borntoberoot/powershell_ipv4portscanner) Powerful asynchronus IPv4 Port Scanner for PowerShell
-- [**89**Star][12d] [bkimminich/pwning-juice-shop](https://github.com/bkimminich/pwning-juice-shop) GitBook markdown content for the eBook "Pwning OWASP Juice Shop"
-- [**89**Star][2y] [Objective-C] [bahome/batouchid](https://github.com/bahome/batouchid) git 最全面的支付宝 指纹解锁 和 手势解锁 封装以及逻辑处理!
-- [**89**Star][2m] [Ruby] [auth0/ruby-auth0](https://github.com/auth0/ruby-auth0) Ruby toolkit for Auth0 API
-- [**89**Star][11m] [Shell] [antitree/private-tor-network](https://github.com/antitree/private-tor-network) Run an isolated instance of a tor network in Docker containers
+- [**89**Star][7d] [C] [capstone-rust/capstone-rs](https://github.com/capstone-rust/capstone-rs) high-level Capstone system bindings for Rust
+- [**89**Star][6d] [bkimminich/pwning-juice-shop](https://github.com/bkimminich/pwning-juice-shop) GitBook markdown content for the eBook "Pwning OWASP Juice Shop"
+- [**89**Star][4y] [Py] [bindog/toymalwareclassification](https://github.com/bindog/toymalwareclassification) Kaggle微软恶意代码分类
+- [**89**Star][2y] [ObjC] [bahome/batouchid](https://github.com/bahome/batouchid) git 最全面的支付宝 指纹解锁 和 手势解锁 封装以及逻辑处理!
- [**89**Star][6y] [C++] [amrthabet/winsrdf](https://github.com/amrthabet/winsrdf) Security Research and Development Framework
+- [**89**Star][4m] [adguardteam/adguardformac](https://github.com/adguardteam/adguardformac) Open bug tracker for Mac version of AdGuard
- [**89**Star][2y] [HTML] [0xcl/clang-cfi-bypass-techniques](https://github.com/0xcl/clang-cfi-bypass-techniques) 三种利用漏洞绕过Clang Control Flow Integrity (CFI)的技巧(应用于Chromium时)
-- [**89**Star][9m] [Py] [0x27/ssh_keyscanner](https://github.com/0x27/ssh_keyscanner) ssh public host key scanner using shodan
- [**89**Star][11m] [Py] [0x00-0x00/fakepip](https://github.com/0x00-0x00/fakepip) Pip install exploit package
-- [**88**Star][2d] [Py] [sachinkamath/ntlmrecon](https://github.com/sachinkamath/ntlmrecon) A fast and flexible NTLM reconnaissance tool
-- [**88**Star][5m] [Py] [lgandx/ccrawldns](https://github.com/lgandx/ccrawldns) This small utility retrieves from the CommonCrawl data set unique subdomains for a given domain name.
-- [**88**Star][9m] [C] [caesar0301/pkt2flow](https://github.com/caesar0301/pkt2flow) A simple utility to classify packets into flows. It's so simple that only one task is aimed to finish. For Deep Packet Inspection or flow classification, it's so common to analyze the feature of one specific flow. I have make the attempt to use made-ready tools like tcpflows, tcpslice, tcpsplit, but all these tools try to either decrease the tra…
-- [**88**Star][7d] [PowerShell] [gtworek/psbits](https://github.com/gtworek/psbits) Simple (mainly PowerShell) solutions allowing you to dig a bit deeper than usual.
-- [**88**Star][26d] [C++] [4d61726b/virtualkd-redux](https://github.com/4d61726b/virtualkd-redux) VirtualKD-Redux - A revival and modernization of VirtualKD
+- [**88**Star][2y] [Go] [dawei101/tongsheclient.shadowsocks-go-ui](https://github.com/dawei101/tongsheclient.shadowsocks-go-ui) shadowsocks client for all desktop platform(mac osx/windows/linux) with golang
+- [**88**Star][3y] [Swift] [kjcracks/swift-dump](https://github.com/kjcracks/swift-dump) Generate readable Swift code from binaries
+- [**88**Star][3m] [C++] [leoloobeek/comproxy](https://github.com/leoloobeek/comproxy) PoC for proxying COM objects when hijacking
- [**88**Star][2y] [Py] [icchy/tracecorn](https://github.com/icchy/tracecorn) Windows API tracer for malware (oldname: unitracer)
-- [**88**Star][1y] [C] [zerosteiner/reflective-polymorphism](https://github.com/zeroSteiner/reflective-polymorphism) Reflective Polymorphism
- [**88**Star][1y] [TeX] [zxgio/r2-cheatsheet](https://github.com/zxgio/r2-cheatsheet) Radare2 cheat-sheet
- [**88**Star][3y] [C++] [zibility/remote](https://github.com/zibility/remote) 参考Gh0st源码,实现的一款PC远程协助软件,拥有远程Shell、文件管理、桌面管理、消息发送等功能。
-- [**88**Star][9m] [C++] [zhunki/superion](https://github.com/zhunki/superion) Superion is a fuzzer which extends the famous AFL to support structured inputs such as JavaScript and XML.
- [**88**Star][2m] [PHP] [zendframework/zend-crypt](https://github.com/zendframework/zend-crypt) Cryptographic component from Zend Framework
- [**88**Star][10m] [Py] [woj-ciech/kupa3](https://github.com/woj-ciech/kupa3) Tracking the trackers. Draw connections between scripts and domains on website.
-- [**88**Star][1y] [PowerShell] [vletoux/spoolerscanner](https://github.com/vletoux/spoolerscanner) Check if MS-RPRN is remotely available with powershell/c#
-- [**88**Star][17d] [CSS] [uvasrg/evademl](https://github.com/uvasrg/evademl) An evolutionary framework for evading machine learning-based malware classifiers.
+- [**88**Star][5m] [C] [vulhub/redis-rogue-getshell](https://github.com/vulhub/redis-rogue-getshell) 利用redis 4.x/5.x master/slave 模式getshell
+- [**88**Star][3d] [C] [vigem/hidguardian](https://github.com/vigem/hidguardian) Windows kernel-mode driver for controlling access to various input devices.
+- [**88**Star][9d] [CSS] [uvasrg/evademl](https://github.com/uvasrg/evademl) An evolutionary framework for evading machine learning-based malware classifiers.
- [**88**Star][3y] [C] [ufrisk/kaslrfinder](https://github.com/ufrisk/kaslrfinder) Kernel Address Space Layout Randomization (KASLR) Recovery Software
- [**88**Star][5m] [tuupola/branca-spec](https://github.com/tuupola/branca-spec) Authenticated and encrypted API tokens using modern crypto
-- [**88**Star][11d] [Ruby] [travis-ci/packer-templates](https://github.com/travis-ci/packer-templates) Templates for Packer!
+- [**88**Star][1m] [Py] [tum-i22/macke](https://github.com/tum-i22/macke) Modular And Compositional analysis with KLEE Engine
+- [**88**Star][13d] [Ruby] [travis-ci/packer-templates](https://github.com/travis-ci/packer-templates) Templates for Packer!
- [**88**Star][1y] [Py] [tearsecurity/firstorder](https://github.com/tearsecurity/firstorder) A traffic analyzer to evade Empire's communication from Anomaly-Based IDS
-- [**88**Star][2y] [PowerShell] [suriyaakudoisc/keylogger](https://github.com/suriyaakudoisc/keylogger)
+- [**88**Star][2y] [PS] [suriyaakudoisc/keylogger](https://github.com/suriyaakudoisc/keylogger)
- [**88**Star][3y] [C] [stealth/troubleshooter](https://github.com/stealth/troubleshooter) setroubleshootd xSports
- [**88**Star][3m] [Go] [smiegles/mass3](https://github.com/smiegles/mass3) 使用DNS和一堆DNS解析器, 快速枚举预定义的AWS S3 bucket
+- [**88**Star][1y] [Java] [silentsignal/burp-image-size](https://github.com/silentsignal/burp-image-size) Image size issues plugin for Burp Suite
- [**88**Star][1y] [Py] [sigploiter/gtscan](https://github.com/sigploiter/gtscan) The Nmap Scanner for Telco
- [**88**Star][2m] [Py] [si9int/acamar](https://github.com/si9int/acamar) A Python3 based single-file subdomain enumerator
-- [**88**Star][2m] [C] [sfan5/fi6s](https://github.com/sfan5/fi6s) IPV6扫描器
- [**88**Star][2y] [Py] [se55i0n/awvs_nessus_scanner_api](https://github.com/se55i0n/awvs_nessus_scanner_api) 扫描器Awvs 11和Nessus 7 Api利用脚本
+- [**88**Star][14d] [sdnewhop/sdwannewhope](https://github.com/sdnewhop/sdwannewhope) 通过分析不同的SD-WAN解决方案, 回答SD-WAN安全性方面的问题(SD-WAN: 软件定义的广域网)
+- [**88**Star][2m] [Scala] [scala/jardiff](https://github.com/scala/jardiff) A tool for comparing JAR files, including Scala pickled signatures and method code
- [**88**Star][10m] [PHP] [sanix-darker/antiddos-system](https://github.com/sanix-darker/antiddos-system)
- [**88**Star][5m] [Py] [rub-syssec/password-guessing-framework](https://github.com/rub-syssec/password-guessing-framework) A Framework for Comparing Password Guessing Strategies
- [**88**Star][6m] [Java] [rub-nds/burpssoextension](https://github.com/rub-nds/burpssoextension) An extension for BurpSuite that highlights SSO messages in Burp's proxy window..
+- [**88**Star][2m] [Scala] [rsertelon/android-keystore-recovery](https://github.com/rsertelon/android-keystore-recovery) A tool to recover your lost Android keystore password
- [**88**Star][2y] [Py] [rk700/attackrsa](https://github.com/rk700/attackrsa) An all-in-one tool including many common attacks against RSA problems in CTF.
- [**88**Star][1y] [C] [renorobert/virtualbox-cve-2018-2844](https://github.com/renorobert/virtualbox-cve-2018-2844)
-- [**88**Star][2y] [PowerShell] [realparisi/wmi_monitor](https://github.com/realparisi/wmi_monitor) Log newly created WMI consumers and processes to the Windows Application event log
-- [**88**Star][1y] [Shell] [ossiozac/raspberry-pi-zero-rubber-ducky-duckberry-pi](https://github.com/ossiozac/raspberry-pi-zero-rubber-ducky-duckberry-pi) A £10 Rubber Ducky USB HID! A USB device which emulates a keyboard and automates key entry.
+- [**88**Star][2y] [PS] [realparisi/wmi_monitor](https://github.com/realparisi/wmi_monitor) Log newly created WMI consumers and processes to the Windows Application event log
+- [**88**Star][5m] [Py] [rassec/yandi-scanner](https://github.com/rassec/yandi-scanner) Network Security Vulnerability Scanner
- [**88**Star][3m] [JS] [ossindex/auditjs](https://github.com/ossindex/auditjs) Audits an NPM package.json file to identify known vulnerabilities.
-- [**88**Star][2m] [Py] [operatorequals/httpimport](https://github.com/operatorequals/httpimport) Module for remote in-memory Python package/module loading through HTTP/S
-- [**88**Star][5m] [C++] [niklasb/sploits](https://github.com/niklasb/sploits)
-- [**88**Star][8y] [C] [neuroo/runtime-tracer](https://github.com/neuroo/runtime-tracer) Dynamic tracing for binary applications (using PIN), IDA plugin to visualize and interact with the traces
- - [PinTool](https://github.com/neuroo/runtime-tracer/tree/master/tracer)
- - [IDA插件](https://github.com/neuroo/runtime-tracer/tree/master/ida-pin)
- [**88**Star][7m] [Go] [nearform/gammaray](https://github.com/nearform/gammaray) Node.js vulnerability scanner
- [**88**Star][4y] [Py] [mothran/unicorn-decoder](https://github.com/mothran/unicorn-decoder) Simple shellcode decoder using unicorn-engine
- [**88**Star][2y] [Py] [mind0xp/frida-python-binding](https://github.com/mind0xp/frida-python-binding) Easy to use Frida python binding script
- [**88**Star][10m] [Go] [marinx/keylogger](https://github.com/marinx/keylogger) Basic keylogger in Go (no C deps)
+- [**88**Star][11m] [JS] [mandatoryprogrammer/tarnish](https://github.com/mandatoryprogrammer/tarnish) A Chrome extension static analysis tool to help aide in security reviews.
- [**88**Star][4y] [Py] [maltelligence/maltelligence](https://github.com/maltelligence/maltelligence) a Malware/Threat Analyst Desktop
-- [**88**Star][5y] [JS] [laktak/vanilla-chrome](https://github.com/laktak/vanilla-chrome) Vanilla Cookie Manager is a Whitelist Manager that helps protect your privacy. Automatically removes unwanted cookies.
-- [**88**Star][4y] [Py] [knownsec/vxpwn](https://github.com/knownsec/vxpwn) VxWorks漏洞挖掘相关
-- [**88**Star][2m] [Java] [julietkilo/canbabel](https://github.com/julietkilo/canbabel) Translator for several Controller Area Network (CAN) description formats
+- [**88**Star][3y] [JS] [lovetingyuan/fq](https://github.com/lovetingyuan/fq) fq应用,基于nodejs和shadowsocks
- [**88**Star][8m] [Shell] [jseidl/multi-tor](https://github.com/jseidl/multi-tor) Shellscript opens multiple TOR instances
+- [**88**Star][6m] [C#] [jnqpblc/sharpspray](https://github.com/jnqpblc/sharpspray) SharpSpray a simple code set to perform a password spraying attack against all users of a domain using LDAP and is compatible with Cobalt Strike.
- [**88**Star][1y] [Shell] [jbreed/apkwash](https://github.com/jbreed/apkwash) Android APK Antivirus evasion for msfvenom generated payloads.
-- [**88**Star][2y] [Ruby] [hanshaze/ms17-010-eternalblue-winxp-win10](https://github.com/hanshaze/ms17-010-eternalblue-winxp-win10) EternalBlue Metasploit Port to various Windows Versions from Windows XP SP2 up to Windows 10 Pro
-- [**88**Star][24d] [C] [guidovranken/cryptofuzz](https://github.com/guidovranken/cryptofuzz)
- [**88**Star][2y] [Java] [federicodotta/handycollaborator](https://github.com/federicodotta/handycollaborator) Burp Suite plugin created for using Collaborator tool during manual testing in a comfortable way!
+- [**88**Star][20d] [Py] [ernw/windows-insight](https://github.com/ernw/windows-insight) The content of this repository aims to assist efforts on analysing inner working principles, functionalities, and properties of the Microsoft Windows operating system. This repository stores relevant documentation as well as executable files needed for conducting analysis studies.
- [**88**Star][1m] [Rust] [ekse/unicorn-rs](https://github.com/ekse/unicorn-rs) Rust bindings for the unicorn CPU emulator
-- [**88**Star][4m] [C++] [djformby/grfics](https://github.com/djformby/grfics) Graphical Realism Framework for Industrial Control Simulations
+- [**88**Star][2y] [C++] [egebalci/cminer](https://github.com/egebalci/cminer) Cminer is a tool for enumerating the code caves in PE files.
+- [**88**Star][3y] [Go] [dutchcoders/ares](https://github.com/dutchcoders/ares) Phishing toolkit for red teams and pentesters.
- [**88**Star][9m] [Py] [dirkjanm/impacket](https://github.com/dirkjanm/impacket) Impacket is a collection of Python classes for working with network protocols.
-- [**88**Star][5m] [Ruby] [digininja/rsmangler](https://github.com/digininja/rsmangler) RSMangler will take a wordlist and perform various manipulations on it similar to those done by John the Ripper with a few extras.
-- [**88**Star][1y] [Py] [dc3l1ne/weblogic-weakpassword-scnner](https://github.com/dc3l1ne/weblogic-weakpassword-scnner)
- [**88**Star][4y] [dantaler/detectionstring](https://github.com/dantaler/detectionstring) list of sql-injection and XSS strings
- [**88**Star][5y] [Py] [cubicalabs/idasynergy](https://github.com/cubicalabs/idasynergy) IDA Plugin with svn integerted
- [**88**Star][3m] [Scala] [criteo/lolhttp](https://github.com/criteo/lolhttp) An HTTP Server and Client library for Scala.
- [**88**Star][6m] [Go] [coinbase/dexter](https://github.com/coinbase/dexter) Forensics acquisition framework designed to be extensible and secure
-- [**88**Star][1y] [Objective-C] [cmackay/google-analytics-plugin](https://github.com/cmackay/google-analytics-plugin) Cordova Google Analytics Plugin for Android & iOS
+- [**88**Star][1y] [ObjC] [cmackay/google-analytics-plugin](https://github.com/cmackay/google-analytics-plugin) Cordova Google Analytics Plugin for Android & iOS
+- [**88**Star][3m] [Py] [cisco-talos/ghidraaas](https://github.com/cisco-talos/ghidraaas) a simple web server that exposes Ghidra analysis through REST APIs
- [**88**Star][3y] [Py] [circl/bgp-ranking](https://github.com/circl/bgp-ranking) BGP ranking is a free software to calculate the security ranking of Internet Service Provider (ASN).
- [**88**Star][1y] [chihebchebbi/internet-of-things-pentesting-framework](https://github.com/chihebchebbi/internet-of-things-pentesting-framework)
+- [**88**Star][1y] [C] [chef-koch/malware-research](https://github.com/chef-koch/malware-research) Samples, research and documents about any kind of malware and misc source which should be released to the public
- [**88**Star][5y] [Py] [cheetz/brutescrape](https://github.com/cheetz/brutescrape) A web scraper for generating password files based on plain text found
- [**88**Star][3m] [JS] [chatziko/location-guard](https://github.com/chatziko/location-guard) Hide your geographic location from websites.
-- [**88**Star][2y] [Py] [blackploit/hash-identifier](https://github.com/blackploit/hash-identifier) Software to identify the different types of hashes used to encrypt data and especially passwords
-- [**88**Star][12d] [Py] [appsecco/spaces-finder](https://github.com/appsecco/spaces-finder) A tool to hunt for publicly accessible DigitalOcean Spaces
-- [**88**Star][2m] [Java] [adubbz/ghidra-switch-loader](https://github.com/adubbz/ghidra-switch-loader) Nintendo Switch loader for Ghidra
-- [**88**Star][6m] [C++] [adalenv/cve-2019-0708-tool](https://github.com/adalenv/cve-2019-0708-tool) A social experiment
+- [**88**Star][10m] [Py] [calidog/axeman](https://github.com/calidog/axeman) Axeman is a utility to retrieve certificates from Certificate Transparency Lists (CTLs)
+- [**88**Star][5m] [Py] [balika011/selfblow](https://github.com/balika011/selfblow) CVE‑2019‑5680
+- [**88**Star][14d] [Py] [appsecco/spaces-finder](https://github.com/appsecco/spaces-finder) A tool to hunt for publicly accessible DigitalOcean Spaces
+- [**88**Star][1y] [Py] [andresriancho/jwt-fuzzer](https://github.com/andresriancho/jwt-fuzzer) JWT fuzzer
+- [**88**Star][7m] [C++] [adalenv/cve-2019-0708-tool](https://github.com/adalenv/cve-2019-0708-tool) A social experiment
- [**88**Star][2y] [Ruby] [0x09al/cve-2017-11882-metasploit](https://github.com/0x09al/cve-2017-11882-metasploit) This is a Metasploit module which exploits CVE-2017-11882 using the POC released here :
-- [**87**Star][2m] [C] [zfl9/chinadns-ng](https://github.com/zfl9/chinadns-ng) chinadns next generation, refactoring with epoll and ipset
-- [**87**Star][7m] [Shell] [honwen/luci-app-shadowsocksr](https://github.com/honwen/luci-app-shadowsocksr) OpenWrt/LEDE LuCI for ShadowsocksR-libev
- [**87**Star][4y] [Py] [aanarchyy/wifite-mod-pixiewps](https://github.com/aanarchyy/wifite-mod-pixiewps)
+- [**87**Star][2m] [Py] [demantz/frizzer](https://github.com/demantz/frizzer) Frida-based general purpose fuzzer
- [**87**Star][3m] [Py] [ecstatic-nobel/analyst-arsenal](https://github.com/ecstatic-nobel/Analyst-Arsenal) A toolkit for Security Researchers
- [**87**Star][11m] [C++] [nccgroup/dibf](https://github.com/nccgroup/DIBF) Windows NT ioctl bruteforcer and modular fuzzer
+- [**87**Star][6m] [Py] [mzfr/ctf-writeups](https://github.com/mzfr/ctf-writeups) Writeups of Capture The Flag Competitions
- [**87**Star][4m] [Py] [duo-labs/phish-collect](https://github.com/duo-labs/phish-collect) Python script to hunt phishing kits
- [**87**Star][8m] [Py] [blacknbunny/peanalyzer](https://github.com/blacknbunny/peanalyzer) Advanced Portable Executable File Analyzer And Disassembler 32 & 64 Bit
- [**87**Star][2y] [Go] [rancher/lb-controller](https://github.com/rancher/lb-controller) Load Balancer for Rancher services via ingress controllers backed up by a Load Balancer provider of choice
- [**87**Star][11m] [Py] [0xbharath/censys-enumeration](https://github.com/0xbharath/censys-enumeration) A script to extract subdomains/emails for a given domain using SSL/TLS certificate dataset on Censys
- [**87**Star][4y] [C] [yaoyumeng/adore-ng](https://github.com/yaoyumeng/adore-ng) linux rootkit adapted for 2.6 and 3.x
- [**87**Star][8y] [C] [zoloziak/winnt4](https://github.com/zoloziak/winnt4) Windows NT4 Kernel Source code
-- [**87**Star][2m] [Py] [xfreed0m/katzkatz](https://github.com/xfreed0m/katzkatz) Python script to parse txt files containing Mimikatz output
-- [**87**Star][14d] [C] [waterslidelts/waterslide](https://github.com/waterslidelts/waterslide) WaterSlide is a streaming event-at-a-time architecture for processing metadata. It is designed to take in a set of streaming events from multiple sources, process them through a set of modules ("kids"), and return meaningful outputs.
-- [**87**Star][30d] [HTML] [w3c/editing](https://github.com/w3c/editing) Specs and explainers maintained by the editing task force
-- [**87**Star][1y] [C] [vigem/hidguardian](https://github.com/vigem/hidguardian) Windows kernel-mode driver for controlling access to various input devices.
+- [**87**Star][1y] [C#] [zawawawa/gatelessgatesharp](https://github.com/zawawawa/gatelessgatesharp) Gateless Gate Sharp is an user-friendly yet extremely powerful open-source multi-algorithm miner for Windows operating systems.
+- [**87**Star][9m] [Java] [yunxu1/jboss-_cve-2017-12149](https://github.com/yunxu1/jboss-_cve-2017-12149) CVE-2017-12149 jboss反序列化 可回显
+- [**87**Star][7d] [Py] [xfreed0m/katzkatz](https://github.com/xfreed0m/katzkatz) Python script to parse txt files containing Mimikatz output
+- [**87**Star][2d] [C] [waterslidelts/waterslide](https://github.com/waterslidelts/waterslide) WaterSlide is a streaming event-at-a-time architecture for processing metadata. It is designed to take in a set of streaming events from multiple sources, process them through a set of modules ("kids"), and return meaningful outputs.
+- [**87**Star][8d] [HTML] [w3c/editing](https://github.com/w3c/editing) Specs and explainers maintained by the editing task force
+- [**87**Star][2y] [vegabird/xvna](https://github.com/vegabird/xvna) 带漏洞的Node App
- [**87**Star][6m] [v-p-b/avpwn](https://github.com/v-p-b/avpwn) List of real-world threats against endpoint protection software
+- [**87**Star][1y] [Py] [uploadcare/pyuploadcare](https://github.com/uploadcare/pyuploadcare) Python library for uploadcare
+- [**87**Star][17d] [C] [unicornteam/hackcube-special](https://github.com/unicornteam/hackcube-special)
- [**87**Star][1y] [Java] [twjitm/afhq](https://github.com/twjitm/afhq) 类似于腾讯手机管家,360安全卫士等软件系。可以进行木马扫描,网络端口扫描,支付环境扫描,漏洞检测,短信电话拦截,垃圾清理,和手机防盗,利用反射和内容提供者实现电话短信拦截,采用iptable实现网络拦截过滤
-- [**87**Star][1m] [Py] [tum-i22/macke](https://github.com/tum-i22/macke) Modular And Compositional analysis with KLEE Engine
-- [**87**Star][3m] [Py] [thomaspatzke/wase](https://github.com/thomaspatzke/wase) The Web Audit Search Engine - Index and Search HTTP Requests and Responses in Web Application Audits with ElasticSearch
-- [**87**Star][1y] [Shell] [thelinuxchoice/infog](https://github.com/thelinuxchoice/infog) Information Gathering Tool
-- [**87**Star][2m] [C++] [sinakarvandi/process-magics](https://github.com/sinakarvandi/process-magics) This is a collection of interesting codes about Windows Process creation.
-- [**87**Star][1y] [Java] [silentsignal/burp-image-size](https://github.com/silentsignal/burp-image-size) Image size issues plugin for Burp Suite
+- [**87**Star][26d] [Py] [tozny/rancher-lets-encrypt](https://github.com/tozny/rancher-lets-encrypt) Automatically create and manage certificates in Rancher using Let's Encrypt webroot verification via a minimal service
+- [**87**Star][2m] [JS] [sk4ddy/remediatetheflag](https://github.com/sk4ddy/remediatetheflag) remediatetheflag: 对程序员进行安全相关的培训
- [**87**Star][6y] [C] [shjalayeri/drivecrypt](https://github.com/shjalayeri/drivecrypt) DriveCrypt Dcr.sys vulnerability exploit
-- [**87**Star][12d] [sdnewhop/sdwannewhope](https://github.com/sdnewhop/sdwannewhope) 通过分析不同的SD-WAN解决方案, 回答SD-WAN安全性方面的问题(SD-WAN: 软件定义的广域网)
- [**87**Star][6m] [TeX] [rudymatela/concise-cheat-sheets](https://github.com/rudymatela/concise-cheat-sheets) Cheat Sheets for programming languages and tools
-- [**87**Star][2m] [Scala] [rsertelon/android-keystore-recovery](https://github.com/rsertelon/android-keystore-recovery) A tool to recover your lost Android keystore password
- [**87**Star][4y] [Py] [regit/pshitt](https://github.com/regit/pshitt) Passwords of SSH Intruders Transferred to Text
-- [**87**Star][5m] [Py] [rassec/yandi-scanner](https://github.com/rassec/yandi-scanner) Network Security Vulnerability Scanner
+- [**87**Star][2y] [PS] [re4lity/schtasks-backdoor](https://github.com/re4lity/schtasks-backdoor) Powershell 权限维持后门
- [**87**Star][5y] [C++] [piscou/fuzzwin](https://github.com/piscou/fuzzwin)
-- [**87**Star][22d] [C#] [notsosecure/blacklist3r](https://github.com/notsosecure/blacklist3r) project-blacklist3r
+- [**87**Star][4y] [PS] [netspi/powershell-modules](https://github.com/netspi/powershell-modules)
- [**87**Star][4y] [Py] [necst/aamo](https://github.com/necst/aamo) AAMO: Another Android Malware Obfuscator
-- [**87**Star][26d] [JS] [misp/misp-dashboard](https://github.com/misp/misp-dashboard) A dashboard for a real-time overview of threat intelligence from MISP instances
-- [**87**Star][4y] [Py] [malwaremusings/unpacker](https://github.com/malwaremusings/unpacker) Automated malware unpacker
+- [**87**Star][1m] [nccgroup/onelogicalmyth_shell](https://github.com/nccgroup/onelogicalmyth_shell) A HTA shell to assist with breakout assessments.
+- [**87**Star][10m] [C] [mrdoulestar/whatminer](https://github.com/mrdoulestar/whatminer) 整理和收集遇见的各种恶意挖矿样本以供研究和学习(欢迎小伙伴们一起维护)
+- [**87**Star][4m] [C++] [misson20000/twili](https://github.com/misson20000/twili) Homebrew debug monitor for the Nintendo Switch.
+- [**87**Star][28d] [JS] [misp/misp-dashboard](https://github.com/misp/misp-dashboard) A dashboard for a real-time overview of threat intelligence from MISP instances
+- [**87**Star][2y] [JS] [mirkoschubert/gdpr-cli](https://github.com/mirkoschubert/gdpr-cli) A command line tool for checking your website for GDPR compliance.
- [**87**Star][1y] [Py] [lnxg33k/webhandler](https://github.com/lnxg33k/webhandler) Bash simulator to control a server using PHP system functions.
- [**87**Star][1y] [C] [lloydlabs/windows-api-hashing](https://github.com/lloydlabs/windows-api-hashing) This is a simple example and explanation of obfuscating API resolution via hashing
- [**87**Star][4y] [Py] [laginimaineb/msm8974_exploit](https://github.com/laginimaineb/msm8974_exploit) Full TrustZone exploit for MSM8974
+- [**87**Star][8m] [Py] [laconicwolf/burp-extensions](https://github.com/laconicwolf/burp-extensions) A collection of scripts to extend Burp Suite
- [**87**Star][6y] [Py] [jordan-wright/python-wireless-attacks](https://github.com/jordan-wright/python-wireless-attacks) Wireless Attacks in Python (Based on Blog Series)
-- [**87**Star][5m] [C#] [jnqpblc/sharpspray](https://github.com/jnqpblc/sharpspray) SharpSpray a simple code set to perform a password spraying attack against all users of a domain using LDAP and is compatible with Cobalt Strike.
- [**87**Star][5y] [Py] [iphelix/ida-patcher](https://github.com/iphelix/ida-patcher) a plugin for Hex-Ray's IDA Pro disassembler designed to enhance IDA's ability to patch binary files and memory.
-- [**87**Star][18d] [Py] [hexhive/bopc](https://github.com/hexhive/bopc) Block Oriented Programming -- Compiler
+- [**87**Star][2y] [realbearcat/fastjson-payload](https://github.com/RealBearcat/Fastjson-Payload) Fastjson 反序列化
+- [**87**Star][8m] [C++] [huanghongkai/game-helper](https://github.com/huanghongkai/game-helper) 介绍入门级游戏辅助的原理,内附有2018年2月dnf辅助C++源码
+- [**87**Star][20d] [Py] [hexhive/bopc](https://github.com/hexhive/bopc) Block Oriented Programming -- Compiler
- [**87**Star][10m] [Py] [hegusung/webhashcat](https://github.com/hegusung/webhashcat) Hashcat web interface
- [**87**Star][1y] [hannob/tls-what-can-go-wrong](https://github.com/hannob/tls-what-can-go-wrong) TLS可能存在的问题
- [**87**Star][2y] [C++] [google/aff4](https://github.com/google/aff4) The Advanced Forensic File Format. NOTE: This project has been split into C and Python projects and moved to
- [**87**Star][5y] [Go] [filosottile/berserk](https://github.com/filosottile/berserk) A Go implementation of the BERserk attack against Mozilla NSS ASN.1 parsing of PKCS#1 RSA signatures with e = 3. Complete of a certificate generation tool, works with CAs in the trust store.
- [**87**Star][1y] [JS] [fgsect/fexm](https://github.com/fgsect/fexm) Automated fuzzing framework
-- [**87**Star][18d] [Py] [ernw/windows-insight](https://github.com/ernw/windows-insight) The content of this repository aims to assist efforts on analysing inner working principles, functionalities, and properties of the Microsoft Windows operating system. This repository stores relevant documentation as well as executable files needed for conducting analysis studies.
+- [**87**Star][2m] [Py] [eth0izzle/cracke-dit](https://github.com/eth0izzle/cracke-dit) cracke-dit ("Cracked It") makes it easier to perform regular password audits against Active Directory environments.
- [**87**Star][1m] [F#] [enkomio/sojobo](https://github.com/enkomio/sojobo) A binary analysis framework
-- [**87**Star][2y] [C++] [egebalci/cminer](https://github.com/egebalci/cminer) Cminer is a tool for enumerating the code caves in PE files.
-- [**87**Star][3y] [Go] [dutchcoders/ares](https://github.com/dutchcoders/ares) Phishing toolkit for red teams and pentesters.
+- [**87**Star][6d] [endermanch/malwaredatabase](https://github.com/endermanch/malwaredatabase) This repository is one of a few malware collections on the GitHub.
+- [**87**Star][9m] [Java] [doyensec/burpdeveltraining](https://github.com/doyensec/burpdeveltraining) Material for the training "Developing Burp Suite Extensions – From Manual Testing to Security Automation"
+- [**87**Star][1y] [PS] [deepzec/win-portfwd](https://github.com/deepzec/win-portfwd) Powershell script to setup windows port forwarding using native netsh client
- [**87**Star][2y] [C#] [cubecoders/confuserex-reborn](https://github.com/cubecoders/confuserex-reborn) An open-source, free protector for .NET applications
-- [**87**Star][3m] [PowerShell] [clr2of8/slackextract](https://github.com/clr2of8/slackextract) A PowerShell script to download all files, messages and user profiles that a user has access to in slack.
+- [**87**Star][9m] [Go] [crabkun/switcher](https://github.com/crabkun/switcher) 一个多功能的端口转发/端口复用工具,支持转发本地或远程地址的端口,支持正则表达式转发(实现端口复用)。
+- [**87**Star][3m] [PS] [clr2of8/slackextract](https://github.com/clr2of8/slackextract) A PowerShell script to download all files, messages and user profiles that a user has access to in slack.
- [**87**Star][4m] [Clojure] [clojure-goes-fast/clj-java-decompiler](https://github.com/clojure-goes-fast/clj-java-decompiler) clj-java-decompiler: 将 Clojure 反编译为 Java
-- [**87**Star][1y] [C] [chef-koch/malware-research](https://github.com/chef-koch/malware-research) Samples, research and documents about any kind of malware and misc source which should be released to the public
- [**87**Star][3y] [Py] [boy-hack/pythonwebhack](https://github.com/boy-hack/pythonwebhack) 用python实现的web框架建立的在线渗透平台
- [**87**Star][2y] [Java] [blackarbiter/android_code_arbiter](https://github.com/blackarbiter/android_code_arbiter) 针对Android Studio的源码扫描工具
-- [**87**Star][2y] [PowerShell] [bkup/slackshell](https://github.com/bkup/slackshell) PowerShell to Slack C2
-- [**87**Star][4y] [Py] [bindog/toymalwareclassification](https://github.com/bindog/toymalwareclassification) Kaggle微软恶意代码分类
-- [**87**Star][5m] [Py] [balika011/selfblow](https://github.com/balika011/selfblow) CVE‑2019‑5680
+- [**87**Star][2y] [PS] [bkup/slackshell](https://github.com/bkup/slackshell) PowerShell to Slack C2
- [**87**Star][1m] [Py] [assurancemaladiesec/certstreammonitor](https://github.com/assurancemaladiesec/certstreammonitor) Monitor certificates generated for specific domain strings and associated, store data into sqlite3 database, alert you when sites come online.
- [**87**Star][1m] [Py] [alset0326/peda-arm](https://github.com/alset0326/peda-arm) GDB plugin peda for arm
- [**87**Star][2y] [Py] [alexpark07/armscgen](https://github.com/alexpark07/armscgen) ARM Shellcode Generator
-- [**87**Star][1m] [Py] [akamai-threat-research/mqtt-pwn](https://github.com/akamai-threat-research/mqtt-pwn) MQTT-PWN intends to be a one-stop-shop for IoT Broker penetration-testing and security assessment operations.
- [**87**Star][4y] [Py] [airbus-seclab/bta](https://github.com/airbus-seclab/bta) Open source Active Directory security audit framework.
- [**87**Star][5y] [Py] [adafruit/freqshow](https://github.com/adafruit/freqshow) Raspberry Pi & PiTFT-based RTL-SDR frequency scanning and display tool.
+- [**86**Star][6d] [Rust] [plsyssec/haybale](https://github.com/plsyssec/haybale) Symbolic execution of LLVM IR with an engine written in Rust
- [**86**Star][4m] [Py] [skelsec/minikerberos](https://github.com/skelsec/minikerberos) Kerberos manipulation library in pure Python
- [**86**Star][11m] [Py] [webbreacher/osinttools](https://github.com/webbreacher/osinttools) A collection of random OSINT scripts
+- [**86**Star][1y] [Py] [bignerd95/routeros-backup-tools](https://github.com/bignerd95/routeros-backup-tools) Tools to encrypt/decrypt and pack/unpack RouterOS v6.13+ backup files
- [**86**Star][1y] [Py] [openai/neural-gpu](https://github.com/openai/neural-gpu) Code for the Neural GPU model originally described in "Neural GPUs Learn Algorithms"
- [**86**Star][3m] [C#] [shack2/struts2vulstools](https://github.com/shack2/struts2vulstools) Struts2系列漏洞检查工具
-- [**86**Star][3m] [C++] [leoloobeek/comproxy](https://github.com/leoloobeek/comproxy) PoC for proxying COM objects when hijacking
+- [**86**Star][24d] [Go] [liamg/pax](https://github.com/liamg/pax)
+- [**86**Star][14d] [HCL] [nccgroup/sadcloud](https://github.com/nccgroup/sadcloud) A tool for standing up (and tearing down!) purposefully insecure cloud infrastructure
- [**86**Star][4y] [JS] [nsacyber/locklevel](https://github.com/nsacyber/LOCKLEVEL) A prototype that demonstrates a method for scoring how well Windows systems have implemented some of the top 10 Information Assurance mitigation strategies. #nsacyber
+- [**86**Star][9m] [Py] [hackthissite/ctf-writeups](https://github.com/HackThisSite/CTF-Writeups) Things we learned from Capture The Flag hacking competitions we participated in.
- [**86**Star][2y] [Ruby] [eurialo/vsaudit](https://github.com/eurialo/vsaudit) VOIP Security Audit Framework
- [**86**Star][2y] [JS] [polymathnetwork/polymath-token](https://github.com/PolymathNetwork/polymath-token) Ethereum contracts for the official Polymath token (POLY) and token distribution
-- [**86**Star][5m] [Py] [mzfr/ctf-writeups](https://github.com/mzfr/ctf-writeups) Writeups of Capture The Flag Competitions
- [**86**Star][7y] [Py] [stevenseeley/heaper](https://github.com/stevenseeley/heaper) heaper, an advanced heap analysis plugin for Immunity Debugger
- [**86**Star][3y] [Py] [vysecurity/genhta](https://github.com/vysecurity/genHTA) Generates anti-sandbox analysis HTA files without payloads
- [**86**Star][2y] [HTML] [illikainen/exploits](https://github.com/illikainen/exploits)
-- [**86**Star][9m] [Java] [yunxu1/jboss-_cve-2017-12149](https://github.com/yunxu1/jboss-_cve-2017-12149) CVE-2017-12149 jboss反序列化 可回显
+- [**86**Star][1y] [JS] [ettic-team/dnsbin](https://github.com/ettic-team/dnsbin) The request.bin of DNS request
+- [**86**Star][7d] [HTML] [mitre-attack/attack-website](https://github.com/mitre-attack/attack-website) MITRE ATT&CK Website
+- [**86**Star][4y] [Java] [zerothoughts/spring-jndi](https://github.com/zerothoughts/spring-jndi) Proof of concept exploit, showing how to do bytecode injection through untrusted deserialization with Spring Framework 4.2.4
+- [**86**Star][2y] [C] [zerosum0x0/threadcontinue](https://github.com/zerosum0x0/threadcontinue) Reflective DLL injection using SetThreadContext() and NtContinue()
+- [**86**Star][4y] [Py] [youmengxuefei/web_vul_scan](https://github.com/youmengxuefei/web_vul_scan) 基于爬虫的web漏洞扫描器
- [**86**Star][3y] [Py] [yehia-mamdouh/xssya](https://github.com/yehia-mamdouh/xssya) XSSYA (Cross Site Scripting Scanner & Vulnerability Confirmation)
- [**86**Star][2y] [Py] [wasiher/chrome_remote_interface_python](https://github.com/wasiher/chrome_remote_interface_python) Chrome Debugging Protocol interface for Python
-- [**86**Star][4y] [Visual Basic] [vozzie/uacscript](https://github.com/vozzie/uacscript) Windows 7 UAC Bypass Vulnerability in the Windows Script Host
-- [**86**Star][2y] [vegabird/xvna](https://github.com/vegabird/xvna) 带漏洞的Node App
+- [**86**Star][4y] [Visual Basic .NET] [vozzie/uacscript](https://github.com/vozzie/uacscript) Windows 7 UAC Bypass Vulnerability in the Windows Script Host
+- [**86**Star][1y] [Py] [viralmaniar/smwyg-show-me-what-you-got](https://github.com/viralmaniar/smwyg-show-me-what-you-got) This tool allows you to perform OSINT and reconnaissance on an organisation or an individual. It allows one to search 1.4 Billion clear text credentials which was dumped as part of BreachCompilation leak. This database makes finding passwords faster and easier than ever before.
- [**86**Star][3y] [Py] [ucsb-seclab/baredroid](https://github.com/ucsb-seclab/baredroid) bare-metal analysis on Android devices
-- [**86**Star][24d] [Py] [tozny/rancher-lets-encrypt](https://github.com/tozny/rancher-lets-encrypt) Automatically create and manage certificates in Rancher using Let's Encrypt webroot verification via a minimal service
-- [**86**Star][12m] [Py] [thelsa/tp5-getshell](https://github.com/thelsa/tp5-getshell) thinkphp5 rce getshell
+- [**86**Star][2y] [Swift] [tendigi/xmrminer](https://github.com/tendigi/xmrminer) An embeddable Monero miner written in Swift.
- [**86**Star][5y] [Java] [sysdream/fino](https://github.com/sysdream/fino) Android small footprint inspection tool
- [**86**Star][4y] [Py] [sogeti-esec-lab/lkd](https://github.com/sogeti-esec-lab/lkd) Local Kernel Debugger (LKD) is a python wrapper around dbgengine.dll
+- [**86**Star][1y] [santosomar/who_and_what_to_follow](https://github.com/santosomar/who_and_what_to_follow) Who and what to follow in the world of cyber security
- [**86**Star][2y] [C++] [rmitton/goaldis](https://github.com/rmitton/goaldis) Jak & Daxter GOAL disassembler
-- [**86**Star][2y] [PowerShell] [re4lity/schtasks-backdoor](https://github.com/re4lity/schtasks-backdoor) Powershell 权限维持后门
- [**86**Star][1y] [HTML] [radareorg/r2con2018](https://github.com/radareorg/r2con2018)
- [**86**Star][11m] [paralax/awesome-internet-scanning](https://github.com/paralax/awesome-internet-scanning) A curated list of awesome Internet port and host scanners, plus related components and much more, with a focus on free and open source projects.
- [**86**Star][3y] [JS] [oalabs/frida-wshook](https://github.com/oalabs/frida-wshook) Script analysis tool based on Frida.re
- [**86**Star][8m] [nongiach/awesome-cryptocurrency-security](https://github.com/nongiach/awesome-cryptocurrency-security)
- [**86**Star][5m] [C++] [nlitsme/idbutil](https://github.com/nlitsme/idbutil) extracting information from IDA databases
-- [**86**Star][4y] [PowerShell] [netspi/powershell-modules](https://github.com/netspi/powershell-modules)
-- [**86**Star][1m] [nccgroup/onelogicalmyth_shell](https://github.com/nccgroup/onelogicalmyth_shell) A HTA shell to assist with breakout assessments.
-- [**86**Star][10m] [C] [mrdoulestar/whatminer](https://github.com/mrdoulestar/whatminer) 整理和收集遇见的各种恶意挖矿样本以供研究和学习(欢迎小伙伴们一起维护)
+- [**86**Star][2m] [nightowl131/aapg](https://github.com/nightowl131/aapg) [A]ndroid [A]pplication [P]entest [G]uide
+- [**86**Star][7m] [Py] [nccgroup/blesuite](https://github.com/nccgroup/blesuite) BLESuite is a Python package that provides an easier way to test Bluetooth Low Energy (BLE) device
+- [**86**Star][2m] [Ruby] [nbulaj/proxy_fetcher](https://github.com/nbulaj/proxy_fetcher)
- [**86**Star][5y] [Ruby] [moosedojo/praedasploit](https://github.com/moosedojo/praedasploit)
-- [**86**Star][4m] [C++] [misson20000/twili](https://github.com/misson20000/twili) Homebrew debug monitor for the Nintendo Switch.
-- [**86**Star][2y] [JS] [mirkoschubert/gdpr-cli](https://github.com/mirkoschubert/gdpr-cli) A command line tool for checking your website for GDPR compliance.
- [**86**Star][2y] [Ruby] [mavproxyuser/p0vsredherring](https://github.com/mavproxyuser/p0vsredherring) "Luckily, there are underground 0day exploits for FTPD for path traversal." #FakeNews #DotDotWontPwn
+- [**86**Star][3m] [Go] [mame82/unifyingvulnsdisclosurerepo](https://github.com/mame82/unifyingvulnsdisclosurerepo) Formerly private repository for discussion, knowledge- and code-sharing around new Unifying vulns, as announced on Twitter
- [**86**Star][1y] [C++] [malwaretech/appcontainersandbox](https://github.com/malwaretech/appcontainersandbox) An example sandbox using AppContainer (Windows 8+)
-- [**86**Star][8m] [Py] [laconicwolf/burp-extensions](https://github.com/laconicwolf/burp-extensions) A collection of scripts to extend Burp Suite
-- [**86**Star][3m] [Rust] [kzen-networks/curv](https://github.com/kzen-networks/curv) Rust language general purpose elliptic curve cryptography.
-- [**86**Star][2y] [realbearcat/fastjson-payload](https://github.com/RealBearcat/Fastjson-Payload) Fastjson 反序列化
+- [**86**Star][4y] [Py] [malwaremusings/unpacker](https://github.com/malwaremusings/unpacker) Automated malware unpacker
+- [**86**Star][3d] [Rust] [kzen-networks/curv](https://github.com/kzen-networks/curv) Rust language general purpose elliptic curve cryptography.
+- [**86**Star][4y] [PHP] [klaubert/waf-fle](https://github.com/klaubert/waf-fle) WAF-FLE, ModSecurity Console
+- [**86**Star][7m] [C++] [kimci86/bkcrack](https://github.com/kimci86/bkcrack) Crack legacy zip encryption with Biham and Kocher's known plaintext attack.
- [**86**Star][7y] [Py] [iamultra/ssrfsocks](https://github.com/iamultra/ssrfsocks) Creates a SOCK proxy server that transmits data over an SSRF vulnerability
- [**86**Star][4y] [Py] [huntergregal/scansploit](https://github.com/huntergregal/scansploit) Exploit using barcodes, QRcodes, earn13, datamatrix
+- [**86**Star][1y] [Java] [frpccluster/frpc-android](https://github.com/frpccluster/frpc-android) Android,安卓版frpc,一个快速反向代理,可帮助您将NAT或防火墙后面的本地服务器暴露给Internet。
- [**86**Star][3y] [C] [frangarcj/oclockvita](https://github.com/frangarcj/oclockvita) Simple Overclock Plugin for Taihen
-- [**86**Star][21d] [Py] [fr0gger/vthunting](https://github.com/fr0gger/vthunting) Vthunting is a tiny script used to generate report about Virus Total hunting and send it by email, slack or telegram.
+- [**86**Star][3d] [Py] [fr0gger/vthunting](https://github.com/fr0gger/vthunting) Vthunting is a tiny script used to generate report about Virus Total hunting and send it by email, slack or telegram.
- [**86**Star][4m] [Py] [findneo/rsa-attack](https://github.com/findneo/rsa-attack) RSA加密应用常见缺陷的原理与实践
-- [**86**Star][2m] [Py] [eth0izzle/cracke-dit](https://github.com/eth0izzle/cracke-dit) cracke-dit ("Cracked It") makes it easier to perform regular password audits against Active Directory environments.
-- [**86**Star][9m] [Java] [doyensec/burpdeveltraining](https://github.com/doyensec/burpdeveltraining) Material for the training "Developing Burp Suite Extensions – From Manual Testing to Security Automation"
-- [**86**Star][1y] [PowerShell] [deepzec/win-portfwd](https://github.com/deepzec/win-portfwd) Powershell script to setup windows port forwarding using native netsh client
-- [**86**Star][3m] [Py] [cisco-talos/ghidraaas](https://github.com/cisco-talos/ghidraaas) a simple web server that exposes Ghidra analysis through REST APIs
+- [**86**Star][11m] [Py] [duanhongyi/gmssl](https://github.com/duanhongyi/gmssl) a python crypto for sm2/sm3/sm4
+- [**86**Star][4y] [Py] [danmcinerney/fast-recon](https://github.com/danmcinerney/fast-recon) Does some google dorks against a domain
- [**86**Star][1y] [C] [cgcl-codes/vuldeepecker](https://github.com/cgcl-codes/vuldeepecker) A Deep Learning-Based System for Vulnerability Detection
- [**86**Star][5y] [Py] [carmaa/nacker](https://github.com/carmaa/nacker) Nacker is a tool to circumvent 802.1x Network Access Control (NAC) on a wired LAN. Nacker will help you locate any non-802.1x configurable hosts on your subnet, and spoof their MAC address so that you appear authenticated to the switch.
-- [**86**Star][10m] [Py] [calidog/axeman](https://github.com/calidog/axeman) Axeman is a utility to retrieve certificates from Certificate Transparency Lists (CTLs)
- [**86**Star][1y] [C++] [c3d/elfe](https://github.com/c3d/elfe) Extensible Language for Everyday
- [**86**Star][5m] [Shell] [butteff/ubuntu-telemetry-free-privacy-secure](https://github.com/butteff/ubuntu-telemetry-free-privacy-secure) This Bash script just removes a pre-installed Telemetry, a pre-installed software and libs with some potentional or high risk. Script removes them to make your experience better and more secure. Also, the script installs an additional software for the protection. You will find more advices in Readme file about "what you can do more".
- [**86**Star][2y] [Py] [bsmali4/sicklepoc](https://github.com/bsmali4/sicklepoc)
-- [**86**Star][1y] [Py] [andresriancho/jwt-fuzzer](https://github.com/andresriancho/jwt-fuzzer) JWT fuzzer
+- [**86**Star][3y] [Py] [azizaltuntas/network-analysis-tools](https://github.com/azizaltuntas/network-analysis-tools) Pcap (capture file) Analysis Toolkit(v.1)
- [**86**Star][3y] [aidanharris/free-security-ebooks-from-packtpub](https://github.com/aidanharris/free-security-ebooks-from-packtpub) Collection of free Security eBooks from Packt Publishing [Regularly Updated]
- [**86**Star][3y] [advanced-threat-research/efi-whitelist](https://github.com/advanced-threat-research/efi-whitelist) information about known EFI executable binaries extracted from (U)EFI firmware update images gathered from platform vendors' web-sites.
- [**86**Star][7m] [Shell] [1n3/prism-ap](https://github.com/1n3/prism-ap) An automated Wireless RogueAP MITM attack framework.
-- [**85**Star][4m] [TypeScript] [redpointgames/pkgsign](https://github.com/redpointgames/pkgsign) A CLI tool for signing and verifying npm and yarn packages.
-- [**85**Star][2m] [Py] [demantz/frizzer](https://github.com/demantz/frizzer) Frida-based general purpose fuzzer
-- [**85**Star][12d] [HCL] [nccgroup/sadcloud](https://github.com/nccgroup/sadcloud) A tool for standing up (and tearing down!) purposefully insecure cloud infrastructure
+- [**85**Star][9m] [Visual Basic .NET] [catboy96/automator](https://github.com/catboy96/automator) ⌨ Digispark™ Rubber Ducky code editor for Windows.
+- [**85**Star][28d] [PS] [adamdriscoll/snek](https://github.com/adamdriscoll/snek) PowerShell wrapper around Python for .NET to invoke Python from PowerShell
+- [**85**Star][5m] [TS] [redpointgames/pkgsign](https://github.com/redpointgames/pkgsign) A CLI tool for signing and verifying npm and yarn packages.
+- [**85**Star][3d] [C++] [tihmstar/ra1nsn0w](https://github.com/tihmstar/ra1nsn0w) A tethered booter for 64bit iOS devices vulnerable to checkm8
+- [**85**Star][3y] [C++] [outflanknl/netshhelperbeacon](https://github.com/outflanknl/NetshHelperBeacon) Example DLL to load from Windows NetShell
- [**85**Star][10m] [C++] [fsecurelabs/viridianfuzzer](https://github.com/FSecureLABS/ViridianFuzzer) Kernel driver to fuzz Hyper-V hypercalls
-- [**85**Star][9m] [Py] [hackthissite/ctf-writeups](https://github.com/HackThisSite/CTF-Writeups) Things we learned from Capture The Flag hacking competitions we participated in.
- [**85**Star][1y] [Py] [lorentzenman/youzer](https://github.com/lorentzenman/youzer) Fake User Generator for Active Directory Environments
-- [**85**Star][1y] [JS] [ettic-team/dnsbin](https://github.com/ettic-team/dnsbin) The request.bin of DNS request
- [**85**Star][10m] [ruby] [pikatrack/pikatrack](https://gitlab.com/pikatrack/pikatrack)
+- [**85**Star][4m] [C] [zouxianyu/kernelhiddenexecute](https://github.com/zouxianyu/kernelhiddenexecute) Execute kernel code with page separation
- [**85**Star][1y] [Py] [zmap/ztag](https://github.com/zmap/ztag) Tagging and annotation framework for scan data
-- [**85**Star][3y] [Objective-C] [zhengmin1989/macos-10.12.2-exp-via-mach_voucher](https://github.com/zhengmin1989/macos-10.12.2-exp-via-mach_voucher) Local Privilege Escalation for macOS 10.12.2 via mach_voucher and XNU port Feng Shui
+- [**85**Star][3y] [ObjC] [zhengmin1989/macos-10.12.2-exp-via-mach_voucher](https://github.com/zhengmin1989/macos-10.12.2-exp-via-mach_voucher) Local Privilege Escalation for macOS 10.12.2 via mach_voucher and XNU port Feng Shui
- [**85**Star][2y] [Py] [zhangzhenfeng/anyscan](https://github.com/zhangzhenfeng/anyscan) AnyScan
-- [**85**Star][4y] [Java] [zerothoughts/spring-jndi](https://github.com/zerothoughts/spring-jndi) Proof of concept exploit, showing how to do bytecode injection through untrusted deserialization with Spring Framework 4.2.4
-- [**85**Star][2y] [C] [zerosum0x0/threadcontinue](https://github.com/zerosum0x0/threadcontinue) Reflective DLL injection using SetThreadContext() and NtContinue()
+- [**85**Star][3m] [Py] [yeggor/uefi_retool](https://github.com/yeggor/uefi_retool) finding proprietary protocols in UEFI firmware and UEFI modules analysing
- [**85**Star][1y] [Py] [wez3/msfenum](https://github.com/wez3/msfenum) 在特定目标集上自动运行多个 Metasploit auxiliary 模块
- [**85**Star][2y] [Py] [wanjunzh/ssct](https://github.com/wanjunzh/ssct) ssct:shadowsocks 包装器,用于持续绕过防火墙
-- [**85**Star][1y] [Py] [viralmaniar/smwyg-show-me-what-you-got](https://github.com/viralmaniar/smwyg-show-me-what-you-got) This tool allows you to perform OSINT and reconnaissance on an organisation or an individual. It allows one to search 1.4 Billion clear text credentials which was dumped as part of BreachCompilation leak. This database makes finding passwords faster and easier than ever before.
+- [**85**Star][2d] [C++] [wallix/redemption](https://github.com/wallix/redemption) A GPL RDP proxy
- [**85**Star][2y] [C] [vim2meta/keylogger](https://github.com/vim2meta/keylogger) A powerful C keylogger for Windows.
- [**85**Star][3y] [Py] [vector35/binaryninja-plugins](https://github.com/vector35/binaryninja-plugins) Repository to track Binary Ninja Plugins, Themes, and other related tools
- [**85**Star][7y] [Java] [thomascannon/android-sms-spoof](https://github.com/thomascannon/android-sms-spoof) PoC app which takes advantage of Android's SmsReceiverService being exported to fake an incoming SMS with no permissions.
+- [**85**Star][12m] [Py] [thelsa/tp5-getshell](https://github.com/thelsa/tp5-getshell) thinkphp5 rce getshell
+- [**85**Star][2y] [ObjC] [siguza/phoenixnonce](https://github.com/siguza/phoenixnonce) 64-bit nonce setter for iOS 9.3.4-9.3.5
- [**85**Star][7m] [C] [siguza/iokit-utils](https://github.com/siguza/iokit-utils) Dev tools for probing IOKit
- [**85**Star][3y] [C] [sensepost/ms16-098](https://github.com/sensepost/ms16-098) Windows 8.1 x64 Exploit for MS16-098 RNGOBJ_Integer_Overflow
- [**85**Star][4y] [HTML] [secmob/cansecwest2016](https://github.com/secmob/cansecwest2016) slide and full exploit
-- [**85**Star][1y] [santosomar/who_and_what_to_follow](https://github.com/santosomar/who_and_what_to_follow) Who and what to follow in the world of cyber security
+- [**85**Star][8m] [JS] [scravy/node-macaddress](https://github.com/scravy/node-macaddress) Get the MAC addresses (hardware addresses) of the hosts network interfaces.
- [**85**Star][2m] [Ruby] [rtfpessoa/dependency_spy](https://github.com/rtfpessoa/dependency_spy) Find known vulnerabilities in your dependencies
- [**85**Star][1y] [Shell] [rpranshu/autopwn](https://github.com/rpranshu/autopwn) A simple bash based metasploit automation tool!
-- [**85**Star][2m] [Py] [rocky/python2-trepan](https://github.com/rocky/python2-trepan) A gdb-like Python 2.x Debugger in the Trepan family
+- [**85**Star][2m] [C++] [romainthomas/pyjadx](https://github.com/romainthomas/pyjadx) Jadx Python Binding
+- [**85**Star][2d] [Py] [rocky/python2-trepan](https://github.com/rocky/python2-trepan) A gdb-like Python 2.x Debugger in the Trepan family
- [**85**Star][6y] [Py] [rjw57/hdcp-genkey](https://github.com/rjw57/hdcp-genkey) Generate HDCP source and sink keys from the leaked master key
- [**85**Star][3y] [risksense-ops/ms17-010](https://github.com/risksense-ops/ms17-010) MS17-010 Research
+- [**85**Star][5y] [AGS Script] [rapid7/embedded-tools](https://github.com/rapid7/embedded-tools)
- [**85**Star][1y] [Py] [pyn3rd/cve-2018-3191](https://github.com/pyn3rd/cve-2018-3191) CVE-2018-3191-PoC
-- [**85**Star][11m] [Objective-C] [pwnsdx/unsecure](https://github.com/pwnsdx/unsecure) (Released in December 2016) Bypass security alerts of Little Flocker / Little Snitch / HandsOff! / BlockBlock (same concept can be applied to other security tools) on macOS.
+- [**85**Star][11m] [ObjC] [pwnsdx/unsecure](https://github.com/pwnsdx/unsecure) (Released in December 2016) Bypass security alerts of Little Flocker / Little Snitch / HandsOff! / BlockBlock (same concept can be applied to other security tools) on macOS.
- [**85**Star][8y] [poerschke/uniscan](https://github.com/poerschke/uniscan) Uniscan web vulnerability scanner
- [**85**Star][5m] [Py] [pnfsoftware/jeb2-samplecode](https://github.com/pnfsoftware/jeb2-samplecode) Sample extensions for JEB Decompiler
- [**85**Star][2y] [C] [petermosmans/openssl](https://github.com/petermosmans/openssl) 'Extra featured' OpenSSL with ChaCha20 and Poly1305 support
+- [**85**Star][9m] [C#] [padovah4ck/psbypassclm](https://github.com/padovah4ck/psbypassclm) Bypass for PowerShell Constrained Language Mode
- [**85**Star][2y] [Py] [oreilly-japan/black-hat-python-jp-support](https://github.com/oreilly-japan/black-hat-python-jp-support) 『サイバーセキュリティプログラミング』のサポートページ
-- [**85**Star][7m] [Py] [nccgroup/blesuite](https://github.com/nccgroup/blesuite) BLESuite is a Python package that provides an easier way to test Bluetooth Low Energy (BLE) device
+- [**85**Star][4y] [C++] [ohjeongwook/flashhacker](https://github.com/ohjeongwook/flashhacker) Flash Instrumentation Tool
+- [**85**Star][5y] [C] [nyx0/rovnix](https://github.com/nyx0/rovnix) Rovnix Bootkit
- [**85**Star][12m] [Py] [naivenom/exploiting](https://github.com/naivenom/exploiting) Exploiting challenges in Linux and Windows
+- [**85**Star][2m] [JS] [mlgualtieri/css-exfil-protection](https://github.com/mlgualtieri/css-exfil-protection) Official repository for the CSS Exfil Protection browser extensions.
+- [**85**Star][2d] [Shell] [mitchellkrogza/phishing.database](https://github.com/mitchellkrogza/phishing.database) Phishing Domains, urls websites and threats database. We use the PyFunceble testing tool to validate the status of all known Phishing domains and provide stats to reveal how many unique domains used for Phishing are still active.
- [**85**Star][2y] [C] [maximehip/safari-ios10.3.2-macos-10.12.4-exploit-bugs](https://github.com/maximehip/safari-ios10.3.2-macos-10.12.4-exploit-bugs)
- [**85**Star][4y] [Java] [mauro-g/snuck](https://github.com/mauro-g/snuck) Automatic XSS filter bypass
-- [**85**Star][1y] [C] [marfjeh/coinhive-block](https://github.com/marfjeh/coinhive-block) To block the malware domains of coin-hive systemwide.
- [**85**Star][5m] [Java] [magiczer0/fastjson-rce-exploit](https://github.com/magiczer0/fastjson-rce-exploit) exploit for fastjson remote code execution vulnerability
- [**85**Star][4y] [Py] [liuhui0613/thewind](https://github.com/liuhui0613/thewind) a MITM attack tool
- [**85**Star][4y] [C] [laginimaineb/cve-2015-6639](https://github.com/laginimaineb/cve-2015-6639) QSEE Privilege Escalation Exploit using PRDiag* commands (CVE-2015-6639)
-- [**85**Star][7m] [C++] [kimci86/bkcrack](https://github.com/kimci86/bkcrack) Crack legacy zip encryption with Biham and Kocher's known plaintext attack.
-- [**85**Star][6m] [PowerShell] [kieranwalsh/powershell](https://github.com/kieranwalsh/powershell) My PowerShell stuff
+- [**85**Star][2d] [ObjC] [lacertosusrepo/open-source-tweaks](https://github.com/lacertosusrepo/open-source-tweaks) Tweaks I've left open, maybe someone can learn from/correct them. Either on my repo or Packix.
+- [**85**Star][6m] [PS] [kieranwalsh/powershell](https://github.com/kieranwalsh/powershell) My PowerShell stuff
- [**85**Star][1m] [C++] [jnastarot/furikuri](https://github.com/jnastarot/furikuri) (In dev)furikuri is framework for code protection
- [**85**Star][1y] [Shell] [jakewharton/dalvik-dx](https://github.com/jakewharton/dalvik-dx) A standalone packaging of AOSP's platform/dalvik dx library.
-- [**85**Star][8m] [C++] [huanghongkai/game-helper](https://github.com/huanghongkai/game-helper) 介绍入门级游戏辅助的原理,内附有2018年2月dnf辅助C++源码
+- [**85**Star][6m] [Py] [initstring/evil-ssdp](https://github.com/initstring/evil-ssdp) Spoof SSDP replies and create fake UPnP devices to phish for credentials and NetNTLM challenge/response.
- [**85**Star][4y] [C] [gitdurandal/dbd](https://github.com/gitdurandal/dbd) Durandal's Backdoor
+- [**85**Star][5d] [C++] [galoisinc/macaw](https://github.com/galoisinc/macaw) Open source binary analysis tools.
- [**85**Star][3y] [exp-sky/hitcon-2016-windows-10-x64-edge-0day-and-exploit](https://github.com/exp-sky/hitcon-2016-windows-10-x64-edge-0day-and-exploit) HitCon 2016 Windows 10 x64 edge 0day and exploit
+- [**85**Star][6m] [Go] [equim-chan/h2s](https://github.com/equim-chan/h2s)
- [**85**Star][4y] [C] [electrojustin/triad-decompiler](https://github.com/electrojustin/triad-decompiler) TRiad Is A Decompiler. Triad is a tiny, free and open source, Capstone based x86 decompiler for ELF binaries.
- [**85**Star][2y] [diablohorn/yara4pentesters](https://github.com/diablohorn/yara4pentesters) rules to identify files containing juicy information like usernames, passwords etc
+- [**85**Star][4m] [C++] [designer1337/aristois-legit](https://github.com/designer1337/aristois-legit) Full project files for aristois, Counter-Strike: Global Offensive cheat.
- [**85**Star][7m] [Py] [dcsync/pycobalt](https://github.com/dcsync/pycobalt) Cobalt Strike API, Python版本
- [**85**Star][1y] [Java] [cunninglogic/dumlracer](https://github.com/cunninglogic/dumlracer) Root Exploit for DJI Drones and Controllers (up to and including v01.04.0200)
- [**85**Star][2y] [C] [countercept/doublepulsar-usermode-injector](https://github.com/countercept/doublepulsar-usermode-injector) doublepulsar-usermode-injector:使用 DOUBLEPULSAR payload 用户模式的 Shellcode 向其他进程注入任意 DLL
-- [**85**Star][7d] [Zeek] [bro/bro](https://github.com/bro/bro) Mirror of
+- [**85**Star][1y] [cneill/appsec-resources](https://github.com/cneill/appsec-resources) Resources for developers and security engineers to learn the ropes of application security
+- [**85**Star][2y] [Py] [cheeky4n6monkey/4n6-scripts](https://github.com/cheeky4n6monkey/4n6-scripts) Forensic Scripts
+- [**85**Star][2d] [Zeek] [bro/bro](https://github.com/bro/bro) Mirror of
- [**85**Star][4y] [Py] [blackye/bkscanner](https://github.com/blackye/bkscanner) BkScanner 分布式、插件化web漏洞扫描器
- [**85**Star][7y] [C] [bagder/spindly](https://github.com/bagder/spindly) a portable C library for SPDY transport (DEAD project!)
-- [**85**Star][3y] [Py] [azizaltuntas/network-analysis-tools](https://github.com/azizaltuntas/network-analysis-tools) Pcap (capture file) Analysis Toolkit(v.1)
+- [**85**Star][12d] [C] [awakened1712/cve-2019-11932](https://github.com/awakened1712/cve-2019-11932) Simple POC for exploiting WhatsApp double-free bug in DDGifSlurp in decoding.c in libpl_droidsonroids_gif
+- [**85**Star][6y] [C] [armenb/sharktools](https://github.com/armenb/sharktools) Tools for programmatic parsing of packet captures using Wireshark functionality
+- [**85**Star][27d] [JS] [aqiongbei/buy_pig_plan](https://github.com/aqiongbei/buy_pig_plan) 电话攻击(电话轰炸、可代替短信轰炸)、留言攻击工具 | 随缘维护,佛系更新
+- [**85**Star][2m] [Py] [angr/phuzzer](https://github.com/angr/phuzzer) The new phuzzing framework!
- [**85**Star][2y] [Ruby] [anbai-inc/attackfilter](https://github.com/anbai-inc/attackfilter) Logstash 日志安全攻击分析插件
- [**85**Star][7m] [Py] [aaronst/macholibre](https://github.com/aaronst/macholibre) Mach-O & Universal Binary Parser
- [**85**Star][3y] [Py] [5up3rc/nagascan](https://github.com/5up3rc/nagascan) NagaScan is a distributed passive scanner for Web application.
-- [**84**Star][10d] [Go] [inlets/inletsctl](https://github.com/inlets/inletsctl) Fast HTTP (L7) and TCP (L4) tunnels written in Go
+- [**84**Star][1m] [ObjC] [gssdromen/v2rayc](https://github.com/gssdromen/v2rayc) a GUI for v2ray on Mac
- [**84**Star][3y] [C#] [0xfireball/modphuserex](https://github.com/0xfireball/modphuserex) A .NET protector supporting .NET Core forked from the discontinued ConfuserEx
+- [**84**Star][3d] [stonedreamforest/mirage](https://github.com/stonedreamforest/mirage) kernel-mode Anti-Anti-Debug plugin. based on intel vt-x && ept technology
- [**84**Star][9m] [Py] [npist/v2rayms](https://github.com/npist/v2rayms) v2ray whmcs 多用户后端
-- [**84**Star][3y] [C++] [outflanknl/netshhelperbeacon](https://github.com/outflanknl/NetshHelperBeacon) Example DLL to load from Windows NetShell
+- [**84**Star][1y] [Py] [justsoos/ss-ssr-v2ray-gadget](https://github.com/justsoos/ss-ssr-v2ray-gadget) merge, deduplicate, backup, convert and online benchmark tools set for shadowsocks/shadowsocksR, v2ray. by python3
- [**84**Star][7m] [Py] [aoncyberlabs/ssh-weak-dh](https://github.com/AonCyberLabs/SSH-Weak-DH)
-- [**84**Star][1m] [Shell] [devploit/put2win](https://github.com/devploit/put2win) Script to automate PUT HTTP method exploitation to get shell
+- [**84**Star][2m] [Shell] [devploit/put2win](https://github.com/devploit/put2win) Script to automate PUT HTTP method exploitation to get shell
- [**84**Star][3y] [C++] [zcash-hackworks/pay-to-sudoku](https://github.com/zcash-hackworks/pay-to-sudoku) Pay for the solution to a sudoku puzzle with a zero-knowledge contingent payment
- [**84**Star][1y] [security-cheatsheet/metasploit-cheat-sheet](https://github.com/security-cheatsheet/metasploit-cheat-sheet) Metasploit Cheat Sheet
- [**84**Star][4y] [Ruby] [ztgrace/pwn_lab](https://github.com/ztgrace/pwn_lab) pwn_lab:创建安全训练环境的Vagrant 脚本和 boxes
-- [**84**Star][4m] [C] [zouxianyu/kernelhiddenexecute](https://github.com/zouxianyu/kernelhiddenexecute) Execute kernel code with page separation
-- [**84**Star][4y] [Py] [youmengxuefei/web_vul_scan](https://github.com/youmengxuefei/web_vul_scan) 基于爬虫的web漏洞扫描器
-- [**84**Star][3m] [Py] [yeggor/uefi_retool](https://github.com/yeggor/uefi_retool) finding proprietary protocols in UEFI firmware and UEFI modules analysing
+- [**84**Star][3d] [Py] [zricethezav/h1domains](https://github.com/zricethezav/h1domains) HackerOne "in scope" domains
+- [**84**Star][21d] [Py] [ziconius/fudgec2](https://github.com/ziconius/fudgec2) FudgeC2 - a command and control framework designed for team collaboration and post-exploitation activities.
+- [**84**Star][2y] [Java] [yandex/burp-molly-pack](https://github.com/yandex/burp-molly-pack) Security checks pack for Burp Suite
- [**84**Star][4y] [JS] [xuanhuan/ss-panel](https://github.com/xuanhuan/ss-panel) !
-- [**84**Star][29d] [C] [wonderkun/ctfenv](https://github.com/wonderkun/ctfenv) 为应对CTF比赛而搭建的各种环境
-- [**84**Star][15d] [C] [unicornteam/hackcube-special](https://github.com/unicornteam/hackcube-special)
+- [**84**Star][1m] [C] [wonderkun/ctfenv](https://github.com/wonderkun/ctfenv) 为应对CTF比赛而搭建的各种环境
- [**84**Star][1y] [JS] [tingge/web-analytics](https://github.com/tingge/web-analytics) 监测分析、异常监测、广告验证、访客唯一标识
+- [**84**Star][3m] [Py] [therook/nsshell](https://github.com/therook/nsshell) A DNS connectback shell executed by strings in payloads.txt
- [**84**Star][3y] [C] [tedsluis/dump1090](https://github.com/tedsluis/dump1090) Dump1090 is a simple Mode S decoder for RTLSDR devices
- [**84**Star][3y] [Py] [smxlabs/gibbersense](https://github.com/smxlabs/gibbersense) gibbersense:尝试理解乱七八糟的东西(从乱七八糟的东西里面提取出有意义的信息)
-- [**84**Star][2y] [Objective-C] [siguza/phoenixnonce](https://github.com/siguza/phoenixnonce) 64-bit nonce setter for iOS 9.3.4-9.3.5
- [**84**Star][5y] [shodan-labs/iotdb](https://github.com/shodan-labs/iotdb) Nmap scans of Internet of Things devices
- [**84**Star][2y] [Py] [sensepost/birp](https://github.com/sensepost/birp) Big Iron Recon & Pwnage
-- [**84**Star][4m] [Py] [samsung/cotopaxi](https://github.com/samsung/cotopaxi) Set of tools for security testing of Internet of Things devices using specific network IoT protocols
-- [**84**Star][11m] [Batchfile] [sagishahar/lpeworkshop](https://github.com/sagishahar/lpeworkshop) Windows/Linux本地提权工作室
-- [**84**Star][2m] [C++] [romainthomas/pyjadx](https://github.com/romainthomas/pyjadx) Jadx Python Binding
-- [**84**Star][5y] [AGS Script] [rapid7/embedded-tools](https://github.com/rapid7/embedded-tools)
+- [**84**Star][3y] [Shell] [scotthelme/lets-encrypt-smart-renew](https://github.com/scotthelme/lets-encrypt-smart-renew) Check the remaining validity period of a certificate before renewing.
+- [**84**Star][4m] [Py] [safebreach-labs/bitsinject](https://github.com/safebreach-labs/bitsinject) A one-click tool to inject jobs into the BITS queue (Background Intelligent Transfer Service), allowing arbitrary program execution as the NT AUTHORITY/SYSTEM account
+- [**84**Star][5y] [PHP] [rickgray/bypass-php-gd-process-to-rce](https://github.com/rickgray/bypass-php-gd-process-to-rce) Reference:
+- [**84**Star][3m] [Py] [r00ts3c/ddos-rootsec](https://github.com/r00ts3c/ddos-rootsec) DDOS Archive by RootSec (Scanners, BotNets (Mirai and QBot Premium & Normal and more), Exploits, Methods, Sniffers)
- [**84**Star][2y] [C] [pannzh/hidemyass](https://github.com/pannzh/hidemyass) A post-exploit tool that carefully clean *NIX access logs
-- [**84**Star][9m] [C#] [padovah4ck/psbypassclm](https://github.com/padovah4ck/psbypassclm) Bypass for PowerShell Constrained Language Mode
-- [**84**Star][4y] [C++] [ohjeongwook/flashhacker](https://github.com/ohjeongwook/flashhacker) Flash Instrumentation Tool
-- [**84**Star][5y] [C] [nyx0/rovnix](https://github.com/nyx0/rovnix) Rovnix Bootkit
-- [**84**Star][28d] [Py] [nullarray/archivist](https://github.com/nullarray/archivist) A ctypes powered python keylogger.
-- [**84**Star][2m] [nightowl131/aapg](https://github.com/nightowl131/aapg) [A]ndroid [A]pplication [P]entest [G]uide
-- [**84**Star][2m] [JS] [mlgualtieri/css-exfil-protection](https://github.com/mlgualtieri/css-exfil-protection) Official repository for the CSS Exfil Protection browser extensions.
-- [**84**Star][7d] [Shell] [mitchellkrogza/phishing.database](https://github.com/mitchellkrogza/phishing.database) Phishing Domains, urls websites and threats database. We use the PyFunceble testing tool to validate the status of all known Phishing domains and provide stats to reveal how many unique domains used for Phishing are still active.
+- [**84**Star][4y] [Py] [omererdem/honeything](https://github.com/omererdem/honeything) TR-069 Honeypot
+- [**84**Star][30d] [Py] [nullarray/archivist](https://github.com/nullarray/archivist) A ctypes powered python keylogger.
- [**84**Star][4y] [Py] [mgoffin/malwarecookbook](https://github.com/mgoffin/malwarecookbook) Malware Analyst's Cookbook stuffs
-- [**84**Star][11m] [JS] [mandatoryprogrammer/tarnish](https://github.com/mandatoryprogrammer/tarnish) A Chrome extension static analysis tool to help aide in security reviews.
-- [**84**Star][4y] [PHP] [klaubert/waf-fle](https://github.com/klaubert/waf-fle) WAF-FLE, ModSecurity Console
+- [**84**Star][1y] [C] [marfjeh/coinhive-block](https://github.com/marfjeh/coinhive-block) To block the malware domains of coin-hive systemwide.
+- [**84**Star][4m] [Py] [kapytein/jsonp](https://github.com/kapytein/jsonp) jsonp is a Burp Extension which attempts to reveal JSONP functionality behind JSON endpoints. This could help reveal cross-site script inclusion vulnerabilities or aid in bypassing content security policies.
- [**84**Star][5m] [JS] [k4m4/dcipher](https://github.com/k4m4/dcipher) Decipher hashes using online rainbow & lookup table attack services.
- [**84**Star][1y] [Py] [jiangsir404/s7scan](https://github.com/jiangsir404/s7scan) a pentest scanner / 一个漏洞综合利用工具轮子,大佬请忽略
-- [**84**Star][6m] [Py] [initstring/evil-ssdp](https://github.com/initstring/evil-ssdp) Spoof SSDP replies and create fake UPnP devices to phish for credentials and NetNTLM challenge/response.
+- [**84**Star][2y] [Py] [hi-wenr0/mlcheckwebshell](https://github.com/hi-wenr0/mlcheckwebshell)
- [**84**Star][3y] [C++] [hasherezade/persistence_demos](https://github.com/hasherezade/persistence_demos) Demos of various (also non standard) persistence methods used by malware
-- [**84**Star][9d] [Py] [haotianteng/chiron](https://github.com/haotianteng/chiron) A basecaller for Oxford Nanopore Technologies' sequencers
+- [**84**Star][11d] [Py] [haotianteng/chiron](https://github.com/haotianteng/chiron) A basecaller for Oxford Nanopore Technologies' sequencers
- [**84**Star][1y] [Dockerfile] [hackerhouse-opensource/cve-2018-10933](https://github.com/hackerhouse-opensource/cve-2018-10933) cve-2018-10933 libssh authentication bypass
- [**84**Star][5m] [JS] [glamrock/cupcake](https://github.com/glamrock/cupcake) Create new pathways into Tor
+- [**84**Star][2m] [Py] [fleetcaptain/turbolist3r](https://github.com/fleetcaptain/turbolist3r) Subdomain enumeration tool with analysis features for discovered domains
- [**84**Star][JS] [feeicn/papers](https://github.com/feeicn/papers) 个人博客,在企业安全、软件研发和个人思考的一些文章
- [**84**Star][4y] [Swift] [deniskr/keychainswiftapi](https://github.com/deniskr/keychainswiftapi) This Keychain Swift API library is a wrapper of iOS C Keychain Framework. It allows easily and securely storing sensitive data in secure keychain store.
- [**84**Star][7y] [Py] [dc414/upnp-exploiter](https://github.com/dc414/upnp-exploiter) A Upnp exploitation tool.
-- [**84**Star][4y] [Py] [danmcinerney/fast-recon](https://github.com/danmcinerney/fast-recon) Does some google dorks against a domain
+- [**84**Star][2y] [Py] [coco413/discoversubdomain](https://github.com/coco413/discoversubdomain) 前渗透信息探测工具集-子域名
- [**84**Star][4m] [C#] [cobbr/elite](https://github.com/cobbr/elite) Elite is the client-side component of the Covenant project. Covenant is a .NET command and control framework that aims to highlight the attack surface of .NET, make the use of offensive .NET tradecraft easier, and serve as a collaborative command and control platform for red teamers.
- [**84**Star][4y] [Go] [cloudflare/jgc-talks](https://github.com/cloudflare/jgc-talks) Code samples and data used in talk preparation by John Graham-Cumming
- [**84**Star][2y] [CSS] [cleverbao/webrange](https://github.com/cleverbao/webrange) 一个Web版的docker管理程序,可以用来运行各种docker漏洞环境和CTF环境。
-- [**84**Star][10d] [C] [awakened1712/cve-2019-11932](https://github.com/awakened1712/cve-2019-11932) Simple POC for exploiting WhatsApp double-free bug in DDGifSlurp in decoding.c in libpl_droidsonroids_gif
+- [**84**Star][3d] [claucece/useful-crypto-resources](https://github.com/claucece/useful-crypto-resources) A place for useful crypto-related resources plus some of my fav stuff
+- [**84**Star][2y] [PHP] [bug7sec/ransomware](https://github.com/bug7sec/ransomware) Bug7sec Team - ransomware open source (web)
+- [**84**Star][11m] [C++] [basketwill/sysmon_reverse](https://github.com/basketwill/sysmon_reverse)
+- [**84**Star][12m] [C++] [arashpartow/proxy](https://github.com/arashpartow/proxy) C++ TCP Proxy Server
+- [**84**Star][2y] [Py] [anonion0/nsec3map](https://github.com/anonion0/nsec3map) a tool to enumerate the resource records of a DNS zone using its DNSSEC NSEC or NSEC3 chain
- [**84**Star][5y] [Shell] [anexia-it/winshock-test](https://github.com/anexia-it/winshock-test) Bash script that tests if a system is Winshock (MS14-066) vulnerable
+- [**84**Star][10m] [C] [aasthayadav/compsecattacklabs](https://github.com/aasthayadav/compsecattacklabs) Contains Attack labs
- [**84**Star][11m] [Py] [422926799/python](https://github.com/422926799/python) python黑客与一些脚本
- [**84**Star][3y] [Py] [3xp10it/mytoolkit](https://github.com/3xp10it/mytoolkit) 【Not maintained】sqlmap对所有目标及其所有旁站批量自动化sqli
- [**84**Star][2y] [Go] [0x09al/browser-c2](https://github.com/0x09al/browser-c2) Post Exploitation agent which uses a browser to do C2 operations.
+- [**83**Star][3y] [Jupyter Notebook] [supercowpowers/workbench](https://github.com/supercowpowers/workbench) Workbench: A scalable python framework for security research and development teams.
- [**83**Star][3m] [C++] [lifting-bits/microx](https://github.com/lifting-bits/microx) Safely execute an arbitrary x86 instruction
- [**83**Star][1y] [JS] [seclab-ucr/tcp_exploit](https://github.com/seclab-ucr/tcp_exploit) Off-Path TCP Exploit: How Wireless Routers Can Jeopardize Your Secret
-- [**83**Star][26d] [PowerShell] [adamdriscoll/snek](https://github.com/adamdriscoll/snek) PowerShell wrapper around Python for .NET to invoke Python from PowerShell
-- [**83**Star][29d] [Go] [ne1llee/v2ray2clash](https://github.com/ne1llee/v2ray2clash) V2ray、SSR subscribe convert to Clash、QuantumultX
-- [**83**Star][1y] [Py] [justsoos/ss-ssr-v2ray-gadget](https://github.com/justsoos/ss-ssr-v2ray-gadget) merge, deduplicate, backup, convert and online benchmark tools set for shadowsocks/shadowsocksR, v2ray. by python3
-- [**83**Star][29d] [C++] [tihmstar/ra1nsn0w](https://github.com/tihmstar/ra1nsn0w) A tethered booter for 64bit iOS devices vulnerable to checkm8
+- [**83**Star][1y] [Py] [danmcinerney/search-google](https://github.com/danmcinerney/search-google) Scrape google search results
+- [**83**Star][24d] [PS] [kmkz/powershell](https://github.com/kmkz/powershell) Some .ps1 scripts for pentesting
+- [**83**Star][19d] [payloadbox/sql-injection-payload-list](https://github.com/payloadbox/sql-injection-payload-list)
+- [**83**Star][22d] [six2dez/oscp-human-guide](https://github.com/six2dez/oscp-human-guide) My own OSCP guide
- [**83**Star][6m] [Shell] [zerobyte-id-bak/bashter](https://github.com/zerobyte-id-bak/Bashter) Web Crawler, Scanner, and Analyzer Framework (Shell-Script based)
-- [**83**Star][3y] [C#] [saneki-discontinued/flatui](https://github.com/saneki-discontinued/FlatUI) Flat UI theme for .NET applications
+- [**83**Star][1y] [Shell] [cyb0r9/androspy](https://github.com/Cyb0r9/Androspy) Androspy framework is a Backdoor Crypter & Creator with Automatic IP Poisener
- [**83**Star][4y] [Py] [n0tr00t/wvs_patcher](https://github.com/n0tr00t/WVS_Patcher) Script to run wvs in queue, and send mails to you on ending.
-- [**83**Star][17d] [Py] [openpreserve/fido](https://github.com/openpreserve/fido) Format Identification for Digital Objects (FIDO) is a Python command-line tool to identify the file formats of digital objects. It is designed for simple integration into automated work-flows.
+- [**83**Star][19d] [Py] [openpreserve/fido](https://github.com/openpreserve/fido) Format Identification for Digital Objects (FIDO) is a Python command-line tool to identify the file formats of digital objects. It is designed for simple integration into automated work-flows.
- [**83**Star][2y] [Py] [am0nsec/exploit](https://github.com/am0nsec/exploit) Collection of different exploits
-- [**83**Star][2m] [Py] [zricethezav/h1domains](https://github.com/zricethezav/h1domains) HackerOne "in scope" domains
-- [**83**Star][19d] [Py] [ziconius/fudgec2](https://github.com/ziconius/fudgec2) FudgeC2 - a command and control framework designed for team collaboration and post-exploitation activities.
-- [**83**Star][2y] [Java] [yandex/burp-molly-pack](https://github.com/yandex/burp-molly-pack) Security checks pack for Burp Suite
-- [**83**Star][5y] [Py] [xypiie/webshell](https://github.com/xypiie/webshell) WebShell is a web-based ssh shell.
- [**83**Star][2y] [C] [xobs/novena-linux](https://github.com/xobs/novena-linux) Linux kernel with Novena patches -- expect frequent rebases!
-- [**83**Star][1m] [C++] [vusec/vuzzer64](https://github.com/vusec/vuzzer64) This implements a 64-bit version of vusec/vuzzer fuzzing tool.
+- [**83**Star][9m] [Py] [xajkep/wordlists](https://github.com/xajkep/wordlists) Infosec Wordlists
+- [**83**Star][2m] [C++] [vusec/vuzzer64](https://github.com/vusec/vuzzer64) This implements a 64-bit version of vusec/vuzzer fuzzing tool.
- [**83**Star][1y] [JS] [vspandan/ifuzzer](https://github.com/vspandan/ifuzzer)
- [**83**Star][8m] [Py] [viralmaniar/peekaboo](https://github.com/viralmaniar/peekaboo) PeekABoo tool can be used during internal penetration testing when a user needs to enable Remote Desktop on the targeted machine. It uses PowerShell remoting to perform this task. Note: Remote desktop is disabled by default on all Windows operating systems.
+- [**83**Star][3y] [JS] [unrealakama/nightshade](https://github.com/unrealakama/nightshade) A simple capture the flag framework.
+- [**83**Star][11m] [Py] [tlkh/prowler](https://github.com/tlkh/prowler) Distributed Network Vulnerability Scanner
- [**83**Star][2y] [Py] [sogeti-esec-lab/rpcforge](https://github.com/sogeti-esec-lab/rpcforge) Windows RPC Python fuzzer
-- [**83**Star][2y] [Go] [snail007/autostart](https://github.com/snail007/autostart) autostart tools to set your application auto startup after desktop login,only for desktop version of linux , windows , mac.
-- [**83**Star][8m] [JS] [scravy/node-macaddress](https://github.com/scravy/node-macaddress) Get the MAC addresses (hardware addresses) of the hosts network interfaces.
-- [**83**Star][3y] [Shell] [scotthelme/lets-encrypt-smart-renew](https://github.com/scotthelme/lets-encrypt-smart-renew) Check the remaining validity period of a certificate before renewing.
-- [**83**Star][4m] [Py] [safebreach-labs/bitsinject](https://github.com/safebreach-labs/bitsinject) A one-click tool to inject jobs into the BITS queue (Background Intelligent Transfer Service), allowing arbitrary program execution as the NT AUTHORITY/SYSTEM account
+- [**83**Star][1m] [PHP] [slims/slims8_akasia](https://github.com/slims/slims8_akasia) SLiMS 8 Akasia official source code repository
+- [**83**Star][16d] [Py] [sjord/jwtcrack](https://github.com/sjord/jwtcrack) Crack the shared secret of a HS256-signed JWT
+- [**83**Star][3y] [C++] [scanlime/facewhisperer](https://github.com/scanlime/facewhisperer) USB host add-on for the ChipWhisperer side-channel analysis tool
+- [**83**Star][1y] [Py] [s3rvac/retdec-python](https://github.com/s3rvac/retdec-python) A Python library and tools providing easy access to the retdec.com decompilation service through their REST API.
- [**83**Star][7y] [C] [realtalk/cve-2013-2094](https://github.com/realtalk/cve-2013-2094) original cve-2013-2094 exploit and a rewritten version for educational purposes
+- [**83**Star][5m] [Py] [quantika14/guasap-whatsapp-foresincs-tool](https://github.com/quantika14/guasap-whatsapp-foresincs-tool) WhatsApp Forensic Tool
+- [**83**Star][7d] [Java] [pwntester/dupekeyinjector](https://github.com/pwntester/dupekeyinjector) DupeKeyInjector
+- [**83**Star][1y] [Jupyter Notebook] [poteman/alibaba-3rd-security-algorithm-challenge](https://github.com/poteman/alibaba-3rd-security-algorithm-challenge) 第三届阿里云安全算法挑战赛冠军代码
- [**83**Star][10m] [Py] [piranhalysis/pirogue](https://github.com/piranhalysis/pirogue) PiRogue is a small device meant to ease network interception and analysis.
- [**83**Star][11m] [Py] [phantom0301/vulcloud](https://github.com/phantom0301/vulcloud) A Simple Web-UI for Vulhub (Docker) / 便捷的漏洞镜像管理部署Web应用
- [**83**Star][3m] [Ruby] [pedrib/poc](https://github.com/pedrib/poc)
+- [**83**Star][4y] [owasp/owasp-testing-guide](https://github.com/owasp/owasp-testing-guide) OWASP Testing Guide
- [**83**Star][8m] [offensive-security/kali-cloud-build](https://github.com/offensive-security/kali-cloud-build) Script to create Kali Linux Amazon Machine Images (AMIs)
- [**83**Star][3y] [JS] [oalabs/frida-extract](https://github.com/oalabs/frida-extract) Frida.re based RunPE (and MapViewOfSection) extraction tool
+- [**83**Star][1y] [Py] [oalabs/findyara](https://github.com/oalabs/findyara) IDA python plugin to scan your binary with yara rules
+- [**83**Star][1y] [Py] [nccgroup/blackboxprotobuf](https://github.com/nccgroup/blackboxprotobuf) Blackbox protobuf is a Burp Suite extension for decoding and modifying arbitrary protobuf messages without the protobuf type definition.
+- [**83**Star][7m] [mr-xn/hackbar2.1.3](https://github.com/mr-xn/hackbar2.1.3) the free firefox extions of hackbar v2.1.3 ,hackbar 插件未收费的免费版本
- [**83**Star][4y] [C#] [monoxgas/trebuchet](https://github.com/monoxgas/trebuchet) MS15-076 Privilege Escalation
-- [**83**Star][6y] [PowerShell] [mmessano/powershell](https://github.com/mmessano/powershell)
+- [**83**Star][6y] [PS] [mmessano/powershell](https://github.com/mmessano/powershell)
- [**83**Star][1y] [C] [marcusbotacin/branchmonitoringproject](https://github.com/marcusbotacin/branchmonitoringproject) A branch-monitor-based solution for process monitoring.
+- [**83**Star][6m] [Py] [localh0t/m4ngl3m3](https://github.com/localh0t/m4ngl3m3) 使用字符串列表的通用密码模式生成器
- [**83**Star][5y] [JS] [kmowery/canvas-fingerprinting](https://github.com/kmowery/canvas-fingerprinting) A framework for collecting and viewing graphical browser fingerprints.
- [**83**Star][2y] [Makefile] [kingsquare/docker-tunnel](https://github.com/kingsquare/docker-tunnel) a (simple) dockerized ssh tunnel
- [**83**Star][3m] [Py] [kcarretto/arsenal](https://github.com/kcarretto/arsenal) Extensible Red Team Framework
- [**83**Star][8m] [kai5263499/awesome-container-security](https://github.com/kai5263499/awesome-container-security) Awesome list of resources related to container security
-- [**83**Star][2y] [PowerShell] [kacperszurek/gpg_reaper](https://github.com/kacperszurek/gpg_reaper) 从gpg-agent缓存/内存中获取/窃取/恢复GPG私钥
-- [**83**Star][6y] [k33nteam/ie9-ie11-vulnerability-advanced-exploitation](https://github.com/k33nteam/ie9-ie11-vulnerability-advanced-exploitation) Public slides and demo code of bypassing security protection in the latest Windows Internet Explorer.
+- [**83**Star][2y] [PS] [kacperszurek/gpg_reaper](https://github.com/kacperszurek/gpg_reaper) 从gpg-agent缓存/内存中获取/窃取/恢复GPG私钥
- [**83**Star][9m] [justinsteven/advisories](https://github.com/justinsteven/advisories)
-- [**83**Star][3y] [Objective-C] [jonwil/unlinker](https://github.com/jonwil/unlinker) Unlinker is a tool that can rip functions out of Visual C++ compiled binaries and produce Visual C++ COFF object files
-- [**83**Star][11d] [Java] [jgillam/burp-paramalyzer](https://github.com/jgillam/burp-paramalyzer) Paramalyzer - Burp extension for parameter analysis of large-scale web application penetration tests.
+- [**83**Star][3y] [ObjC] [jonwil/unlinker](https://github.com/jonwil/unlinker) Unlinker is a tool that can rip functions out of Visual C++ compiled binaries and produce Visual C++ COFF object files
+- [**83**Star][13d] [Java] [jgillam/burp-paramalyzer](https://github.com/jgillam/burp-paramalyzer) Paramalyzer - Burp extension for parameter analysis of large-scale web application penetration tests.
- [**83**Star][1y] [github-classroom-cybros/ethical-hacking](https://github.com/github-classroom-cybros/ethical-hacking) This repository contains reference material & links for people willing to learn Ethical Hacking
- [**83**Star][2y] [R] [fujitsulaboratories/comevizz](https://github.com/fujitsulaboratories/comevizz) COMEVIZZ is COde MEtrics VIsualiZation with Z-Score.
- [**83**Star][12m] [C] [friendlyarm/h3_lichee](https://github.com/friendlyarm/h3_lichee) BSP for FriendlyARM NanoPi H3
- [**83**Star][1y] [Ruby] [enjoiz/bsqlinjector](https://github.com/enjoiz/bsqlinjector) Blind SQL injection exploitation tool written in ruby.
- [**83**Star][6y] [Py] [einstein-/hexrays-python](https://github.com/einstein-/hexrays-python) Python bindings for the Hexrays Decompiler
-- [**83**Star][4m] [C++] [designer1337/aristois-legit](https://github.com/designer1337/aristois-legit) Full project files for aristois, Counter-Strike: Global Offensive cheat.
+- [**83**Star][2y] [C] [dword1511/onewire-over-uart](https://github.com/dword1511/onewire-over-uart) Access Dallas 1-Wire bus on your PC via low-cost USB to UART bridge.
+- [**83**Star][6m] [C++] [djhohnstein/processreimaging](https://github.com/djhohnstein/processreimaging) Process reimaging proof of concept code
- [**83**Star][2y] [C++] [decoder-it/lonelypotato](https://github.com/decoder-it/lonelypotato) Modified version of RottenPotatoNG C++
- [**83**Star][8m] [C++] [deadash/pbb_crack](https://github.com/deadash/pbb_crack) PBB视频解密
-- [**83**Star][2m] [PowerShell] [cyberark/skyark](https://github.com/cyberark/skyark) SkyArk helps to discover, assess and secure the most privileged entities in Azure and AWS
-- [**83**Star][2y] [Py] [coco413/discoversubdomain](https://github.com/coco413/discoversubdomain) 前渗透信息探测工具集-子域名
-- [**83**Star][1y] [cneill/appsec-resources](https://github.com/cneill/appsec-resources) Resources for developers and security engineers to learn the ropes of application security
+- [**83**Star][4m] [Py] [danielplohmann/smda](https://github.com/danielplohmann/smda) SMDA is a minimalist recursive disassembler library that is optimized for accurate Control Flow Graph (CFG) recovery from memory dumps.
+- [**83**Star][2m] [PS] [cyberark/skyark](https://github.com/cyberark/skyark) SkyArk helps to discover, assess and secure the most privileged entities in Azure and AWS
- [**83**Star][3y] [Py] [claudioviviani/wordbrutepress](https://github.com/claudioviviani/wordbrutepress) Wordpress Brute Force Multithreading with standard and xml-rpc login
+- [**83**Star][3d] [caledoniaproject/awesome-opensource-security](https://github.com/caledoniaproject/awesome-opensource-security) A list of interesting stuffs that I have no time to test/review
- [**83**Star][5y] [Py] [bwall/ircsnapshot](https://github.com/bwall/ircsnapshot) Tool to gather information from IRC servers
- [**83**Star][4m] [C] [brainsmoke/ptrace-burrito](https://github.com/brainsmoke/ptrace-burrito) a friendly wrapper around ptrace
+- [**83**Star][3y] [bones-codes/bombs](https://github.com/bones-codes/bombs) A few files for decompression bomb testing –––
- [**83**Star][3y] [C] [bluekezhou/binarywaf](https://github.com/bluekezhou/binarywaf) CTF线下赛流量记录工具
-- [**83**Star][10m] [C++] [basketwill/sysmon_reverse](https://github.com/basketwill/sysmon_reverse)
+- [**83**Star][2y] [C++] [benjaminsoelberg/reflectivepeloader](https://github.com/benjaminsoelberg/reflectivepeloader) Reflective PE loader for DLL injection
- [**83**Star][7m] [Go] [assafmo/xioc](https://github.com/assafmo/xioc) Extract indicators of compromise from text, including "escaped" ones.
-- [**83**Star][2y] [Py] [anonion0/nsec3map](https://github.com/anonion0/nsec3map) a tool to enumerate the resource records of a DNS zone using its DNSSEC NSEC or NSEC3 chain
- [**83**Star][1y] [HTML] [amolnaik4/bodhi](https://github.com/amolnaik4/bodhi) Bodhi - Client-side Vulnerability Playground
- [**83**Star][2y] [Py] [401trg/detections](https://github.com/401trg/detections) This repository contains all public indicators identified by 401trg during the course of our investigations. It also includes relevant yara rules and ids signatures to detect these indicators.
- [**83**Star][2y] [Py] [1n3/httpoxyscan](https://github.com/1n3/httpoxyscan) HTTPoxy Exploit Scanner by 1N3 @CrowdShield
- [**83**Star][11m] [java] [JesusFreke/smali](https://bitbucket.org/jesusfreke/smali)
+- [**82**Star][1y] [Dockerfile] [codesuki/ecs-nginx-proxy](https://github.com/codesuki/ecs-nginx-proxy) Reverse proxy for AWS ECS. Lets you address your docker containers by sub domain.
+- [**82**Star][3d] [Py] [m4ll0k/burpsuite-secret_finder](https://github.com/m4ll0k/burpsuite-secret_finder) Burp Suite extension to discover apikeys/tokens from HTTP response.
- [**82**Star][2m] [C] [taviso/cefdebug](https://github.com/taviso/cefdebug) Minimal code to connect to a CEF debugger.
+- [**82**Star][2m] [uknowsec/loginlog_windows](https://github.com/uknowsec/loginlog_windows) 读取登录过本机的登录失败或登录成功的所有计算机信息,在内网渗透中快速定位运维管理人员。
- [**82**Star][5y] [Ruby] [intrigueio/tapir](https://github.com/intrigueio/tapir) An easy-to-use and extensible framework for OSINT - REPLACED BY INTRIGUE-CORE
-- [**82**Star][1y] [Py] [danmcinerney/search-google](https://github.com/danmcinerney/search-google) Scrape google search results
-- [**82**Star][22d] [PowerShell] [kmkz/powershell](https://github.com/kmkz/powershell) Some .ps1 scripts for pentesting
-- [**82**Star][1m] [Objective-C] [gssdromen/v2rayc](https://github.com/gssdromen/v2rayc) a GUI for v2ray on Mac
+- [**82**Star][20d] [Py] [imtiazkarimik23/atfuzzer](https://github.com/imtiazkarimik23/atfuzzer) "Opening Pandora's Box through ATFuzzer: Dynamic Analysis of AT Interface for Android Smartphones" ACSAC 2019
- [**82**Star][11m] [JS] [zswang/jfogs](https://github.com/zswang/jfogs) JavaScript Obfuscator
-- [**82**Star][1y] [Shell] [cyb0r9/androspy](https://github.com/Cyb0r9/Androspy) Androspy framework is a Backdoor Crypter & Creator with Automatic IP Poisener
+- [**82**Star][3y] [C#] [saneki-discontinued/flatui](https://github.com/saneki-discontinued/FlatUI) Flat UI theme for .NET applications
- [**82**Star][2y] [C#] [zacbrown/powerkrabsetw](https://github.com/zacbrown/powerkrabsetw) PowerKrabsEtw is a PowerShell interface for doing real-time ETW tracing.
- [**82**Star][3y] [Py] [yehia-mamdouh/xssya-v-2.0](https://github.com/yehia-mamdouh/xssya-v-2.0)
+- [**82**Star][5y] [Py] [xypiie/webshell](https://github.com/xypiie/webshell) WebShell is a web-based ssh shell.
- [**82**Star][4y] [C++] [wjp/idados](https://github.com/wjp/idados) Eric Fry's IDA/DOSBox debugger plugin
+- [**82**Star][3y] [Go] [whyrusleeping/zmsg](https://github.com/whyrusleeping/zmsg) A small program for sending messages via zcash encrypted memo fields
+- [**82**Star][3y] [Py] [wangyihang/ccupp](https://github.com/wangyihang/ccupp) 基于社会工程学的弱口令密码字典生成工具
- [**82**Star][2y] [Kotlin] [viktordegtyarev/callreclib](https://github.com/viktordegtyarev/callreclib) Call Recorder fix for Android 7 and Android 6
-- [**82**Star][3y] [JS] [unrealakama/nightshade](https://github.com/unrealakama/nightshade) A simple capture the flag framework.
-- [**82**Star][11m] [Py] [tlkh/prowler](https://github.com/tlkh/prowler) Distributed Network Vulnerability Scanner
+- [**82**Star][10m] [Shell] [trailofbits/ios-integrity-validator](https://github.com/trailofbits/ios-integrity-validator) Integrity validator for iOS devices
- [**82**Star][5y] [Py] [techbliss/frida_for_ida_pro](https://github.com/techbliss/frida_for_ida_pro) plugin for ida pro thar uses the Frida api
- [**82**Star][2m] [Py] [takuzoo3868/penta](https://github.com/takuzoo3868/penta) Open source all-in-one CLI tool to automate pentesting.
-- [**82**Star][1m] [PHP] [slims/slims8_akasia](https://github.com/slims/slims8_akasia) SLiMS 8 Akasia official source code repository
-- [**82**Star][14d] [Py] [sjord/jwtcrack](https://github.com/sjord/jwtcrack) Crack the shared secret of a HS256-signed JWT
+- [**82**Star][2y] [Go] [snail007/autostart](https://github.com/snail007/autostart) autostart tools to set your application auto startup after desktop login,only for desktop version of linux , windows , mac.
- [**82**Star][1y] [Py] [silascutler/lnkparse](https://github.com/silascutler/lnkparse) Windows Shortcut file (LNK) parser
- [**82**Star][7y] [shjalayeri/sysret](https://github.com/shjalayeri/sysret) Windows Kernel Intel x64 SYSRET Vulnerability Exploit
- [**82**Star][6y] [Java] [schierlm/javapayload](https://github.com/schierlm/javapayload) JavaPayload is a collection of pure Java payloads to be used for post-exploitation from pure Java exploits or from common misconfigurations (like not password protected Tomcat manager or debugger port).
-- [**82**Star][1y] [Py] [s3rvac/retdec-python](https://github.com/s3rvac/retdec-python) A Python library and tools providing easy access to the retdec.com decompilation service through their REST API.
- [**82**Star][1y] [C] [rlarabee/exploits](https://github.com/rlarabee/exploits)
- [**82**Star][3y] [Vim script] [rjohnsondev/vim-compiler-go](https://github.com/rjohnsondev/vim-compiler-go) Vim compiler plugin for Go (golang)
-- [**82**Star][3y] [Py] [ratty3697/hackspy-trojan-exploit](https://github.com/ratty3697/hackspy-trojan-exploit) This tool creates almost undetectabe trojan virus to exploit windows machine.
+- [**82**Star][7m] [C] [ret2p4nda/kernel-pwn](https://github.com/ret2p4nda/kernel-pwn)
+- [**82**Star][4m] [Py] [ray-cp/pwn_debug](https://github.com/ray-cp/pwn_debug) Aim to help building exploitation of CTFs pwn game quickly
- [**82**Star][2y] [Go] [random-robbie/aws-scanner](https://github.com/random-robbie/aws-scanner) Scans a list of websites for Cloudfront or S3 Buckets
-- [**82**Star][5m] [Py] [quantika14/guasap-whatsapp-foresincs-tool](https://github.com/quantika14/guasap-whatsapp-foresincs-tool) WhatsApp Forensic Tool
+- [**82**Star][1y] [Kotlin] [pvasa/easycrypt](https://github.com/pvasa/easycrypt) Android cryptography library with SecureRandom patches.
+- [**82**Star][10m] [Py] [plizonczyk/noiseprotocol](https://github.com/plizonczyk/noiseprotocol) Noise Protocol Framework - Python 3 implementation
- [**82**Star][4y] [Py] [pinperepette/geotweet_gui](https://github.com/pinperepette/geotweet_gui) Social engineering tool for human hacking
- [**82**Star][10m] [C++] [pelock/pelock-software-protection-and-licensing-sdk](https://github.com/pelock/pelock-software-protection-and-licensing-sdk) Software copy protection against cracking & reverse engineering with anti-cracking & anti-debugging techniques. Software license key system with time trial options.
- [**82**Star][2y] [C++] [paulsapps/msgi](https://github.com/paulsapps/msgi) Metal Gear Solid Integral PC reversing, efforts moved to
-- [**82**Star][17d] [Ruby] [openzipkin/zipkin-ruby](https://github.com/openzipkin/zipkin-ruby) zipkin-tracer ruby gem
-- [**82**Star][4y] [Py] [omererdem/honeything](https://github.com/omererdem/honeything) TR-069 Honeypot
-- [**82**Star][1y] [Py] [oalabs/findyara](https://github.com/oalabs/findyara) IDA python plugin to scan your binary with yara rules
+- [**82**Star][19d] [Ruby] [openzipkin/zipkin-ruby](https://github.com/openzipkin/zipkin-ruby) zipkin-tracer ruby gem
+- [**82**Star][4d] [C] [nukem9/swissarmyknife](https://github.com/nukem9/swissarmyknife) x64dbg utility for linker map files, diff files, PEiD/IDA signatures, and code signature generation
- [**82**Star][2y] [C++] [nemerle/dcc](https://github.com/nemerle/dcc) This is a heavily updated version of the old DOS executable decompiler DCC
- [**82**Star][6y] [Py] [mwielgoszewski/burp-protobuf-decoder](https://github.com/mwielgoszewski/burp-protobuf-decoder) A simple Google Protobuf Decoder for Burp
-- [**82**Star][3m] [Go] [mame82/unifyingvulnsdisclosurerepo](https://github.com/mame82/unifyingvulnsdisclosurerepo) Formerly private repository for discussion, knowledge- and code-sharing around new Unifying vulns, as announced on Twitter
- [**82**Star][5y] [Py] [maldroid/maldrolyzer](https://github.com/maldroid/maldrolyzer) Simple framework to extract "actionable" data from Android malware (C&Cs, phone numbers etc.)
- [**82**Star][2y] [Shell] [m4sc3r4n0/astroid](https://github.com/m4sc3r4n0/astroid) ASTROID v 1.2 bypass most A.V softwares
- [**82**Star][1y] [Py] [m4ll0k/wpsploit](https://github.com/m4ll0k/wpsploit) Wordpress主题/插件代码扫描
- [**82**Star][2y] [Py] [lz1y/cve-2017-8759](https://github.com/lz1y/cve-2017-8759) CVE-2017-8759
-- [**82**Star][6m] [Py] [localh0t/m4ngl3m3](https://github.com/localh0t/m4ngl3m3) 使用字符串列表的通用密码模式生成器
- [**82**Star][3y] [Py] [llsourcell/antivirus_demo](https://github.com/llsourcell/antivirus_demo) Antivirus Demo for Fresh Machine Learning #7
- [**82**Star][2y] [Py] [lcatro/browser_vuln_check](https://github.com/lcatro/browser_vuln_check) 利用已知的浏览器漏洞PoC 来快速检测Webview 和浏览器环境是否存在安全漏洞,只需要访问run.html 即可获取所有扫描结果,适用场景包含:APP 发布之前的内部安全测试,第三方Webview 漏洞检测等
-- [**82**Star][18d] [Objective-C] [lacertosusrepo/open-source-tweaks](https://github.com/lacertosusrepo/open-source-tweaks) Tweaks I've left open, maybe someone can learn from/correct them. Either on my repo or Packix.
- [**82**Star][5y] [Py] [krmaxwell/tinfoleak](https://github.com/krmaxwell/tinfoleak) Get detailed information about a Twitter user activity
+- [**82**Star][6y] [k33nteam/ie9-ie11-vulnerability-advanced-exploitation](https://github.com/k33nteam/ie9-ie11-vulnerability-advanced-exploitation) Public slides and demo code of bypassing security protection in the latest Windows Internet Explorer.
+- [**82**Star][1y] [Py] [juniorn1003/faitagram](https://github.com/juniorn1003/faitagram) Welp, This failed. Go find another one.
+- [**82**Star][4y] [Py] [jinhang/12306_captcha](https://github.com/jinhang/12306_captcha) CNN对12306、sina、baidu的验证码破解。
+- [**82**Star][4m] [jeanlouisferey/aws-securitygroup-grapher](https://github.com/jeanlouisferey/aws-securitygroup-grapher) This ansible role gets information from an AWS VPC and generate a graphical representation of security groups
- [**82**Star][4m] [Py] [indicodatasolutions/enso](https://github.com/indicodatasolutions/enso) Enso: An Open Source Library for Benchmarking Embeddings + Transfer Learning Methods
- [**82**Star][2y] [Py] [idanr1986/cuckoodroid-2.0](https://github.com/idanr1986/cuckoodroid-2.0) Automated Android Malware Analysis with Cuckoo Sandbox.
-- [**82**Star][2y] [Py] [hi-wenr0/mlcheckwebshell](https://github.com/hi-wenr0/mlcheckwebshell)
+- [**82**Star][5y] [C++] [hackedteam/scout-win](https://github.com/hackedteam/scout-win) Scout backdoor for Windows
- [**82**Star][3m] [Java] [graxcode/cafebabe](https://github.com/graxcode/cafebabe) Easy-to-use java bytecode editor - successor of JByteMod!
+- [**82**Star][18d] [Go] [grantseltzer/karn](https://github.com/grantseltzer/karn) Simplifying Seccomp enforcement in containerized or non-containerized apps
+- [**82**Star][1y] [C] [gossithedog/zeroday](https://github.com/gossithedog/zeroday)
- [**82**Star][1y] [HTML] [google/rekall-profiles](https://github.com/google/rekall-profiles) Public Profile Repository for Rekall Memory Forensic.
- [**82**Star][9m] [Go] [glen-mac/gogetbucket](https://github.com/glen-mac/gogetbucket) A penetration testing tool to enumerate and analyse Amazon S3 Buckets owned by a domain.
+- [**82**Star][30d] [Shell] [firecracker-microvm/firecracker-demo](https://github.com/firecracker-microvm/firecracker-demo) A demo running 4000 Firecracker microVMs.
- [**82**Star][2y] [exp-sky/asiasecwest-2018-chakra-vulnerability-and-exploit-bypass-all-system-mitigation](https://github.com/exp-sky/asiasecwest-2018-chakra-vulnerability-and-exploit-bypass-all-system-mitigation) Chakra vulnerability and exploit bypass all system mitigation
- [**82**Star][12m] [Py] [erforschr/bruteforce-http-auth](https://github.com/erforschr/bruteforce-http-auth) Bruteforce HTTP Authentication
+- [**82**Star][4y] [elephantos/elephant](https://github.com/elephantos/elephant) 操作系统真象还原
- [**82**Star][4y] [C] [eklitzke/ptrace-call-userspace](https://github.com/eklitzke/ptrace-call-userspace) Example of how to use the ptrace(2) system call to call a userspace method.
- [**82**Star][11m] [Py] [ecx86/tcpbin](https://github.com/ecx86/tcpbin) Very crude and poorly written HTTP(s) and SMTP bin
-- [**82**Star][2y] [C] [dword1511/onewire-over-uart](https://github.com/dword1511/onewire-over-uart) Access Dallas 1-Wire bus on your PC via low-cost USB to UART bridge.
-- [**82**Star][11m] [Py] [duanhongyi/gmssl](https://github.com/duanhongyi/gmssl) a python crypto for sm2/sm3/sm4
+- [**82**Star][7y] [Ruby] [dirtyfilthy/metassh](https://github.com/dirtyfilthy/metassh) ssh session type for metasploit
- [**82**Star][2y] [Py] [crackmes/crackmes](https://github.com/crackmes/crackmes) Open and censorship resistant crackmes repository
-- [**82**Star][7d] [Go] [colettecontreras/v2ray-ssrpanel-plugin](https://github.com/colettecontreras/v2ray-ssrpanel-plugin) A buildin V2ray plugin for SSRPanel to sync users from database to v2ray, to log traffics/system info
+- [**82**Star][6d] [Java] [col-e/jremapper](https://github.com/col-e/jremapper) Remapping tool for compiled java programs.
+- [**82**Star][1y] [ckjbug/kali-linux-learning](https://github.com/ckjbug/kali-linux-learning)
- [**82**Star][8m] [Py] [ciscodevnet/virlutils](https://github.com/ciscodevnet/virlutils)
- [**82**Star][6y] [Py] [chrisjohnriley/random_code](https://github.com/chrisjohnriley/random_code) Random Code, POC Scripts and other things (Your Mileage May Vary)
-- [**82**Star][9d] [caledoniaproject/awesome-opensource-security](https://github.com/caledoniaproject/awesome-opensource-security) A list of interesting stuffs that I have no time to test/review
+- [**82**Star][5y] [C] [chokepoint/crypthook](https://github.com/chokepoint/crypthook) TCP/UDP symmetric encryption tunnel wrapper
- [**82**Star][2y] [Java] [calaylin/bda](https://github.com/calaylin/bda) Programmer De-anonymization from Binary Executables
-- [**82**Star][2y] [PHP] [bug7sec/ransomware](https://github.com/bug7sec/ransomware) Bug7sec Team - ransomware open source (web)
- [**82**Star][6m] [Py] [brutemap-dev/brutemap](https://github.com/brutemap-dev/brutemap) Let's find someone's account
-- [**82**Star][3y] [bones-codes/bombs](https://github.com/bones-codes/bombs) A few files for decompression bomb testing –––
-- [**82**Star][2y] [C++] [benjaminsoelberg/reflectivepeloader](https://github.com/benjaminsoelberg/reflectivepeloader) Reflective PE loader for DLL injection
- [**82**Star][3y] [C#] [basic4/widucky](https://github.com/basic4/widucky) WiFi Enabled USB Rubber Ducky
- [**82**Star][1y] [C#] [baibaomen/baibaomen.httphijacker](https://github.com/baibaomen/baibaomen.httphijacker) 一个通过网络包嗅探攻击HTTP协议,从而对其它电脑上用户的网站登录会话进行劫持的演示程序。教程参见链接:
- [**82**Star][1y] [JS] [avian2/noscript](https://github.com/avian2/noscript) A Firefox extension for whitelist driven safe JavaScript execution.
+- [**82**Star][4m] [Py] [audreyr/binaryornot](https://github.com/audreyr/binaryornot) Ultra-lightweight pure Python package to check if a file is binary or text.
+- [**82**Star][5m] [Ruby] [argos83/ritm](https://github.com/argos83/ritm) Ruby In The Middle (HTTP/HTTPS interception proxy)
- [**82**Star][2y] [Py] [anssi-fr/tabi](https://github.com/anssi-fr/tabi) BGP Hijack Detection
- [**82**Star][1y] [java] [anbai-inc/cobaltstrike_hanization](https://github.com/anbai-inc/cobaltstrike_hanization) CobaltStrike 2.5中文汉化版
-- [**82**Star][1m] [Go] [alphasoc/nfr](https://github.com/alphasoc/nfr) A lightweight tool to score network traffic and flag anomalies
+- [**82**Star][8d] [Go] [alphasoc/nfr](https://github.com/alphasoc/nfr) A lightweight tool to score network traffic and flag anomalies
- [**82**Star][4y] [C] [abdsec/cve-2016-0801](https://github.com/abdsec/cve-2016-0801)
-- [**82**Star][10m] [C] [aasthayadav/compsecattacklabs](https://github.com/aasthayadav/compsecattacklabs) Contains Attack labs
+- [**82**Star][10m] [Java] [7ym0n/security](https://github.com/7ym0n/security) Happy Hacker
+- [**82**Star][8d] [PHP] [10up/restricted-site-access](https://github.com/10up/restricted-site-access) Limit access to visitors who are logged in or allowed by IP addresses. Includes many options for handling blocked visitors.
+- [**82**Star][5m] [Py] [0xffff0800/muddyc3v1.0.1-](https://github.com/0xffff0800/muddyc3v1.0.1-) This is the MuddyWater APT C3 v1.0.1 Source
+- [**82**Star][1m] [C] [0xcpu/winaltsyscallhandler](https://github.com/0xcpu/winaltsyscallhandler) Some research on AltSystemCallHandlers functionality in Windows 10 20H1 18999
+- [**81**Star][2y] [JS] [chxj1992/shadowsocks-manager-docker](https://github.com/chxj1992/shadowsocks-manager-docker) 这是一个基于 shadowsocks-manager webui 插件开发的shadowsocks账号售卖网站的Docker镜像
+- [**81**Star][4m] [C] [sensepost/wpa_sycophant](https://github.com/sensepost/wpa_sycophant) Evil client portion of EAP relay attack
- [**81**Star][1y] [Java] [googlecreativelab/tunnelvision](https://github.com/googlecreativelab/tunnelvision) Distort your surroundings through a collection of transformative filters
- [**81**Star][3y] [Shell] [infoslack/docker-dvwa](https://github.com/infoslack/docker-dvwa) Docker image for DVWA(Damn Vulnerable Web Application)
-- [**81**Star][7m] [Objective-C] [hikariobfuscator/hanabi](https://github.com/hikariobfuscator/hanabi) Apple Clang Loader
-- [**81**Star][22d] [Go] [liamg/pax](https://github.com/liamg/pax)
-- [**81**Star][11m] [Go] [ouqiang/mars](https://github.com/ouqiang/mars) HTTP(S)代理, 用于抓包调试
-- [**81**Star][20d] [six2dez/oscp-human-guide](https://github.com/six2dez/oscp-human-guide) My own OSCP guide
+- [**81**Star][7m] [ObjC] [hikariobfuscator/hanabi](https://github.com/hikariobfuscator/hanabi) Apple Clang Loader
+- [**81**Star][11d] [Go] [asche910/flynet](https://github.com/asche910/flynet) A powerful TCP/UDP tool, which support socks5 proxy by tcp and udp, http proxy and NAT traversal. This tool can help you bypass gfw easily
- [**81**Star][2y] [Shell] [offxec/pavelow](https://github.com/OffXec/PAVELOW) PAVELOW Exploit Toolbox is a BASH script that corresponds with your KALI distro to better help your vulnerability hunting and exploiting proccess with a few other goodies added to aid your fight.
+- [**81**Star][3m] [Java] [nats-io/stan.java](https://github.com/nats-io/stan.java) NATS Streaming Java Client
- [**81**Star][4y] [Py] [android-dtf/dtf](https://github.com/android-dtf/dtf) Android Device Testing Framework ("dtf")
- [**81**Star][1y] [Py] [ctfhacker/ctf-writeups](https://github.com/ctfhacker/ctf-writeups)
- [**81**Star][4y] [Py] [zcutlip/exploit-poc](https://github.com/zcutlip/exploit-poc) Proof-of-Concept code for exploits
- [**81**Star][2y] [Py] [xyzz/rop-rpc](https://github.com/xyzz/rop-rpc)
- [**81**Star][3y] [xoreaxeaxeax/vimmmex](https://github.com/xoreaxeaxeax/vimmmex) The vim execution engine
-- [**81**Star][3y] [Go] [whyrusleeping/zmsg](https://github.com/whyrusleeping/zmsg) A small program for sending messages via zcash encrypted memo fields
- [**81**Star][3y] [HTML] [vah13/avdetection](https://github.com/vah13/avdetection) A simple way for detection the remote user's antivirus
- [**81**Star][1y] [Py] [undeadsec/idisagree](https://github.com/undeadsec/idisagree) Control remote computers using discord bot and python 3.
- [**81**Star][4y] [C] [tyilo/asm_repl](https://github.com/tyilo/asm_repl) A REPL for assembly
@@ -9454,69 +10039,71 @@ networking routines
- [**81**Star][7y] [C] [strobejb/winspy](https://github.com/strobejb/winspy) WinSpy++
- [**81**Star][8y] [spiderlabs/msfrpc](https://github.com/spiderlabs/msfrpc) Perl/Python modules for interfacing with Metasploit MSGRPC
- [**81**Star][9m] [C#] [skelsec/pypykatz_agent_dn](https://github.com/skelsec/pypykatz_agent_dn) Pypykatz agent implemented in .NET
-- [**81**Star][2m] [JS] [sk4ddy/remediatetheflag](https://github.com/sk4ddy/remediatetheflag) remediatetheflag: 对程序员进行安全相关的培训
- [**81**Star][1y] [Py] [silascutler/malpipe](https://github.com/silascutler/malpipe) Malware/IOC ingestion and processing engine
- [**81**Star][2y] [Ruby] [siberas/watobo](https://github.com/siberas/watobo) watobo:自动化 web app 安全测试
- [**81**Star][4y] [Py] [shengqi158/svn_git_scanner](https://github.com/shengqi158/svn_git_scanner) 用于扫描git,svn泄露
- [**81**Star][4m] [JS] [securestate/king-phisher-templates](https://github.com/securestate/king-phisher-templates) Templates for the King Phisher open source phishing campaign toolkit.
- [**81**Star][10m] [sderosiaux/guidelines-to-create-a-strong-website](https://github.com/sderosiaux/guidelines-to-create-a-strong-website) A list of all things to consider when making a website or webapp of quality.
- [**81**Star][5m] [Py] [scwuaptx/lazyfragmentationheap](https://github.com/scwuaptx/lazyfragmentationheap) WCTF 2019 challenge
-- [**81**Star][2m] [Scala] [scala/jardiff](https://github.com/scala/jardiff) A tool for comparing JAR files, including Scala pickled signatures and method code
- [**81**Star][2m] [Shell] [rhaidiz/dribble](https://github.com/rhaidiz/dribble) A small project for stealing Wi-Fi passwords via browser's cache poisoning
+- [**81**Star][3y] [Py] [ratty3697/hackspy-trojan-exploit](https://github.com/ratty3697/hackspy-trojan-exploit) This tool creates almost undetectabe trojan virus to exploit windows machine.
- [**81**Star][3y] [JS] [rapid7/jsobfu](https://github.com/rapid7/jsobfu) Obfuscate JavaScript (beyond repair) with Ruby
- [**81**Star][1y] [Py] [r3dxpl0it/apache-superset-remote-code-execution-poc-cve-2018-8021](https://github.com/r3dxpl0it/apache-superset-remote-code-execution-poc-cve-2018-8021) CVE-2018-8021 Proof-Of-Concept and Exploit
-- [**81**Star][3m] [Py] [r00ts3c/ddos-rootsec](https://github.com/r00ts3c/ddos-rootsec) DDOS Archive by RootSec (Scanners, BotNets (Mirai and QBot Premium & Normal and more), Exploits, Methods, Sniffers)
-- [**81**Star][4m] [Java] [pwntester/dupekeyinjector](https://github.com/pwntester/dupekeyinjector) DupeKeyInjector
- [**81**Star][1y] [Py] [prezi/reddalert](https://github.com/prezi/reddalert) AWS risky security change detector based on EDDA.
-- [**81**Star][1y] [Jupyter Notebook] [poteman/alibaba-3rd-security-algorithm-challenge](https://github.com/poteman/alibaba-3rd-security-algorithm-challenge) 第三届阿里云安全算法挑战赛冠军代码
-- [**81**Star][17d] [Objective-C] [poomsmart/idaobjctypes](https://github.com/poomsmart/idaobjctypes) A collection of types & functions definitions useful for Objective-C binaries analysis.
-- [**81**Star][4y] [owasp/owasp-testing-guide](https://github.com/owasp/owasp-testing-guide) OWASP Testing Guide
+- [**81**Star][19d] [ObjC] [poomsmart/idaobjctypes](https://github.com/poomsmart/idaobjctypes) A collection of types & functions definitions useful for Objective-C binaries analysis.
- [**81**Star][5y] [C] [nukem9/virtualdbghide](https://github.com/nukem9/virtualdbghide) Windows kernel mode driver to prevent detection of debuggers.
- [**81**Star][7m] [C] [nowsecure/dirtycow](https://github.com/nowsecure/dirtycow) radare2 IO plugin for Linux and Android. Modifies files owned by other users via dirtycow Copy-On-Write cache vulnerability
+- [**81**Star][4m] [TS] [nowsecure/airspy](https://github.com/nowsecure/airspy) AirSpy - Frida-based tool for exploring and tracking the evolution of Apple's AirDrop protocol implementation on i/macOS, from the server's perspective. Released during BH USA 2019 Training
- [**81**Star][4m] [Py] [nccgroup/requests-racer](https://github.com/nccgroup/requests-racer) Small Python library that makes it easy to exploit race conditions in web apps with Requests.
-- [**81**Star][1y] [Py] [nccgroup/blackboxprotobuf](https://github.com/nccgroup/blackboxprotobuf) Blackbox protobuf is a Burp Suite extension for decoding and modifying arbitrary protobuf messages without the protobuf type definition.
+- [**81**Star][8m] [Py] [nccgroup/argumentinjectionhammer](https://github.com/nccgroup/argumentinjectionhammer) A Burp Extension designed to identify argument injection vulnerabilities.
- [**81**Star][1m] [PHP] [nao-sec/ektotal](https://github.com/nao-sec/ektotal) 分析Drive-by Download攻击的集成工具
+- [**81**Star][2y] [Go] [mtojek/aws-lambda-go-proxy](https://github.com/mtojek/aws-lambda-go-proxy)
- [**81**Star][2m] [Py] [mattcurrie/mgbdis](https://github.com/mattcurrie/mgbdis) Game Boy ROM disassembler with RGBDS compatible output
+- [**81**Star][2y] [matt-knight/research](https://github.com/matt-knight/research) Matt's security publications and related materials
- [**81**Star][3y] [Py] [lukasikic/hacoder.py](https://github.com/lukasikic/hacoder.py) FUD Backdoor Generator / Remote Administration Tool
+- [**81**Star][11m] [Java] [lufeirider/project](https://github.com/lufeirider/project)
+- [**81**Star][7m] [Py] [leoid/matchandreplace](https://github.com/leoid/matchandreplace) Match and Replace script used to automatically generate JSON option file to BurpSuite
- [**81**Star][7m] [MATLAB] [ktekeli/audio-steganography-algorithms](https://github.com/ktekeli/audio-steganography-algorithms) A Library of Audio Steganography & Watermarking Algorithms
-- [**81**Star][11d] [TeX] [kramse/security-courses](https://github.com/kramse/security-courses) various courses, presentation etc.
-- [**81**Star][4m] [Py] [kapytein/jsonp](https://github.com/kapytein/jsonp) jsonp is a Burp Extension which attempts to reveal JSONP functionality behind JSON endpoints. This could help reveal cross-site script inclusion vulnerabilities or aid in bypassing content security policies.
-- [**81**Star][4m] [jeanlouisferey/aws-securitygroup-grapher](https://github.com/jeanlouisferey/aws-securitygroup-grapher) This ansible role gets information from an AWS VPC and generate a graphical representation of security groups
+- [**81**Star][6d] [TeX] [kramse/security-courses](https://github.com/kramse/security-courses) various courses, presentation etc.
+- [**81**Star][3d] [PS] [jborean93/packer-windoze](https://github.com/jborean93/packer-windoze) Packer templates to create Windows vagrant box images
+- [**81**Star][1m] [Py] [jas502n/cve-2019-3396](https://github.com/jas502n/cve-2019-3396) Confluence 未授权 RCE (CVE-2019-3396) 漏洞
+- [**81**Star][2y] [C] [hvqzao/foolavc](https://github.com/hvqzao/foolavc) foolav successor - loads DLL, executable or shellcode into memory and runs it effectively bypassing AV
- [**81**Star][3m] [Py] [huntergregal/png-idat-payload-generator](https://github.com/huntergregal/png-idat-payload-generator) Generate a PNG with a payload embedded in the IDAT chunk (Based off of previous concepts and code -- credit in README)
-- [**81**Star][5y] [C++] [hackedteam/scout-win](https://github.com/hackedteam/scout-win) Scout backdoor for Windows
-- [**81**Star][2m] [Py] [fleetcaptain/turbolist3r](https://github.com/fleetcaptain/turbolist3r) Subdomain enumeration tool with analysis features for discovered domains
+- [**81**Star][1m] [HTML] [freedom-wy/js-reverse](https://github.com/freedom-wy/js-reverse) JS逆向研究
+- [**81**Star][9m] [Py] [fox-it/mkyara](https://github.com/fox-it/mkyara) Generating YARA rules based on binary code
+- [**81**Star][2m] [Py] [fgsect/scat](https://github.com/fgsect/scat) 通过USB解析Qualcomm和Samsung基带的诊断消息,并生成包含蜂窝控制平面消息的GSMTAP数据包流
+- [**81**Star][3m] [Shell] [fademind/hosts.extras](https://github.com/fademind/hosts.extras) Extra rules for
- [**81**Star][3y] [Py] [evilsocket/coffee](https://github.com/evilsocket/coffee) Smarter Coffee terminal client.
- [**81**Star][1y] [Py] [endgameinc/youarespecial](https://github.com/endgameinc/youarespecial)
-- [**81**Star][4y] [elephantos/elephant](https://github.com/elephantos/elephant) 操作系统真象还原
-- [**81**Star][7y] [Ruby] [dirtyfilthy/metassh](https://github.com/dirtyfilthy/metassh) ssh session type for metasploit
+- [**81**Star][2m] [PS] [ecstatic-nobel/posint](https://github.com/ecstatic-nobel/posint) Gather Open-Source Intelligence using PowerShell.
+- [**81**Star][2y] [Lua] [duoergun0729/4book](https://github.com/duoergun0729/4book) 《企业安全建设入门:基于开源软件打造企业网络安全》
- [**81**Star][3y] [C] [derrekr/android_security](https://github.com/derrekr/android_security) Public Android Vulnerability Information (CVE PoCs etc)
- [**81**Star][4y] [Roff] [ddos-defense/bohatei](https://github.com/ddos-defense/bohatei) Bohatei is a first of its kind platform that enables flexible and elastic DDoS defense using SDN and NFV.
- [**81**Star][4y] [C#] [david-risney/csp-fiddler-extension](https://github.com/david-risney/csp-fiddler-extension) Content Security Policy rule collector extension for Fiddler
-- [**81**Star][4m] [Py] [danielplohmann/smda](https://github.com/danielplohmann/smda) SMDA is a minimalist recursive disassembler library that is optimized for accurate Control Flow Graph (CFG) recovery from memory dumps.
-- [**81**Star][8m] [Java] [col-e/jremapper](https://github.com/col-e/jremapper) Remapping tool for compiled java programs.
+- [**81**Star][3y] [Py] [coffeehb/ocift](https://github.com/coffeehb/ocift) 一个半自动化命令注入漏洞Fuzz工具(One Semi-automation command injection vulnerability Fuzz tool)
- [**81**Star][6y] [C] [chokepoint/beleth](https://github.com/chokepoint/beleth) Multi-threaded SSH Password Auditor
-- [**81**Star][26d] [JS] [chichou/wiggle](https://github.com/chichou/wiggle) The concepting self hosted executable binary search engine
+- [**81**Star][7d] [JS] [chichou/wiggle](https://github.com/chichou/wiggle) The concepting self hosted executable binary search engine
- [**81**Star][1y] [HTML] [bruceye777/cronmon](https://github.com/bruceye777/cronmon) 定时任务执行状态监控
-- [**81**Star][2y] [C] [axi0mx/ios-kexec-utils](https://github.com/axi0mx/ios-kexec-utils) boot LLB/iBoot/iBSS/iBEC image from a jailbroken iOS kernel
-- [**81**Star][4m] [Py] [audreyr/binaryornot](https://github.com/audreyr/binaryornot) Ultra-lightweight pure Python package to check if a file is binary or text.
+- [**81**Star][3m] [blockchainlabsnz/awesome-solidity](https://github.com/blockchainlabsnz/awesome-solidity) A curated list of awesome Solidity resources
- [**81**Star][1y] [asuri-team/pwn-sandbox](https://github.com/asuri-team/pwn-sandbox) A sandbox to protect your pwn challenges being pwned in CTF AWD.
- [**81**Star][11m] [Scala] [arguslab/argus-saf](https://github.com/arguslab/argus-saf) Argus static analysis framework
-- [**81**Star][6m] [C] [andreybazhan/symstore](https://github.com/andreybazhan/symstore) The history of Windows Internals via symbols.
-- [**81**Star][12d] [Py] [abarker/pdfcropmargins](https://github.com/abarker/pdfcropmargins) pdfCropMargins -- a program to crop the margins of PDF files
-- [**81**Star][10m] [Java] [7ym0n/security](https://github.com/7ym0n/security) Happy Hacker
+- [**81**Star][7m] [C] [andreybazhan/symstore](https://github.com/andreybazhan/symstore) The history of Windows Internals via symbols.
+- [**81**Star][14d] [Py] [abarker/pdfcropmargins](https://github.com/abarker/pdfcropmargins) pdfCropMargins -- a program to crop the margins of PDF files
- [**80**Star][10m] [C] [mr-un1k0d3r/maliciousdllgenerator](https://github.com/mr-un1k0d3r/maliciousdllgenerator) DLL Generator for side loading attack
- [**80**Star][1y] [JS] [toyodadoubi/ssrstatus](https://github.com/toyodadoubi/ssrstatus) Shadowsocks/ShadowsocksR 账号在线监控
+- [**80**Star][7m] [JS] [thekingofduck/logontracer](https://github.com/thekingofduck/logontracer) Windows系统安全登录日志分析工具logonTracer汉化修正版
- [**80**Star][7m] [PHP] [shadowsocks/shadow-shop](https://github.com/shadowsocks/shadow-shop) Building highly customizable e-commerce websites selling shadowsocks services, using Wordpress and WooCommerce
-- [**80**Star][9d] [C] [trailofbits/mishegos](https://github.com/trailofbits/mishegos) A differential fuzzer for x86 decoders
-- [**80**Star][9d] [Go] [asche910/flynet](https://github.com/asche910/flynet) A powerful TCP/UDP tool, which support socks5 proxy by tcp and udp, http proxy and NAT traversal. This tool can help you bypass gfw easily
+- [**80**Star][2d] [PHP] [automattic/vip-coding-standards](https://github.com/automattic/vip-coding-standards) PHP_CodeSniffer ruleset to enforce WordPress.com VIP and VIP Go coding standards
+- [**80**Star][6d] [Rust] [warner/magic-wormhole.rs](https://github.com/warner/magic-wormhole.rs) NOT FUNCTIONAL YET. Slowly porting magic-wormhole to Rust. See wiki for game plan.
+- [**80**Star][3y] [bastilleresearch/keysniffer](https://github.com/bastilleresearch/keysniffer) KeySniffer device discovery tools and public advisories
+- [**80**Star][11m] [Go] [ouqiang/mars](https://github.com/ouqiang/mars) HTTP(S)代理, 用于抓包调试
+- [**80**Star][6d] [C] [trailofbits/mishegos](https://github.com/trailofbits/mishegos) A differential fuzzer for x86 decoders
+- [**80**Star][2y] [JS] [vmikhav/antipacman](https://github.com/vmikhav/AntiPacMan) HTML5 Pac-Man game with gesture recognition
- [**80**Star][4y] [Py] [helpsystems/wiwo](https://github.com/helpsystems/wiwo) wiwo is a distributed 802.11 monitoring and injecting system that was designed to be simple and scalable, in which all workers (nodes) can be managed by a Python framework.
-- [**80**Star][2m] [Java] [nats-io/stan.java](https://github.com/nats-io/stan.java) NATS Streaming Java Client
+- [**80**Star][2y] [Py] [zhkl0228/androidattacher](https://github.com/zhkl0228/androidattacher) IDA debugging plugin for android armv7 so
- [**80**Star][3y] [Py] [z00nx/reversemap](https://github.com/z00nx/reversemap) Analyse SQL injection attempts in web server logs
-- [**80**Star][27d] [JS] [yosuke-furukawa/httpstat](https://github.com/yosuke-furukawa/httpstat) httpstat node implementation
-- [**80**Star][3y] [yeyintminthuhtut/awesome-study-resources-for-kernel-hacking](https://github.com/yeyintminthuhtut/awesome-study-resources-for-kernel-hacking) Kernel Hacking study materials collection
-- [**80**Star][9m] [Py] [xajkep/wordlists](https://github.com/xajkep/wordlists) Infosec Wordlists
+- [**80**Star][29d] [JS] [yosuke-furukawa/httpstat](https://github.com/yosuke-furukawa/httpstat) httpstat node implementation
- [**80**Star][3y] [C++] [wpo-foundation/win-shaper](https://github.com/wpo-foundation/win-shaper) Windows traffic-shaping packet filter
-- [**80**Star][5m] [C] [vulhub/redis-rogue-getshell](https://github.com/vulhub/redis-rogue-getshell) 利用redis 4.x/5.x master/slave 模式getshell
- [**80**Star][6m] [Rust] [trailofbits/molasses](https://github.com/trailofbits/molasses) A Rust implementation of the Message Layer Security group messaging protocol
- [**80**Star][1y] [Go] [tleyden/keynuker](https://github.com/tleyden/keynuker)
- [**80**Star][3m] [C++] [thewhiteh4t/flashsploit](https://github.com/thewhiteh4t/flashsploit) Exploitation Framework for ATtiny85 Based HID Attacks
@@ -9527,131 +10114,135 @@ networking routines
- [fn_fuzzy](https://github.com/takahiroharuyama/ida_haru/blob/master/fn_fuzzy/README.org) IDAPython script for fast multiple binary diffing triage
- [stackstring_static](https://github.com/takahiroharuyama/ida_haru/blob/master/stackstring_static/README.org) IDAPython script statically-recovering strings constructed in stack
- [**80**Star][2m] [C] [stef/libsphinx](https://github.com/stef/libsphinx) libsphinx: 用于密码管理的库
+- [**80**Star][5m] [ObjC] [smilezxlee/zxhookdetection](https://github.com/smilezxlee/zxhookdetection) 【iOS应用安全】hook及越狱的基本防护与检测
- [**80**Star][2y] [Jupyter Notebook] [sebdraven/hack_lu_2017](https://github.com/sebdraven/hack_lu_2017) Python and Machine Learning Workshop at Hack.lu 2017
- [**80**Star][2y] [Py] [se55i0n/portscanner](https://github.com/se55i0n/portscanner) 目标tcp端口快速扫描、banner识别、cdn检测
- [**80**Star][3m] [sbousseaden/panache_sysmon](https://github.com/sbousseaden/panache_sysmon) A Sysmon Config for APTs Techniques Detection
- [**80**Star][2m] [Py] [sashs/filebytes](https://github.com/sashs/filebytes) Library to read and edit files in the following formats: Executable and Linking Format (ELF), Portable Executable (PE), MachO and OAT (Android Runtime)
- [**80**Star][2y] [Py] [rsc-dev/pbd](https://github.com/rsc-dev/pbd) Pbd is a Python module to disassemble serialized protocol buffers descriptors (
- [**80**Star][4y] [C] [riscure/rhme-2015](https://github.com/riscure/rhme-2015) RHme+ 2015 challenge
-- [**80**Star][4m] [Py] [ray-cp/pwn_debug](https://github.com/ray-cp/pwn_debug) Aim to help building exploitation of CTFs pwn game quickly
+- [**80**Star][3y] [C++] [radiowar/firegoose](https://github.com/radiowar/firegoose) 中国烧鹅 FireGoose Just like USB Rubber Ducky
- [**80**Star][1y] [Py] [pyn3rd/cve-2018-2893](https://github.com/pyn3rd/cve-2018-2893) CVE-2018-2893-PoC
- [**80**Star][1y] [Py] [ptresearch/mmdetect](https://github.com/ptresearch/mmdetect) Intel ME Manufacturing Mode Detection Tools
- [**80**Star][3y] [Py] [programa-stic/security-advisories](https://github.com/programa-stic/security-advisories) A database of published security advisories reported by the Programa STIC Team at Fundación Sadosky
- [**80**Star][3m] [CSS] [pielco11/doge](https://github.com/pielco11/doge) Darknet Osint Graph Explorer
+- [**80**Star][2y] [C] [oranav/i9300_emmc_toolbox](https://github.com/oranav/i9300_emmc_toolbox) Samsung Galaxy S3 GT-I9300 eMMC toolbox
- [**80**Star][4m] [Shell] [nullarray/netset](https://github.com/nullarray/netset) Operational Security utility and automator.
-- [**80**Star][28d] [C] [nukem9/swissarmyknife](https://github.com/nukem9/swissarmyknife) x64dbg utility for linker map files, diff files, PEiD/IDA signatures, and code signature generation
+- [**80**Star][3m] [Py] [nlitsme/pyidbutil](https://github.com/nlitsme/pyidbutil) extracting information from IDA databases
- [**80**Star][2y] [PHP] [nixawk/fuzzdb](https://github.com/nixawk/fuzzdb) Web Fuzzing Discovery and Attack Pattern Database
-- [**80**Star][8m] [Py] [nccgroup/argumentinjectionhammer](https://github.com/nccgroup/argumentinjectionhammer) A Burp Extension designed to identify argument injection vulnerabilities.
- [**80**Star][10m] [Go] [mkishere/sshsyrup](https://github.com/mkishere/sshsyrup) A low-to-medium interaction SSH Honeypot with features to capture terminal activity and upload to asciinema.org
- [**80**Star][3m] [Py] [menkrep1337/xsscon](https://github.com/menkrep1337/xsscon) Simple XSS Scanner tool
-- [**80**Star][2y] [matt-knight/research](https://github.com/matt-knight/research) Matt's security publications and related materials
- [**80**Star][5m] [Py] [manulqwerty/evil-winrar-gen](https://github.com/manulqwerty/evil-winrar-gen) Generator of malicious Ace files for WinRAR < 5.70 beta 1
+- [**80**Star][1y] [Go] [lzjluzijie/websocks](https://github.com/lzjluzijie/websocks) A secure proxy based on WebSocket. 一个基于 WebSocket 的代理工具
- [**80**Star][3y] [C] [lflare/picoctf_2017_writeup](https://github.com/lflare/picoctf_2017_writeup) PicoCTF 2017 Writeup
- [**80**Star][2y] [C++] [legitbs/quals-2017](https://github.com/legitbs/quals-2017)
- [**80**Star][1y] [Py] [lcatro/cve-2017-7269-echo-poc](https://github.com/lcatro/cve-2017-7269-echo-poc) CVE-2017-7269 回显PoC ,用于远程漏洞检测..
- [**80**Star][2m] [Go] [koenrh/s3enum](https://github.com/koenrh/s3enum) Fast Amazon S3 bucket enumeration tool for pentesters.
- [**80**Star][2y] [C] [klsfct/getshell](https://github.com/klsfct/getshell) 各大平台提权工具
- [**80**Star][12m] [Py] [keybase/python-triplesec](https://github.com/keybase/python-triplesec) A Python port of the triplesec library.
+- [**80**Star][3y] [Py] [januzellij/hopperscripts](https://github.com/januzellij/hopperscripts) Collection of scripts I use in the Hopper disassembler
- [**80**Star][4y] [idapython/bin](https://github.com/idapython/bin) IDAPython binaries
-- [**80**Star][2y] [C] [hvqzao/foolavc](https://github.com/hvqzao/foolavc) foolav successor - loads DLL, executable or shellcode into memory and runs it effectively bypassing AV
-- [**80**Star][3y] [Objective-C++] [hexploitable/memscan](https://github.com/hexploitable/memscan) A memory scanning tool which uses mach_vm* to either dump memory or look for a specific sequence of bytes.
-- [**80**Star][16d] [Go] [grantseltzer/karn](https://github.com/grantseltzer/karn) Simplifying Seccomp enforcement in containerized or non-containerized apps
-- [**80**Star][9m] [Py] [fox-it/mkyara](https://github.com/fox-it/mkyara) Generating YARA rules based on binary code
-- [**80**Star][28d] [Shell] [firecracker-microvm/firecracker-demo](https://github.com/firecracker-microvm/firecracker-demo) A demo running 4000 Firecracker microVMs.
-- [**80**Star][2m] [Py] [fgsect/scat](https://github.com/fgsect/scat) 通过USB解析Qualcomm和Samsung基带的诊断消息,并生成包含蜂窝控制平面消息的GSMTAP数据包流
+- [**80**Star][2m] [JS] [garethflowers/tor-browser-portable](https://github.com/garethflowers/tor-browser-portable) Portable version of the Tor Browser, for Windows
- [**80**Star][4y] [C++] [fastvpseestiou/fastnetmon](https://github.com/fastvpseestiou/fastnetmon) This is old freezed version! Please use
-- [**80**Star][3m] [Shell] [fademind/hosts.extras](https://github.com/fademind/hosts.extras) Extra rules for
- [**80**Star][4y] [fabiobaroni/awesome-chinese-infosec-websites](https://github.com/fabiobaroni/awesome-chinese-infosec-websites) A curated list of Chinese websites and personal blogs about ethical hacking and pentesting
+- [**80**Star][3y] [C] [evil-e/sdb-explorer](https://github.com/evil-e/sdb-explorer) Tool to view and create Microsoft shim database files (SDB).
+- [**80**Star][3m] [Py] [escapingbug/ancypwn](https://github.com/escapingbug/ancypwn) Script to setup pwn environment for CTF with Docker
- [**80**Star][3y] [Py] [davidkorczynski/repeconstruct](https://github.com/davidkorczynski/repeconstruct) automatically unpacking binaries and rebuild the binaries in a manner well-suited for further analysis, specially focused on further manual analysis in IDA pro.
-- [**80**Star][3y] [Py] [coffeehb/ocift](https://github.com/coffeehb/ocift) 一个半自动化命令注入漏洞Fuzz工具(One Semi-automation command injection vulnerability Fuzz tool)
-- [**80**Star][5y] [C] [chokepoint/crypthook](https://github.com/chokepoint/crypthook) TCP/UDP symmetric encryption tunnel wrapper
-- [**80**Star][2y] [Py] [cheeky4n6monkey/4n6-scripts](https://github.com/cheeky4n6monkey/4n6-scripts) Forensic Scripts
+- [**80**Star][2y] [Py] [david942j/defcon-2017-tools](https://github.com/david942j/defcon-2017-tools) DEFCON CTF 2017 Stuff of Shit by HITCON
+- [**80**Star][2m] [C] [cyberdefenseinstitute/cdir](https://github.com/cyberdefenseinstitute/cdir) CDIR (Cyber Defense Institute Incident Response) Collector - live collection tool based on oss tool/library
- [**80**Star][3y] [C++] [cbayet/poolsprayer](https://github.com/cbayet/poolsprayer) Simple library to spray the Windows Kernel Pool
-- [**80**Star][3m] [blockchainlabsnz/awesome-solidity](https://github.com/blockchainlabsnz/awesome-solidity) A curated list of awesome Solidity resources
+- [**80**Star][1y] [Py] [brandonasuncion/reverse-engineering-bluetooth-protocols](https://github.com/brandonasuncion/reverse-engineering-bluetooth-protocols) Intercepting Bluetooth device communication and simulating packet responses of an iPhone from a Raspberry Pi 3
- [**80**Star][10m] [JS] [bkth/attacking-edge-through-the-javascript-compiler](https://github.com/bkth/attacking-edge-through-the-javascript-compiler) Attacking-Edge-Through-the-JavaScript-Compiler
- [**80**Star][1y] [Py] [ax330d/functions-plus](https://github.com/ax330d/functions-plus) IDA Pro plugin to show functions in a tree view
- [**80**Star][2y] [Go] [asciimoo/filtron](https://github.com/asciimoo/filtron) filtron:反向HTTP代码
-- [**80**Star][5m] [Ruby] [argos83/ritm](https://github.com/argos83/ritm) Ruby In The Middle (HTTP/HTTPS interception proxy)
-- [**80**Star][2m] [Py] [angr/phuzzer](https://github.com/angr/phuzzer) The new phuzzing framework!
- [**80**Star][3y] [Py] [alyakhtar/katastrophe](https://github.com/alyakhtar/katastrophe) Command Line Tool to download torrents
- [**80**Star][1y] [C#] [advancedhacker101/c-sharp-r.a.t-server](https://github.com/advancedhacker101/c-sharp-r.a.t-server) This is a remote administration tool built with c#
- [**80**Star][2y] [Shell] [adi1090x/hackapk](https://github.com/adi1090x/hackapk) An Advanced Tool For Complete Apk-Modding In Termux ...
-- [**80**Star][1m] [C] [0xcpu/winaltsyscallhandler](https://github.com/0xcpu/winaltsyscallhandler) Some research on AltSystemCallHandlers functionality in Windows 10 20H1 18999
-- [**79**Star][7d] [PHP] [automattic/vip-coding-standards](https://github.com/automattic/vip-coding-standards) PHP_CodeSniffer ruleset to enforce WordPress.com VIP and VIP Go coding standards
-- [**79**Star][28d] [Rust] [warner/magic-wormhole.rs](https://github.com/warner/magic-wormhole.rs) NOT FUNCTIONAL YET. Slowly porting magic-wormhole to Rust. See wiki for game plan.
+- [**79**Star][3y] [Go] [ring04h/s5.go](https://github.com/ring04h/s5.go) Socks5 proxy server by golang
- [**79**Star][1y] [Shell] [iaik/ios-analysis](https://github.com/iaik/ios-analysis) Automated Binary Analysis on iOS
+- [**79**Star][5y] [Py] [bishopfox/anti-anti-automation](https://github.com/bishopfox/anti-anti-automation) Anti-Anti-Automation Framework
- [**79**Star][3y] [Py] [lanjelot/albatar](https://github.com/lanjelot/albatar) Albatar is a SQLi exploitation framework in Python
- [**79**Star][1m] [Py] [momika233/clamav_0day_exploit](https://github.com/momika233/clamav_0day_exploit) ClamAV_0Day_exploit
-- [**79**Star][2y] [JS] [vmikhav/antipacman](https://github.com/vmikhav/AntiPacMan) HTML5 Pac-Man game with gesture recognition
-- [**79**Star][7d] [HTML] [mitre-attack/attack-website](https://github.com/mitre-attack/attack-website) MITRE ATT&CK Website
-- [**79**Star][2y] [Py] [zhkl0228/androidattacher](https://github.com/zhkl0228/androidattacher) IDA debugging plugin for android armv7 so
+- [**79**Star][2m] [Rust] [mozilla/authenticator-rs](https://github.com/mozilla/authenticator-rs) Rust library to interact with Security Keys, used by Firefox
- [**79**Star][2y] [C] [yifanlu/uvloader](https://github.com/yifanlu/uvloader) Userland Vita Loader for loading unsigned executables on your Vita
+- [**79**Star][3y] [yeyintminthuhtut/awesome-study-resources-for-kernel-hacking](https://github.com/yeyintminthuhtut/awesome-study-resources-for-kernel-hacking) Kernel Hacking study materials collection
- [**79**Star][3y] [Py] [xyntax/bingc](https://github.com/xyntax/bingc) 基于Bing搜索引擎的C段/旁站查询,多线程,支持API
-- [**79**Star][3y] [PowerShell] [winscripting/uac-bypass](https://github.com/winscripting/uac-bypass)
+- [**79**Star][3y] [PS] [winscripting/uac-bypass](https://github.com/winscripting/uac-bypass)
- [**79**Star][2y] [Py] [viralmaniar/in-spectre-meltdown](https://github.com/viralmaniar/in-spectre-meltdown) This tool allows to check speculative execution side-channel attacks that affect many modern processors and operating systems designs. CVE-2017-5754 (Meltdown) and CVE-2017-5715 (Spectre) allows unprivileged processes to steal secrets from privileged processes. These attacks present 3 different ways of attacking data protection measures on CPUs …
- [**79**Star][3y] [C++] [torps/torps](https://github.com/torps/torps) The Tor Path Simulator
- [**79**Star][3m] [Go] [tillson/git-hound](https://github.com/tillson/git-hound) GitHound pinpoints exposed API keys on GitHub using pattern matching, commit history searching, and a unique result scoring system. A batch-catching, pattern-matching, patch-attacking secret snatcher.
-- [**79**Star][12m] [PowerShell] [thom-s/docx-embeddedhtml-injection](https://github.com/thom-s/docx-embeddedhtml-injection) Word 2016 vulnerability allows injecting HTML/JS code into a docx file's embeddedHTML="" tags.
+- [**79**Star][1y] [PS] [thom-s/docx-embeddedhtml-injection](https://github.com/thom-s/docx-embeddedhtml-injection) Word 2016 vulnerability allows injecting HTML/JS code into a docx file's embeddedHTML="" tags.
- [**79**Star][4m] [Assembly] [thecodeartist/elf-parser](https://github.com/thecodeartist/elf-parser) Identifying/Extracting various sections of an ELF file
- [**79**Star][5y] [C++] [tandasat/findpg](https://github.com/tandasat/findpg) Windbg extension to find PatchGuard pages
- [**79**Star][9m] [Go] [subfinder/goaltdns](https://github.com/subfinder/goaltdns) A permutation generation tool written in golang
-- [**79**Star][5m] [Objective-C] [smilezxlee/zxhookdetection](https://github.com/smilezxlee/zxhookdetection) 【iOS应用安全】hook及越狱的基本防护与检测
- [**79**Star][3y] [C] [smealum/udsploit](https://github.com/smealum/udsploit) UDS exploit + kernel hooks for 11.3
+- [**79**Star][3y] [Py] [sjhilt/gaspot](https://github.com/sjhilt/gaspot) GasPot Released at Blackhat 2015
- [**79**Star][1y] [Py] [shendo/websnort](https://github.com/shendo/websnort) Web service for scanning pcaps with snort
-- [**79**Star][20d] [Go] [schollz/find3-cli-scanner](https://github.com/schollz/find3-cli-scanner) The command-line scanner that supports Bluetooth and WiFi
+- [**79**Star][22d] [Go] [schollz/find3-cli-scanner](https://github.com/schollz/find3-cli-scanner) The command-line scanner that supports Bluetooth and WiFi
- [**79**Star][1y] [Py] [sawzeeyy/sanitiz3r](https://github.com/sawzeeyy/sanitiz3r) A python script that filters, checks the validity, generates clickable link(s) of subdomain(s), and reports their status
-- [**79**Star][10m] [Py] [plizonczyk/noiseprotocol](https://github.com/plizonczyk/noiseprotocol) Noise Protocol Framework - Python 3 implementation
-- [**79**Star][2m] [Py] [pfalcon/scratchablock](https://github.com/pfalcon/scratchablock) Yet another crippled decompiler project
+- [**79**Star][10m] [Py] [purduepaml/trojannn](https://github.com/purduepaml/trojannn) Trojan Attack on Neural Network
+- [**79**Star][6m] [PS] [powershell/psdscresources](https://github.com/powershell/psdscresources)
- [**79**Star][7m] [PHP] [ostark/upper](https://github.com/ostark/upper) Integrates Edge Caches like Fastly, KeyCDN, Cloudflare and Varnish with Craft.
-- [**79**Star][2y] [C] [oranav/i9300_emmc_toolbox](https://github.com/oranav/i9300_emmc_toolbox) Samsung Galaxy S3 GT-I9300 eMMC toolbox
- [**79**Star][4m] [Batchfile] [op7ic/edr-testing-script](https://github.com/op7ic/edr-testing-script) Test the accuracy of Endpoint Detection and Response (EDR) software with simple script which executes various ATT&CK/LOLBAS/Invoke-CradleCrafter/Invoke-DOSfuscation payloads
- [**79**Star][11m] [Makefile] [onioniot/openwrt-packages](https://github.com/onioniot/openwrt-packages) Onion Packages Feed for OpenWRT
+- [**79**Star][7m] [nusr/awesome-macos-command-line-zh](https://github.com/nusr/awesome-macos-command-line-zh) 用你的 macOS 终端搞事情。(Use your macOS terminal shell to do awesome things. )
- [**79**Star][3y] [C] [nsacyber/netfil](https://github.com/nsacyber/netfil) A kernel network manager with monitoring and limiting capabilities for macOS. #nsacyber
-- [**79**Star][3m] [Py] [nlitsme/pyidbutil](https://github.com/nlitsme/pyidbutil) extracting information from IDA databases
+- [**79**Star][1y] [Dockerfile] [nitr4x/reverse-me](https://github.com/nitr4x/reverse-me) This repository contains a docker container dedicated to reverse engineering
- [**79**Star][2y] [C++] [nezza/sdqanalyzer](https://github.com/nezza/sdqanalyzer) A Saleae analyzer plugin for the SDQ (Apple Lightning, MagSafe, Battery) protocol.
- [**79**Star][2y] [Go] [netxfly/xsec-dns-proxy](https://github.com/netxfly/xsec-dns-proxy) xsec-dns-proxy:DNS代理服务器,可以将DNS请求代理到后端的DNS服务器中,在代理的过程中会将dns log写入到数据库中
- [**79**Star][2y] [nanqinlang-mogic/v2ray](https://github.com/nanqinlang-mogic/v2ray) template with websocket+tls+nginx of v2ray
- [**79**Star][10m] [Shell] [naltun/eyes.sh](https://github.com/naltun/eyes.sh) Let's you perform domain/IP information gathering... in BASH! Wasn't it esr who said "With enough eyeballs, all your IP info are belong to us?"
- [**79**Star][3y] [Py] [mozilla/http-observatory-cli](https://github.com/mozilla/http-observatory-cli) The command line tool for the HTTP Observatory
- [**79**Star][4y] [mi3security/su-a-cyder](https://github.com/mi3security/su-a-cyder) Home-Brewed iOS Malware PoC Generator (BlackHat ASIA 2016)
-- [**79**Star][2y] [PowerShell] [kromerm/adflab](https://github.com/kromerm/adflab) Azure Data Factory hands-on lab, self-paced. Learn how to lift & shift SSIS packages to the Cloud with ADF. Build new ETL pipelines in ADF, transform data at scale, load Azure Data Warehouse data marts. Also walks through operationalizing ADF pipelines with scheduling and monitoring modules.
+- [**79**Star][5d] [Py] [lightswitch05/hosts](https://github.com/lightswitch05/hosts) Hostfile blocklist for ads and tracking, updated regularly
+- [**79**Star][10m] [Py] [laconicwolf/nmap-scan-to-csv](https://github.com/laconicwolf/nmap-scan-to-csv) Converts Nmap XML output to csv file, and other useful functions
+- [**79**Star][2y] [PS] [kromerm/adflab](https://github.com/kromerm/adflab) Azure Data Factory hands-on lab, self-paced. Learn how to lift & shift SSIS packages to the Cloud with ADF. Build new ETL pipelines in ADF, transform data at scale, load Azure Data Warehouse data marts. Also walks through operationalizing ADF pipelines with scheduling and monitoring modules.
- [**79**Star][8m] [Java] [kingsabri/godofwar](https://github.com/kingsabri/godofwar) GodOfWar - Malicious Java WAR builder with built-in payloads
- [**79**Star][6y] [Py] [julienpalard/ashttp](https://github.com/julienpalard/ashttp) Shell command, that expose any other command as http. To expose top as http, try : ashttp -p8080 top ; then try http://localhost/8080 and hit F5 to refresh your top :)
-- [**79**Star][1m] [Py] [jas502n/cve-2019-3396](https://github.com/jas502n/cve-2019-3396) Confluence 未授权 RCE (CVE-2019-3396) 漏洞
-- [**79**Star][3y] [Py] [januzellij/hopperscripts](https://github.com/januzellij/hopperscripts) Collection of scripts I use in the Hopper disassembler
+- [**79**Star][2y] [Py] [imiyoo2010/teye_scanner_for_book](https://github.com/imiyoo2010/teye_scanner_for_book) 《白帽子讲Web扫描》书籍参考代码
+- [**79**Star][2m] [ignitetechnologies/vulnhub-ctf-writeups](https://github.com/ignitetechnologies/vulnhub-ctf-writeups) This cheasheet is aimed at the CTF Players and Beginners to help them sort Vulnhub Labs. This list contains all the writeups available on hackingarticles.
+- [**79**Star][2y] [iamhdt/ecommerce-website-security-checklist](https://github.com/iamhdt/ecommerce-website-security-checklist) List of considerations for commerce site auditing and security teams. This is summary of action points and areas that need to be built into the Techinical Specific Document, or will be checked in the Security testing phases.
+- [**79**Star][7m] [Java] [i2p/i2p.i2p-bote](https://github.com/i2p/i2p.i2p-bote) I2P-Bote is a serverless, encrypted e-mail application.
+- [**79**Star][3y] [Objective-C++] [hexploitable/memscan](https://github.com/hexploitable/memscan) A memory scanning tool which uses mach_vm* to either dump memory or look for a specific sequence of bytes.
+- [**79**Star][1y] [Ruby] [hahwul/metasploit-autopwn](https://github.com/hahwul/metasploit-autopwn) db_autopwn plugin of metasploit
+- [**79**Star][2y] [Py] [hackndo/krack-poc](https://github.com/hackndo/krack-poc) Krack POC
- [**79**Star][7m] [Py] [guedou/r2m2](https://github.com/guedou/r2m2) radare2 + miasm2 = ♥
- [**79**Star][2m] [Py] [google/giftstick](https://github.com/google/giftstick) 1-Click push forensics evidence to the cloud
- [**79**Star][3y] [glinares/hephaestus](https://github.com/glinares/hephaestus) Open Source Office Malware Generation & Polymorphic Engine for Red Teams and QA testing
-- [**79**Star][8d] [Py] [githubmaidou/tools](https://github.com/githubmaidou/tools) Python渗透漏洞工具
+- [**79**Star][7d] [Py] [githubmaidou/tools](https://github.com/githubmaidou/tools) Python渗透漏洞工具
- [**79**Star][4y] [C] [gdbinit/mach_race](https://github.com/gdbinit/mach_race) Exploit code for CVE-2016-1757
- [**79**Star][4m] [JS] [frida/frida-presentations](https://github.com/frida/frida-presentations) Public presentations given on Frida at conferences
-- [**79**Star][3m] [Py] [escapingbug/ancypwn](https://github.com/escapingbug/ancypwn) Script to setup pwn environment for CTF with Docker
-- [**79**Star][2m] [PowerShell] [ecstatic-nobel/posint](https://github.com/ecstatic-nobel/posint) Gather Open-Source Intelligence using PowerShell.
-- [**79**Star][6m] [C++] [djhohnstein/processreimaging](https://github.com/djhohnstein/processreimaging) Process reimaging proof of concept code
+- [**79**Star][1y] [f0rgetting/presentations](https://github.com/f0rgetting/presentations)
- [**79**Star][12m] [C#] [djhohnstein/.net-profiler-dll-hijack](https://github.com/djhohnstein/.net-profiler-dll-hijack) Implementation of the .NET Profiler DLL hijack in C#
-- [**79**Star][2y] [Py] [david942j/defcon-2017-tools](https://github.com/david942j/defcon-2017-tools) DEFCON CTF 2017 Stuff of Shit by HITCON
+- [**79**Star][2y] [Go] [derekchiang/mesos-bitcoin-miner](https://github.com/derekchiang/mesos-bitcoin-miner) A bitcoin mining framework on Mesos
+- [**79**Star][4m] [JS] [de1ta-team/de1ctf2019](https://github.com/de1ta-team/de1ctf2019) De1CTF2019
- [**79**Star][2y] [Shell] [daradib/sidedoor](https://github.com/daradib/sidedoor) SSH connection daemon for Debian/Raspbian/Ubuntu/etc
- [**79**Star][3y] [Py] [dancezarp/tbdex](https://github.com/dancezarp/tbdex)
+- [**79**Star][1y] [Py] [damian89/xssfinder](https://github.com/damian89/xssfinder) Toolset for detecting reflected xss in websites
- [**79**Star][6y] [Py] [corelan/dnshjmon](https://github.com/corelan/dnshjmon) dnshjmon is a free tool to monitor public DNS records and report hijacks
- [**79**Star][4y] [PHP] [coderpirata/xpl-search](https://github.com/coderpirata/xpl-search) Search exploits in multiple exploit databases!
- [**79**Star][1y] [C#] [certsocietegenerale/notifysecurity](https://github.com/certsocietegenerale/notifysecurity) Outlook add-in companion to report suspicious mail easily
- [**79**Star][1y] [Py] [cdhowie/netflix-no-ipv6-dns-proxy](https://github.com/cdhowie/netflix-no-ipv6-dns-proxy) Fix for Netflix blocking various IPv6 tunnels by returning no results for AAAA queries of Netflix domains
- [**79**Star][2y] [Py] [brianwrf/hackrequests](https://github.com/brianwrf/hackrequests) It is a dedicated requests lib that supports cookie, headers, get/post, etc. And it also supports rendering the response (e.g. Javascript, CSS, etc.) of GET requests by using PhantomJs enginee.
-- [**79**Star][1y] [Py] [brandonasuncion/reverse-engineering-bluetooth-protocols](https://github.com/brandonasuncion/reverse-engineering-bluetooth-protocols) Intercepting Bluetooth device communication and simulating packet responses of an iPhone from a Raspberry Pi 3
- [**79**Star][2y] [Py] [billyv4/id-entify](https://github.com/billyv4/id-entify) Search for information related to a domain: Emails - IP addresses - Domains - Information on WEB technology - Type of Firewall - NS and MX records - Nmap to IP addresses and Domains.
- [**79**Star][9m] [axiomzen/eth-random](https://github.com/axiomzen/eth-random) commit-reveal RNG method in Ethereum
+- [**79**Star][2y] [C] [axi0mx/ios-kexec-utils](https://github.com/axi0mx/ios-kexec-utils) boot LLB/iBoot/iBSS/iBEC image from a jailbroken iOS kernel
+- [**79**Star][3y] [Py] [anfractuosity/ultrasonicnetworking](https://github.com/anfractuosity/ultrasonicnetworking) Ultrasonic networking - Transmitting TCP/IP via Ultrasound
- [**79**Star][1y] [C] [adafruit/adafruit_blesniffer_python](https://github.com/adafruit/adafruit_blesniffer_python) Python API for Adafruit's Bluefruit LE Sniffer
+- [**79**Star][6m] [Py] [abaykan/53r3n17y](https://github.com/abaykan/53r3n17y) Python based script for Information Gathering.
+- [**78**Star][3m] [zhoushuai0207/ladder](https://github.com/zhoushuai0207/ladder) 梯子整理,科学上网
- [**78**Star][8m] [Py] [reswitched/loaders](https://github.com/reswitched/loaders) IDA Loaders for Switch binaries(NSO / NRO)
-- [**78**Star][3y] [Go] [ring04h/s5.go](https://github.com/ring04h/s5.go) Socks5 proxy server by golang
+- [**78**Star][2m] [uknowsec/sharpdecryptpwd](https://github.com/uknowsec/sharpdecryptpwd) 对密码已保存在 Windwos 系统上的部分程序进行解析,包括:Navicat,TeamViewer,FileZilla,WinSCP,Xmangager系列产品(Xshell,Xftp)。
- [**78**Star][10m] [JS] [webbreacher/yoga](https://github.com/webbreacher/yoga) Your OSINT Graphical Analyzer
-- [**78**Star][28d] [Py] [mr-un1k0d3r/redteamscripts](https://github.com/mr-un1k0d3r/redteamscripts) Repo with various Red Team scripts
-- [**78**Star][3y] [bastilleresearch/keysniffer](https://github.com/bastilleresearch/keysniffer) KeySniffer device discovery tools and public advisories
+- [**78**Star][30d] [Py] [mr-un1k0d3r/redteamscripts](https://github.com/mr-un1k0d3r/redteamscripts) Repo with various Red Team scripts
+- [**78**Star][9m] [Py] [elliiot/ghidra_darknight](https://github.com/elliiot/ghidra_darknight) DarkNight theme for Ghidra
- [**78**Star][2y] [Go] [oftn-oswg/zerodrop](https://github.com/oftn-oswg/zerodrop) A stealth URL toolkit optimized for bypassing censorship filters and/or dropping malware
-- [**78**Star][8m] [Py] [sxcurity/230-oob](https://github.com/lc/230-OOB) An Out-of-Band XXE server for retrieving file contents over FTP.
- [**78**Star][5y] [Py] [cylance/smbtrap](https://github.com/cylance/SMBTrap) Tools developed to test the Redirect to SMB issue
- [**78**Star][5y] [C++] [helpsystems/agafi](https://github.com/helpsystems/Agafi) A gadget finder and a ROP-Chainer tool for x86 platforms
- [**78**Star][11m] [Py] [siberas/sjet](https://github.com/siberas/sjet) siberas JMX exploitation toolkit
-- [**78**Star][19d] [Shell] [radareorg/radare2-pm](https://github.com/radareorg/radare2-pm) Package Manager for Radare2
+- [**78**Star][21d] [Shell] [radareorg/radare2-pm](https://github.com/radareorg/radare2-pm) Package Manager for Radare2
+- [**78**Star][3y] [C#] [virb3/dneditor](https://github.com/virb3/dneditor) A .NET assembly editor based on dnlib
+- [**78**Star][8d] [Py] [unkn0wnh4ckr/hackers-tool-kit](https://github.com/unkn0wnh4ckr/hackers-tool-kit) Its a framework filled with alot of options and hacking tools you use directly in the script from brute forcing to payload making im still adding more stuff i now have another tool out called htkl-lite its hackers-tool-kit just not as big and messy to see updates check on my instagram @tuf_unkn0wn or if there are any problems message me on insta…
- [**78**Star][2y] [Py] [trolldbois/python-haystack](https://github.com/trolldbois/python-haystack) Process heap analysis framework - Windows/Linux - record type inference and forensics
- [**78**Star][6y] [Py] [t-s-a/smbspider](https://github.com/t-s-a/smbspider) SMB Spider is a lightweight python utility for searching SMB/CIFS/Samba file shares. While performing a penetration test, the need to search hundreds of hosts for sensitive password files resulted in this project.
- [**78**Star][3y] [C] [stevemk14ebr/unihook](https://github.com/stevemk14ebr/unihook) Intercept arbitrary functions at run-time, without knowing their typedefs
@@ -9662,212 +10253,228 @@ networking routines
- [**78**Star][4y] [C#] [realalexandergeorgiev/tempracer](https://github.com/realalexandergeorgiev/tempracer) A Windows priviledge escalation tool (abusing race conditions)
- [**78**Star][4y] [Py] [qtek/qradio](https://github.com/qtek/qradio) QRadio ~ Best Threat Intelligence Radio ~ Tune In!
- [**78**Star][3y] [Py] [pythonone/ms17-010](https://github.com/pythonone/ms17-010) MS17-010 exploits, payloads, and scanners
-- [**78**Star][2m] [JS] [pownjs/pown-whoarethey](https://github.com/pownjs/pown-whoarethey)
-- [**78**Star][6m] [PowerShell] [powershell/psdscresources](https://github.com/powershell/psdscresources)
+- [**78**Star][3m] [JS] [pownjs/pown-whoarethey](https://github.com/pownjs/pown-whoarethey)
+- [**78**Star][2y] [Py] [pinkflawd/r2graphity](https://github.com/pinkflawd/r2graphity) Creating function call graphs based on radare2 framwork, plot fancy graphs and extract behavior indicators
+- [**78**Star][2m] [Py] [pfalcon/scratchablock](https://github.com/pfalcon/scratchablock) Yet another crippled decompiler project
- [**78**Star][2y] [Py] [peterpt/fuzzbunch](https://github.com/peterpt/fuzzbunch) Shadow Brokers NSA fuzzbunch tool leak . With windows auto instalation script
- [**78**Star][1m] [Py] [palkeo/pakala](https://github.com/palkeo/pakala) Offensive vulnerability scanner for ethereum, and symbolic execution tool for the Ethereum Virtual Machine
- [**78**Star][6y] [C] [oblique/wificurse](https://github.com/oblique/wificurse) WiFi Jamming tool
-- [**78**Star][1y] [Dockerfile] [nitr4x/reverse-me](https://github.com/nitr4x/reverse-me) This repository contains a docker container dedicated to reverse engineering
- [**78**Star][2m] [Py] [miyagaw61/exgdb](https://github.com/miyagaw61/exgdb) Extension for GDB
- [**78**Star][6m] [Go] [mattevans/pwned-passwords](https://github.com/mattevans/pwned-passwords)
- [**78**Star][1y] [Py] [markbaggett/domain_stats](https://github.com/markbaggett/domain_stats)
- [**78**Star][3y] [HTML] [malqr/malqr.github.io](https://github.com/malqr/malqr.github.io) MalQR is a collection of malicious QR Codes and Barcodes you can use to test the security of your scanners.
-- [**78**Star][10m] [Java] [lufeirider/project](https://github.com/lufeirider/project)
- [**78**Star][6y] [Zeek] [liamrandall/bromalware-exercise](https://github.com/liamrandall/bromalware-exercise)
-- [**78**Star][7m] [Py] [leoid/matchandreplace](https://github.com/leoid/matchandreplace) Match and Replace script used to automatically generate JSON option file to BurpSuite
-- [**78**Star][10m] [Py] [laconicwolf/nmap-scan-to-csv](https://github.com/laconicwolf/nmap-scan-to-csv) Converts Nmap XML output to csv file, and other useful functions
- [**78**Star][3m] [C] [kelvinhack/devicemon](https://github.com/kelvinhack/devicemon) VT-based PCI device monitor (SPI)
- [**78**Star][4y] [C] [kala13x/scap](https://github.com/kala13x/scap) Network Sniffer (Scan and Capture Incoming Packets)
- [**78**Star][1m] [Java] [jenkinsci/dependency-check-plugin](https://github.com/jenkinsci/dependency-check-plugin) Jenkins plugin for OWASP Dependency-Check. Inspects project components for known vulnerabilities (e.g. CVEs).
- [**78**Star][3y] [C++] [jeffbryner/nbdserver](https://github.com/jeffbryner/nbdserver) Network Block Device Server for windows with a DFIR/forensic focus.
- [**78**Star][3y] [JS] [jacobreynolds/ssrfdetector](https://github.com/jacobreynolds/ssrfdetector) Server-side request forgery detector
-- [**78**Star][2y] [Py] [imiyoo2010/teye_scanner_for_book](https://github.com/imiyoo2010/teye_scanner_for_book) 《白帽子讲Web扫描》书籍参考代码
- [**78**Star][5y] [Py] [idanr1986/cuckoo](https://github.com/idanr1986/cuckoo) A Cuckoo Sandbox Extension for Android
-- [**78**Star][2y] [iamhdt/ecommerce-website-security-checklist](https://github.com/iamhdt/ecommerce-website-security-checklist) List of considerations for commerce site auditing and security teams. This is summary of action points and areas that need to be built into the Techinical Specific Document, or will be checked in the Security testing phases.
- [**78**Star][3y] [Py] [hatriot/shellme](https://github.com/hatriot/shellme) simple shellcode generator
-- [**78**Star][2y] [Py] [hackndo/krack-poc](https://github.com/hackndo/krack-poc) Krack POC
- [**78**Star][8m] [Py] [gelim/nmap-erpscan](https://github.com/gelim/nmap-erpscan) Nmap custom probes for better detecting SAP services
- [**78**Star][6y] [Go] [gabrielg/cve-2014-1266-poc](https://github.com/gabrielg/cve-2014-1266-poc) Apple OS X/iOS SSL flaw demonstration
- [**78**Star][7y] [C#] [g0tmi1k/vulninjector](https://github.com/g0tmi1k/vulninjector) Generates a Windows 'vulnerable' machine from ISOs
- [**78**Star][1y] [Ruby] [frohoff/ciphr](https://github.com/frohoff/ciphr) CLI crypto swiss-army knife for performing and composing encoding, decoding, encryption, decryption, hashing, and other various cryptographic operations on streams of data from the command line; mostly intended for ad hoc, infosec-related uses.
-- [**78**Star][1y] [f0rgetting/presentations](https://github.com/f0rgetting/presentations)
-- [**78**Star][22d] [C] [etnaviv/etna_viv](https://github.com/etnaviv/etna_viv) Etnaviv is a project to build an FOSS driver for the Vivante GCxxx series of embedded GPUs - Tools and reverse engineering repository
+- [**78**Star][24d] [C] [etnaviv/etna_viv](https://github.com/etnaviv/etna_viv) Etnaviv is a project to build an FOSS driver for the Vivante GCxxx series of embedded GPUs - Tools and reverse engineering repository
- [**78**Star][3y] [C] [ernacktob/esp8266_wifi_raw](https://github.com/ernacktob/esp8266_wifi_raw) ESP8266 wifi packet injection and receiving experiment
- [**78**Star][2y] [C] [elfmaster/saruman](https://github.com/elfmaster/saruman) ELF anti-forensics exec, for injecting full dynamic executables into process image (With thread injection)
- [**78**Star][2y] [Shell] [demonsec666/secist_script](https://github.com/demonsec666/secist_script)
-- [**78**Star][4m] [JS] [de1ta-team/de1ctf2019](https://github.com/de1ta-team/de1ctf2019) De1CTF2019
-- [**78**Star][1y] [Py] [damian89/xssfinder](https://github.com/damian89/xssfinder) Toolset for detecting reflected xss in websites
- [**78**Star][3y] [Go] [cyphar/mkonion](https://github.com/cyphar/mkonion) A simple way to create a Tor onion service for existing Docker containers.
-- [**78**Star][2m] [C] [cyberdefenseinstitute/cdir](https://github.com/cyberdefenseinstitute/cdir) CDIR (Cyber Defense Institute Incident Response) Collector - live collection tool based on oss tool/library
+- [**78**Star][10m] [Py] [cymmetria/honeycomb](https://github.com/cymmetria/honeycomb) An extensible honeypot framework
+- [**78**Star][4m] [Py] [clirimemini/keye](https://github.com/clirimemini/keye) Keye is a reconnaissance tool that was written in Python with SQLite3 integrated. After adding a single URL, or a list of URLs, it will make a request to these URLs and try to detect changes based on their response's body length.
- [**78**Star][6y] [Py] [cea-sec/torpylle](https://github.com/cea-sec/torpylle) A Python / Scapy implementation of the OR (TOR) protocol.
-- [**78**Star][3y] [Py] [anfractuosity/ultrasonicnetworking](https://github.com/anfractuosity/ultrasonicnetworking) Ultrasonic networking - Transmitting TCP/IP via Ultrasound
+- [**78**Star][6y] [Shell] [breadtk/onion_pi](https://github.com/breadtk/onion_pi) Make a Raspberry Pi into a Anonymizing Tor Proxy!
+- [**77**Star][2m] [Shell] [acris/shadowsocks-asuswrt-merlin](https://github.com/acris/shadowsocks-asuswrt-merlin) Shadowsock for Asuswrt-Merlin New Gen
+- [**77**Star][10m] [JS] [qious/ss-panel-server](https://github.com/qious/ss-panel-server) 基于企业微信的科学上网分享站点 - 后端
+- [**77**Star][11m] [Java] [thelinuxchoice/droidtracker](https://github.com/thelinuxchoice/droidtracker) Script to generate an Android App to track location in real time
- [**77**Star][5m] [C] [virustotal/c-vtapi](https://github.com/virustotal/c-vtapi) Official implementation of the VirusTotal API in C programming language
+- [**77**Star][16d] [C] [hasherezade/module_overloading](https://github.com/hasherezade/module_overloading) A more stealthy variant of "DLL hollowing"
- [**77**Star][2m] [comwrg/fuck-gfw](https://github.com/comwrg/fuck-gfw) 记录各个包管理器使用代理的方法, 因为GFW已经浪费了已经数不清的时间, FUCK GFW
+- [**77**Star][1m] [C++] [foxhex0ne/hyperviper](https://github.com/foxhex0ne/hyperviper) Toolkit for Hyper-V security research
+- [**77**Star][2m] [C] [iqiyi/qnsm](https://github.com/iqiyi/qnsm) QNSM is network security monitoring framework based on DPDK.
- [**77**Star][1y] [C] [contionmig/kernelmode-bypass](https://github.com/ContionMig/KernelMode-Bypass) This is a source to a bypass i made for some games, for now this should work f or VAC, BE and EAC. The only downside is that you will need to find a exploit to load the driver
- [**77**Star][3y] [C++] [fsecurelabs/cve-2016-7255](https://github.com/FSecureLABS/CVE-2016-7255) An exploit for CVE-2016-7255 on Windows 7/8/8.1/10(pre-anniversary) 64 bit
- [**77**Star][3m] [Batchfile] [phoenix1747/fake-sandbox](https://github.com/Phoenix1747/fake-sandbox)
- [**77**Star][5y] [C++] [zer0mem/minihypervisorproject](https://github.com/zer0mem/minihypervisorproject) IntelVT-X nice feature -> tool
- [**77**Star][2y] [Py] [wofeiwo/webshell-find-tools](https://github.com/wofeiwo/webshell-find-tools) 分析web访问日志以及web目录文件属性,用于根据查找可疑后门文件的相关脚本。
-- [**77**Star][3y] [C#] [virb3/dneditor](https://github.com/virb3/dneditor) A .NET assembly editor based on dnlib
+- [**77**Star][14d] [C++] [versprite/research](https://github.com/versprite/research) VerSprite Security Research
- [**77**Star][1m] [HTML] [vergl4s/pentesting-dump](https://github.com/vergl4s/pentesting-dump) Scripts, tools, and proof-of-concepts to aid in a penetration test.
- [**77**Star][2y] [PHP] [tuhinshubhra/shellstack](https://github.com/tuhinshubhra/shellstack) A PHP Based Tool That Helps You To Manage All Your Backdoored Websites Efficiently.
- [**77**Star][4y] [Py] [trolldbois/sslsnoop](https://github.com/trolldbois/sslsnoop) Live SSH/SSL/TLS decryption - extraction of secret keys from live process memory
+- [**77**Star][3y] [C] [tinysec/iathook](https://github.com/tinysec/iathook) windows kernelmode and usermode IAT hook
- [**77**Star][4m] [Py] [thundergunexpress/badministration](https://github.com/thundergunexpress/badministration)
-- [**77**Star][25d] [Go] [tarampampam/mikrotik-hosts-parser](https://github.com/tarampampam/mikrotik-hosts-parser)
+- [**77**Star][2y] [Py] [tezukanice/office8570](https://github.com/tezukanice/office8570) CVE20178570
+- [**77**Star][27d] [Go] [tarampampam/mikrotik-hosts-parser](https://github.com/tarampampam/mikrotik-hosts-parser)
- [**77**Star][3y] [HTML] [szimeus/evalyzer](https://github.com/szimeus/evalyzer) Using WinDBG to tap into JavaScript and help with deobfuscation and browser exploit detection
+- [**77**Star][4y] [PHP] [subtlescope/bash-ransomware](https://github.com/subtlescope/bash-ransomware) Simple Bash Rasomware for use in Cyber Exercises
- [**77**Star][2y] [Py] [stasinopoulos/jaidam](https://github.com/stasinopoulos/jaidam) Jaidam is an open source penetration testing tool that would take as input a list of domain names, scan them, determine if wordpress or joomla platform was used and finally check them automatically, for web vulnerabilities using two well‐known open source tools, WPScan and Joomscan.
-- [**77**Star][3y] [Py] [sjhilt/gaspot](https://github.com/sjhilt/gaspot) GasPot Released at Blackhat 2015
+- [**77**Star][3y] [PHP] [secwiki/webshell-2](https://github.com/secwiki/webshell-2) Webshell
+- [**77**Star][3y] [Py] [securitystreak/security-scripts](https://github.com/securitystreak/security-scripts) A collection of public offensive and defensive security related scripts for InfoSec students.
+- [**77**Star][1y] [Java] [schollz/find3-android-scanner](https://github.com/schollz/find3-android-scanner) An android app that scans Bluetooth and WiFi for FIND3
- [**77**Star][4m] [PHP] [rizer0/blind-bash](https://github.com/rizer0/blind-bash) Obfuscate your Bash Code
-- [**77**Star][2y] [Py] [pinkflawd/r2graphity](https://github.com/pinkflawd/r2graphity) Creating function call graphs based on radare2 framwork, plot fancy graphs and extract behavior indicators
+- [**77**Star][3d] [Ruby] [r00t-3xp10it/resource_files](https://github.com/r00t-3xp10it/resource_files) mosquito - Automating reconnaissance and brute force attacks
+- [**77**Star][2m] [Py] [pingxcpost/f-nascan-plus](https://github.com/pingxcpost/f-nascan-plus) F-NAScan-PLUS 安服资产搜集
- [**77**Star][1y] [C#] [parsingteam/redlogin](https://github.com/parsingteam/redlogin) Red Login: SSH Brute-force Tools
- [**77**Star][1y] [Py] [paolomonti42/salt](https://github.com/paolomonti42/salt) SALT - SLUB ALlocator Tracer for the Linux kernel
- [**77**Star][6y] [Py] [owasp/ninja-pingu](https://github.com/owasp/ninja-pingu) a free open-source high performance network scanner tool for large scale analyses
-- [**77**Star][14d] [C] [open-power/skiboot](https://github.com/open-power/skiboot) OPAL boot and runtime firmware for POWER
+- [**77**Star][7d] [C] [open-power/skiboot](https://github.com/open-power/skiboot) OPAL boot and runtime firmware for POWER
- [**77**Star][4y] [CoffeeScript] [olegberman/mitm-omegle](https://github.com/olegberman/mitm-omegle) Watch strangers talk on Omegle (man in the middle attack)
- [**77**Star][4m] [C] [oleavr/ios-inject-custom](https://github.com/oleavr/ios-inject-custom) Example showing how to use Frida for standalone injection of a custom payload
-- [**77**Star][7m] [nusr/awesome-macos-command-line-zh](https://github.com/nusr/awesome-macos-command-line-zh) 用你的 macOS 终端搞事情。(Use your macOS terminal shell to do awesome things. )
- [**77**Star][10m] [Py] [nullarray/mimir](https://github.com/nullarray/mimir) OSINT Threat Intel Interface - CLI for HoneyDB
- [**77**Star][2y] [nhoya/pastebinmarkdownxss](https://github.com/nhoya/pastebinmarkdownxss) XSS in pastebin.com and reddit.com via unsanitized markdown output
+- [**77**Star][4m] [Go] [netxfly/x-proxy](https://github.com/netxfly/x-proxy) honeypot proxy
+- [**77**Star][1y] [JS] [mtjailed/jailbreakme](https://github.com/mtjailed/jailbreakme) A webbased jailbreak solution unifying existing jailbreak me solutions and new ones.
- [**77**Star][4y] [Py] [mncoppola/linux-kernel-ctf](https://github.com/mncoppola/linux-kernel-ctf) Helper scripts for hosting a Linux kernel exploitation CTF challenge
- [**77**Star][2m] [JS] [mitchmoser/sputnik](https://github.com/mitchmoser/sputnik) Open Source Intelligence Browser Extension
-- [**77**Star][16d] [Go] [likexian/whois-parser-go](https://github.com/likexian/whois-parser-go) Go module for domain whois info parse
+- [**77**Star][18d] [Go] [likexian/whois-parser-go](https://github.com/likexian/whois-parser-go) Go module for domain whois info parse
- [**77**Star][9m] [Py] [k8scop/k8s-security-dashboard](https://github.com/k8scop/k8s-security-dashboard) A security monitoring solution for Kubernetes
+- [**77**Star][20d] [Jupyter Notebook] [k-vitali/malware-misc-re](https://github.com/k-vitali/malware-misc-re) Miscellaneous Malware RE
- [**77**Star][3y] [C] [jndok/pegasusx](https://github.com/jndok/pegasusx) OS X 10.11.6 LPE PoC for CVE-2016-4655 / CVE-2016-4656
- [**77**Star][3m] [HTML] [jenyraval/phishing-simulation](https://github.com/jenyraval/phishing-simulation) Phishing Simulation mainly aims to increase phishing awareness by providing an intuitive tutorial and customized assessment
+- [**77**Star][2d] [C] [horsicq/nfdx64dbg](https://github.com/horsicq/nfdx64dbg) Plugin for x64dbg Linker/Compiler/Tool detector.
- [**77**Star][1y] [homjxi0e/apt](https://github.com/homjxi0e/apt) APT || Execution || Launch || APTs || ( Authors harr0ey, bohops )
-- [**77**Star][1y] [Ruby] [hahwul/metasploit-autopwn](https://github.com/hahwul/metasploit-autopwn) db_autopwn plugin of metasploit
+- [**77**Star][5m] [ObjC] [google/gscxscanner](https://github.com/google/gscxscanner) iOS Accessibility Scanner
- [**77**Star][11m] [Py] [fs0c131y/cve-2018-20555](https://github.com/fs0c131y/cve-2018-20555) Social Network Tabs Wordpress Plugin Vulnerability - CVE-2018-20555
-- [**77**Star][1m] [Shell] [f5networks/f5-aws-cloudformation](https://github.com/f5networks/f5-aws-cloudformation) CloudFormation Templates for quickly deploying BIG-IP services in Amazon Web Services EC2
+- [**77**Star][6d] [Shell] [f5networks/f5-aws-cloudformation](https://github.com/f5networks/f5-aws-cloudformation) CloudFormation Templates for quickly deploying BIG-IP services in Amazon Web Services EC2
- [**77**Star][4y] [HTML] [f47h3r/hackingteam_exploits](https://github.com/f47h3r/hackingteam_exploits) Initial Collection of HackingTeam Exploits
+- [**77**Star][7m] [Py] [enigmabridge/certbot-external-auth](https://github.com/enigmabridge/certbot-external-auth) Certbot external DNS, HTTP, TLSSNI domain validation plugin with JSON output and scriptable hooks, with Dehydrated compatibility
- [**77**Star][1y] [Py] [ekultek/xanxss](https://github.com/ekultek/xanxss) A simple XSS finding tool
-- [**77**Star][2y] [Lua] [duoergun0729/4book](https://github.com/duoergun0729/4book) 《企业安全建设入门:基于开源软件打造企业网络安全》
- [**77**Star][2y] [Py] [dtag-dev-sec/explo](https://github.com/dtag-dev-sec/explo) Human and machine readable web vulnerability testing format
- [**77**Star][2y] [dictionaryhouse/dirpath_list](https://github.com/dictionaryhouse/dirpath_list) Dirpath_List 目录扫描字典
- [**77**Star][2m] [Py] [danieluhricek/lisa](https://github.com/danieluhricek/lisa) Sandbox for automated Linux malware analysis.
- [**77**Star][2y] [C++] [daizhongyin/securitysdk](https://github.com/daizhongyin/securitysdk) Android安全SDK,提供基础的安全防护能力,如安全webview、IPC安全通信、应用和插件安全更新、威胁情报搜集等等
-- [**77**Star][11d] [d3sre/use_case_applicability](https://github.com/d3sre/use_case_applicability) Security Monitoring Resolution Categories
-- [**77**Star][10m] [Py] [cymmetria/honeycomb](https://github.com/cymmetria/honeycomb) An extensible honeypot framework
+- [**77**Star][4d] [d3sre/use_case_applicability](https://github.com/d3sre/use_case_applicability) Security Monitoring Resolution Categories
- [**77**Star][6m] [Py] [cybereason/linux_plumber](https://github.com/cybereason/linux_plumber) A python implementation of a grep friendly ftrace wrapper
- [**77**Star][2m] [C#] [csmacnz/coveralls.net](https://github.com/csmacnz/coveralls.net) Coveralls uploader for .Net Code coverage
-- [**77**Star][2y] [Objective-C] [cocoahuke/ioskextdump](https://github.com/cocoahuke/ioskextdump) Dump Kext information from iOS kernel cache. Applicable to the kernel which dump from memory
-- [**77**Star][4m] [Py] [clirimemini/keye](https://github.com/clirimemini/keye) Keye is a reconnaissance tool that was written in Python with SQLite3 integrated. After adding a single URL, or a list of URLs, it will make a request to these URLs and try to detect changes based on their response's body length.
-- [**77**Star][1y] [ckjbug/kali-linux-learning](https://github.com/ckjbug/kali-linux-learning)
+- [**77**Star][7m] [PS] [cottinghamd/hardeningauditor](https://github.com/cottinghamd/hardeningauditor) Scripts for comparing Microsoft Windows compliance with the ASD 1709 & Office 2016 Hardening Guides
+- [**77**Star][2y] [ObjC] [cocoahuke/ioskextdump](https://github.com/cocoahuke/ioskextdump) Dump Kext information from iOS kernel cache. Applicable to the kernel which dump from memory
+- [**77**Star][4m] [Shell] [chunkingz/linsetmv1-2](https://github.com/chunkingz/linsetmv1-2) Linset is a WPA/WPA2 phishing tool (evil twin)
- [**77**Star][2y] [PHP] [bugsafe/wereport](https://github.com/bugsafe/wereport) WeReport
-- [**77**Star][6y] [Shell] [breadtk/onion_pi](https://github.com/breadtk/onion_pi) Make a Raspberry Pi into a Anonymizing Tor Proxy!
- [**77**Star][2y] [Py] [blacknbunny/shellcodetoassembly](https://github.com/blacknbunny/shellcodetoassembly)
- [**77**Star][5y] [C] [bishopfox/firecat](https://github.com/bishopfox/firecat) Firecat is a penetration testing tool that allows you to punch reverse TCP tunnels out of a compromised network.
-- [**77**Star][19d] [C] [apriorit/mhook](https://github.com/apriorit/mhook) A Windows API hooking library
-- [**77**Star][2m] [JS] [anmavrid/smart-contracts](https://github.com/anmavrid/smart-contracts)
+- [**77**Star][1y] [Py] [asherags/amzsear](https://github.com/asherags/amzsear) The unofficial Amazon search CLI & Python API
+- [**77**Star][21d] [C] [apriorit/mhook](https://github.com/apriorit/mhook) A Windows API hooking library
+- [**77**Star][3m] [JS] [anmavrid/smart-contracts](https://github.com/anmavrid/smart-contracts)
- [**77**Star][3y] [Shell] [ank1036official/git_pentesting_toolkit](https://github.com/ank1036official/git_pentesting_toolkit) Exploit pack for pentesters and ethical hackers.
- [**77**Star][4m] [C] [angelkitty/computer-virus](https://github.com/angelkitty/computer-virus)
-- [**77**Star][12d] [HTML] [android-x86/android-x86.github.io](https://github.com/android-x86/android-x86.github.io) Official Website for Android-x86 Project
-- [**76**Star][14d] [C] [hasherezade/module_overloading](https://github.com/hasherezade/module_overloading) A more stealthy variant of "DLL hollowing"
-- [**76**Star][23d] [stonedreamforest/mirage](https://github.com/stonedreamforest/mirage) kernel-mode Anti-Anti-Debug plugin. based on intel vt-x && ept technology
-- [**76**Star][1m] [C++] [foxhex0ne/hyperviper](https://github.com/foxhex0ne/hyperviper) Toolkit for Hyper-V security research
+- [**77**Star][3d] [HTML] [android-x86/android-x86.github.io](https://github.com/android-x86/android-x86.github.io) Official Website for Android-x86 Project
+- [**76**Star][9m] [C] [iaik/cache_template_attacks](https://github.com/iaik/cache_template_attacks) This repository contains several tools to perform Cache Template Attacks
+- [**76**Star][2y] [Py] [galkan/tools](https://github.com/galkan/tools) Tools that are related to pentest and network security
+- [**76**Star][2y] [Go] [mushorg/go-dpi](https://github.com/mushorg/go-dpi) Application layer protocol identification of traffic flows
+- [**76**Star][1m] [akenofu/oscp-cheat-sheet](https://github.com/akenofu/oscp-cheat-sheet) This is my OSCP cheat sheet made by combining a lot of different resources online with a little bit of tweaking. I used this cheat sheet during my exam (Fri, 13 Sep 2019) and during the labs. I can proudly say it helped me pass so I hope it can help you as well ! Good Luck and Try Harder
- [**76**Star][8y] [Py] [ts-way/gerix-wifi-cracker](https://github.com/ts-way/gerix-wifi-cracker) A graphical user interface for aircrack-ng and pyrit.
- [**76**Star][10m] [Py] [ztgrace/red_team_telemetry](https://github.com/ztgrace/red_team_telemetry)
+- [**76**Star][5m] [JS] [zencashofficial/arizen](https://github.com/zencashofficial/arizen) Arizen is the API wallet for Horizen with encrypted and only locally stored files!
- [**76**Star][3y] [C#] [zcgonvh/cve-2017-7269-tool](https://github.com/zcgonvh/cve-2017-7269-tool) CVE-2017-7269 to webshell or shellcode loader
+- [**76**Star][5y] [C++] [yveaux/nrf24_sniffer](https://github.com/yveaux/nrf24_sniffer) Sniffer for Nordic NRF24L01+ modules with MySensors support
+- [**76**Star][4m] [Go] [yashpl/mongobuster](https://github.com/yashpl/mongobuster) Hunt Open MongoDB instances
- [**76**Star][2y] [Ruby] [xc0d3rz/metasploit-apk-embed-payload](https://github.com/xc0d3rz/metasploit-apk-embed-payload) Embed a Metasploit Payload in an Original .Apk File
-- [**76**Star][12d] [C++] [versprite/research](https://github.com/versprite/research) VerSprite Security Research
- [**76**Star][5y] [PHP] [v0s/plus22](https://github.com/v0s/plus22) Tool to analyze 64-bit binaries with 32-bit Hex-Rays Decompiler
-- [**76**Star][3y] [C] [tinysec/iathook](https://github.com/tinysec/iathook) windows kernelmode and usermode IAT hook
-- [**76**Star][2y] [Py] [tezukanice/office8570](https://github.com/tezukanice/office8570) CVE20178570
+- [**76**Star][2y] [Py] [threatexpress/tinyshell](https://github.com/threatexpress/tinyshell)
+- [**76**Star][8m] [Py] [the-c0d3r/admin-finder](https://github.com/the-c0d3r/admin-finder) Blazing fast admin panel finder with multi-threading
- [**76**Star][2y] [Py] [superponible/volatility-plugins](https://github.com/superponible/volatility-plugins) Plugins I've written for Volatility
-- [**76**Star][4y] [PHP] [subtlescope/bash-ransomware](https://github.com/subtlescope/bash-ransomware) Simple Bash Rasomware for use in Cyber Exercises
-- [**76**Star][14d] [CSS] [sniperoj/jeopardy-dockerfiles](https://github.com/sniperoj/jeopardy-dockerfiles)
+- [**76**Star][7m] [Py] [sup3ria/atlantr](https://github.com/sup3ria/atlantr) Fastes Email:Pass Checker on the planet.
+- [**76**Star][16d] [CSS] [sniperoj/jeopardy-dockerfiles](https://github.com/sniperoj/jeopardy-dockerfiles)
- [**76**Star][1y] [Py] [sh4rk0-666/spykeyboard](https://github.com/sh4rk0-666/spykeyboard) keylogger which sends us the data to our gmail.
+- [**76**Star][10m] [sevagas/windowsdefender_asr_bypass-offensivecon2019](https://github.com/sevagas/windowsdefender_asr_bypass-offensivecon2019) Public documents related to my talk "Bypass Windows Exploit Guard ASR" at Offensive Con 2019.
- [**76**Star][5y] [ActionScript] [sethsec/crossdomain-exploitation-framework](https://github.com/sethsec/crossdomain-exploitation-framework) Everything you need to exploit overly permissive crossdomain.xml files
-- [**76**Star][3y] [PHP] [secwiki/webshell-2](https://github.com/secwiki/webshell-2) Webshell
+- [**76**Star][22d] [Go] [root4loot/rescope](https://github.com/root4loot/rescope) Rescope is a tool geared towards pentesters and bugbounty researchers, that aims to make life easier when defining scopes for Burp Suite and OWASP ZAP.
- [**76**Star][8m] [JS] [retirejs/grunt-retire](https://github.com/retirejs/grunt-retire) Grunt plugin for retire.
-- [**76**Star][7m] [C] [ret2p4nda/kernel-pwn](https://github.com/ret2p4nda/kernel-pwn)
-- [**76**Star][3m] [Ruby] [r00t-3xp10it/resource_files](https://github.com/r00t-3xp10it/resource_files) mosquito - Automating reconnaissance and brute force attacks
-- [**76**Star][10m] [Py] [purduepaml/trojannn](https://github.com/purduepaml/trojannn) Trojan Attack on Neural Network
-- [**76**Star][2m] [Py] [pingxcpost/f-nascan-plus](https://github.com/pingxcpost/f-nascan-plus) F-NAScan-PLUS 安服资产搜集
+- [**76**Star][1y] [Shell] [re4son/wsl-kali-x](https://github.com/re4son/wsl-kali-x) Tweaks to run Kali Linux desktop panels and gui apps on Windows 10
+- [**76**Star][7m] [PHP] [ph-7/obfuscator-class](https://github.com/ph-7/obfuscator-class)
- [**76**Star][4y] [oguzhantopgul/vezir-project](https://github.com/oguzhantopgul/vezir-project) Yet Another Linux Virtual Machine for Mobile Application Pentesting and Mobile Malware Analysis
- [**76**Star][2y] [Py] [nickstadb/serialbrute](https://github.com/nickstadb/serialbrute) Java serialization brute force attack tool.
+- [**76**Star][3y] [nezteb/i_hate_wordpress](https://github.com/nezteb/i_hate_wordpress) I used to hate Wordpress until I had created this repo. This is me documenting how to make WordPress not suck like everyone thinks it does.
- [**76**Star][6y] [Shell] [neohapsis/suddensix](https://github.com/neohapsis/suddensix) IPV6 MITM attack tool
-- [**76**Star][1y] [JS] [mtjailed/jailbreakme](https://github.com/mtjailed/jailbreakme) A webbased jailbreak solution unifying existing jailbreak me solutions and new ones.
- [**76**Star][3y] [Py] [moosd/needle](https://github.com/moosd/needle) Android framework injection made easy
- [**76**Star][6m] [JS] [microsoft/adfswebcustomization](https://github.com/microsoft/adfswebcustomization) A repository of useful Web Customizations for Active Directory Federation Services
- [**76**Star][2y] [Py] [mgeide/poortego](https://github.com/mgeide/poortego) Open-source python project to handle the storage and linking of open-source intelligence (ala Maltego)
-- [**76**Star][28d] [Crystal] [maxfierke/fincher](https://github.com/maxfierke/fincher) A steganography tool for text
-- [**76**Star][7d] [Py] [lightswitch05/hosts](https://github.com/lightswitch05/hosts) Hostfile blocklist for ads and tracking, updated regularly
+- [**76**Star][30d] [Crystal] [maxfierke/fincher](https://github.com/maxfierke/fincher) A steganography tool for text
- [**76**Star][2m] [Py] [leveldown-security/svd-loader-ghidra](https://github.com/leveldown-security/svd-loader-ghidra)
- [**76**Star][4y] [C++] [lcatro/sise_traning_ctf_re](https://github.com/lcatro/sise_traning_ctf_re) SNST Traning RE Project .华软网络安全小组逆向工程训练营,尝试以CTF 的形式来使大家可以动手训练快速提升自己的逆向工程水平.CTF 的训练程序又浅到深,没有使用太复杂的算法,在逆向的过程中遇到的难关都是在分析病毒和破解中遇到的实际情况,注重于实用.训练营还包含有源代码文件,训练程序和思路.希望可以帮助小伙伴们入门逆向工程这个神奇的世界..
- [**76**Star][1y] [Shell] [kolargol/openvpn](https://github.com/kolargol/openvpn) openvpn:Shell 脚本,5分钟建立个人 VPN
- [**76**Star][3y] [Py] [keithjjones/fileintel](https://github.com/keithjjones/fileintel) A modular Python application to pull intelligence about malicious files
-- [**76**Star][7y] [Objective-C] [jils/flashbackchecker](https://github.com/jils/flashbackchecker) Quick and easy checker for Mac Flashback malware variants
-- [**76**Star][13d] [Py] [inquest/python-sandboxapi](https://github.com/inquest/python-sandboxapi) Minimal, consistent Python API for building integrations with malware sandboxes.
+- [**76**Star][7y] [ObjC] [jils/flashbackchecker](https://github.com/jils/flashbackchecker) Quick and easy checker for Mac Flashback malware variants
+- [**76**Star][15d] [Py] [inquest/python-sandboxapi](https://github.com/inquest/python-sandboxapi) Minimal, consistent Python API for building integrations with malware sandboxes.
- [**76**Star][6m] [Java] [incredibleindishell/exploit-code-by-me](https://github.com/incredibleindishell/exploit-code-by-me) Exploit code developed/reproduced by me
- [**76**Star][4y] [hardhatdigital/rails-security-audit](https://github.com/hardhatdigital/rails-security-audit) A checklist of Rails security audit
- [**76**Star][1y] [C] [gregvish/l1tf-poc](https://github.com/gregvish/l1tf-poc) L1TF (Foreshadow) VM guest to host memory read PoC
-- [**76**Star][9d] [C] [greenbone/gvmd](https://github.com/greenbone/gvmd) Greenbone Vulnerability Manager
-- [**76**Star][5m] [Objective-C] [google/gscxscanner](https://github.com/google/gscxscanner) iOS Accessibility Scanner
+- [**76**Star][7d] [C] [greenbone/gvmd](https://github.com/greenbone/gvmd) Greenbone Vulnerability Manager
+- [**76**Star][6m] [Py] [githacktools/brutedum](https://github.com/githacktools/brutedum) BruteDum - Brute Force attacks SSH, FTP, Telnet, PostgreSQL, RDP, VNC with Hydra, Medusa and Ncrack
- [**76**Star][4y] [C] [gdbinit/gopher](https://github.com/gdbinit/gopher) A OS X crypto ransomware PoC
- [**76**Star][1m] [Py] [foospidy/web-cve-tests](https://github.com/foospidy/web-cve-tests) A simple framework for sending test payloads for known web CVEs.
+- [**76**Star][12m] [foolmitah/cve-2018-14729](https://github.com/foolmitah/cve-2018-14729) Discuz backend getshell
+- [**76**Star][4y] [C++] [feross/wiresheep](https://github.com/feross/wiresheep) WireSheep shows you each user on the network and all the HTTP requests they're making in a pretty News Feed, a la Facebook.
- [**76**Star][4y] [PHP] [fakhrizulkifli/defeating-php-gd-imagecreatefromgif](https://github.com/fakhrizulkifli/defeating-php-gd-imagecreatefromgif) Proof-of-concept to exploit the flaw in the PHP-GD built-in function, imagecreatefromgif()
- [**76**Star][5y] [Java] [evilsocket/nikeplus-fuelband-se-reversed](https://github.com/evilsocket/nikeplus-fuelband-se-reversed) A a proof of concept application that uses BLE api and the Nike+ FuelBand SE protocol to communicate with Nike BLE devices.
+- [**76**Star][3y] [Java] [ethackdotorg/orwall](https://github.com/ethackdotorg/orwall) Put your apps behind Orbot, and block all unwanted traffic in one row.
- [**76**Star][4y] [Java] [enovella/jebscripts](https://github.com/enovella/jebscripts) A set of JEB Python/Java scripts for reverse engineering Android obfuscated code
-- [**76**Star][6m] [Py] [enigmabridge/certbot-external-auth](https://github.com/enigmabridge/certbot-external-auth) Certbot external DNS, HTTP, TLSSNI domain validation plugin with JSON output and scriptable hooks, with Dehydrated compatibility
-- [**76**Star][7d] [endermanch/malwaredatabase](https://github.com/endermanch/malwaredatabase) This repository is one of a few malware collections on the GitHub.
- [**76**Star][4m] [Py] [duo-labs/apple-t2-xpc](https://github.com/duo-labs/apple-t2-xpc) Tools to explore the XPC interface of Apple's T2 chip
+- [**76**Star][4y] [PHP] [dunglas/php-torcontrol](https://github.com/dunglas/php-torcontrol) PHP TorControl, a library to control TOR
- [**76**Star][1y] [Go] [drael/gonetstat](https://github.com/drael/gonetstat) Netstat implementation in Go
- [**76**Star][3m] [M4] [dennisyurichev/yurichev.com](https://github.com/dennisyurichev/yurichev.com) my website
- [**76**Star][3y] [C] [decryptoniteteam/decryptonite](https://github.com/decryptoniteteam/decryptonite) Ransomware Detection and Mitigation Software
- [**76**Star][5y] [Py] [dantangfan/ddos](https://github.com/dantangfan/ddos) ddos attact
- [**76**Star][2y] [PHP] [curlyboi/hashtopus](https://github.com/curlyboi/hashtopus) Distributed wrapper around oclHashcat
-- [**76**Star][7m] [PowerShell] [cottinghamd/hardeningauditor](https://github.com/cottinghamd/hardeningauditor) Scripts for comparing Microsoft Windows compliance with the ASD 1709 & Office 2016 Hardening Guides
- [**76**Star][2y] [C] [brl/grlh](https://github.com/brl/grlh)
+- [**76**Star][6d] [Go] [binject/binjection](https://github.com/binject/binjection) Injects additional machine instructions into various binary formats.
- [**76**Star][2y] [C] [bazad/x18-leak](https://github.com/bazad/x18-leak) CVE-2018-4185: iOS 11.2-11.2.6 kernel pointer disclosure introduced by Apple's Meltdown mitigation.
-- [**76**Star][6m] [TypeScript] [auth0-blog/angular-auth0-aside](https://github.com/auth0-blog/angular-auth0-aside) Aside: Angular with Auth0 and an authenticated Node API.
-- [**76**Star][1y] [Py] [asherags/amzsear](https://github.com/asherags/amzsear) The unofficial Amazon search CLI & Python API
-- [**76**Star][25d] [JS] [aqiongbei/buy_pig_plan](https://github.com/aqiongbei/buy_pig_plan) 电话攻击(电话轰炸、可代替短信轰炸)、留言攻击工具 | 随缘维护,佛系更新
+- [**76**Star][25d] [Py] [bannsec/autopwn](https://github.com/bannsec/autopwn) Automate repetitive tasks for fuzzing
+- [**76**Star][6m] [TS] [auth0-blog/angular-auth0-aside](https://github.com/auth0-blog/angular-auth0-aside) Aside: Angular with Auth0 and an authenticated Node API.
- [**76**Star][2y] [Py] [anssi-fr/bootcode_parser](https://github.com/anssi-fr/bootcode_parser) A boot record parser that identifies known good signatures for MBR, VBR and IPL.
- [**76**Star][1y] [C] [alpha1ab/win2016lpe](https://github.com/alpha1ab/win2016lpe) Windows10 & Windows Server 2016 LPE Exploit (use schedsvc!SchRpcSetSecurity())
+- [**76**Star][3m] [C] [ahmadmansoor/advancedscript](https://github.com/ahmadmansoor/advancedscript) Add More Features for x64dbg Script System,with some Functions which will help Plugin Coder
- [**76**Star][1m] [Py] [ab77/black.box](https://github.com/ab77/black.box) Plug-and-Play VPN router and unblocker
- [**76**Star][3y] [Py] [1an0rmus/tekdefense](https://github.com/1an0rmus/tekdefense) Open Development projects for TekDefense
- [**75**Star][3y] [Java] [guardianproject/cacheword](https://github.com/guardianproject/cacheword) a password caching and management service for Android
- [**75**Star][3m] [ignitetechnologies/web-application-cheatsheet](https://github.com/ignitetechnologies/web-application-cheatsheet) This cheatsheet is aimed at the CTF Players and Beginners to help them understand Web Application Vulnerablity with examples.
-- [**75**Star][2y] [Py] [galkan/tools](https://github.com/galkan/tools) Tools that are related to pentest and network security
+- [**75**Star][3y] [C++] [x64dbg/xedparse](https://github.com/x64dbg/xedparse) A MASM-like, single-line plaintext assembler
- [**75**Star][5y] [Shell] [shadowsocks/stackscript](https://github.com/shadowsocks/stackscript)
-- [**75**Star][9m] [Py] [elliiot/ghidra_darknight](https://github.com/elliiot/ghidra_darknight) DarkNight theme for Ghidra
+- [**75**Star][1y] [Py] [mame82/duckencoder.py](https://github.com/mame82/duckencoder.py) Python port of infamous duckencoder for RubberDucky
+- [**75**Star][5m] [Dockerfile] [leezj9671/secdevices_docker](https://github.com/leezj9671/secdevices_docker) 自行编写的工作中使用到的安全设备Dockerfile
- [**75**Star][3m] [ivbeg/awesome-forensicstools](https://github.com/ivbeg/awesome-forensicstools) Awesome list of digital forensic tools
+- [**75**Star][9m] [Py] [daeken/ssrftest](https://github.com/daeken/ssrftest) SSRF testing tool
- [**75**Star][3y] [C] [osirislab/csaw-ctf-2016-quals](https://github.com/osirislab/CSAW-CTF-2016-Quals) Repo for CSAW CTF 2016 Quals challenges
- [**75**Star][6y] [Lua] [jpalanco/nmap-scada](https://github.com/jpalanco/nmap-scada) nse scripts for scada identification
- [**75**Star][10m] [Rust] [easyctf/librectf](https://github.com/easyctf/librectf) CTF in a box. Minimal setup required. (not production-ready yet)
- [**75**Star][2y] [Assembly] [zznop/pop-nedry](https://github.com/zznop/pop-nedry) x86-64 Windows shellcode that recreates the Jurassic Park hacking scene (Ah, ah, ah... you didn't' say the magic word!)
- [**75**Star][2m] [Py] [zenix-blurryface/sneakyexe](https://github.com/zenix-blurryface/sneakyexe) Embedding a "UAC-Bypassing" function into your custom payload
-- [**75**Star][5m] [JS] [zencashofficial/arizen](https://github.com/zencashofficial/arizen) Arizen is the API wallet for Horizen with encrypted and only locally stored files!
- [**75**Star][3y] [ywolf/f-middlewarescan](https://github.com/ywolf/f-middlewarescan) A vulnerability detection scripts for middleware services
-- [**75**Star][5y] [C++] [yveaux/nrf24_sniffer](https://github.com/yveaux/nrf24_sniffer) Sniffer for Nordic NRF24L01+ modules with MySensors support
-- [**75**Star][4m] [Go] [yashpl/mongobuster](https://github.com/yashpl/mongobuster) Hunt Open MongoDB instances
+- [**75**Star][1y] [Py] [x0rz/tweetentropy](https://github.com/x0rz/tweetentropy) Twitter as an extra entropy source
- [**75**Star][8m] [Py] [wied03/centos-package-cron](https://github.com/wied03/centos-package-cron) A security update tool for CentOS
- [**75**Star][3y] [Py] [vvalien/win_exp](https://github.com/vvalien/win_exp)
+- [**75**Star][3y] [C] [vnik5287/kernel_rop](https://github.com/vnik5287/kernel_rop)
- [**75**Star][3y] [C] [viralsecuritygroup/knoxout](https://github.com/viralsecuritygroup/knoxout) A PoC of KNOXout (CVE-2016-6584) - bypassing Samsung KNOX protections and root Samsung Galaxy S6 Android Device.
- [**75**Star][4y] [PHP] [vidar-team/hctf2015-all-problems](https://github.com/vidar-team/hctf2015-all-problems) hctf2015 all problems and writeups from authors
- [**75**Star][4m] [C++] [velocidex/c-aff4](https://github.com/velocidex/c-aff4) An AFF4 C++ implementation.
- [**75**Star][3y] [Py] [va5c0/steghide-brute-force-tool](https://github.com/va5c0/steghide-brute-force-tool) Execute a brute force attack with Steghide to file with hide information and password established
- [**75**Star][2y] [Java] [unchartedsoftware/aperture-tiles](https://github.com/unchartedsoftware/aperture-tiles) Aperture-Tiles uses familiar web-based map interactions to allow exploration of arbitrary huge data sets.
- [**75**Star][11m] [Shell] [ttffdd/xbadmanners](https://github.com/ttffdd/xbadmanners) Tool for CVE-2018-16323
+- [**75**Star][2m] [Batchfile] [tresacton/passwordstealer](https://github.com/tresacton/passwordstealer) USB / CD / DVD autorun password stealer
- [**75**Star][2m] [Py] [tp7309/ttdedroid](https://github.com/tp7309/ttdedroid) 一键反编译工具One key for quickly decompile apk/aar/dex/jar, support by jadx/dex2jar/enjarify/cfr.
-- [**75**Star][2y] [Py] [threatexpress/tinyshell](https://github.com/threatexpress/tinyshell)
- [**75**Star][5y] [C++] [sherifeldeeb/inmet](https://github.com/sherifeldeeb/inmet) A multi-purpose meterpreter executable (inline, many transports, msfpayload)
-- [**75**Star][10m] [sevagas/windowsdefender_asr_bypass-offensivecon2019](https://github.com/sevagas/windowsdefender_asr_bypass-offensivecon2019) Public documents related to my talk "Bypass Windows Exploit Guard ASR" at Offensive Con 2019.
+- [**75**Star][6m] [Py] [shashank-in/travisleaks](https://github.com/shashank-in/travisleaks) A tool to find sensitive keys and passwords in Travis logs
+- [**75**Star][10m] [Py] [secrary/ida-scripts](https://github.com/secrary/ida-scripts) IDAPro scripts/plugins
+ - [dumpDyn](https://github.com/secrary/ida-scripts/blob/master/dumpDyn/README.md) IDAPython plugin(script) which saves comments, names, breakpoints, functions from one execution to another.
+ - [idenLib](https://github.com/secrary/ida-scripts/blob/master/idenLib/README.md) Library Function Identification
+ - [IOCTL_decode](https://github.com/secrary/ida-scripts/blob/master/IOCTL_decode.py) Windows Device IO Control Code
+ - [XORCheck](https://github.com/secrary/ida-scripts/blob/master/XORCheck.py) check xor
+- [**75**Star][1m] [C] [scriptingxss/iotgoat](https://github.com/scriptingxss/iotgoat) IoTGoat is a deliberately insecure firmware based on OpenWrt.
- [**75**Star][2y] [Py] [safebreach-labs/spacebin](https://github.com/safebreach-labs/spacebin) Spacebin is a proof-of-concept malware that exfiltrates data (from No Direct Internet Access environments) via triggering AV on the endpoint and then communicating back from the AV's cloud component.
-- [**75**Star][6m] [Py] [s2e/docs](https://github.com/s2e/docs) Documentation and Quick Start Guides for the S2E Symbolic Execution Platform
+- [**75**Star][5d] [Py] [s2e/docs](https://github.com/s2e/docs) Documentation and Quick Start Guides for the S2E Symbolic Execution Platform
- [**75**Star][2y] [C] [rtlsdrblog/tempestsdr](https://github.com/rtlsdrblog/tempestsdr) Remote video eavesdropping using a software-defined radio platform
-- [**75**Star][20d] [Go] [root4loot/rescope](https://github.com/root4loot/rescope) Rescope is a tool geared towards pentesters and bugbounty researchers, that aims to make life easier when defining scopes for Burp Suite and OWASP ZAP.
-- [**75**Star][1y] [Shell] [re4son/wsl-kali-x](https://github.com/re4son/wsl-kali-x) Tweaks to run Kali Linux desktop panels and gui apps on Windows 10
+- [**75**Star][4y] [Shell] [rossmairm/pentools](https://github.com/rossmairm/pentools) This is a bundle of python and bash penetration testing tools for recon and information gathering.
+- [**75**Star][1y] [ObjC] [ret2/p2o_2018](https://github.com/ret2/p2o_2018)
- [**75**Star][5y] [C++] [quangnh89/ollycapstone](https://github.com/quangnh89/ollycapstone) This is a plugin for OllyDbg 1.10 to replace the old disasm engine by Capstone disassembly/disassembler framework.
-- [**75**Star][4y] [PowerShell] [pwdrkeg/honeyport](https://github.com/pwdrkeg/honeyport) A powershell script for creating a Windows honeyport.
+- [**75**Star][4y] [PS] [pwdrkeg/honeyport](https://github.com/pwdrkeg/honeyport) A powershell script for creating a Windows honeyport.
- [**75**Star][2y] [JS] [polaris64/web_exploit_detector](https://github.com/polaris64/web_exploit_detector) web_exploit_detector:检测 Web hosting 环境中可能的感染、恶意代码和可疑文件。Node.js 应用程序。
-- [**75**Star][7m] [PHP] [ph-7/obfuscator-class](https://github.com/ph-7/obfuscator-class)
-- [**75**Star][2y] [Py] [nyloner/proxypool](https://github.com/nyloner/proxypool) 高匿代理IP池
+- [**75**Star][18d] [C] [ntraiseharderror/antimalware-research](https://github.com/ntraiseharderror/antimalware-research) Research on Anti-malware and other related security solutions
+- [**75**Star][18d] [Py] [nightwatchcybersecurity/truegaze](https://github.com/nightwatchcybersecurity/truegaze) Static analysis tool for Android/iOS apps focusing on security issues outside the source code
+- [**75**Star][3d] [C] [naworkcaj/bdvl](https://github.com/naworkcaj/bdvl) LD_PRELOAD Linux rootkit (x86 & ARM)
- [**75**Star][9m] [misterch0c/crimeboards](https://github.com/misterch0c/crimeboards) A list of private and public (more or less) blackhat boards
- [**75**Star][6m] [C] [milabs/khook](https://github.com/milabs/khook) Linux Kernel hooking engine (x86)
- [**75**Star][3y] [magoo/incident-response-plan](https://github.com/magoo/incident-response-plan) Boilerplate Incident Response Plan from "Starting Up Security"
-- [**75**Star][28d] [Py] [m8r0wn/pymeta](https://github.com/m8r0wn/pymeta) 搜索某域名网站的文件,下载并提取元数据, 例如: 域名、用户名、软件版本号、命名约定等
-- [**75**Star][18d] [Jupyter Notebook] [k-vitali/malware-misc-re](https://github.com/k-vitali/malware-misc-re) Miscellaneous Malware RE
+- [**75**Star][30d] [Py] [m8r0wn/pymeta](https://github.com/m8r0wn/pymeta) 搜索某域名网站的文件,下载并提取元数据, 例如: 域名、用户名、软件版本号、命名约定等
- [**75**Star][4m] [AutoIt] [jschicht/logfileparser](https://github.com/jschicht/logfileparser) Parser for $LogFile on NTFS
- [**75**Star][1y] [HTML] [johnlatwc/msrc](https://github.com/johnlatwc/msrc) Scripts for interacting with MSRC portal data
- [**75**Star][11m] [JS] [j0nathanj/publications](https://github.com/j0nathanj/publications) Slides, exploits and PoCs :)
@@ -9877,73 +10484,65 @@ networking routines
- [**75**Star][12m] [C++] [hzqst/fuckcertverifytimevalidity](https://github.com/hzqst/fuckcertverifytimevalidity) This tiny project prevents the signtool from verifing cert time validity and let you sign your bin with outdated cert without changing system time manually
- [**75**Star][8m] [Py] [huaisha1224/shadowsocks-client](https://github.com/huaisha1224/shadowsocks-client) The ShadowSocks client is a support multiple server port and password
- [**75**Star][1y] [C++] [hrbust86/hookmsrbysvm](https://github.com/hrbust86/hookmsrbysvm) hook msr by amd svm
-- [**75**Star][7d] [C] [horsicq/nfdx64dbg](https://github.com/horsicq/nfdx64dbg) Plugin for x64dbg Linker/Compiler/Tool detector.
+- [**75**Star][14d] [Py] [highmeh/lure](https://github.com/highmeh/lure) Lure - User Recon Automation for GoPhish
- [**75**Star][6y] [Py] [hiddenillusion/ipinfo](https://github.com/hiddenillusion/ipinfo) Searches various online resources to try and get as much info about an IP/domain as possible.
-- [**75**Star][3y] [PowerShell] [harmj0y/misc-powershell](https://github.com/harmj0y/misc-powershell) Misc. PowerShell scripts
+- [**75**Star][3y] [PS] [harmj0y/misc-powershell](https://github.com/harmj0y/misc-powershell) Misc. PowerShell scripts
+- [**75**Star][6m] [Py] [hameda2/zydra](https://github.com/hameda2/zydra)
- [**75**Star][1y] [Py] [hadojae/data](https://github.com/hadojae/data) Credential Phish Analysis and Automation
- [**75**Star][3m] [gouveaheitor/awesome-biohacking](https://github.com/gouveaheitor/awesome-biohacking)
-- [**75**Star][6m] [Py] [githacktools/brutedum](https://github.com/githacktools/brutedum) BruteDum - Brute Force attacks SSH, FTP, Telnet, PostgreSQL, RDP, VNC with Hydra, Medusa and Ncrack
-- [**75**Star][15d] [Py] [fopina/kdbxpasswordpwned](https://github.com/fopina/kdbxpasswordpwned) Check KeePass passwords against
-- [**75**Star][12m] [foolmitah/cve-2018-14729](https://github.com/foolmitah/cve-2018-14729) Discuz backend getshell
+- [**75**Star][17d] [Py] [fopina/kdbxpasswordpwned](https://github.com/fopina/kdbxpasswordpwned) Check KeePass passwords against
- [**75**Star][7y] [JS] [evilpacket/xss.io](https://github.com/evilpacket/xss.io)
- [**75**Star][8m] [edelahozuah/awesome-wifi-security](https://github.com/edelahozuah/awesome-wifi-security) A collection of awesome resources related to 802.11 security, tools and other things
+- [**75**Star][4d] [Java] [dschadow/javasecurity](https://github.com/dschadow/javasecurity) Java web and command line applications demonstrating various security topics
- [**75**Star][4y] [Java] [directdefense/superserial](https://github.com/directdefense/superserial) SuperSerial - Burp Java Deserialization Vulnerability Identification
+- [**75**Star][5y] [C] [dinotools/sslscan](https://github.com/dinotools/sslscan) SSLScan tests SSL/TLS enabled services to discover supported cipher suites
+- [**75**Star][2y] [C] [dadas190/heavens-gate-2.0](https://github.com/dadas190/heavens-gate-2.0) Executes 64bit code from a 32bit process
- [**75**Star][3m] [Py] [coldzer0/ida-for-delphi](https://github.com/coldzer0/ida-for-delphi) IDA Python Script to Get All function names from Event Constructor (VCL)
-- [**75**Star][24d] [C++] [clrx/clrx-mirror](https://github.com/clrx/clrx-mirror) CLRadeonExtender (GCN assembler, Radeon assembler) mirror
-- [**75**Star][23d] [Py] [bannsec/autopwn](https://github.com/bannsec/autopwn) Automate repetitive tasks for fuzzing
+- [**75**Star][26d] [C++] [clrx/clrx-mirror](https://github.com/clrx/clrx-mirror) CLRadeonExtender (GCN assembler, Radeon assembler) mirror
+- [**75**Star][2y] [Go] [calidog/certstream-go](https://github.com/calidog/certstream-go) Go library for connecting to CertStream
- [**75**Star][3y] [Py] [antojoseph/diff-droid](https://github.com/antojoseph/diff-droid) Various Scripts for Mobile Pen-testing with Frida
-- [**75**Star][3m] [C] [ahmadmansoor/advancedscript](https://github.com/ahmadmansoor/advancedscript) Add More Features for x64dbg Script System,with some Functions which will help Plugin Coder
- [**75**Star][4y] [Py] [ahhh/reverse_https_bot](https://github.com/ahhh/reverse_https_bot) A python based https remote access trojan for penetration testing
-- [**75**Star][6m] [Py] [abaykan/53r3n17y](https://github.com/abaykan/53r3n17y) Python based script for Information Gathering.
-- [**74**Star][11m] [Java] [thelinuxchoice/droidtracker](https://github.com/thelinuxchoice/droidtracker) Script to generate an Android App to track location in real time
+- [**74**Star][3m] [cisco-talos/snort-faq](https://github.com/cisco-talos/snort-faq) Snort FAQ
- [**74**Star][7y] [Ruby] [pentestgeek/scripts](https://github.com/pentestgeek/scripts) A collection of useful scripts for penetration testers
-- [**74**Star][3y] [C++] [x64dbg/xedparse](https://github.com/x64dbg/xedparse) A MASM-like, single-line plaintext assembler
+- [**74**Star][3y] [wtsxdev/android-security-list](https://github.com/wtsxdev/android-security-list) Collection of Android security related resources
- [**74**Star][3y] [HTML] [dxa4481/damn-vulnerable-redis-container](https://github.com/dxa4481/damn-vulnerable-redis-container) An example of obtaining RCE via Redis and CSRF
-- [**74**Star][1m] [akenofu/oscp-cheat-sheet](https://github.com/akenofu/oscp-cheat-sheet) This is my OSCP cheat sheet made by combining a lot of different resources online with a little bit of tweaking. I used this cheat sheet during my exam (Fri, 13 Sep 2019) and during the labs. I can proudly say it helped me pass so I hope it can help you as well ! Good Luck and Try Harder
-- [**74**Star][9m] [Py] [daeken/ssrftest](https://github.com/daeken/ssrftest) SSRF testing tool
+- [**74**Star][24d] [JS] [andreafioraldi/frida-js-afl-instr](https://github.com/andreafioraldi/frida-js-afl-instr) An example on how to do performant in-memory fuzzing with AFL++ and Frida
+- [**74**Star][1m] [Py] [boypt/vmess2json](https://github.com/boypt/vmess2json) Scripts parse vmess:// links into v2ray config json and vice versa.
- [**74**Star][5y] [Py] [ivanlei/airodump-iv](https://github.com/ivanlei/airodump-iv) A python implementation of airodump-ng
- [**74**Star][1m] [Go] [edoverflow/csp](https://github.com/edoverflow/csp) Given a list of hosts, this small utility fetches all whitelisted domains from the hosts' CSPs.
-- [**74**Star][2m] [C] [iqiyi/qnsm](https://github.com/iqiyi/qnsm) QNSM is network security monitoring framework based on DPDK.
- [**74**Star][5m] [HTML] [ph0en1x-xmu/awesome-ctf-book](https://github.com/Ph0en1x-XMU/Awesome-CTF-Book) Study CTF, study security
- [**74**Star][4m] [Py] [lazorfuzz/python-hacklib](https://github.com/lazorfuzz/python-hacklib) hacklib - pentesting, port scanning, and logging in anywhere with Python
- [**74**Star][2y] [C] [deeptechlabs/meltdown](https://github.com/deeptechlabs/meltdown) Local Exploit for Meltdown
- [**74**Star][2y] [Py] [shmilylty/cheetah-gui](https://github.com/shmilylty/cheetah-gui) Cheetah GUI
- [**74**Star][3y] [C++] [avatarone/avatar-python](https://github.com/avatarone/avatar-python) Dynamic security analysis of embedded systems’ firmwares
-- [**74**Star][2m] [Rust] [mozilla/authenticator-rs](https://github.com/mozilla/authenticator-rs) Rust library to interact with Security Keys, used by Firefox
- [**74**Star][1y] [Py] [yoda66/androidembedit](https://github.com/yoda66/androidembedit) A quick and dirty python script to embed a Metasploit generated APK file into another APK for fun.
-- [**74**Star][1y] [Py] [x0rz/tweetentropy](https://github.com/x0rz/tweetentropy) Twitter as an extra entropy source
- [**74**Star][8m] [C] [vanhoefm/dragonslayer](https://github.com/vanhoefm/dragonslayer)
-- [**74**Star][1m] [Batchfile] [tresacton/passwordstealer](https://github.com/tresacton/passwordstealer) USB / CD / DVD autorun password stealer
+- [**74**Star][4y] [Visual Basic .NET] [twi1ight/ad-pentest-script](https://github.com/twi1ight/ad-pentest-script) Active Directory pentest scripts
- [**74**Star][1y] [tianjifou/ios-security-attack-and-prevent](https://github.com/tianjifou/ios-security-attack-and-prevent) iOS安全攻与防,详细的列出了,在iOS开发中,项目会存在的安全漏洞以及解决办法。
- [**74**Star][5y] [Py] [tandasat/winioctldecoder](https://github.com/tandasat/winioctldecoder) IDA Plugin which decodes Windows Device I/O control code into DeviceType, FunctionCode, AccessType and MethodType.
+- [**74**Star][5m] [Jupyter Notebook] [surajr/url-classification](https://github.com/surajr/url-classification) Machine learning to classify Malicious (Spam)/Benign URL's
- [**74**Star][3y] [Py] [spotify/gcp-firewall-enforcer](https://github.com/spotify/gcp-firewall-enforcer) A toolbox to enforce firewall rules across multiple GCP projects.
-- [**74**Star][6m] [Py] [shashank-in/travisleaks](https://github.com/shashank-in/travisleaks) A tool to find sensitive keys and passwords in Travis logs
-- [**74**Star][3y] [Py] [securitystreak/security-scripts](https://github.com/securitystreak/security-scripts) A collection of public offensive and defensive security related scripts for InfoSec students.
-- [**74**Star][10m] [Py] [secrary/ida-scripts](https://github.com/secrary/ida-scripts) IDAPro scripts/plugins
- - [dumpDyn](https://github.com/secrary/ida-scripts/blob/master/dumpDyn/README.md) IDAPython plugin(script) which saves comments, names, breakpoints, functions from one execution to another.
- - [idenLib](https://github.com/secrary/ida-scripts/blob/master/idenLib/README.md) Library Function Identification
- - [IOCTL_decode](https://github.com/secrary/ida-scripts/blob/master/IOCTL_decode.py) Windows Device IO Control Code
- - [XORCheck](https://github.com/secrary/ida-scripts/blob/master/XORCheck.py) check xor
-- [**74**Star][1m] [C] [scriptingxss/iotgoat](https://github.com/scriptingxss/iotgoat) IoTGoat is a deliberately insecure firmware based on OpenWrt.
-- [**74**Star][1y] [Java] [schollz/find3-android-scanner](https://github.com/schollz/find3-android-scanner) An android app that scans Bluetooth and WiFi for FIND3
-- [**74**Star][4y] [Shell] [rossmairm/pentools](https://github.com/rossmairm/pentools) This is a bundle of python and bash penetration testing tools for recon and information gathering.
-- [**74**Star][1y] [Objective-C] [ret2/p2o_2018](https://github.com/ret2/p2o_2018)
+- [**74**Star][7m] [PHP] [s9mf/s9mf-php-webshell-bypass](https://github.com/s9mf/s9mf-php-webshell-bypass) 为方便WAF入库的项目 | 分享PHP免杀大马 | 菜是原罪 | 多姿势(假的就一个)
+- [**74**Star][3y] [Py] [ropnop/xxetimes](https://github.com/ropnop/xxetimes) An interactive OOB XXE data exfiltration tool
- [**74**Star][1y] [Py] [pielco11/dot](https://github.com/pielco11/dot) Darknet OSINT Transform
-- [**74**Star][12d] [Py] [patrowl/patrowlengines](https://github.com/patrowl/patrowlengines) PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform
+- [**74**Star][1m] [Rust] [phayes/sidefuzz](https://github.com/phayes/sidefuzz) Fuzzer to automatically find side-channel (timing) vulnerabilities
+- [**74**Star][6d] [Py] [patrowl/patrowlengines](https://github.com/patrowl/patrowlengines) PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform
- [**74**Star][3y] [Java] [panagiotisdrakatos/javaransomware](https://github.com/panagiotisdrakatos/javaransomware) Simple Ransomware Tool in Pure Java
- [**74**Star][8m] [Dockerfile] [owasp/sonarqube](https://github.com/owasp/sonarqube) OWASP SonarQube Project
-- [**74**Star][11m] [Visual Basic] [nyan-x-cat/lime-miner](https://github.com/nyan-x-cat/lime-miner) a simple hidden silent XMR miner.
+- [**74**Star][11m] [Visual Basic .NET] [nyan-x-cat/lime-miner](https://github.com/nyan-x-cat/lime-miner) a simple hidden silent XMR miner.
- [**74**Star][3m] [C++] [noddos/noddos](https://github.com/noddos/noddos) noddos:Noddos 客户端,监视家庭或企业网络中的网络流量,识别 IoT 和其他设备,并将特定设备的ACL应用于已识别设备的流量。 其目标是识别并阻止来自已被黑客控制的设备的流氓流量(例如在 DDOS 攻击的流量)
- [**74**Star][3y] [JS] [nmaier/about-addons-memory](https://github.com/nmaier/about-addons-memory) Tiny prototype Firefox extension presenting the memory usage of all active add-ons
-- [**74**Star][16d] [Py] [nightwatchcybersecurity/truegaze](https://github.com/nightwatchcybersecurity/truegaze) Static analysis tool for Android/iOS apps focusing on security issues outside the source code
-- [**74**Star][4m] [Go] [netxfly/x-proxy](https://github.com/netxfly/x-proxy) honeypot proxy
-- [**74**Star][3m] [PowerShell] [mdavis332/domainpasswordspray](https://github.com/mdavis332/domainpasswordspray) DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. It will automatically generate a userlist from the domain which excludes accounts that are expired, disabled locked out, or within 1 lockout attempt.
+- [**74**Star][2y] [JS] [mtjailed/unjailme](https://github.com/mtjailed/unjailme) A sandbox escape based on the proof-of-concept (CVE-2018-4087) by Rani Idan (Zimperium)
+- [**74**Star][3m] [PS] [mdavis332/domainpasswordspray](https://github.com/mdavis332/domainpasswordspray) DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. It will automatically generate a userlist from the domain which excludes accounts that are expired, disabled locked out, or within 1 lockout attempt.
- [**74**Star][6y] [Py] [matir/pwnableweb](https://github.com/matir/pwnableweb) PwnableWeb is a suite of web applications for use in information security training.
+- [**74**Star][3y] [Go] [matiasinsaurralde/transports](https://github.com/matiasinsaurralde/transports) A HTTP proxy that aims to support different transports.
- [**74**Star][2y] [C] [makefu/dnsmap](https://github.com/makefu/dnsmap) fork of
- [**74**Star][6y] [l3m0n/xss-filter-evasion-cheat-sheet-cn](https://github.com/l3m0n/xss-filter-evasion-cheat-sheet-cn) XSS_Filter_Evasion_Cheat_Sheet 中文版
+- [**74**Star][3y] [HTML] [l3m0n/wooyun-wiki](https://github.com/l3m0n/wooyun-wiki) wiki.wooyun.org的部分快照网页
+- [**74**Star][2y] [C++] [kasperskylab/forensicstools](https://github.com/kasperskylab/forensicstools) Tools for DFIR
- [**74**Star][4y] [Py] [integrissecurity/carbonator](https://github.com/integrissecurity/carbonator) Integris Security Carbonator - The Burp Suite Pro extension that automates scope, spider & scan from the command line. Carbonator helps automate the vulnerability scanning of web applications. Either 1 or 100 web applications can be scanned by issuing a single command. Carbonator is now available from within Burp Suite Pro through the BApp Store.
-- [**74**Star][1m] [ignitetechnologies/vulnhub-ctf-writeups](https://github.com/ignitetechnologies/vulnhub-ctf-writeups) This cheasheet is aimed at the CTF Players and Beginners to help them sort Vulnhub Labs. This list contains all the writeups available on hackingarticles.
-- [**74**Star][6m] [Py] [hameda2/zydra](https://github.com/hameda2/zydra)
+- [**74**Star][28d] [grapheneos/platform_manifest](https://github.com/grapheneos/platform_manifest) Repo manifest for the GrapheneOS mobile privacy and security hardening project.
+- [**74**Star][2y] [Py] [gento/dionaea](https://github.com/gento/dionaea) dionaea:低交互蜜罐
- [**74**Star][3y] [Py] [ganapati/crawlic](https://github.com/ganapati/crawlic) Web recon tool (find temporary files, parse robots.txt, search some folders, google dorks and search domains hosted on same server)
- [**74**Star][6y] [C++] [gamebooster/dota2-lua-engine](https://github.com/gamebooster/dota2-lua-engine) Lua Scripting Engine for Dota 2
- [**74**Star][2y] [C#] [foxglovesec/hpwn](https://github.com/foxglovesec/hpwn) HP printer security research code
@@ -9951,166 +10550,177 @@ networking routines
- [**74**Star][7m] [Makefile] [florianutz/ubuntu1604-cis](https://github.com/florianutz/ubuntu1604-cis) Ubuntu CIS Hardening Ansible Role
- [**74**Star][2y] [C++] [eyeofra/winconmon](https://github.com/eyeofra/winconmon) Windows Console Monitoring
- [**74**Star][4y] [Py] [einstein-/poodle](https://github.com/einstein-/poodle) A Proof of Concept for the POODLE vulnerability in SSLv3
-- [**74**Star][27d] [Java] [dschadow/javasecurity](https://github.com/dschadow/javasecurity) Java web and command line applications demonstrating various security topics
+- [**74**Star][2m] [Shell] [edu4rdshl/tor-router](https://github.com/edu4rdshl/tor-router) A tool that allow you to make TOR your default gateway and send all internet connections under TOR (as transparent proxy) for increase privacy/anonymity without extra unnecessary code.
- [**74**Star][1y] [Py] [dobin/ffw](https://github.com/dobin/ffw) A fuzzing framework for network servers
-- [**74**Star][5y] [C] [dinotools/sslscan](https://github.com/dinotools/sslscan) SSLScan tests SSL/TLS enabled services to discover supported cipher suites
-- [**74**Star][2m] [Ruby] [devunwired/apktools](https://github.com/devunwired/apktools) Ruby library for reading/parsing APK resource data
-- [**74**Star][1y] [PowerShell] [decoder-it/psportfwd](https://github.com/decoder-it/psportfwd) psportfwd: PowerShell编写的端口转发工具, 无需admin权限
-- [**74**Star][11d] [Ruby] [david942j/heapinfo](https://github.com/david942j/heapinfo) An interactive memory info for pwning / exploiting
+- [**74**Star][3m] [Lua] [dns-oarc/drool](https://github.com/dns-oarc/drool) DNS Replay Tool
+- [**74**Star][5y] [Py] [dmayer/time_trial](https://github.com/dmayer/time_trial) Time Trial - A tool for performing feasibility analyses of timing attacks
+- [**74**Star][4y] [Go] [dlion/guesstor](https://github.com/dlion/guesstor) Bruteforces [.onion] domains
+- [**74**Star][3m] [Ruby] [devunwired/apktools](https://github.com/devunwired/apktools) Ruby library for reading/parsing APK resource data
+- [**74**Star][13d] [Ruby] [david942j/heapinfo](https://github.com/david942j/heapinfo) An interactive memory info for pwning / exploiting
- [**74**Star][6m] [Py] [cve-search/via4cve](https://github.com/cve-search/via4cve) Vulnerability Information Aggregator for CVEs
- [**74**Star][8m] [Go] [coreos/torcx](https://github.com/coreos/torcx) torcx is a boot-time addon manager for immutable systems
- [**74**Star][3y] [Py] [compoterhacker/mehrai](https://github.com/compoterhacker/mehrai) docker based telnet honeypot
-- [**74**Star][4m] [Shell] [chunkingz/linsetmv1-2](https://github.com/chunkingz/linsetmv1-2) Linset is a WPA/WPA2 phishing tool (evil twin)
-- [**74**Star][2y] [Go] [calidog/certstream-go](https://github.com/calidog/certstream-go) Go library for connecting to CertStream
+- [**74**Star][10d] [C] [certificate-helper/tls-inspector](https://github.com/certificate-helper/tls-inspector) Easily view and inspect X.509 certificates on your iOS device.
- [**74**Star][2y] [Py] [busindre/dumpzilla](https://github.com/busindre/dumpzilla) Extract all forensic interesting information of Firefox, Iceweasel and Seamonkey browsers
- [**74**Star][7m] [Py] [bannsec/stegoveritas](https://github.com/bannsec/stegoveritas) Yet another Stego Tool
+- [**74**Star][2y] [Assembly] [azeria-labs/arm-assembly-examples](https://github.com/azeria-labs/arm-assembly-examples) Snippets from ARM assembly tutorials
- [**74**Star][2m] [Py] [anvilventures/lookinsidethebox](https://github.com/anvilventures/lookinsidethebox) Breaks the encryption and obfuscation layers that Dropbox applies to their modified Python interpreter.
+- [**74**Star][2y] [HTML] [anquanquantao/pentraining](https://github.com/anquanquantao/pentraining) 一个网络安全基础知识的教程。内容比较杂,好在都是实验视频和工具提供,可以自行动手完成实验。
+- [**74**Star][2y] [Batchfile] [aghorler/windows-10-hardening](https://github.com/aghorler/windows-10-hardening) An admittedly frivolous (and infrequently updated) attempt to harden Windows 10.
+- [**74**Star][2y] [233boy/chinaip](https://github.com/233boy/chinaip) 中国大陆 IP 列表(已优化)
- [**74**Star][4m] [C++] [0xeb/ida-qscripts](https://github.com/0xeb/ida-qscripts) An IDA plugin to increase productivity when developing scripts for IDA
+- [**74**Star][8m] [Go] [0x9ef/golang-uacbypasser](https://github.com/0x9ef/golang-uacbypasser) UAC bypass techniques implemented and written in Go
+- [**73**Star][23d] [Py] [nict-csl/exist](https://github.com/nict-csl/exist) EXIST is a web application for aggregating and analyzing cyber threat intelligence.
+- [**73**Star][13d] [Py] [openscap/openscap-daemon](https://github.com/openscap/openscap-daemon) Manages continuous scans of your infrastructure
- [**73**Star][5y] [C] [cloudsec/exploit](https://github.com/cloudsec/exploit) Some kernel exploit i wrote
-- [**73**Star][3y] [wtsxdev/android-security-list](https://github.com/wtsxdev/android-security-list) Collection of Android security related resources
- [**73**Star][3y] [Py] [programa-stic/hexag00n](https://github.com/programa-stic/hexag00n) Hexag00n: A collection of reverse engineering tools for the Qualcomm Digital Signal Proccesor (QDSP6)
- [**73**Star][4y] [Py] [veil-framework/veil-catapult](https://github.com/veil-framework/veil-catapult) Veil Catapult is no longer supported
-- [**73**Star][17d] [payloadbox/sql-injection-payload-list](https://github.com/payloadbox/sql-injection-payload-list)
-- [**73**Star][9m] [C#] [checkymander/sharp-smbexec](https://github.com/checkymander/Sharp-SMBExec) SMBExec C# module
+- [**73**Star][20d] [yingtongdou/graph-adversarial-learning-literature](https://github.com/yingtongdou/graph-adversarial-learning-literature) A curated list of adversarial learning papers on graph-structured data.
+- [**73**Star][10m] [C#] [checkymander/sharp-smbexec](https://github.com/checkymander/Sharp-SMBExec) SMBExec C# module
+- [**73**Star][3m] [Py] [acmesec/ctfcracktools-v2](https://github.com/Acmesec/CTFCrackTools-V2) China's first CTFTools framework.中国国内首个CTF工具框架,旨在帮助CTFer快速攻克难关
- [**73**Star][4y] [Shell] [ctfhacker/ctf-vagrant-64](https://github.com/ctfhacker/ctf-vagrant-64)
- [**73**Star][3y] [Py] [zhanghangorg/sqlinj-ant](https://github.com/zhanghangorg/sqlinj-ant) 伪分布式SQL注入自动扫描
- [**73**Star][2y] [HTML] [xuechiyaobai/v8_november_2017](https://github.com/xuechiyaobai/v8_november_2017)
- [**73**Star][1y] [C++] [xrobots/robotx](https://github.com/xrobots/robotx) All the things for RobotX
- [**73**Star][3y] [C] [xpn/ssh-inject](https://github.com/xpn/ssh-inject) A ptrace POC by hooking SSH to reveal provided passwords
-- [**73**Star][6m] [C++] [watersalesman/aura-botnet](https://github.com/watersalesman/aura-botnet) A super portable botnet framework with a Django-based C2 server. The client is written in C++, with alternate clients written in Rust, Bash, and Powershell.
-- [**73**Star][8d] [Py] [unkn0wnh4ckr/hackers-tool-kit](https://github.com/unkn0wnh4ckr/hackers-tool-kit) Its a framework filled with alot of options and hacking tools you use directly in the script from brute forcing to payload making im still adding more stuff i now have another tool out called htkl-lite its hackers-tool-kit just not as big and messy to see updates check on my instagram @tuf_unkn0wn or if there are any problems message me on insta…
-- [**73**Star][4y] [Visual Basic] [twi1ight/ad-pentest-script](https://github.com/twi1ight/ad-pentest-script) Active Directory pentest scripts
+- [**73**Star][7m] [C++] [watersalesman/aura-botnet](https://github.com/watersalesman/aura-botnet) A super portable botnet framework with a Django-based C2 server. The client is written in C++, with alternate clients written in Rust, Bash, and Powershell.
- [**73**Star][6m] [tigaxmt/hackerone-lessons](https://github.com/tigaxmt/hackerone-lessons) Transcribed video lessons of HackerOne to pdf's
- [**73**Star][2y] [Shell] [te-papa/aws-key-disabler](https://github.com/te-papa/aws-key-disabler) aws-key-disabler: 禁用超过指定日期的 AWS 访问key
+- [**73**Star][2y] [Py] [sumoprojects/sumoeasyminer](https://github.com/sumoprojects/sumoeasyminer) The most easy, intuitive CPU miner for cryptonote-based cryptocurrency
- [**73**Star][2y] [Java] [spiderlabs/burplay](https://github.com/spiderlabs/burplay) Burplay is a Burp Extension allowing for replaying any number of requests using same modifications definition. Its main purpose is to aid in searching for Privilege Escalation issues.
+- [**73**Star][4m] [Assembly] [siguza/aprr](https://github.com/siguza/aprr) Apple hardware secrets
+- [**73**Star][24d] [C++] [sidyhe/dxx](https://github.com/sidyhe/dxx) Windows Kernel Driver with C++ runtime
- [**73**Star][3m] [C++] [shellvm/shellvm](https://github.com/shellvm/shellvm) A collection of LLVM transform and analysis passes to write shellcode in regular C
- [**73**Star][12m] [C] [securifera/servicefu](https://github.com/securifera/servicefu) Automates credential skimming from service accounts in Windows Registry
+- [**73**Star][2m] [Py] [rub-syssec/grimoire](https://github.com/rub-syssec/grimoire)
- [**73**Star][3y] [C++] [rrbranco/blackhat2016](https://github.com/rrbranco/blackhat2016) Black Hat 2016 Slides, Paper and Code
-- [**73**Star][3y] [Py] [ropnop/xxetimes](https://github.com/ropnop/xxetimes) An interactive OOB XXE data exfiltration tool
-- [**73**Star][7d] [JS] [ralphwetzel/theonionbox](https://github.com/ralphwetzel/theonionbox) Dashboard to monitor Tor node operations
+- [**73**Star][5y] [C++] [rrbranco/blackhat2012](https://github.com/rrbranco/blackhat2012) Blackhat 2012 Sample Codes
+- [**73**Star][9d] [JS] [ralphwetzel/theonionbox](https://github.com/ralphwetzel/theonionbox) Dashboard to monitor Tor node operations
+- [**73**Star][2y] [Py] [qianniaoge/f-scrack](https://github.com/qianniaoge/f-scrack) 一款python编写的轻量级弱口令检测脚本,目前支持以下服务:FTP、MYSQL、MSSQL、MONGODB、REDIS、TELNET、ELASTICSEARCH、POSTGRESQL。
+- [**73**Star][1m] [C] [puppet-meteor/mopt-afl](https://github.com/puppet-meteor/mopt-afl) MOpt-AFL provided by the paper "MOPT: Optimized Mutation Scheduling for Fuzzers"
- [**73**Star][4y] [PHP] [phith0n/b374k](https://github.com/phith0n/b374k) PHP Webshell with handy features
-- [**73**Star][16d] [C] [ntraiseharderror/antimalware-research](https://github.com/ntraiseharderror/antimalware-research) Research on Anti-malware and other related security solutions
- [**73**Star][3y] [PHP] [nmalcolm/ipcamshell](https://github.com/nmalcolm/ipcamshell) IP Cam Shell is a command line script for testing and exploiting a wide range of IP cameras as demonstrated by Craig Heffner in "Exploiting Surveillance Cameras Like a Hollywood Hacker". See the slides here:
- [**73**Star][4y] [C] [nihilus/ida_signsrch](https://github.com/nihilus/ida_signsrch) IDA Pro plug-in conversion of Luigi Auriemma's signsrch signature matching tool.
- [**73**Star][10m] [Py] [msuhanov/yarp](https://github.com/msuhanov/yarp) Yet another registry parser
- [**73**Star][6y] [Shell] [mkottman/luacrypto](https://github.com/mkottman/luacrypto) Fork of LuaCrypto, which enables encryption and decryption through OpenSSL
- [**73**Star][Py] [minisafe/microscan](https://github.com/minisafe/microscan) MicroScan 基于B/S架构微扫描器
+- [**73**Star][5m] [Py] [milo2012/ipv4bypass](https://github.com/milo2012/ipv4bypass) 利用ipV6绕过安全防护
- [**73**Star][4y] [Py] [marekrei/theano-tutorial](https://github.com/marekrei/theano-tutorial) Basic Theano code samples
+- [**73**Star][3y] [lcatro/hacker_document](https://github.com/lcatro/hacker_document) 收集一些以前看过对于入门和进阶很有用的攻击原理文档..
+- [**73**Star][2y] [C++] [koemeet/rtti-obfuscator](https://github.com/koemeet/rtti-obfuscator) Obfuscates all RTTI (Run-time type information) inside a binary
- [**73**Star][4y] [Py] [johnmaguire/cardinal](https://github.com/johnmaguire/cardinal) A Python IRC bot, designed to make adding functionality quick and simple.
-- [**73**Star][19d] [Py] [internetarchive/warctools](https://github.com/internetarchive/warctools) Command line tools and libraries for handling and manipulating WARC files (and HTTP contents)
+- [**73**Star][1m] [HTML] [jmortega/python-pentesting](https://github.com/jmortega/python-pentesting) python-pentesting-tool
+- [**73**Star][7m] [Py] [jiangsir404/pbscan](https://github.com/jiangsir404/pbscan) 基于burpsuite headless 的代理式被动扫描系统
+- [**73**Star][21d] [Py] [internetarchive/warctools](https://github.com/internetarchive/warctools) Command line tools and libraries for handling and manipulating WARC files (and HTTP contents)
- [**73**Star][3y] [Shell] [inquisb/unix-privesc-check](https://github.com/inquisb/unix-privesc-check) Shell script that runs on UNIX systems (tested on Solaris 9, HPUX 11, various Linux distributions, FreeBSD 6.2). It detects misconfigurations that could allow local unprivileged user to escalate to other users (e.g. root) or to access local apps (e.g. databases). This is a collaborative rework of version 1.0
-- [**73**Star][26d] [grapheneos/platform_manifest](https://github.com/grapheneos/platform_manifest) Repo manifest for the GrapheneOS mobile privacy and security hardening project.
-- [**73**Star][2y] [Py] [gento/dionaea](https://github.com/gento/dionaea) dionaea:低交互蜜罐
+- [**73**Star][3y] [Go] [grahamedgecombe/ct-submit](https://github.com/grahamedgecombe/ct-submit) A program for submitting X.509 certificate chains to Certificate Transparency log servers.
- [**73**Star][1y] [Ruby] [fbkcs/msf-elf-in-memory-execution](https://github.com/fbkcs/msf-elf-in-memory-execution) msf-elf-in-memory-execution: Metasploit模块, 用于在内存中执行ELF文件
-- [**73**Star][2m] [Shell] [edu4rdshl/tor-router](https://github.com/edu4rdshl/tor-router) A tool that allow you to make TOR your default gateway and send all internet connections under TOR (as transparent proxy) for increase privacy/anonymity without extra unnecessary code.
- [**73**Star][2y] [Ruby] [dyjakan/interpreter-bugs](https://github.com/dyjakan/interpreter-bugs) Fuzzing results for various interpreters.
- [**73**Star][9m] [C++] [doublelabyrinth/sdokeycrypt-sys-local-privilege-elevation](https://github.com/doublelabyrinth/sdokeycrypt-sys-local-privilege-elevation) CVE-2019-9729
-- [**73**Star][3m] [Lua] [dns-oarc/drool](https://github.com/dns-oarc/drool) DNS Replay Tool
-- [**73**Star][4y] [Go] [dlion/guesstor](https://github.com/dlion/guesstor) Bruteforces [.onion] domains
+- [**73**Star][1y] [Py] [dionach/panhunt](https://github.com/dionach/panhunt) PANhunt searches for credit card numbers (PANs) in directories.
- [**73**Star][9m] [Verilog] [denandz/lpc_sniffer_tpm](https://github.com/denandz/lpc_sniffer_tpm) A low pin count sniffer for ICEStick - targeting TPM chips
+- [**73**Star][1y] [PS] [decoder-it/psportfwd](https://github.com/decoder-it/psportfwd) psportfwd: PowerShell编写的端口转发工具, 无需admin权限
- [**73**Star][2y] [HTML] [cyberheartmi9/payloadsallthethings](https://github.com/cyberheartmi9/payloadsallthethings)
- [**73**Star][5y] [C] [cooloppo/reclass](https://github.com/cooloppo/reclass) A tool for reconstructing data types based on memory - [Outdated; use ReClassEx]
-- [**73**Star][3y] [Visual Basic] [cn33liz/vbsmeter](https://github.com/cn33liz/vbsmeter) VBS Reversed TCP Meterpreter Stager
-- [**73**Star][8d] [C] [certificate-helper/tls-inspector](https://github.com/certificate-helper/tls-inspector) Easily view and inspect X.509 certificates on your iOS device.
+- [**73**Star][3y] [Visual Basic .NET] [cn33liz/vbsmeter](https://github.com/cn33liz/vbsmeter) VBS Reversed TCP Meterpreter Stager
- [**73**Star][3y] [Py] [carlosgprado/brundlefuzz](https://github.com/carlosgprado/brundlefuzz) BrundleFuzz is a distributed fuzzer for Windows and Linux using dynamic binary instrumentation.
+- [**73**Star][1y] [Java] [bit4woo/u2c](https://github.com/bit4woo/u2c) Unicode To Chinese -- U2C : A burpsuite Extender That Convert Unicode To Chinese 【Unicode编码转中文的burp插件】
- [**73**Star][1y] [Batchfile] [b4rtik/hiddenpowershelldll](https://github.com/b4rtik/hiddenpowershelldll)
-- [**73**Star][2y] [Assembly] [azeria-labs/arm-assembly-examples](https://github.com/azeria-labs/arm-assembly-examples) Snippets from ARM assembly tutorials
-- [**73**Star][2y] [HTML] [anquanquantao/pentraining](https://github.com/anquanquantao/pentraining) 一个网络安全基础知识的教程。内容比较杂,好在都是实验视频和工具提供,可以自行动手完成实验。
-- [**72**Star][6m] [Py] [golismero/openvas_lib](https://github.com/golismero/openvas_lib) OpenVAS connector for versions 6, 7, 8 and 9
+- [**73**Star][7m] [Go] [audibleblink/letsproxy](https://github.com/audibleblink/letsproxy) Quickly fetch Let's Encrypt certs and serve a reverse proxy
+- [**73**Star][5y] [Shell] [andrewmichaelsmith/honeypot-setup-script](https://github.com/andrewmichaelsmith/honeypot-setup-script) Honeypot (Dionaea and kippo) setup script
+- [**73**Star][16d] [C++] [3gstudent/homework-of-c-language](https://github.com/3gstudent/homework-of-c-language) C/C++ code examples of my blog.
+- [**72**Star][5m] [C] [zhengshoujian/darknet-yolo-segmentation](https://github.com/zhengshoujian/darknet-yolo-segmentation) This project is based on darknet to get image segmentation
+- [**72**Star][9d] [Py] [golismero/openvas_lib](https://github.com/golismero/openvas_lib) OpenVAS connector for versions 6, 7, 8 and 9
- [**72**Star][1y] [C] [shellphish/afl-other-arch](https://github.com/shellphish/afl-other-arch) AFL, with scripts to support other architectures.
- [**72**Star][1y] [v2ray/discussion](https://github.com/v2ray/discussion) For general discussion over Project V development and usage.
- [**72**Star][2y] [Go] [wallix/triplestore](https://github.com/wallix/triplestore) Nifty library to manage, query and store RDF triples. Make RDF great again!
-- [**72**Star][2m] [thehive-project/cortexdocs](https://github.com/TheHive-Project/CortexDocs) Documentation of Cortex
-- [**72**Star][3m] [Py] [acmesec/ctfcracktools-v2](https://github.com/Acmesec/CTFCrackTools-V2) China's first CTFTools framework.中国国内首个CTF工具框架,旨在帮助CTFer快速攻克难关
+- [**72**Star][2y] [C++] [wyexe/lol_china](https://github.com/wyexe/LOL_China)
+- [**72**Star][2d] [thehive-project/cortexdocs](https://github.com/TheHive-Project/CortexDocs) Documentation of Cortex
+- [**72**Star][2y] [zntfdr/awesome-twitter-bots](https://github.com/zntfdr/awesome-twitter-bots) A Curated Collection of the Best Twitter Bots
- [**72**Star][3y] [C++] [zcgonvh/ms16-032](https://github.com/zcgonvh/ms16-032) MS16-032(CVE-2016-0099) for SERVICE ONLY
- [**72**Star][3y] [Go] [xsec-lab/x-waf-admin](https://github.com/xsec-lab/x-waf-admin) x-waf的web管理后台
- [**72**Star][4y] [Pascal] [xlinshan/coldroot](https://github.com/xlinshan/coldroot) Mac OS Trojan (RAT) made with love <3
+- [**72**Star][7d] [Py] [xfreed0m/smtptester](https://github.com/xfreed0m/smtptester) small python3 tool to check common vulnerabilities in SMTP servers
- [**72**Star][2y] [C++] [vusec/guardion](https://github.com/vusec/guardion) Android GuardION patches to mitigate DMA-based Rowhammer attacks on ARM
- [**72**Star][3y] [vrtadmin/first](https://github.com/vrtadmin/first) Function Identification and Recovery Signature Tool
-- [**72**Star][3y] [C] [vnik5287/kernel_rop](https://github.com/vnik5287/kernel_rop)
- [**72**Star][2y] [C++] [vecna/sniffjoke](https://github.com/vecna/sniffjoke) a client-only layer of protection from the wiretap/sniff/IDS analysis
- [**72**Star][3m] [vanhauser-thc/afl-patches](https://github.com/vanhauser-thc/afl-patches) Patches to afl to fix bugs or add enhancements
-- [**72**Star][25d] [Dart] [timsneath/github-tracker](https://github.com/timsneath/github-tracker) Grabs some useful information from GitHub.
+- [**72**Star][27d] [Dart] [timsneath/github-tracker](https://github.com/timsneath/github-tracker) Grabs some useful information from GitHub.
- [**72**Star][3y] [C] [tillmannw/honeytrap](https://github.com/tillmannw/honeytrap) a low-interaction honeypot
- [**72**Star][3y] [Perl] [tanjiti/fingerprint](https://github.com/tanjiti/fingerprint) web应用指纹识别
-- [**72**Star][2y] [Objective-C] [sunweiliang/baiduyuncrack](https://github.com/sunweiliang/baiduyuncrack) iOS百度云盘 破解速度限制、去广告、去更新 无需越狱~
-- [**72**Star][17d] [XSLT] [spring-cloud/spring-cloud-stream-starters](https://github.com/spring-cloud/spring-cloud-stream-starters)
-- [**72**Star][17d] [Py] [skelsec/msldap](https://github.com/skelsec/msldap) 从Active Directory中获取用户对象, 并将重要内容存储在一个大型电子表格中. 用于渗透期间快速识别易受攻击的用户设置
+- [**72**Star][2y] [ObjC] [sunweiliang/baiduyuncrack](https://github.com/sunweiliang/baiduyuncrack) iOS百度云盘 破解速度限制、去广告、去更新 无需越狱~
+- [**72**Star][19d] [XSLT] [spring-cloud/spring-cloud-stream-starters](https://github.com/spring-cloud/spring-cloud-stream-starters)
- [**72**Star][2y] [Py] [skelsec/cve-2017-12542](https://github.com/skelsec/cve-2017-12542) Test and exploit for CVE-2017-12542
-- [**72**Star][4m] [Assembly] [siguza/aprr](https://github.com/siguza/aprr) Apple hardware secrets
+- [**72**Star][6m] [HTML] [securityautomation/dumpthegit](https://github.com/securityautomation/dumpthegit) DumpTheGit searches through public repositories to find sensitive information uploaded to the Github repositories.
- [**72**Star][3y] [Py] [scumsec/recon-ng-modules](https://github.com/scumsec/recon-ng-modules) Additional modules for recon-ng
-- [**72**Star][7m] [PHP] [s9mf/s9mf-php-webshell-bypass](https://github.com/s9mf/s9mf-php-webshell-bypass) 为方便WAF入库的项目 | 分享PHP免杀大马 | 菜是原罪 | 多姿势(假的就一个)
-- [**72**Star][5y] [C++] [rrbranco/blackhat2012](https://github.com/rrbranco/blackhat2012) Blackhat 2012 Sample Codes
-- [**72**Star][2y] [Py] [roothaxor/ransom](https://github.com/roothaxor/ransom) Various codes related to Ransomware Developement
+- [**72**Star][3y] [Py] [roothaxor/ransom](https://github.com/roothaxor/ransom) Various codes related to Ransomware Developement
+- [**72**Star][1y] [JS] [rameshaditya/ducky](https://github.com/rameshaditya/ducky) Chrome extension to overlay a (super adorable) rubber duck, as a virtual companion during rubber duck debugging.
- [**72**Star][6m] [Py] [pyobfx/pyobfx](https://github.com/pyobfx/pyobfx) Python Obfuscator & Packer
-- [**72**Star][30d] [C] [puppet-meteor/mopt-afl](https://github.com/puppet-meteor/mopt-afl) MOpt-AFL provided by the paper "MOPT: Optimized Mutation Scheduling for Fuzzers"
-- [**72**Star][14d] [C++] [powerdns/weakforced](https://github.com/powerdns/weakforced) Anti-Abuse for servers at authentication time
-- [**72**Star][1m] [Rust] [phayes/sidefuzz](https://github.com/phayes/sidefuzz) Fuzzer to automatically find side-channel (timing) vulnerabilities
-- [**72**Star][8m] [C++] [niklasb/bspfuzz](https://github.com/niklasb/bspfuzz)
-- [**72**Star][21d] [C] [naworkcaj/bdvl](https://github.com/naworkcaj/bdvl) LD_PRELOAD Linux rootkit (x86 & ARM)
-- [**72**Star][4y] [Objective-C] [mubix/ditto](https://github.com/mubix/ditto) Binary resource copier
-- [**72**Star][2y] [JS] [mtjailed/unjailme](https://github.com/mtjailed/unjailme) A sandbox escape based on the proof-of-concept (CVE-2018-4087) by Rani Idan (Zimperium)
-- [**72**Star][5m] [Py] [milo2012/ipv4bypass](https://github.com/milo2012/ipv4bypass) 利用ipV6绕过安全防护
-- [**72**Star][6y] [PowerShell] [mattifestation/powerworm](https://github.com/mattifestation/powerworm) Analysis, detection, and removal of the "Power Worm" PowerShell-based malware
+- [**72**Star][2m] [JS] [purplei2p/i2pdbrowser](https://github.com/purplei2p/i2pdbrowser) i2pd browser bundle
+- [**72**Star][16d] [C++] [powerdns/weakforced](https://github.com/powerdns/weakforced) Anti-Abuse for servers at authentication time
+- [**72**Star][6y] [Py] [piccimario/iphone-backup-analyzer-2](https://github.com/piccimario/iphone-backup-analyzer-2) iPBA, Qt version
+- [**72**Star][9m] [C++] [niklasb/bspfuzz](https://github.com/niklasb/bspfuzz)
+- [**72**Star][4y] [ObjC] [mubix/ditto](https://github.com/mubix/ditto) Binary resource copier
+- [**72**Star][6y] [PS] [mattifestation/powerworm](https://github.com/mattifestation/powerworm) Analysis, detection, and removal of the "Power Worm" PowerShell-based malware
- [**72**Star][5y] [C++] [malwaretech/zombifyprocess](https://github.com/malwaretech/zombifyprocess) Inject code into a legitimate process
- [**72**Star][7y] [C] [machn1k/scalpel-2.0](https://github.com/machn1k/scalpel-2.0) Scalpel; File Carving. Configuration files are modified.
-- [**72**Star][7m] [TypeScript] [louisvillemetro/wazeccpprocessor](https://github.com/louisvillemetro/wazeccpprocessor) Waze WARP takes your CCP data feed and processes it into your cloud provider for access, analysis, and visualization. An Open Government Coalition (OGC) project.
+- [**72**Star][7m] [TS] [louisvillemetro/wazeccpprocessor](https://github.com/louisvillemetro/wazeccpprocessor) Waze WARP takes your CCP data feed and processes it into your cloud provider for access, analysis, and visualization. An Open Government Coalition (OGC) project.
- [**72**Star][3y] [Py] [lorexxar/bscanner](https://github.com/lorexxar/bscanner) 一直没有顺手的扫描器,那就自己写一个吧
- [**72**Star][1y] [Py] [lixmk/concierge](https://github.com/lixmk/concierge) Physical Access Control Identification and Exploitation
-- [**72**Star][3y] [lcatro/hacker_document](https://github.com/lcatro/hacker_document) 收集一些以前看过对于入门和进阶很有用的攻击原理文档..
- [**72**Star][5y] [Py] [ksoona/attackvector](https://github.com/ksoona/attackvector) AttackVector Linux
-- [**72**Star][2y] [C++] [koemeet/rtti-obfuscator](https://github.com/koemeet/rtti-obfuscator) Obfuscates all RTTI (Run-time type information) inside a binary
-- [**72**Star][2y] [C++] [kasperskylab/forensicstools](https://github.com/kasperskylab/forensicstools) Tools for DFIR
- [**72**Star][6y] [C] [jtripper/sslnuke](https://github.com/jtripper/sslnuke) Transparent proxy that decrypts SSL traffic and prints out IRC messages.
- [**72**Star][5y] [Py] [joridos/custom-ssh-backdoor](https://github.com/joridos/custom-ssh-backdoor) Custom ssh backdoor, coded in python using Paramiko
-- [**72**Star][1m] [HTML] [jmortega/python-pentesting](https://github.com/jmortega/python-pentesting) python-pentesting-tool
-- [**72**Star][7m] [Py] [jiangsir404/pbscan](https://github.com/jiangsir404/pbscan) 基于burpsuite headless 的代理式被动扫描系统
-- [**72**Star][3y] [PowerShell] [jaredhaight/invoke-metasploitpayload](https://github.com/jaredhaight/invoke-metasploitpayload) Powershell script to download and kick off Metasploit payloads. Relies on the exploit/multi/scripts/web_delivery metasploit module.
-- [**72**Star][14d] [Zeek] [hosom/file-extraction](https://github.com/hosom/file-extraction) Extract files from network traffic with Bro.
+- [**72**Star][4d] [jawz101/mobileadtrackers](https://github.com/jawz101/mobileadtrackers) Taken from DNS logs while actively using Android apps over the years. Formatted in hostfile format.
+- [**72**Star][3y] [PS] [jaredhaight/invoke-metasploitpayload](https://github.com/jaredhaight/invoke-metasploitpayload) Powershell script to download and kick off Metasploit payloads. Relies on the exploit/multi/scripts/web_delivery metasploit module.
+- [**72**Star][17d] [Zeek] [hosom/file-extraction](https://github.com/hosom/file-extraction) Extract files from network traffic with Bro.
- [**72**Star][2y] [C++] [hexhive/hextype](https://github.com/hexhive/hextype) HexType: Efficient Detection of Type Confusion Errors for C++
-- [**72**Star][3y] [Go] [grahamedgecombe/ct-submit](https://github.com/grahamedgecombe/ct-submit) A program for submitting X.509 certificate chains to Certificate Transparency log servers.
+- [**72**Star][3y] [Py] [hak5darren/bashbunny-payloads](https://github.com/hak5darren/bashbunny-payloads) Payloads for the Hak5 Bash Bunny
- [**72**Star][5y] [Py] [feliam/cve-2014-4377](https://github.com/feliam/cve-2014-4377)
- [**72**Star][8m] [C] [ez-flash/omega-kernel](https://github.com/ez-flash/omega-kernel) EZ-FLASH OMEGA Kernel
- [**72**Star][4y] [Py] [exp0se/harbinger](https://github.com/exp0se/harbinger) Harbinger Threat Intelligence
- [**72**Star][2y] [Py] [embedi/meloader](https://github.com/embedi/meloader) Intel Management Engine firmware loader plugin for IDA
-- [**72**Star][1y] [Py] [dionach/panhunt](https://github.com/dionach/panhunt) PANhunt searches for credit card numbers (PANs) in directories.
-- [**72**Star][2y] [C] [dadas190/heavens-gate-2.0](https://github.com/dadas190/heavens-gate-2.0) Executes 64bit code from a 32bit process
-- [**72**Star][7d] [Py] [cert-polska/n6](https://github.com/cert-polska/n6) Automated handling of data feeds for security teams
+- [**72**Star][2y] [Py] [denglend/decode345](https://github.com/denglend/decode345) Honeywell 345 Mhz decoding
+- [**72**Star][4y] [david415/ansible-tor](https://github.com/david415/ansible-tor) An Ansible role for using tor!
+- [**72**Star][3m] [JS] [cveproject/automation-working-group](https://github.com/cveproject/automation-working-group) CVE Automation Working Group
+- [**72**Star][1y] [C] [chinatiny/inlinehooklib](https://github.com/chinatiny/inlinehooklib) 同时支持用户和内核模式的Inlinehook库
+- [**72**Star][9d] [Py] [cert-polska/n6](https://github.com/cert-polska/n6) Automated handling of data feeds for security teams
- [**72**Star][1y] [C#] [c4bbage/pentestscripts](https://github.com/c4bbage/pentestscripts) 白名单利用代码、渗透工具
- [**72**Star][8m] [Py] [busescanfly/rpi-hunter](https://github.com/busescanfly/rpi-hunter) Auto discover and exploit LAN raspberry pi's
-- [**72**Star][1y] [Java] [bit4woo/u2c](https://github.com/bit4woo/u2c) Unicode To Chinese -- U2C : A burpsuite Extender That Convert Unicode To Chinese 【Unicode编码转中文的burp插件】
- [**72**Star][5y] [Py] [binsigma/binsourcerer](https://github.com/binsigma/binsourcerer) Assembly to Source Code Matching Framework for IDA Pro.
-- [**72**Star][7m] [Go] [audibleblink/letsproxy](https://github.com/audibleblink/letsproxy) Quickly fetch Let's Encrypt certs and serve a reverse proxy
- [**72**Star][3y] [Py] [antojoseph/droid-ff](https://github.com/antojoseph/droid-ff) Android File Fuzzing Framework
- [**72**Star][2y] [Py] [angr/simuvex](https://github.com/angr/simuvex) [DEPRECATED] A symbolic execution engine for the VEX IR
-- [**72**Star][5y] [Shell] [andrewmichaelsmith/honeypot-setup-script](https://github.com/andrewmichaelsmith/honeypot-setup-script) Honeypot (Dionaea and kippo) setup script
-- [**72**Star][2y] [Batchfile] [aghorler/windows-10-hardening](https://github.com/aghorler/windows-10-hardening) An admittedly frivolous (and infrequently updated) attempt to harden Windows 10.
-- [**72**Star][14d] [C++] [3gstudent/homework-of-c-language](https://github.com/3gstudent/homework-of-c-language) C/C++ code examples of my blog.
-- [**72**Star][2y] [233boy/chinaip](https://github.com/233boy/chinaip) 中国大陆 IP 列表(已优化)
+- [**72**Star][5y] [80vul/pasc2at](https://github.com/80vul/pasc2at) Php Application Source Code Audits Advanced Technology
+- [**72**Star][3m] [Go] [0xrawsec/golang-evtx](https://github.com/0xrawsec/golang-evtx) a parsing library for Windows EVTX log files.
+- [**71**Star][2y] [Py] [jiansiting/wpa2-krack](https://github.com/jiansiting/wpa2-krack)
- [**71**Star][4y] [Ruby] [etsy/chef-whitelist](https://github.com/etsy/chef-whitelist) Simple library to enable host based rollouts of changes
-- [**71**Star][1m] [Py] [boypt/vmess2json](https://github.com/boypt/vmess2json) Scripts parse vmess:// links into v2ray config json and vice versa.
+- [**71**Star][4m] [Py] [utkusen/rhodiola](https://github.com/utkusen/rhodiola) Personalized wordlist generator with NLP, by analyzing tweets. (A.K.A crunch2049)
+- [**71**Star][12d] [Shell] [nahamsec/crtndstry](https://github.com/nahamsec/crtndstry) Yet another subdomain finder
- [**71**Star][5m] [Py] [k8gege/scrun](https://github.com/k8gege/scrun) BypassAV ShellCode Loader (Cobaltstrike/Metasploit)
-- [**71**Star][8d] [C++] [jeefo/yapb](https://github.com/jeefo/yapb) AI opponent for Counter-Strike based on POD-Bot 2.6
+- [**71**Star][10d] [C++] [jeefo/yapb](https://github.com/jeefo/yapb) AI opponent for Counter-Strike based on POD-Bot 2.6
+- [**71**Star][27d] [C] [davidxanatos/taskexplorer](https://github.com/davidxanatos/taskexplorer) Power full Task Manager
- [**71**Star][7m] [Py] [rmanofcn/ml_malware_detect](https://github.com/RManOfCN/ML_Malware_detect) 阿里云安全恶意程序检测比赛
- [**71**Star][1m] [Jupyter Notebook] [mozilla/overscripted](https://github.com/mozilla/overscripted) Repository for the Mozilla Overscripted Data Mining Challenge
+- [**71**Star][6m] [Py] [jakobrpennington/information-security](https://github.com/JakobRPennington/information-security) A place where I can create, collect and share tooling, resources and knowledge about information security.
- [**71**Star][7m] [C] [hc0d3r/alfheim](https://github.com/hc0d3r/alfheim) a linux process hacker tool
- [**71**Star][7y] [Py] [mushorg/buttinsky](https://github.com/mushorg/buttinsky) Botnet monitoring is a crucial part in threat analysis and often neglected due to the lack of proper open source tools. Our tool will provide an open source framework for automated botnet monitoring. The modular design will allow full customization of the used protocols, the monitoring clients behavior, how we log the collected information, proc…
-- [**71**Star][2y] [zntfdr/awesome-twitter-bots](https://github.com/zntfdr/awesome-twitter-bots) A Curated Collection of the Best Twitter Bots
- [**71**Star][2y] [C] [yrp604/atc-sources](https://github.com/yrp604/atc-sources) Attacking the Core associated source files
- [**71**Star][3y] [Py] [xyntax/baiduyun-brute](https://github.com/xyntax/baiduyun-brute) [已失效] 多线程百度云(私密分享)密码爆破工具 pan.baidu.com
- [**71**Star][2y] [Py] [x64dbg/mona](https://github.com/x64dbg/mona) Fork of mona.py with x64dbg support
+- [**71**Star][4y] [C++] [waleedassar/antidebug](https://github.com/waleedassar/antidebug) Collection Of Anti-Debugging Tricks
- [**71**Star][6m] [PHP] [vlucas/pikirasa](https://github.com/vlucas/pikirasa) PKI public/private RSA key encryption using the OpenSSL extension
+- [**71**Star][1y] [Shell] [thelinuxchoice/keydroid](https://github.com/thelinuxchoice/keydroid) Android Keylogger + Reverse Shell
- [**71**Star][3y] [Py] [tengzhangchao/microsoftspider](https://github.com/tengzhangchao/microsoftspider) 爬取微软漏洞信息,MS对应的每个版本操作系统KB号以及补丁下载地址。
+- [**71**Star][4m] [Py] [utkusen/rhodiola](https://github.com/utkusen/rhodiola) Personalized wordlist generator with NLP, by analyzing tweets. (A.K.A crunch2049)
- [**71**Star][3y] [C++] [tandasat/eopmon](https://github.com/tandasat/eopmon) Elevation of privilege detector based on HyperPlatform
- [**71**Star][2y] [Py] [soinull/assimilate](https://github.com/soinull/assimilate) Assimilate is a series of scripts for using the Naïve Bayes algorithm to find potential malicious activity in HTTP headers
-- [**71**Star][22d] [C++] [sidyhe/dxx](https://github.com/sidyhe/dxx) Windows Kernel Driver with C++ runtime
+- [**71**Star][19d] [Py] [skelsec/msldap](https://github.com/skelsec/msldap) 从Active Directory中获取用户对象, 并将重要内容存储在一个大型电子表格中. 用于渗透期间快速识别易受攻击的用户设置
+- [**71**Star][2m] [HTML] [sisoc-tokyo/real-timedetectionad_ver2](https://github.com/sisoc-tokyo/real-timedetectionad_ver2)
- [**71**Star][1y] [C] [shift-crops/escapeme](https://github.com/shift-crops/escapeme) TokyoWestens CTF 4th 2018 EscapeMe challenge
-- [**71**Star][6m] [HTML] [securityautomation/dumpthegit](https://github.com/securityautomation/dumpthegit) DumpTheGit searches through public repositories to find sensitive information uploaded to the Github repositories.
-- [**71**Star][2m] [Py] [rub-syssec/grimoire](https://github.com/rub-syssec/grimoire)
+- [**71**Star][6d] [C++] [rodneyviana/netext](https://github.com/rodneyviana/netext) WinDbg extension for data mining managed heap. It also includes commands to list http request, wcf services, WIF tokens among others
+- [**71**Star][16d] [Rust] [redsift/ingraind](https://github.com/redsift/ingraind) Data first monitoring agent using (e)BPF, built on RedBPF
- [**71**Star][3y] [C] [rcvalle/vmmfuzzer](https://github.com/rcvalle/vmmfuzzer) A hypervisor or virtual machine monitor (VMM) fuzzer.
- [**71**Star][3y] [C++] [razzile/liberation](https://github.com/razzile/liberation) A runtime patching library for iOS. Major rework on unfinished branch
- [**71**Star][3y] [Shell] [ppabc/cc_iptables](https://github.com/ppabc/cc_iptables) 收集处理DDOS、CC攻击各类脚本,包括NGINX日志中的CC攻击IP处理。
-- [**71**Star][6y] [Py] [piccimario/iphone-backup-analyzer-2](https://github.com/piccimario/iphone-backup-analyzer-2) iPBA, Qt version
- [**71**Star][2y] [Shell] [opsxcq/exploit-cve-2014-6271](https://github.com/opsxcq/exploit-cve-2014-6271) Shellshock exploit + vulnerable environment
- [**71**Star][1y] [PHP] [opsxcq/docker-vulnerable-dvwa](https://github.com/opsxcq/docker-vulnerable-dvwa) Damn Vulnerable Web Application Docker container
- [**71**Star][2y] [HTML] [onplus/shadowsocks-websocket-python](https://github.com/onplus/shadowsocks-websocket-python) shadowsocks over WebSocket, support Heroku.
@@ -10119,58 +10729,68 @@ networking routines
- [**71**Star][6y] [Py] [mrnasro/zynos-attacker](https://github.com/mrnasro/zynos-attacker) ZynOS tool for automated attack on a range of IPs, find more informations at :
- [**71**Star][3y] [C] [moyix/panda](https://github.com/moyix/panda) Deprecated repo for PANDA 1.0 – see PANDA 2.0 repository
- [**71**Star][3y] [Py] [monnappa22/hollowfind](https://github.com/monnappa22/hollowfind) Hollowfind is a Volatility plugin to detect different types of process hollowing techniques used in the wild to bypass, confuse, deflect and divert the forensic analysis techniques. The plugin detects such attacks by finding discrepancy in the VAD and PEB, it also disassembles the address of entry point to detect any redirection attempts and als…
-- [**71**Star][17d] [Dockerfile] [mko-x/docker-clamav](https://github.com/mko-x/docker-clamav) Dockerized open source antivirus for use with file sharing containers, REST API or TCP.
+- [**71**Star][19d] [Dockerfile] [mko-x/docker-clamav](https://github.com/mko-x/docker-clamav) Dockerized open source antivirus for use with file sharing containers, REST API or TCP.
- [**71**Star][2y] [Py] [mgeeky/exploit-development-tools](https://github.com/mgeeky/exploit-development-tools) A bunch of my exploit development helper tools, collected in one place.
- [**71**Star][3y] [Py] [mak/ekdeco](https://github.com/mak/ekdeco) Scripts for dealing with various ek's
+- [**71**Star][3m] [C++] [macmade/unicorn-bios](https://github.com/macmade/unicorn-bios) Basic BIOS emulator for Unicorn Engine.
+- [**71**Star][1y] [Go] [m4ll0k/aron](https://github.com/m4ll0k/aron) Aron is a GO script for finding hidden GET & POST parameters
+- [**71**Star][5d] [Go] [letsencrypt/ct-woodpecker](https://github.com/letsencrypt/ct-woodpecker) A tool to monitor a CT log for operational problems
- [**71**Star][6y] [Py] [krmaxwell/dns-exfiltration](https://github.com/krmaxwell/dns-exfiltration) Exfiltrate files via DNS
+- [**71**Star][1y] [kingzd/wxdemo](https://github.com/kingzd/wxdemo) 学习练手
- [**71**Star][5y] [C#] [khr0x40sh/whitelistevasion](https://github.com/khr0x40sh/whitelistevasion) Collection of scripts, binaries and the like to aid in WhiteList Evasion on a Microsoft Windows Network.
- [**71**Star][7y] [C] [kholia/rc4-40-brute-office](https://github.com/kholia/rc4-40-brute-office) Guaranteed cracking of M$ Office files using RC4 40-bit encryption
+- [**71**Star][2y] [PHP] [joesmithjaffa/jenkins-shell](https://github.com/joesmithjaffa/jenkins-shell) Automating Jenkins Hacking using Shodan API
- [**71**Star][4y] [Py] [internetwache/internetwache-ctf-2016](https://github.com/internetwache/internetwache-ctf-2016) The Internetwache CTF 2016 repository
- [**71**Star][4y] [Py] [icewall/bindifffilter](https://github.com/icewall/bindifffilter) IDA Pro plugin making easier work on BinDiff results
-- [**71**Star][12d] [Py] [highmeh/lure](https://github.com/highmeh/lure) Lure - User Recon Automation for GoPhish
+- [**71**Star][9m] [PS] [iamrootsh3ll/anchorwatch](https://github.com/iamrootsh3ll/anchorwatch) A Rogue Device Detection Script with Email Alerts Functionality for Windows Subsystem
- [**71**Star][8y] [Py] [hellais/buckle-up](https://github.com/hellais/buckle-up) Script for running Mac OS X applications in a sandbox and a collection of seatbelt profiles
-- [**71**Star][3y] [Py] [hak5darren/bashbunny-payloads](https://github.com/hak5darren/bashbunny-payloads) Payloads for the Hak5 Bash Bunny
- [**71**Star][7y] [PHP] [geekchannel/webmap](https://github.com/geekchannel/webmap) NMAP via web
+- [**71**Star][6y] [enigma0x3/powershell-payload-excel-delivery](https://github.com/enigma0x3/powershell-payload-excel-delivery) Uses Invoke-Shellcode to execute a payload and persist on the system.
- [**71**Star][3y] [C++] [endgameinc/maxwell](https://github.com/endgameinc/maxwell)
-- [**71**Star][2y] [Py] [denglend/decode345](https://github.com/denglend/decode345) Honeywell 345 Mhz decoding
- [**71**Star][4y] [Py] [danmcinerney/autorelay](https://github.com/danmcinerney/autorelay) Automatically performs the SMB relay attack
- [**71**Star][2y] [Py] [d4vinci/pyloggy](https://github.com/d4vinci/pyloggy) A python keylogger that does more than any other keylogger - Key logger, Clicks logger and Screenshots
- [**71**Star][1m] [C++] [cseagle/collabreate](https://github.com/cseagle/collabreate) IDA Pro Collaboration/Synchronization Plugin
- [**71**Star][1y] [citybasebrooks/siac](https://github.com/citybasebrooks/siac) SIAC is an enterprise SIEM built on open-source technology.
- [**71**Star][2y] [Py] [chrispcampbell/qrocodile](https://github.com/chrispcampbell/qrocodile) A kid-friendly system for controlling Sonos with QR codes
-- [**71**Star][1y] [C] [chinatiny/inlinehooklib](https://github.com/chinatiny/inlinehooklib) 同时支持用户和内核模式的Inlinehook库
- [**71**Star][2y] [HTML] [brandis-project/brandis](https://github.com/brandis-project/brandis) Brandis: End-to-end encryption for everyone
- [**71**Star][3y] [bmaia/cross-utils](https://github.com/bmaia/cross-utils) Cross compiling Utils (ARMEB, ARMEL, MIPS, MIPSEL)
- [**71**Star][6y] [C++] [blitzcode/ghc-stack](https://github.com/blitzcode/ghc-stack) Hacking GHC's Stack for Fun and Profit (featuring The Glorious Haskell Debugger v0.0.1 Pre-alpha)
- [**71**Star][3y] [Batchfile] [azmatt/windowsenum](https://github.com/azmatt/windowsenum) Batch file to help automate Windows enumeration for privilege escalation
- [**71**Star][3y] [JS] [attekett/surku](https://github.com/attekett/surku) Surku is a general-purpose mutation-based fuzzer.
- [**71**Star][3y] [C] [alexwebr/salsa20](https://github.com/alexwebr/salsa20) An implementation of the Salsa20 stream cipher in C99
-- [**71**Star][5y] [80vul/pasc2at](https://github.com/80vul/pasc2at) Php Application Source Code Audits Advanced Technology
- [**71**Star][2y] [Py] [7h3ram/flowinspect](https://github.com/7h3ram/flowinspect) A Network Inspection Tool
- [**71**Star][1y] [C++] [3gstudent/inject-dll-by-apc](https://github.com/3gstudent/inject-dll-by-apc) Asynchronous Procedure Calls
- [**71**Star][2y] [C] [0ffffffffh/api-break-for-x64dbg](https://github.com/0ffffffffh/api-break-for-x64dbg) x64dbg plugin to set breakpoints automatically to Win32/64 APIs
- [**70**Star][4y] [C#] [cn33liz/smashedpotato](https://github.com/cn33liz/smashedpotato)
+- [**70**Star][11d] [Py] [ehco1996/aioshadowsocks](https://github.com/ehco1996/aioshadowsocks) 用 asyncio 重写 shadowsocks ~
- [**70**Star][8m] [Go] [mmcloughlin/cryptofuzz](https://github.com/mmcloughlin/cryptofuzz) Fuzzing Go crypto
-- [**70**Star][21d] [JS] [andreafioraldi/frida-js-afl-instr](https://github.com/andreafioraldi/frida-js-afl-instr) An example on how to do performant in-memory fuzzing with AFL++ and Frida
-- [**70**Star][25d] [C] [davidxanatos/taskexplorer](https://github.com/davidxanatos/taskexplorer) Power full Task Manager
-- [**70**Star][6m] [Py] [jakobrpennington/information-security](https://github.com/JakobRPennington/information-security) A place where I can create, collect and share tooling, resources and knowledge about information security.
+- [**70**Star][26d] [CSS] [s0md3v/predator](https://github.com/s0md3v/predator) Anti-Automation System
+- [**70**Star][3y] [zbetcheckin/ipv6](https://github.com/zbetcheckin/ipv6) Playing with IPv6 for fun and profit
- [**70**Star][6y] [Py] [q2h1cg/xss_scan](https://github.com/Q2h1Cg/xss_scan) XSS Scan
+- [**70**Star][9d] [Shell] [sclorg/s2i-php-container](https://github.com/sclorg/s2i-php-container) PHP container images based on Red Hat Software Collections and intended for OpenShift and general usage, that provide a platform for building and running PHP applications. Users can choose between Red Hat Enterprise Linux, Fedora, and CentOS based images.
+- [**70**Star][3y] [Py] [zxsecurity/gpsnitch](https://github.com/zxsecurity/gpsnitch) GPS Spoofer Catcher, the GPS IDS.
+- [**70**Star][1m] [Py] [ziirish/burp-ui](https://github.com/ziirish/burp-ui) Burp-UI is a web-ui for burp backup written in python with Flask and jQuery/Bootstrap
+- [**70**Star][7m] [Py] [zer1t0/ticket_converter](https://github.com/zer1t0/ticket_converter) A little tool to convert ccache tickets into kirbi (KRB-CRED) and vice versa based on impacket.
+- [**70**Star][2y] [Java] [ysrc/obfusesmalitext](https://github.com/ysrc/obfusesmalitext) smali文件,jar包字符串混淆,支持gradle插件
+- [**70**Star][2d] [Py] [x4nth055/pythoncode-tutorials](https://github.com/x4nth055/pythoncode-tutorials) The Python Code Tutorials
+- [**70**Star][8m] [wufengxue/android-reverse](https://github.com/wufengxue/android-reverse) 安卓逆向工具汇总
+- [**70**Star][5m] [wbierbower/awesome-physics](https://github.com/wbierbower/awesome-physics)
+- [**70**Star][4m] [Py] [war-and-code/jawfish](https://github.com/war-and-code/jawfish) Tool for breaking into web applications.
- [**70**Star][11m] [Py] [viperbluff/portwitness](https://github.com/viperbluff/portwitness) Tool for checking Whether a domain or its multiple sub-domains are up and running.
+- [**70**Star][5y] [Java] [veeti/disableflagsecure](https://github.com/veeti/disableflagsecure)
- [**70**Star][1y] [Go] [urld/passmgr](https://github.com/urld/passmgr) a simple, portable password manager
- [**70**Star][2m] [C++] [trailofbits/llvm-sanitizer-tutorial](https://github.com/trailofbits/llvm-sanitizer-tutorial) An LLVM sanitizer tutorial
- [**70**Star][2y] [Py] [timbo05sec/autocrack](https://github.com/timbo05sec/autocrack) Hashcat wrapper to help automate the cracking process
-- [**70**Star][1y] [Shell] [thelinuxchoice/keydroid](https://github.com/thelinuxchoice/keydroid) Android Keylogger + Reverse Shell
- [**70**Star][1y] [Shell] [thelinuxchoice/getwin](https://github.com/thelinuxchoice/getwin) FUD Win32 payload generator and listener
-- [**70**Star][2m] [HTML] [sisoc-tokyo/real-timedetectionad_ver2](https://github.com/sisoc-tokyo/real-timedetectionad_ver2)
+- [**70**Star][3m] [PS] [samratashok/race](https://github.com/samratashok/race) RACE is a PowerShell module for executing ACL attacks against Windows targets.
- [**70**Star][3y] [JS] [saelo/jscpwn](https://github.com/saelo/jscpwn) PoC exploit for CVE-2016-4622
-- [**70**Star][7d] [C++] [rodneyviana/netext](https://github.com/rodneyviana/netext) WinDbg extension for data mining managed heap. It also includes commands to list http request, wcf services, WIF tokens among others
- [**70**Star][1y] [Py] [rassec/rasscan](https://github.com/rassec/rasscan) Port service SCan
- [**70**Star][10m] [Dockerfile] [rancher/runc-cve](https://github.com/rancher/runc-cve) CVE patches for legacy runc packaged with Docker
- [**70**Star][3y] [Py] [quantumliu/antibtchack](https://github.com/quantumliu/antibtchack) 破解5.12比特币勒索软件
- [**70**Star][7y] [JS] [qburst/penq](https://github.com/qburst/penq) PenQ is an open source Linux based penetration testing browser bundle built over Mozilla Firefox. It comes pre-configured with security tools for spidering, advanced web searching, fingerprinting, anonymous browsing, web server scanning, fuzzing, report generating and more.
-- [**70**Star][18d] [C] [ptrrkssn/pnscan](https://github.com/ptrrkssn/pnscan) Peter's Network Scanner
+- [**70**Star][2y] [Py] [qazbnm456/vwgen](https://github.com/qazbnm456/vwgen) Vulnerable Web applications Generator
+- [**70**Star][20d] [C] [ptrrkssn/pnscan](https://github.com/ptrrkssn/pnscan) Peter's Network Scanner
- [**70**Star][4y] [Py] [programa-stic/marvin-django](https://github.com/programa-stic/marvin-django) Marvin-django is the UI/database part of the Marvin project. Marvin is a platform for security analysis of Android apps.
-- [**70**Star][4m] [pomerium/awesome-security-audits](https://github.com/pomerium/awesome-security-audits) A collection of public security audits.
- [**70**Star][4m] [Go] [nray-scanner/nray](https://github.com/nray-scanner/nray) nray distributed port scanner
- [**70**Star][8m] [Java] [novoda/dojos](https://github.com/novoda/dojos) This is where the Novoda team do all their hacking
- [**70**Star][2y] [C++] [nmulasmajic/cve-2018-8897](https://github.com/nmulasmajic/cve-2018-8897) Implements the POP/MOV SS (CVE-2018-8897) vulnerability by bugchecking the machine (local DoS).
@@ -10181,572 +10801,619 @@ networking routines
- [**70**Star][2m] [Py] [meejah/carml](https://github.com/meejah/carml) Command-line utility to control Tor.
- [**70**Star][2y] [Py] [malwarereversebrasil/maltran](https://github.com/malwarereversebrasil/maltran) A command line tool to download malware exercises from malware-traffic-analysis.net
- [**70**Star][1y] [Go] [maliceio/malice-av](https://github.com/maliceio/malice-av) Malice AntiVirus Plugins
-- [**70**Star][3m] [C++] [macmade/unicorn-bios](https://github.com/macmade/unicorn-bios) Basic BIOS emulator for Unicorn Engine.
-- [**70**Star][1y] [Go] [m4ll0k/aron](https://github.com/m4ll0k/aron) Aron is a GO script for finding hidden GET & POST parameters
+- [**70**Star][3m] [m507/awae-preparation](https://github.com/m507/awae-preparation) This repository will contain all trainings and tutorials I have done/read to prepare for OSWE / AWAE.
- [**70**Star][5y] [JS] [lfzark/cookie-injecting-tools](https://github.com/lfzark/cookie-injecting-tools) A chrome extension ,cookie injecting tool includeing injecting ,editing ,adding ,removeing cookies.
- [**70**Star][4y] [C++] [laginimaineb/cve-2014-7920-7921](https://github.com/laginimaineb/cve-2014-7920-7921) Exploit code for CVE-2014-7920 and CVE-2014-7921 - code-exec in mediaserver up to Android 5.1
- [**70**Star][7m] [Py] [l4ys/ctf](https://github.com/l4ys/ctf) Some of my CTF solutions
-- [**70**Star][1y] [kingzd/wxdemo](https://github.com/kingzd/wxdemo) 学习练手
-- [**70**Star][8m] [Py] [jpcertcc/malconfscan-with-cuckoo](https://github.com/jpcertcc/malconfscan-with-cuckoo) Cuckoo Sandbox plugin for extracts configuration data of known malware
-- [**70**Star][11d] [C] [jovanbulck/nemesis](https://github.com/jovanbulck/nemesis) Nemesis: Studying microarchitectural timing leaks in rudimentary CPU interrupt logic
-- [**70**Star][2y] [PHP] [joesmithjaffa/jenkins-shell](https://github.com/joesmithjaffa/jenkins-shell) Automating Jenkins Hacking using Shodan API
+- [**70**Star][3y] [Py] [kevsersrca/2016lykagguvenligivesizmatestleri](https://github.com/kevsersrca/2016lykagguvenligivesizmatestleri) Network Security Notes
+- [**70**Star][7d] [Py] [jpcertcc/malconfscan-with-cuckoo](https://github.com/jpcertcc/malconfscan-with-cuckoo) Cuckoo Sandbox plugin for extracts configuration data of known malware
+- [**70**Star][13d] [C] [jovanbulck/nemesis](https://github.com/jovanbulck/nemesis) Nemesis: Studying microarchitectural timing leaks in rudimentary CPU interrupt logic
+- [**70**Star][8m] [Py] [itsmehacker/ducky-exploit](https://github.com/itsmehacker/ducky-exploit) Arduino Rubber Ducky Framework
- [**70**Star][6y] [Java] [irsdl/burpsuitejsbeautifier](https://github.com/irsdl/burpsuitejsbeautifier) Burp Suite JS Beautifier
- [**70**Star][9m] [Py] [intel/resilient-ml-research-platform](https://github.com/intel/resilient-ml-research-platform)
- [**70**Star][2y] [Java] [ikkisoft/bradamsa](https://github.com/ikkisoft/bradamsa) Burp Suite extension to generate Intruder payloads using Radamsa
-- [**70**Star][9m] [PowerShell] [iamrootsh3ll/anchorwatch](https://github.com/iamrootsh3ll/anchorwatch) A Rogue Device Detection Script with Email Alerts Functionality for Windows Subsystem
+- [**70**Star][8d] [Java] [i2p/i2p.android.base](https://github.com/i2p/i2p.android.base) I2P for Android
- [**70**Star][3y] [JS] [himadriganguly/sqlilabs](https://github.com/himadriganguly/sqlilabs) Lab set-up for learning SQL Injection Techniques
+- [**70**Star][11m] [C] [heidsoft/devops](https://github.com/heidsoft/devops) 系统架构实践
+- [**70**Star][6d] [Py] [greenbone/gvm-tools](https://github.com/greenbone/gvm-tools) Remote control your Greenbone Vulnerability Manager (GVM)
+- [**70**Star][2m] [C] [getdrive/lazy-rdp](https://github.com/getdrive/lazy-rdp) Script for automatic scanning & brute-force RDP
- [**70**Star][2y] [C] [flxwu/spectre-attack-demo](https://github.com/flxwu/spectre-attack-demo) Reproducing malicious memory reading on Intel i5 and Intel Xeon using a Spectre attack
- [**70**Star][5y] [C] [fireeye/tools](https://github.com/fireeye/tools) general purpose and malware specific analysis tools
+- [**70**Star][5y] [JS] [esapi/owasp-esapi-js](https://github.com/esapi/owasp-esapi-js) Automatically exported from code.google.com/p/owasp-esapi-js
+- [**70**Star][2y] [Isabelle] [diekmann/iptables_semantics](https://github.com/diekmann/iptables_semantics) Verified iptables Firewall Ruleset Analysis
+- [**70**Star][7d] [Py] [devopshq/artifactory](https://github.com/devopshq/artifactory) dohq-artifactory: a Python client for Artifactory
+- [**70**Star][3y] [PS] [darkoperator/posh-virustotal](https://github.com/darkoperator/posh-virustotal) PowerShell Module to interact with VirusTotal
- [**70**Star][4y] [HTML] [crackinglandia/pype32](https://github.com/crackinglandia/pype32) Yet another Python library to read and write PE/PE+ files.
- [**70**Star][1y] [HTML] [cooolis/cooolis.github.io](https://github.com/cooolis/cooolis.github.io) Cooolis是一个操作系统命令技巧备忘录
- [**70**Star][3y] [Py] [coldfusion39/domi-owned](https://github.com/coldfusion39/domi-owned) domi-owned:IBM/LotusDomino 服务器漏洞利用工具
+- [**70**Star][2y] [JS] [chrisyer/lightsocks-nodejs](https://github.com/chrisyer/lightsocks-nodejs) It's a simple socks5 proxy tool which based on lightsocks
+- [**70**Star][6m] [Java] [c0d3p1ut0s/java-security-manager-bypass](https://github.com/c0d3p1ut0s/java-security-manager-bypass)
- [**70**Star][2y] [C] [azuregreen/arkprotect](https://github.com/azuregreen/arkprotect) An Ark tool project,run on Win7 x86/x64
- [**70**Star][3y] [Py] [antelox/fopo-php-deobfuscator](https://github.com/antelox/fopo-php-deobfuscator) A simple script to deobfuscate PHP file obfuscated with FOPO Obfuscator -
-- [**70**Star][14d] [C] [anssi-fr/oradad](https://github.com/anssi-fr/oradad) Outil de récupération automatique des données de l'Active Directory / Automated tool for dumping Active Directory data
+- [**70**Star][16d] [C] [anssi-fr/oradad](https://github.com/anssi-fr/oradad) Outil de récupération automatique des données de l'Active Directory / Automated tool for dumping Active Directory data
+- [**70**Star][2y] [androidtamer/androidtamer](https://github.com/androidtamer/androidtamer) We Use Github Extensively and openly. So it becomes dificult to track what's what and what's where. This repository is a master repo to Help with that.
+- [**70**Star][15d] [Py] [alexdetrano/4can](https://github.com/alexdetrano/4can)
+- [**70**Star][1y] [C] [alex9191/kernel-dll-injector](https://github.com/alex9191/kernel-dll-injector) Kernel-Mode Driver that loads a dll into every new created process that loads kernel32.dll module
- [**70**Star][1y] [JS] [hackatnow/certstreamcatcher](https://github.com/hackatnow/certstreamcatcher) This tool is based on regex with effective standards for detecting phishing sites in real time using certstream and can also detect punycode (IDNA) attacks.
-- [**70**Star][3y] [PowerShell] [1ricardotavares/offensive-powershell](https://github.com/1ricardotavares/offensive-powershell)
+- [**70**Star][3y] [PS] [1ricardotavares/offensive-powershell](https://github.com/1ricardotavares/offensive-powershell)
- [**70**Star][6y] [Py] [0xdevalias/sparty](https://github.com/0xdevalias/sparty) Sparty - MS Sharepoint and Frontpage Auditing Tool [Unofficial]
-- [**70**Star][12d] [Batchfile] [0xcoto/evilusb](https://github.com/0xcoto/evilusb) Turn an ordinary USB drive into a malicious social-engineering USB
+- [**70**Star][14d] [Batchfile] [0xcoto/evilusb](https://github.com/0xcoto/evilusb) Turn an ordinary USB drive into a malicious social-engineering USB
+- [**69**Star][6m] [JS] [jiang-xuan/deepinss](https://github.com/jiang-xuan/deepinss) Deep in shadowsocks.
+- [**69**Star][4y] [Py] [mitmproxy/netlib](https://github.com/mitmproxy/netlib)
+- [**69**Star][5m] [JS] [nccgroup/datajackproxy](https://github.com/nccgroup/datajackproxy) Datajack Proxy allows you to intercept TLS traffic in native x86 applications across platforms
- [**69**Star][4m] [0xd4d/dnspy-unity-mono](https://github.com/0xd4d/dnspy-unity-mono) Fork of Unity mono that's used to compile mono.dll with debugging support enabled
-- [**69**Star][3y] [zbetcheckin/ipv6](https://github.com/zbetcheckin/ipv6) Playing with IPv6 for fun and profit
-- [**69**Star][15d] [Py] [splewis/get5-web](https://github.com/splewis/get5-web) Proof-of-concept webpanel for servers using the get5 CS:GO server plugin
+- [**69**Star][3y] [Nginx] [localtunnel/nginx](https://github.com/localtunnel/nginx) nginx container used as the localtunnel load balancer
+- [**69**Star][17d] [Py] [splewis/get5-web](https://github.com/splewis/get5-web) Proof-of-concept webpanel for servers using the get5 CS:GO server plugin
- [**69**Star][2m] [opentoallctf/tips](https://github.com/opentoallctf/tips)
- [**69**Star][5y] [JS] [substack/wit](https://github.com/substack/wit) command-line wifi manager for linux
- [**69**Star][8m] [C#] [fsecurelabs/sharpcliphistory](https://github.com/FSecureLABS/SharpClipHistory) SharpClipHistory is a .NET application written in C# that can be used to read the contents of a user's clipboard history in Windows 10 starting from the 1809 Build.
-- [**69**Star][7d] [Py] [bbva/patton](https://github.com/BBVA/patton) The clever vulnerability dependency finder
-- [**69**Star][3y] [Py] [zxsecurity/gpsnitch](https://github.com/zxsecurity/gpsnitch) GPS Spoofer Catcher, the GPS IDS.
+- [**69**Star][9d] [Py] [bbva/patton](https://github.com/BBVA/patton) The clever vulnerability dependency finder
- [**69**Star][1y] [Py] [zsxsoft/regeorg](https://github.com/zsxsoft/regeorg) A modified reGeorg for One-line PHP Shell.
- [**69**Star][2y] [C++] [zodiacon/poolmonx](https://github.com/zodiacon/poolmonx) A GUI version of the classic PoolMon tool
-- [**69**Star][30d] [Py] [ziirish/burp-ui](https://github.com/ziirish/burp-ui) Burp-UI is a web-ui for burp backup written in python with Flask and jQuery/Bootstrap
-- [**69**Star][7m] [Py] [zer1t0/ticket_converter](https://github.com/zer1t0/ticket_converter) A little tool to convert ccache tickets into kirbi (KRB-CRED) and vice versa based on impacket.
+- [**69**Star][2y] [Py] [zldww2011/cve-2018-0802_poc](https://github.com/zldww2011/cve-2018-0802_poc) Exploit the vulnerability to execute the calculator
- [**69**Star][4m] [Py] [zaproxy/zap-api-python](https://github.com/zaproxy/zap-api-python) OWASP ZAP Python API
-- [**69**Star][3y] [PowerShell] [xillwillx/tricky.lnk](https://github.com/xillwillx/tricky.lnk) Creates a .lnk file with unicode chars that reverse the file extension and adds a .txt to the end to make it appear as a textfile. Payload is a powershell webdl and execute
-- [**69**Star][4m] [Py] [war-and-code/jawfish](https://github.com/war-and-code/jawfish) Tool for breaking into web applications.
-- [**69**Star][5y] [Java] [veeti/disableflagsecure](https://github.com/veeti/disableflagsecure)
+- [**69**Star][7m] [Go] [ying32/rproxy](https://github.com/ying32/rproxy) 简单的反向代理用于内网穿透,支持HTTP/HTTPS转发
+- [**69**Star][3y] [PS] [xillwillx/tricky.lnk](https://github.com/xillwillx/tricky.lnk) Creates a .lnk file with unicode chars that reverse the file extension and adds a .txt to the end to make it appear as a textfile. Payload is a powershell webdl and execute
+- [**69**Star][4y] [Py] [x56/airpyrt-tools](https://github.com/x56/airpyrt-tools) Python module and client for the AirPort device management interface
- [**69**Star][4y] [Py] [v-p-b/pecloakcapstone](https://github.com/v-p-b/pecloakcapstone) Platform independent peCloak fork based on Capstone
+- [**69**Star][7m] [Py] [thombashi/allpairspy](https://github.com/thombashi/allpairspy) A python library for test combinations generator. The generator allows one to create a set of tests using "pairwise combinations" method, reducing a number of combinations of variables into a lesser set that covers most situations.
- [**69**Star][6m] [C++] [thomasthelen/antidebugging](https://github.com/thomasthelen/antidebugging) A collection of c++ programs that demonstrate common ways to detect the presence of an attached debugger.
- [**69**Star][1y] [Py] [stixproject/openioc-to-stix](https://github.com/stixproject/openioc-to-stix) Generate STIX XML from OpenIOC XML
+- [**69**Star][30d] [Ruby] [spiderlabs/cve_server](https://github.com/spiderlabs/cve_server) Simple REST-style web service for the CVE searching
- [**69**Star][2y] [Shell] [snubbegbg/install_raspi-config](https://github.com/snubbegbg/install_raspi-config) Script to install raspi-config on Raspberry Pi devices with an Linux OS that's missing it, like Kali Linux.
- [**69**Star][3y] [HTML] [skylined/bugs](https://github.com/skylined/bugs) Collection of software bugs found by SkyLined
+- [**69**Star][2y] [C] [shay-gueron/aes-gcm-siv](https://github.com/shay-gueron/aes-gcm-siv) AES-GCM-SIV implementations (128 and 256 bit)
- [**69**Star][4y] [Py] [sensepost/autoresponder](https://github.com/sensepost/autoresponder) Quick python script to automatically load NTLM hashes from Responder logs and fires up Hashcat to crack them
-- [**69**Star][12m] [Py] [romanking98/house-of-roman](https://github.com/romanking98/house-of-roman) RCE through Leakless HeapFengShui, fastbin alloc anywhere.
+- [**69**Star][2y] [Py] [s0lst1c3/sentrygun](https://github.com/s0lst1c3/sentrygun) Rogue AP killer
+- [**69**Star][2y] [Py] [ryanohoro/csbruter](https://github.com/ryanohoro/csbruter) Cobalt Strike team server password brute force tool
+- [**69**Star][1y] [Py] [romanking98/house-of-roman](https://github.com/romanking98/house-of-roman) RCE through Leakless HeapFengShui, fastbin alloc anywhere.
- [**69**Star][2y] [Py] [r0oth3x49/xpath](https://github.com/r0oth3x49/xpath) Xpath is a python based open source Sql injection tool that automates the process of detecting and exploiting error-based injection security flaws.
-- [**69**Star][2y] [Py] [qazbnm456/vwgen](https://github.com/qazbnm456/vwgen) Vulnerable Web applications Generator
- [**69**Star][11m] [Py] [pure-l0g1c/instaburst](https://github.com/pure-l0g1c/instaburst) Brute force Instagram
+- [**69**Star][2y] [Py] [planet-work/php-malware-scanner](https://github.com/planet-work/php-malware-scanner) PHP files analyzer for malware detection
- [**69**Star][3y] [C] [payatu/emffuzzer](https://github.com/payatu/emffuzzer) Enhanced Meta File Fuzzer based on Peach Fuzzing Framework
+- [**69**Star][14d] [Py] [patois/mrspicky](https://github.com/patois/mrspicky) An IDAPython decompiler script that helps auditing calls to the memcpy() and memmove() functions.
+- [**69**Star][13d] [Shell] [orjail/orjail](https://github.com/orjail/orjail) a more secure way to force programs to exclusively use tor network
- [**69**Star][10y] [C#] [oleavr/ospy](https://github.com/oleavr/ospy) Automatically exported from code.google.com/p/ospy
- [**69**Star][2y] [Py] [odensc/janus](https://github.com/odensc/janus) Python script to create an Android APK exploiting the Janus vulnerability.
+- [**69**Star][2y] [Swift] [nwhacks-loki/loki](https://github.com/nwhacks-loki/loki) Proof-of-concept of emotion-targeted content delivery using machine learning and ARKit.
+- [**69**Star][17d] [Py] [nmantani/fileinsight-plugins](https://github.com/nmantani/fileinsight-plugins) a decoding toolbox of McAfee FileInsight hex editor for malware analysis
- [**69**Star][7y] [C] [nektra/vtbl-ida-pro-plugin](https://github.com/nektra/vtbl-ida-pro-plugin) Identifying Virtual Table Functions using VTBL IDA Pro Plugin + Deviare Hooking Engine
-- [**69**Star][4m] [PowerShell] [nbeede/boombox](https://github.com/nbeede/boombox) Automatic deployment of Cuckoo Sandbox malware lab using Packer and Vagrant
+- [**69**Star][4m] [PS] [nbeede/boombox](https://github.com/nbeede/boombox) Automatic deployment of Cuckoo Sandbox malware lab using Packer and Vagrant
- [**69**Star][2y] [PHP] [nairuzabulhul/roadmap](https://github.com/nairuzabulhul/roadmap) GitBook: OSCP RoadMap
- [**69**Star][1y] [Kotlin] [menjoo/android-ssl-pinning-webviews](https://github.com/menjoo/android-ssl-pinning-webviews) A simple demo app that demonstrates Certificate pinning and scheme/domain whitelisting in Android WebViews
+- [**69**Star][3y] [Ruby] [melvinsh/subresolve](https://github.com/melvinsh/subresolve) Resolve and quickly portscan a list of (sub)domains.
- [**69**Star][1m] [Py] [m8r0wn/ldap_search](https://github.com/m8r0wn/ldap_search) Python3 script to perform LDAP queries and enumerate users, groups, and computers from Windows Domains. Ldap_Search can also perform brute force/password spraying to identify valid accounts via LDAP.
- [**69**Star][2y] [C++] [lynnux/windbg_hilight](https://github.com/lynnux/windbg_hilight) A windbg plugin to hilight text in Disassembly and Command windows. Support x86 and x64.
- [**69**Star][2y] [JS] [kureev/react-native-network-proxy](https://github.com/kureev/react-native-network-proxy) Network debugger (logger) for React Native apps
+- [**69**Star][3y] [C] [klks/checksec](https://github.com/klks/checksec) x64dbg插件,用于检查应用程序各模块的安全设置,包括:SafeSEH、DEP、ASLR、、GS、CFG、Signature
- [**69**Star][6y] [C] [kedebug/scdetective](https://github.com/kedebug/scdetective) A kernel level anti-rootkit tool which runs on the windows platform.
-- [**69**Star][3m] [PowerShell] [jaredhaight/windowsattackanddefenselab](https://github.com/jaredhaight/windowsattackanddefenselab)
-- [**69**Star][8m] [Py] [itsmehacker/ducky-exploit](https://github.com/itsmehacker/ducky-exploit) Arduino Rubber Ducky Framework
-- [**69**Star][11m] [PowerShell] [itskindred/winportpush](https://github.com/itskindred/winportpush) A simple PowerShell utility used for pivoting into internal networks via a compromised Windows host.
+- [**69**Star][3m] [PS] [jaredhaight/windowsattackanddefenselab](https://github.com/jaredhaight/windowsattackanddefenselab)
+- [**69**Star][11m] [PS] [itskindred/winportpush](https://github.com/itskindred/winportpush) A simple PowerShell utility used for pivoting into internal networks via a compromised Windows host.
+- [**69**Star][6m] [Py] [incredibleindishell/windows-ad-environment-related](https://github.com/incredibleindishell/windows-ad-environment-related) This Repository contains the stuff related to windows Active directory environment exploitation
- [**69**Star][6y] [C] [ichooseyou/reclass64](https://github.com/ichooseyou/reclass64) A port of DrunkenCheetah's Project to x64
- [**69**Star][4y] [Py] [hxer/vulnapp](https://github.com/hxer/vulnapp) use docker to attack web as a demo
- [**69**Star][2y] [C] [hfiref0x/stryker](https://github.com/hfiref0x/stryker) Multi-purpose proof-of-concept tool based on CPU-Z CVE-2017-15303
- [**69**Star][4y] [Py] [grazfather/blackhatpython](https://github.com/grazfather/blackhatpython) Black Hat Python Labs
- [**69**Star][1m] [Py] [google/certificate-transparency-rfcs](https://github.com/google/certificate-transparency-rfcs) Certificate Transparency RFC
-- [**69**Star][2m] [C] [getdrive/lazy-rdp](https://github.com/getdrive/lazy-rdp) Script for automatic scanning & brute-force RDP
- [**69**Star][11m] [C++] [fr0gger/rocprotect-v1](https://github.com/fr0gger/rocprotect-v1) Emulating Virtual Environment to stay protected against advanced malware
-- [**69**Star][5y] [JS] [esapi/owasp-esapi-js](https://github.com/esapi/owasp-esapi-js) Automatically exported from code.google.com/p/owasp-esapi-js
-- [**69**Star][6y] [enigma0x3/powershell-payload-excel-delivery](https://github.com/enigma0x3/powershell-payload-excel-delivery) Uses Invoke-Shellcode to execute a payload and persist on the system.
- [**69**Star][5y] [Py] [el3ct71k/subdomain-analyzer](https://github.com/el3ct71k/subdomain-analyzer) Subdomain Analyzer
- [**69**Star][2y] [Py] [dxwu/binderfilter](https://github.com/dxwu/binderfilter) A Linux kernel IPC firewall and logger for Android and Binder
-- [**69**Star][13d] [C] [devnoname120/vitabright](https://github.com/devnoname120/vitabright) Experimental minimum brightness lowering plugin
+- [**69**Star][15d] [C] [devnoname120/vitabright](https://github.com/devnoname120/vitabright) Experimental minimum brightness lowering plugin
- [**69**Star][3y] [Py] [dchrastil/ttsl](https://github.com/dchrastil/ttsl) Tool to scrape LinkedIn
-- [**69**Star][3y] [PowerShell] [darkoperator/posh-virustotal](https://github.com/darkoperator/posh-virustotal) PowerShell Module to interact with VirusTotal
-- [**69**Star][3m] [JS] [cveproject/automation-working-group](https://github.com/cveproject/automation-working-group) CVE Automation Working Group
-- [**69**Star][2y] [JS] [chrisyer/lightsocks-nodejs](https://github.com/chrisyer/lightsocks-nodejs) It's a simple socks5 proxy tool which based on lightsocks
+- [**69**Star][8m] [Py] [chipik/sap_gw_rce_exploit](https://github.com/chipik/sap_gw_rce_exploit) SAP Gateway RCE exploits
+- [**69**Star][5y] [PS] [cheetz/powertools](https://github.com/cheetz/powertools) Veil's PowerTools are a collection of PowerShell projects with a focus on offensive operations.
- [**69**Star][1m] [JS] [certtools/intelmq-manager](https://github.com/certtools/intelmq-manager) IntelMQ Manager is a graphical interface to manage configurations for IntelMQ framework.
-- [**69**Star][6m] [Py] [biggerwing/cve-2019-0708-poc](https://github.com/biggerwing/cve-2019-0708-poc) CVE-2019-0708 远程代码执行漏洞批量检测
+- [**69**Star][7y] [Assembly] [brainsmoke/nyanmbr](https://github.com/brainsmoke/nyanmbr) Nyancat in the MBR
+- [**69**Star][7m] [Py] [biggerwing/cve-2019-0708-poc](https://github.com/biggerwing/cve-2019-0708-poc) CVE-2019-0708 远程代码执行漏洞批量检测
- [**69**Star][5y] [Shell] [begriffs/microservice-template](https://github.com/begriffs/microservice-template) Basic architecture for running and monitoring workers
-- [**69**Star][8d] [Java] [auth0/auth0.android](https://github.com/auth0/auth0.android) Android toolkit for Auth0 API
+- [**69**Star][4m] [ascotbe/osmographic-brain-mapping](https://github.com/ascotbe/osmographic-brain-mapping) 渗透脑图(渗透步骤)
- [**69**Star][5y] [Py] [arvinddoraiswamy/slid](https://github.com/arvinddoraiswamy/slid) detect static lib
- [**69**Star][4m] [C#] [antoniococo/runascs](https://github.com/antoniococo/runascs) RunasCs - Csharp and open version of windows builtin runas.exe
-- [**69**Star][2y] [androidtamer/androidtamer](https://github.com/androidtamer/androidtamer) We Use Github Extensively and openly. So it becomes dificult to track what's what and what's where. This repository is a master repo to Help with that.
-- [**69**Star][1y] [C] [alex9191/kernel-dll-injector](https://github.com/alex9191/kernel-dll-injector) Kernel-Mode Driver that loads a dll into every new created process that loads kernel32.dll module
+- [**69**Star][2y] [Py] [alexander-hanel/idapython6to7](https://github.com/alexander-hanel/idapython6to7)
- [**69**Star][2y] [Haskell] [adjoint-io/pedersen-commitment](https://github.com/adjoint-io/pedersen-commitment) Cryptographic Commitment Schemes
- [**69**Star][1y] [Java] [1135/equationexploit](https://github.com/1135/equationexploit) Eternalblue Doublepulsar exploit
-- [**68**Star][3y] [Nginx] [localtunnel/nginx](https://github.com/localtunnel/nginx) nginx container used as the localtunnel load balancer
+- [**68**Star][3y] [Py] [yourtion/alfred_shadowsockscontroller](https://github.com/yourtion/alfred_shadowsockscontroller) ShadowsocksX controller for Alfred
+- [**68**Star][2y] [C++] [secrary/hooking-via-instrumentationcallback](https://github.com/secrary/hooking-via-instrumentationcallback) codes for my blog post:
+- [**68**Star][28d] [Py] [skelsec/kerberoast](https://github.com/skelsec/kerberoast) Kerberoast attack -pure python-
+- [**68**Star][2y] [C++] [cmu-sei/biggrep](https://github.com/cmu-sei/biggrep) A scalable search index for binary files
+- [**68**Star][6d] [gossip-sjtu/gossip_blog](https://github.com/gossip-sjtu/gossip_blog) 每周定期更新论文笔记分享的markdown以及图片
- [**68**Star][1y] [Py] [feeicn/webproxy](https://github.com/feeicn/webproxy) Create an HTTP / HTTPS proxy server based on MITMProxy and log all requests to the log file and parse the log for rewriting into the database.
-- [**68**Star][28d] [Py] [lylemi/browser-fuzz-summarize](https://github.com/lylemi/browser-fuzz-summarize) Browser Fuzz Summarize / 浏览器模糊测试综述
+- [**68**Star][30d] [Py] [lylemi/browser-fuzz-summarize](https://github.com/lylemi/browser-fuzz-summarize) Browser Fuzz Summarize / 浏览器模糊测试综述
- [**68**Star][4y] [Py] [0x90/wifi-scripts](https://github.com/0x90/wifi-scripts) Misc scripts and tools for WiFi
-- [**68**Star][10m] [Objective-C] [synacktiv-contrib/cve-2018-4193](https://github.com/Synacktiv-contrib/CVE-2018-4193) exploit for CVE-2018-4193
-- [**68**Star][7d] [C] [radareorg/radare2-regressions](https://github.com/radareorg/radare2-regressions) Regression Tests for the Radare2 Reverse Engineer's Debugger
-- [**68**Star][2y] [Py] [zldww2011/cve-2018-0802_poc](https://github.com/zldww2011/cve-2018-0802_poc) Exploit the vulnerability to execute the calculator
-- [**68**Star][2y] [Java] [ysrc/obfusesmalitext](https://github.com/ysrc/obfusesmalitext) smali文件,jar包字符串混淆,支持gradle插件
-- [**68**Star][4y] [Py] [x56/airpyrt-tools](https://github.com/x56/airpyrt-tools) Python module and client for the AirPort device management interface
-- [**68**Star][5m] [wbierbower/awesome-physics](https://github.com/wbierbower/awesome-physics)
+- [**68**Star][1y] [Shell] [kiyadesu/android](https://github.com/kiyadesu/Android) walk into Android security step by step
+- [**68**Star][10m] [ObjC] [synacktiv-contrib/cve-2018-4193](https://github.com/Synacktiv-contrib/CVE-2018-4193) exploit for CVE-2018-4193
+- [**68**Star][25d] [PS] [dsccommunity/certificatedsc](https://github.com/dsccommunity/CertificateDsc) This DSC Resource module can be used to simplify administration of certificates on a Windows Server.
+- [**68**Star][3d] [C] [radareorg/radare2-regressions](https://github.com/radareorg/radare2-regressions) Regression Tests for the Radare2 Reverse Engineer's Debugger
+- [**68**Star][2y] [Java] [yolosec/routerkeygenandroid](https://github.com/yolosec/routerkeygenandroid) Router Keygen generate default WPA/WEP keys for several routers.
- [**68**Star][6m] [Py] [usyd-blockchain/vandal](https://github.com/usyd-blockchain/vandal) Static program analysis framework for Ethereum smart contract bytecode.
- [**68**Star][5m] [Py] [tintinweb/ethereum-dasm](https://github.com/tintinweb/ethereum-dasm) An ethereum evm bytecode disassembler and static/dynamic analysis tool
- [**68**Star][2m] [Py] [thehappydinoa/rootos](https://github.com/thehappydinoa/rootos) macOS Root Helper
- [**68**Star][3y] [C] [stealth/plasmapulsar](https://github.com/stealth/plasmapulsar) PLASMA PULSAR
- [**68**Star][3y] [Py] [stayliv3/burpsuite-changeu](https://github.com/stayliv3/burpsuite-changeu)
-- [**68**Star][28d] [Ruby] [spiderlabs/cve_server](https://github.com/spiderlabs/cve_server) Simple REST-style web service for the CVE searching
-- [**68**Star][24d] [Py] [spesmilo/electrum-docs](https://github.com/spesmilo/electrum-docs) Electrum
-- [**68**Star][10d] [JS] [simplerisk/code](https://github.com/simplerisk/code) code:SimpleRisk 源码,企业威胁管理
+- [**68**Star][26d] [Py] [spesmilo/electrum-docs](https://github.com/spesmilo/electrum-docs) Electrum
+- [**68**Star][6d] [JS] [simplerisk/code](https://github.com/simplerisk/code) code:SimpleRisk 源码,企业威胁管理
- [**68**Star][1y] [Py] [shengqi158/cve-2018-2628](https://github.com/shengqi158/cve-2018-2628) CVE-2018-2628 & CVE-2018-2893
-- [**68**Star][2y] [C] [shay-gueron/aes-gcm-siv](https://github.com/shay-gueron/aes-gcm-siv) AES-GCM-SIV implementations (128 and 256 bit)
+- [**68**Star][5m] [C++] [sepehrdaddev/xerxes](https://github.com/sepehrdaddev/xerxes) Xerxes dos tool enhanced
- [**68**Star][6y] [Py] [secfree/bcrpscan](https://github.com/secfree/bcrpscan) Base on crawler result web path scanner.
+- [**68**Star][3y] [screetsec/wordlist-dracos](https://github.com/screetsec/wordlist-dracos) Collection My Wordlist
- [**68**Star][1y] [JS] [samhaxr/xxrf-shots](https://github.com/samhaxr/xxrf-shots) XXRF Shots - Useful for testing SSRF vulnerability
- [**68**Star][5m] [C#] [sailro/bdtunnel](https://github.com/sailro/bdtunnel) BoutDuTunnel is able to create virtual connections tunnelled in HTTP requests.
-- [**68**Star][2y] [Py] [s0lst1c3/sentrygun](https://github.com/s0lst1c3/sentrygun) Rogue AP killer
+- [**68**Star][10m] [JS] [saelo/v9](https://github.com/saelo/v9) Files for the "v9" challenge of 34C3 CTF. See the greeting message in server.go for more information about the challenge
- [**68**Star][3y] [C++] [rwfpl/rewolf-gogogadget](https://github.com/rwfpl/rewolf-gogogadget) kernel exploitation helper class
- [**68**Star][1y] [HTML] [rvrsh3ll/word-doc-video-embed-exe-poc](https://github.com/rvrsh3ll/word-doc-video-embed-exe-poc)
- [**68**Star][2y] [richinseattle/evolutionarykernelfuzzing](https://github.com/richinseattle/evolutionarykernelfuzzing) Materials for the Evolutionary Kernel Fuzzing talk at Black Hat USA 2017
+- [**68**Star][2y] [C] [ps4dev/ps4sdk](https://github.com/ps4dev/ps4sdk) Modular open source ps4 sdk with user and kernel space support
- [**68**Star][12m] [Py] [poorbillionaire/usn-journal-parser](https://github.com/poorbillionaire/usn-journal-parser) Python script to parse the NTFS USN Journal
-- [**68**Star][2y] [Py] [planet-work/php-malware-scanner](https://github.com/planet-work/php-malware-scanner) PHP files analyzer for malware detection
- [**68**Star][1y] [PHP] [philipjohn/exploit-scanner-hashes](https://github.com/philipjohn/exploit-scanner-hashes) Hashes files for the WordPress Exploit Scanner plugin
- [**68**Star][4m] [outflanknl/presentations](https://github.com/outflanknl/presentations)
-- [**68**Star][2y] [Swift] [nwhacks-loki/loki](https://github.com/nwhacks-loki/loki) Proof-of-concept of emotion-targeted content delivery using machine learning and ARKit.
-- [**68**Star][15d] [Py] [nmantani/fileinsight-plugins](https://github.com/nmantani/fileinsight-plugins) a decoding toolbox of McAfee FileInsight hex editor for malware analysis
- [**68**Star][10m] [C] [ningzhenyu/nailgun](https://github.com/ningzhenyu/nailgun) Nailgun attack on ARM devices.
+- [**68**Star][4m] [C] [neural75/gqrx-scanner](https://github.com/neural75/gqrx-scanner) A frequency scanner for Gqrx Software Defined Radio receiver
+- [**68**Star][3m] [Py] [mrh0wl/cloudmare](https://github.com/mrh0wl/cloudmare) Cloudflare real IP tracker.
- [**68**Star][2y] [Perl] [mobrine-mob/m0b-tool](https://github.com/mobrine-mob/m0b-tool) exploit
-- [**68**Star][4y] [C] [microwave89/rtsectiontest](https://github.com/microwave89/rtsectiontest) An Attempt to Bypass Memory Scanners By Misusing the ntdll.dll "RT" Section.
-- [**68**Star][3y] [Ruby] [melvinsh/subresolve](https://github.com/melvinsh/subresolve) Resolve and quickly portscan a list of (sub)domains.
- [**68**Star][2y] [Py] [mazenelzanaty/twlocation](https://github.com/mazenelzanaty/twlocation) Python script that gets Twitter users' tweets location
-- [**68**Star][12d] [PHP] [markri/wp-sec](https://github.com/markri/wp-sec) Wp-sec is an exentsion for wp-cli which checks for Wordpress CVE security issues at wpvulndb.com
+- [**68**Star][14d] [PHP] [markri/wp-sec](https://github.com/markri/wp-sec) Wp-sec is an exentsion for wp-cli which checks for Wordpress CVE security issues at wpvulndb.com
- [**68**Star][6m] [Py] [marco-lancini/docker_offensive_elk](https://github.com/marco-lancini/docker_offensive_elk) Elasticsearch for Offensive Security
+- [**68**Star][3m] [C#] [malwarialabs/derbycon2019](https://github.com/malwarialabs/derbycon2019) Code & Slides For DerbyCon 2019
- [**68**Star][8m] [Py] [lunixbochs/revsync](https://github.com/lunixbochs/revsync) realtime cross-tool collaborative reverse engineering
-- [**68**Star][13d] [Go] [letsencrypt/ct-woodpecker](https://github.com/letsencrypt/ct-woodpecker) A tool to monitor a CT log for operational problems
-- [**68**Star][25d] [C#] [leoloobeek/csharp](https://github.com/leoloobeek/csharp) Various C# projects for offensive security
+- [**68**Star][27d] [C#] [leoloobeek/csharp](https://github.com/leoloobeek/csharp) Various C# projects for offensive security
- [**68**Star][9y] [Py] [laanwj/decuda](https://github.com/laanwj/decuda) Decuda and cudasm, the CUDA binary utilities package. Low-level tools for NVidia G80 GPUs.
- [**68**Star][3y] [Py] [kkar/vbs-obfuscator-in-python](https://github.com/kkar/vbs-obfuscator-in-python) VBScript obfuscation to allow PenTesters bypass countermeasures.
-- [**68**Star][3y] [Py] [kevsersrca/2016lykagguvenligivesizmatestleri](https://github.com/kevsersrca/2016lykagguvenligivesizmatestleri) Network Security Notes
- [**68**Star][1y] [Py] [kdaoudieh/bella](https://github.com/kdaoudieh/bella) Bella is a pure python post-exploitation data mining tool & remote administration tool for macOS.
- [**68**Star][2m] [Py] [jas502n/cve-2018-2628](https://github.com/jas502n/cve-2018-2628) Weblogic 反序列化漏洞(CVE-2018-2628)
+- [**68**Star][2y] [C] [invictus1306/arm-episodes](https://github.com/invictus1306/arm-episodes) Arm Episodes
- [**68**Star][6y] [intrepidusgroup/rpi-atv](https://github.com/intrepidusgroup/rpi-atv) David Schuetz's Raspberry Pi/Apple TV talk at Derbycon
-- [**68**Star][6m] [Py] [incredibleindishell/windows-ad-environment-related](https://github.com/incredibleindishell/windows-ad-environment-related) This Repository contains the stuff related to windows Active directory environment exploitation
- [**68**Star][2y] [imp0wd3r/active-directory-pentest](https://github.com/imp0wd3r/active-directory-pentest) Windows域渗透学习笔记
- [**68**Star][2y] [Go] [ihciah/inner-shadowsocks](https://github.com/ihciah/inner-shadowsocks) Shadowsocks -> socks5 on server. (Created for providing socks5 proxy for Telegram)
- [**68**Star][6m] [Py] [idiom/pftriage](https://github.com/idiom/pftriage) Python tool and library to help analyze files during malware triage and analysis.
- [**68**Star][2y] [Py] [ianmiell/autotrace](https://github.com/ianmiell/autotrace) Runs a process, and gives you the output along with other telemetry on the process, all in one terminal window.
+- [**68**Star][2d] [C] [horsicq/stringsx64dbg](https://github.com/horsicq/stringsx64dbg) Strings plugin for x64dbg
- [**68**Star][5m] [C#] [holly-hacker/dnspy.extension.holly](https://github.com/holly-hacker/dnspy.extension.holly) A dnSpy extension to aid reversing of obfuscated assemblies
- [**68**Star][3y] [C] [henkaku/vitashell](https://github.com/henkaku/vitashell) This is a fork of
-- [**68**Star][8d] [Py] [greenbone/gvm-tools](https://github.com/greenbone/gvm-tools) Remote control your Greenbone Vulnerability Manager (GVM)
+- [**68**Star][2y] [hacker0x01/h1-212-ctf-solutions](https://github.com/hacker0x01/h1-212-ctf-solutions) A collection of the solutions people wrote for the H1-212 Capture The Flag event
+- [**68**Star][3m] [Py] [gadiluna/safe](https://github.com/gadiluna/safe) Self-Attentive Function Embeddings for binary similarity
- [**68**Star][6m] [Py] [funilrys/pyfunceble](https://github.com/funilrys/pyfunceble) The tool to check the availability or syntax of domains, IPv4 or URL.
-- [**68**Star][3m] [TypeScript] [flathub/linux-store-frontend](https://github.com/flathub/linux-store-frontend) A web application to browse and install applications present in Flatpak repositories. Powers
+- [**68**Star][3m] [TS] [flathub/linux-store-frontend](https://github.com/flathub/linux-store-frontend) A web application to browse and install applications present in Flatpak repositories. Powers
- [**68**Star][2y] [Go] [fideliscyber/x509](https://github.com/fideliscyber/x509) 用X.509数字证书建立隐蔽数据交换通道 PoC
+- [**68**Star][3m] [Py] [endgameinc/eqllib](https://github.com/endgameinc/eqllib)
- [**68**Star][3y] [CSS] [enddo/cjexploiter](https://github.com/enddo/cjexploiter) Drag and Drop ClickJacking exploit development assistance tool.
- [**68**Star][4y] [C] [elfmaster/kdress](https://github.com/elfmaster/kdress) Transform vmlinuz into a fully debuggable vmlinux that can be used with /proc/kcore
- [**68**Star][1y] [PHP] [dpiekacz/gixlg](https://github.com/dpiekacz/gixlg) GIXLG - Looking Glass
-- [**68**Star][12d] [Py] [devopshq/artifactory](https://github.com/devopshq/artifactory) dohq-artifactory: a Python client for Artifactory
- [**68**Star][9m] [Ruby] [dev-sec/chef-windows-hardening](https://github.com/dev-sec/chef-windows-hardening) This chef cookbook provides windows hardening configurations for the DevSec Windows baseline profile.
- [**68**Star][2y] [Py] [dekunukem/facepunch](https://github.com/dekunukem/facepunch) Raspberry Pi based facial recognition punch clock
- [**68**Star][3y] [HTML] [davevs/dvxte](https://github.com/davevs/dvxte) Damn Vulnerable Xebia Training Environment
- [**68**Star][8m] [C] [comaeio/livecloudkd](https://github.com/comaeio/livecloudkd) Hyper-V Research is trendy now
-- [**68**Star][5y] [PowerShell] [cheetz/powertools](https://github.com/cheetz/powertools) Veil's PowerTools are a collection of PowerShell projects with a focus on offensive operations.
-- [**68**Star][6m] [Java] [c0d3p1ut0s/java-security-manager-bypass](https://github.com/c0d3p1ut0s/java-security-manager-bypass)
- [**68**Star][3y] [CMake] [bastilleresearch/gr-nordic](https://github.com/bastilleresearch/gr-nordic) GNU Radio module and Wireshark dissector for the Nordic Semiconductor nRF24L Enhanced Shockburst protocol.
-- [**68**Star][4m] [ascotbe/osmographic-brain-mapping](https://github.com/ascotbe/osmographic-brain-mapping) 渗透脑图(渗透步骤)
+- [**68**Star][8m] [Shell] [baguswiratmaadi/reverie](https://github.com/baguswiratmaadi/reverie) Automated Pentest Tools Designed For Parrot Linux
+- [**68**Star][4d] [Java] [auth0/auth0.android](https://github.com/auth0/auth0.android) Android toolkit for Auth0 API
- [**68**Star][3y] [C] [angelkillah/zer0m0n](https://github.com/angelkillah/zer0m0n) zer0m0n driver for cuckoo sandbox
-- [**68**Star][2y] [Py] [alexander-hanel/idapython6to7](https://github.com/alexander-hanel/idapython6to7)
- [**68**Star][2y] [C] [akayn/kbmon](https://github.com/akayn/kbmon) Kernel Mode, driver only, ring O, remote UDP ,windows 10, keylogger. (no data needs to be writen to disk..).
- [**68**Star][2m] [C] [aerosoul94/ida_gel](https://github.com/aerosoul94/ida_gel) A collection of IDA loaders for various game console ELF's. (PS3, PSVita, WiiU)
+- [**68**Star][5y] [C++] [987432340/lcx](https://github.com/987432340/lcx) 自修改免杀lcx端口转发工具
- [**68**Star][2y] [Py] [3xp10it/xdump](https://github.com/3xp10it/xdump) Drag database with "one sentence" webshell
- [**68**Star][11m] [0xfe/hacking-stellar](https://github.com/0xfe/hacking-stellar) A hacker's guide to using the Stellar blockchain platform.
-- [**67**Star][2y] [C++] [secrary/hooking-via-instrumentationcallback](https://github.com/secrary/hooking-via-instrumentationcallback) codes for my blog post:
-- [**67**Star][9d] [Py] [ehco1996/aioshadowsocks](https://github.com/ehco1996/aioshadowsocks) 用 asyncio 重写 shadowsocks ~
- [**67**Star][4y] [Ruby] [achillean/shodan-ruby](https://github.com/achillean/shodan-ruby) Ruby library for SHODAN
+- [**67**Star][9m] [Py] [ehco1996/lazyspider](https://github.com/ehco1996/lazyspider) 爬虫的各种坑 我来填 :)
+- [**67**Star][2m] [404notf0und/my-security-algorithm-architecture](https://github.com/404notf0und/my-security-algorithm-architecture) 404 Not Found的安全算法知识体系:安全、算法、安全算法(面试前必看一遍!!!)
+- [**67**Star][10d] [pluwen/china-domain-whitelist](https://github.com/pluwen/china-domain-whitelist) 常用中国网站白名单,纯列表,用于 SwitchyOmega,控制不走代理的网站。
- [**67**Star][8y] [Py] [jedahan/haiku-wifi](https://github.com/jedahan/haiku-wifi) turn your wireless router's extra radios into a public billboard!
- [**67**Star][2m] [Java] [static-flow/burpsuite-team-extension](https://github.com/static-flow/burpsuite-team-extension) This Burpsuite plugin allows for multiple web app testers to share their proxy history with each other in real time. Requests that comes through your Burpsuite instance will be replicated in the history of the other testers and vice-versa!
-- [**67**Star][1y] [Shell] [kiyadesu/android](https://github.com/kiyadesu/Android) walk into Android security step by step
- [**67**Star][9m] [Py] [phxbandit/scripts-and-tools](https://github.com/phxbandit/scripts-and-tools) Scripts and utilities to help your hacking needs
- [**67**Star][2y] [vysecurity/cve-2018-4878](https://github.com/vysecurity/CVE-2018-4878) Aggressor Script to launch IE driveby for CVE-2018-4878
-- [**67**Star][23d] [PowerShell] [dsccommunity/certificatedsc](https://github.com/dsccommunity/CertificateDsc) This DSC Resource module can be used to simplify administration of certificates on a Windows Server.
- [**67**Star][9m] [Py] [phxbandit/scripts-and-tools](https://github.com/phxbandit/scripts-and-tools) Scripts and utilities to help your hacking needs
-- [**67**Star][13d] [Shell] [sclorg/s2i-php-container](https://github.com/sclorg/s2i-php-container) PHP container images based on Red Hat Software Collections and intended for OpenShift and general usage, that provide a platform for building and running PHP applications. Users can choose between Red Hat Enterprise Linux, Fedora, and CentOS based images.
- [**67**Star][2m] [C] [brandonplank/rootlessjb4](https://github.com/BrandonPlank/rootlessJB4) rootlessJB that supports iOS 12.0 - 12.2 & 12.4
- [**67**Star][1y] [JS] [radareorg/radare2-webui](https://github.com/radareorg/radare2-webui) webui repository for radare2
- [**67**Star][3y] [Java] [octopus-platform/bjoern](https://github.com/octopus-platform/bjoern) Binary analysis platform based on Octopus and Radare2
- [**67**Star][2y] [shmilylty/awesome-malware-analysis](https://github.com/shmilylty/awesome-malware-analysis) A curated list of awesome malware analysis tools and resources
- [**67**Star][1y] [PHP] [xsuperbug/payloads](https://github.com/xsuperbug/payloads)
-- [**67**Star][12d] [Py] [x4nth055/pythoncode-tutorials](https://github.com/x4nth055/pythoncode-tutorials) The Python Code Tutorials
- [**67**Star][6m] [Py] [vesche/histstat](https://github.com/vesche/histstat) history for netstat
+- [**67**Star][3y] [Shell] [trpt/usbdeath](https://github.com/trpt/usbdeath) anti-forensic tool that writes udev rules for known usb devices and do some things at unknown usb insertion or specific usb device removal
- [**67**Star][11m] [C++] [trailofbits/clang-cfi-showcase](https://github.com/trailofbits/clang-cfi-showcase) Sample programs that illustrate how to use control flow integrity with the clang compiler
+- [**67**Star][7m] [Py] [toxydose/duckyspark](https://github.com/toxydose/duckyspark) Translator from USB-Rubber-Ducky payloads to a Digispark code.
- [**67**Star][5m] [Shell] [tasket/qubes-vpn-support](https://github.com/tasket/qubes-vpn-support) VPN configuration in Qubes OS
- [**67**Star][1y] [Py] [takeshixx/knxmap](https://github.com/takeshixx/knxmap) KNXnet/IP scanning and auditing tool for KNX home automation installations.
-- [**67**Star][5m] [Jupyter Notebook] [surajr/url-classification](https://github.com/surajr/url-classification) Machine learning to classify Malicious (Spam)/Benign URL's
- [**67**Star][4y] [C#] [stphivos/rat-shell](https://github.com/stphivos/rat-shell) Windows Remote Access Trojan (RAT)
- [**67**Star][5y] [Java] [ssexxe/xxebugfind](https://github.com/ssexxe/xxebugfind) A tool for detecting XML External Entity (XXE) vulnerabilities in Java applications
- [**67**Star][2y] [Java] [sola-da/synode](https://github.com/sola-da/synode) Automatically Preventing Code Injection Attacks on Node.js
- [**67**Star][8m] [JS] [sindresorhus/debounce-fn](https://github.com/sindresorhus/debounce-fn) Debounce a function
-- [**67**Star][5m] [C++] [sepehrdaddev/xerxes](https://github.com/sepehrdaddev/xerxes) Xerxes dos tool enhanced
-- [**67**Star][10m] [JS] [saelo/v9](https://github.com/saelo/v9) Files for the "v9" challenge of 34C3 CTF. See the greeting message in server.go for more information about the challenge
+- [**67**Star][3y] [Py] [secwiki/vulscritp](https://github.com/secwiki/vulscritp) 内网渗透脚本
+- [**67**Star][1m] [Py] [s1egesystems/ghostdelivery](https://github.com/s1egesystems/ghostdelivery) .vbs script to deliver payload with persistence.
+- [**67**Star][9m] [YARA] [rootkiter/binary-files](https://github.com/rootkiter/binary-files) EarthWorm/Termite 停止更新
- [**67**Star][4y] [Py] [robbyfux/ragpicker](https://github.com/robbyfux/ragpicker) Ragpicker is a Plugin based malware crawler with pre-analysis and reporting functionalities. Use this tool if you are testing antivirus products, collecting malware for another analyzer/zoo.
-- [**67**Star][11d] [Ruby] [puppetlabs/puppetlabs-inifile](https://github.com/puppetlabs/puppetlabs-inifile) Resource types for managing settings in INI files
-- [**67**Star][2y] [C] [ps4dev/ps4sdk](https://github.com/ps4dev/ps4sdk) Modular open source ps4 sdk with user and kernel space support
+- [**67**Star][1m] [retme7/my-slides](https://github.com/retme7/my-slides) My slides
+- [**67**Star][3y] [JS] [pythonran/pcap_tools](https://github.com/pythonran/pcap_tools) 网络流量可配置嗅探,流量包解析,漏洞规则扫描,生成报告. ....搞网络安全这块,还凑合着用吧
+- [**67**Star][3d] [Ruby] [puppetlabs/puppetlabs-inifile](https://github.com/puppetlabs/puppetlabs-inifile) Resource types for managing settings in INI files
+- [**67**Star][6y] [PHP] [pshep/anubis](https://github.com/pshep/anubis) Web front-end (api interface) to CGMINER
+- [**67**Star][4m] [Py] [pjialin/pyproxy-async](https://github.com/pjialin/pyproxy-async) 基于 Python Asyncio + Redis 实现的代理池
- [**67**Star][1y] [C++] [oyyd/nysocks](https://github.com/oyyd/nysocks) Nysocks binds kcp and libuv to provide an aggressive tcp tunnel in nodejs.
+- [**67**Star][6m] [Py] [orleven/tentacle](https://github.com/orleven/tentacle) Tentacle is a POC vulnerability verification and exploit framework. It supports free extension of exploits and uses POC scripts. It supports calls to zoomeye, fofa, shodan and other APIs to perform bulk vulnerability verification for multiple targets.
- [**67**Star][2m] [Java] [netspi/burpcollaboratordnstunnel](https://github.com/netspi/burpcollaboratordnstunnel) A DNS tunnel utilizing the Burp Collaborator
-- [**67**Star][3m] [Py] [mrh0wl/cloudmare](https://github.com/mrh0wl/cloudmare) Cloudflare real IP tracker.
- [**67**Star][9m] [Go] [mozilla/audit-go](https://github.com/mozilla/audit-go) Linux Audit Plugin for heka written using netlink Protocol in golang and Lua
-- [**67**Star][3m] [C#] [malwarialabs/derbycon2019](https://github.com/malwarialabs/derbycon2019) Code & Slides For DerbyCon 2019
+- [**67**Star][4y] [C] [microwave89/rtsectiontest](https://github.com/microwave89/rtsectiontest) An Attempt to Bypass Memory Scanners By Misusing the ntdll.dll "RT" Section.
- [**67**Star][5y] [C] [malwaretech/basichook](https://github.com/malwaretech/basichook) x86 Inline hooking engine (using trampolines)
- [**67**Star][4y] [C] [luigirizzo/netmap-libpcap](https://github.com/luigirizzo/netmap-libpcap) Automatically exported from code.google.com/p/netmap-libpcap
- [**67**Star][12m] [Py] [lucasg/idamagnum](https://github.com/lucasg/idamagnum) a plugin for integrating MagnumDB requests within IDA
- [**67**Star][2y] [Go] [lubyruffy/tcptunnel](https://github.com/lubyruffy/tcptunnel) 将本地内网服务器映射到公网。
- [**67**Star][2y] [C++] [leeqwind/holicpoc](https://github.com/leeqwind/holicpoc) POC and exploitation of vulnerabilities
- [**67**Star][2y] [Swift] [ktakayama/notificationcrash](https://github.com/ktakayama/notificationcrash)
-- [**67**Star][3y] [C] [klks/checksec](https://github.com/klks/checksec) x64dbg插件,用于检查应用程序各模块的安全设置,包括:SafeSEH、DEP、ASLR、、GS、CFG、Signature
-- [**67**Star][2y] [C] [invictus1306/arm-episodes](https://github.com/invictus1306/arm-episodes) Arm Episodes
-- [**67**Star][7d] [C] [horsicq/stringsx64dbg](https://github.com/horsicq/stringsx64dbg) Strings plugin for x64dbg
+- [**67**Star][18d] [C++] [jaegertracing/jaeger-client-cpp](https://github.com/jaegertracing/jaeger-client-cpp) C++ OpenTracing binding for Jaeger
+- [**67**Star][1m] [YARA] [itayc0hen/apt-ecosystem](https://github.com/itayc0hen/apt-ecosystem) This repository contains the website and the tools which are part of the joint research between Check Point Research and Intezer to map the connections inside the APT Ecosystem of Russia.
+- [**67**Star][2y] [ObjC] [iscanner/iscanner_ios](https://github.com/iscanner/iscanner_ios) An easy-to-use scanner app for iOS.
+- [**67**Star][1y] [PHP] [irelance/jsc-decompile-mozjs-34](https://github.com/irelance/jsc-decompile-mozjs-34) A javascript bytecode decoder for mozilla spider-monkey version 34. May decompile jsc file compile by cocos-2dx
- [**67**Star][2y] [Py] [hlldz/wildpwn](https://github.com/hlldz/wildpwn) Brute forcer and shell deployer for WildFly
- [**67**Star][6m] [Ruby] [hercules-team/augeasproviders](https://github.com/hercules-team/augeasproviders) Alternative Augeas-based providers for Puppet
- [**67**Star][3y] [Py] [harmj0y/impdump](https://github.com/harmj0y/impdump) This is a simple parser for/decrypter for Impacket's esentutl.py utility. It assists with decrypting hashes and hash histories from ntds.dit databases.
-- [**67**Star][2y] [hacker0x01/h1-212-ctf-solutions](https://github.com/hacker0x01/h1-212-ctf-solutions) A collection of the solutions people wrote for the H1-212 Capture The Flag event
-- [**67**Star][7d] [Java] [gmu-swe/phosphor](https://github.com/gmu-swe/phosphor) Phosphor: Dynamic Taint Tracking for the JVM
+- [**67**Star][8m] [Py] [grayddq/publicsecscan](https://github.com/grayddq/publicsecscan) 针对大量WEB资产进行分布式WEB安全扫描,发现web环境下常规的一些安全漏洞
+- [**67**Star][5d] [Java] [gmu-swe/phosphor](https://github.com/gmu-swe/phosphor) Phosphor: Dynamic Taint Tracking for the JVM
- [**67**Star][4m] [Go] [gen0cide/laforge](https://github.com/gen0cide/laforge) Competition Infrastructure Management
-- [**67**Star][3m] [Py] [gadiluna/safe](https://github.com/gadiluna/safe) Self-Attentive Function Embeddings for binary similarity
-- [**67**Star][1m] [Shell] [f5networks/f5-azure-arm-templates](https://github.com/f5networks/f5-azure-arm-templates) Azure Resource Manager Templates for quickly deploying BIG-IP services in Azure
+- [**67**Star][5y] [C] [gabrtv/shocker](https://github.com/gabrtv/shocker) Shocker / Docker Breakout PoC
+- [**67**Star][2d] [Shell] [f5networks/f5-azure-arm-templates](https://github.com/f5networks/f5-azure-arm-templates) Azure Resource Manager Templates for quickly deploying BIG-IP services in Azure
- [**67**Star][7m] [JS] [exodusintel/cve-2019-0808](https://github.com/exodusintel/cve-2019-0808) Win32k Exploit by Grant Willcox
- [**67**Star][2m] [doctorwebltd/malware-iocs](https://github.com/doctorwebltd/malware-iocs)
- [**67**Star][10m] [dkhuuthe/madlira](https://github.com/dkhuuthe/madlira) Malware detection using learning and information retrieval for Android
- [**67**Star][6m] [Py] [deptofdefense/salsa](https://github.com/deptofdefense/salsa) Salvaging Static Analysis
+- [**67**Star][2y] [Py] [debasishm89/openxmolar](https://github.com/debasishm89/openxmolar) A MS OpenXML Format Fuzzing Framework
+- [**67**Star][2m] [HTML] [deadlyelder/tools-for-cryptanalysis](https://github.com/deadlyelder/tools-for-cryptanalysis) A repository that aims to provide tools for cryptography and cryptanalysis
- [**67**Star][1y] [Nix] [dapphub/ds-math](https://github.com/dapphub/ds-math) Safe arithmetic
+- [**67**Star][8d] [Py] [cyboxproject/python-cybox](https://github.com/cyboxproject/python-cybox) A Python library for parsing, manipulating, and generating CybOX content.
- [**67**Star][1y] [C++] [codewhitesec/unmarshalpwn](https://github.com/codewhitesec/unmarshalpwn) POC for CVE-2018-0824
-- [**67**Star][12m] [C#] [cobbr/sharpshell](https://github.com/cobbr/sharpshell) SharpShell is a proof-of-concept offensive C# scripting engine that utilizes the Rosyln C# compiler to quickly cross-compile .NET Framework console applications or libraries.
-- [**67**Star][8m] [Py] [chipik/sap_gw_rce_exploit](https://github.com/chipik/sap_gw_rce_exploit) SAP Gateway RCE exploits
+- [**67**Star][4m] [C#] [codedx/codepulse](https://github.com/codedx/codepulse) Code Pulse is a real-time code coverage tool for penetration testing activities
+- [**67**Star][1y] [C#] [cobbr/sharpshell](https://github.com/cobbr/sharpshell) SharpShell is a proof-of-concept offensive C# scripting engine that utilizes the Rosyln C# compiler to quickly cross-compile .NET Framework console applications or libraries.
+- [**67**Star][1m] [chef-koch/projectx](https://github.com/chef-koch/projectx) DarkWeb Overview
+- [**67**Star][2m] [C++] [changeofpace/mouclassinputinjection](https://github.com/changeofpace/mouclassinputinjection) MouClassInputInjection implements a kernel interface for injecting mouse input data packets into the input data stream of HID USB mouse devices.
- [**67**Star][4y] [Py] [byt3bl33d3r/beef-api](https://github.com/byt3bl33d3r/beef-api) Python library that facilitates interfacing with BeEF via it's RESTful API
-- [**67**Star][7y] [Assembly] [brainsmoke/nyanmbr](https://github.com/brainsmoke/nyanmbr) Nyancat in the MBR
+- [**67**Star][3y] [JS] [bitsofinfo/stateful-process-command-proxy](https://github.com/bitsofinfo/stateful-process-command-proxy) node.js module for executing os commands against a pool of stateful child processes such as bash or powershell via stdout and stderr streams
- [**67**Star][3m] [Shell] [bgeesaman/kube-env-stealer](https://github.com/bgeesaman/kube-env-stealer) Automated GKE Kubelet Impersonation and Cluster Secret Stealer via kube-env
-- [**67**Star][8m] [Shell] [baguswiratmaadi/reverie](https://github.com/baguswiratmaadi/reverie) Automated Pentest Tools Designed For Parrot Linux
- [**67**Star][2y] [Py] [azizaltuntas/pymap-scanner](https://github.com/azizaltuntas/pymap-scanner)
-- [**67**Star][2m] [Py] [alexdetrano/4can](https://github.com/alexdetrano/4can)
- [**67**Star][2y] [Makefile] [adamdoupe/ctf-training](https://github.com/adamdoupe/ctf-training)
- [**67**Star][2y] [abazhaniuk/publications](https://github.com/abazhaniuk/publications) Slides, Papers, Links to CVEs and advisories
-- [**67**Star][5y] [C++] [987432340/lcx](https://github.com/987432340/lcx) 自修改免杀lcx端口转发工具
- [**67**Star][1y] [Py] [3xp10it/xwifi](https://github.com/3xp10it/xwifi) Auto crack wifi in macOS
+- [**67**Star][1y] [C++] [3gstudent/use-com-objects-to-bypass-uac](https://github.com/3gstudent/use-com-objects-to-bypass-uac)
+- [**67**Star][1y] [Go] [003random/getjs](https://github.com/003random/getjs) A tool to fastly get all javascript sources/files
+- [**66**Star][t] [Go] [mvdan/garble](https://github.com/mvdan/garble) Obfuscate Go builds
- [**66**Star][3y] [C] [shellphish/driller-afl](https://github.com/shellphish/driller-afl) A version of AFL tailored for Driller's use in analyzing CGC binaries.
- [**66**Star][3y] [Py] [gojhonny/pentesting-scripts](https://github.com/gojhonny/pentesting-scripts) Useful pentesting scripts
- [**66**Star][3y] [jipegit/irnotes](https://github.com/jipegit/irnotes) Some IR notes
- [**66**Star][6m] [Hack] [defuse/crackstation](https://github.com/defuse/crackstation) Source code for my crackstation.net website.
-- [**66**Star][4m] [splunk/ta-microsoft-sysmon](https://github.com/splunk/ta-microsoft-sysmon) TA-microsoft-sysmon
-- [**66**Star][18d] [Py] [imtiazkarimik23/atfuzzer](https://github.com/imtiazkarimik23/atfuzzer) "Opening Pandora's Box through ATFuzzer: Dynamic Analysis of AT Interface for Android Smartphones" ACSAC 2019
-- [**66**Star][8d] [pluwen/china-domain-whitelist](https://github.com/pluwen/china-domain-whitelist) 常用中国网站白名单,纯列表,用于 SwitchyOmega,控制不走代理的网站。
+- [**66**Star][5m] [splunk/ta-microsoft-sysmon](https://github.com/splunk/ta-microsoft-sysmon) TA-microsoft-sysmon
+- [**66**Star][10d] [Rust] [io12/pwninit](https://github.com/io12/pwninit) pwninit - automate starting binary exploit challenges
+- [**66**Star][14d] [C++] [moemod/csmoe](https://github.com/moemod/csmoe) Cross-platform Counter-Strike mod based on Xash3D (previously named CSBTE-Mobile)
- [**66**Star][3y] [JS] [ethjs/ethjs-provider-signer](https://github.com/ethjs/ethjs-provider-signer) A simple web3 standard provider that signs eth_sendTransaction payloads.
+- [**66**Star][1y] [Py] [angelkitty/bilibili-smallvideo](https://github.com/angelkitty/bilibili-smallvideo)
+- [**66**Star][2m] [Py] [chris-rands/emojify](https://github.com/chris-rands/emojify) Obfuscate your python script by converting it to emoji icons
- [**66**Star][12m] [HTML] [zadewg/livebox-0day](https://github.com/zadewg/livebox-0day) Arcadyan ARV7519RW22-A-L T VR9 1.2 Multiple security vulnerabilities affecting latest firmware release on ORANGE Livebox modems.
- [**66**Star][5y] [Assembly] [yifanlu/spider3dstools](https://github.com/yifanlu/spider3dstools) Tools to work with 3DS 9.x Spider exploit
- [**66**Star][10m] [Py] [yelp/parcelgen](https://github.com/yelp/parcelgen) Helpful tool to make data objects easier for Android
- [**66**Star][3y] [xnymia/suricata-signatures](https://github.com/xnymia/suricata-signatures) Suricata rules for Emerging Threats and funkyness
- [**66**Star][6m] [Ruby] [weppos/whois-parser](https://github.com/weppos/whois-parser) An intelligent — pure Ruby — WHOIS parser.
- [**66**Star][4y] [C] [wekillpeople/browser-dumpwd](https://github.com/wekillpeople/browser-dumpwd) Dump browser passwords(chrome, firefox) with sqlite3 lib.
-- [**66**Star][8m] [Visual Basic] [visualbasic6/chatter](https://github.com/visualbasic6/chatter) internet monitoring osint tool for windows
+- [**66**Star][8m] [JS] [webxscan/linux_rat](https://github.com/webxscan/linux_rat) LINUX集群控制(LINUX反弹式远控) LINUX反向链接运维 BY:QQ:879301117
+- [**66**Star][8m] [Visual Basic .NET] [visualbasic6/chatter](https://github.com/visualbasic6/chatter) internet monitoring osint tool for windows
- [**66**Star][6m] [Shell] [violentlydave/mkhtaccess_red](https://github.com/violentlydave/mkhtaccess_red) Auto-generate an HTaccess for payload delivery -- automatically pulls ips/nets/etc from known sandbox companies/sources that have been seen before, and redirects them to a benign payload.
-- [**66**Star][2y] [Shell] [trpt/usbdeath](https://github.com/trpt/usbdeath) anti-forensic tool that writes udev rules for known usb devices and do some things at unknown usb insertion or specific usb device removal
-- [**66**Star][7d] [Rust] [trailofbits/siderophile](https://github.com/trailofbits/siderophile) Find the ideal fuzz targets in a Rust codebase
-- [**66**Star][7m] [Py] [toxydose/duckyspark](https://github.com/toxydose/duckyspark) Translator from USB-Rubber-Ducky payloads to a Digispark code.
-- [**66**Star][7m] [Py] [thombashi/allpairspy](https://github.com/thombashi/allpairspy) A python library for test combinations generator. The generator allows one to create a set of tests using "pairwise combinations" method, reducing a number of combinations of variables into a lesser set that covers most situations.
+- [**66**Star][9d] [Rust] [trailofbits/siderophile](https://github.com/trailofbits/siderophile) Find the ideal fuzz targets in a Rust codebase
+- [**66**Star][2y] [Shell] [thestr4ng3r/arcore-patch](https://github.com/thestr4ng3r/arcore-patch) Attempt to get ARCore Preview 2 running on unsupported devices
- [**66**Star][8y] [JS] [therook/csrf-request-builder](https://github.com/therook/csrf-request-builder)
- [**66**Star][3y] [Py] [syss-research/nrf24-playset](https://github.com/syss-research/nrf24-playset) Software tools for Nordic Semiconductor nRF24-based devices like wireless keyboards, mice, and presenters
+- [**66**Star][17d] [C] [seanheelan/heaplayout](https://github.com/seanheelan/heaplayout) Source code for paper 'Automatic Heap Layout Manipulation for Exploitation'
- [**66**Star][3y] [Assembly] [scorchsecurity/systorm](https://github.com/scorchsecurity/systorm) NASM Standard Library for shellcode
- [**66**Star][2y] [Py] [sapir/sonare](https://github.com/sapir/sonare) A Qt-based disassembly viewer based on radare2
-- [**66**Star][23d] [PowerShell] [samratashok/deploy-deception](https://github.com/samratashok/deploy-deception) A PowerShell module to deploy active directory decoy objects.
+- [**66**Star][25d] [PS] [samratashok/deploy-deception](https://github.com/samratashok/deploy-deception) A PowerShell module to deploy active directory decoy objects.
- [**66**Star][2y] [Lua] [s4n7h0/nse](https://github.com/s4n7h0/nse) Some of my work on Nmap Scripts (NSE)
-- [**66**Star][30d] [Py] [s1egesystems/ghostdelivery](https://github.com/s1egesystems/ghostdelivery) .vbs script to deliver payload with persistence.
- [**66**Star][5y] [C++] [rwfpl/rewolf-dllpackager](https://github.com/rwfpl/rewolf-dllpackager) Simple tool to bundle windows DLLs with PE executable
-- [**66**Star][1m] [retme7/my-slides](https://github.com/retme7/my-slides) My slides
- [**66**Star][1m] [Py] [remg427/misp42splunk](https://github.com/remg427/misp42splunk) A Splunk app to use MISP in background
- [**66**Star][12m] [Py] [r3vn/punk.py](https://github.com/r3vn/punk.py) unix SSH post-exploitation 1337 tool
-- [**66**Star][2y] [Py] [qianniaoge/f-scrack](https://github.com/qianniaoge/f-scrack) 一款python编写的轻量级弱口令检测脚本,目前支持以下服务:FTP、MYSQL、MSSQL、MONGODB、REDIS、TELNET、ELASTICSEARCH、POSTGRESQL。
-- [**66**Star][3y] [JS] [pythonran/pcap_tools](https://github.com/pythonran/pcap_tools) 网络流量可配置嗅探,流量包解析,漏洞规则扫描,生成报告. ....搞网络安全这块,还凑合着用吧
- [**66**Star][1y] [Java] [pyn3rd/cve-2018-3252](https://github.com/pyn3rd/cve-2018-3252) CVE-2018-3252-PoC
- [**66**Star][2y] [C] [pvachon/tsl-sdr](https://github.com/pvachon/tsl-sdr) Software Defined Radio Demodulation and Decoding Tools
- [**66**Star][1y] [Py] [pure-l0g1c/hyprpulse](https://github.com/pure-l0g1c/hyprpulse) Brute force multiple accounts at once
+- [**66**Star][8m] [JS] [plazmaz/mongodb-honeyproxy](https://github.com/plazmaz/mongodb-honeyproxy) A honeypot proxy for mongodb. When run, this will proxy and log all traffic to a dummy mongodb server.
- [**66**Star][3y] [oj/bsides-2017-ctf-docker](https://github.com/oj/bsides-2017-ctf-docker) BSidesCBR CTF docker compose files
- [**66**Star][3y] [C++] [nmgwddj/learn-windows-drivers](https://github.com/nmgwddj/learn-windows-drivers) Windows drivers 开发的各个基础示例,包含进程、内存、注册表、回调等管理
-- [**66**Star][13d] [Ruby] [ninoseki/miteru](https://github.com/ninoseki/miteru) An experimental phishing kit detection tool
+- [**66**Star][15d] [Ruby] [ninoseki/miteru](https://github.com/ninoseki/miteru) An experimental phishing kit detection tool
- [**66**Star][1y] [C++] [nickcano/relocbonus](https://github.com/nickcano/relocbonus) An obfuscation tool for Windows which instruments the Windows Loader into acting as an unpacking engine.
-- [**66**Star][4m] [C] [neural75/gqrx-scanner](https://github.com/neural75/gqrx-scanner) A frequency scanner for Gqrx Software Defined Radio receiver
- [**66**Star][11m] [Py] [necst/crave](https://github.com/necst/crave) crave: 自动测试和探索通用AV引擎功能的框架
- [**66**Star][1y] [JS] [nccgroup/goatcasino](https://github.com/nccgroup/goatcasino) This is an intentionally vulnerable smart contract truffle deployment aimed at allowing those interested in smart contract security to exploit a wide variety of issues in a safe environment.
+- [**66**Star][1y] [Go] [mmcloughlin/pearl](https://github.com/mmcloughlin/pearl) Tor relay implementation in Golang
- [**66**Star][2y] [Py] [martinoj2009/icmpexfil](https://github.com/martinoj2009/icmpexfil) Exfiltrate data with ICMP
+- [**66**Star][6m] [Py] [marcobellaccini/pyaescrypt](https://github.com/marcobellaccini/pyaescrypt) A Python 3 module and script that uses AES256-CBC to encrypt/decrypt files and streams in AES Crypt file format (version 2).
+- [**66**Star][2m] [C#] [maraudershell/marauder](https://github.com/maraudershell/marauder) A .NET agent for the Faction C2 Framework
- [**66**Star][10m] [HCL] [mantvydasb/red-team-infrastructure-automation](https://github.com/mantvydasb/red-team-infrastructure-automation) Disposable and resilient red team infrastructure with Terraform
-- [**66**Star][3m] [m507/awae-preparation](https://github.com/m507/awae-preparation) This repository will contain all trainings and tutorials I have done/read to prepare for OSWE / AWAE.
+- [**66**Star][2y] [Java] [lovejj1994/simplify-core](https://github.com/lovejj1994/simplify-core) Simplify 为简化重复的JAVA代码而生,基于JDK8,无其它jar包依赖,提供序列化,json parse/generator,日期处理,asm && jdkproxy 实现动态代理功能 等常见操作。
- [**66**Star][3y] [C] [librecore-org/librecore](https://github.com/librecore-org/librecore)
-- [**66**Star][13d] [Java] [lianglixin/sandvxposed](https://github.com/lianglixin/sandvxposed) Xposed environment without root (OS 5.0 - 10.0)
-- [**66**Star][18d] [Py] [ledgerhq/blue-loader-python](https://github.com/ledgerhq/blue-loader-python) Python Loader for Ledger Blue and Nano S
+- [**66**Star][15d] [Java] [lianglixin/sandvxposed](https://github.com/lianglixin/sandvxposed) Xposed environment without root (OS 5.0 - 10.0)
+- [**66**Star][20d] [Py] [ledgerhq/blue-loader-python](https://github.com/ledgerhq/blue-loader-python) Python Loader for Ledger Blue and Nano S
- [**66**Star][4y] [Py] [jpsenior/threataggregator](https://github.com/jpsenior/threataggregator) Aggregates security threats from a number of online sources, and outputs to Syslog CEF, Snort Signatures, Iptables rules, hosts.deny, etc.
- [**66**Star][2y] [PHP] [josecl/cool-php-captcha](https://github.com/josecl/cool-php-captcha) This is the official GitHub project from code.google.com/p/cool-php-captcha
-- [**66**Star][9m] [Java] [javabeanz/owasp-security-logging](https://github.com/javabeanz/owasp-security-logging) OWASP Security Logging library for Java
-- [**66**Star][2y] [Objective-C] [iscanner/iscanner_ios](https://github.com/iscanner/iscanner_ios) An easy-to-use scanner app for iOS.
-- [**66**Star][1y] [PHP] [irelance/jsc-decompile-mozjs-34](https://github.com/irelance/jsc-decompile-mozjs-34) A javascript bytecode decoder for mozilla spider-monkey version 34. May decompile jsc file compile by cocos-2dx
+- [**66**Star][3y] [Py] [jgamblin/badactors](https://github.com/jgamblin/badactors) Create a list of bad actors from public IP blacklist.
+- [**66**Star][10m] [Java] [javabeanz/owasp-security-logging](https://github.com/javabeanz/owasp-security-logging) OWASP Security Logging library for Java
+- [**66**Star][6m] [C++] [invictus1306/functrace](https://github.com/invictus1306/functrace) A function tracer
- [**66**Star][4y] [JS] [indeedops/shadowbuster](https://github.com/indeedops/shadowbuster)
-- [**66**Star][6y] [C] [hiikezoe/android_run_root_shell](https://github.com/hiikezoe/android_run_root_shell)
- [**66**Star][7m] [C] [hc0d3r/sshd-poison](https://github.com/hc0d3r/sshd-poison) a tool to get creds of pam based sshd authentication
-- [**66**Star][8m] [Py] [grayddq/publicsecscan](https://github.com/grayddq/publicsecscan) 针对大量WEB资产进行分布式WEB安全扫描,发现web环境下常规的一些安全漏洞
-- [**66**Star][12d] [Go] [google/gonids](https://github.com/google/gonids) gonids is a library to parse IDS rules, with a focus primarily on Suricata rule compatibility. There is a discussion forum available that you can join on Google Groups:
+- [**66**Star][28d] [Assembly] [hardenedlinux/firmware-anatomy](https://github.com/hardenedlinux/firmware-anatomy) Tear the firmware apart with your bare hands;-)
+- [**66**Star][2d] [Go] [google/gonids](https://github.com/google/gonids) gonids is a library to parse IDS rules, with a focus primarily on Suricata rule compatibility. There is a discussion forum available that you can join on Google Groups:
- [**66**Star][2y] [Py] [fossfreedom/coverart-browser](https://github.com/fossfreedom/coverart-browser) Browse your cover-art albums in Rhythmbox v2.96 - 3.0+
- [**66**Star][2y] [Py] [firefart/cve-2018-7600](https://github.com/firefart/cve-2018-7600) CVE-2018-7600 - Drupal 7.x RCE
- [**66**Star][4y] [JS] [etherdream/mitm-http-cache-poisoning](https://github.com/etherdream/mitm-http-cache-poisoning) HTTP Cache Poisoning Demo
+- [**66**Star][4y] [PS] [dlwyatt/protecteddata](https://github.com/dlwyatt/protecteddata) PowerShell Module for securely encrypting and sharing secret data such as passwords.
- [**66**Star][8m] [C] [dimopouloselias/simpleshellcodeinjector](https://github.com/dimopouloselias/simpleshellcodeinjector) SimpleShellcodeInjector receives as an argument a shellcode in hex and executes it. It DOES NOT inject the shellcode in a third party application.
-- [**66**Star][2y] [Py] [debasishm89/openxmolar](https://github.com/debasishm89/openxmolar) A MS OpenXML Format Fuzzing Framework
- [**66**Star][2m] [davidfowl/windbgcheatsheet](https://github.com/davidfowl/windbgcheatsheet) This is a cheat sheet for windbg
+- [**66**Star][3y] [Eagle] [dangrie158/esptool](https://github.com/dangrie158/esptool)
- [**66**Star][3m] [HTML] [cytoscape/cytoscape.js-cose-bilkent](https://github.com/cytoscape/cytoscape.js-cose-bilkent) The CoSE layout for Cytoscape.js by Bilkent with enhanced compound node placement.
-- [**66**Star][12d] [Py] [cyboxproject/python-cybox](https://github.com/cyboxproject/python-cybox) A Python library for parsing, manipulating, and generating CybOX content.
- [**66**Star][3y] [Py] [crange/crange](https://github.com/crange/crange) Crange is a tool to index and cross-reference C/C++ source code
- [**66**Star][5m] [Batchfile] [cornerpirate/reportcompiler](https://github.com/cornerpirate/reportcompiler) A tool for importing vulnerability scanner data and then allowing you to manipulate the risks, affected hosts, and create risk ordered output.
-- [**66**Star][4m] [C#] [codedx/codepulse](https://github.com/codedx/codepulse) Code Pulse is a real-time code coverage tool for penetration testing activities
- [**66**Star][3y] [Py] [claudioviviani/ms17-010-m4ss-sc4nn3r](https://github.com/claudioviviani/ms17-010-m4ss-sc4nn3r) MS17-010 multithreading scanner written in python.
- [**66**Star][3y] [Py] [circl/cve-portal](https://github.com/circl/cve-portal) Common Vulnerabilities and Exposures - Portal
- [**66**Star][2y] [Py] [christophetd/firepwned](https://github.com/christophetd/firepwned)
-- [**66**Star][1m] [chef-koch/projectx](https://github.com/chef-koch/projectx) DarkWeb Overview
+- [**66**Star][7y] [C] [chokepoint/jynx2](https://github.com/chokepoint/jynx2) JynxKit2 is an LD_PRELOAD userland rootkit based on the original JynxKit. The backdoor has been replaced with an "accept()" system hook.
- [**66**Star][3y] [Py] [bwall/ssdc](https://github.com/bwall/ssdc) ssdeep based clustering tool
+- [**66**Star][1m] [Shell] [brainfucksec/archtorify](https://github.com/brainfucksec/archtorify) Transparent proxy through Tor for Arch Linux OS
- [**66**Star][9m] [Java] [bolexliu/apptrack](https://github.com/bolexliu/apptrack) Xposed HookAPP逆向跟踪工具,跟踪Activity与Fragment启动信息等
- [**66**Star][3y] [Py] [bear/s3scan](https://github.com/bear/s3scan) scan s3 buckets for security issues
- [**66**Star][2y] [avast-tl/capstone2llvmir](https://github.com/avast-tl/capstone2llvmir) capstone2llvmir: 将Capstone 指令转化为 LLVM IR
- [**66**Star][6y] [atimorin/poc2013](https://github.com/atimorin/poc2013) Power of Community 2013 conference special release of ICS/SCADA toolkit
+- [**66**Star][1m] [Shell] [ankh2054/linux-pentest](https://github.com/ankh2054/linux-pentest) Linux pentest tools
+- [**66**Star][5y] [C] [akamajoris/php-extension-backdoor](https://github.com/akamajoris/php-extension-backdoor) Simple php backdoor based on extension
- [**66**Star][5y] [Py] [ajinabraham/xenotix-apk-reverser](https://github.com/ajinabraham/xenotix-apk-reverser) Xenotix APK Reverser is an OpenSource Android Application Package (APK) decompiler and disassembler powered by dex2jar, baksmali and jd-core.
-- [**66**Star][1y] [C++] [3gstudent/use-com-objects-to-bypass-uac](https://github.com/3gstudent/use-com-objects-to-bypass-uac)
- [**66**Star][4m] [Go] [0xrawsec/gene](https://github.com/0xrawsec/gene) Signature Engine for Windows Event Logs
- [**66**Star][4y] [C] [0xabu/qemu](https://github.com/0xabu/qemu) OLD qemu with Raspberry Pi 2 and Windows on ARM support. Retained for reference purposes only -- most of this has been merged upstream.
- [**66**Star][11m] [C] [0x36/cve-pocs](https://github.com/0x36/cve-pocs) This repo contains some of my vuln research findings
- [**65**Star][3y] [Ruby] [p3nt4/metasploit-modules](https://github.com/p3nt4/metasploit-modules) Collection of metasploit modules
+- [**65**Star][5y] [ObjC] [project-imas/memory-security](https://github.com/project-imas/memory-security) Tools for securely clearing and validating iOS application memory
+- [**65**Star][3y] [zhengmin1989/ios-10-decrypted-kernel-cache](https://github.com/zhengmin1989/ios-10-decrypted-kernel-cache) iOS 10 Decrypted Kernel Cache
- [**65**Star][4m] [C] [jtesta/rainbowcrackalack](https://github.com/jtesta/rainbowcrackalack) Rainbow table generation & lookup tools. Make Rainbow Tables Great Again!
-- [**65**Star][24d] [Py] [cve-search/git-vuln-finder](https://github.com/cve-search/git-vuln-finder) Finding potential software vulnerabilities from git commit messages
+- [**65**Star][26d] [Py] [cve-search/git-vuln-finder](https://github.com/cve-search/git-vuln-finder) Finding potential software vulnerabilities from git commit messages
- [**65**Star][1m] [Py] [nccgroup/gtfoblookup](https://github.com/nccgroup/gtfoblookup) Offline command line lookup utility for GTFOBins (
-- [**65**Star][1y] [Py] [angelkitty/bilibili-smallvideo](https://github.com/angelkitty/bilibili-smallvideo)
+- [**65**Star][7m] [Py] [s0md3v/shiva](https://github.com/s0md3v/Shiva) Improved DOS exploit for wordpress websites (CVE-2018-6389)
- [**65**Star][8y] [C] [robclemons/arpspoof](https://github.com/robclemons/Arpspoof) Android port of Arpspoof
- [**65**Star][3y] [Py] [plantdaddy/fuzzap](https://github.com/PlantDaddy/FuzzAP) A python script for obfuscating wireless networks
- [**65**Star][2y] [C++] [jocover/openusrp](https://github.com/jocover/OpenUSRP) using LimeSDR to simulate USRP B210
- [**65**Star][4y] [Py] [nsacyber/splunk-assessment-of-mitigation-implementations](https://github.com/nsacyber/Splunk-Assessment-of-Mitigation-Implementations) Automatically scores how well Windows systems have implemented some of the top 10 Information Assurance mitigation strategies. #nsacyber
+- [**65**Star][28d] [Py] [hatching/httpreplay](https://github.com/hatching/httpreplay) Replay HTTP and HTTPS requests from a PCAP based on TLS Master Secrets.
- [**65**Star][5y] [Py] [adamlaurie/hdmi-sniff](https://github.com/AdamLaurie/hdmi-sniff) sniff HDMI DDC (I2C) traffic
- [**65**Star][2y] [Java] [fsecurelabs/drozer-agent](https://github.com/FSecureLABS/drozer-agent) The Android Agent for the Mercury Security Assessment Framework.
- [**65**Star][1m] [Java] [lmax-exchange/disruptor-proxy](https://github.com/LMAX-Exchange/disruptor-proxy) Byte-code generator to create Disruptor-backed proxies
-- [**65**Star][3y] [Objective-C] [zhengmin1989/yalu102](https://github.com/zhengmin1989/yalu102) incomplete iOS 10.2 jailbreak for 64 bit devices by qwertyoruiopz and marcograssi
+- [**65**Star][3y] [ObjC] [zhengmin1989/yalu102](https://github.com/zhengmin1989/yalu102) incomplete iOS 10.2 jailbreak for 64 bit devices by qwertyoruiopz and marcograssi
- [**65**Star][3y] [C] [zer0mem0ry/kernelreadwritememory](https://github.com/zer0mem0ry/kernelreadwritememory) Simple code to manipulate the memory of a usermode process from kernel.
- [**65**Star][6m] [Py] [yelp/osxcollector_output_filters](https://github.com/yelp/osxcollector_output_filters) Filters that process and transform the output of osxcollector
-- [**65**Star][8m] [wufengxue/android-reverse](https://github.com/wufengxue/android-reverse) 安卓逆向工具汇总
- [**65**Star][11m] [Py] [we45/dvfaas-damn-vulnerable-functions-as-a-service](https://github.com/we45/dvfaas-damn-vulnerable-functions-as-a-service) Intentionally Vulnerable Serverless Functions to understand the specifics of Serverless Security Vulnerabilities
- [**65**Star][2y] [Py] [wazehell/cve-2018-6389](https://github.com/wazehell/cve-2018-6389) CVE-2018-6389 Exploit In WordPress DoS
- [**65**Star][5m] [QML] [turanmahmudov/instagraph](https://github.com/turanmahmudov/instagraph) Unofficial Instagram Client
- [**65**Star][6y] [C++] [trevd/android_root](https://github.com/trevd/android_root) Got Root!
-- [**65**Star][2y] [Shell] [thestr4ng3r/arcore-patch](https://github.com/thestr4ng3r/arcore-patch) Attempt to get ARCore Preview 2 running on unsupported devices
- [**65**Star][2y] [Py] [temesgeny/ppsx-file-generator](https://github.com/temesgeny/ppsx-file-generator) ppsx file generator for cve-2017-8570 (based on bhdresh/cve-2017-8570)
- [**65**Star][2y] [Py] [tbarabosch/quincy](https://github.com/tbarabosch/quincy) 在内存转储中检测基于主机的代码注入攻击
- [**65**Star][2y] [Py] [switchbrew/nx-hbexploit300-obf](https://github.com/switchbrew/nx-hbexploit300-obf) Homebrew exploit for 3.0.0
- [**65**Star][3y] [C++] [soarlab/maline](https://github.com/soarlab/maline) Android Malware Detection Framework
+- [**65**Star][2y] [JS] [smarttang/sosrp](https://github.com/smarttang/sosrp) SOSRP Security 安全平台
- [**65**Star][3m] [JS] [sergejmueller/wpcheck](https://github.com/sergejmueller/wpcheck) Vulnerability scanner for WordPress based on Node.js
-- [**65**Star][1y] [HTML] [secwiki/ipot](https://github.com/secwiki/ipot) Honeypot Research Blog 蜜罐技术研究小组
-- [**65**Star][3y] [secdr/sec-ml](https://github.com/secdr/sec-ml) security machine learning
+- [**65**Star][2y] [HTML] [secwiki/ipot](https://github.com/secwiki/ipot) Honeypot Research Blog 蜜罐技术研究小组
- [**65**Star][3y] [Py] [scipag/btle-sniffer](https://github.com/scipag/btle-sniffer) Passively scan for Bluetooth Low Energy devices and attempt to fingerprint them
- [**65**Star][1y] [Shell] [samhaxr/takeover-v1](https://github.com/samhaxr/takeover-v1) Takeover script extracts CNAME record of all subdomains at once. TakeOver saves researcher time and increase the chance of finding subdomain takeover vulnerability.
-- [**65**Star][9m] [YARA] [rootkiter/binary-files](https://github.com/rootkiter/binary-files) EarthWorm/Termite 停止更新
+- [**65**Star][4m] [Rust] [rust-fuzz/targets](https://github.com/rust-fuzz/targets)
+- [**65**Star][4m] [Shell] [rfxn/advanced-policy-firewall](https://github.com/rfxn/advanced-policy-firewall) advanced-policy-firewall:高级版策略防火墙
- [**65**Star][3y] [redhatproductsecurity/cve-howto](https://github.com/redhatproductsecurity/cve-howto) CVE assignment documentation
- [**65**Star][3m] [HTML] [project-prismatica/prismatica](https://github.com/project-prismatica/prismatica) Responsive Command and Control System
-- [**65**Star][8m] [JS] [plazmaz/mongodb-honeyproxy](https://github.com/plazmaz/mongodb-honeyproxy) A honeypot proxy for mongodb. When run, this will proxy and log all traffic to a dummy mongodb server.
+- [**65**Star][6m] [Java] [portswigger/command-injection-attacker](https://github.com/portswigger/command-injection-attacker) SHELLING - a comprehensive OS command injection payload generator
- [**65**Star][5m] [Py] [passivetotal/python_api](https://github.com/passivetotal/python_api) Python abstract API for PassiveTotal services in the form of libraries and command line utilities.
- [**65**Star][1y] [C#] [parsingteam/teleshadow2](https://github.com/parsingteam/teleshadow2) TeleShadow - Telegram Desktop Session Stealer (Windows)
- [**65**Star][5y] [Shell] [pansen/macos-sandbox-profiles](https://github.com/pansen/macos-sandbox-profiles) sandbox files for some applications running on osx for more security
-- [**65**Star][6m] [Py] [orleven/tentacle](https://github.com/orleven/tentacle) Tentacle is a POC vulnerability verification and exploit framework. It supports free extension of exploits and uses POC scripts. It supports calls to zoomeye, fofa, shodan and other APIs to perform bulk vulnerability verification for multiple targets.
- [**65**Star][2y] [Py] [ojasookert/cve-2017-0781](https://github.com/ojasookert/cve-2017-0781) Blueborne CVE-2017-0781 Android heap overflow vulnerability
- [**65**Star][2y] [C++] [not-wlan/driver-hijack](https://github.com/not-wlan/driver-hijack)
+- [**65**Star][11m] [YARA] [nheijmans/malzoo](https://github.com/nheijmans/malzoo) Mass static malware analysis tool
- [**65**Star][12m] [Py] [naivenom/reversing-list](https://github.com/naivenom/reversing-list) Reversing list
- [**65**Star][11m] [HTML] [mtesauro/owasp-wte](https://github.com/mtesauro/owasp-wte) Home of the developement for OWASP WTE - the Web Testing Environment, a collection of pre-packaged Linux AppSec tools, apps and documentation used to create pre-configured VMs or installed ala carte in the Linux of your choice..
-- [**65**Star][10m] [Gherkin] [minishift/minishift-addons](https://github.com/minishift/minishift-addons) A repository for the community to exchange Minishift add-ons
+- [**65**Star][2d] [TSQL] [mitchellkrogza/the-big-list-of-hacked-malware-web-sites](https://github.com/mitchellkrogza/the-big-list-of-hacked-malware-web-sites) This repository contains a list of all web sites I come across that are either hacked with or purposefully hosting malware, ransomware, viruses or trojans.
+- [**65**Star][7m] [Gherkin] [minishift/minishift-addons](https://github.com/minishift/minishift-addons) A repository for the community to exchange Minishift add-ons
+- [**65**Star][4m] [Py] [mcdallas/cryptotools](https://github.com/mcdallas/cryptotools)
- [**65**Star][2y] [Py] [markclayton/bumpster](https://github.com/markclayton/bumpster) The Unofficial Burp Extension for DNSDumpster.com
-- [**65**Star][2m] [C#] [maraudershell/marauder](https://github.com/maraudershell/marauder) A .NET agent for the Faction C2 Framework
- [**65**Star][3y] [C++] [m000/dtracker](https://github.com/m000/dtracker) DataTracker: A Pin tool for collecting high-fidelity data provenance from unmodified programs.
- [**65**Star][1y] [Py] [lukebaggett/google_socks](https://github.com/lukebaggett/google_socks) A proof of concept demonstrating the use of Google Drive for command and control.
- [**65**Star][3y] [lcamry/sqli-labs](https://github.com/lcamry/sqli-labs) sqli-labs中文使用手册,详细讲解了mysql注入的各种手段。
-- [**65**Star][8d] [Go] [lair-framework/go-nmap](https://github.com/lair-framework/go-nmap) Nmap XML parsing library for Go
+- [**65**Star][10d] [Go] [lair-framework/go-nmap](https://github.com/lair-framework/go-nmap) Nmap XML parsing library for Go
- [**65**Star][2y] [HTML] [jianmou/vulnctf](https://github.com/jianmou/vulnctf) MiniProject_VulnCTF | A CTF practice environment that links Dockerhub through Github
-- [**65**Star][16d] [C++] [jaegertracing/jaeger-client-cpp](https://github.com/jaegertracing/jaeger-client-cpp) C++ OpenTracing binding for Jaeger
+- [**65**Star][5m] [Py] [integeruser/on-pwning](https://github.com/integeruser/on-pwning) My solutions to some CTF challenges and a list of interesting resources about pwning stuff
+- [**65**Star][1y] [Py] [immunit/xip](https://github.com/immunit/xip) XIP generates a list of IP addresses by applying a set of transformations used to bypass security measures e.g. blacklist filtering, WAF, etc.
- [**65**Star][2y] [Java] [realbearcat/s2-055](https://github.com/RealBearcat/S2-055) S2-055 反序列化 CVE-2017-7525
- [**65**Star][1y] [Jupyter Notebook] [hmishra2250/botnet-detection-using-machine-learning](https://github.com/hmishra2250/botnet-detection-using-machine-learning) Repository of Bachelor's Major Project on Botnet Detection
- [**65**Star][5y] [Py] [hikerell/bfuzzer](https://github.com/hikerell/bfuzzer) A Browser Fuzzer for Vulnerbilities
-- [**65**Star][26d] [Assembly] [hardenedlinux/firmware-anatomy](https://github.com/hardenedlinux/firmware-anatomy) Tear the firmware apart with your bare hands;-)
- [**65**Star][8m] [Dockerfile] [hangim/kcp-shadowsocks-docker](https://github.com/hangim/kcp-shadowsocks-docker) A docker image for shadowsocks server with KCPTUN support
- [**65**Star][2y] [Java] [hackthelegacy/hack400tool](https://github.com/hackthelegacy/hack400tool) hack400tool:IBM 电源系统安全处理工具
- [**65**Star][5y] [Java] [guardianproject/trustedintents](https://github.com/guardianproject/trustedintents) library for flexible trusted interactions between Android apps
- [**65**Star][4m] [Py] [greenwolf/social_attacker](https://github.com/greenwolf/social_attacker) An Open Source Multi Site Automated Social Media Phishing Framework
+- [**65**Star][30d] [C] [gpg/libgcrypt](https://github.com/gpg/libgcrypt) The GNU crypto library
- [**65**Star][4y] [Py] [funoverip/mcafee-sitelist-pwd-decryption](https://github.com/funoverip/mcafee-sitelist-pwd-decryption) Password decryption tool for the McAfee SiteList.xml file
- [**65**Star][4y] [PHP] [fakhrizulkifli/defeating-php-gd-imagecreatefromjpeg](https://github.com/fakhrizulkifli/defeating-php-gd-imagecreatefromjpeg) Proof-of-concept to exploit the flaw in the PHP-GD built-in function, imagecreatefromjpeg()
-- [**65**Star][2m] [Py] [endgameinc/eqllib](https://github.com/endgameinc/eqllib)
-- [**65**Star][4y] [PowerShell] [dlwyatt/protecteddata](https://github.com/dlwyatt/protecteddata) PowerShell Module for securely encrypting and sharing secret data such as passwords.
+- [**65**Star][5m] [JS] [exposejs/expose](https://github.com/exposejs/expose) A Dynamic Symbolic Execution (DSE) engine for JavaScript
- [**65**Star][2y] [Py] [daniestevez/free-outernet](https://github.com/daniestevez/free-outernet) Free Software Outernet receiver
-- [**65**Star][3y] [Eagle] [dangrie158/esptool](https://github.com/dangrie158/esptool)
+- [**65**Star][3m] [Py] [d3vzer0/reternal-quickstart](https://github.com/d3vzer0/reternal-quickstart) Repo containing docker-compose files and setup scripts without having to clone the individual reternal components
- [**65**Star][3y] [PHP] [cymmetria/strutshoneypot](https://github.com/cymmetria/strutshoneypot) Struts Apache 2 based honeypot as well as a detection module for Apache 2 servers
- [**65**Star][1y] [Py] [cryptax/dextools](https://github.com/cryptax/dextools) Miscellaenous DEX (Dalvik Executable) tools
-- [**65**Star][1m] [C++] [changeofpace/mouclassinputinjection](https://github.com/changeofpace/mouclassinputinjection) MouClassInputInjection implements a kernel interface for injecting mouse input data packets into the input data stream of HID USB mouse devices.
- [**65**Star][1y] [Py] [ch3k1/squidmagic](https://github.com/ch3k1/squidmagic) analyze a web-based network traffic
- [**65**Star][1y] [Py] [cerbo/aws-waf-security-automation](https://github.com/cerbo/aws-waf-security-automation) Amazon WAF Security Automation deployment (modular with Terraform)
- [**65**Star][2y] [Shell] [bluscreenofjeff/ccdc-scripts](https://github.com/bluscreenofjeff/ccdc-scripts) Scripts and resources for Red Teaming at CCDC competitions
+- [**65**Star][19d] [Visual Basic .NET] [blackhacker511/blackworm](https://github.com/blackhacker511/blackworm) Black Worm Offical Repo
- [**65**Star][2m] [Py] [blackarch/sploitctl](https://github.com/blackarch/sploitctl) Fetch, install and search exploit archives from exploit sites.
-- [**65**Star][17d] [Go] [binject/binjection](https://github.com/binject/binjection) Injects additional machine instructions into various binary formats.
- [**65**Star][1y] [Lua] [beaujeant/pwnadventure3](https://github.com/beaujeant/pwnadventure3) Resources for the Pwn Adventure 3 challenges from GITS'15 (
- [**65**Star][2y] [Lua] [bastilleresearch/cabletap](https://github.com/bastilleresearch/cabletap) CableTap public disclosure documents.
-- [**65**Star][1m] [Shell] [ankh2054/linux-pentest](https://github.com/ankh2054/linux-pentest) Linux pentest tools
+- [**65**Star][4y] [C] [basil00/pseudonode](https://github.com/basil00/pseudonode) PseudoNode - A full node emulator.
- [**65**Star][6y] [Py] [anbc/andbug](https://github.com/anbc/andbug) Android Debugging Library
-- [**65**Star][5y] [C] [akamajoris/php-extension-backdoor](https://github.com/akamajoris/php-extension-backdoor) Simple php backdoor based on extension
-- [**65**Star][17d] [Py] [agroce/tstl](https://github.com/agroce/tstl) Template Scripting Testing Language tool: automated test generation for Python
+- [**65**Star][19d] [Py] [agroce/tstl](https://github.com/agroce/tstl) Template Scripting Testing Language tool: automated test generation for Python
+- [**65**Star][2y] [Shell] [adhdproject/buildkit](https://github.com/adhdproject/buildkit)
- [**65**Star][1y] [Go] [0xfe/lumen](https://github.com/0xfe/lumen) A commandline client for the Stellar blockchain
-- [**65**Star][2y] [Go] [0c34/govwa](https://github.com/0c34/govwa)
+- [**64**Star][14d] [bkimminich/it-security-lecture](https://github.com/bkimminich/it-security-lecture) University lecture on "IT Security" as Open Educational Resources material
+- [**64**Star][3y] [C++] [functionclub/memtester](https://github.com/functionclub/memtester) 检测VPS真实可分配内存的小工具,适用于检测VPS超售情况。
+- [**64**Star][1y] [Py] [feeicn/exif](https://github.com/feeicn/exif) EXIF information viewer(查看照片中隐藏的各类信息)
- [**64**Star][3y] [Ruby] [danielmiessler/caparser](https://github.com/danielmiessler/caparser) A quick and dirty PCAP parser that helps you identify who your applications are sending sensitive data to without encryption.
-- [**64**Star][10d] [Shell] [nahamsec/crtndstry](https://github.com/nahamsec/crtndstry) Yet another subdomain finder
-- [**64**Star][12d] [C++] [moemod/csmoe](https://github.com/moemod/csmoe) Cross-platform Counter-Strike mod based on Xash3D (previously named CSBTE-Mobile)
-- [**64**Star][7m] [Py] [s0md3v/shiva](https://github.com/s0md3v/Shiva) Improved DOS exploit for wordpress websites (CVE-2018-6389)
+- [**64**Star][3y] [bastilleresearch/keyjack](https://github.com/bastilleresearch/keyjack) Device discovery tools and encrypted keystroke injection advisories for Logitech, Dell, Lenovo and AmazonBasics
- [**64**Star][6y] [C++] [helpsystems/sentinel](https://github.com/helpsystems/sentinel) Sentinel is a command line tool able to protect Windows 32 bit programs against exploits targeted by attackers or viruses. It can protect your programs against 0-day attacks or publicly known bugs.
-- [**64**Star][11d] [C] [enjoy-digital/pcie_screamer](https://github.com/enjoy-digital/pcie_screamer) PCIe Screamer SoC based on LiteX
-- [**64**Star][26d] [Py] [hatching/httpreplay](https://github.com/hatching/httpreplay) Replay HTTP and HTTPS requests from a PCAP based on TLS Master Secrets.
-- [**64**Star][2m] [Py] [chris-rands/emojify](https://github.com/chris-rands/emojify) Obfuscate your python script by converting it to emoji icons
+- [**64**Star][13d] [C] [enjoy-digital/pcie_screamer](https://github.com/enjoy-digital/pcie_screamer) PCIe Screamer SoC based on LiteX
+- [**64**Star][8m] [Py] [nordicsemiconductor/nrf-sniffer-for-802.15.4](https://github.com/NordicSemiconductor/nRF-Sniffer-for-802.15.4) nRF-based 802.15.4 sniffer (firmware and software)
- [**64**Star][6y] [C++] [zenlulz/fasm.net](https://github.com/zenlulz/fasm.net) A managed wrapper to use FASM compiler from .NET applications.
+- [**64**Star][8m] [Py] [yarox24/attack_monitor](https://github.com/yarox24/attack_monitor) Endpoint detection & Malware analysis software
- [**64**Star][3y] [Py] [xorpd/idsearch](https://github.com/xorpd/idsearch) A search tool for IDA
- [**64**Star][8m] [C] [xiao70/x70fsd](https://github.com/xiao70/x70fsd) Windows file system filter drivers(minifilter) to encrypt, compress, or otherwise modify file-based data require some of the most complex kernel software developed for Windows.
- [**64**Star][7y] [C++] [wisec/dominator](https://github.com/wisec/dominator)
- [**64**Star][7m] [Py] [vysecurity/att-ck_analysis](https://github.com/vysecurity/att-ck_analysis) Repository for my ATT&CK analysis research.
- [**64**Star][1y] [vagnerpilar/windbgtree](https://github.com/vagnerpilar/windbgtree) A command tree based on commands and extensions for Windows Kernel Debugging.
+- [**64**Star][4m] [Visual Basic .NET] [thesph1nx/rt-101](https://github.com/thesph1nx/rt-101) VB.net Remote Administrator Tool (RAT)
- [**64**Star][12m] [Py] [th3j0kr/jtb_investigator](https://github.com/th3j0kr/jtb_investigator) A tool to speed up the process of doing the same simple IP/Domain Name lookups over and over again.
- [**64**Star][4m] [HTML] [team-su/suctf-2019](https://github.com/team-su/suctf-2019)
- [**64**Star][3y] [Fortran] [tabacof/adversarial](https://github.com/tabacof/adversarial) Exploring the Space of Adversarial Images
- [**64**Star][2y] [JS] [switchbrew/nx-hbexploit300](https://github.com/switchbrew/nx-hbexploit300) Homebrew exploit for 3.0.0
+- [**64**Star][10m] [sukaralin/php_code_audit_project](https://github.com/sukaralin/php_code_audit_project) 该项目用来记录,我用来练手的PHP代码审计项目。
- [**64**Star][1y] [Haskell] [snoyberg/markdown](https://github.com/snoyberg/markdown) Convert Markdown to HTML, with XSS protection
- [**64**Star][1m] [JS] [snail007/anytunnel](https://github.com/snail007/anytunnel) 内网穿透,内网穿透代理服务器,商用内网穿透代理系统,内网穿透平台,内网穿透多用户会员系统。
-- [**64**Star][2y] [JS] [smarttang/sosrp](https://github.com/smarttang/sosrp) SOSRP Security 安全平台
+- [**64**Star][8m] [Go] [smithclay/faassh](https://github.com/smithclay/faassh) simple go SSH server with reverse tunneling designed for running in cloud functions like AWS lambda
- [**64**Star][1y] [Py] [skelsec/pykerberoast](https://github.com/skelsec/pykerberoast) Implementing Kerberoast attack fully in python
- [**64**Star][8m] [JS] [sindresorhus/p-debounce](https://github.com/sindresorhus/p-debounce) Debounce promise-returning & async functions
- [**64**Star][2y] [C] [siguza/hsp4](https://github.com/siguza/hsp4) macOS kext for host_special_port(4) patch
- [**64**Star][4m] [sh1n0g1/shinobot](https://github.com/sh1n0g1/shinobot) RAT / Botnet Simulator for pentest / education
- [**64**Star][1y] [JS] [serain/netmap.js](https://github.com/serain/netmap.js) Fast browser-based network discovery module
-- [**64**Star][15d] [C] [seanheelan/heaplayout](https://github.com/seanheelan/heaplayout) Source code for paper 'Automatic Heap Layout Manipulation for Exploitation'
+- [**64**Star][3y] [secdr/sec-ml](https://github.com/secdr/sec-ml) security machine learning
- [**64**Star][1y] [Py] [scy-phy/minicps](https://github.com/scy-phy/minicps) MiniCPS: a framework for Cyber-Physical Systems real-time simulation, built on top of mininet
-- [**64**Star][10m] [Zeek] [salesforce/bro-sysmon](https://github.com/salesforce/bro-sysmon) How to Zeek Sysmon Logs!
+- [**64**Star][11m] [Zeek] [salesforce/bro-sysmon](https://github.com/salesforce/bro-sysmon) How to Zeek Sysmon Logs!
+- [**64**Star][9m] [PS] [sadprocessor/cypherdog](https://github.com/sadprocessor/cypherdog) PoSh BloodHound Dog Whisperer
- [**64**Star][3y] [C++] [ronangaillard/logitech-mouse](https://github.com/ronangaillard/logitech-mouse) Use an arduino as a logitech wireless
-- [**64**Star][5m] [PowerShell] [rgl/windows-domain-controller-vagrant](https://github.com/rgl/windows-domain-controller-vagrant) Example Windows Domain Controller
-- [**64**Star][4m] [Shell] [rfxn/advanced-policy-firewall](https://github.com/rfxn/advanced-policy-firewall) advanced-policy-firewall:高级版策略防火墙
+- [**64**Star][5m] [PS] [rgl/windows-domain-controller-vagrant](https://github.com/rgl/windows-domain-controller-vagrant) Example Windows Domain Controller
- [**64**Star][1y] [Py] [ralphje/imagemounter](https://github.com/ralphje/imagemounter) Command line utility and Python package to ease the (un)mounting of forensic disk images
-- [**64**Star][29d] [C] [qwaz/solved-hacking-problem](https://github.com/qwaz/solved-hacking-problem)
+- [**64**Star][1m] [C] [qwaz/solved-hacking-problem](https://github.com/qwaz/solved-hacking-problem)
- [**64**Star][3y] [C] [quokkalight/rkduck](https://github.com/quokkalight/rkduck) Linux v4.x.x Rootkit
- [**64**Star][6y] [C] [programa-stic/ropc-llvm](https://github.com/programa-stic/ropc-llvm) ropc-llvm is a PoC of a Turing complete ROP compiler with support for a subset of LLVM IR. It is an extension of ropc.
- [**64**Star][1y] [Lua] [pr4jwal/quick-scripts](https://github.com/pr4jwal/quick-scripts) A collection of my quick and dirty scripts for vulnerability POC and detections
-- [**64**Star][6m] [Java] [portswigger/command-injection-attacker](https://github.com/portswigger/command-injection-attacker) SHELLING - a comprehensive OS command injection payload generator
- [**64**Star][7m] [pinkp4nther/aws-testing-notes](https://github.com/pinkp4nther/aws-testing-notes) Notes as I learn basic AWS penetration testing
-- [**64**Star][12d] [Py] [patois/mrspicky](https://github.com/patois/mrspicky) An IDAPython decompiler script that helps auditing calls to the memcpy() and memmove() functions.
-- [**64**Star][10m] [YARA] [nheijmans/malzoo](https://github.com/nheijmans/malzoo) Mass static malware analysis tool
-- [**64**Star][3y] [Lua] [netxfly/nginx_lua_security](https://github.com/netxfly/nginx_lua_security) 浅谈nginx+lua在安全中的应用
+- [**64**Star][9m] [C] [phonegapx/airplay](https://github.com/phonegapx/airplay) 关于AirPlay的一些逆向研究成果。
+- [**64**Star][9d] [Py] [phackt/pentest](https://github.com/phackt/pentest) Custom tools and projects about security
+- [**64**Star][2m] [HTML] [patrowl/patrowldocs](https://github.com/patrowl/patrowldocs) PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform
+- [**64**Star][19d] [Py] [patois/genmc](https://github.com/patois/genmc) Display Hex-Rays Microcode
+- [**64**Star][20d] [Py] [openitsystem/itops](https://github.com/openitsystem/itops) 基于Python + Django的AD\Exchange管理系统
+- [**64**Star][5y] [PHP] [nyx0/tinba](https://github.com/nyx0/tinba) Tinba Banking Trojan
- [**64**Star][4m] [C++] [nccgroup/xendbg](https://github.com/nccgroup/xendbg) A feature-complete reference implementation of a modern Xen VMI debugger.
- [**64**Star][1y] [Py] [mwleeds/android-malware-analysis](https://github.com/mwleeds/android-malware-analysis) This project seeks to apply machine learning algorithms to Android malware classification.
- [**64**Star][1y] [C] [mthbernardes/qmkhuehuebr](https://github.com/mthbernardes/qmkhuehuebr) Trying to hack into keyboards
-- [**64**Star][8d] [TSQL] [mitchellkrogza/the-big-list-of-hacked-malware-web-sites](https://github.com/mitchellkrogza/the-big-list-of-hacked-malware-web-sites) This repository contains a list of all web sites I come across that are either hacked with or purposefully hosting malware, ransomware, viruses or trojans.
- [**64**Star][7m] [mitchellkrogza/fail2ban-blacklist-jail-for-repeat-offenders-with-perma-extended-banning](https://github.com/mitchellkrogza/fail2ban-blacklist-jail-for-repeat-offenders-with-perma-extended-banning) A customised jail with action and filter file for Fail2Ban. This jail is based on the recidive jail but makes use of a simple text file to enable extended and permanent bans.
- [**64**Star][3y] [Py] [milesrichardson/docker-nfqueue-scapy](https://github.com/milesrichardson/docker-nfqueue-scapy) Docker容器,使用python脚本在netfilter队列中监听数据包,并使用scapy操作数据包。
- [**64**Star][3m] [Shell] [mdrights/liveslak](https://github.com/mdrights/liveslak) 中文化的隐私加强 GNU/Linux 系统 - Forked from Alien Bob's powerful building script for Slackware Live.
- [**64**Star][11m] [Pascal] [mahdisafsafi/univdisasm](https://github.com/mahdisafsafi/univdisasm) x86 Disassembler and Analyzer
+- [**64**Star][1y] [Py] [kasperskylab/vbscriptinternals](https://github.com/kasperskylab/vbscriptinternals) Scripts for disassembling VBScript p-code in the memory to aid in exploits analysis
- [**64**Star][7m] [Py] [k4yt3x/scutum](https://github.com/k4yt3x/scutum) Linux Automatic ARP (TCP / UDP / ICMP) Firewall
+- [**64**Star][1y] [C] [joswr1ght/cowpatty](https://github.com/joswr1ght/cowpatty) WPA2-PSK Cracking
+- [**64**Star][7m] [ObjC] [javerous/torchat-mac](https://github.com/javerous/torchat-mac) macOS native TorChat client
- [**64**Star][11m] [C++] [jacksonvd/pwnedpasswordsdll](https://github.com/jacksonvd/pwnedpasswordsdll) Open source solution to check prospective AD passwords against previously breached passwords
- [**64**Star][4m] [Py] [itskindred/redviper](https://github.com/itskindred/redviper) redViper is a proof of concept Command & Control framework that utilizes Reddit for communications.
-- [**64**Star][5m] [Py] [integeruser/on-pwning](https://github.com/integeruser/on-pwning) My solutions to some CTF challenges and a list of interesting resources about pwning stuff
- [**64**Star][6y] [Java] [ibrahimbalic/androidrat](https://github.com/ibrahimbalic/androidrat) Android RAT
+- [**64**Star][6y] [C] [hiikezoe/android_run_root_shell](https://github.com/hiikezoe/android_run_root_shell)
- [**64**Star][2m] [Py] [hamz-a/jeb2frida](https://github.com/hamz-a/jeb2frida) Automated Frida hook generation with JEB
- [**64**Star][4y] [Py] [halit/isip](https://github.com/halit/isip) Interactive sip toolkit for packet manipulations, sniffing, man in the middle attacks, fuzzing, simulating of dos attacks.
- [**64**Star][4y] [PHP] [googleinurl/routerhunterbr](https://github.com/googleinurl/routerhunterbr) TOOL - Unauthenticated Remote DNS , Scanner ranger IP.
- [**64**Star][8y] [C] [gdbinit/pydbg64](https://github.com/gdbinit/pydbg64) PyDBG64 - OS X PyDbg with 64 bits support
+- [**64**Star][11m] [Py] [fnmsd/chunkedhttpadapter](https://github.com/fnmsd/chunkedhttpadapter) 参考《利用分块传输吊打所有WAF》修改的requests的Adapter
+- [**64**Star][2m] [Java] [flankerhqd/bindump4j](https://github.com/flankerhqd/bindump4j) A portable utility to locate android binder service
- [**64**Star][5y] [Py] [falcon-lnhg/mwebfp](https://github.com/falcon-lnhg/mwebfp) LNHG - Mass Web Fingerprinter
-- [**64**Star][5m] [JS] [exposejs/expose](https://github.com/exposejs/expose) A Dynamic Symbolic Execution (DSE) engine for JavaScript
+- [**64**Star][15d] [Go] [evilsocket/sum](https://github.com/evilsocket/sum) A specialized database server for linear algebra and machine learning.
- [**64**Star][3y] [Py] [evilsocket/fang](https://github.com/evilsocket/fang) A multi service threaded MD5 cracker
-- [**64**Star][2m] [HTML] [deadlyelder/tools-for-cryptanalysis](https://github.com/deadlyelder/tools-for-cryptanalysis) A repository that aims to provide tools for cryptography and cryptanalysis
+- [**64**Star][9m] [FreeMarker] [dvdandroid/xposedmoduletemplate](https://github.com/dvdandroid/xposedmoduletemplate) Easily create a Xposed Module with Android Studio
+- [**64**Star][8m] [Go] [dsnezhkov/sshorty](https://github.com/dsnezhkov/sshorty) A progressive, customizable armored SSH tunnel implant for Linux and MacOS systems
- [**64**Star][2y] [Py] [darkquasar/wmi_persistence](https://github.com/darkquasar/wmi_persistence) WMI_Persistence:Python脚本,直接解析 OBJECTS.DATA 文件(无需访问用户WMI 名称空间)查找 WMI persistence
-- [**64**Star][13d] [Py] [daniellerch/aletheia](https://github.com/daniellerch/aletheia) Image steganalysis using state-of-the-art machine learning techniques
+- [**64**Star][15d] [Py] [daniellerch/aletheia](https://github.com/daniellerch/aletheia) Image steganalysis using state-of-the-art machine learning techniques
- [**64**Star][3y] [Shell] [da667/667s_shitlist](https://github.com/da667/667s_shitlist) Hi kids, do you like cyber violence? Wanna see me destroy evil in the blink of an eyelid?
-- [**64**Star][3m] [Py] [d3vzer0/reternal-quickstart](https://github.com/d3vzer0/reternal-quickstart) Repo containing docker-compose files and setup scripts without having to clone the individual reternal components
- [**64**Star][3y] [C] [coolervoid/payloadmask](https://github.com/coolervoid/payloadmask) Web Payload list editor to use techniques to try bypass web application firewall - version 0.2
-- [**64**Star][6m] [Assembly] [cdisselkoen/pitchfork](https://github.com/cdisselkoen/pitchfork) Detecting Spectre vulnerabilities using symbolic execution, built on angr (github.com/angr/angr)
+- [**64**Star][7m] [Assembly] [cdisselkoen/pitchfork](https://github.com/cdisselkoen/pitchfork) Detecting Spectre vulnerabilities using symbolic execution, built on angr (github.com/angr/angr)
+- [**64**Star][1y] [Java] [c0ny1/httpheadmodifer](https://github.com/c0ny1/httpheadmodifer) 一款快速修改HTTP数据包头的Burp Suite插件
- [**64**Star][7y] [C] [bskari/sqlassie](https://github.com/bskari/sqlassie) database firewall
-- [**64**Star][15d] [PHP] [bediger4000/php-malware-analysis](https://github.com/bediger4000/php-malware-analysis) Deobfuscation and analysis of PHP malware captured by a WordPress honey pot
-- [**64**Star][4y] [C] [basil00/pseudonode](https://github.com/basil00/pseudonode) PseudoNode - A full node emulator.
+- [**64**Star][7d] [PHP] [bediger4000/php-malware-analysis](https://github.com/bediger4000/php-malware-analysis) Deobfuscation and analysis of PHP malware captured by a WordPress honey pot
+- [**64**Star][5d] [Java] [beardypig/ghidra-emotionengine](https://github.com/beardypig/ghidra-emotionengine) Ghidra Processor for the Play Station 2's Emotion Engine MIPS based CPU
- [**64**Star][5y] [Go] [arlolra/meek](https://github.com/arlolra/meek)
-- [**64**Star][1m] [Shell] [angr/angr-dev](https://github.com/angr/angr-dev) Some helper scripts to set up an environment for angr development.
+- [**64**Star][3m] [Java] [aress31/swurg](https://github.com/aress31/swurg) Parse OpenAPI documents into Burp Suite for automating OpenAPI-based APIs security assessments (approved by PortSwigger for inclusion in their official BApp Store).
+- [**64**Star][15d] [Py] [anon-exploiter/suid3num](https://github.com/anon-exploiter/suid3num) A standalone python script which utilizes python's built-in modules to enumerate SUID binaries, separate default binaries from custom binaries, cross-match those with bins in GTFO Bin's repository & auto-exploit those, all with colors! ( ͡~ ͜ʖ ͡°)
+- [**64**Star][5d] [Shell] [angr/angr-dev](https://github.com/angr/angr-dev) Some helper scripts to set up an environment for angr development.
- [**64**Star][6y] [Py] [andrew-morris/stupid_malware](https://github.com/andrew-morris/stupid_malware) Python malware for pentesters that bypasses most antivirus (signature and heuristics) and IPS using sheer stupidity
-- [**64**Star][2y] [Shell] [adhdproject/buildkit](https://github.com/adhdproject/buildkit)
-- [**63**Star][12d] [bkimminich/it-security-lecture](https://github.com/bkimminich/it-security-lecture) University lecture on "IT Security" as Open Educational Resources material
+- [**64**Star][3y] [Shell] [91yun/uml](https://github.com/91yun/uml)
+- [**64**Star][2y] [Go] [0c34/govwa](https://github.com/0c34/govwa)
+- [**63**Star][4d] [worawit/cve-2019-0708](https://github.com/worawit/cve-2019-0708) CVE-2019-0708 (BlueKeep)
+- [**63**Star][9d] [Py] [meituan-dianping/lyrebird-android](https://github.com/meituan-dianping/lyrebird-android) 本程序是一个Lyrebird的插件,用于支持获取Android设备信息。
+- [**63**Star][2y] [Py] [adamlaurie/sjcam](https://github.com/adamlaurie/sjcam) A python CLI tool for controlling SJCAM WiFi Sports Cameras
- [**63**Star][4y] [C++] [zyantific/remodel](https://github.com/zyantific/remodel) Data and class remodeling library
- [**63**Star][2m] [C] [zzhouhe/pg1903](https://github.com/zzhouhe/pg1903)
- [**63**Star][1m] [Py] [misp/misp-maltego](https://github.com/misp/misp-maltego) Set of Maltego transforms to inferface with a MISP instance and explore the whole MITRE ATT&CK dataset.
-- [**63**Star][21d] [C#] [firebaseextended/unity-solutions](https://github.com/FirebaseExtended/unity-solutions) Use Firebase tools to incorporate common features into your games!
+- [**63**Star][23d] [C#] [firebaseextended/unity-solutions](https://github.com/FirebaseExtended/unity-solutions) Use Firebase tools to incorporate common features into your games!
- [**63**Star][1y] [C] [freescale/u-boot-fslc](https://github.com/Freescale/u-boot-fslc) U-Boot tree to host pending fixes and improvements
- [**63**Star][4m] [LLVM] [lifting-bits/fennec](https://github.com/lifting-bits/fennec) Rewriting functions in compiled binaries using McSema
-- [**63**Star][12d] [Py] [crytic/etheno](https://github.com/crytic/etheno) Simplify Ethereum security analysis and testing
+- [**63**Star][9d] [Py] [crytic/etheno](https://github.com/crytic/etheno) Simplify Ethereum security analysis and testing
+- [**63**Star][2m] [C] [zyantific/zyan-hook-engine](https://github.com/zyantific/zyan-hook-engine) Advanced x86/x86-64 hooking library (WIP).
+- [**63**Star][1y] [Py] [zhongzhi107/raspberry-pi-tutorials](https://github.com/zhongzhi107/raspberry-pi-tutorials) 面向软件工程师的树莓派入门教程
+- [**63**Star][3y] [Ruby] [zed-0xff/ctf](https://github.com/zed-0xff/ctf) some tasks/solutions from CTF challenges
+- [**63**Star][4m] [C] [yuawn/hitcon-badge-2019](https://github.com/yuawn/hitcon-badge-2019) HITCON Badge for HITCON CMT 2019.
- [**63**Star][5m] [Go] [yryz/httpproxy](https://github.com/yryz/httpproxy) 一个轻量级HTTP代理,支持shadowsocks服务,方便命令行、开发环境使用。
- [**63**Star][2y] [Go] [yara-rules/yara-endpoint](https://github.com/yara-rules/yara-endpoint) Yara-Endpoint is a tool useful for incident response as well as anti-malware enpoint base on Yara signatures.
- [**63**Star][3y] [Py] [xorond/sudo-snooper](https://github.com/xorond/sudo-snooper) Python script that acts like the original sudo binary to fool users into entering their passwords
+- [**63**Star][9m] [Py] [xnffdd/proxypool](https://github.com/xnffdd/proxypool) 自建免费IP代理池。
- [**63**Star][1y] [Py] [wazehell/metateta](https://github.com/wazehell/metateta) Metateta Automated Tool For Scanning And Exploiting Network Protocols Using Metasploit
-- [**63**Star][4y] [C++] [waleedassar/antidebug](https://github.com/waleedassar/antidebug) Collection Of Anti-Debugging Tricks
-- [**63**Star][4m] [tiaotiaolong/sec_interview_know_list](https://github.com/tiaotiaolong/sec_interview_know_list) 信息安全方面面试清单
-- [**63**Star][4m] [Visual Basic] [thesph1nx/rt-101](https://github.com/thesph1nx/rt-101) VB.net Remote Administrator Tool (RAT)
-- [**63**Star][3m] [Py] [therook/nsshell](https://github.com/therook/nsshell) A DNS connectback shell executed by strings in payloads.txt
+- [**63**Star][7d] [tiaotiaolong/sec_interview_know_list](https://github.com/tiaotiaolong/sec_interview_know_list) 信息安全方面面试清单
- [**63**Star][1y] [tevora-threat/powerview3-aggressor](https://github.com/tevora-threat/powerview3-aggressor) Cobalt Strike Aggressor script menu for Powerview/SharpView
- [**63**Star][6m] [Py] [sysopfb/malware_decoders](https://github.com/sysopfb/malware_decoders) Static based decoders for malware samples
-- [**63**Star][8m] [Go] [smithclay/faassh](https://github.com/smithclay/faassh) simple go SSH server with reverse tunneling designed for running in cloud functions like AWS lambda
+- [**63**Star][5y] [Py] [sqall01/zwoelf](https://github.com/sqall01/zwoelf) An ELF parsing and manipulation library for Python
- [**63**Star][2y] [Py] [sethsec/pycodeinjection](https://github.com/sethsec/pycodeinjection) Automated Python Code Injection Tool
- [**63**Star][3y] [C] [seemoo-lab/bcm-public](https://github.com/seemoo-lab/bcm-public) DEPRECATED: Monitor Mode and Firmware patching framework for the Google Nexus 5, development moved to:
-- [**63**Star][9m] [PowerShell] [sadprocessor/cypherdog](https://github.com/sadprocessor/cypherdog) PoSh BloodHound Dog Whisperer
-- [**63**Star][2y] [Py] [ryanohoro/csbruter](https://github.com/ryanohoro/csbruter) Cobalt Strike team server password brute force tool
- [**63**Star][1y] [C#] [rvrsh3ll/sharpfruit](https://github.com/rvrsh3ll/sharpfruit) A C# penetration testing tool to discover low-haning web fruit via web requests.
- [**63**Star][2y] [C] [plashchynski/viewssld](https://github.com/plashchynski/viewssld) viewssld is a free, open source, non-terminating SSLv2/SSLv3/TLS traffic decryption daemon for Snort, and other Network Intrusion Detection Systems (IDS).
+- [**63**Star][4m] [Java] [pibigstar/parsevip](https://github.com/pibigstar/parsevip) 解析VIP资源,解析出酷狗、QQ音乐、腾讯视频、人人视频的真实地址
- [**63**Star][5y] [Py] [paulsec/spipscan](https://github.com/paulsec/spipscan) SPIP (CMS) Scanner for penetration testing purpose written in Python
- [**63**Star][2y] [Py] [paulsec/metasearch-public](https://github.com/paulsec/metasearch-public) Stop searching for sample hashes on 10 different sites.
-- [**63**Star][17d] [Py] [patois/genmc](https://github.com/patois/genmc) Display Hex-Rays Microcode
- [**63**Star][4y] [Java] [palmerc/securewebsockets](https://github.com/palmerc/securewebsockets) Add SSL support to the Autobahn WebSocket library
- [**63**Star][5m] [PHP] [owasp/owaspwebgoatphp](https://github.com/owasp/owaspwebgoatphp) A deliberately vulnerable web application for learning web application security.
- [**63**Star][6y] [JS] [owasp/appsec-browser-bundle](https://github.com/owasp/appsec-browser-bundle) The OWASP AppSec Browser Bundle is an open source Linux based penetration testing browser bundle built over Mozilla Firefox. It comes pre-configured with security tools for spidering, advanced web searching, fingerprinting, anonymous browsing, web server scanning, fuzzing, report generating and more.
- [**63**Star][2y] [ophirharpaz/patched-minesweeper](https://github.com/ophirharpaz/patched-minesweeper) I hacked Minesweeper into putting flags on all the mined squares when starting. Yoohoo.
- [**63**Star][5y] [CSS] [opensecurityresearch/fsexploitme](https://github.com/opensecurityresearch/fsexploitme) Purposely vulnerable ActiveX Control to teach about exploitation in a browser-based environment.
-- [**63**Star][18d] [Py] [openitsystem/itops](https://github.com/openitsystem/itops) 基于Python + Django的AD\Exchange管理系统
-- [**63**Star][5y] [PHP] [nyx0/tinba](https://github.com/nyx0/tinba) Tinba Banking Trojan
+- [**63**Star][5m] [Shell] [nodesocket/cryptr](https://github.com/nodesocket/cryptr) A simple shell utility for encrypting and decrypting files using OpenSSL.
- [**63**Star][5y] [C] [nihilus/idastealth](https://github.com/nihilus/idastealth)
- [**63**Star][1y] [Py] [nicksanzotta/wifisuite](https://github.com/nicksanzotta/wifisuite) Enterprise WPA Wireless Tool Suite
+- [**63**Star][3y] [Lua] [netxfly/nginx_lua_security](https://github.com/netxfly/nginx_lua_security) 浅谈nginx+lua在安全中的应用
- [**63**Star][4m] [Java] [nccgroup/berserko](https://github.com/nccgroup/berserko) Burp Suite extension to perform Kerberos authentication
- [**63**Star][3y] [C] [mrrraou/waithax](https://github.com/mrrraou/waithax) An implementation of the waithax / slowhax 3DS Kernel11 exploit.
- [**63**Star][2m] [Ruby] [mephux/ruby-nessus](https://github.com/mephux/ruby-nessus) Ruby-Nessus is a ruby interface for the popular Nessus vulnerability scanner.
-- [**63**Star][6m] [Py] [marcobellaccini/pyaescrypt](https://github.com/marcobellaccini/pyaescrypt) A Python 3 module and script that uses AES256-CBC to encrypt/decrypt files and streams in AES Crypt file format (version 2).
+- [**63**Star][21d] [C] [maldiohead/cve-2019-6207](https://github.com/maldiohead/cve-2019-6207) xnu kernel heap info leak
+- [**63**Star][4y] [C] [m-pays/m-cpuminer-v2](https://github.com/m-pays/m-cpuminer-v2) Latest miner (m-minerd)
- [**63**Star][3y] [JS] [luin/serialize](https://github.com/luin/serialize) Serialize an object including it's function into a JSON.
+- [**63**Star][12m] [PS] [luciusbono/packer-windows10](https://github.com/luciusbono/packer-windows10) A Packer build for Windows 10
+- [**63**Star][5m] [Py] [loolzec/asu](https://github.com/loolzec/asu) facebook hacking toolkit
- [**63**Star][11m] [Ruby] [livingsocial/bundler-patch](https://github.com/livingsocial/bundler-patch) Update your gems conservatively to deal with vulnerable gems or just get more current.
- [**63**Star][4y] [MATLAB] [konstantinberlin/malware-windows-audit-log-detection](https://github.com/konstantinberlin/malware-windows-audit-log-detection) Detection of malware using dynamic behavior and Windows audit logs
-- [**63**Star][1y] [Py] [kasperskylab/vbscriptinternals](https://github.com/kasperskylab/vbscriptinternals) Scripts for disassembling VBScript p-code in the memory to aid in exploits analysis
- [**63**Star][6m] [Py] [jvns/zine-formatter](https://github.com/jvns/zine-formatter) Small Python script for formatting zines into booklets
-- [**63**Star][1y] [C] [joswr1ght/cowpatty](https://github.com/joswr1ght/cowpatty) WPA2-PSK Cracking
- [**63**Star][2y] [josephlhall/dc25-votingvillage-report](https://github.com/josephlhall/dc25-votingvillage-report) A report to synthesize findings from the Defcon 25 Voting Machine Hacking Village
- [**63**Star][9y] [C] [jonoberheide/ksymhunter](https://github.com/jonoberheide/ksymhunter) Routines for hunting down kernel symbols.
+- [**63**Star][2y] [Py] [iotsec/z3sec](https://github.com/iotsec/z3sec) Penetration testing framework for ZigBee security research.
- [**63**Star][1y] [C] [ioactive/fuzzndis](https://github.com/ioactive/fuzzndis) A Fuzzer for Windows NDIS Drivers OID Handlers
- [**63**Star][1y] [C] [inndy/ctf-writeup](https://github.com/inndy/ctf-writeup) My CTF write-up collection
- [**63**Star][7y] [C++] [hurley25/sniffer](https://github.com/hurley25/sniffer) 一个跨平台的网络数据嗅探&抓包程序,基于Qt 4.x 以及 libpcap 库(Linux下)和 Winpcap库(Windows 下)。
- [**63**Star][11m] [hannob/apache-uaf](https://github.com/hannob/apache-uaf) Apache use after free bug infos / ASAN stack traces
- [**63**Star][1y] [Py] [gr4ym4ntx/attackintel](https://github.com/gr4ym4ntx/attackintel) A python script to query the MITRE ATT&CK API for tactics, techniques, mitigations, & detection methods for specific threat groups.
-- [**63**Star][27d] [C] [gpg/libgcrypt](https://github.com/gpg/libgcrypt) The GNU crypto library
- [**63**Star][2y] [C] [georgeargyros/snowflake](https://github.com/georgeargyros/snowflake) Snowflake is a tool for exploiting randomness vulnerabilities by seed recovery attacks targetting the rand() and mt_rand() generators in PHP applications.
+- [**63**Star][3m] [JS] [gbaptista/luminous](https://github.com/gbaptista/luminous) Identify, analyze and block code execution and event collection through JavaScript in your browser with code interception.
- [**63**Star][3y] [funkmyster/awesome-cloud-security](https://github.com/funkmyster/awesome-cloud-security) Curated list of awesome cloud security blogs, podcasts, standards, projects, and examples.
- [**63**Star][1y] [Shell] [floyd-fuh/crass](https://github.com/floyd-fuh/crass) Code Review Audit Script Scanner
-- [**63**Star][2m] [Java] [flankerhqd/bindump4j](https://github.com/flankerhqd/bindump4j) A portable utility to locate android binder service
- [**63**Star][2y] [Shell] [faf0/thinkpad-scripts](https://github.com/faf0/thinkpad-scripts) Scripts for fixing TrackPointers and touchpads under Ubuntu 14.04 and 16.04 or similar distributions on Lenovo ThinkPads (tested on X1 Carbon 2nd Generation and reported to work on X240)
-- [**63**Star][13d] [Go] [evilsocket/sum](https://github.com/evilsocket/sum) A specialized database server for linear algebra and machine learning.
- [**63**Star][2y] [Py] [esser420/eviltwinframework](https://github.com/esser420/eviltwinframework) A framework for pentesters that facilitates evil twin attacks as well as exploiting other wifi vulnerabilities
- [**63**Star][8m] [emadshanab/facebook-bug-bounty-writeups](https://github.com/emadshanab/facebook-bug-bounty-writeups) Facebook Bug Bounties
-- [**63**Star][9m] [FreeMarker] [dvdandroid/xposedmoduletemplate](https://github.com/dvdandroid/xposedmoduletemplate) Easily create a Xposed Module with Android Studio
-- [**63**Star][8m] [Go] [dsnezhkov/sshorty](https://github.com/dsnezhkov/sshorty) A progressive, customizable armored SSH tunnel implant for Linux and MacOS systems
- [**63**Star][3m] [C] [dorneanu/ixkeylog](https://github.com/dorneanu/ixkeylog) *NIX X11 Keylogger
- [**63**Star][1y] [C] [dodola/fbhookfork](https://github.com/dodola/fbhookfork) 从 fb 的 profilo 项目里提取出来的hook 库,自己用
- [**63**Star][1y] [Py] [crescentvenus/walb](https://github.com/crescentvenus/walb) WALB is raspberry Pi and HackRF based Wireless Attack LaunchBox.
- [**63**Star][2y] [Java] [codelion/gramtest](https://github.com/codelion/gramtest) GramTest: A tool for Grammar based Test case generation
+- [**63**Star][3y] [Java] [chhsiao90/nitmproxy](https://github.com/chhsiao90/nitmproxy) Proxy server based on netty
- [**63**Star][2m] [C] [carmaa/interrogate](https://github.com/carmaa/interrogate) Interrogate is a proof-of-concept tool for identification of cryptographic keys in binary material (regardless of target operating system), first and foremost for memory dump analysis and forensic usage.
-- [**63**Star][1y] [Java] [c0ny1/httpheadmodifer](https://github.com/c0ny1/httpheadmodifer) 一款快速修改HTTP数据包头的Burp Suite插件
- [**63**Star][5y] [Py] [c01db33f/concolica](https://github.com/c01db33f/concolica) Python concolic execution framework for program analysis
- [**63**Star][3y] [C++] [breakingmalwareresearch/eleven](https://github.com/breakingmalwareresearch/eleven) Elevation by environment variable expansion
-- [**63**Star][17d] [Visual Basic] [blackhacker511/blackworm](https://github.com/blackhacker511/blackworm) Black Worm Offical Repo
+- [**63**Star][5m] [Go] [botherder/snoopdigg](https://github.com/botherder/snoopdigg) Simple utility to ease the process of collecting evidence to find infections
- [**63**Star][1y] [Shell] [bcapptain/dockernymous](https://github.com/bcapptain/dockernymous) A script used to create a whonix like gateway/workstation environment with docker containers.
- [**63**Star][3m] [CMake] [argilo/gr-elster](https://github.com/argilo/gr-elster) A GNU Radio block that decodes packets transmitted by Elster R2S smart meters
-- [**63**Star][3m] [Java] [aress31/swurg](https://github.com/aress31/swurg) Parse OpenAPI documents into Burp Suite for automating OpenAPI-based APIs security assessments (approved by PortSwigger for inclusion in their official BApp Store).
- [**63**Star][2m] [Py] [archlinux/arch-security-tracker](https://github.com/archlinux/arch-security-tracker) Arch Linux Security Tracker
-- [**63**Star][2y] [Objective-C] [antoinet/valora](https://github.com/antoinet/valora) valora:利用随机源 MAC 地址和随机 SSID 生成 802.11 探测请求流,以迷惑 WiFi 追踪系统
-- [**63**Star][18d] [Py] [aliasrobotics/aztarna](https://github.com/aliasrobotics/aztarna) aztarna, a footprinting tool for robots.
+- [**63**Star][2y] [ObjC] [antoinet/valora](https://github.com/antoinet/valora) valora:利用随机源 MAC 地址和随机 SSID 生成 802.11 探测请求流,以迷惑 WiFi 追踪系统
+- [**63**Star][20d] [Py] [aliasrobotics/aztarna](https://github.com/aliasrobotics/aztarna) aztarna, a footprinting tool for robots.
- [**63**Star][3m] [C] [adulau/ssldump](https://github.com/adulau/ssldump) (unofficial repository) of ssldump - + a myriad of patches (from Debian and other distributions + contribution (via PR))
- [**63**Star][2y] [C++] [abenkhadra/spedi](https://github.com/abenkhadra/spedi) Speculative disassembly, CFG recovery, and call-graph recovery from stripped binaries.
- [**63**Star][2y] [Perl] [0x90/vpn-arsenal](https://github.com/0x90/vpn-arsenal) VPN pentest tools and scripts
-- [**62**Star][17d] [C] [taviso/dbusmap](https://github.com/taviso/dbusmap) This is a simple utility for enumerating D-Bus endpoints, an nmap for D-Bus.
+- [**62**Star][15d] [Go] [harleo/asnip](https://github.com/harleo/asnip) ASN target organization IP range attack surface mapping for reconnaissance, fast and lightweight
+- [**62**Star][9d] [ga1ois/bluehat-2019-seattle](https://github.com/ga1ois/bluehat-2019-seattle) All the materials in BlueHat 2019 Seattle will be realeased here.
+- [**62**Star][19d] [payloadbox/xxe-injection-payload-list](https://github.com/payloadbox/xxe-injection-payload-list)
+- [**62**Star][29d] [Py] [draios/sysdigcloud-kubernetes](https://github.com/draios/sysdigcloud-kubernetes) Sysdig Cloud on Kubernetes
+- [**62**Star][19d] [C] [taviso/dbusmap](https://github.com/taviso/dbusmap) This is a simple utility for enumerating D-Bus endpoints, an nmap for D-Bus.
+- [**62**Star][9d] [C++] [intel/ad-rss-lib](https://github.com/intel/ad-rss-lib) Library implementing the Responsibility Sensitive Safety model (RSS) for Autonomous Vehicles
- [**62**Star][4y] [Py] [tuter/monmob](https://github.com/tuter/monmob)
- [**62**Star][2y] [Py] [vysecurity/maiint](https://github.com/vysecurity/MaiInt) OSINT Organization Employee Profiling Tool for MaiMai
- [**62**Star][3y] [shmilylty/sec-box](https://github.com/shmilylty/Sec-Box) information security Tools Box (信息安全工具集合)
@@ -10754,9 +11421,7 @@ networking routines
- [**62**Star][2m] [C] [0e85dc6eaf/ctf-writeups](https://github.com/0e85dc6eaf/CTF-Writeups) Writeups/solutions
- [**62**Star][1y] [Py] [avicoder/spoodle](https://github.com/avicoder/spoodle) spoodle:大规模子域名及 poodle漏洞扫描器
- [**62**Star][4m] [Py] [crytic/pyevmasm](https://github.com/crytic/pyevmasm) Ethereum Virtual Machine (EVM) disassembler and assembler
-- [**62**Star][2m] [C] [zyantific/zyan-hook-engine](https://github.com/zyantific/zyan-hook-engine) Advanced x86/x86-64 hooking library (WIP).
- [**62**Star][9m] [C] [zigzagsecurity/survival-guide-radare2](https://github.com/zigzagsecurity/survival-guide-radare2) Basic tutorials for reverse engineer with radare2
-- [**62**Star][3y] [Ruby] [zed-0xff/ctf](https://github.com/zed-0xff/ctf) some tasks/solutions from CTF challenges
- [**62**Star][2y] [Shell] [yukinoshita47/pentest-tools-auto-installer](https://github.com/yukinoshita47/pentest-tools-auto-installer) Tool sederhana buat install tool-tool pentest dan forensic bagi pengguna linux yang jenis nya non-pentest OS
- [**62**Star][8y] [Java] [yifanlu/psxperia](https://github.com/yifanlu/psxperia) This tool will take a PSX image that you legally own and convert it to be playable on the Xperia Play with the emulator extracted from the packaged game "Crash Bandicoot."
- [**62**Star][5y] [Py] [xipiter/idiotic](https://github.com/xipiter/idiotic) Simple ways to 0wn simple IOT devices
@@ -10766,155 +11431,169 @@ networking routines
- [**62**Star][2y] [C++] [tyranid/zeronights2017](https://github.com/tyranid/zeronights2017) Some sample code from my Zero Nights 2017 presentation.
- [**62**Star][1y] [tyranid/windows-attacksurface-workshop](https://github.com/tyranid/windows-attacksurface-workshop) Workshop material for a Windows Attack Surface Analysis Workshop
- [**62**Star][4y] [Py] [tony1016/burplogfilter](https://github.com/tony1016/burplogfilter) A python3 program to filter Burp Suite log file.
-- [**62**Star][7m] [PowerShell] [swizzlez/invoke-enumsecuritytools](https://github.com/swizzlez/invoke-enumsecuritytools)
+- [**62**Star][2y] [Go] [tengzhangchao/portscan](https://github.com/tengzhangchao/portscan) 端口扫描器
+- [**62**Star][8m] [PS] [swizzlez/invoke-enumsecuritytools](https://github.com/swizzlez/invoke-enumsecuritytools)
+- [**62**Star][1y] [C] [shuax/locateip](https://github.com/shuax/locateip) 高效的IP数据库解析库
- [**62**Star][2y] [Lua] [scipag/httprecon-nse](https://github.com/scipag/httprecon-nse) Advanced web server fingerprinting for Nmap
- [**62**Star][1m] [HTML] [santandersecurityresearch/asvs](https://github.com/santandersecurityresearch/asvs) A simple web app that helps developers understand the ASVS requirements.
- [**62**Star][4y] [Py] [rich5/harness](https://github.com/rich5/harness) Interactive remote PowerShell Payload
- [**62**Star][5m] [Ruby] [rhtconsulting/cfme-rhconsulting-scripts](https://github.com/rhtconsulting/cfme-rhconsulting-scripts)
-- [**62**Star][6m] [PowerShell] [psconfeu/2019](https://github.com/psconfeu/2019) Code, Materials and Slides for psconf.eu 2019
+- [**62**Star][6m] [PS] [psconfeu/2019](https://github.com/psconfeu/2019) Code, Materials and Slides for psconf.eu 2019
- [**62**Star][4y] [Py] [poorbillionaire/windows-prefetch-parser](https://github.com/poorbillionaire/windows-prefetch-parser) Parse Windows Prefetch files: Supports XP - Windows 10 Prefetch files
- [**62**Star][2y] [PHP] [pklink/ppma](https://github.com/pklink/ppma) [INACTIVE] PHP Password Manager
-- [**62**Star][4m] [Py] [pinnace/burp-jwt-fuzzhelper-extension](https://github.com/pinnace/burp-jwt-fuzzhelper-extension) burp-jwt-fuzzhelper-extension: Burp扩展, 用于Fuzzing JWT
+- [**62**Star][5m] [Py] [pinnace/burp-jwt-fuzzhelper-extension](https://github.com/pinnace/burp-jwt-fuzzhelper-extension) burp-jwt-fuzzhelper-extension: Burp扩展, 用于Fuzzing JWT
+- [**62**Star][1y] [C++] [paranoidninja/scriptdotsh-malwaredevelopment](https://github.com/paranoidninja/scriptdotsh-malwaredevelopment) This repo will contain code snippets for blogs: Malware on Steroids written by me at
- [**62**Star][2y] [Go] [openprovider/whoisd](https://github.com/openprovider/whoisd) Openprovider WHOIS server/daemon
-- [**62**Star][4m] [TypeScript] [nowsecure/airspy](https://github.com/nowsecure/airspy) AirSpy - Frida-based tool for exploring and tracking the evolution of Apple's AirDrop protocol implementation on i/macOS, from the server's perspective. Released during BH USA 2019 Training
-- [**62**Star][5m] [Shell] [nodesocket/cryptr](https://github.com/nodesocket/cryptr) A simple shell utility for encrypting and decrypting files using OpenSSL.
+- [**62**Star][5y] [Py] [nullhypothesis/scramblesuit](https://github.com/nullhypothesis/scramblesuit) The ScrambleSuit traffic obfuscation protocol.
+- [**62**Star][2y] [C] [nccgroup/cachegrab](https://github.com/nccgroup/cachegrab) 执行和可视化针对软件的由 trace 驱动的缓存攻击(需要启用TrustZone 的 ARMv8 内核)
- [**62**Star][2m] [Go] [moldabekov/virusgotal](https://github.com/moldabekov/virusgotal)
+- [**62**Star][26d] [Dockerfile] [misp/misp-docker](https://github.com/misp/misp-docker) MISP Docker (XME edition)
- [**62**Star][7m] [C] [merlijnwajer/tracy](https://github.com/merlijnwajer/tracy) tracy - a system call tracer and injector. Find us in #tracy on irc.freenode.net
-- [**62**Star][19d] [C] [maldiohead/cve-2019-6207](https://github.com/maldiohead/cve-2019-6207) xnu kernel heap info leak
-- [**62**Star][5m] [Py] [loolzec/asu](https://github.com/loolzec/asu) facebook hacking toolkit
+- [**62**Star][7m] [C] [luoyanbei/testhookzz](https://github.com/luoyanbei/testhookzz) iOS逆向:使用HookZz框架hook游戏“我的战争”,进入上帝模式
- [**62**Star][1y] [Py] [lclevy/unarcrypto](https://github.com/lclevy/unarcrypto) unarcrypto:描述 zip、rar、7zip 使用的加密算法
- [**62**Star][2y] [Py] [lbarman/kali-tools](https://github.com/lbarman/kali-tools) Run Kali tools on all distributions. Offline search, including in package descriptions.
+- [**62**Star][1y] [kutim/docker-security](https://github.com/kutim/docker-security) docker 安全基线规范
- [**62**Star][2m] [Go] [knqyf263/gost](https://github.com/knqyf263/gost) Build a local copy of Security Tracker. Notify via E-mail/Slack if there is an update.
- [**62**Star][1y] [Ruby] [kingsabri/cve-in-ruby](https://github.com/kingsabri/cve-in-ruby) Exploits written & ported to Ruby - no Metasploit
- [**62**Star][1m] [Shell] [joshuamart/autorecon](https://github.com/joshuamart/autorecon) Simple shell script for automated domain recognition with some tools
- [**62**Star][2y] [Go] [johnsonz/go-sni-detector](https://github.com/johnsonz/go-sni-detector) A go application to scan sni ip
+- [**62**Star][8m] [Dockerfile] [john-lin/docker-snort](https://github.com/john-lin/docker-snort) Snort in Docker for Network Functions Virtualization (NFV)
- [**62**Star][5y] [C] [jiayy/lkm-rootkit](https://github.com/jiayy/lkm-rootkit) an lkm rootkit support x86/64,arm,mips
- [**62**Star][5y] [MATLAB] [jiaoxianjun/rtl-sdr-lte](https://github.com/jiaoxianjun/rtl-sdr-lte) Play with LTE signal (especially China TD-LTE) captured by rtl-sdr
- [**62**Star][9m] [Py] [jaksi/awslog](https://github.com/jaksi/awslog) Show the history and changes between configuration versions of AWS resources
-- [**62**Star][2y] [Py] [iotsec/z3sec](https://github.com/iotsec/z3sec) Penetration testing framework for ZigBee security research.
-- [**62**Star][26d] [JS] [hugsy/windbg_js_scripts](https://github.com/hugsy/windbg_js_scripts) Toy scripts for playing with WinDbg JS API
+- [**62**Star][28d] [JS] [hugsy/windbg_js_scripts](https://github.com/hugsy/windbg_js_scripts) Toy scripts for playing with WinDbg JS API
- [**62**Star][3y] [C++] [hexhive/malwash](https://github.com/hexhive/malwash)
- [**62**Star][3y] [Py] [hackinglab/mobilesf](https://github.com/hackinglab/mobilesf) HackingLab定制版Mobile Safe Framework
+- [**62**Star][1y] [Py] [ha3mrx/hacking](https://github.com/ha3mrx/hacking) Ha3Mrx Pentesting and Security Hacking
- [**62**Star][1m] [Shell] [gentoo/libressl](https://github.com/gentoo/libressl) [MIRROR] LibreSSL ebuilds testing repository
- [**62**Star][7y] [C] [gdbinit/osx_boubou](https://github.com/gdbinit/osx_boubou) A PoC Mach-O infector via library injection
+- [**62**Star][7m] [Kotlin] [fs0c131y/samsunglocker](https://github.com/fs0c131y/samsunglocker) Samsung ContainerAgent Vulnerability - Local DoS for Samsung smartphone
- [**62**Star][2y] [Py] [frky/scat](https://github.com/frky/scat) Dynamic analysis of binary programs to retrieve function-related information (arity, type of parameters, coupling).
- [**62**Star][7m] [C++] [fare9/anbu](https://github.com/fare9/anbu) ANBU (Automatic New Binary Unpacker) a tool for me to learn about PIN and about algorithms for generic unpacking.
- [**62**Star][7m] [C++] [explife0011/cve-2019-0803](https://github.com/explife0011/cve-2019-0803) Win32k Elevation of Privilege Poc
-- [**62**Star][5y] [C] [evilsocket/libpe](https://github.com/evilsocket/libpe) A C/C++ library to parse Windows portable executables written with speed and stability in mind.
+- [**62**Star][7m] [Py] [engmaher/baf](https://github.com/engmaher/baf) Blind Attacking Framework
- [**62**Star][1y] [C] [emptymonkey/drinkme](https://github.com/emptymonkey/drinkme) drinkme:从 stdin 读取 ShellCode 并执行。用于部署 ShellCode 之前测试
-- [**62**Star][20d] [drduh/pc-engines-apu-router-guide](https://github.com/drduh/pc-engines-apu-router-guide) Guide to building a Linux or BSD router on the PC Engines APU platform
-- [**62**Star][23d] [Py] [deepdivesec/gitmad](https://github.com/deepdivesec/gitmad) Monitor, Alert, and Discover sensitive info and data leakage on Github.
-- [**62**Star][23d] [JS] [curiousdannii/ifvms.js](https://github.com/curiousdannii/ifvms.js) The Interactive Fiction Virtual Machines Suite - in Javascript
+- [**62**Star][22d] [drduh/pc-engines-apu-router-guide](https://github.com/drduh/pc-engines-apu-router-guide) Guide to building a Linux or BSD router on the PC Engines APU platform
+- [**62**Star][3m] [PHP] [divineomega/laravel-password-exposed-validation-rule](https://github.com/divineomega/laravel-password-exposed-validation-rule)
+- [**62**Star][4m] [Shell] [developerkunal/converto](https://github.com/developerkunal/converto) Installing Kali linux on Vps Server
+- [**62**Star][25d] [Py] [deepdivesec/gitmad](https://github.com/deepdivesec/gitmad) Monitor, Alert, and Discover sensitive info and data leakage on Github.
+- [**62**Star][12m] [C] [darm64/xnu](https://github.com/darm64/xnu) Research into porting the XNU kernel to ARM devices.
+- [**62**Star][25d] [JS] [curiousdannii/ifvms.js](https://github.com/curiousdannii/ifvms.js) The Interactive Fiction Virtual Machines Suite - in Javascript
- [**62**Star][2m] [PHP] [cosasdepuma/securitynotfound](https://github.com/cosasdepuma/securitynotfound)
+- [**62**Star][13d] [C] [cn-uofbasel/ccn-lite](https://github.com/cn-uofbasel/ccn-lite) CCN-lite, a lightweight implementation of the CCNx protocol and its variations
- [**62**Star][11m] [cmatthewbrooks/r2kit](https://github.com/cmatthewbrooks/r2kit) A set of scripts for a radare-based malware code analysis workflow
- [**62**Star][6m] [Py] [catalyst256/myjunk](https://github.com/catalyst256/myjunk) Just random files I've stored here for people to get access to because wordpress doesn't like python.
-- [**62**Star][5m] [Go] [botherder/snoopdigg](https://github.com/botherder/snoopdigg) Simple utility to ease the process of collecting evidence to find infections
-- [**62**Star][28d] [Java] [beardypig/ghidra-emotionengine](https://github.com/beardypig/ghidra-emotionengine) Ghidra Processor for the Play Station 2's Emotion Engine MIPS based CPU
+- [**62**Star][2y] [Java] [calebwhiting/java-asm-obfuscator](https://github.com/calebwhiting/java-asm-obfuscator)
- [**62**Star][2y] [JS] [auth0/webtask-scripts](https://github.com/auth0/webtask-scripts)
- [**62**Star][7m] [Py] [andy10101/apksecurityanalysis](https://github.com/andy10101/apksecurityanalysis) ApkSecurityAnalysis
- [**62**Star][2y] [C++] [agustingianni/retools](https://github.com/agustingianni/retools) retools: a reverse engineering toolkit for normies
- [**62**Star][2y] [AutoIt] [9aylas/shortcut-payload-generator](https://github.com/9aylas/shortcut-payload-generator) AutoIt HackTool, Shortcuts .lnk Payloads Generator As LNK-KISSER.
+- [**62**Star][9m] [Py] [3lackrush/poc-bank](https://github.com/3lackrush/poc-bank) Focus on cybersecurity | collection of PoC and Exploits
- [**62**Star][2y] [3gstudent/bitsadminexec](https://github.com/3gstudent/bitsadminexec) 利用bitsadmin 实现驻留,以及自动运行
- [**62**Star][10m] [Py] [cse-assemblyline/assemblyline](https://bitbucket.org/cse-assemblyline/assemblyline)
-- [**61**Star][5m] [JS] [nccgroup/datajackproxy](https://github.com/nccgroup/datajackproxy) Datajack Proxy allows you to intercept TLS traffic in native x86 applications across platforms
-- [**61**Star][27d] [Py] [draios/sysdigcloud-kubernetes](https://github.com/draios/sysdigcloud-kubernetes) Sysdig Cloud on Kubernetes
- [**61**Star][5y] [Py] [byt3bl33d3r/dhcpshock](https://github.com/byt3bl33d3r/dhcpshock) Spoofs a DHCP server and exploits all clients vulnerable to the 'ShellShock' bug
- [**61**Star][2y] [wtsxdev/fuzzing-resources](https://github.com/wtsxdev/fuzzing-resources) List of fuzzing resources for learning Fuzzing and initial phases of Exploit Development like root cause analysis
-- [**61**Star][8d] [Rust] [io12/pwninit](https://github.com/io12/pwninit) pwninit - automate starting binary exploit challenges
+- [**61**Star][1y] [Py] [dafthack/rdpspray](https://github.com/dafthack/rdpspray) Tool for password spraying RDP
+- [**61**Star][4y] [ObjC] [project-imas/securefoundation](https://github.com/project-imas/securefoundation) Secure components enabling application authentication, secure file storage, app level file-based keychain, and shredding for files on disk
+- [**61**Star][8d] [C] [chroblert/domainweakpasswdcheck](https://github.com/chroblert/domainweakpasswdcheck) 内网安全·域账号弱口令审计
+- [**61**Star][6d] [CSS] [hacker0x01/docs.hackerone.com](https://github.com/hacker0x01/docs.hackerone.com) HackerOne Platform Documentation
- [**61**Star][8m] [Ruby] [gushmazuko/winbypass](https://github.com/gushmazuko/winbypass) Windows UAC Bypass
- [**61**Star][6y] [Java] [gat3way/airpirate](https://github.com/gat3way/airpirate) Android 802.11 pentesting tool
- [**61**Star][6m] [Py] [joshvillbrandt/wireless](https://github.com/joshvillbrandt/wireless) A dead simple, cross-platform Python library to connect to wireless networks.
+- [**61**Star][2m] [Jupyter Notebook] [misinfosecproject/amitt_framework](https://github.com/misinfosecproject/amitt_framework) AMITT (Adversarial Misinformation and Influence Tactics and Techniques) framework for describing disinformation incidents. AMITT is part of misinfosec - work on adapting information security practices to help track and counter misinformation - and is designed as far as possible to fit existing infosec practices and tools.
- [**61**Star][7y] [JS] [enablesecurity/webapp-exploit-payloads](https://github.com/EnableSecurity/Webapp-Exploit-Payloads) a collection of payloads for common webapps
- [**61**Star][12m] [imfht/scansql](https://github.com/imfht/ScanSql) 利用sqlmap和URL去重的爬虫写的一个大规模扫描的脚本
- [**61**Star][2y] [Shell] [m4lv0id/lare](https://github.com/m4lv0id/LARE) [L]ocal [A]uto [R]oot [E]xploiter is a simple bash script that helps you deploy local root exploits from your attacking machine when your victim machine do not have internet connectivity.
- [**61**Star][7m] [PHP] [michyamrane/wso-webshell](https://github.com/mIcHyAmRaNe/wso-webshell)
- [**61**Star][2y] [Py] [feexd/vbg](https://github.com/feexd/vbg) vbg: 使用X11转发的SSH会话远程在客户端执行指令
-- [**61**Star][7m] [Py] [nordicsemiconductor/nrf-sniffer-for-802.15.4](https://github.com/NordicSemiconductor/nRF-Sniffer-for-802.15.4) nRF-based 802.15.4 sniffer (firmware and software)
-- [**61**Star][1y] [PowerShell] [danmcinerney/msfbot](https://github.com/DanMcInerney/msfbot) WORK IN PROGRESS. Waits for MSF session then automatically gets domain admin
+- [**61**Star][1y] [PS] [danmcinerney/msfbot](https://github.com/DanMcInerney/msfbot) WORK IN PROGRESS. Waits for MSF session then automatically gets domain admin
+- [**61**Star][4y] [Shell] [praetorian-code/epictreasure](https://github.com/praetorian-code/epictreasure) radare, angr, pwndbg, binjitsu, ect in a box ready for pwning
- [**61**Star][1y] [C] [zhuowei/qemu](https://github.com/zhuowei/qemu) Patched version of QEMU for exploring XNU arm64 emulation.
-- [**61**Star][27d] [Lua] [yelp/casper](https://github.com/yelp/casper) Yelp's internal caching proxy, powered by Nginx and OpenResty at its core
+- [**61**Star][6m] [JS] [ysocorp/koa2-ratelimit](https://github.com/ysocorp/koa2-ratelimit) Rate-limiting middleware for Koa2 ES6. Use to limit repeated requests to APIs and/or endpoints such as password reset.
+- [**61**Star][29d] [Lua] [yelp/casper](https://github.com/yelp/casper) Yelp's internal caching proxy, powered by Nginx and OpenResty at its core
- [**61**Star][2y] [Py] [yassergersy/sub6](https://github.com/yassergersy/sub6) Web App Scanner
- [**61**Star][8m] [C++] [yajs/nikpeviewer](https://github.com/yajs/nikpeviewer) NikPEViewer a PE viewer source code
- [**61**Star][2y] [Perl] [xlogicx/m2elf](https://github.com/xlogicx/m2elf) Converts Machine Code to x86 (32-bit) Linux executable (auto-wrapping with ELF headers)
-- [**61**Star][2m] [Py] [xfreed0m/smtptester](https://github.com/xfreed0m/smtptester) small python3 tool to check common vulnerabilities in SMTP servers
- [**61**Star][1y] [wjpdeveloper/my-action-github](https://github.com/wjpdeveloper/my-action-github) my-action-github
- [**61**Star][3y] [Lua] [waffles-2/sambacry](https://github.com/waffles-2/sambacry) CVE-2017-7494 - Detection Scripts
+- [**61**Star][7m] [Shell] [vs4vijay/swissarmypi](https://github.com/vs4vijay/swissarmypi) A set of utility/tools to make Raspberry Pi [Zero W] into Swiss Army Knife
- [**61**Star][4y] [Py] [veil-framework/veil-ordnance](https://github.com/veil-framework/veil-ordnance) Veil-Ordnance is a tool designed to quickly generate MSF stager shellcode
- [**61**Star][8m] [Py] [treussart/probemanager](https://github.com/treussart/probemanager) Centralize Management of Intrusion Detection System like Suricata Bro Ossec ...
- [**61**Star][3y] [Py] [trailofbits/deceptiveidn](https://github.com/trailofbits/deceptiveidn) deceptiveidn: 利用计算机视觉(computer vision)自动检测 IDN 是否具有欺骗性(a deceptive reading)。(IDN: Internationalized Domain Names,国际化域名)
- [**61**Star][2y] [C] [tobaljackson/2017-sit-re-presentation](https://github.com/tobaljackson/2017-sit-re-presentation) Intro to radare2 presentation files.
-- [**61**Star][2y] [Go] [tengzhangchao/portscan](https://github.com/tengzhangchao/portscan) 端口扫描器
-- [**61**Star][2y] [PowerShell] [tenable/posh-nessus](https://github.com/tenable/posh-nessus) PowerShell Module for automating Tenable Nessus Vulnerability Scanner.
+- [**61**Star][2y] [PS] [tenable/posh-nessus](https://github.com/tenable/posh-nessus) PowerShell Module for automating Tenable Nessus Vulnerability Scanner.
- [**61**Star][1y] [C++] [tandasat/debuglogger](https://github.com/tandasat/debuglogger) A software driver that lets you log kernel-mode debug output into a file on Windows.
+- [**61**Star][4y] [C++] [t-vk/memory-hacking-class](https://github.com/t-vk/memory-hacking-class) Easy to use class to read and modify other processes memory.
- [**61**Star][3y] [Py] [syss-research/radio-hackbox](https://github.com/syss-research/radio-hackbox) PoC tool to demonstrate vulnerabilities in wireless input devices
- [**61**Star][4y] [Py] [sysinsider/usbtracker](https://github.com/sysinsider/usbtracker) Quick & dirty coded incident response and forensics python script to track USB devices events and artifacts in a Windows OS (Vista and later).
- [**61**Star][1y] [C] [synestraa/highcall-library](https://github.com/synestraa/highcall-library) usermode standalone kernel interface
- [**61**Star][4y] [C++] [strozfriedberg/ntfs-linker](https://github.com/strozfriedberg/ntfs-linker) An NTFS journal parser
- [**61**Star][1y] [Py] [srounet/pymem](https://github.com/srounet/pymem) A python library for windows, providing the needed functions to start working on your own with memory editing.
- [**61**Star][5y] [CoffeeScript] [sroberts/hubot-vtr-scripts](https://github.com/sroberts/hubot-vtr-scripts) Scripts for making Hubot a CND Sidekick
+- [**61**Star][5y] [PHP] [smaash/fuckshitup](https://github.com/smaash/fuckshitup) php-cli vulnerability scanner
- [**61**Star][4y] [C] [sha0/winvblock](https://github.com/sha0/winvblock) WinVBlock (derived from WinAoE) AoE, MEMDISK, GRUB4DOS RAM Disk, File-Backed Disk Driver
- [**61**Star][4y] [Py] [secretsquirrel/backdoor-pyc](https://github.com/secretsquirrel/backdoor-pyc) Patch pyc files with your code. Fairly lame.
- [**61**Star][3y] [Py] [samyk/awesome-vehicle-security](https://github.com/samyk/awesome-vehicle-security)
+- [**61**Star][2y] [ObjC] [rickhe/rhwechat](https://github.com/rickhe/rhwechat) iOS 无需越狱逆向微信:自动抢红包
- [**61**Star][2y] [Py] [pimps/cve-2018-7600](https://github.com/pimps/cve-2018-7600) Exploit for Drupal 7 <= 7.57 CVE-2018-7600
- [**61**Star][1y] [pfalcon/awesome-linux-android-hacking](https://github.com/pfalcon/awesome-linux-android-hacking) List of hints and Q&As to get most of your Linux/Android device
- [**61**Star][4y] [HTML] [payatu/cve-2015-6086](https://github.com/payatu/cve-2015-6086) PoC for CVE-2015-6086
- [**61**Star][7y] [pakt/decv](https://github.com/pakt/decv) Decompiler for Code Virtualizer 1.3.8 (Oreans)
+- [**61**Star][4y] [C++] [oowoodone/vmp_odplugin](https://github.com/oowoodone/vmp_odplugin) VMProtect OD Plugin
- [**61**Star][2y] [Py] [oalabs/pyiatrebuild](https://github.com/oalabs/pyiatrebuild) Automatically rebuild Import Address Table for dumped PE file. With python bindings!
-- [**61**Star][5y] [Py] [nullhypothesis/scramblesuit](https://github.com/nullhypothesis/scramblesuit) The ScrambleSuit traffic obfuscation protocol.
- [**61**Star][4y] [C++] [null--/graviton](https://github.com/null--/graviton) Cross Platform Malware Development Framework
+- [**61**Star][3y] [nanopool/claymore-xmr-cpu-miner](https://github.com/nanopool/claymore-xmr-cpu-miner) Claymore's CryptoNote Windows CPU Miner
- [**61**Star][3y] [Py] [n00py/post-ex](https://github.com/n00py/post-ex) Post-exploitation scripts for OS X persistence and privesc
- [**61**Star][2y] [Go] [mwgg/passera](https://github.com/mwgg/passera) [UNSUPPORTED] A small tool to turn any entered passphrase into a strong secure password, allowing you to easily use different strong passwords for different websites without storing them
-- [**61**Star][24d] [Dockerfile] [misp/misp-docker](https://github.com/misp/misp-docker) MISP Docker (XME edition)
+- [**61**Star][2y] [HTML] [michenriksen/bucketlist](https://github.com/michenriksen/bucketlist) Amazon S3 bucket spelunking!
- [**61**Star][4y] [Py] [michael-yip/maltegovt](https://github.com/michael-yip/maltegovt) A set of Maltego transforms for VirusTotal Public API v2.0. This set has the added functionality of caching queries on a daily basis to speed up resolutions.
-- [**61**Star][2y] [PowerShell] [mattifestation/pocsubjectinterfacepackage](https://github.com/mattifestation/pocsubjectinterfacepackage) A proof-of-concept subject interface package (SIP) used to demonstrate digital signature subversion attacks.
+- [**61**Star][2y] [PS] [mattifestation/pocsubjectinterfacepackage](https://github.com/mattifestation/pocsubjectinterfacepackage) A proof-of-concept subject interface package (SIP) used to demonstrate digital signature subversion attacks.
- [**61**Star][3y] [C++] [maldevel/driver-loader](https://github.com/maldevel/driver-loader) Windows驱动加载器
- [**61**Star][3y] [Py] [lijiejie/struts2_045_scan](https://github.com/lijiejie/struts2_045_scan) Struts2-045 Scanner
- [**61**Star][9m] [Go] [lesnuages/go-execute-assembly](https://github.com/lesnuages/go-execute-assembly) Allow a Go process to dynamically load .NET assemblies
- [**61**Star][6y] [Py] [kevthehermit/yarapcap](https://github.com/kevthehermit/yarapcap) Process HTTP Pcaps With YARA
-- [**61**Star][4m] [Py] [josue87/boomer](https://github.com/josue87/boomer) Framework for exploiting local vulnerabilities
+- [**61**Star][5m] [Py] [josue87/boomer](https://github.com/josue87/boomer) Framework for exploiting local vulnerabilities
- [**61**Star][4y] [JS] [joliss/js-string-escape](https://github.com/joliss/js-string-escape) Escape strings for use as JavaScript string literals
-- [**61**Star][8d] [C] [jessfraz/tor](https://github.com/jessfraz/tor) Development fork of
+- [**61**Star][5d] [C] [jessfraz/tor](https://github.com/jessfraz/tor) Development fork of
- [**61**Star][4y] [C#] [jaredcatkinson/evilnetconnectionwmiprovider](https://github.com/jaredcatkinson/evilnetconnectionwmiprovider)
- [**61**Star][6y] [Java] [isecpartners/android-killpermandsigchecks](https://github.com/isecpartners/android-killpermandsigchecks) Bypass signature and permission checks for IPCs
- [**61**Star][1y] [im-bug/blockchain-security-list](https://github.com/im-bug/blockchain-security-list)
- [**61**Star][5y] [Py] [hamiltoniancycle/classnamedeobfuscator](https://github.com/hamiltoniancycle/classnamedeobfuscator) Simple script to parse through the .smali files produced by apktool and extract the .source annotation lines.
- [**61**Star][3m] [Py] [hacksysteam/wpadescape](https://github.com/hacksysteam/wpadescape) Sandbox escape using WinHTTP Web Proxy Auto-Discovery Service
-- [**61**Star][1y] [Py] [ha3mrx/hacking](https://github.com/ha3mrx/hacking) Ha3Mrx Pentesting and Security Hacking
- [**61**Star][11m] [Py] [graniet/operative-framework-hd](https://github.com/graniet/operative-framework-hd) operative framework HD is the digital investigation framework, you can interact with websites, email address, company, people, ip address, vulnerability fuzzing ... interact with basic/graphical view and export with XML, JSON, use database management...
- [**61**Star][5y] [Assembly] [gdbinit/mpress_dumper](https://github.com/gdbinit/mpress_dumper) MPRESS dumper for OS X
- [**61**Star][1y] [Assembly] [gamozolabs/falkervisor_beta](https://github.com/gamozolabs/falkervisor_beta)
- [**61**Star][6y] [C] [freewaf/waf-pe](https://github.com/freewaf/waf-pe) Open Source Web Application Firewall Protection Engine
-- [**61**Star][6m] [Ruby] [engineyard/engineyard-serverside](https://github.com/engineyard/engineyard-serverside) This gem deploys your application on Engine Yard Cloud.
+- [**61**Star][5y] [C] [evilsocket/libpe](https://github.com/evilsocket/libpe) A C/C++ library to parse Windows portable executables written with speed and stability in mind.
+- [**61**Star][7m] [Ruby] [engineyard/engineyard-serverside](https://github.com/engineyard/engineyard-serverside) This gem deploys your application on Engine Yard Cloud.
- [**61**Star][11m] [JS] [dxa4481/xssoauthpersistence](https://github.com/dxa4481/xssoauthpersistence) Maintaining account persistence via XSS and Oauth
- [**61**Star][3y] [Java] [dodola/simplesmali](https://github.com/dodola/simplesmali) 通过精简Smali语法细节来增强反编译代码阅读性,自定义了一种简单语法
- [**61**Star][2y] [Swift] [devxoul/blockchain](https://github.com/devxoul/blockchain) A blockchain simulator written in Swift
-- [**61**Star][4m] [Shell] [developerkunal/converto](https://github.com/developerkunal/converto) Installing Kali linux on Vps Server
-- [**61**Star][12m] [C] [darm64/xnu](https://github.com/darm64/xnu) Research into porting the XNU kernel to ARM devices.
- [**61**Star][7y] [Py] [danghvu/pwp](https://github.com/danghvu/pwp) Python Web framework P0wner
+- [**61**Star][2y] [PS] [curi0usjack/adimporter](https://github.com/curi0usjack/adimporter) Credit to Helge Klein -
+- [**61**Star][20d] [Py] [crs-support/ftw](https://github.com/crs-support/ftw) Framework for Testing WAFs (FTW!)
- [**61**Star][3y] [Assembly] [cranklin/cranky-data-virus](https://github.com/cranklin/cranky-data-virus) Educational virus written in Assembly that infects 32-bit ELF executables on Linux using the data segment infection method
- [**61**Star][2y] [C] [convisoappsec/firefox_tunnel](https://github.com/convisoappsec/firefox_tunnel) 使用Firefox来建立远程通信隧道, 使用cookie.sqlite/html/js实现payload上传下载
-- [**61**Star][11d] [C] [cn-uofbasel/ccn-lite](https://github.com/cn-uofbasel/ccn-lite) CCN-lite, a lightweight implementation of the CCNx protocol and its variations
- [**61**Star][10m] [Py] [cisco-sas/katnip](https://github.com/cisco-sas/katnip) Extension library for the Kitty fuzzing framework
- [**61**Star][2y] [Py] [cifasis/nosy-newt](https://github.com/cifasis/nosy-newt) Nosy Newt is a simple concolic execution tool for exploring the input space of a binary executable program based in Triton
+- [**61**Star][9y] [C] [chronic-dev/bootrom-dumper](https://github.com/chronic-dev/bootrom-dumper) Utility to Dump iPhone Bootrom
- [**61**Star][5m] [Py] [christophetd/ipv6teal](https://github.com/christophetd/ipv6teal)
-- [**61**Star][2y] [Java] [calebwhiting/java-asm-obfuscator](https://github.com/calebwhiting/java-asm-obfuscator)
-- [**61**Star][2y] [breaktoprotect/cve-2017-12615](https://github.com/breaktoprotect/cve-2017-12615) POC Exploit for Apache Tomcat 7.0.x CVE-2017-12615 PUT JSP vulnerability.
-- [**61**Star][2y] [blue-bird1/metasploit-cn-wiki](https://github.com/blue-bird1/metasploit-cn-wiki) metasploit中文wiki
+- [**61**Star][5m] [Py] [b-mueller/scrooge-mcetherface](https://github.com/b-mueller/scrooge-mcetherface) Attack tool that loots Ether from vulnerable smart contracts
- [**61**Star][7m] [C++] [apexlegendsuc/anti-cheat-emulator](https://github.com/apexlegendsuc/anti-cheat-emulator)
-- [**61**Star][13d] [Py] [anon-exploiter/suid3num](https://github.com/anon-exploiter/suid3num) A standalone python script which utilizes python's built-in modules to enumerate SUID binaries, separate default binaries from custom binaries, cross-match those with bins in GTFO Bin's repository & auto-exploit those, all with colors! ( ͡~ ͜ʖ ͡°)
+- [**61**Star][1y] [Py] [anbai-inc/cve-2018-2893](https://github.com/anbai-inc/cve-2018-2893) CVE-2018-2893
- [**61**Star][3y] [Shell] [abs0/wargames](https://github.com/abs0/wargames) Shell script to simulate the W.O.P.R. computer from WarGames (wopr)
-- [**61**Star][9m] [Py] [3lackrush/poc-bank](https://github.com/3lackrush/poc-bank) Focus on cybersecurity | collection of PoC and Exploits
- [**60**Star][3m] [Go] [dvyukov/go-fuzz-corpus](https://github.com/dvyukov/go-fuzz-corpus) Corpus for github.com/dvyukov/go-fuzz examples
-- [**60**Star][28d] [Shell] [nccgroup/asafw](https://github.com/nccgroup/asafw) Set of scripts to deal with Cisco ASA firmware [pack/unpack etc.]
+- [**60**Star][3d] [Py] [tribler/py-ipv8](https://github.com/tribler/py-ipv8) Python implementation of the IPv8 layer
+- [**60**Star][30d] [Shell] [nccgroup/asafw](https://github.com/nccgroup/asafw) Set of scripts to deal with Cisco ASA firmware [pack/unpack etc.]
- [**60**Star][4y] [shadowsocks/tun2socks-ios](https://github.com/shadowsocks/tun2socks-ios) tun2socks as a library for iOS apps
-- [**60**Star][13d] [CSS] [hacker0x01/docs.hackerone.com](https://github.com/hacker0x01/docs.hackerone.com) HackerOne Platform Documentation
+- [**60**Star][4m] [motherfuzzers/meetups](https://github.com/motherfuzzers/meetups) Materials from Fuzzing Bay Area meetups
+- [**60**Star][4m] [JS] [phith0n/xray-poc-generation](https://github.com/phith0n/xray-poc-generation) 🧬 辅助生成 XRay YAML POC
+- [**60**Star][1m] [HCL] [jordanpotti/offensiveclouddistribution](https://github.com/jordanpotti/offensiveclouddistribution) Leverage the ability of Terraform and AWS or GCP to distribute large security scans across numerous cloud instances.
- [**60**Star][2m] [JS] [atlasnx/web-cfw-loader](https://github.com/atlasnx/web-cfw-loader) A payload launcher made in javascript for the Nintendo Switch
-- [**60**Star][2m] [Jupyter Notebook] [misinfosecproject/amitt_framework](https://github.com/misinfosecproject/amitt_framework) AMITT (Adversarial Misinformation and Influence Tactics and Techniques) framework for describing disinformation incidents. AMITT is part of misinfosec - work on adapting information security practices to help track and counter misinformation - and is designed as far as possible to fit existing infosec practices and tools.
- [**60**Star][2m] [Py] [landgrey/cve-2019-7609](https://github.com/landgrey/cve-2019-7609) exploit CVE-2019-7609(kibana RCE) on right way by python2 scripts
- [**60**Star][2y] [C] [samuelpowell/cx10-fnrf](https://github.com/samuelpowell/CX10-FNRF) Cheerson CX10 rate mode firmware with integrated RF
- [**60**Star][8m] [C++] [intel/satt](https://github.com/intel/satt)
- [**60**Star][2m] [C++] [imugee/pegasus](https://github.com/imugee/pegasus) reverse engineering extension plugin for windbg
-- [**60**Star][4y] [Shell] [praetorian-code/epictreasure](https://github.com/praetorian-code/epictreasure) radare, angr, pwndbg, binjitsu, ect in a box ready for pwning
- [**60**Star][3y] [Java] [censorship-no-archive/ceno1](https://github.com/censorship-no-archive/ceno1) (Deprecated PoC) Innovative censorship evading technology based on p2p distributed caching network
- [**60**Star][5m] [Py] [zznop/bnida](https://github.com/zznop/bnida) Suite of plugins that provide the ability to transfer analysis data between Binary Ninja and IDA
- [ida_export](https://github.com/zznop/bnida/blob/master/ida/ida_export.py) 将数据从IDA中导入
@@ -10922,35 +11601,39 @@ networking routines
- [binja_export](https://github.com/zznop/bnida/blob/master/binja_export.py) 将数据从BinaryNinja中导出
- [binja_import](https://github.com/zznop/bnida/blob/master/binja_import.py) 将数据导入到BinaryNinja
- [**60**Star][4y] [Ruby] [zombiecraig/c0f](https://github.com/zombiecraig/c0f) CAN of Fingers (c0f) creates passive fingerprints of Make and Model over CAN bus
+- [**60**Star][7d] [Py] [yingshang/banruo](https://github.com/yingshang/banruo)
- [**60**Star][7m] [Py] [ultrasecurity/telekiller](https://github.com/ultrasecurity/telekiller) A Tools Session Hijacking And Stealer Local Passcode Telegram Windows
- [**60**Star][4y] [Py] [tycx2ry/docker_api_vul](https://github.com/tycx2ry/docker_api_vul) docker 未授权访问漏洞利用脚本
+- [**60**Star][8m] [JS] [try-to/electron-proxy](https://github.com/try-to/electron-proxy) 基于electron开发的内网穿透工具,支持多系统,支持任意本地端口.
- [**60**Star][2y] [Py] [tmr232/idabuddy](https://github.com/tmr232/idabuddy) a reverse-engineer's best friend. Designed to be everything Clippy the Office Assistant was, and more!
+- [**60**Star][2y] [tkmru/awesome-linux-rootkits](https://github.com/tkmru/awesome-linux-rootkits)
+- [**60**Star][10m] [ObjC] [tihmstar/v3ntex](https://github.com/tihmstar/v3ntex) getf tfp0 on iOS 12.0 - 12.1.2
- [**60**Star][6m] [Py] [thesph1nx/spacecow](https://github.com/thesph1nx/spacecow) Windows Rootkit written in Python
+- [**60**Star][6m] [PS] [texhex/biossledgehammer](https://github.com/texhex/biossledgehammer) Automated BIOS, ME, TPM firmware update and BIOS settings for HP devices
- [**60**Star][1y] [Ruby] [tallakt/modbus-cli](https://github.com/tallakt/modbus-cli) Modbus command line utility
-- [**60**Star][4y] [C++] [t-vk/memory-hacking-class](https://github.com/t-vk/memory-hacking-class) Easy to use class to read and modify other processes memory.
- [**60**Star][4y] [Objective-C++] [steven-michaud/reverse-engineering-on-osx](https://github.com/steven-michaud/reverse-engineering-on-osx) Reverse Engineering on OS X
- [**60**Star][4m] [OCaml] [stephenrkell/libcrunch](https://github.com/stephenrkell/libcrunch) Runtime + instrumentation adding precise, accurate and fash(-ish) dynamic checking to C (bounds errors, type confusion, ...).
-- [**60**Star][5y] [PHP] [smaash/fuckshitup](https://github.com/smaash/fuckshitup) php-cli vulnerability scanner
-- [**60**Star][6m] [Ruby] [skahwah/automato](https://github.com/skahwah/automato) automato should help with automating some of the user-focused enumeration tasks during an internal penetration test.
+- [**60**Star][2y] [Java] [stefano-lupo/java-proxy-server](https://github.com/stefano-lupo/java-proxy-server) This is a simple HTTP/HTTPS proxy server written in Java
+- [**60**Star][7m] [Ruby] [skahwah/automato](https://github.com/skahwah/automato) automato should help with automating some of the user-focused enumeration tasks during an internal penetration test.
- [**60**Star][8y] [Py] [sensepost/anapickle](https://github.com/sensepost/anapickle) Toolset for writing shellcode in Python's Pickle language and for manipulating pickles to inject shellcode.
- [**60**Star][2y] [secwiki/macos-kernel-exploits](https://github.com/secwiki/macos-kernel-exploits) macos-kernel-exploits MacOS平台提权漏洞集合
- [**60**Star][9m] [C#] [securifybv/shelllink](https://github.com/securifybv/shelllink) A .NET Class Library for processing ShellLink (LNK) files
- [**60**Star][4y] [Py] [samvartaka/malware](https://github.com/samvartaka/malware) Various malware, packer, crypter, etc. detection and analysis tools
-- [**60**Star][4m] [Rust] [rust-fuzz/targets](https://github.com/rust-fuzz/targets)
- [**60**Star][3y] [C++] [rprichard/win32-console-docs](https://github.com/rprichard/win32-console-docs) Win32 Console Documentation -- in particular, console/standard handles and CreateProcess inheritance
+- [**60**Star][17d] [JS] [rastating/xss-chef](https://github.com/rastating/xss-chef) A web application for generating custom XSS payloads
+- [**60**Star][2m] [Py] [quarkslab/lldbagility](https://github.com/quarkslab/lldbagility) A tool for debugging macOS virtual machines
- [**60**Star][4y] [Py] [phith0n/xdctf2015](https://github.com/phith0n/xdctf2015) writeup about XDCTF 2015
-- [**60**Star][7d] [Py] [phackt/pentest](https://github.com/phackt/pentest) Custom tools and projects about security
- [**60**Star][6m] [Py] [pdkt-team/ctf](https://github.com/pdkt-team/ctf) CTF write-ups by PDKT team with English and Indonesian language
-- [**60**Star][1y] [C++] [paranoidninja/scriptdotsh-malwaredevelopment](https://github.com/paranoidninja/scriptdotsh-malwaredevelopment) This repo will contain code snippets for blogs: Malware on Steroids written by me at
- [**60**Star][5y] [Py] [owtf/wafbypasser](https://github.com/owtf/wafbypasser)
-- [**60**Star][15d] [netstalking-core/netstalking-catalogue](https://github.com/netstalking-core/netstalking-catalogue) Каталог нетсталкерских ресурсов, команд, инструментов, источников контента.
+- [**60**Star][17d] [netstalking-core/netstalking-catalogue](https://github.com/netstalking-core/netstalking-catalogue) Каталог нетсталкерских ресурсов, команд, инструментов, источников контента.
- [**60**Star][5y] [PHP] [nccgroup/webfeet](https://github.com/nccgroup/webfeet) Web Filter External Enumeration Tool (WebFEET)
-- [**60**Star][9d] [Vue] [nao-sec/tknk_scanner](https://github.com/nao-sec/tknk_scanner) 基于社区的集成恶意软件识别系统
+- [**60**Star][11d] [Vue] [nao-sec/tknk_scanner](https://github.com/nao-sec/tknk_scanner) 基于社区的集成恶意软件识别系统
- [**60**Star][2y] [Py] [mthbernardes/whoamimailbot](https://github.com/mthbernardes/whoamimailbot)
- [**60**Star][1y] [HTML] [micyo202/yan-demo](https://github.com/micyo202/yan-demo) 本项目是基于 SpringMVC+Spring+MyBatis (SSM) 架构的高效率便捷开发框架
+- [**60**Star][6d] [C] [lnslbrty/ptunnel-ng](https://github.com/lnslbrty/ptunnel-ng) Tunnel TCP connections through ICMP.
- [**60**Star][3y] [Py] [leonjza/qrxfer](https://github.com/leonjza/qrxfer) Transfer files from Air gapped machines using QR codes
-- [**60**Star][3y] [PowerShell] [kevin-robertson/conveigh](https://github.com/kevin-robertson/conveigh) Conveigh is a Windows PowerShell LLMNR/NBNS spoofer detection tool
-- [**60**Star][7m] [Dockerfile] [john-lin/docker-snort](https://github.com/john-lin/docker-snort) Snort in Docker for Network Functions Virtualization (NFV)
+- [**60**Star][5m] [C] [lazenca/kernel-exploit-tech](https://github.com/lazenca/kernel-exploit-tech) Linux Kernel exploitation Tutorial.
+- [**60**Star][3y] [PS] [kevin-robertson/conveigh](https://github.com/kevin-robertson/conveigh) Conveigh is a Windows PowerShell LLMNR/NBNS spoofer detection tool
- [**60**Star][2y] [C++] [jmasterx/agui](https://github.com/jmasterx/agui) C++ GUI API Aimed at Games
- [**60**Star][5y] [Go] [jgrahamc/torhoney](https://github.com/jgrahamc/torhoney) Gets the list of TOR exit nodes and matches them with Project Honeypot data
- [**60**Star][1y] [Java] [java-deobfuscator/deobfuscator-gui](https://github.com/java-deobfuscator/deobfuscator-gui) An awesome GUI for an awesome deobfuscator
@@ -10959,184 +11642,203 @@ networking routines
- [**60**Star][3y] [C] [hoshimin/enjoythering0](https://github.com/hoshimin/enjoythering0) Шаблон полнофункционального драйвера и обёртки над ядерным API
- [**60**Star][4y] [Py] [hood3drob1n/cve-2016-3714](https://github.com/hood3drob1n/cve-2016-3714) ImaegMagick Code Execution (CVE-2016-3714)
- [**60**Star][2y] [C++] [hasherezade/mypintools](https://github.com/hasherezade/mypintools) Tools to run with Intel PIN
-- [**60**Star][5y] [PowerShell] [harmj0y/cortana](https://github.com/harmj0y/cortana) This is a pack of Cortana scripts commonly used on our pentests.
+- [**60**Star][5y] [PS] [harmj0y/cortana](https://github.com/harmj0y/cortana) This is a pack of Cortana scripts commonly used on our pentests.
- [**60**Star][8m] [Py] [grocid/ctf](https://github.com/grocid/ctf)
- [**60**Star][2y] [C] [gravity-postquantum/gravity-sphincs](https://github.com/gravity-postquantum/gravity-sphincs) Signature scheme submitted to NIST's Post-Quantum Cryptography Project
+- [**60**Star][5d] [JS] [gitsquared/sherlock-js](https://github.com/gitsquared/sherlock-js) Find usernames across over 170 social networks - Fast & flexible remake of sdushantha/sherlock
+- [**60**Star][2y] [Java] [geeksonsecurity/android-overlay-malware-example](https://github.com/geeksonsecurity/android-overlay-malware-example) Harmless Android malware using the overlay technique to steal user credentials.
- [**60**Star][1y] [Shell] [galeone/letsencrypt-lighttpd](https://github.com/galeone/letsencrypt-lighttpd) Renew your let's encrypt certificates monthly, using lighttpd as webserver.
-- [**60**Star][7m] [Kotlin] [fs0c131y/samsunglocker](https://github.com/fs0c131y/samsunglocker) Samsung ContainerAgent Vulnerability - Local DoS for Samsung smartphone
- [**60**Star][3y] [Py] [fireeye/volatility-plugins](https://github.com/fireeye/volatility-plugins)
- [**60**Star][2y] [C++] [finixbit/ftrace](https://github.com/finixbit/ftrace) Simple Function calls tracer
- [**60**Star][4y] [PHP] [filetofirewall/fof](https://github.com/filetofirewall/fof) Filet-O-Firewall Vulnerability PoC
- [**60**Star][5y] [Py] [eykd/owyl](https://github.com/eykd/owyl) A python behavior tree for implementing fast and flexible AI.
- [**60**Star][10m] [exitmsconfig/engineering-box](https://github.com/exitmsconfig/engineering-box) engineering Box (简称 - engineering) 是一个集合github平台上的安全行业从业者自研开源扫描器的仓库,包括子域名枚举、数据库漏洞扫描、弱口令或信息泄漏扫描、端口扫描、指纹识别以及其他大型扫描器或模块化扫描器,同时该仓库只收录各位安全行业从业者自己编写的一般性开源扫描器,类似awvs、nmap、w3af等知名扫描工具不收录,收集全球各位同仁爱好者维护项目
- [**60**Star][1y] [Py] [esmog/nodexp](https://github.com/esmog/nodexp) NodeXP - A Server Side Javascript Injection tool capable of detecting and exploiting Node.js vulnerabilities
-- [**60**Star][7m] [Py] [engmaher/baf](https://github.com/engmaher/baf) Blind Attacking Framework
+- [**60**Star][8m] [Shell] [ernw/static-toolbox](https://github.com/ernw/static-toolbox) A collection of statically compiled tools like Nmap and Socat.
- [**60**Star][4y] [Py] [dotcppfile/serbot](https://github.com/dotcppfile/serbot) Advanced Controller/Server/Client Reverse Shell/Bot – Windows/Linux – Python
- [**60**Star][1y] [Py] [darkw1z/ps1jacker](https://github.com/darkw1z/ps1jacker) Ps1jacker is a tool for generating COM Hijacking payload.
-- [**60**Star][2y] [PowerShell] [curi0usjack/adimporter](https://github.com/curi0usjack/adimporter) Credit to Helge Klein -
-- [**60**Star][7d] [HTML] [cudeso/tools](https://github.com/cudeso/tools) Different tools, koen.vanimpe@cudeso.be
-- [**60**Star][18d] [Py] [crs-support/ftw](https://github.com/crs-support/ftw) Framework for Testing WAFs (FTW!)
+- [**60**Star][4m] [Py] [dai-lab/steganogan](https://github.com/dai-lab/steganogan) SteganoGAN is a tool for creating steganographic images using adversarial training.
+- [**60**Star][9d] [HTML] [cudeso/tools](https://github.com/cudeso/tools) Different tools, koen.vanimpe@cudeso.be
- [**60**Star][2y] [C] [croemheld/lkm-rootkit](https://github.com/croemheld/lkm-rootkit) A LKM rootkit for most newer kernel versions.
- [**60**Star][7m] [JS] [coolervoid/nozes](https://github.com/coolervoid/nozes) Pentest cmd manager- ALpha
- [**60**Star][1y] [Py] [conix-security/btg](https://github.com/conix-security/btg) BTG's purpose is to make fast and efficient search on IOC
+- [**60**Star][1y] [C++] [cisco-talos/thanatosdecryptor](https://github.com/cisco-talos/thanatosdecryptor) ThanatosDecryptor is an executable program that attempts to decrypt certain files encrypted by the Thanatos malware.
- [**60**Star][5y] [Py] [byt3bl33d3r/duckhunter](https://github.com/byt3bl33d3r/duckhunter) Converts a USB Rubber ducky script into a Kali Nethunter friendly format for the HID attack
- [**60**Star][2y] [DTrace] [brendangregg/dtrace-tools](https://github.com/brendangregg/dtrace-tools) DTrace tools for FreeBSD
+- [**60**Star][2y] [breaktoprotect/cve-2017-12615](https://github.com/breaktoprotect/cve-2017-12615) POC Exploit for Apache Tomcat 7.0.x CVE-2017-12615 PUT JSP vulnerability.
- [**60**Star][5m] [Py] [brakmic/sinkholes](https://github.com/brakmic/sinkholes)
- [**60**Star][1y] [Py] [blackholesec/wifigod](https://github.com/blackholesec/wifigod) Wireless Security Testing v1.5
-- [**60**Star][5m] [Py] [b-mueller/scrooge-mcetherface](https://github.com/b-mueller/scrooge-mcetherface) Attack tool that loots Ether from vulnerable smart contracts
- [**60**Star][3y] [C] [arvanaghi/windows-dll-injector](https://github.com/arvanaghi/windows-dll-injector) A basic Windows DLL injector in C using CreateRemoteThread and LoadLibrary. Implemented for educational purposes.
+- [**60**Star][1y] [Py] [arthastang/iot-home-guard](https://github.com/arthastang/iot-home-guard) A tool for malicious behavior detection in IoT devices
- [**60**Star][2y] [Py] [argp/unmask_jemalloc](https://github.com/argp/unmask_jemalloc) De Mysteriis Dom jemalloc
- [**60**Star][1y] [Py] [anssi-fr/audit-radius](https://github.com/anssi-fr/audit-radius) A RADIUS authentication server audit tool
-- [**60**Star][1y] [Py] [anbai-inc/cve-2018-2893](https://github.com/anbai-inc/cve-2018-2893) CVE-2018-2893
+- [**60**Star][5m] [C++] [alf45tar/pedalino](https://github.com/alf45tar/pedalino) Smart wireless MIDI foot controller for guitarists and more.
- [**60**Star][7m] [Rust] [ajmwagar/lor-axe](https://github.com/ajmwagar/lor-axe) 🪓 a multi-threaded, low-bandwidth HTTP DOS tool
+- [**60**Star][1y] [HTML] [aglcaicai/kalitoolsmanual](https://github.com/aglcaicai/kalitoolsmanual) Kali Linux 工具合集中文说明书
- [**60**Star][2m] [Py] [9b/netinfo](https://github.com/9b/netinfo) Simple IP enrichment service and API wrapping PyASN and MaxMind GeoIP.
- [**59**Star][8m] [JS] [javascript-obfuscator/gulp-javascript-obfuscator](https://github.com/javascript-obfuscator/gulp-javascript-obfuscator) Gulp plugin for javascript-obfuscator package.
- [**59**Star][8m] [JS] [shadowsocks/shadowsocks-restful-api](https://github.com/shadowsocks/shadowsocks-restful-api) Secure, reliable, standard restful api for managing shadowsocks-libev
+- [**59**Star][3m] [snoopysecurity/osce-prep](https://github.com/snoopysecurity/osce-prep) A list of freely available resources that can be used as a prerequisite before taking OSCE.
+- [**59**Star][13d] [C++] [whid-injector/whid-31337](https://github.com/whid-injector/whid-31337) WHID Elite is a GSM-enabled Open-Source Multi-Purpose Offensive Device that allows a threat actor to remotely inject keystrokes, bypass air-gapped systems, conduct mousejacking attacks, do acoustic surveillance, RF replay attacks and much more. In practice, is THE Wet Dream of any Security Consultant out there!
- [**59**Star][8m] [nationalsecurityagency/ghidra-data](https://github.com/nationalsecurityagency/ghidra-data) Supporting Data Archives for Ghidra
-- [**59**Star][1m] [HCL] [jordanpotti/offensiveclouddistribution](https://github.com/jordanpotti/offensiveclouddistribution) Leverage the ability of Terraform and AWS or GCP to distribute large security scans across numerous cloud instances.
+- [**59**Star][3m] [C] [angr/vex](https://github.com/angr/vex) A patched version of VEX to work with PyVEX.
+- [**59**Star][2d] [aquasecurity/vuln-list](https://github.com/aquasecurity/vuln-list) NVD, RedHat, Debian, Ubuntu, Alpine
- [**59**Star][4y] [JS] [auth0-blog/react-flux-debug-actions-sample](https://github.com/auth0-blog/react-flux-debug-actions-sample) This repository shows how you can use Flux actions to reproduce your user's issues in your own browser
- [**59**Star][2m] [Py] [mozilla/frost](https://github.com/mozilla/frost) Unit testing framework for test driven security of AWS configurations, and more.
- [**59**Star][3y] [Py] [fsecurelabs/peas](https://github.com/FSecureLABS/peas) PEAS is a Python 2 library and command line application for running commands on an ActiveSync server e.g. Microsoft Exchange.
- [**59**Star][1y] [C] [zhechkoz/pwin](https://github.com/zhechkoz/pwin) Security Evaluation of Dynamic Binary Instrumentation Engines
-- [**59**Star][7d] [Py] [yingshang/banruo](https://github.com/yingshang/banruo)
-- [**59**Star][10m] [C] [xyzz/amonet](https://github.com/xyzz/amonet) A bootrom exploit for MediaTek devices
-- [**59**Star][4y] [PowerShell] [xorrior/emailraider](https://github.com/xorrior/emailraider) Powershell MS Outlook enumeration and phishing tool
+- [**59**Star][4y] [Java] [zd2100/pscout](https://github.com/zd2100/pscout)
+- [**59**Star][11m] [C] [xyzz/amonet](https://github.com/xyzz/amonet) A bootrom exploit for MediaTek devices
+- [**59**Star][4y] [PS] [xorrior/emailraider](https://github.com/xorrior/emailraider) Powershell MS Outlook enumeration and phishing tool
- [**59**Star][1y] [xenithlabs/rfid-workshop](https://github.com/xenithlabs/rfid-workshop)
+- [**59**Star][1y] [C#] [wledfor2/playhooky](https://github.com/wledfor2/playhooky) C# Runtime Hooking Library for .NET/Mono/Unity.
- [**59**Star][2m] [Go] [wickett/lambhack](https://github.com/wickett/lambhack) A very vulnerable serverless application in AWS Lambda
-- [**59**Star][7m] [Shell] [vs4vijay/swissarmypi](https://github.com/vs4vijay/swissarmypi) A set of utility/tools to make Raspberry Pi [Zero W] into Swiss Army Knife
- [**59**Star][8m] [Py] [viele/onionskinrenderer](https://github.com/viele/onionskinrenderer) This is an Onion Skin Renderer for Autodesk Maya
- [**59**Star][11m] [Py] [s0md3v/infinity](https://github.com/ultimatehackers/infinity) Infinity can get phone numbers from facebook accounts with some maths and shit.
-- [**59**Star][8m] [JS] [try-to/electron-proxy](https://github.com/try-to/electron-proxy) 基于electron开发的内网穿透工具,支持多系统,支持任意本地端口.
-- [**59**Star][2y] [tkmru/awesome-linux-rootkits](https://github.com/tkmru/awesome-linux-rootkits)
+- [**59**Star][4m] [Zeek] [tylabs/dovehawk](https://github.com/tylabs/dovehawk) Dovehawk is a Zeek module that automatically imports MISP indicators and reports Sightings
- [**59**Star][2y] [Lua] [tkcert/winnti-nmap-script](https://github.com/tkcert/winnti-nmap-script) Nmap Script to scan for Winnti infections
- [**59**Star][1y] [Py] [tiaotiaolong/ttlscan](https://github.com/tiaotiaolong/ttlscan) 一款简易的插件化的漏洞扫描器框架
- [**59**Star][11m] [Py] [thom-s/httphish](https://github.com/thom-s/httphish) Quickly clone a website and launch an HTTP server to phish information with httphish.py
- [**59**Star][3y] [C#] [tech-srl/esh](https://github.com/tech-srl/esh) statistical similarity of binaries (Esh)
- [**59**Star][5y] [Ruby] [tduehr/buby](https://github.com/tduehr/buby) A JRuby implementation of the BurpExtender interface for PortSwigger Burp Suite.
- [**59**Star][3y] [Shell] [tapio/nautilus-git-scripts](https://github.com/tapio/nautilus-git-scripts) Nautilus scripts for interacting with a Git repository.
+- [**59**Star][4m] [sukkaw/cloudflare-block-bad-bot-ruleset](https://github.com/sukkaw/cloudflare-block-bad-bot-ruleset)
- [**59**Star][7y] [Java] [strazzere/dehoser](https://github.com/strazzere/dehoser) Unpacker for the HoseDex2Jar APK Protection which packs the original file inside the dex header
+- [**59**Star][1y] [C] [sourceincite/cve-2018-8440](https://github.com/sourceincite/cve-2018-8440) CVE-2018-8440 standalone exploit
+- [**59**Star][4m] [C] [sonertari/sslproxy](https://github.com/sonertari/sslproxy) Transparent SSL/TLS proxy for decrypting and diverting network traffic to other programs, such as UTM services, for deep SSL inspection
+- [**59**Star][1y] [C] [skeeto/ptrace-examples](https://github.com/skeeto/ptrace-examples) Examples for Linux ptrace(2)
- [**59**Star][3y] [Py] [sirusdv/edgehttp2fuzzer](https://github.com/sirusdv/edgehttp2fuzzer) Peach Pit for HTTP/2 Targeting Microsoft Edge
- [**59**Star][2m] [PHP] [sirbrillig/phpcs-variable-analysis](https://github.com/sirbrillig/phpcs-variable-analysis) Find undefined and unused variables with the PHP Codesniffer static analysis tool.
- [**59**Star][8m] [YARA] [sfaci/masc](https://github.com/sfaci/masc) 扫描网站中的恶意软件, 以及其他一些网站维护功能
+- [**59**Star][2y] [Go] [sensepost/notruler](https://github.com/sensepost/notruler) The opposite of Ruler, provides blue teams with the ability to detect Ruler usage against Exchange.
- [**59**Star][6m] [Py] [securityautomation/autosource](https://github.com/securityautomation/autosource) Automated SonarQube
- [**59**Star][1m] [s9mf/xss_test](https://github.com/s9mf/xss_test) 记录个人XSS学习
- [**59**Star][2m] [C#] [rvrsh3ll/sharpexcel4-dcom](https://github.com/rvrsh3ll/sharpexcel4-dcom) Port of Invoke-Excel4DCOM
-- [**59**Star][11d] [rub-nds/johnny-you-are-fired](https://github.com/rub-nds/johnny-you-are-fired) Artifacts for the USENIX publication.
+- [**59**Star][13d] [rub-nds/johnny-you-are-fired](https://github.com/rub-nds/johnny-you-are-fired) Artifacts for the USENIX publication.
- [**59**Star][4y] [C] [robertdavidgraham/cve-2015-5477](https://github.com/robertdavidgraham/cve-2015-5477) PoC exploit for CVE-2015-5477 BIND9 TKEY assertion failure
+- [**59**Star][17d] [C] [riscure/optee_fuzzer](https://github.com/riscure/optee_fuzzer) This repository contains the code for a fuzzing prototype for the OP-TEE system call interface using AFL.
- [**59**Star][3m] [Go] [rickgray/vscan-go](https://github.com/rickgray/vscan-go) golang version for nmap service and application version detection (without nmap installation)
- [**59**Star][11m] [Py] [reptilehaus/eternal-blue](https://github.com/reptilehaus/eternal-blue) REPTILEHAUS' simplified build process of Worawit Wang' (@sleepya_) version of EternalBlue.. The NSA exploit brought to you by the ShadowBrokers for exploiting MS17-010
-- [**59**Star][15d] [JS] [rastating/xss-chef](https://github.com/rastating/xss-chef) A web application for generating custom XSS payloads
-- [**59**Star][2m] [Py] [quarkslab/lldbagility](https://github.com/quarkslab/lldbagility) A tool for debugging macOS virtual machines
- [**59**Star][10m] [Py] [push0ebp/allirt](https://github.com/push0ebp/allirt) Tool that converts All of libc to signatures for IDA Pro FLIRT Plugin. and utility make sig with FLAIR easily
+- [**59**Star][4y] [Py] [psychomario/pyinject](https://github.com/psychomario/pyinject) A python module to help inject shellcode/DLLs into windows processes
+- [**59**Star][4m] [Py] [owasp/threat-model-cookbook](https://github.com/owasp/threat-model-cookbook) This project is about creating and publishing threat model examples.
- [**59**Star][6y] [Py] [offensivepython/sniffy](https://github.com/offensivepython/sniffy) A Simple network sniffer implemented on Python 3
- [**59**Star][3m] [Shell] [nviso-be/sec599](https://github.com/nviso-be/sec599) SEC599 supporting GitHub repository
-- [**59**Star][3y] [PowerShell] [nettitude/powershell](https://github.com/nettitude/powershell)
+- [**59**Star][3y] [PS] [nettitude/powershell](https://github.com/nettitude/powershell)
- [**59**Star][6m] [Py] [neonprimetime/phishingkittracker](https://github.com/neonprimetime/phishingkittracker) Tracking Threat Actor Emails in Phishing Kits. CC @PhishKitTracker on twitter if you find a #threatactoremail in #phishingkit , maintained by
- [**59**Star][1y] [Go] [nebulouslabs/entropy-mnemonics](https://github.com/nebulouslabs/entropy-mnemonics) Human readable entropy.
- [**59**Star][1m] [Java] [mozilla/zest](https://github.com/mozilla/zest)
+- [**59**Star][2y] [Visual Basic .NET] [mgeeky/robustpentestmacro](https://github.com/mgeeky/robustpentestmacro) This is a rich-featured Visual Basic macro code for use during Penetration Testing assignments, implementing various advanced post-exploitation techniques.
- [**59**Star][2y] [Go] [matishsiao/goinfo](https://github.com/matishsiao/goinfo) get os information use golang
- [**59**Star][3y] [C++] [markhc/windbg_to_c](https://github.com/markhc/windbg_to_c) Translates WinDbg "dt" structure dump to a C structure
- [**59**Star][5y] [C++] [malwaretech/uacelevator](https://github.com/malwaretech/uacelevator) Passive UAC elevation using dll infection
-- [**59**Star][7d] [C] [lnslbrty/ptunnel-ng](https://github.com/lnslbrty/ptunnel-ng) Tunnel TCP connections through ICMP.
-- [**59**Star][7d] [leipzig/awesome-reproducible-research](https://github.com/leipzig/awesome-reproducible-research) A curated list of reproducible research case studies, projects, tutorials, and media
-- [**59**Star][5y] [Objective-C] [kpwn/vpwn](https://github.com/kpwn/vpwn) xnu local privilege escalation via cve-2015-1140 IOHIDSecurePromptClient injectStringGated heap overflow | poc||gtfo
+- [**59**Star][6d] [leipzig/awesome-reproducible-research](https://github.com/leipzig/awesome-reproducible-research) A curated list of reproducible research case studies, projects, tutorials, and media
+- [**59**Star][5y] [ObjC] [kpwn/vpwn](https://github.com/kpwn/vpwn) xnu local privilege escalation via cve-2015-1140 IOHIDSecurePromptClient injectStringGated heap overflow | poc||gtfo
- [**59**Star][2y] [C] [koodous/androguard-yara](https://github.com/koodous/androguard-yara) Module to use Androguard with Yara
+- [**59**Star][3y] [Go] [jijinggang/golocproxy](https://github.com/jijinggang/golocproxy) 轻量级超强反向代理软件,用go语言开发,通过公共可知的服务器端口代理,把局域网内任何主机的本地服务发布给局域网外的用户,可用来跨越各种防火墙。
- [**59**Star][2y] [Py] [jeremyngalloway/mod_plaintext.py](https://github.com/jeremyngalloway/mod_plaintext.py) AKA "Internet Chemotherapy"
- [**59**Star][7m] [Py] [jas502n/cve-2019-6340](https://github.com/jas502n/cve-2019-6340) Drupal8's REST RCE, SA-CORE-2019-003, CVE-2019-6340
- [**59**Star][5m] [Py] [jas502n/cve-2019-11580](https://github.com/jas502n/cve-2019-11580) CVE-2019-11580 Atlassian Crowd and Crowd Data Center RCE
- [**59**Star][2y] [Py] [isra17/nrs](https://github.com/isra17/nrs) NSIS Reversing Suite with IDA Plugins
- [**59**Star][6m] [Py] [intrinsec/comission](https://github.com/intrinsec/comission) WhiteBox CMS analysis
-- [**59**Star][28d] [infosec-community/apac-conferences](https://github.com/infosec-community/apac-conferences) A community contributed consolidated list of InfoSec meetups in the Asia Pacific region.
+- [**59**Star][30d] [infosec-community/apac-conferences](https://github.com/infosec-community/apac-conferences) A community contributed consolidated list of InfoSec meetups in the Asia Pacific region.
+- [**59**Star][1y] [Py] [howie6879/hproxy](https://github.com/howie6879/hproxy) hproxy - Asynchronous IP proxy pool, aims to make getting proxy as convenient as possible.(异步爬虫代理池)
- [**59**Star][5m] [Py] [hgascon/adagio](https://github.com/hgascon/adagio) Structural Analysis and Detection of Android Malware
- [**59**Star][4y] [hduffddybz/linux_websites](https://github.com/hduffddybz/linux_websites) Commonly used kernel hacking site
- [**59**Star][5y] [C] [hackedteam/soldier-win](https://github.com/hackedteam/soldier-win) RCS Soldier for Windows
- [**59**Star][1y] [Py] [gunnerstahl/jqshell](https://github.com/gunnerstahl/jqshell) A weaponized version of CVE-2018-9206
-- [**59**Star][3m] [JS] [gitsquared/sherlock-js](https://github.com/gitsquared/sherlock-js) Find usernames across over 170 social networks - Fast & flexible remake of sdushantha/sherlock
-- [**59**Star][2y] [Java] [geeksonsecurity/android-overlay-malware-example](https://github.com/geeksonsecurity/android-overlay-malware-example) Harmless Android malware using the overlay technique to steal user credentials.
-- [**59**Star][8m] [Shell] [ernw/static-toolbox](https://github.com/ernw/static-toolbox) A collection of statically compiled tools like Nmap and Socat.
-- [**59**Star][5y] [PowerShell] [enigma0x3/outlookpersistence](https://github.com/enigma0x3/outlookpersistence)
+- [**59**Star][5y] [PS] [enigma0x3/outlookpersistence](https://github.com/enigma0x3/outlookpersistence)
- [**59**Star][7m] [HTML] [dustyfresh/honeypress](https://github.com/dustyfresh/honeypress) python based WordPress honeypot in a docker container
+- [**59**Star][7m] [HTML] [dobin/yookiterm-slides](https://github.com/dobin/yookiterm-slides) Exploitation and Mitigation Slides
- [**59**Star][11m] [C] [depletionmode/wsipc](https://github.com/depletionmode/wsipc) Working Set Page Cache side-channel IPC PoC
+- [**59**Star][8y] [JS] [davepacheco/node-heap-dump](https://github.com/davepacheco/node-heap-dump) Testing node heap dumps
- [**59**Star][2m] [Py] [dannycork/python-whois](https://github.com/dannycork/python-whois) Python module/library for retrieving WHOIS information of domains.
+- [**59**Star][9y] [C++] [cr4sh/drvhide-poc](https://github.com/cr4sh/drvhide-poc) Hidden kernel mode code execution for bypassing modern anti-rootkits.
- [**59**Star][1y] [Py] [cortesi/mitmproxy](https://github.com/cortesi/mitmproxy) An interactive SSL-capable intercepting HTTP proxy for penetration testers and software developers
- [**59**Star][2y] [C] [coolervoid/ninja_shell](https://github.com/coolervoid/ninja_shell) Port Knocking technique with AES256-GCM
- [**59**Star][2y] [Java] [contrast-security-oss/contrast-ro0](https://github.com/contrast-security-oss/contrast-ro0) A tiny Java agent that blocks attacks against unsafe deserialization
-- [**59**Star][1y] [C++] [cisco-talos/thanatosdecryptor](https://github.com/cisco-talos/thanatosdecryptor) ThanatosDecryptor is an executable program that attempts to decrypt certain files encrypted by the Thanatos malware.
- [**59**Star][2y] [C] [cisco-talos/locky](https://github.com/cisco-talos/locky)
-- [**59**Star][26d] [Py] [binaryanalysisplatform/bap-ida-python](https://github.com/binaryanalysisplatform/bap-ida-python) interoperatibility between BAP and IDA Pro
+- [**59**Star][1y] [Py] [capt-meelo/telewreck](https://github.com/capt-meelo/telewreck) A Burp extension to detect and exploit versions of Telerik Web UI vulnerable to CVE-2017-9248.
+- [**59**Star][28d] [Py] [binaryanalysisplatform/bap-ida-python](https://github.com/binaryanalysisplatform/bap-ida-python) interoperatibility between BAP and IDA Pro
- [**59**Star][6y] [Py] [bez0r/pdns2](https://github.com/bez0r/pdns2) Passive DNS V2
- [**59**Star][2y] [Py] [attackercan/teamviewer-dumper](https://github.com/attackercan/teamviewer-dumper) teamviewer-dumper: 从内存中转储TeamViewer ID 和密码
-- [**59**Star][1y] [Py] [arthastang/iot-home-guard](https://github.com/arthastang/iot-home-guard) A tool for malicious behavior detection in IoT devices
+- [**59**Star][11m] [Py] [anteater/anteater](https://github.com/anteater/anteater) Anteater - CI/CD Gate Check Framework
- [**59**Star][2y] [Py] [amoulu/tinysmaliemulator](https://github.com/amoulu/tinysmaliemulator) A very minimalist smali emulator that could be used to "decrypt" obfuscated strings
- [**59**Star][12m] [aliasrobotics/rsf](https://github.com/aliasrobotics/rsf) The Robot Security Framework (RSF), Robot Security Framework (RSF), a standardized methodology to perform security assessments in robotics.
- [**59**Star][2y] [C++] [alexhude/loadprocconfig](https://github.com/alexhude/loadprocconfig) IDA Plugin to load processor configuration files.
- [**59**Star][6m] [JS] [alexcn/onestack](https://github.com/alexcn/onestack) IT管理系统,实现自动化运维,整合CMDB和监控,实现自动化部署,打通开发、运维和测试的边界,实现一栈式管理。
- [**59**Star][2y] [Shell] [abhisek/pwnworks](https://github.com/abhisek/pwnworks) Exploitation challenges for CTF
+- [**58**Star][5d] [Java] [daggerok/streaming-file-server](https://github.com/daggerok/streaming-file-server) full-stack java file server with no limitation for files uploads and downloads: spring-boot + Gradle Kotlin DSL, Gradle buildSrc, postgres / h2, apache fileUpload, lombok, mustache, docker, jgiven, powermock, gradle, CI, bootstrap 4, bootstrap-filelinput, webjars, maven github-release-plugin, nginx, haproxy, reverse-proxy
- [**58**Star][3y] [v2ray/planning](https://github.com/v2ray/planning) Deprecated. Please use v2ray-core for feature requests
-- [**58**Star][10m] [Py] [shellphish/shellphish-afl](https://github.com/shellphish/shellphish-afl) A pip wrapper around AFL.
+- [**58**Star][2m] [Py] [shellphish/shellphish-afl](https://github.com/shellphish/shellphish-afl) A pip wrapper around AFL.
- [**58**Star][3y] [Shell] [r00t-3xp10it/netool-toolkit](https://github.com/r00t-3xp10it/netool-toolkit) MitM pentesting opensource toolkit (scan/sniff/exploit) -- NOT SUPORTED ANYMORE --
+- [**58**Star][4y] [HTML] [kevthehermit/spearphisher](https://github.com/kevthehermit/spearphisher) A Web Application to Send and Track Spear Phishing Campaigns
+- [**58**Star][1m] [JS] [medicean/as_bypass_php_disable_functions](https://github.com/medicean/as_bypass_php_disable_functions) antsword bypass PHP disable_functions
- [**58**Star][7y] [Shell] [lozzd/autonmap](https://github.com/lozzd/autonmap) Automated daily scan using Nmap and report on the differences
+- [**58**Star][6m] [JS] [yzyjim/shadowsocks-back-china-pac](https://github.com/yzyjim/shadowsocks-back-china-pac) Shadowsocks翻墙回国PAC规则
- [**58**Star][3m] [C++] [vlad-tri/cve-2019-1132](https://github.com/vlad-tri/cve-2019-1132) EoP POC for CVE-2019-1132
+- [**58**Star][2d] [C] [cisco/mercury](https://github.com/cisco/mercury) network fingerprinting and packet metadata capture
- [**58**Star][1y] [Shell] [cyb0r9/dvr-exploiter](https://github.com/Cyb0r9/DVR-Exploiter) DVR-Exploiter a Bash Script Program Exploit The DVR's Based on CVE-2018-9995
- [**58**Star][3y] [Py] [deadbits/intersect-2.5](https://github.com/deadbits/Intersect-2.5) Post-Exploitation Framework
- [**58**Star][2y] [Shell] [offxec/samurai](https://github.com/OffXec/Samurai) Samurai Email Discovery - SED is a email discovery framework that grabs emails via google dork, company name, or domain name.
- [**58**Star][2y] [Ruby] [hammackj/risu](https://github.com/hammackj/risu) Risu is Nessus parser, that converts the generated reports into a ActiveRecord database, this allows for easy report generation and vulnerability verification.
- [**58**Star][7m] [HTML] [leonwxqian/lucky-js-fuzz](https://github.com/leonwxqian/lucky-js-fuzz) A web page based fuzzer that generates random JS statements then fuzz in the web-browser.
-- [**58**Star][4y] [Java] [zd2100/pscout](https://github.com/zd2100/pscout)
- [**58**Star][8y] [Ruby] [wuntee/androidaudittools](https://github.com/wuntee/androidaudittools)
-- [**58**Star][1y] [C#] [wledfor2/playhooky](https://github.com/wledfor2/playhooky) C# Runtime Hooking Library for .NET/Mono/Unity.
+- [**58**Star][3y] [CSS] [wizardforcel/sploitfun-linux-x86-exp-tut-zh](https://github.com/wizardforcel/sploitfun-linux-x86-exp-tut-zh)
- [**58**Star][2y] [Py] [wavestone-cdt/dyode](https://github.com/wavestone-cdt/dyode) A low-cost, DIY data diode for ICS
-- [**58**Star][8m] [Shell] [vay3t/hax0rpi](https://github.com/vay3t/hax0rpi) A Raspberry Pi Hacker Tools suite
+- [**58**Star][2y] [Py] [vivami/ms17-010](https://github.com/vivami/ms17-010) MS17-010
+- [**58**Star][9m] [Shell] [vay3t/hax0rpi](https://github.com/vay3t/hax0rpi) A Raspberry Pi Hacker Tools suite
- [**58**Star][2y] [JS] [vah13/win_zip_password](https://github.com/vah13/win_zip_password) Python script to hook ZIP files passwords in Windows 10
- [**58**Star][7m] [tyranid/infosec-presentations](https://github.com/tyranid/infosec-presentations) A repository of previous info-sec presentations I've presented.
-- [**58**Star][4m] [Zeek] [tylabs/dovehawk](https://github.com/tylabs/dovehawk) Dovehawk is a Zeek module that automatically imports MISP indicators and reports Sightings
+- [**58**Star][5y] [C++] [tyranid/exploitdotnetdcom](https://github.com/tyranid/exploitdotnetdcom) A tool to exploit .NET DCOM for EoP and RCE. Is fixed in latest versions of the .NET.
+- [**58**Star][6m] [Py] [turr0n/firebase](https://github.com/turr0n/firebase) Exploiting misconfigured firebase databases
- [**58**Star][6m] [Lua] [trisulnsm/trisul-scripts](https://github.com/trisulnsm/trisul-scripts) Ready to run scripts for network analysis
+- [**58**Star][4d] [tonyphipps/siem](https://github.com/tonyphipps/siem) SIEM Tactics, Techiques, and Procedures
- [**58**Star][1y] [Py] [tarlogicsecurity/arecibo](https://github.com/tarlogicsecurity/arecibo) Arecibo: Endpoint for Out-of-Band Exfiltration (DNS & HTTP)
-- [**58**Star][4m] [sukkaw/cloudflare-block-bad-bot-ruleset](https://github.com/sukkaw/cloudflare-block-bad-bot-ruleset)
-- [**58**Star][1y] [C] [sourceincite/cve-2018-8440](https://github.com/sourceincite/cve-2018-8440) CVE-2018-8440 standalone exploit
- [**58**Star][1y] [PHP] [slangji/wp-missed-schedule](https://github.com/slangji/wp-missed-schedule) Find only missed schedule posts, every 15 minutes, and republish correctly 10 items each session. The Original plugin (only this) no longer available on WordPress.org for explicit author request! Compatible with WP 2.1+ to 4.9+ and 5.0-beta3 (100.000+ installs 300.000+ downloads 2016-04-13) Please: do not install unauthorized malware cloned forked!
-- [**58**Star][1y] [C] [skeeto/ptrace-examples](https://github.com/skeeto/ptrace-examples) Examples for Linux ptrace(2)
- [**58**Star][3m] [Py] [simplysecurity/simplydomain](https://github.com/simplysecurity/simplydomain) Subdomain brute force focused on speed and data serialization
- [**58**Star][1m] [she11c0der/scanners-box](https://github.com/she11c0der/scanners-box) 安全从业人员常用开源工具资料合集
- [**58**Star][3y] [Py] [sensepost/xrdp](https://github.com/sensepost/xrdp) A rudimentary remote desktop tool for the X11 protocol exploiting unauthenticated x11 sessions
-- [**58**Star][2y] [Go] [sensepost/notruler](https://github.com/sensepost/notruler) The opposite of Ruler, provides blue teams with the ability to detect Ruler usage against Exchange.
- [**58**Star][4y] [C++] [rootkitsmm/win10pcap-exploit](https://github.com/rootkitsmm/win10pcap-exploit) Exploit Win10Pcap Driver to enable some Privilege in our process token ( local Privilege escalation )
- [**58**Star][2y] [C] [riscybusiness/riscypacker](https://github.com/riscybusiness/riscypacker) Process Hollowing Packer
-- [**58**Star][15d] [C] [riscure/optee_fuzzer](https://github.com/riscure/optee_fuzzer) This repository contains the code for a fuzzing prototype for the OP-TEE system call interface using AFL.
- [**58**Star][3y] [rehints/windbg](https://github.com/rehints/windbg)
- [**58**Star][2y] [PHP] [raesene/bwapp](https://github.com/raesene/bwapp)
+- [**58**Star][3d] [PS] [quake4/mindminer](https://github.com/quake4/mindminer) MindMiner - the miner manager programm with online monitoring
- [**58**Star][6y] [Java] [pwntester/xmldecoder](https://github.com/pwntester/xmldecoder) RCE Exploit PoC for XMLDecoder
- [**58**Star][1y] [Java] [psycopaths/jdart](https://github.com/psycopaths/jdart) A dynamic symbolic analysis tool for Java
-- [**58**Star][4y] [Py] [psychomario/pyinject](https://github.com/psychomario/pyinject) A python module to help inject shellcode/DLLs into windows processes
- [**58**Star][7m] [JS] [pownjs/pown-proxy](https://github.com/pownjs/pown-proxy) Pown Proxy is a versatile web application security testing proxy with cool TUI features.
- [**58**Star][10m] [Java] [portswigger/replicator](https://github.com/portswigger/replicator) Burp extension to help developers replicate findings from pen tests
- [**58**Star][5y] [C] [poliva/dexinfo](https://github.com/poliva/dexinfo) A very rudimentary Android DEX file parser
+- [**58**Star][6m] [Rust] [poc-consortium/scavenger](https://github.com/poc-consortium/scavenger) A fast Burstcoin miner written in Rust
- [**58**Star][2y] [Shell] [p292/nackered](https://github.com/p292/nackered) This is a bash script to bypass 802.1x NAC
+- [**58**Star][2y] [C] [outflanknl/external_c2](https://github.com/outflanknl/external_c2) POC for Cobalt Strike external C2
- [**58**Star][7y] [Py] [opensecurityresearch/pentest-scripts](https://github.com/opensecurityresearch/pentest-scripts)
-- [**58**Star][4y] [C++] [oowoodone/vmp_odplugin](https://github.com/oowoodone/vmp_odplugin) VMProtect OD Plugin
- [**58**Star][3y] [Py] [nopernik/fuzzbunch_wrapper](https://github.com/nopernik/fuzzbunch_wrapper) Fuzzbunch Python-Wine wrapper
- [**58**Star][2y] [C] [noloader/sha-intrinsics](https://github.com/noloader/sha-intrinsics) SHA-1, SHA-256 and SHA-512 compression functions using Intel, ARMv8 and Power8 SHA intrinsics
- [**58**Star][2y] [Java] [nightoftwelve/virtualhookex](https://github.com/nightoftwelve/virtualhookex) Android application hooking tool based on VirtualHook/VirtualApp
- [**58**Star][3y] [nidom/buff](https://github.com/nidom/buff) A proxy tool for macOS.
+- [**58**Star][4y] [HTML] [nccgroup/iodide](https://github.com/nccgroup/iodide) The Cisco IOS Debugger and Integrated Disassembler Environment
- [**58**Star][1y] [C++] [my-first-pr/hacktoberfest-2018](https://github.com/my-first-pr/hacktoberfest-2018)
- [**58**Star][1y] [C] [mrgeffitas/hwfwbypass](https://github.com/mrgeffitas/hwfwbypass)
- [**58**Star][2y] [JS] [monkeym4ster/domainfuzz](https://github.com/monkeym4ster/domainfuzz) Domain name permutation engine for detecting typo squatting, phishing and corporate espionage
- [**58**Star][8m] [Assembly] [mist64/c64rom](https://github.com/mist64/c64rom) Commodore 64 BASIC and KERNAL Source
- [**58**Star][5y] [Go] [mikkolehtisalo/cvesync](https://github.com/mikkolehtisalo/cvesync) CVE feed synchronization to issue management system
-- [**58**Star][2y] [Visual Basic] [mgeeky/robustpentestmacro](https://github.com/mgeeky/robustpentestmacro) This is a rich-featured Visual Basic macro code for use during Penetration Testing assignments, implementing various advanced post-exploitation techniques.
- [**58**Star][3y] [ASP] [merttasci/weapons4pentester](https://github.com/merttasci/weapons4pentester)
- [**58**Star][7m] [JS] [mdslab/wstun](https://github.com/mdslab/wstun) Tunnels and reverse tunnels over WebSocket
- [**58**Star][6y] [Py] [malwarelu/tools](https://github.com/malwarelu/tools) Malware.lu tools
-- [**58**Star][5y] [CoffeeScript] [lupino/shadowsocks-gui](https://github.com/lupino/shadowsocks-gui) Shadowsocks GUI client
-- [**58**Star][5m] [C] [lazenca/kernel-exploit-tech](https://github.com/lazenca/kernel-exploit-tech) Linux Kernel exploitation Tutorial.
-- [**58**Star][3y] [PowerShell] [killswitch-gui/persistence-survivability](https://github.com/killswitch-gui/persistence-survivability) Powershell Persistence Locator
+- [**58**Star][6y] [CoffeeScript] [lupino/shadowsocks-gui](https://github.com/lupino/shadowsocks-gui) Shadowsocks GUI client
+- [**58**Star][2y] [Java] [littlerich/wechatluckymoney](https://github.com/littlerich/wechatluckymoney) 本开源项目为Xposed练手代码,可以从中深入了解使用Xposed的用法和源码逆向分析能力
+- [**58**Star][3y] [PS] [killswitch-gui/persistence-survivability](https://github.com/killswitch-gui/persistence-survivability) Powershell Persistence Locator
- [**58**Star][2y] [Shell] [kevthehermit/pentest](https://github.com/kevthehermit/pentest) Just a collection of pentest stuffs
+- [**58**Star][2y] [C] [jas502n/ubuntu-0day](https://github.com/jas502n/ubuntu-0day) all 4.4 ubuntu aws instances are vulnerable
- [**58**Star][5y] [C++] [ivanfratric/ropguard](https://github.com/ivanfratric/ropguard) Runtime Prevention of Return-Oriented Programming Attacks
- [**58**Star][2y] [C++] [int0/processisolator](https://github.com/int0/processisolator)
+- [**58**Star][3y] [C] [infosecguerrilla/reflectivesoinjection](https://github.com/infosecguerrilla/reflectivesoinjection) Reflective SO injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process.
- [**58**Star][2y] [Py] [hasherezade/crypto_utils](https://github.com/hasherezade/crypto_utils) Set of my small utils related to cryptography, encoding, decoding etc
- [**58**Star][3y] [hackstar7/wanacry](https://github.com/hackstar7/wanacry) WannaCry Ransomware
- [**58**Star][7y] [gynophage/solarized_ida](https://github.com/gynophage/solarized_ida) "Solarized Dark" color scheme for IDA Pro.
-- [**58**Star][15d] [C] [grehack/ctf-challs](https://github.com/grehack/ctf-challs) Here are the challenges (including sources) of the GreHack CTF.
+- [**58**Star][28d] [HTML] [gwen001/actarus](https://github.com/gwen001/actarus) Actarus is a custom tool for bug bounty
+- [**58**Star][17d] [C] [grehack/ctf-challs](https://github.com/grehack/ctf-challs) Here are the challenges (including sources) of the GreHack CTF.
- [**58**Star][1y] [C++] [fjh658/hexrayscodexplorer](https://github.com/fjh658/hexrayscodexplorer) Hex-Rays Decompiler plugin for better code navigation. Add support ida7.0/7.1/7.2 for macOS
- [**58**Star][2y] [Go] [evilsocket/ftrace](https://github.com/evilsocket/ftrace) Go library to trace Linux syscalls using the FTRACE kernel framework.
- [**58**Star][2y] [C++] [eternalsakura/ctf_pwn](https://github.com/eternalsakura/ctf_pwn)
@@ -11147,40 +11849,47 @@ networking routines
- [**58**Star][10m] [Py] [dogoncouch/logdissect](https://github.com/dogoncouch/logdissect) CLI utility and Python module for analyzing log files and other data.
- [**58**Star][4y] [C] [dev-zzo/exploits-nt-privesc](https://github.com/dev-zzo/exploits-nt-privesc) Exploit collection for NT privilege escalation
- [**58**Star][4m] [JS] [detroitenglish/haveibeenpwned-zxcvbn-lambda-api](https://github.com/detroitenglish/haveibeenpwned-zxcvbn-lambda-api) Deploy your own secure API to estimate password strength and check haveibeenpwned for known matches - HTTPS by force, server not required, fire and brimstone sold separately
-- [**58**Star][8y] [JS] [davepacheco/node-heap-dump](https://github.com/davepacheco/node-heap-dump) Testing node heap dumps
-- [**58**Star][5m] [Shell] [d4rk007/blueghost](https://github.com/d4rk007/blueghost) A network tool designed to assist blue teams in banning attackers from linux servers.
+- [**58**Star][6m] [Shell] [d4rk007/blueghost](https://github.com/d4rk007/blueghost) A network tool designed to assist blue teams in banning attackers from linux servers.
- [**58**Star][3y] [PHP] [cspf-founder/btslab](https://github.com/cspf-founder/btslab) Vulnerable web application
- [**58**Star][4y] [C++] [codereversing/directx9hook](https://github.com/codereversing/directx9hook) Runtime DirectX9 Hooking
- [**58**Star][1y] [Py] [coalfire-research/sqlinator](https://github.com/coalfire-research/sqlinator) Automatically forward HTTP GET & POST requests to SQLMap's API to test for SQLi and XSS
+- [**58**Star][9m] [Py] [cnotin/splunkwhisperer2](https://github.com/cnotin/splunkwhisperer2) Local privilege escalation, or remote code execution, through Splunk Universal Forwarder (UF) misconfigurations
- [**58**Star][5m] [Go] [cloudposse/sudosh](https://github.com/cloudposse/sudosh) Shell wrapper to run a login shell with `sudo` as the current user for the purpose of audit logging
- [**58**Star][2y] [Py] [circl/pymisp](https://github.com/circl/pymisp) Please use this repository instead:
-- [**58**Star][7y] [C] [chokepoint/jynx2](https://github.com/chokepoint/jynx2) JynxKit2 is an LD_PRELOAD userland rootkit based on the original JynxKit. The backdoor has been replaced with an "accept()" system hook.
- [**58**Star][4m] [C++] [changeofpace/mouhidinputhook](https://github.com/changeofpace/mouhidinputhook) MouHidInputHook enables users to filter, modify, and inject mouse input data packets into the input data stream of HID USB mouse devices without modifying the mouse device stacks.
-- [**58**Star][12d] [C++] [cert-polska/ursadb](https://github.com/cert-polska/ursadb) Trigram database written in C++, suited for malware indexing
+- [**58**Star][14d] [C++] [cert-polska/ursadb](https://github.com/cert-polska/ursadb) Trigram database written in C++, suited for malware indexing
- [**58**Star][4y] [Py] [cc06/dns_transfer_check](https://github.com/cc06/dns_transfer_check) 一个用来批量检测网站是否存在域传送漏洞的Python脚本
+- [**58**Star][5y] [Py] [bwall/extracthosts](https://github.com/bwall/extracthosts) Extracts hosts (IP/Hostnames) from files
+- [**58**Star][3y] [Shell] [buginux/flexloader](https://github.com/buginux/flexloader) 使用 FLEX 调试任意第三方应用
- [**58**Star][2y] [Py] [brianwarehime/insp3ctor](https://github.com/brianwarehime/insp3ctor) AWS S3 Bucket/Object Finder
- [**58**Star][3y] [C++] [azerg/remote_dll_injector](https://github.com/azerg/remote_dll_injector) Stealth DLL injector
+- [**58**Star][3y] [Batchfile] [ayra/zipbomb](https://github.com/ayra/zipbomb) About an old technology that still screws up some anti virus software
- [**58**Star][6m] [autodesk/continuous-threat-modeling](https://github.com/autodesk/continuous-threat-modeling) A Continuous Threat Modeling methodology
-- [**58**Star][11d] [Java] [appsecco/vyapi](https://github.com/appsecco/vyapi) VyAPI - A cloud based vulnerable hybrid Android App
+- [**58**Star][13d] [Java] [appsecco/vyapi](https://github.com/appsecco/vyapi) VyAPI - A cloud based vulnerable hybrid Android App
+- [**58**Star][10m] [Go] [appliscale/cloud-security-audit](https://github.com/appliscale/cloud-security-audit) A command line security audit tool for Amazon Web Services
- [**58**Star][2y] [PHP] [alisummer/qqipdetector](https://github.com/alisummer/qqipdetector) 探测某个或某些QQ用户的IP。 代码非常烂,也没有注释。
-- [**58**Star][1y] [HTML] [aglcaicai/kalitoolsmanual](https://github.com/aglcaicai/kalitoolsmanual) Kali Linux 工具合集中文说明书
- [**58**Star][3y] [Py] [adulau/malwareclassifier](https://github.com/adulau/malwareclassifier) Malware Classifier From Network Captures
+- [**58**Star][3m] [Java] [aagarwal1012/image-steganography-library-android](https://github.com/aagarwal1012/image-steganography-library-android)
- [**58**Star][2y] [3gstudent/cve-2017-8464-exp](https://github.com/3gstudent/cve-2017-8464-exp) Support x86 and x64
+- [**57**Star][2y] [Py] [yangzheng10/ss](https://github.com/yangzheng10/ss) 利用爬虫科学上网
+- [**57**Star][1y] [Py] [vonsdite/auto_shadowsocks](https://github.com/vonsdite/auto_shadowsocks) Shadowsocks. 科学上网, 仅供学习。是免费的服务器,可能存在科学上网不稳定。
+- [**57**Star][30d] [zscdumin/vpn](https://github.com/zscdumin/vpn) ShadowSocks 翻墙(收费服务器合租套餐:180元/年、50元/季度、20元/月,需要的可以联系我)
+- [**57**Star][3d] [Rust] [leo-lb/wpbrute-rs](https://github.com/leo-lb/wpbrute-rs) High performance WordPress login bruteforcer with automatic concurrency for maximum amount of tries per second.
- [**57**Star][6m] [JS] [pownjs/pown-cdb](https://github.com/pownjs/pown-cdb) Automate common Chrome Debug Protocol tasks to help debug web applications from the command-line and actively monitor and intercept HTTP requests and responses.
- [**57**Star][1m] [Ruby] [trustedsec/honeybadger](https://github.com/trustedsec/honeybadger)
-- [**57**Star][4y] [HTML] [kevthehermit/spearphisher](https://github.com/kevthehermit/spearphisher) A Web Application to Send and Track Spear Phishing Campaigns
- [**57**Star][6m] [JS] [doctormckay/node-globaloffensive](https://github.com/doctormckay/node-globaloffensive) A Node.js module to connect to and interact with the CS:GO game coordinator. Mostly used to get item data.
- [**57**Star][1y] [C++] [m0n73/dc26_badgeemulator](https://github.com/m0n73/dc26_badgeemulator) This code was used with Arduino Nano to create the OG defcon 26 badge emulator.
-- [**57**Star][6m] [JS] [yzyjim/shadowsocks-back-china-pac](https://github.com/yzyjim/shadowsocks-back-china-pac) Shadowsocks翻墙回国PAC规则
-- [**57**Star][2y] [PowerShell] [obscuritylabs/infophish](https://github.com/obscuritylabs/InfoPhish) InfoPath Phishing Repo Resource
+- [**57**Star][3m] [Py] [gosecure/freshonions-torscraper](https://github.com/gosecure/freshonions-torscraper) Fresh Onions is an open source TOR spider / hidden service onion crawler
+- [**57**Star][7d] [Py] [trailofbits/polyfile](https://github.com/trailofbits/polyfile) A utility for mapping the file formats embedded within a single file
+- [**57**Star][2y] [PS] [obscuritylabs/infophish](https://github.com/obscuritylabs/InfoPhish) InfoPath Phishing Repo Resource
- [**57**Star][6m] [Py] [pyca/service-identity](https://github.com/pyca/service-identity) Service Identity Verification for Python
-- [**57**Star][1y] [Py] [vysecurity/checko365](https://github.com/vysecurity/checkO365) checkO365 is a tool to check if a target domain is using O365
+- [**57**Star][2y] [Py] [vysecurity/checko365](https://github.com/vysecurity/checkO365) checkO365 is a tool to check if a target domain is using O365
- [**57**Star][3y] [shmilylty/awesome-application-security](https://github.com/shmilylty/awesome-application-security) awesome application security chinese version
- [**57**Star][3y] [JS] [auth0-samples/auth0-sso-dashboard](https://github.com/auth0-samples/auth0-sso-dashboard) [DEPRECATED] App Single Sign On Dashboard using Auth0
- [**57**Star][4y] [Go] [zond/qisniff](https://github.com/zond/qisniff)
- [**57**Star][3y] [JS] [xtr4nge/fruityc2-client](https://github.com/xtr4nge/fruityc2-client) FruityC2 is a post-exploitation (and open source) framework based on the deployment of agents on compromised machines. Agents are managed from a web interface under the control of an operator.
- [**57**Star][4y] [C++] [xpn/getsystem-offline](https://github.com/xpn/getsystem-offline) Small tool to get a SYSTEM shell
-- [**57**Star][3y] [CSS] [wizardforcel/sploitfun-linux-x86-exp-tut-zh](https://github.com/wizardforcel/sploitfun-linux-x86-exp-tut-zh)
+- [**57**Star][2y] [JS] [windard/sm4](https://github.com/windard/sm4) SM4 by JavaScript
- [**57**Star][2m] [Py] [williballenthin/idawilli](https://github.com/williballenthin/idawilli) IDA Pro resources, scripts, and configurations
- [hint_calls](https://github.com/williballenthin/idawilli/blob/master/plugins/hint_calls/readme.md) IDA plugin to display the calls and strings referenced by a function as hints.
- [dynamic_hints](https://github.com/williballenthin/idawilli/blob/master/plugins/dynamic_hints/readme.md) an example plugin that demonstrates how to provide custom hints with dynamic data.
@@ -11194,435 +11903,473 @@ networking routines
- [**57**Star][1y] [Py] [warflop/whoisleak](https://github.com/warflop/whoisleak) This tool queries the emails that registered the domain and verifies if they were leaked in some data leak.
- [**57**Star][2y] [wangyihang/awesome-web-security](https://github.com/wangyihang/awesome-web-security)
- [**57**Star][5m] [C++] [walkingcat/symdiff](https://github.com/walkingcat/symdiff) Diff tool for comparing symbols in PDB files
-- [**57**Star][2y] [Py] [vivami/ms17-010](https://github.com/vivami/ms17-010) MS17-010
+- [**57**Star][3y] [Java] [vulnerscom/burp-dirbuster](https://github.com/vulnerscom/burp-dirbuster) Dirbuster plugin for Burp Suite
+- [**57**Star][3m] [uniking/dingding](https://github.com/uniking/dingding) 免root远程钉钉打卡,支持wifi和gps定位,仅支持android系统。本项目出于学习目的,仅用于学习玩耍,请于24小时后自行删除。xposed, crack,package,dingtalk,remote control
+- [**57**Star][2y] [HTML] [trustedsec/cors-poc](https://github.com/trustedsec/cors-poc)
- [**57**Star][2y] [HTML] [troydo42/cia-hacking-tools](https://github.com/troydo42/cia-hacking-tools) WikiLeaks Vault 7 CIA Hacking Tools
+- [**57**Star][5m] [C++] [troybowman/dtxmsg](https://github.com/troybowman/dtxmsg) an IDA plugin that helped me reverse-engineer the DTXConnectionServices framework.
- [**57**Star][2y] [JS] [transparencytoolkit/harvester](https://github.com/transparencytoolkit/harvester) Web crawling and document processing through a usable interface.
- [**57**Star][2y] [Py] [tcpiplab/web-app-hacking-notes](https://github.com/tcpiplab/web-app-hacking-notes) Notes I've taken while working through various web app pentesting labs.
- [**57**Star][2y] [Shell] [tanprathan/fridpa](https://github.com/tanprathan/fridpa) An automated wrapper script for patching iOS applications (IPA files) and work on non-jailbroken device
- [**57**Star][3y] [Py] [t3rry7f/badtunnel_exp](https://github.com/t3rry7f/badtunnel_exp) Usage: python badtunnel.py wpad_server_ip
- [**57**Star][2y] [Py] [superhuahua/xunfenges](https://github.com/superhuahua/xunfenges)
-- [**57**Star][10m] [sukaralin/php_code_audit_project](https://github.com/sukaralin/php_code_audit_project) 该项目用来记录,我用来练手的PHP代码审计项目。
-- [**57**Star][5y] [Py] [sqall01/zwoelf](https://github.com/sqall01/zwoelf) An ELF parsing and manipulation library for Python
- [**57**Star][6y] [Java] [spiderlabs/burpnotesextension](https://github.com/spiderlabs/burpnotesextension) Burp Notes Extension is a plugin for Burp Suite that adds a Notes tab. The tool aims to better organize external files that are created during penetration testing.
-- [**57**Star][10d] [JS] [silverwind/oui](https://github.com/silverwind/oui) Look up MAC addresses for their vendor in the IEEE OUI database
-- [**57**Star][13d] [Rust] [shssoichiro/zxcvbn-rs](https://github.com/shssoichiro/zxcvbn-rs) Port of Dropbox's zxcvbn password strength library for Rust
+- [**57**Star][5d] [JS] [silverwind/oui](https://github.com/silverwind/oui) Look up MAC addresses for their vendor in the IEEE OUI database
+- [**57**Star][15d] [Rust] [shssoichiro/zxcvbn-rs](https://github.com/shssoichiro/zxcvbn-rs) Port of Dropbox's zxcvbn password strength library for Rust
- [**57**Star][2y] [Py] [s1kr10s/struts2shell](https://github.com/s1kr10s/struts2shell)
-- [**57**Star][11m] [TypeScript] [roryrjb/iplocation](https://github.com/roryrjb/iplocation) get IP location information using various providers
+- [**57**Star][4m] [C] [rub-syssec/antifuzz](https://github.com/rub-syssec/antifuzz) Impeding Fuzzing Audits of Binary Executables
+- [**57**Star][3d] [TS] [roryrjb/iplocation](https://github.com/roryrjb/iplocation) (looking for a maintainer) get IP location information using various providers
- [**57**Star][2y] [Py] [roberteldersoftware/roberteldersoftwarediff](https://github.com/roberteldersoftware/roberteldersoftwarediff)
+- [**57**Star][5y] [C] [rmusser01/hyperdbg](https://github.com/rmusser01/hyperdbg) Automatically exported from code.google.com/p/hyperdbg
- [**57**Star][12m] [C] [qssec/hades-lite](https://github.com/qssec/hades-lite) Hades-lite 青松云安全开源的一个内核级 Anti-ddos 的驱动程序,轻量且高效,构建高性能代理防御,单机可抵御7Gb DDoS攻击
- [**57**Star][1y] [Py] [programa-stic/marvin-static-analyzer](https://github.com/programa-stic/marvin-static-analyzer) Marvin static analyzer is an Android application vulnerability scanner. The framework uses androguard and Static Android Analysis Framework (SAAF).
- [**57**Star][1y] [C++] [petrgeorgievsky/gtarenderhook](https://github.com/petrgeorgievsky/gtarenderhook) GTA SA rendering hook
- [**57**Star][3m] [pe3zx/mthc](https://github.com/pe3zx/mthc) All-in-one bundle of MISP, TheHive and Cortex
-- [**57**Star][2y] [C] [outflanknl/external_c2](https://github.com/outflanknl/external_c2) POC for Cobalt Strike external C2
-- [**57**Star][9m] [Py] [opsdisk/metagoofil](https://github.com/opsdisk/metagoofil) An updated version of metagoofil
+- [**57**Star][2d] [Py] [opsdisk/metagoofil](https://github.com/opsdisk/metagoofil) An updated version of metagoofil
- [**57**Star][2y] [C++] [openjailbreak/jailbreakme-1.0](https://github.com/openjailbreak/jailbreakme-1.0) The first publicly available userland jailbreak for iPhoneOS 1.0.2/1.1.1 by cmw and dre
- [**57**Star][9m] [Go] [openbazaar/go-onion-transport](https://github.com/openbazaar/go-onion-transport) Tor onion transport for IPFS
+- [**57**Star][6m] [C#] [nyan-x-cat/limeusb-csharp](https://github.com/nyan-x-cat/limeusb-csharp) Malware USB Spread | Example C#
+- [**57**Star][3y] [Py] [nonenotnull/ssrfx](https://github.com/nonenotnull/ssrfx) CVE-2014-4210+Redis未授权访问
- [**57**Star][2y] [Java] [nikolamilosevic86/owasp-seraphimdroid](https://github.com/nikolamilosevic86/owasp-seraphimdroid) OWASP Seraphimdroid is an open source project with aim to create, as a community, an open platform for education and protection of Android users against privacy and security threats.
-- [**57**Star][4y] [HTML] [nccgroup/iodide](https://github.com/nccgroup/iodide) The Cisco IOS Debugger and Integrated Disassembler Environment
-- [**57**Star][2y] [C] [nccgroup/cachegrab](https://github.com/nccgroup/cachegrab) 执行和可视化针对软件的由 trace 驱动的缓存攻击(需要启用TrustZone 的 ARMv8 内核)
- [**57**Star][2y] [mrash/afl-cve](https://github.com/mrash/afl-cve) A collection of vulnerabilities discovered by the AFL fuzzer (afl-fuzz)
- [**57**Star][2y] [C#] [mch2112/sharp80](https://github.com/mch2112/sharp80) TRS80 Emulator for Windows
- [**57**Star][2y] [Py] [mame82/p4wnp1_nexmon_additions](https://github.com/mame82/p4wnp1_nexmon_additions)
- [**57**Star][5m] [Py] [lion-gu/ioc-explorer](https://github.com/lion-gu/ioc-explorer) Explore Indicators of Compromise Automatically
- [**57**Star][2y] [Go] [linkedin/jaqen](https://github.com/linkedin/jaqen) Simple DNS rebinding
+- [**57**Star][4d] [Py] [lief-project/tutorials](https://github.com/lief-project/tutorials) Materials for LIEF tutorials
+- [**57**Star][2m] [lgg/awesome-keepass](https://github.com/lgg/awesome-keepass) Curated list of KeePass-related projects
- [**57**Star][10m] [Py] [leoid/b1tmass](https://github.com/leoid/b1tmass) Multiple Weaknesses Checking for Mass Subdomains [Deprecated]
+- [**57**Star][29d] [Go] [konimarti/opc](https://github.com/konimarti/opc) OPC DA client in Golang for monitoring and analyzing process data based on Windows COM.
+- [**57**Star][3y] [C] [k2/admmutate](https://github.com/k2/admmutate) Classic code from 1999+ I am fairly sure this is the first public polymorphic shellcode ever (best IMHO and others
- [**57**Star][1y] [Py] [jx-sec/jxotp](https://github.com/jx-sec/jxotp) 企业SSH登陆双因素认证系统
- [**57**Star][3y] [Shell] [justintime/docker-airsonos](https://github.com/justintime/docker-airsonos) Expose Sonos over Airplay via a Docker container
+- [**57**Star][ObjC] [jrock007/tob](https://github.com/jrock007/tob) Free, open-source and ad-less Tor web browser for iOS
+- [**57**Star][7m] [JS] [joevennix/lan-js](https://github.com/joevennix/lan-js) Probe LAN devices from a web browser.
+- [**57**Star][25d] [Shell] [jmcerrejon/pikiss](https://github.com/jmcerrejon/pikiss) PiKISS for Raspberry Pi & ODROID-C1: A bunch of scripts with menu to make your life easier.
- [**57**Star][4y] [PHP] [jcarlosn/gzip-http-time](https://github.com/jcarlosn/gzip-http-time) PoC for getting remote HTTP Server date using gzip compressed HTTP Response
- [**57**Star][3y] [C++] [jaybosamiya/busysteg](https://github.com/jaybosamiya/busysteg)
-- [**57**Star][2y] [C] [jas502n/ubuntu-0day](https://github.com/jas502n/ubuntu-0day) all 4.4 ubuntu aws instances are vulnerable
+- [**57**Star][1m] [HTML] [j3ers3/passlist](https://github.com/j3ers3/passlist)
- [**57**Star][8m] [Shell] [itskindred/pyembed](https://github.com/itskindred/pyembed) Elementary bash script that embeds malicious python code within another piece of inconspicuous python code.
-- [**57**Star][1y] [PowerShell] [invokethreatguy/csasc](https://github.com/invokethreatguy/csasc) Cobalt Strike Aggressor Script Collection
-- [**57**Star][6m] [C++] [invictus1306/functrace](https://github.com/invictus1306/functrace) A function tracer
-- [**57**Star][3y] [C] [infosecguerrilla/reflectivesoinjection](https://github.com/infosecguerrilla/reflectivesoinjection) Reflective SO injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process.
+- [**57**Star][1y] [PS] [invokethreatguy/csasc](https://github.com/invokethreatguy/csasc) Cobalt Strike Aggressor Script Collection
+- [**57**Star][10d] [C++] [henrypp/errorlookup](https://github.com/henrypp/errorlookup) Simple tool for retrieving information about Windows errors codes.
+- [**57**Star][1y] [Py] [he1m4n6a/dictbuilder](https://github.com/he1m4n6a/dictbuilder) 渗透测试中字典生成工具
- [**57**Star][3y] [C] [hbowden/nextgen](https://github.com/hbowden/nextgen) A Genetic File, Syscall and Network Fuzzer.
-- [**57**Star][26d] [HTML] [gwen001/actarus](https://github.com/gwen001/actarus) Actarus is a custom tool for bug bounty
+- [**57**Star][4m] [Go] [hashmatter/p3lib](https://github.com/hashmatter/p3lib) privacy preserving primitives and protocols (p3) for routing and messaging in P2P networks
+- [**57**Star][6y] [Assembly] [hackedteam/core-win64](https://github.com/hackedteam/core-win64) RCS Agent for Windows (64bit)
+- [**57**Star][2y] [gy-games/shield](https://github.com/gy-games/shield) 基于Strom的日志实时流量分析主动防御(CCFirewall)系统
- [**57**Star][3m] [Rust] [guitmz/fe2o3](https://github.com/guitmz/fe2o3) Simple prepender virus written in Rust
-- [**57**Star][6m] [PowerShell] [gnieboer/gnuradio_windows_build_scripts](https://github.com/gnieboer/gnuradio_windows_build_scripts) A series of Powershell scripts to automatically download, build from source, and install GNURadio and -all- it's dependencies as 64-bit native binaries then package as an msi using Visual Studio 2015
+- [**57**Star][6m] [PS] [gnieboer/gnuradio_windows_build_scripts](https://github.com/gnieboer/gnuradio_windows_build_scripts) A series of Powershell scripts to automatically download, build from source, and install GNURadio and -all- it's dependencies as 64-bit native binaries then package as an msi using Visual Studio 2015
- [**57**Star][5m] [C#] [gigajew/powerdropper](https://github.com/gigajew/powerdropper) App that generates PowerShell dropper scripts for .NET executables
- [**57**Star][4y] [JS] [gattermeier/nodejs-virus](https://github.com/gattermeier/nodejs-virus) A Node.js Proof of Concept Virus
- [**57**Star][4y] [JS] [firebug/pixel-perfect](https://github.com/firebug/pixel-perfect)
-- [**57**Star][2m] [Java] [exalab/anlinux-adfree](https://github.com/exalab/anlinux-adfree) AnLinux, Ad free version.
+- [**57**Star][3m] [Java] [exalab/anlinux-adfree](https://github.com/exalab/anlinux-adfree) AnLinux, Ad free version.
+- [**57**Star][2y] [F#] [enkomio/anathema](https://github.com/enkomio/anathema) .NET instrumentation framework
- [**57**Star][5y] [C++] [datasoft/nova](https://github.com/datasoft/nova) Repo for the Open Source version of NOVA
-- [**57**Star][24d] [Rust] [ctsrc/pgen](https://github.com/ctsrc/pgen) Command-line passphrase generator
+- [**57**Star][3m] [C] [danielkrupinski/memject](https://github.com/danielkrupinski/memject) Simple Dll injector loading from memory. Supports PE header and entry point erasure. Written in C99.
+- [**57**Star][26d] [Rust] [ctsrc/pgen](https://github.com/ctsrc/pgen) Command-line passphrase generator
- [**57**Star][3y] [JS] [cryptogenic/ps4-4.0x-code-execution-poc](https://github.com/cryptogenic/ps4-4.0x-code-execution-poc) My edit of qwertyoruiopz 4.0x exploit PoC from
-- [**57**Star][9y] [C++] [cr4sh/drvhide-poc](https://github.com/cr4sh/drvhide-poc) Hidden kernel mode code execution for bypassing modern anti-rootkits.
+- [**57**Star][7y] [Py] [cr4sh/ida-vmware-gdb](https://github.com/cr4sh/ida-vmware-gdb) Helper script for Windows kernel debugging with IDA Pro on VMware + GDB stub
- [**57**Star][2y] [JS] [coincoin7/wireless-router-vulnerability](https://github.com/coincoin7/wireless-router-vulnerability) Vulnerability and exploiting
- [**57**Star][3y] [C] [codectile/paradise](https://github.com/codectile/paradise) x86/x86-64 hooking library
-- [**57**Star][9m] [Py] [cnotin/splunkwhisperer2](https://github.com/cnotin/splunkwhisperer2) Local privilege escalation, or remote code execution, through Splunk Universal Forwarder (UF) misconfigurations
-- [**57**Star][14d] [Py] [cleanunicorn/karl](https://github.com/cleanunicorn/karl) Monitor smart contracts deployed on blockchain and test against vulnerabilities with Mythril
-- [**57**Star][1y] [Py] [capt-meelo/telewreck](https://github.com/capt-meelo/telewreck) A Burp extension to detect and exploit versions of Telerik Web UI vulnerable to CVE-2017-9248.
+- [**57**Star][16d] [Py] [cleanunicorn/karl](https://github.com/cleanunicorn/karl) Monitor smart contracts deployed on blockchain and test against vulnerabilities with Mythril
+- [**57**Star][5m] [Py] [chrismaddalena/goreport](https://github.com/chrismaddalena/goreport) A Python script to collect campaign data from Gophish and generate a report
- [**57**Star][2y] [HTML] [bo0om/cve-2017-7089](https://github.com/bo0om/cve-2017-7089) Webkit uxss exploit (CVE-2017-7089)
+- [**57**Star][6m] [Py] [bao7uo/dp_crypto](https://github.com/bao7uo/dp_crypto) Base64-based encryption oracle exploit for CVE-2017-9248 (Telerik UI for ASP.NET AJAX dialog handler)
- [**57**Star][5y] [Shell] [bagder/keyfreq](https://github.com/bagder/keyfreq) Logs all key presses with a timestamp
-- [**57**Star][3y] [Batchfile] [ayra/zipbomb](https://github.com/ayra/zipbomb) About an old technology that still screws up some anti virus software
-- [**57**Star][10m] [Go] [appliscale/cloud-security-audit](https://github.com/appliscale/cloud-security-audit) A command line security audit tool for Amazon Web Services
- [**57**Star][12m] [JS] [antoinevastel/fp-collect](https://github.com/antoinevastel/fp-collect) Fingerprinting script of Fingerprint-Scanner
-- [**57**Star][2m] [Py] [angus-y/pyiris-backdoor](https://github.com/angus-y/pyiris-backdoor) PyIris-backdoor is a modular, stealthy and flexible remote-access-toolkit used to command and control other systems. Currently it is 80% through the alpha stage, has some bugs and a lot of incomplete features, feel free to contribute or help me out with this project its still under active development >_>
+- [**57**Star][8d] [Py] [angus-y/pyiris-backdoor](https://github.com/angus-y/pyiris-backdoor) PyIris-backdoor is a modular, stealthy and flexible remote-access-toolkit written completely in python used to command and control other systems. It is now in the beta stage, possibly perpetually. There are bugs still present in the framework, feel free to contribute or help me out with this project its still under active development >_>
+- [**57**Star][2d] [C++] [aliveteam/alive_reversing](https://github.com/aliveteam/alive_reversing) Re-implementation of Abe's Exoddus
+- [**57**Star][4m] [al0ne/nmap_bypass_ids](https://github.com/al0ne/nmap_bypass_ids) bypass IDS
+- [**57**Star][6d] [Py] [afagarap/malware-classification](https://github.com/afagarap/malware-classification) Towards Building an Intelligent Anti-Malware System: A Deep Learning Approach using Support Vector Machine for Malware Classification
- [**57**Star][3y] [Py] [acama/ctf](https://github.com/acama/ctf) Exploits for interesting CTF challenges I have worked on
- [**57**Star][2y] [Batchfile] [absolomb/pentesting](https://github.com/absolomb/pentesting) Pentesting Cheatsheets and Guides
-- [**57**Star][3m] [Java] [aagarwal1012/image-steganography-library-android](https://github.com/aagarwal1012/image-steganography-library-android)
-- [**57**Star][9m] [15pb/wechat_tools](https://github.com/15pb/wechat_tools) 微信插件,微信辅助工具
+- [**57**Star][10m] [15pb/wechat_tools](https://github.com/15pb/wechat_tools) 微信插件,微信辅助工具
- [**57**Star][7y] [IntrepidusGroup/mallory](https://bitbucket.org/intrepidusgroup/mallory)
+- [**56**Star][1m] [Shell] [125k/pwrdeauther](https://github.com/125k/pwrdeauther) This script allows you to deauth a specific SSID or an entire channel with mdk3 (MDK3 is more powerful than Aireplay)
- [**56**Star][2y] [Kotlin] [v2ray/v2rayng](https://github.com/v2ray/v2rayng) This project is currently discontinued. Please use this code with care and considering adopt it.
- [**56**Star][10m] [Py] [genymobile/copydeps](https://github.com/genymobile/copydeps) Analyze and copy library dependencies of ELF binaries
- [**56**Star][6y] [C] [pwning/plaidctf2014](https://github.com/pwning/plaidctf2014) Source for some problems from PlaidCTF 2014.
-- [**56**Star][24d] [Kotlin] [m1dr05/istheapp](https://github.com/m1dr05/istheapp) Open-source android spyware
-- [**56**Star][2m] [Py] [gosecure/freshonions-torscraper](https://github.com/gosecure/freshonions-torscraper) Fresh Onions is an open source TOR spider / hidden service onion crawler
-- [**56**Star][4m] [motherfuzzers/meetups](https://github.com/motherfuzzers/meetups) Materials from Fuzzing Bay Area meetups
-- [**56**Star][3m] [Py] [giantbranch/mipsaudit](https://github.com/giantbranch/mipsaudit) IDA script to assist in MIPS static scan
+- [**56**Star][28d] [Go] [evilsocket/pwngrid](https://github.com/evilsocket/pwngrid) (⌐■_■) - API server for pwnagotchi.ai
+- [**56**Star][6m] [Py] [rabbitmask/weblogicscanserver](https://github.com/rabbitmask/weblogicscanserver) 开启WeblogicScanV3.*系列,采用Server部署,支持远程Weblogic漏洞扫描
+- [**56**Star][1y] [Py] [thelsa/ueditor-getshell](https://github.com/thelsa/ueditor-getshell) ueditor .net getshell
+- [**56**Star][9m] [TS] [pengchujin/onesubscribe](https://github.com/pengchujin/onesubscribe) ss ssr v2ray 订阅管理 node 后端
+- [**56**Star][10m] [ObjC] [geosn0w/chaos](https://github.com/geosn0w/chaos) Chaos iOS < 12.1.2 PoC by
+- [**56**Star][3d] [Py] [ubernostrum/pwned-passwords-django](https://github.com/ubernostrum/pwned-passwords-django) Utilities for working with the Pwned Passwords database from Django.
+- [**56**Star][4m] [Py] [giantbranch/mipsaudit](https://github.com/giantbranch/mipsaudit) IDA script to assist in MIPS static scan
- [**56**Star][1m] [Shell] [125k/pwrdeauther](https://github.com/125K/PwrDeauther) This script allows you to deauth a specific SSID or an entire channel with mdk3 (MDK3 is more powerful than Aireplay)
-- [**56**Star][7m] [Py] [hatching/sflock](https://github.com/hatching/sflock) Sample staging & detonation utility to be used in combination with Cuckoo Sandbox.
+- [**56**Star][8m] [Py] [hatching/sflock](https://github.com/hatching/sflock) Sample staging & detonation utility to be used in combination with Cuckoo Sandbox.
- [**56**Star][6y] [PHP] [wkcaj/safecurl](https://github.com/wkcaj/safecurl) SSRF Protection Library for PHP -
- [**56**Star][8m] [Shell] [malscan/malscan](https://github.com/malscan/malscan) A fully featured malware scanner for Linux desktops and servers.
- [**56**Star][3y] [C] [zerosum0x0/shellcodedriver](https://github.com/zerosum0x0/shellcodedriver) Windows driver to execute arbitrary usermode code (essentially same vulnerability as capcom.sys)
- [**56**Star][1y] [zephrfish/xsspayloads](https://github.com/zephrfish/xsspayloads) Cross Site Scripting Payloads -- Variations
- [**56**Star][4y] [Ruby] [zenvdeluca/net_healer](https://github.com/zenvdeluca/net_healer) NET HEALER receive DDoS Attack reports from FastNetMon collectors allowing custom triggers on a per stage based actions.
-- [**56**Star][2y] [PowerShell] [xan7r/kerberoast](https://github.com/xan7r/kerberoast)
-- [**56**Star][2y] [JS] [windard/sm4](https://github.com/windard/sm4) SM4 by JavaScript
+- [**56**Star][4m] [Assembly] [xyzz/ghidra-mep](https://github.com/xyzz/ghidra-mep) Toshiba MeP processor module for GHIDRA
+- [**56**Star][2y] [PS] [xan7r/kerberoast](https://github.com/xan7r/kerberoast)
+- [**56**Star][4m] [Shell] [wuseman/wbruter](https://github.com/wuseman/wbruter) Crack your non-rooted android device pin code with 100% guarantee aslong as usb debugging has been enable. Wbruter also has support for parallel ssh brute forcing via pssh
- [**56**Star][2y] [Py] [williballenthin/python-sdb](https://github.com/williballenthin/python-sdb) Pure Python parser for Application Compatibility Shim Databases (.sdb files)
-- [**56**Star][3y] [Java] [vulnerscom/burp-dirbuster](https://github.com/vulnerscom/burp-dirbuster) Dirbuster plugin for Burp Suite
- [**56**Star][4y] [Py] [upgoingstar/hackerone_public_reports](https://github.com/upgoingstar/hackerone_public_reports) Finds all public bug reports on reported on Hackerone
- [**56**Star][11m] [Py] [unamer/pwnsandboxforctf](https://github.com/unamer/pwnsandboxforctf) Yet another sandbox for CTF challenge in AWD mode
- [**56**Star][2m] [C] [ufrisk/leechcore](https://github.com/ufrisk/leechcore) LeechCore - Physical Memory Acquisition Library & The LeechAgent Remote Memory Acquisition Agent
- [**56**Star][3y] [JS] [twz915/django-minicms](https://github.com/twz915/django-minicms) Django 开发简易的内容管理系统
-- [**56**Star][2y] [HTML] [trustedsec/cors-poc](https://github.com/trustedsec/cors-poc)
+- [**56**Star][2m] [Makefile] [trojan-gfw/openwrt-trojan](https://github.com/trojan-gfw/openwrt-trojan) trojan and its dependencies for OpenWrt
+- [**56**Star][8y] [C] [toucan-system/pmcma](https://github.com/toucan-system/pmcma) Post Memory Corruption Memory Analyzer
- [**56**Star][1y] [Py] [torque59/garfield](https://github.com/torque59/garfield) An offensive attack framework for Distributed Layer of Modern Applications
- [**56**Star][4m] [Py] [stef/pyrsp](https://github.com/stef/pyrsp) python implementation of the GDB Remote Serial Protocol
- [**56**Star][3y] [C++] [stealth/crash](https://github.com/stealth/crash) crypted admin shell: SSH-like strong crypto remote admin shell for Linux, BSD, Android, Solaris and OSX
- [**56**Star][8m] [HTML] [sophoslabs/cve-2018-18500](https://github.com/sophoslabs/cve-2018-18500) PoC for CVE-2018-18500 - Firefox Use-After-Free
- [**56**Star][11m] [C] [smihica/pyminizip](https://github.com/smihica/pyminizip) To create a password encrypted zip file in python.
-- [**56**Star][10d] [C++] [signetlabdei/lorawan](https://github.com/signetlabdei/lorawan) An ns-3 module for simulation of LoRaWAN networks.
+- [**56**Star][8d] [C++] [signetlabdei/lorawan](https://github.com/signetlabdei/lorawan) An ns-3 module for simulation of LoRaWAN networks.
- [**56**Star][4y] [Py] [siberas/arpwn](https://github.com/siberas/arpwn) Analysis tools and exploit sample scripts for Adobe Reader 10/11 and Acrobat Reader DC
- [**56**Star][10m] [Shell] [securityriskadvisors/talr](https://github.com/securityriskadvisors/talr) Threat Alert Logic Repository
- [**56**Star][2y] [WebAssembly] [seccon/seccon2017_online_ctf](https://github.com/seccon/seccon2017_online_ctf)
-- [**56**Star][4m] [C] [rub-syssec/antifuzz](https://github.com/rub-syssec/antifuzz) Impeding Fuzzing Audits of Binary Executables
+- [**56**Star][7m] [scubsrgroup/automatic-exploit-generation](https://github.com/scubsrgroup/automatic-exploit-generation) Something about AEG
- [**56**Star][7m] [OCaml] [rolfrolles/pandemicml](https://github.com/rolfrolles/pandemicml) Pandemic binary program analysis framework in OCaml (abandoned)
-- [**56**Star][18d] [Py] [rocky/python-xdis](https://github.com/rocky/python-xdis) Python cross-version bytecode library and disassembler
+- [**56**Star][2d] [Py] [rocky/python-xdis](https://github.com/rocky/python-xdis) Python cross-version bytecode library and disassembler
- [**56**Star][2m] [JS] [roccomuso/alveare](https://github.com/roccomuso/alveare)
-- [**56**Star][5y] [C] [rmusser01/hyperdbg](https://github.com/rmusser01/hyperdbg) Automatically exported from code.google.com/p/hyperdbg
- [**56**Star][2y] [C] [rgerganov/nfqsed](https://github.com/rgerganov/nfqsed) Modify network traffic with netfilter_queue
- [**56**Star][4y] [Py] [rehints/blackhat_2015](https://github.com/rehints/blackhat_2015) Distributing the REconstruction of High-Level IR for Large Scale Malware Analysis
- [**56**Star][2y] [Py] [rafiot/kittengroomer](https://github.com/rafiot/kittengroomer) USB key cleaner
+- [**56**Star][5m] [Py] [r3nt0n/bopscrk](https://github.com/r3nt0n/bopscrk) A tool to generate smart and powerful wordlists
+- [**56**Star][3y] [C] [pythonmaster41/go-for-oscp](https://github.com/pythonmaster41/go-for-oscp)
- [**56**Star][5m] [Java] [pnfsoftware/jeb2-androsig](https://github.com/pnfsoftware/jeb2-androsig) Android Library Code Recognition
-- [**56**Star][10m] [Py] [pirate/mesh-botnet](https://github.com/pirate/mesh-botnet)
+- [**56**Star][11m] [Py] [pirate/mesh-botnet](https://github.com/pirate/mesh-botnet)
- [**56**Star][1y] [Py] [p1kachu/talking-with-cars](https://github.com/p1kachu/talking-with-cars) CAN analysis - Use your car as a gamepad!
- [**56**Star][2y] [ouspg/fuzz-testing-beginners-guide](https://github.com/ouspg/fuzz-testing-beginners-guide) Fuzz testing: Beginner's guide
- [**56**Star][3y] [C] [opsxcq/exploit-blacknurse](https://github.com/opsxcq/exploit-blacknurse) Black Nurse DOS attack
- [**56**Star][9m] [JS] [obscuritylabs/os-cfdb](https://github.com/obscuritylabs/os-cfdb) Open Source - Common Findings DataBase (JSON & MD)
-- [**56**Star][6m] [C#] [nyan-x-cat/limeusb-csharp](https://github.com/nyan-x-cat/limeusb-csharp) Malware USB Spread | Example C#
- [**56**Star][4y] [C++] [nukem9/virtualdbg](https://github.com/nukem9/virtualdbg) Test code only. Not reliable for actual use.
- [**56**Star][4m] [PHP] [nextras/secured-links](https://github.com/nextras/secured-links) CSRF protection for Nette Framework presenters' signals.
- [**56**Star][4y] [Py] [newlog/exploiting](https://github.com/newlog/exploiting) Stuff you might use when exploiting software
+- [**56**Star][8d] [Java] [netflix/iep](https://github.com/netflix/iep) Insight Engineering Platform Components
+- [**56**Star][28d] [Py] [netflix-skunkworks/cloudaux](https://github.com/netflix-skunkworks/cloudaux) Cloud Auxiliary is a python wrapper and orchestration module for interacting with cloud providers
- [**56**Star][1y] [Py] [neo23x0/exotron](https://github.com/neo23x0/exotron) Sandbox feature upgrade with the help of wrapped samples
+- [**56**Star][3m] [Py] [nccgroup/hashcrack](https://github.com/nccgroup/hashcrack) Guesses hash types, picks some sensible dictionaries and rules for hashcat
- [**56**Star][2y] [Py] [mzeyong/cve-2017-13089](https://github.com/mzeyong/cve-2017-13089) CVE-2017-13089
+- [**56**Star][2y] [myndtt/ctf-site](https://github.com/myndtt/ctf-site) 介绍一些CTF训练的站点
- [**56**Star][2y] [C] [mwpcheung/ssl-kill-switch2](https://github.com/mwpcheung/ssl-kill-switch2) Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS and OS X Apps
- [**56**Star][5y] [Py] [mvantellingen/psycopg2-ctypes](https://github.com/mvantellingen/psycopg2-ctypes) ctypes port of psycopg2 (see
+- [**56**Star][1y] [C] [msftserver/ravencoin-wallet-with-miners](https://github.com/msftserver/ravencoin-wallet-with-miners) RavenCoin Wallet including CPU and GPU miners! programs are directly from Ravencoin and official miner sources
- [**56**Star][2m] [Java] [mp911de/spring-cloud-vault-config-samples](https://github.com/mp911de/spring-cloud-vault-config-samples) Examples for Spring Vault and Spring Cloud Vault Config
+- [**56**Star][5y] [C] [molnarg/dead0007](https://github.com/molnarg/dead0007) Decompiler for SpiderMonkey 1.8 XDR bytecode
+- [**56**Star][2y] [Shell] [moki-ics/moki](https://github.com/moki-ics/moki) Moki Distribution - ICS/SCADA Tools
+- [**56**Star][8m] [Py] [mogwailabs/mjet](https://github.com/mogwailabs/mjet) MOGWAI LABS JMX exploitation toolkit
- [**56**Star][2y] [JS] [marknote/teleshellbot](https://github.com/marknote/teleshellbot) A simple Telegram Bot to run shell commands remotely
- [**56**Star][7y] [C++] [makerbot/miracle-grue](https://github.com/makerbot/miracle-grue) Workspace for new Toolpathing software.
- [**56**Star][4y] [C++] [m0n0ph1/basic-file-crypter](https://github.com/m0n0ph1/basic-file-crypter) Process Hollowing techniques as used in many file Crypters (C/C++)
- [**56**Star][3m] [C] [lucamassarelli/yarasafe](https://github.com/lucamassarelli/yarasafe) SAFE embeddings to match functions in yara
- [**56**Star][3y] [Java] [linkedin/sometime](https://github.com/linkedin/sometime) A BurpSuite plugin to detect Same Origin Method Execution vulnerabilities
-- [**56**Star][8m] [Py] [lief-project/tutorials](https://github.com/lief-project/tutorials) Materials for LIEF tutorials
- [**56**Star][1y] [latestalexey/awesome-web-hacking](https://github.com/latestalexey/awesome-web-hacking) A list of web application security
-- [**56**Star][27d] [Go] [konimarti/opc](https://github.com/konimarti/opc) OPC DA client in Golang for monitoring and analyzing process data based on Windows COM.
- [**56**Star][4y] [Go] [kevinmahaffey/tescat](https://github.com/kevinmahaffey/tescat) A tool to identify unique UDP payloads developed in order to audit the Tesla Model S's onboard ethernet traffic.
-- [**56**Star][8d] [Py] [keeper-security/commander](https://github.com/keeper-security/commander) Keeper Commander
-- [**56**Star][3y] [C] [k2/admmutate](https://github.com/k2/admmutate) Classic code from 1999+ I am fairly sure this is the first public polymorphic shellcode ever (best IMHO and others
-- [**56**Star][18d] [C++] [jspspemu/jspspemu](https://github.com/jspspemu/jspspemu) typescript psp emulator
+- [**56**Star][3d] [Py] [keeper-security/commander](https://github.com/keeper-security/commander) Keeper Commander
+- [**56**Star][20d] [C++] [jspspemu/jspspemu](https://github.com/jspspemu/jspspemu) typescript psp emulator
- [**56**Star][4m] [AutoIt] [jschicht/extractusnjrnl](https://github.com/jschicht/extractusnjrnl) Tool to extract the $UsnJrnl from an NTFS volume
- [**56**Star][2y] [JS] [jpenalbae/r2-scripts](https://github.com/jpenalbae/r2-scripts) Multiple radare2 rpipe scripts
- [**56**Star][2y] [Py] [joxeankoret/maltindex](https://github.com/joxeankoret/maltindex) Mal Tindex is an Open Source tool for indexing binaries and help attributing malware campaigns
-- [**56**Star][18d] [Java] [johnjohndoe/proguard](https://github.com/johnjohndoe/proguard) Java class file shrinker, optimizer, obfuscator, and preverifier
-- [**56**Star][7m] [JS] [joevennix/lan-js](https://github.com/joevennix/lan-js) Probe LAN devices from a web browser.
+- [**56**Star][20d] [Java] [johnjohndoe/proguard](https://github.com/johnjohndoe/proguard) Java class file shrinker, optimizer, obfuscator, and preverifier
- [**56**Star][2y] [C++] [jnferguson/double-free-examples](https://github.com/jnferguson/double-free-examples) Basic examples of double free exploitation/etc functionality in glibc/jemalloc/tcmalloc
- [**56**Star][5y] [Ruby] [jekil/hostmap](https://github.com/jekil/hostmap)
- [**56**Star][1y] [C] [jduck/canhazaxs](https://github.com/jduck/canhazaxs) A tool for enumerating the access to entries in the file system of an Android device.
- [**56**Star][1y] [Py] [jas502n/cve-2018-3191](https://github.com/jas502n/cve-2018-3191) Weblogic-CVE-2018-3191远程代码命令执行漏洞
-- [**56**Star][26d] [PowerShell] [jaapbrasser/sharedscripts](https://github.com/jaapbrasser/sharedscripts) This is a collection of scripts that I have shared online
-- [**56**Star][1m] [HTML] [j3ers3/passlist](https://github.com/j3ers3/passlist)
+- [**56**Star][3d] [PS] [jaapbrasser/sharedscripts](https://github.com/jaapbrasser/sharedscripts) This is a collection of scripts that I have shared online
- [**56**Star][8y] [JS] [iriscouch/request_jquery](https://github.com/iriscouch/request_jquery) request (NodeJS http client) API using jQuery back-end
- [**56**Star][5y] [C] [honeynet/ghost-usb-honeypot](https://github.com/honeynet/ghost-usb-honeypot) A honeypot for malware that propagates via USB storage devices
-- [**56**Star][8d] [C++] [henrypp/errorlookup](https://github.com/henrypp/errorlookup) Simple tool for retrieving information about Windows errors codes.
-- [**56**Star][6y] [Assembly] [hackedteam/core-win64](https://github.com/hackedteam/core-win64) RCS Agent for Windows (64bit)
+- [**56**Star][8m] [JS] [hamz-a/frida-android-libbinder](https://github.com/hamz-a/frida-android-libbinder) PoC Frida script to view Android libbinder traffic
- [**56**Star][3y] [C] [gnaixx/anti-debug](https://github.com/gnaixx/anti-debug) Android detect debugger
+- [**56**Star][6m] [TS] [geeksonsecurity/illuminatejs](https://github.com/geeksonsecurity/illuminatejs) IlluminateJs is a static JavaScript deobfuscator
- [**56**Star][5y] [Shell] [ge0rg/samsung-nx-hacks](https://github.com/ge0rg/samsung-nx-hacks) Firmware Hacks for the Linux-based Samsung NX mirrorless camera models (NX300, NX2000, ???)
- [**56**Star][9y] [Py] [gdssecurity/sqlbrute](https://github.com/gdssecurity/sqlbrute) SQLBrute is a tool for brute forcing data out of databases using blind SQL injection vulnerabilities.
+- [**56**Star][23d] [JS] [gajus/global-agent](https://github.com/gajus/global-agent) Global HTTP/HTTPS proxy agent configurable using environment variables.
- [**56**Star][5y] [Py] [foreni-packages/dhcpig](https://github.com/foreni-packages/dhcpig) initiates an advanced DHCP exhaustion attack
- [**56**Star][2m] [Py] [forallsecure/bncov](https://github.com/forallsecure/bncov) Scriptable Binary Ninja plugin for coverage analysis and visualization
- [**56**Star][3y] [C++] [fireeye/unicorn-libemu-shim](https://github.com/fireeye/unicorn-libemu-shim) unicorn-libemu-shim:项目地址
-- [**56**Star][2y] [F#] [enkomio/anathema](https://github.com/enkomio/anathema) .NET instrumentation framework
+- [**56**Star][3y] [Shell] [epinna/unusedpkg](https://github.com/epinna/unusedpkg) Diagnostic tool to find unused packages
- [**56**Star][4y] [Shell] [emirozer/nixarmor](https://github.com/emirozer/nixarmor) nixarmor is a linux hardening automation project
- [**56**Star][1y] [C#] [egorbo/intrinsicsplayground](https://github.com/egorbo/intrinsicsplayground) My toys to play with SSE/AVX in pure C# (.NET Core 2.1)
- [**56**Star][1m] [dwizzzle/presentations](https://github.com/dwizzzle/presentations) A repository of my presentations
-- [**56**Star][7m] [HTML] [dobin/yookiterm-slides](https://github.com/dobin/yookiterm-slides) Exploitation and Mitigation Slides
- [**56**Star][2y] [Shell] [digitalocean/debian-sys-maint-roll-passwd](https://github.com/digitalocean/debian-sys-maint-roll-passwd) debian-sys-maint-roll-passwd:更新 MySQL 用户 "debian-sys-maint" 的密码
+- [**56**Star][6y] [C] [devzero2000/shellcoderhandbook](https://github.com/devzero2000/shellcoderhandbook) shellcoderhandbook source code : "The Shellcoder's Handbook: Discovering and Exploiting Security Holes"
- [**56**Star][1y] [Py] [destine21/zipfileraider](https://github.com/destine21/zipfileraider) ZIP File Raider - Burp Extension for ZIP File Payload Testing
- [**56**Star][1y] [Nix] [dapphub/ds-auth](https://github.com/dapphub/ds-auth) Updatable, unobtrusive Solidity authorization pattern
- [**56**Star][2y] [danielmiessler/blackhat-arsenal-tools](https://github.com/danielmiessler/blackhat-arsenal-tools) Official Black Hat Arsenal Security Tools Repository
- [**56**Star][3y] [Py] [cuppa-joe/dsame](https://github.com/cuppa-joe/dsame) Python EAS SAME Alert Message Decoder
- [**56**Star][2m] [Assembly] [cturt/ps2-yabasic-exploit](https://github.com/cturt/ps2-yabasic-exploit) PS2 exploit for demo discs containing Yabasic that allows arbitrary code execution.
-- [**56**Star][7y] [Py] [cr4sh/ida-vmware-gdb](https://github.com/cr4sh/ida-vmware-gdb) Helper script for Windows kernel debugging with IDA Pro on VMware + GDB stub
+- [**56**Star][2y] [C] [coolervoid/rootstealer](https://github.com/coolervoid/rootstealer) X11 trick to inject commands on root terminal.
- [**56**Star][3y] [cn33liz/ms17-012](https://github.com/cn33liz/ms17-012) MS17-012 - COM Session Moniker EoP Exploit running within MSBuild.exe
-- [**56**Star][5m] [Py] [chrismaddalena/goreport](https://github.com/chrismaddalena/goreport) A Python script to collect campaign data from Gophish and generate a report
-- [**56**Star][27d] [C] [bytebandits/writeups](https://github.com/bytebandits/writeups) Wiki-like CTF write-ups repository by ByteBandits
-- [**56**Star][5y] [Py] [bwall/extracthosts](https://github.com/bwall/extracthosts) Extracts hosts (IP/Hostnames) from files
+- [**56**Star][5d] [PS] [chef-koch/windows-10-hardening](https://github.com/chef-koch/windows-10-hardening) Windows 10 hardening guide without gimmicks
+- [**56**Star][29d] [C] [bytebandits/writeups](https://github.com/bytebandits/writeups) Wiki-like CTF write-ups repository by ByteBandits
- [**56**Star][2y] [Py] [bonkc/bugbountysubdomains](https://github.com/bonkc/bugbountysubdomains) Tools to gather subdomains from Bug Bounty programs
+- [**56**Star][2y] [Java] [bigsizeme/burplugin-java-rce](https://github.com/bigsizeme/burplugin-java-rce) ******本软件仅限用于学习交流禁止用于任何非法行为****** 本版本支持elasticsearch java语言远程命令执行及文件上传 elasticsearchgroov语言远程命令执行及文件上传 struts2-005、struts2-009、struts2-013、struts2-016、struts2-019、struts2-020、struts2-devmode、 struts2-032、struts2-033、struts2-037、struts2-045、struts2-048、struts2-052 除struts2-053全部RCE漏洞验证并支持批量验证。 Struts2漏洞验证需要python环境并需要相关类库支持.点击python按钮初始化初始化python…
- [**56**Star][2y] [Py] [b-mueller/laser-ethereum](https://github.com/b-mueller/laser-ethereum) Symbolic virtual machine for Ethereum
- [**56**Star][5y] [C] [axoltl/hubcap](https://github.com/axoltl/hubcap) ChromeCast HubCap exploit
- [**56**Star][2y] [Py] [averagesecurityguy/ptnotes](https://github.com/averagesecurityguy/ptnotes)
-- [**56**Star][11m] [Py] [anteater/anteater](https://github.com/anteater/anteater) Anteater - CI/CD Gate Check Framework
-- [**56**Star][23d] [Py] [angr/archinfo](https://github.com/angr/archinfo) Classes with architecture-specific information useful to other projects.
+- [**56**Star][7d] [Py] [angr/archinfo](https://github.com/angr/archinfo) Classes with architecture-specific information useful to other projects.
- [**56**Star][2y] [Java] [amotzte/android-mock-location-for-development](https://github.com/amotzte/android-mock-location-for-development) allows to change mock location from command line on real devices
-- [**56**Star][12d] [C++] [aliveteam/alive_reversing](https://github.com/aliveteam/alive_reversing) Re-implementation of Abe's Exoddus
-- [**56**Star][15d] [albertzsigovits/malware-writeups](https://github.com/albertzsigovits/malware-writeups) Personal research and publication on malware families
-- [**56**Star][4m] [al0ne/nmap_bypass_ids](https://github.com/al0ne/nmap_bypass_ids) bypass IDS
+- [**56**Star][17d] [albertzsigovits/malware-writeups](https://github.com/albertzsigovits/malware-writeups) Personal research and publication on malware families
+- [**55**Star][3m] [C] [heiher/hev-socks5-tproxy](https://github.com/heiher/hev-socks5-tproxy) A simple, lightweight socks5 transparent proxy for Linux
+- [**55**Star][3d] [JS] [instantwebp2p/peer-proxy](https://github.com/instantwebp2p/peer-proxy) Light on hidden web service - Expose web service from Peer
+- [**55**Star][21d] [victorqribeiro/bruteforcetv](https://github.com/victorqribeiro/bruteforcetv) Let's brute force this hotel's tv.
- [**55**Star][6m] [C] [vanhoefm/dragondrain-and-time](https://github.com/vanhoefm/dragondrain-and-time)
- [**55**Star][2y] [Py] [ztgrace/pwnboard](https://github.com/ztgrace/pwnboard) CCDC Red Team PWNboard
- [**55**Star][10m] [HTML] [jpcertcc/cordova](https://github.com/jpcertcc/cordova) Vulnerability Analysis of Hybrid Applications using Apache Cordova
-- [**55**Star][26d] [Go] [evilsocket/pwngrid](https://github.com/evilsocket/pwngrid) (⌐■_■) - API server for pwnagotchi.ai
- [**55**Star][1y] [Py] [osirislab/csaw-ctf-2018-finals](https://github.com/osirislab/csaw-ctf-2018-finals) Repo for CSAW CTF 2018 Finals challenges
-- [**55**Star][3m] [snoopysecurity/osce-prep](https://github.com/snoopysecurity/osce-prep) A list of freely available resources that can be used as a prerequisite before taking OSCE.
-- [**55**Star][11d] [C++] [whid-injector/whid-31337](https://github.com/whid-injector/whid-31337) WHID Elite is a GSM-enabled Open-Source Multi-Purpose Offensive Device that allows a threat actor to remotely inject keystrokes, bypass air-gapped systems, conduct mousejacking attacks, do acoustic surveillance, RF replay attacks and much more. In practice, is THE Wet Dream of any Security Consultant out there!
-- [**55**Star][6m] [Py] [rabbitmask/weblogicscanserver](https://github.com/rabbitmask/weblogicscanserver) 开启WeblogicScanV3.*系列,采用Server部署,支持远程Weblogic漏洞扫描
- [**55**Star][6m] [C++] [eyalz800/zpp_hypervisor](https://github.com/eyalz800/zpp_hypervisor) A very simple hypervisor for learning experience.
+- [**55**Star][26d] [Kotlin] [m1dr05/istheapp](https://github.com/m1dr05/istheapp) Open-source android spyware
+- [**55**Star][9m] [Vue] [pengchujin/subscribevue](https://github.com/pengchujin/subscribevue) ss ssr v2ray 订阅管理 vue前端界面
- [**55**Star][2m] [C#] [ohjeongwook/powershellrunbox](https://github.com/ohjeongwook/powershellrunbox) Dynamic PowerShell analysis framework
-- [**55**Star][29d] [Go] [lc/hacks](https://github.com/lc/hacks) Repo of useful scripts
-- [**55**Star][3m] [Py] [ubernostrum/pwned-passwords-django](https://github.com/ubernostrum/pwned-passwords-django) Utilities for working with the Pwned Passwords database from Django.
+- [**55**Star][1m] [Go] [lc/hacks](https://github.com/lc/hacks) Repo of useful scripts
- [**55**Star][2m] [Py] [ripxorip/aerojump.nvim](https://github.com/ripxorip/aerojump.nvim) Aerojump is a fuzzy-match searcher/jumper for Neovim with the goal of quick keyboard navigation
- [**55**Star][2m] [C] [resilar/crchack](https://github.com/resilar/crchack) Reversing CRC for fun and profit
-- [**55**Star][30d] [redteamwing/pentest_wiki](https://github.com/RedTeamWing/Pentest_WiKi) 你所不知道的渗透测试
+- [**55**Star][5m] [Py] [re4lity/pocorexp](https://github.com/re4lity/PoCorExp) PoC or Exp Of Vulnerability
+- [**55**Star][1m] [redteamwing/pentest_wiki](https://github.com/RedTeamWing/Pentest_WiKi) 你所不知道的渗透测试
- [**55**Star][1m] [C] [secureauthcorp/sap-dissection-plug-in-for-wireshark](https://github.com/SecureAuthCorp/SAP-Dissection-plug-in-for-Wireshark) This Wireshark plugin provides dissection of SAP's NI, Diag, Enqueue, Router, Message Server, SNC and IGS protocols.
-- [**55**Star][12m] [pegasuslab/pegasusteam](https://github.com/PegasusLab/PegasusTeam) PegasusTeam is a group that focuses on WLAN security and Wi-Fi Pentesting.
-- [**55**Star][7d] [HTML] [canonical-web-and-design/ubuntu.com](https://github.com/canonical-web-and-design/ubuntu.com) The official website for the Ubuntu operating system
+- [**55**Star][1y] [pegasuslab/pegasusteam](https://github.com/PegasusLab/PegasusTeam) PegasusTeam is a group that focuses on WLAN security and Wi-Fi Pentesting.
+- [**55**Star][2d] [HTML] [canonical-web-and-design/ubuntu.com](https://github.com/canonical-web-and-design/ubuntu.com) The official website for the Ubuntu operating system
- [**55**Star][2y] [yrzx404/free-security-resources](https://github.com/yrzx404/free-security-resources) 安全总是无处不在...
-- [**55**Star][4m] [Assembly] [xyzz/ghidra-mep](https://github.com/xyzz/ghidra-mep) Toshiba MeP processor module for GHIDRA
-- [**55**Star][4m] [Shell] [wuseman/wbruter](https://github.com/wuseman/wbruter) Crack your non-rooted android device pin code with 100% guarantee aslong as usb debugging has been enable. Wbruter also has support for parallel ssh brute forcing via pssh
- [**55**Star][2y] [C] [winbagility/winbagility](https://github.com/winbagility/winbagility) [ARCHIVED] mov rax, ${Thalium/IceBox}; jmp rax;
+- [**55**Star][21d] [C] [watf-team/watf-bank](https://github.com/watf-team/watf-bank) WaTF Bank - What a Terrible Failure Mobile Banking Application for Android and iOS
- [**55**Star][1y] [Py] [wangyihang/find-php-vulnerabilities](https://github.com/wangyihang/find-php-vulnerabilities)
-- [**55**Star][2y] [PowerShell] [vletoux/ms17-010-scanner](https://github.com/vletoux/ms17-010-scanner)
+- [**55**Star][2y] [PS] [vletoux/ms17-010-scanner](https://github.com/vletoux/ms17-010-scanner)
- [**55**Star][1y] [JS] [ubeacsec/silverdog](https://github.com/ubeacsec/silverdog) An audio firewall for Chrome!
- [**55**Star][1y] [C#] [tyranid/windowsruntimesecuritydemos](https://github.com/tyranid/windowsruntimesecuritydemos) Demos for Presentation on Windows Runtime Security
- [**55**Star][5y] [PHP] [troyhunt/pineapplesurprise](https://github.com/troyhunt/pineapplesurprise) Pineapple Surprise! is a PHP implementation for the Wi-Fi Pineapple or "Jasager". Used in conjunction with dnsspoof it will serve a "surprise" to any clients connected to the device when they make an HTTP request.
-- [**55**Star][5m] [C++] [troybowman/dtxmsg](https://github.com/troybowman/dtxmsg) an IDA plugin that helped me reverse-engineer the DTXConnectionServices framework.
- [**55**Star][2y] [trietptm/security-news](https://github.com/trietptm/security-news) Information Security News
- [**55**Star][4m] [Py] [trickster0/enyx](https://github.com/trickster0/enyx) Enyx SNMP IPv6 Enumeration Tool
- [**55**Star][2y] [JS] [tinysec/jsrt](https://github.com/tinysec/jsrt) javascript runtime ( JSRT ) project for windows , based on chakra
-- [**55**Star][4m] [Visual Basic] [thesph1nx/slickermaster-rev4](https://github.com/thesph1nx/slickermaster-rev4) NSA Hacking Tool Recreation UnitedRake
+- [**55**Star][4m] [Visual Basic .NET] [thesph1nx/slickermaster-rev4](https://github.com/thesph1nx/slickermaster-rev4) NSA Hacking Tool Recreation UnitedRake
+- [**55**Star][7m] [HTML] [tgeaus/weak-password](https://github.com/tgeaus/weak-password) 字典大全 dictionary
- [**55**Star][3y] [C] [synack/chaoticmarch](https://github.com/synack/chaoticmarch) A mechanism for automating input events on iOS
- [**55**Star][3y] [Py] [sowish/sqlmapapi_pi](https://github.com/sowish/sqlmapapi_pi) 利用sqlmapapi进行批量检测sql注入
-- [**55**Star][4m] [C] [sonertari/sslproxy](https://github.com/sonertari/sslproxy) Transparent SSL/TLS proxy for decrypting and diverting network traffic to other programs, such as UTM services, for deep SSL inspection
+- [**55**Star][8m] [Perl] [sourceperl/mbtget](https://github.com/sourceperl/mbtget) A simple modbus/TCP client write in pure Perl.
- [**55**Star][2y] [C++] [sigint9/yaragui](https://github.com/sigint9/yaragui)
+- [**55**Star][2y] [Py] [shaanen/osint-combiner](https://github.com/shaanen/osint-combiner) Combining OSINT sources in Elastic Stack
- [**55**Star][2y] [TeX] [season-lab/survey-symbolic-execution](https://github.com/season-lab/survey-symbolic-execution) 对有关符号执行相关工具和技术的调查
- [**55**Star][3y] [Java] [scriptjunkie/msfgui](https://github.com/scriptjunkie/msfgui) The Metasploit GUI
- [**55**Star][2m] [Ruby] [saz/puppet-memcached](https://github.com/saz/puppet-memcached) Puppet module for memcached
- [**55**Star][2y] [C] [samlarenn/callbackdisabler](https://github.com/samlarenn/callbackdisabler) Disable Driver Callbacks
-- [**55**Star][6m] [Py] [s2e/s2e-env](https://github.com/s2e/s2e-env) Your S2E project management tools
+- [**55**Star][1m] [Py] [s2e/s2e-env](https://github.com/s2e/s2e-env) Your S2E project management tools
- [**55**Star][3y] [C++] [s-kanev/xiosim](https://github.com/s-kanev/xiosim) A detailed michroarchitectural x86 simulator
- [**55**Star][2y] [Java] [righettod/virtualhost-payload-generator](https://github.com/righettod/virtualhost-payload-generator) BURP extension providing a set of values for the HTTP request "Host" header for the "BURP Intruder" in order to abuse virtual host resolution.
- [**55**Star][7m] [C] [rapid7/reflectivedllinjection](https://github.com/rapid7/reflectivedllinjection) Reflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process.
-- [**55**Star][10m] [Objective-C] [rani-i/bluetoothdpoc](https://github.com/rani-i/bluetoothdpoc) CVE-2018-4087 PoC
-- [**55**Star][5m] [Py] [r3nt0n/bopscrk](https://github.com/r3nt0n/bopscrk) A tool to generate smart and powerful wordlists
-- [**55**Star][3y] [C] [pythonmaster41/go-for-oscp](https://github.com/pythonmaster41/go-for-oscp)
+- [**55**Star][10m] [ObjC] [rani-i/bluetoothdpoc](https://github.com/rani-i/bluetoothdpoc) CVE-2018-4087 PoC
- [**55**Star][4y] [Py] [pidydx/smrt](https://github.com/pidydx/smrt) Sublime Malware Research Tool
+- [**55**Star][1m] [Visual Basic .NET] [outflanknl/scripts](https://github.com/outflanknl/scripts) Small scripts that make life better
- [**55**Star][3y] [Shell] [ouspg/libfuzzerfication](https://github.com/ouspg/libfuzzerfication) libfuzzerfication - fuzzing for the rest of us!
- [**55**Star][6m] [C++] [osql/osql](https://github.com/osql/osql) SQL powered operating system instrumentation, monitoring, and analytics.
-- [**55**Star][3y] [Py] [nonenotnull/ssrfx](https://github.com/nonenotnull/ssrfx) CVE-2014-4210+Redis未授权访问
-- [**55**Star][12d] [Java] [netflix/iep](https://github.com/netflix/iep) Insight Engineering Platform Components
-- [**55**Star][26d] [Py] [netflix-skunkworks/cloudaux](https://github.com/netflix-skunkworks/cloudaux) Cloud Auxiliary is a python wrapper and orchestration module for interacting with cloud providers
+- [**55**Star][5y] [Pascal] [nyx0/pony](https://github.com/nyx0/pony) Pony 2.0 Stealer
- [**55**Star][3y] [C#] [nccgroup/mnemosyne](https://github.com/nccgroup/mnemosyne) mnemosyne:通用Windows内存抓取工具
-- [**55**Star][3m] [Py] [nccgroup/hashcrack](https://github.com/nccgroup/hashcrack) Guesses hash types, picks some sensible dictionaries and rules for hashcat
- [**55**Star][2y] [Py] [msfidelis/kill-router-](https://github.com/msfidelis/kill-router-) Ferramenta para quebrar senhas administrativas de roteadores Wireless, routers, switches e outras plataformas de gestão de serviços de rede autenticados.
-- [**55**Star][5y] [C] [molnarg/dead0007](https://github.com/molnarg/dead0007) Decompiler for SpiderMonkey 1.8 XDR bytecode
-- [**55**Star][2y] [Shell] [moki-ics/moki](https://github.com/moki-ics/moki) Moki Distribution - ICS/SCADA Tools
-- [**55**Star][8m] [Py] [mogwailabs/mjet](https://github.com/mogwailabs/mjet) MOGWAI LABS JMX exploitation toolkit
+- [**55**Star][1y] [mindpointgroup/ansible-vmware-provisioning](https://github.com/mindpointgroup/ansible-vmware-provisioning) Some basic Ansible content to help get more out of VMware. Developed for AnsibleFest San Francisco 2017.
- [**55**Star][6m] [C++] [mefistotelis/ida-pro-loadmap](https://github.com/mefistotelis/ida-pro-loadmap) Plugin for IDA Pro disassembler which allows loading .map files.
- [**55**Star][3y] [Py] [m4sc3r4n0/spyrat](https://github.com/m4sc3r4n0/spyrat) Python Remote Access Trojan
-- [**55**Star][3y] [C#] [lontivero/vinchuca](https://github.com/lontivero/vinchuca) A resilient peer-to-peer botnet agent in .NET
+- [**55**Star][2y] [Shell] [lanjelot/twisted-honeypots](https://github.com/lanjelot/twisted-honeypots) SSH, FTP and Telnet honeypots based on Twisted
- [**55**Star][2y] [C] [kkamagui/shadow-box-for-arm](https://github.com/kkamagui/shadow-box-for-arm) Shadow-Box v2: 实用且全能的ARM沙箱
- [**55**Star][7y] [C++] [kakaroto/ps3ida](https://github.com/kakaroto/ps3ida) IDA scripts and plugins for PS3
+- [**55**Star][2y] [jkpang/timliu-ios](https://github.com/jkpang/timliu-ios) iOS开发常用三方库、插件、知名博客等等
- [**55**Star][8m] [JS] [jes/chess-steg](https://github.com/jes/chess-steg) Steganography in chess games
+- [**55**Star][2y] [C#] [jamessmith2/ethmonitoring](https://github.com/jamessmith2/ethmonitoring) Miner monitoring software with different notifications support
- [**55**Star][2y] [C++] [huoji120/av-killer](https://github.com/huoji120/av-killer) Antivirus Killer
-- [**55**Star][6m] [TypeScript] [geeksonsecurity/illuminatejs](https://github.com/geeksonsecurity/illuminatejs) IlluminateJs is a static JavaScript deobfuscator
+- [**55**Star][14d] [YARA] [hestat/lw-yara](https://github.com/hestat/lw-yara) Yara Ruleset for scanning Linux servers for shells, spamming, phishing and other webserver baddies
+- [**55**Star][4d] [Go] [gyyyy/footprint](https://github.com/gyyyy/footprint) 个人笔记
+- [**55**Star][2d] [Py] [fox-it/bloodhound-import](https://github.com/fox-it/bloodhound-import) Python based BloodHound data importer
- [**55**Star][1y] [Py] [flo354/androick](https://github.com/flo354/androick)
- [**55**Star][2y] [C++] [feliam/klee-taint](https://github.com/feliam/klee-taint) KLEE-TAINT - Klee with taint analysis support
-- [**55**Star][3y] [Shell] [epinna/unusedpkg](https://github.com/epinna/unusedpkg) Diagnostic tool to find unused packages
- [**55**Star][2y] [Py] [elevenpaths/dirtytooth-raspberrypi](https://github.com/elevenpaths/dirtytooth-raspberrypi) Exploit the hack for IOS 11.1.2 and earlier to collect leaked information.
+- [**55**Star][2m] [PS] [eclypsium/screwed-drivers](https://github.com/eclypsium/screwed-drivers) a centralized source of knowledge which contains a list of drivers determined to be vulnerable as well as example code for how to use this kind of functionality.
- [**55**Star][3m] [Py] [dogoncouch/logesp](https://github.com/dogoncouch/logesp) Open Source SIEM (Security Information and Event Management system).
-- [**55**Star][6y] [C] [devzero2000/shellcoderhandbook](https://github.com/devzero2000/shellcoderhandbook) shellcoderhandbook source code : "The Shellcoder's Handbook: Discovering and Exploiting Security Holes"
-- [**55**Star][13d] [C] [danielkrupinski/vac-hooks](https://github.com/danielkrupinski/vac-hooks) Hook WinAPI functions used by Valve Anti-Cheat. Log calls and intercept arguments & return values. DLL written in C.
-- [**55**Star][2y] [C] [coolervoid/rootstealer](https://github.com/coolervoid/rootstealer) X11 trick to inject commands on root terminal.
-- [**55**Star][17d] [PowerShell] [chef-koch/windows-10-hardening](https://github.com/chef-koch/windows-10-hardening) Windows 10 hardening guide without gimmicks
+- [**55**Star][3y] [Shell] [docker-linux/kali-metasploit](https://github.com/docker-linux/kali-metasploit)
+- [**55**Star][4d] [C] [danielkrupinski/vac-hooks](https://github.com/danielkrupinski/vac-hooks) Hook WinAPI functions used by Valve Anti-Cheat. Log calls and intercept arguments & return values. DLL written in C.
+- [**55**Star][6m] [Java] [cognifide/aem-rules-for-sonarqube](https://github.com/cognifide/aem-rules-for-sonarqube) SonarQube plugin with set of rules detecting possible bugs and bad smells specific for AEM development.
+- [**55**Star][5m] [Shell] [cignoraptor-ita/cignotrack](https://github.com/cignoraptor-ita/cignotrack) OSINT tool for testing privacy and social engineering vulnerability of organizations.
- [**55**Star][3y] [Py] [chadillac/mdns_recon](https://github.com/chadillac/mdns_recon) Multicast DNS and DNS service discovery daemons deployed on various systems across the Internet are misconfigured and reply to queries targeting their unicast addresses, including requests from their WAN interface. These daemons could be leveraged by attackers for sensitive information disclosure and potentially used in DDoS campaigns for reflec…
- [**55**Star][2y] [C++] [caseysmithrc/memmitm](https://github.com/caseysmithrc/memmitm) SSL In Memory Inspection - Proof Of Concept.
- [**55**Star][3y] [Java] [bsmali4/checksql](https://github.com/bsmali4/checksql)
- [**55**Star][2y] [Py] [brianloveswords/python-jws](https://github.com/brianloveswords/python-jws) python implementation of JSON Web Signatures
-- [**55**Star][2y] [Java] [bigsizeme/burplugin-java-rce](https://github.com/bigsizeme/burplugin-java-rce) ******本软件仅限用于学习交流禁止用于任何非法行为****** 本版本支持elasticsearch java语言远程命令执行及文件上传 elasticsearchgroov语言远程命令执行及文件上传 struts2-005、struts2-009、struts2-013、struts2-016、struts2-019、struts2-020、struts2-devmode、 struts2-032、struts2-033、struts2-037、struts2-045、struts2-048、struts2-052 除struts2-053全部RCE漏洞验证并支持批量验证。 Struts2漏洞验证需要python环境并需要相关类库支持.点击python按钮初始化初始化python…
- [**55**Star][3y] [C] [bazad/physmem](https://github.com/bazad/physmem) Local privilege escalation through macOS 10.12.1 via CVE-2016-1825 or CVE-2016-7617.
- [**55**Star][5m] [basketwill/z0bpctools](https://github.com/basketwill/z0bpctools) 一个windows反汇编工具,界面风格防OllyDbg 利用业余开发了一款类似仿OLlyDbg界面的 IDA静态反编译工具,目前是1.0版本,功能不是很强大但是基本功能有了
+- [**55**Star][4y] [Py] [az0ne/python_backdoor](https://github.com/az0ne/python_backdoor) 过360主动防御360杀毒以前99%杀软的python后门
- [**55**Star][4y] [Py] [az0ne/jboss_autoexploit](https://github.com/az0ne/jboss_autoexploit) JBoss JMXInvokerServlet JMXInvoker 0.3 - Remote Command Execution 漏洞批量检测
+- [**55**Star][9m] [Py] [attackanddefencesecuritylab/ad_webscanner](https://github.com/attackanddefencesecuritylab/ad_webscanner) AD工作室精心研发漏洞安全扫描器
- [**55**Star][7y] [Py] [antitree/manitree](https://github.com/antitree/manitree) AndroidManifest.xml security auditor
- [**55**Star][5y] [C] [anestisb/melkor-android](https://github.com/anestisb/melkor-android) An Android port of the melkor ELF fuzzer
+- [**55**Star][2y] [Py] [ahm3dhany/ids-evasion](https://github.com/ahm3dhany/ids-evasion) Evading Snort Intrusion Detection System.
- [**55**Star][4y] [Py] [ahhh/ntp_trojan](https://github.com/ahhh/ntp_trojan) Reverse NTP remote access trojan in python, for penetration testers
- [**55**Star][3y] [abatchy17/introduction-to-manual-backdooring](https://github.com/abatchy17/introduction-to-manual-backdooring) Executables created while writing "Introduction to Manual Backdooring".
- [**55**Star][3m] [Py] [5alt/zeroscan](https://github.com/5alt/zeroscan) ZeroScan is a tool that auto gathers subdomains and scan ports
-- [**54**Star][19d] [victorqribeiro/bruteforcetv](https://github.com/victorqribeiro/bruteforcetv) Let's brute force this hotel's tv.
-- [**54**Star][9d] [xairy/ubuntu-hardening](https://github.com/xairy/ubuntu-hardening) Random tips on how to improve security of Ubuntu Desktop
+- [**54**Star][] [Py] [dhondta/sploitkit](https://github.com/dhondta/sploitkit) Toolkit for building Metasploit-like consoles
+- [**54**Star][23d] [CSS] [gh0stkey/ahrid](https://github.com/gh0stkey/ahrid) AHRID - Analysis Hacker's Real-ID Platform 黑客攻击画像分析系统
+- [**54**Star][25d] [Swift] [chengluffy/shadowsocksfree](https://github.com/chengluffy/shadowsocksfree) Try Yourself.
+- [**54**Star][7m] [C++] [mozillasecurity/libfuzzer-python-bridge](https://github.com/mozillasecurity/libfuzzer-python-bridge) A Python3 bridge for implementing custom libFuzzer mutators
+- [**54**Star][3m] [Shell] [snail007/goproxy-heroku](https://github.com/snail007/goproxy-heroku) goproxy heroku 一键部署套装,把heroku变为免费的http(s)\socks5代理,搜索学习资料。
+- [**54**Star][4y] [Py] [ryhanson/keyslack](https://github.com/ryhanson/keyslack) Slack client used to encrypt/decrypt and send/receive Keybase PGP messages through a Slack private group.
+- [**54**Star][11d] [xairy/ubuntu-hardening](https://github.com/xairy/ubuntu-hardening) Random tips on how to improve security of Ubuntu Desktop
+- [**54**Star][1y] [Py] [secwiki/ctf-hub](https://github.com/secwiki/ctf-hub) CTF 题目列表
+- [**54**Star][3y] [Java] [giovannicolonna/msfvenom-backdoor-android](https://github.com/giovannicolonna/msfvenom-backdoor-android) Android backdoored app, improved source code of msfvenom android .apk
- [**54**Star][4y] [HTML] [konklone/cdns-to-https](https://github.com/konklone/cdns-to-https) (Retired.) Testing HTTP->HTTPS redirects for CDNs.
-- [**54**Star][9d] [fatihh92/hackthebox-writeups](https://github.com/fatihh92/hackthebox-writeups)
-- [**54**Star][1y] [Py] [thelsa/ueditor-getshell](https://github.com/thelsa/ueditor-getshell) ueditor .net getshell
+- [**54**Star][5d] [fatihh92/hackthebox-writeups](https://github.com/fatihh92/hackthebox-writeups)
- [**54**Star][1y] [PHP] [ahref-group/superpanel](https://github.com/ahref-group/superpanel) A new shadowsocks panel based on ThinkPHP
+- [**54**Star][16d] [Py] [kkamagui/napper-for-tpm](https://github.com/kkamagui/napper-for-tpm) TPM vulnerability checking tool for CVE-2018-6622. This tool will be published at Black Hat Asia 2019 and Black Hat Europe 2019
+- [**54**Star][18d] [Java] [cuyler36/ghidra-gamecube-loader](https://github.com/cuyler36/ghidra-gamecube-loader) A Nintendo GameCube binary loader for Ghidra
- [**54**Star][2m] [HTML] [aravinthpanch/rssi](https://github.com/aravinthpanch/rssi) Indoor localisation using RSSI. RSSI is received signal strength indicator in IEEE 802.11 beacon packet to announce the presence of WiFi.This tool was built to study & visualize the data collected in the experiments. This was done at Telecommunications Network Group (TKN), Berlin as part of EVARILOS.
- [**54**Star][4y] [Py] [geovation/wifispy](https://github.com/geovation/wifispy) Sniff Wifi traffic, log device addresses.
-- [**54**Star][14d] [Py] [trailofbits/polyfile](https://github.com/trailofbits/polyfile) A utility for mapping the file formats embedded within a single file
-- [**54**Star][7d] [C] [cisco/mercury](https://github.com/cisco/mercury) network fingerprinting and packet metadata capture
+- [**54**Star][16d] [TS] [ediardo/kmdr-cli](https://github.com/ediardo/kmdr-cli) 🧠The ultimate CLI learning tool for explaining commands from your terminal
+- [**54**Star][27d] [HTML] [usnistgov/acvp](https://github.com/usnistgov/acvp) Industry Working Group on Automated Cryptographic Algorithm Validation
- [**54**Star][5y] [Py] [yahooarchive/pyioce](https://github.com/YahooArchive/PyIOCe) Python IOC Editor
- [**54**Star][2m] [C#] [southpolenator/sharpdebug](https://github.com/southpolenator/SharpDebug) C# debugging automation tool
-- [**54**Star][5m] [Py] [re4lity/pocorexp](https://github.com/re4lity/PoCorExp) PoC or Exp Of Vulnerability
- [**54**Star][1y] [Py] [k4yt3x/defense-matrix](https://github.com/k4yt3x/defense-matrix) Express security essentials deployment for Linux Servers
- [**54**Star][2y] [Java] [graxcode/java-unpacker](https://github.com/GraxCode/java-unpacker) Extract Crypted Jar Archives
- [**54**Star][1y] [Py] [zardus/idalink](https://github.com/zardus/idalink) idalink arose of the need to easily use IDA's API for analysis without wanting to be stuck in the IDA interface
-- [**54**Star][2y] [PowerShell] [whitehat-zero/powenum](https://github.com/whitehat-zero/powenum) Executes common PowerSploit Powerview functions then combines output into a spreadsheet for easy analysis.
-- [**54**Star][13d] [Java] [vy/hrrs](https://github.com/vy/hrrs) Record, transform, and replay HTTP requests in Java EE and Spring applications.
+- [**54**Star][6m] [C++] [x64dbg/snowman](https://github.com/x64dbg/snowman) Snowman Decompiler for x64dbg (LOOKING FOR MAINTAINER)
+- [**54**Star][2y] [PS] [whitehat-zero/powenum](https://github.com/whitehat-zero/powenum) Executes common PowerSploit Powerview functions then combines output into a spreadsheet for easy analysis.
+- [**54**Star][10d] [Py] [w181496/ctf](https://github.com/w181496/ctf) My CTF writeups
+- [**54**Star][15d] [Java] [vy/hrrs](https://github.com/vy/hrrs) Record, transform, and replay HTTP requests in Java EE and Spring applications.
- [**54**Star][1y] [Py] [vulnerscom/vulners-scanner](https://github.com/vulnerscom/vulners-scanner) Vulnerability scanner based on vulners.com audit API
- [**54**Star][1y] [JS] [userlandkernel/jailbreakme-unified](https://github.com/userlandkernel/jailbreakme-unified) Framework for iOS browser exploitation to kernel privileges and rootfs remount
-- [**54**Star][3m] [uniking/dingding](https://github.com/uniking/dingding) 免root远程钉钉打卡,支持wifi和gps定位,仅支持android系统。本项目出于学习目的,仅用于学习玩耍,请于24小时后自行删除。xposed, crack,package,dingtalk,remote control
-- [**54**Star][22d] [Py] [ucsb-seclab/agrigento](https://github.com/ucsb-seclab/agrigento) Agrigento is a tool to identify privacy leaks in Android apps by performing black-box differential analysis on the network traffic.
-- [**54**Star][5y] [C++] [tyranid/exploitdotnetdcom](https://github.com/tyranid/exploitdotnetdcom) A tool to exploit .NET DCOM for EoP and RCE. Is fixed in latest versions of the .NET.
-- [**54**Star][5m] [PowerShell] [tasox/logrm](https://github.com/tasox/logrm) LogRM is a post exploitation powershell script which it uses windows event logs to gather information about internal network
+- [**54**Star][24d] [Py] [ucsb-seclab/agrigento](https://github.com/ucsb-seclab/agrigento) Agrigento is a tool to identify privacy leaks in Android apps by performing black-box differential analysis on the network traffic.
+- [**54**Star][1y] [Shell] [thelinuxchoice/tweetshell](https://github.com/thelinuxchoice/tweetshell) Multi-thread Twitter BruteForcer in Shell Script
+- [**54**Star][5m] [PS] [tasox/logrm](https://github.com/tasox/logrm) LogRM is a post exploitation powershell script which it uses windows event logs to gather information about internal network
- [**54**Star][2y] [C] [tandasat/fu_hypervisor](https://github.com/tandasat/fu_hypervisor) A hypervisor hiding user-mode memory using EPT
-- [**54**Star][8m] [Perl] [sourceperl/mbtget](https://github.com/sourceperl/mbtget) A simple modbus/TCP client write in pure Perl.
- [**54**Star][8y] [C] [soulxu/kvmsample](https://github.com/soulxu/kvmsample) minivm based on kvm
- [**54**Star][2y] [C++] [sisoma2/shellcodeloader](https://github.com/sisoma2/shellcodeloader) Small tool to load shellcodes or PEs to analyze them
-- [**54**Star][2y] [Py] [shaanen/osint-combiner](https://github.com/shaanen/osint-combiner) Combining OSINT sources in Elastic Stack
- [**54**Star][3y] [C++] [rwfpl/rewolf-msi-exploit](https://github.com/rwfpl/rewolf-msi-exploit) MSI NTIOLib/WinIO Local Privilege Escalation exploit
- [**54**Star][4y] [Py] [rodionovd/cuckoo-osx-analyzer](https://github.com/rodionovd/cuckoo-osx-analyzer) An OS X analyzer for Cuckoo Sandbox project
- [**54**Star][2y] [C++] [raymon-tian/wfpfirewall](https://github.com/raymon-tian/wfpfirewall) 基于WFP(Windows Filter Platform)的个人防火墙系统
- [**54**Star][2m] [HTML] [r3kapig/writeup](https://github.com/r3kapig/writeup) CTF challenges writeup
- [**54**Star][8m] [MATLAB] [professormahi/ctf](https://github.com/professormahi/ctf) CTF (Capture The Flag Writeups and Tools)
+- [**54**Star][7d] [Ruby] [picatz/shodanz](https://github.com/picatz/shodanz)
+- [**54**Star][3y] [Py] [patois/drgadget](https://github.com/patois/drgadget) IDAPython plugin for the Interactive Disassembler
- [**54**Star][3y] [C] [passingtheknowledge/ganxo](https://github.com/passingtheknowledge/ganxo) An opensource API hooking framework
-- [**54**Star][2y] [Objective-C] [objective-see/aurevoir](https://github.com/objective-see/aurevoir) View and remove notification messages from Apple's "Notification Database"
+- [**54**Star][2y] [ObjC] [objective-see/aurevoir](https://github.com/objective-see/aurevoir) View and remove notification messages from Apple's "Notification Database"
- [**54**Star][5y] [Py] [nnewsom/webbies](https://github.com/nnewsom/webbies) Collection of tools for web recon and enumeration.
- [**54**Star][2y] [Py] [nezza/scada-stuff](https://github.com/nezza/scada-stuff) A collection of scripts & tools for reverse-engineering & hacking SCADA/ICS devices.
+- [**54**Star][2m] [netstalking-core/netstalking-osint](https://github.com/netstalking-core/netstalking-osint) Коллекция материалов по OSINT для нетсталкинга
- [**54**Star][1y] [Go] [netflix-skunkworks/aws-metadata-proxy](https://github.com/netflix-skunkworks/aws-metadata-proxy) AWS Metadata Proxy for protection against SSRF
- [**54**Star][9y] [Emacs Lisp] [nelhage/reverse-android](https://github.com/nelhage/reverse-android) Reverse-engineering tools for Android applications
- [**54**Star][3y] [Rust] [nccgroup/assethook](https://github.com/nccgroup/assethook) LD_PRELOAD magic for Android's AssetManager
-- [**54**Star][2y] [myndtt/ctf-site](https://github.com/myndtt/ctf-site) 介绍一些CTF训练的站点
+- [**54**Star][9m] [Shell] [mzpqnxow/embedded-toolkit](https://github.com/mzpqnxow/embedded-toolkit) Prebuilt statically linked gdbserver and gawk executables for Linux on ARMEL, MIPS/MIPSEL and more platforms for use on embedded devices, including for systems with many different ABIs (including more than 20 statically linked gdbserver executables)
- [**54**Star][10m] [muhammd/awesome-pentest](https://github.com/muhammd/awesome-pentest) Awesome Penetration Testing A collection of awesome penetration testing resources
- [**54**Star][3y] [Perl] [msimerson/sentry](https://github.com/msimerson/sentry) Bruteforce attack blocker (ssh, FTP, SMTP, and more)
- [**54**Star][3y] [Py] [mseclab/burp-pyjfuzz](https://github.com/mseclab/burp-pyjfuzz) Burp Suite plugin which implement PyJFuzz for fuzzing web application.
- [**54**Star][2y] [Java] [mirsamantajbakhsh/onionharvester](https://github.com/mirsamantajbakhsh/onionharvester) A small TOR Onion Address harvester for checking if the address is available or not.
-- [**54**Star][2y] [PowerShell] [microsoftedge/dev.microsoftedge.com-vms](https://github.com/microsoftedge/dev.microsoftedge.com-vms) Scripts used to generate the free VMs available at
+- [**54**Star][1y] [C] [mikeryan/uberducky](https://github.com/mikeryan/uberducky) 将Ubertooth转换为通过BLE触发的无线USB橡皮鸭
+- [**54**Star][3m] [mikerah/awesome-privacy-on-blockchains](https://github.com/mikerah/awesome-privacy-on-blockchains) A curated list of privacy on blockchains resources
+- [**54**Star][2y] [PS] [microsoftedge/dev.microsoftedge.com-vms](https://github.com/microsoftedge/dev.microsoftedge.com-vms) Scripts used to generate the free VMs available at
- [**54**Star][1m] [Py] [matt-kempster/mips_to_c](https://github.com/matt-kempster/mips_to_c) A MIPS decompiler.
+- [**54**Star][2y] [Py] [matejbasic/pythonscrapybasicsetup](https://github.com/matejbasic/pythonscrapybasicsetup) Basic setup with random user agents and IP addresses for Python Scrapy Framework.
- [**54**Star][6m] [Py] [masood-m/yalih](https://github.com/masood-m/yalih) YALIH (Yet Another Low Interaction Honeyclient) is a low Interaction Client honeypot designed to detect malicious websites through signature, anomaly and pattern matching techniques
- [**54**Star][5y] [C++] [malwaretech/fsthook](https://github.com/malwaretech/fsthook) A library for intercepting native functions by hooking KiFastSystemCall
-- [**54**Star][2y] [Shell] [lanjelot/twisted-honeypots](https://github.com/lanjelot/twisted-honeypots) SSH, FTP and Telnet honeypots based on Twisted
+- [**54**Star][3y] [C#] [lontivero/vinchuca](https://github.com/lontivero/vinchuca) A resilient peer-to-peer botnet agent in .NET
+- [**54**Star][2y] [Shell] [letssudormrf/ssr-bbr-docker](https://github.com/letssudormrf/ssr-bbr-docker) Dockerfile for ssr+bbr_powered
+- [**54**Star][12m] [Py] [klsecservices/s7scan](https://github.com/klsecservices/s7scan) The tool for enumerating Siemens S7 PLCs through TCP/IP or LLC network
- [**54**Star][6m] [C#] [klionsec/bypassav-allthings](https://github.com/klionsec/bypassav-allthings)
-- [**54**Star][3m] [Objective-C] [julbouln/ice40_eink_controller](https://github.com/julbouln/ice40_eink_controller) ice40 FPGA eink controller
+- [**54**Star][3m] [ObjC] [julbouln/ice40_eink_controller](https://github.com/julbouln/ice40_eink_controller) ice40 FPGA eink controller
- [**54**Star][4y] [Batchfile] [islamadel/bat2exe](https://github.com/islamadel/bat2exe) Automatically exported from code.google.com/p/bat2exe
- [**54**Star][9y] [Shell] [ioerror/crlwatch](https://github.com/ioerror/crlwatch) Collect, watch, and analyze SSL/TLS CRL data
- [**54**Star][2y] [Py] [heurs/parsentfs](https://github.com/heurs/parsentfs) Simple NTFS crawler.
-- [**54**Star][12d] [YARA] [hestat/lw-yara](https://github.com/hestat/lw-yara) Yara Ruleset for scanning Linux servers for shells, spamming, phishing and other webserver baddies
- [**54**Star][6y] [Shell] [hclx/dell_power_spoofer](https://github.com/hclx/dell_power_spoofer) A MSP430 based design spoofing dell power adapter identification
- [**54**Star][7m] [Py] [hannob/superfishy](https://github.com/hannob/superfishy) Archive of software and other data involved in the Superfish / Komodia incident
-- [**54**Star][8m] [JS] [hamz-a/frida-android-libbinder](https://github.com/hamz-a/frida-android-libbinder) PoC Frida script to view Android libbinder traffic
- [**54**Star][5y] [Go] [hailocab/logslam](https://github.com/hailocab/logslam) A lightweight lumberjack protocol compliant logstash indexer
-- [**54**Star][7m] [C] [gosecure/dllpasswordfilterimplant](https://github.com/gosecure/dllpasswordfilterimplant) DLL Password Filter Implant with Exfiltration Capabilities
+- [**54**Star][3m] [Py] [gray-panda/grayrepo](https://github.com/gray-panda/grayrepo) Personal repository for all ctf related stuffs
+- [**54**Star][8m] [C] [gosecure/dllpasswordfilterimplant](https://github.com/gosecure/dllpasswordfilterimplant) DLL Password Filter Implant with Exfiltration Capabilities
- [**54**Star][4m] [HTML] [google/security-crawl-maze](https://github.com/google/security-crawl-maze) Security Crawl Maze is a comprehensive testbed for web security crawlers. It contains pages representing many ways in which one can link resources from a valid HTML document.
+- [**54**Star][4y] [Go] [gehaxelt/ds_store](https://github.com/gehaxelt/ds_store) GO - Minimal parser for .DS_Store files
+- [**54**Star][11d] [JS] [fedora-infra/asknot-ng](https://github.com/fedora-infra/asknot-ng) What can I do for $ORGANIZATION?
- [**54**Star][1y] [JS] [enovella/androidtrainings](https://github.com/enovella/androidtrainings) Mobile security trainings based on android
- [**54**Star][5m] [Py] [dr0op/bufferfly](https://github.com/dr0op/bufferfly) 攻防演习/渗透测试资产处理小工具,对攻防演习/渗透测试前的信息搜集到的大批量资产/域名进行存活检测、获取标题头、语料提取、常见web端口检测等。
-- [**54**Star][3y] [Shell] [docker-linux/kali-metasploit](https://github.com/docker-linux/kali-metasploit)
- [**54**Star][1y] [cujanovic/subdomain-bruteforce-list](https://github.com/cujanovic/subdomain-bruteforce-list) subdomain bruteforce list
- [**54**Star][8y] [Py] [cranklin/python-virus](https://github.com/cranklin/python-virus) This is an educational computer virus written in Python to demonstrate how replication is done.
-- [**54**Star][9m] [Py] [circl/potiron](https://github.com/circl/potiron) Potiron - Normalize, Index and Visualize Network Capture
-- [**54**Star][5m] [Shell] [cignoraptor-ita/cignotrack](https://github.com/cignoraptor-ita/cignotrack) OSINT tool for testing privacy and social engineering vulnerability of organizations.
+- [**54**Star][10m] [Py] [circl/potiron](https://github.com/circl/potiron) Potiron - Normalize, Index and Visualize Network Capture
- [**54**Star][2y] [C++] [census/windows_10_rs2_rs3_exploitation_primitives](https://github.com/census/windows_10_rs2_rs3_exploitation_primitives) Windows 10 RS2/RS3 exploitation primitives based on the OffensiveCon 2018 talk
- [**54**Star][3y] [Assembly] [casperreverser/casperreverse](https://github.com/casperreverser/casperreverse) Here's a quick rundown of how I reversed the Casper API (
-- [**54**Star][2y] [PowerShell] [byt3bl33d3r/invoke-autoit](https://github.com/byt3bl33d3r/invoke-autoit) Loads the AutoIt DLL and PowerShell assemblies into memory and executes the specified keystrokes
+- [**54**Star][2y] [PS] [byt3bl33d3r/invoke-autoit](https://github.com/byt3bl33d3r/invoke-autoit) Loads the AutoIt DLL and PowerShell assemblies into memory and executes the specified keystrokes
+- [**54**Star][9m] [C] [bsidessf/ctf-2019-release](https://github.com/bsidessf/ctf-2019-release) BSidesSF CTF 2019 release
- [**54**Star][7m] [Clojure] [bronsa/tools.decompiler](https://github.com/bronsa/tools.decompiler) A decompiler for clojure, in clojure
-- [**54**Star][6m] [Py] [bao7uo/dp_crypto](https://github.com/bao7uo/dp_crypto) Base64-based encryption oracle exploit for CVE-2017-9248 (Telerik UI for ASP.NET AJAX dialog handler)
- [**54**Star][4y] [JS] [az0ne/simple_zoomeye](https://github.com/az0ne/simple_zoomeye) 一个还正在完善的项目,采用分布式python扫描全国的HTTP服务
-- [**54**Star][4y] [Py] [az0ne/python_backdoor](https://github.com/az0ne/python_backdoor) 过360主动防御360杀毒以前99%杀软的python后门
- [**54**Star][1y] [Self] [ayoul3/privesc](https://github.com/ayoul3/privesc) Privilege escalation tools on Mainframe
- [**54**Star][3y] [Elm] [auth0-blog/elm-with-jwt-api](https://github.com/auth0-blog/elm-with-jwt-api)
-- [**54**Star][9m] [Py] [attackanddefencesecuritylab/ad_webscanner](https://github.com/attackanddefencesecuritylab/ad_webscanner) AD工作室精心研发漏洞安全扫描器
- [**54**Star][2y] [Py] [aserper/ddetect](https://github.com/aserper/ddetect) Simple DDE object detector
-- [**54**Star][3m] [Java] [arloor/httpproxy](https://github.com/arloor/httpproxy) a netty-based http proxy that breaks the GFW。
- [**54**Star][5y] [Java] [ajohnston9/ciscorouter](https://github.com/ajohnston9/ciscorouter) Tool for scanning Cisco router products over SSH
-- [**54**Star][2y] [Py] [ahm3dhany/ids-evasion](https://github.com/ahm3dhany/ids-evasion) Evading Snort Intrusion Detection System.
-- [**54**Star][2y] [Py] [afagarap/malware-classification](https://github.com/afagarap/malware-classification) Towards Building an Intelligent Anti-Malware System: A Deep Learning Approach using Support Vector Machine for Malware Classification
-- [**54**Star][1y] [C#] [advancedhacker101/c-sharp-r.a.t-client](https://github.com/advancedhacker101/c-sharp-r.a.t-client) This is a c# client for the c# R.A.T server
+- [**54**Star][2y] [Java] [5up3rc/weblogic_cmd](https://github.com/5up3rc/weblogic_cmd) weblogic t3 deserialization rce
- [**54**Star][1y] [Py] [5alt/vulhint](https://github.com/5alt/vulhint) VulHint是辅助代码审计的 sublime text 3 插件
-- [**53**Star][7m] [C++] [mozillasecurity/libfuzzer-python-bridge](https://github.com/mozillasecurity/libfuzzer-python-bridge) A Python3 bridge for implementing custom libFuzzer mutators
+- [**53**Star][3d] [Shell] [al0ne/nginx_log_check](https://github.com/al0ne/nginx_log_check) Nginx日志安全分析脚本
+- [**53**Star][6d] [Java] [sukaralin/cve-2019-2890](https://github.com/sukaralin/cve-2019-2890)
+- [**53**Star][5y] [Py] [jeanphorn/common-password](https://github.com/jeanphorn/common-password) 字典生成脚本, 用python语言写成的可交互性的字典生成脚本。尤其适合社会工程学,当你收集到目标的具体信息后,你就可以通过这个脚本来智能化生成关于目标的字典。
+- [**53**Star][7d] [Go] [shopify/voucher](https://github.com/shopify/voucher)
- [**53**Star][11m] [Py] [mushorg/oschameleon](https://github.com/mushorg/oschameleon) OS Fingerprint Obfuscation for modern Linux Kernels
- [**53**Star][9m] [Py] [moosedojo/spotter](https://github.com/moosedojo/spotter) Targeted Payload Execution
-- [**53**Star][1y] [Py] [secwiki/ctf-hub](https://github.com/secwiki/ctf-hub) CTF 题目列表
-- [**53**Star][28d] [Py] [0x90/wpsik](https://github.com/0x90/wpsik) WPS scan and pwn tool
-- [**53**Star][3y] [PowerShell] [elevenpaths/telefonica-wannacry-filerestorer](https://github.com/elevenpaths/telefonica-wannacry-filerestorer) Tool to restore some WannaCry files which encryption weren't finish properly
-- [**53**Star][3y] [Java] [giovannicolonna/msfvenom-backdoor-android](https://github.com/giovannicolonna/msfvenom-backdoor-android) Android backdoored app, improved source code of msfvenom android .apk
-- [**53**Star][9m] [TypeScript] [pengchujin/onesubscribe](https://github.com/pengchujin/onesubscribe) ss ssr v2ray 订阅管理 node 后端
-- [**53**Star][16d] [Java] [cuyler36/ghidra-gamecube-loader](https://github.com/cuyler36/ghidra-gamecube-loader) A Nintendo GameCube binary loader for Ghidra
-- [**53**Star][9m] [Vue] [pengchujin/subscribevue](https://github.com/pengchujin/subscribevue) ss ssr v2ray 订阅管理 vue前端界面
-- [**53**Star][10m] [Shell] [criteo/kerberos-docker](https://github.com/criteo/kerberos-docker) Run kerberos environment in docker containers
-- [**53**Star][19d] [Py] [hamz-a/frida-android-helper](https://github.com/hamz-a/frida-android-helper) Frida Android utilities
+- [**53**Star][24d] [Shell] [threatexpress/pasties](https://github.com/threatexpress/pasties) A collection of random bits of information common to many individual penetration tests, red teams, and other assessments
+- [**53**Star][30d] [Py] [0x90/wpsik](https://github.com/0x90/wpsik) WPS scan and pwn tool
+- [**53**Star][3y] [PS] [elevenpaths/telefonica-wannacry-filerestorer](https://github.com/elevenpaths/telefonica-wannacry-filerestorer) Tool to restore some WannaCry files which encryption weren't finish properly
+- [**53**Star][22d] [Java] [thisislibra/genesis](https://github.com/thisislibra/genesis) A framework to generate unique test cases based on code snippets to test techniques
+- [**53**Star][11m] [Shell] [criteo/kerberos-docker](https://github.com/criteo/kerberos-docker) Run kerberos environment in docker containers
+- [**53**Star][21d] [Py] [hamz-a/frida-android-helper](https://github.com/hamz-a/frida-android-helper) Frida Android utilities
+- [**53**Star][2m] [mohitkhemchandani/oscp-complete-guide](https://github.com/mohitkhemchandani/oscp-complete-guide) How to prepare for OSCP complete guide
+- [**53**Star][4d] [JS] [bazzite/nuxt-netlify](https://github.com/bazzite/nuxt-netlify) Dynamically generate _headers and _redirects files for Netlify in your Nuxt.js projects
+- [**53**Star][1y] [Py] [synacktiv-contrib/modmobmap](https://github.com/Synacktiv-contrib/Modmobmap) Map 2G/3G/4G and more cellular networks in real live with a simple smart phone, pretty much like osmocomBB monitoring feature.
- [**53**Star][8m] [Py] [synacktiv-contrib/stuffz](https://github.com/Synacktiv-contrib/stuffz) Repository containing many useful scripts
+- [**53**Star][3y] [Py] [ghostlulzhacks/rolljam](https://github.com/ghostlulzhacks/rolljam) rolljam
- [**53**Star][2y] [HTML] [jm33-m0/gfw_scripts](https://github.com/jm33-m0/gfw_scripts) added shadowsocks plugin for gee 4
+- [**53**Star][2y] [fsecurelabs/defcon25_uac_workshop](https://github.com/FSecureLABS/defcon25_uac_workshop) UAC 0Day all day!
+- [**53**Star][1m] [b-mueller/awesome-mythx-smart-contract-security-tools](https://github.com/b-mueller/awesome-mythx-smart-contract-security-tools) A curated list of resources and tools for the MythX smart contract security API
- [**53**Star][2y] [Java] [zyrikby/fsquadra](https://github.com/zyrikby/fsquadra) Fast detection of repackaged Android applications based on the comparison of resource files included into the package.
- [**53**Star][4y] [Py] [zenfish/ipmi](https://github.com/zenfish/ipmi) IPMI stuff from DARPA work
-- [**53**Star][3m] [C#] [z3prover/firewallchecker](https://github.com/z3prover/firewallchecker) A self-contained firewall checker
+- [**53**Star][7d] [C#] [z3prover/firewallchecker](https://github.com/z3prover/firewallchecker) A self-contained firewall checker
- [**53**Star][9m] [Shell] [xalfie/nix-auditor](https://github.com/xalfie/nix-auditor) Nix Audit made easier (RHEL, CentOS)
-- [**53**Star][6m] [C++] [x64dbg/snowman](https://github.com/x64dbg/snowman) Snowman Decompiler for x64dbg (LOOKING FOR MAINTAINER)
-- [**53**Star][19d] [C] [watf-team/watf-bank](https://github.com/watf-team/watf-bank) WaTF Bank - What a Terrible Failure Mobile Banking Application for Android and iOS
+- [**53**Star][1m] [Go] [wrfly/gus-proxy](https://github.com/wrfly/gus-proxy) "打一枪换一个地方" 一个HTTP代理
- [**53**Star][1y] [Shell] [w3c/device-memory](https://github.com/w3c/device-memory) Device Memory
-- [**53**Star][8d] [Py] [w181496/ctf](https://github.com/w181496/ctf) My CTF writeups
-- [**53**Star][9m] [PowerShell] [vtagion/scripts](https://github.com/vtagion/scripts)
-- [**53**Star][7y] [Visual Basic] [vbgamer45/semi-vb-decompiler](https://github.com/vbgamer45/semi-vb-decompiler) Partial decompiler for Visual Basic. Code source of file struture infomation.
+- [**53**Star][9m] [PS] [vtagion/scripts](https://github.com/vtagion/scripts)
+- [**53**Star][7y] [Visual Basic .NET] [vbgamer45/semi-vb-decompiler](https://github.com/vbgamer45/semi-vb-decompiler) Partial decompiler for Visual Basic. Code source of file struture infomation.
- [**53**Star][2y] [Py] [uzetta27/easyrop](https://github.com/uzetta27/easyrop) A Python tool to generate ROP chains
-- [**53**Star][6m] [Py] [turr0n/firebase](https://github.com/turr0n/firebase) Exploiting misconfigured firebase databases
- [**53**Star][5y] [Java] [thuxnder/androiddevice.info](https://github.com/thuxnder/androiddevice.info) Android app collecting device information and submiting it to
-- [**53**Star][1y] [Shell] [thelinuxchoice/tweetshell](https://github.com/thelinuxchoice/tweetshell) Multi-thread Twitter BruteForcer in Shell Script
-- [**53**Star][10d] [Py] [taokong/group_normalization](https://github.com/taokong/group_normalization) pytorch implementation of group normalization in
+- [**53**Star][12d] [Py] [taokong/group_normalization](https://github.com/taokong/group_normalization) pytorch implementation of group normalization in
+- [**53**Star][1m] [Rust] [str4d/ire](https://github.com/str4d/ire) I2P router implementation in Rust
+- [**53**Star][2y] [Py] [spritz-research-group/ctf-writeups](https://github.com/spritz-research-group/ctf-writeups) SPRITZ plays CTFs! Writeups by spritzers
+- [**53**Star][6d] [Py] [snowflakedb/snowalert](https://github.com/snowflakedb/snowalert) Security Analytics Using The Snowflake Data Warehouse
- [**53**Star][5m] [Py] [sneakerhax/pyphisher](https://github.com/sneakerhax/pyphisher) A simple python tool for phishing
-- [**53**Star][2y] [rehints/blackhat_2017](https://github.com/rehints/blackhat_2017) Betraying the BIOS: Where the Guardians of the BIOS are Failing
-- [**53**Star][2y] [PowerShell] [powershell/gpregistrypolicy](https://github.com/powershell/gpregistrypolicy)
-- [**53**Star][1y] [PowerShell] [pldmgg/winadmincenterps](https://github.com/pldmgg/winadmincenterps) Copy of Windows Admin Center (
-- [**53**Star][30d] [Ruby] [picatz/shodanz](https://github.com/picatz/shodanz)
+- [**53**Star][1m] [JS] [secgroup/flower](https://github.com/secgroup/flower) TCP flow analyzer with sugar for A/D CTF
+- [**53**Star][4y] [C++] [scadacs/plcinject](https://github.com/scadacs/plcinject)
+- [**53**Star][1m] [Py] [reorx/python-terminal-color](https://github.com/reorx/python-terminal-color) Drop-in single file library for printing color in terminal
+- [**53**Star][2y] [PS] [powershell/gpregistrypolicy](https://github.com/powershell/gpregistrypolicy)
- [**53**Star][12m] [Py] [payatu/cve-2018-14442](https://github.com/payatu/cve-2018-14442) PoC for Foxit Reader CVE-2018-14442
-- [**53**Star][3y] [Py] [patois/drgadget](https://github.com/patois/drgadget) IDAPython plugin for the Interactive Disassembler
-- [**53**Star][1m] [Visual Basic] [outflanknl/scripts](https://github.com/outflanknl/scripts) Small scripts that make life better
+- [**53**Star][3d] [C] [outscale/packetgraph](https://github.com/outscale/packetgraph) Packetgraph library is a collection of network bricks you can connect to form a network graph.
- [**53**Star][6m] [JS] [ollseg/ttt-ext](https://github.com/ollseg/ttt-ext) Chrome extension to aid in finding DOMXSS by simple taint analysis of string values.
+- [**53**Star][8m] [Py] [nwmonster/applysig](https://github.com/nwmonster/applysig) Apply IDA FLIRT signatures for Ghidra
- [**53**Star][3y] [Shell] [nvssks/android-responder](https://github.com/nvssks/android-responder) Scripts for running Responder.py in an Android (rooted) device.
- [**53**Star][6y] [JS] [niegowski/node-daemonize2](https://github.com/niegowski/node-daemonize2) Node module for easy creation of daemons for Node 0.8.x and above
- [**53**Star][3m] [Shell] [nameles-org/nameles](https://github.com/nameles-org/nameles) Open source entropy based invalid traffic detection and pre-bid filtering.
- [**53**Star][5m] [Py] [n0fate/ichainbreaker](https://github.com/n0fate/ichainbreaker) Breaking the iCloud Keychain Artifacts
- [**53**Star][2y] [C++] [mq1n/dllthreadinjectiondetector](https://github.com/mq1n/dllthreadinjectiondetector)
- [**53**Star][2y] [Java] [modzero/modjoda](https://github.com/modzero/modjoda) Java Object Deserialization on Android
-- [**53**Star][1y] [C] [mikeryan/uberducky](https://github.com/mikeryan/uberducky) 将Ubertooth转换为通过BLE触发的无线USB橡皮鸭
- [**53**Star][2y] [Shell] [mempodippy/snodew](https://github.com/mempodippy/snodew) PHP root (suid) reverse shell
- [**53**Star][1y] [Py] [m4ll0k/icloudbrutter](https://github.com/m4ll0k/icloudbrutter) AppleID Bruteforce
- [**53**Star][4y] [C] [lgeek/dynamorio_pin_escape](https://github.com/lgeek/dynamorio_pin_escape)
-- [**53**Star][4y] [PHP] [kulisu/metasploit-pro-trial-grabber](https://github.com/kulisu/metasploit-pro-trial-grabber) This is a PHP command-line script to auto-grab the metasploit 14-DAYs pro trial key.
+- [**53**Star][5y] [PHP] [kulisu/metasploit-pro-trial-grabber](https://github.com/kulisu/metasploit-pro-trial-grabber) This is a PHP command-line script to auto-grab the metasploit 14-DAYs pro trial key.
- [**53**Star][7y] [C] [kmcallister/alameda](https://github.com/kmcallister/alameda) Linux kernel JIT spray for SMEP / KERNEXEC bypass
- [**53**Star][4y] [Py] [juliocesarfort/netscreen-shodan-scanner](https://github.com/juliocesarfort/netscreen-shodan-scanner) A SHODAN/Censys + Paramiko scanner to check for backdoored Internet-facing Juniper ScreenOS devices
-- [**53**Star][2y] [jkpang/timliu-ios](https://github.com/jkpang/timliu-ios) iOS开发常用三方库、插件、知名博客等等
-- [**53**Star][2y] [objective-c] [iabem97/securityd-racer2](https://github.com/iabem97/securityd-racer2) PoC vulnerability in securityd
-- [**53**Star][9d] [C++] [hasherezade/vidi](https://github.com/hasherezade/vidi) ViDi Visual Disassembler (experimental)
+- [**53**Star][9m] [Java] [jogolden/ghidraps4loader](https://github.com/jogolden/ghidraps4loader) A Ghidra loader for PlayStation 4 binaries.
+- [**53**Star][5m] [C++] [jesseemond/cheat-and-gin](https://github.com/jesseemond/cheat-and-gin) C++ cheat engine (memory scanner)
+- [**53**Star][2y] [ObjC] [iabem97/securityd-racer2](https://github.com/iabem97/securityd-racer2) PoC vulnerability in securityd
+- [**53**Star][3m] [Shell] [hirbodbehnam/shadowsocks-cloak-installer](https://github.com/hirbodbehnam/shadowsocks-cloak-installer) A one-key script to setup Cloak plugin with Shadowsocks on your server
+- [**53**Star][11d] [C++] [hasherezade/vidi](https://github.com/hasherezade/vidi) ViDi Visual Disassembler (experimental)
- [**53**Star][5y] [C++] [hackedteam/core-win32](https://github.com/hackedteam/core-win32) RCS Agent for Windows (32bit)
- [**53**Star][2y] [Py] [h-j-13/malicious_domain_whois](https://github.com/h-j-13/malicious_domain_whois)
- [**53**Star][2y] [C#] [guardicore/azure_password_harvesting](https://github.com/guardicore/azure_password_harvesting) Plaintext Password harvesting from Azure Windows VMs
-- [**53**Star][2m] [Py] [gray-panda/grayrepo](https://github.com/gray-panda/grayrepo) Personal repository for all ctf related stuffs
- [**53**Star][1m] [C] [gluster/gluster-block](https://github.com/gluster/gluster-block) A framework for gluster block storage
- [**53**Star][5y] [C#] [glmcdona/functionhacker](https://github.com/glmcdona/functionhacker) Maintaining an official release at
- [**53**Star][3y] [Py] [gideonn/insta-gallery-downloader](https://github.com/gideonn/insta-gallery-downloader) This is a bot to download all your instagram gallery pictures in a single folder
-- [**53**Star][4y] [Go] [gehaxelt/ds_store](https://github.com/gehaxelt/ds_store) GO - Minimal parser for .DS_Store files
+- [**53**Star][4y] [PHP] [gfoss/phpmyadmin_honeypot](https://github.com/gfoss/phpmyadmin_honeypot)
- [**53**Star][2y] [g-solaria/osintforpentests](https://github.com/g-solaria/osintforpentests) Slides from my ShellCon Talk, OSINT for Pen Tests, given 10/19.
-- [**53**Star][9m] [Py] [fox-it/bloodhound-import](https://github.com/fox-it/bloodhound-import) Python based BloodHound data importer
-- [**53**Star][9d] [JS] [fedora-infra/asknot-ng](https://github.com/fedora-infra/asknot-ng) What can I do for $ORGANIZATION?
+- [**53**Star][2y] [Shell] [evyatarmeged/stegextract](https://github.com/evyatarmeged/stegextract) Detect hidden files and text in images
- [**53**Star][1y] [JS] [evyatarmeged/humanoid](https://github.com/evyatarmeged/humanoid) Node.js package to bypass CloudFlare's anti-bot JavaScript challenges
- [**53**Star][7y] [C++] [eschweiler/proreversing](https://github.com/eschweiler/proreversing) Open and generic Anti-Anti Reversing Framework. Works in 32 and 64 bits.
- [**53**Star][2m] [C#] [ericzimmerman/bstrings](https://github.com/ericzimmerman/bstrings) A better strings utility!
+- [**53**Star][2m] [Shell] [edoverflow/smith](https://github.com/edoverflow/smith) Simple wrapper for meg that sieves through meg's output for you.
+- [**53**Star][7m] [Py] [edent/renault-zoe-api](https://github.com/edent/renault-zoe-api) A basic API for getting information about your Renault Zoe Electric Vehicle.
+- [**53**Star][3y] [Py] [dmuhs/pastebin-scraper](https://github.com/dmuhs/pastebin-scraper) Live-scraping pastebin to fight boredom.
- [**53**Star][2y] [Go] [diogomonica/actuary](https://github.com/diogomonica/actuary) An actuary is a business professional who analyzes the financial consequences of risk.
- [**53**Star][3y] [Shell] [dg92/node-express-postgres-redis-starter-kit](https://github.com/dg92/node-express-postgres-redis-starter-kit) This is a starter kit that help you get started with node, express, postgresql, redis. Node.js / Express / PostgreSQL / Authentication API Starter Kit
+- [**53**Star][2y] [Py] [devsecops/defcon-workshop](https://github.com/devsecops/defcon-workshop)
+- [**53**Star][5m] [Py] [deadbits/malware-analysis-scripts](https://github.com/deadbits/malware-analysis-scripts) Collection of scripts for different malware analysis tasks
+- [**53**Star][2m] [HTML] [daxio/k8s-lemp](https://github.com/daxio/k8s-lemp) LEMP stack in a Kubernetes cluster
- [**53**Star][4y] [C++] [datachi/memdb](https://github.com/datachi/memdb) Tools to track memory accesses in applications and visualize the patterns to reveal opportunities for optimization.
- [**53**Star][12m] [Shell] [damonmohammadbagher/nativepayload_image](https://github.com/damonmohammadbagher/nativepayload_image) Transferring Backdoor Payloads with BMP Image Pixels
- [**53**Star][5m] [HTML] [d1str0/drupot](https://github.com/d1str0/drupot) Drupal Honeypot
@@ -11630,172 +12377,205 @@ networking routines
- [**53**Star][2y] [Py] [coffeehb/sstif](https://github.com/coffeehb/sstif) 一个Fuzzing服务器端模板注入漏洞的半自动化工具
- [**53**Star][4y] [C++] [cn33liz/p0shkiller](https://github.com/cn33liz/p0shkiller)
- [**53**Star][12m] [chryzsh/practical-hacking](https://github.com/chryzsh/practical-hacking) Repo for the Gitbook Practical Hacking
+- [**53**Star][2y] [JS] [christophetd/docker-python-sandbox](https://github.com/christophetd/docker-python-sandbox) A Docker-powered NodeJS sandbox to execute untrusted python code.
- [**53**Star][1y] [C] [chen-charles/pedetour](https://github.com/chen-charles/pedetour) modify binary Portable Executable to hook its export functions
- [**53**Star][2y] [Py] [carnal0wnage/malicious_file_maker](https://github.com/carnal0wnage/malicious_file_maker) malicious file maker/sender to create and send malicious attachments to test your email filter/alerting
- [**53**Star][12m] [bughunterid/bughunterid](https://github.com/bughunterid/bughunterid) Para pencari bug / celah kemanan bisa bergabung.
-- [**53**Star][9m] [C] [bsidessf/ctf-2019-release](https://github.com/bsidessf/ctf-2019-release) BSidesSF CTF 2019 release
- [**53**Star][3m] [Shell] [bishopfox/pwn-pulse](https://github.com/bishopfox/pwn-pulse) Exploit for Pulse Connect Secure SSL VPN arbitrary file read vulnerability (CVE-2019-11510)
+- [**53**Star][3m] [Java] [arloor/httpproxy](https://github.com/arloor/httpproxy) a netty-based http proxy that breaks the GFW。
- [**53**Star][3y] [C++] [aixxe/chameleon](https://github.com/aixxe/chameleon) Basic skin & knife changer for Counter-Strike: Global Offensive
- [**53**Star][3y] [agahlot/rtfm](https://github.com/agahlot/rtfm) Red Team Field Manual
-- [**53**Star][10d] [C] [ademakov/mainmemory](https://github.com/ademakov/mainmemory) Wannabe Main Memory Database and More
+- [**53**Star][1y] [C#] [advancedhacker101/c-sharp-r.a.t-client](https://github.com/advancedhacker101/c-sharp-r.a.t-client) This is a c# client for the c# R.A.T server
+- [**53**Star][7d] [C] [ademakov/mainmemory](https://github.com/ademakov/mainmemory) Wannabe Main Memory Database and More
- [**53**Star][2y] [Py] [0x4d31/sqhunter](https://github.com/0x4d31/sqhunter) A simple threat hunting tool based on osquery, Salt Open and Cymon API
+- [**53**Star][7m] [C] [0cch/0cchext](https://github.com/0cch/0cchext) 0CCh Windbg extension
- [**52**Star][2y] [Py] [sensepost/peanuts](https://github.com/sensepost/peanuts) Peanuts is a free and open source wifi tracking tool. Based on the SensePosts Snoopy-NG project that is now closed.
- [**52**Star][1y] [Py] [nixawk/hello-python2](https://github.com/nixawk/hello-python2) Python libraries demos
- [**52**Star][5y] [Ruby] [michenriksen/hibp](https://github.com/michenriksen/hibp) A simple tool to check a bunch of email addresses against the Have I Been Pwned API.
-- [**52**Star][2m] [Shell] [ullaakut/awesome-macos-setup](https://github.com/ullaakut/awesome-macos-setup) A repository with tools to automatically make any Mac awesome in a few minutes
-- [**52**Star][22d] [Shell] [threatexpress/pasties](https://github.com/threatexpress/pasties) A collection of random bits of information common to many individual penetration tests, red teams, and other assessments
- [**52**Star][3y] [Py] [tobefuturer/ida-swift-demangle](https://github.com/tobefuturer/ida-swift-demangle) A tool to demangle Swift function names in IDA.
- [**52**Star][2y] [Py] [yadox666/wifi_ccc](https://github.com/yadox666/wifi_ccc) Wi-Fi Covert Channel Chat demo application
-- [**52**Star][18d] [C] [ixzzving/ssr-vpn](https://github.com/ixzzving/ssr-vpn) Shadowsocks & ShadowsocksR & V2Ray & V2RayNG & VNET/酸酸乳节点及客户端
+- [**52**Star][7m] [Py] [shadowsocksr-live/shadowsocksr](https://github.com/shadowsocksr-live/shadowsocksr)
+- [**52**Star][29d] [Py] [jas502n/solr_rce](https://github.com/jas502n/solr_rce) Apache Solr RCE via Velocity template
+- [**52**Star][2y] [C++] [xfgryujk/cheatingtutorial](https://github.com/xfgryujk/cheatingtutorial) 一个游戏修改器制作教程的例程
- [**52**Star][3y] [Py] [test-pipeline/orthrus](https://github.com/test-pipeline/orthrus) A tool to manage, conduct, and assess dictionary-based fuzz testing
-- [**52**Star][23d] [C] [bmegli/wifi-scan](https://github.com/bmegli/wifi-scan) A nl80211 C/C++ library for monitoring signal strength of WiFi networks
-- [**52**Star][2m] [mohitkhemchandani/oscp-complete-guide](https://github.com/mohitkhemchandani/oscp-complete-guide) How to prepare for OSCP complete guide
-- [**52**Star][1y] [Py] [synacktiv-contrib/modmobmap](https://github.com/Synacktiv-contrib/Modmobmap) Map 2G/3G/4G and more cellular networks in real live with a simple smart phone, pretty much like osmocomBB monitoring feature.
-- [**52**Star][3y] [Py] [ghostlulzhacks/rolljam](https://github.com/ghostlulzhacks/rolljam) rolljam
+- [**52**Star][25d] [C] [bmegli/wifi-scan](https://github.com/bmegli/wifi-scan) A nl80211 C/C++ library for monitoring signal strength of WiFi networks
+- [**52**Star][7d] [Go] [giuliocomi/backoori](https://github.com/giuliocomi/backoori) Tool aided persistence via Windows URI schemes abuse
+- [**52**Star][4m] [Py] [lengjibo/dedecmscan](https://github.com/lengjibo/dedecmscan) 织梦全版本漏洞扫描
+- [**52**Star][3y] [Py] [cylance/mitmcanary](https://github.com/cylance/mitmcanary) Tool/service to detect Man in the Middle attacks with Canary Requests
- [**52**Star][11m] [JS] [kruegerrobotics/lan-monitor](https://github.com/kruegerrobotics/lan-monitor) Simple website to display the LAN status based on a nmap scan
-- [**52**Star][2y] [fsecurelabs/defcon25_uac_workshop](https://github.com/FSecureLABS/defcon25_uac_workshop) UAC 0Day all day!
-- [**52**Star][1m] [b-mueller/awesome-mythx-smart-contract-security-tools](https://github.com/b-mueller/awesome-mythx-smart-contract-security-tools) A curated list of resources and tools for the MythX smart contract security API
- [**52**Star][9m] [Logos] [zhaochengxiang/ioswechatfakelocation](https://github.com/zhaochengxiang/ioswechatfakelocation) A tweak that can fake location info in WeChat
- [**52**Star][5y] [Py] [x0day/multiproxies](https://github.com/x0day/multiproxies) penetration testing framework that can use socks4/socks5 proxy.
- [**52**Star][3y] [Py] [wraith-wireless/pyric](https://github.com/wraith-wireless/pyric) Python wireless library for Linux
-- [**52**Star][8d] [TypeScript] [wkovacs64/hibp](https://github.com/wkovacs64/hibp) A Promise-based API for querying the 'Have I been pwned?' service.
+- [**52**Star][2d] [TS] [wkovacs64/hibp](https://github.com/wkovacs64/hibp) A Promise-based API for querying the 'Have I been pwned?' service.
- [**52**Star][2y] [C#] [vmcall/mapdetection](https://github.com/vmcall/mapdetection) Detect manualmapped images remotely, without hassle
-- [**52**Star][2y] [JS] [tyrmars/websafe-steppitguide](https://github.com/tyrmars/websafe-steppitguide) Web前后端漏洞分析与防御-知识梳理
+- [**52**Star][6m] [C++] [virgilsecurity/virgil-crypto](https://github.com/virgilsecurity/virgil-crypto) Virgil Crypto is a high-level cryptographic library that allows you to perform all necessary operations for secure storing and transferring data and everything required to become HIPAA and GDPR compliant. Crypto Library is written in C++, suitable for mobile and server platforms and supports bindings with: Swift, Obj-C, Java (Android), С#/.NET, …
+- [**52**Star][9d] [tyrmars/websafe-steppitguide](https://github.com/tyrmars/websafe-steppitguide) Web前后端漏洞分析与防御-知识梳理
- [**52**Star][1y] [Py] [truneski/external_c2_framework](https://github.com/truneski/external_c2_framework) Python api for usage with cobalt strike's External C2 specification
- [**52**Star][1y] [C#] [them4hd1/jcs](https://github.com/them4hd1/jcs) Joomla Vulnerability Component Scanner
- [**52**Star][1y] [Py] [theevilbit/workshops](https://github.com/theevilbit/workshops)
- [**52**Star][7m] [C] [strivexjun/hidedll](https://github.com/strivexjun/hidedll) Hide DLL / Hide Module / Hide Dynamic Link Library
-- [**52**Star][2y] [Py] [spritz-research-group/ctf-writeups](https://github.com/spritz-research-group/ctf-writeups) SPRITZ plays CTFs! Writeups by spritzers
- [**52**Star][3y] [PHP] [shenzhenjinma/aliredenvelope](https://github.com/shenzhenjinma/aliredenvelope) 支付宝红包破解算法
- [**52**Star][3y] [C++] [sektioneins/wwcd](https://github.com/sektioneins/wwcd) Capstone powered IDA view
- [**52**Star][3y] [Py] [secwiki/some-poc-or-exp](https://github.com/secwiki/some-poc-or-exp) 各种漏洞poc、Exp的收集或编写
-- [**52**Star][1m] [JS] [secgroup/flower](https://github.com/secgroup/flower) TCP flow analyzer with sugar for A/D CTF
+- [**52**Star][10m] [Java] [ruedigergad/clj-net-pcap](https://github.com/ruedigergad/clj-net-pcap) A wrapper/facade/whatever to enable/ease the use of jNetPcap (a libpcap based packet sniffing lib) in Clojure
+- [**52**Star][2y] [rehints/blackhat_2017](https://github.com/rehints/blackhat_2017) Betraying the BIOS: Where the Guardians of the BIOS are Failing
- [**52**Star][2y] [C] [rc0r/afl-fuzz](https://github.com/rc0r/afl-fuzz) Non-official repository for lcamtuf's American Fuzzy Lop
- [**52**Star][10m] [Assembly] [pret/pokepinball](https://github.com/pret/pokepinball) disassembly of pokémon pinball
+- [**52**Star][1y] [PS] [pldmgg/winadmincenterps](https://github.com/pldmgg/winadmincenterps) Copy of Windows Admin Center (
- [**52**Star][1y] [C] [phdphuc/mac-a-mal](https://github.com/phdphuc/mac-a-mal) 追踪macOS恶意软件的内核驱动, 与Cuckoo沙箱组合使用
- [**52**Star][3y] [ASP] [pentesthub/priviledgebook](https://github.com/pentesthub/priviledgebook) 提权的文档
+- [**52**Star][4m] [payloadbox/open-redirect-payload-list](https://github.com/payloadbox/open-redirect-payload-list)
+- [**52**Star][19d] [Py] [patois/xray](https://github.com/patois/xray) Hexrays decompiler plugin that colorizes and filters the decompiler's output based on regular expressions
+- [**52**Star][2m] [PS] [palantir/exploitguard](https://github.com/palantir/exploitguard) Documentation and supporting script sample for Windows Exploit Guard
- [**52**Star][2y] [Java] [owasp-ruhrpott/owasp-workshop-android-pentest](https://github.com/owasp-ruhrpott/owasp-workshop-android-pentest) Learning Penetration Testing of Android Applications
- [**52**Star][5y] [Py] [osandamalith/chromefreak](https://github.com/osandamalith/chromefreak) A Cross-Platform Forensic Framework for Google Chrome
-- [**52**Star][5y] [Pascal] [nyx0/pony](https://github.com/nyx0/pony) Pony 2.0 Stealer
- [**52**Star][3y] [PHP] [northwind6/webbug](https://github.com/northwind6/webbug) WebBug漏洞练习平台
- [**52**Star][1y] [Py] [nikallass/sharesearch](https://github.com/nikallass/sharesearch) Samba, NFS shares spider and grepper
-- [**52**Star][2m] [netstalking-core/netstalking-osint](https://github.com/netstalking-core/netstalking-osint) Коллекция материалов по OSINT для нетсталкинга
- [**52**Star][2y] [Py] [neo23x0/radiocarbon](https://github.com/neo23x0/radiocarbon) Leak File Analyzer
+- [**52**Star][2m] [Py] [nelenkov/android-device-check](https://github.com/nelenkov/android-device-check) Check Android device security settings
+- [**52**Star][2y] [PS] [mr-un1k0d3r/base64-obfuscator](https://github.com/mr-un1k0d3r/base64-obfuscator) Simple PowerShell Base64 encoder to avoid detection of your malicious payload
+- [**52**Star][4d] [Shell] [mitchellkrogza/badd-boyz-hosts](https://github.com/mitchellkrogza/badd-boyz-hosts) A hosts file for use on any operating system to block bad domains out of your servers or devices.
+- [**52**Star][1y] [C] [miguelangel-nubla/videop2proxy](https://github.com/miguelangel-nubla/videop2proxy) Proxy to enable P2P only cameras to work with standard protocols.
- [**52**Star][7y] [Ruby] [medelibero/ddos-tools](https://github.com/medelibero/ddos-tools) Tools that were created to help with Distributed Denial of Service testing
- [**52**Star][11m] [Py] [matonis/yara_tools](https://github.com/matonis/yara_tools) Create an entire YARA rule via Python? Whhhhhhaatttt?
-- [**52**Star][3y] [PowerShell] [m-dwyer/cryptoblocker](https://github.com/m-dwyer/cryptoblocker) A script to deploy File Server Resource Manager and associated scripts to block infected users
+- [**52**Star][9m] [C] [marcan/lsirec](https://github.com/marcan/lsirec) LSI SAS2008/SAS2108 low-level recovery tool for Linux
+- [**52**Star][3y] [PS] [m-dwyer/cryptoblocker](https://github.com/m-dwyer/cryptoblocker) A script to deploy File Server Resource Manager and associated scripts to block infected users
+- [**52**Star][5m] [Py] [lorexxar/redis-rogue-server](https://github.com/lorexxar/redis-rogue-server) Redis 4.x & 5.x RCE
- [**52**Star][1y] [Py] [libraggbond/cve-2018-3191](https://github.com/libraggbond/cve-2018-3191) CVE-2018-3191 反弹shell
- [**52**Star][3y] [Roff] [ldbfpiaoran/websearch](https://github.com/ldbfpiaoran/websearch) Search engine for web assets
-- [**52**Star][12m] [Py] [klsecservices/s7scan](https://github.com/klsecservices/s7scan) The tool for enumerating Siemens S7 PLCs through TCP/IP or LLC network
- [**52**Star][6y] [Py] [kevthehermit/maildb](https://github.com/kevthehermit/maildb) Python Web App to Parse and Track Email and http Pcap Files.
- [**52**Star][2y] [Py] [joker25000/dzjecter](https://github.com/joker25000/dzjecter)
- [**52**Star][5y] [C++] [jieyu/maple](https://github.com/jieyu/maple) A dynamic analysis framework for concurrent programs (x86 binaries). It is shipped with a few tools written using this framework for testing concurrent programs.
- [**52**Star][5y] [Py] [jfoote/burp-git-bridge](https://github.com/jfoote/burp-git-bridge) Store Burp data and collaborate via git
-- [**52**Star][5m] [C++] [jesseemond/cheat-and-gin](https://github.com/jesseemond/cheat-and-gin) C++ cheat engine (memory scanner)
+- [**52**Star][2y] [Py] [jflyup/goms17-010](https://github.com/jflyup/goms17-010) Simple program for detecting if host(s) are vulnerable to SMB exploit(MS17-010)
- [**52**Star][5y] [Py] [jeffreysasaki/backdoor](https://github.com/jeffreysasaki/backdoor) Linux backdoor implementation written in Python
- [**52**Star][1y] [JS] [jeffbryner/mozdef](https://github.com/jeffbryner/mozdef) MozDef: The Mozilla Defense Platform
- [**52**Star][2y] [Py] [inurlx/cloudkill3r](https://github.com/inurlx/cloudkill3r) CLOUDKiLL3R bypasses Cloudflare protection service via TOR Browser using crimeflare !
+- [**52**Star][2m] [Py] [idapython/pyhexraysdeob](https://github.com/idapython/pyhexraysdeob) A port of Rolf Rolles hexraysdeob
- [**52**Star][3y] [PHP] [httpoxy/php-fpm-httpoxy-poc](https://github.com/httpoxy/php-fpm-httpoxy-poc) A PoC for exploiting Guzzle's HTTP_PROXY untrusted read
+- [**52**Star][2y] [C] [hasherezade/process_chameleon](https://github.com/hasherezade/process_chameleon) A process overwriting its own PEB to make an illusion that it has been loaded from a different path.
- [**52**Star][4y] [HTML] [hakanson/ng-owasp](https://github.com/hakanson/ng-owasp) OWASP Top 10 for AngularJS Applications
-- [**52**Star][3m] [Py] [grrrdog/tacotaco](https://github.com/grrrdog/tacotaco) Some scripts for attacks on Tacacs+ protocol
-- [**52**Star][4y] [PHP] [gfoss/phpmyadmin_honeypot](https://github.com/gfoss/phpmyadmin_honeypot)
-- [**52**Star][5y] [C++] [georgenicolaou/heaveninjector](https://github.com/georgenicolaou/heaveninjector) Simple proof of concept code for injecting libraries on 64bit processes from a 32bit process
+- [**52**Star][4m] [Py] [grrrdog/tacotaco](https://github.com/grrrdog/tacotaco) Some scripts for attacks on Tacacs+ protocol
+- [**52**Star][6y] [C++] [georgenicolaou/heaveninjector](https://github.com/georgenicolaou/heaveninjector) Simple proof of concept code for injecting libraries on 64bit processes from a 32bit process
- [**52**Star][2y] [C] [gentilkiwi/spectre_meltdown](https://github.com/gentilkiwi/spectre_meltdown)
- [**52**Star][3y] [C] [fuzzstati0n/fuzzgoat](https://github.com/fuzzstati0n/fuzzgoat) A vulnerable C program for testing fuzzers.
- [**52**Star][4m] [Py] [fkasler/dolos_cloak](https://github.com/fkasler/dolos_cloak) Automated 802.1x Bypass
- [**52**Star][5y] [C++] [filcab/patchdiff2](https://github.com/filcab/patchdiff2) IDA binary differ. Since code.google.com/p/patchdiff2/ seemed abandoned, I did the obvious thing…
- [**52**Star][2y] [Py] [fideliscyber/indicators](https://github.com/fideliscyber/indicators) Indicators from FTAs and Blog Posts
- [**52**Star][11m] [feicong/zsxq_archives](https://github.com/feicong/zsxq_archives) 【软件安全与知识星球】精华文章列表
-- [**52**Star][1m] [Py] [ezelf/f5_cookieleaks](https://github.com/ezelf/f5_cookieleaks) Decode the cookies set by balancer F5, and disclousure all pool ip
+- [**52**Star][2m] [Py] [ezelf/f5_cookieleaks](https://github.com/ezelf/f5_cookieleaks) Decode the cookies set by balancer F5, and disclousure all pool ip
- [**52**Star][6y] [Py] [enthought/python-2.7.3](https://github.com/enthought/python-2.7.3)
- [**52**Star][10m] [Java] [empireproject/empiremobile](https://github.com/empireproject/empiremobile) Android and iOS source for the Empire mobile app
-- [**52**Star][6m] [Py] [edent/renault-zoe-api](https://github.com/edent/renault-zoe-api) A basic API for getting information about your Renault Zoe Electric Vehicle.
-- [**52**Star][3y] [Py] [dmuhs/pastebin-scraper](https://github.com/dmuhs/pastebin-scraper) Live-scraping pastebin to fight boredom.
+- [**52**Star][2y] [Py] [disruptops/cred_scanner](https://github.com/disruptops/cred_scanner) A simple file-based scanner to look for potential AWS access and secret keys in files
- [**52**Star][1m] [Py] [didierstevens/beta](https://github.com/didierstevens/beta) Beta versions of my software
-- [**52**Star][2y] [Py] [devsecops/defcon-workshop](https://github.com/devsecops/defcon-workshop)
- [**52**Star][6y] [Ruby] [depthsecurity/dahua_dvr_auth_bypass](https://github.com/depthsecurity/dahua_dvr_auth_bypass) Dahua CCTV DVR Authentication Bypass Metasploit Scanning Module
+- [**52**Star][2y] [C] [dennypage/dpinger](https://github.com/dennypage/dpinger) dpinger:持续性监控网络延迟和数据包丢失
+- [**52**Star][2m] [Py] [dedsecinside/awesome-scripts](https://github.com/dedsecinside/awesome-scripts) A collection of awesome scripts from developers around the globe.
- [**52**Star][8y] [Py] [crossbowerbt/gdb-python-utils](https://github.com/crossbowerbt/gdb-python-utils) A library for GDB (with python support), that adds useful functions to the standard 'gdb' library.
-- [**52**Star][5m] [Py] [crond-jaist/cytrone](https://github.com/crond-jaist/cytrone) CyTrONE: Integrated Cybersecurity Training Framework
+- [**52**Star][8d] [Py] [crond-jaist/cytrone](https://github.com/crond-jaist/cytrone) CyTrONE: Integrated Cybersecurity Training Framework
- [**52**Star][2y] [C] [cn33liz/hsevd-stackoverflowx64](https://github.com/cn33liz/hsevd-stackoverflowx64) HackSys Extreme Vulnerable Driver - Windows 10 x64 StackOverflow Exploit with SMEP Bypass
+- [**52**Star][2y] [Go] [cmars/ormesh](https://github.com/cmars/ormesh) onion-routed mesh
+- [**52**Star][1y] [Py] [cisco-talos/pylocky_decryptor](https://github.com/cisco-talos/pylocky_decryptor)
- [**52**Star][3y] [Lua] [christophetd/nmap-nse-info](https://github.com/christophetd/nmap-nse-info) nmap-nse-info:浏览、搜索Nmap 的 NSE 脚本
-- [**52**Star][2y] [JS] [christophetd/docker-python-sandbox](https://github.com/christophetd/docker-python-sandbox) A Docker-powered NodeJS sandbox to execute untrusted python code.
+- [**52**Star][10m] [JS] [cat-team-mmc/lysec](https://github.com/cat-team-mmc/lysec) 一个基于docker的安全培训系统
+- [**52**Star][8m] [Elixir] [calidog/certstream-server](https://github.com/calidog/certstream-server) Certificate Transparency Log aggregation, parsing, and streaming service written in Elixir
- [**52**Star][5y] [Py] [bwall/bamf](https://github.com/bwall/bamf) Botnet Analysis Modular Framework
- [**52**Star][2y] [JS] [blockadeio/chrome_extension](https://github.com/blockadeio/chrome_extension) Browser extension that uses intelligence to combat malicious websites by blocking them in real-time.
- [**52**Star][6m] [Py] [bkerler/oppo_decrypt](https://github.com/bkerler/oppo_decrypt) Oppo/Oneplus .ops Firmware decrypter
+- [**52**Star][1y] [C] [bazad/threadexec](https://github.com/bazad/threadexec) A library to execute code in the context of other processes on iOS 11.
- [**52**Star][9m] [aungthurhahein/red-team-curation-list](https://github.com/aungthurhahein/red-team-curation-list) A list to discover work of red team tooling and methodology for penetration testing and security assessment
- [**52**Star][11m] [PHP] [atmoner/nodecrypto](https://github.com/atmoner/nodecrypto) Ransomware written in NodeJs
-- [**52**Star][18d] [Py] [aress31/jwtcat](https://github.com/aress31/jwtcat) JSON Web Token (JWT) cracker.
+- [**52**Star][20d] [Py] [aress31/jwtcat](https://github.com/aress31/jwtcat) JSON Web Token (JWT) cracker.
- [**52**Star][2y] [Py] [apkjet/trustlookwannacrytoolkit](https://github.com/apkjet/trustlookwannacrytoolkit) WannaCryToolkit scanner and removal toolkit
+- [**52**Star][3y] [annsec/awesome-cybersecurity](https://github.com/annsec/awesome-cybersecurity) Curated list of awesome cybersecurity companies and solutions.
- [**52**Star][8y] [Py] [9b/pdfxray_public](https://github.com/9b/pdfxray_public) Public version of PDF X-RAY
+- [**52**Star][4y] [Py] [5alt/lianwifi](https://github.com/5alt/lianwifi) wifi万能钥匙api
- [**52**Star][2y] [1522402210/blockchain-security-list](https://github.com/1522402210/blockchain-security-list) BlockChain-Security-List
+- [**52**Star][2y] [Py] [0xd34db33f/gfyp](https://github.com/0xd34db33f/gfyp) Unification of dnstwist + SQLite + Email reporting. Set it as a cron job that runs every hour, give it a list of domains and email addresses for reporting, then watch it go find stuff.
- [**51**Star][3y] [hack-with-github/awesome-hacking-tools](https://github.com/hack-with-github/awesome-hacking-tools) A collection of various hacking and exploitation tools for hackers and pentesters.
+- [**51**Star][2m] [Shell] [ullaakut/awesome-macos-setup](https://github.com/ullaakut/awesome-macos-setup) A repository with tools to automatically make any Mac awesome in a few minutes
+- [**51**Star][2y] [Jupyter Notebook] [calebmadrigal/radio-hacking-scripts](https://github.com/calebmadrigal/radio-hacking-scripts) Scripts to aid in the manipulation of electromagnetic radiation (for use with gnu_radio and SDR).
+- [**51**Star][9m] [Py] [fireeye/adfspoof](https://github.com/fireeye/adfspoof) forge AD FS security tokens
- [**51**Star][2y] [C] [shadowsocks/libsscrypto](https://github.com/shadowsocks/libsscrypto) Build libsscrypto.dll for shadowsocks-windows.
- [**51**Star][2y] [HTML] [jgamblin/nmapnetworkinventorycontainer](https://github.com/jgamblin/nmapnetworkinventorycontainer) A Docker Container To Continually Scan Your Network And Display Findings Cleanly.
-- [**51**Star][6m] [Py] [shadowsocksr-live/shadowsocksr](https://github.com/shadowsocksr-live/shadowsocksr)
-- [**51**Star][11d] [Py] [k8gege/k8portscan](https://github.com/k8gege/k8portscan) 跨平台大型网络端口扫描器(支持批量A段/B段/C段/IP列表(TXT)/端口列表,Banner识别比S扫描器加强版更准)
-- [**51**Star][14d] [Py] [kkamagui/napper-for-tpm](https://github.com/kkamagui/napper-for-tpm) TPM vulnerability checking tool for CVE-2018-6622. This tool will be published at Black Hat Asia 2019 and Black Hat Europe 2019
-- [**51**Star][14d] [TypeScript] [ediardo/kmdr-cli](https://github.com/ediardo/kmdr-cli) 🧠The ultimate CLI learning tool for explaining commands from your terminal
-- [**51**Star][4m] [Py] [lengjibo/dedecmscan](https://github.com/lengjibo/dedecmscan) 织梦全版本漏洞扫描
+- [**51**Star][2y] [mitmproxy/docker-releases](https://github.com/mitmproxy/docker-releases)
+- [**51**Star][26d] [C++] [rek7/ddoor](https://github.com/rek7/ddoor) DDoor - cross platform backdoor using dns txt records
+- [**51**Star][14d] [Py] [k8gege/k8portscan](https://github.com/k8gege/k8portscan) 跨平台大型网络端口扫描器(支持批量A段/B段/C段/IP列表(TXT)/端口列表,Banner识别比S扫描器加强版更准)
+- [**51**Star][20d] [C] [ixzzving/ssr-vpn](https://github.com/ixzzving/ssr-vpn) Shadowsocks & ShadowsocksR & V2Ray & V2RayNG & VNET/酸酸乳节点及客户端
+- [**51**Star][1y] [Py] [zhovner/airport-sniffer](https://github.com/zhovner/airport-sniffer) Very simple Wi-Fi sniffer and dumps parser for built-in macbook AirPort Extreme card. Only native MacOS tools used.
- [**51**Star][8m] [C#] [fsecurelabs/sharpgpo-remoteaccesspolicies](https://github.com/FSecureLABS/SharpGPO-RemoteAccessPolicies) A C# tool for enumerating remote access policies through group policy.
+- [**51**Star][3y] [wh1t3p1g/struts2environment](https://github.com/wh1t3p1g/Struts2Environment) Struts2 历史版本的漏洞环境
+- [**51**Star][28d] [Java] [guardianproject/tor-android](https://github.com/guardianproject/tor-android) Tor binary and library for Android
- [**51**Star][1y] [Py] [qax-a-team/redis_lua_exploit](https://github.com/QAX-A-Team/redis_lua_exploit)
-- [**51**Star][3y] [Py] [cylance/mitmcanary](https://github.com/cylance/mitmcanary) Tool/service to detect Man in the Middle attacks with Canary Requests
+- [**51**Star][4d] [Py] [lich4/personal_script](https://github.com/lich4/personal_script) 010Editor/BurpSuite/Frida/IDA tools and scripts collection
+ - [010Editor](https://github.com/lich4/personal_script/tree/master/010Editor_Script) 010Editor scripts
+ - [ParamChecker](https://github.com/lich4/personal_script/tree/master/BurpSuite_Script) Burp插件
+ - [Frida](https://github.com/lich4/personal_script/tree/master/Frida_script) Frida Scripts
+ - [IDA](https://github.com/lich4/personal_script/tree/master/IDA_Script) IDA Scripts
+ - [IDA-read_unicode.py](https://github.com/lich4/personal_script/blob/master/IDA_Script/read_unicode.py) When there is chinese unicode character in programe, due to python's shortage, ida could not recongnized them correctly, it's what my script just do
+ - [IDA-add_xref_for_macho](https://github.com/lich4/personal_script/blob/master/IDA_Script/add_xref_for_macho.py) When you deal with macho file with ida, you'll find out that it's not easy to find Objc-Class member function's caller and callee, (because it use msgSend instead of direct calling convention), so we need to make some connection between the selector names and member function pointers, it's what my script just do
+ - [IDA-add_info_for_androidgdb](https://github.com/lich4/personal_script/blob/master/IDA_Script/add_info_for_androidgdb.py) When you debug android with IDA and gdbserver, you'd find that the module list and segment is empy, while we can read info from /proc/[pid]/,
+ - [IDA-trace_instruction](https://github.com/lich4/personal_script/blob/master/IDA_Script/trace_instruction.py) this script is to trace instruction stream in one run
+ - [IDA-detect_ollvm](https://github.com/lich4/personal_script/blob/master/IDA_Script/detect_ollvm.py) this script is to detect ollvm and fix it in some extent, apply to android and ios
+ - [IDA-add_block_for_macho](https://github.com/lich4/personal_script/blob/master/IDA_Script/add_block_for_macho.py) this script is used to analysis block structure exist in macho file, target NSConcreteStackBlock/NSConcreteGlobalBlock currently, also contain some wonderful skills
- [**51**Star][5m] [C#] [zodiacon/gflagsx](https://github.com/zodiacon/gflagsx) Enhanced version of the GFlags tool
- [**51**Star][4y] [Py] [znb/malware](https://github.com/znb/malware) Malware related code
- [**51**Star][2m] [C#] [zeropointsecurity/goldenticket](https://github.com/zeropointsecurity/goldenticket)
+- [**51**Star][10d] [yassergersy/cazador_unr](https://github.com/yassergersy/cazador_unr) Simple Hacking tools
- [**51**Star][2m] [Py] [vrtadmin/first-plugin-ida](https://github.com/vrtadmin/first-plugin-ida) Function Identification and Recovery Signature Tool
+- [**51**Star][1y] [C++] [tomladder/winlib](https://github.com/tomladder/winlib) Windows Manipulation Library (x64, User/Kernelmode)
- [**51**Star][2y] [Go] [threatstack/deputize](https://github.com/threatstack/deputize) Manage an on-call LDAP group based on PagerDuty on-call status
-- [**51**Star][12d] [Py] [thez3ro/gogsownz](https://github.com/thez3ro/gogsownz) Gogs CVEs
+- [**51**Star][14d] [Py] [thez3ro/gogsownz](https://github.com/thez3ro/gogsownz) Gogs CVEs
- [**51**Star][2y] [Py] [tgianko/deemon](https://github.com/tgianko/deemon) Deemon is a tool to detect CSRF in web applications. Deemon has been used for the paper "Deemon: Detecting CSRF with Dynamic Analysis and Property Graphs" by G. Pellegrino, M. Johns, S. Koch, M. Backes, and C. Rossow.
- [**51**Star][1y] [Py] [sysopfb/malware_scripts](https://github.com/sysopfb/malware_scripts) Various scripts for different malware families
- [**51**Star][3y] [C] [sycloversecurity/ctf](https://github.com/sycloversecurity/ctf) Syclover(三叶草安全小组)承办的ctf比赛集合
-- [**51**Star][22d] [Java] [stevespringett/threatmodel-sdk](https://github.com/stevespringett/threatmodel-sdk) A Java library for parsing and programmatically using threat models
-- [**51**Star][25d] [Py] [snowflakedb/snowalert](https://github.com/snowflakedb/snowalert) Security Analytics Using The Snowflake Data Warehouse
+- [**51**Star][24d] [Java] [stevespringett/threatmodel-sdk](https://github.com/stevespringett/threatmodel-sdk) A Java library for parsing and programmatically using threat models
+- [**51**Star][3d] [Rust] [sorz/moproxy](https://github.com/sorz/moproxy) A transparent TCP to SOCKSv5/HTTP proxy on Linux written in Rust.
- [**51**Star][8y] [C] [snare/kernelresolver](https://github.com/snare/kernelresolver) Example Mac OS X kernel extension that resolves symbols from the running kernel image
+- [**51**Star][2m] [C#] [smourier/tracespy](https://github.com/smourier/tracespy) TraceSpy is a pure .NET, 100% free and open source, alternative to the very popular SysInternals DebugView tool.
+- [**51**Star][2y] [Java] [shengqi158/jackson-databind-rce-poc](https://github.com/shengqi158/jackson-databind-rce-poc)
- [**51**Star][4y] [Py] [sensepost/wifi-rifle](https://github.com/sensepost/wifi-rifle) Creating a wireless rifle de-authentication gun, which utilized a yagi antenna and a Raspberry Pi.
+- [**51**Star][3m] [Java] [sensepost/apostille](https://github.com/sensepost/apostille)
- [**51**Star][1m] [JS] [segmentio/metalsmith-markdown](https://github.com/segmentio/metalsmith-markdown) A Metalsmith plugin to convert markdown files.
-- [**51**Star][6m] [scubsrgroup/automatic-exploit-generation](https://github.com/scubsrgroup/automatic-exploit-generation) Something about AEG
- [**51**Star][3y] [C] [sciencemanx/ftrace](https://github.com/sciencemanx/ftrace) trace local function calls like strace and ltrace
-- [**51**Star][4y] [C++] [scadacs/plcinject](https://github.com/scadacs/plcinject)
-- [**51**Star][10m] [Java] [ruedigergad/clj-net-pcap](https://github.com/ruedigergad/clj-net-pcap) A wrapper/facade/whatever to enable/ease the use of jNetPcap (a libpcap based packet sniffing lib) in Clojure
+- [**51**Star][2y] [Py] [romankh/gsm-assessment-toolkit](https://github.com/romankh/gsm-assessment-toolkit) GSM Assessment Toolkit - A security evaluation framework for GSM networks
- [**51**Star][2y] [Py] [rolfrolles/finspyvm](https://github.com/rolfrolles/finspyvm) Static unpacker for FinSpy VM
- [**51**Star][2y] [riscure/rhme-2017](https://github.com/riscure/rhme-2017) Riscure Hack Me embedded hardware CTF 2017-2018.
-- [**51**Star][1m] [Py] [reorx/python-terminal-color](https://github.com/reorx/python-terminal-color) Drop-in single file library for printing color in terminal
- [**51**Star][3y] [Py] [red-team-labs/waldo](https://github.com/red-team-labs/waldo)
- [**51**Star][2y] [Shell] [r1b/cve-2017-13089](https://github.com/r1b/cve-2017-13089) PoC for wget v1.19.1
- [**51**Star][5m] [JS] [qtgate/conet](https://github.com/qtgate/conet) Become a trustworthy ally for the Internet Freedom
- [**51**Star][3y] [HTML] [pwnsdx/ios-uri-schemes-abuse-poc](https://github.com/pwnsdx/ios-uri-schemes-abuse-poc) A set of URI schemes bugs that lead Safari to crash/freeze.
- [**51**Star][1y] [C] [pwn20wndstuff/osiris](https://github.com/pwn20wndstuff/osiris) Osiris developer jailbreak for iOS 11.0 - 11.4b3
- [**51**Star][2m] [Ruby] [puppetlabs/puppetlabs-puppetdb](https://github.com/puppetlabs/puppetlabs-puppetdb) A puppet module for installing and managing puppetdb
-- [**51**Star][1m] [Perl] [pepelux/sippts](https://github.com/pepelux/sippts) Set of tools to audit SIP based VoIP Systems
+- [**51**Star][7d] [Perl] [pepelux/sippts](https://github.com/pepelux/sippts) Set of tools to audit SIP based VoIP Systems
- [**51**Star][1y] [Py] [pentestpartners/mykali](https://github.com/pentestpartners/mykali) Linux setup tool for Kali Linux
-- [**51**Star][17d] [Py] [patois/xray](https://github.com/patois/xray) Hexrays decompiler plugin that colorizes and filters the decompiler's output based on regular expressions
- [**51**Star][2y] [p292/ddeautocs](https://github.com/p292/ddeautocs) A cobaltstrike script that integrates DDEAuto Attacks
- [**51**Star][7y] [C#] [owasp/webgoat.net](https://github.com/owasp/webgoat.net) OWASP WebGoat.NET
+- [**51**Star][5m] [PHP] [owasp/vulnerable-web-application](https://github.com/owasp/vulnerable-web-application) OWASP Vulnerable Web Application Project
- [**51**Star][1y] [Py] [osuseclab/sgxpectre](https://github.com/osuseclab/sgxpectre)
- [**51**Star][4y] [C] [osbock/baldwisdom](https://github.com/osbock/baldwisdom) Kevin's hacking projects code
- [**51**Star][2y] [Py] [orweis/winpcapy](https://github.com/orweis/winpcapy) A Modern Python wrapper for WinPcap
- [**51**Star][8m] [offensive-security/nethunter-utils](https://github.com/offensive-security/nethunter-utils) Kali Linux NetHunter utils package
- [**51**Star][4y] [Py] [nottinghamprisateam/pyersinia](https://github.com/nottinghamprisateam/pyersinia) Herramienta escrita en Python y utilizando la librería Scapy basada en Yersinia para la implementación de ataques de capa de enlace de datos
+- [**51**Star][1y] [Java] [netspi/burpextractor](https://github.com/netspi/burpextractor) A Burp extension for generic extraction and reuse of data within HTTP requests and responses.
- [**51**Star][2y] [C] [nccgroup/ncloader](https://github.com/nccgroup/ncloader) A session-0 capable dll injection utility
- [**51**Star][1y] [Go] [mrexodia/haxxmap](https://github.com/mrexodia/haxxmap) Some simple go tools to perform a Man-in-the-middle (MITM) attack on your IMAP server in case you forgot your password.
-- [**51**Star][2y] [PowerShell] [mr-un1k0d3r/base64-obfuscator](https://github.com/mr-un1k0d3r/base64-obfuscator) Simple PowerShell Base64 encoder to avoid detection of your malicious payload
- [**51**Star][3m] [CSS] [mobsf/capfuzz](https://github.com/mobsf/capfuzz) CapFuzz - capture, fuzz & intercept web traffic.
-- [**51**Star][8d] [Shell] [mitchellkrogza/badd-boyz-hosts](https://github.com/mitchellkrogza/badd-boyz-hosts) A hosts file for use on any operating system to block bad domains out of your servers or devices.
- [**51**Star][2y] [Py] [metalnas/loubia](https://github.com/metalnas/loubia) Python script to exploit java unserialize on t3 (Weblogic)
-- [**51**Star][9m] [C] [marcan/lsirec](https://github.com/marcan/lsirec) LSI SAS2008/SAS2108 low-level recovery tool for Linux
- [**51**Star][2y] [C#] [lordgreggreg/skype-log-viewer](https://github.com/lordgreggreg/skype-log-viewer) Download and View Skype History Without Skype
- [**51**Star][4y] [Py] [lokifer/blindelephant](https://github.com/lokifer/blindelephant) Getting BlindElephant into a working state, and updating the plugin files
-- [**51**Star][6m] [C++] [lemire/testingrng](https://github.com/lemire/testingrng) Testing common random-number generators (RNG)
-- [**51**Star][9m] [Java] [jogolden/ghidraps4loader](https://github.com/jogolden/ghidraps4loader) A Ghidra loader for PlayStation 4 binaries.
+- [**51**Star][7m] [C++] [lemire/testingrng](https://github.com/lemire/testingrng) Testing common random-number generators (RNG)
+- [**51**Star][3y] [Py] [kovige/netscan](https://github.com/kovige/netscan) 配合reGeorg使用的内网扫描工具
+- [**51**Star][6y] [C++] [jyang772/xor_crypter](https://github.com/jyang772/xor_crypter) XOR encryption, malware crypter
- [**51**Star][3y] [C] [jianqiangzhao/cve-2016-2434](https://github.com/jianqiangzhao/cve-2016-2434)
- [**51**Star][2y] [HTML] [jgamblin/nmaptable](https://github.com/jgamblin/nmaptable) nmaptable:将 Nmap 扫描结果转变为 D3.js HTML 表格
-- [**51**Star][2y] [Py] [jflyup/goms17-010](https://github.com/jflyup/goms17-010) Simple program for detecting if host(s) are vulnerable to SMB exploit(MS17-010)
+- [**51**Star][1y] [Py] [jay-johnson/train-ai-with-django-swagger-jwt](https://github.com/jay-johnson/train-ai-with-django-swagger-jwt) Train AI (Keras + Tensorflow) to defend apps with Django REST Framework + Celery + Swagger + JWT - deploys to Kubernetes and OpenShift Container Platform
- [**51**Star][1m] [intelstormteam/papers](https://github.com/intelstormteam/papers) Papers written (and released) by the Team
- [**51**Star][5y] [C++] [ikoz/androidsubstrate_hookingc_examples](https://github.com/ikoz/androidsubstrate_hookingc_examples) AndroidSubstrate_hookingC_examples
- [**51**Star][3y] [Py] [huntcve/exploit](https://github.com/huntcve/exploit)
-- [**51**Star][2m] [Shell] [hirbodbehnam/shadowsocks-cloak-installer](https://github.com/hirbodbehnam/shadowsocks-cloak-installer) A one-key script to setup Cloak plugin with Shadowsocks on your server
-- [**51**Star][1y] [Py] [hiddenillusion/nomorexor](https://github.com/hiddenillusion/nomorexor) Tool to help guess a files 256 byte XOR key by using frequency analysis
-- [**51**Star][2y] [C] [hasherezade/process_chameleon](https://github.com/hasherezade/process_chameleon) A process overwriting its own PEB to make an illusion that it has been loaded from a different path.
+- [**51**Star][2m] [TSQL] [horsicq/xntsv](https://github.com/horsicq/xntsv) XNTSV program for detailed viewing of system structures for Windows.
+- [**51**Star][5m] [hitripod/awesome-blockchain](https://github.com/hitripod/awesome-blockchain) Curated list of blockchain, Awesome Awesomeness
+- [**51**Star][2y] [Py] [hiddenillusion/nomorexor](https://github.com/hiddenillusion/nomorexor) Tool to help guess a files 256 byte XOR key by using frequency analysis
- [**51**Star][2y] [harshilpatel007/hackinglabs](https://github.com/harshilpatel007/hackinglabs) A List Of Labs For People (Students) Who Want Learn OR Practice IT Security / Hacking / Penetration Testing In Ethical Way.
- [**51**Star][1y] [hack-with-github/infosec-badges](https://github.com/hack-with-github/infosec-badges) Badges for your GitHub tool presented at InfoSec Conference
- [**51**Star][7m] [Py] [hack-hut/crabstick](https://github.com/hack-hut/crabstick) Automatic remote/local file inclusion vulnerability analysis and exploit tool
@@ -11803,228 +12583,230 @@ networking routines
- [**51**Star][5y] [Py] [fuzzynop/fiveonceinyourlife](https://github.com/fuzzynop/fiveonceinyourlife) Local osx dialog box phishing using osascript. Easier than keylogging on osx. Simply ask for the passwords you want.
- [**51**Star][3y] [JS] [firesuncn/my_ctf_challenges](https://github.com/firesuncn/my_ctf_challenges)
- [**51**Star][7y] [JS] [firegpg/firegpg](https://github.com/firegpg/firegpg) FireGPG is no longer supported. Please see the README for information on WebPG.
-- [**51**Star][2m] [Shell] [edoverflow/smith](https://github.com/edoverflow/smith) Simple wrapper for meg that sieves through meg's output for you.
-- [**51**Star][2y] [Py] [disruptops/cred_scanner](https://github.com/disruptops/cred_scanner) A simple file-based scanner to look for potential AWS access and secret keys in files
+- [**51**Star][2y] [Java] [fergarrui/custom-bytecode-analyzer](https://github.com/fergarrui/custom-bytecode-analyzer) Java bytecode analyzer customizable via JSON rules
+- [**51**Star][11m] [Py] [elevenpaths/neto](https://github.com/elevenpaths/neto) Neto | A tool to analyse browser extensions
- [**51**Star][5y] [C] [dgoulet/kjackal](https://github.com/dgoulet/kjackal) Linux Rootkit Scanner
-- [**51**Star][2y] [C] [dennypage/dpinger](https://github.com/dennypage/dpinger) dpinger:持续性监控网络延迟和数据包丢失
-- [**51**Star][5m] [Py] [deadbits/malware-analysis-scripts](https://github.com/deadbits/malware-analysis-scripts) Collection of scripts for different malware analysis tasks
-- [**51**Star][1m] [HTML] [daxio/k8s-lemp](https://github.com/daxio/k8s-lemp) LEMP stack in a Kubernetes cluster
- [**51**Star][1y] [JS] [danigargu/urlfuzz](https://github.com/danigargu/urlfuzz) Another web fuzzer written in NodeJS
+- [**51**Star][30d] [Py] [d-rickyy-b/pastepwn](https://github.com/d-rickyy-b/pastepwn) Python framework to scrape Pastebin pastes and analyze them
- [**51**Star][1y] [Py] [cytopia/crawlpy](https://github.com/cytopia/crawlpy) Scrapy python crawler/spider with post/get login (handles CSRF), variable level of recursions and optionally save to disk
- [**51**Star][2y] [Py] [cseagle/ida_clemency](https://github.com/cseagle/ida_clemency) IDA cLEMENCy Tools
-- [**51**Star][3y] [Visual Basic] [cn33liz/macrometer](https://github.com/cn33liz/macrometer) VBA Reversed TCP Meterpreter Stager
-- [**51**Star][2y] [Go] [cmars/ormesh](https://github.com/cmars/ormesh) onion-routed mesh
-- [**51**Star][1y] [Py] [cisco-talos/pylocky_decryptor](https://github.com/cisco-talos/pylocky_decryptor)
+ - [clemency_ldr](https://github.com/cseagle/ida_clemency/blob/master/clemency_ldr.py) IDA loader module to create the basic memory layout and handle the loading of 9-bit, middle-endian, cLEMENCy executables.
+ - [clemency_proc](https://github.com/cseagle/ida_clemency/blob/master/clemency_proc.py) IDA processor module to handle disassembly and assembly tasks
+ - [clemency_dump](https://github.com/cseagle/ida_clemency/blob/master/clemency_dump.py) IDA plugin to allow for dumping modified database content back to a packed 9-bit, middle-endian file
+ - [clemency_fix](https://github.com/cseagle/ida_clemency/blob/master/clemency_fix.py) IDA plugin to assist with fixing up poorly disassembled functions that might branch/call into regions that continue to be marked as data blocks.
+- [**51**Star][3y] [Visual Basic .NET] [cn33liz/macrometer](https://github.com/cn33liz/macrometer) VBA Reversed TCP Meterpreter Stager
- [**51**Star][11m] [Py] [cisco-talos/dyndataresolver](https://github.com/cisco-talos/dyndataresolver) Dynamic Data Resolver (DDR) IDA Pro Plug-in
- [DDR](https://github.com/cisco-talos/dyndataresolver/blob/master/VS_project/ddr/ddr.sln) 基于DyRIO的Client
- [IDA插件](https://github.com/cisco-talos/dyndataresolver/tree/master/IDAplugin)
- [**51**Star][2y] [Py] [cisco-talos/dotnet_windbg](https://github.com/cisco-talos/dotnet_windbg)
- [**51**Star][7y] [Py] [chrisjohnriley/scythe](https://github.com/chrisjohnriley/scythe) scythe: account enumerator
+- [**51**Star][4m] [PS] [chrisad/wiki-dictionary-creator](https://github.com/chrisad/wiki-dictionary-creator) Creates dictionaries based on Wikipedia titles
- [**51**Star][1y] [Py] [carnal0wnage/pentesty_scripts](https://github.com/carnal0wnage/pentesty_scripts) scripts for pentesting
-- [**51**Star][25d] [C] [buffer/libemu](https://github.com/buffer/libemu)
-- [**51**Star][1y] [C] [bazad/threadexec](https://github.com/bazad/threadexec) A library to execute code in the context of other processes on iOS 11.
+- [**51**Star][7d] [C] [buffer/libemu](https://github.com/buffer/libemu)
+- [**51**Star][1y] [PS] [bromiley/olaf](https://github.com/bromiley/olaf) Office365 Log Analysis Framework
+- [**51**Star][1m] [Makefile] [blacktop/docker-ghidra](https://github.com/blacktop/docker-ghidra) Ghidra Client/Server Docker Image
+- [**51**Star][3m] [Py] [bkerler/mr](https://github.com/bkerler/mr) Mobile Revelator
+- [**51**Star][1y] [HTML] [beep3r/poc-exp](https://github.com/beep3r/poc-exp)
+- [**51**Star][5m] [Py] [bambish/scanqli](https://github.com/bambish/scanqli) SQLi scanner to detect SQL vulns
- [**51**Star][2m] [Py] [azure-samples/python-docs-hello-world](https://github.com/azure-samples/python-docs-hello-world) A simple python application for docs
- [**51**Star][2y] [Py] [awnumar/blind-sql-bitshifting](https://github.com/awnumar/blind-sql-bitshifting) A blind SQL injection module that uses bitshfting to calculate characters.
-- [**51**Star][3y] [annsec/awesome-cybersecurity](https://github.com/annsec/awesome-cybersecurity) Curated list of awesome cybersecurity companies and solutions.
+- [**51**Star][2d] [Py] [angr/tracer](https://github.com/angr/tracer) Utilities for generating dynamic traces
- [**51**Star][11m] [C] [anestisb/radamsa-android](https://github.com/anestisb/radamsa-android) An Android port of radamsa fuzzer
- [**51**Star][1y] [HTML] [an0nud4y/blackeye](https://github.com/an0nud4y/blackeye) The ultimate phishing tool with 38 websites available!
-- [**51**Star][26d] [Py] [ahmia/ahmia-crawler](https://github.com/ahmia/ahmia-crawler) Collection of crawlers used by the ahmia search engine
-- [**51**Star][1m] [Py] [afagarap/gru-svm](https://github.com/afagarap/gru-svm) [ICMLC 2018] A Neural Network Architecture Combining Gated Recurrent Unit (GRU) and Support Vector Machine (SVM) for Intrusion Detection
+- [**51**Star][2y] [Shell] [alephsecurity/initroot](https://github.com/alephsecurity/initroot) Motorola Untethered Jailbreak: Exploiting CVE-2016-10277 for Secure Boot and Device Locking bypass
+- [**51**Star][8m] [aldelaro5/ghidra-gekko-broadway-lang](https://github.com/aldelaro5/ghidra-gekko-broadway-lang) Ghidra language definition for the Gekko and Broadway CPU variant used in the Nintendo GameCube and Nintendo Wii respectively
+- [**51**Star][28d] [Py] [ahmia/ahmia-crawler](https://github.com/ahmia/ahmia-crawler) Collection of crawlers used by the ahmia search engine
+- [**51**Star][6d] [Py] [afagarap/gru-svm](https://github.com/afagarap/gru-svm) [ICMLC 2018] A Neural Network Architecture Combining Gated Recurrent Unit (GRU) and Support Vector Machine (SVM) for Intrusion Detection
- [**51**Star][6y] [Py] [aeondave/tilt](https://github.com/aeondave/tilt) Terminal Ip Lookup Tool
- [**51**Star][1y] [C] [adrianyy/keinject](https://github.com/adrianyy/keinject) Kernel LdrLoadDll injector
-- [**51**Star][2y] [Py] [0xd34db33f/gfyp](https://github.com/0xd34db33f/gfyp) Unification of dnstwist + SQLite + Email reporting. Set it as a cron job that runs every hour, give it a list of domains and email addresses for reporting, then watch it go find stuff.
- [**51**Star][11m] [c] [NtQuery/scyllahide](https://bitbucket.org/ntquery/scyllahide)
-- [**50**Star][21d] [Py] [frida/frida-tools](https://github.com/frida/frida-tools) Frida CLI tools
-- [**50**Star][2y] [Jupyter Notebook] [calebmadrigal/radio-hacking-scripts](https://github.com/calebmadrigal/radio-hacking-scripts) Scripts to aid in the manipulation of electromagnetic radiation (for use with gnu_radio and SDR).
-- [**50**Star][14d] [Py] [circl/douglas-quaid](https://github.com/circl/douglas-quaid) Open source software for image correlation, distance and analysis
-- [**50**Star][27d] [Py] [jas502n/solr_rce](https://github.com/jas502n/solr_rce) Apache Solr RCE via Velocity template
-- [**50**Star][21d] [h2hconference/2019](https://github.com/h2hconference/2019) H2HC 2019 Slides/Materials/Presentations
-- [**50**Star][1y] [Py] [zhovner/airport-sniffer](https://github.com/zhovner/airport-sniffer) Very simple Wi-Fi sniffer and dumps parser for built-in macbook AirPort Extreme card. Only native MacOS tools used.
-- [**50**Star][3y] [wh1t3p1g/struts2environment](https://github.com/wh1t3p1g/Struts2Environment) Struts2 历史版本的漏洞环境
-- [**50**Star][25d] [TypeScript] [tjson/tjson.js](https://github.com/tjson/tjson.js) JavaScript-compatible implementation of Tagged JSON (TJSON), written in TypeScript.
+- [**50**Star][4y] [danielmiessler/securitytools](https://github.com/danielmiessler/securitytools) A repo for collecting and organizing security tools of various types. As new ones come out, they get added to the list.
+- [**50**Star][23d] [Py] [frida/frida-tools](https://github.com/frida/frida-tools) Frida CLI tools
+- [**50**Star][4y] [Py] [wapiflapi/wsym](https://github.com/wapiflapi/wsym) Adds symbols to a ELF file.
+- [**50**Star][5y] [Py] [xiphosresearch/steelcon-python-injection](https://github.com/xiphosresearch/steelcon-python-injection) Python Process Injection PoC Code from my SteelCon talk in 2014
+- [**50**Star][16d] [Py] [circl/douglas-quaid](https://github.com/circl/douglas-quaid) Open source software for image correlation, distance and analysis
+- [**50**Star][23d] [h2hconference/2019](https://github.com/h2hconference/2019) H2HC 2019 Slides/Materials/Presentations
+- [**50**Star][2m] [Shell] [mwz1tn/free-v2ray](https://github.com/mwz1tn/free-v2ray) 免费v2ray分享,V2ray安装使用教程,墙裂的购买使用教程
+- [**50**Star][6m] [JS] [smallmi/omms](https://github.com/smallmi/omms) OMMS运维监控系统,功能介绍: 资产管理 应用管理 任务执行 权限管理等
+- [**50**Star][6d] [TS] [tjson/tjson.js](https://github.com/tjson/tjson.js) JavaScript-compatible implementation of Tagged JSON (TJSON), written in TypeScript.
- [**50**Star][9m] [C] [lab313ru/smd_ida_tools](https://github.com/lab313ru/smd_ida_tools) Special IDA Pro tools for the Sega Genesis/Megadrive romhackers
-- [**50**Star][3m] [Py] [lich4/personal_script](https://github.com/lich4/personal_script) 010Editor/BurpSuite/Frida/IDA tools and scripts collection
- - [010Editor](https://github.com/lich4/personal_script/tree/master/010Editor_Script) 010Editor scripts
- - [ParamChecker](https://github.com/lich4/personal_script/tree/master/BurpSuite_Script) Burp插件
- - [Frida](https://github.com/lich4/personal_script/tree/master/Frida_script) Frida Scripts
- - [IDA](https://github.com/lich4/personal_script/tree/master/IDA_Script) IDA Scripts
- - [IDA-read_unicode.py](https://github.com/lich4/personal_script/blob/master/IDA_Script/read_unicode.py) When there is chinese unicode character in programe, due to python's shortage, ida could not recongnized them correctly, it's what my script just do
- - [IDA-add_xref_for_macho](https://github.com/lich4/personal_script/blob/master/IDA_Script/add_xref_for_macho.py) When you deal with macho file with ida, you'll find out that it's not easy to find Objc-Class member function's caller and callee, (because it use msgSend instead of direct calling convention), so we need to make some connection between the selector names and member function pointers, it's what my script just do
- - [IDA-add_info_for_androidgdb](https://github.com/lich4/personal_script/blob/master/IDA_Script/add_info_for_androidgdb.py) When you debug android with IDA and gdbserver, you'd find that the module list and segment is empy, while we can read info from /proc/[pid]/,
- - [IDA-trace_instruction](https://github.com/lich4/personal_script/blob/master/IDA_Script/trace_instruction.py) this script is to trace instruction stream in one run
- - [IDA-detect_ollvm](https://github.com/lich4/personal_script/blob/master/IDA_Script/detect_ollvm.py) this script is to detect ollvm and fix it in some extent, apply to android and ios
- - [IDA-add_block_for_macho](https://github.com/lich4/personal_script/blob/master/IDA_Script/add_block_for_macho.py) this script is used to analysis block structure exist in macho file, target NSConcreteStackBlock/NSConcreteGlobalBlock currently, also contain some wonderful skills
- [**50**Star][1y] [JS] [lukechilds/onionite](https://github.com/lukechilds/onionite) Explore the Tor network
- [**50**Star][10m] [Shell] [cyb0r9/network-attacker](https://github.com/Cyb0r9/network-attacker) Programmed For Penetration Testing Beginners . This Program Based on Mdk3 . "WiFi Stress Testing Beacon Flooding & Deauthentication Attack "
- [**50**Star][1y] [Py] [synacktiv-contrib/kernelcache-laundering](https://github.com/Synacktiv-contrib/kernelcache-laundering) load iOS12 kernelcaches and PAC code in IDA
- [**50**Star][2y] [C#] [zodiacon/windbgx](https://github.com/zodiacon/windbgx) An attempt to create a friendly version of WinDbg
- [**50**Star][3y] [Py] [zengqiu/study](https://github.com/zengqiu/study)
- [**50**Star][2y] [C++] [zcgonvh/cve-2017-0213](https://github.com/zcgonvh/cve-2017-0213) CVE-2017-0213 for command line
-- [**50**Star][8d] [yassergersy/cazador_unr](https://github.com/yassergersy/cazador_unr) Simple Hacking tools
-- [**50**Star][8m] [Py] [yarox24/attack_monitor](https://github.com/yarox24/attack_monitor) Endpoint detection & Malware analysis software
- [**50**Star][2y] [xssninja/alexa-hacker-mode](https://github.com/xssninja/alexa-hacker-mode) Node JS code for a set of Alexa voice skills designed to assist hackers and developers with common tasks
- [**50**Star][3y] [C] [williamshowalter/hdroot-bootkit-analysis](https://github.com/williamshowalter/hdroot-bootkit-analysis) Supporting Files on my analysis of the malware designated hdroot.
+- [**50**Star][5m] [HTML] [whatwg/mimesniff](https://github.com/whatwg/mimesniff) MIME Sniffing Standard
- [**50**Star][1y] [Go] [weppos/dnscaa](https://github.com/weppos/dnscaa)
- [**50**Star][1y] [Py] [virtuesecurity/aws-extender-cli](https://github.com/virtuesecurity/aws-extender-cli) AWS Extender CLI is a command-line script to test S3 buckets as well as Google Storage buckets and Azure Storage containers for common misconfiguration issues using the boto/boto3 SDK library.
- [**50**Star][3y] [C] [vikasnkumar/wisecracker](https://github.com/vikasnkumar/wisecracker) Wisecracker is a high performance distributed cryptanalysis framework.
- [**50**Star][2y] [C] [vallejocc/poc-inject-data-wm_copydata](https://github.com/vallejocc/poc-inject-data-wm_copydata) A tiny PoC to inject and execute code into explorer.exe with WM_SETTEXT+WM_COPYDATA+SetThreadContext
-- [**50**Star][4y] [C++] [uitra/injectora](https://github.com/uitra/injectora) x86/x64 manual mapping injector using the JUCE library
+- [**50**Star][9d] [PHP] [tsug0d/myawesomewebchallenge](https://github.com/tsug0d/myawesomewebchallenge) Collection of my capture-the-flag web challenge in any levels
- [**50**Star][3y] [Ruby] [tresacton/dspectrum](https://github.com/tresacton/dspectrum) Automated RF/SDR Signal Analysis [Reverse Engineering]
-- [**50**Star][1y] [C++] [tomladder/winlib](https://github.com/tomladder/winlib) Windows Manipulation Library (x64, User/Kernelmode)
+- [**50**Star][2y] [Ruby] [thezdi/derbycon2017](https://github.com/thezdi/derbycon2017) DerbyCon 2017 Presentation VMware Escapology: How to Houdini the Hypervisor
- [**50**Star][6y] [PHP] [taogogo/taocms](https://github.com/taogogo/taocms) taocms is a very very small CMS( Content Management System) ,base on php,support mysql/sqlite
+- [**50**Star][8m] [ObjC] [ssyzh/weworktweak](https://github.com/ssyzh/weworktweak) 逆向破解企业微信定位,在家就能打卡了!
- [**50**Star][4y] [C++] [sri-csl/stegotorus](https://github.com/sri-csl/stegotorus) A Camouflage Proxy for the Tor Anonymity System
- [**50**Star][9y] [Perl] [spiderlabs/thicknet](https://github.com/spiderlabs/thicknet) TCP session interception and injection framework
+- [**50**Star][10m] [sourcingdenis/free-online-competitive-intelligence](https://github.com/sourcingdenis/free-online-competitive-intelligence) #OSINT
- [**50**Star][1y] [JS] [soluto/webdriverio-zap-proxy](https://github.com/soluto/webdriverio-zap-proxy) Demo - how to easily build security testing for Web App, using Zap and Glue
-- [**50**Star][2m] [C#] [smourier/tracespy](https://github.com/smourier/tracespy) TraceSpy is a pure .NET, 100% free and open source, alternative to the very popular SysInternals DebugView tool.
-- [**50**Star][3y] [Objective-C] [skelsec/biterrant](https://github.com/skelsec/biterrant) BitErrant
+- [**50**Star][3y] [ObjC] [skelsec/biterrant](https://github.com/skelsec/biterrant) BitErrant
- [**50**Star][2y] [Py] [sfwishes/ollvm_de_fla](https://github.com/sfwishes/ollvm_de_fla) deobfuscation ollvm's fla
-- [**50**Star][3m] [Java] [sensepost/apostille](https://github.com/sensepost/apostille)
-- [**50**Star][8m] [Py] [scarvell/grandstream_exploits](https://github.com/scarvell/grandstream_exploits)
+- [**50**Star][9m] [Py] [scarvell/grandstream_exploits](https://github.com/scarvell/grandstream_exploits)
+- [**50**Star][11d] [Go] [sandertv/gophertunnel](https://github.com/sandertv/gophertunnel) A Minecraft (Bedrock Edition) library written in Go used for creating proxies, servers, clients and tools
- [**50**Star][2y] [Py] [samuelcolvin/dnserver](https://github.com/samuelcolvin/dnserver) Simple development DNS server written in python
- [**50**Star][3y] [C] [ryanmallon/thelostvikingstools](https://github.com/ryanmallon/thelostvikingstools) Reverse Engineered Tools/Library for the DOS game The Lost Vikings
- [**50**Star][12m] [C] [realoriginal/reflective-rewrite](https://github.com/realoriginal/reflective-rewrite) Attempt to rewrite StephenFewers Reflective DLL Injection to make it a little more stealthy. Some code taken from Meterpreter & sRDI. Currently a work in progress.
+- [**50**Star][4d] [Py] [pylyf/networm](https://github.com/pylyf/networm) Python network worm that spreads on the local network and gives the attacker control of these machines.
- [**50**Star][1y] [C++] [psychotropos/xhunter1_privesc](https://github.com/psychotropos/xhunter1_privesc) (Ab)using the XIGNCODE3 driver to open a handle to any process.
- [**50**Star][5m] [C] [praneethkarnena/ddos-scripts](https://github.com/praneethkarnena/ddos-scripts) This repo consists of various DDoS scripts, collected from internet. Layer-4 and Layer-7 levels can be targeted using these scripts.
-- [**50**Star][12m] [JS] [platdrag/unblockablechains](https://github.com/platdrag/unblockablechains) Unblockable Chains - A POC on using blockchain as infrastructure for malware operations
+- [**50**Star][1y] [JS] [platdrag/unblockablechains](https://github.com/platdrag/unblockablechains) Unblockable Chains - A POC on using blockchain as infrastructure for malware operations
- [**50**Star][3m] [Shell] [piffall/pxesetupwizard](https://github.com/piffall/pxesetupwizard) PXE Setup Wizard. Netboot Debian, Ubuntu, System Rescue CD, FreeDOS and more.
-- [**50**Star][10d] [Java] [p1sec/sigfw](https://github.com/p1sec/sigfw) Open Source Signaling Firewall for SS7, Diameter filtering, antispoof and antisniff
+- [**50**Star][3d] [Java] [p1sec/sigfw](https://github.com/p1sec/sigfw) Open Source Signaling Firewall for SS7, Diameter filtering, antispoof and antisniff
- [**50**Star][2y] [newlog/r2_malware_unpacking_training](https://github.com/newlog/r2_malware_unpacking_training) 使用 r2 脱壳恶意代码教程
-- [**50**Star][1y] [Java] [netspi/burpextractor](https://github.com/netspi/burpextractor) A Burp extension for generic extraction and reuse of data within HTTP requests and responses.
-- [**50**Star][2m] [Py] [nelenkov/android-device-check](https://github.com/nelenkov/android-device-check) Check Android device security settings
- [**50**Star][2y] [Py] [neargle/pil-rce-by-ghostbutt](https://github.com/neargle/pil-rce-by-ghostbutt) Exploiting Python PIL Module Command Execution Vulnerability
-- [**50**Star][7d] [Py] [nccgroup/asadbg](https://github.com/nccgroup/asadbg) asadbg is a framework of tools to aid in automating live debugging of Cisco ASA devices
+- [**50**Star][9d] [Py] [nccgroup/asadbg](https://github.com/nccgroup/asadbg) asadbg is a framework of tools to aid in automating live debugging of Cisco ASA devices
- [**50**Star][2y] [Py] [navytitanium/dnsmasterchef](https://github.com/navytitanium/dnsmasterchef) Selective DNS proxy forwarding based on DNS threat blocking providers intelligence.
+- [**50**Star][3y] [Py] [n0pe-sled/apache2-mod-rewrite-setup](https://github.com/n0pe-sled/apache2-mod-rewrite-setup) Quickly Implement Mod-Rewrite in your infastructure
- [**50**Star][1m] [C++] [ms-iot/imx-iotcore](https://github.com/ms-iot/imx-iotcore) Windows 10 IoT Core BSP for NXP i.MX Processors
-- [**50**Star][3m] [mikerah/awesome-privacy-on-blockchains](https://github.com/mikerah/awesome-privacy-on-blockchains) A curated list of privacy on blockchains resources
- [**50**Star][3y] [Py] [matthewdunwoody/block-parser](https://github.com/matthewdunwoody/block-parser) Parser for Windows PowerShell script block logs
+- [**50**Star][4m] [JS] [mattcg/socks5-client](https://github.com/mattcg/socks5-client) SOCKS v5 client socket implementation in JavaScript for Node.JS.
- [**50**Star][2y] [C] [leonnewton/selfmodify](https://github.com/leonnewton/selfmodify) Dalvik字节码自篡改原理及实现
- [**50**Star][1y] [JS] [leocardoso94/push-notification-demo](https://github.com/leocardoso94/push-notification-demo) Demonstrate how to receive notifications using Firebase
-- [**50**Star][3y] [Py] [kovige/netscan](https://github.com/kovige/netscan) 配合reGeorg使用的内网扫描工具
-- [**50**Star][5y] [PowerShell] [kfosaaen/get-lapspasswords](https://github.com/kfosaaen/get-lapspasswords) Powershell function to pull the local admin passwords from LDAP, stored there by LAPS.
+- [**50**Star][8m] [klaver/sysctl](https://github.com/klaver/sysctl) Linux/BSD kernel tuning and network security hardening optimizations, improving the performance of server systems via optimized sysctl tweaks
+- [**50**Star][5y] [PS] [kfosaaen/get-lapspasswords](https://github.com/kfosaaen/get-lapspasswords) Powershell function to pull the local admin passwords from LDAP, stored there by LAPS.
- [**50**Star][2y] [C++] [k0keoyo/dark_composition_case_study_integer_overflow](https://github.com/k0keoyo/dark_composition_case_study_integer_overflow)
-- [**50**Star][6y] [C++] [jyang772/xor_crypter](https://github.com/jyang772/xor_crypter) XOR encryption, malware crypter
- [**50**Star][4y] [Py] [jpyorre/intelligenthoneynet](https://github.com/jpyorre/intelligenthoneynet) The Intelligent Honey Net Project attempts to create actionable information from honeypots
- [**50**Star][2y] [JS] [jpenalbae/rarop](https://github.com/jpenalbae/rarop) Graphical ROP chain builder using radare2 and r2pipe
- [**50**Star][2y] [JS] [johnhhorton/node-nmap](https://github.com/johnhhorton/node-nmap) NPM package for interfacing with local NMAP installation
- [**50**Star][3y] [Shell] [jgamblin/curluseragent](https://github.com/jgamblin/curluseragent) Curl Script To Change User Agent
+- [**50**Star][2y] [Shell] [jaybrown/dnscrypt-menu](https://github.com/jaybrown/dnscrypt-menu) Manage DNSCrypt from the macOS menu bar (BitBar plugin)
- [**50**Star][2y] [Go] [jakewins/findbtc](https://github.com/jakewins/findbtc) findbtc: 在损坏、格式化或被覆盖写入的磁盘上查找比特币钱包
+- [**50**Star][2m] [Py] [importctf/instagram-hacker](https://github.com/importctf/instagram-hacker) This is an advanced script for Instagram bruteforce attacks. WARNING THIS IS A REAL TOOL!
- [**50**Star][2y] [JS] [idan5x/switcheroo](https://github.com/idan5x/switcheroo) Exploiting CVE-2016-4657 to JailBreak the Nintendo Switch
-- [**50**Star][2m] [TSQL] [horsicq/xntsv](https://github.com/horsicq/xntsv) XNTSV program for detailed viewing of system structures for Windows.
- [**50**Star][7m] [C] [hfiref0x/mpenum](https://github.com/hfiref0x/mpenum) Enumerate Windows Defender threat families and dump their names according category
- [**50**Star][5m] [Smali] [hellohudi/androidreversenotes](https://github.com/hellohudi/androidreversenotes) Android逆向笔记---从入门到入土
+- [**50**Star][2y] [Py] [h2hconference/2017](https://github.com/h2hconference/2017) H2HC 2017 Slides/Materials/Presentations
- [**50**Star][2y] [Py] [h0nus/backtome](https://github.com/h0nus/backtome) Little tool made in python to create payloads for Linux, Windows and OSX with unique handler
-- [**50**Star][6m] [Go] [gyyyy/footprint](https://github.com/gyyyy/footprint) 个人笔记
- [**50**Star][8y] [Py] [gyim/stupidgit](https://github.com/gyim/stupidgit) A cross-platform git GUI with strong submodule support
-- [**50**Star][2y] [PowerShell] [gobiasinfosec/wireless_query](https://github.com/gobiasinfosec/wireless_query) Query Active Directory for Workstations and then pull their Wireless Network Passwords
+- [**50**Star][3m] [C#] [guillac/wsmanager](https://github.com/guillac/wsmanager) Webshell Manager
+- [**50**Star][2y] [PS] [gobiasinfosec/wireless_query](https://github.com/gobiasinfosec/wireless_query) Query Active Directory for Workstations and then pull their Wireless Network Passwords
- [**50**Star][1y] [JS] [fortiguard-lion/frida-scripts](https://github.com/fortiguard-lion/frida-scripts)
- [**50**Star][4y] [C++] [fishstiqz/poolinfo](https://github.com/fishstiqz/poolinfo) kernel pool windbg extension
-- [**50**Star][2y] [Visual Basic] [fireeye/remote_lookup](https://github.com/fireeye/remote_lookup) Resolves DLL API entrypoints for a process w/ remote query capabilities.
-- [**50**Star][2y] [Java] [fergarrui/custom-bytecode-analyzer](https://github.com/fergarrui/custom-bytecode-analyzer) Java bytecode analyzer customizable via JSON rules
-- [**50**Star][2y] [Shell] [evyatarmeged/stegextract](https://github.com/evyatarmeged/stegextract) Detect hidden files and text in images
+- [**50**Star][2y] [Visual Basic .NET] [fireeye/remote_lookup](https://github.com/fireeye/remote_lookup) Resolves DLL API entrypoints for a process w/ remote query capabilities.
- [**50**Star][3m] [Haskell] [essandess/adblock2privoxy](https://github.com/essandess/adblock2privoxy) Convert adblock config files to privoxy format
- [**50**Star][2y] [JS] [ericr/sol-function-profiler](https://github.com/ericr/sol-function-profiler) Solidity Contract Function Profiler
-- [**50**Star][11m] [Py] [elevenpaths/neto](https://github.com/elevenpaths/neto) Neto | A tool to analyse browser extensions
-- [**50**Star][28d] [Py] [d-rickyy-b/pastepwn](https://github.com/d-rickyy-b/pastepwn) Python framework to scrape Pastebin pastes and analyze them
+- [**50**Star][3y] [PHP] [edent/tweeview](https://github.com/edent/tweeview) A Tree View For Tweets
+- [**50**Star][3y] [C++] [drizzlerisk/ntpdoser](https://github.com/drizzlerisk/ntpdoser) NTP Doser is a NTP Amplification DoS/DDoS attack tool for penttesting
+- [**50**Star][1y] [PS] [dgg-it/match-adhashes](https://github.com/dgg-it/match-adhashes) Builds a hashmap of AD NTLM hashes/usernames and iterates through a second list of hashes checking for the existence of each entry in the AD NTLM hashmap
+- [**50**Star][2y] [PHP] [daudmalik06/reconcat](https://github.com/daudmalik06/reconcat) A small Php application to fetch archive url snapshots from archive.org. using it you can fetch complete list of snapshot urls of any year or complete list of all years possible. Made Specially for penetration testing purpose.
+- [**50**Star][2y] [Py] [citp/thewebneverforgets](https://github.com/citp/thewebneverforgets) Public code release for The Web Never Forgets paper
- [**50**Star][3y] [Py] [cisco-talos/smi_check](https://github.com/cisco-talos/smi_check) Smart Install Client Scanner
-- [**50**Star][4m] [PowerShell] [chrisad/wiki-dictionary-creator](https://github.com/chrisad/wiki-dictionary-creator) Creates dictionaries based on Wikipedia titles
- [**50**Star][2y] [Java] [channingbj/meerkat](https://github.com/channingbj/meerkat) meerkat 是用于服务监控以及服务降级基础组件,主要为了解决调用外部接口的时候进行成功率,响应时间,QPS指标的监控,同时在成功率下降到预设的阈值以下的时候自动切断外部接口的调用,外部接口成功率恢复后自动恢复请求
-- [**50**Star][7m] [Elixir] [calidog/certstream-server](https://github.com/calidog/certstream-server) Certificate Transparency Log aggregation, parsing, and streaming service written in Elixir
-- [**50**Star][1y] [PowerShell] [bromiley/olaf](https://github.com/bromiley/olaf) Office365 Log Analysis Framework
-- [**50**Star][23d] [HTML] [brampat/security](https://github.com/brampat/security) Collection of links to Security stuff
+- [**50**Star][25d] [HTML] [brampat/security](https://github.com/brampat/security) Collection of links to Security stuff
- [**50**Star][2y] [bluscreenofjeff/metasploit-resource-scripts](https://github.com/bluscreenofjeff/metasploit-resource-scripts)
-- [**50**Star][1m] [Makefile] [blacktop/docker-ghidra](https://github.com/blacktop/docker-ghidra) Ghidra Client/Server Docker Image
- [**50**Star][4y] [C++] [bishopfox/untwister](https://github.com/bishopfox/untwister) Seed recovery tool for PRNGs
-- [**50**Star][5m] [Py] [bambish/scanqli](https://github.com/bambish/scanqli) SQLi scanner to detect SQL vulns
- [**50**Star][3y] [Py] [ayoul3/cicspwn](https://github.com/ayoul3/cicspwn) CICSpwn is a tool to pentest a CICS Transaction servers on z/OS.
- [**50**Star][3y] [Py] [aramosf/recoversqlite](https://github.com/aramosf/recoversqlite) recover deleted information from sqlite files.
+- [**50**Star][4m] [C++] [antscode/macwifi](https://github.com/antscode/macwifi) A wifi system menu extension for 68k Macs.
- [**50**Star][1y] [Py] [anssi-fr/route_leaks](https://github.com/anssi-fr/route_leaks) BGP Route Leaks Detection
+- [**50**Star][7y] [C] [andy928/xpenology](https://github.com/andy928/xpenology) XPEnology Project
- [**50**Star][1y] [Py] [alexknvl/fuzzball](https://github.com/alexknvl/fuzzball) Scala fuzzer
-- [**50**Star][8m] [aldelaro5/ghidra-gekko-broadway-lang](https://github.com/aldelaro5/ghidra-gekko-broadway-lang) Ghidra language definition for the Gekko and Broadway CPU variant used in the Nintendo GameCube and Nintendo Wii respectively
+- [**50**Star][2m] [C] [alainesp/hashsuitedroid](https://github.com/alainesp/hashsuitedroid) Hash Suite for Android
+- [**50**Star][2y] [Py] [adrianherrera/virustotal](https://github.com/adrianherrera/virustotal) A simple command-line script to interact with the virustotal-api
- [**50**Star][11m] [C] [acoinfo/kidvpn](https://github.com/acoinfo/kidvpn) The world's smallest VPN server and client.
+- [**50**Star][7m] [C#] [9ee1/capstone.net](https://github.com/9ee1/capstone.net) .NET Core and .NET Framework binding for the Capstone Disassembly Framework
- [**50**Star][2y] [0xhjk/caidao](https://github.com/0xhjk/caidao) 中国菜刀及其衍生版本的Webshell管理工具收集
- [**50**Star][7y] [Py] [0xd012/wifuzzit](https://github.com/0xd012/wifuzzit) a 802.11 wireless fuzzer
-- [**50**Star][7m] [C] [0cch/0cchext](https://github.com/0cch/0cchext) 0CCh Windbg extension
-- [**49**Star][4y] [danielmiessler/securitytools](https://github.com/danielmiessler/securitytools) A repo for collecting and organizing security tools of various types. As new ones come out, they get added to the list.
+- [**49**Star][2y] [C] [xueeinstein/darknet-vis](https://github.com/xueeinstein/darknet-vis) Visualize YOLO feature map in prediction for easily checking your model performance
+- [**49**Star][3y] [Assembly] [t00sh/assembly](https://github.com/t00sh/assembly) Collection of Linux shellcodes
- [**49**Star][7m] [Py] [secgroundzero/tetanus](https://github.com/secgroundzero/tetanus) Helper script for mangling CS payloads
+- [**49**Star][4m] [Makefile] [shadowsocks/openwrt-feeds](https://github.com/shadowsocks/openwrt-feeds) OpenWrt/LEDE feeds
- [**49**Star][2y] [HTML] [qinyuhang/network-knowledge](https://github.com/qinyuhang/network-knowledge) 前端必备网络基础知识
-- [**49**Star][4y] [Py] [wapiflapi/wsym](https://github.com/wapiflapi/wsym) Adds symbols to a ELF file.
-- [**49**Star][5y] [Py] [xiphosresearch/steelcon-python-injection](https://github.com/xiphosresearch/steelcon-python-injection) Python Process Injection PoC Code from my SteelCon talk in 2014
-- [**49**Star][24d] [C++] [rek7/ddoor](https://github.com/rek7/ddoor) DDoor - cross platform backdoor using dns txt records
-- [**49**Star][3m] [C] [chroblert/domainweakpasswdcheck](https://github.com/chroblert/domainweakpasswdcheck) 内网安全·域账号弱口令审计
-- [**49**Star][2m] [Shell] [mwz1tn/free-v2ray](https://github.com/mwz1tn/free-v2ray) 免费v2ray分享,V2ray安装使用教程,墙裂的购买使用教程
+- [**49**Star][6m] [C++] [0x00-0x00/cve-2019-0841-bypass](https://github.com/0x00-0x00/cve-2019-0841-bypass) A fully automatic CVE-2019-0841 bypass targeting all versions of Edge in Windows 10.
+- [**49**Star][4m] [Py] [skelsec/responder3](https://github.com/skelsec/responder3) Responder for Python3
+- [**49**Star][1m] [Dockerfile] [winterssy/ssr-docker](https://github.com/winterssy/ssr-docker) 使用Docker部署ShadowsocksR服务端
+- [**49**Star][2y] [Py] [fpfeng/g2w.online](https://github.com/fpfeng/g2w.online) 域名已被DNS污染,水表已拆
- [**49**Star][2y] [C] [cnlohr/wifirxpower](https://github.com/cnlohr/wifirxpower) Linux-based WiFi RX Power Grapher
-- [**49**Star][3m] [HTML] [0xbird/0xbird.github.io](https://github.com/0xbird/0xbird.github.io) 欢迎关注小鸟的技术博客!(Pwn/智能硬件/AI安全/漏洞分析/威胁情报/RedTeam/移动设备/内核/虚拟机/容器安全/浏览器/CPU/安全开发/漏洞挖掘/APT/病毒分析/安全学术)
+- [**49**Star][3m] [Py] [makuga01/dnsfookup](https://github.com/makuga01/dnsfookup) DNS rebinding toolkit
+- [**49**Star][1m] [Java] [portswigger/stepper](https://github.com/portswigger/stepper) A natural evolution of Burp Suite's Repeater tool
+- [**49**Star][29d] [PS] [s3cur3th1ssh1t/creds](https://github.com/S3cur3Th1sSh1t/Creds) Some usefull Scripts and Executables for Pentest & Forensics
- [**49**Star][2y] [Ruby] [mrbrutti/cartero](https://github.com/mrbrutti/Cartero) Mailing Phishing Framework - This Branch is UNSTABLE :: Official STABLE master branch at
-- [**49**Star][4y] [PowerShell] [xme/powershell_scripts](https://github.com/xme/powershell_scripts) Miscellaneous PowerShell scripts
-- [**49**Star][9d] [JS] [whichbrowser/parser-javascript](https://github.com/whichbrowser/parser-javascript) Browser sniffing gone too far — A useragent parser library for JavaScript
+- [**49**Star][1y] [Perl] [bigsen/crack-file](https://github.com/bigsen/Crack-file) Theos File
+- [**49**Star][1y] [Go] [zredshift/mimemagic](https://github.com/zredshift/mimemagic) Powerful and versatile MIME sniffing package using pre-compiled glob patterns, magic number signatures, XML document namespaces, and tree magic for mounted volumes, generated from the XDG shared-mime-info database.
+- [**49**Star][4y] [PS] [xme/powershell_scripts](https://github.com/xme/powershell_scripts) Miscellaneous PowerShell scripts
+- [**49**Star][23d] [Shell] [xhorak/firefox-devedition-flatpak](https://github.com/xhorak/firefox-devedition-flatpak) Flatpak manifest and patches to build Firefox
+- [**49**Star][11d] [JS] [whichbrowser/parser-javascript](https://github.com/whichbrowser/parser-javascript) Browser sniffing gone too far — A useragent parser library for JavaScript
- [**49**Star][1y] [Py] [undeadsec/herakeylogger](https://github.com/undeadsec/herakeylogger) Chrome Keylogger Extension | Post Exploitation Tool
-- [**49**Star][1y] [JS] [tsug0d/myawesomewebchallenge](https://github.com/tsug0d/myawesomewebchallenge) Collection of my capture-the-flag web challenge in any levels
-- [**49**Star][24d] [Py] [trailofbits/ctf-challenges](https://github.com/trailofbits/ctf-challenges) CTF Challenges
+- [**49**Star][4y] [C++] [uitra/injectora](https://github.com/uitra/injectora) x86/x64 manual mapping injector using the JUCE library
+- [**49**Star][26d] [Py] [trailofbits/ctf-challenges](https://github.com/trailofbits/ctf-challenges) CTF Challenges
- [**49**Star][2m] [Py] [tna0y/python-random-module-cracker](https://github.com/tna0y/python-random-module-cracker) Predict python's random module generated values.
- [**49**Star][10m] [timip/osee](https://github.com/timip/osee) OSEE Preparation
-- [**49**Star][2y] [Ruby] [thezdi/derbycon2017](https://github.com/thezdi/derbycon2017) DerbyCon 2017 Presentation VMware Escapology: How to Houdini the Hypervisor
+- [**49**Star][2y] [Py] [thelsa/awbruter](https://github.com/thelsa/awbruter) 千倍速一句话木马密码爆破工具
- [**49**Star][2y] [java] [toufikairane/andromalware](https://github.com/tfairane/andromalware) Android Malware for educational purpose
- [**49**Star][5y] [Perl] [tanjiti/waftest](https://github.com/tanjiti/waftest) WAF测试工具
+- [**49**Star][2y] [Py] [steinsgatep001/binary](https://github.com/steinsgatep001/binary) Sleep_Pwn_f1sh
- [**49**Star][5m] [Jupyter Notebook] [sroberts/jager](https://github.com/sroberts/jager) Hunting IOCs all day every day...
-- [**49**Star][10m] [sourcingdenis/free-online-competitive-intelligence](https://github.com/sourcingdenis/free-online-competitive-intelligence) #OSINT
- [**49**Star][2y] [JS] [sola-da/redos-vulnerabilities](https://github.com/sola-da/redos-vulnerabilities) A list of ReDoS vulnerabilities in npm modules found by the Software Lab at TU Darmstadt. For each vulnerability, there is a proof-of-concept exploit, showing how the slowdown may occur. The resources in this repository are provided for research purpose only. Please read below for more details.
-- [**49**Star][25d] [JS] [silverwind/default-gateway](https://github.com/silverwind/default-gateway) Get the default network gateway, cross-platform.
+- [**49**Star][27d] [JS] [silverwind/default-gateway](https://github.com/silverwind/default-gateway) Get the default network gateway, cross-platform.
- [**49**Star][4y] [Py] [silentsignal/duncan](https://github.com/silentsignal/duncan) Duncan - Blind SQL injector skeleton
- [**49**Star][1y] [Swift] [sherlouk/swiftprovisioningprofile](https://github.com/sherlouk/swiftprovisioningprofile) Parse iOS mobile provisioning files into Swift models
- [**49**Star][2y] [JS] [secureskytechnology/badlibrary](https://github.com/secureskytechnology/badlibrary) vulnerable web application for training
- [**49**Star][3y] [Py] [secrary/ellascanner](https://github.com/secrary/ellascanner) Passive web scanner [This project is not maintained anymore]
- [**49**Star][8m] [Shell] [screetsec/imr0t](https://github.com/screetsec/imr0t) imR0T: Send a quick message with simple text encryption to your whatsapp contact and protect your text by encrypting and decrypting, basically in ROT13 with new multi encryption based algorithm on ASCII and Symbols Substitution
-- [**49**Star][9d] [Go] [sandertv/gophertunnel](https://github.com/sandertv/gophertunnel) A Minecraft (Bedrock Edition) library written in Go used for creating proxies, servers, clients and tools
+- [**49**Star][7m] [Shell] [scipag/nac_bypass](https://github.com/scipag/nac_bypass) Script collection to bypass Network Access Control (NAC, 802.1x)
- [**49**Star][9y] [C] [s7ephen/sandkit](https://github.com/s7ephen/sandkit) A Toolkit to assist with the investigation of Sandboxing software
+- [**49**Star][30d] [Java] [rub-nds/tls-scanner](https://github.com/rub-nds/tls-scanner) The TLS-Scanner Module from TLS-Attacker
- [**49**Star][3y] [C++] [rolisoft/host-scanner](https://github.com/rolisoft/host-scanner) Active/passive network scanner and autonomous vulnerability assessment application.
- [**49**Star][5y] [Java] [retme7/broadanywhere_poc_by_retme_bug_17356824](https://github.com/retme7/broadanywhere_poc_by_retme_bug_17356824) a poc of Android bug 17356824
+- [**49**Star][4y] [C] [relys/3ds_multi_decryptor](https://github.com/relys/3ds_multi_decryptor)
- [**49**Star][4y] [Java] [rapid7/metasploit-javapayload](https://github.com/rapid7/metasploit-javapayload) THIS REPO IS OBSOLETE. USE
+- [**49**Star][2d] [C] [rahra/onioncat](https://github.com/rahra/onioncat) Official repository of OnionCat, the VPN adapter for Tor and I2P.
- [**49**Star][10m] [proofofcalc/cve-2019-6453-poc](https://github.com/proofofcalc/cve-2019-6453-poc) Proof of calc for CVE-2019-6453
- [**49**Star][2y] [Py] [prncc/steam-scraper](https://github.com/prncc/steam-scraper) A pair of spiders for scraping product data and reviews from Steam.
- [**49**Star][4m] [C] [pinkp4nther/sutekh](https://github.com/pinkp4nther/sutekh) An example rootkit that gives a userland process root permissions
-- [**49**Star][2m] [PowerShell] [palantir/exploitguard](https://github.com/palantir/exploitguard) Documentation and supporting script sample for Windows Exploit Guard
- [**49**Star][2y] [C++] [osrdrivers/kmexts](https://github.com/osrdrivers/kmexts) Simple driver to register all available process, thread, image, Registry, and Object callbacks
- [**49**Star][1y] [opensourcepentest/tools](https://github.com/opensourcepentest/tools) Tools used for Penetration testing / Red Teaming
+- [**49**Star][1y] [C] [niklasb/elgoog](https://github.com/niklasb/elgoog) elgoog/searchme challenge from 34C3 CTF / WCTF 2018: sources & exploit
- [**49**Star][3y] [Java] [necst/heldroid](https://github.com/necst/heldroid) Dissect Android Apps Looking for Ransomware Functionalities
-- [**49**Star][3y] [Py] [n0pe-sled/apache2-mod-rewrite-setup](https://github.com/n0pe-sled/apache2-mod-rewrite-setup) Quickly Implement Mod-Rewrite in your infastructure
- [**49**Star][6y] [CSS] [mubix/whitechapel](https://github.com/mubix/whitechapel) password cracking front end
- [**49**Star][8m] [Shell] [mthbernardes/lfi-enum](https://github.com/mthbernardes/lfi-enum) Scripts to execute enumeration via LFI
- [**49**Star][3y] [mrvaughan/defcon2016gsmdata](https://github.com/mrvaughan/defcon2016gsmdata) Just a place to dump the cdma data I collected while at Defcon 2016
- [**49**Star][2y] [Py] [mrschyte/socksmon](https://github.com/mrschyte/socksmon) socksmon:使用 BURP 或 ZAP 的 TCP 拦截代理
- [**49**Star][1y] [Perl] [mrash/fwsnort](https://github.com/mrash/fwsnort) Application Layer IDS/IPS with iptables
+- [**49**Star][1y] [PS] [mmotti/mmotti-host-file](https://github.com/mmotti/mmotti-host-file) Heavily optimised, wildcard enabled host file for use with Samsung Knox Firewall.
- [**49**Star][5y] [Py] [michael-yip/threattracker](https://github.com/michael-yip/threattracker) 监控由一组自定义谷歌搜索引擎索引的IoC,并生成告警
- [**49**Star][3m] [Ruby] [mcpa-stlouis/hack-the-arch](https://github.com/mcpa-stlouis/hack-the-arch) Welcome to HackTheArch! A free open source scoring server for cyber Capture the Flag competitions!
- [**49**Star][3y] [maldevel/rootkits-list-download](https://github.com/maldevel/rootkits-list-download) A curated list of rootkits found on Github and other sites.
- [**49**Star][3y] [Ruby] [luizluca/bridge](https://github.com/luizluca/bridge) brigde is a dynamic port forwarder over HTTP (with HTTP PROXY support)
-- [**49**Star][8m] [klaver/sysctl](https://github.com/klaver/sysctl) Linux/BSD kernel tuning and network security hardening optimizations, improving the performance of server systems via optimized sysctl tweaks
+- [**49**Star][27d] [Java] [llvm-but-worse/maple-ir](https://github.com/llvm-but-worse/maple-ir) Industrial IR-based static analysis framework for Java bytecode
- [**49**Star][2y] [Py] [juga0/dhcpcanon](https://github.com/juga0/dhcpcanon) DHCP client disclosing less identifying information.
- [**49**Star][2m] [jcesarstef/ghhdb-github-hacking-database](https://github.com/jcesarstef/ghhdb-github-hacking-database) Github Hacking Database - My personal collection of Github Dorks to search for Confidential Information (Yes, it's a Github version of Google Dorks)
- [**49**Star][6y] [Py] [isecpartners/rtspfuzzer](https://github.com/isecpartners/rtspfuzzer) RTSP network protocol fuzzer
- [**49**Star][10m] [Py] [hrkfdn/deckard](https://github.com/hrkfdn/deckard) Deckard performs static and dynamic binary analysis on Android APKs to extract Xposed hooks
-- [**49**Star][3m] [C#] [guillac/wsmanager](https://github.com/guillac/wsmanager) Webshell Manager
- [**49**Star][2y] [JS] [freddyb/html2dom](https://github.com/freddyb/html2dom) generates JavaScript source code to create Elements from a given html string
- [**49**Star][6y] [C++] [frankstain/pe-loader](https://github.com/frankstain/pe-loader) library, which help to describe or load and execute PE files.
- [**49**Star][2m] [PHP] [fastly/wordpress-plugin](https://github.com/fastly/wordpress-plugin) The Official Fastly WordPress Plugin
- [**49**Star][3y] [Java] [fabiomsr/okhttp-peer-certificate-extractor](https://github.com/fabiomsr/okhttp-peer-certificate-extractor) This tool extracts peer certificates from given certificates.
-- [**49**Star][7m] [Py] [esecuritylab/kostebek](https://github.com/esecuritylab/kostebek)
- [**49**Star][3y] [C++] [enigma0x3/messagebox](https://github.com/enigma0x3/messagebox) PoC dlls for Task Scheduler COM Hijacking
-- [**49**Star][3y] [PowerShell] [enclaveconsulting/crypto-pki](https://github.com/enclaveconsulting/crypto-pki) Scripts related to Windows cryptography and PKI.
+- [**49**Star][3y] [PS] [enclaveconsulting/crypto-pki](https://github.com/enclaveconsulting/crypto-pki) Scripts related to Windows cryptography and PKI.
- [**49**Star][11m] [ember-cli/rfcs](https://github.com/ember-cli/rfcs) Archive of RFCs for changes to ember-cli (for current RFC repo see
- [**49**Star][3y] [CSS] [dxa4481/whatsinmyredis](https://github.com/dxa4481/whatsinmyredis) A CSRF demonstration of stealing local Redis data, and encrypting all Redis instances on a local network
-- [**49**Star][2y] [PowerShell] [dstaulcu/ta-sigma-searches](https://github.com/dstaulcu/ta-sigma-searches) A Splunk app with saved reports derived from Sigma rules
-- [**49**Star][3y] [C++] [drizzlerisk/ntpdoser](https://github.com/drizzlerisk/ntpdoser) NTP Doser is a NTP Amplification DoS/DDoS attack tool for penttesting
-- [**49**Star][1y] [PowerShell] [dgg-it/match-adhashes](https://github.com/dgg-it/match-adhashes) Builds a hashmap of AD NTLM hashes/usernames and iterates through a second list of hashes checking for the existence of each entry in the AD NTLM hashmap
+- [**49**Star][2y] [PS] [dstaulcu/ta-sigma-searches](https://github.com/dstaulcu/ta-sigma-searches) A Splunk app with saved reports derived from Sigma rules
- [**49**Star][3y] [Py] [dfirfpi/dpapilab](https://github.com/dfirfpi/dpapilab) Windows DPAPI laboratory
- [**49**Star][7m] [Ruby] [dev-sec/chef-nginx-hardening](https://github.com/dev-sec/chef-nginx-hardening) This chef cookbook provides secure nginx configurations.
- [**49**Star][6y] [Py] [debasishm89/iofuzz](https://github.com/debasishm89/iofuzz) A mutation based user mode (ring3) dumb in-memory Windows Kernel (IOCTL) Fuzzer/Logger. This script attach it self to any given process and hooks DeviceIoControl!Kernel32 API and try to log or fuzz all I/O Control code I/O Buffer pointer, I/O buffer length that process sends to any Kernel driver.
-- [**49**Star][2y] [PHP] [daudmalik06/reconcat](https://github.com/daudmalik06/reconcat) A small Php application to fetch archive url snapshots from archive.org. using it you can fetch complete list of snapshot urls of any year or complete list of all years possible. Made Specially for penetration testing purpose.
-- [**49**Star][12d] [C] [danielkrupinski/vac](https://github.com/danielkrupinski/vac) Source code of Valve Anti-Cheat obtained from disassembly of compiled modules
-- [**49**Star][11d] [Batchfile] [chef-koch/chromium-hardening](https://github.com/chef-koch/chromium-hardening) Hardens Chrome & Chromium based Browsers
-- [**49**Star][3m] [Py] [bkerler/mr](https://github.com/bkerler/mr) Mobile Revelator
+- [**49**Star][14d] [C] [danielkrupinski/vac](https://github.com/danielkrupinski/vac) Source code of Valve Anti-Cheat obtained from disassembly of compiled modules
+- [**49**Star][2y] [C] [coolervoid/firefox_tunnel](https://github.com/coolervoid/firefox_tunnel) The way to use firefox to make a tunnel to remote communication, bypass any firewall
+- [**49**Star][5d] [CSS] [command-tab/awesome-n64-development](https://github.com/command-tab/awesome-n64-development) A curated list of Nintendo 64 development resources including toolchains, documentation, emulators, and more
+- [**49**Star][3d] [Batchfile] [chef-koch/chromium-hardening](https://github.com/chef-koch/chromium-hardening) Hardens Chrome & Chromium based Browsers
+- [**49**Star][2d] [Go] [c-sto/gosecretsdump](https://github.com/c-sto/gosecretsdump)
+- [**49**Star][25d] [Py] [bolunwang/backdoor](https://github.com/bolunwang/backdoor) Code implementation of the paper "Neural Cleanse: Identifying and Mitigating Backdoor Attacks in Neural Networks", at IEEE Security and Privacy 2019.
+- [**49**Star][1y] [Java] [blackhacker511/blackrat](https://github.com/blackhacker511/blackrat) BlackRAT - Java Based Remote Administrator Tool
- [**49**Star][2y] [PHP] [auraphp/aura.payload](https://github.com/auraphp/aura.payload) A Domain Payload implementation.
- [**49**Star][3y] [Py] [attify/attify-zigbee-framework](https://github.com/attify/attify-zigbee-framework) GUI Framework on top of Killerbee
-- [**49**Star][7y] [C] [andy928/xpenology](https://github.com/andy928/xpenology) XPEnology Project
-- [**49**Star][2y] [Shell] [alephsecurity/initroot](https://github.com/alephsecurity/initroot) Motorola Untethered Jailbreak: Exploiting CVE-2016-10277 for Secure Boot and Device Locking bypass
- [**49**Star][7d] [C++] [ahupowerdns/galmon](https://github.com/ahupowerdns/galmon) galileo open source monitoring
- [**49**Star][11m] [Py] [agustingianni/utilities](https://github.com/agustingianni/utilities) Uncategorized utilities
- [DumpFunctionBytes](https://github.com/agustingianni/utilities/blob/master/DumpFunctionBytes.py) dumps the current function (you need to position the cursor on the start of the function) as a shellcode. It does a very limited analysis of the function in order to let you know that you need to fix call sites to functions
@@ -12039,71 +12821,73 @@ networking routines
- [mark_interesting](https://github.com/agustingianni/utilities/blob/master/mark_interesting.py) Small idapython script that finds all the signed comparisions and marks them with a color.
- [machofinder](https://github.com/agustingianni/utilities/blob/master/machofinder.py) Hacky script to gather all the mach-o file (and fat).
- [find_hardref](https://github.com/agustingianni/utilities/blob/master/find_hardref.py) Script to find hardcoded references inside an IDA database.
-- [**49**Star][2y] [Py] [adrianherrera/virustotal](https://github.com/adrianherrera/virustotal) A simple command-line script to interact with the virustotal-api
-- [**49**Star][7m] [C#] [9ee1/capstone.net](https://github.com/9ee1/capstone.net) .NET Core and .NET Framework binding for the Capstone Disassembly Framework
-- [**49**Star][12d] [Py] [0blio/filegps](https://github.com/0blio/filegps) A tool that help you to guess how your shell was renamed after the server-side script of the file uploader saved it
+- [**49**Star][14d] [Py] [0blio/filegps](https://github.com/0blio/filegps) A tool that help you to guess how your shell was renamed after the server-side script of the file uploader saved it
+- [**48**Star][6d] [TS] [srar/socks2shadowsocks](https://github.com/srar/socks2shadowsocks) 单Socks5 转换 多Shadowsocks端口 流量统计 抓包分析 TypeScript
+- [**48**Star][1y] [pbnj/infosec-interview-questions](https://github.com/pbnj/infosec-interview-questions)
- [**48**Star][5m] [Shell] [yeyintminthuhtut/lazy-redteamer-scripts](https://github.com/yeyintminthuhtut/lazy-redteamer-scripts)
-- [**48**Star][3y] [Assembly] [t00sh/assembly](https://github.com/t00sh/assembly) Collection of Linux shellcodes
-- [**48**Star][4m] [Makefile] [shadowsocks/openwrt-feeds](https://github.com/shadowsocks/openwrt-feeds) OpenWrt/LEDE feeds
-- [**48**Star][6m] [C++] [0x00-0x00/cve-2019-0841-bypass](https://github.com/0x00-0x00/cve-2019-0841-bypass) A fully automatic CVE-2019-0841 bypass targeting all versions of Edge in Windows 10.
- [**48**Star][4y] [Py] [g0tmi1k/boot2root-scripts](https://github.com/g0tmi1k/boot2root-scripts) Homemade scripts to-do various vulnerable challenges
-- [**48**Star][12d] [Py] [intel/cve-bin-tool](https://github.com/intel/cve-bin-tool) This tool scans for a number of common, vulnerable components (openssl, libpng, libxml2, expat and a few others) to let you know if your system includes common libraries with known vulnerabilities.
+- [**48**Star][14d] [Py] [intel/cve-bin-tool](https://github.com/intel/cve-bin-tool) This tool scans for a number of common, vulnerable components (openssl, libpng, libxml2, expat and a few others) to let you know if your system includes common libraries with known vulnerabilities.
- [**48**Star][3m] [Py] [hatriot/peachorchard](https://github.com/hatriot/peachorchard) Peach Fuzzer Web Frontend
-- [**48**Star][14d] [PowerShell] [littl3field/audix](https://github.com/littl3field/audix) Audix is a PowerShell tool to quickly configure the Windows Event Audit Policies for security monitoring
-- [**48**Star][1m] [Dockerfile] [winterssy/ssr-docker](https://github.com/winterssy/ssr-docker) 使用Docker部署ShadowsocksR服务端
-- [**48**Star][9d] [Py] [pomo-mondreganto/forcad](https://github.com/pomo-mondreganto/forcad) Pure-python distributable Attack-Defence CTF platform, created to be easily set up.
+- [**48**Star][3y] [JS] [cyrus-and/gproxy](https://github.com/cyrus-and/gproxy) googleusercontent.com as HTTP(S) proxy
+- [**48**Star][8m] [JS] [rhinosecuritylabs/swagger-ez](https://github.com/rhinosecuritylabs/swagger-ez) A tool geared towards pentesting APIs using OpenAPI definitions.
+- [**48**Star][16d] [PS] [littl3field/audix](https://github.com/littl3field/audix) Audix is a PowerShell tool to quickly configure the Windows Event Audit Policies for security monitoring
+- [**48**Star][2y] [HTML] [c0nw0nk/coinhive](https://github.com/c0nw0nk/coinhive) A nice friendly simple and easly customizable GUI for coinhives javascript miner to embed onto websites so users of your site can interact with features of the miner on every single page this javascript miner is to help those who have problems with advertisements/advertising/ads popups banners mobile redirects malvertising/malware etc and provid…
+- [**48**Star][11d] [Py] [pomo-mondreganto/forcad](https://github.com/pomo-mondreganto/forcad) Pure-python distributable Attack-Defence CTF platform, created to be easily set up.
+- [**48**Star][3m] [Ruby] [tintoser/bluekeep-exploit](https://github.com/tintoser/bluekeep-exploit) Bluekeep(CVE 2019-0708) exploit released
- [**48**Star][3m] [C] [juniorjacob/readwrite-kernel-stable](https://github.com/juniorjacob/readwrite-kernel-stable) a more stable & secure read/write virtual memory for kernel mode drivers
- [**48**Star][4m] [bcosorg/whitepaper](https://github.com/bcosorg/whitepaper) whitepaper
-- [**48**Star][27d] [PowerShell] [s3cur3th1ssh1t/creds](https://github.com/S3cur3Th1sSh1t/Creds) Some usefull Scripts and Executables for Pentest & Forensics
+- [**48**Star][2d] [C++] [trailofbits/polytracker](https://github.com/trailofbits/polytracker) An LLVM-based instrumentation tool for universal taint analysis.
+- [**48**Star][2m] [JS] [luckman666/devops_kkit](https://github.com/luckman666/devops_kkit) django2.1写的自动化运维系统
+- [**48**Star][4m] [HTML] [0xbird/0xbird.github.io](https://github.com/0xbird/0xbird.github.io) 欢迎关注小鸟的技术博客!(Pwn/智能硬件/AI安全/漏洞分析/威胁情报/RedTeam/移动设备/内核/虚拟机/容器安全/浏览器/CPU/安全开发/漏洞挖掘/APT/病毒分析/安全学术)
- [**48**Star][4y] [Java] [gdssecurity/gds-pmd-security-rules](https://github.com/GDSSecurity/GDS-PMD-Security-Rules) Custom security ruleset for the popular Java static analysis tool PMD.
-- [**48**Star][1y] [Perl] [bigsen/crack-file](https://github.com/bigsen/Crack-file) Theos File
+- [**48**Star][7m] [Py] [anouarbensaad/honeypot-iot](https://github.com/anouarbensaad/honeypot-iot) This tool to simulate http server attacks in Python which logs HackerIP and all the tracing he does into a Logfile then a database.
- [**48**Star][1y] [HTML] [yahooarchive/csptester](https://github.com/YahooArchive/csptester) A quick and easy way to test CSP behavior on modern browsers
-- [**48**Star][1y] [Go] [zredshift/mimemagic](https://github.com/zredshift/mimemagic) Powerful and versatile MIME sniffing package using pre-compiled glob patterns, magic number signatures, XML document namespaces, and tree magic for mounted volumes, generated from the XDG shared-mime-info database.
- [**48**Star][2y] [C++] [zodiacon/dllinjectionwiththreadcontext](https://github.com/zodiacon/dllinjectionwiththreadcontext) This is a sample that shows how to leverage SetThreadContext for DLL injection
-- [**48**Star][17d] [Py] [zdresearch/owasp-honeypot](https://github.com/zdresearch/owasp-honeypot) OWASP Honeypot
+- [**48**Star][19d] [Py] [zdresearch/owasp-honeypot](https://github.com/zdresearch/owasp-honeypot) OWASP Honeypot
- [**48**Star][3y] [C] [yolosec/upcgen](https://github.com/yolosec/upcgen) Proof of concept for UPC UBEE router hack - WPA2 password generator
- [**48**Star][9m] [yeti-791/apt-guide](https://github.com/yeti-791/apt-guide) APT学习指南(Advanced persistent threat learning Guide)
- [**48**Star][2y] [Py] [xl7dev/icsecurity](https://github.com/xl7dev/icsecurity) Industrial control Security Tool
-- [**48**Star][21d] [Shell] [xhorak/firefox-devedition-flatpak](https://github.com/xhorak/firefox-devedition-flatpak) Flatpak manifest and patches to build Firefox
- [**48**Star][1y] [html] [wzw19890321/exploits](https://github.com/wzw19890321/exploits)
- [**48**Star][9m] [C++] [vmcall/eye_mapper](https://github.com/vmcall/eye_mapper) BattlEye x64 usermode injector
- [**48**Star][2y] [JS] [vegabird/prithvi](https://github.com/vegabird/prithvi) A Report Generation Tool for Security Assessment
+- [**48**Star][2m] [Py] [turnerlabs/antiope](https://github.com/turnerlabs/antiope) AWS Inventory and Compliance Framework
- [**48**Star][7m] [JS] [tuhinshubhra/wpintel](https://github.com/tuhinshubhra/wpintel) Chrome extension designed for WordPress Vulnerability Scanning and information gathering!
- [**48**Star][2y] [C++] [tonyzesto/pubgprivxcode85](https://github.com/tonyzesto/pubgprivxcode85) Player ESP 3D Box ESP Nametag ESP Lightweight Code Secure Injection Dedicated Cheat Launcher Secured Against Battleye Chicken Dinner Every Day. Win more matches than ever before with CheatAutomation’s Playerunknown’s Battlegrounds cheat! Our stripped down, ESP only cheat gives you the key features you need to take out your opponents and be eatin…
- [**48**Star][7y] [tias/android-busybox-ndk](https://github.com/tias/android-busybox-ndk) Keeping track of instructions and patches for building busybox with the android NDK
-- [**48**Star][2y] [Py] [thelsa/awbruter](https://github.com/thelsa/awbruter) 千倍速一句话木马密码爆破工具
- [**48**Star][2m] [Py] [thcipriani/sshecret](https://github.com/thcipriani/sshecret) I can keep a SSHecret
+- [**48**Star][6m] [Shell] [t3chnocat/oscp-ctf](https://github.com/t3chnocat/oscp-ctf) oscp-ctf is a small collection of basic Bash scripts that make life easier and save time whether you are in the OSCP labs, HackThebox or playing around with CTFs.
- [**48**Star][9m] [C++] [stoyan-shopov/troll](https://github.com/stoyan-shopov/troll) troll:ARM Cortex-M 处理器 C 语言源码调试器
-- [**48**Star][2y] [Py] [steinsgatep001/binary](https://github.com/steinsgatep001/binary) Sleep_Pwn_f1sh
-- [**48**Star][2m] [C] [ssbssa/heob](https://github.com/ssbssa/heob) Detects buffer overruns and memory leaks.
+- [**48**Star][4d] [C] [ssbssa/heob](https://github.com/ssbssa/heob) Detects buffer overruns and memory leaks.
- [**48**Star][5y] [C++] [sogeti-esec-lab/android-fde](https://github.com/sogeti-esec-lab/android-fde) Tools to work on Android Full Disk Encryption (FDE).
- [**48**Star][1y] [Py] [softsec-kaist/gitctf](https://github.com/softsec-kaist/gitctf) Git-based CTF
- [**48**Star][2y] [Py] [softscheck/scff](https://github.com/softscheck/scff) softScheck Cloud Fuzzing Framework
- [**48**Star][1m] [Py] [snovvcrash/fwdsh3ll](https://github.com/snovvcrash/fwdsh3ll) Forward shell generation framework
- [**48**Star][4y] [Py] [signalsec/kirlangic-ttf-fuzzer](https://github.com/signalsec/kirlangic-ttf-fuzzer) TrueType Font Fuzzer
+- [**48**Star][3m] [Ruby] [salemove/jaeger-client-ruby](https://github.com/salemove/jaeger-client-ruby) OpenTracing Tracer implementation for Jaeger in Ruby
- [**48**Star][1y] [Shell] [rustybird/corridor](https://github.com/rustybird/corridor) Tor traffic whitelisting gateway
- [**48**Star][2y] [Py] [rubenespadas/dionaeafr](https://github.com/rubenespadas/dionaeafr) Dionaea Front Web
-- [**48**Star][28d] [Java] [rub-nds/tls-scanner](https://github.com/rub-nds/tls-scanner) The TLS-Scanner Module from TLS-Attacker
- [**48**Star][3y] [C] [rodrigoalvesvieira/soundkeylogger](https://github.com/rodrigoalvesvieira/soundkeylogger) An experimental project to demonstrate how a user keyboard input may be sniffed through the pattern analysis of the sounds emitted by the keystrokes.
+- [**48**Star][3m] [C] [rek7/postshell](https://github.com/rek7/postshell) PostShell - Post Exploitation Bind/Backconnect Shell
- [**48**Star][7m] [reabout/datacon](https://github.com/reabout/datacon) datacon比赛方向三-攻击源与攻击者分析writeup
-- [**48**Star][3m] [C] [rahra/onioncat](https://github.com/rahra/onioncat) Official repository of OnionCat, the VPN adapter for Tor and I2P.
- [**48**Star][5m] [C] [r3kapig/wctf-2019](https://github.com/r3kapig/wctf-2019) WCTF 2019 Onsite(Master) Challenge
- [**48**Star][2y] [Py] [q3k/m16c-interface](https://github.com/q3k/m16c-interface) A Serial IO programmer for Renesas M16C, includes security PIN bypass.
- [**48**Star][1y] [C] [pymumu/jail-shell](https://github.com/pymumu/jail-shell) Jail-shell is a linux security tool mainly using chroot, namespaces technologies, limiting users to perform specific commands, and access sepcific directories.
-- [**48**Star][6m] [Py] [pylyf/networm](https://github.com/pylyf/networm) Python network worm that spreads on the local network and gives the attacker control of these machines.
-- [**48**Star][2y] [PowerShell] [proxb/poshprivilege](https://github.com/proxb/poshprivilege) Manage user privileges on a local machine or view applied privileges on local or remote system
+- [**48**Star][2y] [PS] [proxb/poshprivilege](https://github.com/proxb/poshprivilege) Manage user privileges on a local machine or view applied privileges on local or remote system
- [**48**Star][1y] [pbnj/infosec-interview-questions](https://github.com/pbnj/infosec-interview-questions)
- [**48**Star][7y] [Py] [pdasilva/vtrace_scripts](https://github.com/pdasilva/vtrace_scripts)
- [**48**Star][6y] [JS] [pauljt/scanjs](https://github.com/pauljt/scanjs) Static analysis tool for javascript code based. Scanjs uses Esprima to convert sources to AST, then walks AST looking for patterns.
-- [**48**Star][5m] [PHP] [owasp/vulnerable-web-application](https://github.com/owasp/vulnerable-web-application) OWASP Vulnerable Web Application Project
- [**48**Star][3y] [Shell] [osm0sis/apk-patcher](https://github.com/osm0sis/apk-patcher) Patch APKs on-the-fly from Android recovery (Proof of Concept)
+- [**48**Star][5y] [C] [nyx0/kins](https://github.com/nyx0/kins) KINS Banking Trojan
- [**48**Star][2y] [Py] [nixawk/nmap_vscan](https://github.com/nixawk/nmap_vscan) nmap service and application version detection (without nmap installation)
-- [**48**Star][1y] [C] [niklasb/elgoog](https://github.com/niklasb/elgoog) elgoog/searchme challenge from 34C3 CTF / WCTF 2018: sources & exploit
+- [**48**Star][9d] [JS] [moneroocean/xmr-node-proxy](https://github.com/moneroocean/xmr-node-proxy) Cryptonote/Forknote/Cryptonight/Light/Heavy coin proxy for nodejs-pool
- [**48**Star][5y] [Shell] [mkdesu/cables](https://github.com/mkdesu/cables) Cables Communication, secure and anonymous communication using email-like addresses.
+- [**48**Star][12m] [Py] [metachar/pyhawk](https://github.com/metachar/pyhawk) Searches the directory of choice for interesting files. Such as database files and files with passwords stored on them
- [**48**Star][2y] [Shell] [menzow/sn1per-docker](https://github.com/menzow/sn1per-docker) Dockerized version of Sn1per (
- [**48**Star][7m] [JS] [mcollina/docker-loghose](https://github.com/mcollina/docker-loghose) Collect all the logs from all docker containers
+- [**48**Star][2y] [HTML] [mburakergenc/malware-detection-using-machine-learning](https://github.com/mburakergenc/malware-detection-using-machine-learning) Malware detection project on Android devices using machine learning classification algorithms.
+- [**48**Star][8m] [Py] [marten4n6/tinytor](https://github.com/marten4n6/tinytor) A tiny Tor client implementation (in pure python).
+- [**48**Star][24d] [PHP] [marcocesarato/php-antimalware-scanner](https://github.com/marcocesarato/php-antimalware-scanner) AMWSCAN (Antimalware Scanner) is a php antimalware/antivirus scanner console script written in php for scan your project. This can work on php projects and a lot of others platform.
- [**48**Star][3y] [C] [malwarelu/malware-lu](https://github.com/malwarelu/malware-lu) Automatically exported from code.google.com/p/malware-lu
-- [**48**Star][25d] [Java] [llvm-but-worse/maple-ir](https://github.com/llvm-but-worse/maple-ir) Industrial IR-based static analysis framework for Java bytecode
- [**48**Star][2y] [HTML] [knrdl/yamot](https://github.com/knrdl/yamot) Yet Another MOnitoring Tool
- [**48**Star][8m] [HTML] [klionsec/klionsec.github.io](https://github.com/klionsec/klionsec.github.io)
- [**48**Star][2y] [C] [kkamagui/iron-hid](https://github.com/kkamagui/iron-hid) Create Your Own Bad USB Device (Presented at HITBSecConf 2016)
@@ -12114,107 +12898,135 @@ networking routines
- [**48**Star][5m] [jas502n/cve-2019-11581](https://github.com/jas502n/cve-2019-11581) Atlassian JIRA Template injection vulnerability RCE
- [**48**Star][2y] [Java] [inode-/attackselector](https://github.com/inode-/attackselector) Burp Suite Attack Selector Plugin
- [**48**Star][3y] [PHP] [incredibleindishell/ldap-credentials-collector-backdoor-generator](https://github.com/incredibleindishell/ldap-credentials-collector-backdoor-generator) This script generate backdoor code which log username password of an user who have passed HTTP basic auth using LDAP credentials.
-- [**48**Star][2m] [Py] [importctf/instagram-hacker](https://github.com/importctf/instagram-hacker) This is an advanced script for Instagram bruteforce attacks. WARNING THIS IS A REAL TOOL!
-- [**48**Star][2m] [Py] [idapython/pyhexraysdeob](https://github.com/idapython/pyhexraysdeob) A port of Rolf Rolles hexraysdeob
- [**48**Star][3y] [JS] [huangwc94/scraping-helper-chrome-extension](https://github.com/huangwc94/scraping-helper-chrome-extension) Scraping Helper will help you to find out the best html/css selector for certain elements
- [**48**Star][7m] [Jupyter Notebook] [hija/malwaredatascience](https://github.com/hija/malwaredatascience) Malware Data Science Reading Diary / Notes
- [**48**Star][12m] [C] [hfiref0x/sxsexp](https://github.com/hfiref0x/sxsexp) Expand compressed files from WinSxS folder
- [**48**Star][2y] [Jupyter Notebook] [harrisonpim/bookworm](https://github.com/harrisonpim/bookworm)
-- [**48**Star][2y] [Py] [h2hconference/2017](https://github.com/h2hconference/2017) H2HC 2017 Slides/Materials/Presentations
+- [**48**Star][5y] [C] [hackedteam/vector-edk](https://github.com/hackedteam/vector-edk) EFI Development Kit
+- [**48**Star][1y] [Py] [ha3mrx/facebook-cracker](https://github.com/ha3mrx/facebook-cracker) Facebook Cracker Version 1.0 can crack into Facebook Database 100% without Interruption By Facebook Firewall
+- [**48**Star][5d] [guyanqi/awesome-privacy](https://github.com/guyanqi/awesome-privacy) Repository for collection of research papers on privacy.
- [**48**Star][3y] [Go] [filosottile/openbsd-fde-crack](https://github.com/filosottile/openbsd-fde-crack) Some code to bruteforce OpenBSD softraid encrypted drives - NOT A READY-TO-USE TOOL
+- [**48**Star][8d] [Nim] [federicoceratto/nim-httpauth](https://github.com/federicoceratto/nim-httpauth) HTTP Authentication library for Nim
+- [**48**Star][7m] [Py] [esecuritylab/kostebek](https://github.com/esecuritylab/kostebek)
- [**48**Star][3y] [Py] [el3ct71k/autobrowser](https://github.com/el3ct71k/autobrowser) AutoBrowser Screenshot
- [**48**Star][8m] [C++] [dishather/richprint](https://github.com/dishather/richprint) Print compiler information stored in Rich Header of PE executables.
- [**48**Star][1y] [Batchfile] [dflabs/nat](https://github.com/dflabs/nat) No-Script Automation Tool
- [**48**Star][2y] [Py] [debasishm89/iefuzz](https://github.com/debasishm89/iefuzz) A static Internet Explorer Fuzzer.
- [**48**Star][3y] [Shell] [danielmiessler/honeycrediptracker](https://github.com/danielmiessler/honeycrediptracker) Quick script to gather stats on incoming credentials and IPs for a honey listener.
+- [**48**Star][2y] [Shell] [danielfree/asus-v2ray-transparent-proxy](https://github.com/danielfree/asus-v2ray-transparent-proxy) transparent proxy with v2ray, iptables, ipset 无线路由器 v2ray 透明代理
+- [**48**Star][9m] [Py] [crond-jaist/cyris](https://github.com/crond-jaist/cyris) CyRIS: Cyber Range Instantiation System
- [**48**Star][7y] [C++] [cr4sh/msfontsfuzz](https://github.com/cr4sh/msfontsfuzz) OpenType font file format fuzzer for Windows
- [**48**Star][7y] [C++] [cr4sh/code-coverage-analysis-tools](https://github.com/cr4sh/code-coverage-analysis-tools) Code coverage analysis tools for the PIN Toolkit
-- [**48**Star][2y] [C] [coolervoid/firefox_tunnel](https://github.com/coolervoid/firefox_tunnel) The way to use firefox to make a tunnel to remote communication, bypass any firewall
-- [**48**Star][18d] [CSS] [command-tab/awesome-n64-development](https://github.com/command-tab/awesome-n64-development) A curated list of Nintendo 64 development resources including toolchains, documentation, emulators, and more
- [**48**Star][2y] [C#] [cobbr/insecurepowershell](https://github.com/cobbr/insecurepowershell) InsecurePowerShell is PowerShell with some security features removed.
-- [**48**Star][2y] [PowerShell] [clr2of8/detect-sslmitm](https://github.com/clr2of8/detect-sslmitm) This PowerShell script will determine if your connection to external servers over HTTPS is being decrypted by an intercepting proxy such as the internet proxies commonly found in corporate environments. It does this by comparing the SSL intermediate certificate being used for your connection to the true/known SSL certificate for the server.
-- [**48**Star][2y] [Py] [citp/thewebneverforgets](https://github.com/citp/thewebneverforgets) Public code release for The Web Never Forgets paper
+- [**48**Star][2y] [PS] [clr2of8/detect-sslmitm](https://github.com/clr2of8/detect-sslmitm) This PowerShell script will determine if your connection to external servers over HTTPS is being decrypted by an intercepting proxy such as the internet proxies commonly found in corporate environments. It does this by comparing the SSL intermediate certificate being used for your connection to the true/known SSL certificate for the server.
+- [**48**Star][20d] [Py] [cleanunicorn/theo](https://github.com/cleanunicorn/theo) Ethereum recon and exploitation tool.
- [**48**Star][2y] [C++] [cherrypill/system_info](https://github.com/cherrypill/system_info) Hardware information tool for Windows
+- [**48**Star][3y] [C++] [chaitin/yanshi](https://github.com/chaitin/yanshi) A regular language recognizer generater like Ragel, enhanced with features to approximate context-free grammars and substring grammars
- [**48**Star][2y] [Py] [cert-polska/malwarecage](https://github.com/cert-polska/malwarecage) Malware repository component for samples & static configuration with REST API interface
- [**48**Star][2y] [C] [can1357/safe_capcom](https://github.com/can1357/safe_capcom) Capcom wrapper with safety in mind
- [**48**Star][4y] [Py] [breakingmalware/avulnerabilitychecker](https://github.com/breakingmalware/avulnerabilitychecker) Tool to check if your computer is likely to be vulnerable to exploitable constant Read-Write-Execute (RWX) addresses (AVs vulnerability)
+- [**48**Star][28d] [Shell] [bkerler/ghidra_installer](https://github.com/bkerler/ghidra_installer) Helper scripts to set up OpenJDK 11 and scale Ghidra for 4K on Ubuntu 18.04 / 18.10
- [**48**Star][2y] [Py] [bignerd95/chimay-blue](https://github.com/bignerd95/chimay-blue) Mikrotik SMB buffer overflow exploit
+- [**48**Star][2y] [PHP] [backlion/webshell](https://github.com/backlion/webshell) 这是一些常用的webshell
- [**48**Star][3y] [JS] [auth0-blog/serverless-stories-lambda](https://github.com/auth0-blog/serverless-stories-lambda) Serverless app built with AWS Lambda
+- [**48**Star][8m] [Py] [austin-taylor/bluewall](https://github.com/austin-taylor/bluewall) Bluewall is a firewall framework designed for offensive and defensive cyber professionals.
+- [**48**Star][8m] [CSS] [appsecco/using-docker-kubernetes-for-automating-appsec-and-osint-workflows](https://github.com/appsecco/using-docker-kubernetes-for-automating-appsec-and-osint-workflows) Repository for all the workshop content delivered at nullcon X on 1st of March 2019
- [**48**Star][2y] [C++] [anubisss/szimatszatyor](https://github.com/anubisss/szimatszatyor) World of Warcraft (WoW): SzimatSzatyor is an injector sniffer written in C++
- [**48**Star][1y] [java] [anbai-inc/burpstart](https://github.com/anbai-inc/burpstart) Burp 启动加载器
- [**48**Star][6y] [C++] [amrthabet/pysrdf](https://github.com/amrthabet/pysrdf) This is the python wrapper for The Security Framework SRDF
- [**48**Star][3y] [Py] [alessandrogario/ida-function-tagger](https://github.com/alessandrogario/ida-function-tagger) This IDAPython script tags subroutines according to their use of imported functions
- [**48**Star][3y] [Py] [agusmakmun/python-wordlist-generator](https://github.com/agusmakmun/python-wordlist-generator) Create awesome wordlist with python - demo:
+- [**48**Star][7y] [C++] [1184893257/simplesniffer](https://github.com/1184893257/simplesniffer) 基于 WinPcap 的网络抓包软件,使用 MFC 做界面
+- [**47**Star][9d] [jyvsectec/phr-model](https://github.com/jyvsectec/phr-model) Prepare, Hunt, and Respond - Conceptual model against cyber attack by JYVSECTEC
- [**47**Star][5y] [PHP] [cloudsec/aioshell](https://github.com/cloudsec/aioshell) A php webshell run under linux based webservers. v0.05
- [**47**Star][3y] [HTML] [jpcertcc/owaspdocuments](https://github.com/jpcertcc/owaspdocuments) Japanese translation of OWASP documents
+- [**47**Star][1y] [HTML] [iaik/jstemplate](https://github.com/iaik/jstemplate) JavaScript Template Attack proof-of-concept implementation
+- [**47**Star][15d] [k8gege/aggressor](https://github.com/k8gege/aggressor) Ladon NetScan for Cobalt Strike 3.x Aggressor Script
+- [**47**Star][12d] [Py] [consensys/defi-score](https://github.com/consensys/defi-score) DeFi Score: An open framework for evaluating DeFi protocols
+- [**47**Star][21d] [Shell] [hak5/sharkjack-payloads](https://github.com/hak5/sharkjack-payloads) The Official Hak5 Shark Jack Payload Repository
- [**47**Star][4y] [Py] [bastilleresearch/scapy-radio](https://github.com/bastilleresearch/scapy-radio) scapy-radio (from original Hg repo)
-- [**47**Star][8m] [JS] [rhinosecuritylabs/swagger-ez](https://github.com/rhinosecuritylabs/swagger-ez) A tool geared towards pentesting APIs using OpenAPI definitions.
-- [**47**Star][2y] [HTML] [c0nw0nk/coinhive](https://github.com/c0nw0nk/coinhive) A nice friendly simple and easly customizable GUI for coinhives javascript miner to embed onto websites so users of your site can interact with features of the miner on every single page this javascript miner is to help those who have problems with advertisements/advertising/ads popups banners mobile redirects malvertising/malware etc and provid…
+- [**47**Star][2m] [Py] [nccgroup/sshession](https://github.com/nccgroup/sshession) The SSH Multiplex Backdoor Tool
+- [**47**Star][5d] [Py] [evilsocket/pwnagotchi-plugins-contrib](https://github.com/evilsocket/pwnagotchi-plugins-contrib) User contributed Pwnagotchi plugins.
+- [**47**Star][6m] [Go] [dreadl0ck/ja3](https://github.com/dreadl0ck/ja3) Ja3 TLS Client Hello Hashes in Go
+- [**47**Star][3d] [Go] [asutorufa/ssrmicroclient](https://github.com/asutorufa/ssrmicroclient) a shadowskcsr client with gui by golang for linux(support subscription)
+- [**47**Star][1m] [payloadbox/rfi-lfi-payload-list](https://github.com/payloadbox/rfi-lfi-payload-list)
+- [**47**Star][15d] [k8gege/aggressor](https://github.com/k8gege/Aggressor) Ladon NetScan for Cobalt Strike 3.x Aggressor Script
- [**47**Star][3y] [Py] [beaugunderson/wifi-heatmap](https://github.com/beaugunderson/wifi-heatmap)
-- [**47**Star][21d] [Go] [giuliocomi/backoori](https://github.com/giuliocomi/backoori) Tool aided persistence via Windows URI schemes abuse
+- [**47**Star][7y] [Py] [paulmcmillan/kismetclient](https://github.com/paulmcmillan/kismetclient) A Python client for the Kismet server protocol
- [**47**Star][1m] [Py] [nyxgeek/ntlmscan](https://github.com/nyxgeek/ntlmscan) scan for NTLM directories
-- [**47**Star][1y] [Visual Basic] [vysecurity/cactustorch](https://github.com/vysecurity/CACTUSTORCH) Payload Generation for Adversary Simulations
+- [**47**Star][1y] [Visual Basic .NET] [vysecurity/cactustorch](https://github.com/vysecurity/CACTUSTORCH) Payload Generation for Adversary Simulations
- [**47**Star][6m] [jaxbcd/recscansec](https://github.com/jaxBCD/RecScanSec) reconnaisance - footprinting - information disclosure (0.7)
-- [**47**Star][7m] [Py] [anouarbensaad/honeypot-iot](https://github.com/anouarbensaad/honeypot-iot) This tool to simulate http server attacks in Python which logs HackerIP and all the tracing he does into a Logfile then a database.
- [**47**Star][2m] [Py] [pwnlandia/shockpot](https://github.com/pwnlandia/shockpot) WebApp Honeypot for detecting Shell Shock exploit attempts
- [**47**Star][3y] [Py] [jjo-sec/idataco](https://github.com/jjo-sec/idataco) IDATACO IDA Pro Plugin
- [**47**Star][7m] [Py] [ctf-o-matic/capture-the-flag](https://github.com/ctf-o-matic/capture-the-flag) Helper scripts to remaster Linux Live CD images for the purpose of creating ready to use security wargames with pre-installed vulnerabilities to exploit.
- [**47**Star][3y] [C] [zerosum0x0/loadlibrary-getprocaddress-replacements](https://github.com/zerosum0x0/loadlibrary-getprocaddress-replacements) LoadLibrary() and GetProcAddress() Replacement Functions
- [**47**Star][1y] [Py] [zer0yu/zeroscan](https://github.com/zer0yu/zeroscan) Multi-Thread Vulnerability Verify Framework
- [**47**Star][4y] [C] [yifanlu/3ds_injector](https://github.com/yifanlu/3ds_injector) Open source implementation of loader module with code injection support
-- [**47**Star][5m] [HTML] [whatwg/mimesniff](https://github.com/whatwg/mimesniff) MIME Sniffing Standard
+- [**47**Star][9m] [C++] [vletoux/detectpasswordviantlminflow](https://github.com/vletoux/detectpasswordviantlminflow) Extract the password of the current user from flow (keylogger, config file, ..) Use SSPI to get a valid NTLM challenge/response and test passwords
+- [**47**Star][4y] [Py] [vasco2016/shellsploit-framework](https://github.com/vasco2016/shellsploit-framework) New Generation Exploit Development Kit
- [**47**Star][2y] [Py] [vah13/sap_exploit](https://github.com/vah13/sap_exploit) Here you can get full exploit for SAP NetWeaver AS JAVA
- [**47**Star][2m] [Py] [utkonos/lst2x64dbg](https://github.com/utkonos/lst2x64dbg) Extract labels from IDA .lst or Ghidra .csv file and export x64dbg database.
-- [**47**Star][12m] [Ruby] [uploadcare/uploadcare-rails](https://github.com/uploadcare/uploadcare-rails) Rails wrapper for Uploadcare
+- [**47**Star][1y] [Ruby] [uploadcare/uploadcare-rails](https://github.com/uploadcare/uploadcare-rails) Rails wrapper for Uploadcare
- [**47**Star][3y] [tw-ncert/ctifeeds](https://github.com/tw-ncert/ctifeeds) Cyber Threat Intelligence Feeds
-- [**47**Star][2m] [Makefile] [trojan-gfw/openwrt-trojan](https://github.com/trojan-gfw/openwrt-trojan) trojan and its dependencies for OpenWrt
- [**47**Star][4m] [Py] [trinitronx/vncpasswd.py](https://github.com/trinitronx/vncpasswd.py) A Python implementation of vncpasswd, w/decryption abilities & extra features ;-)
- [**47**Star][4y] [Py] [topshed/rpi_8x8griddraw](https://github.com/topshed/rpi_8x8griddraw) A Python Pygame application for creating 8x8 images to load onto the Astro-Pi LED matrix
+- [**47**Star][5m] [Java] [tlamb96/kgb_messenger](https://github.com/tlamb96/kgb_messenger) An Android CTF practice challenge
- [**47**Star][7m] [Go] [threeaccents/botnet](https://github.com/threeaccents/botnet) A tcp botnet written in golang
+- [**47**Star][4y] [threatminer/aptnotes](https://github.com/threatminer/aptnotes) Various public documents, whitepapers and articles about APT campaigns
+- [**47**Star][2m] [the-blockchain-bible/readme](https://github.com/the-blockchain-bible/readme) The Blockchain Bible,a collections for blockchain tech,bitcoin,ethereum,crypto currencies,cryptography,decentralized solutions,business scenarios,hyperledger tech,meetups,区块链,数字货币,加密货币,比特币,以太坊,密码学,去中心化,超级账本
- [**47**Star][1y] [C] [tamirzb/cve-2018-9411](https://github.com/tamirzb/cve-2018-9411) Exploit code for CVE-2018-9411 for MediaCasService
+- [**47**Star][11m] [Jupyter Notebook] [tamimmirza/intrusion-detection-system-using-deep-learning](https://github.com/tamimmirza/intrusion-detection-system-using-deep-learning) VGG-19 deep learning model trained using ISCX 2012 IDS Dataset
- [**47**Star][6m] [C++] [talvos/talvos](https://github.com/talvos/talvos) Talvos is a dynamic-analysis framework and debugger for Vulkan/SPIR-V programs.
+- [**47**Star][16d] [C] [sunnyki/bareboot](https://github.com/sunnyki/bareboot) Bare Boot. EFI bootloader for Mac OS, Windows, Linux etc
+- [**47**Star][2y] [Py] [stormshadow07/beef-over-wan](https://github.com/stormshadow07/beef-over-wan) Browser Exploitation Framework is a Open-source penetration testing tool that focuses on browser-based vulnerabilities .This Python Script does the changes Required to make hooked Linked Accessible Over WAN .So anyone can use this framework and Attack Over WAN without Port Forwarding [NGROK or any Localhost to Webhost Service Required ]
- [**47**Star][8y] [C] [stephenfewer/ollysockettrace](https://github.com/stephenfewer/ollysockettrace) OllySocketTrace is a plugin for OllyDbg to trace the socket operations being performed by a process.
- [**47**Star][1y] [C] [squalr/selfhackingapp](https://github.com/squalr/selfhackingapp) Self Assembling/Disassembling C++ App Reference Code
+- [**47**Star][2m] [C] [spacial/csirt](https://github.com/spacial/csirt) CSIRT is an awesome curated list of links and resources in security and csirt daily activities.
+- [**47**Star][2m] [ObjC] [smilezxlee/zxrequestblock](https://github.com/smilezxlee/zxrequestblock) 一句话实现iOS应用底层所有网络请求拦截(如ajax请求拦截),包含http-dns解决方法,有效防止DNS劫持,用于分析http,https请求,禁用/允许代理,防抓包等
- [**47**Star][1y] [Go] [slowmist/blockchain-threat-intelligence](https://github.com/slowmist/blockchain-threat-intelligence) Blockchain Threat Intelligence Sharing Platform(区块链威胁情报共享平台)
- [**47**Star][5y] [C] [simsong/afflibv3](https://github.com/simsong/afflibv3) AFF is now being maintained at
- [**47**Star][1y] [C++] [silica/sandbox](https://github.com/silica/sandbox) Application virtualization tool for Windows
- [**47**Star][4m] [Py] [sherlly/pcrt](https://github.com/sherlly/pcrt) PCRT (PNG Check & Repair Tool), a tool to help check and fix the error in a PNG image.
-- [**47**Star][9m] [setuid0-sec/swiss_e-voting_publications](https://github.com/setuid0-sec/swiss_e-voting_publications) Our publications of the Swiss E-Voting Public Intrusion Test (PIT)
- [**47**Star][5m] [sekhan/nightpi](https://github.com/sekhan/nightpi) An all-in-one briefcase for pentesting, OSINT and radio exploration
+- [**47**Star][5y] [Java] [securenetwork/nfcult](https://github.com/securenetwork/nfcult) NFC Ultralight Toolkit
- [**47**Star][2y] [Shell] [samoshkin/docker-letsencrypt-certgen](https://github.com/samoshkin/docker-letsencrypt-certgen) Docker image to generate, renew, revoke RSA and/or ECDSA SSL certificates from LetsEncrypt CA using certbot and acme.sh clients in automated fashion
- [**47**Star][2y] [Py] [salesforce/autotriagebot](https://github.com/salesforce/autotriagebot) AutoTriageBot automatically verifies, deduplicates, and suggests payouts for incoming HackerOne reports.
-- [**47**Star][3m] [Ruby] [salemove/jaeger-client-ruby](https://github.com/salemove/jaeger-client-ruby) OpenTracing Tracer implementation for Jaeger in Ruby
-- [**47**Star][3m] [saaramar/publications](https://github.com/saaramar/publications)
+- [**47**Star][4m] [saaramar/publications](https://github.com/saaramar/publications)
- [**47**Star][2y] [Py] [riscure/drop-ida-plugin](https://github.com/riscure/drop-ida-plugin) Experimental opaque predicate detection for IDA Pro
-- [**47**Star][3m] [C] [rek7/postshell](https://github.com/rek7/postshell) PostShell - Post Exploitation Bind/Backconnect Shell
- [**47**Star][7y] [Py] [radare/bokken](https://github.com/radare/bokken) python-gtk UI for radare2
- [**47**Star][3y] [C++] [progmboy/cansecwest2017](https://github.com/progmboy/cansecwest2017)
- [**47**Star][10m] [JS] [pownjs/pown-duct](https://github.com/pownjs/pown-duct) Essential tool for finding blind injection attacks.
+- [**47**Star][7d] [Shell] [pierregode/linux-active-directory-join-script](https://github.com/pierregode/linux-active-directory-join-script) Active directory Join script for Ubuntu, Debian, CentOS, Linux Mint, Fedora, Kali and Raspbian with built in failchcheck and debugmode for Ubuntu. "The most advanced and updated AD join script on GITHUB for Linux"
- [**47**Star][4y] [Py] [ostorlab/jniostorlab](https://github.com/ostorlab/jniostorlab) JNI method enumeration in ELF files
- [**47**Star][6y] [Java] [o2platform/defcon_resting](https://github.com/o2platform/defcon_resting) Repository to hold materials for DefCon_RESTing presentation by Dinis, Abe and Alvaro
- [**47**Star][2y] [Shell] [nyxgeek/dumpsniffer](https://github.com/nyxgeek/dumpsniffer) tools for analyzing strings from password lists
-- [**47**Star][5y] [C] [nyx0/kins](https://github.com/nyx0/kins) KINS Banking Trojan
- [**47**Star][5y] [Py] [neohapsis/mptcp-abuse](https://github.com/neohapsis/mptcp-abuse) A collection of tools and resources to explore MPTCP on your network. Initially released at Black Hat USA 2014.
- [**47**Star][3y] [Py] [nanshihui/android-reverse-tool](https://github.com/nanshihui/android-reverse-tool) Android reverse tool
-- [**47**Star][8m] [DIGITAL Command Language] [nahsra/antisamy](https://github.com/nahsra/antisamy) a library for performing fast, configurable cleansing of HTML coming from untrusted sources
+- [**47**Star][9m] [DIGITAL Command Language] [nahsra/antisamy](https://github.com/nahsra/antisamy) a library for performing fast, configurable cleansing of HTML coming from untrusted sources
- [**47**Star][4y] [C++] [mozmark/ringleader](https://github.com/mozmark/ringleader) A tool for configuring and using MITM proxies from firefox
-- [**47**Star][4y] [C] [mobileforensicsresearch/mem](https://github.com/mobileforensicsresearch/mem) Tool used for dumping memory from Android devices
+- [**47**Star][5y] [C] [mobileforensicsresearch/mem](https://github.com/mobileforensicsresearch/mem) Tool used for dumping memory from Android devices
+- [**47**Star][1y] [Py] [miladdiaz/mikrotikexploit](https://github.com/miladdiaz/mikrotikexploit) Scan and Export RouterOS Password
- [**47**Star][2y] [mikewest/cookies-over-http-bad](https://github.com/mikewest/cookies-over-http-bad) Sending cookies over plaintext HTTP is bad. We should stop doing that.
-- [**47**Star][2y] [HTML] [mburakergenc/malware-detection-using-machine-learning](https://github.com/mburakergenc/malware-detection-using-machine-learning) Malware detection project on Android devices using machine learning classification algorithms.
- [**47**Star][5y] [C] [lukasikic/unix-privilege-escalation-exploits-pack](https://github.com/lukasikic/unix-privilege-escalation-exploits-pack) Exploits for getting local root on Linux, BSD, AIX, HP-UX, Solaris, RHEL, SUSE etc.
-- [**47**Star][1m] [PowerShell] [lkys37en/start-adenum](https://github.com/lkys37en/start-adenum) Tool that automates Active Directory enumeration
+- [**47**Star][1m] [PS] [lkys37en/start-adenum](https://github.com/lkys37en/start-adenum) Tool that automates Active Directory enumeration
+- [**47**Star][1y] [C++] [lianglixin/memdllloader](https://github.com/lianglixin/memdllloader) 加载内存当中的DLL文件
+- [**47**Star][3m] [C] [leoetlino/botw-re-notes](https://github.com/leoetlino/botw-re-notes) Reverse engineering notes and tools for The Legend of Zelda: Breath of the Wild
+- [**47**Star][5m] [Shell] [kwilczynski/packer-templates](https://github.com/kwilczynski/packer-templates) Packer templates for creating Amazon EC2 images and Vagrant boxes
- [**47**Star][10m] [Java] [jreframeworker/jreframeworker](https://github.com/jreframeworker/jreframeworker) A practical tool for bytecode manipulation and creating Managed Code Rootkits (MCRs) in the Java Runtime Environment
- [**47**Star][3y] [JS] [jonathankingston/ember-cli-sri](https://github.com/jonathankingston/ember-cli-sri) Generation of SRI hashes for ember
+- [**47**Star][8m] [jeremyblackthorne/ghidra-keybindings](https://github.com/jeremyblackthorne/ghidra-keybindings)
- [**47**Star][5y] [jameshabben/sysmon-queries](https://github.com/jameshabben/sysmon-queries) Queries to parse sysmon event log file with microsoft logparser
-- [**47**Star][2m] [Py] [jackeriss/keyboard_recording_trojan](https://github.com/jackeriss/keyboard_recording_trojan) 一个可以记录键盘输入并发送到指定邮箱的简单木马。
+- [**47**Star][3m] [Py] [jackeriss/keyboard_recording_trojan](https://github.com/jackeriss/keyboard_recording_trojan) 一个可以记录键盘输入并发送到指定邮箱的简单木马。
- [**47**Star][6m] [Py] [ivrodriguezca/decrypt-ios-apps-script](https://github.com/ivrodriguezca/decrypt-ios-apps-script) Python script to SSH into your jailbroken device, decrypt an iOS App and transfer it to your local machine
- [**47**Star][2y] [Py] [intrd/nozzlr](https://github.com/intrd/nozzlr) Nozzlr is a bruteforce framework, trully modular and script-friendly
+- [**47**Star][7m] [Py] [initstring/lxd_root](https://github.com/initstring/lxd_root) Linux privilege escalation via LXD
- [**47**Star][11m] [C] [imbushuo/boot-shim](https://github.com/imbushuo/boot-shim) Bootstraps ARM32/ARM64 ELF payloads on Qualcomm Windows platforms
+- [**47**Star][4m] [C] [ihack4falafel/osee](https://github.com/ihack4falafel/osee) Collection of things made during my preparation to take on OSEE
- [**47**Star][11m] [Java] [iflody/mybuganalyze](https://github.com/iflody/mybuganalyze) 一些漏洞分析
-- [**47**Star][27d] [C] [hexhive/smotherspectre](https://github.com/hexhive/smotherspectre) Proof-of-concept code for the SMoTherSpectre exploit.
-- [**47**Star][18d] [C++] [hasherezade/mal_unpack](https://github.com/hasherezade/mal_unpack) Dynamic unpacker based on PE-sieve
+- [**47**Star][29d] [C] [hexhive/smotherspectre](https://github.com/hexhive/smotherspectre) Proof-of-concept code for the SMoTherSpectre exploit.
+- [**47**Star][5d] [Shell] [hax4us/apkmod](https://github.com/hax4us/apkmod) Apkmod can decompile, recompile, sign APK, and bind the payload with any legit APP
+- [**47**Star][20d] [C++] [hasherezade/mal_unpack](https://github.com/hasherezade/mal_unpack) Dynamic unpacker based on PE-sieve
- [**47**Star][2y] [JS] [hackvertor/visualfuzzer](https://github.com/hackvertor/visualfuzzer) A visual fuzzer written in NodeJS to find Zalgo characters
-- [**47**Star][5y] [C] [hackedteam/vector-edk](https://github.com/hackedteam/vector-edk) EFI Development Kit
- [**47**Star][1y] [JS] [h43z/dns-rebinding-tool](https://github.com/h43z/dns-rebinding-tool) dns rebind tool with custom scripts
- [**47**Star][8y] [Py] [grant-olson/pyasm](https://github.com/grant-olson/pyasm) Dynamic inline x86 assembler for python.
- [**47**Star][3y] [Py] [gosecure/break-fast-serial](https://github.com/gosecure/break-fast-serial) A proof of concept that demonstrates asynchronous scanning for Java deserialization bugs
@@ -12222,123 +13034,141 @@ networking routines
- [**47**Star][1m] [C] [gerhart01/livecloudkd](https://github.com/gerhart01/livecloudkd) Hyper-V Research is trendy now
- [**47**Star][6y] [C] [gdbinit/gdb-ng](https://github.com/gdbinit/gdb-ng) Apple's gdb fork with some fixes and enhancements
- [**47**Star][7m] [C] [gdbinit/extractmacho](https://github.com/gdbinit/extractmacho) IDA plugin to extract Mach-O binaries located in the disassembly or data
-- [**47**Star][25d] [PHP] [fortrabbit/craft-copy](https://github.com/fortrabbit/craft-copy) Deployment tools for Craft on fortrabbit
+- [**47**Star][8d] [PHP] [fortrabbit/craft-copy](https://github.com/fortrabbit/craft-copy) Deployment tools for Craft on fortrabbit
- [**47**Star][2y] [Pascal] [felipedaragon/huntpad](https://github.com/felipedaragon/huntpad) 开源的Notepad,有很多有助于渗透测试的特性
- [**47**Star][2y] [C] [fail0verflow/switch-arm-trusted-firmware](https://github.com/fail0verflow/switch-arm-trusted-firmware) ARM Trusted Firmware-A for the Switch
-- [**47**Star][1y] [Py] [ercoppa/symbolic-execution-tutorial](https://github.com/ercoppa/symbolic-execution-tutorial) Tutorial on Symbolic Execution. Hands-on session is based on the angr framework.
+- [**47**Star][4d] [JS] [essandess/easylist-pac-privoxy](https://github.com/essandess/easylist-pac-privoxy) EasyList Tracker and Adblocks to Proxy Auto Configuration (PAC) File and Privoxy Actions and Filters
+- [**47**Star][6d] [Py] [ercoppa/symbolic-execution-tutorial](https://github.com/ercoppa/symbolic-execution-tutorial) Tutorial on Symbolic Execution. Hands-on session is based on the angr framework.
- [**47**Star][11m] [Py] [engelsjo/raspireader](https://github.com/engelsjo/raspireader) 3D models and code for building your own fingerprint reader
- [**47**Star][2y] [Py] [embedi/amt_auth_bypass_poc](https://github.com/embedi/amt_auth_bypass_poc) CVE-2017-5689 Proof-of-Concept exploit
- [**47**Star][10m] [Go] [dsopas/rfd-checker](https://github.com/dsopas/rfd-checker) rfd-checker: 命令行工具,检测指定URL是否存在反射文件下载(Reflected File Download)问题
- [**47**Star][2y] [C] [david-reguera-garcia-dreg/enyelkm](https://github.com/david-reguera-garcia-dreg/enyelkm) LKM rootkit for Linux x86 with the 2.6 kernel. It inserts salts inside system_call and sysenter_entry.
-- [**47**Star][1y] [PowerShell] [dafthack/passphrasegen](https://github.com/dafthack/passphrasegen) A script for generating custom passphrase lists to be used for password cracking with hashcat rules
+- [**47**Star][1y] [PS] [dafthack/passphrasegen](https://github.com/dafthack/passphrasegen) A script for generating custom passphrase lists to be used for password cracking with hashcat rules
- [**47**Star][2y] [C++] [collin80/m2ret](https://github.com/collin80/m2ret) GVRET fork to Macchina M2 board
-- [**47**Star][18d] [Py] [cleanunicorn/theo](https://github.com/cleanunicorn/theo) Ethereum recon and exploitation tool.
-- [**47**Star][3y] [C++] [chaitin/yanshi](https://github.com/chaitin/yanshi) A regular language recognizer generater like Ragel, enhanced with features to approximate context-free grammars and substring grammars
-- [**47**Star][1y] [Java] [blackhacker511/blackrat](https://github.com/blackhacker511/blackrat) BlackRAT - Java Based Remote Administrator Tool
-- [**47**Star][26d] [Shell] [bkerler/ghidra_installer](https://github.com/bkerler/ghidra_installer) Helper scripts to set up OpenJDK 11 and scale Ghidra for 4K on Ubuntu 18.04 / 18.10
+- [**47**Star][4m] [Lua] [charlemaznable/lua-resty-wechat](https://github.com/charlemaznable/lua-resty-wechat) 使用Lua编写的nginx服务器微信公众平台代理.
+- [**47**Star][2m] [Rust] [brycx/checkpwn](https://github.com/brycx/checkpwn) Check Have I Been Pwned and see if it's time for you to change passwords.
- [**47**Star][1y] [Java] [bit4woo/java_deserialize_vuln_lab](https://github.com/bit4woo/java_deserialize_vuln_lab) Java 反序列化学习的实验代码 Java_deserialize_vuln_lab
- [**47**Star][1y] [Py] [behavior3/behavior3py](https://github.com/behavior3/behavior3py) Behavior3 client library for Python (Behavior Tree for Python)
- [**47**Star][5m] [PHP] [bediger4000/reverse-php-malware](https://github.com/bediger4000/reverse-php-malware) De-obfuscate and reverse engineer PHP malware
-- [**47**Star][2y] [PHP] [backlion/webshell](https://github.com/backlion/webshell) 这是一些常用的webshell
- [**47**Star][4y] [JS] [awalgarg/devtools-timing-attack](https://github.com/awalgarg/devtools-timing-attack) timing attack to check if devtools are open
- [**47**Star][1y] [Shell] [appsecconsulting/pentest-tools](https://github.com/appsecconsulting/pentest-tools) Penetration Testing Tools Developed by AppSec Consulting.
-- [**47**Star][8m] [CSS] [appsecco/using-docker-kubernetes-for-automating-appsec-and-osint-workflows](https://github.com/appsecco/using-docker-kubernetes-for-automating-appsec-and-osint-workflows) Repository for all the workshop content delivered at nullcon X on 1st of March 2019
- [**47**Star][2y] [C++] [antid0tecom/aarch64_armv81extension](https://github.com/antid0tecom/aarch64_armv81extension) IDA AArch64 processor extender extension: Adding support for ARMv8.1 opcodes
- [**47**Star][2y] [Py] [anilbaranyelken/arpag](https://github.com/anilbaranyelken/arpag) Arpag: 自动化漏洞利用脚本
- [**47**Star][1y] [Py] [alexfrancow/a-detector](https://github.com/alexfrancow/a-detector)
+- [**47**Star][3y] [Py] [alessandroz/pupy](https://github.com/alessandroz/pupy) Pupy is an opensource, multi-platform (Windows, Linux, OSX, Android), multi function RAT (Remote Administration Tool) mainly written in python. It features a all-in-memory execution guideline and leaves very low footprint. Pupy can communicate using various transports, migrate into processes (reflective injection), load remote python code, pytho…
- [**47**Star][7m] [Go] [agilebits/crackme](https://github.com/agilebits/crackme)
- [**47**Star][5y] [Shell] [adafruit/adafruit-pi-externalroot-helper](https://github.com/adafruit/adafruit-pi-externalroot-helper) A shell script to configure a USB drive as root filesystem.
- [**47**Star][3y] [Py] [4w4k3/knockmail](https://github.com/4w4k3/knockmail) Verify if email exists
-- [**47**Star][7y] [C++] [1184893257/simplesniffer](https://github.com/1184893257/simplesniffer) 基于 WinPcap 的网络抓包软件,使用 MFC 做界面
+- [**46**Star][12d] [Go] [dsnezhkov/deepsea](https://github.com/dsnezhkov/deepsea) DeepSea Phishing Gear
+- [**46**Star][6m] [Swift] [git-kevinchuang/potatso-swift5](https://github.com/git-kevinchuang/potatso-swift5) Potatso compiled with swift5 xcode 10.2.1 mojave 10.14.5
+- [**46**Star][1m] [C++] [125k/esp8266_wifi_captive_portal](https://github.com/125k/esp8266_wifi_captive_portal) WiFi captive portal for NodeMCU (ESP8266 Module) with DNS spoofing. It phishes the WiFi password.
+- [**46**Star][10d] [JS] [hmbsbige/text_translation](https://github.com/hmbsbige/text_translation) 简体中文翻译&&一些文本
+- [**46**Star][3y] [Py] [asamy/x86-64-pe-emu](https://github.com/asamy/x86-64-pe-emu) AMD64 PE Emulator in Python.
- [**46**Star][1m] [Vue] [fireeye/gocrack-ui](https://github.com/fireeye/gocrack-ui) The User Interface for GoCrack
-- [**46**Star][1y] [HTML] [iaik/jstemplate](https://github.com/iaik/jstemplate) JavaScript Template Attack proof-of-concept implementation
- [**46**Star][6m] [Py] [landgrey/classhound](https://github.com/landgrey/classhound) 利用任意文件下载漏洞自动循环下载并反编译class文件获得网站源码
- [**46**Star][2m] [Go] [rancher/remotedialer](https://github.com/rancher/remotedialer) HTTP in TCP in Websockets in HTTP in TCP, Tunnel all the things!
-- [**46**Star][2m] [Py] [nccgroup/sshession](https://github.com/nccgroup/sshession) The SSH Multiplex Backdoor Tool
+- [**46**Star][8y] [Perl] [gamelinux/echidna](https://github.com/gamelinux/echidna) Network Security Monitoring Framework
- [**46**Star][9m] [Py] [lorenzb/libsubmarine](https://github.com/lorenzb/libsubmarine) Implementation of a novel practical scheme for submarine commitments
- [**46**Star][2y] [leotsui/cs259d_notes_hw_cn](https://github.com/leotsui/cs259d_notes_hw_cn) 本笔记是对课程CS 259D中涉及的论文和讲义的扩展,建议阅读原始论文和讲义。
-- [**46**Star][3m] [Ruby] [tintoser/bluekeep-exploit](https://github.com/tintoser/bluekeep-exploit) Bluekeep(CVE 2019-0708) exploit released
+- [**46**Star][9m] [Py] [stef/wireless-radar](https://github.com/stef/wireless-radar) DF and other tools to explore a 2.4GHz environment.
- [**46**Star][4y] [securitytube/wifiscanvisualizer](https://github.com/securitytube/wifiscanvisualizer) Wi-Fi Scan Visualizer by Pentester Academy
-- [**46**Star][7y] [Py] [paulmcmillan/kismetclient](https://github.com/paulmcmillan/kismetclient) A Python client for the Kismet server protocol
-- [**46**Star][3m] [Py] [makuga01/dnsfookup](https://github.com/makuga01/dnsfookup) DNS rebinding toolkit
+- [**46**Star][2y] [C#] [epicrouterss/mssql-fileless-rootkit-warsqlkit](https://github.com/epicrouterss/mssql-fileless-rootkit-warsqlkit) Bildiğiniz üzere uzun zamandır MSSQL üzerine çalışmalar yapmaktayım. Bu yazımda uzun zamandır uğraştığım bir konuyu ele alacağım, MSSQL Rootkit. Bildiğiniz üzere şimdiye kadar MS-SQL için anlatılan post-exploitation işlemlerinin büyük çoğunluğu “xp_cmdshell” ve “sp_OACreate” stored procedure’lerini kullanarak anlatılır. Peki xp_cmdshell ve sp_OA…
+- [**46**Star][4y] [PHP] [kurtcoke/demonhunter_exploitkit](https://github.com/kurtcoke/demonhunter_exploitkit) Source code to the Malicious Demon Hunter Exploit Kit
+- [**46**Star][4m] [C#] [cristianst85/quickconnectplugin](https://github.com/cristianst85/quickconnectplugin) A KeePass plugin that allows you to connect to Windows/Linux/ESXi hosts.
+- [**46**Star][2m] [C#] [ernado-x/x.web.sitemap](https://github.com/ernado-x/x.web.sitemap) Simple sitemap generator for .NET and .NET Core
- [**46**Star][2y] [hdm/2017-bsideslv-modern-recon](https://github.com/hdm/2017-BSidesLV-Modern-Recon) Materials related to the 2017 BSides Las Vegas presentation
-- [**46**Star][22d] [PHP] [szepeviktor/waf4wordpress](https://github.com/szepeviktor/waf4wordpress) WAF for WordPress
+- [**46**Star][1m] [C++] [125k/esp8266_wifi_captive_portal](https://github.com/125K/ESP8266_WiFi_Captive_Portal) WiFi captive portal for NodeMCU (ESP8266 Module) with DNS spoofing. It phishes the WiFi password.
+- [**46**Star][24d] [PHP] [szepeviktor/waf4wordpress](https://github.com/szepeviktor/waf4wordpress) WAF for WordPress
- [**46**Star][2y] [C] [robotpy/robotpy-crio](https://github.com/robotpy/robotpy-crio) Obsolete. Python 3 port for cRIO for use in the FIRST Robotics Competition (FRC)
+- [**46**Star][2m] [C#] [brunull/pace](https://github.com/brunull/pace) A Remote Access Tool for Windows.
+- [**46**Star][3m] [Py] [koromodako/mkctf](https://github.com/koromodako/mkctf) A CTF framework to create, build, deploy and test challenges
- [**46**Star][2y] [Go] [caarlos0-graveyard/gravekeeper](https://github.com/caarlos0-graveyard/gravekeeper) Informs users that a repo is not maintained anymore.
- [**46**Star][1y] [C] [zznop/flyr](https://github.com/zznop/flyr) Block-based software vulnerability fuzzing framework
-- [**46**Star][17d] [TeX] [zxgio/gdb_gef-cheatsheet](https://github.com/zxgio/gdb_gef-cheatsheet) GDB + GEF cheatsheet for reversing binaries
+- [**46**Star][19d] [TeX] [zxgio/gdb_gef-cheatsheet](https://github.com/zxgio/gdb_gef-cheatsheet) GDB + GEF cheatsheet for reversing binaries
+- [**46**Star][1m] [C] [zodiacon/regeditx](https://github.com/zodiacon/regeditx) Enhanced Registry Editor
+- [**46**Star][18d] [JS] [znetstar/tor-router](https://github.com/znetstar/tor-router) A SOCKS, HTTP and DNS proxy for distributing traffic across multiple instances of Tor
- [**46**Star][3y] [C] [zhuhuibeishadiao/pfhook](https://github.com/zhuhuibeishadiao/pfhook) Page fault hook use ept (Intel Virtualization Technology)
- [**46**Star][5m] [C] [zerbea/hcxkeys](https://github.com/zerbea/hcxkeys) Small set of tools to generate plainmasterkeys (rainbowtables) and hashes for the use with latest hashcat and John the Ripper.
- [**46**Star][8m] [YARA] [xumeiquer/yara-forensics](https://github.com/xumeiquer/yara-forensics) Set of Yara rules for finding files using magics headers
+- [**46**Star][3m] [Py] [xuchaoa/ctf_awd_platform](https://github.com/xuchaoa/ctf_awd_platform) CTF 攻防对抗平台
- [**46**Star][2y] [Py] [xnianq/awd-frame](https://github.com/xnianq/awd-frame) ctf awd framework
- [**46**Star][7m] [Py] [wetw0rk/exploit-development](https://github.com/wetw0rk/exploit-development) CVE-2016-10709, CVE-2017-17099, CVE-2017-18047, CVE-2019-1003000, CVE-2018-1999002
-- [**46**Star][9m] [C++] [vletoux/detectpasswordviantlminflow](https://github.com/vletoux/detectpasswordviantlminflow) Extract the password of the current user from flow (keylogger, config file, ..) Use SSPI to get a valid NTLM challenge/response and test passwords
+- [**46**Star][1y] [C++] [wanttobeno/win_driver_mouse_and_key](https://github.com/wanttobeno/win_driver_mouse_and_key) 驱动模拟键鼠,支持64位,附代码
- [**46**Star][12m] [Py] [viperbluff/waf_buster](https://github.com/viperbluff/waf_buster) Disrupt WAF by abusing SSL/TLS Ciphers
- [**46**Star][3y] [C++] [vdalibard/boat](https://github.com/vdalibard/boat)
-- [**46**Star][4y] [Py] [vasco2016/shellsploit-framework](https://github.com/vasco2016/shellsploit-framework) New Generation Exploit Development Kit
- [**46**Star][4m] [Py] [v-p-b/kaspy_toolz](https://github.com/v-p-b/kaspy_toolz)
+- [**46**Star][1y] [Go] [unixpickle/cve-2018-4407](https://github.com/unixpickle/cve-2018-4407) Crash macOS and iOS devices with one packet
- [**46**Star][1y] [uefitech/resources](https://github.com/uefitech/resources) One-stop shop for UEFI/BIOS specifications/utilities by UEFI.Tech community
- [**46**Star][8m] [turing-chain/honeypots-on-blockchain](https://github.com/turing-chain/honeypots-on-blockchain) This repo collects almost all the smart contract honeypots that you could find in the first three pages of Google search.
+- [**46**Star][27d] [C] [trendmicro/rfquack](https://github.com/trendmicro/rfquack) RFQuack: the versatile RF-analysis tool that quacks!
- [**46**Star][1y] [Py] [towerofhanoi/ctfsubmitter](https://github.com/towerofhanoi/ctfsubmitter) A flag submitter service with distributed attackers for attack/defense CTF games.
-- [**46**Star][4y] [threatminer/aptnotes](https://github.com/threatminer/aptnotes) Various public documents, whitepapers and articles about APT campaigns
-- [**46**Star][7d] [Py] [te-k/analyst-scripts](https://github.com/te-k/analyst-scripts) Scripts to analyze stuff
-- [**46**Star][11m] [Jupyter Notebook] [tamimmirza/intrusion-detection-system-using-deep-learning](https://github.com/tamimmirza/intrusion-detection-system-using-deep-learning) VGG-19 deep learning model trained using ISCX 2012 IDS Dataset
-- [**46**Star][5m] [Shell] [t3chnocat/oscp-ctf](https://github.com/t3chnocat/oscp-ctf) oscp-ctf is a small collection of basic Bash scripts that make life easier and save time whether you are in the OSCP labs, HackThebox or playing around with CTFs.
-- [**46**Star][2y] [Py] [stormshadow07/beef-over-wan](https://github.com/stormshadow07/beef-over-wan) Browser Exploitation Framework is a Open-source penetration testing tool that focuses on browser-based vulnerabilities .This Python Script does the changes Required to make hooked Linked Accessible Over WAN .So anyone can use this framework and Attack Over WAN without Port Forwarding [NGROK or any Localhost to Webhost Service Required ]
+- [**46**Star][2y] [C#] [testsecer/md5decrypt](https://github.com/testsecer/md5decrypt) MD5多接口解密工具(插件式)
+- [**46**Star][2d] [Py] [te-k/analyst-scripts](https://github.com/te-k/analyst-scripts) Scripts to analyze stuff
- [**46**Star][2y] [C] [stonedreamforest/re_avkmgr](https://github.com/stonedreamforest/re_avkmgr) 逆向小红伞杀毒软件驱动——avkmgr
- [**46**Star][7y] [spiderlabs/korelogic-rules](https://github.com/spiderlabs/korelogic-rules) Updated version of the 2010 KoreLogic password cracking rules for John the Ripper
+- [**46**Star][30d] [Py] [sowdust/ffff](https://github.com/sowdust/ffff) FFFF Finds Facebook Friends
- [**46**Star][2y] [silvermoonsecurity/security-misc](https://github.com/silvermoonsecurity/security-misc) # Full overview of current vulnerability, exploit , fuzz, mitigation of current major Operation System(Windows, macOS, Linux, Android,iOS and so forath) and popular applicaiton
- [**46**Star][3y] [C] [sidechannelmarvels/stark](https://github.com/sidechannelmarvels/stark) Repository of small utilities related to key recovery
- [**46**Star][7y] [C] [shjalayeri/mcedp](https://github.com/shjalayeri/mcedp) Malicious Code Execution Detection Prevention (MCEDP) High Interaction Client Honeypot
+- [**46**Star][9m] [setuid0-sec/swiss_e-voting_publications](https://github.com/setuid0-sec/swiss_e-voting_publications) Our publications of the Swiss E-Voting Public Intrusion Test (PIT)
- [**46**Star][1y] [Py] [sentenza/gimp-ela](https://github.com/sentenza/gimp-ela) A JPEG Error Level Analysis forensic plugin for the GNU Image Manipulation Program (GIMP)
- [**46**Star][8m] [Py] [safebreach-labs/altfs](https://github.com/safebreach-labs/altfs) The Alternative Fileless File System
- [**46**Star][2y] [rustemsoft/skater-.net-obfuscator](https://github.com/rustemsoft/skater-.net-obfuscator) Skater .NET Obfuscator is an obfuscation tool for .NET code protection. It implements all known software protection techniques and obfuscation algorithms.
- [**46**Star][7m] [Shell] [rokasurbelis/system-security-testing](https://github.com/rokasurbelis/system-security-testing)
- [**46**Star][5y] [C] [rodionovd/task_vaccine](https://github.com/rodionovd/task_vaccine) Yet another code injection library for OS X
- [**46**Star][2y] [JS] [rnehra01/arp-validator](https://github.com/rnehra01/arp-validator) 检测ARP 投毒攻击
+- [**46**Star][4y] [Assembly] [raspberrypi/rpi-sense](https://github.com/raspberrypi/rpi-sense) Sense HAT firmware and driver
+- [**46**Star][1m] [randomuserid/tylium](https://github.com/randomuserid/tylium) Primary data pipelines for intrusion detection, security analytics and threat hunting
- [**46**Star][8m] [JS] [radenvodka/pentol](https://github.com/radenvodka/pentol) PENTOL - Pentester Toolkit for Fiddler2
- [**46**Star][5y] [Py] [pun1sh3r/facebot](https://github.com/pun1sh3r/facebot) A facebook profile and reconnaissance system
-- [**46**Star][7d] [C] [psilupan/fray](https://github.com/psilupan/fray) Recompilable version of Super Smash Bros. Melee 1.02 based on the LibOGC project.
+- [**46**Star][2d] [C] [psilupan/fray](https://github.com/psilupan/fray) Recompilable version of Super Smash Bros. Melee 1.02 based on the LibOGC project.
- [**46**Star][1y] [pimps/cve-2017-5645](https://github.com/pimps/cve-2017-5645) CVE-2017-5645 - Apache Log4j RCE due Insecure Deserialization
- [**46**Star][2y] [pentestpartners/ptp-rat](https://github.com/pentestpartners/ptp-rat) Exfiltrate data over screen interfaces
+- [**46**Star][4y] [C++] [papadp/reflective-injection-detection](https://github.com/papadp/reflective-injection-detection) a program to detect reflective dll injection on a live machine
- [**46**Star][5m] [HTML] [paloaltonetworks/aws-elb-autoscaling](https://github.com/paloaltonetworks/aws-elb-autoscaling) Auto Scaling VM-Series firewalls in AWS
- [**46**Star][1y] [Shell] [pablomansanet/c0toolkit](https://github.com/pablomansanet/c0toolkit) Miscellaneous pentesting scripts for OSCP
- [**46**Star][4y] [Py] [p0cl4bs/facebrute](https://github.com/p0cl4bs/facebrute) Bruteforce to facebook accounts
+- [**46**Star][2m] [Makefile] [osminogin/docker-tor-simple](https://github.com/osminogin/docker-tor-simple) Simplest minimal container for Tor anonymity software
- [**46**Star][5m] [Go] [oscp/openshift-monitoring](https://github.com/oscp/openshift-monitoring) A realtime distributed monitoring tool for OpenShift Enterprise
- [**46**Star][1y] [HTML] [octosavvi/espkey](https://github.com/octosavvi/espkey) Wiegand data logger, replay device and micro door-controller
-- [**46**Star][13d] [Java] [netspi/awssigner](https://github.com/netspi/awssigner) Burp Extension for AWS Signing
+- [**46**Star][2m] [Py] [nodiscc/srv01](https://github.com/nodiscc/srv01) [mirror] [Legacy version, rewrite in progress] Run your own network services, hosted on a server you control.
+- [**46**Star][7d] [Java] [netspi/awssigner](https://github.com/netspi/awssigner) Burp Extension for AWS Signing
- [**46**Star][2y] [Py] [n4xh4ck5/n4xd0rk](https://github.com/n4xh4ck5/n4xd0rk) Listing subdomains about a main domain
-- [**46**Star][3y] [PowerShell] [n3l5/irfartpull](https://github.com/n3l5/irfartpull) PowerShell script utilized to pull several forensic artifacts from a live Win7 and WinXP system without WINRM.
+- [**46**Star][3y] [PS] [n3l5/irfartpull](https://github.com/n3l5/irfartpull) PowerShell script utilized to pull several forensic artifacts from a live Win7 and WinXP system without WINRM.
- [**46**Star][11m] [Shell] [mzpqnxow/gdb-static-cross](https://github.com/mzpqnxow/gdb-static-cross) Shell scripts, sourceable "activate" scripts and instructions for building a statically linked gdb-7.12 gdbserver using cross-compile toolchains. Includes more than 20 statically linked gdbserver executables for different architectures, byte orders and ABIs
- [**46**Star][1y] [PHP] [mrsqar-ye/door404](https://github.com/mrsqar-ye/door404) Web application backdoor builder
-- [**46**Star][1y] [Py] [miladdiaz/mikrotikexploit](https://github.com/miladdiaz/mikrotikexploit) Scan and Export RouterOS Password
- [**46**Star][3y] [C] [maximehip/mach_portal](https://github.com/maximehip/mach_portal) iOS 10.1.1 Kernel exploit by Project Zero
-- [**46**Star][22d] [PHP] [marcocesarato/php-antimalware-scanner](https://github.com/marcocesarato/php-antimalware-scanner) AMWSCAN (Antimalware Scanner) is a php antimalware/antivirus scanner console script written in php for scan your project. This can work on php projects and a lot of others platform.
- [**46**Star][1y] [JS] [maltek/swift-frida](https://github.com/maltek/swift-frida) Frida library for interacting with Swift programs.
- [**46**Star][4m] [JS] [lwindolf/polscan](https://github.com/lwindolf/polscan) Zero-setup SSH-based scanner with extensive visualizations for Debian server inventory, policy compliance and vulnerabilities
- [**46**Star][1y] [Py] [luis-hebendanz/msf-remote-console](https://github.com/luis-hebendanz/msf-remote-console) A remote msfconsole written in Python 2.7 to connect to the msfrcpd server of metasploit. This tool gives you the ability to load modules permanently as daemon on your server like autopwn2.
-- [**46**Star][7y] [Objective-C] [logicalparadox/apnagent-ios](https://github.com/logicalparadox/apnagent-ios) iOS application for testing Apple Push Notification (APN) service payloads.
-- [**46**Star][3m] [C] [leoetlino/botw-re-notes](https://github.com/leoetlino/botw-re-notes) Reverse engineering notes and tools for The Legend of Zelda: Breath of the Wild
+- [**46**Star][7y] [ObjC] [logicalparadox/apnagent-ios](https://github.com/logicalparadox/apnagent-ios) iOS application for testing Apple Push Notification (APN) service payloads.
- [**46**Star][4y] [C] [laginimaineb/fuzz_zone](https://github.com/laginimaineb/fuzz_zone) Fuzzing utility which enables sending arbitrary SCMs to TrustZone
- [**46**Star][2y] [Go] [lafolle/flen](https://github.com/lafolle/flen) Flen provides stats on functions/methods lengths in a Golang package.
+- [**46**Star][22d] [Py] [kisspeter/apifuzzer](https://github.com/kisspeter/apifuzzer) Fuzz your application using you Swagger or API Blueprint definition without coding
+- [**46**Star][1y] [Java] [kaushikravikumar/realtimetaxiandroiddemo](https://github.com/kaushikravikumar/realtimetaxiandroiddemo) PubNub Demo that uses a Publish/Subscribe model to implement a realtime map functionality similar to Lyft/Uber.
- [**46**Star][3y] [C] [jyao1/stm](https://github.com/jyao1/stm)
+- [**46**Star][20d] [Py] [justfoxing/ghidra_bridge](https://github.com/justfoxing/ghidra_bridge) Python 3 bridge to Ghidra's Python scripting
- [**46**Star][1y] [C] [jthuraisamy/dirt](https://github.com/jthuraisamy/dirt) Driver Initial Reconnaissance Tool
- [**46**Star][5y] [joshbegley/nsa-stories](https://github.com/joshbegley/nsa-stories) Every document published from the Snowden archive
- [**46**Star][8m] [Dockerfile] [jmg87/redteam-k8spwn](https://github.com/jmg87/redteam-k8spwn) Reverse shell container for k8s deployments
- [**46**Star][8m] [JS] [jeremyfetiveau/turbofan-exploit-for-issue-762874](https://github.com/jeremyfetiveau/turbofan-exploit-for-issue-762874) Exploit for a bug in TurboFan's typing of JSCall nodes for builtins kStringLastIndexOf and kStringIndexOf
-- [**46**Star][8m] [jeremyblackthorne/ghidra-keybindings](https://github.com/jeremyblackthorne/ghidra-keybindings)
- [**46**Star][3y] [Go] [iovisor/iovisor-ovn](https://github.com/iovisor/iovisor-ovn) IOVisor OVN integration
-- [**46**Star][7m] [Py] [initstring/lxd_root](https://github.com/initstring/lxd_root) Linux privilege escalation via LXD
-- [**46**Star][6m] [Py] [hucmosin/purelove](https://github.com/hucmosin/purelove) Purelove is a lightweight penetration testing framework, in order to better security testers testing holes with use.
-- [**46**Star][1y] [Py] [ha3mrx/facebook-cracker](https://github.com/ha3mrx/facebook-cracker) Facebook Cracker Version 1.0 can crack into Facebook Database 100% without Interruption By Facebook Firewall
+- [**46**Star][3y] [Go] [inszva/tap0901](https://github.com/inszva/tap0901) Go语言虚拟网卡库,可用于制作对战平台、加速器、防火墙、VPN等
+- [**46**Star][7m] [Go] [ice-ice/dnstunnel](https://github.com/ice-ice/dnstunnel) dns tunnel backdoor DNS隧道后门
+- [**46**Star][7m] [Py] [hucmosin/purelove](https://github.com/hucmosin/purelove) Purelove is a lightweight penetration testing framework, in order to better security testers testing holes with use.
+- [**46**Star][6m] [Go] [hectane/go-acl](https://github.com/hectane/go-acl) Go library for manipulating ACLs on Windows
+- [**46**Star][5y] [C++] [hackedteam/core-macos](https://github.com/hackedteam/core-macos) RCS Agent for Mac
+- [**46**Star][11d] [PHP] [gsoros/gtrader](https://github.com/gsoros/gtrader) a trading strategy trainer, back-tester and bot
- [**46**Star][2y] [Py] [grierforensics/officedissector](https://github.com/grierforensics/officedissector) Static analysis tools for Microsoft Office Open XML files and documents
+- [**46**Star][2y] [grayddq/hids](https://github.com/grayddq/hids) HIDS全称是Host-based Intrusion Detection System,即基于主机型入侵检测系统,HIDS运行依赖这样一个原理:一个成功的入侵者一般而言都会留下他们入侵的痕迹。本人更倾向于通过记录主机的重要信息变更来发现入侵者。 本项目由两部分组成:一部分osquery、另一部分监控脚本来补充osquery规则的不足; 本文是第一部分osquery规则部分,实现绝大部分主机信息监控。
- [**46**Star][2y] [gdssecurity/whitepapers](https://github.com/gdssecurity/whitepapers) A collection of publicly released whitepapers
- [**46**Star][4y] [C] [gdbinit/gatekeerper](https://github.com/gdbinit/gatekeerper) A kernel extension to mitigate Gatekeeper bypasses
+- [**46**Star][2m] [Py] [gcmartinelli/entropy](https://github.com/gcmartinelli/entropy) Binary file entropy visualizer written in Python
- [**46**Star][6y] [Py] [funsecurity/apk_binder_script](https://github.com/funsecurity/apk_binder_script) apk binder script
- [**46**Star][6y] [Ruby] [fingertips/wad](https://github.com/fingertips/wad) WAD is a little script that speeds up test runs on Travis-CI by caching the installed bundle on S3.
- [**46**Star][5m] [C#] [ericzimmerman/prefetch](https://github.com/ericzimmerman/prefetch) Windows Prefetch parser. Supports all known versions from Windows XP to Windows 10.
- [**46**Star][2y] [Py] [erevus-cn/scan_webshell](https://github.com/erevus-cn/scan_webshell) 很简单的webshell扫描
-- [**46**Star][2y] [Shell] [danielfree/asus-v2ray-transparent-proxy](https://github.com/danielfree/asus-v2ray-transparent-proxy) transparent proxy with v2ray, iptables, ipset 无线路由器 v2ray 透明代理
+- [**46**Star][7m] [Py] [disappeerlabs/disappeer](https://github.com/disappeerlabs/disappeer) A pure Python GUI app for GPG functionality and peer-to-peer encrypted messaging over Tor
- [**46**Star][8m] [Shell] [damonmohammadbagher/nativepayload_bssid](https://github.com/damonmohammadbagher/nativepayload_bssid) Transferring Backdoor Payload by BSSID and Wireless traffic
- [**46**Star][3m] [Py] [cve-search/pycvesearch](https://github.com/cve-search/pycvesearch) Python wrapper for the API of cve-search
- [**46**Star][5m] [Py] [cryptax/angeapk](https://github.com/cryptax/angeapk) Encrypting a PNG into an Android application
@@ -12346,74 +13176,81 @@ networking routines
- [**46**Star][5m] [C] [chentingz/snifferui](https://github.com/chentingz/snifferui) 基于MFC和WinPcap库开发的网络抓包和协议分析软件
- [**46**Star][7m] [Py] [capeleidokos/elf_diff](https://github.com/capeleidokos/elf_diff) A tool to compare ELF binaries
- [**46**Star][4y] [Py] [bwall/markovobfuscate](https://github.com/bwall/markovobfuscate) Python library and tools to obfuscate data based on Markov models built off shared data
+- [**46**Star][4m] [bc-security/defcon27](https://github.com/bc-security/defcon27)
- [**46**Star][2y] [Assembly] [azya52/seiko](https://github.com/azya52/seiko) Seiko uc-2000 reverse engineering
- [**46**Star][5y] [Ruby] [averagesecurityguy/prometheus](https://github.com/averagesecurityguy/prometheus) Prometheus Firewall Analyzer
-- [**46**Star][19d] [PowerShell] [automatedlab/automatedlab.common](https://github.com/automatedlab/automatedlab.common) PowerShell module for daily administrative tasks and general helper functions
-- [**46**Star][3y] [Py] [alessandroz/pupy](https://github.com/alessandroz/pupy) Pupy is an opensource, multi-platform (Windows, Linux, OSX, Android), multi function RAT (Remote Administration Tool) mainly written in python. It features a all-in-memory execution guideline and leaves very low footprint. Pupy can communicate using various transports, migrate into processes (reflective injection), load remote python code, pytho…
+- [**46**Star][21d] [PS] [automatedlab/automatedlab.common](https://github.com/automatedlab/automatedlab.common) PowerShell module for daily administrative tasks and general helper functions
- [**46**Star][3y] [C#] [aleksk/lazycopy](https://github.com/aleksk/lazycopy) NTFS minifilter driver that can download file content from a remote location, when it is opened for the first time.
+- [**46**Star][2y] [akhepcat/bridgeap](https://github.com/akhepcat/bridgeap) Automagically bridge any live interface to any idle interface using NATS, DHCP, and HostAP where applicable
- [**46**Star][7m] [Ruby] [activeadmin-plugins/active_admin_role](https://github.com/activeadmin-plugins/active_admin_role) Role based authorization with CanCanCan for Active Admin
- [**46**Star][1y] [Py] [aaaddress1/vtmal](https://github.com/aaaddress1/vtmal) Malware Sandbox Emulation in Python @ HITCON 2018
- [**46**Star][3y] [C++] [55-aa/cve-2016-3308](https://github.com/55-aa/cve-2016-3308) Use CVE-2016-3308 corrupt win32k desktop heap
-- [**45**Star][17d] [payloadbox/xxe-injection-payload-list](https://github.com/payloadbox/xxe-injection-payload-list)
+- [**45**Star][] [blacckhathaceekr/osint_tips](https://github.com/blacckhathaceekr/osint_tips) This repository was created and developed by Ammar Amer @cry__pto Only. Updates to this repository will continue to arrive until the number of TIPS reach 1000 TIPS .Learn Ethical Hacking and penetration testing.and of course OSINT
+- [**45**Star][12m] [Shell] [witee/note-shadowsocks](https://github.com/witee/note-shadowsocks) 公司网关使用 shadowsocks 搭建翻墙网络
+- [**45**Star][9m] [syst3ma/awesome-baseband-research](https://github.com/syst3ma/awesome-baseband-research) A curated list of awesome baseband research resources
+- [**45**Star][5d] [CSS] [evilsocket/www.pwnagotchi.ai](https://github.com/evilsocket/www.pwnagotchi.ai) (⌐■_■) - pwnagotchi.ai
- [**45**Star][5y] [Py] [f-secure/mqtt_fuzz](https://github.com/f-secure/mqtt_fuzz) A simple fuzzer for the MQTT protocol
+- [**45**Star][30d] [C] [timwr/cve-2019-2215](https://github.com/timwr/cve-2019-2215)
- [**45**Star][7y] [JS] [zneak/jsx](https://github.com/zneak/jsx) A Playstation 1 emulator written in Javascript
- [**45**Star][4y] [C] [shadowsocks/iptables](https://github.com/shadowsocks/iptables) iptables is the userspace command line program used to configure the Linux 2.4.x and later packet filtering ruleset. It is targeted towards system administrators.
-- [**45**Star][25d] [Py] [evilsocket/pwnagotchi-plugins-contrib](https://github.com/evilsocket/pwnagotchi-plugins-contrib) User contributed Pwnagotchi plugins.
+- [**45**Star][27d] [C++] [avast/pelib](https://github.com/avast/pelib) PE file manipulation library.
- [**45**Star][5y] [Shell] [danielmiessler/iptables](https://github.com/danielmiessler/iptables) An iptables firewall configuration template.
-- [**45**Star][20d] [Java] [thisislibra/genesis](https://github.com/thisislibra/genesis) A framework to generate unique test cases based on code snippets to test techniques
+- [**45**Star][20d] [Shell] [soaringswine/lazyrecon_docker](https://github.com/soaringswine/lazyrecon_docker) Containerized version of my fork of Nahamsec's Lazyrecon.
- [**45**Star][10m] [Shell] [ticarpi/my-pentesting-repo](https://github.com/ticarpi/my-pentesting-repo) This is a set of tips and reminders for pentesting processes and scripts/programs. Initially for personal use, but if anyone else finds the reminders useful, then enjoy! A few links for useful tools and files. Some tools written by me.
+- [**45**Star][2y] [Go] [onplus/v2ray-sitedat](https://github.com/onplus/v2ray-sitedat)
- [**45**Star][2m] [Py] [k8gege/cve-2019-0604](https://github.com/k8gege/cve-2019-0604) cve-2019-0604 SharePoint RCE exploit
- [**45**Star][4y] [Py] [nims11/hostapd.py](https://github.com/nims11/hostapd.py) Python script to make using and configuring hostapd easier
-- [**45**Star][9m] [Py] [stef/wireless-radar](https://github.com/stef/wireless-radar) DF and other tools to explore a 2.4GHz environment.
-- [**45**Star][2y] [C#] [epicrouterss/mssql-fileless-rootkit-warsqlkit](https://github.com/epicrouterss/mssql-fileless-rootkit-warsqlkit) Bildiğiniz üzere uzun zamandır MSSQL üzerine çalışmalar yapmaktayım. Bu yazımda uzun zamandır uğraştığım bir konuyu ele alacağım, MSSQL Rootkit. Bildiğiniz üzere şimdiye kadar MS-SQL için anlatılan post-exploitation işlemlerinin büyük çoğunluğu “xp_cmdshell” ve “sp_OACreate” stored procedure’lerini kullanarak anlatılır. Peki xp_cmdshell ve sp_OA…
-- [**45**Star][4y] [PHP] [kurtcoke/demonhunter_exploitkit](https://github.com/kurtcoke/demonhunter_exploitkit) Source code to the Malicious Demon Hunter Exploit Kit
- [**45**Star][2m] [mpgn/cve-2018-17246](https://github.com/mpgn/cve-2018-17246) CVE-2018-17246 - Kibana LFI < 6.4.3 & 5.6.13
-- [**45**Star][27d] [r0x4r/d4rkxss](https://github.com/r0x4r/d4rkxss) A list of useful payloads and Bypass for Web Application Security and Bug Bounty/CTF
-- [**45**Star][1m] [Java] [portswigger/stepper](https://github.com/portswigger/stepper) A natural evolution of Burp Suite's Repeater tool
+- [**45**Star][29d] [r0x4r/d4rkxss](https://github.com/r0x4r/d4rkxss) A list of useful payloads and Bypass for Web Application Security and Bug Bounty/CTF
- [**45**Star][2y] [feeicn/wsvd](https://github.com/FeeiCN/WSVD) White hat Speaks Vulnerabilities Defence《白帽子讲漏洞防御》
- [**45**Star][3m] [C] [thibault-69/rat-hodin-v2.9](https://github.com/Thibault-69/RAT-Hodin-v2.9) Remote Administration Tool for Linux
- [**45**Star][3y] [C++] [notglop/sysexec](https://github.com/NotGlop/SysExec) [Windows] Local Privilege Escalation - WebClient
- [**45**Star][3y] [Py] [eteissonniere/elidecode](https://github.com/ETeissonniere/EliDecode) The tool to decode obfuscated shellcodes using the unicorn and capstone engine
-- [**45**Star][18d] [Assembly] [borjamerino/windows-one-way-stagers](https://github.com/BorjaMerino/Windows-One-Way-Stagers) Windows Stagers to circumvent restrictive network environments
+- [**45**Star][20d] [Assembly] [borjamerino/windows-one-way-stagers](https://github.com/BorjaMerino/Windows-One-Way-Stagers) Windows Stagers to circumvent restrictive network environments
- [**45**Star][3y] [Py] [threatexpress/subshell](https://github.com/threatexpress/subshell) SubShell is a python command shell used to control and execute commands through HTTP requests to a webshell. SubShell acts as the interface to the remote webshells.
-- [**45**Star][2m] [C#] [brunull/pace](https://github.com/brunull/pace) A Remote Access Tool for Windows.
-- [**45**Star][3m] [Py] [koromodako/mkctf](https://github.com/koromodako/mkctf) A CTF framework to create, build, deploy and test challenges
-- [**45**Star][2m] [Assembly] [drenn1/oracles-disasm](https://github.com/Drenn1/oracles-disasm) Disassembly of Oracle of Ages and Seasons
+- [**45**Star][3d] [Assembly] [drenn1/oracles-disasm](https://github.com/Drenn1/oracles-disasm) Disassembly of Oracle of Ages and Seasons
- [**45**Star][8y] [Py] [zynamics/msdn-plugin-ida](https://github.com/zynamics/msdn-plugin-ida) Imports MSDN documentation into IDA Pro
-- [**45**Star][1m] [C] [zodiacon/regeditx](https://github.com/zodiacon/regeditx) Enhanced Registry Editor
-- [**45**Star][1y] [C++] [wanttobeno/win_driver_mouse_and_key](https://github.com/wanttobeno/win_driver_mouse_and_key) 驱动模拟键鼠,支持64位,附代码
-- [**45**Star][8d] [Py] [virtadpt/exocortex-halo](https://github.com/virtadpt/exocortex-halo) Various and sundry additional pieces of software I've written to incorporate into my exocortex.
+- [**45**Star][12m] [Py] [zev3n/shodan_so](https://github.com/zev3n/shodan_so) Search Assistant: Searching shodan via API.
+- [**45**Star][3y] [C++] [vusec/dangsan](https://github.com/vusec/dangsan) dangsan:检测C/C++编写的程序是否有未释放的内存,防止悬挂指针
+- [**45**Star][9d] [Py] [virtadpt/exocortex-halo](https://github.com/virtadpt/exocortex-halo) Various and sundry additional pieces of software I've written to incorporate into my exocortex.
- [**45**Star][6m] [Py] [virink/awd_auto_attack_framework](https://github.com/virink/awd_auto_attack_framework) AWD 自动化攻击框架
+- [**45**Star][3y] [vduddu/deepweblinks](https://github.com/vduddu/deepweblinks) A huge dump of deep web links
- [**45**Star][4m] [HTML] [unk9vvn/andtroj](https://github.com/unk9vvn/andtroj) A tool for integrating the Metasploit payload with Android's healthy programs and bypassing antivirus
-- [**45**Star][1y] [Go] [unixpickle/cve-2018-4407](https://github.com/unixpickle/cve-2018-4407) Crash macOS and iOS devices with one packet
- [**45**Star][3y] [Py] [tr3jer/incextensivelist](https://github.com/tr3jer/incextensivelist) 从扫描器结果分离出的一些大公司泛解析ip列表
+- [**45**Star][5y] [Py] [thomaspatzke/poodleattack](https://github.com/thomaspatzke/poodleattack) PoC implementation of the POODLE attack
- [**45**Star][4y] [C++] [tandasat/remotewritemonitor](https://github.com/tandasat/remotewritemonitor) A tool to help malware analysts tell that the sample is injecting code into other process.
- [**45**Star][4y] [Py] [stasinopoulos/ztexploit](https://github.com/stasinopoulos/ztexploit) ZTE ZXV10 H108L Router with <= V1.0.01_WIND_A01 - Remote root RCE Exploit
+- [**45**Star][6m] [C] [sqdwr/hidedriver](https://github.com/sqdwr/hidedriver) 之前那份是7600的,每次编译搞得好麻烦。更新一个VS2017可以直接编译的。
- [**45**Star][11m] [Perl] [spiderlabs/modsecurity-apache](https://github.com/spiderlabs/modsecurity-apache) ModSecurity v3 Apache Connector
- [**45**Star][5y] [Py] [spiderlabs/groupenum](https://github.com/spiderlabs/groupenum)
-- [**45**Star][2m] [C] [spacial/csirt](https://github.com/spacial/csirt) CSIRT is an awesome curated list of links and resources in security and csirt daily activities.
- [**45**Star][7y] [JS] [sofish/imagexss.js](https://github.com/sofish/imagexss.js) 防止外部链接通过图片进行 XSS 攻击
+- [**45**Star][7m] [ObjC] [smilezxlee/zxhookutil](https://github.com/smilezxlee/zxhookutil) 【iOS逆向】Tweak工具函数集,基于theos、monkeyDev
- [**45**Star][1m] [Py] [skoolkid/skoolkit](https://github.com/skoolkid/skoolkit) A suite of tools for creating disassemblies of ZX Spectrum games.
-- [**45**Star][18d] [JS] [silverwind/tcpie](https://github.com/silverwind/tcpie) CLI tool to ping any TCP port
+- [**45**Star][20d] [JS] [silverwind/tcpie](https://github.com/silverwind/tcpie) CLI tool to ping any TCP port
+- [**45**Star][5m] [Shell] [shiva108/waes](https://github.com/shiva108/waes) CPH:SEC WAES: Web Auto Enum & Scanner - Auto enums website(s) and dumps files as result
- [**45**Star][7y] [C] [shenghe/pcmanager](https://github.com/shenghe/pcmanager) 金山卫士开源代码。同步于Hg源。为了方便查看和学习,同步到Github
- [**45**Star][5y] [JS] [shd101wyy/python_reverse_tcp](https://github.com/shd101wyy/python_reverse_tcp) simple reverse tcp backdoor hack
-- [**45**Star][1y] [Py] [seekintoo/chimay-red](https://github.com/seekintoo/chimay-red) Mikrotik RouterOS (6.x < 6.38.5) exploit kit. Reverse engineered from the "Vault 7" WikiLeaks publication.
+- [**45**Star][2y] [Py] [seekintoo/chimay-red](https://github.com/seekintoo/chimay-red) Mikrotik RouterOS (6.x < 6.38.5) exploit kit. Reverse engineered from the "Vault 7" WikiLeaks publication.
+- [**45**Star][4y] [Py] [secwiki/scaing-backdoor](https://github.com/secwiki/scaing-backdoor) 新一代Webshell扫描工具
- [**45**Star][3y] [Shell] [rumesh986/wifianalyse](https://github.com/rumesh986/wifianalyse) simple bash script to monitor wifi signal and ping time
+- [**45**Star][5m] [Ruby] [rootup/autosploit](https://github.com/rootup/autosploit) Autosploit = Automating Metasploit Modules.
- [**45**Star][4y] [C++] [rootkitsmm/ms15-061](https://github.com/rootkitsmm/ms15-061) Exploiting MS15-061 local Privilege escalation
- [**45**Star][2m] [Py] [ritvikb99/dark-fantasy-hack-tool](https://github.com/ritvikb99/dark-fantasy-hack-tool) DDOS Tool: To take down small websites with HTTP FLOOD. Port scanner: To know the open ports of a site. FTP Password Cracker: To hack file system of websites.. Banner Grabber: To get the service or software running on a port. (After knowing the software running google for its vulnerabilities.) Web Spider: For gathering web application hacking in…
- [**45**Star][3y] [C++] [reevesrs24/winmacspoofer](https://github.com/reevesrs24/winmacspoofer) Windows application for spoofing the MAC address
- [**45**Star][1y] [C++] [redogwu/windows_kernel_exploit](https://github.com/redogwu/windows_kernel_exploit) windows kernel exploit
+- [**45**Star][12d] [reddelexc/hackerone-reports](https://github.com/reddelexc/hackerone-reports) Top disclosed reports from HackerOne
- [**45**Star][2y] [Ruby] [rapid7/metasploit-aggregator](https://github.com/rapid7/metasploit-aggregator) Created by Jeffrey Martin via the GitHub Connector
-- [**45**Star][3m] [radareorg/cutter-plugins](https://github.com/radareorg/cutter-plugins) A a curated list of Community Plugins and Scripts written for Cutter
+- [**45**Star][2d] [radareorg/cutter-plugins](https://github.com/radareorg/cutter-plugins) A curated list of Community Plugins and Scripts written for Cutter
- [**45**Star][1y] [Shell] [qiang-yu/shadowsocksvpn-openwrt](https://github.com/qiang-yu/shadowsocksvpn-openwrt) Shadowsocks-libev-full for OpenWrt
+- [**45**Star][2y] [CSS] [pure-l0g1c/apex](https://github.com/pure-l0g1c/apex) Using Social Engineering To Obtain WiFi Passwords
- [**45**Star][7m] [Rust] [ps1dr3x/lachesis](https://github.com/ps1dr3x/lachesis)
- [**45**Star][2y] [Java] [portswigger/httpoxy-scanner](https://github.com/portswigger/httpoxy-scanner) A Burp Suite extension that checks for the HTTPoxy vulnerability.
-- [**45**Star][24d] [Shell] [pierregode/linux-active-directory-join-script](https://github.com/pierregode/linux-active-directory-join-script) Active directory Join script for Ubuntu, Debian, CentOS, Linux Mint, Fedora, Kali and Raspbian with built in failchcheck and debugmode for Ubuntu. "The most advanced and updated AD join script on GITHUB for Linux"
-- [**45**Star][4y] [C++] [papadp/reflective-injection-detection](https://github.com/papadp/reflective-injection-detection) a program to detect reflective dll injection on a live machine
+- [**45**Star][10m] [Py] [platypew/digispark-duckduino](https://github.com/platypew/digispark-duckduino) Poor man's rubber ducky
+- [**45**Star][9m] [JS] [phantom0301/pteye](https://github.com/phantom0301/pteye) Phantom eye——A passive business logic vulnerability auditing tool
- [**45**Star][3y] [orangetw/bug-bounty-reference](https://github.com/orangetw/bug-bounty-reference) Inspired by
-- [**45**Star][7y] [JS] [oguzy/ovizart](https://github.com/oguzy/ovizart)
- [**45**Star][6y] [Py] [obscuresec/random](https://github.com/obscuresec/random) Scripts that aren't PowerShell
- [**45**Star][2m] [nullsecuritynet/papers](https://github.com/nullsecuritynet/papers) Papers about known hacking, security, hardware, software, computer, network and other ressources.
+- [**45**Star][11m] [Py] [nowsecure/r2lldb](https://github.com/nowsecure/r2lldb) radare2-lldb integration
- [**45**Star][4m] [JS] [nowsecure/frida-trace](https://github.com/nowsecure/frida-trace) Trace APIs declaratively through Frida.
- [**45**Star][3y] [C#] [nccgroup/ransomware-simulator](https://github.com/nccgroup/ransomware-simulator) NCC Group Ransomware Simulator
- [**45**Star][2y] [C++] [nccgroup/psr](https://github.com/nccgroup/psr) Pointer Sequence Reverser - enable you to see how Windows C++ application is accessing a particular data member or object.
@@ -12422,220 +13259,237 @@ networking routines
- [**45**Star][9m] [C++] [ncatlin/exilesniffer](https://github.com/ncatlin/exilesniffer) A protocol decryption and dissection tool for the game 'Path of Exile'
- [**45**Star][2y] [Py] [mthbernardes/fses](https://github.com/mthbernardes/fses) fses:从搜索引擎中爬取 url
- [**45**Star][5y] [Java] [monstersb/hijackandroidpoweroff](https://github.com/monstersb/hijackandroidpoweroff) Android hijack power off
+- [**45**Star][2y] [Py] [monrocoury/admin-panel-finder](https://github.com/monrocoury/admin-panel-finder) A powerful admin login page finder in python
- [**45**Star][5m] [Py] [misp/mail_to_misp](https://github.com/misp/mail_to_misp) Connect your mail client/infrastructure to MISP in order to create events based on the information contained within mails.
+- [**45**Star][5m] [PS] [miladmsft/threathunt](https://github.com/miladmsft/threathunt) ThreatHunt is a PowerShell repository that allows you to train your threat hunting skills.
- [**45**Star][1y] [Py] [maoqyhz/droidcc](https://github.com/maoqyhz/droidcc) Android malware detection using deep learning, contains android malware samples, papers, tools etc.
- [**45**Star][2y] [Go] [luc10/struts-rce-cve-2017-9805](https://github.com/luc10/struts-rce-cve-2017-9805) Apache Struts CVE 2017-9805 漏洞利用代码(Go语言)
-- [**45**Star][19d] [C] [limithit/ngx_dynamic_limit_req_module](https://github.com/limithit/ngx_dynamic_limit_req_module) The ngx_dynamic_limit_req_module module is used to dynamically lock IP and release it periodically.
+- [**45**Star][3m] [C] [linaro-swg/optee_examples](https://github.com/linaro-swg/optee_examples) OP-TEE Sample Applications
+- [**45**Star][21d] [C] [limithit/ngx_dynamic_limit_req_module](https://github.com/limithit/ngx_dynamic_limit_req_module) The ngx_dynamic_limit_req_module module is used to dynamically lock IP and release it periodically.
- [**45**Star][2y] [lcatro/think-in-security](https://github.com/lcatro/think-in-security) 从二进制到WEB ,分享我在安全路上的思考与点滴,后面会不断地更新..
- [**45**Star][1y] [Py] [l4ys/idasignsrch](https://github.com/l4ys/idasignsrch) IDAPython Plugin for searching signatures, use xml signature database from IDA_Signsrch
- [**45**Star][5y] [Py] [kyrus/ida-translator](https://github.com/kyrus/ida-translator) A plugin for IDA Pro that assists in decoding arbitrary character sets in an IDA Pro database into Unicode, then automatically invoking a web-based translation service (currently Google Translate) to translate that foreign text into English.
+- [**45**Star][3m] [Java] [kxcode/jndi-exploit-bypass-demo](https://github.com/kxcode/jndi-exploit-bypass-demo) Demo code for post
- [**45**Star][2y] [Py] [kukfa/bindbg](https://github.com/kukfa/bindbg) Binary Ninja plugin that syncs WinDbg to Binary Ninja
-- [**45**Star][20d] [Py] [kisspeter/apifuzzer](https://github.com/kisspeter/apifuzzer) Fuzz your application using you Swagger or API Blueprint definition without coding
-- [**45**Star][1y] [Java] [kaushikravikumar/realtimetaxiandroiddemo](https://github.com/kaushikravikumar/realtimetaxiandroiddemo) PubNub Demo that uses a Publish/Subscribe model to implement a realtime map functionality similar to Lyft/Uber.
+- [**45**Star][3m] [C] [knnspeed/simple-uefi-bootloader](https://github.com/knnspeed/simple-uefi-bootloader) A UEFI bootloader for bare-metal x86-64 applications, including a minimal cross-platform UEFI development environment
+- [**45**Star][7d] [TSQL] [kacos2000/windowstimeline](https://github.com/kacos2000/windowstimeline) SQLite query & Powershell scripts to parse the Windows 10 (v1803+) ActivitiesCache.db
- [**45**Star][4m] [Shell] [juxhindb/oob-server](https://github.com/juxhindb/oob-server) A Bind9 server for pentesters to use for Out-of-Band vulnerabilities
-- [**45**Star][18d] [Py] [justfoxing/ghidra_bridge](https://github.com/justfoxing/ghidra_bridge) Python 3 bridge to Ghidra's Python scripting
- [**45**Star][11m] [Py] [jevinskie/emusca](https://github.com/jevinskie/emusca) Power trace simulator using Unicorn Engine for side channel analysis attack testing
- [**45**Star][9m] [C] [jay/gethooks](https://github.com/jay/gethooks) GetHooks is a program designed for the passive detection and monitoring of hooks from a limited user account.
-- [**45**Star][4y] [PowerShell] [invoke-ir/wmievent](https://github.com/invoke-ir/wmievent) A PowerShell module to abstract the complexities of Permanent WMI Event Subscriptions
+- [**45**Star][4y] [PS] [invoke-ir/wmievent](https://github.com/invoke-ir/wmievent) A PowerShell module to abstract the complexities of Permanent WMI Event Subscriptions
- [**45**Star][10m] [C] [ilammy/ftrace-hook](https://github.com/ilammy/ftrace-hook) Using ftrace for function hooking in Linux kernel
- [**45**Star][5y] [Java] [ikkisoft/parrotng](https://github.com/ikkisoft/parrotng) ParrotNG is a tool capable of identifying Adobe Flex applications (SWF) vulnerable to CVE-2011-2461
-- [**45**Star][4m] [C] [ihack4falafel/osee](https://github.com/ihack4falafel/osee) Collection of things made during my preparation to take on OSEE
- [**45**Star][6y] [C++] [igororlov/trafficlight](https://github.com/igororlov/trafficlight) Detection of traffic lights and driving on red light.
-- [**45**Star][7m] [Go] [ice-ice/dnstunnel](https://github.com/ice-ice/dnstunnel) dns tunnel backdoor DNS隧道后门
-- [**45**Star][13d] [Shell] [hax4us/apkmod](https://github.com/hax4us/apkmod) Apkmod can decompile, recompile, sign APK, and bind the payload with any legit APP
+- [**45**Star][28d] [Py] [hvqzao/report-ng](https://github.com/hvqzao/report-ng) Generate MS Word template-based reports with HP WebInspect / Burp Suite Pro input, own custom data and knowledge base.
- [**45**Star][2y] [Py] [hansesecure/metasploit-modules](https://github.com/hansesecure/metasploit-modules)
- [**45**Star][2y] [Ruby] [hammackj/uirusu](https://github.com/hammackj/uirusu) A rubygem for interacting with Virustotal.com's public API v2
-- [**45**Star][5y] [C++] [hackedteam/core-macos](https://github.com/hackedteam/core-macos) RCS Agent for Mac
-- [**45**Star][9d] [PHP] [gsoros/gtrader](https://github.com/gsoros/gtrader) a trading strategy trainer, back-tester and bot
- [**45**Star][8m] [C] [groupgets/purethermal1-firmware](https://github.com/groupgets/purethermal1-firmware) Reference firmware for PureThermal 1 FLIR Lepton Dev Kit
-- [**45**Star][2y] [PowerShell] [golem445/bunny_payloads](https://github.com/golem445/bunny_payloads) Bash Bunny fun!
+- [**45**Star][1y] [Dockerfile] [gradiuscypher/grids](https://github.com/gradiuscypher/grids) My network monitoring solution and tools that go along with it.
+- [**45**Star][2y] [PS] [golem445/bunny_payloads](https://github.com/golem445/bunny_payloads) Bash Bunny fun!
- [**45**Star][2m] [Py] [gojek/dollhouse](https://github.com/gojek/dollhouse)
- [**45**Star][2y] [C] [geosn0w/ios-10.1.1-project-0-exploit-fork](https://github.com/geosn0w/ios-10.1.1-project-0-exploit-fork) iOS 10.1.1 Project 0 Exploit Compatible with All arm64 devices for Jailbreak Development
-- [**45**Star][2m] [Py] [gcmartinelli/entropy](https://github.com/gcmartinelli/entropy) Binary file entropy visualizer written in Python
+- [**45**Star][3y] [C] [gentilkiwi/basic_rpc](https://github.com/gentilkiwi/basic_rpc) Samples about Microsoft RPC and native API calls in Windows C
- [**45**Star][4y] [TeX] [gannimo/maldiv](https://github.com/gannimo/maldiv) Malware diversity
- [**45**Star][2y] [Py] [g4lb1t/smoothcriminal](https://github.com/g4lb1t/smoothcriminal) SmoothCriminal:利用鼠标移动速度,检测沙箱
- [**45**Star][2y] [Py] [fvrmatteo/dmnp](https://github.com/fvrmatteo/dmnp) Resources of the "Dissecting mobile native code packers. A case study." Zimperium's blogpost.
-- [**45**Star][7y] [Perl] [fnord0/hurl](https://github.com/fnord0/hurl) hexadecimal & URL encoder + decoder
- [**45**Star][1y] [c] [f0rb1dd3n/papers](https://github.com/f0rb1dd3n/papers) Some papers and talks that I have done
- [**45**Star][3y] [Py] [evi1clay/coolpool](https://github.com/evi1clay/coolpool) 仓库已经废弃,新仓库地址
-- [**45**Star][6m] [JS] [essandess/easylist-pac-privoxy](https://github.com/essandess/easylist-pac-privoxy) EasyList Tracker and Adblocks to Proxy Auto Configuration (PAC) File and Privoxy Actions and Filters
- [**45**Star][4y] [Py] [equ1nox/srop-poc](https://github.com/equ1nox/srop-poc)
+- [**45**Star][2d] [Py] [entynetproject/geospy](https://github.com/entynetproject/geospy) Geolocation Spy (GeoSpy) is an OSINT analysis and research tool, which allows people to track and execute intelligent social engineering attacks in real time. It was created with the aim of teaching the world how large Internet companies could obtain confidential information such as the status of sessions of their websites or services and contro…
- [**45**Star][3y] [C] [enferex/asrepl](https://github.com/enferex/asrepl) asrepl: x86-64 assembly REPL
+- [**45**Star][9m] [syst3ma/awesome-baseband-research](https://github.com/syst3ma/awesome-baseband-research) A curated list of awesome baseband research resources
- [**45**Star][4y] [C++] [diocles/apt-transport-tor](https://github.com/diocles/apt-transport-tor) Tor support for apt
- [**45**Star][6y] [Java] [devadvance/rootcloakplus](https://github.com/devadvance/rootcloakplus)
+- [**45**Star][2y] [JS] [davidstutz/password-score](https://github.com/davidstutz/password-score) Password scoring library written in Javascript.
- [**45**Star][8m] [Py] [databricks/mlflow](https://github.com/databricks/mlflow) Open source platform for the machine learning lifecycle
- [**45**Star][6y] [JS] [cyberpython/wifiscanandmap](https://github.com/cyberpython/wifiscanandmap) A Linux Python application to create maps of 802.11 networks
- [**45**Star][8m] [C] [cossacklabs/hermes-core](https://github.com/cossacklabs/hermes-core) Security framework for building multi-user end-to-end encrypted data storage and sharing/processing with zero leakage risks from storage and transport infrastructure.
+- [**45**Star][2y] [codemaxx/binary-exploitation](https://github.com/codemaxx/binary-exploitation) Good to know, easy to forget information about binaries and their exploitation!
+- [**45**Star][4y] [Py] [cdhigh/forwarder](https://github.com/cdhigh/forwarder) 简单的HTTP请求转发服务器,配合KIndleEar翻入墙内或绕过部分网站对GAE的IP地址的封锁。灵感来自
- [**45**Star][7y] [Py] [carlosgprado/milf](https://github.com/carlosgprado/milf) An IDA Pro swiss army knife
- [milf](https://github.com/carlosgprado/MILF/blob/master/milf.py) Some useful methods in vulnerability discovery
- [**45**Star][4y] [Go] [carloop/simulator-program](https://github.com/carloop/simulator-program) Software for the CAN bus simulator on the Rasperry Pi
- [**45**Star][2y] [Go] [c-bata/systracer](https://github.com/c-bata/systracer) Yet another system call tracer written in Go.
-- [**45**Star][2m] [Rust] [brycx/checkpwn](https://github.com/brycx/checkpwn) Check Have I Been Pwned and see if it's time for you to change passwords.
-- [**45**Star][23d] [Py] [bolunwang/backdoor](https://github.com/bolunwang/backdoor) Code implementation of the paper "Neural Cleanse: Identifying and Mitigating Backdoor Attacks in Neural Networks", at IEEE Security and Privacy 2019.
+- [**45**Star][3m] [blackint3/awesome-debugging](https://github.com/blackint3/awesome-debugging) Why Debugging?(为什么要调试?)
+- [**45**Star][9m] [Py] [binaryanalysisplatform/bap-tutorial](https://github.com/binaryanalysisplatform/bap-tutorial) The BAP tutorial
+- [**45**Star][1m] [Py] [bbva/apicheck](https://github.com/bbva/apicheck) The DevSecOps toolset for REST APIs
- [**45**Star][1y] [C] [bazad/xpc-string-leak](https://github.com/bazad/xpc-string-leak) CVE-2018-4248: Out-of-bounds read in libxpc during string serialization.
- [**45**Star][1y] [C] [bazad/launchd-portrep](https://github.com/bazad/launchd-portrep) macOS 10.13.5 Mach端口替换漏洞, 可导致提权和SIP绕过(CVE-2018-4280)
- [**45**Star][10m] [Java] [veracode-research/actuator-testbed](https://github.com/veracode-research/actuator-testbed) A vulnerable application exposing Spring Boot Actuators
+- [**45**Star][27d] [Py] [anvilventures/dawgmon](https://github.com/anvilventures/dawgmon) dawg the hallway monitor - monitor operating system changes and analyze introduced attack surface when installing software
- [**45**Star][2y] [Py] [anssi-fr/bits_parser](https://github.com/anssi-fr/bits_parser) Extract BITS jobs from QMGR queue and store them as CSV records
- [**45**Star][9m] [anhkgg/awesome-windbg-extensions](https://github.com/anhkgg/awesome-windbg-extensions) awesome windbg extensions
-- [**45**Star][12d] [Py] [andreafioraldi/cve_searchsploit](https://github.com/andreafioraldi/cve_searchsploit) Search an exploit in the local exploitdb database by its CVE
+- [**45**Star][14d] [Py] [andreafioraldi/cve_searchsploit](https://github.com/andreafioraldi/cve_searchsploit) Search an exploit in the local exploitdb database by its CVE
+- [**45**Star][1y] [C++] [alphaseclab/anti-debug](https://github.com/alphaseclab/anti-debug)
- [**45**Star][4m] [Py] [aencode/elf_analysis](https://github.com/aencode/elf_analysis) Perform Static and dynamic analysis on 32 bit ELF binary, and automate the process of stack based overflow exploitation.
- [**45**Star][2y] [Pascal] [0x48piraj/malwarex](https://github.com/0x48piraj/malwarex) Collection of killers !
-- [**44**Star][15d] [CSS] [evilsocket/www.pwnagotchi.ai](https://github.com/evilsocket/www.pwnagotchi.ai) (⌐■_■) - pwnagotchi.ai
+- [**45**Star][1y] [Py] [04x/instagramcracker](https://github.com/04x/instagramcracker) Full Speed Instagram Cracker
+- [**45**Star][2y] [001spartan/csfm](https://github.com/001spartan/csfm) Cobalt Strike Field Manual - A quick reference for Windows commands that can be accessed in a beacon console.
- [**44**Star][2y] [C++] [uxmal/nucleus](https://github.com/uxmal/nucleus) Clone of "Compiler-Agnostic Function Detection in Binaries" source code
-- [**44**Star][19d] [Shell] [hak5/sharkjack-payloads](https://github.com/hak5/sharkjack-payloads) The Official Hak5 Shark Jack Payload Repository
+- [**44**Star][5m] [TS] [igio90/hooah-trace](https://github.com/igio90/hooah-trace) Instructions tracing powered by frida
- [**44**Star][4y] [Py] [enablesecurity/tftptheft](https://github.com/enablesecurity/tftptheft) TFTP Theft is a tool which allows one to quickly scan/bruteforce a tftp server for files and download them instantly
-- [**44**Star][2y] [Go] [onplus/v2ray-sitedat](https://github.com/onplus/v2ray-sitedat)
+- [**44**Star][5y] [ObjC] [project-imas/passcode-check](https://github.com/project-imas/passcode-check) iMAS pascode-check, set passcode config profiles and check for conformance
- [**44**Star][2y] [PHP] [nkkollaw/reserved-subdomains](https://github.com/nkkollaw/reserved-subdomains) List of subdomains that could be candidates for reservation in multitenant app/ subdomain validator for multitenant apps
- [**44**Star][2y] [Py] [twtrubiks/csrf-tutorial](https://github.com/twtrubiks/csrf-tutorial) Use Django To Introduce CSRF and Cookies , Session
-- [**44**Star][28d] [appsecco/defcon-26-workshop-attacking-and-auditing-docker-containers](https://github.com/appsecco/defcon-26-workshop-attacking-and-auditing-docker-containers) DEF CON 26 Workshop - Attacking & Auditing Docker Containers Using Open Source
+- [**44**Star][30d] [appsecco/defcon-26-workshop-attacking-and-auditing-docker-containers](https://github.com/appsecco/defcon-26-workshop-attacking-and-auditing-docker-containers) DEF CON 26 Workshop - Attacking & Auditing Docker Containers Using Open Source
+- [**44**Star][3y] [shmilylty/nmap-reference-guide](https://github.com/shmilylty/Nmap-Reference-Guide) Nmap Reference Guide(Nmap参考指南)
+- [**44**Star][2y] [C++] [newbee119/deceptive-document](https://github.com/NewBee119/Deceptive-document) 通过在U盘中伪装正常文件,欺骗用户点击,传播木马的一个demo程序~just for fun~
- [**44**Star][3y] [JS] [bivainis/ng6-starter-sass](https://github.com/bivainis/NG6-starter-sass) An AngularJS Starter repo for Angular + ES6 + (Webpack or JSPM) by
-- [**44**Star][1m] [C++] [125k/esp8266_wifi_captive_portal](https://github.com/125K/ESP8266_WiFi_Captive_Portal) WiFi captive portal for NodeMCU (ESP8266 Module) with DNS spoofing. It phishes the WiFi password.
- [**44**Star][1y] [Py] [chiefychief/dlink_shell_poc](https://github.com/ChiefyChief/dlink_shell_poc) Dlink 615/815 shell PoC
- [**44**Star][10m] [Py] [expliot_framework/expliot](https://gitlab.com/expliot_framework/expliot)
-- [**44**Star][12m] [Py] [zev3n/shodan_so](https://github.com/zev3n/shodan_so) Search Assistant: Searching shodan via API.
- [**44**Star][2y] [Py] [zedshaw/zadm4py](https://github.com/zedshaw/zadm4py) Zed's Awesome Debug Macros for Python
+- [**44**Star][3y] [JS] [yinzhixin/scanner](https://github.com/yinzhixin/scanner) 网站漏洞扫描平台
- [**44**Star][5y] [Py] [x0day/bannerscan](https://github.com/x0day/bannerscan)
-- [**44**Star][28d] [C++] [wopss/renhook](https://github.com/wopss/renhook) An open-source x86 / x86-64 hooking library for Windows.
+- [**44**Star][30d] [C++] [wopss/renhook](https://github.com/wopss/renhook) An open-source x86 / x86-64 hooking library for Windows.
+- [**44**Star][3m] [C] [wongsyrone/transocks-wong](https://github.com/wongsyrone/transocks-wong) A redsocks-like transparent IPv4/IPv6 TCP-to-SOCKS5 redirector (for Linux only)
- [**44**Star][2y] [Py] [wizh/rop-chainer](https://github.com/wizh/rop-chainer) static program analysis tool that generates return-oriented exploits for ELF binaries
-- [**44**Star][3y] [C++] [vusec/dangsan](https://github.com/vusec/dangsan) dangsan:检测C/C++编写的程序是否有未释放的内存,防止悬挂指针
+- [**44**Star][5y] [Lua] [wenjun1055/httpguard](https://github.com/wenjun1055/httpguard) prevent cc attack
- [**44**Star][3y] [Shell] [vtky/resign](https://github.com/vtky/resign) XCode Project to resign .ipa files
- [**44**Star][5y] [C] [vincentbernat/ssl-dos](https://github.com/vincentbernat/ssl-dos) Various tools related to SSL denial of service
-- [**44**Star][3y] [vduddu/deepweblinks](https://github.com/vduddu/deepweblinks) A huge dump of deep web links
- [**44**Star][3y] [Py] [tribalchicken/volatility-filevault2](https://github.com/tribalchicken/volatility-filevault2) Volatility plugin to extract FileVault 2 VMK's
-- [**44**Star][5m] [Java] [tlamb96/kgb_messenger](https://github.com/tlamb96/kgb_messenger) An Android CTF practice challenge
+- [**44**Star][2y] [C#] [tkyu/shadowsocks-csharp-mod](https://github.com/tkyu/shadowsocks-csharp-mod) Shadowsocks for Windows
- [**44**Star][6m] [thomasthelen/ollydbg-scripts](https://github.com/thomasthelen/ollydbg-scripts) Unpacking scripts for Ollydbg.
- [**44**Star][3y] [HTML] [theori-io/jscript9-typedarray](https://github.com/theori-io/jscript9-typedarray) Proof-of-Concept exploit for jscript9 bug (MS16-063)
-- [**44**Star][2y] [C#] [testsecer/md5decrypt](https://github.com/testsecer/md5decrypt) MD5多接口解密工具(插件式)
- [**44**Star][6m] [Py] [tengzhangchao/pyshell](https://github.com/tengzhangchao/pyshell) python backdoor (后门程序)
-- [**44**Star][8d] [stamparm/blackbook](https://github.com/stamparm/blackbook) Blackbook of malware domains
+- [**44**Star][2d] [stamparm/blackbook](https://github.com/stamparm/blackbook) Blackbook of malware domains
- [**44**Star][8m] [C] [sslab-gatech/perf-fuzz](https://github.com/sslab-gatech/perf-fuzz)
-- [**44**Star][6m] [C] [sqdwr/hidedriver](https://github.com/sqdwr/hidedriver) 之前那份是7600的,每次编译搞得好麻烦。更新一个VS2017可以直接编译的。
- [**44**Star][3m] [JS] [sinakarvandi/windbg2ida](https://github.com/sinakarvandi/windbg2ida) dump each step in Windbg then shows these steps in IDA Windbg2ida
- [Windbg脚本](https://github.com/sinakarvandi/windbg2ida/blob/master/windbg2ida.js) JavaScript
- [IDA脚本](https://github.com/sinakarvandi/windbg2ida/blob/master/IDAScript.py)
- [**44**Star][3y] [Shell] [shotokanzh/pa-th-zuzu](https://github.com/shotokanzh/pa-th-zuzu) Checks for PATH substitution vulnerabilities and logs the commands executed by the vulnerable executables
-- [**44**Star][4m] [Shell] [shiva108/waes](https://github.com/shiva108/waes) CPH:SEC WAES: Web Auto Enum & Scanner - Auto enums website(s) and dumps files as result
- [**44**Star][11m] [Py] [serain/kubelet-anon-rce](https://github.com/serain/kubelet-anon-rce) Executes commands in a container on a kubelet endpoint that allows anonymous authentication (default)
- [**44**Star][2y] [JS] [sensepost/wsproxy](https://github.com/sensepost/wsproxy) A websocket proxy
- [**44**Star][5y] [securitytube/pcap2xml](https://github.com/securitytube/pcap2xml) Convert 802.11 Packet Traces to XML and SQLITE Format
+- [**44**Star][2m] [Shell] [security-onion-solutions/securityonion-saltstack](https://github.com/security-onion-solutions/securityonion-saltstack)
- [**44**Star][4y] [Py] [scy-phy/scapy-cip-enip](https://github.com/scy-phy/scapy-cip-enip) EtherNet/IP+CIP dissector for Scapy
-- [**44**Star][24d] [Py] [scwuaptx/peda](https://github.com/scwuaptx/peda) PEDA - Python Exploit Development Assistance for GDB
+- [**44**Star][26d] [Py] [scwuaptx/peda](https://github.com/scwuaptx/peda) PEDA - Python Exploit Development Assistance for GDB
+- [**44**Star][19d] [Py] [sanix-darker/brute-force-login](https://github.com/sanix-darker/brute-force-login) Brute Force Login in a web site with Python, hack accounts on any website with a good dictionary of words
- [**44**Star][4y] [C] [samdmarshall/machodiff](https://github.com/samdmarshall/machodiff) mach-o diffing tool
- [**44**Star][5y] [C] [rpaleari/qtrace](https://github.com/rpaleari/qtrace) QTrace, a "zero knowledge" system call tracer
-- [**44**Star][5m] [Ruby] [rootup/autosploit](https://github.com/rootup/autosploit) Autosploit = Automating Metasploit Modules.
- [**44**Star][6y] [IDL] [riverloopsec/apimote](https://github.com/riverloopsec/apimote) ApiMote IEEE 802.15.4/ZigBee Sniffing Hardware
-- [**44**Star][10d] [reddelexc/hackerone-reports](https://github.com/reddelexc/hackerone-reports) Top disclosed reports from HackerOne
-- [**44**Star][4y] [Assembly] [raspberrypi/rpi-sense](https://github.com/raspberrypi/rpi-sense) Sense HAT firmware and driver
-- [**44**Star][2y] [CSS] [pure-l0g1c/apex](https://github.com/pure-l0g1c/apex) Using Social Engineering To Obtain WiFi Passwords
+- [**44**Star][1y] [puuoi/ss-r-4in1](https://github.com/puuoi/ss-r-4in1) 由于秋水逸冰网站国内无法访问,所以为有需要的朋友复制发布到github
- [**44**Star][4y] [PHP] [pupi1985/marfil](https://github.com/pupi1985/marfil) Marfil is an extension of the Aircrack-ng suite, used to assess WiFi network security. It allows to split the work of performing long running dictionary attacks among many computers.
+- [**44**Star][3y] [C++] [pstolarz/dumpext](https://github.com/pstolarz/dumpext) WinDbg debugger extension library providing various tools to analyse, dump and fix (restore) Microsoft Portable Executable files for both 32 (PE) and 64-bit (PE+) platforms.
- [**44**Star][10m] [Java] [portswigger/json-web-token-attacker](https://github.com/portswigger/json-web-token-attacker)
-- [**44**Star][9m] [JS] [phantom0301/pteye](https://github.com/phantom0301/pteye) Phantom eye——A passive business logic vulnerability auditing tool
+- [**44**Star][3y] [Perl] [philsmd/itunes_backup2hashcat](https://github.com/philsmd/itunes_backup2hashcat) Extract the information needed from the Manifest.plist files to convert it to hashes compatible with hashcat
- [**44**Star][1y] [C] [petabi/sniffles](https://github.com/petabi/sniffles) Packet Capture Generator for IDS and Regular Expression Evaluation
- [**44**Star][1y] [Ruby] [pentestgeek/burpcommander](https://github.com/pentestgeek/burpcommander) Ruby command-line interface to Burp Suite's REST API
- [**44**Star][3y] [HTML] [pcchou/ctf-writeups](https://github.com/pcchou/ctf-writeups) 練習解題跟練習寫 writeups 的地方(?
+- [**44**Star][4m] [Java] [opencryptoproject/jcmathlib](https://github.com/opencryptoproject/jcmathlib) Implementation of mathematical operations with big numbers and elliptic curve points for smart cards with JavaCard platform.
- [**44**Star][1y] [Py] [olipratt/swagger-conformance](https://github.com/olipratt/swagger-conformance) Python based tool for testing whether your API conforms to its Swagger schema
+- [**44**Star][7y] [JS] [oguzy/ovizart](https://github.com/oguzy/ovizart)
- [**44**Star][2y] [Py] [nullbites/snakeeater](https://github.com/nullbites/snakeeater) Python implementation of the reflective SO injection technique
- [**44**Star][1y] [C] [ntraiseharderror/anti-delete](https://github.com/ntraiseharderror/anti-delete) Protects deletion of files with a specified extension using a kernel-mode driver.
-- [**44**Star][11m] [Py] [nowsecure/r2lldb](https://github.com/nowsecure/r2lldb) radare2-lldb integration
+- [**44**Star][11m] [Lua] [nozominetworks/tricotools](https://github.com/nozominetworks/tricotools) Triconex TriStation utilities and tools
+- [**44**Star][2y] [Go] [nicholasjackson/cnitch](https://github.com/nicholasjackson/cnitch) Container Snitch checks running processes under the Docker Engine and alerts if any are found to be running as root
- [**44**Star][2y] [C#] [mythicmaniac/keyboard-minigames](https://github.com/mythicmaniac/keyboard-minigames) A snake game for the corsair RGB keyboards
+- [**44**Star][3y] [Shell] [mueller-ma/block-ads-via-dns](https://github.com/mueller-ma/block-ads-via-dns) Block ads and malware via local DNS server
- [**44**Star][4m] [HTML] [mrluanma/shadowsocks-websocket-python](https://github.com/mrluanma/shadowsocks-websocket-python) shadowsocks over WebSocket, support Heroku.
- [**44**Star][10m] [Py] [misp/misp-stix-converter](https://github.com/misp/misp-stix-converter) A utility repo to assist with converting between MISP and STIX formats
- [**44**Star][2y] [Py] [milo2012/nmap2nessus](https://github.com/milo2012/nmap2nessus)
-- [**44**Star][5m] [PowerShell] [miladmsft/threathunt](https://github.com/miladmsft/threathunt) ThreatHunt is a PowerShell repository that allows you to train your threat hunting skills.
- [**44**Star][7y] [Shell] [metricsgrimoire/cmetrics](https://github.com/metricsgrimoire/cmetrics) CMetrics measures size and complexity for C files
-- [**44**Star][11m] [PowerShell] [mattifestation/bcd](https://github.com/mattifestation/bcd) BCD is a module to interact with boot configuration data (BCD) either locally or remotely using the ROOT/WMI:Bcd* WMI classes. The functionality of the functions in this module mirror that of bcdedit.exe.
-- [**44**Star][3m] [C] [linaro-swg/optee_examples](https://github.com/linaro-swg/optee_examples) OP-TEE Sample Applications
+- [**44**Star][11m] [PS] [mattifestation/bcd](https://github.com/mattifestation/bcd) BCD is a module to interact with boot configuration data (BCD) either locally or remotely using the ROOT/WMI:Bcd* WMI classes. The functionality of the functions in this module mirror that of bcdedit.exe.
- [**44**Star][1m] [TSQL] [leveryd/vulndocker](https://github.com/leveryd/vulndocker) 漏洞靶场平台
-- [**44**Star][3y] [PowerShell] [lazywinadmin/winformps](https://github.com/lazywinadmin/winformps) PowerShell functions for Windows Forms controls
+- [**44**Star][3y] [PS] [lazywinadmin/winformps](https://github.com/lazywinadmin/winformps) PowerShell functions for Windows Forms controls
- [**44**Star][4m] [Py] [laincode/shodan-seeker](https://github.com/laincode/shodan-seeker) Command-line tool using Shodan API. Generates and downloads CSV results, diffing of historic scanning results, alerts and monitoring of specific ports/IPs, etc.
-- [**44**Star][3m] [Java] [kxcode/jndi-exploit-bypass-demo](https://github.com/kxcode/jndi-exploit-bypass-demo) Demo code for post
+- [**44**Star][3y] [C] [kudelskisecurity/sgx-reencrypt](https://github.com/kudelskisecurity/sgx-reencrypt) PoC of an SGX enclave performing symmetric reencryption
- [**44**Star][2y] [Py] [kudelskisecurity/eddsa-fault-attack](https://github.com/kudelskisecurity/eddsa-fault-attack) Fault attack agaisnt EdDSA demonstrated on an Arduino Nano board, allowing for partial key recovery and fake signatures.
-- [**44**Star][8d] [TSQL] [kacos2000/windowstimeline](https://github.com/kacos2000/windowstimeline) SQLite query & Powershell scripts to parse the Windows 10 (v1803+) ActivitiesCache.db
- [**44**Star][6m] [C] [junxzm1990/pomp](https://github.com/junxzm1990/pomp) 在 Linux 系统上开发 POMP 系统,分析崩溃后的 artifacts
- [**44**Star][5m] [C#] [jnqpblc/sharptask](https://github.com/jnqpblc/sharptask) SharpTask is a simple code set to interact with the Task Scheduler service api and is compatible with Cobalt Strike.
-- [**44**Star][28d] [Java] [jenkinsci/zap-plugin](https://github.com/jenkinsci/zap-plugin) The OWASP ZAP Jenkins Plugin extends the functionality of the ZAP security tool into a CI Environment.
+- [**44**Star][30d] [Java] [jenkinsci/zap-plugin](https://github.com/jenkinsci/zap-plugin) The OWASP ZAP Jenkins Plugin extends the functionality of the ZAP security tool into a CI Environment.
- [**44**Star][3y] [Py] [jbremer/pyasm2](https://github.com/jbremer/pyasm2) An easy and powerful assembler engine in python.
- [**44**Star][2y] [Ruby] [j-0-t/staekka](https://github.com/j-0-t/staekka) Stækka Metasploit - Extenting Metasploit
-- [**44**Star][2m] [Rust] [ironcorelabs/recrypt-rs](https://github.com/ironcorelabs/recrypt-rs) A set of cryptographic primitives for building a multi-hop Proxy Re-encryption scheme, known as Transform Encryption.
+- [**44**Star][7d] [Rust] [ironcorelabs/recrypt-rs](https://github.com/ironcorelabs/recrypt-rs) A set of cryptographic primitives for building a multi-hop Proxy Re-encryption scheme, known as Transform Encryption.
- [**44**Star][8m] [C#] [im0qianqian/codeforceseduhacking](https://github.com/im0qianqian/codeforceseduhacking)
- [**44**Star][2y] [Py] [illusivenetworks-labs/historicprocesstree](https://github.com/illusivenetworks-labs/historicprocesstree) An Incident Response tool that visualizes historic process execution evidence (based on Event ID 4688 - Process Creation Event) in a tree view.
- [**44**Star][2y] [Py] [ikoz/jdwp-lib-injector](https://github.com/ikoz/jdwp-lib-injector)
- [**44**Star][5m] [Jupyter Notebook] [httparchive/bigquery](https://github.com/httparchive/bigquery) BigQuery import and processing pipelines
-- [**44**Star][6m] [Go] [hectane/go-acl](https://github.com/hectane/go-acl) Go library for manipulating ACLs on Windows
-- [**44**Star][3y] [PowerShell] [harmj0y/encryptedstore](https://github.com/harmj0y/encryptedstore) Offensive Data Storage
+- [**44**Star][3y] [PS] [harmj0y/encryptedstore](https://github.com/harmj0y/encryptedstore) Offensive Data Storage
+- [**44**Star][19d] [Perl] [hackerdom/checksystem](https://github.com/hackerdom/checksystem) Checksystem for attack-defense CTF
- [**44**Star][2y] [Py] [grayddq/pubilcassetinfo](https://github.com/grayddq/pubilcassetinfo) 以甲方安全人员的视角,尽可能收集发现企业的域名和服务器公网IP资产
-- [**44**Star][2y] [grayddq/hids](https://github.com/grayddq/hids) HIDS全称是Host-based Intrusion Detection System,即基于主机型入侵检测系统,HIDS运行依赖这样一个原理:一个成功的入侵者一般而言都会留下他们入侵的痕迹。本人更倾向于通过记录主机的重要信息变更来发现入侵者。 本项目由两部分组成:一部分osquery、另一部分监控脚本来补充osquery规则的不足; 本文是第一部分osquery规则部分,实现绝大部分主机信息监控。
- [**44**Star][8m] [Py] [githacktools/ftpbruter](https://github.com/githacktools/ftpbruter) A FTP Server brute forcing tool written in Python 3
- [**44**Star][2y] [Haskell] [giovanifss/dumb](https://github.com/giovanifss/dumb) Dumain Bruteforcer - a fast and flexible domain bruteforcer
-- [**44**Star][3y] [C] [gentilkiwi/basic_rpc](https://github.com/gentilkiwi/basic_rpc) Samples about Microsoft RPC and native API calls in Windows C
- [**44**Star][4m] [Lua] [fsiamp/rhapis](https://github.com/fsiamp/rhapis) rhapis:网络入侵检测系统(IDS)模拟器。用户可在模拟环境中执行任意 IDS 操作
+- [**44**Star][7y] [Perl] [fnord0/hurl](https://github.com/fnord0/hurl) hexadecimal & URL encoder + decoder
- [**44**Star][6m] [Py] [firmadyne/scraper](https://github.com/firmadyne/scraper) Firmware scraper
- [**44**Star][2y] [C] [fail0verflow/switch-u-boot](https://github.com/fail0verflow/switch-u-boot) "Das U-Boot" Source Tree for the Switch
+- [**44**Star][2y] [Py] [erpscanteam/cve-2018-2380](https://github.com/erpscanteam/cve-2018-2380) PoC of Remote Command Execution via Log injection on SAP NetWeaver AS JAVA CRM
+- [**44**Star][2d] [Py] [entynetproject/arissploit](https://github.com/entynetproject/arissploit) Arissploit Framework is a simple framework designed to master penetration testing tools. Arissploit Framework offers simple structure, basic CLI, and useful features for learning and developing penetration testing tools.
- [**44**Star][1y] [C#] [enkomio/rundotnetdll](https://github.com/enkomio/rundotnetdll) A simple utility to list all methods of a given .NET Assembly and to invoke them
-- [**44**Star][9m] [syst3ma/awesome-baseband-research](https://github.com/syst3ma/awesome-baseband-research) A curated list of awesome baseband research resources
+- [**44**Star][1y] [Py] [ecx86/shellcode_encoder](https://github.com/ecx86/shellcode_encoder) x64 printable shellcode encoder
- [**44**Star][10m] [Go] [dsopas/h1-search](https://github.com/dsopas/h1-search) Tool that will request the public disclosures on a specific HackerOne program and show them in a localhost webserver.
+- [**44**Star][7m] [Ruby] [dev-sec/ssl-baseline](https://github.com/dev-sec/ssl-baseline) DevSec SSL/TLS Baseline - InSpec Profile
- [**44**Star][2y] [Py] [depthsecurity/haveibeenharvested](https://github.com/depthsecurity/haveibeenharvested) Automated HaveIbeenPwned lookups using theharvester results
- [**44**Star][6m] [Erlang] [darkkey/erlamsa](https://github.com/darkkey/erlamsa) Erlang port of famous radamsa fuzzzer.
- [**44**Star][4y] [Py] [danse-macabre/ida-efitools](https://github.com/danse-macabre/ida-efitools) Some scripts for IDA Pro to assist with reverse engineering EFI binaries
- [**44**Star][2y] [Py] [coolervoid/vision2](https://github.com/coolervoid/vision2) Nmap's XML result parse and NVD's CPE correlation to search CVE.
+- [**44**Star][6m] [Py] [contrast-security-oss/djangoat](https://github.com/contrast-security-oss/djangoat) Python and Django implementation of the OWASP RailsGoat project
- [**44**Star][1y] [C++] [coltonon/reghookex](https://github.com/coltonon/reghookex) External mid-function hooking method to retrieve register data
-- [**44**Star][2y] [codemaxx/binary-exploitation](https://github.com/codemaxx/binary-exploitation) Good to know, easy to forget information about binaries and their exploitation!
- [**44**Star][11m] [Scala] [ccied/ugforum-analysis](https://github.com/ccied/ugforum-analysis) Tools for Automated Analysis of Cybercriminal Markets
- [**44**Star][1y] [bugbountyresources/resources](https://github.com/bugbountyresources/resources) A Storehouse of resources related to Bug Bounty Hunting collected from different sources. Watch and Star this repo for all latest guides, tools, methodology, platforms tips, and tricks curated by us.
- [**44**Star][1y] [JS] [brangerbriz/wifi-data-safari](https://github.com/brangerbriz/wifi-data-safari) WiFi Data Safari Workshop
-- [**44**Star][3m] [blackint3/awesome-debugging](https://github.com/blackint3/awesome-debugging) Why Debugging?(为什么要调试?)
- [**44**Star][6m] [Py] [bitthebyte/bitblinder](https://github.com/bitthebyte/bitblinder) Burp extension helps in finding blind xss vulnerabilities
-- [**44**Star][1m] [Py] [bbva/apicheck](https://github.com/bbva/apicheck) The DevSecOps toolset for REST APIs
-- [**44**Star][2y] [PowerShell] [attackdebris/babel-sf](https://github.com/attackdebris/babel-sf) Babel Scripting Framework
+- [**44**Star][4m] [Py] [bieberg0n/bjdns](https://github.com/bieberg0n/bjdns) A dns server which can protect yourself against DNS poisoning in China. / 抗污染 带缓存的dns服务器
+- [**44**Star][1m] [PS] [azure/health-data-and-ai-blueprint](https://github.com/azure/health-data-and-ai-blueprint) Azure Security and Compliance Blueprint - HIPAA/HITRUST Health Data and AI - deployment, and demo that Predicts the Length of Stay in Hospitals
+- [**44**Star][2y] [PS] [attackdebris/babel-sf](https://github.com/attackdebris/babel-sf) Babel Scripting Framework
- [**44**Star][11m] [Go] [armanshan12/rkms](https://github.com/armanshan12/rkms) RKMS is a highly available key management service, built on top of AWS's KMS.
-- [**44**Star][25d] [Py] [anvilventures/dawgmon](https://github.com/anvilventures/dawgmon) dawg the hallway monitor - monitor operating system changes and analyze introduced attack surface when installing software
+- [**44**Star][11m] [C#] [andychiare/netcore2-reverse-proxy](https://github.com/andychiare/netcore2-reverse-proxy) An example of how to implement a reverse proxy in .NET Core 2
- [**44**Star][5y] [Py] [andrew-morris/kippo_detect](https://github.com/andrew-morris/kippo_detect) Quick proof of concept to detect a Kippo SSH honeypot instance externally
- [**44**Star][1y] [Py] [ambionics/prestashop-exploits](https://github.com/ambionics/prestashop-exploits) Collection of exploits/POC for PrestaShop cookie vulnerabilities (CVE-2018-13784)
- [**44**Star][2y] [C#] [amarkulo/openpasswordfilter](https://github.com/amarkulo/openpasswordfilter) An open source custom password filter DLL and userspace service to better protect / control Active Directory domain passwords.
-- [**44**Star][1y] [C++] [alphaseclab/anti-debug](https://github.com/alphaseclab/anti-debug)
- [**44**Star][3y] [Py] [allyshka/vhostbrute](https://github.com/allyshka/vhostbrute) Virtual host bruteforcer
- [**44**Star][1y] [akayn/vault](https://github.com/akayn/resources) Old Code.... and a never-ending reading list.
- [**44**Star][3y] [Py] [aikinogard/5th_place_solution_facebook_check_ins](https://github.com/aikinogard/5th_place_solution_facebook_check_ins) My solution rank 5th/1212 in Facebook check ins prediction competition at Kaggle
- [**44**Star][2y] [C] [aerosoul94/dynlib](https://github.com/aerosoul94/dynlib) IDA Pro plugin to aid PS4 user mode ELF reverse engineering.
- [**44**Star][2m] [HTML] [advanced-threat-research/iocs](https://github.com/advanced-threat-research/iocs) Repository containing IOCs, CSV and MISP JSON from our blogs
-- [**44**Star][5m] [HTML] [adrecon/adrecon](https://github.com/adrecon/adrecon) ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment.
+- [**44**Star][6m] [HTML] [adrecon/adrecon](https://github.com/adrecon/adrecon) ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment.
+- [**44**Star][9m] [JS] [adguardteam/stealthmode](https://github.com/adguardteam/stealthmode) a browser extension to stop all kinds of online trackers from receiving any information about you and your actions on the Internet
- [**44**Star][2y] [Py] [649/memfixed-mitigation-tool](https://github.com/649/memfixed-mitigation-tool) DDoS mitigation tool for sending flush or shutdown commands to vulnerable Memcached servers obtained using Shodan API
+- [**44**Star][1y] [Py] [649/apache-struts-shodan-exploit](https://github.com/649/apache-struts-shodan-exploit) This tool takes advantage of CVE-2018-11776 and Shodan to perform mass exploitation of verified and vulnerable Apache Struts servers.
- [**44**Star][2y] [Py] [5alt/emu](https://github.com/5alt/emu) code emulator base on unicorn engine
-- [**44**Star][2y] [PowerShell] [3gstudent/windows-user-clone](https://github.com/3gstudent/windows-user-clone) Create a hidden account
-- [**44**Star][2y] [PowerShell] [3gstudent/dump-clear-password-after-kb2871997-installed](https://github.com/3gstudent/dump-clear-password-after-kb2871997-installed)
-- [**44**Star][2y] [001spartan/csfm](https://github.com/001spartan/csfm) Cobalt Strike Field Manual - A quick reference for Windows commands that can be accessed in a beacon console.
+- [**44**Star][1y] [PHP] [4k-developer/4k-botnet](https://github.com/4k-developer/4k-botnet) A simple and easy to use JS Botnet
+- [**44**Star][2y] [PS] [3gstudent/windows-user-clone](https://github.com/3gstudent/windows-user-clone) Create a hidden account
+- [**44**Star][2y] [PS] [3gstudent/dump-clear-password-after-kb2871997-installed](https://github.com/3gstudent/dump-clear-password-after-kb2871997-installed)
+- [**44**Star][8m] [Py] [0x4d31/honeyku](https://github.com/0x4d31/honeyku) A Heroku-based web honeypot that can be used to create and monitor fake HTTP endpoints (i.e. honeytokens).
+- [**43**Star][1y] [C++] [grcasanova/badusb](https://github.com/grcasanova/badusb) Personal implementation of the BadUSB exploit with an Atmel 8-bit AVR ATTiny85 acting as a HID keyboard
+- [**43**Star][7y] [Shell] [jseidl/torblock](https://github.com/jseidl/torblock) TORBlock is a BASH script to automatically download the list of TOR exit-nodes and add them to your IPTables ruleset.
- [**43**Star][8y] [C] [hellman/shtest](https://github.com/hellman/shtest) Simple shellcode testing tool.
+- [**43**Star][7m] [Py] [s0md3v/locky](https://github.com/s0md3v/locky) Locky generates "really" strong yet easy to remember passwords.
+- [**43**Star][2d] [Py] [rocky/python-decompile3](https://github.com/rocky/python-decompile3) Python decompiler for 3.7+. Stripped down from uncompyle6 so we can refactor and fix up some long-standing problems
- [**43**Star][3y] [Go] [madeye/obfs4-tunnel](https://github.com/madeye/obfs4-tunnel) obfs4 tunnel
-- [**43**Star][28d] [C] [timwr/cve-2019-2215](https://github.com/timwr/cve-2019-2215)
+- [**43**Star][2m] [JS] [pwnlandia/mhn-splunk](https://github.com/pwnlandia/mhn-splunk) Modern Honey Network App for Splunk
- [**43**Star][2y] [Py] [warner/python-spake2](https://github.com/warner/python-spake2) pure-python implementation of the SPAKE2 Password-Authenticated Key Exchange algorithm
+- [**43**Star][9m] [PS] [nsacyber/http-connectivity-tester](https://github.com/nsacyber/http-connectivity-tester) Aids in discovering HTTP and HTTPS connectivity issues. #nsacyber
- [**43**Star][2y] [C] [p0cl4bs/shellcodes](https://github.com/p0cl4bs/shellcodes)
- [**43**Star][3y] [Py] [tylerha97/findevil](https://github.com/tylerha97/findevil) Volatility plugin to find evil
+- [**43**Star][10m] [Shell] [thelinuxchoice/phurious](https://github.com/thelinuxchoice/phurious) Phishing any website to delivery Windows Reverse Shell payload through DATA URI
- [**43**Star][6m] [YARA] [decalage2/balbuzard](https://github.com/decalage2/balbuzard) Balbuzard is a package of malware analysis tools in python to extract patterns of interest from suspicious files (IP addresses, domain names, known file headers, interesting strings, etc). It can also crack malware obfuscation such as XOR, ROL, etc by bruteforcing and checking for those patterns.
-- [**43**Star][7m] [Py] [jmagnusson/bgtunnel](https://github.com/jmagnusson/bgtunnel) Initiate SSH tunnels in the background in python
-- [**43**Star][3y] [shmilylty/nmap-reference-guide](https://github.com/shmilylty/Nmap-Reference-Guide) Nmap Reference Guide(Nmap参考指南)
+- [**43**Star][8m] [Py] [jmagnusson/bgtunnel](https://github.com/jmagnusson/bgtunnel) Initiate SSH tunnels in the background in python
- [**43**Star][1y] [C++] [johnsonjason/rvdbg](https://github.com/johnsonjason/RVDbg) RVDbg is a debugger/exception handler for Windows processes and has the capability to circumvent anti-debugging techniques. (Cleaner, documented code base being worked on in: core branch)
- [**43**Star][3y] [Jupyter Notebook] [rmax/scrapydo](https://github.com/rmax/scrapydo) Crochet-based blocking API for Scrapy.
- [**43**Star][4y] [JS] [praetorian-code/hashcatjs](https://github.com/praetorian-code/hashcatJS) An implementation of the hashcat rules engine in javascript
-- [**43**Star][4y] [JS] [nvisium/grails-nv](https://github.com/nVisium/grails-nV) Vulnerable Grails application
+- [**43**Star][5y] [JS] [nvisium/grails-nv](https://github.com/nVisium/grails-nV) Vulnerable Grails application
- [**43**Star][2y] [Py] [secarmalabs/dns-parallel-prober](https://github.com/SecarmaLabs/dns-parallel-prober) PoC for an adaptive parallelised DNS prober
- [**43**Star][6y] [C++] [zer0mem/showmeyourgongfu](https://github.com/zer0mem/showmeyourgongfu) OpenSrc projects; common multiprojects headers store to ./Common/*category*/
- [**43**Star][2y] [C#] [zacbrown/hiddentreasure-etw-demo](https://github.com/zacbrown/hiddentreasure-etw-demo) 在内存取证中,使用 ETW(Windows事件追踪) 挖掘宝藏的新方式
-- [**43**Star][3y] [JS] [yinzhixin/scanner](https://github.com/yinzhixin/scanner) 网站漏洞扫描平台
- [**43**Star][5y] [Py] [yelp/mycroft](https://github.com/yelp/mycroft)
- [**43**Star][4y] [yeahwu/google-ip-range](https://github.com/yeahwu/google-ip-range) 一个超大的 Google 全球 IP 扫描范围库
- [**43**Star][3y] [Py] [xyntax/drystan](https://github.com/xyntax/drystan) Automated information gathering tool for pentest
- [**43**Star][11m] [Go] [xpn/blockchainc2](https://github.com/xpn/blockchainc2) A POC C2 server and agent to explore just if/how the Ethereum blockchain can be used for C2
- [**43**Star][4y] [Py] [xme/mime2vt](https://github.com/xme/mime2vt) Unpack MIME attachments from a file and check them against virustotal.com
- [**43**Star][2y] [xazlsec/pentest-project-lists](https://github.com/xazlsec/pentest-project-lists) 由信安之路团队成员收集整理的与渗透测试相关的 Github 项目地址,如果你由更好的项目请将项目地址发送到:myh0st@foxmail.com
-- [**43**Star][24d] [C] [wuseman/tg799vac-xtreme-17.2-mint](https://github.com/wuseman/tg799vac-xtreme-17.2-mint) My personal unique wiki for hacking the router firmware used by (Telia)TG799vac Xtream v17.2-MINT delivered from Technicolor
+- [**43**Star][7m] [YARA] [x64dbg/yarasigs](https://github.com/x64dbg/yarasigs) Various Yara signatures (possibly to be included in a release later).
- [**43**Star][2y] [Py] [williballenthin/python-ntfs](https://github.com/williballenthin/python-ntfs) Open source Python library for NTFS analysis
- [**43**Star][1m] [Rust] [whitfin/s3-meta](https://github.com/whitfin/s3-meta) Gather metadata about your S3 buckets
+- [**43**Star][2y] [PHP] [whitewinterwolf/wwwolf-php-webshell](https://github.com/whitewinterwolf/wwwolf-php-webshell) WhiteWinterWolf's PHP web shell
- [**43**Star][2y] [Shell] [wh1t3rh1n0/pentest-scripts](https://github.com/wh1t3rh1n0/pentest-scripts) Miscellaneous scripts for pentesting
-- [**43**Star][13d] [C] [wallarm/libdetection](https://github.com/wallarm/libdetection) Signature-free approach library to detect injection and commanding attacks
-- [**43**Star][4m] [C] [w1nds/dll2shellcode](https://github.com/w1nds/dll2shellcode) dll转shellcode工具
-- [**43**Star][2m] [Jupyter Notebook] [urcuqui/whitehat](https://github.com/urcuqui/whitehat) Information about my experiences in ethical hacking
+- [**43**Star][15d] [C] [wallarm/libdetection](https://github.com/wallarm/libdetection) Signature-free approach library to detect injection and commanding attacks
+- [**43**Star][5m] [C] [w1nds/dll2shellcode](https://github.com/w1nds/dll2shellcode) dll转shellcode工具
+- [**43**Star][4m] [C#] [userr00t/universalunityhooks](https://github.com/userr00t/universalunityhooks) A framework designed to hook into and modify methods in unity games via dlls
+- [**43**Star][3m] [Jupyter Notebook] [urcuqui/whitehat](https://github.com/urcuqui/whitehat) Information about my experiences in ethical hacking
- [**43**Star][2y] [Py] [unkl4b/gitbackdorizer](https://github.com/unkl4b/gitbackdorizer) GitBackdorizer (bad name, I know!) Is a proof of concept from Ulisses Castro's talk - 50 ton of backdoors (
- [**43**Star][2y] [C++] [technikempire/httpfilteringengine](https://github.com/technikempire/httpfilteringengine) Transparent filtering TLS proxy.
+- [**43**Star][2m] [Py] [teal33t/poopak](https://github.com/teal33t/poopak) POOPAK - TOR Hidden Service Crawler
- [**43**Star][8m] [tea-deliverers/ctf-writeups](https://github.com/tea-deliverers/ctf-writeups)
- [**43**Star][1y] [tbgsecurity/weaponize_splunk](https://github.com/tbgsecurity/weaponize_splunk) Weaponizing Splunk Presentation including Splunk Apps for penetration testing.
- [**43**Star][4y] [t3kn1cs/infosec-rss-feeds](https://github.com/t3kn1cs/infosec-rss-feeds) Information Security RSS Feeds OMPL format
@@ -12644,26 +13498,22 @@ networking routines
- [**43**Star][2y] [Shell] [stayliv3/embedded-device-lab](https://github.com/stayliv3/embedded-device-lab) embedded-device-lab是一个利用qemu模拟真实世界中物联网漏洞的测试环境。由于物联网架构的特殊性,调试分析漏洞通常需要使用qemu模拟执行不同架构的可执行文件。而各种搭建环境,交叉编译是一件费事费力,令人忧伤的工作。 embedded-device-lab利用docker-compose,将各种漏洞调试环境一键化。简单使用两条命令,就可以直接使用gdb或者IDA动态分析相关漏洞。
- [**43**Star][8m] [C] [souhailhammou/drivers](https://github.com/souhailhammou/drivers) Windows Drivers
- [**43**Star][6y] [Py] [sketchymoose/totalrecall](https://github.com/sketchymoose/totalrecall) Based on the Volatility framework, this script will run various plugins as well as create a timeline, or use YARA/ClamAV/VirusTotal to find badness.
-- [**43**Star][13d] [C] [simonwunderlich/fft_eval](https://github.com/simonwunderlich/fft_eval) FFT evaluation
+- [**43**Star][15d] [C] [simonwunderlich/fft_eval](https://github.com/simonwunderlich/fft_eval) FFT evaluation
- [**43**Star][2y] [C] [shipcod3/irc-bot-hunters](https://github.com/shipcod3/irc-bot-hunters) a collection of Metasploit PoC exploits for IRC Botnets that allows RCE
- [**43**Star][4y] [Py] [sh1nu11bi/routerhunter-2.0](https://github.com/sh1nu11bi/routerhunter-2.0) Testing vulnerabilities in devices and routers connected to the Internet.
-- [**43**Star][4y] [Py] [secwiki/scaing-backdoor](https://github.com/secwiki/scaing-backdoor) 新一代Webshell扫描工具
-- [**43**Star][2m] [Shell] [security-onion-solutions/securityonion-saltstack](https://github.com/security-onion-solutions/securityonion-saltstack)
+- [**43**Star][4y] [C++] [sekoialab/binaryinjectionmitigation](https://github.com/sekoialab/binaryinjectionmitigation) Two tools used during our analysis of the Microsoft binary injection mitigation implemented in Edge TH2.
- [**43**Star][2y] [Py] [secdec/xssmap](https://github.com/secdec/xssmap) Intelligent XSS detection tool that uses human techniques for looking for reflected cross-site scripting (XSS) vulnerabilities
- [**43**Star][2y] [Py] [savio-code/hexorbase](https://github.com/savio-code/hexorbase) Automatically exported from code.google.com/p/hexorbase
-- [**43**Star][17d] [Py] [sanix-darker/brute-force-login](https://github.com/sanix-darker/brute-force-login) Brute Force Login in a web site with Python, hack accounts on any website with a good dictionary of words
+- [**43**Star][2y] [Py] [robertbaruch/polychip](https://github.com/robertbaruch/polychip) Python app to extract a netlist of NMOS transistors from an Inkscape diagram.
- [**43**Star][10m] [Makefile] [revng/orchestra](https://github.com/revng/orchestra) Helper repository to easily build all the rev.ng components
- [**43**Star][2y] [C] [rbaron/fitless](https://github.com/rbaron/fitless) A collection of toy firmwares for the ID115 fitness tracker
- [**43**Star][5y] [JS] [rapid7/dllhijackauditkit](https://github.com/rapid7/dllhijackauditkit) This toolkit detects applications vulnerable to DLL hijacking (released in 2010)
- [**43**Star][3y] [Py] [ramadhanamizudin/python-icap-yara](https://github.com/ramadhanamizudin/python-icap-yara) An ICAP Server with yara scanner for URL and content.
-- [**43**Star][3y] [Perl] [philsmd/itunes_backup2hashcat](https://github.com/philsmd/itunes_backup2hashcat) Extract the information needed from the Manifest.plist files to convert it to hashes compatible with hashcat
- [**43**Star][1y] [Shell] [philcryer/wpa2own](https://github.com/philcryer/wpa2own) Use hashcat to crack WPA2 PSK (Pre-Shared Key) passwords!
- [**43**Star][8y] [pentestmonkey/timing-attack-checker](https://github.com/pentestmonkey/timing-attack-checker) Tool to help identify timing attacks
- [**43**Star][3m] [Py] [partoftheworld/ghidrapy_functionstringassociate](https://github.com/partoftheworld/ghidrapy_functionstringassociate) It does the same thing as plugin FunctionStringAssociate for IDA, Now the script just works, in the future it is planned to increase the speed of work and bring it closer to the speed of the plugin.
-- [**43**Star][4m] [C] [operationnt414c/shellsecbat](https://github.com/operationnt414c/shellsecbat) Henkaku plugin which displays seconds and battery percent in status bar
-- [**43**Star][4m] [Java] [opencryptoproject/jcmathlib](https://github.com/opencryptoproject/jcmathlib) Implementation of mathematical operations with big numbers and elliptic curve points for smart cards with JavaCard platform.
+- [**43**Star][2y] [Go] [ocmdev/rita](https://github.com/ocmdev/rita) This repo is deprecated. Please use activecm/rita instead.
- [**43**Star][7m] [C#] [nyan-x-cat/lime-downloader](https://github.com/nyan-x-cat/lime-downloader) Simple Malware Downloader
-- [**43**Star][11m] [Lua] [nozominetworks/tricotools](https://github.com/nozominetworks/tricotools) Triconex TriStation utilities and tools
- [**43**Star][2y] [C] [noahhhryan/krackattacks-test](https://github.com/noahhhryan/krackattacks-test)
- [**43**Star][1y] [Py] [nirizr/pytest-idapro](https://github.com/nirizr/pytest-idapro) A pytest module for The Interactive Disassembler and IDAPython; Record and Replay IDAPython API, execute inside IDA or use mockups of IDAPython API.
- [**43**Star][2y] [Py] [nikshepsvn/scatterfly](https://github.com/nikshepsvn/scatterfly) An attempt to improve user privacy by intelligent data obfuscation.
@@ -12672,7 +13522,7 @@ networking routines
- [**43**Star][2y] [Py] [nccgroup/royal_apt](https://github.com/nccgroup/royal_apt) Royal APT - APT15 - Related Information from NCC Group Cyber Defense Operations Research
- [**43**Star][3m] [Java] [nalen98/ebpf-for-ghidra](https://github.com/nalen98/ebpf-for-ghidra) eBPF Processor for Ghidra
- [**43**Star][1y] [C] [n30m1nd/linux_heap_exploitation_intro_series](https://github.com/n30m1nd/linux_heap_exploitation_intro_series) Various PoCs and challenges regarding heap userland exploitation
-- [**43**Star][3y] [Shell] [mueller-ma/block-ads-via-dns](https://github.com/mueller-ma/block-ads-via-dns) Block ads and malware via local DNS server
+- [**43**Star][5y] [Py] [mubix/pykek](https://github.com/mubix/pykek) Kerberos Exploitation Kit
- [**43**Star][2y] [Py] [mthbernardes/ipchecker](https://github.com/mthbernardes/ipchecker) Check if a IP is from tor or is a malicious proxy
- [**43**Star][1y] [mrowensnobody/presentation](https://github.com/mrowensnobody/presentation)
- [**43**Star][3y] [Py] [mrgeffitas/sandbox_tester](https://github.com/mrgeffitas/sandbox_tester)
@@ -12683,9 +13533,9 @@ networking routines
- [**43**Star][3y] [Batchfile] [maldiohead/idapin](https://github.com/maldiohead/idapin) plugin of ida with pin
- [**43**Star][2y] [Java] [m301/rdroid](https://github.com/m301/rdroid) [Android RAT] Remotely manage your android phone using PHP Interface
- [**43**Star][1y] [Ruby] [lucifer1993/lasercrack](https://github.com/lucifer1993/lasercrack) Lasercrack-可扩展的Ruby暴力破解框架
-- [**43**Star][3y] [C] [kudelskisecurity/sgx-reencrypt](https://github.com/kudelskisecurity/sgx-reencrypt) PoC of an SGX enclave performing symmetric reencryption
- [**43**Star][10m] [Go] [konstantin8105/ddos](https://github.com/konstantin8105/ddos) DDoS attack. Creating infinite http GET requests.
- [**43**Star][1m] [Py] [kavishgr/xmlrpc-bruteforcer](https://github.com/kavishgr/xmlrpc-bruteforcer) An XMLRPC brute forcer targeting Wordpress written in Python 3. In the context of xmlrpc brute forcing, its faster than Hydra and WpScan. It can brute force 1000 passwords per second.
+- [**43**Star][17d] [PS] [kacos2000/win10](https://github.com/kacos2000/win10) Win 10 related research
- [**43**Star][5m] [AutoIt] [jschicht/usnjrnl2csv](https://github.com/jschicht/usnjrnl2csv) Parser for $UsnJrnl on NTFS
- [**43**Star][3y] [C#] [jacobmisirian/dbltekgoippwn](https://github.com/jacobmisirian/dbltekgoippwn) Tool to check if an IP of a DblTek GoIP is vulnerable to a challenge-response login system, send SMS messages from the system, execute remote commands botnet style, and generate responses to challenges.
- [**43**Star][2y] [JS] [issue-db/issue-db](https://github.com/issue-db/issue-db)
@@ -12693,78 +13543,77 @@ networking routines
- [**43**Star][1y] [JS] [intoli/slice](https://github.com/intoli/slice) A JavaScript implementation of Python's negative indexing and extended slice syntax.
- [**43**Star][5m] [Shell] [infosecn1nja/ycsm](https://github.com/infosecn1nja/ycsm) This is a quick script installation for resilient redirector using nginx reverse proxy and letsencrypt compatible with some popular Post-Ex Tools (Cobalt Strike, Empire, Metasploit, PoshC2).
- [**43**Star][8m] [Py] [ihaveamac/switchfs](https://github.com/ihaveamac/switchfs) FUSE (Filesystem in Userspace) scripts for Nintendo Switch files
-- [**43**Star][26d] [Py] [hvqzao/report-ng](https://github.com/hvqzao/report-ng) Generate MS Word template-based reports with HP WebInspect / Burp Suite Pro input, own custom data and knowledge base.
+- [**43**Star][1y] [Py] [hillsbird/db_security](https://github.com/hillsbird/db_security) 数据库安全审计平台
- [**43**Star][3y] [Py] [hewlettpackard/reconbf](https://github.com/hewlettpackard/reconbf) Recon system hardening scanner
+- [**43**Star][2y] [Go] [heptiolabs/ironclad](https://github.com/heptiolabs/ironclad) Web Application Firewall (WAF) on Kubernetes
- [**43**Star][3y] [C] [hamza-megahed/ctfs](https://github.com/hamza-megahed/ctfs) Walkthrough some CTFs
-- [**43**Star][17d] [Perl] [hackerdom/checksystem](https://github.com/hackerdom/checksystem) Checksystem for attack-defense CTF
- [**43**Star][2y] [Py] [gregversteeg/gaussianize](https://github.com/gregversteeg/gaussianize) Transforms univariate data into normally distributed data
- [**43**Star][2y] [Py] [grayddq/passiveseccheck](https://github.com/grayddq/passiveseccheck) 自动化被动扫描系统分为数据源、数据处理、漏洞验证等三个子系统,本系统属于漏洞验证部分,根据提供的数据进行分布式安全验证,确定是否包含相关严重漏洞。
+- [**43**Star][4m] [Py] [giantbranch/gray-hat-python-src](https://github.com/giantbranch/gray-hat-python-src) python灰帽子--黑客与逆向工程师的Python编程之道的课本各章源码,我实验的程序等
+- [**43**Star][1y] [C] [gcwnow/linux](https://github.com/gcwnow/linux) Linux kernel for GCW Zero (Ingenic JZ4770)
- [**43**Star][6y] [Py] [fygrave/honeyntp](https://github.com/fygrave/honeyntp) NTP logger/honeypot
- [**43**Star][2y] [Py] [ethvpn/code](https://github.com/ethvpn/code) The sourecode
-- [**43**Star][2y] [Py] [erpscanteam/cve-2018-2380](https://github.com/erpscanteam/cve-2018-2380) PoC of Remote Command Execution via Log injection on SAP NetWeaver AS JAVA CRM
-- [**43**Star][15d] [Py] [entynetproject/geospy](https://github.com/entynetproject/geospy) Geolocation Spy (GeoSpy) is an OSINT analysis and research tool, which allows people to track and execute intelligent social engineering attacks in real time. It was created with the aim of teaching the world how large Internet companies could obtain confidential information such as the status of sessions of their websites or services and contro…
- [**43**Star][2m] [C#] [emoose/xvdtool](https://github.com/emoose/xvdtool) A command-line tool for manipulating Xbox One XVD & XVC files.
+- [**43**Star][12m] [PHP] [eboda/35c3](https://github.com/eboda/35c3) Challenges I created for 35c3
- [**43**Star][3y] [Shell] [dominikstyp/auto-reaver](https://github.com/dominikstyp/auto-reaver) Auto Reaver - multiple access point attack using Reaver
-- [**43**Star][2y] [Py] [deadpix3l/pydhe](https://github.com/deadpix3l/pydhe) a fully python Diffie-Hellman Library
- [**43**Star][2y] [JS] [davidaq/vodo](https://github.com/davidaq/vodo) 开源HTTP抓包
-- [**43**Star][6m] [Py] [contrast-security-oss/djangoat](https://github.com/contrast-security-oss/djangoat) Python and Django implementation of the OWASP RailsGoat project
- [**43**Star][1y] [Py] [cmu-sei/cyobstract](https://github.com/cmu-sei/cyobstract) A tool to extract structured cyber information from incident reports.
- [**43**Star][9m] [Py] [chriswmorris/metaforge](https://github.com/chriswmorris/metaforge) An OSINT Metadata analyzing tool that filters through tags and creates reports
- [**43**Star][1y] [Py] [christhecoolhut/easy-pickings](https://github.com/christhecoolhut/easy-pickings) Automatic function exporting and linking for fuzzing cross-architecture binaries.
-- [**43**Star][8d] [Go] [c-sto/gosecretsdump](https://github.com/c-sto/gosecretsdump)
+- [**43**Star][1y] [Py] [chrismaddalena/fox](https://github.com/chrismaddalena/fox) A companion tool for BloodHound offering Active Directory statistics and number crunching
- [**43**Star][1y] [bulentrahimkazanci/windbg-cheat-sheet](https://github.com/bulentrahimkazanci/windbg-cheat-sheet) A practical guide to analyze memory dumps of .Net applications by using Windbg
-- [**43**Star][28d] [Py] [bsdphk/pyreveng](https://github.com/bsdphk/pyreveng) Software Reverse Engineering toolkit in python
+- [**43**Star][30d] [Py] [bsdphk/pyreveng](https://github.com/bsdphk/pyreveng) Software Reverse Engineering toolkit in python
- [**43**Star][4y] [Shell] [brianwrf/roothelper](https://github.com/brianwrf/roothelper) A Bash script that downloads and unzips scripts that will aid with privilege escalation on a Linux system.
- [**43**Star][1y] [Py] [br3akp0int/gqlparser](https://github.com/br3akp0int/gqlparser) A repository for GraphQL Extension for Burp Suite
- [**43**Star][4y] [Py] [borjamerino/tlsinjector](https://github.com/borjamerino/tlsinjector) Python script to inject and run shellcodes through TLS callbacks
- [**43**Star][7y] [Py] [bonsaiviking/tarpyt](https://github.com/bonsaiviking/tarpyt) A web spider's worst nightmare.
-- [**43**Star][9m] [Py] [binaryanalysisplatform/bap-tutorial](https://github.com/binaryanalysisplatform/bap-tutorial) The BAP tutorial
-- [**43**Star][3m] [JS] [bendrucker/hapi-require-https](https://github.com/bendrucker/hapi-require-https) hapi http -> https redirection for servers behind a reverse proxy
-- [**43**Star][4m] [bc-security/defcon27](https://github.com/bc-security/defcon27)
+- [**43**Star][4m] [JS] [bendrucker/hapi-require-https](https://github.com/bendrucker/hapi-require-https) hapi http -> https redirection for servers behind a reverse proxy
+- [**43**Star][12m] [Py] [bayotop/sink-logger](https://github.com/bayotop/sink-logger) sink-logger: Burp扩展,无缝记录所有传递到已知JavaScript sinks的数据
- [**43**Star][2y] [C] [bartblaze/matire](https://github.com/bartblaze/matire) Malware Analysis, Threat Intelligence and Reverse Engineering: LABS
- [**43**Star][2m] [PHP] [auth0/auth0-drupal](https://github.com/auth0/auth0-drupal) Auth0 Drupal Plugin - Single Sign On, Social Login, SAML and AD/LDAP Integration, User Management
- [**43**Star][2y] [JS] [auth0-blog/aliens-go-home-part-1](https://github.com/auth0-blog/aliens-go-home-part-1) GitHub repository that accompanies the first article of the "Developing Games with React, Redux, and SVG" series.
- [**43**Star][2y] [JS] [ascendr/spectre-chrome](https://github.com/ascendr/spectre-chrome) Spectre JS PoC for Chrome
+- [**43**Star][3y] [C++] [andreybazhan/dbgext](https://github.com/andreybazhan/dbgext) Debugger extension for the Debugging Tools for Windows (WinDbg, KD, CDB, NTSD).
- [**43**Star][4y] [C#] [alphadelta/dumb](https://github.com/alphadelta/dumb) A fast and advanced ransomware PoC
- [**43**Star][3m] [TSQL] [abrignoni/dfir-sql-query-repo](https://github.com/abrignoni/dfir-sql-query-repo) Collection of SQL query templates for digital forensics use by platform and application.
-- [**43**Star][1y] [Py] [649/apache-struts-shodan-exploit](https://github.com/649/apache-struts-shodan-exploit) This tool takes advantage of CVE-2018-11776 and Shodan to perform mass exploitation of verified and vulnerable Apache Struts servers.
-- [**43**Star][1y] [PHP] [4k-developer/4k-botnet](https://github.com/4k-developer/4k-botnet) A simple and easy to use JS Botnet
- [**43**Star][6y] [1an0rmus/yara](https://github.com/1an0rmus/yara) Yara rules
-- [**43**Star][8m] [Py] [0x4d31/honeyku](https://github.com/0x4d31/honeyku) A Heroku-based web honeypot that can be used to create and monitor fake HTTP endpoints (i.e. honeytokens).
-- [**43**Star][1y] [Py] [04x/instagramcracker](https://github.com/04x/instagramcracker) Full Speed Instagram Cracker
- [**42**Star][1m] [C#] [uknowsec/sharpcheckinfo](https://github.com/uknowsec/sharpcheckinfo) 收集目标主机信息,包括最近打开文件,系统环境变量和回收站文件等等
- [**42**Star][1y] [Go] [arnaucube/flock-botnet](https://github.com/arnaucube/flock-botnet) Twitter botnet with autonomous bots replying tweets with text generated based on probabilities in Markov chains
-- [**42**Star][7d] [Py] [rocky/python-decompile3](https://github.com/rocky/python-decompile3) Python decompiler for 3.7+. Stripped down from uncompyle6 so we can refactor and fix up some long-standing problems
+- [**42**Star][2m] [Lua] [dsasmblr/cheat-engine](https://github.com/dsasmblr/cheat-engine) Cheat Engine scripts, tutorials, tools, and more.
- [**42**Star][4m] [Lua] [ricterz/my-nse-scripts](https://github.com/ricterz/my-nse-scripts) My NSE Scripts
- [**42**Star][4y] [Lua] [fireeye/synfulknock](https://github.com/fireeye/synfulknock)
-- [**42**Star][5m] [TypeScript] [igio90/hooah-trace](https://github.com/igio90/hooah-trace) Instructions tracing powered by frida
- [**42**Star][2y] [Py] [undeadsec/checkurl](https://github.com/undeadsec/checkurl) Detect evil urls that uses IDN Homograph Attack.
+- [**42**Star][16d] [Py] [pagekite/pysocksipychain](https://github.com/pagekite/pysocksipychain) Modified socks.py which supports chained proxies
- [**42**Star][1m] [C] [wireghoul/sploit-dev](https://github.com/wireghoul/sploit-dev) Exploits and research stuffs
- [**42**Star][3y] [Go] [v2ray/experiments](https://github.com/v2ray/experiments) Repository for experimental code
+- [**42**Star][10m] [TS] [javascript-obfuscator/react-native-obfuscating-transformer](https://github.com/javascript-obfuscator/react-native-obfuscating-transformer) Obfuscation for React Native bundles
+- [**42**Star][2m] [C#] [k8gege/porttran](https://github.com/k8gege/porttran) PortTran (.NET端口转发工具,支持任意权限)
- [**42**Star][1y] [Perl] [t3hp0rp/hitcondockerfile](https://github.com/t3hp0rp/hitcondockerfile) Dockerfile for hitcon
+- [**42**Star][1m] [mohitkhemchandani/oscp_bible](https://github.com/mohitkhemchandani/oscp_bible) This is a collection of resources, scripts, bookmarks, writeups, notes, cheatsheets that will help you in OSCP Preparation as well as for general pentesting and learning. If you feel like you can contribute in it. Please do that, I'll appreciate you.
+- [**42**Star][7m] [kungfu-pro/kungfu-pro-issues](https://github.com/kungfu-pro/kungfu-pro-issues) kungfu pro 透明代理, 企业科学上网解决方案
- [**42**Star][2y] [Py] [t7hm1/pyddos](https://github.com/t7hm1/pyddos) DDOS python script
-- [**42**Star][1m] [payloadbox/rfi-lfi-payload-list](https://github.com/payloadbox/rfi-lfi-payload-list)
- [**42**Star][6m] [Py] [kryptoslogic/rdppot](https://github.com/kryptoslogic/rdppot) RDP honeypot
+- [**42**Star][2d] [Py] [3xploit-db/pentest-tools-framework](https://github.com/3xploit-db/pentest-tools-framework) Pentest Tools Framework is a database of exploits, Scanners and tools for penetration testing. Pentest is a powerful framework includes a lot of tools for beginners. You can explore kernel vulnerabilities, network vulnerabilities
- [**42**Star][1y] [C++] [3gstudent/windows-eventlog-bypass](https://github.com/3gstudent/Windows-EventLog-Bypass) Use subProcessTag Value From TEB to identify Event Log Threads
- [**42**Star][10m] [C++] [bytecode77/slui-file-handler-hijack-privilege-escalation](https://github.com/bytecode77/slui-file-handler-hijack-privilege-escalation) 利用 slui.exe 的文件 Handler 劫持漏洞实现 UAC 绕过和本地提权
- [**42**Star][2m] [C++] [lifting-bits/klee](https://github.com/lifting-bits/klee) KLEE Symbolic Execution Engine
- [**42**Star][2y] [Py] [klsecservices/ios_mips_gdb](https://github.com/klsecservices/ios_mips_gdb) Cisco MIPS debugger
- [**42**Star][2y] [Py] [miss-d/blindy](https://github.com/miss-d/blindy) Simple script to automate brutforcing blind sql injection vulnerabilities
+- [**42**Star][1m] [C] [zhangboyang/pal3patch](https://github.com/zhangboyang/pal3patch) 《仙剑奇侠传三》《仙剑奇侠传三外传·问情篇》分辨率补丁
- [**42**Star][2y] [C] [z4ziggy/zigfrid](https://github.com/z4ziggy/zigfrid) A Passive RFID fuzzer
+- [**42**Star][3y] [C] [yosqueoy/ditsnap](https://github.com/yosqueoy/ditsnap) An inspection tool for Active Directory database
- [**42**Star][10m] [xisigr/paper](https://github.com/xisigr/paper) Web&Browser Security
- [**42**Star][4y] [PHP] [xibijj/awvscan](https://github.com/xibijj/awvscan) New On Live Web Vul Scan
- [**42**Star][6m] [C] [x899/ssh_brute_force](https://github.com/x899/ssh_brute_force) Crack SSH Password using Dictionary and Brute Force Method
-- [**42**Star][7m] [YARA] [x64dbg/yarasigs](https://github.com/x64dbg/yarasigs) Various Yara signatures (possibly to be included in a release later).
- [**42**Star][7m] [x41sec/slides](https://github.com/x41sec/slides)
+- [**42**Star][3d] [C] [wuseman/tg799vac-xtreme-17.2-mint](https://github.com/wuseman/tg799vac-xtreme-17.2-mint) My personal unique wiki for hacking the router firmware used by (Telia)TG799vac Xtream v17.2-MINT delivered from Technicolor
- [**42**Star][11m] [Perl] [wireghoul/doona](https://github.com/wireghoul/doona) Network based protocol fuzzer
-- [**42**Star][2y] [PHP] [whitewinterwolf/wwwolf-php-webshell](https://github.com/whitewinterwolf/wwwolf-php-webshell) WhiteWinterWolf's PHP web shell
+- [**42**Star][7y] [C++] [vlad902/findcrypt2-with-mmx](https://github.com/vlad902/findcrypt2-with-mmx) IDA Pro findcrypt2 plug-in with MMX AES instruction finding support
- [**42**Star][6m] [C++] [vanhauser-thc/afl-pin](https://github.com/vanhauser-thc/afl-pin) run AFL with pintool
-- [**42**Star][4m] [C#] [userr00t/universalunityhooks](https://github.com/userr00t/universalunityhooks) A framework designed to hook into and modify methods in unity games via dlls
- [**42**Star][3y] [Py] [uber/usb2fac](https://github.com/uber/usb2fac) Enabling 2fac confirmation for newly connected USB devices
-- [**42**Star][2m] [Py] [turnerlabs/antiope](https://github.com/turnerlabs/antiope) AWS Inventory and Compliance Framework
- [**42**Star][1m] [JS] [tineola/tineola](https://github.com/tineola/tineola) Blockchains. Destruction. Mayhem.
- [**42**Star][3m] [Go] [threatstack/authkeys](https://github.com/threatstack/authkeys) A tool for getting SSH keys out of LDAP
-- [**42**Star][3m] [Lua] [theherogac/tf-card-plugin-tool](https://github.com/theherogac/tf-card-plugin-tool) TF Card Plugin Tool is an excellent tool developed with the OneLua Team interpreter that allows you to simplify the installation and management of the drivers of the SD2VITA adapter and of the official PSVITA memory in the ux0: / uma0 paths
+- [**42**Star][4d] [PS] [thecjw/scoop-retools](https://github.com/thecjw/scoop-retools) Scoop bucket for reverse engineering tools
- [**42**Star][2y] [Shell] [taherio/redi](https://github.com/taherio/redi) Automated script for setting up CobaltStrike redirectors (nginx reverse proxy, letsencrypt)
- [**42**Star][3y] [Py] [t0kx/exploit-cve-2015-3306](https://github.com/t0kx/exploit-cve-2015-3306) ProFTPd 1.3.5 - (mod_copy) Remote Command Execution exploit and vulnerable container
- [**42**Star][3m] [Pawn] [stypr/tmpleak](https://github.com/stypr/tmpleak) Leak off used temporary workspaces for ctf and wargames!
@@ -12772,26 +13621,26 @@ networking routines
- [**42**Star][6y] [Ruby] [sophsec/ffi-pcap](https://github.com/sophsec/ffi-pcap) Ruby FFI bindings for libpcap.
- [**42**Star][1m] [Py] [sh3llcod3/airscript-ng](https://github.com/sh3llcod3/airscript-ng) A python script to simplify the process of auditing wireless networks.
- [**42**Star][9m] [Py] [sendgrid/krampus](https://github.com/sendgrid/krampus) The original AWS security enforcer™
-- [**42**Star][4y] [C++] [sekoialab/binaryinjectionmitigation](https://github.com/sekoialab/binaryinjectionmitigation) Two tools used during our analysis of the Microsoft binary injection mitigation implemented in Edge TH2.
-- [**42**Star][25d] [Py] [securestate/king-phisher-plugins](https://github.com/securestate/king-phisher-plugins) Plugins for the King Phisher open source phishing campaign toolkit.
+- [**42**Star][8d] [Py] [securestate/king-phisher-plugins](https://github.com/securestate/king-phisher-plugins) Plugins for the King Phisher open source phishing campaign toolkit.
- [**42**Star][2y] [Py] [se55i0n/cwebscanner](https://github.com/se55i0n/cwebscanner) 快速扫描C段web应用,获取请求状态code、server、title信息
+- [**42**Star][3y] [KiCad Layout] [salmg/magspoofpi](https://github.com/salmg/magspoofpi) MagSpoof for Raspberry PI GPIO
+- [**42**Star][6m] [Visual Basic .NET] [s1egesystems/ghostsquadhackers-javascript-encrypter-encoder](https://github.com/s1egesystems/ghostsquadhackers-javascript-encrypter-encoder) Encrypt/Encode your Javascript code. (Windows Scripting)
- [**42**Star][2y] [Shell] [rogdham/cve-2018-11235](https://github.com/rogdham/cve-2018-11235) PoC exploit for CVE-2018-11235 allowing RCE on git clone --recurse-submodules
-- [**42**Star][2y] [Py] [robertbaruch/polychip](https://github.com/robertbaruch/polychip) Python app to extract a netlist of NMOS transistors from an Inkscape diagram.
-- [**42**Star][8m] [PowerShell] [robbridgeman/adimporter](https://github.com/robbridgeman/adimporter) Credit to Helge Klein -
+- [**42**Star][8m] [PS] [robbridgeman/adimporter](https://github.com/robbridgeman/adimporter) Credit to Helge Klein -
- [**42**Star][2m] [Java] [revolver-ocelot-saa/ghidrax64dbg](https://github.com/revolver-ocelot-saa/ghidrax64dbg) Extract annoations from Ghidra into an X32/X64 dbg database
- [**42**Star][2m] [Java] [radioegor146/native-obfuscator](https://github.com/radioegor146/native-obfuscator) Java .class to .cpp converter for use with JNI
+- [**42**Star][1y] [Shell] [r0hi7/tortipi](https://github.com/r0hi7/tortipi) Tor based Raspberry π hotspot
- [**42**Star][8m] [pyn3rd/cve-2019-2618](https://github.com/pyn3rd/cve-2019-2618) Weblogic Unrestricted File Upload
-- [**42**Star][1y] [puuoi/ss-r-4in1](https://github.com/puuoi/ss-r-4in1) 由于秋水逸冰网站国内无法访问,所以为有需要的朋友复制发布到github
-- [**42**Star][3y] [C++] [pstolarz/dumpext](https://github.com/pstolarz/dumpext) WinDbg debugger extension library providing various tools to analyse, dump and fix (restore) Microsoft Portable Executable files for both 32 (PE) and 64-bit (PE+) platforms.
- [**42**Star][2y] [PHP] [paragonie/hpkp-builder](https://github.com/paragonie/hpkp-builder) Build HTTP Public-Key-Pinning headers from a JSON file (or build them programmatically)
- [**42**Star][2y] [C] [opsxcq/exploit-cve-2017-5715](https://github.com/opsxcq/exploit-cve-2017-5715) Spectre exploit
+- [**42**Star][4m] [C] [operationnt414c/shellsecbat](https://github.com/operationnt414c/shellsecbat) Henkaku plugin which displays seconds and battery percent in status bar
- [**42**Star][3y] [Ruby] [openshift/openshift-extras](https://github.com/openshift/openshift-extras) Unofficial tools for use with OpenShift
-- [**42**Star][2y] [Go] [ocmdev/rita](https://github.com/ocmdev/rita) This repo is deprecated. Please use activecm/rita instead.
-- [**42**Star][8m] [Py] [nwmonster/applysig](https://github.com/nwmonster/applysig) Apply IDA FLIRT signatures for Ghidra
-- [**42**Star][17d] [ntdiff/headers](https://github.com/ntdiff/headers)
+- [**42**Star][5m] [JS] [oasis-open/cti-stix-visualization](https://github.com/oasis-open/cti-stix-visualization) OASIS TC Open Repository: Lightweight visualization for STIX 2.0 objects and relationships
+- [**42**Star][5d] [ntdiff/headers](https://github.com/ntdiff/headers)
- [**42**Star][5y] [C] [ntddk/temu](https://github.com/ntddk/temu) TEMU: The BitBlaze Dynamic Analysis Component (with some patches).
-- [**42**Star][2m] [Java] [nowsecure/cybertruckchallenge19](https://github.com/nowsecure/cybertruckchallenge19) Android security workshop material taught during the CyberTruck Challenge 2019 (Detroit USA).
+- [**42**Star][3m] [Java] [nowsecure/cybertruckchallenge19](https://github.com/nowsecure/cybertruckchallenge19) Android security workshop material taught during the CyberTruck Challenge 2019 (Detroit USA).
- [**42**Star][2y] [C] [nixawk/awesome-windows-debug](https://github.com/nixawk/awesome-windows-debug) Debug Windows Application / Kernel
+- [**42**Star][12d] [Ruby] [ninoseki/mihari](https://github.com/ninoseki/mihari) mihari is a sidekick tool for TheHive to monitor malicious hosts
- [**42**Star][4y] [C] [nikolajschlej/zeronights2015](https://github.com/nikolajschlej/zeronights2015) My UEFI security talk on ZeroNights 2015
- [**42**Star][5y] [Py] [nihilus/idasimulator](https://github.com/nihilus/idasimulator) a plugin that extends IDA's conditional breakpoint support, making it easy to augment / replace complex executable code inside a debugged process with Python code.
- [**42**Star][4y] [C++] [nihilus/guid-finder](https://github.com/nihilus/guid-finder) find GUID/UUIDs
@@ -12799,145 +13648,175 @@ networking routines
- [**42**Star][3y] [C] [nextsecurity/gozi-mbr-rootkit](https://github.com/nextsecurity/gozi-mbr-rootkit) Gozi-MBR-rootkit Bootkit Modified
- [**42**Star][1y] [Java] [narkisr/nmap4j](https://github.com/narkisr/nmap4j) A Java Nmap wrapper
- [**42**Star][4y] [Py] [nanshihui/normal_hark_lite](https://github.com/nanshihui/normal_hark_lite) 通用的POC检测框架,有足够的POC,就可以找出相应的漏洞
-- [**42**Star][30d] [munsiwoo/ctf-web-prob](https://github.com/munsiwoo/ctf-web-prob) my ctf web probs
-- [**42**Star][5y] [Py] [mubix/pykek](https://github.com/mubix/pykek) Kerberos Exploitation Kit
+- [**42**Star][5y] [Py] [nanopony/apache-scalp](https://github.com/nanopony/apache-scalp) Scalp!/Anathema is a log analyzer for web server (Apache, nginx) [Python3]
+- [**42**Star][1m] [munsiwoo/ctf-web-prob](https://github.com/munsiwoo/ctf-web-prob) my ctf web probs
- [**42**Star][3y] [C++] [mrexodia/idapatch](https://github.com/mrexodia/idapatch) IDA plugin to patch IDA Pro in memory.
- [**42**Star][1y] [Py] [modzero/interestingfilescanner](https://github.com/modzero/interestingfilescanner) Burp extension
+- [**42**Star][2m] [Py] [mitre-attack/attack-scripts](https://github.com/mitre-attack/attack-scripts) Scripts and a (future) library to improve users' interactions with the ATT&CK content
- [**42**Star][1m] [mikalv/awesome-i2p](https://github.com/mikalv/awesome-i2p) A curated list of awesome I2P implementations, libraries, resources, projects, and shiny things. I2P is an anonymous overlay network - a network within a network. It is intended to protect communication from dragnet surveillance and monitoring by third parties such as ISPs.
+- [**42**Star][1y] [C#] [micli/netcoredebugging](https://github.com/micli/netcoredebugging) A repository maintains the book of ".NET Core application debugging" sample code.
+- [**42**Star][11m] [PS] [mburrough/pentestingazureapps](https://github.com/mburrough/pentestingazureapps) Script samples from the book Pentesting Azure Applications (2018, No Starch Press)
- [**42**Star][2y] [Assembly] [martinvelez/w32evol](https://github.com/martinvelez/w32evol) An obfuscation engine which obfuscates Intel x86 32-bit binary code.
- [**42**Star][3y] [C] [lxdcn/simple-vpn-demo](https://github.com/lxdcn/simple-vpn-demo) A Simple Point-to-Point tunnelling implementation in C
- [**42**Star][9m] [C++] [luciouskami/xigncode3bypass](https://github.com/luciouskami/xigncode3bypass)
-- [**42**Star][7d] [JS] [loki-project/loki-messenger](https://github.com/loki-project/loki-messenger) Loki Messenger - Onion routing based messenger
-- [**42**Star][8m] [Shell] [leitbogioro/fuck_aliyun](https://github.com/leitbogioro/fuck_aliyun)
+- [**42**Star][2d] [JS] [loki-project/loki-messenger](https://github.com/loki-project/loki-messenger) Loki Messenger - Onion routing based messenger
+- [**42**Star][5m] [C++] [lianglixin/sksocks](https://github.com/lianglixin/sksocks) SKSocks, for proxy, firewall penetration, data encryption and speeding up internet accessing.
+- [**42**Star][9m] [Shell] [leitbogioro/fuck_aliyun](https://github.com/leitbogioro/fuck_aliyun)
+- [**42**Star][1y] [Java] [k0r0pt/project-tauro](https://github.com/k0r0pt/project-tauro) A Router WiFi key recovery/cracking tool with a twist.
+- [**42**Star][9y] [jonoberheide/stackjacking](https://github.com/jonoberheide/stackjacking) PoC code for our presentation titled "Stackjacking Your Way to grsec/PaX Bypass"
- [**42**Star][2y] [Go] [johnsonz/go-checkiptools](https://github.com/johnsonz/go-checkiptools) A go application to scan google ip.
- [**42**Star][11m] [JS] [jeremyfetiveau/pwn-just-in-time-exploit](https://github.com/jeremyfetiveau/pwn-just-in-time-exploit) Exploit for the [pwn] just-in-time challenge from google ctf 2018's finals (TurboFan bug)
- [**42**Star][4m] [Py] [jas502n/cve-2019-7238](https://github.com/jas502n/cve-2019-7238) Nexus Repository Manager 3 Remote Code Execution without authentication < 3.15.0
+- [**42**Star][4m] [Py] [jaredlgillespie/proxyscrape](https://github.com/jaredlgillespie/proxyscrape) Python library for retrieving free proxies (HTTP, HTTPS, SOCKS4, SOCKS5).
- [**42**Star][2y] [C] [invictus-0x90/vulnerable_linux_driver](https://github.com/invictus-0x90/vulnerable_linux_driver) An intentionally vulnerable linux driver for research purposes/practice in kernel exploit dev
- [**42**Star][2y] [Py] [imp0wd3r/scanner](https://github.com/imp0wd3r/scanner) 端口扫描 + 敏感文件扫描 + POC批量调用框架
- [**42**Star][2y] [C] [idc/ps4-fake-405](https://github.com/idc/ps4-fake-405)
- [**42**Star][4y] [Py] [ibm-security-intelligence/data-import](https://github.com/ibm-security-intelligence/data-import)
- [**42**Star][5y] [Py] [husam212/mitmer](https://github.com/husam212/mitmer) Automated man-in-the-middle attack tool.
-- [**42**Star][2y] [Go] [heptiolabs/ironclad](https://github.com/heptiolabs/ironclad) Web Application Firewall (WAF) on Kubernetes
- [**42**Star][1y] [C] [hannob/bignum-fuzz](https://github.com/hannob/bignum-fuzz) Code to fuzz bignum libraries
- [**42**Star][3y] [Ruby] [guidovranken/rpcbomb](https://github.com/guidovranken/rpcbomb) RPCBOMB + patches
- [**42**Star][4m] [Py] [gnebbia/halive](https://github.com/gnebbia/halive) A fast http and https prober, to check which URLs are alive
-- [**42**Star][1y] [C] [gcwnow/linux](https://github.com/gcwnow/linux) Linux kernel for GCW Zero (Ingenic JZ4770)
- [**42**Star][4y] [C++] [flankerhqd/mediacodecoob](https://github.com/flankerhqd/mediacodecoob) Infoleak and PC control poc for CVE-2015-6620 (24445127), I'll add after conference
- [**42**Star][3y] [JS] [firebug/devtools-extension-examples](https://github.com/firebug/devtools-extension-examples) Extension examples for Firefox developer tools
- [**42**Star][1m] [Erlang] [etnt/edbg](https://github.com/etnt/edbg) edbg:基于 tty 的 Erlang 调试/追踪接口
- [**42**Star][2m] [Py] [edeca/rtfraptor](https://github.com/edeca/rtfraptor) Extract OLEv1 objects from RTF files by instrumenting Word
-- [**42**Star][1y] [Py] [ecx86/shellcode_encoder](https://github.com/ecx86/shellcode_encoder) x64 printable shellcode encoder
-- [**42**Star][11m] [PHP] [eboda/35c3](https://github.com/eboda/35c3) Challenges I created for 35c3
- [**42**Star][5y] [Py] [duo-labs/mysslstrip](https://github.com/duo-labs/mysslstrip) CVE-2015-3152 PoC
-- [**42**Star][14d] [Objective-C] [dineshshetty/ios-sandbox-dumper](https://github.com/dineshshetty/ios-sandbox-dumper) SandBox-Dumper makes use of multiple private libraries to provide exact locations of the application sandbox, application bundle and some other interesting information
+- [**42**Star][16d] [ObjC] [dineshshetty/ios-sandbox-dumper](https://github.com/dineshshetty/ios-sandbox-dumper) SandBox-Dumper makes use of multiple private libraries to provide exact locations of the application sandbox, application bundle and some other interesting information
- [**42**Star][2y] [HTML] [digitalinterruption/fridaworkshop](https://github.com/digitalinterruption/fridaworkshop) Break Apps with Frida workshop material
+- [**42**Star][3m] [Py] [dhn/osee](https://github.com/dhn/osee) Collection of resources for my preparation to take the OSEE certification.
+- [**42**Star][2y] [Py] [deadpix3l/pydhe](https://github.com/deadpix3l/pydhe) a fully python Diffie-Hellman Library
+- [**42**Star][1y] [PHP] [davidtavarez/pinky](https://github.com/davidtavarez/pinky) pinky - The PHP mini RAT (Remote Administration Tool)
- [**42**Star][10m] [PHP] [danwin/onion-link-list](https://github.com/danwin/onion-link-list) A set of scripts to list tor hidden services
+- [**42**Star][2y] [Py] [danmcinerney/smb-reverse-brute](https://github.com/danmcinerney/smb-reverse-brute) Async'ly gather unique usernames thru null SMB sessions and bruteforce them with 2 passwords
- [**42**Star][12m] [Py] [daddycocoaman/ironpentest](https://github.com/daddycocoaman/ironpentest) Collection of IronPython scripts and executables for penetration testing
+- [**42**Star][9d] [C#] [cs-util-com/cscore](https://github.com/cs-util-com/cscore) cscore is a minimal-footprint library providing commonly used helpers & patterns for your C# projects. It can be used in both pure C# and Unity projects.
- [**42**Star][4y] [C++] [cr4sh/secretnet_expl](https://github.com/cr4sh/secretnet_expl) LPE exploits for Secret Net and Secret Net Studio
-- [**42**Star][20d] [JS] [coston/react-obfuscate](https://github.com/coston/react-obfuscate) An intelligent React component to obfuscate any contact link!
-- [**42**Star][1y] [Py] [chrismaddalena/fox](https://github.com/chrismaddalena/fox) A companion tool for BloodHound offering Active Directory statistics and number crunching
+- [**42**Star][3d] [JS] [coston/react-obfuscate](https://github.com/coston/react-obfuscate) An intelligent React component to obfuscate any contact link!
+- [**42**Star][7m] [Java] [ciscopsirt/openvulnapi](https://github.com/ciscopsirt/openvulnapi) Documentation and Tools for Cisco's PSIRT openVuln API
- [**42**Star][10m] [Batchfile] [chrisad/ads-payload](https://github.com/chrisad/ads-payload) Powershell script which will take any payload and put it in the a bat script which delivers the payload. The payload is delivered using environment variables, alternating data streams and wmic.
- [**42**Star][5y] [C] [cemeyer/msp430-emu-uctf](https://github.com/cemeyer/msp430-emu-uctf) msp430 emulator for uctf (with remote GDB debugging, reverse debugging, and optional symbolic execution)
- [**42**Star][1y] [btkrausen/aws](https://github.com/btkrausen/aws)
- [**42**Star][2y] [HCL] [bneg/redteam-automation](https://github.com/bneg/redteam-automation) Automating those tasks which can or should be automated
-- [**42**Star][12m] [Py] [bayotop/sink-logger](https://github.com/bayotop/sink-logger) sink-logger: Burp扩展,无缝记录所有传递到已知JavaScript sinks的数据
- [**42**Star][6m] [Ruby] [b1ack0wl/linux_mint_poc](https://github.com/b1ack0wl/linux_mint_poc)
- [**42**Star][2y] [Py] [azure/embarrassingly-parallel-image-classification](https://github.com/azure/embarrassingly-parallel-image-classification) Walkthrough demonstrating how trained DNNs (CNTK and TensorFlow) can be applied to massive image sets in ADLS using PySpark on Azure HDInsight clusters
+- [**42**Star][17d] [SystemVerilog] [azonenberg/starshipraider](https://github.com/azonenberg/starshipraider) High performance embedded systems debug/reverse engineering platform
- [**42**Star][7m] [Go] [aschzero/hera](https://github.com/aschzero/hera) Automated secure tunnels for containers using Cloudflare Argo
- [**42**Star][8m] [OCaml] [anssi-fr/mabo](https://github.com/anssi-fr/mabo) MRT Parser
- [**42**Star][8m] [C++] [angorafuzzer/libdft64](https://github.com/angorafuzzer/libdft64) libdft for Intel Pin 3.x and 64 bit platform. (Dynamic taint tracking, taint analysis)
- [**42**Star][2y] [Py] [anemonelabs/unmessage](https://github.com/anemonelabs/unmessage) Privacy enhanced instant messenger
-- [**42**Star][11m] [C#] [andychiare/netcore2-reverse-proxy](https://github.com/andychiare/netcore2-reverse-proxy) An example of how to implement a reverse proxy in .NET Core 2
- [**42**Star][1y] [HTML] [an0nud4y/socialfish](https://github.com/an0nud4y/socialfish) Modern phishing tool with advanced functionality
+- [**42**Star][2y] [Rust] [alexcrichton/socks5-rs](https://github.com/alexcrichton/socks5-rs) Implementation of a socks5 proxy server in Rust
+- [**42**Star][2m] [Rust] [ajmwagar/merino](https://github.com/ajmwagar/merino)
- [**42**Star][2y] [Py] [abdesslem/ctf](https://github.com/abdesslem/ctf) Flask platform for Capture The Flag challenges
- [**42**Star][9y] [Py] [9b/malpdfobj](https://github.com/9b/malpdfobj) Builds json representation of PDF malware sample
+- [**42**Star][4m] [Py] [4n4nk3/tinkerershell](https://github.com/4n4nk3/tinkerershell) A simple python reverse shell written just for fun.
+- [**42**Star][29d] [1135/1135-cobaltstrike-toolkit](https://github.com/1135/1135-cobaltstrike-toolkit) about CobaltStrike
- [**42**Star][5m] [C++] [0xeb/ida-climacros](https://github.com/0xeb/ida-climacros) Create and use macros in IDA's CLIs
- [**42**Star][2m] [Py] [0x01h/pyddoz](https://github.com/0x01h/pyddoz) PyDDoZ is a powerful, human-friendly DDoS tool using application layer (L7) attack techniques.
- [**42**Star][6m] [JS] [0katz/cve-2019-12476](https://github.com/0katz/cve-2019-12476)
- [**41**Star][7m] [C++] [trojan-gfw/trojan-qt](https://github.com/trojan-gfw/trojan-qt) GUI server and client of Trojan in Qt C++
+- [**41**Star][1y] [Py] [v2ray/v2ray-shell_alpha](https://github.com/v2ray/v2ray-shell_alpha) A GUI for V2Ray-core, written in PyQt5
- [**41**Star][11m] [JS] [hacker0x01/helpful-recon-data](https://github.com/hacker0x01/helpful-recon-data) This information provides helpful information to make it easier to discover new attack surface on HackerOne.com.
-- [**41**Star][7d] [Py] [simsong/dfxml](https://github.com/simsong/dfxml) Digital Forensics XML project and library
-- [**41**Star][2m] [Lua] [dsasmblr/cheat-engine](https://github.com/dsasmblr/cheat-engine) Cheat Engine scripts, tutorials, tools, and more.
+- [**41**Star][2d] [Py] [simsong/dfxml](https://github.com/simsong/dfxml) Digital Forensics XML project and library
+- [**41**Star][2y] [Py] [moosedojo/legion](https://github.com/moosedojo/legion) Distributed computing environment that can be used for both academic and pen testing purposes.
- [**41**Star][6y] [PHP] [spiderlabs/upnp-request-generator](https://github.com/spiderlabs/upnp-request-generator) A tool to parse UPnP descriptor XML files and generate SOAP control requests for use with Burp Suite or netcat
- [**41**Star][1y] [C] [l3m0n/my_ctf_challenges](https://github.com/l3m0n/my_ctf_challenges)
+- [**41**Star][2y] [Py] [cisco-talos/covnavi](https://github.com/cisco-talos/covnavi)
- [**41**Star][7m] [OCaml] [mirage/wodan](https://github.com/mirage/wodan) A Mirage filesystem library
- [**41**Star][4m] [C#] [3gstudent/apt34-jason](https://github.com/3gstudent/apt34-jason) Use to perform Microsoft exchange account brute-force.
-- [**41**Star][10m] [Shell] [thelinuxchoice/phurious](https://github.com/thelinuxchoice/phurious) Phishing any website to delivery Windows Reverse Shell payload through DATA URI
-- [**41**Star][10m] [TypeScript] [javascript-obfuscator/react-native-obfuscating-transformer](https://github.com/javascript-obfuscator/react-native-obfuscating-transformer) Obfuscation for React Native bundles
-- [**41**Star][18d] [Shell] [soaringswine/lazyrecon_docker](https://github.com/soaringswine/lazyrecon_docker) Containerized version of my fork of Nahamsec's Lazyrecon.
-- [**41**Star][2m] [C#] [k8gege/porttran](https://github.com/k8gege/porttran) PortTran (.NET端口转发工具,支持任意权限)
+- [**41**Star][19d] [Shell] [shibli2700/rekon](https://github.com/shibli2700/rekon) The project contains multiple shell scripts for automating the tasks which most of the hackers struggle during their recon phase.
+- [**41**Star][2m] [amimo/goron](https://github.com/amimo/goron) Yet another llvm based obfuscator
+- [**41**Star][2y] [Makefile] [artem-panchenko/counter-strike-docker](https://github.com/artem-panchenko/counter-strike-docker) Docker image for Counter-Strike 1.6 server
- [**41**Star][1y] [C#] [advancedhacker101/c-sharp-proxy-server](https://github.com/advancedhacker101/c-sharp-proxy-server) A proxy server built with c# can be both normal and MITM Proxy
+- [**41**Star][2m] [C] [alxbrn/gdrv-loader](https://github.com/alxbrn/gdrv-loader) Kernel driver loader using vulnerable gigabyte driver (
+- [**41**Star][2y] [Py] [bcopeland/speccy](https://github.com/bcopeland/speccy) Visualization tool for ath spectral scan
+- [**41**Star][2d] [Shell] [phspade/automated-scanner](https://github.com/phspade/automated-scanner) Trying to make automated recon for bug bounties
+- [**41**Star][20d] [Go] [abguthrie/goquery](https://github.com/abguthrie/goquery) Provide a shell like interface by utilizing osquery's distributed API
+- [**41**Star][2m] [Py] [kc0bfv/pcode-emulator](https://github.com/kc0bfv/pcode-emulator) A PCode Emulator for Ghidra.
+- [**41**Star][1m] [Java] [flankerhqd/vendor-android-cves](https://github.com/flankerhqd/vendor-android-cves) Collections of my POCs for android vendor CVEs
- [**41**Star][4m] [Py] [philomathic-guy/malicious-web-content-detection-using-machine-learning](https://github.com/philomathic-guy/Malicious-Web-Content-Detection-Using-Machine-Learning) Chrome extension for detecting phishing web sites
- [**41**Star][3y] [kd1991/oxul103-jailbreak](https://github.com/KD1991/OXUL103-Jailbreak) A NEW 64-bit JAILBREAK FOR iOS 10.3,10.3.1,10.3.2,10.3.x. (Untethered).
- [**41**Star][2y] [JS] [osirislab/csaw-ctf-2017-quals](https://github.com/osirislab/CSAW-CTF-2017-Quals) Repo for CSAW CTF 2018 Quals challenges
- [**41**Star][5y] [Java] [tacixat/cfgscandroid](https://github.com/TACIXAT/CFGScanDroid) Control Flow Graph Scanning for Android
+- [**41**Star][3y] [Py] [cylance/markovobfuscate](https://github.com/cylance/MarkovObfuscate) Use Markov Chains to obfuscate data as other data
- [**41**Star][5y] [cmu-18739l-s15/18739l-s15-coursedocs](https://github.com/CMU-18739L-S15/18739L-s15-coursedocs)
-- [**41**Star][4m] [TypeScript] [verifynpm/tbv](https://github.com/verifynpm/tbv) Package verification for npm
+- [**41**Star][4m] [TS] [verifynpm/tbv](https://github.com/verifynpm/tbv) Package verification for npm
+- [**41**Star][6d] [Py] [opencybersecurityalliance/stix-shifter](https://github.com/opencybersecurityalliance/stix-shifter) This project consists of an open source library allowing software to connect to data repositories using STIX Patterning, and return results as STIX Observations.
- [**41**Star][6y] [Py] [vpnguy-zz/snmpdos](https://github.com/vpnguy-zz/snmpdos) Create a DDOS attack using SNMP servers
- [**41**Star][1y] [C] [synacktiv-contrib/lightspeed](https://github.com/Synacktiv-contrib/lightspeed) PoC for the iOS 11.4.1 and MacOS 10.13 kernel vulnerability in lio_listio
- [**41**Star][8m] [Ruby] [sharpstone/heroku-bouncer](https://github.com/sharpstone/heroku-bouncer) A Heroku OAuth middleware with no other work to do
- [**41**Star][5m] [Go] [lc/cspparse](https://github.com/lc/cspparse) A tool to evaluate Content Security Policies.
+- [**41**Star][1m] [Java] [flankerhqd/vendor-android-cves](https://github.com/flankerhqd/vendor-android-cves) Collections of my POCs for android vendor CVEs
- [**41**Star][11m] [Py] [zynga/hiccup](https://github.com/zynga/hiccup) [DEPRECATED] Hiccup is a framework that allows the Burp Suite (a web application security testing tool,
-- [**41**Star][30d] [C] [zhichao281/duilib-miniblinkbrowser](https://github.com/zhichao281/duilib-miniblinkbrowser) 用duilib做的miniblink的浏览器
+- [**41**Star][4m] [C] [zouxianyu/physicalmemoryrw](https://github.com/zouxianyu/physicalmemoryrw) the basic version of the ring0 physical memory read/write tool
+- [**41**Star][1m] [C] [zhichao281/duilib-miniblinkbrowser](https://github.com/zhichao281/duilib-miniblinkbrowser) 用duilib做的miniblink的浏览器
- [**41**Star][5y] [C++] [zer0mem/hypervisor](https://github.com/zer0mem/hypervisor) microVM
-- [**41**Star][3y] [C] [yosqueoy/ditsnap](https://github.com/yosqueoy/ditsnap) An inspection tool for Active Directory database
- [**41**Star][2y] [Py] [yingshang/hack](https://github.com/yingshang/hack) crawl hackerone reports
- [**41**Star][2y] [Shell] [xtiankisutsa/twiga](https://github.com/xtiankisutsa/twiga) twiga:枚举 Android 设备,获取了解其内部部件和漏洞利用的信息
- [**41**Star][2y] [Shell] [xaqron/stunnel](https://github.com/xaqron/stunnel) Wrapping openvpn with stunnel
-- [**41**Star][4m] [Py] [x64dbg/x64dbgpylib](https://github.com/x64dbg/x64dbgpylib) Port of windbglib to x64dbgpy, in an effort to support mona.py in x64dbg.
+- [**41**Star][5m] [Py] [x64dbg/x64dbgpylib](https://github.com/x64dbg/x64dbgpylib) Port of windbglib to x64dbgpy, in an effort to support mona.py in x64dbg.
+- [**41**Star][5d] [Go] [x-way/iptables-tracer](https://github.com/x-way/iptables-tracer) Insert trace-points into the running configuration to observe the path of packets through the iptables chains.
- [**41**Star][3y] [Perl] [wireghoul/lbmap](https://github.com/wireghoul/lbmap) Advanced HTTP fingerprinting PoC
-- [**41**Star][7y] [C++] [vlad902/findcrypt2-with-mmx](https://github.com/vlad902/findcrypt2-with-mmx) IDA Pro findcrypt2 plug-in with MMX AES instruction finding support
+- [**41**Star][1y] [C] [wanttobeno/dllprotect](https://github.com/wanttobeno/dllprotect) dll文件加解密和内存加载
+- [**41**Star][1y] [Py] [v1v1/sleight](https://github.com/v1v1/sleight) Empire HTTP(S) C2 redirector setup script
- [**41**Star][1y] [C++] [userexistserror/dllloadershellcode](https://github.com/userexistserror/dllloadershellcode) Shellcode to load an appended Dll
+- [**41**Star][1y] [traceflight/android-malware-datasets](https://github.com/traceflight/android-malware-datasets) Popular Android malware datasets
+- [**41**Star][4m] [Lua] [theherogac/tf-card-plugin-tool](https://github.com/theherogac/tf-card-plugin-tool) TF Card Plugin Tool is an excellent tool developed with the OneLua Team interpreter that allows you to simplify the installation and management of the drivers of the SD2VITA adapter and of the official PSVITA memory in the ux0: / uma0 paths
- [**41**Star][2y] [HTML] [thehackingsage/fluxion](https://github.com/thehackingsage/fluxion) WiFi Cracking Tool (Using Evil Twin Attack) With Some Modification. (Only For Legal Purposes)
- [**41**Star][10m] [C++] [thebabush/dumb-obfuscator](https://github.com/thebabush/dumb-obfuscator) Tutorial on how to write the dumbest obfuscator I could think of.
-- [**41**Star][8m] [C#] [thaisenpm/loader3](https://github.com/thaisenpm/loader3) A self leak of a loader I sold on Selly for easy money to open a business. I got enough, it was leaked to shit. Enjoy
- [**41**Star][3y] [Py] [tengzhangchao/websniff](https://github.com/tengzhangchao/websniff) 局域网http流量嗅探,并获取登陆的账号密码
- [**41**Star][4y] [Py] [techwizrd/gitkraken](https://github.com/techwizrd/gitkraken) A Git client for the GNOME Desktop.
+- [**41**Star][3m] [Shell] [tasket/qubes-vm-hardening](https://github.com/tasket/qubes-vm-hardening) Fend off malware at Qubes VM startup
- [**41**Star][2y] [Py] [talos-vulndev/fuzzflow](https://github.com/talos-vulndev/fuzzflow)
- [**41**Star][1y] [Py] [spiderlabs/firework](https://github.com/spiderlabs/firework) Firework is a proof of concept tool to interact with Microsoft Workplaces creating valid files required for the provisioning process.
- [**41**Star][8m] [Shell] [sonofagl1tch/awsdetonationlab](https://github.com/sonofagl1tch/awsdetonationlab) This script is used to generate some basic detections of the aws security services
- [**41**Star][4y] [ApacheConf] [smikims/arpspoof](https://github.com/smikims/arpspoof) Performs an ARP spoofing attack using the Linux kernel's raw sockets
+- [**41**Star][3y] [PS] [sikkandar-sha/sec-audit](https://github.com/sikkandar-sha/sec-audit) PowerShell Script for Windows Server Compliance / Security Configuration Audit
- [**41**Star][4y] [C] [sesuperuser/super-bootimg](https://github.com/sesuperuser/super-bootimg) Tools to edit Android boot.img. NDK buildable, to be usable in an update.zip
+- [**41**Star][7m] [C] [sensepost/frida-windows-playground](https://github.com/sensepost/frida-windows-playground) A collection of Frida hooks for experimentation on Windows platforms.
- [**41**Star][2y] [C] [seemoo-lab/nexmon_debugger](https://github.com/seemoo-lab/nexmon_debugger) Debugger with hardware breakpoints and memory watchpoints for BCM4339 Wi-Fi chips
- [**41**Star][10m] [Java] [secdec/attack-surface-detector-burp](https://github.com/secdec/attack-surface-detector-burp) The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters
- [**41**Star][1y] [seadog007/noxctf-2018-psrf-as-pwn](https://github.com/seadog007/noxctf-2018-psrf-as-pwn)
- [**41**Star][3y] [Java] [scriptjunkie/kcap](https://github.com/scriptjunkie/kcap)
- [**41**Star][2y] [Py] [scrapbird/sarlacc](https://github.com/scrapbird/sarlacc) SMTP server / sinkhole for collecting spam
-- [**41**Star][3y] [KiCad Layout] [salmg/magspoofpi](https://github.com/salmg/magspoofpi) MagSpoof for Raspberry PI GPIO
-- [**41**Star][6m] [Visual Basic] [s1egesystems/ghostsquadhackers-javascript-encrypter-encoder](https://github.com/s1egesystems/ghostsquadhackers-javascript-encrypter-encoder) Encrypt/Encode your Javascript code. (Windows Scripting)
- [**41**Star][3y] [C++] [rootkitsmm/cve-2016-0040](https://github.com/rootkitsmm/cve-2016-0040) Exploiting CVE-2016-0040 uninitialized pointer
+- [**41**Star][2y] [C#] [rappayne/webgoat.net](https://github.com/rappayne/webgoat.net) OWASP's official repository for WebGoat (ASP.NET version)
- [**41**Star][2y] [Py] [rapid7/vm-automation](https://github.com/rapid7/vm-automation) Created to simplify interactions with virtual machines
- [**41**Star][2m] [Shell] [r0bag/pentest](https://github.com/r0bag/pentest)
+- [**41**Star][3y] [PS] [proxb/serverinventoryreport](https://github.com/proxb/serverinventoryreport) A set of scripts to create an inventory report using PowerShell, SQL and WPF
- [**41**Star][3y] [Py] [ph4r05/kismet-deauth-wpa2-handshake-plugin](https://github.com/ph4r05/kismet-deauth-wpa2-handshake-plugin) Python plugin for Kismet to perform deauthentication to collect WPA2 handshakes
- [**41**Star][2y] [Py] [oways/sa-core-2018-004](https://github.com/oways/sa-core-2018-004) SA-CORE-2018-004 POC #drupalgeddon3
- [**41**Star][2m] [C#] [outflanknl/net-gpppassword](https://github.com/outflanknl/net-gpppassword) .NET implementation of Get-GPPPassword. Retrieves the plaintext password and other information for accounts pushed through Group Policy Preferences.
- [**41**Star][2y] [oscarakaelvis/game-of-thrones-hacking-ctf](https://github.com/oscarakaelvis/game-of-thrones-hacking-ctf) Game of Thrones hacking CTF (Capture the flag)
- [**41**Star][2y] [JS] [opsxcq/exploit-cve-2016-6515](https://github.com/opsxcq/exploit-cve-2016-6515) OpenSSH remote DOS exploit and vulnerable container
+- [**41**Star][3y] [Py] [opendns/og-miner](https://github.com/opendns/og-miner) OpenDNS Graph Miner
- [**41**Star][2y] [Py] [ntddk/virustream](https://github.com/ntddk/virustream) A script to track malware IOCs with OSINT on Twitter.
- [**41**Star][2y] [CSS] [nourabusoud/password-genie](https://github.com/nourabusoud/password-genie)
- [**41**Star][5y] [Py] [nimai/mptcp-scapy](https://github.com/nimai/mptcp-scapy) MPTCP firewall tester based on scapy
- [**41**Star][1y] [Py] [neverlovelynn/chrome_headless_xss](https://github.com/neverlovelynn/chrome_headless_xss) A plugin to check xss by using chrome_headless
- [**41**Star][2y] [ASP] [netspi/cmdsql](https://github.com/netspi/cmdsql)
-- [**41**Star][5y] [Py] [nanopony/apache-scalp](https://github.com/nanopony/apache-scalp) Scalp!/Anathema is a log analyzer for web server (Apache, nginx) [Python3]
+- [**41**Star][11m] [C] [netmap-unipi/netmap-tutorial](https://github.com/netmap-unipi/netmap-tutorial) Netmap tutorial at SIGCOMM 2017 and AsiaBSDCon 2018
+- [**41**Star][3y] [nao-sec/rigek](https://github.com/nao-sec/rigek) Analyzing Rig Exploit Kit
- [**41**Star][4y] [Py] [muodov/sqlmapchik](https://github.com/muodov/sqlmapchik) cross-platform sqlmap GUI aimed to mobile devices
+- [**41**Star][2y] [Perl] [mtve/yazecminer](https://github.com/mtve/yazecminer) yet another ZEC miner
- [**41**Star][4y] [JS] [moloch--/cve-2016-1764](https://github.com/moloch--/cve-2016-1764) Extraction of iMessage Data via XSS
- [**41**Star][2y] [minisafe/microweb](https://github.com/minisafe/microweb) MicroScan 的web端,正在改bug
-- [**41**Star][1y] [C#] [micli/netcoredebugging](https://github.com/micli/netcoredebugging) A repository maintains the book of ".NET Core application debugging" sample code.
-- [**41**Star][27d] [PHP] [mddanish/vulnerable-otp-application](https://github.com/mddanish/vulnerable-otp-application) Vulnerable OTP/2FA Application written in PHP using Google Authenticator
+- [**41**Star][29d] [PHP] [mddanish/vulnerable-otp-application](https://github.com/mddanish/vulnerable-otp-application) Vulnerable OTP/2FA Application written in PHP using Google Authenticator
- [**41**Star][6y] [Shell] [masterbutcher/kali-cleaner](https://github.com/masterbutcher/kali-cleaner) Little cleaner script for Kali linux.Clean apt cache,Removing old config files,Removing old kernels,Emptying every trashes.
- [**41**Star][4m] [maecproject/malware-behaviors](https://github.com/maecproject/malware-behaviors) A taxonomy and dictionary of malware behaviors.
-- [**41**Star][5m] [C++] [lianglixin/sksocks](https://github.com/lianglixin/sksocks) SKSocks, for proxy, firewall penetration, data encryption and speeding up internet accessing.
+- [**41**Star][8m] [Py] [linuxacademy/la-aws-security_specialty](https://github.com/linuxacademy/la-aws-security_specialty) Learning Activities for the AWS Security Specialty Course
+- [**41**Star][4y] [C++] [lingerhk/0net](https://github.com/lingerhk/0net) 一个简单的Windows远程控制后门
- [**41**Star][7m] [Py] [koboi137/darksplitz](https://github.com/koboi137/darksplitz) Exploit Framework
- [**41**Star][4y] [C] [kitctf/nginxpwn](https://github.com/kitctf/nginxpwn) Exploitation Training -- CVE-2013-2028: Nginx Stack Based Buffer Overflow
- [**41**Star][3y] [C] [killswitch-gui/hotload-driver](https://github.com/killswitch-gui/hotload-driver) C++
- [**41**Star][3y] [C] [kanglictf/afl-qai](https://github.com/kanglictf/afl-qai) A demo project for AFL with QEMU Augmented Instrumentation (qai)
-- [**41**Star][15d] [PowerShell] [kacos2000/win10](https://github.com/kacos2000/win10) Win 10 related research
-- [**41**Star][1y] [Java] [k0r0pt/project-tauro](https://github.com/k0r0pt/project-tauro) A Router WiFi key recovery/cracking tool with a twist.
- [**41**Star][3y] [C] [jzdziarski/mod_evasive](https://github.com/jzdziarski/mod_evasive) Apache mod_evasive module
+- [**41**Star][1y] [Py] [jpcertcc/impfuzzy](https://github.com/jpcertcc/impfuzzy) Fuzzy Hash calculated from import API of PE files
+- [**41**Star][2m] [Java] [jenkinsci/parameterized-scheduler-plugin](https://github.com/jenkinsci/parameterized-scheduler-plugin) A Jenkins Plugin to support setting parameters in the build schedule
- [**41**Star][3y] [Shell] [jbreed/apkinjector](https://github.com/jbreed/apkinjector) Android APK Antivirus evasion for msfvenom generated payloads to inject into another APK file for phishing attacks.
- [**41**Star][2y] [Py] [inaz2/unico](https://github.com/inaz2/unico) Unicorn PE function runner
- [**41**Star][5m] [Go] [icchy/wctf2019-gtf](https://github.com/icchy/wctf2019-gtf) WCTF2019 challenge: Gyotaku The Flag
-- [**41**Star][7d] [C] [horsicq/pex64dbg](https://github.com/horsicq/pex64dbg) pe viewer
+- [**41**Star][2d] [C] [horsicq/pex64dbg](https://github.com/horsicq/pex64dbg) pe viewer
- [**41**Star][7m] [hook-s3c/cve-2019-0708-poc](https://github.com/hook-s3c/cve-2019-0708-poc) proof of concept exploit for Microsoft Windows 7 and Server 2008 RDP vulnerability
- [**41**Star][2y] [Py] [guptachetan1997/crawling-projects](https://github.com/guptachetan1997/crawling-projects) Web scraping and automation using python
- [**41**Star][2y] [Ruby] [gabamnml/hoper](https://github.com/gabamnml/hoper) Security tool to trace URL's jumps across the rel links to obtain the last URL
@@ -12945,127 +13824,132 @@ networking routines
- [**41**Star][3m] [Swift] [frida/frida-swift](https://github.com/frida/frida-swift) Frida Swift bindings
- [**41**Star][6y] [freewaf/waf-anti-tamper](https://github.com/freewaf/waf-anti-tamper) Open Source Web Application Firewall Anti Tamper
- [**41**Star][9m] [Shell] [forte-research/forte-fuzzbench](https://github.com/forte-research/forte-fuzzbench) FoRTE-Research's fuzzing benchmarks
+- [**41**Star][2y] [Java] [fooock/jshodan](https://github.com/fooock/jshodan) Powerful Shodan API client using RxJava and Retrofit
- [**41**Star][3y] [Py] [fnzv/trsh](https://github.com/fnzv/trsh) trsh:使用电报 API 与 Linux 服务器通信,Python编写。
- [**41**Star][7y] [Py] [flyr4nk/xssscaner](https://github.com/flyr4nk/xssscaner) Xss Scaner
- [**41**Star][2y] [C++] [feruxmax/meltdown](https://github.com/feruxmax/meltdown) Meltdown/Spectre experiments
-- [**41**Star][7d] [C++] [equalitie/ouinet](https://github.com/equalitie/ouinet) Library to enable decentralized web requests
+- [**41**Star][3d] [C++] [equalitie/ouinet](https://github.com/equalitie/ouinet) Library to enable decentralized web requests
- [**41**Star][2y] [Go] [empty-nest/emptynest](https://github.com/empty-nest/emptynest) emptynest:基于插件的 C2 服务器框架。其目标不是取代某些强大的工具(例如 Empire、Metasploit、CobaltStrike),而是创建一个支持框架,以便为自定义 agents 快速创建小型、专用的 handlers
-- [**41**Star][8m] [Java] [dxsdyhm/gwelldemo](https://github.com/dxsdyhm/gwelldemo) a demo to use P2P-Core
+- [**41**Star][9m] [Java] [dxsdyhm/gwelldemo](https://github.com/dxsdyhm/gwelldemo) a demo to use P2P-Core
- [**41**Star][3y] [Py] [dnlongen/reglister](https://github.com/dnlongen/reglister) Recurse through a registry, identifying values with large data -- a registry malware hunter
-- [**41**Star][3m] [Py] [dhn/osee](https://github.com/dhn/osee) Collection of resources for my preparation to take the OSEE certification.
- [**41**Star][3y] [Py] [devttys0/botox](https://github.com/devttys0/botox) SIGSTOPing ELF binaries since 0x7E1
- [**41**Star][7m] [Rust] [dentrax/netlyser](https://github.com/dentrax/netlyser) Lightweight, a simple yet, Presence Detection Tool written in Rust, based on nmap, built for UNIX, made with <3
+- [**41**Star][2m] [Shell] [denizparlak/hayat](https://github.com/denizparlak/hayat) Google Cloud Platform ~ Auditing & Hardening Script
- [**41**Star][8m] [deep-security/aws-waf](https://github.com/deep-security/aws-waf) Deep Security's APIs make it simple to integration with a variety of AWS Services
- [**41**Star][2y] [deadbits/analyst-casefile](https://github.com/deadbits/analyst-casefile) Maltego CaseFile entities for information security investigations, malware analysis and incident response
-- [**41**Star][1y] [PHP] [davidtavarez/pinky](https://github.com/davidtavarez/pinky) pinky - The PHP mini RAT (Remote Administration Tool)
-- [**41**Star][2y] [Py] [danmcinerney/smb-reverse-brute](https://github.com/danmcinerney/smb-reverse-brute) Async'ly gather unique usernames thru null SMB sessions and bruteforce them with 2 passwords
+- [**41**Star][20d] [C++] [danielkrupinski/anubis](https://github.com/danielkrupinski/anubis) Free open-source training software / cheat for Counter-Strike: Global Offensive, written in C.
- [**41**Star][3y] [Py] [crysys/membrane](https://github.com/crysys/membrane) Membrane: A Posteriori Detection of Malicious Code Loading by Memory Paging Analysis
- [**41**Star][3y] [Py] [crowdstrike/pyspresso](https://github.com/crowdstrike/pyspresso) The pyspresso package is a Python-based framework for debugging Java.
- [**41**Star][9y] [C++] [cr4sh/ptbypass-poc](https://github.com/cr4sh/ptbypass-poc) Bypassing code hooks detection in modern anti-rootkits via building faked PTE entries.
- [**41**Star][2y] [C] [cocoahuke/mackextdump](https://github.com/cocoahuke/mackextdump) mackextdump:从macOS中dump Kext信息
- [**41**Star][7m] [certcc/vulnerability-data-archive](https://github.com/certcc/vulnerability-data-archive) With the hope that someone finds the data useful, we're publishing an archive of almost all of the non-sensitive vulnerability information in our vulnerability reports database. See also
- [**41**Star][4y] [C++] [c4bbage/webrobot-v1.8.2](https://github.com/c4bbage/webrobot-v1.8.2) 网络安全检测工具WebRobot
+- [**41**Star][23d] [Lua] [c0nw0nk/nginx-lua-anti-ddos](https://github.com/c0nw0nk/nginx-lua-anti-ddos) A Anti-DDoS script to protect Nginx web servers using Lua with a HTML Javascript based authentication puzzle inspired by Cloudflare I am under attack mode an Anti-DDoS authentication page protect yourself from every attack type All Layer 7 Attacks Mitigating Historic Attacks DoS DoS Implications DDoS All Brute Force Attacks Zero day exploits Soc…
- [**41**Star][5y] [Py] [bones-codes/the_colonel](https://github.com/bones-codes/the_colonel) an experimental linux kernel module (rootkit) with a keylogger and built-in IRC bot
- [**41**Star][3y] [C] [bluec0re/reversing-radare2](https://github.com/bluec0re/reversing-radare2) A reversing series with radare2
- [**41**Star][2y] [JS] [bahmutov/ban-sensitive-files](https://github.com/bahmutov/ban-sensitive-files) Checks filenames to be committed against a library of filename rules to prevent sensitive files in Git
+- [**41**Star][3y] [Py] [backto17/sinahousecrawler](https://github.com/backto17/sinahousecrawler) 基于scrapy,scrapy-redis实现的一个分布式网络爬虫,爬取了新浪房产的楼盘信息及户型图片,实现了常用的爬虫功能需求.
- [**41**Star][1y] [C++] [baarsik/tauros-v2](https://github.com/baarsik/tauros-v2)
-- [**41**Star][15d] [SystemVerilog] [azonenberg/starshipraider](https://github.com/azonenberg/starshipraider) High performance embedded systems debug/reverse engineering platform
- [**41**Star][2y] [C++] [azerg/packerpe](https://github.com/azerg/packerpe) simple PE packer written in C++
+- [**41**Star][3y] [C++] [avdbg/saber](https://github.com/avdbg/saber) 《macOS软件安全与逆向分析》随书的调试器代码
- [**41**Star][1y] [C] [asm/deep_spectre](https://github.com/asm/deep_spectre) Deep learning side channel privileged memory reader
+- [**41**Star][5m] [Py] [arthastang/router-exploit-shovel](https://github.com/arthastang/router-exploit-shovel) Automated Application Generation for Stack Overflow Types on Wireless Routers
- [**41**Star][2y] [JS] [arno0x/reflectivednsexfiltrator](https://github.com/arno0x/reflectivednsexfiltrator) Data exfiltration using reflective DNS resolution covert channel
-- [**41**Star][5y] [C++] [anwarmohamed/packetyzer](https://github.com/anwarmohamed/packetyzer) Packetyzer is a high level library for C++ designed to make easier the forging and decoding of network packets. It has the ability to decode packets of most common network protocols, capture them and send them on the wire. This capability allows construction of tools that can probe, scan or attack networks.
+- [**41**Star][6m] [Perl] [anon6372098/fazscan](https://github.com/anon6372098/fazscan) | FazScan is a Perl program to do some vulnerability scanning and pentesting |
- [**41**Star][4y] [C] [android-rooting-tools/libpingpong_exploit](https://github.com/android-rooting-tools/libpingpong_exploit) CVE-2015-3636 exploit
- [**41**Star][2y] [Py] [andreafioraldi/pwntrace](https://github.com/andreafioraldi/pwntrace) Use ltrace with pwnlib.tubes.process instances, useful for heap exploitation. Pwntools rocks!
+- [**41**Star][1y] [Py] [alfa-group/robust-adv-malware-detection](https://github.com/alfa-group/robust-adv-malware-detection) Code repository for the paper "Adversarial Deep Learning for Robust Detection of Binary Encoded Malware"
- [**41**Star][2y] [Java] [alepacheco/androrw](https://github.com/alepacheco/androrw) PoC Ransomware for android
+- [**41**Star][1m] [Py] [agrawalsmart7/autorecon](https://github.com/agrawalsmart7/autorecon) 自动化渗透初期的一些手动工作,是我们可专注于主要目标
- [**41**Star][4y] [Py] [abdesslem/malwarehunter](https://github.com/abdesslem/malwarehunter) Static and automated/dynamic malware analysis
-- [**41**Star][4m] [Py] [4n4nk3/tinkerershell](https://github.com/4n4nk3/tinkerershell) A simple python reverse shell written just for fun.
+- [**40**Star][2y] [C++] [pgigioli/darknet_ros](https://github.com/pgigioli/darknet_ros) YOLO integration with ROS for real-time object detection
+- [**40**Star][12m] [HTML] [zkeeer/shadowsocks-manager](https://github.com/zkeeer/shadowsocks-manager) shadowsocks多用户管理,可视化管理,轻量级,一键安装shadowsocks和ssadmin,控制端口流量/速度,查看端口状态,修改ss配置
- [**40**Star][5y] [Lua] [asamy/forgottenmapeditor](https://github.com/asamy/forgottenmapeditor) Map editor written in lua for Open Tibia. Written with OtClient's framework.
-- [**40**Star][1y] [Py] [v2ray/v2ray-shell_alpha](https://github.com/v2ray/v2ray-shell_alpha) A GUI for V2Ray-core, written in PyQt5
-- [**40**Star][1y] [TypeScript] [icodesign/proxy-uri](https://github.com/icodesign/proxy-uri) Helper to generate/parse Shadowsocks(R)/HTTP(S) URI
+- [**40**Star][6y] [robertdavidgraham/hamster](https://github.com/robertdavidgraham/hamster) A proxy server for cookie sidejacking. Works with 'ferret'.
+- [**40**Star][1y] [TS] [icodesign/proxy-uri](https://github.com/icodesign/proxy-uri) Helper to generate/parse Shadowsocks(R)/HTTP(S) URI
- [**40**Star][5m] [C++] [avast/yaracpp](https://github.com/avast/yaracpp) C++ wrapper for YARA.
- [**40**Star][2y] [Py] [wibiti/evedec](https://github.com/wibiti/evedec) Eve Online decrypter/decompiler
-- [**40**Star][2y] [PowerShell] [jaredhaight/powerpunch](https://github.com/jaredhaight/powerpunch) A collection of PowerScripts for Pentesting
+- [**40**Star][2y] [PS] [jaredhaight/powerpunch](https://github.com/jaredhaight/powerpunch) A collection of PowerScripts for Pentesting
- [**40**Star][3y] [Ruby] [gallopsled/pwntools-binutils](https://github.com/gallopsled/pwntools-binutils) Building binutils for pwntools
-- [**40**Star][2y] [Makefile] [artem-panchenko/counter-strike-docker](https://github.com/artem-panchenko/counter-strike-docker) Docker image for Counter-Strike 1.6 server
+- [**40**Star][9d] [C#] [damonmohammadbagher/nativepayload_reverseshell](https://github.com/damonmohammadbagher/nativepayload_reverseshell) This is Simple C# Source code to Bypass almost "all" AVS, (kaspersky v19, Eset v12 v13 ,Trend-Micro v16, Comodo & Windows Defender Bypassed via this method Very Simple)
+- [**40**Star][6m] [C#] [guibacellar/dnci](https://github.com/guibacellar/dnci) DNCI - Dot Net Code Injector
- [**40**Star][1y] [Shell] [nick-the-greek/aerial](https://github.com/nick-the-greek/aerial) Multi-mode wireless LAN Based on a Software Access point for Kali Linux.
-- [**40**Star][2y] [Py] [bcopeland/speccy](https://github.com/bcopeland/speccy) Visualization tool for ath spectral scan
-- [**40**Star][18d] [Go] [abguthrie/goquery](https://github.com/abguthrie/goquery) Provide a shell like interface by utilizing osquery's distributed API
+- [**40**Star][5y] [Py] [flankerhqd/wifimonster](https://github.com/flankerhqd/wifimonster) Wifi sniffing and hijacking tool
- [**40**Star][1y] [Ruby] [trailofbits/rubysec](https://github.com/trailofbits/rubysec) RubySec Field Guide
+- [**40**Star][2d] [thespeedx/proxy-list](https://github.com/TheSpeedX/PROXY-List) Get PROXY List that gets updated everyday
- [**40**Star][1y] [HTML] [raidandfade/hacktoberchallenges2018](https://github.com/RaidAndFade/HacktoberChallenges2018) Welcome! I need some help making my list... Learn how in the README
- [**40**Star][5y] [Java] [paloaltonetworks/installerhijackingvulnerabilityscanner](https://github.com/PaloAltoNetworks/InstallerHijackingVulnerabilityScanner)
+- [**40**Star][2m] [Py] [nerrorsec/googledorker](https://github.com/nerrorsec/GoogleDorker) This is a simple tool to automate google hacking when doing web penetration testing or bug hunting.
- [**40**Star][4m] [Py] [gh0stkey/jsonandhttpp](https://github.com/gh0stkey/JSONandHTTPP) Burp Suite Plugin: Convert the json text that returns the body into HTTP request parameters.
- [**40**Star][4y] [Lua] [aoncyberlabs/nmap-scripts](https://github.com/AonCyberLabs/Nmap-Scripts)
-- [**40**Star][3y] [Py] [cylance/markovobfuscate](https://github.com/cylance/MarkovObfuscate) Use Markov Chains to obfuscate data as other data
- [**40**Star][3y] [Ruby] [fsecurelabs/honeypot_recipes](https://github.com/FSecureLABS/honeypot_recipes) A chef cookbook which can be used to quickly deploy a high interaction honeypot, using the sysdig and falco tools
- [**40**Star][2y] [JS] [auth0-blog/hapi-jwt-authentication](https://github.com/auth0-blog/hapi-jwt-authentication)
+- [**40**Star][7d] [Dockerfile] [crytic/eth-security-toolbox](https://github.com/crytic/eth-security-toolbox) A Docker container preconfigured with all of the Trail of Bits Ethereum security tools.
- [**40**Star][10m] [scheme] [aki helin/radamsa](https://gitlab.com/akihe/radamsa)
-- [**40**Star][4m] [C] [zouxianyu/physicalmemoryrw](https://github.com/zouxianyu/physicalmemoryrw) the basic version of the ring0 physical memory read/write tool
-- [**40**Star][1m] [C] [zhangboyang/pal3patch](https://github.com/zhangboyang/pal3patch) 《仙剑奇侠传三》《仙剑奇侠传三外传·问情篇》分辨率补丁
- [**40**Star][3y] [C++] [zer0mem0ry/manualmap](https://github.com/zer0mem0ry/manualmap) A Simple demonstration of manual dll injector
- [**40**Star][2y] [Shell] [zephrfish/attackdeploy](https://github.com/zephrfish/attackdeploy) Scripts for Deploying new server
- [**40**Star][3y] [Lua] [z-0ne/scans2-045-nmap](https://github.com/z-0ne/scans2-045-nmap) Struts2 S2-045-Nmap NSE script
- [**40**Star][2y] [C++] [yifengyou/code-virtualization-and-automation-analysis](https://github.com/yifengyou/code-virtualization-and-automation-analysis) 代码虚拟化与自动化分析
- [**40**Star][3y] [Py] [xiphosresearch/phuzz](https://github.com/xiphosresearch/phuzz) Find exploitable PHP files by parameter fuzzing and function call tracing
- [**40**Star][3y] [Py] [xiphosresearch/dnsbrute](https://github.com/xiphosresearch/dnsbrute) DNS Sub-domain brute forcer, in Python + gevent
+- [**40**Star][3y] [HTML] [xiaoyanguoke/ciahackingtools](https://github.com/xiaoyanguoke/ciahackingtools) WikiLeaks Vault 7 CIA Hacking Tools
+- [**40**Star][14d] [PHP] [xchwarze/cain](https://github.com/xchwarze/cain) Password recovery tool for Microsoft Operating Systems. It allows easy recovery of various kind of passwords by sniffing the network, cracking encrypted passwords using Dictionary, Brute-Force and Cryptanalysis attacks, recording VoIP conversations, decoding scrambled passwords, recovering wireless network keys, revealing password boxes, uncover…
- [**40**Star][3y] [C++] [x64dbg/interobfu](https://github.com/x64dbg/interobfu) Intermediate x86 instruction representation for use in obfuscation/deobfuscation.
- [**40**Star][3y] [PHP] [wso-shell/wso](https://github.com/wso-shell/wso) WSO SHELL , wso shell , WSO.php , wso.php , webshell , wso-shell веб-шелл , шелл , WSO2.5 , WSO2.5.1 , WSO2.php , Shell download, C99 , r57 , bypass shell , P.A.S. (php web-shell) , PPS 4.0 , Скачать WSO Web Shell , Скачать wso.php , Скачать Web Shell
- [**40**Star][6y] [C++] [wirepair/idapinlogger](https://github.com/wirepair/idapinlogger) Logs instruction hits to a file which can be fed into IDA Pro to highlight which instructions were called.
- [**40**Star][10m] [C++] [wildbydesign/appcontainer-launcher](https://github.com/WildByDesign/AppContainer-Launcher) AppContainer and LPAC (Less Privileged AppContainer) Launcher with Capabilities
- [**40**Star][3y] [C] [wi-fi-analyzer/wifi-arsenal](https://github.com/wi-fi-analyzer/wifi-arsenal) WiFi arsenal
-- [**40**Star][1y] [C] [wanttobeno/dllprotect](https://github.com/wanttobeno/dllprotect) dll文件加解密和内存加载
+- [**40**Star][2y] [C#] [wearelegal/cinarat](https://github.com/wearelegal/cinarat) CinaRAT - Cina Is Not A Remote Administration Tool
+- [**40**Star][5d] [Py] [wangyihang/pwnme](https://github.com/wangyihang/pwnme) 二进制渗透题目汇总
- [**40**Star][1y] [Py] [wangyihang/codiad-remote-code-execute-exploit](https://github.com/wangyihang/codiad-remote-code-execute-exploit) A simple exploit to execute system command on codiad
- [**40**Star][1y] [Shell] [waja/maldetect](https://github.com/waja/maldetect) Debian packaging of Linux Malware Detect (
- [**40**Star][9m] [HTML] [voidhack/write-ups](https://github.com/voidhack/write-ups)
- [**40**Star][2y] [Py] [villanch/g3ar](https://github.com/villanch/g3ar) 渗透测试编程工具包
- [**40**Star][4m] [JS] [vigneshsrao/cve-2019-11707](https://github.com/vigneshsrao/cve-2019-11707) Exploit code for CVE-2019-11707 on Firefox 66.0.3 running on Ubuntu
-- [**40**Star][1y] [Py] [v1v1/sleight](https://github.com/v1v1/sleight) Empire HTTP(S) C2 redirector setup script
-- [**40**Star][1y] [traceflight/android-malware-datasets](https://github.com/traceflight/android-malware-datasets) Popular Android malware datasets
+- [**40**Star][8m] [Go] [txthinking/socks5](https://github.com/txthinking/socks5) SOCKS Protocol Version 5 Library in Go
- [**40**Star][4m] [Py] [tmr232/brutal-ida](https://github.com/tmr232/brutal-ida) Block Redo & Undo To Achieve Legacy IDA
-- [**40**Star][8d] [PowerShell] [thecjw/scoop-retools](https://github.com/thecjw/scoop-retools) Scoop bucket for reverse engineering tools
+- [**40**Star][8m] [C#] [thaisenpm/loader3](https://github.com/thaisenpm/loader3) A self leak of a loader I sold on Selly for easy money to open a business. I got enough, it was leaked to shit. Enjoy
+- [**40**Star][3y] [HTML] [tennc/1000php](https://github.com/tennc/1000php) 1000个PHP代码审计案例(2016.7以前乌云公开漏洞)
- [**40**Star][4y] [Elixir] [tatsuya6502/recon_ex](https://github.com/tatsuya6502/recon_ex) Elixir wrapper for Recon, tools to diagnose Erlang VM safely in production
-- [**40**Star][3m] [Shell] [tasket/qubes-vm-hardening](https://github.com/tasket/qubes-vm-hardening) Fend off malware at Qubes VM startup
- [**40**Star][7y] [C++] [taintdroid/android_platform_dalvik](https://github.com/taintdroid/android_platform_dalvik) Mirror of git://android.git.kernel.org/platform/dalvik.git with TaintDroid additions (mirror lags official Android)
- [**40**Star][3y] [Py] [stratosphereips/stratospheretestingframework](https://github.com/stratosphereips/stratospheretestingframework) The stratosphere testing framework is mean to help in the researching and verification of the behavioral models used by the Stratoshpere IPS.
-- [**40**Star][4m] [C] [stephenrkell/trap-syscalls](https://github.com/stephenrkell/trap-syscalls) Monitor, rewrite and/or otherwise trap system calls... on Linux/x86-64 only, for now.
- [**40**Star][8y] [C] [stephenfewer/ollyheaptrace](https://github.com/stephenfewer/ollyheaptrace) OllyHeapTrace is a plugin for OllyDbg to trace the heap operations being performed by a process.
- [**40**Star][6y] [C++] [stealth/fernmelder](https://github.com/stealth/fernmelder) async mass DNS resolver
-- [**40**Star][3y] [PowerShell] [sikkandar-sha/sec-audit](https://github.com/sikkandar-sha/sec-audit) PowerShell Script for Windows Server Compliance / Security Configuration Audit
+- [**40**Star][6y] [sinsoul/sinsoulwebremotecontrol](https://github.com/sinsoul/sinsoulwebremotecontrol) 在任何地方通过网页控制和管理自己的计算设备
- [**40**Star][6y] [Py] [shadsidd/automated-xss-finder](https://github.com/shadsidd/automated-xss-finder) Automated XSS Finder
+- [**40**Star][2m] [Go] [sensepost/go-out](https://github.com/sensepost/go-out)
- [**40**Star][2y] [Py] [securifera/cve-2018-6546-exploit](https://github.com/securifera/cve-2018-6546-exploit) CVE-2018-6546-Exploit
- [**40**Star][5y] [Py] [scottjpack/shellshock_scanner](https://github.com/scottjpack/shellshock_scanner) Python Scanner for "ShellShock" (CVE-2014-6271)
- [**40**Star][2y] [HTML] [scorelab/androphsy](https://github.com/scorelab/androphsy) An Open Source Mobile Forensics Investigation Tool for Android Platform
+- [**40**Star][11m] [Py] [s2e/pykvm](https://github.com/s2e/pykvm) A tiny KVM hypervisor written in Python
- [**40**Star][10m] [C] [s-macke/starflight-reverse](https://github.com/s-macke/starflight-reverse) Reversed engineered game Starflight (1986)
- [**40**Star][11m] [C++] [rr-/crc-manipulator](https://github.com/rr-/crc-manipulator) Change CRC checksums of your files.
- [**40**Star][4y] [Py] [rooklabs/milano](https://github.com/rooklabs/milano) Hacking Team Malware Detection Utility
- [**40**Star][2y] [Py] [robputt796/py-dns-over-https-proxy](https://github.com/robputt796/py-dns-over-https-proxy) Provides a simple Python based proxy for running DNS over HTTPS to Google's DNS over HTTPS service.
- [**40**Star][3y] [C++] [regehr/compiler-crashes](https://github.com/regehr/compiler-crashes) 60 artisanal compiler crashes
-- [**40**Star][10m] [M4] [raspberrypi/usbbootgui](https://github.com/raspberrypi/usbbootgui) GUI for booting a Raspberry Pi device like Pi Zero or compute module as a device
-- [**40**Star][2y] [C#] [rappayne/webgoat.net](https://github.com/rappayne/webgoat.net) OWASP's official repository for WebGoat (ASP.NET version)
- [**40**Star][3y] [Lua] [r00t-3xp10it/rc-exploiter](https://github.com/r00t-3xp10it/rc-exploiter) NOT SUPORTED ANYMORE -- try resource_files repository (mosquito)
- [**40**Star][5m] [Py] [q3k/tpm2137](https://github.com/q3k/tpm2137) Hardware task for WCTF2019
-- [**40**Star][10d] [Shell] [pyllyukko/harden.sh](https://github.com/pyllyukko/harden.sh) Slackware hardening script
+- [**40**Star][7d] [Shell] [pyllyukko/harden.sh](https://github.com/pyllyukko/harden.sh) Slackware hardening script
- [**40**Star][6y] [Ruby] [pwnieexpress/metasploit-framework](https://github.com/pwnieexpress/metasploit-framework) Unofficial fork of the Rapid7 metasploit-framework, pruned for minimal size.
-- [**40**Star][3y] [PowerShell] [proxb/serverinventoryreport](https://github.com/proxb/serverinventoryreport) A set of scripts to create an inventory report using PowerShell, SQL and WPF
- [**40**Star][9m] [olafhartong/detection-sources](https://github.com/olafhartong/detection-sources)
- [**40**Star][1y] [Py] [ocadotechnology/gcp-census](https://github.com/ocadotechnology/gcp-census) GAE python based app which regularly collects information about GCP resources and stores them in BigQuery
- [**40**Star][5y] [Py] [neuman/python-carteblanche](https://github.com/neuman/python-carteblanche) Module to align code with thoughts of users and designers. Also magically handles navigation and permissions.
-- [**40**Star][10m] [C] [netmap-unipi/netmap-tutorial](https://github.com/netmap-unipi/netmap-tutorial) Netmap tutorial at SIGCOMM 2017 and AsiaBSDCon 2018
- [**40**Star][3y] [C] [nccgroup/triforceopenbsdfuzzer](https://github.com/nccgroup/triforceopenbsdfuzzer) System call fuzzing of OpenBSD amd64 using TriforceAFL (i.e. AFL and QEMU)
- [**40**Star][6y] [Py] [nccgroup/lapith](https://github.com/nccgroup/lapith) A simple Nessus results viewer
-- [**40**Star][3y] [nao-sec/rigek](https://github.com/nao-sec/rigek) Analyzing Rig Exploit Kit
- [**40**Star][2y] [n3uz/elastic-x-pack-crack](https://github.com/n3uz/elastic-x-pack-crack) 破解 x-pack 授权时间限制,白金版到2050年,仅做研究用途
- [**40**Star][1m] [Py] [n3k/pentest](https://github.com/n3k/pentest) Notes/Tools for pentesting
+- [**40**Star][13d] [mykings/security-study-tutorial](https://github.com/mykings/security-study-tutorial) Summary of online learning materials
- [**40**Star][2y] [Py] [mxmssh/idametrics](https://github.com/mxmssh/idametrics) static software complexity metrics collection
- [**40**Star][2y] [PHP] [mrsqar-ye/wpcrack](https://github.com/mrsqar-ye/wpcrack) wordpress hash cracker .
+- [**40**Star][3m] [Py] [momalab/icsref](https://github.com/momalab/icsref) A tool for reverse engineering industrial control systems binaries.
- [**40**Star][1y] [Py] [mnrkbys/vss_carver](https://github.com/mnrkbys/vss_carver) Carves and recreates VSS catalog and store from Windows disk image.
- [**40**Star][1y] [Java] [miwong/intellidroid](https://github.com/miwong/intellidroid) A targeted input generator for Android that improves the effectiveness of dynamic malware analysis.
-- [**40**Star][6m] [Batchfile] [meesong/nt-crucial-modules](https://github.com/meesong/nt-crucial-modules) Collect different versions of Crucial modules.
-- [**40**Star][10m] [PowerShell] [mburrough/pentestingazureapps](https://github.com/mburrough/pentestingazureapps) Script samples from the book Pentesting Azure Applications (2018, No Starch Press)
+- [**40**Star][3m] [Py] [mikeperry-tor/vanguards](https://github.com/mikeperry-tor/vanguards) Vanguards help guard you from getting vanned...
- [**40**Star][1y] [Shell] [mavrepis/shodanvulncheck](https://github.com/mavrepis/shodanvulncheck) bash script to enumerate vulnerabilities on specific year through Shodan API
+- [**40**Star][5m] [Lua] [mame82/misc](https://github.com/mame82/misc)
- [**40**Star][2y] [JS] [mafintosh/ws-to-tcp](https://github.com/mafintosh/ws-to-tcp) Proxy from WebSockets to TCP
- [**40**Star][2y] [Py] [m0rtem/mailfail](https://github.com/m0rtem/mailfail) Proof of Concept - Utilize misconfigured newsletter forms to spam / deny service to an inbox
- [**40**Star][3y] [Py] [lukasikic/kodi-backdoor-generator](https://github.com/lukasikic/kodi-backdoor-generator) Kodi Reverse Shell
-- [**40**Star][8m] [Py] [linuxacademy/la-aws-security_specialty](https://github.com/linuxacademy/la-aws-security_specialty) Learning Activities for the AWS Security Specialty Course
- [**40**Star][4y] [C] [lillypad/badger](https://github.com/lillypad/badger) A Swiss Army Knife for Windows Exploit Development.
- [**40**Star][3y] [PHP] [lcatro/xss-hunter](https://github.com/lcatro/xss-hunter) XSS hunter 收集Webview 页面上存在的反射,储存型XSS ,方便应急APP 和前端页面在发布时遇到XSS 安全问题..
- [**40**Star][1y] [Py] [lanjelot/ctfs](https://github.com/lanjelot/ctfs) notes and code on past CTFs
@@ -13074,11 +13958,12 @@ networking routines
- [**40**Star][11m] [C#] [kevingosse/windbg-extensions](https://github.com/kevingosse/windbg-extensions) Extensions for the new WinDbg
- [**40**Star][2y] [C++] [kelvinhack/notruth](https://github.com/kelvinhack/notruth)
- [**40**Star][2y] [Py] [karttoon/trigen](https://github.com/karttoon/trigen) Trigen is a Python script which uses different combinations of Win32 function calls in generated VBA to execute shellcode.
-- [**40**Star][7m] [PowerShell] [k2/scripting](https://github.com/k2/scripting) PS / Bash / Python / Other scripts For FUN!
-- [**40**Star][1y] [Py] [jpcertcc/impfuzzy](https://github.com/jpcertcc/impfuzzy) Fuzzy Hash calculated from import API of PE files
+- [**40**Star][3m] [Py] [karttoon/binsequencer](https://github.com/karttoon/binsequencer) BinSequencer is a script designed to find a common pattern of bytes within a set of samples and generate a YARA rule from the identified pattern.
+- [**40**Star][7m] [PS] [k2/scripting](https://github.com/k2/scripting) PS / Bash / Python / Other scripts For FUN!
+- [**40**Star][2y] [Java] [jwnie/proxyservice](https://github.com/jwnie/proxyservice) 抓取网上公开代理,维护可供爬虫使用的IP池,区分墙内墙外、http/https/socks代理。
+- [**40**Star][2m] [jsecurity101/windows-api-to-sysmon-events](https://github.com/jsecurity101/windows-api-to-sysmon-events) A repository that maps API calls to Sysmon Event ID's.
- [**40**Star][3y] [jonbruner/twitter-analysis](https://github.com/jonbruner/twitter-analysis) The original dataset for my 2013 article on Twitter's network patterns
- [**40**Star][11m] [Py] [jh00nbr/phishruffus](https://github.com/jh00nbr/phishruffus) Intelligent threat hunter and phishing servers
-- [**40**Star][2m] [Java] [jenkinsci/parameterized-scheduler-plugin](https://github.com/jenkinsci/parameterized-scheduler-plugin) A Jenkins Plugin to support setting parameters in the build schedule
- [**40**Star][9m] [Shell] [jceminer/cn_cpu_miner](https://github.com/jceminer/cn_cpu_miner) Cryptonote CPU Miner
- [**40**Star][2y] [Java] [ivianuu/contributer](https://github.com/ivianuu/contributer) Inject all types like views or a conductor controllers with @ContributesAndroidInjector
- [**40**Star][8y] [JS] [iriscouch/audit_couchdb](https://github.com/iriscouch/audit_couchdb) Detect security issues, large or small, in a CouchDB server
@@ -13086,23 +13971,27 @@ networking routines
- [**40**Star][1y] [C] [in7egral/taig8-ios-jailbreak-patchfinder](https://github.com/in7egral/taig8-ios-jailbreak-patchfinder) Analyzes a binary iOS kernel to determine function offsets and where to apply the canonical jailbreak patches.
- [**40**Star][3y] [Assembly] [ilovepp/firminsight](https://github.com/ilovepp/firminsight) Automatic collect firmwares from internet,decompress,find binary code,extract info,file relation and function relation
- [**40**Star][4y] [C++] [igorkorkin/hypervisorsdetection](https://github.com/igorkorkin/hypervisorsdetection) This is the first software system, which can detect a stealthy hypervisor and calculate several nested ones even under countermeasures.
-- [**40**Star][2m] [Py] [icanhasfay/pypwned](https://github.com/icanhasfay/pypwned) A Python client for the HaveIBeenPwned REST API
+- [**40**Star][3m] [Py] [icanhasfay/pypwned](https://github.com/icanhasfay/pypwned) A Python client for the HaveIBeenPwned REST API
+- [**40**Star][3d] [Erlang] [homas/ioc2rpz](https://github.com/homas/ioc2rpz) ioc2rpz is a place where threat intelligence meets DNS.
- [**40**Star][4y] [hexx0r/cve-2016-0051](https://github.com/hexx0r/cve-2016-0051)
- [**40**Star][3y] [C++] [hackshields/antivirus](https://github.com/hackshields/antivirus)
-- [**40**Star][12d] [grapheneos/vanadium](https://github.com/grapheneos/vanadium) Privacy and security enhanced releases of Chromium for GrapheneOS. Vanadium provides the WebView and standard user-facing browser on GrapheneOS. It depends on hardening in other GrapheneOS repositories and doesn't include patches not relevant to the build targets used on GrapheneOS.
+- [**40**Star][3y] [Py] [h0nus/spynoteshell](https://github.com/h0nus/spynoteshell) Simple Python tool for backdooring apks files (with meterpreter or shell of Metasploit)
+- [**40**Star][14d] [grapheneos/vanadium](https://github.com/grapheneos/vanadium) Privacy and security enhanced releases of Chromium for GrapheneOS. Vanadium provides the WebView and standard user-facing browser on GrapheneOS. It depends on hardening in other GrapheneOS repositories and doesn't include patches not relevant to the build targets used on GrapheneOS.
- [**40**Star][2y] [godaddy/yara-rules](https://github.com/godaddy/yara-rules) YARA rules for use with ProcFilter
+- [**40**Star][21d] [JS] [github/enable-security-alerts-sample](https://github.com/github/enable-security-alerts-sample) This repository contains a sample script which can be used to enable security vulnerability alerts in all of the repositories in a given organization.
- [**40**Star][2y] [C] [gamelinux/cxtracker](https://github.com/gamelinux/cxtracker) Connection Tracker is a passive network connection tracker for profiling, history, auditing and network discovery.
-- [**40**Star][2y] [Java] [fooock/jshodan](https://github.com/fooock/jshodan) Powerful Shodan API client using RxJava and Retrofit
+- [**40**Star][1y] [Shell] [g763007297/gqresign](https://github.com/g763007297/gqresign) ipa重签名(resign),只需一个证书的p12和一个mobileprovision文件就可以实现ipa的重签名
- [**40**Star][5y] [Py] [fireeye/chopshop](https://github.com/fireeye/chopshop) Protocol Analysis/Decoder Framework
- [**40**Star][2y] [Py] [fideliscyber/yalda](https://github.com/fideliscyber/yalda) yalda:分析文件,从中提取恶意数据(例如:URL)
- [**40**Star][4y] [C] [fi01/backdoor_mmap_tools](https://github.com/fi01/backdoor_mmap_tools) Unlock security module, obtain root privilege and so on.
- [**40**Star][2y] [Pascal] [felipedaragon/plua-xe](https://github.com/felipedaragon/plua-xe) Embed Lua into Delphi, FreePascal or Lazarus projects
+- [**40**Star][1y] [PHP] [farisv/cj2018-final-ctf](https://github.com/farisv/cj2018-final-ctf) Cyber Jawara 2018 Final - Attack & Defense CTF services environments based on Docker.
- [**40**Star][3y] [Py] [fabiobaroni/was](https://github.com/fabiobaroni/was) Automatic USB drive malware scanning tool for the security-minded person
- [**40**Star][6y] [JS] [evilpacket/redis-sha-crack](https://github.com/evilpacket/redis-sha-crack) node / redis sha hash cracker
- [**40**Star][5y] [evi1m0/webshell](https://github.com/evi1m0/webshell) This is a webshell open source project
- [**40**Star][2y] [c++] [embedi/meitools](https://github.com/embedi/meitools) meitools:通过 MEI 与英特尔管理引擎进行通信
- [**40**Star][3m] [Groovy] [elastic/elasticsearch-groovy](https://github.com/elastic/elasticsearch-groovy) Elasticsearch Groovy client
-- [**40**Star][6m] [Visual Basic] [dzzie/re_plugins](https://github.com/dzzie/re_plugins) misc reverse engineering plugins
+- [**40**Star][7m] [Visual Basic .NET] [dzzie/re_plugins](https://github.com/dzzie/re_plugins) misc reverse engineering plugins
- [IDASrvr](https://github.com/dzzie/re_plugins/tree/master/IDASrvr) wm_copydata IPC server running in IDA. allows you to send commands to IDA from another process to query data and control interface display
- [IDA_JScript](https://github.com/dzzie/re_plugins/tree/master/IDA_JScript) Script IDA in Javascript
- [IDA_JScript_w_DukDbg](https://github.com/dzzie/re_plugins/tree/master/IDA_JScript_w_DukDbg) same as IDA_JScript, but using the dukdbg.ocx as full on javascript debugger
@@ -13126,264 +14015,283 @@ networking routines
- [wininet_hooks](https://github.com/dzzie/re_plugins/tree/master/wininet_hooks) httpsendhook.dll hooks the following wininet api calls:HttpOpenRequest,InternetConnect,InternetReadFile,InternetCrackUrl,HttpSendRequest
- [**40**Star][10m] [C] [dzzie/hookexplorer](https://github.com/dzzie/hookexplorer) technical tool to analyze a process trying to find various types of runtime hooks. Interface and output is geared torwards security experts. Average users wont be able to decipher its output.
- [**40**Star][5y] [Go] [dutchcoders/troje](https://github.com/dutchcoders/troje) Troje is a honeypot built around lxc containers. It will run each connection with the service within a seperate lxc container.
-- [**40**Star][19d] [Py] [dhondta/rpl-attacks](https://github.com/dhondta/rpl-attacks) RPL attacks framework for simulating WSN with a malicious mote based on Contiki
-- [**40**Star][2m] [Shell] [denizparlak/hayat](https://github.com/denizparlak/hayat) Google Cloud Platform ~ Auditing & Hardening Script
+- [**40**Star][21d] [Py] [dhondta/rpl-attacks](https://github.com/dhondta/rpl-attacks) RPL attacks framework for simulating WSN with a malicious mote based on Contiki
- [**40**Star][1y] [Py] [debasishm89/dotnetfuzz](https://github.com/debasishm89/dotnetfuzz) A quick and dirty .NET "Deserialize_*" fuzzer based on James Forshaw's (@tiraniddo) DotNetToJScript.
- [**40**Star][8y] [C++] [dbtsai/libdai](https://github.com/dbtsai/libdai) A free and open source C++ library for Discrete Approximate Inference in graphical models
- [**40**Star][2y] [C] [david-reguera-garcia-dreg/lsrootkit](https://github.com/david-reguera-garcia-dreg/lsrootkit) Rootkit Detector for UNIX
-- [**40**Star][18d] [C++] [danielkrupinski/anubis](https://github.com/danielkrupinski/anubis) Free open-source training software / cheat for Counter-Strike: Global Offensive, written in C.
- [**40**Star][C] [d1w0u/arp-rootkit](https://github.com/d1w0u/arp-rootkit) An open source rootkit for the Linux Kernel to develop new ways of infection/detection.
- [**40**Star][3m] [Dockerfile] [cowrie/docker-cowrie](https://github.com/cowrie/docker-cowrie) Cowrie Docker GitHub repository
-- [**40**Star][3y] [PowerShell] [colemination/poweroutlook](https://github.com/colemination/poweroutlook) Sample code from Owning MS Outlook with Powershell
+- [**40**Star][3y] [PS] [colemination/poweroutlook](https://github.com/colemination/poweroutlook) Sample code from Owning MS Outlook with Powershell
- [**40**Star][9m] [Py] [christhecoolhut/rocket-shot](https://github.com/christhecoolhut/rocket-shot) Backwards program slice stitching for automatic CTF problem solving.
- [**40**Star][1y] [Py] [ccapton/brook-ok](https://github.com/ccapton/brook-ok) brook程序服务端配置程序,一键搭建brook / Shadowsocks / Socks5服务用于科学上网
- [**40**Star][8m] [C#] [azure/reverse-proxy-dotnet](https://github.com/azure/reverse-proxy-dotnet) Reverse Proxy agent
- [**40**Star][4y] [CoffeeScript] [atom/loophole](https://github.com/atom/loophole) A hack to enable use of libraries that depend on a basic form of eval in Atom with CSP enabled
- [**40**Star][2y] [Py] [aqcurate/lsb-steganography](https://github.com/aqcurate/lsb-steganography) Least-Significant-Bit tool for steganography
+- [**40**Star][5y] [C++] [anwarmohamed/packetyzer](https://github.com/anwarmohamed/packetyzer) Packetyzer is a high level library for C++ designed to make easier the forging and decoding of network packets. It has the ability to decode packets of most common network protocols, capture them and send them on the wire. This capability allows construction of tools that can probe, scan or attack networks.
- [**40**Star][10m] [anudeepnd/pihole-unbound](https://github.com/anudeepnd/pihole-unbound) Guide to setup Unbound recursive DNS resolver with Pi-Hole
-- [**40**Star][6m] [Perl] [anon6372098/fazscan](https://github.com/anon6372098/fazscan) | FazScan is a Perl program to do some vulnerability scanning and pentesting |
- [**40**Star][3y] [PHP] [ambulong/phpmyxss](https://github.com/ambulong/phpmyxss) A XSS Project
-- [**40**Star][1y] [Py] [alfa-group/robust-adv-malware-detection](https://github.com/alfa-group/robust-adv-malware-detection) Code repository for the paper "Adversarial Deep Learning for Robust Detection of Binary Encoded Malware"
- [**40**Star][4y] [Py] [alexbredo/honeypot-camera](https://github.com/alexbredo/honeypot-camera) observation camera honeypot
- [**40**Star][2y] [Py] [agustingianni/memrepl](https://github.com/agustingianni/memrepl) a frida based script that aims to help a researcher in the task of exploitation of memory corruption related bugs
-- [**40**Star][30d] [Py] [agrawalsmart7/autorecon](https://github.com/agrawalsmart7/autorecon) 自动化渗透初期的一些手动工作,是我们可专注于主要目标
- [**40**Star][2y] [JS] [agjmills/form-scrape](https://github.com/agjmills/form-scrape) form-scrape:示例chrome 扩展,以演示将JavaScript和html注入页面的危险
- [**40**Star][1y] [Shell] [adityashrm21/raspberrypi-packet-sniffer](https://github.com/adityashrm21/raspberrypi-packet-sniffer) An HTTP and HTTPS sniffing tool created using a Raspberry Pi
- [**40**Star][7m] [Py] [aaronsoria/panalizer](https://github.com/aaronsoria/panalizer)
- [**40**Star][2y] [C#] [aaaddress1/puzzcode](https://github.com/aaaddress1/puzzcode) simple compiler based on mingw to build uncrackable windows application against analysis tools
- [**40**Star][4y] [Java] [0ang3el/hqli-playground](https://github.com/0ang3el/hqli-playground)
+- [**39**Star][1y] [Py] [ysh329/darknet2caffe](https://github.com/ysh329/darknet2caffe) Convert Darknet model to Caffe's
+- [**39**Star][2y] [Go] [googlecloudplatform/stackdriver-reverse-proxy](https://github.com/googlecloudplatform/stackdriver-reverse-proxy) Simple HTTP proxy to automatically traces the incoming requests
+- [**39**Star][4y] [Py] [joxeankoret/tahh](https://github.com/joxeankoret/tahh) Source codes for "The Antivirus Hackers Handbook" book.
+- [**39**Star][4y] [Py] [honeynet/yapdns](https://github.com/honeynet/yapdns) YAPDNS
- [**39**Star][3y] [Py] [xl7dev/sectools](https://github.com/xl7dev/sectools) Pentests tools
+- [**39**Star][2m] [Py] [meituan-dianping/lyrebird-ios](https://github.com/meituan-dianping/lyrebird-ios) 本程序是Lyrebird插件,您可以在插件中快速查看已连接iOS设备的详细设备信息,截取屏幕快照,以及查看已连接设备的应用信息。
- [**39**Star][1y] [Py] [tarunkant/endpoint-finder](https://github.com/tarunkant/endpoint-finder) Finds the End-Points in JavaScript files
-- [**39**Star][9m] [Go] [zmap/zannotate](https://github.com/zmap/zannotate) Utility for annotating Internet datasets with contextual metadata (e.g., origin AS, MaxMind GeoIP2, reverse DNS, and WHOIS)
+- [**39**Star][10m] [Go] [zmap/zannotate](https://github.com/zmap/zannotate) Utility for annotating Internet datasets with contextual metadata (e.g., origin AS, MaxMind GeoIP2, reverse DNS, and WHOIS)
- [**39**Star][1y] [Perl] [cldrn/davtest](https://github.com/cldrn/davtest) davtest (improved)- Exploits WebDAV folders
-- [**39**Star][6m] [C#] [guibacellar/dnci](https://github.com/guibacellar/dnci) DNCI - Dot Net Code Injector
-- [**39**Star][2m] [amimo/goron](https://github.com/amimo/goron) Yet another llvm based obfuscator
+- [**39**Star][11m] [Java] [thelinuxchoice/droidcam](https://github.com/thelinuxchoice/droidcam) Script to generate an Android App to take photos from Cameras
+- [**39**Star][10m] [Kotlin] [cbeuw/cloak-android](https://github.com/cbeuw/cloak-android) Android client of Cloak
+- [**39**Star][2y] [Py] [liang2580/btpanel-ss](https://github.com/liang2580/btpanel-ss) 基于宝塔Linux面板的shadowsocks可视化管理插件
+- [**39**Star][15d] [Verilog] [lvd2/ay-3-8910_reverse_engineered](https://github.com/lvd2/ay-3-8910_reverse_engineered) The reverse-engineered AY-3-8910 chip. Transistor-level schematics, verilog model and a testbench with tools, that can render register dump files into .flac soundtrack.
+- [**39**Star][10m] [Java] [zhongxunking/ids](https://github.com/zhongxunking/ids) 高效的分布式id生成器,每个客户端实例tps可达到100万,服务端毫无压力。即使服务端宕机了,id生成依然可用。支持多数据中心,支持id加密。
- [**39**Star][5m] [Java] [scalesec/vulnado](https://github.com/scalesec/vulnado) Purposely vulnerable Java application to help lead secure coding workshops
- [**39**Star][3m] [Java] [x41sec/beanstack](https://github.com/x41sec/beanstack) X41 BeanStack - Stack Trace Fingerprinting BETA
-- [**39**Star][5y] [Py] [flankerhqd/wifimonster](https://github.com/flankerhqd/wifimonster) Wifi sniffing and hijacking tool
-- [**39**Star][2m] [Py] [kc0bfv/pcode-emulator](https://github.com/kc0bfv/pcode-emulator) A PCode Emulator for Ghidra.
-- [**39**Star][1m] [C++] [trailofbits/polytracker](https://github.com/trailofbits/polytracker) An LLVM-based instrumentation tool for universal taint analysis.
+- [**39**Star][2m] [Assembly] [pelock/simple-polymorphic-engine-spe32](https://github.com/pelock/simple-polymorphic-engine-spe32) Simple Polymorphic Engine (SPE32) is a simple polymorphic engine for encrypting code and data. It is an amateur project that can be used to demonstrate what polymorphic engines are.
- [**39**Star][6y] [Shell] [intelisecurelabs/pineapple-confs](https://github.com/InteliSecureLabs/Pineapple-Confs) TPLink Pineapple Mods
-- [**39**Star][2m] [Py] [nerrorsec/googledorker](https://github.com/nerrorsec/GoogleDorker) This is a simple tool to automate google hacking when doing web penetration testing or bug hunting.
-- [**39**Star][2y] [PowerShell] [msadministrator/pprt](https://github.com/MSAdministrator/PPRT) This module is used to report phishing URLs to their WHOIS/RDAP abuse contact information.
-- [**39**Star][3y] [Visual Basic] [mwsrc/betterrat](https://github.com/mwsrc/BetterRAT) Better Remote Access Trojan
-- [**39**Star][13d] [Dockerfile] [ironpeakservices/iron-alpine](https://github.com/ironPeakServices/iron-alpine) Hardened alpine linux baseimage for Docker.
-- [**39**Star][2m] [Dockerfile] [crytic/eth-security-toolbox](https://github.com/crytic/eth-security-toolbox) A Docker container preconfigured with all of the Trail of Bits Ethereum security tools.
+- [**39**Star][10m] [C] [fsecurelabs/3d-accelerated-exploitation](https://github.com/FSecureLABS/3d-accelerated-exploitation) 3D Accelerated Exploitation
+- [**39**Star][2y] [PS] [msadministrator/pprt](https://github.com/MSAdministrator/PPRT) This module is used to report phishing URLs to their WHOIS/RDAP abuse contact information.
+- [**39**Star][3y] [Visual Basic .NET] [mwsrc/betterrat](https://github.com/mwsrc/BetterRAT) Better Remote Access Trojan
+- [**39**Star][10m] [Java] [tijme/similar-request-excluder](https://github.com/tijme/similar-request-excluder) A Burp Suite extension that automatically marks similar requests as 'out-of-scope'.
+- [**39**Star][6d] [Dockerfile] [ironpeakservices/iron-alpine](https://github.com/ironPeakServices/iron-alpine) Hardened alpine linux baseimage for Docker.
- [**39**Star][8y] [Py] [zynamics/bincrowd-plugin-ida](https://github.com/zynamics/bincrowd-plugin-ida) BinCrowd Plugin for IDA Pro
+- [**39**Star][2y] [Py] [zjx20/socks-cli](https://github.com/zjx20/socks-cli) A solution to make CLI commands use socks5 proxy.
+- [**39**Star][3y] [C++] [zibility/anti-rootkits](https://github.com/zibility/anti-rootkits) 内核级ARK工具。
- [**39**Star][4y] [C] [xvilka/hacklu](https://github.com/xvilka/hacklu)
+- [**39**Star][2y] [ObjC] [xpreeks/g0blin](https://github.com/xpreeks/g0blin) v0rtex + yalu102
- [**39**Star][7y] [Perl] [xme/cuckoomx](https://github.com/xme/cuckoomx) CuckooMX is a project to automate analysis of files transmitted over SMTP (using the Cuckoo sandbox)
-- [**39**Star][12d] [PHP] [xchwarze/cain](https://github.com/xchwarze/cain) Password recovery tool for Microsoft Operating Systems. It allows easy recovery of various kind of passwords by sniffing the network, cracking encrypted passwords using Dictionary, Brute-Force and Cryptanalysis attacks, recording VoIP conversations, decoding scrambled passwords, recovering wireless network keys, revealing password boxes, uncover…
- [**39**Star][5y] [C] [x43x61x69/codeunsign](https://github.com/x43x61x69/codeunsign) A Mach-O binary codesign remover.
-- [**39**Star][11d] [Go] [x-way/iptables-tracer](https://github.com/x-way/iptables-tracer) Insert trace-points into the running configuration to observe the path of packets through the iptables chains.
- [**39**Star][6y] [Java] [wuntee/burpauthzplugin](https://github.com/wuntee/burpauthzplugin)
- [**39**Star][3y] [Py] [wraith-wireless/wraith](https://github.com/wraith-wireless/wraith) Wireless Reconnaissance And Intelligent Target Harvesting
-- [**39**Star][1y] [Py] [wangyihang/pwnme](https://github.com/wangyihang/pwnme) 二进制渗透题目汇总
- [**39**Star][6y] [Py] [viaforensics/android-encryption](https://github.com/viaforensics/android-encryption) Brute force and decryption of Android's Full Device Encryption
- [**39**Star][2y] [Py] [vah13/sap_vulnerabilities](https://github.com/vah13/sap_vulnerabilities) DoS PoC's for SAP products
+- [**39**Star][8d] [Shell] [userlandkernel/plataoplomo](https://github.com/userlandkernel/plataoplomo) Collection of (at time of release) iOS bugs I found
+- [**39**Star][2y] [C] [tum-i22/obfuscation-benchmarks](https://github.com/tum-i22/obfuscation-benchmarks) A set of programs used for benchmarking the strength of obfuscation
- [**39**Star][3y] [Py] [tomasreimers/tensorflow-graph-compression](https://github.com/tomasreimers/tensorflow-graph-compression) Compress graph files for tensorflow.
- [**39**Star][5y] [Shell] [tjluoma/bash-fix](https://github.com/tjluoma/bash-fix) Download and compile a new version of bash to replace vulnerable one
+- [**39**Star][10m] [Go] [timothyye/namebeta](https://github.com/timothyye/namebeta) A command line domain query tool.
- [**39**Star][2y] [Java] [tiked/androrw](https://github.com/tiked/androrw) PoC Ransomware for android
- [**39**Star][1y] [Assembly] [therealsaumil/arm_shellcode](https://github.com/therealsaumil/arm_shellcode) Make ARM Shellcode Great Again
+- [**39**Star][2y] [Py] [thecjw/ida_android_script](https://github.com/thecjw/ida_android_script) some idapython scripts for android debugging.
- [**39**Star][5y] [Py] [techbliss/adb_helper_qt_super_version](https://github.com/techbliss/adb_helper_qt_super_version) All You Need For Ida Pro And Android Debugging
- [**39**Star][4y] [Py] [takahiroharuyama/openioc_scan](https://github.com/takahiroharuyama/openioc_scan) openioc_scan Volatility Framework plugin
- [**39**Star][3y] [Shell] [superkojiman/rfishell](https://github.com/superkojiman/rfishell) Provide a shell-like interface for exploiting Remote File Inclusion vulnerabilities.
- [**39**Star][1y] [Py] [sundaysec/andspoilt](https://github.com/sundaysec/andspoilt) Run interactive android exploits in linux.
+- [**39**Star][4m] [C] [stephenrkell/trap-syscalls](https://github.com/stephenrkell/trap-syscalls) Monitor, rewrite and/or otherwise trap system calls... on Linux/x86-64 only, for now.
- [**39**Star][5m] [HTML] [sophoslabs/cve-2019-0888](https://github.com/sophoslabs/cve-2019-0888) PoC for CVE-2019-0888 - Use-After-Free in Windows ActiveX Data Objects (ADO)
- [**39**Star][3y] [C#] [sneaksensed/hiddentear](https://github.com/sneaksensed/hiddentear) HiddenTear Cyan Edition - A real life ransomware coded in C#
- [**39**Star][6y] [C] [smartinm/diskcryptor](https://github.com/smartinm/diskcryptor) DiskCryptor - Open source partition encryption solution
- [**39**Star][4y] [C++] [simutrace/simutrace](https://github.com/simutrace/simutrace) Tracing framework for full system simulators
- [**39**Star][5m] [Py] [silv3rhorn/artifactextractor](https://github.com/silv3rhorn/artifactextractor) Extract common Windows artifacts from source images and VSCs
-- [**39**Star][2m] [Go] [sensepost/go-out](https://github.com/sensepost/go-out)
-- [**39**Star][7m] [C] [sensepost/frida-windows-playground](https://github.com/sensepost/frida-windows-playground) A collection of Frida hooks for experimentation on Windows platforms.
+- [**39**Star][8m] [JS] [shadow-workers/shadow-workers](https://github.com/shadow-workers/shadow-workers) Shadow Workers is a free and open source C2 and proxy designed for penetration testers to help in the exploitation of XSS and malicious Service Workers (SW)
- [**39**Star][4y] [Pascal] [senjaxus/delphi_remote_access_pc](https://github.com/senjaxus/delphi_remote_access_pc) Remote access in Delphi 7 and Delphi XE5 (With sharer files, CHAT and Forms Inheritance) || Acesso Remoto em Delphi 7 e Delphi XE5 (Com Compartilhador de Arquivos, CHAT e Herança de Formulários)
+- [**39**Star][9m] [Py] [secgroup/mignis](https://github.com/secgroup/mignis) Mignis is a semantic based tool for firewall configuration.
+- [**39**Star][13d] [Py] [sdnewhop/grinder](https://github.com/sdnewhop/grinder)
- [**39**Star][1y] [JS] [sauldoescode/rilti.js](https://github.com/sauldoescode/rilti.js) a small opinionated future forward front-end framework
- [**39**Star][3y] [C++] [sam-b/hacksysdriverexploits](https://github.com/sam-b/hacksysdriverexploits)
-- [**39**Star][8m] [Py] [rr-/ida-images](https://github.com/rr-/ida-images) Image preview plugin for IDA disassembler.
+- [**39**Star][9m] [Py] [sadfud/exploits](https://github.com/sadfud/exploits) Real world and CTFs exploiting web/binary POCs.
+- [**39**Star][9m] [Py] [rr-/ida-images](https://github.com/rr-/ida-images) Image preview plugin for IDA disassembler.
+- [**39**Star][3y] [C++] [rootkiter/reverse-engineering](https://github.com/rootkiter/reverse-engineering) 软件逆向
+- [**39**Star][1y] [Batchfile] [romanzaikin/ollydbg-v1.10-with-best-plugins-and-immunity-debugger-theme-](https://github.com/romanzaikin/ollydbg-v1.10-with-best-plugins-and-immunity-debugger-theme-) Make OllyDbg v1.10 Look like Immunity Debugger & Best Plugins
- [**39**Star][3y] [ActionScript] [riusksk/flashscanner](https://github.com/riusksk/flashscanner) Flash XSS Scanner
- [**39**Star][5y] [PHP] [ridter/webshell](https://github.com/ridter/webshell) This is a webshell open source project
- [**39**Star][2y] [Py] [resultsmayvary/ctf](https://github.com/resultsmayvary/ctf) CTF Writeups
- [**39**Star][3y] [Py] [rebootuser/hashmash](https://github.com/rebootuser/hashmash) Hashmash is a tool to aid in generating hashes from user supplied values and Epochs
+- [**39**Star][10m] [M4] [raspberrypi/usbbootgui](https://github.com/raspberrypi/usbbootgui) GUI for booting a Raspberry Pi device like Pi Zero or compute module as a device
- [**39**Star][12m] [ranginang67/firecrack](https://github.com/ranginang67/firecrack)
- [**39**Star][2y] [Java] [quhw/xtunnel](https://github.com/quhw/xtunnel) An useful TCP/SSL tunnel utility.
- [**39**Star][6y] [Py] [proteansec/fuzzyftp](https://github.com/proteansec/fuzzyftp) The FTP fuzzer for Sulley and Peach.
+- [**39**Star][3y] [Java] [portswigger/authz](https://github.com/portswigger/authz)
- [**39**Star][2y] [C#] [phylliida/unityvoip](https://github.com/phylliida/unityvoip) [Doesn't work now sorry] Real time peer to peer voice chat in Unity, using CSCore, NSpeex, and UnityP2P
-- [**39**Star][6m] [C++] [peperunas/pasticciotto](https://github.com/peperunas/pasticciotto) Polymorphic VM and PoliCTF '17 reversing challenge.
-- [**39**Star][4m] [payloadbox/open-redirect-payload-list](https://github.com/payloadbox/open-redirect-payload-list)
-- [**39**Star][1y] [PowerShell] [outflanknl/doh_c2_trigger](https://github.com/outflanknl/doh_c2_trigger) Code for blogpost:
-- [**39**Star][4m] [TypeScript] [oleavr/frida-agent-example](https://github.com/oleavr/frida-agent-example) Example Frida agent written in TypeScript
-- [**39**Star][17d] [Py] [ntdiff/ntdiff](https://github.com/ntdiff/ntdiff)
-- [**39**Star][10d] [Ruby] [ninoseki/mihari](https://github.com/ninoseki/mihari) mihari is a sidekick tool for TheHive to monitor malicious hosts
+- [**39**Star][2y] [VHDL] [pedrorivera/siafpgaminer](https://github.com/pedrorivera/siafpgaminer) VHDL FPGA design of an optimized Blake2b pipeline to mine Siacoin
+- [**39**Star][1y] [PS] [outflanknl/doh_c2_trigger](https://github.com/outflanknl/doh_c2_trigger) Code for blogpost:
+- [**39**Star][2m] [Go] [opencoff/go-tunnel](https://github.com/opencoff/go-tunnel) TLS/SSL Tunnel - A modern STunnel replacement written in golang
+- [**39**Star][4m] [TS] [oleavr/frida-agent-example](https://github.com/oleavr/frida-agent-example) Example Frida agent written in TypeScript
+- [**39**Star][4m] [CSS] [oasis-open/cti-documentation](https://github.com/oasis-open/cti-documentation) OASIS TC Open Repository: GitHub Pages site for STIX, CybOX, and TAXII
+- [**39**Star][5d] [Py] [ntdiff/ntdiff](https://github.com/ntdiff/ntdiff)
+- [**39**Star][10m] [Py] [noobscode/kalel](https://github.com/noobscode/kalel) Kal El Network Stress Test and Penetration Testing Toolkit
- [**39**Star][1y] [Py] [netspi/spoofspotter](https://github.com/netspi/spoofspotter) A tool to catch spoofed NBNS responses.
- [**39**Star][2y] [PHP] [nao-sec/mal_getter](https://github.com/nao-sec/mal_getter) Tool for dropping malware from EK
-- [**39**Star][11d] [mykings/security-study-tutorial](https://github.com/mykings/security-study-tutorial) Summary of online learning materials
- [**39**Star][2y] [Py] [mthbernardes/houseproxy](https://github.com/mthbernardes/houseproxy) Protect your parents from phishing
- [**39**Star][2m] [Ruby] [mrackwitz/jeroboam](https://github.com/mrackwitz/jeroboam) Check all your apps on macOS for vulnerable Sparkle updaters
-- [**39**Star][10m] [Py] [mpgn/beast-poc](https://github.com/mpgn/beast-poc)
-- [**39**Star][6m] [HTML] [mindflavor/tdsbridge](https://github.com/mindflavor/tdsbridge) TDS Proxy library
+- [**39**Star][11m] [Py] [mpgn/beast-poc](https://github.com/mpgn/beast-poc)
+- [**39**Star][10m] [Go] [moriyoshi/devproxy](https://github.com/moriyoshi/devproxy) A swiss army knife of forward HTTP proxies
+- [**39**Star][7m] [HTML] [mindflavor/tdsbridge](https://github.com/mindflavor/tdsbridge) TDS Proxy library
- [**39**Star][2y] [milkdevil/ultimateapplockerbypasslist](https://github.com/milkdevil/ultimateapplockerbypasslist)
-- [**39**Star][3m] [Py] [mikeperry-tor/vanguards](https://github.com/mikeperry-tor/vanguards) Vanguards help guard you from getting vanned...
- [**39**Star][6y] [Perl] [micahflee/trollwot](https://github.com/micahflee/trollwot) Trolling the Web of Trust
-- [**39**Star][5m] [Lua] [mame82/misc](https://github.com/mame82/misc)
+- [**39**Star][6m] [Batchfile] [meesong/nt-crucial-modules](https://github.com/meesong/nt-crucial-modules) Collect different versions of Crucial modules.
+- [**39**Star][7m] [Dockerfile] [marco-lancini/docker_burp](https://github.com/marco-lancini/docker_burp) Burp Pro as a Docker Container
- [**39**Star][1m] [JS] [lydell/eslump](https://github.com/lydell/eslump) Fuzz testing JavaScript parsers and suchlike programs.
- [**39**Star][10m] [lj147/awesome-wechat](https://github.com/lj147/awesome-wechat) 技术型干货分享公众号集合,点击公众号链接即可扫描快速二维码。
- [**39**Star][3y] [Shell] [lawliet89/llvm-obfuscator](https://github.com/lawliet89/llvm-obfuscator) LLVM Obfuscator
+- [**39**Star][2y] [JS] [laomu1988/koa2-proxy](https://github.com/laomu1988/koa2-proxy) 基于koa@next的代理工具,支持http和https,并且可以当做本地服务器使用
- [**39**Star][4y] [C] [laginimaineb/waroftheworlds](https://github.com/laginimaineb/waroftheworlds) QSEE Shellcode to directly hijack the "Normal World" Linux Kernel
+- [**39**Star][4m] [C#] [killeroo/powerping](https://github.com/killeroo/powerping) Advanced command-line ping tool
+- [**39**Star][11m] [Py] [keli/furion](https://github.com/keli/furion) Socks5 + SSL Proxy
- [**39**Star][3y] [Java] [kdkanishka/virustotal-public-api-v2.0-client](https://github.com/kdkanishka/virustotal-public-api-v2.0-client) VirusTotal public API 2.0 implementation in Java
-- [**39**Star][3m] [Py] [karttoon/binsequencer](https://github.com/karttoon/binsequencer) BinSequencer is a script designed to find a common pattern of bytes within a set of samples and generate a YARA rule from the identified pattern.
-- [**39**Star][2m] [jsecurity101/windows-api-to-sysmon-events](https://github.com/jsecurity101/windows-api-to-sysmon-events) A repository that maps API calls to Sysmon Event ID's.
- [**39**Star][10m] [Go] [joanbono/gurp](https://github.com/joanbono/gurp) Burp Commander written in Go
+- [**39**Star][3y] [Py] [jevalenciap/iptodomain](https://github.com/jevalenciap/iptodomain) This tool extract domains from IP address based in the information saved in virustotal.
- [**39**Star][2y] [Py] [jas502n/st2-048](https://github.com/jas502n/st2-048) st2-048
-- [**39**Star][2y] [PowerShell] [jaredhaight/powershellclasslab](https://github.com/jaredhaight/powershellclasslab)
+- [**39**Star][2y] [PS] [jaredhaight/powershellclasslab](https://github.com/jaredhaight/powershellclasslab)
- [**39**Star][2y] [Py] [jamespayor/vector-homomorphic-encryption](https://github.com/jamespayor/vector-homomorphic-encryption) 6.857 project - implementation of scheme for encrypting integer vectors that allows addition, linear transformation, and weighted inner products.
+- [**39**Star][3m] [Go] [jakejarvis/subtake](https://github.com/jakejarvis/subtake) Automatic finder for subdomains vulnerable to takeover. Written in Go, based on
- [**39**Star][10y] [izsh/ida-python-scripts](https://github.com/izsh/ida-python-scripts) IDA Python Scripts
- [**39**Star][6y] [Clojure] [isecpartners/scout](https://github.com/isecpartners/scout) AWS EC2 and S3 Security Auditing Tool
+- [**39**Star][2m] [igorbrigadir/twitter-advanced-search](https://github.com/igorbrigadir/twitter-advanced-search) Advanced Search for Twitter.
- [**39**Star][2y] [HTML] [hugsy/codebro](https://github.com/hugsy/codebro) Web based code browser using clang to provide basic code analysis.
- [**39**Star][3y] [Py] [houbbit/haveibeenpwned](https://github.com/houbbit/haveibeenpwned) Python script to verify multiple email addresses for pwnage
- [**39**Star][3m] [C] [hlandau/ortega](https://github.com/hlandau/ortega) Ortega FDK
- [**39**Star][3y] [C++] [hasherezade/petya_recovery](https://github.com/hasherezade/petya_recovery) Application for cracking Red Petya key based on genetic algorithms.
- [**39**Star][4m] [hackingthings/publications](https://github.com/hackingthings/publications) All related files and slides for past talks
-- [**39**Star][2y] [Py] [h0nus/spynoteshell](https://github.com/h0nus/spynoteshell) Simple Python tool for backdooring apks files (with meterpreter or shell of Metasploit)
- [**39**Star][3y] [grrrdog/zeronights-hackquest-2016](https://github.com/grrrdog/zeronights-hackquest-2016) 2 web tasks from ZeroNights HackQuest 2016
- [**39**Star][1y] [Dockerfile] [gmdutra/docker-inurlbr](https://github.com/gmdutra/docker-inurlbr) Advanced search in search engines, enables analysis provided to exploit GET / POST capturing emails & urls, with an internal custom validation junction for each target / url found.
-- [**39**Star][19d] [JS] [github/enable-security-alerts-sample](https://github.com/github/enable-security-alerts-sample) This repository contains a sample script which can be used to enable security vulnerability alerts in all of the repositories in a given organization.
+- [**39**Star][3m] [Py] [gh2o/rvi_capture](https://github.com/gh2o/rvi_capture) rvictl for Linux and Windows: capture packets sent/received by iOS devices
- [**39**Star][7y] [C] [gdbinit/gimmedebugah](https://github.com/gdbinit/gimmedebugah) A small utility to inject a Info.plist into binaries.
- [**39**Star][7m] [Go] [function61/holepunch-client](https://github.com/function61/holepunch-client) Totally self-contained SSH reverse tunnel written in Go
-- [**39**Star][30d] [Py] [entynetproject/arissploit](https://github.com/entynetproject/arissploit) Arissploit Framework is a simple framework designed to master penetration testing tools. Arissploit Framework offers simple structure, basic CLI, and useful features for learning and developing penetration testing tools.
+- [**39**Star][2y] [exploitagency/github-esploit](https://github.com/exploitagency/github-esploit) !!! Deprecated See ESPloitV2 !!! Original PoC(Released: Sep 11, 2016) - WiFi controlled keystroke injection Using ESP8266 and 32u4 based Arduino HID Keyboard Emulator
+- [**39**Star][1y] [Dockerfile] [elejke/docker-socks5](https://github.com/elejke/docker-socks5) Docker для поднятия socks5 proxy сервера
- [**39**Star][5m] [C++] [egebalci/keylogger](https://github.com/egebalci/keylogger) Simple C++ Keylogger...
+- [**39**Star][2y] [Shell] [e-f-a/v3](https://github.com/e-f-a/v3) E.F.A version 3.x.x.x
+- [**39**Star][1m] [d1nfinite/sec-interview](https://github.com/d1nfinite/sec-interview) 信息安全面试题汇总
- [**39**Star][1y] [Py] [dissectmalware/malwarecmdmonitor](https://github.com/dissectmalware/malwarecmdmonitor) Shows command lines used by latest instances analyzed on Hybrid-Analysis
- [**39**Star][1y] [Py] [dissectmalware/batch_deobfuscator](https://github.com/dissectmalware/batch_deobfuscator) Deobfuscate batch scripts obfuscated using string substitution and escape character techniques.
- [**39**Star][3y] [Java] [directdefense/superserial-active](https://github.com/directdefense/superserial-active) SuperSerial-Active - Java Deserialization Vulnerability Active Identification Burp Extender
- [**39**Star][5y] [Py] [dionach/passhunt](https://github.com/dionach/passhunt) Search drives for documents containing passwords
- [**39**Star][4y] [JS] [digitalbond/canbus-utils](https://github.com/digitalbond/canbus-utils) Command line utilities for analyzing CANbus traffic
-- [**39**Star][4y] [PowerShell] [dfinke/onegetgistprovider](https://github.com/dfinke/onegetgistprovider) Gist-as-a-Package - PackageManagement PowerShell Provider to interop with Github Gists
+- [**39**Star][4y] [PS] [dfinke/onegetgistprovider](https://github.com/dfinke/onegetgistprovider) Gist-as-a-Package - PackageManagement PowerShell Provider to interop with Github Gists
- [**39**Star][1y] [CSS] [destructivevoice/destructivefarm](https://github.com/destructivevoice/destructivefarm) Exploit farm for attack-defense CTF competitions
- [**39**Star][5y] [C] [cyanogenmod/android_external_openssl](https://github.com/cyanogenmod/android_external_openssl) OpenSSL for Android
- [**39**Star][5y] [JS] [csh/stegosploit](https://github.com/csh/stegosploit) IMAJS meet
- [**39**Star][1y] [Py] [csecgroup/wafid](https://github.com/csecgroup/wafid) Wafid identify and fingerprint Web Application Firewall (WAF) products.
- [**39**Star][2y] [Py] [cryptokrishtopher/binancescanner](https://github.com/cryptokrishtopher/binancescanner)
-- [**39**Star][4m] [Java] [coveros/zap-sonar-plugin](https://github.com/coveros/zap-sonar-plugin) Integrates OWASP Zed Attack Proxy reports into SonarQube
+- [**39**Star][5m] [Java] [coveros/zap-sonar-plugin](https://github.com/coveros/zap-sonar-plugin) Integrates OWASP Zed Attack Proxy reports into SonarQube
- [**39**Star][4y] [C++] [corelan/pin](https://github.com/corelan/pin) Collection of pin tools
- [**39**Star][3y] [C] [cn33liz/hsevd-arbitraryoverwritegdi](https://github.com/cn33liz/hsevd-arbitraryoverwritegdi) HackSys Extreme Vulnerable Driver - ArbitraryOverwrite Exploit using GDI
- [**39**Star][4m] [cmlh/maltego-haveibeenpwned](https://github.com/cmlh/maltego-haveibeenpwned) Maltego integration of
- [**39**Star][2y] [HTML] [chybeta/cve-2018-1000006-demo](https://github.com/chybeta/cve-2018-1000006-demo) The Demo for CVE-2018-1000006
- [**39**Star][1y] [chichou/10.13.5-sip-bypass](https://github.com/chichou/10.13.5-sip-bypass)
-- [**39**Star][21d] [Lua] [c0nw0nk/nginx-lua-anti-ddos](https://github.com/c0nw0nk/nginx-lua-anti-ddos) A Anti-DDoS script to protect Nginx web servers using Lua with a HTML Javascript based authentication puzzle inspired by Cloudflare I am under attack mode an Anti-DDoS authentication page protect yourself from every attack type All Layer 7 Attacks Mitigating Historic Attacks DoS DoS Implications DDoS All Brute Force Attacks Zero day exploits Soc…
- [**39**Star][3y] [Py] [brianwrf/sambahunter](https://github.com/brianwrf/sambahunter) It is a simple script to exploit RCE for Samba (CVE-2017-7494 ).
+- [**39**Star][5y] [JS] [breach/mod_strip](https://github.com/breach/mod_strip) Breach default layout / tabbing module
- [**39**Star][11m] [Go] [boy-hack/gowhatweb](https://github.com/boy-hack/gowhatweb) [学习GO] go语言写的web指纹识别 - Identify websites by go language
+- [**39**Star][2y] [Py] [bonelee/dns_tunnel_dectect_with_cnn](https://github.com/bonelee/dns_tunnel_dectect_with_cnn) dns tunnel dectect with CNN
- [**39**Star][2y] [Java] [bit4woo/burp_collaborator_http_api](https://github.com/bit4woo/burp_collaborator_http_api) burp_collaborator_http_api: 基于Burp Collaborator的HTTP API
+- [**39**Star][9m] [binarymist/holisticinfosec-for-webdevelopers-fascicle0](https://github.com/binarymist/holisticinfosec-for-webdevelopers-fascicle0)
- [**39**Star][2y] [C] [bi-zone/rdtsc-checkvirt-poc](https://github.com/bi-zone/rdtsc-checkvirt-poc) rdtsc-checkvirt-poc: 利用预测执行(speculative execution)检测虚拟化
- [**39**Star][9y] [OCaml] [berke/jsure](https://github.com/berke/jsure) JSure is a fast, standalone Javascript checker.
- [**39**Star][7y] [C++] [bend/rar_crack](https://github.com/bend/rar_crack) A rar password cracker using brute force attack
-- [**39**Star][11d] [C] [bdutro/ibm_pw_clear](https://github.com/bdutro/ibm_pw_clear) Small EFI utility that clears the power-on and setup passwords in IBM x3550/x3650 M3 servers
-- [**39**Star][1y] [Lua] [bcsecorg/ethereum_devp2p_wireshark_dissector](https://github.com/bcsecorg/ethereum_devp2p_wireshark_dissector) This is Ethereum devp2p protocol dissector plugin for wireshark.
+- [**39**Star][13d] [C] [bdutro/ibm_pw_clear](https://github.com/bdutro/ibm_pw_clear) Small EFI utility that clears the power-on and setup passwords in IBM x3550/x3650 M3 servers
+- [**39**Star][2y] [Lua] [bcsecorg/ethereum_devp2p_wireshark_dissector](https://github.com/bcsecorg/ethereum_devp2p_wireshark_dissector) This is Ethereum devp2p protocol dissector plugin for wireshark.
- [**39**Star][7m] [Py] [bbva/patton-cli](https://github.com/bbva/patton-cli) The knife of the Admin & Security auditor
- [**39**Star][2y] [Go] [averagesecurityguy/searchscan](https://github.com/averagesecurityguy/searchscan) Search Nmap and Metasploit scanning scripts.
- [**39**Star][3y] [JS] [auth0-blog/nodejs-awesome-polls](https://github.com/auth0-blog/nodejs-awesome-polls)
- [**39**Star][3y] [C++] [attackercan/cpp-sql-fuzzer](https://github.com/attackercan/cpp-sql-fuzzer)
-- [**39**Star][5m] [Py] [arthastang/router-exploit-shovel](https://github.com/arthastang/router-exploit-shovel) Automated Application Generation for Stack Overflow Types on Wireless Routers
- [**39**Star][3y] [C] [arinerron/cve-2016-5195](https://github.com/arinerron/cve-2016-5195) Automated Android root via CVE-2016-5195 (dirtycow/dirtyc0w PoC)
- [**39**Star][2y] [Roff] [apxar/xlog](https://github.com/apxar/xlog) web日志扫描工具
- [**39**Star][2y] [ActionScript] [appsecco/json-flash-csrf-poc](https://github.com/appsecco/json-flash-csrf-poc) This repo contains the files required to perform a CSRF attack using Flash and HTTP 307 redirections.
- [**39**Star][2y] [Java] [aninstein/network-security-situation-awareness-system](https://github.com/aninstein/network-security-situation-awareness-system) 综合了资产检测,主机扫描,流量分析等技术,通过这些技术取得网络资产,脆弱性,威胁等指标,从而根据这些指标计算出当前网络的网络安全态势。
- [**39**Star][3y] [C] [andnxor/andnxor_dc24_badge](https://github.com/andnxor/andnxor_dc24_badge) AND!XOR DEFCON 24 Badge HW and SW
-- [**39**Star][4m] [PowerShell] [absozed/steamprivesc](https://github.com/absozed/steamprivesc) Simple tool collection for escalation to NT AUTHORITY\SYSTEM from recently disclosed Steam Client Zero Day
-- [**39**Star][5m] [1135/1135-cobaltstrike-toolkit](https://github.com/1135/1135-cobaltstrike-toolkit) about CobaltStrike
+- [**39**Star][4m] [PS] [absozed/steamprivesc](https://github.com/absozed/steamprivesc) Simple tool collection for escalation to NT AUTHORITY\SYSTEM from recently disclosed Steam Client Zero Day
- [**39**Star][1y] [dcid/ossec-hids](https://bitbucket.org/dcid/ossec-hids)
-- [**38**Star][2d] [worawit/cve-2019-0708](https://github.com/worawit/cve-2019-0708) CVE-2019-0708 (BlueKeep)
-- [**38**Star][4y] [Py] [joxeankoret/tahh](https://github.com/joxeankoret/tahh) Source codes for "The Antivirus Hackers Handbook" book.
+- [**38**Star][2m] [Py] [kamingchan/shadowsocks-munager](https://github.com/kamingchan/shadowsocks-munager) Middleware of shadowsocks-libev and sspanel
+- [**38**Star][1m] [Lua] [hackertarget/nmap-nse-scripts](https://github.com/hackertarget/nmap-nse-scripts) Nmap NSE scripts that have been customised or created
+- [**38**Star][] [Rust] [verideth/dll_hook-rs](https://github.com/verideth/dll_hook-rs) Rust code to show how hooking in rust with a dll works.
- [**38**Star][3y] [HTML] [cryptogenic/ps4-playground-3.55](https://github.com/cryptogenic/ps4-playground-3.55) A 3.55 implementation of PS4 Playground (based on CTurt's 1.76 original)
- [**38**Star][5y] [Py] [internetwache/ssh-honeypot](https://github.com/internetwache/ssh-honeypot) Simple SSH Honeypot in Python
-- [**38**Star][11m] [Java] [thelinuxchoice/droidcam](https://github.com/thelinuxchoice/droidcam) Script to generate an Android App to take photos from Cameras
-- [**38**Star][2y] [Py] [liang2580/btpanel-ss](https://github.com/liang2580/btpanel-ss) 基于宝塔Linux面板的shadowsocks可视化管理插件
-- [**38**Star][13d] [Verilog] [lvd2/ay-3-8910_reverse_engineered](https://github.com/lvd2/ay-3-8910_reverse_engineered) The reverse-engineered AY-3-8910 chip. Transistor-level schematics, verilog model and a testbench with tools, that can render register dump files into .flac soundtrack.
-- [**38**Star][2m] [Py] [fireeye/win10_volatility](https://github.com/fireeye/win10_volatility) An advanced memory forensics framework
-- [**38**Star][1m] [mohitkhemchandani/oscp_bible](https://github.com/mohitkhemchandani/oscp_bible) This is a collection of resources, scripts, bookmarks, writeups, notes, cheatsheets that will help you in OSCP Preparation as well as for general pentesting and learning. If you feel like you can contribute in it. Please do that, I'll appreciate you.
+- [**38**Star][4m] [HCL] [trailofbits/algo-ng](https://github.com/trailofbits/algo-ng) Experimental version of Algo built on Terraform
+- [**38**Star][3y] [wtsxdev/exploit-development](https://github.com/wtsxdev/exploit-development) Resources for learning about Exploit Development
+- [**38**Star][3m] [Py] [fireeye/win10_volatility](https://github.com/fireeye/win10_volatility) An advanced memory forensics framework
- [**38**Star][3m] [C++] [aliyuchang33/hv2ray](https://github.com/aliyuchang33/hv2ray) A linux GUI tool for v2ray base on QT.
+- [**38**Star][3m] [Py] [oasis-open/cti-taxii-client](https://github.com/oasis-open/cti-taxii-client) OASIS TC Open Repository: TAXII 2 Client Library Written in Python
- [**38**Star][7m] [Py] [k8gege/ciscoexploit](https://github.com/k8gege/ciscoexploit) Cisco Exploit (CVE-2019-1821 Cisco Prime Infrastructure Remote Code Execution/CVE-2019-1653/Cisco SNMP RCE/Dump Cisco RV320 Password)
-- [**38**Star][25d] [Shell] [phspade/automated-scanner](https://github.com/phspade/automated-scanner) Trying to make automated recon for bug bounties
+- [**38**Star][18d] [Swift] [fonta1n3/fullynoded](https://github.com/fonta1n3/fullynoded) A Bitcoin Core GUI for iOS devices. Allows you to connect to and control multiple nodes via Tor
- [**38**Star][1m] [lucasnaja/useful-dev-tools](https://github.com/lucasnaja/useful-dev-tools)
-- [**38**Star][2m] [JS] [iwinston/javascript-code-protection-example](https://github.com/iwinston/javascript-code-protection-example) An example of JavaScript code protection
+- [**38**Star][3m] [JS] [iwinston/javascript-code-protection-example](https://github.com/iwinston/javascript-code-protection-example) An example of JavaScript code protection
- [**38**Star][2y] [Py] [walkerfuz/pydbgeng](https://github.com/walkerfuz/PyDbgEng) a python wrapper of debug engines on windows, linux or osx, it's only aim to auto fuzzing.
- [**38**Star][2y] [vysecurity/cobaltsplunk](https://github.com/vysecurity/CobaltSplunk) Splunk Dashboard for CobaltStrike logs
- [**38**Star][1y] [C++] [contionmig/lsass-usermode-bypass](https://github.com/ContionMig/LSASS-Usermode-Bypass) This bypass is for anti cheats like battleye and EAC. All this does is abuse lsass's handles and use them for yourself. This is quite useful as this is usermode which doesnt require you to find a way to load a driver
- [**38**Star][3y] [C++] [hluwa/smali-anti-usageseach](https://github.com/hluwa/Smali-Anti-UsageSeach) 隐藏关键方法的相关调用
- [**38**Star][2y] [Py] [pegasuslab/wifi-miner-detector](https://github.com/PegasusLab/WiFi-Miner-Detector) Detecting malicious WiFi with mining cryptocurrency.
- [**38**Star][4m] [Py] [projecthorus/wenet](https://github.com/projecthorus/wenet) Wenet ("The Swift One") - Transmit and Receive code for the Project Horus High-Speed Imagery Payload.
-- [**38**Star][10m] [Java] [tijme/similar-request-excluder](https://github.com/tijme/similar-request-excluder) A Burp Suite extension that automatically marks similar requests as 'out-of-scope'.
- [**38**Star][4y] [C] [dadas190/penetrator-wps](https://github.com/dadas190/penetrator-wps) 实时攻击多个启用了WPS的AP
- [**38**Star][5y] [C++] [livemirror/pcshare](https://github.com/LiveMirror/pcshare)
- [**38**Star][2y] [C++] [lijuno/nrf24_ble](https://github.com/lijuno/nRF24_BLE) Hacking nRF24L01+ as a low-cost BLE beacon
- [**38**Star][1y] [Py] [initstring/evil-ssdp](https://gitlab.com/initstring/evil-ssdp)
-- [**38**Star][3y] [C++] [zibility/anti-rootkits](https://github.com/zibility/anti-rootkits) 内核级ARK工具。
- [**38**Star][3y] [JS] [zhuzhibo0/sslcloud](https://github.com/zhuzhibo0/sslcloud)
- [**38**Star][8m] [Py] [zeroq/amun](https://github.com/zeroq/amun) Amun Honeypot
- [**38**Star][2y] [Py] [ytisf/muninn](https://github.com/ytisf/muninn) A short and small memory forensics helper.
+- [**38**Star][1m] [Py] [yaleimeng/free_proxy_pool](https://github.com/yaleimeng/free_proxy_pool) 对免费代理IP网站进行爬取,收集汇总为自己的代理池。关键是验证代理的有效性、匿名性、去重复
+- [**38**Star][4y] [Java] [xyntax/jboss-exp](https://github.com/xyntax/jboss-exp) java反序列化漏洞利用-JBOSS(含payload生成的java项目,漏洞利用py脚本,shodan部分目标主机搜索结果)
- [**38**Star][5y] [PHP] [xpaw/httpsys](https://github.com/xpaw/httpsys)
-- [**38**Star][3y] [HTML] [xiaoyanguoke/ciahackingtools](https://github.com/xiaoyanguoke/ciahackingtools) WikiLeaks Vault 7 CIA Hacking Tools
+- [**38**Star][5y] [xionox/moz-tor-relays](https://github.com/xionox/moz-tor-relays)
- [**38**Star][6y] [C] [x43x61x69/mach-o-prettifier](https://github.com/x43x61x69/mach-o-prettifier) A Mach-O Load Command deobfuscator.
- [**38**Star][3m] [Lua] [wubonetcn/luawaf](https://github.com/wubonetcn/luawaf) A secure and privately deployable web application firewall(WAF).一个安全、可私有部署的Web应用防火墙(WAF)。
- [**38**Star][3m] [Java] [voorivex/andrill](https://github.com/voorivex/andrill) a vulnerable mobile application interacting with a back-end API
-- [**38**Star][8m] [Shell] [userlandkernel/plataoplomo](https://github.com/userlandkernel/plataoplomo) Collection of (at time of release) iOS bugs I found
-- [**38**Star][2y] [C] [tum-i22/obfuscation-benchmarks](https://github.com/tum-i22/obfuscation-benchmarks) A set of programs used for benchmarking the strength of obfuscation
-- [**38**Star][8d] [JS] [tryghost/gscan](https://github.com/tryghost/gscan) Ghost theme scanner - checks for errors and feature support
+- [**38**Star][10d] [JS] [tryghost/gscan](https://github.com/tryghost/gscan) Ghost theme scanner - checks for errors and feature support
- [**38**Star][8m] [Go] [tripwire/padcheck](https://github.com/tripwire/padcheck) TLS CBC Padding Oracle Checker
-- [**38**Star][26d] [Py] [trailofbits/manticore-examples](https://github.com/trailofbits/manticore-examples) Example Manticore scripts
+- [**38**Star][28d] [Py] [trailofbits/manticore-examples](https://github.com/trailofbits/manticore-examples) Example Manticore scripts
- [**38**Star][3y] [CSS] [thundercls/x64dbg_vs_dark](https://github.com/thundercls/x64dbg_vs_dark) x64dbg stylesheet like visual studio dark theme
- [**38**Star][3y] [HTML] [thugs-rumal/rumal](https://github.com/thugs-rumal/rumal) Thug's Rumāl: a Thug's dress & weapon
- [**38**Star][8m] [Java] [thomasdarimont/spring-boot-admin-keycloak-example](https://github.com/thomasdarimont/spring-boot-admin-keycloak-example) Example for protecting Spring Boot Admin & Spring Boot Actuator endpoints with Keycloak
-- [**38**Star][2y] [Py] [thecjw/ida_android_script](https://github.com/thecjw/ida_android_script) some idapython scripts for android debugging.
- [**38**Star][4y] [HTML] [tevora-threat/splunk_pentest_app](https://github.com/tevora-threat/splunk_pentest_app) splunk_pentest_app
- [**38**Star][3m] [HTML] [terjanq/flag-capture](https://github.com/terjanq/flag-capture) Solutions and write-ups from security-based competitions also known as Capture The Flag competition
- [**38**Star][3y] [team-firebugs/burp-lfi-tests](https://github.com/team-firebugs/burp-lfi-tests) Fuzzing for LFI using Burpsuite
-- [**38**Star][21d] [YARA] [te-k/pe](https://github.com/te-k/pe) CLI tool to analyze PE files
+- [**38**Star][23d] [YARA] [te-k/pe](https://github.com/te-k/pe) CLI tool to analyze PE files
+- [**38**Star][2y] [C++] [tanninone/usvfs](https://github.com/tanninone/usvfs) library using api hooking to implement process-local filesystem-independent file links.
- [**38**Star][1y] [Py] [tanc7/arms-commander](https://github.com/tanc7/arms-commander) Malware Suite/Menu designed for "Speedy and No-Mistakes Penetration Testing", written in Python 2.7.13 and tested on Kali Linux 4.6 & 4.9, originally intended to only perform the Reconnaissance and Enumeration Stages (it's role is dramatically expanded now). Requires Python 2.7 + Pip + Termcolor Module. All code is entirely free to be used in yo…
- [**38**Star][4y] [C] [taichisocks/shadowsocks](https://github.com/taichisocks/shadowsocks) Lightweight shadowsocks client for iOS and Mac OSX base on shadowsocks-libev
- [**38**Star][2y] [C++] [struct/hardenedpartitionalloc](https://github.com/struct/hardenedpartitionalloc) A forked and hardened version of PartitionAlloc from Chrome's Blink engine
-- [**38**Star][19d] [C] [stefanberger/libtpms](https://github.com/stefanberger/libtpms) The libtpms library provides software emulation of a Trusted Platform Module (TPM 1.2 and TPM 2.0)
+- [**38**Star][6d] [C] [stefanberger/libtpms](https://github.com/stefanberger/libtpms) The libtpms library provides software emulation of a Trusted Platform Module (TPM 1.2 and TPM 2.0)
+- [**38**Star][3m] [spiderlabs/iocs-idps](https://github.com/spiderlabs/iocs-idps) This repository will hold PCAP IOC data related with known malware samples (owner: Bryant Smith)
- [**38**Star][3y] [C] [spender-sandbox/cuckoomon-modified](https://github.com/spender-sandbox/cuckoomon-modified) Modified edition of cuckoomon
- [**38**Star][6y] [C] [shjalayeri/pwnypot](https://github.com/shjalayeri/pwnypot) PwnyPot, High Interaction Client Honeypot
- [**38**Star][2y] [C] [shellbombs/strongod](https://github.com/shellbombs/strongod) StrongOD(anti anti-debug plugin) driver source code.
-- [**38**Star][8m] [JS] [shadow-workers/shadow-workers](https://github.com/shadow-workers/shadow-workers) Shadow Workers is a free and open source C2 and proxy designed for penetration testers to help in the exploitation of XSS and malicious Service Workers (SW)
+- [**38**Star][4y] [Assembly] [sh3llc0d3r1337/windows_reverse_shell_1](https://github.com/sh3llc0d3r1337/windows_reverse_shell_1) Windows Reverse Shell shellcode
- [**38**Star][3y] [C] [scubsrgroup/taint-analyse](https://github.com/scubsrgroup/taint-analyse) Windows平台下的细粒度污点分析工具
-- [**38**Star][12d] [Go] [scrapinghub/crawlera-headless-proxy](https://github.com/scrapinghub/crawlera-headless-proxy) A complimentary proxy to help to use Crawlera with headless browsers
+- [**38**Star][14d] [Go] [scrapinghub/crawlera-headless-proxy](https://github.com/scrapinghub/crawlera-headless-proxy) A complimentary proxy to help to use Crawlera with headless browsers
- [**38**Star][3y] [C++] [scalys7/privilege-escalation-framework](https://github.com/scalys7/privilege-escalation-framework) Privilege Escilation training project, with an emphasis on the distinction between vulnerability research & it's exposure and exploitation methods(which are CVE-independent.)
- [**38**Star][4y] [C++] [sam-b/cve-2014-4113](https://github.com/sam-b/cve-2014-4113) Trigger and exploit code for CVE-2014-4113
- [**38**Star][2y] [Py] [saelo/ida_scripts](https://github.com/saelo/ida_scripts) Collection of IDA scripts
- [kernelcache](https://github.com/saelo/ida_scripts/blob/master/kernelcache.py) Identify and rename function stubs (plt entries) in an iOS kernelcache. ARM64 only.
- [ssdt](https://github.com/saelo/ida_scripts/blob/master/ssdt.py) Resolve syscall table entries in the Windows kernel.
-- [**38**Star][9m] [Py] [sadfud/exploits](https://github.com/sadfud/exploits) Real world and CTFs exploiting web/binary POCs.
+- [**38**Star][11d] [Py] [saeeddhqan/maryam](https://github.com/saeeddhqan/maryam) Open-source Intelligence(OSINT) Framework
- [**38**Star][1y] [Shell] [rordi/docker-antivirus](https://github.com/rordi/docker-antivirus) Docker antivirus & malware scanning (antivirus as a microservice / antivirus as a container)
-- [**38**Star][10m] [PowerShell] [rootup/redteam](https://github.com/rootup/redteam) One line PS scripts that may come handy during your network assesment
-- [**38**Star][3y] [C++] [rootkiter/reverse-engineering](https://github.com/rootkiter/reverse-engineering) 软件逆向
+- [**38**Star][10m] [PS] [rootup/redteam](https://github.com/rootup/redteam) One line PS scripts that may come handy during your network assesment
- [**38**Star][2y] [Py] [roothaxor/pystat](https://github.com/roothaxor/pystat) Advanced Netstat Using Python For Windows
-- [**38**Star][1y] [Batchfile] [romanzaikin/ollydbg-v1.10-with-best-plugins-and-immunity-debugger-theme-](https://github.com/romanzaikin/ollydbg-v1.10-with-best-plugins-and-immunity-debugger-theme-) Make OllyDbg v1.10 Look like Immunity Debugger & Best Plugins
- [**38**Star][3y] [Py] [ring04h/wyscan](https://github.com/ring04h/wyscan) WooYun Network Scanner
- [**38**Star][2y] [HTML] [rh0dev/expdev](https://github.com/rh0dev/expdev) exploit development
- [**38**Star][7y] [Java] [ravn/jsocks](https://github.com/ravn/jsocks) Updates for
-- [**38**Star][21d] [Ruby] [rapid7/rex-powershell](https://github.com/rapid7/rex-powershell) Rex library for dealing with Powershell Scripts
-- [**38**Star][11d] [q1271964185/cyberspace_security_learning](https://github.com/q1271964185/cyberspace_security_learning) 在学习CTF、网络安全路上整合自己博客和一些资料,持续更新~
+- [**38**Star][23d] [Ruby] [rapid7/rex-powershell](https://github.com/rapid7/rex-powershell) Rex library for dealing with Powershell Scripts
+- [**38**Star][13d] [q1271964185/cyberspace_security_learning](https://github.com/q1271964185/cyberspace_security_learning) 在学习CTF、网络安全路上整合自己博客和一些资料,持续更新~
- [**38**Star][3y] [Py] [programa-stic/marvin-dynamic-analyzer](https://github.com/programa-stic/marvin-dynamic-analyzer) Dynamic android vulnerability scanner using OpenNebula and Android-x86 emulators.
-- [**38**Star][2y] [PowerShell] [politoinc/elk-hunting](https://github.com/politoinc/elk-hunting) Threat Hunting with ELK Workshop (InfoSecWorld 2017)
+- [**38**Star][2y] [PS] [politoinc/elk-hunting](https://github.com/politoinc/elk-hunting) Threat Hunting with ELK Workshop (InfoSecWorld 2017)
- [**38**Star][7m] [Java] [pnfsoftware/jnihelper](https://github.com/pnfsoftware/jnihelper) jeb-plugin-android-jni-helper
- [**38**Star][2y] [Py] [phishai/idn_generator](https://github.com/phishai/idn_generator) idn_generator: 生成相似的IDN域名
-- [**38**Star][30d] [Lua] [hackertarget/nmap-nse-scripts](https://github.com/hackertarget/nmap-nse-scripts) Nmap NSE scripts that have been customised or created
+- [**38**Star][1m] [Lua] [hackertarget/nmap-nse-scripts](https://github.com/hackertarget/nmap-nse-scripts) Nmap NSE scripts that have been customised or created
+- [**38**Star][3d] [PLpgSQL] [percona-qa/percona-qa](https://github.com/percona-qa/percona-qa) Percona QA is a suite of scripts and utilities that assists in building, continuous integration, automated testing & bug reporting for Percona Server, Percona XtraDB Cluster, Percona XtraBackup, Percona Server for MongoDB, as well as other flavors of MySQL (Oracle, Facebook MyQSL, WebScaleSQL, MariaDB) etc.
+- [**38**Star][6m] [C++] [peperunas/pasticciotto](https://github.com/peperunas/pasticciotto) Polymorphic VM and PoliCTF '17 reversing challenge.
- [**38**Star][4m] [Py] [outflanknl/redfile](https://github.com/outflanknl/redfile) A flask wsgi application that serves files with intelligence, good for serving conditional RedTeam payloads
-- [**38**Star][2m] [Go] [opencoff/go-tunnel](https://github.com/opencoff/go-tunnel) TLS/SSL Tunnel - A modern STunnel replacement written in golang
-- [**38**Star][1y] [Objective-C] [omerporze/brokentooth](https://github.com/omerporze/brokentooth) POC for CVE-2018-4327
-- [**38**Star][11d] [olbat/nvdcve](https://github.com/olbat/nvdcve) NVD/CVE as JSON files
-- [**38**Star][6y] [Objective-C] [nzn/nsuserdefaults-aesencryptor](https://github.com/nzn/nsuserdefaults-aesencryptor) NSUserDefaults category with AES encrypt/decrypt keys and values.
+- [**38**Star][1y] [ObjC] [omerporze/brokentooth](https://github.com/omerporze/brokentooth) POC for CVE-2018-4327
+- [**38**Star][2d] [olbat/nvdcve](https://github.com/olbat/nvdcve) NVD/CVE as JSON files
+- [**38**Star][6y] [ObjC] [nzn/nsuserdefaults-aesencryptor](https://github.com/nzn/nsuserdefaults-aesencryptor) NSUserDefaults category with AES encrypt/decrypt keys and values.
- [**38**Star][4y] [Py] [northbit/bulletin-scraper](https://github.com/northbit/bulletin-scraper) Download all of Microsoft's security updates and symbols
- [**38**Star][4y] [Py] [nonenotnull/regeorg](https://github.com/nonenotnull/regeorg) The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.
- [**38**Star][3y] [C++] [nccgroup/pip3line](https://github.com/nccgroup/pip3line) The Swiss army knife of byte manipulation
- [**38**Star][4y] [Py] [mozilla/minion-backend](https://github.com/mozilla/minion-backend) Minion Backend
-- [**38**Star][3m] [Py] [momalab/icsref](https://github.com/momalab/icsref) A tool for reverse engineering industrial control systems binaries.
- [**38**Star][2y] [Shell] [mitchellkrogza/fail2ban.webexploits](https://github.com/mitchellkrogza/fail2ban.webexploits) This custom Fail2Ban filter and jail will deal with all scans for common Wordpress, Joomla and other Web Exploits being scanned for by automated bots and those seeking to find exploitable web sites.
- [**38**Star][2y] [Py] [mcw0/pwn-hisilicon-dvr](https://github.com/mcw0/pwn-hisilicon-dvr)
- [**38**Star][3y] [Shell] [mcous/kicad-lib](https://github.com/mcous/kicad-lib) Repository for my KiCad components and footprints
- [**38**Star][7y] [Py] [matthewdfuller/intellifuzz-xss](https://github.com/matthewdfuller/intellifuzz-xss) An adaptive, intelligent XSS fuzzer that learns how the response is reflected and carefully crafts an XSS payload to match
- [**38**Star][2m] [C#] [mashed-potatoes/usbtrojan](https://github.com/mashed-potatoes/usbtrojan) Super simple loader that spreads over removable drives (USB flash drives, portable and network drives, SD cards). Features: You can add the HWID of your PC to the whitelist and trojan will ignore it; You can add any payload (executable file); Slient work. Ideal for school, university or office.
-- [**38**Star][7m] [Dockerfile] [marco-lancini/docker_burp](https://github.com/marco-lancini/docker_burp) Burp Pro as a Docker Container
+- [**38**Star][5m] [Assembly] [marespiaut/rayman_disasm](https://github.com/marespiaut/rayman_disasm) Reverse-engineering effort for the 1995 MS-DOS game “Rayman”
- [**38**Star][7y] [Py] [mainframed/mfsniffer](https://github.com/mainframed/mfsniffer) Mainframe TN3270 unencrypted TSO session user ID and password sniffer
+- [**38**Star][2y] [Assembly] [macmade/obfuscate](https://github.com/macmade/obfuscate) C/C++ machine code obfuscation.
+- [**38**Star][2y] [Py] [m4n3dw0lf/sslkill](https://github.com/m4n3dw0lf/sslkill) Forced Man-In-The-Middle HTTPs-Avoiding Reverse Proxy
- [**38**Star][5m] [Py] [lukacci/cpuhunter](https://github.com/lukacci/cpuhunter)
- [**38**Star][1y] [C] [luigirizzo/netmap-ipfw](https://github.com/luigirizzo/netmap-ipfw) Automatically exported from code.google.com/p/netmap-ipfw
- [**38**Star][12m] [Py] [luh2/detectdynamicjs](https://github.com/luh2/detectdynamicjs) The DetectDynamicJS Burp Extension provides an additional passive scanner that tries to find differing content in JavaScript files and aid in finding user/session data.
@@ -13393,19 +14301,20 @@ networking routines
- [**38**Star][1y] [JS] [lmammino/webhook-tunnel](https://github.com/lmammino/webhook-tunnel) A little HTTP proxy suitable to create tunnels for webhook endpoints protected behind a firewall or a VPN
- [**38**Star][7m] [Py] [llt4l/iculeak.py](https://github.com/llt4l/iculeak.py) Tool to find and extract credentials from phone configuration files hosted on CUCM
- [**38**Star][1y] [Py] [linted/linuxprivchecker](https://github.com/linted/linuxprivchecker) linuxprivchecker.py -- a Linux Privilege Escalation Check Script
-- [**38**Star][4y] [C++] [lingerhk/0net](https://github.com/lingerhk/0net) 一个简单的Windows远程控制后门
+- [**38**Star][3y] [Py] [lifetyper/asynchttpsdns](https://github.com/lifetyper/asynchttpsdns) DNS Over Https Powered By Asyncio
- [**38**Star][2y] [Py] [lavalamp-/ws-backend-community](https://github.com/lavalamp-/ws-backend-community) Web Sight Back-end Community Edition
- [**38**Star][3y] [C++] [kurapicabs/x64_tracer](https://github.com/kurapicabs/x64_tracer) x64dbg conditional branches logger [Plugin]
- [**38**Star][3y] [PHP] [keyus/xss](https://github.com/keyus/xss) php写的个人研究测试用的 xss cookie 攻击管理平台,开源出来
- [**38**Star][3y] [Py] [kevthehermit/volatility_plugins](https://github.com/kevthehermit/volatility_plugins) Volatility Plugins
- [**38**Star][1y] [Py] [kernelmachine/haveibeenpwned](https://github.com/kernelmachine/haveibeenpwned) Python interface to Have I Been Pwned API
- [**38**Star][3y] [C++] [k2/languagebackdoors](https://github.com/k2/languagebackdoors) Compiler exploits and exploitable non-obvious source code back doors.
-- [**38**Star][2m] [Rust] [jwillbold/rusty-jsyc](https://github.com/jwillbold/rusty-jsyc) JavaScript-To-Bytecode compiler written in Rust
+- [**38**Star][3d] [Rust] [jwillbold/rusty-jsyc](https://github.com/jwillbold/rusty-jsyc) JavaScript-To-Bytecode compiler written in Rust
+- [**38**Star][9m] [Rust] [juxhindb/synner](https://github.com/juxhindb/synner) A TCP SYN flood client written in Rust, powered by libpnet
- [**38**Star][10m] [PHP] [jsmitty12/phpwhois](https://github.com/jsmitty12/phpwhois) phpWhois general repository
- [**38**Star][2y] [Py] [jpiechowka/jenkins-cve-2016-0792](https://github.com/jpiechowka/jenkins-cve-2016-0792) Exploit for Jenkins serialization vulnerability - CVE-2016-0792
-- [**38**Star][3y] [Visual Basic] [johnlatwc/macrojob](https://github.com/johnlatwc/macrojob) Proof of concept VBA code to add to Normal.dot to put restrictions on Word
+- [**38**Star][3y] [Visual Basic .NET] [johnlatwc/macrojob](https://github.com/johnlatwc/macrojob) Proof of concept VBA code to add to Normal.dot to put restrictions on Word
- [**38**Star][4y] [Shell] [jivoi/ansible-pentest-with-tor](https://github.com/jivoi/ansible-pentest-with-tor) Use Tor for anonymous scanning with nmap
-- [**38**Star][3y] [Py] [jevalenciap/iptodomain](https://github.com/jevalenciap/iptodomain) This tool extract domains from IP address based in the information saved in virustotal.
+- [**38**Star][9d] [C] [jedisct1/libhydrogen](https://github.com/jedisct1/libhydrogen) A lightweight, secure, easy-to-use crypto library suitable for constrained environments.
- [**38**Star][1y] [Java] [javafxports/javafxmobile-plugin](https://github.com/javafxports/javafxmobile-plugin) A gradle plugin for building mobile applications in java.
- [**38**Star][2y] [Py] [jasondoyle/google-nest-cam-bug-disclosures](https://github.com/jasondoyle/google-nest-cam-bug-disclosures)
- [**38**Star][5y] [Py] [jakev/oat2dex-python](https://github.com/jakev/oat2dex-python) Extract DEX files from an ART ELF binary
@@ -13413,131 +14322,154 @@ networking routines
- [**38**Star][4m] [Py] [initstring/lyricpass](https://github.com/initstring/lyricpass) Password wordlist generator using song lyrics for targeted bruteforce audits / attacks. Useful for penetration testing or security research.
- [**38**Star][3y] [PHP] [incredibleindishell/local-file-disclosure-sql-injection-lab](https://github.com/incredibleindishell/local-file-disclosure-sql-injection-lab) This is sample code to demonstrate how one can use SQL Injection vulnerability to download local file from server in specific condition. If you have any doubt, ping me at
- [**38**Star][3y] [Py] [hcamael/ctf-library](https://github.com/hcamael/ctf-library) 之Crypto
+- [**38**Star][5y] [Py] [hackedteam/test-av2](https://github.com/hackedteam/test-av2) Automated antivirus test environment (new version)
+- [**38**Star][1y] [Java] [guolei1130/global_httpdns](https://github.com/guolei1130/global_httpdns) 全局HttpDns替换方案
- [**38**Star][1y] [C#] [greycorbel/admpwd](https://github.com/greycorbel/admpwd) AdmPwd project
- [**38**Star][3y] [C] [gnoxter/mountain_goat](https://github.com/gnoxter/mountain_goat) A PoC demonstrating techniques exploiting CVE-2016-5696 Off-Path TCP Exploits: Global Rate Limit Considered Dangerous
- [**38**Star][7m] [githubixx/ansible-role-harden-linux](https://github.com/githubixx/ansible-role-harden-linux) Ansible role for hardening Linux (targeting Ubuntu 16.04/18.04 mainly)
-- [**38**Star][3m] [Py] [gh2o/rvi_capture](https://github.com/gh2o/rvi_capture) rvictl for Linux and Windows: capture packets sent/received by iOS devices
- [**38**Star][5y] [C] [gdbinit/kextstat_aslr](https://github.com/gdbinit/kextstat_aslr) Implementation of kexstat via /dev/kmem with kernel ASLR support
+- [**38**Star][10d] [JS] [frida/frida-compile](https://github.com/frida/frida-compile) Compile a Frida script comprised of one or more Node.js modules
- [**38**Star][3y] [Py] [fotisl/utimaco](https://github.com/fotisl/utimaco) Tools for reverse engineering the Utimaco Firmware
- [**38**Star][1y] [c++] [fluc-uc/emusdk](https://github.com/fluc-uc/emusdk) A simple SDK intended for people new to internal cheats. Written while I was drunk.
- [**38**Star][1y] [C++] [firelizzard18/dc26-badge](https://github.com/firelizzard18/dc26-badge) DefCon 26 Badge Hacking
- [**38**Star][4y] [Py] [fire30/ps4-2014-1303-poc](https://github.com/fire30/ps4-2014-1303-poc)
-- [**38**Star][1y] [PHP] [farisv/cj2018-final-ctf](https://github.com/farisv/cj2018-final-ctf) Cyber Jawara 2018 Final - Attack & Defense CTF services environments based on Docker.
- [**38**Star][3y] [Py] [exploitx3/fuzzbunch](https://github.com/exploitx3/fuzzbunch) FUZZBUNCH - NSA security tools
- [**38**Star][2y] [Go] [evilsocket/brutemachine](https://github.com/evilsocket/brutemachine) A Go library which main purpose is giving an interface to loop over a dictionary and use those words/lines as input for some custom logic such as HTTP file bruteforcing, DNS bruteforcing, etc.
- [**38**Star][7y] [Py] [evilcry/pythonscripts](https://github.com/evilcry/pythonscripts) Collection of my Python Scripts
- [**38**Star][1y] [C] [en14c/pivirus](https://github.com/en14c/pivirus) sample linux x86_64 ELF virus
-- [**38**Star][12d] [OCaml] [draperlaboratory/cbat_tools](https://github.com/draperlaboratory/cbat_tools) Program analysis tools developed at Draper on the CBAT project.
+- [**38**Star][7d] [OCaml] [draperlaboratory/cbat_tools](https://github.com/draperlaboratory/cbat_tools) Program analysis tools developed at Draper on the CBAT project.
+- [**38**Star][2d] [C] [dnsdb/dnsdbq](https://github.com/dnsdb/dnsdbq) DNSDB API Client, C Version
+- [**38**Star][4y] [Py] [danmcinerney/autoresp](https://github.com/danmcinerney/autoresp) Runs Responder, uploads hashes for cracking, alerts when cracked
- [**38**Star][5y] [Julia] [danluu/fuzz.jl](https://github.com/danluu/fuzz.jl) World's dumbest fuzzer
-- [**38**Star][10m] [PowerShell] [curtbraz/invoke-neutralizeav](https://github.com/curtbraz/invoke-neutralizeav) Quick PoC I Wrote for Bypassing Next Gen AV Remotely for Pentesting
+- [**38**Star][3y] [Py] [cysinfo/pymal](https://github.com/cysinfo/pymal) PyMal is a python based interactive Malware Analysis Framework. It is built on the top of three pure python programes Pefile, Pydbg and Volatility.
+- [**38**Star][2m] [JS] [cxueqin/falcon](https://github.com/cxueqin/falcon) 猎鹰网络安全工具,核心功能DOS测试,支持端口扫描,支持CentOS/Ubuntu/MacOS系统。技术构成:nodejs引擎、express框架、nmap工具、tfn2k dos攻击工具、mocha单元测试框架。欢迎大家使用,也欢迎大家一起开发完善。
+- [**38**Star][10m] [PS] [curtbraz/invoke-neutralizeav](https://github.com/curtbraz/invoke-neutralizeav) Quick PoC I Wrote for Bypassing Next Gen AV Remotely for Pentesting
- [**38**Star][4y] [Py] [cudeso/cudeso-honeypot](https://github.com/cudeso/cudeso-honeypot) Honeypot repo
- [**38**Star][7y] [C] [commonexploits/icmpsh](https://github.com/commonexploits/icmpsh) Simple reverse ICMP shell
- [**38**Star][2y] [Java] [codewhitesec/coldfusionpwn](https://github.com/codewhitesec/coldfusionpwn) Exploitation Tool for CVE-2017-3066 targeting Adobe Coldfusion 11/12
-- [**38**Star][8d] [TypeScript] [chef-koch/ffck](https://github.com/chef-koch/ffck)
+- [**38**Star][2d] [TS] [chef-koch/ffck](https://github.com/chef-koch/ffck)
- [**38**Star][3y] [C] [changeofpace/force-page-protection](https://github.com/changeofpace/force-page-protection) This x64dbg plugin sets the page protection for memory mapped views in scenarios which cause NtProtectVirtualMemory to fail.
- [**38**Star][3m] [PHP] [cesnet/pakiti-server](https://github.com/cesnet/pakiti-server) Pakiti provides a monitoring mechanism to check the patching status of Linux systems.
- [**38**Star][3y] [certtools/intelmq-feeds-documentation](https://github.com/certtools/intelmq-feeds-documentation) Cyber Threat Intelligence Feeds
- [**38**Star][3y] [Py] [cerberussecurity/cve-2017-5689](https://github.com/cerberussecurity/cve-2017-5689)
- [**38**Star][2y] [C++] [can1357/physical_mem_controller](https://github.com/can1357/physical_mem_controller) A library to read physical memory and system-wide virtual memory.
- [**38**Star][3y] [C] [boywhp/wifi_crack_windows](https://github.com/boywhp/wifi_crack_windows) wifi crack project for windows
-- [**38**Star][2y] [Py] [bonelee/dns_tunnel_dectect_with_cnn](https://github.com/bonelee/dns_tunnel_dectect_with_cnn) dns tunnel dectect with CNN
- [**38**Star][3y] [bluscreenofjeff/malleablec2profiles](https://github.com/bluscreenofjeff/malleablec2profiles) Malleable C2 profiles for Cobalt Strike
-- [**38**Star][9m] [binarymist/holisticinfosec-for-webdevelopers-fascicle0](https://github.com/binarymist/holisticinfosec-for-webdevelopers-fascicle0)
+- [**38**Star][2y] [Py] [blazeinfosec/ssrf-ntlm](https://github.com/blazeinfosec/ssrf-ntlm) Proof of concept written in Python to show that in some situations a SSRF vulnerability can be used to steal NTLMv1/v2 hashes.
+- [**38**Star][13d] [Py] [bit4woo/dnslog](https://github.com/bit4woo/dnslog) DNSLog 是一款监控 DNS 解析记录和 HTTP 访问记录的工具。
- [**38**Star][4y] [Assembly] [battelle/repsych](https://github.com/battelle/repsych) Psychological warfare in reverse engineering
- [**38**Star][1y] [Py] [ax330d/ida_pdb_loader](https://github.com/ax330d/ida_pdb_loader) IDA PDB Loader
- [**38**Star][2m] [JS] [auth0/auth0-cordova](https://github.com/auth0/auth0-cordova) Auth0 integration for Cordova apps
- [**38**Star][3y] [C++] [aurel26/ts-security-editor](https://github.com/aurel26/ts-security-editor) Terminal Service (RDP) Security Editor
-- [**38**Star][2y] [Visual Basic] [arno0x/webdavdelivery](https://github.com/arno0x/webdavdelivery) A WebDAV PROPFIND covert channel to deliver payloads
-- [**38**Star][3y] [C++] [andreybazhan/dbgext](https://github.com/andreybazhan/dbgext) Debugger extension for the Debugging Tools for Windows (WinDbg, KD, CDB, NTSD).
+- [**38**Star][4d] [PS] [asymmetric-infosec/power-response](https://github.com/asymmetric-infosec/power-response) Powering Up Incident Response with Power-Response
+- [**38**Star][2y] [Visual Basic .NET] [arno0x/webdavdelivery](https://github.com/arno0x/webdavdelivery) A WebDAV PROPFIND covert channel to deliver payloads
+- [**38**Star][1y] [Py] [aptnotes/tools](https://github.com/aptnotes/tools) Tools to interact with APTnotes reporting/index.
- [**38**Star][4y] [AutoIt] [ajmartel/irtriage](https://github.com/ajmartel/irtriage) Incident Response Triage - Windows Evidence Collection for Forensic Analysis
- [**38**Star][1y] [C] [adulau/dcfldd](https://github.com/adulau/dcfldd) dcfldd - enhanced version of dd for forensics and security
- [**38**Star][2y] [Java] [adrianbzg/twitter-follow-exploit](https://github.com/adrianbzg/twitter-follow-exploit) Automated Twitter mass account creation and follow using Selenium and Tor VPN
- [**38**Star][5y] [C++] [adamkramer/rapid_env](https://github.com/adamkramer/rapid_env) Rapid deployment of Windows environment (files, registry keys, mutex etc) to facilitate malware analysis
+- [**38**Star][1y] [Py] [activecm/passer](https://github.com/activecm/passer) Passive service locator, a python sniffer that identifies servers, clients, names and much more
+- [**38**Star][17d] [Go] [9seconds/httransform](https://github.com/9seconds/httransform) A framework to build precise and fast HTTP proxies.
+- [**38**Star][2y] [Java] [5gsd/aicdm](https://github.com/5gsd/aicdm) AICDL collector services and modules
+- [**38**Star][9m] [54yimeng/sia-websites](https://github.com/54yimeng/sia-websites) 这里是我在youtube等上收集的一些科学上网网站的集合,以各自的网站名命名文件夹。
+- [**38**Star][1y] [C++] [3gstudent/eventlogedit-evt--general](https://github.com/3gstudent/eventlogedit-evt--general) Remove individual lines from Windows Event Viewer Log (EVT) files
- [**38**Star][3y] [Py] [0x90/upnp-arsenal](https://github.com/0x90/upnp-arsenal) UPnP hacking scripts and tools
- [**38**Star][4y] [Py] [0x90/routerz](https://github.com/0x90/routerz) Some exploits for ZeroNights 0x03
- [**38**Star][2y] [C] [0x4a47/sectalks-mel0x14-ctf](https://github.com/0x4a47/sectalks-mel0x14-ctf) Sectalks MEL0x14 CTF
-- [**37**Star][2y] [PowerShell] [hackplayers/reverseshell](https://github.com/hackplayers/reverseshell) A simple PowerShell script that we can use for easing the process of creating a reverse shell and automating Meterpreter update
-- [**37**Star][3m] [Perl] [theos/logos](https://github.com/theos/logos) Preprocessor that simplifies Objective-C hooking.
-- [**37**Star][3y] [wtsxdev/exploit-development](https://github.com/wtsxdev/exploit-development) Resources for learning about Exploit Development
+- [**37**Star][1m] [Java] [xausky/shadowsocksgostplugin](https://github.com/xausky/shadowsocksgostplugin) Gost 的 Shadowsocks 安卓插件,可以直接在 Shadowsocks 安卓客户端上连接 Gost 服务器
+- [**37**Star][2d] [Py] [mhaskar/octopus](https://github.com/mhaskar/octopus) Open source pre-operation C2 server based on python and powershell
+- [**37**Star][5y] [PHP] [snifer/l4bsforshell](https://github.com/snifer/l4bsforshell)
+- [**37**Star][2y] [PS] [hackplayers/reverseshell](https://github.com/hackplayers/reverseshell) A simple PowerShell script that we can use for easing the process of creating a reverse shell and automating Meterpreter update
+- [**37**Star][2m] [C] [intel/kernelflinger](https://github.com/intel/kernelflinger) the Intel UEFI bootloader for AndroidTM/BrilloTM
+- [**37**Star][8d] [Perl] [theos/logos](https://github.com/theos/logos) Preprocessor that simplifies Objective-C hooking.
+- [**37**Star][3y] [rednaga/disclosures](https://github.com/rednaga/disclosures) A place for disclosing things
+- [**37**Star][3y] [C] [cn33liz/easysystem](https://github.com/cn33liz/easysystem) Quick and dirty System (Power)Shell using NamedPipe impersonation.
- [**37**Star][4y] [C#] [cn33liz/sharpcat](https://github.com/cn33liz/sharpcat) SharpCat - A Simple Reversed Command Shell which can be started using InstallUtil (Bypassing AppLocker)
-- [**37**Star][17d] [Shell] [shibli2700/rekon](https://github.com/shibli2700/rekon) The project contains multiple shell scripts for automating the tasks which most of the hackers struggle during their recon phase.
+- [**37**Star][2y] [Shell] [pwnieexpress/pwn_pad_sources](https://github.com/pwnieexpress/pwn_pad_sources) Public source repository for the Pwn Pad platform.
+- [**37**Star][8d] [Py] [vdoo-connected-trust/ghidra-pyi-generator](https://github.com/vdoo-connected-trust/ghidra-pyi-generator) Generates `.pyi` type stubs for the entire Ghidra API
- [**37**Star][1y] [C#] [codeofdark/panda-obfuscator](https://github.com/codeofdark/panda-obfuscator) PandaObfuscator an simple Obfuscator, free, OpenSource for .Net Applications
-- [**37**Star][2m] [C] [alxbrn/gdrv-loader](https://github.com/alxbrn/gdrv-loader) Kernel driver loader using vulnerable gigabyte driver (
+- [**37**Star][2y] [vduddu/pentestresources](https://github.com/vduddu/PentestResources) A list of resources for Pentesting from various sources
- [**37**Star][9m] [Go] [prsecurity/golang_c2](https://github.com/prsecurity/golang_c2) Boilerplate C2 written in Go for red teams
-- [**37**Star][1m] [Java] [flankerhqd/vendor-android-cves](https://github.com/flankerhqd/vendor-android-cves) Collections of my POCs for android vendor CVEs
+- [**37**Star][3d] [Java] [gedsh/invizible](https://github.com/gedsh/invizible) Android application for Internet privacy and security
- [**37**Star][1y] [HTML] [madhuakula/security-automation-with-ansible-2](https://github.com/madhuakula/security-automation-with-ansible-2) Ansible Playbooks for Security Automation with Ansible2 book
-- [**37**Star][10m] [C] [mwrlabs/3d-accelerated-exploitation](https://github.com/FSecureLABS/3d-accelerated-exploitation) 3D Accelerated Exploitation
-- [**37**Star][19d] [Py] [soscleaner/soscleaner](https://github.com/soscleaner/soscleaner) A python application to clean sensitive and un-wanted data from an existing sosreport
+- [**37**Star][3m] [C#] [nyan-x-cat/uac-escaper](https://github.com/nyan-x-cat/uac-escaper) Escalation / Bypass Windows UAC
+- [**37**Star][2y] [HTML] [electroniccats/samykamtools](https://github.com/ElectronicCats/SamyKamTools) Magnetic Pentesting tool for Raspberry Pi
+- [**37**Star][21d] [Py] [soscleaner/soscleaner](https://github.com/soscleaner/soscleaner) A python application to clean sensitive and un-wanted data from an existing sosreport
- [**37**Star][5y] [Assembly] [muffins/rookit_playground](https://github.com/muffins/rookit_playground) Educational repository for learning about rootkits and Windows Kernel Hooks.
- [**37**Star][6m] [Java] [hsiafan/cute-proxy](https://github.com/hsiafan/cute-proxy) A Man-In-The-Middle Proxy as Fiddle and Charles, using Netty, JavaFX
-- [**37**Star][22d] [Py] [robotools/defcon](https://github.com/robotools/defcon) A set of UFO based objects for use in font editing applications.
-- [**37**Star][1m] [Java] [flankerhqd/vendor-android-cves](https://github.com/flankerhqd/vendor-android-cves) Collections of my POCs for android vendor CVEs
+- [**37**Star][24d] [Py] [robotools/defcon](https://github.com/robotools/defcon) A set of UFO based objects for use in font editing applications.
+- [**37**Star][6d] [Go] [zpsean/go4api](https://github.com/zpsean/go4api) Go4Api - an API testing tool written in Go
+- [**37**Star][5y] [C++] [zer0mem/kernelproject](https://github.com/zer0mem/kernelproject) Plain project for usege with github/zer0mem/common.git
- [**37**Star][9m] [C++] [ze0r/cve-2019-0808-poc](https://github.com/ze0r/cve-2019-0808-poc) cve-2019-0808-poc
- [**37**Star][3y] [C++] [yejiansnake/windows-sys-base](https://github.com/yejiansnake/windows-sys-base) windows 系统API C++封装库,包含进程间通讯,互斥,内存队列等通用功能
-- [**37**Star][18d] [Py] [ydkhatri/macforensics](https://github.com/ydkhatri/macforensics) Scripts to process OSX forensic artifacts
-- [**37**Star][4y] [Java] [xyntax/jboss-exp](https://github.com/xyntax/jboss-exp) java反序列化漏洞利用-JBOSS(含payload生成的java项目,漏洞利用py脚本,shodan部分目标主机搜索结果)
+- [**37**Star][20d] [Py] [ydkhatri/macforensics](https://github.com/ydkhatri/macforensics) Scripts to process OSX forensic artifacts
- [**37**Star][7m] [C#] [woanware/autorunner](https://github.com/woanware/autorunner) Emulates the Sysinternals Autoruns tool, but for DFIR purposes e.g. multi user processing
-- [**37**Star][3y] [PowerShell] [wkleinhenz/powershell-botnet](https://github.com/wkleinhenz/powershell-botnet) A POC powershell botnet
+- [**37**Star][3y] [PS] [wkleinhenz/powershell-botnet](https://github.com/wkleinhenz/powershell-botnet) A POC powershell botnet
- [**37**Star][1y] [Py] [weebsec/weebdns](https://github.com/weebsec/weebdns) DNS Enumeration with Asynchronicity
- [**37**Star][2y] [Py] [warner/petmail](https://github.com/warner/petmail) secure messaging, file-transfer, and directory synchronization
- [**37**Star][3y] [Py] [wal99d/slowloris](https://github.com/wal99d/slowloris) Python code demonstrating the how-to part of L7 Application DDoS Attack called SlowLoris
+- [**37**Star][3y] [Py] [villanch/pr0xy](https://github.com/villanch/pr0xy) 教学用多线程扫描框架(代理扫描)
+- [**37**Star][2y] [vduddu/pentestresources](https://github.com/vduddu/pentestresources) A list of resources for Pentesting from various sources
+- [**37**Star][9m] [PHP] [vanvan/ipfsproxyhttp](https://github.com/vanvan/ipfsproxyhttp) InterPlanetary File System HTTP Proxy
- [**37**Star][3y] [C] [tylous/auto_eap](https://github.com/tylous/auto_eap) Automated Brute-Force Login Attacks Against EAP Networks.
- [**37**Star][3m] [C] [twistlock/runc-cve-2019-5736](https://github.com/twistlock/runc-cve-2019-5736) CVE-2019-5736 POCs
- [**37**Star][1y] [Py] [trustedsec/auto_settingcontent-ms](https://github.com/trustedsec/auto_settingcontent-ms) This is a quick POC for using the Matt Nelson (enigma0x3) technique for generating a malicious .SettingContent-ms extension type for remote code execution. This automates generating an HTA downloader and embeds it in the SettingContent-ms file for you and starts Apache.
+- [**37**Star][2y] [Go] [tomsteele/pen-utils](https://github.com/tomsteele/pen-utils) Trivial unixey pentest utilities
- [**37**Star][2y] [Py] [ticosax/pseud](https://github.com/ticosax/pseud) Pythonic bi-directional RPC API built on top of ØMQ.
- [**37**Star][3y] [Py] [the-c0d3r/sqli-scanner](https://github.com/the-c0d3r/sqli-scanner) A tool to mass scan SQL Injection Vulnerable websites from a file.
- [**37**Star][2y] [tevora-threat/aggressor-powerview](https://github.com/tevora-threat/aggressor-powerview) PowerView menu for Cobalt Strike
- [**37**Star][3y] [C] [techgaun/mirai](https://github.com/techgaun/mirai) Mirai related codes and stuff
-- [**37**Star][2y] [C++] [tanninone/usvfs](https://github.com/tanninone/usvfs) library using api hooking to implement process-local filesystem-independent file links.
- [**37**Star][4y] [C] [tandasat/scavenger](https://github.com/tandasat/scavenger) A minifilter driver preserves all modified and deleted files.
+- [**37**Star][1y] [Py] [tahz7/traffic_analyser](https://github.com/tahz7/traffic_analyser) Retrieve useful information from apache/nginx access logs to help troubleshoot traffic related problems
- [**37**Star][1y] [Shell] [syncsrc/microrenovator](https://github.com/syncsrc/microrenovator) Pre-OS microcode updater
- [**37**Star][12m] [Py] [spiderlabs/owasp-crs-documentation](https://github.com/spiderlabs/owasp-crs-documentation) Documentation for the OWASP CRS project
-- [**37**Star][3m] [spiderlabs/iocs-idps](https://github.com/spiderlabs/iocs-idps) This repository will hold PCAP IOC data related with known malware samples (owner: Bryant Smith)
- [**37**Star][5y] [C] [sk4ld/gridpot](https://github.com/sk4ld/gridpot) Open source tools for realistic-behaving electric grid honeynets
-- [**37**Star][4y] [Assembly] [sh3llc0d3r1337/windows_reverse_shell_1](https://github.com/sh3llc0d3r1337/windows_reverse_shell_1) Windows Reverse Shell shellcode
-- [**37**Star][27d] [Shell] [security-onion-solutions/securityonion-elastic](https://github.com/security-onion-solutions/securityonion-elastic) Security Onion Elastic Stack
-- [**37**Star][11d] [Py] [sdnewhop/grinder](https://github.com/sdnewhop/grinder)
+- [**37**Star][2y] [PHP] [sjord/jwtdemo](https://github.com/sjord/jwtdemo) Practice hacking JWT tokens
+- [**37**Star][29d] [Shell] [security-onion-solutions/securityonion-elastic](https://github.com/security-onion-solutions/securityonion-elastic) Security Onion Elastic Stack
- [**37**Star][3y] [JS] [saelo/feuerfuchs](https://github.com/saelo/feuerfuchs) Files for the "feuerfuchs" challenge of 33C3 CTF. See the greeting message in server.py for more information about the challenge
-- [**37**Star][7d] [C++] [rust-fuzz/libfuzzer-sys](https://github.com/rust-fuzz/libfuzzer-sys)
+- [**37**Star][9d] [C++] [rust-fuzz/libfuzzer-sys](https://github.com/rust-fuzz/libfuzzer-sys)
- [**37**Star][10m] [Py] [raz0r/aemscan](https://github.com/raz0r/aemscan) Adobe Experience Manager Vulnerability Scanner
- [**37**Star][2y] [Py] [rahiel/firectl](https://github.com/rahiel/firectl) Control Firejail desktop integration.
+- [**37**Star][2m] [Lua] [r00t-3xp10it/nmap-nse-modules](https://github.com/r00t-3xp10it/nmap-nse-modules) My collection of nmap nse modules
- [**37**Star][7y] [JS] [ptcoresec/ctf-scoreboard](https://github.com/ptcoresec/ctf-scoreboard) A scoreboard for Security CTF events
+- [**37**Star][3d] [Go] [projectcalico/typha](https://github.com/projectcalico/typha) Calico's datastore fan-out daemon.
+- [**37**Star][2y] [Java] [portswigger/distribute-damage](https://github.com/portswigger/distribute-damage) Evenly distributes scanner load across targets
- [**37**Star][5y] [Py] [philwantsfish/gdb_commands](https://github.com/philwantsfish/gdb_commands) GDB commands to aid exploit development
- [**37**Star][12m] [C++] [patois/nesldr](https://github.com/patois/nesldr) Nintendo Entertainment System (NES) ROM loader module for IDA Pro
- [**37**Star][3y] [C] [p0cl4bs/thanos](https://github.com/p0cl4bs/thanos) Thanos is a tool made for scan a range of IP's and get the banners of the running services. The main function is do banner grabber, but you also can use this for exploit vulnerabilities, find proxy servers, or simply check for open ports.
-- [**37**Star][28d] [Java] [openzipkin/zipkin-finagle](https://github.com/openzipkin/zipkin-finagle) Integration between Finagle tracing to Zipkin transports such as http and kafka
+- [**37**Star][30d] [Java] [openzipkin/zipkin-finagle](https://github.com/openzipkin/zipkin-finagle) Integration between Finagle tracing to Zipkin transports such as http and kafka
+- [**37**Star][2y] [Py] [netkiller/firewall](https://github.com/netkiller/firewall) Python Firewall Library
+- [**37**Star][2y] [C#] [n0ise9914/rdpchecker](https://github.com/n0ise9914/rdpchecker) Stable and reliable multiple RDP checker written in C#
- [**37**Star][3y] [C] [mwsrc/mass-malicious-script-dump](https://github.com/mwsrc/mass-malicious-script-dump) Mass malicious script dump/Malware src dump
-- [**37**Star][3y] [Py] [mthbernardes/strutszeiro](https://github.com/mthbernardes/strutszeiro) Telegram Bot to manage botnets created with struts vulnerability(CVE-2017-5638)
- [**37**Star][2y] [C++] [mstefanowich/filesignaturehijack](https://github.com/mstefanowich/filesignaturehijack) C proof-of-concept of Mattifestations paper on signature hijacking
- [**37**Star][8m] [Py] [mozillasecurity/quokka](https://github.com/mozillasecurity/quokka) Quokka is a utility to launch and monitor application for faults.
- [**37**Star][3y] [HTML] [mortenschenk/rtlcapturecontext-cfg-bypass](https://github.com/mortenschenk/rtlcapturecontext-cfg-bypass) Internet Explorer Exploit with CFG bypass for Windows 10
- [**37**Star][3y] [PHP] [mortedamos/vehicle-hacking](https://github.com/mortedamos/vehicle-hacking) Guides and scripts for vehicle cybersecurity research
-- [**37**Star][11m] [PowerShell] [minervalabsresearch/blogposts](https://github.com/minervalabsresearch/blogposts) Code examples from recent blog posts by minerva labs.
-- [**37**Star][13d] [C] [microsoft/cfu](https://github.com/microsoft/cfu) Component Firmware Update
+- [**37**Star][2y] [C] [mlafeldt/ps2rd](https://github.com/mlafeldt/ps2rd) Collection of tools to remotely debug PS2 games
+- [**37**Star][11m] [PS] [minervalabsresearch/blogposts](https://github.com/minervalabsresearch/blogposts) Code examples from recent blog posts by minerva labs.
+- [**37**Star][15d] [C] [microsoft/cfu](https://github.com/microsoft/cfu) Component Firmware Update
- [**37**Star][2y] [Py] [medicean/sublimexssencode](https://github.com/medicean/sublimexssencode) Converts characters from one encoding to another using a transformation.
-- [**37**Star][1m] [Shell] [maravento/blackip](https://github.com/maravento/blackip) IPs Blacklist for Ipset/Squid
+- [**37**Star][6d] [Shell] [maravento/blackip](https://github.com/maravento/blackip) IPs Blacklist for Ipset/Squid
- [**37**Star][2y] [mailinneberg/broadpwn](https://github.com/mailinneberg/broadpwn) Broadpwn bug (CVE-2017-9417)
-- [**37**Star][2y] [Assembly] [macmade/obfuscate](https://github.com/macmade/obfuscate) C/C++ machine code obfuscation.
-- [**37**Star][2y] [Py] [m4n3dw0lf/sslkill](https://github.com/m4n3dw0lf/sslkill) Forced Man-In-The-Middle HTTPs-Avoiding Reverse Proxy
+- [**37**Star][5m] [Py] [m57/piescan](https://github.com/m57/piescan) A simple fast port scanner for when you cant use Nmap on a pentest.
- [**37**Star][3y] [Py] [luckygeck/ycmdcompletion](https://github.com/luckygeck/ycmdcompletion) Sublime Text 3 plugin for C++ code completion and error highlighting, based on Ycmd server
- [**37**Star][1y] [Java] [lmax-exchange/angler](https://github.com/lmax-exchange/angler) A utility for monitoring UDP message-processing
-- [**37**Star][12d] [Tcl] [llir/grammar](https://github.com/llir/grammar) EBNF grammar of LLVM IR assembly.
+- [**37**Star][7d] [Tcl] [llir/grammar](https://github.com/llir/grammar) EBNF grammar of LLVM IR assembly.
- [**37**Star][1m] [C] [libyal/libolecf](https://github.com/libyal/libolecf) Library and tools to access the OLE 2 Compound File (OLECF) format
+- [**37**Star][1y] [Py] [lasq88/deobfuscate](https://github.com/lasq88/deobfuscate) Python script to automatically deobfuscate malware code
- [**37**Star][5y] [C++] [lallousx86/graphslick](https://github.com/lallousx86/graphslick) IDA Plugin - GraphSlick
-- [**37**Star][7y] [C] [korczis/upx](https://github.com/korczis/upx) UPX is a free, portable, extendable, high-performance executable packer for several executable formats. See
+- [**37**Star][8y] [C] [korczis/upx](https://github.com/korczis/upx) UPX is a free, portable, extendable, high-performance executable packer for several executable formats. See
- [**37**Star][3y] [Py] [killswitch-gui/lterm](https://github.com/killswitch-gui/lterm) lterm is a small script built to install a bash hook for full terminal logging.
- [**37**Star][2y] [JS] [kevva/caw](https://github.com/kevva/caw) Construct HTTP/HTTPS agents for tunneling proxies
- [**37**Star][2y] [HTML] [keenrivals/bugsite-index](https://github.com/keenrivals/bugsite-index) Index of websites publishing bugs along the lines of heartbleed.com
-- [**37**Star][9m] [Rust] [juxhindb/synner](https://github.com/juxhindb/synner) A TCP SYN flood client written in Rust, powered by libpnet
+- [**37**Star][4y] [Java] [julianschuette/condroid](https://github.com/julianschuette/condroid) Symbolic/concolic execution of Android apps
- [**37**Star][6y] [Py] [johnnykv/mnemosyne](https://github.com/johnnykv/mnemosyne) Normalizer for honeypot data.
-- [**37**Star][20d] [Kotlin] [itznotabug/checkoutverifier](https://github.com/itznotabug/checkoutverifier) Verify your In-App Purchase receipts & protect your Apps from hacking, patching used by Piracy Apps like Lucky Patcher.
+- [**37**Star][7d] [Kotlin] [itznotabug/checkoutverifier](https://github.com/itznotabug/checkoutverifier) Verify your In-App Purchase receipts & protect your Apps from hacking, patching used by Piracy Apps like Lucky Patcher.
- [**37**Star][2y] [JS] [idc/ps4-entrypoint-405](https://github.com/idc/ps4-entrypoint-405) A fully implemented kernel exploit for the PS4 on 4.05FW
+- [**37**Star][4m] [Py] [hugsy/gef-extras](https://github.com/hugsy/gef-extras) Extra goodies for GEF: Open repository for unfiltered contributions to the project.
- [**37**Star][11m] [Py] [hook-s3c/cve-2018-18852](https://github.com/hook-s3c/cve-2018-18852) CERIO RCE CVE-2018-18852, authenticated (vendor defaults) web-based RCE as root user.
-- [**37**Star][5y] [Py] [hackedteam/test-av2](https://github.com/hackedteam/test-av2) Automated antivirus test environment (new version)
-- [**37**Star][1y] [Java] [guolei1130/global_httpdns](https://github.com/guolei1130/global_httpdns) 全局HttpDns替换方案
-- [**37**Star][8d] [C] [greenbone/gvm-libs](https://github.com/greenbone/gvm-libs) Greenbone Vulnerability Management Libraries
-- [**37**Star][6y] [C] [gdbinit/crackme_nr1](https://github.com/gdbinit/crackme_nr1) fG!'s crackme #1 source code
-- [**37**Star][8d] [JS] [frida/frida-compile](https://github.com/frida/frida-compile) Compile a Frida script comprised of one or more Node.js modules
+- [**37**Star][4d] [C] [greenbone/gvm-libs](https://github.com/greenbone/gvm-libs) Greenbone Vulnerability Management Libraries
+- [**37**Star][7y] [C] [gdbinit/crackme_nr1](https://github.com/gdbinit/crackme_nr1) fG!'s crackme #1 source code
- [**37**Star][2y] [C++] [flier/zipkin-cpp](https://github.com/flier/zipkin-cpp) Zipkin tracing library for C/C++
- [**37**Star][4y] [C++] [flankerhqd/cve-2015-6620-poc](https://github.com/flankerhqd/cve-2015-6620-poc) POC for CVE-2015-6620, AMessage unmarshal arbitrary write
- [**37**Star][6y] [Ruby] [fishermansenemy/bucket_finder](https://github.com/fishermansenemy/bucket_finder) Amazon bucket brute force tool
@@ -13545,222 +14477,232 @@ networking routines
- [**37**Star][4y] [Py] [fabio-d/honeypot](https://github.com/fabio-d/honeypot) Honeypot that emulates several protocols (incl. SSH, telnet, SMTP, HTTP, SSL and SIP)
- [**37**Star][3m] [C++] [ez8-co/emock](https://github.com/ez8-co/emock)
- [**37**Star][4y] [Py] [exploit-install/shellsploit-framework](https://github.com/exploit-install/shellsploit-framework) New Generation Exploit Development Kit
-- [**37**Star][12m] [ekoparty/ekolabs](https://github.com/ekoparty/ekolabs) EKOLABS esta dedicada para investigadores independientes y para la comunidad del Software Libre. Vamos a proveer de stands completos con monitor, alimentacion de energia y acceso a internet por cable, y vos vas a traer tu maquina para mostrar tu trabajo y responder preguntas de los participantes de Ekoparty Security Conference
+- [**37**Star][1y] [ekoparty/ekolabs](https://github.com/ekoparty/ekolabs) EKOLABS esta dedicada para investigadores independientes y para la comunidad del Software Libre. Vamos a proveer de stands completos con monitor, alimentacion de energia y acceso a internet por cable, y vos vas a traer tu maquina para mostrar tu trabajo y responder preguntas de los participantes de Ekoparty Security Conference
- [**37**Star][10m] [Java] [egguncle/xposednavigationbar](https://github.com/egguncle/xposednavigationbar) Xposed导航栏功能拓展模块
- [**37**Star][1y] [C] [egguncle/ptraceinject](https://github.com/egguncle/ptraceinject) 进程注入
- [**37**Star][2y] [edoverflow/bug-bounty-responses](https://github.com/edoverflow/bug-bounty-responses) A collection of response templates for invalid bug bounty reports.
- [**37**Star][3y] [Py] [dungtv543/dutas](https://github.com/dungtv543/dutas) Analysis PE file or Shellcode
- [**37**Star][1y] [Ruby] [dreadlocked/ssrfmap](https://github.com/dreadlocked/ssrfmap) Simple Server Side Request Forgery services enumeration tool.
-- [**37**Star][1m] [d1nfinite/sec-interview](https://github.com/d1nfinite/sec-interview) 信息安全面试题汇总
-- [**37**Star][12d] [C] [dnsdb/dnsdbq](https://github.com/dnsdb/dnsdbq) DNSDB API Client, C Version
+- [**37**Star][2y] [PS] [dmb2168/oauthhunting](https://github.com/dmb2168/oauthhunting)
- [**37**Star][1y] [Py] [dhn/osce](https://github.com/dhn/osce) Some exploits, which I’ve created during my OSCE preparation.
- [**37**Star][1m] [Py] [desword/shellcode_tools](https://github.com/desword/shellcode_tools) Useful tools for writing shellcode
- [**37**Star][2y] [PHP] [dcid/doh-php-client](https://github.com/dcid/doh-php-client) DoH (DNS over HTTPS) PHP Client
-- [**37**Star][4y] [Py] [danmcinerney/autoresp](https://github.com/danmcinerney/autoresp) Runs Responder, uploads hashes for cracking, alerts when cracked
-- [**37**Star][3y] [Py] [cysinfo/pymal](https://github.com/cysinfo/pymal) PyMal is a python based interactive Malware Analysis Framework. It is built on the top of three pure python programes Pefile, Pydbg and Volatility.
-- [**37**Star][2m] [JS] [cxueqin/falcon](https://github.com/cxueqin/falcon) 猎鹰网络安全工具,核心功能DOS测试,支持端口扫描,支持CentOS/Ubuntu/MacOS系统。技术构成:nodejs引擎、express框架、nmap工具、tfn2k dos攻击工具、mocha单元测试框架。欢迎大家使用,也欢迎大家一起开发完善。
+- [**37**Star][3y] [C] [cylancevulnresearch/osx_runbin](https://github.com/cylancevulnresearch/osx_runbin)
- [**37**Star][3y] [ctftime/ctftime.org](https://github.com/ctftime/ctftime.org) meta repository for ctftime.org issues, feature-requests etc
- [**37**Star][7m] [Py] [coalfire-research/vampire](https://github.com/coalfire-research/vampire) Vampire is an aggressor script which integrates with BloodHound to mark nodes as owned.
- [**37**Star][7m] [Batchfile] [cervoise/abuse-bash-for-windows](https://github.com/cervoise/abuse-bash-for-windows) Pentest scripts for abuse Bash on Windows (Cygwin/WSL) - HackLu 2018
- [**37**Star][3y] [Java] [cert-se/megatron-java](https://github.com/cert-se/megatron-java) Megatron - A System for Abuse- and Incident Handling
-- [**37**Star][5m] [C++] [carbonblack/hexraysdeob](https://github.com/carbonblack/hexraysdeob) Hex-Rays microcode API plugin for breaking an obfuscating compiler
+- [**37**Star][2y] [C++] [cedarctic/digiquack](https://github.com/cedarctic/digiquack) A DuckyScript language to DigiSpark payload converter based on C++
+- [**37**Star][6m] [C++] [carbonblack/hexraysdeob](https://github.com/carbonblack/hexraysdeob) Hex-Rays microcode API plugin for breaking an obfuscating compiler
- [**37**Star][1m] [Makefile] [c0deh4cker/pwnableharness](https://github.com/c0deh4cker/pwnableharness) Manage building and deploying exploitation challenges with ease
-- [**37**Star][12d] [Py] [bytesoverbombs/virusshare-search](https://github.com/bytesoverbombs/virusshare-search) Downloads VirusShare hashes (
+- [**37**Star][14d] [Py] [bytesoverbombs/virusshare-search](https://github.com/bytesoverbombs/virusshare-search) Downloads VirusShare hashes (
- [**37**Star][8m] [Py] [bx/bootloader_instrumentation_suite](https://github.com/bx/bootloader_instrumentation_suite) Bootloader 研究工具
- [**37**Star][3y] [C++] [breakingmalwareresearch/cfgexceptions](https://github.com/breakingmalwareresearch/cfgexceptions) Adding exceptions to Microsoft's Control Flow Guard (CFG)
-- [**37**Star][2y] [Py] [blazeinfosec/ssrf-ntlm](https://github.com/blazeinfosec/ssrf-ntlm) Proof of concept written in Python to show that in some situations a SSRF vulnerability can be used to steal NTLMv1/v2 hashes.
- [**37**Star][5y] [Py] [bfosterjr/ufgraph](https://github.com/bfosterjr/ufgraph)
+- [**37**Star][8y] [bes/keystorebrute](https://github.com/bes/keystorebrute) A Keystore Brute-force attacker.
+- [**37**Star][1y] [Java] [augustd/burp-suite-error-message-checks](https://github.com/augustd/burp-suite-error-message-checks) Burp Suite extension to passively scan for applications revealing server error messages
- [**37**Star][5y] [C] [aloz77/hiktools](https://github.com/aloz77/hiktools) Tools for Hikvision IP cameras
-- [**37**Star][1y] [Py] [activecm/passer](https://github.com/activecm/passer) Passive service locator, a python sniffer that identifies servers, clients, names and much more
- [**37**Star][1y] [C] [abiondo/afl](https://github.com/abiondo/afl) My fork of American Fuzzy Lop
-- [**37**Star][15d] [Go] [9seconds/httransform](https://github.com/9seconds/httransform) A framework to build precise and fast HTTP proxies.
+- [**37**Star][4y] [Py] [73696e65/windows-exploits](https://github.com/73696e65/windows-exploits) Used for the osce exam preparation
- [**37**Star][2y] [C++] [3gstudent/shellcode-generater](https://github.com/3gstudent/shellcode-generater) No inline asm,support x86/x64
-- [**37**Star][11m] [C++] [3gstudent/from-system-authority-to-medium-authority](https://github.com/3gstudent/from-system-authority-to-medium-authority) Penetration test
-- [**37**Star][1y] [C++] [3gstudent/eventlogedit-evt--general](https://github.com/3gstudent/eventlogedit-evt--general) Remove individual lines from Windows Event Viewer Log (EVT) files
+- [**37**Star][7d] [C++] [3gstudent/from-system-authority-to-medium-authority](https://github.com/3gstudent/from-system-authority-to-medium-authority) Penetration test
- [**37**Star][2y] [Py] [1337g/cve-2017-10271](https://github.com/1337g/cve-2017-10271) CVE-2017-10271 WEBLOGIC RCE (TESTED)
- [**37**Star][3y] [C] [0xbadc0de1/vmp_dbg](https://github.com/0xbadc0de1/vmp_dbg) This is a VmProtect integrated debugger, that will essentially allow you to disasm and debug vmp partially virtualized functions at the vmp bytecode level. It was made using TitanEngine for the debug engine and Qt for the gui. Do not expect much of it and feel free to report any bugs.
+- [**36**Star][3y] [Go] [davidqhr/socccks](https://github.com/davidqhr/socccks) Socccks is a shadowsocks like separated socks5 proxy
- [**36**Star][3y] [Py] [vulnerscom/scripts](https://github.com/vulnerscom/scripts) Some useful scripts for penetration testing
- [**36**Star][3y] [offensive-security/kali-scripts](https://github.com/offensive-security/kali-scripts) Various Kali Scripts
- [**36**Star][3y] [Py] [averagesecurityguy/exfil](https://github.com/averagesecurityguy/exfil) Modular tool to test exfiltration techniques.
-- [**36**Star][2y] [Py] [cisco-talos/covnavi](https://github.com/cisco-talos/covnavi)
-- [**36**Star][2y] [Shell] [pwnieexpress/pwn_pad_sources](https://github.com/pwnieexpress/pwn_pad_sources) Public source repository for the Pwn Pad platform.
-- [**36**Star][10m] [Kotlin] [cbeuw/cloak-android](https://github.com/cbeuw/cloak-android) Android client of Cloak
+- [**36**Star][2d] [CSS] [frida/frida-website](https://github.com/frida/frida-website) Frida's website
+- [**36**Star][11m] [Py] [tidesec/common_spider](https://github.com/tidesec/common_spider) 一个还算通用的爬虫脚本,可自己设定爬取的深度,可以把动态页面和外链单独分出来~
+- [**36**Star][16d] [JS] [snyk/broker](https://github.com/snyk/broker) A broker system between a public service and a private service
- [**36**Star][2y] [C++] [blole/injectory](https://github.com/blole/injectory) command-line interface dll injector
-- [**36**Star][2y] [vduddu/pentestresources](https://github.com/vduddu/PentestResources) A list of resources for Pentesting from various sources
+- [**36**Star][11m] [Py] [pilgun/acvtool](https://github.com/pilgun/acvtool) ACVTool is a novel tool for measuring black-box code coverage of Android applications.
+- [**36**Star][1m] [Java] [ayrx/jnianalyzer](https://github.com/ayrx/jnianalyzer) Analysis scripts for Ghidra to work with Android NDK libraries.
+- [**36**Star][5y] [Py] [hiteshchoudhary/airvengers](https://github.com/hiteshchoudhary/airvengers) A GUI to pentest wifi Network, based on Aircrack-ng tools
+- [**36**Star][8d] [C++] [chickenhook/chickenhook](https://github.com/chickenhook/chickenhook) A linux / android hooking framework
- [**36**Star][3m] [PHP] [x-o-r-r-o/php-webshells-collection](https://github.com/x-o-r-r-o/php-webshells-collection) Most Wanted Private and Public PHP Web Shells Can Be Downloaded Here. (Educational Purpose Only)
- [**36**Star][2m] [Shell] [itshaadi/torbox](https://github.com/itshaadi/torbox) Container-based Tor access point (Anonymizing Middlebox).
-- [**36**Star][2y] [Shell] [re4son/pocket-kali-live-build](https://github.com/Re4son/Pocket-Kali-live-build) Debian live build for the Pocket-Kali
+- [**36**Star][3y] [Py] [lightless233/pansidong](https://github.com/lightless233/Pansidong) 盘丝洞 - 自动化WEB漏洞扫描器
- [**36**Star][2y] [Ruby] [opensourcesec/malstrom](https://github.com/opensourcesec/malstrom) Cyber Intel Management
- [**36**Star][1y] [Go] [joshrendek/hnypots-agent](https://github.com/joshrendek/hnypots-agent) A SSH Server in Go that logs username/password combos
- [**36**Star][1y] [Py] [newbee119/ctf_ics_traffic](https://github.com/NewBee119/ctf_ics_traffic) 工控CTF比赛工具,各种网络数据包处理脚本
- [**36**Star][2y] [rivaill/blockchain-security-awesome](https://github.com/Rivaill/blockchain-security-awesome) A curated list of awesome things related to blockchain security
-- [**36**Star][2m] [Go] [zpsean/go4api](https://github.com/zpsean/go4api) Go4Api - an API testing tool written in Go
-- [**36**Star][5y] [C++] [zer0mem/kernelproject](https://github.com/zer0mem/kernelproject) Plain project for usege with github/zer0mem/common.git
+- [**36**Star][1m] [Py] [zephrfish/burpfeed](https://github.com/zephrfish/burpfeed) Hacked together script for feeding urls into Burp's Sitemap
- [**36**Star][1y] [Shell] [xhak9x/hak9tools](https://github.com/xhak9x/hak9tools) All Hak9 Tools
-- [**36**Star][9m] [Visual Basic] [visualbasic6/subdomain-bruteforce](https://github.com/visualbasic6/subdomain-bruteforce) a subdomain brute forcing tool for windows
-- [**36**Star][3y] [Py] [villanch/pr0xy](https://github.com/villanch/pr0xy) 教学用多线程扫描框架(代理扫描)
-- [**36**Star][13d] [C++] [verizondigital/waflz](https://github.com/verizondigital/waflz) multitenant ModSecurity compatible WAF engine from Verizon Digital Media Services
-- [**36**Star][1y] [C++] [venam/browser](https://github.com/venam/browser) A Simple to use yet efficient headers only library ( wrapped over libcurl / curl wrapper ) to do browser emulation (emulate) or web interaction in C++.
-- [**36**Star][2y] [vduddu/pentestresources](https://github.com/vduddu/pentestresources) A list of resources for Pentesting from various sources
+- [**36**Star][8d] [Shell] [wicg/ua-client-hints](https://github.com/wicg/ua-client-hints) Wouldn't it be nice if `User-Agent` was a (set of) client hints?
+- [**36**Star][9m] [Visual Basic .NET] [visualbasic6/subdomain-bruteforce](https://github.com/visualbasic6/subdomain-bruteforce) a subdomain brute forcing tool for windows
+- [**36**Star][15d] [C++] [verizondigital/waflz](https://github.com/verizondigital/waflz) multitenant ModSecurity compatible WAF engine from Verizon Digital Media Services
- [**36**Star][5y] [Go] [traetox/sshforshits](https://github.com/traetox/sshforshits) framework for a high interaction SSH honeypot
- [**36**Star][6y] [Py] [toperaproject/topera](https://github.com/toperaproject/topera) IPv6 analysis tool: the other side
-- [**36**Star][2y] [Go] [tomsteele/pen-utils](https://github.com/tomsteele/pen-utils) Trivial unixey pentest utilities
+- [**36**Star][2d] [C++] [titzanyic/clover](https://github.com/titzanyic/clover) 我的黑苹果配置列表
- [**36**Star][2y] [Zeek] [tatsui-geek/rpot](https://github.com/tatsui-geek/rpot) Real-time Packet Observation Tool
- [**36**Star][3m] [Py] [takeshixx/deen](https://github.com/takeshixx/deen) Generic data DEcoding/ENcoding application built with PyQt5.
- [**36**Star][3y] [TeX] [sympy/sympy-paper](https://github.com/sympy/sympy-paper) Repo for the paper "SymPy: symbolic computing in python"
- [**36**Star][3y] [C++] [steven-michaud/sandboxmirror](https://github.com/steven-michaud/sandboxmirror) Tool for reverse-engineering Apple's sandbox
- [**36**Star][8y] [C] [stephenfewer/ollycalltrace](https://github.com/stephenfewer/ollycalltrace) OllyCallTrace is a plugin for OllyDbg to trace the call chain of a thread.
- [**36**Star][1m] [Py] [static-flow/cloudcopy](https://github.com/static-flow/cloudcopy) This tool implements a cloud version of the Shadow Copy attack against domain controllers running in AWS using only the EC2:CreateSnapshot permission.
-- [**36**Star][26d] [Py] [sinfulz/justtryharder](https://github.com/sinfulz/justtryharder) JustTryHarder, a cheat sheet which will aid you through the PWK course & the OSCP Exam.
+- [**36**Star][28d] [Py] [sinfulz/justtryharder](https://github.com/sinfulz/justtryharder) JustTryHarder, a cheat sheet which will aid you through the PWK course & the OSCP Exam.
- [**36**Star][4y] [C] [sektioneins/xpwntool-lite](https://github.com/sektioneins/xpwntool-lite) Lightweight version of xpwntool just for decrypting IMG3 firmware files
+- [**36**Star][1y] [HTML] [secwiki/iot](https://github.com/secwiki/iot) IOT Research Blog 物联网安全技术研究小组
- [**36**Star][3y] [JS] [saelo/foxpwn](https://github.com/saelo/foxpwn) Exploit code for CVE-2016-9066
- [**36**Star][7m] [Py] [s0md3v/entropy](https://github.com/s0md3v/entropy) Entropy is a (prototype) WAF driven by maths.
- [**36**Star][2y] [Py] [rxwx/cve-2017-11882](https://github.com/rxwx/cve-2017-11882) Proof-of-Concept exploits for CVE-2017-11882
-- [**36**Star][2y] [PowerShell] [rvrsh3ll/pentesting-scripts](https://github.com/rvrsh3ll/pentesting-scripts) A ton of helpful tools
+- [**36**Star][2y] [PS] [rvrsh3ll/pentesting-scripts](https://github.com/rvrsh3ll/pentesting-scripts) A ton of helpful tools
+- [**36**Star][6m] [Py] [ruped24/tor_ip_switcher](https://github.com/ruped24/tor_ip_switcher) tor_ip_switcher is useful for making any DoS attack look like a DDoS attack. Works with toriptables2.
- [**36**Star][2y] [C++] [rolfrolles/wbdeshook](https://github.com/rolfrolles/wbdeshook) DLL-injection based solution to Brecht Wyseur's wbDES challenge (based on SysK's Phrack article)
-- [**36**Star][16d] [C] [rinnegatamante/vitaquakeiii](https://github.com/rinnegatamante/vitaquakeiii) ioquake3 port for PSVITA (Currently supporting Quake III: Arena, Quake III: Team Arena, OpenArena, Urban Terror and Q3Rally)
+- [**36**Star][18d] [C] [rinnegatamante/vitaquakeiii](https://github.com/rinnegatamante/vitaquakeiii) ioquake3 port for PSVITA (Currently supporting Quake III: Arena, Quake III: Team Arena, OpenArena, Urban Terror and Q3Rally)
- [**36**Star][7m] [Py] [rikonaka/katoolin4china](https://github.com/rikonaka/katoolin4china) Kali tools installer
- [**36**Star][1y] [JS] [rewanth1997/vuln-headers-extension](https://github.com/rewanth1997/vuln-headers-extension) Firefox extension which parses the headers of all the requests which are being flowing through your firefox browser to detect for vulnerabilities.
- [**36**Star][10m] [Py] [redforcesec/dumpit](https://github.com/redforcesec/dumpit) An exploit for SHAREit <= v 4.0.38
- [**36**Star][4m] [Py] [raymanfx/android-cve-checker](https://github.com/raymanfx/android-cve-checker) Python tool to check your Android kernel for missing CVE patches.
- [**36**Star][4m] [Java] [radare/ghidra-r2web](https://github.com/radare/ghidra-r2web) Ghidra plugin to start an r2 webserver to let r2 interact with it
-- [**36**Star][2m] [Lua] [r00t-3xp10it/nmap-nse-modules](https://github.com/r00t-3xp10it/nmap-nse-modules) My collection of nmap nse modules
- [**36**Star][4y] [Shell] [pwnagentsmith/ir_tool](https://github.com/pwnagentsmith/ir_tool) Script for Forensic on Linux
-- [**36**Star][11d] [Go] [projectcalico/typha](https://github.com/projectcalico/typha) Calico's datastore fan-out daemon.
-- [**36**Star][2y] [Java] [portswigger/distribute-damage](https://github.com/portswigger/distribute-damage) Evenly distributes scanner load across targets
- [**36**Star][4m] [Shell] [plenumlab/lazyrecon](https://github.com/plenumlab/lazyrecon) This script is intended to automate your reconnaissance process in an organized fashion
- [**36**Star][3y] [Py] [phar/eyephish](https://github.com/phar/eyephish) OpenCV based IDN option generator PoC
- [**36**Star][9m] [Py] [phage-nz/malware-hunting](https://github.com/phage-nz/malware-hunting) A collection of scripts and information for Malware Hunting.
- [**36**Star][12m] [Elixir] [paulzql/shadowsocks-ex](https://github.com/paulzql/shadowsocks-ex) elixir port of shadowsocks
- [**36**Star][3y] [C++] [paulmehta/ablation](https://github.com/paulmehta/ablation) Augmenting Static Analysis Using Pintool: Ablation
-- [**36**Star][3y] [Java] [onionmail/onionmail](https://github.com/onionmail/onionmail) TOR Mail encrypted server for Hidden Services
+- [**36**Star][5m] [Py] [paradoxis/flask-unsign](https://github.com/paradoxis/flask-unsign) Command line tool to fetch, decode, brute-force and craft session cookies of a Flask application by guessing secret keys.
+- [**36**Star][4y] [Java] [onionmail/onionmail](https://github.com/onionmail/onionmail) TOR Mail encrypted server for Hidden Services
- [**36**Star][4y] [C] [ofercas/ransomware_begone](https://github.com/ofercas/ransomware_begone) ransomware_begone
- [**36**Star][3m] [C++] [notscimmy/pplib](https://github.com/notscimmy/pplib) Elevate a process to be a protected process
+- [**36**Star][5m] [C#] [not-matthias/nemesis](https://github.com/not-matthias/nemesis) A customizable process dumper.
+- [**36**Star][5m] [Go] [northern-lights/yara-parser](https://github.com/northern-lights/yara-parser) Tools for parsing rulesets using the exact grammar as YARA. Written in Go.
- [**36**Star][3y] [Ruby] [nopernik/msfvenom-bc-generator](https://github.com/nopernik/msfvenom-bc-generator) Metasploit msfvenom Bash Completions Generator
- [**36**Star][3y] [C] [nexusbots/umbreon-rootkit](https://github.com/nexusbots/umbreon-rootkit)
- [**36**Star][11m] [Py] [nevillegrech/madmax](https://github.com/nevillegrech/madmax) Ethereum Static Vulnerability Detector for Gas-Focussed Vulnerabilities
- [**36**Star][3y] [Ruby] [neinwechter/metasploit-framework](https://github.com/neinwechter/metasploit-framework) Metasploit Framework
- [**36**Star][9m] [C++] [nanoric/pkn](https://github.com/nanoric/pkn) core of pkn game hacking project. Including mainly for process management, memory management, and DLL injecttion. Also PE analysis, windows registry management, compile-time sting encryption, byte-code emulator, etc. Most of them can run under kernel mode.
- [**36**Star][4y] [C++] [n3k/ekoparty2015_windows_smep_bypass](https://github.com/n3k/ekoparty2015_windows_smep_bypass) Windows SMEP Bypass U=S
+- [**36**Star][3y] [Py] [mthbernardes/strutszeiro](https://github.com/mthbernardes/strutszeiro) Telegram Bot to manage botnets created with struts vulnerability(CVE-2017-5638)
- [**36**Star][2y] [Py] [mr-un1k0d3r/searchipowner](https://github.com/mr-un1k0d3r/searchipowner) Search public IP owner through ARIN
- [**36**Star][3y] [Assembly] [mortenschenk/token-stealing-shellcode](https://github.com/mortenschenk/token-stealing-shellcode)
- [**36**Star][2y] [Go] [mojachieee/go-honeypot](https://github.com/mojachieee/go-honeypot) A honeypot server written in Go.
- [**36**Star][4y] [michael-yip/aptmalwarenotes](https://github.com/michael-yip/aptmalwarenotes) A repository of open source reports on different malware families used in targeted cyber intrusions ("APT").
- [**36**Star][8y] [Ruby] [miaout17/lolize](https://github.com/miaout17/lolize) Colorize your ruby output with rainbow
- [**36**Star][4y] [C] [mempodippy/cub3](https://github.com/mempodippy/cub3) Proof of concept for LD_PRELOAD malware that uses extended attributes to protect files.
-- [**36**Star][4m] [Assembly] [marespiaut/rayman_disasm](https://github.com/marespiaut/rayman_disasm) Reverse-engineering effort for the 1995 MS-DOS game “Rayman”
- [**36**Star][3y] [C++] [manux81/canspy](https://github.com/manux81/canspy) Very simple tool for users who need to interface with a device based on CAN (CAN/CANopen/J1939/NMEA2000/DeviceNet) such as motors, sensors and many other devices.
-- [**36**Star][5m] [Py] [m57/piescan](https://github.com/m57/piescan) A simple fast port scanner for when you cant use Nmap on a pentest.
+- [**36**Star][3m] [Go] [mame82/munifying](https://github.com/mame82/munifying)
- [**36**Star][1m] [PHP] [linuxsec/indoxploit-shell](https://github.com/linuxsec/indoxploit-shell) IndoXploit Webshell V.3
+- [**36**Star][5y] [Shell] [linkp2p/wps-pin](https://github.com/linkp2p/wps-pin) # This scripts is edited under the General Public License as defined by the Free software foundation. # This package is distributed in the hope that it will be useful, but without any warranty; It can be used and modified and shared but should be referenced to, it CANNOT be # sold or be used for a commercial-economical purpose. # See the detail…
- [**36**Star][1y] [Go] [leoloobeek/gogreen](https://github.com/leoloobeek/gogreen) Environmental (and http) keying for scripting languages
-- [**36**Star][1y] [Py] [lasq88/deobfuscate](https://github.com/lasq88/deobfuscate) Python script to automatically deobfuscate malware code
- [**36**Star][5y] [C++] [kkar/teamviewer-dumper-in-cpp](https://github.com/kkar/teamviewer-dumper-in-cpp) Dumps TeamViewer ID,Password and account settings from a running TeamViewer instance by enumerating child windows.
+- [**36**Star][10m] [Shell] [keeganjk/kali-anonymous](https://github.com/keeganjk/kali-anonymous)
- [**36**Star][6m] [Shell] [kawaxi/kali-setup](https://github.com/kawaxi/kali-setup) Bash script to fully setup your kali system.
-- [**36**Star][4y] [Java] [julianschuette/condroid](https://github.com/julianschuette/condroid) Symbolic/concolic execution of Android apps
-- [**36**Star][27d] [JS] [jrjr/paw.js](https://github.com/jrjr/paw.js) Passwordless Authentication Wallet (PAW) is key-based authentication for the web. The library helps manage identities, their associated public/private keypairs, and signing operations in the browser.
+- [**36**Star][29d] [JS] [jrjr/paw.js](https://github.com/jrjr/paw.js) Passwordless Authentication Wallet (PAW) is key-based authentication for the web. The library helps manage identities, their associated public/private keypairs, and signing operations in the browser.
- [**36**Star][2y] [jhaddix/bug-bounty-reference](https://github.com/jhaddix/bug-bounty-reference) Inspired by
- [**36**Star][2y] [JS] [jamiebuilds/guarded-string](https://github.com/jamiebuilds/guarded-string) Prevent accidentally introducing XSS holes with the strings in your app
-- [**36**Star][3m] [Go] [jakejarvis/subtake](https://github.com/jakejarvis/subtake) Automatic finder for subdomains vulnerable to takeover. Written in Go, based on
+- [**36**Star][9m] [C] [ivanfratric/winafl](https://github.com/ivanfratric/winafl) Windows 二进制文件fuzz工具
- [**36**Star][4y] [C] [in12hacker/vt_64_ept](https://github.com/in12hacker/vt_64_ept) createfile
- [**36**Star][2y] [C++] [illusivenetworks-labs/getconsolehistoryandoutput](https://github.com/illusivenetworks-labs/getconsolehistoryandoutput) An Incident Response tool to extract console command history and screen output buffer
-- [**36**Star][27d] [hwroot/presentations](https://github.com/hwroot/presentations)
-- [**36**Star][4m] [Py] [hugsy/gef-extras](https://github.com/hugsy/gef-extras) Extra goodies for GEF: Open repository for unfiltered contributions to the project.
+- [**36**Star][7d] [Lua] [igalia/snabb](https://github.com/igalia/snabb) Snabb Switch: Fast open source packet processing
+- [**36**Star][29d] [hwroot/presentations](https://github.com/hwroot/presentations)
- [**36**Star][3m] [Shell] [hromie/obfs4proxy-openvpn](https://github.com/hromie/obfs4proxy-openvpn) Obfuscating OpenVPN traffic using obfs4proxy
- [**36**Star][2y] [C++] [hitanshu-dhawan/imagesteganography](https://github.com/hitanshu-dhawan/imagesteganography)
- [**36**Star][9m] [Shell] [gusbemacbe/suru-plus-dark](https://github.com/gusbemacbe/suru-plus-dark) Suru++ 25 Dark — A full dark cyberpunk, elegant, futuristic and Papirus-like third-party icons theme
+- [**36**Star][5m] [C] [geosn0w/geofilza](https://github.com/geosn0w/geofilza) Filza No Jailbreak
- [**36**Star][8y] [C#] [gdssecurity/wcf-binary-soap-plug-in](https://github.com/gdssecurity/wcf-binary-soap-plug-in) This is a Burp Suite plug-in designed to encode and decode WCF Binary Soap request and response data ("Content-Type: application/soap+msbin1). There are two versions of the plug-in available (consult the README for more information).
- [**36**Star][3y] [C#] [gdssecurity/psattack](https://github.com/gdssecurity/psattack) A portable console aimed at making pentesting with PowerShell a little easier.
- [**36**Star][8y] [Py] [gdssecurity/burpee](https://github.com/gdssecurity/burpee) Python object interface to requests/responses recorded by Burp Suite
- [**36**Star][2y] [fuzzysecurity/defcon-beijing-uac](https://github.com/fuzzysecurity/defcon-beijing-uac) Slide deck for DefCon Beijing
-- [**36**Star][29d] [Go] [fuzzitdev/example-go](https://github.com/fuzzitdev/example-go) Go Fuzzit Example
+- [**36**Star][1m] [Go] [fuzzitdev/example-go](https://github.com/fuzzitdev/example-go) Go Fuzzit Example
- [**36**Star][3y] [D] [f-secure/reflash](https://github.com/f-secure/reflash) ActionScript3 dynamic instrumentation tool
- [**36**Star][2y] [Py] [extremecoders-re/pjorion-deobfuscator](https://github.com/extremecoders-re/pjorion-deobfuscator) A deobfuscator for PjOrion, python cfg generator and more
- [**36**Star][5y] [Py] [eurecom-s3/actaeon](https://github.com/eurecom-s3/actaeon) Memory forensics of virtualization environments
+- [**36**Star][23d] [C++] [erickutcher/httpdownloader](https://github.com/erickutcher/httpdownloader) HTTP(S) download manager that uses input/output completion ports (IOCP).
- [**36**Star][3y] [Py] [ec-digit-csirc/virustotal-tools](https://github.com/ec-digit-csirc/virustotal-tools)
-- [**36**Star][19d] [Assembly] [dpt/the-great-escape](https://github.com/dpt/the-great-escape) Reverse engineering classic ZX Spectrum game "The Great Escape"
-- [**36**Star][2y] [PowerShell] [dmb2168/oauthhunting](https://github.com/dmb2168/oauthhunting)
+- [**36**Star][14d] [Py] [draios/python-sdc-client](https://github.com/draios/python-sdc-client) Sysdig Monitor/Secure Python client library
+- [**36**Star][21d] [Assembly] [dpt/the-great-escape](https://github.com/dpt/the-great-escape) Reverse engineering classic ZX Spectrum game "The Great Escape"
- [**36**Star][4y] [Py] [dionach/codeigniterxor](https://github.com/dionach/codeigniterxor) CodeIgniter <=2.1.4 session cookie decryption vulnerability
- [**36**Star][1m] [C++] [dankirk/regslscan](https://github.com/dankirk/regslscan) A tool for scanning registery key permissions. Find where non-admins can create symbolic links.
- [**36**Star][12m] [Py] [dahua966/web-awd-framework](https://github.com/dahua966/web-awd-framework) AWD framework for web in CTF by HuaSir
-- [**36**Star][3y] [C] [cylancevulnresearch/osx_runbin](https://github.com/cylancevulnresearch/osx_runbin)
+- [**36**Star][3y] [Awk] [d3sre/understanding_the_ndis_6_stack](https://github.com/d3sre/understanding_the_ndis_6_stack) Public documents about bachelor thesis "Reverse Engineering Analysis of the NDIS 6.* stack"
+- [**36**Star][8m] [Py] [cyubuchen/free_proxy_website](https://github.com/cyubuchen/free_proxy_website) 获取免费socks/https/http代理的网站集合
- [**36**Star][3y] [Objective-C++] [cyhe/iossecurity-attack](https://github.com/cyhe/iossecurity-attack) APP安全(逆向攻击篇)
- [**36**Star][4y] [C#] [cweb/unicode-hax](https://github.com/cweb/unicode-hax) A library to assist in security-testing Unicode enabled applications during fuzzing, XSS, SQLi, etc.
-- [**36**Star][10d] [PowerShell] [cube0x0/security-assessment](https://github.com/cube0x0/security-assessment) Scripts to automate some part of Security/Vulnerability Assessment
+- [**36**Star][8d] [PS] [cube0x0/security-assessment](https://github.com/cube0x0/security-assessment) Scripts to automate some part of Security/Vulnerability Assessment
+- [**36**Star][5m] [PHP] [ctubio/php-proxy-keyserver](https://github.com/ctubio/php-proxy-keyserver) PHP proxy and extensible web interface forwarding standard HKP requests to a local or remote SKS OpenPGP Keyserver.
- [**36**Star][2y] [Py] [cr4sh/smram_parse](https://github.com/cr4sh/smram_parse) System Management RAM analysis tool
- [**36**Star][3y] [C++] [cn33liz/tpminituacanniversarybypass](https://github.com/cn33liz/tpminituacanniversarybypass) Bypassing User Account Control (UAC) using TpmInit.exe
-- [**36**Star][2y] [PowerShell] [clr2of8/commentator](https://github.com/clr2of8/commentator)
-- [**36**Star][8d] [Java] [cliqz-oss/browser-android](https://github.com/cliqz-oss/browser-android) CLIQZ for Android
+- [**36**Star][2y] [PS] [clr2of8/commentator](https://github.com/clr2of8/commentator)
+- [**36**Star][10d] [Java] [cliqz-oss/browser-android](https://github.com/cliqz-oss/browser-android) CLIQZ for Android
- [**36**Star][4m] [Py] [cisco-talos/re2pcap](https://github.com/cisco-talos/re2pcap)
-- [**36**Star][2y] [C++] [cedarctic/digiquack](https://github.com/cedarctic/digiquack) A DuckyScript language to DigiSpark payload converter based on C++
+- [**36**Star][3y] [C] [changeofpace/pe-header-dump-utilities](https://github.com/changeofpace/pe-header-dump-utilities) This x64dbg plugin adds several commands for dumping PE header information by address.
- [**36**Star][4y] [Py] [byt3bl33d3r/toby](https://github.com/byt3bl33d3r/toby) Recursively searches a directory for any file containing a specified string
- [**36**Star][2y] [Py] [brianwrf/s2-053-cve-2017-12611](https://github.com/brianwrf/s2-053-cve-2017-12611) A simple script for exploit RCE for Struts 2 S2-053(CVE-2017-12611)
- [**36**Star][3y] [C] [brad-anton/proxbrute](https://github.com/brad-anton/proxbrute) Modified proxmark3 firmware to perform brute forcing of 26-Bit ProxCards
- [**36**Star][2y] [PHP] [bogdaan/spycss](https://github.com/bogdaan/spycss) Track user interactions without JavaScript
- [**36**Star][4y] [C++] [bobotig/cracker-ng](https://github.com/bobotig/cracker-ng) ZIP cracker, CCRYPT cracker, and others to come.
- [**36**Star][2y] [JS] [blackhole1/fecm](https://github.com/blackhole1/fecm) 前端XSS防火墙及后台报警系统(front-end XSS firewall and back-end alarm system)
-- [**36**Star][8y] [bes/keystorebrute](https://github.com/bes/keystorebrute) A Keystore Brute-force attacker.
-- [**36**Star][1y] [Java] [augustd/burp-suite-error-message-checks](https://github.com/augustd/burp-suite-error-message-checks) Burp Suite extension to passively scan for applications revealing server error messages
- [**36**Star][3y] [C] [arodland/haproxy](https://github.com/arodland/haproxy) Experiment with haproxy
-- [**36**Star][1y] [Py] [aptnotes/tools](https://github.com/aptnotes/tools) Tools to interact with APTnotes reporting/index.
+- [**36**Star][1m] [JS] [anseki/gnirts](https://github.com/anseki/gnirts) Obfuscate string literals in JavaScript code.
- [**36**Star][10m] [Py] [anic/ida2pwntools](https://github.com/anic/ida2pwntools) a IDA 7.0 plugins that helps to attach process created by pwntools and debug pwn
- [**36**Star][7m] [Py] [anantshri/ds_store_crawler_parser](https://github.com/anantshri/ds_store_crawler_parser) a parser + crawler for .DS_Store files exposed publically
-- [**36**Star][26d] [Py] [ahmia/ahmia-site](https://github.com/ahmia/ahmia-site) Ahmia.fi - Hidden service search engine
-- [**36**Star][15d] [Py] [agroce/universalmutator](https://github.com/agroce/universalmutator) Regexp based tool for mutating generic source code across numerous languages
+- [**36**Star][28d] [Py] [ahmia/ahmia-site](https://github.com/ahmia/ahmia-site) Ahmia.fi - Hidden service search engine
+- [**36**Star][17d] [Py] [agroce/universalmutator](https://github.com/agroce/universalmutator) Regexp based tool for mutating generic source code across numerous languages
- [**36**Star][5y] [C++] [adamkramer/jmp2it](https://github.com/adamkramer/jmp2it) Transfer EIP control to shellcode during malware analysis investigation
- [**36**Star][2y] [C] [adamgreen/mri](https://github.com/adamgreen/mri) MRI - Monitor for Remote Inspection. The gdb compatible debug monitor for Cortex-M devices.
- [**36**Star][1y] [ab1gale/phpcms-2008-cve-2018-19127](https://github.com/ab1gale/phpcms-2008-cve-2018-19127)
- [**36**Star][3y] [Py] [a7vinx/swarm](https://github.com/a7vinx/swarm) A modular distributed penetration testing tool.
- [**36**Star][4y] [7iosecurity/xss-payloads](https://github.com/7iosecurity/xss-payloads) XSS Payloads
-- [**36**Star][4y] [Py] [73696e65/windows-exploits](https://github.com/73696e65/windows-exploits) Used for the osce exam preparation
-- [**36**Star][3m] [C] [0x7ff/dimentio](https://github.com/0x7ff/dimentio) PoC tool for setting nonce without triggering KPP/KTRR/PAC. (requires tfp0)
-- [**35**Star][27d] [Py] [mak-/scanomaly](https://github.com/mak-/scanomaly) This is a web application fuzzer scanner - the goal was CLI flexibility and rapid prototyping
+- [**36**Star][4y] [PS] [5alt/zerorat](https://github.com/5alt/zerorat) ZeroRAT是一款windows上的一句话远控
+- [**36**Star][7d] [C] [0x7ff/dimentio](https://github.com/0x7ff/dimentio) PoC tool for setting nonce without triggering KPP/KTRR/PAC. (requires tfp0)
+- [**36**Star][3y] [Py] [0ang3el/unsafe-jax-rs-burp](https://github.com/0ang3el/unsafe-jax-rs-burp) Burp Suite extension for JAX-RS
+- [**35**Star][2y] [unbinilium/surge](https://github.com/unbinilium/surge) Shadowsocks Encrypt Support Module for Surge APP, iOS & MacOS Configuration
+- [**35**Star][7m] [tidesec/mars](https://github.com/tidesec/mars) Mars(战神)——结合Tide资产探测和指纹识别方面的技术积累,为客户提供更高效智能的安全检测和安全监测服务。
+- [**35**Star][2m] [Lua] [chaitin/safeline-open-platform](https://github.com/chaitin/safeline-open-platform)
+- [**35**Star][29d] [Py] [mak-/scanomaly](https://github.com/mak-/scanomaly) This is a web application fuzzer scanner - the goal was CLI flexibility and rapid prototyping
- [**35**Star][5m] [HTML] [nsacyber/bitlocker-guidance](https://github.com/nsacyber/bitlocker-guidance) Configuration guidance for implementing BitLocker. #nsacyber
- [**35**Star][4y] [Py] [lanjelot/web-hunter](https://github.com/lanjelot/web-hunter) Crawl Google and Bing to find emails, subdomains and URLs associated to a target domain
- [**35**Star][2m] [LLVM] [galoisinc/llvm-pretty-bc-parser](https://github.com/galoisinc/llvm-pretty-bc-parser) Parser for the llvm bitcode format
- [**35**Star][9m] [JS] [paulsec/shodan.io-mobile-app](https://github.com/paulsec/shodan.io-mobile-app) Official repository for the Shodan.io mobile Application
- [**35**Star][6y] [Py] [robindavid/captcha-basic-recognition](https://github.com/robindavid/captcha-basic-recognition) Python module that intent to crack basic captcha engines using OpenCV and Pytesser
-- [**35**Star][14d] [Py] [vdoo-connected-trust/ghidra-pyi-generator](https://github.com/vdoo-connected-trust/ghidra-pyi-generator) Generates `.pyi` type stubs for the entire Ghidra API
-- [**35**Star][29d] [PowerShell] [vletoux/bluekeep-scanner](https://github.com/vletoux/bluekeep-scanner) BlueKeep powershell scanner (based on c# code)
-- [**35**Star][30d] [Java] [ayrx/jnianalyzer](https://github.com/ayrx/jnianalyzer) Analysis scripts for Ghidra to work with Android NDK libraries.
+- [**35**Star][1m] [PS] [vletoux/bluekeep-scanner](https://github.com/vletoux/bluekeep-scanner) BlueKeep powershell scanner (based on c# code)
- [**35**Star][2y] [Shell] [secfathy/bugzee](https://github.com/secfathy/bugzee) Simple Script to install recommended Bug Bounty Hunting Tools In Your Linux Disto
-- [**35**Star][1m] [C++] [chickenhook/chickenhook](https://github.com/chickenhook/chickenhook) A linux / android hooking framework
- [**35**Star][1m] [jasonniebauer/nmap-cheatsheet](https://github.com/jasonniebauer/nmap-cheatsheet) Reference guide for scanning networks with Nmap.
-- [**35**Star][7d] [Java] [gedsh/invizible](https://github.com/gedsh/invizible) Android application for Internet privacy and security
-- [**35**Star][8d] [CSS] [fabriziofubelli/black-widow](https://github.com/fabriziofubelli/black-widow) Offensive penetration testing tool (Open Source)
-- [**35**Star][21d] [Rust] [scipr-lab/poly-commit](https://github.com/scipr-lab/poly-commit) A Rust library for polynomial commitments
-- [**35**Star][3y] [Py] [lightless233/pansidong](https://github.com/lightless233/Pansidong) 盘丝洞 - 自动化WEB漏洞扫描器
-- [**35**Star][2y] [HTML] [electroniccats/samykamtools](https://github.com/ElectronicCats/SamyKamTools) Magnetic Pentesting tool for Raspberry Pi
+- [**35**Star][2d] [CSS] [fabriziofubelli/black-widow](https://github.com/fabriziofubelli/black-widow) Offensive penetration testing tool (Open Source)
+- [**35**Star][15d] [Rust] [scipr-lab/poly-commit](https://github.com/scipr-lab/poly-commit) A Rust library for polynomial commitments
+- [**35**Star][2y] [Shell] [re4son/pocket-kali-live-build](https://github.com/Re4son/Pocket-Kali-live-build) Debian live build for the Pocket-Kali
+- [**35**Star][3y] [polarislab/aesgfic](https://github.com/PolarisLab/AESGFIC) 互联网企业安全高级指南读书笔记脑图 -
- [**35**Star][1y] [Java] [bit4woo/resign](https://github.com/bit4woo/ReSign) A burp extender that recalculate signature value automatically after you modified request parameter value.
- [**35**Star][5y] [C] [intel/kvmgt-kernel](https://github.com/intel/KVMGT-kernel)
- [**35**Star][3y] [JS] [yxhsea/xss](https://github.com/yxhsea/xss) web安全之模拟xss攻击
- [**35**Star][3y] [Shell] [rumpkernel/rumpctrl](https://github.com/rumpkernel/rumpctrl) Control and diagnostic applications for rump kernels
- [**35**Star][7y] [Java] [continuumsecurity/resty-burp](https://github.com/continuumsecurity/resty-burp) REST/JSON interface to Burp Suite
-- [**35**Star][10d] [Rust] [rair-project/rair-core](https://github.com/Rair-Project/rair-core) RAIR: RAdare In Rust
+- [**35**Star][2d] [Rust] [rair-project/rair-core](https://github.com/Rair-Project/rair-core) RAIR: RAdare In Rust
- [**35**Star][2m] [Go] [62726164/netscan](https://github.com/62726164/netscan) A fast TCP port scanner
+- [**35**Star][1y] [PHP] [rickmacgillis/hackfastalgos](https://github.com/rickmacgillis/hackfastalgos) A library of various fast algorithms written in Hack
- [**35**Star][2y] [Py] [hash3lizer/airpydump](https://github.com/hash3liZer/airpydump) Analyze Wireless Packets on the fly. Currently supporting three working Modes (Reader, Live, Stealth)
- [**35**Star][8y] [Py] [zynamics/ida2sql-plugin-ida](https://github.com/zynamics/ida2sql-plugin-ida)
- [**35**Star][5m] [HTML] [zhuowei/worthdoingbadly.com](https://github.com/zhuowei/worthdoingbadly.com) My blog where I make a new coding project every Thursday.
- [**35**Star][4y] [C++] [zer0mem/libc](https://github.com/zer0mem/libc) Kernel C++ driver developing library; std & boost partially supported
-- [**35**Star][1m] [Py] [zephrfish/burpfeed](https://github.com/zephrfish/burpfeed) Hacked together script for feeding urls into Burp's Sitemap
-- [**35**Star][10m] [Go] [yvesago/shodan-cli](https://github.com/yvesago/shodan-cli) Simple golang shodan cli
+- [**35**Star][11m] [Go] [yvesago/shodan-cli](https://github.com/yvesago/shodan-cli) Simple golang shodan cli
+- [**35**Star][2y] [yuvadm/dg-m1q](https://github.com/yuvadm/dg-m1q) DG-M1Q IP camera alternative usage
- [**35**Star][5y] [C] [yuange75/aspcode](https://github.com/yuange75/aspcode) aspcode堆溢出利用代码
- [**35**Star][1y] [Py] [yaokaiyang-assaultmaster/pythonportscanner](https://github.com/yaokaiyang-assaultmaster/pythonportscanner)
+- [**35**Star][3y] [Py] [yang3yen/pysm4](https://github.com/yang3yen/pysm4) Python SM4
- [**35**Star][3y] [Py] [yanceyblog/scrapy-multi](https://github.com/yanceyblog/scrapy-multi) 实现多个爬虫共同工作的scrapy爬虫实例
- [**35**Star][2y] [C] [xerub/ibex64](https://github.com/xerub/ibex64) iBoot64 Payload Development Toolkit
-- [**35**Star][12d] [Py] [x-vector/x-rsa](https://github.com/x-vector/x-rsa) Cryptography Tool | RSA Attacks
+- [**35**Star][14d] [Py] [x-vector/x-rsa](https://github.com/x-vector/x-rsa) Cryptography Tool | RSA Attacks
+- [**35**Star][1y] [Swift] [vixentael/zka-example](https://github.com/vixentael/zka-example) Zero Knowledge Application example, iOS, notes sharing, Firebase backend
+- [**35**Star][1y] [C++] [venam/browser](https://github.com/venam/browser) A Simple to use yet efficient headers only library ( wrapped over libcurl / curl wrapper ) to do browser emulation (emulate) or web interaction in C++.
- [**35**Star][1y] [ustayready/cloudburst](https://github.com/ustayready/cloudburst) CloudBurst is a red team framework for interacting with cloud providers to capture, compromise, and exfil data.
- [**35**Star][4y] [C++] [uncseclab/vmxxnr](https://github.com/uncseclab/vmxxnr) Implementation of a thin hypervisor
- [**35**Star][1y] [HTML] [umbertocicero/coinhive-monero](https://github.com/umbertocicero/coinhive-monero)
- [**35**Star][6m] [Py] [trylinux/lift](https://github.com/trylinux/lift) Low-Impact Fingerprint Tool
+- [**35**Star][3y] [C] [topcss/wannacry](https://github.com/topcss/wannacry) 勒索病毒WannaCry反编译源码
+- [**35**Star][2y] [Perl] [tls-check/tls-check](https://github.com/tls-check/tls-check) TLS-Check – a security/encryption scanner and framework for checking IT Security and the capability to be innovative
- [**35**Star][7m] [Py] [tidesec/tdscanner](https://github.com/tidesec/tdscanner) 自动化检测小工具,主要实现了域名枚举、链接爬取、注入检测、主机扫描、目录枚举、敏感信息检测等功能~
- [**35**Star][2y] [Java] [thecyaniteproject/exit_code_java](https://github.com/thecyaniteproject/exit_code_java) ExitCode - The Free, Open-Source, Desktop & Hacking Simulator Game.
- [**35**Star][6m] [Py] [testingpens/constole](https://github.com/testingpens/constole) Scan for and exploit Consul agents
- [**35**Star][5m] [Rust] [teovoinea/steganography](https://github.com/teovoinea/steganography) A simple steganography library written in rust
- [**35**Star][2y] [technicaldada/best-hacking-tools](https://github.com/technicaldada/best-hacking-tools) BEST HACKING TOOLS..For more tools visit our blog for Hackers
+- [**35**Star][2y] [Py] [superbuker/camhell](https://github.com/superbuker/camhell) Ingenic T10 IP camera crawler
- [**35**Star][6m] [Shell] [sundowndev/covermyass](https://github.com/sundowndev/covermyass) Shell tool to cover your tracks on UNIX systems. Designed for pen testing "covering tracks" phase, before exiting the infected server. Or, permanently disable system logs for post-exploitation.
- [**35**Star][9m] [C] [sud0man/pac4mac](https://github.com/sud0man/pac4mac) Automatically exported from code.google.com/p/pac4mac
- [**35**Star][1y] [JS] [stdarg/tcp-port-used](https://github.com/stdarg/tcp-port-used) A simple Node.js module to check if a TCP port is already bound.
-- [**35**Star][1y] [PowerShell] [sqlcollaborative/invoke-sqlcmd2](https://github.com/sqlcollaborative/invoke-sqlcmd2) PowerShell module containing Invoke-SqlCmd2
+- [**35**Star][1y] [PS] [sqlcollaborative/invoke-sqlcmd2](https://github.com/sqlcollaborative/invoke-sqlcmd2) PowerShell module containing Invoke-SqlCmd2
+- [**35**Star][9y] [Perl] [spiderlabs/ackack](https://github.com/spiderlabs/ackack) A program to monitor network traffic and detect unauthorized sessions.
- [**35**Star][2y] [Py] [webr0ck/waf_bypass_helper](https://github.com/sndvul/waf_bypass_helper) Python script for generating bypass of your attack
- [**35**Star][6m] [C] [sistr0/ps4-hen-vtx](https://github.com/sistr0/ps4-hen-vtx) A fully implemented kernel exploit for the PS4 with HEN
- [**35**Star][5y] [Py] [siberas/ida2sym](https://github.com/siberas/ida2sym) IDAScript to create Symbol file which can be loaded in WinDbg via AddSyntheticSymbol
@@ -13769,16 +14711,19 @@ networking routines
- [**35**Star][8y] [C] [sduverger/ld-shatner](https://github.com/sduverger/ld-shatner) ld-linux code injector
- [**35**Star][6y] [C++] [scen/ionlib](https://github.com/scen/ionlib) c++11 reverse engineering library. bootstraps common tasks in game hacking and reverse engineering
- [**35**Star][2y] [C#] [scavanger/memorymodule.net](https://github.com/scavanger/memorymodule.net) Loading a native DLL in the memory.
+- [**35**Star][2y] [C] [satoshinm/pill_duck](https://github.com/satoshinm/pill_duck) Scriptable USB HID device for STM32F103 blue pill (inspired by USB Rubber Ducky) ⛺
- [**35**Star][4y] [Shell] [samyoyo/flux](https://github.com/samyoyo/flux) Flux is a [WIFI CRACKER]
-- [**35**Star][6m] [Py] [ruped24/tor_ip_switcher](https://github.com/ruped24/tor_ip_switcher) tor_ip_switcher is useful for making any DoS attack look like a DDoS attack. Works with toriptables2.
-- [**35**Star][29d] [Py] [roddhjav/pass-audit](https://github.com/roddhjav/pass-audit) A pass extension for auditing your password repository.
+- [**35**Star][1m] [Py] [roddhjav/pass-audit](https://github.com/roddhjav/pass-audit) A pass extension for auditing your password repository.
- [**35**Star][2y] [ritiek/rat-via-telegram](https://github.com/ritiek/rat-via-telegram) Removed according to regulations
- [**35**Star][5y] [C#] [redth/android.signature.tool](https://github.com/redth/android.signature.tool) Simple GUI tool for Mac and Windows to help find the SHA1 and MD5 hashes of your Android keystore's and apk's
- [**35**Star][1y] [C] [realoriginal/alpc-diaghub](https://github.com/realoriginal/alpc-diaghub) Utilizing the ALPC Flaw in combiniation with Diagnostics Hub as found in Server 2016 and Windows 10.
+- [**35**Star][2y] [Py] [r0oth3x49/tor](https://github.com/r0oth3x49/tor) Tor is a python based module for using tor proxy/network services on windows, osx, linux with just one click.
- [**35**Star][2y] [PHP] [propaganistas/email-obfuscator](https://github.com/propaganistas/email-obfuscator)
- [**35**Star][1y] [C] [prodicode/arppd](https://github.com/prodicode/arppd) An ARP Poisoning Defender script
+- [**35**Star][3m] [PS] [dsccommunity/xfailovercluster](https://github.com/dsccommunity/xFailOverCluster) This module contains DSC resources for deployment and configuration of Windows Server Failover Cluster.
- [**35**Star][5y] [plutochiou/shadowsocks-rss](https://github.com/plutochiou/shadowsocks-rss) shadowsocks update rss
- [**35**Star][3y] [Java] [onurkarasalihoglu/pentest-tools](https://github.com/onurkarasalihoglu/pentest-tools)
+- [**35**Star][2y] [JS] [one-com/one-validation](https://github.com/one-com/one-validation) Regexp based validation collection for common internet validation tasks
- [**35**Star][8m] [offensive-security/kali-wsl-chroot](https://github.com/offensive-security/kali-wsl-chroot) Kali Linux Windows App chroot builder script
- [**35**Star][8m] [Py] [oddcoder/cutterdrcov](https://github.com/oddcoder/cutterdrcov) DynamoRIO coverage visualization for cutter
- [**35**Star][5m] [ocatak/malware_api_class](https://github.com/ocatak/malware_api_class) Malware dataset for security researchers, data scientists. Public malware dataset generated by Cuckoo Sandbox based on Windows OS API calls analysis for cyber security researchers
@@ -13786,14 +14731,15 @@ networking routines
- [**35**Star][1y] [C] [ntraiseharderror/kaiser](https://github.com/ntraiseharderror/kaiser) Fileless persistence, attacks and anti-forensic capabilties.
- [**35**Star][7m] [C] [ntraiseharderror/antihook](https://github.com/ntraiseharderror/antihook) PoC designed to evade userland-hooking anti-virus.
- [**35**Star][6m] [C] [ns1/xdp-workshop](https://github.com/ns1/xdp-workshop) Velocity SJC 2019 - DDoS mitigation made easy with XDP and eBPF
-- [**35**Star][5m] [C#] [not-matthias/nemesis](https://github.com/not-matthias/nemesis) A customizable process dumper.
-- [**35**Star][5m] [Go] [northern-lights/yara-parser](https://github.com/northern-lights/yara-parser) Tools for parsing rulesets using the exact grammar as YARA. Written in Go.
- [**35**Star][3y] [C] [nnamon/practicalret2libc](https://github.com/nnamon/practicalret2libc) Practical Return to Libc in 12 Minutes Presentation + practice for CS3235 YouTeach project.
+- [**35**Star][21d] [C] [nil0x42/duplicut](https://github.com/nil0x42/duplicut) Quickly remove duplicates, without changing the order, and without getting OOM on huge wordlists.
- [**35**Star][5y] [C++] [nihilus/ida_classinformer](https://github.com/nihilus/ida_classinformer) IDA ClassInformer PlugIn
- [**35**Star][6y] [PHP] [nightlionsecurity/phpstress](https://github.com/nightlionsecurity/phpstress) phpstress:对运行PHP-FPM 或 PHP-CGI 的网页服务器进行DoS/压力测试
- [**35**Star][10m] [Shell] [nicoulaj/broom](https://github.com/nicoulaj/broom) A disk cleaning utility for developers.
-- [**35**Star][1y] [Py] [nhoya/mycroftai-rce](https://github.com/nhoya/mycroftai-rce) "Zero Click" Remote Code Execution in Mycroft AI vocal assistant
+- [**35**Star][2y] [Py] [nhoya/mycroftai-rce](https://github.com/nhoya/mycroftai-rce) "Zero Click" Remote Code Execution in Mycroft AI vocal assistant
+- [**35**Star][5y] [Py] [netxfly/eventlog-audit](https://github.com/netxfly/eventlog-audit) Windows事件日志审计系统,支持以WEB的方式审计日志
- [**35**Star][8m] [Go] [netevert/delator](https://github.com/netevert/delator) Golang-based subdomain miner leveraging certificate transparency logs
+- [**35**Star][3y] [Java] [netcrusherorg/netcrusher-java](https://github.com/netcrusherorg/netcrusher-java) NetCrusher is a TCP/UDP proxy that allows to test services for failover
- [**35**Star][2y] [Py] [neargle/tips-note](https://github.com/neargle/tips-note) 做过的实验,踩过的坑
- [**35**Star][4y] [Shell] [ncsa/ossec-tools](https://github.com/ncsa/ossec-tools) Scripts and integrations for OSSEC
- [**35**Star][3y] [Py] [n1nj4sec/pymemimporter](https://github.com/n1nj4sec/pymemimporter) import pyd or execute PE all from memory using only pure python code and some shellcode tricks
@@ -13801,27 +14747,28 @@ networking routines
- [**35**Star][5y] [Py] [miserlou/onionchat](https://github.com/miserlou/onionchat) Anonymous chat. No Javascript.
- [**35**Star][2m] [Py] [michaelstott/crlf-injection-scanner](https://github.com/michaelstott/crlf-injection-scanner) Command line tool for testing CRLF injection on list of domains.
- [**35**Star][2y] [Py] [meyer9/ethdasm](https://github.com/meyer9/ethdasm) Tool for auditing Ethereum contracts
+- [**35**Star][2y] [Go] [metalnem/zinio](https://github.com/metalnem/zinio) This command line tool removes DRM from magazines in your digital Zinio library
- [**35**Star][4m] [Go] [maxlaverse/reverse-shell](https://github.com/maxlaverse/reverse-shell) A reverse-shell agent, master and rendezvous point written in Go
-- [**35**Star][3y] [PowerShell] [machosec/mystique](https://github.com/machosec/mystique) PowerShell module to play with Kerberos S4U extensions
+- [**35**Star][3y] [PS] [machosec/mystique](https://github.com/machosec/mystique) PowerShell module to play with Kerberos S4U extensions
- [**35**Star][3y] [C#] [m4ndingo/radare2gui_dotnet](https://github.com/m4ndingo/radare2gui_dotnet) Another radare2 gui for windows
+- [**35**Star][1y] [JS] [lmammino/distributed-jwt-cracker](https://github.com/lmammino/distributed-jwt-cracker) An experimental distributed JWT token cracker built using Node.js and ZeroMQ
- [**35**Star][4y] [Py] [laginimaineb/unpack_bootloader_image](https://github.com/laginimaineb/unpack_bootloader_image) Small script to unpack the bootloader image format present in Nexus 5 devices
+- [**35**Star][9m] [C] [l4ys/lazyklee](https://github.com/l4ys/lazyklee) Lazy python wrapper of KLEE for solving CTF challenges
- [**35**Star][3y] [Go] [kung-foo/freki](https://github.com/kung-foo/freki) Freki is a tool to manipulate packets in usermode using NFQUEUE and golang.
- [**35**Star][4m] [Py] [ktenzer/openshift-on-openstack-123](https://github.com/ktenzer/openshift-on-openstack-123) Deploy OpenShift on OpenStack
- [**35**Star][4y] [Py] [kitctf/ctfcode](https://github.com/kitctf/ctfcode) Collection of somewhat useful stuff for CTF events
- [**35**Star][2y] [JS] [kingsabri/sqlmap-tamper-api](https://github.com/kingsabri/sqlmap-tamper-api) SQLMap tamper api to accept tamper scripts from all languages
-- [**35**Star][10m] [Shell] [keeganjk/kali-anonymous](https://github.com/keeganjk/kali-anonymous)
+- [**35**Star][1y] [Java] [kingkaki/struts2-vulenv](https://github.com/kingkaki/struts2-vulenv) struts2 漏洞环境源代码
- [**35**Star][2y] [C] [jordan9001/superhide](https://github.com/jordan9001/superhide) Example of hooking a linux systemcall
- [**35**Star][3y] [Go] [jmpews/goscan](https://github.com/jmpews/goscan) golang的扫描框架, 支持协程池和自动调节协程个数.
- [**35**Star][1y] [Py] [jimmy-sonny/yayagen](https://github.com/jimmy-sonny/yayagen) Yet Another YARA rule Generator
- [**35**Star][3y] [JS] [jackgu1988/dsploit-scripts](https://github.com/jackgu1988/dsploit-scripts) Scripts that could be injected in MITM attacks using dSploit
-- [**35**Star][9m] [C] [ivanfratric/winafl](https://github.com/ivanfratric/winafl) Windows 二进制文件fuzz工具
-- [**35**Star][20d] [PHP] [isometriks/isometriksspambundle](https://github.com/isometriks/isometriksspambundle) Symfony3 Form Spam Protection
+- [**35**Star][22d] [PHP] [isometriks/isometriksspambundle](https://github.com/isometriks/isometriksspambundle) Symfony3 Form Spam Protection
- [**35**Star][3y] [Perl] [interference-security/kali-windows-binaries](https://github.com/interference-security/kali-windows-binaries) Windows binaries from Kali Linux :
- [**35**Star][3y] [Py] [immunio/apache-struts2-cve-2017-5638](https://github.com/immunio/apache-struts2-cve-2017-5638) Demo Application and Exploit
- [**35**Star][6y] [Py] [ilektrojohn/creepy-plugins](https://github.com/ilektrojohn/creepy-plugins) Plugins for cree.py
- [**35**Star][1y] [Java] [ikkisoft/blazer](https://github.com/ikkisoft/blazer) Burp Suite AMF Extension
- [**35**Star][4y] [Py] [iiseymour/game-of-life](https://github.com/iiseymour/game-of-life) Conway's Game Of Life
-- [**35**Star][1m] [Lua] [igalia/snabb](https://github.com/igalia/snabb) Snabb Switch: Fast open source packet processing
- [**35**Star][3y] [Shell] [huntergregal/malwaresandbox](https://github.com/huntergregal/malwaresandbox) A ready to deploy docker container for a fresh sandbox for on-the-fly malware analysis
- [**35**Star][3y] [Py] [huntergregal/bothunter](https://github.com/huntergregal/bothunter) Scans the internet for open FTP servers looking for common malware bot droppers and grabs them for sampling. Also provides support for uploading samples to VirusTotal
- [**35**Star][5y] [Py] [holloway/insiderer](https://github.com/holloway/insiderer) Insiderer looks inside files for metadata and hidden content
@@ -13831,91 +14778,108 @@ networking routines
- [**35**Star][3y] [C] [harvie/libpurple-core-answerscripts](https://github.com/harvie/libpurple-core-answerscripts) Most-hackable Pidgin plugin! Framework for hooking scripts to respond received messages for various libpurple clients such as pidgin or finch
- [**35**Star][2y] [Py] [hanc00l/weblogic_wls_wsat_rce](https://github.com/hanc00l/weblogic_wls_wsat_rce) forked from
- [**35**Star][3y] [hacking-and-coffee/defcon-for-n00bs](https://github.com/hacking-and-coffee/defcon-for-n00bs) DEF CON for N00bs is an open guide for first time attendees to the convention.
+- [**35**Star][3m] [Java] [guardicore/labs_campaigns](https://github.com/guardicore/labs_campaigns)
- [**35**Star][5m] [gsurma/password_cracker](https://github.com/gsurma/password_cracker) Char-level RNN LSTM password cracker
- [**35**Star][5y] [Py] [gry/shellshock-scanner](https://github.com/gry/shellshock-scanner) A simple Shellshock scanner in python
- [**35**Star][7y] [Py] [grugq/buggery](https://github.com/grugq/buggery) Python wrapper for DbgEng
- [**35**Star][4y] [Java] [grrrdog/acedcup](https://github.com/grrrdog/acedcup) Payload generator for Java Binary Deserialization attack with Commons FileUpload (CVE-2013-2186)
+- [**35**Star][6d] [C#] [greavesy1899/mafia2toolkit](https://github.com/greavesy1899/mafia2toolkit) Open source toolkit for Mafia 2.
+- [**35**Star][8d] [Perl] [gouveaheitor/security-spellbook](https://github.com/gouveaheitor/security-spellbook) My collection of custom scripts, plugins, exploits and others small things
- [**35**Star][4m] [Py] [geek-repo/c2-blockchain](https://github.com/geek-repo/c2-blockchain) This is a concept poc of command and control server implemented over blockchain
- [**35**Star][3y] [Py] [gauthamgoli/rarpasswordcracker](https://github.com/gauthamgoli/rarpasswordcracker) Bruteforces a password protected rar/zip file with specified charset.
- [**35**Star][4y] [Py] [ganapati/wpyscan](https://github.com/ganapati/wpyscan) Wordpress pentest tool (because i don't like ruby)
- [**35**Star][6y] [C#] [friedkiwi/netcrypt](https://github.com/friedkiwi/netcrypt) .NET executable packer
- [**35**Star][2y] [Go] [freach/docker-image-policy-plugin](https://github.com/freach/docker-image-policy-plugin) Docker authentication plugin to enforce a image pull policy. Whitelist Docker images allowed to be pulled.
- [**35**Star][3y] [C] [firebroo/screw_decode](https://github.com/firebroo/screw_decode) decode screw encode php file
+- [**35**Star][1y] [C++] [fdiskyou/dbi](https://github.com/fdiskyou/dbi) Files for
+- [**35**Star][12m] [PHP] [farisv/prestashop-cve-2018-19126](https://github.com/farisv/prestashop-cve-2018-19126) PrestaShop (1.6.x <= 1.6.1.23 or 1.7.x <= 1.7.4.4) Back Office Remote Code Execution (CVE-2018-19126)
- [**35**Star][2y] [Py] [extremecoders-re/bytecode_simplifier](https://github.com/extremecoders-re/bytecode_simplifier) A generic deobfuscator for PjOrion obfuscated python scripts
- [**35**Star][1m] [Rebol] [ericzimmerman/recmd](https://github.com/ericzimmerman/recmd) Command line access to the Registry
-- [**35**Star][21d] [C++] [erickutcher/httpdownloader](https://github.com/erickutcher/httpdownloader) HTTP(S) download manager that uses input/output completion ports (IOCP).
+- [**35**Star][8m] [enovella/ida2ghidra-kb](https://github.com/enovella/ida2ghidra-kb) 在Ghidra中应用部分IDA的键盘绑定
- [**35**Star][7d] [C] [efficios/babeltrace](https://github.com/efficios/babeltrace) The Babeltrace project provides trace read and write libraries, as well as a trace converter. Plugins can be created for any trace format to allow its conversion to/from another trace format.
-- [**35**Star][12d] [Py] [draios/python-sdc-client](https://github.com/draios/python-sdc-client) Sysdig Monitor/Secure Python client library
- [**35**Star][1y] [Py] [digidotcom/python-wpa-supplicant](https://github.com/digidotcom/python-wpa-supplicant) WPA Supplicant wrapper for Python
- [**35**Star][1y] [C] [davidbuchanan314/fusee-nano](https://github.com/davidbuchanan314/fusee-nano) A minimalist re-implementation of the Fusée Gelée exploit (
- [**35**Star][2m] [Py] [d4mianwayne/alfred](https://github.com/d4mianwayne/alfred) A friendly Toolkit for Beginner CTF players
-- [**35**Star][3y] [Awk] [d3sre/understanding_the_ndis_6_stack](https://github.com/d3sre/understanding_the_ndis_6_stack) Public documents about bachelor thesis "Reverse Engineering Analysis of the NDIS 6.* stack"
- [**35**Star][6y] [Perl] [cyberisltd/egresser](https://github.com/cyberisltd/egresser) Client/server scripts designed to test outbound (egress) firewall rules.
- [**35**Star][7y] [C++] [csurage/rootkit](https://github.com/csurage/rootkit) Windows Malware
+- [**35**Star][1m] [Go] [cretz/tor-static](https://github.com/cretz/tor-static) Helpers to build Tor statically
- [**35**Star][4y] [C++] [codereversing/wow64syscall](https://github.com/codereversing/wow64syscall) WoW64 Syscall Hooking
- [**35**Star][1m] [JS] [cloudflare/ipfs-ext](https://github.com/cloudflare/ipfs-ext) Validates IPFS resources served by Cloudflare's gateway.
- [**35**Star][4y] [C] [choller/llcov](https://github.com/choller/llcov) LLVM-based, flexible, live coverage instrumentation for C/C++ code
- [**35**Star][5y] [C] [charlesxsh/mdk3-master](https://github.com/charlesxsh/mdk3-master) Modifications to MDK3 to reboot Access Points
-- [**35**Star][3y] [C] [changeofpace/pe-header-dump-utilities](https://github.com/changeofpace/pe-header-dump-utilities) This x64dbg plugin adds several commands for dumping PE header information by address.
- [**35**Star][2y] [JS] [cgvwzq/spectre](https://github.com/cgvwzq/spectre) My minimal PoC for spectre
+- [**35**Star][2m] [Py] [carlospolop/legion](https://github.com/carlospolop/legion) Automatic Enumeration Tool based in Open Source tools
- [**35**Star][11m] [brianwrf/cve-2018-11788](https://github.com/brianwrf/cve-2018-11788) Apache Karaf XXE Vulnerability (CVE-2018-11788)
- [**35**Star][1y] [Py] [bnbdr/ida-bpf-processor](https://github.com/bnbdr/ida-bpf-processor) BPF Processor for IDA Python
- [**35**Star][4y] [C#] [bnagy/crabstone](https://github.com/bnagy/crabstone) crabstone is a Ruby binding to the capstone disassembly library by Nguyen Anh Quynh
+- [**35**Star][5m] [C] [bmx-routing/bmx7](https://github.com/bmx-routing/bmx7) BMX7 / SEMTOR Securely Entrusted Mesh Routing Protocol
- [**35**Star][6m] [bkth/tale-of-chakra-bugs](https://github.com/bkth/tale-of-chakra-bugs)
- [**35**Star][6m] [Py] [bkerler/dump_avb_signature](https://github.com/bkerler/dump_avb_signature) Dump Android Verified Boot Signature
- [**35**Star][2y] [Py] [b4rd4k/vproxy](https://github.com/b4rd4k/vproxy) Forward HTTP/S Traffic To Proxy Instance
- [**35**Star][9m] [Py] [att/docker-forensics](https://github.com/att/docker-forensics) Tools to assist in forensicating docker
+- [**35**Star][3y] [ashchan/bitcoin-ethereum-cryptography](https://github.com/ashchan/bitcoin-ethereum-cryptography) 比特币、以太坊加密技术
- [**35**Star][3y] [arnaudsoullie/ics-default-passwords](https://github.com/arnaudsoullie/ics-default-passwords) List of default passwords for Industrial Control Systems
- [**35**Star][5y] [OCaml] [argp/bap](https://github.com/argp/bap) Binary Analysis Platform -- I will try to keep this updated with patches, fixes, etc.
-- [**35**Star][1m] [JS] [anseki/gnirts](https://github.com/anseki/gnirts) Obfuscate string literals in JavaScript code.
-- [**35**Star][11m] [Py] [alessiovierti/blindpie](https://github.com/alessiovierti/blindpie) Automatically exploit time-based blind SQL injection vulnerabilities.
+- [**35**Star][11m] [CSS] [appsecco/practical-recon-levelup0x02](https://github.com/appsecco/practical-recon-levelup0x02) This repository contains all the material from the talk "Practical recon techniques for bug hunters & pentesters" given at Bugcrowd LevelUp 0x02 virtual conference
+- [**35**Star][10m] [Go] [amir20/sha-miner](https://github.com/amir20/sha-miner) Simple miner for understanding how cryptocurrency mining works
+- [**35**Star][9m] [Makefile] [alectrocute/unboundbl](https://github.com/alectrocute/unboundbl)
- [**35**Star][11y] [C] [alanquatermain/appencryptor](https://github.com/alanquatermain/appencryptor) A command-line tool to apply or remove Apple Binary Protection from an application.
- [**35**Star][2y] [C#] [akalankauk/keep-it-secure-file-encryption](https://github.com/akalankauk/keep-it-secure-file-encryption) Keep It Secure Private Data Encryption & Decryption Tool
- [**35**Star][2y] [Shell] [ac-mercury/mercuryiss-kali](https://github.com/ac-mercury/mercuryiss-kali) 部署KaliLinux Docker容器的Bash脚本
-- [**35**Star][4y] [PowerShell] [5alt/zerorat](https://github.com/5alt/zerorat) ZeroRAT是一款windows上的一句话远控
- [**35**Star][2y] [C++] [3gstudent/createremotethread](https://github.com/3gstudent/createremotethread) From 32-bit process to 64-bit process
- [**35**Star][2y] [Shell] [0x00pf/stan](https://github.com/0x00pf/stan) STAN is a sTAtic aNalyser
- [**35**Star][3y] [Py] [0pc0defr/wordpress-sploit-framework](https://github.com/0pc0defr/wordpress-sploit-framework) Wordpress Sploit Framework was developed for the purpose to provide a framework which creates proof of concept when discovering vulnerability in Wordpress core and Wordpress plugin.
-- [**35**Star][3y] [Py] [0ang3el/unsafe-jax-rs-burp](https://github.com/0ang3el/unsafe-jax-rs-burp) Burp Suite extension for JAX-RS
- [**35**Star][4y] [Perl] [0ang3el/hibernate-injection-study](https://github.com/0ang3el/hibernate-injection-study) Study about HQL injection exploitation.
-- [**34**Star][10d] [Py] [m4ll0k/burpsuite-secret_finder](https://github.com/m4ll0k/burpsuite-secret_finder) Burp Suite extension to discover apikeys/tokens from HTTP response.
+- [**35**Star][11m] [Py] [04x/wpscan](https://github.com/04x/wpscan) 渗透+信息收集
+- [**34**Star][15d] [C] [atrosinenko/kbdysch](https://github.com/atrosinenko/kbdysch) A collection of user-space Linux kernel specific guided fuzzers based on LKL
+- [**34**Star][5m] [Py] [k0fin/eternalrelayx](https://github.com/k0fin/eternalrelayx) eternalrelayx
- [**34**Star][3y] [screetsec/dracos](https://github.com/screetsec/dracos) Dracos Linux (
- [**34**Star][2y] [Py] [misterbianco/wifijammer-ng](https://github.com/misterbianco/wifijammer-ng) Dan McInerney's Wifijammer - rewritten
+- [**34**Star][2m] [Py] [angr/fidget](https://github.com/angr/fidget) A tool to add simple inline patches to a binary to rearrange its stack frames, and other things!
+- [**34**Star][3m] [C++] [x64dbg/titanengine](https://github.com/x64dbg/titanengine)
- [**34**Star][10m] [Kotlin] [cbeuw/goquiet-android](https://github.com/cbeuw/goquiet-android) GoQuiet plugin on android
- [**34**Star][2y] [Go] [csploit/daemon](https://github.com/csploit/daemon) the core of the cSploit project
-- [**34**Star][8d] [CSS] [frida/frida-website](https://github.com/frida/frida-website) Frida's website
-- [**34**Star][9m] [Go] [v2ray/geoip](https://github.com/v2ray/geoip)
+- [**34**Star][3m] [Go] [cnlh/httpmonitor](https://github.com/cnlh/httpmonitor) http、api接口监控系统,可监控各种http请求,支持header、data设置,支持腾讯云短信和邮件警告通知。
+- [**34**Star][1y] [JS] [threatexpress/portplow](https://github.com/threatexpress/portplow) PortPlow is a distributed port and system scanning & enumeration service. It enables the quick and automated enumeration of ports and services from multiple systems managed by a central console.
+- [**34**Star][3y] [Py] [airbus-seclab/elfesteem](https://github.com/airbus-seclab/elfesteem) ELF/PE/Mach-O parsing library
+- [**34**Star][10m] [Go] [v2ray/geoip](https://github.com/v2ray/geoip)
- [**34**Star][5y] [Py] [danmcinerney/best-channel](https://github.com/danmcinerney/best-channel) Find wifi channel with least interference
+- [**34**Star][1y] [Shell] [sensepost/shinai-fi](https://github.com/sensepost/shinai-fi) Docker images for learning wifi hacking
- [**34**Star][5m] [Py] [rabbitmask/whoisweblogic](https://github.com/rabbitmask/whoisweblogic) 提供Weblogic批量模糊指纹识别
+- [**34**Star][21d] [Jupyter Notebook] [vrthra/f1](https://github.com/vrthra/f1)
- [**34**Star][6m] [C++] [parkovski/wsudo](https://github.com/parkovski/wsudo) Proof of concept sudo for Windows
- [**34**Star][2m] [CSS] [koala633/hostbase](https://github.com/koala633/hostbase) A Ruby GUI based on advanced rogue AP attack
+- [**34**Star][10m] [Java] [alexatiks/spring-security-jwt-csrf](https://github.com/alexatiks/spring-security-jwt-csrf) A demonstration of stateless JWT authentication with Spring Security, Spring Boot and Vue js
+- [**34**Star][7m] [gfwlist/tsilwfg](https://github.com/gfwlist/tsilwfg) Reverse list for netizens overseas
- [**34**Star][7m] [Ruby] [k8gege/zimbraexploit](https://github.com/k8gege/zimbraexploit) Zimbra邮件系统漏洞 XXE/RCE/SSRF/Upload GetShell Exploit 1. (CVE-2019-9621 Zimbra<8.8.11 XXE GetShell Exploit)
-- [**34**Star][5y] [Py] [hiteshchoudhary/airvengers](https://github.com/hiteshchoudhary/airvengers) A GUI to pentest wifi Network, based on Aircrack-ng tools
+- [**34**Star][6d] [Py] [technowlogy-pushpender/technowhorse](https://github.com/technowlogy-pushpender/technowhorse) TechNowHorse is a RAT (Remote Administrator Trojan) Generator for Windows/Linux systems written in Python 3.
- [**34**Star][2y] [C] [nttiton/malware](https://github.com/NTTITON/Malware)
+- [**34**Star][2m] [PHP] [safflower/solveme](https://github.com/safflower/solveme) SolveMe - Jeopardy CTF Platform (for wargame)
- [**34**Star][3y] [Ruby] [cloudfoundry-attic/dea_ng](https://github.com/cloudfoundry-attic/dea_ng) Droplet Execution Agent for Cloud Foundry v2
-- [**34**Star][26d] [HTML] [cveproject/cveproject.github.io](https://github.com/CVEProject/cveproject.github.io) CVE Project Documentation
-- [**34**Star][23d] [C] [zfigura/semblance](https://github.com/zfigura/semblance) Disassembler for Windows executables. Supports 16-bit NE (New Executable), MZ (DOS), and PE (Portable Executable, i.e. Win32) files.
+- [**34**Star][28d] [HTML] [cveproject/cveproject.github.io](https://github.com/CVEProject/cveproject.github.io) CVE Project Documentation
+- [**34**Star][7d] [C] [zfigura/semblance](https://github.com/zfigura/semblance) Disassembler for Windows executables. Supports 16-bit NE (New Executable), MZ (DOS), and PE (Portable Executable, i.e. Win32) files.
- [**34**Star][3y] [Py] [ywjt/dshield](https://github.com/ywjt/dshield)
-- [**34**Star][3m] [Py] [xuchaoa/ctf_awd_platform](https://github.com/xuchaoa/ctf_awd_platform) CTF 攻防对抗平台
- [**34**Star][2y] [Py] [x0rloser/ps4_wifi_bt](https://github.com/x0rloser/ps4_wifi_bt) PS4 wifi/bluetooth firmware ~~reversing~~ h4x
+- [**34**Star][21d] [PS] [wortell/azsentinel](https://github.com/wortell/azsentinel) PowerShell module for Azure Sentinel
- [**34**Star][5y] [Java] [wooyundota/intentmonitor](https://github.com/wooyundota/intentmonitor) Tool based xposed can monitor the android intents
- [**34**Star][6m] [Pascal] [winkelsdorf/delphiencryptioncompendium](https://github.com/winkelsdorf/delphiencryptioncompendium) Automatically exported from code.google.com/p/delphidec
-- [**34**Star][1y] [Swift] [vixentael/zka-example](https://github.com/vixentael/zka-example) Zero Knowledge Application example, iOS, notes sharing, Firebase backend
+- [**34**Star][1y] [vu-aml/adlib](https://github.com/vu-aml/adlib) Game-Theoretic Adversarial Machine Learning Library
- [**34**Star][3m] [Ruby] [veeral-patel/incidents](https://github.com/veeral-patel/incidents) Collaborative, web-based case management for incident response
+- [**34**Star][4y] [unicornsasfuel/sqlite_sqli_cheat_sheet](https://github.com/unicornsasfuel/sqlite_sqli_cheat_sheet) A cheat sheet for attacking SQLite via SQLi
- [**34**Star][5y] [JS] [tweekfawkes/white_lightning](https://github.com/tweekfawkes/white_lightning) Platform for Browser Exploitation
-- [**34**Star][3y] [C] [topcss/wannacry](https://github.com/topcss/wannacry) 勒索病毒WannaCry反编译源码
+- [**34**Star][2m] [HCL] [traveloka/terraform-aws-waf-owasp-top-10-rules](https://github.com/traveloka/terraform-aws-waf-owasp-top-10-rules) A Terraform module to create AWF WAF Rules for OWASP Top 10 security risks protection.
- [**34**Star][7y] [Py] [tkisason/gcrack](https://github.com/tkisason/gcrack) password cracking with the help of google's search
- [**34**Star][3y] [Py] [thomaspatzke/burp-sessionauthtool](https://github.com/thomaspatzke/burp-sessionauthtool) Burp plugin which supports in finding privilege escalation vulnerabilities
- [**34**Star][1y] [C++] [tarlogicsecurity/eoploaddriver](https://github.com/tarlogicsecurity/eoploaddriver) Proof of concept for abusing SeLoadDriverPrivilege (Privilege Escalation in Windows)
- [**34**Star][2y] [C++] [swwwolf/obderef](https://github.com/swwwolf/obderef) Decrement Windows Kernel for fun and profit
- [**34**Star][2y] [Shell] [swisskyrepo/chocolatine](https://github.com/swisskyrepo/chocolatine) When you forget to lock your computer .. you will have to pay some "French Croissants"
-- [**34**Star][6m] [PowerShell] [swisscom/powergrr](https://github.com/swisscom/powergrr) PowerGRR is an API client library in PowerShell working on Windows, Linux and macOS for GRR automation and scripting.
-- [**34**Star][2y] [Py] [superbuker/camhell](https://github.com/superbuker/camhell) Ingenic T10 IP camera crawler
+- [**34**Star][6m] [PS] [swisscom/powergrr](https://github.com/swisscom/powergrr) PowerGRR is an API client library in PowerShell working on Windows, Linux and macOS for GRR automation and scripting.
- [**34**Star][6m] [sourcefrenchy/certexfil.client](https://github.com/sourcefrenchy/certexfil.client) MOVED TO
- [**34**Star][2y] [JS] [sola-da/conflictjs](https://github.com/sola-da/conflictjs) Finding and Understanding Conflicts Between JavaScript Libraries
- [**34**Star][3y] [JS] [snyk/serverless-snyk](https://github.com/snyk/serverless-snyk) Serverless plugin for securing your dependencies with Snyk
-- [**34**Star][24d] [smithersec/bug-bounty-resources](https://github.com/smithersec/bug-bounty-resources) Resources I consider useful for security research of web applications
+- [**34**Star][26d] [smithersec/bug-bounty-resources](https://github.com/smithersec/bug-bounty-resources) Resources I consider useful for security research of web applications
- [**34**Star][2y] [C] [smh17/bitcoin-hacking-tools](https://github.com/smh17/bitcoin-hacking-tools) The source code of main tools used in Bitcoin "non-malware-based" attacks.
+- [**34**Star][2y] [Java] [shengqi158/s2-055-poc](https://github.com/shengqi158/s2-055-poc) S2-055的环境,基于rest-show-case改造
- [**34**Star][5y] [Py] [shendo/netsink](https://github.com/shendo/netsink) Network sinkhole for isolated malware analysis
- [**34**Star][3m] [C#] [sf197/telegra_csharp_c2](https://github.com/sf197/telegra_csharp_c2) Command and Control for C# Writing
- [**34**Star][4y] [C++] [secmob/cve-2016-0846](https://github.com/secmob/cve-2016-0846) arbitrary memory read/write by IMemroy OOB
@@ -13923,145 +14887,174 @@ networking routines
- [**34**Star][6m] [C++] [seancline/pyext](https://github.com/seancline/pyext) WinDbg Extensions for Python
- [**34**Star][1y] [Py] [sasdf/firstblood](https://github.com/sasdf/firstblood) Write exploit faster with up-to-date python 3
- [**34**Star][5y] [Py] [sangaline/svganimator](https://github.com/sangaline/svganimator) The application svganinmator attempts to build a single animated svg out of a sequence of distinct static svg files.
+- [**34**Star][2m] [Shell] [sandrokeil/yubikey-full-disk-encryption-secure-boot-uefi](https://github.com/sandrokeil/yubikey-full-disk-encryption-secure-boot-uefi) Tutorial to create full disk encryption with YubiKey, encrypted boot partition and secure boot with UEFI
- [**34**Star][1y] [Py] [rvn0xsy/fastwhatwebsearch](https://github.com/rvn0xsy/fastwhatwebsearch) FastWhatWebSearch是一个能够支持搜索whatweb工具结果的一个微型平台。
- [**34**Star][1y] [C++] [rokups/reflectiveldr](https://github.com/rokups/reflectiveldr) Position-idependent Windows DLL loader based on ReflectiveDLL project.
- [**34**Star][4m] [C] [reversingid/crackmes-repository](https://github.com/reversingid/crackmes-repository) Initiative to collect and preserve crackmes for learning and practice in reverse engineering
- [**34**Star][7y] [reverselab/kernel-pwn-challenge](https://github.com/reverselab/kernel-pwn-challenge) Source code for building an exploitable linux kernel challenge iso.
- [**34**Star][4y] [C] [reinhardvz/wsk](https://github.com/reinhardvz/wsk) Automatically exported from code.google.com/p/wskudp
- [**34**Star][6m] [quarkslab/conf-presentations](https://github.com/quarkslab/conf-presentations)
+- [**34**Star][3y] [PHP] [qilinbaoleiji/baoleiji](https://github.com/qilinbaoleiji/baoleiji) 麒麟堡垒机由资深软件开发人员发起,开发开始于2009年9月,开发主要成员共计有5个人,开发地点位于北京。系统经过现场严格的压力、性能、功能测试,使用稳定,功能齐全,系统透明登录功能可以让运维人员完全感觉不到堡垒机存在,系统模块齐全。 主要包含:堡垒机运维模块(支持RDP/SSH/SFTP/FTP/TELNET)、动态口令模块、网管监控模块、日志分析模块、3A模块等,堡垒机整体完全可以满足中型企业的整体运维及安全需要。
- [**34**Star][1y] [Py] [pure-l0g1c/spectre](https://github.com/pure-l0g1c/spectre) A simple phishing tool that can phish almost any website
-- [**34**Star][1y] [PowerShell] [ptylenda/kubernetes-for-windows](https://github.com/ptylenda/kubernetes-for-windows) Ansible playbooks and Packer templates for creating hybrid Windows/Linux Kubernetes 1.10+ cluster with experimental Flannel pod network (host-gw backend)
-- [**34**Star][3m] [PowerShell] [dsccommunity/xfailovercluster](https://github.com/dsccommunity/xFailOverCluster) This module contains DSC resources for deployment and configuration of Windows Server Failover Cluster.
+- [**34**Star][1y] [PS] [ptylenda/kubernetes-for-windows](https://github.com/ptylenda/kubernetes-for-windows) Ansible playbooks and Packer templates for creating hybrid Windows/Linux Kubernetes 1.10+ cluster with experimental Flannel pod network (host-gw backend)
- [**34**Star][7y] [Ruby] [postmodern/rprogram](https://github.com/postmodern/rprogram) A library for creating wrappers around command-line programs.
- [**34**Star][3y] [Py] [politoinc/yara-scanner](https://github.com/politoinc/yara-scanner) Yara intergrated into BurpSuite
- [**34**Star][3y] [C] [plutooo/wiiu](https://github.com/plutooo/wiiu) Reversers notes on the Wii U, collected January-October 2015
+- [**34**Star][2m] [Py] [peterhinch/micropython-fourier](https://github.com/peterhinch/micropython-fourier) Fast Fourier transform in MicroPython's inline ARM assembler.
- [**34**Star][3m] [C] [peterbjornx/meloader](https://github.com/peterbjornx/meloader) Linux i386 tool to load and execute ME modules.
- [**34**Star][2y] [Py] [penafieljlm/burp-tracer](https://github.com/penafieljlm/burp-tracer) burp-tracer:BurpSuite 扩展。获取当前的站点地图,提取每个请求参数,并搜索存在请求参数值的回复(responseswhere request parameter value is present)
- [**34**Star][2y] [Py] [peewpw/domainfrontdiscover](https://github.com/peewpw/domainfrontdiscover) Scripts and results for finding domain frontable CloudFront domains
-- [**34**Star][5m] [Py] [paradoxis/flask-unsign](https://github.com/paradoxis/flask-unsign) Command line tool to fetch, decode, brute-force and craft session cookies of a Flask application by guessing secret keys.
+- [**34**Star][2m] [C] [pearinc/fogconnect](https://github.com/pearinc/fogconnect) 提供企业级网络设备之间数据的快速,安全,可靠的P2P传输协议
- [**34**Star][4y] [C] [panyu6325/cve-2015-1805](https://github.com/panyu6325/cve-2015-1805)
- [**34**Star][3m] [C#] [ossindex/audit.net](https://github.com/ossindex/audit.net) Identify known vulnerabilities in .net nuget dependencies
- [**34**Star][5y] [osiris123/cdriver_loader](https://github.com/osiris123/cdriver_loader) Kernel mode driver loader, injecting into the windows kernel, Rootkit. Driver injections.
-- [**34**Star][12d] [C++] [olegzhr/altprobe](https://github.com/olegzhr/altprobe) Alertflex IDS collector (Altprobe)
+- [**34**Star][1y] [Py] [oros42/dns_sniffer](https://github.com/oros42/dns_sniffer) A python DNS sniffer
+- [**34**Star][14d] [C++] [olegzhr/altprobe](https://github.com/olegzhr/altprobe) Alertflex IDS collector (Altprobe)
+- [**34**Star][4m] [C#] [nyan-x-cat/disable-windows-defender](https://github.com/nyan-x-cat/disable-windows-defender) Changing values to bypass windows defender C#
- [**34**Star][7y] [JS] [nv/setinterval-sniffer](https://github.com/nv/setinterval-sniffer) Keep tabs on your uncleared intervals. Hunt down lags and memory leaks.
- [**34**Star][11m] [CSS] [nowsecure/r2frida-book](https://github.com/nowsecure/r2frida-book) The radare2 + frida book for Mobile Application assessment
+- [**34**Star][11m] [C++] [niemand-sec/directx11hook](https://github.com/niemand-sec/directx11hook)
+- [**34**Star][1y] [C++] [nickcano/reloadlibrary](https://github.com/nickcano/reloadlibrary) A quick-and-dirty anti-hook library proof of concept.
+- [**34**Star][1y] [Jupyter Notebook] [nfrumkin/forecast-prometheus](https://github.com/nfrumkin/forecast-prometheus) A collection of analysis, and machine learning techniques for time series forecasting w/ Prometheus metrics
- [**34**Star][2y] [JS] [newfuture/pac](https://github.com/newfuture/pac) Proxy Auto Config generator,自动代理配置生成PAC,可配合ss小飞机使用
+- [**34**Star][2y] [C] [mtjailed/purplesmoke](https://github.com/mtjailed/purplesmoke) A work-in-progress repository for breaking the security of iOS 11.2 up to 11.2.6
- [**34**Star][3y] [CSS] [monosource/radare2-explorations](https://github.com/monosource/radare2-explorations) A book on learning radare2.
-- [**34**Star][19d] [Dockerfile] [misp/docker-misp](https://github.com/misp/docker-misp) Automated Docker MISP container - Malware Information Sharing Platform and Threat Sharing
+- [**34**Star][21d] [Dockerfile] [misp/docker-misp](https://github.com/misp/docker-misp) Automated Docker MISP container - Malware Information Sharing Platform and Threat Sharing
- [**34**Star][3y] [Py] [mipu94/broids_unicorn](https://github.com/mipu94/broids_unicorn) simple plugin to detect shellcode on Bro IDS with Unicorn
- [**34**Star][1y] [Java] [minervalabsresearch/coffeeshot](https://github.com/minervalabsresearch/coffeeshot) CoffeeShot: Avoid Detection with Memory Injection
- [**34**Star][2y] [Py] [mhelwig/privdns](https://github.com/mhelwig/privdns) Check dns servers for reverse resolving private ips
-- [**34**Star][2y] [Go] [metalnem/zinio](https://github.com/metalnem/zinio) This command line tool removes DRM from magazines in your digital Zinio library
+- [**34**Star][8m] [C] [mboehme/pythia](https://github.com/mboehme/pythia) Pythia (extends AFL with Predictions)
- [**34**Star][2y] [Go] [mattiasgeniar/http-flooder](https://github.com/mattiasgeniar/http-flooder) An experiment using goroutines and channels to create a simple HTTP flooder. Mixes GET, POST, PUT, PATCH, ... to one baseline URL.
- [**34**Star][1y] [C] [mainframed/logica](https://github.com/mainframed/logica) Files compiled from the Logica breach investigation materials
- [**34**Star][4y] [Py] [madsc13ntist/idapython](https://github.com/madsc13ntist/idapython) My collection of IDAPython scripts.(No Documentation)
- [**34**Star][4y] [Ruby] [lookingglass/opentpx](https://github.com/lookingglass/opentpx) Open Threat Partner eXchange
- [**34**Star][2y] [Ruby] [lolwaleet/reverseip](https://github.com/lolwaleet/reverseip) Ruby based reverse IP-lookup tool.
-- [**34**Star][1y] [JS] [lmammino/distributed-jwt-cracker](https://github.com/lmammino/distributed-jwt-cracker) An experimental distributed JWT token cracker built using Node.js and ZeroMQ
- [**34**Star][1y] [Py] [leonardonve/edm](https://github.com/leonardonve/edm) Encima De la Mosca HTTP proxy POC for infecting files on-the-fly and SSLstrip2
- [**34**Star][1y] [Go] [leoloobeek/keyserver](https://github.com/leoloobeek/keyserver) Easily serve HTTP and DNS keys for proper payload protection
+- [**34**Star][2y] [Py] [ldionmarcil/sudo-backdoor](https://github.com/ldionmarcil/sudo-backdoor) Wraps sudo; transparently steals user's credentials and exfiltrate over DNS. For those annoying times when you get a shell/file write on a sudoers account and need to leverage their credentials.
- [**34**Star][8m] [Py] [lazenca/exploit-tech](https://github.com/lazenca/exploit-tech) Example files to experience basic exploit techniques.
-- [**34**Star][9m] [C] [l4ys/lazyklee](https://github.com/l4ys/lazyklee) Lazy python wrapper of KLEE for solving CTF challenges
- [**34**Star][1y] [kudelskisecurity/cryptochallenge18](https://github.com/kudelskisecurity/cryptochallenge18) Kudelski Security's 2018 pre-Black Hat crypto challenge
- [**34**Star][4m] [Rust] [kpcyrd/boxxy-rs](https://github.com/kpcyrd/boxxy-rs) Linkable sandbox explorer
-- [**34**Star][1y] [Java] [kingkaki/struts2-vulenv](https://github.com/kingkaki/struts2-vulenv) struts2 漏洞环境源代码
+- [**34**Star][1y] [Py] [kasperskylab/actionscript3](https://github.com/kasperskylab/actionscript3) Tools for static and dynamic analysis of ActionScript3 SWF files.
- [**34**Star][1y] [Shell] [jay-johnson/owasp-jenkins](https://github.com/jay-johnson/owasp-jenkins) Want to test your applications using the latest OWASP security toolchains and the NIST National Vulnerability Database using Jenkins, Ansible and docker?
- [**34**Star][5m] [Py] [jasonhinds13/hackable](https://github.com/jasonhinds13/hackable) A python flask app that is purposefully vulnerable to SQL injection and XSS attacks. To be used for demonstrating attacks
- [**34**Star][3y] [C] [jantonakos/threathuntingexcursions](https://github.com/jantonakos/threathuntingexcursions) Code, commands, and chatter about Threat Hunting.
+- [**34**Star][1y] [C++] [ipbc-dev/bittube-miner](https://github.com/ipbc-dev/bittube-miner) BitTube Miner
- [**34**Star][4y] [Py] [interference-security/multiport](https://github.com/interference-security/multiport)
+- [**34**Star][8m] [C++] [indeedminers/xmr-aeon-stak](https://github.com/indeedminers/xmr-aeon-stak) Unified All-in-one Monero, Sumokoin, Aeon and other Cryptonote miner
- [**34**Star][4y] [Java] [ilmila/springcss-cve-2014-3625](https://github.com/ilmila/springcss-cve-2014-3625) spring mvc cve-2014-3625
+- [**34**Star][5m] [Java] [idl3r/ghidravmlinuxloader](https://github.com/idl3r/ghidravmlinuxloader)
- [**34**Star][2y] [JS] [honeypotio/techmap](https://github.com/honeypotio/techmap) Honeypot's Tech Map
+- [**34**Star][1y] [Shell] [hestat/blazescan](https://github.com/hestat/blazescan) Blazescan is a linux webserver malware scanning and incident response tool, with built in support for cPanel servers, but will run on any linux based server.
- [**34**Star][2y] [hardenedlinux/armv7-nexus7-grsec](https://github.com/hardenedlinux/armv7-nexus7-grsec) Hardened PoC: PaX for Android
+- [**34**Star][7y] [Py] [hackedteam/test-av](https://github.com/hackedteam/test-av) Automated antivirus test environment
- [**34**Star][5y] [gwerz/reverse-engineearing](https://github.com/gwerz/reverse-engineearing) 软件逆向
-- [**34**Star][3m] [Java] [guardicore/labs_campaigns](https://github.com/guardicore/labs_campaigns)
- [**34**Star][6y] [JS] [gtanczyk/dupocracy](https://github.com/gtanczyk/dupocracy) Defcon clone
-- [**34**Star][8d] [C#] [greavesy1899/mafia2toolkit](https://github.com/greavesy1899/mafia2toolkit) Open source toolkit for Mafia 2.
-- [**34**Star][9d] [Perl] [gouveaheitor/security-spellbook](https://github.com/gouveaheitor/security-spellbook) My collection of custom scripts, plugins, exploits and others small things
- [**34**Star][2y] [Py] [google/amt-forensics](https://github.com/google/amt-forensics) Retrieve Intel AMT's Audit Log from a Linux machine without knowing the admin user's password.
+- [**34**Star][4y] [Py] [gioyik/getexploit](https://github.com/gioyik/getexploit)
- [**34**Star][2y] [Py] [g2p/vido](https://github.com/g2p/vido) wrap commands in throwaway virtual machines — easy kernel debugging and regression testing
- [**34**Star][3y] [friedappleteam/blackhat-asia-2017](https://github.com/friedappleteam/blackhat-asia-2017) BlackHat Asia 2017 talk
- [**34**Star][11m] [Shell] [flowztul/keyexec](https://github.com/flowztul/keyexec) keyexec:Shell脚本,在使用 kexec 命令重启时,自动解锁 LUKS 设备
-- [**34**Star][12m] [PHP] [farisv/prestashop-cve-2018-19126](https://github.com/farisv/prestashop-cve-2018-19126) PrestaShop (1.6.x <= 1.6.1.23 or 1.7.x <= 1.7.4.4) Back Office Remote Code Execution (CVE-2018-19126)
-- [**34**Star][6m] [C++] [ez8-co/unlocker](https://github.com/ez8-co/unlocker)
+- [**34**Star][7m] [C++] [ez8-co/unlocker](https://github.com/ez8-co/unlocker)
- [**34**Star][2y] [Py] [eyyub/tensorflow-cyclegan](https://github.com/eyyub/tensorflow-cyclegan) Lightweight CycleGAN tensorflow implementation
- [**34**Star][2y] [Py] [ernw/dizzy-legacy](https://github.com/ernw/dizzy-legacy) Network and USB protocol fuzzing toolkit.
- [**34**Star][1y] [Py] [ernw/dizzy](https://github.com/ernw/dizzy) Network and USB protocol fuzzing toolkit.
-- [**34**Star][17d] [C#] [ericzimmerman/appcompatcacheparser](https://github.com/ericzimmerman/appcompatcacheparser) AppCompatCache (shimcache) parser. Supports Windows 7 (x86 and x64), Windows 8.x, and Windows 10
-- [**34**Star][8m] [enovella/ida2ghidra-kb](https://github.com/enovella/ida2ghidra-kb) 在Ghidra中应用部分IDA的键盘绑定
+- [**34**Star][19d] [C#] [ericzimmerman/appcompatcacheparser](https://github.com/ericzimmerman/appcompatcacheparser) AppCompatCache (shimcache) parser. Supports Windows 7 (x86 and x64), Windows 8.x, and Windows 10
- [**34**Star][3y] [Py] [emdel/ksfinder](https://github.com/emdel/ksfinder) ksfinder - Retrieve exported kernel symbols from physical memory dumps
- [**34**Star][2y] [Py] [embedi/dir8xx_poc](https://github.com/embedi/dir8xx_poc) Proof-of-Concept exploits for D-Link DIR8xx routers
- [**34**Star][6m] [Py] [efficios/barectf](https://github.com/efficios/barectf) Generator of ANSI C tracers which output CTF
- [**34**Star][4y] [Shell] [easonoutlook/rasticrac](https://github.com/easonoutlook/rasticrac) Rasticrac v3.2.5 is for Crack IPA file, like Clutch, this is a copy from appaddict.org, just for study. Now support PlugIn and Watch App.
+- [**34**Star][10m] [Go] [dwin/gosecretboxpassword](https://github.com/dwin/gosecretboxpassword) A probably paranoid Golang utility library for securely hashing and encrypting passwords based on the Dropbox method. This implementation uses Blake2b, Scrypt and XSalsa20-Poly1305 (via NaCl SecretBox) to create secure password hashes that are also encrypted using a master passphrase.
- [**34**Star][2m] [Py] [duo-labs/cloudtrail-partitioner](https://github.com/duo-labs/cloudtrail-partitioner)
-- [**34**Star][2y] [Visual Basic] [doctorlai/vbscript_obfuscator](https://github.com/doctorlai/vbscript_obfuscator) The VBScript Obfuscator written in VBScript
+- [**34**Star][2y] [Visual Basic .NET] [doctorlai/vbscript_obfuscator](https://github.com/doctorlai/vbscript_obfuscator) The VBScript Obfuscator written in VBScript
- [**34**Star][3y] [Ruby] [dmchell/metasploit-framework](https://github.com/dmchell/metasploit-framework) Metasploit Framework
+- [**34**Star][2m] [Py] [dmaasland/mcfridafee](https://github.com/dmaasland/mcfridafee)
- [**34**Star][5y] [Py] [dionach/headersanalyzer](https://github.com/dionach/headersanalyzer) Burp extension that checks for interesting and security headers
- [**34**Star][4y] [Java] [devadvance/rootinspector](https://github.com/devadvance/rootinspector) Advanced detection of rooting
- [**34**Star][3y] [Py] [darx0r/reef](https://github.com/darx0r/reef) IDAPython plugin for finding Xrefs from a function
- [**34**Star][2y] [CMake] [daniestevez/gr-outernet](https://github.com/daniestevez/gr-outernet) GNUradio OOT module for Outernet
- [**34**Star][2y] [Py] [d3vilbug/brutal_ssh](https://github.com/d3vilbug/brutal_ssh) SSH Login brute force, scan for vulnerable version and 0 day exploit (under development)
-- [**34**Star][8m] [Py] [cyubuchen/free_proxy_website](https://github.com/cyubuchen/free_proxy_website) 获取免费socks/https/http代理的网站集合
- [**34**Star][3y] [CSS] [cysca/cysca2015](https://github.com/cysca/cysca2015) Cyber Security Challenge Australia 2015 Files
- [**34**Star][1y] [JS] [cymmetria/ciscoasa_honeypot](https://github.com/cymmetria/ciscoasa_honeypot) A low interaction honeypot for the Cisco ASA component capable of detecting CVE-2018-0101, a DoS and remote code execution vulnerability.
- [**34**Star][4y] [Py] [curehsu/ez-wave](https://github.com/curehsu/ez-wave) Tools for Evaluating and Exploiting Z-Wave Networks using Software-Defined Radios.
- [**34**Star][7m] [Py] [claudiugeorgiu/riskindroid](https://github.com/claudiugeorgiu/riskindroid) A tool for quantitative risk analysis of Android applications based on machine learning techniques
- [**34**Star][7y] [C] [chokepoint/jynxkit](https://github.com/chokepoint/jynxkit) JynxKit is an LD_PRELOAD userland rootkit for Linux systems with reverse connection SSL backdoor
+- [**34**Star][2y] [C++] [chiehmin/sheepwall](https://github.com/chiehmin/sheepwall) Sniff plaintext account/password/cookie on router
- [**34**Star][3y] [Py] [cheery/spirthon](https://github.com/cheery/spirthon) Python bytecode to SPIR-V -translation.
- [**34**Star][4y] [Py] [cclgroupltd/ccl-bplist](https://github.com/cclgroupltd/ccl-bplist) Python Module for parsing Binary Property List and NSKeyedArchiver files
- [**34**Star][2y] [C#] [breenmachine/hpwn](https://github.com/breenmachine/hpwn) HP printer security research code
+- [**34**Star][5y] [brad-anton/freeradius-wpe](https://github.com/brad-anton/freeradius-wpe)
- [**34**Star][1y] [C] [bartavelle/rulesfinder](https://github.com/bartavelle/rulesfinder)
-- [**34**Star][2m] [Java] [availlang/avail](https://github.com/availlang/avail) The Avail programming language. Includes the virtual machine, standard library, and standard examples.
+- [**34**Star][5y] [C++] [avplayer/avcamera](https://github.com/avplayer/avcamera) 一款家用安全防盗监控软件,无需额外购买昂贵的CCD监控摄像头,只需普通电脑视频聊天用的CMOS摄像头即可。
+- [**34**Star][3m] [Java] [availlang/avail](https://github.com/availlang/avail) The Avail programming language. Includes the virtual machine, standard library, and standard examples.
- [**34**Star][3y] [Py] [attackercan/burp-xss-sql-plugin](https://github.com/attackercan/burp-xss-sql-plugin)
- [**34**Star][1y] [Dockerfile] [asuri-team/ctf-xinetd](https://github.com/asuri-team/ctf-xinetd) A docker image to hold pwn challenges in ctf war
- [**34**Star][3m] [Py] [arbazkiraak/burpblh](https://github.com/arbazkiraak/burpblh) BurpBLH: 使用IScannerCheck发现被劫持的损坏链接. Burp插件
- [**34**Star][5m] [Shell] [ank1036official/cloudcheck](https://github.com/ank1036official/cloudcheck) Checks using a test string if a Cloudflare DNS bypass is possible using CloudFail.
+- [**34**Star][2y] [Py] [anbai-inc/secrss](https://github.com/anbai-inc/secrss) RSS安全订阅 每日安全信息推送
- [**34**Star][7m] [Py] [am0nt31r0/osint-search](https://github.com/am0nt31r0/osint-search) Useful for digital forensics investigations or initial black-box pentest footprinting.
+- [**34**Star][2y] [C] [alon7/bbt-multiminer](https://github.com/alon7/bbt-multiminer) Start different miners from the same script. Easy and simple to get started with mining. Originally by Bits Be Trippin'
+- [**34**Star][3d] [Py] [aliasrobotics/rvd](https://github.com/aliasrobotics/rvd) Robot Vulnerability Database. An archive of robot vulnerabilities and bugs.
- [**34**Star][2y] [Py] [alexbers/exploit_farm](https://github.com/alexbers/exploit_farm) The utility for CTF hacker competition for team hacking and flag submitting
-- [**34**Star][22d] [HTML] [adulau/misp-osint-collection](https://github.com/adulau/misp-osint-collection) Collection of best practices to add OSINT into MISP and/or MISP communities
+- [**34**Star][11m] [Py] [alessiovierti/blindpie](https://github.com/alessiovierti/blindpie) Automatically exploit time-based blind SQL injection vulnerabilities.
+- [**34**Star][24d] [HTML] [adulau/misp-osint-collection](https://github.com/adulau/misp-osint-collection) Collection of best practices to add OSINT into MISP and/or MISP communities
- [**34**Star][5y] [C++] [adamkramer/handle_monitor](https://github.com/adamkramer/handle_monitor) Identifying and Disrupting Crypto-Ransomware (and Destructive Malware) using handle heurustics
-- [**34**Star][3y] [PowerShell] [3gstudent/ninjacopy](https://github.com/3gstudent/ninjacopy) Powershell to copy ntds.dit
+- [**34**Star][3y] [PS] [3gstudent/ninjacopy](https://github.com/3gstudent/ninjacopy) Powershell to copy ntds.dit
- [**34**Star][3y] [PHP] [233sec/laravel-src](https://github.com/233sec/laravel-src) 基于 LARAVEL 打造的安全应急响应中心平台
-- [**34**Star][11m] [Py] [04x/wpscan](https://github.com/04x/wpscan) 渗透+信息收集
-- [**33**Star][16d] [Assembly] [86hh/poc-viruses](https://github.com/86hh/poc-viruses) POC viruses I have created to demo some ideas
+- [**33**Star][1m] [Shell] [garywill/linux-router](https://github.com/garywill/linux-router) Set Linux as router in one command. Support Internet sharing, redsocks, Wifi hotspot, IPv6. Can also be used for routing VM/containers
+- [**33**Star][2d] [Go] [mzz2017/v2raya](https://github.com/mzz2017/v2raya) V2RayA是一个支持全局透明代理的V2Ray Linux GUI客户端。
+- [**33**Star][2y] [Go] [serverless-ss/slss](https://github.com/serverless-ss/slss)
+- [**33**Star][18d] [Assembly] [86hh/poc-viruses](https://github.com/86hh/poc-viruses) POC viruses I have created to demo some ideas
- [**33**Star][2m] [C] [mak-/reverse-shell-access-kernel-module](https://github.com/mak-/reverse-shell-access-kernel-module) This is a kernel module invoked reverse shell proof of concept.
-- [**33**Star][7d] [C++] [taviso/sharapi](https://github.com/taviso/sharapi) Simpsons: Hit & Run JavaScript API
+- [**33**Star][2y] [C] [uwnetworkslab/cordova-plugin-tun2socks](https://github.com/uwnetworkslab/cordova-plugin-tun2socks) Cordova plugin to enable a system-wide VPN for Android devices.
+- [**33**Star][2m] [Py] [landgrey/toolsparty](https://github.com/landgrey/toolsparty) A collection of script tools for pentesting
+- [**33**Star][9d] [C++] [taviso/sharapi](https://github.com/taviso/sharapi) Simpsons: Hit & Run JavaScript API
- [**33**Star][1y] [Shell] [jaredhaight/scripts](https://github.com/jaredhaight/scripts) A collection of scripts that I've written while pentesting.
-- [**33**Star][3m] [C++] [x64dbg/titanengine](https://github.com/x64dbg/titanengine)
+- [**33**Star][1y] [Py] [skelsec/socksohttp](https://github.com/skelsec/socksohttp) Socks5 server over Websockets
- [**33**Star][2y] [HTML] [jipegit/twintelligence](https://github.com/jipegit/twintelligence) Twintelligence is a free Twitter OSINT tool
- [**33**Star][5y] [C] [gdbinit/bruteforcesysent](https://github.com/gdbinit/bruteforcesysent) Small util to discover OS X sysent via bruteforce
-- [**33**Star][1m] [Py] [angr/angr-platforms](https://github.com/angr/angr-platforms) A collection of extensions to angr to handle new platforms
+- [**33**Star][5d] [Py] [angr/angr-platforms](https://github.com/angr/angr-platforms) A collection of extensions to angr to handle new platforms
- [**33**Star][1y] [CSS] [osirislab/csaw-ctf-2018-quals](https://github.com/osirislab/csaw-ctf-2018-quals) Repo for CSAW CTF 2018 Quals challenges
-- [**33**Star][1y] [Shell] [sensepost/shinai-fi](https://github.com/sensepost/shinai-fi) Docker images for learning wifi hacking
+- [**33**Star][4y] [C] [stealth/injectso](https://github.com/stealth/injectso)
+- [**33**Star][8m] [Py] [hacker0x01/hacker101coursework](https://github.com/hacker0x01/hacker101coursework) Deprecated coursework from first iteration of Hacker101
+- [**33**Star][1y] [seemoo-lab/wireshark-awdl](https://github.com/seemoo-lab/wireshark-awdl) Wireshark Dissector for Apple Wireless Direct Link (AWDL) and Apple's CoreCapture logging framework. Note: the AWDL dissector is part of Wireshark 3.0!
- [**33**Star][6y] [JS] [michenriksen/hackpad](https://github.com/michenriksen/hackpad) A web application hacker's toolbox. Base64 encoding/decoding, URL encoding/decoding, MD5/SHA1/SHA256/HMAC hashing, code deobfuscation, formatting, highlighting and much more.
-- [**33**Star][18d] [Py] [rhelmot/nclib](https://github.com/rhelmot/nclib) Netcat as a python library
-- [**33**Star][29d] [C] [xerpi/vita-libbaremetal](https://github.com/xerpi/vita-libbaremetal) PSVita bare-metal payload library and sample
+- [**33**Star][20d] [C] [jovanbulck/0xbadc0de](https://github.com/jovanbulck/0xbadc0de) A Tale of Two Worlds: Assessing the Vulnerability of Enclave Shielding Runtimes
+- [**33**Star][20d] [Py] [rhelmot/nclib](https://github.com/rhelmot/nclib) Netcat as a python library
+- [**33**Star][1m] [C] [xerpi/vita-libbaremetal](https://github.com/xerpi/vita-libbaremetal) PSVita bare-metal payload library and sample
- [**33**Star][7y] [Py] [ml31415/wpscrack](https://github.com/ml31415/wpscrack) Continuation of wpscrack originally written by Stefan Viehböck
-- [**33**Star][1m] [Objective-C] [proteas/ios13-sandbox-profile-format](https://github.com/proteas/ios13-sandbox-profile-format) Binary Format of iOS 13 Sandbox Profile Collection
-- [**33**Star][29d] [C] [xerpi/vita-libbaremetal](https://github.com/xerpi/vita-libbaremetal) PSVita bare-metal payload library and sample
-- [**33**Star][8m] [JS] [cylance/nmap-cluster](https://github.com/cylance/NMAP-Cluster) Clustering NMAP XML results to help make sense of large scan results.
+- [**33**Star][1m] [ObjC] [proteas/ios13-sandbox-profile-format](https://github.com/proteas/ios13-sandbox-profile-format) Binary Format of iOS 13 Sandbox Profile Collection
+- [**33**Star][1m] [C] [xerpi/vita-libbaremetal](https://github.com/xerpi/vita-libbaremetal) PSVita bare-metal payload library and sample
+- [**33**Star][2y] [Py] [newbee119/ip-location](https://github.com/NewBee119/IP-location) batch query IP location information,批量查询IP地理位置信息,解析pcap包中IP地址的地理信息
+- [**33**Star][4y] [Py] [fortynorthsecurity/hasher](https://github.com/FortyNorthSecurity/Hasher) Hasher is designed to be a tool that allows you to quickly hash plaintext strings, or compare hashed values with a plaintext locally. Not meant to crack passwords, but designed for local checks.
- [**33**Star][1y] [C++] [teammolecule/toshiba-mep-idp](https://github.com/TeamMolecule/toshiba-mep-idp) IDA Pro module for Toshiba MeP processors
-- [**33**Star][2m] [PHP] [safflower/solveme](https://github.com/safflower/solveme) SolveMe - Jeopardy CTF Platform (for wargame)
- [**33**Star][2y] [C] [openpreserve/scape-xcorrsound](https://github.com/openpreserve/scape-xcorrsound) Suite of tools for automated quality assurance of audio migration processes.
-- [**33**Star][14d] [JS] [googleapis/cloud-profiler-nodejs](https://github.com/googleapis/cloud-profiler-nodejs) Node.js library for Stackdriver Profiler. Continuous CPU and heap profiling to improve performance and reduce costs.
+- [**33**Star][3m] [C++] [busyluo/netassistant](https://github.com/busyluo/NetAssistant) A UDP/TCP Assistant. 网络调试助手
+- [**33**Star][16d] [JS] [googleapis/cloud-profiler-nodejs](https://github.com/googleapis/cloud-profiler-nodejs) Node.js library for Stackdriver Profiler. Continuous CPU and heap profiling to improve performance and reduce costs.
- [**33**Star][1y] [Py] [newbee119/check_ip](https://github.com/NewBee119/check_ip) check_IP is to judge whether a IP is malicious based on open threat intelligence,基于开源威胁情报AlienVault,排查IP地址及域名的恶意性
- [**33**Star][2y] [Perl] [zhou0/shadowsocks-perl](https://github.com/zhou0/shadowsocks-perl) An asynchronous, non-blocking shadowsocks client and server written in Perl.
-- [**33**Star][29d] [C] [xerpi/vita-libbaremetal](https://github.com/xerpi/vita-libbaremetal) PSVita bare-metal payload library and sample
+- [**33**Star][1y] [xxwiredxx/nintendo-switch-joycon-hack](https://github.com/xxwiredxx/nintendo-switch-joycon-hack) Hardwiring a push button in a JoyCon to grant bootloader access
+- [**33**Star][5y] [Py] [xurubin/aurasium](https://github.com/xurubin/aurasium) Practical security policy enforcement for Android apps via bytecode rewriting and in-place reference monitor
+- [**33**Star][1m] [C] [xerpi/vita-libbaremetal](https://github.com/xerpi/vita-libbaremetal) PSVita bare-metal payload library and sample
+- [**33**Star][3y] [HTML] [wolfram77web/app-peid](https://github.com/wolfram77web/app-peid) PEiD detects most common packers, cryptors and compilers for PE files.
+- [**33**Star][2y] [C] [weaknetlabs/byteforce](https://github.com/weaknetlabs/byteforce) Offline Digital Forensics Tool for Binary Files
- [**33**Star][1y] [C++] [wanttobeno/x64_aob_search](https://github.com/wanttobeno/x64_aob_search) 快速内存搜索算法,商用级别
-- [**33**Star][1y] [vu-aml/adlib](https://github.com/vu-aml/adlib) Game-Theoretic Adversarial Machine Learning Library
+- [**33**Star][9m] [Swift] [vixentael/ios-datasec-basics](https://github.com/vixentael/ios-datasec-basics) iOS data security basics: key management, workshop for iOS Con UK
- [**33**Star][1y] [Ruby] [versioneye/versioneye-security](https://github.com/versioneye/versioneye-security) Security Crawler for VersionEye
-- [**33**Star][2m] [HCL] [traveloka/terraform-aws-waf-owasp-top-10-rules](https://github.com/traveloka/terraform-aws-waf-owasp-top-10-rules) A Terraform module to create AWF WAF Rules for OWASP Top 10 security risks protection.
-- [**33**Star][25d] [CSS] [trailofbits/nyc-infosec](https://github.com/trailofbits/nyc-infosec) Mapping the NYC Infosec Community
+- [**33**Star][3m] [C++] [vanhauser-thc/afl-dyninst](https://github.com/vanhauser-thc/afl-dyninst) American Fuzzy Lop + Dyninst == AFL Fuzzing blackbox binaries
+- [**33**Star][27d] [CSS] [trailofbits/nyc-infosec](https://github.com/trailofbits/nyc-infosec) Mapping the NYC Infosec Community
- [**33**Star][2m] [Py] [tp7309/ttpassgen](https://github.com/tp7309/ttpassgen) flexiable and scriptable password dictionary generator which can support brute-force、combination、complex rule mode etc...
- [**33**Star][3y] [tom4t0/cobalt-strike-persistence](https://github.com/tom4t0/cobalt-strike-persistence) cobalt strike 自启动脚本
- [**33**Star][1y] [C#] [tlgyt/wibr](https://github.com/tlgyt/wibr) Wifi Bruteforce (WiBr) is a wifi cracking tool written in c#.
+- [**33**Star][7m] [C++] [tlgyt/absent-loader](https://github.com/tlgyt/absent-loader) Example Loader to be used as a learning resource for people interested in how commercially available malware is made.
- [**33**Star][2y] [C++] [tienex/apfs](https://github.com/tienex/apfs) apfs: 挂载、转储和分析Apple APFS 卷和容器
- [**33**Star][1y] [C] [thisissecurity/malware](https://github.com/thisissecurity/malware)
-- [**33**Star][3y] [HTML] [tennc/1000php](https://github.com/tennc/1000php) 1000个PHP代码审计案例(2016.7以前乌云公开漏洞)
- [**33**Star][3m] [Py] [teebytes/tnt-fuzzer](https://github.com/teebytes/tnt-fuzzer) OpenAPI 2.0 (Swagger) fuzzer written in python. Basically TnT for your API.
- [**33**Star][1m] [Shell] [taylanbildik/linux_dersleri](https://github.com/taylanbildik/linux_dersleri) Kali Linux Üzerinden İşlenen Linux Komut Satırı Dersleri Dokümantasyon Kaynağı
- [**33**Star][3y] [Shell] [superkojiman/snuff](https://github.com/superkojiman/snuff) Automate ARP poisoning, ssltrip, and ettercap.
- [**33**Star][4y] [C] [soufianetahiri/vault-8-hive](https://github.com/soufianetahiri/vault-8-hive) Hive solves a critical problem for the malware operators at the CIA.
- [**33**Star][2y] [C] [soufianetahiri/mirai-botnet](https://github.com/soufianetahiri/mirai-botnet) Mirai Botnet Client, Echo Loader and CNC source code (for the sake of knowledge)
+- [**33**Star][10m] [Shell] [smileart/omg](https://github.com/smileart/omg) One More Gear set to follow DRY principle and stop doing things again and again (just a nice name for my dotfiles)
- [**33**Star][3y] [Py] [smeegesec/smeegescrape](https://github.com/smeegesec/smeegescrape) File/Web Text Scraper and Wordlist Generator
- [**33**Star][5y] [PHP] [smaash/kunai](https://github.com/smaash/kunai) pwning & info gathering via user browser
- [**33**Star][2y] [C++] [siberas/cve-2016-3309_reloaded](https://github.com/siberas/cve-2016-3309_reloaded) Exploits for the win32kfull!bFill vulnerability on Win10 x64 RS2 using Bitmap or Palette techniques
@@ -14069,83 +15062,90 @@ networking routines
- [**33**Star][9m] [C] [securesystemslab/periscope](https://github.com/securesystemslab/periscope)
- [**33**Star][1y] [Go] [saturnsvoid/windows-keylogger](https://github.com/saturnsvoid/windows-keylogger)
- [**33**Star][2m] [sapran/ukraine-infosec-conferences](https://github.com/sapran/ukraine-infosec-conferences) Анонси, програми та архів матеріалів українських конференцій з кібер-безпеки.
-- [**33**Star][2m] [Shell] [sandrokeil/yubikey-full-disk-encryption-secure-boot-uefi](https://github.com/sandrokeil/yubikey-full-disk-encryption-secure-boot-uefi) Tutorial to create full disk encryption with YubiKey, encrypted boot partition and secure boot with UEFI
- [**33**Star][3y] [Py] [sam-b/windows_syscalls_dumper](https://github.com/sam-b/windows_syscalls_dumper) A dirty IDAPython script to dump windows system call number/name pairs as JSON
- [**33**Star][2y] [Py] [s0cket7/torstat](https://github.com/s0cket7/torstat)
- [**33**Star][1y] [C#] [roshly/ayyhook-loader](https://github.com/roshly/ayyhook-loader) A Free Open Source Cheat Loader
- [**33**Star][2y] [Py] [rootlabs/torstat](https://github.com/rootlabs/torstat)
+- [**33**Star][6m] [Shell] [robertohuertasm/apk-decompiler](https://github.com/robertohuertasm/apk-decompiler) Small Rust utility to decompile Android apks
- [**33**Star][3y] [Java] [riramar/pubkey-pin-android](https://github.com/riramar/pubkey-pin-android) Just another example for Android Public Key Pinning (based on OWASP example)
- [**33**Star][2y] [HTML] [rh0dev/shellcode2asmjs](https://github.com/rh0dev/shellcode2asmjs) Automatically generate ASM.JS JIT-Spray payloads
+- [**33**Star][20d] [C] [rems-project/sail-arm](https://github.com/rems-project/sail-arm) Sail version of ARM ISA definition, currently for ARMv8.5-A
- [**33**Star][7m] [Ruby] [rapid7/metasploit_data_models](https://github.com/rapid7/metasploit_data_models) MSF database code, gemified
+- [**33**Star][7m] [Py] [r35tart/redisdirscan](https://github.com/r35tart/redisdirscan) 此脚本用于测试 Rdies 未授权访问,在没权限写ssh私钥和定时任务又不知道web绝对路径的情况下,进行WEB目录探测
- [**33**Star][4y] [JS] [qazbnm456/ctf-course](https://github.com/qazbnm456/ctf-course)
- [**33**Star][6m] [Verilog] [q3k/ctf](https://github.com/q3k/ctf) Stuff from CTF contests
- [**33**Star][2y] [ptresearch/pentest-detections](https://github.com/ptresearch/pentest-detections) Repository for penetration testing tools
- [**33**Star][2m] [Py] [pr0cf5/ctf-writeups](https://github.com/pr0cf5/ctf-writeups)
- [**33**Star][6m] [Py] [portswigger/active-scan-plus-plus](https://github.com/portswigger/active-scan-plus-plus) ActiveScan++ Burp Suite Plugin
- [**33**Star][4y] [Py] [peacand/burp-pytemplate](https://github.com/peacand/burp-pytemplate) Burp extension to quickly and easily develop Python complex exploits based on Burp proxy requests.
+- [**33**Star][2y] [Java] [panagiotisdrakatos/t0rlib4j](https://github.com/panagiotisdrakatos/t0rlib4j) T0rlib4j is a Java controller library for Tor
- [**33**Star][4y] [Py] [pan0pt1c0n/python-sockstress](https://github.com/pan0pt1c0n/python-sockstress) SockStress DoS (Denial of Service) exploit written in Python |
-- [**33**Star][4m] [C#] [nyan-x-cat/disable-windows-defender](https://github.com/nyan-x-cat/disable-windows-defender) Changing values to bypass windows defender C#
+- [**33**Star][11m] [C] [p3n3troot0r/socketv2v](https://github.com/p3n3troot0r/socketv2v) Mainline Linux Kernel integration of IEEE 802.11p, IEEE 1609.{3,4}, and developmental userspace utility for using J2735 over WAVE
+- [**33**Star][2y] [Py] [osssanitizer/osspolice](https://github.com/osssanitizer/osspolice) Identifying Open-Source License Violation and 1-day Security Risk at Large Scale
+- [**33**Star][5y] [C++] [nyx0/alina](https://github.com/nyx0/alina) Alina Spark - Point of Sales Trojan
- [**33**Star][7y] [C] [nwhusted/auditdandroid](https://github.com/nwhusted/auditdandroid) A Fork of Auditd geared specifically for running on the Android platform. Includes system applications, AOSP patches, and kernel patches to maximize the audit experience.
- [**33**Star][5y] [Py] [novetta/delilah](https://github.com/novetta/delilah)
-- [**33**Star][11m] [C++] [niemand-sec/directx11hook](https://github.com/niemand-sec/directx11hook)
-- [**33**Star][1y] [C++] [nickcano/reloadlibrary](https://github.com/nickcano/reloadlibrary) A quick-and-dirty anti-hook library proof of concept.
- [**33**Star][2y] [mzet-/ctf-writeups](https://github.com/mzet-/ctf-writeups) My writeups of various CTFs & security challenges
- [**33**Star][7y] [C] [mubix/fakenetbios](https://github.com/mubix/fakenetbios) See here:
+- [**33**Star][2y] [ObjC] [mtjailed/privateapimanager](https://github.com/mtjailed/privateapimanager) A project providing usefull classes for reverse engineering iOS Private APIs on-device
- [**33**Star][2y] [C] [mtalbi/vm_escape](https://github.com/mtalbi/vm_escape) vm escape exploit
-- [**33**Star][3m] [Shell] [mozillasecurity/orion](https://github.com/mozillasecurity/orion) CI/CD pipeline for building and publishing multiple
+- [**33**Star][7d] [Shell] [mozillasecurity/orion](https://github.com/mozillasecurity/orion) CI/CD pipeline for building and publishing multiple
- [**33**Star][2m] [Py] [monolithworks/trueseeing](https://github.com/monolithworks/trueseeing) Non-decompiling Android vulnerability scanner (DC25 demo lab, CB17)
+- [**33**Star][5m] [Go] [moldabekov/whatsipp](https://github.com/moldabekov/whatsipp)
- [**33**Star][4y] [Py] [moheshmohan/pyssltest](https://github.com/moheshmohan/pyssltest) A python multithreaded script to make use of Qualys ssllabs api to test SSL flaws
- [**33**Star][4y] [C] [mmyydd/relative-pattern](https://github.com/mmyydd/relative-pattern) Recover control flow graph from obfuscated codes
- [**33**Star][2m] [C] [milter-manager/milter-manager](https://github.com/milter-manager/milter-manager) milter manager is a free software to protect you from spam mails and virus mails effectively with milter.
-- [**33**Star][13d] [Py] [mfthomps/resim](https://github.com/mfthomps/resim) Reverse engineering software using a full system simulator
+- [**33**Star][2y] [C#] [mili-tan/mv2rayconfig](https://github.com/mili-tan/mv2rayconfig)
+- [**33**Star][4m] [C#] [mgeeky/stracciatella](https://github.com/mgeeky/stracciatella) OpSec-safe Powershell runspace from within C# (aka SharpPick) with AMSI and Script Block Logging disabled at startup
+- [**33**Star][15d] [Py] [mfthomps/resim](https://github.com/mfthomps/resim) Reverse engineering software using a full system simulator
- [**33**Star][2y] [C++] [menooker/fishhook](https://github.com/menooker/fishhook) An inline hook platform for Windows x86/x64
- [**33**Star][3m] [JS] [medicean/superterm](https://github.com/medicean/superterm) 利用 webshell 创建交互式终端(Create an interactive terminal with webshell.)
+- [**33**Star][9m] [Py] [mattbierner/urban-dictionary-word-list](https://github.com/mattbierner/urban-dictionary-word-list) Script and sample dataset of all urban dictionary entry names (around 1.4 million total)
+- [**33**Star][4y] [Py] [mansosec/microsoft-malware-challenge](https://github.com/mansosec/microsoft-malware-challenge)
+- [**33**Star][5m] [Jupyter Notebook] [malware-revealer/malware-revealer](https://github.com/malware-revealer/malware-revealer) Spot malwares using Machine Learning techniques
- [**33**Star][7m] [C] [maldiohead/cve-2019-8540](https://github.com/maldiohead/cve-2019-8540) Kernel Stack info leak at exportObjectToClient function
- [**33**Star][5y] [Ruby] [madirish/kojoney2](https://github.com/madirish/kojoney2) Kojoney2 is a low interaction SSH honeypot written in Python. Based on Kojoney by Jose Antonio Coret
-- [**33**Star][7d] [JS] [m1nl/pompa](https://github.com/m1nl/pompa) Fully-featured spear-phishing toolkit - web front-end
+- [**33**Star][6d] [JS] [m1nl/pompa](https://github.com/m1nl/pompa) Fully-featured spear-phishing toolkit - web front-end
- [**33**Star][7y] [Py] [luca-m/lsb-toolkit](https://github.com/luca-m/lsb-toolkit) This is a small and simple toolkit that might be useful during steganalysis, it is currently composed by several general purpose command line tools.
- [**33**Star][2y] [C] [long123king/tokenext](https://github.com/long123king/tokenext) A windbg extension, extracting token related contents
-- [**33**Star][2y] [Py] [ldionmarcil/sudo-backdoor](https://github.com/ldionmarcil/sudo-backdoor) Wraps sudo; transparently steals user's credentials and exfiltrate over DNS. For those annoying times when you get a shell/file write on a sudoers account and need to leverage their credentials.
- [**33**Star][3y] [C++] [kingsunc/minidump](https://github.com/kingsunc/minidump) windows软件崩溃解决方案
- [**33**Star][3y] [Ruby] [khr0x40sh/metasploit-modules](https://github.com/khr0x40sh/metasploit-modules)
-- [**33**Star][1y] [Py] [kasperskylab/actionscript3](https://github.com/kasperskylab/actionscript3) Tools for static and dynamic analysis of ActionScript3 SWF files.
+- [**33**Star][16d] [Py] [kevcui/mitm-scripts](https://github.com/kevcui/mitm-scripts)
- [**33**Star][2y] [PHP] [karek314/ddos-deflate-nginx-cloudflare](https://github.com/karek314/ddos-deflate-nginx-cloudflare) This is ddos-deflate version made to mitigate Layer 7 dos/ddos attacks - made to work with nginx and optionally cloudflare
- [**33**Star][2m] [Py] [kaorz/exploits_challenges](https://github.com/kaorz/exploits_challenges) Challenges and vulnerabilities exploitation.
+- [**33**Star][2y] [Py] [kandru/ts3proxy](https://github.com/kandru/ts3proxy) Teamspeak 3 Server Proxy
- [**33**Star][5y] [Py] [jonmetz/androfuzz](https://github.com/jonmetz/androfuzz) A fuzzing utility for Android that focuses on reporting and delivery portions of the fuzzing process
- [**33**Star][6y] [JS] [joeferner/node-gitgui](https://github.com/joeferner/node-gitgui) Git GUI written in node.js
+- [**33**Star][2y] [Py] [jipegit/fect](https://github.com/jipegit/fect) Fast Evidence Collector Toolkit is an incident response toolkit to collect evidences on a suspicious windows computer
- [**33**Star][3y] [jianqiangzhao/mosec2016](https://github.com/jianqiangzhao/mosec2016)
- [**33**Star][2y] [Elixir] [jclem/ot_ex](https://github.com/jclem/ot_ex) OT algorithms for Elixir
- [**33**Star][3m] [Py] [jamesacampbell/python-examples](https://github.com/jamesacampbell/python-examples) Examples for some key libraries in Python that I use all the time. A way for me to remember and hopefully get others started.
-- [**33**Star][11m] [Objective-C] [jakeajames/reverse-engineering](https://github.com/jakeajames/reverse-engineering) nothing important
-- [**33**Star][3y] [Objective-C] [integrity-sa/introspy-ios](https://github.com/integrity-sa/introspy-ios) Security profiling for blackbox iOS
+- [**33**Star][12m] [ObjC] [jakeajames/reverse-engineering](https://github.com/jakeajames/reverse-engineering) nothing important
+- [**33**Star][2m] [JS] [iteratec/juicy-ctf](https://github.com/iteratec/juicy-ctf) Run Capture the Flags and Security Trainings with OWASP Juice Shop
+- [**33**Star][3y] [ObjC] [integrity-sa/introspy-ios](https://github.com/integrity-sa/introspy-ios) Security profiling for blackbox iOS
- [**33**Star][4m] [JS] [impakho/ciscn2019_final_web1](https://github.com/impakho/ciscn2019_final_web1) 国赛2019决赛Web1 - 滑稽云音乐
-- [**33**Star][12m] [Dockerfile] [immunit/cve-2018-11759](https://github.com/immunit/cve-2018-11759) Proof of concept showing how to exploit the CVE-2018-11759
+- [**33**Star][1y] [Dockerfile] [immunit/cve-2018-11759](https://github.com/immunit/cve-2018-11759) Proof of concept showing how to exploit the CVE-2018-11759
- [**33**Star][2y] [Py] [illusivenetworks-labs/webtrap](https://github.com/illusivenetworks-labs/webtrap) This project is designed to create deceptive webpages to deceive and redirect attackers away from real websites.
-- [**33**Star][5m] [Java] [idl3r/ghidravmlinuxloader](https://github.com/idl3r/ghidravmlinuxloader)
- [**33**Star][2y] [C] [realbearcat/cve-2017-16995](https://github.com/RealBearcat/CVE-2017-16995) Linux Kernel Version 4.14 - 4.4 (Ubuntu && Debian)
- [**33**Star][2y] [Java] [htbridge/pivaa](https://github.com/htbridge/pivaa) Created by High-Tech Bridge, the Purposefully Insecure and Vulnerable Android Application (PIVAA) replaces outdated DIVA for benchmark of mobile vulnerability scanners.
-- [**33**Star][1y] [Shell] [hestat/blazescan](https://github.com/hestat/blazescan) Blazescan is a linux webserver malware scanning and incident response tool, with built in support for cPanel servers, but will run on any linux based server.
- [**33**Star][5y] [Py] [heikoheiko/pyethapp](https://github.com/heikoheiko/pyethapp)
-- [**33**Star][7y] [Py] [hackedteam/test-av](https://github.com/hackedteam/test-av) Automated antivirus test environment
- [**33**Star][2y] [Py] [guedou/r2scapy](https://github.com/guedou/r2scapy) a radare2 plugin that decodes packets with Scapy
- [**33**Star][3y] [PHP] [gregzem/aibolit](https://github.com/gregzem/aibolit) Free malware and virus scanner for websites and ISP
- [**33**Star][1y] [Java] [graxcode/zelixkiller](https://github.com/graxcode/zelixkiller) Deobfuscate ZKM up to version 11
-- [**33**Star][4y] [Py] [gioyik/getexploit](https://github.com/gioyik/getexploit)
- [**33**Star][2y] [Py] [ganapati/firmflaws](https://github.com/ganapati/firmflaws) Firmware analysis website + API
-- [**33**Star][1y] [PowerShell] [g4lb1t/invoke-noshell](https://github.com/g4lb1t/invoke-noshell) All the Power with no Shell
+- [**33**Star][1y] [PS] [g4lb1t/invoke-noshell](https://github.com/g4lb1t/invoke-noshell) All the Power with no Shell
- [**33**Star][3y] [Py] [g4hsean/binauthor](https://github.com/g4hsean/binauthor) an IDA pro plugin developped through research at concordia in the area of binary authorship identification
- [**33**Star][2y] [JS] [francodacosta/phmagick](https://github.com/francodacosta/phmagick) image manipulation with php and imagemagick
- [**33**Star][1y] [Py] [fnk0c/organon](https://github.com/fnk0c/organon) This program focuses on automating the download, installation and compilation of pentest tools from source
- [**33**Star][6m] [flyfishsec/rsgen](https://github.com/flyfishsec/rsgen) An Universal Reverse Shell Command Genrator.
- [**33**Star][3y] [Py] [fkie-cad/iva](https://github.com/fkie-cad/iva) IVA is a system to scan for known vulnerabilities in software products installed inside an organization. IVA uses CPE identifiers to search for CVEs related to a software product.
- [**33**Star][8y] [Shell] [firebitsbr/hardeningone](https://github.com/firebitsbr/hardeningone) Scripts-Scanner de hardening de SO (Linux, OpenBSD, FreeBSD, apache, PHP e outros)
-- [**33**Star][1y] [C++] [fdiskyou/dbi](https://github.com/fdiskyou/dbi) Files for
- [**33**Star][9y] [Py] [evilsocket/altair](https://github.com/evilsocket/altair) A Modular Web Vulnerability Scanner
- [**33**Star][12m] [Py] [eset/volatility-browserhooks](https://github.com/eset/volatility-browserhooks) Volatility Framework plugin to detect various types of hooks as performed by banking Trojans
-- [**33**Star][11d] [F#] [enkomio/misc](https://github.com/enkomio/misc) A repository with simple projects created for testing/learning purpose
+- [**33**Star][13d] [F#] [enkomio/misc](https://github.com/enkomio/misc) A repository with simple projects created for testing/learning purpose
+- [**33**Star][3y] [Go] [egebalci/the-eye](https://github.com/egebalci/the-eye) Simple security surveillance script for linux distributions.
- [**33**Star][1m] [C++] [dspinellis/cqmetrics](https://github.com/dspinellis/cqmetrics) C Quality Metrics
- [**33**Star][1y] [Java] [dnet/burp-oauth](https://github.com/dnet/burp-oauth) OAuth plugin for Burp Suite Extender
-- [**33**Star][2m] [Py] [dmaasland/mcfridafee](https://github.com/dmaasland/mcfridafee)
- [**33**Star][3y] [Shell] [dlshad/openvpn-shapeshifter](https://github.com/dlshad/openvpn-shapeshifter) This script will automatically guide you to install and configure your OpenVPN server with Shapeshifter Dispatcher (obfuscation) which will allow you to bypass the DPI blockage on OpenVPN. This setup will offer the users the freedom to choose between regular OpenVPN connection or obfuscated one, they actually can use both! OpenVPN is the VPN pro…
- [**33**Star][2y] [Py] [disruptops/resource-counter](https://github.com/disruptops/resource-counter) This command line tool counts the number of resources in different categories across Amazon regions.
- [**33**Star][3m] [dfw1n/dfw1n-osint](https://github.com/dfw1n/dfw1n-osint) Australian Open Source Intelligence Gathering Resources, Australias Largest Open Source Intelligence Repository for Cyber Professionals and Ethical Hackers
@@ -14158,139 +15158,147 @@ networking routines
- [**33**Star][3y] [Py] [cys3c/backdoorman](https://github.com/cys3c/backdoorman) BackdoorMan is a toolkit that helps you find malicious, hidden and suspicious PHP scripts and shells in a chosen destination.
- [**33**Star][3y] [Py] [cr4sh/aptiocalypsis](https://github.com/cr4sh/aptiocalypsis) Arbitrary SMM code execution exploit for AMI Aptio based firmware
- [**33**Star][2y] [C++] [cnrig/cnrig](https://github.com/cnrig/cnrig) Static CryptoNight CPU miner for Linux + automatic updates
-- [**33**Star][9d] [PHP] [cms-garden/cmsscanner](https://github.com/cms-garden/cmsscanner) Detects FOSS CMS in the local filesystem
+- [**33**Star][11d] [PHP] [cms-garden/cmsscanner](https://github.com/cms-garden/cmsscanner) Detects FOSS CMS in the local filesystem
- [**33**Star][2m] [C++] [chinatiny/gameanticheat](https://github.com/chinatiny/gameanticheat) 反外挂
- [**33**Star][3y] [cert-w/hadoop-attack-library](https://github.com/cert-w/hadoop-attack-library) A collection of pentest tools and resources targeting Hadoop environments
- [**33**Star][2y] [cazala/coin-hive-proxy](https://github.com/cazala/coin-hive-proxy) Deprecated. Use CoinHive Stratum instead.
+- [**33**Star][25d] [C++] [bareflank/standalone_cxx](https://github.com/bareflank/standalone_cxx) run C++ from anywhere
- [**33**Star][3y] [Shell] [b3rito/trolo](https://github.com/b3rito/trolo) trolo - an easy to use script for generating Payloads that bypasses antivirus
- [**33**Star][11m] [avery3r/re-writeups](https://github.com/avery3r/re-writeups) Writeups for my reverse engineering shanenagins
- [**33**Star][6y] [Py] [averagesecurityguy/twanalyze](https://github.com/averagesecurityguy/twanalyze) Extract useful information from a Twitter account.
-- [**33**Star][11m] [CSS] [appsecco/practical-recon-levelup0x02](https://github.com/appsecco/practical-recon-levelup0x02) This repository contains all the material from the talk "Practical recon techniques for bug hunters & pentesters" given at Bugcrowd LevelUp 0x02 virtual conference
+- [**33**Star][2y] [C#] [arunsatyarth/oneminer](https://github.com/arunsatyarth/oneminer) 1 Click miner for Ethereum, ZCash etc on windows. Supports mixed GPUs(Nvidia & AMD)
- [**33**Star][2y] [Py] [antriv/transfer_learning_text](https://github.com/antriv/transfer_learning_text)
- [**33**Star][3y] [C++] [anssi-fr/nogaxeh](https://github.com/anssi-fr/nogaxeh) Tools for analyzing hexagon code
-- [**33**Star][1m] [Py] [akiym/pedal](https://github.com/akiym/pedal) PEDAL - Python Exploit Development Assistance for GDB Lite
+- [**33**Star][6m] [C#] [amitwaisel/malproxy](https://github.com/amitwaisel/malproxy) Proxy system calls over an RPC channel
+- [**33**Star][2m] [Py] [akiym/pedal](https://github.com/akiym/pedal) PEDAL - Python Exploit Development Assistance for GDB Lite
+- [**33**Star][2d] [adilmajid/privacy-for-the-paranoid](https://github.com/adilmajid/privacy-for-the-paranoid) A master checklist for securing your online life.
- [**33**Star][4m] [C] [aa65535/chinadns](https://github.com/aa65535/chinadns) Protect yourself against DNS poisoning in China.
- [**33**Star][2y] [Batchfile] [3gstudent/winpcap_install](https://github.com/3gstudent/winpcap_install) Auto install WinPcap on Windows(command line)
- [**33**Star][4y] [C#] [3gstudent/smallp0wnedshell](https://github.com/3gstudent/smallp0wnedshell) Small modification version of p0wnedShell
- [**33**Star][2y] [16667/metasploitable-3-ctf](https://github.com/16667/metasploitable-3-ctf) Metasploitable3 CTF Write-up
- [**33**Star][2y] [Rust] [0xcpu/bonomen](https://github.com/0xcpu/bonomen) BONOMEN - Hunt for Malware Critical Process Impersonation
-- [**32**Star][2m] [Py] [landgrey/toolsparty](https://github.com/landgrey/toolsparty) A collection of script tools for pentesting
+- [**32**Star][3y] [archimboldimao/surgeconfig](https://github.com/archimboldimao/surgeconfig) 这是我日常使用 Surge 配置 Shadowsocks 代理翻墙的文件。
+- [**32**Star][2y] [Go] [pbnj/s3-fuzzer](https://github.com/pbnj/s3-fuzzer)
+- [**32**Star][] [Py] [adrianherrera/afl-mutation-chain](https://github.com/adrianherrera/afl-mutation-chain) Recover mutation chain from an AFL seed
+- [**32**Star][10m] [Go] [bigtan/cow](https://github.com/bigtan/cow) Rule based proxy utility client
- [**32**Star][2y] [dxa4481/cors](https://github.com/dxa4481/cors) JSON API's Are Automatically Protected Against CSRF, And Google Almost Took It Away.
+- [**32**Star][2y] [C++] [paranoidninja/botnet-blogpost](https://github.com/paranoidninja/botnet-blogpost) This repo basically contains the code that was mentioned in the blogposts that was written by me at:
- [**32**Star][2y] [sagishahar-zz/challenges](https://github.com/sagishahar-zz/challenges) Hacking challenges
- [**32**Star][4y] [C] [a0rtega/bdldr](https://github.com/a0rtega/bdldr) bdldr is an unofficial engine loader for Bitdefender ® for Linux
- [**32**Star][8m] [Shell] [ytisf/randomgoodness](https://github.com/ytisf/randomgoodness) General tools and scripts i want to make public to the world.
-- [**32**Star][1y] [JS] [threatexpress/portplow](https://github.com/threatexpress/portplow) PortPlow is a distributed port and system scanning & enumeration service. It enables the quick and automated enumeration of ports and services from multiple systems managed by a central console.
+- [**32**Star][10m] [PHP] [thekingofduck/bypassavaddusers](https://github.com/thekingofduck/bypassavaddusers) 绕过杀毒软件添加用户
- [**32**Star][2y] [Shell] [paranoidninja/threat-hunting](https://github.com/paranoidninja/threat-hunting) This repo is dedicated to all my tricks, tweaks and modules for testing and hunting threats. This repo contains multiple directories which are in their own, different modules required for threat hunting. This repo will be updated as and when new changes are made.
- [**32**Star][4y] [Py] [wi-fi-analyzer/3viltwinattacker](https://github.com/wi-fi-analyzer/3viltwinattacker)
-- [**32**Star][19d] [Jupyter Notebook] [vrthra/f1](https://github.com/vrthra/f1)
-- [**32**Star][10m] [Java] [alexatiks/spring-security-jwt-csrf](https://github.com/alexatiks/spring-security-jwt-csrf) A demonstration of stateless JWT authentication with Spring Security, Spring Boot and Vue js
+- [**32**Star][12m] [Py] [ekultek/tadpole](https://github.com/ekultek/tadpole) Download files out of open AWS buckets
+- [**32**Star][2d] [Shell] [ibm/cloud-pak](https://github.com/ibm/cloud-pak) IBM Cloud Paks are enterprise-grade containerized software by combining container images with enterprise capabilities for deployment in production use cases with integrations for management and lifecycle operations. Features such as pre-configured deployments based on product expertise, rolling upgrades, rollbacks, security/vulnerability testing…
+- [**32**Star][3y] [Go] [localtunnel/go-localtunnel](https://github.com/localtunnel/go-localtunnel) golang client library for localtunnel.me
+- [**32**Star][2m] [cloudsploit/security-remediation-guides](https://github.com/cloudsploit/security-remediation-guides) Security Remediation Guides
+- [**32**Star][5d] [Go] [sadicann/andor](https://github.com/sadicann/andor) Blind SQL Injection Tool with Golang
+- [**32**Star][24d] [Shell] [zerobyte-id/netass2](https://github.com/zerobyte-id/netass2) Network Assessment Assistance Framework (PenTest Toolkit).
- [**32**Star][10m] [hax4us/termux-x](https://github.com/hax4us/termux-x) it is unofficial repository maintained by me
+- [**32**Star][2m] [C] [kangtastic/cve-2019-2215](https://github.com/kangtastic/cve-2019-2215) Temproot for Pixel 2 and Pixel 2 XL via CVE-2019-2215
- [**32**Star][2m] [Shell] [da667/ciderpress](https://github.com/da667/ciderpress) Wordpress automation and hardening
-- [**32**Star][9d] [Py] [technowlogy-pushpender/technowhorse](https://github.com/technowlogy-pushpender/technowhorse) TechNowHorse is a RAT (Remote Administrator Trojan) Generator for Windows/Linux systems written in Python 3.
+- [**32**Star][1m] [C] [gdbinit/efi_dxe_emulator](https://github.com/gdbinit/efi_dxe_emulator) EFI DXE Emulator and Interactive Debugger
- [**32**Star][2m] [HTML] [egebalci/xss-flare](https://github.com/egebalci/xss-flare) XSS hunter on cloudflare serverless workers.
-- [**32**Star][9d] [Py] [3xploit-db/pentest-tools-framework](https://github.com/3xploit-db/pentest-tools-framework) Pentest Tools Framework is a database of exploits, Scanners and tools for penetration testing. Pentest is a powerful framework includes a lot of tools for beginners. You can explore kernel vulnerabilities, network vulnerabilities
- [**32**Star][6y] [sin5678/a-protect](https://github.com/sin5678/A-Protect) A-Protect Anti Rootkit Tool
+- [**32**Star][3y] [Pascal] [mwsrc/xtremerat](https://github.com/mwsrc/XtremeRAT) XtremeRAT SRC Extract
- [**32**Star][2y] [Py] [sewellding/sitepathscan](https://github.com/SewellDinG/SitePathScan) 网站路径扫描脚本
+- [**32**Star][8m] [JS] [cylance/nmap-cluster](https://github.com/cylance/NMAP-Cluster) Clustering NMAP XML results to help make sense of large scan results.
- [**32**Star][4y] [C++] [helpsystems/gdiobjdump](https://github.com/helpsystems/GDIObjDump)
- [**32**Star][5y] [Py] [coalfire-research/doozer](https://github.com/Coalfire-Research/Doozer) Password cracking utility
-- [**32**Star][4y] [Py] [fortynorthsecurity/hasher](https://github.com/FortyNorthSecurity/Hasher) Hasher is designed to be a tool that allows you to quickly hash plaintext strings, or compare hashed values with a plaintext locally. Not meant to crack passwords, but designed for local checks.
- [**32**Star][3m] [C++] [imugee/xdv](https://github.com/imugee/xdv) XDV is disassembler or debugger that works based on the extension plugin.
- [**32**Star][3m] [Shell] [blackgeneration/uncle-spufus](https://github.com/blackgeneration/uncle-spufus) A tool that automates MAC address and hostname spoofing
- [**32**Star][4y] [Ruby] [praetorian-code/ruby_hashcat](https://github.com/praetorian-code/ruby_hashcat) Command line wrapper, Library, and Rest API for oclHashcat.
- [**32**Star][1y] [Py] [dd4rk/ctfwebscan](https://github.com/dd4rk/ctfwebscan) CTF比赛中web源码泄露扫描
- [**32**Star][2y] [CMake] [zyantific/ida-cmake](https://github.com/zyantific/ida-cmake) IDA plugin CMake build-script
-- [**32**Star][2m] [Java] [zerokilo/n64loaderwv](https://github.com/zerokilo/n64loaderwv) Ghidra Loader Module for N64 ROMs
-- [**32**Star][5y] [Py] [xurubin/aurasium](https://github.com/xurubin/aurasium) Practical security policy enforcement for Android apps via bytecode rewriting and in-place reference monitor
+- [**32**Star][2y] [ObjC] [zjjno/interface-inspector-hook](https://github.com/zjjno/interface-inspector-hook) Interface Inspector破解
+- [**32**Star][3m] [Java] [zerokilo/n64loaderwv](https://github.com/zerokilo/n64loaderwv) Ghidra Loader Module for N64 ROMs
+- [**32**Star][8m] [C] [y123456yz/reading-and-comprehense-twemproxy0.4.1](https://github.com/y123456yz/reading-and-comprehense-twemproxy0.4.1) redis、memcached缓存代理twemproxy源码详细分析注释,带详尽中文注释及函数调用关系。(源码学习交流QQ群:568892619)
- [**32**Star][4y] [PHP] [wstart/webshell](https://github.com/wstart/webshell) This is a webshell open source project
-- [**32**Star][2y] [C] [weaknetlabs/byteforce](https://github.com/weaknetlabs/byteforce) Offline Digital Forensics Tool for Binary Files
- [**32**Star][2y] [vulnex/tintorera](https://github.com/vulnex/tintorera) Source Code Intelligence
- [**32**Star][4m] [vulnerscom/detect-rules](https://github.com/vulnerscom/detect-rules) Vulners signature-base software version detection rules
- [**32**Star][5y] [Shell] [vt-magnum-research/antimalware](https://github.com/vt-magnum-research/antimalware) Dynamic malware analysis for the Android platform
-- [**32**Star][9m] [Swift] [vixentael/ios-datasec-basics](https://github.com/vixentael/ios-datasec-basics) iOS data security basics: key management, workshop for iOS Con UK
- [**32**Star][5m] [C++] [vector35/generate_assembler](https://github.com/vector35/generate_assembler) generate assemblers from disassemblers, 2018 jailbreak security summit talk
-- [**32**Star][3m] [C++] [vanhauser-thc/afl-dyninst](https://github.com/vanhauser-thc/afl-dyninst) American Fuzzy Lop + Dyninst == AFL Fuzzing blackbox binaries
+- [**32**Star][5m] [vah13/oracle-bi-bugs](https://github.com/vah13/oracle-bi-bugs)
+- [**32**Star][10m] [twelvesec/bearerauthtoken](https://github.com/twelvesec/bearerauthtoken) This burpsuite extender provides a solution on testing Enterprise applications that involve security Authorization tokens into every HTTP requests.Furthermore, this solution provides a better approach to solve the problem of Burp suite automated scanning failures when Authorization tokens exist.
- [**32**Star][4y] [Py] [trustedsec/crackmapexec](https://github.com/trustedsec/crackmapexec) A swiss army knife for pentesting Windows/Active Directory environments
- [**32**Star][1y] [JS] [truework/lambda-s3-antivirus](https://github.com/truework/lambda-s3-antivirus) Lambda Function to scan incoming S3 uploads by Truework
- [**32**Star][7m] [Perl] [tripflex/cpsetup](https://github.com/tripflex/cpsetup) Intuitive bash/shell script to setup and harden/configure cPanel CentOS/RHEL server with ConfigServer Firewall, MailManage, MailQueue, Malware Detect, ClamAV, mod_cloudflare, CloudFlare RailGun, and many more applications and security tweaks
- [**32**Star][3y] [Go] [tomsteele/burpstaticscan](https://github.com/tomsteele/burpstaticscan) Use burp's JS static code analysis on code from your local system.
- [**32**Star][3y] [C] [tlgyt/dirtycowandroid](https://github.com/tlgyt/dirtycowandroid) Repo For Working on Dirty Cow Based Android Root Method
-- [**32**Star][7m] [C++] [tlgyt/absent-loader](https://github.com/tlgyt/absent-loader) Example Loader to be used as a learning resource for people interested in how commercially available malware is made.
+- [**32**Star][2m] [thetorproject/gettorbrowser](https://github.com/thetorproject/gettorbrowser) This is a repository to provide links for downloading Tor Browser from Github.
- [**32**Star][1y] [Ruby] [thesubtlety/shocens](https://github.com/thesubtlety/shocens) Query Shodan and Censys data for fast parsing
- [**32**Star][3y] [Py] [tengzhangchao/information](https://github.com/tengzhangchao/information) windows Server Information gathering tool (主机信息收集工具)
- [**32**Star][3y] [tdifg/payloads](https://github.com/tdifg/payloads) for burp
- [**32**Star][3m] [Py] [tangxiaofeng7/srcinformation-gathering](https://github.com/tangxiaofeng7/srcinformation-gathering) 挖掘SRC的信息收集
+- [**32**Star][3y] [Py] [syss-research/dns-mitm](https://github.com/syss-research/dns-mitm) A minimal DNS service that can provide spoofed replies
- [**32**Star][3y] [C++] [swwwolf/cbtest](https://github.com/swwwolf/cbtest) Windows kernel-mode callbacks tutorial driver
- [**32**Star][2y] [C] [srakai/adun](https://github.com/srakai/adun) A way to backdoor every process
- [**32**Star][2y] [Py] [spiperac/armroper](https://github.com/spiperac/armroper) ARM rop chain gadget searcher
- [**32**Star][2y] [C] [snorez/exploits](https://github.com/snorez/exploits) practice
- [**32**Star][2m] [Shell] [snawoot/linux-secureboot-kit](https://github.com/snawoot/linux-secureboot-kit) Tool for complete hardening of Linux boot chain with UEFI Secure Boot
- [**32**Star][2y] [Elixir] [smpallen99/coherence_demo](https://github.com/smpallen99/coherence_demo) A coherence demo project
-- [**32**Star][2y] [PHP] [sjord/jwtdemo](https://github.com/sjord/jwtdemo) Practice hacking JWT tokens
- [**32**Star][2y] [Py] [sigploiter/m3uascan](https://github.com/sigploiter/m3uascan) A Scanner for M3UA protocol to detect Sigtran supporting nodes
- [**32**Star][6m] [Py] [shouc/knicky](https://github.com/shouc/knicky) A module-based static virus generator
- [**32**Star][7y] [C] [sergiocampama/launchpad](https://github.com/sergiocampama/launchpad) Launchpad mini projects. Includes mspgcc installation instructions for Ubuntu
- [**32**Star][4y] [Py] [sekoialab/pe-tools](https://github.com/sekoialab/pe-tools) Set of python scripts to analyse PE32/PE64 binaries and to extract VB 5/6 headers and Visual Basic p-code functions.
- [**32**Star][1y] [Shell] [securityriskadvisors/redteamsiem](https://github.com/securityriskadvisors/redteamsiem) Repository of resources for configuring a Red Team SIEM using Elastic
- [**32**Star][3m] [C++] [saml1er/gta-reversed](https://github.com/saml1er/gta-reversed) Reversed code of GTA:SA executable (gta_sa.exe) 1.0 US
-- [**32**Star][9d] [Py] [saeeddhqan/maryam](https://github.com/saeeddhqan/maryam) Open-source Intelligence(OSINT) Framework
- [**32**Star][1y] [JS] [s03d4-164/hiryu](https://github.com/s03d4-164/hiryu) IOC Management and Visualization Tool
- [**32**Star][3y] [Py] [rurik/pe_carver](https://github.com/rurik/pe_carver) Carves EXEs from given data files, using intelligent carving based upon PE headers
- [**32**Star][2y] [Py] [rurik/java_idx_parser](https://github.com/rurik/java_idx_parser) Parses Java Cache IDX files
- [**32**Star][2y] [Py] [rudsarkar/crlf-injector](https://github.com/rudsarkar/crlf-injector) A CRLF ( Carriage Return Line Feed ) Injection attack occurs when a user manages to submit a CRLF into an application. This is most commonly done by modifying an HTTP parameter or URL.
-- [**32**Star][6y] [PowerShell] [roo7break/powershell-scripts](https://github.com/roo7break/powershell-scripts) List of PowerShell scripts conjured up for my consumption (you are welcome to use)
-- [**32**Star][2m] [JS] [ronomon/mime](https://github.com/ronomon/mime) Fast, robust, standards-compliant MIME decoder. Ships with extensive tests and fuzz tests.
-- [**32**Star][6m] [Shell] [robertohuertasm/apk-decompiler](https://github.com/robertohuertasm/apk-decompiler) Small Rust utility to decompile Android apks
+- [**32**Star][6y] [PS] [roo7break/powershell-scripts](https://github.com/roo7break/powershell-scripts) List of PowerShell scripts conjured up for my consumption (you are welcome to use)
+- [**32**Star][3m] [JS] [ronomon/mime](https://github.com/ronomon/mime) Fast, robust, standards-compliant MIME decoder. Ships with extensive tests and fuzz tests.
+- [**32**Star][1y] [robocyber/shodan-dorks](https://github.com/robocyber/shodan-dorks) Dorks for shodan.io. Some basic shodan dorks collected from publicly available data.
- [**32**Star][2m] [Java] [righettod/log-requests-to-sqlite](https://github.com/righettod/log-requests-to-sqlite) BURP extension to record every HTTP request send via BURP and create an audit trail log of an assessment.
-- [**32**Star][18d] [C] [rems-project/sail-arm](https://github.com/rems-project/sail-arm) Sail version of ARM ISA definition, currently for ARMv8.5-A
+- [**32**Star][2y] [Py] [redteam-cyberark/google-domain-fronting](https://github.com/redteam-cyberark/google-domain-fronting) Domain fronting using Google app engine
- [**32**Star][4y] [PHP] [realtimeprojects/quixplorer](https://github.com/realtimeprojects/quixplorer) simply upload and download files to your webserver with a web-interface
- [**32**Star][10m] [C] [rakion99/icememe](https://github.com/rakion99/icememe) Roblox Exploit Source Code Called IceMeme with some cmds, lua c and limited lua execution with simple ui in c#
- [**32**Star][4m] [C++] [rafaelgss/hyzmall](https://github.com/rafaelgss/hyzmall)
- [**32**Star][4y] [Py] [raccoons-team/ctf](https://github.com/raccoons-team/ctf) Writeups for CTF competitions.
+- [**32**Star][11m] [Py] [qwj/python-esp](https://github.com/qwj/python-esp) IPSec IKE(v1,v2) PSK VPN implemented in pure Python. (For Research Purposes Only)
+- [**32**Star][3d] [Ruby] [puppetlabs/puppetlabs-java_ks](https://github.com/puppetlabs/puppetlabs-java_ks) Uses a combination of keytool and openssl to manage entries in a Java keystore
- [**32**Star][4y] [Py] [psmiraglia/ctf](https://github.com/psmiraglia/ctf) My solutions of CTFs
- [**32**Star][1y] [Py] [phdphuc/mac-a-mal-cuckoo](https://github.com/phdphuc/mac-a-mal-cuckoo) extends the open-source Cuckoo Sandbox (legacy) with functionality for analyzing macOS malware in macOS guest VM(s).
- [**32**Star][2y] [Go] [pbnj/s3-fuzzer](https://github.com/pbnj/s3-fuzzer) A concurrent, command-line AWS S3 Fuzzer.
- [**32**Star][1y] [C] [perceptionpoint/suprotect](https://github.com/perceptionpoint/suprotect) Changing memory protection in an arbitrary process
- [**32**Star][2m] [Py] [pagalaxylab/ghidra_scripts](https://github.com/pagalaxylab/ghidra_scripts) Scripts for the Ghidra.
- [**32**Star][10m] [Swift] [pabloroca/obfuscateapi](https://github.com/pabloroca/obfuscateapi) Mac OSX, Command line Swift 4 Utility for obfuscate / defuscate strings (API endpoints) in AES128 format.
-- [**32**Star][11m] [C] [p3n3troot0r/socketv2v](https://github.com/p3n3troot0r/socketv2v) Mainline Linux Kernel integration of IEEE 802.11p, IEEE 1609.{3,4}, and developmental userspace utility for using J2735 over WAVE
- [**32**Star][10m] [Py] [oshp/headers](https://github.com/oshp/headers) An application to catch, search and analyze HTTP secure headers.
-- [**32**Star][1y] [Py] [oros42/dns_sniffer](https://github.com/oros42/dns_sniffer) A python DNS sniffer
+- [**32**Star][5m] [oldbonhart/osint-resources](https://github.com/oldbonhart/osint-resources) Data collected from publicly available sources to be used in an intelligence context
- [**32**Star][2m] [Py] [oalieno/ctf](https://github.com/oalieno/ctf) CTF writeups
- [**32**Star][4m] [HTML] [o0xmuhe/realworldpwn](https://github.com/o0xmuhe/realworldpwn) vulns I found or I collect
- [**32**Star][7m] [Shell] [nyxgeek/nyxgeek-rules](https://github.com/nyxgeek/nyxgeek-rules) Custom rules for Hashcat and John the Ripper
- [**32**Star][1y] [C++] [ntraiseharderror/dreadnought](https://github.com/ntraiseharderror/dreadnought) PoC for detecting and dumping code injection (built and extended on UnRunPE)
- [**32**Star][2y] [JS] [notdls/hackbar](https://github.com/notdls/hackbar) HackBar Quantum is a sidebar that assists you with web application security testing, it's aim is to help make those tedious tasks a little bit easier. This add-on is a predecessor to the original HackBar that is not compatible with Firefox Quantum.
-- [**32**Star][1y] [Jupyter Notebook] [nfrumkin/forecast-prometheus](https://github.com/nfrumkin/forecast-prometheus) A collection of analysis, and machine learning techniques for time series forecasting w/ Prometheus metrics
- [**32**Star][6y] [netspi/skl](https://github.com/netspi/skl) strace keylogger PoC
- [**32**Star][3y] [Go] [mwitkow/go-http-dialer](https://github.com/mwitkow/go-http-dialer) Go net.Dialer for HTTP(S) CONNECT Tunneling.
- [**32**Star][2y] [HTML] [mthbernardes/leakmanager](https://github.com/mthbernardes/leakmanager) A tool to help you manage your leaks
- [**32**Star][2y] [Shell] [mseclab/ahe17](https://github.com/mseclab/ahe17) Android Hacking Event 2017 Write-up
-- [**32**Star][7d] [Go] [mondoolabs/mondoo](https://github.com/mondoolabs/mondoo) Mondoo Cloud-Native Security & Vulnerability Risk Management
+- [**32**Star][9d] [Go] [mondoolabs/mondoo](https://github.com/mondoolabs/mondoo) Mondoo Cloud-Native Security & Vulnerability Risk Management
+- [**32**Star][27d] [Shell] [mirchr/security-research](https://github.com/mirchr/security-research) Security Research
- [**32**Star][1y] [Py] [mimoo/rsa_pkcs1v1_5_attacks](https://github.com/mimoo/rsa_pkcs1v1_5_attacks) Implementation of Bleichenbacher, Manger and Ben-Or attacks on RSA PKCS#1 v1.5
-- [**32**Star][2y] [C#] [mili-tan/mv2rayconfig](https://github.com/mili-tan/mv2rayconfig)
- [**32**Star][5m] [Py] [mikemeliz/torcrawl.py](https://github.com/mikemeliz/torcrawl.py) Crawl and extract (regular or onion) webpages through TOR network
- [**32**Star][1y] [mhaggis/sysmon-splunk-app](https://github.com/mhaggis/sysmon-splunk-app) Sysmon Splunk App
- [**32**Star][2y] [Py] [mgale/dhcpsnoop](https://github.com/mgale/dhcpsnoop) DHCP Snooping app - great for finding rogue DHCP servers
- [**32**Star][3y] [C] [mehdilauters/esp8266-wifiscanmap](https://github.com/mehdilauters/esp8266-wifiscanmap)
- [**32**Star][3y] [Py] [mdegrazia/osx-quicklook-parser](https://github.com/mdegrazia/osx-quicklook-parser) Parse the Mac Quickook index.sqlite database
-- [**32**Star][8m] [C] [mboehme/pythia](https://github.com/mboehme/pythia) Pythia (extends AFL with Predictions)
- [**32**Star][8m] [Py] [maxkrivich/slowloris](https://github.com/maxkrivich/slowloris) Small and simple tool for testing Slow Loris vulnerability
-- [**32**Star][9m] [Py] [mattbierner/urban-dictionary-word-list](https://github.com/mattbierner/urban-dictionary-word-list) Script and sample dataset of all urban dictionary entry names (around 1.4 million total)
-- [**32**Star][4y] [Py] [mansosec/microsoft-malware-challenge](https://github.com/mansosec/microsoft-malware-challenge)
-- [**32**Star][5m] [Jupyter Notebook] [malware-revealer/malware-revealer](https://github.com/malware-revealer/malware-revealer) Spot malwares using Machine Learning techniques
- [**32**Star][5y] [Java] [malerisch/burp-csj](https://github.com/malerisch/burp-csj) BurpCSJ extension for Burp Pro - Crawljax Selenium JUnit integration
- [**32**Star][1y] [lylemi/dom-vuln-db](https://github.com/lylemi/dom-vuln-db) A collection of Browser DOM Vulnerabilities with PoCs
-- [**32**Star][1y] [Objective-C] [lycajb/lycajb](https://github.com/lycajb/lycajb) LycaJB is a project that aims to fill the gap in iOS 11.0 - 11.3.1 jailbreaks. While this jailbreak is specifically aimed at developers it could be turned into a public stable jailbreak which includes Cydia. Right now we had to make the hard decision to remove Cydia from LycaJB as it caused our test devices to bootloop. We are working hard to ma…
+- [**32**Star][1y] [ObjC] [lycajb/lycajb](https://github.com/lycajb/lycajb) LycaJB is a project that aims to fill the gap in iOS 11.0 - 11.3.1 jailbreaks. While this jailbreak is specifically aimed at developers it could be turned into a public stable jailbreak which includes Cydia. Right now we had to make the hard decision to remove Cydia from LycaJB as it caused our test devices to bootloop. We are working hard to ma…
- [**32**Star][5y] [Perl] [linvex/mitm-squid](https://github.com/linvex/mitm-squid) sharing some files of MITM-squid attack.
- [**32**Star][11m] [Assembly] [linuxthor/uul](https://github.com/linuxthor/uul) ELF binary that runs on several different *nix flavours. Works out which variant it's being run on and runs code specific to that.
- [**32**Star][2y] [PHP] [leebaird/assessment-manager](https://github.com/leebaird/assessment-manager) Manage all logistical information for a pentest including clients, contacts, employees, findings, projects, scoping, and vulnerabilities.
+- [**32**Star][6d] [C++] [kuqadk3/ctf-and-learning](https://github.com/kuqadk3/ctf-and-learning)
- [**32**Star][2y] [Py] [krystalgamer/dec2struct](https://github.com/krystalgamer/dec2struct) Python plugin to easily setup vtables in IDA using declaration files
- [**32**Star][2y] [knoobdev/bypass-facebook-ssl-pinning](https://github.com/knoobdev/bypass-facebook-ssl-pinning) Bypassing ssl pinning for facebook android app
-- [**32**Star][14d] [Py] [kevcui/mitm-scripts](https://github.com/kevcui/mitm-scripts)
+- [**32**Star][3m] [Py] [kang-newbie/s-mbf](https://github.com/kang-newbie/s-mbf) Simple Multi BruteForce by KANG-NEWBIE
+- [**32**Star][3y] [Shell] [jriguera/coreos-usb-creator](https://github.com/jriguera/coreos-usb-creator) Coreos live image builder with cloud-config on FAT32 to easily create POC
- [**32**Star][1y] [C] [jp-bennett/fwknop2](https://github.com/jp-bennett/fwknop2) A replacement fwknop client for android.
- [**32**Star][8y] [Py] [jonoberheide/kstructhunter](https://github.com/jonoberheide/kstructhunter) Routines for hunting down kernel structs.
- [**32**Star][3y] [Py] [jkkj93/mint-webshell-defender](https://github.com/jkkj93/mint-webshell-defender)
-- [**32**Star][2y] [Py] [jipegit/fect](https://github.com/jipegit/fect) Fast Evidence Collector Toolkit is an incident response toolkit to collect evidences on a suspicious windows computer
- [**32**Star][5y] [jgor/php-jpeg-shell](https://github.com/jgor/php-jpeg-shell) Simple PHP webshell with a JPEG header to bypass weak image verification checks
- [**32**Star][5y] [Ruby] [jduck/addjsif](https://github.com/jduck/addjsif) Metasploit Exploit Module for the Android addJavascriptInterface Issue (MITM)
- [**32**Star][6m] [C] [jcsaezal/pmctrack](https://github.com/jcsaezal/pmctrack) an OS-oriented performance monitoring tool for Linux (
@@ -14298,121 +15306,138 @@ networking routines
- [**32**Star][11m] [C++] [jacksonvd/pwnedpasswordsdll-api](https://github.com/jacksonvd/pwnedpasswordsdll-api) Open source solution to check prospective AD passwords against previously breached passwords
- [**32**Star][7y] [Py] [isecpartners/fuzzbox](https://github.com/isecpartners/fuzzbox) A multi-codec media fuzzing tool.
- [**32**Star][5y] [Py] [iphelix/ida-pomidor](https://github.com/iphelix/ida-pomidor) a productivity plugin for Hex-Ray's IDA Pro disassembler.
+- [**32**Star][6y] [C++] [igh0st/crypters](https://github.com/igh0st/crypters) Various Crypter Project
- [**32**Star][5m] [Py] [idhyt/jeb-keygen](https://github.com/idhyt/jeb-keygen) JEB install env
- [**32**Star][4y] [C++] [icestudent/ontl](https://github.com/icestudent/ontl) A set of tiny C++ RAII wrappers for NT Native/Win32 APIs including its own C++0x Standard Library (formerly STL) implementation.
- [**32**Star][2y] [Java] [realbearcat/cve-2017-12615](https://github.com/RealBearcat/CVE-2017-12615) Tomcat 远程代码执行漏洞 Exploit
- [**32**Star][4y] [Py] [holloway/docvert-python3](https://github.com/holloway/docvert-python3) Docvert for Python3: Converts Office files to DocBook and clean HTML, diagrams to SVG/PNG, etc.
- [**32**Star][3y] [Py] [harryr/maltrieve](https://github.com/harryr/maltrieve) A tool to retrieve malware directly from the source for security researchers.
- [**32**Star][9m] [C#] [graykernel/graystorm](https://github.com/graykernel/graystorm) In memory attack platform for C# Applications
+- [**32**Star][3m] [C#] [globalpolicy/csarp-netcut](https://github.com/globalpolicy/csarp-netcut) An arpspoof program using Sharppcap
- [**32**Star][2y] [C] [freener/exploits](https://github.com/freener/exploits)
- [**32**Star][5y] [Java] [forprevious/attack-analysis](https://github.com/forprevious/attack-analysis) just for attack、Vulnerability,my study and research
- [**32**Star][9y] [C] [falk3n/subversive](https://github.com/falk3n/subversive) x86_64 linux rootkit using debug registers
+- [**32**Star][24d] [C++] [f18m/large-pcap-analyzer](https://github.com/f18m/large-pcap-analyzer) A command-line utility program that performs some simple operations on PCAP files (Wireshark/tcpdump traces) very quickly. Allows you to manipulate very large PCAP files that cannot be easily handled with other software like Wireshark (or tshark). Supports filtering encapsulated GTPu frames. Easily extendible.
- [**32**Star][2y] [Py] [eurecom-s3/linux_screenshot_xwindows](https://github.com/eurecom-s3/linux_screenshot_xwindows) Volatility插件, 从内存dump中提取Windows截屏
-- [**32**Star][3y] [Go] [egebalci/the-eye](https://github.com/egebalci/the-eye) Simple security surveillance script for linux distributions.
+- [**32**Star][7d] [edoverflow/legal-bug-bounty](https://github.com/edoverflow/legal-bug-bounty) #legalbugbounty project — creating safe harbors on bug bounty programs and vulnerability disclosure programs. Authored by Amit Elazari.
- [**32**Star][3y] [C++] [ecologylab/ecotuiodriver](https://github.com/ecologylab/ecotuiodriver) Diver to convert tuio touch events into windows touch events. Started as GSoC 2012 project.
- [**32**Star][2y] [dweinstein/dockerfile-androguard](https://github.com/dweinstein/dockerfile-androguard) docker file for use with androguard python android app analysis tool
- [**32**Star][5y] [Shell] [duoduo369/oh-my-shadowsocks](https://github.com/duoduo369/oh-my-shadowsocks) shadowsocks config on server, supervisor support
- [**32**Star][1y] [C] [dlrobertson/sylkie](https://github.com/dlrobertson/sylkie) sylkie:利用 NeighborDiscovery Protocol 实现的 IPv6 地址欺骗工具
- [**32**Star][2m] [JS] [digitalinterruption/vulnerable-xss-app](https://github.com/digitalinterruption/vulnerable-xss-app)
- [**32**Star][2y] [JS] [dg92/fractal-tree](https://github.com/dg92/fractal-tree) Fractal tree
+- [**32**Star][7y] [Py] [derv82/werdy](https://github.com/derv82/werdy) A set of Python scripts for generating, parsing, sorting, and saving wordlists.
- [**32**Star][2y] [Shell] [deepwn/gitpagehijack](https://github.com/deepwn/gitpagehijack) OK now. Let's hijack github user's custom domain.
- [**32**Star][1y] [C] [deadnumbers/pegasus](https://github.com/deadnumbers/pegasus) Carbanak leaked source
- [**32**Star][2y] [HTML] [ddvkid/ng-treetable](https://github.com/ddvkid/ng-treetable) A treetable module for angular 5
+- [**32**Star][1y] [TeX] [danpage/mascab](https://github.com/danpage/mascab) MASCAB: a Micro-Architectural Side-Channel Attack Bibliography
+- [**32**Star][4y] [Py] [csababarta/volatility_plugins](https://github.com/csababarta/volatility_plugins) Volatility plugins created by the author
+- [**32**Star][3m] [C++] [creaink/ucom](https://github.com/creaink/ucom) A simple Serial-Port/TCP/UDP debugging tool.
- [**32**Star][6y] [Py] [coldheat/quicksec](https://github.com/coldheat/quicksec) IDAPython script for quick vulnerability analysis
- [**32**Star][1m] [Py] [codingo/ransomware-json-dataset](https://github.com/codingo/ransomware-json-dataset) Compiles a json dataset using public sources that contains properties to aid in the detection and mitigation of over 1000 variants of ransomware.
-- [**32**Star][11m] [TypeScript] [xfoxfu/clover](https://github.com/xfoxfu/clover) Shadowsocks and v2ray User Interface
-- [**32**Star][1m] [Py] [cloudflare/salt-cloudflare](https://github.com/cloudflare/salt-cloudflare) Cloudflare salt module allows you to manage zones on Cloudflare from salt.
+- [**32**Star][11m] [TS] [xfoxfu/clover](https://github.com/xfoxfu/clover) Shadowsocks and v2ray User Interface
+- [**32**Star][4d] [Py] [cloudflare/salt-cloudflare](https://github.com/cloudflare/salt-cloudflare) Cloudflare salt module allows you to manage zones on Cloudflare from salt.
- [**32**Star][2y] [Py] [citp/email_tracking](https://github.com/citp/email_tracking) Code and data release for our PETS 2018 paper: "I never signed up for this! Privacy implications of email tracking".
- [**32**Star][2y] [C#] [cfwprpht/free-ps2-pub-gen](https://github.com/cfwprpht/free-ps2-pub-gen) Automated Tool for flatz PS4- PS2 Emu PKG Technic.
- [**32**Star][3y] [Py] [certsocietegenerale/abuse_finder](https://github.com/certsocietegenerale/abuse_finder) Find abuse contacts for observables
-- [**32**Star][2m] [Py] [carlospolop/legion](https://github.com/carlospolop/legion) Automatic Enumeration Tool based in Open Source tools
+- [**32**Star][1y] [Go] [boxproject/voucher](https://github.com/boxproject/voucher) Enterprise-grade security solution for digital assets custody, using a cryptographically secure offline network.
- [**32**Star][2m] [YARA] [blacktop/docker-yara](https://github.com/blacktop/docker-yara) docker-yara:YaraDockerfile
+- [**32**Star][5m] [C++] [blackint3/none](https://github.com/blackint3/none) UNONE and KNONE is a couple of open source base library that makes it easy to develop software on Windows.
- [**32**Star][6m] [Py] [bishopfox/idontspeakssl](https://github.com/bishopfox/idontspeakssl) simple script to parse testssl.sh results
- [**32**Star][3y] [Py] [binarlyhq/binarly-query](https://github.com/binarlyhq/binarly-query) Command-line Interface for Binar.ly
- [**32**Star][2y] [applebetas/mterminal-jailed](https://github.com/applebetas/mterminal-jailed) An iOS 11 compatible fork of MTerminal using Ian Beer's tfp0 exploit
+- [**32**Star][5m] [angelkitty/ida7.0](https://github.com/angelkitty/ida7.0)
- [**32**Star][1y] [Py] [andreafortuna/autotimeliner](https://github.com/andreafortuna/autotimeliner) 自动从volatile内存转储中提取取证时间线
-- [**32**Star][6m] [C#] [amitwaisel/malproxy](https://github.com/amitwaisel/malproxy) Proxy system calls over an RPC channel
-- [**32**Star][9d] [Py] [aliasrobotics/rvd](https://github.com/aliasrobotics/rvd) Robot Vulnerability Database. An archive of robot vulnerabilities and bugs.
+- [**32**Star][3m] [Py] [amossys/fragscapy](https://github.com/amossys/fragscapy) Fragscapy is a command-line tool to fuzz network protocols by automating the modification of outgoing network packets. It can run multiple successive tests to determine which options can be used to evade firewalls and IDS.
- [**32**Star][1y] [C] [alex9191/kernelmodemonitor](https://github.com/alex9191/kernelmodemonitor) Kernel-Mode driver and User-Mode application communication project
+- [**32**Star][3d] [Py] [adguardteam/adguardsdnsfilter](https://github.com/adguardteam/adguardsdnsfilter) AdGuard Simplified Domain names filter
- [**32**Star][5y] [JS] [acama/webkitties](https://github.com/acama/webkitties) PS Vita Webkit Exploit / Mini SDK and Testing Framework
- [**32**Star][4y] [C++] [5loyd/makecode](https://github.com/5loyd/makecode) Dll Convert to Shellcode.
- [**32**Star][11m] [Jupyter Notebook] [404notf0und/ai-for-security-testing](https://github.com/404notf0und/ai-for-security-testing) My AI security testing projects
-- [**32**Star][2y] [PowerShell] [3gstudent/office-persistence](https://github.com/3gstudent/office-persistence) Use powershell to test Office-based persistence methods
+- [**32**Star][2y] [PS] [3gstudent/office-persistence](https://github.com/3gstudent/office-persistence) Use powershell to test Office-based persistence methods
- [**32**Star][1y] [Makefile] [1bitsy/1bitsy-examples](https://github.com/1bitsy/1bitsy-examples) Example projects for the 1BitSy development boards.
- [**32**Star][5y] [Py] [0xebfe/3dsx-ida-pro-loader](https://github.com/0xebfe/3dsx-ida-pro-loader) IDA PRO Loader for 3DSX files
-- [**31**Star][2m] [C#] [cmu-sei/ghosts](https://github.com/cmu-sei/ghosts) GHOSTS is a framework for highly-complex, realistic NPC orchestration
+- [**31**Star][2m] [Go] [shikanon/socks5proxy](https://github.com/shikanon/socks5proxy) 一个简单的socks5代理转发服务(VPN)
+- [**31**Star][2y] [Makefile] [xc2/shadowsocks-libev-tomato](https://github.com/xc2/shadowsocks-libev-tomato) Pre-compiled shadowsocks-libev for TomatoUSB, Tomato Shibby, Toastman and Asuswrt Merlin.
+- [**31**Star][22d] [C] [questescape/exploit](https://github.com/questescape/exploit) Kernel exploits for the Oculus Quest
+- [**31**Star][3m] [C#] [cmu-sei/ghosts](https://github.com/cmu-sei/ghosts) GHOSTS is a framework for highly-complex, realistic NPC orchestration
+- [**31**Star][5y] [ObjC] [project-imas/encrypted_code_modules](https://github.com/project-imas/encrypted_code_modules) ECM - mitigates static attacks - allows sections of source code to be encrypted into a .dylib at build time and decrypted at run-time
- [**31**Star][1y] [rhinosecuritylabs/presentations](https://github.com/rhinosecuritylabs/presentations) A collection of slides, videos, and proof-of-concept scripts from various Rhino presentations.
- [**31**Star][2y] [bypass007/vuln](https://github.com/bypass007/vuln) Record some Vulnerabilities
- [**31**Star][2m] [C] [bkerler/opencl_brute](https://github.com/bkerler/opencl_brute) MD5,SHA1,SHA256,SHA512,HMAC,PBKDF2,SCrypt Bruteforcing tools using OpenCL (GPU, yay!) and Python
-- [**31**Star][7m] [Py] [fallibleinc/retirejslib](https://github.com/fallibleinc/retirejslib) Scan for vulnerabilities in JavaScript libraries you use (Python port of retirejs)
-- [**31**Star][2y] [C++] [paranoidninja/botnet-blogpost](https://github.com/paranoidninja/botnet-blogpost) This repo basically contains the code that was mentioned in the blogposts that was written by me at:
+- [**31**Star][8m] [Py] [fallibleinc/retirejslib](https://github.com/fallibleinc/retirejslib) Scan for vulnerabilities in JavaScript libraries you use (Python port of retirejs)
+- [**31**Star][6m] [Py] [snowming04/cipher_encryption_type_identification](https://github.com/snowming04/cipher_encryption_type_identification) 对密文的加密类型进行判断的命令行工具。
- [**31**Star][5y] [Py] [michenriksen/maltego](https://github.com/michenriksen/maltego) Custom Maltego transforms
-- [**31**Star][8m] [Py] [hacker0x01/hacker101coursework](https://github.com/hacker0x01/hacker101coursework) Deprecated coursework from first iteration of Hacker101
+- [**31**Star][21d] [Py] [grayddq/eburst](https://github.com/grayddq/eburst) 这个脚本主要提供对Exchange邮件服务器的账户爆破功能,集成了现有主流接口的爆破方式。
- [**31**Star][6y] [CSS] [spiderlabs/microphisher](https://github.com/spiderlabs/microphisher) µphisher spear phishing tool (reference implementation)
-- [**31**Star][16d] [JS] [pirate/django-concurrency-talk](https://github.com/pirate/django-concurrency-talk) Database Integrity in Django: Safely Handling Critical Data in Distributed Systems
-- [**31**Star][7d] [Shell] [ibm/cloud-pak](https://github.com/ibm/cloud-pak) IBM Cloud Paks are enterprise-grade containerized software by combining container images with enterprise capabilities for deployment in production use cases with integrations for management and lifecycle operations. Features such as pre-configured deployments based on product expertise, rolling upgrades, rollbacks, security/vulnerability testing…
-- [**31**Star][22d] [Shell] [zerobyte-id/netass2](https://github.com/zerobyte-id/netass2) Network Assessment Assistance Framework (PenTest Toolkit).
+- [**31**Star][18d] [JS] [pirate/django-concurrency-talk](https://github.com/pirate/django-concurrency-talk) Database Integrity in Django: Safely Handling Critical Data in Distributed Systems
+- [**31**Star][2m] [Shell] [thelinuxchoice/self-xss](https://github.com/thelinuxchoice/self-xss) Self-XSS attack using bit.ly to grab cookies tricking users into running malicious code
- [**31**Star][1m] [Py] [k8gege/solrexp](https://github.com/k8gege/solrexp) Apache Solr <=8.2.0 Velocity Template 0day Exploit
- [**31**Star][1m] [xuxiaodong/v2ray-for-ansible](https://github.com/xuxiaodong/v2ray-for-ansible) V2Ray for Ansible
+- [**31**Star][3y] [Py] [d4vinci/wormy](https://github.com/d4vinci/wormy) some python3 functions to add spreading features to any python backdoor
+- [**31**Star][2m] [Shell] [lbp0200/v2ray-vultr](https://github.com/lbp0200/v2ray-vultr) 在vultr上,在线自动部署v2ray
- [**31**Star][1y] [Shell] [wongsyrone/openwrt-v2ray](https://github.com/wongsyrone/openwrt-v2ray) v2ray package example for OpenWrt/LEDE
+- [**31**Star][5d] [Py] [oasis-open/cti-taxii-server](https://github.com/oasis-open/cti-taxii-server) OASIS TC Open Repository: TAXII 2 Server Library Written in Python
- [**31**Star][10m] [kiyadesu/android-reversing-challenges](https://github.com/kiyadesu/android-reversing-challenges) there are some CTF challenges or some other things helping improving android reversing skills.
-- [**31**Star][1m] [C] [gdbinit/efi_dxe_emulator](https://github.com/gdbinit/efi_dxe_emulator) EFI DXE Emulator and Interactive Debugger
-- [**31**Star][3y] [Pascal] [mwsrc/xtremerat](https://github.com/mwsrc/XtremeRAT) XtremeRAT SRC Extract
+- [**31**Star][4m] [bslassey/privacy-budget](https://github.com/bslassey/privacy-budget)
- [**31**Star][1y] [Shell] [xxh3x/nethunter_universal](https://github.com/XXH3X/Nethunter_Universal) Kali Nethunter for any phone (Kerneless)
+- [**31**Star][2y] [proappleos/upgrade-from-10.3.x-to-ios-11.1.2-on-any-64bit-device-with-blobs](https://github.com/ProAppleOS/Upgrade-from-10.3.x-to-iOS-11.1.2-on-any-64Bit-device-with-Blobs) How to Upgrade any 64Bit Device from 10.3.x to 11.1.2 with Blobs
- [**31**Star][2y] [C++] [mojtabatajik/sandbox-detection](https://github.com/MojtabaTajik/Sandbox-Detection) Contains some tricks to detect Sandboxes and gradually completed
- [**31**Star][2y] [JS] [ret2got/ethereum-jsonrpc-dns-rebinding](https://github.com/ret2got/Ethereum-JSONRPC-DNS-Rebinding) The PoC files for ethereum client's JSON-RPC DNS Rebinding
- [**31**Star][2y] [C] [zwclose/hidusb2](https://github.com/zwclose/hidusb2) hidusb2:Win10hidusb.sys 源代码
- [**31**Star][1y] [C#] [zodiacon/perfmonx](https://github.com/zodiacon/perfmonx) PerfMonX is an enhanced Performance Monitor tool
-- [**31**Star][4m] [C++] [zodiacon/apisetview](https://github.com/zodiacon/apisetview) API Set Viewer
- [**31**Star][6y] [Ruby] [zeknox/scripts](https://github.com/zeknox/scripts) a collection of useful scripts that for penetration testers
- [**31**Star][3y] [Py] [ytisf/hemingway](https://github.com/ytisf/hemingway) hemingway is a simple and easy to use spear phishing helper.
- [**31**Star][1y] [PHP] [yaofeifly/php_code_challenge](https://github.com/yaofeifly/php_code_challenge) 总结一些php代码审计ctf练习题
-- [**31**Star][7m] [C++] [xrivendell/pcsgolh](https://github.com/xrivendell/pcsgolh) PCSGOLH - Pointless Counter-Strike: Global Offensive Lua Hooks. A open-source Lua API for CS:GO hacking written in modern C++
- [**31**Star][10m] [Py] [xme/dockers](https://github.com/xme/dockers) Miscelaneous Dockers
- [**31**Star][5m] [Py] [withzombies/bnil-graph](https://github.com/withzombies/bnil-graph) A BinaryNinja plugin to graph a BNIL instruction tree
+- [**31**Star][20d] [Py] [whitequark/binja_itanium_cxx_abi](https://github.com/whitequark/binja_itanium_cxx_abi) Binary Ninja Itanium C++ ABI Plugin
+- [**31**Star][5y] [web2hack/trac](https://github.com/web2hack/trac) 《Web前端黑客技术揭秘》勘误表
- [**31**Star][1y] [Py] [wasapi-community/data-transfer-apis](https://github.com/wasapi-community/data-transfer-apis) WASAPI data transfer APIs
-- [**31**Star][5m] [vah13/oracle-bi-bugs](https://github.com/vah13/oracle-bi-bugs)
+- [**31**Star][3m] [SystemVerilog] [wangxuan95/ustc-rvsoc](https://github.com/wangxuan95/ustc-rvsoc) 一个用 SystemVerilog 编写的,RISC-V 架构的 CPU + SoC
- [**31**Star][1y] [unapibageek/thebicho](https://github.com/unapibageek/thebicho) Hardware backdoor for CAN bus.
- [**31**Star][3m] [PHP] [ubient/laravel-pwned-passwords](https://github.com/ubient/laravel-pwned-passwords) A Laravel validation rule to determine whether a given password is pwned (insecure)
-- [**31**Star][2y] [PowerShell] [tyranid/zer0con_2018](https://github.com/tyranid/zer0con_2018) Repository for my talk on Desktop Bridge at Zer0Con 2018.
-- [**31**Star][10m] [twelvesec/bearerauthtoken](https://github.com/twelvesec/bearerauthtoken) This burpsuite extender provides a solution on testing Enterprise applications that involve security Authorization tokens into every HTTP requests.Furthermore, this solution provides a better approach to solve the problem of Burp suite automated scanning failures when Authorization tokens exist.
+- [**31**Star][2y] [PS] [tyranid/zer0con_2018](https://github.com/tyranid/zer0con_2018) Repository for my talk on Desktop Bridge at Zer0Con 2018.
- [**31**Star][3y] [Py] [tunnelshade/nightfury](https://github.com/tunnelshade/nightfury)
+- [**31**Star][5y] [Py] [tripwire/openssl-ccs-inject-test](https://github.com/tripwire/openssl-ccs-inject-test) This script is designed for detection of vulnerable servers (CVE-2014-0224.) in a wide range of configurations. It attempts to negotiate using each affected protocol version (SSLv3, TLSv1, TLSv1.1, and TLSv1.2) advertising a comprehensive set of ciphers.
- [**31**Star][3y] [C++] [trailofbits/cfg-showcase](https://github.com/trailofbits/cfg-showcase) Sample programs that illustrate how to use Control Flow Guard, VS2015's control flow integrity implementation
- [**31**Star][1y] [Py] [thusoy/postgres-mitm](https://github.com/thusoy/postgres-mitm) Test whether your Postgres connections are vulnerable to MitM attacks
- [**31**Star][4y] [Eagle] [thedarknet/hhvkit](https://github.com/thedarknet/hhvkit) DefCon Hardware Hacking Village Learn To Solder Kit
- [**31**Star][5y] [Assembly] [th4nat0s/no_sandboxes](https://github.com/th4nat0s/no_sandboxes) Test suite for bypassing Malware sandboxes.
- [**31**Star][4y] [C] [tandasat/cs_driver](https://github.com/tandasat/cs_driver) A sample project for using Capstone from a driver in Visual Studio 2015
-- [**31**Star][21d] [talltechy/infosec_it-conferences-and-certs-usa](https://github.com/talltechy/infosec_it-conferences-and-certs-usa) USA based Information Security & I.T. Conferences
-- [**31**Star][3y] [Py] [syss-research/dns-mitm](https://github.com/syss-research/dns-mitm) A minimal DNS service that can provide spoofed replies
+- [**31**Star][23d] [talltechy/infosec_it-conferences-and-certs-usa](https://github.com/talltechy/infosec_it-conferences-and-certs-usa) USA based Information Security & I.T. Conferences
- [**31**Star][8y] [C] [swatkat/arkitlib](https://github.com/swatkat/arkitlib) Windows anti-rootkit library
- [**31**Star][2y] [Py] [starnightcyber/cve-2017-11882](https://github.com/starnightcyber/cve-2017-11882) CVE-2017-11882 exploitation
- [**31**Star][3y] [Py] [staaldraad/fastfluxanalysis](https://github.com/staaldraad/fastfluxanalysis) Scripts to detect Fast-Flux and DGA using DNS query responses
- [**31**Star][1y] [Ruby] [st0rn/windows-10-exploit](https://github.com/st0rn/windows-10-exploit) Windows 10 Exploit
+- [**31**Star][3y] [Java] [silentsignal/burp-collab-gw](https://github.com/silentsignal/burp-collab-gw) Simple socket-based gateway to the Burp Collaborator
- [**31**Star][2y] [shadowsocksrr/shadowsocksx-ng](https://github.com/shadowsocksrr/shadowsocksx-ng) Next Generation of ShadowsocksX
- [**31**Star][2y] [Py] [safebreach-labs/cachetalk](https://github.com/safebreach-labs/cachetalk) Proof-of-concept program that is able to read and write arbitrary bits using HTTP server-side caching
-- [**31**Star][27d] [Java] [rub-nds/tls-attacker-burpextension](https://github.com/rub-nds/tls-attacker-burpextension)
+- [**31**Star][11m] [Shell] [s-o-t/telegram-3proxy-install](https://github.com/s-o-t/telegram-3proxy-install) Bash script to install socks5 proxy (3proxy) configured for telegram.
+- [**31**Star][29d] [Java] [rub-nds/tls-attacker-burpextension](https://github.com/rub-nds/tls-attacker-burpextension)
- [**31**Star][2y] [C++] [rprop/cppdll](https://github.com/rprop/cppdll) CppDLL a small tool that will help you generate Cpp Header(.h) and Import Library(.lib) from Dynamic Link Library(.dll)
-- [**31**Star][4m] [PowerShell] [roflsandwich/steam-eop](https://github.com/roflsandwich/steam-eop)
+- [**31**Star][4m] [PS] [roflsandwich/steam-eop](https://github.com/roflsandwich/steam-eop)
- [**31**Star][1y] [Py] [righettod/owasp-cs-book](https://github.com/righettod/owasp-cs-book) Provide a utility script to build a PDF book gathering all Cheat Sheets from the project
-- [**31**Star][2y] [Py] [redteam-cyberark/google-domain-fronting](https://github.com/redteam-cyberark/google-domain-fronting) Domain fronting using Google app engine
+- [**31**Star][4m] [Shell] [riftbit/docker-3proxy](https://github.com/riftbit/docker-3proxy) Smallest and Fastest Docker container for fast proxy setup based on 3proxy SOCKS5 proxy
- [**31**Star][5m] [Py] [raphaelyancey/virtual_fm_band](https://github.com/raphaelyancey/virtual_fm_band)
- [**31**Star][3y] [randommood/fallacyoffast](https://github.com/randommood/fallacyoffast) Reference materials to this talk
- [**31**Star][2y] [Go] [pyinx/zk-sniffer](https://github.com/pyinx/zk-sniffer) sniffer and parse zookeeper packet
-- [**31**Star][11d] [Ruby] [puppetlabs/puppetlabs-java_ks](https://github.com/puppetlabs/puppetlabs-java_ks) Uses a combination of keytool and openssl to manage entries in a Java keystore
- [**31**Star][1m] [C] [programa-stic/pyasmjit](https://github.com/programa-stic/pyasmjit) PyAsmJIT is a Python package for x86_64/ARM assembly code generation and execution.
- [**31**Star][2y] [C++] [progmboy/kernel_vul_poc](https://github.com/progmboy/kernel_vul_poc)
- [**31**Star][1y] [Py] [prevade/cloudjack](https://github.com/prevade/cloudjack) Route53/CloudFront Vulnerability Assessment Utility
- [**31**Star][3y] [Py] [pmsosa/pylogger](https://github.com/pmsosa/pylogger)
- [**31**Star][4y] [Pascal] [pigrecos/codedeobfuscator](https://github.com/pigrecos/codedeobfuscator) Code Deobfuscator
-- [**31**Star][11d] [PHP] [php-fig-rectified/psr2r-sniffer](https://github.com/php-fig-rectified/psr2r-sniffer) A PSR-2-R code sniffer and code-style auto-correction-tool - including many useful additions
+- [**31**Star][13d] [PHP] [php-fig-rectified/psr2r-sniffer](https://github.com/php-fig-rectified/psr2r-sniffer) A PSR-2-R code sniffer and code-style auto-correction-tool - including many useful additions
- [**31**Star][2y] [PHP] [phith0n/ctfdbbuilder](https://github.com/phith0n/ctfdbbuilder) a database query builder for CTFer(出题专用/开发阶段/慎用)
+- [**31**Star][5y] [Shell] [patrickod/docker-tor-hidden-services](https://github.com/patrickod/docker-tor-hidden-services) A simple way of exposing any docker container as a tor hidden service
- [**31**Star][4y] [C] [patois/brahma](https://github.com/patois/brahma) Brahma - Privilege elevation exploit for Nintendo 3DS
- [**31**Star][6m] [C] [pathway27/bookr-mod-vita](https://github.com/pathway27/bookr-mod-vita) A book reader for the Vita. Still a work in progress
- [**31**Star][2y] [HTML] [p3t3rp4rk3r/my_dirty_scripts](https://github.com/p3t3rp4rk3r/my_dirty_scripts) My Dirty Scriptss ..!!!!! Pentest , OSINT , Python ,, Trainings
- [**31**Star][3y] [osandamalith/apimon](https://github.com/osandamalith/apimon) A simple API monitor for Windbg
- [**31**Star][4y] [Swift] [openscanner/xguardian](https://github.com/openscanner/xguardian) Security Scanner for OSX
-- [**31**Star][5m] [oldbonhart/osint-resources](https://github.com/oldbonhart/osint-resources) Data collected from publicly available sources to be used in an intelligence context
-- [**31**Star][5y] [C++] [nyx0/alina](https://github.com/nyx0/alina) Alina Spark - Point of Sales Trojan
+- [**31**Star][11m] [C] [olehkulykov/libnhr](https://github.com/olehkulykov/libnhr) Tiny Network HTTP Request cross platform C library.
+- [**31**Star][3m] [Go] [nullhypothesis/zoossh](https://github.com/nullhypothesis/zoossh) Parsing library for Tor-specific data formats.
+- [**31**Star][1y] [C++] [notscimmy/libelevate](https://github.com/notscimmy/libelevate) Handle elevation DKOM against ObRegisterCallbacks
- [**31**Star][1y] [Py] [northernsec/veracracker](https://github.com/northernsec/veracracker) Veracrypt Password Cracker
- [**31**Star][3y] [Py] [nopdev/binjadock](https://github.com/nopdev/binjadock) An extendable, tabbed, dockable UI widget plugin for BinaryNinja
- [**31**Star][2y] [Rust] [nikomatsakis/cargo-incremental](https://github.com/nikomatsakis/cargo-incremental) A fuzzing tool for incremental compilation that walks git history
@@ -14423,12 +15448,13 @@ networking routines
- [**31**Star][6y] [C] [nbareil/net2pcap](https://github.com/nbareil/net2pcap) Net2PCAP is a simple network-to-pcap capture file for Linux. Its goal is to be as simple as possible to be used in hostile environments
- [**31**Star][1y] [Go] [naltun/eyes](https://github.com/naltun/eyes)
- [**31**Star][2y] [HTML] [mthbernardes/heimdall_webserver](https://github.com/mthbernardes/heimdall_webserver) heimdall_webserver:在 *inux 服务器上集中管理有漏洞的包(vulnerables packages)
+- [**31**Star][5m] [JS] [mozfreddyb/webext-firstpartyisolation](https://github.com/mozfreddyb/webext-firstpartyisolation) Enable First Party Isolation Pref
- [**31**Star][3m] [Py] [moohax/proof-pudding](https://github.com/moohax/proof-pudding) Copy cat model for Proofpoint
+- [**31**Star][9m] [mmarfil/tinfoilhat](https://github.com/mmarfil/tinfoilhat) A list of privacy-respecting alternatives to apps and services that track you around.
- [**31**Star][5y] [C] [mitrecnd/pynids](https://github.com/mitrecnd/pynids)
-- [**31**Star][11d] [Py] [misp/misp-objects](https://github.com/misp/misp-objects) Definition, description and relationship types of MISP objects
+- [**31**Star][6d] [Py] [misp/misp-objects](https://github.com/misp/misp-objects) Definition, description and relationship types of MISP objects
- [**31**Star][2y] [Java] [mindawei/aliyun-safe-match](https://github.com/mindawei/aliyun-safe-match) Webshell和钓鱼网站检测(阿里云安全算法挑战赛 第29名)
- [**31**Star][3y] [Go] [mikegleasonjr/devproxy](https://github.com/mikegleasonjr/devproxy) A local development http proxy with hosts spoofing written in Go
-- [**31**Star][4m] [C#] [mgeeky/stracciatella](https://github.com/mgeeky/stracciatella) OpSec-safe Powershell runspace from within C# (aka SharpPick) with AMSI and Script Block Logging disabled at startup
- [**31**Star][2y] [C++] [mgeeky/hevd_kernel_exploit](https://github.com/mgeeky/hevd_kernel_exploit) Exploits pack for the Windows Kernel mode driver HackSysExtremeVulnerableDriver written for educational purposes.
- [**31**Star][2y] [Py] [medhini/malicious_website_detection](https://github.com/medhini/malicious_website_detection) Uses deep learning and machine learning techniques to detect and classify web pages as spam, malware and phishing
- [**31**Star][5y] [matthewrudy/fake-code4hk-app](https://github.com/matthewrudy/fake-code4hk-app) Decompiling a fake code4hk / occupy central app distributed via whatsapp
@@ -14437,122 +15463,143 @@ networking routines
- [**31**Star][8m] [Py] [mathboy7/ctf](https://github.com/mathboy7/ctf) Exploit for hardcore pwnable
- [**31**Star][3y] [CSS] [malwares/malwares.github.io](https://github.com/malwares/malwares.github.io) malwares src dump
- [**31**Star][5y] [Py] [madpowah/forensicpcap](https://github.com/madpowah/forensicpcap)
+- [**31**Star][2y] [Py] [lxiaogirl/hack](https://github.com/lxiaogirl/hack) 渗透测试过程中使用的脚本,包括不限于针对特定程序设备的爆破脚本、利用代码,通用的脚本。
+- [**31**Star][7m] [C++] [lr3800/teensy](https://github.com/lr3800/teensy) teensy示例代码
- [**31**Star][3m] [Shell] [leviathan36/ska](https://github.com/leviathan36/ska) Simple Karma Attack
-- [**31**Star][7d] [C++] [kuqadk3/ctf-and-learning](https://github.com/kuqadk3/ctf-and-learning)
- [**31**Star][4y] [Lua] [kost/nmap-nse](https://github.com/kost/nmap-nse) NMAP NSE scripts - (not all)) my contributions before merging to nmap svn
- [**31**Star][10m] [kiyadesu/android-reversing-challenges](https://github.com/kiyadesu/android-reversing-challenges) there are some CTF challenges or some other things helping improving android reversing skills.
- [**31**Star][1y] [karelorigin/xss-problems](https://github.com/karelorigin/xss-problems)
-- [**31**Star][2m] [Py] [kang-newbie/s-mbf](https://github.com/kang-newbie/s-mbf) Simple Multi BruteForce by KANG-NEWBIE
- [**31**Star][3m] [Py] [junorouse/ctf](https://github.com/junorouse/ctf)
-- [**31**Star][3m] [C] [jtalowell/crackme](https://github.com/jtalowell/crackme) Source repository for my introduction to reverse engineering workshop
+- [**31**Star][4m] [C] [jtalowell/crackme](https://github.com/jtalowell/crackme) Source repository for my introduction to reverse engineering workshop
- [**31**Star][5y] [Py] [jofpin/fuckshell](https://github.com/jofpin/fuckshell) Simple Webshell Scanner
+- [**31**Star][7m] [Java] [jehy/rutracker-free](https://github.com/jehy/rutracker-free) Android thin client for rutracker.org, using Tor to avoid block.
- [**31**Star][2y] [C] [jaybosamiya/fuzzing-numpy](https://github.com/jaybosamiya/fuzzing-numpy)
-- [**31**Star][1m] [JS] [iteratec/juicy-ctf](https://github.com/iteratec/juicy-ctf) Run Capture the Flags and Security Trainings with OWASP Juice Shop
- [**31**Star][9m] [C++] [isoadam/gina_public](https://github.com/isoadam/gina_public) Prototype of hijacking Windows driver dispatch routines in unmapped discardable sections
- [**31**Star][6y] [Shell] [installation/rkhunter](https://github.com/installation/rkhunter) Rootkit Hunter install script
- [**31**Star][2y] [Py] [ihack4falafel/subrosa](https://github.com/ihack4falafel/subrosa) Basic tool to automate backdooring PE files
-- [**31**Star][6y] [C++] [igh0st/crypters](https://github.com/igh0st/crypters) Various Crypter Project
- [**31**Star][5y] [idkwim/frooksinatra](https://github.com/idkwim/frooksinatra) POC of sysenter x64 LSTAR MSR hook
- [**31**Star][1y] [C] [iamgublin/ndis6.30-netmonitor](https://github.com/iamgublin/ndis6.30-netmonitor) NDIS6.30 Filter Library
-- [**31**Star][7d] [C] [hfiref0x/rocall](https://github.com/hfiref0x/rocall) ReactOS x86-32 syscall fuzzer
-- [**31**Star][18d] [C++] [hasherezade/funky_malware_formats](https://github.com/hasherezade/funky_malware_formats) Parsers for custom malware formats ("Funky malware formats")
+- [**31**Star][9d] [C] [hfiref0x/rocall](https://github.com/hfiref0x/rocall) ReactOS x86-32 syscall fuzzer
+- [**31**Star][20d] [C++] [hasherezade/funky_malware_formats](https://github.com/hasherezade/funky_malware_formats) Parsers for custom malware formats ("Funky malware formats")
- [**31**Star][1y] [Java] [harryfrey/fakegumtree](https://github.com/harryfrey/fakegumtree) Investigating an Android spyware and phishing application.
- [**31**Star][5y] [Py] [hacksysteam/exploitreliabilitytestingsystem](https://github.com/hacksysteam/exploitreliabilitytestingsystem) Exploit Reliability Testing System
-- [**31**Star][13d] [Ruby] [gplcc/gplcc](https://github.com/gplcc/gplcc) GPL Cooperation Commitment
+- [**31**Star][8y] [C] [hackedteam/driver-win64](https://github.com/hackedteam/driver-win64) Windows (64bit) agent driver
+- [**31**Star][1y] [h2hconference/2018](https://github.com/h2hconference/2018) H2HC 2018 Slides/Materials/Presentations
+- [**31**Star][2y] [Go] [guitmz/go-liora](https://github.com/guitmz/go-liora) Probably the first binary (PE/ELF) infector ever created in GoLang.
+- [**31**Star][15d] [Ruby] [gplcc/gplcc](https://github.com/gplcc/gplcc) GPL Cooperation Commitment
- [**31**Star][6y] [C++] [glmcdona/malm](https://github.com/glmcdona/malm) MALM: Malware Monitor
- [**31**Star][5y] [Py] [glamrock/stormy](https://github.com/glamrock/stormy) Easy creation of Tor Hidden Services
- [**31**Star][5y] [Go] [fzerorubigd/go0r](https://github.com/fzerorubigd/go0r) A simple ssh honeypot in golang
- [**31**Star][2y] [C] [frederic/qemu-exynos-bootrom](https://github.com/frederic/qemu-exynos-bootrom) Emulating Exynos 4210 BootROM in QEMU
+- [**31**Star][6m] [Py] [fr0gger/unprotect](https://github.com/fr0gger/unprotect) Unprotect is a python tool for parsing PE malware and extract evasion techniques.
- [**31**Star][1y] [C++] [fortiguard-lion/rpcview](https://github.com/fortiguard-lion/rpcview) RpcView is a free tool to explore and decompile Microsoft RPC interfaces
+- [**31**Star][3y] [HLSL] [foonull/halomd](https://github.com/foonull/halomd) New demo version of Halo for the Mac.
+- [**31**Star][7m] [Py] [fkie-cad/luckycat](https://github.com/fkie-cad/luckycat) A distributed fuzzing management framework
- [**31**Star][2y] [Py] [fist0urs/kerberom](https://github.com/fist0urs/kerberom) Kerberom is a tool aimed to retrieve ARC4-HMAC'ed encrypted Tickets Granting Service (TGS) of accounts having a Service Principal Name (SPN) within an Active Directory
- [**31**Star][2y] [Py] [ffmancera/pentesting-multitool](https://github.com/ffmancera/pentesting-multitool) Different utility scripts for pentesting and hacking.
+- [**31**Star][8m] [C++] [ez8-co/xpjson](https://github.com/ez8-co/xpjson)
- [**31**Star][5m] [C++] [etsubu/nanovm](https://github.com/etsubu/nanovm) PoC lightweight x64 register based VM implementation
-- [**31**Star][1y] [edoverflow/legal-bug-bounty](https://github.com/edoverflow/legal-bug-bounty) #legalbugbounty project — creating safe harbors on bug bounty programs and vulnerability disclosure programs.
- [**31**Star][1y] [Shell] [edoverflow/curate](https://github.com/edoverflow/curate) A tool for fetching archived URLs (to be rewritten in Go).
-- [**31**Star][2y] [Visual Basic] [dzzie/myaut_contrib](https://github.com/dzzie/myaut_contrib) mod to myaut2exe decompiler
+- [**31**Star][9m] [JS] [ecleipteon/thalos](https://github.com/ecleipteon/thalos) Secure approach to secure file storage in untrusted environments.
+- [**31**Star][2y] [Visual Basic .NET] [dzzie/myaut_contrib](https://github.com/dzzie/myaut_contrib) mod to myaut2exe decompiler
- [**31**Star][4y] [dhamuharker/xss-](https://github.com/dhamuharker/xss-) Awesome XSS Payloads
- [**31**Star][3y] [JS] [desudesutalk/f5stegojs](https://github.com/desudesutalk/f5stegojs) JPEG steganography for browser and node. F5 algo in pure javascript.
- [**31**Star][3m] [C] [defcon-russia/metasploit-payloads](https://github.com/defcon-russia/metasploit-payloads) Unified repository for different Metasploit Framework payloads
- [**31**Star][4y] [Lua] [danilabs/scripts-nse](https://github.com/danilabs/scripts-nse) Some NSE scripts to search information from routers
- [**31**Star][4y] [danielmiessler/ctfsolutiontypes](https://github.com/danielmiessler/ctfsolutiontypes) A collection of CTF solution types, i.e. not solutions to specific CTF challenges, but the general categories that those solutions fall under. Includes CTF solution categories for web, binary, network, crypto, and others. Please contribute!
+- [**31**Star][1y] [JS] [d0g3-lab/i-soon_ctf_2018](https://github.com/D0g3-Lab/i-SOON_CTF_2018) 2018 第一届安洵杯 题目环境/源码/WP
- [**31**Star][6y] [Java] [cunninglogic/lgpwn](https://github.com/cunninglogic/lgpwn) LG Root Exploit
+- [**31**Star][10m] [C] [ctxis/capemon](https://github.com/ctxis/capemon) CAPE monitor DLLs
- [**31**Star][4m] [cturt/gameboy_ghidrasleigh](https://github.com/cturt/gameboy_ghidrasleigh) Ghidra Processor support for Nintendo Game Boy
- [**31**Star][5m] [C] [csandker/inmemoryshellcode](https://github.com/csandker/inmemoryshellcode) A Collection of In-Memory Shellcode Execution Techniques for Windows
-- [**31**Star][4y] [Py] [csababarta/volatility_plugins](https://github.com/csababarta/volatility_plugins) Volatility plugins created by the author
+- [**31**Star][1y] [Shell] [cryptolok/ghostinthechaos](https://github.com/cryptolok/ghostinthechaos) Chaotic Crypto Stealth VPN for Anonymity and Untraceable Hacking Attacks with Linux and Android
- [**31**Star][3y] [Py] [cryptax/fittools](https://github.com/cryptax/fittools) Wristband research tools
-- [**31**Star][3m] [C++] [creaink/ucom](https://github.com/creaink/ucom) A simple Serial-Port/TCP/UDP debugging tool.
- [**31**Star][1y] [Py] [cisco-talos/casc](https://github.com/cisco-talos/casc) IDA Pro plug-in to generate signatures
- [**31**Star][5y] [C] [christianpapathanasiou/apache-rootkit](https://github.com/christianpapathanasiou/apache-rootkit) A malicious Apache module with rootkit functionality
- [**31**Star][5y] [Ruby] [chdorner/epubinfo](https://github.com/chdorner/epubinfo) Extracts metadata information from EPUB files. Supports EPUB2 and EPUB3 formats.
- [**31**Star][5m] [Py] [charliedean/psexecspray](https://github.com/charliedean/psexecspray) Spray SMB with hashes, Then psexec
- [**31**Star][2y] [Py] [bwsw/webshell](https://github.com/bwsw/webshell) Docker container which includes Shellinabox and enables SSH connections to arbitrary (not where installed) servers
+- [**31**Star][1y] [Py] [bsvineethiitg/malwaregan](https://github.com/bsvineethiitg/malwaregan) Visualizing malware behavior, and proactive protection using GANs against zero-day attacks.
+- [**31**Star][2y] [Go] [brimstone/rsocks](https://github.com/brimstone/rsocks) Tiny little reverse socks5 client & server
+- [**31**Star][2y] [PHP] [bmitch/codor](https://github.com/bmitch/codor) Custom PHPCS sniffs to find Code Smells
- [**31**Star][2y] [Shell] [bluscreenofjeff/scripts](https://github.com/bluscreenofjeff/scripts) One-off scripts
- [**31**Star][2y] [Py] [bltsec/violent-python3](https://github.com/bltsec/violent-python3) Python 3 scripts based on lessons learned from Violent Python: A Cookbook for Hackers, Forensic Analysts, Penetration Testers and Security Engineers by TJ O'Connor.
-- [**31**Star][4m] [C++] [blackint3/none](https://github.com/blackint3/none) UNONE and KNONE is a couple of open source base library that makes it easy to develop software on Windows.
+- [**31**Star][3m] [C#] [blackvikingpro/aresskit](https://github.com/blackvikingpro/aresskit) Next Generation Remote Administration Tool (RAT)
- [**31**Star][2y] [Py] [benjamincrom/scrabble](https://github.com/benjamincrom/scrabble) Implements Scrabble. Also allows user to recover all game moves from given board and score list as well as brute-force find best move.
- [**31**Star][4y] [Py] [basilfx/kippo-extra](https://github.com/basilfx/kippo-extra) Set of extra commands for kippo, the SSH honeypot daemon
-- [**31**Star][23d] [C++] [bareflank/standalone_cxx](https://github.com/bareflank/standalone_cxx) run C++ from anywhere
- [**31**Star][3y] [Py] [as0ler/r2clutch](https://github.com/as0ler/r2clutch) r2-based tool to decrypt iOS applications
+- [**31**Star][4y] [Py] [arthaud/formatstring](https://github.com/arthaud/formatstring) Format string exploitation helper
- [**31**Star][3m] [Perl] [aron-tn/mega-bot](https://github.com/aron-tn/mega-bot) [NEW] : Mega Bot ☣ Scanner & Auto Exploiter
- [**31**Star][3m] [Py] [argilo/secplus](https://github.com/argilo/secplus) A software implementation of the Security+ system used by garage door openers
- [**31**Star][7y] [Perl] [appliedsec/forensicscanner](https://github.com/appliedsec/forensicscanner) Forensic Scanner
-- [**31**Star][4m] [Py] [anilyuk/punydomaincheck](https://github.com/anilyuk/punydomaincheck) punydomaincheck:Puny域名检查
-- [**31**Star][5m] [angelkitty/ida7.0](https://github.com/angelkitty/ida7.0)
+- [**31**Star][5m] [Py] [anilyuk/punydomaincheck](https://github.com/anilyuk/punydomaincheck) punydomaincheck:Puny域名检查
- [**31**Star][7m] [Go] [andrewwebber/kate](https://github.com/andrewwebber/kate) Because Clair needs a friend
-- [**31**Star][3m] [Py] [amossys/fragscapy](https://github.com/amossys/fragscapy) Fragscapy is a command-line tool to fuzz network protocols by automating the modification of outgoing network packets. It can run multiple successive tests to determine which options can be used to evade firewalls and IDS.
+- [**31**Star][2y] [amoghbl1/tor-browser](https://github.com/amoghbl1/tor-browser) Orfox - A Tor Browser for Android
+- [**31**Star][2y] [C] [alienrobotarmy/ctunnel](https://github.com/alienrobotarmy/ctunnel) ctunnel is a proxy and VPN software for tunneling TCP and UDP connections securely
- [**31**Star][7m] [C] [alex91ar/diamorphine](https://github.com/alex91ar/diamorphine) LKM rootkit for Linux Kernels 2.6.x/3.x/4.x
- [**31**Star][1y] [KiCad Layout] [5n44p/omega-dock-new](https://github.com/5n44p/omega-dock-new) A dock for Onion omega, omega2 and omega2+. It features: Microusb for power supply, USB host, Ethernet
+- [**31**Star][2y] [PS] [3gstudent/waitfor-persistence](https://github.com/3gstudent/waitfor-persistence) Use Waitfor.exe to maintain persistence
- [**31**Star][4y] [C] [211217613/c-hacking](https://github.com/211217613/c-hacking) Practice and learning in the world of C RE and exploit analysis
- [**31**Star][11m] [Py] [0xr0/hediye](https://github.com/0xr0/hediye) Hash Generator & Cracker Online Offline
- [**31**Star][1y] [Py] [003random/icu](https://github.com/003random/icu) An Extended, Modulair, Host Discovery Framework
-- [**30**Star][24d] [Ruby] [stelligent/aws-devsecops-workshop](https://github.com/stelligent/aws-devsecops-workshop) A continuous security pipeline demo for the AWS DevSecOps Workshop.
+- [**30**Star][10m] [smallstrong0/ss](https://github.com/smallstrong0/ss) I spend many ways to break the GFW,and this is my destination.
+- [**30**Star][4y] [Forth] [benhoyt/third](https://github.com/benhoyt/third) Third, a small Forth compiler for 8086 DOS
+- [**30**Star][11m] [Java] [bestoa/shadowsocks-vertx](https://github.com/bestoa/shadowsocks-vertx) Java port of shadowsocks with vertx.
+- [**30**Star][26d] [fqshare/free-ssr-v2ray-vpn](https://github.com/fqshare/free-ssr-v2ray-vpn) ssr/酸酸乳/v2ray/shadowsocks节点/vpn/机场搬运分享
+- [**30**Star][26d] [Ruby] [stelligent/aws-devsecops-workshop](https://github.com/stelligent/aws-devsecops-workshop) A continuous security pipeline demo for the AWS DevSecOps Workshop.
- [**30**Star][2y] [Py] [scwuaptx/ais3-2017](https://github.com/scwuaptx/ais3-2017) AIS3 2017 Binary Exploitation
- [**30**Star][2y] [Java] [amitshekhariitbhu/applock](https://github.com/amitshekhariitbhu/applock) Android Application for app lock
- [**30**Star][8y] [Py] [hubert3/isniff](https://github.com/hubert3/isniff) SSL man-in-the-middle tool targeting iOS devices < 4.3.5
- [**30**Star][8m] [offensive-security/kali-linux-preseed](https://github.com/offensive-security/kali-linux-preseed)
-- [**30**Star][27d] [C] [angr/binaries](https://github.com/angr/binaries) A repository with binaries for angr tests and examples.
+- [**30**Star][3y] [xyntax/waf-bypass](https://github.com/xyntax/waf-bypass)
+- [**30**Star][29d] [C] [angr/binaries](https://github.com/angr/binaries) A repository with binaries for angr tests and examples.
- [**30**Star][5y] [Perl] [pentestmonkey/yaptest](https://github.com/pentestmonkey/yaptest) Automatically exported from code.google.com/p/yaptest
+- [**30**Star][8m] [C] [pwn20wndstuff/meridianjb](https://github.com/pwn20wndstuff/meridianjb)
- [**30**Star][6m] [jiansiting/cve-2019-2725](https://github.com/jiansiting/cve-2019-2725) weblogic绕过和wls远程执行
-- [**30**Star][2m] [Shell] [thelinuxchoice/self-xss](https://github.com/thelinuxchoice/self-xss) Self-XSS attack using bit.ly to grab cookies tricking users into running malicious code
-- [**30**Star][1m] [Shell] [honwen/openwrt-dnsmasq-extra](https://github.com/honwen/openwrt-dnsmasq-extra) Anti-{Pollution, ADs}-DNS for OpenWrt/LEDE
-- [**30**Star][3y] [Py] [d4vinci/wormy](https://github.com/d4vinci/wormy) some python3 functions to add spreading features to any python backdoor
-- [**30**Star][2m] [Shell] [lbp0200/v2ray-vultr](https://github.com/lbp0200/v2ray-vultr) 在vultr上,在线自动部署v2ray
+- [**30**Star][18d] [Py] [kkevsterrr/geneva](https://github.com/kkevsterrr/geneva) client-side censorship evasion engine from the Geneva AI
+- [**30**Star][2y] [C++] [hsluoyz/rmtsvc](https://github.com/hsluoyz/rmtsvc) A web-based remote desktop & control service for Windows.
- [**30**Star][4m] [starriv/docker-ss](https://github.com/starriv/docker-ss) use the docker to run shadowsocksr
- [**30**Star][6y] [Py] [acidprime/wirelessconfig](https://github.com/acidprime/wirelessconfig) A 802.1x Python wireless configuration tool with Cocoa wrappers
-- [**30**Star][2m] [C] [kangtastic/cve-2019-2215](https://github.com/kangtastic/cve-2019-2215) Temproot for Pixel 2 and Pixel 2 XL via CVE-2019-2215
- [**30**Star][2y] [Py] [probr/probr-core](https://github.com/probr/probr-core) The core-component for generic WiFi tracking: remote device management, packet capturing, packet storage
-- [**30**Star][27d] [Jupyter Notebook] [tikeswar/kido](https://github.com/tikeswar/kido) White hat hacking passwords using ML
+- [**30**Star][29d] [Jupyter Notebook] [tikeswar/kido](https://github.com/tikeswar/kido) White hat hacking passwords using ML
+- [**30**Star][7d] [ds19991999/secbox](https://github.com/ds19991999/secbox)
+- [**30**Star][1m] [Go] [monereum/monereum](https://github.com/monereum/monereum) Monereum Network - A permissioned implementation of Ethereum supporting data privacy
- [**30**Star][2m] [Shell] [masssmith/smgate](https://github.com/masssmith/smgate) 用树莓派做v2ray透明翻墙网关
- [**30**Star][5y] [Py] [osirislab/catfish](https://github.com/osirislab/Catfish) Catfish is a tool used ease the process of finding ROP gadgets and creating payloads with them.
-- [**30**Star][1y] [PowerShell] [nsacyber/detect-cve-2017-15361-tpm](https://github.com/nsacyber/Detect-CVE-2017-15361-TPM) Detects Windows and Linux systems with enabled Trusted Platform Modules (TPM) vulnerable to CVE-2017-15361. #nsacyber
+- [**30**Star][1y] [PS] [nsacyber/detect-cve-2017-15361-tpm](https://github.com/nsacyber/Detect-CVE-2017-15361-TPM) Detects Windows and Linux systems with enabled Trusted Platform Modules (TPM) vulnerable to CVE-2017-15361. #nsacyber
- [**30**Star][3y] [Py] [tacixat/xorshift128plus](https://github.com/TACIXAT/XorShift128Plus) Symbolic execution for the XorShift128+ algorithm.
- [**30**Star][4y] [C] [intel/jit-spray-poc-for-ksp](https://github.com/intel/jit-spray-poc-for-ksp)
-- [**30**Star][1m] [zoranpandovski/awesome-testing-tools](https://github.com/zoranpandovski/awesome-testing-tools)
+- [**30**Star][2m] [zoranpandovski/awesome-testing-tools](https://github.com/zoranpandovski/awesome-testing-tools)
+- [**30**Star][4m] [C++] [zodiacon/apisetview](https://github.com/zodiacon/apisetview) API Set Viewer
+- [**30**Star][9m] [Py] [zerosteiner/advancedhttpserver](https://github.com/zerosteiner/advancedhttpserver) Standalone web server built on Python's BaseHTTPServer
- [**30**Star][2y] [C#] [zacbrown/powershellmethodauditor](https://github.com/zacbrown/powershellmethodauditor) PowerShellMethodAuditor listens to the PowerShell ETW provider and logs PowerShell method invocations.
- [**30**Star][2y] [ysrc/shelldaddy](https://github.com/ysrc/shelldaddy) 跨平台 webshell 静态扫描器
-- [**30**Star][13d] [Haskell] [ymherklotz/verismith](https://github.com/ymherklotz/verismith) Verilog Fuzzer to test the major simulators and sythesisers by generating random, valid Verilog.
+- [**30**Star][2d] [Haskell] [ymherklotz/verismith](https://github.com/ymherklotz/verismith) Verilog Fuzzer to test the major simulators and sythesisers by generating random, valid Verilog.
+- [**30**Star][7m] [C++] [xrivendell/pcsgolh](https://github.com/xrivendell/pcsgolh) PCSGOLH - Pointless Counter-Strike: Global Offensive Lua Hooks. A open-source Lua API for CS:GO hacking written in modern C++
- [**30**Star][2m] [C++] [xoreos/xoreos-tools](https://github.com/xoreos/xoreos-tools) Tools to help the development of xoreos
- [**30**Star][7y] [JS] [x/twitter-brute-force](https://github.com/x/twitter-brute-force) Brute forces dictionaries for available twitter handles
- [**30**Star][1y] [Go] [wybiral/reverseproxy](https://github.com/wybiral/reverseproxy) reverseproxy: Go语言编写的加密反向代理
-- [**30**Star][17d] [Py] [whitequark/binja_itanium_cxx_abi](https://github.com/whitequark/binja_itanium_cxx_abi) Binary Ninja Itanium C++ ABI Plugin
- [**30**Star][2y] [HTML] [vuetifyjs/simple](https://github.com/vuetifyjs/simple) The simplest possible Vue setup in a single HTML file
- [**30**Star][3y] [Shell] [vrutkovs/firefox-flatpak](https://github.com/vrutkovs/firefox-flatpak) Flatpak manifest and patches to build Firefox
+- [**30**Star][2y] [C++] [vic4key/cat-driver](https://github.com/vic4key/cat-driver) CatDriver - The Kernel Mode Driver that written in C++. It is an useful driver and has the highest privilege level on the Windows platform. It can be used for Game Hacking and others.
- [**30**Star][2y] [C#] [valsov/backnet](https://github.com/valsov/backnet) Remote Administration Tool with botnet capability, Windows
-- [**30**Star][5y] [Py] [tripwire/openssl-ccs-inject-test](https://github.com/tripwire/openssl-ccs-inject-test) This script is designed for detection of vulnerable servers (CVE-2014-0224.) in a wide range of configurations. It attempts to negotiate using each affected protocol version (SSLv3, TLSv1, TLSv1.1, and TLSv1.2) advertising a comprehensive set of ciphers.
+- [**30**Star][1y] [travisfsmith/mitre_attack](https://github.com/travisfsmith/mitre_attack)
+- [**30**Star][5m] [Go] [tomnomnom/rawhttp](https://github.com/tomnomnom/rawhttp) A Go library for making HTTP requests with complete control
- [**30**Star][2y] [C] [tigerpuma/afl_unicorn](https://github.com/tigerpuma/afl_unicorn)
- [**30**Star][8m] [C#] [thaisenpm/loader2](https://github.com/thaisenpm/loader2) Nova Hook is an open source C# cheat loader currently built for CS:GO
+- [**30**Star][6m] [PHP] [teamharekaze/harekazectf2019-challenges](https://github.com/teamharekaze/harekazectf2019-challenges) Harekaze CTF 2019 challenges
- [**30**Star][3y] [Jupyter Notebook] [surajr/machine-learning-approach-for-malware-detection](https://github.com/surajr/machine-learning-approach-for-malware-detection) A Machine Learning approach for classifying a file as Malicious or Legitimate
- [**30**Star][6y] [spiderlabs/xmlmao](https://github.com/spiderlabs/xmlmao) A configurable XPath/XML injection testbed
+- [**30**Star][6y] [JS] [spiderlabs/modsecurity-status](https://github.com/spiderlabs/modsecurity-status) ModSecurity status
- [**30**Star][2y] [Py] [spencerdodd/pysploit](https://github.com/spencerdodd/pysploit) Remote exploitation framework written in Python
- [**30**Star][3y] [Py] [sooshie/packerid](https://github.com/sooshie/packerid)
- [**30**Star][3y] [Ruby] [skulltech/apk-payload-injector](https://github.com/skulltech/apk-payload-injector) POC for injecting Metasploit payloads on arbitrary APKs
-- [**30**Star][7m] [HTML] [skepticfx/damnvulnerable.me](https://github.com/skepticfx/damnvulnerable.me) A deliberately vulnerable modern day app with lots of DOM related bugs
+- [**30**Star][8m] [HTML] [skepticfx/damnvulnerable.me](https://github.com/skepticfx/damnvulnerable.me) A deliberately vulnerable modern day app with lots of DOM related bugs
- [**30**Star][3y] [C] [simoninns/smallymouse2](https://github.com/simoninns/smallymouse2) Universal USB to quadrature mouse adapter
-- [**30**Star][3y] [Java] [silentsignal/burp-collab-gw](https://github.com/silentsignal/burp-collab-gw) Simple socket-based gateway to the Burp Collaborator
- [**30**Star][10m] [Py] [sf197/hashboy-tool](https://github.com/sf197/hashboy-tool) a hash query tool
- [**30**Star][1y] [Py] [serpilliere/elfesteem](https://github.com/serpilliere/elfesteem) Automatically exported from code.google.com/p/elfesteem
- [**30**Star][1y] [C++] [sentinel-one/skream](https://github.com/sentinel-one/skream) SentinelOne's KeRnel Exploits Advanced Mitigations
-- [**30**Star][24d] [Shell] [security-onion-solutions/securityonion-setup](https://github.com/security-onion-solutions/securityonion-setup)
+- [**30**Star][26d] [Shell] [security-onion-solutions/securityonion-setup](https://github.com/security-onion-solutions/securityonion-setup)
- [**30**Star][9m] [Java] [secdec/attack-surface-detector-zap](https://github.com/secdec/attack-surface-detector-zap) The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters
- [**30**Star][3m] [Py] [scottmudge/debugautopatch](https://github.com/scottmudge/debugautopatch) Patching system improvement plugin for IDA.
- [**30**Star][2y] [JS] [rpgeeganage/file-less-ransomware-demo](https://github.com/rpgeeganage/file-less-ransomware-demo) Demonstrate about file-less malware approach using JavaScript
@@ -14560,6 +15607,7 @@ networking routines
- [**30**Star][3m] [C++] [rokups/hooker](https://github.com/rokups/hooker) Minimalistic hooking library written in C
- [**30**Star][3y] [Py] [rmtew/peasauce](https://github.com/rmtew/peasauce) Peasauce Interactive Disassembler
- [**30**Star][2y] [Py] [revengecoming/demonhunter](https://github.com/revengecoming/demonhunter) Distributed Honeypot
+- [**30**Star][2m] [Shell] [putsi/privatecollaborator](https://github.com/putsi/privatecollaborator) A script for installing private Burp Collaborator with free Let's Encrypt SSL-certificate
- [**30**Star][2y] [C] [psxdev/ps4sdk](https://github.com/psxdev/ps4sdk) Modular open source ps4 sdk with user and kernel space support
- [**30**Star][1y] [C++] [psmitty7373/eif](https://github.com/psmitty7373/eif) Evil Reflective DLL Injection Finder
- [**30**Star][2y] [Shell] [pnptutorials/pnp-portablehackingmachine](https://github.com/pnptutorials/pnp-portablehackingmachine) This script will convert your Raspberry Pi 3 into a portable hacking machine.
@@ -14567,133 +15615,155 @@ networking routines
- [**30**Star][2y] [HTML] [plaperdr/fprandom](https://github.com/plaperdr/fprandom) A browser to counter advanced fingerprinting techniques
- [**30**Star][1y] [pinktangent/endpoint-testing](https://github.com/pinktangent/endpoint-testing) Repository for Endpoint Security Testing
- [**30**Star][5m] [C] [pentesteracademy/linux-rootkits-red-blue-teams](https://github.com/pentesteracademy/linux-rootkits-red-blue-teams) Linux Rootkits (4.x Kernel)
-- [**30**Star][5y] [Shell] [patrickod/docker-tor-hidden-services](https://github.com/patrickod/docker-tor-hidden-services) A simple way of exposing any docker container as a tor hidden service
+- [**30**Star][5m] [C++] [paragon-software-group/paragon_apfs_sdk_ce](https://github.com/paragon-software-group/paragon_apfs_sdk_ce) Paragon APFS SDK Free
+- [**30**Star][1y] [C++] [owodelta/coilgun](https://github.com/owodelta/coilgun) Direct WinAPI calling
- [**30**Star][2y] [PHP] [opt-oss/ng-netms](https://github.com/opt-oss/ng-netms) NG-NetMS is a new end-to-end network management platform for your Linux servers, Cisco, Juniper, HP and Extreme routers, switches and firewalls.
- [**30**Star][4y] [Shell] [opentoallctf/ctf-tools](https://github.com/opentoallctf/ctf-tools) Some setup scripts for security research tools.
+- [**30**Star][11m] [HCL] [opendevsecops/terraform-aws-scanner](https://github.com/opendevsecops/terraform-aws-scanner) Terraform module which provides easy to configure AWS environment for running automated security scanning solutions at scheduled intervals.
- [**30**Star][1y] [C++] [ntraiseharderror/unrunpe](https://github.com/ntraiseharderror/unrunpe) PoC for detecting and dumping process hollowing code injection
+- [**30**Star][3y] [nextco/android-decompiler](https://github.com/nextco/android-decompiler) A hight quality list of tools to reverse engineering code from android.
- [**30**Star][4y] [neu5ron/malware-traffic-analysis-pcaps](https://github.com/neu5ron/malware-traffic-analysis-pcaps) malware-traffic-analysis.net PCAPs repository.
- [**30**Star][5y] [Py] [mstsec/mst](https://github.com/mstsec/mst) A Platform for Web Pentest From China
-- [**30**Star][9m] [mmarfil/tinfoilhat](https://github.com/mmarfil/tinfoilhat) A list of privacy-respecting alternatives to apps and services that track you around.
-- [**30**Star][25d] [Shell] [mirchr/security-research](https://github.com/mirchr/security-research) Security Research
+- [**30**Star][1y] [Tcl] [mohemiv/tcltools](https://github.com/mohemiv/tcltools) Сollection of TCL scripts for Cisco IOS penetration testing
+- [**30**Star][2y] [C#] [modzero/mod0umleitung](https://github.com/modzero/mod0umleitung) modzero DNS Masquerading Server for Windows
+- [**30**Star][7m] [Zeek] [mitre-attack/bzar](https://github.com/mitre-attack/bzar) A set of Zeek scripts to detect ATT&CK techniques.
- [**30**Star][3y] [mhaggis/app_splunk_sysmon_hunter](https://github.com/mhaggis/app_splunk_sysmon_hunter) Splunk App to assist Sysmon Threat Hunting
- [**30**Star][3y] [Py] [mhagger/diff-slider-tools](https://github.com/mhagger/diff-slider-tools) Tools for experimenting diff "slider" heuristics
- [**30**Star][6y] [Py] [meatballs1/burp_jsbeautifier](https://github.com/meatballs1/burp_jsbeautifier) js-beautifier extension for Burp Suite
- [**30**Star][4y] [markofu/hackeire](https://github.com/markofu/hackeire) Challenges, notes & other stuff from the HackEire CTF.....
-- [**30**Star][11m] [C++] [malcomvetter/dnscache](https://github.com/malcomvetter/dnscache)
+- [**30**Star][12m] [C++] [malcomvetter/dnscache](https://github.com/malcomvetter/dnscache)
- [**30**Star][1y] [CSS] [m6a-uds/dvca](https://github.com/m6a-uds/dvca) Damn Vulnerable Cloud Application
-- [**30**Star][2y] [Py] [lxiaogirl/hack](https://github.com/lxiaogirl/hack) 渗透测试过程中使用的脚本,包括不限于针对特定程序设备的爆破脚本、利用代码,通用的脚本。
+- [**30**Star][3y] [Py] [loggerhead/shadowsocks](https://github.com/loggerhead/shadowsocks)
- [**30**Star][5m] [Py] [lionheart/pwnedpasswords](https://github.com/lionheart/pwnedpasswords) A Python Library and CLI for the Pwned Passwords v2 API
- [**30**Star][2y] [Py] [lanrat/spiderwho](https://github.com/lanrat/spiderwho) A very fast whois crawler
+- [**30**Star][2m] [C++] [klaasnicolaas/ha_nfc_scanner](https://github.com/klaasnicolaas/ha_nfc_scanner) Scan
- [**30**Star][6m] [HTML] [kkthxbye-code/csgo_bugs](https://github.com/kkthxbye-code/csgo_bugs) Random CSGO stuff
- [**30**Star][2y] [C++] [kingron/s](https://github.com/kingron/s) The simple, fast, powerful SYN/TCP port scanner source code
- [**30**Star][5y] [C] [karottc/linux-virus](https://github.com/karottc/linux-virus) A simple virus of linux. It can get root and destory your system.(这是一个简单的linux下的病毒,它仅能得到root权限和感染文件并进行破坏)
- [**30**Star][6y] [PHP] [joostvanveen/php-security-pitfalls](https://github.com/joostvanveen/php-security-pitfalls) Code repository for Tutsplus course PHP Security Pitfalls
- [**30**Star][3y] [Shell] [jlevitsk/lazykali](https://github.com/jlevitsk/lazykali) A refresh of LazyKali which simplifies install of tools and configuration. Original author appears missing.
- [**30**Star][2y] [PHP] [jhaddix/seclists](https://github.com/jhaddix/seclists) SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.
-- [**30**Star][14d] [C] [jedisct1/libhydrogen](https://github.com/jedisct1/libhydrogen) A lightweight, secure, easy-to-use crypto library suitable for constrained environments.
+- [**30**Star][5m] [Java] [jenly1314/baseurlmanager](https://github.com/jenly1314/baseurlmanager)
- [**30**Star][7m] [Py] [jaky5155/cve-2019-0708-exp](https://github.com/jaky5155/cve-2019-0708-exp)
- [**30**Star][3y] [Py] [itsreallynick/office-crackros](https://github.com/itsreallynick/office-crackros) Crack your macros like the math pros.
+- [**30**Star][7m] [PS] [improsec/get-badpasswords](https://github.com/improsec/get-badpasswords) Get insights into the actual strength and quality of passwords in Active Directory.
- [**30**Star][3y] [Py] [immortal3/hidden-eye](https://github.com/immortal3/hidden-eye) Hide data into Picture
-- [**30**Star][15d] [Py] [ickerwx/pattern](https://github.com/ickerwx/pattern) Python implementation of Metasploit's pattern_create/pattern_offset.
-- [**30**Star][8y] [C] [hackedteam/driver-win64](https://github.com/hackedteam/driver-win64) Windows (64bit) agent driver
-- [**30**Star][3m] [C#] [globalpolicy/csarp-netcut](https://github.com/globalpolicy/csarp-netcut) An arpspoof program using Sharppcap
+- [**30**Star][3d] [Py] [ickerwx/pattern](https://github.com/ickerwx/pattern) Python implementation of Metasploit's pattern_create/pattern_offset.
+- [**30**Star][3y] [HTML] [h2hconference/2016](https://github.com/h2hconference/2016) H2HC 2016 Slides/Materials/Presentations
- [**30**Star][4y] [PHP] [fuzzdb-project/webshell](https://github.com/fuzzdb-project/webshell) This is a webshell open source project
-- [**30**Star][6m] [Py] [fr0gger/unprotect](https://github.com/fr0gger/unprotect) Unprotect is a python tool for parsing PE malware and extract evasion techniques.
- [**30**Star][2y] [Py] [fideliscyber/data_mining](https://github.com/fideliscyber/data_mining) Data Mining Virus Total for threat feed building
- [**30**Star][4y] [PHP] [ezyang/csrf-magic](https://github.com/ezyang/csrf-magic) Automatic CSRF protection for PHP applications
- [**30**Star][2y] [C++] [exorxw/kylin-llvm-obfuscator](https://github.com/exorxw/kylin-llvm-obfuscator) based on llvm 5.0.1 release with ollvm
- [**30**Star][6m] [JS] [eshengsky/noginx](https://github.com/eshengsky/noginx) High performance HTTP and reverse proxy server based on Node.js. 基于 Node.js 的高性能 HTTP 及反向代理服务器,类似nginx。
-- [**30**Star][6y] [PowerShell] [enigma0x3/powershell-c2](https://github.com/enigma0x3/powershell-c2)
+- [**30**Star][6y] [PS] [enigma0x3/powershell-c2](https://github.com/enigma0x3/powershell-c2)
- [**30**Star][3y] [Py] [endgameinc/instegogram](https://github.com/endgameinc/instegogram)
- [**30**Star][3y] [Py] [emersonelectricco/boomerang](https://github.com/emersonelectricco/boomerang) A tool designed for consistent and safe capture of off network web resources.
-- [**30**Star][9m] [JS] [ecleipteon/thalos](https://github.com/ecleipteon/thalos) Secure approach to secure file storage in untrusted environments.
- [**30**Star][4y] [PHP] [echo-devim/xbackdoor](https://github.com/echo-devim/xbackdoor) A tool for the persistent XSS exploitation with a focus for mobile web browsers
+- [**30**Star][11m] [Shell] [ebelties/domainwatch](https://github.com/ebelties/domainwatch) DomainWatch allows everyone to monitor domains for possible take-overs.
+- [**30**Star][1y] [dwestgard/threat_hunting_tables](https://github.com/dwestgard/threat_hunting_tables) Theat hunting notes in flat file format and mapped to MITRE's ATT&CK IDs
- [**30**Star][2y] [Py] [dqi/ctf_writeup](https://github.com/dqi/ctf_writeup)
- [**30**Star][4m] [C] [dhn/exploits](https://github.com/dhn/exploits) Some personal exploits/pocs
- [**30**Star][2y] [deroko/payloadrestrictions](https://github.com/deroko/payloadrestrictions) EMET 集成到 Win10Insider 之后改名为 PayloadRestrictions,文章分析了 PayloadRestrictions.dll 的加载过程
-- [**30**Star][1y] [PowerShell] [demonsec666/security-toolkit](https://github.com/demonsec666/security-toolkit) Security-Toolkit
+- [**30**Star][1y] [PS] [demonsec666/security-toolkit](https://github.com/demonsec666/security-toolkit) Security-Toolkit
- [**30**Star][3y] [Py] [deadbits/shells](https://github.com/deadbits/shells) collection of useful shells for penetration tests
- [**30**Star][4y] [Py] [danilovazb/sawef](https://github.com/danilovazb/sawef) Send Attack Web Forms
- [**30**Star][3m] [C] [daft-freak/sdl-emscripten](https://github.com/daft-freak/sdl-emscripten) SDL2 emscripten port, non-upstreamed changes
- [**30**Star][4m] [Py] [dado3212/polldaddyhack](https://github.com/dado3212/polldaddyhack) Exploit PollDaddy polls
-- [**30**Star][1y] [JS] [d0g3-lab/i-soon_ctf_2018](https://github.com/D0g3-Lab/i-SOON_CTF_2018) 2018 第一届安洵杯 题目环境/源码/WP
-- [**30**Star][5y] [PowerShell] [curi0usjack/activedirectory](https://github.com/curi0usjack/activedirectory) This script runs several security checks and makes modifications (with your permission) to your Active Directory domain to improve it's security posture.
-- [**30**Star][1y] [Shell] [cryptolok/ghostinthechaos](https://github.com/cryptolok/ghostinthechaos) Chaotic Crypto Stealth VPN for Anonymity and Untraceable Hacking Attacks with Linux and Android
+- [**30**Star][5y] [PS] [curi0usjack/activedirectory](https://github.com/curi0usjack/activedirectory) This script runs several security checks and makes modifications (with your permission) to your Active Directory domain to improve it's security posture.
+- [**30**Star][4y] [comeforu2012/fq_faq](https://github.com/comeforu2012/fq_faq) 翻墙常见问题
- [**30**Star][1y] [C++] [certt/1000base](https://github.com/certt/1000base) CS:GO cheat base
- [**30**Star][4y] [Py] [carstein/burp-extensions](https://github.com/carstein/burp-extensions) Automatically exported from code.google.com/p/burp-extensions
-- [**30**Star][1y] [Py] [bsvineethiitg/malwaregan](https://github.com/bsvineethiitg/malwaregan) Visualizing malware behavior, and proactive protection using GANs against zero-day attacks.
+- [**30**Star][3y] [Py] [bshastry/afl-sancov](https://github.com/bshastry/afl-sancov) AFL coverage tool using Clang SanitizerCoverage
- [**30**Star][2y] [C++] [briterator/drpdb](https://github.com/briterator/drpdb) Convert from Microsoft PDB format into a MySQL database
- [**30**Star][3y] [CSS] [botherder/flexikiller](https://github.com/botherder/flexikiller) flexikiller:移除FlexiSpy 木马(Windows/Mac)
-- [**30**Star][3m] [C#] [blackvikingpro/aresskit](https://github.com/blackvikingpro/aresskit) Next Generation Remote Administration Tool (RAT)
- [**30**Star][2y] [Py] [blackmathit/2017-11882_generator](https://github.com/blackmathit/2017-11882_generator) CVE-2017-11882 File Generator PoC
- [**30**Star][2y] [biprodeep/awesome-ml-for-cybersecurity](https://github.com/biprodeep/awesome-ml-for-cybersecurity)
- [**30**Star][3y] [Py] [bannsec/pythaw](https://github.com/bannsec/pythaw) Python Application to Reverse Freezing
-- [**30**Star][17d] [C++] [ayuto/dynamichooks](https://github.com/ayuto/dynamichooks) A C++ library to create function hooks dynamically, so you can easily embed it into other programming languages..
+- [**30**Star][1y] [Py] [bandrel/ocyara](https://github.com/bandrel/ocyara) Performs OCR on image files and scans them for matches to YARA rules
+- [**30**Star][9d] [Java] [azure/azure-cosmosdb-java](https://github.com/azure/azure-cosmosdb-java) Java Async SDK for SQL API of Azure Cosmos DB
+- [**30**Star][19d] [C++] [ayuto/dynamichooks](https://github.com/ayuto/dynamichooks) A C++ library to create function hooks dynamically, so you can easily embed it into other programming languages..
- [**30**Star][1y] [Py] [aurainfosec/xss_payloads](https://github.com/aurainfosec/xss_payloads) XSS payloads for edge cases
- [**30**Star][2y] [Py] [aurainfosec/burp-multi-browser-highlighting](https://github.com/aurainfosec/burp-multi-browser-highlighting) Highlight Burp proxy requests made by different browsers
-- [**30**Star][4y] [Py] [arthaud/formatstring](https://github.com/arthaud/formatstring) Format string exploitation helper
- [**30**Star][4m] [Shell] [armourbird/csf](https://github.com/armourbird/csf) ArmourBird CSF - Container Security Framework
- [**30**Star][2y] [Py] [andrewilyas/ens-adv-train-attack](https://github.com/andrewilyas/ens-adv-train-attack) Circumventing the defense in "Ensemble Adversarial Training: Attacks and Defenses"
-- [**30**Star][2y] [C] [alienrobotarmy/ctunnel](https://github.com/alienrobotarmy/ctunnel) ctunnel is a proxy and VPN software for tunneling TCP and UDP connections securely
- [**30**Star][11m] [PHP] [alemalakra/xwaf](https://github.com/alemalakra/xwaf) xWAF 3.0 - Free Web Application Firewall, Open-Source.
- [**30**Star][1y] [JS] [akalankauk/foxss-xss-penetration-testing-tool](https://github.com/akalankauk/foxss-xss-penetration-testing-tool) Foxss is a simple php based penetration Testing Tool.Currently it will help to find XSS vulnerability in websites.
- [**30**Star][1y] [Java] [airman604/jdbc-backdoor](https://github.com/airman604/jdbc-backdoor) A fake JDBC driver that allows OS command execution.
- [**30**Star][4y] [HTML] [a0xnirudh/webxploiter](https://github.com/a0xnirudh/webxploiter) WebXploiter - An OWASP Top 10 Security scanner !
- [**30**Star][12m] [PHP] [7hxz233/ctf](https://github.com/7hxz233/ctf) This repo stores all challenges and writeups of CTFs we have participated in
+- [**30**Star][3y] [Py] [5z1punch/oracle_java_shell_client](https://github.com/5z1punch/oracle_java_shell_client) oracle 10g sys权限通过java执行命令获得一个非交互shell的客户端,通常用于正向连接
- [**30**Star][8m] [Py] [3xp10it/xupload](https://github.com/3xp10it/xupload) A tool for automatically testing whether the upload function can upload webshell
- [**30**Star][1y] [JS] [1lastbr3ath/drmine](https://github.com/1lastbr3ath/drmine) Dr. Mine is a node script written to aid automatic detection of in-browser cryptojacking.
- [**30**Star][4y] [C++] [0xddaa/pin](https://github.com/0xddaa/pin) Use Intel Pin tools to analysis binary.
- [**30**Star][4y] [0pc0defr/yararules](https://github.com/0pc0defr/yararules) Multiple rules for yara-project for detect compiler/packer/protector
+- [**29**Star][11m] [C++] [pushkalkatara/darknet_ros](https://github.com/pushkalkatara/darknet_ros) Robotics Operating System Package for Yolo v3 based on darknet with optimized tracking using Kalman Filter and Optical Flow.
+- [**29**Star][2y] [Py] [sevro/security-utilities](https://github.com/sevro/security-utilities) Offensive Security Certified Profesional (OSCP) course scripts, some have been generalized
+- [**29**Star][6m] [Java] [portswigger/scan-check-builder](https://github.com/portswigger/scan-check-builder) Burp Bounty is a extension of Burp Suite that improve an active and passive scanner by yourself. This extension requires Burp Suite Pro.
+- [**29**Star][] [Shell] [m507/kali-tx](https://github.com/m507/kali-tx) Customized Kali Linux - Ansible playbook
+- [**29**Star][5d] [Py] [skybulk/bin2sc](https://github.com/skybulk/bin2sc) Binary to shellcode
- [**29**Star][2y] [Shell] [dreadl0ck/golang-libs](https://github.com/dreadl0ck/golang-libs) List of awesome golang repositories and useful resources for development
+- [**29**Star][1m] [fs0c131y/conpresentations](https://github.com/fs0c131y/conpresentations) Slide decks from my conference presentations
- [**29**Star][4y] [JS] [infosec-au/phishjs](https://github.com/infosec-au/phishjs) Abusing trust boundaries to deliver effective phishing payloads
- [**29**Star][3y] [JS] [mandatoryprogrammer/pers](https://github.com/mandatoryprogrammer/pers) A passive scanning tool for finding expired domain vulnerabilities while you browse.
-- [**29**Star][1y] [PowerShell] [denandz/secretserversecretstealer](https://github.com/denandz/secretserversecretstealer) Powershell script that decrypts the data stored within a Thycotic Secret Server
+- [**29**Star][2m] [C] [iaik/transientfail](https://github.com/iaik/transientfail) Website and PoC collection for transient execution attacks
+- [**29**Star][1y] [PS] [denandz/secretserversecretstealer](https://github.com/denandz/secretserversecretstealer) Powershell script that decrypts the data stored within a Thycotic Secret Server
+- [**29**Star][2m] [C#] [uknowsec/sharpeventlog](https://github.com/uknowsec/sharpeventlog) c# 读取登录过本机的登录失败或登录成功(4624,4625)的所有计算机信息,在内网渗透中快速定位运维管理人员。
- [**29**Star][1y] [Java] [guardianproject/pluto](https://github.com/guardianproject/pluto) Pluggable Library (for) Using Traffic Obfuscation: DEPRECATED - SEE LINK FOR NEW PROJECT
+- [**29**Star][7y] [PHP] [guelfoweb/wp-waf](https://github.com/guelfoweb/wp-waf) [PHP] WordPress Application Firewall
- [**29**Star][2m] [al0ne/suricata_optimize](https://github.com/al0ne/suricata_optimize) Suricata安装部署&丢包优化&性能调优&规则调整&Pfring设置
-- [**29**Star][28d] [Py] [certtools/malware_name_mapping](https://github.com/certtools/malware_name_mapping) A mapping of used malware names to commonly known family names
+- [**29**Star][4y] [Py] [yinghuocho/ghttproxy](https://github.com/yinghuocho/ghttproxy) a gevent based HTTP/HTTPS proxy with SOCKS5 forwarding.
+- [**29**Star][3y] [C] [nicehash/sgminer-gm](https://github.com/nicehash/sgminer-gm) A multi-algo GPU miner from genesismining
+- [**29**Star][30d] [Py] [certtools/malware_name_mapping](https://github.com/certtools/malware_name_mapping) A mapping of used malware names to commonly known family names
+- [**29**Star][6m] [TS] [igio90/frida-onload](https://github.com/igio90/frida-onload) Frida module to hook module initializations on android
- [**29**Star][3m] [Py] [osirislab/csaw-ctf-2019-quals](https://github.com/osirislab/csaw-ctf-2019-quals) Challenge Repository for CSAW CTF Quals 2019
+- [**29**Star][2m] [Shell] [trojan-gfw/trojan-quickstart](https://github.com/trojan-gfw/trojan-quickstart) A simple installation script for trojan server.
+- [**29**Star][1m] [Py] [lunixbochs/mpwn](https://github.com/lunixbochs/mpwn) single file ctf/exploit client library - python3, type annotated
- [**29**Star][9m] [Shell] [shadowsocks/libev](https://github.com/shadowsocks/libev) A fork of libev
- [**29**Star][4y] [PHP] [wpscanteam/vulnerablewordpress](https://github.com/wpscanteam/vulnerablewordpress)
+- [**29**Star][1y] [C] [stevemk14ebr/bf4-atombot](https://github.com/stevemk14ebr/bf4-atombot) Latest version of my personal BF4 Hack
- [**29**Star][2y] [JS] [javascript-obfuscator/obfuscator-loader](https://github.com/javascript-obfuscator/obfuscator-loader) A webpack loader for obfuscating single modules using javascript-obfuscator
- [**29**Star][1y] [C++] [stealth/libusipp](https://github.com/stealth/libusipp) unix socket interface for C++ raw IP/IP6/UDP/TCP, Layer2 etc. framework
-- [**29**Star][3y] [Go] [localtunnel/go-localtunnel](https://github.com/localtunnel/go-localtunnel) golang client library for localtunnel.me
-- [**29**Star][25d] [Go] [sadicann/andor](https://github.com/sadicann/andor) Blind SQL Injection Tool with Golang
+- [**29**Star][26d] [Py] [charlie-belmer/subdomain_recon](https://github.com/charlie-belmer/subdomain_recon) A subdomain reconnaissance scanner
+- [**29**Star][2d] [Shell] [honwen/openwrt-dnsmasq-extra](https://github.com/honwen/openwrt-dnsmasq-extra) Anti-{Pollution, ADs}-DNS for OpenWrt/LEDE
- [**29**Star][1y] [HTML] [evilbotnet/openpimap](https://github.com/evilbotnet/openpimap) Python3 and Raspberry Pi based NetFlow Traffic Analysis leveraging Shodan's API, Twilio, GeoIP, and Folium to produce interactive maps and threat intelligence data.
-- [**29**Star][4y] [PowerShell] [ahhh/wifi_trojans](https://github.com/ahhh/wifi_trojans) A collection of wireless based bind and reverse connect shells for penetration testers to use in demonstrating persistence to a network via rouge access points.
+- [**29**Star][4y] [PS] [ahhh/wifi_trojans](https://github.com/ahhh/wifi_trojans) A collection of wireless based bind and reverse connect shells for penetration testers to use in demonstrating persistence to a network via rouge access points.
- [**29**Star][3y] [Py] [6e726d/pywiwi](https://github.com/6e726d/pywiwi) Python Windows Wifi
+- [**29**Star][9d] [Py] [muteb/hoarder](https://github.com/muteb/hoarder) This script is made to collect the most valiable artifacts for foreniscs or incident reponse investigation rather than imaging the whole har drive.
+- [**29**Star][2d] [Py] [pnfsoftware/jeb-golang-analyzer](https://github.com/pnfsoftware/jeb-golang-analyzer) JEB scripts for Golang executables analysis
- [**29**Star][12m] [Vim script] [fabi1cazenave/suckless.vim](https://github.com/fabi1cazenave/suckless.vim) Tiling window management that sucks less. Inpired by wmii and i3.
- [**29**Star][8y] [sektioneins/.ipa-pie-scanner](https://github.com/sektioneins/.ipa-PIE-Scanner) Scans iPhone/iPad/iPod applications for PIE flags
-- [**29**Star][5m] [JS] [websecurity-quiz/websecurity-quiz.github.io](https://github.com/websecurity-quiz/websecurity-quiz.github.io) Test your Web Security knowledge with OWASP exam questions.
+- [**29**Star][6m] [JS] [websecurity-quiz/websecurity-quiz.github.io](https://github.com/websecurity-quiz/websecurity-quiz.github.io) Test your Web Security knowledge with OWASP exam questions.
+- [**29**Star][11m] [xymnal/wce](https://github.com/xymnal/wce) Windows Credentials Editor v1.3beta
- [**29**Star][3y] [Py] [calebstewart/peach](https://github.com/calebstewart/peach) Simple vulnerability scanning framework
+- [**29**Star][10d] [Java] [ztgreat/proxy](https://github.com/ztgreat/proxy)
+- [**29**Star][4m] [Py] [zkclown/getpwd](https://github.com/zkclown/getpwd) It's a tool which generate a dictionary from a csv containing personals informations. Generate all common passwords based on perso info. (leet transformations and combinatory processing)
- [**29**Star][3y] [C] [zhuhuibeishadiao/minivtx64](https://github.com/zhuhuibeishadiao/minivtx64) Intel Virtualization Technology demo
-- [**29**Star][9m] [Py] [zerosteiner/advancedhttpserver](https://github.com/zerosteiner/advancedhttpserver) Standalone web server built on Python's BaseHTTPServer
- [**29**Star][11m] [PHP] [zendframework/zendxml](https://github.com/zendframework/zendxml) Utility library for XML usage and best practices in PHP
- [**29**Star][3y] [Java] [yolosec/ysoserial](https://github.com/yolosec/ysoserial) A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
- [**29**Star][4y] [Py] [xyntax/zzone-transfer](https://github.com/xyntax/zzone-transfer) DNS域传送漏洞探测工具。多线程,批量探测,漏洞利用,简单网页采集。(DNS zone transfer vulnerability Vulnerability detection tool, support multithreading,batch scanning and vulnerability exploitation)
- [**29**Star][3y] [Py] [x64dbg/x64dbgbinja](https://github.com/x64dbg/x64dbgbinja) Official x64dbg plugin for Binary Ninja
+- [**29**Star][2y] [C] [wangyinuo/memdump](https://github.com/wangyinuo/memdump) android下的内存dump工具,可以dump so文件
- [**29**Star][2y] [virqdroid/android_malware](https://github.com/virqdroid/android_malware)
-- [**29**Star][2y] [C++] [vic4key/cat-driver](https://github.com/vic4key/cat-driver) CatDriver - The Kernel Mode Driver that written in C++. It is an useful driver and has the highest privilege level on the Windows platform. It can be used for Game Hacking and others.
- [**29**Star][8m] [Batchfile] [vanhauser-thc/audit_scripts](https://github.com/vanhauser-thc/audit_scripts) Scripts to gather system configuration information for offline/remote auditing
- [**29**Star][1y] [Java] [v-p-b/oracle_forms](https://github.com/v-p-b/oracle_forms) Testing tools for Oracle Forms
+- [**29**Star][3m] [C++] [usnistgov/nfiq2](https://github.com/usnistgov/nfiq2) Biometric fingerprint quality assessment tool
- [**29**Star][12m] [troyhunt/hibp-stickers](https://github.com/troyhunt/hibp-stickers) This is artwork that can be used to create stickers for Have I Been Pwned
- [**29**Star][2y] [Py] [tribalchicken/volatility-bitlocker](https://github.com/tribalchicken/volatility-bitlocker) Volatility plugin to extract BitLocker Full Volume Encryption Keys (FVEK)
-- [**29**Star][12m] [travisfsmith/mitre_attack](https://github.com/travisfsmith/mitre_attack)
- [**29**Star][3y] [Shell] [tjunxiang92/android-vulnerabilities](https://github.com/tjunxiang92/android-vulnerabilities) Covers Top 10 OWASP Mobile Vulnerabilities
- [**29**Star][2y] [Lua] [tinywan/openresty-project-v0.01](https://github.com/tinywan/openresty-project-v0.01)
- [**29**Star][3y] [HTML] [theori-io/jscript9-typedarray-cfg](https://github.com/theori-io/jscript9-typedarray-cfg) Proof-of-Concept exploit for jscript9 bug (MS16-063) with CFG Bypass
-- [**29**Star][13d] [HTML] [theforeman/foreman_openscap](https://github.com/theforeman/foreman_openscap) Foreman plug-in for displaying OpenSCAP audit reports
- [**29**Star][4y] [techbliss/yara_mailware_quick_menu_scanner](https://github.com/techbliss/yara_mailware_quick_menu_scanner) Work Fast With the pattern matching swiss knife for malware researchers.
-- [**29**Star][6m] [PHP] [teamharekaze/harekazectf2019-challenges](https://github.com/teamharekaze/harekazectf2019-challenges) Harekaze CTF 2019 challenges
- [**29**Star][1y] [C++] [tai7sy/be_fuck](https://github.com/tai7sy/be_fuck) BattlEye Emulator
- [**29**Star][6y] [Py] [syworks/wpa-bruteforcer](https://github.com/syworks/wpa-bruteforcer) Attacking WPA/WPA encrypted access point without client.
- [**29**Star][3y] [sycloversecurity/papers](https://github.com/sycloversecurity/papers) Syclover PPT
- [**29**Star][3y] [C++] [stormshield/beholder-win32](https://github.com/stormshield/beholder-win32) A sample on how to inject a DLL from a kernel driver
-- [**29**Star][6y] [JS] [spiderlabs/modsecurity-status](https://github.com/spiderlabs/modsecurity-status) ModSecurity status
- [**29**Star][1y] [slowmist/ontology-triones-service-node-security-checklist](https://github.com/slowmist/ontology-triones-service-node-security-checklist) Ontology Triones Service Node security checklist(本体北斗共识集群安全执行指南)
- [**29**Star][3y] [PHP] [slifty/tvarchive-duplitron](https://github.com/slifty/tvarchive-duplitron)
- [**29**Star][1y] [Py] [skelsec/windows_ad_dos_poc](https://github.com/skelsec/windows_ad_dos_poc) PoC code for crashing windows active directory
-- [**29**Star][3y] [PowerShell] [sekirkity/seeclrly](https://github.com/sekirkity/seeclrly) Fileless SQL Server CLR-based Custom Stored Procedure Command Execution
+- [**29**Star][11m] [Go] [shift/domain_exporter](https://github.com/shift/domain_exporter) Prometheus WHOIS domain details exporter.
+- [**29**Star][3y] [PS] [sekirkity/seeclrly](https://github.com/sekirkity/seeclrly) Fileless SQL Server CLR-based Custom Stored Procedure Command Execution
- [**29**Star][3y] [C] [securifera/cowcron](https://github.com/securifera/cowcron) Cronbased Dirty Cow Exploit
+- [**29**Star][3m] [Py] [sdnewhop/sdwan-harvester](https://github.com/sdnewhop/sdwan-harvester)
- [**29**Star][6m] [Assembly] [sdasgup3/binary-decompilation](https://github.com/sdasgup3/binary-decompilation) Extracting high level semantic information from binary code
- [**29**Star][3y] [Py] [scubsrgroup/lectures-a-weekly-information-security-knowledge-lecture-hall](https://github.com/scubsrgroup/lectures-a-weekly-information-security-knowledge-lecture-hall) “每周一讲,信息安全基础知识讲堂”由四川大学信息安全研究所漏洞挖掘和利用组同学共同创建,通过每组员每周一讲的形式展开,主要涉及信息安全的基础知识,包括windows安全、移动安全等,此外还对通过该平台对外发布一些小组的研究成果!通过知识讲座一方面对新同学起到引导作用,另一方面则是漏洞挖掘与利用研究组同学信息安全研究经验和知识的积累!
- [**29**Star][4y] [HTML] [schmalle/nodepot](https://github.com/schmalle/nodepot) A nodejs web application honeypot
@@ -14706,56 +15776,63 @@ networking routines
- [**29**Star][1y] [redteamwing/cobaltstrike_wiki](https://github.com/redteamwing/cobaltstrike_wiki) Cobalt Strike 3.12中文文档
- [**29**Star][4m] [Py] [razorpay/alohomora](https://github.com/razorpay/alohomora) alohomora is razorpay's secret distribution system
- [**29**Star][4y] [rafiot/hackedteamcerts](https://github.com/rafiot/hackedteamcerts) A bunch of certificates from the Hacking Team leak
+- [**29**Star][4y] [Makefile] [radicallyopensecurity/netaidkit](https://github.com/radicallyopensecurity/netaidkit) Standalone VPN/Tor WiFi router for journalists and activists
- [**29**Star][7m] [JS] [r00tse7en/googlehackingtool](https://github.com/r00tse7en/googlehackingtool) 在线Google Hacking 小工具
-- [**29**Star][2m] [Shell] [putsi/privatecollaborator](https://github.com/putsi/privatecollaborator) A script for installing private Burp Collaborator with free Let's Encrypt SSL-certificate
- [**29**Star][11m] [Py] [parasimpaticki/sandcastle](https://github.com/parasimpaticki/sandcastle)
-- [**29**Star][5m] [C++] [paragon-software-group/paragon_apfs_sdk_ce](https://github.com/paragon-software-group/paragon_apfs_sdk_ce) Paragon APFS SDK Free
-- [**29**Star][1y] [C++] [owodelta/coilgun](https://github.com/owodelta/coilgun) Direct WinAPI calling
- [**29**Star][12m] [opensourcehelpcommunity/contributingtomyproject](https://github.com/opensourcehelpcommunity/contributingtomyproject) Writeup from maintainers, admins, contributors on how someone can get started with their project.
-- [**29**Star][11m] [HCL] [opendevsecops/terraform-aws-scanner](https://github.com/opendevsecops/terraform-aws-scanner) Terraform module which provides easy to configure AWS environment for running automated security scanning solutions at scheduled intervals.
-- [**29**Star][11m] [C] [olehkulykov/libnhr](https://github.com/olehkulykov/libnhr) Tiny Network HTTP Request cross platform C library.
-- [**29**Star][20d] [TypeScript] [oclif/kaomoji](https://github.com/oclif/kaomoji) A simple example CLI that generates kaomoji (
+- [**29**Star][22d] [TS] [oclif/kaomoji](https://github.com/oclif/kaomoji) A simple example CLI that generates kaomoji (
- [**29**Star][3m] [Py] [obscuritylabs/pefixup](https://github.com/obscuritylabs/pefixup) PE File Blessing - To continue or not to continue
- [**29**Star][2y] [C++] [nuand/kalibrate-bladerf](https://github.com/nuand/kalibrate-bladerf) kalibrate-bladeRF
- [**29**Star][1y] [C++] [notscimmy/libinject](https://github.com/notscimmy/libinject) Currently supports injecting signed/unsigned DLLs in 64-bit processes
- [**29**Star][1y] [Go] [netxfly/docker_ssh_honeypot](https://github.com/netxfly/docker_ssh_honeypot) 安全开发教学 - 用Docker制作一个高交互ssh蜜罐
+- [**29**Star][2y] [C++] [namreeb/wowned](https://github.com/namreeb/wowned) Authentication bypass for outdated WoW emulation authentication servers
- [**29**Star][4y] [Ruby] [nahamsec/cmsfuzz](https://github.com/nahamsec/cmsfuzz)
- [**29**Star][9m] [Py] [mzfr/lswriteups](https://github.com/mzfr/lswriteups) CLI tool to get the links of original writeups from ctftime.org
-- [**29**Star][3y] [Objective-C] [mtigas/iobfs](https://github.com/mtigas/iobfs) Building obfs4proxy for Tor-enabled iOS apps.
+- [**29**Star][3y] [ObjC] [mtigas/iobfs](https://github.com/mtigas/iobfs) Building obfs4proxy for Tor-enabled iOS apps.
- [**29**Star][9m] [C] [mrmacete/r2-ios-kernelcache](https://github.com/mrmacete/r2-ios-kernelcache) Radare2 plugin to parse modern iOS 64-bit kernel caches
- [**29**Star][1y] [Assembly] [mrfearless/apiinfo-plugin-x86](https://github.com/mrfearless/apiinfo-plugin-x86) APIInfo Plugin (x86) - A Plugin For x64dbg
-- [**29**Star][1y] [Tcl] [mohemiv/tcltools](https://github.com/mohemiv/tcltools) Сollection of TCL scripts for Cisco IOS penetration testing
+- [**29**Star][8m] [Py] [mosuan/auditdpy](https://github.com/mosuan/auditdpy) !!!不建议使用了,可以使用AuditBeat!!! Linux服务器命令监控辅助脚本,ElasticSearch + Logstash + Kibana + Redis + Auditd
- [**29**Star][2y] [C++] [mogongtech/ransomdetection](https://github.com/mogongtech/ransomdetection) 基于行为的Ransomware检测原型
-- [**29**Star][2y] [C#] [modzero/mod0umleitung](https://github.com/modzero/mod0umleitung) modzero DNS Masquerading Server for Windows
- [**29**Star][4y] [C] [mncoppola/stringipc](https://github.com/mncoppola/stringipc) CSAW CTF 2015 Linux kernel exploitation challenge
- [**29**Star][2m] [C] [mitrecnd/htpy](https://github.com/mitrecnd/htpy) Python bindings to libhtp
- [**29**Star][2y] [misterch0c/solidlity-vulnerable](https://github.com/misterch0c/solidlity-vulnerable) Vulnerable smart contracts
-- [**29**Star][14d] [Shell] [mainframed/enumeration](https://github.com/mainframed/enumeration) PoC REXX Script to Help with z/OS System enumeration via OMVS/TSO/JCL.
+- [**29**Star][12m] [Java] [mhatta/orchid](https://github.com/mhatta/orchid) A Tor client implementation and library written in pure Java
+- [**29**Star][4m] [JS] [mephistools/diablo2-protocol](https://github.com/mephistools/diablo2-protocol) Diablo 2 network protocol
+- [**29**Star][5m] [C++] [marakew/syser](https://github.com/marakew/syser) syser debugger x32/x64 ring3
+- [**29**Star][16d] [Shell] [mainframed/enumeration](https://github.com/mainframed/enumeration) PoC REXX Script to Help with z/OS System enumeration via OMVS/TSO/JCL.
+- [**29**Star][2y] [Go] [madnikulin50/gordp](https://github.com/madnikulin50/gordp) Rdp client on pure GoLang
- [**29**Star][2y] [Py] [luffin/cve-2017-10271](https://github.com/luffin/cve-2017-10271) CVE-2017-10271 POC
+- [**29**Star][6m] [Java] [ludovicianul/geolog](https://github.com/ludovicianul/geolog) Geolocation for SSH brute force attacks
- [**29**Star][1m] [Py] [kudelskisecurity/fumblechain](https://github.com/kudelskisecurity/fumblechain) A Purposefully Vulnerable Blockchain
-- [**29**Star][2m] [C++] [klaasnicolaas/ha_nfc_scanner](https://github.com/klaasnicolaas/ha_nfc_scanner) Scan
+- [**29**Star][2y] [Py] [kerrigan29a/idapython_virtualenv](https://github.com/kerrigan29a/idapython_virtualenv) Enable Virtualenv or Conda in IDAPython
- [**29**Star][2y] [Ruby] [jtdowney/private_address_check](https://github.com/jtdowney/private_address_check) Ruby gem to help prevent Server Side Request Forgery
-- [**29**Star][9m] [Java] [jruby/jruby-openssl](https://github.com/jruby/jruby-openssl) JRuby's OpenSSL gem
+- [**29**Star][10m] [Java] [jruby/jruby-openssl](https://github.com/jruby/jruby-openssl) JRuby's OpenSSL gem
- [**29**Star][4y] [Py] [joychou93/md5-extension-attack](https://github.com/joychou93/md5-extension-attack) MD5长度扩展攻击
- [**29**Star][2y] [C] [jnastarot/native_peloader](https://github.com/jnastarot/native_peloader) PE(compressed dll) memory loader using nt api
- [**29**Star][8m] [Go] [jimyj/scanproxy](https://github.com/jimyj/scanproxy) scanproxy is auto scan IP & port,and check that is proxy if port is open...(scanproxy是一个自动扫描端口,并且检测是否是代理服务器的程序)
-- [**29**Star][5m] [Java] [jenly1314/baseurlmanager](https://github.com/jenly1314/baseurlmanager)
-- [**29**Star][2y] [Swift] [jeanshuang/potatso](https://github.com/jeanshuang/potatso) 适配Xcode9.3 iOS11.3 Swift3.3编译通过。 (unmaintained) Potatso is an iOS client that implements Shadowsocks proxy with the leverage of NetworkExtension framework in iOS 9.
+- [**29**Star][1y] [Shell] [jaybrown/macos-security-updates](https://github.com/jaybrown/macos-security-updates) Notifies the user of updates to macOS Security components like Gatekeeper and XProtect
- [**29**Star][5m] [Py] [jacobsoo/threathunting](https://github.com/jacobsoo/threathunting) This is just my personal compilation of APT malware from whitepaper releases, documents and malware samples from my personal research.
+- [**29**Star][1y] [Py] [iweizime/dbghider](https://github.com/iweizime/dbghider) hide IDA Winddows debugger from processes.
- [**29**Star][4m] [Py] [intezer/mop](https://github.com/intezer/mop) MoP - "Master of Puppets" - Advanced malware tracking framework
- [**29**Star][9m] [Py] [inishantgrover/shodmon](https://github.com/inishantgrover/shodmon) The Shodan monitoring tools allows you to monitor shodan listed servers basis on the filter you provided
-- [**29**Star][2y] [PowerShell] [illusivenetworks-labs/get-networkconnection](https://github.com/illusivenetworks-labs/get-networkconnection) Edited version of Lee Christensen's Get-NetworkConnection which includes timestamp for each network connection
+- [**29**Star][2y] [PS] [illusivenetworks-labs/get-networkconnection](https://github.com/illusivenetworks-labs/get-networkconnection) Edited version of Lee Christensen's Get-NetworkConnection which includes timestamp for each network connection
+- [**29**Star][7m] [Java] [hvqzao/burp-flow](https://github.com/hvqzao/burp-flow) Extension providing view with filtering capabilities for both complete and incomplete requests from all burp tools.
- [**29**Star][3y] [C] [hklcf/mirai](https://github.com/hklcf/mirai) Source code for the Mirai botnet - Not going anywhere anytime soon
- [**29**Star][5y] [Py] [hiddenillusion/filelookup](https://github.com/hiddenillusion/filelookup) Quick & dirty script to get info on a file from online resources (VirusTotal, Team Cymru, Shadow Server etc.)
- [**29**Star][1y] [Py] [he1m4n6a/dcweb](https://github.com/he1m4n6a/dcweb) 三方依赖库扫描系统
- [**29**Star][3m] [MATLAB] [hcab14/tdoa](https://github.com/hcab14/tdoa) Time difference of arrival (TDoA) multi-lateration
- [**29**Star][5y] [Py] [haxorthematrix/loc-nogps](https://github.com/haxorthematrix/loc-nogps)
-- [**29**Star][5m] [hahwul/xss-payload-without-anything](https://github.com/hahwul/xss-payload-without-anything) XSS Payload without Anything.
+- [**29**Star][6m] [hahwul/xss-payload-without-anything](https://github.com/hahwul/xss-payload-without-anything) XSS Payload without Anything.
- [**29**Star][8m] [Py] [ha71/pywhatcms](https://github.com/ha71/pywhatcms) Unofficial WhatCMS API package
+- [**29**Star][4m] [Shell] [gushmazuko/metasploit_in_termux](https://github.com/gushmazuko/metasploit_in_termux) Install Metasploit Framework 5 in Termux
+- [**29**Star][10m] [Jupyter Notebook] [gcrahay/otx_misp](https://github.com/gcrahay/otx_misp) Imports Alienvault OTX pulses to a MISP instance
- [**29**Star][2y] [Lua] [foxmole/pwnadventure3](https://github.com/foxmole/pwnadventure3) Blog series about Pwn Adventure 3
-- [**29**Star][7m] [Py] [fkie-cad/luckycat](https://github.com/fkie-cad/luckycat) A distributed fuzzing management framework
+- [**29**Star][5m] [PHP] [fdciabdul/fbchecker](https://github.com/fdciabdul/fbchecker) Facebook Mass Account Checker
- [**29**Star][3m] [PHP] [eymengunay/eohoneypotbundle](https://github.com/eymengunay/eohoneypotbundle) Honeypot type for Symfony forms
+- [**29**Star][2y] [Py] [sevro/security-utilities](https://github.com/sevro/security-utilities) Offensive Security Certified Profesional (OSCP) course scripts, some have been generalized
- [**29**Star][1y] [Py] [ernw/binja-ipython](https://github.com/ernw/binja-ipython) A plugin to integrate an IPython kernel into Binary Ninja.
+- [**29**Star][2d] [Py] [entynetproject/proton](https://github.com/entynetproject/proton) Proton Framework is a Windows post exploitation framework similar to other penetration testing tools such as Meterpreter and Powershell Invader Framework. The major difference is that the Proton Framework does most of its operations using Windows Script Host (a.k.a. JScript/VBScript), with compatibility in the core to support a default installat…
+- [**29**Star][1y] [C] [dro/uac-launchinf-poc](https://github.com/dro/uac-launchinf-poc) Windows 10 UAC bypass PoC using LaunchInfSection
- [**29**Star][2y] [Ruby] [drewlong/vbully](https://github.com/drewlong/vbully) 3.8.x - 4.2.3 ForumRunner (vBulletin) exploit Proof of Concept
- [**29**Star][5y] [Py] [donctl/sandy](https://github.com/donctl/sandy) Release of the sandy framework.
- [**29**Star][10y] [C] [dmolnar/smartfuzz](https://github.com/dmolnar/smartfuzz) Valgrind extension for whitebox fuzz testing
@@ -14766,27 +15843,29 @@ networking routines
- [**29**Star][2y] [Shell] [cyb3r3x3r/kalilinuxnethunter-termux](https://github.com/cyb3r3x3r/kalilinuxnethunter-termux) Install Kali Linux Nethunter in termux - orginal by
- [**29**Star][5m] [Go] [cryptogenic/rebot](https://github.com/cryptogenic/rebot) A discord bot for reverse engineers and exploit developers.
- [**29**Star][7m] [Java] [cristianturetta/mad-spy](https://github.com/cristianturetta/mad-spy) We developed a malware for educational purposes. In particular, our goal is to provide a PoC of what is known as a Repacking attack, a known technique widely used by malware cybercrooks to trojanize android apps. The answer to solve this particular goal boils down in the simplicity of APK decompiling and smali code injection.
+- [**29**Star][1y] [Go] [cretz/tor-dht-poc](https://github.com/cretz/tor-dht-poc) Anonymous DHT Accessible from Executable or Tor-Enabled Browser
- [**29**Star][5y] [C] [conorpp/mitm-http-proxy](https://github.com/conorpp/mitm-http-proxy) A simple, low level http/https proxy server with MiTM pranking features.
- [**29**Star][5y] [C++] [codeliker/mymig_meterpreter](https://github.com/codeliker/mymig_meterpreter) mig meterpreter stager
- [**29**Star][7m] [Shell] [chunkingz/vmr-mdk-k2-2017r-012x4](https://github.com/chunkingz/vmr-mdk-k2-2017r-012x4) VMR-MDK is a script/tool for hacking wps wireless networks
- [**29**Star][2y] [Shell] [chichou/grab.js](https://github.com/chichou/grab.js) fast TCP banner grabbing with node.js
- [**29**Star][5m] [C++] [celestialpaler/cthackframework](https://github.com/celestialpaler/cthackframework) 游戏外挂通用框架,快速构建外挂程序。
- [**29**Star][6y] [Py] [catalyst256/sniffmypackets](https://github.com/catalyst256/sniffmypackets) Canari local transforms pcap file analysis
+- [**29**Star][1y] [C] [calebfenton/native-harness-target](https://github.com/calebfenton/native-harness-target) Android app for demonstrating native library harnessing
- [**29**Star][2m] [Py] [bugbounty-site/calexe](https://github.com/bugbounty-site/calexe) Calendar Exploit.
-- [**29**Star][3y] [Py] [bshastry/afl-sancov](https://github.com/bshastry/afl-sancov) AFL coverage tool using Clang SanitizerCoverage
-- [**29**Star][7m] [C] [br101/libuwifi](https://github.com/br101/libuwifi) Userspace Wifi Library
+- [**29**Star][2y] [Go] [bramp/myip](https://github.com/bramp/myip) (A better) What's My IP Address web application
+- [**29**Star][6d] [C] [br101/libuwifi](https://github.com/br101/libuwifi) Userspace Wifi Library
- [**29**Star][3y] [Assembly] [borjamerino/plcinjector](https://github.com/borjamerino/plcinjector) Modbus stager in assembly and some scripts to upload/download data to the holding register of a PLC
- [**29**Star][4y] [Go] [bnagy/afl-launch](https://github.com/bnagy/afl-launch) Boring tool to launch multiple afl-fuzz instances
- [**29**Star][2y] [Shell] [bgeesaman/subpath-exploit](https://github.com/bgeesaman/subpath-exploit) Writeup of CVE-2017-1002101 with sample "exploit"/escape
- [**29**Star][2y] [Java] [barro/java-afl](https://github.com/barro/java-afl) Binary rewriting approach with fork server support to fuzz Java applications with afl-fuzz.
-- [**29**Star][1y] [Py] [bandrel/ocyara](https://github.com/bandrel/ocyara) Performs OCR on image files and scans them for matches to YARA rules
-- [**29**Star][7d] [Java] [azure/azure-cosmosdb-java](https://github.com/azure/azure-cosmosdb-java) Java Async SDK for SQL API of Azure Cosmos DB
- [**29**Star][2y] [C#] [aviavni/nativeleakdetector](https://github.com/aviavni/nativeleakdetector) Win32 memory leak detector with ETW
- [**29**Star][3y] [HTML] [auth0-blog/polymer-with-jwt-api](https://github.com/auth0-blog/polymer-with-jwt-api) Build an app using web components and Polymer with an API and JSON Web Token authentication.
- [**29**Star][6y] [atlantis2013/evasion-tools](https://github.com/atlantis2013/evasion-tools) Anti-technique Codes, Detection of Anti-technique codes
- [**29**Star][6y] [Shell] [artemdinaburg/optimizevm](https://github.com/artemdinaburg/optimizevm) Make Windows VMs Faster
- [**29**Star][3y] [JS] [arlolra/ctypes-otr](https://github.com/arlolra/ctypes-otr) js-ctypes wrapper for libotr
+- [**29**Star][2y] [C] [arduinohannover/zpb30a1_firmware](https://github.com/arduinohannover/zpb30a1_firmware) Open-Source firmware for the ZPB30A1 electronic load (WIP)
- [**29**Star][4y] [C] [android-rooting-tools/libkallsyms](https://github.com/android-rooting-tools/libkallsyms) Get symbol address and name from tables for kallsyms
+- [**29**Star][2m] [Go] [ammario/ipisp](https://github.com/ammario/ipisp) Query IP address network information in Go
- [**29**Star][4y] [Shell] [alexoslabs/httpsscan](https://github.com/alexoslabs/httpsscan) Shell script for testing the SSL/TLS Protocols
- [**29**Star][2y] [C] [alex9191/netdriver](https://github.com/alex9191/netdriver) kernel-mode TDI client which can send and receive HTTP requests
- [**29**Star][5m] [Py] [alberties/ghostfuscator](https://github.com/alberties/ghostfuscator) The Python Password-Protected Obfuscator
@@ -14798,63 +15877,93 @@ networking routines
- [**29**Star][7y] [C++] [0xdabbad00/openhips](https://github.com/0xdabbad00/openhips) OpenHIPS prevents exploitation of Windows systems
- [**29**Star][2y] [0x90/nrf24-arsenal](https://github.com/0x90/nrf24-arsenal) Hacking tools and scripts for nRF24LU1+
- [**29**Star][10m] [c++] [camp0/aiengine](https://bitbucket.org/camp0/aiengine)
+- [**28**Star][2m] [Shell] [idkiro/ssmgr-install](https://github.com/idkiro/ssmgr-install) shadowsocks-manager 前端+后端+魔改BBR一键部署脚本
+- [**28**Star][2y] [C] [zhou0/mysocks](https://github.com/zhou0/mysocks) The cross-platform shadowsocks client and server with minimum dependencies.
+- [**28**Star][2m] [C++] [bennetthardwick/darknet.js](https://github.com/bennetthardwick/darknet.js) A NodeJS wrapper of pjreddie's darknet / yolo.
+- [**28**Star][10m] [Jupyter Notebook] [danielgatis/darknetpy](https://github.com/danielgatis/darknetpy) darknetpy is a simple binding for darknet's yolo detector
+- [**28**Star][2y] [Py] [portswigger/wordpress-scanner](https://github.com/portswigger/wordpress-scanner) Find known vulnerabilities in WordPress plugins and themes using Burp Suite proxy. WPScan like plugin for Burp.
+- [**28**Star][2y] [C] [lincolnhard/facenet-darknet-inference](https://github.com/lincolnhard/facenet-darknet-inference) Face recognition using facenet
+- [**28**Star][10d] [Shell] [yaleh/kcp-shadowsocks-server](https://github.com/yaleh/kcp-shadowsocks-server) Docker image of a server with KCP tunnel and Shadowsocks.
+- [**28**Star][3y] [iqiancheng/shadowsocks-awesome](https://github.com/iqiancheng/shadowsocks-awesome) 一个实时更新的实用gfwlist清单。用于ss的PAC自动分流。
+- [**28**Star][12d] [C] [tidesec/peach_fuzzing](https://github.com/tidesec/peach_fuzzing) 在学习使用peach进行模糊测试时,搜集到的一些不错的资料,以及配套的一些软件或脚本。
+- [**28**Star][2m] [bishopfox/cyberdic](https://github.com/bishopfox/cyberdic) An auxiliary spellcheck dictionary that corresponds with the Bishop Fox Cybersecurity Style Guide
- [**28**Star][7y] [C] [jonathansalwan/vmndh-2k12](https://github.com/jonathansalwan/vmndh-2k12) Emulator, debugger and compiler for the NDH architecture - Emulator for CTF NDH 2k12
- [**28**Star][7m] [C++] [frida/v8](https://github.com/frida/v8) Frida depends on V8
- [**28**Star][2y] [C] [shadowsocksr-live/ssrdroid](https://github.com/shadowsocksr-live/ssrdroid) ShadowsocksR (SSR) for Android
- [**28**Star][1y] [C++] [lordnoteworthy/windows-exploitation](https://github.com/lordnoteworthy/windows-exploitation) My notes while studying Windows exploitation
+- [**28**Star][11m] [HTML] [twintproject/twint-explorer](https://github.com/twintproject/twint-explorer) TWINT Graph Visualizer
- [**28**Star][4m] [Java] [dineshshetty/fridaloader](https://github.com/dineshshetty/fridaloader) A quick and dirty app to download and launch Frida on Genymotion
- [**28**Star][11m] [Shell] [angorafuzzer/fuzzingrealprogrambenchstatistics](https://github.com/angorafuzzer/fuzzingrealprogrambenchstatistics) List the real world programs evaluated in fuzzing papers.
-- [**28**Star][1m] [Py] [lunixbochs/mpwn](https://github.com/lunixbochs/mpwn) single file ctf/exploit client library - python3, type annotated
+- [**28**Star][4y] [Swift] [urinx/device-9](https://github.com/urinx/device-9) 实时监测网速,IP,内存大小,温度等设备信息并显示在通知中心的 iOS App
+- [**28**Star][9y] [Py] [spiderlabs/deblaze](https://github.com/spiderlabs/deblaze) Performs method enumeration and interrogation against flash remoting end points.
+- [**28**Star][1y] [Ruby] [igrigorik/em-socksify](https://github.com/igrigorik/em-socksify) Transparent proxy support for any EventMachine protocol
- [**28**Star][12m] [Py] [wyatu/pentestscripts](https://github.com/wyatu/pentestscripts) Some scripts for penetration testing
-- [**28**Star][24d] [C] [kasif-dekel/whatsapp-rce-patched](https://github.com/kasif-dekel/whatsapp-rce-patched) cve-2019-11931
-- [**28**Star][16d] [Py] [kkevsterrr/geneva](https://github.com/kkevsterrr/geneva) client-side censorship evasion engine from the Geneva AI
-- [**28**Star][2y] [C++] [hsluoyz/rmtsvc](https://github.com/hsluoyz/rmtsvc) A web-based remote desktop & control service for Windows.
+- [**28**Star][3y] [HTML] [cryptogenic/ps4console](https://github.com/cryptogenic/ps4console) A successor to PS4Playground, emulates a shell-like environment to interact with the PlayStation 4.
+- [**28**Star][2m] [Rust] [timvisee/pixelpwnr](https://github.com/timvisee/pixelpwnr)
+- [**28**Star][3y] [Java] [tribler/app-to-app-communicator](https://github.com/tribler/app-to-app-communicator) Create an attack-resilient network out of smartphones, no-PC-needed (proof of concept)
+- [**28**Star][26d] [C] [kasif-dekel/whatsapp-rce-patched](https://github.com/kasif-dekel/whatsapp-rce-patched) cve-2019-11931
- [**28**Star][1m] [Assembly] [vxunderground/family](https://github.com/vxunderground/family) Collection of Malware source code by Language and Family.
-- [**28**Star][29d] [Shell] [privacyint/appdata-environment-desktop](https://github.com/privacyint/appdata-environment-desktop) A selection of script and the manual for Privacy International's data interception environment
+- [**28**Star][1m] [Shell] [privacyint/appdata-environment-desktop](https://github.com/privacyint/appdata-environment-desktop) A selection of script and the manual for Privacy International's data interception environment
- [**28**Star][2m] [JS] [benoitsevens/applying-ttd-to-malware-analysis](https://github.com/benoitsevens/applying-ttd-to-malware-analysis) Resources for the workshop titled "Repacking the unpacker: Applying Time Travel Debugging to malware analysis", given at HackLu 2019
- [**28**Star][4y] [C] [scallywag/nbtscan](https://github.com/scallywag/nbtscan) NetBIOS scanning tool. Currently segfaults!
- [**28**Star][1m] [C#] [cobbr/c2bridge](https://github.com/cobbr/c2bridge) C2Bridges allow developers to create new custom communication protocols and quickly utilize them within Covenant.
+- [**28**Star][2m] [Py] [x1tan/cve-2019-13025](https://github.com/x1tan/cve-2019-13025) Connect Box CH7465LG (CVE-2019-13025)
+- [**28**Star][2y] [Py] [vpnguy-zz/handyheaderhacker](https://github.com/vpnguy-zz/HandyHeaderHacker) Examine HTTP response headers for common security issues
+- [**28**Star][7d] [C#] [geta/404handler](https://github.com/Geta/404handler) The popular 404 handler for EPiServer, enabling better control over your 404 page in addition to allowing redirects for old urls that no longer works.
- [**28**Star][4y] [Ruby] [praetorian-code/dert](https://github.com/praetorian-code/dert) DNS Enumeration and Reconnaissance Tool
- [**28**Star][3y] [Py] [zonksec/weblogic-serialization-exploit-updated](https://github.com/zonksec/weblogic-serialization-exploit-updated) Updated the FoxGlove Security WebLogic serialization exploit.
- [**28**Star][5y] [Py] [zombiesam/wikigen](https://github.com/zombiesam/wikigen) A script to generate wordlists out of wikipedia pages. Should support most of the subdomains. Some ugly code may occur
- [**28**Star][1y] [Py] [zhanghaoyil/hawk-i](https://github.com/zhanghaoyil/hawk-i) Automatic extract anomalious Web attack Payloads with Unsupervised Machine Learning algorithms
+- [**28**Star][3y] [C] [zenware/bluemaho](https://github.com/zenware/bluemaho) BlueMaho is GUI-shell (interface) for suite of tools for testing security of bluetooth devices. It is freeware, opensource, written on python, uses wxPyhon. It can be used for testing BT-devices for known vulnerabilities and major thing to do – testing to find unknown vulns. Also it can form nice statistics.
- [**28**Star][4m] [Java] [zaproxy/zap-api-java](https://github.com/zaproxy/zap-api-java) OWASP ZAP Java API
- [**28**Star][8y] [JS] [zanelackey/projects](https://github.com/zanelackey/projects)
+- [**28**Star][8d] [C++] [z4yx/supervisor-mips32](https://github.com/z4yx/supervisor-mips32) 计算机组成原理课程32位监控程序
+- [**28**Star][10m] [Shell] [yulewang/brook](https://github.com/yulewang/brook) Brook 端口转发 一键管理脚本修改版 增加了对动态域名的支持 基于逗比版本修改而来
- [**28**Star][1y] [C] [yifiheaven/magicwall](https://github.com/yifiheaven/magicwall)
- [**28**Star][5y] [C++] [yawning/obfsclient](https://github.com/yawning/obfsclient) A C++11 obfs2/3 Tor managed pluggable transport client
- [**28**Star][1y] [Py] [xyzz/vita-ida-physdump](https://github.com/xyzz/vita-ida-physdump) help with physical memory dump reversing
- [**28**Star][8m] [Py] [xayon/pyrcrack](https://github.com/xayon/pyrcrack) Python Aircrack-ng bindings
- [**28**Star][2y] [C] [x64dbg/slothbp](https://github.com/x64dbg/slothbp) Collaborative Breakpoint Manager for x64dbg.
-- [**28**Star][12m] [PowerShell] [wuseman/wloader](https://github.com/wuseman/wloader) Windows 10 PRO Activator - No more backdoors via loaders from China and neither you will need any crack anymore that is valid for a week or two. This is script is written for powershell/cmd. This script will also removing all bloatware from Windows 10. Edit the script after your needs.
+- [**28**Star][2y] [C] [x64dbg/plugintemplate](https://github.com/x64dbg/plugintemplate) Plugin template for x64dbg. Releases:
- [**28**Star][12m] [Jupyter Notebook] [wlmeng11/rtl-ultrasound](https://github.com/wlmeng11/rtl-ultrasound)
- [**28**Star][1y] [JS] [webpack/source-list-map](https://github.com/webpack/source-list-map) Fast line to line SourceMap generator.
- [**28**Star][2y] [C] [wanttobeno/win64driverstudy_src](https://github.com/wanttobeno/win64driverstudy_src) WIN64驱动编程基础教程-源码 作者:胡文亮
-- [**28**Star][3m] [SystemVerilog] [wangxuan95/ustc-rvsoc](https://github.com/wangxuan95/ustc-rvsoc) 一个用 SystemVerilog 编写的,RISC-V 架构的 CPU + SoC
- [**28**Star][1y] [JS] [wahengchang/nodejs-security-must-know](https://github.com/wahengchang/nodejs-security-must-know) It is a note about security on nodejs
- [**28**Star][3y] [C] [vusec/typearmor](https://github.com/vusec/typearmor) 缓解高级代码重用攻击。论文“一个艰难的决定:在二进制级别缓解高级的代码重用攻击”的具体实现。
- [**28**Star][9m] [PHP] [visualbasic6/google-drive-exploit](https://github.com/visualbasic6/google-drive-exploit) active exploit leaking full names associated with some email addresses including but not limited to gmail
- [**28**Star][5m] [JS] [virink/as_plugin_godofhacker](https://github.com/virink/as_plugin_godofhacker) 黑客神器,谁用谁知道!
- [**28**Star][2y] [JS] [versprite/engage](https://github.com/versprite/engage) Tools and Materials for the Frida Engage Blog Series
- [**28**Star][6y] [MATLAB] [vedaldi/visualindex](https://github.com/vedaldi/visualindex) A simple demo of visual object matching using VLFeat
+- [**28**Star][3y] [Py] [v1cker/poc-exp](https://github.com/v1cker/poc-exp)
- [**28**Star][3y] [uber/bug-bounty-page](https://github.com/uber/bug-bounty-page) A repo to make our changes more transparent to bug bounty researchers in our program (so they can see commits, etc).
- [**28**Star][2y] [PHP] [tuupola/whereami](https://github.com/tuupola/whereami) Common PHP interface for wifi positioning services
- [**28**Star][2m] [Shell] [tradichel/awssecurityautomationframework](https://github.com/tradichel/awssecurityautomationframework) Framework for reviewing and responding to events in AWS Flow Logs using Lambda Function
-- [**28**Star][5m] [Go] [tomnomnom/rawhttp](https://github.com/tomnomnom/rawhttp) A Go library for making HTTP requests with complete control
+- [**28**Star][3y] [Py] [tr3jer/autohookspider](https://github.com/tr3jer/autohookspider) 将自动爬虫的结果判断是否属于hooks,并不断抓取url爬啊爬。
+- [**28**Star][2y] [Makefile] [torbsd/openbsd-ports](https://github.com/torbsd/openbsd-ports) OpenBSD ports under development by TDP
- [**28**Star][1y] [Shell] [themiddleblue/dnsenum](https://github.com/themiddleblue/dnsenum) Bash script for DNS Enumeration.
+- [**28**Star][15d] [HTML] [theforeman/foreman_openscap](https://github.com/theforeman/foreman_openscap) Foreman plug-in for displaying OpenSCAP audit reports
- [**28**Star][5m] [C++] [thalium/idatag](https://github.com/thalium/idatag) IDA plugin to explore and browse tags
+- [**28**Star][3m] [Go] [telanflow/dictgenerate](https://github.com/telanflow/dictgenerate) 使用Go语言编写的社工字典生成器(The social engineering dictionary generator written by Go)
- [**28**Star][3y] [PHP] [talhasch/php-httpstat](https://github.com/talhasch/php-httpstat) PHP implementation of
- [**28**Star][3y] [Shell] [superkojiman/scanreport](https://github.com/superkojiman/scanreport) Take output from nmap and turn it into something easily searchable and readable.
-- [**28**Star][11m] [Go] [shift/domain_exporter](https://github.com/shift/domain_exporter) Prometheus WHOIS domain details exporter.
+- [**28**Star][7m] [Shell] [sukkaw/zsh-proxy](https://github.com/sukkaw/zsh-proxy)
+- [**28**Star][11m] [C] [sqdwr/loadimageinject](https://github.com/sqdwr/loadimageinject) LoadImage Routine Inject Dll
+- [**28**Star][8d] [Py] [sophoslabs/webassembly](https://github.com/sophoslabs/webassembly) Research on WebAssembly
+- [**28**Star][5m] [JS] [skateman/purr](https://github.com/skateman/purr) Smuggle TCP connections through HTTP
+- [**28**Star][10m] [JS] [shanselman/daskeyboard-q-nightscout](https://github.com/shanselman/daskeyboard-q-nightscout) Hooking up the DasKeyboard Q REST API to change the key colors in response to diabetic's glucose from NightScout
- [**28**Star][3y] [Shell] [securitygeneration/honeyport](https://github.com/securitygeneration/honeyport) Bash and Python Honeyport scripts
- [**28**Star][2y] [secarmalabs/iotchecklist](https://github.com/secarmalabs/iotchecklist) Baseline IoT security checklist. Consider security as early in development as possible and reap the rewards.
-- [**28**Star][3m] [Py] [sdnewhop/sdwan-harvester](https://github.com/sdnewhop/sdwan-harvester)
+- [**28**Star][2y] [Go] [sakeven/mika](https://github.com/sakeven/mika) Mika - A Secure Proxy
- [**28**Star][11m] [Shell] [rokasurbelis/system_safety_test](https://github.com/rokasurbelis/system_safety_test)
- [**28**Star][2y] [Ruby] [richardc/puppet-datacat](https://github.com/richardc/puppet-datacat) Data composition types for puppet
- [**28**Star][5y] [C] [rfdslabs/mimosa-framework](https://github.com/rfdslabs/mimosa-framework) Mimosa Framework to abuse EPC functionality on CISCO Routers.
+- [**28**Star][6d] [C++] [regehr/opt-fuzz](https://github.com/regehr/opt-fuzz) llvm opt fuzzer and bounded exhaustive test generator
- [**28**Star][3y] [Shell] [rccoder/awesome-shadowsocks-qt5-installation-on-debian](https://github.com/rccoder/awesome-shadowsocks-qt5-installation-on-debian) Installation Script For shadowsocks-Qt5 on Debian
+- [**28**Star][10m] [Go] [razc411/gobd](https://github.com/razc411/gobd) A Golang covert backdoor using raw sockets.
+- [**28**Star][5d] [C] [rapid7/mimikatz](https://github.com/rapid7/mimikatz) A little tool to play with Windows security
- [**28**Star][1m] [Py] [qsecure-labs/overlord](https://github.com/qsecure-labs/overlord) Overlord - Red Teaming Infrastructure Automation
- [**28**Star][4y] [CSS] [qll/attacking-browser-extensions](https://github.com/qll/attacking-browser-extensions) Test Suite and exemplary extensions of the "Attacking Browser Extensions" master's thesis
-- [**28**Star][4y] [C] [qianshanhai/q-shell](https://github.com/qianshanhai/q-shell) Unix remote login tool, rootkit shell tool
+- [**28**Star][5y] [C] [qianshanhai/q-shell](https://github.com/qianshanhai/q-shell) Unix remote login tool, rootkit shell tool
- [**28**Star][6y] [Java] [pwntester/springbreaker](https://github.com/pwntester/springbreaker) Exploit PoC for Spring RCE issue (CVE-2011-2894)
- [**28**Star][2y] [Py] [pwn2winctf/2017](https://github.com/pwn2winctf/2017) Pwn2Win CTF 2017
- [**28**Star][9m] [JS] [puritys/chromesecureshell](https://github.com/puritys/chromesecureshell) Hack chrome secure shell for improving usability
@@ -14866,42 +15975,54 @@ networking routines
- [**28**Star][6y] [C++] [oct0xor/deci3dbg](https://github.com/oct0xor/deci3dbg) Ida Pro debugger module for Playstation 3
- [**28**Star][8m] [C#] [nyan-x-cat/dropless-malware](https://github.com/nyan-x-cat/dropless-malware) Download a payload and make it run from registry without droppng.
- [**28**Star][4y] [Java] [nvisium/moneyx](https://github.com/nvisium/moneyx) MoneyX is an intentionally vulnerable JSP application used for training developers in application security concepts.
-- [**28**Star][3y] [nextco/android-decompiler](https://github.com/nextco/android-decompiler) A hight quality list of tools to reverse engineering code from android.
- [**28**Star][3y] [Py] [netspi/asa_tools](https://github.com/netspi/asa_tools) Verification tools for CVE-2016-1287
- [**28**Star][2y] [C++] [nervous/greenkit-rootkit](https://github.com/nervous/greenkit-rootkit) GreenKit is an userland rootkit hiding its own files and mining bitcoins on compromised computers. Do /NOT/ download or use this rootkit for malicious purposes. Use it only for your own knowledge.
- [**28**Star][2y] [Py] [ne0nd0g/guinevere](https://github.com/ne0nd0g/guinevere) Automated Security Assessment Reporting Tool
+- [**28**Star][1m] [nats-io/nats-general](https://github.com/nats-io/nats-general) General NATS Information
- [**28**Star][1y] [C] [mxmssh/netafl](https://github.com/mxmssh/netafl) winAFL patch to enable network-based apps fuzzing
+- [**28**Star][8m] [Py] [mvrcrypto/bitp0wn](https://github.com/mvrcrypto/bitp0wn) Algorithms to re-compute a private key, to fake signatures and some other funny things with Bitcoin.
+- [**28**Star][3y] [Py] [mvondracek/wifimitm](https://github.com/mvondracek/wifimitm) Automation of MitM Attack on Wi-Fi Networks
- [**28**Star][4y] [ms3fgx/tsatool](https://github.com/ms3fgx/tsatool) 3D printed TSA keys in a pocketable "Swiss Army" style tool.
-- [**28**Star][11m] [C] [mrmacete/r2scripts](https://github.com/mrmacete/r2scripts) Collection of scripts for radare2
-- [**28**Star][7d] [HTML] [misp/misp-rfc](https://github.com/misp/misp-rfc) Specifications used in the MISP project including MISP core format
+- [**28**Star][7d] [Py] [mrwn007/m3m0](https://github.com/mrwn007/m3m0) M3m0 Tool
+- [**28**Star][12m] [C] [mrmacete/r2scripts](https://github.com/mrmacete/r2scripts) Collection of scripts for radare2
+- [**28**Star][1y] [Py] [mprhode/malware-prediction-rnn](https://github.com/mprhode/malware-prediction-rnn) RNN implementation with Keras for machine activity data to predict malware
+- [**28**Star][6d] [HTML] [misp/misp-rfc](https://github.com/misp/misp-rfc) Specifications used in the MISP project including MISP core format
+- [**28**Star][6d] [Shell] [misp/misp-cloud](https://github.com/misp/misp-cloud) misp-cloud - Cloud-ready images of MISP
- [**28**Star][5y] [Java] [mindmac/xposedautomation](https://github.com/mindmac/xposedautomation) A demo to show how to install Xposed and enable Xposed based module automatically
- [**28**Star][9m] [Go] [mimoo/eureka](https://github.com/mimoo/eureka) Need to encrypt a file before sending it to someone? This is it.
+- [**28**Star][1y] [Shell] [mikhbur/conformer](https://github.com/mikhbur/conformer) Password Guessing for different Web Portals
- [**28**Star][5y] [C++] [michael4338/tdi](https://github.com/michael4338/tdi) Windows Kernel Driver - Create a driver device in TDI layer of windows kernel to capture network data packets
+- [**28**Star][3m] [Py] [michael-myers/macos-wpa-psk](https://github.com/michael-myers/macos-wpa-psk) PoC script showing that MacOS leaves the wireless key in NVRAM, in plaintext and accessible to anyone.
+- [**28**Star][5m] [Py] [mechpen/sockdump](https://github.com/mechpen/sockdump) Dump unix domain socket traffic with bpf
+- [**28**Star][2y] [Java] [martinstyk/apkanalyzer](https://github.com/martinstyk/apkanalyzer) Java tool for analyzing Android APK files
- [**28**Star][3y] [JS] [markelog/adit](https://github.com/markelog/adit) SSH tunnels – in any way you want it
-- [**28**Star][5m] [C++] [marakew/syser](https://github.com/marakew/syser) syser debugger x32/x64 ring3
-- [**28**Star][2y] [Go] [madnikulin50/gordp](https://github.com/madnikulin50/gordp) Rdp client on pure GoLang
+- [**28**Star][4m] [Py] [lufeirider/sqlchecker](https://github.com/lufeirider/sqlchecker) 注入检测工具
- [**28**Star][5m] [PHP] [lucasfrag/kali-linux-tools-interface](https://github.com/lucasfrag/kali-linux-tools-interface) Graphical Web interface developed to facilitate the use of security information tools.
- [**28**Star][1y] [C] [lpefferkorn/ipdecap](https://github.com/lpefferkorn/ipdecap) Decapsulate traffic encapsulated within GRE, IPIP, 6in4, ESP (ipsec) protocols, can also remove IEEE 802.1Q (virtual lan) header. Works with pcap files.
+- [**28**Star][2y] [C] [l-n-s/transmission-i2p](https://github.com/l-n-s/transmission-i2p) Anonymous torrent client Transmission-I2P [UNMAINTAINED]
- [**28**Star][1y] [Py] [knownsec/decrypt-ransomware](https://github.com/knownsec/decrypt-ransomware)
- [**28**Star][6y] [Py] [kholia/exetractor-clone](https://github.com/kholia/exetractor-clone) Unpacker for packed Python executables. Supports PyInstaller and py2exe. This project is not updated anymore. Use "PyInstaller Extractor" and "unpy2exe" instead.
-- [**28**Star][2y] [Py] [kerrigan29a/idapython_virtualenv](https://github.com/kerrigan29a/idapython_virtualenv) Enable Virtualenv or Conda in IDAPython
- [**28**Star][1y] [Py] [jumbo-wjb/jpentest](https://github.com/jumbo-wjb/jpentest) Jumbo Python Penetration testing framework
+- [**28**Star][5m] [PS] [johnaho/cloakify-powershell](https://github.com/johnaho/cloakify-powershell) Cloak files using text based steganography output to obsfucate what data they contain. Coded in Powershell. This is a port of TryCatchHCF's Cloakify written in python
+- [**28**Star][1m] [C++] [jnastarot/enma_pe](https://github.com/jnastarot/enma_pe) Cross-platform library for parsing and building PE\PE+ formats
- [**28**Star][7y] [Ruby] [jjyg/ssh_decoder](https://github.com/jjyg/ssh_decoder)
+- [**28**Star][1y] [C++] [jiazhang0/seloader](https://github.com/jiazhang0/seloader) Secure EFI Loader designed to authenticate the non-PE files
- [**28**Star][4m] [Py] [jekil/udpot](https://github.com/jekil/udpot) Simple UDP honeypot script
+- [**28**Star][2y] [Swift] [jeanshuang/potatso](https://github.com/jeanshuang/potatso) 适配Xcode9.3 iOS11.3 Swift3.3编译通过。 (unmaintained) Potatso is an iOS client that implements Shadowsocks proxy with the leverage of NetworkExtension framework in iOS 9.
- [**28**Star][6y] [Py] [jayeshchauhan/skanda](https://github.com/jayeshchauhan/skanda) OWASP Skanda - SSRF Exploitation Framework
-- [**28**Star][1y] [Py] [iweizime/dbghider](https://github.com/iweizime/dbghider) hide IDA Winddows debugger from processes.
- [**28**Star][3y] [Assembly] [inndy/ctf-from-zero-to-one](https://github.com/inndy/ctf-from-zero-to-one) TDOH Conf 2016 演講相關資料
- [**28**Star][5y] [Py] [infosec-au/webappsec-toolkit](https://github.com/infosec-au/webappsec-toolkit) Web Application Security related tools. Includes backdoors, proof of concepts and tricks
- [**28**Star][2y] [Py] [ihebski/pentest-chainsaw](https://github.com/ihebski/pentest-chainsaw) Scrapes Router Passwords From
- [**28**Star][4y] [C] [icewall/forcedelete](https://github.com/icewall/forcedelete) Windows driver including couple different techniques for file removal when regular operation isn't possible.
+- [**28**Star][2y] [Py] [ice3man543/malscan](https://github.com/ice3man543/malscan) A Simple PE File Heuristics Scanners
+- [**28**Star][2y] [Java] [ibey0nd/nstproxy](https://github.com/ibey0nd/nstproxy) 一款存储HTTP请求入库的burpsuite插件
- [**28**Star][3m] [Shell] [hybtoy/ssrrmu](https://github.com/hybtoy/ssrrmu) ShadowsocksRR (shadowsocksr/ssr) multi-user and single-user install script
-- [**28**Star][7m] [Java] [hvqzao/burp-flow](https://github.com/hvqzao/burp-flow) Extension providing view with filtering capabilities for both complete and incomplete requests from all burp tools.
- [**28**Star][11m] [C++] [hoangprod/leospecial-veh-hook](https://github.com/hoangprod/leospecial-veh-hook) Vectored Exception Handling Hooking Class
- [**28**Star][5y] [C++] [hempnall/broyara](https://github.com/hempnall/broyara) integrating bro into yara
- [**28**Star][3y] [Py] [harryr/nanac](https://github.com/harryr/nanac) Tiny modular assembler & vm for lightweight control microcode
- [**28**Star][5y] [Py] [hannob/pgpecosystem](https://github.com/hannob/pgpecosystem) Scripts to parse and analyze pgp key server data
-- [**28**Star][3y] [HTML] [h2hconference/2016](https://github.com/h2hconference/2016) H2HC 2016 Slides/Materials/Presentations
-- [**28**Star][4m] [Shell] [gushmazuko/metasploit_in_termux](https://github.com/gushmazuko/metasploit_in_termux) Install Metasploit Framework 5 in Termux
+- [**28**Star][8y] [C] [hackedteam/driver-win32](https://github.com/hackedteam/driver-win32) Windows (32bit) agent driver
+- [**28**Star][3d] [Py] [greenbone/python-gvm](https://github.com/greenbone/python-gvm) Greenbone Vulnerability Management Python Library
- [**28**Star][2y] [Py] [grayddq/passivedatasorting](https://github.com/grayddq/passivedatasorting) 自动化被动扫描系统分为数据源、数据处理、漏洞验证等三个子系统,本系统属于数据处理部分,抓取流量镜像的数据,进行分析过滤去重等操作,发送至消息队列中,等待PassiveSecCheck消费
- [**28**Star][1y] [TeX] [gossip-sjtu/k-hunt](https://github.com/gossip-sjtu/k-hunt) K-Hunt: Pinpointing Insecure Crypto Keys
- [**28**Star][2y] [Ruby] [godinezj/metasploit-framework](https://github.com/godinezj/metasploit-framework) Metasploit Framework
@@ -14913,36 +16034,38 @@ networking routines
- [**28**Star][7m] [foryujian/yujianrdpcrack](https://github.com/foryujian/yujianrdpcrack) 御剑RDP爆破工具
- [**28**Star][3y] [Py] [floyd-fuh/burp-httpfuzzer](https://github.com/floyd-fuh/burp-httpfuzzer) Burp plugin to do random fuzzing of HTTP requests
- [**28**Star][6y] [Py] [flo354/iosforensic](https://github.com/flo354/iosforensic) iOS forensic tool
+- [**28**Star][4y] [JS] [firebug/firequery](https://github.com/firebug/firequery) Firefox plugin for jQuery development
- [**28**Star][2y] [C++] [fdfalcon/typeisolationdbg](https://github.com/fdfalcon/typeisolationdbg) A little WinDbg extension to help dump the state of Win32k Type Isolation structures.
-- [**28**Star][5m] [PHP] [fdciabdul/fbchecker](https://github.com/fdciabdul/fbchecker) Facebook Mass Account Checker
- [**28**Star][4y] [C] [erriy/data_pirate](https://github.com/erriy/data_pirate)
-- [**28**Star][17d] [C#] [ericzimmerman/amcacheparser](https://github.com/ericzimmerman/amcacheparser) Parses amcache.hve files, but with a twist!
-- [**28**Star][7d] [Py] [entynetproject/proton](https://github.com/entynetproject/proton) Proton Framework is a Windows post exploitation framework similar to other penetration testing tools such as Meterpreter and Powershell Invader Framework. The major difference is that the Proton Framework does most of its operations using Windows Script Host (a.k.a. JScript/VBScript), with compatibility in the core to support a default installat…
-- [**28**Star][2y] [PowerShell] [enddo/hatdbg](https://github.com/enddo/hatdbg) Minimal WIN32 Debugger in powershell
+- [**28**Star][19d] [C#] [ericzimmerman/amcacheparser](https://github.com/ericzimmerman/amcacheparser) Parses amcache.hve files, but with a twist!
+- [**28**Star][2y] [PS] [enddo/hatdbg](https://github.com/enddo/hatdbg) Minimal WIN32 Debugger in powershell
- [**28**Star][3y] [Java] [elynx/pokemon-go-xposed-mitm](https://github.com/elynx/pokemon-go-xposed-mitm) MITM attack on Pokemon Go (c) via XPosed framework
+- [**28**Star][25d] [Py] [eleemosynator/writeups](https://github.com/eleemosynator/writeups) Write-ups for crackmes and CTF challenges
- [**28**Star][2y] [Shell] [earayu/fastjson_jndi_poc](https://github.com/earayu/fastjson_jndi_poc) fastjson远程命令执行漏洞,jndi方式
-- [**28**Star][1y] [dwestgard/threat_hunting_tables](https://github.com/dwestgard/threat_hunting_tables) Theat hunting notes in flat file format and mapped to MITRE's ATT&CK IDs
- [**28**Star][2y] [C++] [dshikashio/pybag](https://github.com/dshikashio/pybag) CPython module for Windbg's dbgeng plus additional wrappers.
- [**28**Star][2y] [Java] [drme/ble-rc](https://github.com/drme/ble-rc) Control RC cars from your SmartPhone
- [**28**Star][8m] [Ruby] [dreadlocked/ctf-writeups](https://github.com/dreadlocked/ctf-writeups) CTF Write-ups
-- [**28**Star][7d] [Py] [dottedmag/archmage](https://github.com/dottedmag/archmage) A reader and decompiler for files in the CHM format
+- [**28**Star][9d] [Py] [dottedmag/archmage](https://github.com/dottedmag/archmage) A reader and decompiler for files in the CHM format
- [**28**Star][1y] [Py] [dienuet/crossdomain](https://github.com/dienuet/crossdomain) CORS checking
- [**28**Star][2m] [Go] [dharmaofcode/gorp](https://github.com/dharmaofcode/gorp) A modular bug hunting and web application pentesting framework written in Go
- [**28**Star][2y] [defcon-russia/shortcut_auto_bind](https://github.com/defcon-russia/shortcut_auto_bind) Windows LNK/URL shortcut auto-binding hotkey (not a bug, feature)
- [**28**Star][3y] [Py] [deadbits/arcreactor](https://github.com/deadbits/arcreactor) open-source intelligence gathering for SIEMs <3
-- [**28**Star][2y] [Objective-C] [dannagle/packetsender-ios](https://github.com/dannagle/packetsender-ios) Packet Sender for iOS, Send/Receive UDP/TCP
+- [**28**Star][1m] [Shell] [dcso/misp-dockerized](https://github.com/dcso/misp-dockerized)
+- [**28**Star][18d] [Py] [darksecdevelopers/absorber](https://github.com/darksecdevelopers/absorber) An advance keylogger that works and also logs special keys including uppercase letters as well.
+- [**28**Star][2y] [ObjC] [dannagle/packetsender-ios](https://github.com/dannagle/packetsender-ios) Packet Sender for iOS, Send/Receive UDP/TCP
+- [**28**Star][4y] [C] [ctz/sgx-pwenclave](https://github.com/ctz/sgx-pwenclave) Using SGX to harden password hashing
- [**28**Star][3y] [JS] [ctxis/pac-leak-demo](https://github.com/ctxis/pac-leak-demo) PAC HTTPS leak demo from DEF CON 24 'Toxic Proxies' talk
- [**28**Star][9m] [Py] [ctxis/cbrcli](https://github.com/ctxis/cbrcli) Command line interface to Carbon Black Response
-- [**28**Star][9m] [C] [ctxis/capemon](https://github.com/ctxis/capemon) CAPE monitor DLLs
+- [**28**Star][7m] [Py] [cryptolu/whitebox](https://github.com/cryptolu/whitebox) White-box Analysis and Implementation Tools
- [**28**Star][2m] [Py] [cryptax/droidlysis](https://github.com/cryptax/droidlysis) Property extractor for Android apps
- [**28**Star][3y] [Py] [crowdstrike/chopshop](https://github.com/crowdstrike/chopshop) Mitre chopshop network decoder framework
- [**28**Star][4y] [JS] [crisu83/ctf-game](https://github.com/crisu83/ctf-game) Fast-paced hot seat multiplayer game written in modern JavaScript.
- [**28**Star][7y] [C++] [cr4sh/dbgcb](https://github.com/cr4sh/dbgcb) Engine for communication with remote kernel debugger (KD, WinDbg) from drivers and applications
-- [**28**Star][12m] [PowerShell] [countercept/ppid-spoofing](https://github.com/countercept/ppid-spoofing) Scripts for performing and detecting parent PID spoofing
+- [**28**Star][12m] [PS] [countercept/ppid-spoofing](https://github.com/countercept/ppid-spoofing) Scripts for performing and detecting parent PID spoofing
- [**28**Star][6y] [JS] [codenothing/argv](https://github.com/codenothing/argv) Node based command line argument parser
+- [**28**Star][2m] [Java] [codehaus-plexus/plexus-archiver](https://github.com/codehaus-plexus/plexus-archiver)
- [**28**Star][3y] [C#] [cannanlly/gogotester](https://github.com/cannanlly/gogotester) 原版基础上修改bug和优化使用体验
- [**28**Star][10m] [JS] [calidog/certstream-js](https://github.com/calidog/certstream-js) Javascript library for connecting to the CertStream network.
-- [**28**Star][1y] [C] [calebfenton/native-harness-target](https://github.com/calebfenton/native-harness-target) Android app for demonstrating native library harnessing
- [**28**Star][4y] [Java] [burp-hash/burp-hash](https://github.com/burp-hash/burp-hash)
- [**28**Star][3y] [brandonprry/clamav-fuzz](https://github.com/brandonprry/clamav-fuzz) A fuzz job for ClamAV
- [**28**Star][1y] [C] [bot-man-jl/wfp-traffic-redirection-driver](https://github.com/bot-man-jl/wfp-traffic-redirection-driver) WFP Traffic Redirection Driver is used to redirect NIC traffic on network layer and framing layer, based on Windows Filtering Platform (WFP).
@@ -14953,137 +16076,161 @@ networking routines
- [**28**Star][4m] [Py] [azmatt/anaximander](https://github.com/azmatt/anaximander) Python Code to Map Cell Towers From a Cellebrite Android Dump
- [**28**Star][3y] [Py] [ayrx/tlsenum](https://github.com/ayrx/tlsenum) A command line tool to enumerate TLS cipher-suites supported by a server
- [**28**Star][2m] [Py] [armissecurity/urgent11-detector](https://github.com/armissecurity/urgent11-detector) URGENT/11 detection tool by Armis
+- [**28**Star][2m] [C] [arm-software/sbsa-acs](https://github.com/arm-software/sbsa-acs) ARM Enterprise: SBSA Architecture Compliance Suite
- [**28**Star][7m] [Py] [antoinet/obike](https://github.com/antoinet/obike) Reverse engineering of the oBike protocol communication (BLE and HTTP)
- [**28**Star][11m] [Py] [antid0tecom/ipad_accessory_research](https://github.com/antid0tecom/ipad_accessory_research) Research into Security of Apple Smart Keyboard and Apple Pencil
- [**28**Star][6y] [Ruby] [andrewsmhay/brisket](https://github.com/andrewsmhay/brisket) Brisket is a collection of frontend scripts for masscan, zmap, and nmap, in addition data manipulation scripts
- [**28**Star][1y] [C++] [allocandinit/ollvm5.0.1](https://github.com/allocandinit/ollvm5.0.1) obfuscator 基于 llvm 5.0.1 版本
+- [**28**Star][2y] [JS] [allglorytothehypnotoad/nodescan](https://github.com/allglorytothehypnotoad/nodescan) scans network for hosts and open ports
- [**28**Star][1y] [Py] [alienwithin/scripts-sploits](https://github.com/alienwithin/scripts-sploits) A number of scripts POC's and problems solved as pentests move along.
- [**28**Star][1y] [JS] [alephsecurity/spectrebrowserresearch](https://github.com/alephsecurity/spectrebrowserresearch)
- [**28**Star][6m] [airbus-seclab/gustave](https://github.com/airbus-seclab/gustave)
- [**28**Star][2y] [Py] [ahmadnourallah/pysploit-framework](https://github.com/ahmadnourallah/pysploit-framework) free exploit framework written use python language version 3.3
- [**28**Star][1y] [C++] [abatchy17/hevd-exploits](https://github.com/abatchy17/hevd-exploits) Exploit code used for the HackSysExtremeVulnerableDriver.
- [**28**Star][3y] [C] [a7vinx/liinux](https://github.com/a7vinx/liinux) A linux rootkit works on kernel 4.0.X or higher
-- [**28**Star][12m] [Py] [98587329/web-scan](https://github.com/98587329/web-scan) jboss,tomcat,weblogic,未授权访问扫描工具
+- [**28**Star][1y] [Py] [98587329/web-scan](https://github.com/98587329/web-scan) jboss,tomcat,weblogic,未授权访问扫描工具
- [**28**Star][1m] [Py] [4n4nk3/wordlister](https://github.com/4n4nk3/wordlister) A simple wordlist generator and mangler written in python.
- [**28**Star][3y] [Py] [3gstudent/fuzzbunch](https://github.com/3gstudent/fuzzbunch) NSA finest tool
+- [**28**Star][1y] [Py] [0xacb/github-desktop-poc](https://github.com/0xacb/github-desktop-poc) Github Desktop RCE PoC
- [**28**Star][3y] [Py] [0x71/cuckoo-linux](https://github.com/0x71/cuckoo-linux) Linux malware analysis based on Cuckoo Sandbox.
- [**28**Star][3y] [Shell] [0utrider/malrecon](https://github.com/0utrider/malrecon) malrecon:基本的恶意代码检测和分析工具,Shell 编写
+- [**27**Star][2y] [syst3ma/awesome_cisco_exploitation](https://github.com/syst3ma/awesome_cisco_exploitation) A curated list of awesome Cisco exploitation resources
- [**27**Star][11m] [Java] [adolfintel/notebot](https://github.com/adolfintel/notebot) A ripoff of Microsoft Sticky Notes
+- [**27**Star][9d] [snail007/goproxy-cn](https://github.com/snail007/goproxy-cn) 高性能的http代理、https代理、socks5代理、ss代理、内网穿透、内网穿透p2p、内网穿透代理、内网穿透反向代理、内网穿透服务器、游戏盾、游戏高防、游戏代理,支持API代理认证。websocke代理、tcp代理、udp代理、socket代理、高仿服务器。支持正向代理、反向代理、透明代理、TCP内网穿透、UDP内网穿透、HTTP内网穿透、HTTPS内网穿透、https代理负载均衡、http代理负载均衡、socks5代理负载均衡、socket代理负载均衡、ss代理负载均衡、TCP/UDP端口映射、SSH中转、TLS加密传输、协议转换、防污染DNS代理,限速,限连接数。官方QQ交流群: 42805407。
+- [**27**Star][2y] [Py] [spiderlabs/modsecurity-log-utilities](https://github.com/spiderlabs/modsecurity-log-utilities) Set of CLI tools to transform ModSecurity logs into a meaningful information, given a context.
- [**27**Star][10m] [radareorg/r2jp](https://github.com/radareorg/r2jp) Japanese Community of radare2
- [**27**Star][3y] [Ruby] [infobyte/cve-2016-2776](https://github.com/infobyte/cve-2016-2776) CVE-2016-2776
-- [**27**Star][2y] [PowerShell] [gimini/tartarus](https://github.com/gimini/tartarus) Fileless Ransomware Example
+- [**27**Star][2y] [PS] [gimini/tartarus](https://github.com/gimini/tartarus) Fileless Ransomware Example
+- [**27**Star][2y] [JS] [cyrus-and/chrome-page-graph](https://github.com/cyrus-and/chrome-page-graph) Chrome extension to generate interactive page dependency graphs
- [**27**Star][1y] [JS] [samyk/crak](https://github.com/samyk/crak) Crash Royale Attack Kit
-- [**27**Star][1m] [Go] [getlantern/lampshade](https://github.com/getlantern/lampshade) Obfuscated encrypted network protocol for Lantern
+- [**27**Star][7d] [Go] [getlantern/lampshade](https://github.com/getlantern/lampshade) Obfuscated encrypted network protocol for Lantern
- [**27**Star][4y] [Py] [averagesecurityguy/blue](https://github.com/averagesecurityguy/blue) Scripts that are suited for blue teams
-- [**27**Star][11m] [HTML] [twintproject/twint-explorer](https://github.com/twintproject/twint-explorer) TWINT Graph Visualizer
-- [**27**Star][25d] [Shell] [security-onion-solutions/securityonion-docker](https://github.com/security-onion-solutions/securityonion-docker) Docker files for Security Onion
+- [**27**Star][1m] [tidesec/auto_pentest_tool_course](https://github.com/tidesec/auto_pentest_tool_course) 《自动化漏洞挖掘技术实践》相关资料及脚本
+- [**27**Star][27d] [Shell] [security-onion-solutions/securityonion-docker](https://github.com/security-onion-solutions/securityonion-docker) Docker files for Security Onion
- [**27**Star][3y] [Py] [paranoidninja/pisociety](https://github.com/paranoidninja/pisociety) Inspired from Mr. Robot I started developing this framework which can create 3vil twins, ddos Wireless networks, bypass HSTS(partial) and many more.This project is a work in progress and will be updated and fixed regularly for any issues found.
+- [**27**Star][3y] [Assembly] [fsecurelabs/avrop](https://github.com/fsecurelabs/avrop) ROP based Movfuscator VM
- [**27**Star][4y] [Ruby] [thesp0nge/wordstress](https://github.com/thesp0nge/wordstress) A security scanner for Wordpress blogging engine
+- [**27**Star][7y] [hak5darren/ducky-flasher](https://github.com/hak5darren/ducky-flasher) Automatically exported from code.google.com/p/ducky-flasher
- [**27**Star][3m] [Py] [nccgroup/nobex](https://github.com/nccgroup/nobex) nOBEX allows emulating the PBAP, MAP, and HFP profiles to test vehicle infotainment systems and similar devices using these profiles
-- [**27**Star][2m] [Rust] [timvisee/pixelpwnr](https://github.com/timvisee/pixelpwnr)
+- [**27**Star][5m] [C#] [netspi/daft](https://github.com/netspi/daft) DAFT: Database Audit Framework & Toolkit
+- [**27**Star][4y] [Py] [hephaest0s/creatorrc](https://github.com/hephaest0s/creatorrc) Create torrc files optimized for speed, security, or avoiding captchas
+- [**27**Star][4m] [JS] [purplei2p/i2pd-tools](https://github.com/purplei2p/i2pd-tools) Some useful tools for I2P
- [**27**Star][8m] [offensive-security/kali-sly-pi](https://github.com/offensive-security/kali-sly-pi) kali-sly-pi
- [**27**Star][2y] [C#] [zaczero/sharploader](https://github.com/zaczero/sharploader)
-- [**27**Star][4m] [PowerShell] [glenrobinson72/tableau-powershell-scripts](https://github.com/glenrobinson72/tableau-powershell-scripts) Repository of Powershell Scripts for Tableau
+- [**27**Star][2y] [Shell] [digivill/all-in-one-wifi-cracker](https://github.com/digivill/all-in-one-wifi-cracker) Linux All in One Wifi Cracker
+- [**27**Star][4m] [PS] [glenrobinson72/tableau-powershell-scripts](https://github.com/glenrobinson72/tableau-powershell-scripts) Repository of Powershell Scripts for Tableau
- [**27**Star][1y] [Shell] [edoverflow/h1-cli](https://github.com/edoverflow/h1-cli) A CLI tool to interact with hackerone.com. This was my submission for HackerOne's Summer 2018 Hack Day.
+- [**27**Star][5m] [HTML] [firewalltutor/firewalltutor.github.io](https://github.com/firewalltutor/firewalltutor.github.io) fire wall tutor 自建梯子教程 Google 翻墙 科学上网 代理工具 一键安装
- [**27**Star][4m] [Py] [mvelazc0/purplespray](https://github.com/mvelazc0/purplespray) PurpleSpray is an adversary simulation tool that executes password spray behavior under different scenarios and conditions with the purpose of generating attack telemetry in properly monitored Windows enterprise environments
- [**27**Star][1m] [vgkintsugi/ghidra-segasaturn-processor](https://github.com/vgkintsugi/ghidra-segasaturn-processor) A Ghidra processor module for the Sega Saturn (SuperH SH-2)
- [**27**Star][2y] [JS] [imshubhamsingh/farmerchain](https://github.com/imshubhamsingh/farmerchain) A collaborative and collective pool farming system with built in blockchain based self financing system to help farmers become self-reliant. | ᴘʀᴏᴏꜰ ᴏꜰ ᴄᴏɴᴄᴇᴘᴛ
- [**27**Star][4m] [Java] [usdag/cstc](https://github.com/usdag/cstc)
- [**27**Star][2y] [Py] [dixel/wifi-linux](https://github.com/dixel/wifi-linux) Simple python script to monitor access point signal strength.
- [**27**Star][5y] [Py] [bendemott/captiveportal](https://github.com/bendemott/captiveportal) A captive portal that can be used on most linux distributions.
-- [**27**Star][26d] [C++] [gdabah/win32k-bugs](https://github.com/gdabah/win32k-bugs) Dump of win32k POCs for bugs I've found
-- [**27**Star][1m] [Py] [pnfsoftware/jeb-golang-analyzer](https://github.com/pnfsoftware/jeb-golang-analyzer) JEB scripts for Golang executables analysis
-- [**27**Star][1m] [Py] [ds19991999/secbox](https://github.com/ds19991999/secbox)
+- [**27**Star][6d] [C++] [vulcainreo/dvid](https://github.com/vulcainreo/dvid) Damn Vulnerable IoT Device
+- [**27**Star][29d] [C++] [gdabah/win32k-bugs](https://github.com/gdabah/win32k-bugs) Dump of win32k POCs for bugs I've found
+- [**27**Star][3m] [grapheneos/os_issue_tracker](https://github.com/grapheneos/os_issue_tracker) Issue tracker for GrapheneOS Android Open Source Project hardening work. Standalone projects like Auditor, AttestationServer and hardened_malloc have their own dedicated trackers.
- [**27**Star][5m] [C#] [axdsan/dnspy-stringsanalyzer](https://github.com/axdsan/dnspy-stringsanalyzer) Plugin for DnSpy - Analyze through assemblies and display their strings.
-- [**27**Star][2m] [Py] [x1tan/cve-2019-13025](https://github.com/x1tan/cve-2019-13025) Connect Box CH7465LG (CVE-2019-13025)
- [**27**Star][2m] [hrt/anticheatjs](https://github.com/hrt/anticheatjs) Javascript Anti Cheats 101
-- [**27**Star][2y] [Py] [vpnguy-zz/handyheaderhacker](https://github.com/vpnguy-zz/HandyHeaderHacker) Examine HTTP response headers for common security issues
- [**27**Star][1m] [C] [usineur/sdlpop](https://github.com/usineur/SDLPoP) An open-source port of Prince of Persia, based on the disassembly of the DOS version.
- [**27**Star][5y] [C] [exploiteers/nestdfuattack](https://github.com/exploiteers/NestDFUAttack) Packages to attack the Google Nest's DFU mode.
- [**27**Star][1y] [C++] [fdiskyou/winalloctracer](https://github.com/fdiskyou/WinAllocTracer) Pintool that logs and tracks calls to RtlAllocateHeap, RtlReAllocateHeap, RtlFreeHeap, VirtualAllocEx, and VirtualFreeEx.
- [**27**Star][7y] [Java] [alessiodallapiazza/wpscan](https://github.com/alessiodallapiazza/WPScan)
-- [**27**Star][3m] [C#] [geta/404handler](https://github.com/Geta/404handler) The popular 404 handler for EPiServer, enabling better control over your 404 page in addition to allowing redirects for old urls that no longer works.
+- [**27**Star][1y] [Jupyter Notebook] [aicoe/prometheus-data-science](https://github.com/AICoE/prometheus-data-science) A collection of analysis, analytics, and machine learning techniques for time series forecasting w/ Prometheus metrics
+- [**27**Star][10m] [JS] [1lastbr3ath/s2o](https://github.com/1lastBr3ath/S2O) Chrome extension to inspect and find domains that don't resolve or have expired
- [**27**Star][6y] [osirislab/xnippet](https://github.com/osirislab/xnippet) A little tool to execute functions without debugging an entire executable. Originally written by Gonzalo J. Carracedo (BatchDrake).
+- [**27**Star][3m] [Shell] [imwally/coffeeconnect](https://github.com/imwally/coffeeconnect) Connect to Starbucks WiFi without opening a browser.
- [**27**Star][2y] [Py] [taroballzchen/shecodject](https://github.com/TaroballzChen/shecodject) shecodject is a autoscript for shellcode injection by Python3 programing
+- [**27**Star][16d] [PHP] [backdoorhub/shell-backdoor-list](https://github.com/backdoorhub/shell-backdoor-list)
+- [**27**Star][2y] [tatsui-geek/malware-traffic-analysis.net](https://github.com/tatsui-geek/malware-traffic-analysis.net) Download pcap files from
- [**27**Star][2y] [shmilylty/kalitools](https://github.com/shmilylty/kalitools) Kali Linux工具清单
- [**27**Star][5m] [Java] [bit4woo/burp-api-drops](https://github.com/bit4woo/burp-api-drops) burp suite API 处理http请求和响应的基本流程
- [**27**Star][1y] [JS] [zjlywjh001/phrackctf-team-docker](https://github.com/zjlywjh001/phrackctf-team-docker) Docker image for phrackCTF-Platform-Team Project.
- [**27**Star][6y] [C++] [zhaolong/libparser](https://github.com/zhaolong/libparser) 解析静态库(Lib)文件,提取出所有函数信息,组织成自定义格式文件
- [**27**Star][4y] [Java] [zerothoughts/jndipoc](https://github.com/zerothoughts/jndipoc) Proof of concept showing how java byte code can be injected through InitialContext.lookup() calls
- [**27**Star][2y] [C] [zerosum0x0/zeroload](https://github.com/zerosum0x0/zeroload)
-- [**27**Star][2m] [Java] [zerokilo/xexloaderwv](https://github.com/zerokilo/xexloaderwv) Ghidra Loader Module for X360 XEX Files
+- [**27**Star][3m] [Java] [zerokilo/xexloaderwv](https://github.com/zerokilo/xexloaderwv) Ghidra Loader Module for X360 XEX Files
- [**27**Star][5m] [Smarty] [zee-ahmed/kube-owasp-zap](https://github.com/zee-ahmed/kube-owasp-zap) Owasp Zap chart for Kubernetes
- [**27**Star][4y] [Scheme] [yifanlu/cgen](https://github.com/yifanlu/cgen) CGEN with support for generating IDA Pro IDP modules
- [**27**Star][2y] [Py] [yehgdotnet/s3scanner](https://github.com/yehgdotnet/s3scanner) Scan for open S3 buckets and dump
- [**27**Star][2y] [C] [yara-rules/r2yara](https://github.com/yara-rules/r2yara) r2yara - Module for Yara using radare2 information
- [**27**Star][7y] [Py] [yanlinlin82/plcscan](https://github.com/yanlinlin82/plcscan) Automatically exported from code.google.com/p/plcscan
+- [**27**Star][3m] [Shell] [yahuiwong/docker-ss-tproxy](https://github.com/yahuiwong/docker-ss-tproxy) ss-redir 全局透明代理 (REDIRECT + TPROXY)
- [**27**Star][9m] [Py] [xajkep/xpt](https://github.com/xajkep/xpt) XPT - XSS Polyglot Tester
+- [**27**Star][12m] [PS] [wuseman/wloader](https://github.com/wuseman/wloader) Windows 10 PRO Activator - No more backdoors via loaders from China and neither you will need any crack anymore that is valid for a week or two. This is script is written for powershell/cmd. This script will also removing all bloatware from Windows 10. Edit the script after your needs.
- [**27**Star][4y] [Py] [williballenthin/python-evt](https://github.com/williballenthin/python-evt) Pure Python parser for classic Windows Event Log files (.evt)
- [**27**Star][1y] [JS] [whizkydee/type-reverse](https://github.com/whizkydee/type-reverse)
- [**27**Star][5y] [Py] [webstersprodigy/webstersprodigy](https://github.com/webstersprodigy/webstersprodigy) misc pentest tools.
- [**27**Star][3y] [Py] [w4kfu/ida_loader](https://github.com/w4kfu/ida_loader) Some loader module for IDA
- [**27**Star][3y] [C++] [vusec/typesan](https://github.com/vusec/typesan) TypeSan checks casts in C++ code - code released for CCS 2016
- [**27**Star][8m] [Py] [vngkv123/ctf](https://github.com/vngkv123/ctf) CTF binary exploit code
+- [**27**Star][3m] [C++] [vertextoedge/windowfunctiontracer](https://github.com/vertextoedge/windowfunctiontracer) Window Executable file Function tracer using Debugging API
+- [**27**Star][2y] [Py] [vergecurrency/electrum-xvg-tor](https://github.com/vergecurrency/electrum-xvg-tor) XVG TOR Electrum Client for connecting to the VERGE XVG TOR Electrum Server
- [**27**Star][8m] [vah13/oraclecve](https://github.com/vah13/oraclecve) Vulnerabilities which found in Oracle products
- [**27**Star][1y] [Py] [undeadsec/goblinwordgenerator](https://github.com/undeadsec/goblinwordgenerator) Python wordlist generator
+- [**27**Star][2y] [Go] [u35s/ag](https://github.com/u35s/ag) 一个用go实现的命令行下查看每个网卡详细流量的小工具
- [**27**Star][3y] [Py] [toxic-ig/sql-xss](https://github.com/toxic-ig/sql-xss) A few SQL and XSS attack tools
- [**27**Star][2y] [HTML] [torque59/aws-vulnerable-lambda](https://github.com/torque59/aws-vulnerable-lambda) An AWS Lambda vulnerable application written in flask.
- [**27**Star][3y] [C] [tinysec/runwithdll](https://github.com/tinysec/runwithdll) windows create process with a dll load first time via LdrHook
- [**27**Star][1y] [Py] [tildedennis/malware](https://github.com/tildedennis/malware)
- [**27**Star][4y] [JS] [threatstack/pigsty](https://github.com/threatstack/pigsty) Pigsty is very efficient and customizable spooler for the unified2 file format.
- [**27**Star][3y] [HTML] [thoppe/5baa61e4c9b93f3f0682250b6cf8331b7ee68fd8](https://github.com/thoppe/5baa61e4c9b93f3f0682250b6cf8331b7ee68fd8) RNN-LSTM that learns passwords from a starting list
+- [**27**Star][7m] [Py] [thombashi/pingparsing](https://github.com/thombashi/pingparsing) pingparsing is a CLI-tool/Python-library parser and transmitter for ping command output.
+- [**27**Star][1y] [Py] [thesecondsun/pasm](https://github.com/thesecondsun/pasm) Linux assembler/disassembler based on Rasm2
- [**27**Star][10m] [Py] [thehive-project/synapse](https://github.com/thehive-project/synapse) a Meta Alert Feeder for TheHive, a Security Incident Response Platform
- [**27**Star][1m] [PHP] [telnet22/kn0ck](https://github.com/telnet22/kn0ck) Automated Tools Pentest
- [**27**Star][2m] [Erlang] [technion/ct_advisor](https://github.com/technion/ct_advisor) A monitoring service for Certificate Transparency
- [**27**Star][3y] [Perl] [tanjiti/perl_tools](https://github.com/tanjiti/perl_tools) perl小工具
- [**27**Star][1m] [Py] [szysec/ctftest](https://github.com/szysec/ctftest)
+- [**27**Star][1y] [systemli/ansible-role-hidden-service](https://github.com/systemli/ansible-role-hidden-service) Ansible role to install & maintain Tor Hidden Services
- [**27**Star][2y] [Py] [syslog777/psak](https://github.com/syslog777/psak) The Pentester's Swiss Army Knife
- [**27**Star][1y] [Py] [sweetsoftware/artemis](https://github.com/sweetsoftware/artemis) Phishing webapp generator
- [**27**Star][3y] [Py] [swackhamer/vt_notification_puller](https://github.com/swackhamer/vt_notification_puller) VirusTotal Intelligence Notification Puller
- [**27**Star][2m] [C] [surajfale/passthrough-minifilter-driver](https://github.com/surajfale/passthrough-minifilter-driver) Windows mini-filter-driver. Blocks the access to USB drives.
- [**27**Star][2y] [JS] [supersaiyansss/wechatspider](https://github.com/supersaiyansss/wechatspider) 基于中间人攻击的微信公众号爬虫 2017/9/19更新
- [**27**Star][11m] [Smali] [strazzere/emacs-smali](https://github.com/strazzere/emacs-smali) Smali/Baksmali mode for Emacs
+- [**27**Star][11d] [Go] [stefansundin/ec2-metadata-filter](https://github.com/stefansundin/ec2-metadata-filter) Enhance the security of the EC2 metadata service.
- [**27**Star][2y] [Ruby] [stebbins/strigil](https://github.com/stebbins/strigil) Strigil is an OSINT tool for collecting and aggregating social media data
-- [**27**Star][11m] [C] [sqdwr/loadimageinject](https://github.com/sqdwr/loadimageinject) LoadImage Routine Inject Dll
+- [**27**Star][3y] [stayliv3/iotsec](https://github.com/stayliv3/iotsec) 收集物联网安全相关资料
- [**27**Star][1m] [Py] [spuerbread/kun](https://github.com/spuerbread/kun) 插件化漏洞扫描器
- [**27**Star][6m] [C] [souhailhammou/kernelsymbolshelper](https://github.com/souhailhammou/kernelsymbolshelper) Retrieve pointers to undocumented kernel functions and offsets to members within undocumented structures to use in your driver by using the symbol server.
-- [**27**Star][12d] [Py] [sophoslabs/webassembly](https://github.com/sophoslabs/webassembly) Research on WebAssembly
+- [**27**Star][8y] [Ruby] [sophsec/wordlist](https://github.com/sophsec/wordlist) A Ruby library for generating and working with wordlists.
- [**27**Star][4y] [Py] [smeegesec/burp-importer](https://github.com/smeegesec/burp-importer) Burp Suite Importer - Connect to multiple web servers while populating the sitemap.
- [**27**Star][4m] [C] [skx/pam_pwnd](https://github.com/skx/pam_pwnd) A PAM module to test passwords against previous leaks at haveibeenpwned.com
- [**27**Star][2y] [HTML] [shikarisenpai/leak-ntlm-hash-via-html](https://github.com/shikarisenpai/leak-ntlm-hash-via-html) List of HTML tags for leaking NTLM-hashes
- [**27**Star][2y] [Lua] [shengnoah/riff](https://github.com/shengnoah/riff) 一个基于lua插件的pcap监控工具。
-- [**27**Star][10m] [JS] [shanselman/daskeyboard-q-nightscout](https://github.com/shanselman/daskeyboard-q-nightscout) Hooking up the DasKeyboard Q REST API to change the key colors in response to diabetic's glucose from NightScout
- [**27**Star][2y] [Makefile] [shadowsocksr-rm/openwrt-shadowsocksr](https://github.com/shadowsocksr-rm/openwrt-shadowsocksr) ShadowsocksR-libev for OpenWrt/LEDE
+- [**27**Star][3m] [C#] [shack2/swebscan](https://github.com/shack2/swebscan) SWebScan是一款基于C#的Web目录扫描器。
- [**27**Star][2y] [C] [sentinel-one/minhook](https://github.com/sentinel-one/minhook) The Minimalistic x86/x64 API Hooking Library for Windows
- [**27**Star][2y] [PHP] [securelayer7/csv-injection-vulnerable-php-script-](https://github.com/securelayer7/csv-injection-vulnerable-php-script-) CSV injection Vulnerable Script.
-- [**27**Star][7d] [C++] [schdub/protodec](https://github.com/schdub/protodec) Protobuf decompiler
+- [**27**Star][9d] [C++] [schdub/protodec](https://github.com/schdub/protodec) Protobuf decompiler
- [**27**Star][3y] [C] [salmg/audiospoof](https://github.com/salmg/audiospoof) Magnetic stripe spoofer implementing audio waves.
+- [**27**Star][1y] [TS] [robinyo/ionic-angular-schematics](https://github.com/robinyo/ionic-angular-schematics) Schematics for Ionic Angular
+- [**27**Star][6m] [Shell] [rithvikvibhu/nh-magisk-wifi-firmware](https://github.com/rithvikvibhu/nh-magisk-wifi-firmware) This Magisk module adds the required firmware for external wireless adapters to be used with NetHunter.
- [**27**Star][1y] [Jupyter Notebook] [rh01/raspi-driving-car](https://github.com/rh01/raspi-driving-car) Capstone Auto RC Car
+- [**27**Star][4d] [retarded-skid/skidsuite-3](https://github.com/retarded-skid/skidsuite-3) A collection of java reverse engineering tools and informational links
- [**27**Star][3y] [Py] [regit/opensvp](https://github.com/regit/opensvp) Opensvp is a security tool implementing "attacks" to be able to test the resistance of firewall to protocol level attack.
-- [**27**Star][21d] [C++] [regehr/opt-fuzz](https://github.com/regehr/opt-fuzz) llvm opt fuzzer and bounded exhaustive test generator
-- [**27**Star][10m] [Go] [razc411/gobd](https://github.com/razc411/gobd) A Golang covert backdoor using raw sockets.
-- [**27**Star][23d] [C] [rapid7/mimikatz](https://github.com/rapid7/mimikatz) A little tool to play with Windows security
+- [**27**Star][2y] [re4lity/secpaper](https://github.com/re4lity/secpaper) SecurityPaper For
- [**27**Star][1y] [PHP] [rakshitshah94/wordpress-wp-vcd-malware-attack-solution](https://github.com/rakshitshah94/wordpress-wp-vcd-malware-attack-solution) Another attack on wordpress 4.8
- [**27**Star][1y] [Java] [rabrg/refactored-client](https://github.com/rabrg/refactored-client) Refactoring the obfuscated v317 of the RuneScape (RuneTek 3) client.
- [**27**Star][9m] [C#] [raandree/managedpasswordfilter](https://github.com/raandree/managedpasswordfilter) Windows Password Filter that uses managed code internally
- [**27**Star][7m] [Py] [qingxp9/cve-2019-6203-poc](https://github.com/qingxp9/cve-2019-6203-poc) PoC for CVE-2019-6203, works on < iOS 12.2, macOS < 10.14.4
- [**27**Star][1y] [Py] [psiquelabs/dot2moon](https://github.com/psiquelabs/dot2moon) Tool that checks for path traversal traces in a given web application url, plus it is capable of multi-threading, set timeout and 5-layers verification.
- [**27**Star][2m] [C++] [progmboy/win32kext](https://github.com/progmboy/win32kext) windbg plugin for win32k debugging
-- [**27**Star][3y] [PowerShell] [powershell/dscconfigurations](https://github.com/powershell/dscconfigurations)
+- [**27**Star][3y] [PS] [powershell/dscconfigurations](https://github.com/powershell/dscconfigurations)
- [**27**Star][3y] [Java] [portswigger/xss-validator](https://github.com/portswigger/xss-validator) This is a burp intruder extender that is designed for automation and validation of XSS vulnerabilities.
- [**27**Star][7m] [Py] [plaperdr/blink-docker](https://github.com/plaperdr/blink-docker) Tool to mitigate browser fingerprint tracking
-- [**27**Star][3y] [Visual Basic] [phreak87/espeensy-and-peensy-payload-generator-esp8266-teensy-3.5-](https://github.com/phreak87/espeensy-and-peensy-payload-generator-esp8266-teensy-3.5-) Build your own Bad USB Stick for pentesting with wifi and dip switches
+- [**27**Star][3y] [Visual Basic .NET] [phreak87/espeensy-and-peensy-payload-generator-esp8266-teensy-3.5-](https://github.com/phreak87/espeensy-and-peensy-payload-generator-esp8266-teensy-3.5-) Build your own Bad USB Stick for pentesting with wifi and dip switches
- [**27**Star][5m] [PHP] [paul-axe/ctf](https://github.com/paul-axe/ctf) CTF stuff
- [**27**Star][2y] [Shell] [owtf/owtf-docker](https://github.com/owtf/owtf-docker) Docker repository for OWTF (64-bit Kali)
- [**27**Star][1m] [C] [oracle/libdtrace-ctf](https://github.com/oracle/libdtrace-ctf) libdtrace-ctf is the Compact Type Format library used by DTrace on Linux
- [**27**Star][1y] [C] [openbsm/bsmtrace](https://github.com/openbsm/bsmtrace) BSM based intrusion detection system
-- [**27**Star][7m] [PowerShell] [onelogicalmyth/invoke-gppcse](https://github.com/onelogicalmyth/invoke-gppcse) Obtains a list of GPOs based on known Client Side Extensions (CSE) that normally contain passwords
+- [**27**Star][7m] [PS] [onelogicalmyth/invoke-gppcse](https://github.com/onelogicalmyth/invoke-gppcse) Obtains a list of GPOs based on known Client Side Extensions (CSE) that normally contain passwords
- [**27**Star][5y] [C] [olsut/kinject-x64](https://github.com/olsut/kinject-x64) Kinject - kernel dll injector, currently available in x86 version, will be updated to x64 soon.
- [**27**Star][2y] [C] [okazakinagisa/vtbaseddebuggerwin7](https://github.com/okazakinagisa/vtbaseddebuggerwin7) Simple kernelmode driver.
- [**27**Star][9m] [Go] [nullhypothesis/sybilhunter](https://github.com/nullhypothesis/sybilhunter) Hunting for Sybils and anomalies in archived Tor network data.
- [**27**Star][9m] [Py] [nullarray/amplispy](https://github.com/nullarray/amplispy) Check local or remote list of DNS servers for suitability in DNS Amplification DoS.
- [**27**Star][1y] [Py] [nucypher/sputnik](https://github.com/nucypher/sputnik) Sputnik is an assembly language and interpreter for Fully Homomorphic Encryption
-- [**27**Star][10m] [Py] [noobscode/kalel](https://github.com/noobscode/kalel) Kal El Network Stress Test and Penetration Testing Toolkit
- [**27**Star][2y] [Java] [ninetysec/cknife](https://github.com/ninetysec/cknife) Cknife
- [**27**Star][4y] [C++] [nihilus/ida-pro-swf](https://github.com/nihilus/ida-pro-swf) SWF Process
- [**27**Star][2y] [Py] [niexinming/safe_tool](https://github.com/niexinming/safe_tool) safe_tools
@@ -15092,24 +16239,22 @@ networking routines
- [**27**Star][4m] [C++] [netdex/twinject](https://github.com/netdex/twinject) Automated player and hooking framework for bullet hell games from the Touhou Project
- [**27**Star][3y] [Java] [nccgroup/jmxbf](https://github.com/nccgroup/jmxbf) A brute force program to test weak accounts configured to access a JMX Registry
- [**27**Star][4y] [Py] [nbshelton/bitdump](https://github.com/nbshelton/bitdump) A tool to extract database data from a blind SQL injection vulnerability.
-- [**27**Star][1m] [nats-io/nats-general](https://github.com/nats-io/nats-general) General NATS Information
- [**27**Star][4m] [Py] [n4xh4ck5/v1d0m](https://github.com/n4xh4ck5/v1d0m) Enumerate subdomains through Virustotal
- [**27**Star][2y] [Shell] [n3uz/t-pot-autoinstall](https://github.com/n3uz/t-pot-autoinstall) T-POT 针对中国区替换国内加速镜像
-- [**27**Star][3y] [Py] [mvondracek/wifimitm](https://github.com/mvondracek/wifimitm) Automation of MitM Attack on Wi-Fi Networks
-- [**27**Star][3m] [Py] [mrwn007/m3m0](https://github.com/mrwn007/m3m0) M3m0 Tool
-- [**27**Star][1y] [Py] [mprhode/malware-prediction-rnn](https://github.com/mprhode/malware-prediction-rnn) RNN implementation with Keras for machine activity data to predict malware
+- [**27**Star][3y] [Py] [mzweilin/ipv6-attack-detector](https://github.com/mzweilin/ipv6-attack-detector) Google Summer of Code 2012 project, supported by The Honeynet Project organization.
+- [**27**Star][2y] [Py] [mrts/burp-suite-http-proxy-history-converter](https://github.com/mrts/burp-suite-http-proxy-history-converter) Python script that converts Burp Suite HTTP proxy history files to CSV or HTML
+- [**27**Star][1y] [Rust] [mortendahl/rust-paillier](https://github.com/mortendahl/rust-paillier) A pure-Rust implementation of the Paillier encryption scheme
- [**27**Star][2y] [Py] [morphuslabs/distinct](https://github.com/morphuslabs/distinct) Find potential Indicators of Compromise among similar Linux servers
- [**27**Star][1y] [C++] [moccajoghurt/memwars](https://github.com/moccajoghurt/memwars)
- [**27**Star][4y] [Py] [misteriouser/nextkey](https://github.com/misteriouser/nextkey) Free KeyLogger for Kali Linux and Ubuntu
- [**27**Star][11m] [Java] [minecraftforge/fernflower](https://github.com/minecraftforge/fernflower) Unofficial mirror of FernFlower Java decompiler, Subtree split of:
- [**27**Star][4y] [TeX] [mimoo/timing_attack_ecdsa_tls](https://github.com/mimoo/timing_attack_ecdsa_tls) Timing Attack on TLS' ECDSA signature
- [**27**Star][2y] [C#] [milo2012/owadump](https://github.com/milo2012/owadump) Search Email Accounts (OWA) for Passwords, PAN numbers as well as other Keywords
-- [**27**Star][1y] [Shell] [mikhbur/conformer](https://github.com/mikhbur/conformer) Password Guessing for different Web Portals
-- [**27**Star][13d] [C] [microsoft/wafbench](https://github.com/microsoft/wafbench) WAFBench (wb) is a tool to measure the performance of WAF(Web Application Firewall) . It's based on latest code of ab (ApacheBench), and adds support for real trace replaying, framework of testing waf (FTW), and some other features.
+- [**27**Star][15d] [C] [microsoft/wafbench](https://github.com/microsoft/wafbench) WAFBench (wb) is a tool to measure the performance of WAF(Web Application Firewall) . It's based on latest code of ab (ApacheBench), and adds support for real trace replaying, framework of testing waf (FTW), and some other features.
+- [**27**Star][1m] [Py] [mhaskar/xssradare](https://github.com/mhaskar/xssradare) A Cross Site Scripting scanner using selenium webdriver
- [**27**Star][10y] [C] [mcolyer/ifuse](https://github.com/mcolyer/ifuse) No longer actively developed here, see
- [**27**Star][5m] [Go] [mcandre/stank](https://github.com/mcandre/stank) stank: analyzers for determining whether files smell like rotten POSIX shell scripts, or faintly rosy like Ruby and Python scripts
- [**27**Star][3y] [C] [matteoserva/dirtycow-arm32](https://github.com/matteoserva/dirtycow-arm32)
-- [**27**Star][2y] [Java] [martinstyk/apkanalyzer](https://github.com/martinstyk/apkanalyzer) Java tool for analyzing Android APK files
- [**27**Star][2y] [mahmudz/malware](https://github.com/mahmudz/malware)
- [**27**Star][4m] [Go] [magisterquis/dnsbotnet](https://github.com/magisterquis/dnsbotnet) DNS Botnet Server and Client
- [**27**Star][6m] [C++] [m-r-j-o-h-n/swh-injector](https://github.com/m-r-j-o-h-n/swh-injector) An Injector that can inject dll into game process protected by anti cheat using SetWindowsHookEx.
@@ -15117,88 +16262,95 @@ networking routines
- [**27**Star][5y] [Go] [lucdew/goransomware](https://github.com/lucdew/goransomware) Ransomware written in Go language
- [**27**Star][5y] [JS] [lubyruffy/livemapdemo](https://github.com/lubyruffy/livemapdemo) 地图实时攻击演示
- [**27**Star][8m] [C++] [lordnoteworthy/binary-auditing-solutions](https://github.com/lordnoteworthy/binary-auditing-solutions) Solutions for Binary Auditing Package:
+- [**27**Star][3m] [PS] [loadenmb/tvasion](https://github.com/loadenmb/tvasion)
- [**27**Star][4m] [C++] [lianglixin/remotecontrol-x3](https://github.com/lianglixin/remotecontrol-x3) Saurik remote control software opensource, X17 is now available.
- [**27**Star][4y] [C] [lcxl/lcxl-shadow](https://github.com/lcxl/lcxl-shadow) LCXL影子系统
- [**27**Star][8y] [PHP] [koto/squid-imposter](https://github.com/koto/squid-imposter) Phishing attack w/HTML5 offline cache framework based on Squid proxy
- [**27**Star][11m] [C#] [kostapc/putty-tunnel-manager](https://github.com/kostapc/putty-tunnel-manager) Fixes and new release. PuTTY Tunnel Manager allows you to easily open tunnels, that are defined in a PuTTY session, from the system tray. You can also move the tunnels from PuTTY to PuTTY Tunnel Manager. This allows you to use PuTTY just for SSH shell sessions (without opening tunnels), and use PuTTY Tunnel Manager just for tunneling.
+- [**27**Star][2y] [Go] [kensodev/micro-auth-proxy](https://github.com/kensodev/micro-auth-proxy) Github Auth proxy designed for micro-apps with static client and an API server
+- [**27**Star][7y] [Py] [kcreyts/plugxdecoder](https://github.com/kcreyts/plugxdecoder) Decodes PlugX traffic and encrypted/compressed artifacts
- [**27**Star][8m] [C++] [karaulov/warcraftiii_dll_126-127](https://github.com/karaulov/warcraftiii_dll_126-127) Improvements for Warcraft III 126a used in new DoTA (d1stats.ru). Auto unload from w3x map and load to Warcraft III !
- [**27**Star][2y] [JS] [kafuuchinoq/v2raygeokit](https://github.com/kafuuchinoq/v2raygeokit)
- [**27**Star][2y] [Ruby] [kacperszurek/pentest_teamcity](https://github.com/kacperszurek/pentest_teamcity) Pentest TeamCity using Metasploit
+- [**27**Star][7m] [C++] [slyd0g/timestomper](https://github.com/slyd0g/TimeStomper) PoC that manipulates Windows file times using SetFileTime() API
- [**27**Star][2y] [Go] [jsimonetti/tlstun](https://github.com/jsimonetti/tlstun) A socks tunnel client and server using websockets over http and tls
-- [**27**Star][3m] [Py] [josue87/airopy](https://github.com/josue87/airopy) Get clients and access points.
-- [**27**Star][2y] [C] [johndoe31415/ratched](https://github.com/johndoe31415/ratched) Ratched is a transparent Man-in-the-Middle TLS proxy intended for penetration testing
-- [**27**Star][5m] [PowerShell] [johnaho/cloakify-powershell](https://github.com/johnaho/cloakify-powershell) Cloak files using text based steganography output to obsfucate what data they contain. Coded in Powershell. This is a port of TryCatchHCF's Cloakify written in python
+- [**27**Star][4m] [Py] [josue87/airopy](https://github.com/josue87/airopy) Get clients and access points.
+- [**27**Star][6d] [C] [johndoe31415/ratched](https://github.com/johndoe31415/ratched) Ratched is a transparent Man-in-the-Middle TLS proxy intended for penetration testing
- [**27**Star][3y] [Py] [jofpin/sack](https://github.com/jofpin/sack) Identify connection of sessions for social engineering attacks.
- [**27**Star][6m] [C++] [jnastarot/soul_eater](https://github.com/jnastarot/soul_eater) it can extract functions from .dll, .exe, .sys and it be work! :)
-- [**27**Star][29d] [C++] [jnastarot/enma_pe](https://github.com/jnastarot/enma_pe) Cross-platform library for parsing and building PE\PE+ formats
- [**27**Star][4y] [JS] [jgegeny/gootkit-xswkit-js](https://github.com/jgegeny/gootkit-xswkit-js)
+- [**27**Star][5d] [Java] [jenkinsci/remoting-kafka-plugin](https://github.com/jenkinsci/remoting-kafka-plugin) Jenkins Remoting over Kafka
- [**27**Star][7y] [C] [izsh/exploits](https://github.com/izsh/exploits) various exploits
- [**27**Star][4m] [C] [ispras/qemu](https://github.com/ispras/qemu)
-- [**27**Star][11m] [C] [intelpt/winafl-intelpt](https://github.com/intelpt/winafl-intelpt) A fork of AFL for fuzzing Windows binaries
+- [**27**Star][12m] [C] [intelpt/winafl-intelpt](https://github.com/intelpt/winafl-intelpt) A fork of AFL for fuzzing Windows binaries
- [**27**Star][3y] [C++] [int0/ltmdm64_poc](https://github.com/int0/ltmdm64_poc) ltmdm64_poc:利用ltmdm64.sys 的漏洞绕过 Windows 7 SP1 x64 的代码完整性检查
-- [**27**Star][2y] [Py] [ice3man543/malscan](https://github.com/ice3man543/malscan) A Simple PE File Heuristics Scanners
-- [**27**Star][2y] [Java] [ibey0nd/nstproxy](https://github.com/ibey0nd/nstproxy) 一款存储HTTP请求入库的burpsuite插件
- [**27**Star][4m] [C] [hyrathon/pocs](https://github.com/hyrathon/pocs) Some Proof-of-Concepts of bugs I found
- [**27**Star][4y] [C] [hxp2k6/smart7ec-scan-console](https://github.com/hxp2k6/smart7ec-scan-console) 基于Linux c开发的插件式扫描器(Python/lua)
-- [**27**Star][14d] [Perl] [hknutzen/netspoc](https://github.com/hknutzen/netspoc) A network security policy compiler. Netspoc is targeted at large environments with a large number of firewalls and admins. Firewall rules are derived from a single rule set. Supported are Cisco IOS, NX-OS, ASA and IPTables.
+- [**27**Star][8d] [Perl] [hknutzen/netspoc](https://github.com/hknutzen/netspoc) A network security policy compiler. Netspoc is targeted at large environments with a large number of firewalls and admins. Firewall rules are derived from a single rule set. Supported are Cisco IOS, NX-OS, ASA and IPTables.
- [**27**Star][6y] [C++] [hexgolems/pint](https://github.com/hexgolems/pint) A debugger backend and LUA wrapper for PIN
- [**27**Star][2y] [Go] [heptiolabs/certstream-slack](https://github.com/heptiolabs/certstream-slack) A small daemon that watches your domains in Certificate Transparency logs and posts them into Slack
- [**27**Star][6m] [hardenedlinux/embedded-iot_profile](https://github.com/hardenedlinux/embedded-iot_profile) embedded-iot_profile
- [**27**Star][2y] [JS] [hans-strudle/coinjack](https://github.com/hans-strudle/coinjack) Extension to HiJack/control web miners (like CoinHive)
- [**27**Star][4y] [C] [hannob/selftls](https://github.com/hannob/selftls) Sample application to let OpenSSL talk to itself (for fuzzing)
- [**27**Star][7m] [CSS] [hackeryunen/django-xss-platform](https://github.com/hackeryunen/django-xss-platform)
-- [**27**Star][8y] [C] [hackedteam/driver-win32](https://github.com/hackedteam/driver-win32) Windows (32bit) agent driver
- [**27**Star][6y] [C] [gwroblew/detectxsslib](https://github.com/gwroblew/detectxsslib)
- [**27**Star][2y] [Shell] [gustavosotnas/avd-launcher](https://github.com/gustavosotnas/avd-launcher) Front-end to Android Virtual Devices (AVDs) emulator from Google.
-- [**27**Star][1y] [Py] [fsacer/nps_payload](https://github.com/fsacer/nps_payload) This script will generate payloads for basic intrusion detection avoidance. It utilizes publicly demonstrated techniques from several different sources. Written by Larry Spohn (
+- [**27**Star][8y] [Py] [greysign/pysec](https://github.com/greysign/pysec) python安全编程
+- [**27**Star][11m] [C++] [giantpune/mailboxbomb](https://github.com/giantpune/mailboxbomb) a program used to build the mailbox bomb exploit for the Wii system menu.
+- [**27**Star][3y] [Py] [gdataadvancedanalytics/r2graphity](https://github.com/gdataadvancedanalytics/r2graphity) Creating function call graphs based on radare2 framwork, plot fancy graphs and extract behavior indicators
+- [**27**Star][2y] [Py] [fsacer/nps_payload](https://github.com/fsacer/nps_payload) This script will generate payloads for basic intrusion detection avoidance. It utilizes publicly demonstrated techniques from several different sources. Written by Larry Spohn (
- [**27**Star][3y] [fouroctets/android-malware-samples](https://github.com/fouroctets/android-malware-samples) Android Malware Samples
- [**27**Star][5m] [Py] [fluxchief/binaryninja_avr](https://github.com/fluxchief/binaryninja_avr) Binaryninja AVR architecture plugin with lifting
- [**27**Star][8y] [Py] [fitblip/pydbg](https://github.com/fitblip/pydbg) A pure-python win32 debugger interface.
-- [**27**Star][4y] [JS] [firebug/firequery](https://github.com/firebug/firequery) Firefox plugin for jQuery development
+- [**27**Star][8m] [Py] [fireeye/vocab_scraper](https://github.com/fireeye/vocab_scraper) Vocabulary Scraper script used in FLARE's analysis of Russian-language Carbanak source code
- [**27**Star][3y] [Py] [fare9/androidswissknife](https://github.com/fare9/androidswissknife) Framework for static and dynamic analysis in Android APKs
-- [**27**Star][8m] [C++] [ez8-co/xpjson](https://github.com/ez8-co/xpjson)
- [**27**Star][5m] [Py] [enovella/re-scripts](https://github.com/enovella/re-scripts) IDA, Ghidra and Radare2 scripts(no documentation)
-- [**27**Star][23d] [Py] [eleemosynator/writeups](https://github.com/eleemosynator/writeups) Write-ups for crackmes and CTF challenges
- [**27**Star][5m] [HTML] [edoverflow/security-template](https://github.com/edoverflow/security-template) A static website template for security pages.
- [**27**Star][2y] [syst3ma/awesome_cisco_exploitation](https://github.com/syst3ma/awesome_cisco_exploitation) A curated list of awesome Cisco exploitation resources
- [**27**Star][4m] [dustyfresh/dictionaries](https://github.com/dustyfresh/dictionaries) curated password lists and various other lists/dictionaries for security things
- [**27**Star][2m] [Dockerfile] [dukebarman/ghidra-builder](https://github.com/dukebarman/ghidra-builder) Docker image for building ghidra RE framework from source
- [**27**Star][3y] [Py] [duk3luk3/onion-py](https://github.com/duk3luk3/onion-py) Python wrapper for the OnionOO tor status API
- [**27**Star][3y] [C++] [dragonfive/opencv_tld](https://github.com/dragonfive/opencv_tld) TLD:tracking-learning-detection 跟踪算法
+- [**27**Star][8m] [Dockerfile] [dockage/tor-privoxy](https://github.com/dockage/tor-privoxy) Docker Tor proxy (http and shell) built on Alpine Linux
- [**27**Star][4y] [C++] [dkemp/vulndev](https://github.com/dkemp/vulndev) Vulnerability research and development.
- [**27**Star][5y] [Py] [djteller/memoryanalysis](https://github.com/djteller/memoryanalysis) Automated Memory Analysis (Black Hat Arsenal 2014)
+- [**27**Star][6m] [HTML] [divyanshusahu/minictf](https://github.com/divyanshusahu/minictf) A platform build in django for hosting CTF events.
- [**27**Star][10m] [C] [devdavisnunez/vhbb](https://github.com/devdavisnunez/vhbb) Browse, download, and launch Vita homebrews!
-- [**27**Star][7m] [Ruby] [dev-sec/ansible-apache-hardening](https://github.com/dev-sec/ansible-apache-hardening)
+- [**27**Star][8m] [Ruby] [dev-sec/ansible-apache-hardening](https://github.com/dev-sec/ansible-apache-hardening)
- [**27**Star][2y] [C] [deroko/activationcontexthook](https://github.com/deroko/activationcontexthook) activationcontexthook:Hook 进程,强制进程加载重定向的 DLL
-- [**27**Star][2y] [Py] [deralexxx/firemisp](https://github.com/deralexxx/firemisp) FireEye Alert json files to MISP Malware information sharing plattform (Alpha)
+- [**27**Star][3y] [Py] [deralexxx/firemisp](https://github.com/deralexxx/firemisp) FireEye Alert json files to MISP Malware information sharing plattform (Alpha)
- [**27**Star][2y] [C] [daveti/usbfilter](https://github.com/daveti/usbfilter) A USB layer firewall for the Linux kernel
-- [**27**Star][16d] [Py] [darksecdevelopers/absorber](https://github.com/darksecdevelopers/absorber) An advance keylogger that works and also logs special keys including uppercase letters as well.
-- [**27**Star][1y] [PowerShell] [danmcinerney/invoke-cats](https://github.com/danmcinerney/invoke-cats) Obfuscated Invoke-Mimikatz
+- [**27**Star][1y] [PS] [danmcinerney/invoke-cats](https://github.com/danmcinerney/invoke-cats) Obfuscated Invoke-Mimikatz
- [**27**Star][3y] [danielmiessler/atm](https://github.com/danielmiessler/atm) The Adaptive Security Testing Methodology (ASTM) provides context-adjusted testing methodologies based on factors such as time available to test, platform, technology stack, versions, plugins, modules, and other variables.
- [**27**Star][3y] [PureBasic] [dadido3/d3hex](https://github.com/dadido3/d3hex) The first dataflow based Hex-Editor!
- [**27**Star][3y] [Py] [d4vinci/clickjacking-tester](https://github.com/d4vinci/clickjacking-tester) A python script designed to check if the website if vulnerable of clickjacking and create a poc
-- [**27**Star][7m] [Py] [cryptolu/whitebox](https://github.com/cryptolu/whitebox) White-box Analysis and Implementation Tools
+- [**27**Star][4y] [PHP] [ctubio/php-proxy-stratum](https://github.com/ctubio/php-proxy-stratum) ReactPHP stratum+tcp proxy between miners and pools with database and frontend.
- [**27**Star][7y] [C++] [colagrosso/avviso](https://github.com/colagrosso/avviso) (unmaintained) Ring the red phone from your Arduino
-- [**27**Star][18d] [coky-t/owasp-mstg-ja](https://github.com/coky-t/owasp-mstg-ja) draft for Japanese translation of OWASP Mobile Security Testing Guide.
+- [**27**Star][21d] [coky-t/owasp-mstg-ja](https://github.com/coky-t/owasp-mstg-ja) draft for Japanese translation of OWASP Mobile Security Testing Guide.
- [**27**Star][2y] [Java] [coh7eiqu8thabu/slocker](https://github.com/coh7eiqu8thabu/slocker) Source code of the SLocker Android ransomware
-- [**27**Star][1m] [Java] [codehaus-plexus/plexus-archiver](https://github.com/codehaus-plexus/plexus-archiver)
- [**27**Star][3y] [C] [cn33liz/hsevd-stackoverflow](https://github.com/cn33liz/hsevd-stackoverflow) HackSys Extreme Vulnerable Driver - StackOverflow Exploit
- [**27**Star][3y] [C] [chuckixia/mirai-source-code](https://github.com/chuckixia/mirai-source-code) Leaked Mirai Source Code - make it vagrantized
- [**27**Star][4y] [Py] [cheetz/icmpshock](https://github.com/cheetz/icmpshock) A scanning tool for the ShellShock bash vulnerability
+- [**27**Star][10d] [JS] [checkmyhttps/checkmyhttps](https://github.com/checkmyhttps/checkmyhttps) We propose a user-friendly add-on that allows you to check if your encrypted web traffic (SSL/TLS) towards secured Internet servers (HTTPS) is not intercepted (being listened to).
- [**27**Star][11m] [JS] [chainsecurity/constantinople-reentrancy](https://github.com/chainsecurity/constantinople-reentrancy) Vulnerable code example including tests for Constantinople Reentrancy
-- [**27**Star][9m] [HTML] [cainiaocome/xssgun](https://github.com/cainiaocome/xssgun) xss payloads generator
+- [**27**Star][10m] [HTML] [cainiaocome/xssgun](https://github.com/cainiaocome/xssgun) xss payloads generator
- [**27**Star][6y] [Py] [c0d3sh3lf/android_forensics](https://github.com/c0d3sh3lf/android_forensics) Bypassing Android Pattern Lock
+- [**27**Star][10d] [JS] [bowlingtoolkit/discord-bots-hack-code](https://github.com/bowlingtoolkit/discord-bots-hack-code) Discord Bots Hacking
- [**27**Star][1y] [Perl] [bollwarm/app-waf](https://github.com/bollwarm/app-waf) A simple waf application .用来实时探测web 非法访问,统计非法访问的ip ,web状态,访问url,来源web url。结合iptables和nginx可以实现实现实时封禁。
- [**27**Star][2y] [PHP] [blackfan/web-inf-dict](https://github.com/blackfan/web-inf-dict) List of configuration files from WEB-INF and META-INF for use in Unvalidated Forwards and JSP Include vulnerabilities.
+- [**27**Star][6y] [Py] [bl4ckic3/modbus-fuzzer](https://github.com/bl4ckic3/modbus-fuzzer) Modbus Protocol Fuzzer
- [**27**Star][5m] [C] [biswa96/wslreverse](https://github.com/biswa96/wslreverse) Experiments with hidden COM interface and LxBus IPC mechanism in WSL
+- [**27**Star][2y] [Go] [biezhi/goinx](https://github.com/biezhi/goinx)
- [**27**Star][12m] [bcdannyboy/research](https://github.com/bcdannyboy/research) General Research Repository - Only updated when I feel like it
- [**27**Star][5m] [badappsdevelopment/wifi-cracker](https://github.com/badappsdevelopment/wifi-cracker) Wifi Cracking
- [**27**Star][2m] [JS] [b-mueller/sabre](https://github.com/b-mueller/sabre) Security analyzer for Solidity smart contracts. Uses MythX, the premier smart contract security service.
- [**27**Star][6m] [JS] [auth0/passport-wsfed-saml2](https://github.com/auth0/passport-wsfed-saml2) passport strategy for both WS-fed and SAML2 protocol
- [**27**Star][2y] [atom0s/ceautoasm-x64dbg](https://github.com/atom0s/ceautoasm-x64dbg) An x64dbg plugin that allows users to execute Cheat Engine auto assembler scripts within x64dbg.
+- [**27**Star][7m] [JS] [antville/antville](https://github.com/antville/antville) The Queen Mum of Weblog Hosting Systems – written in JavaScript since 2001.
- [**27**Star][3y] [Java] [animeshshaw/chromeforensics](https://github.com/animeshshaw/chromeforensics) A tool to perform automated forensic analysis of Chrome Browser.
- [**27**Star][4y] [C] [anarcheuz/android-pocs](https://github.com/anarcheuz/android-pocs)
- [**27**Star][2y] [JS] [anandtiwarics/datasploit](https://github.com/anandtiwarics/datasploit) A tool to perform various OSINT techniques, aggregate all the raw data, visualise it on a dashboard, and facilitate alerting and monitoring on the data.
+- [**27**Star][2y] [Shell] [digivill/all-in-one-wifi-cracker](https://github.com/Digivill/All-in-One-WiFi-Cracker) Linux All in One Wifi Cracker
- [**27**Star][1y] [alonemonkey/iosrebook-issues](https://github.com/alonemonkey/iosrebook-issues) 《iOS应用逆向与安全》 勘误
- [**27**Star][1y] [C] [alex9191/zerobank-ring0-bundle](https://github.com/alex9191/zerobank-ring0-bundle) Kernel-Mode rootkit that connects to a remote server to send & recv commands
- [**27**Star][11m] [Py] [al45tair/ds_store](https://github.com/al45tair/ds_store)
@@ -15206,148 +16358,154 @@ networking routines
- [**27**Star][1y] [Py] [ajinabraham/poc](https://github.com/ajinabraham/poc) Proof of Concepts, Exploits
- [**27**Star][8m] [Go] [ahhh/goredshell](https://github.com/ahhh/goredshell) A cross platform tool for verifying credentials and executing single commands
- [**27**Star][8y] [Py] [9b/pdfxray_lite](https://github.com/9b/pdfxray_lite) Lite version of PDF X-RAY that uses no backend
-- [**27**Star][2y] [PowerShell] [3gstudent/com-object-hijacking](https://github.com/3gstudent/com-object-hijacking) use COM Object hijacking to maintain persistence.(Hijack CAccPropServicesClass and MMDeviceEnumerator)
+- [**27**Star][4m] [C#] [717021/pcmgr](https://github.com/717021/pcmgr) Windows 任务管理器重制版 A rebulid version for Windows task manager.
+- [**27**Star][2y] [PS] [3gstudent/com-object-hijacking](https://github.com/3gstudent/com-object-hijacking) use COM Object hijacking to maintain persistence.(Hijack CAccPropServicesClass and MMDeviceEnumerator)
- [**27**Star][2y] [C] [1ce0ear/dllloaderunpacker](https://github.com/1ce0ear/dllloaderunpacker)
- [**27**Star][4y] [0xicf/scadashutdowntool](https://github.com/0xicf/scadashutdowntool)
- [**27**Star][1y] [Py] [daniel_plohmann/simplifire.idascope](https://bitbucket.org/daniel_plohmann/simplifire.idascope) An IDA Pro extension for easier (malware) reverse engineering
-- [**26**Star][2m] [bishopfox/cyberdic](https://github.com/bishopfox/cyberdic) An auxiliary spellcheck dictionary that corresponds with the Bishop Fox Cybersecurity Style Guide
-- [**26**Star][12m] [C] [martin-ger/esp_peap_psk](https://github.com/martin-ger/esp_peap_psk) A WPA2-PEAP to WPA2-PSK converter
+- [**26**Star][9m] [Rust] [felipenoris/hyper-reverse-proxy](https://github.com/felipenoris/hyper-reverse-proxy) A simple reverse proxy for use with Hyper and Tokio
+- [**26**Star][1y] [C] [brucedone/darknet_demo](https://github.com/brucedone/darknet_demo) darknet yolov3 tiny train model demo
+- [**26**Star][4m] [Swift] [itsjohnye/lead-ios](https://github.com/itsjohnye/lead-ios) a featherweight iOS SS proxy client with interactive UI
+- [**26**Star][3y] [CSS] [cw1997/mysql-monitor](https://github.com/cw1997/mysql-monitor) MySQL服务器执行SQL记录实时监控(WEB版本)
+- [**26**Star][1y] [C] [martin-ger/esp_peap_psk](https://github.com/martin-ger/esp_peap_psk) A WPA2-PEAP to WPA2-PSK converter
- [**26**Star][4y] [C] [ufrisk/shellcode64](https://github.com/ufrisk/shellcode64) A minimal tool to extract shellcode from 64-bit PE binaries.
-- [**26**Star][12d] [snail007/goproxy-cn](https://github.com/snail007/goproxy-cn) 高性能的http代理、https代理、socks5代理、ss代理、内网穿透、内网穿透p2p、内网穿透代理、内网穿透反向代理、内网穿透服务器、游戏盾、游戏高防、游戏代理,支持API代理认证。websocke代理、tcp代理、udp代理、socket代理、高仿服务器。支持正向代理、反向代理、透明代理、TCP内网穿透、UDP内网穿透、HTTP内网穿透、HTTPS内网穿透、https代理负载均衡、http代理负载均衡、socks5代理负载均衡、socket代理负载均衡、ss代理负载均衡、TCP/UDP端口映射、SSH中转、TLS加密传输、协议转换、防污染DNS代理,限速,限连接数。官方QQ交流群: 42805407。
- [**26**Star][6y] [chokepoint/crunchpwn](https://github.com/chokepoint/crunchpwn) #Pwn Linux (CrunchPwn) is a penetration testing repository/addition for CrunchBang Linux.
+- [**26**Star][20d] [Java] [snail007/goproxy-android](https://github.com/snail007/goproxy-android) snail007/goproxy全能代理服务器安卓版。高性能的http代理、https代理、socks5代理、ss代理、内网穿透、内网穿透p2p、内网穿透代理、内网穿透反向代理、内网穿透服务器、游戏盾、游戏高防、游戏代理,支持API代理认证。websocke代理、tcp代理、udp代理、socket代理、高仿服务器。支持正向代理、反向代理、透明代理、TCP内网穿透、UDP内网穿透、HTTP内网穿透、HTTPS内网穿透、https代理负载均衡、http代理负载均衡、socks5代理负载均衡、socket代理负载均衡、ss代理负载均衡、TCP/UDP端口映射、SSH中转、TLS加密传输、协议转换、防污染DNS代理,限速,限连接数。
- [**26**Star][2y] [Java] [calebfenton/resequencer](https://github.com/calebfenton/resequencer) Configurable, flexible regex-based APK modification tool.
- [**26**Star][2y] [Py] [epsylon/orb](https://github.com/epsylon/orb) Orb is a massive footprinting tool.
- [**26**Star][1y] [Py] [honeynet/checkpot](https://github.com/honeynet/checkpot) Checkpot Honeypot Checker
- [**26**Star][5y] [Py] [oros42/arp_poisoning_detector](https://github.com/oros42/arp_poisoning_detector) Simple detector of ARP poisoning attack
-- [**26**Star][3y] [Objective-C] [nabla-c0d3/ios-reversing](https://github.com/nabla-c0d3/ios-reversing) Some iOS tools and scripts from 2014 for iOS reversing.
-- [**26**Star][1m] [tidesec/auto_pentest_tool_course](https://github.com/tidesec/auto_pentest_tool_course) 《自动化漏洞挖掘技术实践》相关资料及脚本
+- [**26**Star][1y] [Py] [corelan/certmon](https://github.com/corelan/certmon) Certificate Expiration Monitor script
+- [**26**Star][3y] [ObjC] [nabla-c0d3/ios-reversing](https://github.com/nabla-c0d3/ios-reversing) Some iOS tools and scripts from 2014 for iOS reversing.
- [**26**Star][2m] [C] [oracle/dtrace-utils](https://github.com/oracle/dtrace-utils) DTrace-utils contains the Userspace portion of the DTrace port to Linux
- [**26**Star][3y] [Py] [juju/plugins](https://github.com/juju/plugins) Basic collection of the first few plugins for Juju
-- [**26**Star][6m] [TypeScript] [igio90/frida-onload](https://github.com/igio90/frida-onload) Frida module to hook module initializations on android
- [**26**Star][4y] [Shell] [infobyte/distro_checker](https://github.com/infobyte/distro_checker) Cross Distribution Exploit Testing
-- [**26**Star][2m] [Shell] [trojan-gfw/trojan-quickstart](https://github.com/trojan-gfw/trojan-quickstart) A simple installation script for trojan server.
- [**26**Star][4y] [Py] [snifer/gpt](https://github.com/snifer/gpt) Gadget Pentesting Tool Scripts
-- [**26**Star][5m] [C#] [netspi/daft](https://github.com/netspi/daft) DAFT: Database Audit Framework & Toolkit
+- [**26**Star][10m] [Py] [neo23x0/ti-falsepositives](https://github.com/neo23x0/ti-falsepositives) A collection of typical false positive indicators
- [**26**Star][1y] [ctfd/plugins](https://github.com/ctfd/plugins) Official and Community CTFd Plugins
-- [**26**Star][24d] [Py] [charlie-belmer/subdomain_recon](https://github.com/charlie-belmer/subdomain_recon) A subdomain reconnaissance scanner
-- [**26**Star][18d] [C] [jovanbulck/0xbadc0de](https://github.com/jovanbulck/0xbadc0de) A Tale of Two Worlds: Assessing the Vulnerability of Enclave Shielding Runtimes
-- [**26**Star][2y] [Shell] [digivill/all-in-one-wifi-cracker](https://github.com/digivill/all-in-one-wifi-cracker) Linux All in One Wifi Cracker
+- [**26**Star][2y] [Java] [lamster2018/learnndk](https://github.com/lamster2018/learnndk) 学习jni及反调试策略
- [**26**Star][1y] [Ruby] [ajitsing/apktojava](https://github.com/ajitsing/apktojava) View android apk as java code in gui
- [**26**Star][2m] [PHP] [krowinski/tinyid](https://github.com/krowinski/tinyid) Shorten and obfuscate IDs
- [**26**Star][2y] [C] [tokenrove/niffy](https://github.com/tokenrove/niffy) NIF testing harness
- [**26**Star][5m] [Py] [k8gege/sshshell](https://github.com/k8gege/sshshell) sshshell/sshcmd/sshlogin/sshcrack(SSH交互式Shell/内网渗透专用非交互式Shell/SSH密码爆破)Windows & Linux
-- [**26**Star][7m] [thomasking2014/slides](https://github.com/thomasking2014/slides)
+- [**26**Star][7m] [Py] [bonnetn/vba-obfuscator](https://github.com/bonnetn/vba-obfuscator) 2018 School project - PoC of malware code obfuscation in Word macros
+- [**26**Star][5d] [thomasking2014/slides](https://github.com/thomasking2014/slides)
- [**26**Star][6m] [Java] [static-flow/directoryimporter](https://github.com/static-flow/directoryimporter) This is a Burpsuite plugin built to enable you to import your directory bruteforcing results into burp for easy viewing later. This is an alternative to proxying bruteforcing tools through burp to catch the results.
-- [**26**Star][3m] [C++] [vulcainreo/dvid](https://github.com/vulcainreo/dvid) Damn Vulnerable IoT Device
- [**26**Star][4y] [cure53/publications](https://github.com/cure53/publications)
- [**26**Star][5m] [Py] [elevenpaths/pesto](https://github.com/elevenpaths/pesto)
-- [**26**Star][2m] [grapheneos/os_issue_tracker](https://github.com/grapheneos/os_issue_tracker) Issue tracker for GrapheneOS Android Open Source Project hardening work. Standalone projects like Auditor, AttestationServer and hardened_malloc have their own dedicated trackers.
- [**26**Star][2m] [HTML] [restincode/restincode](https://github.com/restincode/restincode) A memorial site for Hackers and Infosec people who have passed
- [**26**Star][4y] [Py] [stratosphereips/stratospherewindowsips](https://github.com/stratosphereips/StratosphereWindowsIps) The Stratosphere IPS is a free software IPS that uses network behavior to detect and block malicious actions.
- [**26**Star][3y] [Assembly] [cduplooy/rootkit](https://github.com/CDuPlooy/Rootkit)
+- [**26**Star][2y] [C#] [fsecurelabs/athena](https://github.com/FSecureLABS/Athena) GUI Tool to generate threat intelligence information in various formats
- [**26**Star][2y] [C++] [kernelm0de/runpe-processhollowing](https://github.com/kernelm0de/RunPE-ProcessHollowing) RunPE
-- [**26**Star][10m] [JS] [1lastbr3ath/2ndorder](https://github.com/1lastBr3ath/S2O) Chrome extension to inspect and find domains that don't resolve or have expired
+- [**26**Star][2m] [itechub/sqlmap-wiki-zhcn](https://github.com/itechub/sqlmap-wiki-zhcn)
- [**26**Star][2y] [Py] [meliot/ryanair-seats](https://github.com/meliot/ryanair-seats) Tool to predict which seat you will have for free
-- [**26**Star][2y] [tatsui-geek/malware-traffic-analysis.net](https://github.com/tatsui-geek/malware-traffic-analysis.net) Download pcap files from
+- [**26**Star][22d] [Py] [joesecurity/jbxapi](https://github.com/joesecurity/jbxapi) Python API wrapper for the Joe Sandbox API.
- [**26**Star][1y] [C] [fsecurelabs/incognito](https://github.com/FSecureLABS/incognito) One Token To Rule Them All
-- [**26**Star][3y] [C] [zenware/bluemaho](https://github.com/zenware/bluemaho) BlueMaho is GUI-shell (interface) for suite of tools for testing security of bluetooth devices. It is freeware, opensource, written on python, uses wxPyhon. It can be used for testing BT-devices for known vulnerabilities and major thing to do – testing to find unknown vulns. Also it can form nice statistics.
- [**26**Star][3y] [Java] [yolosec/upckeygen](https://github.com/yolosec/upckeygen) UPC router default WPA2 key generator
+- [**26**Star][4y] [HTML] [xyntax/campus-fakeap](https://github.com/xyntax/campus-fakeap) 针对校园网的wifi钓鱼工具
+- [**26**Star][1y] [C#] [xljiulang/debugviewer](https://github.com/xljiulang/debugviewer) 用于捕获任意进程调用System.Diagnostics.Debugger.Log (level,category,message)输出的调试内容
- [**26**Star][2y] [Py] [xiphosresearch/smsisher](https://github.com/xiphosresearch/smsisher) SMS Phishing Tools
-- [**26**Star][2y] [C] [x64dbg/plugintemplate](https://github.com/x64dbg/plugintemplate) Plugin template for x64dbg. Releases:
+- [**26**Star][2m] [Py] [wybiral/shh](https://github.com/wybiral/shh) Create Tor hidden services in Python.
- [**26**Star][5m] [Py] [wwkenwong/ctf-writeup](https://github.com/wwkenwong/ctf-writeup)
-- [**26**Star][10m] [Shell] [wuseman/tg799vac-xtream-v16.2-jade](https://github.com/wuseman/tg799vac-xtream-v16.2-jade) My personal unique wiki for hacking the router firmware used by (Telia)TG799vac Xtream Version 16.2 Jade delivered from Technicolor
+- [**26**Star][11m] [Shell] [wuseman/tg799vac-xtream-v16.2-jade](https://github.com/wuseman/tg799vac-xtream-v16.2-jade) My personal unique wiki for hacking the router firmware used by (Telia)TG799vac Xtream Version 16.2 Jade delivered from Technicolor
+- [**26**Star][1m] [JS] [wuseman/sagemcom-fast-5370e-telia](https://github.com/wuseman/sagemcom-fast-5370e-telia) This is my personal wiki for hacking the router firmware used by (Sagemcom)F@ast Version 3.43.2 delivered from Sagemcom
- [**26**Star][1m] [JS] [vulnogram/vulnogram](https://github.com/vulnogram/vulnogram) Vulnogram is a tool for creating and editing CVE information in CVE JSON format
- [**26**Star][5m] [C] [visweswaran1998/cybergod-ksgmprh](https://github.com/visweswaran1998/cybergod-ksgmprh) An open-source antivirus for windows
- [**26**Star][3y] [JS] [venables/node-where](https://github.com/venables/node-where) A very simple geolocation library in node.js
- [**26**Star][1y] [Py] [v-p-b/windowsdefendertools](https://github.com/v-p-b/windowsdefendertools) Tools for instrumenting Windows Defender's mpengine.dll
- [**26**Star][5y] [Java] [twilightgod/malwarebuster](https://github.com/twilightgod/malwarebuster) This is a Xposed module. It helps to prevent malwares to register service/receiver which were disabled in My Android Tools before.
+- [**26**Star][2m] [Dockerfile] [trojan-gfw/trojan-docker](https://github.com/trojan-gfw/trojan-docker) Dockerfile for building a trojan docker image.
- [**26**Star][4y] [Py] [tjcsec/ctf-platform](https://github.com/tjcsec/ctf-platform) A platform for running CTFs
- [**26**Star][3y] [Py] [tiankonguse/themole](https://github.com/tiankonguse/themole) Mole is an automatic SQL Injection exploitation tool. clone from sourceforge
- [**26**Star][4y] [Py] [threatminer/ioc_parser](https://github.com/threatminer/ioc_parser) Tool to extract indicators of compromise from security reports in PDF format
-- [**26**Star][7m] [Py] [thombashi/pingparsing](https://github.com/thombashi/pingparsing) pingparsing is a CLI-tool/Python-library parser and transmitter for ping command output.
-- [**26**Star][1y] [Py] [thesecondsun/pasm](https://github.com/thesecondsun/pasm) Linux assembler/disassembler based on Rasm2
- [**26**Star][8m] [Py] [thehappydinoa/tp-link-defaults](https://github.com/thehappydinoa/tp-link-defaults) Python script for trying default passwords for some TP-Link Hotspots
- [**26**Star][2y] [C++] [tamirzb/cve-2017-13253](https://github.com/tamirzb/cve-2017-13253) PoC code for CVE-2017-13253
- [**26**Star][3m] [Perl] [t00sh/ctf](https://github.com/t00sh/ctf) Exploits used on hacking CTF's
- [**26**Star][3y] [PHP] [symphonycms/xssfilter](https://github.com/symphonycms/xssfilter) An XSS filter for Events in Symphony CMS
- [**26**Star][5y] [C++] [strobejb/sslhook](https://github.com/strobejb/sslhook) OpenSSL hooking
- [**26**Star][2y] [C++] [strikerx3/whvpclient](https://github.com/strikerx3/whvpclient) Windows Hypervisor Platform client
-- [**26**Star][11d] [Py] [strawp/random-scripts](https://github.com/strawp/random-scripts) Quick and dirty scripts that don't really belong in a larger project
+- [**26**Star][13d] [Py] [strawp/random-scripts](https://github.com/strawp/random-scripts) Quick and dirty scripts that don't really belong in a larger project
- [**26**Star][1m] [Py] [starnightcyber/findsubdomains](https://github.com/starnightcyber/findsubdomains) A tool finding sub-domains for penetesters
- [**26**Star][7m] [C] [souhailhammou/panda-antivirus-lpe](https://github.com/souhailhammou/panda-antivirus-lpe) The exploit for Panda AV LPE
- [**26**Star][6m] [JS] [soprasteria/cybersecurity-dfm](https://github.com/soprasteria/cybersecurity-dfm) Data Feed Manager (news watch orchestrator to predict topic with deepdetect and store cleaned text in elasticsearch)
- [**26**Star][8m] [Py] [somerset-recon/blog](https://github.com/somerset-recon/blog) For code snippets and information
- [**26**Star][4y] [PHP] [sinfocol/vboxdie-cracker](https://github.com/sinfocol/vboxdie-cracker) VirtualBox Disk Image Encryption password cracker
- [**26**Star][9m] [Shell] [shverni/raspberry-pi-vpn-gateway](https://github.com/shverni/raspberry-pi-vpn-gateway) Raspberry Pi VPN gateway installer for Private Internet Access
-- [**26**Star][3m] [C#] [shack2/swebscan](https://github.com/shack2/swebscan) SWebScan是一款基于C#的Web目录扫描器。
+- [**26**Star][8m] [Ruby] [sensu-plugins/sensu-plugins-network-checks](https://github.com/sensu-plugins/sensu-plugins-network-checks) This plugin provides native network instrumentation for monitoring and metrics collection, including: hardware, TCP response, RBLs, whois, port status, and more.
- [**26**Star][5y] [Shell] [seankaiser/automation-scripts](https://github.com/seankaiser/automation-scripts)
- [**26**Star][1y] [Py] [ryaninf/cve-2018-2893](https://github.com/ryaninf/cve-2018-2893) CVE-2018-2893 PoC
- [**26**Star][3y] [C++] [rwfpl/rewolf-pcausa-exploit](https://github.com/rwfpl/rewolf-pcausa-exploit) PCAUSA Rawether for Windows Local Privilege Escalation
- [**26**Star][7m] [Py] [rofl0r/nat-tunnel](https://github.com/rofl0r/nat-tunnel) NAT Tunnel: to effortlessly serve from behind NAT
-- [**26**Star][1y] [TypeScript] [robinyo/ionic-angular-schematics](https://github.com/robinyo/ionic-angular-schematics) Schematics for Ionic Angular
-- [**26**Star][6m] [Shell] [rithvikvibhu/nh-magisk-wifi-firmware](https://github.com/rithvikvibhu/nh-magisk-wifi-firmware) This Magisk module adds the required firmware for external wireless adapters to be used with NetHunter.
- [**26**Star][1m] [Ruby] [risksense-ops/metasploit-framework](https://github.com/risksense-ops/metasploit-framework) Metasploit Framework
- [**26**Star][4m] [C++] [rischardv/riscv-alphanumeric-shellcoding](https://github.com/rischardv/riscv-alphanumeric-shellcoding) Alphanumeric+1 shellcoding tools for RISC-V
-- [**26**Star][6m] [retarded-skid/skidsuite-3](https://github.com/retarded-skid/skidsuite-3) A collection of java reverse engineering tools and informational links
- [**26**Star][4m] [Go] [releasel0ck/nettracer](https://github.com/releasel0ck/nettracer) This tool is used to map out the network data flow to help penetration testers identify potentially valuable targets.
-- [**26**Star][2y] [re4lity/secpaper](https://github.com/re4lity/secpaper) SecurityPaper For
-- [**26**Star][4y] [Objective-C] [qiuyuzhou/shadowsocks-ios](https://github.com/qiuyuzhou/shadowsocks-ios) No maintaining. Try this
+- [**26**Star][8m] [C++] [rek7/descrypt-cpu-collision-cracker](https://github.com/rek7/descrypt-cpu-collision-cracker) DEScrypt CPU Collision Cracker
+- [**26**Star][4y] [ObjC] [qiuyuzhou/shadowsocks-ios](https://github.com/qiuyuzhou/shadowsocks-ios) No maintaining. Try this
- [**26**Star][3y] [Ruby] [qazbnm456/docker-war](https://github.com/qazbnm456/docker-war) Docker based Wargame Platform - To practice your CTF skills
- [**26**Star][5m] [pushinginertia/ip-blacklist](https://github.com/pushinginertia/ip-blacklist) An Apache httpd configuration file that rejects access to a server from a list of blacklisted IPs
- [**26**Star][1y] [C++] [psaneme/kung-fu-malware](https://github.com/psaneme/kung-fu-malware)
+- [**26**Star][2y] [PHP] [probely/ctf-challenges](https://github.com/probely/ctf-challenges) Capture the flag challenges
- [**26**Star][11m] [C] [plutonium-dbg/plutonium-dbg](https://github.com/plutonium-dbg/plutonium-dbg) Kernel-based debugger for Linux applications
- [**26**Star][2y] [Py] [philarkwright/dga-detection](https://github.com/philarkwright/dga-detection) DGA Domain Detection using Bigram Frequency Analysis
+- [**26**Star][1y] [Shell] [panjks/t-pot-autoinstall](https://github.com/panjks/t-pot-autoinstall) Autoinstall T-Pot on Ubuntu 16.04
- [**26**Star][3y] [Java] [owasp/owaspbugbounty](https://github.com/owasp/owaspbugbounty) This is a container of web applications that work with OWASP Bug Bounty for Projects
- [**26**Star][1y] [Py] [osmode/ddash](https://github.com/osmode/ddash) DDASH - Ethereum Operating System for Knowledge Creation and Sharing
- [**26**Star][4y] [Py] [open-nsm/dockoo](https://github.com/open-nsm/dockoo) Malware analysis using Docker project
- [**26**Star][10m] [JS] [onrik/django-webshell](https://github.com/onrik/django-webshell) Django application for running python code in your project's environment from django admin.
- [**26**Star][8m] [C++] [offlinej/ida-rpc](https://github.com/offlinej/ida-rpc) Discord rich presence plugin for IDA Pro 7.0
- [**26**Star][3m] [JS] [nowsecure/frida-uikit](https://github.com/nowsecure/frida-uikit) Inspect and manipulate UIKit-based GUIs through Frida.
-- [**26**Star][1y] [C++] [notscimmy/libelevate](https://github.com/notscimmy/libelevate) Handle elevation DKOM against ObRegisterCallbacks
- [**26**Star][2m] [Shell] [noob-hackers/kalimux](https://github.com/noob-hackers/kalimux) Install kali linux in termux with desktop environment from kalimux oneclick installation tool no root required
- [**26**Star][2m] [Rust] [nixpulvis/oursh](https://github.com/nixpulvis/oursh) Your comrade through the perilous world of UNIX.
- [**26**Star][7y] [C++] [neuroo/pinpy](https://github.com/neuroo/pinpy) Detours from binaries method entry/exit point to Python scripts (PIN, CPython API)
-- [**26**Star][3y] [Py] [mzweilin/ipv6-attack-detector](https://github.com/mzweilin/ipv6-attack-detector) Google Summer of Code 2012 project, supported by The Honeynet Project organization.
- [**26**Star][2y] [Py] [murmus/ctf](https://github.com/murmus/ctf)
-- [**26**Star][2y] [Py] [mrts/burp-suite-http-proxy-history-converter](https://github.com/mrts/burp-suite-http-proxy-history-converter) Python script that converts Burp Suite HTTP proxy history files to CSV or HTML
- [**26**Star][9m] [HTML] [mpgn/cve-2019-9580](https://github.com/mpgn/cve-2019-9580) CVE-2019-9580 - StackStorm: exploiting CORS misconfiguration (null origin) to gain RCE
-- [**26**Star][1y] [Rust] [mortendahl/rust-paillier](https://github.com/mortendahl/rust-paillier) A pure-Rust implementation of the Paillier encryption scheme
- [**26**Star][3y] [C] [monosource/radare2-explorations-binaries](https://github.com/monosource/radare2-explorations-binaries) Supplement to radare2-explorations.
- [**26**Star][11m] [Perl] [modernistik/nmap-parser](https://github.com/modernistik/nmap-parser) Parse nmap scan data with Perl (official repo)
-- [**26**Star][12m] [TypeScript] [mitre/attack-navigator](https://github.com/mitre/attack-navigator) ATT&CK导航/浏览工具. 以表格形式显示ATT&CK各种技术, 并执行某些操作. 基于Angular
-- [**26**Star][3m] [Shell] [misp/misp-vagrant](https://github.com/misp/misp-vagrant) Deploy MISP Project software with Vagrant.
+- [**26**Star][12m] [TS] [mitre/attack-navigator](https://github.com/mitre/attack-navigator) ATT&CK导航/浏览工具. 以表格形式显示ATT&CK各种技术, 并执行某些操作. 基于Angular
+- [**26**Star][4m] [Shell] [misp/misp-vagrant](https://github.com/misp/misp-vagrant) Deploy MISP Project software with Vagrant.
- [**26**Star][10m] [C++] [michmich/analogvoltmeterclock](https://github.com/michmich/analogvoltmeterclock) An Arduino based analog volt meter clock.
+- [**26**Star][2y] [Py] [mgeeky/visualbasicobfuscator](https://github.com/mgeeky/visualbasicobfuscator) Visual Basic Code universal Obfuscator intended to be used during penetration testing assignments.
+- [**26**Star][1y] [Py] [mdsecactivebreach/lambda-webbugs](https://github.com/mdsecactivebreach/lambda-webbugs) A proof of concept for delivering webbugs via AWS lambda
- [**26**Star][5y] [Py] [matonis/rippe](https://github.com/matonis/rippe) ripPE - section extractor and profiler for PE file analysis
- [**26**Star][2m] [Rust] [marcograss/rust-kernelcache-extractor](https://github.com/marcograss/rust-kernelcache-extractor) Extract a decrypted iOS 64-bit kernelcache
- [**26**Star][3y] [C++] [marcnewlin/mousejack-nes-controller](https://github.com/marcnewlin/mousejack-nes-controller) MouseJack NES controller firmware and build guide.
+- [**26**Star][3y] [Py] [mandatoryprogrammer/xcname](https://github.com/mandatoryprogrammer/xcname) A tool for enumerating expired domains in CNAME records
- [**26**Star][3y] [lucifer1993/awesome-hacking](https://github.com/lucifer1993/awesome-hacking) awesome hacking chinese version
-- [**26**Star][3m] [PowerShell] [loadenmb/tvasion](https://github.com/loadenmb/tvasion)
+- [**26**Star][2m] [HTML] [locomotive-crypto/crypto_book_1st](https://github.com/locomotive-crypto/crypto_book_1st) 《深入浅出CryptoPP密码学库》随书电子文档
- [**26**Star][2y] [PHP] [lloricode/ci-capstone](https://github.com/lloricode/ci-capstone) Enrollment System with CodeIgniter
- [**26**Star][5y] [C#] [lennyleng/radioeye](https://github.com/lennyleng/radioeye) RFID Security Audit Tool
- [**26**Star][6y] [C] [kacheo/kernelrootkit](https://github.com/kacheo/kernelrootkit) Linux kernel rootkit to hide certain files and processes.
-- [**26**Star][7m] [C++] [slyd0g/timestomper](https://github.com/slyd0g/TimeStomper) PoC that manipulates Windows file times using SetFileTime() API
+- [**26**Star][5y] [Py] [joxeankoret/mynav](https://github.com/joxeankoret/mynav) Automatically exported from code.google.com/p/mynav
+- [**26**Star][2m] [Py] [joshzelonis/attack-eval-scoring](https://github.com/joshzelonis/attack-eval-scoring)
- [**26**Star][9m] [Py] [joda32/got-responded](https://github.com/joda32/got-responded) A simple tool to detect NBT-NS and LLMNR spoofing (and messing with them a bit)
- [**26**Star][2y] [Py] [jlospinoso/unfurl](https://github.com/jlospinoso/unfurl) An Entropy-Based Link Vulnerability Tool
- [**26**Star][7y] [C++] [jingpu/pintools](https://github.com/jingpu/pintools)
- [**26**Star][4y] [jgamblin/hackapie](https://github.com/jgamblin/hackapie) An Raspberry PI 2 OpenWRT Image Setup To Be A Wireless Hacking Sandbox
- [**26**Star][2y] [Shell] [jgamblin/defensive-s3-buckets](https://github.com/jgamblin/defensive-s3-buckets) Defensive S3 Bucket Squating
-- [**26**Star][11d] [Java] [jenkinsci/remoting-kafka-plugin](https://github.com/jenkinsci/remoting-kafka-plugin) Jenkins Remoting over Kafka
- [**26**Star][2y] [Shell] [jchrisfarris/aws-service-control-policies](https://github.com/jchrisfarris/aws-service-control-policies) Collection of semi-useful Service Control Policies and scripts to manage them
- [**26**Star][1y] [JS] [ioactive/bluecrawl](https://github.com/ioactive/bluecrawl) Frida (Android) Script for extracting bluetooth information
- [**26**Star][2m] [Py] [initstring/pentest-tools](https://github.com/initstring/pentest-tools) General stuff for pentesting - password cracking, phishing, automation, Kali, etc.
- [**26**Star][3y] [C++] [ilyatk/hookengine](https://github.com/ilyatk/hookengine)
+- [**26**Star][1y] [Py] [ihack4falafel/slink](https://github.com/ihack4falafel/slink) Alphanumeric Shellcode (x86) Encoder
- [**26**Star][3y] [Py] [hydrabus/rhme-2016](https://github.com/hydrabus/rhme-2016) The RHme2 (Riscure Hack me 2) is a low level hardware CTF challenge that comes in the form of an Arduino Nano board. The new edition provides a completely different set of new challenges to test your skills in side channel, fault injection, cryptoanalysis and software exploitation attacks.
- [**26**Star][4y] [Shell] [hrishioa/nomohead](https://github.com/hrishioa/nomohead) Simple Bash script that announces IP Address and ngrok tunnel of Raspberry Pi at boot
+- [**26**Star][2y] [R] [hrbrmstr/crafter](https://github.com/hrbrmstr/crafter) Analyze and Visualize Network Packet Capture (PCAP) Files
- [**26**Star][3y] [C++] [hpsocket/restclient-cpp](https://github.com/hpsocket/restclient-cpp) C++ winnet/winhttp api restclient
- [**26**Star][1m] [Py] [hiddenillusion/ir](https://github.com/hiddenillusion/ir) Some dfir stuff
- [**26**Star][1y] [Shell] [hestat/minerchk](https://github.com/hestat/minerchk) Bash script to Check for malicious Cryptomining
+- [**26**Star][6m] [Java] [hakbot/hakbot-origin-controller](https://github.com/hakbot/hakbot-origin-controller) Vendor-Neutral Security Tool Automation Controller (over REST)
- [**26**Star][3y] [Assembly] [gyje/bios_rootkit](https://github.com/gyje/bios_rootkit) 来自Freebuf评论区,一个UEFI马.
+- [**26**Star][2y] [Go] [grocid/passdesktop](https://github.com/grocid/passdesktop)
- [**26**Star][4y] [C] [gregwar/mitm](https://github.com/gregwar/mitm) Man in the middle tool
-- [**26**Star][7d] [Py] [greenbone/python-gvm](https://github.com/greenbone/python-gvm) Greenbone Vulnerability Management Python Library
+- [**26**Star][10m] [Kotlin] [gosecure/burp-ntlm-challenge-decoder](https://github.com/gosecure/burp-ntlm-challenge-decoder) Burp extension to decode NTLM SSP headers and extract domain/host information
- [**26**Star][7m] [Groovy] [gmacario/easy-jenkins](https://github.com/gmacario/easy-jenkins) Easily deploy a Jenkins CI/CD infrastructure via docker-compose
+- [**26**Star][6m] [Py] [githacktools/githacktools](https://github.com/githacktools/githacktools) The best Hacking and PenTesting tools installer on the world
- [**26**Star][3m] [Py] [ghassani/mclf-ida-loader](https://github.com/ghassani/mclf-ida-loader) An IDA file loader for Mobicore trustlet and driver binaries
+- [**26**Star][3m] [C++] [frida/frida-clr](https://github.com/frida/frida-clr) Frida .NET bindings
- [**26**Star][1y] [HTML] [flyrabbit/winproject](https://github.com/flyrabbit/winproject) Hook, DLLInject, PE_Tool
- [**26**Star][5y] [Py] [fireeye/pycommands](https://github.com/fireeye/pycommands) PyCommand Scripts for Immunity Debugger
+- [**26**Star][4y] [Py] [fengxuangit/pyshell](https://github.com/fengxuangit/pyshell) python版菜刀 连接一句话木马
- [**26**Star][3m] [Pascal] [felipedaragon/catarinka](https://github.com/felipedaragon/catarinka) A powerful set of multi-purpose libraries for Pascal/Delphi and Lua
- [**26**Star][9m] [C] [eternityx/deadcell-oshgui](https://github.com/eternityx/deadcell-oshgui) OSHGui project files
- [**26**Star][8m] [Shell] [ericpskl/exportec2volumeimage](https://github.com/ericpskl/exportec2volumeimage) A Bash script which uses AWS CLI to create an image of an AWS EC2 volume
@@ -15356,26 +16514,28 @@ networking routines
- [**26**Star][3y] [Go] [egebalci/ticketbleed](https://github.com/egebalci/ticketbleed) This is a tool for exploiting Ticketbleed (CVE-2016-9244) vulnerability.
- [**26**Star][1y] [eclypsium/publications](https://github.com/eclypsium/publications) Slides, papers, etc
- [**26**Star][7m] [ebiquity/unified-cybersecurity-ontology](https://github.com/ebiquity/unified-cybersecurity-ontology) Unified Cybersecurity Ontology
-- [**26**Star][6m] [HTML] [divyanshusahu/minictf](https://github.com/divyanshusahu/minictf) A platform build in django for hosting CTF events.
+- [**26**Star][4y] [Py] [dinotools/pysslscan](https://github.com/dinotools/pysslscan) Framework and command-line tool to scan SSL enabled services
- [**26**Star][4y] [C++] [dfct/inssidious](https://github.com/dfct/inssidious) A uniquely frustrating wireless network.
- [**26**Star][5m] [HTML] [devnetsandbox/sbx_multi_ios](https://github.com/devnetsandbox/sbx_multi_ios) Sample code, examples, and resources for use with the DevNet Multi-IOS Sandbox
- [**26**Star][1y] [Ruby] [dev-sec/chef-postgres-hardening](https://github.com/dev-sec/chef-postgres-hardening) This chef cookbook provides security configuration for PostgreSQL.
+- [**26**Star][2m] [Ruby] [david942j/rbelftools](https://github.com/david942j/rbelftools) ELF parser library implemented in pure Ruby!
- [**26**Star][2y] [Py] [danmcinerney/smb-autopwn](https://github.com/danmcinerney/smb-autopwn) Discovers and exploits hosts vulnerable to MS08-067/MS17-010
- [**26**Star][2y] [C] [danghvu/nginx-1.4.0](https://github.com/danghvu/nginx-1.4.0) For the analysis of CVE-2013-2028
- [**26**Star][4y] [Py] [cyberhatcoil/acf](https://github.com/cyberhatcoil/acf) Android Connections Forensics
- [**26**Star][1y] [C++] [cyanidee/snowflake](https://github.com/cyanidee/snowflake) A simple CSGO cheat base written in mind of begginers.
- [**26**Star][2y] [C++] [cuitche/code-obfuscation](https://github.com/cuitche/code-obfuscation) 一款iOS代码混淆工具(A code obfuscation tool for iOS.)
- [**26**Star][2y] [Shell] [crackpkcs12/crackpkcs12](https://github.com/crackpkcs12/crackpkcs12) A multithreaded program to crack PKCS#12 files (p12 and pfx extensions)
+- [**26**Star][3m] [Go] [cpl/cryptor](https://github.com/cpl/cryptor) Privacy, Anonymity, Freedom - P2P network
- [**26**Star][1y] [C++] [cpasjuste/scummvm](https://github.com/cpasjuste/scummvm) ScummVM main repository
+- [**26**Star][12m] [C#] [cocowalla/snifter](https://github.com/cocowalla/snifter) Snifter is a raw socket IP packet capturing tool for Windows, with a tiny CPU and memory footprint
- [**26**Star][4y] [Py] [cleveridge/cleveridge-subdomain-scanner](https://github.com/cleveridge/cleveridge-subdomain-scanner) The Cleveridge Subdomain Scanner finds subdomains of a given domain.
- [**26**Star][12m] [Py] [chrisjd20/power_dump](https://github.com/chrisjd20/power_dump) powershell memory dumper
- [**26**Star][4y] [JS] [chaitin/sqlchop-http-proxy](https://github.com/chaitin/sqlchop-http-proxy) SQLChop reverse http proxy module
- [**26**Star][9m] [Py] [byt3bl33d3r/dnschef](https://github.com/byt3bl33d3r/dnschef) DNSChef - DNS proxy for Penetration Testers and Malware Analysts
- [**26**Star][1y] [brute-f0rce/ceh](https://github.com/brute-f0rce/ceh) Exam Prep for the Ec-council Certified Ethical Hacker 312-50
- [**26**Star][7y] [Py] [bozhu/rc4-python](https://github.com/bozhu/rc4-python) A python implementation of the block cipher RC4
-- [**26**Star][1y] [Objective-C] [boxproject/box-staff-manager](https://github.com/boxproject/box-staff-manager) Employee App is used for initialize transactions, user management, authorise flow so that enteripise digital assets can be managed by stakeholders and partners.
-- [**26**Star][1m] [blackbagtech/sleuthkit-apfs](https://github.com/blackbagtech/sleuthkit-apfs) A fork of The Sleuthkit with Pooled Storage and APFS support. See
-- [**26**Star][6y] [Py] [bl4ckic3/modbus-fuzzer](https://github.com/bl4ckic3/modbus-fuzzer) Modbus Protocol Fuzzer
+- [**26**Star][1y] [ObjC] [boxproject/box-staff-manager](https://github.com/boxproject/box-staff-manager) Employee App is used for initialize transactions, user management, authorise flow so that enteripise digital assets can be managed by stakeholders and partners.
+- [**26**Star][2m] [blackbagtech/sleuthkit-apfs](https://github.com/blackbagtech/sleuthkit-apfs) A fork of The Sleuthkit with Pooled Storage and APFS support. See
- [**26**Star][2y] [JS] [bkimminich/webappsec-nutshell](https://github.com/bkimminich/webappsec-nutshell) An ultra-compact intro (or refresher) to Web Application Security.
- [**26**Star][2y] [Py] [bipabo1l/ssrf_scan](https://github.com/bipabo1l/ssrf_scan) 多线程批量扫描ssrf漏洞
- [**26**Star][2y] [Go] [benjojo/traceroute-haiku](https://github.com/benjojo/traceroute-haiku) A thing you can traceroute and it gives you a haiku inside the trace
@@ -15385,70 +16545,86 @@ networking routines
- [**26**Star][7y] [C++] [avalon1610/lpc](https://github.com/avalon1610/lpc) windows LPC library
- [**26**Star][4y] [atktgs/blackhat2015arsenal](https://github.com/atktgs/blackhat2015arsenal) My Quick Note of BlackHat 2015 Arsenal
- [**26**Star][3y] [astocko/json-x86-64](https://github.com/astocko/json-x86-64) x86-64 Intel instruction set in JSON format
-- [**26**Star][8d] [C] [armfazh/rfc7748_precomputed](https://github.com/armfazh/rfc7748_precomputed) Updated! (Dec2-2019) This is a C-language software library that provides optimized implementations of the Diffie-Hellman functions known as X25519 and X448 (RFC-7748) for 64-bit architectures.
-- [**26**Star][7m] [JS] [antville/antville](https://github.com/antville/antville) The Queen Mum of Weblog Hosting Systems – written in JavaScript since 2001.
+- [**26**Star][2m] [Rust] [arosspope/cipher-crypt](https://github.com/arosspope/cipher-crypt) A cryptographic tomb of ciphers forgotten by time.
+- [**26**Star][10d] [C] [armfazh/rfc7748_precomputed](https://github.com/armfazh/rfc7748_precomputed) Updated! (Dec2-2019) This is a C-language software library that provides optimized implementations of the Diffie-Hellman functions known as X25519 and X448 (RFC-7748) for 64-bit architectures.
- [**26**Star][2y] [Py] [aniketp/network-programming](https://github.com/aniketp/network-programming) Small Projects on Socket Programming, Website Scanning, Wireless & Network Security
- [**26**Star][2y] [Jupyter Notebook] [andykamath/nfl-data-hacking](https://github.com/andykamath/nfl-data-hacking) Algorithmically draft NFL players for your fantasy league!
- [**26**Star][2y] [Py] [androidtamer/frida-push](https://github.com/androidtamer/frida-push) Wrapper tool to identify the remote device and push device specific frida-server binary.
-- [**26**Star][5m] [Py] [andreafioraldi/angrdbg](https://github.com/andreafioraldi/angrdbg) Abstract library to generate angr states from a debugger state
-- [**26**Star][2y] [Shell] [digivill/all-in-one-wifi-cracker](https://github.com/Digivill/All-in-One-WiFi-Cracker) Linux All in One Wifi Cracker
+- [**26**Star][6m] [Py] [andreafioraldi/angrdbg](https://github.com/andreafioraldi/angrdbg) Abstract library to generate angr states from a debugger state
- [**26**Star][2y] [JS] [an0ny420/ps4-4.0x--4.05-code-execution-poc](https://github.com/an0ny420/ps4-4.0x--4.05-code-execution-poc) 4.05 added support
- [**26**Star][3y] [C] [alpackers/ctf-writeups](https://github.com/alpackers/ctf-writeups) CTF Writeups
- [**26**Star][5y] [Py] [alfarom/nmap](https://github.com/alfarom/nmap) python nmap tool to scan hosts and search
for CVE details based on the nmap report.
- [**26**Star][2y] [Py] [alfa100001/-cve-2017-0785-blueborne-poc](https://github.com/alfa100001/-cve-2017-0785-blueborne-poc) CVE-2017-0785 BlueBorne PoC
- [**26**Star][3y] [JS] [alexhorn/defendjs](https://github.com/alexhorn/defendjs) A free and open source JavaScript and Node.js obfuscator.
+- [**26**Star][2y] [Py] [alanshaw-github/minimips](https://github.com/alanshaw-github/minimips) Introducing the new lightweight MIPS Assembler and Disassembler, supporting syntax highlighting, code editing, file dragging and dropping, debug mode, assembly and disassembly, Molokai color matching style. Full platform support including Windows, macOS and Linux. Star now! Keep updating!
- [**26**Star][1y] [C] [aircrack-ng/openwips-ng](https://github.com/aircrack-ng/openwips-ng) OpenWIPS-ng is an open source and modular Wireless IPS (Intrusion Prevention System)
- [**26**Star][5m] [Shell] [adon90/ip2hosts](https://github.com/adon90/ip2hosts) Dirty bash script to obtain hosts given an IP address
-- [**26**Star][21d] [Shell] [adnanhodzic/anon-hotspot](https://github.com/adnanhodzic/anon-hotspot) On demand Debian Linux (Tor) Hotspot setup tool
-- [**26**Star][4m] [C#] [717021/pcmgr](https://github.com/717021/pcmgr) Windows 任务管理器重制版 A rebulid version for Windows task manager.
+- [**26**Star][23d] [Shell] [adnanhodzic/anon-hotspot](https://github.com/adnanhodzic/anon-hotspot) On demand Debian Linux (Tor) Hotspot setup tool
+- [**26**Star][2y] [Py] [adanvillarreal/spydan](https://github.com/adanvillarreal/spydan) A web spider for shodan.io without using the Developer API.
- [**26**Star][2y] [C] [5h311-1nj3c706/local-root-exploits](https://github.com/5h311-1nj3c706/local-root-exploits) LOCAL ROOT EXPLOITS
+- [**26**Star][2y] [C++] [3gstudent/hiddenntregistry](https://github.com/3gstudent/hiddenntregistry) Use NT Native Registry API to create a registry that normal user can not query.
- [**26**Star][2y] [JS] [0xsobky/regaxor](https://github.com/0xsobky/regaxor) A regular expression fuzzer.
+- [**26**Star][2m] [Lua] [0x4d31/hassh-utils](https://github.com/0x4d31/hassh-utils) Nmap NSE Script and Docker image for HASSH - the SSH client/server fingerprinting method (
+- [**25**Star][1y] [ObjC] [skifary/c4msis](https://github.com/skifary/c4msis) ios shadowsocks app based on NEKit
+- [**25**Star][13d] [Py] [eth-sri/ilf](https://github.com/eth-sri/ilf) AI based fuzzer based on imitation learning
+- [**25**Star][6y] [C++] [stealth/pam_schroedinger](https://github.com/stealth/pam_schroedinger) Uncertainty for brute forcers during login.
- [**25**Star][6m] [Py] [mozillasecurity/avalanche](https://github.com/mozillasecurity/avalanche) Avalanche is a document generator which uses context-free grammars to generate randomized outputs for fuzz-testing.
-- [**25**Star][21d] [Shell] [pirate/fish-functions](https://github.com/pirate/fish-functions)
+- [**25**Star][23d] [Shell] [pirate/fish-functions](https://github.com/pirate/fish-functions)
- [**25**Star][4m] [Py] [mozillasecurity/laniakea](https://github.com/mozillasecurity/laniakea) Laniakea is a utility for managing instances at various cloud providers and aids in setting up a fuzzing cluster.
- [**25**Star][3m] [Py] [jgamblin/kali-virtualbox](https://github.com/jgamblin/kali-virtualbox) A Python Script To Automatically Download, Provision and Update a Kali Linux VM in Virtualbox
+- [**25**Star][4d] [Ruby] [intrigueio/intrigue-ident](https://github.com/intrigueio/intrigue-ident) Asset Fingerprinting Library
- [**25**Star][1y] [C#] [fuzzysecurity/dotnettojscript-languagemodebreakout](https://github.com/fuzzysecurity/dotnettojscript-languagemodebreakout)
- [**25**Star][3y] [wtsxdev/application-security](https://github.com/wtsxdev/application-security) Resources for learning about application security
- [**25**Star][6y] [C#] [isecpartners/peachfarmer](https://github.com/isecpartners/peachfarmer) A log collector for Peach fuzzing in the cloud
+- [**25**Star][8y] [C++] [cr4sh/simpleunpacker](https://github.com/cr4sh/simpleunpacker) Simple tool for unpacking packed/protected malware executables.
- [**25**Star][8m] [C++] [hikariobfuscator/noctilucence](https://github.com/hikariobfuscator/noctilucence) Embedded Bitcode Recompiler
+- [**25**Star][2y] [Py] [jpcertcc/strelok](https://github.com/jpcertcc/strelok) Application for STIX v2.0 objects management and analysis
- [**25**Star][1y] [HTML] [649/crash-ios-exploit](https://github.com/649/crash-ios-exploit) Repository dedicated to storing a multitude of iOS/macOS/OSX/watchOS crash bugs. Some samples need to be viewed as raw in order to see the Unicode. Please do not intentionally abuse these exploits.
- [**25**Star][4y] [Py] [averagesecurityguy/scapy](https://github.com/averagesecurityguy/scapy) Scapy Presentation and Code
-- [**25**Star][26d] [CSS] [flatpak/flatpak.github.io](https://github.com/flatpak/flatpak.github.io) Flatpak website
+- [**25**Star][28d] [CSS] [flatpak/flatpak.github.io](https://github.com/flatpak/flatpak.github.io) Flatpak website
- [**25**Star][3y] [gdbinit/adium-ng-preview](https://github.com/gdbinit/adium-ng-preview) Repo to dump some preview info and builds for adium-ng
-- [**25**Star][3y] [Objective-C] [kpwn/rapd2](https://github.com/kpwn/rapd2) simple radare2 rap:// server
+- [**25**Star][6m] [Py] [pyauth/pywarp](https://github.com/pyauth/pywarp) Python WebAuthn Relying Party library
+- [**25**Star][2m] [Go] [influxdata/wirey](https://github.com/influxdata/wirey) Manage local wireguard interfaces in a distributed system
+- [**25**Star][8m] [offensive-security/gcc-arm-linux-gnueabihf-4.7](https://github.com/offensive-security/gcc-arm-linux-gnueabihf-4.7) gcc-arm-linux-gnueabihf-4.7/
+- [**25**Star][3y] [ObjC] [kpwn/rapd2](https://github.com/kpwn/rapd2) simple radare2 rap:// server
+- [**25**Star][15d] [JS] [fsecurelabs/android-keystore-audit](https://github.com/fsecurelabs/android-keystore-audit)
- [**25**Star][2m] [Go] [banzaicloud/dast-operator](https://github.com/banzaicloud/dast-operator) Dynamic Application Security Testing
- [**25**Star][8m] [offensive-security/kali-linux-docker-rolling](https://github.com/offensive-security/kali-linux-docker-rolling)
- [**25**Star][6y] [Py] [opensecurityresearch/custompassivescanner](https://github.com/opensecurityresearch/custompassivescanner) A Custom Scanner for Burp
+- [**25**Star][2m] [starnightcyber/subdomains](https://github.com/starnightcyber/subdomains) 互联网公司子域名收集
- [**25**Star][2y] [C#] [zjyl1994/v2switcher](https://github.com/zjyl1994/v2switcher) 极简V2Ray配置切换器,拯救多线用户
-- [**25**Star][11m] [Visual Basic] [modify24x7/ultimate-advanced-apktool](https://github.com/modify24x7/ultimate-advanced-apktool) v4.1
+- [**25**Star][11m] [Visual Basic .NET] [modify24x7/ultimate-advanced-apktool](https://github.com/modify24x7/ultimate-advanced-apktool) v4.1
- [**25**Star][6y] [C] [kylekirkby/python-exploit-search-tool](https://github.com/kylekirkby/python-exploit-search-tool) A search tool that searches Offensive Securitys Exploit-db and Shodans Exploit DB using their API.
- [**25**Star][9m] [Assembly] [thog/ghidra_falcon](https://github.com/thog/ghidra_falcon) Support of Nvidia Falcon processors for Ghidra (WIP)
- [**25**Star][10m] [Rust] [archer884/harsh](https://github.com/archer884/harsh) Hashids implementation in Rust
- [**25**Star][4y] [C++] [vivek-ramachandran/wi-door](https://github.com/vivek-ramachandran/wi-door) Wi-Fi Backdoors
- [**25**Star][9y] [C] [clockfort/wifi-locator](https://github.com/clockfort/wifi-locator) Determines physical location of station judging from 802.11 beacons' BSSID/Signal/Noise/Quality information.
-- [**25**Star][3m] [security-prince/resources-for-application-security](https://github.com/security-prince/Resources-for-Application-Security) Some good resources for getting started with application security
+- [**25**Star][2d] [security-prince/resources-for-application-security](https://github.com/security-prince/Resources-for-Application-Security) Some good resources for getting started with application security
+- [**25**Star][3m] [JS] [lanmaster53/cef](https://github.com/lanmaster53/cef) Proof-of-concept CORS exploitation tool.
- [**25**Star][2m] [C++] [3xpl017/linpwn](https://github.com/3xpl017/linpwn) Interactive Post Exploitation Tool
-- [**25**Star][3m] [security-prince/resources-for-application-security](https://github.com/security-prince/resources-for-application-security) Some good resources for getting started with application security
+- [**25**Star][2d] [security-prince/resources-for-application-security](https://github.com/security-prince/resources-for-application-security) Some good resources for getting started with application security
+- [**25**Star][2m] [HTML] [trojan-tutor/trojan-tutor.github.io](https://github.com/trojan-tutor/trojan-tutor.github.io) trojan 教程 自建梯子教程 trojan教程 trojan-gfw 科学上网 代理工具 翻墙 Ubuntu Debian 小白教程 https伪装
- [**25**Star][2m] [C] [airbus-cert/pstrace](https://github.com/airbus-cert/pstrace) Trace ScriptBlock execution for powershell v2
- [**25**Star][1y] [Py] [avicoder/hackerone](https://github.com/avicoder/Hackerone) Hackerone disclosed report URL Aggregator
- [**25**Star][3y] [monsterzer0/cyber-security-guide](https://github.com/monsterzer0/Cyber-Security-Guide) The Whitepaper For Enterprise Security created by Monster Zero Team
- [**25**Star][2y] [retbandit-zz/blackhat2017](https://github.com/retbandit-zz/BlackHat2017) BlackHat Europe 2017 Slides
-- [**25**Star][2y] [C#] [fsecurelabs/athena](https://github.com/FSecureLABS/Athena) GUI Tool to generate threat intelligence information in various formats
-- [**25**Star][3m] [Py] [blacknbunny/encdecshellcode](https://github.com/blacknbunny/encdecshellcode) Shellcode Encrypter & Decrypter With XOR Cipher
-- [**25**Star][1y] [Jupyter Notebook] [aicoe/prometheus-data-science](https://github.com/AICoE/prometheus-data-science) A collection of analysis, analytics, and machine learning techniques for time series forecasting w/ Prometheus metrics
-- [**25**Star][2m] [itechub/sqlmap-wiki-zhcn](https://github.com/itechub/sqlmap-wiki-zhcn)
-- [**25**Star][14d] [PHP] [backdoorhub/shell-backdoor-list](https://github.com/backdoorhub/shell-backdoor-list)
+- [**25**Star][5y] [Py] [5ee/socialengineerdbuilder](https://github.com/5ee/SocialEngineerDBuilder) 整理社工库的工具
+- [**25**Star][4m] [Py] [blacknbunny/encdecshellcode](https://github.com/blacknbunny/encdecshellcode) Shellcode Encrypter & Decrypter With XOR Cipher
+- [**25**Star][2y] [Py] [loveraven42/tools](https://github.com/loveraven42/tools) 渗透所用小工具以及poc
- [**25**Star][6y] [C] [whyallyn/paythepony](https://github.com/whyallyn/paythepony) Pay the Pony is hilarityware that uses the Reflective DLL injection library to inject into a remote process, encrypt and demand a ransom for files, and inflict My Little Pony madness on a system.
- [**25**Star][4y] [C] [riswandans/litesploit](https://github.com/riswandans/litesploit) library and intepreter for penetration testing tools
- [**25**Star][3y] [zyrikby/android_permission_evolution](https://github.com/zyrikby/android_permission_evolution) Analysis of the evolution of Android permissions. This repository contains the results presented in the paper "Small Changes, Big Changes: An Updated View on the Android Permission System".
- [**25**Star][3y] [Py] [zyantific/continuum](https://github.com/zyantific/continuum) Plugin adding multi-binary project support to IDA Pro (WIP)
- [**25**Star][5y] [Py] [zhengmin1989/droidanalytics](https://github.com/zhengmin1989/droidanalytics) linux version (rewrite in Python)
-- [**25**Star][15d] [Py] [yannayl/ctf-writeups](https://github.com/yannayl/ctf-writeups) Write ups of solution for CTF challenges I solved
+- [**25**Star][17d] [Py] [yannayl/ctf-writeups](https://github.com/yannayl/ctf-writeups) Write ups of solution for CTF challenges I solved
- [**25**Star][2y] [Py] [xme/emlrender](https://github.com/xme/emlrender) EML file rendering tool
- [**25**Star][9m] [Py] [xmcp/acfan](https://github.com/xmcp/acfan) 名副其实的自动AC机
- [**25**Star][4y] [Py] [xfkxfk/pyvulhunter](https://github.com/xfkxfk/pyvulhunter) python audit tool 审计 注入 inject
+- [**25**Star][2m] [Py] [xebia/mobilehacktools](https://github.com/xebia/mobilehacktools) A repository for scripting a mobile attack toolchain
- [**25**Star][5y] [wirelesscollege/securitytools](https://github.com/wirelesscollege/securitytools) android安全工具大全
+- [**25**Star][2y] [C] [wiire-a/bully](https://github.com/wiire-a/bully) Brute force attack against WPS, that actually works
+- [**25**Star][3y] [Java] [whyalwaysmea/mobilesafe](https://github.com/whyalwaysmea/mobilesafe) 这是一个android版的手机卫士,包含一下功能:1.手机防盗 2. 黑名单设置 3.软件管理 4.进程管理 5.流量统计 6.缓存清理 7.手机杀毒 8.来电归属地显示 9.号码归属地查询 10.程序锁
- [**25**Star][6y] [waytai/cloudsafe](https://github.com/waytai/cloudsafe) cloudsafe 云安全扫描
- [**25**Star][2y] [Py] [w00t3k/insp3ctor](https://github.com/w00t3k/insp3ctor) AWS S3 Bucket/Object Finder
- [**25**Star][3y] [C++] [vix597/vulny](https://github.com/vix597/vulny) Vulnerable Linux socket game for educational purposes
@@ -15461,59 +16637,73 @@ for CVE details based on the nmap report.
- [**25**Star][3y] [Py] [toxic-ig/pythonkeylogger](https://github.com/toxic-ig/pythonkeylogger) A remote keylogger with some cool features
- [**25**Star][7y] [Py] [tosanjay/bopfunctionrecognition](https://github.com/tosanjay/bopfunctionrecognition) plugin to BinNavi tool to analyze a x86 binanry file to find buffer overflow prone functions. Such functions are important for vulnerability analysis.
- [**25**Star][4y] [Go] [tomsteele/shellsquid](https://github.com/tomsteele/shellsquid) A dynamic HTTP and DNS reverse proxy
-- [**25**Star][2y] [Objective-C] [tijme/reverse-engineering](https://github.com/tijme/reverse-engineering) This repository contains some of the executables that I've cracked.
+- [**25**Star][2y] [ObjC] [tijme/reverse-engineering](https://github.com/tijme/reverse-engineering) This repository contains some of the executables that I've cracked.
- [**25**Star][3y] [Py] [threatresponse/mad-king](https://github.com/threatresponse/mad-king) Proof of Concept Zappa Based AWS Persistence and Attack Platform
-- [**25**Star][2y] [PowerShell] [thoughtfuldev/psimage-delivery](https://github.com/thoughtfuldev/psimage-delivery) Use Invoke-PSImage to deliver a payload in an Image
+- [**25**Star][2y] [PS] [thoughtfuldev/psimage-delivery](https://github.com/thoughtfuldev/psimage-delivery) Use Invoke-PSImage to deliver a payload in an Image
- [**25**Star][2y] [Py] [thekingofduck/autosploit_chs](https://github.com/thekingofduck/autosploit_chs) 渗透工具AutoSploit的汉化版
+- [**25**Star][2y] [Py] [the404hacking/windows-python-rat](https://github.com/the404hacking/windows-python-rat) A New Microsoft Windows Remote Administrator Tool [RAT] with Python by Sir.4m1R.
- [**25**Star][2y] [Py] [the404hacking/websploit](https://github.com/the404hacking/websploit) Websploit is an advanced MITM framework.
-- [**25**Star][11m] [C#] [technikempire/citadelcore](https://github.com/technikempire/citadelcore) Cross platform filtering HTTP/S proxy based on .NET Standard 2.0.
+- [**25**Star][12m] [C#] [technikempire/citadelcore](https://github.com/technikempire/citadelcore) Cross platform filtering HTTP/S proxy based on .NET Standard 2.0.
- [**25**Star][12m] [techbliss/ida_pro_ultimate_qt_build_guide](https://github.com/techbliss/ida_pro_ultimate_qt_build_guide) Ida Pro Ultimate Qt Build Guide
+- [**25**Star][2y] [Py] [tasdikrahman/thanos](https://github.com/tasdikrahman/thanos) A dead simple demonstration of SQL injection in an SQLite database
- [**25**Star][6m] [Py] [tarcisio-marinho/rsb-framework](https://github.com/tarcisio-marinho/rsb-framework) Windows/Linux - ReverseShellBackdoor Framework
-- [**25**Star][22d] [C] [sysprogs/openocd](https://github.com/sysprogs/openocd) OpenOCD shipped with VisualGDB. Built with CMake.
+- [**25**Star][4y] [Py] [tampe125/mongodb-scraper](https://github.com/tampe125/mongodb-scraper) Scraps for publicly accessible MongoDB instances and dumps user passwords
+- [**25**Star][24d] [C] [sysprogs/openocd](https://github.com/sysprogs/openocd) OpenOCD shipped with VisualGDB. Built with CMake.
- [**25**Star][2y] [LLVM] [syreal17/cardinal](https://github.com/syreal17/cardinal) Similarity Analysis to Defeat Malware Compiler Variations
- [**25**Star][2y] [C#] [symbolsource/symbolsource](https://github.com/symbolsource/symbolsource)
+- [**25**Star][8y] [stefanesser/serialkdpproxy](https://github.com/stefanesser/serialkdpproxy) Improved version of David Elliott's SerialKDPProxy
+- [**25**Star][8y] [Ruby] [spiderlabs/yara-ruby](https://github.com/spiderlabs/yara-ruby) Ruby bindings for the yara file analysis and classification library
+- [**25**Star][1y] [Gherkin] [soluto/containers-security-project](https://github.com/soluto/containers-security-project) A place for documenting threats and mitigations related to containers orchestrators (Kubernetes, Swarm etc)
- [**25**Star][1y] [Ruby] [smiegles/certs](https://github.com/smiegles/certs) certs: 解析 X509 证书, 获取其中的(子)域名
- [**25**Star][1y] [PHP] [sipcapture/homer-api](https://github.com/sipcapture/homer-api) HOMER 5: Back-End (API)
- [**25**Star][3y] [Shell] [simonschuang/rpi-hostapd](https://github.com/simonschuang/rpi-hostapd)
+- [**25**Star][2m] [Py] [sim642/whatpulse](https://github.com/sim642/whatpulse) WhatPulse reverse engineered
- [**25**Star][1y] [Py] [si9int/screenshooter](https://github.com/si9int/screenshooter) Convert your masscan/subdomain-scan results (80,443,8080) into screenshots for better analysis
- [**25**Star][10m] [C++] [shaxzy/nixware-csgo](https://github.com/shaxzy/nixware-csgo) Source code of Nixware. Cheat doesn't inject for some reason, fix it uself or just paste from it
- [**25**Star][3y] [Py] [shawarkhanethicalhacker/brutexss-1](https://github.com/shawarkhanethicalhacker/brutexss-1) BruteXSS - Cross-Site Scripting Bruteforcer
- [**25**Star][3y] [Py] [shakenetwork/mimipenguin](https://github.com/shakenetwork/mimipenguin) Mimipenguin密码抓取神器
- [**25**Star][2m] [HTML] [shahril96/online-assembler-disassembler](https://github.com/shahril96/online-assembler-disassembler) Online assembler and disassembler
+- [**25**Star][2y] [shadowsocksr-rm/shadowsocksx-ng](https://github.com/shadowsocksr-rm/shadowsocksx-ng) Next Generation of ShadowsocksX
- [**25**Star][4y] [Py] [sghctoma/multipass](https://github.com/sghctoma/multipass) A small wriiteup and a PoC tool about how to use SO_REUSADDR for firewall evasion
- [**25**Star][3y] [JS] [sethsec/nodejs-ssrf-app](https://github.com/sethsec/nodejs-ssrf-app) Nodejs application intentionally vulnerable to SSRF
-- [**25**Star][8m] [Ruby] [sensu-plugins/sensu-plugins-network-checks](https://github.com/sensu-plugins/sensu-plugins-network-checks) This plugin provides native network instrumentation for monitoring and metrics collection, including: hardware, TCP response, RBLs, whois, port status, and more.
- [**25**Star][2y] [Py] [scanfsec/ihoneyportscan](https://github.com/scanfsec/ihoneyportscan) 轻量端口扫描器、信息泄露扫描、批量网站备份扫描
- [**25**Star][2y] [Py] [sc0tfree/netbyte](https://github.com/sc0tfree/netbyte) Netbyte is a Netcat-style tool that facilitates probing proprietary TCP and UDP services. It is lightweight, fully interactive and provides formatted output in both hexadecimal and ASCII.
+- [**25**Star][5y] [Py] [sash-ko/kaggle-malware-classification](https://github.com/sash-ko/kaggle-malware-classification) Kaggle "Microsoft Malware Classification Challenge". 6th place solution
- [**25**Star][4m] [Shell] [sap/vulnerability-assessment-kb](https://github.com/sap/vulnerability-assessment-kb) This dataset contains fix commits for known vulnerabilities in open-source projects and fuels the vulnerability-assessment-tool
- [**25**Star][1y] [C] [s54mtb/loradunchy](https://github.com/s54mtb/loradunchy) Lora board with Arduino nano compatibile pinout and simple battery management
- [**25**Star][10y] [C] [ryantenney/php7](https://github.com/ryantenney/php7) Hacking the PHP compiler and standard libraries in the name of turning it into a not crappy language. (Unofficial. No warranty whatsoever.)
- [**25**Star][5y] [Go] [rverton/xssmap](https://github.com/rverton/xssmap) (DOM-)XSS fuzzer based on phantomjs and go.
- [**25**Star][3y] [C#] [rummykhan/sql-nightmare](https://github.com/rummykhan/sql-nightmare) SQL SERVER Exploitation.
-- [**25**Star][1y] [robocyber/shodan-dorks](https://github.com/robocyber/shodan-dorks) Dorks for shodan.io. Some basic shodan dorks collected from publicly available data.
+- [**25**Star][1y] [Go] [rsrdesarrollo/sasshimi](https://github.com/rsrdesarrollo/sasshimi) SSH Tunnelling in "RAW mode", via STDIN/OUT without using forwarding channels
- [**25**Star][1y] [C] [renorobert/virtualbox-nat-dhcp-bugs](https://github.com/renorobert/virtualbox-nat-dhcp-bugs)
- [**25**Star][6m] [CSS] [remmina/et-electron](https://github.com/remmina/et-electron) Eagle Tunnel 的图形化客户端,一个简单的代理工具
-- [**25**Star][8m] [C++] [rek7/descrypt-cpu-collision-cracker](https://github.com/rek7/descrypt-cpu-collision-cracker) DEScrypt CPU Collision Cracker
+- [**25**Star][5m] [HTML] [rafaybaloch/sop-bypass-mini-test-suite](https://github.com/rafaybaloch/sop-bypass-mini-test-suite) This test suite contains over 40 different test cases that have proven to work with different mobile browsers in my research or testing Same Origin Policy bypass issues with browsers. Due credits were given to the researchers whose Proof of concepts have been incorporated in this test suite. Please note that, this is just the beta version, the n…
- [**25**Star][3m] [C++] [quangnh89/dbgsymgrabber](https://github.com/quangnh89/dbgsymgrabber) Just another tool to download specify Symbol (.pdb) files
-- [**25**Star][3y] [PowerShell] [proxb/pinvoke](https://github.com/proxb/pinvoke) One-off scripts that I have written involving PInvoke and PowerShell
-- [**25**Star][2y] [PHP] [probely/ctf-challenges](https://github.com/probely/ctf-challenges) Capture the flag challenges
+- [**25**Star][4m] [JS] [qabin/kb-proxy](https://github.com/qabin/kb-proxy) kb-proxy 是一个可本地部署的、提供代理功能、接口测试管理、支持在线Mock、Host环境管理的在线工具平台。
+- [**25**Star][2y] [Swift] [purkylin/kingproxy](https://github.com/purkylin/kingproxy) A proxy like privoxy and antinat
+- [**25**Star][3y] [PS] [proxb/pinvoke](https://github.com/proxb/pinvoke) One-off scripts that I have written involving PInvoke and PowerShell
- [**25**Star][2y] [Py] [prezi/django-zipkin](https://github.com/prezi/django-zipkin) [Unmaintained] A Django middleware and api for recording and sending messages to Zipkin
-- [**25**Star][2m] [Java] [portswigger/taborator](https://github.com/portswigger/taborator) A Burp extension to show the Collaborator client in a tab
+- [**25**Star][6d] [Java] [portswigger/taborator](https://github.com/portswigger/taborator) A Burp extension to show the Collaborator client in a tab
+- [**25**Star][1m] [Py] [portswigger/sqli-py](https://github.com/portswigger/sqli-py) SQLiPy is a Python plugin for Burp Suite that integrates SQLMap using the SQLMap API.
- [**25**Star][3y] [Java] [pokeolaf/pokemongodecoderforburp](https://github.com/pokeolaf/pokemongodecoderforburp) A simpe decoder to decode requests/responses made by PokemonGo in burp
- [**25**Star][3y] [Go] [peoples-cloud/pc](https://github.com/peoples-cloud/pc) people's cloud: using the ideas of botnets for good
- [**25**Star][2y] [Py] [pentestbox/scripts](https://github.com/pentestbox/scripts)
- [**25**Star][12m] [Go] [parsiya/go-security](https://github.com/parsiya/go-security) My Go security projects
-- [**25**Star][10d] [F#] [paralax/burningdogs](https://github.com/paralax/burningdogs) Honeypot log processor to create OTX Pulse entries
-- [**25**Star][1y] [Shell] [panjks/t-pot-autoinstall](https://github.com/panjks/t-pot-autoinstall) Autoinstall T-Pot on Ubuntu 16.04
+- [**25**Star][3d] [F#] [paralax/burningdogs](https://github.com/paralax/burningdogs) Honeypot log processor to create OTX Pulse entries
- [**25**Star][2y] [packtpublishing/digital-forensics-with-kali-linux](https://github.com/packtpublishing/digital-forensics-with-kali-linux) Digital Forensics with Kali Linux, published by Packt
- [**25**Star][2y] [Py] [owtf/ptp](https://github.com/owtf/ptp) Pentester's Tools Parser (PTP) provides an unified way to retrieve the information from all (final goal) automated pentesting tools and assign an automated ranking for each finding.
+- [**25**Star][5m] [optixal/oscp-pwk-notes-public](https://github.com/optixal/oscp-pwk-notes-public)
- [**25**Star][10m] [Dockerfile] [opsxcq/docker-metasploit](https://github.com/opsxcq/docker-metasploit) Metasploit framework with steroids
- [**25**Star][1y] [Go] [opennota/hydra](https://github.com/opennota/hydra) Penetration testing tool. This repository has migrated to
- [**25**Star][1y] [omg2hei/vulnerability-env](https://github.com/omg2hei/vulnerability-env) 收集国内外开源CMS存在漏洞的各种版本
+- [**25**Star][1y] [Py] [nviso-be/decompile-py2exe](https://github.com/nviso-be/decompile-py2exe) Decompile py2exe Python 3 generated EXEs
- [**25**Star][4y] [Java] [nvisium/httpillage](https://github.com/nvisium/httpillage)
- [**25**Star][1y] [Py] [numirias/firefed](https://github.com/numirias/firefed)
- [**25**Star][3y] [C] [nukem9/idaskins](https://github.com/nukem9/idaskins) *DEPRECATED* Advanced skinning plugin for IDA Pro, ported to x64dbg
+- [**25**Star][2d] [JS] [npm/npm-packlist](https://github.com/npm/npm-packlist) Walk through a folder and figure out what goes in an npm package
- [**25**Star][5y] [Py] [noobiedog/dir-xcan](https://github.com/noobiedog/dir-xcan) Python version of OWASP's DirBuster Application.
+- [**25**Star][8m] [Py] [nixwizard/kube-alien](https://github.com/nixwizard/kube-alien)
+- [**25**Star][3y] [Rust] [nixos/security](https://github.com/nixos/security)
- [**25**Star][3y] [Py] [nairuzabulhul/keyplexer](https://github.com/nairuzabulhul/keyplexer) Capstone: Keylogger Trojan
- [**25**Star][5m] [Java] [mx-futhark/hook-any-text](https://github.com/mx-futhark/hook-any-text) The goal of this project is to provide an alternative to well established text hookers, whose features are restrained to a certain number of game engines and emulators.
- [**25**Star][1y] [Assembly] [mrfearless/apisearch-plugin-x86](https://github.com/mrfearless/apisearch-plugin-x86) APISearch Plugin (x86) - A Plugin For x64dbg
@@ -15523,84 +16713,98 @@ for CVE details based on the nmap report.
- [**25**Star][7m] [Makefile] [mintty/wsltty.appx](https://github.com/mintty/wsltty.appx)
- [**25**Star][4y] [Py] [milo2012/social-engineering-toys](https://github.com/milo2012/social-engineering-toys) Social Engineering Toys
- [**25**Star][3m] [Py] [mikaelkall/massrecon](https://github.com/mikaelkall/massrecon) This reconissance tool is specific written for OSCP engagements.
-- [**25**Star][4m] [Py] [michaeldim02/hvazard](https://github.com/michaeldim02/hvazard) Remove short passwords & duplicates, change lowercase to uppercase & reverse, combine wordlists!
-- [**25**Star][1m] [Py] [mhaskar/xssradare](https://github.com/mhaskar/xssradare) A Cross Site Scripting scanner using selenium webdriver
-- [**25**Star][2y] [Py] [mgeeky/visualbasicobfuscator](https://github.com/mgeeky/visualbasicobfuscator) Visual Basic Code universal Obfuscator intended to be used during penetration testing assignments.
-- [**25**Star][13d] [meitar/awesome-pentest](https://github.com/meitar/awesome-pentest)
-- [**25**Star][5m] [Py] [mechpen/sockdump](https://github.com/mechpen/sockdump) Dump unix domain socket traffic with bpf
-- [**25**Star][1y] [Py] [mdsecactivebreach/lambda-webbugs](https://github.com/mdsecactivebreach/lambda-webbugs) A proof of concept for delivering webbugs via AWS lambda
+- [**25**Star][5m] [Py] [michaeldim02/hvazard](https://github.com/michaeldim02/hvazard) Remove short passwords & duplicates, change lowercase to uppercase & reverse, combine wordlists!
+- [**25**Star][15d] [meitar/awesome-pentest](https://github.com/meitar/awesome-pentest)
- [**25**Star][6y] [Py] [marshyski/sshwatch](https://github.com/marshyski/sshwatch) Intrusion Prevention System (IPS) for Secure Shell (SSH)
- [**25**Star][3y] [Go] [maddevsio/telegram_bbbot](https://github.com/maddevsio/telegram_bbbot) Telegram Bug Bounty Bot
- [**25**Star][2y] [ANTLR] [luftek/limesdr-usb](https://github.com/luftek/limesdr-usb) USB 3.0 version of the LimeSDR board
+- [**25**Star][3m] [Shell] [leviathan36/wifibang](https://github.com/leviathan36/wifibang) wifi attacks suite
+- [**25**Star][8m] [Py] [letheanmovement/lethean-vpn](https://github.com/letheanmovement/lethean-vpn) Lethean Virtual Private Network (VPN)
- [**25**Star][4y] [Py] [legbacore/t2e_integrity_check](https://github.com/legbacore/t2e_integrity_check) Integrity checking script for Apple Thunderbolt to Ethernet adapters, to check for attacks similar to Thunderstrike 2
+- [**25**Star][11m] [C] [0xdrrb/hackrf_ook](https://github.com/0xDRRB/hackrf_ook) ASK-OOK transmit tool for Great Scott Gadget HackRF
- [**25**Star][3y] [C] [leetchicken/afl](https://github.com/leetchicken/afl) Unofficial American Fuzzy Lop repo
- [**25**Star][4y] [Go] [leechristensen/tgscrack](https://github.com/leechristensen/tgscrack) Kerberos TGS_REP cracker written in Golang
- [**25**Star][2y] [C] [ktemkin-archive/atmosphere](https://github.com/ktemkin-archive/Atmosphere) Atmosphère is a work-in-progress customized firmware for the Nintendo Switch.
- [**25**Star][1y] [C++] [kriw/ropchain](https://github.com/kriw/ropchain) ROPChain generator.
- [**25**Star][3y] [Py] [kostrin/pillage](https://github.com/kostrin/pillage) Pillage is a multithreaded enumeration python script I created for the enumeration phase of penetration tests.
- [**25**Star][7y] [Perl] [kost/vulnscan-pwcrack](https://github.com/kost/vulnscan-pwcrack) Password guessers for popular vulnerability scanners and frameworks: Find the password for your favourite vulnscanners: OpenVAS, Nessus, NeXpose or Metasploit
+- [**25**Star][4y] [Shell] [kisom/surfraw](https://github.com/kisom/surfraw) local changes to surfraw - local edits prior to sending updates to surfraw-devel
+- [**25**Star][14d] [AutoIt] [kirlovon/devil-backdoor](https://github.com/kirlovon/devil-backdoor) Simple backdoor for public places, that uses a file system for communication. Just for fun!
- [**25**Star][3y] [Py] [kingtuna/hybrid-darknet-concept](https://github.com/kingtuna/hybrid-darknet-concept)
-- [**25**Star][5y] [Py] [joxeankoret/mynav](https://github.com/joxeankoret/mynav) Automatically exported from code.google.com/p/mynav
+- [**25**Star][1m] [TS] [kennbroorg/iky](https://github.com/kennbroorg/iky) OSINT Project
+- [**25**Star][1y] [Assembly] [joric/arduino-bitcoin-miner](https://github.com/joric/arduino-bitcoin-miner) Arduino Bitcoin Miner (plain C and AVR assembly versions)
- [**25**Star][5y] [C++] [jeremyfetiveau/exploits](https://github.com/jeremyfetiveau/exploits) Old exploits and code for my self-referencing PML4 technique (2014)
- [**25**Star][1m] [Java] [jenkinsci/aqua-microscanner-plugin](https://github.com/jenkinsci/aqua-microscanner-plugin) Enables scanning of docker builds in Jenkins for OS package vulnerabilities.
- [**25**Star][1y] [C#] [jeffreye/avaloniailspy](https://github.com/jeffreye/avaloniailspy) Avalonia-based .NET Decompiler (port of ILSpy)
- [**25**Star][3y] [C] [jacktang310/kerneldebugonnexus6p](https://github.com/jacktang310/kerneldebugonnexus6p)
- [**25**Star][3y] [Py] [j4r3tt/gerix-wifi-cracker-2](https://github.com/j4r3tt/gerix-wifi-cracker-2) GUI wireless 802.11 penetration tool
- [**25**Star][4m] [Py] [initroot/fransrecon](https://github.com/initroot/fransrecon) Script will enumerate domain name using horizontal enumeration, reverse lookup. Each horziontal domain will then be vertically enumerated using Sublist3r.
+- [**25**Star][2m] [infosec-community/apac-meetups](https://github.com/infosec-community/apac-meetups) A community contributed consolidated list of InfoSec meetups in the Asia Pacific region.
- [**25**Star][7y] [Py] [infodox/web-exploitation-engine](https://github.com/infodox/web-exploitation-engine) Generic Command Exploitation Engine for exploiting web application command-injection bugs,.
- [**25**Star][2y] [PHP] [imagemlt/ctf_web_dockers](https://github.com/imagemlt/ctf_web_dockers) dockerfile of CTF web practices
- [**25**Star][5y] [C] [honeynet/phoneyc](https://github.com/honeynet/phoneyc)
+- [**25**Star][2y] [Go] [himei29a/gichidan](https://github.com/himei29a/gichidan) Gichidan - CLI wrapper for Ichidan deep-web search engine.
- [**25**Star][4y] [C++] [herrcore/cmddesktopswitch](https://github.com/herrcore/cmddesktopswitch) CmdDesktopSwitch is a small utility that lists all windows desktops and provides the option to switch between them. This can be used to identify and watch malware that has created a hidden desktop.
- [**25**Star][8y] [JS] [hdm/axman](https://github.com/hdm/axman) AxMan ActiveX Fuzzer
- [**25**Star][2y] [C++] [hatriot/delayloadinject](https://github.com/hatriot/delayloadinject) Code injection via delay load libraries
- [**25**Star][2y] [C++] [hasherezade/petya_key](https://github.com/hasherezade/petya_key) A decoder for Petya victim keys, using the Janus' masterkey.
-- [**25**Star][17d] [Py] [harleo/knockknock](https://github.com/harleo/knockknock) [Golang rework soon] A simple reverse whois lookup CLI which allows you to find domain names owned by an individual person or company, often used for Open Source Intelligence (OSINT) purposes.
+- [**25**Star][2m] [C] [hasherezade/flareon2019](https://github.com/hasherezade/flareon2019) Flare-On solutions
+- [**25**Star][19d] [Py] [harleo/knockknock](https://github.com/harleo/knockknock) [Golang rework soon] A simple reverse whois lookup CLI which allows you to find domain names owned by an individual person or company, often used for Open Source Intelligence (OSINT) purposes.
- [**25**Star][4y] [C] [hanj4096/wukong](https://github.com/hanj4096/wukong) A LKM rootkit for Linux kernel 2.6.x, 3.x and 4.x
-- [**25**Star][5m] [Java] [hakbot/hakbot-origin-controller](https://github.com/hakbot/hakbot-origin-controller) Vendor-Neutral Security Tool Automation Controller (over REST)
-- [**25**Star][1y] [h2hconference/2018](https://github.com/h2hconference/2018) H2HC 2018 Slides/Materials/Presentations
+- [**25**Star][2y] [Py] [hackingenvivo/doxing](https://github.com/hackingenvivo/doxing) Espionaje y recopilación de Información
+- [**25**Star][8y] [ObjC] [hackedteam/vector-macos-root](https://github.com/hackedteam/vector-macos-root) root installation for MacOS
+- [**25**Star][2y] [Py] [guardicore/vmware_guest_auth_bypass](https://github.com/guardicore/vmware_guest_auth_bypass) Proof of concept of VMSA-2017-0012
- [**25**Star][3y] [Py] [graniet/domff](https://github.com/graniet/domff) DOMFf is a simple IDE for extract all DOM data on a website, is perfect for all penetration testers, with this you can extract all data name, value of specific form with only one line, this tool work like a debugger
-- [**25**Star][10m] [Kotlin] [gosecure/burp-ntlm-challenge-decoder](https://github.com/gosecure/burp-ntlm-challenge-decoder) Burp extension to decode NTLM SSP headers and extract domain/host information
- [**25**Star][1y] [gluk256/misc](https://github.com/gluk256/misc) text files, etc.
- [**25**Star][2y] [C#] [glinares/cscguard](https://github.com/glinares/cscguard) Protects and logs suspicious and malicious usage of .NET CSC.exe and Runtime C# Compilation
-- [**25**Star][6m] [Py] [githacktools/githacktools](https://github.com/githacktools/githacktools) The best Hacking and PenTesting tools installer on the world
- [**25**Star][8m] [gitguardian/getting-started-with-the-individual-app](https://github.com/gitguardian/getting-started-with-the-individual-app) GitGuardian is at the forefront of developers' security on GitHub. API tokens, database credentials, certificates leaked on GitHub: be alerted in real-time! GitGuardian is loved by developers:
- [**25**Star][8m] [Py] [ghostlulzhacks/waybackmachine](https://github.com/ghostlulzhacks/waybackmachine)
- [**25**Star][5y] [PHP] [ghorbanzadeh/owaat](https://github.com/ghorbanzadeh/owaat) OWASP ASVS Assessment Tool
+- [**25**Star][2d] [CSS] [ghacksuserjs/torzillaprint](https://github.com/ghacksuserjs/torzillaprint) Firefox & Tor Browser only, current ESR+ only, client-side only [for now], results only, fingerprint testing
- [**25**Star][8y] [Py] [gdssecurity/cloud-and-control](https://github.com/gdssecurity/cloud-and-control)
- [**25**Star][5y] [C] [gdbinit/rex_versus_the_romans](https://github.com/gdbinit/rex_versus_the_romans) Anti Hacking Team TrustedBSD module
-- [**25**Star][3y] [Py] [gdataadvancedanalytics/r2graphity](https://github.com/gdataadvancedanalytics/r2graphity) Creating function call graphs based on radare2 framwork, plot fancy graphs and extract behavior indicators
- [**25**Star][5y] [Py] [fygrave/dnslyzer](https://github.com/fygrave/dnslyzer) DNS traffic indexer and analyzer
- [**25**Star][2y] [Java] [fupinglee/crackcaptcahlogin](https://github.com/fupinglee/crackcaptcahlogin) CrackCaptcahLogin
- [**25**Star][1y] [Tcl] [fruho/fruhoapp](https://github.com/fruho/fruhoapp) Fruho VPN Manager - Universal VPN Client |
-- [**25**Star][3m] [C++] [frida/frida-clr](https://github.com/frida/frida-clr) Frida .NET bindings
+- [**25**Star][7m] [Visual Basic .NET] [foryujian/ipintervalmerge](https://github.com/foryujian/ipintervalmerge) IP区间批量合并工具,合并重叠交集的IP范围
- [**25**Star][3m] [C] [forensicitguy/libpreloadvaccine](https://github.com/forensicitguy/libpreloadvaccine) Whitelisting LD_PRELOAD libraries using LD_AUDIT
- [**25**Star][6y] [C] [fi01/libput_user_exploit](https://github.com/fi01/libput_user_exploit) CVE-2013-6282 exploit
- [**25**Star][5m] [C++] [ffiirree/capturer](https://github.com/ffiirree/capturer) Screen shot / GIF / Screen recording
-- [**25**Star][2y] [Py] [eudoxier/security-utilities](https://github.com/eudoxier/security-utilities) Offensive Security Certified Profesional (OSCP) course scripts, some have been generalized
+- [**25**Star][2y] [exp-db/toolpool](https://github.com/exp-db/toolpool) 安全 & 运维小工具
+- [**25**Star][1y] [JS] [ethanent/sloww](https://github.com/ethanent/sloww)
+
+ Lightweight Slowloris attack CLI in Node
+
- [**25**Star][2y] [C] [embedi/tcl_shellcode](https://github.com/embedi/tcl_shellcode) A template project for creating a shellcode for the Cisco IOS in the C language
- [**25**Star][5y] [Java] [elechantelepate/bip_hack](https://github.com/elechantelepate/bip_hack) Sample app for hacking the BIP! card on the Santiago Public Transit system.
- [**25**Star][4y] [C] [ele7enxxh/mtkfbexploit](https://github.com/ele7enxxh/mtkfbexploit) mtkfb exploit for mt658x & mt6592
- [**25**Star][3y] [Ruby] [eik00d/reverse_dns_shellcode](https://github.com/eik00d/reverse_dns_shellcode) Revrese DNS payload for Metasploit: Download Exec x86 shellcode. Also DNS Handler and VBS bot (alsow working over DNS) as PoC included.
+- [**25**Star][5m] [HTML] [duocircle/office365-setup-dkim-dmarc-spf](https://github.com/duocircle/office365-setup-dkim-dmarc-spf) Setup guide for Office 365 Administrators who are unable to use ATP to configure SPF, DKIM and DMARC.
- [**25**Star][2y] [Py] [dragoneeg/struts2-048](https://github.com/dragoneeg/struts2-048) CVE-2017-9791
-- [**25**Star][8d] [C++] [domob1812/namecore](https://github.com/domob1812/namecore) Reimplementation of Namecoin on top of the current Bitcoin Core codebase.
+- [**25**Star][3d] [C++] [domob1812/namecore](https://github.com/domob1812/namecore) Reimplementation of Namecoin on top of the current Bitcoin Core codebase.
- [**25**Star][6y] [C++] [dominictobias/detourxs](https://github.com/dominictobias/detourxs) A x86/64 library for detouring functions on Windows OS
- [**25**Star][2y] [JS] [dg92/graphql-nodejs-modular-kit](https://github.com/dg92/graphql-nodejs-modular-kit)
- [**25**Star][11m] [C] [defuse/yescrypt](https://github.com/defuse/yescrypt) Non-C Implementations of the yescrypt KDF.
-- [**25**Star][26d] [danpage/scale](https://github.com/danpage/scale) scale: Side-Channel Attack Lab
+- [**25**Star][10m] [Py] [deep-fingerprinting/df](https://github.com/deep-fingerprinting/df) The source code and dataset are used to demonstrate the DF model, and reproduce the results of the ACM CCS2018 paper
+- [**25**Star][28d] [danpage/scale](https://github.com/danpage/scale) scale: Side-Channel Attack Lab
- [**25**Star][5y] [Py] [danmcinerney/nmap-parser](https://github.com/danmcinerney/nmap-parser) Parses Nmap XML files
+- [**25**Star][2y] [JS] [danielstjules/toragent](https://github.com/danielstjules/toragent) HTTP(S) requests through Tor for Node
- [**25**Star][2y] [JS] [cybellum/vulnerabilities](https://github.com/cybellum/vulnerabilities) Some of the vulnerabilities that were found by Cybellum platform
- [**25**Star][1m] [Py] [cube0x8/chrome_ragamuffin](https://github.com/cube0x8/chrome_ragamuffin) Google Chrome internals analysis using Volatility
- [**25**Star][5y] [JS] [cryptographrix/hootoo_ht-tm05-hacking](https://github.com/cryptographrix/hootoo_ht-tm05-hacking) Hacking the HooToo HT-TM05
- [**25**Star][1y] [JS] [coincheckup/crypto-supplies](https://github.com/coincheckup/crypto-supplies) Cryptocurrency circulating, maximum and total supplies
-- [**25**Star][4m] [PowerShell] [codewatchorg/powersniper](https://github.com/codewatchorg/powersniper) Password spraying script and helper for creating password lists
+- [**25**Star][4m] [PS] [codewatchorg/powersniper](https://github.com/codewatchorg/powersniper) Password spraying script and helper for creating password lists
+- [**25**Star][2y] [Go] [chuan-yun/esmeralda](https://github.com/chuan-yun/esmeralda) 穿云全链路追踪监控系统日志转储、实时日志数据分析、接口数据服务。
- [**25**Star][4y] [Shell] [cert-polska/hsn2-bundle](https://github.com/cert-polska/hsn2-bundle)
- [**25**Star][6y] [cbrunsch/wmbus-sniffer-muc](https://github.com/cbrunsch/wmbus-sniffer-muc) Source code of the demonstration programs showed in the Black Hat '13 presentation "Energy fraud and orchestrated blackouts: Issues with wireless metering protocols (WM-BUS)" by Cyrill Brunschwiler
-- [**25**Star][1y] [PHP] [bypupil/ctfhub](https://github.com/bypupil/ctfhub) Some Docker for CTF environments
+- [**25**Star][3y] [Java] [calebfenton/androidemulatordetect](https://github.com/calebfenton/androidemulatordetect) Android Emulator Detection
+- [**25**Star][2y] [PHP] [bypupil/ctfhub](https://github.com/bypupil/ctfhub) Some Docker for CTF environments
- [**25**Star][1y] [C++] [buseclab/paybreak](https://github.com/buseclab/paybreak)
- [**25**Star][2m] [C++] [boegel/mica](https://github.com/boegel/mica) a Pin tool for collecting microarchitecture-independent workload characteristics
- [**25**Star][3y] [Py] [bnagy/francis](https://github.com/bnagy/francis) LLDB engine based tool to instrument OSX apps and triage crashes
- [**25**Star][5y] [Py] [bkerler/oregondecoder](https://github.com/bkerler/oregondecoder) Oregon Scientific V1/V2 Gnuradio Decoder
- [**25**Star][4y] [Shell] [binkybear/honeypi](https://github.com/binkybear/honeypi) Bash script to install Honeypot projects ona Raspbian System
+- [**25**Star][4y] [C] [bfosterjr/windowsrtdev](https://github.com/bfosterjr/windowsrtdev)
- [**25**Star][6y] [Py] [batteryshark/miasma](https://github.com/batteryshark/miasma) Cross-Platform Binary OTF Patcher, Code Injector, Hacking Utility
- [**25**Star][3y] [C] [azuregreen/arktooldrv](https://github.com/azuregreen/arktooldrv) An ark tool's driver
- [**25**Star][2y] [Go] [avineshwar/slurp](https://github.com/avineshwar/slurp) S3 bucket enumerator
@@ -15611,41 +16815,51 @@ for CVE details based on the nmap report.
- [**25**Star][1y] [Py] [ansorren/gdpatrol](https://github.com/ansorren/gdpatrol) A Lambda-powered Security Orchestration framework for AWS GuardDuty
- [**25**Star][2y] [andrew-morris/presentations](https://github.com/andrew-morris/presentations) A centralized location for all presentations I've given at various conferences
- [**25**Star][6m] [Py] [andreafioraldi/r2angrdbg](https://github.com/andreafioraldi/r2angrdbg) 在 radare2 调试器中使用 angr
+- [**25**Star][3y] [Shell] [amoghbl1/orfox](https://github.com/amoghbl1/orfox) This is my repository for the orfox browser, a browser that uses tor to communicate and Firefox for Android as it's base.
+- [**25**Star][29d] [Lua] [alpinelinux/alpine-secdb](https://github.com/alpinelinux/alpine-secdb) Alpine Linux security database
+- [**25**Star][2y] [Shell] [alephsecurity/edlrooter](https://github.com/alephsecurity/edlrooter)
- [**25**Star][8y] [aheadley/logitech-solar-k750-linux](https://github.com/aheadley/logitech-solar-k750-linux) Userspace "driver" for the Logitech k750 Solar Keyboard. A fork of the repo from
- [**25**Star][3y] [Go] [aead/hydrogen](https://github.com/aead/hydrogen) Go implementation of libhydrogen - a lightweight, easy-to-use crypto library
-- [**25**Star][2y] [Py] [adanvillarreal/spydan](https://github.com/adanvillarreal/spydan) A web spider for shodan.io without using the Developer API.
- [**25**Star][2y] [Py] [absingh31/tor_spider](https://github.com/absingh31/tor_spider) Python project to crawl and scrap the lesser known deep web or one can say dark web. Just provide the onion link and get started.
- [**25**Star][5m] [aadityapurani/nodejs-red-team-cheat-sheet](https://github.com/aadityapurani/nodejs-red-team-cheat-sheet) NodeJS Red-Team Cheat Sheet
- [**25**Star][3y] [HTML] [4b5f5f4b/pocs](https://github.com/4b5f5f4b/pocs)
-- [**25**Star][2y] [C++] [3gstudent/hiddenntregistry](https://github.com/3gstudent/hiddenntregistry) Use NT Native Registry API to create a registry that normal user can not query.
- [**25**Star][2y] [1337g/cve-2017-17215](https://github.com/1337g/cve-2017-17215) CVE-2017-17215 HuaWei Router RCE (NOT TESTED)
-- [**25**Star][2m] [Lua] [0x4d31/hassh-utils](https://github.com/0x4d31/hassh-utils) Nmap NSE Script and Docker image for HASSH - the SSH client/server fingerprinting method (
- [**25**Star][6m] [Py] [0x00string/oldays](https://github.com/0x00string/oldays) public exploits
- [**25**Star][2y] [C] [0x00-0x00/cve-2018-1000001](https://github.com/0x00-0x00/cve-2018-1000001) glibc getcwd() local privilege escalation compiled binaries
+- [**24**Star][23d] [Visual Basic .NET] [zelon88/ransomware_defender](https://github.com/zelon88/ransomware_defender) A Windows Logon / Startup / Scheduled Task Script for Ransomware Detection & Early-Warning
+- [**24**Star][1m] [Go] [monkeydioude/capybara](https://github.com/monkeydioude/capybara) Capybara, simple reverse-proxy (api gateway) for localhost services
+- [**24**Star][t] [thehive-project/awesome](https://github.com/thehive-project/awesome) A curated list of awesome things related to TheHive & Cortex
+- [**24**Star][3y] [C#] [nytrorst/hookme](https://github.com/nytrorst/hookme) Exported from
+- [**24**Star][2y] [HTML] [iaik/interruptjs](https://github.com/iaik/interruptjs) Practical Keystroke Timing Attacks in Sandboxed JavaScript
- [**24**Star][2y] [C#] [reswitched/hacversionlistbot](https://github.com/reswitched/hacversionlistbot) Versionlist update tracker for the Nintendo Switch.
- [**24**Star][1y] [JS] [shack2/jvapp](https://github.com/shack2/jvapp) Java漏洞练习程序,开发工具Eclipse,运行环境Java 1.7以上版本,Tocmat7以上。
- [**24**Star][3y] [C++] [sektioneins/aarch64_cryptoextension](https://github.com/sektioneins/aarch64_cryptoextension) IDA AArch64 processor extender extension: Adding crypto extension instructions (AES/SHA1/SHA256)
+- [**24**Star][2y] [Shell] [david942j/honest](https://github.com/david942j/honest) Are your installed packages _really_ the same as you saw on GitHub?
- [**24**Star][5y] [C#] [yck1509/dnexplorer](https://github.com/yck1509/dnexplorer) A simple viewer of modules using dnlib.
+- [**24**Star][6y] [Py] [felixgr/pytaint](https://github.com/felixgr/pytaint)
- [**24**Star][4m] [Go] [l3m0n/vulenv](https://github.com/l3m0n/vulenv) 漏洞测试环境 - 方便写扫描器利用复现
- [**24**Star][3y] [Assembly] [rehints/bootkitsbook](https://github.com/rehints/bootkitsbook) repository with additional materials and source code
- [**24**Star][4y] [Java] [stealthcopter/steganography](https://github.com/stealthcopter/steganography) Android Steganography Library
- [**24**Star][1y] [n0tr00t/n0js](https://github.com/n0tr00t/n0js) n0js xss challenges
-- [**24**Star][6m] [Py] [pyauth/pywarp](https://github.com/pyauth/pywarp) Python WebAuthn Relying Party library
-- [**24**Star][13d] [JS] [fsecurelabs/android-keystore-audit](https://github.com/fsecurelabs/android-keystore-audit)
+- [**24**Star][5y] [C] [z3apa3a/3scan](https://github.com/z3apa3a/3scan) 3Scan is fast detector for open HTTP/CONNECT/SOCKS4/SOCKS5/FTP/TELNET proxy
+- [**24**Star][10m] [C++] [tasvideos/vba-rerecording](https://github.com/tasvideos/vba-rerecording) Automatically exported from code.google.com/p/vba-rerecording
+- [**24**Star][28d] [C] [userlandkernel/usbusted](https://github.com/userlandkernel/usbusted) Research on Apple's USB protocols
+- [**24**Star][3y] [Py] [jenkstom/python-ddns](https://github.com/jenkstom/python-ddns) A self-hosted dynamic DNS service using BIND9 and python.
+- [**24**Star][9m] [Java] [openindex/remotesupporttool](https://github.com/openindex/remotesupporttool) an easy single click solution for remote maintenance
- [**24**Star][2m] [Py] [kismon/kismon](https://github.com/kismon/kismon) A GUI client for kismet
-- [**24**Star][7d] [Py] [muteb/hoarder](https://github.com/muteb/hoarder) This script is made to collect the most valiable artifacts for foreniscs or incident reponse investigation rather than imaging the whole har drive.
-- [**24**Star][3m] [JS] [lanmaster53/cef](https://github.com/lanmaster53/cef) Proof-of-concept CORS exploitation tool.
-- [**24**Star][2m] [HTML] [trojan-tutor/trojan-tutor.github.io](https://github.com/trojan-tutor/trojan-tutor.github.io) trojan 教程 自建梯子教程 trojan教程 trojan-gfw 科学上网 代理工具 翻墙 Ubuntu Debian 小白教程 https伪装
+- [**24**Star][2y] [Ruby] [trailofbits/trailofphish](https://github.com/trailofbits/trailofphish) Phishing e-mail repository
+- [**24**Star][27d] [cypurr-collective/cypurr-prezes](https://github.com/cypurr-collective/cypurr-prezes) presentation materials for our cryptoparties
+- [**24**Star][3m] [abhinavprasad47/bugbounty-starter-notes](https://github.com/abhinavprasad47/bugbounty-starter-notes) bug bounty hunters starter notes
- [**24**Star][3y] [AutoIt] [yaseralnajjar/ida-msdn-helper](https://github.com/yaseralnajjar/IDA-MSDN-helper) IDA Pro MSDN Helper
- [**24**Star][4m] [C] [hatching/tracy](https://github.com/hatching/tracy) tracy - a system call tracer and injector. Find us in #tracy on irc.freenode.net
+- [**24**Star][2y] [C++] [vmcall/token_manipulation](https://github.com/vmcall/token_manipulation) Bypass User Account Control by manipulating tokens
- [**24**Star][12m] [C++] [zsshen/yadd](https://github.com/zsshen/yadd) Yet another Android Dex bytecode Disassembler: a static Android app disassembler for fast class and method signature extraction and code structure visualization.
- [**24**Star][1y] [C] [zhuhuibeishadiao/pathmodification](https://github.com/zhuhuibeishadiao/pathmodification) Process path modification x64
- [**24**Star][4y] [Py] [zecure/shadowd_python](https://github.com/zecure/shadowd_python) A Shadow Daemon connector for Python applications
- [**24**Star][4m] [xyntax/slides](https://github.com/xyntax/slides) My public presentation slides.
+- [**24**Star][2y] [C#] [xxczaki/logger](https://github.com/xxczaki/logger) ☠
- [**24**Star][4y] [xgfan/ss-relay](https://github.com/xgfan/ss-relay) shadowsocks relay docker
-- [**24**Star][2m] [Py] [xebia/mobilehacktools](https://github.com/xebia/mobilehacktools) A repository for scripting a mobile attack toolchain
-- [**24**Star][1m] [JS] [wuseman/sagemcom-fast-5370e-telia](https://github.com/wuseman/sagemcom-fast-5370e-telia) This is my personal wiki for hacking the router firmware used by (Sagemcom)F@ast Version 3.43.2 delivered from Sagemcom
-- [**24**Star][9m] [TypeScript] [woza-lab/woza](https://github.com/woza-lab/woza) [Deprecated]Dump application ipa from jailbroken iOS based on frida. (Node edition)
+- [**24**Star][9m] [TS] [woza-lab/woza](https://github.com/woza-lab/woza) [Deprecated]Dump application ipa from jailbroken iOS based on frida. (Node edition)
- [**24**Star][3y] [woodspeed/pentest](https://github.com/woodspeed/pentest)
- [**24**Star][1y] [C] [wchill/defcon26_badgehacking](https://github.com/wchill/defcon26_badgehacking) Notes and things regarding hacking DEFCON 26's badge
- [**24**Star][5y] [JS] [vector35/hackinggames](https://github.com/vector35/hackinggames) Hacking Games in a Hacked Game
@@ -15659,10 +16873,8 @@ for CVE details based on the nmap report.
- [**24**Star][1m] [Py] [thehairyj/scout](https://github.com/thehairyj/scout) Scout - a Contactless Active Reconnaissance Tool
- [**24**Star][2y] [Py] [thegeekht/loki.rat](https://github.com/thegeekht/loki.rat) Loki.Rat is a fork of the Ares RAT, it integrates new modules, like recording , lockscreen , and locate options. Loki.Rat is a Python Remote Access Tool.
- [**24**Star][4y] [C++] [thecybermind/ipredir](https://github.com/thecybermind/ipredir) IP redirection+NAT for Windows
-- [**24**Star][2y] [Py] [the404hacking/windows-python-rat](https://github.com/the404hacking/windows-python-rat) A New Microsoft Windows Remote Administrator Tool [RAT] with Python by Sir.4m1R.
- [**24**Star][7m] [Py] [tgalal/consonance](https://github.com/tgalal/consonance) WhatsApp's handshake implementation using Noise Protocol
- [**24**Star][3y] [C] [te-k/openssh-backdoor](https://github.com/te-k/openssh-backdoor) Openssh backdoor found with a ssh honeypot
-- [**24**Star][4y] [Py] [tampe125/mongodb-scraper](https://github.com/tampe125/mongodb-scraper) Scraps for publicly accessible MongoDB instances and dumps user passwords
- [**24**Star][4y] [C] [talos-vulndev/advisories](https://github.com/talos-vulndev/advisories)
- [**24**Star][2y] [Rust] [sushant94/rune](https://github.com/sushant94/rune) rune - radare2 based symbolic emulator
- [**24**Star][3y] [Shell] [superkojiman/dirtshell](https://github.com/superkojiman/dirtshell) dirtshell:提供类似于Shell的接口,使文件路径遍历变得简单且迅速。
@@ -15671,50 +16883,55 @@ for CVE details based on the nmap report.
- [**24**Star][10m] [C] [stooged/apptousb-50x](https://github.com/stooged/apptousb-50x) 5.0X
- [**24**Star][1y] [JS] [stephenlb/spoken](https://github.com/stephenlb/spoken) Spoken - JavaScript Text-to-Speech and Speech-to-Text for AI Artificial Intelligence Apps
- [**24**Star][1m] [Rust] [stainless-steel/md5](https://github.com/stainless-steel/md5) MD5 hash function
+- [**24**Star][9y] [Java] [spiderlabs/deface](https://github.com/spiderlabs/deface) A Java Server Faces (JSF) testing tool for decoding view state and creating view state attack vectors.
- [**24**Star][11m] [C++] [sonicrules11/barbossa](https://github.com/sonicrules11/barbossa) Macintosh MultiHack for Counter-Strike: Global Offensive
-- [**24**Star][1y] [Gherkin] [soluto/containers-security-project](https://github.com/soluto/containers-security-project) A place for documenting threats and mitigations related to containers orchestrators (Kubernetes, Swarm etc)
+- [**24**Star][2y] [PHP] [skyzyx/bad-passwords](https://github.com/skyzyx/bad-passwords) A list of the top 10,000 most-used passwords from hacked password lists.
+- [**24**Star][4m] [Go] [skeeto/pgp-poisoner](https://github.com/skeeto/pgp-poisoner) PGP key poisoner
- [**24**Star][3y] [Py] [sizzop/hevd-exploits](https://github.com/sizzop/hevd-exploits) Various exploits for the HackSys Extreme Vulnerable Driver
- [**24**Star][2y] [silvermoonsecurity/sandboxevasion](https://github.com/silvermoonsecurity/sandboxevasion) Malware sandbox evasion tricks and solution
- [**24**Star][3y] [Py] [silentsignal/activescan3plus](https://github.com/silentsignal/activescan3plus) Modified version of ActiveScan++ Burp Suite extension
- [**24**Star][5m] [Common Lisp] [shrdlu68/cl-tls](https://github.com/shrdlu68/cl-tls) An implementation of TLS and related specifications in Common Lisp
- [**24**Star][1y] [Shell] [shawnduong/pxenum](https://github.com/shawnduong/pxenum) Post eXploitation Enumeration script for Linux. Tested on Ubuntu.
-- [**24**Star][2y] [shadowsocksr-rm/shadowsocksx-ng](https://github.com/shadowsocksr-rm/shadowsocksx-ng) Next Generation of ShadowsocksX
- [**24**Star][2y] [Py] [sensepost/dnserver](https://github.com/sensepost/dnserver) dnserver: Python 编写的简易 DNS 服务器
- [**24**Star][2y] [HTML] [secwiki/ti](https://github.com/secwiki/ti) Threat Research Blog 威胁情报提取与溯源技术研究小组
- [**24**Star][4y] [C++] [secmob/cve-2015-6612](https://github.com/secmob/cve-2015-6612)
- [**24**Star][2y] [Java] [secdec/pen-test-automation](https://github.com/secdec/pen-test-automation) A framework for automating penetration testing using a plugin based architecture
- [**24**Star][3y] [C] [seccon/seccon2016_online_ctf](https://github.com/seccon/seccon2016_online_ctf) SECCON2016 online CTF for public
-- [**24**Star][5y] [Py] [sash-ko/kaggle-malware-classification](https://github.com/sash-ko/kaggle-malware-classification) Kaggle "Microsoft Malware Classification Challenge". 6th place solution
-- [**24**Star][5y] [Objective-C] [samdmarshall/ios-internals](https://github.com/samdmarshall/ios-internals) iOS related code
-- [**24**Star][1y] [Go] [rsrdesarrollo/sasshimi](https://github.com/rsrdesarrollo/sasshimi) SSH Tunnelling in "RAW mode", via STDIN/OUT without using forwarding channels
+- [**24**Star][3y] [Py] [sciencemanx/ctf-tools](https://github.com/sciencemanx/ctf-tools) Attack-Defend CTF Tools
+- [**24**Star][4d] [scanfsec/cve-2018-15982](https://github.com/scanfsec/cve-2018-15982) Aggressor Script to launch IE driveby for CVE-2018-15982.
+- [**24**Star][5y] [ObjC] [samdmarshall/ios-internals](https://github.com/samdmarshall/ios-internals) iOS related code
- [**24**Star][1y] [Py] [rootm0s/casper](https://github.com/rootm0s/casper) 👻 Socket based RAT for Windows with evasion techniques and other features for control
- [**24**Star][4y] [C++] [rootkitsmm/winio-vidix](https://github.com/rootkitsmm/winio-vidix) Exploit WinIo - Vidix and Run Shellcode in Windows Kerne ( local Privilege escalation )
- [**24**Star][1y] [Go] [root-gg/wsp](https://github.com/root-gg/wsp) HTTP tunnel over Websocket
- [**24**Star][3y] [Go] [robinmonjo/ngx_http_l](https://github.com/robinmonjo/ngx_http_l) nginx module "mostly" developed in Go
- [**24**Star][2y] [HTML] [ring04h/cia-hacking-tools](https://github.com/ring04h/cia-hacking-tools) WikiLeaks Vault 7 CIA Hacking Tools
- [**24**Star][5y] [Py] [ricterz/simple-dns](https://github.com/ricterz/simple-dns) A simple regular-expression based DNS server
+- [**24**Star][2y] [retrogamer74/firmwarev5.05_mirahen_baseinjection](https://github.com/retrogamer74/firmwarev5.05_mirahen_baseinjection) Mira HEN 5.05 PS4 Fast developed firmware just for the basic injection
- [**24**Star][3y] [Py] [restran/hacker-scripts](https://github.com/restran/hacker-scripts)
- [**24**Star][5m] [redshiftzero/awesome-threat-modeling](https://github.com/redshiftzero/awesome-threat-modeling) a curated list of useful threat modeling resources
- [**24**Star][4m] [C#] [rciworks/rci.tutorials.csgo.cheat.external](https://github.com/rciworks/rci.tutorials.csgo.cheat.external) "Counter-Strike: Global Offensive" External Cheat
- [**24**Star][7y] [C] [rapid7/vaccination](https://github.com/rapid7/vaccination)
- [**24**Star][1y] [prsecurity/neutrino](https://github.com/prsecurity/neutrino) Neutrino C2 Source Code
-- [**24**Star][1m] [Py] [portswigger/sqli-py](https://github.com/portswigger/sqli-py) SQLiPy is a Python plugin for Burp Suite that integrates SQLMap using the SQLMap API.
- [**24**Star][2y] [Py] [portswigger/burp-smart-buster](https://github.com/portswigger/burp-smart-buster) A Burp Suite content discovery plugin that add the smart into the Buster!
-- [**24**Star][3y] [Java] [portswigger/authz](https://github.com/portswigger/authz)
+- [**24**Star][2y] [C++] [polycone/pe-loader](https://github.com/polycone/pe-loader) A Windows PE format file loader
- [**24**Star][3y] [polarislab/s2-045](https://github.com/polarislab/s2-045) Struts2 S2-045(CVE-2017-5638)Vulnerability environment -
- [**24**Star][12m] [plenumlab/gql-helper](https://github.com/plenumlab/gql-helper) This is a small extension to make graphql readable
- [**24**Star][1y] [JS] [peterwilli/iota-ion.lib.js](https://github.com/peterwilli/iota-ion.lib.js) IOTA ION Library - Fast data-troughput in the browser, supported by the IOTA tangle.
- [**24**Star][1m] [JS] [pertsev/web3_utilz](https://github.com/pertsev/web3_utilz) Useful snippets of js code for interacting with Smart Contracts
+- [**24**Star][2y] [Py] [p4u/stratum-relay](https://github.com/p4u/stratum-relay) Stratum proxy relay for mining altcoin
- [**24**Star][3y] [Java] [owasp/owasp-proxy](https://github.com/owasp/owasp-proxy) Owasp Proxy
- [**24**Star][3y] [C] [osandamalith/shellcodes](https://github.com/osandamalith/shellcodes) My Shellcode Archive
- [**24**Star][4y] [C] [osandamalith/imageexploiter](https://github.com/osandamalith/imageexploiter) Hide JavaScript inside your GIF and BMP images
-- [**24**Star][5m] [optixal/oscp-pwk-notes-public](https://github.com/optixal/oscp-pwk-notes-public)
+- [**24**Star][3d] [Java] [opticfusion1/mcantimalware](https://github.com/opticfusion1/mcantimalware) Anti-Malware for minecraft
- [**24**Star][2y] [Py] [operatorequals/chmod-stego](https://github.com/operatorequals/chmod-stego) A PoC on passing data through UNIX file privilege bits (RWX Triplets)
+- [**24**Star][3y] [C] [opensise/cve_poc_collect](https://github.com/opensise/cve_poc_collect) 这里会收集各种类型的CVE PoC 和EXP ,仅用来学习漏洞挖掘相关技术..
+- [**24**Star][2y] [Shell] [oniondecoy/installer](https://github.com/oniondecoy/installer) A platform to run private unannounced Honeypots as Tor Hidden Services (aka Onion Decoys) inside the Tor Network.
+- [**24**Star][2d] [Py] [oasis-open/cti-stix-elevator](https://github.com/oasis-open/cti-stix-elevator) OASIS TC Open Repository: Convert STIX 1.2 XML to STIX 2.0 JSON
- [**24**Star][4m] [HTML] [o-o-overflow/dc2019f-super-smash-ooos](https://github.com/o-o-overflow/dc2019f-super-smash-ooos)
- [**24**Star][2y] [C] [o-o-overflow/chall-www](https://github.com/o-o-overflow/chall-www)
-- [**24**Star][1y] [Py] [nviso-be/decompile-py2exe](https://github.com/nviso-be/decompile-py2exe) Decompile py2exe Python 3 generated EXEs
- [**24**Star][1y] [Py] [nullarray/shogun](https://github.com/nullarray/shogun) Shodan.io Command Line Interface
- [**24**Star][1y] [Py] [noobiedog/peanuts](https://github.com/noobiedog/peanuts) Peanuts is a free and open source wifi tracking tool. Based on the SensePosts Snoopy-NG project that is now closed.
+- [**24**Star][22d] [Py] [nocomplexity/securityprivacyreferencearchitecture](https://github.com/nocomplexity/securityprivacyreferencearchitecture) Open Repository for the Open Security and Privacy Reference Architecture
- [**24**Star][1y] [C++] [nixer1337/nixware-gmod](https://github.com/nixer1337/nixware-gmod) Internal c++ gmod hack
- [**24**Star][1y] [Py] [nityanandagohain/proxy_configuration](https://github.com/nityanandagohain/proxy_configuration) System wide proxy configuration in a single script with options to add, remove proxy and restore system default proxy configuration
- [**24**Star][3y] [Py] [nccgroup/blesuite-cli](https://github.com/nccgroup/blesuite-cli) BLESuite_CLI is a command line tool to enable an easier way to test Bluetooth Low Energy (BLE) devices
@@ -15727,55 +16944,61 @@ for CVE details based on the nmap report.
- [**24**Star][3y] [Pascal] [martindrab/vrtuletree](https://github.com/martindrab/vrtuletree) VrtuleTree is a tool that displays information about driver and device objects present in the system and relations between them. Its functionality is very similar to famous DeviceTree, however, VrtuleTree emhasises on stability and support of latest Windows versions
- [**24**Star][2y] [Py] [marcusbotacin/anti.analysis](https://github.com/marcusbotacin/anti.analysis) Malware Analysis, Anti-Analysis, and Anti-Anti-Analysis
- [**24**Star][2y] [PHP] [magento-engcom/php-7.2-support](https://github.com/magento-engcom/php-7.2-support) Repository for implementing support of php-7.2 support in Magento
+- [**24**Star][1y] [Py] [m4rktn/jogan](https://github.com/m4rktn/jogan) Pentest Tools & Packages Installer [Linux/Termux]
- [**24**Star][4y] [C] [ltangjian/firewall](https://github.com/ltangjian/firewall) Based on the research of Windows network architecture and the core packet filtering firewall technology, using NDIS intermediate driver, the article achieved the filter of the core layer, and completed the Windows Personal Firewall Design and Implementation.
- [**24**Star][4y] [PHP] [lt/php-cryptopals](https://github.com/lt/php-cryptopals) The Matasano crypto challenges completed using PHP
- [**24**Star][3y] [long123king/grep](https://github.com/long123king/grep) Grep-like WinDbg extension
- [**24**Star][3y] [Py] [lolwaleet/bannergrab](https://github.com/lolwaleet/bannergrab) ~ BannerGrab
- [**24**Star][1m] [Shell] [lockedbyte/ddos2track](https://github.com/lockedbyte/ddos2track) A script to avoid HTTP Floods attacks, log the attacker IP Addresses and Traffic, and Send you an email to warn that you are behind an attack.
-- [**24**Star][11m] [C++] [lesmargoulins/margoulineur2000](https://github.com/lesmargoulins/margoulineur2000) NFC
+- [**24**Star][12m] [C++] [lesmargoulins/margoulineur2000](https://github.com/lesmargoulins/margoulineur2000) NFC
- [**24**Star][8m] [Dockerfile] [knqyf263/cve-2019-6467](https://github.com/knqyf263/cve-2019-6467) CVE-2019-6467 (BIND nxdomain-redirect)
-- [**24**Star][4y] [Shell] [kisom/surfraw](https://github.com/kisom/surfraw) local changes to surfraw - local edits prior to sending updates to surfraw-devel
-- [**24**Star][12d] [AutoIt] [kirlovon/devil-backdoor](https://github.com/kirlovon/devil-backdoor) Simple backdoor for public places, that uses a file system for communication. Just for fun!
- [**24**Star][6m] [Zeek] [kinomakino/threat-intelligence-data](https://github.com/kinomakino/threat-intelligence-data) Snort_rules detection bad actors.
- [**24**Star][11m] [Py] [kennell/ftpknocker](https://github.com/kennell/ftpknocker)
-- [**24**Star][1m] [TypeScript] [kennbroorg/iky](https://github.com/kennbroorg/iky) OSINT Project
+- [**24**Star][6m] [Py] [keithjjones/malgazer](https://github.com/keithjjones/malgazer) A Python malware analysis library.
- [**24**Star][4y] [Py] [karblue/pppoe-hijack](https://github.com/karblue/pppoe-hijack) 伪装PPPoE服务器截取密码
- [**24**Star][9m] [C] [kaist-ina/sgx-tor](https://github.com/kaist-ina/sgx-tor) Tor anonymity network for SGX
- [**24**Star][2m] [ka0labs/ctf-writeups](https://github.com/ka0labs/ctf-writeups) CTF Writeups
- [**24**Star][2y] [C++] [k0keoyo/hevd-arbitrary-overwrite-exploit-win10-rs3](https://github.com/k0keoyo/hevd-arbitrary-overwrite-exploit-win10-rs3)
+- [**24**Star][9m] [PHP] [jsondeveloper/dante-gui](https://github.com/jsondeveloper/dante-gui) Dante Server (SOCKS5 Proxy) Web Interface (Telegram ready)
- [**24**Star][2y] [Java] [joychou93/trident](https://github.com/joychou93/trident) Java通用漏洞修复安全组件
- [**24**Star][9m] [Java] [jonas-schievink/ghidraxbe](https://github.com/jonas-schievink/ghidraxbe) A Ghidra extension for loading Xbox Executables (.xbe files)
-- [**24**Star][3m] [Py] [joelwking/phantom-cyber](https://github.com/joelwking/phantom-cyber) Phantom Playbook and App repository
-- [**24**Star][11m] [C] [jmcph4/crackerjack](https://github.com/jmcph4/crackerjack) A collection of crackmes
+- [**24**Star][4m] [Py] [joelwking/phantom-cyber](https://github.com/joelwking/phantom-cyber) Phantom Playbook and App repository
+- [**24**Star][12m] [C] [jmcph4/crackerjack](https://github.com/jmcph4/crackerjack) A collection of crackmes
+- [**24**Star][1y] [PS] [jiangxianli/googlehosttool](https://github.com/jiangxianli/googlehosttool) 一键添加最新google hosts文件到本地hosts文件中,google 翻墙访问工具,适用windows、linux、mac
+- [**24**Star][2y] [Shell] [jacksongl/npm-vuln-poc](https://github.com/jacksongl/npm-vuln-poc) Vulnerabilities discovered in npm repository [Berkeley PL & Security Research].
- [**24**Star][6y] [Py] [izuzak/urlreq](https://github.com/izuzak/urlreq) HTTP proxy that decodes a HTTP request defined in the URL and makes that request
-- [**24**Star][3y] [PowerShell] [invoke-ir/presentations](https://github.com/invoke-ir/presentations)
-- [**24**Star][2m] [infosec-community/apac-meetups](https://github.com/infosec-community/apac-meetups) A community contributed consolidated list of InfoSec meetups in the Asia Pacific region.
+- [**24**Star][3y] [PS] [invoke-ir/presentations](https://github.com/invoke-ir/presentations)
- [**24**Star][3y] [JS] [informationshallbefree/spiegel-plus-unlocker-firefox](https://github.com/informationshallbefree/spiegel-plus-unlocker-firefox) A Firefox Addon to decrypt every Spiegel Plus article without paying money.
-- [**24**Star][1y] [Py] [ihack4falafel/slink](https://github.com/ihack4falafel/slink) Alphanumeric Shellcode (x86) Encoder
-- [**24**Star][2y] [Go] [himei29a/gichidan](https://github.com/himei29a/gichidan) Gichidan - CLI wrapper for Ichidan deep-web search engine.
+- [**24**Star][2m] [Py] [ictu/zap-baseline](https://github.com/ictu/zap-baseline) Zap baseline scanner in Docker with authentication
- [**24**Star][2y] [Shell] [hannob/ctgrab](https://github.com/hannob/ctgrab)
- [**24**Star][6y] [C] [hacksysteam/shellcodeofdeath](https://github.com/hacksysteam/shellcodeofdeath) Shellcode Of Death
-- [**24**Star][2y] [Py] [hackingenvivo/doxing](https://github.com/hackingenvivo/doxing) Espionaje y recopilación de Información
-- [**24**Star][8y] [Objective-C] [hackedteam/vector-macos-root](https://github.com/hackedteam/vector-macos-root) root installation for MacOS
+- [**24**Star][6y] [Ruby] [hackedteam/rcs-backdoor](https://github.com/hackedteam/rcs-backdoor) Backdoor implementation in Ruby (testing)
+- [**24**Star][1y] [Py] [gynvael/arcanesector](https://github.com/gynvael/arcanesector) Arcane Sector game - a CTF task, or old-school (MMO)RPG - depending on the perspective. The code is of terrible quality, you have been warned!
- [**24**Star][3y] [C] [guilhermeferreira/spikepp](https://github.com/guilhermeferreira/spikepp) SPIKE is a protocol fuzzer creation kit. It provides an API that allows a user to create their own fuzzers for network based protocols using the C++ programming language. The tool defines a number of primitives that it makes available to C coders, which allows it to construct fuzzed messages called “SPIKES” that can be sent to a network service …
- [**24**Star][1y] [JS] [goliatone/arpscan](https://github.com/goliatone/arpscan) Node arp-scan wrapper
+- [**24**Star][3m] [Py] [ghostofgoes/adles](https://github.com/ghostofgoes/adles) Automated Deployment of Lab Environments System (ADLES)
+- [**24**Star][3y] [Py] [freedomofpress/fingerprint-securedrop](https://github.com/freedomofpress/fingerprint-securedrop) A machine learning data analysis pipeline for analyzing website fingerprinting attacks and defenses.
- [**24**Star][2y] [foundstone/expertinvestigationguides](https://github.com/foundstone/expertinvestigationguides) Expert Investigation Guides
+- [**24**Star][20d] [Py] [foteinosmerg/pymerkle](https://github.com/foteinosmerg/pymerkle) Python crypto toolkit for generation and validation of Merkle-Proofs
- [**24**Star][4y] [C] [fortiguard-lion/anti-dll-hijacking](https://github.com/fortiguard-lion/anti-dll-hijacking)
- [**24**Star][3y] [Py] [forensicmatt/pancakeviewer](https://github.com/forensicmatt/pancakeviewer) A DFVFS Backed Forensic Viewer
- [**24**Star][3y] [Py] [fluproject/flunym0us](https://github.com/fluproject/flunym0us) Flunym0us is a Vulnerability Scanner for Wordpress and Moodle designed by Flu Project Team. Flunym0us has been developed in Python. Flunym0us performs dictionary attacks against Web sites. By default, Flunym0us includes a dictionary for Wordpress and other for Moodle.
- [**24**Star][3y] [Py] [felmoltor/keepnote_import_nmap](https://github.com/felmoltor/keepnote_import_nmap) Plugin for keepnote to import a XML nmap file
-- [**24**Star][4m] [Shell] [fajartheggman/f-tools](https://github.com/fajartheggman/f-tools) Toolkit Hacking
+- [**24**Star][5d] [Shell] [fajartheggman/f-tools](https://github.com/fajartheggman/f-tools) Toolkit Hacking
- [**24**Star][4y] [exp-sky/hitcon-2015-spartan-0day-exploit](https://github.com/exp-sky/hitcon-2015-spartan-0day-exploit) HitCon 2015 spartan 0day & exploit
+- [**24**Star][4y] [JS] [eviltik/evilwaf](https://github.com/eviltik/evilwaf) Web Application Firewall (WAF) Detection Tool
- [**24**Star][2y] [evilmog/hashcat-hcstat](https://github.com/evilmog/hashcat-hcstat) A collection of hashcat-hcstat files
-- [**24**Star][6m] [JS] [ettic-team/endpointfinder](https://github.com/ettic-team/endpointfinder)
-- [**24**Star][10d] [HTML] [equalitie/banjax](https://github.com/equalitie/banjax) Apache Traffic Server Plugin performing various anti-DDoS measures
+- [**24**Star][6m] [Py] [evild3ad/isodump](https://github.com/evild3ad/isodump) isodump - ISO dump utility
+- [**24**Star][7m] [JS] [ettic-team/endpointfinder](https://github.com/ettic-team/endpointfinder)
+- [**24**Star][12d] [HTML] [equalitie/banjax](https://github.com/equalitie/banjax) Apache Traffic Server Plugin performing various anti-DDoS measures
- [**24**Star][6y] [C++] [epsylon3/odbgscript](https://github.com/epsylon3/odbgscript) OllyDBG Script Engine
- [**24**Star][1y] [C] [enovella/exploitrainings](https://github.com/enovella/exploitrainings) Exploitation on different architectures (x86, x64, arm, mips, avr)
- [**24**Star][5y] [C++] [edix/malwareresourcescanner](https://github.com/edix/malwareresourcescanner) Scanning and identifying XOR encrypted PE files in PE resources
-- [**24**Star][5m] [HTML] [duocircle/office365-setup-dkim-dmarc-spf](https://github.com/duocircle/office365-setup-dkim-dmarc-spf) Setup guide for Office 365 Administrators who are unable to use ATP to configure SPF, DKIM and DMARC.
- [**24**Star][2y] [Py] [dsnezhkov/octohook](https://github.com/dsnezhkov/octohook) Git Web Hook Tunnel for C2
- [**24**Star][6y] [Py] [dkovar/ircollect](https://github.com/dkovar/ircollect) ircollect
- [**24**Star][9m] [Dockerfile] [dizcza/docker-hashcat](https://github.com/dizcza/docker-hashcat) Hashcat docker for Ubuntu 18.04 OpenCL 2.1
+- [**24**Star][2y] [ObjC] [dev-liyang/lytableviewwidget](https://github.com/dev-liyang/lytableviewwidget) 逆向微信-分析学习微信是如何快速构建静态TableView界面的
+- [**24**Star][1m] [Py] [desword/pwn_execrise](https://github.com/desword/pwn_execrise) A collection of pwn execrise
- [**24**Star][3y] [Ruby] [deadbits/maz](https://github.com/deadbits/maz) Malware Analysis Zoo
- [**24**Star][2y] [Py] [cym13/vbs-reverse-shell](https://github.com/cym13/vbs-reverse-shell) VBS reverse shell scripts
- [**24**Star][6y] [PHP] [cyberisltd/gzipbloat](https://github.com/cyberisltd/gzipbloat) PHP framework to test User-Agents and intermediary content inspection devices for denial-of-service vulnerabilities with respect to HTTP response decompression.
@@ -15783,10 +17006,14 @@ for CVE details based on the nmap report.
- [**24**Star][1y] [Py] [cosine0/amphitrite](https://github.com/cosine0/amphitrite) Symbolic debugging tool using JonathanSalwan/Triton
- [**24**Star][2y] [Groovy] [continuumsecurity/ropeytasks](https://github.com/continuumsecurity/ropeytasks) Deliberately vulnerable web application
- [**24**Star][2y] [Java] [commonsguy/autofillfollies](https://github.com/commonsguy/autofillfollies) Demonstration of security issues with Android 8.0 autofill
+- [**24**Star][2y] [PS] [codingo/retrieve-windows-wifi-passwords](https://github.com/codingo/retrieve-windows-wifi-passwords) Retreives the SSID names and passwords in cleartext for each Wifi network stored on the computer running this powershell script and output to JSON.
- [**24**Star][4y] [C] [cngutierr/ersatzpassword](https://github.com/cngutierr/ersatzpassword)
- [**24**Star][1y] [CSS] [citguru/jobby](https://github.com/citguru/jobby) A Job Listing Web App using NodeJS and Indreed
- [**24**Star][10m] [chrysh/ctf_writeups](https://github.com/chrysh/ctf_writeups)
- [**24**Star][7y] [Ruby] [chrislee35/flowtag](https://github.com/chrislee35/flowtag) FlowTag visualizes pcap files for forensic analysis
+- [**24**Star][3y] [C++] [chausner/1337patch](https://github.com/chausner/1337patch) Simple command-line tool to apply patches exported by x64dbg to running processes
+- [**24**Star][1y] [Py] [bwesterb/pol](https://github.com/bwesterb/pol) pol /pɵl/ is a modern command line password manager with deniable encryption
+- [**24**Star][5y] [Py] [burningcodes/dexconfuse](https://github.com/burningcodes/dexconfuse) 简易dex混淆器
- [**24**Star][5m] [Py] [bunseokbot/darklight](https://github.com/bunseokbot/darklight) Engine for collecting onion domains and crawling from webpage based on Tor network
- [**24**Star][3y] [Py] [bunseokbot/androtools](https://github.com/bunseokbot/androtools) Android malware static & dynamic analysis and automated action (deprecated)
- [**24**Star][2y] [Py] [brainsmoke/pub-archive](https://github.com/brainsmoke/pub-archive)
@@ -15796,6 +17023,8 @@ for CVE details based on the nmap report.
- [**24**Star][10m] [C++] [blitz/baresifter](https://github.com/blitz/baresifter) A bare-metal x86 instruction set fuzzer a la Sandsifter
- [**24**Star][2y] [PHP] [blackfan/jpg_payload](https://github.com/blackfan/jpg_payload)
- [**24**Star][10m] [bkerler/slides_and_papers](https://github.com/bkerler/slides_and_papers) Here be dragons. Or Slides. Or Papers. Or Nothing :)
+- [**24**Star][11m] [Go] [betalo-sweden/forwardingproxy](https://github.com/betalo-sweden/forwardingproxy) A HTTP/S forwarding proxy in Go
+- [**24**Star][9m] [C] [begriffs/utofu](https://github.com/begriffs/utofu) Unicode Trust on First Use (TOFU)
- [**24**Star][2m] [JS] [aykutcevik/idn-safe](https://github.com/aykutcevik/idn-safe) "IDN Safe" is a browser extension which blocks internationalized domain names to prevent you from visiting probable fake sites
- [**24**Star][3y] [C] [avalon1610/alpc](https://github.com/avalon1610/alpc) Advance LPC
- [**24**Star][2y] [JS] [auth0-blog/nextjs-got](https://github.com/auth0-blog/nextjs-got) A simple nextjs application that showcases Game of Thrones Characters
@@ -15803,17 +17032,21 @@ for CVE details based on the nmap report.
- [**24**Star][2m] [Ruby] [arkadiyt/ssrf_filter](https://github.com/arkadiyt/ssrf_filter) A ruby gem for defending against Server Side Request Forgery (SSRF) attacks
- [**24**Star][4y] [C] [arizvisa/afl-cygwin](https://github.com/arizvisa/afl-cygwin) AFL "mostly" ported to cygwin
- [**24**Star][8m] [C++] [anwi-wips/anwi](https://github.com/anwi-wips/anwi) 新型无线IDS, 基于低成本的Wi-Fi模块(ESP8266)
-- [**24**Star][5y] [PowerShell] [anweiss/dockerclientdsc](https://github.com/anweiss/dockerclientdsc)
-- [**24**Star][29d] [Dockerfile] [antswordproject/antsword-labs](https://github.com/antswordproject/antsword-labs) Awesome environment for antsword tests
-- [**24**Star][7m] [Py] [antisomnus/sniffer](https://github.com/antisomnus/sniffer) Simple sniffer using scapy and PyQt5 on Windows 10
+- [**24**Star][5y] [PS] [anweiss/dockerclientdsc](https://github.com/anweiss/dockerclientdsc)
+- [**24**Star][1m] [Dockerfile] [antswordproject/antsword-labs](https://github.com/antswordproject/antsword-labs) Awesome environment for antsword tests
- [**24**Star][1m] [Py] [anssi-fr/packetweaver](https://github.com/anssi-fr/packetweaver) A Python framework for script filing and task sequencing
- [**24**Star][7y] [Java] [akdeniz/mitmsocks4j](https://github.com/akdeniz/mitmsocks4j) Man in the Middle SOCKS Proxy for JAVA
- [**24**Star][4y] [JS] [aerospaceresearch/dgsn_bigwhoop](https://github.com/aerospaceresearch/dgsn_bigwhoop) BigWhoop
-- [**24**Star][29d] [Perl] [abarisani/abarisani.github.io](https://github.com/abarisani/abarisani.github.io)
+- [**24**Star][1y] [C++] [adrianyy/x64-syscall](https://github.com/adrianyy/x64-syscall) x64 syscall caller in C++.
+- [**24**Star][2y] [Py] [admintony/sql-injection](https://github.com/admintony/sql-injection) 解决sqlmap不能跑的注入
+- [**24**Star][1m] [Perl] [abarisani/abarisani.github.io](https://github.com/abarisani/abarisani.github.io)
+- [**24**Star][9m] [Py] [a-maumau/vesta](https://github.com/a-maumau/vesta) GPU state check script.
- [**24**Star][1y] [0xkiewicz/pwk-oscp](https://github.com/0xkiewicz/pwk-oscp) Empower your enumeration during OSCP
- [**24**Star][3y] [Py] [0xbc/chiasm-shell](https://github.com/0xbc/chiasm-shell) Python-based interactive assembler/disassembler CLI, powered by Keystone/Capstone.
- [**24**Star][2y] [Py] [0verl0ad/dumb0](https://github.com/0verl0ad/dumb0) A simple tool to dump users in popular forums and CMS :)
-- [**23**Star][10d] [C] [tidesec/peach_fuzzing](https://github.com/tidesec/peach_fuzzing) 在学习使用peach进行模糊测试时,搜集到的一些不错的资料,以及配套的一些软件或脚本。
+- [**24**Star][7d] [Py] [00xc/h2buster](https://github.com/00xc/h2buster) A fast, threaded, recursive, web directory brute-force scanner over HTTP/2.
+- [**23**Star][2y] [jonnybanana/essential-usb-rubber-ducky-printable-cheat-sheet](https://github.com/jonnybanana/essential-usb-rubber-ducky-printable-cheat-sheet) My personal RubberDucky Cheat Sheet, in JPG, PNG and PDF
+- [**23**Star][6m] [C++] [amirrezanasiri/usb-keystroke-injector](https://github.com/amirrezanasiri/usb-keystroke-injector)
- [**23**Star][8m] [Shell] [thelinuxchoice/clipboardme](https://github.com/thelinuxchoice/clipboardme) Grab target's clipboard content
- [**23**Star][8m] [C++] [hikariobfuscator/core](https://github.com/hikariobfuscator/core) Shared Obfuscation Core
- [**23**Star][2m] [Shell] [hak5/signalowl-payloads](https://github.com/hak5/signalowl-payloads) The Official Hak5 Signal Owl Payload Repository
@@ -15822,38 +17055,46 @@ for CVE details based on the nmap report.
- [**23**Star][2y] [C#] [lockfale/dotnetavbypass-master](https://github.com/lockfale/dotnetavbypass-master) C# AV bypass jank
- [**23**Star][6y] [C#] [kjcracks/brake](https://github.com/kjcracks/brake) Remote cracking utility
- [**23**Star][8y] [C#] [sensepost/suru](https://github.com/sensepost/suru) Suru is one of the original Man In The Middle (MITM) proxies that sits between the user's browser and the web application.
+- [**23**Star][6y] [Py] [fsecurelabs/jasmin](https://github.com/fsecurelabs/jasmin)
+- [**23**Star][3m] [Shell] [owasp/honeypot-project](https://github.com/owasp/honeypot-project)
- [**23**Star][2y] [Py] [wi-fi-analyzer/boopsuite](https://github.com/wi-fi-analyzer/boopsuite) A Suite of Tools written in Python for wireless auditing and security testing.
- [**23**Star][3y] [hack-with-github/security-bookmarks](https://github.com/hack-with-github/security-bookmarks) Single stop for security related stuff
+- [**23**Star][1y] [Py] [ekultek/checkers](https://github.com/ekultek/checkers) Determine everything you need to know to about a system
- [**23**Star][3m] [Py] [warner/magic-wormhole-transit-relay](https://github.com/warner/magic-wormhole-transit-relay) Transit Relay server for Magic-Wormhole
- [**23**Star][5m] [Py] [ntkernel/cve-2019-0708](https://github.com/ntkernel/cve-2019-0708) 收集网上CVE-2018-0708的poc和exp(目前没有找到exp)
-- [**23**Star][8y] [C++] [cr4sh/simpleunpacker](https://github.com/cr4sh/simpleunpacker) Simple tool for unpacking packed/protected malware executables.
+- [**23**Star][3y] [C] [nicehash/cpuminer-opt](https://github.com/nicehash/cpuminer-opt)
- [**23**Star][3y] [Py] [d4vinci/reversehttp](https://github.com/d4vinci/reversehttp) Python backdoor that uses http post/get requests to communicate
-- [**23**Star][1y] [Py] [airbus-seclab/rebus](https://github.com/airbus-seclab/rebus) REbus facilitates the coupling of existing tools that perform specific tasks, where one's output will be used as the input of others.
+- [**23**Star][2y] [Py] [airbus-seclab/rebus](https://github.com/airbus-seclab/rebus) REbus facilitates the coupling of existing tools that perform specific tasks, where one's output will be used as the input of others.
+- [**23**Star][20d] [Py] [angr/archr](https://github.com/angr/archr) Target-centric program analysis.
- [**23**Star][4y] [Py] [andresriancho/django-moth](https://github.com/andresriancho/django-moth) A Django vulnerable Web application for testing the w3af framework
- [**23**Star][3y] [robertdavidgraham/iotpasswds](https://github.com/robertdavidgraham/iotpasswds) Recording default/backdoor passwords from IoT devices I come across
- [**23**Star][6y] [Go] [inconshreveable/shroud](https://github.com/inconshreveable/shroud) [DEPRECATED] Public hidden services
- [**23**Star][2y] [Py] [andresriancho/mongo-objectid-predict](https://github.com/andresriancho/mongo-objectid-predict) Predict Mongo ObjectIds
- [**23**Star][1y] [hikariobfuscator/swift](https://github.com/hikariobfuscator/swift) Swift Fork
- [**23**Star][3y] [JS] [uber-common/paranoid-request](https://github.com/uber-common/paranoid-request) An SSRF-preventing wrapper around Node's request module
+- [**23**Star][6m] [JS] [greenwolf/eslint-security-scanner-configs](https://github.com/greenwolf/eslint-security-scanner-configs) eslintrc.js config files for running static analysis on JavaScript to identify security issues.
- [**23**Star][2y] [Ruby] [urbanadventurer/urlcrazy](https://github.com/urbanadventurer/urlcrazy) Generate and test domain typos and variations to detect and perform typo squatting, URL hijacking, phishing, and corporate espionage.
- [**23**Star][1y] [Go] [tam7t/cautious-pancake](https://github.com/tam7t/cautious-pancake) github generated the repo name for me
-- [**23**Star][9d] [JS] [keenwon/koa-subdomain](https://github.com/keenwon/koa-subdomain) Simple and lightweight Koa middleware to handle multilevel and wildcard subdomains
+- [**23**Star][11d] [JS] [keenwon/koa-subdomain](https://github.com/keenwon/koa-subdomain) Simple and lightweight Koa middleware to handle multilevel and wildcard subdomains
- [**23**Star][1m] [Go] [hahwul/ras-fuzzer](https://github.com/hahwul/ras-fuzzer) RAS(RAndom Subdomain) Fuzzer
-- [**23**Star][11d] [JS] [josephpei/uv2ray](https://github.com/josephpei/uv2ray) Electron V2ray Client (mostly for Linux)
+- [**23**Star][13d] [JS] [josephpei/uv2ray](https://github.com/josephpei/uv2ray) Electron V2ray Client (mostly for Linux)
- [**23**Star][3y] [Py] [ptonewreckin/blindref](https://github.com/ptonewreckin/blindref) BlindRef serves as the basis for an automated Blind-Based XXE Exploitation Framework
- [**23**Star][3m] [Py] [k8gege/phpstudydoor](https://github.com/k8gege/phpstudydoor) PhpStudy 2016 & 2018 BackDoor Exploit
-- [**23**Star][7m] [Py] [bonnetn/vba-obfuscator](https://github.com/bonnetn/vba-obfuscator) 2018 School project - PoC of malware code obfuscation in Word macros
+- [**23**Star][3y] [Java] [nexxado/wifipasswords](https://github.com/nexxado/wifipasswords) a completely free app that shows your device saved wifi passwords.
+- [**23**Star][3y] [C++] [aixxe/cstrike-basehook-linux](https://github.com/aixxe/cstrike-basehook-linux) Internal project base for Counter-Strike: Source on Linux.
- [**23**Star][1y] [JS] [andreas0607/coinhive-blocker](https://github.com/andreas0607/coinhive-blocker) Blocks unwanted cryptominers in your browser (plug-in)
- [**23**Star][5y] [C] [rpp0/peapwn](https://github.com/rpp0/peapwn) Proof-of-concept implementation of the Apple relay attack in Python
- [**23**Star][5y] [Py] [vnik5287/wpa-autopwn](https://github.com/vnik5287/wpa-autopwn) WPA/WPA2 autopwn script that parses captured handshakes and sends them to the Crackq
+- [**23**Star][29d] [awsmhacks/awsmbloodhoundcustomqueries](https://github.com/awsmhacks/awsmbloodhoundcustomqueries) Collection of cyphers for bloodhound
- [**23**Star][2m] [C] [doublelabyrinth/windowssudo](https://github.com/doublelabyrinth/windowssudo) A linux-like su/sudo on Windows.
-- [**23**Star][2y] [Ruby] [trailofbits/trailofphish](https://github.com/trailofbits/trailofphish) Phishing e-mail repository
+- [**23**Star][4y] [C#] [olliencc/winbinaryaudit](https://github.com/olliencc/winbinaryaudit) GSAudit at Symantec, ExeAudit at RIM, RECX Binary Assurance for Windows at Recx etc. - core library now WinBinaryAudit
- [**23**Star][2m] [rarecoil/pantagrule](https://github.com/rarecoil/pantagrule) hashcat rules generated from over 840 million compromised passwords
-- [**23**Star][16d] [Py] [bing0o/python-scripts](https://github.com/bing0o/python-scripts) some scripts for penetration testing
+- [**23**Star][4d] [Py] [bing0o/python-scripts](https://github.com/bing0o/python-scripts) some scripts for penetration testing
- [**23**Star][2m] [PHP] [coenjacobs/wp-haveibeenpwned](https://github.com/coenjacobs/wp-haveibeenpwned) Checks if the password for each WordPress user account has been compromised via haveibeenpwned.com
-- [**23**Star][3m] [abhinavprasad47/bugbounty-starter-notes](https://github.com/abhinavprasad47/bugbounty-starter-notes) bug bounty hunters starter notes
+- [**23**Star][3m] [Visual Basic .NET] [henriksb/extensionspoofer](https://github.com/henriksb/extensionspoofer) Spoof file icons and extensions in Windows
- [**23**Star][6y] [vtsingaras/qcom-mbn-ida-loader](https://github.com/vtsingaras/qcom-mbn-ida-loader) IDA loader plugin for Qualcomm Bootloader Stages
- [**23**Star][5m] [Java] [openjavacard/openjavacard-ndef](https://github.com/OpenJavaCard/openjavacard-ndef) NDEF tag implementation for JavaCard
+- [**23**Star][3y] [Java] [ichukai/forwarder](https://github.com/ichukai/forwarder) 穿透内网的端口转发工具
- [**23**Star][2y] [OpenEdge ABL] [praetorian-code/ctf-writeups](https://github.com/praetorian-code/ctf-writeups) Collection of Praetorian solutions to CTF challenges
- [**23**Star][3y] [Py] [jofpin/backcookie](https://github.com/jofpin/backcookie) Small backdoor using cookie.
- [**23**Star][4y] [bannsec/angr-windows](https://github.com/bannsec/angr-Windows) Windows builds for use with angr framework
@@ -15861,84 +17102,93 @@ for CVE details based on the nmap report.
- [**23**Star][5y] [Assembly] [zerosum0x0/slae64](https://github.com/zerosum0x0/slae64) x64 Linux Shellcode
- [**23**Star][4y] [Py] [zedsec390/defcon23](https://github.com/zedsec390/defcon23)
- [**23**Star][3y] [Py] [zachriggle/pwndbg](https://github.com/zachriggle/pwndbg) GDB插件,辅助漏洞开发和逆向
+- [**23**Star][2m] [xxpe3/clash_raspberrypi](https://github.com/xxpe3/clash_raspberrypi) Clash for ARMv6L
- [**23**Star][4m] [C++] [xpn/rpcenum](https://github.com/xpn/rpcenum) An command-line RPC method enumerator, born out of RPCView's awesomeness
- [**23**Star][5m] [Py] [xorpd/fcatalog_server](https://github.com/xorpd/fcatalog_server) Functions Catalog
- [**23**Star][2y] [PHP] [xiaoxiaoleo/xiao-webshell](https://github.com/xiaoxiaoleo/xiao-webshell) a collection of webshell
-- [**23**Star][1y] [Visual Basic] [xiaoxiaoleo/pentest-script](https://github.com/xiaoxiaoleo/pentest-script) Script for pentest
+- [**23**Star][2y] [Visual Basic .NET] [xiaoxiaoleo/pentest-script](https://github.com/xiaoxiaoleo/pentest-script) Script for pentest
- [**23**Star][7y] [C++] [wyyqyl/hidemodule](https://github.com/wyyqyl/hidemodule) The dll that can hide itself and then delete itselft.
+- [**23**Star][3m] [C] [ww9210/kernel4.20_bpf_lpe](https://github.com/ww9210/kernel4.20_bpf_lpe) exploit code for a bpf heap overflow vulnerability
- [**23**Star][2y] [Py] [whitel1st/gp_hijack](https://github.com/whitel1st/gp_hijack) Group Policy Hijacking
- [**23**Star][3y] [Py] [whaleshark-team/chromeheadlessinterface](https://github.com/whaleshark-team/chromeheadlessinterface)
- [**23**Star][2y] [PHP] [weaverheavy/threat-intelligence-tradecraft](https://github.com/weaverheavy/threat-intelligence-tradecraft)
- [**23**Star][2y] [C] [wanttobeno/wmifilter](https://github.com/wanttobeno/wmifilter) 驱动层拦截web访问源码
- [**23**Star][12m] [C++] [wanttobeno/screenshot](https://github.com/wanttobeno/screenshot) 仿QQ截图,C++实现的截图软件Demo
- [**23**Star][9m] [Perl] [vti/cpan-audit](https://github.com/vti/cpan-audit) Check CPAN modules for known security vulnerabilities
-- [**23**Star][3m] [C++] [vertextoedge/windowfunctiontracer](https://github.com/vertextoedge/windowfunctiontracer) Window Executable file Function tracer using Debugging API
-- [**23**Star][2y] [C++] [verideth/repen](https://github.com/verideth/repen) Simple disassembler, going to support lots of architectures. Very easy to read and understand as well :)
+- [**23**Star][2y] [C++] [verideth/repen](https://github.com/verideth/repen) Simple C8 disassembler
- [**23**Star][1y] [JS] [veggiedefender/marveloptics_malware](https://github.com/veggiedefender/marveloptics_malware) Deobfuscated + reverse engineered javascript malware
- [**23**Star][3m] [C#] [vchirikov/gotodnspy](https://github.com/vchirikov/gotodnspy) GoTo dnSpy from Visual Studio 2017
- [**23**Star][3y] [Java] [vah13/burpcrlfplugin](https://github.com/vah13/burpcrlfplugin) Another plugin for CRLF vulnerability detection
+- [**23**Star][6m] [Swift] [universonic/shadowsocks-macos](https://github.com/universonic/shadowsocks-macos) Shadowsocks Client for Apple macOS
- [**23**Star][3y] [Py] [tylabs/quicksand_tools](https://github.com/tylabs/quicksand_tools) API access to QuickSand.io
- [**23**Star][4m] [C] [tumi8/zmap](https://github.com/tumi8/zmap) ZMapv6: Internet Scanner with IPv6 capabilities
- [**23**Star][3y] [C#] [tum-i22/vot4cs](https://github.com/tum-i22/vot4cs) vot4cs:C#虚拟化混淆工具
- [**23**Star][3y] [C] [true-systems/om5p-ac-v2-unlocker](https://github.com/true-systems/om5p-ac-v2-unlocker) Open Mesh OM5P-AC v2 Unlocker (U-Boot 1.1.4 based)
- [**23**Star][10m] [C++] [trojancyborg/ida_jni_rename](https://github.com/trojancyborg/ida_jni_rename) IDA JNI clal rename
-- [**23**Star][2m] [Dockerfile] [trojan-gfw/trojan-docker](https://github.com/trojan-gfw/trojan-docker) Dockerfile for building a trojan docker image.
- [**23**Star][2y] [HTML] [tothi/ctfs](https://github.com/tothi/ctfs) some example ctf writeups
+- [**23**Star][15d] [Shell] [torworld/fastrelay](https://github.com/torworld/fastrelay) Making it easier to run your own Tor Relay Node.
- [**23**Star][2y] [Py] [tomrittervg/ct-tools](https://github.com/tomrittervg/ct-tools) Random tools to perform Certificate Transparency-related stuff
- [**23**Star][2y] [Py] [tintinweb/unbox](https://github.com/tintinweb/unbox) a convenient one-click unpack and decompiler tool that wraps existing 3rd party applications like IDA Pro, JD-Cli, Dex2Src, and others to provide a convenient archiver liker command line interfaces to unpack and decompile various types of files
+- [**23**Star][2m] [Py] [theevilbit/exploits](https://github.com/theevilbit/exploits)
- [**23**Star][1y] [Py] [the404hacking/xsscan](https://github.com/the404hacking/xsscan) XsSCan | Web Application XSS Scanner | Coded By Sir.4m1R [Mr.Hidden]
- [**23**Star][2y] [Java] [techguy-bhushan/xssrequestfilters](https://github.com/techguy-bhushan/xssrequestfilters) Light weight library for Filter the Cross-site scripting in request For Spring Framwork / Spring-Boot, logic can be use for servlet based(without using spring framework) application
- [**23**Star][3y] [JS] [techgaun/xss-payloads](https://github.com/techgaun/xss-payloads) Collection of XSS Payloads from various sources
- [**23**Star][2y] [JS] [team-copper/captar](https://github.com/team-copper/captar) Augmented Reality Geolocation Capture-the-Flag Mobile Game Capstone Project
- [**23**Star][3y] [Py] [te-k/malware-classification](https://github.com/te-k/malware-classification) Data and code for malware classification using machine learning (for fun, not production)
+- [**23**Star][4d] [Go] [tdh8316/investigo](https://github.com/tdh8316/investigo) The minimal Go implementation of Sherlock -
- [**23**Star][5m] [HTML] [tarafans/collections](https://github.com/tarafans/collections) A medley of PoCs and exploits
- [**23**Star][4y] [XSLT] [stixproject/stix-to-html](https://github.com/stixproject/stix-to-html) Convert STIX XML to HTML
-- [**23**Star][1y] [C++] [sshsshy/zerotrace](https://github.com/sshsshy/zerotrace)
+- [**23**Star][2y] [C++] [sshsshy/zerotrace](https://github.com/sshsshy/zerotrace)
- [**23**Star][1y] [Shell] [sourcerer-io/sourcerer-blog](https://github.com/sourcerer-io/sourcerer-blog) Assets and examples for blog.sourcerer.io
- [**23**Star][2y] [Py] [somu1795/shodan_raspi](https://github.com/somu1795/shodan_raspi) Hack Raspberry Pi(s) across the world !
-- [**23**Star][3y] [PowerShell] [skons/ms17-0100](https://github.com/skons/ms17-0100) Mixing up CVE and MS like a pro
+- [**23**Star][3y] [PS] [skons/ms17-0100](https://github.com/skons/ms17-0100) Mixing up CVE and MS like a pro
- [**23**Star][2y] [Py] [simonuvarov/expdev](https://github.com/simonuvarov/expdev)
- [**23**Star][4y] [Py] [shengqi158/weak_password_detect](https://github.com/shengqi158/weak_password_detect) 多线程探测弱密码程序
- [**23**Star][4y] [Py] [shadowsocksfork/shadowsocksfork](https://github.com/shadowsocksfork/shadowsocksfork) A fork of shadowsocks 2.8.2
-- [**23**Star][3y] [Py] [sciencemanx/ctf-tools](https://github.com/sciencemanx/ctf-tools) Attack-Defend CTF Tools
-- [**23**Star][11m] [scanfsec/cve-2018-15982](https://github.com/scanfsec/cve-2018-15982) Aggressor Script to launch IE driveby for CVE-2018-15982.
+- [**23**Star][7m] [Py] [seyptoo/7z-bruteforce](https://github.com/seyptoo/7z-bruteforce) This repository consists of bruteforce to a 7z file, and it can be very useful in the penetration tests
+- [**23**Star][4y] [PHP] [secwiki/exp](https://github.com/secwiki/exp) 收集各种各样的exp
+- [**23**Star][2m] [Shell] [samuelhbne/vpn-launchpad](https://github.com/samuelhbne/vpn-launchpad) Builds Shadowsocks VPN server on AWS EC2 with QR code support. Works on Ubuntu, OSX and Debian variants including Raspbian.
- [**23**Star][2y] [Py] [s3xy/cve-2017-10271](https://github.com/s3xy/cve-2017-10271) Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful …
- [**23**Star][4y] [JS] [rwestergren/simple-hash-xss](https://github.com/rwestergren/simple-hash-xss)
- [**23**Star][1m] [JS] [roemhildtg/spectre-canjs](https://github.com/roemhildtg/spectre-canjs) A WIP data administration component library built on the Spectre.css framework enabled with CanJS
- [**23**Star][2y] [PHP] [riyazwalikar/sql-injection-training-app](https://github.com/riyazwalikar/sql-injection-training-app) A simple PHP application that can be used to demonstrate and train participants to detect and exploit SQL Injection vulnerabilities.
- [**23**Star][3y] [Py] [remnux/distro](https://github.com/remnux/distro) This repository contains supplementary files for building and using the REMnux Linux distribution. See
- [**23**Star][1y] [Go] [releasel0ck/blind-sql-injector](https://github.com/releasel0ck/blind-sql-injector) 手工盲注辅助注入工具
+- [**23**Star][2y] [C] [rednaga/keystore-shim](https://github.com/rednaga/keystore-shim) Shim to grab keystore backed data
- [**23**Star][3y] [Go] [redhat-cip/skydive](https://github.com/redhat-cip/skydive) An open source real-time network topology and protocols analyzer
- [**23**Star][4m] [Py] [radare/diaphora](https://github.com/radare/diaphora) Diaphora, a Free and Open Source program diffing tool
- [**23**Star][11m] [PHP] [r0nen/ctf](https://github.com/r0nen/ctf) CTF Writeups
- [**23**Star][2y] [ptresearch/intelme-crypto](https://github.com/ptresearch/intelme-crypto)
- [**23**Star][2y] [proteas/afl-swift](https://github.com/proteas/afl-swift) use afl to fuzz swift program
+- [**23**Star][11m] [Py] [privcount/privcount](https://github.com/privcount/privcount) Privacy-preserving Tor statistics aggregation tool that implements the secret-sharing variant of the PrivEx algorithm.
- [**23**Star][2y] [Py] [pieterbork/blueborne](https://github.com/pieterbork/blueborne) Scan/Exploit Blueborne CVE-2017-0785
- [**23**Star][1y] [Py] [pielco11/t2b-framework](https://github.com/pielco11/t2b-framework) Cross-Platform Post Exploitation Toolkit
- [**23**Star][3y] [Py] [pfalcon/ida-xtensa2](https://github.com/pfalcon/ida-xtensa2) IDAPython plugin for Tensilica Xtensa (as seen in ESP8266), version 2
+- [**23**Star][2m] [Py] [paloaltonetworks/autofocus-lenz](https://github.com/paloaltonetworks/autofocus-lenz) A command line utility to aid in using autofocus for IR and research
- [**23**Star][12m] [C#] [padovah4ck/redsharp](https://github.com/padovah4ck/redsharp) Penetration Test / Read Team - C# tools repository
- [**23**Star][2y] [C] [p4p1/p4p1](https://github.com/p4p1/p4p1) Reverse shell for remote administration
- [**23**Star][3m] [Py] [ozzi-/tld_scanner](https://github.com/ozzi-/tld_scanner) Scan all possible TLD's for a given domain name
- [**23**Star][1y] [Assembly] [osandamalith/pesecinfo](https://github.com/osandamalith/pesecinfo) A simple tool to view important DLL Characteristics and change DEP and ASLR
- [**23**Star][11m] [Shell] [optixal/dotfiles](https://github.com/optixal/dotfiles)
-- [**23**Star][12d] [Java] [opticfusion1/mcantimalware](https://github.com/opticfusion1/mcantimalware) Anti-Malware for minecraft
-- [**23**Star][3y] [C] [opensise/cve_poc_collect](https://github.com/opensise/cve_poc_collect) 这里会收集各种类型的CVE PoC 和EXP ,仅用来学习漏洞挖掘相关技术..
- [**23**Star][3y] [Shell] [opensecurityresearch/ciphertest](https://github.com/opensecurityresearch/ciphertest) A better SSL cipher checker using gnutls
-- [**23**Star][2y] [Shell] [oniondecoy/installer](https://github.com/oniondecoy/installer) A platform to run private unannounced Honeypots as Tor Hidden Services (aka Onion Decoys) inside the Tor Network.
- [**23**Star][1y] [Go] [olihough86/stinkyphish](https://github.com/olihough86/stinkyphish) Monitor Certificate Transparency Logs For Phishing Domains
-- [**23**Star][9d] [Py] [nullpxl/nullctf](https://github.com/nullpxl/nullctf) A Discord bot that provides ctf tools for collaboration in Discord servers!
+- [**23**Star][11d] [Py] [nullpxl/nullctf](https://github.com/nullpxl/nullctf) A Discord bot that provides ctf tools for collaboration in Discord servers!
- [**23**Star][7y] [Ruby] [nuke99/sqlnuke](https://github.com/nuke99/sqlnuke) SQLNuke | Fast Performing MYSQL Injection load_file() Fuzzer
- [**23**Star][2y] [C] [nucypher/nucypher-pre-python](https://github.com/nucypher/nucypher-pre-python) nucypher-pre-python:Python 实现的“代理重加密(Proxy Re-Encryption)”算法
- [**23**Star][4y] [Py] [nitscan/inlinux](https://github.com/nitscan/inlinux) 内网渗透信息收集脚本
-- [**23**Star][1y] [PowerShell] [netspi/sqlc2](https://github.com/netspi/sqlc2) SQLC2 is a PowerShell script for deploying and managing a command and control system that uses SQL Server as both the control server and the agent.
+- [**23**Star][1y] [PS] [netspi/sqlc2](https://github.com/netspi/sqlc2) SQLC2 is a PowerShell script for deploying and managing a command and control system that uses SQL Server as both the control server and the agent.
- [**23**Star][6y] [Py] [nccgroup/xcavator](https://github.com/nccgroup/xcavator) A network data locater using credentials obtained during penetration tests
- [**23**Star][2y] [C++] [nccgroup/bleboy](https://github.com/nccgroup/bleboy) BLEBoy is a training tool to teach users about BLE security by providing a single BLE peripheral that can be used to experiment with each BLE pairing method and demonstrates GATT security concepts.
-- [**23**Star][11m] [C] [nardholio/cve-2016-0728](https://github.com/nardholio/cve-2016-0728)
+- [**23**Star][12m] [C] [nardholio/cve-2016-0728](https://github.com/nardholio/cve-2016-0728)
- [**23**Star][2m] [Pascal] [nannib/imm2virtual](https://github.com/nannib/imm2virtual) This is a GUI (for Windows 64 bit) for a procedure to virtualize your EWF(E01), DD (raw), AFF disk image file without converting it, directly with VirtualBox, forensically proof.
+- [**23**Star][2y] [Shell] [mricon/tor-relay-bootstrap-rpi](https://github.com/mricon/tor-relay-bootstrap-rpi) Script to bootstrap a Debian server to be a set-and-forget Tor relay
+- [**23**Star][8m] [PHP] [mrahmadt/smartgw](https://github.com/mrahmadt/smartgw) Domain based VPN Gateway/Proxy for all devices
- [**23**Star][3y] [HTML] [mortenschenk/bypassing_cfg_seh](https://github.com/mortenschenk/bypassing_cfg_seh) Using SEH to bypass CFG
- [**23**Star][1y] [C] [moccajoghurt/drvmap_secure](https://github.com/moccajoghurt/drvmap_secure)
-- [**23**Star][17d] [C] [microsoft/modsecurity](https://github.com/microsoft/modsecurity) ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analys…
+- [**23**Star][19d] [C] [microsoft/modsecurity](https://github.com/microsoft/modsecurity) ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analys…
+- [**23**Star][3y] [Py] [merkjinx/saddam-plus-plus](https://github.com/merkjinx/saddam-plus-plus) open source DDoS Amplification Tool with scanners.
- [**23**Star][5m] [meitar/awesome-malware](https://github.com/meitar/awesome-malware)
+- [**23**Star][8d] [Shell] [meisterp/torbrowser-overlay](https://github.com/meisterp/torbrowser-overlay) Gentoo overlay for Tor Browser related ebuilds
- [**23**Star][6m] [JS] [mcibique/express-security](https://github.com/mcibique/express-security) nodejs + express security and performance boilerplate.
- [**23**Star][5m] [C++] [mbrengel/memscrimper](https://github.com/mbrengel/memscrimper) Code for the DIMVA 2018 paper: "MemScrimper: Time- and Space-Efficient Storage of Malware Sandbox Memory Dumps"
- [**23**Star][3y] [C++] [matviy/leaguereplayhook](https://github.com/matviy/leaguereplayhook) Library for interacting with the League of Legends Spectator/Replay Client
@@ -15946,29 +17196,34 @@ for CVE details based on the nmap report.
- [**23**Star][3y] [Py] [markusteufelberger/afl-ddmin-mod](https://github.com/markusteufelberger/afl-ddmin-mod) Test case minimizer for afl-fuzz
- [**23**Star][4y] [C] [marcograss/cve-2014-4323](https://github.com/marcograss/cve-2014-4323) cve-2014-4323 poc
- [**23**Star][6m] [C] [maikel233/x-hook-for-csgo](https://github.com/maikel233/x-hook-for-csgo) Aimtux for Windows.
-- [**23**Star][1y] [Py] [m4rktn/jogan](https://github.com/m4rktn/jogan) Pentest Tools & Packages Installer [Linux/Termux]
+- [**23**Star][4y] [PHP] [lxj616/dvwa-wooyun](https://github.com/lxj616/dvwa-wooyun) It is a DVWA with some plugins based on real wooyun bug reports
+- [**23**Star][1y] [C] [lucascouto/krackattack-all-zero-tk-key](https://github.com/lucascouto/krackattack-all-zero-tk-key) This code has base on a code made by Mathy Vanhoef (
- [**23**Star][1y] [C] [logicaltrust/minerva_lib](https://github.com/logicaltrust/minerva_lib) polish fuzzy lop - fuzzer for libraries/APIs/*
- [**23**Star][7y] [C] [liblit/murphy](https://github.com/liblit/murphy) language-agnostic tool that helps developers discover and isolate run-time failures in their programs by simulating difficult-to-reproduce but completely-legitimate interactions between the application and the kernel
- [**23**Star][5y] [C++] [liamkarlmitchell/signaturescanner](https://github.com/liamkarlmitchell/signaturescanner) I wanted a nicer signature scanner that worked the way I wanted. Include however you want in your own DLL project.
-- [**23**Star][3m] [Shell] [leviathan36/wifibang](https://github.com/leviathan36/wifibang) wifi attacks suite
- [**23**Star][3m] [Go] [leoid/mysql-injection-exfiltration-optimization](https://github.com/leoid/mysql-injection-exfiltration-optimization) MySQL Injection Exfoliation Optimization
- [**23**Star][7y] [Py] [lbragues/pasteminer](https://github.com/lbragues/pasteminer) Find useful stuff in pastebin
- [**23**Star][4y] [Py] [laudarch/shellsploit](https://github.com/laudarch/shellsploit) Mutation Of Vıruses
-- [**23**Star][1m] [kylebing/sslist](https://github.com/kylebing/sslist) 优化访问速度的小型 gfw (Great Fire Wall) 规则列表 gfwlist
+- [**23**Star][2d] [kylebing/sslist](https://github.com/kylebing/sslist) 优化访问速度的小型 gfw (Great Fire Wall) 规则列表 gfwlist
- [**23**Star][3y] [Py] [kx499/ostip](https://github.com/kx499/ostip)
- [**23**Star][3y] [C++] [kuqadk3/winrarer-ransomware](https://github.com/kuqadk3/winrarer-ransomware)
- [**23**Star][3m] [Assembly] [mwkmwkmwk/cpuadventure](https://github.com/mwkmwkmwk/cpuadventure) CPU Adventure task from Dragon CTF 2019 teaser
- [**23**Star][4y] [JS] [kolanich/cleanunwantedupdates](https://github.com/kolanich/cleanunwantedupdates) A set of scripts to detect updates of Microsoft (TM) Windows (TM) OS which harm users' privacy and uninstall them
- [**23**Star][2y] [C] [kelvinhack/screencapattack](https://github.com/kelvinhack/screencapattack)
-- [**23**Star][7m] [TypeScript] [jvilk/mitmproxy-node](https://github.com/jvilk/mitmproxy-node) A bridge between Python's mitmproxy and Node.JS programs. Rewrite network requests using Node.JS!
+- [**23**Star][6y] [C] [jyang772/hideprocesshookmdl](https://github.com/jyang772/hideprocesshookmdl) A simple rootkit to hide a process
+- [**23**Star][7m] [TS] [jvilk/mitmproxy-node](https://github.com/jvilk/mitmproxy-node) A bridge between Python's mitmproxy and Node.JS programs. Rewrite network requests using Node.JS!
- [**23**Star][6m] [C] [junxzm1990/afl-pt](https://github.com/junxzm1990/afl-pt)
-- [**23**Star][6m] [Py] [jpiechowka/zip-shotgun](https://github.com/jpiechowka/zip-shotgun) Utility script to test zip file upload functionality (and possible extraction of zip files) for vulnerabilities (aka Zip Slip)
-- [**23**Star][3y] [Shell] [josefkarasek/docker101](https://github.com/josefkarasek/docker101) Docker for absolute beginners. Learn how to get and run Docker containers. Created for the Brno Docker meetup group.
+- [**23**Star][2m] [Py] [jplesperance/redis-sniffer](https://github.com/jplesperance/redis-sniffer) A Redis event sniffer and logging utility.
+- [**23**Star][7m] [Py] [jpiechowka/zip-shotgun](https://github.com/jpiechowka/zip-shotgun) Utility script to test zip file upload functionality (and possible extraction of zip files) for vulnerabilities (aka Zip Slip)
+- [**23**Star][4y] [Shell] [josefkarasek/docker101](https://github.com/josefkarasek/docker101) Docker for absolute beginners. Learn how to get and run Docker containers. Created for the Brno Docker meetup group.
- [**23**Star][4m] [Py] [jonathansalwan/x-tunnel-opaque-predicates](https://github.com/jonathansalwan/x-tunnel-opaque-predicates) IDA+Triton plugin in order to extract opaque predicates using a Forward-Bounded DSE. Example with X-Tunnel.
- [**23**Star][2m] [jmscory/security-tool-chest](https://github.com/jmscory/security-tool-chest) A list of useful security and obvescation tools useful for red and blue teaming activities. A list made possible by the provided references.
- [**23**Star][4y] [PHP] [jgamblin/nmap-for-slack](https://github.com/jgamblin/nmap-for-slack) Custom slash command to do a basic nmap scan from within Slack
+- [**23**Star][2y] [JS] [jamesacampbell/elector](https://github.com/jamesacampbell/elector) TOR BROWSER IN ELECTRON
- [**23**Star][3y] [Java] [jackuhan/loginhook](https://github.com/jackuhan/loginhook) xposed的hook案例
-- [**23**Star][2y] [Shell] [jacksongl/npm-vuln-poc](https://github.com/jacksongl/npm-vuln-poc) Vulnerabilities discovered in npm repository [Berkeley PL & Security Research].
+- [**23**Star][1y] [Py] [j40903272/malconv-keras](https://github.com/j40903272/malconv-keras) This is the implementation of MalConv proposed in [Malware Detection by Eating a Whole EXE](
+- [**23**Star][12m] [ObjC] [rpwnage/warri0r](https://github.com/RPwnage/Warri0r) ios 12 Sandbox escape POC
+- [**23**Star][10d] [PHP] [ip2location/ip2proxy-php](https://github.com/ip2location/ip2proxy-php) PHP module for IP2Proxy database lookup. It allows user to query an IP address if it was being used as open proxy, web proxy, VPN anonymizer and TOR exits.
- [**23**Star][1y] [C] [ioactive/kmdf_re](https://github.com/ioactive/kmdf_re) Helper idapython code for reversing kmdf drivers
- [**23**Star][3y] [C++] [insomnihack/teaser-2017](https://github.com/insomnihack/teaser-2017)
- [**23**Star][5y] [Ruby] [insomnihack/insomnihack-2015](https://github.com/insomnihack/insomnihack-2015) Repository for Insomni'hack finals 2015
@@ -15977,30 +17232,33 @@ for CVE details based on the nmap report.
- [**23**Star][10m] [Nim] [imgp3dev/drmitm](https://github.com/imgp3dev/drmitm) DrMITM is a program designed to globally log all traffic of a website.
- [**23**Star][2y] [C] [ieeeicsg/ieee_taggant_system](https://github.com/ieeeicsg/ieee_taggant_system) Taggant System developed by the Malware Working Group of ICSG (Industry Connections Security Group) under the umbrella of IEEE
- [**23**Star][1y] [Java] [realbearcat/jackson-cve-2017-17485](https://github.com/RealBearcat/Jackson-CVE-2017-17485) Jackson 反序列化
+- [**23**Star][9m] [Py] [hpd0ger/supertags](https://github.com/hpd0ger/supertags) 一个Burpsuite插件,用于检测隐藏的XSS
- [**23**Star][7m] [Py] [horusteknoloji/tr-phishinglist](https://github.com/horusteknoloji/tr-phishinglist) Türkiye'ye Yönelik Zararlı Bağlantı Erişim Engelleme Listesi
+- [**23**Star][3y] [Go] [hgfischer/domainerator](https://github.com/hgfischer/domainerator) Simple application written in Go that combines two wordlists and a list of TLDs to form domain names and check if they are already registered.
- [**23**Star][3y] [C] [hedgeh/sewindows](https://github.com/hedgeh/sewindows) 在Windows上建立一个开源的强制访问控制框架及SDK。使Windows平台的应用开发者,可以不用关心操作系统底层技术,只用进行简单的SDK调用或配置就可以保护自己的应用程序。
-- [**23**Star][6y] [Ruby] [hackedteam/rcs-backdoor](https://github.com/hackedteam/rcs-backdoor) Backdoor implementation in Ruby (testing)
-- [**23**Star][1y] [Py] [gynvael/arcanesector](https://github.com/gynvael/arcanesector) Arcane Sector game - a CTF task, or old-school (MMO)RPG - depending on the perspective. The code is of terrible quality, you have been warned!
+- [**23**Star][1y] [C] [hardenedbsd/secadm](https://github.com/hardenedbsd/secadm) HardenedBSD Security Administration
+- [**23**Star][3y] [hani1990/phith0n-mind-map](https://github.com/hani1990/phith0n-mind-map)
- [**23**Star][3y] [C] [guidovranken/openssl-x509-vulnerabilities](https://github.com/guidovranken/openssl-x509-vulnerabilities)
- [**23**Star][2y] [PHP] [graniet/physics-command](https://github.com/graniet/physics-command) 硬件系统分析平台(例如:树莓派3B)
-- [**23**Star][2m] [C++] [grammatech/gtirb-pprinter](https://github.com/grammatech/gtirb-pprinter) Pretty printer from GTIRB to assembly code
-- [**23**Star][3m] [Py] [ghostofgoes/adles](https://github.com/ghostofgoes/adles) Automated Deployment of Lab Environments System (ADLES)
+- [**23**Star][2d] [C++] [grammatech/gtirb-pprinter](https://github.com/grammatech/gtirb-pprinter) Pretty printer from GTIRB to assembly code
+- [**23**Star][7m] [JS] [gnuhpc/kibana-multitenant-proxy](https://github.com/gnuhpc/kibana-multitenant-proxy) A proxy behind nginx while before kibana (4.x, 5.x) to provide data isolation for different users
- [**23**Star][3y] [Py] [german-namestnikov/unhidens](https://github.com/german-namestnikov/unhidens) Small DNS Recon utility, allows you to obtain some useful info about NS-servers placed behind relays, firewalls, etc.
- [**23**Star][10m] [Go] [gen0cide/hasherbasher](https://github.com/gen0cide/hasherbasher) SQL injection via bruteforced MD5 hash reflection of random strings
- [**23**Star][2y] [Jupyter Notebook] [geekonlinecode/malware-machine-learning](https://github.com/geekonlinecode/malware-machine-learning) Malware Machine Learning
- [**23**Star][4y] [Rust] [gcarq/arp-spoof](https://github.com/gcarq/arp-spoof) Minimal ARP-Spoofing tool written in Rust
- [**23**Star][1y] [ActionScript] [ga1ois/recon-2018-montreal](https://github.com/ga1ois/recon-2018-montreal)
-- [**23**Star][3y] [Py] [freenas/middleware](https://github.com/freenas/middleware) New FreeNAS 10 Middleware
- [**23**Star][2y] [PHP] [freak3dot/wp-smart-honeypot](https://github.com/freak3dot/wp-smart-honeypot) Wordpress plugin to reduce comment spam with a smarter honeypot.
- [**23**Star][6y] [Py] [feliam/cve-2013-2729](https://github.com/feliam/cve-2013-2729)
-- [**23**Star][9m] [C++] [fare9/pba_analysis_tools](https://github.com/fare9/pba_analysis_tools) My own versions from the programs of the book "Practical Binary Analysis"
+- [**23**Star][1y] [Py] [farisv/appledos](https://github.com/farisv/appledos) Messing Apple devices on the network with CVE-2018-4407 (heap overflow in bad packet handling)
- [**23**Star][5y] [exp-sky/hitcon-2014-ie-11-0day-windows-8.1-exploit](https://github.com/exp-sky/hitcon-2014-ie-11-0day-windows-8.1-exploit) HitCon 2014 : IE 11 0day & Windows 8.1 Exploit
- [**23**Star][1y] [C++] [ewhitehats/kovtertools](https://github.com/ewhitehats/kovtertools)
- [**23**Star][4y] [HTML] [etherpot/contract](https://github.com/etherpot/contract)
-- [**23**Star][2y] [PowerShell] [elevenpaths/usbhiddennetworks](https://github.com/elevenpaths/usbhiddennetworks)
+- [**23**Star][7m] [C] [enfuzz/enfuzz](https://github.com/enfuzz/enfuzz)
+- [**23**Star][2y] [PS] [elevenpaths/usbhiddennetworks](https://github.com/elevenpaths/usbhiddennetworks)
- [**23**Star][4m] [Py] [elespike/burp-cph](https://github.com/elespike/burp-cph) Custom Parameter Handler extension for Burp Suite.
-- [**23**Star][4m] [PowerShell] [dpaulson45/exchangelogcollector](https://github.com/dpaulson45/exchangelogcollector) Exchange Log Collection Script
+- [**23**Star][4m] [PS] [dpaulson45/exchangelogcollector](https://github.com/dpaulson45/exchangelogcollector) Exchange Log Collection Script
- [**23**Star][2y] [C++] [dougallj/dj_ida_plugins](https://github.com/dougallj/dj_ida_plugins) Plugins for IDA Pro and Hex-Rays
+- [**23**Star][2m] [C++] [dns-oarc/dnsmeter](https://github.com/dns-oarc/dnsmeter) Tool for testing performance of nameservers
- [**23**Star][8m] [C] [djhohnstein/wlbsctrl_poc](https://github.com/djhohnstein/wlbsctrl_poc) C++ POC code for the wlbsctrl.dll hijack on IKEEXT
- [**23**Star][1y] [Java] [distrinet/xsr-framework](https://github.com/distrinet/xsr-framework) A framework for automatic testing of third-party request and cookie policy implementations
- [**23**Star][2m] [JS] [devwerks/xss-cheatsheet](https://github.com/devwerks/xss-cheatsheet) XSS Cheatsheet - A collection of XSS attack vectors
@@ -16008,33 +17266,32 @@ for CVE details based on the nmap report.
- [**23**Star][1y] [Ruby] [dev-sec/chef-mysql-hardening](https://github.com/dev-sec/chef-mysql-hardening) This chef cookbook provides security configuration for mysql.
- [**23**Star][1y] [Ruby] [dev-sec/chef-apache-hardening](https://github.com/dev-sec/chef-apache-hardening)
- [**23**Star][2y] [Vue] [deturium/school-bus](https://github.com/deturium/school-bus) 浙江大学AAA战队开放 CTF 练习平台新前端
-- [**23**Star][1m] [Py] [desword/pwn_execrise](https://github.com/desword/pwn_execrise) A collection of pwn execrise
- [**23**Star][1y] [c++] [dax89/r2gui](https://github.com/dax89/r2gui) Unofficial Qt5 frontend for Radare2
- [**23**Star][3y] [C] [davidbuchanan314/cowroot](https://github.com/davidbuchanan314/cowroot) Universal Android root tool based on CVE-2016-5195. Watch this space.
- [**23**Star][3y] [C] [david-reguera-garcia-dreg/phook](https://github.com/david-reguera-garcia-dreg/phook) Full DLL Hooking, phrack 65
+- [**23**Star][11m] [dariubs/awesome-proxy](https://github.com/dariubs/awesome-proxy) A collaborative list of awesome proxy servers and resources. Feel free to contribute!
- [**23**Star][1y] [C#] [damonmohammadbagher/nativepayload_ip6dns](https://github.com/damonmohammadbagher/nativepayload_ip6dns) C# code for Transferring Backdoor Payloads by IPv6 Address (AAAA) records and DNS Traffic also Bypassing Anti-viruses
+- [**23**Star][1y] [Py] [damian89/commoncrawlparser](https://github.com/damian89/commoncrawlparser) Simple multi threaded tool to extract domain related data from commoncrawl.org
- [**23**Star][3y] [Py] [d4vinci/anti_killer](https://github.com/d4vinci/anti_killer) Kill Any Antivirus Using Python For Windows Users .
- [**23**Star][2m] [Py] [cyberheartmi9/cve-2017-8295](https://github.com/cyberheartmi9/cve-2017-8295)
-- [**23**Star][21d] [C++] [curl/curl-fuzzer](https://github.com/curl/curl-fuzzer) Quality assurance testing for the curl project
+- [**23**Star][23d] [C++] [curl/curl-fuzzer](https://github.com/curl/curl-fuzzer) Quality assurance testing for the curl project
- [**23**Star][5y] [C] [ctu-iig/802.11p-linux](https://github.com/ctu-iig/802.11p-linux) mac80211/wireless next tree
- [**23**Star][7y] [C++] [cr4sh/ida-ubigraph](https://github.com/cr4sh/ida-ubigraph) IDA Pro plug-in and tools for displaying 3D graphs of procedures using UbiGraph
-- [**23**Star][12d] [Py] [costa-group/ethir](https://github.com/costa-group/ethir) A framework for high-level Analysis of Ethereum Bytecode
+- [**23**Star][7d] [Py] [costa-group/ethir](https://github.com/costa-group/ethir) A framework for high-level Analysis of Ethereum Bytecode
- [**23**Star][1m] [Py] [cornerpirate/cve-offline](https://github.com/cornerpirate/cve-offline) An easy to grep dump of the NVD database showing only; CVE-ID, CVSS Risk Score, and Summary.
- [**23**Star][6y] [commonexploits/weape](https://github.com/commonexploits/weape) Weape-Wireless-EAP-Extractor
- [**23**Star][11m] [Py] [coldshell/malware-scripts](https://github.com/coldshell/malware-scripts)
- [**23**Star][11m] [coldev/coldevprolayer](https://github.com/coldev/coldevprolayer) Protect your PHP code with obfuscation and encryption
-- [**23**Star][2y] [PowerShell] [codingo/retrieve-windows-wifi-passwords](https://github.com/codingo/retrieve-windows-wifi-passwords) Retreives the SSID names and passwords in cleartext for each Wifi network stored on the computer running this powershell script and output to JSON.
- [**23**Star][3y] [C] [cn33liz/hsevd-arbitraryoverwrite](https://github.com/cn33liz/hsevd-arbitraryoverwrite) HackSys Extreme Vulnerable Driver - ArbitraryOverwrite Exploit
- [**23**Star][5y] [Ruby] [claudijd/bnat](https://github.com/claudijd/bnat) "Broken NAT" - A suite of tools focused on detecting and interacting with publicly available BNAT scenerios
-- [**23**Star][3y] [C++] [chausner/1337patch](https://github.com/chausner/1337patch) Simple command-line tool to apply patches exported by x64dbg to running processes
+- [**23**Star][3y] [Py] [chengable/safe_code](https://github.com/chengable/safe_code) absolute safe code
- [**23**Star][5y] [C++] [certcc/dranzer](https://github.com/certcc/dranzer) Dranzer is a tool that enables users to examine effective techniques for fuzz testing ActiveX controls
-- [**23**Star][10m] [XSLT] [capt-meelo/massmap](https://github.com/capt-meelo/massmap) Combined port scanning w/ Masscan's speed & Nmap's scanning features.
- [**23**Star][3y] [JS] [calmh/yardstick](https://github.com/calmh/yardstick) [UNMAINTAINED] Javascript code metrics
- [**23**Star][2y] [bxlcity/malware](https://github.com/bxlcity/malware)
-- [**23**Star][5y] [Py] [burningcodes/dexconfuse](https://github.com/burningcodes/dexconfuse) 简易dex混淆器
- [**23**Star][1y] [Py] [buckhacker/subdomaintakeovertools](https://github.com/buckhacker/subdomaintakeovertools)
+- [**23**Star][2y] [Py] [brunneis/scihub-downloader](https://github.com/brunneis/scihub-downloader) Sci-Hub PDF downloader through Tor Network (Docker image)
- [**23**Star][4y] [brucecio9999/cryptowire-advanced-autoit-ransomware-project](https://github.com/brucecio9999/cryptowire-advanced-autoit-ransomware-project) This is a advanced ransomware example made in AutoIt
-- [**23**Star][8d] [JS] [bowlingtoolkit/discord-bots-hack-code](https://github.com/bowlingtoolkit/discord-bots-hack-code) Discord Bots Hacking
+- [**23**Star][6m] [Jupyter Notebook] [briansrebrenik/final_project](https://github.com/briansrebrenik/final_project) Using Twitter Ego Network Analysis to Detect Sources of Fake News
- [**23**Star][3m] [Py] [bitthebyte/domainker](https://github.com/bitthebyte/domainker) BugBounty Tool
- [**23**Star][5y] [C++] [behzad-a/dytan](https://github.com/behzad-a/dytan) Dytan Taint Analysis Framework on Linux 64-bit
- [**23**Star][2y] [C++] [balika011/belf](https://github.com/balika011/belf) Balika011's PlayStation 4 ELF loader for IDA Pro 7.0/7.1
@@ -16045,46 +17302,56 @@ for CVE details based on the nmap report.
- [**23**Star][3y] [C] [armedpot/honeytrap](https://github.com/armedpot/honeytrap) Last download from git://git.carnivore.it/honeytrap.git of Honytrap by Tillmann Werner
- [**23**Star][2m] [C] [arizvisa/ndk](https://github.com/arizvisa/ndk) A local copy of Alex Ionescu's seemingly abandoned native-nt-toolkit project containing knowledge inherited from the ReactOS project.
- [**23**Star][2y] [C++] [apriorit/svchostdemo](https://github.com/apriorit/svchostdemo) Demo service that runs in svchost.exe
+- [**23**Star][3y] [ObjC] [apestalk/debugwindow](https://github.com/apestalk/debugwindow) 一个在真机上测试时方便查看输出日志的小工具。(A debug tool which helps you view the console logs on the device when you test you APP.)
+- [**23**Star][7m] [Py] [antisomnus/sniffer](https://github.com/antisomnus/sniffer) Simple sniffer using scapy and PyQt5 on Windows 10
- [**23**Star][12m] [Py] [anotherik/rogueap-detector](https://github.com/anotherik/rogueap-detector) Rogue Access Point Detector
+- [**23**Star][6m] [Py] [anhkgg/get52pojietools](https://github.com/anhkgg/get52pojietools) 一个批量下载52pojie爱盘中资源的小脚本。
- [**23**Star][5m] [Py] [alexander-hanel/hansel](https://github.com/alexander-hanel/hansel) a simple but flexible search for IDA
-- [**23**Star][11d] [Py] [aff4/pyaff4](https://github.com/aff4/pyaff4) The Python implementation of the AFF4 standard.
-- [**23**Star][1y] [C++] [adrianyy/x64-syscall](https://github.com/adrianyy/x64-syscall) x64 syscall caller in C++.
-- [**23**Star][2y] [Py] [admintony/sql-injection](https://github.com/admintony/sql-injection) 解决sqlmap不能跑的注入
+- [**23**Star][13d] [Py] [aff4/pyaff4](https://github.com/aff4/pyaff4) The Python implementation of the AFF4 standard.
- [**23**Star][2y] [abhishekkr/eden_guide_to_hacking](https://github.com/abhishekkr/eden_guide_to_hacking) its quick to read, broadway guide to HACKING ~ for anyone to have grasp of important concepts and skills which makes up the knowledge base of a hacker
+- [**23**Star][3y] [C] [93aef0ce4dd141ece6f5/packer](https://github.com/93aef0ce4dd141ece6f5/packer) PoC executable packer using resources
- [**23**Star][3y] [PHP] [3xp10it/xwebshell](https://github.com/3xp10it/xwebshell) 免杀webshell
- [**23**Star][1y] [JS] [0xsobky/xssbuster](https://github.com/0xsobky/xssbuster) XSSB is a proactive DOM sanitizer, defending against client-side injection attacks!
-- [**23**Star][18d] [Py] [00xc/h2buster](https://github.com/00xc/h2buster) A fast, threaded, recursive, web directory brute-force scanner over HTTP/2.
-- [**22**Star][3d] [Py] [skybulk/bin2sc](https://github.com/skybulk/bin2sc) Binary to shellcode
-- [**22**Star][27d] [Java] [snail007/goproxy-ss-plugin-android](https://github.com/snail007/goproxy-ss-plugin-android) goproxy安卓全局代理,ss goproxy安卓插件, goproxy :
+- [**23**Star][2y] [Py] [0x024/ms](https://github.com/0x024/ms) 我的monitor system--智能家庭监控系统
+- [**22**Star][2y] [C#] [xadamxk/usb-rubber-ducky-app](https://github.com/xadamxk/usb-rubber-ducky-app)
+- [**22**Star][2d] [TS] [cedx/reverse-proxy.js](https://github.com/cedx/reverse-proxy.js) Personal reverse proxy server supporting WebSockets.
+- [**22**Star][] [Py] [wisepythagoras/website-fingerprinting](https://github.com/wisepythagoras/website-fingerprinting) Deanonymizing Tor or VPN users with website fingerprinting and machine learning.
+- [**22**Star][6d] [Go] [hahwul/websocket-connection-smuggler](https://github.com/hahwul/websocket-connection-smuggler) websocket-connection-smuggler
+- [**22**Star][29d] [Java] [snail007/goproxy-ss-plugin-android](https://github.com/snail007/goproxy-ss-plugin-android) goproxy安卓全局代理,ss goproxy安卓插件, goproxy :
+- [**22**Star][21d] [Py] [k8gege/pyladon](https://github.com/k8gege/pyladon) Ladon NetScan For Python (PortScan/OnlinePC/VulScan/Struts2/Weblogic/Exploit/GetShell/MS17010)
+- [**22**Star][4y] [Py] [epsylon/anontwi](https://github.com/epsylon/anontwi) Anontwi is a tool for OAuth2 applications (such as: GNUSocial, Twitter) that provides different layers of encryption, privacy methods and proxy features.
- [**22**Star][2y] [C] [nsacyber/driver-collider](https://github.com/nsacyber/driver-collider) Blocks drivers from loading by using a name collision technique. #nsacyber
-- [**22**Star][3m] [Shell] [owasp/honeypot-project](https://github.com/owasp/honeypot-project)
-- [**22**Star][3y] [Py] [mthbernardes/demoniware](https://github.com/mthbernardes/demoniware) Telegram BotNet
-- [**22**Star][18d] [Py] [angr/archr](https://github.com/angr/archr) Target-centric program analysis.
- [**22**Star][4y] [C] [shadowsocks/openssl-android](https://github.com/shadowsocks/openssl-android) A fork of OpenSSL for shadowsocks-android
-- [**22**Star][6m] [JS] [greenwolf/eslint-security-scanner-configs](https://github.com/greenwolf/eslint-security-scanner-configs) eslintrc.js config files for running static analysis on JavaScript to identify security issues.
- [**22**Star][9m] [CSS] [ytisf/apate](https://github.com/ytisf/apate) Your Friendly Neighbourhood Honeypot Maker and Manager
+- [**22**Star][3y] [Py] [dxa4481/mimikittenz4linux](https://github.com/dxa4481/mimikittenz4linux) Steals cleartext passwords from webservices, by reading the memory of browsers
- [**22**Star][2y] [Py] [d35m0nd142/joomla-components-exploits-auto-updating-scanner](https://github.com/d35m0nd142/joomla-components-exploits-auto-updating-scanner) Auto Updater Joomla Components and Exploits Scanner
-- [**22**Star][1m] [JS] [xyntax/xctf-2019-tfboys](https://github.com/xyntax/xctf-2019-tfboys) source code of XCTF 2019 Final web task "tfboys"
+- [**22**Star][2m] [JS] [xyntax/xctf-2019-tfboys](https://github.com/xyntax/xctf-2019-tfboys) source code of XCTF 2019 Final web task "tfboys"
- [**22**Star][2y] [Go] [nachowski/warpwallet_cracker](https://github.com/nachowski/warpwallet_cracker) A brute-force cracker in Go for the WarpWallet Challenge 2
-- [**22**Star][8d] [learnteachcode/code-coffee-compendium](https://github.com/learnteachcode/code-coffee-compendium) curated resource compendium, maintained by the Baldwin Park code & coffee study group
-- [**22**Star][3m] [Ruby] [mitre-cyber-academy/ctf-scoreboard](https://github.com/mitre-cyber-academy/ctf-scoreboard) Repository for the MITRE Capture the Flag scoreboard.
+- [**22**Star][10d] [learnteachcode/code-coffee-compendium](https://github.com/learnteachcode/code-coffee-compendium) curated resource compendium, maintained by the Baldwin Park code & coffee study group
+- [**22**Star][1m] [Py] [5h4d0wb0y/socialbrute](https://github.com/5h4d0wb0y/socialbrute) It attempts to crack social networks using a brute force dictionary attack.
+- [**22**Star][29d] [Py] [torpyorg/torpy](https://github.com/torpyorg/torpy) Pure python Tor client implementation of the Tor protocol
+- [**22**Star][5d] [Ruby] [mitre-cyber-academy/ctf-scoreboard](https://github.com/mitre-cyber-academy/ctf-scoreboard) Repository for the MITRE Capture the Flag scoreboard.
- [**22**Star][6m] [Batchfile] [dylanbai8/c2ray](https://github.com/dylanbai8/c2ray) C2ray 一款windows下的极简 V2ray 客户端
-- [**22**Star][3y] [C++] [aixxe/cstrike-basehook-linux](https://github.com/aixxe/cstrike-basehook-linux) Internal project base for Counter-Strike: Source on Linux.
-- [**22**Star][2m] [C] [adde88/hostapd-mana-openwrt](https://github.com/adde88/hostapd-mana-openwrt) hostapd-mana - build-files, and installation-files for OpenWRT
+- [**22**Star][1m] [Go] [tismayil/rsdl](https://github.com/tismayil/rsdl) Subdomain Scan With Ping Method.
+- [**22**Star][3m] [C] [adde88/hostapd-mana-openwrt](https://github.com/adde88/hostapd-mana-openwrt) hostapd-mana - build-files, and installation-files for OpenWRT
- [**22**Star][5y] [C] [andyvand/atherosromkit](https://github.com/andyvand/atherosromkit) Atheros ROM modding and recovery kit
- [**22**Star][7y] [brycethomas/liber80211](https://github.com/brycethomas/liber80211) 802.11 monitor mode for Android without root.
-- [**22**Star][29d] [lbherrera/writeups](https://github.com/lbherrera/writeups)
+- [**22**Star][1m] [lbherrera/writeups](https://github.com/lbherrera/writeups)
- [**22**Star][2m] [Dockerfile] [kizzx2/docker-openvpn-client-socks](https://github.com/kizzx2/docker-openvpn-client-socks) Expose an OpenVPN tunnel as a SOCKS proxy
+- [**22**Star][9m] [Py] [geekscrapy/bingraph](https://github.com/geekscrapy/bingraph) Simple tool to graph files for quick analysis
+- [**22**Star][3m] [Go] [geek1011/easy-novnc](https://github.com/geek1011/easy-novnc) Run a noVNC instance, web UI, and multi-host proxy with a single binary.
- [**22**Star][3m] [Py] [circl/forensic-tools](https://github.com/circl/forensic-tools) CIRCL system forensic tools or a jumble of tools to support forensic
-- [**22**Star][12d] [Py] [penetrate2hack/itwsv](https://github.com/penetrate2hack/itwsv) ITWSV- Integrated Tool for Web Security Vulnerability
-- [**22**Star][15d] [Py] [z3pp/zfuzz](https://github.com/z3pp/zfuzz) Simple python web fuzzer
-- [**22**Star][2m] [C++] [legendl3n/smarthooker](https://github.com/legendl3n/smarthooker) The smartest hooking library.
+- [**22**Star][2m] [Py] [adriangranados/wifiexplorer-sensor](https://github.com/adriangranados/wifiexplorer-sensor) Enables remote scanning in WiFi Explorer Pro
+- [**22**Star][6m] [JS] [rndinfosecguy/vulture](https://github.com/rndinfosecguy/vulture) WhatsApp Online Tracker
+- [**22**Star][3y] [JS] [yuiitsu/unproxy](https://github.com/yuiitsu/unproxy) chrome代理扩展
+- [**22**Star][14d] [Py] [penetrate2hack/itwsv](https://github.com/penetrate2hack/itwsv) ITWSV- Integrated Tool for Web Security Vulnerability
+- [**22**Star][3m] [C++] [legendl3n/smarthooker](https://github.com/legendl3n/smarthooker) The smartest hooking library.
- [**22**Star][1m] [C#] [lowleveldesign/concerto](https://github.com/lowleveldesign/concerto) A simple tool to create TLS certificates for development purposes.
-- [**22**Star][11d] [Shell] [mzfr/hackthebox-writeups](https://github.com/mzfr/HackTheBox-writeups) Writeups for all the HTB machines I have done
+- [**22**Star][3d] [Shell] [mzfr/hackthebox-writeups](https://github.com/mzfr/HackTheBox-writeups) Writeups for all the HTB machines I have done
+- [**22**Star][2m] [PHP] [marcocesarato/php-aio-security](https://github.com/marcocesarato/PHP-AIO-Security) The objective of this class is offer an automatic system of protection for developers's projects and simplify some security operations as the check of CSRF or XSS all in a simple class. Infact you could just call the main method to have better security yet without too much complicated operations.
- [**22**Star][3y] [C] [jianpingzju/hypro](https://github.com/jianpingzju/Hypro) VMI on BitVisor to detect hidden rootkits.
-- [**22**Star][3y] [Py] [cylance/idpanel](https://github.com/cylance/IDPanel) Identify botnet panels with Ensembled Decision Trees
- [**22**Star][3m] [Py] [avast/retdec-regression-tests-framework](https://github.com/avast/retdec-regression-tests-framework) A framework for writing and running regression tests for RetDec and related tools.
-- [**22**Star][4y] [TypeScript] [auth0-blog/ionic2-auth](https://github.com/auth0-blog/ionic2-auth)
+- [**22**Star][4y] [TS] [auth0-blog/ionic2-auth](https://github.com/auth0-blog/ionic2-auth)
- [**22**Star][2y] [PHP] [vysecurity/basicauth](https://github.com/vysecurity/basicAuth) Basic Auth Phish page
- [**22**Star][1y] [Go] [zxsecurity/glugger](https://github.com/zxsecurity/glugger) The fastest (and least featureful) DNS bruteforcer in the South
- [**22**Star][2y] [Py] [zigzag2050/mzphp2-deobfuscator](https://github.com/zigzag2050/mzphp2-deobfuscator) A de-obfuscate tool for code generated by mzphp2. 用于解混淆mzphp2加密的php文件的工具。
@@ -16092,17 +17359,16 @@ for CVE details based on the nmap report.
- [**22**Star][2y] [C#] [zerokilo/directedgraphswv](https://github.com/zerokilo/directedgraphswv) Directed Graph Editor and Library, also XEX decompiler 3
- [**22**Star][6y] [Py] [zachhuff386/dashcam](https://github.com/zachhuff386/dashcam) Raspberry Pi/BeagleBone Black dashcam
- [**22**Star][2y] [Assembly] [yifengyou/x86-assembly-language-from-real-mode-to-protection-mode](https://github.com/yifengyou/x86-assembly-language-from-real-mode-to-protection-mode) x86汇编语言 从实模式到保护模式
-- [**22**Star][2m] [xxpe3/clash_raspberrypi](https://github.com/xxpe3/clash_raspberrypi) Clash for ARMv6L
-- [**22**Star][3m] [C] [ww9210/kernel4.20_bpf_lpe](https://github.com/ww9210/kernel4.20_bpf_lpe) exploit code for a bpf heap overflow vulnerability
+- [**22**Star][4y] [Visual Basic .NET] [wpatoolkit/cap-converter](https://github.com/wpatoolkit/cap-converter) A small GUI tool for converting between cap and hccap files.
- [**22**Star][1y] [HTML] [websecurify/acme-no-login-ng](https://github.com/websecurify/acme-no-login-ng) Demonstrates a login bypass attack against a sample MongoDB/NodeJS/AngularJS application
- [**22**Star][1y] [Py] [webbreacher/emailwhois](https://github.com/webbreacher/emailwhois) Look up an email domain (@example.com), using Python, across all known domains.
- [**22**Star][3m] [wangray/windbg-for-gdb-users](https://github.com/wangray/windbg-for-gdb-users) "Pwntools does not support Windows. Use a real OS ;)" — Zach Riggle, 2015
- [**22**Star][5m] [Dockerfile] [vmayoral/basic_robot_cybersecurity](https://github.com/vmayoral/basic_robot_cybersecurity) An introductory series of cybersecurity for robots with a somewhat comprehensive step-by-step tutorials.
- [**22**Star][4y] [C] [uvbs/vmpdbg2](https://github.com/uvbs/vmpdbg2)
-- [**22**Star][6m] [Swift] [universonic/shadowsocks-macos](https://github.com/universonic/shadowsocks-macos) Shadowsocks Client for Apple macOS
- [**22**Star][1y] [Py] [tyranid/canape](https://github.com/tyranid/canape) canape:网络测试工具,专为测试二进制协议(也可用于测试其他任意协议),内置标准网络代理,可使用户捕获和修改服务器的流量
+- [**22**Star][4y] [PHP] [tux-00/network_miner](https://github.com/tux-00/network_miner) Network Miner generates a network map by sending SNMP requests (LLDP/CDP/EDP).
+- [**22**Star][3y] [Py] [tromey/gdb-helpers](https://github.com/tromey/gdb-helpers) GDB helper scripts
- [**22**Star][5y] [C#] [tophertimzen/shellcodetester](https://github.com/tophertimzen/shellcodetester) GUI Application in C# to run and disassemble shellcode
-- [**22**Star][2m] [Py] [theevilbit/exploits](https://github.com/theevilbit/exploits)
- [**22**Star][3y] [Py] [thedr1ver/wipster](https://github.com/thedr1ver/wipster) Web Interface Portal & Security Threat Engine for REMnux
- [**22**Star][1y] [CSS] [textileio/dapp-template](https://github.com/textileio/dapp-template) a basic template to build simple ipfs-based browser dapps
- [**22**Star][1y] [C#] [technikempire/windivertsharp](https://github.com/technikempire/windivertsharp) A minimal .NET binding over WinDivert
@@ -16115,25 +17381,31 @@ for CVE details based on the nmap report.
- [**22**Star][1y] [PHP] [svelizdonoso/asyrv](https://github.com/svelizdonoso/asyrv) ASYRV es una aplicación escrita en PHP/MySQL, con Servicios Web mal desarrollados(SOAP/REST/XML), esperando ayudar a los entusiastas de la seguridad informática a comprender esta tecnología tan utilizada hoy en día por las Organizaciones.
- [**22**Star][2y] [C] [superironbob/pdbwriter](https://github.com/superironbob/pdbwriter) A small tool to produce a dummy pdb for an executable with symbols at addresses from a file
- [**22**Star][4y] [sunkehappy/ios-reverse-engineering-tools-backup](https://github.com/sunkehappy/ios-reverse-engineering-tools-backup) Some guys find the old lsof could not be downloaded. But I have it and I want to share it.
-- [**22**Star][4m] [Py] [steved3/kit_hunter](https://github.com/steved3/kit_hunter) A basic phishing kit scanner for dedicated and semi-dedicated hosting
-- [**22**Star][28d] [Py] [stamparm/dnslog](https://github.com/stamparm/dnslog) Minimalistic DNS logging tool
+- [**22**Star][5m] [Py] [steved3/kit_hunter](https://github.com/steved3/kit_hunter) A basic phishing kit scanner for dedicated and semi-dedicated hosting
+- [**22**Star][3y] [C#] [stephenhaunts/safepad](https://github.com/stephenhaunts/safepad) SafePad : Encrypted Text Editor. This text editor uses very strong encryption to let you protect your secrets. Great for storing passwords, credit card details or any else that you want to keep safe.
+- [**22**Star][1m] [Py] [stamparm/dnslog](https://github.com/stamparm/dnslog) Minimalistic DNS logging tool
- [**22**Star][12m] [Py] [st2labs/sipi](https://github.com/st2labs/sipi) Simple IP Information Tools for Reputation Data Analysis
-- [**22**Star][26d] [Java] [spring-cloud/spring-cloud-scheduler](https://github.com/spring-cloud/spring-cloud-scheduler)
+- [**22**Star][29d] [Java] [spring-cloud/spring-cloud-scheduler](https://github.com/spring-cloud/spring-cloud-scheduler)
- [**22**Star][1y] [JS] [sipcapture/homer-ui](https://github.com/sipcapture/homer-ui) HOMER 5: Front-End (UI)
- [**22**Star][5y] [Py] [siliconblade/volatility](https://github.com/siliconblade/volatility) volatility
- [**22**Star][2y] [Java] [silentsignal/burp-uuid](https://github.com/silentsignal/burp-uuid) UUID issues for Burp Suite
- [**22**Star][7m] [Java] [silentsignal/burp-requests](https://github.com/silentsignal/burp-requests) Copy as requests plugin for Burp Suite
- [**22**Star][3y] [C++] [sensepost/misc-windows-hacking](https://github.com/sensepost/misc-windows-hacking) Miscellaneous projects related to attacking Windows.
- [**22**Star][1y] [Py] [sebastienbr/volatility](https://github.com/sebastienbr/volatility) Utilities for the memory forensics framework
-- [**22**Star][8d] [C#] [scenegate/yarhl](https://github.com/scenegate/yarhl) Yet Another ROM Hacking Library
+- [**22**Star][9d] [C#] [scenegate/yarhl](https://github.com/scenegate/yarhl) Yet Another ROM Hacking Library
- [**22**Star][2y] [Py] [saulty4ish/fuzzsafedog](https://github.com/saulty4ish/fuzzsafedog) 安全狗sql注入绕过
-- [**22**Star][2m] [Shell] [samuelhbne/vpn-launchpad](https://github.com/samuelhbne/vpn-launchpad) Builds Shadowsocks VPN server on AWS EC2 with QR code support. Works on Ubuntu, OSX and Debian variants including Raspbian.
- [**22**Star][3y] [C] [sagi/android_pocs](https://github.com/sagi/android_pocs) Android Vulnerability Reports and POCs.
+- [**22**Star][5d] [CSS] [saferwall/saferwall](https://github.com/saferwall/saferwall) A hackable malware sandbox for the 21st Century
- [**22**Star][1y] [Py] [russianotter/networking](https://github.com/russianotter/networking) All My Main Networking Programs
- [**22**Star][11m] [C++] [rolfrolles/miscellaneous](https://github.com/rolfrolles/miscellaneous) Small programs and scripts that do not require their own repositories
- [**22**Star][6y] [C++] [robotastic/smartnet-scanner](https://github.com/robotastic/smartnet-scanner) GNURadio based scanner for SmartNet II Digital radio systems.
- [**22**Star][1y] [Py] [reivhax/chimay-red-tiny](https://github.com/reivhax/chimay-red-tiny) This is a minified exploit for mikrotik routers. It does not require any aditional modules to run.
- [**22**Star][2y] [C] [rednixon/stegdetect](https://github.com/rednixon/stegdetect) Stegdetect is an automated tool for detecting steganographic content in images.
+- [**22**Star][2m] [Py] [rceninja/re-scripts](https://github.com/rceninja/re-scripts)
+ - [Hyperv-Scripts](https://github.com/rceninja/re-scripts/tree/master/scripts/Hyperv-Scripts)
+ - [IA32-MSR-Decoder](https://github.com/rceninja/re-scripts/tree/master/scripts/IA32-MSR-Decoder) an IDA script which helps you to find and decode all MSR codes inside binary files
+ - [IA32-VMX-Helper](https://github.com/rceninja/re-scripts/tree/master/scripts/IA32-VMX-Helper) an IDA script (Updated IA32 MSR Decoder) which helps you to find and decode all MSR/VMCS codes inside binary files
+- [**22**Star][2m] [Py] [random-robbie/bugbountydork](https://github.com/random-robbie/bugbountydork) Bug Bounty Dork
- [**22**Star][7y] [Ruby] [raesene/owasp_web_app_testing_cheatsheet_converter](https://github.com/raesene/owasp_web_app_testing_cheatsheet_converter) OWASP Web Application Testing Cheat Sheet converted to tool formats
- [**22**Star][4m] [Dockerfile] [raesene/dockerized-security-tools](https://github.com/raesene/dockerized-security-tools) Dockerfiles for security tools
- [**22**Star][2m] [C] [radare/libdemangle](https://github.com/radare/libdemangle) A simple library focusing on demangling symbols for different programing languages
@@ -16142,14 +17414,15 @@ for CVE details based on the nmap report.
- [**22**Star][3y] [PHP] [powerscript/getdatareport](https://github.com/powerscript/getdatareport) Get information client with getdatareport (Plugin)
- [**22**Star][2m] [JS] [polyverse/envisen](https://github.com/polyverse/envisen) ROP gadget finder and analysis in pure Javascript
- [**22**Star][3y] [HTML] [pdjstone/cloudpets-web-bluetooth](https://github.com/pdjstone/cloudpets-web-bluetooth) Demo of CloudPets toy functionality using Web Bluetooth
+- [**22**Star][8m] [Shell] [payloadsecurity/vxcommunity](https://github.com/payloadsecurity/vxcommunity) This repository contains free Hybrid Analysis contributions to the IT-Security community
- [**22**Star][1y] [C] [paul-tew/lifer](https://github.com/paul-tew/lifer) Windows link file forensic examiner
- [**22**Star][3y] [C++] [patois/idaplugins](https://github.com/patois/idaplugins) Random IDA scripts, plugins, example code (some of it may be old and not working anymore)
-- [**22**Star][2m] [Py] [paloaltonetworks/autofocus-lenz](https://github.com/paloaltonetworks/autofocus-lenz) A command line utility to aid in using autofocus for IR and research
-- [**22**Star][27d] [owasp/owasp-swag](https://github.com/owasp/owasp-swag) Swag for the OWASP projects and chapters
+- [**22**Star][29d] [owasp/owasp-swag](https://github.com/owasp/owasp-swag) Swag for the OWASP projects and chapters
- [**22**Star][3y] [Assembly] [osandamalith/anti-debug](https://github.com/osandamalith/anti-debug) Some of the Anti-Debugging Tricks
- [**22**Star][3y] [Py] [op7ic/shadowbroker-smb-scanner](https://github.com/op7ic/shadowbroker-smb-scanner) shadowbroker SMB exploit scanner. Scans for ETERNALSYNERGY ETERNALBLUE ETERNALROMANCE ETHERNALCHAMPION
- [**22**Star][4y] [Py] [onethawt/idapyscripts](https://github.com/onethawt/idapyscripts) IDAPython scripts
- [DataXrefCounter ](https://github.com/onethawt/idapyscripts/blob/master/dataxrefcounter.py) A small IDAPython plugin which enumerates all of the the x-references in a specific segment and counts the frequency of usage
+- [**22**Star][2d] [Py] [oasis-open/cti-stix-validator](https://github.com/oasis-open/cti-stix-validator) OASIS TC Open Repository: Validator for STIX 2.0 JSON normative requirements and best practices
- [**22**Star][1y] [Py] [nirizr/idasix](https://github.com/nirizr/idasix) IDAPython compatibility library. idasix aims to create a smooth ida development process and allow a single codebase to function with multiple IDA/IDAPython versions
- [**22**Star][5y] [Py] [nihilus/idascope](https://github.com/nihilus/idascope) An IDA Pro extension for easier (malware) reverse engineering(Bitbucket has newer version)
- [**22**Star][1y] [Py] [nicksanzotta/linkscrape](https://github.com/nicksanzotta/linkscrape) A LinkedIn user/company enumeration tool.
@@ -16157,14 +17430,16 @@ for CVE details based on the nmap report.
- [**22**Star][6y] [Py] [mothran/tlslite](https://github.com/mothran/tlslite) TLS Library in python
- [**22**Star][4y] [Py] [monnappa22/linux_mem_diff_tool](https://github.com/monnappa22/linux_mem_diff_tool) Script to perform Linux Memory Diff Analysis Using Volatility
- [**22**Star][7y] [Py] [milo2012/burpsql](https://github.com/milo2012/burpsql) Automating SQL injection using Burp Proxy Logs and SQLMap
-- [**22**Star][3y] [Py] [merkjinx/saddam-plus-plus](https://github.com/merkjinx/saddam-plus-plus) open source DDoS Amplification Tool with scanners.
+- [**22**Star][5d] [PHP] [middlewares/payload](https://github.com/middlewares/payload) PSR-15 middleware to parse the body of the request with support for json, csv and url-encode
- [**22**Star][3y] [Swift] [melvinsh/burptoggle](https://github.com/melvinsh/burptoggle) Status bar application for OS X to toggle the state of the system HTTP/HTTPS proxy.
- [**22**Star][1y] [C++] [meetpatty/basiliskii-vita](https://github.com/meetpatty/basiliskii-vita)
- [**22**Star][5m] [HTML] [mdn/pab](https://github.com/mdn/pab) MDN Web Docs Product Advisory Board
- [**22**Star][2y] [Py] [mdegrazia/onionpeeler](https://github.com/mdegrazia/onionpeeler) Python script to batch query the Tor Relays and Bridges
- [**22**Star][4y] [Ruby] [martinvigo/metasploit-framework](https://github.com/martinvigo/metasploit-framework) Metasploit Framework
+- [**22**Star][1y] [Py] [marcovaldong/isgan](https://github.com/marcovaldong/isgan) Implementation of "Invisible Steganography via Generative Adversarial Networks" (
- [**22**Star][1y] [C#] [malcomvetter/antidebug](https://github.com/malcomvetter/antidebug) PoC: Prevent a debugger from attaching to managed .NET processes via a watcher process code pattern.
-- [**22**Star][1y] [C] [lucascouto/krackattack-all-zero-tk-key](https://github.com/lucascouto/krackattack-all-zero-tk-key) This code has base on a code made by Mathy Vanhoef (
+- [**22**Star][2d] [Dockerfile] [mablanco/docker-osmedeus](https://github.com/mablanco/docker-osmedeus) Docker image for Osmedeus, a fully automated offensive security tool for reconnaissance and vulnerability scanning
+- [**22**Star][30d] [Py] [lylemi/saker](https://github.com/lylemi/saker) Flexible Penetrate Testing Auxiliary Suite
- [**22**Star][1y] [Py] [lorenzb/submarine_sends](https://github.com/lorenzb/submarine_sends) A proof-of-concept implementation of Submarine Sends for Ethereum
- [**22**Star][2y] [C] [lorecioni/imagesplicingdetection](https://github.com/lorecioni/imagesplicingdetection) Illuminant inconsistencies for image splicing detection in forensics
- [**22**Star][2m] [Py] [lockgit/py](https://github.com/lockgit/py) rsa,base64,ac,kmp,svm,knn,mitm,hash table...
@@ -16173,76 +17448,89 @@ for CVE details based on the nmap report.
- [**22**Star][2y] [Py] [leonardonve/dns2proxy_hsts](https://github.com/leonardonve/dns2proxy_hsts) DNS2Proxy offensive proxy version for HSTS
- [**22**Star][1y] [Py] [leoid/encoder](https://github.com/leoid/encoder) Alphanumeric Encoder
- [**22**Star][4y] [C#] [leechristensen/offensivepowershelltasking](https://github.com/leechristensen/offensivepowershelltasking) Run multiple PowerShell scripts concurrently in different app domains!
-- [**22**Star][2y] [TypeScript] [lavalamp-/ws-frontend-community](https://github.com/lavalamp-/ws-frontend-community) Web Sight Front-end Community Edition
+- [**22**Star][2y] [TS] [lavalamp-/ws-frontend-community](https://github.com/lavalamp-/ws-frontend-community) Web Sight Front-end Community Edition
+- [**22**Star][1y] [Shell] [lamableu/morfeus_gui](https://github.com/lamableu/morfeus_gui) control your moRFeus device from your Linux-computer or Raspberry Pi
- [**22**Star][1y] [Go] [lakevilladom/goskylar](https://github.com/lakevilladom/goskylar) 基于Golang开发的企业级外网端口资产扫描
- [**22**Star][2y] [lac-japan/owasp-mobile-top-10-2016](https://github.com/lac-japan/owasp-mobile-top-10-2016) OWASP Mobile Top 10 2016 日本語訳
- [**22**Star][8m] [Py] [laanwj/dwarf_to_c](https://github.com/laanwj/dwarf_to_c) Tool to recover C headers (types, function signatures) from DWARF debug data
- [**22**Star][3y] [Py] [kutio/liblll](https://github.com/kutio/liblll) python library to manage and reduce lattices
-- [**22**Star][6m] [Py] [keithjjones/malgazer](https://github.com/keithjjones/malgazer) A Python malware analysis library.
+- [**22**Star][6m] [Shell] [kitsun3sec/pentest-cheat-sheets](https://github.com/kitsun3sec/pentest-cheat-sheets) A collection of snippets of codes and commands to make your life easier!
- [**22**Star][4y] [Scala] [katjahahn/jwscan](https://github.com/katjahahn/jwscan) Scanner for Jar to EXE wrapper like Launch4j, Exe4j, JSmooth, Jar2Exe
- [**22**Star][4y] [PHP] [k1p0d/zeus_reports_len](https://github.com/k1p0d/zeus_reports_len) Remote timing attack exploit against most Zeus/Zbot variants including Citadel, Ice9, Zeus 2.3, KINS/ZeusVM etc..
-- [**22**Star][6y] [C] [jyang772/hideprocesshookmdl](https://github.com/jyang772/hideprocesshookmdl) A simple rootkit to hide a process
- [**22**Star][2y] [Perl] [jusafing/pnaf](https://github.com/jusafing/pnaf) Passive Network Audit Framework
-- [**22**Star][2m] [Py] [jplesperance/redis-sniffer](https://github.com/jplesperance/redis-sniffer) A Redis event sniffer and logging utility.
- [**22**Star][3y] [C] [josephjkong/designing-bsd-rootkits](https://github.com/josephjkong/designing-bsd-rootkits) Code from the book "Designing BSD Rootkits: An Introduction to Kernel Hacking"
- [**22**Star][3y] [Shell] [johntroony/luks-ops](https://github.com/johntroony/luks-ops) A bash script to automate the most basic usage of LUKS volumes in Linux VPS
- [**22**Star][1y] [Py] [jiangsir404/xss-sql-fuzz](https://github.com/jiangsir404/xss-sql-fuzz) burpsuite 插件对GP所有参数(过滤特殊参数)一键自动添加xss sql payload 进行fuzz
+- [**22**Star][5m] [Py] [jhermann/dependency-check-py](https://github.com/jhermann/dependency-check-py)
- [**22**Star][4y] [Go] [jgrahamc/torexit](https://github.com/jgrahamc/torexit) Small program to read lists of Tor exit nodes and draw picture showing when they join/leave list
- [**22**Star][6y] [C++] [jbremer/pyn](https://github.com/jbremer/pyn) Awesome Python bindings for Pintool
- [**22**Star][1y] [Shell] [jas502n/st2-046-poc](https://github.com/jas502n/st2-046-poc) st2-046-poc CVE-2017-5638
- [**22**Star][5y] [C++] [jandre/brosquery](https://github.com/jandre/brosquery) module for osquery to load Bro logs into tables
-- [**22**Star][1y] [Py] [j40903272/malconv-keras](https://github.com/j40903272/malconv-keras) This is the implementation of MalConv proposed in [Malware Detection by Eating a Whole EXE](
- [**22**Star][6m] [JS] [inverseintegral/ctf_writeups](https://github.com/inverseintegral/ctf_writeups)
- [**22**Star][2y] [Py] [invasi0nz/lo0sr](https://github.com/invasi0nz/lo0sr) Lo0sR is a simple python Keylogger with many functions.
- [**22**Star][2y] [Go] [integrii/wormhole](https://github.com/integrii/wormhole)
-- [**22**Star][15d] [Py] [ins1gn1a/netntlm-hashcat](https://github.com/ins1gn1a/netntlm-hashcat) Converts John The Ripper/Cain format hashes (singular, or in bulk) to HashCat compatible hash format.
+- [**22**Star][17d] [Py] [ins1gn1a/netntlm-hashcat](https://github.com/ins1gn1a/netntlm-hashcat) Converts John The Ripper/Cain format hashes (singular, or in bulk) to HashCat compatible hash format.
- [**22**Star][4y] [Py] [infectedpacket/vxvault](https://github.com/infectedpacket/vxvault) Malware management program and tools
- [**22**Star][3y] [C] [iaik/prefetch](https://github.com/iaik/prefetch) This repository contains several tools to perform Prefetch Side-Channel Attacks
- [**22**Star][3y] [C] [iagox86/ctfworkshop-2017](https://github.com/iagox86/ctfworkshop-2017)
- [**22**Star][11m] [Py] [hypnoze57/fshell](https://github.com/hypnoze57/fshell) My python3 implementation of a Forward Shell
-- [**22**Star][11m] [C] [hfiref0x/bsodscreen](https://github.com/hfiref0x/bsodscreen) BSOD Screensaver
+- [**22**Star][11m] [Py] [howmp/comfinder](https://github.com/howmp/comfinder) IDA plugin for COM
+- [**22**Star][2y] [Py] [hongfeioo/userdevicetracker](https://github.com/hongfeioo/userdevicetracker) 快速定位一个IP或MAC在你的网络中的位置,是网络工程师提高工作效率的利器,也可以为CMDB提供基础网络数据。
+- [**22**Star][3y] [Py] [hoainam1989/training-application-security](https://github.com/hoainam1989/training-application-security) This repository for training application security.
+- [**22**Star][12m] [C] [hfiref0x/bsodscreen](https://github.com/hfiref0x/bsodscreen) BSOD Screensaver
- [**22**Star][3y] [C] [hexhive/epoxy](https://github.com/hexhive/epoxy) Root Repo for the EPOXY tool that applies Privilege Overlays on bare-metal systems
+- [**22**Star][2y] [C] [herwonowr/catchme](https://github.com/herwonowr/catchme) CatchME - WiFi Fun Box "Having Fun with ESP8266"
+- [**22**Star][1y] [C] [hackerwarehouse/hw-dc26-badge](https://github.com/hackerwarehouse/hw-dc26-badge) Hacker Warehouse electronic badge that was made for DEF CON 26
- [**22**Star][2y] [C] [h3xx/jphs](https://github.com/h3xx/jphs) jphide & seek steganography tools
- [**22**Star][3y] [Py] [guelfoweb/fbid](https://github.com/guelfoweb/fbid) Show info about the author by facebook photo url
- [**22**Star][4m] [Java] [guardianproject/jtorctl](https://github.com/guardianproject/jtorctl) deprecated fork of Java Tor Control Library
- [**22**Star][3y] [JS] [gregkcarson/googleappscriptse](https://github.com/gregkcarson/googleappscriptse) Social Engineering Abusing Google App Scripts
- [**22**Star][2y] [C++] [grcasanova/supervirus](https://github.com/grcasanova/supervirus) Project aimed at creating a malware able to evolve and adapt to the various host machines through metamorphic modifications, spontaneous mutations, code imitation and DNA programming to enable/disable functionalities
- [**22**Star][2y] [PHP] [gr33ntii/malware-collection](https://github.com/gr33ntii/malware-collection)
+- [**22**Star][1y] [Go] [ginuerzh/gosocks5](https://github.com/ginuerzh/gosocks5) golang and SOCKS5
- [**22**Star][8m] [BitBake] [ghsec/bbprofiles](https://github.com/ghsec/bbprofiles) Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that improve an active and passive scanner by yourself. This extension requires Burp Suite Pro.
-- [**22**Star][4y] [Objective-C] [gdssecurity/osx-continuity-dialer-poc](https://github.com/gdssecurity/osx-continuity-dialer-poc)
+- [**22**Star][4y] [ObjC] [gdssecurity/osx-continuity-dialer-poc](https://github.com/gdssecurity/osx-continuity-dialer-poc)
- [**22**Star][8y] [Java] [frohoff/jdeserialize](https://github.com/frohoff/jdeserialize) From
-- [**22**Star][4m] [Py] [fmagin/angr-cli](https://github.com/fmagin/angr-cli) Repo for various angr ipython features to give it more of a cli feeling
+- [**22**Star][3y] [Py] [freenas/middleware](https://github.com/freenas/middleware) New FreeNAS 10 Middleware
+- [**22**Star][4d] [Py] [fmagin/angr-cli](https://github.com/fmagin/angr-cli) Repo for various angr ipython features to give it more of a cli feeling
- [**22**Star][3y] [Py] [firmadyne/extractor](https://github.com/firmadyne/extractor) Kernel and filesystem extractor
- [**22**Star][6y] [Shell] [find-evil/msf-install-script-os-x-lion-mountain-lion](https://github.com/find-evil/msf-install-script-os-x-lion-mountain-lion) Script to automate installation of Metasploit Framework on OS X Lion & Mountain Lion
- [**22**Star][2y] [JS] [feedhenry/mobile-security](https://github.com/feedhenry/mobile-security) FeedHenry Mobile Security
- [**22**Star][1m] [JS] [fcavallarin/htcrawl](https://github.com/fcavallarin/htcrawl) Htcrawl is nodejs module for the recursive crawling of single page applications (SPA) using javascript
- [**22**Star][1y] [HTML] [fastly/waf_testbed](https://github.com/fastly/waf_testbed) Chef Cookbook which provisions apache+mod_security+owasp-crs
-- [**22**Star][1y] [Py] [farisv/appledos](https://github.com/farisv/appledos) Messing Apple devices on the network with CVE-2018-4407 (heap overflow in bad packet handling)
+- [**22**Star][9m] [C++] [fare9/pba_analysis_tools](https://github.com/fare9/pba_analysis_tools) My own versions from the programs of the book "Practical Binary Analysis"
+- [**22**Star][9m] [Py] [f0re1gners/ejudge](https://github.com/f0re1gners/ejudge) EOJ 评测核心 沙箱接口
- [**22**Star][7m] [f-secure/elevation-of-privacy](https://github.com/f-secure/elevation-of-privacy) Privacy Cards for Software Developers
-- [**22**Star][6m] [Java] [ettic-team/endpointfinder-burp](https://github.com/ettic-team/endpointfinder-burp)
-- [**22**Star][1m] [Py] [ekiojp/dfex](https://github.com/ekiojp/dfex) DNS File EXfiltration
+- [**22**Star][7m] [Java] [ettic-team/endpointfinder-burp](https://github.com/ettic-team/endpointfinder-burp)
+- [**22**Star][3y] [Java] [ernw/burpsuite-extensions](https://github.com/ernw/burpsuite-extensions) A collection of Burp Suite extensions
+- [**22**Star][6m] [JS] [entropystring/javascript](https://github.com/entropystring/javascript) EntropyString for JavaScript
+- [**22**Star][5d] [Py] [endgameinc/malware_evasion_competition](https://github.com/endgameinc/malware_evasion_competition)
+- [**22**Star][3y] [PHP] [emanuil/php-reaper](https://github.com/emanuil/php-reaper) PHP tool to scan ADOdb code for SQL Injections
+- [**22**Star][2m] [Py] [ekiojp/dfex](https://github.com/ekiojp/dfex) DNS File EXfiltration
- [**22**Star][3y] [Py] [ehabhussein/ollydbg-binary-execution-visualizer](https://github.com/ehabhussein/ollydbg-binary-execution-visualizer) reverse engineering, visual binary analysis
-- [**22**Star][10m] [dfir-it/supreme-backdoor-factory](https://github.com/dfir-it/supreme-backdoor-factory) This repository contains additional files mentioned in the blog post
+- [**22**Star][2y] [C++] [dragonquesthero/kernel-force-delete](https://github.com/dragonquesthero/kernel-force-delete) force delete runing .exe application file.or delete any locked file
+- [**22**Star][1y] [Py] [digiampietro/adbtools2](https://github.com/digiampietro/adbtools2) Tools for hacking ADB Epicentro routers, including firmware modification and VOIP password recovery.
- [**22**Star][1y] [Ruby] [defcon-russia/metasploit-framework](https://github.com/defcon-russia/metasploit-framework) Metasploit Framework
-- [**22**Star][3y] [PowerShell] [davehardy20/invoke-winrmattack](https://github.com/davehardy20/invoke-winrmattack) PowerShell cmdlet to push PowerShell attack modules to a remote system via PSRemoting and if required enable WinRM remotely.
-- [**22**Star][11m] [dariubs/awesome-proxy](https://github.com/dariubs/awesome-proxy) A collaborative list of awesome proxy servers and resources. Feel free to contribute!
+- [**22**Star][3y] [PS] [davehardy20/invoke-winrmattack](https://github.com/davehardy20/invoke-winrmattack) PowerShell cmdlet to push PowerShell attack modules to a remote system via PSRemoting and if required enable WinRM remotely.
- [**22**Star][2y] [Py] [dariosharp/szpy](https://github.com/dariosharp/szpy) Z3 Symbolic Execution python
- [**22**Star][4y] [Shell] [d3f4ultt/princesofpaypal](https://github.com/d3f4ultt/princesofpaypal) A security write-up about the Paypal API & data leakage
- [**22**Star][3y] [C++] [d35m0nd142/kadabra](https://github.com/d35m0nd142/kadabra) [DEPRECATED] Kadabra is my automatic LFI Exploiter and Scanner, written in C++ and a couple extern module in Python.
- [**22**Star][3y] [Py] [cujanovic/cve-2016-8610-poc](https://github.com/cujanovic/cve-2016-8610-poc) CVE-2016-8610 (SSL Death Alert) PoC
- [**22**Star][3y] [Scala] [criteo/vizsql](https://github.com/criteo/vizsql) Scala and SQL happy together.
-- [**22**Star][20d] [Scala] [criteo/slab](https://github.com/criteo/slab) An extensible Scala framework for creating monitoring dashboards.
+- [**22**Star][22d] [Scala] [criteo/slab](https://github.com/criteo/slab) An extensible Scala framework for creating monitoring dashboards.
+- [**22**Star][6m] [Py] [conmarap/website-fingerprinting](https://github.com/conmarap/website-fingerprinting) Deanonymizing Tor or VPN users with website fingerprinting and machine learning.
- [**22**Star][11m] [Shell] [cogset/shadowsocks](https://github.com/cogset/shadowsocks) Shadowsocks in Docker
- [**22**Star][2y] [C#] [cobbr/insecurepowershellhost](https://github.com/cobbr/insecurepowershellhost) InsecurePowerShellHost is a .NET Core host process for InsecurePowerShell, a version of PowerShell Core v6.0.0 with key security features removed.
- [**22**Star][5y] [C] [citypw/suterusu](https://github.com/citypw/suterusu) An LKM rootkit targeting Linux 2.6/3.x on x86(_64), and ARM
-- [**22**Star][3y] [Py] [chengable/safe_code](https://github.com/chengable/safe_code) absolute safe code
- [**22**Star][3y] [C] [cert-polska/nymaim-tools](https://github.com/cert-polska/nymaim-tools)
- [**22**Star][2y] [C] [celesteblue-dev/ps4-pkg2usb](https://github.com/celesteblue-dev/ps4-pkg2usb) PS4 payload (based on Vortex’s dumper) to dump and run fake PKGs on USB.
- [**22**Star][3y] [Java] [cblichmann/idajava](https://github.com/cblichmann/idajava) Java integration for Hex-Rays IDA Pro
- [**22**Star][5y] [C++] [casualx/libex](https://github.com/casualx/libex) C++ Helper Library for myself
+- [**22**Star][10m] [XSLT] [capt-meelo/massmap](https://github.com/capt-meelo/massmap) Combined port scanning w/ Masscan's speed & Nmap's scanning features.
- [**22**Star][4y] [Py] [camoufl4g3/sqli-payload-fuzz3r](https://github.com/camoufl4g3/sqli-payload-fuzz3r)
- [**22**Star][3y] [C++] [bronzeme/ssdt_hook_x64](https://github.com/bronzeme/ssdt_hook_x64)
- [**22**Star][6y] [C#] [brandonprry/vulnerable_xxe](https://github.com/brandonprry/vulnerable_xxe) A C# web handler that is vulnerable to XXE with PoC. This is to serve as an example of what vulnerable C# code looks like.
+- [**22**Star][3m] [CSS] [braindead-sec/rogue-captive](https://github.com/braindead-sec/rogue-captive) Rogue Captive Portal for Raspberry Pi
- [**22**Star][11m] [C#] [borjamerino/dns-polygraph](https://github.com/borjamerino/dns-polygraph) Tool designed to study the answers of your DNS resolver and make easier the identification of techniques such as DNS Hijacking/Poisoning
- [**22**Star][1y] [Py] [blazeinfosec/cve-2017-10366_peoplesoft](https://github.com/blazeinfosec/cve-2017-10366_peoplesoft) CVE-2017-10366: Oracle PeopleSoft 8.54, 8.55, 8.56 Java deserialization exploit
- [**22**Star][2y] [C] [billy-ellis/arm-gadget-finder](https://github.com/billy-ellis/arm-gadget-finder) Work-in-progress open source ROP gadget finder for 32-bit ARM binaries
@@ -16250,114 +17538,137 @@ for CVE details based on the nmap report.
- [**22**Star][2y] [HTML] [beardog108/snow10](https://github.com/beardog108/snow10) Use whitespace and unicode chars for steganography
- [**22**Star][4m] [C++] [bb107/winsudo](https://github.com/bb107/winsudo) Execute commands as local system.
- [**22**Star][2y] [Py] [battelle/reductio](https://github.com/battelle/reductio) An exploration of code homeomorphism
+- [**22**Star][1y] [asuri-team/dproxy](https://github.com/asuri-team/dproxy) Massive Distributed Dynamic Proxy
- [**22**Star][1y] [C#] [arkhist/hacklinks](https://github.com/arkhist/hacklinks) Hacklinks is an open source online game about hacking.
- [**22**Star][2y] [Py] [argilo/nrsc-5](https://github.com/argilo/nrsc-5) Prototype implementation of HD Radio (NRSC-5). Superseded by
- [**22**Star][3y] [C++] [apriorit/simple-antirootkit-sst-unhooker](https://github.com/apriorit/simple-antirootkit-sst-unhooker) This is a demo project to illustrate the way to verify and restore original SST in case of some malware hooks
- [**22**Star][3y] [Py] [ansible/ansible-blog-examples](https://github.com/ansible/ansible-blog-examples) Example playbooks from posts on the Ansible blog (
-- [**22**Star][17d] [Rust] [aloxaf/rbkcrack](https://github.com/aloxaf/rbkcrack) Crack legacy zip encryption with Biham and Kocher's known plaintext attack. 使用明文攻击破解加密的 zip 文件
+- [**22**Star][19d] [Rust] [aloxaf/rbkcrack](https://github.com/aloxaf/rbkcrack) Crack legacy zip encryption with Biham and Kocher's known plaintext attack. 使用明文攻击破解加密的 zip 文件
- [**22**Star][3y] [Py] [almco/panorama](https://github.com/almco/panorama) Fast incident overview
-- [**22**Star][1y] [Objective-C] [alexmx/insider](https://github.com/alexmx/insider) Insider sets a backdoor into your app for testing tools like Appium, Calabash, Frank, etc.
+- [**22**Star][1y] [ObjC] [alexmx/insider](https://github.com/alexmx/insider) Insider sets a backdoor into your app for testing tools like Appium, Calabash, Frank, etc.
- [**22**Star][2y] [Shell] [aflgo/oss-fuzz](https://github.com/aflgo/oss-fuzz) OSS-Fuzz - integrated with AFLGo for Patch Testing
+- [**22**Star][2y] [Py] [abatchy17/rop-emporium](https://github.com/abatchy17/rop-emporium) Solutions for ROP Emporium challenges (
- [**22**Star][6y] [Java] [aatxe/openmaple](https://github.com/aatxe/openmaple) A fast MapleStory emulator aiming to bring openness back to the private server community.
-- [**22**Star][3y] [C] [93aef0ce4dd141ece6f5/packer](https://github.com/93aef0ce4dd141ece6f5/packer) PoC executable packer using resources
- [**22**Star][3y] [5z1punch/my_php_kernel_handbook_for_pwn](https://github.com/5z1punch/my_php_kernel_handbook_for_pwn) 这一切的开始,都要从我爷爷在悬崖下捡到一本白帽子讲web安全说起
- [**22**Star][2y] [Py] [0xsearches/sandcastle](https://github.com/0xsearches/sandcastle)
- [**22**Star][3y] [PHP] [0x584a/fuzzxssphp](https://github.com/0x584a/fuzzxssphp) PHP版本的反射型xss扫描,支持GET,POST
- [**22**Star][4y] [LaNMaSteR53/honeybadger](https://bitbucket.org/lanmaster53/honeybadger)
-- [**21**Star][19d] [Py] [k8gege/pyladon](https://github.com/k8gege/pyladon) Ladon NetScan For Python (PortScan/OnlinePC/VulScan/Struts2/Weblogic/Exploit/GetShell/MS17010)
+- [**21**Star][2y] [Py] [sorz/ssmanager](https://github.com/sorz/ssmanager) A python module managing large amount of running Shadowsocks server instances.
+- [**21**Star][1y] [Dockerfile] [alibo/goquiet-shadowsocks-docker](https://github.com/alibo/goquiet-shadowsocks-docker) A Docker image for Shadowsocks over GoQuiet
+- [**21**Star][6m] [Py] [coallaoh/whitenblackbox](https://github.com/coallaoh/whitenblackbox) Towards Reverse-Engineering Black-Box Neural Networks, ICLR'18
+- [**21**Star][] [Py] [technowlogy-pushpender/technowlogger](https://github.com/technowlogy-pushpender/technowlogger) TechNowLogger is Windows/Linux Keylogger Generator which sends key-logs via email with other juicy target info
+- [**21**Star][1y] [Py] [ins1gn1a/pwdlyser-cli](https://github.com/ins1gn1a/pwdlyser-cli) Python-based CLI Password Analyser (Reporting Tool)
+- [**21**Star][2y] [JS] [shangxinbo/cardinal](https://github.com/shangxinbo/cardinal) A socks and http proxy by nodejs for you to over GWF
- [**21**Star][1y] [Java] [wrbug/charles-crack](https://github.com/wrbug/charles-crack) charles破解
- [**21**Star][6y] [Py] [ganapati/spaf](https://github.com/ganapati/spaf) Static Php Analysis and Fuzzer
- [**21**Star][4y] [Py] [jofpin/compaxss](https://github.com/jofpin/compaxss) Bypass XSS Reflected Cross-site scripting
- [**21**Star][5y] [C++] [sweetsoftware/ftpkeylogger](https://github.com/sweetsoftware/ftpkeylogger) Simple keylogger for Windows with HTML output and FTP upload.
+- [**21**Star][4y] [Py] [juliocesarfort/webshotter](https://github.com/juliocesarfort/webshotter) A multi-threaded Python tool to generate screenshot of websites
+- [**21**Star][2y] [0x90/firmware-arsenal](https://github.com/0x90/firmware-arsenal) Tools and scripts for firmware reverse engeneering
+- [**21**Star][3y] [Py] [mthbernardes/demoniware](https://github.com/mthbernardes/demoniware) Telegram BotNet
- [**21**Star][8y] [Java] [spiderlabs/cerealbox](https://github.com/spiderlabs/cerealbox) Arduino-based network monitor
- [**21**Star][3y] [Py] [f-secure/headless-scanner-driver](https://github.com/f-secure/headless-scanner-driver) A Burp Suite extension that starts scanning on requests it sees, and dumps results on standard output
-- [**21**Star][17d] [CSS] [mitre/mitre.github.io](https://github.com/mitre/mitre.github.io) Open Source software from The MITRE Corporation
+- [**21**Star][19d] [CSS] [mitre/mitre.github.io](https://github.com/mitre/mitre.github.io) Open Source software from The MITRE Corporation
- [**21**Star][2y] [C] [reswitched/rcm-modchips](https://github.com/reswitched/rcm-modchips) Collection of "modchip" designs for launching payloads via the Tegra RCM bug (CVE-2018-6242)
+- [**21**Star][2y] [C#] [functionclub/localproxy](https://github.com/functionclub/localproxy) 一键更改系统本地IE代理的小工具
- [**21**Star][1y] [C++] [awnumar/nixbot](https://github.com/awnumar/nixbot) Lightweight TCP botnet coded in C++
- [**21**Star][1y] [JS] [shadowsocks/shadowsocks-hub-api](https://github.com/shadowsocks/shadowsocks-hub-api) A set of open and standard restful APIs for managing shadowsocks users, servers, nodes, products, accounts, and traffic.
-- [**21**Star][22d] [bkth/optimize_rce_chakra](https://github.com/bkth/optimize_rce_chakra) keynote I gave at GreHack 2019
+- [**21**Star][24d] [bkth/optimize_rce_chakra](https://github.com/bkth/optimize_rce_chakra) keynote I gave at GreHack 2019
+- [**21**Star][30d] [Shell] [gwolf3/visshous](https://github.com/gwolf3/visshous)
- [**21**Star][1y] [Java] [netindev/allatori-v3.0](https://github.com/netindev/allatori-v3.0) Allatori v3.0 source code.
-- [**21**Star][28d] [Py] [verabe/veriman](https://github.com/verabe/veriman) Analysis tool for Solidity smart contracts. Prototype.
-- [**21**Star][1m] [Py] [5h4d0wb0y/socialbrute](https://github.com/5h4d0wb0y/socialbrute) It attempts to crack social networks using a brute force dictionary attack.
+- [**21**Star][30d] [Py] [verabe/veriman](https://github.com/verabe/veriman) Analysis tool for Solidity smart contracts. Prototype.
- [**21**Star][1y] [unexpectedby/sqli-dork-repository](https://github.com/unexpectedby/sqli-dork-repository) Dorks Hacking Database for educational proposal
-- [**21**Star][1m] [Go] [tismayil/rsdl](https://github.com/tismayil/rsdl) Subdomain Scan With Ping Method.
+- [**21**Star][3d] [CSS] [cacti/documentation](https://github.com/cacti/documentation) Documentation for Cacti, Spine, RRDProxy and more
- [**21**Star][7y] [Shell] [tjetzinger/cloudcrackinstaller](https://github.com/tjetzinger/cloudcrackinstaller) A script to install Crunch, Pyrit and Cowpatty on a running Amazon EC2 Cluster GPU Instance to crack WPA and WPA2 keys.
-- [**21**Star][4m] [PowerShell] [nyan-x-cat/malwareshell](https://github.com/nyan-x-cat/malwareshell) Create a powershell malware loader to run C#.cs code on runtime
-- [**21**Star][2m] [Py] [adriangranados/wifiexplorer-sensor](https://github.com/adriangranados/wifiexplorer-sensor) Enables remote scanning in WiFi Explorer Pro
-- [**21**Star][11d] [TypeScript] [paulmillr/noble-ed25519](https://github.com/paulmillr/noble-ed25519) Noble ed25519. High-security, easily auditable, 0-dep, 1-file pubkey, scalarmult & EDDSA
-- [**21**Star][26d] [Py] [hash3lizer/wifijammer](https://github.com/hash3lizer/wifijammer) Wireless Jammer to Disconnect Nearby Access-Points and Stations.
+- [**21**Star][3y] [Py] [initbrain/python-wi-fi-positioning-system](https://github.com/initbrain/python-wi-fi-positioning-system) Python Wi-Fi Positioning System - Wi-Fi geolocation script using the Google Geolocation API
+- [**21**Star][3m] [yeahhub/kali-linux-ebooks](https://github.com/yeahhub/kali-linux-ebooks) Top 20 Kali Linux Related E-books (Free Download)
+- [**21**Star][4m] [PS] [nyan-x-cat/malwareshell](https://github.com/nyan-x-cat/malwareshell) Create a powershell malware loader to run C#.cs code on runtime
+- [**21**Star][13d] [TS] [paulmillr/noble-ed25519](https://github.com/paulmillr/noble-ed25519) Noble ed25519. High-security, easily auditable, 0-dep, 1-file pubkey, scalarmult & EDDSA
+- [**21**Star][28d] [Py] [hash3lizer/wifijammer](https://github.com/hash3lizer/wifijammer) Wireless Jammer to Disconnect Nearby Access-Points and Stations.
+- [**21**Star][17d] [Py] [z3pp/zfuzz](https://github.com/z3pp/zfuzz) Simple python web fuzzer
- [**21**Star][4y] [Ruby] [vallejocc/hacking-busybox-control](https://github.com/vallejocc/Hacking-Busybox-Control) Some metasploit scripts to help to control busybox based embedded devices
- [**21**Star][3y] [C] [newbee119/iot_bot](https://github.com/NewBee119/IoT_bot) A sample IoT bot origin from Mirai
-- [**21**Star][2m] [PHP] [marcocesarato/php-aio-security](https://github.com/marcocesarato/PHP-AIO-Security) The objective of this class is offer an automatic system of protection for developers's projects and simplify some security operations as the check of CSRF or XSS all in a simple class. Infact you could just call the main method to have better security yet without too much complicated operations.
+- [**21**Star][3y] [Py] [cylance/idpanel](https://github.com/cylance/IDPanel) Identify botnet panels with Ensembled Decision Trees
- [**21**Star][1y] [JS] [mindpointgroup/stig-cli](https://github.com/MindPointGroup/stig-cli) A CLI for perusing DISA STIG content Mac, Linux, and Windows Compatible
- [**21**Star][4y] [Rust] [auth0-blog/rust-api-example](https://github.com/auth0-blog/rust-api-example) Example of a RESTful API in Rust
- [**21**Star][2y] [Py] [chiefychief/router_pwner](https://github.com/ChiefyChief/router_pwner) Dynamically id routers and attempt to compromise
- [**21**Star][5y] [C++] [r-lyeh-archived/moon9](https://github.com/r-lyeh-archived/moon9) a game framework. warning: wip, dev, unstable, radiation hazard, defcon 3
- [**21**Star][1m] [Py] [csirtgadgets/csirtg-smrt-v1](https://github.com/csirtgadgets/csirtg-smrt-v1) the fastest way to consume threat intelligence.
-- [**21**Star][13d] [Shell] [cryptomator/cryptomator-mac](https://github.com/cryptomator/cryptomator-mac) Cryptomator .dmg image for Mac
+- [**21**Star][15d] [Shell] [cryptomator/cryptomator-mac](https://github.com/cryptomator/cryptomator-mac) Cryptomator .dmg image for Mac
- [**21**Star][5y] [C] [zliu-fd/windivertproxy](https://github.com/zliu-fd/windivertproxy) Proxy any program via WinDivert to a specific server
- [**21**Star][3y] [Java] [zhaozepeng/safewebview](https://github.com/zhaozepeng/safewebview) 修复 4.2 之下 JS 漏洞的 WebView
+- [**21**Star][1y] [zecopro/wpa-passwords](https://github.com/zecopro/wpa-passwords) the best and small passwords lists to crack handshake wpa-wpa2
- [**21**Star][9y] [C] [zapotek/cdpsnarf](https://github.com/zapotek/cdpsnarf) CDPSnarf is a network sniffer exclusively written to extract information from CDP (Cisco Discovery Protocol) packets.
- [**21**Star][3y] [Py] [xorpd/fcatalog_client](https://github.com/xorpd/fcatalog_client) fcatalog idapython client
- [**21**Star][2y] [Vue] [xinali/penework](https://github.com/xinali/penework) Penetration Test Framwork
- [**21**Star][4y] [C++] [xbased/xhook](https://github.com/xbased/xhook) Hook Windows API. supports Win7/8/10 x86 and x64 platform.
- [**21**Star][2y] [xazlsec/ctf-project-lists](https://github.com/xazlsec/ctf-project-lists) 由信安之路团队成员收集整理的与 CTF 相关的 Github 项目地址,如果你由更好的项目请将项目地址发送到:myh0st@foxmail.com
-- [**21**Star][9m] [PowerShell] [wurstcommander/win10appremove](https://github.com/wurstcommander/win10appremove) A Powershell-Script for removing / debloating Windows 10 apps. Mandatory apps which can't be uninstalled via start menu will be removed too.
-- [**21**Star][4y] [Visual Basic] [wpatoolkit/cap-converter](https://github.com/wpatoolkit/cap-converter) A small GUI tool for converting between cap and hccap files.
+- [**21**Star][9m] [PS] [wurstcommander/win10appremove](https://github.com/wurstcommander/win10appremove) A Powershell-Script for removing / debloating Windows 10 apps. Mandatory apps which can't be uninstalled via start menu will be removed too.
- [**21**Star][2y] [Shell] [wolfvan/some-samples](https://github.com/wolfvan/some-samples) Malware captured with honeypots
- [**21**Star][3y] [CSS] [wizardforcel/kali-linux-cookbook-zh](https://github.com/wizardforcel/kali-linux-cookbook-zh)
- [**21**Star][5y] [Py] [windbgscripts/pykd](https://github.com/windbgscripts/pykd) This contains Helpful PYKD (Python Extension for Windbg) scripts
- [**21**Star][4y] [C] [warcraft23/virus-and-windows-api-programing](https://github.com/warcraft23/virus-and-windows-api-programing) 中科大13级计算机病毒分析与WindowsAPI编程 授课老师:郭大侠
- [**21**Star][1y] [Py] [v-p-b/similarninja](https://github.com/v-p-b/similarninja) similarninja: Binary Ninja插件, 用于二进制文件的控制流程图(CFG)匹配
+- [**21**Star][9d] [Py] [unstabl3/recce](https://github.com/unstabl3/recce) Domain availbility checker
- [**21**Star][2y] [Py] [unamer/ctfhelper](https://github.com/unamer/ctfhelper) A simple Burp extension for scanning stuffs in CTF
- [**21**Star][1y] [Py] [ucnt/aws-s3-bruteforce](https://github.com/ucnt/aws-s3-bruteforce) (DEPRECATED) Amazon AWS S3 Bucket Name Bruteforce
+- [**21**Star][1y] [Go] [txn2/n2proxy](https://github.com/txn2/n2proxy) Contraband filtering reverse proxy for plain http and SSL.
- [**21**Star][1y] [CSS] [tuhinshubhra/uboat-panel](https://github.com/tuhinshubhra/uboat-panel) Panel for the HTTP botnet UBoat -
- [**21**Star][2y] [troydo42/awesome-pen-test](https://github.com/troydo42/awesome-pen-test) Experiment with penetration testing Guides and Tools for WordPress, iOS, MacOS, Wifi and Car
- [**21**Star][3y] [Py] [threatstream/symhash](https://github.com/threatstream/symhash)
+- [**21**Star][2y] [C#] [thomdixon/saltwatertaffy](https://github.com/thomdixon/saltwatertaffy) An nmap wrapper library for .NET
- [**21**Star][3y] [Py] [thomaskeck/pyshellcode](https://github.com/thomaskeck/pyshellcode) Execute ShellCode / "Inline-Assembler" in Python
- [**21**Star][1y] [Py] [the-c0d3r/pynmap](https://github.com/the-c0d3r/pynmap) A serious attempt to implement multi-threading to nmap module, which would result in faster scanning speed. I know that one can write NSE scripts for multi-threaded scanning with it, but I wanted to try it on python.
+- [**21**Star][1m] [Py] [teamseri0us/pocs](https://github.com/teamseri0us/pocs)
- [**21**Star][6y] [Py] [syworks/wifi-harvester](https://github.com/syworks/wifi-harvester) For collecting probed SSID name by wireless devices, Access point detail and connected clients.
- [**21**Star][1y] [Py] [syno3/babymux](https://github.com/syno3/babymux) pentesting tool for noob hackers.Runs on linux and termux
- [**21**Star][2y] [Py] [swisskyrepo/whid_toolkit](https://github.com/swisskyrepo/whid_toolkit) Simple script for the WHID injector - a rubberducky wifi
-- [**21**Star][15d] [HTML] [sushi2k/owasp-mstg](https://github.com/sushi2k/owasp-mstg) The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security testing and reverse engineering.
+- [**21**Star][2d] [HTML] [sushi2k/owasp-mstg](https://github.com/sushi2k/owasp-mstg) The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security testing and reverse engineering.
- [**21**Star][5y] [stolas/windbg-darktheme](https://github.com/stolas/windbg-darktheme) A dark theme for WinDBG.
+- [**21**Star][26d] [Shell] [stevemcgrath/docker-nessus_scanner](https://github.com/stevemcgrath/docker-nessus_scanner) Nessus Scanner Docker Image
+- [**21**Star][29d] [status-im/awesome-secure-messaging](https://github.com/status-im/awesome-secure-messaging) A curated collection of links for secure messaging.
+- [**21**Star][4m] [C] [sslab-gatech/fuzzification](https://github.com/sslab-gatech/fuzzification) We hinder fuzzing
- [**21**Star][10y] [C++] [sporst/ida-pro-plugins](https://github.com/sporst/ida-pro-plugins) Collection of IDA Pro plugins I wrote over the years
- [**21**Star][2y] [Py] [spec-sec/securechat](https://github.com/spec-sec/securechat) Encrypted chat server and client written in Python
- [**21**Star][1y] [spchal/hacklu2018](https://github.com/spchal/hacklu2018) Telco training
+- [**21**Star][2d] [sophoslabs/iocs](https://github.com/sophoslabs/iocs) Sophos-originated indicators-of-compromise from published reports
- [**21**Star][1y] [Rust] [smirnovvad/rbuster](https://github.com/smirnovvad/rbuster) yet another dirbuster
- [**21**Star][2y] [Py] [sirpsycho/firecall](https://github.com/sirpsycho/firecall) firecall: 直接向Cisco ASA防火墙发送命令, 无需登录防火墙后再做修改
+- [**21**Star][10d] [Batchfile] [simplevulnerabilitymanager/svm](https://github.com/simplevulnerabilitymanager/svm) Program to perform vulnerability analysis and automatically generate a report
- [**21**Star][5y] [shieldfy/awesome-pentest](https://github.com/shieldfy/awesome-pentest) A collection of awesome penetration testing resources, tools and other shiny things
- [**21**Star][1y] [sharsi1/sublazerwlst](https://github.com/sharsi1/sublazerwlst) Bundle of wordlists for brute-forcing subdomains (World + RUSSIA based).
- [**21**Star][3y] [Go] [shakenetwork/onionscan](https://github.com/shakenetwork/onionscan) OnionScan暗网爬虫是一个免费的开源工具,用于调查黑网。 OnionScan is a free and open source tool for investigating the Dark Web
- [**21**Star][3y] [C#] [shadowsocks-plus/shadowsocks-plus-win](https://github.com/shadowsocks-plus/shadowsocks-plus-win) An installer for SSPlus local proxy on Windows
-- [**21**Star][7m] [Py] [seyptoo/7z-bruteforce](https://github.com/seyptoo/7z-bruteforce) This repository consists of bruteforce to a 7z file, and it can be very useful in the penetration tests
- [**21**Star][10m] [Shell] [sensepost/common-substr](https://github.com/sensepost/common-substr) Simple awk script to extract the most common substrings from an input text. Built for password cracking.
+- [**21**Star][3y] [HTML] [secwiki/wooyun_articles](https://github.com/secwiki/wooyun_articles) drops.wooyun.org 乌云Drops文章备份
- [**21**Star][4y] [PHP] [secwiki/webshell](https://github.com/secwiki/webshell) This is a webshell open source project
-- [**21**Star][29d] [Dockerfile] [secbone/docker-ss-libev](https://github.com/secbone/docker-ss-libev) A mini docker image of Shadowsocks-libev only 15M in size
+- [**21**Star][5y] [ActionScript] [securityobscurity/cve-2015-0313](https://github.com/securityobscurity/cve-2015-0313)
+- [**21**Star][1m] [Dockerfile] [secbone/docker-ss-libev](https://github.com/secbone/docker-ss-libev) A mini docker image of Shadowsocks-libev only 15M in size
- [**21**Star][5m] [Shell] [sec0ps/va-pt](https://github.com/sec0ps/va-pt) VAPT is a Vulnerability Assessment and Penetration Testing toolkit. It merges the most common tools from Kali and SamuraiWTF into one platform and places them onto an Ubuntu or Raspbian platform.
+- [**21**Star][15d] [Py] [saucer-man/penetration-script](https://github.com/saucer-man/penetration-script) 渗透测试脚本
- [**21**Star][1y] [C++] [sanketkarpe/anwi](https://github.com/sanketkarpe/anwi) ANWI - All New Wireless IDS
- [**21**Star][4y] [Py] [sam-b/z3-stuff](https://github.com/sam-b/z3-stuff) z3 scripts and ctf challenge solutions.
- [**21**Star][10m] [Py] [sadeghhayeri/lol-hacking](https://github.com/sadeghhayeri/lol-hacking) My Hacking Activities!
+- [**21**Star][1m] [Shell] [rustybird/qubes-split-browser](https://github.com/rustybird/qubes-split-browser) Tor Browser in a Qubes DisposableVM, with persistent bookmarks and login credentials
- [**21**Star][11m] [Smarty] [ropnop/pentest_charts](https://github.com/ropnop/pentest_charts) Some helpful Helm Charts for pentesters
- [**21**Star][7m] [rootup/phdays9](https://github.com/rootup/phdays9) My fuzzing workshop from PHDays9
- [**21**Star][3y] [Py] [roo7break/serialator](https://github.com/roo7break/serialator) Python script to exploit CVE-2015-4852.
- [**21**Star][2y] [C++] [riscybusiness/jadoube](https://github.com/riscybusiness/jadoube)
- [**21**Star][9m] [HTML] [ridter/cs_custom_404](https://github.com/ridter/cs_custom_404) Cobalt strike custom 404 page
-- [**21**Star][2m] [PowerShell] [rgl/visual-studio-community-vagrant](https://github.com/rgl/visual-studio-community-vagrant) Vagrant Environment for Visual Studio Community
+- [**21**Star][5d] [PS] [rgl/visual-studio-community-vagrant](https://github.com/rgl/visual-studio-community-vagrant) Vagrant Environment for Visual Studio Community
- [**21**Star][1y] [C] [rfalke/decompiler-subjects](https://github.com/rfalke/decompiler-subjects) Tests cases for binary decompilers
- [**21**Star][5y] [Java] [retme7/launchanywhere_poc_by_retme_bug_7699048](https://github.com/retme7/launchanywhere_poc_by_retme_bug_7699048) source code & PoC file of launchAnyWhere problem
- [**21**Star][3y] [Py] [reflare/afl-monitor](https://github.com/reflare/afl-monitor) A monitoring script for AFL
-- [**21**Star][2m] [Py] [rceninja/re-scripts](https://github.com/rceninja/re-scripts)
- - [Hyperv-Scripts](https://github.com/rceninja/re-scripts/tree/master/scripts/Hyperv-Scripts)
- - [IA32-MSR-Decoder](https://github.com/rceninja/re-scripts/tree/master/scripts/IA32-MSR-Decoder) an IDA script which helps you to find and decode all MSR codes inside binary files
- - [IA32-VMX-Helper](https://github.com/rceninja/re-scripts/tree/master/scripts/IA32-VMX-Helper) an IDA script (Updated IA32 MSR Decoder) which helps you to find and decode all MSR/VMCS codes inside binary files
+- [**21**Star][3y] [Go] [rdkr/oniongen-go](https://github.com/rdkr/oniongen-go)
+- [**21**Star][13d] [Java] [rcenvironment/rce](https://github.com/rcenvironment/rce) Distributed, workflow-driven integration environment
- [**21**Star][2y] [Ruby] [rapid7/msfrpc-client](https://github.com/rapid7/msfrpc-client) Rapid7 Metasploit API client library written in Ruby
-- [**21**Star][2m] [Py] [random-robbie/bugbountydork](https://github.com/random-robbie/bugbountydork) Bug Bounty Dork
- [**21**Star][11m] [Java] [ramshazar/orangetsai-springboot-actuator-poc](https://github.com/ramshazar/orangetsai-springboot-actuator-poc)
-- [**21**Star][3y] [PowerShell] [raikia/get-reconinfo](https://github.com/raikia/get-reconinfo) A powershell script that prints a lot of IP and connection info to the screen
+- [**21**Star][3y] [PS] [raikia/get-reconinfo](https://github.com/raikia/get-reconinfo) A powershell script that prints a lot of IP and connection info to the screen
+- [**21**Star][6m] [r3mlab/datajournalism-resources](https://github.com/r3mlab/datajournalism-resources) A compilation of links to datajournalism & OSINT tools, guides and resources I find useful to keep at hand.
- [**21**Star][2m] [Py] [pyke369/exabgp-helpers](https://github.com/pyke369/exabgp-helpers) ExaBGP helpers scripts
- [**21**Star][3m] [Ruby] [pwelch/virustotal_api](https://github.com/pwelch/virustotal_api) Ruby Gem for VirusTotal API
- [**21**Star][10m] [Py] [pure-l0g1c/keylogger](https://github.com/pure-l0g1c/keylogger) A simple keylogger that uses Gmail as a C&C
+- [**21**Star][2y] [Py] [pure-l0g1c/aircrack](https://github.com/pure-l0g1c/aircrack) Automatic Wifi Cracker. Uses Airodump, Aircrack, Aireplay
- [**21**Star][4y] [Shell] [psrcek/kali-mitm-evil-twin](https://github.com/psrcek/kali-mitm-evil-twin) A script that creates a wifi hotspot on kali linux that can view usernames and passwords of ssl logins.
- [**21**Star][1m] [Java] [portswigger/json-web-tokens](https://github.com/portswigger/json-web-tokens) JWT Support for Burp
- [**21**Star][3m] [Java] [portswigger/freddy-deserialization-bug-finder](https://github.com/portswigger/freddy-deserialization-bug-finder)
@@ -16365,14 +17676,18 @@ for CVE details based on the nmap report.
- [**21**Star][4y] [Py] [peterfillmore/rfidiot](https://github.com/peterfillmore/rfidiot) python RFID / NFC library & tools
- [**21**Star][5y] [C] [pastcompute/lca2015-radare2-tutorial](https://github.com/pastcompute/lca2015-radare2-tutorial) Examples and demos for my LCA2015 radare2 tutorial
- [**21**Star][2m] [Py] [ouroboros/juusankoubou](https://github.com/ouroboros/juusankoubou) 「十三工房」
-- [**21**Star][3y] [Visual Basic] [osandamalith/vbshellcode](https://github.com/osandamalith/vbshellcode) Making shellcode UD -
+- [**21**Star][3y] [Visual Basic .NET] [osandamalith/vbshellcode](https://github.com/osandamalith/vbshellcode) Making shellcode UD -
- [**21**Star][3y] [Py] [odedlaz/uberlogs](https://github.com/odedlaz/uberlogs) make logging fun again
+- [**21**Star][5y] [C] [nyx0/dll-inj3cti0n](https://github.com/nyx0/dll-inj3cti0n) Another dll injection tool.
- [**21**Star][2y] [C] [nviso-be/nexus_5_bootloader_unpacker](https://github.com/nviso-be/nexus_5_bootloader_unpacker) A bootloader imgdata unpacker for Nexus 4, 5 and 7 smartphones as well as imgdata tool for Nexus 5.
- [**21**Star][3m] [Py] [nlitsme/idascripts](https://github.com/nlitsme/idascripts) IDApro idc and idapython script collection
- [enumerators](https://github.com/nlitsme/idascripts/blob/master/enumerators.py) Enumeration utilities for idapython
- [**21**Star][8m] [Py] [nguyenkhong/cracknetdrive3](https://github.com/nguyenkhong/cracknetdrive3)
- [**21**Star][3y] [Py] [neurobin/letsacme](https://github.com/neurobin/letsacme) A tiny script to issue and renew TLS/SSL certificate from Let's Encrypt
+- [**21**Star][3y] [Go] [netxfly/xsec-ssh-firewall](https://github.com/netxfly/xsec-ssh-firewall) 一个简易的ssh密码防暴力破解程序
- [**21**Star][4y] [Py] [neo23x0/prisma](https://github.com/neo23x0/prisma) Command Line STDOUT Colorer
+- [**21**Star][2y] [HTML] [neargle/secnewsbak](https://github.com/neargle/secnewsbak) 备份SecNews失效的Drops.Wooyun文章
+- [**21**Star][2y] [Java] [mtxiaowangzi/java-ee-vulnweb](https://github.com/mtxiaowangzi/java-ee-vulnweb) 用于演示Java Web项目中,漏洞的成因及修复方案,可用于黑盒测试和白盒测试,部分修复方案可用于生产环境。
- [**21**Star][2y] [Py] [mstxq17/dbleakscan](https://github.com/mstxq17/dbleakscan) this scanner try to scan some dbbak or ctf #源码泄露
- [**21**Star][3y] [C++] [morpav/zceq_solver](https://github.com/morpav/zceq_solver) CPU solver for Zcash's variant of Equihash problem
- [**21**Star][1y] [C#] [mojtabatajik/besafe](https://github.com/mojtabatajik/besafe) BeSafe is robust threat analyzer which help to protect your desktop environment and know what's happening around you
@@ -16383,100 +17698,118 @@ for CVE details based on the nmap report.
- [**21**Star][2y] [C++] [microsoft/firewalleventmonitor](https://github.com/microsoft/firewalleventmonitor) Listens for Firewall rule match events generated by Microsoft Hyper-V Virtual Filter Protocol (VFP) extension.
- [**21**Star][2y] [Py] [mdsecresearch/thriftdecoder](https://github.com/mdsecresearch/thriftdecoder) Apache Thrift Decoder
- [**21**Star][10m] [PHP] [mariusbalcytis/gentle-force](https://github.com/mariusbalcytis/gentle-force) Brute-force, error and request rate limiting
-- [**21**Star][1y] [Py] [marcovaldong/isgan](https://github.com/marcovaldong/isgan) Implementation of "Invisible Steganography via Generative Adversarial Networks" (
+- [**21**Star][3m] [Py] [marcolivierbouch/dirbpy](https://github.com/marcolivierbouch/dirbpy) This is the new version of dirb in python
- [**21**Star][5m] [Py] [manhnho/shellsum](https://github.com/manhnho/shellsum) A defense tool - detect web shells in local directories via md5sum
- [**21**Star][3y] [C++] [malwares/malware](https://github.com/malwares/malware) Malware Samples. Uploaded to GitHub for those want to analyse the code.
+- [**21**Star][5y] [C++] [lynnux/holyshit](https://github.com/lynnux/holyshit) ollydbg plugin, the goal is to make life easier. The project is DEAD!
- [**21**Star][5y] [JS] [longtian/cache_attack_in_javascript](https://github.com/longtian/cache_attack_in_javascript) Perform cache attack using javascript
- [**21**Star][2y] [Shell] [linuxlite/spectre-meltdown-checker-automated](https://github.com/linuxlite/spectre-meltdown-checker-automated) An Automated Spectre Meltdown downloader and checker
- [**21**Star][2y] [Py] [kudelskisecurity/check_all_apks](https://github.com/kudelskisecurity/check_all_apks) Check All APK's -- scripts for checking your phone for malware
+- [**21**Star][2y] [Py] [kslgroup/threadmap](https://github.com/kslgroup/threadmap) threadmap plugin for Volatility Foundation
- [**21**Star][2y] [Py] [krrr/wstan](https://github.com/krrr/wstan) Tunneling TCP in WebSocket (ssh -D alternative)
+- [**21**Star][5y] [Java] [khai-tran/burpjdser](https://github.com/khai-tran/burpjdser)
- [**21**Star][3y] [C++] [k0keoyo/cve-2015-2546-exploit](https://github.com/k0keoyo/cve-2015-2546-exploit)
- [**21**Star][2y] [Py] [jzadeh/aktaion2](https://github.com/jzadeh/aktaion2) Python implementation of the Aktaion project
- [**21**Star][7m] [Py] [joda32/certcrunchy](https://github.com/joda32/certcrunchy) Just a silly recon tool that uses data from SSL Certificates to find potential host names
- [**21**Star][9y] [Shell] [jfernandez/ddos-deflate](https://github.com/jfernandez/ddos-deflate) custom DDoS Deflate clone
- [**21**Star][2y] [C] [jerome-ps/jn516xsniffer](https://github.com/jerome-ps/jn516xsniffer) Transform a Xiaomi Zigbee gadget into a Zigbee sniffer.
- [**21**Star][3y] [Groovy] [jenkinsci-cert/security-218](https://github.com/jenkinsci-cert/security-218)
+- [**21**Star][2y] [jasklabs/blackhat2017](https://github.com/jasklabs/blackhat2017) Data sets and examples for Jask Labs Blackhat 2017 Handout: Top 10 Machine Learning Cyber Security Use Cases
+- [**21**Star][3m] [C] [jackullrich/trunpe](https://github.com/jackullrich/trunpe) A modified RunPE (process hollowing) technique avoiding the usage of SetThreadContext by appending a TLS section which calls the original entrypoint.
- [**21**Star][2y] [ivmachiavelli/osint_opendata](https://github.com/ivmachiavelli/osint_opendata) A collection of Open Data for the data freaks out there.
- [**21**Star][1y] [Py] [ins1gn1a/pwdlyser](https://github.com/ins1gn1a/pwdlyser) pwdlyser:密码分析工具,Python编写
- [**21**Star][6y] [Py] [ikoniaris/kippo-malware](https://github.com/ikoniaris/kippo-malware) Download all malicious files from a Kippo SSH honeypot database
- [**21**Star][2y] [Ruby] [realbearcat/cve-2018-1297](https://github.com/RealBearcat/CVE-2018-1297) Apache Jmeter RMI 反序列化
-- [**21**Star][8m] [Py] [hpd0ger/supertags](https://github.com/hpd0ger/supertags) 一个Burpsuite插件,用于检测隐藏的XSS
-- [**21**Star][11m] [Py] [howmp/comfinder](https://github.com/howmp/comfinder) IDA plugin for COM
- [**21**Star][4y] [C++] [holmesian/gh0st-light](https://github.com/holmesian/gh0st-light) 精简之后的老东西
-- [**21**Star][3y] [Py] [hoainam1989/training-application-security](https://github.com/hoainam1989/training-application-security) This repository for training application security.
- [**21**Star][5m] [Py] [hash3lizer/subrake](https://github.com/hash3lizer/subrake) A powerful Subdomain Scanner & Validator for Reconnaissance.
- [**21**Star][2y] [Py] [harris21/afot](https://github.com/harris21/afot) Automation Forensics Tool for Windows
- [**21**Star][3y] [C] [hackerdom/phdctf-2017](https://github.com/hackerdom/phdctf-2017) PHDays Online CTF 2017. Developed with ♥ by Hackerdom team
+- [**21**Star][6y] [C] [hackedteam/vector-silent](https://github.com/hackedteam/vector-silent) Silent installer
- [**21**Star][3y] [Py] [hack-all-the-things/charsetinspect](https://github.com/hack-all-the-things/charsetinspect) A script that inspects multi-byte character sets looking for characters with specific user-defined properties
+- [**21**Star][2y] [PHP] [gwen001/vhost-brute](https://github.com/gwen001/vhost-brute) A PHP tool to brute force vhost configured on a server.
- [**21**Star][12m] [C++] [gtoad/android_anti_debug](https://github.com/gtoad/android_anti_debug) An example of android anti-debug.
- [**21**Star][2y] [Go] [gnolizuh/quictun](https://github.com/gnolizuh/quictun) The simplest tunnel service based on QUIC.
- [**21**Star][2m] [Py] [gh0x0st/buffer_overflow](https://github.com/gh0x0st/buffer_overflow) Just another OSCP prep guide into buffer overflows using Python
-- [**21**Star][3y] [PowerShell] [fuzzysecurity/capstonekeystone-powershell](https://github.com/fuzzysecurity/capstonekeystone-powershell) PowerShell Module Bindings for Capstone/Keystone
+- [**21**Star][3m] [gh0st-404/zs-personal-infiltration-syste](https://github.com/gh0st-404/zs-personal-infiltration-syste) 泽少个人渗透系统 Zs Personal Infiltration Syste
+- [**21**Star][3y] [PS] [fuzzysecurity/capstonekeystone-powershell](https://github.com/fuzzysecurity/capstonekeystone-powershell) PowerShell Module Bindings for Capstone/Keystone
- [**21**Star][2y] [Shell] [funilrys/funceble](https://github.com/funilrys/funceble) [ARCHIVED] Please report to
- [**21**Star][2m] [Py] [flarn2006/bhstools](https://github.com/flarn2006/bhstools) Tools for interacting with Brinks BHS-3000 and BHS-4000 / IntelliBus, custom firmware for BHS-4000
- [**21**Star][1y] [Py] [fjh658/hexrayspytools](https://github.com/fjh658/hexrayspytools) Ida Pro plugin
- [**21**Star][4y] [fabiobaroni/awesome-pentest](https://github.com/fabiobaroni/awesome-pentest) A collection of awesome penetration testing resources, tools and other shiny things
- [**21**Star][1m] [Shell] [fabaff/fsl-test-bench](https://github.com/fabaff/fsl-test-bench) FSL Test bench - Ansible playbook repository to setup a save environment for security auditing and testing. It can be used for teaching security testing methodologies, testing tools, learning, and playing.
-- [**21**Star][27d] [Py] [f5networks/f5-google-gdm-templates](https://github.com/f5networks/f5-google-gdm-templates) Google Deployment Templates for quickly deploying BIG-IP services in Google Cloud Platform
-- [**21**Star][3y] [Java] [ernw/burpsuite-extensions](https://github.com/ernw/burpsuite-extensions) A collection of Burp Suite extensions
-- [**21**Star][16d] [Java] [ericsson/ecaudit](https://github.com/ericsson/ecaudit) Ericsson Audit plug-in for Apache Cassandra
+- [**21**Star][6d] [Py] [f5networks/f5-google-gdm-templates](https://github.com/f5networks/f5-google-gdm-templates) Google Deployment Templates for quickly deploying BIG-IP services in Google Cloud Platform
+- [**21**Star][10m] [Go] [extremecoders-re/go-dispatch-proxy](https://github.com/extremecoders-re/go-dispatch-proxy) SOCKS5 load balancing proxy developed in Go, combines multiple internet connections
+- [**21**Star][18d] [Java] [ericsson/ecaudit](https://github.com/ericsson/ecaudit) Ericsson Audit plug-in for Apache Cassandra
- [**21**Star][3y] [Jupyter Notebook] [equalitie/bothound](https://github.com/equalitie/bothound) Automatic attack detector and botnet classifier
- [**21**Star][4m] [C#] [empier/memoryeditor](https://github.com/empier/memoryeditor) [C#]Main.exe < - > [C_DLL] < - > [C_KERNEL] = Memory_Editor via Kernel
-- [**21**Star][3y] [PHP] [emanuil/php-reaper](https://github.com/emanuil/php-reaper) PHP tool to scan ADOdb code for SQL Injections
-- [**21**Star][12m] [C++] [edwig/sslsocket](https://github.com/edwig/sslsocket) Two sided secure/insecure socket that can do SSL/TLS connections without the need for OpenSSL libraries. It uses the standard WinCrypt modules
+- [**21**Star][1y] [C++] [edwig/sslsocket](https://github.com/edwig/sslsocket) Two sided secure/insecure socket that can do SSL/TLS connections without the need for OpenSSL libraries. It uses the standard WinCrypt modules
- [**21**Star][2y] [edoverflow/security-policy-specification-standard](https://github.com/edoverflow/security-policy-specification-standard) This document proposes a way of standardising the structure, language, and grammar used in security policies.
- [**21**Star][7m] [Py] [duchengyao/hkdvr_login](https://github.com/duchengyao/hkdvr_login) 批量扫描海康威视视频监控并尝试登录的脚本
- [**21**Star][7y] [C] [dsmatter/brootus](https://github.com/dsmatter/brootus) An educational Linux Kernel Rootkit
- [**21**Star][1y] [C] [droberson/icmp-backdoor](https://github.com/droberson/icmp-backdoor) Backdoor that listens for specially crafted ICMP packets and spawns reverse shells.
- [**21**Star][7m] [Py] [drbeni/malquarium](https://github.com/drbeni/malquarium) Malquarium - Modern Malware Repository
-- [**21**Star][2y] [C++] [dragonquesthero/kernel-force-delete](https://github.com/dragonquesthero/kernel-force-delete) force delete runing .exe application file.or delete any locked file
-- [**21**Star][3y] [C++] [dinamsky/malware-botnets](https://github.com/dinamsky/malware-botnets)
+- [**21**Star][3m] [digitaldisarray/osint-tools](https://github.com/digitaldisarray/osint-tools)
- [**21**Star][3y] [Py] [digitalbond/ctf-challenges](https://github.com/digitalbond/ctf-challenges) Challenges from past S4 (SCADA Security Scientific Symposium) Capture-the-Flag contests.
-- [**21**Star][1y] [Py] [digiampietro/adbtools2](https://github.com/digiampietro/adbtools2) Tools for hacking ADB Epicentro routers, including firmware modification and VOIP password recovery.
-- [**21**Star][2m] [TypeScript] [dialogs/electron-ssl-pinning](https://github.com/dialogs/electron-ssl-pinning) Prevents MITM in Electron applications
+- [**21**Star][2m] [TS] [dialogs/electron-ssl-pinning](https://github.com/dialogs/electron-ssl-pinning) Prevents MITM in Electron applications
+- [**21**Star][1m] [Perl] [dheiland-r7/snmp](https://github.com/dheiland-r7/snmp) SNMP data gather scripts
+- [**21**Star][10m] [dfir-it/supreme-backdoor-factory](https://github.com/dfir-it/supreme-backdoor-factory) This repository contains additional files mentioned in the blog post
+- [**21**Star][2d] [C++] [deeponion/deeponion](https://github.com/deeponion/deeponion) Official Source Repo for DeepOnion - Anonymous Cryptocurrency on TOR (based on the latest codebase from litecoin/bitcoin)
+- [**21**Star][4y] [Py] [decalage2/oledump-contrib](https://github.com/decalage2/oledump-contrib) The oledump-contrib repository contains plugins and enhancements for the oledump tool published by Didier Stevens.
- [**21**Star][1y] [Smali] [dan7800/vulnerableandroidapporacle](https://github.com/dan7800/vulnerableandroidapporacle)
- [**21**Star][4m] [C] [cyclaero/void-zones-tools](https://github.com/cyclaero/void-zones-tools) Prepare a list of void zones that can be readily feed into Unbound on FreeBSD
- [**21**Star][5y] [C++] [cr4sh/prl_guest_to_host](https://github.com/cr4sh/prl_guest_to_host) Guest to host VM escape exploit for Parallels Desktop
- [**21**Star][1y] [HTML] [consensys/evm-analyzer-benchmark-suite](https://github.com/consensys/evm-analyzer-benchmark-suite) A benchmark suite for evaluating the precision of EVM code analysis tools.
- [**21**Star][1y] [C] [codereba/netmon](https://github.com/codereba/netmon) network filter driver that control network send speed, based on windows tdi framework.
- [**21**Star][1y] [PHP] [codeclimate/codeclimate-phpcodesniffer](https://github.com/codeclimate/codeclimate-phpcodesniffer) Code Climate Engine for PHP Code Sniffer
+- [**21**Star][2y] [Java] [codahale/grpc-proxy](https://github.com/codahale/grpc-proxy) A gRPC service which proxies requests to an HTTP server.
+- [**21**Star][8m] [Java] [codahale/aes-gcm-siv](https://github.com/codahale/aes-gcm-siv) A Java implementation of AES-GCM-SIV (RFC 8452).
- [**21**Star][2y] [C] [circl/pcapdj](https://github.com/circl/pcapdj) pcapdj - dispatch pcap files
- [**21**Star][7m] [Py] [christhecoolhut/instruction-stomp](https://github.com/christhecoolhut/instruction-stomp) Cross-architecture instruction counting for CTF solving
+- [**21**Star][21d] [JS] [chef-koch/bypass-adblockers](https://github.com/chef-koch/bypass-adblockers) Malvertising campaign that successfully bypasses ad blockers to deliver their malicious payload
- [**21**Star][6y] [Py] [carlpulley/volatility](https://github.com/carlpulley/volatility) A collection of Volatility Framework plugins.
- [**21**Star][10y] [C] [bringhurst/xnufuzz](https://github.com/bringhurst/xnufuzz) An XNU kernel fuzz tool
- [**21**Star][5y] [Py] [brenns10/pywall](https://github.com/brenns10/pywall) Python firewall.
- [**21**Star][4m] [Py] [botherder/snoopdroid](https://github.com/botherder/snoopdroid) Extract packages from an Android device
-- [**21**Star][9d] [beerisgood/windows10_hardening](https://github.com/beerisgood/windows10_hardening) My Windows 10 x64 security hardening guide
+- [**21**Star][4d] [beerisgood/windows10_hardening](https://github.com/beerisgood/windows10_hardening) My Windows 10 x64 security hardening guide
- [**21**Star][6m] [Py] [beched/abi-decompiler](https://github.com/beched/abi-decompiler) Ethereum (EVM) smart contracts reverse engineering helper utility
- [**21**Star][9m] [Ruby] [audibleblink/doubletap](https://github.com/audibleblink/doubletap) Password spraying on sites that require 2+ page loads and dynamic nonces
-- [**21**Star][3y] [Visual Basic] [appsecco/winmanipulate](https://github.com/appsecco/winmanipulate) A simple tool to manipulate window objects in Windows
+- [**21**Star][5m] [JS] [assafmo/istorexit](https://github.com/assafmo/istorexit) Check if an IP is a Tor exit node
+- [**21**Star][3y] [C++] [arpitn30/nipper-ng](https://github.com/arpitn30/nipper-ng) Automatically exported from code.google.com/p/nipper-ng
+- [**21**Star][3y] [Visual Basic .NET] [appsecco/winmanipulate](https://github.com/appsecco/winmanipulate) A simple tool to manipulate window objects in Windows
- [**21**Star][6m] [PHP] [appsecco/sqlinjection-training-app](https://github.com/appsecco/sqlinjection-training-app) A simple PHP application to learn SQL Injection detection and exploitation techniques.
+- [**21**Star][10d] [Shell] [apache-labor/labor](https://github.com/apache-labor/labor)
- [**21**Star][3y] [CSS] [aozhimin/ios-reverse-engineering-presentation](https://github.com/aozhimin/ios-reverse-engineering-presentation) iOS Reverse Engineering Presentation
- [**21**Star][3y] [aozhimin/ios-monitor-resources](https://github.com/aozhimin/ios-monitor-resources) 对各厂商的 iOS SDK 性能监控方案的整理和收集后的资源
- [**21**Star][10m] [Java] [ankokuty/hakoniwabadstore](https://github.com/ankokuty/hakoniwabadstore) 箱庭BadStore
+- [**21**Star][2m] [Shell] [angela-d/autohosts](https://github.com/angela-d/autohosts) Automate hosts file updates on Linux and MacOS. Block Firefox telemetry, Google snooping and web trackers at the root.
+- [**21**Star][4y] [C#] [alphadelta/png-mask](https://github.com/alphadelta/png-mask) PNG Steganography Software
- [**21**Star][2y] [Java] [alcarl/nfcproxy](https://github.com/alcarl/nfcproxy) 用两个安卓手机的nfc功能截取iso14443交互数据 fork by
- [**21**Star][2y] [C] [al-homedawy/injector](https://github.com/al-homedawy/injector) A Windows driver used to facilitate DLL injection
- [**21**Star][4y] [C#] [adamcaudill/curvelock](https://github.com/adamcaudill/curvelock) Experimental File & Message Encryption for Windows
- [**21**Star][3m] [acutronicrobotics/mara_threat_model](https://github.com/acutronicrobotics/mara_threat_model) Threat Model analysis for MARA modular robot
-- [**21**Star][2y] [Py] [abatchy17/rop-emporium](https://github.com/abatchy17/rop-emporium) Solutions for ROP Emporium challenges (
+- [**21**Star][2m] [Py] [7dog7/masscan_to_nmap](https://github.com/7dog7/masscan_to_nmap) 基于masscan和nmap的快速端口扫描和指纹识别工具,优化版本(获取标题,页面长度,过滤防火墙)
- [**21**Star][3y] [55-aa/cve-2015-0057](https://github.com/55-aa/cve-2015-0057) 翻译文章,CVE-2015-0057漏洞在32位和64位系统上的利用。Exploiting the win32k!xxxEnableWndSBArrows use-after-free (CVE 2015-0057) bug on both 32-bit and 64-bit(Aaron Adams of NCC )
- [**21**Star][7y] [C] [0xroot/whitesnow](https://github.com/0xroot/whitesnow) An experimental rootkit for Android
- [**21**Star][1y] [Py] [0x09al/my-exploits](https://github.com/0x09al/my-exploits) My public exploit collection.
+- [**20**Star][6d] [Py] [quark-engine/quark-engine](https://github.com/quark-engine/quark-engine)
+- [**20**Star][2d] [Py] [beardog108/onionr](https://github.com/beardog108/onionr) Private Decentralized Communication Network
+- [**20**Star][6m] [Go] [contextualist/proxlet](https://github.com/contextualist/proxlet) a POC, naïve implemetation of serverless reverse proxy for any website
+- [**20**Star][30d] [Java] [naveenrudra/rttm](https://github.com/naveenrudra/rttm) Real Time Threat Monitoring Tool
- [**20**Star][2y] [HTML] [pwn20wndstuff/pwn20wndstuff.github.io](https://github.com/pwn20wndstuff/pwn20wndstuff.github.io)
-- [**20**Star][7d] [C#] [damonmohammadbagher/nativepayload_reverseshell](https://github.com/damonmohammadbagher/nativepayload_reverseshell) This is Simple C# Source code to Bypass almost "all" AVS, (kaspersky v19, Eset v12 v13 ,Trend-Micro v16, Comodo & Windows Defender Bypassed via this method Very Simple)
- [**20**Star][1y] [Py] [tostapunk/pc-control-telegram-bot](https://github.com/tostapunk/pc-control-telegram-bot) Control your PC directly from Telegram!
-- [**20**Star][2m] [starnightcyber/subdomains](https://github.com/starnightcyber/subdomains) 互联网公司子域名收集
+- [**20**Star][1m] [scriptingxss/owasp-fstm](https://github.com/scriptingxss/owasp-fstm) The Firmware Security Testing Methodology (FSTM) is composed of nine stages tailored to enable security researchers, software developers, consultants, hobbyists, and Information Security professionals with conducting firmware security assessments.
- [**20**Star][4m] [C] [netik/dc27_badge](https://github.com/netik/dc27_badge) Defcon 27 "DaBomb!" badge.
-- [**20**Star][9d] [Py] [natescarlet/gfwlist.acl](https://github.com/natescarlet/gfwlist.acl)
+- [**20**Star][11d] [Py] [natescarlet/gfwlist.acl](https://github.com/natescarlet/gfwlist.acl)
- [**20**Star][5m] [HTML] [0xkira/pwn-dash-docset](https://github.com/0xkira/pwn-dash-docset) latest x86_64 assembly language and pwntools dash docset
-- [**20**Star][1m] [Py] [mephi42/ida-kallsyms](https://github.com/mephi42/ida-kallsyms) (No Doc)
-- [**20**Star][3y] [Py] [initbrain/python-wi-fi-positioning-system](https://github.com/initbrain/python-wi-fi-positioning-system) Python Wi-Fi Positioning System - Wi-Fi geolocation script using the Google Geolocation API
+- [**20**Star][2m] [Java] [alpheratzteam/obfuscator](https://github.com/alpheratzteam/obfuscator) Java Obfuscator
+- [**20**Star][2m] [Py] [mephi42/ida-kallsyms](https://github.com/mephi42/ida-kallsyms) (No Doc)
- [**20**Star][1m] [foxhex0ne/slides](https://github.com/foxhex0ne/slides) Will try to put here slides from now on when I give a talk
- [**20**Star][1y] [Py] [hyuunnn/ida_python_scripts](https://github.com/hyuunnn/ida_python_scripts) ida python scripts
-- [**20**Star][25d] [cypurr-collective/cypurr-prezes](https://github.com/cypurr-collective/cypurr-prezes) presentation materials for our cryptoparties
+- [**20**Star][11m] [Go] [nogoegst/onionize](https://github.com/nogoegst/onionize) create an onion site from a directory, file, zip or an HTTP(S) site
+- [**20**Star][3m] [Java] [aress31/flarequench](https://github.com/aress31/flarequench) Burp Suite plugin that adds additional checks to the passive scanner to reveal the origin IP(s) of Cloudflare-protected web applications.
- [**20**Star][3y] [Py] [inndy/formatstring-exploit](https://github.com/inndy/formatstring-exploit) Dead simple format string exploit payload generator
- [**20**Star][1y] [Py] [sniperoj/attack-defense-platform](https://github.com/sniperoj/attack-defense-platform) A framework that help to create CTF Attack with Defense competition quickly
-- [**20**Star][11d] [Java] [daimler/sechub](https://github.com/daimler/sechub) SecHub - one central and easy way to use different security tools with one API/Client
+- [**20**Star][2d] [Java] [daimler/sechub](https://github.com/daimler/sechub) SecHub - one central and easy way to use different security tools with one API/Client
- [**20**Star][7m] [HTML] [casework/case](https://github.com/casework/CASE) Cyber-investigation Analysis Standard Expression (CASE) Ontology
- [**20**Star][3y] [ulexec/windowsmalwaresourcecode](https://github.com/ulexec/WindowsMalwareSourceCode) Collection of Source Code of Various Malware Targeting the Windows Platform
- [**20**Star][3y] [unexpectedby/automated-malware-analysis-list](https://github.com/unexpectedBy/Automated-Malware-Analysis-List) My personal Automated Malware Analysis Sandboxes and Services
@@ -16487,41 +17820,43 @@ for CVE details based on the nmap report.
- [**20**Star][3y] [Go] [thanasisk/go-ssh-cracker](https://github.com/thanasisk/go-ssh-cracker) A simple ssh private key password recovery tool written in Go
- [**20**Star][11m] [Py] [fsecurelabs/captcha_cracking](https://github.com/FSecureLABS/captcha_cracking) Helper scripts and tutorial for cracking text-based CAPTCHAs
- [**20**Star][8m] [aws-samples/aws-redshift-spectrum-poc](https://github.com/aws-samples/aws-redshift-spectrum-poc) Cloudformation and SQL scripts used to replicate a POC environment from the "Data Lake to Data Warehouse: Enhancing Customer 360 with Amazon Redshift Spectrum" post
+- [**20**Star][5m] [Py] [zznop/binjago](https://github.com/zznop/binjago) Binary Ninja plugin for ROP gadget calculation
- [**20**Star][3y] [Py] [ztrix/idascript](https://github.com/ztrix/idascript) Full functional idascript with stdin/stdout handled
- [**20**Star][2y] [C#] [zoebear/radia](https://github.com/zoebear/radia) create an interactive and immerse environment to visualize code, and to augment the task of reverse engineering binaries
+- [**20**Star][2y] [ObjC] [zjjno/cornerstonehook](https://github.com/zjjno/cornerstonehook) Cornerstone破解
- [**20**Star][1y] [C] [zhuhuibeishadiao/drivermaper](https://github.com/zhuhuibeishadiao/drivermaper) map driver to memory
+- [**20**Star][9m] [C++] [zhongyang219/simplenotepad](https://github.com/zhongyang219/simplenotepad) 这是一个可以代替Windows记事本的软件,除了包含记事本原有的功能外,还有编码格式转换、十六进制查看编辑、文件二进制比较、编码批量转换的功能。
- [**20**Star][1y] [Py] [zhl2008/ctf-framework](https://github.com/zhl2008/ctf-framework) Hence
- [**20**Star][3m] [C#] [zerokilo/pdbdumpwv](https://github.com/zerokilo/pdbdumpwv) PDB Dumping Tool
-- [**20**Star][1y] [zecopro/wpa-passwords](https://github.com/zecopro/wpa-passwords) the best and small passwords lists to crack handshake wpa-wpa2
- [**20**Star][3y] [C++] [yujokang/epex](https://github.com/yujokang/epex) Tool for detecting error handling bugs
- [**20**Star][3y] [CSS] [youngyangyang04/nosqlinjectionattackdemo](https://github.com/youngyangyang04/nosqlinjectionattackdemo) NoSQLInjectionAttackDemo is website demo for test NoSQL Injection. There are two website demos in this project and all databases are mongoDB
- [**20**Star][1y] [Lua] [yoshifan/ram-watch-cheat-engine](https://github.com/yoshifan/ram-watch-cheat-engine) Lua script framework for RAM watch displays using Cheat Engine, with a focus on Dolphin emulator.
+- [**20**Star][1y] [xiaoqx/pocs](https://github.com/xiaoqx/pocs) pocs of tested targets
- [**20**Star][3y] [CSS] [xeushack/fake-login-page](https://github.com/xeushack/fake-login-page) A fake login page for use in a phishing attack
- [**20**Star][8m] [x-f1v3/cve-2019-3396](https://github.com/x-f1v3/cve-2019-3396) Confluence Widget Connector path traversal (CVE-2019-3396)
-- [**20**Star][19d] [watterott/candiy-shield](https://github.com/watterott/candiy-shield) CAN-Bus Shield for Arduino based on Microchip MCP2515 or MCP2517FD CAN Controller
+- [**20**Star][21d] [watterott/candiy-shield](https://github.com/watterott/candiy-shield) CAN-Bus Shield for Arduino based on Microchip MCP2515 or MCP2517FD CAN Controller
- [**20**Star][6m] [PHP] [w181496/fuckfastcgi](https://github.com/w181496/fuckfastcgi) [Tool] Forge PHP FastCGI protocol to RCE with strict disable_functions
- [**20**Star][1y] [Py] [vortexau/mooscan](https://github.com/vortexau/mooscan) A scanner for Moodle LMS
+- [**20**Star][3d] [Go] [virustotal/vt-go](https://github.com/virustotal/vt-go) The official Go client library for VirusTotal API
- [**20**Star][2y] [JS] [vagabondan/ric-nomp](https://github.com/vagabondan/ric-nomp) SEGWIT, Dash 12.1 generation transaction format support and many bugfixes from almost all forks at github were implemented here on 2017-10-04. You can create Issues but code contribution is much more preferable.
+- [**20**Star][2y] [Py] [undefinedd/extract0r-](https://github.com/undefinedd/extract0r-)
- [**20**Star][1y] [C#] [ukncsc/mail-check](https://github.com/ukncsc/mail-check)
- [**20**Star][3y] [JS] [tunnelshade/pocuito](https://github.com/tunnelshade/pocuito) A tiny chrome extension to record and replay your web application proof-of-concepts.
- [**20**Star][10m] [Makefile] [tum-i22/munch](https://github.com/tum-i22/munch) Greybox fuzzer for optimizing function coverage and finding low-level vulnerabilities in C programs
-- [**20**Star][3y] [PowerShell] [trullj/sticky-keys-scanner](https://github.com/trullj/sticky-keys-scanner) A PowerShell function that scans for the existence of a Sticky Keys backdoor.
+- [**20**Star][3y] [PS] [trullj/sticky-keys-scanner](https://github.com/trullj/sticky-keys-scanner) A PowerShell function that scans for the existence of a Sticky Keys backdoor.
- [**20**Star][3y] [Java] [topolik/ois-dos](https://github.com/topolik/ois-dos) Java Deserialization
- [**20**Star][3y] [Py] [toolsprods/sniffvpn](https://github.com/toolsprods/sniffvpn) Traffic monitor for your VPN
- [**20**Star][5y] [C] [tongzeyu/hooksysenter](https://github.com/tongzeyu/hooksysenter) hook sysenter,重载内核,下硬件断点到debugport,防止debugport清零
-- [**20**Star][2y] [C#] [thomdixon/saltwatertaffy](https://github.com/thomdixon/saltwatertaffy) An nmap wrapper library for .NET
- [**20**Star][1y] [Py] [thisissecurity/sinkhole](https://github.com/thisissecurity/sinkhole) Miscellanous scripts used for malware analysis
- [**20**Star][1m] [Go] [theredspy15/multi-go](https://github.com/theredspy15/multi-go) A multi-tool made in Go, and aimed at security experts to make life a little more convenient
- [**20**Star][8m] [C++] [terencechow/pwnedpasswords](https://github.com/terencechow/pwnedpasswords) PwnedPasswords as a Service
- [**20**Star][2y] [Py] [techbliss/x64dbg_script_editor](https://github.com/techbliss/x64dbg_script_editor) x64dbg Script editor v2.0
+- [**20**Star][3m] [Rust] [tafia/hyper-proxy](https://github.com/tafia/hyper-proxy) A proxy connector for Hyper-based crates
- [**20**Star][5y] [C++] [sweetsoftware/simplebackdoor](https://github.com/sweetsoftware/simplebackdoor) Remote Windows shell
- [**20**Star][4y] [PHP] [stypr/ctf](https://github.com/stypr/ctf) Web-based CTF challenge writeups (2011~2015).
-- [**20**Star][24d] [Shell] [stevemcgrath/docker-nessus_scanner](https://github.com/stevemcgrath/docker-nessus_scanner) Nessus Scanner Docker Image
- [**20**Star][6y] [Ruby] [staaldraad/metasploit](https://github.com/staaldraad/metasploit) Metasploit things, modules, plugins, exploits
-- [**20**Star][5m] [Py] [sslmate/ct-honeybee](https://github.com/sslmate/ct-honeybee) Lightweight program that pollinates STHs between Certificate Transparency logs and auditors
-- [**20**Star][4m] [C] [sslab-gatech/fuzzification](https://github.com/sslab-gatech/fuzzification) We hinder fuzzing
+- [**20**Star][6m] [Py] [sslmate/ct-honeybee](https://github.com/sslmate/ct-honeybee) Lightweight program that pollinates STHs between Certificate Transparency logs and auditors
- [**20**Star][11m] [Py] [spacepatcher/firehol-ip-aggregator](https://github.com/spacepatcher/firehol-ip-aggregator) Application for keeping feeds from FireHOL
-- [**20**Star][3m] [sophoslabs/iocs](https://github.com/sophoslabs/iocs) Sophos-originated indicators-of-compromise from published reports
- [**20**Star][5y] [snifer/l4bsforandroid](https://github.com/snifer/l4bsforandroid) Repositorio de APK para Hacking y Seguridad
- [**20**Star][10m] [slowmist/awesome-blockchain-bug-bounty](https://github.com/slowmist/awesome-blockchain-bug-bounty) A comprehensive curated list of available Blockchain Bug Bounty Programs.
- [**20**Star][4m] [Java] [skocur/image-cipher](https://github.com/skocur/image-cipher) Steganography software for encrypting text into image that uses modified version of LSB (Least Significant Bit) algorithm.
@@ -16529,24 +17864,23 @@ for CVE details based on the nmap report.
- [**20**Star][4y] [Py] [sinkmanu/cookiescanner](https://github.com/sinkmanu/cookiescanner) Tool for check the cookie flag in multiple sites
- [**20**Star][1y] [Erlang] [silentsignal/sslproxy](https://github.com/silentsignal/sslproxy) Generic HTTPS proxy for logging non-HTTP traffic
- [**20**Star][4y] [Py] [shwetankarora/gsm-packets-analysis-framework](https://github.com/shwetankarora/gsm-packets-analysis-framework)
-- [**20**Star][3y] [HTML] [secwiki/wooyun_articles](https://github.com/secwiki/wooyun_articles) drops.wooyun.org 乌云Drops文章备份
-- [**20**Star][5y] [ActionScript] [securityobscurity/cve-2015-0313](https://github.com/securityobscurity/cve-2015-0313)
+- [**20**Star][8y] [Ruby] [sensepost/squeeza](https://github.com/sensepost/squeeza) SQL Injection without the pain of syringes.
+- [**20**Star][3m] [Py] [sensepost/punch-q](https://github.com/sensepost/punch-q)
- [**20**Star][3y] [Py] [securitymb/burp-exceptions](https://github.com/securitymb/burp-exceptions) Simple trick to increase readability of exceptions raised by Burp extensions written in Python
- [**20**Star][1y] [Py] [securityinnovation/ofxpostern](https://github.com/securityinnovation/ofxpostern) Vulnerability scanner for OFX servers
-- [**20**Star][8m] [C++] [secrary/findloop](https://github.com/secrary/findloop) find possible encryption/decryption or compression/decompression code
-- [**20**Star][2y] [C] [scotpaul/keylog](https://github.com/scotpaul/keylog) A simple C keylogger for Linux
+- [**20**Star][9m] [C++] [secrary/findloop](https://github.com/secrary/findloop) find possible encryption/decryption or compression/decompression code
- [**20**Star][2y] [sampi/create-react-app-hack](https://github.com/sampi/create-react-app-hack) Hacking create-react-app to work with Preact & LESS without ejecting
- [**20**Star][7y] [MATLAB] [samhooke/steganography](https://github.com/samhooke/steganography) Image & video steganography in Matlab
- [**20**Star][3y] [Py] [saelo/33c3ctf-repl](https://github.com/saelo/33c3ctf-repl) Code and exploit for the "read-eval-pwn loop" challenge of 33C3 CTF
- [**20**Star][10m] [Java] [rub-nds/joseph](https://github.com/rub-nds/joseph)
+- [**20**Star][1m] [Shell] [rtrouton/create_macos_recovery](https://github.com/rtrouton/create_macos_recovery) Tool for repairing the Recovery volume (APFS) or partition (HFS+) on Macs running macOS 10.13.x or later.
- [**20**Star][2y] [JS] [rohitjoshi9023/brutal-wordlist-generator](https://github.com/rohitjoshi9023/brutal-wordlist-generator) Brutal Wordlist Generator is a java based Application software used to generate the wordlist with best of UX interface
- [**20**Star][4m] [C++] [revspbird/hightlight](https://github.com/revspbird/hightlight) a plugin for ida of version 7.2 to help know F5 window codes better
- [**20**Star][6m] [C#] [reclassnet/reclass.net-frostbiteplugin](https://github.com/reclassnet/reclass.net-frostbiteplugin) A ReClass.NET plugin which displays type infos of Frostbite classes and adds the WeakPtr node.
-- [**20**Star][3y] [Go] [rdkr/oniongen-go](https://github.com/rdkr/oniongen-go)
-- [**20**Star][2y] [PowerShell] [rasta-mouse/invoke-loginprompt](https://github.com/rasta-mouse/invoke-loginprompt) Invokes a Windows Security Login Prompt and outputs the clear text password.
+- [**20**Star][2y] [JS] [rd17/detor](https://github.com/rd17/detor)
+- [**20**Star][2y] [PS] [rasta-mouse/invoke-loginprompt](https://github.com/rasta-mouse/invoke-loginprompt) Invokes a Windows Security Login Prompt and outputs the clear text password.
- [**20**Star][4m] [Py] [rapid7/metasploit-baseline-builder](https://github.com/rapid7/metasploit-baseline-builder) Created by Jeffrey Martin via the GitHub Connector
-- [**20**Star][6m] [r3mlab/datajournalism-resources](https://github.com/r3mlab/datajournalism-resources) A compilation of links to datajournalism & OSINT tools, guides and resources I find useful to keep at hand.
-- [**20**Star][2y] [Py] [pure-l0g1c/aircrack](https://github.com/pure-l0g1c/aircrack) Automatic Wifi Cracker. Uses Airodump, Aircrack, Aireplay
+- [**20**Star][1y] [ranchoice/44con2018](https://github.com/ranchoice/44con2018) Slides of 44Con 2018
- [**20**Star][3y] [C++] [progmboy/vul_analyze_doc](https://github.com/progmboy/vul_analyze_doc)
- [**20**Star][2y] [Java] [pnfsoftware/pleaserop](https://github.com/pnfsoftware/pleaserop) Architecture-agnostic ROP gadget finder using JEB's IR
- [**20**Star][7m] [Rust] [plus-postech/soma](https://github.com/plus-postech/soma) Cross-platform CTF problem container manager
@@ -16556,61 +17890,58 @@ for CVE details based on the nmap report.
- [**20**Star][3y] [HTML] [pentestbox/pentest-box-tools](https://github.com/pentestbox/pentest-box-tools) PentestBox Tools Website
- [**20**Star][3y] [C++] [patois/ndsldr](https://github.com/patois/ndsldr) Nintendo DS ROM loader module for IDA Pro
- [**20**Star][2y] [C] [opsxcq/exploit-cve-2016-7434](https://github.com/opsxcq/exploit-cve-2016-7434) NTPD remote DOS exploit and vulnerable container
-- [**20**Star][3y] [PowerShell] [oldb00t/aggressorscripts](https://github.com/oldb00t/aggressorscripts) Cobaltstrike Aggressor Scripts
+- [**20**Star][3y] [PS] [oldb00t/aggressorscripts](https://github.com/oldb00t/aggressorscripts) Cobaltstrike Aggressor Scripts
- [**20**Star][2y] [C#] [olanderofc/officebrute](https://github.com/olanderofc/officebrute) OfficeBrute - brute force protected word documents
- [**20**Star][1y] [Batchfile] [olafhartong/ta-sysmon-deploy](https://github.com/olafhartong/ta-sysmon-deploy) Deploy and maintain Symon through the Splunk Deployment Sever
- [**20**Star][1y] [c] [odzhan/propagate](https://github.com/odzhan/propagate) PROPagate code injection technique example
-- [**20**Star][5y] [C] [nyx0/dll-inj3cti0n](https://github.com/nyx0/dll-inj3cti0n) Another dll injection tool.
- [**20**Star][8m] [C#] [nyan-x-cat/lime-loader](https://github.com/nyan-x-cat/lime-loader) Download a .NET payload and run it on memory
- [**20**Star][2y] [Shell] [nullarray/sysenum](https://github.com/nullarray/sysenum) Simple Bash script to retrieve basic system information.
- [**20**Star][2y] [Py] [nullarray/pyparser-cve](https://github.com/nullarray/pyparser-cve) Multi source CVE/exploit parser.
+- [**20**Star][26d] [C++] [nonlinear-chaos-order-etc/i2pchat](https://github.com/nonlinear-chaos-order-etc/i2pchat)
- [**20**Star][2y] [C++] [nkga/self-updater](https://github.com/nkga/self-updater) Framework for secure self-updating software, written in C++/Win32.
- [**20**Star][2y] [C] [nkga/cheat-driver](https://github.com/nkga/cheat-driver) Kernel mode driver for reading/writing process memory. C/Win32.
+- [**20**Star][3y] [Py] [njsmith/machomachomangler](https://github.com/njsmith/machomachomangler) Tools for mangling Mach-O and PE binaries
- [**20**Star][6y] [Shell] [netspi/binrev](https://github.com/netspi/binrev)
-- [**20**Star][2y] [HTML] [neargle/secnewsbak](https://github.com/neargle/secnewsbak) 备份SecNews失效的Drops.Wooyun文章
- [**20**Star][2y] [C] [neargle/cve-2018-6574-poc](https://github.com/neargle/cve-2018-6574-poc) CVE-2018-6574 POC : golang 'go get' remote command execution during source code build
- [**20**Star][1y] [Py] [ne0nd0g/adpasswordhealth](https://github.com/ne0nd0g/adpasswordhealth) A tool to evaluate the password health of Active Directory accounts.
- [**20**Star][3y] [nd13/penetration-testing-and-hacking](https://github.com/nd13/penetration-testing-and-hacking) Collection of tips, tools and tutorials around infosec
- [**20**Star][3y] [Py] [ncatlin/lockwatcher](https://github.com/ncatlin/lockwatcher) Anti-forensic monitor program: watches for signs of tampering and purges keys/shuts everything down.
- [**20**Star][2y] [C] [nbulischeck/debugfs-backdoor](https://github.com/nbulischeck/debugfs-backdoor) PoC code using debugfs to store files in memory and execute them
- [**20**Star][1y] [Py] [n0tty/random-hacking-scripts](https://github.com/n0tty/random-hacking-scripts) A collection of scripts made duing my personal research
-- [**20**Star][22d] [C++] [mullvad/libwfp](https://github.com/mullvad/libwfp) C++ library for interacting with the Windows Filtering Platform (WFP)
-- [**20**Star][2y] [Java] [mtxiaowangzi/java-ee-vulnweb](https://github.com/mtxiaowangzi/java-ee-vulnweb) 用于演示Java Web项目中,漏洞的成因及修复方案,可用于黑盒测试和白盒测试,部分修复方案可用于生产环境。
+- [**20**Star][24d] [C++] [mullvad/libwfp](https://github.com/mullvad/libwfp) C++ library for interacting with the Windows Filtering Platform (WFP)
- [**20**Star][7m] [C] [mtth-bfft/ntsec](https://github.com/mtth-bfft/ntsec) Standalone tool to explore the security model of Windows and its NT kernel. Use it to introspect privilege assignments and access right assignments, enumerate attack surfaces from the point of view of a sandboxed process, etc.
- [**20**Star][2y] [C++] [mrexodia/ceautoattach](https://github.com/mrexodia/ceautoattach) Tool to automatically make Cheat Engine attach to a process via the command line.
- [**20**Star][7y] [JS] [mozilla/mortar-layouts](https://github.com/mozilla/mortar-layouts) A small library for constructing app UIs with backbone.js.
- [**20**Star][2y] [XSLT] [mozilla-services/shavar-plugin-blocklist](https://github.com/mozilla-services/shavar-plugin-blocklist)
-- [**20**Star][3y] [PowerShell] [mortenschenk/babuska-dolls](https://github.com/mortenschenk/babuska-dolls)
-- [**20**Star][1m] [Py] [mntn0x/poc](https://github.com/mntn0x/poc) 一些漏洞检测/利用脚本
+- [**20**Star][3y] [PS] [mortenschenk/babuska-dolls](https://github.com/mortenschenk/babuska-dolls)
+- [**20**Star][7d] [Py] [mntn0x/poc](https://github.com/mntn0x/poc) 一些漏洞检测/利用脚本
- [**20**Star][5y] [Py] [mk-fg/nflog-zmq-pcap-pipe](https://github.com/mk-fg/nflog-zmq-pcap-pipe) Tool to collect nflog and pipe it to a pcap stream/file over network (0mq) for real-time (or close to) analysis
- [**20**Star][9m] [misp/misp-compliance](https://github.com/misp/misp-compliance) Legal, procedural and policies document templates for operating MISP and information sharing communities
- [**20**Star][5y] [Py] [milo2012/pentest_automation](https://github.com/milo2012/pentest_automation)
-- [**20**Star][10d] [PHP] [middlewares/payload](https://github.com/middlewares/payload) PSR-15 middleware to parse the body of the request with support for json, csv and url-encode
-- [**20**Star][7d] [HTML] [mfthomps/labtainers](https://github.com/mfthomps/labtainers) Labtainers: A Docker-based cyber lab framework
+- [**20**Star][9d] [HTML] [mfthomps/labtainers](https://github.com/mfthomps/labtainers) Labtainers: A Docker-based cyber lab framework
- [**20**Star][4y] [Shell] [merces/scripts](https://github.com/merces/scripts) cuz life is scriptable...
- [**20**Star][2y] [ActionScript] [mdsecactivebreach/cve-2018-4878](https://github.com/mdsecactivebreach/cve-2018-4878)
-- [**20**Star][2y] [PowerShell] [mdsecactivebreach/angrypuppy](https://github.com/mdsecactivebreach/angrypuppy) Bloodhound Attack Path Automation in CobaltStrike
+- [**20**Star][2y] [PS] [mdsecactivebreach/angrypuppy](https://github.com/mdsecactivebreach/angrypuppy) Bloodhound Attack Path Automation in CobaltStrike
+- [**20**Star][2y] [mayter/sec-charts](https://github.com/mayter/sec-charts) 更新了更多的思维导图。
- [**20**Star][1y] [Ruby] [martinvigo/ransombile](https://github.com/martinvigo/ransombile) Ransombile is a tool that can be used in different scenarios to compromise someone’s digital life when having physical access to a locked mobile device
- [**20**Star][7m] [Py] [manhnho/brutality](https://github.com/manhnho/brutality) A fuzzer for any GET entries
- [**20**Star][9m] [Py] [makinacorpus/spynner](https://github.com/makinacorpus/spynner) Programmatic web browsing module with AJAX support for Python
-- [**20**Star][2m] [Dockerfile] [mablanco/docker-osmedeus](https://github.com/mablanco/docker-osmedeus) Docker image for Osmedeus, a fully automated offensive security tool for reconnaissance and vulnerability scanning
-- [**20**Star][5y] [C++] [lynnux/holyshit](https://github.com/lynnux/holyshit) ollydbg plugin, the goal is to make life easier. The project is DEAD!
- [**20**Star][7m] [C#] [lowleveldesign/diagnostics-tools](https://github.com/lowleveldesign/diagnostics-tools)
- [**20**Star][3m] [C] [lnslbrty/potd](https://github.com/lnslbrty/potd) A high scalable low to medium interactive SSH/TCP honeypot using Linux Namespaces, capabilities, seccomp, cgroups designed for OpenWrt and IoT devices.
-- [**20**Star][2y] [PowerShell] [linuz/powerhungry](https://github.com/linuz/powerhungry) Experimental PowerShell tools for Penetration Testing / Red Teaming
+- [**20**Star][2y] [PS] [linuz/powerhungry](https://github.com/linuz/powerhungry) Experimental PowerShell tools for Penetration Testing / Red Teaming
- [**20**Star][2y] [JS] [lersh/potatostream](https://github.com/lersh/potatostream) Shadowsocks like Proxy,Written by nodejs
-- [**20**Star][3y] [C] [leixiangwu/cse509-rootkit](https://github.com/leixiangwu/cse509-rootkit) After attackers manage to gain access to a remote (or local) machine and elevate their privileges to "root", they typically want to maintain their access, while hiding their presence from the normal users and administrators of the system. This basic rootkit works on the Linux operating system and is a loadable kernel module which when loaded int…
- [**20**Star][1y] [Shell] [kyonli/asuswrt-v2ray](https://github.com/kyonli/asuswrt-v2ray) Transparent proxy based on V2Ray
- [**20**Star][2y] [Go] [kudelskisecurity/go-manger-attack](https://github.com/kudelskisecurity/go-manger-attack) This is a toy implementation in Go of Manger's chosen-ciphertext attack on RSA-OAEP
- [**20**Star][2y] [Py] [kudelskisecurity/cryptochallenge17](https://github.com/kudelskisecurity/cryptochallenge17) Kudelski Security's 2017 crypto challenge
-- [**20**Star][2y] [Py] [kslgroup/threadmap](https://github.com/kslgroup/threadmap) threadmap plugin for Volatility Foundation
- [**20**Star][3y] [Ruby] [kingsabri/burp_suite_extension_ruby](https://github.com/kingsabri/burp_suite_extension_ruby) BurpSuite Extension Ruby Template to speed up building a Burp Extension using Ruby
-- [**20**Star][5y] [Java] [khai-tran/burpjdser](https://github.com/khai-tran/burpjdser)
- [**20**Star][7y] [Py] [kevthehermit/yaramail](https://github.com/kevthehermit/yaramail) Yara Scanner For IMAP Feeds and saved Streams
- [**20**Star][6m] [TeX] [kevateam/ctf-attack-defense](https://github.com/kevateam/ctf-attack-defense) Attack-defense platform
- [**20**Star][2y] [Py] [kelwin/peda](https://github.com/kelwin/peda) PEDA - Python Exploit Development Assistance for GDB
- [**20**Star][5y] [kdpryor/linuxvolprofiles](https://github.com/kdpryor/linuxvolprofiles) Volatility Linux Profiles
+- [**20**Star][3m] [Ruby] [karneades/defensomania](https://github.com/karneades/defensomania) Defensomania is a card game for security monitoring and incident response teams.
- [**20**Star][9y] [Diff] [jrmuizel/kemufuzzer](https://github.com/jrmuizel/kemufuzzer) Automatically exported from code.google.com/p/kemufuzzer
+- [**20**Star][3m] [C++] [jovibor/libpe](https://github.com/jovibor/libpe) Library for tinkering with PE/PE+ binaries.
+- [**20**Star][3y] [C] [joswr1ght/asleap](https://github.com/joswr1ght/asleap) Asleap - Cisco LEAP and Generic MS-CHAPv2 Dictionary Attack
- [**20**Star][9m] [Py] [jordisk/thehive2sigma](https://github.com/jordisk/thehive2sigma) Python script to automatically create sigma rules from The hive observables
- [**20**Star][5y] [JS] [jonstewart/sifter](https://github.com/jonstewart/sifter) Indexed search and clustering tool for digital forensics
- [**20**Star][4y] [C] [jonathanseals/ios-kexec-utils](https://github.com/jonathanseals/ios-kexec-utils) I'm taking a break, I swear
@@ -16620,8 +17951,6 @@ for CVE details based on the nmap report.
- [**20**Star][2y] [Py] [jidar/smith](https://github.com/jidar/smith) A client/server style agent meant for testing connectivity to and from a machine on a network.
- [**20**Star][2y] [Py] [jiayunhan/opanalyzer](https://github.com/jiayunhan/opanalyzer) The unofficial release of the tool we used in the EuroS&P 2017 paper: Open Doors for Bob and Mallory: Open Port Usage in Android Apps and Security Implications.
- [**20**Star][7y] [Py] [jeffbryner/kinectasploitv2](https://github.com/jeffbryner/kinectasploitv2) kinectasploitv2
-- [**20**Star][2y] [jasklabs/blackhat2017](https://github.com/jasklabs/blackhat2017) Data sets and examples for Jask Labs Blackhat 2017 Handout: Top 10 Machine Learning Cyber Security Use Cases
-- [**20**Star][2m] [C] [jackullrich/trunpe](https://github.com/jackullrich/trunpe) A modified RunPE (process hollowing) technique avoiding the usage of SetThreadContext by appending a TLS section which calls the original entrypoint.
- [**20**Star][2y] [C] [izuolan/pshell](https://github.com/izuolan/pshell) ICMP/IP tunnel manager for Linux.
- [**20**Star][1y] [ivan1ee/regasm_installutil_applockerbypass](https://github.com/ivan1ee/regasm_installutil_applockerbypass) AppLocker Bypass With Regasm/InstallUtil
- [**20**Star][1y] [Java] [it-gorillaz/lnk2pwn](https://github.com/it-gorillaz/lnk2pwn) Malicious Shortcut(.lnk) Generator
@@ -16637,38 +17966,39 @@ for CVE details based on the nmap report.
- [Decoder](https://github.com/hyuunnn/ida_python_scripts/tree/master/Decoder) Multiple malware decoders
- [**20**Star][2y] [Py] [hrushikeshk/enum.py](https://github.com/hrushikeshk/enum.py) A tool to enumerate network services
- [**20**Star][2y] [Py] [hexabin/apkstat](https://github.com/hexabin/apkstat) Automated Information Retrieval From APKs For Initial Analysis
-- [**20**Star][6y] [C] [hackedteam/vector-silent](https://github.com/hackedteam/vector-silent) Silent installer
+- [**20**Star][4m] [Ruby] [heroku/omniauth-heroku](https://github.com/heroku/omniauth-heroku) OmniAuth strategy for Heroku
- [**20**Star][5y] [AutoIt] [habohitron/habohitron](https://github.com/habohitron/habohitron)
- [**20**Star][5m] [Py] [guedou/flashre](https://github.com/guedou/flashre) tools to reverse the Toshiba FlashAir SD cards
- [**20**Star][8m] [graylog2/graylog-guide-snort](https://github.com/graylog2/graylog-guide-snort) How to send structured Snort IDS alert logs into Graylog
- [**20**Star][2y] [C] [gravity-postquantum/prune-horst](https://github.com/gravity-postquantum/prune-horst) Signature scheme submitted to NIST's Post-Quantum Cryptography Project
+- [**20**Star][2y] [Jupyter Notebook] [grananqvist/machine-learning-web-application-firewall-and-dataset](https://github.com/grananqvist/machine-learning-web-application-firewall-and-dataset)
- [**20**Star][1y] [Py] [gosecure/gophish-cli](https://github.com/gosecure/gophish-cli) Gophish Python cli to perform huge phishing campaigns
- [**20**Star][5m] [Py] [gilks/enumerid](https://github.com/gilks/enumerid) Enumerate RIDs using pure Python
- [**20**Star][9m] [Rust] [gamozolabs/slime_tree](https://github.com/gamozolabs/slime_tree) Worst Android kernel fuzzer
- [**20**Star][2y] [C++] [ez8-co/ezpp](https://github.com/ez8-co/ezpp)
-- [**20**Star][14d] [extremecoders-re/re-list](https://github.com/extremecoders-re/re-list) A list of open source reverse engineering tools with a focus on binary analysis
+- [**20**Star][16d] [extremecoders-re/re-list](https://github.com/extremecoders-re/re-list) A list of open source reverse engineering tools with a focus on binary analysis
+- [**20**Star][3y] [C] [exploit-install/thefatrat](https://github.com/exploit-install/thefatrat) An easy tool to generate backdoor with msfvenom (a part from metasploit framework). This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software protection
+- [**20**Star][2y] [Py] [euniceylee/waves](https://github.com/euniceylee/waves) raspberry pi project that visualizes sound waves
- [**20**Star][2y] [Py] [erpscanteam/cve-2018-2636](https://github.com/erpscanteam/cve-2018-2636) ERPScan Public POC for CVE-2018-2636
- [**20**Star][11m] [WebAssembly] [eosessentials/eos-proxy-token](https://github.com/eosessentials/eos-proxy-token) Proxy token to allow mitigating EOSIO Ram exploit
+- [**20**Star][14d] [Ruby] [envato/unwrappr](https://github.com/envato/unwrappr)
- [**20**Star][9m] [Py] [enigmatos/fuzzlon](https://github.com/enigmatos/fuzzlon) 802.15.4 Fuzzer
-- [**20**Star][5m] [Py] [endgameinc/malware_evasion_competition](https://github.com/endgameinc/malware_evasion_competition)
-- [**20**Star][3m] [C] [en14c/erebus](https://github.com/en14c/erebus) Poc for ELF64 runtime infection via GOT poisoning technique by elfmaster
+- [**20**Star][4m] [C] [en14c/erebus](https://github.com/en14c/erebus) Poc for ELF64 runtime infection via GOT poisoning technique by elfmaster
- [**20**Star][2y] [Py] [embedi/dji-ws-tools](https://github.com/embedi/dji-ws-tools) DJI Assistant 2 web socket server exploitation tools
- [**20**Star][1y] [Py] [ekultek/strutter](https://github.com/ekultek/strutter) Proof of Concept for CVE-2018-11776
- [**20**Star][1m] [edwardqiu/awesome-infosec](https://github.com/edwardqiu/awesome-infosec) A curated list of awesome infosec blog posts, courses, books and more!
- [**20**Star][3y] [TeX] [edelahozuah/awesome-tls-security](https://github.com/edelahozuah/awesome-tls-security) A collection of (not-so, yet) awesome resources related to TLS, PKI and related stuff
- [**20**Star][10m] [eddietcc/cvenotes](https://github.com/eddietcc/cvenotes)
- [**20**Star][1y] [C] [downwithup/cve-2018-16712](https://github.com/downwithup/cve-2018-16712) PoC Code for CVE-2018-16712 (exploit by MmMapIoSpace)
-- [**20**Star][2m] [digitaldisarray/osint-tools](https://github.com/digitaldisarray/osint-tools)
+- [**20**Star][3y] [C++] [dinamsky/malware-botnets](https://github.com/dinamsky/malware-botnets)
- [**20**Star][5y] [Py] [digitalbond/ibal](https://github.com/digitalbond/ibal) IDA Pro Bootrom Analysis Library, which contains a number of useful functions for analyzing embedded ROMs
-- [**20**Star][1m] [Perl] [dheiland-r7/snmp](https://github.com/dheiland-r7/snmp) SNMP data gather scripts
- [**20**Star][9m] [Java] [delicioushorse/writeups](https://github.com/delicioushorse/writeups)
- [**20**Star][2y] [deepwn/dn2.io](https://github.com/deepwn/dn2.io) [ Domain Name to I/O ] Development DNS & Security Data Transportation & Pentesting with SCA and Steganography.
-- [**20**Star][7d] [C++] [deeponion/deeponion](https://github.com/deeponion/deeponion) Official Source Repo for DeepOnion - Anonymous Cryptocurrency on TOR (based on the latest codebase from litecoin/bitcoin)
-- [**20**Star][4y] [Py] [decalage2/oledump-contrib](https://github.com/decalage2/oledump-contrib) The oledump-contrib repository contains plugins and enhancements for the oledump tool published by Didier Stevens.
+- [**20**Star][5m] [Py] [dearbytes/opensource-endpoint-monitoring](https://github.com/dearbytes/opensource-endpoint-monitoring) This repository contains all the config files and scripts used for our Open Source Endpoint monitoring project.
- [**20**Star][7y] [Ruby] [darkoperator/nessus-bridge-for-metasploit](https://github.com/darkoperator/nessus-bridge-for-metasploit) nessus plugin for metasploit to connect to a nessus server
- [**20**Star][3y] [Py] [danilabs/rexploit](https://github.com/danilabs/rexploit) RExploit (Router Exploitation) is a tool that search exploits for any router SOHO. It is written on Python and QT.
- [**20**Star][1y] [Py] [danielhenrymantilla/shellcode-factory](https://github.com/danielhenrymantilla/shellcode-factory) Tool to create and test shellcodes from custom assembly sources (with some encoding options)
-- [**20**Star][2y] [PowerShell] [danielbohannon/devsec-defense](https://github.com/danielbohannon/devsec-defense) Accompanying PowerShell Modules for DevSec Defense Presentation
+- [**20**Star][2y] [PS] [danielbohannon/devsec-defense](https://github.com/danielbohannon/devsec-defense) Accompanying PowerShell Modules for DevSec Defense Presentation
- [**20**Star][3y] [C#] [damonmohammadbagher/fakefilemaker](https://github.com/damonmohammadbagher/fakefilemaker) Social Engineering: Simple way to make a fake file for Backdoors
- [**20**Star][6y] [Py] [d4rkcat/stackflow](https://github.com/d4rkcat/stackflow) Universal stack-based buffer overfow exploitation tool
- [**20**Star][1y] [C++] [d00rt/hijacked_lokibot_version](https://github.com/d00rt/hijacked_lokibot_version)
@@ -16678,33 +18008,34 @@ for CVE details based on the nmap report.
- [**20**Star][3y] [JS] [ctf-thanos/ctf-writeups](https://github.com/ctf-thanos/ctf-writeups) A writeup summary for CTF problems.
- [**20**Star][7m] [Java] [cryptomator/siv-mode](https://github.com/cryptomator/siv-mode) RFC 5297 SIV mode of operation in Java
- [**20**Star][11m] [HTML] [cryptolok/epmg](https://github.com/cryptolok/epmg) EPMG:跨平台、最安全、“不存储密码(storageless)”的密码管理器
+- [**20**Star][3d] [Java] [cronn-de/ssh-proxy](https://github.com/cronn-de/ssh-proxy) Pure Java implementation for SSH port tunneling that understands ProxyJump and ProxyCommand
- [**20**Star][6m] [Shell] [corb3nik/pwnbox](https://github.com/corb3nik/pwnbox) A VM for RE and Pwn
- [**20**Star][2y] [JS] [codedotjs/twifo-cli](https://github.com/codedotjs/twifo-cli)
+- [**20**Star][16d] [HTML] [cloudfoundry-incubator/haproxy-boshrelease](https://github.com/cloudfoundry-incubator/haproxy-boshrelease) A BOSH release for haproxy (based on cf-release's haproxy job)
- [**20**Star][6m] [Batchfile] [cldrn/insecureprogrammingdb](https://github.com/cldrn/insecureprogrammingdb) Insecure programming functions database
- [**20**Star][2y] [Py] [chrisjd20/cve-2017-9805.py](https://github.com/chrisjd20/cve-2017-9805.py) Better Exploit Code For CVE 2017 9805 apache struts
-- [**20**Star][19d] [JS] [chef-koch/bypass-adblockers](https://github.com/chef-koch/bypass-adblockers) Malvertising campaign that successfully bypasses ad blockers to deliver their malicious payload
+- [**20**Star][1y] [Py] [cbrnrd/netsploit](https://github.com/cbrnrd/netsploit)
- [**20**Star][5y] [Py] [catalyst256/watcher](https://github.com/catalyst256/watcher) Maltego with a twist of wireless
- [**20**Star][3y] [Go] [c1982/ripego](https://github.com/c1982/ripego) IP Whois Golang Package
- [**20**Star][2m] [Py] [brianlam38/sec-cheatsheets](https://github.com/brianlam38/sec-cheatsheets) Cheatsheets on security vulnerabilities and exploits.
- [**20**Star][3y] [C] [bnagy/osx-afl-llvm](https://github.com/bnagy/osx-afl-llvm) Barely working LLVM mode for AFL on OSX
- [**20**Star][11m] [C] [blacchat/rkorova](https://github.com/blacchat/rkorova) ld_preload userland rootkit
- [**20**Star][2y] [C] [bisoon/ps4-api-server](https://github.com/bisoon/ps4-api-server) PS4API server to handle client request for read/write to game memory
+- [**20**Star][1m] [Go] [binject/shellcode](https://github.com/binject/shellcode) Shellcode library as a Go package
- [**20**Star][5m] [C++] [arsunt/tr2main](https://github.com/arsunt/tr2main) Tomb Raider II Injector Dynamic Library
-- [**20**Star][3y] [C++] [arpitn30/nipper-ng](https://github.com/arpitn30/nipper-ng) Automatically exported from code.google.com/p/nipper-ng
- [**20**Star][3y] [Py] [arinkverma/google-foobar](https://github.com/arinkverma/google-foobar) Read about google foobar at HackerNews
+- [**20**Star][20d] [Smali] [aress31/sci](https://github.com/aress31/sci) Framework designed to automate the process of assembly code injection (trojanising) within Android applications.
- [**20**Star][2y] [Py] [arbazkiraak/hackbot](https://github.com/arbazkiraak/hackbot) Telegram Bot (Initial Development)
- [**20**Star][3y] [C++] [apriorit/antirootkit-anti-splicer](https://github.com/apriorit/antirootkit-anti-splicer) The project is a demo solution for one of the anti-rootkit techniques aimed on overcoming splicers
-- [**20**Star][8d] [Shell] [apache-labor/labor](https://github.com/apache-labor/labor)
- [**20**Star][6y] [C++] [antirootkit/bdarkit](https://github.com/antirootkit/bdarkit) just an lite AntiRootkit for interesting
- [**20**Star][5y] [C] [android-rooting-tools/libmsm_vfe_read_exploit](https://github.com/android-rooting-tools/libmsm_vfe_read_exploit) CVE-2014-4321 exploit
- [**20**Star][3y] [C++] [andrewgaspar/km-stl](https://github.com/andrewgaspar/km-stl) A drop-in replacement for the C++ STL for kernel mode Windows drivers. The goal is to have implementations for things like the standard algorithms that don't require memory allocations or exceptions, and for implementations of type traits and other compile-time related headers. Full implementation of the STL is a non-goal.
- [**20**Star][7y] [PHP] [amitnaik/php-backdoor](https://github.com/amitnaik/php-backdoor) This is php backdoor hack to access directory, access to mysql, access to execute shell command
-- [**20**Star][4y] [C#] [alphadelta/png-mask](https://github.com/alphadelta/png-mask) PNG Steganography Software
+- [**20**Star][1m] [JS] [alcideio/pipeline](https://github.com/alcideio/pipeline) Alcide Kubernetes Advisor ... Cluster Hygiene & Security Scanner - Pipeline Integration
- [**20**Star][3y] [C] [a232319779/phantom-3-standard](https://github.com/a232319779/phantom-3-standard) Used hackrf one to sniffer nrf24l0 and so on wireless packet.Application in PHANTOM 3 STANDARD RC signal sniffer.
-- [**20**Star][2m] [Py] [7dog7/masscan_to_nmap](https://github.com/7dog7/masscan_to_nmap) 基于masscan和nmap的快速端口扫描和指纹识别工具,优化版本(获取标题,页面长度,过滤防火墙)
- [**20**Star][3y] [Py] [73696e65/ctf-notes](https://github.com/73696e65/ctf-notes)
- [**20**Star][2y] [Py] [649/netscraped-exploit](https://github.com/649/netscraped-exploit) Framework for obtaining all the credentials stored in vulnerable Netwave IP cameras. Can be used to break into IP cameras, use for research only.
- [**20**Star][2y] [HTML] [649/chrome-sandbox-exploit](https://github.com/649/chrome-sandbox-exploit) [Patched] Sandbox escape Chrome exploit. Allows the execution of local binaries, read/write functions and exfiltration of Chrome OAuth tokens to remote server. More info:
- [**20**Star][4y] [Py] [0x90/wifuzz](https://github.com/0x90/wifuzz) Automatically exported from code.google.com/p/wifuzz
- [**20**Star][3y] [Go] [0x4445565a/portanoia](https://github.com/0x4445565a/portanoia) A tool that sets a honeypot port and runs a command against every IP that connects to it.
-- [**20**Star][10d] [Py] [0x25/useful](https://github.com/0x25/useful) useful pentest note
\ No newline at end of file
+- [**20**Star][7d] [Py] [0x25/useful](https://github.com/0x25/useful) useful pentest note
\ No newline at end of file
diff --git a/history/sec_tools_all_20191212140607.json b/history/sec_tools_all_20191212140607.json
new file mode 100644
index 0000000..648a1e1
--- /dev/null
+++ b/history/sec_tools_all_20191212140607.json
@@ -0,0 +1,142098 @@
+[
+ {
+ "link": "https://github.com/shadowsocks/shadowsocks-windows",
+ "star": 45523,
+ "commits": 1288,
+ "modify_time": "2019-12-01 08:08:43",
+ "last_release": "4.1.8.0",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/x64dbg/x64dbg",
+ "star": 34554,
+ "commits": 4300,
+ "modify_time": "2019-11-26 12:24:29",
+ "last_release": "snapshot",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/minimaxir/big-list-of-naughty-strings",
+ "star": 33926,
+ "commits": 258,
+ "modify_time": "2019-12-01 23:20:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hack-with-github/awesome-hacking",
+ "star": 32844,
+ "commits": 106,
+ "modify_time": "2019-10-03 15:22:22",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/shadowsocks/shadowsocks",
+ "star": 32022,
+ "commits": 1,
+ "modify_time": "2015-08-22 02:45:55",
+ "last_release": "2.9.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fatedier/frp",
+ "star": 30689,
+ "commits": 789,
+ "modify_time": "2019-11-28 06:21:27",
+ "last_release": "v0.30.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/shadowsocks/shadowsocks-android",
+ "star": 27836,
+ "commits": 3170,
+ "modify_time": "2019-12-09 14:55:02",
+ "last_release": "v4.8.7",
+ "lang": "Kotlin"
+ },
+ {
+ "link": "https://github.com/certbot/certbot",
+ "star": 25977,
+ "commits": 9500,
+ "modify_time": "2019-12-09 20:50:20",
+ "last_release": "v1.0.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/shadowsocks/shadowsocksx-ng",
+ "star": 25643,
+ "commits": 557,
+ "modify_time": "2019-11-14 04:48:39",
+ "last_release": "v1.9.4",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/v2ray/v2ray-core",
+ "star": 25330,
+ "commits": 4534,
+ "modify_time": "2019-12-09 02:01:46",
+ "last_release": "v4.21.3",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/xitu/gold-miner",
+ "star": 24826,
+ "commits": 9754,
+ "modify_time": "2019-12-10 06:01:11",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/trimstray/the-book-of-secret-knowledge",
+ "star": 24727,
+ "commits": 842,
+ "modify_time": "2019-12-07 11:04:30",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/mathiasbynens/dotfiles",
+ "star": 22556,
+ "commits": 750,
+ "modify_time": "2019-11-27 15:46:55",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/danielmiessler/seclists",
+ "star": 21874,
+ "commits": 824,
+ "modify_time": "2019-12-02 22:02:42",
+ "last_release": "2019.4",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/filosottile/mkcert",
+ "star": 21778,
+ "commits": 131,
+ "modify_time": "2019-11-29 22:36:50",
+ "last_release": "v1.4.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/skylot/jadx",
+ "star": 20680,
+ "commits": 1138,
+ "modify_time": "2019-12-07 10:12:37",
+ "last_release": "v1.1.0",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/StreisandEffect/streisand",
+ "star": 20159,
+ "commits": 1404,
+ "modify_time": "2019-12-06 22:21:48",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/camdavidsonpilon/probabilistic-programming-and-bayesian-methods-for-hackers",
+ "star": 19692,
+ "commits": 1063,
+ "modify_time": "2019-09-29 18:02:44",
+ "last_release": "",
+ "lang": "Jupyter Notebook"
+ },
+ {
+ "link": "https://github.com/alvin9999/new-pac",
+ "star": 19212,
+ "commits": 466,
+ "modify_time": "2018-12-01 12:14:30",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/rapid7/metasploit-framework",
+ "star": 19076,
+ "commits": 54271,
+ "modify_time": "2019-12-10 03:06:19",
+ "last_release": "\n 5.0.63\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/fallibleinc/security-guide-for-developers",
+ "star": 18676,
+ "commits": 146,
+ "modify_time": "2017-02-20 08:26:30",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/nationalsecurityagency/ghidra",
+ "star": 18476,
+ "commits": 1810,
+ "modify_time": "2019-12-09 18:58:24",
+ "last_release": "\n Ghidra_9.1_build\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/alibaba/arthas",
+ "star": 18390,
+ "commits": 835,
+ "modify_time": "2019-12-09 03:47:32",
+ "last_release": "arthas-all-3.1.7",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/inconshreveable/ngrok",
+ "star": 17641,
+ "commits": 328,
+ "modify_time": "2016-05-31 00:10:41",
+ "last_release": "\n 1.7.1\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/mitmproxy/mitmproxy",
+ "star": 17069,
+ "commits": 8231,
+ "modify_time": "2019-12-06 12:32:44",
+ "last_release": "v4.0.4",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/powershell/powershell",
+ "star": 16769,
+ "commits": 7681,
+ "modify_time": "2019-12-10 04:51:01",
+ "last_release": "v7.0.0-preview.6",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/sqlmapproject/sqlmap",
+ "star": 15824,
+ "commits": 9241,
+ "modify_time": "2019-12-09 21:13:52",
+ "last_release": "\n 1.3.12\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/micropoor/micro8",
+ "star": 15731,
+ "commits": 127,
+ "modify_time": "2019-03-07 04:24:01",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/curl/curl",
+ "star": 15718,
+ "commits": 25034,
+ "modify_time": "2019-12-09 11:00:20",
+ "last_release": "curl-7_67_0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/drduh/macOS-Security-and-Privacy-Guide",
+ "star": 15363,
+ "commits": 540,
+ "modify_time": "2019-11-20 21:53:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gfwlist/gfwlist",
+ "star": 14744,
+ "commits": 3405,
+ "modify_time": "2019-11-04 16:21:51",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/tencent/tinker",
+ "star": 14518,
+ "commits": 513,
+ "modify_time": "2019-12-05 09:18:15",
+ "last_release": "v1.9.14.3",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/bannedbook/fanqiang",
+ "star": 13736,
+ "commits": 205,
+ "modify_time": "2019-03-27 13:20:26",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/corentinj/real-time-voice-cloning",
+ "star": 13548,
+ "commits": 241,
+ "modify_time": "2019-11-13 15:10:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jesseduffield/lazydocker",
+ "star": 13241,
+ "commits": 451,
+ "modify_time": "2019-11-22 16:51:37",
+ "last_release": "v0.7.6",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/cool-rr/pysnooper",
+ "star": 12966,
+ "commits": 252,
+ "modify_time": "2019-11-29 21:55:33",
+ "last_release": "\n 0.3.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/liyasthomas/postwoman",
+ "star": 12742,
+ "commits": 965,
+ "modify_time": "2019-12-09 04:10:47",
+ "last_release": "v1.0.0",
+ "lang": "Vue"
+ },
+ {
+ "link": "https://github.com/shadowsocks/shadowsocks-libev",
+ "star": 12693,
+ "commits": 2220,
+ "modify_time": "2019-12-03 22:27:37",
+ "last_release": "v3.3.3",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/0xd4d/dnspy",
+ "star": 12544,
+ "commits": 3829,
+ "modify_time": "2019-12-02 22:26:12",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/diaspora/diaspora",
+ "star": 12325,
+ "commits": 19920,
+ "modify_time": "2019-10-24 23:29:10",
+ "last_release": "v0.7.12.0",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/signalapp/Signal-Android",
+ "star": 12241,
+ "commits": 4827,
+ "modify_time": "2019-12-06 16:58:12",
+ "last_release": "\n v4.51.6\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/buger/goreplay",
+ "star": 11977,
+ "commits": 994,
+ "modify_time": "2019-11-01 14:00:47",
+ "last_release": "v1.0.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/openssl/openssl",
+ "star": 11890,
+ "commits": 25059,
+ "modify_time": "2019-12-05 14:14:44",
+ "last_release": "\n OpenSSL_1_1_1d\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/radareorg/radare2",
+ "star": 11530,
+ "commits": 23160,
+ "modify_time": "2019-12-09 20:39:35",
+ "last_release": "4.0.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/robertdavidgraham/masscan",
+ "star": 11418,
+ "commits": 576,
+ "modify_time": "2019-09-22 17:53:17",
+ "last_release": "1.0.5",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/getlantern/download",
+ "star": 11404,
+ "commits": 21,
+ "modify_time": "2019-12-10 03:30:25",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/facert/awesome-spider",
+ "star": 11342,
+ "commits": 127,
+ "modify_time": "2019-10-31 06:02:31",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/oracle/graal",
+ "star": 11278,
+ "commits": 40762,
+ "modify_time": "2019-12-09 22:49:41",
+ "last_release": "vm-19.3.0",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/swisskyrepo/payloadsallthethings",
+ "star": 11200,
+ "commits": 561,
+ "modify_time": "2019-12-07 11:01:08",
+ "last_release": "2.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/selfteaching/the-craft-of-selfteaching",
+ "star": 11143,
+ "commits": 723,
+ "modify_time": "2019-10-18 02:35:53",
+ "last_release": "",
+ "lang": "Jupyter Notebook"
+ },
+ {
+ "link": "https://github.com/owasp/cheatsheetseries",
+ "star": 11110,
+ "commits": 714,
+ "modify_time": "2019-12-07 00:11:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bang590/jspatch",
+ "star": 11016,
+ "commits": 407,
+ "modify_time": "2018-04-22 07:02:28",
+ "last_release": "\n 1.1.3\n ",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/flipboard/flex",
+ "star": 10925,
+ "commits": 712,
+ "modify_time": "2019-12-09 21:34:20",
+ "last_release": "3.1.1",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/hacker0x01/hacker101",
+ "star": 10907,
+ "commits": 169,
+ "modify_time": "2019-10-22 16:51:48",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/enaqx/awesome-pentest",
+ "star": 10830,
+ "commits": 676,
+ "modify_time": "2019-11-26 19:45:32",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/dropbox/zxcvbn",
+ "star": 10780,
+ "commits": 379,
+ "modify_time": "2017-10-13 00:39:04",
+ "last_release": "v4.4.2",
+ "lang": "CoffeeScript"
+ },
+ {
+ "link": "https://github.com/konloch/bytecode-viewer",
+ "star": 10757,
+ "commits": 294,
+ "modify_time": "2019-11-22 19:06:49",
+ "last_release": "v2.9.22",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/ruanyf/weekly",
+ "star": 10318,
+ "commits": 160,
+ "modify_time": "2019-12-07 04:42:18",
+ "last_release": "\n issue-85\n ",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/goharbor/harbor",
+ "star": 10226,
+ "commits": 8159,
+ "modify_time": "2019-12-09 10:51:22",
+ "last_release": "v1.10.0-rc2",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/imthenachoman/how-to-secure-a-linux-server",
+ "star": 9830,
+ "commits": 160,
+ "modify_time": "2019-04-12 09:21:05",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/sherlock-project/sherlock",
+ "star": 9613,
+ "commits": 883,
+ "modify_time": "2019-12-08 13:30:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cnlh/nps",
+ "star": 9389,
+ "commits": 399,
+ "modify_time": "2019-12-09 13:33:42",
+ "last_release": "v0.25.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/postalhq/postal",
+ "star": 9358,
+ "commits": 233,
+ "modify_time": "2019-12-05 17:25:36",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/localtunnel/localtunnel",
+ "star": 9266,
+ "commits": 157,
+ "modify_time": "2019-09-16 14:50:28",
+ "last_release": "\n v2.0.0\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/ibotpeaches/apktool",
+ "star": 9229,
+ "commits": 1628,
+ "modify_time": "2019-11-29 23:16:06",
+ "last_release": "v2.4.1",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/icsharpcode/ilspy",
+ "star": 9185,
+ "commits": 5492,
+ "modify_time": "2019-12-10 00:26:11",
+ "last_release": "v6.0-preview1",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/valve/fingerprintjs2",
+ "star": 9148,
+ "commits": 440,
+ "modify_time": "2019-11-12 15:04:13",
+ "last_release": "2.1.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/lukesampson/scoop",
+ "star": 9069,
+ "commits": 9802,
+ "modify_time": "2019-12-01 11:27:29",
+ "last_release": "\n 2019-10-23\n ",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/vitalysim/awesome-hacking-resources",
+ "star": 9015,
+ "commits": 237,
+ "modify_time": "2019-10-08 18:43:30",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/rkt/rkt",
+ "star": 8854,
+ "commits": 5567,
+ "modify_time": "2019-06-05 17:27:00",
+ "last_release": "v1.30.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/gentilkiwi/mimikatz",
+ "star": 8739,
+ "commits": 242,
+ "modify_time": "2019-11-25 02:03:09",
+ "last_release": "2.2.0-20191125",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/android-hacker/virtualxposed",
+ "star": 8646,
+ "commits": 1545,
+ "modify_time": "2019-11-14 09:36:16",
+ "last_release": "0.18.0",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/microsoft/WSL",
+ "star": 8525,
+ "commits": 88,
+ "modify_time": "2019-10-28 16:55:23",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/233boy/v2ray",
+ "star": 8443,
+ "commits": 1,
+ "modify_time": "2019-05-15 11:23:57",
+ "last_release": "v3.05",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/wifiphisher/wifiphisher",
+ "star": 8424,
+ "commits": 772,
+ "modify_time": "2019-12-10 05:39:32",
+ "last_release": "v1.4",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/brannondorsey/wifi-cracking",
+ "star": 8420,
+ "commits": 39,
+ "modify_time": "2018-05-18 14:18:25",
+ "last_release": "v1.4",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/trimstray/the-practical-linux-hardening-guide",
+ "star": 8044,
+ "commits": 171,
+ "modify_time": "2019-12-02 21:25:58",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/facebook/chisel",
+ "star": 8002,
+ "commits": 437,
+ "modify_time": "2019-10-11 19:36:45",
+ "last_release": "1.8.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mailpile/mailpile",
+ "star": 7986,
+ "commits": 6263,
+ "modify_time": "2019-10-30 16:43:13",
+ "last_release": "1.0.0rc6",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cyfdecyf/cow",
+ "star": 7965,
+ "commits": 1059,
+ "modify_time": "2016-06-19 15:58:48",
+ "last_release": "0.9.8",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/shadowsocks/shadowsocks-ios",
+ "star": 7945,
+ "commits": 1,
+ "modify_time": "2015-08-22 03:22:18",
+ "last_release": "2.6.3",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/shiqiyu/libfacedetection",
+ "star": 7840,
+ "commits": 119,
+ "modify_time": "2019-12-06 03:13:17",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/gchq/cyberchef",
+ "star": 7731,
+ "commits": 2570,
+ "modify_time": "2019-12-09 13:51:52",
+ "last_release": "v9.11.12",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/git-lfs/git-lfs",
+ "star": 7712,
+ "commits": 7523,
+ "modify_time": "2019-12-09 15:30:09",
+ "last_release": "v2.9.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/java-decompiler/jd-gui",
+ "star": 7670,
+ "commits": 251,
+ "modify_time": "2019-11-17 18:09:22",
+ "last_release": "v1.6.5",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/threat9/routersploit",
+ "star": 7524,
+ "commits": 783,
+ "modify_time": "2019-11-12 21:12:05",
+ "last_release": "v3.4.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/snail007/goproxy",
+ "star": 7474,
+ "commits": 162,
+ "modify_time": "2019-12-03 07:42:15",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/shadowsocks/shadowsocks-qt5",
+ "star": 7412,
+ "commits": 688,
+ "modify_time": "2019-11-02 19:58:28",
+ "last_release": "v3.0.1",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/s0md3v/XSStrike",
+ "star": 7397,
+ "commits": 444,
+ "modify_time": "2019-10-31 13:10:14",
+ "last_release": "3.1.4",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lionsoul2014/ip2region",
+ "star": 7246,
+ "commits": 242,
+ "modify_time": "2019-11-23 03:21:45",
+ "last_release": "\n v2.1.0-release\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/teddysun/shadowsocks_install",
+ "star": 7186,
+ "commits": 425,
+ "modify_time": "2019-05-14 11:15:21",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/future-architect/vuls",
+ "star": 7017,
+ "commits": 954,
+ "modify_time": "2019-11-26 00:54:30",
+ "last_release": "\n v0.9.1\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/hashcat/hashcat",
+ "star": 6989,
+ "commits": 6485,
+ "modify_time": "2019-12-07 11:09:58",
+ "last_release": "v5.1.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/nats-io/nats-server",
+ "star": 6984,
+ "commits": 2378,
+ "modify_time": "2019-12-09 21:34:50",
+ "last_release": "v2.1.2",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/cs01/gdbgui",
+ "star": 6984,
+ "commits": 394,
+ "modify_time": "2019-10-08 01:17:31",
+ "last_release": "\n 0.13.2.0\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/greatfire/wiki",
+ "star": 6957,
+ "commits": 61048,
+ "modify_time": "2019-12-01 01:33:48",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/pxb1988/dex2jar",
+ "star": 6949,
+ "commits": 558,
+ "modify_time": "2019-09-05 07:21:28",
+ "last_release": "2.1-nightly-28",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/sqshq/sampler",
+ "star": 6869,
+ "commits": 245,
+ "modify_time": "2019-10-23 15:46:11",
+ "last_release": "v1.0.3",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/awslabs/git-secrets",
+ "star": 6812,
+ "commits": 100,
+ "modify_time": "2019-11-22 17:59:05",
+ "last_release": "\n 1.3.0\n ",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/amitshekhariitbhu/android-debug-database",
+ "star": 6732,
+ "commits": 320,
+ "modify_time": "2019-03-07 09:58:09",
+ "last_release": "v1.0.6",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/zaproxy/zaproxy",
+ "star": 6683,
+ "commits": 7150,
+ "modify_time": "2019-12-09 08:42:04",
+ "last_release": "w2019-12-09",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/alibaba/andfix",
+ "star": 6682,
+ "commits": 51,
+ "modify_time": "2016-12-26 03:11:42",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/keepassxreboot/keepassxc",
+ "star": 6668,
+ "commits": 3510,
+ "modify_time": "2019-11-29 18:45:14",
+ "last_release": "2.5.1",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/networkx/networkx",
+ "star": 6595,
+ "commits": 5992,
+ "modify_time": "2019-12-08 16:15:16",
+ "last_release": "networkx-2.4",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/shadowsocks/shadowsocks-go",
+ "star": 6555,
+ "commits": 369,
+ "modify_time": "2019-06-14 08:39:52",
+ "last_release": "1.2.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/h2y/shadowrocket-adblock-rules",
+ "star": 6518,
+ "commits": 186,
+ "modify_time": "2019-11-05 10:35:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cisofy/lynis",
+ "star": 6462,
+ "commits": 2691,
+ "modify_time": "2019-12-06 14:55:59",
+ "last_release": "2.7.5",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/bettercap/bettercap",
+ "star": 6451,
+ "commits": 1815,
+ "modify_time": "2019-11-25 10:59:04",
+ "last_release": "v2.26.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/open-power-workgroup/hospital",
+ "star": 6448,
+ "commits": 679,
+ "modify_time": "2019-03-28 07:22:50",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/seatgeek/fuzzywuzzy",
+ "star": 6310,
+ "commits": 375,
+ "modify_time": "2019-11-12 17:06:38",
+ "last_release": "\n 0.17.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/johnno1962/injectionforxcode",
+ "star": 6197,
+ "commits": 366,
+ "modify_time": "2019-10-02 05:34:00",
+ "last_release": "\n v8.1\n ",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/PowerShellMafia/PowerSploit",
+ "star": 6194,
+ "commits": 476,
+ "modify_time": "2016-12-12 19:09:24",
+ "last_release": "v3.0.0",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/yandex/gixy",
+ "star": 6192,
+ "commits": 125,
+ "modify_time": "2019-10-18 11:29:41",
+ "last_release": "v0.1.20",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rmerl/asuswrt-merlin",
+ "star": 6187,
+ "commits": 5092,
+ "modify_time": "2019-06-22 05:23:50",
+ "last_release": "\n 380.70\n ",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/avwo/whistle",
+ "star": 6146,
+ "commits": 8913,
+ "modify_time": "2019-12-10 03:10:13",
+ "last_release": "\n v2.3.7\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/facebook/fbctf",
+ "star": 6137,
+ "commits": 632,
+ "modify_time": "2018-09-14 18:51:58",
+ "last_release": "",
+ "lang": "Hack"
+ },
+ {
+ "link": "https://github.com/schollz/howmanypeoplearearound",
+ "star": 6128,
+ "commits": 122,
+ "modify_time": "2019-03-11 14:42:11",
+ "last_release": "v0.5.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/usefathom/fathom",
+ "star": 6092,
+ "commits": 677,
+ "modify_time": "2019-11-26 22:48:20",
+ "last_release": "v1.2.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/quay/clair",
+ "star": 6074,
+ "commits": 987,
+ "modify_time": "2019-11-25 15:55:54",
+ "last_release": "v2.1.2",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/quay/clair",
+ "star": 6074,
+ "commits": 987,
+ "modify_time": "2019-11-25 15:55:54",
+ "last_release": "v2.1.2",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/qihoo360/replugin",
+ "star": 6073,
+ "commits": 564,
+ "modify_time": "2019-07-26 09:39:26",
+ "last_release": "v2.3.3",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/jgamblin/mirai-source-code",
+ "star": 6070,
+ "commits": 8,
+ "modify_time": "2017-07-15 21:54:56",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cyrus-and/gdb-dashboard",
+ "star": 6021,
+ "commits": 357,
+ "modify_time": "2019-12-08 17:28:45",
+ "last_release": "\n v0.11.2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/berzerk0/probable-wordlists",
+ "star": 6017,
+ "commits": 269,
+ "modify_time": "2019-12-04 22:50:46",
+ "last_release": "v2.0",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/google/android-classyshark",
+ "star": 5972,
+ "commits": 607,
+ "modify_time": "2019-10-16 11:03:14",
+ "last_release": "8.2",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/gallopsled/pwntools",
+ "star": 5968,
+ "commits": 3557,
+ "modify_time": "2019-12-09 20:58:15",
+ "last_release": "4.0.0beta0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/haotian-wang/google-access-helper",
+ "star": 5942,
+ "commits": 34,
+ "modify_time": "2019-06-09 07:42:00",
+ "last_release": "v2.3.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/asciimoo/searx",
+ "star": 5888,
+ "commits": 2726,
+ "modify_time": "2019-12-09 17:10:03",
+ "last_release": "v0.15.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/radareorg/cutter",
+ "star": 5879,
+ "commits": 1787,
+ "modify_time": "2019-12-10 07:34:21",
+ "last_release": "v1.9.0",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/nasa-jpl/open-source-rover",
+ "star": 5871,
+ "commits": 346,
+ "modify_time": "2019-10-03 18:35:43",
+ "last_release": "",
+ "lang": "Gnuplot"
+ },
+ {
+ "link": "https://github.com/sindresorhus/fkill-cli",
+ "star": 5815,
+ "commits": 79,
+ "modify_time": "2019-05-23 18:43:32",
+ "last_release": "\n v5.2.0\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/qinyuhang/shadowsocksx-ng-r",
+ "star": 5773,
+ "commits": 310,
+ "modify_time": "2018-06-20 04:01:16",
+ "last_release": "1.4.4-r8",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/square/ponydebugger",
+ "star": 5766,
+ "commits": 294,
+ "modify_time": "2019-09-13 17:01:11",
+ "last_release": "v0.4.0",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/spacehuhn/esp8266_deauther",
+ "star": 5762,
+ "commits": 602,
+ "modify_time": "2019-10-19 21:22:22",
+ "last_release": "v2.1.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/newsapps/beeswithmachineguns",
+ "star": 5742,
+ "commits": 249,
+ "modify_time": "2017-12-20 16:56:18",
+ "last_release": "\n 0.1.4\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xoreaxeaxeax/movfuscator",
+ "star": 5740,
+ "commits": 45,
+ "modify_time": "2019-04-13 19:58:15",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/swagger-api/swagger-editor",
+ "star": 5694,
+ "commits": 3150,
+ "modify_time": "2019-12-03 03:44:18",
+ "last_release": "v3.7.1",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/casbin/casbin",
+ "star": 5693,
+ "commits": 645,
+ "modify_time": "2019-12-10 01:27:58",
+ "last_release": "v2.1.2",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/rofl0r/proxychains-ng",
+ "star": 5626,
+ "commits": 293,
+ "modify_time": "2019-11-05 03:39:46",
+ "last_release": "v4.14",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/presidentbeef/brakeman",
+ "star": 5593,
+ "commits": 3464,
+ "modify_time": "2019-12-01 16:15:56",
+ "last_release": "v4.7.2",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/max2max/freess",
+ "star": 5565,
+ "commits": 102,
+ "modify_time": "2019-11-13 12:30:21",
+ "last_release": "",
+ "lang": "Roff"
+ },
+ {
+ "link": "https://github.com/rshipp/awesome-malware-analysis",
+ "star": 5540,
+ "commits": 637,
+ "modify_time": "2019-11-22 03:30:56",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/carpedm20/awesome-hacking",
+ "star": 5476,
+ "commits": 129,
+ "modify_time": "2019-04-06 07:28:33",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/axi0mx/ipwndfu",
+ "star": 5417,
+ "commits": 76,
+ "modify_time": "2019-10-01 21:04:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/autumnai/leaf",
+ "star": 5413,
+ "commits": 164,
+ "modify_time": "2018-01-14 18:40:04",
+ "last_release": "\n 0.2.1\n ",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/pwn20wndstuff/undecimus",
+ "star": 5371,
+ "commits": 751,
+ "modify_time": "2019-07-12 19:49:59",
+ "last_release": "v3.8.0%b1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/mlflow/mlflow",
+ "star": 5371,
+ "commits": 1099,
+ "modify_time": "2019-12-10 00:25:10",
+ "last_release": "v1.4.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zricethezav/gitleaks",
+ "star": 5324,
+ "commits": 488,
+ "modify_time": "2019-12-08 00:33:54",
+ "last_release": "v3.0.3",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/usarmyresearchlab/dshell",
+ "star": 5205,
+ "commits": 142,
+ "modify_time": "2019-05-22 22:16:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ytisf/thezoo",
+ "star": 5196,
+ "commits": 200,
+ "modify_time": "2019-09-04 08:46:41",
+ "last_release": "v0.60",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ReFirmLabs/binwalk",
+ "star": 5192,
+ "commits": 1121,
+ "modify_time": "2019-11-08 16:04:40",
+ "last_release": "v2.2.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vulhub/vulhub",
+ "star": 5167,
+ "commits": 1235,
+ "modify_time": "2019-11-21 18:24:18",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/samyk/poisontap",
+ "star": 5167,
+ "commits": 41,
+ "modify_time": "2018-11-26 16:50:43",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/tennc/webshell",
+ "star": 5148,
+ "commits": 440,
+ "modify_time": "2019-12-06 10:33:51",
+ "last_release": "v-2017-04-19",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/avast/retdec",
+ "star": 5123,
+ "commits": 1381,
+ "modify_time": "2019-11-21 13:31:09",
+ "last_release": "v3.3",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/MacPass/MacPass",
+ "star": 5118,
+ "commits": 2294,
+ "modify_time": "2019-11-27 11:02:45",
+ "last_release": "continuous",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/n1nj4sec/pupy",
+ "star": 5118,
+ "commits": 2993,
+ "modify_time": "2019-08-22 13:49:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/DNSCrypt/dnscrypt-proxy",
+ "star": 5089,
+ "commits": 1199,
+ "modify_time": "2019-12-09 23:33:59",
+ "last_release": "2.0.35",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/sbilly/awesome-security",
+ "star": 5082,
+ "commits": 262,
+ "modify_time": "2019-10-12 11:58:54",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/stackexchange/blackbox",
+ "star": 5065,
+ "commits": 489,
+ "modify_time": "2019-10-02 13:01:33",
+ "last_release": "\n v1.20181219\n ",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/meituan-dianping/walle",
+ "star": 5059,
+ "commits": 8,
+ "modify_time": "2019-11-06 03:59:26",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/shadowsocksr-backup/shadowsocksr",
+ "star": 5054,
+ "commits": 719,
+ "modify_time": "2015-11-02 09:24:21",
+ "last_release": "\n 3.1.2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/owasp/owasp-mstg",
+ "star": 5042,
+ "commits": 6243,
+ "modify_time": "2019-12-10 08:22:44",
+ "last_release": "1.1.3-excel",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/EmpireProject/Empire",
+ "star": 5037,
+ "commits": 1509,
+ "modify_time": "2019-08-01 01:57:47",
+ "last_release": "2.5",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/MobSF/Mobile-Security-Framework-MobSF",
+ "star": 5021,
+ "commits": 1269,
+ "modify_time": "2019-12-09 19:43:38",
+ "last_release": "v2.0.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/coatisoftware/sourcetrail",
+ "star": 5005,
+ "commits": 2550,
+ "modify_time": "2019-12-09 16:51:18",
+ "last_release": "\n 2020.1\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/hq450/fancyss",
+ "star": 4996,
+ "commits": 403,
+ "modify_time": "2019-12-10 07:00:24",
+ "last_release": "",
+ "lang": "ASP"
+ },
+ {
+ "link": "https://github.com/inlets/inlets",
+ "star": 4996,
+ "commits": 199,
+ "modify_time": "2019-12-06 09:07:24",
+ "last_release": "2.6.3",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/snare/voltron",
+ "star": 4994,
+ "commits": 604,
+ "modify_time": "2019-11-08 17:49:02",
+ "last_release": "v0.1.7",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/trustedsec/social-engineer-toolkit",
+ "star": 4953,
+ "commits": 15694,
+ "modify_time": "2019-11-20 00:57:51",
+ "last_release": "\n 8.0.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jigsaw-code/outline-client",
+ "star": 4920,
+ "commits": 565,
+ "modify_time": "2019-12-09 22:25:21",
+ "last_release": "windows-1.3.0",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/yinghuocho/firefly-proxy",
+ "star": 4913,
+ "commits": 39,
+ "modify_time": "2018-11-14 09:18:46",
+ "last_release": "0.9.8",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/denisidoro/navi",
+ "star": 4909,
+ "commits": 177,
+ "modify_time": "2019-12-09 14:08:24",
+ "last_release": "v0.16.0",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/bitly/oauth2_proxy",
+ "star": 4897,
+ "commits": 386,
+ "modify_time": "2019-01-23 22:41:20",
+ "last_release": "v2.2",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/sharkdp/hexyl",
+ "star": 4883,
+ "commits": 106,
+ "modify_time": "2019-10-08 18:52:54",
+ "last_release": "v0.6.0",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/guardianproject/haven",
+ "star": 4881,
+ "commits": 868,
+ "modify_time": "2019-12-07 11:06:36",
+ "last_release": "0.2.0-RC-1",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/yanue/v2rayu",
+ "star": 4869,
+ "commits": 246,
+ "modify_time": "2019-12-09 15:42:54",
+ "last_release": "1.5.1",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/alessandroz/lazagne",
+ "star": 4867,
+ "commits": 659,
+ "modify_time": "2019-12-02 10:03:32",
+ "last_release": "2.4.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gcla/termshark",
+ "star": 4847,
+ "commits": 377,
+ "modify_time": "2019-12-09 03:34:03",
+ "last_release": "v2.0.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/offensive-security/exploitdb",
+ "star": 4841,
+ "commits": 1987,
+ "modify_time": "2019-12-10 05:01:48",
+ "last_release": "\n 2019-12-10\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/10se1ucgo/disablewintracking",
+ "star": 4803,
+ "commits": 251,
+ "modify_time": "2019-04-26 14:44:45",
+ "last_release": "3.2.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/google/oss-fuzz",
+ "star": 4782,
+ "commits": 3700,
+ "modify_time": "2019-12-09 17:58:39",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/facebook/redex",
+ "star": 4761,
+ "commits": 3275,
+ "modify_time": "2019-12-09 23:55:14",
+ "last_release": "v2017.10.31",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/PaddlePaddle/Paddle-Lite",
+ "star": 4724,
+ "commits": 3771,
+ "modify_time": "2019-12-10 06:10:03",
+ "last_release": "v2.1.0",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/manisso/fsociety",
+ "star": 4691,
+ "commits": 238,
+ "modify_time": "2019-12-02 16:24:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/secdev/scapy",
+ "star": 4639,
+ "commits": 4771,
+ "modify_time": "2019-12-09 12:11:09",
+ "last_release": "v2.4.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/google/ios-webkit-debug-proxy",
+ "star": 4638,
+ "commits": 193,
+ "modify_time": "2019-11-24 07:02:12",
+ "last_release": "v1.8.5",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/powershell/win32-openssh",
+ "star": 4637,
+ "commits": 583,
+ "modify_time": "2019-06-23 21:00:43",
+ "last_release": "v8.0.0.0p1-Beta",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/beefproject/beef",
+ "star": 4633,
+ "commits": 3344,
+ "modify_time": "2019-12-10 03:44:27",
+ "last_release": "\n beef-0.4.7.3\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/ginuerzh/gost",
+ "star": 4615,
+ "commits": 472,
+ "modify_time": "2019-11-30 11:19:44",
+ "last_release": "v2.8.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/ecthros/uncaptcha2",
+ "star": 4589,
+ "commits": 7,
+ "modify_time": "2019-01-18 18:38:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/upx/upx",
+ "star": 4583,
+ "commits": 3164,
+ "modify_time": "2018-08-26 02:58:09",
+ "last_release": "v3.95",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/mozilla/rr",
+ "star": 4575,
+ "commits": 4913,
+ "modify_time": "2019-12-08 07:09:35",
+ "last_release": "5.2.0",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/wpscanteam/wpscan",
+ "star": 4543,
+ "commits": 2711,
+ "modify_time": "2019-12-08 10:34:18",
+ "last_release": "v3.7.5",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/jedisct1/dsvpn",
+ "star": 4529,
+ "commits": 265,
+ "modify_time": "2019-12-05 23:35:15",
+ "last_release": "0.1.4",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/apis-guru/graphql-voyager",
+ "star": 4498,
+ "commits": 510,
+ "modify_time": "2019-12-05 16:46:11",
+ "last_release": "\n v1.0.0-rc.27\n ",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/jopohl/urh",
+ "star": 4459,
+ "commits": 2761,
+ "modify_time": "2019-12-03 17:23:16",
+ "last_release": "v2.8.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wallix/awless",
+ "star": 4458,
+ "commits": 1340,
+ "modify_time": "2018-12-10 13:33:30",
+ "last_release": "v0.1.11",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/dragonflyoss/Dragonfly",
+ "star": 4449,
+ "commits": 1412,
+ "modify_time": "2019-12-09 01:35:02",
+ "last_release": "v1.0.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/frida/frida",
+ "star": 4446,
+ "commits": 2726,
+ "modify_time": "2019-12-10 04:53:27",
+ "last_release": "12.7.26",
+ "lang": "Makefile"
+ },
+ {
+ "link": "https://github.com/jofpin/trape",
+ "star": 4443,
+ "commits": 108,
+ "modify_time": "2019-11-17 20:59:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zardus/ctf-tools",
+ "star": 4411,
+ "commits": 656,
+ "modify_time": "2019-10-23 06:45:55",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/signalapp/Signal-iOS",
+ "star": 4359,
+ "commits": 15454,
+ "modify_time": "2019-12-06 00:43:59",
+ "last_release": "",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/cure53/dompurify",
+ "star": 4346,
+ "commits": 1069,
+ "modify_time": "2019-11-11 12:28:30",
+ "last_release": "2.0.7",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/lennylxx/ipv6-hosts",
+ "star": 4344,
+ "commits": 545,
+ "modify_time": "2018-12-26 14:38:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/diafygi/acme-tiny",
+ "star": 4313,
+ "commits": 151,
+ "modify_time": "2019-07-07 13:27:06",
+ "last_release": "\n 4.1.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tensorflow/cleverhans",
+ "star": 4283,
+ "commits": 2978,
+ "modify_time": "2019-12-04 20:16:44",
+ "last_release": "v.3.0.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ashishb/android-security-awesome",
+ "star": 4280,
+ "commits": 285,
+ "modify_time": "2019-11-02 01:42:46",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/timvisee/ffsend",
+ "star": 4261,
+ "commits": 736,
+ "modify_time": "2019-12-06 14:39:33",
+ "last_release": "v0.2.57",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/butterproject/butter-desktop",
+ "star": 4258,
+ "commits": 195,
+ "modify_time": "2019-01-01 22:19:20",
+ "last_release": "v0.3.9-flatpak0-a",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/imeiji/shadowsocks_install",
+ "star": 4244,
+ "commits": 44,
+ "modify_time": "2018-03-06 15:58:45",
+ "last_release": "0.13",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/dxa4481/trufflehog",
+ "star": 4241,
+ "commits": 162,
+ "modify_time": "2019-08-25 22:18:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/alonemonkey/monkeydev",
+ "star": 4215,
+ "commits": 198,
+ "modify_time": "2019-05-08 15:35:58",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/gophish/gophish",
+ "star": 4211,
+ "commits": 680,
+ "modify_time": "2019-12-03 05:00:11",
+ "last_release": "v0.8.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/qazbnm456/awesome-web-security",
+ "star": 4205,
+ "commits": 372,
+ "modify_time": "2019-11-30 17:19:41",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/michenriksen/gitrob",
+ "star": 4204,
+ "commits": 7,
+ "modify_time": "2018-07-05 11:50:09",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/evilsocket/opensnitch",
+ "star": 4202,
+ "commits": 379,
+ "modify_time": "2019-10-09 14:05:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/openmined/pysyft",
+ "star": 4198,
+ "commits": 5441,
+ "modify_time": "2019-12-09 20:24:55",
+ "last_release": "\n 0.1.29a\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/we5ter/scanners-box",
+ "star": 4190,
+ "commits": 714,
+ "modify_time": "2019-11-29 09:05:02",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/forter/security-101-for-saas-startups",
+ "star": 4171,
+ "commits": 70,
+ "modify_time": "2017-10-15 08:13:32",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/kdzwinel/betwixt",
+ "star": 4149,
+ "commits": 86,
+ "modify_time": "2018-12-21 13:46:04",
+ "last_release": "1.6.1",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/spring-projects/spring-security",
+ "star": 4131,
+ "commits": 8277,
+ "modify_time": "2019-12-06 16:16:10",
+ "last_release": "5.2.1.RELEASE",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/spiderclub/haipproxy",
+ "star": 4120,
+ "commits": 254,
+ "modify_time": "2019-07-16 09:03:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/aboul3la/sublist3r",
+ "star": 4120,
+ "commits": 133,
+ "modify_time": "2019-10-22 09:07:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xoreaxeaxeax/sandsifter",
+ "star": 4096,
+ "commits": 2,
+ "modify_time": "2017-09-06 03:21:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wtsxdev/reverse-engineering",
+ "star": 4092,
+ "commits": 26,
+ "modify_time": "2019-03-07 20:17:22",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/sigalor/whatsapp-web-reveng",
+ "star": 4046,
+ "commits": 123,
+ "modify_time": "2019-11-01 02:07:29",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/jesusfreke/smali",
+ "star": 4045,
+ "commits": 1873,
+ "modify_time": "2019-10-02 23:37:23",
+ "last_release": "\n v2.3.4\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/google/clusterfuzz",
+ "star": 4044,
+ "commits": 987,
+ "modify_time": "2019-12-10 00:29:53",
+ "last_release": "v1.7.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/drduh/yubikey-guide",
+ "star": 4022,
+ "commits": 231,
+ "modify_time": "2019-11-20 01:28:45",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/cuckoosandbox/cuckoo",
+ "star": 4021,
+ "commits": 8051,
+ "modify_time": "2019-09-18 07:51:40",
+ "last_release": "2.0.6",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/travist/jsencrypt",
+ "star": 4000,
+ "commits": 167,
+ "modify_time": "2018-06-28 04:29:49",
+ "last_release": "\n v3.0.0-rc.1\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/nullarray/autosploit",
+ "star": 3967,
+ "commits": 279,
+ "modify_time": "2019-09-04 20:17:39",
+ "last_release": "v4.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dexidp/dex",
+ "star": 3961,
+ "commits": 1096,
+ "modify_time": "2019-12-06 14:53:00",
+ "last_release": "v2.21.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/apsdehal/awesome-ctf",
+ "star": 3953,
+ "commits": 215,
+ "modify_time": "2019-10-15 00:06:58",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/apsdehal/awesome-ctf",
+ "star": 3953,
+ "commits": 215,
+ "modify_time": "2019-10-15 00:06:58",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/angr/angr",
+ "star": 3937,
+ "commits": 9968,
+ "modify_time": "2019-12-09 01:54:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/paragonie/awesome-appsec",
+ "star": 3935,
+ "commits": 118,
+ "modify_time": "2019-08-13 17:11:46",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/eranyanay/1m-go-websockets",
+ "star": 3933,
+ "commits": 7,
+ "modify_time": "2019-04-24 04:27:11",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/aquynh/capstone",
+ "star": 3923,
+ "commits": 4101,
+ "modify_time": "2019-11-05 03:48:06",
+ "last_release": "4.0.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/shadowsocksr-backup/shadowsocksr-csharp",
+ "star": 3920,
+ "commits": 736,
+ "modify_time": "2017-07-27 07:54:11",
+ "last_release": "4.7.0",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/svenstaro/genact",
+ "star": 3915,
+ "commits": 311,
+ "modify_time": "2019-11-25 16:18:00",
+ "last_release": "0.7.0",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/baldurk/renderdoc",
+ "star": 3893,
+ "commits": 9810,
+ "modify_time": "2019-12-09 16:42:09",
+ "last_release": "v1.5",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/fuzzdb-project/fuzzdb",
+ "star": 3878,
+ "commits": 471,
+ "modify_time": "2019-10-15 20:37:11",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/SecureAuthCorp/impacket",
+ "star": 3869,
+ "commits": 2955,
+ "modify_time": "2019-12-09 17:29:08",
+ "last_release": "impacket_0_9_20",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/shadowsocks/shadowsocks-manager",
+ "star": 3848,
+ "commits": 2238,
+ "modify_time": "2019-12-04 14:54:38",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/hq450/fancyss_history_package",
+ "star": 3845,
+ "commits": 102,
+ "modify_time": "2019-12-10 04:01:48",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/sveinbjornt/sloth",
+ "star": 3838,
+ "commits": 216,
+ "modify_time": "2019-10-21 21:28:46",
+ "last_release": "2.8.1",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/iosre/iosappreverseengineering",
+ "star": 3831,
+ "commits": 2,
+ "modify_time": "2015-09-17 02:16:04",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/jivoi/awesome-osint",
+ "star": 3813,
+ "commits": 241,
+ "modify_time": "2019-11-10 10:56:43",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/shadowsocksr-backup/shadowsocks-rss",
+ "star": 3799,
+ "commits": 1,
+ "modify_time": "2015-06-04 09:31:05",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/longld/peda",
+ "star": 3767,
+ "commits": 103,
+ "modify_time": "2019-02-10 01:35:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/paralax/awesome-honeypots",
+ "star": 3763,
+ "commits": 290,
+ "modify_time": "2019-10-18 11:58:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ethicalhack3r/DVWA",
+ "star": 3755,
+ "commits": 272,
+ "modify_time": "2019-09-29 10:44:25",
+ "last_release": "v1.9",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/microsoft/ethr",
+ "star": 3752,
+ "commits": 87,
+ "modify_time": "2019-10-19 02:41:46",
+ "last_release": "v0.2.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/hashicorp/consul-template",
+ "star": 3736,
+ "commits": 1883,
+ "modify_time": "2019-12-03 22:49:14",
+ "last_release": "\n v0.23.0\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/iaik/meltdown",
+ "star": 3733,
+ "commits": 84,
+ "modify_time": "2019-10-26 21:18:16",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/malwaredllc/byob",
+ "star": 3730,
+ "commits": 413,
+ "modify_time": "2019-08-22 15:13:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jjqqkk/chromium",
+ "star": 3719,
+ "commits": 87,
+ "modify_time": "2019-12-06 06:51:02",
+ "last_release": "80.0.3983.2",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/atmosphere-nx/atmosphere",
+ "star": 3713,
+ "commits": 1800,
+ "modify_time": "2019-12-10 06:44:10",
+ "last_release": "0.10.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/samyk/evercookie",
+ "star": 3684,
+ "commits": 170,
+ "modify_time": "2017-11-13 03:39:40",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/hamukazu/lets-get-arrested",
+ "star": 3682,
+ "commits": 169,
+ "modify_time": "2019-12-01 23:23:25",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/lesspass/lesspass",
+ "star": 3670,
+ "commits": 2000,
+ "modify_time": "2019-12-10 07:12:12",
+ "last_release": "\n 9.1.4\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/0xd4d/de4dot",
+ "star": 3668,
+ "commits": 2080,
+ "modify_time": "2019-12-03 19:30:05",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/misterch0c/shadowbroker",
+ "star": 3667,
+ "commits": 24,
+ "modify_time": "2018-07-06 11:56:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/secwiki/windows-kernel-exploits",
+ "star": 3666,
+ "commits": 275,
+ "modify_time": "2019-07-29 06:26:37",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/facebook/fishhook",
+ "star": 3663,
+ "commits": 36,
+ "modify_time": "2019-08-23 15:47:32",
+ "last_release": "\n 0.2\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/acl4ssr/acl4ssr",
+ "star": 3652,
+ "commits": 573,
+ "modify_time": "2019-12-08 07:21:25",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/qiyeboy/ipproxypool",
+ "star": 3647,
+ "commits": 119,
+ "modify_time": "2017-12-25 02:51:56",
+ "last_release": "1.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/javascript-obfuscator/javascript-obfuscator",
+ "star": 3622,
+ "commits": 1409,
+ "modify_time": "2019-12-05 20:50:28",
+ "last_release": "0.18.6",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/consensys/smart-contract-best-practices",
+ "star": 3621,
+ "commits": 569,
+ "modify_time": "2019-12-05 00:57:52",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/brandonlw/Psychson",
+ "star": 3619,
+ "commits": 15,
+ "modify_time": "2014-10-05 16:49:04",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/ffay/lanproxy",
+ "star": 3611,
+ "commits": 63,
+ "modify_time": "2019-10-18 16:03:44",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/BloodHoundAD/BloodHound",
+ "star": 3604,
+ "commits": 699,
+ "modify_time": "2019-12-03 21:20:53",
+ "last_release": "2.2.1",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/anbox/anbox",
+ "star": 3598,
+ "commits": 1126,
+ "modify_time": "2019-11-15 21:55:51",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/nummer/destroy-windows-10-spying",
+ "star": 3597,
+ "commits": null,
+ "modify_time": "2018-06-13 18:38:10",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/x0rz/eqgrp",
+ "star": 3595,
+ "commits": 33,
+ "modify_time": "2017-04-12 09:11:10",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/drwetter/testssl.sh",
+ "star": 3583,
+ "commits": 3118,
+ "modify_time": "2019-12-09 10:04:17",
+ "last_release": "3.0rc5",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/nmap/nmap",
+ "star": 3580,
+ "commits": 12008,
+ "modify_time": "2019-12-06 23:16:43",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cheat-engine/cheat-engine",
+ "star": 3562,
+ "commits": 4495,
+ "modify_time": "2019-12-06 18:44:04",
+ "last_release": "7.0",
+ "lang": "Pascal"
+ },
+ {
+ "link": "https://github.com/johnmyleswhite/ml_for_hackers",
+ "star": 3542,
+ "commits": 88,
+ "modify_time": "2013-12-13 17:12:49",
+ "last_release": "",
+ "lang": "R"
+ },
+ {
+ "link": "https://github.com/blacckhathaceekr/pentesting-bible",
+ "star": 3540,
+ "commits": 184,
+ "modify_time": "2019-12-05 23:41:57",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/chengr28/revokechinacerts",
+ "star": 3538,
+ "commits": null,
+ "modify_time": "2019-08-03 15:56:28",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/tencent/tencentos-tiny",
+ "star": 3533,
+ "commits": 265,
+ "modify_time": "2019-11-28 03:12:16",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hak5darren/usb-rubber-ducky",
+ "star": 3514,
+ "commits": 24,
+ "modify_time": "2016-12-07 20:31:37",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/aol/moloch",
+ "star": 3510,
+ "commits": 3365,
+ "modify_time": "2019-12-09 23:56:46",
+ "last_release": "\n v2.1.1\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/fanpei91/torsniff",
+ "star": 3501,
+ "commits": 157,
+ "modify_time": "2019-04-27 04:58:55",
+ "last_release": "v0.1.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/fanpei91/torsniff",
+ "star": 3501,
+ "commits": 157,
+ "modify_time": "2019-04-27 04:58:55",
+ "last_release": "v0.1.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/rpisec/mbe",
+ "star": 3493,
+ "commits": 31,
+ "modify_time": "2019-03-22 02:13:05",
+ "last_release": "v1.1_release",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hanc00l/wooyun_public",
+ "star": 3485,
+ "commits": 60,
+ "modify_time": "2019-07-17 00:13:31",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/cyan4973/xxhash",
+ "star": 3481,
+ "commits": 721,
+ "modify_time": "2019-12-04 00:44:41",
+ "last_release": "v0.7.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/trojan-gfw/trojan",
+ "star": 3471,
+ "commits": 402,
+ "modify_time": "2019-10-09 01:07:01",
+ "last_release": "v1.13.0",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/shellphish/how2heap",
+ "star": 3442,
+ "commits": 208,
+ "modify_time": "2019-12-02 18:44:36",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/meituan-dianping/robust",
+ "star": 3442,
+ "commits": 243,
+ "modify_time": "2019-12-04 02:40:07",
+ "last_release": "0.4.87",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/sullo/nikto",
+ "star": 3441,
+ "commits": 1214,
+ "modify_time": "2019-11-26 15:17:18",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/mikebrady/shairport-sync",
+ "star": 3419,
+ "commits": 3883,
+ "modify_time": "2019-12-02 18:15:05",
+ "last_release": "3.3.5",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/icodesign/Potatso",
+ "star": 3412,
+ "commits": 11,
+ "modify_time": "2019-11-15 01:42:43",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/jpillora/chisel",
+ "star": 3410,
+ "commits": 94,
+ "modify_time": "2019-07-24 23:21:13",
+ "last_release": "\n 1.3.2\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/samratashok/nishang",
+ "star": 3408,
+ "commits": 332,
+ "modify_time": "2019-11-18 03:57:40",
+ "last_release": "\n 0.7.6\n ",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/shadowsocksrr/shadowsocks-rss",
+ "star": 3397,
+ "commits": 17,
+ "modify_time": "2017-08-10 05:29:44",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/jivoi/awesome-ml-for-cybersecurity",
+ "star": 3344,
+ "commits": 109,
+ "modify_time": "2019-12-10 07:55:40",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/screetsec/thefatrat",
+ "star": 3343,
+ "commits": 682,
+ "modify_time": "2019-12-05 16:00:48",
+ "last_release": "1.9.7",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/wangyu-/udp2raw-tunnel",
+ "star": 3340,
+ "commits": 682,
+ "modify_time": "2019-07-16 06:18:44",
+ "last_release": "20190716.test.0",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/anankke/sspanel-uim",
+ "star": 3334,
+ "commits": 1797,
+ "modify_time": "2019-12-01 21:14:39",
+ "last_release": "2019Sep",
+ "lang": "Smarty"
+ },
+ {
+ "link": "https://github.com/google/grr",
+ "star": 3331,
+ "commits": 1247,
+ "modify_time": "2019-11-26 14:08:37",
+ "last_release": "v3.3.0.8",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/stamparm/maltrail",
+ "star": 3330,
+ "commits": 18010,
+ "modify_time": "2019-12-09 16:10:23",
+ "last_release": "0.16",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/scanate/ethlist",
+ "star": 3319,
+ "commits": 134,
+ "modify_time": "2018-03-31 23:16:09",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/vanhauser-thc/thc-hydra",
+ "star": 3303,
+ "commits": 622,
+ "modify_time": "2019-11-20 11:13:14",
+ "last_release": "v9.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/yagiz/bagel",
+ "star": 3301,
+ "commits": 160,
+ "modify_time": "2019-10-02 09:54:57",
+ "last_release": "1.3.2",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/fireice-uk/xmr-stak",
+ "star": 3298,
+ "commits": 1457,
+ "modify_time": "2019-12-02 19:22:44",
+ "last_release": "2.10.8",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/microsoft/windows-driver-samples",
+ "star": 3285,
+ "commits": 411,
+ "modify_time": "2019-12-04 17:56:11",
+ "last_release": "104069",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/virustotal/yara",
+ "star": 3278,
+ "commits": 2254,
+ "modify_time": "2019-12-05 21:05:13",
+ "last_release": "v3.11.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/nbs-system/naxsi",
+ "star": 3276,
+ "commits": 722,
+ "modify_time": "2019-09-16 08:55:54",
+ "last_release": "0.56",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/oldmanpushcart/greys-anatomy",
+ "star": 3263,
+ "commits": 653,
+ "modify_time": "2019-12-02 09:50:58",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/volatilityfoundation/volatility",
+ "star": 3262,
+ "commits": 2805,
+ "modify_time": "2019-10-08 15:20:03",
+ "last_release": "\n 2.6.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/toniblyx/my-arsenal-of-aws-security-tools",
+ "star": 3260,
+ "commits": 104,
+ "modify_time": "2019-12-04 09:17:22",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/google/lmctfy",
+ "star": 3260,
+ "commits": 77,
+ "modify_time": "2015-05-28 16:44:05",
+ "last_release": "\n 0.5.0\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/sindresorhus/speed-test",
+ "star": 3259,
+ "commits": 41,
+ "modify_time": "2019-05-28 06:11:14",
+ "last_release": "v2.1.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/objective-see/lulu",
+ "star": 3255,
+ "commits": 131,
+ "modify_time": "2019-12-07 21:08:11",
+ "last_release": "v1.2.1",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/koenkk/zigbee2mqtt",
+ "star": 3247,
+ "commits": 1313,
+ "modify_time": "2019-11-12 17:47:59",
+ "last_release": "1.7.1",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/laramies/theharvester",
+ "star": 3242,
+ "commits": 1225,
+ "modify_time": "2019-11-26 04:18:50",
+ "last_release": "V3.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jigsaw-code/outline-server",
+ "star": 3238,
+ "commits": 573,
+ "modify_time": "2019-12-09 18:05:15",
+ "last_release": "daily-2019-12-10",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/meshbird/meshbird",
+ "star": 3236,
+ "commits": 409,
+ "modify_time": "2019-07-16 15:52:50",
+ "last_release": "v2.3",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/jbtronics/crookedstylesheets",
+ "star": 3234,
+ "commits": 61,
+ "modify_time": "2018-01-22 06:58:22",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/mozilla/sops",
+ "star": 3233,
+ "commits": 1020,
+ "modify_time": "2019-12-02 17:32:45",
+ "last_release": "v3.5.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/betaflight/betaflight",
+ "star": 3228,
+ "commits": 15400,
+ "modify_time": "2019-12-09 23:41:03",
+ "last_release": "4.1.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/gfw-breaker/ssr-accounts",
+ "star": 3223,
+ "commits": 486,
+ "modify_time": "2019-10-23 12:59:00",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/tmate-io/tmate",
+ "star": 3222,
+ "commits": 5890,
+ "modify_time": "2019-12-06 11:43:04",
+ "last_release": "2.4.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/dvyukov/go-fuzz",
+ "star": 3222,
+ "commits": 796,
+ "modify_time": "2019-12-06 09:59:48",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/shadowsocks/chinadns",
+ "star": 3221,
+ "commits": 211,
+ "modify_time": "2015-08-12 09:43:06",
+ "last_release": "1.3.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/google/incremental-dom",
+ "star": 3213,
+ "commits": 522,
+ "modify_time": "2019-11-05 00:41:11",
+ "last_release": "\n 0.7.0\n ",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/leizongmin/js-xss",
+ "star": 3210,
+ "commits": 352,
+ "modify_time": "2019-05-26 02:35:56",
+ "last_release": "\n v1.0.6\n ",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/naituw/ipapatch",
+ "star": 3209,
+ "commits": 54,
+ "modify_time": "2019-07-29 03:30:30",
+ "last_release": "1.0.1",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/yarrick/iodine",
+ "star": 3208,
+ "commits": 829,
+ "modify_time": "2019-08-27 20:34:08",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/maurosoria/dirsearch",
+ "star": 3205,
+ "commits": 318,
+ "modify_time": "2019-11-26 14:44:21",
+ "last_release": "v0.3.9",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/The-Art-of-Hacking/h4cker",
+ "star": 3202,
+ "commits": 809,
+ "modify_time": "2019-12-01 22:58:35",
+ "last_release": "",
+ "lang": "Rich Text Format"
+ },
+ {
+ "link": "https://github.com/kootenpv/whereami",
+ "star": 3187,
+ "commits": 87,
+ "modify_time": "2018-06-16 12:26:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hslatman/awesome-threat-intelligence",
+ "star": 3187,
+ "commits": 488,
+ "modify_time": "2019-06-28 10:00:39",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/spiderlabs/modsecurity",
+ "star": 3186,
+ "commits": 2906,
+ "modify_time": "2019-11-09 03:36:34",
+ "last_release": "v2.9.3",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/magnumripper/johntheripper",
+ "star": 3180,
+ "commits": 15523,
+ "modify_time": "2019-11-15 13:46:38",
+ "last_release": "\n CUDA\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/valdikss/goodbyedpi",
+ "star": 3169,
+ "commits": 104,
+ "modify_time": "2019-10-31 19:36:29",
+ "last_release": "0.1.6",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/toyodadoubi/doubi",
+ "star": 3162,
+ "commits": 634,
+ "modify_time": "2018-12-07 14:36:13",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/minbrowser/min",
+ "star": 3159,
+ "commits": 1564,
+ "modify_time": "2019-12-08 18:27:21",
+ "last_release": "v1.11.2",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/meetecho/janus-gateway",
+ "star": 3140,
+ "commits": 4243,
+ "modify_time": "2019-12-05 17:57:30",
+ "last_release": "\n v0.7.6\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/shadowsocksr-backup/shadowsocksr-android",
+ "star": 3137,
+ "commits": 1642,
+ "modify_time": "2017-07-19 13:52:31",
+ "last_release": "3.4.0.8",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/px4/firmware",
+ "star": 3134,
+ "commits": 30910,
+ "modify_time": "2019-12-10 01:45:08",
+ "last_release": "v1.10.0-beta4",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/1n3/sn1per",
+ "star": 3125,
+ "commits": 375,
+ "modify_time": "2019-12-08 16:47:57",
+ "last_release": "v7.4",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/meirwah/awesome-incident-response",
+ "star": 3123,
+ "commits": 332,
+ "modify_time": "2019-11-11 18:32:42",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/fireeye/commando-vm",
+ "star": 3123,
+ "commits": 33,
+ "modify_time": "2019-10-07 21:42:08",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/uber/kraken",
+ "star": 3122,
+ "commits": 820,
+ "modify_time": "2019-12-06 22:58:29",
+ "last_release": "v0.1.3",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/readthedocs/sphinx_rtd_theme",
+ "star": 3121,
+ "commits": 1076,
+ "modify_time": "2019-11-11 18:58:50",
+ "last_release": "\n 0.4.3\n ",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/duo-labs/cloudmapper",
+ "star": 3121,
+ "commits": 739,
+ "modify_time": "2019-12-03 18:23:08",
+ "last_release": "2.8.1",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/speed47/spectre-meltdown-checker",
+ "star": 3118,
+ "commits": 454,
+ "modify_time": "2019-12-08 14:25:20",
+ "last_release": "v0.43",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/qemu/qemu",
+ "star": 3113,
+ "commits": 73407,
+ "modify_time": "2019-12-09 16:06:51",
+ "last_release": "\n v4.2.0-rc4\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/byt3bl33d3r/crackmapexec",
+ "star": 3107,
+ "commits": 450,
+ "modify_time": "2019-10-18 15:38:12",
+ "last_release": "v3.1.5",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/deathmarine/luyten",
+ "star": 3106,
+ "commits": 148,
+ "modify_time": "2019-12-04 17:46:37",
+ "last_release": "v0.5.4_Rebuilt_with_Latest_depenencies",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/softwaredownload/openwrt-fanqiang",
+ "star": 3105,
+ "commits": 1,
+ "modify_time": "2019-12-02 03:04:55",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/trimstray/htrace.sh",
+ "star": 3088,
+ "commits": 665,
+ "modify_time": "2019-12-03 07:21:51",
+ "last_release": "\n v1.1.6\n ",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/tribler/tribler",
+ "star": 3087,
+ "commits": 15090,
+ "modify_time": "2019-12-09 13:38:41",
+ "last_release": "v7.4.0-exp3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tencent/bk-cmdb",
+ "star": 3085,
+ "commits": 14528,
+ "modify_time": "2019-12-01 11:43:28",
+ "last_release": "\n release-v3.5.20\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/unicorn-engine/unicorn",
+ "star": 3084,
+ "commits": 1877,
+ "modify_time": "2019-11-19 16:34:56",
+ "last_release": "1.0.2-rc1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/zmap/zmap",
+ "star": 3080,
+ "commits": 1153,
+ "modify_time": "2019-09-23 19:38:47",
+ "last_release": "\n v2.1.1\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/michenriksen/aquatone",
+ "star": 3076,
+ "commits": 120,
+ "modify_time": "2019-05-19 09:07:52",
+ "last_release": "v1.7.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/jipegit/osxauditor",
+ "star": 3071,
+ "commits": 76,
+ "modify_time": "2019-03-06 13:22:36",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/calebfenton/simplify",
+ "star": 3065,
+ "commits": 818,
+ "modify_time": "2019-10-29 20:46:59",
+ "last_release": "v1.2.1",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/zhuhaow/spechtlite",
+ "star": 3063,
+ "commits": 268,
+ "modify_time": "2018-08-10 03:58:11",
+ "last_release": "0.10.7",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/valve/fingerprintjs",
+ "star": 3052,
+ "commits": 99,
+ "modify_time": "2019-10-16 22:41:44",
+ "last_release": "\n v0.5.5\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/google/robotstxt",
+ "star": 3049,
+ "commits": 59,
+ "modify_time": "2019-08-23 16:00:19",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/spiderlabs/responder",
+ "star": 3043,
+ "commits": 203,
+ "modify_time": "2019-09-09 11:35:28",
+ "last_release": "\n v2.3.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gwuhaolin/lightsocks",
+ "star": 3029,
+ "commits": 137,
+ "modify_time": "2019-10-19 00:12:48",
+ "last_release": "1.0.14",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/secwiki/linux-kernel-exploits",
+ "star": 3027,
+ "commits": 108,
+ "modify_time": "2019-03-26 03:01:22",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/owner888/phpspider",
+ "star": 3001,
+ "commits": 379,
+ "modify_time": "2018-08-15 08:04:29",
+ "last_release": "v2.1.6",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/ntop/ntopng",
+ "star": 2991,
+ "commits": 7949,
+ "modify_time": "2019-12-09 15:58:45",
+ "last_release": "3.8",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/guardicore/monkey",
+ "star": 2986,
+ "commits": 2713,
+ "modify_time": "2019-12-04 14:30:37",
+ "last_release": "\n 1.7.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cookiey/yearning",
+ "star": 2969,
+ "commits": 7,
+ "modify_time": "2019-11-13 02:26:06",
+ "last_release": "v2.1.6.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/google/santa",
+ "star": 2968,
+ "commits": 867,
+ "modify_time": "2019-12-09 16:21:12",
+ "last_release": "0.9.33",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/twintproject/twint",
+ "star": 2955,
+ "commits": 760,
+ "modify_time": "2019-12-08 13:22:23",
+ "last_release": "v2.1.4",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dominikh/go-tools",
+ "star": 2955,
+ "commits": 1290,
+ "modify_time": "2019-12-01 09:03:26",
+ "last_release": "2019.2.3",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/webgoat/webgoat",
+ "star": 2949,
+ "commits": 2287,
+ "modify_time": "2019-12-04 11:21:19",
+ "last_release": "v8.0.0.M26",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/thinkdevelop/free-ss-ssr",
+ "star": 2948,
+ "commits": 3155,
+ "modify_time": "2019-10-08 01:02:28",
+ "last_release": "",
+ "lang": "Dockerfile"
+ },
+ {
+ "link": "https://github.com/andresriancho/w3af",
+ "star": 2947,
+ "commits": 16852,
+ "modify_time": "2019-11-04 11:40:28",
+ "last_release": "1.6.49",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/phith0n/mind-map",
+ "star": 2945,
+ "commits": 37,
+ "modify_time": "2018-04-29 18:06:13",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/cowrie/cowrie",
+ "star": 2942,
+ "commits": 2296,
+ "modify_time": "2019-11-20 15:30:45",
+ "last_release": "v2.0.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/danmcinerney/wifijammer",
+ "star": 2936,
+ "commits": 90,
+ "modify_time": "2018-06-21 22:10:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zeek/zeek",
+ "star": 2933,
+ "commits": 9256,
+ "modify_time": "2019-12-09 18:12:40",
+ "last_release": "\n v3.0.1-dev\n ",
+ "lang": "Zeek"
+ },
+ {
+ "link": "https://github.com/91yun/serverspeeder",
+ "star": 2932,
+ "commits": 54,
+ "modify_time": "2019-01-04 15:42:16",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/securego/gosec",
+ "star": 2920,
+ "commits": 492,
+ "modify_time": "2019-11-19 10:41:25",
+ "last_release": "v2.1.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/evilsocket/pwnagotchi",
+ "star": 2916,
+ "commits": 1407,
+ "modify_time": "2019-12-09 16:10:15",
+ "last_release": "v1.4.1",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/libfuse/sshfs",
+ "star": 2915,
+ "commits": 395,
+ "modify_time": "2019-11-30 11:42:40",
+ "last_release": "sshfs-3.6.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/trustedsec/ptf",
+ "star": 2909,
+ "commits": 1240,
+ "modify_time": "2019-12-09 18:52:31",
+ "last_release": "\n 2.3.5\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/byt3bl33d3r/mitmf",
+ "star": 2901,
+ "commits": 467,
+ "modify_time": "2018-08-28 15:37:24",
+ "last_release": "v0.9.8",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/secfigo/awesome-fuzzing",
+ "star": 2897,
+ "commits": 118,
+ "modify_time": "2019-12-09 03:37:23",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/p-h-c/phc-winner-argon2",
+ "star": 2883,
+ "commits": 632,
+ "modify_time": "2019-05-20 09:18:00",
+ "last_release": "20190702",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/maciekish/iresign",
+ "star": 2877,
+ "commits": 72,
+ "modify_time": "2015-10-06 08:02:05",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/lxc/lxc",
+ "star": 2858,
+ "commits": 8830,
+ "modify_time": "2019-12-09 15:37:53",
+ "last_release": "\n lxc-3.2.1\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ctf-wiki/ctf-wiki",
+ "star": 2850,
+ "commits": 1466,
+ "modify_time": "2019-12-10 08:21:54",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/99designs/aws-vault",
+ "star": 2850,
+ "commits": 630,
+ "modify_time": "2019-12-08 04:44:02",
+ "last_release": "v5.0.0-beta2",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/facebook/idb",
+ "star": 2845,
+ "commits": 3515,
+ "modify_time": "2019-12-09 15:46:20",
+ "last_release": "v1.0.10",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/instantbox/instantbox",
+ "star": 2842,
+ "commits": 157,
+ "modify_time": "2019-07-03 09:20:55",
+ "last_release": "\n v0.1.6-swm\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ossec/ossec-hids",
+ "star": 2840,
+ "commits": 5709,
+ "modify_time": "2019-11-19 11:25:36",
+ "last_release": "3.5.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/infosecn1nja/red-teaming-toolkit",
+ "star": 2840,
+ "commits": 166,
+ "modify_time": "2019-09-30 16:12:22",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/wangyu-/udpspeeder",
+ "star": 2839,
+ "commits": 417,
+ "modify_time": "2019-04-08 11:48:11",
+ "last_release": "20190121.0",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/espressif/esptool",
+ "star": 2837,
+ "commits": 535,
+ "modify_time": "2019-11-25 03:18:55",
+ "last_release": "v2.8",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/goreliu/wsl-terminal",
+ "star": 2834,
+ "commits": 329,
+ "modify_time": "2019-04-24 04:35:15",
+ "last_release": "v0.8.13",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/juliocesarfort/public-pentesting-reports",
+ "star": 2829,
+ "commits": 69,
+ "modify_time": "2019-08-08 10:39:33",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cirosantilli/x86-bare-metal-examples",
+ "star": 2829,
+ "commits": 136,
+ "modify_time": "2019-11-07 00:00:00",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/maxchehab/css-keylogging",
+ "star": 2823,
+ "commits": 4,
+ "modify_time": "2018-02-20 23:49:04",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/tmk/tmk_keyboard",
+ "star": 2820,
+ "commits": 1485,
+ "modify_time": "2019-12-05 00:07:14",
+ "last_release": "\n orphans\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/quasar/quasarrat",
+ "star": 2814,
+ "commits": 1249,
+ "modify_time": "2019-04-23 19:05:07",
+ "last_release": "v1.3.0.0",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/jrohy/multi-v2ray",
+ "star": 2814,
+ "commits": 576,
+ "modify_time": "2019-12-07 02:39:39",
+ "last_release": "v3.7.5",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/paulsec/awesome-sec-talks",
+ "star": 2808,
+ "commits": 281,
+ "modify_time": "2019-10-27 08:37:47",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/plasma-disassembler/plasma",
+ "star": 2803,
+ "commits": 922,
+ "modify_time": "2019-03-04 13:40:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/androguard/androguard",
+ "star": 2798,
+ "commits": 2064,
+ "modify_time": "2019-11-22 15:05:47",
+ "last_release": "v3.3.5",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/klange/toaruos",
+ "star": 2793,
+ "commits": 4507,
+ "modify_time": "2019-12-06 03:10:38",
+ "last_release": "v1.10.13",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/kgretzky/evilginx2",
+ "star": 2793,
+ "commits": 90,
+ "modify_time": "2019-10-22 07:51:49",
+ "last_release": "2.3.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/xmrig/xmrig",
+ "star": 2791,
+ "commits": 1744,
+ "modify_time": "2019-12-05 13:24:38",
+ "last_release": "v5.1.1",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/loveshell/ngx_lua_waf",
+ "star": 2789,
+ "commits": 167,
+ "modify_time": "2016-04-06 04:17:47",
+ "last_release": "v0.7.2",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/shadowsocks/openwrt-shadowsocks",
+ "star": 2783,
+ "commits": 296,
+ "modify_time": "2019-11-12 08:23:07",
+ "last_release": "v3.3.3",
+ "lang": "Makefile"
+ },
+ {
+ "link": "https://github.com/seclab-ucr/intang",
+ "star": 2782,
+ "commits": 20,
+ "modify_time": "2018-05-01 21:21:33",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/qtox/qtox",
+ "star": 2777,
+ "commits": 7406,
+ "modify_time": "2019-12-02 16:46:04",
+ "last_release": "v1.16.3",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/processhacker/processhacker",
+ "star": 2769,
+ "commits": 7398,
+ "modify_time": "2019-12-07 23:46:52",
+ "last_release": "v2.39",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/trufflesuite/ganache-cli",
+ "star": 2766,
+ "commits": 700,
+ "modify_time": "2019-11-07 18:38:12",
+ "last_release": "\n v6.8.1-beta.0\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/secwiki/sec-chart",
+ "star": 2756,
+ "commits": 40,
+ "modify_time": "2019-10-13 14:20:08",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/webhintio/hint",
+ "star": 2742,
+ "commits": 4883,
+ "modify_time": "2019-12-07 11:05:14",
+ "last_release": "dist",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/theos/theos",
+ "star": 2742,
+ "commits": 1660,
+ "modify_time": "2019-11-17 15:39:39",
+ "last_release": "2.5",
+ "lang": "Makefile"
+ },
+ {
+ "link": "https://github.com/P0cL4bs/WiFi-Pumpkin",
+ "star": 2741,
+ "commits": 316,
+ "modify_time": "2019-04-07 04:07:41",
+ "last_release": "v0.8.8Release",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/s0md3v/AwesomeXSS",
+ "star": 2739,
+ "commits": 61,
+ "modify_time": "2019-11-18 17:17:04",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/vanhoefm/krackattacks-scripts",
+ "star": 2737,
+ "commits": 13279,
+ "modify_time": "2018-11-18 10:43:08",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cyu/rack-cors",
+ "star": 2735,
+ "commits": 226,
+ "modify_time": "2019-11-23 22:25:39",
+ "last_release": "\n v1.1.0\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/hephaest0s/usbkill",
+ "star": 2730,
+ "commits": 213,
+ "modify_time": "2016-07-30 12:22:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/redcanaryco/atomic-red-team",
+ "star": 2717,
+ "commits": 1527,
+ "modify_time": "2019-12-09 23:08:11",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/taviso/loadlibrary",
+ "star": 2713,
+ "commits": 66,
+ "modify_time": "2019-11-07 20:52:30",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/samyk/magspoof",
+ "star": 2703,
+ "commits": 28,
+ "modify_time": "2017-01-11 19:26:05",
+ "last_release": "",
+ "lang": "Eagle"
+ },
+ {
+ "link": "https://github.com/aquasecurity/trivy",
+ "star": 2701,
+ "commits": 237,
+ "modify_time": "2019-12-09 08:49:35",
+ "last_release": "v0.2.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/dantheman827/ios-app-signer",
+ "star": 2698,
+ "commits": 104,
+ "modify_time": "2019-12-05 03:57:38",
+ "last_release": "1.13.1",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/kjcracks/clutch",
+ "star": 2690,
+ "commits": 217,
+ "modify_time": "2019-11-04 07:55:24",
+ "last_release": "2.0.4",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/google/syzkaller",
+ "star": 2682,
+ "commits": 4379,
+ "modify_time": "2019-11-20 01:04:13",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/mame82/p4wnp1",
+ "star": 2681,
+ "commits": 245,
+ "modify_time": "2018-12-07 12:14:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/drivendata/cookiecutter-data-science",
+ "star": 2674,
+ "commits": 136,
+ "modify_time": "2019-09-23 15:49:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rmusser01/infosec_reference",
+ "star": 2662,
+ "commits": 331,
+ "modify_time": "2019-10-20 00:01:26",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/bkimminich/juice-shop",
+ "star": 2654,
+ "commits": 11111,
+ "modify_time": "2019-11-25 09:33:17",
+ "last_release": "v9.3.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/frohoff/ysoserial",
+ "star": 2652,
+ "commits": 144,
+ "modify_time": "2019-09-07 16:01:49",
+ "last_release": "\n 0.0.5\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/xairy/linux-kernel-exploitation",
+ "star": 2645,
+ "commits": 58,
+ "modify_time": "2019-10-22 20:29:53",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/chybeta/web-security-learning",
+ "star": 2645,
+ "commits": 59,
+ "modify_time": "2018-10-31 03:03:04",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/ckolivas/cgminer",
+ "star": 2641,
+ "commits": 8051,
+ "modify_time": "2018-12-06 21:13:30",
+ "last_release": "\n v4.11.1\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/slackhq/nebula",
+ "star": 2640,
+ "commits": 43,
+ "modify_time": "2019-12-10 00:59:52",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/teevity/ice",
+ "star": 2637,
+ "commits": 251,
+ "modify_time": "2019-08-28 08:15:48",
+ "last_release": "v1.1.2",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/leandromoreira/linux-network-performance-parameters",
+ "star": 2625,
+ "commits": 34,
+ "modify_time": "2019-04-22 18:56:42",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/zhuhaow/nekit",
+ "star": 2615,
+ "commits": 680,
+ "modify_time": "2019-10-23 04:07:46",
+ "last_release": "0.14.0",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/popcorn-official/popcorn-desktop",
+ "star": 2612,
+ "commits": 6441,
+ "modify_time": "2019-12-07 21:56:59",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/arachni/arachni",
+ "star": 2607,
+ "commits": 9268,
+ "modify_time": "2017-03-29 09:29:58",
+ "last_release": "v1.5.1",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/knownsec/kcon",
+ "star": 2603,
+ "commits": 29,
+ "modify_time": "2019-11-19 03:44:38",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/pditommaso/awesome-pipeline",
+ "star": 2601,
+ "commits": 266,
+ "modify_time": "2019-11-07 14:13:52",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/fanout/pushpin",
+ "star": 2596,
+ "commits": 983,
+ "modify_time": "2019-11-20 15:45:42",
+ "last_release": "\n v1.25.0\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/adguardteam/adguardhome",
+ "star": 2581,
+ "commits": 1693,
+ "modify_time": "2019-12-09 11:13:39",
+ "last_release": "v0.99.3",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/medicean/vulapps",
+ "star": 2581,
+ "commits": 211,
+ "modify_time": "2019-10-31 02:12:51",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/huntergregal/mimipenguin",
+ "star": 2575,
+ "commits": 147,
+ "modify_time": "2019-10-22 16:28:36",
+ "last_release": "2.0-release",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/id-software/quake",
+ "star": 2574,
+ "commits": 2,
+ "modify_time": "2012-01-31 22:03:17",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/esnet/iperf",
+ "star": 2568,
+ "commits": 1063,
+ "modify_time": "2019-11-01 19:10:15",
+ "last_release": "\n 3.7\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/danmar/cppcheck",
+ "star": 2566,
+ "commits": 21670,
+ "modify_time": "2019-12-09 18:16:55",
+ "last_release": "1.89",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/google/binnavi",
+ "star": 2565,
+ "commits": 286,
+ "modify_time": "2019-07-17 08:14:04",
+ "last_release": "v1.2.0",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/Greenwolf/social_mapper",
+ "star": 2562,
+ "commits": 128,
+ "modify_time": "2019-09-26 12:11:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/evilsocket/bettercap",
+ "star": 2553,
+ "commits": 1017,
+ "modify_time": "2018-02-27 19:08:10",
+ "last_release": "v1.6.2",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/cloudflare/flan",
+ "star": 2551,
+ "commits": 70,
+ "modify_time": "2019-12-02 23:49:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/geohot/qira",
+ "star": 2549,
+ "commits": 1357,
+ "modify_time": "2019-06-17 19:38:12",
+ "last_release": "v1.3",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hugsy/gef",
+ "star": 2543,
+ "commits": 1724,
+ "modify_time": "2019-11-22 23:16:19",
+ "last_release": "2019.04",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/drk1wi/modlishka",
+ "star": 2542,
+ "commits": 100,
+ "modify_time": "2019-11-19 07:53:21",
+ "last_release": "v.1.1.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/offensive-security/kali-nethunter",
+ "star": 2533,
+ "commits": 1263,
+ "modify_time": "2019-04-25 09:01:29",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/google/nogotofail",
+ "star": 2533,
+ "commits": 169,
+ "modify_time": "2017-07-18 19:45:19",
+ "last_release": "v1.2.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/teddysun/across",
+ "star": 2526,
+ "commits": 259,
+ "modify_time": "2019-12-10 04:38:40",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/dirtycow/dirtycow.github.io",
+ "star": 2525,
+ "commits": 83,
+ "modify_time": "2016-10-26 21:40:12",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/yrutschle/sslh",
+ "star": 2522,
+ "commits": 349,
+ "modify_time": "2019-11-15 21:20:48",
+ "last_release": "\n v1.20\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/kbandla/aptnotes",
+ "star": 2516,
+ "commits": 392,
+ "modify_time": "2019-09-18 04:11:33",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/oj/gobuster",
+ "star": 2508,
+ "commits": 281,
+ "modify_time": "2019-07-23 13:24:30",
+ "last_release": "v3.0.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/jboss-javassist/javassist",
+ "star": 2507,
+ "commits": 913,
+ "modify_time": "2019-10-14 10:25:09",
+ "last_release": "\n 3_26_0_ga\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/dhavalkapil/icmptunnel",
+ "star": 2507,
+ "commits": 62,
+ "modify_time": "2017-04-22 07:47:55",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/chengr28/pcap_dnsproxy",
+ "star": 2503,
+ "commits": null,
+ "modify_time": "2019-05-05 13:01:31",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ysrc/xunfeng",
+ "star": 2501,
+ "commits": 374,
+ "modify_time": "2019-11-14 09:31:54",
+ "last_release": "\n v0.2.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/taichi-framework/taichi",
+ "star": 2498,
+ "commits": 39,
+ "modify_time": "2019-06-10 02:55:45",
+ "last_release": "5.5.8",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/onlurking/awesome-infosec",
+ "star": 2497,
+ "commits": 38,
+ "modify_time": "2019-12-05 17:27:30",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/audi-1/sqli-labs",
+ "star": 2488,
+ "commits": 52,
+ "modify_time": "2014-10-31 19:10:23",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/feross/spoofmac",
+ "star": 2480,
+ "commits": 161,
+ "modify_time": "2018-01-27 08:46:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/weixin/Miaow",
+ "star": 2476,
+ "commits": 355,
+ "modify_time": "2019-01-28 03:29:04",
+ "last_release": "1.4.4",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/ne0nd0g/merlin",
+ "star": 2476,
+ "commits": 476,
+ "modify_time": "2019-08-20 11:44:37",
+ "last_release": "v0.8.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/vitaly-t/pg-promise",
+ "star": 2469,
+ "commits": 2333,
+ "modify_time": "2019-12-05 18:54:59",
+ "last_release": "10.3.1",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/smicallef/spiderfoot",
+ "star": 2466,
+ "commits": 1507,
+ "modify_time": "2019-11-11 20:31:11",
+ "last_release": "\n v2.12.0-final\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/martin-ger/esp_wifi_repeater",
+ "star": 2464,
+ "commits": 339,
+ "modify_time": "2019-09-21 06:42:43",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/yck1509/confuserex",
+ "star": 2461,
+ "commits": 443,
+ "modify_time": "2019-01-26 19:43:02",
+ "last_release": "v1.0.0",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/pavel-odintsov/fastnetmon",
+ "star": 2461,
+ "commits": 2172,
+ "modify_time": "2019-11-16 13:30:45",
+ "last_release": "v1.1.4",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/rebootuser/linenum",
+ "star": 2454,
+ "commits": 70,
+ "modify_time": "2019-11-21 11:53:25",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/google/enjarify",
+ "star": 2451,
+ "commits": 65,
+ "modify_time": "2017-01-30 22:08:49",
+ "last_release": "1.0.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/misp/misp",
+ "star": 2444,
+ "commits": 13962,
+ "modify_time": "2019-12-09 16:03:26",
+ "last_release": "\n v2.4.119\n ",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/0xinfection/awesome-waf",
+ "star": 2429,
+ "commits": 189,
+ "modify_time": "2019-11-03 09:04:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pwndbg/pwndbg",
+ "star": 2423,
+ "commits": 806,
+ "modify_time": "2019-12-09 22:08:02",
+ "last_release": "2019.12.09",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rapid7/metasploitable3",
+ "star": 2420,
+ "commits": 585,
+ "modify_time": "2019-10-29 19:40:04",
+ "last_release": "",
+ "lang": "TSQL"
+ },
+ {
+ "link": "https://github.com/infobyte/faraday",
+ "star": 2417,
+ "commits": 8258,
+ "modify_time": "2019-11-15 18:03:00",
+ "last_release": "v3.9.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/arthepsy/ssh-audit",
+ "star": 2416,
+ "commits": 165,
+ "modify_time": "2016-11-02 10:45:56",
+ "last_release": "\n v1.7.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xmendez/wfuzz",
+ "star": 2411,
+ "commits": 816,
+ "modify_time": "2019-11-16 11:25:13",
+ "last_release": "v.2.4.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lionsec/katoolin",
+ "star": 2410,
+ "commits": 71,
+ "modify_time": "2019-04-29 00:14:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rpisec/malware",
+ "star": 2407,
+ "commits": 5,
+ "modify_time": "2017-05-11 16:55:10",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/m66b/netguard",
+ "star": 2404,
+ "commits": 3540,
+ "modify_time": "2019-11-22 09:13:23",
+ "last_release": "2.269",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/facebookarchive/pfff",
+ "star": 2395,
+ "commits": 6689,
+ "modify_time": "2017-02-08 06:45:48",
+ "last_release": "v0.29",
+ "lang": "OCaml"
+ },
+ {
+ "link": "https://github.com/xtaci/kcp-go",
+ "star": 2392,
+ "commits": 635,
+ "modify_time": "2019-11-07 05:30:11",
+ "last_release": "v5.4.19",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/wireshark/wireshark",
+ "star": 2389,
+ "commits": 76736,
+ "modify_time": "2019-12-04 07:40:16",
+ "last_release": "\n v3.2.0rc1\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/secretsquirrel/the-backdoor-factory",
+ "star": 2386,
+ "commits": 200,
+ "modify_time": "2018-04-24 20:35:24",
+ "last_release": "\n 3.4.2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/owasp/amass",
+ "star": 2384,
+ "commits": 964,
+ "modify_time": "2019-12-09 20:24:34",
+ "last_release": "v3.4.2",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/haad/proxychains",
+ "star": 2381,
+ "commits": 186,
+ "modify_time": "2019-01-22 17:45:29",
+ "last_release": "\n proxychains-4.2.0\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/mock-server/mockserver",
+ "star": 2376,
+ "commits": 2450,
+ "modify_time": "2019-12-09 22:47:49",
+ "last_release": "\n mockserver-5.8.0\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/danmcinerney/lans.py",
+ "star": 2376,
+ "commits": 148,
+ "modify_time": "2018-11-16 14:34:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/security-onion-solutions/security-onion",
+ "star": 2369,
+ "commits": 2353,
+ "modify_time": "2019-12-04 18:34:11",
+ "last_release": "v16.04.6.3_20191126",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/crypto101/book",
+ "star": 2369,
+ "commits": 809,
+ "modify_time": "2019-10-24 15:52:01",
+ "last_release": "untagged-e566c215e96b25a20768",
+ "lang": "TeX"
+ },
+ {
+ "link": "https://github.com/mlabouardy/komiser",
+ "star": 2366,
+ "commits": 267,
+ "modify_time": "2019-07-30 20:54:06",
+ "last_release": "2.4.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/ab77/netflix-proxy",
+ "star": 2364,
+ "commits": 927,
+ "modify_time": "2019-10-26 15:18:43",
+ "last_release": "latest",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/snabbco/snabb",
+ "star": 2362,
+ "commits": 9456,
+ "modify_time": "2019-11-08 07:53:57",
+ "last_release": "v2019.11",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/domoticz/domoticz",
+ "star": 2357,
+ "commits": 9456,
+ "modify_time": "2019-12-09 19:21:24",
+ "last_release": "4.10717",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/CTFd/CTFd",
+ "star": 2352,
+ "commits": 648,
+ "modify_time": "2019-11-06 04:25:39",
+ "last_release": "2.1.5",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hack-with-github/free-security-ebooks",
+ "star": 2349,
+ "commits": 48,
+ "modify_time": "2019-01-20 11:26:25",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/vuvuzela/vuvuzela",
+ "star": 2342,
+ "commits": 157,
+ "modify_time": "2019-09-12 15:39:56",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/stefanesser/dumpdecrypted",
+ "star": 2340,
+ "commits": 10,
+ "modify_time": "2014-02-13 13:12:39",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hfiref0x/uacme",
+ "star": 2340,
+ "commits": 212,
+ "modify_time": "2019-11-10 06:58:19",
+ "last_release": "v3.2.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/pa11y/pa11y",
+ "star": 2337,
+ "commits": 398,
+ "modify_time": "2019-11-05 18:45:43",
+ "last_release": "\n 5.3.0\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/tsl0922/ttyd",
+ "star": 2335,
+ "commits": 314,
+ "modify_time": "2019-12-08 15:21:01",
+ "last_release": "1.5.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/netchx/netch",
+ "star": 2323,
+ "commits": 7,
+ "modify_time": "2019-12-09 05:31:55",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/yeyintminthuhtut/awesome-red-teaming",
+ "star": 2321,
+ "commits": 79,
+ "modify_time": "2019-01-02 03:31:53",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/abrasive/shairport",
+ "star": 2318,
+ "commits": 476,
+ "modify_time": "2014-12-09 22:24:39",
+ "last_release": "\n 1.1.1\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/csploit/android",
+ "star": 2304,
+ "commits": 1403,
+ "modify_time": "2018-09-28 18:40:00",
+ "last_release": "v1.6.6-rc.2",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/tikam02/devops-guide",
+ "star": 2301,
+ "commits": 225,
+ "modify_time": "2019-11-27 03:54:16",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/lmacken/pyrasite",
+ "star": 2295,
+ "commits": 340,
+ "modify_time": "2017-03-13 17:42:17",
+ "last_release": "\n 2.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rootphantomer/blasting_dictionary",
+ "star": 2287,
+ "commits": 27,
+ "modify_time": "2017-11-15 07:30:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/moby/hyperkit",
+ "star": 2284,
+ "commits": 547,
+ "modify_time": "2019-10-30 15:18:55",
+ "last_release": "\n v0.20190802\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/guohongze/adminset",
+ "star": 2283,
+ "commits": 618,
+ "modify_time": "2019-07-29 08:42:52",
+ "last_release": "v0.56.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/therook/subbrute",
+ "star": 2282,
+ "commits": 107,
+ "modify_time": "2017-02-12 18:49:57",
+ "last_release": "77",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/retirejs/retire.js",
+ "star": 2281,
+ "commits": 627,
+ "modify_time": "2019-08-31 20:52:14",
+ "last_release": "1.1.1",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/talkingdata/inmap",
+ "star": 2276,
+ "commits": 576,
+ "modify_time": "2019-11-18 02:13:34",
+ "last_release": "V2.3.3",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/v1s1t0r1sh3r3/airgeddon",
+ "star": 2274,
+ "commits": 2023,
+ "modify_time": "2019-11-03 19:24:31",
+ "last_release": "v10.0",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/aurorawright/luma3ds",
+ "star": 2270,
+ "commits": 1459,
+ "modify_time": "2019-11-05 00:15:41",
+ "last_release": "v10.0.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/novnc/websockify",
+ "star": 2255,
+ "commits": 835,
+ "modify_time": "2019-09-26 06:42:17",
+ "last_release": "v0.9.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dumb-password-rules/dumb-password-rules",
+ "star": 2252,
+ "commits": 314,
+ "modify_time": "2019-11-23 21:39:13",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/eliaskotlyar/xiaomi-dafang-hacks",
+ "star": 2252,
+ "commits": 852,
+ "modify_time": "2019-11-07 08:29:21",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/k8gege/k8tools",
+ "star": 2248,
+ "commits": 322,
+ "modify_time": "2019-11-30 06:22:54",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/mehrdadrad/mylg",
+ "star": 2245,
+ "commits": 656,
+ "modify_time": "2017-08-15 16:07:36",
+ "last_release": "v0.2.6",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/filosottile/heartbleed",
+ "star": 2226,
+ "commits": 119,
+ "modify_time": "2015-04-08 03:06:56",
+ "last_release": "\n v0.2.0\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/cure53/h5sc",
+ "star": 2217,
+ "commits": 88,
+ "modify_time": "2018-06-21 07:40:27",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/codebutler/firesheep",
+ "star": 2215,
+ "commits": 128,
+ "modify_time": "2013-12-29 18:40:47",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/aquasecurity/kube-bench",
+ "star": 2213,
+ "commits": 611,
+ "modify_time": "2019-12-09 14:07:44",
+ "last_release": "v0.2.2",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/texane/stlink",
+ "star": 2211,
+ "commits": 1110,
+ "modify_time": "2019-11-08 13:03:01",
+ "last_release": "v1.5.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/google/mtail",
+ "star": 2211,
+ "commits": 2626,
+ "modify_time": "2019-12-06 06:24:42",
+ "last_release": "v3.0.0-rc33",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/cloudflare/boringtun",
+ "star": 2209,
+ "commits": 28,
+ "modify_time": "2019-11-19 15:37:05",
+ "last_release": "",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/google/bloaty",
+ "star": 2192,
+ "commits": 399,
+ "modify_time": "2019-11-18 16:52:25",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/sobolevn/awesome-cryptography",
+ "star": 2189,
+ "commits": 115,
+ "modify_time": "2019-11-11 05:48:16",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/getlantern/lantern-binaries",
+ "star": 2187,
+ "commits": 403,
+ "modify_time": "2019-12-04 18:33:55",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/DataSploit/datasploit",
+ "star": 2186,
+ "commits": 367,
+ "modify_time": "2018-08-08 22:03:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/enddo/awesome-windows-exploitation",
+ "star": 2184,
+ "commits": null,
+ "modify_time": "2017-03-24 18:49:42",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/armmbed/mbedtls",
+ "star": 2183,
+ "commits": 10049,
+ "modify_time": "2019-12-09 17:54:29",
+ "last_release": "mbedtls-2.16.3",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/secgroundzero/warberry",
+ "star": 2179,
+ "commits": 309,
+ "modify_time": "2019-11-09 00:09:26",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/iam4x/pokemongo-webspoof",
+ "star": 2173,
+ "commits": 86,
+ "modify_time": "2018-11-27 11:53:06",
+ "last_release": "v1.2.1",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/mmatczuk/go-http-tunnel",
+ "star": 2163,
+ "commits": 162,
+ "modify_time": "2019-10-23 14:12:33",
+ "last_release": "2.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/maestron/botnets",
+ "star": 2162,
+ "commits": 4,
+ "modify_time": "2018-09-06 16:44:03",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/commixproject/commix",
+ "star": 2159,
+ "commits": 1406,
+ "modify_time": "2019-11-11 05:38:38",
+ "last_release": "v3.0-20191111",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/exakat/php-static-analysis-tools",
+ "star": 2158,
+ "commits": 100,
+ "modify_time": "2019-03-07 20:52:08",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/conorpp/u2f-zero",
+ "star": 2158,
+ "commits": 296,
+ "modify_time": "2019-11-05 20:57:21",
+ "last_release": "1.01_unlimited_keys",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/antonioribeiro/tracker",
+ "star": 2158,
+ "commits": 594,
+ "modify_time": "2019-10-01 17:58:07",
+ "last_release": "v3.5.0",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/plamoni/siriproxy",
+ "star": 2153,
+ "commits": 196,
+ "modify_time": "2013-09-24 05:38:41",
+ "last_release": "\n 0.5\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/google/wycheproof",
+ "star": 2149,
+ "commits": 128,
+ "modify_time": "2019-12-04 11:24:06",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/trustedsec/unicorn",
+ "star": 2138,
+ "commits": 164,
+ "modify_time": "2019-10-22 13:52:52",
+ "last_release": "\n 3.8.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jonathansalwan/ropgadget",
+ "star": 2132,
+ "commits": 448,
+ "modify_time": "2019-10-29 08:20:24",
+ "last_release": "v5.9",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pret/pokered",
+ "star": 2127,
+ "commits": 2231,
+ "modify_time": "2019-11-23 23:20:20",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/rub-nds/pret",
+ "star": 2122,
+ "commits": 81,
+ "modify_time": "2018-06-11 17:07:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/goq/telegram-list",
+ "star": 2118,
+ "commits": 1529,
+ "modify_time": "2019-12-07 21:19:39",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/elceef/dnstwist",
+ "star": 2117,
+ "commits": 247,
+ "modify_time": "2019-11-06 09:12:00",
+ "last_release": "20190706",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/calebmadrigal/trackerjacker",
+ "star": 2116,
+ "commits": 134,
+ "modify_time": "2019-05-24 04:38:55",
+ "last_release": "v1.8.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/FortyNorthSecurity/EyeWitness",
+ "star": 2115,
+ "commits": 809,
+ "modify_time": "2019-12-09 15:55:05",
+ "last_release": "3.0.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lloyd/node-memwatch",
+ "star": 2114,
+ "commits": 69,
+ "modify_time": "2013-03-13 23:01:28",
+ "last_release": "\n v0.2.2\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/hashcat/hashcat-legacy",
+ "star": 2107,
+ "commits": 88,
+ "modify_time": "2016-01-11 13:24:56",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/linkedin/qark",
+ "star": 2105,
+ "commits": 301,
+ "modify_time": "2019-04-05 05:07:04",
+ "last_release": "v0.9-alpha.10",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/yeahhub/hacking-security-ebooks",
+ "star": 2103,
+ "commits": 6,
+ "modify_time": "2019-09-21 15:02:44",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/infoslack/awesome-web-hacking",
+ "star": 2103,
+ "commits": 89,
+ "modify_time": "2019-11-18 19:43:03",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/wireguard/wireguard",
+ "star": 2095,
+ "commits": 1380,
+ "modify_time": "2019-12-09 19:53:39",
+ "last_release": "\n 0.0.20191206\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/urbanadventurer/whatweb",
+ "star": 2093,
+ "commits": 4696,
+ "modify_time": "2019-11-19 19:31:15",
+ "last_release": "v0.5.0",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/flatpak/flatpak",
+ "star": 2084,
+ "commits": 5474,
+ "modify_time": "2019-12-06 23:03:12",
+ "last_release": "1.5.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/theupdateframework/notary",
+ "star": 2078,
+ "commits": 2906,
+ "modify_time": "2019-11-10 10:48:23",
+ "last_release": "v0.6.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/wulabing/v2ray_ws-tls_bash_onekey",
+ "star": 2071,
+ "commits": 156,
+ "modify_time": "2019-11-27 09:56:13",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/jermic/android-crack-tool",
+ "star": 2066,
+ "commits": 10,
+ "modify_time": "2019-03-04 14:14:41",
+ "last_release": "2.5.1",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/WhaleShark-Team/cobra",
+ "star": 2058,
+ "commits": 1997,
+ "modify_time": "2019-08-23 07:10:29",
+ "last_release": "v2.0.0-alpha.6",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bluscreenofjeff/red-team-infrastructure-wiki",
+ "star": 2057,
+ "commits": 113,
+ "modify_time": "2018-11-07 07:05:24",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/swiftonsecurity/sysmon-config",
+ "star": 2054,
+ "commits": 147,
+ "modify_time": "2019-12-05 02:04:29",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/tanprathan/mobileapp-pentest-cheatsheet",
+ "star": 2051,
+ "commits": 90,
+ "modify_time": "2019-10-23 05:05:44",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/maxmcd/webtty",
+ "star": 2048,
+ "commits": 40,
+ "modify_time": "2019-06-14 14:05:39",
+ "last_release": "v0.2.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/edoverflow/bugbounty-cheatsheet",
+ "star": 2047,
+ "commits": 223,
+ "modify_time": "2019-10-30 12:37:27",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/lordnoteworthy/al-khaser",
+ "star": 2045,
+ "commits": 464,
+ "modify_time": "2019-10-16 19:30:18",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/foospidy/payloads",
+ "star": 2045,
+ "commits": 93,
+ "modify_time": "2019-04-06 16:27:11",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/nabla-c0d3/sslyze",
+ "star": 2043,
+ "commits": 1293,
+ "modify_time": "2019-11-29 15:12:53",
+ "last_release": "2.1.4",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/derv82/wifite",
+ "star": 2042,
+ "commits": 153,
+ "modify_time": "2018-04-06 19:35:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/openthread/openthread",
+ "star": 2039,
+ "commits": 3656,
+ "modify_time": "2019-12-06 18:46:58",
+ "last_release": "thread-reference-20180926",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ios-control/ios-deploy",
+ "star": 2033,
+ "commits": 403,
+ "modify_time": "2019-12-09 19:45:37",
+ "last_release": "1.10.0",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/sensepost/objection",
+ "star": 2033,
+ "commits": 640,
+ "modify_time": "2019-12-10 07:32:32",
+ "last_release": "1.8.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/goodrain/rainbond",
+ "star": 2029,
+ "commits": 3999,
+ "modify_time": "2019-12-09 13:30:35",
+ "last_release": "v5.1.8-release",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/shadowsocks/shadowsocks-gui",
+ "star": 2025,
+ "commits": 88,
+ "modify_time": "2015-01-06 04:16:42",
+ "last_release": "\n 0.4\n ",
+ "lang": "CoffeeScript"
+ },
+ {
+ "link": "https://github.com/darthton/blackbone",
+ "star": 2024,
+ "commits": 376,
+ "modify_time": "2019-12-09 20:18:06",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/urinx/iosapphook",
+ "star": 2017,
+ "commits": 18,
+ "modify_time": "2017-01-30 12:24:20",
+ "last_release": "v2.2.1",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/genymobile/gnirehtet",
+ "star": 2016,
+ "commits": 644,
+ "modify_time": "2019-11-18 20:57:00",
+ "last_release": "v2.4",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/dekunukem/nintendo_switch_reverse_engineering",
+ "star": 2016,
+ "commits": 254,
+ "modify_time": "2019-03-10 13:08:04",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/xoreaxeaxeax/rosenbridge",
+ "star": 2014,
+ "commits": 1,
+ "modify_time": "2018-08-09 04:01:13",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jeremylong/dependencycheck",
+ "star": 2014,
+ "commits": 6359,
+ "modify_time": "2019-12-07 12:13:37",
+ "last_release": "\n v5.2.4\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/probablycorey/wax",
+ "star": 2005,
+ "commits": 497,
+ "modify_time": "2015-11-03 00:21:29",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/skynetservices/skydns",
+ "star": 2003,
+ "commits": 755,
+ "modify_time": "2019-10-15 17:16:21",
+ "last_release": "\n 2.5.3a\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/qazbnm456/awesome-cve-poc",
+ "star": 2000,
+ "commits": 621,
+ "modify_time": "2019-11-11 01:49:17",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/elderdrivers/edxposed",
+ "star": 1996,
+ "commits": 313,
+ "modify_time": "2019-11-13 12:05:27",
+ "last_release": "v0.4.6.0",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/FSecureLABS/drozer",
+ "star": 1994,
+ "commits": 1089,
+ "modify_time": "2019-05-12 19:47:50",
+ "last_release": "2.4.4",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/infosecn1nja/ad-attack-defense",
+ "star": 1994,
+ "commits": 96,
+ "modify_time": "2019-09-22 07:21:34",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/github/softu2f",
+ "star": 1994,
+ "commits": 187,
+ "modify_time": "2019-11-14 17:01:05",
+ "last_release": "0.0.19",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/mathewsachin/captura",
+ "star": 1992,
+ "commits": 1077,
+ "modify_time": "2019-12-06 16:00:29",
+ "last_release": "\n build-number-25\n ",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/gtfobins/gtfobins.github.io",
+ "star": 1990,
+ "commits": 451,
+ "modify_time": "2019-12-04 01:25:49",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/yahoo/gryffin",
+ "star": 1989,
+ "commits": 30,
+ "modify_time": "2016-01-07 22:20:39",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/asmjit/asmjit",
+ "star": 1989,
+ "commits": 291,
+ "modify_time": "2019-10-25 07:40:26",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/dloss/python-pentest-tools",
+ "star": 1987,
+ "commits": 41,
+ "modify_time": "2017-09-16 16:15:34",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/projectdiscovery/subfinder",
+ "star": 1977,
+ "commits": 480,
+ "modify_time": "2019-12-07 04:36:41",
+ "last_release": "v2.2.2",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/projectdiscovery/subfinder",
+ "star": 1977,
+ "commits": 480,
+ "modify_time": "2019-12-07 04:36:41",
+ "last_release": "v2.2.2",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/momosecurity/aswan",
+ "star": 1972,
+ "commits": 36,
+ "modify_time": "2019-11-01 09:37:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/j3ssie/osmedeus",
+ "star": 1971,
+ "commits": 54,
+ "modify_time": "2019-12-07 08:52:03",
+ "last_release": "v2.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/Ullaakut/cameradar",
+ "star": 1966,
+ "commits": 172,
+ "modify_time": "2019-11-30 15:57:27",
+ "last_release": "v4.1.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/weichiachang/stacks-cli",
+ "star": 1966,
+ "commits": 65,
+ "modify_time": "2019-03-25 02:24:20",
+ "last_release": "1.0.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/1n3/intruderpayloads",
+ "star": 1966,
+ "commits": 31,
+ "modify_time": "2018-11-02 15:49:36",
+ "last_release": "",
+ "lang": "BitBake"
+ },
+ {
+ "link": "https://github.com/spiderlabs/owasp-modsecurity-crs",
+ "star": 1955,
+ "commits": 1851,
+ "modify_time": "2019-12-05 09:47:22",
+ "last_release": "v3.2.0",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/obfuscator-llvm/obfuscator",
+ "star": 1953,
+ "commits": 10,
+ "modify_time": "2017-06-29 15:21:32",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/hyperhq/hyperd",
+ "star": 1952,
+ "commits": 1200,
+ "modify_time": "2018-11-29 08:14:18",
+ "last_release": "v1.1.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/cea-sec/miasm",
+ "star": 1951,
+ "commits": 3367,
+ "modify_time": "2019-12-04 10:07:55",
+ "last_release": "v0.1.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nixawk/pentest-wiki",
+ "star": 1947,
+ "commits": 159,
+ "modify_time": "2019-11-13 06:32:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/microsoft/procdump-for-linux",
+ "star": 1945,
+ "commits": 24,
+ "modify_time": "2019-12-06 19:52:04",
+ "last_release": "1.0.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/lazocoder/windows-hacks",
+ "star": 1942,
+ "commits": 36,
+ "modify_time": "2017-05-21 19:11:35",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/meituan-dianping/logan",
+ "star": 1938,
+ "commits": 70,
+ "modify_time": "2019-08-12 09:01:04",
+ "last_release": "1.2.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/zalando/skipper",
+ "star": 1938,
+ "commits": 1614,
+ "modify_time": "2019-12-04 15:33:00",
+ "last_release": "v0.11.17",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/mpolden/echoip",
+ "star": 1935,
+ "commits": 242,
+ "modify_time": "2019-11-23 09:45:48",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/darkk/redsocks",
+ "star": 1933,
+ "commits": 211,
+ "modify_time": "2019-07-16 12:33:36",
+ "last_release": "\n release-0.5\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/AonCyberLabs/Windows-Exploit-Suggester",
+ "star": 1923,
+ "commits": 41,
+ "modify_time": "2017-02-17 14:01:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ziggear/shadowsocks",
+ "star": 1920,
+ "commits": 2,
+ "modify_time": "2015-09-08 11:24:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/powerdns/pdns",
+ "star": 1920,
+ "commits": 18156,
+ "modify_time": "2019-12-10 08:35:01",
+ "last_release": "\n auth-4.3.0-alpha1\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/cyb3rward0g/helk",
+ "star": 1920,
+ "commits": 448,
+ "modify_time": "2019-12-03 07:03:23",
+ "last_release": "v0.1.7-alpha03042019",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/toolswatch/blackhat-arsenal-tools",
+ "star": 1918,
+ "commits": 327,
+ "modify_time": "2019-09-19 17:32:22",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ntop/ndpi",
+ "star": 1917,
+ "commits": 2048,
+ "modify_time": "2019-12-09 18:04:13",
+ "last_release": "2.8",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/lanjelot/patator",
+ "star": 1915,
+ "commits": 168,
+ "modify_time": "2019-11-24 08:45:07",
+ "last_release": "\n 0.7\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/solo-io/gloo",
+ "star": 1914,
+ "commits": 675,
+ "modify_time": "2019-12-04 18:36:52",
+ "last_release": "v1.2.4",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/chaitin/xray",
+ "star": 1914,
+ "commits": 336,
+ "modify_time": "2019-12-10 08:50:20",
+ "last_release": "0.16.3",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/minishift/minishift",
+ "star": 1903,
+ "commits": 1751,
+ "modify_time": "2019-09-18 15:04:02",
+ "last_release": "v1.34.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/chipsec/chipsec",
+ "star": 1901,
+ "commits": 765,
+ "modify_time": "2019-12-02 22:35:38",
+ "last_release": "1.4.4",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/derv82/wifite2",
+ "star": 1900,
+ "commits": 279,
+ "modify_time": "2018-09-09 17:39:57",
+ "last_release": "2.2.5",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mhammond/pywin32",
+ "star": 1898,
+ "commits": 4277,
+ "modify_time": "2019-12-09 00:43:37",
+ "last_release": "b227",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/toniblyx/prowler",
+ "star": 1896,
+ "commits": 829,
+ "modify_time": "2019-12-05 11:52:19",
+ "last_release": "2.0",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/mozilla/mozdef",
+ "star": 1893,
+ "commits": 5651,
+ "modify_time": "2019-12-05 16:25:24",
+ "last_release": "v3.1.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fuzion24/justtrustme",
+ "star": 1893,
+ "commits": 59,
+ "modify_time": "2019-06-10 21:03:33",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/shadowsocks/simple-obfs",
+ "star": 1886,
+ "commits": 130,
+ "modify_time": "2019-08-17 08:00:58",
+ "last_release": "v0.0.5",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/aploium/zmirror",
+ "star": 1884,
+ "commits": 478,
+ "modify_time": "2018-08-21 05:38:52",
+ "last_release": "\n v0.29.4\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/python-security/pyt",
+ "star": 1880,
+ "commits": 1575,
+ "modify_time": "2019-08-13 15:57:54",
+ "last_release": "0.42",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/yara-rules/rules",
+ "star": 1878,
+ "commits": 1623,
+ "modify_time": "2019-11-26 13:53:30",
+ "last_release": "",
+ "lang": "YARA"
+ },
+ {
+ "link": "https://github.com/tum-vision/lsd_slam",
+ "star": 1878,
+ "commits": 55,
+ "modify_time": "2014-12-11 17:58:00",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/pycqa/bandit",
+ "star": 1878,
+ "commits": 1094,
+ "modify_time": "2019-10-19 04:55:56",
+ "last_release": "1.6.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/merbanan/rtl_433",
+ "star": 1877,
+ "commits": 2280,
+ "modify_time": "2019-12-10 08:55:49",
+ "last_release": "\n 19.08\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/olivierlaflamme/cheatsheet-god",
+ "star": 1876,
+ "commits": 93,
+ "modify_time": "2019-12-02 21:28:48",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/hmaverickadams/beginner-network-pentesting",
+ "star": 1876,
+ "commits": 29,
+ "modify_time": "2019-11-15 04:41:07",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/aquasecurity/kube-hunter",
+ "star": 1873,
+ "commits": 601,
+ "modify_time": "2019-11-30 08:45:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hmbsbige/shadowsocksr-windows",
+ "star": 1870,
+ "commits": 1209,
+ "modify_time": "2019-12-07 04:48:26",
+ "last_release": "5.1.8.2",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/adoptopenjdk/jitwatch",
+ "star": 1869,
+ "commits": 925,
+ "modify_time": "2019-12-05 23:01:51",
+ "last_release": "1.3.0",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/acidanthera/Lilu",
+ "star": 1865,
+ "commits": 326,
+ "modify_time": "2019-12-05 19:39:41",
+ "last_release": "1.4.0",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/bartblaze/php-backdoors",
+ "star": 1865,
+ "commits": 52,
+ "modify_time": "2019-02-08 21:47:23",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/tinyproxy/tinyproxy",
+ "star": 1864,
+ "commits": 1551,
+ "modify_time": "2019-11-18 20:19:06",
+ "last_release": "1.10.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/xcodeghostsource/xcodeghost",
+ "star": 1862,
+ "commits": 3,
+ "modify_time": "2015-09-18 20:59:29",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/vulnerscom/nmap-vulners",
+ "star": 1860,
+ "commits": 18,
+ "modify_time": "2019-12-03 05:09:24",
+ "last_release": "v1.4-beta",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/bypass007/emergency-response-notes",
+ "star": 1857,
+ "commits": 10,
+ "modify_time": "2019-07-29 16:09:25",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/pwnlandia/mhn",
+ "star": 1855,
+ "commits": 1031,
+ "modify_time": "2019-10-16 17:29:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/snyk/snyk",
+ "star": 1854,
+ "commits": 1766,
+ "modify_time": "2019-12-06 18:06:53",
+ "last_release": "v1.258.1",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/googlecreativelab/open-nsynth-super",
+ "star": 1854,
+ "commits": 17,
+ "modify_time": "2019-01-04 17:01:50",
+ "last_release": "\n 1.2.0\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/bregman-arie/devops-interview-questions",
+ "star": 1853,
+ "commits": 182,
+ "modify_time": "2019-12-09 18:24:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/arismelachroinos/lscript",
+ "star": 1853,
+ "commits": 301,
+ "modify_time": "2019-08-02 13:12:31",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/github/glb-director",
+ "star": 1852,
+ "commits": 180,
+ "modify_time": "2019-12-08 22:37:22",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jindrapetrik/jpexs-decompiler",
+ "star": 1851,
+ "commits": 4732,
+ "modify_time": "2018-09-08 13:32:29",
+ "last_release": "nightly1722",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/pooler/cpuminer",
+ "star": 1848,
+ "commits": 358,
+ "modify_time": "2019-06-11 17:20:44",
+ "last_release": "v2.5.0",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/Netflix-Skunkworks/stethoscope",
+ "star": 1847,
+ "commits": 377,
+ "modify_time": "2019-04-08 21:50:46",
+ "last_release": "\n v0.1.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hunters-forge/ThreatHunter-Playbook",
+ "star": 1842,
+ "commits": 299,
+ "modify_time": "2019-10-30 21:20:32",
+ "last_release": "",
+ "lang": "Jupyter Notebook"
+ },
+ {
+ "link": "https://github.com/yeriomin/yalpstore",
+ "star": 1842,
+ "commits": 1550,
+ "modify_time": "2018-10-16 00:55:46",
+ "last_release": "0.45",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/pytorch/glow",
+ "star": 1842,
+ "commits": 4549,
+ "modify_time": "2019-12-10 01:50:21",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/retroplasma/earth-reverse-engineering",
+ "star": 1841,
+ "commits": 167,
+ "modify_time": "2019-10-13 18:06:52",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/chora10/cknife",
+ "star": 1839,
+ "commits": 134,
+ "modify_time": "2016-08-03 08:24:36",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/jinnlynn/genpac",
+ "star": 1838,
+ "commits": 118,
+ "modify_time": "2018-11-13 07:48:53",
+ "last_release": "\n v2.0.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/influxdata/kapacitor",
+ "star": 1830,
+ "commits": 1631,
+ "modify_time": "2019-10-07 20:16:03",
+ "last_release": "\n v1.5.3\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/coreybutler/node-windows",
+ "star": 1828,
+ "commits": 181,
+ "modify_time": "2019-09-03 18:32:39",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/ctfs/write-ups-2015",
+ "star": 1828,
+ "commits": 2074,
+ "modify_time": "2018-09-19 10:37:33",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/trailofbits/manticore",
+ "star": 1824,
+ "commits": 847,
+ "modify_time": "2019-12-06 18:28:07",
+ "last_release": "0.3.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mgba-emu/mgba",
+ "star": 1819,
+ "commits": 5981,
+ "modify_time": "2019-12-06 00:19:54",
+ "last_release": "0.8-b1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/djadmin/awesome-bug-bounty",
+ "star": 1818,
+ "commits": 74,
+ "modify_time": "2019-10-16 09:39:31",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/veil-framework/veil",
+ "star": 1815,
+ "commits": 268,
+ "modify_time": "2019-07-05 15:30:50",
+ "last_release": "3.1.12",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/iagox86/dnscat2",
+ "star": 1814,
+ "commits": 992,
+ "modify_time": "2019-06-19 15:23:58",
+ "last_release": "v0.07",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/gdamore/tcell",
+ "star": 1804,
+ "commits": 175,
+ "modify_time": "2019-12-01 21:08:15",
+ "last_release": "\n v1.3.0\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/intelsdi-x/snap",
+ "star": 1801,
+ "commits": 2684,
+ "modify_time": "2018-12-20 01:29:46",
+ "last_release": "2.0.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/kpwn/yalu102",
+ "star": 1800,
+ "commits": 116,
+ "modify_time": "2017-02-02 20:30:47",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/lijiejie/subdomainsbrute",
+ "star": 1795,
+ "commits": 37,
+ "modify_time": "2019-05-19 07:18:38",
+ "last_release": "v1.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ctfs/write-ups-2017",
+ "star": 1790,
+ "commits": 151,
+ "modify_time": "2018-12-31 16:21:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/aozhimin/ios-monitor-platform",
+ "star": 1785,
+ "commits": 90,
+ "modify_time": "2018-10-13 08:28:12",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/pirate/wireguard-docs",
+ "star": 1784,
+ "commits": 117,
+ "modify_time": "2019-11-25 20:48:54",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/leebaird/discover",
+ "star": 1781,
+ "commits": 470,
+ "modify_time": "2019-11-27 06:55:33",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/caesar0301/awesome-pcaptools",
+ "star": 1779,
+ "commits": 79,
+ "modify_time": "2016-04-29 11:08:19",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/apitrace/apitrace",
+ "star": 1778,
+ "commits": 4415,
+ "modify_time": "2019-11-26 16:49:39",
+ "last_release": "9.0",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/wrbug/dumpdex",
+ "star": 1777,
+ "commits": 50,
+ "modify_time": "2019-05-09 06:54:58",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ezyang/htmlpurifier",
+ "star": 1777,
+ "commits": 1636,
+ "modify_time": "2019-12-04 15:29:08",
+ "last_release": "\n v4.12.0\n ",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/convox/rack",
+ "star": 1777,
+ "commits": 8134,
+ "modify_time": "2019-12-07 04:23:55",
+ "last_release": "\n 20191121155829-ci-registries\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/tapwork/heapinspector-for-ios",
+ "star": 1774,
+ "commits": 315,
+ "modify_time": "2017-03-08 17:00:23",
+ "last_release": "1.0.1",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/epinna/weevely3",
+ "star": 1774,
+ "commits": 834,
+ "modify_time": "2019-09-15 20:26:41",
+ "last_release": "v3.7.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cazala/coin-hive",
+ "star": 1772,
+ "commits": 150,
+ "modify_time": "2018-03-26 01:13:54",
+ "last_release": "1.10.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/alibaba/wax",
+ "star": 1770,
+ "commits": 561,
+ "modify_time": "2017-03-30 07:41:26",
+ "last_release": "1.1.0",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/google/wuffs",
+ "star": 1761,
+ "commits": 2044,
+ "modify_time": "2019-12-06 06:36:47",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/b374k/b374k",
+ "star": 1761,
+ "commits": 43,
+ "modify_time": "2018-06-06 04:22:19",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/elastic/logstash-forwarder",
+ "star": 1760,
+ "commits": 638,
+ "modify_time": "2016-10-12 18:53:52",
+ "last_release": "\n v0.4.0\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/puppeteer/examples",
+ "star": 1758,
+ "commits": 106,
+ "modify_time": "2018-12-18 20:38:20",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/17mon/china_ip_list",
+ "star": 1756,
+ "commits": 66,
+ "modify_time": "2019-12-02 06:22:29",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/onethawt/idaplugins-list",
+ "star": 1754,
+ "commits": 170,
+ "modify_time": "2019-10-14 16:54:02",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/wordpress/wordpress-coding-standards",
+ "star": 1747,
+ "commits": 2571,
+ "modify_time": "2019-12-09 14:54:11",
+ "last_release": "2.2.0",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/fuzzysecurity/powershell-suite",
+ "star": 1745,
+ "commits": 98,
+ "modify_time": "2018-09-02 16:54:21",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/coreb1t/awesome-pentest-cheat-sheets",
+ "star": 1744,
+ "commits": 74,
+ "modify_time": "2018-10-31 05:43:57",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/tunz/js-vuln-db",
+ "star": 1742,
+ "commits": 173,
+ "modify_time": "2019-09-03 22:42:41",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ngalongc/bug-bounty-reference",
+ "star": 1739,
+ "commits": 194,
+ "modify_time": "2019-11-21 02:37:02",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/vzex/dog-tunnel",
+ "star": 1738,
+ "commits": 159,
+ "modify_time": "2018-05-04 03:16:02",
+ "last_release": "lite_v1.41",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/orangetw/my-ctf-web-challenges",
+ "star": 1735,
+ "commits": 67,
+ "modify_time": "2019-10-14 04:00:56",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/fireeye/flare-vm",
+ "star": 1731,
+ "commits": 126,
+ "modify_time": "2019-11-06 21:24:14",
+ "last_release": "2.2.20",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/s-rah/onionscan",
+ "star": 1730,
+ "commits": 130,
+ "modify_time": "2017-02-25 17:10:31",
+ "last_release": "OnionScan-0.2",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/ahmyth/ahmyth-android-rat",
+ "star": 1730,
+ "commits": 21,
+ "modify_time": "2019-06-10 02:48:47",
+ "last_release": "",
+ "lang": "Smali"
+ },
+ {
+ "link": "https://github.com/selierlin/share-ssr-v2ray",
+ "star": 1723,
+ "commits": 157,
+ "modify_time": "2019-11-28 06:22:44",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/google/honggfuzz",
+ "star": 1719,
+ "commits": 3429,
+ "modify_time": "2019-12-07 21:45:08",
+ "last_release": "2.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/constverum/proxybroker",
+ "star": 1718,
+ "commits": 152,
+ "modify_time": "2019-03-13 10:21:05",
+ "last_release": "\n v0.3.2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lgandx/responder",
+ "star": 1717,
+ "commits": 336,
+ "modify_time": "2019-08-20 02:20:42",
+ "last_release": "\n v2.3.4.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cliffe/secgen",
+ "star": 1714,
+ "commits": 1509,
+ "modify_time": "2019-12-06 17:02:44",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/eth0izzle/shhgit",
+ "star": 1710,
+ "commits": 25,
+ "modify_time": "2019-11-03 15:52:12",
+ "last_release": "v0.2",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/anorov/cloudflare-scrape",
+ "star": 1709,
+ "commits": 150,
+ "modify_time": "2019-09-08 04:47:26",
+ "last_release": "2.0.8",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ac-pm/inspeckage",
+ "star": 1709,
+ "commits": 195,
+ "modify_time": "2018-08-24 02:11:43",
+ "last_release": "v2.4",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/brentozarultd/sql-server-first-responder-kit",
+ "star": 1707,
+ "commits": 3621,
+ "modify_time": "2019-12-08 15:09:59",
+ "last_release": "20191202",
+ "lang": "TSQL"
+ },
+ {
+ "link": "https://github.com/hashicorp/memberlist",
+ "star": 1706,
+ "commits": 619,
+ "modify_time": "2019-11-25 16:04:46",
+ "last_release": "v0.1.5",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/guelfoweb/knock",
+ "star": 1700,
+ "commits": 275,
+ "modify_time": "2019-04-29 10:42:54",
+ "last_release": "4.1.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bagder/http2-explained",
+ "star": 1697,
+ "commits": 486,
+ "modify_time": "2019-03-03 16:14:35",
+ "last_release": "\n v1.12\n ",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/xtr4nge/fruitywifi",
+ "star": 1696,
+ "commits": 423,
+ "modify_time": "2019-09-21 08:57:18",
+ "last_release": "v2.4",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/haxpor/potatso",
+ "star": 1696,
+ "commits": 186,
+ "modify_time": "2018-10-01 00:54:14",
+ "last_release": "1.6.1",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/yelp/osxcollector",
+ "star": 1695,
+ "commits": 342,
+ "modify_time": "2019-06-19 15:40:48",
+ "last_release": "v1.10",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/okturtles/dnschain",
+ "star": 1695,
+ "commits": 348,
+ "modify_time": "2017-04-22 03:52:19",
+ "last_release": "0.5.3",
+ "lang": "CoffeeScript"
+ },
+ {
+ "link": "https://github.com/networkprotocol/netcode.io",
+ "star": 1689,
+ "commits": 920,
+ "modify_time": "2019-07-20 19:17:57",
+ "last_release": "v1.2.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/expressjs/csurf",
+ "star": 1687,
+ "commits": 272,
+ "modify_time": "2019-07-30 04:03:02",
+ "last_release": "1.10.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/chromium/badssl.com",
+ "star": 1687,
+ "commits": 481,
+ "modify_time": "2019-11-27 00:45:38",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/raspberrypi/noobs",
+ "star": 1686,
+ "commits": 332,
+ "modify_time": "2019-04-14 22:49:45",
+ "last_release": "v3.0",
+ "lang": "Makefile"
+ },
+ {
+ "link": "https://github.com/briatte/awesome-network-analysis",
+ "star": 1685,
+ "commits": 286,
+ "modify_time": "2019-08-26 11:37:11",
+ "last_release": "v1.3",
+ "lang": "R"
+ },
+ {
+ "link": "https://github.com/owasp/devguide",
+ "star": 1683,
+ "commits": 198,
+ "modify_time": "2018-07-17 19:11:48",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/rootm0s/winpwnage",
+ "star": 1682,
+ "commits": 598,
+ "modify_time": "2019-09-26 18:17:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pmusolino/wormholy",
+ "star": 1677,
+ "commits": 205,
+ "modify_time": "2019-11-11 22:53:19",
+ "last_release": "1.5.1",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/microsoft/detours",
+ "star": 1674,
+ "commits": 42,
+ "modify_time": "2019-12-09 18:20:48",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/yegord/snowman",
+ "star": 1671,
+ "commits": 720,
+ "modify_time": "2019-05-24 08:44:07",
+ "last_release": "\n v0.1.3\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/angryip/ipscan",
+ "star": 1668,
+ "commits": 1288,
+ "modify_time": "2019-10-14 21:27:13",
+ "last_release": "3.6.2",
+ "lang": "NSIS"
+ },
+ {
+ "link": "https://github.com/apache/geode",
+ "star": 1666,
+ "commits": 8769,
+ "modify_time": "2019-12-10 04:23:30",
+ "last_release": "\n rel/v1.10.0.2\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/dodola/hotfix",
+ "star": 1663,
+ "commits": 13,
+ "modify_time": "2016-05-27 17:44:35",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/easyhook/easyhook",
+ "star": 1661,
+ "commits": 83,
+ "modify_time": "2019-06-07 06:31:10",
+ "last_release": "v2.7.6789.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cea-sec/ivre",
+ "star": 1661,
+ "commits": 2469,
+ "modify_time": "2019-12-10 07:45:53",
+ "last_release": "\n v0.9.14\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/roave/securityadvisories",
+ "star": 1659,
+ "commits": 566,
+ "modify_time": "2019-12-02 13:03:15",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/tylerbrock/mongo-hacker",
+ "star": 1656,
+ "commits": 363,
+ "modify_time": "2019-12-06 12:31:42",
+ "last_release": "0.1.1",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/boppreh/keyboard",
+ "star": 1655,
+ "commits": 738,
+ "modify_time": "2019-09-25 06:38:44",
+ "last_release": "v0.13.4",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ghacksuserjs/ghacks-user.js",
+ "star": 1654,
+ "commits": 1357,
+ "modify_time": "2019-12-09 20:18:42",
+ "last_release": "v71.0-beta",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/juude/droidreverse",
+ "star": 1652,
+ "commits": 27,
+ "modify_time": "2017-08-29 14:06:59",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/dsasmblr/game-hacking",
+ "star": 1652,
+ "commits": 70,
+ "modify_time": "2019-05-31 00:24:12",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/evilcos/xssor2",
+ "star": 1651,
+ "commits": 36,
+ "modify_time": "2019-02-03 05:51:11",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/ehco1996/django-sspanel",
+ "star": 1650,
+ "commits": 518,
+ "modify_time": "2019-11-08 11:20:39",
+ "last_release": "2.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/clong/detectionlab",
+ "star": 1650,
+ "commits": 416,
+ "modify_time": "2019-12-05 05:40:20",
+ "last_release": "4.0",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/evyatarmeged/raccoon",
+ "star": 1649,
+ "commits": 183,
+ "modify_time": "2018-11-24 16:55:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jbevain/cecil",
+ "star": 1648,
+ "commits": 1225,
+ "modify_time": "2019-12-10 03:52:03",
+ "last_release": "0.11.1",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/camwiegert/baffle",
+ "star": 1645,
+ "commits": 109,
+ "modify_time": "2017-03-29 19:16:51",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/tylerha97/awesome-reversing",
+ "star": 1643,
+ "commits": 9,
+ "modify_time": "2019-03-08 00:24:33",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/fesh0r/fernflower",
+ "star": 1643,
+ "commits": 468,
+ "modify_time": "2019-01-05 02:54:23",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/ctfs/write-ups-2014",
+ "star": 1638,
+ "commits": 1022,
+ "modify_time": "2016-04-27 15:59:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dlundquist/sniproxy",
+ "star": 1638,
+ "commits": 739,
+ "modify_time": "2019-01-24 02:38:17",
+ "last_release": "\n 0.6.0\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ctfs/write-ups-2014",
+ "star": 1638,
+ "commits": 1022,
+ "modify_time": "2016-04-27 15:59:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jaredrummler/androidprocesses",
+ "star": 1636,
+ "commits": 121,
+ "modify_time": "2019-08-16 05:06:52",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/awnumar/memguard",
+ "star": 1634,
+ "commits": 362,
+ "modify_time": "2019-11-27 21:59:31",
+ "last_release": "v0.21.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/tencent/oomdetector",
+ "star": 1631,
+ "commits": 63,
+ "modify_time": "2019-06-18 04:47:01",
+ "last_release": "\n 0.14\n ",
+ "lang": "Objective-C++"
+ },
+ {
+ "link": "https://github.com/efforg/privacybadger",
+ "star": 1630,
+ "commits": 4734,
+ "modify_time": "2019-12-05 17:54:57",
+ "last_release": "release-2019.11.18",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/c0ny1/upload-labs",
+ "star": 1630,
+ "commits": 52,
+ "modify_time": "2019-11-12 17:45:45",
+ "last_release": "0.1",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/sarojaba/awesome-devblog",
+ "star": 1629,
+ "commits": 2337,
+ "modify_time": "2019-12-07 06:26:29",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/jhaddix/tbhm",
+ "star": 1624,
+ "commits": 87,
+ "modify_time": "2018-03-30 06:16:28",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/functionclub/v2ray.fun",
+ "star": 1624,
+ "commits": 141,
+ "modify_time": "2019-08-05 03:27:21",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/internetwache/gittools",
+ "star": 1621,
+ "commits": 50,
+ "modify_time": "2019-10-23 13:53:12",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/tiann/epic",
+ "star": 1618,
+ "commits": 101,
+ "modify_time": "2019-11-14 05:23:43",
+ "last_release": "0.3.2",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/addyosmani/a11y",
+ "star": 1615,
+ "commits": 162,
+ "modify_time": "2018-03-26 03:45:09",
+ "last_release": "\n v0.5.1\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/ysrc/yulong-hids",
+ "star": 1614,
+ "commits": 150,
+ "modify_time": "2019-10-18 13:51:50",
+ "last_release": "v0.4.4",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/sipt/shuttle",
+ "star": 1614,
+ "commits": 156,
+ "modify_time": "2019-05-17 03:49:48",
+ "last_release": "alpha-v0.6.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/drizzlerisk/drizzledumper",
+ "star": 1612,
+ "commits": 20,
+ "modify_time": "2017-04-12 08:32:15",
+ "last_release": "",
+ "lang": "Makefile"
+ },
+ {
+ "link": "https://github.com/localtunnel/server",
+ "star": 1608,
+ "commits": 168,
+ "modify_time": "2019-03-26 15:56:17",
+ "last_release": "\n v0.0.8\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/nmikhailov/validity90",
+ "star": 1608,
+ "commits": 129,
+ "modify_time": "2019-02-25 17:10:20",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/lief-project/lief",
+ "star": 1606,
+ "commits": 729,
+ "modify_time": "2019-12-10 05:33:48",
+ "last_release": "0.10.1",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/w1109790800/penetration",
+ "star": 1602,
+ "commits": null,
+ "modify_time": "2019-06-01 15:09:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nccgroup/Scout2",
+ "star": 1601,
+ "commits": 1182,
+ "modify_time": "2018-11-22 12:12:51",
+ "last_release": "v3.2.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mozilla/cipherscan",
+ "star": 1601,
+ "commits": 415,
+ "modify_time": "2019-07-26 16:27:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bitnami-labs/sealed-secrets",
+ "star": 1600,
+ "commits": 495,
+ "modify_time": "2019-12-06 16:56:00",
+ "last_release": "v0.9.6",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/keraf/nocoin",
+ "star": 1599,
+ "commits": 164,
+ "modify_time": "2018-02-25 22:10:01",
+ "last_release": "0.4.14",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/spotbugs/spotbugs",
+ "star": 1598,
+ "commits": 16138,
+ "modify_time": "2019-11-27 00:38:51",
+ "last_release": "4.0.0_beta4",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/knownsec/pocsuite",
+ "star": 1597,
+ "commits": 430,
+ "modify_time": "2019-09-11 09:51:44",
+ "last_release": "2.0.8",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ntop/n2n",
+ "star": 1591,
+ "commits": 243,
+ "modify_time": "2019-11-13 20:49:37",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ivrodriguezca/re-ios-apps",
+ "star": 1591,
+ "commits": 15,
+ "modify_time": "2019-11-18 06:22:15",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/brunofacca/zen-rails-security-checklist",
+ "star": 1584,
+ "commits": 74,
+ "modify_time": "2019-06-04 11:35:25",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/l3m0n/pentest_study",
+ "star": 1583,
+ "commits": 2,
+ "modify_time": "2016-04-08 12:16:28",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ealeksandrov/provisionql",
+ "star": 1582,
+ "commits": 59,
+ "modify_time": "2019-11-02 16:29:21",
+ "last_release": "1.6.1",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/qihoo360/phptrace",
+ "star": 1581,
+ "commits": 502,
+ "modify_time": "2018-11-28 15:12:10",
+ "last_release": "v1.0.1-beta",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/firmianay/ctf-all-in-one",
+ "star": 1570,
+ "commits": 396,
+ "modify_time": "2019-10-12 15:00:36",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/samyk/pwnat",
+ "star": 1569,
+ "commits": 13,
+ "modify_time": "2017-12-22 00:02:52",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/opendevops-cn/opendevops",
+ "star": 1569,
+ "commits": 174,
+ "modify_time": "2019-11-13 01:58:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/codahale/bcrypt-ruby",
+ "star": 1566,
+ "commits": 260,
+ "modify_time": "2019-11-27 23:38:07",
+ "last_release": "\n v3.1.13\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/sofastack/sofa-mosn",
+ "star": 1565,
+ "commits": 2820,
+ "modify_time": "2019-11-25 12:15:49",
+ "last_release": "0.8.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/p-gen/smenu",
+ "star": 1562,
+ "commits": 506,
+ "modify_time": "2019-11-23 13:24:36",
+ "last_release": "v0.9.15",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/k4m4/kickthemout",
+ "star": 1562,
+ "commits": 212,
+ "modify_time": "2019-11-27 19:48:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gchq/Gaffer",
+ "star": 1561,
+ "commits": 6665,
+ "modify_time": "2019-11-25 14:38:00",
+ "last_release": "gaffer2-1.10.3",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/unkl4b/gitminer",
+ "star": 1560,
+ "commits": 53,
+ "modify_time": "2018-10-24 05:46:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/caffix/amass",
+ "star": 1560,
+ "commits": 1014,
+ "modify_time": "2019-12-06 13:50:12",
+ "last_release": "v2.3.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/m4ll0k/WAScan",
+ "star": 1557,
+ "commits": 27,
+ "modify_time": "2019-04-23 22:08:39",
+ "last_release": "v0.2.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/eolinker/goku-api-gateway",
+ "star": 1556,
+ "commits": 141,
+ "modify_time": "2019-11-27 10:26:04",
+ "last_release": "3.1.2",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/mzet-/linux-exploit-suggester",
+ "star": 1555,
+ "commits": 140,
+ "modify_time": "2019-10-29 09:03:11",
+ "last_release": "\n v1.0\n ",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/mewebstudio/captcha",
+ "star": 1549,
+ "commits": 195,
+ "modify_time": "2019-12-05 11:15:51",
+ "last_release": "3.0.2",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/joxeankoret/diaphora",
+ "star": 1549,
+ "commits": 256,
+ "modify_time": "2019-11-01 10:58:51",
+ "last_release": "2.0.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ctfs/write-ups-2016",
+ "star": 1548,
+ "commits": 1079,
+ "modify_time": "2018-06-12 16:32:43",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/raspberrypi/userland",
+ "star": 1544,
+ "commits": 743,
+ "modify_time": "2019-11-27 13:20:51",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/google/pyringe",
+ "star": 1544,
+ "commits": 22,
+ "modify_time": "2014-05-10 14:35:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/juju/juju",
+ "star": 1543,
+ "commits": 64853,
+ "modify_time": "2019-12-10 01:22:28",
+ "last_release": "juju-2.7.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/awolfly9/ipproxytool",
+ "star": 1541,
+ "commits": 115,
+ "modify_time": "2018-04-04 12:18:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hteso/iaito",
+ "star": 1540,
+ "commits": 290,
+ "modify_time": "2017-09-25 10:13:42",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ezlippi/webbench",
+ "star": 1539,
+ "commits": 35,
+ "modify_time": "2018-01-20 17:33:28",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/lifting-bits/mcsema",
+ "star": 1537,
+ "commits": 1008,
+ "modify_time": "2019-12-02 16:48:32",
+ "last_release": "v2.0.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ukanth/afwall",
+ "star": 1536,
+ "commits": 1599,
+ "modify_time": "2019-12-08 10:36:18",
+ "last_release": "v3.3.1",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/emijrp/awesome-awesome",
+ "star": 1533,
+ "commits": 112,
+ "modify_time": "2019-11-28 14:10:17",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/x0rz/eqgrp_lost_in_translation",
+ "star": 1532,
+ "commits": 3,
+ "modify_time": "2017-04-14 12:01:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nmap/npcap",
+ "star": 1526,
+ "commits": 1396,
+ "modify_time": "2019-12-09 20:14:04",
+ "last_release": "v0.9984",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/qiwihui/hiwifi-ss",
+ "star": 1522,
+ "commits": 127,
+ "modify_time": "2018-08-02 08:38:42",
+ "last_release": "v1.0.9",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/spring-guides/tut-spring-security-and-angular-js",
+ "star": 1521,
+ "commits": 296,
+ "modify_time": "2019-08-12 14:15:22",
+ "last_release": "",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/jiangwenyuan/nuster",
+ "star": 1521,
+ "commits": 11312,
+ "modify_time": "2019-12-09 11:55:35",
+ "last_release": "v3.1.3.19",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/joefitzgerald/packer-windows",
+ "star": 1519,
+ "commits": 385,
+ "modify_time": "2019-02-13 03:16:32",
+ "last_release": "v1.25",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/google/rekall",
+ "star": 1518,
+ "commits": 1396,
+ "modify_time": "2019-03-14 04:54:35",
+ "last_release": "1.7.2rc1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zerosum0x0/koadic",
+ "star": 1517,
+ "commits": 590,
+ "modify_time": "2019-12-03 23:31:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/snowming04/the-hacker-playbook-3-translation",
+ "star": 1516,
+ "commits": 123,
+ "modify_time": "2019-07-04 06:41:57",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/sensepost/regeorg",
+ "star": 1514,
+ "commits": 30,
+ "modify_time": "2017-02-16 11:39:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dripcap/dripcap",
+ "star": 1510,
+ "commits": 745,
+ "modify_time": "2018-08-06 11:48:27",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/haugene/docker-transmission-openvpn",
+ "star": 1508,
+ "commits": 813,
+ "modify_time": "2019-10-26 09:56:34",
+ "last_release": "v2.7",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/eldraco/domain_analyzer",
+ "star": 1505,
+ "commits": 31,
+ "modify_time": "2017-09-08 08:36:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hannob/snallygaster",
+ "star": 1504,
+ "commits": 65,
+ "modify_time": "2019-11-15 11:02:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cybermonitor/apt_cybercriminal_campagin_collections",
+ "star": 1499,
+ "commits": 512,
+ "modify_time": "2019-12-07 13:10:09",
+ "last_release": "",
+ "lang": "YARA"
+ },
+ {
+ "link": "https://github.com/epinna/tplmap",
+ "star": 1497,
+ "commits": 711,
+ "modify_time": "2019-08-20 08:04:40",
+ "last_release": "v0.5",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ahupp/python-magic",
+ "star": 1489,
+ "commits": 195,
+ "modify_time": "2019-12-06 22:44:50",
+ "last_release": "\n 0.4.15\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gh0u1l5/wechatmagician",
+ "star": 1486,
+ "commits": 757,
+ "modify_time": "2018-05-23 20:50:26",
+ "last_release": "2.8.0",
+ "lang": "Kotlin"
+ },
+ {
+ "link": "https://github.com/wangyu-/tinyfecvpn",
+ "star": 1485,
+ "commits": 76,
+ "modify_time": "2019-05-02 05:54:45",
+ "last_release": "20180820.0",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/bitsadmin/wesng",
+ "star": 1482,
+ "commits": 92,
+ "modify_time": "2019-12-04 20:57:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sleuthkit/sleuthkit",
+ "star": 1481,
+ "commits": 7149,
+ "modify_time": "2019-12-09 22:21:41",
+ "last_release": "sleuthkit-4.7.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/f1xpl/openauto",
+ "star": 1480,
+ "commits": 110,
+ "modify_time": "2018-09-14 20:02:37",
+ "last_release": "v1.1.1",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ctcaer/hekate",
+ "star": 1479,
+ "commits": 397,
+ "modify_time": "2019-12-08 16:59:00",
+ "last_release": "v5.1.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/iqiyi/xhook",
+ "star": 1478,
+ "commits": 80,
+ "modify_time": "2019-12-04 04:47:18",
+ "last_release": "\n v1.2.0\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/blackarch/blackarch",
+ "star": 1477,
+ "commits": 17434,
+ "modify_time": "2019-12-09 22:17:10",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/jmpews/hookzz",
+ "star": 1476,
+ "commits": 151,
+ "modify_time": "2019-10-11 16:48:37",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/minimaxir/hacker-news-undocumented",
+ "star": 1471,
+ "commits": 46,
+ "modify_time": "2019-11-15 02:52:08",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/Veil-Framework/Veil-Evasion",
+ "star": 1470,
+ "commits": 602,
+ "modify_time": "2017-02-05 15:57:31",
+ "last_release": "2.28.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/google/keytransparency",
+ "star": 1470,
+ "commits": 1742,
+ "modify_time": "2019-12-10 08:41:36",
+ "last_release": "\n v0.1.2-alpha\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/alibaba/lvs",
+ "star": 1469,
+ "commits": 9,
+ "modify_time": "2013-07-04 06:35:42",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/neex/phuip-fpizdam",
+ "star": 1466,
+ "commits": 34,
+ "modify_time": "2019-11-12 18:52:37",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/oros42/imsi-catcher",
+ "star": 1464,
+ "commits": 99,
+ "modify_time": "2019-06-12 17:14:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ufrisk/pcileech",
+ "star": 1463,
+ "commits": 100,
+ "modify_time": "2019-12-04 21:49:42",
+ "last_release": "v4.3",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/edoverflow/can-i-take-over-xyz",
+ "star": 1462,
+ "commits": 146,
+ "modify_time": "2019-12-03 02:36:14",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/enablesecurity/wafw00f",
+ "star": 1459,
+ "commits": 748,
+ "modify_time": "2019-12-09 12:40:06",
+ "last_release": "v1.0.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/acaudwell/logstalgia",
+ "star": 1458,
+ "commits": 321,
+ "modify_time": "2018-06-13 23:03:34",
+ "last_release": "logstalgia-1.1.2",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/d4vinci/cr3dov3r",
+ "star": 1455,
+ "commits": 46,
+ "modify_time": "2018-11-03 18:47:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/srslte/srslte",
+ "star": 1453,
+ "commits": 4489,
+ "modify_time": "2019-11-29 12:29:35",
+ "last_release": "release_19_09",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/rocky/python-uncompyle6",
+ "star": 1451,
+ "commits": 2436,
+ "modify_time": "2019-12-10 02:37:39",
+ "last_release": "3.5.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tiancode/learn-hacking",
+ "star": 1447,
+ "commits": 100,
+ "modify_time": "2016-11-04 14:44:28",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/tiancode/learn-hacking",
+ "star": 1447,
+ "commits": 100,
+ "modify_time": "2016-11-04 14:44:28",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/neo23x0/loki",
+ "star": 1447,
+ "commits": 1056,
+ "modify_time": "2019-10-16 15:07:07",
+ "last_release": "v0.30.4",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tianocore/edk2",
+ "star": 1446,
+ "commits": 27007,
+ "modify_time": "2019-12-07 13:41:10",
+ "last_release": "edk2-stable201911",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/skydive-project/skydive",
+ "star": 1446,
+ "commits": 4705,
+ "modify_time": "2019-11-22 12:15:49",
+ "last_release": "v0.26.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/microsoft/seal",
+ "star": 1446,
+ "commits": 679,
+ "modify_time": "2019-11-28 02:17:38",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/vaibhavpandeyvpz/apkstudio",
+ "star": 1445,
+ "commits": 293,
+ "modify_time": "2019-09-21 04:17:10",
+ "last_release": "5.2.0",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/google/gapid",
+ "star": 1437,
+ "commits": 3829,
+ "modify_time": "2019-12-06 14:25:29",
+ "last_release": "v1.6.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/cypherpunkarmory/userland",
+ "star": 1436,
+ "commits": 1070,
+ "modify_time": "2019-11-21 19:02:22",
+ "last_release": "v2.6.5",
+ "lang": "Kotlin"
+ },
+ {
+ "link": "https://github.com/tpruvot/ccminer",
+ "star": 1433,
+ "commits": 960,
+ "modify_time": "2019-01-30 15:01:24",
+ "last_release": "2.3.1-tpruvot",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/pedronauck/reworm",
+ "star": 1433,
+ "commits": 40,
+ "modify_time": "2018-11-14 18:20:23",
+ "last_release": "v2.0.2",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/x64dbg/scyllahide",
+ "star": 1432,
+ "commits": 727,
+ "modify_time": "2019-06-03 01:14:45",
+ "last_release": "snapshot",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/feralinteractive/gamemode",
+ "star": 1432,
+ "commits": 503,
+ "modify_time": "2019-10-22 11:41:37",
+ "last_release": "1.4",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/gdbinit/machoview",
+ "star": 1429,
+ "commits": 52,
+ "modify_time": "2015-04-23 11:21:03",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/nabla-c0d3/ssl-kill-switch2",
+ "star": 1427,
+ "commits": 61,
+ "modify_time": "2019-12-03 04:45:52",
+ "last_release": "0.14",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/plasma-umass/coz",
+ "star": 1426,
+ "commits": 438,
+ "modify_time": "2019-11-21 16:37:34",
+ "last_release": "0.2.1",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/aappleby/smhasher",
+ "star": 1426,
+ "commits": 62,
+ "modify_time": "2016-01-09 06:07:17",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/google/stenographer",
+ "star": 1425,
+ "commits": 475,
+ "modify_time": "2019-09-17 13:16:31",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/moxie0/sslstrip",
+ "star": 1424,
+ "commits": 7,
+ "modify_time": "2011-09-30 16:59:56",
+ "last_release": "\n v0.9\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/aslody/legend",
+ "star": 1424,
+ "commits": 16,
+ "modify_time": "2019-01-30 02:34:13",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/google/google-ctf",
+ "star": 1423,
+ "commits": 47,
+ "modify_time": "2019-11-27 18:24:54",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/nathanlopez/stitch",
+ "star": 1422,
+ "commits": 18,
+ "modify_time": "2017-02-14 23:58:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mandatoryprogrammer/northkoreadnsleak",
+ "star": 1422,
+ "commits": 20,
+ "modify_time": "2016-09-23 18:16:07",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/xdavidhu/mitmap",
+ "star": 1419,
+ "commits": 89,
+ "modify_time": "2019-11-03 11:34:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/antirez/dump1090",
+ "star": 1419,
+ "commits": 77,
+ "modify_time": "2017-01-09 08:57:12",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/s4n7h0/xvwa",
+ "star": 1418,
+ "commits": 51,
+ "modify_time": "2019-07-01 17:14:50",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/yadox666/the-hackers-hardware-toolkit",
+ "star": 1417,
+ "commits": 24,
+ "modify_time": "2019-08-07 10:23:10",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/shadowsocks/shadowsocks-rust",
+ "star": 1417,
+ "commits": 677,
+ "modify_time": "2019-12-08 14:04:36",
+ "last_release": "v1.8.0-alpha.2",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/barnybug/cli53",
+ "star": 1417,
+ "commits": 214,
+ "modify_time": "2019-11-04 12:00:27",
+ "last_release": "0.8.16",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/z3apa3a/3proxy",
+ "star": 1415,
+ "commits": 522,
+ "modify_time": "2019-12-04 14:56:06",
+ "last_release": "0.8.13",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ettercap/ettercap",
+ "star": 1414,
+ "commits": 2963,
+ "modify_time": "2019-12-03 22:24:16",
+ "last_release": "v0.8.3",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/lolbas-project/lolbas",
+ "star": 1413,
+ "commits": 159,
+ "modify_time": "2019-11-18 11:50:49",
+ "last_release": "",
+ "lang": "XSLT"
+ },
+ {
+ "link": "https://github.com/chrisk44/hijacker",
+ "star": 1413,
+ "commits": 299,
+ "modify_time": "2019-11-17 19:22:19",
+ "last_release": "v1.5-beta.11",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/namhyung/uftrace",
+ "star": 1412,
+ "commits": 3625,
+ "modify_time": "2019-12-02 23:44:20",
+ "last_release": "\n v0.9.3\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/gitguardian/apisecuritybestpractices",
+ "star": 1412,
+ "commits": 32,
+ "modify_time": "2019-07-08 17:23:16",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/eteran/edb-debugger",
+ "star": 1411,
+ "commits": 3098,
+ "modify_time": "2019-12-05 13:49:07",
+ "last_release": "1.1.0",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/cosmos72/gomacro",
+ "star": 1411,
+ "commits": 1153,
+ "modify_time": "2019-12-08 17:40:34",
+ "last_release": "v2.7",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/hellogcc/100-gdb-tips",
+ "star": 1410,
+ "commits": 198,
+ "modify_time": "2019-09-22 08:18:01",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/owasp/top10",
+ "star": 1408,
+ "commits": 1740,
+ "modify_time": "2019-09-19 17:26:46",
+ "last_release": "\n 2017-RC2\n ",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/google/nsjail",
+ "star": 1407,
+ "commits": 1037,
+ "modify_time": "2019-12-07 16:24:29",
+ "last_release": "2.9",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/gwuhaolin/blog",
+ "star": 1405,
+ "commits": 61,
+ "modify_time": "2018-11-14 09:44:51",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/dotnet/llilc",
+ "star": 1405,
+ "commits": 1285,
+ "modify_time": "2018-11-13 19:41:02",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/chinashiyu/gfw.press",
+ "star": 1404,
+ "commits": 85,
+ "modify_time": "2019-12-04 15:03:35",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/crazy-max/windowsspyblocker",
+ "star": 1403,
+ "commits": 526,
+ "modify_time": "2019-12-09 23:25:21",
+ "last_release": "4.26.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/anttiviljami/browser-autofill-phishing",
+ "star": 1401,
+ "commits": 18,
+ "modify_time": "2019-03-26 12:18:07",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/johnno1962/injectioniii",
+ "star": 1399,
+ "commits": 99,
+ "modify_time": "2019-11-25 20:10:41",
+ "last_release": "1.8",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/filosottile/whosthere",
+ "star": 1397,
+ "commits": 26,
+ "modify_time": "2018-11-24 21:37:04",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/putterpanda/mimikittenz",
+ "star": 1396,
+ "commits": 8,
+ "modify_time": "2016-07-08 16:07:00",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/quiet/org.quietmodem.quiet",
+ "star": 1395,
+ "commits": 39,
+ "modify_time": "2019-11-15 06:32:32",
+ "last_release": "v0.1.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/atarity/deploy-your-own-saas",
+ "star": 1393,
+ "commits": 24,
+ "modify_time": "2019-12-08 12:41:48",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ekultek/whatwaf",
+ "star": 1393,
+ "commits": 366,
+ "modify_time": "2019-12-03 01:17:20",
+ "last_release": "1.8",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jonathansalwan/triton",
+ "star": 1392,
+ "commits": 2841,
+ "modify_time": "2019-11-25 14:57:46",
+ "last_release": "v0.7",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/johntroony/php-webshells",
+ "star": 1388,
+ "commits": 20,
+ "modify_time": "2016-04-12 08:31:35",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/eth0izzle/bucket-stream",
+ "star": 1387,
+ "commits": 35,
+ "modify_time": "2019-01-01 22:08:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sqren/fb-sleep-stats",
+ "star": 1386,
+ "commits": 120,
+ "modify_time": "2018-04-21 23:10:24",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/ix64/unlock-music",
+ "star": 1384,
+ "commits": 43,
+ "modify_time": "2019-12-07 07:09:09",
+ "last_release": "1.0.2",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/almandin/fuxploider",
+ "star": 1381,
+ "commits": 127,
+ "modify_time": "2019-06-12 12:57:39",
+ "last_release": "v1.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dynamorio/drmemory",
+ "star": 1380,
+ "commits": 2451,
+ "modify_time": "2019-11-26 21:58:07",
+ "last_release": "cronbuild-2.2.18226",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/drduh/pwd.sh",
+ "star": 1380,
+ "commits": 66,
+ "modify_time": "2019-11-28 23:14:51",
+ "last_release": "2.0b",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/mirage/mirage",
+ "star": 1378,
+ "commits": 1952,
+ "modify_time": "2019-11-29 13:05:46",
+ "last_release": "v3.7.2",
+ "lang": "OCaml"
+ },
+ {
+ "link": "https://github.com/lockfale/osint-framework",
+ "star": 1378,
+ "commits": 308,
+ "modify_time": "2019-12-09 20:08:16",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/unrolled/secure",
+ "star": 1375,
+ "commits": 82,
+ "modify_time": "2019-11-26 15:18:59",
+ "last_release": "v1.0.6",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/intika/librefox",
+ "star": 1375,
+ "commits": 173,
+ "modify_time": "2019-01-30 01:56:48",
+ "last_release": "Librefox-v2.1-v64.0.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/valvesoftware/vogl",
+ "star": 1374,
+ "commits": 716,
+ "modify_time": "2016-05-13 02:04:45",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/s0md3v/Striker",
+ "star": 1373,
+ "commits": 85,
+ "modify_time": "2019-07-10 11:17:59",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/danielbohannon/invoke-obfuscation",
+ "star": 1373,
+ "commits": 45,
+ "modify_time": "2019-03-15 10:21:13",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/zyantific/zydis",
+ "star": 1371,
+ "commits": 790,
+ "modify_time": "2019-11-11 05:39:17",
+ "last_release": "v3.0.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cortesi/modd",
+ "star": 1365,
+ "commits": 268,
+ "modify_time": "2019-12-02 23:11:18",
+ "last_release": "v0.8",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/fireeye/flare-floss",
+ "star": 1363,
+ "commits": 558,
+ "modify_time": "2019-10-08 00:54:03",
+ "last_release": "v1.5.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/aslody/turbodex",
+ "star": 1363,
+ "commits": 41,
+ "modify_time": "2017-04-18 12:44:13",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/grrrdog/java-deserialization-cheat-sheet",
+ "star": 1362,
+ "commits": 137,
+ "modify_time": "2019-11-06 08:36:53",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/vulnerscom/getsploit",
+ "star": 1361,
+ "commits": 33,
+ "modify_time": "2019-05-30 09:10:20",
+ "last_release": "0.3.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/phpv8/v8js",
+ "star": 1361,
+ "commits": 1023,
+ "modify_time": "2019-06-23 19:55:49",
+ "last_release": "2.1.1",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/googleprojectzero/winafl",
+ "star": 1359,
+ "commits": 254,
+ "modify_time": "2019-10-11 08:18:08",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/thelinuxchoice/blackeye",
+ "star": 1355,
+ "commits": 27,
+ "modify_time": "2019-02-12 10:39:05",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/mitre/caldera",
+ "star": 1354,
+ "commits": 926,
+ "modify_time": "2019-12-10 02:15:28",
+ "last_release": "2.3.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/joaomatosf/jexboss",
+ "star": 1352,
+ "commits": 86,
+ "modify_time": "2017-03-28 01:34:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/raspberrypi/tools",
+ "star": 1351,
+ "commits": 88,
+ "modify_time": "2019-09-23 13:02:38",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/taviso/ctftool",
+ "star": 1350,
+ "commits": 49,
+ "modify_time": "2019-08-14 14:08:48",
+ "last_release": "v1.3",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ddevault/evilpass",
+ "star": 1349,
+ "commits": 25,
+ "modify_time": "2017-02-21 05:23:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rikkaapps/riru",
+ "star": 1349,
+ "commits": 103,
+ "modify_time": "2019-11-22 16:18:08",
+ "last_release": "v19.5",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/lijiejie/githack",
+ "star": 1349,
+ "commits": 10,
+ "modify_time": "2019-07-16 07:07:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rebeyond/behinder",
+ "star": 1348,
+ "commits": 8,
+ "modify_time": "2019-02-15 05:57:50",
+ "last_release": "Behinder_v2.0.1",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/das-labor/panopticon",
+ "star": 1347,
+ "commits": 1653,
+ "modify_time": "2019-01-03 23:25:34",
+ "last_release": "\n 0.16.0\n ",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/daxeel/blockshell",
+ "star": 1346,
+ "commits": 68,
+ "modify_time": "2018-03-05 08:47:24",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/x64dbg/x64dbgpy",
+ "star": 1345,
+ "commits": 134,
+ "modify_time": "2019-11-17 02:45:16",
+ "last_release": "37d3f5bb",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/securitywithoutborders/hardentools",
+ "star": 1345,
+ "commits": 258,
+ "modify_time": "2019-11-29 18:39:19",
+ "last_release": "v2.0-rc2",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/microcosm-cc/bluemonday",
+ "star": 1344,
+ "commits": 219,
+ "modify_time": "2019-11-19 13:03:33",
+ "last_release": "v1.0.2",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/s0md3v/Arjun",
+ "star": 1343,
+ "commits": 75,
+ "modify_time": "2019-11-18 16:01:00",
+ "last_release": "1.6",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/luke-jr/bfgminer",
+ "star": 1342,
+ "commits": 12699,
+ "modify_time": "2018-12-18 18:42:36",
+ "last_release": "\n bfgminer-5.5.0\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/davrodpin/mole",
+ "star": 1342,
+ "commits": 238,
+ "modify_time": "2019-10-23 13:21:47",
+ "last_release": "v0.5.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/carmaa/inception",
+ "star": 1342,
+ "commits": 450,
+ "modify_time": "2018-08-18 19:43:52",
+ "last_release": "v0.4.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/maratyszcza/peachpy",
+ "star": 1341,
+ "commits": 363,
+ "modify_time": "2019-09-05 00:27:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/api0cradle/lolbas",
+ "star": 1341,
+ "commits": 192,
+ "modify_time": "2018-12-10 17:33:14",
+ "last_release": "",
+ "lang": "XSLT"
+ },
+ {
+ "link": "https://github.com/kirikira/vtemplate",
+ "star": 1340,
+ "commits": 50,
+ "modify_time": "2018-11-20 08:47:39",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/feeicn/gsil",
+ "star": 1340,
+ "commits": 91,
+ "modify_time": "2019-05-14 13:18:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/InteliSecureLabs/Linux_Exploit_Suggester",
+ "star": 1339,
+ "commits": 32,
+ "modify_time": "2014-05-18 23:18:10",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/undeadsec/socialfish",
+ "star": 1338,
+ "commits": 228,
+ "modify_time": "2019-10-30 01:05:09",
+ "last_release": "neptune",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/madeye/proxydroid",
+ "star": 1337,
+ "commits": 102,
+ "modify_time": "2018-12-07 04:36:31",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/thehive-project/thehive",
+ "star": 1336,
+ "commits": 1389,
+ "modify_time": "2019-09-05 09:48:05",
+ "last_release": "3.4.0",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/mfontanini/libtins",
+ "star": 1335,
+ "commits": 1249,
+ "modify_time": "2019-10-02 15:33:25",
+ "last_release": "v4.2",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/mengskysama/shadowsocks",
+ "star": 1334,
+ "commits": 726,
+ "modify_time": "2015-10-26 02:39:26",
+ "last_release": "\n 2.8.2\n ",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/gamelinux/passivedns",
+ "star": 1333,
+ "commits": 275,
+ "modify_time": "2018-10-06 10:12:41",
+ "last_release": "\n 1.2.1\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/purplei2p/i2pd",
+ "star": 1328,
+ "commits": 5488,
+ "modify_time": "2019-12-09 21:11:46",
+ "last_release": "2.29.0",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/marten4n6/evilosx",
+ "star": 1328,
+ "commits": 146,
+ "modify_time": "2018-08-17 10:45:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/atmos/camo",
+ "star": 1328,
+ "commits": 398,
+ "modify_time": "2017-09-09 21:19:17",
+ "last_release": "\n v2.3.0\n ",
+ "lang": "CoffeeScript"
+ },
+ {
+ "link": "https://github.com/ssllabs/ssllabs-scan",
+ "star": 1327,
+ "commits": 247,
+ "modify_time": "2019-05-30 07:00:40",
+ "last_release": "\n v1.5.0\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/intel/haxm",
+ "star": 1327,
+ "commits": 297,
+ "modify_time": "2019-12-09 04:12:22",
+ "last_release": "v7.5.4",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cenmrev/v2rayw",
+ "star": 1327,
+ "commits": 93,
+ "modify_time": "2019-02-17 15:19:24",
+ "last_release": "v1.0.0-beta2",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/dtag-dev-sec/tpotce",
+ "star": 1325,
+ "commits": 1094,
+ "modify_time": "2019-11-21 13:56:38",
+ "last_release": "19.03.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/rehints/hexrayscodexplorer",
+ "star": 1324,
+ "commits": 138,
+ "modify_time": "2018-08-13 17:44:35",
+ "last_release": "2.1",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/xiaoming2028/freenet",
+ "star": 1323,
+ "commits": 41,
+ "modify_time": "2019-12-10 02:34:17",
+ "last_release": "SS",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/jaredthecoder/awesome-vehicle-security",
+ "star": 1323,
+ "commits": 178,
+ "modify_time": "2019-10-13 16:22:47",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/OISF/suricata",
+ "star": 1322,
+ "commits": 10509,
+ "modify_time": "2019-12-09 10:30:10",
+ "last_release": "suricata-5.0.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/worawit/ms17-010",
+ "star": 1319,
+ "commits": 54,
+ "modify_time": "2018-03-29 23:47:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mortenoir1/virtualbox_e1000_0day",
+ "star": 1317,
+ "commits": 19,
+ "modify_time": "2018-11-15 15:47:17",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/peewpw/invoke-psimage",
+ "star": 1316,
+ "commits": 11,
+ "modify_time": "2019-09-23 15:16:52",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/fancycode/memorymodule",
+ "star": 1314,
+ "commits": 172,
+ "modify_time": "2019-02-24 14:35:09",
+ "last_release": "\n v0_0_4\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/shadowsocks/libqtshadowsocks",
+ "star": 1311,
+ "commits": 573,
+ "modify_time": "2019-11-02 19:57:23",
+ "last_release": "v2.1.0",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/xyntax/poc-t",
+ "star": 1309,
+ "commits": 243,
+ "modify_time": "2018-12-15 15:39:31",
+ "last_release": "2.0.5",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/scipag/vulscan",
+ "star": 1309,
+ "commits": 74,
+ "modify_time": "2019-09-23 12:13:52",
+ "last_release": "",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/ConsenSys/mythril",
+ "star": 1307,
+ "commits": 4229,
+ "modify_time": "2019-11-22 16:12:18",
+ "last_release": "v0.21.20",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/boywhp/fcn",
+ "star": 1307,
+ "commits": 231,
+ "modify_time": "2019-11-15 01:58:19",
+ "last_release": "FCN_V3.8",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/nikitavoloboev/privacy-respecting",
+ "star": 1304,
+ "commits": 222,
+ "modify_time": "2019-11-24 21:09:40",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/cisco-talos/pyrebox",
+ "star": 1304,
+ "commits": 245,
+ "modify_time": "2019-12-05 11:06:00",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/klee/klee",
+ "star": 1303,
+ "commits": 2051,
+ "modify_time": "2019-08-23 12:46:46",
+ "last_release": "v2.0",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/dana-at-cp/backdoor-apk",
+ "star": 1300,
+ "commits": 141,
+ "modify_time": "2018-09-28 17:19:06",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/hacklcx/hfish",
+ "star": 1299,
+ "commits": 94,
+ "modify_time": "2019-12-06 05:55:22",
+ "last_release": "0.5",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/evilsocket/xray",
+ "star": 1298,
+ "commits": 93,
+ "modify_time": "2018-10-30 17:51:02",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/microsoft/microsoft-pdb",
+ "star": 1293,
+ "commits": 55,
+ "modify_time": "2016-05-04 23:45:48",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/feross/spoof",
+ "star": 1293,
+ "commits": 94,
+ "modify_time": "2019-07-11 22:30:18",
+ "last_release": "\n v2.0.1\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/android-hacker/exposed",
+ "star": 1293,
+ "commits": 97,
+ "modify_time": "2019-11-13 13:33:28",
+ "last_release": "0.3.6",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/traviscross/mtr",
+ "star": 1291,
+ "commits": 642,
+ "modify_time": "2019-12-06 09:16:53",
+ "last_release": "\n v0.93\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/malfunkt/hyperfox",
+ "star": 1291,
+ "commits": 66,
+ "modify_time": "2018-02-11 20:50:52",
+ "last_release": "v1.9.8",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/virtualabs/btlejack",
+ "star": 1289,
+ "commits": 82,
+ "modify_time": "2019-10-21 12:52:27",
+ "last_release": "\n v2.0.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/icymind/vrouter",
+ "star": 1289,
+ "commits": 445,
+ "modify_time": "2019-11-20 16:59:26",
+ "last_release": "v0.4.2",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/friendsofphp/security-advisories",
+ "star": 1285,
+ "commits": 939,
+ "modify_time": "2019-11-29 17:21:45",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/michalmalik/linux-re-101",
+ "star": 1283,
+ "commits": 102,
+ "modify_time": "2019-03-29 16:36:11",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/codingo/reconnoitre",
+ "star": 1283,
+ "commits": 429,
+ "modify_time": "2019-10-04 03:43:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/seemoo-lab/nexmon",
+ "star": 1279,
+ "commits": 792,
+ "modify_time": "2019-10-24 21:25:01",
+ "last_release": "2.2.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/perlin-network/noise",
+ "star": 1279,
+ "commits": 829,
+ "modify_time": "2019-03-05 09:42:04",
+ "last_release": "v2.0.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/elvanderb/tcp-32764",
+ "star": 1279,
+ "commits": 123,
+ "modify_time": "2015-12-07 15:14:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/viper-framework/viper",
+ "star": 1278,
+ "commits": 2033,
+ "modify_time": "2019-11-15 22:46:56",
+ "last_release": "v1.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/firehol/blocklist-ipsets",
+ "star": 1277,
+ "commits": 1,
+ "modify_time": "2019-12-08 06:30:47",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/pyauth/pyotp",
+ "star": 1277,
+ "commits": 157,
+ "modify_time": "2019-12-03 17:57:06",
+ "last_release": "v2.3.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/firehol/blocklist-ipsets",
+ "star": 1277,
+ "commits": 1,
+ "modify_time": "2019-12-08 06:30:47",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/dreadl0ck/netcap",
+ "star": 1277,
+ "commits": 263,
+ "modify_time": "2019-11-12 21:46:59",
+ "last_release": "v0.4.2",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/bethgelab/foolbox",
+ "star": 1277,
+ "commits": 982,
+ "modify_time": "2019-11-04 22:01:08",
+ "last_release": "v2.3.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dafthack/mailsniper",
+ "star": 1273,
+ "commits": 92,
+ "modify_time": "2018-11-20 18:17:52",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/sakurity/securelogin",
+ "star": 1271,
+ "commits": 74,
+ "modify_time": "2018-08-07 17:12:59",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/ganapati/rsactftool",
+ "star": 1271,
+ "commits": 185,
+ "modify_time": "2019-09-30 09:42:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/alessandroz/beroot",
+ "star": 1270,
+ "commits": 108,
+ "modify_time": "2019-09-25 09:50:32",
+ "last_release": "1.0.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/googlearchive/android-RuntimePermissions",
+ "star": 1269,
+ "commits": 17,
+ "modify_time": "2019-09-26 22:21:25",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/solo-io/squash",
+ "star": 1269,
+ "commits": 280,
+ "modify_time": "2019-09-09 13:43:58",
+ "last_release": "v0.5.19",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/ethereum/pyethapp",
+ "star": 1269,
+ "commits": 1117,
+ "modify_time": "2018-07-19 08:57:34",
+ "last_release": "\n v1.5.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ganlvtech/down_52pojie_cn",
+ "star": 1267,
+ "commits": 61,
+ "modify_time": "2019-05-14 09:19:01",
+ "last_release": "v2.1.3",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/aircrack-ng/aircrack-ng",
+ "star": 1267,
+ "commits": 3595,
+ "modify_time": "2019-12-09 21:53:42",
+ "last_release": "1.5.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/forwardemail/free-email-forwarding",
+ "star": 1263,
+ "commits": 187,
+ "modify_time": "2019-12-07 17:19:50",
+ "last_release": "v3.2.5",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/unapibageek/ctfr",
+ "star": 1261,
+ "commits": 30,
+ "modify_time": "2019-01-13 04:14:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/you2php/delete",
+ "star": 1260,
+ "commits": 49,
+ "modify_time": "2018-12-15 01:27:03",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/hak5/bashbunny-payloads",
+ "star": 1256,
+ "commits": 359,
+ "modify_time": "2019-11-06 03:47:47",
+ "last_release": "v1.2",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/samyk/skyjack",
+ "star": 1255,
+ "commits": 16,
+ "modify_time": "2017-11-21 06:25:51",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/archerysec/archerysec",
+ "star": 1253,
+ "commits": 860,
+ "modify_time": "2019-12-07 18:24:04",
+ "last_release": "v1.3",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/bubenshchykov/ngrok",
+ "star": 1253,
+ "commits": 258,
+ "modify_time": "2019-08-11 16:22:57",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/mitchellkrogza/nginx-ultimate-bad-bot-blocker",
+ "star": 1251,
+ "commits": 3094,
+ "modify_time": "2019-12-08 19:16:36",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/vaguileradiaz/tinfoleak",
+ "star": 1250,
+ "commits": 41,
+ "modify_time": "2018-04-10 11:35:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/chaitin/passionfruit",
+ "star": 1247,
+ "commits": 533,
+ "modify_time": "2019-11-03 18:03:02",
+ "last_release": "",
+ "lang": "Vue"
+ },
+ {
+ "link": "https://github.com/michalmalik/osx-re-101",
+ "star": 1244,
+ "commits": 66,
+ "modify_time": "2019-09-27 15:49:39",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/krausefx/detect.location",
+ "star": 1244,
+ "commits": 36,
+ "modify_time": "2017-12-14 05:30:19",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/rootsongjc/kubernetes-vagrant-centos-cluster",
+ "star": 1243,
+ "commits": 164,
+ "modify_time": "2019-09-19 06:13:08",
+ "last_release": "v1.2.0",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/a0rtega/pafish",
+ "star": 1243,
+ "commits": 166,
+ "modify_time": "2019-02-19 09:17:35",
+ "last_release": "\n v0.5.8\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/thekingofduck/fuzzdicts",
+ "star": 1242,
+ "commits": 126,
+ "modify_time": "2019-12-03 06:28:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/firesuncn/bluelotus_xssreceiver",
+ "star": 1241,
+ "commits": 1,
+ "modify_time": "2015-10-12 06:37:46",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/eliotsykes/rails-security-checklist",
+ "star": 1241,
+ "commits": 39,
+ "modify_time": "2018-08-19 19:41:17",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/google/martian",
+ "star": 1240,
+ "commits": 373,
+ "modify_time": "2019-10-11 21:06:40",
+ "last_release": "v3.0.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/gh0u1l5/wechatspellbook",
+ "star": 1238,
+ "commits": 103,
+ "modify_time": "2018-11-24 23:29:27",
+ "last_release": "",
+ "lang": "Kotlin"
+ },
+ {
+ "link": "https://github.com/desaster/kippo",
+ "star": 1233,
+ "commits": 285,
+ "modify_time": "2016-09-30 16:03:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/flipkart-incubator/astra",
+ "star": 1230,
+ "commits": 486,
+ "modify_time": "2019-04-05 11:55:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/chalker/notes",
+ "star": 1229,
+ "commits": 108,
+ "modify_time": "2019-07-13 11:13:20",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/tsudakageyu/minhook",
+ "star": 1228,
+ "commits": 289,
+ "modify_time": "2017-05-23 02:45:57",
+ "last_release": "v1.3.3",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/nasa-sw-vnv/ikos",
+ "star": 1228,
+ "commits": 406,
+ "modify_time": "2019-12-09 01:15:10",
+ "last_release": "v2.2",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/datatheorem/trustkit",
+ "star": 1227,
+ "commits": 981,
+ "modify_time": "2019-12-06 04:21:00",
+ "last_release": "1.6.3",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/danmcinerney/net-creds",
+ "star": 1227,
+ "commits": 84,
+ "modify_time": "2018-08-07 16:33:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/find-sec-bugs/find-sec-bugs",
+ "star": 1225,
+ "commits": 1170,
+ "modify_time": "2019-11-13 15:29:07",
+ "last_release": "version-1.10.1",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/shadowsocks/shadowsocks-nodejs",
+ "star": 1224,
+ "commits": 236,
+ "modify_time": "2016-08-11 03:01:11",
+ "last_release": "\n 1.4.3\n ",
+ "lang": "CoffeeScript"
+ },
+ {
+ "link": "https://github.com/jsha/minica",
+ "star": 1223,
+ "commits": 25,
+ "modify_time": "2019-11-14 01:58:07",
+ "last_release": "v1.0.2",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/cure53/XSSChallengeWiki",
+ "star": 1222,
+ "commits": 4,
+ "modify_time": "2014-09-18 13:30:04",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/owtf/owtf",
+ "star": 1222,
+ "commits": 2100,
+ "modify_time": "2019-08-27 03:24:48",
+ "last_release": "\n v2.6.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cure53/xsschallengewiki",
+ "star": 1222,
+ "commits": 4,
+ "modify_time": "2014-09-18 13:30:04",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/harismuneer/ultimate-facebook-scraper",
+ "star": 1221,
+ "commits": 150,
+ "modify_time": "2019-12-06 14:51:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/google/timesketch",
+ "star": 1221,
+ "commits": 1415,
+ "modify_time": "2019-11-28 14:35:15",
+ "last_release": "20190207",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cloudflare/redoctober",
+ "star": 1221,
+ "commits": 323,
+ "modify_time": "2018-09-28 21:40:28",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/cn33liz/p0wnedshell",
+ "star": 1220,
+ "commits": 84,
+ "modify_time": "2018-09-21 09:41:22",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/dynamorio/dynamorio",
+ "star": 1215,
+ "commits": 4741,
+ "modify_time": "2019-12-05 18:31:06",
+ "last_release": "cronbuild-7.91.18235",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jpcertcc/logontracer",
+ "star": 1213,
+ "commits": 105,
+ "modify_time": "2019-12-01 14:26:11",
+ "last_release": "v1.3.1",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/codingo/NoSQLMap",
+ "star": 1209,
+ "commits": 283,
+ "modify_time": "2019-11-10 00:52:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/onionbrowser/onionbrowser",
+ "star": 1208,
+ "commits": 763,
+ "modify_time": "2019-12-05 21:47:17",
+ "last_release": "v2.2.1",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/riusksk/secbook",
+ "star": 1207,
+ "commits": 41,
+ "modify_time": "2019-05-12 10:12:06",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/linkedin/dexmaker",
+ "star": 1206,
+ "commits": 254,
+ "modify_time": "2019-12-05 00:55:43",
+ "last_release": "2.25.1",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/javiersantos/piracychecker",
+ "star": 1206,
+ "commits": 226,
+ "modify_time": "2019-09-12 14:40:14",
+ "last_release": "1.2.6",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/davidbau/seedrandom",
+ "star": 1206,
+ "commits": 161,
+ "modify_time": "2019-09-17 10:37:21",
+ "last_release": "\n 3.0.5\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/horsicq/detect-it-easy",
+ "star": 1205,
+ "commits": 837,
+ "modify_time": "2019-12-07 23:01:53",
+ "last_release": "",
+ "lang": "YARA"
+ },
+ {
+ "link": "https://github.com/dweinstein/awesome-frida",
+ "star": 1204,
+ "commits": 57,
+ "modify_time": "2019-12-07 14:02:32",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/felixgr/secure-ios-app-dev",
+ "star": 1202,
+ "commits": 19,
+ "modify_time": "2018-08-11 18:03:32",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/droe/sslsplit",
+ "star": 1202,
+ "commits": 882,
+ "modify_time": "2019-08-30 11:14:26",
+ "last_release": "\n 0.5.5\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/saminiir/level-ip",
+ "star": 1201,
+ "commits": 575,
+ "modify_time": "2017-11-14 09:37:57",
+ "last_release": "\n v0.5.2\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/dgiese/dustcloud",
+ "star": 1201,
+ "commits": 478,
+ "modify_time": "2019-09-03 13:38:59",
+ "last_release": "0.3",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/achillean/shodan-python",
+ "star": 1201,
+ "commits": 297,
+ "modify_time": "2019-11-19 01:24:32",
+ "last_release": "1.19.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mame82/p4wnp1_aloa",
+ "star": 1200,
+ "commits": 259,
+ "modify_time": "2019-01-26 18:08:24",
+ "last_release": "v0.1.0-alpha2",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/rancher/convoy",
+ "star": 1198,
+ "commits": 748,
+ "modify_time": "2018-12-08 00:19:02",
+ "last_release": "v0.5.2",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/joe-shenouda/awesome-cyber-skills",
+ "star": 1198,
+ "commits": 101,
+ "modify_time": "2019-04-23 12:11:44",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/cve-search/cve-search",
+ "star": 1198,
+ "commits": 1552,
+ "modify_time": "2019-11-22 10:14:56",
+ "last_release": "\n v2.6\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/f0rb1dd3n/reptile",
+ "star": 1197,
+ "commits": 200,
+ "modify_time": "2019-03-04 02:04:16",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/smallstep/certificates",
+ "star": 1192,
+ "commits": 652,
+ "modify_time": "2019-11-06 00:35:30",
+ "last_release": "v0.14.0-rc.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/mothran/mongol",
+ "star": 1192,
+ "commits": 22,
+ "modify_time": "2013-05-09 21:18:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gdbinit/gdbinit",
+ "star": 1192,
+ "commits": 60,
+ "modify_time": "2014-03-25 19:35:46",
+ "last_release": "\n v8.0.5\n ",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/jtesta/ssh-mitm",
+ "star": 1191,
+ "commits": 118,
+ "modify_time": "2019-09-17 01:38:30",
+ "last_release": "v2.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/matiasinsaurralde/facebook-tunnel",
+ "star": 1189,
+ "commits": 126,
+ "modify_time": "2016-06-29 12:30:33",
+ "last_release": "",
+ "lang": "Roff"
+ },
+ {
+ "link": "https://github.com/blechschmidt/massdns",
+ "star": 1189,
+ "commits": 167,
+ "modify_time": "2019-02-01 18:54:45",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/anudeepnd/whitelist",
+ "star": 1189,
+ "commits": 247,
+ "modify_time": "2019-11-16 15:49:34",
+ "last_release": "1.1",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/jadagates/shadowsocksbio",
+ "star": 1188,
+ "commits": 48,
+ "modify_time": "2019-10-15 12:25:50",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/lyft/cartography",
+ "star": 1187,
+ "commits": 115,
+ "modify_time": "2019-12-05 22:34:12",
+ "last_release": "0.13.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/luigirizzo/netmap",
+ "star": 1186,
+ "commits": 4197,
+ "modify_time": "2019-12-09 13:05:31",
+ "last_release": "v11.3",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/mubix/post-exploitation",
+ "star": 1185,
+ "commits": 88,
+ "modify_time": "2017-08-27 01:09:50",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/the-tcpdump-group/tcpdump",
+ "star": 1181,
+ "commits": 5874,
+ "modify_time": "2019-12-04 01:31:15",
+ "last_release": "\n tcpdump-4.9.3\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/weexteam/hackernews-App-powered-by-Apache-Weex",
+ "star": 1179,
+ "commits": 131,
+ "modify_time": "2018-01-04 13:26:43",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/ambrop72/badvpn",
+ "star": 1178,
+ "commits": 1942,
+ "modify_time": "2019-08-21 16:24:45",
+ "last_release": "1.999.130",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ssrarchive/shadowsocks-rss",
+ "star": 1177,
+ "commits": 195,
+ "modify_time": "2019-05-18 14:51:31",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/hackappcom/ibrute",
+ "star": 1175,
+ "commits": 12,
+ "modify_time": "2014-09-13 20:23:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cujanovic/ssrf-testing",
+ "star": 1174,
+ "commits": 88,
+ "modify_time": "2019-11-13 16:46:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/shadowsocks/v2ray-plugin",
+ "star": 1173,
+ "commits": 91,
+ "modify_time": "2019-09-20 09:17:13",
+ "last_release": "v1.2.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/lirantal/is-website-vulnerable",
+ "star": 1171,
+ "commits": 36,
+ "modify_time": "2019-12-05 14:40:30",
+ "last_release": "v1.9.3",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/genuinetools/reg",
+ "star": 1168,
+ "commits": 393,
+ "modify_time": "2019-11-20 06:47:31",
+ "last_release": "v0.16.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/shawn1m/overture",
+ "star": 1166,
+ "commits": 169,
+ "modify_time": "2019-11-10 12:27:31",
+ "last_release": "v1.6-rc6",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/alonemonkey/frida-ios-dump",
+ "star": 1165,
+ "commits": 43,
+ "modify_time": "2019-11-16 03:10:35",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/programa-stic/barf-project",
+ "star": 1164,
+ "commits": 923,
+ "modify_time": "2019-11-24 16:03:06",
+ "last_release": "\n v0.6.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cryptosphere/cryptosphere",
+ "star": 1164,
+ "commits": 241,
+ "modify_time": "2016-01-30 20:04:21",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/skeeto/endlessh",
+ "star": 1162,
+ "commits": 90,
+ "modify_time": "2019-08-07 00:31:35",
+ "last_release": "1.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/pusher/oauth2_proxy",
+ "star": 1162,
+ "commits": 890,
+ "modify_time": "2019-11-26 16:38:22",
+ "last_release": "v4.0.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/mgechev/ngrev",
+ "star": 1162,
+ "commits": 167,
+ "modify_time": "2019-11-04 01:44:08",
+ "last_release": "0.0.27",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/lucb1e/cookielesscookies",
+ "star": 1159,
+ "commits": 9,
+ "modify_time": "2013-08-25 15:23:03",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/m4ll0k/awesome-hacking-tools",
+ "star": 1158,
+ "commits": 55,
+ "modify_time": "2019-11-19 16:45:02",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/p4-team/ctf",
+ "star": 1156,
+ "commits": 1111,
+ "modify_time": "2019-12-05 01:37:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mozilla/mig",
+ "star": 1155,
+ "commits": 2069,
+ "modify_time": "2019-09-13 23:40:10",
+ "last_release": "\n 20170308-0.4e9b29f.dev\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/mebus/cupp",
+ "star": 1151,
+ "commits": 63,
+ "modify_time": "2019-05-01 13:29:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nsacyber/Windows-Secure-Host-Baseline",
+ "star": 1150,
+ "commits": 449,
+ "modify_time": "2018-09-12 06:54:53",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/ibm/adversarial-robustness-toolbox",
+ "star": 1147,
+ "commits": 2676,
+ "modify_time": "2019-11-06 11:13:33",
+ "last_release": "1.0.1",
+ "lang": "Jupyter Notebook"
+ },
+ {
+ "link": "https://github.com/13o-bbr-bbq/machine_learning_security",
+ "star": 1145,
+ "commits": 616,
+ "modify_time": "2019-11-20 07:12:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/powershellempire/powertools",
+ "star": 1144,
+ "commits": 384,
+ "modify_time": "2016-11-02 00:07:55",
+ "last_release": "2.0",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/nethack/nethack",
+ "star": 1143,
+ "commits": 9822,
+ "modify_time": "2019-12-09 23:02:30",
+ "last_release": "NetHack-3.6.3_Released",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cgdb/cgdb",
+ "star": 1143,
+ "commits": 1305,
+ "modify_time": "2019-08-03 23:17:59",
+ "last_release": "\n v0.7.1\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/HikariObfuscator/Hikari",
+ "star": 1142,
+ "commits": 23,
+ "modify_time": "2019-05-09 11:49:25",
+ "last_release": "20190327",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/w00t3k/awesome-cellular-hacking",
+ "star": 1140,
+ "commits": 64,
+ "modify_time": "2019-12-06 14:30:04",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/cure53/httpleaks",
+ "star": 1140,
+ "commits": 98,
+ "modify_time": "2019-10-05 16:44:24",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/xroche/httrack",
+ "star": 1139,
+ "commits": 912,
+ "modify_time": "2019-11-30 09:39:36",
+ "last_release": "\n 3.48.21\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/rhinosecuritylabs/pacu",
+ "star": 1139,
+ "commits": 861,
+ "modify_time": "2019-08-22 20:55:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ckjbug/hacking",
+ "star": 1139,
+ "commits": 171,
+ "modify_time": "2019-11-21 12:33:04",
+ "last_release": "",
+ "lang": "Batchfile"
+ },
+ {
+ "link": "https://github.com/certsocietegenerale/fir",
+ "star": 1139,
+ "commits": 421,
+ "modify_time": "2019-01-23 17:43:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/shadowsocksr-live/shadowsocksr-native",
+ "star": 1138,
+ "commits": 52,
+ "modify_time": "2019-12-09 16:36:17",
+ "last_release": "0.7",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hackathonhackers/personal-sites",
+ "star": 1138,
+ "commits": 1427,
+ "modify_time": "2018-02-08 06:10:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/darkoperator/dnsrecon",
+ "star": 1138,
+ "commits": 366,
+ "modify_time": "2019-12-07 01:14:04",
+ "last_release": "0.9.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nebgnahz/awesome-iot-hacks",
+ "star": 1135,
+ "commits": 50,
+ "modify_time": "2019-06-02 01:09:12",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/0xbug/hawkeye",
+ "star": 1134,
+ "commits": 83,
+ "modify_time": "2019-08-02 04:46:46",
+ "last_release": "3.0.0",
+ "lang": "Vue"
+ },
+ {
+ "link": "https://github.com/x64dbg/gleebug",
+ "star": 1132,
+ "commits": 168,
+ "modify_time": "2017-12-31 14:13:53",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/out0fmemory/goagent-always-available",
+ "star": 1132,
+ "commits": 1644,
+ "modify_time": "2017-12-27 09:31:40",
+ "last_release": "2.0.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/Qyriad/fusee-launcher",
+ "star": 1131,
+ "commits": 32,
+ "modify_time": "2019-07-16 04:07:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/majikarp/awesome-programming-books",
+ "star": 1130,
+ "commits": 44,
+ "modify_time": "2019-04-23 12:31:46",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/crosire/reshade",
+ "star": 1130,
+ "commits": 2000,
+ "modify_time": "2019-12-09 19:31:07",
+ "last_release": "\n v4.4.2\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/securitytxt/security-txt",
+ "star": 1129,
+ "commits": 188,
+ "modify_time": "2019-11-20 03:03:46",
+ "last_release": "draft-08",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/cppcon/cppcon2018",
+ "star": 1128,
+ "commits": 137,
+ "modify_time": "2019-04-11 06:44:29",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/mmcloughlin/avo",
+ "star": 1127,
+ "commits": 255,
+ "modify_time": "2019-09-27 04:11:50",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/openai/neural-mmo",
+ "star": 1125,
+ "commits": 25,
+ "modify_time": "2019-09-13 23:46:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nicehash/NiceHashMiner",
+ "star": 1123,
+ "commits": 3603,
+ "modify_time": "2019-12-05 11:07:34",
+ "last_release": "1.9.2.19",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/huangyz0918/androidwm",
+ "star": 1122,
+ "commits": 220,
+ "modify_time": "2019-11-29 03:09:45",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/thoughtfuldev/eagleeye",
+ "star": 1120,
+ "commits": 62,
+ "modify_time": "2019-09-16 18:03:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bo0om/fuzz.txt",
+ "star": 1120,
+ "commits": 162,
+ "modify_time": "2019-10-28 12:49:54",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/openrce/sulley",
+ "star": 1118,
+ "commits": 85,
+ "modify_time": "2019-02-15 00:30:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/PaulSec/awesome-windows-domain-hardening",
+ "star": 1117,
+ "commits": 39,
+ "modify_time": "2018-11-11 10:01:53",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/blacksphere/blackmagic",
+ "star": 1117,
+ "commits": 1147,
+ "modify_time": "2019-12-08 15:57:58",
+ "last_release": "v1.6.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/MicrosoftDocs/Virtualization-Documentation",
+ "star": 1116,
+ "commits": 6961,
+ "modify_time": "2019-12-05 23:19:58",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/yulingtianxia/fishchat",
+ "star": 1115,
+ "commits": 35,
+ "modify_time": "2018-09-26 15:07:05",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/evilsocket/bleah",
+ "star": 1115,
+ "commits": 54,
+ "modify_time": "2019-02-19 22:08:59",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/aoh/radamsa",
+ "star": 1115,
+ "commits": 367,
+ "modify_time": "2018-06-16 10:58:27",
+ "last_release": "v0.5",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/hhyo/archery",
+ "star": 1114,
+ "commits": 1383,
+ "modify_time": "2019-12-08 14:57:56",
+ "last_release": "v1.7.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/manbanggroup/phantom",
+ "star": 1113,
+ "commits": 39,
+ "modify_time": "2019-07-19 06:21:11",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/keystone-engine/keystone",
+ "star": 1113,
+ "commits": 713,
+ "modify_time": "2019-11-22 01:15:38",
+ "last_release": "0.9.1",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/john-kurkowski/tldextract",
+ "star": 1113,
+ "commits": 327,
+ "modify_time": "2019-10-16 00:06:58",
+ "last_release": "\n 2.2.2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fritz-smh/yi-hack",
+ "star": 1110,
+ "commits": 30,
+ "modify_time": "2016-10-04 19:51:16",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/dyci/dyci-main",
+ "star": 1110,
+ "commits": 214,
+ "modify_time": "2017-03-13 20:48:27",
+ "last_release": "\n 1.6.1\n ",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/0x00-0x00/shellpop",
+ "star": 1110,
+ "commits": 148,
+ "modify_time": "2019-04-02 14:53:18",
+ "last_release": "v0.3.6",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wibiti/uncompyle2",
+ "star": 1109,
+ "commits": 69,
+ "modify_time": "2018-07-24 05:00:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/facebookincubator/oomd",
+ "star": 1108,
+ "commits": 270,
+ "modify_time": "2019-12-09 22:00:49",
+ "last_release": "v0.2.0",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/byt3bl33d3r/gcat",
+ "star": 1108,
+ "commits": 29,
+ "modify_time": "2018-11-16 13:43:15",
+ "last_release": "1.0.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zbetcheckin/security_list",
+ "star": 1105,
+ "commits": 143,
+ "modify_time": "2019-07-28 11:47:45",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/solokeys/solo",
+ "star": 1103,
+ "commits": 1143,
+ "modify_time": "2019-12-01 23:25:45",
+ "last_release": "3.0.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/slowmist/knowledge-base",
+ "star": 1103,
+ "commits": 65,
+ "modify_time": "2019-11-19 07:55:10",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/neoneggplant/eggshell",
+ "star": 1103,
+ "commits": 157,
+ "modify_time": "2018-09-24 03:28:21",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/google/sandboxed-api",
+ "star": 1103,
+ "commits": 195,
+ "modify_time": "2019-12-05 11:33:08",
+ "last_release": "v20190823",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/bugcrowd/HUNT",
+ "star": 1102,
+ "commits": 259,
+ "modify_time": "2018-08-24 00:37:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gerbenjavado/linkfinder",
+ "star": 1100,
+ "commits": 153,
+ "modify_time": "2019-11-29 11:55:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/coffeehb/some-poc-or-exp",
+ "star": 1100,
+ "commits": 73,
+ "modify_time": "2019-07-01 03:45:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sensepost/ruler",
+ "star": 1099,
+ "commits": 274,
+ "modify_time": "2019-11-23 10:05:48",
+ "last_release": "2.2.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/ring04h/wydomain",
+ "star": 1097,
+ "commits": 129,
+ "modify_time": "2017-06-26 09:05:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/binaryanalysisplatform/bap",
+ "star": 1097,
+ "commits": 841,
+ "modify_time": "2019-12-04 21:44:02",
+ "last_release": "v2.0.0",
+ "lang": "OCaml"
+ },
+ {
+ "link": "https://github.com/baoleiji/qilinbaoleiji",
+ "star": 1097,
+ "commits": 56,
+ "modify_time": "2019-03-06 00:06:47",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/tuhinshubhra/red_hawk",
+ "star": 1096,
+ "commits": 29,
+ "modify_time": "2019-10-03 18:19:24",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/rasta-mouse/sherlock",
+ "star": 1096,
+ "commits": 26,
+ "modify_time": "2018-10-08 18:21:19",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/lionsec/xerosploit",
+ "star": 1095,
+ "commits": 33,
+ "modify_time": "2019-04-29 00:13:33",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/secforce/sparta",
+ "star": 1092,
+ "commits": 25,
+ "modify_time": "2019-02-09 14:22:04",
+ "last_release": "v1.0.4",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/leng-yue/lengyue-vcode",
+ "star": 1091,
+ "commits": 98,
+ "modify_time": "2019-09-21 07:44:27",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/containers/bubblewrap",
+ "star": 1090,
+ "commits": 335,
+ "modify_time": "2019-11-27 12:36:24",
+ "last_release": "v0.4.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/snoopysecurity/awesome-burp-extensions",
+ "star": 1090,
+ "commits": 95,
+ "modify_time": "2019-10-28 20:57:11",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/cliffordwolf/picorv32",
+ "star": 1090,
+ "commits": 563,
+ "modify_time": "2019-11-18 13:21:10",
+ "last_release": "",
+ "lang": "Verilog"
+ },
+ {
+ "link": "https://github.com/looterz/grimd",
+ "star": 1088,
+ "commits": 163,
+ "modify_time": "2019-11-13 19:18:00",
+ "last_release": "v1.0.6",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/cxbx-reloaded/cxbx-reloaded",
+ "star": 1087,
+ "commits": 5963,
+ "modify_time": "2019-12-02 08:04:41",
+ "last_release": "v0.1",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/stephenfewer/reflectivedllinjection",
+ "star": 1086,
+ "commits": 13,
+ "modify_time": "2013-09-05 08:10:09",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/nadoo/glider",
+ "star": 1084,
+ "commits": 352,
+ "modify_time": "2019-10-21 07:51:38",
+ "last_release": "v0.9.2",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/landgrey/pydictor",
+ "star": 1083,
+ "commits": 80,
+ "modify_time": "2019-09-03 14:04:03",
+ "last_release": "v2.0.5",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sevlyar/go-daemon",
+ "star": 1082,
+ "commits": 124,
+ "modify_time": "2019-04-19 11:36:41",
+ "last_release": "v0.1.5",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/nbs-system/php-malware-finder",
+ "star": 1080,
+ "commits": 344,
+ "modify_time": "2019-10-24 19:50:27",
+ "last_release": "0.3.5",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/automattic/jetpack",
+ "star": 1078,
+ "commits": 20986,
+ "modify_time": "2019-12-09 22:37:41",
+ "last_release": "8.0",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/storyyeller/krakatau",
+ "star": 1077,
+ "commits": 510,
+ "modify_time": "2019-09-10 03:15:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/stampery/mongoaudit",
+ "star": 1076,
+ "commits": 219,
+ "modify_time": "2019-10-01 08:51:45",
+ "last_release": "0.1.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/offensive-security/exploitdb-bin-sploits",
+ "star": 1075,
+ "commits": 5225,
+ "modify_time": "2019-12-09 06:50:10",
+ "last_release": "\n 2019-12-10\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tpruvot/cpuminer-multi",
+ "star": 1073,
+ "commits": 362,
+ "modify_time": "2019-09-24 09:19:49",
+ "last_release": "v1.3.1-multi",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/guardrailsio/awesome-golang-security",
+ "star": 1073,
+ "commits": 21,
+ "modify_time": "2019-11-10 14:43:11",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/whitequark/unfork",
+ "star": 1072,
+ "commits": 21,
+ "modify_time": "2019-10-31 20:40:04",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/fireice-uk/xmr-stak-cpu",
+ "star": 1072,
+ "commits": 246,
+ "modify_time": "2017-11-19 20:34:23",
+ "last_release": "final",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/googleprojectzero/domato",
+ "star": 1071,
+ "commits": 86,
+ "modify_time": "2019-12-09 09:31:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tcurdt/iproxy",
+ "star": 1071,
+ "commits": 84,
+ "modify_time": "2019-06-30 08:16:01",
+ "last_release": "\n version-2.0\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/nccgroup/winpayloads",
+ "star": 1071,
+ "commits": 382,
+ "modify_time": "2019-07-12 13:51:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lucifer1993/struts-scan",
+ "star": 1071,
+ "commits": 52,
+ "modify_time": "2019-05-07 02:12:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/citusdata/pg_shard",
+ "star": 1070,
+ "commits": 907,
+ "modify_time": "2016-08-03 04:54:22",
+ "last_release": "v1.2.3",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/observerss/textfilter",
+ "star": 1068,
+ "commits": 5,
+ "modify_time": "2014-10-27 02:26:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zerosum0x0/cve-2019-0708",
+ "star": 1065,
+ "commits": 56,
+ "modify_time": "2019-09-06 17:37:32",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/nytrorst/netripper",
+ "star": 1065,
+ "commits": 75,
+ "modify_time": "2019-05-28 23:27:51",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/wtsxdev/machine-learning-for-cyber-security",
+ "star": 1063,
+ "commits": 8,
+ "modify_time": "2017-11-10 05:29:37",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/quiet/quiet",
+ "star": 1062,
+ "commits": 280,
+ "modify_time": "2019-11-15 06:31:18",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/infosec-au/altdns",
+ "star": 1061,
+ "commits": 66,
+ "modify_time": "2019-09-25 21:17:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/forseti-security/forseti-security",
+ "star": 1060,
+ "commits": 2266,
+ "modify_time": "2019-12-09 14:44:27",
+ "last_release": "v2.25.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/samyk/usbdriveby",
+ "star": 1057,
+ "commits": 29,
+ "modify_time": "2017-01-11 19:26:33",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/yelp/detect-secrets",
+ "star": 1056,
+ "commits": 730,
+ "modify_time": "2019-12-02 16:48:29",
+ "last_release": "\n v0.13.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ingokegel/jclasslib",
+ "star": 1056,
+ "commits": 1032,
+ "modify_time": "2019-12-03 10:54:38",
+ "last_release": "5.4",
+ "lang": "Kotlin"
+ },
+ {
+ "link": "https://github.com/fgribreau/mailchecker",
+ "star": 1056,
+ "commits": 977,
+ "modify_time": "2019-12-06 22:05:39",
+ "last_release": "\n v3.3.3\n ",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/simsong/tcpflow",
+ "star": 1054,
+ "commits": 765,
+ "modify_time": "2019-12-03 11:40:27",
+ "last_release": "tcpflow-1.5.0",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/cr-marcstevens/sha1collisiondetection",
+ "star": 1052,
+ "commits": 102,
+ "modify_time": "2019-05-09 08:15:28",
+ "last_release": "stable-v1.0.3",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/byt3bl33d3r/silenttrinity",
+ "star": 1052,
+ "commits": 255,
+ "modify_time": "2019-10-28 04:39:47",
+ "last_release": "",
+ "lang": "Boo"
+ },
+ {
+ "link": "https://github.com/WAVM/WAVM",
+ "star": 1051,
+ "commits": 2219,
+ "modify_time": "2019-12-03 06:36:20",
+ "last_release": "nightly/2019-12-04",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/sundowndev/phoneinfoga",
+ "star": 1051,
+ "commits": 345,
+ "modify_time": "2019-11-15 10:14:16",
+ "last_release": "v1.10.9",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zboxfs/zbox",
+ "star": 1050,
+ "commits": 389,
+ "modify_time": "2019-12-09 07:48:00",
+ "last_release": "0.8.7",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/yzddmr6/webshell-venom",
+ "star": 1049,
+ "commits": 117,
+ "modify_time": "2019-11-28 02:46:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fireeye/flare-ida",
+ "star": 1048,
+ "commits": 157,
+ "modify_time": "2019-11-26 19:05:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/denji/awesome-http-benchmark",
+ "star": 1046,
+ "commits": 24,
+ "modify_time": "2019-11-21 19:23:08",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/woj-ciech/kamerka",
+ "star": 1045,
+ "commits": 39,
+ "modify_time": "2019-07-26 15:27:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/firehol/firehol",
+ "star": 1044,
+ "commits": 1714,
+ "modify_time": "2019-03-04 20:18:16",
+ "last_release": "v3.1.6",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/trailofbits/ctf",
+ "star": 1041,
+ "commits": 91,
+ "modify_time": "2019-09-30 16:13:59",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/h4ckforjob/dirmap",
+ "star": 1041,
+ "commits": 66,
+ "modify_time": "2019-09-08 05:10:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lucifer1993/angelsword",
+ "star": 1040,
+ "commits": 94,
+ "modify_time": "2019-04-20 12:55:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kevin-robertson/inveigh",
+ "star": 1040,
+ "commits": 126,
+ "modify_time": "2019-08-19 01:35:33",
+ "last_release": "1,5",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/freetubeapp/freetube",
+ "star": 1040,
+ "commits": 372,
+ "modify_time": "2019-10-15 02:10:02",
+ "last_release": "v0.7.1-beta",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/ezaquarii/vpn-at-home",
+ "star": 1040,
+ "commits": 146,
+ "modify_time": "2019-10-29 21:42:09",
+ "last_release": "\n 2.0.3\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/NextronSystems/APTSimulator",
+ "star": 1039,
+ "commits": 66,
+ "modify_time": "2018-06-13 17:12:47",
+ "last_release": "v0.8.0",
+ "lang": "Batchfile"
+ },
+ {
+ "link": "https://github.com/t6x/reaver-wps-fork-t6x",
+ "star": 1038,
+ "commits": 291,
+ "modify_time": "2019-10-30 03:29:53",
+ "last_release": "v1.6.5",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/nanopool/claymore-dual-miner",
+ "star": 1038,
+ "commits": 15,
+ "modify_time": "2019-05-22 17:23:46",
+ "last_release": "12.0",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/xairy/kernel-exploits",
+ "star": 1037,
+ "commits": 10,
+ "modify_time": "2019-10-22 20:54:33",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/sindresorhus/devtools-detect",
+ "star": 1037,
+ "commits": 35,
+ "modify_time": "2019-05-28 05:58:30",
+ "last_release": "v3.0.0",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/defectdojo/django-defectdojo",
+ "star": 1036,
+ "commits": 3138,
+ "modify_time": "2019-11-26 22:42:15",
+ "last_release": "python3",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/crmulliner/adbi",
+ "star": 1036,
+ "commits": 18,
+ "modify_time": "2015-06-13 04:37:35",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/zyq8709/dexhunter",
+ "star": 1032,
+ "commits": 29,
+ "modify_time": "2016-07-27 12:07:37",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/danmcinerney/icebreaker",
+ "star": 1032,
+ "commits": 226,
+ "modify_time": "2018-10-24 18:13:35",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/nccgroup/scoutsuite",
+ "star": 1029,
+ "commits": 4325,
+ "modify_time": "2019-11-21 17:43:28",
+ "last_release": "5.5.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nccgroup/redsnarf",
+ "star": 1029,
+ "commits": 277,
+ "modify_time": "2017-08-22 17:07:25",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/govolution/avet",
+ "star": 1029,
+ "commits": 424,
+ "modify_time": "2019-07-25 14:24:44",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/denji/nginx-tuning",
+ "star": 1029,
+ "commits": 39,
+ "modify_time": "2019-11-13 13:51:11",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ct-open-source/tuya-convert",
+ "star": 1028,
+ "commits": 304,
+ "modify_time": "2019-11-23 19:21:38",
+ "last_release": "v2.3.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/stephenturner/oneliners",
+ "star": 1025,
+ "commits": 56,
+ "modify_time": "2019-06-10 14:23:31",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/zhengmin1989/ios_ice_and_fire",
+ "star": 1025,
+ "commits": 17,
+ "modify_time": "2018-02-17 02:45:29",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/twitchyliquid64/subnet",
+ "star": 1024,
+ "commits": 46,
+ "modify_time": "2018-12-29 00:41:51",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/naetw/ctf-pwn-tips",
+ "star": 1024,
+ "commits": 56,
+ "modify_time": "2018-11-26 15:17:00",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/byt3bl33d3r/deathstar",
+ "star": 1021,
+ "commits": 51,
+ "modify_time": "2019-09-02 22:36:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/trimstray/sandmap",
+ "star": 1019,
+ "commits": 579,
+ "modify_time": "2019-11-15 08:15:36",
+ "last_release": "\n v1.2.0\n ",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/s0lst1c3/eaphammer",
+ "star": 1018,
+ "commits": 226,
+ "modify_time": "2019-11-10 22:19:46",
+ "last_release": "v1.12.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/maliceio/malice",
+ "star": 1018,
+ "commits": 632,
+ "modify_time": "2019-03-18 00:05:14",
+ "last_release": "v0.3.28",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/owasp/nodegoat",
+ "star": 1014,
+ "commits": 349,
+ "modify_time": "2019-09-10 05:34:39",
+ "last_release": "v1.4",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/umpox/zero-width-detection",
+ "star": 1014,
+ "commits": 11,
+ "modify_time": "2018-04-05 18:02:07",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/securestate/king-phisher",
+ "star": 1014,
+ "commits": 2413,
+ "modify_time": "2019-11-30 16:49:08",
+ "last_release": "v1.15.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/everdox/infinityhook",
+ "star": 1014,
+ "commits": 16,
+ "modify_time": "2019-07-25 18:11:48",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/d4vinci/dr0p1t-framework",
+ "star": 1014,
+ "commits": 44,
+ "modify_time": "2018-11-03 19:00:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/aguinet/wannakey",
+ "star": 1014,
+ "commits": 13,
+ "modify_time": "2017-06-03 10:35:20",
+ "last_release": "\n release-2.2\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/decalage2/oletools",
+ "star": 1011,
+ "commits": 1196,
+ "modify_time": "2019-12-04 12:48:14",
+ "last_release": "v0.55",
+ "lang": "Rich Text Format"
+ },
+ {
+ "link": "https://github.com/ionescu007/simplevisor",
+ "star": 1009,
+ "commits": 95,
+ "modify_time": "2018-12-08 16:10:01",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/rockbruno/swiftshield",
+ "star": 1008,
+ "commits": 260,
+ "modify_time": "2019-11-17 14:34:52",
+ "last_release": "3.4.0",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/monzo/response",
+ "star": 1008,
+ "commits": 365,
+ "modify_time": "2019-12-06 15:08:45",
+ "last_release": "release-0.3.7",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/0xsobky/hackvault",
+ "star": 1008,
+ "commits": 43,
+ "modify_time": "2018-09-07 02:50:18",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/justinas/nosurf",
+ "star": 1007,
+ "commits": 135,
+ "modify_time": "2019-11-05 13:56:40",
+ "last_release": "\n v1.1.0\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/entropy1337/infernal-twin",
+ "star": 1004,
+ "commits": 5,
+ "modify_time": "2018-11-26 17:38:22",
+ "last_release": "v3.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hacksysteam/hacksysextremevulnerabledriver",
+ "star": 1002,
+ "commits": 137,
+ "modify_time": "2019-11-17 17:35:58",
+ "last_release": "v3.00",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/google/fuzzer-test-suite",
+ "star": 1002,
+ "commits": 784,
+ "modify_time": "2019-10-28 16:22:12",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/sundowndev/hacker-roadmap",
+ "star": 1001,
+ "commits": 116,
+ "modify_time": "2019-05-15 11:24:16",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/onethawt/reverseengineering-reading-list",
+ "star": 1001,
+ "commits": 51,
+ "modify_time": "2019-03-06 23:28:48",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/sagishahar-zz/lpeworkshop",
+ "star": 1000,
+ "commits": 13,
+ "modify_time": "2019-01-15 15:05:43",
+ "last_release": "",
+ "lang": "Batchfile"
+ },
+ {
+ "link": "https://github.com/adolfintel/windows10-privacy",
+ "star": 1000,
+ "commits": 41,
+ "modify_time": "2019-07-05 04:21:42",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/bt3gl/Pentesting-Toolkit",
+ "star": 999,
+ "commits": 246,
+ "modify_time": "2019-11-13 23:05:53",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/lmirosevic/gbdeviceinfo",
+ "star": 999,
+ "commits": 233,
+ "modify_time": "2019-10-25 08:24:50",
+ "last_release": "\n 6.3.0\n ",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/adtac/autovpn",
+ "star": 999,
+ "commits": 18,
+ "modify_time": "2019-04-26 22:43:36",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/mdp/rotp",
+ "star": 998,
+ "commits": 228,
+ "modify_time": "2019-07-17 18:46:04",
+ "last_release": "\n v5.1.0\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/kenvix/usbcopyer",
+ "star": 998,
+ "commits": 58,
+ "modify_time": "2018-12-16 13:11:41",
+ "last_release": "V5.11",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/danmcinerney/xsscrapy",
+ "star": 998,
+ "commits": 139,
+ "modify_time": "2018-03-04 03:39:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/secwiki/cms-hunter",
+ "star": 997,
+ "commits": 140,
+ "modify_time": "2018-12-20 06:44:32",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/x0rz/phishing_catcher",
+ "star": 996,
+ "commits": 66,
+ "modify_time": "2019-11-04 10:50:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gencebay/httplive",
+ "star": 995,
+ "commits": 91,
+ "modify_time": "2019-03-07 17:54:53",
+ "last_release": "20190307175847-f8daed4",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/gsliepen/tinc",
+ "star": 992,
+ "commits": 1869,
+ "modify_time": "2019-08-26 10:57:03",
+ "last_release": "\n release-1.0.36\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/tylous/sniffair",
+ "star": 990,
+ "commits": 122,
+ "modify_time": "2018-10-22 02:19:10",
+ "last_release": "V3.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/k8gege/ladon",
+ "star": 988,
+ "commits": 78,
+ "modify_time": "2019-12-08 14:46:45",
+ "last_release": "\n 5.6\n ",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/YahooArchive/xss-filters",
+ "star": 988,
+ "commits": 124,
+ "modify_time": "2016-09-12 20:03:36",
+ "last_release": "v1.2.7",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/nosequeldeebee/blockchain-tutorial",
+ "star": 988,
+ "commits": 55,
+ "modify_time": "2019-08-16 23:46:47",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/xiphosresearch/exploits",
+ "star": 987,
+ "commits": 156,
+ "modify_time": "2019-02-11 09:13:59",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jekil/awesome-hacking",
+ "star": 987,
+ "commits": 267,
+ "modify_time": "2019-12-08 20:57:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wiire-a/pixiewps",
+ "star": 986,
+ "commits": 239,
+ "modify_time": "2019-10-29 23:52:17",
+ "last_release": "v1.4.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/sensepost/mana",
+ "star": 986,
+ "commits": 91,
+ "modify_time": "2018-08-21 07:12:56",
+ "last_release": "1.3.1",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/ekultek/bluekeep",
+ "star": 986,
+ "commits": 33,
+ "modify_time": "2019-09-03 20:50:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/FSecureLABS/needle",
+ "star": 981,
+ "commits": 577,
+ "modify_time": "2018-07-26 16:50:51",
+ "last_release": "v1.3.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zardus/preeny",
+ "star": 980,
+ "commits": 101,
+ "modify_time": "2019-10-29 09:57:52",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/syss-research/seth",
+ "star": 980,
+ "commits": 96,
+ "modify_time": "2019-10-26 15:55:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hoshsadiq/adblock-nocoin-list",
+ "star": 979,
+ "commits": 594,
+ "modify_time": "2019-11-10 11:20:59",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/lukechilds/reverse-shell",
+ "star": 978,
+ "commits": 65,
+ "modify_time": "2019-11-19 10:24:02",
+ "last_release": "\n v1.1.2\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/kiminewt/pyshark",
+ "star": 978,
+ "commits": 381,
+ "modify_time": "2019-11-30 10:08:59",
+ "last_release": "v0.4.2.11",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hyperparticle/one-pixel-attack-keras",
+ "star": 978,
+ "commits": 52,
+ "modify_time": "2019-09-28 20:03:32",
+ "last_release": "\n 1.7\n ",
+ "lang": "Jupyter Notebook"
+ },
+ {
+ "link": "https://github.com/dowsnature/dowsdns",
+ "star": 978,
+ "commits": 122,
+ "modify_time": "2017-05-26 04:18:13",
+ "last_release": "v0.22",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/aarshayj/analytics_vidhya",
+ "star": 978,
+ "commits": 18,
+ "modify_time": "2019-11-15 14:44:22",
+ "last_release": "",
+ "lang": "Jupyter Notebook"
+ },
+ {
+ "link": "https://github.com/0x4d31/awesome-threat-detection",
+ "star": 976,
+ "commits": 50,
+ "modify_time": "2019-05-13 16:38:38",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/synack/knockknock",
+ "star": 975,
+ "commits": 35,
+ "modify_time": "2016-08-26 21:35:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/moosedojo/apt2",
+ "star": 975,
+ "commits": 175,
+ "modify_time": "2018-03-31 04:44:48",
+ "last_release": "v1.0-20180315",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sozu-proxy/sozu",
+ "star": 974,
+ "commits": 2089,
+ "modify_time": "2019-11-18 12:48:40",
+ "last_release": "\n 0.11.30\n ",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/ondyari/faceforensics",
+ "star": 973,
+ "commits": 58,
+ "modify_time": "2019-10-04 13:41:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/n0tr00t/sreg",
+ "star": 973,
+ "commits": 54,
+ "modify_time": "2019-10-31 10:09:34",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/m57/dnsteal",
+ "star": 973,
+ "commits": 26,
+ "modify_time": "2019-05-16 21:12:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/huolizhuminh/networkpacketcapture",
+ "star": 973,
+ "commits": 75,
+ "modify_time": "2018-12-30 14:22:25",
+ "last_release": "\n 1.0.4\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/herumi/xbyak",
+ "star": 972,
+ "commits": 700,
+ "modify_time": "2019-12-06 10:46:02",
+ "last_release": "\n v5.85\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/x64dbg/docs",
+ "star": 971,
+ "commits": 323,
+ "modify_time": "2019-11-13 00:35:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vishvananda/netlink",
+ "star": 971,
+ "commits": 482,
+ "modify_time": "2019-11-15 11:17:45",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/ctfs/resources",
+ "star": 971,
+ "commits": 55,
+ "modify_time": "2019-09-12 18:43:37",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/corkami/pocs",
+ "star": 969,
+ "commits": 222,
+ "modify_time": "2019-08-02 14:04:50",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/rbsec/sslscan",
+ "star": 968,
+ "commits": 471,
+ "modify_time": "2019-07-24 10:29:17",
+ "last_release": "1.11.11-rbsec",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/olimex/olinuxino",
+ "star": 968,
+ "commits": 429,
+ "modify_time": "2019-10-10 09:46:05",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/selwin/python-user-agents",
+ "star": 967,
+ "commits": 127,
+ "modify_time": "2019-04-07 10:47:25",
+ "last_release": "\n v2.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dominicbreuker/pspy",
+ "star": 967,
+ "commits": 149,
+ "modify_time": "2019-08-22 18:32:18",
+ "last_release": "v1.2.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/cybellum/doubleagent",
+ "star": 966,
+ "commits": 6,
+ "modify_time": "2017-03-28 15:41:57",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/androidvts/android-vts",
+ "star": 966,
+ "commits": 389,
+ "modify_time": "2017-04-20 14:14:30",
+ "last_release": "v.13",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/dvorka/mindforger",
+ "star": 965,
+ "commits": 1129,
+ "modify_time": "2019-12-07 05:40:54",
+ "last_release": "\n 1.49.2\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/cobbr/covenant",
+ "star": 965,
+ "commits": 206,
+ "modify_time": "2019-11-06 16:48:22",
+ "last_release": "\n v0.4\n ",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/jenssegers/optimus",
+ "star": 964,
+ "commits": 104,
+ "modify_time": "2019-05-24 11:43:18",
+ "last_release": "v1.0.0",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/0xInfection/TIDoS-Framework",
+ "star": 962,
+ "commits": 770,
+ "modify_time": "2019-08-19 14:55:13",
+ "last_release": "v1.7",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bromite/bromite",
+ "star": 962,
+ "commits": 294,
+ "modify_time": "2019-12-09 10:51:40",
+ "last_release": "78.0.3904.130",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/abatchy17/windowsexploits",
+ "star": 962,
+ "commits": 12,
+ "modify_time": "2017-05-21 17:21:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pillarjs/understanding-csrf",
+ "star": 961,
+ "commits": 10,
+ "modify_time": "2015-08-22 22:13:31",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/netspi/powerupsql",
+ "star": 961,
+ "commits": 839,
+ "modify_time": "2019-11-07 15:40:46",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/jaksi/sshesame",
+ "star": 961,
+ "commits": 23,
+ "modify_time": "2016-11-16 18:09:07",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/pillarjs/cookies",
+ "star": 957,
+ "commits": 246,
+ "modify_time": "2019-10-12 03:20:40",
+ "last_release": "0.8.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/shmilylty/oneforall",
+ "star": 956,
+ "commits": 319,
+ "modify_time": "2019-12-10 06:10:35",
+ "last_release": "v0.0.8",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fireeye/flare-fakenet-ng",
+ "star": 956,
+ "commits": 288,
+ "modify_time": "2019-11-14 15:52:50",
+ "last_release": "v1.4.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hasherezade/pe-sieve",
+ "star": 955,
+ "commits": 900,
+ "modify_time": "2019-12-04 23:45:50",
+ "last_release": "v0.2.3",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/hatriot/zarp",
+ "star": 953,
+ "commits": 307,
+ "modify_time": "2019-08-10 17:27:12",
+ "last_release": "0.1.8",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sprov065/v2-ui",
+ "star": 952,
+ "commits": 105,
+ "modify_time": "2019-11-30 13:11:39",
+ "last_release": "5.0.2",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/fabienvauchelles/scrapoxy",
+ "star": 952,
+ "commits": 290,
+ "modify_time": "2018-08-17 16:46:57",
+ "last_release": "\n 3.1.1\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/mozilla/OpenWPM",
+ "star": 951,
+ "commits": 1563,
+ "modify_time": "2019-12-04 01:51:40",
+ "last_release": "v0.9.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fdiskyou/injectallthethings",
+ "star": 951,
+ "commits": 6,
+ "modify_time": "2017-07-21 20:23:37",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/trycatchhcf/cloakify",
+ "star": 950,
+ "commits": 115,
+ "modify_time": "2018-05-11 03:27:03",
+ "last_release": "v1.0.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/arnaucube/coffeeMiner",
+ "star": 948,
+ "commits": 4,
+ "modify_time": "2018-01-04 11:25:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dhavalkapil/heap-exploitation",
+ "star": 947,
+ "commits": 56,
+ "modify_time": "2019-06-28 05:37:33",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/darksecdevelopers/hiddeneye",
+ "star": 947,
+ "commits": 770,
+ "modify_time": "2019-12-03 20:19:37",
+ "last_release": "0.5.1",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/sashs/ropper",
+ "star": 946,
+ "commits": 693,
+ "modify_time": "2019-12-03 08:16:23",
+ "last_release": "\n v1.13.5\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ffuf/ffuf",
+ "star": 946,
+ "commits": 89,
+ "modify_time": "2019-12-08 11:48:53",
+ "last_release": "v0.12",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/basil00/divert",
+ "star": 946,
+ "commits": 269,
+ "modify_time": "2019-10-06 00:19:23",
+ "last_release": "v2.2.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/Cisco-Talos/clamav-devel",
+ "star": 944,
+ "commits": 10156,
+ "modify_time": "2019-10-22 19:52:34",
+ "last_release": "\n clamav-0.102.1\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/invoke-ir/powerforensics",
+ "star": 944,
+ "commits": 272,
+ "modify_time": "2018-04-20 10:34:59",
+ "last_release": "1.1.1",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/intelxed/xed",
+ "star": 944,
+ "commits": 817,
+ "modify_time": "2019-08-21 17:09:29",
+ "last_release": "\n 11.0.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/theupdateframework/tuf",
+ "star": 943,
+ "commits": 3489,
+ "modify_time": "2019-11-29 11:36:18",
+ "last_release": "v0.12.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/chybeta/software-security-learning",
+ "star": 942,
+ "commits": 58,
+ "modify_time": "2018-02-17 15:59:26",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/zhaoweih/shadowsocks-tutorial",
+ "star": 941,
+ "commits": 43,
+ "modify_time": "2019-09-21 16:06:07",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/mothran/bunny",
+ "star": 940,
+ "commits": 114,
+ "modify_time": "2014-09-24 23:39:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/1n3/findsploit",
+ "star": 940,
+ "commits": 72,
+ "modify_time": "2019-02-01 16:29:30",
+ "last_release": "v1.8",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/Netflix-Skunkworks/sleepy-puppy",
+ "star": 939,
+ "commits": 65,
+ "modify_time": "2018-07-24 20:33:08",
+ "last_release": "\n 0.2.2b\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/gaasedelen/lighthouse",
+ "star": 939,
+ "commits": 349,
+ "modify_time": "2018-12-12 18:49:09",
+ "last_release": "v0.8.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/countercept/doublepulsar-detection-script",
+ "star": 939,
+ "commits": 24,
+ "modify_time": "2017-04-27 10:43:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/christophetd/cloudflair",
+ "star": 939,
+ "commits": 24,
+ "modify_time": "2019-09-05 21:08:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bugcrowd/bugcrowd_university",
+ "star": 939,
+ "commits": 92,
+ "modify_time": "2019-08-09 02:40:04",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/wtsxdev/penetration-testing",
+ "star": 938,
+ "commits": 7,
+ "modify_time": "2019-03-13 19:49:49",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/knownsec/pocsuite3",
+ "star": 938,
+ "commits": 221,
+ "modify_time": "2019-11-25 02:22:13",
+ "last_release": "\n v1.5.9\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/infobyte/evilgrade",
+ "star": 938,
+ "commits": 33,
+ "modify_time": "2018-01-24 19:15:25",
+ "last_release": "v2.0.9",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/DeepSpaceHarbor/Awesome-AI-Security",
+ "star": 936,
+ "commits": 27,
+ "modify_time": "2018-04-15 08:06:23",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/securesocketfunneling/ssf",
+ "star": 936,
+ "commits": 386,
+ "modify_time": "2018-02-13 21:51:15",
+ "last_release": "3.0.0",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/google/firing-range",
+ "star": 935,
+ "commits": 84,
+ "modify_time": "2018-11-08 13:57:43",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/d4vinci/one-lin3r",
+ "star": 935,
+ "commits": 61,
+ "modify_time": "2019-10-25 14:35:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/david942j/one_gadget",
+ "star": 934,
+ "commits": 206,
+ "modify_time": "2019-11-29 01:23:34",
+ "last_release": "v1.7.3",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/tomchop/malcom",
+ "star": 933,
+ "commits": 708,
+ "modify_time": "2017-11-29 16:31:51",
+ "last_release": "v1.3a",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nullsecuritynet/tools",
+ "star": 931,
+ "commits": 102,
+ "modify_time": "2019-11-12 06:26:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/threathuntingproject/threathunting",
+ "star": 930,
+ "commits": 71,
+ "modify_time": "2019-07-29 19:42:15",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/kde/heaptrack",
+ "star": 930,
+ "commits": 924,
+ "modify_time": "2019-12-05 01:41:21",
+ "last_release": "\n v1.1.0\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/airbus-seclab/bincat",
+ "star": 930,
+ "commits": 4279,
+ "modify_time": "2019-12-06 13:01:41",
+ "last_release": "v1.1",
+ "lang": "OCaml"
+ },
+ {
+ "link": "https://github.com/osirislab/Hack-Night",
+ "star": 929,
+ "commits": 174,
+ "modify_time": "2019-05-13 20:00:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tyilo/insert_dylib",
+ "star": 928,
+ "commits": 23,
+ "modify_time": "2016-08-28 08:52:43",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/microsoft/windows-driver-frameworks",
+ "star": 928,
+ "commits": 12,
+ "modify_time": "2019-03-24 22:47:02",
+ "last_release": "win-10.0.17763.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/genoil/cpp-ethereum",
+ "star": 927,
+ "commits": 12014,
+ "modify_time": "2018-03-01 21:42:44",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/m4n3dw0lf/pythem",
+ "star": 927,
+ "commits": 454,
+ "modify_time": "2018-10-12 22:32:07",
+ "last_release": "\n v0.8.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/airbnb/binaryalert",
+ "star": 927,
+ "commits": 77,
+ "modify_time": "2019-08-20 00:41:22",
+ "last_release": "v1.2.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/samyk/keysweeper",
+ "star": 926,
+ "commits": 42,
+ "modify_time": "2017-03-02 00:44:16",
+ "last_release": "",
+ "lang": "Eagle"
+ },
+ {
+ "link": "https://github.com/song-li/cross_browser",
+ "star": 925,
+ "commits": 469,
+ "modify_time": "2019-04-22 23:20:45",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/tidesec/wdscanner",
+ "star": 924,
+ "commits": 32,
+ "modify_time": "2019-07-04 06:00:15",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/miek/inspectrum",
+ "star": 924,
+ "commits": 470,
+ "modify_time": "2018-12-01 17:06:45",
+ "last_release": "v0.2.2",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/eliben/pyelftools",
+ "star": 924,
+ "commits": 484,
+ "modify_time": "2019-12-09 13:24:36",
+ "last_release": "\n v0.26\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/weppos/whois",
+ "star": 923,
+ "commits": 3076,
+ "modify_time": "2019-09-19 09:33:18",
+ "last_release": "v4.0.4",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/tuhinshubhra/cmseek",
+ "star": 923,
+ "commits": 323,
+ "modify_time": "2019-10-05 20:46:27",
+ "last_release": "v.1.1.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sa7mon/s3scanner",
+ "star": 923,
+ "commits": 262,
+ "modify_time": "2019-09-28 01:09:46",
+ "last_release": "1.0.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ywb94/openwrt-ssr",
+ "star": 922,
+ "commits": null,
+ "modify_time": "2018-11-17 15:45:53",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/jaredhaight/psattack",
+ "star": 922,
+ "commits": 217,
+ "modify_time": "2018-02-17 22:52:37",
+ "last_release": "v1.99.1",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/grafeas/grafeas",
+ "star": 921,
+ "commits": 932,
+ "modify_time": "2019-12-09 20:40:47",
+ "last_release": "\n v0.1.4\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/diracdeltas/sniffly",
+ "star": 921,
+ "commits": 70,
+ "modify_time": "2017-08-05 02:06:38",
+ "last_release": "\n 0.3\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/snorby/snorby",
+ "star": 919,
+ "commits": 865,
+ "modify_time": "2017-11-12 13:40:37",
+ "last_release": "v2.6.2",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/googleprojectzero/sandbox-attacksurface-analysis-tools",
+ "star": 918,
+ "commits": 1571,
+ "modify_time": "2019-12-10 03:22:09",
+ "last_release": "v1.1.24",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/opensec-cn/kunpeng",
+ "star": 918,
+ "commits": 184,
+ "modify_time": "2019-10-31 02:38:48",
+ "last_release": "20190527",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/api0cradle/ultimateapplockerbypasslist",
+ "star": 918,
+ "commits": 61,
+ "modify_time": "2019-06-03 11:00:08",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/tom0li/collection-document",
+ "star": 917,
+ "commits": 321,
+ "modify_time": "2019-11-01 09:09:10",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/reswitched/pegaswitch",
+ "star": 917,
+ "commits": 260,
+ "modify_time": "2019-06-15 19:45:30",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/designativedave/androrat",
+ "star": 916,
+ "commits": 3,
+ "modify_time": "2012-11-16 22:36:13",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/0x90/wifi-arsenal",
+ "star": 914,
+ "commits": 330,
+ "modify_time": "2019-04-03 11:34:20",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/square/ghostunnel",
+ "star": 913,
+ "commits": 774,
+ "modify_time": "2019-11-19 05:17:30",
+ "last_release": "v1.5.2",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/tobefuturer/restore-symbol",
+ "star": 912,
+ "commits": 15,
+ "modify_time": "2019-04-27 06:41:38",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/ethereum/yellowpaper",
+ "star": 912,
+ "commits": 1375,
+ "modify_time": "2019-10-20 06:11:47",
+ "last_release": "",
+ "lang": "TeX"
+ },
+ {
+ "link": "https://github.com/elevenpaths/foca",
+ "star": 912,
+ "commits": 76,
+ "modify_time": "2019-12-05 09:13:09",
+ "last_release": "v3.4.6.2",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/dagenix/rust-crypto",
+ "star": 912,
+ "commits": 753,
+ "modify_time": "2016-09-07 05:29:55",
+ "last_release": "v0.2.36",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/cn0xroot/rfsec-toolkit",
+ "star": 912,
+ "commits": 36,
+ "modify_time": "2019-05-31 02:58:26",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/thelinuxchoice/shellphish",
+ "star": 910,
+ "commits": 67,
+ "modify_time": "2019-04-27 15:13:09",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/ivanilves/xiringuito",
+ "star": 910,
+ "commits": 150,
+ "modify_time": "2019-03-26 20:18:31",
+ "last_release": "v0.2.1",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/arm-software/arm-trusted-firmware",
+ "star": 910,
+ "commits": 6159,
+ "modify_time": "2019-12-03 23:21:54",
+ "last_release": "\n v2.2\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/sweetsoftware/ares",
+ "star": 909,
+ "commits": 86,
+ "modify_time": "2017-12-07 22:23:08",
+ "last_release": "\n 2.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sonyxperiadev/apkanalyser",
+ "star": 909,
+ "commits": 4,
+ "modify_time": "2013-03-15 02:57:52",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/skreweverything/swift-keylogger",
+ "star": 909,
+ "commits": 27,
+ "modify_time": "2018-07-06 08:10:11",
+ "last_release": "v2.1.0",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/pwnieexpress/raspberry_pwn",
+ "star": 908,
+ "commits": 59,
+ "modify_time": "2014-12-01 14:30:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jbangert/trapcc",
+ "star": 907,
+ "commits": 25,
+ "modify_time": "2013-04-16 18:56:57",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/DFHack/dfhack",
+ "star": 906,
+ "commits": 8706,
+ "modify_time": "2019-05-22 00:22:49",
+ "last_release": "0.44.12-r2",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/summitt/burp-non-http-extension",
+ "star": 906,
+ "commits": 81,
+ "modify_time": "2017-04-07 13:03:22",
+ "last_release": "v1.5",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/mschwager/fierce",
+ "star": 906,
+ "commits": 124,
+ "modify_time": "2019-11-22 21:57:09",
+ "last_release": "\n 1.4.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/m0rtem/cloudfail",
+ "star": 906,
+ "commits": 61,
+ "modify_time": "2019-07-11 21:35:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/seladb/pcapplusplus",
+ "star": 905,
+ "commits": 1109,
+ "modify_time": "2019-12-09 20:56:54",
+ "last_release": "v19.12",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ptoomey3/keychain-dumper",
+ "star": 904,
+ "commits": 76,
+ "modify_time": "2019-09-12 13:10:12",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/huacnlee/flora-kit",
+ "star": 904,
+ "commits": 53,
+ "modify_time": "2018-08-26 03:16:37",
+ "last_release": "v0.30",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/visgean/zeus",
+ "star": 903,
+ "commits": 14,
+ "modify_time": "2014-02-23 11:34:47",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cossacklabs/themis",
+ "star": 903,
+ "commits": 1459,
+ "modify_time": "2019-12-06 09:12:25",
+ "last_release": "0.12.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/mehrdadrad/radvpn",
+ "star": 902,
+ "commits": 79,
+ "modify_time": "2019-11-14 02:58:42",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/HASecuritySolutions/VulnWhisperer",
+ "star": 901,
+ "commits": 334,
+ "modify_time": "2019-12-03 15:21:48",
+ "last_release": "1.8.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nixawk/labs",
+ "star": 901,
+ "commits": 76,
+ "modify_time": "2018-11-02 15:15:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wszf/androrat",
+ "star": 897,
+ "commits": 31,
+ "modify_time": "2014-08-10 10:43:54",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/dominicbreuker/stego-toolkit",
+ "star": 897,
+ "commits": 49,
+ "modify_time": "2019-11-28 21:09:44",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/woj-ciech/leaklooker",
+ "star": 896,
+ "commits": 28,
+ "modify_time": "2019-11-04 12:37:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/secrary/injectproc",
+ "star": 896,
+ "commits": 31,
+ "modify_time": "2019-02-10 11:05:10",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/adafruit/adafruit_ssd1306",
+ "star": 896,
+ "commits": 161,
+ "modify_time": "2019-11-27 19:16:16",
+ "last_release": "2.0.2",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/whitewidowscanner/whitewidow",
+ "star": 894,
+ "commits": 605,
+ "modify_time": "2018-01-11 21:33:52",
+ "last_release": "2.0",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/trustedsec/hate_crack",
+ "star": 894,
+ "commits": 175,
+ "modify_time": "2019-09-27 15:11:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/levskaya/jslinux-deobfuscated",
+ "star": 893,
+ "commits": 91,
+ "modify_time": "2019-01-15 05:50:56",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/derpopo/uabe",
+ "star": 891,
+ "commits": 35,
+ "modify_time": "2019-08-02 22:21:54",
+ "last_release": "2.2stabled",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/smallstep/cli",
+ "star": 890,
+ "commits": 904,
+ "modify_time": "2019-11-11 22:39:13",
+ "last_release": "v0.14.0-rc.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/swisskyrepo/ssrfmap",
+ "star": 889,
+ "commits": 68,
+ "modify_time": "2019-12-03 12:03:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/buserror/simavr",
+ "star": 888,
+ "commits": 936,
+ "modify_time": "2019-12-01 13:58:22",
+ "last_release": "\n v1.6\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/rev3rsesecurity/webmap",
+ "star": 887,
+ "commits": null,
+ "modify_time": "2018-12-27 01:48:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/p0pr0ck5/lua-resty-waf",
+ "star": 887,
+ "commits": 687,
+ "modify_time": "2018-04-18 15:11:54",
+ "last_release": "\n v0.11.1\n ",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/windowsexploits/exploits",
+ "star": 886,
+ "commits": 74,
+ "modify_time": "2017-06-14 16:30:27",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/ajinabraham/nodejsscan",
+ "star": 886,
+ "commits": 250,
+ "modify_time": "2019-12-02 21:21:55",
+ "last_release": "v3.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/theofficialflow/h-encore",
+ "star": 885,
+ "commits": 47,
+ "modify_time": "2019-08-26 11:37:53",
+ "last_release": "v2.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/dpnishant/appmon",
+ "star": 885,
+ "commits": 153,
+ "modify_time": "2019-07-27 05:01:10",
+ "last_release": "0.5",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/nsacyber/goSecure",
+ "star": 884,
+ "commits": 50,
+ "modify_time": "2017-06-26 18:06:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/whid-injector/whid",
+ "star": 884,
+ "commits": 96,
+ "modify_time": "2019-11-15 12:02:18",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/eycorsican/kitsunebi-android",
+ "star": 882,
+ "commits": 112,
+ "modify_time": "2019-08-10 23:21:04",
+ "last_release": "v0.9.2",
+ "lang": "Kotlin"
+ },
+ {
+ "link": "https://github.com/derekselander/lldb",
+ "star": 879,
+ "commits": 342,
+ "modify_time": "2019-12-07 06:18:17",
+ "last_release": "\n 3.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/apple/cups",
+ "star": 879,
+ "commits": 2452,
+ "modify_time": "2019-12-04 18:44:15",
+ "last_release": "v2.3.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/opencti-platform/opencti",
+ "star": 878,
+ "commits": 897,
+ "modify_time": "2019-12-09 12:02:38",
+ "last_release": "2.1.1",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/bastilleresearch/mousejack",
+ "star": 878,
+ "commits": 32,
+ "modify_time": "2016-08-07 18:58:12",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/aptnotes/data",
+ "star": 878,
+ "commits": 198,
+ "modify_time": "2019-11-20 17:01:02",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/hookmaster/frida-all-in-one",
+ "star": 877,
+ "commits": 80,
+ "modify_time": "2019-11-04 02:49:13",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/504ensicslabs/lime",
+ "star": 877,
+ "commits": 69,
+ "modify_time": "2019-10-19 17:03:46",
+ "last_release": "v1.9",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/u-boot/u-boot",
+ "star": 876,
+ "commits": 61898,
+ "modify_time": "2019-12-10 02:53:23",
+ "last_release": "\n v2020.01-rc4\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/outflanknl/redelk",
+ "star": 876,
+ "commits": 45,
+ "modify_time": "2019-08-14 11:27:59",
+ "last_release": "0.9",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/wisk/medusa",
+ "star": 875,
+ "commits": 1155,
+ "modify_time": "2019-02-03 20:18:40",
+ "last_release": "0.4.3",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/w181496/web-ctf-cheatsheet",
+ "star": 875,
+ "commits": 108,
+ "modify_time": "2019-10-19 01:46:32",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/marcwebbie/passpie",
+ "star": 875,
+ "commits": 1081,
+ "modify_time": "2018-04-25 00:40:02",
+ "last_release": "v1.6.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/erocarrera/pefile",
+ "star": 875,
+ "commits": 428,
+ "modify_time": "2019-05-19 20:54:35",
+ "last_release": "v2019.4.18",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/w-digital-scanner/w9scan",
+ "star": 874,
+ "commits": 256,
+ "modify_time": "2019-09-10 10:43:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/redacted/xkcd-password-generator",
+ "star": 874,
+ "commits": 318,
+ "modify_time": "2019-04-22 19:00:51",
+ "last_release": "\n xkcdpass-1.17.3\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cisco/joy",
+ "star": 872,
+ "commits": 1483,
+ "modify_time": "2019-11-08 15:26:59",
+ "last_release": "\n v4.4.1\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/paboldin/meltdown-exploit",
+ "star": 871,
+ "commits": 47,
+ "modify_time": "2018-02-13 12:27:19",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/escapingbug/awesome-browser-exploit",
+ "star": 871,
+ "commits": 17,
+ "modify_time": "2019-09-11 01:41:52",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/zhaojh329/rtty",
+ "star": 870,
+ "commits": 461,
+ "modify_time": "2019-11-04 10:37:34",
+ "last_release": "v6.6.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/itchyny/bed",
+ "star": 870,
+ "commits": 747,
+ "modify_time": "2019-11-22 12:01:35",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/al0ne/vxscan",
+ "star": 870,
+ "commits": 79,
+ "modify_time": "2019-11-07 02:22:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/40t/go-sniffer",
+ "star": 870,
+ "commits": 42,
+ "modify_time": "2019-06-06 11:05:00",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/aircrack-ng/aircrack-ng-archive",
+ "star": 867,
+ "commits": 1995,
+ "modify_time": "2018-03-09 23:52:13",
+ "last_release": "\n 1.2-rc4\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/googlearchive/android-BluetoothLeGatt",
+ "star": 867,
+ "commits": 26,
+ "modify_time": "2019-09-10 21:51:05",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/google/security-research-pocs",
+ "star": 867,
+ "commits": 40,
+ "modify_time": "2019-04-16 14:48:30",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/fireeye/gocrack",
+ "star": 867,
+ "commits": 51,
+ "modify_time": "2019-08-01 14:47:20",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/esc0rtd3w/wifi-hacker",
+ "star": 866,
+ "commits": 160,
+ "modify_time": "2019-02-05 10:13:19",
+ "last_release": "2.0-test1",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/mdsecactivebreach/sharpshooter",
+ "star": 865,
+ "commits": 19,
+ "modify_time": "2019-02-13 09:39:06",
+ "last_release": "",
+ "lang": "Visual Basic .NET"
+ },
+ {
+ "link": "https://github.com/illera88/ponce",
+ "star": 865,
+ "commits": 284,
+ "modify_time": "2018-02-07 01:21:43",
+ "last_release": "v0.2",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ambionics/phpggc",
+ "star": 865,
+ "commits": 192,
+ "modify_time": "2019-12-03 23:19:08",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/mr-xn/burpsuite-collections",
+ "star": 863,
+ "commits": 135,
+ "modify_time": "2019-12-03 10:21:50",
+ "last_release": "2.1.06",
+ "lang": "Batchfile"
+ },
+ {
+ "link": "https://github.com/lamster2018/easyprotector",
+ "star": 863,
+ "commits": 145,
+ "modify_time": "2019-11-27 07:24:45",
+ "last_release": "1.1.1",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/explife0011/awesome-windows-kernel-security-development",
+ "star": 862,
+ "commits": 768,
+ "modify_time": "2019-12-09 07:13:31",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/jimmy201602/webterminal",
+ "star": 861,
+ "commits": 1083,
+ "modify_time": "2019-12-02 13:51:05",
+ "last_release": "0.9.6.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jonascz/how-to-prevent-scraping",
+ "star": 860,
+ "commits": 17,
+ "modify_time": "2019-09-29 06:42:31",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/s0md3v/ReconDog",
+ "star": 860,
+ "commits": 33,
+ "modify_time": "2019-05-05 15:49:25",
+ "last_release": "2.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/shadowsocks/luci-app-shadowsocks",
+ "star": 858,
+ "commits": 131,
+ "modify_time": "2019-02-28 04:56:11",
+ "last_release": "v1.9.1",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/ticarpi/jwt_tool",
+ "star": 858,
+ "commits": 27,
+ "modify_time": "2019-11-23 20:30:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ignitetechnologies/privilege-escalation",
+ "star": 858,
+ "commits": 109,
+ "modify_time": "2019-10-28 14:01:44",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/enjoiz/xxeinjector",
+ "star": 858,
+ "commits": 53,
+ "modify_time": "2018-07-12 07:37:44",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/mellow-io/mellow",
+ "star": 857,
+ "commits": 132,
+ "modify_time": "2019-12-08 07:54:51",
+ "last_release": "v0.1.11",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/circl/ail-framework",
+ "star": 857,
+ "commits": 1576,
+ "modify_time": "2019-12-09 15:56:07",
+ "last_release": "v2.5",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lijiejie/bbscan",
+ "star": 856,
+ "commits": 43,
+ "modify_time": "2019-08-16 13:53:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/onplus/shadowsocks-heroku",
+ "star": 855,
+ "commits": 67,
+ "modify_time": "2017-11-29 07:02:42",
+ "last_release": "0.9.10.1",
+ "lang": "CoffeeScript"
+ },
+ {
+ "link": "https://github.com/google/uiforetw",
+ "star": 855,
+ "commits": 562,
+ "modify_time": "2019-12-09 06:09:20",
+ "last_release": "v1.52",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/thelinuxchoice/userrecon",
+ "star": 854,
+ "commits": 10,
+ "modify_time": "2019-02-05 11:33:38",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/649/memcrashed-ddos-exploit",
+ "star": 854,
+ "commits": 20,
+ "modify_time": "2019-09-24 02:01:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/curi0usJack/luckystrike",
+ "star": 853,
+ "commits": 151,
+ "modify_time": "2017-08-17 16:09:23",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/vksrc/github-monitor",
+ "star": 853,
+ "commits": 221,
+ "modify_time": "2019-10-23 03:18:13",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/ukhomeoffice/repo-security-scanner",
+ "star": 853,
+ "commits": 57,
+ "modify_time": "2019-09-30 12:40:41",
+ "last_release": "0.4.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/misecurity/x-patrol",
+ "star": 853,
+ "commits": 43,
+ "modify_time": "2019-05-13 04:23:03",
+ "last_release": "0.3",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/henrypp/simplewall",
+ "star": 852,
+ "commits": 1354,
+ "modify_time": "2019-12-10 09:32:50",
+ "last_release": "v.3.0.9",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/0vercl0k/rp",
+ "star": 852,
+ "commits": 138,
+ "modify_time": "2017-04-16 18:50:43",
+ "last_release": "v2-beta",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/sahilm/fuzzy",
+ "star": 851,
+ "commits": 43,
+ "modify_time": "2019-10-30 22:22:58",
+ "last_release": "\n v0.1.0\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/nil0x42/phpsploit",
+ "star": 851,
+ "commits": 911,
+ "modify_time": "2019-11-29 05:36:16",
+ "last_release": "\n v3.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hubert3/isniff-gps",
+ "star": 851,
+ "commits": 76,
+ "modify_time": "2016-12-28 19:04:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cloudsploit/scans",
+ "star": 851,
+ "commits": 402,
+ "modify_time": "2019-12-05 01:16:36",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/spacehuhn/wifi_ducky",
+ "star": 850,
+ "commits": 79,
+ "modify_time": "2019-11-07 18:28:39",
+ "last_release": "v.1.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/zerbea/hcxtools",
+ "star": 849,
+ "commits": 1457,
+ "modify_time": "2019-12-09 11:45:45",
+ "last_release": "5.3.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/slimm609/checksec.sh",
+ "star": 849,
+ "commits": 298,
+ "modify_time": "2019-11-12 18:18:38",
+ "last_release": "2.1.0",
+ "lang": "Roff"
+ },
+ {
+ "link": "https://github.com/lylemi/learn-web-hacking",
+ "star": 849,
+ "commits": 316,
+ "modify_time": "2019-12-07 00:49:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/walkor/shadowsocks-php",
+ "star": 848,
+ "commits": 103,
+ "modify_time": "2018-12-28 12:26:40",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/utkusen/hidden-tear",
+ "star": 847,
+ "commits": 2,
+ "modify_time": "2016-01-27 18:46:42",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/nccgroup/demiguise",
+ "star": 847,
+ "commits": 9,
+ "modify_time": "2017-08-09 15:05:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/anorov/pysocks",
+ "star": 847,
+ "commits": 230,
+ "modify_time": "2019-09-20 02:47:40",
+ "last_release": "1.7.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/firmadyne/firmadyne",
+ "star": 846,
+ "commits": 62,
+ "modify_time": "2019-12-10 07:25:34",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/examplecode/mproxy",
+ "star": 846,
+ "commits": 12,
+ "modify_time": "2017-03-16 13:30:31",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/kgretzky/evilginx",
+ "star": 845,
+ "commits": 35,
+ "modify_time": "2018-07-26 12:25:22",
+ "last_release": "1.1.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/x90skysn3k/brutespray",
+ "star": 844,
+ "commits": 139,
+ "modify_time": "2019-09-23 16:15:21",
+ "last_release": "\n brutespray-1.6.6\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/serpicoproject/serpico",
+ "star": 844,
+ "commits": 706,
+ "modify_time": "2019-04-23 13:11:54",
+ "last_release": "1.3.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/openzwave/open-zwave",
+ "star": 844,
+ "commits": 6559,
+ "modify_time": "2019-12-09 09:31:26",
+ "last_release": "\n v1.6\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/neo23x0/signature-base",
+ "star": 844,
+ "commits": 1073,
+ "modify_time": "2019-12-09 12:27:52",
+ "last_release": "",
+ "lang": "YARA"
+ },
+ {
+ "link": "https://github.com/brendan-rius/c-jwt-cracker",
+ "star": 843,
+ "commits": 19,
+ "modify_time": "2019-06-04 13:24:07",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hellofwy/ss-bash",
+ "star": 842,
+ "commits": 25,
+ "modify_time": "2016-06-30 14:09:25",
+ "last_release": "v1.0-beta.3-en",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/gurnec/hashcheck",
+ "star": 842,
+ "commits": 93,
+ "modify_time": "2016-09-07 22:19:29",
+ "last_release": "v2.4.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/emsec/chameleonmini",
+ "star": 842,
+ "commits": 317,
+ "modify_time": "2019-12-06 15:47:18",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/trimstray/iptables-essentials",
+ "star": 841,
+ "commits": 32,
+ "modify_time": "2019-12-02 21:44:07",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ring04h/weakfilescan",
+ "star": 841,
+ "commits": 58,
+ "modify_time": "2016-12-17 14:27:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/henson/proxypool",
+ "star": 840,
+ "commits": 53,
+ "modify_time": "2019-10-12 03:39:38",
+ "last_release": "\n v2.0\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/dragonite-network/dragonite-java",
+ "star": 840,
+ "commits": 130,
+ "modify_time": "2019-07-16 13:11:16",
+ "last_release": "fwd-0.4.0-prx-0.4.0",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/borntoberoot/networkmanager",
+ "star": 840,
+ "commits": 1055,
+ "modify_time": "2019-11-13 20:15:58",
+ "last_release": "v2.0.0-pre002",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/jordanpotti/awsbucketdump",
+ "star": 839,
+ "commits": 78,
+ "modify_time": "2019-11-26 14:33:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/facebook/transform360",
+ "star": 838,
+ "commits": 33,
+ "modify_time": "2019-10-28 22:32:58",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ustayready/credsniper",
+ "star": 838,
+ "commits": 19,
+ "modify_time": "2018-07-28 08:34:35",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/Raikia/FiercePhish",
+ "star": 837,
+ "commits": 390,
+ "modify_time": "2019-11-14 17:32:51",
+ "last_release": "v1.2.2",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/pentestmonkey/windows-privesc-check",
+ "star": 837,
+ "commits": 181,
+ "modify_time": "2015-04-06 15:30:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/creditease-sec/insight",
+ "star": 837,
+ "commits": 263,
+ "modify_time": "2019-08-29 14:07:30",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/sleuthkit/autopsy",
+ "star": 836,
+ "commits": 26094,
+ "modify_time": "2019-12-09 22:34:05",
+ "last_release": "autopsy-4.13.0",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/niklasb/libc-database",
+ "star": 836,
+ "commits": 40,
+ "modify_time": "2019-05-09 06:25:27",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/kpwn/iosre",
+ "star": 836,
+ "commits": 148,
+ "modify_time": "2018-06-30 13:23:48",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/v33ru/iotsecurity101",
+ "star": 833,
+ "commits": 134,
+ "modify_time": "2019-11-27 20:16:33",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/sevenbits/mac-linux-usb-loader",
+ "star": 833,
+ "commits": 672,
+ "modify_time": "2019-05-29 01:39:36",
+ "last_release": "v3.4.8",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/galoisinc/cryptol",
+ "star": 832,
+ "commits": 2090,
+ "modify_time": "2019-12-06 23:51:57",
+ "last_release": "2.8.0",
+ "lang": "Haskell"
+ },
+ {
+ "link": "https://github.com/cugu/awesome-forensics",
+ "star": 832,
+ "commits": 97,
+ "modify_time": "2019-11-04 10:29:52",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/pwntester/ysoserial.net",
+ "star": 831,
+ "commits": 126,
+ "modify_time": "2019-11-25 11:12:24",
+ "last_release": "master-Release-30",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/ma1co/sony-pmca-re",
+ "star": 831,
+ "commits": 176,
+ "modify_time": "2019-07-08 08:10:07",
+ "last_release": "v0.17",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tasvideos/bizhawk",
+ "star": 830,
+ "commits": 15185,
+ "modify_time": "2019-12-09 21:45:36",
+ "last_release": "2.3.2",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/redhuntlabs/redhunt-os",
+ "star": 830,
+ "commits": 34,
+ "modify_time": "2019-11-18 10:17:49",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ietf-wg-acme/acme",
+ "star": 830,
+ "commits": 590,
+ "modify_time": "2019-03-04 18:19:25",
+ "last_release": "\n rfc8555-rc\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/halfkiss/zjdroid",
+ "star": 829,
+ "commits": 6,
+ "modify_time": "2014-07-25 10:22:25",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/etsy/midas",
+ "star": 828,
+ "commits": 36,
+ "modify_time": "2015-09-23 15:44:57",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/tiagorlampert/chaos",
+ "star": 827,
+ "commits": 98,
+ "modify_time": "2019-05-23 16:05:05",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/sandboxescaper/randomrepo",
+ "star": 827,
+ "commits": null,
+ "modify_time": "2019-01-02 02:19:42",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/kkkgo/kms_vl_all",
+ "star": 826,
+ "commits": 55,
+ "modify_time": "2019-05-25 21:29:38",
+ "last_release": "32",
+ "lang": "Batchfile"
+ },
+ {
+ "link": "https://github.com/cypress-io/cypress-example-recipes",
+ "star": 826,
+ "commits": 468,
+ "modify_time": "2019-12-02 20:41:42",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/zhufaner/shadowsocks-manage-system",
+ "star": 825,
+ "commits": 1,
+ "modify_time": "2017-07-20 03:51:21",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/symfony/security-csrf",
+ "star": 825,
+ "commits": 281,
+ "modify_time": "2019-11-21 07:02:52",
+ "last_release": "\n v5.0.1\n ",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/salesforce/ja3",
+ "star": 825,
+ "commits": 117,
+ "modify_time": "2019-11-13 04:40:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/redasmorg/redasm",
+ "star": 825,
+ "commits": 1323,
+ "modify_time": "2019-10-12 07:43:30",
+ "last_release": "v2.1.1",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/khronosgroup/spirv-cross",
+ "star": 824,
+ "commits": 2389,
+ "modify_time": "2019-12-09 12:29:49",
+ "last_release": "2019-11-01",
+ "lang": "GLSL"
+ },
+ {
+ "link": "https://github.com/danielmiessler/robotsdisallowed",
+ "star": 824,
+ "commits": 44,
+ "modify_time": "2019-07-23 07:57:20",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/clymb3r/powershell",
+ "star": 824,
+ "commits": 100,
+ "modify_time": "2015-10-01 04:36:47",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/corelan/mona",
+ "star": 823,
+ "commits": 173,
+ "modify_time": "2019-11-08 12:43:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/besimorhino/powercat",
+ "star": 823,
+ "commits": 82,
+ "modify_time": "2017-08-05 19:19:56",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/zfl9/ss-tproxy",
+ "star": 822,
+ "commits": 804,
+ "modify_time": "2019-11-18 05:23:53",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/kerlomz/captcha_trainer",
+ "star": 822,
+ "commits": 119,
+ "modify_time": "2019-12-10 04:48:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ilektrojohn/creepy",
+ "star": 821,
+ "commits": 137,
+ "modify_time": "2014-02-02 19:44:19",
+ "last_release": "v1.2-alpha",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/yampelo/beagle",
+ "star": 821,
+ "commits": 99,
+ "modify_time": "2019-12-03 04:30:00",
+ "last_release": "v1.0.5",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nccgroup/sobelow",
+ "star": 821,
+ "commits": 497,
+ "modify_time": "2019-12-03 23:42:23",
+ "last_release": "v0.8.0",
+ "lang": "Elixir"
+ },
+ {
+ "link": "https://github.com/cveproject/cvelist",
+ "star": 821,
+ "commits": 19855,
+ "modify_time": "2019-12-10 07:01:11",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/emmericp/ixy",
+ "star": 820,
+ "commits": 55,
+ "modify_time": "2019-11-18 14:03:38",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/stealthcopter/androidnetworktools",
+ "star": 819,
+ "commits": 142,
+ "modify_time": "2019-11-09 12:26:57",
+ "last_release": "0.4.5.2",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/jeffzh3ng/fuxi",
+ "star": 819,
+ "commits": 84,
+ "modify_time": "2019-10-17 06:08:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bioruebe/uniextract2",
+ "star": 819,
+ "commits": 257,
+ "modify_time": "2019-10-17 07:04:37",
+ "last_release": "v2.0.0-rc.2",
+ "lang": "AutoIt"
+ },
+ {
+ "link": "https://github.com/numirias/security",
+ "star": 818,
+ "commits": 12,
+ "modify_time": "2019-06-11 16:18:12",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/shr3ddersec/shr3dkit",
+ "star": 817,
+ "commits": 25,
+ "modify_time": "2019-10-02 01:21:01",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/rust-fuzz/afl.rs",
+ "star": 816,
+ "commits": 333,
+ "modify_time": "2019-11-13 04:43:55",
+ "last_release": "\n 0.5.2\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/pirate/security-growler",
+ "star": 814,
+ "commits": 134,
+ "modify_time": "2018-01-19 22:14:43",
+ "last_release": "v2.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/feeicn/security-ppt",
+ "star": 814,
+ "commits": 18,
+ "modify_time": "2019-09-27 07:16:35",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/dynup/kpatch",
+ "star": 814,
+ "commits": 1830,
+ "modify_time": "2019-12-06 15:19:53",
+ "last_release": "v0.8.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/elevenpaths/eternalblue-doublepulsar-metasploit",
+ "star": 813,
+ "commits": 6,
+ "modify_time": "2017-09-05 06:18:02",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/sindresorhus/is-online",
+ "star": 812,
+ "commits": 93,
+ "modify_time": "2019-11-26 17:53:39",
+ "last_release": "v8.2.1",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/utkusen/leviathan",
+ "star": 811,
+ "commits": 35,
+ "modify_time": "2018-10-03 15:40:47",
+ "last_release": "v0.1.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/utkusen/leviathan",
+ "star": 811,
+ "commits": 35,
+ "modify_time": "2018-10-03 15:40:47",
+ "last_release": "v0.1.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/timwr/cve-2016-5195",
+ "star": 811,
+ "commits": 43,
+ "modify_time": "2017-09-27 02:35:13",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/isecpartners/ios-ssl-kill-switch",
+ "star": 811,
+ "commits": 61,
+ "modify_time": "2014-09-15 19:09:09",
+ "last_release": "release-0.6",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/inquisb/icmpsh",
+ "star": 811,
+ "commits": 12,
+ "modify_time": "2013-05-17 15:26:53",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/nccgroup/featherduster",
+ "star": 810,
+ "commits": 185,
+ "modify_time": "2019-04-02 14:56:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tencent/tscancode",
+ "star": 809,
+ "commits": 52,
+ "modify_time": "2018-12-10 09:57:07",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/nicehash/nicehashminer-archived",
+ "star": 808,
+ "commits": 812,
+ "modify_time": "2017-06-19 21:20:06",
+ "last_release": "1.7.5.14",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/strazzere/android-unpacker",
+ "star": 808,
+ "commits": 56,
+ "modify_time": "2019-09-05 16:56:50",
+ "last_release": "v1.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/googleprojectzero/fuzzilli",
+ "star": 806,
+ "commits": 47,
+ "modify_time": "2019-11-08 02:45:48",
+ "last_release": "",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/fuzzbunch/fuzzbunch",
+ "star": 806,
+ "commits": 1,
+ "modify_time": "2017-04-14 19:04:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dmayer/idb",
+ "star": 806,
+ "commits": 331,
+ "modify_time": "2017-09-20 17:32:00",
+ "last_release": "\n v2.10.3\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/rastating/wordpress-exploit-framework",
+ "star": 805,
+ "commits": 907,
+ "modify_time": "2019-11-24 19:04:43",
+ "last_release": "v2.0.1",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/ptrkrysik/gr-gsm",
+ "star": 805,
+ "commits": 1121,
+ "modify_time": "2019-07-25 19:43:33",
+ "last_release": "\n v0.42.2\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/zhuhaow/specht",
+ "star": 804,
+ "commits": 31,
+ "modify_time": "2018-05-30 03:38:04",
+ "last_release": "",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/shmilylty/awesome-hacking",
+ "star": 804,
+ "commits": 3,
+ "modify_time": "2017-04-07 06:23:41",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/jivoi/pentest",
+ "star": 804,
+ "commits": 144,
+ "modify_time": "2019-12-06 12:34:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/Acmesec/CTFCrackTools",
+ "star": 803,
+ "commits": 172,
+ "modify_time": "2019-10-07 12:00:18",
+ "last_release": "3.2.4",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/te-k/flexidie",
+ "star": 803,
+ "commits": 12,
+ "modify_time": "2017-05-02 03:10:02",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/schollz/find-lf",
+ "star": 803,
+ "commits": 139,
+ "modify_time": "2017-11-05 11:59:32",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/techgaun/github-dorks",
+ "star": 802,
+ "commits": 54,
+ "modify_time": "2019-09-09 05:04:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/secforce/tunna",
+ "star": 802,
+ "commits": 40,
+ "modify_time": "2019-08-31 07:31:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hellman/xortool",
+ "star": 802,
+ "commits": 69,
+ "modify_time": "2019-10-25 07:35:22",
+ "last_release": "\n v0.98\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/andreyvit/create-dmg",
+ "star": 802,
+ "commits": 151,
+ "modify_time": "2019-11-05 09:20:57",
+ "last_release": "v1.0.0.7",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/vysecurity/RedTips",
+ "star": 801,
+ "commits": 12,
+ "modify_time": "2018-04-22 18:37:43",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/netflix/fido",
+ "star": 801,
+ "commits": 20,
+ "modify_time": "2017-05-24 22:12:40",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/ericsson/codechecker",
+ "star": 801,
+ "commits": 3416,
+ "modify_time": "2019-12-09 14:45:13",
+ "last_release": "v6.10.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/edu4rdshl/findomain",
+ "star": 800,
+ "commits": 368,
+ "modify_time": "2019-11-14 03:25:06",
+ "last_release": "0.9.2",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/aslody/whale",
+ "star": 800,
+ "commits": 35,
+ "modify_time": "2019-12-06 02:08:27",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/prof7bit/torchat",
+ "star": 799,
+ "commits": 482,
+ "modify_time": "2014-01-20 20:33:31",
+ "last_release": "\n 0.9.9.553\n ",
+ "lang": "Pascal"
+ },
+ {
+ "link": "https://github.com/igrsoft/kismac2",
+ "star": 799,
+ "commits": 171,
+ "modify_time": "2018-08-28 15:44:54",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/awslabs/aws-config-rules",
+ "star": 799,
+ "commits": 766,
+ "modify_time": "2019-09-25 06:24:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ComplianceAsCode/content",
+ "star": 798,
+ "commits": 14418,
+ "modify_time": "2019-12-09 13:51:05",
+ "last_release": "v0.1.47",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/proxymanapp/proxyman",
+ "star": 798,
+ "commits": 93,
+ "modify_time": "2019-12-04 06:05:12",
+ "last_release": "1.10.0",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/mak-/parameth",
+ "star": 798,
+ "commits": 56,
+ "modify_time": "2019-01-20 21:39:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ryhanson/phishery",
+ "star": 797,
+ "commits": 14,
+ "modify_time": "2016-11-16 23:01:16",
+ "last_release": "v1.0.2",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/codahale/sneaker",
+ "star": 797,
+ "commits": 127,
+ "modify_time": "2017-01-14 17:47:08",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/phaethon/kamene",
+ "star": 795,
+ "commits": 626,
+ "modify_time": "2019-05-06 08:20:32",
+ "last_release": "v0.32",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/yeti-platform/yeti",
+ "star": 795,
+ "commits": 2122,
+ "modify_time": "2019-11-20 00:29:12",
+ "last_release": "1.0.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sh4hin/androl4b",
+ "star": 794,
+ "commits": 25,
+ "modify_time": "2019-10-01 07:38:11",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/empireproject/empyre",
+ "star": 793,
+ "commits": 254,
+ "modify_time": "2017-01-18 02:41:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/srinivas11789/pcapxray",
+ "star": 791,
+ "commits": 269,
+ "modify_time": "2019-08-22 04:02:00",
+ "last_release": "3_0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/evilsocket/dnssearch",
+ "star": 790,
+ "commits": 20,
+ "modify_time": "2017-07-21 18:33:08",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/bwall/hashpump",
+ "star": 790,
+ "commits": 49,
+ "modify_time": "2016-10-02 18:53:38",
+ "last_release": "\n v1.20\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/terminals-origin/terminals",
+ "star": 789,
+ "commits": 1068,
+ "modify_time": "2019-02-08 14:07:25",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/fwupd/fwupd",
+ "star": 789,
+ "commits": 3685,
+ "modify_time": "2019-12-09 16:21:20",
+ "last_release": "\n 1.3.5\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/zstackio/zstack",
+ "star": 788,
+ "commits": 8559,
+ "modify_time": "2019-12-09 12:18:53",
+ "last_release": "\n 3.1.3_release\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/smartping/smartping",
+ "star": 787,
+ "commits": 134,
+ "modify_time": "2019-11-06 00:45:50",
+ "last_release": "v0.8.0",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/screetsec/dracnmap",
+ "star": 787,
+ "commits": 69,
+ "modify_time": "2017-10-11 13:51:46",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/numba/llvmlite",
+ "star": 787,
+ "commits": 1284,
+ "modify_time": "2019-10-11 15:44:55",
+ "last_release": "\n v0.31.0dev0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/microsoft/msrc-security-research",
+ "star": 787,
+ "commits": 42,
+ "modify_time": "2019-11-09 14:32:52",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/dreddsa5dies/gohacktools",
+ "star": 786,
+ "commits": 115,
+ "modify_time": "2019-10-19 09:34:47",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/netsniff-ng/netsniff-ng",
+ "star": 785,
+ "commits": 1317,
+ "modify_time": "2019-10-01 16:40:11",
+ "last_release": "v0.6.6",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/rebuy-de/aws-nuke",
+ "star": 785,
+ "commits": 664,
+ "modify_time": "2019-11-29 15:14:13",
+ "last_release": "v2.13.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/jklmnn/imagejs",
+ "star": 785,
+ "commits": 54,
+ "modify_time": "2018-03-14 21:49:19",
+ "last_release": "0.7.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/xoreaxeaxeax/sinkhole",
+ "star": 784,
+ "commits": 5,
+ "modify_time": "2015-12-31 09:52:45",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/threathunterx/nebula",
+ "star": 784,
+ "commits": 51,
+ "modify_time": "2019-07-26 15:50:52",
+ "last_release": "",
+ "lang": "TSQL"
+ },
+ {
+ "link": "https://github.com/parsiya/hacking-with-go",
+ "star": 784,
+ "commits": 66,
+ "modify_time": "2019-04-14 21:11:10",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/blankeer/mdwechat",
+ "star": 784,
+ "commits": 342,
+ "modify_time": "2019-05-04 13:15:58",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/bishopfox/gitgot",
+ "star": 784,
+ "commits": 30,
+ "modify_time": "2019-10-15 16:18:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/armon/go-socks5",
+ "star": 784,
+ "commits": 50,
+ "modify_time": "2016-09-02 18:42:37",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/v2-dev/awesome-social-engineering",
+ "star": 782,
+ "commits": 37,
+ "modify_time": "2019-01-26 16:50:02",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/summitroute/osxlockdown",
+ "star": 782,
+ "commits": 40,
+ "modify_time": "2016-09-11 20:02:30",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/net-ssh/net-ssh",
+ "star": 782,
+ "commits": 1325,
+ "modify_time": "2019-11-13 08:40:24",
+ "last_release": "\n v6.0.0.beta1\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/kevin-robertson/invoke-thehash",
+ "star": 782,
+ "commits": 21,
+ "modify_time": "2018-12-09 15:38:35",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/nixos/patchelf",
+ "star": 780,
+ "commits": 339,
+ "modify_time": "2019-10-23 11:59:05",
+ "last_release": "\n 0.10\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/denandz/keefarce",
+ "star": 780,
+ "commits": 10,
+ "modify_time": "2015-11-17 04:12:25",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/secretsquirrel/bdfproxy",
+ "star": 779,
+ "commits": 101,
+ "modify_time": "2017-08-02 19:04:08",
+ "last_release": "\n 0.3.9\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/konradit/gopro-py-api",
+ "star": 779,
+ "commits": 163,
+ "modify_time": "2019-11-03 10:28:45",
+ "last_release": "v4.0.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kolide/fleet",
+ "star": 777,
+ "commits": 1161,
+ "modify_time": "2019-12-04 17:48:24",
+ "last_release": "2.4.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/kevthehermit/ratdecoders",
+ "star": 777,
+ "commits": 193,
+ "modify_time": "2019-11-03 13:07:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/justcoding121/titanium-web-proxy",
+ "star": 777,
+ "commits": 1639,
+ "modify_time": "2019-12-03 22:11:47",
+ "last_release": "3.1.1201",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/gosecure/malboxes",
+ "star": 777,
+ "commits": 444,
+ "modify_time": "2019-10-18 17:52:25",
+ "last_release": "0.5.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dor1s/libfuzzer-workshop",
+ "star": 777,
+ "commits": 53,
+ "modify_time": "2017-10-13 20:08:52",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/bishopfox/sliver",
+ "star": 777,
+ "commits": 580,
+ "modify_time": "2019-11-27 08:12:13",
+ "last_release": "v0.0.6-alpha",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/aqzt/kjyw",
+ "star": 777,
+ "commits": 191,
+ "modify_time": "2019-11-28 10:47:26",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/marvis/pytorch-caffe-darknet-convert",
+ "star": 776,
+ "commits": 116,
+ "modify_time": "2017-12-16 06:41:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/polysync/oscc",
+ "star": 776,
+ "commits": 1121,
+ "modify_time": "2018-10-24 21:59:48",
+ "last_release": "v1.2.4",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/nodejs/llnode",
+ "star": 776,
+ "commits": 314,
+ "modify_time": "2019-10-03 17:02:39",
+ "last_release": "v2.2.0",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/sense-of-security/adrecon",
+ "star": 775,
+ "commits": 62,
+ "modify_time": "2018-12-13 08:58:27",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/dagrz/aws_pwn",
+ "star": 775,
+ "commits": 36,
+ "modify_time": "2017-10-14 07:57:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/uwnetworkslab/uproxy-p2p",
+ "star": 774,
+ "commits": 7580,
+ "modify_time": "2017-06-20 16:38:25",
+ "last_release": "v0.9.13",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/amq/firefox-debloat",
+ "star": 774,
+ "commits": 22,
+ "modify_time": "2015-12-29 15:53:05",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/viralmaniar/passhunt",
+ "star": 773,
+ "commits": 30,
+ "modify_time": "2018-03-09 04:14:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/payloadbox/xss-payload-list",
+ "star": 772,
+ "commits": 27,
+ "modify_time": "2019-12-03 18:15:57",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/liamg/tfsec",
+ "star": 772,
+ "commits": 129,
+ "modify_time": "2019-12-01 17:22:36",
+ "last_release": "v0.12.3",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/google/rowhammer-test",
+ "star": 771,
+ "commits": 73,
+ "modify_time": "2015-08-11 02:02:43",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/wi-fi-analyzer/fluxion",
+ "star": 769,
+ "commits": 715,
+ "modify_time": "2017-06-29 07:21:19",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/shekyan/slowhttptest",
+ "star": 769,
+ "commits": 248,
+ "modify_time": "2019-12-09 17:23:53",
+ "last_release": "v1.8.1",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/rewardone/oscprepo",
+ "star": 769,
+ "commits": 367,
+ "modify_time": "2019-10-18 20:06:03",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/jtpereyda/boofuzz",
+ "star": 769,
+ "commits": 1235,
+ "modify_time": "2019-12-09 15:51:37",
+ "last_release": "v0.1.6",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/damianh/proxykit",
+ "star": 769,
+ "commits": 423,
+ "modify_time": "2019-12-08 07:52:58",
+ "last_release": "\n build-number-11\n ",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/shadowsocks/chinadns-python",
+ "star": 768,
+ "commits": 76,
+ "modify_time": "2015-02-05 17:20:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vesche/scanless",
+ "star": 768,
+ "commits": 69,
+ "modify_time": "2019-11-07 21:30:40",
+ "last_release": "v2.0.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tmobile/pacbot",
+ "star": 768,
+ "commits": 965,
+ "modify_time": "2019-12-09 17:49:32",
+ "last_release": "2.0",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/daviddias/awesome-hacking-locations",
+ "star": 767,
+ "commits": 280,
+ "modify_time": "2019-10-22 14:36:42",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/brianlovin/security-checklist",
+ "star": 767,
+ "commits": 685,
+ "modify_time": "2019-12-09 13:20:52",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/snort3/snort3",
+ "star": 766,
+ "commits": 4017,
+ "modify_time": "2019-12-04 17:14:29",
+ "last_release": "\n 3.0.0-266\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/azzvx/gogotester",
+ "star": 765,
+ "commits": 76,
+ "modify_time": "2015-03-28 05:58:30",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/pfarb/awesome-crypto-papers",
+ "star": 765,
+ "commits": 43,
+ "modify_time": "2018-08-29 16:45:27",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/axtmueller/windows-kernel-explorer",
+ "star": 765,
+ "commits": 142,
+ "modify_time": "2019-11-26 17:45:41",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/gkbrk/slowloris",
+ "star": 764,
+ "commits": 30,
+ "modify_time": "2019-05-04 12:35:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ashutosh1206/crypton",
+ "star": 764,
+ "commits": 145,
+ "modify_time": "2019-10-14 11:40:18",
+ "last_release": "v2.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mbechler/marshalsec",
+ "star": 763,
+ "commits": 10,
+ "modify_time": "2018-11-01 12:05:11",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/hlldz/spookflare",
+ "star": 763,
+ "commits": 24,
+ "modify_time": "2019-02-27 13:16:13",
+ "last_release": "v2.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/grugq/portal",
+ "star": 762,
+ "commits": 7,
+ "modify_time": "2013-01-11 19:03:28",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/comaeio/porosity",
+ "star": 762,
+ "commits": 98,
+ "modify_time": "2019-01-10 04:48:45",
+ "last_release": "v20180116.2",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/mubix/shellshocker-pocs",
+ "star": 761,
+ "commits": 89,
+ "modify_time": "2019-11-21 17:21:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jakejarvis/awesome-shodan-queries",
+ "star": 761,
+ "commits": 18,
+ "modify_time": "2019-09-19 13:52:04",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/s0md3v/Hash-Buster",
+ "star": 760,
+ "commits": 47,
+ "modify_time": "2019-08-08 07:27:17",
+ "last_release": "v3.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/MisterBianco/BoopSuite",
+ "star": 760,
+ "commits": 1,
+ "modify_time": "2019-04-23 06:25:48",
+ "last_release": "v.3.0.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/thoughtworks/talisman",
+ "star": 760,
+ "commits": 343,
+ "modify_time": "2019-11-19 18:11:46",
+ "last_release": "v1.1.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/snovvcrash/usbrip",
+ "star": 760,
+ "commits": 258,
+ "modify_time": "2019-11-06 13:31:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lgandx/pcredz",
+ "star": 760,
+ "commits": 48,
+ "modify_time": "2019-07-17 21:32:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/haccer/subjack",
+ "star": 760,
+ "commits": 170,
+ "modify_time": "2019-07-31 10:59:01",
+ "last_release": "2.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/masatokinugawa/filterbypass",
+ "star": 759,
+ "commits": 1,
+ "modify_time": "2017-05-06 13:53:03",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/nekmo/dirhunt",
+ "star": 756,
+ "commits": 214,
+ "modify_time": "2019-11-05 22:45:34",
+ "last_release": "v0.6.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/greatsct/greatsct",
+ "star": 756,
+ "commits": 27,
+ "modify_time": "2018-11-08 17:32:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/eastee/rebreakcaptcha",
+ "star": 755,
+ "commits": 9,
+ "modify_time": "2017-03-05 21:30:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/banzaicloud/bank-vaults",
+ "star": 755,
+ "commits": 1214,
+ "modify_time": "2019-12-09 18:22:10",
+ "last_release": "0.6.3",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/rubysec/ruby-advisory-db",
+ "star": 754,
+ "commits": 866,
+ "modify_time": "2019-12-06 09:33:26",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/threatexpress/domainhunter",
+ "star": 753,
+ "commits": 27,
+ "modify_time": "2019-08-14 14:51:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/redballoonshenanigans/monitordarkly",
+ "star": 753,
+ "commits": 78,
+ "modify_time": "2017-06-27 18:18:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nahamsec/lazyrecon",
+ "star": 753,
+ "commits": 86,
+ "modify_time": "2019-08-05 20:51:28",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/korcankaraokcu/pince",
+ "star": 753,
+ "commits": 1040,
+ "modify_time": "2019-11-22 16:26:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wolfssl/wolfssl",
+ "star": 752,
+ "commits": 10525,
+ "modify_time": "2019-12-07 02:50:51",
+ "last_release": "\n v4.2.0c\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/davehull/kansa",
+ "star": 752,
+ "commits": 779,
+ "modify_time": "2019-02-12 03:26:02",
+ "last_release": "v0.8438-beta",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/rajkumrdusad/tool-x",
+ "star": 751,
+ "commits": 854,
+ "modify_time": "2019-12-10 01:16:13",
+ "last_release": "v2.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/owasp/securityshepherd",
+ "star": 751,
+ "commits": 756,
+ "modify_time": "2019-11-18 19:45:48",
+ "last_release": "v3.1",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/tennc/fuzzdb",
+ "star": 749,
+ "commits": 198,
+ "modify_time": "2019-11-27 06:19:02",
+ "last_release": "v0.3",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/sektioneins/pcc",
+ "star": 749,
+ "commits": 75,
+ "modify_time": "2018-02-01 09:51:42",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/pforemski/dingo",
+ "star": 748,
+ "commits": 28,
+ "modify_time": "2017-07-13 21:46:19",
+ "last_release": "0.13",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/d35m0nd142/lfisuite",
+ "star": 748,
+ "commits": 85,
+ "modify_time": "2018-04-08 12:30:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/buffer/thug",
+ "star": 748,
+ "commits": 4299,
+ "modify_time": "2019-10-17 13:02:22",
+ "last_release": "\n v0.10.6\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/infobyte/spoilerwall",
+ "star": 747,
+ "commits": 20,
+ "modify_time": "2019-01-07 17:17:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fabiobaroni/awesome-exploit-development",
+ "star": 747,
+ "commits": 8,
+ "modify_time": "2016-01-28 23:10:52",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/cbeuw/goquiet",
+ "star": 747,
+ "commits": 149,
+ "modify_time": "2019-06-04 12:32:24",
+ "last_release": "v1.2.2",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/aleenzz/cobalt_strike_wiki",
+ "star": 747,
+ "commits": 23,
+ "modify_time": "2019-08-04 07:16:35",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/googleinurl/scanner-inurlbr",
+ "star": 746,
+ "commits": 33,
+ "modify_time": "2017-01-19 01:22:34",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/oddcod3/phantom-evasion",
+ "star": 745,
+ "commits": 95,
+ "modify_time": "2018-12-08 21:53:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zerovm/zerovm",
+ "star": 744,
+ "commits": 748,
+ "modify_time": "2015-01-20 15:34:47",
+ "last_release": "1.0",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/moham3driahi/th3inspector",
+ "star": 744,
+ "commits": 39,
+ "modify_time": "2018-07-01 12:26:59",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/activecm/rita",
+ "star": 744,
+ "commits": 699,
+ "modify_time": "2019-12-03 18:39:18",
+ "last_release": "v3.1.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/neurobin/shc",
+ "star": 743,
+ "commits": 165,
+ "modify_time": "2019-07-01 16:37:08",
+ "last_release": "4.0.3",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/m4cs/babysploit",
+ "star": 743,
+ "commits": 207,
+ "modify_time": "2019-11-14 15:05:30",
+ "last_release": "1.1.19",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/jendrikseipp/vulture",
+ "star": 743,
+ "commits": 570,
+ "modify_time": "2019-11-30 17:17:17",
+ "last_release": "\n v1.2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/khast3x/h8mail",
+ "star": 742,
+ "commits": 215,
+ "modify_time": "2019-10-29 04:06:52",
+ "last_release": "2.4.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/trimstray/linux-hardening-checklist",
+ "star": 741,
+ "commits": 83,
+ "modify_time": "2019-12-02 21:30:56",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/kjcracks/yololib",
+ "star": 741,
+ "commits": 7,
+ "modify_time": "2015-06-14 01:17:17",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/gentilkiwi/wanakiwi",
+ "star": 741,
+ "commits": 18,
+ "modify_time": "2017-06-11 21:49:38",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/csmith-project/creduce",
+ "star": 741,
+ "commits": 2002,
+ "modify_time": "2019-12-09 09:36:52",
+ "last_release": "\n creduce-2.10.0\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/yrp604/rappel",
+ "star": 740,
+ "commits": 81,
+ "modify_time": "2019-11-04 09:19:41",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/talkingdata/owl",
+ "star": 740,
+ "commits": 203,
+ "modify_time": "2019-06-26 09:19:41",
+ "last_release": "v5.1.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/eladshamir/internal-monologue",
+ "star": 740,
+ "commits": 39,
+ "modify_time": "2018-10-11 12:12:46",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/ricterz/genpass",
+ "star": 739,
+ "commits": 102,
+ "modify_time": "2019-11-20 04:58:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/novatecconsulting/facerecognition-in-arkit",
+ "star": 739,
+ "commits": 2,
+ "modify_time": "2018-03-13 10:37:42",
+ "last_release": "",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/hausec/adape-script",
+ "star": 739,
+ "commits": 39,
+ "modify_time": "2019-07-14 21:43:37",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/uber-common/metta",
+ "star": 738,
+ "commits": 95,
+ "modify_time": "2018-06-20 00:28:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/toolswatch/vfeed",
+ "star": 738,
+ "commits": 79,
+ "modify_time": "2017-11-25 12:05:08",
+ "last_release": "\n v0.7.2.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bukosabino/ta",
+ "star": 738,
+ "commits": 392,
+ "modify_time": "2019-11-27 13:25:50",
+ "last_release": "\n 0.5.9\n ",
+ "lang": "Jupyter Notebook"
+ },
+ {
+ "link": "https://github.com/xyntax/1000php",
+ "star": 737,
+ "commits": 2,
+ "modify_time": "2016-07-26 21:03:31",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/rapid7/metasploit-payloads",
+ "star": 737,
+ "commits": 2552,
+ "modify_time": "2019-12-06 15:45:04",
+ "last_release": "\n v1.3.83\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/unamer/vmware_escape",
+ "star": 736,
+ "commits": 31,
+ "modify_time": "2019-06-06 09:10:06",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/devttys0/ida",
+ "star": 736,
+ "commits": 84,
+ "modify_time": "2019-06-06 22:14:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sandboxescaper/polarbearrepo",
+ "star": 735,
+ "commits": null,
+ "modify_time": "2019-05-24 21:21:42",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/google/shaderc",
+ "star": 735,
+ "commits": 736,
+ "modify_time": "2019-12-05 22:04:54",
+ "last_release": "\n v2019.0\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/dokku/dokku-letsencrypt",
+ "star": 735,
+ "commits": 150,
+ "modify_time": "2019-12-01 19:47:44",
+ "last_release": "0.9.1",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/averagesecurityguy/scripts",
+ "star": 735,
+ "commits": 368,
+ "modify_time": "2018-11-16 20:44:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/casbin/node-casbin",
+ "star": 734,
+ "commits": 363,
+ "modify_time": "2019-12-09 01:18:41",
+ "last_release": "v3.0.7",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/gcssloop/encrypt",
+ "star": 733,
+ "commits": 6,
+ "modify_time": "2018-04-10 07:22:39",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/rdesktop/rdesktop",
+ "star": 732,
+ "commits": 2009,
+ "modify_time": "2019-09-20 07:03:48",
+ "last_release": "v1.9.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/pagerduty/incident-response-docs",
+ "star": 732,
+ "commits": 100,
+ "modify_time": "2019-11-14 19:12:00",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/xl7dev/burpsuite",
+ "star": 731,
+ "commits": 64,
+ "modify_time": "2018-01-03 03:19:08",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/mr-un1k0d3r/dkmc",
+ "star": 731,
+ "commits": 52,
+ "modify_time": "2019-03-07 00:48:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/iaik/zombieload",
+ "star": 731,
+ "commits": 8,
+ "modify_time": "2019-11-12 17:48:12",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cldrn/nmap-nse-scripts",
+ "star": 731,
+ "commits": 194,
+ "modify_time": "2019-08-05 06:26:29",
+ "last_release": "",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/alex/letsencrypt-aws",
+ "star": 731,
+ "commits": 192,
+ "modify_time": "2018-04-04 11:46:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mandatoryprogrammer/xsshunter",
+ "star": 730,
+ "commits": 31,
+ "modify_time": "2019-10-01 06:18:32",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/ionescu007/lxss",
+ "star": 730,
+ "commits": 48,
+ "modify_time": "2017-03-09 14:52:32",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/pmem/pmdk",
+ "star": 729,
+ "commits": 8906,
+ "modify_time": "2019-12-09 13:23:00",
+ "last_release": "1.7",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/chaps-io/access-granted",
+ "star": 729,
+ "commits": 176,
+ "modify_time": "2018-09-11 17:50:04",
+ "last_release": "v1.3.1",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/ztgrace/changeme",
+ "star": 728,
+ "commits": 261,
+ "modify_time": "2019-06-01 13:32:56",
+ "last_release": "v1.2.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/the-robot/sqliv",
+ "star": 727,
+ "commits": 249,
+ "modify_time": "2018-08-14 11:28:45",
+ "last_release": "\n 3.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/l0ss/grouper",
+ "star": 727,
+ "commits": 128,
+ "modify_time": "2019-02-05 03:20:22",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/stealth/sshttp",
+ "star": 726,
+ "commits": 44,
+ "modify_time": "2019-11-08 12:50:40",
+ "last_release": "\n sshttp-splice-0-35s2\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/jedisct1/minisign",
+ "star": 726,
+ "commits": 146,
+ "modify_time": "2019-10-06 11:57:31",
+ "last_release": "0.8",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/anchore/anchore-engine",
+ "star": 726,
+ "commits": 1280,
+ "modify_time": "2019-12-06 22:10:46",
+ "last_release": "\n v0.5.2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rfunix/pompem",
+ "star": 725,
+ "commits": 141,
+ "modify_time": "2018-10-03 02:05:57",
+ "last_release": "v0.2.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/globaleaks/globaleaks",
+ "star": 725,
+ "commits": 13034,
+ "modify_time": "2019-12-08 16:27:22",
+ "last_release": "\n v3.11.36\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cirosantilli/x86-assembly-cheat",
+ "star": 725,
+ "commits": 160,
+ "modify_time": "2019-06-25 00:00:00",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/abhinavsingh/proxy.py",
+ "star": 725,
+ "commits": 223,
+ "modify_time": "2019-12-10 03:38:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/GouveaHeitor/nipe",
+ "star": 724,
+ "commits": 251,
+ "modify_time": "2019-12-02 03:19:19",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/isafeblue/trackray",
+ "star": 724,
+ "commits": 174,
+ "modify_time": "2019-09-13 02:34:18",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/anshumanbh/git-all-secrets",
+ "star": 724,
+ "commits": 86,
+ "modify_time": "2019-06-25 05:33:05",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/strace/strace",
+ "star": 723,
+ "commits": 7691,
+ "modify_time": "2019-12-03 23:53:51",
+ "last_release": "v5.4",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/mempodippy/vlany",
+ "star": 723,
+ "commits": 255,
+ "modify_time": "2019-04-08 06:34:23",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/shawndevans/smbmap",
+ "star": 722,
+ "commits": 92,
+ "modify_time": "2019-10-16 16:07:22",
+ "last_release": "1.1.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/keystone-engine/keypatch",
+ "star": 722,
+ "commits": 180,
+ "modify_time": "2018-12-11 18:08:08",
+ "last_release": "2.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/facebook/threatexchange",
+ "star": 722,
+ "commits": 497,
+ "modify_time": "2019-11-01 18:47:58",
+ "last_release": "\n v0.2.0\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/cloudflare/bpftools",
+ "star": 722,
+ "commits": 124,
+ "modify_time": "2019-09-23 11:23:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/w-digital-scanner/w12scan",
+ "star": 721,
+ "commits": 145,
+ "modify_time": "2019-12-09 03:21:29",
+ "last_release": "\n v0.2\n ",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/kohgylw/kiftd",
+ "star": 721,
+ "commits": 164,
+ "modify_time": "2019-10-27 01:52:47",
+ "last_release": "v1.0.26-release",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/diyan/pywinrm",
+ "star": 721,
+ "commits": 309,
+ "modify_time": "2019-11-04 18:03:10",
+ "last_release": "v0.4.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zyantific/idaskins",
+ "star": 720,
+ "commits": 124,
+ "modify_time": "2019-06-15 09:16:41",
+ "last_release": "v2.1.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ztane/python-levenshtein",
+ "star": 720,
+ "commits": 31,
+ "modify_time": "2019-02-19 21:33:31",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/skelsec/pypykatz",
+ "star": 719,
+ "commits": 161,
+ "modify_time": "2019-12-04 20:58:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/meyerd/n2n",
+ "star": 719,
+ "commits": 124,
+ "modify_time": "2019-05-28 17:45:31",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/c0ny1/vulstudy",
+ "star": 718,
+ "commits": 19,
+ "modify_time": "2018-11-14 13:12:06",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/melonproject/oyente",
+ "star": 717,
+ "commits": 799,
+ "modify_time": "2018-07-20 02:43:54",
+ "last_release": "0.2.7",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/voorivex/pentest-guide",
+ "star": 716,
+ "commits": 137,
+ "modify_time": "2019-12-04 07:13:58",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/madeye/sssniff",
+ "star": 716,
+ "commits": 18,
+ "modify_time": "2017-07-29 09:25:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/streaak/keyhacks",
+ "star": 715,
+ "commits": 105,
+ "modify_time": "2019-10-31 12:29:29",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/kristate/krackinfo",
+ "star": 715,
+ "commits": 441,
+ "modify_time": "2018-01-16 09:38:12",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/f-secure/see",
+ "star": 715,
+ "commits": 255,
+ "modify_time": "2019-12-02 10:38:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/col-e/recaf",
+ "star": 715,
+ "commits": 1018,
+ "modify_time": "2019-10-09 22:35:06",
+ "last_release": "1.15.8",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/j00ru/windows-syscalls",
+ "star": 714,
+ "commits": 6,
+ "modify_time": "2019-10-19 15:40:33",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/defuse/password-hashing",
+ "star": 714,
+ "commits": 175,
+ "modify_time": "2019-01-09 02:37:13",
+ "last_release": "\n test-tag\n ",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/d3vilbug/hackbar",
+ "star": 714,
+ "commits": 18,
+ "modify_time": "2018-09-21 15:12:56",
+ "last_release": "1.0",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/rhinosecuritylabs/security-research",
+ "star": 713,
+ "commits": 68,
+ "modify_time": "2019-08-08 20:28:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/idapython/src",
+ "star": 713,
+ "commits": 397,
+ "modify_time": "2019-12-09 09:10:26",
+ "last_release": "build-1.7.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/adamlaurie/rfidiot",
+ "star": 713,
+ "commits": 97,
+ "modify_time": "2019-07-08 10:17:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/p3nt4/powershdll",
+ "star": 712,
+ "commits": 65,
+ "modify_time": "2018-10-02 21:08:49",
+ "last_release": "0.3.4.5",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/openvisualcloud/svt-av1",
+ "star": 712,
+ "commits": 1530,
+ "modify_time": "2019-12-03 14:04:58",
+ "last_release": "v0.7.5",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/mozilla/node-client-sessions",
+ "star": 712,
+ "commits": 183,
+ "modify_time": "2017-04-21 21:30:33",
+ "last_release": "\n v0.8.0\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/gruntwork-io/cloud-nuke",
+ "star": 712,
+ "commits": 279,
+ "modify_time": "2019-12-09 19:12:40",
+ "last_release": "v0.1.13",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/aircrack-ng/rtl8812au",
+ "star": 712,
+ "commits": 978,
+ "modify_time": "2019-12-08 15:02:19",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/tandasat/hyperplatform",
+ "star": 711,
+ "commits": 154,
+ "modify_time": "2019-12-07 17:27:46",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/snifer/security-cheatsheets",
+ "star": 711,
+ "commits": 97,
+ "modify_time": "2018-11-12 02:28:28",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/nicehash/nheqminer",
+ "star": 711,
+ "commits": 154,
+ "modify_time": "2017-01-12 21:42:32",
+ "last_release": "0.5c",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/rover12421/shakaapktool",
+ "star": 710,
+ "commits": 315,
+ "modify_time": "2017-06-15 06:29:52",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/rapid7/hackazon",
+ "star": 709,
+ "commits": 460,
+ "modify_time": "2017-09-27 16:54:57",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/nuand/bladerf",
+ "star": 709,
+ "commits": 3207,
+ "modify_time": "2019-10-01 23:44:32",
+ "last_release": "2019.07",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/google/ssl_logger",
+ "star": 709,
+ "commits": 1,
+ "modify_time": "2017-06-29 15:36:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bit4woo/python_sec",
+ "star": 709,
+ "commits": 25,
+ "modify_time": "2019-08-06 09:21:53",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ly0n/awesome-robotic-tooling",
+ "star": 708,
+ "commits": 356,
+ "modify_time": "2019-12-09 14:34:16",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/linkedin/photon-ml",
+ "star": 708,
+ "commits": 974,
+ "modify_time": "2019-11-22 19:05:18",
+ "last_release": "",
+ "lang": "Scala"
+ },
+ {
+ "link": "https://github.com/sidkshatriya/dontbug",
+ "star": 708,
+ "commits": 202,
+ "modify_time": "2018-06-04 05:12:25",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/giacomolaw/keylogger",
+ "star": 708,
+ "commits": 157,
+ "modify_time": "2019-05-06 07:08:43",
+ "last_release": "2.7.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pomerium/pomerium",
+ "star": 707,
+ "commits": 390,
+ "modify_time": "2019-12-06 19:08:36",
+ "last_release": "v0.5.2",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/sevagas/macro_pack",
+ "star": 707,
+ "commits": 173,
+ "modify_time": "2019-09-08 16:47:46",
+ "last_release": "v1.7",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/juansacco/exploitpack",
+ "star": 707,
+ "commits": null,
+ "modify_time": "2019-01-02 21:05:24",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/crits/crits",
+ "star": 707,
+ "commits": 2324,
+ "modify_time": "2019-07-29 21:50:09",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/ssl/ezxss",
+ "star": 706,
+ "commits": 175,
+ "modify_time": "2019-11-15 08:43:13",
+ "last_release": "3.1",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/gimini/powermemory",
+ "star": 705,
+ "commits": 74,
+ "modify_time": "2017-03-17 13:30:45",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/androbugs/androbugs_framework",
+ "star": 705,
+ "commits": 1,
+ "modify_time": "2015-11-11 20:46:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hackplayers/hackthebox-writeups",
+ "star": 704,
+ "commits": 157,
+ "modify_time": "2019-12-07 00:12:09",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/samratashok/kautilya",
+ "star": 704,
+ "commits": 52,
+ "modify_time": "2017-08-04 04:00:38",
+ "last_release": "v0.5.5",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/mushorg/conpot",
+ "star": 704,
+ "commits": 1204,
+ "modify_time": "2019-12-03 09:57:54",
+ "last_release": "Release_0.6.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/anishathalye/obfuscated-gradients",
+ "star": 703,
+ "commits": 31,
+ "modify_time": "2018-11-04 23:15:37",
+ "last_release": "",
+ "lang": "Jupyter Notebook"
+ },
+ {
+ "link": "https://github.com/darthton/xenos",
+ "star": 702,
+ "commits": 70,
+ "modify_time": "2019-08-03 11:37:57",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/malcolmrobb/dump1090",
+ "star": 701,
+ "commits": 386,
+ "modify_time": "2014-10-31 13:01:59",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cmu-sei/pharos",
+ "star": 701,
+ "commits": 86,
+ "modify_time": "2019-11-04 19:56:03",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/yichengchen/shadowsocksx-r",
+ "star": 700,
+ "commits": 1,
+ "modify_time": "2017-07-20 01:52:39",
+ "last_release": "ssr_1.38_2",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/multipoolminer/multipoolminer",
+ "star": 700,
+ "commits": 3074,
+ "modify_time": "2019-11-27 13:10:26",
+ "last_release": "v3.5.3.1",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/mganss/htmlsanitizer",
+ "star": 699,
+ "commits": 327,
+ "modify_time": "2019-12-04 10:53:14",
+ "last_release": "v5.0.274",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/intrigueio/intrigue-core",
+ "star": 699,
+ "commits": 2979,
+ "modify_time": "2019-12-01 23:09:09",
+ "last_release": "v0.5",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/gunnery/gunnery",
+ "star": 699,
+ "commits": 294,
+ "modify_time": "2015-10-29 13:14:30",
+ "last_release": "v0.2-alpha",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bugscanteam/dnslog",
+ "star": 699,
+ "commits": 13,
+ "modify_time": "2018-11-14 09:07:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/scanmem/scanmem",
+ "star": 698,
+ "commits": 1079,
+ "modify_time": "2019-11-20 01:16:50",
+ "last_release": "v0.17",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/mjg59/python-broadlink",
+ "star": 698,
+ "commits": 134,
+ "modify_time": "2019-10-09 13:44:40",
+ "last_release": "0.12.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hfiref0x/tdl",
+ "star": 697,
+ "commits": 12,
+ "modify_time": "2019-04-19 18:22:26",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ajinabraham/cmsscan",
+ "star": 697,
+ "commits": 35,
+ "modify_time": "2019-08-01 19:17:38",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/harleyqu1nn/aggressorscripts",
+ "star": 696,
+ "commits": 177,
+ "modify_time": "2019-10-08 21:47:08",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/uknowsec/active-directory-pentest-notes",
+ "star": 695,
+ "commits": 31,
+ "modify_time": "2019-09-12 02:04:58",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/stealth/opmsg",
+ "star": 695,
+ "commits": 156,
+ "modify_time": "2019-07-22 08:07:55",
+ "last_release": "\n rel-1.78s\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/sensepost/det",
+ "star": 695,
+ "commits": 31,
+ "modify_time": "2017-11-03 08:50:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rednaga/apkid",
+ "star": 693,
+ "commits": 244,
+ "modify_time": "2019-11-01 19:43:07",
+ "last_release": "v2.0.3",
+ "lang": "YARA"
+ },
+ {
+ "link": "https://github.com/netflix/security-bulletins",
+ "star": 693,
+ "commits": 45,
+ "modify_time": "2019-09-09 21:58:23",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/dliv3/venom",
+ "star": 693,
+ "commits": 135,
+ "modify_time": "2019-10-14 15:45:40",
+ "last_release": "v1.1.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/phatworx/devise_security_extension",
+ "star": 692,
+ "commits": 374,
+ "modify_time": "2016-08-30 15:52:23",
+ "last_release": "\n v0.10.0\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/owasp/asvs",
+ "star": 692,
+ "commits": 884,
+ "modify_time": "2019-12-08 20:27:50",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/shadow/shadow",
+ "star": 691,
+ "commits": 2054,
+ "modify_time": "2019-11-26 22:02:47",
+ "last_release": "v1.13.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/google/certificate-transparency",
+ "star": 691,
+ "commits": 2493,
+ "modify_time": "2019-07-12 15:26:03",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/bareflank/hypervisor",
+ "star": 691,
+ "commits": 1308,
+ "modify_time": "2019-10-05 13:21:15",
+ "last_release": "rc2.0.4",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/zyfworks/steam-key",
+ "star": 690,
+ "commits": 89,
+ "modify_time": "2019-04-10 18:11:23",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/vmt/udis86",
+ "star": 690,
+ "commits": 293,
+ "modify_time": "2014-12-25 12:00:50",
+ "last_release": "\n v1.7.2\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/powershell/openssh-portable",
+ "star": 690,
+ "commits": 10336,
+ "modify_time": "2019-12-09 23:12:46",
+ "last_release": "\n v8.0.0.0\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/mr-un1k0d3r/powerlessshell",
+ "star": 690,
+ "commits": 99,
+ "modify_time": "2019-05-13 21:50:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wrbug/developerhelper",
+ "star": 689,
+ "commits": 93,
+ "modify_time": "2019-11-14 03:38:41",
+ "last_release": "v1.0.4",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/mobier/shadowsocksr-speed",
+ "star": 688,
+ "commits": 41,
+ "modify_time": "2019-06-30 02:34:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/juuso/bozocrack",
+ "star": 688,
+ "commits": 8,
+ "modify_time": "2013-04-17 20:52:44",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/grayddq/gscan",
+ "star": 688,
+ "commits": 181,
+ "modify_time": "2019-11-29 13:03:49",
+ "last_release": "v0.1.9",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cobbr/sharpsploit",
+ "star": 688,
+ "commits": 120,
+ "modify_time": "2019-10-17 21:30:56",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/peergos/peergos",
+ "star": 687,
+ "commits": 3026,
+ "modify_time": "2019-12-09 17:21:32",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/kiorky/spynner",
+ "star": 687,
+ "commits": 255,
+ "modify_time": "2019-04-20 15:42:14",
+ "last_release": "2.22",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/1n3/privesc",
+ "star": 687,
+ "commits": 11,
+ "modify_time": "2017-12-13 20:08:57",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/1n3/brutex",
+ "star": 687,
+ "commits": 86,
+ "modify_time": "2019-04-16 15:50:43",
+ "last_release": "v1.9",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/moby/vpnkit",
+ "star": 686,
+ "commits": 1963,
+ "modify_time": "2019-11-18 17:05:31",
+ "last_release": "v0.3.0",
+ "lang": "OCaml"
+ },
+ {
+ "link": "https://github.com/merrychap/shellen",
+ "star": 686,
+ "commits": 62,
+ "modify_time": "2019-02-27 16:13:49",
+ "last_release": "v0.2.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/leezj9671/pentest_interview",
+ "star": 686,
+ "commits": 14,
+ "modify_time": "2019-07-01 11:50:39",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/saelo/pwn2own2018",
+ "star": 685,
+ "commits": 1,
+ "modify_time": "2018-11-07 04:39:27",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/iceyhexman/onlinetools",
+ "star": 685,
+ "commits": 79,
+ "modify_time": "2019-11-06 06:43:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zhengmin1989/myarticles",
+ "star": 683,
+ "commits": 21,
+ "modify_time": "2018-12-26 10:21:22",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/antirez/hping",
+ "star": 683,
+ "commits": 13,
+ "modify_time": "2014-12-26 14:31:24",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/animir/node-rate-limiter-flexible",
+ "star": 683,
+ "commits": 359,
+ "modify_time": "2019-10-09 03:03:45",
+ "last_release": "v1.1.2",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/unixpickle/jamwifi",
+ "star": 681,
+ "commits": 19,
+ "modify_time": "2019-01-30 00:46:39",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/rurik/noriben",
+ "star": 681,
+ "commits": 140,
+ "modify_time": "2019-11-22 16:16:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/paranoidninja/carboncopy",
+ "star": 680,
+ "commits": 24,
+ "modify_time": "2019-06-04 17:57:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dmarmor/epichrome",
+ "star": 680,
+ "commits": 203,
+ "modify_time": "2019-03-12 16:46:31",
+ "last_release": "v2.2.4",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/andrewjkerr/security-cheatsheets",
+ "star": 680,
+ "commits": 58,
+ "modify_time": "2019-10-21 15:12:58",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/yenom/BitcoinKit",
+ "star": 679,
+ "commits": 759,
+ "modify_time": "2019-09-29 12:02:07",
+ "last_release": "v1.1.0",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/Arvanaghi/SessionGopher",
+ "star": 679,
+ "commits": 17,
+ "modify_time": "2018-11-29 16:25:43",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/ron190/jsql-injection",
+ "star": 678,
+ "commits": 242,
+ "modify_time": "2019-12-09 20:24:39",
+ "last_release": "v0.81",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/pquerna/otp",
+ "star": 678,
+ "commits": 80,
+ "modify_time": "2019-10-09 05:55:18",
+ "last_release": "v1.2.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/mygod/vpnhotspot",
+ "star": 678,
+ "commits": 888,
+ "modify_time": "2019-12-09 14:26:04",
+ "last_release": "v2.6.3",
+ "lang": "Kotlin"
+ },
+ {
+ "link": "https://github.com/kkevsterrr/backdoorme",
+ "star": 678,
+ "commits": 308,
+ "modify_time": "2017-12-20 05:18:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kevthehermit/pastehunter",
+ "star": 678,
+ "commits": 229,
+ "modify_time": "2019-12-09 00:38:17",
+ "last_release": "v1.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ptresearch/attackdetection",
+ "star": 677,
+ "commits": 143,
+ "modify_time": "2019-11-12 21:17:36",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/google/gofuzz",
+ "star": 677,
+ "commits": 35,
+ "modify_time": "2019-10-28 17:48:53",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/adon90/pentest_compilation",
+ "star": 677,
+ "commits": 216,
+ "modify_time": "2019-11-28 15:09:37",
+ "last_release": "",
+ "lang": "XSLT"
+ },
+ {
+ "link": "https://github.com/zerbea/hcxdumptool",
+ "star": 676,
+ "commits": 542,
+ "modify_time": "2019-12-01 15:49:58",
+ "last_release": "5.2.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/outflanknl/evilclippy",
+ "star": 676,
+ "commits": 44,
+ "modify_time": "2019-07-29 12:22:45",
+ "last_release": "v1.2",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/google/boringssl",
+ "star": 675,
+ "commits": 5992,
+ "modify_time": "2019-12-06 16:40:58",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/PAGalaxyLab/YAHFA",
+ "star": 674,
+ "commits": 109,
+ "modify_time": "2019-05-07 07:54:25",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/xl7dev/webshell",
+ "star": 674,
+ "commits": 25,
+ "modify_time": "2017-04-11 10:45:56",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/ufologist/onekey-decompile-apk",
+ "star": 674,
+ "commits": 29,
+ "modify_time": "2017-02-13 08:42:58",
+ "last_release": "",
+ "lang": "Batchfile"
+ },
+ {
+ "link": "https://github.com/endgameinc/rta",
+ "star": 674,
+ "commits": 15,
+ "modify_time": "2018-08-17 18:25:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/billy-ellis/exploit-challenges",
+ "star": 674,
+ "commits": 41,
+ "modify_time": "2018-10-05 08:43:03",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/trycatchhcf/dumpsterfire",
+ "star": 673,
+ "commits": 157,
+ "modify_time": "2017-12-29 17:20:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/offensive-security/kali-arm-build-scripts",
+ "star": 673,
+ "commits": 897,
+ "modify_time": "2019-04-29 10:36:46",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ircmaxell/php-compiler",
+ "star": 673,
+ "commits": 157,
+ "modify_time": "2019-05-05 07:19:29",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/honeytrap/honeytrap",
+ "star": 673,
+ "commits": 327,
+ "modify_time": "2019-05-28 21:20:39",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/v3n0m-scanner/v3n0m-scanner",
+ "star": 672,
+ "commits": 318,
+ "modify_time": "2019-08-14 22:32:55",
+ "last_release": "Release-425",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/obfuscar/obfuscar",
+ "star": 672,
+ "commits": 346,
+ "modify_time": "2019-11-19 21:34:01",
+ "last_release": "2.2.23",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/mozilla/ssh_scan",
+ "star": 672,
+ "commits": 729,
+ "modify_time": "2019-10-16 20:55:34",
+ "last_release": "0.0.42",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/blackorbird/apt_report",
+ "star": 672,
+ "commits": 290,
+ "modify_time": "2019-12-05 07:50:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/theori-io/pwnjs",
+ "star": 671,
+ "commits": 17,
+ "modify_time": "2019-02-12 19:14:35",
+ "last_release": "1.1.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/bloodzer0/ossa",
+ "star": 671,
+ "commits": 124,
+ "modify_time": "2019-07-09 07:34:49",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/praetorian-code/Hob0Rules",
+ "star": 670,
+ "commits": 13,
+ "modify_time": "2016-04-11 19:36:31",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/uxmal/reko",
+ "star": 670,
+ "commits": 7656,
+ "modify_time": "2019-12-07 16:54:31",
+ "last_release": "version-0.9.0.0",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/robertdavidgraham/heartleech",
+ "star": 670,
+ "commits": 116,
+ "modify_time": "2014-06-07 00:57:07",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/n1nj4sec/memorpy",
+ "star": 670,
+ "commits": 63,
+ "modify_time": "2017-05-23 17:17:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wslutilities/wslu",
+ "star": 669,
+ "commits": 792,
+ "modify_time": "2019-12-01 11:34:51",
+ "last_release": "v2.3.2",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/leggedrobotics/darknet_ros",
+ "star": 668,
+ "commits": 262,
+ "modify_time": "2019-12-04 13:03:56",
+ "last_release": "\n 1.1.4\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/rhinosecuritylabs/cloudgoat",
+ "star": 668,
+ "commits": 104,
+ "modify_time": "2019-11-18 16:17:09",
+ "last_release": "",
+ "lang": "HCL"
+ },
+ {
+ "link": "https://github.com/zrax/pycdc",
+ "star": 667,
+ "commits": 288,
+ "modify_time": "2019-02-09 00:06:55",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/lijiejie/htpwdscan",
+ "star": 667,
+ "commits": 18,
+ "modify_time": "2018-04-02 12:23:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kbandla/dpkt",
+ "star": 667,
+ "commits": 504,
+ "modify_time": "2019-11-30 22:20:34",
+ "last_release": "v1.9.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ghostpack/rubeus",
+ "star": 667,
+ "commits": 79,
+ "modify_time": "2019-09-05 19:34:38",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/dsasmblr/hacking-online-games",
+ "star": 667,
+ "commits": 41,
+ "modify_time": "2018-11-10 20:23:06",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/doridori/android-security-reference",
+ "star": 667,
+ "commits": 1005,
+ "modify_time": "2019-11-08 12:59:30",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/anouarbensaad/vulnx",
+ "star": 667,
+ "commits": 297,
+ "modify_time": "2019-11-24 23:16:45",
+ "last_release": "v1.9",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/m4ll0k/wpseku",
+ "star": 666,
+ "commits": 35,
+ "modify_time": "2019-04-23 22:09:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/robertdavidgraham/rdpscan",
+ "star": 665,
+ "commits": 86,
+ "modify_time": "2019-06-08 21:23:39",
+ "last_release": "v0.0.4",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jhaddix/domain",
+ "star": 665,
+ "commits": 55,
+ "modify_time": "2018-03-15 19:45:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/honeynet/apkinspector",
+ "star": 665,
+ "commits": 8,
+ "modify_time": "2013-02-24 23:10:16",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/google/afl",
+ "star": 665,
+ "commits": 30,
+ "modify_time": "2019-11-18 16:19:16",
+ "last_release": "v2.56b",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jazzband/django-axes",
+ "star": 664,
+ "commits": 953,
+ "modify_time": "2019-12-03 19:27:08",
+ "last_release": "5.0.20",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gwen001/pentest-tools",
+ "star": 664,
+ "commits": 125,
+ "modify_time": "2019-12-05 12:13:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/droope/droopescan",
+ "star": 664,
+ "commits": 990,
+ "modify_time": "2019-06-14 21:19:37",
+ "last_release": "\n 1.41.3\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wwillv/godofhacker",
+ "star": 663,
+ "commits": 8,
+ "modify_time": "2019-01-12 12:47:08",
+ "last_release": "1.0.1.1",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/shadowsocksr-backup/shadowsocksx-ng",
+ "star": 663,
+ "commits": 309,
+ "modify_time": "2017-07-19 14:02:06",
+ "last_release": "1.4.2-R8-subscribe-alpha-3",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/gossip-sjtu/armariris",
+ "star": 663,
+ "commits": 26,
+ "modify_time": "2019-06-03 05:32:31",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/google/conscrypt",
+ "star": 663,
+ "commits": 3924,
+ "modify_time": "2019-11-14 12:33:53",
+ "last_release": "\n 2.3.0\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/aploium/shootback",
+ "star": 663,
+ "commits": 80,
+ "modify_time": "2019-07-24 06:06:32",
+ "last_release": "\n legacy-v1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/0x09al/raven",
+ "star": 663,
+ "commits": 32,
+ "modify_time": "2018-10-29 14:55:45",
+ "last_release": "v0.3-Linux",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/samdenty/Wi-PWN",
+ "star": 662,
+ "commits": 274,
+ "modify_time": "2019-03-31 15:28:38",
+ "last_release": "9.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/sadeghhayeri/greentunnel",
+ "star": 662,
+ "commits": 174,
+ "modify_time": "2019-12-07 15:29:34",
+ "last_release": "v1.6.11",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/golismero/golismero",
+ "star": 662,
+ "commits": 71,
+ "modify_time": "2019-06-27 08:56:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ysrc/gourdscanv2",
+ "star": 661,
+ "commits": 126,
+ "modify_time": "2017-11-01 06:20:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/igrigorik/em-proxy",
+ "star": 660,
+ "commits": 118,
+ "modify_time": "2017-05-29 18:35:48",
+ "last_release": "\n v0.1.9\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/deepzec/bad-pdf",
+ "star": 660,
+ "commits": 59,
+ "modify_time": "2018-11-21 07:57:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/chybeta/code-audit-challenges",
+ "star": 660,
+ "commits": 159,
+ "modify_time": "2018-11-17 07:35:03",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/chuckerteam/chucker",
+ "star": 660,
+ "commits": 359,
+ "modify_time": "2019-11-04 17:33:33",
+ "last_release": "3.0.1",
+ "lang": "Kotlin"
+ },
+ {
+ "link": "https://github.com/redhuntlabs/awesome-asset-discovery",
+ "star": 659,
+ "commits": 38,
+ "modify_time": "2019-11-18 10:16:54",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/galkan/crowbar",
+ "star": 659,
+ "commits": 79,
+ "modify_time": "2017-08-29 12:34:15",
+ "last_release": "v.3.4",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/travisfsmith/sweetsecurity",
+ "star": 658,
+ "commits": 99,
+ "modify_time": "2017-07-26 04:28:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rfxn/linux-malware-detect",
+ "star": 658,
+ "commits": 360,
+ "modify_time": "2019-04-15 16:09:04",
+ "last_release": "1.6.4",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/igogo-x86/hexrayspytools",
+ "star": 658,
+ "commits": 231,
+ "modify_time": "2019-12-03 20:52:33",
+ "last_release": "\n ida_7_2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bettercrypto/applied-crypto-hardening",
+ "star": 658,
+ "commits": 1585,
+ "modify_time": "2019-06-26 07:17:41",
+ "last_release": "",
+ "lang": "TeX"
+ },
+ {
+ "link": "https://github.com/tib3rius/autorecon",
+ "star": 657,
+ "commits": 71,
+ "modify_time": "2019-10-27 00:07:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jondonas/linux-exploit-suggester-2",
+ "star": 657,
+ "commits": 16,
+ "modify_time": "2019-07-16 17:52:44",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/endgameinc/xori",
+ "star": 657,
+ "commits": 55,
+ "modify_time": "2018-10-05 23:57:53",
+ "last_release": "",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/the-akira/Computer-Science-Resources",
+ "star": 656,
+ "commits": 290,
+ "modify_time": "2019-12-09 21:33:09",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/vulnerscom/burp-vulners-scanner",
+ "star": 656,
+ "commits": 15,
+ "modify_time": "2019-03-18 14:28:08",
+ "last_release": "1.2",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/quentinhardy/odat",
+ "star": 656,
+ "commits": 246,
+ "modify_time": "2019-12-09 22:16:46",
+ "last_release": "4.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/SuperCowPowers/data_hacking",
+ "star": 655,
+ "commits": 155,
+ "modify_time": "2019-03-05 21:56:37",
+ "last_release": "",
+ "lang": "Jupyter Notebook"
+ },
+ {
+ "link": "https://github.com/yawning/obfs4",
+ "star": 655,
+ "commits": 180,
+ "modify_time": "2019-06-21 00:23:47",
+ "last_release": "\n obfs4proxy-0.0.11\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/moham3driahi/xattacker",
+ "star": 655,
+ "commits": 89,
+ "modify_time": "2019-06-23 22:29:58",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/rabbitmask/weblogicscan",
+ "star": 654,
+ "commits": 103,
+ "modify_time": "2019-06-27 08:59:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hisxo/gitgraber",
+ "star": 654,
+ "commits": 51,
+ "modify_time": "2019-10-02 19:47:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/diego-treitos/linux-smart-enumeration",
+ "star": 654,
+ "commits": 77,
+ "modify_time": "2019-11-24 00:06:39",
+ "last_release": "\n 1.11\n ",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/wifidog/wifidog-gateway",
+ "star": 653,
+ "commits": 932,
+ "modify_time": "2019-04-16 13:50:51",
+ "last_release": "1.3.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/praetorian-code/pentestly",
+ "star": 653,
+ "commits": 1798,
+ "modify_time": "2016-02-22 14:00:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fail0verflow/shofel2",
+ "star": 653,
+ "commits": 13,
+ "modify_time": "2018-05-18 21:29:05",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/dineshshetty/android-insecurebankv2",
+ "star": 653,
+ "commits": 82,
+ "modify_time": "2019-11-21 15:29:07",
+ "last_release": "2.3.1",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/rentzsch/mach_inject",
+ "star": 652,
+ "commits": 78,
+ "modify_time": "2016-11-08 17:21:39",
+ "last_release": "\n semver-1.3.0\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/palantir/windows-event-forwarding",
+ "star": 651,
+ "commits": 53,
+ "modify_time": "2019-02-27 01:24:31",
+ "last_release": "",
+ "lang": "Roff"
+ },
+ {
+ "link": "https://github.com/knownsec/rd_checklist",
+ "star": 651,
+ "commits": 29,
+ "modify_time": "2018-09-10 04:28:35",
+ "last_release": "v3.1.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/shack2/snetcracker",
+ "star": 650,
+ "commits": 17,
+ "modify_time": "2019-08-01 05:56:13",
+ "last_release": "1.0.20190715",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/nathancastle/bootshellcredentialprovider",
+ "star": 650,
+ "commits": 26,
+ "modify_time": "2018-05-10 20:04:26",
+ "last_release": "v0.1.2-alpha",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/toutyrater/v2ray-guide",
+ "star": 649,
+ "commits": 518,
+ "modify_time": "2019-11-04 13:58:16",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/l3m0n/bypass_disable_functions_shell",
+ "star": 649,
+ "commits": 24,
+ "modify_time": "2019-06-18 03:38:43",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/eugnis/spectre-attack",
+ "star": 649,
+ "commits": 29,
+ "modify_time": "2018-01-10 01:14:43",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/eset/malware-ioc",
+ "star": 649,
+ "commits": 99,
+ "modify_time": "2019-11-26 15:54:34",
+ "last_release": "",
+ "lang": "YARA"
+ },
+ {
+ "link": "https://github.com/isecpartners/introspy-ios",
+ "star": 648,
+ "commits": 292,
+ "modify_time": "2016-10-26 19:03:15",
+ "last_release": "ios-tracer-v0.4",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/SimplySecurity/SimplyEmail",
+ "star": 647,
+ "commits": 617,
+ "modify_time": "2018-08-31 14:23:38",
+ "last_release": "Version-1.4.10",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/chenxiancai/stcobfuscator",
+ "star": 647,
+ "commits": 69,
+ "modify_time": "2019-03-25 04:02:43",
+ "last_release": "1.3.0",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/facebookarchive/proguard",
+ "star": 646,
+ "commits": 36,
+ "modify_time": "2017-04-23 22:54:33",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/hannob/bashcheck",
+ "star": 645,
+ "commits": 41,
+ "modify_time": "2014-10-13 08:48:53",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/faizann24/wifi-bruteforcer-fsecurify",
+ "star": 645,
+ "commits": 26,
+ "modify_time": "2018-10-20 18:29:35",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/eliboa/tegrarcmgui",
+ "star": 644,
+ "commits": 81,
+ "modify_time": "2019-07-25 21:41:40",
+ "last_release": "2.6",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/draios/sysdig-inspect",
+ "star": 644,
+ "commits": 670,
+ "modify_time": "2019-07-26 21:52:40",
+ "last_release": "v0.4.2",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/gquere/pwn_jenkins",
+ "star": 643,
+ "commits": 31,
+ "modify_time": "2019-09-16 09:59:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/coolstar/electra",
+ "star": 643,
+ "commits": 262,
+ "modify_time": "2018-02-13 02:27:48",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ThingPulse/esp8266-weather-station",
+ "star": 642,
+ "commits": 254,
+ "modify_time": "2019-11-19 23:09:57",
+ "last_release": "v1.6.6",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/paulsec/twittor",
+ "star": 642,
+ "commits": 5,
+ "modify_time": "2015-09-09 08:32:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mattiasgeniar/php-exploit-scripts",
+ "star": 642,
+ "commits": 83,
+ "modify_time": "2019-07-05 13:20:21",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/aquasecurity/microscanner",
+ "star": 642,
+ "commits": 62,
+ "modify_time": "2019-01-31 18:36:09",
+ "last_release": "",
+ "lang": "Dockerfile"
+ },
+ {
+ "link": "https://github.com/pyupio/safety",
+ "star": 641,
+ "commits": 248,
+ "modify_time": "2019-07-04 18:07:01",
+ "last_release": "\n 1.8.5\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/harmj0y/cheatsheets",
+ "star": 641,
+ "commits": 9,
+ "modify_time": "2017-10-16 04:48:22",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ga0/netgraph",
+ "star": 641,
+ "commits": 63,
+ "modify_time": "2018-08-06 10:00:23",
+ "last_release": "1.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/kitten/setup-simple-ipsec-l2tp-vpn",
+ "star": 640,
+ "commits": 68,
+ "modify_time": "2017-12-09 17:34:43",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/stevemk14ebr/polyhook",
+ "star": 640,
+ "commits": 153,
+ "modify_time": "2019-09-22 22:49:36",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ganyao114/sandhook",
+ "star": 640,
+ "commits": 473,
+ "modify_time": "2019-12-09 09:19:06",
+ "last_release": "3.4.6",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/ullaakut/gorsair",
+ "star": 639,
+ "commits": 23,
+ "modify_time": "2019-12-09 08:26:30",
+ "last_release": "1.1.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/thewhiteh4t/seeker",
+ "star": 639,
+ "commits": 174,
+ "modify_time": "2019-12-04 16:12:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lmco/laikaboss",
+ "star": 639,
+ "commits": 115,
+ "modify_time": "2018-09-11 15:23:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/klen/pylama",
+ "star": 639,
+ "commits": 571,
+ "modify_time": "2019-04-10 18:20:19",
+ "last_release": "\n 7.7.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kernelslacker/trinity",
+ "star": 639,
+ "commits": 5155,
+ "modify_time": "2019-11-19 07:00:48",
+ "last_release": "\n v1.9\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cryptogenic/exploit-writeups",
+ "star": 639,
+ "commits": 35,
+ "modify_time": "2019-04-04 07:18:50",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/bl4de/security_whitepapers",
+ "star": 638,
+ "commits": null,
+ "modify_time": "2019-01-22 00:44:52",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/floodsung/LearningToCompare_FSL",
+ "star": 637,
+ "commits": 8,
+ "modify_time": "2018-08-05 09:04:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/smgorelik/windows-rce-exploits",
+ "star": 637,
+ "commits": 27,
+ "modify_time": "2019-07-29 23:28:14",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/parrt/lolviz",
+ "star": 637,
+ "commits": 167,
+ "modify_time": "2019-08-10 19:42:16",
+ "last_release": "\n 1.4.4\n ",
+ "lang": "Jupyter Notebook"
+ },
+ {
+ "link": "https://github.com/markets/invisible_captcha",
+ "star": 637,
+ "commits": 210,
+ "modify_time": "2019-11-16 13:47:00",
+ "last_release": "\n v1.0.0\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/duoergun0729/1book",
+ "star": 637,
+ "commits": 78,
+ "modify_time": "2018-05-20 11:32:17",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/qihoo360/mysql-sniffer",
+ "star": 636,
+ "commits": 60,
+ "modify_time": "2018-05-16 06:47:19",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hlldz/invoke-phant0m",
+ "star": 636,
+ "commits": 5,
+ "modify_time": "2017-05-22 06:47:56",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/alcuadrado/hieroglyphy",
+ "star": 636,
+ "commits": 21,
+ "modify_time": "2018-09-27 21:21:59",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/apple/swift-lldb",
+ "star": 635,
+ "commits": 31524,
+ "modify_time": "2019-10-25 22:46:59",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/webdigi/aws-vpn-server-setup",
+ "star": 635,
+ "commits": 58,
+ "modify_time": "2019-11-26 20:10:47",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/phynet/ios-url-schemes",
+ "star": 635,
+ "commits": 29,
+ "modify_time": "2018-08-10 17:22:52",
+ "last_release": "",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/nodejs/node-addon-api",
+ "star": 635,
+ "commits": 299,
+ "modify_time": "2019-12-05 23:12:09",
+ "last_release": "2.0.0",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/mschwager/dhcpwn",
+ "star": 635,
+ "commits": 29,
+ "modify_time": "2018-06-04 21:58:26",
+ "last_release": "\n 1.1.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/igio90/dwarf",
+ "star": 635,
+ "commits": 987,
+ "modify_time": "2019-11-30 15:02:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dirkjanm/privexchange",
+ "star": 635,
+ "commits": 4,
+ "modify_time": "2019-02-11 20:04:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/emposha/php-shell-detector",
+ "star": 634,
+ "commits": 152,
+ "modify_time": "2015-10-05 17:38:37",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/travisgoodspeed/md380tools",
+ "star": 633,
+ "commits": 2414,
+ "modify_time": "2019-06-13 15:14:51",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/binarydefense/artillery",
+ "star": 633,
+ "commits": 252,
+ "modify_time": "2019-06-17 14:23:38",
+ "last_release": "\n 1.5.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/webbreacher/offensiveinterview",
+ "star": 632,
+ "commits": 49,
+ "modify_time": "2019-03-06 12:58:26",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/shadowsocks/shadowsocks-chromeapp",
+ "star": 631,
+ "commits": 57,
+ "modify_time": "2016-02-23 16:51:09",
+ "last_release": "",
+ "lang": "CoffeeScript"
+ },
+ {
+ "link": "https://github.com/mehulj94/braindamage",
+ "star": 631,
+ "commits": 51,
+ "modify_time": "2019-02-01 06:52:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zmap/zgrab",
+ "star": 630,
+ "commits": 802,
+ "modify_time": "2019-07-23 20:27:03",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/g0tmi1k/msfpc",
+ "star": 629,
+ "commits": 33,
+ "modify_time": "2019-04-13 06:54:38",
+ "last_release": "v1.4.5",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/client9/libinjection",
+ "star": 629,
+ "commits": 1931,
+ "modify_time": "2018-03-12 05:34:45",
+ "last_release": "\n v3.10.0\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ankane/secure_rails",
+ "star": 629,
+ "commits": 48,
+ "modify_time": "2019-07-22 23:18:13",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/3gstudent/pentest-and-development-tips",
+ "star": 629,
+ "commits": 190,
+ "modify_time": "2019-08-15 03:36:30",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/olafhartong/sysmon-modular",
+ "star": 628,
+ "commits": 261,
+ "modify_time": "2019-12-09 19:09:43",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/codilime/veles",
+ "star": 628,
+ "commits": 637,
+ "modify_time": "2018-05-18 10:31:00",
+ "last_release": "\n 2018.05.0\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/yeyintminthuhtut/Awesome-Advanced-Windows-Exploitation-References",
+ "star": 627,
+ "commits": 15,
+ "modify_time": "2019-05-08 02:36:16",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/nfc-tools/mfoc",
+ "star": 626,
+ "commits": 114,
+ "modify_time": "2018-07-24 04:43:55",
+ "last_release": "\n mfoc-0.10.7\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jeanphorn/wordlist",
+ "star": 626,
+ "commits": 4,
+ "modify_time": "2016-04-02 07:07:00",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/shadowsocksr-backup/shadowsocksr-libev",
+ "star": 625,
+ "commits": 1534,
+ "modify_time": "2017-08-03 08:31:44",
+ "last_release": "\n 2.4.1\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ohpe/juicy-potato",
+ "star": 625,
+ "commits": 51,
+ "modify_time": "2019-01-14 13:03:08",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/chokepoint/azazel",
+ "star": 625,
+ "commits": 14,
+ "modify_time": "2017-04-17 15:21:14",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/alichtman/stronghold",
+ "star": 625,
+ "commits": 144,
+ "modify_time": "2019-10-06 19:35:48",
+ "last_release": "v1.5",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/n0wa11/gfw_whitelist",
+ "star": 624,
+ "commits": 35,
+ "modify_time": "2015-07-16 16:23:54",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/arkadiyt/bounty-targets-data",
+ "star": 624,
+ "commits": 2819,
+ "modify_time": "2019-12-09 15:32:50",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/tgraf/bmon",
+ "star": 623,
+ "commits": 149,
+ "modify_time": "2017-10-02 22:00:07",
+ "last_release": "v4.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/gdabah/distorm",
+ "star": 623,
+ "commits": 200,
+ "modify_time": "2019-09-18 20:03:52",
+ "last_release": "v3.4.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/virt-manager/virt-manager",
+ "star": 622,
+ "commits": 6996,
+ "modify_time": "2019-12-03 11:35:25",
+ "last_release": "\n v2.2.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sigploiter/sigploit",
+ "star": 622,
+ "commits": 786,
+ "modify_time": "2019-06-28 00:04:36",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/hongrisec/php-audit-labs",
+ "star": 622,
+ "commits": 33,
+ "modify_time": "2019-09-17 08:24:14",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/turbo/openftp4",
+ "star": 621,
+ "commits": 18,
+ "modify_time": "2018-03-20 08:38:04",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/3xp10it/xwaf",
+ "star": 621,
+ "commits": 154,
+ "modify_time": "2019-09-13 04:41:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/deibit/cansina",
+ "star": 621,
+ "commits": 25,
+ "modify_time": "2019-07-11 21:57:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/0xbug/sqliscanner",
+ "star": 621,
+ "commits": 40,
+ "modify_time": "2017-09-22 04:37:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/epsylon/ufonet",
+ "star": 620,
+ "commits": 49,
+ "modify_time": "2019-03-08 00:34:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/derhuerst/tcp-over-websockets",
+ "star": 620,
+ "commits": 23,
+ "modify_time": "2019-07-19 14:03:42",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/pr0x13/idict",
+ "star": 619,
+ "commits": 9,
+ "modify_time": "2015-01-02 23:07:47",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/mattifestation/powershellarsenal",
+ "star": 619,
+ "commits": 12,
+ "modify_time": "2019-02-08 11:37:10",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/leo-stone/hack-petya",
+ "star": 619,
+ "commits": 5,
+ "modify_time": "2016-04-12 23:03:18",
+ "last_release": "v2.0.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/bypass007/safety-project-collection",
+ "star": 618,
+ "commits": 10,
+ "modify_time": "2019-08-26 02:02:53",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/unixhot/waf",
+ "star": 617,
+ "commits": 22,
+ "modify_time": "2018-08-07 08:34:59",
+ "last_release": "",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/thewover/donut",
+ "star": 617,
+ "commits": 277,
+ "modify_time": "2019-11-29 20:39:43",
+ "last_release": "v0.9.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/lunixbochs/usercorn",
+ "star": 617,
+ "commits": 943,
+ "modify_time": "2018-09-22 17:20:33",
+ "last_release": "\n v0.2.1\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/v2ray/manual",
+ "star": 616,
+ "commits": 4981,
+ "modify_time": "2019-12-09 02:02:53",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/wireghoul/htshells",
+ "star": 616,
+ "commits": 87,
+ "modify_time": "2018-07-18 01:39:14",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/matheus-garbelini/esp32_esp8266_attacks",
+ "star": 616,
+ "commits": 11,
+ "modify_time": "2019-09-08 06:07:20",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/evilsocket/arc",
+ "star": 616,
+ "commits": 589,
+ "modify_time": "2019-11-20 14:33:37",
+ "last_release": "v1.3.4",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/jx-sec/jxwaf",
+ "star": 615,
+ "commits": 149,
+ "modify_time": "2019-08-18 10:08:02",
+ "last_release": "",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/jiangsir404/audit-learning",
+ "star": 615,
+ "commits": 34,
+ "modify_time": "2018-10-08 01:58:59",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/macmade/keychaincracker",
+ "star": 614,
+ "commits": 30,
+ "modify_time": "2017-05-26 16:09:10",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/adriancable/8086tiny",
+ "star": 614,
+ "commits": 9,
+ "modify_time": "2014-03-19 23:08:16",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/adamcaudill/equationgroupleak",
+ "star": 614,
+ "commits": 11,
+ "modify_time": "2018-06-24 14:09:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/acidanthera/virtualsmc",
+ "star": 613,
+ "commits": 183,
+ "modify_time": "2019-10-30 11:00:13",
+ "last_release": "1.0.9",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/sourcelair/ceryx",
+ "star": 613,
+ "commits": 158,
+ "modify_time": "2019-10-22 11:28:44",
+ "last_release": "0.7.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/langyanduan/reborn",
+ "star": 613,
+ "commits": 39,
+ "modify_time": "2018-10-16 11:04:57",
+ "last_release": "0.5.60",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/fanhuaandluomu/geetest_break",
+ "star": 613,
+ "commits": 32,
+ "modify_time": "2017-11-17 07:36:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zdresearch/OWASP-Nettacker",
+ "star": 612,
+ "commits": 1108,
+ "modify_time": "2019-02-01 14:29:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/thesp0nge/dawnscanner",
+ "star": 612,
+ "commits": 979,
+ "modify_time": "2018-11-30 16:00:30",
+ "last_release": "\n v2.0.0.rc3\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/quiet/quiet-lwip",
+ "star": 612,
+ "commits": 21,
+ "modify_time": "2019-11-15 06:32:50",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/netflix/repokid",
+ "star": 612,
+ "commits": 237,
+ "modify_time": "2019-09-25 21:00:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/eliasgranderubio/dagda",
+ "star": 612,
+ "commits": 250,
+ "modify_time": "2019-06-13 06:21:07",
+ "last_release": "0.7.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/eldadru/ksniff",
+ "star": 612,
+ "commits": 72,
+ "modify_time": "2019-09-20 15:38:36",
+ "last_release": "v1.3.2",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/ashishb/osx-and-ios-security-awesome",
+ "star": 612,
+ "commits": 49,
+ "modify_time": "2019-09-16 06:21:26",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/al-azif/ps4-exploit-host",
+ "star": 612,
+ "commits": 585,
+ "modify_time": "2019-03-20 14:35:54",
+ "last_release": "v0.4.6RC2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/windowslies/blockwindows",
+ "star": 611,
+ "commits": 84,
+ "modify_time": "2015-12-13 23:36:15",
+ "last_release": "",
+ "lang": "Batchfile"
+ },
+ {
+ "link": "https://github.com/faizann24/xsspy",
+ "star": 611,
+ "commits": 58,
+ "modify_time": "2019-08-09 18:32:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/denji/golang-tls",
+ "star": 611,
+ "commits": 24,
+ "modify_time": "2019-04-30 03:31:51",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/vincentcox/stacoan",
+ "star": 608,
+ "commits": 115,
+ "modify_time": "2019-05-23 15:09:42",
+ "last_release": "v0.90",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/farag2/windows-10-setup-script",
+ "star": 607,
+ "commits": 178,
+ "modify_time": "2019-11-18 05:31:45",
+ "last_release": "4.0.14",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/matlink/gplaycli",
+ "star": 607,
+ "commits": 507,
+ "modify_time": "2019-09-08 07:37:30",
+ "last_release": "3.26",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cokebar/gfwlist2dnsmasq",
+ "star": 607,
+ "commits": 64,
+ "modify_time": "2019-04-19 13:53:52",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/bonesoul/coiniumserv",
+ "star": 607,
+ "commits": 1668,
+ "modify_time": "2018-08-08 00:52:39",
+ "last_release": "v0.2.5-beta",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/peewpw/invoke-wcmdump",
+ "star": 606,
+ "commits": 10,
+ "modify_time": "2017-12-12 00:46:32",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/aleenzz/mysql_sql_bypass_wiki",
+ "star": 606,
+ "commits": 11,
+ "modify_time": "2019-05-19 11:20:22",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/0xbadjuju/tokenvator",
+ "star": 606,
+ "commits": 60,
+ "modify_time": "2019-03-19 23:57:50",
+ "last_release": "2.1.1",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/404notf0und/ai-for-security-learning",
+ "star": 605,
+ "commits": 94,
+ "modify_time": "2019-11-27 09:08:26",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/0xgalz/virtuailor",
+ "star": 605,
+ "commits": 29,
+ "modify_time": "2019-09-23 07:36:59",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/Gradients/Gradients",
+ "star": 604,
+ "commits": 59,
+ "modify_time": "2019-10-15 15:50:33",
+ "last_release": "0.3.0",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/securityftw/cs-suite",
+ "star": 604,
+ "commits": 169,
+ "modify_time": "2019-12-02 09:25:38",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/scottybauer/android_kernel_cve_pocs",
+ "star": 603,
+ "commits": 19,
+ "modify_time": "2018-09-23 16:25:34",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/Maktm/FLIRTDB",
+ "star": 602,
+ "commits": 48,
+ "modify_time": "2019-11-13 21:42:08",
+ "last_release": "",
+ "lang": "Max"
+ },
+ {
+ "link": "https://github.com/webrecorder/pywb",
+ "star": 602,
+ "commits": 2112,
+ "modify_time": "2019-11-22 20:25:18",
+ "last_release": "\n v-2.4.0-rc2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pelya/android-keyboard-gadget",
+ "star": 602,
+ "commits": 244,
+ "modify_time": "2019-06-15 16:21:22",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/m0mchil/poclbm",
+ "star": 602,
+ "commits": 232,
+ "modify_time": "2013-04-08 18:08:40",
+ "last_release": "\n 20120920\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bhdresh/cve-2017-0199",
+ "star": 602,
+ "commits": 108,
+ "modify_time": "2017-11-19 11:01:15",
+ "last_release": "v4.0.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/omriher/captipper",
+ "star": 601,
+ "commits": 70,
+ "modify_time": "2017-02-26 15:35:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/microsoft/clrmd",
+ "star": 601,
+ "commits": 486,
+ "modify_time": "2019-12-09 22:17:58",
+ "last_release": "0.9.170626.1",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/jiji262/wooyun_articles",
+ "star": 601,
+ "commits": 15,
+ "modify_time": "2018-03-23 02:20:04",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/hatriot/clusterd",
+ "star": 601,
+ "commits": 143,
+ "modify_time": "2015-11-19 07:34:44",
+ "last_release": "0.5",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/c0ny1/chunked-coding-converter",
+ "star": 601,
+ "commits": 20,
+ "modify_time": "2019-03-20 12:43:03",
+ "last_release": "0.2.1",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/mdhiggins/esp8266-http-ir-blaster",
+ "star": 600,
+ "commits": 235,
+ "modify_time": "2019-11-11 19:53:06",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/witten/borgmatic",
+ "star": 599,
+ "commits": 947,
+ "modify_time": "2019-12-08 22:07:02",
+ "last_release": "1.4.18",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/secretsquirrel/sigthief",
+ "star": 599,
+ "commits": 14,
+ "modify_time": "2017-12-07 18:05:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ntkernel/lantern",
+ "star": 599,
+ "commits": 106,
+ "modify_time": "2019-12-07 01:54:46",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/FortyNorthSecurity/WMImplant",
+ "star": 598,
+ "commits": 129,
+ "modify_time": "2018-10-26 23:38:12",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/pires/kubernetes-vagrant-coreos-cluster",
+ "star": 598,
+ "commits": 481,
+ "modify_time": "2018-10-28 16:06:06",
+ "last_release": "1.9.0",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/nongiach/arm_now",
+ "star": 597,
+ "commits": 142,
+ "modify_time": "2019-11-23 19:09:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hslatman/awesome-industrial-control-system-security",
+ "star": 597,
+ "commits": 123,
+ "modify_time": "2019-11-09 14:46:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hashcat/hashcat-utils",
+ "star": 597,
+ "commits": 106,
+ "modify_time": "2019-06-08 12:22:58",
+ "last_release": "v1.9",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/didierstevens/didierstevenssuite",
+ "star": 597,
+ "commits": 200,
+ "modify_time": "2019-12-08 19:30:35",
+ "last_release": "",
+ "lang": "YARA"
+ },
+ {
+ "link": "https://github.com/antoniomika/sish",
+ "star": 597,
+ "commits": 83,
+ "modify_time": "2019-11-29 20:20:49",
+ "last_release": "v0.1.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/siguza/ios-resources",
+ "star": 596,
+ "commits": 41,
+ "modify_time": "2019-11-05 21:11:01",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ramblingcookiemonster/powershell",
+ "star": 596,
+ "commits": 102,
+ "modify_time": "2019-10-24 03:16:13",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/azure/aks",
+ "star": 596,
+ "commits": 289,
+ "modify_time": "2019-12-07 00:40:10",
+ "last_release": "2019-12-02",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/zhengmin1989/thesevenweapons",
+ "star": 595,
+ "commits": 10,
+ "modify_time": "2015-11-09 06:11:28",
+ "last_release": "",
+ "lang": "Makefile"
+ },
+ {
+ "link": "https://github.com/openvpn/openvpn-gui",
+ "star": 595,
+ "commits": 537,
+ "modify_time": "2019-11-26 07:32:25",
+ "last_release": "\n v11.14.0.0\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/fabrimagic72/malware-samples",
+ "star": 595,
+ "commits": 76,
+ "modify_time": "2019-07-11 12:25:20",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/cloudflare/cloudflared",
+ "star": 595,
+ "commits": 287,
+ "modify_time": "2019-12-04 17:22:08",
+ "last_release": "\n 2019.11.3\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/brannondorsey/passgan",
+ "star": 595,
+ "commits": 13,
+ "modify_time": "2018-09-30 16:27:59",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/GlasgowEmbedded/glasgow",
+ "star": 594,
+ "commits": 1297,
+ "modify_time": "2019-11-18 17:33:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/thewhiteh4t/pwnedornot",
+ "star": 594,
+ "commits": 132,
+ "modify_time": "2019-09-03 05:59:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dmpayton/django-admin-honeypot",
+ "star": 594,
+ "commits": 166,
+ "modify_time": "2019-06-24 21:19:06",
+ "last_release": "\n v1.1.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/breakingmalwareresearch/atom-bombing",
+ "star": 594,
+ "commits": 5,
+ "modify_time": "2016-10-28 17:24:05",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/zhuifengshaonianhanlu/pikachu",
+ "star": 593,
+ "commits": 44,
+ "modify_time": "2019-11-24 04:28:36",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/trustedsec/trevorc2",
+ "star": 593,
+ "commits": 51,
+ "modify_time": "2019-12-03 18:39:35",
+ "last_release": "\n 1.3\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mrexodia/titanhide",
+ "star": 593,
+ "commits": 186,
+ "modify_time": "2019-12-05 19:17:04",
+ "last_release": "V0014",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/pwning/public-writeup",
+ "star": 592,
+ "commits": 195,
+ "modify_time": "2019-10-21 00:49:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/owasp/railsgoat",
+ "star": 592,
+ "commits": 1765,
+ "modify_time": "2019-11-05 18:01:43",
+ "last_release": "rails.5.0.0",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/nim4/dbshield",
+ "star": 592,
+ "commits": 51,
+ "modify_time": "2017-09-24 20:00:59",
+ "last_release": "1.0.0-beta4",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/sc0tfree/mentalist",
+ "star": 591,
+ "commits": 6,
+ "modify_time": "2017-11-07 12:44:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/moul/sshportal",
+ "star": 591,
+ "commits": 317,
+ "modify_time": "2019-09-18 07:11:08",
+ "last_release": "v1.10.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/timest/goscan",
+ "star": 590,
+ "commits": 13,
+ "modify_time": "2017-11-21 04:40:23",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/pandazheng/ioshackstudy",
+ "star": 590,
+ "commits": 117,
+ "modify_time": "2019-01-06 13:02:35",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/eldraco/salamandra",
+ "star": 590,
+ "commits": 33,
+ "modify_time": "2018-05-14 07:11:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dabeaz/bitey",
+ "star": 590,
+ "commits": 22,
+ "modify_time": "2012-09-12 15:09:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bit4woo/summit_ppt",
+ "star": 590,
+ "commits": 19,
+ "modify_time": "2019-06-11 14:48:29",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/pahaz/sshtunnel",
+ "star": 589,
+ "commits": 256,
+ "modify_time": "2019-09-19 13:34:20",
+ "last_release": "0.1.5",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/brunty/awesome-checker-services",
+ "star": 589,
+ "commits": 72,
+ "modify_time": "2018-09-06 12:58:00",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/1n3/blackwidow",
+ "star": 589,
+ "commits": 38,
+ "modify_time": "2019-11-06 15:30:47",
+ "last_release": "v1.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nytimes/gziphandler",
+ "star": 588,
+ "commits": 78,
+ "modify_time": "2019-11-13 15:51:20",
+ "last_release": "v1.1.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/lhy0403/qv2ray",
+ "star": 587,
+ "commits": 370,
+ "modify_time": "2019-11-29 13:26:47",
+ "last_release": "v1.99.2",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/rapid7/iotseeker",
+ "star": 587,
+ "commits": 12,
+ "modify_time": "2016-12-29 03:34:38",
+ "last_release": "",
+ "lang": "Perl 6"
+ },
+ {
+ "link": "https://github.com/hack-with-github/windows",
+ "star": 587,
+ "commits": 22,
+ "modify_time": "2016-10-25 02:06:09",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/cr4sh/thinkpwn",
+ "star": 587,
+ "commits": 21,
+ "modify_time": "2017-03-14 10:48:05",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/lirantal/awesome-nodejs-security",
+ "star": 586,
+ "commits": 33,
+ "modify_time": "2019-11-29 14:13:17",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/krisyu/swift14macosapps",
+ "star": 586,
+ "commits": 2,
+ "modify_time": "2017-07-17 01:34:45",
+ "last_release": "",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/thinkst/opencanary",
+ "star": 585,
+ "commits": 46,
+ "modify_time": "2019-09-30 16:55:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/olacabs/jackhammer",
+ "star": 585,
+ "commits": 96,
+ "modify_time": "2019-04-22 07:46:58",
+ "last_release": "\n 2\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/henrypp/memreduct",
+ "star": 585,
+ "commits": 232,
+ "modify_time": "2019-11-20 18:24:08",
+ "last_release": "v.3.3.5",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/certsocietegenerale/irm",
+ "star": 585,
+ "commits": 10,
+ "modify_time": "2016-04-29 12:04:41",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/woj-ciech/danger-zone",
+ "star": 584,
+ "commits": 13,
+ "modify_time": "2019-04-05 13:12:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/secrary/makin",
+ "star": 584,
+ "commits": 111,
+ "modify_time": "2019-03-17 23:50:31",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/monoxgas/srdi",
+ "star": 584,
+ "commits": 76,
+ "modify_time": "2019-11-07 23:38:45",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/findbugsproject/findbugs",
+ "star": 584,
+ "commits": 15375,
+ "modify_time": "2017-09-23 19:16:14",
+ "last_release": "3.1.0_preview2",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/dev-sec/ansible-ssh-hardening",
+ "star": 584,
+ "commits": 480,
+ "modify_time": "2019-12-01 13:05:52",
+ "last_release": "7.0.0",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/vivisect/vivisect",
+ "star": 583,
+ "commits": 1158,
+ "modify_time": "2019-12-09 15:19:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ktap/ktap",
+ "star": 583,
+ "commits": 1021,
+ "modify_time": "2017-01-06 15:44:17",
+ "last_release": "\n v0.4\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/d30sa1/rootkits-list-download",
+ "star": 583,
+ "commits": 5,
+ "modify_time": "2019-07-03 11:49:12",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/facebookincubator/weasel",
+ "star": 582,
+ "commits": 1,
+ "modify_time": "2019-12-03 20:36:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/softscheck/tplink-smartplug",
+ "star": 582,
+ "commits": 25,
+ "modify_time": "2018-07-04 10:40:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ekultek/zeus-scanner",
+ "star": 582,
+ "commits": 414,
+ "modify_time": "2019-05-10 13:46:38",
+ "last_release": "v1.5",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dimitarpetrov/stegify",
+ "star": 582,
+ "commits": 35,
+ "modify_time": "2019-10-20 20:44:59",
+ "last_release": "v1.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/spencerdodd/kernelpop",
+ "star": 581,
+ "commits": 238,
+ "modify_time": "2018-08-02 22:40:52",
+ "last_release": "v1.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/secrary/andromeda",
+ "star": 581,
+ "commits": 23,
+ "modify_time": "2019-10-11 22:51:31",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/romanz/amodem",
+ "star": 581,
+ "commits": 734,
+ "modify_time": "2019-03-08 13:11:47",
+ "last_release": "\n v1.15.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mlsecproject/combine",
+ "star": 581,
+ "commits": 317,
+ "modify_time": "2016-07-26 18:26:11",
+ "last_release": "v0.1.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hackplayers/evil-winrm",
+ "star": 581,
+ "commits": 198,
+ "modify_time": "2019-11-18 06:56:22",
+ "last_release": "v2.0",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/cryptogenic/ps4-5.05-kernel-exploit",
+ "star": 581,
+ "commits": 27,
+ "modify_time": "2018-08-14 22:51:56",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/clarketm/proxy-list",
+ "star": 581,
+ "commits": 1315,
+ "modify_time": "2019-12-09 06:00:01",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/pyca/bcrypt",
+ "star": 580,
+ "commits": 178,
+ "modify_time": "2019-10-20 14:29:24",
+ "last_release": "\n 3.1.7\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/pentestgeek/phishing-frenzy",
+ "star": 580,
+ "commits": 456,
+ "modify_time": "2018-03-09 15:09:47",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/nshalabi/sysmontools",
+ "star": 580,
+ "commits": 76,
+ "modify_time": "2019-06-29 16:22:03",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/googlecloudplatform/flask-talisman",
+ "star": 580,
+ "commits": 55,
+ "modify_time": "2019-05-28 19:34:35",
+ "last_release": "v0.7.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ant4g0nist/lisa.py",
+ "star": 580,
+ "commits": 42,
+ "modify_time": "2017-07-03 13:15:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/functionclub/ssr-bash-python",
+ "star": 579,
+ "commits": 6,
+ "modify_time": "2018-07-28 10:34:54",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/manifoldco/torus-cli",
+ "star": 579,
+ "commits": 1742,
+ "modify_time": "2018-07-10 17:53:55",
+ "last_release": "\n v0.31.0\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/getdnsapi/stubby",
+ "star": 579,
+ "commits": 260,
+ "modify_time": "2019-11-06 14:42:45",
+ "last_release": "v0.2.6",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/federicodotta/brida",
+ "star": 579,
+ "commits": 33,
+ "modify_time": "2018-10-03 16:46:02",
+ "last_release": "v0.3",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/80vul/phpcodz",
+ "star": 579,
+ "commits": 132,
+ "modify_time": "2015-09-05 03:26:35",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/tyranid/dotnettojscript",
+ "star": 578,
+ "commits": 29,
+ "modify_time": "2018-08-13 18:08:54",
+ "last_release": "v1.0.4",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/timthony/self_drive",
+ "star": 578,
+ "commits": 38,
+ "modify_time": "2019-06-02 07:19:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/t-d-k/librecrypt",
+ "star": 578,
+ "commits": 339,
+ "modify_time": "2016-08-12 19:46:52",
+ "last_release": "6.3",
+ "lang": "Pascal"
+ },
+ {
+ "link": "https://github.com/mtivadar/windows10_ntfs_crash_dos",
+ "star": 578,
+ "commits": 37,
+ "modify_time": "2019-02-02 20:55:43",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/QBDI/QBDI",
+ "star": 577,
+ "commits": 167,
+ "modify_time": "2018-10-21 23:34:40",
+ "last_release": "v0.7.0",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/r00t-3xp10it/morpheus",
+ "star": 577,
+ "commits": 165,
+ "modify_time": "2018-12-28 12:09:07",
+ "last_release": "v2.2",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/threatexpress/red-team-scripts",
+ "star": 576,
+ "commits": 23,
+ "modify_time": "2019-11-18 05:30:09",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/mysteriumnetwork/node",
+ "star": 576,
+ "commits": 3913,
+ "modify_time": "2019-12-09 13:11:54",
+ "last_release": "0.15.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/jonluca/anubis",
+ "star": 576,
+ "commits": 244,
+ "modify_time": "2019-09-22 01:59:56",
+ "last_release": "0.9.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dutchgraa/crackcoin",
+ "star": 576,
+ "commits": 16,
+ "modify_time": "2017-07-30 18:15:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/yggdrasil-network/yggdrasil-go",
+ "star": 575,
+ "commits": 1690,
+ "modify_time": "2019-11-24 09:47:16",
+ "last_release": "v0.3.12",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/shopify/kubeaudit",
+ "star": 575,
+ "commits": 227,
+ "modify_time": "2019-10-22 15:51:42",
+ "last_release": "v0.7.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/shadowsocks-plus/shadowsocks-plus",
+ "star": 575,
+ "commits": 54,
+ "modify_time": "2017-07-19 08:44:38",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/fox-it/mitm6",
+ "star": 575,
+ "commits": 24,
+ "modify_time": "2019-03-31 21:15:23",
+ "last_release": "v0.2.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nekmo/amazon-dash",
+ "star": 574,
+ "commits": 310,
+ "modify_time": "2019-11-05 22:31:50",
+ "last_release": "v1.3.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/s3inlc/hashtopolis",
+ "star": 574,
+ "commits": 4230,
+ "modify_time": "2019-06-26 14:01:12",
+ "last_release": "v0.11.0",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/nidem/kerberoast",
+ "star": 574,
+ "commits": 30,
+ "modify_time": "2019-07-12 23:06:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/neo23x0/yargen",
+ "star": 574,
+ "commits": 167,
+ "modify_time": "2019-08-10 07:33:58",
+ "last_release": "0.18.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/iagox86/hash_extender",
+ "star": 574,
+ "commits": 136,
+ "modify_time": "2017-04-10 15:18:05",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/elevenpaths/evilfoca",
+ "star": 574,
+ "commits": 4,
+ "modify_time": "2015-09-08 09:14:21",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/bollwarm/sectoolset",
+ "star": 574,
+ "commits": 399,
+ "modify_time": "2019-11-28 08:49:59",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/zneak/fcd",
+ "star": 573,
+ "commits": 950,
+ "modify_time": "2018-03-03 14:33:50",
+ "last_release": "llvm-4.0",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/microsoft/iediagnosticsadapter",
+ "star": 573,
+ "commits": 146,
+ "modify_time": "2016-06-02 17:08:30",
+ "last_release": "v0.2-alpha",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/jgarzik/cpuminer",
+ "star": 573,
+ "commits": 172,
+ "modify_time": "2016-07-12 21:53:24",
+ "last_release": "\n v1.0.2\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/alisamtechnology/atscan",
+ "star": 573,
+ "commits": 2367,
+ "modify_time": "2019-09-17 19:48:45",
+ "last_release": "V17.0.0",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/0kee-team/watchad",
+ "star": 572,
+ "commits": 19,
+ "modify_time": "2019-11-15 08:55:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nnamon/linux-exploitation-course",
+ "star": 572,
+ "commits": 32,
+ "modify_time": "2018-05-05 13:26:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hack-with-github/awesome-security-gists",
+ "star": 572,
+ "commits": 19,
+ "modify_time": "2017-11-04 13:32:10",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/gwillem/magento-malware-scanner",
+ "star": 572,
+ "commits": 636,
+ "modify_time": "2019-10-10 07:04:42",
+ "last_release": "\n 20181220.165251\n ",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/alexzaitsev/apk-dependency-graph",
+ "star": 572,
+ "commits": 121,
+ "modify_time": "2019-11-26 06:25:26",
+ "last_release": "0.3.1",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/nsacyber/WALKOFF",
+ "star": 571,
+ "commits": 4339,
+ "modify_time": "2019-12-02 13:26:55",
+ "last_release": "v1.0.0-rc.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ddevault/pass-rotate",
+ "star": 571,
+ "commits": 69,
+ "modify_time": "2019-01-25 03:04:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fzipp/gocyclo",
+ "star": 571,
+ "commits": 8,
+ "modify_time": "2015-06-27 05:31:10",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/bitdust/wamacry",
+ "star": 571,
+ "commits": 29,
+ "modify_time": "2017-05-20 11:47:08",
+ "last_release": "v0.7",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/tarunkant/gopherus",
+ "star": 570,
+ "commits": 30,
+ "modify_time": "2019-10-10 17:08:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jhallen/joes-sandbox",
+ "star": 570,
+ "commits": 400,
+ "modify_time": "2019-11-18 20:07:56",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/graphenex/graphenex",
+ "star": 570,
+ "commits": 780,
+ "modify_time": "2019-11-24 11:54:25",
+ "last_release": "1.2.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/411hall/jaws",
+ "star": 570,
+ "commits": 36,
+ "modify_time": "2017-12-04 08:21:33",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/rpetrich/captainhook",
+ "star": 569,
+ "commits": 49,
+ "modify_time": "2019-05-09 02:28:38",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/musalbas/heartbleed-masstest",
+ "star": 569,
+ "commits": 145,
+ "modify_time": "2015-07-02 14:47:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/guardianproject/netcipher",
+ "star": 569,
+ "commits": 471,
+ "modify_time": "2019-11-30 11:18:48",
+ "last_release": "\n 2.1.0\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/codingo/vhostscan",
+ "star": 569,
+ "commits": 331,
+ "modify_time": "2019-07-12 06:03:42",
+ "last_release": "1.21",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/crytic/not-so-smart-contracts",
+ "star": 568,
+ "commits": 77,
+ "modify_time": "2018-10-09 20:49:19",
+ "last_release": "",
+ "lang": "Solidity"
+ },
+ {
+ "link": "https://github.com/sgan81/apfs-fuse",
+ "star": 568,
+ "commits": 80,
+ "modify_time": "2019-07-23 15:20:28",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/genetic-malware/ebowla",
+ "star": 568,
+ "commits": 79,
+ "modify_time": "2019-01-28 10:45:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fate0/proxylist",
+ "star": 568,
+ "commits": 1,
+ "modify_time": "2019-12-10 09:18:11",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/externalist/exploit_playground",
+ "star": 568,
+ "commits": 19,
+ "modify_time": "2018-11-01 14:06:51",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/mdsecactivebreach/cactustorch",
+ "star": 567,
+ "commits": 15,
+ "modify_time": "2017-11-16 10:20:08",
+ "last_release": "",
+ "lang": "Visual Basic .NET"
+ },
+ {
+ "link": "https://github.com/matthijskooijman/arduino-lmic",
+ "star": 567,
+ "commits": 100,
+ "modify_time": "2017-12-05 08:00:47",
+ "last_release": "\n 1.5.0+arduino-2\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/lowpowerlab/rfm69",
+ "star": 567,
+ "commits": 286,
+ "modify_time": "2019-08-30 15:52:02",
+ "last_release": "1.3.0",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/raineorshine/solgraph",
+ "star": 566,
+ "commits": 69,
+ "modify_time": "2019-01-30 10:17:08",
+ "last_release": "v0.2.6",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/justinsteven/dostackbufferoverflowgood",
+ "star": 566,
+ "commits": 10,
+ "modify_time": "2019-02-06 23:21:07",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/salesforce/vulnreport",
+ "star": 565,
+ "commits": 38,
+ "modify_time": "2017-03-29 19:29:09",
+ "last_release": "3.0.3",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/hdb-li/lldebugtool",
+ "star": 565,
+ "commits": 790,
+ "modify_time": "2019-11-21 09:57:24",
+ "last_release": "1.3.7",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/fremag/memoscope.net",
+ "star": 565,
+ "commits": 495,
+ "modify_time": "2019-06-25 06:01:07",
+ "last_release": "v1.0",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/edwardz246003/iis_exploit",
+ "star": 565,
+ "commits": 6,
+ "modify_time": "2017-03-27 02:33:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/certsocietegenerale/fame",
+ "star": 565,
+ "commits": 52,
+ "modify_time": "2019-10-02 07:38:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bkerler/exploit_me",
+ "star": 565,
+ "commits": 34,
+ "modify_time": "2019-10-25 06:46:55",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/asamy/ksm",
+ "star": 565,
+ "commits": 566,
+ "modify_time": "2019-01-19 06:34:45",
+ "last_release": "1.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/applidium/cracking-siri",
+ "star": 565,
+ "commits": 2,
+ "modify_time": "2011-11-14 22:21:16",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/sliim/pentest-env",
+ "star": 564,
+ "commits": 264,
+ "modify_time": "2019-06-21 14:52:59",
+ "last_release": "\n 1.1.0\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/railslove/rack-tracker",
+ "star": 564,
+ "commits": 328,
+ "modify_time": "2019-12-08 09:56:21",
+ "last_release": "\n v1.12.0\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/r35tart/penetration_testing_case",
+ "star": 564,
+ "commits": 12,
+ "modify_time": "2019-09-18 03:14:52",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/object-calisthenics/phpcs-calisthenics-rules",
+ "star": 564,
+ "commits": 398,
+ "modify_time": "2019-11-10 17:24:59",
+ "last_release": "v3.6.0",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/nshalabi/attack-tools",
+ "star": 564,
+ "commits": 50,
+ "modify_time": "2019-06-16 09:25:00",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/tencent/injectfix",
+ "star": 563,
+ "commits": 50,
+ "modify_time": "2019-12-02 11:51:13",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/pulp-platform/pulpino",
+ "star": 561,
+ "commits": 801,
+ "modify_time": "2019-05-29 09:29:49",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/netspi/sqlinjectionwiki",
+ "star": 561,
+ "commits": 119,
+ "modify_time": "2019-10-18 14:32:07",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/its-a-feature/apfell",
+ "star": 561,
+ "commits": 328,
+ "modify_time": "2019-08-18 16:41:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/denizparlak/zeus",
+ "star": 561,
+ "commits": 111,
+ "modify_time": "2019-10-03 14:42:36",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/sfackler/rust-openssl",
+ "star": 560,
+ "commits": 2671,
+ "modify_time": "2019-12-09 21:26:51",
+ "last_release": "openssl-v0.10.26",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/rapid7/ssh-badkeys",
+ "star": 560,
+ "commits": 77,
+ "modify_time": "2019-01-25 16:17:00",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/jordan-wright/dumpmon",
+ "star": 560,
+ "commits": 71,
+ "modify_time": "2015-07-06 23:03:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hfiref0x/winobjex64",
+ "star": 560,
+ "commits": 84,
+ "modify_time": "2019-11-29 04:53:39",
+ "last_release": "v1.8.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/fate0/getproxy",
+ "star": 560,
+ "commits": 12,
+ "modify_time": "2018-09-22 04:39:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/autotest/autotest",
+ "star": 560,
+ "commits": 7826,
+ "modify_time": "2019-10-28 09:59:53",
+ "last_release": "\n 0.16.4\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/privacyradius/gdpr-checklist",
+ "star": 559,
+ "commits": 121,
+ "modify_time": "2019-12-09 07:10:15",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/justicerage/manalyze",
+ "star": 559,
+ "commits": 232,
+ "modify_time": "2019-11-18 17:45:41",
+ "last_release": "",
+ "lang": "YARA"
+ },
+ {
+ "link": "https://github.com/intel/linux-sgx",
+ "star": 559,
+ "commits": 293,
+ "modify_time": "2019-11-27 00:48:30",
+ "last_release": "sgx_2.7.1",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/fs0c131y/esfileexploreropenportvuln",
+ "star": 559,
+ "commits": 19,
+ "modify_time": "2019-01-22 21:00:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/blinksocks/blinksocks",
+ "star": 559,
+ "commits": 1422,
+ "modify_time": "2019-03-24 11:49:26",
+ "last_release": "v3.3.8",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/marco-lancini/goscan",
+ "star": 558,
+ "commits": 81,
+ "modify_time": "2019-04-29 20:31:04",
+ "last_release": "v2.4",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/hatboy/struts2-scan",
+ "star": 558,
+ "commits": 6,
+ "modify_time": "2019-09-10 01:40:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/advanced-threat-research/firmware-security-training",
+ "star": 558,
+ "commits": null,
+ "modify_time": "2017-05-10 16:30:01",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/katmagic/shallot",
+ "star": 557,
+ "commits": 31,
+ "modify_time": "2012-06-28 17:50:04",
+ "last_release": "\n shallot-0.0.3\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hashview/hashview",
+ "star": 557,
+ "commits": 1381,
+ "modify_time": "2018-11-20 18:13:59",
+ "last_release": "v0.7.4-beta",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/guardrailsio/awesome-python-security",
+ "star": 557,
+ "commits": 12,
+ "modify_time": "2019-03-29 12:57:11",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/wapiflapi/binglide",
+ "star": 556,
+ "commits": 29,
+ "modify_time": "2017-01-13 03:14:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/secmobi/wiki.secmobi.com",
+ "star": 556,
+ "commits": 57,
+ "modify_time": "2017-02-02 17:10:27",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/mojombo/proxymachine",
+ "star": 556,
+ "commits": 124,
+ "modify_time": "2011-02-02 01:41:04",
+ "last_release": "\n v1.2.4\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/microsoft/miengine",
+ "star": 556,
+ "commits": 1181,
+ "modify_time": "2019-12-09 20:52:10",
+ "last_release": "\n release_mdd/20190828.2\n ",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/sysdream/chashell",
+ "star": 555,
+ "commits": 18,
+ "modify_time": "2019-06-06 11:10:48",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/cw1997/natbypass",
+ "star": 555,
+ "commits": 24,
+ "modify_time": "2018-11-03 06:25:09",
+ "last_release": "v1.0.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/container-storage-interface/spec",
+ "star": 555,
+ "commits": 274,
+ "modify_time": "2019-10-23 22:01:40",
+ "last_release": "v1.2.0",
+ "lang": "Makefile"
+ },
+ {
+ "link": "https://github.com/vanhauser-thc/thc-ipv6",
+ "star": 554,
+ "commits": 119,
+ "modify_time": "2019-11-18 10:18:48",
+ "last_release": "v3.6",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/t00sh/rop-tool",
+ "star": 554,
+ "commits": 200,
+ "modify_time": "2019-02-21 13:39:27",
+ "last_release": "\n v2.4.2\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/nccgroup/house",
+ "star": 554,
+ "commits": 50,
+ "modify_time": "2019-11-20 20:23:35",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/microsoft/msix-packaging",
+ "star": 554,
+ "commits": 913,
+ "modify_time": "2019-12-05 19:47:40",
+ "last_release": "\n v1.7\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/gerard/ext4fuse",
+ "star": 554,
+ "commits": 131,
+ "modify_time": "2018-11-10 18:15:12",
+ "last_release": "\n v0.1.3\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ausjock/privilege-escalation",
+ "star": 554,
+ "commits": 17,
+ "modify_time": "2016-08-04 00:47:34",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/yellowbyte/reverse-engineering-reference-manual",
+ "star": 553,
+ "commits": 647,
+ "modify_time": "2019-04-14 18:27:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mattes/rotating-proxy",
+ "star": 553,
+ "commits": 52,
+ "modify_time": "2017-02-01 04:13:36",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/guardrailsio/awesome-php-security",
+ "star": 553,
+ "commits": 20,
+ "modify_time": "2019-03-09 11:09:31",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/fwon/electron-anyproxy",
+ "star": 553,
+ "commits": 74,
+ "modify_time": "2017-05-26 10:18:49",
+ "last_release": "\n 0.2.1\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/krmaxwell/maltrieve",
+ "star": 552,
+ "commits": 342,
+ "modify_time": "2015-05-05 01:51:36",
+ "last_release": "v0.7",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sensepost/snoopy",
+ "star": 552,
+ "commits": 5,
+ "modify_time": "2012-12-07 13:18:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/m4ll0k/infoga",
+ "star": 552,
+ "commits": 15,
+ "modify_time": "2019-11-21 22:50:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/veficos/reverse-engineering-for-beginners",
+ "star": 551,
+ "commits": 107,
+ "modify_time": "2017-04-02 09:49:09",
+ "last_release": "",
+ "lang": "Makefile"
+ },
+ {
+ "link": "https://github.com/spiderlabs/modsecurity-nginx",
+ "star": 551,
+ "commits": 169,
+ "modify_time": "2019-01-09 05:23:11",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/kabot/unix-privilege-escalation-exploits-pack",
+ "star": 551,
+ "commits": 2,
+ "modify_time": "2014-12-24 22:03:07",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/raphaelsc/am-i-affected-by-meltdown",
+ "star": 550,
+ "commits": 72,
+ "modify_time": "2018-01-17 01:33:08",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/offensive-security/kali-linux-docker",
+ "star": 550,
+ "commits": 78,
+ "modify_time": "2019-10-22 06:45:51",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/linchaolong/apktoolplus",
+ "star": 550,
+ "commits": 28,
+ "modify_time": "2017-05-16 16:22:07",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/bt3gl/book-on-python-algorithms-and-data-structures",
+ "star": 549,
+ "commits": 179,
+ "modify_time": "2019-11-27 06:18:50",
+ "last_release": "First_Edition",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/s0md3v/Blazy",
+ "star": 549,
+ "commits": 18,
+ "modify_time": "2019-05-05 15:49:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/Mr5m1th/POC-Collect",
+ "star": 549,
+ "commits": 152,
+ "modify_time": "2018-09-04 08:21:12",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/owasp/owasp-masvs",
+ "star": 549,
+ "commits": 1476,
+ "modify_time": "2019-12-10 07:38:05",
+ "last_release": "1.2RC",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/mirrorer/afl",
+ "star": 549,
+ "commits": 205,
+ "modify_time": "2017-11-05 04:42:03",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/lxdvs/apk2gold",
+ "star": 549,
+ "commits": 24,
+ "modify_time": "2014-11-07 19:09:56",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/pure-l0g1c/instagram",
+ "star": 548,
+ "commits": 156,
+ "modify_time": "2019-10-13 22:42:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/owasp/qrljacking",
+ "star": 548,
+ "commits": 201,
+ "modify_time": "2019-06-17 21:59:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/marin-m/pbtk",
+ "star": 547,
+ "commits": 78,
+ "modify_time": "2017-04-22 07:56:25",
+ "last_release": "1.0.4",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jiansiting/decryption-tools",
+ "star": 547,
+ "commits": 4,
+ "modify_time": "2019-06-17 16:08:05",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/samdenty/injectify",
+ "star": 546,
+ "commits": 593,
+ "modify_time": "2018-05-03 13:57:02",
+ "last_release": "2.1",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/scwuaptx/hitcon-training",
+ "star": 546,
+ "commits": 14,
+ "modify_time": "2018-03-26 17:51:01",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/feeicn/esd",
+ "star": 546,
+ "commits": 207,
+ "modify_time": "2019-04-09 02:58:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/coalfire-research/red-baron",
+ "star": 546,
+ "commits": 96,
+ "modify_time": "2019-07-11 01:15:33",
+ "last_release": "",
+ "lang": "HCL"
+ },
+ {
+ "link": "https://github.com/MiYogurt/network-security-mind-map",
+ "star": 545,
+ "commits": 4,
+ "modify_time": "2016-07-03 08:07:24",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/solo5/solo5",
+ "star": 545,
+ "commits": 881,
+ "modify_time": "2019-11-27 11:30:18",
+ "last_release": "v0.6.4",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/bsmali4/xssfork",
+ "star": 545,
+ "commits": 20,
+ "modify_time": "2018-01-26 14:00:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tf-encrypted/tf-encrypted",
+ "star": 544,
+ "commits": 548,
+ "modify_time": "2019-11-25 10:00:26",
+ "last_release": "\n 0.6.0-rc0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/alexa/alexa-skills-kit-sdk-for-python",
+ "star": 544,
+ "commits": 232,
+ "modify_time": "2019-12-06 22:40:29",
+ "last_release": "1.12.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/koding/global.hackathon",
+ "star": 544,
+ "commits": 4763,
+ "modify_time": "2018-05-04 22:08:13",
+ "last_release": "",
+ "lang": "CoffeeScript"
+ },
+ {
+ "link": "https://github.com/fjserna/cve-2015-7547",
+ "star": 544,
+ "commits": 2,
+ "modify_time": "2016-02-16 01:01:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/biggiesmallsag/nighthawkresponse",
+ "star": 544,
+ "commits": 116,
+ "modify_time": "2019-11-20 01:13:44",
+ "last_release": "1.0.3",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/seccubus/seccubus",
+ "star": 543,
+ "commits": 2229,
+ "modify_time": "2019-07-12 12:11:51",
+ "last_release": "\n 2.53.1\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/shellphish/fuzzer",
+ "star": 543,
+ "commits": 187,
+ "modify_time": "2019-04-09 19:22:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mimoo/diffie-hellman_backdoor",
+ "star": 543,
+ "commits": 148,
+ "modify_time": "2016-08-20 06:00:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/evanoxfeld/node-unzip",
+ "star": 543,
+ "commits": 86,
+ "modify_time": "2014-09-09 03:35:08",
+ "last_release": "\n v0.1.11\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/cloudsec/brootkit",
+ "star": 543,
+ "commits": 63,
+ "modify_time": "2017-09-12 04:32:56",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/woa-project/woa-deployer-rpi",
+ "star": 542,
+ "commits": 52,
+ "modify_time": "2019-05-23 15:52:47",
+ "last_release": "v2.1.1",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/screetsec/brutal",
+ "star": 542,
+ "commits": 69,
+ "modify_time": "2019-09-27 12:24:59",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/brannondorsey/naive-hashcat",
+ "star": 542,
+ "commits": 15,
+ "modify_time": "2018-05-23 21:39:15",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/rhinosecuritylabs/aws-iam-privilege-escalation",
+ "star": 541,
+ "commits": 7,
+ "modify_time": "2019-07-25 18:56:14",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/stelligent/cfn_nag",
+ "star": 540,
+ "commits": 465,
+ "modify_time": "2019-12-07 01:50:43",
+ "last_release": "\n v0.4.54\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/nordicsemiconductor/android-nrf-connect",
+ "star": 540,
+ "commits": 74,
+ "modify_time": "2019-11-13 10:02:44",
+ "last_release": "v4.23.0",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/zmartzone/mod_auth_openidc",
+ "star": 539,
+ "commits": 1024,
+ "modify_time": "2019-12-09 13:23:22",
+ "last_release": "v2.4.0.4",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/wyatu/perun",
+ "star": 539,
+ "commits": 45,
+ "modify_time": "2019-04-25 03:09:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/moxie0/androidpinning",
+ "star": 539,
+ "commits": 11,
+ "modify_time": "2013-06-19 23:01:19",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/dotcppfile/daws",
+ "star": 539,
+ "commits": 101,
+ "modify_time": "2017-05-01 23:35:14",
+ "last_release": "5/12/2015",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/anatolikalysch/vmattack",
+ "star": 539,
+ "commits": 33,
+ "modify_time": "2017-11-30 01:01:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/0xdea/tactical-exploitation",
+ "star": 539,
+ "commits": 79,
+ "modify_time": "2019-05-17 14:52:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/igrigorik/node-spdyproxy",
+ "star": 538,
+ "commits": 93,
+ "modify_time": "2016-07-02 20:15:00",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/espressif/esp-iot-solution",
+ "star": 538,
+ "commits": 654,
+ "modify_time": "2019-09-04 12:58:54",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cisagov/pshtt",
+ "star": 538,
+ "commits": 658,
+ "modify_time": "2019-08-08 15:22:51",
+ "last_release": "\n v0.6.6\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/EliasOenal/multimon-ng",
+ "star": 538,
+ "commits": 252,
+ "modify_time": "2019-09-28 15:12:32",
+ "last_release": "1.1.8",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hfiref0x/upgdsed",
+ "star": 538,
+ "commits": 29,
+ "modify_time": "2019-03-29 10:32:56",
+ "last_release": "v1.1.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/decalage2/vipermonkey",
+ "star": 538,
+ "commits": 830,
+ "modify_time": "2019-12-07 22:35:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/P3GLEG/Whaler",
+ "star": 537,
+ "commits": 14,
+ "modify_time": "2018-10-04 06:25:03",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/tencent/habomalhunter",
+ "star": 536,
+ "commits": 39,
+ "modify_time": "2019-10-13 15:50:38",
+ "last_release": "v2.0.0.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/shellphish/driller",
+ "star": 536,
+ "commits": 535,
+ "modify_time": "2019-10-29 22:02:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mohanson/daze",
+ "star": 536,
+ "commits": 73,
+ "modify_time": "2019-11-12 03:22:56",
+ "last_release": "v1.13",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/DMOJ/judge-server",
+ "star": 536,
+ "commits": 3126,
+ "modify_time": "2019-12-03 04:20:16",
+ "last_release": "v2.0.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/demantz/rfanalyzer",
+ "star": 536,
+ "commits": 175,
+ "modify_time": "2016-10-12 15:28:40",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/salesforce/policy_sentry",
+ "star": 535,
+ "commits": 117,
+ "modify_time": "2019-12-04 15:34:08",
+ "last_release": "0.6.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/java-decompiler/jd-eclipse",
+ "star": 535,
+ "commits": 14,
+ "modify_time": "2019-07-17 21:02:40",
+ "last_release": "v2.0.0",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/hugsy/cemu",
+ "star": 535,
+ "commits": 249,
+ "modify_time": "2019-11-01 01:38:12",
+ "last_release": "0.5",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vulnhub/ctf-writeups",
+ "star": 534,
+ "commits": 151,
+ "modify_time": "2018-04-02 04:11:13",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/torque59/nosql-exploitation-framework",
+ "star": 534,
+ "commits": 151,
+ "modify_time": "2018-04-26 04:59:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/openscap/openscap",
+ "star": 534,
+ "commits": 9849,
+ "modify_time": "2019-12-09 13:11:11",
+ "last_release": "1.3.1",
+ "lang": "XSLT"
+ },
+ {
+ "link": "https://github.com/nytrorst/shellcodecompiler",
+ "star": 534,
+ "commits": 24,
+ "modify_time": "2019-07-31 21:20:02",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/dawei101/shadowsocks-android-java",
+ "star": 533,
+ "commits": 31,
+ "modify_time": "2017-10-22 12:03:54",
+ "last_release": "v1.2",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/janusec/janusec",
+ "star": 533,
+ "commits": 45,
+ "modify_time": "2019-12-08 11:40:01",
+ "last_release": "v0.9.4",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/Acmesec/DoraBox",
+ "star": 532,
+ "commits": 58,
+ "modify_time": "2019-07-11 10:39:10",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/quentinhardy/msdat",
+ "star": 532,
+ "commits": 23,
+ "modify_time": "2019-07-15 16:11:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mysterie/uncompyle2",
+ "star": 532,
+ "commits": 40,
+ "modify_time": "2015-06-25 10:37:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ionescu007/specucheck",
+ "star": 532,
+ "commits": 61,
+ "modify_time": "2018-10-17 01:35:56",
+ "last_release": "v1.1.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/icflorescu/iisexpress-proxy",
+ "star": 532,
+ "commits": 57,
+ "modify_time": "2019-09-03 20:03:34",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/ghostpack/safetykatz",
+ "star": 532,
+ "commits": 6,
+ "modify_time": "2018-08-20 18:25:36",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/densh/scala-offheap",
+ "star": 532,
+ "commits": 352,
+ "modify_time": "2019-04-08 17:53:24",
+ "last_release": "",
+ "lang": "Scala"
+ },
+ {
+ "link": "https://github.com/n00py/wpforce",
+ "star": 531,
+ "commits": 87,
+ "modify_time": "2018-07-30 19:54:19",
+ "last_release": "v.1.0.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/davidgoldman/inspectivec",
+ "star": 531,
+ "commits": 145,
+ "modify_time": "2018-10-15 21:55:43",
+ "last_release": "v1.0.6-1",
+ "lang": "Objective-C++"
+ },
+ {
+ "link": "https://github.com/mohuihui/antispy",
+ "star": 530,
+ "commits": 11,
+ "modify_time": "2019-11-29 05:06:15",
+ "last_release": "AntiSpy_2.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/php-casbin/php-casbin",
+ "star": 530,
+ "commits": 119,
+ "modify_time": "2019-12-09 01:19:02",
+ "last_release": "v2.1.0",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/herzmut/shadowsocks-ios",
+ "star": 530,
+ "commits": null,
+ "modify_time": "2016-12-18 00:14:19",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/a13xp0p0v/linux-kernel-defence-map",
+ "star": 530,
+ "commits": 125,
+ "modify_time": "2019-12-02 14:03:53",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/pixaranimationstudios/opentimelineio",
+ "star": 529,
+ "commits": 312,
+ "modify_time": "2019-12-03 17:28:50",
+ "last_release": "\n last_pure_python\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/h2non/jshashes",
+ "star": 528,
+ "commits": 170,
+ "modify_time": "2017-07-05 12:01:08",
+ "last_release": "\n v1.0.7\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/enigma0x3/generate-macro",
+ "star": 528,
+ "commits": 24,
+ "modify_time": "2016-10-27 20:48:59",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/bignerd95/chimay-red",
+ "star": 528,
+ "commits": 82,
+ "modify_time": "2019-06-28 11:03:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/angr/angr-doc",
+ "star": 528,
+ "commits": 1066,
+ "modify_time": "2019-12-06 20:14:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/warner/python-ecdsa",
+ "star": 527,
+ "commits": 359,
+ "modify_time": "2019-12-05 13:48:18",
+ "last_release": "python-ecdsa-0.14.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sbousseaden/evtx-attack-samples",
+ "star": 527,
+ "commits": 493,
+ "modify_time": "2019-11-26 12:59:11",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/neilalexander/sigmavpn",
+ "star": 527,
+ "commits": 133,
+ "modify_time": "2015-08-09 12:55:09",
+ "last_release": "0.3alpha2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/lemire/fastpfor",
+ "star": 527,
+ "commits": 429,
+ "modify_time": "2019-10-21 16:47:10",
+ "last_release": "v0.1.8",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/construct/construct",
+ "star": 527,
+ "commits": 1543,
+ "modify_time": "2019-09-22 13:38:53",
+ "last_release": "v2.9.46",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/1998lixin/hardwarecode",
+ "star": 527,
+ "commits": 5,
+ "modify_time": "2019-09-11 07:09:05",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/asLody/AndHook",
+ "star": 526,
+ "commits": 118,
+ "modify_time": "2019-05-30 03:49:46",
+ "last_release": "v3.6.2",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/nmap/ncrack",
+ "star": 526,
+ "commits": 913,
+ "modify_time": "2019-11-26 02:07:13",
+ "last_release": "0.7",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ihack4falafel/oscp",
+ "star": 526,
+ "commits": 142,
+ "modify_time": "2018-02-22 21:05:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hdm/mac-ages",
+ "star": 526,
+ "commits": 431,
+ "modify_time": "2019-12-10 05:01:04",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/file/file",
+ "star": 526,
+ "commits": 3542,
+ "modify_time": "2019-12-08 18:22:24",
+ "last_release": "\n FILE5_37\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hackappcom/iloot",
+ "star": 525,
+ "commits": 87,
+ "modify_time": "2016-01-12 05:10:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dark-lbp/isf",
+ "star": 525,
+ "commits": 67,
+ "modify_time": "2019-03-22 00:05:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/danielkrupinski/osiris",
+ "star": 525,
+ "commits": 3431,
+ "modify_time": "2019-12-07 17:30:52",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/angorafuzzer/angora",
+ "star": 525,
+ "commits": 148,
+ "modify_time": "2019-09-18 15:19:38",
+ "last_release": "1.2.2",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/hatboy/pcap-analyzer",
+ "star": 524,
+ "commits": 29,
+ "modify_time": "2019-11-14 02:46:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gojhonny/credcrack",
+ "star": 524,
+ "commits": 33,
+ "modify_time": "2017-04-18 13:28:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cyberman54/esp32-paxcounter",
+ "star": 524,
+ "commits": 2007,
+ "modify_time": "2019-12-08 14:33:06",
+ "last_release": "v1.9.6",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/bonzaithepenguin/loading",
+ "star": 524,
+ "commits": 65,
+ "modify_time": "2015-06-05 19:21:11",
+ "last_release": "1.2.4",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/zhongyiio/crack-geetest",
+ "star": 523,
+ "commits": 15,
+ "modify_time": "2017-03-08 15:13:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ypeleg/hungabunga",
+ "star": 523,
+ "commits": 38,
+ "modify_time": "2019-09-21 09:41:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/swdunlop/andbug",
+ "star": 523,
+ "commits": 170,
+ "modify_time": "2014-10-12 23:54:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/reflex-frp/reflex-platform",
+ "star": 523,
+ "commits": 2356,
+ "modify_time": "2019-12-09 19:10:38",
+ "last_release": "",
+ "lang": "Nix"
+ },
+ {
+ "link": "https://github.com/metachar/phonesploit",
+ "star": 523,
+ "commits": 51,
+ "modify_time": "2019-06-30 20:33:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lunixbochs/patchkit",
+ "star": 523,
+ "commits": 36,
+ "modify_time": "2018-01-10 13:49:58",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jondonym/peinjector",
+ "star": 523,
+ "commits": 24,
+ "modify_time": "2016-05-11 14:22:13",
+ "last_release": "1.0.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/trufflesuite/drizzle-legacy",
+ "star": 522,
+ "commits": 365,
+ "modify_time": "2019-09-27 07:20:24",
+ "last_release": "1.4.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/wooyundota/droidsslunpinning",
+ "star": 522,
+ "commits": 36,
+ "modify_time": "2019-08-22 08:49:32",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/willf/bitset",
+ "star": 522,
+ "commits": 233,
+ "modify_time": "2019-09-10 01:39:32",
+ "last_release": "v1.1.10",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/seemoo-lab/mobisys2018_nexmon_software_defined_radio",
+ "star": 522,
+ "commits": 12,
+ "modify_time": "2018-04-17 06:21:46",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/limboemu/limbo",
+ "star": 522,
+ "commits": 393,
+ "modify_time": "2019-05-21 18:55:59",
+ "last_release": "v4.1.0-LimboEmulator",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/wubingzheng/memleax",
+ "star": 521,
+ "commits": 111,
+ "modify_time": "2018-11-03 07:46:22",
+ "last_release": "v1.1.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/mrluanma/shadowsocks-heroku",
+ "star": 521,
+ "commits": 82,
+ "modify_time": "2019-03-06 01:56:24",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/luadist/luajit",
+ "star": 521,
+ "commits": 1543,
+ "modify_time": "2014-04-22 11:31:47",
+ "last_release": "\n 2.0.3\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jseidl/goldeneye",
+ "star": 521,
+ "commits": 21,
+ "modify_time": "2018-06-20 10:08:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/trailofbits/twa",
+ "star": 520,
+ "commits": 90,
+ "modify_time": "2019-11-05 23:12:58",
+ "last_release": "1.8.0",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/sensepost/gowitness",
+ "star": 520,
+ "commits": 95,
+ "modify_time": "2019-12-10 04:53:37",
+ "last_release": "1.3.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/mhaggis/sysmon-dfir",
+ "star": 520,
+ "commits": 54,
+ "modify_time": "2019-11-11 18:00:49",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/kismetwireless/kismet",
+ "star": 520,
+ "commits": 9133,
+ "modify_time": "2019-12-09 02:05:41",
+ "last_release": "\n kismet-2019-09-R1\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/xapax/security",
+ "star": 519,
+ "commits": 1908,
+ "modify_time": "2018-05-19 06:44:47",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/te-k/harpoon",
+ "star": 519,
+ "commits": 207,
+ "modify_time": "2019-12-10 00:35:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/r00t-3xp10it/venom",
+ "star": 519,
+ "commits": 167,
+ "modify_time": "2019-12-09 18:23:44",
+ "last_release": "v1.0.15",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/jire/charlatano",
+ "star": 519,
+ "commits": 523,
+ "modify_time": "2019-10-06 17:49:04",
+ "last_release": "1.0.11",
+ "lang": "Kotlin"
+ },
+ {
+ "link": "https://github.com/gyoisamurai/gyoithon",
+ "star": 519,
+ "commits": 391,
+ "modify_time": "2019-12-03 00:45:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/blastrock/pkgj",
+ "star": 519,
+ "commits": 553,
+ "modify_time": "2019-07-21 21:26:58",
+ "last_release": "v0.51",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/unode/firefox_decrypt",
+ "star": 518,
+ "commits": 185,
+ "modify_time": "2019-10-04 12:45:10",
+ "last_release": "\n 0.7.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/schutzwerk/canalyzat0r",
+ "star": 518,
+ "commits": 23,
+ "modify_time": "2019-11-20 07:45:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/opensec-cn/vtest",
+ "star": 518,
+ "commits": 30,
+ "modify_time": "2019-07-21 13:39:51",
+ "last_release": "v1.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kohler/click",
+ "star": 518,
+ "commits": 10828,
+ "modify_time": "2019-05-02 11:27:59",
+ "last_release": "\n v2.0.1\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/java-deobfuscator/deobfuscator",
+ "star": 518,
+ "commits": 84,
+ "modify_time": "2019-08-19 04:15:48",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/mr-un1k0d3r/thundershell",
+ "star": 517,
+ "commits": 323,
+ "modify_time": "2019-10-20 20:09:18",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/marshall/logcat-color",
+ "star": 517,
+ "commits": 50,
+ "modify_time": "2017-03-14 16:49:53",
+ "last_release": "v0.7.0preview",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/duyetdev/bruteforce-database",
+ "star": 517,
+ "commits": 76,
+ "modify_time": "2019-09-08 08:20:42",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/a-min3/winspect",
+ "star": 517,
+ "commits": 39,
+ "modify_time": "2019-01-09 12:56:56",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/superkojiman/onetwopunch",
+ "star": 516,
+ "commits": 17,
+ "modify_time": "2018-06-08 00:18:54",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/mr-un1k0d3r/maliciousmacrogenerator",
+ "star": 516,
+ "commits": 124,
+ "modify_time": "2019-04-17 19:47:37",
+ "last_release": "",
+ "lang": "Visual Basic .NET"
+ },
+ {
+ "link": "https://github.com/slince/spike",
+ "star": 515,
+ "commits": 48,
+ "modify_time": "2018-08-22 09:12:56",
+ "last_release": "\n 0.1.1\n ",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/project-imas/mdm-server",
+ "star": 515,
+ "commits": 133,
+ "modify_time": "2015-01-15 21:00:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pjebs/obfuscator-ios",
+ "star": 515,
+ "commits": 7,
+ "modify_time": "2016-10-27 21:45:48",
+ "last_release": "\n v2.0.0\n ",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/pagekite/pypagekite",
+ "star": 515,
+ "commits": 1371,
+ "modify_time": "2019-11-26 17:49:29",
+ "last_release": "v1.5.0.191126",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/megatronking/stringfog",
+ "star": 515,
+ "commits": 94,
+ "modify_time": "2019-09-10 15:14:12",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/maddiestone/androidappre",
+ "star": 515,
+ "commits": 35,
+ "modify_time": "2019-12-05 12:50:50",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/libnet/libnet",
+ "star": 514,
+ "commits": 733,
+ "modify_time": "2019-11-02 10:53:47",
+ "last_release": "v1.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/moll/node-mitm",
+ "star": 514,
+ "commits": 181,
+ "modify_time": "2019-12-09 12:31:45",
+ "last_release": "\n v1.7.0\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/jesparza/peepdf",
+ "star": 514,
+ "commits": 216,
+ "modify_time": "2016-11-17 21:30:21",
+ "last_release": "\n peepdf-0.3\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/heroku/vegur",
+ "star": 514,
+ "commits": 630,
+ "modify_time": "2019-01-29 00:32:54",
+ "last_release": "\n 2.0.6\n ",
+ "lang": "Erlang"
+ },
+ {
+ "link": "https://github.com/fbessez/tinder",
+ "star": 514,
+ "commits": 119,
+ "modify_time": "2019-02-05 16:14:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mattzeunert/fromjs",
+ "star": 513,
+ "commits": 2236,
+ "modify_time": "2019-01-21 10:07:40",
+ "last_release": "\n v2.2.3\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/cryptogenic/ps4-4.05-kernel-exploit",
+ "star": 513,
+ "commits": 6,
+ "modify_time": "2018-03-05 18:47:16",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/decaf-project/DECAF",
+ "star": 512,
+ "commits": 156,
+ "modify_time": "2019-08-06 19:51:40",
+ "last_release": "v1.91",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/S3cur3Th1sSh1t/WinPwn",
+ "star": 512,
+ "commits": 216,
+ "modify_time": "2019-11-27 13:49:27",
+ "last_release": "1.3",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/FortyNorthSecurity/Just-Metadata",
+ "star": 511,
+ "commits": 127,
+ "modify_time": "2019-03-07 20:38:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/shuax/greenchrome",
+ "star": 511,
+ "commits": 133,
+ "modify_time": "2019-07-22 09:39:52",
+ "last_release": "v5.9.0",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/rub-nds/tls-attacker",
+ "star": 511,
+ "commits": 4337,
+ "modify_time": "2019-11-11 17:10:39",
+ "last_release": "3.3.1",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/michaelgrafnetter/dsinternals",
+ "star": 511,
+ "commits": 296,
+ "modify_time": "2019-12-09 21:40:59",
+ "last_release": "v4.0",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/larryli/putty",
+ "star": 511,
+ "commits": 4738,
+ "modify_time": "2017-08-22 02:59:01",
+ "last_release": "portable-putty-0.70cn",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/no-github/digital-privacy",
+ "star": 510,
+ "commits": 24,
+ "modify_time": "2019-11-13 13:43:03",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/mrash/fwknop",
+ "star": 510,
+ "commits": 2646,
+ "modify_time": "2019-12-09 01:23:19",
+ "last_release": "\n 2.6.11-pre1\n ",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/miki151/keeperrl",
+ "star": 510,
+ "commits": 4191,
+ "modify_time": "2019-12-03 04:57:05",
+ "last_release": "alpha29",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/robindavid/lsb-steganography",
+ "star": 509,
+ "commits": 22,
+ "modify_time": "2018-02-13 16:53:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/reyammer/shellnoob",
+ "star": 509,
+ "commits": 30,
+ "modify_time": "2017-04-25 00:21:14",
+ "last_release": "\n v2.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nurupo/rootkit",
+ "star": 509,
+ "commits": 9,
+ "modify_time": "2019-07-05 08:43:38",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/mthbernardes/gtrs",
+ "star": 509,
+ "commits": 9,
+ "modify_time": "2018-12-25 22:51:24",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/xmrig/xmrig-nvidia",
+ "star": 508,
+ "commits": 353,
+ "modify_time": "2019-08-31 02:06:23",
+ "last_release": "v2.14.5",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/sjvasquez/web-traffic-forecasting",
+ "star": 508,
+ "commits": 6,
+ "modify_time": "2018-01-17 04:02:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/samyk/opensesame",
+ "star": 508,
+ "commits": 10,
+ "modify_time": "2018-04-02 04:39:33",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/platomav/meanalyzer",
+ "star": 508,
+ "commits": 154,
+ "modify_time": "2019-11-04 14:21:40",
+ "last_release": "r182",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bryansharp/hibeaver",
+ "star": 508,
+ "commits": 127,
+ "modify_time": "2019-10-15 08:23:56",
+ "last_release": "1.2.7",
+ "lang": "Groovy"
+ },
+ {
+ "link": "https://github.com/IDArlingTeam/IDArling",
+ "star": 507,
+ "commits": 329,
+ "modify_time": "2019-01-26 19:22:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mozillasecurity/funfuzz",
+ "star": 507,
+ "commits": 6187,
+ "modify_time": "2019-12-07 07:20:17",
+ "last_release": "0.6.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/certtools/intelmq",
+ "star": 507,
+ "commits": 5662,
+ "modify_time": "2019-12-05 10:24:46",
+ "last_release": "2.1.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rabbitstack/fibratus",
+ "star": 506,
+ "commits": 475,
+ "modify_time": "2019-07-23 10:31:38",
+ "last_release": "v0.7.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nettitude/xss_payloads",
+ "star": 506,
+ "commits": 29,
+ "modify_time": "2019-08-09 13:15:34",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/iovisor/ply",
+ "star": 506,
+ "commits": 322,
+ "modify_time": "2019-05-17 18:24:46",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/delight-im/php-auth",
+ "star": 506,
+ "commits": 436,
+ "modify_time": "2019-07-28 15:44:37",
+ "last_release": "\n v8.1.0\n ",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/theresafewconors/sooty",
+ "star": 505,
+ "commits": 208,
+ "modify_time": "2019-12-06 15:03:59",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mindedsecurity/jstillery",
+ "star": 505,
+ "commits": 65,
+ "modify_time": "2019-04-22 15:41:59",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/happylishang/cacheemulatorchecker",
+ "star": 505,
+ "commits": 39,
+ "modify_time": "2019-07-31 02:30:28",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/greenbone/openvas",
+ "star": 504,
+ "commits": 2756,
+ "modify_time": "2019-12-10 07:41:16",
+ "last_release": "v7.0.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/trustinsoft/tis-interpreter",
+ "star": 504,
+ "commits": 95,
+ "modify_time": "2016-12-14 10:25:56",
+ "last_release": "",
+ "lang": "OCaml"
+ },
+ {
+ "link": "https://github.com/timothyye/godns",
+ "star": 504,
+ "commits": 283,
+ "modify_time": "2019-09-26 02:10:51",
+ "last_release": "V1.9.3",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/mutability/dump1090",
+ "star": 504,
+ "commits": 1066,
+ "modify_time": "2019-09-14 08:22:14",
+ "last_release": "v1.14",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/nsacyber/GRASSMARLIN",
+ "star": 503,
+ "commits": 23,
+ "modify_time": "2017-08-04 12:55:49",
+ "last_release": "v3.3Beta3",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/google/ktsan",
+ "star": 503,
+ "commits": 857678,
+ "modify_time": "2018-12-28 02:41:05",
+ "last_release": "\n kcsan-20191125\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/andrivet/advobfuscator",
+ "star": 502,
+ "commits": 54,
+ "modify_time": "2017-09-03 22:38:45",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/kevva/wifi-password",
+ "star": 502,
+ "commits": 57,
+ "modify_time": "2017-06-21 09:15:26",
+ "last_release": "\n v3.0.1\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/cyberark/summon",
+ "star": 502,
+ "commits": 248,
+ "modify_time": "2019-09-20 18:38:23",
+ "last_release": "v0.8.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/storyyeller/enjarify",
+ "star": 502,
+ "commits": 77,
+ "modify_time": "2019-11-03 19:07:22",
+ "last_release": "\n 1.0.3\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lowleveldesign/wtrace",
+ "star": 502,
+ "commits": 80,
+ "modify_time": "2019-03-14 08:24:54",
+ "last_release": "2.2",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/lijiejie/ds_store_exp",
+ "star": 502,
+ "commits": 7,
+ "modify_time": "2019-05-06 03:20:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/chybeta/cmspoc",
+ "star": 502,
+ "commits": 85,
+ "modify_time": "2018-03-02 06:40:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/byt3bl33d3r/sprayingtoolkit",
+ "star": 502,
+ "commits": 48,
+ "modify_time": "2019-10-03 20:47:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/shadowsocks/shadowsocks-org",
+ "star": 501,
+ "commits": 284,
+ "modify_time": "2019-12-05 00:46:22",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/owasp/wstg",
+ "star": 501,
+ "commits": 276,
+ "modify_time": "2019-11-21 14:48:48",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/OWASP/wstg",
+ "star": 501,
+ "commits": 276,
+ "modify_time": "2019-11-21 14:48:48",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/genuinetools/amicontained",
+ "star": 501,
+ "commits": 96,
+ "modify_time": "2019-11-20 05:34:26",
+ "last_release": "v0.4.9",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/stefanscherer/packer-windows",
+ "star": 500,
+ "commits": 1164,
+ "modify_time": "2019-11-16 18:00:19",
+ "last_release": "2019.11.15",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/sindresorhus/public-ip",
+ "star": 500,
+ "commits": 75,
+ "modify_time": "2019-11-22 07:15:19",
+ "last_release": "v4.0.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/nowsecure/fsmon",
+ "star": 500,
+ "commits": 83,
+ "modify_time": "2019-03-05 09:56:00",
+ "last_release": "1.6.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/gaffe23/linux-inject",
+ "star": 500,
+ "commits": 100,
+ "modify_time": "2016-09-06 21:09:20",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/Acmesec/PoCBox",
+ "star": 499,
+ "commits": 19,
+ "modify_time": "2019-09-29 07:23:13",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/huawei/huawei_liteos_kernel",
+ "star": 499,
+ "commits": 5,
+ "modify_time": "2017-01-16 01:57:05",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/google/science-journal-ios",
+ "star": 499,
+ "commits": 314,
+ "modify_time": "2019-12-03 22:35:20",
+ "last_release": "",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/chainsdd/superuser",
+ "star": 499,
+ "commits": 381,
+ "modify_time": "2012-11-20 20:54:21",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/awslabs/aws-security-benchmark",
+ "star": 499,
+ "commits": 123,
+ "modify_time": "2019-09-13 23:33:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xrkk/awesome-ida",
+ "star": 498,
+ "commits": 9,
+ "modify_time": "2019-11-25 05:35:13",
+ "last_release": "20191125",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/tp4a/teleport",
+ "star": 498,
+ "commits": 519,
+ "modify_time": "2019-04-02 06:48:22",
+ "last_release": "v3.1.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xoreaxeaxeax/repsych",
+ "star": 498,
+ "commits": 10,
+ "modify_time": "2015-12-31 12:10:12",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/vector35/deprecated-binaryninja-python",
+ "star": 498,
+ "commits": 13,
+ "modify_time": "2016-05-13 12:50:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kirschju/demovfuscator",
+ "star": 498,
+ "commits": 16,
+ "modify_time": "2019-03-20 16:20:56",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/govolution/betterdefaultpasslist",
+ "star": 498,
+ "commits": 76,
+ "modify_time": "2019-10-10 10:20:32",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ghughes/fruitstrap",
+ "star": 498,
+ "commits": 20,
+ "modify_time": "2012-09-12 00:46:39",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ernw/hardening",
+ "star": 498,
+ "commits": 9,
+ "modify_time": "2019-04-17 12:40:08",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/danielbohannon/invoke-cradlecrafter",
+ "star": 498,
+ "commits": 19,
+ "modify_time": "2018-03-05 15:45:37",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/android-rooting-tools/android_run_root_shell",
+ "star": 498,
+ "commits": 222,
+ "modify_time": "2016-11-08 06:59:03",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/stamusnetworks/selks",
+ "star": 497,
+ "commits": 386,
+ "modify_time": "2019-04-17 14:01:37",
+ "last_release": "selks-4.0",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/rbei-etas/busmaster",
+ "star": 497,
+ "commits": 1120,
+ "modify_time": "2017-10-30 11:50:45",
+ "last_release": "v3.2.2",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/nyan-x-cat/lime-rat",
+ "star": 497,
+ "commits": 218,
+ "modify_time": "2019-06-24 16:52:44",
+ "last_release": "v0.1.9.2",
+ "lang": "Visual Basic .NET"
+ },
+ {
+ "link": "https://github.com/netbiosx/checklists",
+ "star": 497,
+ "commits": 153,
+ "modify_time": "2019-11-13 13:40:39",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/m0nad/diamorphine",
+ "star": 497,
+ "commits": 28,
+ "modify_time": "2019-10-23 18:40:36",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/landgrey/webshell-detect-bypass",
+ "star": 497,
+ "commits": 12,
+ "modify_time": "2019-05-05 16:26:25",
+ "last_release": "",
+ "lang": "ASP"
+ },
+ {
+ "link": "https://github.com/akiver/csgo-demos-manager",
+ "star": 496,
+ "commits": 910,
+ "modify_time": "2019-11-18 03:15:06",
+ "last_release": "v2.13.11",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/xairy/vmware-exploitation",
+ "star": 496,
+ "commits": 10,
+ "modify_time": "2019-10-22 21:56:26",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/triaquae/crazyeye",
+ "star": 496,
+ "commits": 80,
+ "modify_time": "2017-08-24 01:14:45",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/rptec/squid-pac",
+ "star": 496,
+ "commits": 94,
+ "modify_time": "2017-10-31 07:20:19",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/r0hi7/binexp",
+ "star": 496,
+ "commits": 64,
+ "modify_time": "2019-11-18 04:38:06",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/nologic/idaref",
+ "star": 496,
+ "commits": 99,
+ "modify_time": "2018-12-12 04:21:42",
+ "last_release": "",
+ "lang": "PLpgSQL"
+ },
+ {
+ "link": "https://github.com/honze-net/nmap-bootstrap-xsl",
+ "star": 496,
+ "commits": 23,
+ "modify_time": "2018-11-12 15:22:52",
+ "last_release": "",
+ "lang": "XSLT"
+ },
+ {
+ "link": "https://github.com/anestisb/vdexextractor",
+ "star": 496,
+ "commits": 298,
+ "modify_time": "2019-12-07 08:44:11",
+ "last_release": "\n 0.5.2\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/manoelt/50m_ctf_writeup",
+ "star": 495,
+ "commits": 16,
+ "modify_time": "2019-03-29 16:38:18",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/initstring/dirty_sock",
+ "star": 495,
+ "commits": 15,
+ "modify_time": "2019-05-09 21:34:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/c0ny1/upload-fuzz-dic-builder",
+ "star": 495,
+ "commits": 7,
+ "modify_time": "2018-11-06 02:45:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tengzhangchao/sec-box",
+ "star": 494,
+ "commits": 7,
+ "modify_time": "2017-06-13 02:13:15",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/nzedb/nzedb",
+ "star": 494,
+ "commits": 16300,
+ "modify_time": "2019-10-08 05:05:34",
+ "last_release": "\n v0.8.20.0\n ",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/evilsocket/sg1",
+ "star": 494,
+ "commits": 127,
+ "modify_time": "2017-12-24 13:54:02",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/cossacklabs/acra",
+ "star": 494,
+ "commits": 661,
+ "modify_time": "2019-12-06 16:40:20",
+ "last_release": "0.85.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/susers/writeups",
+ "star": 493,
+ "commits": 135,
+ "modify_time": "2019-08-26 06:10:59",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/rezasp/joomscan",
+ "star": 493,
+ "commits": 71,
+ "modify_time": "2019-10-02 14:22:55",
+ "last_release": "0.0.7",
+ "lang": "Perl 6"
+ },
+ {
+ "link": "https://github.com/offensivepython/nscan",
+ "star": 493,
+ "commits": 89,
+ "modify_time": "2015-02-23 08:48:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hasherezade/demos",
+ "star": 493,
+ "commits": 133,
+ "modify_time": "2019-11-10 21:02:11",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/sergey-pronin/Awesome-Vulnerability-Research",
+ "star": 492,
+ "commits": 69,
+ "modify_time": "2017-08-10 11:12:10",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/danigargu/heap-viewer",
+ "star": 492,
+ "commits": 57,
+ "modify_time": "2019-05-28 17:34:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nahamsec/resources-for-beginner-bug-bounty-hunters",
+ "star": 491,
+ "commits": 20,
+ "modify_time": "2019-12-02 19:34:26",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/yangyangwithgnu/bypass_disablefunc_via_ld_preload",
+ "star": 491,
+ "commits": 28,
+ "modify_time": "2019-01-21 01:55:33",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/wetw0rk/sickle",
+ "star": 491,
+ "commits": 68,
+ "modify_time": "2019-11-27 02:42:10",
+ "last_release": "v2.0.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/scottbez1/splitflap",
+ "star": 491,
+ "commits": 394,
+ "modify_time": "2019-11-21 16:49:43",
+ "last_release": "v0.5",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/powershellmafia/cimsweep",
+ "star": 491,
+ "commits": 129,
+ "modify_time": "2017-09-18 23:09:32",
+ "last_release": "v0.6.1.1",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/maddiestone/idapythonembeddedtoolkit",
+ "star": 491,
+ "commits": 26,
+ "modify_time": "2019-08-14 03:18:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/iddoeldor/frida-snippets",
+ "star": 491,
+ "commits": 204,
+ "modify_time": "2019-11-28 13:18:24",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/TypeError/domained",
+ "star": 490,
+ "commits": 74,
+ "modify_time": "2019-11-25 14:13:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/turbo/kpti-poc-collection",
+ "star": 490,
+ "commits": 5,
+ "modify_time": "2018-01-04 00:19:08",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/trimstray/multitor",
+ "star": 490,
+ "commits": 428,
+ "modify_time": "2019-11-15 08:14:53",
+ "last_release": "\n v1.3.0\n ",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/kaich/codeobscure",
+ "star": 490,
+ "commits": 96,
+ "modify_time": "2019-09-29 09:04:45",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/bitly/simplehttp",
+ "star": 489,
+ "commits": 370,
+ "modify_time": "2013-08-23 20:39:37",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/yanxiu0614/subdomain3",
+ "star": 489,
+ "commits": 73,
+ "modify_time": "2019-09-24 06:45:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tihmstar/tsschecker",
+ "star": 489,
+ "commits": 301,
+ "modify_time": "2019-11-16 07:18:33",
+ "last_release": "300",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/secabstraction/powercat",
+ "star": 489,
+ "commits": 132,
+ "modify_time": "2017-05-01 23:25:45",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/mikeryan/crackle",
+ "star": 489,
+ "commits": 104,
+ "modify_time": "2018-08-11 00:59:41",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/leonteale/pentestpackage",
+ "star": 489,
+ "commits": 142,
+ "modify_time": "2018-10-09 14:11:19",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/jiayy/android_vuln_poc-exp",
+ "star": 489,
+ "commits": 40,
+ "modify_time": "2019-11-27 04:23:37",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/insecurityofthings/jackit",
+ "star": 489,
+ "commits": 179,
+ "modify_time": "2019-02-15 21:47:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/b-mueller/android_app_security_checklist",
+ "star": 489,
+ "commits": 35,
+ "modify_time": "2018-01-17 09:29:03",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/arminc/clair-scanner",
+ "star": 489,
+ "commits": 99,
+ "modify_time": "2019-12-02 13:05:27",
+ "last_release": "v12",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/alexhude/uemu",
+ "star": 489,
+ "commits": 14,
+ "modify_time": "2019-12-08 10:11:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/trailofbits/deepstate",
+ "star": 488,
+ "commits": 852,
+ "modify_time": "2019-12-09 19:57:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/infodox/python-pty-shells",
+ "star": 488,
+ "commits": 17,
+ "modify_time": "2014-07-28 09:35:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gen2brain/cam2ip",
+ "star": 488,
+ "commits": 60,
+ "modify_time": "2019-10-06 19:46:23",
+ "last_release": "1.6",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/dafthack/domainpasswordspray",
+ "star": 488,
+ "commits": 47,
+ "modify_time": "2018-11-20 16:49:53",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/attify/firmware-analysis-toolkit",
+ "star": 488,
+ "commits": 20,
+ "modify_time": "2018-07-08 08:22:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sidaf/homebrew-pentest",
+ "star": 487,
+ "commits": 225,
+ "modify_time": "2019-02-04 10:11:33",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/psiphon-labs/psiphon-tunnel-core",
+ "star": 487,
+ "commits": 2954,
+ "modify_time": "2019-12-04 23:45:07",
+ "last_release": "v2.0.9",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/nfc-tools/mfcuk",
+ "star": 487,
+ "commits": 62,
+ "modify_time": "2018-07-14 04:14:00",
+ "last_release": "\n mfcuk-0.3.8\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/mandatoryprogrammer/sonar.js",
+ "star": 487,
+ "commits": 81,
+ "modify_time": "2015-09-08 00:49:15",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/kpcyrd/sn0int",
+ "star": 487,
+ "commits": 576,
+ "modify_time": "2019-11-23 20:09:20",
+ "last_release": "v0.14.0",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/ctxis/cape",
+ "star": 487,
+ "commits": 1761,
+ "modify_time": "2019-11-29 10:32:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cfreal/exploits",
+ "star": 487,
+ "commits": 14,
+ "modify_time": "2019-06-27 11:30:27",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/wonderkun/ctf_web",
+ "star": 486,
+ "commits": 144,
+ "modify_time": "2019-07-02 12:23:04",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/shawarkhanethicalhacker/brutexss",
+ "star": 486,
+ "commits": null,
+ "modify_time": "2018-07-11 06:44:49",
+ "last_release": "",
+ "lang": "python"
+ },
+ {
+ "link": "https://github.com/khalilbijjou/wafninja",
+ "star": 486,
+ "commits": 25,
+ "modify_time": "2017-12-06 10:55:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/evanmiller/hecate",
+ "star": 486,
+ "commits": 122,
+ "modify_time": "2019-01-10 02:22:53",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/fcavallarin/htcap",
+ "star": 485,
+ "commits": 130,
+ "modify_time": "2019-10-18 13:37:53",
+ "last_release": "1.1.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/theofficialflow/nonpdrm",
+ "star": 485,
+ "commits": 18,
+ "modify_time": "2019-02-21 06:46:43",
+ "last_release": "v1.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/radareorg/awesome-radare2",
+ "star": 485,
+ "commits": 30,
+ "modify_time": "2019-10-30 10:48:46",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/projectacrn/acrn-hypervisor",
+ "star": 485,
+ "commits": 4516,
+ "modify_time": "2019-12-01 22:01:02",
+ "last_release": "acrn-2019w47.1-140000p",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/lmy375/awesome-vmp",
+ "star": 485,
+ "commits": 6,
+ "modify_time": "2018-08-02 06:34:37",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/hugetiny/awesome-vpn",
+ "star": 485,
+ "commits": 38,
+ "modify_time": "2019-11-06 05:46:40",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/zdresearch/OWASP-ZSC",
+ "star": 484,
+ "commits": 314,
+ "modify_time": "2018-04-24 15:05:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xyuanmu/xx-mini",
+ "star": 484,
+ "commits": 89,
+ "modify_time": "2018-05-28 03:24:00",
+ "last_release": "1.3.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/netflix-skunkworks/diffy",
+ "star": 484,
+ "commits": 251,
+ "modify_time": "2019-12-03 17:47:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gorilla/csrf",
+ "star": 484,
+ "commits": 92,
+ "modify_time": "2019-10-08 02:23:26",
+ "last_release": "v1.6.2",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/CE-Programming/CEmu",
+ "star": 483,
+ "commits": 2070,
+ "modify_time": "2019-11-27 01:49:25",
+ "last_release": "v1.3",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/erevus-cn/pocscan",
+ "star": 483,
+ "commits": 69,
+ "modify_time": "2016-07-08 02:42:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/emilbayes/secure-password",
+ "star": 483,
+ "commits": 38,
+ "modify_time": "2018-09-03 17:16:32",
+ "last_release": "\n v3.1.0\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/armissecurity/blueborne",
+ "star": 483,
+ "commits": 19,
+ "modify_time": "2017-12-07 15:43:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zhuzhichao/ip-location-zh",
+ "star": 482,
+ "commits": 76,
+ "modify_time": "2019-11-14 05:45:12",
+ "last_release": "v2.4.4",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/r35tart/rw_password",
+ "star": 482,
+ "commits": 12,
+ "modify_time": "2019-04-01 06:24:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/microsoft/symcrypt",
+ "star": 482,
+ "commits": 34,
+ "modify_time": "2019-09-13 23:06:47",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/iti/ics-security-tools",
+ "star": 482,
+ "commits": 202,
+ "modify_time": "2019-12-04 18:11:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gofetchad/gofetch",
+ "star": 482,
+ "commits": 37,
+ "modify_time": "2017-06-20 14:15:10",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/craigz28/firmwalker",
+ "star": 482,
+ "commits": 99,
+ "modify_time": "2019-01-23 01:47:08",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/continuumsecurity/bdd-security",
+ "star": 482,
+ "commits": 402,
+ "modify_time": "2018-08-08 13:44:51",
+ "last_release": "v2.2",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/yassineaboukir/sublert",
+ "star": 481,
+ "commits": 63,
+ "modify_time": "2019-11-06 12:19:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/realjtg/meltdown",
+ "star": 481,
+ "commits": 9,
+ "modify_time": "2018-01-09 15:39:37",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/nongiach/sudo_inject",
+ "star": 481,
+ "commits": 61,
+ "modify_time": "2019-04-14 07:43:34",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/limpkin/mooltipass",
+ "star": 481,
+ "commits": 3906,
+ "modify_time": "2019-08-07 13:59:21",
+ "last_release": "v1.2_mini",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/tornaco/x-apm",
+ "star": 480,
+ "commits": 1735,
+ "modify_time": "2019-10-22 12:51:44",
+ "last_release": "5.2.8",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/lgandx/poc",
+ "star": 480,
+ "commits": 2,
+ "modify_time": "2017-02-01 22:48:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/joychou93/java-sec-code",
+ "star": 480,
+ "commits": 122,
+ "modify_time": "2019-12-09 14:56:39",
+ "last_release": "v1.0.1",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/icepa/icepa",
+ "star": 480,
+ "commits": 67,
+ "modify_time": "2018-09-10 15:13:51",
+ "last_release": "",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/chmorgan/sharppcap",
+ "star": 480,
+ "commits": 593,
+ "modify_time": "2019-10-26 01:20:08",
+ "last_release": "SharpPcap_4_3_0",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/chef-koch/regtweaks",
+ "star": 480,
+ "commits": 1059,
+ "modify_time": "2019-12-08 00:46:00",
+ "last_release": "",
+ "lang": "Batchfile"
+ },
+ {
+ "link": "https://github.com/vincentchanx/shadowsocks-over-websocket",
+ "star": 479,
+ "commits": 19,
+ "modify_time": "2017-04-17 08:35:47",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/chengdedeng/waf",
+ "star": 479,
+ "commits": 199,
+ "modify_time": "2019-04-20 15:35:42",
+ "last_release": "\n 2.0.0\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/bishopfox/bfinject",
+ "star": 479,
+ "commits": 75,
+ "modify_time": "2018-02-07 20:52:19",
+ "last_release": "",
+ "lang": "Objective-C++"
+ },
+ {
+ "link": "https://github.com/bashfuscator/bashfuscator",
+ "star": 479,
+ "commits": 323,
+ "modify_time": "2019-09-18 03:01:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/aoii103/darknet_chinesetrading",
+ "star": 479,
+ "commits": 74,
+ "modify_time": "2019-11-07 03:25:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/opengenus/quark",
+ "star": 478,
+ "commits": 199,
+ "modify_time": "2019-10-15 15:04:01",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/mikesplain/openvas-docker",
+ "star": 478,
+ "commits": 334,
+ "modify_time": "2019-04-04 13:05:54",
+ "last_release": "",
+ "lang": "Dockerfile"
+ },
+ {
+ "link": "https://github.com/koto/xsschef",
+ "star": 478,
+ "commits": 132,
+ "modify_time": "2018-10-12 19:57:14",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/tandasat/ddimon",
+ "star": 477,
+ "commits": 46,
+ "modify_time": "2018-09-22 04:52:40",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/pjlantz/droidbox",
+ "star": 477,
+ "commits": 58,
+ "modify_time": "2017-10-19 20:35:28",
+ "last_release": "v4.1.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ehrishirajsharma/swiftnessx",
+ "star": 477,
+ "commits": 83,
+ "modify_time": "2019-07-19 06:17:32",
+ "last_release": "v0.2.3",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/yinqiwen/gsnova",
+ "star": 476,
+ "commits": 145,
+ "modify_time": "2018-08-11 11:40:13",
+ "last_release": "latest",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/xillwillx/skiptracer",
+ "star": 476,
+ "commits": 122,
+ "modify_time": "2019-08-26 12:54:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xiangpasama/jdsrc-small-classroom",
+ "star": 476,
+ "commits": 26,
+ "modify_time": "2019-11-11 07:52:18",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/wagiro/burpbounty",
+ "star": 476,
+ "commits": 138,
+ "modify_time": "2019-11-06 15:27:39",
+ "last_release": "BurpBounty_v3.0.6beta",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/viruscamp/luadec",
+ "star": 476,
+ "commits": 219,
+ "modify_time": "2017-01-06 12:43:51",
+ "last_release": "",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/ksluckow/awesome-symbolic-execution",
+ "star": 476,
+ "commits": 12,
+ "modify_time": "2018-08-12 07:49:54",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/hunters-forge/mordor",
+ "star": 475,
+ "commits": 295,
+ "modify_time": "2019-12-06 21:13:02",
+ "last_release": "0.0.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zed-0xff/zsteg",
+ "star": 475,
+ "commits": 70,
+ "modify_time": "2014-03-01 20:44:53",
+ "last_release": "\n v0.1.2\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/tlaster/yourav",
+ "star": 475,
+ "commits": 15,
+ "modify_time": "2017-09-05 02:14:51",
+ "last_release": "1.01",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/ring0lab/catphish",
+ "star": 475,
+ "commits": 44,
+ "modify_time": "2017-11-11 05:04:36",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/nanshihui/scan-t",
+ "star": 475,
+ "commits": 386,
+ "modify_time": "2018-08-14 09:27:47",
+ "last_release": "0.1.3",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jessek/hashdeep",
+ "star": 475,
+ "commits": 655,
+ "modify_time": "2017-08-24 15:51:32",
+ "last_release": "\n v4.3\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/rastapasta/pokemon-go-mitm",
+ "star": 474,
+ "commits": 240,
+ "modify_time": "2016-09-06 00:32:03",
+ "last_release": "v2.1",
+ "lang": "CoffeeScript"
+ },
+ {
+ "link": "https://github.com/staz0t/hashcatch",
+ "star": 474,
+ "commits": 51,
+ "modify_time": "2019-09-21 03:44:33",
+ "last_release": "1.2",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/4w4k3/beelogger",
+ "star": 474,
+ "commits": 70,
+ "modify_time": "2017-06-07 13:32:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rasta-mouse/watson",
+ "star": 473,
+ "commits": 29,
+ "modify_time": "2019-10-22 20:40:23",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/lyxhh/lxhtoolhttpdecrypt",
+ "star": 473,
+ "commits": 40,
+ "modify_time": "2019-11-11 02:57:35",
+ "last_release": "v1.01",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/0xsauby/yasuo",
+ "star": 473,
+ "commits": 121,
+ "modify_time": "2017-12-09 19:02:11",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/tklengyel/drakvuf",
+ "star": 472,
+ "commits": 620,
+ "modify_time": "2019-12-03 11:11:59",
+ "last_release": "0.6",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/pixelcyber/thor",
+ "star": 472,
+ "commits": 144,
+ "modify_time": "2019-11-16 10:46:29",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/alpha1e0/pentestdb",
+ "star": 472,
+ "commits": 208,
+ "modify_time": "2019-04-21 13:01:10",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/itrump/ssfree",
+ "star": 471,
+ "commits": 51,
+ "modify_time": "2018-12-17 00:41:34",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/mitre-attack/attack-navigator",
+ "star": 471,
+ "commits": 287,
+ "modify_time": "2019-10-29 12:59:13",
+ "last_release": "v2.3.1",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/palantir/osquery-configuration",
+ "star": 471,
+ "commits": 26,
+ "modify_time": "2019-06-12 22:51:51",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/olafhartong/threathunting",
+ "star": 471,
+ "commits": 169,
+ "modify_time": "2019-09-16 14:27:04",
+ "last_release": "\n 1.3.3\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/aker-gateway/aker",
+ "star": 471,
+ "commits": 92,
+ "modify_time": "2019-03-02 19:34:24",
+ "last_release": "v0.4.5",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wapiflapi/villoc",
+ "star": 470,
+ "commits": 45,
+ "modify_time": "2019-01-25 18:56:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/glmcdona/process-dump",
+ "star": 470,
+ "commits": 26,
+ "modify_time": "2019-04-17 16:16:29",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/codemanki/cloudscraper",
+ "star": 470,
+ "commits": 323,
+ "modify_time": "2019-12-07 09:33:23",
+ "last_release": "4.5.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/bit4woo/teemo",
+ "star": 470,
+ "commits": 88,
+ "modify_time": "2019-11-08 03:43:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fportantier/habu",
+ "star": 469,
+ "commits": 285,
+ "modify_time": "2019-12-02 20:58:44",
+ "last_release": "0.1.6",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/provable-things/ethereum-api",
+ "star": 469,
+ "commits": 208,
+ "modify_time": "2019-07-23 21:51:58",
+ "last_release": "",
+ "lang": "Solidity"
+ },
+ {
+ "link": "https://github.com/square/certigo",
+ "star": 469,
+ "commits": 415,
+ "modify_time": "2019-10-04 17:01:10",
+ "last_release": "v1.11.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/netzob/netzob",
+ "star": 469,
+ "commits": 4127,
+ "modify_time": "2019-10-15 01:07:10",
+ "last_release": "Release/netzob-1.0.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lucyoa/kernel-exploits",
+ "star": 469,
+ "commits": 5,
+ "modify_time": "2017-04-23 15:43:30",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/l3m0n/pentest_tools",
+ "star": 469,
+ "commits": 41,
+ "modify_time": "2019-01-22 10:27:26",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/jayddee/cpuminer-opt",
+ "star": 469,
+ "commits": 104,
+ "modify_time": "2019-12-09 20:59:02",
+ "last_release": "v3.10.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hack-with-github/powerful-plugins",
+ "star": 469,
+ "commits": 33,
+ "modify_time": "2018-11-02 18:28:25",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/g0tmi1k/os-scripts",
+ "star": 469,
+ "commits": 113,
+ "modify_time": "2016-09-21 19:02:29",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/everettjf/machoexplorer",
+ "star": 469,
+ "commits": 449,
+ "modify_time": "2019-04-24 01:31:55",
+ "last_release": "v1.0",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/crossref/pdfextract",
+ "star": 469,
+ "commits": 230,
+ "modify_time": "2015-09-28 13:11:27",
+ "last_release": "\n 0.1.0\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/arvanaghi/checkplease",
+ "star": 469,
+ "commits": 302,
+ "modify_time": "2019-12-05 03:31:32",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/aidaho12/haproxy-wi",
+ "star": 469,
+ "commits": 568,
+ "modify_time": "2019-12-08 10:44:23",
+ "last_release": "3.4.5.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/adi0x90/attifyos",
+ "star": 469,
+ "commits": 3,
+ "modify_time": "2017-07-17 02:08:27",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/skeeto/enchive",
+ "star": 468,
+ "commits": 158,
+ "modify_time": "2019-12-01 18:23:16",
+ "last_release": "\n 3.5\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/sensepost/kwetza",
+ "star": 468,
+ "commits": 26,
+ "modify_time": "2017-11-14 12:40:06",
+ "last_release": "",
+ "lang": "Smali"
+ },
+ {
+ "link": "https://github.com/fportantier/habu",
+ "star": 468,
+ "commits": 285,
+ "modify_time": "2019-12-02 20:58:44",
+ "last_release": "0.1.6",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/philbooth/complexity-report",
+ "star": 468,
+ "commits": 384,
+ "modify_time": "2015-09-09 11:58:07",
+ "last_release": "\n 1.4.1\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/libreswan/libreswan",
+ "star": 468,
+ "commits": 22581,
+ "modify_time": "2019-12-09 21:17:14",
+ "last_release": "\n v3.29\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/leurak/memz",
+ "star": 468,
+ "commits": 90,
+ "modify_time": "2018-05-20 09:44:43",
+ "last_release": "\n v4.0\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/kosborn/p2p-adb",
+ "star": 468,
+ "commits": 48,
+ "modify_time": "2012-11-13 01:04:53",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/dxa4481/wpa2-halfhandshake-crack",
+ "star": 468,
+ "commits": 27,
+ "modify_time": "2016-06-05 01:20:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/coleifer/micawber",
+ "star": 468,
+ "commits": 183,
+ "modify_time": "2019-10-12 14:27:00",
+ "last_release": "\n 0.5.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/EiNSTeiN-/decompiler",
+ "star": 467,
+ "commits": 170,
+ "modify_time": "2015-07-05 18:28:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/strazzere/anti-emulator",
+ "star": 467,
+ "commits": 38,
+ "modify_time": "2019-09-23 18:08:19",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/laruence/taint",
+ "star": 467,
+ "commits": 159,
+ "modify_time": "2018-12-12 06:18:22",
+ "last_release": "\n taint-2.0.5\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jbittel/httpry",
+ "star": 467,
+ "commits": 502,
+ "modify_time": "2014-10-15 03:26:14",
+ "last_release": "\n httpry-0.1.8\n ",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/miscreant/meta",
+ "star": 466,
+ "commits": 4,
+ "modify_time": "2019-09-03 00:09:39",
+ "last_release": "\n js-v0.3.2\n ",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/k8gege/k8cscan",
+ "star": 466,
+ "commits": 324,
+ "modify_time": "2019-11-20 16:19:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/evotecit/pswinreporting",
+ "star": 466,
+ "commits": 421,
+ "modify_time": "2019-09-13 18:28:51",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/bootleg/ret-sync",
+ "star": 466,
+ "commits": 34,
+ "modify_time": "2019-12-06 13:39:54",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/akaion/bleak",
+ "star": 466,
+ "commits": 53,
+ "modify_time": "2019-11-15 23:19:57",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/trustedsec/meterssh",
+ "star": 465,
+ "commits": 18,
+ "modify_time": "2017-04-13 17:55:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ptresearch/unme11",
+ "star": 465,
+ "commits": 4,
+ "modify_time": "2018-10-05 09:45:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jonathansalwan/tigress_protection",
+ "star": 465,
+ "commits": 37,
+ "modify_time": "2019-11-04 13:44:33",
+ "last_release": "",
+ "lang": "LLVM"
+ },
+ {
+ "link": "https://github.com/gen0cide/gscript",
+ "star": 465,
+ "commits": 465,
+ "modify_time": "2019-10-29 15:56:41",
+ "last_release": "v0.1.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/siujoeng-lau/workers-proxy",
+ "star": 464,
+ "commits": 37,
+ "modify_time": "2019-11-15 15:56:58",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/viralmaniar/powershell-rat",
+ "star": 464,
+ "commits": 28,
+ "modify_time": "2019-08-29 06:01:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/stamparm/dsvw",
+ "star": 464,
+ "commits": 60,
+ "modify_time": "2019-11-11 09:56:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/shinyquagsire23/switch-fightstick",
+ "star": 464,
+ "commits": 37,
+ "modify_time": "2017-09-02 01:55:48",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/owasp/owasp-webscarab",
+ "star": 464,
+ "commits": 1219,
+ "modify_time": "2019-04-16 04:36:53",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/irontec/sngrep",
+ "star": 464,
+ "commits": 886,
+ "modify_time": "2019-12-03 13:25:45",
+ "last_release": "v1.4.6",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/firstlookmedia/pdf-redact-tools",
+ "star": 464,
+ "commits": 60,
+ "modify_time": "2018-03-21 20:20:31",
+ "last_release": "\n v0.1.2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bramcohen/dissidentx",
+ "star": 464,
+ "commits": 14,
+ "modify_time": "2014-04-23 23:03:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/remath/literature_review",
+ "star": 463,
+ "commits": 49,
+ "modify_time": "2017-03-18 02:34:40",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/pyrotek3/powershell-ad-recon",
+ "star": 463,
+ "commits": 24,
+ "modify_time": "2015-03-09 01:20:21",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/mikesart/gpuvis",
+ "star": 463,
+ "commits": 1658,
+ "modify_time": "2019-12-04 03:38:56",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/martona/mhook",
+ "star": 463,
+ "commits": 13,
+ "modify_time": "2014-03-06 11:42:43",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/coalfire-research/java-deserialization-exploits",
+ "star": 463,
+ "commits": 28,
+ "modify_time": "2018-05-22 17:18:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/aimtuxofficial/aimtux",
+ "star": 463,
+ "commits": 2335,
+ "modify_time": "2017-10-09 13:16:41",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/FSecureLABS/C3",
+ "star": 462,
+ "commits": 43,
+ "modify_time": "2019-09-23 10:02:02",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/rust-fuzz/cargo-fuzz",
+ "star": 462,
+ "commits": 232,
+ "modify_time": "2019-11-24 22:36:27",
+ "last_release": "\n 0.5.5\n ",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/microsoft/dbgshell",
+ "star": 462,
+ "commits": 126,
+ "modify_time": "2019-05-09 16:11:33",
+ "last_release": "v0.8.26-beta",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/lennartkoopmann/nzyme",
+ "star": 462,
+ "commits": 110,
+ "modify_time": "2019-12-01 17:30:43",
+ "last_release": "\n 0.2.1\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/jkornev/hidden",
+ "star": 462,
+ "commits": 97,
+ "modify_time": "2019-11-17 20:41:34",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jgmdev/ddos-deflate",
+ "star": 462,
+ "commits": 183,
+ "modify_time": "2019-05-29 15:36:44",
+ "last_release": "v1.3",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/egebalci/hercules",
+ "star": 462,
+ "commits": 220,
+ "modify_time": "2017-10-31 11:47:41",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/dchrastil/scrapedin",
+ "star": 462,
+ "commits": 4,
+ "modify_time": "2018-03-29 13:10:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mehulj94/Radium",
+ "star": 461,
+ "commits": 18,
+ "modify_time": "2018-12-06 20:27:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vincentcox/bypass-firewalls-by-dns-history",
+ "star": 461,
+ "commits": 28,
+ "modify_time": "2019-06-26 11:54:54",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/ustayready/fireprox",
+ "star": 461,
+ "commits": 42,
+ "modify_time": "2019-04-17 16:33:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/phoenhex/files",
+ "star": 461,
+ "commits": 39,
+ "modify_time": "2019-07-11 18:19:21",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/gradiuscypher/infosec_getting_started",
+ "star": 461,
+ "commits": 73,
+ "modify_time": "2019-11-26 17:24:54",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/emoon/prodbg",
+ "star": 461,
+ "commits": 2162,
+ "modify_time": "2019-08-16 15:17:27",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/dsheirer/sdrtrunk",
+ "star": 461,
+ "commits": 987,
+ "modify_time": "2019-11-26 01:05:35",
+ "last_release": "v0.4.0-beta.1",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/0xdeadbeefjerky/office-dde-payloads",
+ "star": 461,
+ "commits": 32,
+ "modify_time": "2018-02-10 18:10:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/v2ray-android/actinium",
+ "star": 460,
+ "commits": 115,
+ "modify_time": "2018-01-16 10:37:01",
+ "last_release": "0.10.2",
+ "lang": "Kotlin"
+ },
+ {
+ "link": "https://github.com/shellphish/rex",
+ "star": 460,
+ "commits": 577,
+ "modify_time": "2019-11-24 09:02:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/savio-code/fern-wifi-cracker",
+ "star": 460,
+ "commits": 282,
+ "modify_time": "2019-10-18 07:11:09",
+ "last_release": "v3.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/netxfly/x-crack",
+ "star": 460,
+ "commits": 14,
+ "modify_time": "2019-02-18 03:13:01",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/comaeio/opcde",
+ "star": 460,
+ "commits": 112,
+ "modify_time": "2019-08-17 06:09:01",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/cofyc/dnscrypt-wrapper",
+ "star": 460,
+ "commits": 371,
+ "modify_time": "2019-03-16 14:45:19",
+ "last_release": "v0.4.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/wireghoul/graudit",
+ "star": 459,
+ "commits": 365,
+ "modify_time": "2019-11-12 15:55:42",
+ "last_release": "v2.3",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/threezh1/jsfinder",
+ "star": 459,
+ "commits": 6,
+ "modify_time": "2019-06-25 12:16:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ntruchsess/arduino_uip",
+ "star": 459,
+ "commits": 159,
+ "modify_time": "2018-10-18 14:08:00",
+ "last_release": "UIPEthernet_v1.59",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/metnew/uxss-db",
+ "star": 459,
+ "commits": 114,
+ "modify_time": "2018-10-10 13:56:42",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/codermjlee/mjcript",
+ "star": 459,
+ "commits": 16,
+ "modify_time": "2018-06-24 09:01:56",
+ "last_release": "",
+ "lang": "Cycript"
+ },
+ {
+ "link": "https://github.com/christhecoolhut/zeratool",
+ "star": 459,
+ "commits": 15,
+ "modify_time": "2019-03-22 19:35:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mel0day/redteam-bcs",
+ "star": 458,
+ "commits": 17,
+ "modify_time": "2019-08-22 23:55:03",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ValveSoftware/csgo-osx-linux",
+ "star": 458,
+ "commits": 8,
+ "modify_time": "2017-05-24 16:51:20",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/sandeepmistry/arduino-nrf5",
+ "star": 458,
+ "commits": 258,
+ "modify_time": "2019-04-14 23:58:35",
+ "last_release": "0.6.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/nette/latte",
+ "star": 458,
+ "commits": 1292,
+ "modify_time": "2019-09-24 20:24:03",
+ "last_release": "v2.5.3",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/ghostwords/chameleon",
+ "star": 458,
+ "commits": 218,
+ "modify_time": "2015-10-14 17:50:11",
+ "last_release": "v0.6.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/exim/exim",
+ "star": 458,
+ "commits": 4706,
+ "modify_time": "2019-12-09 19:40:31",
+ "last_release": "\n exim-4.93\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/vpnguy-zz/ntpdos",
+ "star": 457,
+ "commits": 21,
+ "modify_time": "2016-12-18 17:23:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/blacknbunny/CVE-2018-10933",
+ "star": 457,
+ "commits": 87,
+ "modify_time": "2019-08-31 10:22:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tyranid/oleviewdotnet",
+ "star": 457,
+ "commits": 609,
+ "modify_time": "2019-11-06 01:15:38",
+ "last_release": "v1.9",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/jarun/keysniffer",
+ "star": 457,
+ "commits": 81,
+ "modify_time": "2019-08-06 14:31:34",
+ "last_release": "v1.7",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/flozz/p0wny-shell",
+ "star": 457,
+ "commits": 32,
+ "modify_time": "2019-06-07 11:32:10",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/pk-fr/yakpro-po",
+ "star": 456,
+ "commits": 188,
+ "modify_time": "2019-11-16 11:26:31",
+ "last_release": "2.0.6",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/haka-security/haka",
+ "star": 456,
+ "commits": 2413,
+ "modify_time": "2016-06-27 15:00:12",
+ "last_release": "v0.3.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/globaleaks/tor2web",
+ "star": 456,
+ "commits": 787,
+ "modify_time": "2019-10-26 06:19:07",
+ "last_release": "\n v3.1.72\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/yukinoshita47/yuki-chan-the-auto-pentest",
+ "star": 455,
+ "commits": 62,
+ "modify_time": "2017-10-23 05:36:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/saurabhmathur96/clickbait-detector",
+ "star": 455,
+ "commits": 27,
+ "modify_time": "2017-10-30 18:38:47",
+ "last_release": "",
+ "lang": "Jupyter Notebook"
+ },
+ {
+ "link": "https://github.com/rabobank-cdc/dettect",
+ "star": 455,
+ "commits": 202,
+ "modify_time": "2019-12-05 07:43:42",
+ "last_release": "v1.2.5",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mr-un1k0d3r/redteampowershellscripts",
+ "star": 455,
+ "commits": 128,
+ "modify_time": "2019-12-03 17:30:25",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/mandatoryprogrammer/tldr",
+ "star": 455,
+ "commits": 7072,
+ "modify_time": "2019-01-12 23:43:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/idanr1986/cuckoo-droid",
+ "star": 455,
+ "commits": 63,
+ "modify_time": "2017-07-25 17:27:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dr0op/weblogicscan",
+ "star": 455,
+ "commits": 7,
+ "modify_time": "2019-06-24 06:06:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sindresorhus/get-port",
+ "star": 454,
+ "commits": 45,
+ "modify_time": "2019-09-10 09:09:30",
+ "last_release": "v5.0.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/lucasjones/cpuminer-multi",
+ "star": 454,
+ "commits": 100,
+ "modify_time": "2015-08-06 16:07:42",
+ "last_release": "v1.0.3",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/embedi/cve-2017-11882",
+ "star": 454,
+ "commits": 3,
+ "modify_time": "2017-11-29 16:13:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ncsa/ssh-auditor",
+ "star": 453,
+ "commits": 164,
+ "modify_time": "2018-10-30 18:36:24",
+ "last_release": "v0.15",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/fmstrat/diy-ipmi",
+ "star": 453,
+ "commits": 62,
+ "modify_time": "2018-11-06 12:24:52",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/cr4sh/openreil",
+ "star": 453,
+ "commits": 161,
+ "modify_time": "2017-10-08 09:20:51",
+ "last_release": "0.1.10",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/census-instrumentation/opencensus-python",
+ "star": 453,
+ "commits": 421,
+ "modify_time": "2019-12-04 18:58:04",
+ "last_release": "v0.7.6",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ahupowerdns/hello-dns",
+ "star": 453,
+ "commits": 238,
+ "modify_time": "2019-03-04 09:34:24",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/rvrsh3ll/misc-powershell-scripts",
+ "star": 452,
+ "commits": 66,
+ "modify_time": "2019-09-19 23:55:39",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/n1xbyte/cve-2019-0708",
+ "star": 452,
+ "commits": 9,
+ "modify_time": "2019-05-30 21:15:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/martinmarinov/tempestsdr",
+ "star": 452,
+ "commits": 329,
+ "modify_time": "2019-02-13 22:10:17",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/clowwindy/shadowsocks-libev",
+ "star": 452,
+ "commits": 2,
+ "modify_time": "2015-08-22 02:16:17",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/bfuzzy/auditd-attack",
+ "star": 452,
+ "commits": 31,
+ "modify_time": "2018-11-27 03:36:44",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/lowrisc/opentitan",
+ "star": 451,
+ "commits": 916,
+ "modify_time": "2019-12-06 20:08:17",
+ "last_release": "snapshot-20191101-2",
+ "lang": "SystemVerilog"
+ },
+ {
+ "link": "https://github.com/controlscanmdr/cyphon",
+ "star": 451,
+ "commits": 1493,
+ "modify_time": "2019-11-24 18:27:19",
+ "last_release": "1.6.7",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/windysha/xpatch",
+ "star": 451,
+ "commits": 60,
+ "modify_time": "2019-09-29 17:37:44",
+ "last_release": "v2.0",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/vusec/drammer",
+ "star": 451,
+ "commits": 12,
+ "modify_time": "2016-11-03 21:48:29",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/spiderlabs/portia",
+ "star": 451,
+ "commits": 38,
+ "modify_time": "2017-10-27 08:26:36",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/rek7/mxtract",
+ "star": 451,
+ "commits": 89,
+ "modify_time": "2019-04-15 01:18:44",
+ "last_release": "1.1",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/meitar/awesome-cybersecurity-blueteam",
+ "star": 451,
+ "commits": 67,
+ "modify_time": "2019-12-04 06:19:53",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/akaunting/firewall",
+ "star": 451,
+ "commits": 57,
+ "modify_time": "2019-12-05 09:55:16",
+ "last_release": "1.2.3",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/scwuaptx/pwngdb",
+ "star": 450,
+ "commits": 135,
+ "modify_time": "2019-10-15 08:16:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/AonCyberLabs/PadBuster",
+ "star": 450,
+ "commits": 10,
+ "modify_time": "2011-08-23 07:52:51",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/super-l/superl-url",
+ "star": 450,
+ "commits": 32,
+ "modify_time": "2019-10-28 12:37:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/s0md3v/goop",
+ "star": 450,
+ "commits": 12,
+ "modify_time": "2019-08-23 07:00:38",
+ "last_release": "0.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/omerya/invisi-shell",
+ "star": 450,
+ "commits": 8,
+ "modify_time": "2019-08-19 19:55:18",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/nccgroup/triforceafl",
+ "star": 450,
+ "commits": 27,
+ "modify_time": "2017-05-31 22:53:05",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/m1ghtym0/browser-pwn",
+ "star": 450,
+ "commits": 76,
+ "modify_time": "2019-09-20 12:53:42",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/alienvault-labs/alienvaultlabs",
+ "star": 450,
+ "commits": 57,
+ "modify_time": "2016-01-22 20:51:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/shadowsocks/kcptun-android",
+ "star": 449,
+ "commits": 37,
+ "modify_time": "2019-01-07 09:02:25",
+ "last_release": "v1.0.0",
+ "lang": "Kotlin"
+ },
+ {
+ "link": "https://github.com/mantvydasb/RedTeam-Tactics-and-Techniques",
+ "star": 449,
+ "commits": 183,
+ "modify_time": "2019-12-09 23:00:22",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/stripe/safesql",
+ "star": 449,
+ "commits": 24,
+ "modify_time": "2019-09-10 22:49:40",
+ "last_release": "v0.2.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/kasperskylab/klara",
+ "star": 449,
+ "commits": 19,
+ "modify_time": "2019-07-24 13:00:39",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/coalfire-research/npk",
+ "star": 449,
+ "commits": 21,
+ "modify_time": "2019-06-28 22:34:14",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/s0md3v/corsy",
+ "star": 448,
+ "commits": 20,
+ "modify_time": "2019-11-28 05:41:35",
+ "last_release": "0.2-beta",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ondrejbudai/hidviz",
+ "star": 448,
+ "commits": 135,
+ "modify_time": "2019-12-02 07:41:08",
+ "last_release": "v0.1.5",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/l-n-s/wireguard-install",
+ "star": 448,
+ "commits": 31,
+ "modify_time": "2019-10-17 08:07:02",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/ghidraninja/ghidra_scripts",
+ "star": 448,
+ "commits": 14,
+ "modify_time": "2019-04-20 10:23:10",
+ "last_release": "",
+ "lang": "YARA"
+ },
+ {
+ "link": "https://github.com/sidechannelmarvels/deadpool",
+ "star": 447,
+ "commits": 187,
+ "modify_time": "2019-12-08 21:02:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sans-blue-team/deepbluecli",
+ "star": 447,
+ "commits": 148,
+ "modify_time": "2019-07-24 21:01:20",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/ntquery/scylla",
+ "star": 447,
+ "commits": 215,
+ "modify_time": "2019-01-05 13:59:15",
+ "last_release": "v0.9.8",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ctf-wiki/ctf-challenges",
+ "star": 447,
+ "commits": 114,
+ "modify_time": "2019-05-21 08:40:33",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/cloudflare/cloudflare-blog",
+ "star": 447,
+ "commits": 47,
+ "modify_time": "2019-09-20 15:41:07",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cchio/deep-pwning",
+ "star": 447,
+ "commits": 44,
+ "modify_time": "2019-07-22 19:35:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/aptive/penetration-testing-tools",
+ "star": 447,
+ "commits": 57,
+ "modify_time": "2016-09-09 12:31:07",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/alexhude/friend",
+ "star": 447,
+ "commits": 52,
+ "modify_time": "2019-08-23 10:21:24",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/titanous/heartbleeder",
+ "star": 446,
+ "commits": 37,
+ "modify_time": "2014-05-27 22:31:24",
+ "last_release": "\n v0.1.1\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/simonepri/upash",
+ "star": 446,
+ "commits": 114,
+ "modify_time": "2018-08-06 13:45:59",
+ "last_release": "\n v1.0.2\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/nsonaniya2010/subdomainizer",
+ "star": 446,
+ "commits": 73,
+ "modify_time": "2019-11-27 15:44:18",
+ "last_release": "v1.3(beta)",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/khronosgroup/spirv-tools",
+ "star": 446,
+ "commits": 2386,
+ "modify_time": "2019-12-06 16:38:17",
+ "last_release": "v2019.2",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/hzqst/syscall-monitor",
+ "star": 446,
+ "commits": 11,
+ "modify_time": "2017-06-26 02:31:48",
+ "last_release": "",
+ "lang": "POV-Ray SDL"
+ },
+ {
+ "link": "https://github.com/riverloopsec/killerbee",
+ "star": 445,
+ "commits": 303,
+ "modify_time": "2019-06-04 11:51:17",
+ "last_release": "2.7.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/r00t-3xp10it/fakeimageexploiter",
+ "star": 444,
+ "commits": 232,
+ "modify_time": "2019-12-06 21:01:30",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/malwareinfosec/ekfiddle",
+ "star": 444,
+ "commits": 716,
+ "modify_time": "2019-12-05 18:35:00",
+ "last_release": "0.9.3.7",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/ierror/ssh-permit-a38",
+ "star": 444,
+ "commits": 61,
+ "modify_time": "2018-08-18 11:42:04",
+ "last_release": "v0.2.0",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/aburgh/disk-arbitrator",
+ "star": 444,
+ "commits": 216,
+ "modify_time": "2017-09-22 03:24:38",
+ "last_release": "v0.8.0",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/solo-io/sqoop",
+ "star": 443,
+ "commits": 205,
+ "modify_time": "2019-06-12 16:02:22",
+ "last_release": "v0.2.7",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/openrce/paimei",
+ "star": 443,
+ "commits": 3,
+ "modify_time": "2012-04-03 17:46:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jnusimba/miscsecnotes",
+ "star": 443,
+ "commits": 70,
+ "modify_time": "2019-05-13 12:11:00",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ion-storm/sysmon-config",
+ "star": 443,
+ "commits": 410,
+ "modify_time": "2019-01-25 16:31:43",
+ "last_release": "",
+ "lang": "Batchfile"
+ },
+ {
+ "link": "https://github.com/gameye98/lazymux",
+ "star": 443,
+ "commits": 1,
+ "modify_time": "2019-11-01 23:07:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/brianwrf/hackutils",
+ "star": 443,
+ "commits": 102,
+ "modify_time": "2016-09-06 07:08:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/albinowax/activescanplusplus",
+ "star": 443,
+ "commits": 74,
+ "modify_time": "2019-06-17 13:31:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sdrapkin/securitydriven.inferno",
+ "star": 442,
+ "commits": 75,
+ "modify_time": "2019-06-05 13:31:46",
+ "last_release": "v1.5.3.0",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/retroplasma/flyover-reverse-engineering",
+ "star": 442,
+ "commits": 95,
+ "modify_time": "2019-10-06 01:44:31",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/jfoote/exploitable",
+ "star": 442,
+ "commits": 190,
+ "modify_time": "2018-10-19 14:19:27",
+ "last_release": "\n v1.32\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jekyc/wig",
+ "star": 442,
+ "commits": 574,
+ "modify_time": "2016-10-02 17:25:01",
+ "last_release": "0.6",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ice3man543/subover",
+ "star": 442,
+ "commits": 71,
+ "modify_time": "2018-08-30 00:38:45",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/ajkhoury/ReClassEx",
+ "star": 441,
+ "commits": 499,
+ "modify_time": "2019-06-28 19:49:34",
+ "last_release": "v1.2.0.0",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ryancdotorg/brainflayer",
+ "star": 441,
+ "commits": 176,
+ "modify_time": "2018-08-14 04:56:55",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ring04h/wyproxy",
+ "star": 441,
+ "commits": 110,
+ "modify_time": "2017-01-06 15:06:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cbeuw/cloak",
+ "star": 441,
+ "commits": 295,
+ "modify_time": "2019-11-08 17:06:20",
+ "last_release": "v2.1.2",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/borealisai/advertorch",
+ "star": 441,
+ "commits": 230,
+ "modify_time": "2019-12-05 17:35:03",
+ "last_release": "",
+ "lang": "Jupyter Notebook"
+ },
+ {
+ "link": "https://github.com/keepwn/altman",
+ "star": 440,
+ "commits": 167,
+ "modify_time": "2016-05-19 01:46:25",
+ "last_release": "v3.0.1",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/brannondorsey/whonow",
+ "star": 440,
+ "commits": 23,
+ "modify_time": "2018-06-11 00:46:37",
+ "last_release": "\n v1.2.0\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/pstavirs/ostinato",
+ "star": 439,
+ "commits": 828,
+ "modify_time": "2019-09-21 06:58:26",
+ "last_release": "v1.0",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/polymorf/findcrypt-yara",
+ "star": 439,
+ "commits": 43,
+ "modify_time": "2019-10-29 18:12:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/payatu/diva-android",
+ "star": 439,
+ "commits": 2,
+ "modify_time": "2016-01-15 10:13:59",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/nimia/public_drown_scanner",
+ "star": 439,
+ "commits": 66,
+ "modify_time": "2016-04-10 15:50:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/magoo/redteam-plan",
+ "star": 439,
+ "commits": 18,
+ "modify_time": "2017-08-23 20:58:08",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/graniet/chromebackdoor",
+ "star": 439,
+ "commits": 157,
+ "modify_time": "2017-01-08 13:03:55",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/google/vulncode-db",
+ "star": 439,
+ "commits": 95,
+ "modify_time": "2019-11-29 15:27:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/facebook/openbmc",
+ "star": 439,
+ "commits": 5095,
+ "modify_time": "2019-12-09 22:47:29",
+ "last_release": "\n lightning-v1.6\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/digitalsecurity/btlejuice",
+ "star": 439,
+ "commits": 64,
+ "modify_time": "2018-10-03 06:25:18",
+ "last_release": "\n v1.1.11\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/brendan-w/python-obd",
+ "star": 439,
+ "commits": 599,
+ "modify_time": "2019-11-03 18:43:56",
+ "last_release": "v0.7.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/stevemk14ebr/polyhook_2_0",
+ "star": 438,
+ "commits": 349,
+ "modify_time": "2019-12-10 03:38:28",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/nsacyber/Event-Forwarding-Guidance",
+ "star": 438,
+ "commits": 35,
+ "modify_time": "2019-04-12 17:25:32",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/mitre/cti",
+ "star": 438,
+ "commits": 104,
+ "modify_time": "2019-12-02 16:35:38",
+ "last_release": "\n ATT&CK-v6.2\n ",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/laramies/metagoofil",
+ "star": 438,
+ "commits": 12,
+ "modify_time": "2015-08-13 13:56:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/j00ru/ctf-tasks",
+ "star": 438,
+ "commits": 17,
+ "modify_time": "2019-11-17 19:46:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/graxcode/jbytemod-beta",
+ "star": 437,
+ "commits": 285,
+ "modify_time": "2019-07-21 16:15:49",
+ "last_release": "1.8.2",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/arrexel/phpbash",
+ "star": 437,
+ "commits": 30,
+ "modify_time": "2018-02-14 18:30:58",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/404notf0und/security-data-analysis-and-visualization",
+ "star": 436,
+ "commits": 29,
+ "modify_time": "2019-11-05 15:17:20",
+ "last_release": "",
+ "lang": "TSQL"
+ },
+ {
+ "link": "https://github.com/fuzzitdev/jsfuzz",
+ "star": 436,
+ "commits": 57,
+ "modify_time": "2019-12-08 19:26:48",
+ "last_release": "",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/undeadsec/evilurl",
+ "star": 436,
+ "commits": 48,
+ "modify_time": "2018-02-22 23:46:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tmhedberg/simpylfold",
+ "star": 436,
+ "commits": 130,
+ "modify_time": "2017-06-13 12:06:39",
+ "last_release": "\n v1.1\n ",
+ "lang": "Vim script"
+ },
+ {
+ "link": "https://github.com/romanzaikin/burpextension-whatsapp-decryption-checkpoint",
+ "star": 436,
+ "commits": 34,
+ "modify_time": "2019-10-21 08:22:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ionelmc/python-hunter",
+ "star": 436,
+ "commits": 747,
+ "modify_time": "2019-12-06 13:42:39",
+ "last_release": "\n v3.0.5\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/foxglovesec/javaunserializeexploits",
+ "star": 436,
+ "commits": 4,
+ "modify_time": "2016-03-10 20:42:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ethereumproject/go-ethereum",
+ "star": 436,
+ "commits": 9605,
+ "modify_time": "2019-08-29 10:43:17",
+ "last_release": "v6.0.8",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/danielbohannon/revoke-obfuscation",
+ "star": 436,
+ "commits": 11,
+ "modify_time": "2018-03-02 02:05:54",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/ctftraining/ctftraining",
+ "star": 436,
+ "commits": 26,
+ "modify_time": "2019-08-26 02:55:49",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ayms/node-tor",
+ "star": 436,
+ "commits": 260,
+ "modify_time": "2019-12-09 17:09:28",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/admintony/prepare-for-awd",
+ "star": 436,
+ "commits": 52,
+ "modify_time": "2019-10-17 01:09:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/0x4d31/honeylambda",
+ "star": 436,
+ "commits": 46,
+ "modify_time": "2018-10-20 01:24:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/neohapsis/bbqsql",
+ "star": 435,
+ "commits": 261,
+ "modify_time": "2019-01-04 21:23:19",
+ "last_release": "\n v1.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mncoppola/suterusu",
+ "star": 435,
+ "commits": 41,
+ "modify_time": "2017-06-08 03:20:54",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ridter/redis-rce",
+ "star": 434,
+ "commits": 3,
+ "modify_time": "2019-08-22 04:43:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/coyim/coyim",
+ "star": 434,
+ "commits": 2167,
+ "modify_time": "2019-08-15 21:41:36",
+ "last_release": "v0.3.11",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/client9/ipcat",
+ "star": 434,
+ "commits": 797,
+ "modify_time": "2019-04-26 01:09:31",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/secureworks/dcept",
+ "star": 433,
+ "commits": 15,
+ "modify_time": "2016-09-22 18:15:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/moxie0/sslsniff",
+ "star": 433,
+ "commits": 11,
+ "modify_time": "2011-10-17 22:23:40",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/aws-samples/aws-waf-sample",
+ "star": 432,
+ "commits": 82,
+ "modify_time": "2019-04-09 21:56:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tidesec/fuzzscanner",
+ "star": 432,
+ "commits": 13,
+ "modify_time": "2019-05-21 01:19:09",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/juuso/keychaindump",
+ "star": 432,
+ "commits": 6,
+ "modify_time": "2012-09-05 08:57:34",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jactor-sue/deepin-apps-installation",
+ "star": 432,
+ "commits": 17,
+ "modify_time": "2019-01-01 11:32:28",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/gorilla/securecookie",
+ "star": 432,
+ "commits": 80,
+ "modify_time": "2019-10-28 04:23:04",
+ "last_release": "v1.1.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/aderyabin/sniffer",
+ "star": 432,
+ "commits": 112,
+ "modify_time": "2019-10-05 18:38:44",
+ "last_release": "\n v0.3.2\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/DNFWAH/DNFWAH",
+ "star": 431,
+ "commits": 104,
+ "modify_time": "2018-12-05 15:49:30",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/pan-unit42/public_tools",
+ "star": 431,
+ "commits": 167,
+ "modify_time": "2019-10-23 13:33:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/amyangxyz/assassingo",
+ "star": 431,
+ "commits": 162,
+ "modify_time": "2019-03-13 03:55:43",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/alonho/pytrace",
+ "star": 431,
+ "commits": 124,
+ "modify_time": "2016-04-18 10:26:41",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/w-digital-scanner/w13scan",
+ "star": 430,
+ "commits": 296,
+ "modify_time": "2019-12-10 09:23:15",
+ "last_release": "\n v0.9.17\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/guardianproject/orbot",
+ "star": 430,
+ "commits": 2229,
+ "modify_time": "2019-11-15 17:30:57",
+ "last_release": "16.1.3-BETA-2-tor-0.4.1.6-rc",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/superhedgy/attacksurfacemapper",
+ "star": 430,
+ "commits": 19,
+ "modify_time": "2019-10-04 08:42:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/siguza/iohideous",
+ "star": 430,
+ "commits": 49,
+ "modify_time": "2018-01-05 21:43:21",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/mozilla/scanjs",
+ "star": 430,
+ "commits": 311,
+ "modify_time": "2015-07-03 11:02:02",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/mojtabatajik/robber",
+ "star": 430,
+ "commits": 43,
+ "modify_time": "2019-05-30 05:25:09",
+ "last_release": "1.6",
+ "lang": "Pascal"
+ },
+ {
+ "link": "https://github.com/meitar/awesome-lockpicking",
+ "star": 430,
+ "commits": 29,
+ "modify_time": "2018-11-09 19:16:39",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/lightbulb-framework/lightbulb-framework",
+ "star": 430,
+ "commits": 67,
+ "modify_time": "2018-06-07 09:31:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/keith/hopper-swift-demangle",
+ "star": 430,
+ "commits": 6,
+ "modify_time": "2018-05-14 23:28:20",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/crocs-muni/roca",
+ "star": 430,
+ "commits": 186,
+ "modify_time": "2019-08-06 22:07:30",
+ "last_release": "v1.2.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/captainarash/the_holy_book_of_x86",
+ "star": 430,
+ "commits": 148,
+ "modify_time": "2019-01-27 19:43:06",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/0xd4d/iced",
+ "star": 430,
+ "commits": 680,
+ "modify_time": "2019-11-13 16:17:25",
+ "last_release": "v1.4.0",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/aosp-mirror/platform_dalvik",
+ "star": 429,
+ "commits": 8781,
+ "modify_time": "2019-10-30 18:46:42",
+ "last_release": "\n android-mainline-10.0.0_r4\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/stamparm/fetch-some-proxies",
+ "star": 429,
+ "commits": 57,
+ "modify_time": "2019-11-13 17:01:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sciresm/hactool",
+ "star": 428,
+ "commits": 154,
+ "modify_time": "2019-11-01 04:47:21",
+ "last_release": "1.2.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ridiculousfish/libdivide",
+ "star": 428,
+ "commits": 322,
+ "modify_time": "2019-12-09 08:39:10",
+ "last_release": "v3.0",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/payatu/tiredful-api",
+ "star": 428,
+ "commits": 16,
+ "modify_time": "2019-08-31 15:11:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/obsidianforensics/hindsight",
+ "star": 428,
+ "commits": 209,
+ "modify_time": "2019-10-04 14:24:48",
+ "last_release": "v2.4.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jackrex/fakewechatloc",
+ "star": 428,
+ "commits": 14,
+ "modify_time": "2017-10-17 17:05:11",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/evilsocket/smali_emulator",
+ "star": 428,
+ "commits": 67,
+ "modify_time": "2018-06-11 10:28:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bradoyler/xmr-miner",
+ "star": 428,
+ "commits": 24,
+ "modify_time": "2018-01-19 21:47:02",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/appsecco/bugcrowd-levelup-subdomain-enumeration",
+ "star": 428,
+ "commits": 23,
+ "modify_time": "2019-02-05 07:34:59",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wireghoul/dotdotpwn",
+ "star": 427,
+ "commits": 52,
+ "modify_time": "2019-09-17 17:08:09",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/novicelive/research-rootkit",
+ "star": 427,
+ "commits": 50,
+ "modify_time": "2018-10-15 04:14:06",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/corkami/docs",
+ "star": 427,
+ "commits": 73,
+ "modify_time": "2019-12-04 05:43:04",
+ "last_release": "",
+ "lang": "TeX"
+ },
+ {
+ "link": "https://github.com/nullhypothesis/exitmap",
+ "star": 426,
+ "commits": 366,
+ "modify_time": "2019-09-30 14:52:42",
+ "last_release": "\n v2019.05.30\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/endgameinc/gym-malware",
+ "star": 426,
+ "commits": 16,
+ "modify_time": "2018-06-15 18:10:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/praetorian-code/DVRF",
+ "star": 425,
+ "commits": 16,
+ "modify_time": "2016-05-18 19:11:25",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/rsmudge/malleable-c2-profiles",
+ "star": 425,
+ "commits": 50,
+ "modify_time": "2018-04-07 16:25:40",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/lordamit/brightness",
+ "star": 425,
+ "commits": 124,
+ "modify_time": "2019-01-19 20:59:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/spinkham/skipfish",
+ "star": 424,
+ "commits": 102,
+ "modify_time": "2012-12-22 04:32:24",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/p3nt4/invoke-socksproxy",
+ "star": 424,
+ "commits": 48,
+ "modify_time": "2019-09-23 18:39:40",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/openshift/odo",
+ "star": 424,
+ "commits": 1564,
+ "modify_time": "2019-12-09 13:52:40",
+ "last_release": "v1.0.2",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/newaetech/chipwhisperer",
+ "star": 424,
+ "commits": 3537,
+ "modify_time": "2019-12-02 15:22:48",
+ "last_release": "5.1.3",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/lolimay/shadowsocks-deepin",
+ "star": 424,
+ "commits": 303,
+ "modify_time": "2019-09-03 15:47:41",
+ "last_release": "V1.2.2-beat",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/jotygill/openpyn-nordvpn",
+ "star": 424,
+ "commits": 533,
+ "modify_time": "2019-09-12 03:15:57",
+ "last_release": "2.2.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jonathansalwan/pintools",
+ "star": 424,
+ "commits": 19,
+ "modify_time": "2015-06-30 21:05:17",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/iovisor/bpf-docs",
+ "star": 424,
+ "commits": 64,
+ "modify_time": "2019-07-08 22:29:36",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/energizedprotection/block",
+ "star": 424,
+ "commits": 1,
+ "modify_time": "2019-12-10 02:13:47",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/dependencytrack/dependency-track",
+ "star": 424,
+ "commits": 1590,
+ "modify_time": "2019-12-04 22:32:50",
+ "last_release": "3.6.1",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/ysrc/webshell-sample",
+ "star": 423,
+ "commits": 34,
+ "modify_time": "2018-07-27 06:41:00",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/xuanhun/hackingresource",
+ "star": 423,
+ "commits": 76,
+ "modify_time": "2019-12-09 06:53:30",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ring04h/papers",
+ "star": 423,
+ "commits": 18,
+ "modify_time": "2018-06-29 04:59:14",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/re4lity/hacking-with-golang",
+ "star": 423,
+ "commits": 29,
+ "modify_time": "2019-08-24 09:12:22",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/mindmac/androideagleeye",
+ "star": 423,
+ "commits": 24,
+ "modify_time": "2016-07-05 11:55:52",
+ "last_release": "",
+ "lang": "Makefile"
+ },
+ {
+ "link": "https://github.com/hardenedlinux/linux-exploit-development-tutorial",
+ "star": 423,
+ "commits": 17,
+ "modify_time": "2019-02-25 10:07:49",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ashishb/android-malware",
+ "star": 423,
+ "commits": 13,
+ "modify_time": "2019-08-24 07:24:53",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/alecmuffett/eotk",
+ "star": 423,
+ "commits": 659,
+ "modify_time": "2019-11-11 22:53:16",
+ "last_release": "\n v1.4.0\n ",
+ "lang": "Awk"
+ },
+ {
+ "link": "https://github.com/fwgs/cs16-client",
+ "star": 422,
+ "commits": 1,
+ "modify_time": "2017-10-05 19:49:12",
+ "last_release": "v1.35",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/shmilylty/cheetah",
+ "star": 422,
+ "commits": 84,
+ "modify_time": "2018-11-07 07:20:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/yl2chen/cidranger",
+ "star": 422,
+ "commits": 50,
+ "modify_time": "2019-08-06 23:48:02",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/xsec-lab/x-waf",
+ "star": 422,
+ "commits": 27,
+ "modify_time": "2017-11-23 10:03:50",
+ "last_release": "",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/d4vinci/cuteit",
+ "star": 422,
+ "commits": 11,
+ "modify_time": "2019-02-04 15:18:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/McGill-DMaS/Kam1n0-Community",
+ "star": 421,
+ "commits": 25,
+ "modify_time": "2019-11-23 03:20:04",
+ "last_release": "2.1.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/riusksk/vul_war",
+ "star": 421,
+ "commits": 17,
+ "modify_time": "2016-11-14 05:11:08",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/w3h/icsmaster",
+ "star": 421,
+ "commits": 54,
+ "modify_time": "2019-01-04 02:00:25",
+ "last_release": "",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/unamer/cve-2018-8120",
+ "star": 421,
+ "commits": 10,
+ "modify_time": "2018-05-30 13:09:52",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/thehackingsage/hacktronian",
+ "star": 421,
+ "commits": 56,
+ "modify_time": "2018-11-21 09:15:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/subgraph/oz",
+ "star": 421,
+ "commits": 833,
+ "modify_time": "2017-11-19 14:25:22",
+ "last_release": "\n 0.2.6\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/mengskysama/shadowsocks-rm",
+ "star": 421,
+ "commits": 780,
+ "modify_time": "2016-07-18 15:31:51",
+ "last_release": "\n 2.8.3\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kpcyrd/sniffglue",
+ "star": 421,
+ "commits": 224,
+ "modify_time": "2019-10-23 10:05:31",
+ "last_release": "v0.9.0",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/ciscocsirt/gosint",
+ "star": 421,
+ "commits": 23,
+ "modify_time": "2018-10-04 18:35:06",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/bit4woo/recaptcha",
+ "star": 420,
+ "commits": 29,
+ "modify_time": "2019-07-14 10:52:00",
+ "last_release": "v0.9",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/jsamr/bootiso",
+ "star": 420,
+ "commits": 104,
+ "modify_time": "2019-09-24 05:24:55",
+ "last_release": "v3.3.1",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/jack-liang/kalitools",
+ "star": 420,
+ "commits": 287,
+ "modify_time": "2019-08-31 06:15:15",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/desowin/usbpcap",
+ "star": 420,
+ "commits": 180,
+ "modify_time": "2019-10-05 16:26:26",
+ "last_release": "1.5.3.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/imagetragick/pocs",
+ "star": 419,
+ "commits": 19,
+ "modify_time": "2016-05-23 17:34:28",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/ekultek/pybelt",
+ "star": 419,
+ "commits": 167,
+ "modify_time": "2018-08-06 14:07:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/chinarulezzz/pixload",
+ "star": 419,
+ "commits": 25,
+ "modify_time": "2019-11-25 23:58:19",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/asido/systemmonitor",
+ "star": 419,
+ "commits": 135,
+ "modify_time": "2016-01-16 11:11:13",
+ "last_release": "SystemMonitor-0.1.4",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/anssi-fr/ad-control-paths",
+ "star": 419,
+ "commits": 117,
+ "modify_time": "2019-07-19 09:05:16",
+ "last_release": "v1.4.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/opentechfund/secure-email",
+ "star": 418,
+ "commits": 125,
+ "modify_time": "2018-04-12 00:35:27",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/nilotpalbiswas/auto-root-exploit",
+ "star": 418,
+ "commits": 41,
+ "modify_time": "2019-01-09 16:05:25",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/misterch0c/malsploitbase",
+ "star": 418,
+ "commits": 71,
+ "modify_time": "2019-08-30 19:54:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kragniz/tor-controller",
+ "star": 418,
+ "commits": 167,
+ "modify_time": "2018-09-17 20:28:22",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/jpr5/ngrep",
+ "star": 418,
+ "commits": 361,
+ "modify_time": "2019-01-28 19:07:41",
+ "last_release": "\n V1_47\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/honeynet/droidbot",
+ "star": 418,
+ "commits": 608,
+ "modify_time": "2019-09-08 14:25:34",
+ "last_release": "\n 1.0.2b1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dropsofzut/awesome-security-weixin-official-accounts",
+ "star": 418,
+ "commits": 49,
+ "modify_time": "2019-12-02 02:21:59",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/chishaxie/blindwatermark",
+ "star": 418,
+ "commits": 6,
+ "modify_time": "2016-09-30 18:53:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/7kbstorm/7kbscan-webpathbrute",
+ "star": 418,
+ "commits": 10,
+ "modify_time": "2019-05-08 14:20:36",
+ "last_release": "1.60",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/hmbsbige/shadowsocksr-android",
+ "star": 417,
+ "commits": 1777,
+ "modify_time": "2019-11-07 14:40:12",
+ "last_release": "3.6.0",
+ "lang": "Kotlin"
+ },
+ {
+ "link": "https://github.com/veekxt/v2ray-template",
+ "star": 417,
+ "commits": 22,
+ "modify_time": "2018-11-27 05:50:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/openresty/luajit2",
+ "star": 417,
+ "commits": 2440,
+ "modify_time": "2019-10-05 00:06:09",
+ "last_release": "\n v2.1-20190912\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/mykter/afl-training",
+ "star": 417,
+ "commits": 66,
+ "modify_time": "2019-07-19 09:53:26",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/simonkagstrom/kcov",
+ "star": 417,
+ "commits": 1814,
+ "modify_time": "2019-12-05 08:47:19",
+ "last_release": "v37",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/mxabc/devdatatool",
+ "star": 417,
+ "commits": 32,
+ "modify_time": "2019-01-25 08:17:32",
+ "last_release": "\n 1.0.4\n ",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/mm0r1/exploits",
+ "star": 417,
+ "commits": 5,
+ "modify_time": "2019-11-28 00:26:49",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/malwares/botnet",
+ "star": 417,
+ "commits": 6,
+ "modify_time": "2016-12-28 04:32:02",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/deeponion/deeponion-legacy",
+ "star": 417,
+ "commits": 635,
+ "modify_time": "2019-12-09 21:16:06",
+ "last_release": "v1.8.5.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/chokcoco/httphijack",
+ "star": 417,
+ "commits": 54,
+ "modify_time": "2018-06-28 15:58:55",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/awslabs/aws-waf-security-automations",
+ "star": 417,
+ "commits": 17,
+ "modify_time": "2019-04-30 17:18:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ExodusVPN/exodus",
+ "star": 416,
+ "commits": 322,
+ "modify_time": "2019-09-24 15:26:00",
+ "last_release": "Alpha-3",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/x3omdax/penbox",
+ "star": 416,
+ "commits": 81,
+ "modify_time": "2016-11-04 21:01:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/powerscript/katanaframework",
+ "star": 416,
+ "commits": 649,
+ "modify_time": "2019-02-03 20:50:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/frida/frida-python",
+ "star": 416,
+ "commits": 534,
+ "modify_time": "2019-12-05 16:48:31",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/evilcos/xssor",
+ "star": 416,
+ "commits": 3,
+ "modify_time": "2017-06-25 08:31:53",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/zhengmin1989/greatiosjailbreakmaterial",
+ "star": 415,
+ "commits": 25,
+ "modify_time": "2018-06-14 08:13:14",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/sroberts/awesome-iocs",
+ "star": 415,
+ "commits": 42,
+ "modify_time": "2019-04-04 04:37:49",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/preos-security/awesome-firmware-security",
+ "star": 415,
+ "commits": 14,
+ "modify_time": "2019-07-18 23:57:01",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/odzhan/injection",
+ "star": 415,
+ "commits": 66,
+ "modify_time": "2019-09-12 04:02:56",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/libvmi/libvmi",
+ "star": 415,
+ "commits": 1397,
+ "modify_time": "2019-12-08 19:21:07",
+ "last_release": "v0.12.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/graalvm/graalpython",
+ "star": 415,
+ "commits": 6207,
+ "modify_time": "2019-12-09 16:17:30",
+ "last_release": "vm-19.3.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/forensicartifacts/artifacts",
+ "star": 415,
+ "commits": 442,
+ "modify_time": "2019-12-10 07:36:24",
+ "last_release": "20190320",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ciscocsirt/malspider",
+ "star": 415,
+ "commits": 57,
+ "modify_time": "2017-04-17 19:09:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/autocracy/python-ipy",
+ "star": 414,
+ "commits": 192,
+ "modify_time": "2019-02-27 23:41:55",
+ "last_release": "\n IPy-1.00\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hunters-forge/OSSEM",
+ "star": 414,
+ "commits": 260,
+ "modify_time": "2019-12-01 03:55:12",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/TheHive-Project/Cortex",
+ "star": 414,
+ "commits": 552,
+ "modify_time": "2019-09-05 13:52:04",
+ "last_release": "3.0.0",
+ "lang": "Scala"
+ },
+ {
+ "link": "https://github.com/thesecondsun/bashark",
+ "star": 414,
+ "commits": 13,
+ "modify_time": "2019-12-06 21:29:56",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/sibson/redbeat",
+ "star": 414,
+ "commits": 389,
+ "modify_time": "2019-11-19 13:58:46",
+ "last_release": "v0.10.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/samba-team/samba",
+ "star": 414,
+ "commits": 120328,
+ "modify_time": "2019-12-07 04:35:26",
+ "last_release": "\n samba-4.11.3\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ridter/cve-2017-11882",
+ "star": 414,
+ "commits": 10,
+ "modify_time": "2017-11-29 03:33:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pgaijin66/xss-payloads",
+ "star": 414,
+ "commits": 5,
+ "modify_time": "2016-08-23 05:55:12",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/nccgroup/freddy",
+ "star": 414,
+ "commits": 40,
+ "modify_time": "2019-07-21 14:29:25",
+ "last_release": "\n 2.2.3\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/kvasirsecurity/kvasir",
+ "star": 414,
+ "commits": 285,
+ "modify_time": "2017-07-14 20:19:51",
+ "last_release": "v1.1.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jbe2277/waf",
+ "star": 414,
+ "commits": 669,
+ "modify_time": "2019-11-18 20:25:55",
+ "last_release": "v5.1.0",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/dashingsoft/pyarmor",
+ "star": 414,
+ "commits": 1998,
+ "modify_time": "2019-12-07 10:24:42",
+ "last_release": "v5.8.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/chef-koch/nsablocklist",
+ "star": 414,
+ "commits": 445,
+ "modify_time": "2019-12-08 00:53:05",
+ "last_release": "1.4",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/autocracy/python-ipy",
+ "star": 414,
+ "commits": 192,
+ "modify_time": "2019-02-27 23:41:55",
+ "last_release": "\n IPy-1.00\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/epsylon/xsser",
+ "star": 413,
+ "commits": 39,
+ "modify_time": "2019-11-16 19:23:05",
+ "last_release": "v1.8.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/avast/retdec-idaplugin",
+ "star": 413,
+ "commits": 150,
+ "modify_time": "2019-09-18 11:40:57",
+ "last_release": "v0.9",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/wupco/weblogger",
+ "star": 413,
+ "commits": 6,
+ "modify_time": "2018-06-13 06:37:51",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/tenable/routeros",
+ "star": 413,
+ "commits": 37,
+ "modify_time": "2019-11-12 16:03:39",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/stanislav-web/opendoor",
+ "star": 413,
+ "commits": 393,
+ "modify_time": "2019-07-11 13:00:25",
+ "last_release": "v3.4.5-test",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/prife/virtualappdoc",
+ "star": 413,
+ "commits": 32,
+ "modify_time": "2016-09-01 14:03:08",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ngalongc/autolocalprivilegeescalation",
+ "star": 413,
+ "commits": 16,
+ "modify_time": "2016-04-30 00:52:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lukefalsina/grab-n-run",
+ "star": 413,
+ "commits": 212,
+ "modify_time": "2016-05-24 00:28:29",
+ "last_release": "\n v1.0.4\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/kromtech/s3-inspector",
+ "star": 413,
+ "commits": 49,
+ "modify_time": "2018-04-24 12:32:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jeremyh/jbcrypt",
+ "star": 413,
+ "commits": 2,
+ "modify_time": "2015-02-02 00:42:56",
+ "last_release": "\n jbcrypt-0.4\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/henkaku/henkaku",
+ "star": 413,
+ "commits": 329,
+ "modify_time": "2018-04-04 17:03:13",
+ "last_release": "stubs-r6",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/demi6od/smashing_the_browser",
+ "star": 413,
+ "commits": 19,
+ "modify_time": "2015-07-18 00:07:28",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/aarond10/https_dns_proxy",
+ "star": 413,
+ "commits": 150,
+ "modify_time": "2019-12-03 09:39:30",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/Polymer/prpl-server",
+ "star": 412,
+ "commits": 113,
+ "modify_time": "2019-01-07 23:12:30",
+ "last_release": "v1.0.0",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/vasanthk/web-security-basics",
+ "star": 412,
+ "commits": 33,
+ "modify_time": "2017-06-15 06:42:47",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/hfiref0x/vboxhardenedloader",
+ "star": 412,
+ "commits": 68,
+ "modify_time": "2019-08-08 08:34:30",
+ "last_release": "v1.10.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/batfish/batfish",
+ "star": 412,
+ "commits": 9080,
+ "modify_time": "2019-12-10 03:23:45",
+ "last_release": "v2019.11.20",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/51x/whp",
+ "star": 412,
+ "commits": 11,
+ "modify_time": "2018-03-06 09:34:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/praetorian-code/purple-team-attack-automation",
+ "star": 411,
+ "commits": 52465,
+ "modify_time": "2019-07-03 14:52:48",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/wg/scrypt",
+ "star": 411,
+ "commits": 21,
+ "modify_time": "2013-05-26 03:46:37",
+ "last_release": "\n 1.4.0\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/osnr/horrifying-pdf-experiments",
+ "star": 411,
+ "commits": 21,
+ "modify_time": "2019-11-17 00:32:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/operatorequals/covertutils",
+ "star": 411,
+ "commits": 226,
+ "modify_time": "2018-01-19 11:11:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lavabit/libdime",
+ "star": 411,
+ "commits": 616,
+ "modify_time": "2019-08-29 11:33:47",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/hoshimin/kernel-bridge",
+ "star": 411,
+ "commits": 114,
+ "modify_time": "2019-11-18 20:58:30",
+ "last_release": "v1.10",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/felipedaragon/sandcat",
+ "star": 411,
+ "commits": 130,
+ "modify_time": "2019-09-12 16:45:39",
+ "last_release": "v6.0",
+ "lang": "Pascal"
+ },
+ {
+ "link": "https://github.com/corkami/collisions",
+ "star": 411,
+ "commits": 76,
+ "modify_time": "2019-12-02 19:42:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/0x27/linux.mirai",
+ "star": 411,
+ "commits": 5,
+ "modify_time": "2017-02-17 09:12:44",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/mewmew/dissection",
+ "star": 410,
+ "commits": 222,
+ "modify_time": "2019-03-21 17:33:56",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/titansec/openwaf",
+ "star": 410,
+ "commits": 361,
+ "modify_time": "2019-01-29 03:10:29",
+ "last_release": "v0.0.6",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/gcla/gowid",
+ "star": 410,
+ "commits": 70,
+ "modify_time": "2019-11-16 18:19:33",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/dnsviz/dnsviz",
+ "star": 410,
+ "commits": 2305,
+ "modify_time": "2019-06-27 19:23:17",
+ "last_release": "v0.8.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/d4rk007/redghost",
+ "star": 410,
+ "commits": 112,
+ "modify_time": "2019-08-01 03:57:33",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/cobaltfusion/debugviewpp",
+ "star": 410,
+ "commits": 1550,
+ "modify_time": "2019-09-09 22:28:44",
+ "last_release": "v1.8.0.86",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/cloudburst/libheap",
+ "star": 410,
+ "commits": 143,
+ "modify_time": "2017-12-01 13:46:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/husnainfareed/Awesome-Ethical-Hacking-Resources",
+ "star": 409,
+ "commits": 53,
+ "modify_time": "2019-11-14 09:42:42",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/linklayer/pyvit",
+ "star": 409,
+ "commits": 188,
+ "modify_time": "2019-03-03 16:10:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/Windsooon/cherry",
+ "star": 409,
+ "commits": 274,
+ "modify_time": "2019-09-18 06:46:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zyfworks/ssr-backup",
+ "star": 409,
+ "commits": 4,
+ "modify_time": "2017-07-27 15:02:49",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ytisf/pyexfil",
+ "star": 409,
+ "commits": 77,
+ "modify_time": "2019-12-08 08:24:14",
+ "last_release": "v0.9",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ojasookert/cve-2017-0785",
+ "star": 409,
+ "commits": 1,
+ "modify_time": "2017-09-20 23:32:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nahamsec/jsparser",
+ "star": 409,
+ "commits": 31,
+ "modify_time": "2017-11-17 23:48:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/itayc0hen/a-journey-into-radare2",
+ "star": 409,
+ "commits": 28,
+ "modify_time": "2019-07-12 20:09:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/angea/pocorgtfo",
+ "star": 409,
+ "commits": 45,
+ "modify_time": "2019-10-08 18:24:36",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/0vercl0k/cve-2019-11708",
+ "star": 408,
+ "commits": 8,
+ "modify_time": "2019-12-07 11:44:06",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/xapax/oscp",
+ "star": 408,
+ "commits": 9,
+ "modify_time": "2018-05-27 19:22:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/RobertYim/ShadowsocksX",
+ "star": 408,
+ "commits": 217,
+ "modify_time": "2016-07-04 13:08:11",
+ "last_release": "2.6.5",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ufrisk/memprocfs",
+ "star": 408,
+ "commits": 45,
+ "modify_time": "2019-12-04 21:51:04",
+ "last_release": "v3.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/souhardya/uboat",
+ "star": 408,
+ "commits": 83,
+ "modify_time": "2019-11-13 11:21:04",
+ "last_release": "panel",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/rub-syssec/kafl",
+ "star": 408,
+ "commits": 6,
+ "modify_time": "2017-11-28 16:41:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lyle-nel/siga",
+ "star": 408,
+ "commits": 59,
+ "modify_time": "2017-09-01 07:40:42",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/fourbrother/kstools",
+ "star": 408,
+ "commits": 11,
+ "modify_time": "2017-06-16 10:26:21",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/devshane/zork",
+ "star": 408,
+ "commits": 12,
+ "modify_time": "2017-06-29 00:13:24",
+ "last_release": "v1.0.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cloudfoundry/gorouter",
+ "star": 408,
+ "commits": 1479,
+ "modify_time": "2019-12-03 17:41:51",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/ww9210/linux_kernel_exploits",
+ "star": 407,
+ "commits": 33,
+ "modify_time": "2018-09-07 00:02:34",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/spring-cloud/spring-cloud-security",
+ "star": 407,
+ "commits": 350,
+ "modify_time": "2019-11-27 08:18:41",
+ "last_release": "\n v2.2.0.RELEASE\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/officedev/o365-investigationtooling",
+ "star": 407,
+ "commits": 54,
+ "modify_time": "2019-09-20 21:33:34",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/nccgroup/burpsuitehttpsmuggler",
+ "star": 407,
+ "commits": 13,
+ "modify_time": "2019-05-04 06:15:41",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/naneau/php-obfuscator",
+ "star": 407,
+ "commits": 38,
+ "modify_time": "2016-12-19 15:53:23",
+ "last_release": "\n 0.0.5\n ",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/mitrecnd/chopshop",
+ "star": 407,
+ "commits": 413,
+ "modify_time": "2019-04-10 19:17:16",
+ "last_release": "RELEASE_4.4",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kai5263499/osx-security-awesome",
+ "star": 407,
+ "commits": 145,
+ "modify_time": "2019-04-27 18:47:47",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/bl4de/security-tools",
+ "star": 407,
+ "commits": 523,
+ "modify_time": "2019-11-24 00:27:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/arkadiyt/aws_public_ips",
+ "star": 407,
+ "commits": 34,
+ "modify_time": "2019-11-07 19:58:13",
+ "last_release": "1.0.7",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/spatie/ssl-certificate",
+ "star": 406,
+ "commits": 168,
+ "modify_time": "2019-11-18 09:24:07",
+ "last_release": "1.16.1",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/jiangxufeng/v2rayl",
+ "star": 406,
+ "commits": 94,
+ "modify_time": "2019-11-24 15:55:09",
+ "last_release": "2.1.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wbenny/hvpp",
+ "star": 406,
+ "commits": 146,
+ "modify_time": "2019-10-31 15:24:30",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/testwhat/smaliex",
+ "star": 406,
+ "commits": 1913,
+ "modify_time": "2018-09-18 16:51:34",
+ "last_release": "snapshot",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/m4b/goblin",
+ "star": 406,
+ "commits": 631,
+ "modify_time": "2019-12-03 07:12:03",
+ "last_release": "",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/fossfreedom/indicator-sysmonitor",
+ "star": 406,
+ "commits": 97,
+ "modify_time": "2018-06-14 05:03:17",
+ "last_release": "\n 0.5\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/breenmachine/httpscreenshot",
+ "star": 406,
+ "commits": 53,
+ "modify_time": "2017-05-15 11:36:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lanmaster53/recon-ng",
+ "star": 405,
+ "commits": 1007,
+ "modify_time": "2019-10-29 02:06:36",
+ "last_release": "\n v5.1.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/s0md3v/Diggy",
+ "star": 405,
+ "commits": 20,
+ "modify_time": "2019-11-13 14:05:34",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/crytic/slither",
+ "star": 405,
+ "commits": 1508,
+ "modify_time": "2019-12-09 10:48:01",
+ "last_release": "0.6.8",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xitu/macos-security-and-privacy-guide",
+ "star": 405,
+ "commits": 369,
+ "modify_time": "2017-05-15 06:32:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vah13/extracttvpasswords",
+ "star": 405,
+ "commits": 48,
+ "modify_time": "2018-07-17 07:05:19",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/shack2/supersqlinjectionv1",
+ "star": 405,
+ "commits": 79,
+ "modify_time": "2019-09-04 16:25:12",
+ "last_release": "1.0.2019.09.05",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/paloaltonetworks/wirelurkerdetector",
+ "star": 405,
+ "commits": 26,
+ "modify_time": "2014-11-15 22:51:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mp0w/ios-headers",
+ "star": 405,
+ "commits": 35,
+ "modify_time": "2014-10-24 18:36:46",
+ "last_release": "7.0",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/coalfire-research/ios-11.1.2-15b202-jailbreak",
+ "star": 405,
+ "commits": 34,
+ "modify_time": "2018-10-10 18:23:31",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/thundercls/xanalyzer",
+ "star": 404,
+ "commits": 69,
+ "modify_time": "2019-09-20 21:39:31",
+ "last_release": "2.5.4",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/svent/jsdetox",
+ "star": 404,
+ "commits": 29,
+ "modify_time": "2015-01-04 14:16:21",
+ "last_release": "\n v0.2.0\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/iaik/rowhammerjs",
+ "star": 404,
+ "commits": 24,
+ "modify_time": "2017-05-12 06:46:29",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/google/closure-templates",
+ "star": 404,
+ "commits": 2945,
+ "modify_time": "2019-11-25 08:56:51",
+ "last_release": "\n release-2019-10-08\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/chaitin/cloudwalker",
+ "star": 404,
+ "commits": 8,
+ "modify_time": "2018-10-10 03:59:52",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/cagataycali/xss-listener",
+ "star": 404,
+ "commits": 27,
+ "modify_time": "2018-03-12 07:06:59",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/bettermanbao/openwrt-shadowsocksr-libev-full",
+ "star": 404,
+ "commits": 6,
+ "modify_time": "2017-07-21 13:36:12",
+ "last_release": "v20170613",
+ "lang": "Makefile"
+ },
+ {
+ "link": "https://github.com/Fuzzapi/fuzzapi",
+ "star": 403,
+ "commits": 89,
+ "modify_time": "2018-01-29 05:05:03",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/vk496/linset",
+ "star": 403,
+ "commits": 9,
+ "modify_time": "2014-06-15 23:04:41",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/rootm0s/injectors",
+ "star": 403,
+ "commits": 47,
+ "modify_time": "2018-04-21 20:33:15",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/nsmfoo/antivmdetection",
+ "star": 403,
+ "commits": 47,
+ "modify_time": "2019-11-19 07:18:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/handshake-org/hsd",
+ "star": 403,
+ "commits": 5389,
+ "modify_time": "2019-12-02 14:54:19",
+ "last_release": "\n testnet4\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/darthton/hyperbone",
+ "star": 403,
+ "commits": 19,
+ "modify_time": "2019-03-30 16:14:53",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/danielbohannon/invoke-dosfuscation",
+ "star": 403,
+ "commits": 7,
+ "modify_time": "2018-03-27 12:16:17",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/christruncer/pentestscripts",
+ "star": 403,
+ "commits": 55,
+ "modify_time": "2019-02-20 23:09:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/710leo/zvuldrill",
+ "star": 403,
+ "commits": 18,
+ "modify_time": "2017-03-07 04:49:46",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/liudf0716/xkcptun",
+ "star": 402,
+ "commits": 472,
+ "modify_time": "2019-10-08 00:56:18",
+ "last_release": "0.4.409",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/zenlulz/memorysharp",
+ "star": 402,
+ "commits": 33,
+ "modify_time": "2016-11-04 21:40:42",
+ "last_release": "v1.1",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/syworks/waidps",
+ "star": 402,
+ "commits": 16,
+ "modify_time": "2014-12-24 18:37:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rwfpl/rewolf-wow64ext",
+ "star": 402,
+ "commits": 44,
+ "modify_time": "2017-01-17 23:20:15",
+ "last_release": "v1.0.0.9",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/megatronking/netbare",
+ "star": 402,
+ "commits": 120,
+ "modify_time": "2019-08-24 17:11:23",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/fuzion24/androidkernelexploitationplayground",
+ "star": 402,
+ "commits": 92,
+ "modify_time": "2018-05-30 18:46:49",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/evilsocket/shellz",
+ "star": 402,
+ "commits": 142,
+ "modify_time": "2019-02-21 17:19:56",
+ "last_release": "v1.5.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/1an0rmus/tekdefense-automater",
+ "star": 402,
+ "commits": 88,
+ "modify_time": "2016-05-30 22:54:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/w3c/webappsec",
+ "star": 401,
+ "commits": 2009,
+ "modify_time": "2019-11-19 20:21:11",
+ "last_release": "\n MIX-CR\n ",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/sleventyeleven/linuxprivchecker",
+ "star": 401,
+ "commits": 6,
+ "modify_time": "2016-03-02 10:41:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sap/macos-enterprise-privileges",
+ "star": 401,
+ "commits": 27,
+ "modify_time": "2019-11-20 14:26:41",
+ "last_release": "1.0.5",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/isecpartners/introspy-android",
+ "star": 401,
+ "commits": 49,
+ "modify_time": "2014-01-13 10:37:11",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/aztecprotocol/aztec",
+ "star": 401,
+ "commits": 1795,
+ "modify_time": "2019-12-09 12:41:19",
+ "last_release": "\n @aztec/contract-artifacts@1.14.1\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/fbngrm/Matroschka",
+ "star": 400,
+ "commits": 58,
+ "modify_time": "2019-11-09 12:35:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/spring-cloud/spring-cloud-gcp",
+ "star": 400,
+ "commits": 1004,
+ "modify_time": "2019-12-07 00:48:59",
+ "last_release": "\n v1.2.0.RELEASE\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/skyblueeternal/thinkphp-rce-poc-collection",
+ "star": 400,
+ "commits": 24,
+ "modify_time": "2019-01-15 07:04:12",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/jpaulmora/pyrit",
+ "star": 400,
+ "commits": 300,
+ "modify_time": "2018-08-01 03:18:26",
+ "last_release": "v0.5.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dstmath/frida-unpack",
+ "star": 400,
+ "commits": 8,
+ "modify_time": "2018-12-25 08:20:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lifting-bits/remill",
+ "star": 399,
+ "commits": 756,
+ "modify_time": "2019-12-05 18:45:21",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/pqpo/inputmethodholder",
+ "star": 399,
+ "commits": 15,
+ "modify_time": "2017-06-19 02:59:49",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/ezelf/cve-2018-9995_dvr_credentials",
+ "star": 399,
+ "commits": 13,
+ "modify_time": "2018-05-05 17:46:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/eviltik/evilscan",
+ "star": 399,
+ "commits": 182,
+ "modify_time": "2019-01-23 22:14:47",
+ "last_release": "\n 1.1.1\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/dan-v/rattlesnakeos-stack",
+ "star": 399,
+ "commits": 146,
+ "modify_time": "2019-12-08 05:08:57",
+ "last_release": "v10.0.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/cea-sec/sibyl",
+ "star": 399,
+ "commits": 297,
+ "modify_time": "2019-07-15 15:39:50",
+ "last_release": "v0.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ac-pm/sslunpinning_xposed",
+ "star": 399,
+ "commits": 17,
+ "modify_time": "2016-09-15 13:25:31",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/0xdea/frida-scripts",
+ "star": 399,
+ "commits": 32,
+ "modify_time": "2017-10-27 12:28:27",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/sekoialab/fastir_collector",
+ "star": 398,
+ "commits": 81,
+ "modify_time": "2017-05-16 08:27:52",
+ "last_release": "V1.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kablaa/ctf-workshop",
+ "star": 398,
+ "commits": 231,
+ "modify_time": "2017-04-12 18:59:49",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/grayddq/publicmonitors",
+ "star": 398,
+ "commits": 10,
+ "modify_time": "2018-10-09 11:54:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/freifunk-gluon/gluon",
+ "star": 398,
+ "commits": 3213,
+ "modify_time": "2019-12-07 20:40:01",
+ "last_release": "v2019.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/floedesigntechnologies/phpcs-security-audit",
+ "star": 398,
+ "commits": 93,
+ "modify_time": "2019-08-05 19:34:55",
+ "last_release": "2.0.1",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/cloudflare/mitmengine",
+ "star": 398,
+ "commits": 68,
+ "modify_time": "2019-08-30 20:56:37",
+ "last_release": "\n v1.0.5\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/x899/chrome_password_grabber",
+ "star": 397,
+ "commits": 22,
+ "modify_time": "2019-10-22 07:09:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/thinkst/canarytokens",
+ "star": 397,
+ "commits": 129,
+ "modify_time": "2019-10-01 09:20:58",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/philwantsfish/shard",
+ "star": 397,
+ "commits": 64,
+ "modify_time": "2016-10-05 16:47:47",
+ "last_release": "1.5",
+ "lang": "Scala"
+ },
+ {
+ "link": "https://github.com/ph055a/osint-collection",
+ "star": 397,
+ "commits": 196,
+ "modify_time": "2019-09-21 04:44:00",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/mushorg/glastopf",
+ "star": 397,
+ "commits": 817,
+ "modify_time": "2019-09-15 20:33:56",
+ "last_release": "3.1.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/duo-labs/cloudtracker",
+ "star": 397,
+ "commits": 79,
+ "modify_time": "2019-08-29 14:06:55",
+ "last_release": "2.1.4",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/spring-cloud/spring-cloud-aws",
+ "star": 396,
+ "commits": 1453,
+ "modify_time": "2019-11-28 07:33:13",
+ "last_release": "\n v2.2.0.RELEASE\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/se55i0n/dbscanner",
+ "star": 396,
+ "commits": 11,
+ "modify_time": "2017-12-01 13:51:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/routerkeygen/routerkeygenandroid",
+ "star": 396,
+ "commits": 461,
+ "modify_time": "2018-01-21 20:43:27",
+ "last_release": "v4.0.2",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/riobard/go-shadowsocks2",
+ "star": 396,
+ "commits": 64,
+ "modify_time": "2018-08-15 10:37:34",
+ "last_release": "v0.1.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/moloch--/rootthebox",
+ "star": 396,
+ "commits": 1154,
+ "modify_time": "2019-12-08 20:00:12",
+ "last_release": "3.3.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/milo2012/osintstalker",
+ "star": 396,
+ "commits": 50,
+ "modify_time": "2013-10-29 03:55:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/limneos/classdump-dyld",
+ "star": 396,
+ "commits": 82,
+ "modify_time": "2019-11-10 23:15:43",
+ "last_release": "",
+ "lang": "Logos"
+ },
+ {
+ "link": "https://github.com/ioactive/jdwp-shellifier",
+ "star": 396,
+ "commits": 16,
+ "modify_time": "2017-01-14 00:36:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gexos/hacking-tools-repository",
+ "star": 396,
+ "commits": 43,
+ "modify_time": "2019-05-26 08:30:12",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/fireyfly/pixd",
+ "star": 396,
+ "commits": 7,
+ "modify_time": "2017-11-12 18:02:41",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/dreadlocked/drupalgeddon2",
+ "star": 396,
+ "commits": 98,
+ "modify_time": "2019-02-18 06:34:40",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/cryps1s/darksurgeon",
+ "star": 396,
+ "commits": 21,
+ "modify_time": "2018-05-17 04:37:12",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/ansjdnakjdnajkd/ios",
+ "star": 396,
+ "commits": 19,
+ "modify_time": "2019-08-21 13:57:38",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/hatriot/token-priv",
+ "star": 395,
+ "commits": 5,
+ "modify_time": "2017-09-01 18:54:26",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/graniet/operative-framework",
+ "star": 395,
+ "commits": 124,
+ "modify_time": "2019-12-10 05:58:45",
+ "last_release": "1.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/derjanb/hamiyoca",
+ "star": 395,
+ "commits": 4,
+ "modify_time": "2017-07-13 06:40:00",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/breakthenet/hackme-sql-injection-challenges",
+ "star": 395,
+ "commits": 37,
+ "modify_time": "2016-04-02 01:48:35",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/kuoruan/openwrt-v2ray",
+ "star": 394,
+ "commits": 71,
+ "modify_time": "2019-12-01 13:34:20",
+ "last_release": "v4.21.3-1",
+ "lang": "Makefile"
+ },
+ {
+ "link": "https://github.com/eerkunt/terraform-compliance",
+ "star": 394,
+ "commits": 601,
+ "modify_time": "2019-12-06 11:07:03",
+ "last_release": "1.0.58",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sweis/crypto-might-not-suck",
+ "star": 394,
+ "commits": 59,
+ "modify_time": "2018-06-30 21:23:45",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/sektioneins/suidguard",
+ "star": 394,
+ "commits": 9,
+ "modify_time": "2016-03-23 14:27:35",
+ "last_release": "v1.0.6a",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ibm/mac-ibm-enrollment-app",
+ "star": 394,
+ "commits": 60,
+ "modify_time": "2019-01-17 20:13:49",
+ "last_release": "",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/hillbrad/u2freviews",
+ "star": 394,
+ "commits": 49,
+ "modify_time": "2018-09-06 04:47:51",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/cr4shcod3/pureblood",
+ "star": 394,
+ "commits": 37,
+ "modify_time": "2018-12-08 04:30:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mitre/multiscanner",
+ "star": 393,
+ "commits": 1559,
+ "modify_time": "2019-01-28 14:07:45",
+ "last_release": "2.0.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tomnomnom/waybackurls",
+ "star": 393,
+ "commits": 9,
+ "modify_time": "2018-08-28 15:56:06",
+ "last_release": "v0.0.2",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/killswitch-gui/cobaltstrike-toolkit",
+ "star": 393,
+ "commits": 45,
+ "modify_time": "2018-09-19 15:09:40",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/guelfoweb/peframe",
+ "star": 393,
+ "commits": 126,
+ "modify_time": "2019-11-07 14:47:12",
+ "last_release": "6.0.3",
+ "lang": "YARA"
+ },
+ {
+ "link": "https://github.com/federicodotta/java-deserialization-scanner",
+ "star": 393,
+ "commits": 74,
+ "modify_time": "2018-04-22 10:24:38",
+ "last_release": "v0.5",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/fate0/pychrome",
+ "star": 393,
+ "commits": 53,
+ "modify_time": "2018-04-24 17:54:09",
+ "last_release": "\n v0.2.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/essandess/isp-data-pollution",
+ "star": 393,
+ "commits": 127,
+ "modify_time": "2018-12-16 12:42:59",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/clr2of8/dpat",
+ "star": 393,
+ "commits": 73,
+ "modify_time": "2019-11-01 22:47:59",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/chpmrc/zero-width-chrome-extension",
+ "star": 393,
+ "commits": 10,
+ "modify_time": "2018-04-19 14:39:00",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/zhengmin1989/rop_step_by_step",
+ "star": 392,
+ "commits": 9,
+ "modify_time": "2015-12-16 13:43:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jm33-m0/mec",
+ "star": 392,
+ "commits": 207,
+ "modify_time": "2019-05-12 04:05:09",
+ "last_release": "v1.4.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/googleprojectzero/functionsimsearch",
+ "star": 392,
+ "commits": 367,
+ "modify_time": "2018-12-19 12:49:56",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/squalr/squalr",
+ "star": 392,
+ "commits": 1598,
+ "modify_time": "2018-08-01 02:01:51",
+ "last_release": "2.3.13",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/savon-noir/python-libnmap",
+ "star": 392,
+ "commits": 369,
+ "modify_time": "2019-05-07 11:35:51",
+ "last_release": "\n v0.6.3\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/repoog/gitprey",
+ "star": 392,
+ "commits": 54,
+ "modify_time": "2019-05-20 17:57:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nginxinc/nginx-ldap-auth",
+ "star": 392,
+ "commits": 67,
+ "modify_time": "2019-10-31 12:10:59",
+ "last_release": "release-0.0.5",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lihaoyi/utest",
+ "star": 392,
+ "commits": 473,
+ "modify_time": "2019-12-09 09:07:50",
+ "last_release": "v0.6.6",
+ "lang": "Scala"
+ },
+ {
+ "link": "https://github.com/harmj0y/keethief",
+ "star": 392,
+ "commits": 4,
+ "modify_time": "2016-12-22 23:49:54",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/d0nkeys/redteam",
+ "star": 392,
+ "commits": 97,
+ "modify_time": "2019-11-30 00:43:14",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/cseagle/sk3wldbg",
+ "star": 392,
+ "commits": 52,
+ "modify_time": "2018-12-18 08:12:21",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/chrismaddalena/odin",
+ "star": 392,
+ "commits": 203,
+ "modify_time": "2018-12-03 01:58:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/williballenthin/python-evtx",
+ "star": 391,
+ "commits": 250,
+ "modify_time": "2019-03-07 17:46:25",
+ "last_release": "v0.6.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/r0ysue/osg-translationteam",
+ "star": 391,
+ "commits": 137,
+ "modify_time": "2017-12-08 13:50:17",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/mozilla/masche",
+ "star": 391,
+ "commits": 224,
+ "modify_time": "2019-02-05 20:30:08",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/mauri870/ransomware",
+ "star": 391,
+ "commits": 184,
+ "modify_time": "2018-11-17 14:27:46",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/mandatoryprogrammer/judasdns",
+ "star": 391,
+ "commits": 5,
+ "modify_time": "2017-02-26 22:49:56",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/hasherezade/hollows_hunter",
+ "star": 391,
+ "commits": 245,
+ "modify_time": "2019-12-04 23:48:38",
+ "last_release": "v0.2.2.7",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/conorpp/btproxy",
+ "star": 391,
+ "commits": 71,
+ "modify_time": "2018-01-30 01:08:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/capacitorset/box-js",
+ "star": 391,
+ "commits": 367,
+ "modify_time": "2019-06-14 17:17:23",
+ "last_release": "\n v1.9.7\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/bitbrute/evillimiter",
+ "star": 391,
+ "commits": 31,
+ "modify_time": "2019-10-20 15:16:56",
+ "last_release": "v1.4.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ym2011/securitymanagement",
+ "star": 390,
+ "commits": 67,
+ "modify_time": "2019-11-14 07:46:38",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/yadominjinta/atilo",
+ "star": 390,
+ "commits": 124,
+ "modify_time": "2019-11-13 08:49:50",
+ "last_release": "1.7.1",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/und3rf10w/kali-anonsurf",
+ "star": 390,
+ "commits": 37,
+ "modify_time": "2017-07-18 15:10:07",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/th3xace/sudo_killer",
+ "star": 390,
+ "commits": 169,
+ "modify_time": "2019-11-27 20:41:49",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/swwwolf/wdbgark",
+ "star": 390,
+ "commits": 283,
+ "modify_time": "2018-02-11 11:48:06",
+ "last_release": "alpha",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/stamparm/eternalrocks",
+ "star": 390,
+ "commits": 82,
+ "modify_time": "2017-05-25 09:09:01",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/p0sixspwn/p0sixspwn",
+ "star": 390,
+ "commits": 1,
+ "modify_time": "2013-12-30 21:02:10",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/laurelai/decompile-dump",
+ "star": 390,
+ "commits": 12,
+ "modify_time": "2018-10-10 08:43:31",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/microsoft/linux-vm-tools",
+ "star": 389,
+ "commits": 87,
+ "modify_time": "2019-03-11 20:59:53",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/rustyshackleford221/oscp-prep",
+ "star": 389,
+ "commits": 48,
+ "modify_time": "2019-02-04 19:18:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/paulgclark/waveconverter",
+ "star": 389,
+ "commits": 46,
+ "modify_time": "2019-11-16 04:18:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mthbernardes/sshlooter",
+ "star": 389,
+ "commits": 6,
+ "modify_time": "2018-12-19 20:34:51",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/milabs/awesome-linux-rootkits",
+ "star": 389,
+ "commits": 86,
+ "modify_time": "2019-10-19 14:48:58",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/linushenze/webkit-regex-exploit",
+ "star": 389,
+ "commits": 7,
+ "modify_time": "2018-12-09 22:51:08",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/kpwn/tpwn",
+ "star": 389,
+ "commits": 4,
+ "modify_time": "2015-08-16 17:47:55",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/joeferner/node-http-mitm-proxy",
+ "star": 389,
+ "commits": 318,
+ "modify_time": "2019-11-19 03:08:44",
+ "last_release": "v0.5.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/idaholab/malcolm",
+ "star": 389,
+ "commits": 85,
+ "modify_time": "2019-11-25 17:09:01",
+ "last_release": "v1.7.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hasherezade/dll_to_exe",
+ "star": 389,
+ "commits": 28,
+ "modify_time": "2019-06-15 11:57:04",
+ "last_release": "v1.1",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/gstarnberger/uncompyle",
+ "star": 389,
+ "commits": 117,
+ "modify_time": "2016-10-01 21:23:37",
+ "last_release": "\n v0.0.2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/coolervoid/0d1n",
+ "star": 389,
+ "commits": 211,
+ "modify_time": "2019-11-17 01:14:56",
+ "last_release": "OdinV2.6",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/collinbarrett/filterlists",
+ "star": 389,
+ "commits": 3683,
+ "modify_time": "2019-12-10 05:22:31",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/bdcht/amoco",
+ "star": 389,
+ "commits": 343,
+ "modify_time": "2019-11-26 06:47:42",
+ "last_release": "\n v2.9.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/alphasoc/flightsim",
+ "star": 389,
+ "commits": 79,
+ "modify_time": "2019-09-18 20:44:38",
+ "last_release": "v2.0.0-beta.2",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/shellntel/scripts",
+ "star": 388,
+ "commits": 56,
+ "modify_time": "2017-08-17 17:38:56",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/rapid7/metasploit-vulnerability-emulator",
+ "star": 388,
+ "commits": 21,
+ "modify_time": "2018-02-27 01:41:05",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/mricon/rev-proxy-grapher",
+ "star": 388,
+ "commits": 12,
+ "modify_time": "2018-03-01 20:23:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mandatoryprogrammer/cloudflare_enum",
+ "star": 388,
+ "commits": 10,
+ "modify_time": "2016-10-14 03:00:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cyberark/ACLight",
+ "star": 387,
+ "commits": 67,
+ "modify_time": "2019-09-09 06:48:44",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/tobiasbueschel/awesome-pokemon",
+ "star": 387,
+ "commits": 84,
+ "modify_time": "2019-10-30 13:25:32",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/tiagorlampert/saint",
+ "star": 387,
+ "commits": 29,
+ "modify_time": "2019-10-30 15:05:08",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/riotgames/cloud-inquisitor",
+ "star": 387,
+ "commits": 345,
+ "modify_time": "2019-11-04 23:41:32",
+ "last_release": "2.2.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/funkandwagnalls/ranger",
+ "star": 387,
+ "commits": 149,
+ "modify_time": "2016-07-20 21:56:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/frizb/vanquish",
+ "star": 387,
+ "commits": 108,
+ "modify_time": "2018-04-22 04:42:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/elastic/puppet-elasticsearch",
+ "star": 387,
+ "commits": 2178,
+ "modify_time": "2019-08-28 19:05:28",
+ "last_release": "6.4.0",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/digininja/cewl",
+ "star": 387,
+ "commits": 75,
+ "modify_time": "2019-11-28 16:56:52",
+ "last_release": "5.4.6",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/710leo/urlooker",
+ "star": 387,
+ "commits": 34,
+ "modify_time": "2019-09-25 13:36:08",
+ "last_release": "\n v0.0.3\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/36hours/idaemu",
+ "star": 387,
+ "commits": 27,
+ "modify_time": "2016-12-15 23:43:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kpwn/yalu",
+ "star": 386,
+ "commits": 89,
+ "modify_time": "2016-10-22 18:59:22",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/irsdl/iis-shortname-scanner",
+ "star": 386,
+ "commits": 42,
+ "modify_time": "2017-07-11 16:05:13",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/hasherezade/pe_to_shellcode",
+ "star": 386,
+ "commits": 50,
+ "modify_time": "2018-12-17 05:23:17",
+ "last_release": "v0.7",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/google/upvote",
+ "star": 386,
+ "commits": 158,
+ "modify_time": "2019-05-23 18:38:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/blabla1337/skf-flask",
+ "star": 386,
+ "commits": 2028,
+ "modify_time": "2019-11-27 13:38:45",
+ "last_release": "2.0.1",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/bitsadmin/nopowershell",
+ "star": 386,
+ "commits": 20,
+ "modify_time": "2019-07-27 07:01:49",
+ "last_release": "1.23",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/crytic/echidna",
+ "star": 385,
+ "commits": 672,
+ "modify_time": "2019-12-01 00:10:46",
+ "last_release": "1.1.0.0",
+ "lang": "Haskell"
+ },
+ {
+ "link": "https://github.com/ynvb/die",
+ "star": 385,
+ "commits": 181,
+ "modify_time": "2019-07-30 05:22:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/maqp/tfc",
+ "star": 385,
+ "commits": 41,
+ "modify_time": "2019-12-03 01:30:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/m0l1ce/wooyunallbugs",
+ "star": 385,
+ "commits": 15,
+ "modify_time": "2018-01-19 02:49:21",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/aphyr/tund",
+ "star": 385,
+ "commits": 15,
+ "modify_time": "2018-07-26 23:01:19",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/zerosum0x0/smbdoor",
+ "star": 384,
+ "commits": 11,
+ "modify_time": "2019-04-15 19:38:28",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/tidesec/tide",
+ "star": 384,
+ "commits": 22,
+ "modify_time": "2019-05-21 01:19:35",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/stanfordpl/x64asm",
+ "star": 384,
+ "commits": 1302,
+ "modify_time": "2018-07-29 18:06:38",
+ "last_release": "2.1",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/spiderlabs/mcir",
+ "star": 384,
+ "commits": 33,
+ "modify_time": "2016-05-24 16:50:01",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/sgayou/kindle-5.6.5-jailbreak",
+ "star": 384,
+ "commits": 30,
+ "modify_time": "2017-12-02 04:47:08",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/sensepost/dns-shell",
+ "star": 384,
+ "commits": 3,
+ "modify_time": "2016-10-05 14:05:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/microsoft/binskim",
+ "star": 384,
+ "commits": 444,
+ "modify_time": "2019-10-29 23:55:43",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/llvm-mirror/lldb",
+ "star": 384,
+ "commits": 20870,
+ "modify_time": "2019-10-22 04:00:37",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/hatbashbr/hatcloud",
+ "star": 384,
+ "commits": 33,
+ "modify_time": "2019-03-09 01:37:33",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/equalitie/np1sec",
+ "star": 384,
+ "commits": 544,
+ "modify_time": "2017-07-27 19:03:19",
+ "last_release": "0.0.1",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/crifan/scientific_network_summary",
+ "star": 383,
+ "commits": 19,
+ "modify_time": "2019-12-06 13:52:12",
+ "last_release": "",
+ "lang": "Makefile"
+ },
+ {
+ "link": "https://github.com/stephenfewer/grinder",
+ "star": 383,
+ "commits": 136,
+ "modify_time": "2016-09-22 07:38:08",
+ "last_release": "\n v0.6\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/simsong/bulk_extractor",
+ "star": 383,
+ "commits": 1524,
+ "modify_time": "2019-11-16 16:58:39",
+ "last_release": "\n v1.6.0\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/securing/gattacker",
+ "star": 383,
+ "commits": 26,
+ "modify_time": "2018-10-03 09:43:00",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/ptresearch/inteltxe-poc",
+ "star": 383,
+ "commits": 31,
+ "modify_time": "2019-10-13 11:00:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/msurguy/honeypot",
+ "star": 383,
+ "commits": 76,
+ "modify_time": "2019-09-06 16:09:40",
+ "last_release": "1.1.2",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/maestron/reverse-engineering-tutorials",
+ "star": 383,
+ "commits": 3,
+ "modify_time": "2018-09-02 17:28:10",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/davidbuchanan314/nxloader",
+ "star": 383,
+ "commits": 30,
+ "modify_time": "2018-06-20 23:31:24",
+ "last_release": "alpha-0.3",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/terrylinooo/shieldon",
+ "star": 382,
+ "commits": 252,
+ "modify_time": "2019-11-20 05:45:08",
+ "last_release": "0.1.3",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/stamparm/dsss",
+ "star": 382,
+ "commits": 120,
+ "modify_time": "2019-11-12 10:56:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sab0tag3d/siet",
+ "star": 382,
+ "commits": 65,
+ "modify_time": "2019-10-02 13:59:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/p1r06u3/opencanary_web",
+ "star": 382,
+ "commits": 153,
+ "modify_time": "2019-09-12 07:04:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nickstadb/barmie",
+ "star": 382,
+ "commits": 6,
+ "modify_time": "2017-09-28 22:37:50",
+ "last_release": "v1.01",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/kabachook/k8s-security",
+ "star": 382,
+ "commits": 65,
+ "modify_time": "2019-10-11 16:51:28",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/fireeye/reelphish",
+ "star": 382,
+ "commits": 5,
+ "modify_time": "2018-02-07 16:50:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ex0dus-0x/brut3k1t",
+ "star": 382,
+ "commits": 86,
+ "modify_time": "2018-07-13 13:53:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cretz/bine",
+ "star": 382,
+ "commits": 63,
+ "modify_time": "2019-11-05 22:31:59",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/0x09al/rdpthief",
+ "star": 381,
+ "commits": 7,
+ "modify_time": "2019-11-13 14:13:52",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/thejambo/awesome-testing",
+ "star": 381,
+ "commits": 64,
+ "modify_time": "2019-10-23 06:54:09",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/sensepost/snoopy-ng",
+ "star": 381,
+ "commits": 128,
+ "modify_time": "2015-07-27 12:58:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nccgroup/tracy",
+ "star": 381,
+ "commits": 687,
+ "modify_time": "2019-11-13 22:46:18",
+ "last_release": "0.7.4",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/microsoft/windowsdefenderatp-hunting-queries",
+ "star": 381,
+ "commits": 200,
+ "modify_time": "2019-10-28 12:20:15",
+ "last_release": "95390",
+ "lang": "Jupyter Notebook"
+ },
+ {
+ "link": "https://github.com/markus-go/bonesi",
+ "star": 381,
+ "commits": 13,
+ "modify_time": "2018-12-01 20:05:37",
+ "last_release": "v0.3.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/le4f/pcap-analyzer",
+ "star": 381,
+ "commits": 16,
+ "modify_time": "2015-01-17 13:49:42",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/hurricanelabs/machinae",
+ "star": 381,
+ "commits": 176,
+ "modify_time": "2019-05-09 12:42:03",
+ "last_release": "1.4.8",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hahwul/a2sv",
+ "star": 381,
+ "commits": 135,
+ "modify_time": "2019-02-07 16:08:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/empireproject/empire-gui",
+ "star": 381,
+ "commits": 3,
+ "modify_time": "2018-10-01 16:06:21",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/dsopas/assessment-mindset",
+ "star": 381,
+ "commits": 44,
+ "modify_time": "2019-10-22 10:36:15",
+ "last_release": "v0.3",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/deresz/funcap",
+ "star": 381,
+ "commits": 100,
+ "modify_time": "2016-03-04 15:11:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/coolstar/electra1131",
+ "star": 381,
+ "commits": 219,
+ "modify_time": "2019-01-21 00:42:58",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/bloodhoundad/sharphound",
+ "star": 381,
+ "commits": 306,
+ "modify_time": "2019-11-07 21:20:33",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/bastibl/gr-ieee802-11",
+ "star": 381,
+ "commits": 315,
+ "modify_time": "2019-08-26 11:24:31",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/shroudedcode/apk-mitm",
+ "star": 380,
+ "commits": 52,
+ "modify_time": "2019-11-30 11:32:30",
+ "last_release": "v0.6.1",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/sandeepmistry/arduino-bleperipheral",
+ "star": 380,
+ "commits": 387,
+ "modify_time": "2017-09-24 17:19:55",
+ "last_release": "\n 0.4.0\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/robertfisk/usg",
+ "star": 380,
+ "commits": 168,
+ "modify_time": "2019-02-09 07:47:06",
+ "last_release": "1.0r04b",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/risingstack/protect",
+ "star": 380,
+ "commits": 27,
+ "modify_time": "2017-05-25 09:14:00",
+ "last_release": "v1.2.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/puppetlabs/puppetlabs-mysql",
+ "star": 380,
+ "commits": 1913,
+ "modify_time": "2019-12-10 08:03:02",
+ "last_release": "\n v10.2.1\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/msoos/cryptominisat",
+ "star": 380,
+ "commits": 12683,
+ "modify_time": "2019-12-04 20:37:01",
+ "last_release": "5.6.8",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/micrictor/stuxnet",
+ "star": 380,
+ "commits": 17,
+ "modify_time": "2016-10-12 03:11:22",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/foospidy/honeypy",
+ "star": 380,
+ "commits": 598,
+ "modify_time": "2019-08-28 12:19:23",
+ "last_release": "0.7.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/endgameinc/ember",
+ "star": 380,
+ "commits": 49,
+ "modify_time": "2019-09-19 13:32:48",
+ "last_release": "",
+ "lang": "Jupyter Notebook"
+ },
+ {
+ "link": "https://github.com/mfrister/pushproxy",
+ "star": 379,
+ "commits": 61,
+ "modify_time": "2015-01-11 17:53:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/slyth11907/cheatsheets",
+ "star": 379,
+ "commits": 10,
+ "modify_time": "2016-12-07 19:48:28",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/rhinosecuritylabs/sleuthql",
+ "star": 379,
+ "commits": 9,
+ "modify_time": "2018-08-17 21:43:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nowsecure/secure-mobile-development",
+ "star": 379,
+ "commits": 123,
+ "modify_time": "2018-11-20 16:53:46",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/microsoft/lain",
+ "star": 379,
+ "commits": 36,
+ "modify_time": "2019-09-10 01:59:40",
+ "last_release": "",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/jnusimba/androidsecnotes",
+ "star": 379,
+ "commits": 172,
+ "modify_time": "2019-05-22 15:11:34",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/google/binexport",
+ "star": 379,
+ "commits": 44,
+ "modify_time": "2019-12-04 16:41:55",
+ "last_release": "v10",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/codermjlee/mjapptools",
+ "star": 379,
+ "commits": 14,
+ "modify_time": "2018-01-31 12:17:27",
+ "last_release": "1.1.0",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/unprovable/pentesthardware",
+ "star": 378,
+ "commits": 38,
+ "modify_time": "2019-05-29 17:51:41",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/screetsec/microsploit",
+ "star": 378,
+ "commits": 9,
+ "modify_time": "2017-07-11 16:28:26",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/mimoo/rsa-and-lll-attacks",
+ "star": 378,
+ "commits": 178,
+ "modify_time": "2017-07-18 22:47:26",
+ "last_release": "",
+ "lang": "TeX"
+ },
+ {
+ "link": "https://github.com/k4m4/onioff",
+ "star": 378,
+ "commits": 84,
+ "modify_time": "2019-03-16 11:34:18",
+ "last_release": "v2.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hackgnar/ble_ctf",
+ "star": 378,
+ "commits": 79,
+ "modify_time": "2019-08-02 20:44:48",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/furrtek/portapack-havoc",
+ "star": 378,
+ "commits": 1811,
+ "modify_time": "2019-10-29 21:53:54",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/david942j/seccomp-tools",
+ "star": 378,
+ "commits": 121,
+ "modify_time": "2019-11-29 01:04:09",
+ "last_release": "1.3.0",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/bo0om/php_imap_open_exploit",
+ "star": 378,
+ "commits": 6,
+ "modify_time": "2018-11-26 07:47:04",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/0x4d31/fatt",
+ "star": 378,
+ "commits": 38,
+ "modify_time": "2019-11-04 15:59:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gfoss/psrecon",
+ "star": 377,
+ "commits": 48,
+ "modify_time": "2017-07-29 15:03:03",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/fox-it/bloodhound.py",
+ "star": 377,
+ "commits": 88,
+ "modify_time": "2019-11-14 19:50:09",
+ "last_release": "\n v0.7.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ansible/ansible-lockdown",
+ "star": 377,
+ "commits": 120,
+ "modify_time": "2018-09-07 15:11:21",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/mdp/gibberish",
+ "star": 376,
+ "commits": 88,
+ "modify_time": "2019-06-18 15:54:23",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/ridter/pentest",
+ "star": 376,
+ "commits": 169,
+ "modify_time": "2019-04-09 11:59:05",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/random-robbie/my-shodan-scripts",
+ "star": 376,
+ "commits": 97,
+ "modify_time": "2019-11-15 10:53:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/howsecureismypassword/hsimp",
+ "star": 376,
+ "commits": 36,
+ "modify_time": "2019-11-01 11:14:21",
+ "last_release": "\n 0.2.0\n ",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/goliate/hidden-tear",
+ "star": 376,
+ "commits": 10,
+ "modify_time": "2015-08-18 18:02:46",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/dradis/dradis-ce",
+ "star": 376,
+ "commits": 2547,
+ "modify_time": "2019-11-25 14:33:32",
+ "last_release": "\n v3.14.0\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/dinotools/dionaea",
+ "star": 376,
+ "commits": 1689,
+ "modify_time": "2019-10-20 19:56:04",
+ "last_release": "\n 0.8.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/clymb3r/kdexploitme",
+ "star": 376,
+ "commits": 7,
+ "modify_time": "2014-11-17 06:19:54",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/0x4d31/burpa",
+ "star": 376,
+ "commits": 26,
+ "modify_time": "2017-08-15 09:57:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wyatu/cve-2018-20250",
+ "star": 375,
+ "commits": 3,
+ "modify_time": "2019-02-22 05:58:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sensepost/usabuse",
+ "star": 375,
+ "commits": 140,
+ "modify_time": "2017-03-17 10:47:36",
+ "last_release": "\n whid\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/secrary/ssma",
+ "star": 375,
+ "commits": 208,
+ "modify_time": "2019-05-14 16:42:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rhynorater/cve-2018-15473-exploit",
+ "star": 375,
+ "commits": 23,
+ "modify_time": "2018-09-13 15:09:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/q3k/crowbar",
+ "star": 375,
+ "commits": 27,
+ "modify_time": "2016-07-17 11:48:31",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/nccgroup/autorepeater",
+ "star": 375,
+ "commits": 124,
+ "modify_time": "2019-10-04 19:50:44",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/maldevel/emailharvester",
+ "star": 375,
+ "commits": 65,
+ "modify_time": "2019-10-05 20:53:17",
+ "last_release": "1.3.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/liveoverflow/pwnadventure3",
+ "star": 375,
+ "commits": 31,
+ "modify_time": "2018-09-09 12:39:35",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/jvns/kernel-module-fun",
+ "star": 375,
+ "commits": 18,
+ "modify_time": "2015-03-05 15:52:02",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/heardrwt/revealloader",
+ "star": 375,
+ "commits": 9,
+ "modify_time": "2014-03-26 20:44:52",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/evilsocket/arminject",
+ "star": 375,
+ "commits": 29,
+ "modify_time": "2016-07-02 15:36:31",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/aozhimin/ios-debug-hacks",
+ "star": 375,
+ "commits": 90,
+ "modify_time": "2017-09-29 14:43:29",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/1111joe1111/ida_ea",
+ "star": 375,
+ "commits": 75,
+ "modify_time": "2017-11-28 20:39:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xuanhun/pythonhackingbook1",
+ "star": 374,
+ "commits": 53,
+ "modify_time": "2019-08-19 13:29:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tihmstar/futurerestore",
+ "star": 374,
+ "commits": 172,
+ "modify_time": "2019-11-21 12:42:21",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/skavngr/rapidscan",
+ "star": 374,
+ "commits": 158,
+ "modify_time": "2019-11-21 06:34:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/screetsec/vegile",
+ "star": 374,
+ "commits": 45,
+ "modify_time": "2019-09-27 19:01:38",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/opencybertranslationproject/linux-basics-for-hackers",
+ "star": 374,
+ "commits": 114,
+ "modify_time": "2019-04-29 08:48:51",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/fkie-cad/fact_core",
+ "star": 374,
+ "commits": 2324,
+ "modify_time": "2019-11-28 09:32:58",
+ "last_release": "3.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/crypto2011/idr",
+ "star": 374,
+ "commits": 133,
+ "modify_time": "2019-10-12 13:52:53",
+ "last_release": "27_01_2019",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/vysecurity/DomLink",
+ "star": 373,
+ "commits": 39,
+ "modify_time": "2019-06-11 18:25:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://gitlab.com/cryptsetup/cryptsetup",
+ "star": 373,
+ "commits": null,
+ "modify_time": "2019-02-13 12:34:39",
+ "last_release": "",
+ "lang": "c"
+ },
+ {
+ "link": "https://github.com/zer0yu/cybersecurityrss",
+ "star": 373,
+ "commits": 18,
+ "modify_time": "2019-11-21 13:41:53",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/xtiankisutsa/awesome-mobile-ctf",
+ "star": 373,
+ "commits": 77,
+ "modify_time": "2019-07-22 05:10:30",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/xorrior/remoterecon",
+ "star": 373,
+ "commits": 65,
+ "modify_time": "2017-11-23 03:21:46",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/nowsecure/r2frida",
+ "star": 373,
+ "commits": 551,
+ "modify_time": "2019-12-04 09:43:19",
+ "last_release": "v4.0.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/microsoft/llvm-mctoll",
+ "star": 373,
+ "commits": 168,
+ "modify_time": "2019-12-06 16:42:42",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/robinmonjo/coincoin",
+ "star": 372,
+ "commits": 224,
+ "modify_time": "2018-02-15 12:31:57",
+ "last_release": "",
+ "lang": "Elixir"
+ },
+ {
+ "link": "https://github.com/ptb/mac-setup",
+ "star": 372,
+ "commits": 76,
+ "modify_time": "2018-11-14 12:54:58",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/pielco11/fav-up",
+ "star": 372,
+ "commits": 45,
+ "modify_time": "2019-10-21 10:57:53",
+ "last_release": "v0.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/netis/packet-agent",
+ "star": 372,
+ "commits": 197,
+ "modify_time": "2019-12-10 08:06:34",
+ "last_release": "v0.3.5",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/nccgroup/singularity",
+ "star": 372,
+ "commits": 182,
+ "modify_time": "2019-11-16 06:57:31",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/namecoin/namecoin-core",
+ "star": 372,
+ "commits": 23470,
+ "modify_time": "2019-12-09 08:12:51",
+ "last_release": "nc0.19.0.1",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/m00nrise/processhider",
+ "star": 372,
+ "commits": 29,
+ "modify_time": "2016-08-25 20:17:34",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/inquest/malware-samples",
+ "star": 372,
+ "commits": 65,
+ "modify_time": "2019-09-30 21:58:23",
+ "last_release": "",
+ "lang": "AngelScript"
+ },
+ {
+ "link": "https://github.com/hkbakke/bash-insulter",
+ "star": 372,
+ "commits": 59,
+ "modify_time": "2019-12-02 12:55:51",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/georgiaw/smartphone-pentest-framework",
+ "star": 372,
+ "commits": 2,
+ "modify_time": "2017-03-23 17:59:16",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/dedsecinside/torbot",
+ "star": 372,
+ "commits": 550,
+ "modify_time": "2019-10-19 16:24:35",
+ "last_release": "v1.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cardigann/cardigann",
+ "star": 372,
+ "commits": 518,
+ "modify_time": "2018-11-12 15:01:21",
+ "last_release": "v1.10.2",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/cisco-talos/clamav-faq",
+ "star": 371,
+ "commits": 427,
+ "modify_time": "2019-11-20 18:43:26",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/nikicat/web-malware-collection",
+ "star": 371,
+ "commits": 24,
+ "modify_time": "2016-10-18 09:44:05",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/gamozolabs/orange_slice",
+ "star": 371,
+ "commits": 15,
+ "modify_time": "2019-06-05 04:58:44",
+ "last_release": "",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/cr4sh/windowsregistryrootkit",
+ "star": 371,
+ "commits": 11,
+ "modify_time": "2017-10-08 09:36:01",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/androidhooker/hooker",
+ "star": 371,
+ "commits": 18,
+ "modify_time": "2016-08-09 08:25:21",
+ "last_release": "\n Release/0.2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/allfro/burpkit",
+ "star": 371,
+ "commits": 91,
+ "modify_time": "2016-01-27 04:31:04",
+ "last_release": "v1.03-pre",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/onplus/v2hero",
+ "star": 370,
+ "commits": 44,
+ "modify_time": "2019-10-08 00:50:24",
+ "last_release": "",
+ "lang": "Dockerfile"
+ },
+ {
+ "link": "https://github.com/s0md3v/Cloak",
+ "star": 370,
+ "commits": 16,
+ "modify_time": "2019-05-05 15:49:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tmr232/sark",
+ "star": 370,
+ "commits": 454,
+ "modify_time": "2019-10-15 13:05:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tidesec/tidefinger",
+ "star": 370,
+ "commits": 17,
+ "modify_time": "2019-05-21 01:20:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rrenaud/gibberish-detector",
+ "star": 370,
+ "commits": 11,
+ "modify_time": "2015-08-24 20:59:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/renwax23/xss-payloads",
+ "star": 370,
+ "commits": 28,
+ "modify_time": "2019-09-27 10:23:17",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/lyft/metadataproxy",
+ "star": 370,
+ "commits": 135,
+ "modify_time": "2019-10-14 22:42:53",
+ "last_release": "\n 1.11.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/breenmachine/rottenpotatong",
+ "star": 370,
+ "commits": 4,
+ "modify_time": "2017-12-29 14:38:29",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/blackarch/webshells",
+ "star": 370,
+ "commits": 34,
+ "modify_time": "2019-11-24 19:14:51",
+ "last_release": "\n v2\n ",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/alonemonkey/iosrebook",
+ "star": 370,
+ "commits": 6,
+ "modify_time": "2018-06-27 06:58:06",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/vishvananda/wormhole",
+ "star": 369,
+ "commits": 23,
+ "modify_time": "2014-10-13 23:32:07",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/pdbpp/pdbpp",
+ "star": 369,
+ "commits": 626,
+ "modify_time": "2019-11-19 23:05:44",
+ "last_release": "\n 0.10.2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/werkamsus/lilith",
+ "star": 369,
+ "commits": 80,
+ "modify_time": "2019-09-19 10:05:30",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/trimstray/otseca",
+ "star": 369,
+ "commits": 228,
+ "modify_time": "2019-12-03 07:23:44",
+ "last_release": "\n v1.0.5\n ",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/sibears/idagolanghelper",
+ "star": 369,
+ "commits": 16,
+ "modify_time": "2019-03-26 17:40:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/p1sec/qcsuper",
+ "star": 369,
+ "commits": 45,
+ "modify_time": "2019-08-19 07:32:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/moxie0/knockknock",
+ "star": 369,
+ "commits": 4,
+ "modify_time": "2012-09-17 00:58:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hzqst/vmwarehardenedloader",
+ "star": 369,
+ "commits": 76,
+ "modify_time": "2019-07-04 06:34:17",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/emtunc/slackpirate",
+ "star": 369,
+ "commits": 119,
+ "modify_time": "2019-11-05 18:58:18",
+ "last_release": "0.13",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zc-zh-001/shadowsocks-share",
+ "star": 368,
+ "commits": 55,
+ "modify_time": "2018-06-09 09:56:45",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/lcatro/Source-and-Fuzzing",
+ "star": 368,
+ "commits": 43,
+ "modify_time": "2019-09-03 17:44:30",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/Battelle/afl-unicorn",
+ "star": 368,
+ "commits": 228,
+ "modify_time": "2018-07-20 13:40:57",
+ "last_release": "\n 2.51b\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/winrb/winrm",
+ "star": 368,
+ "commits": 791,
+ "modify_time": "2019-12-04 02:40:06",
+ "last_release": "\n v2.3.3\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/opensecurityresearch/dllinjector",
+ "star": 368,
+ "commits": 3,
+ "modify_time": "2013-01-07 19:34:35",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/lightos/credmap",
+ "star": 368,
+ "commits": 116,
+ "modify_time": "2017-12-01 17:26:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jlospinoso/gargoyle",
+ "star": 368,
+ "commits": 33,
+ "modify_time": "2017-05-24 00:23:53",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/jaybosamiya/security-notes",
+ "star": 368,
+ "commits": 13,
+ "modify_time": "2017-08-13 01:54:44",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/functionclub/yankeebbr",
+ "star": 368,
+ "commits": 13,
+ "modify_time": "2018-05-15 07:23:23",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/evermeer/passportscanner",
+ "star": 368,
+ "commits": 56,
+ "modify_time": "2019-06-19 14:31:01",
+ "last_release": "4.6.0",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/crypt0s/fakedns",
+ "star": 368,
+ "commits": 101,
+ "modify_time": "2019-01-16 04:53:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ssun125/lanmitm",
+ "star": 367,
+ "commits": 47,
+ "modify_time": "2016-12-09 13:33:05",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/realgam3/pymultitor",
+ "star": 367,
+ "commits": 20,
+ "modify_time": "2019-12-06 14:59:01",
+ "last_release": "v3.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/micahflee/torbrowser-launcher",
+ "star": 367,
+ "commits": 724,
+ "modify_time": "2019-11-08 07:32:58",
+ "last_release": "\n v0.3.2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/l4ys/lazyida",
+ "star": 367,
+ "commits": 46,
+ "modify_time": "2019-10-15 05:35:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ferreirasc/oscp",
+ "star": 367,
+ "commits": 74,
+ "modify_time": "2019-04-10 10:46:10",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/feicong/sec_skills",
+ "star": 367,
+ "commits": 3,
+ "modify_time": "2017-07-18 04:18:07",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/enablesecurity/sipvicious",
+ "star": 367,
+ "commits": 300,
+ "modify_time": "2019-01-04 09:59:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/digininja/pipal",
+ "star": 367,
+ "commits": 130,
+ "modify_time": "2019-08-11 10:01:42",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/cclabsinc/rfcrack",
+ "star": 367,
+ "commits": 81,
+ "modify_time": "2018-01-29 01:12:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/brl/obfuscated-openssh",
+ "star": 367,
+ "commits": 13,
+ "modify_time": "2010-04-06 23:10:02",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/brannondorsey/dns-rebind-toolkit",
+ "star": 367,
+ "commits": 16,
+ "modify_time": "2018-06-12 01:44:24",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/awslabs/aws-security-automation",
+ "star": 367,
+ "commits": 25,
+ "modify_time": "2019-01-30 20:12:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ajinabraham/owasp-xenotix-xss-exploit-framework",
+ "star": 367,
+ "commits": 27,
+ "modify_time": "2017-08-21 13:29:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vysecurity/morphHTA",
+ "star": 366,
+ "commits": 20,
+ "modify_time": "2017-09-03 21:13:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zaproxy/zap-extensions",
+ "star": 366,
+ "commits": 6185,
+ "modify_time": "2019-12-07 10:04:01",
+ "last_release": "zest-v30",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/ywolf/f-nascan",
+ "star": 366,
+ "commits": 10,
+ "modify_time": "2016-04-28 05:48:59",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wtsxdev/malware-analysis",
+ "star": 366,
+ "commits": null,
+ "modify_time": "2017-12-01 20:53:53",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/netspi/pesecurity",
+ "star": 366,
+ "commits": 44,
+ "modify_time": "2018-08-04 19:35:01",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/neo23x0/munin",
+ "star": 366,
+ "commits": 156,
+ "modify_time": "2019-08-30 15:45:19",
+ "last_release": "\n v0.14.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gdedrouas/exchange-ad-privesc",
+ "star": 366,
+ "commits": 20,
+ "modify_time": "2019-10-02 10:13:36",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/attackercan/regexp-security-cheatsheet",
+ "star": 366,
+ "commits": 65,
+ "modify_time": "2017-08-21 15:36:25",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/pageauc/pi-timolo",
+ "star": 365,
+ "commits": 684,
+ "modify_time": "2019-09-17 20:20:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/matthewpierson/1033-ota-downgrader",
+ "star": 365,
+ "commits": 75,
+ "modify_time": "2019-11-13 00:27:32",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/hannob/vulns",
+ "star": 365,
+ "commits": 30,
+ "modify_time": "2018-12-11 07:59:35",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/elm-community/elm-test",
+ "star": 365,
+ "commits": 765,
+ "modify_time": "2019-10-02 19:06:54",
+ "last_release": "\n 4.2.0\n ",
+ "lang": "Elm"
+ },
+ {
+ "link": "https://github.com/chenerlich/fcl",
+ "star": 365,
+ "commits": 44,
+ "modify_time": "2019-11-18 21:59:55",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/cazala/coin-hive-stratum",
+ "star": 365,
+ "commits": 227,
+ "modify_time": "2018-02-03 20:24:07",
+ "last_release": "",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/carnal0wnage/weirdaal",
+ "star": 365,
+ "commits": 311,
+ "modify_time": "2019-05-30 17:44:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/arialdomartini/morris-worm",
+ "star": 365,
+ "commits": 1,
+ "modify_time": "2014-09-08 09:19:39",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/tripwire/tripwire-open-source",
+ "star": 364,
+ "commits": 373,
+ "modify_time": "2019-03-16 19:30:30",
+ "last_release": "2.4.3.7",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/szechyjs/dsd",
+ "star": 364,
+ "commits": 96,
+ "modify_time": "2018-07-01 14:07:39",
+ "last_release": "\n v1.6.0\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/k0keoyo/kdriver-fuzzer",
+ "star": 364,
+ "commits": 14,
+ "modify_time": "2018-03-31 12:35:44",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/frichetten/cve-2019-5736-poc",
+ "star": 364,
+ "commits": 12,
+ "modify_time": "2019-02-19 11:45:12",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/wzqcongcong/macsubstrate",
+ "star": 363,
+ "commits": 56,
+ "modify_time": "2017-11-21 13:12:49",
+ "last_release": "1.0.3",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/writeups/ios",
+ "star": 363,
+ "commits": 10,
+ "modify_time": "2018-06-14 00:06:36",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/thosakwe/t2b",
+ "star": 363,
+ "commits": 33,
+ "modify_time": "2019-02-25 15:57:13",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/steven-michaud/hookcase",
+ "star": 363,
+ "commits": 42,
+ "modify_time": "2019-10-31 20:11:37",
+ "last_release": "\n v4.0.1\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/sslmate/certspotter",
+ "star": 363,
+ "commits": 188,
+ "modify_time": "2019-12-03 16:19:07",
+ "last_release": "\n 0.9\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/security-code-scan/security-code-scan",
+ "star": 363,
+ "commits": 554,
+ "modify_time": "2019-11-28 13:09:35",
+ "last_release": "3.3.0",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/rc0r/afl-utils",
+ "star": 363,
+ "commits": 237,
+ "modify_time": "2018-06-06 17:44:45",
+ "last_release": "v1.33a",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/petoolse/petools",
+ "star": 363,
+ "commits": 12,
+ "modify_time": "2018-03-30 18:21:12",
+ "last_release": "v1.9.762",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/onesourcecat/phpvulhunter",
+ "star": 363,
+ "commits": 168,
+ "modify_time": "2015-06-10 09:01:55",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/m4sc3r4n0/evil-droid",
+ "star": 363,
+ "commits": 20,
+ "modify_time": "2018-01-31 21:04:12",
+ "last_release": "v0.2",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/istio/proxy",
+ "star": 363,
+ "commits": 1347,
+ "modify_time": "2019-12-07 01:12:59",
+ "last_release": "\n 1.4.1\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ernw/ss7maper",
+ "star": 363,
+ "commits": 29,
+ "modify_time": "2018-04-20 08:38:27",
+ "last_release": "",
+ "lang": "Erlang"
+ },
+ {
+ "link": "https://github.com/alexkohler/prealloc",
+ "star": 363,
+ "commits": 48,
+ "modify_time": "2018-10-02 11:16:28",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/ajinabraham/xenotix-python-keylogger",
+ "star": 363,
+ "commits": 31,
+ "modify_time": "2019-01-07 11:36:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/d2-projects/folder-explorer",
+ "star": 362,
+ "commits": 180,
+ "modify_time": "2019-12-08 08:58:26",
+ "last_release": "1.0.4",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/secynic/ipwhois",
+ "star": 362,
+ "commits": 498,
+ "modify_time": "2019-02-02 01:21:03",
+ "last_release": "v1.1.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/roglew/pappy-proxy",
+ "star": 362,
+ "commits": 77,
+ "modify_time": "2018-03-04 00:42:47",
+ "last_release": "\n 0.3.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rgov/thunderbolt3unblocker",
+ "star": 362,
+ "commits": 62,
+ "modify_time": "2019-10-13 23:50:46",
+ "last_release": "v0.0.4",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/gbrindisi/malware",
+ "star": 362,
+ "commits": 9,
+ "modify_time": "2016-10-23 10:09:08",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/fr0gger/awesome-ida-x64-olly-plugin",
+ "star": 362,
+ "commits": 24,
+ "modify_time": "2019-03-22 06:46:29",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/crifan/android_app_security_crack",
+ "star": 362,
+ "commits": 4,
+ "modify_time": "2019-07-16 13:07:57",
+ "last_release": "",
+ "lang": "Makefile"
+ },
+ {
+ "link": "https://github.com/bluscreenofjeff/aggressorscripts",
+ "star": 362,
+ "commits": 49,
+ "modify_time": "2018-05-30 22:20:21",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/inconshreveable/srvdir",
+ "star": 361,
+ "commits": 27,
+ "modify_time": "2016-04-09 01:25:28",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/FSecureLABS/KernelFuzzer",
+ "star": 361,
+ "commits": 13,
+ "modify_time": "2016-09-26 08:27:53",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/tenable/poc",
+ "star": 361,
+ "commits": 100,
+ "modify_time": "2019-11-20 19:24:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/psgroove/psgroove",
+ "star": 361,
+ "commits": 68,
+ "modify_time": "2010-12-02 06:12:11",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/patrickfav/uber-apk-signer",
+ "star": 361,
+ "commits": 97,
+ "modify_time": "2019-09-30 14:30:34",
+ "last_release": "v1.1.0",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/visipedia/inat_comp",
+ "star": 360,
+ "commits": 94,
+ "modify_time": "2019-08-19 13:33:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rafael-santiago/pig",
+ "star": 360,
+ "commits": 211,
+ "modify_time": "2017-03-31 21:28:27",
+ "last_release": "0.0.5",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/orangetw/awesome-jenkins-rce-2019",
+ "star": 360,
+ "commits": 9,
+ "modify_time": "2019-05-17 13:05:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/optiopay/klar",
+ "star": 360,
+ "commits": 122,
+ "modify_time": "2019-11-04 10:42:51",
+ "last_release": "v2.4.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/mozilla/minion",
+ "star": 360,
+ "commits": 73,
+ "modify_time": "2015-09-22 14:53:23",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/davidtavarez/pwndb",
+ "star": 360,
+ "commits": 54,
+ "modify_time": "2019-12-01 18:17:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/checkpointsw/karta",
+ "star": 360,
+ "commits": 147,
+ "modify_time": "2019-11-28 06:37:56",
+ "last_release": "v2.0.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/a0rtega/metame",
+ "star": 360,
+ "commits": 14,
+ "modify_time": "2019-10-06 18:21:21",
+ "last_release": "\n v0.4\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xiaoweime/wprotect",
+ "star": 359,
+ "commits": 67,
+ "modify_time": "2016-11-02 09:59:21",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/wbenny/pdbex",
+ "star": 359,
+ "commits": 51,
+ "modify_time": "2019-08-08 13:45:44",
+ "last_release": "v0.21",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/udpsec/awesome-vpn",
+ "star": 359,
+ "commits": 2,
+ "modify_time": "2017-08-08 12:12:19",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/mubix/post-exploitation-wiki",
+ "star": 359,
+ "commits": 130,
+ "modify_time": "2016-03-31 11:08:39",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/andrew-schofield/keepass2-haveibeenpwned",
+ "star": 359,
+ "commits": 148,
+ "modify_time": "2019-11-03 15:37:26",
+ "last_release": "v1.3.6",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/bugscanteam/hackhttp",
+ "star": 358,
+ "commits": 8,
+ "modify_time": "2016-06-06 11:07:28",
+ "last_release": "1.0.4",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/googleprojectzero/BrokenType",
+ "star": 358,
+ "commits": 14,
+ "modify_time": "2019-08-28 12:49:45",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/the-cracker-technology/andrax-mobile-pentest",
+ "star": 358,
+ "commits": null,
+ "modify_time": "2019-08-08 01:19:31",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/technitiumsoftware/dnsserver",
+ "star": 358,
+ "commits": 450,
+ "modify_time": "2019-06-29 08:31:58",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/spring-cloud/spring-cloud-commons",
+ "star": 358,
+ "commits": 1036,
+ "modify_time": "2019-12-09 13:57:26",
+ "last_release": "\n v2.2.0.RELEASE\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/sangaline/advanced-web-scraping-tutorial",
+ "star": 358,
+ "commits": 16,
+ "modify_time": "2017-03-19 14:35:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/crmulliner/ddi",
+ "star": 358,
+ "commits": 14,
+ "modify_time": "2014-10-22 19:39:33",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/can1357/cve-2018-8897",
+ "star": 358,
+ "commits": 23,
+ "modify_time": "2018-05-18 12:26:52",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ahhh/reverse_dns_shell",
+ "star": 358,
+ "commits": 38,
+ "modify_time": "2015-10-10 23:47:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/saucxs/watermark-dom",
+ "star": 357,
+ "commits": 74,
+ "modify_time": "2019-11-19 10:23:27",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/spender-sandbox/cuckoo-modified",
+ "star": 357,
+ "commits": 5854,
+ "modify_time": "2017-04-26 10:38:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sonarsource/sonar-dotnet",
+ "star": 357,
+ "commits": 3334,
+ "modify_time": "2019-12-06 09:38:24",
+ "last_release": "8.0.0.9566",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/rfk/pyenchant",
+ "star": 357,
+ "commits": 422,
+ "modify_time": "2019-12-01 13:13:13",
+ "last_release": "\n v2.0.0\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/prateek147/dvia",
+ "star": 357,
+ "commits": 100,
+ "modify_time": "2019-11-19 07:07:38",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/portswigger/turbo-intruder",
+ "star": 357,
+ "commits": 305,
+ "modify_time": "2019-11-28 13:56:03",
+ "last_release": "1.0.12",
+ "lang": "Kotlin"
+ },
+ {
+ "link": "https://github.com/kamikat/tttfi",
+ "star": 357,
+ "commits": 15,
+ "modify_time": "2017-07-18 00:57:38",
+ "last_release": "\n 1.0.0\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/hubspot/jinjava",
+ "star": 357,
+ "commits": 1299,
+ "modify_time": "2019-10-15 20:14:37",
+ "last_release": "\n jinjava-2.0.5\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/gamehackingbook/gamehackingcode",
+ "star": 357,
+ "commits": 25,
+ "modify_time": "2017-02-20 22:38:51",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/fkromer/awesome-ros2",
+ "star": 357,
+ "commits": 201,
+ "modify_time": "2019-12-02 18:57:36",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/fate0/prvd",
+ "star": 357,
+ "commits": 36,
+ "modify_time": "2019-05-25 16:27:12",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/denyhosts/denyhosts",
+ "star": 357,
+ "commits": 286,
+ "modify_time": "2019-10-09 17:36:57",
+ "last_release": "v3.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bit4woo/domain_hunter",
+ "star": 357,
+ "commits": 50,
+ "modify_time": "2019-07-24 09:52:57",
+ "last_release": "v1.4",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/a3sal0n/cyberthreathunting",
+ "star": 357,
+ "commits": 44,
+ "modify_time": "2019-08-13 14:26:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mitmproxy/pathod",
+ "star": 356,
+ "commits": 556,
+ "modify_time": "2016-02-18 23:01:52",
+ "last_release": "\n v0.16\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/AonCyberLabs/EvilAbigail",
+ "star": 356,
+ "commits": 11,
+ "modify_time": "2015-12-22 19:35:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xtiankisutsa/mara_framework",
+ "star": 356,
+ "commits": 176,
+ "modify_time": "2019-07-26 13:46:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vulnreproduction/linuxflaw",
+ "star": 356,
+ "commits": 372,
+ "modify_time": "2019-04-03 18:32:32",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ustayready/credking",
+ "star": 356,
+ "commits": 7,
+ "modify_time": "2018-04-20 13:16:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/trendmicro/tlsh",
+ "star": 356,
+ "commits": 225,
+ "modify_time": "2019-07-19 05:24:39",
+ "last_release": "3.17.0",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/rhdunn/espeak",
+ "star": 356,
+ "commits": 4235,
+ "modify_time": "2019-12-04 07:44:15",
+ "last_release": "\n 1.49.2\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/opensecurityresearch/hostapd-wpe",
+ "star": 356,
+ "commits": 16,
+ "modify_time": "2017-11-14 13:54:39",
+ "last_release": "",
+ "lang": "Makefile"
+ },
+ {
+ "link": "https://github.com/lukechampine/jsteg",
+ "star": 356,
+ "commits": 23,
+ "modify_time": "2019-06-02 01:45:22",
+ "last_release": "v0.3.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/hell0w0rld0/github-hunter",
+ "star": 356,
+ "commits": 37,
+ "modify_time": "2019-10-10 03:16:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/emptymonkey/revsh",
+ "star": 356,
+ "commits": 264,
+ "modify_time": "2018-08-10 01:17:27",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ebranca/owasp-pysec",
+ "star": 356,
+ "commits": 266,
+ "modify_time": "2015-01-16 15:02:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/chenjj/corscanner",
+ "star": 356,
+ "commits": 57,
+ "modify_time": "2019-10-02 20:06:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dnscrypt/dnscrypt-server-docker",
+ "star": 355,
+ "commits": 285,
+ "modify_time": "2019-11-24 14:40:43",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/wycm/selenium-geetest-crack",
+ "star": 355,
+ "commits": 26,
+ "modify_time": "2019-11-25 02:26:40",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/scalingexcellence/scrapybook",
+ "star": 355,
+ "commits": 177,
+ "modify_time": "2017-09-14 14:19:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/openvpn/openvpn3",
+ "star": 355,
+ "commits": 2342,
+ "modify_time": "2019-11-06 14:51:38",
+ "last_release": "\n release/3.5\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/gallopsled/pwntools-write-ups",
+ "star": 355,
+ "commits": 59,
+ "modify_time": "2016-06-21 00:44:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/antimalware/manul",
+ "star": 355,
+ "commits": 131,
+ "modify_time": "2016-08-19 13:34:03",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/3f/dllexport",
+ "star": 355,
+ "commits": 151,
+ "modify_time": "2019-10-27 23:08:54",
+ "last_release": "v1.7-beta",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/intel/libipt",
+ "star": 354,
+ "commits": 814,
+ "modify_time": "2019-08-13 08:56:38",
+ "last_release": "\n v2.0.1\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/s0md3v/nano",
+ "star": 354,
+ "commits": 27,
+ "modify_time": "2019-05-05 15:49:51",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/FSecureLABS/dref",
+ "star": 354,
+ "commits": 105,
+ "modify_time": "2019-10-26 22:16:14",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/virajkulkarni14/webdevelopersecuritychecklist",
+ "star": 354,
+ "commits": 42,
+ "modify_time": "2017-05-23 17:01:11",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/snyk/zip-slip-vulnerability",
+ "star": 354,
+ "commits": 55,
+ "modify_time": "2019-09-22 17:14:14",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/openrce/pydbg",
+ "star": 354,
+ "commits": 1,
+ "modify_time": "2012-04-03 16:03:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nccgroup/phantap",
+ "star": 354,
+ "commits": 54,
+ "modify_time": "2019-10-22 04:13:58",
+ "last_release": "2019.08.28-758fba1b",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/lockgit/hacking",
+ "star": 354,
+ "commits": 1774,
+ "modify_time": "2019-12-03 16:56:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/koenbuyens/kalirouter",
+ "star": 354,
+ "commits": 38,
+ "modify_time": "2017-08-31 03:29:12",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/i3visio/osrframework",
+ "star": 354,
+ "commits": 789,
+ "modify_time": "2018-11-23 00:52:29",
+ "last_release": "0.18.8",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/digitalruby/ipban",
+ "star": 354,
+ "commits": 827,
+ "modify_time": "2019-12-10 03:43:59",
+ "last_release": "1.5.2.0",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/adtac/fssb",
+ "star": 354,
+ "commits": 73,
+ "modify_time": "2017-01-31 16:14:34",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/quay/jwtproxy",
+ "star": 353,
+ "commits": 165,
+ "modify_time": "2019-11-25 17:49:15",
+ "last_release": "v0.0.4",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/vlsergey/infosec",
+ "star": 353,
+ "commits": 5674,
+ "modify_time": "2019-11-28 19:53:11",
+ "last_release": "v2019.11.18",
+ "lang": "TeX"
+ },
+ {
+ "link": "https://github.com/PortSwigger/http-request-smuggler",
+ "star": 353,
+ "commits": 122,
+ "modify_time": "2019-12-09 14:54:04",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/ukncsc/lme",
+ "star": 353,
+ "commits": 51,
+ "modify_time": "2019-12-09 18:35:38",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/hasherezade/malware_analysis",
+ "star": 353,
+ "commits": 128,
+ "modify_time": "2019-07-23 18:02:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gosecure/pyrdp",
+ "star": 353,
+ "commits": 1329,
+ "modify_time": "2019-11-26 20:30:39",
+ "last_release": "v0.4.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/glsl-debugger/glsl-debugger",
+ "star": 353,
+ "commits": 395,
+ "modify_time": "2018-01-23 15:17:27",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/dev-sec/chef-os-hardening",
+ "star": 353,
+ "commits": 659,
+ "modify_time": "2019-10-29 12:51:30",
+ "last_release": "v4.0.0",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/depthsecurity/armory",
+ "star": 353,
+ "commits": 263,
+ "modify_time": "2019-12-04 16:27:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/quay/jwtproxy",
+ "star": 353,
+ "commits": 165,
+ "modify_time": "2019-11-25 17:49:15",
+ "last_release": "v0.0.4",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/tboox/vm86",
+ "star": 352,
+ "commits": 20,
+ "modify_time": "2019-10-23 14:36:05",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/zerosum0x0/winrepl",
+ "star": 352,
+ "commits": 28,
+ "modify_time": "2017-11-15 19:09:43",
+ "last_release": "v0.1c",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/xdite/internet-security",
+ "star": 352,
+ "commits": 84,
+ "modify_time": "2019-07-21 23:32:51",
+ "last_release": "",
+ "lang": "Makefile"
+ },
+ {
+ "link": "https://github.com/wenzel/awesome-virtualization",
+ "star": 352,
+ "commits": 118,
+ "modify_time": "2019-12-09 21:24:22",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/naituw/hackingfacebook",
+ "star": 352,
+ "commits": 5,
+ "modify_time": "2017-03-19 03:59:58",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/maldevel/pentestkit",
+ "star": 352,
+ "commits": 282,
+ "modify_time": "2019-09-12 10:48:12",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/leaguesandbox/gameserver",
+ "star": 352,
+ "commits": 867,
+ "modify_time": "2019-12-08 16:41:59",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/fireeye/iocs",
+ "star": 352,
+ "commits": 38,
+ "modify_time": "2016-06-02 14:29:32",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/vitalysim/totalrecon",
+ "star": 351,
+ "commits": 12,
+ "modify_time": "2019-10-09 20:23:46",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/hackerschoice/thc-tesla-powerwall2-hack",
+ "star": 351,
+ "commits": 32,
+ "modify_time": "2019-12-02 09:40:09",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/vletoux/pingcastle",
+ "star": 351,
+ "commits": 11,
+ "modify_time": "2019-10-12 16:32:21",
+ "last_release": "2.7.1.1",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/syvaidya/openstego",
+ "star": 351,
+ "commits": 125,
+ "modify_time": "2019-06-16 14:52:42",
+ "last_release": "openstego-0.7.3",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/sslab-gatech/qsym",
+ "star": 351,
+ "commits": 43,
+ "modify_time": "2019-11-07 17:32:41",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/rentzsch/mach_override",
+ "star": 351,
+ "commits": 88,
+ "modify_time": "2014-05-12 02:51:20",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/plailect/keyshuffling",
+ "star": 351,
+ "commits": 15,
+ "modify_time": "2017-12-26 05:26:09",
+ "last_release": "",
+ "lang": "TeX"
+ },
+ {
+ "link": "https://github.com/p0cl4bs/kadimus",
+ "star": 351,
+ "commits": 113,
+ "modify_time": "2019-04-09 09:46:29",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/b3nac/android-reports-and-resources",
+ "star": 351,
+ "commits": 51,
+ "modify_time": "2019-07-27 18:07:32",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/aancw/belati",
+ "star": 351,
+ "commits": 72,
+ "modify_time": "2018-12-23 13:41:49",
+ "last_release": "0.2.4",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/turing-technician/fasthook",
+ "star": 350,
+ "commits": 36,
+ "modify_time": "2019-05-08 10:43:00",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/tomnomnom/httprobe",
+ "star": 350,
+ "commits": 21,
+ "modify_time": "2019-10-28 14:35:57",
+ "last_release": "v0.1.2",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/notsosecure/password_cracking_rules",
+ "star": 350,
+ "commits": 10,
+ "modify_time": "2017-06-16 17:40:00",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/mazen160/struts-pwn",
+ "star": 350,
+ "commits": 11,
+ "modify_time": "2018-05-21 18:32:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mazen160/firefox-security-toolkit",
+ "star": 350,
+ "commits": 14,
+ "modify_time": "2017-11-27 19:11:14",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/jjyg/metasm",
+ "star": 350,
+ "commits": 3313,
+ "modify_time": "2019-12-09 19:46:55",
+ "last_release": "\n 20130421\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/iphelix/pack",
+ "star": 350,
+ "commits": 29,
+ "modify_time": "2019-05-07 01:43:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fanyueciyuan/eazy-for-ss",
+ "star": 350,
+ "commits": 751,
+ "modify_time": "2019-12-01 10:56:47",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/devrandom/gitian-builder",
+ "star": 350,
+ "commits": 328,
+ "modify_time": "2019-11-08 18:32:49",
+ "last_release": "\n 0.2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/whitequark/ipaddr.js",
+ "star": 349,
+ "commits": 147,
+ "modify_time": "2019-10-14 03:48:09",
+ "last_release": "\n v1.9.1\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/vanhauser-thc/aflplusplus",
+ "star": 349,
+ "commits": 710,
+ "modify_time": "2019-12-10 08:12:20",
+ "last_release": "2.58c",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/tatanus/spf",
+ "star": 349,
+ "commits": 85,
+ "modify_time": "2019-08-08 01:56:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/swisskyrepo/wordpresscan",
+ "star": 349,
+ "commits": 67,
+ "modify_time": "2019-07-29 16:07:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/liji32/sameboy",
+ "star": 349,
+ "commits": 1037,
+ "modify_time": "2019-11-22 09:29:10",
+ "last_release": "v0.12.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jpmorganchase/constellation",
+ "star": 349,
+ "commits": 90,
+ "modify_time": "2019-05-08 19:53:23",
+ "last_release": "v0.3.5-build.1",
+ "lang": "Haskell"
+ },
+ {
+ "link": "https://github.com/jedisct1/swift-sodium",
+ "star": 349,
+ "commits": 476,
+ "modify_time": "2019-10-21 17:30:04",
+ "last_release": "0.8.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hexhive/printbf",
+ "star": 349,
+ "commits": 27,
+ "modify_time": "2019-09-09 08:40:28",
+ "last_release": "",
+ "lang": "Brainfuck"
+ },
+ {
+ "link": "https://github.com/haifengl/bigdata",
+ "star": 349,
+ "commits": 29,
+ "modify_time": "2019-11-20 14:56:20",
+ "last_release": "v0.0.2",
+ "lang": "TeX"
+ },
+ {
+ "link": "https://github.com/hackplayers/4nonimizer",
+ "star": 349,
+ "commits": 267,
+ "modify_time": "2019-06-24 22:30:00",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/alecmuffett/real-world-onion-sites",
+ "star": 349,
+ "commits": 789,
+ "modify_time": "2019-12-07 09:25:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/droidefense/engine",
+ "star": 348,
+ "commits": 224,
+ "modify_time": "2019-09-28 16:51:42",
+ "last_release": "0.1-alpha",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/seccomp/libseccomp",
+ "star": 348,
+ "commits": 798,
+ "modify_time": "2019-11-05 20:11:11",
+ "last_release": "v2.4.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/rootclay/powershell-attack-guide",
+ "star": 348,
+ "commits": 7,
+ "modify_time": "2018-09-25 04:25:55",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/maldevel/gdog",
+ "star": 348,
+ "commits": 31,
+ "modify_time": "2017-08-13 08:59:50",
+ "last_release": "1.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fuzzysecurity/pskernel-primitives",
+ "star": 348,
+ "commits": 44,
+ "modify_time": "2018-03-25 13:30:16",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/esapi/esapi-java-legacy",
+ "star": 348,
+ "commits": 1681,
+ "modify_time": "2019-10-13 23:19:43",
+ "last_release": "\n esapi-2.2.0.0\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/cr4sh/smmbackdoor",
+ "star": 348,
+ "commits": 4,
+ "modify_time": "2016-10-22 17:18:04",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/orlikoski/Skadi",
+ "star": 347,
+ "commits": 346,
+ "modify_time": "2019-10-14 16:39:53",
+ "last_release": "2019.4",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/wapiflapi/exrs",
+ "star": 347,
+ "commits": 22,
+ "modify_time": "2019-03-01 15:43:19",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/rsmudge/cortana-scripts",
+ "star": 347,
+ "commits": 135,
+ "modify_time": "2015-10-18 01:36:18",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/quickbreach/smbetray",
+ "star": 347,
+ "commits": 12,
+ "modify_time": "2018-08-17 00:45:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nopernik/sshpry",
+ "star": 347,
+ "commits": 5,
+ "modify_time": "2017-09-30 12:41:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jobertabma/virtual-host-discovery",
+ "star": 347,
+ "commits": 19,
+ "modify_time": "2017-12-28 19:07:01",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/inquisb/shellcodeexec",
+ "star": 347,
+ "commits": 28,
+ "modify_time": "2014-06-23 08:22:35",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/earthquake/chw00t",
+ "star": 347,
+ "commits": 39,
+ "modify_time": "2019-06-13 09:46:43",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/dostoevskylabs/dostoevsky-pentest-notes",
+ "star": 347,
+ "commits": 346,
+ "modify_time": "2018-02-18 22:22:03",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/archstrike/archstrike",
+ "star": 347,
+ "commits": 9964,
+ "modify_time": "2019-12-08 00:31:21",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/ym2011/PEST",
+ "star": 346,
+ "commits": 165,
+ "modify_time": "2019-11-10 10:47:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rasta-mouse/tikitorch",
+ "star": 346,
+ "commits": 72,
+ "modify_time": "2019-09-09 19:45:34",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/hongrisec/web-security-attack",
+ "star": 346,
+ "commits": 22,
+ "modify_time": "2019-11-30 04:23:23",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/fuzzysecurity/sharp-suite",
+ "star": 346,
+ "commits": 14,
+ "modify_time": "2019-11-16 14:23:08",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/enzet/symbolic-execution",
+ "star": 346,
+ "commits": 118,
+ "modify_time": "2017-12-30 23:20:41",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/darkspiritz/darkspiritz",
+ "star": 346,
+ "commits": null,
+ "modify_time": "2019-01-21 05:01:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bretley/how2exploit_binary",
+ "star": 346,
+ "commits": 91,
+ "modify_time": "2018-06-19 14:04:11",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/propervillain/moistpetal",
+ "star": 345,
+ "commits": 1,
+ "modify_time": "2017-09-22 17:44:19",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/google/graphicsfuzz",
+ "star": 345,
+ "commits": 272,
+ "modify_time": "2019-08-05 12:01:39",
+ "last_release": "v1.2.1",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/codermjlee/mjcodeobfuscation",
+ "star": 345,
+ "commits": 6,
+ "modify_time": "2018-08-21 13:43:48",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/animeshshaw/hash-algorithm-identifier",
+ "star": 345,
+ "commits": 67,
+ "modify_time": "2016-07-23 19:33:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/keydet89/regripper2.8",
+ "star": 344,
+ "commits": 174,
+ "modify_time": "2019-12-03 15:08:56",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/benvium/libimobiledevice-macosx",
+ "star": 344,
+ "commits": 11,
+ "modify_time": "2013-04-29 15:08:47",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/adrianvollmer/powerhub",
+ "star": 344,
+ "commits": 399,
+ "modify_time": "2019-07-26 11:56:42",
+ "last_release": "\n 1.3\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/valvesoftware/source-1-games",
+ "star": 343,
+ "commits": 28,
+ "modify_time": "2018-08-02 18:23:20",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/sunitparekh/data-anonymization",
+ "star": 343,
+ "commits": 353,
+ "modify_time": "2019-10-26 06:23:04",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/theopolis/uefi-firmware-parser",
+ "star": 343,
+ "commits": 156,
+ "modify_time": "2018-09-23 22:24:11",
+ "last_release": "v1.8",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nativescript/android-runtime",
+ "star": 343,
+ "commits": 2959,
+ "modify_time": "2019-12-06 13:20:16",
+ "last_release": "v6.2.0",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/leelikar/deepweb",
+ "star": 343,
+ "commits": 4,
+ "modify_time": "2017-09-26 13:42:33",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/hannob/meltdownspectre-patches",
+ "star": 343,
+ "commits": 310,
+ "modify_time": "2018-02-13 20:09:24",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/eplox/tcp-starvation",
+ "star": 343,
+ "commits": 5,
+ "modify_time": "2018-02-14 22:27:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ele7enxxh/poc-exp",
+ "star": 343,
+ "commits": 25,
+ "modify_time": "2017-12-30 05:12:29",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/egebalci/amber",
+ "star": 343,
+ "commits": 245,
+ "modify_time": "2018-12-15 14:30:50",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/calebfenton/dex-oracle",
+ "star": 343,
+ "commits": 125,
+ "modify_time": "2018-12-13 21:07:52",
+ "last_release": "v1.0.5",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/brannondorsey/mitm-router",
+ "star": 343,
+ "commits": 18,
+ "modify_time": "2018-01-17 22:19:41",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/varbaek/xsser",
+ "star": 342,
+ "commits": 23,
+ "modify_time": "2018-12-02 13:32:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/thezdi/poc",
+ "star": 342,
+ "commits": 13,
+ "modify_time": "2019-12-02 16:10:32",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/steamdatabase/valveresourceformat",
+ "star": 342,
+ "commits": 916,
+ "modify_time": "2019-10-28 13:50:22",
+ "last_release": "0.0.16",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/skorov/ridrelay",
+ "star": 342,
+ "commits": 30,
+ "modify_time": "2019-04-05 23:34:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/r00t-3xp10it/backdoorppt",
+ "star": 342,
+ "commits": 88,
+ "modify_time": "2019-12-08 03:54:21",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/neohapsis/neopi",
+ "star": 342,
+ "commits": 48,
+ "modify_time": "2014-11-17 17:19:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/marshyski/quick-secure",
+ "star": 342,
+ "commits": 37,
+ "modify_time": "2015-08-05 21:44:25",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/hercules-team/augeas",
+ "star": 342,
+ "commits": 3013,
+ "modify_time": "2019-11-18 08:01:09",
+ "last_release": "release-1.12.0",
+ "lang": "Augeas"
+ },
+ {
+ "link": "https://github.com/fgeek/pyfiscan",
+ "star": 342,
+ "commits": 2372,
+ "modify_time": "2019-11-24 13:31:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dylanbai8/onekey_caddy_php7_sqlite3",
+ "star": 341,
+ "commits": 70,
+ "modify_time": "2018-10-15 13:00:01",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/usb-tools/USBProxy-legacy",
+ "star": 341,
+ "commits": 656,
+ "modify_time": "2017-10-16 14:49:16",
+ "last_release": "\n ShmooCon_2015\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/zeex/subhook",
+ "star": 341,
+ "commits": 195,
+ "modify_time": "2019-06-29 07:20:51",
+ "last_release": "\n v0.6\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/yarnpkg/rfcs",
+ "star": 341,
+ "commits": 62,
+ "modify_time": "2019-02-22 11:00:14",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/wweir/sower",
+ "star": 341,
+ "commits": 187,
+ "modify_time": "2019-10-10 06:06:07",
+ "last_release": "v0.6.9",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/sslab-gatech/drk",
+ "star": 341,
+ "commits": 7,
+ "modify_time": "2018-01-08 18:28:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sarfata/voodooprivacy",
+ "star": 341,
+ "commits": 26,
+ "modify_time": "2018-05-03 01:15:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/portswigger/param-miner",
+ "star": 341,
+ "commits": 290,
+ "modify_time": "2019-04-30 12:35:45",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/portswigger/backslash-powered-scanner",
+ "star": 341,
+ "commits": 98,
+ "modify_time": "2019-08-19 15:07:23",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/nullarray/roothelper",
+ "star": 341,
+ "commits": 81,
+ "modify_time": "2019-11-05 13:57:15",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/iphelix/dnschef",
+ "star": 341,
+ "commits": 17,
+ "modify_time": "2019-03-27 22:11:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hfiref0x/dsefix",
+ "star": 341,
+ "commits": 9,
+ "modify_time": "2018-01-23 10:24:56",
+ "last_release": "v1.2.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/fengxuangit/fox-scan",
+ "star": 341,
+ "commits": 26,
+ "modify_time": "2016-10-06 14:49:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/darryllane/bluto",
+ "star": 341,
+ "commits": 141,
+ "modify_time": "2019-12-07 12:31:00",
+ "last_release": "v2.4.16",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cybershadow/rabcdasm",
+ "star": 341,
+ "commits": 326,
+ "modify_time": "2019-11-16 13:24:01",
+ "last_release": "1.18",
+ "lang": "D"
+ },
+ {
+ "link": "https://github.com/c0ny1/xxe-lab",
+ "star": 341,
+ "commits": 6,
+ "modify_time": "2018-02-07 17:45:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/veracode-research/solr-injection",
+ "star": 340,
+ "commits": 8,
+ "modify_time": "2019-10-30 15:01:25",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/thorkill/eresi",
+ "star": 340,
+ "commits": 1291,
+ "modify_time": "2019-09-23 05:31:07",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/theofficialflow/trinity",
+ "star": 340,
+ "commits": 16,
+ "modify_time": "2019-07-23 13:41:58",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/teoseller/osquery-attck",
+ "star": 340,
+ "commits": 105,
+ "modify_time": "2019-06-18 12:29:17",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/stamusnetworks/scirius",
+ "star": 340,
+ "commits": 2126,
+ "modify_time": "2019-08-06 12:27:29",
+ "last_release": "scirius-3.0.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/softwareunderground/awesome-open-geoscience",
+ "star": 340,
+ "commits": 254,
+ "modify_time": "2019-10-17 02:49:01",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/slowmist/eos-bp-nodes-security-checklist",
+ "star": 340,
+ "commits": 32,
+ "modify_time": "2018-06-08 11:03:59",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/securityinnovation/authmatrix",
+ "star": 340,
+ "commits": 176,
+ "modify_time": "2018-01-27 00:24:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rapidloop/vlan-nats",
+ "star": 340,
+ "commits": 1,
+ "modify_time": "2017-08-05 07:36:25",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/qwj/python-proxy",
+ "star": 340,
+ "commits": 147,
+ "modify_time": "2019-12-10 06:52:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/qilingframework/qiling",
+ "star": 340,
+ "commits": 324,
+ "modify_time": "2019-12-10 09:10:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pathetiq/burpsmartbuster",
+ "star": 340,
+ "commits": 31,
+ "modify_time": "2017-08-11 18:09:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/leitbogioro/ssr.go",
+ "star": 340,
+ "commits": 447,
+ "modify_time": "2019-11-09 03:35:46",
+ "last_release": "3.2.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dns-oarc/packetq",
+ "star": 340,
+ "commits": 218,
+ "modify_time": "2019-10-03 08:23:36",
+ "last_release": "v1.4.1",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/bugscanteam/githack",
+ "star": 340,
+ "commits": 15,
+ "modify_time": "2017-07-31 06:53:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/blendin/3snake",
+ "star": 340,
+ "commits": 27,
+ "modify_time": "2019-01-24 05:31:45",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/veracode-research/solr-injection",
+ "star": 340,
+ "commits": 8,
+ "modify_time": "2019-10-30 15:01:25",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/anaynayak/aws-security-viz",
+ "star": 340,
+ "commits": 160,
+ "modify_time": "2019-10-13 17:19:57",
+ "last_release": "\n v0.2.0\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/QAX-A-Team/EventCleaner",
+ "star": 339,
+ "commits": 6,
+ "modify_time": "2018-09-07 11:02:00",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/yndi/darkjpeg",
+ "star": 339,
+ "commits": 26,
+ "modify_time": "2014-12-06 12:36:20",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/trailofbits/cb-multios",
+ "star": 339,
+ "commits": 388,
+ "modify_time": "2019-10-16 19:14:49",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/tophanttechnology/osprey",
+ "star": 339,
+ "commits": 21,
+ "modify_time": "2018-07-11 11:46:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rub-nds/ws-attacker",
+ "star": 339,
+ "commits": 148,
+ "modify_time": "2018-08-21 10:25:02",
+ "last_release": "v1.8",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/joxeankoret/nightmare",
+ "star": 339,
+ "commits": 125,
+ "modify_time": "2019-01-14 17:44:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gabemarshall/brosec",
+ "star": 339,
+ "commits": 277,
+ "modify_time": "2019-01-10 01:40:14",
+ "last_release": "1.4.1",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/1120362990/vulnerability-list",
+ "star": 339,
+ "commits": 111,
+ "modify_time": "2019-12-02 10:05:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/v2ray/domain-list-community",
+ "star": 338,
+ "commits": 348,
+ "modify_time": "2019-12-10 05:36:41",
+ "last_release": "20191205.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/umputun/nginx-le",
+ "star": 338,
+ "commits": 64,
+ "modify_time": "2019-11-14 04:27:19",
+ "last_release": "1.1.0",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/srcclr/commit-watcher",
+ "star": 338,
+ "commits": 200,
+ "modify_time": "2018-09-06 01:06:34",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/pepitoh/vbad",
+ "star": 338,
+ "commits": 61,
+ "modify_time": "2017-08-14 07:22:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/opsxcq/exploit-cve-2016-10033",
+ "star": 338,
+ "commits": 109,
+ "modify_time": "2019-10-13 12:23:02",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/natebrune/silk-guardian",
+ "star": 338,
+ "commits": 60,
+ "modify_time": "2018-05-30 13:08:22",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/kevin-robertson/tater",
+ "star": 338,
+ "commits": 17,
+ "modify_time": "2016-04-22 03:04:10",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/initstring/passphrase-wordlist",
+ "star": 338,
+ "commits": 92,
+ "modify_time": "2019-07-15 04:40:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/git-hulk/tcpkit",
+ "star": 338,
+ "commits": 69,
+ "modify_time": "2019-05-06 11:00:55",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cyberark/conjur",
+ "star": 338,
+ "commits": 1519,
+ "modify_time": "2019-12-09 12:01:17",
+ "last_release": "v1.3.6",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/ben0xa/nps",
+ "star": 338,
+ "commits": 7,
+ "modify_time": "2016-09-24 13:44:38",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/alexmojaki/snoop",
+ "star": 338,
+ "commits": 357,
+ "modify_time": "2019-09-06 08:18:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/merces/pev",
+ "star": 337,
+ "commits": 687,
+ "modify_time": "2019-08-05 12:28:17",
+ "last_release": "\n v0.80\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/mbevand/silentarmy",
+ "star": 337,
+ "commits": 98,
+ "modify_time": "2017-12-03 20:26:55",
+ "last_release": "v5",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/lemire/code-used-on-daniel-lemire-s-blog",
+ "star": 337,
+ "commits": 1352,
+ "modify_time": "2019-12-07 18:03:55",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/dirkjanm/ldapdomaindump",
+ "star": 337,
+ "commits": 43,
+ "modify_time": "2019-04-06 17:00:11",
+ "last_release": "\n v0.9.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sap/vulnerability-assessment-tool",
+ "star": 336,
+ "commits": 1049,
+ "modify_time": "2019-12-05 21:19:53",
+ "last_release": "3.1.6",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/orangetw/tsh",
+ "star": 336,
+ "commits": 3,
+ "modify_time": "2013-09-28 10:34:45",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/fbkcs/thunderdns",
+ "star": 336,
+ "commits": 7,
+ "modify_time": "2019-06-04 08:00:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/denimgroup/threadfix",
+ "star": 336,
+ "commits": 5304,
+ "modify_time": "2019-09-17 19:56:04",
+ "last_release": "\n 2.3RC3\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/cxxr/lostpass",
+ "star": 336,
+ "commits": 3,
+ "modify_time": "2016-01-19 21:26:37",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/0xm3r/cgpwn",
+ "star": 336,
+ "commits": 17,
+ "modify_time": "2017-03-08 13:21:16",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/stardustsky/saidict",
+ "star": 335,
+ "commits": 22,
+ "modify_time": "2019-11-13 08:28:08",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/chris408/ct-exposer",
+ "star": 335,
+ "commits": 22,
+ "modify_time": "2019-08-02 00:46:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/artisan-roaster-scope/artisan",
+ "star": 335,
+ "commits": 3413,
+ "modify_time": "2019-12-09 13:37:54",
+ "last_release": "continuous",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/arno0x/powershellscripts",
+ "star": 335,
+ "commits": 15,
+ "modify_time": "2017-12-18 13:06:32",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/romanz/trezor-agent",
+ "star": 334,
+ "commits": 922,
+ "modify_time": "2019-09-20 13:05:16",
+ "last_release": "\n v0.13.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/raikia/uhoh365",
+ "star": 334,
+ "commits": 15,
+ "modify_time": "2019-10-25 14:31:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nccgroup/abptts",
+ "star": 334,
+ "commits": 7,
+ "modify_time": "2016-08-12 19:33:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/meituan-dianping/lyrebird",
+ "star": 334,
+ "commits": 135,
+ "modify_time": "2019-12-09 10:50:20",
+ "last_release": "v1.8.1",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/loyess/shell",
+ "star": 334,
+ "commits": 224,
+ "modify_time": "2019-12-09 16:23:43",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/foxglovesec/rottenpotato",
+ "star": 334,
+ "commits": 5,
+ "modify_time": "2017-12-29 14:23:02",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/radareorg/radare2book",
+ "star": 333,
+ "commits": 841,
+ "modify_time": "2019-12-03 07:57:15",
+ "last_release": "",
+ "lang": "TeX"
+ },
+ {
+ "link": "https://github.com/superkieran/wooyundrops",
+ "star": 333,
+ "commits": 25,
+ "modify_time": "2018-05-06 10:43:48",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/rv8-io/rv8",
+ "star": 333,
+ "commits": 2279,
+ "modify_time": "2018-09-22 22:13:24",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/rek7/fireelf",
+ "star": 333,
+ "commits": 9,
+ "modify_time": "2019-04-17 21:42:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rbsec/dnscan",
+ "star": 333,
+ "commits": 139,
+ "modify_time": "2019-08-02 08:18:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mykings/docker-vulnerability-environment",
+ "star": 333,
+ "commits": 31,
+ "modify_time": "2019-05-31 07:37:02",
+ "last_release": "",
+ "lang": "Dockerfile"
+ },
+ {
+ "link": "https://github.com/mhzed/wstunnel",
+ "star": 333,
+ "commits": 72,
+ "modify_time": "2019-03-04 02:03:33",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/mgeeky/penetration-testing-tools",
+ "star": 333,
+ "commits": 195,
+ "modify_time": "2019-12-06 12:42:03",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/mdsecactivebreach/linkedint",
+ "star": 333,
+ "commits": 9,
+ "modify_time": "2018-12-27 15:28:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mattiwatti/efiguard",
+ "star": 333,
+ "commits": 20,
+ "modify_time": "2019-12-04 07:16:19",
+ "last_release": "v1.0.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jandre/safe-commit-hook",
+ "star": 333,
+ "commits": 27,
+ "modify_time": "2016-07-13 22:10:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/leapsecurity/InSpy",
+ "star": 332,
+ "commits": 24,
+ "modify_time": "2018-11-09 02:53:59",
+ "last_release": "3.0.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/unixpickle/gobfuscate",
+ "star": 332,
+ "commits": 37,
+ "modify_time": "2019-11-30 20:32:17",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/symbiflow/prjxray",
+ "star": 332,
+ "commits": 2812,
+ "modify_time": "2019-12-09 19:09:33",
+ "last_release": "\n v0.0-583-t1e53270\n ",
+ "lang": "Coq"
+ },
+ {
+ "link": "https://github.com/romanvm/python-web-pdb",
+ "star": 332,
+ "commits": 319,
+ "modify_time": "2019-04-24 04:34:21",
+ "last_release": "\n 1.5.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/packetfu/packetfu",
+ "star": 332,
+ "commits": 640,
+ "modify_time": "2018-12-05 16:34:24",
+ "last_release": "version-1.1.13",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/offensive-security/kali-linux-recipes",
+ "star": 332,
+ "commits": 17,
+ "modify_time": "2019-05-01 14:36:27",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/joxeankoret/pigaios",
+ "star": 332,
+ "commits": 110,
+ "modify_time": "2018-12-17 17:46:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/graydon/bors",
+ "star": 332,
+ "commits": 98,
+ "modify_time": "2014-12-05 05:45:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/datatheorem/trustkit-android",
+ "star": 332,
+ "commits": 322,
+ "modify_time": "2019-12-06 03:47:21",
+ "last_release": "1.1.2",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/bishopfox/ispy",
+ "star": 332,
+ "commits": 234,
+ "modify_time": "2016-08-11 17:42:54",
+ "last_release": "",
+ "lang": "Logos"
+ },
+ {
+ "link": "https://bitbucket.org/tildeslash/monit",
+ "star": 332,
+ "commits": null,
+ "modify_time": "2019-01-30 19:37:32.241000",
+ "last_release": "",
+ "lang": "c"
+ },
+ {
+ "link": "https://github.com/s0md3v/JShell",
+ "star": 331,
+ "commits": 7,
+ "modify_time": "2019-05-05 15:49:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wbenny/injdrv",
+ "star": 331,
+ "commits": 20,
+ "modify_time": "2019-05-05 13:12:36",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/toolness/security-adventure",
+ "star": 331,
+ "commits": 83,
+ "modify_time": "2013-09-27 02:38:59",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/sysdream/hershell",
+ "star": 331,
+ "commits": 20,
+ "modify_time": "2019-07-15 12:46:02",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/snyk/vulnerabilitydb",
+ "star": 331,
+ "commits": 238,
+ "modify_time": "2018-09-16 12:26:27",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/sgayou/medfusion-4000-research",
+ "star": 331,
+ "commits": 1,
+ "modify_time": "2018-01-18 14:00:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pwarren/rtl-entropy",
+ "star": 331,
+ "commits": 185,
+ "modify_time": "2019-11-10 11:38:52",
+ "last_release": "v0.1.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/olimex/diy-laptop",
+ "star": 331,
+ "commits": 183,
+ "modify_time": "2019-03-05 17:14:08",
+ "last_release": "rel3-1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/nationalsecurityagency/timely",
+ "star": 331,
+ "commits": 328,
+ "modify_time": "2019-11-08 04:05:38",
+ "last_release": "0.0.5",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/flipkart-incubator/rta",
+ "star": 331,
+ "commits": 25,
+ "modify_time": "2018-08-29 10:57:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/brutall/brut.apktool",
+ "star": 331,
+ "commits": 495,
+ "modify_time": "2013-04-06 17:55:36",
+ "last_release": "\n v1.5.2\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/beeva/beeva-best-practices",
+ "star": 331,
+ "commits": 1786,
+ "modify_time": "2019-11-13 13:56:31",
+ "last_release": "",
+ "lang": "Jupyter Notebook"
+ },
+ {
+ "link": "https://github.com/xilun/cbwin",
+ "star": 330,
+ "commits": 193,
+ "modify_time": "2017-04-05 15:21:18",
+ "last_release": "v0.13",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/vmware/liota",
+ "star": 330,
+ "commits": 523,
+ "modify_time": "2018-08-23 09:55:19",
+ "last_release": "v0.4.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/spurious/sdl-mirror",
+ "star": 330,
+ "commits": 11669,
+ "modify_time": "2019-12-10 00:52:11",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/safebreach-labs/pinjectra",
+ "star": 330,
+ "commits": 3,
+ "modify_time": "2019-08-08 15:03:09",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/jaegertracing/jaeger-kubernetes",
+ "star": 330,
+ "commits": 58,
+ "modify_time": "2019-05-22 07:41:16",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/ghostpack/sharpdump",
+ "star": 330,
+ "commits": 6,
+ "modify_time": "2019-02-07 02:52:18",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/daniestevez/gr-satellites",
+ "star": 330,
+ "commits": 394,
+ "modify_time": "2019-11-06 18:55:48",
+ "last_release": "v3-alpha1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cyberheartmi9/cve-2017-12617",
+ "star": 330,
+ "commits": 33,
+ "modify_time": "2017-10-11 07:43:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/capsule8/capsule8",
+ "star": 330,
+ "commits": 839,
+ "modify_time": "2019-08-13 21:21:30",
+ "last_release": "v0.15.0-alpha",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/byt3bl33d3r/pth-toolkit",
+ "star": 330,
+ "commits": 7,
+ "modify_time": "2015-02-03 21:37:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/auth0/repo-supervisor",
+ "star": 330,
+ "commits": 56,
+ "modify_time": "2019-11-26 19:53:23",
+ "last_release": "v2.1.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/seven456/safewebview",
+ "star": 329,
+ "commits": 22,
+ "modify_time": "2017-03-27 14:35:27",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/polidea/siriusobfuscator",
+ "star": 329,
+ "commits": 57,
+ "modify_time": "2018-07-23 15:52:52",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/pfalcon/scratchabit",
+ "star": 329,
+ "commits": 566,
+ "modify_time": "2019-09-13 17:37:01",
+ "last_release": "v2.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/koczkatamas/cve-2016-0051",
+ "star": 329,
+ "commits": 7,
+ "modify_time": "2016-05-09 17:53:47",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/knipknap/exscript",
+ "star": 329,
+ "commits": 1790,
+ "modify_time": "2019-07-22 13:03:47",
+ "last_release": "\n v2.6\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/khr0x40sh/macroshop",
+ "star": 329,
+ "commits": 10,
+ "modify_time": "2016-07-14 18:36:57",
+ "last_release": "",
+ "lang": "Visual Basic .NET"
+ },
+ {
+ "link": "https://github.com/justicerage/freedomfighting",
+ "star": 329,
+ "commits": 36,
+ "modify_time": "2019-02-13 11:03:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jaegertracing/jaeger-client-java",
+ "star": 329,
+ "commits": 437,
+ "modify_time": "2019-12-06 16:18:47",
+ "last_release": "v0.35.2",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/guyoung/captfencoder",
+ "star": 329,
+ "commits": 9,
+ "modify_time": "2019-10-24 16:10:18",
+ "last_release": "1.3.0",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/bit4woo/knife",
+ "star": 329,
+ "commits": 98,
+ "modify_time": "2019-12-10 03:13:40",
+ "last_release": "v1.6",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/1n3/goohak",
+ "star": 329,
+ "commits": 26,
+ "modify_time": "2018-11-18 19:51:16",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/plasma-umass/bleak",
+ "star": 328,
+ "commits": 215,
+ "modify_time": "2019-05-02 06:13:33",
+ "last_release": "",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/stamparm/ipsum",
+ "star": 328,
+ "commits": 1,
+ "modify_time": "2019-12-09 22:25:56",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/shmakov/honeypot",
+ "star": 328,
+ "commits": 55,
+ "modify_time": "2018-10-15 18:20:07",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/malwares/remote-access-trojan",
+ "star": 328,
+ "commits": 5,
+ "modify_time": "2016-12-28 04:32:07",
+ "last_release": "",
+ "lang": "Pascal"
+ },
+ {
+ "link": "https://github.com/liberxue/wechatyunchart",
+ "star": 328,
+ "commits": 14,
+ "modify_time": "2017-07-18 14:36:22",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/faizann24/fwaf-machine-learning-driven-web-application-firewall",
+ "star": 328,
+ "commits": 17,
+ "modify_time": "2017-05-15 00:24:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/efforg/starttls-everywhere",
+ "star": 328,
+ "commits": 263,
+ "modify_time": "2019-11-29 16:55:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/e-ago/bitcracker",
+ "star": 328,
+ "commits": 127,
+ "modify_time": "2019-01-28 05:50:51",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/defaultnamehere/cookie_crimes",
+ "star": 328,
+ "commits": 23,
+ "modify_time": "2019-09-24 07:24:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/csete/gpredict",
+ "star": 328,
+ "commits": 1571,
+ "modify_time": "2019-08-17 19:22:10",
+ "last_release": "v2.2.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/algolia/hn-search",
+ "star": 328,
+ "commits": 1073,
+ "modify_time": "2019-10-31 11:03:23",
+ "last_release": "",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/datadriventests/ddt",
+ "star": 327,
+ "commits": 173,
+ "modify_time": "2019-11-26 00:36:43",
+ "last_release": "1.2.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vanhoefm/modwifi",
+ "star": 327,
+ "commits": 35,
+ "modify_time": "2019-09-22 13:01:59",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/spring-cloud/spring-cloud-openfeign",
+ "star": 327,
+ "commits": 2273,
+ "modify_time": "2019-11-27 11:37:31",
+ "last_release": "\n v2.2.0.RELEASE\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/royhills/arp-scan",
+ "star": 327,
+ "commits": 298,
+ "modify_time": "2019-11-10 11:20:52",
+ "last_release": "1.9",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/qgy18/pangolin",
+ "star": 327,
+ "commits": 29,
+ "modify_time": "2016-11-23 13:17:51",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/pwnsdx/randomdns",
+ "star": 327,
+ "commits": 80,
+ "modify_time": "2016-03-25 23:57:58",
+ "last_release": "1.3.1",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/nhoya/gosint",
+ "star": 327,
+ "commits": 196,
+ "modify_time": "2019-06-17 11:34:49",
+ "last_release": "v0.5",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/m8r0wn/nullinux",
+ "star": 327,
+ "commits": 113,
+ "modify_time": "2019-11-11 15:47:14",
+ "last_release": "4.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/joelgmsec/autordpwn",
+ "star": 327,
+ "commits": 13,
+ "modify_time": "2019-10-28 11:43:59",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/fireeye/stringsifter",
+ "star": 327,
+ "commits": 14,
+ "modify_time": "2019-12-02 21:00:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/antisnatchor/phishlulz",
+ "star": 327,
+ "commits": 3,
+ "modify_time": "2016-11-23 06:11:05",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/square/sharkey",
+ "star": 326,
+ "commits": 179,
+ "modify_time": "2019-11-20 07:04:54",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/samhaxr/hackbox",
+ "star": 326,
+ "commits": 21,
+ "modify_time": "2019-02-26 03:15:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pxlpnk/awesome-ruby-security",
+ "star": 326,
+ "commits": 21,
+ "modify_time": "2019-03-19 15:19:04",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/mitchellkrogza/ultimate.hosts.blacklist",
+ "star": 326,
+ "commits": 2140,
+ "modify_time": "2019-12-09 18:08:13",
+ "last_release": "",
+ "lang": "Batchfile"
+ },
+ {
+ "link": "https://github.com/mar-v-in/arthook",
+ "star": 326,
+ "commits": 40,
+ "modify_time": "2018-05-30 08:11:43",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/extremeshok/clamav-unofficial-sigs",
+ "star": 326,
+ "commits": 780,
+ "modify_time": "2019-09-02 22:41:48",
+ "last_release": "6.1.1",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/diegocr/netcat",
+ "star": 326,
+ "commits": 3,
+ "modify_time": "2014-03-24 02:29:09",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cedarctic/digispark-scripts",
+ "star": 326,
+ "commits": 52,
+ "modify_time": "2019-08-24 08:58:41",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/baldassarrefe/deep-koalarization",
+ "star": 326,
+ "commits": 109,
+ "modify_time": "2018-01-10 07:00:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/secure-software-engineering/phasar",
+ "star": 325,
+ "commits": 1068,
+ "modify_time": "2019-11-15 10:00:43",
+ "last_release": "\n v0819\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/xelerance/xl2tpd",
+ "star": 325,
+ "commits": 626,
+ "modify_time": "2019-10-13 18:06:03",
+ "last_release": "v1.3.15",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/vulmon/vulmap",
+ "star": 325,
+ "commits": 75,
+ "modify_time": "2019-09-11 07:49:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/scheb/two-factor-bundle",
+ "star": 325,
+ "commits": 677,
+ "modify_time": "2019-12-08 19:30:17",
+ "last_release": "v4.11.0",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/saturnsvoid/gobot2",
+ "star": 325,
+ "commits": 17,
+ "modify_time": "2019-07-09 00:16:54",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/nsakey/nsa-rules",
+ "star": 325,
+ "commits": 15,
+ "modify_time": "2016-06-14 06:51:11",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/mikesiko/practicalmalwareanalysis-labs",
+ "star": 325,
+ "commits": 4,
+ "modify_time": "2017-04-26 19:02:16",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ivyl/rootkit",
+ "star": 325,
+ "commits": 7,
+ "modify_time": "2017-07-19 10:42:48",
+ "last_release": "",
+ "lang": "TeX"
+ },
+ {
+ "link": "https://github.com/initstring/linkedin2username",
+ "star": 325,
+ "commits": 99,
+ "modify_time": "2019-12-06 01:05:27",
+ "last_release": "0.17",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ysrc/liudao",
+ "star": 324,
+ "commits": 12,
+ "modify_time": "2018-10-28 09:39:05",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/secwiki/office-exploits",
+ "star": 324,
+ "commits": 29,
+ "modify_time": "2019-01-17 06:39:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pravic/winapi-kmd-rs",
+ "star": 324,
+ "commits": 29,
+ "modify_time": "2017-09-13 04:15:01",
+ "last_release": "",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/nccgroup/wssip",
+ "star": 324,
+ "commits": 75,
+ "modify_time": "2018-10-03 22:53:38",
+ "last_release": "v1.1.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/jasonstrimpel/volatility-trading",
+ "star": 324,
+ "commits": 63,
+ "modify_time": "2019-04-16 06:39:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ioerror/tlsdate",
+ "star": 324,
+ "commits": 707,
+ "modify_time": "2015-05-28 18:49:40",
+ "last_release": "\n tlsdate-0.0.13\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hr/crypter",
+ "star": 324,
+ "commits": 262,
+ "modify_time": "2019-07-02 21:50:53",
+ "last_release": "v4.0.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/alessandroz/lazagneforensic",
+ "star": 324,
+ "commits": 37,
+ "modify_time": "2019-01-23 13:24:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/FortyNorthSecurity/Egress-Assess",
+ "star": 323,
+ "commits": 227,
+ "modify_time": "2019-12-03 00:21:53",
+ "last_release": "2.1",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/zmarch/orc",
+ "star": 323,
+ "commits": 162,
+ "modify_time": "2019-11-12 18:21:26",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/vusec/revanc",
+ "star": 323,
+ "commits": 36,
+ "modify_time": "2017-02-27 20:58:48",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ncatlin/rgat",
+ "star": 323,
+ "commits": 481,
+ "modify_time": "2019-02-26 01:08:22",
+ "last_release": "0.5.3",
+ "lang": "QMake"
+ },
+ {
+ "link": "https://github.com/ius/rsatool",
+ "star": 323,
+ "commits": 14,
+ "modify_time": "2017-05-07 16:22:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/atc-project/atomic-threat-coverage",
+ "star": 323,
+ "commits": 558,
+ "modify_time": "2019-11-21 01:07:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tanjiti/sec_profile",
+ "star": 322,
+ "commits": 379,
+ "modify_time": "2019-12-09 00:36:22",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/smartdone/dexdump",
+ "star": 322,
+ "commits": 10,
+ "modify_time": "2018-09-04 07:07:34",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/auth0/simplekeychain",
+ "star": 322,
+ "commits": 140,
+ "modify_time": "2019-10-26 00:04:50",
+ "last_release": "0.9.0",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/alicanakyol/sems",
+ "star": 322,
+ "commits": 82,
+ "modify_time": "2018-11-22 11:04:55",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ztrix/zio",
+ "star": 321,
+ "commits": 83,
+ "modify_time": "2016-05-24 07:02:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/yalcinyolalan/wssat",
+ "star": 321,
+ "commits": 66,
+ "modify_time": "2019-05-03 08:30:50",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/truongkma/ctf-tools",
+ "star": 321,
+ "commits": 1,
+ "modify_time": "2015-10-14 02:12:41",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/tomnomnom/assetfinder",
+ "star": 321,
+ "commits": 16,
+ "modify_time": "2019-10-28 14:37:02",
+ "last_release": "v0.1.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/tanjiti/webshellsample",
+ "star": 321,
+ "commits": 21,
+ "modify_time": "2018-03-31 13:23:01",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/ollide/intellij-java2smali",
+ "star": 321,
+ "commits": 67,
+ "modify_time": "2017-12-04 20:23:57",
+ "last_release": "v1.6",
+ "lang": "Kotlin"
+ },
+ {
+ "link": "https://github.com/kmkz/pentesting",
+ "star": 321,
+ "commits": 52,
+ "modify_time": "2019-09-16 07:32:41",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/google/safeside",
+ "star": 321,
+ "commits": 126,
+ "modify_time": "2019-12-03 21:23:45",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/dyninst/dyninst",
+ "star": 321,
+ "commits": 20258,
+ "modify_time": "2019-11-18 04:59:01",
+ "last_release": "v10.1.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/mr-un1k0d3r/scshell",
+ "star": 320,
+ "commits": 33,
+ "modify_time": "2019-11-20 02:20:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/provable-things/ethereum-examples",
+ "star": 320,
+ "commits": 282,
+ "modify_time": "2019-09-12 10:39:34",
+ "last_release": "solc-0.4.x",
+ "lang": "Solidity"
+ },
+ {
+ "link": "https://github.com/zyszys/awesome-captcha",
+ "star": 320,
+ "commits": 40,
+ "modify_time": "2019-03-26 09:22:45",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/vector35/binaryninja-api",
+ "star": 320,
+ "commits": 1378,
+ "modify_time": "2019-12-09 16:49:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/owasp/owasp-vwad",
+ "star": 320,
+ "commits": 90,
+ "modify_time": "2019-10-28 13:01:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cryin/paper",
+ "star": 320,
+ "commits": 107,
+ "modify_time": "2019-01-01 10:36:33",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/coinbase/salus",
+ "star": 320,
+ "commits": 201,
+ "modify_time": "2019-10-04 01:17:42",
+ "last_release": "2.7.1",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/xsleaks/xsleaks",
+ "star": 319,
+ "commits": 32,
+ "modify_time": "2019-09-20 20:01:23",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/wangyihang/platypus",
+ "star": 319,
+ "commits": 169,
+ "modify_time": "2019-11-15 11:20:35",
+ "last_release": "v1.2.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/tmoonlight/nsmartproxy",
+ "star": 319,
+ "commits": 428,
+ "modify_time": "2019-12-05 09:51:14",
+ "last_release": "v1.2_final4",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/silverf0x/rpcview",
+ "star": 319,
+ "commits": 123,
+ "modify_time": "2019-11-14 19:57:45",
+ "last_release": "v0.3.0",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/securing/dumpsterdiver",
+ "star": 319,
+ "commits": 69,
+ "modify_time": "2018-09-03 07:30:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/intezer/linux-explorer",
+ "star": 319,
+ "commits": 35,
+ "modify_time": "2019-08-14 13:19:00",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/hfiref0x/syscalltables",
+ "star": 319,
+ "commits": 89,
+ "modify_time": "2019-11-10 03:55:12",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/doadam/ziva",
+ "star": 319,
+ "commits": 5,
+ "modify_time": "2017-08-31 23:21:27",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/cryptax/confsec",
+ "star": 319,
+ "commits": 199,
+ "modify_time": "2019-11-29 12:46:16",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/census/shadow",
+ "star": 319,
+ "commits": 80,
+ "modify_time": "2019-11-18 12:30:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/admintony/svnexploit",
+ "star": 319,
+ "commits": 16,
+ "modify_time": "2019-10-17 01:09:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/a2u/cve-2018-7600",
+ "star": 319,
+ "commits": 39,
+ "modify_time": "2019-03-29 11:25:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/trustedsec/physical-docs",
+ "star": 318,
+ "commits": 12,
+ "modify_time": "2019-11-21 14:54:58",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/CarletonStuberg/browser-backdoor",
+ "star": 318,
+ "commits": 217,
+ "modify_time": "2018-09-12 00:27:52",
+ "last_release": "v2.9",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/wiglenet/wigle-wifi-wardriving",
+ "star": 318,
+ "commits": 1690,
+ "modify_time": "2019-12-08 19:53:24",
+ "last_release": "\n 2.48\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/spiderlabs/dohc2",
+ "star": 318,
+ "commits": 12,
+ "modify_time": "2018-11-12 16:24:59",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/rehints/publications",
+ "star": 318,
+ "commits": 52,
+ "modify_time": "2019-09-26 21:03:10",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/j91321/rext",
+ "star": 318,
+ "commits": 63,
+ "modify_time": "2016-12-24 16:44:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/frida/frida-core",
+ "star": 318,
+ "commits": 2393,
+ "modify_time": "2019-11-23 17:32:20",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/fireeye/rvmi",
+ "star": 318,
+ "commits": 15,
+ "modify_time": "2017-10-04 13:35:39",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/crazywa1ker/darthsidious-chinese",
+ "star": 318,
+ "commits": 51,
+ "modify_time": "2018-12-22 13:20:09",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/cisco-sas/kitty",
+ "star": 318,
+ "commits": 352,
+ "modify_time": "2019-02-22 10:50:58",
+ "last_release": "v0.7.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ChiChou/bagbak",
+ "star": 318,
+ "commits": 56,
+ "modify_time": "2019-12-05 13:52:24",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/bastilleresearch/gr-lora",
+ "star": 318,
+ "commits": 65,
+ "modify_time": "2017-07-13 23:37:01",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ysrc/f-scrack",
+ "star": 317,
+ "commits": 2,
+ "modify_time": "2017-09-05 09:45:00",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/williballenthin/python-idb",
+ "star": 317,
+ "commits": 409,
+ "modify_time": "2019-06-21 21:51:15",
+ "last_release": "v0.5.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vngkv123/asiagaming",
+ "star": 317,
+ "commits": 72,
+ "modify_time": "2019-08-11 19:18:33",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/shadowsocksr-rm/shadowsocks-rss",
+ "star": 317,
+ "commits": 1,
+ "modify_time": "2015-06-04 09:31:05",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/sdhand/x11fs",
+ "star": 317,
+ "commits": 74,
+ "modify_time": "2017-05-25 15:36:40",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/push0ebp/sig-database",
+ "star": 317,
+ "commits": 21,
+ "modify_time": "2019-08-02 00:37:16",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/privacypass/challenge-bypass-extension",
+ "star": 317,
+ "commits": 176,
+ "modify_time": "2019-11-28 16:27:57",
+ "last_release": "v2.0.4",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/pipesocks/pipesocks",
+ "star": 317,
+ "commits": 193,
+ "modify_time": "2017-03-21 00:43:50",
+ "last_release": "2.3",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/phaag/nfdump",
+ "star": 317,
+ "commits": 214,
+ "modify_time": "2019-12-04 19:23:14",
+ "last_release": "v1.6.18",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/nccgroup/vcg",
+ "star": 317,
+ "commits": 10,
+ "modify_time": "2019-11-06 10:29:17",
+ "last_release": "",
+ "lang": "Visual Basic .NET"
+ },
+ {
+ "link": "https://github.com/marcan/speculation-bugs",
+ "star": 317,
+ "commits": 51,
+ "modify_time": "2018-01-18 23:20:04",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/m0n0ph1/process-hollowing",
+ "star": 317,
+ "commits": 13,
+ "modify_time": "2018-09-09 18:52:23",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/frida/cryptoshark",
+ "star": 317,
+ "commits": 109,
+ "modify_time": "2015-04-21 09:27:42",
+ "last_release": "\n 0.1.3\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/eugenekolo/sec-tools",
+ "star": 317,
+ "commits": 64,
+ "modify_time": "2019-10-18 16:45:53",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/chobits/tapip",
+ "star": 317,
+ "commits": 105,
+ "modify_time": "2016-12-12 15:50:29",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/anonaddy/anonaddy",
+ "star": 316,
+ "commits": 107,
+ "modify_time": "2019-12-06 13:59:28",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/spongepowered/mixin",
+ "star": 316,
+ "commits": 663,
+ "modify_time": "2019-12-06 16:46:52",
+ "last_release": "\n releases/0.4.4\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/scumjr/dirtycow-vdso",
+ "star": 316,
+ "commits": 27,
+ "modify_time": "2017-02-27 18:50:04",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ohjeongwook/darungrim",
+ "star": 316,
+ "commits": 895,
+ "modify_time": "2019-10-23 07:27:02",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/moxie0/chapcrack",
+ "star": 316,
+ "commits": 17,
+ "modify_time": "2012-09-22 19:04:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/knxd/knxd",
+ "star": 316,
+ "commits": 1751,
+ "modify_time": "2019-12-08 14:33:15",
+ "last_release": "\n DEBIAN-0.14.29-5\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/grt1st/wooyun_search",
+ "star": 316,
+ "commits": 65,
+ "modify_time": "2018-07-06 19:00:05",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/ethventures/cryptotracker",
+ "star": 316,
+ "commits": 36,
+ "modify_time": "2017-08-16 06:08:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ethereum/ethereum-org",
+ "star": 316,
+ "commits": 1210,
+ "modify_time": "2019-04-17 13:52:16",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/ascii-boxes/boxes",
+ "star": 316,
+ "commits": 346,
+ "modify_time": "2019-11-18 13:50:50",
+ "last_release": "v1.3",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/trimstray/technical-whitepapers",
+ "star": 315,
+ "commits": 49,
+ "modify_time": "2019-12-01 09:19:10",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/tnich/honssh",
+ "star": 315,
+ "commits": 202,
+ "modify_time": "2018-04-04 16:24:15",
+ "last_release": "1.1.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tharina/blackhoodie-2018-workshop",
+ "star": 315,
+ "commits": 3,
+ "modify_time": "2018-11-24 19:42:18",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/seastorm/puttyrider",
+ "star": 315,
+ "commits": 16,
+ "modify_time": "2014-12-14 09:47:26",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/n0fate/chainbreaker",
+ "star": 315,
+ "commits": 22,
+ "modify_time": "2019-04-12 05:14:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/circl/lookyloo",
+ "star": 315,
+ "commits": 160,
+ "modify_time": "2019-11-15 15:51:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/benjojo/bgp-battleships",
+ "star": 314,
+ "commits": 10,
+ "modify_time": "2018-10-02 10:18:39",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/waylau/vpngate-mirrors",
+ "star": 314,
+ "commits": 569,
+ "modify_time": "2019-06-11 11:49:15",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/trailofbits/pe-parse",
+ "star": 314,
+ "commits": 212,
+ "modify_time": "2019-12-06 18:36:08",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/snoopysecurity/dvws",
+ "star": 314,
+ "commits": 20,
+ "modify_time": "2016-12-03 17:35:29",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/saelo/armpwn",
+ "star": 314,
+ "commits": 3,
+ "modify_time": "2017-04-17 09:16:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/psi-rockin/dobiestation",
+ "star": 314,
+ "commits": 1038,
+ "modify_time": "2019-12-05 00:09:21",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/offensive-security/masscan-web-ui",
+ "star": 314,
+ "commits": 56,
+ "modify_time": "2017-07-19 21:26:15",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/mvrozanti/rat-via-telegram",
+ "star": 314,
+ "commits": 232,
+ "modify_time": "2019-06-30 17:11:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/middleman/middleman-blog",
+ "star": 314,
+ "commits": 439,
+ "modify_time": "2018-12-27 22:52:51",
+ "last_release": "\n v4.0.3\n ",
+ "lang": "Gherkin"
+ },
+ {
+ "link": "https://github.com/jvinet/knock",
+ "star": 314,
+ "commits": 88,
+ "modify_time": "2015-12-27 00:49:39",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jivesearch/jivesearch",
+ "star": 314,
+ "commits": 698,
+ "modify_time": "2019-04-14 23:56:06",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/hash3lizer/wifibroot",
+ "star": 314,
+ "commits": 72,
+ "modify_time": "2019-08-12 09:10:47",
+ "last_release": "v1.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dafthack/powermeta",
+ "star": 314,
+ "commits": 7,
+ "modify_time": "2017-11-15 17:39:39",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/brainfucksec/kalitorify",
+ "star": 314,
+ "commits": 120,
+ "modify_time": "2019-11-08 11:02:51",
+ "last_release": "\n v1.20.0\n ",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/1n3/reverseapk",
+ "star": 314,
+ "commits": 23,
+ "modify_time": "2019-07-01 13:59:11",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/sebdah/scrapy-mongodb",
+ "star": 313,
+ "commits": 178,
+ "modify_time": "2018-05-11 03:44:37",
+ "last_release": "\n 0.12.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/google/turbinia",
+ "star": 313,
+ "commits": 414,
+ "modify_time": "2019-12-09 23:54:06",
+ "last_release": "20190819.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/erudika/para",
+ "star": 313,
+ "commits": 1270,
+ "modify_time": "2019-12-07 10:04:50",
+ "last_release": "v1.34.1",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/cyb3rward0g/invoke-attackapi",
+ "star": 313,
+ "commits": 27,
+ "modify_time": "2019-02-07 13:04:26",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/chinoogawa/fbht",
+ "star": 313,
+ "commits": 70,
+ "modify_time": "2016-08-20 08:06:37",
+ "last_release": "V3.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/al0ne/linuxcheck",
+ "star": 313,
+ "commits": 47,
+ "modify_time": "2019-12-02 10:39:29",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/zw963/asuswrt-merlin-transparent-proxy",
+ "star": 312,
+ "commits": 306,
+ "modify_time": "2019-09-14 15:40:36",
+ "last_release": "\n v0.6.0\n ",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/shengqi158/fastjson-remote-code-execute-poc",
+ "star": 312,
+ "commits": 20,
+ "modify_time": "2019-07-23 02:03:10",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/pmem/syscall_intercept",
+ "star": 312,
+ "commits": 365,
+ "modify_time": "2019-05-31 10:39:12",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/owasp/glue",
+ "star": 312,
+ "commits": 379,
+ "modify_time": "2019-09-10 18:01:06",
+ "last_release": "0.10.0",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/nneonneo/sha1collider",
+ "star": 312,
+ "commits": 6,
+ "modify_time": "2018-05-14 00:43:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/needmorecowbell/hamburglar",
+ "star": 312,
+ "commits": 72,
+ "modify_time": "2019-11-20 21:33:29",
+ "last_release": "",
+ "lang": "YARA"
+ },
+ {
+ "link": "https://github.com/malware-dev/mdk-se",
+ "star": 312,
+ "commits": 177,
+ "modify_time": "2019-11-18 17:44:00",
+ "last_release": "1.2.22",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/leibnitz27/cfr",
+ "star": 312,
+ "commits": 1608,
+ "modify_time": "2019-12-09 09:49:42",
+ "last_release": "0.148",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/koutto/jok3r",
+ "star": 312,
+ "commits": 447,
+ "modify_time": "2019-08-27 12:44:03",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/fdiskyou/hunter",
+ "star": 312,
+ "commits": 7,
+ "modify_time": "2016-12-03 21:28:51",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/dpwe/audfprint",
+ "star": 312,
+ "commits": 169,
+ "modify_time": "2019-09-23 11:27:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cisco-talos/mutiny-fuzzer",
+ "star": 312,
+ "commits": 9,
+ "modify_time": "2019-07-07 21:56:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/chronaeon/beigepaper",
+ "star": 312,
+ "commits": 105,
+ "modify_time": "2019-08-16 14:51:35",
+ "last_release": "",
+ "lang": "TeX"
+ },
+ {
+ "link": "https://github.com/christophetd/censys-subdomain-finder",
+ "star": 312,
+ "commits": 11,
+ "modify_time": "2018-08-09 19:26:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/caseyscarborough/keylogger",
+ "star": 312,
+ "commits": 37,
+ "modify_time": "2018-02-19 22:46:35",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/burntmybagel/oscp-prep",
+ "star": 312,
+ "commits": 19,
+ "modify_time": "2018-01-07 18:09:46",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/blankwall/macheap",
+ "star": 312,
+ "commits": 12,
+ "modify_time": "2016-08-18 13:42:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/shadowsocks/shadowdns",
+ "star": 311,
+ "commits": 19,
+ "modify_time": "2014-06-13 05:03:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/elfsundae/laravel-hashid",
+ "star": 311,
+ "commits": 202,
+ "modify_time": "2019-09-15 13:15:55",
+ "last_release": "\n 1.3.2\n ",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/jenssegers/rtl8188-hostapd",
+ "star": 311,
+ "commits": 17,
+ "modify_time": "2015-02-03 17:17:47",
+ "last_release": "v2.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/vanhauser-thc/thc-archive",
+ "star": 311,
+ "commits": 13,
+ "modify_time": "2019-11-30 17:49:29",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/twelvesec/gasmask",
+ "star": 311,
+ "commits": 149,
+ "modify_time": "2018-11-18 20:22:02",
+ "last_release": "v1.4.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tomac/yersinia",
+ "star": 311,
+ "commits": 116,
+ "modify_time": "2019-04-18 07:53:36",
+ "last_release": "v0.8.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/stormshadow07/hacktheworld",
+ "star": 311,
+ "commits": 13,
+ "modify_time": "2018-06-20 04:47:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sharadkumar97/osint-spy",
+ "star": 311,
+ "commits": 13,
+ "modify_time": "2018-11-25 16:37:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/screetsec/brutesploit",
+ "star": 311,
+ "commits": 28,
+ "modify_time": "2019-04-26 07:18:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/munki/createosxinstallpkg",
+ "star": 311,
+ "commits": 83,
+ "modify_time": "2017-10-03 11:54:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/milesrichardson/docker-onion-nmap",
+ "star": 311,
+ "commits": 3,
+ "modify_time": "2017-10-24 00:36:01",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/alobbs/macchanger",
+ "star": 311,
+ "commits": 46,
+ "modify_time": "2014-01-01 17:10:25",
+ "last_release": "",
+ "lang": "TeX"
+ },
+ {
+ "link": "https://github.com/screetsec/lalin",
+ "star": 310,
+ "commits": 65,
+ "modify_time": "2017-04-13 13:47:21",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/salesforce/hassh",
+ "star": 310,
+ "commits": 42,
+ "modify_time": "2019-08-21 23:48:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/microsoft/slayer",
+ "star": 310,
+ "commits": 9,
+ "modify_time": "2016-07-14 08:42:04",
+ "last_release": "",
+ "lang": "OCaml"
+ },
+ {
+ "link": "https://github.com/kevin-robertson/powermad",
+ "star": 310,
+ "commits": 17,
+ "modify_time": "2019-08-29 14:59:08",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/ioactive/xdiff",
+ "star": 310,
+ "commits": 33,
+ "modify_time": "2018-04-09 19:52:43",
+ "last_release": "1.2.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/exploitagency/esploitv2",
+ "star": 310,
+ "commits": 57,
+ "modify_time": "2018-02-10 12:06:39",
+ "last_release": "2.7.51",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/dedis/dissent",
+ "star": 310,
+ "commits": 942,
+ "modify_time": "2014-11-11 22:31:29",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/darkoperator/metasploit-plugins",
+ "star": 310,
+ "commits": 89,
+ "modify_time": "2019-01-18 16:26:26",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/circl/circlean",
+ "star": 310,
+ "commits": 251,
+ "modify_time": "2019-08-30 13:09:39",
+ "last_release": "\n v2.5\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/1522402210/2018-blackhat-tools-list",
+ "star": 310,
+ "commits": 1,
+ "modify_time": "2018-08-14 06:57:11",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ring04h/pentest",
+ "star": 309,
+ "commits": 16,
+ "modify_time": "2019-05-29 15:46:50",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/kennyn510/wpa2-wordlists",
+ "star": 309,
+ "commits": 59,
+ "modify_time": "2017-09-05 20:57:00",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/wangyihang/webshell-sniper",
+ "star": 309,
+ "commits": 179,
+ "modify_time": "2019-04-09 00:53:15",
+ "last_release": "v1.1.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tintinweb/scapy-ssl_tls",
+ "star": 309,
+ "commits": 506,
+ "modify_time": "2018-09-26 19:24:17",
+ "last_release": "v2.0.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/scadastrangelove/scadapass",
+ "star": 309,
+ "commits": 124,
+ "modify_time": "2016-11-14 13:49:56",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/packetloop/packetpig",
+ "star": 309,
+ "commits": 148,
+ "modify_time": "2016-03-09 01:37:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nccgroup/crosssitecontenthijacking",
+ "star": 309,
+ "commits": 18,
+ "modify_time": "2019-05-16 10:23:20",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/nakiami/mellivora",
+ "star": 309,
+ "commits": 648,
+ "modify_time": "2019-11-21 10:05:40",
+ "last_release": "v2.1",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/lordnoteworthy/cpu-internals",
+ "star": 309,
+ "commits": 63,
+ "modify_time": "2019-11-08 22:25:33",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/helloxz/ipinfo",
+ "star": 309,
+ "commits": 25,
+ "modify_time": "2018-11-05 13:33:37",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/ebryx/aes-killer",
+ "star": 309,
+ "commits": 17,
+ "modify_time": "2018-11-12 17:31:08",
+ "last_release": "3.0",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/armbues/ioc_parser",
+ "star": 309,
+ "commits": 68,
+ "modify_time": "2017-06-15 08:09:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ym2011/poc-exp",
+ "star": 308,
+ "commits": 28,
+ "modify_time": "2019-11-27 14:42:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/stripe/topmodel",
+ "star": 308,
+ "commits": 69,
+ "modify_time": "2016-03-11 00:32:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/status-im/nimbus",
+ "star": 308,
+ "commits": 1591,
+ "modify_time": "2019-12-09 08:44:59",
+ "last_release": "",
+ "lang": "Nim"
+ },
+ {
+ "link": "https://github.com/s4n7h0/halcyon",
+ "star": 308,
+ "commits": 27,
+ "modify_time": "2018-08-17 05:50:57",
+ "last_release": "2.0.1",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/nevermoe/unity_metadata_loader",
+ "star": 308,
+ "commits": 67,
+ "modify_time": "2018-07-18 15:22:28",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/kirillkovalenko/nssm",
+ "star": 308,
+ "commits": 368,
+ "modify_time": "2017-08-03 18:15:48",
+ "last_release": "\n v2.23\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/enigma0x3/misc-powershell-stuff",
+ "star": 308,
+ "commits": 31,
+ "modify_time": "2019-08-16 17:10:56",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/ch0pin/aviator",
+ "star": 308,
+ "commits": 74,
+ "modify_time": "2019-11-16 20:13:16",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/canix1/adaclscanner",
+ "star": 308,
+ "commits": 92,
+ "modify_time": "2019-11-21 08:26:19",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/bishopfox/spoofcheck",
+ "star": 308,
+ "commits": 16,
+ "modify_time": "2016-08-17 20:52:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/arecker/bennedetto",
+ "star": 308,
+ "commits": 188,
+ "modify_time": "2016-05-09 13:33:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/algo7/bluekeep_cve-2019-0708_poc_to_exploit",
+ "star": 308,
+ "commits": 48,
+ "modify_time": "2019-07-20 04:48:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sixstars/ctf",
+ "star": 307,
+ "commits": 253,
+ "modify_time": "2019-07-04 12:08:40",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/securing/iossecuritysuite",
+ "star": 307,
+ "commits": 44,
+ "modify_time": "2019-12-02 14:02:58",
+ "last_release": "1.4",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/qhd/anymethodlog",
+ "star": 307,
+ "commits": 19,
+ "modify_time": "2019-03-07 08:48:32",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/michenriksen/birdwatcher",
+ "star": 307,
+ "commits": 16,
+ "modify_time": "2016-11-06 11:49:33",
+ "last_release": "\n v0.4.0\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/frizb/windows-privilege-escalation",
+ "star": 307,
+ "commits": 71,
+ "modify_time": "2019-07-15 15:48:43",
+ "last_release": "",
+ "lang": "Batchfile"
+ },
+ {
+ "link": "https://github.com/dnscrypt/dnscrypt-resolvers",
+ "star": 306,
+ "commits": 612,
+ "modify_time": "2019-12-09 16:32:20",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/Q2h1Cg/dnsbrute",
+ "star": 306,
+ "commits": 123,
+ "modify_time": "2018-03-02 02:20:14",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/travitch/whole-program-llvm",
+ "star": 306,
+ "commits": 446,
+ "modify_time": "2019-07-19 18:53:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tomwimmenhove/subarufobrob",
+ "star": 306,
+ "commits": 61,
+ "modify_time": "2017-10-30 22:42:59",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/timsutton/python-macadmin-tools",
+ "star": 306,
+ "commits": 78,
+ "modify_time": "2018-04-03 11:04:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/p1kachu/v0lt",
+ "star": 306,
+ "commits": 192,
+ "modify_time": "2018-01-22 00:18:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nyan-x-cat/asyncrat-c-sharp",
+ "star": 306,
+ "commits": 375,
+ "modify_time": "2019-12-01 11:59:14",
+ "last_release": "v0.5.5A",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/nationalsecurityagency/dcp",
+ "star": 306,
+ "commits": 15,
+ "modify_time": "2017-10-04 00:54:35",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/m0nad/hellraiser",
+ "star": 306,
+ "commits": 41,
+ "modify_time": "2019-09-17 11:44:21",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/jhuisi/charm",
+ "star": 306,
+ "commits": 1237,
+ "modify_time": "2019-11-21 19:50:11",
+ "last_release": "v0.43",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/draperlaboratory/fracture",
+ "star": 306,
+ "commits": 362,
+ "modify_time": "2015-05-28 18:03:36",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/darkoperator/posh-secmod",
+ "star": 306,
+ "commits": 104,
+ "modify_time": "2019-10-29 13:31:55",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/coalfire-research/slackor",
+ "star": 306,
+ "commits": 63,
+ "modify_time": "2019-10-10 16:40:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/baderj/domain_generation_algorithms",
+ "star": 306,
+ "commits": 142,
+ "modify_time": "2019-12-06 13:55:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/walkor/workerman-statistics",
+ "star": 305,
+ "commits": 132,
+ "modify_time": "2018-04-25 02:11:08",
+ "last_release": "v1.0.2",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/vmcall/loadlibrayy",
+ "star": 305,
+ "commits": 14,
+ "modify_time": "2018-07-09 17:31:32",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/wisedoge/proxypool",
+ "star": 305,
+ "commits": 26,
+ "modify_time": "2018-04-06 09:59:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/widdix/aws-s3-virusscan",
+ "star": 305,
+ "commits": 137,
+ "modify_time": "2019-12-09 15:27:30",
+ "last_release": "v3.0.1",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/lmc999/auto-add-routes",
+ "star": 305,
+ "commits": 40,
+ "modify_time": "2019-07-04 04:18:23",
+ "last_release": "",
+ "lang": "Batchfile"
+ },
+ {
+ "link": "https://github.com/justinmeiners/lc3-vm",
+ "star": 305,
+ "commits": 107,
+ "modify_time": "2019-11-08 22:01:38",
+ "last_release": "1.0.1",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/joaomatosf/javadeserh2hc",
+ "star": 305,
+ "commits": 18,
+ "modify_time": "2018-01-14 21:10:11",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/bigsinger/androididchanger",
+ "star": 305,
+ "commits": 74,
+ "modify_time": "2019-11-28 08:11:28",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/basucert/winboxpoc",
+ "star": 305,
+ "commits": 41,
+ "modify_time": "2019-01-22 15:19:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/arno0x/dnsexfiltrator",
+ "star": 305,
+ "commits": 19,
+ "modify_time": "2018-04-05 16:51:35",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/sirzdy/shadowsocks",
+ "star": 304,
+ "commits": 7,
+ "modify_time": "2018-05-23 06:49:55",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/FSecureLABS/win_driver_plugin",
+ "star": 304,
+ "commits": 27,
+ "modify_time": "2018-08-22 21:12:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hatching/vmcloak",
+ "star": 304,
+ "commits": 912,
+ "modify_time": "2019-10-22 22:09:35",
+ "last_release": "\n 0.4.8\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ugukkylbklaom/vultr-ss-firewall",
+ "star": 304,
+ "commits": 12,
+ "modify_time": "2017-09-27 08:45:38",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/steverobbins/magescan",
+ "star": 304,
+ "commits": 320,
+ "modify_time": "2019-02-12 17:58:37",
+ "last_release": "v1.12.9",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/secgen/secgen",
+ "star": 304,
+ "commits": 727,
+ "modify_time": "2019-04-18 11:56:33",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/safebreach-labs/pwndsh",
+ "star": 304,
+ "commits": 3,
+ "modify_time": "2016-10-22 01:57:51",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/raspberrypi/maynard",
+ "star": 304,
+ "commits": 125,
+ "modify_time": "2016-10-28 15:44:08",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/r3vn/badkarma",
+ "star": 304,
+ "commits": 85,
+ "modify_time": "2018-12-17 15:55:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nccgroup/cyber-defence",
+ "star": 304,
+ "commits": 33,
+ "modify_time": "2019-05-21 09:03:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nagyd/sdlpop",
+ "star": 304,
+ "commits": 565,
+ "modify_time": "2019-11-09 07:43:16",
+ "last_release": "\n v1.20\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/m0n0ph1/malware-1",
+ "star": 304,
+ "commits": 103,
+ "modify_time": "2017-06-28 21:32:52",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/kristian-lange/net-glimpse",
+ "star": 304,
+ "commits": 208,
+ "modify_time": "2017-11-05 18:02:20",
+ "last_release": "1.8",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/hynekpetrak/malware-jail",
+ "star": 304,
+ "commits": 224,
+ "modify_time": "2019-08-08 13:46:40",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/ethereum/devp2p",
+ "star": 304,
+ "commits": 77,
+ "modify_time": "2019-11-21 12:50:19",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/clusterhq/powerstrip",
+ "star": 304,
+ "commits": 325,
+ "modify_time": "2016-01-15 15:18:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ning1022/SQLInjectionWiki",
+ "star": 303,
+ "commits": 14,
+ "modify_time": "2019-03-23 03:42:34",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/spritz-research-group/skype-type",
+ "star": 303,
+ "commits": 4,
+ "modify_time": "2017-10-10 14:34:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/salls/angrop",
+ "star": 303,
+ "commits": 166,
+ "modify_time": "2019-10-30 06:24:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rhinosecuritylabs/cves",
+ "star": 303,
+ "commits": 60,
+ "modify_time": "2019-10-29 02:47:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/julienbedard/browsersploit",
+ "star": 303,
+ "commits": 14,
+ "modify_time": "2017-04-19 11:26:44",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/fozavci/viproy-voipkit",
+ "star": 303,
+ "commits": 81,
+ "modify_time": "2019-09-16 07:32:09",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/dynatrace/superdump",
+ "star": 303,
+ "commits": 630,
+ "modify_time": "2019-11-27 14:20:40",
+ "last_release": "v3.1",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/christhecoolhut/firmware_slap",
+ "star": 303,
+ "commits": 31,
+ "modify_time": "2019-11-21 02:45:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/3ndg4me/autoblue-ms17-010",
+ "star": 303,
+ "commits": 27,
+ "modify_time": "2019-10-13 06:40:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xinsss/conf-for-surge-shadowrocket",
+ "star": 302,
+ "commits": 127,
+ "modify_time": "2019-09-25 03:06:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zhaoweiho/securitymanageframwork",
+ "star": 302,
+ "commits": 54,
+ "modify_time": "2019-08-04 03:14:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xdavidhu/langhost",
+ "star": 302,
+ "commits": 164,
+ "modify_time": "2019-11-03 11:33:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vitaly-kamluk/bitscout",
+ "star": 302,
+ "commits": 35,
+ "modify_time": "2019-11-01 08:38:57",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/swoodford/aws",
+ "star": 302,
+ "commits": 212,
+ "modify_time": "2019-02-15 22:11:22",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/ston3o/docker-hacklab",
+ "star": 302,
+ "commits": 127,
+ "modify_time": "2018-08-21 09:18:25",
+ "last_release": "",
+ "lang": "Dockerfile"
+ },
+ {
+ "link": "https://github.com/robbendebiene/gesturefy",
+ "star": 302,
+ "commits": 1305,
+ "modify_time": "2019-10-20 09:00:58",
+ "last_release": "v2.1.3",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/lekensteyn/pacemaker",
+ "star": 302,
+ "commits": 78,
+ "modify_time": "2016-01-22 00:42:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kgretzky/obfusion",
+ "star": 302,
+ "commits": 9,
+ "modify_time": "2016-07-22 08:51:27",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/jas502n/st2-057",
+ "star": 302,
+ "commits": 26,
+ "modify_time": "2018-08-25 17:13:57",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/ilmila/j2eescan",
+ "star": 302,
+ "commits": 81,
+ "modify_time": "2019-05-05 18:35:29",
+ "last_release": "v1.2.5",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/guitmz/virii",
+ "star": 302,
+ "commits": 7,
+ "modify_time": "2019-01-07 13:55:42",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/astrand/pyobfuscate",
+ "star": 302,
+ "commits": 66,
+ "modify_time": "2013-11-29 08:33:55",
+ "last_release": "\n pyobfuscate-0-3\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zodiacon/procmonx",
+ "star": 301,
+ "commits": 29,
+ "modify_time": "2019-11-29 10:26:13",
+ "last_release": "0.21-beta",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/vmware/tern",
+ "star": 301,
+ "commits": 593,
+ "modify_time": "2019-12-06 03:23:18",
+ "last_release": "v1.0.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/two06/inception",
+ "star": 301,
+ "commits": 4,
+ "modify_time": "2018-08-17 12:40:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/stamparm/dsxs",
+ "star": 301,
+ "commits": 128,
+ "modify_time": "2019-11-12 10:56:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rootviii/proxy_requests",
+ "star": 301,
+ "commits": 177,
+ "modify_time": "2019-07-31 04:51:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ring04h/wyportmap",
+ "star": 301,
+ "commits": 32,
+ "modify_time": "2017-01-13 09:58:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/qubesos/qubes-secpack",
+ "star": 301,
+ "commits": 440,
+ "modify_time": "2019-11-26 13:23:25",
+ "last_release": "\n marmarek_sec_f8bb949c\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/no-github/dork-admin",
+ "star": 301,
+ "commits": 32,
+ "modify_time": "2019-10-20 22:56:52",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/fairwindsops/rbac-lookup",
+ "star": 301,
+ "commits": 90,
+ "modify_time": "2019-10-08 12:53:24",
+ "last_release": "v0.5.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/bettercap/caplets",
+ "star": 301,
+ "commits": 336,
+ "modify_time": "2019-10-09 10:57:24",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/bepsvpt/secure-headers",
+ "star": 301,
+ "commits": 208,
+ "modify_time": "2019-11-29 00:57:02",
+ "last_release": "\n 5.5.0\n ",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/austin-taylor/flare",
+ "star": 301,
+ "commits": 109,
+ "modify_time": "2019-10-21 10:37:59",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/9176324/shark",
+ "star": 301,
+ "commits": 36,
+ "modify_time": "2019-09-30 19:05:55",
+ "last_release": "2019-10-30",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/Mr-Un1k0d3r/CatMyPhish",
+ "star": 300,
+ "commits": 50,
+ "modify_time": "2019-01-15 20:18:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wangyihang/githacker",
+ "star": 300,
+ "commits": 35,
+ "modify_time": "2019-07-13 03:19:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/skylined/bugid",
+ "star": 300,
+ "commits": 1062,
+ "modify_time": "2019-12-03 10:14:47",
+ "last_release": "2019-10-17",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/raspberrypi/quake3",
+ "star": 300,
+ "commits": 12,
+ "modify_time": "2019-03-25 17:50:23",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/nvisium/xssvalidator",
+ "star": 300,
+ "commits": 97,
+ "modify_time": "2017-01-23 19:36:00",
+ "last_release": "1.3.1",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/nektra/deviare2",
+ "star": 300,
+ "commits": 71,
+ "modify_time": "2018-07-11 16:16:58",
+ "last_release": "v2.8.3",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/mitchellkrogza/apache-ultimate-bad-bot-blocker",
+ "star": 300,
+ "commits": 2015,
+ "modify_time": "2019-10-19 09:34:58",
+ "last_release": "V3.2019.10.1184",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/0xacb/viewgen",
+ "star": 300,
+ "commits": 28,
+ "modify_time": "2019-05-05 23:30:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vusec/vuzzer",
+ "star": 299,
+ "commits": 9,
+ "modify_time": "2019-10-28 13:54:14",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/tarsnap/scrypt",
+ "star": 299,
+ "commits": 535,
+ "modify_time": "2019-11-16 00:34:52",
+ "last_release": "\n 1.3.0\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/smartdone/frida-scripts",
+ "star": 299,
+ "commits": 12,
+ "modify_time": "2019-09-09 01:45:44",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/secrary/idenlib",
+ "star": 299,
+ "commits": 51,
+ "modify_time": "2019-03-17 00:42:24",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ossindex/devaudit",
+ "star": 299,
+ "commits": 759,
+ "modify_time": "2019-09-28 17:35:21",
+ "last_release": "\n v3.3.1\n ",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/mseclab/pyjfuzz",
+ "star": 299,
+ "commits": 157,
+ "modify_time": "2019-01-15 20:06:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/miohtama/python-levenshtein",
+ "star": 299,
+ "commits": 12,
+ "modify_time": "2017-02-03 17:04:16",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hellman/libformatstr",
+ "star": 299,
+ "commits": 26,
+ "modify_time": "2017-07-10 14:18:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fwaeytens/dnsenum",
+ "star": 299,
+ "commits": 18,
+ "modify_time": "2015-02-20 18:56:16",
+ "last_release": "1.2.4.2",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/cyphunk/jtagenum",
+ "star": 299,
+ "commits": 83,
+ "modify_time": "2019-05-26 09:35:59",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/cyberark/kubiscan",
+ "star": 299,
+ "commits": 75,
+ "modify_time": "2019-08-14 15:10:01",
+ "last_release": "v1.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bhdresh/cve-2017-8759",
+ "star": 299,
+ "commits": 12,
+ "modify_time": "2018-09-10 16:25:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/alexandreborges/malwoverview",
+ "star": 299,
+ "commits": 277,
+ "modify_time": "2019-10-23 00:40:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/0xradi/owasp-web-checklist",
+ "star": 299,
+ "commits": 23,
+ "modify_time": "2019-07-11 13:44:01",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/0x90/kali-scripts",
+ "star": 299,
+ "commits": 254,
+ "modify_time": "2018-02-22 04:53:15",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/zer0h/httpscan",
+ "star": 298,
+ "commits": 6,
+ "modify_time": "2016-04-05 02:39:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vmware/burp-rest-api",
+ "star": 298,
+ "commits": 72,
+ "modify_time": "2018-11-05 20:09:59",
+ "last_release": "v2.0.1",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/rootm0s/protectors",
+ "star": 298,
+ "commits": 21,
+ "modify_time": "2018-01-25 12:10:05",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/onelogicalmyth/zeroday-powershell",
+ "star": 298,
+ "commits": 12,
+ "modify_time": "2018-09-12 09:03:03",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/krausefx/steal.password",
+ "star": 298,
+ "commits": 17,
+ "modify_time": "2017-11-23 20:53:01",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/igrr/esptool-ck",
+ "star": 298,
+ "commits": 132,
+ "modify_time": "2018-02-17 11:27:53",
+ "last_release": "0.4.13",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/emposha/shell-detector",
+ "star": 298,
+ "commits": 25,
+ "modify_time": "2016-04-26 08:34:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cisco-talos/ghida",
+ "star": 298,
+ "commits": 2,
+ "modify_time": "2019-09-04 22:44:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/christhecoolhut/pinctf",
+ "star": 298,
+ "commits": 24,
+ "modify_time": "2019-10-02 19:09:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bishopfox/eyeballer",
+ "star": 298,
+ "commits": 110,
+ "modify_time": "2019-10-22 22:13:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/balsn/ctf_writeup",
+ "star": 298,
+ "commits": 108,
+ "modify_time": "2019-10-28 13:07:06",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/andresriancho/nimbostratus",
+ "star": 298,
+ "commits": 54,
+ "modify_time": "2014-02-04 21:27:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pwning/docs",
+ "star": 297,
+ "commits": 25,
+ "modify_time": "2017-10-30 02:20:16",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/w3c/webappsec-trusted-types",
+ "star": 297,
+ "commits": 313,
+ "modify_time": "2019-12-02 18:31:16",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/yw9381/burp_suite_doc_zh_cn",
+ "star": 297,
+ "commits": 34,
+ "modify_time": "2018-12-23 14:23:53",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/trustedsec/nps_payload",
+ "star": 297,
+ "commits": 9,
+ "modify_time": "2017-08-08 14:12:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/squalr/squally",
+ "star": 297,
+ "commits": 1987,
+ "modify_time": "2019-12-10 05:45:43",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/shred/acme4j",
+ "star": 297,
+ "commits": 631,
+ "modify_time": "2019-12-07 15:21:26",
+ "last_release": "v2.8",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/samyk/proxygambit",
+ "star": 297,
+ "commits": 11,
+ "modify_time": "2015-07-30 13:17:34",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ropnop/kerbrute",
+ "star": 297,
+ "commits": 78,
+ "modify_time": "2019-11-24 02:45:18",
+ "last_release": "v1.0.2",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/orf/cyborg",
+ "star": 297,
+ "commits": 4,
+ "modify_time": "2016-01-03 23:12:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mozillasecurity/dharma",
+ "star": 297,
+ "commits": 87,
+ "modify_time": "2019-12-05 03:21:59",
+ "last_release": "v1.3.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/janeczku/rancher-letsencrypt",
+ "star": 297,
+ "commits": 60,
+ "modify_time": "2017-05-14 20:28:10",
+ "last_release": "v0.5.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/interference-security/empire-web",
+ "star": 297,
+ "commits": 43,
+ "modify_time": "2018-06-09 04:45:15",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/fireeye/sharpersist",
+ "star": 297,
+ "commits": 21,
+ "modify_time": "2019-10-04 15:36:09",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/basil00/reqrypt",
+ "star": 297,
+ "commits": 80,
+ "modify_time": "2019-03-22 13:37:25",
+ "last_release": "v1.4.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/allyshka/rogue-mysql-server",
+ "star": 297,
+ "commits": 7,
+ "modify_time": "2017-07-23 17:13:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wangyu-/udp2raw-multiplatform",
+ "star": 296,
+ "commits": 699,
+ "modify_time": "2019-04-07 10:21:30",
+ "last_release": "20190407.0",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ugvf2009/miles",
+ "star": 296,
+ "commits": 198,
+ "modify_time": "2019-12-10 02:07:04",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/sensepost/rattler",
+ "star": 296,
+ "commits": 18,
+ "modify_time": "2017-08-11 09:57:26",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/saghul/aiodns",
+ "star": 296,
+ "commits": 91,
+ "modify_time": "2019-09-08 11:21:31",
+ "last_release": "aiodns-2.0.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rolfrolles/hexraysdeob",
+ "star": 296,
+ "commits": 14,
+ "modify_time": "2019-08-27 09:56:29",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/hasherezade/bearparser",
+ "star": 296,
+ "commits": 358,
+ "modify_time": "2019-12-09 17:25:49",
+ "last_release": "v0.2",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/govanguard/legion",
+ "star": 296,
+ "commits": 350,
+ "modify_time": "2019-12-05 10:18:46",
+ "last_release": "\n v0.3.6\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/edent/bmw-i-remote",
+ "star": 296,
+ "commits": 47,
+ "modify_time": "2019-05-30 12:47:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/checkpointsw/android_unpacker",
+ "star": 296,
+ "commits": 5,
+ "modify_time": "2017-08-04 07:33:45",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/amachanic/sp_whoisactive",
+ "star": 296,
+ "commits": 6,
+ "modify_time": "2019-07-29 00:07:27",
+ "last_release": "",
+ "lang": "PLpgSQL"
+ },
+ {
+ "link": "https://github.com/aws-samples/aws-serverless-security-workshop",
+ "star": 295,
+ "commits": 125,
+ "modify_time": "2019-12-08 01:51:01",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/TeamWalrus/Walrus",
+ "star": 295,
+ "commits": 450,
+ "modify_time": "2019-06-17 06:23:33",
+ "last_release": "\n 0.2.1\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/anti-ddos/Anti-DDOS",
+ "star": 295,
+ "commits": 39,
+ "modify_time": "2019-08-15 21:06:13",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/xxxily/fiddler-plus",
+ "star": 295,
+ "commits": 35,
+ "modify_time": "2018-11-16 13:21:52",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/swiftonsecurity/swiftfilter",
+ "star": 295,
+ "commits": 5,
+ "modify_time": "2018-03-19 18:59:01",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/sevagas/swap_digger",
+ "star": 295,
+ "commits": 39,
+ "modify_time": "2018-07-13 09:01:59",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/s2e/s2e-old",
+ "star": 295,
+ "commits": 22954,
+ "modify_time": "2017-01-29 21:15:11",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/s0md3v/zen",
+ "star": 295,
+ "commits": 24,
+ "modify_time": "2019-05-05 15:49:59",
+ "last_release": "v1.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/raikia/credninja",
+ "star": 295,
+ "commits": 24,
+ "modify_time": "2019-07-02 03:53:48",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/outflanknl/invoke-adlabdeployer",
+ "star": 295,
+ "commits": 2,
+ "modify_time": "2018-03-30 11:04:50",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/hasherezade/libpeconv",
+ "star": 295,
+ "commits": 422,
+ "modify_time": "2019-12-08 01:27:40",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ghostpack/sharpup",
+ "star": 295,
+ "commits": 15,
+ "modify_time": "2018-08-25 05:59:04",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/fdiskyou/zines",
+ "star": 295,
+ "commits": 39,
+ "modify_time": "2019-12-09 08:39:43",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/doyensec/electronegativity",
+ "star": 295,
+ "commits": 257,
+ "modify_time": "2019-10-29 17:17:53",
+ "last_release": "v1.4.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/amaembo/huntbugs",
+ "star": 295,
+ "commits": 580,
+ "modify_time": "2019-08-31 04:01:43",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/EBWi11/AgentSmith-HIDS",
+ "star": 294,
+ "commits": 258,
+ "modify_time": "2019-12-09 13:45:20",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/AnasAboureada/Penetration-Testing-Study-Notes",
+ "star": 294,
+ "commits": 39,
+ "modify_time": "2018-07-03 14:58:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xiaomi-sa/smartdns",
+ "star": 294,
+ "commits": 11,
+ "modify_time": "2013-08-11 14:26:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ricmoo/pyaes",
+ "star": 294,
+ "commits": 32,
+ "modify_time": "2017-09-20 21:08:24",
+ "last_release": "v1.6.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rhboot/shim",
+ "star": 294,
+ "commits": 692,
+ "modify_time": "2019-03-15 13:52:02",
+ "last_release": "15",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/pentesteracademy/patoolkit",
+ "star": 294,
+ "commits": 10,
+ "modify_time": "2019-10-29 06:13:04",
+ "last_release": "",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/n1nj4sec/pr0cks",
+ "star": 294,
+ "commits": 20,
+ "modify_time": "2017-03-10 19:59:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mdsecactivebreach/o365-attack-toolkit",
+ "star": 294,
+ "commits": 8,
+ "modify_time": "2019-10-11 18:32:46",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/maaaaz/androwarn",
+ "star": 294,
+ "commits": 135,
+ "modify_time": "2019-05-30 13:31:53",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/lucyoa/ctf-wiki",
+ "star": 294,
+ "commits": null,
+ "modify_time": "2017-05-22 18:33:02",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/eschultze/urlextractor",
+ "star": 294,
+ "commits": 19,
+ "modify_time": "2019-05-27 19:44:11",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/ctf-wiki/ctf-tools",
+ "star": 294,
+ "commits": 96,
+ "modify_time": "2019-02-01 07:57:38",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/cryptolok/ghostinthenet",
+ "star": 294,
+ "commits": 69,
+ "modify_time": "2018-09-19 15:50:29",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/boy-hack/w8fuckcdn",
+ "star": 294,
+ "commits": 13,
+ "modify_time": "2019-04-07 08:24:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/appsecco/dvna",
+ "star": 294,
+ "commits": 40,
+ "modify_time": "2018-11-14 01:46:30",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/acekyd/made-in-nigeria",
+ "star": 294,
+ "commits": 371,
+ "modify_time": "2019-11-30 13:27:53",
+ "last_release": "",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/aanarchyy/bully",
+ "star": 294,
+ "commits": 49,
+ "modify_time": "2017-09-26 01:03:42",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/shadowsocks/simple-obfs-android",
+ "star": 293,
+ "commits": 39,
+ "modify_time": "2019-08-19 10:33:03",
+ "last_release": "v0.0.5",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/vysecurity/DomainFrontingLists",
+ "star": 293,
+ "commits": 6,
+ "modify_time": "2019-04-12 17:33:16",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/xmrig/xmrig-proxy",
+ "star": 293,
+ "commits": 603,
+ "modify_time": "2019-11-28 05:12:19",
+ "last_release": "v5.0.1",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/vulscanteam/vulscan",
+ "star": 293,
+ "commits": 74,
+ "modify_time": "2019-05-10 09:44:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/trustedsec/artillery",
+ "star": 293,
+ "commits": 121,
+ "modify_time": "2015-10-30 19:29:56",
+ "last_release": "\n 4.0.3\n ",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/supportintelligence/icewater",
+ "star": 293,
+ "commits": 24,
+ "modify_time": "2019-06-01 05:05:24",
+ "last_release": "",
+ "lang": "YARA"
+ },
+ {
+ "link": "https://github.com/strazzere/golang_loader_assist",
+ "star": 293,
+ "commits": 22,
+ "modify_time": "2019-10-29 21:12:02",
+ "last_release": "IDA-7.4.191011-compliant",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/skx/simple.vm",
+ "star": 293,
+ "commits": 213,
+ "modify_time": "2019-06-27 15:01:01",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/s1gh/ctf-literature",
+ "star": 293,
+ "commits": 65,
+ "modify_time": "2019-02-22 12:06:12",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/qubesos/qubes-issues",
+ "star": 293,
+ "commits": 137,
+ "modify_time": "2019-12-02 00:16:48",
+ "last_release": "\n mm_79c1f397\n ",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/pulkin/esp8266-injection-example",
+ "star": 293,
+ "commits": 7,
+ "modify_time": "2019-07-28 16:08:02",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/minhaskamal/trojancockroach",
+ "star": 293,
+ "commits": 66,
+ "modify_time": "2017-11-11 04:02:37",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/mboehme/aflfast",
+ "star": 293,
+ "commits": 232,
+ "modify_time": "2019-10-21 00:52:22",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jmcardon/tsec",
+ "star": 293,
+ "commits": 786,
+ "modify_time": "2019-10-14 15:16:46",
+ "last_release": "v0.1.0",
+ "lang": "Scala"
+ },
+ {
+ "link": "https://github.com/itm4n/vba-runpe",
+ "star": 293,
+ "commits": 27,
+ "modify_time": "2019-11-27 11:03:48",
+ "last_release": "",
+ "lang": "Visual Basic .NET"
+ },
+ {
+ "link": "https://github.com/invoke-ir/forensicposters",
+ "star": 293,
+ "commits": 40,
+ "modify_time": "2016-12-29 19:57:23",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/gianlucaborello/libprocesshider",
+ "star": 293,
+ "commits": 7,
+ "modify_time": "2019-04-03 15:20:31",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/lucifer1993/tpscan",
+ "star": 292,
+ "commits": 4,
+ "modify_time": "2019-11-09 06:02:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/smartdec/smartdec",
+ "star": 292,
+ "commits": 1,
+ "modify_time": "2015-05-06 15:31:45",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/nst/spyphone",
+ "star": 292,
+ "commits": 35,
+ "modify_time": "2011-11-22 15:51:43",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/northbit/metaphor",
+ "star": 292,
+ "commits": 6,
+ "modify_time": "2016-03-24 18:38:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mitre-attack/car",
+ "star": 292,
+ "commits": 261,
+ "modify_time": "2019-12-09 20:55:29",
+ "last_release": "",
+ "lang": "Zeek"
+ },
+ {
+ "link": "https://github.com/jeija/bluefluff",
+ "star": 292,
+ "commits": 42,
+ "modify_time": "2019-01-14 19:25:05",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/ganyao114/sandvxposed",
+ "star": 292,
+ "commits": 84,
+ "modify_time": "2019-11-26 04:19:43",
+ "last_release": "0.0.9.4.2",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/fplyth0ner-combie/bug-project-framework",
+ "star": 292,
+ "commits": 126,
+ "modify_time": "2019-10-08 02:02:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/findneo/newbie-security-list",
+ "star": 292,
+ "commits": 20,
+ "modify_time": "2018-10-23 16:52:23",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/adjust/android_sdk",
+ "star": 292,
+ "commits": 1865,
+ "modify_time": "2019-12-09 12:40:46",
+ "last_release": "v4.19.0",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/Cyb0r9/SocialBox",
+ "star": 291,
+ "commits": 21,
+ "modify_time": "2019-01-08 06:16:06",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/enkomio/Taipan",
+ "star": 291,
+ "commits": 273,
+ "modify_time": "2019-07-19 15:07:39",
+ "last_release": "2.7",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/vulnerscom/api",
+ "star": 291,
+ "commits": 72,
+ "modify_time": "2019-10-10 09:13:22",
+ "last_release": "1.5.4",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ustwo/mastermind",
+ "star": 291,
+ "commits": 338,
+ "modify_time": "2016-09-08 15:32:22",
+ "last_release": "v1.0.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tevador/randomx",
+ "star": 291,
+ "commits": 380,
+ "modify_time": "2019-12-01 20:07:13",
+ "last_release": "v1.1.7",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/orangetw/tiny-url-fuzzer",
+ "star": 291,
+ "commits": 3,
+ "modify_time": "2017-08-28 16:13:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mvelazc0/defcon27_csharp_workshop",
+ "star": 291,
+ "commits": 5,
+ "modify_time": "2019-08-24 00:57:17",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/kingsollyu/appenv",
+ "star": 291,
+ "commits": 85,
+ "modify_time": "2017-07-06 07:58:22",
+ "last_release": "\n 3.2.0\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/kholia/dedrop",
+ "star": 291,
+ "commits": 28,
+ "modify_time": "2019-06-09 17:02:08",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/kevthehermit/volutility",
+ "star": 291,
+ "commits": 222,
+ "modify_time": "2017-01-20 09:34:55",
+ "last_release": "v1.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ffay/proxygateway",
+ "star": 291,
+ "commits": 37,
+ "modify_time": "2018-05-04 11:39:34",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/fail0verflow/ps4-kexec",
+ "star": 291,
+ "commits": 45,
+ "modify_time": "2018-11-27 18:31:18",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/a1ext/labeless",
+ "star": 291,
+ "commits": 164,
+ "modify_time": "2019-02-13 08:11:41",
+ "last_release": "v_1_1_2_85",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/gallopsled/pwntools-tutorial",
+ "star": 290,
+ "commits": 49,
+ "modify_time": "2018-10-09 20:52:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cokebar/gfwlist2dnsmasq_python",
+ "star": 290,
+ "commits": 65,
+ "modify_time": "2017-03-17 10:00:59",
+ "last_release": "20160313",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xmrig/xmrig-amd",
+ "star": 290,
+ "commits": 503,
+ "modify_time": "2019-08-31 02:48:26",
+ "last_release": "v2.14.6",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/marcinguy/cve-2019-2107",
+ "star": 290,
+ "commits": 14,
+ "modify_time": "2019-07-25 08:01:06",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/l0ss/grouper2",
+ "star": 290,
+ "commits": 321,
+ "modify_time": "2019-07-31 00:21:39",
+ "last_release": "0.9.51",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/immunit/drupwn",
+ "star": 290,
+ "commits": 55,
+ "modify_time": "2019-02-28 13:15:13",
+ "last_release": "\n 1.0.3\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/flipkart-incubator/watchdog",
+ "star": 290,
+ "commits": 91,
+ "modify_time": "2018-07-18 09:12:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dxa4481/cssinjection",
+ "star": 290,
+ "commits": 14,
+ "modify_time": "2018-02-05 04:17:35",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/decomp/decomp",
+ "star": 290,
+ "commits": 195,
+ "modify_time": "2019-10-31 12:22:23",
+ "last_release": "\n v0.2\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/bishopfox/theos-jailed",
+ "star": 290,
+ "commits": 656,
+ "modify_time": "2015-08-17 07:25:30",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/a1ext/auto_re",
+ "star": 290,
+ "commits": 26,
+ "modify_time": "2019-10-14 13:07:19",
+ "last_release": "v1.7",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ysurac/openmptcprouter",
+ "star": 289,
+ "commits": 469,
+ "modify_time": "2019-11-26 18:15:35",
+ "last_release": "\n v0.53rc1\n ",
+ "lang": "Roff"
+ },
+ {
+ "link": "https://github.com/joshuaferrara/node-csgo",
+ "star": 289,
+ "commits": 227,
+ "modify_time": "2019-05-31 16:45:54",
+ "last_release": "1.5.12",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/FortyNorthSecurity/WMIOps",
+ "star": 289,
+ "commits": 42,
+ "modify_time": "2017-01-11 17:22:23",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/voku/anti-xss",
+ "star": 289,
+ "commits": 411,
+ "modify_time": "2019-12-07 22:27:15",
+ "last_release": "\n 4.1.20\n ",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/ropnop/windapsearch",
+ "star": 289,
+ "commits": 21,
+ "modify_time": "2019-05-16 23:41:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pownjs/pown-recon",
+ "star": 289,
+ "commits": 598,
+ "modify_time": "2019-10-03 21:19:28",
+ "last_release": "\n v2.67.1\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/opsdisk/pagodo",
+ "star": 289,
+ "commits": 54,
+ "modify_time": "2019-07-16 02:15:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kspearrin/ff-password-exporter",
+ "star": 289,
+ "commits": 37,
+ "modify_time": "2019-09-25 18:31:56",
+ "last_release": "v1.1.1",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/kootenpv/gittyleaks",
+ "star": 289,
+ "commits": 25,
+ "modify_time": "2017-09-08 09:29:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gbrindisi/xsssniper",
+ "star": 289,
+ "commits": 79,
+ "modify_time": "2018-04-17 14:12:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/creaktive/tsh",
+ "star": 289,
+ "commits": 8,
+ "modify_time": "2018-05-21 06:10:28",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/adferrand/docker-letsencrypt-dns",
+ "star": 289,
+ "commits": 236,
+ "modify_time": "2019-12-07 23:08:02",
+ "last_release": "2.20.0",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/zhl2008/awd-platform",
+ "star": 288,
+ "commits": 31,
+ "modify_time": "2018-09-11 05:59:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/williballenthin/python-registry",
+ "star": 288,
+ "commits": 323,
+ "modify_time": "2019-05-08 19:45:55",
+ "last_release": "1.3.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/websploit/websploit",
+ "star": 288,
+ "commits": 7,
+ "modify_time": "2017-12-06 13:22:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/troglobit/nemesis",
+ "star": 288,
+ "commits": 247,
+ "modify_time": "2019-12-08 12:24:22",
+ "last_release": "v1.6",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/sosreport/sos",
+ "star": 288,
+ "commits": 3136,
+ "modify_time": "2019-12-09 18:09:10",
+ "last_release": "3.8",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rampagex/firmware-mod-kit",
+ "star": 288,
+ "commits": 145,
+ "modify_time": "2019-07-14 15:30:34",
+ "last_release": "\n 0.99\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/phpmussel/phpmussel",
+ "star": 288,
+ "commits": 961,
+ "modify_time": "2019-12-01 15:45:05",
+ "last_release": "v2.1.0",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/ma3k4h3d/papers",
+ "star": 288,
+ "commits": 79,
+ "modify_time": "2019-05-29 12:52:26",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/indywidualny/faceslim",
+ "star": 288,
+ "commits": 569,
+ "modify_time": "2018-12-21 14:10:08",
+ "last_release": "v3.4.1",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/dhilipsiva/webapp-checklist",
+ "star": 288,
+ "commits": 20,
+ "modify_time": "2016-12-07 14:00:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/develbranch/tinyantivirus",
+ "star": 288,
+ "commits": 32,
+ "modify_time": "2017-04-18 01:40:32",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/covertcodes/multitun",
+ "star": 288,
+ "commits": 45,
+ "modify_time": "2019-09-13 14:10:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/anhkgg/superdllhijack",
+ "star": 288,
+ "commits": 9,
+ "modify_time": "2019-02-15 04:07:17",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/Greenwolf/Spray",
+ "star": 287,
+ "commits": 24,
+ "modify_time": "2019-06-04 23:14:02",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/klsecservices/rpivot",
+ "star": 287,
+ "commits": 5,
+ "modify_time": "2018-07-12 09:53:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tangsilian/android-vuln",
+ "star": 287,
+ "commits": 22,
+ "modify_time": "2019-04-27 09:29:33",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/utiso/dorkbot",
+ "star": 287,
+ "commits": 96,
+ "modify_time": "2019-10-02 15:39:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tehw0lf/airbash",
+ "star": 287,
+ "commits": 81,
+ "modify_time": "2019-10-20 21:45:30",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/samhocevar/zzuf",
+ "star": 287,
+ "commits": 695,
+ "modify_time": "2019-02-08 14:14:40",
+ "last_release": "v0.15",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/paranoidninja/pandoras-box",
+ "star": 287,
+ "commits": 48,
+ "modify_time": "2018-11-14 04:49:00",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/mozillasecurity/fuzzdata",
+ "star": 287,
+ "commits": 134,
+ "modify_time": "2019-11-18 21:38:57",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/matterpreter/offensivecsharp",
+ "star": 287,
+ "commits": 58,
+ "modify_time": "2019-12-02 15:17:55",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/manwhoami/mmetokendecrypt",
+ "star": 287,
+ "commits": null,
+ "modify_time": "2018-07-11 20:34:04",
+ "last_release": "",
+ "lang": "python"
+ },
+ {
+ "link": "https://github.com/lufeirider/cve-2019-2725",
+ "star": 287,
+ "commits": 26,
+ "modify_time": "2019-08-08 09:48:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/godaddy/procfilter",
+ "star": 287,
+ "commits": 125,
+ "modify_time": "2017-11-27 16:45:46",
+ "last_release": "v1.0.0-beta.5",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/gamozolabs/applepie",
+ "star": 287,
+ "commits": 11928,
+ "modify_time": "2019-01-15 22:24:23",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/dgoulet/torsocks",
+ "star": 287,
+ "commits": 548,
+ "modify_time": "2018-12-18 01:25:18",
+ "last_release": "\n v2.3.0\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/0ki/mikrotik-tools",
+ "star": 287,
+ "commits": 25,
+ "modify_time": "2019-06-18 21:46:43",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/str8outtaheap/heapwn",
+ "star": 286,
+ "commits": 476,
+ "modify_time": "2018-12-01 10:28:28",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/zmap/zgrab2",
+ "star": 286,
+ "commits": 502,
+ "modify_time": "2019-11-20 15:14:18",
+ "last_release": "\n v0.1.1\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/xdavidhu/portspider",
+ "star": 286,
+ "commits": 86,
+ "modify_time": "2019-11-03 11:32:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/webgoat/webgoat-legacy",
+ "star": 286,
+ "commits": 878,
+ "modify_time": "2018-08-03 20:17:53",
+ "last_release": "v6.0.1",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/theherogac/autoplugin",
+ "star": 286,
+ "commits": 1303,
+ "modify_time": "2019-12-07 20:20:13",
+ "last_release": "4.11",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/mattiwatti/pplkiller",
+ "star": 286,
+ "commits": 37,
+ "modify_time": "2019-05-27 12:15:42",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ivmachiavelli/osint_team_links",
+ "star": 286,
+ "commits": 317,
+ "modify_time": "2017-12-11 13:58:09",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/feliam/pysymemu",
+ "star": 286,
+ "commits": 85,
+ "modify_time": "2019-09-10 23:58:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cesar-rodriguez/terrascan",
+ "star": 286,
+ "commits": 205,
+ "modify_time": "2019-05-03 01:57:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/aaronportnoy/toolbag",
+ "star": 286,
+ "commits": 58,
+ "modify_time": "2015-01-30 16:58:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ThingPulse/esp8266-weather-station-color",
+ "star": 285,
+ "commits": 74,
+ "modify_time": "2019-05-24 18:55:57",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/wallarm/awesome-nginx-security",
+ "star": 285,
+ "commits": 29,
+ "modify_time": "2019-02-22 17:42:41",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/petit-miner/blueberry-pi",
+ "star": 285,
+ "commits": 35,
+ "modify_time": "2019-11-19 19:07:55",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/ntruopensourceproject/ntru-crypto",
+ "star": 285,
+ "commits": 214,
+ "modify_time": "2019-02-14 22:13:54",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/nanshihui/poccollect",
+ "star": 285,
+ "commits": 27,
+ "modify_time": "2017-06-10 09:28:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mike-goodwin/owasp-threat-dragon",
+ "star": 285,
+ "commits": 606,
+ "modify_time": "2019-07-13 18:11:48",
+ "last_release": "0.3.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/longxboy/lunnel",
+ "star": 285,
+ "commits": 140,
+ "modify_time": "2017-05-26 02:28:53",
+ "last_release": "v0.1.6",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/kennytm/miscellaneous",
+ "star": 285,
+ "commits": 75,
+ "modify_time": "2015-09-15 08:38:27",
+ "last_release": "\n dyld_decache-v0.1c\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/fox-it/aclpwn.py",
+ "star": 285,
+ "commits": 4,
+ "modify_time": "2018-12-09 19:34:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/evilsocket/bettercap-proxy-modules",
+ "star": 285,
+ "commits": 156,
+ "modify_time": "2018-02-27 21:00:01",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/eik00d/cantoolz",
+ "star": 285,
+ "commits": 336,
+ "modify_time": "2017-10-31 08:59:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/devio/walruss",
+ "star": 285,
+ "commits": 21,
+ "modify_time": "2017-09-20 06:19:35",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/code-scan/dzscan",
+ "star": 285,
+ "commits": 55,
+ "modify_time": "2018-09-20 13:00:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cnfree/eclipse-class-decompiler",
+ "star": 285,
+ "commits": 209,
+ "modify_time": "2017-08-14 19:00:51",
+ "last_release": "v2.10.0",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/apache/incubator-spot",
+ "star": 285,
+ "commits": 725,
+ "modify_time": "2019-09-11 13:38:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/agoric/ses",
+ "star": 284,
+ "commits": 390,
+ "modify_time": "2019-11-06 21:26:44",
+ "last_release": "0.5.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/yzddmr6/webcrack",
+ "star": 284,
+ "commits": 14,
+ "modify_time": "2019-10-13 14:07:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/unix-thrust/beurk",
+ "star": 284,
+ "commits": 270,
+ "modify_time": "2017-04-28 12:16:06",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/target/strelka",
+ "star": 284,
+ "commits": 179,
+ "modify_time": "2019-12-02 15:23:02",
+ "last_release": "0.19.08.27",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mrash/afl-cov",
+ "star": 284,
+ "commits": 226,
+ "modify_time": "2018-12-29 01:00:13",
+ "last_release": "\n 0.6.2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lorexxar/cobra-w",
+ "star": 284,
+ "commits": 254,
+ "modify_time": "2019-11-08 08:34:22",
+ "last_release": "v1.9.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/krausefx/watch.user",
+ "star": 284,
+ "commits": 38,
+ "modify_time": "2017-10-22 22:08:02",
+ "last_release": "",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/justicerage/ffm",
+ "star": 284,
+ "commits": 57,
+ "modify_time": "2018-12-29 20:26:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jobertabma/recon.sh",
+ "star": 284,
+ "commits": 35,
+ "modify_time": "2018-01-03 22:44:43",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/ha71/namechk",
+ "star": 284,
+ "commits": 10,
+ "modify_time": "2018-08-26 07:47:21",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/firnsy/barnyard2",
+ "star": 284,
+ "commits": 166,
+ "modify_time": "2016-04-13 01:05:11",
+ "last_release": "\n v2-1.13\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cruise-automation/fwanalyzer",
+ "star": 284,
+ "commits": 33,
+ "modify_time": "2019-12-06 19:42:37",
+ "last_release": "\n 1.2.0\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/anshumanbh/tko-subs",
+ "star": 284,
+ "commits": 103,
+ "modify_time": "2019-06-24 05:33:36",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/airbus-seclab/cpu_rec",
+ "star": 284,
+ "commits": 31,
+ "modify_time": "2019-06-13 13:06:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/yuanyuanxiang/simpleremoter",
+ "star": 283,
+ "commits": 42,
+ "modify_time": "2019-09-07 02:47:50",
+ "last_release": "v1.0.0.5",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/tomb5/tomb5",
+ "star": 283,
+ "commits": 2629,
+ "modify_time": "2019-12-02 22:10:10",
+ "last_release": "c2482",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/tanprathan/owasp-testing-checklist",
+ "star": 283,
+ "commits": 9,
+ "modify_time": "2019-08-10 10:13:23",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/suyashkumar/ssl-proxy",
+ "star": 283,
+ "commits": 19,
+ "modify_time": "2019-07-22 04:18:34",
+ "last_release": "v0.2.4",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/superandroidanalyzer/super",
+ "star": 283,
+ "commits": 541,
+ "modify_time": "2018-12-09 22:03:38",
+ "last_release": "0.5.1",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/simbiose/encryption",
+ "star": 283,
+ "commits": 63,
+ "modify_time": "2017-07-03 21:51:51",
+ "last_release": "2.0.1",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/shenril/sitadel",
+ "star": 283,
+ "commits": 119,
+ "modify_time": "2019-08-28 09:01:46",
+ "last_release": "\n 1.0.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/punch-cyber/stoq",
+ "star": 283,
+ "commits": 726,
+ "modify_time": "2019-12-04 19:41:26",
+ "last_release": "v3.0.0b2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mazen160/struts-pwn_cve-2018-11776",
+ "star": 283,
+ "commits": 2,
+ "modify_time": "2018-08-26 02:31:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/matt-wu/aes",
+ "star": 283,
+ "commits": 6,
+ "modify_time": "2017-02-15 03:22:44",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/katjahahn/portex",
+ "star": 283,
+ "commits": 723,
+ "modify_time": "2019-05-23 08:32:07",
+ "last_release": "2.0.9",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/jiaoxianjun/btle",
+ "star": 283,
+ "commits": 212,
+ "modify_time": "2019-03-09 14:24:57",
+ "last_release": "v0.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/google/syzygy",
+ "star": 283,
+ "commits": 3143,
+ "modify_time": "2017-12-05 22:35:49",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/elkokc/reflector",
+ "star": 283,
+ "commits": 33,
+ "modify_time": "2018-09-24 08:41:34",
+ "last_release": "2.1",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/buddhalabs/packetstorm-exploits",
+ "star": 283,
+ "commits": 99,
+ "modify_time": "2017-04-01 19:06:43",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/geohot/lolrecaptcha",
+ "star": 282,
+ "commits": 16,
+ "modify_time": "2016-12-29 19:21:22",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/0xIslamTaha/Python-Rootkit",
+ "star": 282,
+ "commits": 33,
+ "modify_time": "2017-11-05 16:56:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nsacyber/Windows-Event-Log-Messages",
+ "star": 282,
+ "commits": 46,
+ "modify_time": "2019-03-07 23:07:31",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/googleprojectzero/p0tools",
+ "star": 282,
+ "commits": 6,
+ "modify_time": "2018-10-04 17:52:57",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/Qiskit/qiskit-aqua",
+ "star": 282,
+ "commits": 5383,
+ "modify_time": "2019-12-08 14:58:14",
+ "last_release": "0.6.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/thekingofduck/easyxsspayload",
+ "star": 282,
+ "commits": 16,
+ "modify_time": "2019-09-05 11:36:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ssooking/ctfdefense",
+ "star": 282,
+ "commits": 9,
+ "modify_time": "2018-04-21 04:24:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/shirkdog/pulledpork",
+ "star": 282,
+ "commits": 361,
+ "modify_time": "2019-07-28 13:42:33",
+ "last_release": "v0.7.3",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/phage-nz/ph0neutria",
+ "star": 282,
+ "commits": 98,
+ "modify_time": "2019-04-20 08:13:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nullbind/powershellery",
+ "star": 282,
+ "commits": 932,
+ "modify_time": "2019-12-06 16:58:28",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/leaflabs/libmaple",
+ "star": 282,
+ "commits": 1226,
+ "modify_time": "2016-07-28 19:06:08",
+ "last_release": "\n v0.0.12\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/joxeankoret/pyew",
+ "star": 282,
+ "commits": 109,
+ "modify_time": "2019-09-06 10:00:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/exalab/anlinux-app",
+ "star": 282,
+ "commits": 89,
+ "modify_time": "2019-09-29 02:45:26",
+ "last_release": "v6.05",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/drduh/debian-privacy-server-guide",
+ "star": 282,
+ "commits": 42,
+ "modify_time": "2019-11-20 02:16:11",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/danmcinerney/pentest-machine",
+ "star": 282,
+ "commits": 98,
+ "modify_time": "2018-09-07 20:01:18",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/chrisallenlane/novahot",
+ "star": 282,
+ "commits": 23,
+ "modify_time": "2018-08-15 13:01:05",
+ "last_release": "\n v1.1.0\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/bit4woo/passmaker",
+ "star": 282,
+ "commits": 26,
+ "modify_time": "2018-01-17 02:58:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ayeks/sgx-hardware",
+ "star": 282,
+ "commits": 98,
+ "modify_time": "2019-10-19 08:39:11",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/googleprojectzero/symboliclink-testing-tools",
+ "star": 281,
+ "commits": 8,
+ "modify_time": "2017-02-27 13:32:33",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/w-digital-scanner/w11scan",
+ "star": 281,
+ "commits": 28,
+ "modify_time": "2018-08-23 13:11:26",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/ptoomey3/evilarc",
+ "star": 281,
+ "commits": 4,
+ "modify_time": "2011-02-27 23:07:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/novicelive/bintut",
+ "star": 281,
+ "commits": 59,
+ "modify_time": "2018-09-26 06:31:23",
+ "last_release": "\n 0.3.3\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nico3333fr/csp-useful",
+ "star": 281,
+ "commits": 571,
+ "modify_time": "2019-09-09 15:50:04",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/monnappa22/limon",
+ "star": 281,
+ "commits": 2,
+ "modify_time": "2016-03-25 11:53:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/micropyramid/forex-python",
+ "star": 281,
+ "commits": 92,
+ "modify_time": "2019-04-05 15:47:01",
+ "last_release": "1.5",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mandatoryprogrammer/xssless",
+ "star": 281,
+ "commits": 45,
+ "modify_time": "2016-06-02 16:47:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/maaaaz/impacket-examples-windows",
+ "star": 281,
+ "commits": 16,
+ "modify_time": "2019-01-31 22:34:52",
+ "last_release": "v0.9.17",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/cwerling/psptool",
+ "star": 281,
+ "commits": 75,
+ "modify_time": "2019-11-07 21:19:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/chenjiandongx/async-proxy-pool",
+ "star": 281,
+ "commits": 63,
+ "modify_time": "2019-03-14 01:05:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/chaifeng/ufw-docker",
+ "star": 281,
+ "commits": 70,
+ "modify_time": "2019-06-03 05:16:47",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/aflsmart/aflsmart",
+ "star": 281,
+ "commits": 240,
+ "modify_time": "2019-11-08 05:32:29",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/unixpickle/kahoot-hack",
+ "star": 280,
+ "commits": 113,
+ "modify_time": "2018-05-14 01:42:21",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/0xInfection/XSRFProbe",
+ "star": 280,
+ "commits": 486,
+ "modify_time": "2019-11-03 12:17:22",
+ "last_release": "v2.1.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/trimstray/mkchain",
+ "star": 280,
+ "commits": 509,
+ "modify_time": "2019-11-15 08:10:30",
+ "last_release": "\n v1.5.1\n ",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/xoreaxeaxeax/reductio",
+ "star": 280,
+ "commits": 2,
+ "modify_time": "2017-08-11 02:58:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tomato42/tlsfuzzer",
+ "star": 280,
+ "commits": 945,
+ "modify_time": "2019-12-03 15:00:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sam-b/windows_kernel_address_leaks",
+ "star": 280,
+ "commits": 69,
+ "modify_time": "2017-07-07 10:05:33",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/hacktoolspack/hack-tools",
+ "star": 280,
+ "commits": 185,
+ "modify_time": "2019-09-26 14:18:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fuzzing/mffa",
+ "star": 280,
+ "commits": 38,
+ "modify_time": "2016-04-01 16:24:59",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fireeye/flare-emu",
+ "star": 280,
+ "commits": 69,
+ "modify_time": "2019-11-14 20:42:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/facebook/fbkutils",
+ "star": 280,
+ "commits": 187,
+ "modify_time": "2019-11-15 17:04:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ekultek/whatbreach",
+ "star": 280,
+ "commits": 42,
+ "modify_time": "2019-11-30 05:23:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/changeofpace/viviennevmm",
+ "star": 280,
+ "commits": 166,
+ "modify_time": "2019-11-02 06:37:22",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/andreafabrizi/prism",
+ "star": 280,
+ "commits": 7,
+ "modify_time": "2016-09-28 16:05:45",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/aleenzz/mssql_sql_bypass_wiki",
+ "star": 280,
+ "commits": 6,
+ "modify_time": "2019-05-12 05:40:00",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/0xinfection/xsrfprobe",
+ "star": 280,
+ "commits": 486,
+ "modify_time": "2019-11-03 12:17:22",
+ "last_release": "v2.1.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/0xdea/exploits",
+ "star": 280,
+ "commits": 45,
+ "modify_time": "2019-10-16 07:40:35",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/bennington-distributed-systems-2017/darkdarkgo",
+ "star": 279,
+ "commits": 380,
+ "modify_time": "2019-10-03 03:35:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rassec/pentester-fully-automatic-scanner",
+ "star": 279,
+ "commits": 8,
+ "modify_time": "2018-07-11 06:30:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/RASSec/pentestER-Fully-automatic-scanner",
+ "star": 279,
+ "commits": 8,
+ "modify_time": "2018-07-11 06:30:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wuseman/emagnet",
+ "star": 279,
+ "commits": 822,
+ "modify_time": "2019-12-09 03:00:27",
+ "last_release": "3.4.1",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/rovo89/android_art",
+ "star": 279,
+ "commits": 41234,
+ "modify_time": "2017-12-10 13:23:47",
+ "last_release": "\n v89-sdk25\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ridter/exchange2domain",
+ "star": 279,
+ "commits": 15,
+ "modify_time": "2019-06-21 11:29:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pmsosa/duckhunt",
+ "star": 279,
+ "commits": 19,
+ "modify_time": "2017-05-21 21:07:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pbiernat/ripr",
+ "star": 279,
+ "commits": 61,
+ "modify_time": "2019-10-03 22:52:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nightbringer21/fridump",
+ "star": 279,
+ "commits": 23,
+ "modify_time": "2019-04-25 09:21:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mthbernardes/rsg",
+ "star": 279,
+ "commits": 13,
+ "modify_time": "2019-06-24 23:17:59",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/micahflee/fixubuntu",
+ "star": 279,
+ "commits": 195,
+ "modify_time": "2015-05-13 10:15:06",
+ "last_release": "",
+ "lang": "ApacheConf"
+ },
+ {
+ "link": "https://github.com/maldevel/ipgeolocation",
+ "star": 279,
+ "commits": 70,
+ "modify_time": "2016-12-24 07:38:41",
+ "last_release": "2.0.4",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fix-macosx/fix-macosx",
+ "star": 279,
+ "commits": 166,
+ "modify_time": "2014-12-30 04:27:53",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/firefart/dirtycow",
+ "star": 279,
+ "commits": 9,
+ "modify_time": "2017-04-24 14:07:06",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/fireeye/silketw",
+ "star": 279,
+ "commits": 9,
+ "modify_time": "2019-10-15 14:52:06",
+ "last_release": "v0.8",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/fireeye/flare-wmi",
+ "star": 279,
+ "commits": 311,
+ "modify_time": "2018-07-23 16:10:34",
+ "last_release": "\n 1.0\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/droberson/ssh-honeypot",
+ "star": 279,
+ "commits": 71,
+ "modify_time": "2019-11-18 15:30:44",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/appium/sign",
+ "star": 279,
+ "commits": 11,
+ "modify_time": "2019-10-08 06:30:08",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/abeluck/stegdetect",
+ "star": 279,
+ "commits": 20,
+ "modify_time": "2018-10-31 08:44:00",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/a2u/free-proxy-list",
+ "star": 279,
+ "commits": 15186,
+ "modify_time": "2019-12-10 08:43:06",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/MicrosoftDocs/windows-driver-docs",
+ "star": 278,
+ "commits": 10776,
+ "modify_time": "2019-12-10 00:59:41",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/FSecureLABS/wePWNise",
+ "star": 278,
+ "commits": 10,
+ "modify_time": "2018-08-27 22:00:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wuchangming/https-mitm-proxy-handbook",
+ "star": 278,
+ "commits": 52,
+ "modify_time": "2017-01-29 12:02:42",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/optimatika/ojalgo",
+ "star": 278,
+ "commits": 1420,
+ "modify_time": "2019-11-30 22:18:53",
+ "last_release": "v48",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/mcw0/poc",
+ "star": 278,
+ "commits": 82,
+ "modify_time": "2019-10-05 23:24:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/iniqua/plecost",
+ "star": 278,
+ "commits": 98,
+ "modify_time": "2017-11-12 14:21:48",
+ "last_release": "\n v1.1.2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hnfull/intensio-obfuscator",
+ "star": 278,
+ "commits": 215,
+ "modify_time": "2019-11-23 17:40:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/franccesco/getaltname",
+ "star": 278,
+ "commits": 231,
+ "modify_time": "2019-11-26 16:45:12",
+ "last_release": "v3.0.14",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dpnishant/raptor",
+ "star": 278,
+ "commits": 168,
+ "modify_time": "2017-10-08 19:17:49",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/crosire/d3d8to9",
+ "star": 278,
+ "commits": 187,
+ "modify_time": "2019-11-29 22:25:04",
+ "last_release": "v1.9.2",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/bl4de/ctf",
+ "star": 278,
+ "commits": 239,
+ "modify_time": "2019-12-02 01:15:48",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/ztosec/secscan-authcheck",
+ "star": 277,
+ "commits": 5,
+ "modify_time": "2019-09-04 12:24:58",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/wyatu/cve-2018-8581",
+ "star": 277,
+ "commits": 1,
+ "modify_time": "2018-12-30 11:52:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tinysec/windows-syscall-table",
+ "star": 277,
+ "commits": 15,
+ "modify_time": "2018-06-08 06:40:15",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/sneakerhax/runbooks",
+ "star": 277,
+ "commits": 637,
+ "modify_time": "2019-11-11 03:02:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rieck/malheur",
+ "star": 277,
+ "commits": 519,
+ "modify_time": "2019-05-08 19:49:19",
+ "last_release": "0.5.4",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/rezasp/vbscan",
+ "star": 277,
+ "commits": 39,
+ "modify_time": "2019-06-16 17:01:58",
+ "last_release": "0.1.8",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/o-gs/dji-firmware-tools",
+ "star": 277,
+ "commits": 777,
+ "modify_time": "2019-11-27 13:25:50",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/lfittl/libpg_query",
+ "star": 277,
+ "commits": 130,
+ "modify_time": "2019-10-22 15:52:15",
+ "last_release": "9.5-1.4.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jmmartinez/easy-just-in-time",
+ "star": 277,
+ "commits": 187,
+ "modify_time": "2018-12-28 13:18:25",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/hugsy/defcon_27_windbg_workshop",
+ "star": 277,
+ "commits": 39,
+ "modify_time": "2019-11-26 19:06:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/disclose/disclose",
+ "star": 277,
+ "commits": 155,
+ "modify_time": "2019-11-28 01:49:57",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/c0ny1/fastjsonexploit",
+ "star": 277,
+ "commits": 5,
+ "modify_time": "2019-11-22 12:09:35",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/jedisct1/pure-ftpd",
+ "star": 276,
+ "commits": 1023,
+ "modify_time": "2019-11-30 19:46:30",
+ "last_release": "1.0.49",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/GrapheneOS/hardened_malloc",
+ "star": 276,
+ "commits": 445,
+ "modify_time": "2019-11-06 11:04:16",
+ "last_release": "\n QQ1A.191205.011.2019.12.02.23\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/tsiv/ccminer-cryptonight",
+ "star": 276,
+ "commits": 21,
+ "modify_time": "2014-09-23 20:14:03",
+ "last_release": "v0.17",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/taviso/rbndr",
+ "star": 276,
+ "commits": 9,
+ "modify_time": "2017-12-10 16:20:02",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/rmikehodges/hidensneak",
+ "star": 276,
+ "commits": 405,
+ "modify_time": "2019-11-07 04:23:18",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/nationalsecurityagency/datawave",
+ "star": 276,
+ "commits": 1480,
+ "modify_time": "2019-12-09 16:00:26",
+ "last_release": "\n 3.0.2\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/liuchangfreeman/c--compiler",
+ "star": 276,
+ "commits": 51,
+ "modify_time": "2019-11-30 15:54:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jpcertcc/aa-tools",
+ "star": 276,
+ "commits": 39,
+ "modify_time": "2019-09-03 01:56:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ironbee/ironbee",
+ "star": 276,
+ "commits": 7991,
+ "modify_time": "2016-01-06 19:35:44",
+ "last_release": "\n v0.13.0\n ",
+ "lang": "XSLT"
+ },
+ {
+ "link": "https://github.com/hongrisec/ctf-training",
+ "star": 276,
+ "commits": 51,
+ "modify_time": "2018-12-20 13:34:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ewilded/shelling",
+ "star": 276,
+ "commits": 219,
+ "modify_time": "2018-10-28 17:38:30",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/dirtyfilthy/freshonions-torscraper",
+ "star": 276,
+ "commits": 232,
+ "modify_time": "2017-07-05 16:26:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dahall/vanara",
+ "star": 276,
+ "commits": 1297,
+ "modify_time": "2019-11-29 19:44:29",
+ "last_release": "v3.1.5",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/cryptolok/aslray",
+ "star": 276,
+ "commits": 51,
+ "modify_time": "2019-09-05 17:09:12",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/anssi-fr/polichombr",
+ "star": 276,
+ "commits": 367,
+ "modify_time": "2018-03-30 16:36:24",
+ "last_release": "v1.5",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/18f/domain-scan",
+ "star": 276,
+ "commits": 1279,
+ "modify_time": "2019-08-08 16:14:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/javascript-obfuscator/webpack-obfuscator",
+ "star": 275,
+ "commits": 162,
+ "modify_time": "2019-12-01 19:31:09",
+ "last_release": "0.18.7",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/Zerx0r/Kage",
+ "star": 275,
+ "commits": 27,
+ "modify_time": "2019-09-10 19:39:30",
+ "last_release": "",
+ "lang": "Vue"
+ },
+ {
+ "link": "https://github.com/venshine/decompile-apk",
+ "star": 275,
+ "commits": 8,
+ "modify_time": "2019-05-07 11:22:21",
+ "last_release": "v2.0",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/sensepost/hostapd-mana",
+ "star": 275,
+ "commits": 128,
+ "modify_time": "2019-09-20 14:24:12",
+ "last_release": "2.6.5",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/openzipkin/zipkin-go",
+ "star": 275,
+ "commits": 261,
+ "modify_time": "2019-12-04 21:36:08",
+ "last_release": "v0.2.2",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/geerlingguy/ansible-role-security",
+ "star": 275,
+ "commits": 79,
+ "modify_time": "2019-07-18 21:49:04",
+ "last_release": "\n 1.8.1\n ",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/fourbrother/icodetools",
+ "star": 275,
+ "commits": 10,
+ "modify_time": "2016-12-12 08:04:51",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/florent37/android-nosql",
+ "star": 275,
+ "commits": 21,
+ "modify_time": "2018-10-01 09:08:59",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/commonsguy/cwac-security",
+ "star": 275,
+ "commits": 75,
+ "modify_time": "2018-01-04 22:23:59",
+ "last_release": "v0.8.0",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/k8gege/cve-2019-0708",
+ "star": 274,
+ "commits": 19,
+ "modify_time": "2019-06-13 13:07:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/br101/horst",
+ "star": 274,
+ "commits": 999,
+ "modify_time": "2019-12-04 13:42:50",
+ "last_release": "v5.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ptr32void/ostrica",
+ "star": 274,
+ "commits": 20,
+ "modify_time": "2017-05-28 15:59:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/psecio/parse",
+ "star": 274,
+ "commits": 359,
+ "modify_time": "2018-08-01 18:12:46",
+ "last_release": "\n 0.8\n ",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/owasp/o-saft",
+ "star": 274,
+ "commits": 3797,
+ "modify_time": "2019-12-09 10:11:12",
+ "last_release": "19.01.19",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/muraenateam/muraena",
+ "star": 274,
+ "commits": 36,
+ "modify_time": "2019-11-20 11:30:31",
+ "last_release": "v0.1.3",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/mateuszk87/badintent",
+ "star": 274,
+ "commits": 20,
+ "modify_time": "2017-08-20 20:31:24",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/kubernetes-sigs/application",
+ "star": 274,
+ "commits": 133,
+ "modify_time": "2019-11-12 21:58:11",
+ "last_release": "v0.8.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/jmk-foofus/medusa",
+ "star": 274,
+ "commits": 32,
+ "modify_time": "2018-12-16 21:58:59",
+ "last_release": "2.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/iaik/cjag",
+ "star": 274,
+ "commits": 8,
+ "modify_time": "2017-04-23 16:11:47",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/dekimir/ramfuzz",
+ "star": 274,
+ "commits": 378,
+ "modify_time": "2018-10-29 23:58:51",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/beckus/qemu_stm32",
+ "star": 274,
+ "commits": 34780,
+ "modify_time": "2019-11-20 20:42:12",
+ "last_release": "stm32_v0.1.3",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/aekras1a/updated-carbanak-source-with-plugins",
+ "star": 274,
+ "commits": 6,
+ "modify_time": "2019-05-01 23:31:34",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/abhi-r3v0/adhrit",
+ "star": 274,
+ "commits": 272,
+ "modify_time": "2019-12-09 07:08:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rofl0r/microsocks",
+ "star": 273,
+ "commits": 38,
+ "modify_time": "2019-04-08 21:56:49",
+ "last_release": "v1.0.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/mariovilas/winappdbg",
+ "star": 273,
+ "commits": 1096,
+ "modify_time": "2019-08-28 08:12:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kisesy/gscan_quic",
+ "star": 273,
+ "commits": 58,
+ "modify_time": "2018-02-27 09:48:52",
+ "last_release": "v4.6",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/isometric/bucketcompressiontrick",
+ "star": 273,
+ "commits": 25,
+ "modify_time": "2018-02-03 03:50:59",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/windytan/redsea",
+ "star": 272,
+ "commits": 987,
+ "modify_time": "2019-10-06 11:42:00",
+ "last_release": "v0.18",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/steve-m/kalibrate-rtl",
+ "star": 272,
+ "commits": 65,
+ "modify_time": "2019-11-25 18:54:14",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/robertdavidgraham/pemcrack",
+ "star": 272,
+ "commits": 11,
+ "modify_time": "2015-12-23 04:17:49",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/pysmt/pysmt",
+ "star": 272,
+ "commits": 1350,
+ "modify_time": "2019-09-03 15:56:22",
+ "last_release": "v0.8.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nettitude/PoshC2",
+ "star": 272,
+ "commits": 529,
+ "modify_time": "2019-12-09 09:24:25",
+ "last_release": "v5.0",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/nettitude/poshc2",
+ "star": 272,
+ "commits": 529,
+ "modify_time": "2019-12-09 09:24:25",
+ "last_release": "v5.0",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/mozillasecurity/peach",
+ "star": 272,
+ "commits": 22,
+ "modify_time": "2019-04-01 23:09:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/joxeankoret/multiav",
+ "star": 272,
+ "commits": 71,
+ "modify_time": "2017-04-26 16:15:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jgamblin/carhackingtools",
+ "star": 272,
+ "commits": 35,
+ "modify_time": "2018-08-10 19:06:22",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/invernizzi/scapy-http",
+ "star": 272,
+ "commits": 71,
+ "modify_time": "2019-08-14 16:11:19",
+ "last_release": "\n 1.7\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ghostop14/sparrow-wifi",
+ "star": 272,
+ "commits": 129,
+ "modify_time": "2019-12-03 23:40:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gellin/teamviewer_permissions_hook_v1",
+ "star": 272,
+ "commits": 5,
+ "modify_time": "2017-12-07 14:54:40",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/gbafana25/esp8266_honeypot",
+ "star": 272,
+ "commits": 69,
+ "modify_time": "2018-11-04 00:17:14",
+ "last_release": "v1.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/crowhawk/magictoe",
+ "star": 272,
+ "commits": 15,
+ "modify_time": "2017-10-26 07:54:23",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/bishopfox/bfdecrypt",
+ "star": 271,
+ "commits": 7,
+ "modify_time": "2018-02-07 19:36:42",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/s0md3v/Breacher",
+ "star": 271,
+ "commits": 21,
+ "modify_time": "2019-05-05 15:49:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/shaypal5/cachier",
+ "star": 271,
+ "commits": 186,
+ "modify_time": "2019-12-09 15:21:56",
+ "last_release": "v1.2.8",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/s0md3v/mypapers",
+ "star": 271,
+ "commits": 14,
+ "modify_time": "2019-05-05 15:50:07",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/reoky/android-crackme-challenge",
+ "star": 271,
+ "commits": 29,
+ "modify_time": "2018-01-30 01:28:17",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/quandyfactory/dicttoxml",
+ "star": 271,
+ "commits": 113,
+ "modify_time": "2016-07-08 00:52:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/prateek147/dvia-v2",
+ "star": 271,
+ "commits": 82,
+ "modify_time": "2019-11-19 07:30:57",
+ "last_release": "",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/pisupply/papirus",
+ "star": 271,
+ "commits": 336,
+ "modify_time": "2019-02-06 03:10:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/offensive-security/nethunter-lrt",
+ "star": 271,
+ "commits": 50,
+ "modify_time": "2019-04-25 09:07:35",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/naxuroqa/venom",
+ "star": 271,
+ "commits": 1193,
+ "modify_time": "2019-02-18 10:42:02",
+ "last_release": "0.5.4",
+ "lang": "Vala"
+ },
+ {
+ "link": "https://github.com/mkaring/confuserex",
+ "star": 271,
+ "commits": 887,
+ "modify_time": "2019-11-24 17:09:13",
+ "last_release": "v1.3.1",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/lgandx/responder-windows",
+ "star": 271,
+ "commits": 16,
+ "modify_time": "2016-11-12 15:30:07",
+ "last_release": "\n v1.2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jinyu121/surgerule",
+ "star": 271,
+ "commits": 2,
+ "modify_time": "2017-03-28 06:53:23",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/inaz2/roputils",
+ "star": 271,
+ "commits": 195,
+ "modify_time": "2016-10-29 11:03:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hynekpetrak/javascript-malware-collection",
+ "star": 271,
+ "commits": 6,
+ "modify_time": "2019-10-13 13:19:37",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/hadi999/nxcrypt",
+ "star": 271,
+ "commits": 32,
+ "modify_time": "2017-06-26 19:31:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fix-macosx/net-monitor",
+ "star": 271,
+ "commits": 37,
+ "modify_time": "2014-11-24 20:33:30",
+ "last_release": "",
+ "lang": "Scala"
+ },
+ {
+ "link": "https://github.com/cisco-talos/mbrfilter",
+ "star": 271,
+ "commits": 18,
+ "modify_time": "2016-10-21 14:26:14",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/can1357/theperfectinjector",
+ "star": 271,
+ "commits": 15,
+ "modify_time": "2018-05-06 13:18:02",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/bugbountyforum/xss-radar",
+ "star": 271,
+ "commits": 116,
+ "modify_time": "2018-01-08 21:17:43",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/mattnotmax/cyberchef-recipes",
+ "star": 270,
+ "commits": 71,
+ "modify_time": "2019-09-05 11:30:50",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/vernesong/openclash",
+ "star": 270,
+ "commits": 248,
+ "modify_time": "2019-12-09 15:18:20",
+ "last_release": "v0.35.6-beta",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/Cisco-Talos/moflow",
+ "star": 270,
+ "commits": 16,
+ "modify_time": "2015-11-10 05:43:54",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/zephrfish/dockerattack",
+ "star": 270,
+ "commits": 41,
+ "modify_time": "2018-06-25 11:01:32",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/veorq/siphash",
+ "star": 270,
+ "commits": 48,
+ "modify_time": "2019-09-27 07:14:27",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/thelinuxchoice/instainsane",
+ "star": 270,
+ "commits": 18,
+ "modify_time": "2018-12-23 09:57:54",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/ropnop/serverless_toolkit",
+ "star": 270,
+ "commits": 67,
+ "modify_time": "2018-11-22 17:49:39",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/robertdavidgraham/isowall",
+ "star": 270,
+ "commits": 17,
+ "modify_time": "2013-11-11 19:52:54",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/protofire/solhint",
+ "star": 270,
+ "commits": 625,
+ "modify_time": "2019-12-05 20:36:42",
+ "last_release": "\n v2.1.0\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/pan-unit42/iocs",
+ "star": 270,
+ "commits": 652,
+ "modify_time": "2019-11-26 00:04:21",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/nccgroup/pmapper",
+ "star": 270,
+ "commits": 68,
+ "modify_time": "2019-11-02 03:37:52",
+ "last_release": "v1.0.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nationalsecurityagency/lemongrenade",
+ "star": 270,
+ "commits": 14,
+ "modify_time": "2019-06-05 15:57:05",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/leonardonve/sslstrip2",
+ "star": 270,
+ "commits": 13,
+ "modify_time": "2015-03-31 23:17:40",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/laginimaineb/extractkeymaster",
+ "star": 270,
+ "commits": 3,
+ "modify_time": "2016-06-30 15:32:26",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/conradev/dumpdecrypted",
+ "star": 270,
+ "commits": 11,
+ "modify_time": "2014-12-17 02:24:52",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/appsecco/the-art-of-subdomain-enumeration",
+ "star": 270,
+ "commits": 26,
+ "modify_time": "2019-01-30 04:21:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/thelinuxchoice/instashell",
+ "star": 269,
+ "commits": 56,
+ "modify_time": "2019-02-21 21:05:34",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/pengchujin/v2raydocker",
+ "star": 269,
+ "commits": 7,
+ "modify_time": "2019-11-24 08:51:43",
+ "last_release": "",
+ "lang": "Dockerfile"
+ },
+ {
+ "link": "https://github.com/abhisharma404/vault",
+ "star": 269,
+ "commits": 297,
+ "modify_time": "2019-12-08 13:24:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xfreed0m/rdpassspray",
+ "star": 269,
+ "commits": 17,
+ "modify_time": "2019-12-05 13:33:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/toyakula/luna",
+ "star": 269,
+ "commits": 16,
+ "modify_time": "2018-05-10 12:57:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sam-b/windows_kernel_resources",
+ "star": 269,
+ "commits": 12,
+ "modify_time": "2018-03-01 18:49:57",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ptresearch/me-disablement",
+ "star": 269,
+ "commits": 3,
+ "modify_time": "2016-06-14 17:16:18",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/nccgroup/dirble",
+ "star": 269,
+ "commits": 257,
+ "modify_time": "2019-12-02 14:53:17",
+ "last_release": "v1.4.2",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/mattnotmax/cyberchef-recipes",
+ "star": 269,
+ "commits": 71,
+ "modify_time": "2019-09-05 11:30:50",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/lunarca/simpleemailspoofer",
+ "star": 269,
+ "commits": 53,
+ "modify_time": "2017-12-17 15:02:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lawrenceamer/0xsp-mongoose",
+ "star": 269,
+ "commits": 129,
+ "modify_time": "2019-08-21 11:32:56",
+ "last_release": "1.7",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/eth0izzle/needl",
+ "star": 269,
+ "commits": 24,
+ "modify_time": "2017-11-26 00:20:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cloudfoundry/java-buildpack-memory-calculator",
+ "star": 269,
+ "commits": 125,
+ "modify_time": "2019-05-01 23:44:20",
+ "last_release": "\n v4.0.0\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/abedalqaderswedan1/aswcrypter",
+ "star": 269,
+ "commits": 32,
+ "modify_time": "2018-09-09 10:40:56",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://bitbucket.org/lanmaster53/recon-ng",
+ "star": 269,
+ "commits": null,
+ "modify_time": "2019-01-28 02:10:58.502000",
+ "last_release": "",
+ "lang": "python"
+ },
+ {
+ "link": "https://github.com/yangchuansheng/love-gfw",
+ "star": 268,
+ "commits": 62,
+ "modify_time": "2019-06-22 14:27:27",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/xem/minix86",
+ "star": 268,
+ "commits": 47,
+ "modify_time": "2017-01-26 08:07:52",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/wbenny/mini-tor",
+ "star": 268,
+ "commits": 73,
+ "modify_time": "2019-02-23 20:46:54",
+ "last_release": "v0.1.29",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/tomsteele/blacksheepwall",
+ "star": 268,
+ "commits": 368,
+ "modify_time": "2018-08-14 19:52:42",
+ "last_release": "v3.3.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/peikexin9/deepxplore",
+ "star": 268,
+ "commits": 26,
+ "modify_time": "2019-11-19 16:55:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nodejs/security-wg",
+ "star": 268,
+ "commits": 412,
+ "modify_time": "2019-12-06 09:49:58",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/matthiaskaiser/jmet",
+ "star": 268,
+ "commits": 9,
+ "modify_time": "2016-10-17 08:37:01",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/leechristensen/unmanagedpowershell",
+ "star": 268,
+ "commits": 10,
+ "modify_time": "2016-03-17 05:20:55",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ledger-donjon/lascar",
+ "star": 268,
+ "commits": 66,
+ "modify_time": "2019-12-04 13:43:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/juhakivekas/multidiff",
+ "star": 268,
+ "commits": 44,
+ "modify_time": "2019-06-06 08:54:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jboone/tpms",
+ "star": 268,
+ "commits": 23,
+ "modify_time": "2016-03-08 20:11:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jackofmosttrades/gadgetinspector",
+ "star": 268,
+ "commits": 6,
+ "modify_time": "2019-12-06 06:45:41",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/ionelmc/python-manhole",
+ "star": 268,
+ "commits": 457,
+ "modify_time": "2019-01-18 12:38:42",
+ "last_release": "v1.0.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/insidetrust/statistically-likely-usernames",
+ "star": 268,
+ "commits": 105,
+ "modify_time": "2016-11-18 09:18:23",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ghirensics/ghiro",
+ "star": 268,
+ "commits": 818,
+ "modify_time": "2016-09-15 22:16:23",
+ "last_release": "ghiro-0.2.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/eset/ipyida",
+ "star": 268,
+ "commits": 87,
+ "modify_time": "2019-11-22 14:52:00",
+ "last_release": "\n v1.4\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/den1al/jsshell",
+ "star": 268,
+ "commits": 35,
+ "modify_time": "2019-12-08 11:25:47",
+ "last_release": "2.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/c0rel0ader/east",
+ "star": 268,
+ "commits": 164,
+ "modify_time": "2018-12-07 09:00:19",
+ "last_release": "2.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/w296488320/nullproguard",
+ "star": 267,
+ "commits": 7,
+ "modify_time": "2019-10-10 06:48:09",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/vida-nyu/ache",
+ "star": 267,
+ "commits": 1105,
+ "modify_time": "2019-09-04 02:18:56",
+ "last_release": "0.11.0",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/ucsb-seclab/bootstomp",
+ "star": 267,
+ "commits": 12,
+ "modify_time": "2018-09-28 17:27:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/samsung/adbi",
+ "star": 267,
+ "commits": 2,
+ "modify_time": "2016-02-04 08:59:15",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/quitten/autorize",
+ "star": 267,
+ "commits": 148,
+ "modify_time": "2019-11-07 15:43:29",
+ "last_release": "0.21",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hegusung/avsignseek",
+ "star": 267,
+ "commits": 15,
+ "modify_time": "2018-03-24 07:06:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/google/grr-doc",
+ "star": 267,
+ "commits": 668,
+ "modify_time": "2019-11-05 08:08:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cameronswinoga/yabfc",
+ "star": 267,
+ "commits": 90,
+ "modify_time": "2018-04-13 21:26:36",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/blankwall/macdbg",
+ "star": 267,
+ "commits": 18,
+ "modify_time": "2016-05-04 18:57:13",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/zodiacon/alltools",
+ "star": 266,
+ "commits": 133,
+ "modify_time": "2019-12-07 19:05:58",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/waylau/free-vpn",
+ "star": 266,
+ "commits": 20,
+ "modify_time": "2017-03-18 14:47:51",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/superkojiman/pwnbox",
+ "star": 266,
+ "commits": 60,
+ "modify_time": "2018-03-26 03:02:13",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/subgraph/vega",
+ "star": 266,
+ "commits": 1422,
+ "modify_time": "2016-06-29 21:12:23",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/rsmudge/armitage",
+ "star": 266,
+ "commits": 1248,
+ "modify_time": "2016-07-08 22:05:20",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/paloaltonetworks/minemeld",
+ "star": 266,
+ "commits": 6,
+ "modify_time": "2017-10-03 22:38:04",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/outflanknl/dumpert",
+ "star": 266,
+ "commits": 6,
+ "modify_time": "2019-07-05 20:33:39",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/l1k/osxparanoia",
+ "star": 266,
+ "commits": 4,
+ "modify_time": "2018-07-02 09:04:11",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/kupferlauncher/kupfer",
+ "star": 266,
+ "commits": 4205,
+ "modify_time": "2019-09-06 12:52:30",
+ "last_release": "v319",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hjl-tools/x86-psabi",
+ "star": 266,
+ "commits": 45,
+ "modify_time": "2017-06-20 23:27:45",
+ "last_release": "\n x86-64/1.0\n ",
+ "lang": "TeX"
+ },
+ {
+ "link": "https://github.com/hakril/pythonforwindows",
+ "star": 266,
+ "commits": 490,
+ "modify_time": "2019-01-03 21:43:40",
+ "last_release": "V0.5",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/d3/d3-interpolate",
+ "star": 266,
+ "commits": 197,
+ "modify_time": "2019-11-20 21:58:57",
+ "last_release": "v1.4.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/cryptax/androidre",
+ "star": 266,
+ "commits": 28,
+ "modify_time": "2019-03-04 11:49:54",
+ "last_release": "",
+ "lang": "Dockerfile"
+ },
+ {
+ "link": "https://github.com/cn33liz/starfighters",
+ "star": 266,
+ "commits": 6,
+ "modify_time": "2017-06-05 19:18:16",
+ "last_release": "",
+ "lang": "Visual Basic .NET"
+ },
+ {
+ "link": "https://github.com/beahunt3r/windows-hunting",
+ "star": 266,
+ "commits": 4,
+ "modify_time": "2018-06-04 07:06:02",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/bcoles/kernel-exploits",
+ "star": 266,
+ "commits": 49,
+ "modify_time": "2019-08-11 15:36:58",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/nucypher/nucypher",
+ "star": 265,
+ "commits": 5053,
+ "modify_time": "2019-12-10 08:41:41",
+ "last_release": "\n v1.2.0-beta.2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hawkeyesec/scanner-cli",
+ "star": 265,
+ "commits": 602,
+ "modify_time": "2019-09-26 09:58:25",
+ "last_release": "v1.7.1",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/trycatchhcf/packetwhisper",
+ "star": 265,
+ "commits": 102,
+ "modify_time": "2018-12-19 23:14:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sqlmapproject/testenv",
+ "star": 265,
+ "commits": 137,
+ "modify_time": "2018-06-04 13:39:29",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/pwaller/goupx",
+ "star": 265,
+ "commits": 31,
+ "modify_time": "2016-06-23 08:30:17",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/pret/pokeyellow",
+ "star": 265,
+ "commits": 2698,
+ "modify_time": "2019-10-11 15:39:35",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/portswigger/hackability",
+ "star": 265,
+ "commits": 166,
+ "modify_time": "2018-10-18 14:17:50",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/invoke-ir/ace",
+ "star": 265,
+ "commits": 37,
+ "modify_time": "2018-03-06 19:26:34",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/hackplayers/salsa-tools",
+ "star": 265,
+ "commits": 154,
+ "modify_time": "2019-10-13 12:28:54",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/fwkz/riposte",
+ "star": 265,
+ "commits": 50,
+ "modify_time": "2019-08-18 10:46:22",
+ "last_release": "v0.4.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/exodus-privacy/exodus",
+ "star": 265,
+ "commits": 499,
+ "modify_time": "2019-12-05 12:23:28",
+ "last_release": "\n v1.9.4\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/earthquake/xfltreat",
+ "star": 265,
+ "commits": 270,
+ "modify_time": "2019-12-08 21:35:10",
+ "last_release": "v1.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/breakingmalware/powerloaderex",
+ "star": 265,
+ "commits": 6,
+ "modify_time": "2015-08-12 15:16:00",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/armmbed/mbed-cli",
+ "star": 265,
+ "commits": 1098,
+ "modify_time": "2019-12-04 15:21:41",
+ "last_release": "1.10.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/antojoseph/frida-android-hooks",
+ "star": 265,
+ "commits": 23,
+ "modify_time": "2018-04-23 23:53:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/adguardteam/dnsproxy",
+ "star": 265,
+ "commits": 419,
+ "modify_time": "2019-12-05 13:20:17",
+ "last_release": "v0.23.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/pop-os/iso",
+ "star": 264,
+ "commits": 400,
+ "modify_time": "2019-10-29 15:46:33",
+ "last_release": "",
+ "lang": "Makefile"
+ },
+ {
+ "link": "https://github.com/theevilbit/injection",
+ "star": 264,
+ "commits": 9,
+ "modify_time": "2019-10-21 13:52:36",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/skx/tunneller",
+ "star": 264,
+ "commits": 74,
+ "modify_time": "2019-08-25 07:13:14",
+ "last_release": "release-0.6",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/rpp0/aggr-inject",
+ "star": 264,
+ "commits": 5,
+ "modify_time": "2015-07-05 10:04:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/professor-plum/reflective-driver-loader",
+ "star": 264,
+ "commits": 5,
+ "modify_time": "2017-03-01 14:22:37",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/pakt/ropc",
+ "star": 264,
+ "commits": 16,
+ "modify_time": "2013-06-25 17:34:01",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/mame82/duck2spark",
+ "star": 264,
+ "commits": 21,
+ "modify_time": "2017-03-06 16:40:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lightningnetwork/lightning-onion",
+ "star": 264,
+ "commits": 185,
+ "modify_time": "2019-09-09 10:17:54",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/hubblestack/hubble",
+ "star": 264,
+ "commits": 2309,
+ "modify_time": "2019-11-20 19:27:39",
+ "last_release": "v3.0.8",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/eua/wxhexeditor",
+ "star": 264,
+ "commits": 682,
+ "modify_time": "2019-12-09 00:15:42",
+ "last_release": "\n v0.24\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/codewatchorg/bypasswaf",
+ "star": 264,
+ "commits": 34,
+ "modify_time": "2017-03-26 18:12:17",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/azure/azure-storage-python",
+ "star": 264,
+ "commits": 595,
+ "modify_time": "2019-12-04 00:06:49",
+ "last_release": "v2.1.0-queue",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/antire-book/dont_panic",
+ "star": 264,
+ "commits": 6,
+ "modify_time": "2017-02-09 20:13:41",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/dloss/binary-parsing",
+ "star": 263,
+ "commits": 22,
+ "modify_time": "2018-05-17 16:06:10",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/thelinuxchoice/saycheese",
+ "star": 263,
+ "commits": 9,
+ "modify_time": "2019-04-29 13:30:09",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/adonespitogo/adobot",
+ "star": 263,
+ "commits": 136,
+ "modify_time": "2019-04-08 08:27:05",
+ "last_release": "\n v2.3\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/souffle-lang/souffle",
+ "star": 263,
+ "commits": 5273,
+ "modify_time": "2019-12-04 00:53:30",
+ "last_release": "1.7.1",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/pe3zx/huawei-block-list",
+ "star": 263,
+ "commits": null,
+ "modify_time": "2019-05-06 17:52:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lightos/panoptic",
+ "star": 263,
+ "commits": 185,
+ "modify_time": "2017-09-27 03:43:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/l4wio/ctf-challenges-by-me",
+ "star": 263,
+ "commits": 189,
+ "modify_time": "2019-07-12 17:53:24",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/fransbouma/injectablegenericcamerasystem",
+ "star": 263,
+ "commits": 429,
+ "modify_time": "2019-12-07 19:31:34",
+ "last_release": "SWFO_104",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/firstlookmedia/gpgsync",
+ "star": 263,
+ "commits": 602,
+ "modify_time": "2019-12-03 00:26:00",
+ "last_release": "v0.3.5",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/enddo/smod",
+ "star": 263,
+ "commits": null,
+ "modify_time": "2017-06-26 19:41:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dkovar/analyzemft",
+ "star": 263,
+ "commits": 124,
+ "modify_time": "2018-03-19 00:28:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/d35ha/callobfuscator",
+ "star": 263,
+ "commits": 51,
+ "modify_time": "2019-07-03 11:21:04",
+ "last_release": "v1.2",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/offensive-security/nethunter-app",
+ "star": 262,
+ "commits": 842,
+ "modify_time": "2019-04-25 08:10:52",
+ "last_release": "2019.2-rc5",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/Cisco-Talos/ROPMEMU",
+ "star": 262,
+ "commits": 2,
+ "modify_time": "2016-05-24 22:14:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zmap/zdns",
+ "star": 262,
+ "commits": 187,
+ "modify_time": "2019-10-03 16:25:30",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/wisec/domxsswiki",
+ "star": 262,
+ "commits": 193,
+ "modify_time": "2018-05-12 06:42:50",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/stripe-ctf/stripe-ctf-2.0",
+ "star": 262,
+ "commits": 8,
+ "modify_time": "2012-09-05 01:29:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sp1d3r/swf_json_csrf",
+ "star": 262,
+ "commits": 111,
+ "modify_time": "2019-08-30 06:00:25",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/sensepost/godoh",
+ "star": 262,
+ "commits": 19,
+ "modify_time": "2019-10-23 14:15:03",
+ "last_release": "1.6",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/portcullislabs/linikatz",
+ "star": 262,
+ "commits": 12,
+ "modify_time": "2019-08-14 00:43:31",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/needmorecowbell/sniff-paste",
+ "star": 262,
+ "commits": 139,
+ "modify_time": "2019-04-27 13:52:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mrsqar-ye/badmod",
+ "star": 262,
+ "commits": 37,
+ "modify_time": "2018-06-26 18:16:17",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/maxcamillo/android-keystore-password-recover",
+ "star": 262,
+ "commits": 17,
+ "modify_time": "2018-03-14 08:36:34",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/lieanu/libcsearcher",
+ "star": 262,
+ "commits": 40,
+ "modify_time": "2019-05-27 14:22:41",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/fox-it/invoke-aclpwn",
+ "star": 262,
+ "commits": 8,
+ "modify_time": "2018-08-13 16:52:33",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/evait-security/envizon",
+ "star": 262,
+ "commits": 87,
+ "modify_time": "2018-10-21 16:40:17",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/diogo-fernan/ir-rescue",
+ "star": 262,
+ "commits": 31,
+ "modify_time": "2019-06-06 06:45:05",
+ "last_release": "",
+ "lang": "Batchfile"
+ },
+ {
+ "link": "https://github.com/chadski/sharpneedle",
+ "star": 262,
+ "commits": 31,
+ "modify_time": "2018-07-18 02:18:25",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ant4g0nist/susanoo",
+ "star": 262,
+ "commits": 10,
+ "modify_time": "2019-01-17 18:53:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/airvpn/eddie",
+ "star": 262,
+ "commits": 495,
+ "modify_time": "2019-10-31 09:50:37",
+ "last_release": "v2.16.3",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/sin5678/gh0st",
+ "star": 261,
+ "commits": 4,
+ "modify_time": "2013-05-08 21:11:26",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/zhangchenchen/proxyspider",
+ "star": 261,
+ "commits": 29,
+ "modify_time": "2017-07-06 01:13:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xdavidhu/probesniffer",
+ "star": 261,
+ "commits": 59,
+ "modify_time": "2019-11-03 11:32:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/roccomuso/netcat",
+ "star": 261,
+ "commits": 228,
+ "modify_time": "2018-11-09 15:22:32",
+ "last_release": "v1.4.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/quarkslab/quarkspwdump",
+ "star": 261,
+ "commits": 4,
+ "modify_time": "2013-04-29 12:23:25",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/preemptive/ppios-rename",
+ "star": 261,
+ "commits": 1618,
+ "modify_time": "2019-09-03 15:14:22",
+ "last_release": "v1.4.0",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/pornin/cttk",
+ "star": 261,
+ "commits": 14,
+ "modify_time": "2018-08-25 13:01:37",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/pgorczak/srslte-docker-emulated",
+ "star": 261,
+ "commits": 6,
+ "modify_time": "2018-12-03 19:21:55",
+ "last_release": "",
+ "lang": "Dockerfile"
+ },
+ {
+ "link": "https://github.com/pablocelayes/rsa-wiener-attack",
+ "star": 261,
+ "commits": 6,
+ "modify_time": "2017-02-25 17:52:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/no0be/dnslivery",
+ "star": 261,
+ "commits": 11,
+ "modify_time": "2019-09-09 12:01:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/niemand-sec/anticheat-testing-framework",
+ "star": 261,
+ "commits": 43,
+ "modify_time": "2019-12-05 09:38:37",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/mysql/mysql-proxy",
+ "star": 261,
+ "commits": 1482,
+ "modify_time": "2014-08-19 07:21:07",
+ "last_release": "\n rel-0.8.5\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/landhb/hideprocess",
+ "star": 261,
+ "commits": 41,
+ "modify_time": "2019-03-26 03:35:56",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jmpews/pwn2exploit",
+ "star": 261,
+ "commits": 61,
+ "modify_time": "2017-03-29 15:19:39",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/jesusprubio/strong-node",
+ "star": 261,
+ "commits": 34,
+ "modify_time": "2019-05-27 17:18:42",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/felixweyne/imaginaryc2",
+ "star": 261,
+ "commits": 34,
+ "modify_time": "2019-10-29 18:13:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ewhitehats/invisiblepersistence",
+ "star": 261,
+ "commits": 6,
+ "modify_time": "2018-08-09 13:02:17",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ecthros/pina-colada",
+ "star": 261,
+ "commits": 181,
+ "modify_time": "2016-12-15 02:43:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dorneanu/smalisca",
+ "star": 261,
+ "commits": 58,
+ "modify_time": "2017-03-08 08:09:53",
+ "last_release": "0.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/carbonblack/binee",
+ "star": 261,
+ "commits": 77,
+ "modify_time": "2019-12-06 13:49:30",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/amimo/dcc",
+ "star": 261,
+ "commits": 21,
+ "modify_time": "2019-09-01 11:15:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/v2ray/v2rayn",
+ "star": 260,
+ "commits": 4,
+ "modify_time": "2017-09-13 22:01:29",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/hysnsec/DevSecOps-Studio",
+ "star": 260,
+ "commits": 129,
+ "modify_time": "2019-01-04 04:00:33",
+ "last_release": "v0.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/m4ll0k/Konan",
+ "star": 260,
+ "commits": 12,
+ "modify_time": "2019-09-10 07:47:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/payloadbox/command-injection-payload-list",
+ "star": 260,
+ "commits": 9,
+ "modify_time": "2019-08-20 21:38:20",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/wanchain/go-wanchain",
+ "star": 260,
+ "commits": 3087,
+ "modify_time": "2019-12-10 03:59:21",
+ "last_release": "v2.1.3",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/quitten/doser.py",
+ "star": 260,
+ "commits": 14,
+ "modify_time": "2019-05-19 09:58:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nbulischeck/tyton",
+ "star": 260,
+ "commits": 74,
+ "modify_time": "2019-01-24 16:27:35",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/mr-xn/penetration_testing_poc",
+ "star": 260,
+ "commits": 176,
+ "modify_time": "2019-12-09 13:58:45",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/andsens/bootstrap-vz",
+ "star": 260,
+ "commits": 1625,
+ "modify_time": "2019-06-10 07:58:42",
+ "last_release": "\n v0.9.11\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/alpha1ab/cve-2018-8120",
+ "star": 260,
+ "commits": 7,
+ "modify_time": "2018-08-08 05:48:23",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/s0md3v/sqlmate",
+ "star": 259,
+ "commits": 19,
+ "modify_time": "2019-05-05 15:53:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wipi-hunter/pidense",
+ "star": 259,
+ "commits": 29,
+ "modify_time": "2018-09-21 08:55:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rapid7/recog",
+ "star": 259,
+ "commits": 1341,
+ "modify_time": "2019-11-13 16:27:53",
+ "last_release": "v2.3.6",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/puppetlabs/puppetlabs-firewall",
+ "star": 259,
+ "commits": 1499,
+ "modify_time": "2019-12-09 13:14:06",
+ "last_release": "\n v2.2.0\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/netxfly/passive_scan",
+ "star": 259,
+ "commits": 3,
+ "modify_time": "2016-03-19 14:23:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mbro95/portablecellnetwork",
+ "star": 259,
+ "commits": 112,
+ "modify_time": "2019-06-14 14:18:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lubyruffy/fofa",
+ "star": 259,
+ "commits": 943,
+ "modify_time": "2015-09-03 20:17:30",
+ "last_release": "v1.2.2",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/giantbranch/python-hacker-code",
+ "star": 259,
+ "commits": 31,
+ "modify_time": "2019-08-28 03:21:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/elixiumnetwork/elixium_core",
+ "star": 259,
+ "commits": 515,
+ "modify_time": "2019-04-16 21:01:28",
+ "last_release": "",
+ "lang": "Elixir"
+ },
+ {
+ "link": "https://github.com/cryptolok/morphaes",
+ "star": 259,
+ "commits": 56,
+ "modify_time": "2017-12-11 17:58:32",
+ "last_release": "v1.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/countercept/python-exe-unpacker",
+ "star": 259,
+ "commits": 3,
+ "modify_time": "2017-12-04 13:32:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/eugeneching/ida-consonance",
+ "star": 258,
+ "commits": 3,
+ "modify_time": "2013-02-19 05:42:53",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/pycqa/mccabe",
+ "star": 258,
+ "commits": 121,
+ "modify_time": "2018-09-08 21:04:24",
+ "last_release": "\n 0.6.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/netxfly/xsec-ip-database",
+ "star": 258,
+ "commits": 7,
+ "modify_time": "2017-09-29 09:34:34",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/isecpartners/android-ssl-bypass",
+ "star": 258,
+ "commits": 37,
+ "modify_time": "2013-04-01 22:22:50",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/incredibleindishell/ssrf_vulnerable_lab",
+ "star": 258,
+ "commits": 24,
+ "modify_time": "2019-10-05 06:00:06",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/fuzyll/defcon-vm",
+ "star": 258,
+ "commits": 8,
+ "modify_time": "2016-09-06 19:50:29",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/diogo-fernan/malsub",
+ "star": 258,
+ "commits": 55,
+ "modify_time": "2019-11-13 09:21:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dga-mi-ssi/yaco",
+ "star": 258,
+ "commits": 965,
+ "modify_time": "2018-11-14 21:26:04",
+ "last_release": "v2.6",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/cedricbonhomme/stegano",
+ "star": 258,
+ "commits": 416,
+ "modify_time": "2019-10-29 21:23:27",
+ "last_release": "v0.9.4",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/brandonprry/gray_hat_csharp_code",
+ "star": 258,
+ "commits": 212,
+ "modify_time": "2017-05-02 21:46:55",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/bin4ry/deejayeye-modder",
+ "star": 258,
+ "commits": 480,
+ "modify_time": "2019-12-09 07:52:17",
+ "last_release": "",
+ "lang": "Smali"
+ },
+ {
+ "link": "https://github.com/basil00/torwall",
+ "star": 258,
+ "commits": 31,
+ "modify_time": "2019-10-26 00:20:03",
+ "last_release": "v2.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/anyeduke/enterprise-security-skill",
+ "star": 258,
+ "commits": 219,
+ "modify_time": "2019-11-12 09:18:28",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ansible/community",
+ "star": 258,
+ "commits": 425,
+ "modify_time": "2019-12-09 15:17:06",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/radareorg/r2dec-js",
+ "star": 257,
+ "commits": 488,
+ "modify_time": "2019-11-21 10:19:24",
+ "last_release": "4.0.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/orlikoski/CyLR",
+ "star": 257,
+ "commits": 399,
+ "modify_time": "2019-10-14 19:19:30",
+ "last_release": "\n 2.1.2_beta\n ",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/radareorg/radeco",
+ "star": 257,
+ "commits": 1083,
+ "modify_time": "2019-09-12 08:05:33",
+ "last_release": "",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/zboya/gomitmproxy",
+ "star": 257,
+ "commits": 39,
+ "modify_time": "2018-03-29 07:34:54",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/radareorg/r2dec-js",
+ "star": 257,
+ "commits": 488,
+ "modify_time": "2019-11-21 10:19:24",
+ "last_release": "4.0.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/voulnet/cve-2017-8759-exploit-sample",
+ "star": 257,
+ "commits": 5,
+ "modify_time": "2017-09-13 09:58:24",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/thetwitchy/xxer",
+ "star": 257,
+ "commits": 21,
+ "modify_time": "2018-01-12 17:25:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sachaos/tcpterm",
+ "star": 257,
+ "commits": 27,
+ "modify_time": "2019-10-07 05:58:51",
+ "last_release": "\n v0.2.0\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/rustsec/advisory-db",
+ "star": 257,
+ "commits": 404,
+ "modify_time": "2019-11-22 00:38:17",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/rrwick/basecalling-comparison",
+ "star": 257,
+ "commits": 101,
+ "modify_time": "2019-08-05 07:32:51",
+ "last_release": "v5.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rolisoft/reconscan",
+ "star": 257,
+ "commits": 37,
+ "modify_time": "2017-06-10 15:49:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rockymeza/wifi",
+ "star": 257,
+ "commits": 142,
+ "modify_time": "2017-03-20 02:05:18",
+ "last_release": "\n 0.8.0rc1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rob--/memoryjs",
+ "star": 257,
+ "commits": 121,
+ "modify_time": "2019-11-23 17:51:55",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/poweradminllc/paexec",
+ "star": 257,
+ "commits": 18,
+ "modify_time": "2019-09-30 17:57:09",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/pbartek/pyobd-pi",
+ "star": 257,
+ "commits": 26,
+ "modify_time": "2014-08-01 04:49:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/p0f/p0f",
+ "star": 257,
+ "commits": 21,
+ "modify_time": "2019-02-21 14:41:37",
+ "last_release": "\n v3.06b\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/l-jinbin/apksignaturekiller",
+ "star": 257,
+ "commits": 11,
+ "modify_time": "2017-11-14 13:08:15",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/karek314/macos-home-call-drop",
+ "star": 257,
+ "commits": 30,
+ "modify_time": "2018-12-13 18:27:01",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/hackademic/hackademic",
+ "star": 257,
+ "commits": 184,
+ "modify_time": "2017-02-24 16:48:07",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/guimaizi/get_domain",
+ "star": 257,
+ "commits": 15,
+ "modify_time": "2019-11-28 12:37:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/frint0/email-enum",
+ "star": 257,
+ "commits": 62,
+ "modify_time": "2019-11-13 08:07:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/flankerhqd/jaadas",
+ "star": 257,
+ "commits": 33,
+ "modify_time": "2017-04-12 03:49:43",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/danicuestasuarez/nmapgui",
+ "star": 257,
+ "commits": 178,
+ "modify_time": "2018-09-24 11:35:24",
+ "last_release": "v0.6.1",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/chrizator/netattack2",
+ "star": 257,
+ "commits": 24,
+ "modify_time": "2017-10-03 08:57:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/berzerk0/bewgor",
+ "star": 257,
+ "commits": 31,
+ "modify_time": "2018-11-16 20:13:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/crytic/ethersplay",
+ "star": 256,
+ "commits": 119,
+ "modify_time": "2019-02-01 20:00:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xairy/easy-linux-pwn",
+ "star": 256,
+ "commits": 2,
+ "modify_time": "2019-05-09 20:53:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/unamer/cve-2017-11882",
+ "star": 256,
+ "commits": 28,
+ "modify_time": "2017-12-06 12:47:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/thomastjdev/wmd",
+ "star": 256,
+ "commits": 30,
+ "modify_time": "2017-01-28 13:55:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/srar/memcachedos",
+ "star": 256,
+ "commits": 4,
+ "modify_time": "2018-03-02 08:04:09",
+ "last_release": "",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/smaash/snitch",
+ "star": 256,
+ "commits": 38,
+ "modify_time": "2015-07-23 17:11:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rub-syssec/omen",
+ "star": 256,
+ "commits": 19,
+ "modify_time": "2019-07-11 17:43:02",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ripe-ncc/whois",
+ "star": 256,
+ "commits": 4253,
+ "modify_time": "2019-12-09 15:54:37",
+ "last_release": "whois-1.96",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/rhinosecuritylabs/iprotate_burp_extension",
+ "star": 256,
+ "commits": 37,
+ "modify_time": "2019-09-25 20:35:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ramadhanamizudin/malware",
+ "star": 256,
+ "commits": 106,
+ "modify_time": "2019-02-13 02:16:40",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/minio/minio-py",
+ "star": 256,
+ "commits": 851,
+ "modify_time": "2019-12-04 15:24:10",
+ "last_release": "5.0.5",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/m4ll0k/galileo",
+ "star": 256,
+ "commits": 19,
+ "modify_time": "2018-10-22 17:59:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/erbbysam/dnsgrep",
+ "star": 256,
+ "commits": 5,
+ "modify_time": "2019-03-12 02:23:08",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/clemfromspace/scrapy-selenium",
+ "star": 256,
+ "commits": 30,
+ "modify_time": "2019-09-16 15:45:59",
+ "last_release": "\n 0.0.7\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bcoles/ssrf_proxy",
+ "star": 256,
+ "commits": 293,
+ "modify_time": "2017-12-22 12:56:31",
+ "last_release": "\n v0.0.4\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/a2nkf/macos-kernel-exploit",
+ "star": 256,
+ "commits": 15,
+ "modify_time": "2019-10-15 17:05:37",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/nsacyber/Hardware-and-Firmware-Security-Guidance",
+ "star": 255,
+ "commits": 116,
+ "modify_time": "2019-06-25 17:21:23",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/lorentzenman/sheepl",
+ "star": 255,
+ "commits": 24,
+ "modify_time": "2019-09-18 10:38:19",
+ "last_release": "\n 2.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zhaoweiho/web-sec-interview",
+ "star": 255,
+ "commits": 84,
+ "modify_time": "2019-07-25 00:31:08",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/w-shackleton/android-netspoof",
+ "star": 255,
+ "commits": 294,
+ "modify_time": "2017-01-17 20:30:13",
+ "last_release": "2.4.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/stephenmcd/hot-redis",
+ "star": 255,
+ "commits": 159,
+ "modify_time": "2018-10-16 00:28:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/spring-cloud/spring-cloud-task",
+ "star": 255,
+ "commits": 393,
+ "modify_time": "2019-11-25 21:33:14",
+ "last_release": "\n 2.2.1.RELEASE\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/roxas75/rxtools",
+ "star": 255,
+ "commits": 909,
+ "modify_time": "2016-02-29 05:27:36",
+ "last_release": "3.0-beta_2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/qunarcorp/open_dnsdb",
+ "star": 255,
+ "commits": 33,
+ "modify_time": "2019-09-19 09:57:14",
+ "last_release": "\n v0.2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pagerduty/security-training",
+ "star": 255,
+ "commits": 33,
+ "modify_time": "2019-09-19 15:44:05",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/ngmy/vim-rubocop",
+ "star": 255,
+ "commits": 24,
+ "modify_time": "2015-04-25 08:53:13",
+ "last_release": "",
+ "lang": "Vim script"
+ },
+ {
+ "link": "https://github.com/m4ll0k/autonse",
+ "star": 255,
+ "commits": 23,
+ "modify_time": "2018-11-19 21:39:32",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/lijiejie/iis_shortname_scanner",
+ "star": 255,
+ "commits": 5,
+ "modify_time": "2016-10-27 11:15:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jmartinezheras/2018-machinelearning-lectures-esa",
+ "star": 255,
+ "commits": 49,
+ "modify_time": "2019-09-05 08:08:09",
+ "last_release": "",
+ "lang": "Jupyter Notebook"
+ },
+ {
+ "link": "https://github.com/cytoscape/cytoscape",
+ "star": 255,
+ "commits": 158,
+ "modify_time": "2019-10-11 20:44:37",
+ "last_release": "3.7.2",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/airsage/petrel",
+ "star": 255,
+ "commits": 85,
+ "modify_time": "2017-04-18 12:48:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/p3nt4/Invoke-Piper",
+ "star": 254,
+ "commits": 24,
+ "modify_time": "2017-12-12 03:26:07",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/xorrior/randomps-scripts",
+ "star": 254,
+ "commits": 71,
+ "modify_time": "2017-12-29 17:16:37",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/wenfengshi/ddos-dos-tools",
+ "star": 254,
+ "commits": 25,
+ "modify_time": "2018-11-27 16:18:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tyrchen/racket-book",
+ "star": 254,
+ "commits": 37,
+ "modify_time": "2019-08-02 03:49:24",
+ "last_release": "",
+ "lang": "Racket"
+ },
+ {
+ "link": "https://github.com/sporst/swfretools",
+ "star": 254,
+ "commits": 115,
+ "modify_time": "2012-10-22 13:19:46",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/projectzeroindia/cve-2019-11510",
+ "star": 254,
+ "commits": 2,
+ "modify_time": "2019-09-02 16:36:30",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/lesnuages/hershell",
+ "star": 254,
+ "commits": 29,
+ "modify_time": "2019-07-15 16:50:56",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/lavalamp-/ipv666",
+ "star": 254,
+ "commits": 182,
+ "modify_time": "2019-05-27 23:38:30",
+ "last_release": "v0.4.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/interference-security/dvws",
+ "star": 254,
+ "commits": 24,
+ "modify_time": "2018-06-13 04:51:49",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/google/docker-explorer",
+ "star": 254,
+ "commits": 79,
+ "modify_time": "2019-11-20 10:10:54",
+ "last_release": "20190310",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/galoisinc/haskell-tor",
+ "star": 254,
+ "commits": 23,
+ "modify_time": "2016-09-27 20:58:31",
+ "last_release": "v0.1.2",
+ "lang": "Haskell"
+ },
+ {
+ "link": "https://github.com/dotboris/vuejs-serverside-template-xss",
+ "star": 254,
+ "commits": 25,
+ "modify_time": "2019-09-11 01:26:44",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/1n3/wordpress-xmlrpc-brute-force-exploit",
+ "star": 254,
+ "commits": 27,
+ "modify_time": "2018-01-30 21:29:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ihciah/rabbit-tcp",
+ "star": 253,
+ "commits": 34,
+ "modify_time": "2019-10-25 07:45:01",
+ "last_release": "v1.0.6",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/bc-security/empire",
+ "star": 253,
+ "commits": 1770,
+ "modify_time": "2019-12-03 05:51:30",
+ "last_release": "v3.0.0-rc.1",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/seemoo-lab/owl",
+ "star": 253,
+ "commits": 21,
+ "modify_time": "2019-09-15 11:20:50",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/thelsa/cs-checklist",
+ "star": 253,
+ "commits": 17,
+ "modify_time": "2019-11-26 12:30:35",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/tensorflow/tfjs-tsne",
+ "star": 253,
+ "commits": 79,
+ "modify_time": "2019-10-28 20:39:09",
+ "last_release": "",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/rickey-g/fancybear",
+ "star": 253,
+ "commits": 15,
+ "modify_time": "2017-01-09 00:27:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/proftpd/proftpd",
+ "star": 253,
+ "commits": 11245,
+ "modify_time": "2019-12-07 01:14:18",
+ "last_release": "v1.3.7rc2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/pbhogan/scrypt",
+ "star": 253,
+ "commits": 170,
+ "modify_time": "2019-11-14 05:40:18",
+ "last_release": "v3.0.3",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/owasp/owasp-java-encoder",
+ "star": 253,
+ "commits": 60,
+ "modify_time": "2018-12-31 23:02:30",
+ "last_release": "\n v1.2.2\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/icing/mod_md",
+ "star": 253,
+ "commits": 863,
+ "modify_time": "2019-11-26 13:47:14",
+ "last_release": "v2.2.4",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/duo-labs/dlint",
+ "star": 253,
+ "commits": 114,
+ "modify_time": "2019-12-06 18:24:56",
+ "last_release": "\n 0.9.2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/danmcinerney/fakeap",
+ "star": 253,
+ "commits": 29,
+ "modify_time": "2015-11-25 19:14:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cloudflare/python-cloudflare",
+ "star": 253,
+ "commits": 326,
+ "modify_time": "2019-11-20 18:37:17",
+ "last_release": "2.2.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/benjamin-42/trident",
+ "star": 253,
+ "commits": 211,
+ "modify_time": "2018-07-27 21:19:01",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/b16f00t/whapa",
+ "star": 253,
+ "commits": 172,
+ "modify_time": "2019-10-21 13:55:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/aws-samples/aws-security-workshops",
+ "star": 253,
+ "commits": 434,
+ "modify_time": "2019-12-09 05:25:11",
+ "last_release": "",
+ "lang": "Jupyter Notebook"
+ },
+ {
+ "link": "https://github.com/ctfhacker/EpicTreasure",
+ "star": 252,
+ "commits": 83,
+ "modify_time": "2019-06-20 19:47:04",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/comaeio/SwishDbgExt",
+ "star": 252,
+ "commits": 153,
+ "modify_time": "2018-12-11 04:24:18",
+ "last_release": "v3.0.20180330.1",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/nccgroup/vlan-hopping---frogger",
+ "star": 252,
+ "commits": 21,
+ "modify_time": "2016-02-24 12:42:16",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/v-e-o/poc",
+ "star": 252,
+ "commits": 20,
+ "modify_time": "2018-07-03 09:54:50",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/thewhiteh4t/finalrecon",
+ "star": 252,
+ "commits": 18,
+ "modify_time": "2019-08-22 11:23:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/strongbox-password-safe/strongbox",
+ "star": 252,
+ "commits": 285,
+ "modify_time": "2019-12-08 06:28:59",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/nluedtke/linux_kernel_cves",
+ "star": 252,
+ "commits": 1061,
+ "modify_time": "2019-12-09 15:54:22",
+ "last_release": "",
+ "lang": "Vue"
+ },
+ {
+ "link": "https://github.com/mikewest/http-state-tokens",
+ "star": 252,
+ "commits": 29,
+ "modify_time": "2019-06-18 06:28:50",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/mdsecresearch/lyncsniper",
+ "star": 252,
+ "commits": 13,
+ "modify_time": "2018-07-04 09:45:54",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/jeffzh3ng/insectsawake",
+ "star": 252,
+ "commits": 15,
+ "modify_time": "2019-02-20 13:00:31",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/jcesarstef/dotdotslash",
+ "star": 252,
+ "commits": 33,
+ "modify_time": "2019-07-03 18:45:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/itskindred/procspy",
+ "star": 252,
+ "commits": 23,
+ "modify_time": "2019-05-28 02:25:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/houjingyi233/office-exploit-case-study",
+ "star": 252,
+ "commits": 139,
+ "modify_time": "2019-03-15 09:34:18",
+ "last_release": "",
+ "lang": "Visual Basic .NET"
+ },
+ {
+ "link": "https://github.com/hfiref0x/cve-2015-1701",
+ "star": 252,
+ "commits": 5,
+ "modify_time": "2017-12-18 14:11:19",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/deadpix3l/cryptsky",
+ "star": 252,
+ "commits": 13,
+ "modify_time": "2018-04-19 19:52:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/chef-koch/android-vulnerabilities-overview",
+ "star": 252,
+ "commits": 171,
+ "modify_time": "2019-03-03 15:15:44",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/allfro/sploitego",
+ "star": 252,
+ "commits": 153,
+ "modify_time": "2014-07-23 13:53:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/isafeblue/mind-map",
+ "star": 251,
+ "commits": 6,
+ "modify_time": "2019-06-25 02:42:38",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/sprov065/sprov-ui",
+ "star": 251,
+ "commits": 104,
+ "modify_time": "2019-09-18 14:53:04",
+ "last_release": "3.1.0",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/thesecondsun/revssl",
+ "star": 251,
+ "commits": 5,
+ "modify_time": "2019-07-20 13:12:10",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/rvrsh3ll/findfrontabledomains",
+ "star": 251,
+ "commits": 31,
+ "modify_time": "2019-11-11 14:51:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/redteamoperations/pivotsuite",
+ "star": 251,
+ "commits": 18,
+ "modify_time": "2019-07-22 12:10:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/platomav/mcextractor",
+ "star": 251,
+ "commits": 158,
+ "modify_time": "2019-11-04 14:24:12",
+ "last_release": "r130",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/panhongwei/tracereader",
+ "star": 251,
+ "commits": 24,
+ "modify_time": "2017-10-31 08:01:03",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/nfcgate/nfcgate",
+ "star": 251,
+ "commits": 664,
+ "modify_time": "2019-07-07 00:22:35",
+ "last_release": "v2.0.0",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/netyouli/whc_scan",
+ "star": 251,
+ "commits": 13,
+ "modify_time": "2019-11-29 02:09:31",
+ "last_release": "",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/kootenpv/sky",
+ "star": 251,
+ "commits": 201,
+ "modify_time": "2018-09-01 22:07:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kevin-robertson/inveighzero",
+ "star": 251,
+ "commits": 9,
+ "modify_time": "2019-08-19 02:19:39",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/jaegertracing/jaeger-client-python",
+ "star": 251,
+ "commits": 207,
+ "modify_time": "2019-12-06 03:03:26",
+ "last_release": "v4.0.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/feicong/macbook",
+ "star": 251,
+ "commits": 8,
+ "modify_time": "2017-08-09 03:30:55",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/cvandeplas/pystemon",
+ "star": 251,
+ "commits": 182,
+ "modify_time": "2019-10-08 11:16:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/brianhama/de4dot",
+ "star": 251,
+ "commits": 2051,
+ "modify_time": "2018-07-12 11:58:40",
+ "last_release": "\n v3.1.41592\n ",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/neo23x0/auditd",
+ "star": 250,
+ "commits": 19,
+ "modify_time": "2019-11-27 08:31:02",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/prahladyeri/hotspotd",
+ "star": 250,
+ "commits": 43,
+ "modify_time": "2017-05-31 04:40:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/crytic/awesome-ethereum-security",
+ "star": 250,
+ "commits": 26,
+ "modify_time": "2019-01-15 14:37:59",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/wooyun/tangscan",
+ "star": 250,
+ "commits": 8,
+ "modify_time": "2015-09-17 04:55:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/whitepacket/zib-trojan",
+ "star": 250,
+ "commits": 14,
+ "modify_time": "2016-02-17 20:22:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wh0ale/src-experience",
+ "star": 250,
+ "commits": 6,
+ "modify_time": "2019-03-02 08:47:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/phpwhois/phpwhois",
+ "star": 250,
+ "commits": 662,
+ "modify_time": "2015-07-10 18:53:02",
+ "last_release": "\n v4.2.5\n ",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/ninoseki/mitaka",
+ "star": 250,
+ "commits": 637,
+ "modify_time": "2019-12-06 12:43:45",
+ "last_release": "v0.65.0",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/nccgroup/sniffle",
+ "star": 250,
+ "commits": 109,
+ "modify_time": "2019-11-22 00:15:03",
+ "last_release": "v1.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/killswitch-gui/pentesting-scripts",
+ "star": 250,
+ "commits": 60,
+ "modify_time": "2018-05-01 15:13:26",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/igio90/frick",
+ "star": 250,
+ "commits": 133,
+ "modify_time": "2018-08-14 17:33:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/guanchao/appprotect",
+ "star": 250,
+ "commits": 8,
+ "modify_time": "2017-03-18 04:18:03",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/fsgmhoward/shadowsocks-py-mu",
+ "star": 250,
+ "commits": 1,
+ "modify_time": "2019-08-04 08:35:56",
+ "last_release": "3.4.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dbgx/lldb.nvim",
+ "star": 250,
+ "commits": 146,
+ "modify_time": "2018-03-11 21:19:36",
+ "last_release": "0.7",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/census/choronzon",
+ "star": 250,
+ "commits": 4,
+ "modify_time": "2016-07-22 09:58:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/avramit/instahack",
+ "star": 250,
+ "commits": null,
+ "modify_time": "2018-10-11 15:41:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/asweigart/codebreaker",
+ "star": 250,
+ "commits": 56,
+ "modify_time": "2016-10-13 22:16:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zephrfish/googd0rker",
+ "star": 249,
+ "commits": 37,
+ "modify_time": "2019-11-27 00:05:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xuxueli/xxl-excel",
+ "star": 249,
+ "commits": 50,
+ "modify_time": "2019-11-26 10:24:57",
+ "last_release": "v1.1.1",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/tpm2-software/tpm2-tools",
+ "star": 249,
+ "commits": 3155,
+ "modify_time": "2019-12-05 14:35:43",
+ "last_release": "4.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/tipam/pi3d",
+ "star": 249,
+ "commits": 1458,
+ "modify_time": "2019-11-16 14:30:44",
+ "last_release": "v2.32",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rentzsch/mach_star",
+ "star": 249,
+ "commits": 65,
+ "modify_time": "2012-08-10 17:22:49",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/owasp/api-security",
+ "star": 249,
+ "commits": 148,
+ "modify_time": "2019-10-24 11:12:32",
+ "last_release": "\n v0.2.1\n ",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/livz/cloacked-pixel",
+ "star": 249,
+ "commits": 11,
+ "modify_time": "2017-06-01 18:15:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lcatro/fuzzing-imagemagick",
+ "star": 249,
+ "commits": 6,
+ "modify_time": "2017-07-26 03:58:14",
+ "last_release": "",
+ "lang": "Mask"
+ },
+ {
+ "link": "https://github.com/jesusprubio/bluebox-ng",
+ "star": 249,
+ "commits": 404,
+ "modify_time": "2017-06-05 20:23:05",
+ "last_release": "\n 1.1.0\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/jakeajames/rootlessjb",
+ "star": 249,
+ "commits": 21,
+ "modify_time": "2019-04-06 19:18:38",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/intezer/docker-ida",
+ "star": 249,
+ "commits": 93,
+ "modify_time": "2017-11-19 11:15:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gpg/gnupg",
+ "star": 249,
+ "commits": 8518,
+ "modify_time": "2019-12-09 15:53:44",
+ "last_release": "\n gnupg-2.2.19\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/godlikewangjun/dexknife-wj",
+ "star": 249,
+ "commits": 23,
+ "modify_time": "2018-03-22 16:50:43",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/gfw-breaker/open-proxy",
+ "star": 249,
+ "commits": 246,
+ "modify_time": "2019-12-06 11:50:33",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/dirkjanm/adidnsdump",
+ "star": 249,
+ "commits": 8,
+ "modify_time": "2019-04-29 15:06:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/0x4d31/salt-scanner",
+ "star": 249,
+ "commits": 31,
+ "modify_time": "2017-10-18 03:07:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/falconre/falcon",
+ "star": 248,
+ "commits": 366,
+ "modify_time": "2019-11-02 21:39:22",
+ "last_release": "\n 0.4.6\n ",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/zerodot1/coinblockerlists",
+ "star": 248,
+ "commits": null,
+ "modify_time": "2018-07-12 16:55:39",
+ "last_release": "",
+ "lang": "batchfile"
+ },
+ {
+ "link": "https://github.com/sdcampbell/internal-pentest-playbook",
+ "star": 248,
+ "commits": 101,
+ "modify_time": "2019-10-31 15:22:07",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/rxwx/cve-2018-0802",
+ "star": 248,
+ "commits": 12,
+ "modify_time": "2018-02-28 12:32:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/quantopian/qdb",
+ "star": 248,
+ "commits": 167,
+ "modify_time": "2019-11-08 16:54:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/portswigger/collaborator-everywhere",
+ "star": 248,
+ "commits": 31,
+ "modify_time": "2018-05-21 14:46:32",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/minhaskamal/stupidkeylogger",
+ "star": 248,
+ "commits": 43,
+ "modify_time": "2017-10-31 03:24:26",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/hakirisec/hakiri_toolbelt",
+ "star": 248,
+ "commits": 135,
+ "modify_time": "2014-10-15 22:05:43",
+ "last_release": "\n v0.7.2\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/dosomder/iovyroot",
+ "star": 248,
+ "commits": 88,
+ "modify_time": "2017-11-23 20:55:02",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/warflop/cloudbunny",
+ "star": 247,
+ "commits": 12,
+ "modify_time": "2018-11-19 19:25:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tonychen56/hackertools",
+ "star": 247,
+ "commits": 77,
+ "modify_time": "2019-07-27 03:55:12",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/spaze/oprah-proxy",
+ "star": 247,
+ "commits": 35,
+ "modify_time": "2017-12-22 02:33:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/solomonsklash/chomp-scan",
+ "star": 247,
+ "commits": 513,
+ "modify_time": "2019-09-27 04:12:37",
+ "last_release": "5.9",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/n0tr00t/beebeeto-framework",
+ "star": 247,
+ "commits": 65,
+ "modify_time": "2015-07-27 07:03:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mrash/psad",
+ "star": 247,
+ "commits": 2385,
+ "modify_time": "2018-11-17 14:05:20",
+ "last_release": "\n 2.4.6\n ",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/mame82/logitacker",
+ "star": 247,
+ "commits": 175,
+ "modify_time": "2019-11-20 00:32:42",
+ "last_release": "v0.2.2-beta",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/lewisardern/bxss",
+ "star": 247,
+ "commits": 127,
+ "modify_time": "2019-07-17 04:32:59",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/leoloobeek/lapstoolkit",
+ "star": 247,
+ "commits": 22,
+ "modify_time": "2018-01-31 14:45:34",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/hsury/geetest3-crack",
+ "star": 247,
+ "commits": 5,
+ "modify_time": "2018-11-23 03:00:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gbps/gbhv",
+ "star": 247,
+ "commits": 54,
+ "modify_time": "2019-08-26 02:00:57",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/freelancepentester/ddos-script",
+ "star": 247,
+ "commits": 64,
+ "modify_time": "2018-02-02 14:55:07",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/fanhua1994/dzfilter",
+ "star": 247,
+ "commits": 100,
+ "modify_time": "2019-11-02 06:01:59",
+ "last_release": "1.1.0",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/dzonerzy/gowapt",
+ "star": 247,
+ "commits": 34,
+ "modify_time": "2018-04-16 11:41:40",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/corrad1nho/qomui",
+ "star": 247,
+ "commits": 228,
+ "modify_time": "2019-09-14 19:43:58",
+ "last_release": "v0.8.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/boppreh/mouse",
+ "star": 246,
+ "commits": 25,
+ "modify_time": "2018-09-02 13:55:26",
+ "last_release": "v0.7.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dylanbai8/v2ray_h2-tls_website_onekey",
+ "star": 246,
+ "commits": 27,
+ "modify_time": "2018-10-09 17:42:41",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/bkuhlmann/mac_os-config",
+ "star": 246,
+ "commits": 385,
+ "modify_time": "2019-12-01 21:01:58",
+ "last_release": "\n 12.2.0\n ",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/SusmithKrishnan/torghost",
+ "star": 246,
+ "commits": 24,
+ "modify_time": "2019-11-24 15:31:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nats-io/nats.java",
+ "star": 246,
+ "commits": 1025,
+ "modify_time": "2019-12-05 20:11:48",
+ "last_release": "2.6.6",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/tcstool/fireaway",
+ "star": 246,
+ "commits": 21,
+ "modify_time": "2017-04-24 22:50:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/s0uthwest/futurerestore",
+ "star": 246,
+ "commits": 247,
+ "modify_time": "2019-11-21 17:24:53",
+ "last_release": "245",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/rub-syssec/microcode",
+ "star": 246,
+ "commits": 5,
+ "modify_time": "2018-10-21 21:38:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/maian-tool/maian",
+ "star": 246,
+ "commits": 14,
+ "modify_time": "2018-03-19 12:29:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jamesbarlow/icmptunnel",
+ "star": 246,
+ "commits": 3,
+ "modify_time": "2016-07-13 16:06:00",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jackgitgz/cnblogsspider",
+ "star": 246,
+ "commits": 8,
+ "modify_time": "2015-06-16 15:29:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gildasio/h2t",
+ "star": 246,
+ "commits": 36,
+ "modify_time": "2019-10-22 11:58:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gdelugre/ida-arm-system-highlight",
+ "star": 246,
+ "commits": 47,
+ "modify_time": "2018-02-06 08:21:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bontchev/pcodedmp",
+ "star": 246,
+ "commits": 47,
+ "modify_time": "2019-07-30 17:45:40",
+ "last_release": "1.2.6",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/begeekmyfriend/cuckoofilter",
+ "star": 246,
+ "commits": 30,
+ "modify_time": "2016-05-13 12:10:07",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ampotos/dynstruct",
+ "star": 246,
+ "commits": 314,
+ "modify_time": "2019-08-12 09:15:08",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/urbanesec/ZackAttack",
+ "star": 245,
+ "commits": 5,
+ "modify_time": "2012-08-30 04:40:27",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/ludiosarchive/unfixed-security-bugs",
+ "star": 245,
+ "commits": 31,
+ "modify_time": "2018-03-09 04:26:54",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/strazzere/android-scripts",
+ "star": 245,
+ "commits": 45,
+ "modify_time": "2019-12-02 19:12:30",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/sparkfunx/skimmer_scanner",
+ "star": 245,
+ "commits": 11,
+ "modify_time": "2017-11-22 05:16:58",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/peterpt/eternal_scanner",
+ "star": 245,
+ "commits": 90,
+ "modify_time": "2019-07-23 19:24:00",
+ "last_release": "2.2",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/neophob/pixelcontroller",
+ "star": 245,
+ "commits": 2521,
+ "modify_time": "2016-07-08 07:55:46",
+ "last_release": "v2.1.0-RC1",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/nccgroup/azucar",
+ "star": 245,
+ "commits": 5,
+ "modify_time": "2019-08-01 14:40:35",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/inquest/threatingestor",
+ "star": 245,
+ "commits": 413,
+ "modify_time": "2019-09-24 23:52:51",
+ "last_release": "v1.0.0b6",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/evpo/encryptpad",
+ "star": 245,
+ "commits": 476,
+ "modify_time": "2019-11-26 12:07:07",
+ "last_release": "v0.4.0.4",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ethicalhack3r/wordpress_plugin_security_testing_cheat_sheet",
+ "star": 245,
+ "commits": 36,
+ "modify_time": "2019-05-10 07:23:37",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/enygma/expose",
+ "star": 245,
+ "commits": 235,
+ "modify_time": "2017-10-04 13:20:04",
+ "last_release": "\n 3.0\n ",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/cryptogenic/ps4-4.55-kernel-exploit",
+ "star": 245,
+ "commits": 7,
+ "modify_time": "2018-02-28 18:22:42",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/crowdstrike/forensics",
+ "star": 245,
+ "commits": 32,
+ "modify_time": "2018-12-20 23:03:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/c0ny1/jsencrypter",
+ "star": 245,
+ "commits": 26,
+ "modify_time": "2019-11-22 14:00:47",
+ "last_release": "0.3.2",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/zer0mem0ry/kernelbhop",
+ "star": 244,
+ "commits": 13,
+ "modify_time": "2018-04-02 11:32:30",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/xyuanmu/checkiptools",
+ "star": 244,
+ "commits": 79,
+ "modify_time": "2017-07-22 06:06:59",
+ "last_release": "1.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/voulnet/barq",
+ "star": 244,
+ "commits": 33,
+ "modify_time": "2019-12-01 07:40:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ucsb-seclab/difuze",
+ "star": 244,
+ "commits": 53,
+ "modify_time": "2019-04-29 04:25:24",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/righettod/poc-graphql",
+ "star": 244,
+ "commits": 9,
+ "modify_time": "2019-08-03 16:50:47",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/platomav/cpumicrocodes",
+ "star": 244,
+ "commits": 78,
+ "modify_time": "2019-11-04 14:34:19",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/pentester-io/commonspeak",
+ "star": 244,
+ "commits": 7,
+ "modify_time": "2017-12-14 18:54:24",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/neohapsis/creddump7",
+ "star": 244,
+ "commits": 18,
+ "modify_time": "2018-02-19 21:10:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/misterch0c/awesome-hacking",
+ "star": 244,
+ "commits": 29,
+ "modify_time": "2016-11-12 12:27:25",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/microsoft/krabsetw",
+ "star": 244,
+ "commits": 81,
+ "modify_time": "2019-10-14 15:32:35",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/metac0rtex/githarvester",
+ "star": 244,
+ "commits": 31,
+ "modify_time": "2016-05-22 14:42:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/leebrotherston/tls-fingerprinting",
+ "star": 244,
+ "commits": 256,
+ "modify_time": "2019-09-24 12:35:11",
+ "last_release": "1.0.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jakespringer/angr_ctf",
+ "star": 244,
+ "commits": 142,
+ "modify_time": "2018-03-19 01:01:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/initroot/burpjslinkfinder",
+ "star": 244,
+ "commits": 18,
+ "modify_time": "2019-08-02 12:23:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hsis007/useful_websites_for_pentester",
+ "star": 244,
+ "commits": 63,
+ "modify_time": "2018-05-09 05:51:53",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/gametutorials/tutorials",
+ "star": 244,
+ "commits": 22,
+ "modify_time": "2015-01-05 04:26:41",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/espressif/esp32-nesemu",
+ "star": 244,
+ "commits": 19,
+ "modify_time": "2017-10-26 11:31:48",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/donnchac/onionbalance",
+ "star": 244,
+ "commits": 185,
+ "modify_time": "2017-05-02 16:06:55",
+ "last_release": "0.1.8",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cisco-config-analysis-tool/ccat",
+ "star": 244,
+ "commits": 340,
+ "modify_time": "2019-12-03 15:29:13",
+ "last_release": "v1.01",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/arno0x/embedinhtml",
+ "star": 244,
+ "commits": 4,
+ "modify_time": "2017-09-27 13:16:03",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/antoniococo/sharpyshell",
+ "star": 244,
+ "commits": 33,
+ "modify_time": "2019-03-26 16:33:47",
+ "last_release": "v1.1.14",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/0xbadjuju/wheresmyimplant",
+ "star": 244,
+ "commits": 106,
+ "modify_time": "2018-10-24 13:59:29",
+ "last_release": "0.7.5",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/0x4d31/awesome-oscp",
+ "star": 244,
+ "commits": 12,
+ "modify_time": "2019-04-20 03:56:32",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/0xeb-bp/bluekeep",
+ "star": 243,
+ "commits": 6,
+ "modify_time": "2019-11-19 02:43:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/orlikoski/CDQR",
+ "star": 243,
+ "commits": 195,
+ "modify_time": "2019-11-29 03:37:00",
+ "last_release": "\n 20191128\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/usb-tools/Facedancer",
+ "star": 243,
+ "commits": 82,
+ "modify_time": "2019-09-21 08:01:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/steamdatabase/gametracking-dota2",
+ "star": 243,
+ "commits": 1160,
+ "modify_time": "2019-12-10 03:30:03",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/sensepost/autodane",
+ "star": 243,
+ "commits": 19,
+ "modify_time": "2016-08-03 19:54:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rockerflower/shadowsocks",
+ "star": 243,
+ "commits": 733,
+ "modify_time": "2015-08-20 10:52:42",
+ "last_release": "\n 2.8.2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nektra/deviare-inproc",
+ "star": 243,
+ "commits": 156,
+ "modify_time": "2019-08-26 15:13:40",
+ "last_release": "release-1.0.2",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/mindpointgroup/cloudfrunt",
+ "star": 243,
+ "commits": 38,
+ "modify_time": "2018-04-27 21:07:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/leviathan36/kaboom",
+ "star": 243,
+ "commits": 57,
+ "modify_time": "2019-09-16 17:05:55",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/hyln9/vikiroot",
+ "star": 243,
+ "commits": 20,
+ "modify_time": "2017-01-27 10:04:07",
+ "last_release": "v0.1.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/fireice-uk/xmr-stak-nvidia",
+ "star": 243,
+ "commits": 39,
+ "modify_time": "2017-11-19 19:50:14",
+ "last_release": "final",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/antswordproject/ant",
+ "star": 243,
+ "commits": 15,
+ "modify_time": "2019-09-17 05:44:02",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/piker-alpha/macosxbootloader",
+ "star": 242,
+ "commits": 365,
+ "modify_time": "2016-05-22 16:16:01",
+ "last_release": "\n 3.0\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/grafeas/kritis",
+ "star": 242,
+ "commits": 924,
+ "modify_time": "2019-12-05 15:31:01",
+ "last_release": "\n v0.2.0\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/PegasusLab/GhostTunnel",
+ "star": 242,
+ "commits": 15,
+ "modify_time": "2019-03-06 04:26:03",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/PAGalaxyLab/uniFuzzer",
+ "star": 242,
+ "commits": 5,
+ "modify_time": "2019-08-23 03:24:52",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/revng/revng",
+ "star": 242,
+ "commits": 593,
+ "modify_time": "2019-02-19 17:23:29",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/xcsh/unity-game-hacking",
+ "star": 242,
+ "commits": 10,
+ "modify_time": "2018-12-17 16:34:56",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/tdifg/webshell",
+ "star": 242,
+ "commits": 14,
+ "modify_time": "2016-09-14 02:05:04",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/rvn0xsy/nse_vuln",
+ "star": 242,
+ "commits": 16,
+ "modify_time": "2019-05-07 04:33:06",
+ "last_release": "",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/nirvik/iwant",
+ "star": 242,
+ "commits": 204,
+ "modify_time": "2018-02-19 19:27:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/netspi/goddi",
+ "star": 242,
+ "commits": 18,
+ "modify_time": "2018-08-16 16:15:36",
+ "last_release": "v1.2",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/minhnhat93/tf-sndcgan",
+ "star": 242,
+ "commits": 16,
+ "modify_time": "2017-09-25 00:55:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/meeloo/xspray",
+ "star": 242,
+ "commits": 117,
+ "modify_time": "2015-06-30 07:57:18",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/mazen160/bfac",
+ "star": 242,
+ "commits": 50,
+ "modify_time": "2019-03-31 02:48:32",
+ "last_release": "v1.4",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/llvm-mirror/compiler-rt",
+ "star": 242,
+ "commits": 12226,
+ "modify_time": "2019-10-22 08:44:25",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/lionsec/wifresti",
+ "star": 242,
+ "commits": 31,
+ "modify_time": "2019-04-29 00:17:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jephthai/openpasswordfilter",
+ "star": 242,
+ "commits": 34,
+ "modify_time": "2018-02-13 15:08:30",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/h0nus/roguesploit",
+ "star": 242,
+ "commits": 121,
+ "modify_time": "2017-09-01 21:15:22",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/cujanovic/open-redirect-payloads",
+ "star": 242,
+ "commits": 44,
+ "modify_time": "2019-11-13 15:24:22",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/croqaz/awesome-decentralized",
+ "star": 242,
+ "commits": 42,
+ "modify_time": "2019-10-31 23:03:55",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/c0ny1/passive-scan-client",
+ "star": 242,
+ "commits": 15,
+ "modify_time": "2019-10-05 14:08:08",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/atexio/mercure",
+ "star": 242,
+ "commits": 418,
+ "modify_time": "2019-09-25 19:33:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/Hippolot/anevicon",
+ "star": 241,
+ "commits": 987,
+ "modify_time": "2019-12-03 13:13:33",
+ "last_release": "v7.0.9",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/zigoo0/webpwn3r",
+ "star": 241,
+ "commits": 35,
+ "modify_time": "2014-05-21 01:02:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/we11cheng/wcshadowrocket",
+ "star": 241,
+ "commits": 53,
+ "modify_time": "2019-06-17 02:53:14",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/smaffer/vgax",
+ "star": 241,
+ "commits": 43,
+ "modify_time": "2019-05-18 08:41:34",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/shiltemann/ctf-writeups-public",
+ "star": 241,
+ "commits": 536,
+ "modify_time": "2018-12-02 07:51:28",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/owasp/dvsa",
+ "star": 241,
+ "commits": 225,
+ "modify_time": "2019-09-15 21:52:33",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/openstack/syntribos",
+ "star": 241,
+ "commits": 587,
+ "modify_time": "2019-04-19 19:36:33",
+ "last_release": "\n 0.5.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/leonardonve/dns2proxy",
+ "star": 241,
+ "commits": 47,
+ "modify_time": "2018-01-01 10:15:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kinimiwar/penetration-testing",
+ "star": 241,
+ "commits": 8,
+ "modify_time": "2018-06-19 22:40:06",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/hgascon/pulsar",
+ "star": 241,
+ "commits": 42,
+ "modify_time": "2018-10-04 19:48:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/compsec-snu/razzer",
+ "star": 241,
+ "commits": 17,
+ "modify_time": "2019-07-10 00:22:57",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/astsam/rtl8812au",
+ "star": 241,
+ "commits": 49,
+ "modify_time": "2017-03-23 18:12:09",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://bitbucket.org/psiphon/psiphon-circumvention-system",
+ "star": 241,
+ "commits": null,
+ "modify_time": "2019-02-13 23:12:17.642000",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/mattcg/socks5-http-client",
+ "star": 240,
+ "commits": 56,
+ "modify_time": "2019-09-19 07:21:13",
+ "last_release": "\n v1.0.4\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/crytic/evm-opcodes",
+ "star": 240,
+ "commits": 13,
+ "modify_time": "2019-07-17 15:38:45",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/woxihuannisja/bangcle",
+ "star": 240,
+ "commits": 36,
+ "modify_time": "2018-08-01 13:03:12",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/sticktron/g0blin",
+ "star": 240,
+ "commits": 290,
+ "modify_time": "2018-03-10 15:37:53",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/samsung/jalangi2",
+ "star": 240,
+ "commits": 311,
+ "modify_time": "2017-04-05 06:26:15",
+ "last_release": "\n v0.2.5\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/rastating/joomlavs",
+ "star": 240,
+ "commits": 254,
+ "modify_time": "2018-07-05 23:21:07",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/petercunha/jenkins-rce",
+ "star": 240,
+ "commits": 9,
+ "modify_time": "2019-06-10 06:57:57",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/pcbje/gransk",
+ "star": 240,
+ "commits": 66,
+ "modify_time": "2017-01-07 09:43:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/myetherwallet/ethereum-lists",
+ "star": 240,
+ "commits": 2939,
+ "modify_time": "2019-12-06 22:08:42",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/mstfknn/malware-sample-library",
+ "star": 240,
+ "commits": 27,
+ "modify_time": "2019-04-24 10:44:13",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/mez0cc/ms17-010-python",
+ "star": 240,
+ "commits": 38,
+ "modify_time": "2019-11-21 08:56:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mandatoryprogrammer/trusttrees",
+ "star": 240,
+ "commits": 83,
+ "modify_time": "2019-11-30 05:47:59",
+ "last_release": "\n v2.0.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/limneos/mobileminer",
+ "star": 240,
+ "commits": 129,
+ "modify_time": "2017-12-28 10:02:11",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/kwart/jd-cmd",
+ "star": 240,
+ "commits": 86,
+ "modify_time": "2019-10-07 09:42:42",
+ "last_release": "jd-cmd-1.0.0.Final",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/jas502n/0day-security-software-vulnerability-analysis-technology",
+ "star": 240,
+ "commits": 4,
+ "modify_time": "2018-03-07 15:00:55",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/intrepidusgroup/mallory",
+ "star": 240,
+ "commits": 110,
+ "modify_time": "2016-06-22 14:25:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/g0tmi1k/debian-ssh",
+ "star": 240,
+ "commits": 8,
+ "modify_time": "2017-04-24 14:16:53",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/exodusintel/cve-2019-5786",
+ "star": 240,
+ "commits": 1,
+ "modify_time": "2019-03-20 18:47:23",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/essandess/macos-fortress",
+ "star": 240,
+ "commits": 211,
+ "modify_time": "2019-12-08 13:22:23",
+ "last_release": "V2.0",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/dafthack/hostrecon",
+ "star": 240,
+ "commits": 19,
+ "modify_time": "2017-10-03 13:28:12",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/clinicallyinane/shellcode_launcher",
+ "star": 240,
+ "commits": 5,
+ "modify_time": "2014-02-16 01:22:49",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/a3sal0n/falcongate",
+ "star": 240,
+ "commits": 304,
+ "modify_time": "2019-10-28 12:54:49",
+ "last_release": "v.2.1.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zhuhaow/libnekit",
+ "star": 239,
+ "commits": 690,
+ "modify_time": "2018-10-10 16:01:11",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/beeware/bugjar",
+ "star": 239,
+ "commits": 51,
+ "modify_time": "2019-05-07 14:40:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xhujoy/pysc2-agents",
+ "star": 239,
+ "commits": 26,
+ "modify_time": "2017-11-08 05:55:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/und3rf10w/aggressor-scripts",
+ "star": 239,
+ "commits": 123,
+ "modify_time": "2017-08-24 17:07:38",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/sc1341/instagramosint",
+ "star": 239,
+ "commits": 18,
+ "modify_time": "2019-10-23 01:44:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/psecio/versionscan",
+ "star": 239,
+ "commits": 146,
+ "modify_time": "2019-11-04 18:07:28",
+ "last_release": "\n 1.5.4\n ",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/panagiks/rspet",
+ "star": 239,
+ "commits": 263,
+ "modify_time": "2017-10-14 05:14:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nettitude/prowl",
+ "star": 239,
+ "commits": 196,
+ "modify_time": "2018-06-08 10:02:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kframework/evm-semantics",
+ "star": 239,
+ "commits": 2000,
+ "modify_time": "2019-12-07 02:07:43",
+ "last_release": "\n vsc\n ",
+ "lang": "Makefile"
+ },
+ {
+ "link": "https://github.com/facebook/ds2",
+ "star": 239,
+ "commits": 1670,
+ "modify_time": "2019-07-17 14:50:46",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/epickrram/grav",
+ "star": 239,
+ "commits": 114,
+ "modify_time": "2019-02-19 20:50:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/egebalci/egesploit",
+ "star": 239,
+ "commits": 23,
+ "modify_time": "2017-01-26 13:09:35",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/delight-im/php-privacypolicy",
+ "star": 239,
+ "commits": 86,
+ "modify_time": "2019-02-20 23:39:35",
+ "last_release": "\n v2.0.1\n ",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/battelle/sandsifter",
+ "star": 239,
+ "commits": 2,
+ "modify_time": "2017-09-06 03:21:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/avatartwo/avatar2",
+ "star": 239,
+ "commits": 295,
+ "modify_time": "2019-11-28 19:14:54",
+ "last_release": "\n v1.3.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jpillora/ipfilter",
+ "star": 238,
+ "commits": 28,
+ "modify_time": "2019-09-08 07:28:47",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/zerosum0x0/defcon-25-workshop",
+ "star": 238,
+ "commits": 8,
+ "modify_time": "2017-07-31 07:21:13",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/preempt/credssp",
+ "star": 238,
+ "commits": 21,
+ "modify_time": "2018-06-02 10:33:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pe3zx/my-infosec-awesome",
+ "star": 238,
+ "commits": 852,
+ "modify_time": "2019-12-04 12:17:46",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/nickstadb/serializationdumper",
+ "star": 238,
+ "commits": 11,
+ "modify_time": "2019-10-11 10:45:22",
+ "last_release": "1.1",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/matthewclarkmay/geoip-attack-map",
+ "star": 238,
+ "commits": 56,
+ "modify_time": "2018-08-15 01:13:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jethrogb/uefireverse",
+ "star": 238,
+ "commits": 11,
+ "modify_time": "2016-03-24 17:53:39",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jduck/asus-cmd",
+ "star": 238,
+ "commits": 36,
+ "modify_time": "2015-03-16 14:35:10",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ikarienator/phantomjs_hide_and_seek",
+ "star": 238,
+ "commits": 21,
+ "modify_time": "2015-10-08 18:21:40",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/frenchyeti/dexcalibur",
+ "star": 238,
+ "commits": 244,
+ "modify_time": "2019-12-04 07:50:06",
+ "last_release": "V0.6.1",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/ata4/bspsrc",
+ "star": 238,
+ "commits": 478,
+ "modify_time": "2019-10-26 21:57:03",
+ "last_release": "v1.3.24",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/a13xp0p0v/kconfig-hardened-check",
+ "star": 238,
+ "commits": 188,
+ "modify_time": "2019-12-02 14:23:57",
+ "last_release": "\n v0.5.3\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tencent/qt4a",
+ "star": 237,
+ "commits": 198,
+ "modify_time": "2019-12-05 11:58:00",
+ "last_release": "v2.2.65",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pyhackertarget/hackertarget",
+ "star": 237,
+ "commits": 25,
+ "modify_time": "2019-11-20 13:18:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/trustedsec/tap",
+ "star": 237,
+ "commits": 36,
+ "modify_time": "2017-01-04 00:35:47",
+ "last_release": "\n 1.3.3\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/timlib/webxray",
+ "star": 237,
+ "commits": 110,
+ "modify_time": "2019-10-31 20:37:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/samlraider/samlraider",
+ "star": 237,
+ "commits": 67,
+ "modify_time": "2019-10-13 19:29:40",
+ "last_release": "v1.2.3",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/pomerium/awesome-zero-trust",
+ "star": 237,
+ "commits": 6,
+ "modify_time": "2019-11-20 18:20:03",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/nahamsec/hostilesubbruteforcer",
+ "star": 237,
+ "commits": 30,
+ "modify_time": "2017-07-18 09:58:56",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/microsoft/aaronlocker",
+ "star": 237,
+ "commits": 26,
+ "modify_time": "2019-08-01 13:00:12",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/inforion/idapython-cheatsheet",
+ "star": 237,
+ "commits": 10,
+ "modify_time": "2019-12-03 00:23:03",
+ "last_release": "pdf",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/harmoc/ctftools",
+ "star": 237,
+ "commits": 19,
+ "modify_time": "2019-03-28 15:50:00",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/hackademix/noscript",
+ "star": 237,
+ "commits": 546,
+ "modify_time": "2019-12-10 03:16:49",
+ "last_release": "11.0.10rc1",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/geosn0w/osirisjailbreak12",
+ "star": 237,
+ "commits": null,
+ "modify_time": "2019-01-31 19:43:21",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ftramer/steal-ml",
+ "star": 237,
+ "commits": 6,
+ "modify_time": "2016-07-29 08:33:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ele7enxxh/android-afl",
+ "star": 237,
+ "commits": 32,
+ "modify_time": "2017-08-02 09:22:35",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/danleh/wasabi",
+ "star": 237,
+ "commits": 956,
+ "modify_time": "2019-11-14 13:54:55",
+ "last_release": "",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/damellis/cellphone2",
+ "star": 237,
+ "commits": 70,
+ "modify_time": "2016-08-01 19:33:58",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/daenerys-sre/source",
+ "star": 237,
+ "commits": 4,
+ "modify_time": "2019-04-01 14:14:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cujanovic/markdown-xss-payloads",
+ "star": 237,
+ "commits": 16,
+ "modify_time": "2019-09-02 12:49:50",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/cuckoosandbox/community",
+ "star": 237,
+ "commits": 1249,
+ "modify_time": "2019-06-12 18:52:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/consensys/surya",
+ "star": 237,
+ "commits": 93,
+ "modify_time": "2019-08-22 20:03:25",
+ "last_release": "\n v0.2.11\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/bet4it/hyperpwn",
+ "star": 237,
+ "commits": 27,
+ "modify_time": "2019-11-14 08:34:17",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/arno0x/wsc2",
+ "star": 237,
+ "commits": 5,
+ "modify_time": "2017-11-24 15:47:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zyfworks/anothersteamcommunityfix",
+ "star": 236,
+ "commits": 18,
+ "modify_time": "2018-03-25 17:28:47",
+ "last_release": "1.2.2",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/r3x/how2kernel",
+ "star": 236,
+ "commits": 81,
+ "modify_time": "2019-01-23 11:48:58",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cylance/CyBot",
+ "star": 236,
+ "commits": 79,
+ "modify_time": "2019-09-17 18:31:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/brad-sp/cuckoo-modified",
+ "star": 236,
+ "commits": 4956,
+ "modify_time": "2019-09-09 15:48:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/w0lfschild/macos_headers",
+ "star": 236,
+ "commits": 101,
+ "modify_time": "2019-12-07 00:49:15",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/strivexjun/xantidebug",
+ "star": 236,
+ "commits": 6,
+ "modify_time": "2019-05-11 07:58:40",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/softethervpn/win10pcap",
+ "star": 236,
+ "commits": 2,
+ "modify_time": "2015-10-08 03:35:22",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/pellegre/libcrafter",
+ "star": 236,
+ "commits": 304,
+ "modify_time": "2017-10-19 10:24:28",
+ "last_release": "\n version-0.3\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/nozaq/terraform-aws-secure-baseline",
+ "star": 236,
+ "commits": 168,
+ "modify_time": "2019-12-08 21:07:29",
+ "last_release": "\n 0.16.2\n ",
+ "lang": "HCL"
+ },
+ {
+ "link": "https://github.com/nccgroup/shocker",
+ "star": 236,
+ "commits": 63,
+ "modify_time": "2018-06-11 06:29:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/martinzhou2015/srcms",
+ "star": 236,
+ "commits": 68,
+ "modify_time": "2019-10-11 12:05:38",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/kubo/plthook",
+ "star": 236,
+ "commits": 79,
+ "modify_time": "2019-11-17 23:29:33",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/fardog/secureoperator",
+ "star": 236,
+ "commits": 49,
+ "modify_time": "2019-01-01 20:05:12",
+ "last_release": "v4.1.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/duoergun0729/2book",
+ "star": 236,
+ "commits": 182,
+ "modify_time": "2019-01-28 07:37:10",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/conix-security/zer0m0n",
+ "star": 236,
+ "commits": 95,
+ "modify_time": "2014-09-05 07:52:51",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cmu-sei/scale",
+ "star": 235,
+ "commits": 17,
+ "modify_time": "2019-11-14 23:15:37",
+ "last_release": "2.1.5.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/shadowsocksr-live/ishadowsocksr",
+ "star": 235,
+ "commits": 265,
+ "modify_time": "2019-09-03 12:43:48",
+ "last_release": "\n 1.5.0\n ",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/FSecureLABS/SharpGPOAbuse",
+ "star": 235,
+ "commits": 24,
+ "modify_time": "2019-08-21 10:28:43",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/3summer/CTF-RSA-tool",
+ "star": 235,
+ "commits": 28,
+ "modify_time": "2018-08-26 09:17:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xen0ph0n/yaragenerator",
+ "star": 235,
+ "commits": 64,
+ "modify_time": "2013-08-29 15:31:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/withdk/badusb2-mitm-poc",
+ "star": 235,
+ "commits": 5,
+ "modify_time": "2016-06-21 10:50:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wbenny/ia32-doc",
+ "star": 235,
+ "commits": 49,
+ "modify_time": "2019-11-11 01:36:47",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/tyranid/exploitremotingservice",
+ "star": 235,
+ "commits": 22,
+ "modify_time": "2019-11-06 08:08:52",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/nccgroup/burpsuiteloggerplusplus",
+ "star": 235,
+ "commits": 137,
+ "modify_time": "2018-07-25 11:57:31",
+ "last_release": "v3.12-beta",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/mwielgoszewski/python-paddingoracle",
+ "star": 235,
+ "commits": 35,
+ "modify_time": "2016-02-09 13:18:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/holyvier/prototype-pollution-nsec18",
+ "star": 235,
+ "commits": 5,
+ "modify_time": "2018-10-31 20:39:42",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/gocaio/goca",
+ "star": 235,
+ "commits": 96,
+ "modify_time": "2019-04-21 11:28:22",
+ "last_release": "v0.2.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/evait-security/weeman",
+ "star": 235,
+ "commits": 6,
+ "modify_time": "2017-08-30 14:57:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/edoverflow/bugbountyguide",
+ "star": 235,
+ "commits": 58,
+ "modify_time": "2019-11-06 11:46:18",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/cryin/javaid",
+ "star": 235,
+ "commits": 26,
+ "modify_time": "2019-02-18 08:16:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/codeinthehole/purl",
+ "star": 235,
+ "commits": 182,
+ "modify_time": "2019-03-10 21:09:04",
+ "last_release": "\n 1.5\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/airbus-seclab/ilo4_toolbox",
+ "star": 235,
+ "commits": 33,
+ "modify_time": "2019-03-25 14:59:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/adamyordan/cve-2019-1003000-jenkins-rce-poc",
+ "star": 235,
+ "commits": 5,
+ "modify_time": "2019-02-19 13:12:38",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/hak5/packetsquirrel-payloads",
+ "star": 234,
+ "commits": 45,
+ "modify_time": "2019-07-22 01:18:13",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/xenocoderce/neo-confuserex",
+ "star": 234,
+ "commits": 480,
+ "modify_time": "2019-12-01 17:24:30",
+ "last_release": "v1.0.0",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/weichx/cerialize",
+ "star": 234,
+ "commits": 117,
+ "modify_time": "2018-02-03 22:52:26",
+ "last_release": "",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/reisyukaku/reinand",
+ "star": 234,
+ "commits": 73,
+ "modify_time": "2019-01-06 19:57:53",
+ "last_release": "v5.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/pyana/pyana",
+ "star": 234,
+ "commits": 29,
+ "modify_time": "2016-02-16 03:53:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jrevels/cassette.jl",
+ "star": 234,
+ "commits": 546,
+ "modify_time": "2019-11-20 17:02:50",
+ "last_release": "v0.2.6",
+ "lang": "Julia"
+ },
+ {
+ "link": "https://github.com/invoke-ir/uproot",
+ "star": 234,
+ "commits": 139,
+ "modify_time": "2016-02-23 03:05:54",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/hahwul/droid-hunter",
+ "star": 234,
+ "commits": 48,
+ "modify_time": "2018-11-06 16:26:37",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/grant-h/qu1ckr00t",
+ "star": 234,
+ "commits": 4,
+ "modify_time": "2019-10-15 21:17:31",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/fabric8io/fluent-plugin-kubernetes_metadata_filter",
+ "star": 234,
+ "commits": 213,
+ "modify_time": "2019-12-09 18:40:56",
+ "last_release": "v2.4.1",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/difcareer/sqlmap4burp",
+ "star": 234,
+ "commits": 13,
+ "modify_time": "2018-08-15 03:36:32",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/didi/kemon",
+ "star": 234,
+ "commits": 24,
+ "modify_time": "2019-11-06 21:09:41",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cliqz-oss/local-sheriff",
+ "star": 234,
+ "commits": 61,
+ "modify_time": "2019-05-13 10:58:35",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/adastra-thw/pyhacks",
+ "star": 234,
+ "commits": 28,
+ "modify_time": "2014-03-11 20:21:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wizardforcel/web-hacking-101-zh",
+ "star": 233,
+ "commits": 59,
+ "modify_time": "2017-10-19 08:17:03",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/robotattackorg/robot-detect",
+ "star": 233,
+ "commits": 17,
+ "modify_time": "2018-04-02 16:21:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/patois/dsync",
+ "star": 233,
+ "commits": 16,
+ "modify_time": "2019-05-30 12:22:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/palantir/alerting-detection-strategy-framework",
+ "star": 233,
+ "commits": 4,
+ "modify_time": "2017-12-19 19:53:38",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/nethunteros/punter",
+ "star": 233,
+ "commits": 45,
+ "modify_time": "2019-02-07 03:10:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/maaaaz/nmaptocsv",
+ "star": 233,
+ "commits": 36,
+ "modify_time": "2019-06-13 21:44:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/larsbrinkhoff/httptunnel",
+ "star": 233,
+ "commits": 23,
+ "modify_time": "2018-01-18 18:46:58",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/google/password-alert",
+ "star": 233,
+ "commits": 253,
+ "modify_time": "2018-02-28 19:47:30",
+ "last_release": "v0.91.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/gilligan/vim-lldb",
+ "star": 233,
+ "commits": 19,
+ "modify_time": "2019-10-24 20:16:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cffi/cffi",
+ "star": 233,
+ "commits": 1166,
+ "modify_time": "2019-12-08 01:14:21",
+ "last_release": "\n v0.20.1\n ",
+ "lang": "Common Lisp"
+ },
+ {
+ "link": "https://github.com/apuigsech/seekret",
+ "star": 233,
+ "commits": 53,
+ "modify_time": "2019-11-14 11:00:23",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/yifengyou/The-design-and-implementation-of-a-64-bit-os",
+ "star": 232,
+ "commits": 8,
+ "modify_time": "2019-10-10 12:09:57",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/zt2/sqli-hunter",
+ "star": 232,
+ "commits": 55,
+ "modify_time": "2019-10-24 17:33:29",
+ "last_release": "\n 1.1.3\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/sztupy/luadec51",
+ "star": 232,
+ "commits": 13,
+ "modify_time": "2014-12-04 22:23:00",
+ "last_release": "v2.0.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/smaash/quasibot",
+ "star": 232,
+ "commits": 76,
+ "modify_time": "2015-02-02 19:16:29",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/richkmeli/richkware",
+ "star": 232,
+ "commits": 157,
+ "modify_time": "2019-10-03 16:10:19",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/masterzen/winrm",
+ "star": 232,
+ "commits": 130,
+ "modify_time": "2019-03-08 15:37:35",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/markjandrews/wrk-v1.2",
+ "star": 232,
+ "commits": null,
+ "modify_time": "2016-05-21 12:07:10",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/icsharpcode/avaloniailspy",
+ "star": 232,
+ "commits": 159,
+ "modify_time": "2019-11-26 08:38:53",
+ "last_release": "v4.0-rc2",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/grandideastudio/jtagulator",
+ "star": 232,
+ "commits": 159,
+ "modify_time": "2019-10-16 01:07:32",
+ "last_release": "\n 1.6\n ",
+ "lang": "Propeller Spin"
+ },
+ {
+ "link": "https://github.com/fireeye/simplifygraph",
+ "star": 232,
+ "commits": 11,
+ "modify_time": "2018-01-29 17:54:13",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/firebug/firebug.next",
+ "star": 232,
+ "commits": 1760,
+ "modify_time": "2016-06-08 13:10:25",
+ "last_release": "firebug-3.0.0-beta.3",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/dexpatcher/dexpatcher-tool",
+ "star": 232,
+ "commits": 468,
+ "modify_time": "2019-12-03 07:23:21",
+ "last_release": "v1.8.0-alpha3",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/devnoname120/vhbb",
+ "star": 232,
+ "commits": 364,
+ "modify_time": "2019-08-02 01:21:12",
+ "last_release": "0.91",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/d33tah/call-for-wpa3",
+ "star": 232,
+ "commits": 14,
+ "modify_time": "2017-10-29 23:45:02",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/cr0hn/nosqlinjection_wordlists",
+ "star": 232,
+ "commits": 11,
+ "modify_time": "2019-06-27 08:59:08",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/canbus-triple/canbus-triple",
+ "star": 232,
+ "commits": 150,
+ "modify_time": "2016-09-08 01:35:47",
+ "last_release": "\n 0.4.4\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/boy-hack/airbug",
+ "star": 232,
+ "commits": 67,
+ "modify_time": "2019-09-26 12:59:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nicehash/excavator",
+ "star": 231,
+ "commits": 114,
+ "modify_time": "2019-02-17 20:02:00",
+ "last_release": "v1.5.15a",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/badd1e/disclosures",
+ "star": 231,
+ "commits": 4,
+ "modify_time": "2019-11-10 12:35:20",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/dependency-check/dependency-check-sonar-plugin",
+ "star": 231,
+ "commits": 312,
+ "modify_time": "2019-12-05 15:11:56",
+ "last_release": "1.2.6",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/wesleyraptor/streamingphish",
+ "star": 231,
+ "commits": 18,
+ "modify_time": "2018-08-28 19:18:32",
+ "last_release": "",
+ "lang": "Jupyter Notebook"
+ },
+ {
+ "link": "https://github.com/utds3lab/multiverse",
+ "star": 231,
+ "commits": 98,
+ "modify_time": "2018-05-17 01:28:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/thrdev/socks5",
+ "star": 231,
+ "commits": 86,
+ "modify_time": "2017-06-09 00:37:17",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/thisislibra/androidprojectcreator",
+ "star": 231,
+ "commits": 13,
+ "modify_time": "2019-08-08 22:07:53",
+ "last_release": "1.3-stable",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/silentbreaksec/throwback",
+ "star": 231,
+ "commits": 7,
+ "modify_time": "2017-08-25 16:49:11",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/nccgroup/metasploitavevasion",
+ "star": 231,
+ "commits": 29,
+ "modify_time": "2015-12-22 08:05:00",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/mongodb-labs/disasm",
+ "star": 231,
+ "commits": 231,
+ "modify_time": "2016-11-04 22:00:24",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/linuz/sticky-keys-slayer",
+ "star": 231,
+ "commits": 19,
+ "modify_time": "2018-03-16 15:59:40",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/james91b/ida_ipython",
+ "star": 231,
+ "commits": 88,
+ "modify_time": "2017-08-05 19:54:29",
+ "last_release": "0.5",
+ "lang": "Jupyter Notebook"
+ },
+ {
+ "link": "https://github.com/ionescu007/simpleator",
+ "star": 231,
+ "commits": 5,
+ "modify_time": "2018-12-10 22:48:56",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/hardenedlinux/grsecurity-101-tutorials",
+ "star": 231,
+ "commits": 187,
+ "modify_time": "2018-01-08 05:01:51",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/fransr/bountyplz",
+ "star": 231,
+ "commits": 16,
+ "modify_time": "2019-05-10 07:28:07",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/evilmog/ntlmv1-multi",
+ "star": 231,
+ "commits": 37,
+ "modify_time": "2019-09-24 22:00:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/euphrat1ca/security_w1k1",
+ "star": 231,
+ "commits": 204,
+ "modify_time": "2019-12-10 05:59:33",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/battelle/movfuscator",
+ "star": 231,
+ "commits": 44,
+ "modify_time": "2018-01-10 11:23:45",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/googleprojectzero/bochspwn-reloaded",
+ "star": 230,
+ "commits": 7,
+ "modify_time": "2019-02-24 10:41:30",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/shchmue/lockpick_rcm",
+ "star": 230,
+ "commits": 73,
+ "modify_time": "2019-12-09 19:56:16",
+ "last_release": "v1.8.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/s3jensen/iret",
+ "star": 230,
+ "commits": 31,
+ "modify_time": "2014-11-24 02:43:27",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/rsmudge/elevatekit",
+ "star": 230,
+ "commits": 11,
+ "modify_time": "2019-12-05 10:44:50",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/rootup/bfuzz",
+ "star": 230,
+ "commits": 59,
+ "modify_time": "2019-07-14 05:54:09",
+ "last_release": "Beta1.4",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/omriiluz/nrf24-btle-decoder",
+ "star": 230,
+ "commits": 19,
+ "modify_time": "2017-02-03 05:38:13",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/nickcano/xenoscan",
+ "star": 230,
+ "commits": 80,
+ "modify_time": "2018-06-06 04:36:25",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/miriamxyra/eventlist",
+ "star": 230,
+ "commits": 30,
+ "modify_time": "2019-10-22 10:09:16",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/malwares/crypter",
+ "star": 230,
+ "commits": 5,
+ "modify_time": "2016-12-28 02:31:44",
+ "last_release": "",
+ "lang": "Visual Basic .NET"
+ },
+ {
+ "link": "https://github.com/ctz/cifra",
+ "star": 230,
+ "commits": 271,
+ "modify_time": "2019-04-29 18:47:32",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/commonsguy/cwac-netsecurity",
+ "star": 230,
+ "commits": 129,
+ "modify_time": "2019-10-12 12:01:47",
+ "last_release": "\n v0.5.0\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/brendangregg/heatmap",
+ "star": 230,
+ "commits": 20,
+ "modify_time": "2017-02-24 21:57:43",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/beaengine/beaengine",
+ "star": 230,
+ "commits": 403,
+ "modify_time": "2019-08-10 21:19:59",
+ "last_release": "v5.0-beta3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/audibleblink/doxycannon",
+ "star": 230,
+ "commits": null,
+ "modify_time": "2018-10-10 01:51:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/iceonsun/rsock",
+ "star": 229,
+ "commits": 36,
+ "modify_time": "2018-06-13 07:38:02",
+ "last_release": "v2.0.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/xxxyanchenxxx/virtualappex",
+ "star": 229,
+ "commits": 8,
+ "modify_time": "2018-10-10 09:59:11",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/varchashva/letsmapyournetwork",
+ "star": 229,
+ "commits": 89,
+ "modify_time": "2019-08-20 08:56:04",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/uliwitness/ulikit",
+ "star": 229,
+ "commits": 201,
+ "modify_time": "2019-05-05 08:43:19",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/squonk42/tl-wr703n",
+ "star": 229,
+ "commits": 29,
+ "modify_time": "2014-06-04 21:33:39",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/microsoft/windbg-samples",
+ "star": 229,
+ "commits": 36,
+ "modify_time": "2019-03-22 22:40:34",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/mdsecactivebreach/rdpinception",
+ "star": 229,
+ "commits": 5,
+ "modify_time": "2017-06-29 16:56:38",
+ "last_release": "",
+ "lang": "Batchfile"
+ },
+ {
+ "link": "https://github.com/keesj/gomo",
+ "star": 229,
+ "commits": 3,
+ "modify_time": "2014-08-25 09:27:22",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/justasmasiulis/lazy_importer",
+ "star": 229,
+ "commits": 61,
+ "modify_time": "2019-08-17 12:42:57",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/fstarlang/kremlin",
+ "star": 229,
+ "commits": 2337,
+ "modify_time": "2019-12-10 03:19:30",
+ "last_release": "",
+ "lang": "OCaml"
+ },
+ {
+ "link": "https://github.com/elfmaster/libelfmaster",
+ "star": 229,
+ "commits": 51,
+ "modify_time": "2019-10-25 22:19:31",
+ "last_release": "Alpha-v0.5",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/danmcinerney/elite-proxy-finder",
+ "star": 229,
+ "commits": 51,
+ "modify_time": "2016-01-29 20:32:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/brainshave/ancient-oak",
+ "star": 229,
+ "commits": 140,
+ "modify_time": "2016-02-18 20:15:02",
+ "last_release": "\n 0.3.5\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/aplura/tango",
+ "star": 229,
+ "commits": 180,
+ "modify_time": "2018-10-18 19:00:17",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/amiller/honeybadgerbft",
+ "star": 229,
+ "commits": 15,
+ "modify_time": "2018-09-02 21:30:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/521xueweihan/shadowsocks-heroku",
+ "star": 229,
+ "commits": 1,
+ "modify_time": "2017-07-19 03:40:56",
+ "last_release": "",
+ "lang": "CoffeeScript"
+ },
+ {
+ "link": "https://github.com/aleenzz/php_bug_wiki",
+ "star": 228,
+ "commits": 9,
+ "modify_time": "2019-07-24 06:41:55",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/klsecservices/Invoke-Vnc",
+ "star": 228,
+ "commits": 5,
+ "modify_time": "2017-02-09 12:38:26",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/wwwg/wasmdec",
+ "star": 228,
+ "commits": 959,
+ "modify_time": "2018-11-29 14:37:16",
+ "last_release": "1.2.1",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/whitel1st/docem",
+ "star": 228,
+ "commits": 18,
+ "modify_time": "2019-09-24 11:03:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/webbreacher/whatsmyname",
+ "star": 228,
+ "commits": 388,
+ "modify_time": "2019-11-03 10:50:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vusec/ridl",
+ "star": 228,
+ "commits": 55,
+ "modify_time": "2019-11-13 19:13:12",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/trustedsec/spraywmi",
+ "star": 228,
+ "commits": 18,
+ "modify_time": "2015-11-24 15:13:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tishion/mmloader",
+ "star": 228,
+ "commits": 90,
+ "modify_time": "2019-08-22 02:46:46",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/stephenbradshaw/vulnserver",
+ "star": 228,
+ "commits": 4,
+ "modify_time": "2019-01-07 00:06:53",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/soarqin/finalhe",
+ "star": 228,
+ "commits": 162,
+ "modify_time": "2019-10-18 13:31:48",
+ "last_release": "v1.92",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/secrary/infectpe",
+ "star": 228,
+ "commits": 26,
+ "modify_time": "2017-04-26 20:03:30",
+ "last_release": "0.3",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/patrowl/patrowlmanager",
+ "star": 228,
+ "commits": 210,
+ "modify_time": "2019-12-06 11:22:29",
+ "last_release": "\n v1.1.1\n ",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/opsxcq/exploit-cve-2017-7494",
+ "star": 228,
+ "commits": 35,
+ "modify_time": "2017-09-09 20:00:42",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/maijin/workshop2015",
+ "star": 228,
+ "commits": 30,
+ "modify_time": "2015-09-04 20:24:24",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/leapsecurity/libssh-scanner",
+ "star": 228,
+ "commits": 31,
+ "modify_time": "2018-10-31 11:24:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/johnnykv/heralding",
+ "star": 228,
+ "commits": 1370,
+ "modify_time": "2019-10-12 20:06:29",
+ "last_release": "\n Release_1.0.6\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ivanvza/arpy",
+ "star": 228,
+ "commits": 6058,
+ "modify_time": "2019-03-29 17:50:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ikkisoft/serialkiller",
+ "star": 228,
+ "commits": 43,
+ "modify_time": "2018-03-30 23:59:12",
+ "last_release": "s0.4",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/honeynet/beeswarm",
+ "star": 228,
+ "commits": 1183,
+ "modify_time": "2019-03-13 10:42:57",
+ "last_release": "\n Release_0.7.18\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/frida/frida-gum",
+ "star": 228,
+ "commits": 4191,
+ "modify_time": "2019-12-10 05:15:46",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/fortunec00kie/bug-monitor",
+ "star": 228,
+ "commits": 9,
+ "modify_time": "2018-04-18 00:26:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/djhohnstein/sharpweb",
+ "star": 228,
+ "commits": 7,
+ "modify_time": "2018-08-13 22:07:02",
+ "last_release": "v1.2",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/constellation-app/constellation",
+ "star": 228,
+ "commits": 161,
+ "modify_time": "2019-12-09 04:34:44",
+ "last_release": "1.20191007.032635",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/cloudflare/xdpcap",
+ "star": 228,
+ "commits": 31,
+ "modify_time": "2019-11-16 10:39:47",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/anon-exploiter/sitebroker",
+ "star": 228,
+ "commits": 113,
+ "modify_time": "2019-10-12 19:06:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/adamdoupe/wackopicko",
+ "star": 228,
+ "commits": 24,
+ "modify_time": "2018-04-26 19:14:40",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/xyntax/badusb-code",
+ "star": 227,
+ "commits": 11,
+ "modify_time": "2016-11-01 11:08:44",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/wkz/ply",
+ "star": 227,
+ "commits": 322,
+ "modify_time": "2019-05-17 18:24:46",
+ "last_release": "2.1.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/trailofbits/secureenclavecrypto",
+ "star": 227,
+ "commits": 27,
+ "modify_time": "2017-03-14 14:20:36",
+ "last_release": "",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/tevora-threat/sharpview",
+ "star": 227,
+ "commits": 4,
+ "modify_time": "2018-11-29 20:32:08",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/t3ntman/social-engineering-payloads",
+ "star": 227,
+ "commits": 24,
+ "modify_time": "2017-10-19 21:05:55",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/stevenaldinger/decker",
+ "star": 227,
+ "commits": 64,
+ "modify_time": "2019-03-23 04:41:53",
+ "last_release": "\n 0.0.17\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/scrapy-plugins/scrapy-jsonrpc",
+ "star": 227,
+ "commits": 59,
+ "modify_time": "2017-03-21 18:06:02",
+ "last_release": "\n v0.3.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/requests/requests-ntlm",
+ "star": 227,
+ "commits": 140,
+ "modify_time": "2017-09-19 18:06:53",
+ "last_release": "v1.1.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/r00t-3xp10it/meterpreter_paranoid_mode-ssl",
+ "star": 227,
+ "commits": 137,
+ "modify_time": "2019-05-14 00:59:58",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/paradoxis/stegcracker",
+ "star": 227,
+ "commits": 48,
+ "modify_time": "2019-05-07 14:48:32",
+ "last_release": "\n v2.0.7\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mzfr/gtfo",
+ "star": 227,
+ "commits": 13,
+ "modify_time": "2019-12-02 17:33:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mazen160/struts-pwn_cve-2017-9805",
+ "star": 227,
+ "commits": 4,
+ "modify_time": "2017-10-17 14:55:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/leecher1337/ntvdmx64",
+ "star": 227,
+ "commits": 85,
+ "modify_time": "2019-10-08 22:45:04",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ipsn/go-libtor",
+ "star": 227,
+ "commits": 397,
+ "modify_time": "2019-12-10 01:05:29",
+ "last_release": "\n v1.0.135\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/dreamstalker/rehlds",
+ "star": 227,
+ "commits": 692,
+ "modify_time": "2019-09-21 18:58:01",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/dongdongshe/neuzz",
+ "star": 227,
+ "commits": 39,
+ "modify_time": "2019-09-04 16:37:54",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/davidpepper/fierce-domain-scanner",
+ "star": 227,
+ "commits": 9,
+ "modify_time": "2017-01-17 12:34:27",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/calidog/certstream-python",
+ "star": 227,
+ "commits": 25,
+ "modify_time": "2019-02-14 15:29:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/automatingosint/osint_public",
+ "star": 227,
+ "commits": 39,
+ "modify_time": "2017-09-12 21:50:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/allfro/pymetasploit",
+ "star": 227,
+ "commits": 22,
+ "modify_time": "2015-10-07 19:24:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lanjelot/kb",
+ "star": 226,
+ "commits": 11,
+ "modify_time": "2018-10-10 20:55:37",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/praetorian-code/pyshell",
+ "star": 226,
+ "commits": 2,
+ "modify_time": "2016-09-26 19:42:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wmjonssen/centcount-analytics",
+ "star": 226,
+ "commits": 105,
+ "modify_time": "2019-04-18 16:22:16",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/volatilityfoundation/profiles",
+ "star": 226,
+ "commits": 125,
+ "modify_time": "2019-10-08 16:11:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/uber/focuson",
+ "star": 226,
+ "commits": 65,
+ "modify_time": "2017-04-20 15:54:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/trevp/tlslite",
+ "star": 226,
+ "commits": 410,
+ "modify_time": "2015-08-12 05:54:36",
+ "last_release": "\n v0.4.8\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/qtgate/qtgate-desktop-client",
+ "star": 226,
+ "commits": 302,
+ "modify_time": "2019-12-05 10:05:59",
+ "last_release": "v3.2.3",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/opennota/check",
+ "star": 226,
+ "commits": 70,
+ "modify_time": "2018-09-11 05:32:32",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/netxfly/sec_check",
+ "star": 226,
+ "commits": 3,
+ "modify_time": "2018-09-26 06:09:47",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/marekrei/sequence-labeler",
+ "star": 226,
+ "commits": 32,
+ "modify_time": "2018-11-02 13:18:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hood3drob1n/jsrat-py",
+ "star": 226,
+ "commits": 9,
+ "modify_time": "2016-05-05 13:37:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gamozolabs/mesos",
+ "star": 226,
+ "commits": 25,
+ "modify_time": "2019-06-10 18:45:18",
+ "last_release": "",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/elevenpaths/homepwn",
+ "star": 226,
+ "commits": 25,
+ "modify_time": "2019-12-04 09:57:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/duo-labs/isthislegit",
+ "star": 226,
+ "commits": 36,
+ "modify_time": "2019-08-21 19:02:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cpuu/awesome-fuzzing",
+ "star": 226,
+ "commits": 101,
+ "modify_time": "2019-10-29 06:13:14",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/brompwnie/botb",
+ "star": 226,
+ "commits": 29,
+ "modify_time": "2019-10-04 11:33:55",
+ "last_release": "1.5.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/blark/aiodnsbrute",
+ "star": 226,
+ "commits": 38,
+ "modify_time": "2019-06-04 19:40:42",
+ "last_release": "v0.3.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/alibaba/iossecaudit",
+ "star": 226,
+ "commits": 35,
+ "modify_time": "2017-06-15 06:43:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dustyfresh/php-vulnerability-audit-cheatsheet",
+ "star": 225,
+ "commits": 10,
+ "modify_time": "2018-07-08 15:51:56",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/pwnwiki/q",
+ "star": 225,
+ "commits": 70,
+ "modify_time": "2014-08-12 15:23:00",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/txthinking/blackwhite",
+ "star": 225,
+ "commits": 174,
+ "modify_time": "2019-11-29 09:28:13",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/ucsb-seclab/dr_checker",
+ "star": 225,
+ "commits": 137,
+ "modify_time": "2018-11-05 17:29:37",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/snar/bgpq3",
+ "star": 225,
+ "commits": 178,
+ "modify_time": "2019-11-08 08:41:40",
+ "last_release": "\n v0.1.35\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/sethsec/celerystalk",
+ "star": 225,
+ "commits": 357,
+ "modify_time": "2019-11-05 02:57:32",
+ "last_release": "v1.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/o-mg/demonseed",
+ "star": 225,
+ "commits": 46,
+ "modify_time": "2019-12-04 22:28:57",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/nccgroup/umap",
+ "star": 225,
+ "commits": 25,
+ "modify_time": "2014-07-29 10:10:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nanyomy/dht-woodworm",
+ "star": 225,
+ "commits": 8,
+ "modify_time": "2014-12-23 13:42:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/limneos/weak_classdump",
+ "star": 225,
+ "commits": 43,
+ "modify_time": "2014-11-02 21:13:11",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/jtmelton/appsensor",
+ "star": 225,
+ "commits": 1054,
+ "modify_time": "2019-08-06 20:39:24",
+ "last_release": "v2.3.3",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/jackeriss/email_my_pc",
+ "star": 225,
+ "commits": 45,
+ "modify_time": "2019-09-30 17:17:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fuzzysecurity/defcon25",
+ "star": 225,
+ "commits": 3,
+ "modify_time": "2017-07-30 00:40:12",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/eth0izzle/the-endorser",
+ "star": 225,
+ "commits": 13,
+ "modify_time": "2019-09-11 11:26:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/crowdstrike/automactc",
+ "star": 225,
+ "commits": 49,
+ "modify_time": "2019-10-01 19:17:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/chaitin/sqlchop",
+ "star": 225,
+ "commits": 7,
+ "modify_time": "2017-03-31 10:14:49",
+ "last_release": "v0.6.1",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/sethmlarson/virtualbox-python",
+ "star": 224,
+ "commits": 395,
+ "modify_time": "2019-04-03 13:12:29",
+ "last_release": "v2.0.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nowsecure/android-forensics",
+ "star": 224,
+ "commits": 6,
+ "modify_time": "2015-08-14 09:58:30",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/westpointltd/tls_prober",
+ "star": 224,
+ "commits": 281,
+ "modify_time": "2019-11-28 00:23:23",
+ "last_release": "\n v0.0.4\n ",
+ "lang": "GLSL"
+ },
+ {
+ "link": "https://github.com/semmle/securityexploits",
+ "star": 224,
+ "commits": 58,
+ "modify_time": "2019-08-16 01:27:18",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/rub-syssec/syntia",
+ "star": 224,
+ "commits": 14,
+ "modify_time": "2018-02-11 18:51:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rub-nds/corstest",
+ "star": 224,
+ "commits": 7,
+ "modify_time": "2019-07-04 17:51:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ripsscanner/rips",
+ "star": 224,
+ "commits": 7,
+ "modify_time": "2016-05-21 21:54:33",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/myriadrf/limesdr-usb",
+ "star": 224,
+ "commits": 20,
+ "modify_time": "2019-06-26 12:48:41",
+ "last_release": "",
+ "lang": "ANTLR"
+ },
+ {
+ "link": "https://github.com/libyal/libfvde",
+ "star": 224,
+ "commits": 137,
+ "modify_time": "2019-11-07 06:30:40",
+ "last_release": "20191104",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/kmyk/online-judge-tools",
+ "star": 224,
+ "commits": 1250,
+ "modify_time": "2019-12-05 15:28:35",
+ "last_release": "v7.4.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jamesturk/django-honeypot",
+ "star": 224,
+ "commits": 92,
+ "modify_time": "2019-12-02 14:42:04",
+ "last_release": "\n 0.7.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/edoverflow/megplus",
+ "star": 224,
+ "commits": 74,
+ "modify_time": "2018-10-14 09:37:44",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/cyberreboot/poseidon",
+ "star": 224,
+ "commits": 4317,
+ "modify_time": "2019-12-09 17:03:37",
+ "last_release": "v0.8.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cuckoosandbox/monitor",
+ "star": 224,
+ "commits": 1161,
+ "modify_time": "2018-08-27 11:23:50",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/ctfs/write-ups-2018",
+ "star": 224,
+ "commits": 26,
+ "modify_time": "2018-08-04 17:26:37",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/az0ne/github_nuggests",
+ "star": 224,
+ "commits": 3,
+ "modify_time": "2016-12-10 01:49:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/aszone/avenger-sh",
+ "star": 224,
+ "commits": 37,
+ "modify_time": "2017-06-02 04:50:47",
+ "last_release": "v0.2.4",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/9b/chirp",
+ "star": 224,
+ "commits": 34,
+ "modify_time": "2018-06-12 05:38:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/0xalexei/infiltrate2019",
+ "star": 224,
+ "commits": 15,
+ "modify_time": "2019-05-14 18:49:24",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/BoomerangDecompiler/boomerang",
+ "star": 223,
+ "commits": 5588,
+ "modify_time": "2019-11-15 19:09:15",
+ "last_release": "v0.5.1",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/virb3/trustmealready",
+ "star": 223,
+ "commits": 16,
+ "modify_time": "2019-09-23 19:46:51",
+ "last_release": "v1.11",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/vedhavyas/zwfp",
+ "star": 223,
+ "commits": 20,
+ "modify_time": "2018-04-13 11:12:51",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/thinkst/canarytokens-docker",
+ "star": 223,
+ "commits": 49,
+ "modify_time": "2019-10-30 16:53:38",
+ "last_release": "",
+ "lang": "Dockerfile"
+ },
+ {
+ "link": "https://github.com/strazzere/apkfuscator",
+ "star": 223,
+ "commits": 5,
+ "modify_time": "2016-03-24 05:43:14",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/secureworks/dalton",
+ "star": 223,
+ "commits": 447,
+ "modify_time": "2019-11-14 15:01:11",
+ "last_release": "v2.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/screetsec/sudomy",
+ "star": 223,
+ "commits": 89,
+ "modify_time": "2019-10-22 18:45:21",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/ruped24/toriptables2",
+ "star": 223,
+ "commits": 148,
+ "modify_time": "2019-06-15 05:56:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pavanw3b/sh00t",
+ "star": 223,
+ "commits": 201,
+ "modify_time": "2019-07-07 10:30:52",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/muquit/mailsend",
+ "star": 223,
+ "commits": 279,
+ "modify_time": "2019-02-12 00:21:58",
+ "last_release": "1.19",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/maroueneboubakri/lscan",
+ "star": 223,
+ "commits": 99,
+ "modify_time": "2018-06-02 21:03:31",
+ "last_release": "",
+ "lang": "Max"
+ },
+ {
+ "link": "https://github.com/ewilded/psychopath",
+ "star": 223,
+ "commits": 251,
+ "modify_time": "2018-07-24 08:37:49",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/equifox/ksdumper",
+ "star": 223,
+ "commits": 13,
+ "modify_time": "2019-02-18 01:54:42",
+ "last_release": "v1.1",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/dxa4481/snapper",
+ "star": 223,
+ "commits": 18,
+ "modify_time": "2016-08-05 07:46:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/daniel-nichter/hackmysql.com",
+ "star": 223,
+ "commits": 9,
+ "modify_time": "2019-01-26 21:09:06",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/cr0hn/vulnerable-node",
+ "star": 223,
+ "commits": 12,
+ "modify_time": "2019-06-27 08:59:28",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/caddyserver/forwardproxy",
+ "star": 223,
+ "commits": 43,
+ "modify_time": "2019-10-02 19:52:48",
+ "last_release": "1.0.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/brent-stone/can_reverse_engineering",
+ "star": 223,
+ "commits": 25,
+ "modify_time": "2019-10-24 04:26:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/brav0hax/easy-creds",
+ "star": 223,
+ "commits": 45,
+ "modify_time": "2013-11-21 05:33:48",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/beetlechunks/redsails",
+ "star": 223,
+ "commits": 2,
+ "modify_time": "2017-09-23 17:55:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/guardianproject/lildebi",
+ "star": 222,
+ "commits": 578,
+ "modify_time": "2017-03-20 09:43:27",
+ "last_release": "\n 0.5.4\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/wnagzihxa1n/browsersecurity",
+ "star": 222,
+ "commits": null,
+ "modify_time": "2018-11-09 02:34:24",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/wapmorgan/phpcodefixer",
+ "star": 222,
+ "commits": 132,
+ "modify_time": "2019-11-29 12:52:44",
+ "last_release": "2.0.22",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/vixentael/my-talks",
+ "star": 222,
+ "commits": 47,
+ "modify_time": "2019-12-09 16:01:46",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/tkcert/mail-security-tester",
+ "star": 222,
+ "commits": 49,
+ "modify_time": "2018-09-14 13:32:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sophsec/ruby-nmap",
+ "star": 222,
+ "commits": 423,
+ "modify_time": "2018-05-01 23:59:04",
+ "last_release": "\n v0.9.3\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/sectalks/sectalks",
+ "star": 222,
+ "commits": 338,
+ "modify_time": "2019-11-29 10:53:35",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/rivermont/spidy",
+ "star": 222,
+ "commits": 574,
+ "modify_time": "2019-08-30 01:30:12",
+ "last_release": "1.4.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rexdf/commandtrayhost",
+ "star": 222,
+ "commits": 429,
+ "modify_time": "2018-12-28 13:46:06",
+ "last_release": "2.3-b450",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/lgeek/spec_poc_arm",
+ "star": 222,
+ "commits": 8,
+ "modify_time": "2018-01-12 15:45:10",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/lavalamp-/password-lists",
+ "star": 222,
+ "commits": 6,
+ "modify_time": "2015-12-27 23:11:20",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/kingkaki/weblogic-scan",
+ "star": 222,
+ "commits": 8,
+ "modify_time": "2019-05-17 07:51:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jameshabben/evolve",
+ "star": 222,
+ "commits": 57,
+ "modify_time": "2017-11-21 00:38:21",
+ "last_release": "v1.6",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/intelpt/windowsintelpt",
+ "star": 222,
+ "commits": 23,
+ "modify_time": "2018-04-17 17:22:46",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/iaik/armageddon",
+ "star": 222,
+ "commits": 11,
+ "modify_time": "2017-10-07 09:58:07",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/caringcaribou/caringcaribou",
+ "star": 222,
+ "commits": 373,
+ "modify_time": "2019-09-25 13:28:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/byt3bl33d3r/offensivedlr",
+ "star": 222,
+ "commits": 16,
+ "modify_time": "2019-08-18 23:57:32",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/axi0mx/alloc8",
+ "star": 222,
+ "commits": 1,
+ "modify_time": "2017-04-09 22:18:12",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/googleprojectzero/ktrw",
+ "star": 221,
+ "commits": 7,
+ "modify_time": "2019-12-09 19:59:03",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/uprootlabs/gngr",
+ "star": 221,
+ "commits": 819,
+ "modify_time": "2019-02-13 17:41:19",
+ "last_release": "v0.3.15",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/tonyphipps/meerkat",
+ "star": 221,
+ "commits": 271,
+ "modify_time": "2019-11-12 16:37:28",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/openorbis/mira-project",
+ "star": 221,
+ "commits": 162,
+ "modify_time": "2018-09-19 16:30:25",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ofek/privy",
+ "star": 221,
+ "commits": 67,
+ "modify_time": "2018-01-22 22:39:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mushorg/snare",
+ "star": 221,
+ "commits": 150,
+ "modify_time": "2019-12-08 16:54:06",
+ "last_release": "v0.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/malwarecantfly/vba2graph",
+ "star": 221,
+ "commits": 21,
+ "modify_time": "2019-06-14 17:34:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hashcat/princeprocessor",
+ "star": 221,
+ "commits": 132,
+ "modify_time": "2018-07-05 09:53:15",
+ "last_release": "v0.22",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ha7ilm/qtcsdr",
+ "star": 221,
+ "commits": 64,
+ "modify_time": "2018-01-01 17:00:30",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/csirtgadgets/massive-octo-spice",
+ "star": 221,
+ "commits": 1333,
+ "modify_time": "2018-01-16 12:32:04",
+ "last_release": "2.00.09",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/cloudflare/tls-tris",
+ "star": 221,
+ "commits": 569,
+ "modify_time": "2019-09-27 08:15:02",
+ "last_release": "\n Release_1.11.5_2\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/chris408/known_hosts-hashcat",
+ "star": 221,
+ "commits": 5,
+ "modify_time": "2019-01-04 00:38:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/analytically/haproxy-ddos",
+ "star": 221,
+ "commits": 29,
+ "modify_time": "2016-07-20 10:17:21",
+ "last_release": "",
+ "lang": "Smarty"
+ },
+ {
+ "link": "https://github.com/1u4nx/exploit-exercises-nebula",
+ "star": 221,
+ "commits": 19,
+ "modify_time": "2017-01-16 02:34:40",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/t0xst/linux",
+ "star": 220,
+ "commits": 27,
+ "modify_time": "2019-05-15 11:45:52",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/volatilityfoundation/community",
+ "star": 220,
+ "commits": 92,
+ "modify_time": "2019-11-15 16:52:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vedetta-com/vedetta",
+ "star": 220,
+ "commits": 449,
+ "modify_time": "2019-07-29 14:30:41",
+ "last_release": "v6.3.0-alpha",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/valyala/goloris",
+ "star": 220,
+ "commits": 28,
+ "modify_time": "2019-04-23 18:38:56",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/sh4hin/mobileapp-pentest-cheatsheet",
+ "star": 220,
+ "commits": 43,
+ "modify_time": "2018-02-02 12:57:21",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/rootkovska/codehash.db",
+ "star": 220,
+ "commits": 18,
+ "modify_time": "2016-11-11 22:36:52",
+ "last_release": "\n joanna_03870a43\n ",
+ "lang": "Standard ML"
+ },
+ {
+ "link": "https://github.com/rapid7/meterpreter",
+ "star": 220,
+ "commits": 723,
+ "modify_time": "2015-07-02 18:47:15",
+ "last_release": "\n PR2888\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/paragonie/anti-csrf",
+ "star": 220,
+ "commits": 97,
+ "modify_time": "2019-01-03 21:24:21",
+ "last_release": "v2.2.1",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/opennetworkingfoundation/delta",
+ "star": 220,
+ "commits": 813,
+ "modify_time": "2019-04-15 05:43:51",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/maksadbek/tcpovericmp",
+ "star": 220,
+ "commits": null,
+ "modify_time": "2018-09-27 11:28:52",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/letoram/senseye",
+ "star": 220,
+ "commits": 188,
+ "modify_time": "2019-04-14 17:34:28",
+ "last_release": "0.3",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/kbdancer/tplinkkey",
+ "star": 220,
+ "commits": 60,
+ "modify_time": "2018-01-12 01:27:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jseidl/babadook",
+ "star": 220,
+ "commits": 3,
+ "modify_time": "2015-09-23 14:41:59",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/initstring/uptux",
+ "star": 220,
+ "commits": 33,
+ "modify_time": "2019-10-02 22:11:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gkdr/lurch",
+ "star": 220,
+ "commits": 117,
+ "modify_time": "2018-12-30 13:29:55",
+ "last_release": "v0.6.8",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/feicong/jni_helper",
+ "star": 220,
+ "commits": 3,
+ "modify_time": "2017-10-02 08:58:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/easy66/monohooker",
+ "star": 220,
+ "commits": 32,
+ "modify_time": "2018-11-12 00:57:46",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/bee13oy/av_kernel_vulns",
+ "star": 220,
+ "commits": 5,
+ "modify_time": "2017-07-06 13:10:40",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/artkond/cisco-snmp-rce",
+ "star": 220,
+ "commits": 2,
+ "modify_time": "2018-01-05 12:08:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/itrump/shadowsocksrss",
+ "star": 219,
+ "commits": 15,
+ "modify_time": "2017-11-05 05:14:58",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/security-checklist/php-security-check-list",
+ "star": 219,
+ "commits": 11,
+ "modify_time": "2019-08-13 22:02:03",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/wazuh/wazuh-ruleset",
+ "star": 219,
+ "commits": 1020,
+ "modify_time": "2019-11-25 18:43:54",
+ "last_release": "v3.10.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vlall/darksearch",
+ "star": 219,
+ "commits": 110,
+ "modify_time": "2017-11-24 00:56:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/skewwg/vulscan",
+ "star": 219,
+ "commits": 66,
+ "modify_time": "2019-04-26 08:49:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sab0tag3d/mitm-cheatsheet",
+ "star": 219,
+ "commits": 59,
+ "modify_time": "2019-12-03 15:30:08",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/rickyzhang82/tethering",
+ "star": 219,
+ "commits": 72,
+ "modify_time": "2019-07-07 03:48:25",
+ "last_release": "\n v1.7\n ",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/r00t-3xp10it/trojanizer",
+ "star": 219,
+ "commits": 120,
+ "modify_time": "2018-02-28 01:37:47",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/nviso-be/magisktrustusercerts",
+ "star": 219,
+ "commits": 8,
+ "modify_time": "2018-12-24 08:18:08",
+ "last_release": "v0.3",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/nahamsec/lazys3",
+ "star": 219,
+ "commits": 8,
+ "modify_time": "2017-08-03 18:02:20",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/gamexg/proxyclient",
+ "star": 219,
+ "commits": 93,
+ "modify_time": "2017-10-08 10:18:26",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/david942j/ctf-writeups",
+ "star": 219,
+ "commits": 81,
+ "modify_time": "2019-10-14 15:14:25",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/coalfire-research/deathmetal",
+ "star": 219,
+ "commits": 10,
+ "modify_time": "2019-04-09 20:33:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bhdresh/dejavu",
+ "star": 219,
+ "commits": 114,
+ "modify_time": "2019-05-19 20:59:10",
+ "last_release": "Beta-V8",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/basilfx/tradfri-hacking",
+ "star": 219,
+ "commits": 50,
+ "modify_time": "2018-10-01 06:00:21",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/zigoo0/jsonbee",
+ "star": 218,
+ "commits": 24,
+ "modify_time": "2019-11-05 13:38:35",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/zhuyingda/veneno",
+ "star": 218,
+ "commits": 82,
+ "modify_time": "2019-04-10 02:15:43",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/sslab-gatech/opensgx",
+ "star": 218,
+ "commits": 122,
+ "modify_time": "2016-11-02 18:50:15",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/softius/php-cross-domain-proxy",
+ "star": 218,
+ "commits": 40,
+ "modify_time": "2018-09-21 14:12:16",
+ "last_release": "\n v0.8.0\n ",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/roccomuso/kickthemout",
+ "star": 218,
+ "commits": 109,
+ "modify_time": "2018-06-19 10:33:58",
+ "last_release": "v1.1.41",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/nccgroup/driverbuddy",
+ "star": 218,
+ "commits": 5,
+ "modify_time": "2018-11-22 11:32:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mgeeky/tomcatwardeployer",
+ "star": 218,
+ "commits": 91,
+ "modify_time": "2019-06-27 13:01:52",
+ "last_release": "0.4",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mazen160/server-status_pwn",
+ "star": 218,
+ "commits": 7,
+ "modify_time": "2018-07-09 12:33:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lifepillar/csvkeychain",
+ "star": 218,
+ "commits": 40,
+ "modify_time": "2019-01-19 18:40:45",
+ "last_release": "\n v0.0.1\n ",
+ "lang": "AppleScript"
+ },
+ {
+ "link": "https://github.com/jesusprubio/awesome-nodejs-pentest",
+ "star": 218,
+ "commits": 17,
+ "modify_time": "2019-03-31 10:33:15",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ivan1ee/net-deserialize",
+ "star": 218,
+ "commits": 21,
+ "modify_time": "2019-04-18 10:47:20",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/feexd/pocs",
+ "star": 218,
+ "commits": 6,
+ "modify_time": "2019-02-13 16:27:05",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/d3v1l401/findcrypt-ghidra",
+ "star": 218,
+ "commits": 33,
+ "modify_time": "2019-10-03 12:17:08",
+ "last_release": "1.4",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/cure53/browser-sec-whitepaper",
+ "star": 218,
+ "commits": 15,
+ "modify_time": "2017-11-29 17:34:43",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/chromium/web-page-replay",
+ "star": 218,
+ "commits": 731,
+ "modify_time": "2017-08-04 23:41:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/blacktop/docker-cuckoo",
+ "star": 218,
+ "commits": 197,
+ "modify_time": "2019-09-14 18:52:24",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/jopyth/mmm-remote-control",
+ "star": 217,
+ "commits": 208,
+ "modify_time": "2019-02-21 20:04:59",
+ "last_release": "v2.0.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/Mckinsey666/vocabs",
+ "star": 217,
+ "commits": 62,
+ "modify_time": "2019-02-24 10:18:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/spacehuhn/arduinopcap",
+ "star": 217,
+ "commits": 20,
+ "modify_time": "2017-07-25 10:48:28",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/sensepost/spartan",
+ "star": 217,
+ "commits": 23,
+ "modify_time": "2018-11-08 11:29:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rajeshmajumdar/brutexss",
+ "star": 217,
+ "commits": 35,
+ "modify_time": "2017-03-21 15:40:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/p4lang/p4c",
+ "star": 217,
+ "commits": 1883,
+ "modify_time": "2019-12-08 22:34:08",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/nteseyes/pylane",
+ "star": 217,
+ "commits": 38,
+ "modify_time": "2019-11-15 11:40:34",
+ "last_release": "v0.0.8",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/maxwellkoh/2fassassin",
+ "star": 217,
+ "commits": 83,
+ "modify_time": "2017-10-04 00:50:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/libyal/libesedb",
+ "star": 217,
+ "commits": 336,
+ "modify_time": "2019-12-10 06:07:17",
+ "last_release": "20191111",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/justmao945/mallory",
+ "star": 217,
+ "commits": 128,
+ "modify_time": "2019-03-07 07:31:15",
+ "last_release": "2.3",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/joncooperworks/judas",
+ "star": 217,
+ "commits": 56,
+ "modify_time": "2019-03-24 12:45:46",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/isaacdelly/plutus",
+ "star": 217,
+ "commits": 72,
+ "modify_time": "2019-08-18 04:14:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/iojw/socialscan",
+ "star": 217,
+ "commits": 64,
+ "modify_time": "2019-08-15 13:10:54",
+ "last_release": "\n v1.1.3\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dionach/cmsmap",
+ "star": 217,
+ "commits": 8,
+ "modify_time": "2018-10-26 18:45:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dev-sec/puppet-os-hardening",
+ "star": 217,
+ "commits": 408,
+ "modify_time": "2019-11-25 14:18:30",
+ "last_release": "2.2.7",
+ "lang": "Puppet"
+ },
+ {
+ "link": "https://github.com/arno0x/dbc2",
+ "star": 217,
+ "commits": 18,
+ "modify_time": "2017-10-27 07:39:03",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/zhengmin1989/wechatsportcheat",
+ "star": 216,
+ "commits": 3,
+ "modify_time": "2017-03-14 02:48:34",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/strangerealintel/cyberthreatintel",
+ "star": 216,
+ "commits": 399,
+ "modify_time": "2019-11-18 22:31:34",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/silverfoxx/pwnstar",
+ "star": 216,
+ "commits": 35,
+ "modify_time": "2014-05-06 12:19:11",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/puresec/awesome-serverless-security",
+ "star": 216,
+ "commits": 36,
+ "modify_time": "2019-02-26 14:05:42",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/lukebaggett/dnscat2-powershell",
+ "star": 216,
+ "commits": 61,
+ "modify_time": "2018-07-20 18:17:20",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/icsec/airpwn-ng",
+ "star": 216,
+ "commits": 216,
+ "modify_time": "2019-10-02 04:29:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/guardrailsio/awesome-dotnet-security",
+ "star": 216,
+ "commits": 7,
+ "modify_time": "2019-07-06 07:16:54",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/giper45/dockersecurityplayground",
+ "star": 216,
+ "commits": 241,
+ "modify_time": "2019-12-05 21:47:48",
+ "last_release": "\n v2.x\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/foobarto/redteam-notebook",
+ "star": 216,
+ "commits": 29,
+ "modify_time": "2018-09-14 10:56:32",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/darryllane/bluto-old",
+ "star": 216,
+ "commits": 147,
+ "modify_time": "2016-08-02 18:21:30",
+ "last_release": "v1.1.14",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/003random/003recon",
+ "star": 216,
+ "commits": 86,
+ "modify_time": "2018-06-05 18:24:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/saul/demofile",
+ "star": 215,
+ "commits": 185,
+ "modify_time": "2019-11-17 13:27:03",
+ "last_release": "\n v1.1.1\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/shodansploit/shodansploit",
+ "star": 215,
+ "commits": 33,
+ "modify_time": "2019-09-23 12:54:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lifting-bits/grr",
+ "star": 215,
+ "commits": 55,
+ "modify_time": "2019-09-04 16:41:09",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/meliot/filewatcher",
+ "star": 215,
+ "commits": 34,
+ "modify_time": "2018-09-15 13:47:28",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/xyzz/gamecard-microsd",
+ "star": 215,
+ "commits": 37,
+ "modify_time": "2019-10-03 03:08:14",
+ "last_release": "v1.6",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/wofeiwo/webcgi-exploits",
+ "star": 215,
+ "commits": 18,
+ "modify_time": "2018-06-15 03:43:57",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/thiber-org/userline",
+ "star": 215,
+ "commits": 117,
+ "modify_time": "2018-03-25 12:46:30",
+ "last_release": "v0.2.1b",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sleinen/samplicator",
+ "star": 215,
+ "commits": 172,
+ "modify_time": "2019-03-21 12:59:04",
+ "last_release": "1.3.8rc1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/rainwayapp/warden",
+ "star": 215,
+ "commits": 70,
+ "modify_time": "2019-01-28 03:55:34",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/rackerlabs/scantron",
+ "star": 215,
+ "commits": 190,
+ "modify_time": "2019-12-04 20:33:17",
+ "last_release": "v1.10",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/qgriffith/openeats",
+ "star": 215,
+ "commits": 546,
+ "modify_time": "2015-03-08 01:30:50",
+ "last_release": "\n 2.4\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/orderbynull/lottip",
+ "star": 215,
+ "commits": 140,
+ "modify_time": "2018-06-18 19:22:08",
+ "last_release": "v0.3",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/mkorman90/volatilitybot",
+ "star": 215,
+ "commits": 32,
+ "modify_time": "2016-10-09 11:45:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mailinneberg/blueborne",
+ "star": 215,
+ "commits": 56,
+ "modify_time": "2017-11-18 23:28:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/llaera/slowloris.pl",
+ "star": 215,
+ "commits": 5,
+ "modify_time": "2013-11-05 12:21:01",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/lennonchin/code-confuse-plugin",
+ "star": 215,
+ "commits": 6,
+ "modify_time": "2018-03-08 09:17:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/khast3x/redcloud",
+ "star": 215,
+ "commits": 73,
+ "modify_time": "2019-10-29 02:11:59",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/inquest/python-iocextract",
+ "star": 215,
+ "commits": 187,
+ "modify_time": "2019-11-02 17:52:20",
+ "last_release": "v1.13.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hyc/fcrackzip",
+ "star": 215,
+ "commits": 3,
+ "modify_time": "2019-10-13 17:50:07",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/gmr/queries",
+ "star": 215,
+ "commits": 322,
+ "modify_time": "2019-06-27 20:20:05",
+ "last_release": "\n 2.0.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/famavott/osint-scraper",
+ "star": 215,
+ "commits": 298,
+ "modify_time": "2018-05-05 18:40:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cyrus-and/fracker",
+ "star": 215,
+ "commits": 209,
+ "modify_time": "2019-09-19 16:26:48",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/bonsaiviking/nfspy",
+ "star": 215,
+ "commits": 96,
+ "modify_time": "2014-10-24 13:35:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/azure99/shadowsocksrcsm",
+ "star": 214,
+ "commits": 29,
+ "modify_time": "2017-10-14 23:41:46",
+ "last_release": "SSR4.7CSV4",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/threatresponse/aws_ir",
+ "star": 214,
+ "commits": 214,
+ "modify_time": "2018-07-08 20:15:11",
+ "last_release": "v0.3.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/proxycannon/proxycannon-ng",
+ "star": 214,
+ "commits": 34,
+ "modify_time": "2019-01-03 18:35:45",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/outflanknl/excel4-dcom",
+ "star": 214,
+ "commits": 7,
+ "modify_time": "2019-03-26 16:01:44",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/open-mpi/hwloc",
+ "star": 214,
+ "commits": 7139,
+ "modify_time": "2019-12-06 10:19:18",
+ "last_release": "hwloc-2.1.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/mitsuhiko/python-regex-scanner",
+ "star": 214,
+ "commits": 4,
+ "modify_time": "2016-01-27 21:31:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jasonish/evebox",
+ "star": 214,
+ "commits": 1071,
+ "modify_time": "2019-12-02 23:12:29",
+ "last_release": "0.10.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/hyperspy/hyperspy",
+ "star": 214,
+ "commits": 10924,
+ "modify_time": "2019-12-09 19:36:46",
+ "last_release": "v1.5.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fuzzysecurity/unix-privesc",
+ "star": 214,
+ "commits": 15,
+ "modify_time": "2016-04-09 08:39:43",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/erfg12/memory.dll",
+ "star": 214,
+ "commits": 161,
+ "modify_time": "2019-06-28 19:33:36",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/dns-oarc/dnscap",
+ "star": 214,
+ "commits": 500,
+ "modify_time": "2019-10-03 08:27:17",
+ "last_release": "v1.10.3",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/controlplaneio/kubesec",
+ "star": 214,
+ "commits": 225,
+ "modify_time": "2019-12-05 14:20:29",
+ "last_release": "v2.3.1",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/xhak9x/fbi",
+ "star": 213,
+ "commits": 28,
+ "modify_time": "2019-05-09 19:32:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xdnice/pcshare",
+ "star": 213,
+ "commits": 3,
+ "modify_time": "2017-06-01 14:37:11",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/wwong99/pentest-notes",
+ "star": 213,
+ "commits": 34,
+ "modify_time": "2018-01-17 12:58:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/trustedsec/egressbuster",
+ "star": 213,
+ "commits": 13,
+ "modify_time": "2018-01-27 20:50:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/trailofbits/krf",
+ "star": 213,
+ "commits": 138,
+ "modify_time": "2019-11-04 22:25:29",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/teag1e/burpcollector",
+ "star": 213,
+ "commits": 15,
+ "modify_time": "2019-03-19 12:09:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tdunning/log-synth",
+ "star": 213,
+ "commits": 203,
+ "modify_time": "2019-10-13 21:06:44",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/spiderlabs/hosthunter",
+ "star": 213,
+ "commits": 90,
+ "modify_time": "2019-07-30 08:48:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/shanek2/invtero.net",
+ "star": 213,
+ "commits": 181,
+ "modify_time": "2017-11-26 17:38:38",
+ "last_release": "CORE-0.1",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/quoscient/octopus",
+ "star": 213,
+ "commits": 223,
+ "modify_time": "2019-07-17 10:15:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pynetwork/pypcap",
+ "star": 213,
+ "commits": 226,
+ "modify_time": "2019-07-19 12:38:11",
+ "last_release": "v1.2.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/paphonb/androidp-ify",
+ "star": 213,
+ "commits": 98,
+ "modify_time": "2018-08-05 07:53:31",
+ "last_release": "1.0.0_153",
+ "lang": "Kotlin"
+ },
+ {
+ "link": "https://github.com/nu1lctf/n1ctf-2018",
+ "star": 213,
+ "commits": 41,
+ "modify_time": "2018-04-26 14:46:32",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/n0b0dycn/redis-rogue-server",
+ "star": 213,
+ "commits": 12,
+ "modify_time": "2019-07-10 07:41:11",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/musalbas/address-spoofing-poc",
+ "star": 213,
+ "commits": 12,
+ "modify_time": "2015-07-02 22:22:48",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/kurobeats/fimap",
+ "star": 213,
+ "commits": 235,
+ "modify_time": "2018-11-14 12:27:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jordanpotti/cloudscraper",
+ "star": 213,
+ "commits": 30,
+ "modify_time": "2019-09-24 02:53:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jamesp6000/wsprrypi",
+ "star": 213,
+ "commits": 96,
+ "modify_time": "2017-06-25 04:53:50",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/improbable-eng/kedge",
+ "star": 213,
+ "commits": 297,
+ "modify_time": "2019-11-01 12:05:29",
+ "last_release": "v0.1.2",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/feicong/lua_re",
+ "star": 213,
+ "commits": 19,
+ "modify_time": "2018-07-31 14:33:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/evict/poc_cve-2018-1002105",
+ "star": 213,
+ "commits": 27,
+ "modify_time": "2018-12-10 11:09:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/euphrat1ca/fuzzdb-collect",
+ "star": 213,
+ "commits": 13,
+ "modify_time": "2018-05-29 08:06:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dxflatline/flatpipes",
+ "star": 213,
+ "commits": 24,
+ "modify_time": "2017-04-27 15:48:29",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/ctfs/write-ups-2013",
+ "star": 213,
+ "commits": 75,
+ "modify_time": "2016-04-02 11:30:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cseagle/freedom",
+ "star": 213,
+ "commits": 12,
+ "modify_time": "2016-06-08 08:44:59",
+ "last_release": "",
+ "lang": "PLpgSQL"
+ },
+ {
+ "link": "https://github.com/cryptolok/crykex",
+ "star": 213,
+ "commits": 9,
+ "modify_time": "2019-07-18 09:31:56",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/coffeehb/tools",
+ "star": 213,
+ "commits": 34,
+ "modify_time": "2019-07-09 02:38:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bromiumlabs/packerattacker",
+ "star": 213,
+ "commits": 51,
+ "modify_time": "2018-03-05 08:12:27",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/atlas0fd00m/rfcat",
+ "star": 213,
+ "commits": 543,
+ "modify_time": "2019-04-23 13:17:09",
+ "last_release": "\n InfiniteMode_works_fine_at_this_point._Merging_slowly_because_first_attempts_didn't_turn_out_so_well_\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hackathonhackers/groups",
+ "star": 212,
+ "commits": 109,
+ "modify_time": "2017-08-24 22:44:13",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/atxsinn3r/VulnCases",
+ "star": 212,
+ "commits": 73,
+ "modify_time": "2019-09-25 15:40:43",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/suvllian/process-inject",
+ "star": 212,
+ "commits": 20,
+ "modify_time": "2018-09-22 10:54:00",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/sofianehamlaoui/lockdoor-framework",
+ "star": 212,
+ "commits": 198,
+ "modify_time": "2019-12-10 04:23:02",
+ "last_release": "v1.0Beta",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/puppetlabs/puppetlabs-postgresql",
+ "star": 212,
+ "commits": 1768,
+ "modify_time": "2019-12-09 10:44:00",
+ "last_release": "\n v6.2.0\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/nyxgeek/lyncsmash",
+ "star": 212,
+ "commits": 98,
+ "modify_time": "2019-11-25 21:02:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/neo23x0/fenrir",
+ "star": 212,
+ "commits": 63,
+ "modify_time": "2019-08-06 21:52:29",
+ "last_release": "v0.5-eb",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/juliaci/benchmarktools.jl",
+ "star": 212,
+ "commits": 190,
+ "modify_time": "2019-09-30 19:48:52",
+ "last_release": "v0.4.3",
+ "lang": "Julia"
+ },
+ {
+ "link": "https://github.com/johnnyxmas/scancannon",
+ "star": 212,
+ "commits": 30,
+ "modify_time": "2017-08-16 21:20:03",
+ "last_release": "v0.95",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/jakewmeyer/geo",
+ "star": 212,
+ "commits": 123,
+ "modify_time": "2017-08-04 21:31:13",
+ "last_release": "v1.2.0",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/infosecn1nja/maliciousmacromsbuild",
+ "star": 212,
+ "commits": 7,
+ "modify_time": "2019-08-06 08:16:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/eset/malware-research",
+ "star": 212,
+ "commits": 24,
+ "modify_time": "2019-10-16 08:15:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cobbr/psamsi",
+ "star": 212,
+ "commits": 15,
+ "modify_time": "2018-04-22 20:55:35",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/facebook/DelegatedRecoverySpecification",
+ "star": 211,
+ "commits": 12,
+ "modify_time": "2019-05-06 16:31:33",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/NewBee119/telnet-scanner",
+ "star": 211,
+ "commits": 28,
+ "modify_time": "2017-03-17 13:35:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xu-jian/vps",
+ "star": 211,
+ "commits": 85,
+ "modify_time": "2019-09-11 09:51:39",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/trailofbits/winchecksec",
+ "star": 211,
+ "commits": 72,
+ "modify_time": "2019-10-29 04:46:26",
+ "last_release": "1.1.1",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/thalium/icebox",
+ "star": 211,
+ "commits": 673,
+ "modify_time": "2019-12-09 00:36:00",
+ "last_release": "v1.1",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/owasp/igoat",
+ "star": 211,
+ "commits": 204,
+ "modify_time": "2019-05-09 06:26:48",
+ "last_release": "v3.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/nullarray/dorknet",
+ "star": 211,
+ "commits": 57,
+ "modify_time": "2019-03-03 08:24:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mateuszk87/pcapviz",
+ "star": 211,
+ "commits": 28,
+ "modify_time": "2018-12-08 16:54:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/leechristensen/spoolsample",
+ "star": 211,
+ "commits": 5,
+ "modify_time": "2018-10-05 22:36:05",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/jeansgit/redteam",
+ "star": 211,
+ "commits": 36,
+ "modify_time": "2019-02-14 03:03:53",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/jas502n/cnvd-c-2019-48814",
+ "star": 211,
+ "commits": 8,
+ "modify_time": "2019-05-26 13:36:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/inquest/omnibus",
+ "star": 211,
+ "commits": 129,
+ "modify_time": "2019-11-07 16:36:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gosecure/php7-opcache-override",
+ "star": 211,
+ "commits": 52,
+ "modify_time": "2019-03-20 15:17:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bdmac/strong_password",
+ "star": 211,
+ "commits": 56,
+ "modify_time": "2019-08-26 17:18:03",
+ "last_release": "\n v0.0.8\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/arno0x/ntlmrelaytoews",
+ "star": 211,
+ "commits": 6,
+ "modify_time": "2018-01-15 12:47:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/aress31/wirespy",
+ "star": 211,
+ "commits": 88,
+ "modify_time": "2019-11-22 08:13:39",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/elmundio87/terraform_validate",
+ "star": 210,
+ "commits": 186,
+ "modify_time": "2018-08-29 12:28:56",
+ "last_release": "\n 2.8.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cloudflare/cloudflare-ingress-controller",
+ "star": 210,
+ "commits": 247,
+ "modify_time": "2019-03-22 16:21:06",
+ "last_release": "0.6.5",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/zfl9/gfwlist2privoxy",
+ "star": 210,
+ "commits": 53,
+ "modify_time": "2019-11-09 09:52:44",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/tandasat/pgresarch",
+ "star": 210,
+ "commits": 27,
+ "modify_time": "2018-10-06 16:18:44",
+ "last_release": "v1.2",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/rizer0/log-killer",
+ "star": 210,
+ "commits": 42,
+ "modify_time": "2019-08-19 18:29:51",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/ooclab/otunnel",
+ "star": 210,
+ "commits": 57,
+ "modify_time": "2019-01-05 02:52:22",
+ "last_release": "v1.3.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/nucypher/nufhe",
+ "star": 210,
+ "commits": 230,
+ "modify_time": "2019-07-19 17:12:06",
+ "last_release": "v0.0.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/neo23x0/fnord",
+ "star": 210,
+ "commits": 42,
+ "modify_time": "2018-12-31 13:59:43",
+ "last_release": "v0.6",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/mapbox/jni.hpp",
+ "star": 210,
+ "commits": 87,
+ "modify_time": "2019-09-26 10:45:47",
+ "last_release": "\n v4.0.1\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/kamorin/dhcpig",
+ "star": 210,
+ "commits": 92,
+ "modify_time": "2017-06-26 01:24:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jikesrvm/jikesrvm",
+ "star": 210,
+ "commits": 12279,
+ "modify_time": "2019-11-26 10:39:41",
+ "last_release": "3.1.4",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/haohaolee/shadowsocks-openwrt",
+ "star": 210,
+ "commits": 28,
+ "modify_time": "2013-04-07 09:59:04",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/eternityx/deadcell-csgo",
+ "star": 210,
+ "commits": 330,
+ "modify_time": "2019-08-24 09:03:14",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/dschanoeh/kayak",
+ "star": 210,
+ "commits": 346,
+ "modify_time": "2019-08-09 14:48:44",
+ "last_release": "untagged-3597039ad20ce9798a99",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/dirtbags/pcapdb",
+ "star": 210,
+ "commits": 126,
+ "modify_time": "2019-04-21 15:11:24",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/dirkjanm/krbrelayx",
+ "star": 210,
+ "commits": 12,
+ "modify_time": "2019-06-19 08:05:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/danmcinerney/msf-autoshell",
+ "star": 210,
+ "commits": 17,
+ "modify_time": "2018-11-26 14:24:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/f0cker/crackq",
+ "star": 209,
+ "commits": 2,
+ "modify_time": "2019-12-06 10:57:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/defuse/crackstation-hashdb",
+ "star": 209,
+ "commits": 25,
+ "modify_time": "2018-01-24 20:27:04",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/FSecureLABS/OSXFuzz",
+ "star": 209,
+ "commits": 2,
+ "modify_time": "2017-10-23 14:46:29",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/googleprojectzero/bochspwn",
+ "star": 209,
+ "commits": 6,
+ "modify_time": "2019-05-05 11:46:05",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ztgrace/sticky_keys_hunter",
+ "star": 209,
+ "commits": 15,
+ "modify_time": "2016-09-12 02:12:22",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/subgraph/orchid",
+ "star": 209,
+ "commits": 539,
+ "modify_time": "2016-06-12 22:05:06",
+ "last_release": "\n v0.9.1\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/silvermoonsecurity/passivefuzzframeworkosx",
+ "star": 209,
+ "commits": 25,
+ "modify_time": "2017-10-18 10:29:46",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/sigp/solidity-security-blog",
+ "star": 209,
+ "commits": 28,
+ "modify_time": "2019-11-25 00:17:23",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/si9int/cc.py",
+ "star": 209,
+ "commits": 23,
+ "modify_time": "2019-10-05 09:59:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/shutterstock/lil-brother",
+ "star": 209,
+ "commits": 38,
+ "modify_time": "2017-11-20 16:14:05",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/shogunlab/awesome-hyper-v-exploitation",
+ "star": 209,
+ "commits": 11,
+ "modify_time": "2019-11-08 06:13:19",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/shinnok/johnny",
+ "star": 209,
+ "commits": 540,
+ "modify_time": "2016-08-07 13:07:40",
+ "last_release": "v2.2",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/samdark/yii2-webshell",
+ "star": 209,
+ "commits": 15,
+ "modify_time": "2019-05-23 15:45:39",
+ "last_release": "2.0.0",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/lts4/deepfool",
+ "star": 209,
+ "commits": 40,
+ "modify_time": "2018-09-07 15:51:02",
+ "last_release": "",
+ "lang": "MATLAB"
+ },
+ {
+ "link": "https://github.com/leancloud/satori",
+ "star": 209,
+ "commits": 71,
+ "modify_time": "2019-11-13 03:54:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/k0keoyo/some-kernel-fuzzing-paper",
+ "star": 209,
+ "commits": 2,
+ "modify_time": "2017-10-09 10:42:13",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/hunter-ht-2018/ptfuzzer",
+ "star": 209,
+ "commits": 175,
+ "modify_time": "2019-07-26 02:45:41",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/h3xstream/http-script-generator",
+ "star": 209,
+ "commits": 79,
+ "modify_time": "2019-10-01 22:33:07",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/djm/python-scrapyd-api",
+ "star": 209,
+ "commits": 79,
+ "modify_time": "2019-04-09 21:36:45",
+ "last_release": "\n v2.1.2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/decalage2/awesome-security-hardening",
+ "star": 209,
+ "commits": 101,
+ "modify_time": "2019-12-09 11:03:00",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/danigargu/explodingcan",
+ "star": 209,
+ "commits": 5,
+ "modify_time": "2018-01-04 13:25:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/coolervoid/raptor_waf",
+ "star": 209,
+ "commits": 55,
+ "modify_time": "2019-05-17 22:58:07",
+ "last_release": "RaptorV0.6",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ajinabraham/droid-application-fuzz-framework",
+ "star": 209,
+ "commits": 19,
+ "modify_time": "2019-08-01 19:08:36",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/adguardteam/adguardforwindows",
+ "star": 209,
+ "commits": 141,
+ "modify_time": "2019-10-07 09:29:57",
+ "last_release": "v7.3-beta-2",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/hak5/lanturtle-modules",
+ "star": 208,
+ "commits": 125,
+ "modify_time": "2019-10-21 19:55:17",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/seahoh/gotox",
+ "star": 208,
+ "commits": 737,
+ "modify_time": "2019-11-11 06:07:49",
+ "last_release": "v3.5.6",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pirate-crew/iptv",
+ "star": 208,
+ "commits": 136,
+ "modify_time": "2017-11-27 18:32:30",
+ "last_release": "v1.2.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/momosecurity/rhizobia_p",
+ "star": 208,
+ "commits": 25,
+ "modify_time": "2019-06-20 04:08:07",
+ "last_release": "1.1",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/modzero/mod0burpuploadscanner",
+ "star": 208,
+ "commits": 70,
+ "modify_time": "2019-06-28 14:49:37",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/joyent/mdb_v8",
+ "star": 208,
+ "commits": 75,
+ "modify_time": "2019-10-17 18:26:56",
+ "last_release": "\n v1.4.0\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/harmj0y/damp",
+ "star": 208,
+ "commits": 6,
+ "modify_time": "2019-07-25 21:18:26",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/emilyanncr/windows-post-exploitation",
+ "star": 208,
+ "commits": 30,
+ "modify_time": "2018-01-27 21:12:00",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/bluscreenofjeff/malleable-c2-randomizer",
+ "star": 208,
+ "commits": 10,
+ "modify_time": "2018-04-06 01:56:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/blueboxgroup/ursula",
+ "star": 208,
+ "commits": 5295,
+ "modify_time": "2019-04-20 00:53:10",
+ "last_release": "\n 4.1.0.3c\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/agoragames/kairos",
+ "star": 208,
+ "commits": 177,
+ "modify_time": "2017-02-03 19:52:38",
+ "last_release": "\n 0_10_1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/edboffical/bsp",
+ "star": 207,
+ "commits": 32,
+ "modify_time": "2019-10-16 14:53:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/byt3bl33d3r/witnessme",
+ "star": 207,
+ "commits": 30,
+ "modify_time": "2019-12-02 21:20:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sun8911879/shadowsocksr",
+ "star": 207,
+ "commits": 7,
+ "modify_time": "2018-05-29 04:20:39",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/v2ray/homebrew-v2ray",
+ "star": 207,
+ "commits": 144,
+ "modify_time": "2019-10-28 16:26:07",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/them4hd1/vayne-rat",
+ "star": 207,
+ "commits": 7,
+ "modify_time": "2018-04-30 13:27:42",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/sorbo/tcpcrypt",
+ "star": 207,
+ "commits": 255,
+ "modify_time": "2014-07-24 12:25:22",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/netxfly/xsec-proxy-scanner",
+ "star": 207,
+ "commits": 7,
+ "modify_time": "2017-12-07 15:36:01",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/konklone/shaaaaaaaaaaaaa",
+ "star": 207,
+ "commits": 253,
+ "modify_time": "2018-02-11 02:10:25",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/jwilk/python-afl",
+ "star": 207,
+ "commits": 441,
+ "modify_time": "2019-09-30 06:16:13",
+ "last_release": "\n 0.7.2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/invictus1306/beebug",
+ "star": 207,
+ "commits": 25,
+ "modify_time": "2019-05-31 11:01:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/crozone/spectrepoc",
+ "star": 207,
+ "commits": 70,
+ "modify_time": "2018-09-25 03:13:50",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/bevry/getmac",
+ "star": 207,
+ "commits": 78,
+ "modify_time": "2019-12-08 09:15:09",
+ "last_release": "\n v4.4.0\n ",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/altf4/untwister",
+ "star": 207,
+ "commits": 119,
+ "modify_time": "2016-01-04 16:59:50",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/1hack0/facebook-bug-bounty-write-ups",
+ "star": 207,
+ "commits": 9,
+ "modify_time": "2019-04-13 09:12:57",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/yinghuocho/gotun2socks",
+ "star": 206,
+ "commits": 16,
+ "modify_time": "2016-12-22 05:35:59",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/OWASP/MSTG-Hacking-Playground",
+ "star": 206,
+ "commits": 61,
+ "modify_time": "2019-11-27 06:22:11",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/yifanlu/taihen",
+ "star": 206,
+ "commits": 121,
+ "modify_time": "2018-02-21 07:33:57",
+ "last_release": "v0.11",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/udark/underdark-android",
+ "star": 206,
+ "commits": 23,
+ "modify_time": "2018-05-10 17:04:19",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/stamparm/identywaf",
+ "star": 206,
+ "commits": 192,
+ "modify_time": "2019-11-18 14:58:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/royhills/ike-scan",
+ "star": 206,
+ "commits": 894,
+ "modify_time": "2017-08-04 17:59:14",
+ "last_release": "1.9",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/rogue-kdc/cve-2019-0841",
+ "star": 206,
+ "commits": 1,
+ "modify_time": "2019-04-09 16:49:06",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/orf/xcat",
+ "star": 206,
+ "commits": 257,
+ "modify_time": "2018-12-10 08:25:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mattifestation/wmi_backdoor",
+ "star": 206,
+ "commits": 3,
+ "modify_time": "2015-08-10 22:42:23",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/malicialab/avclass",
+ "star": 206,
+ "commits": 67,
+ "modify_time": "2018-07-27 12:28:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kotakanbe/go-cve-dictionary",
+ "star": 206,
+ "commits": 142,
+ "modify_time": "2019-11-22 03:49:57",
+ "last_release": "v0.3.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/jwhitehorn/jsminer",
+ "star": 206,
+ "commits": 13,
+ "modify_time": "2011-06-09 18:14:31",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/faizann24/resources-for-learning-hacking",
+ "star": 206,
+ "commits": 13,
+ "modify_time": "2018-10-20 18:30:06",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/derrekr/fastboot3ds",
+ "star": 206,
+ "commits": 989,
+ "modify_time": "2019-12-04 21:40:38",
+ "last_release": "v1.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/countercept/doublepulsar-c2-traffic-decryptor",
+ "star": 206,
+ "commits": 3,
+ "modify_time": "2017-04-17 21:07:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cbuchner1/ccminer",
+ "star": 206,
+ "commits": 35,
+ "modify_time": "2014-06-15 18:12:31",
+ "last_release": "v1.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/0x4d31/deception-as-detection",
+ "star": 206,
+ "commits": 79,
+ "modify_time": "2017-10-28 11:05:05",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/yzddmr6/as_webshell_venom",
+ "star": 205,
+ "commits": 32,
+ "modify_time": "2019-09-16 15:41:35",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/apt69/comahawk",
+ "star": 205,
+ "commits": 11,
+ "modify_time": "2019-11-14 14:16:54",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/shinlor/v2rays",
+ "star": 205,
+ "commits": 29,
+ "modify_time": "2018-05-25 10:50:54",
+ "last_release": "V1.0.0.3",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/toleda/wireless_half-mini",
+ "star": 205,
+ "commits": 53,
+ "modify_time": "2017-08-06 01:11:20",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/Paradoxis/PHP-Backdoor",
+ "star": 205,
+ "commits": 6,
+ "modify_time": "2019-03-25 20:02:18",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/dlang-community/D-Scanner",
+ "star": 205,
+ "commits": 1383,
+ "modify_time": "2019-11-28 11:18:28",
+ "last_release": "v0.8.0",
+ "lang": "D"
+ },
+ {
+ "link": "https://github.com/praetorian-code/trudy",
+ "star": 205,
+ "commits": 132,
+ "modify_time": "2017-03-23 14:36:50",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/openstack/hacking",
+ "star": 205,
+ "commits": 999,
+ "modify_time": "2019-09-25 23:11:41",
+ "last_release": "\n 1.1.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vschiavoni/sgx-papers",
+ "star": 205,
+ "commits": 129,
+ "modify_time": "2019-11-27 09:05:07",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/th3hurrican3/pepper",
+ "star": 205,
+ "commits": 7,
+ "modify_time": "2019-07-15 12:00:55",
+ "last_release": "",
+ "lang": "YARA"
+ },
+ {
+ "link": "https://github.com/spiderlabs/nmap-tools",
+ "star": 205,
+ "commits": 7,
+ "modify_time": "2013-06-19 18:07:02",
+ "last_release": "",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/snare/ida-efiutils",
+ "star": 205,
+ "commits": 25,
+ "modify_time": "2014-06-17 04:35:12",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/raz-varren/xsshell",
+ "star": 205,
+ "commits": 5,
+ "modify_time": "2018-12-03 02:40:28",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/rand0m1ze/ezsploit",
+ "star": 205,
+ "commits": 3,
+ "modify_time": "2016-02-04 22:41:23",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/patois/idacyber",
+ "star": 205,
+ "commits": 113,
+ "modify_time": "2019-11-26 10:14:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/montyly/gueb",
+ "star": 205,
+ "commits": 72,
+ "modify_time": "2018-05-31 10:20:46",
+ "last_release": "",
+ "lang": "OCaml"
+ },
+ {
+ "link": "https://github.com/m4ll0k/smbrute",
+ "star": 205,
+ "commits": 10,
+ "modify_time": "2019-11-25 22:14:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/keepwannabe/remot3d",
+ "star": 205,
+ "commits": 36,
+ "modify_time": "2019-10-01 08:32:02",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/jpcertcc/sysmonsearch",
+ "star": 205,
+ "commits": 4,
+ "modify_time": "2018-09-20 05:03:33",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/jasonwhite/ducible",
+ "star": 205,
+ "commits": 226,
+ "modify_time": "2019-10-02 21:05:59",
+ "last_release": "v1.2.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hzqst/unicorn_pe",
+ "star": 205,
+ "commits": 42,
+ "modify_time": "2019-02-20 23:50:43",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/enkomio/shed",
+ "star": 205,
+ "commits": 86,
+ "modify_time": "2019-01-29 14:47:10",
+ "last_release": "2.0.0",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/elevenpaths/ibombshell",
+ "star": 205,
+ "commits": 135,
+ "modify_time": "2019-10-15 13:01:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/akagi201/cryptotrader",
+ "star": 205,
+ "commits": 92,
+ "modify_time": "2018-11-22 02:49:10",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/mzfr/rsh",
+ "star": 204,
+ "commits": 6,
+ "modify_time": "2019-12-02 17:35:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xmcp/gofw",
+ "star": 204,
+ "commits": 29,
+ "modify_time": "2017-09-01 10:42:56",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/AonCyberLabs/xxe-recursive-download",
+ "star": 204,
+ "commits": 3,
+ "modify_time": "2015-11-18 16:08:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xsscx/commodity-injection-signatures",
+ "star": 204,
+ "commits": 210,
+ "modify_time": "2018-11-08 14:03:06",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/rfidtool/esp-rfid-tool",
+ "star": 204,
+ "commits": 78,
+ "modify_time": "2018-03-25 01:40:36",
+ "last_release": "1.2.1",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/owasp/benchmark",
+ "star": 204,
+ "commits": 273,
+ "modify_time": "2019-12-06 01:00:03",
+ "last_release": "1.2beta",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/niluje/kindletool",
+ "star": 204,
+ "commits": 1280,
+ "modify_time": "2019-12-06 19:00:06",
+ "last_release": "\n v1.6.5\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/nextgens/tor",
+ "star": 204,
+ "commits": 11431,
+ "modify_time": "2009-11-01 17:48:39",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/helmetjs/csp",
+ "star": 204,
+ "commits": 252,
+ "modify_time": "2019-11-04 03:42:30",
+ "last_release": "\n v2.9.4\n ",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/fw42/honeymap",
+ "star": 204,
+ "commits": 144,
+ "modify_time": "2013-09-17 14:15:33",
+ "last_release": "",
+ "lang": "CoffeeScript"
+ },
+ {
+ "link": "https://github.com/fireeye/idawasm",
+ "star": 204,
+ "commits": 93,
+ "modify_time": "2018-10-04 18:04:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/facebookresearch/asynchronousratchetingtree",
+ "star": 204,
+ "commits": 8,
+ "modify_time": "2018-03-29 18:03:49",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/evnm/research-in-production",
+ "star": 204,
+ "commits": 12,
+ "modify_time": "2018-03-01 21:02:40",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/damonmohammadbagher/nativepayload_dns",
+ "star": 204,
+ "commits": 32,
+ "modify_time": "2018-09-03 19:10:25",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/byt3bl33d3r/red-baron",
+ "star": 204,
+ "commits": 96,
+ "modify_time": "2019-08-13 21:51:36",
+ "last_release": "",
+ "lang": "HCL"
+ },
+ {
+ "link": "https://github.com/b4rtik/redpeanut",
+ "star": 204,
+ "commits": 187,
+ "modify_time": "2019-11-12 01:15:48",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/azonenberg/openfpga",
+ "star": 204,
+ "commits": 1389,
+ "modify_time": "2018-10-04 17:58:28",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/anshumanbh/brutesubs",
+ "star": 204,
+ "commits": 69,
+ "modify_time": "2019-08-04 18:55:58",
+ "last_release": "2.2.0",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/0xd4d/antinet",
+ "star": 204,
+ "commits": 36,
+ "modify_time": "2014-04-14 18:05:06",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/wingleung/save-page-state",
+ "star": 203,
+ "commits": 3,
+ "modify_time": "2019-05-29 14:45:45",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/suraj-root/smap",
+ "star": 203,
+ "commits": null,
+ "modify_time": "2017-12-15 19:27:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/spiderlabs/sharpcompile",
+ "star": 203,
+ "commits": 3,
+ "modify_time": "2018-11-10 07:52:33",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/sixstars/starctf2019",
+ "star": 203,
+ "commits": 42,
+ "modify_time": "2019-05-07 04:51:13",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/shaohua0116/group-normalization-tensorflow",
+ "star": 203,
+ "commits": 18,
+ "modify_time": "2018-10-09 14:03:59",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rpisec/llvm-deobfuscator",
+ "star": 203,
+ "commits": 32,
+ "modify_time": "2019-10-20 05:08:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/peperunas/injectopi",
+ "star": 203,
+ "commits": 3,
+ "modify_time": "2017-12-19 16:06:15",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/omergunal/pot",
+ "star": 203,
+ "commits": 50,
+ "modify_time": "2018-06-21 22:19:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/google/kasan",
+ "star": 203,
+ "commits": 1,
+ "modify_time": "2016-08-05 17:58:38",
+ "last_release": "\n v4.0-rc4\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/deadbits/insecureprogramming",
+ "star": 203,
+ "commits": 6,
+ "modify_time": "2017-02-16 02:48:32",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jiansiting/kali-windows",
+ "star": 202,
+ "commits": 6,
+ "modify_time": "2019-08-08 09:16:03",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/NewBee119/Ti_Collector",
+ "star": 202,
+ "commits": 170,
+ "modify_time": "2017-10-28 08:59:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vonahisec/leprechaun",
+ "star": 202,
+ "commits": 37,
+ "modify_time": "2019-10-11 06:44:31",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/mc-imperial/jfs",
+ "star": 202,
+ "commits": 509,
+ "modify_time": "2019-08-31 14:20:04",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/wiredpulse/posh-r2",
+ "star": 202,
+ "commits": 91,
+ "modify_time": "2019-10-10 00:22:57",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/weilaihui/ss-net",
+ "star": 202,
+ "commits": null,
+ "modify_time": "2017-11-06 04:37:44",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/tkmru/nao",
+ "star": 202,
+ "commits": 67,
+ "modify_time": "2018-02-12 15:42:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sud0woodo/dcomrade",
+ "star": 202,
+ "commits": 81,
+ "modify_time": "2018-11-30 12:34:36",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/stuhirst/awssecurity",
+ "star": 202,
+ "commits": 38,
+ "modify_time": "2019-12-05 14:47:22",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/oisf/libhtp",
+ "star": 202,
+ "commits": 1349,
+ "modify_time": "2019-10-14 14:22:13",
+ "last_release": "0.5.31",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/mseclab/nathan",
+ "star": 202,
+ "commits": 9,
+ "modify_time": "2016-11-04 14:45:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/m57/ardt",
+ "star": 202,
+ "commits": 15,
+ "modify_time": "2016-03-28 17:48:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kudelskisecurity/scannerl",
+ "star": 202,
+ "commits": 76,
+ "modify_time": "2018-08-06 12:03:25",
+ "last_release": "v0.42",
+ "lang": "Erlang"
+ },
+ {
+ "link": "https://github.com/k2/ehtrace",
+ "star": 202,
+ "commits": 34,
+ "modify_time": "2016-09-06 20:00:27",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/gtoad/android_inline_hook",
+ "star": 202,
+ "commits": 36,
+ "modify_time": "2018-09-30 06:26:20",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/greekn/rce-bug",
+ "star": 202,
+ "commits": 74,
+ "modify_time": "2019-05-21 02:56:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gifts/rogue-mysql-server",
+ "star": 202,
+ "commits": 2,
+ "modify_time": "2013-09-15 09:52:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fics/atcmd",
+ "star": 202,
+ "commits": 5,
+ "modify_time": "2018-08-28 21:23:48",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/f5networks/f5-common-python",
+ "star": 202,
+ "commits": 1438,
+ "modify_time": "2019-04-11 06:28:49",
+ "last_release": "\n 3.0.21\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/euske/pyrexecd",
+ "star": 202,
+ "commits": 65,
+ "modify_time": "2018-06-07 13:17:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/endgameinc/dga_predict",
+ "star": 202,
+ "commits": 2,
+ "modify_time": "2016-11-18 15:32:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/doublelabyrinth/how-does-navicat-encrypt-password",
+ "star": 202,
+ "commits": 25,
+ "modify_time": "2019-05-23 23:50:15",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/doomedraven/virustotalapi",
+ "star": 202,
+ "commits": 158,
+ "modify_time": "2019-11-28 13:28:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/decrypto-org/rupture",
+ "star": 202,
+ "commits": 1383,
+ "modify_time": "2019-07-28 10:47:39",
+ "last_release": "",
+ "lang": "TeX"
+ },
+ {
+ "link": "https://github.com/cgutman/adblib",
+ "star": 202,
+ "commits": 11,
+ "modify_time": "2017-06-21 06:04:59",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/angr/cle",
+ "star": 202,
+ "commits": 1134,
+ "modify_time": "2019-12-09 00:46:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/can1357/byepg",
+ "star": 201,
+ "commits": 43,
+ "modify_time": "2019-11-21 23:26:28",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/yelp/threat_intel",
+ "star": 201,
+ "commits": 242,
+ "modify_time": "2019-08-26 20:47:59",
+ "last_release": "\n v0.1.30\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/x1mdev/reconpi",
+ "star": 201,
+ "commits": 188,
+ "modify_time": "2019-12-09 16:32:55",
+ "last_release": "v2.0",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/thesph1nx/absolutezero",
+ "star": 201,
+ "commits": 14,
+ "modify_time": "2019-08-20 18:52:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rolfrolles/ghidrapal",
+ "star": 201,
+ "commits": 49,
+ "modify_time": "2019-05-19 05:56:44",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/medbenali/cyberscan",
+ "star": 201,
+ "commits": 75,
+ "modify_time": "2019-01-23 21:34:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lmammino/jwt-cracker",
+ "star": 201,
+ "commits": 16,
+ "modify_time": "2018-10-21 09:56:52",
+ "last_release": "v1.0.3",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/kalymos/psnee",
+ "star": 201,
+ "commits": 65,
+ "modify_time": "2019-10-19 10:53:56",
+ "last_release": "v7.01",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/joker25000/devploit",
+ "star": 201,
+ "commits": null,
+ "modify_time": "2018-04-25 16:32:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jedisct1/rust-doh",
+ "star": 201,
+ "commits": 125,
+ "modify_time": "2019-11-18 14:32:37",
+ "last_release": "\n 0.1.21\n ",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/infamoussyn/rogue",
+ "star": 201,
+ "commits": 31,
+ "modify_time": "2019-01-15 02:53:10",
+ "last_release": "v2.0.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fnmsd/awvs_script_decode",
+ "star": 201,
+ "commits": 4,
+ "modify_time": "2017-11-11 13:31:08",
+ "last_release": "",
+ "lang": "SourcePawn"
+ },
+ {
+ "link": "https://github.com/bedthegod/confuserex-mod-by-bed",
+ "star": 201,
+ "commits": 503,
+ "modify_time": "2019-06-14 03:03:21",
+ "last_release": "V1.4.1",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/ares-x/awd-predator-framework",
+ "star": 201,
+ "commits": 55,
+ "modify_time": "2019-06-19 13:29:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/appfolio/gemsurance",
+ "star": 201,
+ "commits": 83,
+ "modify_time": "2019-09-26 17:52:17",
+ "last_release": "\n v0.10.0\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/hunters-forge/ATTACK-Python-Client",
+ "star": 200,
+ "commits": 39,
+ "modify_time": "2019-11-15 19:00:08",
+ "last_release": "0.2.6",
+ "lang": "Jupyter Notebook"
+ },
+ {
+ "link": "https://github.com/TuuuNya/webdirscan",
+ "star": 200,
+ "commits": 31,
+ "modify_time": "2016-09-03 21:08:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/NewBee119/threat-intelligence",
+ "star": 200,
+ "commits": 25,
+ "modify_time": "2018-10-22 09:04:06",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/TuuuNya/fuzz_dict",
+ "star": 200,
+ "commits": 5,
+ "modify_time": "2016-12-26 10:41:52",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/sec-bit/awesome-buggy-erc20-tokens",
+ "star": 200,
+ "commits": 209,
+ "modify_time": "2018-10-10 07:54:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rainers/cv2pdb",
+ "star": 200,
+ "commits": 170,
+ "modify_time": "2019-07-18 18:56:38",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/powershell/operation-validation-framework",
+ "star": 200,
+ "commits": 105,
+ "modify_time": "2019-05-18 06:45:10",
+ "last_release": "v1.2.0",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/mxmssh/drltrace",
+ "star": 200,
+ "commits": 100,
+ "modify_time": "2019-02-23 20:01:40",
+ "last_release": "0.9",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/linw1995/lightsocks-python",
+ "star": 200,
+ "commits": 16,
+ "modify_time": "2018-01-26 14:56:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jas502n/cve-2019-13272",
+ "star": 200,
+ "commits": 15,
+ "modify_time": "2019-07-31 08:05:52",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hellogoldsnakeman/masnmapscan-v1.0",
+ "star": 200,
+ "commits": 8,
+ "modify_time": "2019-06-20 05:24:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hashcat/kwprocessor",
+ "star": 200,
+ "commits": 43,
+ "modify_time": "2018-06-19 07:53:20",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/dragen1860/learningtocompare-pytorch",
+ "star": 200,
+ "commits": 14,
+ "modify_time": "2018-02-15 06:50:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/doyensec/graph-ql",
+ "star": 200,
+ "commits": 46,
+ "modify_time": "2019-07-17 12:09:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dowjones/hammer",
+ "star": 200,
+ "commits": 259,
+ "modify_time": "2019-06-26 16:23:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/david-reguera-garcia-dreg/anticuckoo",
+ "star": 200,
+ "commits": 68,
+ "modify_time": "2018-03-26 12:31:28",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/crowdstrike/tortilla",
+ "star": 200,
+ "commits": 12,
+ "modify_time": "2016-07-18 21:42:53",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cnlohr/espthernet",
+ "star": 200,
+ "commits": 63,
+ "modify_time": "2017-05-23 04:35:49",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/bazad/blanket",
+ "star": 200,
+ "commits": 28,
+ "modify_time": "2018-11-13 00:25:17",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/anudeepnd/blacklist",
+ "star": 200,
+ "commits": 629,
+ "modify_time": "2019-11-29 18:01:22",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/kevthehermit/ducktoolkit",
+ "star": 199,
+ "commits": 30,
+ "modify_time": "2019-02-16 19:08:21",
+ "last_release": "1.0.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tylous/vibe",
+ "star": 199,
+ "commits": 28,
+ "modify_time": "2019-10-18 01:09:22",
+ "last_release": "\n 2.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vector35/pwnadventurez",
+ "star": 199,
+ "commits": 314,
+ "modify_time": "2016-12-29 23:36:44",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/uninett/mod_auth_mellon",
+ "star": 199,
+ "commits": 1,
+ "modify_time": "2019-09-30 06:57:33",
+ "last_release": "v0.14.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/tihmstar/doubleh3lix",
+ "star": 199,
+ "commits": 24,
+ "modify_time": "2018-03-22 21:37:12",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/sunweiliang/neteasemusiccrack",
+ "star": 199,
+ "commits": 11,
+ "modify_time": "2018-08-14 06:20:22",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/secrary/drsemu",
+ "star": 199,
+ "commits": 59,
+ "modify_time": "2019-10-10 13:34:32",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/redteamsecuritytraining/PlugBot-Plug",
+ "star": 199,
+ "commits": 29,
+ "modify_time": "2017-02-02 22:43:26",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/quarkslab/binmap",
+ "star": 199,
+ "commits": 36,
+ "modify_time": "2018-07-02 15:51:43",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/iamcryptoki/snowden-archive",
+ "star": 199,
+ "commits": 26,
+ "modify_time": "2018-12-27 07:44:58",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/iaik/kaiser",
+ "star": 199,
+ "commits": 8,
+ "modify_time": "2017-11-01 14:56:45",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ezekg/git-hound",
+ "star": 199,
+ "commits": 73,
+ "modify_time": "2017-12-21 19:18:34",
+ "last_release": "0.6.2",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/ernw/androtickler",
+ "star": 199,
+ "commits": 11,
+ "modify_time": "2018-01-26 05:08:12",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/eadom/ctf_xinetd",
+ "star": 199,
+ "commits": 15,
+ "modify_time": "2018-10-19 02:59:45",
+ "last_release": "",
+ "lang": "Dockerfile"
+ },
+ {
+ "link": "https://github.com/dismantl/linux-injector",
+ "star": 199,
+ "commits": 9,
+ "modify_time": "2016-06-28 16:15:18",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cturt/ps4-playground",
+ "star": 199,
+ "commits": 68,
+ "modify_time": "2016-04-15 23:12:07",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/climate-mirror/datasets",
+ "star": 199,
+ "commits": 36,
+ "modify_time": "2017-03-10 06:03:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/googleprojectzero/ios-messaging-tools",
+ "star": 198,
+ "commits": 1,
+ "modify_time": "2019-08-07 20:27:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/AlienVault-OTX/ApiV2",
+ "star": 198,
+ "commits": 31,
+ "modify_time": "2018-04-11 08:18:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/TheHive-Project/TheHiveDocs",
+ "star": 198,
+ "commits": 274,
+ "modify_time": "2019-10-26 20:04:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/WiPi-Hunter/PiKarma",
+ "star": 198,
+ "commits": 27,
+ "modify_time": "2018-09-21 08:34:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/auth0/Lock.swift",
+ "star": 198,
+ "commits": 565,
+ "modify_time": "2019-12-04 09:43:27",
+ "last_release": "2.13.2",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/rutkai/pentest-bookmarks",
+ "star": 198,
+ "commits": 74,
+ "modify_time": "2015-04-29 07:26:04",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/zombiecraig/icsim",
+ "star": 198,
+ "commits": 31,
+ "modify_time": "2019-05-27 21:48:09",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/spring-cloud-samples/spring-cloud-contract-samples",
+ "star": 198,
+ "commits": 454,
+ "modify_time": "2019-12-02 14:48:00",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/proteas/native-lldb-for-ios",
+ "star": 198,
+ "commits": 9,
+ "modify_time": "2017-10-20 03:53:12",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/nccgroup/g-scout",
+ "star": 198,
+ "commits": 68,
+ "modify_time": "2019-04-11 14:19:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mkellerman/invoke-commandas",
+ "star": 198,
+ "commits": 75,
+ "modify_time": "2019-07-15 23:41:12",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/mike01/pypacker",
+ "star": 198,
+ "commits": 433,
+ "modify_time": "2018-06-14 21:37:34",
+ "last_release": "\n v4.3\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/meejah/txtorcon",
+ "star": 198,
+ "commits": 1695,
+ "modify_time": "2019-10-08 08:54:52",
+ "last_release": "v19.1.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/magoo/authtables",
+ "star": 198,
+ "commits": 127,
+ "modify_time": "2017-11-14 21:20:06",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/lsds/spectre-attack-sgx",
+ "star": 198,
+ "commits": 5,
+ "modify_time": "2018-01-14 19:47:02",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jaredhaight/psattackbuildtool",
+ "star": 198,
+ "commits": 92,
+ "modify_time": "2018-04-14 23:16:09",
+ "last_release": "v1.9.1",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/isofew/sssniff",
+ "star": 198,
+ "commits": 2,
+ "modify_time": "2017-03-25 20:39:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/google/in-silico-labeling",
+ "star": 198,
+ "commits": 32,
+ "modify_time": "2019-06-24 22:39:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ghostpack/sharpdpapi",
+ "star": 198,
+ "commits": 18,
+ "modify_time": "2019-07-25 20:37:36",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/faizann24/using-machine-learning-to-detect-malicious-urls",
+ "star": 198,
+ "commits": 13,
+ "modify_time": "2017-02-18 13:01:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/f8left/decllvm",
+ "star": 198,
+ "commits": 3,
+ "modify_time": "2016-05-15 09:06:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/beave/sagan",
+ "star": 198,
+ "commits": 1460,
+ "modify_time": "2019-12-09 21:48:09",
+ "last_release": "\n 1.1.0\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/athre0z/wasm",
+ "star": 198,
+ "commits": 39,
+ "modify_time": "2019-07-13 16:26:55",
+ "last_release": "\n v1.2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/shadowsocks/v2ray-plugin-android",
+ "star": 197,
+ "commits": 29,
+ "modify_time": "2019-08-23 14:54:44",
+ "last_release": "v1.3.0",
+ "lang": "Kotlin"
+ },
+ {
+ "link": "https://github.com/siguza/v0rtex",
+ "star": 197,
+ "commits": 20,
+ "modify_time": "2018-03-07 01:10:00",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/secana/penet",
+ "star": 197,
+ "commits": 534,
+ "modify_time": "2019-12-06 08:19:35",
+ "last_release": "v1.1.0.0",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/scanlime/arduino-lelo-remote",
+ "star": 197,
+ "commits": 21,
+ "modify_time": "2013-02-12 06:01:00",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/s1kr10s/apache-struts-v3",
+ "star": 197,
+ "commits": 25,
+ "modify_time": "2018-08-28 18:38:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pwntester/serialkillerbypassgadgetcollection",
+ "star": 197,
+ "commits": 2,
+ "modify_time": "2016-04-11 14:58:18",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/minio/concert",
+ "star": 197,
+ "commits": 31,
+ "modify_time": "2017-09-03 03:55:28",
+ "last_release": "0.0.3",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/infosecn1nja/awesome-mitre-attack",
+ "star": 197,
+ "commits": 12,
+ "modify_time": "2019-09-14 00:51:15",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/domblack/php-scrypt",
+ "star": 197,
+ "commits": 74,
+ "modify_time": "2018-02-26 09:46:36",
+ "last_release": "\n v1.4.2\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/detuxsandbox/detux",
+ "star": 197,
+ "commits": 11,
+ "modify_time": "2018-02-16 09:39:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cryptoseb/cryptopaper",
+ "star": 197,
+ "commits": 21,
+ "modify_time": "2019-08-13 20:28:23",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/cisco-talos/decept",
+ "star": 197,
+ "commits": 70,
+ "modify_time": "2019-10-03 19:51:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bitblaze-fuzzball/fuzzball",
+ "star": 197,
+ "commits": 690,
+ "modify_time": "2019-12-09 21:34:21",
+ "last_release": "",
+ "lang": "OCaml"
+ },
+ {
+ "link": "https://github.com/b2r2-org/b2r2",
+ "star": 197,
+ "commits": 635,
+ "modify_time": "2019-11-21 14:47:14",
+ "last_release": "v0.3.0",
+ "lang": "F#"
+ },
+ {
+ "link": "https://github.com/angr/angr-management",
+ "star": 197,
+ "commits": 735,
+ "modify_time": "2019-12-06 19:07:26",
+ "last_release": "v0.0.0.0.0.0.0.0.00002-alpha",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/alonemonkey/dumpdecrypted",
+ "star": 197,
+ "commits": 7,
+ "modify_time": "2017-12-25 04:31:12",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/ignitetechnologies/hackthebox-ctf-writeups",
+ "star": 196,
+ "commits": 8,
+ "modify_time": "2019-10-28 13:31:44",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ret2got/disasm.pro",
+ "star": 196,
+ "commits": 65,
+ "modify_time": "2019-11-30 11:15:42",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/zodiacon/drivermon",
+ "star": 196,
+ "commits": 24,
+ "modify_time": "2019-07-09 09:11:12",
+ "last_release": "0.31beta",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/yvesalexandre/bandicoot",
+ "star": 196,
+ "commits": 348,
+ "modify_time": "2018-05-06 12:36:17",
+ "last_release": "0.5",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sqlab/symgdb",
+ "star": 196,
+ "commits": 49,
+ "modify_time": "2018-05-15 07:58:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/spiderlabs/malware-analysis",
+ "star": 196,
+ "commits": 44,
+ "modify_time": "2016-07-29 21:07:56",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/seemoo-lab/internalblue",
+ "star": 196,
+ "commits": 268,
+ "modify_time": "2019-11-16 18:02:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/saaramar/execve_exploit",
+ "star": 196,
+ "commits": 6,
+ "modify_time": "2018-02-02 09:37:25",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/rook2pawn/node-ddos",
+ "star": 196,
+ "commits": 94,
+ "modify_time": "2019-02-24 23:13:21",
+ "last_release": "\n v0.2.1\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/robertdavidgraham/telnetlogger",
+ "star": 196,
+ "commits": 18,
+ "modify_time": "2017-03-05 04:55:15",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/pstirparo/mac4n6",
+ "star": 196,
+ "commits": 26,
+ "modify_time": "2018-10-19 08:47:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pillarjs/csrf",
+ "star": 196,
+ "commits": 196,
+ "modify_time": "2019-04-10 03:18:46",
+ "last_release": "3.1.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/denandz/fuzzotron",
+ "star": 196,
+ "commits": 15,
+ "modify_time": "2019-12-09 05:05:48",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/crowecybersecurity/ps1encode",
+ "star": 196,
+ "commits": 41,
+ "modify_time": "2016-09-16 01:20:00",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/abstractj/kalium",
+ "star": 196,
+ "commits": 179,
+ "modify_time": "2018-05-25 02:37:38",
+ "last_release": "\n 0.8.0\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/falseen/shadowsocks-pyqt",
+ "star": 195,
+ "commits": 100,
+ "modify_time": "2017-03-31 06:32:30",
+ "last_release": "v0.3.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/spacehuhn/wifiduck",
+ "star": 195,
+ "commits": 288,
+ "modify_time": "2019-12-04 13:33:41",
+ "last_release": "v1.0.0",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/yingcong/facelet_bank",
+ "star": 195,
+ "commits": 11,
+ "modify_time": "2019-10-28 02:18:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ocsaf/freevulnsearch",
+ "star": 195,
+ "commits": 41,
+ "modify_time": "2019-11-17 13:46:06",
+ "last_release": "",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/nocheatplus/nocheatplus",
+ "star": 195,
+ "commits": 3404,
+ "modify_time": "2018-08-26 09:41:01",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/mpgn/cve-2019-0192",
+ "star": 195,
+ "commits": 5,
+ "modify_time": "2019-03-10 18:33:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mechaphish/mecha-docs",
+ "star": 195,
+ "commits": 43,
+ "modify_time": "2016-08-21 07:09:25",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/knightmare2600/shadowbrokers",
+ "star": 195,
+ "commits": 21,
+ "modify_time": "2018-12-06 11:37:43",
+ "last_release": "",
+ "lang": "Batchfile"
+ },
+ {
+ "link": "https://github.com/hannoch/scaner",
+ "star": 195,
+ "commits": 7,
+ "modify_time": "2019-03-15 14:43:06",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/delvelabs/vane",
+ "star": 195,
+ "commits": 1899,
+ "modify_time": "2019-08-23 13:58:53",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/cheetz/sslscrape",
+ "star": 195,
+ "commits": 7,
+ "modify_time": "2018-03-21 21:23:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cararasu/holodec",
+ "star": 195,
+ "commits": 204,
+ "modify_time": "2018-12-11 18:02:45",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/boy-hack/hack-requests",
+ "star": 195,
+ "commits": 59,
+ "modify_time": "2019-08-17 14:36:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/alvarosanchez/grails-spring-security-rest",
+ "star": 195,
+ "commits": 801,
+ "modify_time": "2019-09-04 15:27:29",
+ "last_release": "3.0.0.RC1",
+ "lang": "Groovy"
+ },
+ {
+ "link": "https://github.com/aircrack-ng/mdk4",
+ "star": 195,
+ "commits": 54,
+ "modify_time": "2019-11-19 02:08:37",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/04x/icg-autoexploiterbot",
+ "star": 195,
+ "commits": 202,
+ "modify_time": "2019-09-27 13:06:04",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/trojan-gfw/igniter",
+ "star": 194,
+ "commits": 81,
+ "modify_time": "2019-10-02 17:37:07",
+ "last_release": "v0.1.0-pre-alpha10",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/hackatnow/djangohunter",
+ "star": 194,
+ "commits": 24,
+ "modify_time": "2019-01-01 18:11:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nvisium-jack-mannino/OWASP-GoatDroid-Project",
+ "star": 194,
+ "commits": 1,
+ "modify_time": "2012-09-16 05:03:32",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/genet-app/genet",
+ "star": 194,
+ "commits": 243,
+ "modify_time": "2018-11-07 14:59:54",
+ "last_release": "",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/zardus/wargame-nexus",
+ "star": 194,
+ "commits": 16,
+ "modify_time": "2019-03-11 05:01:53",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/xairy/mipt-ctf",
+ "star": 194,
+ "commits": 217,
+ "modify_time": "2017-05-28 14:02:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/unapibageek/cbm",
+ "star": 194,
+ "commits": 19,
+ "modify_time": "2018-10-01 20:06:53",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/sfeley/candy",
+ "star": 194,
+ "commits": 89,
+ "modify_time": "2010-06-10 16:07:21",
+ "last_release": "\n v0.2.10\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/sadprocessor/somestuff",
+ "star": 194,
+ "commits": 88,
+ "modify_time": "2019-10-22 11:19:43",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/ropnop/impacket_static_binaries",
+ "star": 194,
+ "commits": 2882,
+ "modify_time": "2019-04-03 20:38:18",
+ "last_release": "0.9.20-dev-binaries",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/panda-re/lava",
+ "star": 194,
+ "commits": 1413,
+ "modify_time": "2019-07-01 15:21:03",
+ "last_release": "\n v2.0.0\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/nccgroup/upnp-pentest-toolkit",
+ "star": 194,
+ "commits": 9,
+ "modify_time": "2014-11-13 08:31:34",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/mhils/honeyproxy",
+ "star": 194,
+ "commits": 359,
+ "modify_time": "2017-01-16 23:01:34",
+ "last_release": "\n v1.1\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/lingerhk/hacking_script",
+ "star": 194,
+ "commits": 106,
+ "modify_time": "2019-04-17 10:08:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ldtteam/minecolonies",
+ "star": 194,
+ "commits": 4545,
+ "modify_time": "2019-12-08 20:08:35",
+ "last_release": "\n 0.10.579-ALPHA\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/jdonsec/allthingsssrf",
+ "star": 194,
+ "commits": 29,
+ "modify_time": "2019-09-16 20:25:56",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/f3d0x0/gpon",
+ "star": 194,
+ "commits": 17,
+ "modify_time": "2018-05-10 15:08:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dragokas/hijackthis",
+ "star": 194,
+ "commits": 119,
+ "modify_time": "2019-01-14 15:22:42",
+ "last_release": "\n v2.0.5\n ",
+ "lang": "Visual Basic .NET"
+ },
+ {
+ "link": "https://github.com/cuishark/cuishark",
+ "star": 194,
+ "commits": 195,
+ "modify_time": "2019-07-11 10:18:40",
+ "last_release": "\n v0.1.2\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/comotion/vsf",
+ "star": 194,
+ "commits": 160,
+ "modify_time": "2019-01-17 13:25:58",
+ "last_release": "\n 4.1.0.2\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/hackatnow/djangohunter",
+ "star": 194,
+ "commits": 24,
+ "modify_time": "2019-01-01 18:11:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/suniceman/ss-fly",
+ "star": 193,
+ "commits": 13,
+ "modify_time": "2019-06-21 08:31:59",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/vysecurity/ANGRYPUPPY",
+ "star": 193,
+ "commits": 78,
+ "modify_time": "2017-08-28 14:42:41",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/ripperhe/Debugo",
+ "star": 193,
+ "commits": 162,
+ "modify_time": "2019-11-05 09:22:11",
+ "last_release": "\n 0.2.7\n ",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/Abdulrah33m/Cl0neMast3r",
+ "star": 193,
+ "commits": 18,
+ "modify_time": "2018-03-10 17:50:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zer4tul/hacker-howto",
+ "star": 193,
+ "commits": 23,
+ "modify_time": "2019-01-04 05:15:44",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/xortroll/emuiibo",
+ "star": 193,
+ "commits": 64,
+ "modify_time": "2019-09-19 18:16:55",
+ "last_release": "0.3.1",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/vesche/lonely-shell",
+ "star": 193,
+ "commits": null,
+ "modify_time": "2016-11-08 22:26:55",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/tai7sy/fuckcdn",
+ "star": 193,
+ "commits": 3,
+ "modify_time": "2019-03-06 02:23:00",
+ "last_release": "",
+ "lang": "Batchfile"
+ },
+ {
+ "link": "https://github.com/scanlime/coastermelt",
+ "star": 193,
+ "commits": 320,
+ "modify_time": "2019-01-06 20:12:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/roddhjav/pass-tomb",
+ "star": 193,
+ "commits": 167,
+ "modify_time": "2019-11-10 00:24:31",
+ "last_release": "v1.2",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/owasp/samm",
+ "star": 193,
+ "commits": 1004,
+ "modify_time": "2019-12-09 01:19:15",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/nowsecure/frida-cycript",
+ "star": 193,
+ "commits": 1463,
+ "modify_time": "2019-08-17 01:31:53",
+ "last_release": "v2.0.5",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/linushenze/keysteal",
+ "star": 193,
+ "commits": 7,
+ "modify_time": "2019-06-03 21:15:10",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/joxeankoret/cosa-nostra",
+ "star": 193,
+ "commits": 23,
+ "modify_time": "2019-10-29 12:06:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jakobbotsch/fuzzlyn",
+ "star": 193,
+ "commits": 148,
+ "modify_time": "2019-10-03 13:17:19",
+ "last_release": "\n v1.1\n ",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/googleprojectzero/street-party",
+ "star": 193,
+ "commits": 2,
+ "modify_time": "2019-10-15 01:12:31",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/frizb/bypassing-web-application-firewalls",
+ "star": 193,
+ "commits": 18,
+ "modify_time": "2018-10-29 17:27:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/francisck/danderspritz_docs",
+ "star": 193,
+ "commits": 4,
+ "modify_time": "2017-09-20 05:42:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fastly/ftw",
+ "star": 193,
+ "commits": 320,
+ "modify_time": "2019-04-23 20:10:24",
+ "last_release": "1.1.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ehsahil/recon-my-way",
+ "star": 193,
+ "commits": 28,
+ "modify_time": "2018-10-25 21:18:58",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/dvandal/cryptonote-nodejs-pool",
+ "star": 193,
+ "commits": 1061,
+ "modify_time": "2019-12-03 00:43:43",
+ "last_release": "1.4.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/derekbabb/cybersecurity",
+ "star": 193,
+ "commits": 105,
+ "modify_time": "2019-09-06 15:56:55",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/datasoft/honeyd",
+ "star": 193,
+ "commits": 337,
+ "modify_time": "2013-12-20 16:11:38",
+ "last_release": "\n nova-13.09\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/codeshark-dev/nofuserex",
+ "star": 193,
+ "commits": 35,
+ "modify_time": "2016-09-01 20:10:24",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/clojurewerkz/meltdown",
+ "star": 193,
+ "commits": 344,
+ "modify_time": "2016-01-02 01:52:18",
+ "last_release": "\n v1.1.0\n ",
+ "lang": "Clojure"
+ },
+ {
+ "link": "https://github.com/cathugger/mkp224o",
+ "star": 193,
+ "commits": 181,
+ "modify_time": "2019-11-20 16:22:43",
+ "last_release": "v1.4.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/boyan-milanov/ropgenerator",
+ "star": 193,
+ "commits": 199,
+ "modify_time": "2019-07-10 13:34:13",
+ "last_release": "2.0",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/auth0/auth0-python",
+ "star": 193,
+ "commits": 498,
+ "modify_time": "2019-10-26 00:02:16",
+ "last_release": "3.9.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cruise-automation/k-rail",
+ "star": 192,
+ "commits": 51,
+ "modify_time": "2019-11-18 19:20:22",
+ "last_release": "v1.2.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/isecpartners/libtech-auditing-cheatsheet",
+ "star": 192,
+ "commits": 13,
+ "modify_time": "2016-01-21 13:52:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zed-0xff/pedump",
+ "star": 192,
+ "commits": 294,
+ "modify_time": "2016-09-09 14:31:11",
+ "last_release": "\n v0.5.2\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/unipacker/unipacker",
+ "star": 192,
+ "commits": 196,
+ "modify_time": "2019-10-03 13:30:11",
+ "last_release": "1.0.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/smeegesec/hashtag",
+ "star": 192,
+ "commits": 5,
+ "modify_time": "2013-11-25 18:34:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mubix/netview",
+ "star": 192,
+ "commits": 19,
+ "modify_time": "2016-05-06 14:32:53",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/mesosphere/cassandra-mesos-deprecated",
+ "star": 192,
+ "commits": 364,
+ "modify_time": "2017-11-15 19:46:20",
+ "last_release": "v0.2.0",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/malwaredllc/bamf",
+ "star": 192,
+ "commits": 12,
+ "modify_time": "2018-08-29 15:51:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lc/secretz",
+ "star": 192,
+ "commits": 9,
+ "modify_time": "2019-07-12 17:45:10",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/lazza/recuperabit",
+ "star": 192,
+ "commits": 45,
+ "modify_time": "2019-11-11 00:33:04",
+ "last_release": "v1.1.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ionescu007/winipt",
+ "star": 192,
+ "commits": 28,
+ "modify_time": "2019-01-29 17:48:03",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/google/certificate-transparency-go",
+ "star": 192,
+ "commits": 1231,
+ "modify_time": "2019-12-03 15:52:32",
+ "last_release": "v1.1.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/furrtek/dmg-cpu-inside",
+ "star": 192,
+ "commits": 11,
+ "modify_time": "2019-11-07 12:14:36",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/foospidy/dbdat",
+ "star": 192,
+ "commits": 273,
+ "modify_time": "2018-06-26 02:09:42",
+ "last_release": "v1.0.7-alpha",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dionach/phemail",
+ "star": 192,
+ "commits": 28,
+ "modify_time": "2019-09-16 15:39:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cybereason/siofra",
+ "star": 192,
+ "commits": 9,
+ "modify_time": "2017-10-05 22:38:38",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/cure53/flashbang",
+ "star": 192,
+ "commits": 70,
+ "modify_time": "2015-04-19 07:19:00",
+ "last_release": "",
+ "lang": "ActionScript"
+ },
+ {
+ "link": "https://github.com/caledoniaproject/xlcloudclient",
+ "star": 192,
+ "commits": 159,
+ "modify_time": "2017-08-20 02:12:13",
+ "last_release": "\n v0.63\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/brucetg/pentest-tools",
+ "star": 192,
+ "commits": 2,
+ "modify_time": "2018-05-02 16:32:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bindecy/hugedirtycowpoc",
+ "star": 192,
+ "commits": 8,
+ "modify_time": "2017-11-30 00:24:11",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/0xr0/shellver",
+ "star": 192,
+ "commits": 16,
+ "modify_time": "2018-12-26 18:00:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tongxiji/shadowsocks-java",
+ "star": 191,
+ "commits": 71,
+ "modify_time": "2019-10-12 02:25:19",
+ "last_release": "1.2.0",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/koding/tunnel",
+ "star": 191,
+ "commits": 139,
+ "modify_time": "2017-06-01 19:54:43",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/P3GLEG/PwnBack",
+ "star": 191,
+ "commits": 30,
+ "modify_time": "2018-05-08 16:52:21",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/yaseng/iot-security-wiki",
+ "star": 191,
+ "commits": 14,
+ "modify_time": "2018-11-13 12:49:14",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/xyntax/dirbrute",
+ "star": 191,
+ "commits": 8,
+ "modify_time": "2016-07-04 15:14:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/viralmaniar/wifi-dumper",
+ "star": 191,
+ "commits": 16,
+ "modify_time": "2017-10-19 02:56:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/unbinilium/twist",
+ "star": 191,
+ "commits": 79,
+ "modify_time": "2019-09-02 02:52:34",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/tintinweb/pub",
+ "star": 191,
+ "commits": 84,
+ "modify_time": "2019-05-16 16:00:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/skyscanner/lambdaguard",
+ "star": 191,
+ "commits": 59,
+ "modify_time": "2019-11-21 14:28:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sindresorhus/internal-ip",
+ "star": 191,
+ "commits": 53,
+ "modify_time": "2019-10-16 03:56:29",
+ "last_release": "v5.0.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/sham00n/buster",
+ "star": 191,
+ "commits": 92,
+ "modify_time": "2019-08-10 15:38:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/riusksk/secconarchive",
+ "star": 191,
+ "commits": 20,
+ "modify_time": "2019-08-22 05:51:42",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/projectante/dnsgen",
+ "star": 191,
+ "commits": 9,
+ "modify_time": "2019-10-17 09:14:46",
+ "last_release": "\n v1.0.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pochubs/pochubs",
+ "star": 191,
+ "commits": 8,
+ "modify_time": "2019-06-19 08:25:06",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/onesecure/shadowagentnotes",
+ "star": 191,
+ "commits": 392,
+ "modify_time": "2019-10-01 07:19:23",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/niklasrosenstein/pydoc-markdown",
+ "star": 191,
+ "commits": 181,
+ "modify_time": "2019-10-18 23:46:53",
+ "last_release": "\n v2.0.5\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jrspruitt/ubi_reader",
+ "star": 191,
+ "commits": 96,
+ "modify_time": "2019-09-12 06:02:58",
+ "last_release": "v0.6.3-master",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/isecpartners/jailbreak",
+ "star": 191,
+ "commits": 11,
+ "modify_time": "2015-12-28 17:11:47",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/gimini/mimidbg",
+ "star": 191,
+ "commits": 8,
+ "modify_time": "2017-12-11 01:13:39",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/ghostmanager/ghostwriter",
+ "star": 191,
+ "commits": 85,
+ "modify_time": "2019-11-15 21:44:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gaenserich/hostsblock",
+ "star": 191,
+ "commits": 205,
+ "modify_time": "2019-05-15 12:41:02",
+ "last_release": "v0.999.8.1",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/faber03/androidmalwareevaluatingtools",
+ "star": 191,
+ "commits": 58,
+ "modify_time": "2016-05-22 12:13:31",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/esrrhs/pingtunnel",
+ "star": 191,
+ "commits": 199,
+ "modify_time": "2019-12-05 06:45:26",
+ "last_release": "1.3",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/emersonelectricco/fsf",
+ "star": 191,
+ "commits": 147,
+ "modify_time": "2019-01-28 16:29:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/drduh/purse",
+ "star": 191,
+ "commits": 65,
+ "modify_time": "2019-11-28 23:18:48",
+ "last_release": "2.0b",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/andikleen/simple-pt",
+ "star": 191,
+ "commits": 433,
+ "modify_time": "2019-05-25 15:21:18",
+ "last_release": "\n r2\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ak1t4/open-redirect-scanner",
+ "star": 191,
+ "commits": 26,
+ "modify_time": "2018-11-22 19:40:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/78778443/permeate",
+ "star": 191,
+ "commits": 65,
+ "modify_time": "2018-12-22 12:32:04",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/skelsec/jackdaw",
+ "star": 190,
+ "commits": 125,
+ "modify_time": "2019-11-25 00:41:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zerokeeper/webeye",
+ "star": 190,
+ "commits": 24,
+ "modify_time": "2018-12-29 14:05:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xiaokanghub/frida-android-unpack",
+ "star": 190,
+ "commits": 7,
+ "modify_time": "2019-12-03 09:15:47",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/wapiflapi/veles",
+ "star": 190,
+ "commits": 21,
+ "modify_time": "2017-01-10 23:45:21",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/smarttang/w3a_soc",
+ "star": 190,
+ "commits": 40,
+ "modify_time": "2018-06-26 06:58:08",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/quarkslab/irma",
+ "star": 190,
+ "commits": 2764,
+ "modify_time": "2019-10-09 14:01:54",
+ "last_release": "v2.4.13-oss",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/philnash/pwned",
+ "star": 190,
+ "commits": 82,
+ "modify_time": "2019-10-01 11:20:37",
+ "last_release": "v2.0.0",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/or3stis/apparatus",
+ "star": 190,
+ "commits": 1712,
+ "modify_time": "2019-04-17 08:33:41",
+ "last_release": "v.0.1.8-alpha",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/noorqureshi/kali-linux-cheatsheet",
+ "star": 190,
+ "commits": 3,
+ "modify_time": "2019-10-03 14:49:20",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/nongiach/cve",
+ "star": 190,
+ "commits": 23,
+ "modify_time": "2017-10-25 22:03:47",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/nettitude/scrounger",
+ "star": 190,
+ "commits": 54,
+ "modify_time": "2018-10-08 09:02:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/neex/gifoeb",
+ "star": 190,
+ "commits": 5,
+ "modify_time": "2017-07-22 03:33:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mxdg/passbytcp",
+ "star": 190,
+ "commits": 14,
+ "modify_time": "2018-01-22 03:33:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/milo2012/metasploithelper",
+ "star": 190,
+ "commits": 226,
+ "modify_time": "2019-09-06 16:45:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lateralblast/lunar",
+ "star": 190,
+ "commits": 605,
+ "modify_time": "2019-09-01 05:15:12",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/isecpartners/introspy-analyzer",
+ "star": 190,
+ "commits": 25,
+ "modify_time": "2015-07-06 21:06:43",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/gravitational/cve-2018-1002105",
+ "star": 190,
+ "commits": 21,
+ "modify_time": "2018-12-13 16:56:27",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/g0tmi1k/exe2hex",
+ "star": 190,
+ "commits": 21,
+ "modify_time": "2019-05-23 15:15:12",
+ "last_release": "1.5.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/corelan/windbglib",
+ "star": 190,
+ "commits": 53,
+ "modify_time": "2019-05-13 03:12:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/chichou/etacsufbo",
+ "star": 190,
+ "commits": 41,
+ "modify_time": "2018-03-13 11:56:52",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/aslody/elfhook",
+ "star": 190,
+ "commits": 25,
+ "modify_time": "2016-04-03 06:56:31",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/andrewf/pcap2har",
+ "star": 190,
+ "commits": 195,
+ "modify_time": "2013-10-25 07:22:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/0x4d31/honeybits",
+ "star": 190,
+ "commits": 20,
+ "modify_time": "2019-03-20 02:35:39",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/borisf/classyshark-bytecode-viewer",
+ "star": 189,
+ "commits": 89,
+ "modify_time": "2018-02-26 20:57:31",
+ "last_release": "9.0",
+ "lang": "Kotlin"
+ },
+ {
+ "link": "https://github.com/duo-labs/parliament",
+ "star": 189,
+ "commits": 34,
+ "modify_time": "2019-12-09 20:43:22",
+ "last_release": "0.2.7",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/noahziheng/ssr-helper",
+ "star": 189,
+ "commits": 46,
+ "modify_time": "2019-03-07 08:18:51",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/sud01oo/ProcessInjection",
+ "star": 189,
+ "commits": 63,
+ "modify_time": "2018-04-26 02:22:58",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/sheldoncoupeheure/AutoSQLi",
+ "star": 189,
+ "commits": 78,
+ "modify_time": "2018-05-25 20:29:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ydkhatri/mac_apt",
+ "star": 189,
+ "commits": 200,
+ "modify_time": "2019-12-06 22:06:38",
+ "last_release": "v0.4.1-beta",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/woj-ciech/osint",
+ "star": 189,
+ "commits": 30,
+ "modify_time": "2017-10-26 18:30:08",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/webfp/tor-browser-selenium",
+ "star": 189,
+ "commits": 271,
+ "modify_time": "2019-12-03 20:21:35",
+ "last_release": "\n v0.4.2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sherjilozair/dqn",
+ "star": 189,
+ "commits": 10,
+ "modify_time": "2017-12-28 00:16:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rwfpl/rewolf-x86-virtualizer",
+ "star": 189,
+ "commits": 2,
+ "modify_time": "2015-03-15 10:28:15",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/rebeyond/memshell",
+ "star": 189,
+ "commits": 15,
+ "modify_time": "2018-06-26 09:23:35",
+ "last_release": "v0.2",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/phype/telnet-iot-honeypot",
+ "star": 189,
+ "commits": 212,
+ "modify_time": "2019-10-29 14:06:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mozillasecurity/grizzly",
+ "star": 189,
+ "commits": 563,
+ "modify_time": "2019-11-28 21:05:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/m4ll0k/takeover",
+ "star": 189,
+ "commits": 30,
+ "modify_time": "2019-04-02 17:41:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/liveoverflow/lo_nintendoswitch",
+ "star": 189,
+ "commits": 2,
+ "modify_time": "2017-03-12 02:01:42",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/kelvinhack/khypervisor",
+ "star": 189,
+ "commits": 267,
+ "modify_time": "2019-03-04 09:54:50",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/jduck/cve-2015-1538-1",
+ "star": 189,
+ "commits": 2,
+ "modify_time": "2015-09-10 15:36:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hzphreak/vminjector",
+ "star": 189,
+ "commits": 3,
+ "modify_time": "2012-11-14 15:08:04",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/floyernick/fleep-go",
+ "star": 189,
+ "commits": 4,
+ "modify_time": "2018-08-26 18:38:49",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/fkie-cad/cwe_checker",
+ "star": 189,
+ "commits": 82,
+ "modify_time": "2019-12-06 07:59:02",
+ "last_release": "v0.3",
+ "lang": "OCaml"
+ },
+ {
+ "link": "https://github.com/cybereason/invoke-wmilm",
+ "star": 189,
+ "commits": 7,
+ "modify_time": "2018-05-10 22:18:48",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/controlplaneio/netassert",
+ "star": 189,
+ "commits": 67,
+ "modify_time": "2019-11-06 19:04:31",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/b3rito/yodo",
+ "star": 189,
+ "commits": 31,
+ "modify_time": "2017-02-28 15:38:13",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/automattic/camptix",
+ "star": 189,
+ "commits": 741,
+ "modify_time": "2019-07-18 03:59:44",
+ "last_release": "\n 1.6.0\n ",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/alexxy/netdiscover",
+ "star": 189,
+ "commits": 125,
+ "modify_time": "2019-10-08 06:26:49",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/alainiamburg/sniffrom",
+ "star": 189,
+ "commits": 90,
+ "modify_time": "2019-09-30 07:56:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/thesecondsun/shellab",
+ "star": 188,
+ "commits": 6,
+ "modify_time": "2018-10-06 17:45:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/scwuaptx/ctf",
+ "star": 188,
+ "commits": 148,
+ "modify_time": "2019-10-21 09:26:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ripe-ncc/hadoop-pcap",
+ "star": 188,
+ "commits": 102,
+ "modify_time": "2016-04-27 08:56:38",
+ "last_release": "\n 1.1\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/reswitched/libtransistor",
+ "star": 188,
+ "commits": 965,
+ "modify_time": "2019-08-25 02:51:30",
+ "last_release": "v2.1.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/paulsec/hqlmap",
+ "star": 188,
+ "commits": 38,
+ "modify_time": "2015-10-14 15:55:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/osquery/osquery-python",
+ "star": 188,
+ "commits": 126,
+ "modify_time": "2019-11-17 00:36:18",
+ "last_release": "3.0.6",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/moham3driahi/xbruteforcer",
+ "star": 188,
+ "commits": 36,
+ "modify_time": "2018-06-11 04:11:49",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/milo2012/cve-2018-13379",
+ "star": 188,
+ "commits": 8,
+ "modify_time": "2019-08-14 08:40:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/matrix1001/welpwn",
+ "star": 188,
+ "commits": 94,
+ "modify_time": "2019-10-23 02:27:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/malwarereversebrasil/malwaresearch",
+ "star": 188,
+ "commits": null,
+ "modify_time": "2018-07-07 14:23:23",
+ "last_release": "",
+ "lang": "python"
+ },
+ {
+ "link": "https://github.com/krmaxwell/coding-entertainment",
+ "star": 188,
+ "commits": 144,
+ "modify_time": "2015-11-04 18:07:55",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/kpcyrd/badtouch",
+ "star": 188,
+ "commits": 188,
+ "modify_time": "2019-11-09 19:26:38",
+ "last_release": "v0.7.1",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/jsontest/jsontest",
+ "star": 188,
+ "commits": 2,
+ "modify_time": "2013-09-06 01:14:23",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/jagerzhang/cckiller",
+ "star": 188,
+ "commits": 38,
+ "modify_time": "2019-10-06 02:47:49",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/internetarchive/warcprox",
+ "star": 188,
+ "commits": 897,
+ "modify_time": "2019-09-26 18:49:07",
+ "last_release": "2.4.15",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hashcat/maskprocessor",
+ "star": 188,
+ "commits": 12,
+ "modify_time": "2017-06-09 15:34:09",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/gallopyd/domain-tool",
+ "star": 188,
+ "commits": 50,
+ "modify_time": "2019-10-15 01:37:37",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/cifasis/quickfuzz",
+ "star": 188,
+ "commits": 570,
+ "modify_time": "2019-02-15 12:01:46",
+ "last_release": "haskell16-draft",
+ "lang": "Haskell"
+ },
+ {
+ "link": "https://github.com/ahxr/ghost",
+ "star": 188,
+ "commits": 14,
+ "modify_time": "2018-01-21 17:01:33",
+ "last_release": "1.0.4",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/shadowsocksr-live/ssrmac",
+ "star": 187,
+ "commits": 25,
+ "modify_time": "2019-10-15 08:46:04",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/0blio/Caesar",
+ "star": 187,
+ "commits": 131,
+ "modify_time": "2019-11-26 12:16:33",
+ "last_release": "1.1.0",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/swisskyrepo/damnwebscanner",
+ "star": 187,
+ "commits": 35,
+ "modify_time": "2019-09-22 14:11:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/slowmist/papers",
+ "star": 187,
+ "commits": 18,
+ "modify_time": "2019-09-26 10:25:54",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/rastating/shiva",
+ "star": 187,
+ "commits": 87,
+ "modify_time": "2019-11-24 19:05:26",
+ "last_release": "v1.4",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/phink-team/cobaltstrike-ms17-010",
+ "star": 187,
+ "commits": 13,
+ "modify_time": "2019-06-13 13:08:36",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/m4rco-/dorothy2",
+ "star": 187,
+ "commits": 73,
+ "modify_time": "2015-01-18 17:11:27",
+ "last_release": "\n v1.2.0\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/laanwj/etna_viv",
+ "star": 187,
+ "commits": 795,
+ "modify_time": "2017-11-21 13:10:47",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/kokjo/universalrop",
+ "star": 187,
+ "commits": 10,
+ "modify_time": "2018-02-22 08:40:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kalilinuxtricksyt/easysploit",
+ "star": 187,
+ "commits": 67,
+ "modify_time": "2019-11-27 14:27:30",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/joesecurity/pafishmacro",
+ "star": 187,
+ "commits": 7,
+ "modify_time": "2017-06-27 07:59:14",
+ "last_release": "",
+ "lang": "Visual Basic .NET"
+ },
+ {
+ "link": "https://github.com/he1m4n6a/findwebshell",
+ "star": 187,
+ "commits": 22,
+ "modify_time": "2018-11-14 03:17:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/goldshtn/minidumper",
+ "star": 187,
+ "commits": 76,
+ "modify_time": "2019-03-15 12:40:38",
+ "last_release": "2.2.19053.2",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/erwanlr/fingerprinter",
+ "star": 187,
+ "commits": 427,
+ "modify_time": "2019-11-28 17:15:19",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/droope/pwlist",
+ "star": 187,
+ "commits": 5,
+ "modify_time": "2017-03-17 21:55:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/drizzlerisk/tunpacker",
+ "star": 187,
+ "commits": 7,
+ "modify_time": "2017-04-12 09:55:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/danigargu/dereferencing",
+ "star": 187,
+ "commits": 13,
+ "modify_time": "2019-10-28 12:50:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/antoinevastel/fpscanner",
+ "star": 187,
+ "commits": 92,
+ "modify_time": "2019-05-25 23:35:36",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/aflgo/aflgo",
+ "star": 187,
+ "commits": 262,
+ "modify_time": "2019-12-07 06:24:08",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/bo0om/waf-bypass-cheat-sheet",
+ "star": 186,
+ "commits": 3,
+ "modify_time": "2018-11-28 20:34:16",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/tunz/afl-fuzz-js",
+ "star": 186,
+ "commits": 17,
+ "modify_time": "2017-02-11 18:31:37",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ha3mrx/ddos-attack",
+ "star": 186,
+ "commits": 14,
+ "modify_time": "2018-09-27 20:07:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ex0dus-0x/doxbox",
+ "star": 186,
+ "commits": 35,
+ "modify_time": "2019-08-21 18:16:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/automayt/ics-pcap",
+ "star": 186,
+ "commits": 12,
+ "modify_time": "2016-06-24 20:05:59",
+ "last_release": "",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/xyntax/filesensor",
+ "star": 186,
+ "commits": 9,
+ "modify_time": "2017-04-03 08:35:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wooyundota/droiddrops",
+ "star": 186,
+ "commits": 39,
+ "modify_time": "2018-07-13 03:06:49",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/wismna/hackpi",
+ "star": 186,
+ "commits": 73,
+ "modify_time": "2017-04-21 19:55:13",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/tomdev/teh_s3_bucketeers",
+ "star": 186,
+ "commits": 198,
+ "modify_time": "2019-11-07 12:13:08",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/sekirkity/browsergather",
+ "star": 186,
+ "commits": 20,
+ "modify_time": "2017-04-13 00:38:32",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/saelo/cve-2014-0038",
+ "star": 186,
+ "commits": 15,
+ "modify_time": "2014-04-18 10:23:14",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/rpp0/scapy-fakeap",
+ "star": 186,
+ "commits": 30,
+ "modify_time": "2015-05-06 13:55:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rfc1036/whois",
+ "star": 186,
+ "commits": 460,
+ "modify_time": "2019-11-17 20:33:50",
+ "last_release": "\n v5.5.3\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/offensive-security/cryptsetup-nuke-keys",
+ "star": 186,
+ "commits": 6,
+ "modify_time": "2019-04-24 17:36:44",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/netspi/weblogicpassworddecryptor",
+ "star": 186,
+ "commits": 10,
+ "modify_time": "2015-07-20 15:12:48",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/nakiostudio/twitterx",
+ "star": 186,
+ "commits": 83,
+ "modify_time": "2019-06-05 07:57:43",
+ "last_release": "0.2.2",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/miketierney/artii",
+ "star": 186,
+ "commits": 76,
+ "modify_time": "2016-10-19 13:32:46",
+ "last_release": "\n v2.1.2\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/insanitybit/grapl",
+ "star": 186,
+ "commits": 213,
+ "modify_time": "2019-12-09 21:22:17",
+ "last_release": "",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/hansesecure/credgrap_ie_edge",
+ "star": 186,
+ "commits": 13,
+ "modify_time": "2019-04-25 10:10:04",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/d4vinci/pastejacker",
+ "star": 186,
+ "commits": 12,
+ "modify_time": "2018-12-01 13:24:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/awslabs/ecs-nginx-reverse-proxy",
+ "star": 185,
+ "commits": 4,
+ "modify_time": "2017-06-05 17:03:50",
+ "last_release": "",
+ "lang": "Nginx"
+ },
+ {
+ "link": "https://github.com/f-secure/mittn",
+ "star": 185,
+ "commits": 71,
+ "modify_time": "2016-08-11 10:21:31",
+ "last_release": "\n 0.2.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nebgnahz/cv-rs",
+ "star": 185,
+ "commits": 237,
+ "modify_time": "2019-04-07 07:22:03",
+ "last_release": "",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/chrisps/Hexext",
+ "star": 185,
+ "commits": 45,
+ "modify_time": "2019-08-04 19:03:32",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/yellowbyte/analysis-of-anti-analysis",
+ "star": 185,
+ "commits": 12,
+ "modify_time": "2018-07-04 16:10:28",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/shadowsocks/shadowsocks-dotcloud",
+ "star": 185,
+ "commits": 26,
+ "modify_time": "2013-03-09 02:03:37",
+ "last_release": "",
+ "lang": "CoffeeScript"
+ },
+ {
+ "link": "https://github.com/savio-code/ghost-phisher",
+ "star": 185,
+ "commits": 133,
+ "modify_time": "2017-09-07 19:57:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pwnsdx/badcode",
+ "star": 185,
+ "commits": 37,
+ "modify_time": "2016-07-17 19:45:28",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ninijay/pycurity",
+ "star": 185,
+ "commits": 31,
+ "modify_time": "2017-11-11 14:57:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nihilus/scyllahide",
+ "star": 185,
+ "commits": 474,
+ "modify_time": "2014-10-06 20:00:00",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/mynameismeerkat/pyretic",
+ "star": 185,
+ "commits": 5,
+ "modify_time": "2013-09-07 14:32:32",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/mr-un1k0d3r/unibyav",
+ "star": 185,
+ "commits": 44,
+ "modify_time": "2018-10-26 15:25:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lijiejie/idea_exploit",
+ "star": 185,
+ "commits": 4,
+ "modify_time": "2019-06-01 07:18:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hexhive/t-fuzz",
+ "star": 185,
+ "commits": 11,
+ "modify_time": "2018-12-04 04:30:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/felixweyne/processspawncontrol",
+ "star": 185,
+ "commits": 7,
+ "modify_time": "2018-12-27 20:59:29",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/eahydra/socks",
+ "star": 185,
+ "commits": 67,
+ "modify_time": "2017-01-29 14:43:39",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/danmcinerney/dnsspoof",
+ "star": 185,
+ "commits": 9,
+ "modify_time": "2014-01-06 10:27:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/certcc/certfuzz",
+ "star": 185,
+ "commits": 1308,
+ "modify_time": "2019-12-09 16:15:04",
+ "last_release": "\n BFF_2.8\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bypass007/nessus_to_report",
+ "star": 185,
+ "commits": 5,
+ "modify_time": "2019-05-28 08:25:28",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/andy10101/apkdetecter",
+ "star": 185,
+ "commits": 34,
+ "modify_time": "2017-03-28 08:04:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/alonemonkey/macreverse",
+ "star": 185,
+ "commits": 4,
+ "modify_time": "2017-06-01 06:52:33",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/offensive-security/nethunter-devices",
+ "star": 184,
+ "commits": 376,
+ "modify_time": "2019-04-25 09:00:05",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/yaofeifly/vub_env",
+ "star": 184,
+ "commits": 45,
+ "modify_time": "2018-07-19 01:11:42",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/xtr4nge/fruityc2",
+ "star": 184,
+ "commits": 39,
+ "modify_time": "2017-12-04 14:01:32",
+ "last_release": "v0.7",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/stixproject/python-stix",
+ "star": 184,
+ "commits": 1546,
+ "modify_time": "2019-09-18 17:31:17",
+ "last_release": "v1.1.1.14",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/s0md3v/quark",
+ "star": 184,
+ "commits": 21,
+ "modify_time": "2019-07-26 00:08:27",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/rhinosecuritylabs/ccat",
+ "star": 184,
+ "commits": 170,
+ "modify_time": "2019-11-17 19:16:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/r00tkillah/horsepill",
+ "star": 184,
+ "commits": 4,
+ "modify_time": "2016-08-03 00:46:25",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/pure-l0g1c/loki",
+ "star": 184,
+ "commits": 98,
+ "modify_time": "2019-10-19 16:02:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/naategh/pyck",
+ "star": 184,
+ "commits": 58,
+ "modify_time": "2019-10-08 11:21:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/killvxk/disablewin10patchguardpoc",
+ "star": 184,
+ "commits": 22,
+ "modify_time": "2018-01-13 13:57:24",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/jivoi/openssh-backdoor-kit",
+ "star": 184,
+ "commits": 4,
+ "modify_time": "2016-09-21 11:57:35",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/getlantern/lantern",
+ "star": 184,
+ "commits": 6109,
+ "modify_time": "2019-12-10 03:28:39",
+ "last_release": "5.6.4",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/fuwaneko/node-protobuf",
+ "star": 184,
+ "commits": 199,
+ "modify_time": "2018-10-13 10:39:41",
+ "last_release": "v1.4.3",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/enovella/tee-reversing",
+ "star": 184,
+ "commits": 51,
+ "modify_time": "2019-12-09 12:53:52",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/bowlofstew/rootkit.com",
+ "star": 184,
+ "commits": 3,
+ "modify_time": "2016-10-05 02:31:16",
+ "last_release": "",
+ "lang": "Pascal"
+ },
+ {
+ "link": "https://github.com/blackint3/openark",
+ "star": 184,
+ "commits": 63,
+ "modify_time": "2019-11-22 10:56:51",
+ "last_release": "nightly",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/asciimoo/morty",
+ "star": 184,
+ "commits": 103,
+ "modify_time": "2019-12-09 16:53:27",
+ "last_release": "\n v0.2.0\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/carlospolop/privilege-escalation-awesome-scripts-suite",
+ "star": 183,
+ "commits": 163,
+ "modify_time": "2019-12-08 15:48:25",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/portswigger/upload-scanner",
+ "star": 183,
+ "commits": 65,
+ "modify_time": "2018-11-26 10:25:16",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/kuoruan/luci-app-v2ray",
+ "star": 183,
+ "commits": 170,
+ "modify_time": "2019-12-02 06:53:18",
+ "last_release": "v1.4.3-1",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/angr/pyvex",
+ "star": 183,
+ "commits": 764,
+ "modify_time": "2019-10-18 05:08:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xen0ph0n/virustotal_api_tool",
+ "star": 183,
+ "commits": 2,
+ "modify_time": "2015-08-28 14:51:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wizardmac/readstat",
+ "star": 183,
+ "commits": 928,
+ "modify_time": "2019-11-15 16:04:53",
+ "last_release": "v1.1.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/wavestone-cdt/hadoop-attack-library",
+ "star": 183,
+ "commits": 23,
+ "modify_time": "2017-07-01 14:06:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tresacton/dspectrumgui",
+ "star": 183,
+ "commits": 93,
+ "modify_time": "2019-10-27 10:54:02",
+ "last_release": "v1.0.0",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/sslab-gatech/avpass",
+ "star": 183,
+ "commits": 78,
+ "modify_time": "2017-09-15 15:09:54",
+ "last_release": "",
+ "lang": "Smali"
+ },
+ {
+ "link": "https://github.com/sidechannelmarvels/tracer",
+ "star": 183,
+ "commits": 58,
+ "modify_time": "2018-06-20 15:52:35",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/sensepost/mallet",
+ "star": 183,
+ "commits": 254,
+ "modify_time": "2019-10-12 06:03:39",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/sapphirex00/threat-hunting",
+ "star": 183,
+ "commits": 138,
+ "modify_time": "2019-02-07 15:59:15",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/s0md3v/orbit",
+ "star": 183,
+ "commits": 26,
+ "modify_time": "2019-07-26 16:30:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rmusser01/cheatsheets",
+ "star": 183,
+ "commits": 47,
+ "modify_time": "2015-10-31 11:03:26",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/radareorg/r2con",
+ "star": 183,
+ "commits": 4,
+ "modify_time": "2019-09-16 11:34:11",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/r4stl1n/ssh-brute-forcer",
+ "star": 183,
+ "commits": 35,
+ "modify_time": "2019-02-04 09:09:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/plazmaz/lnkup",
+ "star": 183,
+ "commits": 12,
+ "modify_time": "2017-08-21 22:58:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/petercunha/goat",
+ "star": 183,
+ "commits": 23,
+ "modify_time": "2017-07-13 23:49:12",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/paulsec/api-dnsdumpster.com",
+ "star": 183,
+ "commits": 59,
+ "modify_time": "2018-02-16 19:06:56",
+ "last_release": "0.5",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mzfr/liffy",
+ "star": 183,
+ "commits": 24,
+ "modify_time": "2019-12-09 04:17:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/misterch0c/firminator_backend",
+ "star": 183,
+ "commits": 75,
+ "modify_time": "2016-07-18 18:58:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/joxeankoret/cve-2017-7494",
+ "star": 183,
+ "commits": 16,
+ "modify_time": "2017-11-27 16:28:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ioncodes/dnpatch",
+ "star": 183,
+ "commits": 140,
+ "modify_time": "2018-01-03 18:21:40",
+ "last_release": "0.7.57",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/hongkonggong/tldr-digital-security",
+ "star": 183,
+ "commits": 81,
+ "modify_time": "2019-12-02 17:10:50",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/hatbashbr/shodanhat",
+ "star": 183,
+ "commits": 13,
+ "modify_time": "2017-04-23 01:43:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/feeicn/securityinterviewquestions",
+ "star": 183,
+ "commits": 4,
+ "modify_time": "2019-11-11 15:52:16",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ernw/nmap-parse-output",
+ "star": 183,
+ "commits": 23,
+ "modify_time": "2019-07-29 13:18:08",
+ "last_release": "\n v1.5.1\n ",
+ "lang": "XSLT"
+ },
+ {
+ "link": "https://github.com/crowecybersecurity/ad-ldap-enum",
+ "star": 183,
+ "commits": 44,
+ "modify_time": "2019-01-09 14:03:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/carlospolop/privilege-escalation-awesome-scripts-suite",
+ "star": 183,
+ "commits": 163,
+ "modify_time": "2019-12-08 15:48:25",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/breenmachine/dnsftp",
+ "star": 183,
+ "commits": 28,
+ "modify_time": "2016-01-24 20:38:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bhdresh/lazykatz",
+ "star": 183,
+ "commits": 94,
+ "modify_time": "2017-11-19 11:02:59",
+ "last_release": "v4.0",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/3xp10it/xcdn",
+ "star": 183,
+ "commits": 5,
+ "modify_time": "2019-06-03 10:37:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/aas-n/spraykatz",
+ "star": 182,
+ "commits": 38,
+ "modify_time": "2019-12-05 12:03:39",
+ "last_release": "\n v0.9.4\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kali-docs-cn/kali-linux-cookbook-zh",
+ "star": 182,
+ "commits": 64,
+ "modify_time": "2016-10-06 11:37:37",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/zecure/shadowd",
+ "star": 182,
+ "commits": 145,
+ "modify_time": "2016-03-06 15:24:33",
+ "last_release": "v2.0.1",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/welchbj/bscan",
+ "star": 182,
+ "commits": 247,
+ "modify_time": "2019-02-09 22:23:44",
+ "last_release": "rel-0.1.4",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vector35/community-plugins",
+ "star": 182,
+ "commits": 137,
+ "modify_time": "2019-10-06 15:31:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/spring-io/nohttp",
+ "star": 182,
+ "commits": 156,
+ "modify_time": "2019-06-27 18:57:47",
+ "last_release": "\n 0.0.3.RELEASE\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/s0md3v/bolt",
+ "star": 182,
+ "commits": 42,
+ "modify_time": "2019-05-05 15:50:03",
+ "last_release": "0.2.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rumpkernel/rumprun-packages",
+ "star": 182,
+ "commits": 424,
+ "modify_time": "2019-10-19 15:35:29",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/rabbitstack/rabbitc",
+ "star": 182,
+ "commits": 13,
+ "modify_time": "2018-07-17 17:09:28",
+ "last_release": "",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/owasp/igoat-swift",
+ "star": 182,
+ "commits": 112,
+ "modify_time": "2019-05-09 06:28:24",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/noraj/oscp-exam-report-template-markdown",
+ "star": 182,
+ "commits": 10,
+ "modify_time": "2019-10-22 20:38:37",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/natlas/natlas",
+ "star": 182,
+ "commits": 616,
+ "modify_time": "2019-11-26 00:52:40",
+ "last_release": "v0.6.7",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/milo2012/pathbrute",
+ "star": 182,
+ "commits": 768,
+ "modify_time": "2019-12-05 07:14:21",
+ "last_release": "v0.0.10",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/metachar/mercury",
+ "star": 182,
+ "commits": 81,
+ "modify_time": "2019-06-03 21:53:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/knoy/icloudhacker",
+ "star": 182,
+ "commits": 11,
+ "modify_time": "2015-02-20 18:30:30",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/jpcertcc/malconfscan",
+ "star": 182,
+ "commits": 28,
+ "modify_time": "2019-12-05 06:09:24",
+ "last_release": "v1.0.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jackullrich/shellcodestdio",
+ "star": 182,
+ "commits": 19,
+ "modify_time": "2019-07-08 23:30:38",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/j3ssie/iposint",
+ "star": 182,
+ "commits": 18,
+ "modify_time": "2019-09-10 10:58:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gdbinit/onyx-the-black-cat",
+ "star": 182,
+ "commits": 57,
+ "modify_time": "2014-12-29 14:33:52",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cldrn/rainmap-lite",
+ "star": 182,
+ "commits": 52,
+ "modify_time": "2017-01-02 06:06:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/chiggins/malware_sources",
+ "star": 182,
+ "commits": 4,
+ "modify_time": "2016-05-17 18:13:37",
+ "last_release": "",
+ "lang": "Pascal"
+ },
+ {
+ "link": "https://github.com/cboin/re_lab",
+ "star": 182,
+ "commits": 9,
+ "modify_time": "2018-08-19 20:25:20",
+ "last_release": "",
+ "lang": "Dockerfile"
+ },
+ {
+ "link": "https://github.com/carlashley/tccprofile",
+ "star": 182,
+ "commits": 113,
+ "modify_time": "2019-09-30 05:04:31",
+ "last_release": "v1.0.2.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/boy-hack/gwhatweb",
+ "star": 182,
+ "commits": 8,
+ "modify_time": "2019-01-12 05:35:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bishopfox/rickmote",
+ "star": 182,
+ "commits": 13,
+ "modify_time": "2014-07-18 17:51:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/absolomb/windowsenum",
+ "star": 182,
+ "commits": 3,
+ "modify_time": "2018-03-14 13:29:28",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/abdulgaphy/r3con1z3r",
+ "star": 182,
+ "commits": 38,
+ "modify_time": "2019-07-24 23:09:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/0x27/ciscorv320dump",
+ "star": 182,
+ "commits": 17,
+ "modify_time": "2019-02-08 12:38:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/0vercl0k/z3-playground",
+ "star": 182,
+ "commits": 20,
+ "modify_time": "2016-03-03 04:07:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/shadowsocks/papers",
+ "star": 181,
+ "commits": 10,
+ "modify_time": "2019-04-24 02:49:48",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/0x09AL/WordSteal",
+ "star": 181,
+ "commits": 5,
+ "modify_time": "2017-12-11 10:30:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tensult/cloud-reports",
+ "star": 181,
+ "commits": 356,
+ "modify_time": "2019-11-25 14:29:05",
+ "last_release": "",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/staaldraad/xxeserv",
+ "star": 181,
+ "commits": 12,
+ "modify_time": "2019-11-04 09:29:22",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/spacehuhn/arduinoarpspoof",
+ "star": 181,
+ "commits": 36,
+ "modify_time": "2018-01-06 10:04:16",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/so87/oscp-pwk",
+ "star": 181,
+ "commits": 13,
+ "modify_time": "2019-10-29 14:43:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ryhanson/externalc2",
+ "star": 181,
+ "commits": 8,
+ "modify_time": "2017-11-23 16:47:12",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/riramar/hsecscan",
+ "star": 181,
+ "commits": 64,
+ "modify_time": "2019-02-26 19:45:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lucifer1993/cmsprint",
+ "star": 181,
+ "commits": 9,
+ "modify_time": "2019-04-30 12:00:06",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/kriswebdev/android_aircrack",
+ "star": 181,
+ "commits": 12,
+ "modify_time": "2017-01-08 17:01:16",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/keithjjones/hostintel",
+ "star": 181,
+ "commits": 146,
+ "modify_time": "2019-06-06 21:00:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jasonqng/chinese-keywords",
+ "star": 181,
+ "commits": 31,
+ "modify_time": "2014-12-22 06:25:53",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/jacob-baines/elfparser",
+ "star": 181,
+ "commits": 7,
+ "modify_time": "2015-10-10 20:31:54",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/hehnope/slurp",
+ "star": 181,
+ "commits": 122,
+ "modify_time": "2019-10-17 22:28:20",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/fireeye/pwnauth",
+ "star": 181,
+ "commits": 28,
+ "modify_time": "2019-12-03 22:26:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/eth-sri/debin",
+ "star": 181,
+ "commits": 6,
+ "modify_time": "2019-10-16 13:52:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/delvelabs/tachyon",
+ "star": 181,
+ "commits": 454,
+ "modify_time": "2019-09-30 17:16:56",
+ "last_release": "3.3.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/darkwallet/darkleaks",
+ "star": 181,
+ "commits": 45,
+ "modify_time": "2015-02-03 01:56:09",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ctxis/wsuspect-proxy",
+ "star": 181,
+ "commits": 24,
+ "modify_time": "2017-02-08 13:47:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cobbr/obfuscatedempire",
+ "star": 181,
+ "commits": 1092,
+ "modify_time": "2017-11-16 00:41:07",
+ "last_release": "\n 1.5\n ",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/anantshri/svn-extractor",
+ "star": 181,
+ "commits": 39,
+ "modify_time": "2017-04-11 10:57:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/4w4k3/repy2exe",
+ "star": 181,
+ "commits": 32,
+ "modify_time": "2017-05-21 17:04:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/absozed/dockerpwn.py",
+ "star": 180,
+ "commits": 35,
+ "modify_time": "2019-12-02 18:49:14",
+ "last_release": "1.0-r1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/knownsec/gsm",
+ "star": 180,
+ "commits": 14,
+ "modify_time": "2019-05-08 04:01:21",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/zsshen/probedroid",
+ "star": 180,
+ "commits": 194,
+ "modify_time": "2018-12-16 03:55:47",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/yubico/ykneo-openpgp",
+ "star": 180,
+ "commits": 176,
+ "modify_time": "2019-05-02 07:21:21",
+ "last_release": "1.0.2",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/the-useless-one/pywerview",
+ "star": 180,
+ "commits": 172,
+ "modify_time": "2019-11-14 16:25:14",
+ "last_release": "v0.2.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tenrec-builders/pi-scan",
+ "star": 180,
+ "commits": 24,
+ "modify_time": "2018-03-22 15:25:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tarcisio-marinho/gonnacry",
+ "star": 180,
+ "commits": 468,
+ "modify_time": "2019-12-07 01:56:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/spiderlabs/ikeforce",
+ "star": 180,
+ "commits": 30,
+ "modify_time": "2019-09-18 09:35:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/solusipse/spectrology",
+ "star": 180,
+ "commits": 13,
+ "modify_time": "2017-07-13 02:59:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rasta-mouse/amsiscanbufferbypass",
+ "star": 180,
+ "commits": 22,
+ "modify_time": "2019-09-22 17:55:59",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/phillips321/adaudit",
+ "star": 180,
+ "commits": 41,
+ "modify_time": "2019-07-17 12:59:27",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/nowsecure/node-applesign",
+ "star": 180,
+ "commits": 343,
+ "modify_time": "2019-11-19 16:11:56",
+ "last_release": "\n 3.4.3\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/nopernik/sshpry2.0",
+ "star": 180,
+ "commits": 6,
+ "modify_time": "2017-09-30 18:39:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/misp/misp-galaxy",
+ "star": 180,
+ "commits": 1883,
+ "modify_time": "2019-12-08 08:03:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/marx-yu/wopihost",
+ "star": 180,
+ "commits": 22,
+ "modify_time": "2019-04-29 13:34:41",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/lcatro/php-webshell-bypass-waf",
+ "star": 180,
+ "commits": 6,
+ "modify_time": "2017-10-30 03:35:46",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/joxeankoret/idamagicstrings",
+ "star": 180,
+ "commits": 31,
+ "modify_time": "2019-11-08 10:51:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jeffxue/web-log-parser",
+ "star": 180,
+ "commits": 80,
+ "modify_time": "2018-05-16 09:01:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ha71/whatcms",
+ "star": 180,
+ "commits": 11,
+ "modify_time": "2018-03-20 10:15:29",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/gamexg/shadowsocks_admin",
+ "star": 180,
+ "commits": 43,
+ "modify_time": "2016-03-16 01:13:09",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/fnk0c/cangibrina",
+ "star": 180,
+ "commits": 123,
+ "modify_time": "2018-11-20 13:54:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/divineomega/password_exposed",
+ "star": 180,
+ "commits": 138,
+ "modify_time": "2019-12-06 11:38:07",
+ "last_release": "v3.1.1",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/offlinemark/poet",
+ "star": 179,
+ "commits": 191,
+ "modify_time": "2015-11-15 21:26:05",
+ "last_release": "v0.4.5",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/thelinuxchoice/locator",
+ "star": 179,
+ "commits": 9,
+ "modify_time": "2018-12-28 12:17:09",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/fox-it/cve-2019-1040-scanner",
+ "star": 179,
+ "commits": 5,
+ "modify_time": "2019-06-26 12:59:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/offlinemark/poet",
+ "star": 179,
+ "commits": 191,
+ "modify_time": "2015-11-15 21:26:05",
+ "last_release": "v0.4.5",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hackl/tikz-network",
+ "star": 179,
+ "commits": 27,
+ "modify_time": "2019-08-15 09:08:09",
+ "last_release": "\n v1.1\n ",
+ "lang": "TeX"
+ },
+ {
+ "link": "https://github.com/yelp/py_zipkin",
+ "star": 179,
+ "commits": 266,
+ "modify_time": "2019-11-20 05:34:25",
+ "last_release": "\n v0.18.6\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/videns/vulners-scanner",
+ "star": 179,
+ "commits": 18,
+ "modify_time": "2017-02-08 06:20:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/therealsaumil/static-arm-bins",
+ "star": 179,
+ "commits": 13,
+ "modify_time": "2019-07-09 04:44:06",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/spamscope/spamscope",
+ "star": 179,
+ "commits": 549,
+ "modify_time": "2019-03-16 18:19:51",
+ "last_release": "\n v2.8.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/silverpoision/rock-on",
+ "star": 179,
+ "commits": 63,
+ "modify_time": "2019-11-30 04:00:02",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/rndinfosecguy/scavenger",
+ "star": 179,
+ "commits": 73,
+ "modify_time": "2019-12-10 05:50:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/redteamsecurity/autonessus",
+ "star": 179,
+ "commits": 24,
+ "modify_time": "2017-04-21 16:30:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nolze/msoffcrypto-tool",
+ "star": 179,
+ "commits": 208,
+ "modify_time": "2019-11-05 16:36:43",
+ "last_release": "\n v4.10.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nccgroup/cisco-snmp-enumeration",
+ "star": 179,
+ "commits": 10,
+ "modify_time": "2015-09-04 14:43:23",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/offlinemark/poet",
+ "star": 179,
+ "commits": 191,
+ "modify_time": "2015-11-15 21:26:05",
+ "last_release": "v0.4.5",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/meliht/mr.sip",
+ "star": 179,
+ "commits": 64,
+ "modify_time": "2019-11-29 07:56:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/malaohu/ssr-with-net-speeder",
+ "star": 179,
+ "commits": 35,
+ "modify_time": "2018-02-24 06:13:46",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/kaonashi-passwords/kaonashi",
+ "star": 179,
+ "commits": 13,
+ "modify_time": "2019-05-08 14:49:03",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/iosre/hippocamphairsalon",
+ "star": 179,
+ "commits": 15,
+ "modify_time": "2015-08-08 10:15:37",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/hanul93/kicomav",
+ "star": 179,
+ "commits": 415,
+ "modify_time": "2019-07-31 21:19:01",
+ "last_release": "0.31",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/google/libprotobuf-mutator",
+ "star": 179,
+ "commits": 293,
+ "modify_time": "2019-10-08 17:08:02",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/devttys0/littleblackbox",
+ "star": 179,
+ "commits": 4,
+ "modify_time": "2014-02-21 18:19:51",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/blackarch/wordlistctl",
+ "star": 179,
+ "commits": 130,
+ "modify_time": "2019-08-15 14:21:03",
+ "last_release": "\n v0.8.7\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/arsenalrecon/arsenal-image-mounter",
+ "star": 179,
+ "commits": 93,
+ "modify_time": "2019-05-20 16:35:09",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/anssi-fr/secuml",
+ "star": 179,
+ "commits": 172,
+ "modify_time": "2019-09-03 11:45:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/acceis/leakscraper",
+ "star": 179,
+ "commits": 30,
+ "modify_time": "2019-01-21 15:30:59",
+ "last_release": "\n v1.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/0vercl0k/cve-2019-9810",
+ "star": 179,
+ "commits": 14,
+ "modify_time": "2019-11-22 00:17:13",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/zekesnider/nintendoswitchrestapi",
+ "star": 178,
+ "commits": 16,
+ "modify_time": "2019-01-05 18:46:18",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/x43x61x69/otx",
+ "star": 178,
+ "commits": 31,
+ "modify_time": "2016-04-06 10:27:11",
+ "last_release": "v1.7",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/soxrok2212/pskracker",
+ "star": 178,
+ "commits": 136,
+ "modify_time": "2019-09-18 01:23:10",
+ "last_release": "\n 0.3.1\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/samratashok/admodule",
+ "star": 178,
+ "commits": 17,
+ "modify_time": "2018-11-16 14:54:03",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/phoenixos/kernel",
+ "star": 178,
+ "commits": 637665,
+ "modify_time": "2017-09-01 03:48:14",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/pandazheng/threat-intelligence-analyst",
+ "star": 178,
+ "commits": 128,
+ "modify_time": "2019-04-27 12:16:57",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/nvisium/swift.nv",
+ "star": 178,
+ "commits": 81,
+ "modify_time": "2018-03-08 18:10:38",
+ "last_release": "1.1",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/neurodroid/cryptonite",
+ "star": 178,
+ "commits": 532,
+ "modify_time": "2019-06-24 16:12:16",
+ "last_release": "v0.7.17",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/netflix-skunkworks/repulsive-grizzly",
+ "star": 178,
+ "commits": 19,
+ "modify_time": "2017-07-30 16:58:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/maldevel/canisrufus",
+ "star": 178,
+ "commits": 7,
+ "modify_time": "2017-08-15 15:46:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lengjibo/att-ck-cn",
+ "star": 178,
+ "commits": 3,
+ "modify_time": "2019-09-07 14:20:05",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/iagcl/watchmen",
+ "star": 178,
+ "commits": 29,
+ "modify_time": "2018-09-05 02:48:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hasherezade/ida_ifl",
+ "star": 178,
+ "commits": 38,
+ "modify_time": "2019-06-26 19:18:33",
+ "last_release": "v1.3.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/espreto/wpsploit",
+ "star": 178,
+ "commits": 129,
+ "modify_time": "2016-11-26 09:52:14",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/authcov/authcov",
+ "star": 178,
+ "commits": 122,
+ "modify_time": "2019-08-21 08:15:43",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/aozhimin/mosec-2017",
+ "star": 178,
+ "commits": 28,
+ "modify_time": "2017-07-06 08:13:05",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/0x09al/dns-persist",
+ "star": 178,
+ "commits": 16,
+ "modify_time": "2017-11-20 08:53:24",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/samyk/combobreaker",
+ "star": 177,
+ "commits": 43,
+ "modify_time": "2019-08-01 16:37:00",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/fnzv/net-Shield",
+ "star": 177,
+ "commits": 108,
+ "modify_time": "2019-01-23 21:35:43",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/woj-ciech/daily-dose-of-malware",
+ "star": 177,
+ "commits": 12,
+ "modify_time": "2018-01-20 22:08:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/trailofbits/binjascripts",
+ "star": 177,
+ "commits": 23,
+ "modify_time": "2019-06-19 18:05:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/syworks/wireless-ids",
+ "star": 177,
+ "commits": 24,
+ "modify_time": "2014-02-26 14:37:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sindresorhus/is-reachable",
+ "star": 177,
+ "commits": 120,
+ "modify_time": "2019-09-23 06:24:04",
+ "last_release": "v4.0.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/rapid7/sonar",
+ "star": 177,
+ "commits": 4,
+ "modify_time": "2018-05-10 04:12:21",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/random-robbie/bugbounty-scans",
+ "star": 177,
+ "commits": 40,
+ "modify_time": "2018-09-05 12:11:00",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/mcarpenter/afl",
+ "star": 177,
+ "commits": null,
+ "modify_time": "2017-11-05 02:27:11",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/johnlatwc/pypowershellxray",
+ "star": 177,
+ "commits": 15,
+ "modify_time": "2018-06-13 17:36:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ginjachris/pentmenu",
+ "star": 177,
+ "commits": 194,
+ "modify_time": "2019-07-23 19:30:10",
+ "last_release": "1.7.2",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/eoftedal/writings",
+ "star": 177,
+ "commits": 36,
+ "modify_time": "2019-04-06 10:38:33",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/dictation-toolbox/aenea",
+ "star": 177,
+ "commits": 598,
+ "modify_time": "2019-11-30 04:29:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/decoder-it/psgetsystem",
+ "star": 177,
+ "commits": 25,
+ "modify_time": "2019-05-18 16:24:16",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/critical-start/pastebin_scraper",
+ "star": 177,
+ "commits": 28,
+ "modify_time": "2019-11-26 16:01:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cloudflare/mmproxy",
+ "star": 177,
+ "commits": 16,
+ "modify_time": "2019-09-09 16:28:07",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/openwisp/netjsongraph.js",
+ "star": 176,
+ "commits": 93,
+ "modify_time": "2019-05-19 18:12:00",
+ "last_release": "\n v0.1.3\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/zaproxy/zap-core-help",
+ "star": 176,
+ "commits": 946,
+ "modify_time": "2019-12-09 09:08:06",
+ "last_release": "help-v9",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/ysrc/antivirtualapp",
+ "star": 176,
+ "commits": 12,
+ "modify_time": "2018-08-14 07:37:54",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/yassineaboukir/asnlookup",
+ "star": 176,
+ "commits": 47,
+ "modify_time": "2019-11-13 17:53:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/thekingofduck/filemonitor",
+ "star": 176,
+ "commits": 17,
+ "modify_time": "2019-11-29 03:42:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rust-fuzz/trophy-case",
+ "star": 176,
+ "commits": 148,
+ "modify_time": "2019-10-06 14:18:49",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/riscure/rhme-2016",
+ "star": 176,
+ "commits": 40,
+ "modify_time": "2017-06-12 09:17:56",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/mschwager/gitem",
+ "star": 176,
+ "commits": 103,
+ "modify_time": "2019-11-22 21:55:59",
+ "last_release": "\n 0.9.2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mrschyte/nmap-converter",
+ "star": 176,
+ "commits": 32,
+ "modify_time": "2019-10-22 13:03:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/martinvigo/email2phonenumber",
+ "star": 176,
+ "commits": 17,
+ "modify_time": "2019-09-16 21:17:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jrozner/sonar",
+ "star": 176,
+ "commits": 26,
+ "modify_time": "2016-02-27 20:11:53",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/jaredhaight/sharpattack",
+ "star": 176,
+ "commits": 28,
+ "modify_time": "2018-10-23 17:51:49",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/ioactive/repossessed",
+ "star": 176,
+ "commits": 16,
+ "modify_time": "2017-10-06 02:46:01",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/hexorg/cheatenginetables",
+ "star": 176,
+ "commits": 14,
+ "modify_time": "2017-03-06 18:10:19",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/gat3way/hashkill",
+ "star": 176,
+ "commits": 427,
+ "modify_time": "2014-02-04 10:36:40",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/floyd-fuh/tiny-mitm-proxy",
+ "star": 176,
+ "commits": 1,
+ "modify_time": "2015-08-26 10:18:26",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/fate0/xmark",
+ "star": 176,
+ "commits": 20,
+ "modify_time": "2019-01-02 14:09:52",
+ "last_release": "1.0.0-rc2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/csababarta/ntdsxtract",
+ "star": 176,
+ "commits": 34,
+ "modify_time": "2016-02-13 06:07:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/chuckfw/owaspbwa",
+ "star": 176,
+ "commits": 234,
+ "modify_time": "2016-03-07 02:37:56",
+ "last_release": "\n v0.94\n ",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/bitvijays/pentest-scripts",
+ "star": 176,
+ "commits": 15,
+ "modify_time": "2017-06-12 23:16:08",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/alphadelta/secure-desktop",
+ "star": 176,
+ "commits": 47,
+ "modify_time": "2015-08-25 19:40:34",
+ "last_release": "v1.1.0-rc.1",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/aalhuz/navex",
+ "star": 176,
+ "commits": 17,
+ "modify_time": "2019-01-27 11:59:36",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/fireice-uk/xmr-stak-amd",
+ "star": 175,
+ "commits": 42,
+ "modify_time": "2017-11-19 19:50:14",
+ "last_release": "final",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/0kee-team/javaprobe",
+ "star": 175,
+ "commits": 12,
+ "modify_time": "2019-11-26 11:11:51",
+ "last_release": "1.0.1",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/FSecureLABS/Azurite",
+ "star": 175,
+ "commits": 18,
+ "modify_time": "2018-05-23 22:48:55",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/radareorg/radare2-extras",
+ "star": 175,
+ "commits": 544,
+ "modify_time": "2019-10-28 15:53:50",
+ "last_release": "\n 4.0.0\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/praetorian-code/mitm-vm",
+ "star": 175,
+ "commits": 46,
+ "modify_time": "2016-08-29 23:34:30",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/techbliss/python_editor",
+ "star": 175,
+ "commits": 97,
+ "modify_time": "2019-08-11 14:27:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sysml/lightvm",
+ "star": 175,
+ "commits": 15,
+ "modify_time": "2018-09-19 16:20:46",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/sie504/struts-s2-xxx",
+ "star": 175,
+ "commits": 2,
+ "modify_time": "2018-01-09 09:42:13",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/secforce/snmp-brute",
+ "star": 175,
+ "commits": 15,
+ "modify_time": "2015-10-02 09:28:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/samyk/quickjack",
+ "star": 175,
+ "commits": 6,
+ "modify_time": "2015-01-17 03:48:48",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/portcullislabs/enum4linux",
+ "star": 175,
+ "commits": 16,
+ "modify_time": "2018-03-15 19:42:27",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/paragonie/password_lock",
+ "star": 175,
+ "commits": 62,
+ "modify_time": "2019-03-19 20:53:59",
+ "last_release": "\n v3.0.2\n ",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/nats-io/nats-top",
+ "star": 175,
+ "commits": 96,
+ "modify_time": "2016-08-24 04:37:33",
+ "last_release": "v0.3.2",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/ms0x0/dayu",
+ "star": 175,
+ "commits": 5,
+ "modify_time": "2017-08-09 10:01:37",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/jasonish/py-idstools",
+ "star": 175,
+ "commits": 293,
+ "modify_time": "2018-02-19 13:35:02",
+ "last_release": "0.6.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jaegertracing/jaeger-client-csharp",
+ "star": 175,
+ "commits": 259,
+ "modify_time": "2019-10-13 17:54:56",
+ "last_release": "v0.3.6",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/guardrailsio/awesome-java-security",
+ "star": 175,
+ "commits": 25,
+ "modify_time": "2019-03-29 10:58:47",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/gdssecurity/gwt-penetration-testing-toolset",
+ "star": 175,
+ "commits": 7,
+ "modify_time": "2012-08-31 13:49:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gangzhuo/kcptun-gui-windows",
+ "star": 175,
+ "commits": 113,
+ "modify_time": "2017-03-20 17:42:39",
+ "last_release": "1.5.8",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/dionach/ntdsaudit",
+ "star": 175,
+ "commits": 20,
+ "modify_time": "2019-09-12 14:58:06",
+ "last_release": "v2.0.7",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/cryptogenic/ps4-6.20-webkit-code-execution-exploit",
+ "star": 175,
+ "commits": 3,
+ "modify_time": "2019-03-08 18:42:56",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/brav0hax/smbexec",
+ "star": 175,
+ "commits": 59,
+ "modify_time": "2015-06-22 04:17:59",
+ "last_release": "v2.0",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/brannondorsey/sniff-probes",
+ "star": 175,
+ "commits": 9,
+ "modify_time": "2018-07-19 14:34:02",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/acama/xrop",
+ "star": 175,
+ "commits": 83,
+ "modify_time": "2019-07-29 15:22:43",
+ "last_release": "\n v1.1\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/0xbug/biu-framework",
+ "star": 175,
+ "commits": null,
+ "modify_time": "2018-10-13 02:31:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jaeles-project/jaeles",
+ "star": 174,
+ "commits": 33,
+ "modify_time": "2019-12-10 03:37:44",
+ "last_release": "beta-v0.1RC2",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/osirislab/CTF-Solutions",
+ "star": 174,
+ "commits": 88,
+ "modify_time": "2019-05-13 20:31:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/QAX-A-Team/CobaltStrike-Toolset",
+ "star": 174,
+ "commits": 11,
+ "modify_time": "2019-01-22 04:06:33",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/SecurityPaper/mail_fishing",
+ "star": 174,
+ "commits": 3,
+ "modify_time": "2018-08-27 07:39:02",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/virtuesecurity/aws-extender",
+ "star": 174,
+ "commits": 4,
+ "modify_time": "2017-09-21 22:33:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tweksteen/jenkins-decrypt",
+ "star": 174,
+ "commits": 11,
+ "modify_time": "2019-08-19 13:33:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/trishmapow/rf-jam-replay",
+ "star": 174,
+ "commits": 52,
+ "modify_time": "2019-06-10 22:09:27",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/threeme3/wsprrypi",
+ "star": 174,
+ "commits": 103,
+ "modify_time": "2019-10-25 16:50:49",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/smarnach/pyexiftool",
+ "star": 174,
+ "commits": 29,
+ "modify_time": "2014-10-08 14:06:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/shadowsocks-backup/shadowsocks",
+ "star": 174,
+ "commits": 733,
+ "modify_time": "2015-08-20 10:52:42",
+ "last_release": "\n 2.8.2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/secure-software-engineering/droidbench",
+ "star": 174,
+ "commits": 116,
+ "modify_time": "2017-05-18 16:32:50",
+ "last_release": "\n DroidBench_2.0\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/openvizsla/ov_ftdi",
+ "star": 174,
+ "commits": 289,
+ "modify_time": "2019-12-05 23:24:29",
+ "last_release": "\n rc2\n ",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/markbaggett/srum-dump",
+ "star": 174,
+ "commits": 51,
+ "modify_time": "2019-10-08 20:05:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/liamg/furious",
+ "star": 174,
+ "commits": 17,
+ "modify_time": "2019-06-19 18:07:19",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/kozmic/laravel-poc-cve-2018-15133",
+ "star": 174,
+ "commits": 10,
+ "modify_time": "2018-09-27 07:32:42",
+ "last_release": "",
+ "lang": "Dockerfile"
+ },
+ {
+ "link": "https://github.com/knownsec/wam",
+ "star": 174,
+ "commits": 33,
+ "modify_time": "2018-09-20 02:50:23",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/ice3man543/hawkeye",
+ "star": 174,
+ "commits": 9,
+ "modify_time": "2018-07-21 17:06:44",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/hvqzao/foolav",
+ "star": 174,
+ "commits": 9,
+ "modify_time": "2016-05-06 19:59:29",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/fkie-cad/awesome-embedded-and-iot-security",
+ "star": 174,
+ "commits": 32,
+ "modify_time": "2019-08-30 05:34:42",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/fengyouchao/sockslib",
+ "star": 174,
+ "commits": 161,
+ "modify_time": "2018-03-10 04:33:50",
+ "last_release": "v1.3.16-beta",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/duo-labs/idapython",
+ "star": 174,
+ "commits": 10,
+ "modify_time": "2018-04-26 17:18:59",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/comthings/pandwarf",
+ "star": 174,
+ "commits": 92,
+ "modify_time": "2019-10-01 14:20:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/codewatchorg/sqlipy",
+ "star": 174,
+ "commits": 67,
+ "modify_time": "2019-10-31 22:00:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/calebfenton/apkfile",
+ "star": 174,
+ "commits": 54,
+ "modify_time": "2019-11-07 06:23:17",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/azure/azure-storage-java",
+ "star": 174,
+ "commits": 716,
+ "modify_time": "2019-11-12 18:43:16",
+ "last_release": "v8.6.0",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/antonin-deniau/cave_miner",
+ "star": 174,
+ "commits": 36,
+ "modify_time": "2019-08-29 07:38:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/78778443/xssplatform",
+ "star": 174,
+ "commits": 24,
+ "modify_time": "2019-11-05 01:23:13",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/3gstudent/list-rdp-connections-history",
+ "star": 174,
+ "commits": 19,
+ "modify_time": "2018-03-16 01:24:08",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/dgiese/dustcloud-documentation",
+ "star": 173,
+ "commits": 34,
+ "modify_time": "2019-04-02 18:49:49",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/opensec-cn/chip",
+ "star": 173,
+ "commits": 119,
+ "modify_time": "2019-08-27 10:50:50",
+ "last_release": "v1.3.0",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/microsvuln/awesome-afl",
+ "star": 173,
+ "commits": 59,
+ "modify_time": "2019-11-25 19:01:13",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/fsecurelabs/jandroid",
+ "star": 173,
+ "commits": 8,
+ "modify_time": "2019-11-01 13:48:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gavinguan24/ahri",
+ "star": 173,
+ "commits": 29,
+ "modify_time": "2019-11-05 10:19:55",
+ "last_release": "v0.9.3",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/AlienVault-OTX/OTX-Python-SDK",
+ "star": 173,
+ "commits": 158,
+ "modify_time": "2019-12-05 20:32:14",
+ "last_release": "1.5.5",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/APT55/google_explorer",
+ "star": 173,
+ "commits": 140,
+ "modify_time": "2018-12-01 10:49:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zodiacon/kernelexplorer",
+ "star": 173,
+ "commits": 38,
+ "modify_time": "2019-10-26 08:22:34",
+ "last_release": "memmapview-0.1-beta",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/zjonsson/node-unzipper",
+ "star": 173,
+ "commits": 293,
+ "modify_time": "2019-09-08 21:49:08",
+ "last_release": "v0.10.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/trivio/common_crawl_index",
+ "star": 173,
+ "commits": 33,
+ "modify_time": "2013-03-25 14:01:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rokups/virtual-reality",
+ "star": 173,
+ "commits": 33,
+ "modify_time": "2019-11-07 13:08:23",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ota4j-team/opentest4j",
+ "star": 173,
+ "commits": 102,
+ "modify_time": "2019-06-06 19:32:54",
+ "last_release": "\n r1.2.0\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/osandamalith/lfifreak",
+ "star": 173,
+ "commits": 21,
+ "modify_time": "2015-06-25 21:21:59",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/obscuritylabs/rai",
+ "star": 173,
+ "commits": 101,
+ "modify_time": "2019-08-25 12:53:15",
+ "last_release": "",
+ "lang": "Dockerfile"
+ },
+ {
+ "link": "https://github.com/netoptimizer/network-testing",
+ "star": 173,
+ "commits": 362,
+ "modify_time": "2019-11-28 10:55:23",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/nccgroup/aws-recipes",
+ "star": 173,
+ "commits": 220,
+ "modify_time": "2017-12-07 21:44:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/microsoft/pqcrypto-sidh",
+ "star": 173,
+ "commits": 115,
+ "modify_time": "2019-12-04 21:24:13",
+ "last_release": "v3.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/macmade/filevaultcracker",
+ "star": 173,
+ "commits": 14,
+ "modify_time": "2018-10-17 19:00:53",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/lttng/lttng-tools",
+ "star": 173,
+ "commits": 5088,
+ "modify_time": "2019-12-06 21:07:03",
+ "last_release": "v2.11.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/lmco/dart",
+ "star": 173,
+ "commits": 7,
+ "modify_time": "2019-06-21 16:14:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/krzys-h/undertalemodtool",
+ "star": 173,
+ "commits": 329,
+ "modify_time": "2019-05-25 12:55:45",
+ "last_release": "0.2.0",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/jonatan1024/clrinject",
+ "star": 173,
+ "commits": 14,
+ "modify_time": "2019-01-10 11:04:21",
+ "last_release": "v0.2",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/infusion/node-dhcp",
+ "star": 173,
+ "commits": 119,
+ "modify_time": "2019-09-06 09:25:00",
+ "last_release": "\n v0.2.18\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/infocyte/pshunt",
+ "star": 173,
+ "commits": 24,
+ "modify_time": "2016-09-20 20:48:28",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/ikende/beetle.dt",
+ "star": 173,
+ "commits": 20,
+ "modify_time": "2018-11-20 12:13:20",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/grutz/h3c-pt-tools",
+ "star": 173,
+ "commits": 11,
+ "modify_time": "2012-11-16 14:05:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/geosn0w/reverse-engineering-tutorials",
+ "star": 173,
+ "commits": 29,
+ "modify_time": "2017-10-19 21:34:55",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/duy13/vddos-protection",
+ "star": 173,
+ "commits": 35,
+ "modify_time": "2019-10-20 01:32:59",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/dhaval17/awsome-security-write-ups-and-pocs",
+ "star": 173,
+ "commits": 91,
+ "modify_time": "2019-08-19 08:21:02",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/dc3l1ne/blasting_dictionary",
+ "star": 173,
+ "commits": 23,
+ "modify_time": "2015-09-13 13:31:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cptgibbon/house-of-corrosion",
+ "star": 173,
+ "commits": 11,
+ "modify_time": "2019-09-17 08:10:14",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/comsecuris/shannonre",
+ "star": 173,
+ "commits": 5,
+ "modify_time": "2016-08-02 10:30:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cldrn/macphish",
+ "star": 173,
+ "commits": 14,
+ "modify_time": "2017-09-19 16:28:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/busescanfly/pretty",
+ "star": 173,
+ "commits": 142,
+ "modify_time": "2019-10-07 22:59:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bhdresh/socialengineeringpayloads",
+ "star": 173,
+ "commits": 26,
+ "modify_time": "2017-11-21 18:28:35",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/mirage/alcotest",
+ "star": 172,
+ "commits": 440,
+ "modify_time": "2019-11-18 08:44:03",
+ "last_release": "0.8.5",
+ "lang": "OCaml"
+ },
+ {
+ "link": "https://github.com/fireeye/fidl",
+ "star": 172,
+ "commits": 19,
+ "modify_time": "2019-12-02 13:05:54",
+ "last_release": "v1.01",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zerocoin/libzerocoin",
+ "star": 172,
+ "commits": 50,
+ "modify_time": "2018-04-13 03:32:23",
+ "last_release": "\n v0.2alpha\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/xerub/extra_recipe",
+ "star": 172,
+ "commits": 24,
+ "modify_time": "2018-03-01 18:58:35",
+ "last_release": "\n beta4\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ubeeri/invoke-usersimulator",
+ "star": 172,
+ "commits": 7,
+ "modify_time": "2018-04-29 12:55:47",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/tr3jer/dnsautorebinding",
+ "star": 172,
+ "commits": 4,
+ "modify_time": "2017-08-17 05:16:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tonybeltramelli/deep-spying",
+ "star": 172,
+ "commits": 157,
+ "modify_time": "2016-09-24 14:55:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/strivexjun/driverinjectdll",
+ "star": 172,
+ "commits": 9,
+ "modify_time": "2019-06-28 03:33:02",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/samyk/frisky",
+ "star": 172,
+ "commits": 22,
+ "modify_time": "2019-12-08 00:18:22",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/omergunal/hackerbot",
+ "star": 172,
+ "commits": 28,
+ "modify_time": "2017-12-28 14:42:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/niloofarkheirkhah/nili",
+ "star": 172,
+ "commits": 39,
+ "modify_time": "2018-10-06 10:06:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/metachar/hatch",
+ "star": 172,
+ "commits": 17,
+ "modify_time": "2019-01-20 23:15:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lowleveldesign/debug-recipes",
+ "star": 172,
+ "commits": 334,
+ "modify_time": "2019-11-02 16:44:16",
+ "last_release": "",
+ "lang": "ASP"
+ },
+ {
+ "link": "https://github.com/lavabit/robox",
+ "star": 172,
+ "commits": 1579,
+ "modify_time": "2019-12-05 22:48:22",
+ "last_release": "\n 2.0.6\n ",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/henkaku/offline-installer",
+ "star": 172,
+ "commits": 11,
+ "modify_time": "2017-02-25 22:58:57",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hapijs/crumb",
+ "star": 172,
+ "commits": 261,
+ "modify_time": "2019-10-11 18:14:57",
+ "last_release": "v7.1.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/fnando/password_strength",
+ "star": 172,
+ "commits": 102,
+ "modify_time": "2016-04-28 12:54:09",
+ "last_release": "\n v1.1.4\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/fgsect/unicorefuzz",
+ "star": 172,
+ "commits": 116,
+ "modify_time": "2019-10-14 18:59:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/brannondorsey/host-validation",
+ "star": 172,
+ "commits": 24,
+ "modify_time": "2018-10-28 18:02:23",
+ "last_release": "\n v2.0.1\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/4w4k3/insanity-framework",
+ "star": 172,
+ "commits": 117,
+ "modify_time": "2017-05-15 12:46:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/out0fmemory/qqwry.dat",
+ "star": 171,
+ "commits": 104,
+ "modify_time": "2019-11-05 22:35:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vysecurity/CVE-2017-8759",
+ "star": 171,
+ "commits": 4,
+ "modify_time": "2017-09-14 10:18:39",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ciyze/Windows-Rootkits",
+ "star": 171,
+ "commits": 188,
+ "modify_time": "2019-05-30 03:25:14",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/NoraCodes/crackmes",
+ "star": 171,
+ "commits": 16,
+ "modify_time": "2019-06-27 17:01:10",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/winmin/awesome-vm-exploit",
+ "star": 171,
+ "commits": 12,
+ "modify_time": "2019-02-25 06:46:11",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/trustedsec/hardcidr",
+ "star": 171,
+ "commits": 10,
+ "modify_time": "2019-02-21 17:34:59",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/sindresorhus/ipify",
+ "star": 171,
+ "commits": 33,
+ "modify_time": "2019-06-15 07:58:44",
+ "last_release": "v4.0.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/section9labs/cartero",
+ "star": 171,
+ "commits": 185,
+ "modify_time": "2017-09-03 06:24:57",
+ "last_release": "v0.6",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/samueltulach/virustotaluploader",
+ "star": 171,
+ "commits": 58,
+ "modify_time": "2019-10-16 12:49:47",
+ "last_release": "0.0.7",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/rpisec/hackthevote",
+ "star": 171,
+ "commits": 6,
+ "modify_time": "2017-03-24 04:07:59",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/rohanpadhye/jqf",
+ "star": 171,
+ "commits": 630,
+ "modify_time": "2019-10-14 21:02:07",
+ "last_release": "\n jqf-1.3\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/q3k/cve-2019-5736-poc",
+ "star": 171,
+ "commits": 1,
+ "modify_time": "2019-02-12 22:07:09",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/philbooth/escomplex",
+ "star": 171,
+ "commits": 403,
+ "modify_time": "2015-09-09 12:08:59",
+ "last_release": "\n 1.0.0\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/phat3/pindemonium",
+ "star": 171,
+ "commits": 712,
+ "modify_time": "2016-07-30 23:34:33",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/objective-see/donotdisturb",
+ "star": 171,
+ "commits": 22,
+ "modify_time": "2018-09-26 06:40:10",
+ "last_release": "1.3.0",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/nettitude/sharpsocks",
+ "star": 171,
+ "commits": 21,
+ "modify_time": "2019-07-08 11:07:07",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/lcashdol/exploits",
+ "star": 171,
+ "commits": 128,
+ "modify_time": "2019-02-21 03:35:40",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/kayrus/kubelet-exploit",
+ "star": 171,
+ "commits": 2,
+ "modify_time": "2016-08-26 23:47:27",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/joychou93/webshell",
+ "star": 171,
+ "commits": 12,
+ "modify_time": "2019-01-17 02:58:28",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/hoangprod/andrewspecial",
+ "star": 171,
+ "commits": 7,
+ "modify_time": "2019-06-02 02:49:27",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/heimdal/heimdal",
+ "star": 171,
+ "commits": 29006,
+ "modify_time": "2019-12-10 03:39:30",
+ "last_release": "heimdal-7.7.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/halpomeranz/lmg",
+ "star": 171,
+ "commits": 6,
+ "modify_time": "2016-05-04 14:15:01",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/gleeda/memtriage",
+ "star": 171,
+ "commits": 2759,
+ "modify_time": "2019-10-29 23:20:41",
+ "last_release": "v0.3.1-alpha",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fullmetalcache/powerline",
+ "star": 171,
+ "commits": 57,
+ "modify_time": "2018-12-17 21:52:57",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/ecx86/classinformer-ida7",
+ "star": 171,
+ "commits": 22,
+ "modify_time": "2019-03-12 04:36:22",
+ "last_release": "4",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/devise-security/devise-security",
+ "star": 171,
+ "commits": 585,
+ "modify_time": "2019-10-01 22:01:04",
+ "last_release": "v0.14.3",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/curl/doh",
+ "star": 171,
+ "commits": 46,
+ "modify_time": "2019-11-05 15:59:06",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/bilelmoussaoui/authenticator",
+ "star": 171,
+ "commits": 396,
+ "modify_time": "2019-05-23 15:18:23",
+ "last_release": "0.2.4",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bayshorenetworks/yextend",
+ "star": 171,
+ "commits": 364,
+ "modify_time": "2018-03-12 02:46:20",
+ "last_release": "1.6",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/arwmq9b6/dnsproxy",
+ "star": 171,
+ "commits": 6,
+ "modify_time": "2017-08-01 01:54:35",
+ "last_release": "v0.1.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/andreafioraldi/idangr",
+ "star": 171,
+ "commits": 135,
+ "modify_time": "2018-12-14 09:26:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/4shadoww/hakkuframework",
+ "star": 171,
+ "commits": 384,
+ "modify_time": "2017-03-02 16:36:32",
+ "last_release": "v3.1-alpha",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/out0fmemory/goproxy-always-available",
+ "star": 170,
+ "commits": 1639,
+ "modify_time": "2017-12-27 09:32:15",
+ "last_release": "r1632",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/phra/rustbuster",
+ "star": 170,
+ "commits": 295,
+ "modify_time": "2019-09-05 23:38:25",
+ "last_release": "v3.0.3",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/vergl4s/instarecon",
+ "star": 170,
+ "commits": 152,
+ "modify_time": "2018-10-30 02:47:06",
+ "last_release": "v0.1.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tylert/pocorgtfo",
+ "star": 170,
+ "commits": 9,
+ "modify_time": "2019-04-30 01:12:40",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/skyscanner/cfripper",
+ "star": 170,
+ "commits": 149,
+ "modify_time": "2019-11-26 15:11:35",
+ "last_release": "0.11.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/securingsam/krackdetector",
+ "star": 170,
+ "commits": 3,
+ "modify_time": "2017-10-20 17:51:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/robocoder/rips-scanner",
+ "star": 170,
+ "commits": 25,
+ "modify_time": "2018-07-02 14:17:02",
+ "last_release": "\n 0.55\n ",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/ramen0x3f/aggressorscripts",
+ "star": 170,
+ "commits": 34,
+ "modify_time": "2018-09-26 19:02:54",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/purpleteam/snarf",
+ "star": 170,
+ "commits": 41,
+ "modify_time": "2016-10-07 00:52:38",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/paulsec/csrft",
+ "star": 170,
+ "commits": 32,
+ "modify_time": "2014-06-11 15:47:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/omri9741/cve-2017-7494",
+ "star": 170,
+ "commits": 5,
+ "modify_time": "2017-07-26 13:07:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/misp/pymisp",
+ "star": 170,
+ "commits": 1766,
+ "modify_time": "2019-12-05 18:18:44",
+ "last_release": "\n v2.4.119\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mattifestation/pssysmontools",
+ "star": 170,
+ "commits": 28,
+ "modify_time": "2018-08-17 13:35:17",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/mattifestation/pic_bindshell",
+ "star": 170,
+ "commits": 9,
+ "modify_time": "2018-08-28 17:21:54",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/luyishisi/nyspider",
+ "star": 170,
+ "commits": 329,
+ "modify_time": "2016-12-20 14:13:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/0xKira/qemu-vm-escape",
+ "star": 170,
+ "commits": 4,
+ "modify_time": "2019-06-13 15:45:22",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jensvoid/lorg",
+ "star": 170,
+ "commits": 98,
+ "modify_time": "2019-02-22 09:29:11",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/edoverflow/contact.sh",
+ "star": 170,
+ "commits": 44,
+ "modify_time": "2019-11-06 11:45:25",
+ "last_release": "v0.2",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/eaglexiang/eagle.tunnel.dotnet.core",
+ "star": 170,
+ "commits": 408,
+ "modify_time": "2018-09-26 10:15:40",
+ "last_release": "v2.2.0",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/cyrus-and/mysql-unsha1",
+ "star": 170,
+ "commits": 20,
+ "modify_time": "2017-03-18 19:24:28",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cryin/assetsview",
+ "star": 170,
+ "commits": 12,
+ "modify_time": "2018-01-18 09:24:28",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/cr4sh/fwexpl",
+ "star": 170,
+ "commits": 35,
+ "modify_time": "2016-06-28 14:54:24",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/cert-polska/mquery",
+ "star": 170,
+ "commits": 92,
+ "modify_time": "2019-11-27 18:34:28",
+ "last_release": "v1.1",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/beehive-lab/mambo",
+ "star": 170,
+ "commits": 315,
+ "modify_time": "2019-10-18 19:20:41",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/awhitehatter/mailoney",
+ "star": 170,
+ "commits": 34,
+ "modify_time": "2018-05-30 16:52:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/7dog7/bottleneckosmosis",
+ "star": 170,
+ "commits": 40,
+ "modify_time": "2019-10-18 08:16:51",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/hpfeeds/hpfeeds",
+ "star": 169,
+ "commits": 350,
+ "modify_time": "2019-12-09 07:12:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wuchangming/node-mitmproxy",
+ "star": 169,
+ "commits": 91,
+ "modify_time": "2019-09-29 15:33:34",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/undeadsec/debinject",
+ "star": 169,
+ "commits": 40,
+ "modify_time": "2018-02-08 16:35:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/racepwn/racepwn",
+ "star": 169,
+ "commits": 13,
+ "modify_time": "2019-08-11 09:43:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/olafhartong/attackdatamap",
+ "star": 169,
+ "commits": 20,
+ "modify_time": "2019-10-28 16:38:01",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/octomagon/davegrohl",
+ "star": 169,
+ "commits": 58,
+ "modify_time": "2019-06-06 13:41:12",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/munki/bootstrappr",
+ "star": 169,
+ "commits": 26,
+ "modify_time": "2019-05-20 16:36:56",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/mimah/gomet",
+ "star": 169,
+ "commits": null,
+ "modify_time": "2019-04-02 17:14:32",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/in-toto/in-toto",
+ "star": 169,
+ "commits": 1392,
+ "modify_time": "2019-11-25 19:51:43",
+ "last_release": "v0.4.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/googulator/teslacrack",
+ "star": 169,
+ "commits": 117,
+ "modify_time": "2017-12-28 03:52:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/garethr/pentesting-playground",
+ "star": 169,
+ "commits": 22,
+ "modify_time": "2014-07-21 21:15:12",
+ "last_release": "",
+ "lang": "Puppet"
+ },
+ {
+ "link": "https://github.com/fuzzapi/api-fuzzer",
+ "star": 169,
+ "commits": 66,
+ "modify_time": "2017-07-16 03:50:05",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/cn33liz/msbuildshell",
+ "star": 169,
+ "commits": 9,
+ "modify_time": "2016-11-12 19:14:33",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/carolemieux/afl-rb",
+ "star": 169,
+ "commits": 238,
+ "modify_time": "2019-01-15 17:54:32",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/autopear/ipainstaller",
+ "star": 169,
+ "commits": 66,
+ "modify_time": "2018-07-03 07:06:40",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/3gstudent/worse-pdf",
+ "star": 169,
+ "commits": 6,
+ "modify_time": "2018-05-10 03:34:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/radareorg/r2ghidra-dec",
+ "star": 168,
+ "commits": 135,
+ "modify_time": "2019-12-09 09:19:01",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/zerosteiner/mayhem",
+ "star": 168,
+ "commits": 98,
+ "modify_time": "2019-06-13 00:02:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/x41sec/browser-security-whitepaper-2017",
+ "star": 168,
+ "commits": 9,
+ "modify_time": "2017-09-29 14:40:35",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/weavejester/crypto-password",
+ "star": 168,
+ "commits": 75,
+ "modify_time": "2019-03-21 00:27:05",
+ "last_release": "\n 0.2.1\n ",
+ "lang": "Clojure"
+ },
+ {
+ "link": "https://github.com/tokyoneon/armor",
+ "star": 168,
+ "commits": 5,
+ "modify_time": "2018-11-07 21:45:42",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/strivexjun/aheadlib-x86-x64",
+ "star": 168,
+ "commits": 6,
+ "modify_time": "2019-08-15 03:30:04",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/spacehuhn/wifi_keylogger",
+ "star": 168,
+ "commits": 14,
+ "modify_time": "2017-06-14 18:09:57",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/silver13/h8mini-acro",
+ "star": 168,
+ "commits": 53,
+ "modify_time": "2016-05-12 00:40:37",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/sentinel-official/sentinel",
+ "star": 168,
+ "commits": 1503,
+ "modify_time": "2019-05-13 12:17:09",
+ "last_release": "0.1.2",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/scr34m/php-malware-scanner",
+ "star": 168,
+ "commits": 168,
+ "modify_time": "2019-07-24 14:32:18",
+ "last_release": "\n 1.0.4\n ",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/ridter/cve-2018-15982_exp",
+ "star": 168,
+ "commits": 3,
+ "modify_time": "2019-01-04 09:29:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/radareorg/r2ghidra-dec",
+ "star": 168,
+ "commits": 135,
+ "modify_time": "2019-12-09 09:19:01",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/puresec/serverless-puresec-cli",
+ "star": 168,
+ "commits": 19,
+ "modify_time": "2019-10-22 13:37:07",
+ "last_release": "\n v1.2.1\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/pr0x13/ibrutr",
+ "star": 168,
+ "commits": 20,
+ "modify_time": "2015-09-30 17:57:13",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/n0dec/malwless",
+ "star": 168,
+ "commits": 104,
+ "modify_time": "2019-10-27 12:36:37",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/mnkgrover08-zz/whatsapp_automation",
+ "star": 168,
+ "commits": 27,
+ "modify_time": "2019-01-15 04:11:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mdsecactivebreach/chameleon",
+ "star": 168,
+ "commits": 14,
+ "modify_time": "2018-04-14 10:14:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mcdcorp/opentest",
+ "star": 168,
+ "commits": 1328,
+ "modify_time": "2019-12-08 01:27:28",
+ "last_release": "v1.1.5",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/k-tamura/easybuggy",
+ "star": 168,
+ "commits": 391,
+ "modify_time": "2018-11-13 06:43:48",
+ "last_release": "1.4.0",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/javelinnetworks/honeypotbuster",
+ "star": 168,
+ "commits": 7,
+ "modify_time": "2017-12-05 13:02:56",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/infodox/python-dll-injection",
+ "star": 168,
+ "commits": 7,
+ "modify_time": "2013-11-04 14:02:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/immunant/selfrando",
+ "star": 168,
+ "commits": 1117,
+ "modify_time": "2019-07-11 21:19:41",
+ "last_release": "\n debian-v0.1.0\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ihebski/angryfuzzer",
+ "star": 168,
+ "commits": 11,
+ "modify_time": "2018-03-18 21:13:54",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/gnebbia/pdlist",
+ "star": 168,
+ "commits": 28,
+ "modify_time": "2019-09-22 19:32:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/filosottile/cve-2016-2107",
+ "star": 168,
+ "commits": 14,
+ "modify_time": "2016-05-13 19:18:21",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/evilcos/xssprobe",
+ "star": 168,
+ "commits": 6,
+ "modify_time": "2014-01-06 08:10:28",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/dynetics/malfunction",
+ "star": 168,
+ "commits": 7,
+ "modify_time": "2015-12-15 18:07:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/chbrian/awesome-adversarial-examples-dl",
+ "star": 168,
+ "commits": 9,
+ "modify_time": "2019-11-15 14:50:57",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/blackhole1/webrtcxss",
+ "star": 168,
+ "commits": 26,
+ "modify_time": "2019-06-21 05:33:44",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/baidu-security/app-env-docker",
+ "star": 168,
+ "commits": 234,
+ "modify_time": "2019-10-16 14:16:55",
+ "last_release": "",
+ "lang": "TSQL"
+ },
+ {
+ "link": "https://github.com/anbai-inc/javaweb-codereview",
+ "star": 168,
+ "commits": 8,
+ "modify_time": "2019-01-21 02:43:15",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/0x90/wps-scripts",
+ "star": 168,
+ "commits": 32,
+ "modify_time": "2017-02-21 07:43:33",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/norma-inc/atear",
+ "star": 167,
+ "commits": 139,
+ "modify_time": "2016-11-07 02:46:58",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/praetorian-code/gladius",
+ "star": 167,
+ "commits": 69,
+ "modify_time": "2016-05-16 13:48:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zynamics/objc-helper-plugin-ida",
+ "star": 167,
+ "commits": 10,
+ "modify_time": "2012-01-10 11:54:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vlad902/hacking-team-windows-kernel-lpe",
+ "star": 167,
+ "commits": 4,
+ "modify_time": "2015-07-21 14:00:10",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/tintinweb/ida-batch_decompile",
+ "star": 167,
+ "commits": 18,
+ "modify_time": "2018-07-12 21:03:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sumas/oscp-cheatsheet-god",
+ "star": 167,
+ "commits": 1,
+ "modify_time": "2018-08-02 03:40:41",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/subito-it/sbtuitesttunnel",
+ "star": 167,
+ "commits": 545,
+ "modify_time": "2019-11-13 17:06:49",
+ "last_release": "\n 5.3.0\n ",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/spiderlabs/scavenger",
+ "star": 167,
+ "commits": 5,
+ "modify_time": "2018-12-06 01:02:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/smokeleeteveryday/ctf_writeups",
+ "star": 167,
+ "commits": 129,
+ "modify_time": "2017-10-08 16:59:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/skycrab/leakscan",
+ "star": 167,
+ "commits": 11,
+ "modify_time": "2014-12-07 14:44:15",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/sereneblue/chameleon",
+ "star": 167,
+ "commits": 418,
+ "modify_time": "2019-12-04 02:45:25",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/rlovelett/langserver-swift",
+ "star": 167,
+ "commits": 74,
+ "modify_time": "2018-08-22 18:12:08",
+ "last_release": "0.2.0",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/pwittchen/reactivewifi",
+ "star": 167,
+ "commits": 125,
+ "modify_time": "2019-12-06 15:49:11",
+ "last_release": "v0.3.0",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/odzhan/shellcode",
+ "star": 167,
+ "commits": 76,
+ "modify_time": "2019-12-06 09:26:27",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/northernsec/cve-scan",
+ "star": 167,
+ "commits": 142,
+ "modify_time": "2017-06-13 18:33:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nknetobserver/nknetobserver.github.io",
+ "star": 167,
+ "commits": 2,
+ "modify_time": "2014-12-20 04:15:15",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/mortenschenk/bhusa2017",
+ "star": 167,
+ "commits": 16,
+ "modify_time": "2017-07-27 00:52:37",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/mipt-ilab/mipt-mips",
+ "star": 167,
+ "commits": 2042,
+ "modify_time": "2019-12-09 22:33:23",
+ "last_release": "v2019.3",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/loggerhead/shadowsocks-rust",
+ "star": 167,
+ "commits": 254,
+ "modify_time": "2018-01-27 03:07:22",
+ "last_release": "",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/hugsy/proxenet",
+ "star": 167,
+ "commits": 712,
+ "modify_time": "2016-11-25 09:23:04",
+ "last_release": "v0.4.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/googlecloudplatform/psq",
+ "star": 167,
+ "commits": 55,
+ "modify_time": "2019-08-19 22:56:03",
+ "last_release": "v0.8.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/githacktools/billcipher",
+ "star": 167,
+ "commits": 28,
+ "modify_time": "2019-04-12 17:02:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ge0rg/memorizingtrustmanager",
+ "star": 167,
+ "commits": 110,
+ "modify_time": "2018-08-07 06:59:07",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/eggjs/egg-security",
+ "star": 167,
+ "commits": 88,
+ "modify_time": "2019-11-14 03:41:52",
+ "last_release": "\n 2.7.1\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/dviros/credsleaker",
+ "star": 167,
+ "commits": 27,
+ "modify_time": "2019-04-28 09:39:26",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/droe/xnumon",
+ "star": 167,
+ "commits": 363,
+ "modify_time": "2019-08-13 07:35:29",
+ "last_release": "\n 0.1.7.2\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/c4o/chinesedarkwebcrawler",
+ "star": 167,
+ "commits": 10,
+ "modify_time": "2018-11-16 17:16:30",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/botherder/targetedthreats",
+ "star": 167,
+ "commits": 53,
+ "modify_time": "2019-11-24 20:11:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bencoder/js13k-2019",
+ "star": 167,
+ "commits": 135,
+ "modify_time": "2019-10-14 10:53:56",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/belane/linux-soft-exploit-suggester",
+ "star": 167,
+ "commits": 23,
+ "modify_time": "2018-09-08 20:21:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bazad/ida_kernelcache",
+ "star": 167,
+ "commits": 46,
+ "modify_time": "2018-11-30 18:22:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pentestmonkey/php-reverse-shell",
+ "star": 166,
+ "commits": 2,
+ "modify_time": "2015-05-29 20:04:41",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/zeek/packet-bricks",
+ "star": 166,
+ "commits": 121,
+ "modify_time": "2016-06-12 05:25:38",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/progmem/switch-fightstick",
+ "star": 166,
+ "commits": 7,
+ "modify_time": "2019-11-26 13:58:33",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/WiPi-Hunter/PiSavar",
+ "star": 166,
+ "commits": 99,
+ "modify_time": "2018-09-21 08:43:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/offensive-security/exploitdb-papers",
+ "star": 166,
+ "commits": 147,
+ "modify_time": "2019-12-03 01:40:21",
+ "last_release": "\n 2019-12-03\n ",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/tijme/angularjs-csti-scanner",
+ "star": 166,
+ "commits": 204,
+ "modify_time": "2019-02-02 12:41:37",
+ "last_release": "3.0.6",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/securestate/termineter",
+ "star": 166,
+ "commits": 196,
+ "modify_time": "2019-11-19 01:37:27",
+ "last_release": "\n v1.0.4\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/secrule/falcon",
+ "star": 166,
+ "commits": 14,
+ "modify_time": "2012-07-16 08:44:41",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/ricotz/plank",
+ "star": 166,
+ "commits": 1954,
+ "modify_time": "2019-09-01 09:11:22",
+ "last_release": "\n 0.11.89\n ",
+ "lang": "Vala"
+ },
+ {
+ "link": "https://github.com/r3mrum/psdecode",
+ "star": 166,
+ "commits": 47,
+ "modify_time": "2019-09-01 20:17:22",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/proteas/unstripped-ios-kernels",
+ "star": 166,
+ "commits": 7,
+ "modify_time": "2019-05-07 03:07:28",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/priyankgada/python-for-hackers",
+ "star": 166,
+ "commits": 78,
+ "modify_time": "2017-12-23 08:08:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/peewpw/invoke-bsod",
+ "star": 166,
+ "commits": 13,
+ "modify_time": "2018-04-03 13:36:45",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/mpgn/poodle-poc",
+ "star": 166,
+ "commits": 48,
+ "modify_time": "2019-01-31 22:56:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/monrocoury/forensic-tools",
+ "star": 166,
+ "commits": 74,
+ "modify_time": "2017-12-26 00:51:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/milo2012/pentest_scripts",
+ "star": 166,
+ "commits": 155,
+ "modify_time": "2018-09-27 04:21:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hanc00l/weblogic_unserialize_exploit",
+ "star": 166,
+ "commits": 17,
+ "modify_time": "2018-07-20 10:36:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cryptocubik/browserprint",
+ "star": 166,
+ "commits": 381,
+ "modify_time": "2017-08-01 23:41:52",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/corsis/portfusion",
+ "star": 166,
+ "commits": 339,
+ "modify_time": "2016-08-01 06:30:08",
+ "last_release": "\n 1.2.1\n ",
+ "lang": "Haskell"
+ },
+ {
+ "link": "https://github.com/bigric3/cve-2018-8120",
+ "star": 166,
+ "commits": 4,
+ "modify_time": "2018-05-17 09:53:34",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/backlion/hack-for-tools",
+ "star": 166,
+ "commits": 2,
+ "modify_time": "2016-10-26 03:06:59",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/azizaltuntas/camelishing",
+ "star": 166,
+ "commits": 33,
+ "modify_time": "2018-07-24 08:33:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/1n3/massbleed",
+ "star": 166,
+ "commits": 18,
+ "modify_time": "2019-10-09 14:51:15",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/spacehuhn/packetmonitor32",
+ "star": 165,
+ "commits": 9,
+ "modify_time": "2018-03-05 10:26:48",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/yuri-gushin/roboo",
+ "star": 165,
+ "commits": 15,
+ "modify_time": "2012-10-14 21:26:38",
+ "last_release": "\n v0.66\n ",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/xme/hoover",
+ "star": 165,
+ "commits": 4,
+ "modify_time": "2015-06-09 17:59:59",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/westerndigitalcorporation/swerv-iss",
+ "star": 165,
+ "commits": 1234,
+ "modify_time": "2019-10-15 17:19:58",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/sowish/lnscan",
+ "star": 165,
+ "commits": 18,
+ "modify_time": "2016-08-27 04:15:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/siraben/zkeme80",
+ "star": 165,
+ "commits": 95,
+ "modify_time": "2019-09-11 13:18:52",
+ "last_release": "",
+ "lang": "Scheme"
+ },
+ {
+ "link": "https://github.com/r00t-3xp10it/msf-auxiliarys",
+ "star": 165,
+ "commits": 503,
+ "modify_time": "2019-05-25 20:45:07",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/opendns/security_ninjas_appsec_training",
+ "star": 165,
+ "commits": 23,
+ "modify_time": "2015-03-12 01:30:12",
+ "last_release": "",
+ "lang": "Roff"
+ },
+ {
+ "link": "https://github.com/moexin/easy-v2ray",
+ "star": 165,
+ "commits": 12,
+ "modify_time": "2017-08-16 10:38:45",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/jioundai/bluedroid",
+ "star": 165,
+ "commits": 8,
+ "modify_time": "2018-11-06 02:36:42",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/grempe/diceware",
+ "star": 165,
+ "commits": 120,
+ "modify_time": "2019-08-13 16:47:05",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/google/pawn",
+ "star": 165,
+ "commits": 24,
+ "modify_time": "2018-03-10 12:10:28",
+ "last_release": "v0.2",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/gamelinux/prads",
+ "star": 165,
+ "commits": 1128,
+ "modify_time": "2017-03-18 07:59:03",
+ "last_release": "\n debian/0.3.3-1\n ",
+ "lang": "Standard ML"
+ },
+ {
+ "link": "https://github.com/fullmetal5/bluebomb",
+ "star": 165,
+ "commits": 6,
+ "modify_time": "2019-10-01 22:14:45",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cyassl/cyassl",
+ "star": 165,
+ "commits": 2392,
+ "modify_time": "2018-03-30 14:38:11",
+ "last_release": "\n v3.12.4\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/creepsky/creepminer",
+ "star": 165,
+ "commits": 1624,
+ "modify_time": "2019-03-02 21:47:23",
+ "last_release": "1.9.0",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/creddefense/creddefense",
+ "star": 165,
+ "commits": 49,
+ "modify_time": "2019-08-06 15:00:33",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/chtd/psycopg2cffi",
+ "star": 165,
+ "commits": 609,
+ "modify_time": "2019-10-23 17:44:28",
+ "last_release": "\n 2.8.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/certcc/keyfinder",
+ "star": 165,
+ "commits": 8,
+ "modify_time": "2018-08-07 16:46:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/adamcaudill/yawast",
+ "star": 165,
+ "commits": 984,
+ "modify_time": "2019-12-08 20:28:55",
+ "last_release": "0.9.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lilifengcode/burpsuite-plugins-usage",
+ "star": 164,
+ "commits": 24,
+ "modify_time": "2019-10-19 03:48:27",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/Hippolot/finshir",
+ "star": 164,
+ "commits": 512,
+ "modify_time": "2019-11-29 06:15:35",
+ "last_release": "v1.0.5",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/thehackingsage/hackdroid",
+ "star": 164,
+ "commits": 13,
+ "modify_time": "2019-03-15 07:26:45",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ryasnoy/applocker",
+ "star": 164,
+ "commits": 28,
+ "modify_time": "2019-09-25 12:20:48",
+ "last_release": "\n 2.0\n ",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/paloaltonetworks/ansible-pan",
+ "star": 164,
+ "commits": 719,
+ "modify_time": "2019-12-09 21:47:49",
+ "last_release": "v2.3.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nvisium/django.nv",
+ "star": 164,
+ "commits": 252,
+ "modify_time": "2017-05-02 19:43:44",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/nospaceships/node-net-ping",
+ "star": 164,
+ "commits": 66,
+ "modify_time": "2018-06-07 21:24:07",
+ "last_release": "\n 1.2.3\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/mr-un1k0d3r/redteamcsharpscripts",
+ "star": 164,
+ "commits": 41,
+ "modify_time": "2019-12-03 18:25:35",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/mosuan/filescan",
+ "star": 164,
+ "commits": 10,
+ "modify_time": "2019-01-09 02:49:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mdrights/digital-rights",
+ "star": 164,
+ "commits": 130,
+ "modify_time": "2019-09-22 01:49:07",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/manisso/crips",
+ "star": 164,
+ "commits": 18,
+ "modify_time": "2018-01-03 14:01:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jedisct1/blacknurse",
+ "star": 164,
+ "commits": 9,
+ "modify_time": "2016-11-17 11:03:54",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jdbirdwell/afl",
+ "star": 164,
+ "commits": 4,
+ "modify_time": "2015-11-22 19:23:12",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jamesjlinden/unity-decompiled",
+ "star": 164,
+ "commits": 5,
+ "modify_time": "2016-10-17 13:58:32",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/ghostmanager/domaincheck",
+ "star": 164,
+ "commits": 4,
+ "modify_time": "2019-01-16 15:52:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fs0c131y/aadhaarsearchengine",
+ "star": 164,
+ "commits": 6,
+ "modify_time": "2018-03-20 17:57:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/elementsproject/secp256k1-zkp",
+ "star": 164,
+ "commits": 1057,
+ "modify_time": "2019-10-18 20:42:30",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/c0ny1/pwcracker",
+ "star": 164,
+ "commits": 6,
+ "modify_time": "2018-09-25 10:12:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/brandonprry/wicked_cool_shell_scripts_2e",
+ "star": 164,
+ "commits": 59,
+ "modify_time": "2017-05-08 17:35:59",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/ankh2054/windows-pentest",
+ "star": 164,
+ "commits": 42,
+ "modify_time": "2018-01-10 20:21:54",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/alsidofficial/wsuspendu",
+ "star": 164,
+ "commits": 2,
+ "modify_time": "2019-06-09 08:16:55",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/SniperOJ/Attack-Defense-Framework",
+ "star": 163,
+ "commits": 1,
+ "modify_time": "2017-08-21 03:36:48",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/Q2h1Cg/CMS-Exploit-Framework",
+ "star": 163,
+ "commits": 53,
+ "modify_time": "2014-11-30 05:17:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dsccommunity/ActiveDirectoryDsc",
+ "star": 163,
+ "commits": 473,
+ "modify_time": "2019-11-16 11:04:17",
+ "last_release": "\n 3.0.0.0-PSGallery\n ",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/bytecode77/r77-rootkit",
+ "star": 163,
+ "commits": 5,
+ "modify_time": "2019-06-19 06:38:03",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/threatexpress/metatwin",
+ "star": 163,
+ "commits": 12,
+ "modify_time": "2017-10-19 14:43:41",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/walkerfuz/morph",
+ "star": 163,
+ "commits": 82,
+ "modify_time": "2018-10-23 11:36:11",
+ "last_release": "v0.4.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wafpassproject/wafpass",
+ "star": 163,
+ "commits": 48,
+ "modify_time": "2019-06-02 09:17:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/uptimejp/sql_firewall",
+ "star": 163,
+ "commits": 21,
+ "modify_time": "2015-09-21 05:52:46",
+ "last_release": "v0_8_1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/teran-mckinney/raru",
+ "star": 163,
+ "commits": 17,
+ "modify_time": "2016-07-04 16:47:44",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/swisskyrepo/graphqlmap",
+ "star": 163,
+ "commits": 11,
+ "modify_time": "2019-11-21 13:33:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sourcekris/rsactftool",
+ "star": 163,
+ "commits": 63,
+ "modify_time": "2017-05-04 07:55:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/scslab/tcpcrypt",
+ "star": 163,
+ "commits": 369,
+ "modify_time": "2016-07-15 05:28:49",
+ "last_release": "\n v0.5\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/rxwx/cve-2017-8570",
+ "star": 163,
+ "commits": 2,
+ "modify_time": "2018-01-09 19:23:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pinterest/thrift-tools",
+ "star": 163,
+ "commits": 38,
+ "modify_time": "2019-08-28 21:45:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/oalabs/blobrunner",
+ "star": 163,
+ "commits": 8,
+ "modify_time": "2018-01-01 18:40:13",
+ "last_release": "v0.0.3",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/kost/nmap-android",
+ "star": 163,
+ "commits": 49,
+ "modify_time": "2016-10-25 08:39:39",
+ "last_release": "v7.31",
+ "lang": "Makefile"
+ },
+ {
+ "link": "https://github.com/jrfonseca/drmingw",
+ "star": 163,
+ "commits": 608,
+ "modify_time": "2019-11-30 13:32:45",
+ "last_release": "0.9.2",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/hd421/monitoring-systems-cheat-sheet",
+ "star": 163,
+ "commits": 35,
+ "modify_time": "2019-04-10 16:01:53",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/functionclub/fail2ban",
+ "star": 163,
+ "commits": 24,
+ "modify_time": "2017-10-17 04:36:34",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/friedrith/node-wifi",
+ "star": 163,
+ "commits": 207,
+ "modify_time": "2019-09-19 15:58:49",
+ "last_release": "\n v2.0.12\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/davidgfnet/wireshark-whatsapp",
+ "star": 163,
+ "commits": 36,
+ "modify_time": "2019-02-27 18:51:18",
+ "last_release": "\n v0.16\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cyberark/riskyspn",
+ "star": 163,
+ "commits": 30,
+ "modify_time": "2017-06-15 07:41:17",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/boy-hack/poc-t",
+ "star": 163,
+ "commits": 277,
+ "modify_time": "2018-09-13 01:37:33",
+ "last_release": "\n 2.0.4\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bastibl/gr-ieee802-15-4",
+ "star": 163,
+ "commits": 136,
+ "modify_time": "2019-10-06 13:48:55",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/alpha1e0/kiwi",
+ "star": 163,
+ "commits": 48,
+ "modify_time": "2019-08-12 07:54:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jeremylong/dependency-check-gradle",
+ "star": 162,
+ "commits": 356,
+ "modify_time": "2019-11-24 11:58:12",
+ "last_release": "\n v5.2.4\n ",
+ "lang": "Groovy"
+ },
+ {
+ "link": "https://github.com/hackatnow/shodanwave",
+ "star": 162,
+ "commits": 49,
+ "modify_time": "2017-12-13 02:20:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/chenjiandongx/Github-spider",
+ "star": 162,
+ "commits": 10,
+ "modify_time": "2017-05-07 13:23:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/osirislab/Fentanyl",
+ "star": 162,
+ "commits": 66,
+ "modify_time": "2015-10-02 16:36:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/x64dbg/x64dbgida",
+ "star": 162,
+ "commits": 16,
+ "modify_time": "2019-10-25 10:57:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wh1t3rh1n0/air-hammer",
+ "star": 162,
+ "commits": 3,
+ "modify_time": "2016-10-07 19:36:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/securityriskadvisors/vectr",
+ "star": 162,
+ "commits": 93,
+ "modify_time": "2019-10-22 22:15:47",
+ "last_release": "ce-5.3.1",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/saltstack/salt-contrib",
+ "star": 162,
+ "commits": 485,
+ "modify_time": "2018-08-28 20:55:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sa7mon/miniprint",
+ "star": 162,
+ "commits": 163,
+ "modify_time": "2019-04-19 22:55:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/opentimestamps/opentimestamps-client",
+ "star": 162,
+ "commits": 561,
+ "modify_time": "2019-10-31 16:52:45",
+ "last_release": "\n opentimestamps-client-v0.7.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/neo23x0/yaranalyzer",
+ "star": 162,
+ "commits": 25,
+ "modify_time": "2019-11-14 22:47:11",
+ "last_release": "v0.6",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mykings/python-masscan",
+ "star": 162,
+ "commits": 37,
+ "modify_time": "2019-10-15 07:38:56",
+ "last_release": "v0.1.6",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ironbee/waf-research",
+ "star": 162,
+ "commits": 45,
+ "modify_time": "2013-10-22 11:51:57",
+ "last_release": "",
+ "lang": "XSLT"
+ },
+ {
+ "link": "https://github.com/input-output-hk/mantis",
+ "star": 162,
+ "commits": 3015,
+ "modify_time": "2019-02-12 10:19:18",
+ "last_release": "\n v2.0-cli\n ",
+ "lang": "Scala"
+ },
+ {
+ "link": "https://github.com/harmj0y/powerup",
+ "star": 162,
+ "commits": 27,
+ "modify_time": "2014-12-03 04:50:34",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/gdbinit/readmem",
+ "star": 162,
+ "commits": 12,
+ "modify_time": "2013-10-06 07:57:40",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/gabrielrcouto/reaver-wps",
+ "star": 162,
+ "commits": 2,
+ "modify_time": "2017-09-08 03:54:19",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/encounter/futurerestore",
+ "star": 162,
+ "commits": 178,
+ "modify_time": "2018-03-10 15:33:57",
+ "last_release": "v173",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/dzzie/sysanalyzer",
+ "star": 162,
+ "commits": 125,
+ "modify_time": "2019-11-10 20:01:31",
+ "last_release": "",
+ "lang": "Visual Basic .NET"
+ },
+ {
+ "link": "https://github.com/dyne/dnscrypt-proxy",
+ "star": 162,
+ "commits": 2510,
+ "modify_time": "2019-08-20 06:17:23",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/dyboy2017/wtf_scan",
+ "star": 162,
+ "commits": 21,
+ "modify_time": "2019-05-07 16:21:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/danilabs/tools-tbhm",
+ "star": 162,
+ "commits": 3,
+ "modify_time": "2017-08-11 12:38:46",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/d4stiny/dell-support-assist-rce-poc",
+ "star": 162,
+ "commits": 4,
+ "modify_time": "2019-05-01 22:32:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cvandeplas/elk-forensics",
+ "star": 162,
+ "commits": 15,
+ "modify_time": "2019-07-10 11:06:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ant4g0nist/vegvisir",
+ "star": 162,
+ "commits": 7,
+ "modify_time": "2019-10-06 06:22:27",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/a5-/gamerfood_csgo",
+ "star": 162,
+ "commits": 121,
+ "modify_time": "2019-07-12 17:39:32",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/hackatnow/shodanwave",
+ "star": 162,
+ "commits": 49,
+ "modify_time": "2017-12-13 02:20:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/iqiyi/dexsplitter",
+ "star": 161,
+ "commits": 4,
+ "modify_time": "2018-07-08 07:58:39",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/hmbsbige/nattypetester",
+ "star": 161,
+ "commits": 22,
+ "modify_time": "2019-11-18 12:57:00",
+ "last_release": "2.1",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/appknox/AFE",
+ "star": 161,
+ "commits": 32,
+ "modify_time": "2015-09-27 10:08:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tulpar/tulpar",
+ "star": 161,
+ "commits": 21,
+ "modify_time": "2017-09-04 09:20:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lc/theftfuzzer",
+ "star": 161,
+ "commits": 24,
+ "modify_time": "2019-10-17 03:51:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/momo5502/cod-exploits",
+ "star": 161,
+ "commits": 48,
+ "modify_time": "2019-04-19 22:43:30",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/yassineaboukir/cve-2018-0296",
+ "star": 161,
+ "commits": 34,
+ "modify_time": "2019-06-09 19:30:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/yaph/domxssscanner",
+ "star": 161,
+ "commits": 65,
+ "modify_time": "2019-01-17 11:59:17",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/xorrior/random-csharptools",
+ "star": 161,
+ "commits": 23,
+ "modify_time": "2019-05-30 23:54:38",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/wish-i-was/femida",
+ "star": 161,
+ "commits": 13,
+ "modify_time": "2019-10-10 13:43:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/veorq/blueflower",
+ "star": 161,
+ "commits": 116,
+ "modify_time": "2018-07-26 15:01:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/staticafi/symbiotic",
+ "star": 161,
+ "commits": 1378,
+ "modify_time": "2019-10-30 11:13:35",
+ "last_release": "svcomp2020",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/secwiki/hack-movie",
+ "star": 161,
+ "commits": 12,
+ "modify_time": "2017-09-25 05:58:53",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/regala/burp-scope-monitor",
+ "star": 161,
+ "commits": 73,
+ "modify_time": "2019-11-27 11:12:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rapid7/mettle",
+ "star": 161,
+ "commits": 868,
+ "modify_time": "2019-06-01 16:30:03",
+ "last_release": "\n v0.5.16\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/rajeshmajumdar/ploitkit",
+ "star": 161,
+ "commits": 44,
+ "modify_time": "2017-06-29 17:11:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/poelzi/openchronos",
+ "star": 161,
+ "commits": 275,
+ "modify_time": "2011-07-01 17:32:59",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/pentesteres/delorean",
+ "star": 161,
+ "commits": 11,
+ "modify_time": "2017-05-15 19:30:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/openwhitebox/aes",
+ "star": 161,
+ "commits": 219,
+ "modify_time": "2016-11-14 23:20:03",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/netbiosx/default-credentials",
+ "star": 161,
+ "commits": 20,
+ "modify_time": "2017-06-30 10:52:55",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/msuhanov/regf",
+ "star": 161,
+ "commits": 236,
+ "modify_time": "2018-10-27 23:22:58",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/miserlou/mackenzie",
+ "star": 161,
+ "commits": 2,
+ "modify_time": "2016-12-28 09:12:33",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/jnusimba/linuxsecnotes",
+ "star": 161,
+ "commits": 131,
+ "modify_time": "2018-07-31 08:44:02",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/jakeajames/jelbreklib",
+ "star": 161,
+ "commits": 89,
+ "modify_time": "2019-07-14 17:08:44",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hkm/whoishere.py",
+ "star": 161,
+ "commits": 17,
+ "modify_time": "2017-04-11 15:10:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hiroshimanrise/anonym8",
+ "star": 161,
+ "commits": 36,
+ "modify_time": "2016-10-08 00:15:47",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/eth-sri/securify",
+ "star": 161,
+ "commits": 154,
+ "modify_time": "2019-09-24 10:11:14",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/eniac/faas",
+ "star": 161,
+ "commits": 91,
+ "modify_time": "2019-04-23 13:28:06",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/elithrar/simple-scrypt",
+ "star": 161,
+ "commits": 24,
+ "modify_time": "2018-06-06 14:22:12",
+ "last_release": "v1.3.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/devinacker/bsnes-plus",
+ "star": 161,
+ "commits": 595,
+ "modify_time": "2019-12-07 22:27:32",
+ "last_release": "v05",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/decal/werdlists",
+ "star": 161,
+ "commits": 772,
+ "modify_time": "2019-04-10 03:09:44",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/davedoesdev/python-jwt",
+ "star": 161,
+ "commits": 131,
+ "modify_time": "2019-11-14 22:33:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ctfs/write-ups-tools",
+ "star": 161,
+ "commits": 33,
+ "modify_time": "2016-07-10 13:25:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/citizenlab/test-lists",
+ "star": 161,
+ "commits": 1420,
+ "modify_time": "2019-12-06 16:05:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/blacktop/virustotal-api",
+ "star": 161,
+ "commits": 96,
+ "modify_time": "2019-09-22 18:02:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/artkond/cisco-rce",
+ "star": 161,
+ "commits": 2,
+ "modify_time": "2017-04-12 09:17:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/altramayor/gatekeeper",
+ "star": 161,
+ "commits": 661,
+ "modify_time": "2019-11-21 12:03:44",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/aim4r/voldiff",
+ "star": 161,
+ "commits": 123,
+ "modify_time": "2017-09-12 19:59:23",
+ "last_release": "v2.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/0xmachos/mosl",
+ "star": 161,
+ "commits": 280,
+ "modify_time": "2019-12-06 23:20:28",
+ "last_release": "v3.1.0-beta.2",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/0xbug/biu",
+ "star": 161,
+ "commits": 14,
+ "modify_time": "2019-06-13 15:45:10",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/paperseller/chn-iplist",
+ "star": 160,
+ "commits": 221,
+ "modify_time": "2019-11-18 11:46:13",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/IAIK/sgxrop",
+ "star": 160,
+ "commits": 2,
+ "modify_time": "2019-02-13 12:43:04",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ninjaprawn/async_wake-fun",
+ "star": 160,
+ "commits": 23,
+ "modify_time": "2018-01-02 11:13:42",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/yifanlu/psvimgtools",
+ "star": 160,
+ "commits": 23,
+ "modify_time": "2017-02-28 05:21:17",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/tinyfpga/tinyfpga-bootloader",
+ "star": 160,
+ "commits": 179,
+ "modify_time": "2019-11-22 16:33:52",
+ "last_release": "\n tinyprog-1.0.23\n ",
+ "lang": "AGS Script"
+ },
+ {
+ "link": "https://github.com/the404hacking/androrat",
+ "star": 160,
+ "commits": 4,
+ "modify_time": "2017-10-22 17:21:42",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/splunk/botsv1",
+ "star": 160,
+ "commits": 28,
+ "modify_time": "2018-12-11 18:36:30",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/spiderlabs/cryptomg",
+ "star": 160,
+ "commits": 12,
+ "modify_time": "2015-06-25 17:23:47",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/sakshamsharma/http-over-protocol",
+ "star": 160,
+ "commits": 53,
+ "modify_time": "2016-09-25 04:59:46",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/mrgeffitas/ironsquirrel",
+ "star": 160,
+ "commits": 28,
+ "modify_time": "2019-09-25 07:52:56",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/moha99sa/evilap_defender",
+ "star": 160,
+ "commits": 9,
+ "modify_time": "2017-05-17 12:01:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/matiasb/unpy2exe",
+ "star": 160,
+ "commits": 6,
+ "modify_time": "2018-04-26 19:36:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lelinhtinh/de4js",
+ "star": 160,
+ "commits": 110,
+ "modify_time": "2019-10-28 05:02:54",
+ "last_release": "v1.5.2",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/kost/dockscan",
+ "star": 160,
+ "commits": 37,
+ "modify_time": "2016-08-27 13:49:07",
+ "last_release": "\n v0.1.2\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/klionsec/redteammanual",
+ "star": 160,
+ "commits": 34,
+ "modify_time": "2019-04-28 00:16:52",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/juancarlospaco/css-html-js-minify",
+ "star": 160,
+ "commits": 339,
+ "modify_time": "2018-04-14 15:03:15",
+ "last_release": "1.2.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hunniccyber/sharpsniper",
+ "star": 160,
+ "commits": 9,
+ "modify_time": "2019-09-19 12:28:48",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/gregwar/fatcat",
+ "star": 160,
+ "commits": 232,
+ "modify_time": "2019-10-24 15:49:04",
+ "last_release": "\n v1.1.0\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/exploitprotocol/mobile-security-wiki",
+ "star": 160,
+ "commits": 316,
+ "modify_time": "2018-07-20 17:00:39",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/dshield-isc/dshield",
+ "star": 160,
+ "commits": 555,
+ "modify_time": "2019-11-26 18:54:00",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/dhavalkapil/libdheap",
+ "star": 160,
+ "commits": 19,
+ "modify_time": "2018-05-10 23:03:40",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/d0c-s4vage/gramfuzz",
+ "star": 160,
+ "commits": 43,
+ "modify_time": "2019-09-21 16:22:17",
+ "last_release": "\n v1.2.2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bkimminich/juice-shop-ctf",
+ "star": 160,
+ "commits": 500,
+ "modify_time": "2019-11-23 20:59:12",
+ "last_release": "v7.0.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/504ensicslabs/damm",
+ "star": 160,
+ "commits": 32,
+ "modify_time": "2017-04-16 15:39:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/v2ray/v2ray.github.io",
+ "star": 159,
+ "commits": 1079,
+ "modify_time": "2019-12-09 02:07:14",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/nickrod518/powershell-scripts",
+ "star": 159,
+ "commits": 117,
+ "modify_time": "2019-05-29 18:25:35",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/zhuhuibeishadiao/newhidedriverex",
+ "star": 159,
+ "commits": 5,
+ "modify_time": "2019-05-17 02:53:42",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/whoisflynn/oscp-exam-report-template",
+ "star": 159,
+ "commits": 9,
+ "modify_time": "2019-08-22 15:40:10",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/softsec-kaist/codealchemist",
+ "star": 159,
+ "commits": 16,
+ "modify_time": "2019-11-11 03:57:21",
+ "last_release": "v1.1",
+ "lang": "F#"
+ },
+ {
+ "link": "https://github.com/smilezxlee/crackediosapps",
+ "star": 159,
+ "commits": null,
+ "modify_time": "2019-10-25 09:47:58",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/sch3m4/androidpatternlock",
+ "star": 159,
+ "commits": 8,
+ "modify_time": "2019-03-19 20:10:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/plaguescanner/plaguescanner",
+ "star": 159,
+ "commits": 10,
+ "modify_time": "2015-09-15 21:01:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/phhusson/super-bootimg",
+ "star": 159,
+ "commits": 318,
+ "modify_time": "2017-06-23 14:32:05",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/nneonneo/eqgrp-free-file",
+ "star": 159,
+ "commits": 4,
+ "modify_time": "2016-08-16 22:50:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nforest/droidimg",
+ "star": 159,
+ "commits": 113,
+ "modify_time": "2019-10-17 14:21:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/netspi/sshkey-grab",
+ "star": 159,
+ "commits": 9,
+ "modify_time": "2015-04-22 03:41:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/netspi/javaserialkiller",
+ "star": 159,
+ "commits": 13,
+ "modify_time": "2019-07-22 18:35:21",
+ "last_release": "1.1.0",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/mxmssh/manul",
+ "star": 159,
+ "commits": 147,
+ "modify_time": "2019-11-16 07:00:08",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/malwarearchaeology/attack",
+ "star": 159,
+ "commits": 3,
+ "modify_time": "2018-11-08 19:11:53",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/lukasikic/subzy",
+ "star": 159,
+ "commits": 30,
+ "modify_time": "2019-09-13 20:04:21",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/logicalhacking/dvhma",
+ "star": 159,
+ "commits": 42,
+ "modify_time": "2018-08-20 06:30:54",
+ "last_release": "\n 1.0.0_6.3.0\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/k4m4/dcipher-cli",
+ "star": 159,
+ "commits": 32,
+ "modify_time": "2019-07-15 16:19:17",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/hussein-aitlahcen/blackhole",
+ "star": 159,
+ "commits": 74,
+ "modify_time": "2017-08-04 09:39:13",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/gantman/jail-monkey",
+ "star": 159,
+ "commits": 103,
+ "modify_time": "2019-11-25 00:20:18",
+ "last_release": "\n v2.3.0\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/cupslab/password_meter",
+ "star": 159,
+ "commits": 13,
+ "modify_time": "2017-08-02 20:27:18",
+ "last_release": "",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/censys/censys-python",
+ "star": 159,
+ "commits": 68,
+ "modify_time": "2019-02-27 22:55:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/botherder/kraken",
+ "star": 159,
+ "commits": 70,
+ "modify_time": "2019-01-27 23:12:36",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/fuzzitdev/javafuzz",
+ "star": 158,
+ "commits": 4,
+ "modify_time": "2019-11-22 07:03:57",
+ "last_release": "\n javafuzz-1.22\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/travisfoley/dfirtriage",
+ "star": 158,
+ "commits": 62,
+ "modify_time": "2019-10-30 16:14:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/remeh/sizedwaitgroup",
+ "star": 158,
+ "commits": 17,
+ "modify_time": "2018-08-22 14:42:53",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/resque/resque-loner",
+ "star": 158,
+ "commits": 113,
+ "modify_time": "2014-03-24 18:00:20",
+ "last_release": "\n v1.2.1\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/vyrus001/go-mimikatz",
+ "star": 158,
+ "commits": 16,
+ "modify_time": "2016-05-15 05:32:10",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/theresalu/rspiducky",
+ "star": 158,
+ "commits": 2,
+ "modify_time": "2016-05-27 12:17:20",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/tboox/itrace",
+ "star": 158,
+ "commits": 67,
+ "modify_time": "2019-04-13 12:55:52",
+ "last_release": "v1.3",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/secmob/pwnfest2016",
+ "star": 158,
+ "commits": 5,
+ "modify_time": "2017-06-14 03:33:26",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/samanl33t/awesome-mainframe-hacking",
+ "star": 158,
+ "commits": 34,
+ "modify_time": "2019-07-14 16:54:10",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/pyn3rd/cve-2019-0232",
+ "star": 158,
+ "commits": 31,
+ "modify_time": "2019-11-27 07:39:39",
+ "last_release": "",
+ "lang": "Batchfile"
+ },
+ {
+ "link": "https://github.com/phishai/phish-ai-api",
+ "star": 158,
+ "commits": 13,
+ "modify_time": "2018-04-26 12:23:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nullarray/intrec-pack",
+ "star": 158,
+ "commits": 65,
+ "modify_time": "2019-03-03 08:23:29",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/musicmancorley/briarids",
+ "star": 158,
+ "commits": 279,
+ "modify_time": "2018-06-30 14:51:41",
+ "last_release": "0.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kuburan/txtool",
+ "star": 158,
+ "commits": 32,
+ "modify_time": "2018-04-25 11:19:21",
+ "last_release": "v1.3-rev3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/joychou93/sks",
+ "star": 158,
+ "commits": 22,
+ "modify_time": "2018-10-12 06:08:16",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/jlospinoso/beamgun",
+ "star": 158,
+ "commits": 72,
+ "modify_time": "2019-10-18 09:00:56",
+ "last_release": "\n v0.2.4\n ",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/jeffball55/rop_compiler",
+ "star": 158,
+ "commits": 212,
+ "modify_time": "2017-06-14 07:05:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/javierolmedo/shodan-filters",
+ "star": 158,
+ "commits": 5,
+ "modify_time": "2018-03-17 17:27:33",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/itsmehacker/darkscrape",
+ "star": 158,
+ "commits": 63,
+ "modify_time": "2019-12-03 09:04:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ion28/bluespawn",
+ "star": 158,
+ "commits": 136,
+ "modify_time": "2019-09-18 02:19:13",
+ "last_release": "v0.3.2-alpha",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/hadiasghari/pyasn",
+ "star": 158,
+ "commits": 140,
+ "modify_time": "2018-06-28 10:47:27",
+ "last_release": "\n 1.6.0b1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/googlecloudplatform/endpoints-codelab-android",
+ "star": 158,
+ "commits": 39,
+ "modify_time": "2017-04-18 23:50:01",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/galoisinc/reopt",
+ "star": 158,
+ "commits": 993,
+ "modify_time": "2019-12-05 06:25:55",
+ "last_release": "",
+ "lang": "LLVM"
+ },
+ {
+ "link": "https://github.com/fuzion24/androidobfuscation-ndk",
+ "star": 158,
+ "commits": 9,
+ "modify_time": "2014-07-28 02:57:56",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/doublelabyrinth/010editor-keygen",
+ "star": 158,
+ "commits": 14,
+ "modify_time": "2018-09-23 02:28:51",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/crown-prince/python_poc",
+ "star": 158,
+ "commits": 19,
+ "modify_time": "2016-05-01 11:45:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/c0rvax/project-black",
+ "star": 158,
+ "commits": 2553,
+ "modify_time": "2019-10-21 20:09:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/blazeinfosec/bt2",
+ "star": 158,
+ "commits": 18,
+ "modify_time": "2016-05-27 20:56:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bayotop/off-by-slash",
+ "star": 158,
+ "commits": 15,
+ "modify_time": "2018-11-20 13:01:59",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/andrewlock/netescapades.aspnetcore.securityheaders",
+ "star": 158,
+ "commits": 166,
+ "modify_time": "2019-10-31 09:32:09",
+ "last_release": "\n v0.11.0\n ",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/alephsecurity/abootool",
+ "star": 158,
+ "commits": 21,
+ "modify_time": "2017-09-11 11:50:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lifting-bits/rellic",
+ "star": 157,
+ "commits": 175,
+ "modify_time": "2019-11-25 18:10:36",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ecstatic-nobel/OSweep",
+ "star": 157,
+ "commits": 279,
+ "modify_time": "2019-06-24 01:33:20",
+ "last_release": "v1.6.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ultrasecurity/webkiller",
+ "star": 157,
+ "commits": 14,
+ "modify_time": "2018-10-06 19:49:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tidesec/proxy_pool",
+ "star": 157,
+ "commits": 8,
+ "modify_time": "2019-05-21 01:20:01",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/theevilbit/exploit_generator",
+ "star": 157,
+ "commits": 3,
+ "modify_time": "2016-10-18 18:51:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/swannman/ircapabilities",
+ "star": 157,
+ "commits": 18,
+ "modify_time": "2017-07-17 04:25:28",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/spajed/processrefund",
+ "star": 157,
+ "commits": 33,
+ "modify_time": "2017-12-21 17:54:37",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/shiva108/ctf-notes",
+ "star": 157,
+ "commits": 158,
+ "modify_time": "2019-09-27 16:18:53",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/rust-fuzz/honggfuzz-rs",
+ "star": 157,
+ "commits": 286,
+ "modify_time": "2019-07-29 12:12:38",
+ "last_release": "\n v0.5.44\n ",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/radiowar/nfcgui",
+ "star": 157,
+ "commits": 11,
+ "modify_time": "2015-06-15 13:10:22",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/openats/openats",
+ "star": 157,
+ "commits": 39,
+ "modify_time": "2018-07-23 06:26:33",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/nitrokey/nitrokey-app",
+ "star": 157,
+ "commits": 1594,
+ "modify_time": "2019-10-21 11:17:19",
+ "last_release": "v1.4",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/mrmugiwara/ctf-tools",
+ "star": 157,
+ "commits": 11,
+ "modify_time": "2019-06-07 17:12:35",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/lctf/lctf2017",
+ "star": 157,
+ "commits": 39,
+ "modify_time": "2017-11-22 11:25:51",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/kkamagui/shadow-box-for-x86",
+ "star": 157,
+ "commits": 27,
+ "modify_time": "2019-06-24 15:39:07",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/kavika13/remcom",
+ "star": 157,
+ "commits": 14,
+ "modify_time": "2012-05-17 06:20:41",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/jonnyhightower/neet",
+ "star": 157,
+ "commits": 81,
+ "modify_time": "2016-11-30 15:37:16",
+ "last_release": "1.2.7",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/joker25000/optiva-framework",
+ "star": 157,
+ "commits": 89,
+ "modify_time": "2018-05-08 19:44:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/galkan/flashlight",
+ "star": 157,
+ "commits": 109,
+ "modify_time": "2017-08-29 12:33:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fritzone/obfy",
+ "star": 157,
+ "commits": 55,
+ "modify_time": "2019-08-13 07:44:39",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/facert/github_search",
+ "star": 157,
+ "commits": 9,
+ "modify_time": "2016-10-05 13:37:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/comex/star",
+ "star": 157,
+ "commits": 3,
+ "modify_time": "2010-08-11 21:37:46",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/angr/heaphopper",
+ "star": 157,
+ "commits": 110,
+ "modify_time": "2019-11-27 10:32:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/4w4k3/umbrella",
+ "star": 157,
+ "commits": 18,
+ "modify_time": "2017-05-15 12:47:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/splewis/csgo-practice-mode",
+ "star": 156,
+ "commits": 355,
+ "modify_time": "2019-11-17 22:36:51",
+ "last_release": "1.3.3",
+ "lang": "SourcePawn"
+ },
+ {
+ "link": "https://github.com/wille/cry",
+ "star": 156,
+ "commits": 29,
+ "modify_time": "2017-01-21 22:22:13",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/zer0mem0ry/runpe",
+ "star": 156,
+ "commits": 5,
+ "modify_time": "2016-11-07 15:37:09",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/waterlink/rack-reverse-proxy",
+ "star": 156,
+ "commits": 254,
+ "modify_time": "2017-04-07 23:40:48",
+ "last_release": "\n v0.12.0\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/ufrisk/pcileech-fpga",
+ "star": 156,
+ "commits": 24,
+ "modify_time": "2019-10-14 11:25:08",
+ "last_release": "v4.0",
+ "lang": "SystemVerilog"
+ },
+ {
+ "link": "https://github.com/tintinweb/striptls",
+ "star": 156,
+ "commits": 53,
+ "modify_time": "2017-07-20 21:30:31",
+ "last_release": "v0.5",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/soldierx/libhijack",
+ "star": 156,
+ "commits": 195,
+ "modify_time": "2019-01-02 16:35:52",
+ "last_release": "\n v0.8.0\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/rossja/tinynuke",
+ "star": 156,
+ "commits": 10,
+ "modify_time": "2017-06-26 23:53:13",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/rhinosecuritylabs/cloud-security-research",
+ "star": 156,
+ "commits": 24,
+ "modify_time": "2019-09-26 16:36:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/psconfeu/2018",
+ "star": 156,
+ "commits": 128,
+ "modify_time": "2018-05-17 14:17:18",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/mikesxrs/open-source-yara-rules",
+ "star": 156,
+ "commits": 303,
+ "modify_time": "2018-11-15 23:19:04",
+ "last_release": "",
+ "lang": "YARA"
+ },
+ {
+ "link": "https://github.com/mharjac/bad_ducky",
+ "star": 156,
+ "commits": 8,
+ "modify_time": "2018-04-23 11:01:32",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/maldevel/blue-team",
+ "star": 156,
+ "commits": 46,
+ "modify_time": "2019-06-20 15:07:35",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/madengr/ham2mon",
+ "star": 156,
+ "commits": 65,
+ "modify_time": "2018-10-27 14:24:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ls0f/gortcp",
+ "star": 156,
+ "commits": 25,
+ "modify_time": "2018-01-09 02:21:15",
+ "last_release": "v0.1.2",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/lightless233/java-unserialization-study",
+ "star": 156,
+ "commits": 14,
+ "modify_time": "2018-08-22 11:04:54",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/jonty/idiocy",
+ "star": 156,
+ "commits": 9,
+ "modify_time": "2010-10-27 23:51:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/interference-security/frida-scripts",
+ "star": 156,
+ "commits": 45,
+ "modify_time": "2019-10-11 07:07:44",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/hfiref0x/ntcall64",
+ "star": 156,
+ "commits": 16,
+ "modify_time": "2019-11-24 07:11:34",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/henices/chrome-proxy-helper",
+ "star": 156,
+ "commits": 235,
+ "modify_time": "2019-11-11 08:34:49",
+ "last_release": "v1.2.7",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/handsomeone/scout",
+ "star": 156,
+ "commits": 216,
+ "modify_time": "2018-08-27 05:29:52",
+ "last_release": "",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/gprmax/gprmax",
+ "star": 156,
+ "commits": 1755,
+ "modify_time": "2019-11-18 14:13:27",
+ "last_release": "v.3.1.5",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gbonacini/cve-2016-5195",
+ "star": 156,
+ "commits": 30,
+ "modify_time": "2017-03-21 16:46:03",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/fireeye/geologonalyzer",
+ "star": 156,
+ "commits": 7,
+ "modify_time": "2018-10-08 15:16:14",
+ "last_release": "v1.01",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fire30/ps4-3.55-code-execution-poc",
+ "star": 156,
+ "commits": 39,
+ "modify_time": "2016-09-06 13:51:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dsignr/disallowed-usernames",
+ "star": 156,
+ "commits": 32,
+ "modify_time": "2019-04-28 15:47:42",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/djkaty/il2cppinspector",
+ "star": 156,
+ "commits": 355,
+ "modify_time": "2019-12-10 02:13:37",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/dckc/awesome-ocap",
+ "star": 156,
+ "commits": 62,
+ "modify_time": "2019-03-25 16:57:33",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/christophetd/spoofing-office-macro",
+ "star": 156,
+ "commits": 14,
+ "modify_time": "2019-04-26 14:52:13",
+ "last_release": "",
+ "lang": "Visual Basic .NET"
+ },
+ {
+ "link": "https://github.com/chichou/sploits",
+ "star": 156,
+ "commits": 28,
+ "modify_time": "2019-06-02 14:10:04",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/certcc/trommel",
+ "star": 156,
+ "commits": 85,
+ "modify_time": "2019-08-05 18:38:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/c-sto/recursebuster",
+ "star": 156,
+ "commits": 153,
+ "modify_time": "2019-10-15 01:19:27",
+ "last_release": "\n 1.6.13\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/borjamerino/pazuzu",
+ "star": 156,
+ "commits": 17,
+ "modify_time": "2016-04-08 11:56:59",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bo0om/cve-2017-5124",
+ "star": 156,
+ "commits": 4,
+ "modify_time": "2017-11-14 10:26:27",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/armadito/armadito-av",
+ "star": 156,
+ "commits": 1848,
+ "modify_time": "2017-09-12 15:26:47",
+ "last_release": "\n before_messing_up_the_api\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/anthemtotheego/sharpcradle",
+ "star": 156,
+ "commits": 21,
+ "modify_time": "2018-10-25 16:31:43",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/albuch/sbt-dependency-check",
+ "star": 156,
+ "commits": 367,
+ "modify_time": "2019-11-29 08:29:01",
+ "last_release": "v1.3.3",
+ "lang": "Scala"
+ },
+ {
+ "link": "https://github.com/ihciah/go-shadowsocks-magic",
+ "star": 155,
+ "commits": 8,
+ "modify_time": "2019-10-16 08:55:30",
+ "last_release": "v1.0.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/feeicn/vulture",
+ "star": 155,
+ "commits": 9,
+ "modify_time": "2019-01-24 07:50:46",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ajkhoury/UEFI-Bootkit",
+ "star": 155,
+ "commits": 37,
+ "modify_time": "2019-08-29 14:16:09",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/crytic/ida-evm",
+ "star": 155,
+ "commits": 8,
+ "modify_time": "2018-04-11 22:24:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/z0noxz/powerstager",
+ "star": 155,
+ "commits": 12,
+ "modify_time": "2017-06-09 10:16:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/x0rz/ssh-honeypot",
+ "star": 155,
+ "commits": 21,
+ "modify_time": "2017-01-04 18:08:38",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/weaveworks/tcptracer-bpf",
+ "star": 155,
+ "commits": 127,
+ "modify_time": "2019-07-31 11:19:09",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/viralmaniar/i-see-you",
+ "star": 155,
+ "commits": 21,
+ "modify_time": "2019-04-05 14:04:50",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/sublimelinter/sublimelinter-shellcheck",
+ "star": 155,
+ "commits": 45,
+ "modify_time": "2018-12-10 10:03:06",
+ "last_release": "1.0.16",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/spring-cloud/spring-cloud-vault",
+ "star": 155,
+ "commits": 406,
+ "modify_time": "2019-12-02 08:54:53",
+ "last_release": "\n v2.2.0.RELEASE\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/smealum/butthax",
+ "star": 155,
+ "commits": 4,
+ "modify_time": "2019-08-14 23:41:04",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/oblivia-simplex/roper",
+ "star": 155,
+ "commits": 358,
+ "modify_time": "2019-04-25 16:49:53",
+ "last_release": "",
+ "lang": "Common Lisp"
+ },
+ {
+ "link": "https://github.com/nucypher/pyumbral",
+ "star": 155,
+ "commits": 954,
+ "modify_time": "2019-10-18 12:56:31",
+ "last_release": "\n v0.1.3-alpha.2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/n0tr00t/beehive",
+ "star": 155,
+ "commits": 14,
+ "modify_time": "2016-01-06 08:16:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mac4n6/presentations",
+ "star": 155,
+ "commits": 23,
+ "modify_time": "2019-08-07 00:09:31",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/itzsomebody/radon",
+ "star": 155,
+ "commits": 351,
+ "modify_time": "2019-11-14 17:15:07",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/hatlord/snmpwn",
+ "star": 155,
+ "commits": 46,
+ "modify_time": "2019-03-01 16:29:15",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/evilcos/xss.swf",
+ "star": 155,
+ "commits": 5,
+ "modify_time": "2013-03-13 00:06:00",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/escomplex/complexity-report",
+ "star": 155,
+ "commits": 397,
+ "modify_time": "2017-03-12 06:03:01",
+ "last_release": "\n v2.0.0-alpha\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/epsylon/cintruder",
+ "star": 155,
+ "commits": 10,
+ "modify_time": "2019-01-26 05:42:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/defuse/sockstress",
+ "star": 155,
+ "commits": 2,
+ "modify_time": "2014-04-17 15:36:39",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/chrislee35/passivedns-client",
+ "star": 155,
+ "commits": 78,
+ "modify_time": "2018-06-08 02:41:57",
+ "last_release": "\n v2.1.11\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/arisada/midgetpack",
+ "star": 155,
+ "commits": 2,
+ "modify_time": "2014-07-28 16:14:08",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/antichown/subdomain-takeover",
+ "star": 155,
+ "commits": 81,
+ "modify_time": "2019-12-01 00:20:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/airbus-seclab/crashos",
+ "star": 155,
+ "commits": 20,
+ "modify_time": "2019-10-16 20:30:28",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/zeddyu/http-smuggling-lab",
+ "star": 154,
+ "commits": 4,
+ "modify_time": "2019-12-08 09:22:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mwsrc/PlasmaRAT",
+ "star": 154,
+ "commits": 1,
+ "modify_time": "2016-12-24 07:54:36",
+ "last_release": "",
+ "lang": "Visual Basic .NET"
+ },
+ {
+ "link": "https://github.com/wohlstand/destroy-windows-10-spying",
+ "star": 154,
+ "commits": 132,
+ "modify_time": "2019-05-22 15:35:40",
+ "last_release": "2.2.2.2.27",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/vulnerscom/zabbix-threat-control",
+ "star": 154,
+ "commits": 126,
+ "modify_time": "2019-02-12 08:24:48",
+ "last_release": "0.3.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ullaakut/nmap",
+ "star": 154,
+ "commits": 125,
+ "modify_time": "2019-12-06 09:36:55",
+ "last_release": "v2.0.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/threatexpress/malleable-c2",
+ "star": 154,
+ "commits": 22,
+ "modify_time": "2019-08-27 12:19:18",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/stonedreamforest/naiheqiao",
+ "star": 154,
+ "commits": 44,
+ "modify_time": "2017-03-15 12:29:58",
+ "last_release": "2017-3-15",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/sjvermeu/cvechecker",
+ "star": 154,
+ "commits": 158,
+ "modify_time": "2019-01-09 19:07:25",
+ "last_release": "v3.9",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/secretsquirrel/fido",
+ "star": 154,
+ "commits": 54,
+ "modify_time": "2017-08-01 12:40:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/scen/osxinj",
+ "star": 154,
+ "commits": 23,
+ "modify_time": "2017-07-20 17:12:18",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/rednaga/axmlprinter",
+ "star": 154,
+ "commits": 65,
+ "modify_time": "2019-09-10 18:58:24",
+ "last_release": "0.1.7",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/reddr/libscout",
+ "star": 154,
+ "commits": 112,
+ "modify_time": "2019-10-25 08:17:22",
+ "last_release": "2.3.2",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/realtho/partyloud",
+ "star": 154,
+ "commits": 100,
+ "modify_time": "2019-11-28 19:37:18",
+ "last_release": "\n v0.0.9\n ",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/ragibson/steganography",
+ "star": 154,
+ "commits": 54,
+ "modify_time": "2019-07-07 15:22:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/passbyyou888/zserver4d",
+ "star": 154,
+ "commits": 308,
+ "modify_time": "2019-12-07 05:58:04",
+ "last_release": "",
+ "lang": "Pascal"
+ },
+ {
+ "link": "https://github.com/paralax/lfi-labs",
+ "star": 154,
+ "commits": 46,
+ "modify_time": "2018-02-20 17:41:11",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/net-reflow/reflow",
+ "star": 154,
+ "commits": 116,
+ "modify_time": "2019-10-22 11:34:04",
+ "last_release": "build-2",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/moyix/creddump",
+ "star": 154,
+ "commits": 3,
+ "modify_time": "2017-08-01 15:08:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mimoo/disco",
+ "star": 154,
+ "commits": 127,
+ "modify_time": "2019-12-05 18:22:01",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/kbandla/immunitydebugger",
+ "star": 154,
+ "commits": 9,
+ "modify_time": "2016-04-02 23:53:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jschicht/rawcopy",
+ "star": 154,
+ "commits": 20,
+ "modify_time": "2019-07-30 17:59:00",
+ "last_release": "",
+ "lang": "AutoIt"
+ },
+ {
+ "link": "https://github.com/joukewitteveen/netctl",
+ "star": 154,
+ "commits": 751,
+ "modify_time": "2019-02-12 16:12:20",
+ "last_release": "\n 1.20\n ",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/jollheef/out-of-tree",
+ "star": 154,
+ "commits": 304,
+ "modify_time": "2019-11-15 07:50:55",
+ "last_release": "v1.1.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/nccgroup/keimpx",
+ "star": 154,
+ "commits": 267,
+ "modify_time": "2019-12-09 15:11:07",
+ "last_release": "v0.4-beta.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ifding/radare2-tutorial",
+ "star": 154,
+ "commits": 5,
+ "modify_time": "2017-12-16 19:17:56",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hl2guide/all-in-one-customized-adblock-list",
+ "star": 154,
+ "commits": 43,
+ "modify_time": "2019-11-13 12:17:39",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/changeofpace/self-remapping-code",
+ "star": 154,
+ "commits": 8,
+ "modify_time": "2019-03-19 10:14:54",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/anthemtotheego/sharpexec",
+ "star": 154,
+ "commits": 78,
+ "modify_time": "2019-05-26 21:25:20",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/0x09al/cve-2018-8174-msf",
+ "star": 154,
+ "commits": 11,
+ "modify_time": "2018-05-23 20:43:57",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/inconshreveable/go-tunnel",
+ "star": 153,
+ "commits": 17,
+ "modify_time": "2016-03-14 11:01:08",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/kali-docs-cn/kali-linux-web-pentest-cookbook-zh",
+ "star": 153,
+ "commits": 78,
+ "modify_time": "2019-01-19 06:14:32",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/zjlywjh001/phrackctf-platform-team",
+ "star": 153,
+ "commits": 11,
+ "modify_time": "2018-03-27 15:42:04",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/zer0yu/berserker",
+ "star": 153,
+ "commits": 5,
+ "modify_time": "2019-08-30 02:10:34",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/ysrc/androidobfusedictionary",
+ "star": 153,
+ "commits": 3,
+ "modify_time": "2017-03-06 08:33:54",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/voidfyoo/cve-2018-3191",
+ "star": 153,
+ "commits": null,
+ "modify_time": "2018-10-21 17:28:13",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/valdikss/super-uefiinsecureboot-disk",
+ "star": 153,
+ "commits": 11,
+ "modify_time": "2019-04-22 14:03:54",
+ "last_release": "3",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/urbanadventurer/username-anarchy",
+ "star": 153,
+ "commits": 54,
+ "modify_time": "2016-10-21 14:26:37",
+ "last_release": "\n version0.2\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/trustedsec/ridenum",
+ "star": 153,
+ "commits": 71,
+ "modify_time": "2019-09-11 15:44:19",
+ "last_release": "\n 1.7\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/testsecer/webshell",
+ "star": 153,
+ "commits": 1,
+ "modify_time": "2017-11-24 07:28:26",
+ "last_release": "",
+ "lang": "ASP"
+ },
+ {
+ "link": "https://github.com/samyoyo/weeman",
+ "star": 153,
+ "commits": 11,
+ "modify_time": "2015-09-30 16:25:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/renatahodovan/fuzzinator",
+ "star": 153,
+ "commits": 273,
+ "modify_time": "2019-12-08 17:21:06",
+ "last_release": "\n 18.3.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/palkan/n_plus_one_control",
+ "star": 153,
+ "commits": 24,
+ "modify_time": "2019-02-18 19:32:51",
+ "last_release": "\n v0.3.1\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/mpirnat/lets-be-bad-guys",
+ "star": 153,
+ "commits": 107,
+ "modify_time": "2017-07-31 14:21:04",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/k0retux/fuddly",
+ "star": 153,
+ "commits": 569,
+ "modify_time": "2019-04-02 13:17:28",
+ "last_release": "0.27.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cazala/react-coin-hive",
+ "star": 153,
+ "commits": 21,
+ "modify_time": "2017-10-03 18:02:03",
+ "last_release": "1.1.1",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/atlassian/localstack",
+ "star": 153,
+ "commits": 304,
+ "modify_time": "2017-07-15 09:50:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/adguardteam/adguarddns",
+ "star": 153,
+ "commits": 22,
+ "modify_time": "2018-12-17 14:05:30",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/0xmitsurugi/gimmecredz",
+ "star": 153,
+ "commits": 10,
+ "modify_time": "2019-07-28 20:04:15",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/0x36/vpnpivot",
+ "star": 153,
+ "commits": 22,
+ "modify_time": "2016-07-21 08:49:26",
+ "last_release": "",
+ "lang": "Makefile"
+ },
+ {
+ "link": "https://github.com/vysecurity/linkedint",
+ "star": 152,
+ "commits": 17,
+ "modify_time": "2019-05-10 09:13:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vivami/sauroneye",
+ "star": 152,
+ "commits": 10,
+ "modify_time": "2019-11-30 09:46:36",
+ "last_release": "0.0.2",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/0xbing/wukong-agent",
+ "star": 152,
+ "commits": 20,
+ "modify_time": "2017-12-19 15:27:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vanpersiexp/expcamera",
+ "star": 152,
+ "commits": 41,
+ "modify_time": "2018-07-09 02:51:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/thehive-project/cortex-analyzers",
+ "star": 152,
+ "commits": 1317,
+ "modify_time": "2019-12-06 11:14:48",
+ "last_release": "\n 2.3.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/thecreeper/privacyfox",
+ "star": 152,
+ "commits": 18,
+ "modify_time": "2015-09-09 13:23:56",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/stealthbits/poshkatz",
+ "star": 152,
+ "commits": 31,
+ "modify_time": "2019-06-04 13:31:59",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/snooze6/fios",
+ "star": 152,
+ "commits": 7,
+ "modify_time": "2018-02-23 08:29:53",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/shirosaidev/sharesniffer",
+ "star": 152,
+ "commits": 52,
+ "modify_time": "2019-12-04 23:04:14",
+ "last_release": "v0.1-b.8",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/richiercyrus/venator",
+ "star": 152,
+ "commits": 90,
+ "modify_time": "2019-10-20 22:21:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pkroma/processhacker",
+ "star": 152,
+ "commits": 7398,
+ "modify_time": "2019-12-07 23:46:52",
+ "last_release": "\n v2.39\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/mothran/aflpin",
+ "star": 152,
+ "commits": 18,
+ "modify_time": "2015-01-27 17:51:44",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/laie/worldsfirstsha2vulnerability",
+ "star": 152,
+ "commits": 10,
+ "modify_time": "2017-06-28 20:25:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ixty/xarch_shellcode",
+ "star": 152,
+ "commits": 2,
+ "modify_time": "2016-08-24 14:47:22",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/intrepidusgroup/imdmtools",
+ "star": 152,
+ "commits": 13,
+ "modify_time": "2012-07-20 13:48:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gaoshilei/mmplugin",
+ "star": 152,
+ "commits": 10,
+ "modify_time": "2019-06-11 10:48:58",
+ "last_release": "",
+ "lang": "Objective-C++"
+ },
+ {
+ "link": "https://github.com/floyd-fuh/jks-private-key-cracker-hashcat",
+ "star": 152,
+ "commits": 4,
+ "modify_time": "2017-12-21 11:15:35",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/dotfighter/torshammer",
+ "star": 152,
+ "commits": 4,
+ "modify_time": "2012-02-12 13:02:26",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/dannvix/keylogger-osx",
+ "star": 152,
+ "commits": 2,
+ "modify_time": "2012-12-18 14:39:43",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/countercept/snake",
+ "star": 152,
+ "commits": 39,
+ "modify_time": "2019-09-27 10:27:02",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/bitnami/bitnami-docker-nginx",
+ "star": 152,
+ "commits": 1673,
+ "modify_time": "2019-12-10 05:10:11",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/angr/patcherex",
+ "star": 152,
+ "commits": 567,
+ "modify_time": "2019-10-29 22:02:31",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/zhangjiupeng/agentx",
+ "star": 151,
+ "commits": 26,
+ "modify_time": "2018-08-24 01:51:41",
+ "last_release": "v1.3.0",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/nsacyber/pass-the-hash-guidance",
+ "star": 151,
+ "commits": 22,
+ "modify_time": "2016-11-25 13:46:47",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/tiiffi/mcrcon",
+ "star": 151,
+ "commits": 98,
+ "modify_time": "2019-11-19 07:47:05",
+ "last_release": "v0.6.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/processhacker/plugins-extra",
+ "star": 151,
+ "commits": 1925,
+ "modify_time": "2019-11-09 19:24:47",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/zbetcheckin/pdf_analysis",
+ "star": 151,
+ "commits": 5,
+ "modify_time": "2017-04-09 15:33:15",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/trailofbits/flying-sandbox-monster",
+ "star": 151,
+ "commits": 18,
+ "modify_time": "2017-08-01 23:36:13",
+ "last_release": "",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/souhardya/zerodoor",
+ "star": 151,
+ "commits": 32,
+ "modify_time": "2018-10-16 21:22:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/saadeghi/browser-hack-sass-mixins",
+ "star": 151,
+ "commits": 22,
+ "modify_time": "2018-01-19 12:25:45",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/retest/recheck-web",
+ "star": 151,
+ "commits": 1409,
+ "modify_time": "2019-12-09 15:31:16",
+ "last_release": "v1.7.0",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/reswitched/cagetheunicorn",
+ "star": 151,
+ "commits": 4,
+ "modify_time": "2017-08-21 16:43:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/psiinon/bodgeit",
+ "star": 151,
+ "commits": 34,
+ "modify_time": "2018-01-08 20:27:03",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/peterferrie/win-exec-calc-shellcode",
+ "star": 151,
+ "commits": 5,
+ "modify_time": "2019-07-01 19:55:34",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/onx/cih",
+ "star": 151,
+ "commits": 5,
+ "modify_time": "2014-06-04 06:27:13",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/m6a-uds/ssrf-lab",
+ "star": 151,
+ "commits": 19,
+ "modify_time": "2017-09-29 03:53:33",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/libimobiledevice/libirecovery",
+ "star": 151,
+ "commits": 248,
+ "modify_time": "2019-12-04 10:15:47",
+ "last_release": "\n 0.1.1\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/leadroyal/fastjson-blacklist",
+ "star": 151,
+ "commits": 19,
+ "modify_time": "2019-10-09 07:19:48",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/l3cr0f/dccwbypassuac",
+ "star": 151,
+ "commits": 73,
+ "modify_time": "2017-10-19 15:32:08",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/kacperszurek/burp_wp",
+ "star": 151,
+ "commits": 12,
+ "modify_time": "2019-07-30 08:27:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/k4m4/dymerge",
+ "star": 151,
+ "commits": 59,
+ "modify_time": "2017-11-29 15:21:06",
+ "last_release": "v0.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jymcheong/autottp",
+ "star": 151,
+ "commits": 212,
+ "modify_time": "2019-11-12 08:03:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/johnnydep/owa-toolkit",
+ "star": 151,
+ "commits": 5,
+ "modify_time": "2016-09-22 17:53:13",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/jiangsir404/php-code-audit",
+ "star": 151,
+ "commits": 30,
+ "modify_time": "2018-12-12 09:44:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jeremymain/gpuprofiler",
+ "star": 151,
+ "commits": 13,
+ "modify_time": "2019-11-13 13:23:40",
+ "last_release": "v1.07a",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/iamblackhacker/facebook-bruteforce",
+ "star": 151,
+ "commits": 34,
+ "modify_time": "2019-10-14 19:39:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hellman/fixenv",
+ "star": 151,
+ "commits": 8,
+ "modify_time": "2015-01-23 08:26:50",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/hasherezade/process_doppelganging",
+ "star": 151,
+ "commits": 20,
+ "modify_time": "2019-09-05 08:37:39",
+ "last_release": "0.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/githacktools/leaked",
+ "star": 151,
+ "commits": 36,
+ "modify_time": "2019-04-11 06:25:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/eun/ctf.tf",
+ "star": 151,
+ "commits": null,
+ "modify_time": "2018-06-29 08:20:07",
+ "last_release": "",
+ "lang": "css"
+ },
+ {
+ "link": "https://github.com/buguroo/cuckooautoinstall",
+ "star": 151,
+ "commits": 164,
+ "modify_time": "2017-02-03 01:57:13",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/alexzzz9/ps4-5.01-webkit-exploit-poc",
+ "star": 151,
+ "commits": 2,
+ "modify_time": "2018-02-27 02:30:46",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/ray-cp/vm-escape",
+ "star": 150,
+ "commits": 24,
+ "modify_time": "2019-11-29 03:16:40",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/tintinweb/ecdsa-private-key-recovery",
+ "star": 150,
+ "commits": 18,
+ "modify_time": "2019-10-28 18:41:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/stuhli/dfirtrack",
+ "star": 150,
+ "commits": 455,
+ "modify_time": "2019-09-06 19:24:47",
+ "last_release": "\n v0.2.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/spiderlabs/jboss-autopwn",
+ "star": 150,
+ "commits": 1,
+ "modify_time": "2011-03-07 23:28:20",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/shawarkhanethicalhacker/d-tect",
+ "star": 150,
+ "commits": null,
+ "modify_time": "2018-07-12 13:07:07",
+ "last_release": "",
+ "lang": "python"
+ },
+ {
+ "link": "https://github.com/sensepost/userenum",
+ "star": 150,
+ "commits": 8,
+ "modify_time": "2018-06-03 19:08:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/scateu/kalibrate-hackrf",
+ "star": 150,
+ "commits": 51,
+ "modify_time": "2016-07-04 03:55:59",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/rogerhu/gdb-heap",
+ "star": 150,
+ "commits": 137,
+ "modify_time": "2019-11-29 16:07:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rep/dionaea",
+ "star": 150,
+ "commits": 903,
+ "modify_time": "2014-06-26 11:48:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/orppra/ropa",
+ "star": 150,
+ "commits": 271,
+ "modify_time": "2018-03-30 14:07:02",
+ "last_release": "1.1.5",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/moyix/pdbparse",
+ "star": 150,
+ "commits": 112,
+ "modify_time": "2019-07-12 16:51:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/matthiaskramm/swftools",
+ "star": 150,
+ "commits": 5101,
+ "modify_time": "2018-11-20 19:36:31",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/malwaretech/trickbot-toolkit",
+ "star": 150,
+ "commits": 5,
+ "modify_time": "2017-11-10 23:51:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kudelskisecurity/cdf",
+ "star": 150,
+ "commits": 14,
+ "modify_time": "2017-08-15 08:13:16",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/hiruna/wifi-txpower-unlocker",
+ "star": 150,
+ "commits": 22,
+ "modify_time": "2018-06-24 06:44:13",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/hiddenillusion/analyzepe",
+ "star": 150,
+ "commits": 4,
+ "modify_time": "2014-01-24 03:17:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gdbinit/lldbinit",
+ "star": 150,
+ "commits": 9,
+ "modify_time": "2019-11-25 15:01:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ga-ryo/idafuzzy",
+ "star": 150,
+ "commits": 29,
+ "modify_time": "2018-04-19 15:53:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fox-it/adconnectdump",
+ "star": 150,
+ "commits": 6,
+ "modify_time": "2019-05-06 10:13:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/enginebai/pymedium",
+ "star": 150,
+ "commits": 52,
+ "modify_time": "2017-05-02 02:47:58",
+ "last_release": "\n v1.0.3\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dragonquesthero/awesome-windows-security-development",
+ "star": 150,
+ "commits": null,
+ "modify_time": "2018-04-06 11:48:32",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/codewhitesec/lethalhta",
+ "star": 150,
+ "commits": 1,
+ "modify_time": "2018-07-06 11:45:05",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/cls1991/ng",
+ "star": 150,
+ "commits": 21,
+ "modify_time": "2018-01-15 02:23:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ax330d/hrdev",
+ "star": 150,
+ "commits": 15,
+ "modify_time": "2018-09-21 14:53:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/alschwalm/foresight",
+ "star": 150,
+ "commits": 57,
+ "modify_time": "2017-05-07 17:52:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/alexdenisov/bitcode_retriever",
+ "star": 150,
+ "commits": 24,
+ "modify_time": "2017-09-26 08:40:00",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/aipengjie/sensitivefilescan",
+ "star": 150,
+ "commits": 34,
+ "modify_time": "2018-04-26 11:32:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ajkhoury/SigMaker-x64",
+ "star": 149,
+ "commits": 35,
+ "modify_time": "2018-11-21 21:25:50",
+ "last_release": "1.0.6",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/znly/strobfus",
+ "star": 149,
+ "commits": 20,
+ "modify_time": "2019-01-09 18:05:38",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/wmkhoo/taintgrind",
+ "star": 149,
+ "commits": 302,
+ "modify_time": "2019-11-11 00:55:49",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/wangshub/hmpa-pi",
+ "star": 149,
+ "commits": 20,
+ "modify_time": "2019-01-25 03:15:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/trietptm/sql-injection-payloads",
+ "star": 149,
+ "commits": 16,
+ "modify_time": "2016-05-24 09:00:25",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/theofficialflow/update365",
+ "star": 149,
+ "commits": 29,
+ "modify_time": "2018-09-17 07:33:45",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/swehner/foos",
+ "star": 149,
+ "commits": 384,
+ "modify_time": "2019-11-24 19:19:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/safebreach-labs/sireprat",
+ "star": 149,
+ "commits": 5,
+ "modify_time": "2019-04-04 20:12:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rwjblue/ember-cli-content-security-policy",
+ "star": 149,
+ "commits": 167,
+ "modify_time": "2019-10-11 17:01:39",
+ "last_release": "v1.1.1",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/neal1991/gshark",
+ "star": 149,
+ "commits": 451,
+ "modify_time": "2019-11-21 14:39:36",
+ "last_release": "\n v0.4\n ",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/nccgroup/idahunt",
+ "star": 149,
+ "commits": 31,
+ "modify_time": "2019-11-11 12:28:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mwielgoszewski/jython-burp-api",
+ "star": 149,
+ "commits": 231,
+ "modify_time": "2016-10-20 13:56:01",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/mattifestation/psreflect",
+ "star": 149,
+ "commits": 20,
+ "modify_time": "2018-10-14 17:24:56",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/kaiserfarrell/malware",
+ "star": 149,
+ "commits": 2,
+ "modify_time": "2013-11-23 14:01:52",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/jovanbulck/sgx-step",
+ "star": 149,
+ "commits": 83,
+ "modify_time": "2019-12-02 17:04:15",
+ "last_release": "\n v1.3.0\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jekyll/github-metadata",
+ "star": 149,
+ "commits": 460,
+ "modify_time": "2019-10-23 14:23:10",
+ "last_release": "v2.12.1",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/hiwincn/htran",
+ "star": 149,
+ "commits": 6,
+ "modify_time": "2015-12-03 05:25:19",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ethereum/evmlab",
+ "star": 149,
+ "commits": 473,
+ "modify_time": "2019-05-07 13:04:03",
+ "last_release": "\n v0.3\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/eth-sri/diffai",
+ "star": 149,
+ "commits": 44,
+ "modify_time": "2019-10-17 08:23:41",
+ "last_release": "v3.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/djadmin/passw0rd",
+ "star": 149,
+ "commits": 17,
+ "modify_time": "2018-04-01 01:40:28",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/dhavalkapil/luaver",
+ "star": 149,
+ "commits": 121,
+ "modify_time": "2017-08-15 20:20:45",
+ "last_release": "v1.1.0",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/devttys0/wps",
+ "star": 149,
+ "commits": 4,
+ "modify_time": "2015-04-04 06:04:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dchad/malware-detection",
+ "star": 149,
+ "commits": 403,
+ "modify_time": "2017-06-05 01:46:56",
+ "last_release": "",
+ "lang": "Jupyter Notebook"
+ },
+ {
+ "link": "https://github.com/chryzsh/awesome-windows-security",
+ "star": 149,
+ "commits": 19,
+ "modify_time": "2018-11-19 14:35:21",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/certsocietegenerale/swordphish-awareness",
+ "star": 149,
+ "commits": 23,
+ "modify_time": "2019-11-21 16:02:53",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/brucetg/app_security",
+ "star": 149,
+ "commits": 6,
+ "modify_time": "2018-09-18 07:41:53",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/arxsys/dff",
+ "star": 149,
+ "commits": 183,
+ "modify_time": "2016-05-19 08:10:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/airbus-seclab/powersap",
+ "star": 149,
+ "commits": 62,
+ "modify_time": "2018-08-13 02:02:20",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/adrianyy/eacreversing",
+ "star": 149,
+ "commits": 7,
+ "modify_time": "2019-04-19 19:25:55",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/649/crashcast-exploit",
+ "star": 149,
+ "commits": 11,
+ "modify_time": "2019-01-12 22:13:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/1998lixin/wechat-database",
+ "star": 149,
+ "commits": 7,
+ "modify_time": "2017-05-11 08:32:50",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/wnagzihxa1n/CTF-Mobile",
+ "star": 148,
+ "commits": 44,
+ "modify_time": "2018-12-14 10:06:41",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/cntools/cnping",
+ "star": 148,
+ "commits": 163,
+ "modify_time": "2019-10-08 23:03:15",
+ "last_release": "\n buildpipeline-test\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/tuhinshubhra/extanalysis",
+ "star": 148,
+ "commits": 47,
+ "modify_time": "2019-12-06 19:01:36",
+ "last_release": "v.1.0.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/trailofbits/protofuzz",
+ "star": 148,
+ "commits": 7,
+ "modify_time": "2019-09-03 16:01:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/trailofbits/onesixtyone",
+ "star": 148,
+ "commits": 45,
+ "modify_time": "2019-03-28 16:37:48",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/thekingofduck/burpfakeip",
+ "star": 148,
+ "commits": 10,
+ "modify_time": "2019-06-05 07:42:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/secdec/adapt",
+ "star": 148,
+ "commits": 23,
+ "modify_time": "2019-09-24 15:42:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/raminfp/linux_exploit_development",
+ "star": 148,
+ "commits": null,
+ "modify_time": "2018-10-20 16:10:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/petermosmans/security-scripts",
+ "star": 148,
+ "commits": 327,
+ "modify_time": "2019-06-06 10:57:04",
+ "last_release": "\n 0.44.0\n ",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/owenliang/php-fpm-code-analysis",
+ "star": 148,
+ "commits": 3,
+ "modify_time": "2018-03-30 07:11:30",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ortegaalfredo/kscope",
+ "star": 148,
+ "commits": 15,
+ "modify_time": "2017-10-18 19:40:57",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/nexxai/cryptoblocker",
+ "star": 148,
+ "commits": 54,
+ "modify_time": "2018-10-10 16:44:38",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/mveytsman/dilettante",
+ "star": 148,
+ "commits": 11,
+ "modify_time": "2014-08-04 05:38:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mpgn/cve-2019-5418",
+ "star": 148,
+ "commits": 5,
+ "modify_time": "2019-03-25 07:19:58",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/microchiptech/cryptoauthlib",
+ "star": 148,
+ "commits": 23,
+ "modify_time": "2019-11-23 00:03:10",
+ "last_release": "20191122",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/mebjas/csrf-protector-php",
+ "star": 148,
+ "commits": 227,
+ "modify_time": "2019-07-21 10:48:31",
+ "last_release": "v1.0.1",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/luxiaok/dnsmasqweb",
+ "star": 148,
+ "commits": 111,
+ "modify_time": "2017-02-23 02:19:56",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/leonjza/awesome-nmap-grep",
+ "star": 148,
+ "commits": 17,
+ "modify_time": "2019-11-17 15:54:47",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ivandokov/phockup",
+ "star": 148,
+ "commits": 175,
+ "modify_time": "2019-12-02 13:26:02",
+ "last_release": "\n 1.5.9\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hugsy/binja-retdec",
+ "star": 148,
+ "commits": 17,
+ "modify_time": "2018-06-26 04:31:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/googleprojectzero/comparecoverage",
+ "star": 148,
+ "commits": 3,
+ "modify_time": "2019-03-14 16:49:32",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/felixwilhelm/mario_baslr",
+ "star": 148,
+ "commits": 5,
+ "modify_time": "2016-09-24 14:04:41",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/f-secure/sulo",
+ "star": 148,
+ "commits": 1,
+ "modify_time": "2014-08-05 15:26:30",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/elfmaster/skeksi_virus",
+ "star": 148,
+ "commits": 54,
+ "modify_time": "2018-03-26 03:56:19",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/dekuan/vwfirewall",
+ "star": 148,
+ "commits": 19,
+ "modify_time": "2019-11-14 11:33:33",
+ "last_release": "1.0.1",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/darkoperator/meterpreter-scripts",
+ "star": 148,
+ "commits": 121,
+ "modify_time": "2019-01-28 21:44:43",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/darkabode/zerokit",
+ "star": 148,
+ "commits": 10,
+ "modify_time": "2019-03-30 05:24:24",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/caesar0301/http-sniffer",
+ "star": 148,
+ "commits": 32,
+ "modify_time": "2018-12-22 02:49:55",
+ "last_release": "\n v0.2\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/bhavsec/reconspider",
+ "star": 148,
+ "commits": 72,
+ "modify_time": "2019-01-30 09:26:13",
+ "last_release": "1.0.5",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/anselal/antminer-monitor",
+ "star": 148,
+ "commits": 167,
+ "modify_time": "2018-10-05 10:21:10",
+ "last_release": "v0.5.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/0xalexei/windowsdefendertools",
+ "star": 148,
+ "commits": 6,
+ "modify_time": "2018-10-25 03:26:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/v2ray/dist",
+ "star": 147,
+ "commits": 1,
+ "modify_time": "2019-02-28 20:11:03",
+ "last_release": "\n v4.18.0\n ",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/izar/pytm",
+ "star": 147,
+ "commits": 155,
+ "modify_time": "2019-12-03 15:47:19",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/zhovner/mfdread",
+ "star": 147,
+ "commits": 50,
+ "modify_time": "2019-02-08 11:17:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/valdikss/openvpn-fix-dns-leak-plugin",
+ "star": 147,
+ "commits": 9,
+ "modify_time": "2016-02-14 09:42:33",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/valardragon/ctf-crypto",
+ "star": 147,
+ "commits": 34,
+ "modify_time": "2018-04-01 04:56:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tandasat/memorymon",
+ "star": 147,
+ "commits": 30,
+ "modify_time": "2018-07-11 03:21:51",
+ "last_release": "0.0.1",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/sysprogs/virtualkd",
+ "star": 147,
+ "commits": 14,
+ "modify_time": "2016-08-10 04:00:43",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/strazzere/android-lkms",
+ "star": 147,
+ "commits": 5,
+ "modify_time": "2014-09-11 22:23:56",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/stfpeak/ctf",
+ "star": 147,
+ "commits": 61,
+ "modify_time": "2018-01-22 11:54:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/shramos/awesome-cybersecurity-datasets",
+ "star": 147,
+ "commits": 11,
+ "modify_time": "2019-06-19 16:44:26",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/risksense-ops/cve-2016-6366",
+ "star": 147,
+ "commits": 158,
+ "modify_time": "2016-11-02 03:11:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/r-a-w/torproxy",
+ "star": 147,
+ "commits": 23,
+ "modify_time": "2018-01-11 03:58:36",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/mpgn/padding-oracle-attack",
+ "star": 147,
+ "commits": 13,
+ "modify_time": "2017-05-31 09:00:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/milo2012/portia",
+ "star": 147,
+ "commits": 17,
+ "modify_time": "2017-10-11 11:39:37",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/mandiant/ioc_writer",
+ "star": 147,
+ "commits": 123,
+ "modify_time": "2017-12-11 17:13:12",
+ "last_release": "\n v0.3.3\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/madmantm/ubuntu-pentest-tools",
+ "star": 147,
+ "commits": 233,
+ "modify_time": "2018-04-22 16:28:54",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/justasmasiulis/nt_wrapper",
+ "star": 147,
+ "commits": 42,
+ "modify_time": "2018-10-09 15:02:09",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/hardenedlinux/debian-gnu-linux-profiles",
+ "star": 147,
+ "commits": 503,
+ "modify_time": "2019-12-09 06:25:48",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/gabemarshall/microctfs",
+ "star": 147,
+ "commits": 27,
+ "modify_time": "2018-07-26 18:19:33",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/frint0/mass-pwn-vbulletin",
+ "star": 147,
+ "commits": 25,
+ "modify_time": "2019-09-29 22:39:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/endgameinc/py2exedecompiler",
+ "star": 147,
+ "commits": 6,
+ "modify_time": "2017-04-25 21:55:30",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/emsec/hal",
+ "star": 147,
+ "commits": 355,
+ "modify_time": "2019-11-23 21:00:10",
+ "last_release": "v1.1.8",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/drizzlerisk/bunpacker",
+ "star": 147,
+ "commits": 7,
+ "modify_time": "2017-04-12 09:59:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dev-sec/ansible-nginx-hardening",
+ "star": 147,
+ "commits": 53,
+ "modify_time": "2019-10-10 19:14:30",
+ "last_release": "2.1.0",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/cyrus-and/zizzania",
+ "star": 147,
+ "commits": 145,
+ "modify_time": "2019-11-08 17:43:33",
+ "last_release": "\n v0.2.0\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cyberark/zbang",
+ "star": 147,
+ "commits": 96,
+ "modify_time": "2019-10-02 09:11:27",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/cobbr/sharpgen",
+ "star": 147,
+ "commits": 3,
+ "modify_time": "2019-01-21 01:49:30",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/checkpointsw/invizzzible",
+ "star": 147,
+ "commits": 81,
+ "modify_time": "2019-06-20 14:42:54",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/bugcrowd/vulnerability-rating-taxonomy",
+ "star": 147,
+ "commits": 124,
+ "modify_time": "2019-11-19 18:45:57",
+ "last_release": "v1.8",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/biosbits/bits",
+ "star": 147,
+ "commits": 79,
+ "modify_time": "2016-09-20 05:21:49",
+ "last_release": "\n bits-2079\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/aturl/awesome-anti-gfw",
+ "star": 147,
+ "commits": 67,
+ "modify_time": "2019-01-24 14:41:36",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/0x00pf/0x00sec_code",
+ "star": 147,
+ "commits": 15,
+ "modify_time": "2019-05-13 18:29:50",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/immunityinc/libptrace",
+ "star": 146,
+ "commits": 4,
+ "modify_time": "2019-12-04 09:23:03",
+ "last_release": "1.0-rc2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hmaverickadams/tcm-security-sample-pentest-report",
+ "star": 146,
+ "commits": 5,
+ "modify_time": "2019-09-24 18:17:11",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/darthton/polychaos",
+ "star": 146,
+ "commits": 9,
+ "modify_time": "2019-07-21 21:56:54",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/dunglas/dunglasangularcsrfbundle",
+ "star": 146,
+ "commits": 66,
+ "modify_time": "2019-11-19 22:56:53",
+ "last_release": "v1.2.0",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/Mr-Un1k0d3r/MaliciousClickOnceGenerator",
+ "star": 146,
+ "commits": 52,
+ "modify_time": "2019-07-17 18:51:34",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/vduddu/malware",
+ "star": 146,
+ "commits": 25,
+ "modify_time": "2017-10-20 16:46:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/undeadsec/enigma",
+ "star": 146,
+ "commits": 15,
+ "modify_time": "2018-02-22 23:48:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tihmstar/jelbrektime",
+ "star": 146,
+ "commits": 9,
+ "modify_time": "2018-09-27 07:51:00",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/seattlerb/ruby2ruby",
+ "star": 146,
+ "commits": 202,
+ "modify_time": "2019-09-25 02:59:42",
+ "last_release": "\n v2.4.4\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/saelo/cve-2018-4233",
+ "star": 146,
+ "commits": 2,
+ "modify_time": "2018-08-17 23:31:12",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/ritiek/scribd-downloader",
+ "star": 146,
+ "commits": null,
+ "modify_time": "2019-01-16 15:01:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pwnwiki/kaliwiki",
+ "star": 146,
+ "commits": 642,
+ "modify_time": "2015-02-24 06:06:00",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/olafhartong/sysmon-cheatsheet",
+ "star": 146,
+ "commits": 3,
+ "modify_time": "2019-06-26 18:03:09",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/netsoss/headless-burp",
+ "star": 146,
+ "commits": 49,
+ "modify_time": "2019-08-20 09:05:51",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/nccgroup/triforcelinuxsyscallfuzzer",
+ "star": 146,
+ "commits": 46,
+ "modify_time": "2017-01-05 15:38:30",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/misterch0c/what_is_this_c2",
+ "star": 146,
+ "commits": 84,
+ "modify_time": "2019-12-06 02:10:52",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/mhelwig/apk-anal",
+ "star": 146,
+ "commits": 23,
+ "modify_time": "2017-11-20 08:08:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mate-desktop/caja",
+ "star": 146,
+ "commits": 1502,
+ "modify_time": "2019-11-30 22:51:36",
+ "last_release": "v1.22.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/magisterquis/sshhipot",
+ "star": 146,
+ "commits": 90,
+ "modify_time": "2018-05-13 17:08:54",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/lanchon/haystack",
+ "star": 146,
+ "commits": 66,
+ "modify_time": "2019-03-10 17:34:34",
+ "last_release": "2019-03-08",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/l4bf0x/phishingpretexts",
+ "star": 146,
+ "commits": 33,
+ "modify_time": "2019-08-09 14:46:58",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/kevlar1818/is_my_password_pwned",
+ "star": 146,
+ "commits": 12,
+ "modify_time": "2019-01-24 02:56:41",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/jekil/hardentheworld",
+ "star": 146,
+ "commits": 108,
+ "modify_time": "2018-07-01 21:13:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/henshin/filebuster",
+ "star": 146,
+ "commits": 66,
+ "modify_time": "2019-11-18 00:17:47",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/guardianproject/orfox",
+ "star": 146,
+ "commits": 11,
+ "modify_time": "2019-09-06 07:39:35",
+ "last_release": "Orfox-Final-RIP-v16",
+ "lang": "PostScript"
+ },
+ {
+ "link": "https://github.com/gentilkiwi/wanadecrypt",
+ "star": 146,
+ "commits": 4,
+ "modify_time": "2017-05-17 17:30:23",
+ "last_release": "0.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/futuresharks/rpi-security",
+ "star": 146,
+ "commits": 69,
+ "modify_time": "2019-11-14 14:46:33",
+ "last_release": "1.4",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fireeye/pywintrace",
+ "star": 146,
+ "commits": 62,
+ "modify_time": "2019-08-01 14:06:14",
+ "last_release": "v0.2.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fgont/ipv6toolkit",
+ "star": 146,
+ "commits": 710,
+ "modify_time": "2019-09-19 02:19:44",
+ "last_release": "\n v1.5.2\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/entynetproject/ehtools",
+ "star": 146,
+ "commits": 2037,
+ "modify_time": "2019-12-09 17:19:29",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/dev-sec/ssh-baseline",
+ "star": 146,
+ "commits": 254,
+ "modify_time": "2019-10-29 15:05:47",
+ "last_release": "\n 2.4.1\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/decoxviii/karma",
+ "star": 146,
+ "commits": 26,
+ "modify_time": "2019-10-08 18:33:28",
+ "last_release": "1.2.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/davidm/lua-inspect",
+ "star": 146,
+ "commits": 285,
+ "modify_time": "2016-04-22 04:24:26",
+ "last_release": "",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/chrispetrou/hrshell",
+ "star": 146,
+ "commits": 85,
+ "modify_time": "2019-10-31 14:59:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/blankwall/python_pin",
+ "star": 146,
+ "commits": 21,
+ "modify_time": "2015-02-23 17:59:34",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/bash-c/pwn_repo",
+ "star": 146,
+ "commits": 664,
+ "modify_time": "2019-11-23 15:02:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/appsecco/vulnerable-apps",
+ "star": 146,
+ "commits": 17,
+ "modify_time": "2017-09-23 01:04:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/andresriancho/race-condition-exploit",
+ "star": 146,
+ "commits": 17,
+ "modify_time": "2018-07-03 12:57:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/alschwalm/dwarfexport",
+ "star": 146,
+ "commits": 70,
+ "modify_time": "2019-10-25 02:47:27",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/reb311ion/rebel-framework",
+ "star": 145,
+ "commits": 182,
+ "modify_time": "2019-08-20 04:39:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sciencemanx/dress",
+ "star": 145,
+ "commits": 23,
+ "modify_time": "2017-05-17 01:10:05",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/yepher/razberry",
+ "star": 145,
+ "commits": 38,
+ "modify_time": "2017-09-06 14:28:43",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/wenzel/pyvmidbg",
+ "star": 145,
+ "commits": 211,
+ "modify_time": "2019-11-21 19:06:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/webshellpub/awsome-webshell",
+ "star": 145,
+ "commits": 2,
+ "modify_time": "2017-03-22 15:19:21",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/ursachec/cpaproxy",
+ "star": 145,
+ "commits": 185,
+ "modify_time": "2019-07-14 07:04:58",
+ "last_release": "\n v0.1.1\n ",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/rubyfu/rubyfu",
+ "star": 145,
+ "commits": 3214,
+ "modify_time": "2019-09-20 13:36:54",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/ripe-atlas-community/ripe-atlas-community-contrib",
+ "star": 145,
+ "commits": 303,
+ "modify_time": "2019-10-17 10:26:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/remnux/docker",
+ "star": 145,
+ "commits": 175,
+ "modify_time": "2019-02-06 19:02:36",
+ "last_release": "",
+ "lang": "Dockerfile"
+ },
+ {
+ "link": "https://github.com/pustladi/windows-2000",
+ "star": 145,
+ "commits": 7,
+ "modify_time": "2017-03-08 14:49:09",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/psychotea/meridianjb",
+ "star": 145,
+ "commits": 589,
+ "modify_time": "2018-09-27 19:31:41",
+ "last_release": "v0.9-007",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/projectatomic/container-storage-setup",
+ "star": 145,
+ "commits": 352,
+ "modify_time": "2018-06-26 17:47:39",
+ "last_release": "v0.6.0",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/nowsecure/owasp-password-strength-test",
+ "star": 145,
+ "commits": 30,
+ "modify_time": "2015-10-07 13:33:52",
+ "last_release": "\n 1.3.0\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/mlsecproject/tiq-test",
+ "star": 145,
+ "commits": 85,
+ "modify_time": "2015-10-19 03:32:25",
+ "last_release": "v0.2.0",
+ "lang": "R"
+ },
+ {
+ "link": "https://github.com/mike-works/web-security-fundamentals",
+ "star": 145,
+ "commits": 433,
+ "modify_time": "2019-12-05 03:56:10",
+ "last_release": "v1.0.124",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/mihaifm/hibpofflinecheck",
+ "star": 145,
+ "commits": 47,
+ "modify_time": "2019-11-05 17:43:20",
+ "last_release": "1.7.1",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/marty90/pychromedevtools",
+ "star": 145,
+ "commits": 24,
+ "modify_time": "2018-07-09 09:06:19",
+ "last_release": "\n 1.0.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/macr0phag3/githubmonitor",
+ "star": 145,
+ "commits": 78,
+ "modify_time": "2019-06-26 07:35:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lcatro/network_backdoor_scanner",
+ "star": 145,
+ "commits": 30,
+ "modify_time": "2015-08-29 07:34:39",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/kacperszurek/exploits",
+ "star": 145,
+ "commits": 18,
+ "modify_time": "2019-03-19 20:10:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/igromanru/dark-souls-iii-cheat-engine-guide",
+ "star": 145,
+ "commits": 360,
+ "modify_time": "2019-07-14 09:40:04",
+ "last_release": "1.2.2",
+ "lang": "AutoIt"
+ },
+ {
+ "link": "https://github.com/elcodigok/wphardening",
+ "star": 145,
+ "commits": 396,
+ "modify_time": "2017-04-27 04:42:01",
+ "last_release": "v1.6",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/echowei/deeptraffic",
+ "star": 145,
+ "commits": 9,
+ "modify_time": "2019-07-28 05:25:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cybermaggedon/cyberprobe",
+ "star": 145,
+ "commits": 1146,
+ "modify_time": "2019-11-16 23:16:03",
+ "last_release": "v2.3.14",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/conradirwin/dotgpg",
+ "star": 145,
+ "commits": 48,
+ "modify_time": "2018-04-04 15:53:55",
+ "last_release": "\n v0.6.1\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/brimstone/go-shellcode",
+ "star": 145,
+ "commits": 6,
+ "modify_time": "2018-10-03 01:49:18",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/airbuscyber/grap",
+ "star": 145,
+ "commits": 633,
+ "modify_time": "2019-01-25 09:22:36",
+ "last_release": "v1.2.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ring04h/thorns",
+ "star": 144,
+ "commits": 17,
+ "modify_time": "2015-02-06 09:18:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/project-imas/security-check",
+ "star": 144,
+ "commits": 37,
+ "modify_time": "2017-01-05 20:17:08",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/yahooarchive/rtrace",
+ "star": 144,
+ "commits": 12,
+ "modify_time": "2016-07-07 00:49:16",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/etsy/bughunt-ios",
+ "star": 144,
+ "commits": 10,
+ "modify_time": "2015-09-18 01:52:03",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/viralmaniar/remote-desktop-caching-",
+ "star": 144,
+ "commits": 17,
+ "modify_time": "2018-08-04 11:35:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ud2/advisories",
+ "star": 144,
+ "commits": 30,
+ "modify_time": "2016-05-30 14:34:08",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/shack2/javaserializetools",
+ "star": 144,
+ "commits": 9,
+ "modify_time": "2019-08-28 12:01:20",
+ "last_release": "1.0.20190828",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/securecodebox/securecodebox",
+ "star": 144,
+ "commits": 315,
+ "modify_time": "2019-11-22 09:24:17",
+ "last_release": "v1.1.0",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/rverton/webanalyze",
+ "star": 144,
+ "commits": 61,
+ "modify_time": "2019-12-02 13:48:32",
+ "last_release": "v0.2",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/rsmudge/metasploit-loader",
+ "star": 144,
+ "commits": 4,
+ "modify_time": "2013-02-04 20:15:53",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/pentestgeek/phishing-frenzy-templates",
+ "star": 144,
+ "commits": 24,
+ "modify_time": "2014-12-16 22:43:46",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/offensive-security/hid-backdoor-peensy",
+ "star": 144,
+ "commits": 3,
+ "modify_time": "2012-09-17 17:30:33",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/nccgroup/umap2",
+ "star": 144,
+ "commits": 182,
+ "modify_time": "2019-08-19 07:56:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nccgroup/fuzzowski",
+ "star": 144,
+ "commits": 5,
+ "modify_time": "2019-08-15 23:13:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nashcontrol/bounty-monitor",
+ "star": 144,
+ "commits": 26,
+ "modify_time": "2019-06-25 14:37:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/n0pe-sled/postfix-server-setup",
+ "star": 144,
+ "commits": 14,
+ "modify_time": "2017-09-29 14:54:59",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/mdsecactivebreach/powerdns",
+ "star": 144,
+ "commits": 9,
+ "modify_time": "2017-10-13 19:13:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/landley/aboriginal",
+ "star": 144,
+ "commits": 1847,
+ "modify_time": "2017-04-30 22:43:16",
+ "last_release": "\n 1.4.5\n ",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/kantega/notsoserial",
+ "star": 144,
+ "commits": 70,
+ "modify_time": "2016-01-18 15:35:10",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/geosn0w/osiris-jailbreak",
+ "star": 144,
+ "commits": 48,
+ "modify_time": "2018-08-27 18:59:32",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/fdiskyou/threat-intel",
+ "star": 144,
+ "commits": 136,
+ "modify_time": "2019-12-09 08:24:34",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/depoon/iosdylibinjectiondemo",
+ "star": 144,
+ "commits": 19,
+ "modify_time": "2018-05-29 16:08:13",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/davidpany/wmi_forensics",
+ "star": 144,
+ "commits": 11,
+ "modify_time": "2017-08-31 16:34:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/danwin/hosting",
+ "star": 144,
+ "commits": 254,
+ "modify_time": "2019-11-28 12:33:26",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/chan9390/awesome-mitm",
+ "star": 144,
+ "commits": 13,
+ "modify_time": "2017-10-01 11:13:44",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/andresriancho/enumerate-iam",
+ "star": 144,
+ "commits": 14,
+ "modify_time": "2019-11-27 13:24:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/daeken/httprebind",
+ "star": 143,
+ "commits": 3,
+ "modify_time": "2019-08-27 22:56:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sclorg/s2i-python-container",
+ "star": 143,
+ "commits": 400,
+ "modify_time": "2019-11-12 08:03:07",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/security-cheatsheet/reverse-shell-cheatsheet",
+ "star": 143,
+ "commits": 11,
+ "modify_time": "2019-11-30 12:35:19",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/checkymander/iMessagesBackdoor",
+ "star": 143,
+ "commits": 10,
+ "modify_time": "2018-06-13 22:28:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zombiecraig/udsim",
+ "star": 143,
+ "commits": 25,
+ "modify_time": "2019-05-14 16:23:36",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/vinayakumarr/network-intrusion-detection",
+ "star": 143,
+ "commits": 14,
+ "modify_time": "2019-05-08 05:22:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/theori-io/zer0con2018_bpak",
+ "star": 143,
+ "commits": 2,
+ "modify_time": "2018-04-01 02:16:52",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/sensepost/jack",
+ "star": 143,
+ "commits": 31,
+ "modify_time": "2016-09-23 09:39:43",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/secmob/badkernel",
+ "star": 143,
+ "commits": 4,
+ "modify_time": "2016-11-28 09:55:46",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/salls/kernel-exploits",
+ "star": 143,
+ "commits": 3,
+ "modify_time": "2017-11-07 17:22:14",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/rodionovd/liblorgnette",
+ "star": 143,
+ "commits": 40,
+ "modify_time": "2017-10-04 08:08:34",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ricardojrdez/anti-analysis-tricks",
+ "star": 143,
+ "commits": 2,
+ "modify_time": "2016-07-04 07:13:00",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/raspberrypi/piserver",
+ "star": 143,
+ "commits": 74,
+ "modify_time": "2019-10-14 13:34:08",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/quentinhardy/jndiat",
+ "star": 143,
+ "commits": 8,
+ "modify_time": "2019-07-15 16:11:48",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/nuid/nebulousad",
+ "star": 143,
+ "commits": 32,
+ "modify_time": "2019-09-12 21:34:59",
+ "last_release": "1.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ntpsec/ntpsec",
+ "star": 143,
+ "commits": 15649,
+ "modify_time": "2019-12-10 03:50:09",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/misterch0c/apt34",
+ "star": 143,
+ "commits": 1,
+ "modify_time": "2019-04-17 11:49:24",
+ "last_release": "",
+ "lang": "ASP"
+ },
+ {
+ "link": "https://github.com/libyal/libpff",
+ "star": 143,
+ "commits": 145,
+ "modify_time": "2019-12-04 05:44:10",
+ "last_release": "20180714",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/grimm-co/killerbeez",
+ "star": 143,
+ "commits": 814,
+ "modify_time": "2019-10-25 00:44:57",
+ "last_release": "2018.12.11",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/essandess/macos-openvpn-server",
+ "star": 143,
+ "commits": 55,
+ "modify_time": "2019-02-20 04:48:31",
+ "last_release": "v1.3",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/dvopsway/datasploit",
+ "star": 143,
+ "commits": 368,
+ "modify_time": "2019-04-26 09:47:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/codexgigassys/codex-backend",
+ "star": 143,
+ "commits": 249,
+ "modify_time": "2017-03-06 22:46:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/brycx/orion",
+ "star": 143,
+ "commits": 1298,
+ "modify_time": "2019-12-03 23:28:28",
+ "last_release": "0.14.4",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/blackye/lalascan",
+ "star": 143,
+ "commits": 34,
+ "modify_time": "2016-10-12 01:44:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bin2415/fuzzing_paper",
+ "star": 143,
+ "commits": 62,
+ "modify_time": "2019-11-11 00:56:59",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ben174/hsts-cookie",
+ "star": 143,
+ "commits": 15,
+ "modify_time": "2016-01-12 19:00:24",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/adi90x/rancher-active-proxy",
+ "star": 143,
+ "commits": 658,
+ "modify_time": "2018-09-08 17:55:15",
+ "last_release": "\n v0.9.3\n ",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/aatlasis/chiron",
+ "star": 143,
+ "commits": 48,
+ "modify_time": "2018-08-03 10:05:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/virustotal/qt-virustotal-uploader",
+ "star": 142,
+ "commits": 66,
+ "modify_time": "2019-01-15 13:41:12",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/urinx/browspy",
+ "star": 142,
+ "commits": 9,
+ "modify_time": "2015-10-27 04:55:13",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/mubix/osx-wificleaner",
+ "star": 142,
+ "commits": 11,
+ "modify_time": "2019-11-05 04:15:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/valdikss/p0f-mtu",
+ "star": 142,
+ "commits": 12,
+ "modify_time": "2016-04-23 06:52:09",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/usableprivacy/upribox",
+ "star": 142,
+ "commits": 588,
+ "modify_time": "2019-10-11 07:13:54",
+ "last_release": "v2.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/target/portauthority",
+ "star": 142,
+ "commits": 41,
+ "modify_time": "2018-10-18 18:04:32",
+ "last_release": "0.5.2",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/sw4mpf0x/powerlurk",
+ "star": 142,
+ "commits": 13,
+ "modify_time": "2016-07-25 22:19:18",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/secarmalabs/psychopath",
+ "star": 142,
+ "commits": 132,
+ "modify_time": "2017-05-25 13:39:09",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/safebreach-labs/pacdoor",
+ "star": 142,
+ "commits": 4,
+ "modify_time": "2016-08-05 01:13:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ridter/rtf_11882_0802",
+ "star": 142,
+ "commits": 2,
+ "modify_time": "2018-01-12 11:42:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rani-i/mi365locker",
+ "star": 142,
+ "commits": 7,
+ "modify_time": "2019-02-18 14:42:50",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/packtpublishing/mastering-machine-learning-for-penetration-testing",
+ "star": 142,
+ "commits": 94,
+ "modify_time": "2018-08-05 12:49:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nickstadb/deserlab",
+ "star": 142,
+ "commits": 7,
+ "modify_time": "2017-08-18 21:05:19",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/nccgroup/chuckle",
+ "star": 142,
+ "commits": 24,
+ "modify_time": "2016-10-11 01:04:09",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/michenriksen/searchpass",
+ "star": 142,
+ "commits": 4,
+ "modify_time": "2017-10-01 08:59:28",
+ "last_release": "\n v1.1.0\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/mdsecresearch/publications",
+ "star": 142,
+ "commits": 22,
+ "modify_time": "2017-02-13 14:59:15",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/mak-/mak_it-linux-rootkit",
+ "star": 142,
+ "commits": 8,
+ "modify_time": "2019-10-22 16:24:02",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/laurent22/so-sql-injections",
+ "star": 142,
+ "commits": 19,
+ "modify_time": "2017-03-25 16:16:34",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/justinazoff/bro-pdns",
+ "star": 142,
+ "commits": 119,
+ "modify_time": "2019-01-03 17:52:45",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/julieeen/kleefl",
+ "star": 142,
+ "commits": 64,
+ "modify_time": "2017-10-20 12:48:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jaredcatkinson/psreflect-functions",
+ "star": 142,
+ "commits": 130,
+ "modify_time": "2019-10-29 16:08:19",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/drego85/ddos-php-script",
+ "star": 142,
+ "commits": 82,
+ "modify_time": "2018-05-08 12:57:17",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/dots-tb/lolicon",
+ "star": 142,
+ "commits": 12,
+ "modify_time": "2018-08-29 01:50:58",
+ "last_release": "1.0.1.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/dlcowen/fseventsparser",
+ "star": 142,
+ "commits": 27,
+ "modify_time": "2019-03-04 00:13:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/covertcodes/freqwatch",
+ "star": 142,
+ "commits": 19,
+ "modify_time": "2019-09-13 14:05:46",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/coldzer0/cmulator",
+ "star": 142,
+ "commits": 10,
+ "modify_time": "2019-09-20 03:57:36",
+ "last_release": "v0.2.1",
+ "lang": "Pascal"
+ },
+ {
+ "link": "https://github.com/codingo/minesweeper",
+ "star": 142,
+ "commits": 103,
+ "modify_time": "2019-07-08 07:35:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/clearlinux/cve-check-tool",
+ "star": 142,
+ "commits": 300,
+ "modify_time": "2017-04-21 15:45:40",
+ "last_release": "v5.6.4",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/bloodhoundad/bloodhound-tools",
+ "star": 142,
+ "commits": 30,
+ "modify_time": "2019-04-03 17:16:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bitzesty/devise_zxcvbn",
+ "star": 142,
+ "commits": 84,
+ "modify_time": "2019-11-15 17:28:37",
+ "last_release": "1.1.0",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/balidani/tinyctf-platform",
+ "star": 142,
+ "commits": 14,
+ "modify_time": "2017-10-23 22:13:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/argp/iboot64helper",
+ "star": 142,
+ "commits": 33,
+ "modify_time": "2019-12-02 12:59:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/volatilityfoundation/volatility3",
+ "star": 141,
+ "commits": 2040,
+ "modify_time": "2019-12-04 23:37:06",
+ "last_release": "v1.0.0-beta.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kejane/SecurityRSS",
+ "star": 141,
+ "commits": 12,
+ "modify_time": "2016-12-12 03:15:36",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/veerupandey/penetration-testing-toolkit",
+ "star": 141,
+ "commits": 31,
+ "modify_time": "2015-05-21 12:06:31",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/tyranid/windows-logical-eop-workshop",
+ "star": 141,
+ "commits": 3,
+ "modify_time": "2017-09-05 15:00:09",
+ "last_release": "44CON-2017",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/trailofbits/osquery-extensions",
+ "star": 141,
+ "commits": 83,
+ "modify_time": "2019-03-06 23:12:40",
+ "last_release": "1.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/thispc/psiphon",
+ "star": 141,
+ "commits": 39,
+ "modify_time": "2017-03-17 23:54:15",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/t4d/phishingkithunter",
+ "star": 141,
+ "commits": 20,
+ "modify_time": "2019-01-21 22:17:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/superblaubeere27/obfuscator",
+ "star": 141,
+ "commits": 150,
+ "modify_time": "2019-11-09 14:57:30",
+ "last_release": "v1.9.3",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/snare/binjatron",
+ "star": 141,
+ "commits": 40,
+ "modify_time": "2017-07-17 17:29:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/skx/simple-vpn",
+ "star": 141,
+ "commits": 61,
+ "modify_time": "2019-08-25 05:56:51",
+ "last_release": "release-0.4",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/secureworks/flowsynth",
+ "star": 141,
+ "commits": 24,
+ "modify_time": "2018-06-08 00:18:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sarah314/spypi",
+ "star": 141,
+ "commits": 39,
+ "modify_time": "2017-10-14 14:30:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/retme7/cve-2014-7911_poc",
+ "star": 141,
+ "commits": 13,
+ "modify_time": "2015-01-27 09:43:40",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/openzipkin/zipkin-php",
+ "star": 141,
+ "commits": 209,
+ "modify_time": "2019-11-16 22:01:57",
+ "last_release": "1.3.4",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/objective-see/reikey",
+ "star": 141,
+ "commits": 32,
+ "modify_time": "2019-04-07 19:18:37",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/oatpp/oatpp-examples",
+ "star": 141,
+ "commits": 115,
+ "modify_time": "2019-06-25 00:51:25",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/nviso-be/binsnitch",
+ "star": 141,
+ "commits": 17,
+ "modify_time": "2018-01-03 14:21:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nccgroup/binproxy",
+ "star": 141,
+ "commits": 8,
+ "modify_time": "2018-05-25 01:07:12",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/mbahadou/postenum",
+ "star": 141,
+ "commits": 88,
+ "modify_time": "2019-08-03 15:59:23",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/landgrey/upload-labs-writeup",
+ "star": 141,
+ "commits": 6,
+ "modify_time": "2018-06-20 18:03:52",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/kgretzky/python-x86-obfuscator",
+ "star": 141,
+ "commits": 10,
+ "modify_time": "2016-06-17 08:41:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/karmenzind/fp-server",
+ "star": 141,
+ "commits": 54,
+ "modify_time": "2019-08-26 06:27:42",
+ "last_release": "\n 1.0.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/joshjdevl/libsodium-jni",
+ "star": 141,
+ "commits": 794,
+ "modify_time": "2019-11-03 20:44:45",
+ "last_release": "v2.0.2",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/jongates/jon",
+ "star": 141,
+ "commits": 2,
+ "modify_time": "2016-10-12 07:08:41",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/integrity-sa/burpcollaborator-docker",
+ "star": 141,
+ "commits": 8,
+ "modify_time": "2019-06-21 21:36:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/incredibleindishell/cors-vulnerable-lab",
+ "star": 141,
+ "commits": 18,
+ "modify_time": "2019-09-03 20:26:41",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/honorarybot/pulsedbg",
+ "star": 141,
+ "commits": 25,
+ "modify_time": "2018-04-04 21:55:04",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/hjc4869/uacbypass",
+ "star": 141,
+ "commits": 9,
+ "modify_time": "2018-05-29 07:34:03",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/gumblex/ptproxy",
+ "star": 141,
+ "commits": 34,
+ "modify_time": "2018-01-19 15:32:37",
+ "last_release": "\n v1.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/furqansoftware/node-whois",
+ "star": 141,
+ "commits": 269,
+ "modify_time": "2019-09-15 15:01:04",
+ "last_release": "",
+ "lang": "CoffeeScript"
+ },
+ {
+ "link": "https://github.com/coolervoid/hiddenwall",
+ "star": 141,
+ "commits": 37,
+ "modify_time": "2019-05-24 23:25:47",
+ "last_release": "HiddenWall03",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/bruce30262/twindbg",
+ "star": 141,
+ "commits": 30,
+ "modify_time": "2018-10-05 14:23:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/brain-research/tensorfuzz",
+ "star": 141,
+ "commits": 2,
+ "modify_time": "2018-09-06 01:58:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/blueudp/deep-explorer",
+ "star": 141,
+ "commits": 43,
+ "modify_time": "2019-11-26 08:37:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/blackye/jenkins",
+ "star": 141,
+ "commits": 12,
+ "modify_time": "2015-12-28 10:46:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/uknowsec/sharptoolsaggressor",
+ "star": 140,
+ "commits": 20,
+ "modify_time": "2019-11-11 04:14:39",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/dfirkuiper/kuiper",
+ "star": 140,
+ "commits": 118,
+ "modify_time": "2019-11-28 12:56:16",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/We5ter/GSDF",
+ "star": 140,
+ "commits": 145,
+ "modify_time": "2018-02-01 08:57:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cloudfoundry-incubator/docker-boshrelease",
+ "star": 140,
+ "commits": 626,
+ "modify_time": "2019-11-06 23:44:42",
+ "last_release": "v35.3.4",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/tomsteele/burpbuddy",
+ "star": 140,
+ "commits": 170,
+ "modify_time": "2018-11-29 22:00:11",
+ "last_release": "v3.1.0",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/zhengmin1989/os-x-10.11.6-exp-via-pegasus",
+ "star": 140,
+ "commits": 16,
+ "modify_time": "2016-09-27 03:02:37",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/wmliang/pe-afl",
+ "star": 140,
+ "commits": 14,
+ "modify_time": "2019-11-14 18:44:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vvalien/sharpmeter",
+ "star": 140,
+ "commits": 21,
+ "modify_time": "2016-12-08 01:30:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/talos-vulndev/afl-dyninst",
+ "star": 140,
+ "commits": 24,
+ "modify_time": "2018-03-19 11:38:20",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/systematicat/hack-captive-portals",
+ "star": 140,
+ "commits": 13,
+ "modify_time": "2017-07-09 17:28:47",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/sumanj/frankencert",
+ "star": 140,
+ "commits": 37,
+ "modify_time": "2017-12-23 19:17:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/shengqi158/pyvulhunter",
+ "star": 140,
+ "commits": 49,
+ "modify_time": "2016-02-25 08:41:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/scrapinghub/python-scrapinghub",
+ "star": 140,
+ "commits": 751,
+ "modify_time": "2019-10-23 14:01:06",
+ "last_release": "2.1.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/s7ephen/osx-sandbox--seatbelt--profiles",
+ "star": 140,
+ "commits": 13,
+ "modify_time": "2015-03-08 18:01:10",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/ridter/cve-2019-1040",
+ "star": 140,
+ "commits": 5,
+ "modify_time": "2019-07-12 04:30:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pybind/python_example",
+ "star": 140,
+ "commits": 38,
+ "modify_time": "2019-09-20 10:55:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/payloadsecurity/vxapi",
+ "star": 140,
+ "commits": 133,
+ "modify_time": "2019-02-26 20:55:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nullarray/cypher",
+ "star": 140,
+ "commits": 97,
+ "modify_time": "2017-10-03 11:53:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nihilus/hexrays_tools",
+ "star": 140,
+ "commits": 11,
+ "modify_time": "2016-01-26 01:22:25",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/microsoft/windowsprotocoltestsuites",
+ "star": 140,
+ "commits": 2323,
+ "modify_time": "2019-12-09 15:39:55",
+ "last_release": "3.19.9.0",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/med0x2e/gadgettojscript",
+ "star": 140,
+ "commits": 14,
+ "modify_time": "2019-10-25 07:29:00",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/lorenzoongithub/nudge4j",
+ "star": 140,
+ "commits": 195,
+ "modify_time": "2018-06-09 17:49:23",
+ "last_release": "0.5.0",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/laxa/hackingtools",
+ "star": 140,
+ "commits": 117,
+ "modify_time": "2018-08-23 08:25:58",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/koto/mosquito",
+ "star": 140,
+ "commits": 39,
+ "modify_time": "2014-03-19 23:20:23",
+ "last_release": "",
+ "lang": "Tcl"
+ },
+ {
+ "link": "https://github.com/johnath/beep",
+ "star": 140,
+ "commits": 15,
+ "modify_time": "2013-02-07 12:04:42",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ixty/mandibule",
+ "star": 140,
+ "commits": 7,
+ "modify_time": "2018-05-31 13:38:26",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hexgolems/schem",
+ "star": 140,
+ "commits": 42,
+ "modify_time": "2015-11-11 17:00:14",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/guanchao/androidchecklist",
+ "star": 140,
+ "commits": 7,
+ "modify_time": "2018-01-28 13:04:04",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/dzzie/pdfstreamdumper",
+ "star": 140,
+ "commits": 94,
+ "modify_time": "2019-05-30 12:23:09",
+ "last_release": "",
+ "lang": "Visual Basic .NET"
+ },
+ {
+ "link": "https://github.com/dzonerzy/acunetix_0day",
+ "star": 140,
+ "commits": 3,
+ "modify_time": "2016-05-02 13:38:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dismantl/improvedreflectivedllinjection",
+ "star": 140,
+ "commits": 9,
+ "modify_time": "2016-06-28 15:54:48",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/dfir-orc/dfir-orc",
+ "star": 140,
+ "commits": 138,
+ "modify_time": "2019-10-23 14:55:27",
+ "last_release": "\n v10.0.2\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/codypierce/hackers-grep",
+ "star": 140,
+ "commits": 8,
+ "modify_time": "2018-07-07 22:10:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cn33liz/cscriptshell",
+ "star": 140,
+ "commits": 8,
+ "modify_time": "2017-04-11 14:46:30",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/bugku/bwvs",
+ "star": 140,
+ "commits": 8,
+ "modify_time": "2018-02-05 13:06:03",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/atiger77/dionaea",
+ "star": 140,
+ "commits": 35,
+ "modify_time": "2016-08-11 08:12:57",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/n1nj4sec/mimipy",
+ "star": 139,
+ "commits": 18,
+ "modify_time": "2017-04-30 00:09:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/0xd4d/jitdasm",
+ "star": 139,
+ "commits": 51,
+ "modify_time": "2019-12-03 19:33:05",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/bytecodealliance/wasmparser",
+ "star": 139,
+ "commits": 281,
+ "modify_time": "2019-12-04 16:53:15",
+ "last_release": "",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/crytic/blockchain-security-contacts",
+ "star": 139,
+ "commits": 258,
+ "modify_time": "2019-10-15 17:28:00",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/zaproxy/zap-hud",
+ "star": 139,
+ "commits": 1009,
+ "modify_time": "2019-12-10 09:11:15",
+ "last_release": "v0.8.0",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/wangyihang/sourceleakhacker",
+ "star": 139,
+ "commits": 65,
+ "modify_time": "2019-08-15 05:58:49",
+ "last_release": "\n v2.2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/und3rf10w/external_c2_framework",
+ "star": 139,
+ "commits": 138,
+ "modify_time": "2018-06-25 04:37:59",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/twogood/unshield",
+ "star": 139,
+ "commits": 263,
+ "modify_time": "2019-12-07 16:20:36",
+ "last_release": "1.4.3",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/technicaldada/hackerpro",
+ "star": 139,
+ "commits": 27,
+ "modify_time": "2019-09-18 12:12:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/spoock1024/web-security",
+ "star": 139,
+ "commits": 32,
+ "modify_time": "2018-06-02 06:14:28",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/spiderlabs/cribdrag",
+ "star": 139,
+ "commits": 4,
+ "modify_time": "2016-03-06 17:43:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/skochinsky/me-tools",
+ "star": 139,
+ "commits": 27,
+ "modify_time": "2017-03-17 21:07:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/santatic/web2attack",
+ "star": 139,
+ "commits": 7,
+ "modify_time": "2019-12-10 09:27:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/saleemrashid/ledger-mcu-backdoor",
+ "star": 139,
+ "commits": 2,
+ "modify_time": "2018-03-19 19:00:49",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/rhinosecuritylabs/gcpbucketbrute",
+ "star": 139,
+ "commits": 13,
+ "modify_time": "2019-10-29 17:58:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/recolic/awesome-hust",
+ "star": 139,
+ "commits": 87,
+ "modify_time": "2019-12-07 12:06:18",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/proabiral/inception",
+ "star": 139,
+ "commits": 28,
+ "modify_time": "2019-11-08 03:28:57",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/osresearch/spispy",
+ "star": 139,
+ "commits": 169,
+ "modify_time": "2019-10-01 19:17:40",
+ "last_release": "",
+ "lang": "Verilog"
+ },
+ {
+ "link": "https://github.com/nathanchance/android-kernel-clang",
+ "star": 139,
+ "commits": 19,
+ "modify_time": "2019-09-30 01:33:16",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/mtivadar/qiew",
+ "star": 139,
+ "commits": 271,
+ "modify_time": "2019-03-12 01:07:00",
+ "last_release": "v1.2.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mgeeky/expdevbadchars",
+ "star": 139,
+ "commits": 15,
+ "modify_time": "2019-08-19 08:48:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lauixdata/wechat_hack",
+ "star": 139,
+ "commits": null,
+ "modify_time": "2016-03-08 02:54:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/l3m0n/linux_information",
+ "star": 139,
+ "commits": 4,
+ "modify_time": "2018-04-26 07:29:37",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/kelu124/echomods",
+ "star": 139,
+ "commits": 847,
+ "modify_time": "2019-11-24 20:52:42",
+ "last_release": "v2.0.0",
+ "lang": "Jupyter Notebook"
+ },
+ {
+ "link": "https://github.com/juunas11/aspnetcore-security-headers",
+ "star": 139,
+ "commits": 72,
+ "modify_time": "2019-10-24 19:19:33",
+ "last_release": "\n rel/3.0.0\n ",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/jaxbcd/zeebsploit",
+ "star": 139,
+ "commits": 71,
+ "modify_time": "2019-06-03 16:55:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/iphelix/ida-sploiter",
+ "star": 139,
+ "commits": 12,
+ "modify_time": "2019-05-13 06:57:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/guidovranken/libfuzzer-gv",
+ "star": 139,
+ "commits": 11,
+ "modify_time": "2019-01-03 10:16:56",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/glv2/bruteforce-luks",
+ "star": 139,
+ "commits": 46,
+ "modify_time": "2019-11-18 10:02:57",
+ "last_release": "1.4.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/gkaindl/meltdown-poc",
+ "star": 139,
+ "commits": 4,
+ "modify_time": "2018-01-05 12:36:15",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/finixbit/elf-parser",
+ "star": 139,
+ "commits": 23,
+ "modify_time": "2019-01-10 11:11:22",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/eterna1/puszek-rootkit",
+ "star": 139,
+ "commits": 23,
+ "modify_time": "2018-02-12 23:27:28",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/empireproject/psinject",
+ "star": 139,
+ "commits": 5,
+ "modify_time": "2019-02-11 22:33:23",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/cboesecurity/password_pwncheck",
+ "star": 139,
+ "commits": 43,
+ "modify_time": "2019-10-08 18:19:03",
+ "last_release": "v1.1.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/c0r3dump3d/osueta",
+ "star": 139,
+ "commits": 75,
+ "modify_time": "2018-11-05 17:47:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/btoplak/joomla-anti-malware-scan-script--jamss-",
+ "star": 139,
+ "commits": 86,
+ "modify_time": "2014-07-24 10:30:27",
+ "last_release": "\n 1.0.3\n ",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/bignerd95/winboxexploit",
+ "star": 139,
+ "commits": 41,
+ "modify_time": "2019-01-22 15:19:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/azure/azure-cosmosdb-spark",
+ "star": 139,
+ "commits": 527,
+ "modify_time": "2019-09-30 07:34:27",
+ "last_release": "latest",
+ "lang": "Scala"
+ },
+ {
+ "link": "https://github.com/aidanns/vagrant-reload",
+ "star": 139,
+ "commits": 5,
+ "modify_time": "2013-10-14 22:05:04",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/ckjbug/xmind-learning",
+ "star": 138,
+ "commits": 47,
+ "modify_time": "2019-09-26 01:04:16",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/wzdnzd/shadowsocksx-ng-r",
+ "star": 138,
+ "commits": 369,
+ "modify_time": "2019-05-30 11:32:15",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/tenzir/vast",
+ "star": 138,
+ "commits": 5342,
+ "modify_time": "2019-12-09 17:18:27",
+ "last_release": "0.2",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/darkarp/chromepass",
+ "star": 138,
+ "commits": 199,
+ "modify_time": "2019-10-30 11:19:51",
+ "last_release": "\n 3.9.8\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wazehell/pe-linux",
+ "star": 138,
+ "commits": 8,
+ "modify_time": "2019-04-12 15:00:35",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/vcheckzen/familycloudspeederinshell",
+ "star": 138,
+ "commits": 116,
+ "modify_time": "2019-05-24 13:48:28",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/ultimatelabs/zoom",
+ "star": 138,
+ "commits": null,
+ "modify_time": "2018-07-11 14:43:57",
+ "last_release": "",
+ "lang": "python"
+ },
+ {
+ "link": "https://github.com/tromp/equihash",
+ "star": 138,
+ "commits": 143,
+ "modify_time": "2018-08-07 11:00:26",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/threatexpress/cs2modrewrite",
+ "star": 138,
+ "commits": 19,
+ "modify_time": "2019-09-09 19:46:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/thefox/keylogger",
+ "star": 138,
+ "commits": 32,
+ "modify_time": "2019-03-26 10:40:36",
+ "last_release": "v1.1.0",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/tharina/35c3ctf",
+ "star": 138,
+ "commits": 1,
+ "modify_time": "2018-12-30 17:24:24",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/substack/node-password-reset",
+ "star": 138,
+ "commits": 25,
+ "modify_time": "2012-02-03 10:15:58",
+ "last_release": "\n 0.1.4\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/shellhub/shellhub",
+ "star": 138,
+ "commits": 68,
+ "modify_time": "2019-11-03 11:52:20",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/quarkslab/dreamboot",
+ "star": 138,
+ "commits": 4,
+ "modify_time": "2013-04-10 14:47:54",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/macmade/dyld_cache_extract",
+ "star": 138,
+ "commits": 83,
+ "modify_time": "2019-05-09 14:23:33",
+ "last_release": "0.1.1",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/jrbancel/chromagnon",
+ "star": 138,
+ "commits": 67,
+ "modify_time": "2018-03-28 22:41:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jiangbolee/changelocation",
+ "star": 138,
+ "commits": 4,
+ "modify_time": "2018-01-29 07:36:01",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/jgm/lunamark",
+ "star": 138,
+ "commits": 789,
+ "modify_time": "2019-05-12 14:36:56",
+ "last_release": "\n 0.5.0\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jezdez/django-discover-runner",
+ "star": 138,
+ "commits": 33,
+ "modify_time": "2013-06-15 13:06:34",
+ "last_release": "\n 1.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/greenboxal/dns-heaven",
+ "star": 138,
+ "commits": 5,
+ "modify_time": "2019-08-22 19:28:41",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/google/tcp_killer",
+ "star": 138,
+ "commits": 4,
+ "modify_time": "2017-06-30 16:31:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/glv2/bruteforce-wallet",
+ "star": 138,
+ "commits": 33,
+ "modify_time": "2019-05-31 16:46:16",
+ "last_release": "1.5.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/gawen/virustotal",
+ "star": 138,
+ "commits": 14,
+ "modify_time": "2019-02-11 11:14:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/exodusintel/chromium-941743",
+ "star": 138,
+ "commits": 3,
+ "modify_time": "2019-04-03 15:31:34",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/epfl-vlsc/memoro",
+ "star": 138,
+ "commits": 98,
+ "modify_time": "2019-08-06 07:41:43",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/dgiardini/rtl-ais",
+ "star": 138,
+ "commits": 123,
+ "modify_time": "2019-10-03 19:25:34",
+ "last_release": "v0.3",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/dekunukem/kbord",
+ "star": 138,
+ "commits": 114,
+ "modify_time": "2019-10-05 20:49:40",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cyberark/shimit",
+ "star": 138,
+ "commits": 3,
+ "modify_time": "2017-11-21 13:07:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cloudflare/cfssl_trust",
+ "star": 138,
+ "commits": 170,
+ "modify_time": "2019-11-26 00:49:47",
+ "last_release": "\n trust-store-2019.11.0\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/caledoniaproject/jenkins-cli-exploit",
+ "star": 138,
+ "commits": null,
+ "modify_time": "2019-06-05 02:43:02",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/antelle/argon2-browser",
+ "star": 138,
+ "commits": 107,
+ "modify_time": "2019-11-17 16:47:41",
+ "last_release": "\n 1.12.0\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ale5000-git/tingle",
+ "star": 138,
+ "commits": 393,
+ "modify_time": "2019-03-31 19:35:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pentestmonkey/pysecdump",
+ "star": 137,
+ "commits": 13,
+ "modify_time": "2015-07-30 20:29:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/snail007/shadowtunnel",
+ "star": 137,
+ "commits": 59,
+ "modify_time": "2019-03-27 04:54:14",
+ "last_release": "v1.7",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/fcavallarin/domdig",
+ "star": 137,
+ "commits": 15,
+ "modify_time": "2019-11-08 13:05:13",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/tacticthreat/PenetrationTesting-Notes",
+ "star": 137,
+ "commits": 88,
+ "modify_time": "2019-01-09 19:43:16",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/MDudek-ICS/TRISIS-TRITON-HATMAN",
+ "star": 137,
+ "commits": 52,
+ "modify_time": "2019-04-10 17:55:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/reb311ion/tornado",
+ "star": 137,
+ "commits": 26,
+ "modify_time": "2019-11-23 15:39:28",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/xairy/kaslr-bypass-via-prefetch",
+ "star": 137,
+ "commits": null,
+ "modify_time": "2016-03-05 00:30:00",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/tyranid/ie11sandboxescapes",
+ "star": 137,
+ "commits": 9,
+ "modify_time": "2014-08-21 15:27:43",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/tinylcy/classanalyzer",
+ "star": 137,
+ "commits": 19,
+ "modify_time": "2018-01-24 10:41:19",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/stefanesser/ida-ios-toolkit",
+ "star": 137,
+ "commits": 4,
+ "modify_time": "2011-09-08 18:49:18",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/secabstraction/wmisploit",
+ "star": 137,
+ "commits": 19,
+ "modify_time": "2015-08-28 23:56:00",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/quentinhardy/scriptsandexploits",
+ "star": 137,
+ "commits": 7,
+ "modify_time": "2018-07-07 13:03:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/puniaze/portdog",
+ "star": 137,
+ "commits": 15,
+ "modify_time": "2015-09-14 06:31:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nusenu/ansible-relayor",
+ "star": 137,
+ "commits": 421,
+ "modify_time": "2019-10-04 08:09:32",
+ "last_release": "v19.1.6",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/nh2/strace-pipes-presentation",
+ "star": 137,
+ "commits": 6,
+ "modify_time": "2019-03-22 16:15:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/netspi/wsdler",
+ "star": 137,
+ "commits": 47,
+ "modify_time": "2018-06-25 21:25:35",
+ "last_release": "2.0.12",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/misterch0c/twitterbftd",
+ "star": 137,
+ "commits": 3,
+ "modify_time": "2017-02-07 17:14:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lazywinadmin/adsips",
+ "star": 137,
+ "commits": 432,
+ "modify_time": "2019-11-16 02:33:05",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/koutto/ioctlbf",
+ "star": 137,
+ "commits": 3,
+ "modify_time": "2017-03-15 13:33:30",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/johndekroon/serializekiller",
+ "star": 137,
+ "commits": 49,
+ "modify_time": "2019-02-25 12:19:30",
+ "last_release": "1.0.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ignitetechnologies/ctf-difficulty",
+ "star": 137,
+ "commits": 25,
+ "modify_time": "2019-10-09 06:25:05",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/icepa/tor.framework",
+ "star": 137,
+ "commits": 116,
+ "modify_time": "2019-10-18 12:44:09",
+ "last_release": "v400.5.2",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/helios-decompiler/standalone-app",
+ "star": 137,
+ "commits": 206,
+ "modify_time": "2017-06-18 18:10:05",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/hc0d3r/mysql-magic",
+ "star": 137,
+ "commits": 22,
+ "modify_time": "2019-05-20 09:00:27",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/greymd/cve-2017-1000117",
+ "star": 137,
+ "commits": 5,
+ "modify_time": "2017-08-16 15:39:15",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/grammatech/ddisasm",
+ "star": 137,
+ "commits": 897,
+ "modify_time": "2019-12-02 19:22:11",
+ "last_release": "\n v0.1.1\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/gradiusx/hevd-python-solutions",
+ "star": 137,
+ "commits": 42,
+ "modify_time": "2018-03-16 19:45:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gnaixx/hidex-hack",
+ "star": 137,
+ "commits": 34,
+ "modify_time": "2017-10-29 15:38:12",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/giovanifss/gitmails",
+ "star": 137,
+ "commits": 71,
+ "modify_time": "2019-05-05 19:01:55",
+ "last_release": "0.1.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ebursztein/malusb",
+ "star": 137,
+ "commits": 6,
+ "modify_time": "2016-09-22 23:20:16",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/dev-sec/chef-ssh-hardening",
+ "star": 137,
+ "commits": 580,
+ "modify_time": "2019-11-25 11:25:35",
+ "last_release": "v2.9.0",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/cr4sh/peibackdoor",
+ "star": 137,
+ "commits": 23,
+ "modify_time": "2016-08-29 19:31:07",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/byt3bl33d3r/sslstrip2",
+ "star": 137,
+ "commits": 11,
+ "modify_time": "2015-04-09 19:20:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/as0ler/frida-scripts",
+ "star": 137,
+ "commits": 16,
+ "modify_time": "2017-03-15 13:00:48",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/anhkgg/pyrat",
+ "star": 137,
+ "commits": 5,
+ "modify_time": "2018-03-23 08:26:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/akayn/demos",
+ "star": 137,
+ "commits": null,
+ "modify_time": "2019-07-01 22:40:58",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/1eez/103976",
+ "star": 137,
+ "commits": 9,
+ "modify_time": "2018-11-14 05:51:34",
+ "last_release": "",
+ "lang": "PLpgSQL"
+ },
+ {
+ "link": "https://github.com/shiftleftsecurity/joern",
+ "star": 136,
+ "commits": 235,
+ "modify_time": "2019-12-03 00:25:24",
+ "last_release": "v1.0.62",
+ "lang": "Scala"
+ },
+ {
+ "link": "https://github.com/vysecurity/IPFuscator",
+ "star": 136,
+ "commits": 1,
+ "modify_time": "2018-05-19 19:09:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lazywinadmin/Monitor-ADGroupMembership",
+ "star": 136,
+ "commits": 53,
+ "modify_time": "2019-11-28 06:06:30",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/osirislab/CTF-Challenges",
+ "star": 136,
+ "commits": 18,
+ "modify_time": "2014-04-13 22:39:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gpoguy/getvulnerablegpo",
+ "star": 136,
+ "commits": 9,
+ "modify_time": "2018-06-01 15:49:20",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/nsacyber/unfetter",
+ "star": 136,
+ "commits": 11,
+ "modify_time": "2018-07-06 16:19:59",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/jesusprubio/shodan-client",
+ "star": 136,
+ "commits": 128,
+ "modify_time": "2019-10-25 10:15:13",
+ "last_release": "v3.1.4",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/zer0fl4g/nanomite",
+ "star": 136,
+ "commits": 216,
+ "modify_time": "2013-12-31 14:54:27",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/yt1g3r/cve-2019-3396_exp",
+ "star": 136,
+ "commits": 7,
+ "modify_time": "2019-04-12 01:46:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ysrc/anti-emulator",
+ "star": 136,
+ "commits": 32,
+ "modify_time": "2017-02-07 09:38:18",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/xvortex/ps4-hen-vtx",
+ "star": 136,
+ "commits": 26,
+ "modify_time": "2018-07-04 15:51:17",
+ "last_release": "1.7",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/thx/magix-inspector",
+ "star": 136,
+ "commits": 60,
+ "modify_time": "2018-12-21 11:56:53",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/threathuntingproject/hunter",
+ "star": 136,
+ "commits": 105,
+ "modify_time": "2019-08-13 14:23:48",
+ "last_release": "",
+ "lang": "Jupyter Notebook"
+ },
+ {
+ "link": "https://github.com/t57root/pwnginx",
+ "star": 136,
+ "commits": 9,
+ "modify_time": "2013-05-12 07:20:09",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/swisskyrepo/vulny-code-static-analysis",
+ "star": 136,
+ "commits": 53,
+ "modify_time": "2019-11-13 22:02:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/scfwse/blockchinasoftware",
+ "star": 136,
+ "commits": 23,
+ "modify_time": "2015-07-03 10:17:01",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/rmmh/abbrase",
+ "star": 136,
+ "commits": 52,
+ "modify_time": "2019-08-05 21:01:57",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/nirizr/rematch",
+ "star": 136,
+ "commits": 456,
+ "modify_time": "2018-11-28 19:13:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nightnord/ljd",
+ "star": 136,
+ "commits": 191,
+ "modify_time": "2014-01-29 21:28:27",
+ "last_release": "v0.1.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/misp/misp-modules",
+ "star": 136,
+ "commits": 1356,
+ "modify_time": "2019-12-08 18:39:44",
+ "last_release": "\n v2.4.119\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/maestron/hacking-tutorials",
+ "star": 136,
+ "commits": 2,
+ "modify_time": "2018-09-02 17:38:28",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/leviathan1995/fari-proxy",
+ "star": 136,
+ "commits": 107,
+ "modify_time": "2019-09-26 17:05:42",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/leechristensen/random",
+ "star": 136,
+ "commits": 50,
+ "modify_time": "2019-08-10 04:00:06",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/kurobeats/pentest-bookmarks",
+ "star": 136,
+ "commits": null,
+ "modify_time": "2016-10-24 03:36:08",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/kubo/funchook",
+ "star": 136,
+ "commits": 85,
+ "modify_time": "2019-10-23 12:33:06",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/kpwn/935csbypass",
+ "star": 136,
+ "commits": 3,
+ "modify_time": "2016-09-24 20:41:29",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/junbaor/shell_script",
+ "star": 136,
+ "commits": 45,
+ "modify_time": "2017-11-17 07:05:27",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/itskindred/moddetective",
+ "star": 136,
+ "commits": 8,
+ "modify_time": "2019-05-07 02:37:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hasameli/foghorn",
+ "star": 136,
+ "commits": 256,
+ "modify_time": "2017-02-08 21:16:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/h3xstream/burp-retire-js",
+ "star": 136,
+ "commits": 132,
+ "modify_time": "2019-12-09 22:12:05",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/gdssecurity/wifitap",
+ "star": 136,
+ "commits": 4,
+ "modify_time": "2013-01-31 11:20:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/duoergun0729/3book",
+ "star": 136,
+ "commits": 115,
+ "modify_time": "2018-04-16 00:01:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dodola/deepinvirtualapp",
+ "star": 136,
+ "commits": 11,
+ "modify_time": "2016-09-03 10:51:23",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/derekhe/proxypool",
+ "star": 136,
+ "commits": 5,
+ "modify_time": "2019-08-14 13:56:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ctxis/canape",
+ "star": 136,
+ "commits": 26,
+ "modify_time": "2018-01-18 10:29:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/chrisnas/debuggingextensions",
+ "star": 136,
+ "commits": 24,
+ "modify_time": "2019-12-03 15:52:09",
+ "last_release": "1.6.3",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/chris-johnston/binarykeyboard",
+ "star": 136,
+ "commits": 35,
+ "modify_time": "2017-05-10 08:14:12",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/chame1eon/jnitrace",
+ "star": 136,
+ "commits": 34,
+ "modify_time": "2019-11-02 13:45:23",
+ "last_release": "v2.2.3",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/chabou/hyper-pane",
+ "star": 136,
+ "commits": 92,
+ "modify_time": "2019-07-31 15:59:15",
+ "last_release": "\n v2.1.5\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/bryant/argon2rs",
+ "star": 136,
+ "commits": 169,
+ "modify_time": "2017-12-04 22:57:27",
+ "last_release": "\n optional-bench-ref\n ",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/bo0om/parampampam",
+ "star": 136,
+ "commits": 32,
+ "modify_time": "2019-10-22 16:24:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bearded-web/bearded",
+ "star": 136,
+ "commits": 235,
+ "modify_time": "2015-07-17 18:02:35",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/arizvisa/ida-minsc",
+ "star": 136,
+ "commits": 610,
+ "modify_time": "2019-12-05 00:17:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/antoniococo/conptyshell",
+ "star": 136,
+ "commits": 8,
+ "modify_time": "2019-11-28 12:55:12",
+ "last_release": "v1.1",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/alex3434/wmi-static-spoofer",
+ "star": 136,
+ "commits": 29,
+ "modify_time": "2018-12-12 12:37:11",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/aiportal/wechat-proxy",
+ "star": 136,
+ "commits": 68,
+ "modify_time": "2017-10-05 04:16:25",
+ "last_release": "2.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/snyk/goof",
+ "star": 135,
+ "commits": 57,
+ "modify_time": "2019-11-28 19:46:07",
+ "last_release": "\n 1.0.1\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/vysecurity/Aggressor-VYSEC",
+ "star": 135,
+ "commits": 35,
+ "modify_time": "2019-01-30 18:27:29",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/onmyway133/SwiftSnippets",
+ "star": 135,
+ "commits": 25,
+ "modify_time": "2018-12-15 16:06:03",
+ "last_release": "\n 0.3.0\n ",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/crytic/rattle",
+ "star": 135,
+ "commits": 23,
+ "modify_time": "2018-09-08 15:01:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/JackMiranda/herms",
+ "star": 135,
+ "commits": 228,
+ "modify_time": "2019-11-28 23:15:54",
+ "last_release": "",
+ "lang": "Haskell"
+ },
+ {
+ "link": "https://github.com/usscltd/dorks",
+ "star": 135,
+ "commits": 9,
+ "modify_time": "2017-10-05 12:20:35",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/thec00n/smart-contract-honeypots",
+ "star": 135,
+ "commits": 7,
+ "modify_time": "2018-04-01 12:05:00",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/tagomoris/fluent-plugin-secure-forward",
+ "star": 135,
+ "commits": 165,
+ "modify_time": "2017-06-05 05:35:39",
+ "last_release": "\n v0.4.5\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/sviehb/jefferson",
+ "star": 135,
+ "commits": 17,
+ "modify_time": "2016-06-16 14:41:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sectooladdict/wavsep",
+ "star": 135,
+ "commits": 1,
+ "modify_time": "2014-02-25 23:24:34",
+ "last_release": "wavsep-v1.5",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/poshsec/poshsecframework",
+ "star": 135,
+ "commits": 295,
+ "modify_time": "2018-06-05 20:17:33",
+ "last_release": "1.1.2",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/pomerium/awesome-security-audits",
+ "star": 135,
+ "commits": 6,
+ "modify_time": "2019-12-03 21:41:19",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/peterjaric/archaeologit",
+ "star": 135,
+ "commits": 5,
+ "modify_time": "2018-06-12 09:37:39",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/osandamalith/exe2image",
+ "star": 135,
+ "commits": 5,
+ "modify_time": "2015-08-21 14:31:33",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/oasis-open/cti-python-stix2",
+ "star": 135,
+ "commits": 1243,
+ "modify_time": "2019-12-06 14:54:43",
+ "last_release": "v1.2.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mubix/vt-notify",
+ "star": 135,
+ "commits": 15,
+ "modify_time": "2013-01-03 20:38:30",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/m8r0wn/subscraper",
+ "star": 135,
+ "commits": 30,
+ "modify_time": "2019-11-11 15:46:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/logrhythm-labs/pie",
+ "star": 135,
+ "commits": 75,
+ "modify_time": "2019-04-08 19:06:29",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/latkin/1poshword",
+ "star": 135,
+ "commits": 39,
+ "modify_time": "2016-09-13 09:02:34",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/lanrat/certgraph",
+ "star": 135,
+ "commits": 140,
+ "modify_time": "2018-11-24 05:26:29",
+ "last_release": "20180911",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/laginimaineb/android_fde_bruteforce",
+ "star": 135,
+ "commits": 6,
+ "modify_time": "2016-07-02 18:21:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kpcyrd/rshijack",
+ "star": 135,
+ "commits": 27,
+ "modify_time": "2018-03-21 18:41:59",
+ "last_release": "\n v0.3.0\n ",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/keenerd/rtl-sdr-misc",
+ "star": 135,
+ "commits": 39,
+ "modify_time": "2017-03-27 00:56:28",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/itskindred/jalesc",
+ "star": 135,
+ "commits": 13,
+ "modify_time": "2019-05-29 14:06:09",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/ioactive/i-know-where-your-page-lives",
+ "star": 135,
+ "commits": 4,
+ "modify_time": "2016-12-07 12:01:27",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/herumi/msoffice",
+ "star": 135,
+ "commits": 49,
+ "modify_time": "2019-01-10 08:16:53",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/dzzie/scdbg",
+ "star": 135,
+ "commits": 33,
+ "modify_time": "2019-05-30 12:25:36",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/designsecurity/progpilot",
+ "star": 135,
+ "commits": 293,
+ "modify_time": "2019-07-02 13:19:18",
+ "last_release": "v0.6.0",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/davidbuchanan314/tardis",
+ "star": 135,
+ "commits": 11,
+ "modify_time": "2019-11-19 15:50:01",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cryptosphere/sysrandom",
+ "star": 135,
+ "commits": 46,
+ "modify_time": "2017-05-16 16:30:09",
+ "last_release": "\n v1.0.5\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/certcc/tapioca",
+ "star": 135,
+ "commits": 39,
+ "modify_time": "2019-12-03 21:29:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cbhue/pyfuscation",
+ "star": 135,
+ "commits": 11,
+ "modify_time": "2019-05-02 23:58:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/arch4ngel/eavesarp",
+ "star": 135,
+ "commits": 64,
+ "modify_time": "2019-10-17 15:24:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/0xrawsec/whids",
+ "star": 135,
+ "commits": 50,
+ "modify_time": "2019-10-22 19:05:09",
+ "last_release": "v1.6.2",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/dhondta/dronesploit",
+ "star": 134,
+ "commits": 46,
+ "modify_time": "2019-12-06 09:01:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/getlantern/http-proxy",
+ "star": 134,
+ "commits": 408,
+ "modify_time": "2019-11-17 20:59:52",
+ "last_release": "v0.0.2",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/AdroitAdorKhan/EnergizedProtection",
+ "star": 134,
+ "commits": 395,
+ "modify_time": "2019-12-10 02:02:38",
+ "last_release": "18.11.320",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/dradis/dradis-legacy",
+ "star": 134,
+ "commits": 1799,
+ "modify_time": "2016-03-16 10:27:21",
+ "last_release": "\n v3.0.0.rc1\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/yadutaf/tracepkt",
+ "star": 134,
+ "commits": 17,
+ "modify_time": "2019-02-24 16:39:02",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/wudimahua/firewall",
+ "star": 134,
+ "commits": 6,
+ "modify_time": "2019-10-22 03:22:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/thiagoralves/openplc_v3",
+ "star": 134,
+ "commits": 113,
+ "modify_time": "2019-12-02 14:23:54",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/tarraschk/richelieu",
+ "star": 134,
+ "commits": 5,
+ "modify_time": "2019-07-10 20:35:44",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/soledad208/cve-2018-10933",
+ "star": 134,
+ "commits": 13,
+ "modify_time": "2018-10-22 03:59:59",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/silentsignal/sheep-wolf",
+ "star": 134,
+ "commits": 53,
+ "modify_time": "2017-10-08 11:06:13",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/seomoz/reppy",
+ "star": 134,
+ "commits": 264,
+ "modify_time": "2019-09-16 19:29:08",
+ "last_release": "\n v0.4.10\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/securemode/invoke-apex",
+ "star": 134,
+ "commits": 30,
+ "modify_time": "2019-02-17 17:50:03",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/scrapinghub/scrapy-training",
+ "star": 134,
+ "commits": 59,
+ "modify_time": "2019-01-30 06:28:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/revng/llvmcpy",
+ "star": 134,
+ "commits": 33,
+ "modify_time": "2019-09-17 19:48:55",
+ "last_release": "\n v0.1.5\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/random-robbie/jira-scan",
+ "star": 134,
+ "commits": 10,
+ "modify_time": "2018-04-26 12:47:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pjlantz/hale",
+ "star": 134,
+ "commits": 136,
+ "modify_time": "2017-10-19 20:41:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pichi-router/pichi",
+ "star": 134,
+ "commits": 312,
+ "modify_time": "2019-11-21 16:11:15",
+ "last_release": "1.3.0-rc",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/phith0n/xsshtml",
+ "star": 134,
+ "commits": 4,
+ "modify_time": "2015-06-05 02:44:44",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/phildo/expandpass",
+ "star": 134,
+ "commits": 60,
+ "modify_time": "2019-08-02 04:46:29",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/pasahitz/zirikatu",
+ "star": 134,
+ "commits": 7,
+ "modify_time": "2017-02-27 19:09:27",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/palantir/policy-bot",
+ "star": 134,
+ "commits": 86,
+ "modify_time": "2019-12-06 18:55:09",
+ "last_release": "1.12.4",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/openmpt/openmpt",
+ "star": 134,
+ "commits": 10294,
+ "modify_time": "2019-12-09 10:59:20",
+ "last_release": "\n libopenmpt-0.4.10\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/omegak2/pypoe",
+ "star": 134,
+ "commits": 641,
+ "modify_time": "2019-12-09 10:46:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/objective-see/sniffmk",
+ "star": 134,
+ "commits": 7,
+ "modify_time": "2017-09-01 01:57:40",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/nomorefood/putty-cac",
+ "star": 134,
+ "commits": 95,
+ "modify_time": "2019-10-29 23:04:06",
+ "last_release": "0.73",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/nitram2342/degate",
+ "star": 134,
+ "commits": 593,
+ "modify_time": "2018-09-23 17:29:15",
+ "last_release": "\n v0.1.2\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/netevert/pockint",
+ "star": 134,
+ "commits": 81,
+ "modify_time": "2019-12-08 18:07:08",
+ "last_release": "v.1.1.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nccgroup/bkscan",
+ "star": 134,
+ "commits": 5,
+ "modify_time": "2019-07-18 12:54:37",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/mylxsw/remote-tail",
+ "star": 134,
+ "commits": 45,
+ "modify_time": "2019-06-28 08:13:08",
+ "last_release": "v0.1.6",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/mohamednourtn/terminator",
+ "star": 134,
+ "commits": 24,
+ "modify_time": "2018-05-27 00:40:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mafutian/software",
+ "star": 134,
+ "commits": 3,
+ "modify_time": "2017-09-10 04:04:49",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/klionsec/decryption-tool",
+ "star": 134,
+ "commits": 9,
+ "modify_time": "2019-04-28 00:11:29",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/kidneyband/potatso-ios",
+ "star": 134,
+ "commits": 32,
+ "modify_time": "2017-03-06 08:59:38",
+ "last_release": "\n 1.4.4\n ",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/jzadeh/aktaion",
+ "star": 134,
+ "commits": 117,
+ "modify_time": "2019-03-26 02:10:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jorijn/laravel-security-checker",
+ "star": 134,
+ "commits": 83,
+ "modify_time": "2019-09-23 05:18:13",
+ "last_release": "\n v1.1.1\n ",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/jonathansalwan/binary-samples",
+ "star": 134,
+ "commits": 33,
+ "modify_time": "2018-11-02 08:50:28",
+ "last_release": "",
+ "lang": "Makefile"
+ },
+ {
+ "link": "https://github.com/guillem96/argon-nx",
+ "star": 134,
+ "commits": 160,
+ "modify_time": "2019-09-07 14:09:09",
+ "last_release": "1.1-alpha",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/goldshtn/windbg-extensions",
+ "star": 134,
+ "commits": 13,
+ "modify_time": "2014-08-26 06:25:23",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ellerbrock/docker-security-images",
+ "star": 134,
+ "commits": 7,
+ "modify_time": "2018-09-19 07:32:59",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/dionach/reposcanner",
+ "star": 134,
+ "commits": 8,
+ "modify_time": "2018-08-02 15:32:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/danleechina/mixplaintext",
+ "star": 134,
+ "commits": 7,
+ "modify_time": "2018-10-23 09:11:44",
+ "last_release": "",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/commonexploits/port-scan-automation",
+ "star": 134,
+ "commits": 15,
+ "modify_time": "2016-05-10 07:32:03",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/citizenlab/malware-indicators",
+ "star": 134,
+ "commits": 37,
+ "modify_time": "2019-09-24 09:03:01",
+ "last_release": "",
+ "lang": "YARA"
+ },
+ {
+ "link": "https://github.com/blacktop/malice",
+ "star": 134,
+ "commits": 136,
+ "modify_time": "2016-12-21 21:56:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/binarydefense/auto-ossec",
+ "star": 134,
+ "commits": 70,
+ "modify_time": "2017-11-20 22:33:10",
+ "last_release": "\n 1.7\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ashdnazg/pyreshark",
+ "star": 134,
+ "commits": 98,
+ "modify_time": "2015-03-31 17:15:23",
+ "last_release": "0.1.4",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/anssi-fr/adtimeline",
+ "star": 134,
+ "commits": 21,
+ "modify_time": "2019-08-19 14:53:23",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/akibsayyed/safeseven",
+ "star": 134,
+ "commits": 10,
+ "modify_time": "2017-03-21 15:04:38",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/4b5f5f4b/exploits",
+ "star": 134,
+ "commits": 27,
+ "modify_time": "2017-07-17 06:51:40",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/0xhelloworld/public",
+ "star": 134,
+ "commits": 4,
+ "modify_time": "2019-10-29 00:00:23",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/qihoo360/artdumper",
+ "star": 133,
+ "commits": 7,
+ "modify_time": "2015-11-11 09:27:35",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/gosecure/dtd-finder",
+ "star": 133,
+ "commits": 24,
+ "modify_time": "2019-10-24 20:01:39",
+ "last_release": "",
+ "lang": "Kotlin"
+ },
+ {
+ "link": "https://github.com/pr0cf5/kernel-exploit-practice",
+ "star": 133,
+ "commits": 38,
+ "modify_time": "2019-11-12 14:40:32",
+ "last_release": "",
+ "lang": "Batchfile"
+ },
+ {
+ "link": "https://github.com/baidu-security/openrasp-iast",
+ "star": 133,
+ "commits": 141,
+ "modify_time": "2019-12-10 08:10:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zxlie/website-ssl.sh",
+ "star": 133,
+ "commits": 19,
+ "modify_time": "2018-11-21 08:38:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/youngyangyang04/nosqlattack",
+ "star": 133,
+ "commits": 94,
+ "modify_time": "2018-08-04 01:59:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wanchouchou/apkprotect",
+ "star": 133,
+ "commits": 5,
+ "modify_time": "2015-01-21 10:42:56",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/threatresponse/margaritashotgun",
+ "star": 133,
+ "commits": 178,
+ "modify_time": "2018-06-19 16:36:32",
+ "last_release": "v0.4.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/shipcod3/mysapadventures",
+ "star": 133,
+ "commits": 65,
+ "modify_time": "2019-05-06 01:03:04",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/sashs/arm_exploitation",
+ "star": 133,
+ "commits": 3,
+ "modify_time": "2018-03-21 17:11:36",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/potmdehex/multipath_kfree",
+ "star": 133,
+ "commits": 12,
+ "modify_time": "2018-06-03 21:25:10",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/nullarray/mida-multitool",
+ "star": 133,
+ "commits": 36,
+ "modify_time": "2019-03-12 17:06:09",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/nezha-dt/nezha",
+ "star": 133,
+ "commits": 11,
+ "modify_time": "2017-08-03 15:13:17",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/nccgroup/thetick",
+ "star": 133,
+ "commits": 3,
+ "modify_time": "2019-09-27 09:27:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/manifoldai/docker-cookiecutter-data-science",
+ "star": 133,
+ "commits": 132,
+ "modify_time": "2019-12-10 05:34:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/luis-hebendanz/0pack",
+ "star": 133,
+ "commits": 27,
+ "modify_time": "2019-05-22 22:05:32",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ksanchezcld/hacking_cheat_sheet",
+ "star": 133,
+ "commits": 11,
+ "modify_time": "2016-07-15 22:47:01",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/k4mpr3t/b4tm4n",
+ "star": 133,
+ "commits": 37,
+ "modify_time": "2019-03-17 11:15:20",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/jvoisin/pangu",
+ "star": 133,
+ "commits": 8,
+ "modify_time": "2016-04-05 09:18:59",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hannob/optionsbleed",
+ "star": 133,
+ "commits": 11,
+ "modify_time": "2019-08-26 18:48:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hahwul/xspear",
+ "star": 133,
+ "commits": 90,
+ "modify_time": "2019-11-18 15:46:35",
+ "last_release": "1.2.0",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/gbrindisi/wordpot",
+ "star": 133,
+ "commits": 44,
+ "modify_time": "2018-10-16 14:54:36",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/felixwilhelm/xenpwn",
+ "star": 133,
+ "commits": 5,
+ "modify_time": "2016-07-22 12:48:40",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/europa502/sharp",
+ "star": 133,
+ "commits": 42,
+ "modify_time": "2018-08-07 05:07:15",
+ "last_release": "v1.0",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/drahnr/oregano",
+ "star": 133,
+ "commits": 1154,
+ "modify_time": "2019-11-26 20:54:33",
+ "last_release": "\n v0.84.43\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/davidfowl/multiprotocolaspnetcore",
+ "star": 133,
+ "commits": 6,
+ "modify_time": "2019-02-10 21:25:55",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/darkoperator/posh-sysmon",
+ "star": 133,
+ "commits": 108,
+ "modify_time": "2018-09-20 23:40:40",
+ "last_release": "1.2",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/csirtgadgets/bearded-avenger",
+ "star": 133,
+ "commits": 695,
+ "modify_time": "2019-11-08 21:16:55",
+ "last_release": "3.0.7",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/crowdstrike/falcon-orchestrator",
+ "star": 133,
+ "commits": 40,
+ "modify_time": "2019-03-04 22:13:48",
+ "last_release": "client_bug_fix_1",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/chenenyu/androidsecurity",
+ "star": 133,
+ "commits": 7,
+ "modify_time": "2017-03-17 03:12:06",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/carlosgprado/jarvis",
+ "star": 133,
+ "commits": 37,
+ "modify_time": "2018-10-19 08:41:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bwall/pemcracker",
+ "star": 133,
+ "commits": 9,
+ "modify_time": "2015-11-18 19:45:14",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/bharshbarger/autosint",
+ "star": 133,
+ "commits": 234,
+ "modify_time": "2017-11-13 23:45:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bahaabdelwahed/killshot",
+ "star": 133,
+ "commits": 39,
+ "modify_time": "2019-01-17 20:27:42",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/anestisb/webacoo",
+ "star": 133,
+ "commits": 40,
+ "modify_time": "2012-03-11 22:37:09",
+ "last_release": "\n v0.2.3\n ",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/1n3/exploits",
+ "star": 133,
+ "commits": 35,
+ "modify_time": "2019-09-06 00:34:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/starttoaster/docker-traefik",
+ "star": 132,
+ "commits": 68,
+ "modify_time": "2019-09-30 11:42:26",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/chenjiandongx/soksaccounts",
+ "star": 132,
+ "commits": 16,
+ "modify_time": "2018-04-15 03:08:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lithnet/ad-password-protection",
+ "star": 132,
+ "commits": 118,
+ "modify_time": "2019-10-27 09:49:24",
+ "last_release": "v1.0.7234",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/zsxsoft/my-ctf-challenges",
+ "star": 132,
+ "commits": 9,
+ "modify_time": "2019-08-05 01:42:50",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/walkdoer/Life-Time-Tracker",
+ "star": 132,
+ "commits": 1138,
+ "modify_time": "2016-04-18 09:08:22",
+ "last_release": "\n 0.1.20\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/theonemule/docker-waf",
+ "star": 132,
+ "commits": 21,
+ "modify_time": "2018-12-18 15:07:00",
+ "last_release": "",
+ "lang": "Dockerfile"
+ },
+ {
+ "link": "https://github.com/thehive-project/hippocampe",
+ "star": 132,
+ "commits": 67,
+ "modify_time": "2018-10-19 13:14:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tensorflow/tensorboard-plugin-example",
+ "star": 132,
+ "commits": 27,
+ "modify_time": "2019-08-09 20:23:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/smealum/ninjhax",
+ "star": 132,
+ "commits": 206,
+ "modify_time": "2015-05-10 23:14:31",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/sky8964/home",
+ "star": 132,
+ "commits": 13,
+ "modify_time": "2017-10-31 06:36:21",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/rvn0xsy/cooolis-ms",
+ "star": 132,
+ "commits": 14,
+ "modify_time": "2019-12-08 14:17:52",
+ "last_release": "v1.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/regehr/ub-canaries",
+ "star": 132,
+ "commits": 51,
+ "modify_time": "2019-02-10 20:28:32",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/rastrea2r/rastrea2r",
+ "star": 132,
+ "commits": 70,
+ "modify_time": "2019-10-12 03:30:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pwning/defcon25-public",
+ "star": 132,
+ "commits": 8,
+ "modify_time": "2017-08-02 07:49:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pothosware/pothossdr",
+ "star": 132,
+ "commits": 412,
+ "modify_time": "2019-06-15 17:36:07",
+ "last_release": "",
+ "lang": "CMake"
+ },
+ {
+ "link": "https://github.com/nnposter/nndefaccts",
+ "star": 132,
+ "commits": 102,
+ "modify_time": "2019-12-01 22:55:51",
+ "last_release": "",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/netspi/powershell",
+ "star": 132,
+ "commits": 84,
+ "modify_time": "2019-11-20 00:10:28",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/mitrecnd/whodat",
+ "star": 132,
+ "commits": 354,
+ "modify_time": "2019-05-15 17:21:26",
+ "last_release": "4.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/korelogicsecurity/mastiff",
+ "star": 132,
+ "commits": 67,
+ "modify_time": "2015-09-23 01:26:56",
+ "last_release": "\n V0_7_0_DS1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jnider/delinker",
+ "star": 132,
+ "commits": 100,
+ "modify_time": "2019-12-07 01:47:07",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jlopp/physical-bitcoin-attacks",
+ "star": 132,
+ "commits": 76,
+ "modify_time": "2019-11-08 15:58:36",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/jas502n/cve-2019-2618",
+ "star": 132,
+ "commits": 13,
+ "modify_time": "2019-04-17 15:05:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ivan1ee/struts2-057-exp",
+ "star": 132,
+ "commits": 11,
+ "modify_time": "2019-10-10 07:14:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hfiref0x/wdextract",
+ "star": 132,
+ "commits": 5,
+ "modify_time": "2019-04-24 06:00:48",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/fanpei91/gap-proxy",
+ "star": 132,
+ "commits": 22,
+ "modify_time": "2019-11-20 15:30:02",
+ "last_release": "v1.0.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/esxgx/easy-ecc",
+ "star": 132,
+ "commits": 5,
+ "modify_time": "2014-01-27 15:55:44",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/eliteandroidapps/whatsapp-key-db-extractor",
+ "star": 132,
+ "commits": 34,
+ "modify_time": "2016-10-21 02:26:43",
+ "last_release": "",
+ "lang": "Batchfile"
+ },
+ {
+ "link": "https://github.com/defense-cyber-crime-center/dc3-mwcp",
+ "star": 132,
+ "commits": 90,
+ "modify_time": "2019-10-02 22:01:24",
+ "last_release": "2.1.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cyberark/ketshash",
+ "star": 132,
+ "commits": 60,
+ "modify_time": "2019-07-24 07:08:10",
+ "last_release": "v1.5",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/code-scan/brodomain",
+ "star": 132,
+ "commits": 32,
+ "modify_time": "2016-01-02 11:04:22",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/cfn-modules/docs",
+ "star": 132,
+ "commits": 89,
+ "modify_time": "2019-11-30 21:19:48",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/batuhaniskr/twitter-intelligence",
+ "star": 132,
+ "commits": 109,
+ "modify_time": "2019-10-07 18:24:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/arsv/minibase",
+ "star": 132,
+ "commits": 2454,
+ "modify_time": "2019-11-25 22:43:38",
+ "last_release": "0.7",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/aqzt/sso",
+ "star": 132,
+ "commits": 19,
+ "modify_time": "2017-02-15 00:47:02",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/apache/commons-compress",
+ "star": 132,
+ "commits": 2796,
+ "modify_time": "2019-12-08 13:30:40",
+ "last_release": "\n rel/1.19\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/andrewmohawk/rfcathelpers",
+ "star": 132,
+ "commits": 30,
+ "modify_time": "2016-02-02 17:44:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/alibawazeeer/rat-njrat-0.7d-modded-source-code",
+ "star": 132,
+ "commits": 9,
+ "modify_time": "2017-10-29 01:15:05",
+ "last_release": "",
+ "lang": "Visual Basic .NET"
+ },
+ {
+ "link": "https://github.com/nsacyber/applocker-guidance",
+ "star": 131,
+ "commits": 11,
+ "modify_time": "2018-07-10 21:14:11",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/hanc00l/wifitest",
+ "star": 131,
+ "commits": 5,
+ "modify_time": "2017-02-09 05:39:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/okturtles/blockchainid",
+ "star": 131,
+ "commits": 16,
+ "modify_time": "2016-01-27 03:47:23",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/coldhakca/tor-relay-bootstrap",
+ "star": 131,
+ "commits": 52,
+ "modify_time": "2017-12-20 09:18:23",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/oyyd/encryptsocks",
+ "star": 131,
+ "commits": 90,
+ "modify_time": "2017-12-17 14:00:33",
+ "last_release": "\n 1.4.4\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/m0xiaoxi/CTFtools",
+ "star": 131,
+ "commits": 76,
+ "modify_time": "2017-11-18 10:53:50",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/ricterz/websocket-injection",
+ "star": 131,
+ "commits": 33,
+ "modify_time": "2015-07-20 07:35:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/airbus-seclab/ramooflax",
+ "star": 131,
+ "commits": 325,
+ "modify_time": "2017-11-09 12:41:54",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/vmcall/latebros",
+ "star": 131,
+ "commits": 89,
+ "modify_time": "2018-04-11 18:27:25",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/zeropwn/spyse.py",
+ "star": 131,
+ "commits": 47,
+ "modify_time": "2019-07-06 21:58:59",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xyfir/ptorx",
+ "star": 131,
+ "commits": 1794,
+ "modify_time": "2019-10-08 01:06:34",
+ "last_release": "6.8.2",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/wpscanteam/wpscan-v3",
+ "star": 131,
+ "commits": null,
+ "modify_time": "2018-09-26 19:35:30",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/wordpress/secure-swfupload",
+ "star": 131,
+ "commits": 290,
+ "modify_time": "2013-08-17 17:48:06",
+ "last_release": "",
+ "lang": "ActionScript"
+ },
+ {
+ "link": "https://github.com/wangyihang/exploit-framework",
+ "star": 131,
+ "commits": 75,
+ "modify_time": "2019-11-15 15:08:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tools2/zend-decoder",
+ "star": 131,
+ "commits": 6,
+ "modify_time": "2018-09-13 16:45:54",
+ "last_release": "0.1.1",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/theori-io/chakra-2016-11",
+ "star": 131,
+ "commits": 2,
+ "modify_time": "2017-01-04 23:42:41",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/tevora-threat/eternal_blue_powershell",
+ "star": 131,
+ "commits": 4,
+ "modify_time": "2017-06-03 01:41:19",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/shnatsel/libdiffuzz",
+ "star": 131,
+ "commits": 48,
+ "modify_time": "2019-02-17 17:03:30",
+ "last_release": "",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/schumilo/vusbf",
+ "star": 131,
+ "commits": 11,
+ "modify_time": "2017-04-02 00:36:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/saurik/mempodroid",
+ "star": 131,
+ "commits": 10,
+ "modify_time": "2012-08-05 16:23:59",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/safebreach-labs/pyekaboo",
+ "star": 131,
+ "commits": 2,
+ "modify_time": "2017-05-04 23:47:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rapid7/nexpose-client",
+ "star": 131,
+ "commits": 1170,
+ "modify_time": "2018-06-06 23:44:09",
+ "last_release": "v7.2.1",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/owasp/passfault",
+ "star": 131,
+ "commits": 238,
+ "modify_time": "2019-07-27 08:37:04",
+ "last_release": "v0.8.3",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/nopernik/mpdns",
+ "star": 131,
+ "commits": 6,
+ "modify_time": "2018-11-17 13:04:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mschwager/0wned",
+ "star": 131,
+ "commits": 23,
+ "modify_time": "2018-11-28 17:06:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mozilla/fxa",
+ "star": 131,
+ "commits": 16252,
+ "modify_time": "2019-12-10 00:05:17",
+ "last_release": "\n v1.152.0\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/mogwaisec/mjet",
+ "star": 131,
+ "commits": 13,
+ "modify_time": "2015-01-26 22:59:22",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/m0xiaoxi/ctftools",
+ "star": 131,
+ "commits": 76,
+ "modify_time": "2017-11-18 10:53:50",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/lts4/universal",
+ "star": 131,
+ "commits": 60,
+ "modify_time": "2017-10-23 04:23:01",
+ "last_release": "",
+ "lang": "MATLAB"
+ },
+ {
+ "link": "https://github.com/jlospinoso/memcachedump",
+ "star": 131,
+ "commits": 17,
+ "modify_time": "2018-03-12 17:10:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jgamblin/quickinstall",
+ "star": 131,
+ "commits": 19,
+ "modify_time": "2017-10-02 13:51:10",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/jcadduono/android_external_dirtycow",
+ "star": 131,
+ "commits": 45,
+ "modify_time": "2016-12-21 08:41:10",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/htfy96/v2ray-config-gen",
+ "star": 131,
+ "commits": 28,
+ "modify_time": "2019-03-28 05:28:28",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/hoshimin/hooklib",
+ "star": 131,
+ "commits": 15,
+ "modify_time": "2019-08-14 09:35:39",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hiteshd/android-rootkit",
+ "star": 131,
+ "commits": 8,
+ "modify_time": "2015-06-15 08:55:20",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hiddenillusion/analyzepdf",
+ "star": 131,
+ "commits": 9,
+ "modify_time": "2014-05-22 14:34:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/games647/fastlogin",
+ "star": 131,
+ "commits": 351,
+ "modify_time": "2019-11-09 12:57:12",
+ "last_release": "premiumUUID",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/fuzion24/androidziparbitrage",
+ "star": 131,
+ "commits": 47,
+ "modify_time": "2014-05-21 20:28:10",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/empijei/wapty",
+ "star": 131,
+ "commits": 357,
+ "modify_time": "2019-05-28 17:32:24",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/edsonmedina/php_testability",
+ "star": 131,
+ "commits": 400,
+ "modify_time": "2019-09-12 00:44:49",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/comsecuris/gdbghidra",
+ "star": 131,
+ "commits": 30,
+ "modify_time": "2019-05-28 11:33:08",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/cisco-talos/bass",
+ "star": 131,
+ "commits": 11,
+ "modify_time": "2018-09-19 16:31:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/chrisrimondi/vulntoes",
+ "star": 131,
+ "commits": 32,
+ "modify_time": "2017-10-17 20:23:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/celesteblue-dev/psvita-re-tools",
+ "star": 131,
+ "commits": 204,
+ "modify_time": "2019-10-05 00:12:13",
+ "last_release": "v1.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/binhex/arch-rtorrentvpn",
+ "star": 131,
+ "commits": 304,
+ "modify_time": "2019-12-09 17:02:24",
+ "last_release": "1.1.r42.g37c9d4b-1-10",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/beta-tester/rpi-pxe-server",
+ "star": 131,
+ "commits": 303,
+ "modify_time": "2019-12-06 12:27:34",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/arnaucube/go-snark",
+ "star": 131,
+ "commits": 44,
+ "modify_time": "2019-10-31 10:39:20",
+ "last_release": "\n v0.0.4\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/anssi-fr/ad-permissions",
+ "star": 131,
+ "commits": 36,
+ "modify_time": "2017-06-15 17:25:45",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/3gstudent/eventlogedit-evtx--evolution",
+ "star": 131,
+ "commits": 94,
+ "modify_time": "2018-08-10 08:20:15",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/0x09al/dropboxc2c",
+ "star": 131,
+ "commits": 14,
+ "modify_time": "2018-10-20 19:15:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zcutlip/bowcaster",
+ "star": 130,
+ "commits": 230,
+ "modify_time": "2018-03-28 18:41:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xor-function/fathomless",
+ "star": 130,
+ "commits": 263,
+ "modify_time": "2018-12-07 21:41:20",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/xiaoxiaoleo/windows_pentest_tools",
+ "star": 130,
+ "commits": null,
+ "modify_time": "2018-03-31 10:45:53",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/wfzsec/awd_attack_framework",
+ "star": 130,
+ "commits": 8,
+ "modify_time": "2019-06-07 09:24:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wangyihang/reverse-shell-manager",
+ "star": 130,
+ "commits": 82,
+ "modify_time": "2018-10-24 07:19:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/theofficialflow/h-encore-2",
+ "star": 130,
+ "commits": 4,
+ "modify_time": "2019-08-27 21:38:08",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/tenable/router_badusb",
+ "star": 130,
+ "commits": 20,
+ "modify_time": "2019-03-31 12:34:14",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/shieldersec/webtech",
+ "star": 130,
+ "commits": 78,
+ "modify_time": "2019-10-20 09:30:31",
+ "last_release": "1.2.7",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ropnop/windows_sshagent_extract",
+ "star": 130,
+ "commits": 4,
+ "modify_time": "2018-05-20 19:11:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/quarkslab/arybo",
+ "star": 130,
+ "commits": 43,
+ "modify_time": "2019-03-26 20:10:22",
+ "last_release": "\n release-1.0.0\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/phiresky/nmap-log-parse",
+ "star": 130,
+ "commits": 63,
+ "modify_time": "2019-05-17 09:21:31",
+ "last_release": "",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/oktasecuritylabs/passprotect-js",
+ "star": 130,
+ "commits": 64,
+ "modify_time": "2019-11-18 19:57:54",
+ "last_release": "\n 1.0.0\n ",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/mwsrc/betterandrorat",
+ "star": 130,
+ "commits": 1,
+ "modify_time": "2016-12-24 07:51:32",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/minhaskamal/cuteviruscollection",
+ "star": 130,
+ "commits": 46,
+ "modify_time": "2019-03-02 17:24:48",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/malfunkt/arpfox",
+ "star": 130,
+ "commits": 58,
+ "modify_time": "2019-09-25 14:57:01",
+ "last_release": "v0.9.9",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/log2timeline/dfvfs",
+ "star": 130,
+ "commits": 443,
+ "modify_time": "2019-10-31 19:37:15",
+ "last_release": "20190902",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/landgrey/abuse-ssl-bypass-waf",
+ "star": 130,
+ "commits": 5,
+ "modify_time": "2019-04-18 05:28:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kd8bny/limeaide",
+ "star": 130,
+ "commits": 305,
+ "modify_time": "2019-05-02 16:58:36",
+ "last_release": "v2.0.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/inquest/yara-rules",
+ "star": 130,
+ "commits": 83,
+ "modify_time": "2019-12-02 23:09:32",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/infosec-au/enumxff",
+ "star": 130,
+ "commits": 8,
+ "modify_time": "2016-12-05 12:28:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/incredibleindishell/sqlite-lab",
+ "star": 130,
+ "commits": 14,
+ "modify_time": "2018-01-07 10:42:41",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/glennzw/shodan-hq-nse",
+ "star": 130,
+ "commits": 5,
+ "modify_time": "2016-03-14 14:19:44",
+ "last_release": "",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/gaerae/awesome-algorithms-education",
+ "star": 130,
+ "commits": 37,
+ "modify_time": "2019-05-13 11:09:14",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/decoxviii/userrecon-py",
+ "star": 130,
+ "commits": 27,
+ "modify_time": "2019-10-04 19:13:04",
+ "last_release": "v1.2.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/comsecuris/ida_strcluster",
+ "star": 130,
+ "commits": 8,
+ "modify_time": "2018-03-14 10:32:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/blacknbunny/mcreator",
+ "star": 130,
+ "commits": 28,
+ "modify_time": "2018-11-29 07:31:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/benjeems/packetstrider",
+ "star": 130,
+ "commits": 49,
+ "modify_time": "2019-10-19 02:59:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/apperian/ios-checkipa",
+ "star": 130,
+ "commits": 18,
+ "modify_time": "2019-09-04 13:25:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/andrewaeva/dga",
+ "star": 130,
+ "commits": 79,
+ "modify_time": "2017-07-31 04:11:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ahref-group/ss-panel-smarty-edition",
+ "star": 130,
+ "commits": 1095,
+ "modify_time": "2019-11-12 07:17:02",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/3xpl017/netpwn",
+ "star": 130,
+ "commits": 180,
+ "modify_time": "2019-10-26 11:19:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/michalmonday/supremeduck",
+ "star": 129,
+ "commits": 147,
+ "modify_time": "2019-10-13 12:00:52",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/magic-akari/wannacry",
+ "star": 129,
+ "commits": 10,
+ "modify_time": "2017-05-21 13:15:30",
+ "last_release": "v0.9",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/kootenpv/access_points",
+ "star": 129,
+ "commits": 68,
+ "modify_time": "2019-09-09 07:45:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nccgroup/SusanRTTI",
+ "star": 129,
+ "commits": 2,
+ "modify_time": "2018-04-18 00:14:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wkovacs64/pwned",
+ "star": 129,
+ "commits": 840,
+ "modify_time": "2019-12-09 20:48:47",
+ "last_release": "v8.0.1",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/weaknetlabs/penetration-testing-grimoire",
+ "star": 129,
+ "commits": 598,
+ "modify_time": "2019-02-20 22:18:56",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/v2ray/v2ray-panel-master",
+ "star": 129,
+ "commits": 49,
+ "modify_time": "2018-02-12 15:11:04",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/ustayready/casperstager",
+ "star": 129,
+ "commits": 1,
+ "modify_time": "2018-10-26 18:10:35",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/tarlogicsecurity/chankro",
+ "star": 129,
+ "commits": 21,
+ "modify_time": "2019-05-31 07:29:40",
+ "last_release": "v0.4",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/swimlane/pyattck",
+ "star": 129,
+ "commits": 60,
+ "modify_time": "2019-12-09 15:24:55",
+ "last_release": "untagged-f09b361fa8c5beffe3f6",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/svenito/exploit-pattern",
+ "star": 129,
+ "commits": 17,
+ "modify_time": "2019-10-02 09:04:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/stripe-ctf/octopus",
+ "star": 129,
+ "commits": 17,
+ "modify_time": "2014-03-06 03:58:36",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/smeso/mtpwn",
+ "star": 129,
+ "commits": 1,
+ "modify_time": "2018-01-02 19:25:07",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/smartcontractsecurity/swc-registry",
+ "star": 129,
+ "commits": 833,
+ "modify_time": "2019-12-06 13:00:53",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/slauc91/anticheat",
+ "star": 129,
+ "commits": 16,
+ "modify_time": "2015-06-16 19:41:19",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/skylined/localnetworkscanner",
+ "star": 129,
+ "commits": 8,
+ "modify_time": "2016-05-27 14:20:45",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/siguza/cl0ver",
+ "star": 129,
+ "commits": 113,
+ "modify_time": "2018-07-11 23:06:23",
+ "last_release": "1.1.5",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/schnocker/noeye",
+ "star": 129,
+ "commits": 16,
+ "modify_time": "2019-05-01 22:16:09",
+ "last_release": "\n schnocker\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/pownjs/pown",
+ "star": 129,
+ "commits": 93,
+ "modify_time": "2019-05-17 07:52:19",
+ "last_release": "\n v2.17.0\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/plum-umd/redexer",
+ "star": 129,
+ "commits": 263,
+ "modify_time": "2019-05-24 17:49:55",
+ "last_release": "\n archive/optimized-logging\n ",
+ "lang": "OCaml"
+ },
+ {
+ "link": "https://github.com/netxfly/xsec-traffic",
+ "star": 129,
+ "commits": 5,
+ "modify_time": "2017-12-11 18:20:07",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/mxk/win10-secure-baseline-gpo",
+ "star": 129,
+ "commits": 39,
+ "modify_time": "2019-08-18 02:17:15",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/munki/installr",
+ "star": 129,
+ "commits": 12,
+ "modify_time": "2019-05-24 17:11:46",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/mandatoryprogrammer/russiadnsleak",
+ "star": 129,
+ "commits": 1,
+ "modify_time": "2017-06-20 04:43:18",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/malwares/exploitkit",
+ "star": 129,
+ "commits": 3,
+ "modify_time": "2016-12-10 04:31:44",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/jsitech/relayer",
+ "star": 129,
+ "commits": 25,
+ "modify_time": "2018-12-06 18:37:55",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/jordan-wright/elastichoney",
+ "star": 129,
+ "commits": 12,
+ "modify_time": "2015-07-06 00:57:11",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/j3ssie/metabigor",
+ "star": 129,
+ "commits": 15,
+ "modify_time": "2019-09-18 02:58:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/initstring/cloud_enum",
+ "star": 129,
+ "commits": 44,
+ "modify_time": "2019-10-31 01:49:54",
+ "last_release": "v0.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hcamael/ctf_repo",
+ "star": 129,
+ "commits": 21,
+ "modify_time": "2018-01-17 18:07:57",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/hasherezade/iat_patcher",
+ "star": 129,
+ "commits": 137,
+ "modify_time": "2019-12-01 01:04:43",
+ "last_release": "v3.5.2",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/gossip-sjtu/tripledoggy",
+ "star": 129,
+ "commits": 10,
+ "modify_time": "2019-05-08 08:49:09",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/gajos112/oscp",
+ "star": 129,
+ "commits": 244,
+ "modify_time": "2019-11-21 12:32:18",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/friedappleteam/frapl",
+ "star": 129,
+ "commits": 5,
+ "modify_time": "2016-12-26 13:17:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/elceef/bitlocker",
+ "star": 129,
+ "commits": 7,
+ "modify_time": "2016-05-16 22:03:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ekultek/dagon",
+ "star": 129,
+ "commits": 244,
+ "modify_time": "2018-06-15 19:13:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dviros/rat-via-telegram",
+ "star": 129,
+ "commits": 104,
+ "modify_time": "2018-03-13 13:19:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cr0hn/enteletaor",
+ "star": 129,
+ "commits": 65,
+ "modify_time": "2019-06-27 08:59:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/comsecuris/gdbida",
+ "star": 129,
+ "commits": 7,
+ "modify_time": "2018-04-23 12:45:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/chybeta/waf-bypass",
+ "star": 129,
+ "commits": 107,
+ "modify_time": "2017-09-23 14:56:16",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/benlaurie/objecthash",
+ "star": 129,
+ "commits": 167,
+ "modify_time": "2018-02-02 13:57:21",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/benjojo/dos_ssh",
+ "star": 129,
+ "commits": 18,
+ "modify_time": "2015-09-26 19:07:22",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/abhishekkr/n00brat",
+ "star": 129,
+ "commits": 11,
+ "modify_time": "2019-06-15 12:35:25",
+ "last_release": "v0.7",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/snare/idiot",
+ "star": 128,
+ "commits": 62,
+ "modify_time": "2016-04-14 03:08:43",
+ "last_release": "v0.1.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/stefanesser/opensource_taig",
+ "star": 128,
+ "commits": 20,
+ "modify_time": "2015-06-25 13:12:41",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/gamozolabs/fzero_fuzzer",
+ "star": 128,
+ "commits": 5,
+ "modify_time": "2019-11-22 10:40:34",
+ "last_release": "",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/jollheef/lpe",
+ "star": 128,
+ "commits": 18,
+ "modify_time": "2019-10-14 21:26:02",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/unfetter-discover/unfetter-analytic",
+ "star": 128,
+ "commits": 24,
+ "modify_time": "2018-04-13 20:54:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/logico-ar/typewriter",
+ "star": 128,
+ "commits": 27,
+ "modify_time": "2019-03-02 14:49:02",
+ "last_release": "",
+ "lang": "Vim script"
+ },
+ {
+ "link": "https://github.com/NewBee119/ssh-scanner",
+ "star": 128,
+ "commits": 7,
+ "modify_time": "2018-05-05 03:33:09",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/you0708/ida",
+ "star": 128,
+ "commits": 25,
+ "modify_time": "2019-12-06 01:13:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/yandex/burp-molly-scanner",
+ "star": 128,
+ "commits": 4,
+ "modify_time": "2018-03-01 10:09:21",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/valdikss/billgates-botnet-tracker",
+ "star": 128,
+ "commits": 6,
+ "modify_time": "2014-04-14 13:07:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tuuunya/webpocket",
+ "star": 128,
+ "commits": 68,
+ "modify_time": "2019-06-03 11:21:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/stratosphereips/stratospherelinuxips",
+ "star": 128,
+ "commits": 1269,
+ "modify_time": "2019-11-02 14:39:58",
+ "last_release": "\n v0.6.0rc1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/shellster/ldapper",
+ "star": 128,
+ "commits": 18,
+ "modify_time": "2019-09-23 14:31:12",
+ "last_release": "V2.5",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/s3team/vmhunt",
+ "star": 128,
+ "commits": 5,
+ "modify_time": "2018-11-25 23:24:16",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ramadhanamizudin/wordpress-scanner",
+ "star": 128,
+ "commits": 172,
+ "modify_time": "2016-03-29 02:03:37",
+ "last_release": "3.1.0",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/propaganistas/laravel-fakeid",
+ "star": 128,
+ "commits": 66,
+ "modify_time": "2019-11-18 07:59:16",
+ "last_release": "4.0.4",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/paulsec/det",
+ "star": 128,
+ "commits": 105,
+ "modify_time": "2019-08-28 07:08:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/openzipkin/brave-webmvc-example",
+ "star": 128,
+ "commits": 90,
+ "modify_time": "2019-10-09 19:46:17",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/mrschyte/dockerpot",
+ "star": 128,
+ "commits": 3,
+ "modify_time": "2015-05-05 09:47:35",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/maxking/linux-vulnerabilities-10-years",
+ "star": 128,
+ "commits": 8,
+ "modify_time": "2018-10-09 17:02:23",
+ "last_release": "",
+ "lang": "TeX"
+ },
+ {
+ "link": "https://github.com/m8r0wn/enumdb",
+ "star": 128,
+ "commits": 30,
+ "modify_time": "2019-11-11 15:48:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/m0n0ph1/iat-hooking-revisited",
+ "star": 128,
+ "commits": 10,
+ "modify_time": "2018-09-19 14:36:24",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/lavalamp-/ws-docker-community",
+ "star": 128,
+ "commits": 17,
+ "modify_time": "2017-12-06 20:55:11",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/justinpealing/html-query-plan",
+ "star": 128,
+ "commits": 351,
+ "modify_time": "2019-11-22 22:49:08",
+ "last_release": "v2.6",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/itm4n/usodllloader",
+ "star": 128,
+ "commits": 18,
+ "modify_time": "2019-10-08 13:19:19",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/gsmk/hexagon",
+ "star": 128,
+ "commits": 8,
+ "modify_time": "2017-12-06 14:36:33",
+ "last_release": "v1.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/firefart/wordpresspingbackportscanner",
+ "star": 128,
+ "commits": 55,
+ "modify_time": "2019-04-04 06:53:19",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/deepzec/grok-backdoor",
+ "star": 128,
+ "commits": 11,
+ "modify_time": "2018-07-21 14:00:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/danladi/httppwnly",
+ "star": 128,
+ "commits": 47,
+ "modify_time": "2017-03-04 20:54:55",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/claudiugeorgiu/obfuscapk",
+ "star": 128,
+ "commits": 27,
+ "modify_time": "2019-09-20 13:29:34",
+ "last_release": "v1.1.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bullseye0/shodan-eye",
+ "star": 128,
+ "commits": 43,
+ "modify_time": "2019-11-29 17:29:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/anthemtotheego/sharpsploitconsole",
+ "star": 128,
+ "commits": 34,
+ "modify_time": "2018-10-23 21:17:02",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/andrewhilts/snifflab",
+ "star": 128,
+ "commits": 19,
+ "modify_time": "2015-08-21 15:32:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/adamcaudill/ccsrch",
+ "star": 128,
+ "commits": 116,
+ "modify_time": "2017-01-02 15:48:19",
+ "last_release": "1.0.8",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/whid-injector/awesome-go-offensive-tools",
+ "star": 127,
+ "commits": 35,
+ "modify_time": "2019-02-25 08:15:04",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/curtbraz/phishing-api",
+ "star": 127,
+ "commits": 495,
+ "modify_time": "2019-12-06 19:14:33",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/fireeye/duedlligence",
+ "star": 127,
+ "commits": 4,
+ "modify_time": "2019-10-10 18:32:37",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/SecureAuthCorp/pysap",
+ "star": 127,
+ "commits": 740,
+ "modify_time": "2019-11-22 01:17:49",
+ "last_release": "v0.1.17",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/breach-tw/breach.tw",
+ "star": 127,
+ "commits": 176,
+ "modify_time": "2019-11-28 08:43:17",
+ "last_release": "\n v2.4\n ",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/xhak9x/socialphish",
+ "star": 127,
+ "commits": 36,
+ "modify_time": "2018-09-15 22:49:49",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/v3aqb/fwlite",
+ "star": 127,
+ "commits": 20,
+ "modify_time": "2019-10-08 06:58:12",
+ "last_release": "v5-beta20",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ullaakut/camerattack",
+ "star": 127,
+ "commits": 14,
+ "modify_time": "2019-10-04 05:48:35",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/spotify/gcp-audit",
+ "star": 127,
+ "commits": 2,
+ "modify_time": "2018-06-13 11:06:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/shellntel/vcr",
+ "star": 127,
+ "commits": 19,
+ "modify_time": "2016-08-05 04:09:30",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/rust-ammonia/ammonia",
+ "star": 127,
+ "commits": 306,
+ "modify_time": "2019-10-09 23:15:40",
+ "last_release": "v3.0.0",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/rootlabs/nwatch",
+ "star": 127,
+ "commits": null,
+ "modify_time": "2017-12-15 19:28:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/qiyeboy/baseproxy",
+ "star": 127,
+ "commits": 3,
+ "modify_time": "2018-06-22 15:15:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pssss/security-baseline",
+ "star": 127,
+ "commits": 26,
+ "modify_time": "2019-07-23 02:40:00",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/mushorg/glutton",
+ "star": 127,
+ "commits": 185,
+ "modify_time": "2019-07-06 22:06:54",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/mq1n/nomercy",
+ "star": 127,
+ "commits": 26,
+ "modify_time": "2018-12-17 14:20:30",
+ "last_release": "v1.1",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/massung/chip-8",
+ "star": 127,
+ "commits": 135,
+ "modify_time": "2017-12-08 15:48:13",
+ "last_release": "v1.2",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/libyal/libewf",
+ "star": 127,
+ "commits": 1268,
+ "modify_time": "2019-11-20 04:23:47",
+ "last_release": "20171104",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/leezj9671/offensiveinterview",
+ "star": 127,
+ "commits": 55,
+ "modify_time": "2019-03-05 10:47:08",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/l3m0n/whatweb",
+ "star": 127,
+ "commits": 4,
+ "modify_time": "2019-05-09 10:58:25",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/kaniini/antissh",
+ "star": 127,
+ "commits": 88,
+ "modify_time": "2018-09-18 15:42:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jndok/stfusip",
+ "star": 127,
+ "commits": 7,
+ "modify_time": "2016-04-01 15:24:41",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ikotler/hackersh",
+ "star": 127,
+ "commits": 26,
+ "modify_time": "2013-07-28 17:35:04",
+ "last_release": "\n v0.2.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/grrrdog/weird_proxies",
+ "star": 127,
+ "commits": 71,
+ "modify_time": "2019-10-07 11:54:11",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/gitmirar/meltdown-poc",
+ "star": 127,
+ "commits": 5,
+ "modify_time": "2018-01-09 05:59:55",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/gamozolabs/falkervisor_grilled_cheese",
+ "star": 127,
+ "commits": 3,
+ "modify_time": "2018-09-10 06:58:57",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/fox-it/cryptophp",
+ "star": 127,
+ "commits": 25,
+ "modify_time": "2014-12-03 11:39:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fireeye/flare-dbg",
+ "star": 127,
+ "commits": 13,
+ "modify_time": "2017-10-05 20:48:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fi01/cve-2015-3636",
+ "star": 127,
+ "commits": 12,
+ "modify_time": "2015-09-28 10:03:02",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/enovella/r2frida-wiki",
+ "star": 127,
+ "commits": 73,
+ "modify_time": "2019-05-19 18:57:53",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/electrode-io/electrode-csrf-jwt",
+ "star": 127,
+ "commits": 162,
+ "modify_time": "2019-09-20 22:38:07",
+ "last_release": "v1.2.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/davidbuchanan314/pwn-mbr",
+ "star": 127,
+ "commits": 11,
+ "modify_time": "2017-01-26 22:04:51",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/darkarnium/secpub",
+ "star": 127,
+ "commits": 32,
+ "modify_time": "2019-12-09 15:45:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/d0nutptr/sic",
+ "star": 127,
+ "commits": 8,
+ "modify_time": "2019-09-11 22:40:09",
+ "last_release": "",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/cyb0r9/ispy",
+ "star": 127,
+ "commits": 31,
+ "modify_time": "2019-10-01 10:33:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/crowdstrike/crowddetox",
+ "star": 127,
+ "commits": 8,
+ "modify_time": "2013-09-20 16:20:12",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/cisco-talos/file2pcap",
+ "star": 127,
+ "commits": 12,
+ "modify_time": "2019-11-21 15:44:46",
+ "last_release": "1.25",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/chora10/fuzzdomain",
+ "star": 127,
+ "commits": 5,
+ "modify_time": "2017-02-27 08:04:01",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/chago/advmp",
+ "star": 127,
+ "commits": 15,
+ "modify_time": "2015-07-25 05:47:55",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/caijiji/vulscritp",
+ "star": 127,
+ "commits": 9,
+ "modify_time": "2015-12-01 14:46:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bmax121/budhook",
+ "star": 127,
+ "commits": 33,
+ "modify_time": "2018-06-20 11:45:31",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/bet4it/build-an-efficient-pwn-environment",
+ "star": 127,
+ "commits": 1,
+ "modify_time": "2019-07-20 13:08:53",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/baidu-security/openrasp-testcases",
+ "star": 127,
+ "commits": 211,
+ "modify_time": "2019-12-09 03:04:49",
+ "last_release": "v1.1.12",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/b-mueller/smashing-smart-contracts",
+ "star": 127,
+ "commits": 41,
+ "modify_time": "2019-08-12 21:04:57",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/0xpoly/centry",
+ "star": 127,
+ "commits": 72,
+ "modify_time": "2014-06-28 01:52:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/0ang3el/easycsrf",
+ "star": 127,
+ "commits": 2,
+ "modify_time": "2017-12-07 10:09:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sektioneins/sandbox_toolkit",
+ "star": 126,
+ "commits": 12,
+ "modify_time": "2015-11-02 07:51:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/osirislab/Shellcode",
+ "star": 126,
+ "commits": 199,
+ "modify_time": "2016-04-30 05:19:50",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/opensourcesec/Forager",
+ "star": 126,
+ "commits": 115,
+ "modify_time": "2018-01-23 17:50:22",
+ "last_release": "v2.0.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/merces/aleph",
+ "star": 126,
+ "commits": 163,
+ "modify_time": "2015-06-07 14:09:04",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/urshadow/stringobfuscator",
+ "star": 126,
+ "commits": 21,
+ "modify_time": "2018-09-24 07:56:30",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/treehacks/botnet-hackpack",
+ "star": 126,
+ "commits": 25,
+ "modify_time": "2019-04-23 09:02:26",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/terribledev/hardhat",
+ "star": 126,
+ "commits": 44,
+ "modify_time": "2019-02-03 22:23:33",
+ "last_release": "2.1.1",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/takeshixx/redstar-tools",
+ "star": 126,
+ "commits": 21,
+ "modify_time": "2016-09-14 07:19:04",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/spotify/linux",
+ "star": 126,
+ "commits": 171572,
+ "modify_time": "2010-04-05 08:49:21",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/sparksharly/sharly",
+ "star": 126,
+ "commits": 50,
+ "modify_time": "2017-06-19 06:53:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sowdust/searchbook",
+ "star": 126,
+ "commits": 17,
+ "modify_time": "2019-08-01 10:48:30",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/redhatofficial/redhatofficial.github.io",
+ "star": 126,
+ "commits": 420,
+ "modify_time": "2019-11-11 14:48:26",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/pyn3rd/cve-2018-3245",
+ "star": 126,
+ "commits": 7,
+ "modify_time": "2018-10-27 01:41:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pybind/cmake_example",
+ "star": 126,
+ "commits": 18,
+ "modify_time": "2017-08-31 18:50:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nccgroup/accomplice",
+ "star": 126,
+ "commits": 4,
+ "modify_time": "2019-10-15 21:53:03",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/mvelazc0/oriana",
+ "star": 126,
+ "commits": 8,
+ "modify_time": "2019-09-12 02:32:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mritd/idgen",
+ "star": 126,
+ "commits": 85,
+ "modify_time": "2019-05-28 11:08:54",
+ "last_release": "v1.0.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/marcosd4h/memhunter",
+ "star": 126,
+ "commits": 24,
+ "modify_time": "2019-08-22 15:46:34",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/maravento/blackweb",
+ "star": 126,
+ "commits": 95,
+ "modify_time": "2019-11-29 19:09:49",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/lietdai/doom",
+ "star": 126,
+ "commits": 1,
+ "modify_time": "2015-12-01 06:00:22",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/kirtar22/litmus_test",
+ "star": 126,
+ "commits": 107,
+ "modify_time": "2019-09-02 05:29:56",
+ "last_release": "",
+ "lang": "Roff"
+ },
+ {
+ "link": "https://github.com/jakecooper/oneplustwobot",
+ "star": 126,
+ "commits": 87,
+ "modify_time": "2015-10-30 00:27:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hfiref0x/zeroaccess",
+ "star": 126,
+ "commits": 16,
+ "modify_time": "2017-12-18 13:47:15",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hardenedlinux/offensive_poc",
+ "star": 126,
+ "commits": 36,
+ "modify_time": "2018-01-16 08:42:27",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/google/ctfscoreboard",
+ "star": 126,
+ "commits": 627,
+ "modify_time": "2019-10-11 04:03:51",
+ "last_release": "bsidessf-2019-rc1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ex0dus-0x/dedsploit",
+ "star": 126,
+ "commits": 33,
+ "modify_time": "2019-05-23 21:25:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dragonbe/hibp",
+ "star": 126,
+ "commits": 69,
+ "modify_time": "2019-09-30 21:04:15",
+ "last_release": "\n v0.1.1\n ",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/doyler/securitytools",
+ "star": 126,
+ "commits": 47,
+ "modify_time": "2019-09-29 22:46:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/detexploit/detexploit",
+ "star": 126,
+ "commits": 111,
+ "modify_time": "2019-11-23 05:54:28",
+ "last_release": "1.2-P",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/davidjacobson/safetext",
+ "star": 126,
+ "commits": 24,
+ "modify_time": "2019-07-04 16:40:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/danielstjules/blankshield",
+ "star": 126,
+ "commits": 63,
+ "modify_time": "2018-08-23 05:57:25",
+ "last_release": "0.6.3",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/ctxis/rdp-replay",
+ "star": 126,
+ "commits": 10,
+ "modify_time": "2016-06-22 11:38:03",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cisco-talos/fnc-1",
+ "star": 126,
+ "commits": 41,
+ "modify_time": "2018-06-26 16:48:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bobsayshilol/luajit-decomp",
+ "star": 126,
+ "commits": 7,
+ "modify_time": "2013-12-06 03:51:58",
+ "last_release": "",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/atimorin/scada-tools",
+ "star": 126,
+ "commits": 2,
+ "modify_time": "2014-05-26 02:17:03",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/d0g3-lab/h1ve",
+ "star": 125,
+ "commits": 6,
+ "modify_time": "2019-12-02 14:37:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/firmianay/life-long-learner",
+ "star": 125,
+ "commits": 188,
+ "modify_time": "2018-06-08 05:21:52",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/xrkk/awesome-cyber-security",
+ "star": 125,
+ "commits": 5,
+ "modify_time": "2019-11-25 12:44:31",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/maxmeng93/get-free-ss",
+ "star": 125,
+ "commits": 55,
+ "modify_time": "2019-11-23 05:15:31",
+ "last_release": "3.1.2",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/Wisdom/RegEx-DoS",
+ "star": 125,
+ "commits": 8,
+ "modify_time": "2016-06-04 07:40:25",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/yuxiaokui/intranet-penetration",
+ "star": 125,
+ "commits": 16,
+ "modify_time": "2019-11-12 03:26:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vidar-team/hctf2017",
+ "star": 125,
+ "commits": 1,
+ "modify_time": "2017-11-14 13:56:03",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/stamparm/hontel",
+ "star": 125,
+ "commits": 37,
+ "modify_time": "2019-03-05 14:49:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sabri-zaki/easy_hack",
+ "star": 125,
+ "commits": 121,
+ "modify_time": "2018-12-30 16:23:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pwnwiki/webappdefaultsdb",
+ "star": 125,
+ "commits": 5,
+ "modify_time": "2013-03-11 12:41:39",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/projecthorus/radiosonde_auto_rx",
+ "star": 125,
+ "commits": 1075,
+ "modify_time": "2019-10-29 10:36:01",
+ "last_release": "v1.2.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/picoctf/picoctf",
+ "star": 125,
+ "commits": 4763,
+ "modify_time": "2019-11-21 18:51:48",
+ "last_release": "v19",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/philsmd/7z2hashcat",
+ "star": 125,
+ "commits": 68,
+ "modify_time": "2019-12-10 07:33:27",
+ "last_release": "1.3",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/osm0sis/android-busybox-ndk",
+ "star": 125,
+ "commits": 172,
+ "modify_time": "2019-11-02 04:59:59",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/omenscan/achoir",
+ "star": 125,
+ "commits": 294,
+ "modify_time": "2019-12-03 04:56:21",
+ "last_release": "4v.0a",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ns3777k/go-shodan",
+ "star": 125,
+ "commits": 198,
+ "modify_time": "2019-11-24 13:08:37",
+ "last_release": "v2.0.4",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/monoxgas/flyingafalseflag",
+ "star": 125,
+ "commits": 12,
+ "modify_time": "2019-11-08 23:19:26",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/mikefrobbins/powershell",
+ "star": 125,
+ "commits": 162,
+ "modify_time": "2019-08-16 16:58:59",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/leastauthority/ethereum-analyses",
+ "star": 125,
+ "commits": 5,
+ "modify_time": "2015-07-07 16:30:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lctf/lctf2018",
+ "star": 125,
+ "commits": 21,
+ "modify_time": "2018-11-21 12:22:15",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jitbit/aspnetsaml",
+ "star": 125,
+ "commits": 58,
+ "modify_time": "2019-12-02 15:21:21",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/jinmo/ctfs",
+ "star": 125,
+ "commits": 74,
+ "modify_time": "2019-06-25 02:38:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/infoslack/sec-tools",
+ "star": 125,
+ "commits": 28,
+ "modify_time": "2017-07-14 05:42:58",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/infosec-au/little-doctor",
+ "star": 125,
+ "commits": 29,
+ "modify_time": "2016-11-17 01:30:24",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/ikoniaris/kippo-graph",
+ "star": 125,
+ "commits": 255,
+ "modify_time": "2016-12-24 11:24:50",
+ "last_release": "1.5.1",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/gpoulios/ropinjector",
+ "star": 125,
+ "commits": 12,
+ "modify_time": "2017-11-22 11:00:27",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/fireeye/flare-qdb",
+ "star": 125,
+ "commits": 51,
+ "modify_time": "2019-07-21 04:08:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/feross/cs253.stanford.edu",
+ "star": 125,
+ "commits": 105,
+ "modify_time": "2019-12-07 21:53:03",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/exalab/anlinux-resources",
+ "star": 125,
+ "commits": 298,
+ "modify_time": "2019-09-22 06:04:44",
+ "last_release": "\n v2.1\n ",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/emptymonkey/mimic",
+ "star": 125,
+ "commits": 22,
+ "modify_time": "2018-07-07 06:13:01",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/deroko/lldbinit",
+ "star": 125,
+ "commits": 33,
+ "modify_time": "2019-10-14 09:21:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/davisjam/vuln-regex-detector",
+ "star": 125,
+ "commits": 184,
+ "modify_time": "2019-05-09 19:02:53",
+ "last_release": "ASE19-Artifact",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/danigargu/syms2elf",
+ "star": 125,
+ "commits": 10,
+ "modify_time": "2019-04-30 10:20:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/codypierce/pyemu",
+ "star": 125,
+ "commits": 5,
+ "modify_time": "2017-05-26 13:22:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/chg-hou/enmicromsg.db-password-cracker",
+ "star": 125,
+ "commits": 13,
+ "modify_time": "2019-04-12 11:58:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/capt-meelo/lazyrecon",
+ "star": 125,
+ "commits": 56,
+ "modify_time": "2019-02-27 16:27:01",
+ "last_release": "v1.3",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/bwall/bamfdetect",
+ "star": 125,
+ "commits": 66,
+ "modify_time": "2015-12-16 00:16:46",
+ "last_release": "v1.6.12",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/borntoberoot/powershell_ipv4networkscanner",
+ "star": 125,
+ "commits": 122,
+ "modify_time": "2017-08-04 13:22:38",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/aquasecurity/tracee",
+ "star": 124,
+ "commits": 42,
+ "modify_time": "2019-11-27 15:28:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/binarymaster/3wifi",
+ "star": 124,
+ "commits": 480,
+ "modify_time": "2019-10-25 11:10:10",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/lirantal/lockfile-lint",
+ "star": 124,
+ "commits": 84,
+ "modify_time": "2019-12-07 10:55:35",
+ "last_release": "\n lockfile-lint@3.0.3\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/bakerface/wireless-tools",
+ "star": 124,
+ "commits": 168,
+ "modify_time": "2017-01-18 13:38:49",
+ "last_release": "v0.19.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/radareorg/radare2-r2pipe",
+ "star": 124,
+ "commits": 458,
+ "modify_time": "2019-12-04 09:19:21",
+ "last_release": "\n 4.0.0\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/xorrior/raven",
+ "star": 124,
+ "commits": 4,
+ "modify_time": "2019-07-16 04:14:12",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/vtky/swizzler2",
+ "star": 124,
+ "commits": 10,
+ "modify_time": "2017-04-07 10:27:41",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/urule99/jsunpack-n",
+ "star": 124,
+ "commits": 78,
+ "modify_time": "2015-04-02 00:10:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/thelinuxchoice/facebash",
+ "star": 124,
+ "commits": 17,
+ "modify_time": "2018-07-24 12:29:25",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/thekingofduck/mysqlmonitor",
+ "star": 124,
+ "commits": 51,
+ "modify_time": "2019-06-18 04:25:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/t4d/stalkphish",
+ "star": 124,
+ "commits": 60,
+ "modify_time": "2019-11-25 10:56:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sysdream/pysqli",
+ "star": 124,
+ "commits": 21,
+ "modify_time": "2013-03-25 21:51:59",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sundaysec/android-exploits",
+ "star": 124,
+ "commits": 22,
+ "modify_time": "2019-10-08 22:37:51",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/saaramar/deterministic_lfh",
+ "star": 124,
+ "commits": 10,
+ "modify_time": "2019-05-27 21:53:36",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/reider-roque/linpostexp",
+ "star": 124,
+ "commits": 6,
+ "modify_time": "2015-06-16 02:31:17",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/platomav/biosutilities",
+ "star": 124,
+ "commits": 19,
+ "modify_time": "2019-09-24 11:19:30",
+ "last_release": "DPBE-v3.6",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nyan-x-cat/lime-crypter",
+ "star": 124,
+ "commits": 31,
+ "modify_time": "2019-10-02 05:35:34",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/matrixssl/matrixssl",
+ "star": 124,
+ "commits": 63,
+ "modify_time": "2019-09-11 12:38:19",
+ "last_release": "4-2-2-open",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/leezj9671/socialdb_vue_flask",
+ "star": 124,
+ "commits": 59,
+ "modify_time": "2018-11-05 05:51:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lakiw/pcfg_cracker",
+ "star": 124,
+ "commits": 183,
+ "modify_time": "2019-08-25 22:00:10",
+ "last_release": "4.0-rc3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/igio90/uddbg",
+ "star": 124,
+ "commits": 128,
+ "modify_time": "2019-08-14 19:00:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/highmeh/pentest_scripts",
+ "star": 124,
+ "commits": 14,
+ "modify_time": "2019-09-13 19:21:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/grammatech/gtirb",
+ "star": 124,
+ "commits": 977,
+ "modify_time": "2019-11-01 19:58:03",
+ "last_release": "\n v0.1.1\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/dtag-dev-sec/t-pot-autoinstall",
+ "star": 124,
+ "commits": 58,
+ "modify_time": "2018-11-27 15:53:38",
+ "last_release": "3.0",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/davidoren/cuckoosploit",
+ "star": 124,
+ "commits": 5,
+ "modify_time": "2015-08-10 00:31:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/codecracker-tools/megadumper",
+ "star": 124,
+ "commits": 2,
+ "modify_time": "2018-09-16 05:38:19",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/chef-koch/online-privacy-test-resource-list",
+ "star": 124,
+ "commits": 338,
+ "modify_time": "2019-12-07 20:58:40",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/c0mmand3ropsec/cve-2017-10271",
+ "star": 124,
+ "commits": 17,
+ "modify_time": "2018-07-13 18:56:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/brompwnie/uitkyk",
+ "star": 124,
+ "commits": 13,
+ "modify_time": "2018-04-24 09:28:54",
+ "last_release": "V1.1",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/antonlindstrom/passpwn",
+ "star": 124,
+ "commits": 13,
+ "modify_time": "2019-01-17 18:52:17",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/antojoseph/diff-gui",
+ "star": 124,
+ "commits": 20,
+ "modify_time": "2016-11-03 11:23:25",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/alonemonkey/antiantidebug",
+ "star": 124,
+ "commits": 5,
+ "modify_time": "2017-06-25 02:17:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/alienwithin/owasp-mth3l3m3nt-framework",
+ "star": 124,
+ "commits": 72,
+ "modify_time": "2017-08-09 20:48:29",
+ "last_release": "1.2.0",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/adamyaxley/obfuscate",
+ "star": 124,
+ "commits": 27,
+ "modify_time": "2019-11-19 06:47:50",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/alertot/detectem",
+ "star": 123,
+ "commits": 257,
+ "modify_time": "2019-12-07 15:20:14",
+ "last_release": "\n v0.7.1\n ",
+ "lang": "Julia"
+ },
+ {
+ "link": "https://github.com/yahoo/yfuzz",
+ "star": 123,
+ "commits": 19,
+ "modify_time": "2019-10-21 20:08:50",
+ "last_release": "\n v0.0.10\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/wenzel/r2vmi",
+ "star": 123,
+ "commits": 71,
+ "modify_time": "2019-01-06 11:17:21",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/veerendra2/wifi-deauth-attack",
+ "star": 123,
+ "commits": 38,
+ "modify_time": "2019-07-15 10:34:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ucsb-seclab/leakless",
+ "star": 123,
+ "commits": 62,
+ "modify_time": "2015-06-29 13:29:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/steamedfish/gfwiplist",
+ "star": 123,
+ "commits": 1,
+ "modify_time": "2012-12-04 09:30:10",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/stalkr/dns-reverse-proxy",
+ "star": 123,
+ "commits": 25,
+ "modify_time": "2019-08-29 17:12:55",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/spidermate/b-xssrf",
+ "star": 123,
+ "commits": 33,
+ "modify_time": "2019-08-23 10:50:04",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/skyplabs/probequest",
+ "star": 123,
+ "commits": 245,
+ "modify_time": "2019-08-26 00:19:20",
+ "last_release": "\n v0.7.2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/secure-data-analysis-data-sharing/data-analysis",
+ "star": 123,
+ "commits": 130,
+ "modify_time": "2019-09-24 23:00:23",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/salesforce/secure-filters",
+ "star": 123,
+ "commits": 116,
+ "modify_time": "2017-04-18 21:46:26",
+ "last_release": "\n v1.0.5\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/riverloopsec/tumblerf",
+ "star": 123,
+ "commits": 5,
+ "modify_time": "2018-03-15 19:07:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ring04h/dirfuzz",
+ "star": 123,
+ "commits": 10,
+ "modify_time": "2015-05-13 04:11:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/radenvodka/svscanner",
+ "star": 123,
+ "commits": 31,
+ "modify_time": "2019-06-13 23:48:26",
+ "last_release": "1.2",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/radare/radare2ida",
+ "star": 123,
+ "commits": 28,
+ "modify_time": "2019-10-28 10:05:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dsccommunity/xWebAdministration",
+ "star": 123,
+ "commits": 901,
+ "modify_time": "2019-11-15 19:31:43",
+ "last_release": "\n 2.6.0.0-PSGallery\n ",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/pentestmonkey/gateway-finder",
+ "star": 123,
+ "commits": 13,
+ "modify_time": "2015-07-30 19:26:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/owasp-cloud-security/owasp-cloud-security",
+ "star": 123,
+ "commits": 139,
+ "modify_time": "2018-12-07 22:37:39",
+ "last_release": "",
+ "lang": "Gherkin"
+ },
+ {
+ "link": "https://github.com/openmarshall/shortcutss",
+ "star": 123,
+ "commits": 161,
+ "modify_time": "2017-01-13 03:47:35",
+ "last_release": "\n 1.3.2\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/onelogicalmyth/automated-ad-setup",
+ "star": 123,
+ "commits": 20,
+ "modify_time": "2016-10-10 10:31:02",
+ "last_release": "v0.1",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/nyxgeek/o365recon",
+ "star": 123,
+ "commits": 24,
+ "modify_time": "2019-05-17 03:54:04",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/niklasb/3dpwn",
+ "star": 123,
+ "commits": 30,
+ "modify_time": "2019-01-24 15:10:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/niclet/xiaomi_hack",
+ "star": 123,
+ "commits": 17,
+ "modify_time": "2018-04-22 06:12:09",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/nettitude/simplepeloader",
+ "star": 123,
+ "commits": 14,
+ "modify_time": "2019-10-07 08:48:15",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/nccgroup/lazydroid",
+ "star": 123,
+ "commits": 25,
+ "modify_time": "2017-07-26 11:31:19",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/moloch--/csp-bypass",
+ "star": 123,
+ "commits": 24,
+ "modify_time": "2016-02-24 00:03:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/malwares/dangerouszone",
+ "star": 123,
+ "commits": 3,
+ "modify_time": "2016-12-10 04:32:10",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/mahdisafsafi/debugengine",
+ "star": 123,
+ "commits": 42,
+ "modify_time": "2019-01-20 21:36:29",
+ "last_release": "",
+ "lang": "Pascal"
+ },
+ {
+ "link": "https://github.com/livingsocial/keyspace",
+ "star": 123,
+ "commits": 89,
+ "modify_time": "2013-03-21 07:38:57",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/k0rz3n/googlehacking-page",
+ "star": 123,
+ "commits": 37,
+ "modify_time": "2019-08-27 16:13:02",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/jonaslejon/tor-fingerprint",
+ "star": 123,
+ "commits": 5,
+ "modify_time": "2018-09-12 09:02:13",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/jlleitschuh/zoom_vulnerability_poc",
+ "star": 123,
+ "commits": 5,
+ "modify_time": "2019-07-08 15:23:42",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/jerrychan807/wspih",
+ "star": 123,
+ "commits": 78,
+ "modify_time": "2019-05-05 01:57:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jacobsoo/androidslides",
+ "star": 123,
+ "commits": 15,
+ "modify_time": "2014-11-16 06:26:15",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/itm4n/ikeext-privesc",
+ "star": 123,
+ "commits": 20,
+ "modify_time": "2018-10-05 13:24:24",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/inguma/bokken",
+ "star": 123,
+ "commits": 477,
+ "modify_time": "2017-05-18 13:25:32",
+ "last_release": "\n 1.8\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gwen001/s3-buckets-finder",
+ "star": 123,
+ "commits": 48,
+ "modify_time": "2018-06-29 12:05:40",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/graylog2/graylog-plugin-threatintel",
+ "star": 123,
+ "commits": 268,
+ "modify_time": "2019-11-05 13:43:49",
+ "last_release": "\n 3.1.3\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/fuzzitdev/fuzzit",
+ "star": 123,
+ "commits": 214,
+ "modify_time": "2019-11-11 07:11:25",
+ "last_release": "v2.4.77",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/evilcos/python-webshell",
+ "star": 123,
+ "commits": 3,
+ "modify_time": "2012-02-04 14:34:45",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/equalitie/learn2ban",
+ "star": 123,
+ "commits": 14,
+ "modify_time": "2015-11-23 21:11:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/disk0nn3ct/cookiecatcher",
+ "star": 123,
+ "commits": 46,
+ "modify_time": "2013-09-03 16:32:53",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/coolervoid/mosca",
+ "star": 123,
+ "commits": 112,
+ "modify_time": "2018-03-21 13:29:26",
+ "last_release": "\n 0.8\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/chrisfosterelli/dockerrootplease",
+ "star": 123,
+ "commits": 4,
+ "modify_time": "2015-04-22 23:44:08",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/cheetahsec/avmdbg",
+ "star": 123,
+ "commits": 2,
+ "modify_time": "2016-09-20 07:49:41",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/blazeinfosec/pcrappyfuzzer",
+ "star": 123,
+ "commits": 14,
+ "modify_time": "2017-08-29 22:32:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/binspector/binspector",
+ "star": 123,
+ "commits": 75,
+ "modify_time": "2019-04-19 19:09:09",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/0vercl0k/windbg-scripts",
+ "star": 123,
+ "commits": 33,
+ "modify_time": "2019-11-23 03:22:21",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/trustedsec/pivoter",
+ "star": 122,
+ "commits": 1,
+ "modify_time": "2015-08-09 08:07:49",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/wulabing/ssr-manyuser_glzjin_shell",
+ "star": 122,
+ "commits": 50,
+ "modify_time": "2019-01-12 08:32:12",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/hmbsbige/getcndomainsandipv4",
+ "star": 122,
+ "commits": 110,
+ "modify_time": "2019-04-03 15:02:15",
+ "last_release": "5.0",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/fuzzitdev/pythonfuzz",
+ "star": 122,
+ "commits": 11,
+ "modify_time": "2019-11-05 17:28:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nsacyber/Control-Flow-Integrity",
+ "star": 122,
+ "commits": 16,
+ "modify_time": "2017-05-10 21:18:08",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/chef/knife-openstack",
+ "star": 122,
+ "commits": 789,
+ "modify_time": "2019-10-14 22:15:38",
+ "last_release": "\n v2.1.6\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/lifting-bits/codereason",
+ "star": 122,
+ "commits": 24,
+ "modify_time": "2015-09-28 19:43:31",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/zjlywjh001/phrackctf-platform-personal",
+ "star": 122,
+ "commits": 21,
+ "modify_time": "2018-03-27 15:54:17",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/zerosum0x0/runshellcode",
+ "star": 122,
+ "commits": 7,
+ "modify_time": "2017-06-29 23:12:23",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/zachriggle/ida-splode",
+ "star": 122,
+ "commits": 18,
+ "modify_time": "2014-10-10 16:53:40",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/xenocoderce/noisette-obfuscator",
+ "star": 122,
+ "commits": 43,
+ "modify_time": "2018-08-29 15:39:05",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/wossl33/wossl",
+ "star": 122,
+ "commits": 60,
+ "modify_time": "2018-02-18 10:06:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tombkeeper/shellcode_template_in_c",
+ "star": 122,
+ "commits": 4,
+ "modify_time": "2014-01-18 10:08:38",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/silverhack/voyeur",
+ "star": 122,
+ "commits": 1,
+ "modify_time": "2017-03-08 16:48:43",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/raffaele-forte/climber",
+ "star": 122,
+ "commits": 30,
+ "modify_time": "2016-03-31 15:29:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/netflix-skunkworks/policyuniverse",
+ "star": 122,
+ "commits": 65,
+ "modify_time": "2019-10-02 22:31:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/melvinsh/vcsmap",
+ "star": 122,
+ "commits": 47,
+ "modify_time": "2016-11-25 10:24:12",
+ "last_release": "v2.0.2",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/mdiazcl/fuzzbunch-debian",
+ "star": 122,
+ "commits": 32,
+ "modify_time": "2019-10-24 11:22:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mattifestation/bhusa2018_sysmon",
+ "star": 122,
+ "commits": 1,
+ "modify_time": "2018-08-10 15:52:30",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/l0n3c0d3r/ceed",
+ "star": 122,
+ "commits": 7,
+ "modify_time": "2017-01-09 14:28:46",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jamalc0m/wphunter",
+ "star": 122,
+ "commits": 13,
+ "modify_time": "2018-03-23 11:28:33",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/ivildeed/vmw_vmx_overloader",
+ "star": 122,
+ "commits": 10,
+ "modify_time": "2017-04-04 18:18:55",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/isstac/kelinci",
+ "star": 122,
+ "commits": 34,
+ "modify_time": "2018-02-07 05:36:18",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/irsl/adb-backup-apk-injection",
+ "star": 122,
+ "commits": 45,
+ "modify_time": "2015-07-09 12:41:42",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/grazfather/practicalmalwarelabs",
+ "star": 122,
+ "commits": 85,
+ "modify_time": "2016-10-24 17:42:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/f4exb/dsdcc",
+ "star": 122,
+ "commits": 388,
+ "modify_time": "2019-08-22 22:02:54",
+ "last_release": "v1.8.6",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ezequielpereira/gae-rce",
+ "star": 122,
+ "commits": 5,
+ "modify_time": "2018-05-21 10:41:32",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/egebalci/arcanus",
+ "star": 122,
+ "commits": 171,
+ "modify_time": "2018-02-27 09:21:44",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/dschanoeh/socketcand",
+ "star": 122,
+ "commits": 218,
+ "modify_time": "2019-08-09 14:47:07",
+ "last_release": "\n 0.4.2\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/dermotblair/webvulscan",
+ "star": 122,
+ "commits": 17,
+ "modify_time": "2015-08-01 17:04:39",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/damianofalcioni/ip-biter",
+ "star": 122,
+ "commits": 27,
+ "modify_time": "2019-01-29 13:47:01",
+ "last_release": "1.5",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/cn33liz/jsmeter",
+ "star": 122,
+ "commits": 7,
+ "modify_time": "2017-05-25 19:02:14",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/chromium/trickuri",
+ "star": 122,
+ "commits": 70,
+ "modify_time": "2019-09-24 23:31:12",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/chrispetrou/fdsploit",
+ "star": 122,
+ "commits": 24,
+ "modify_time": "2019-10-13 22:04:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/axt/angr-utils",
+ "star": 122,
+ "commits": 124,
+ "modify_time": "2018-12-17 02:35:05",
+ "last_release": "\n v0.5.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/alephsecurity/firehorse",
+ "star": 122,
+ "commits": 23,
+ "modify_time": "2018-01-23 07:49:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/al3xtjames/ghidra-firmware-utils",
+ "star": 122,
+ "commits": 47,
+ "modify_time": "2019-11-14 01:47:08",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/3gstudent/clr-injection",
+ "star": 122,
+ "commits": 23,
+ "modify_time": "2017-10-23 00:22:08",
+ "last_release": "",
+ "lang": "Batchfile"
+ },
+ {
+ "link": "https://github.com/0xbug/orangescan",
+ "star": 122,
+ "commits": null,
+ "modify_time": "2018-02-03 07:12:29",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/xhuvom/darknetfaceid",
+ "star": 121,
+ "commits": 354,
+ "modify_time": "2019-04-03 18:17:52",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ukncsc/zero-trust-architecture",
+ "star": 121,
+ "commits": 6,
+ "modify_time": "2019-12-03 14:07:26",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/cuckoosandbox/cuckoomon",
+ "star": 121,
+ "commits": 372,
+ "modify_time": "2015-12-14 14:09:43",
+ "last_release": "\n cuckoo1.0.1\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/yelp/amira",
+ "star": 121,
+ "commits": 65,
+ "modify_time": "2019-10-11 09:42:48",
+ "last_release": "\n v1.2.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/we5ter/awesome-platforms",
+ "star": 121,
+ "commits": 34,
+ "modify_time": "2017-11-15 02:36:00",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/trendmicro/securecodingdojo",
+ "star": 121,
+ "commits": 313,
+ "modify_time": "2019-11-30 17:09:10",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/tidesec/web_pwd_common_crack",
+ "star": 121,
+ "commits": 11,
+ "modify_time": "2019-05-21 01:19:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/teknogeek/ssrf-sheriff",
+ "star": 121,
+ "commits": 2,
+ "modify_time": "2019-10-14 16:55:34",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/sqlmapproject/udfhack",
+ "star": 121,
+ "commits": 23,
+ "modify_time": "2018-03-11 01:10:56",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/schnocker/hleaker",
+ "star": 121,
+ "commits": 19,
+ "modify_time": "2017-08-12 19:42:16",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/sandysekharan/ctf-tool",
+ "star": 121,
+ "commits": 2,
+ "modify_time": "2016-04-09 14:53:12",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/rgl/windows-2016-vagrant",
+ "star": 121,
+ "commits": 125,
+ "modify_time": "2019-11-26 19:34:06",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/renatahodovan/grammarinator",
+ "star": 121,
+ "commits": 96,
+ "modify_time": "2019-12-05 16:00:42",
+ "last_release": "\n 19.3\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/redhuntlabs/burpsuite-asset_discover",
+ "star": 121,
+ "commits": 13,
+ "modify_time": "2019-11-18 10:17:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/redaelli/imago-forensics",
+ "star": 121,
+ "commits": 82,
+ "modify_time": "2019-09-26 09:49:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rebzzel/kiero",
+ "star": 121,
+ "commits": 21,
+ "modify_time": "2019-11-05 16:31:42",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/rastapasta/pokemon-go-xposed",
+ "star": 121,
+ "commits": 32,
+ "modify_time": "2016-09-20 12:24:30",
+ "last_release": "v2.2",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/qinghuas/ss-panel-and-ss-py-mu",
+ "star": 121,
+ "commits": 298,
+ "modify_time": "2019-01-24 14:13:09",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/dsccommunity/xPSDesiredStateConfiguration",
+ "star": 121,
+ "commits": 1384,
+ "modify_time": "2019-11-30 22:08:51",
+ "last_release": "\n 8.8.0.0-PSGallery\n ",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/powdahound/redis-collectd-plugin",
+ "star": 121,
+ "commits": 87,
+ "modify_time": "2018-09-05 14:14:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/phackt/stager.dll",
+ "star": 121,
+ "commits": 37,
+ "modify_time": "2019-12-02 10:19:52",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/pcapng/pcapng",
+ "star": 121,
+ "commits": 135,
+ "modify_time": "2019-09-25 22:49:58",
+ "last_release": "",
+ "lang": "XSLT"
+ },
+ {
+ "link": "https://github.com/owasp/serverless-goat",
+ "star": 121,
+ "commits": 26,
+ "modify_time": "2019-05-27 17:41:16",
+ "last_release": "\n 1.0.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nagwww/s3-leaks",
+ "star": 121,
+ "commits": 44,
+ "modify_time": "2018-10-31 20:13:11",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/mozillasecurity/fuzzmanager",
+ "star": 121,
+ "commits": 1348,
+ "modify_time": "2019-12-09 01:00:14",
+ "last_release": "0.3.2",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/mazen160/xless",
+ "star": 121,
+ "commits": 13,
+ "modify_time": "2019-10-29 02:05:26",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/malwares/webshell",
+ "star": 121,
+ "commits": 3,
+ "modify_time": "2016-12-10 04:32:21",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/maddiestone/conpresentations",
+ "star": 121,
+ "commits": 20,
+ "modify_time": "2019-11-14 02:49:11",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/maaaaz/crackmapexecwin",
+ "star": 121,
+ "commits": 8,
+ "modify_time": "2016-01-10 13:28:39",
+ "last_release": "v2.2",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/louchaooo/kali-tools-zh",
+ "star": 121,
+ "commits": 9,
+ "modify_time": "2016-08-26 02:48:10",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/liato/android-market-api-py",
+ "star": 121,
+ "commits": 14,
+ "modify_time": "2012-09-16 20:53:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jschicht/mft2csv",
+ "star": 121,
+ "commits": 40,
+ "modify_time": "2019-06-29 21:28:00",
+ "last_release": "",
+ "lang": "AutoIt"
+ },
+ {
+ "link": "https://github.com/joanbono/snorter",
+ "star": 121,
+ "commits": 128,
+ "modify_time": "2018-08-22 06:09:41",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/infodox/exploits",
+ "star": 121,
+ "commits": 11,
+ "modify_time": "2013-09-08 18:11:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/guillaumebort/scasm",
+ "star": 121,
+ "commits": 4,
+ "modify_time": "2016-04-26 14:13:07",
+ "last_release": "",
+ "lang": "Scala"
+ },
+ {
+ "link": "https://github.com/fuzzysecurity/hacksysteam-pskernelpwn",
+ "star": 121,
+ "commits": 11,
+ "modify_time": "2017-04-21 21:59:37",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/feicong/ida_for_mac_green",
+ "star": 121,
+ "commits": 17,
+ "modify_time": "2017-09-23 03:19:05",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/facebookincubator/nvdtools",
+ "star": 121,
+ "commits": 108,
+ "modify_time": "2019-11-28 11:40:56",
+ "last_release": "v0.1.3",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/ehloonion/onionmx",
+ "star": 121,
+ "commits": 56,
+ "modify_time": "2017-12-22 09:02:44",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/dave-theunsub/clamtk",
+ "star": 121,
+ "commits": 104,
+ "modify_time": "2019-02-23 12:01:14",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/cujanovic/content-bruteforcing-wordlist",
+ "star": 121,
+ "commits": 42,
+ "modify_time": "2019-11-05 13:12:50",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ctxis/beemka",
+ "star": 121,
+ "commits": 7,
+ "modify_time": "2019-10-03 11:57:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cloudsec/research",
+ "star": 121,
+ "commits": 22,
+ "modify_time": "2016-08-19 13:09:56",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/brianwrf/winsystemhelper",
+ "star": 121,
+ "commits": 36,
+ "modify_time": "2016-04-25 11:25:33",
+ "last_release": "",
+ "lang": "Batchfile"
+ },
+ {
+ "link": "https://github.com/bob-beck/libtls",
+ "star": 121,
+ "commits": 71,
+ "modify_time": "2018-09-20 11:39:24",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/b3dk7/stegexpose",
+ "star": 121,
+ "commits": 52,
+ "modify_time": "2018-08-14 09:04:08",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/aczid/crypto1_bs",
+ "star": 121,
+ "commits": 113,
+ "modify_time": "2019-05-08 23:17:43",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/a0xnirudh/kurukshetra",
+ "star": 121,
+ "commits": 71,
+ "modify_time": "2018-11-27 16:42:27",
+ "last_release": "v2.0",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/91yun/vpn",
+ "star": 121,
+ "commits": 12,
+ "modify_time": "2016-05-03 04:07:52",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/0vercl0k/blazefox",
+ "star": 121,
+ "commits": 32,
+ "modify_time": "2019-12-09 11:19:50",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/zxsecurity/steamer",
+ "star": 120,
+ "commits": 20,
+ "modify_time": "2017-10-09 20:32:20",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/yaseng/pentest",
+ "star": 120,
+ "commits": 65,
+ "modify_time": "2016-12-01 06:34:12",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/yangbh/hammer",
+ "star": 120,
+ "commits": 162,
+ "modify_time": "2016-05-22 06:46:42",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/xmikos/cryptboot",
+ "star": 120,
+ "commits": 4,
+ "modify_time": "2016-09-09 21:35:29",
+ "last_release": "\n v1.1.0\n ",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/wofeiwo/website-analyzer",
+ "star": 120,
+ "commits": 27,
+ "modify_time": "2017-08-14 02:21:01",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/wavestone-cdt/wavecrack",
+ "star": 120,
+ "commits": 28,
+ "modify_time": "2018-10-12 08:26:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/teamhg-memex/deep-deep",
+ "star": 120,
+ "commits": 256,
+ "modify_time": "2018-05-29 21:30:40",
+ "last_release": "",
+ "lang": "Jupyter Notebook"
+ },
+ {
+ "link": "https://github.com/szcf-weiya/sinaspider",
+ "star": 120,
+ "commits": 7,
+ "modify_time": "2017-09-10 00:05:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/synack/dylibhijack",
+ "star": 120,
+ "commits": 6,
+ "modify_time": "2015-08-17 18:43:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rabbitmask/weblogicscanlot",
+ "star": 120,
+ "commits": 41,
+ "modify_time": "2019-07-28 07:09:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pwntester/jre8u20_rce_gadget",
+ "star": 120,
+ "commits": 1,
+ "modify_time": "2016-07-01 07:31:00",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/nsexceptional/runtime",
+ "star": 120,
+ "commits": 8,
+ "modify_time": "2017-10-25 22:18:12",
+ "last_release": "",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/nixuehan/belial",
+ "star": 120,
+ "commits": 86,
+ "modify_time": "2013-09-12 12:56:18",
+ "last_release": "",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/mostawesomedude/construct",
+ "star": 120,
+ "commits": 122,
+ "modify_time": "2012-03-06 03:56:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mitre/cascade-server",
+ "star": 120,
+ "commits": 13,
+ "modify_time": "2018-11-07 17:39:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mikesiegel/ews-crack",
+ "star": 120,
+ "commits": 7,
+ "modify_time": "2018-07-16 14:51:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/marsyy/littl_tools",
+ "star": 120,
+ "commits": 42,
+ "modify_time": "2018-01-31 10:44:30",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/lxdcn/nepackettunnelvpndemo",
+ "star": 120,
+ "commits": 19,
+ "modify_time": "2017-12-27 10:17:54",
+ "last_release": "",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/kyhsgeekcode/android-disassembler",
+ "star": 120,
+ "commits": 199,
+ "modify_time": "2019-11-24 11:54:27",
+ "last_release": "v1.6.1-pre",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/kanishkarj/snoopy",
+ "star": 120,
+ "commits": 44,
+ "modify_time": "2019-07-08 19:22:59",
+ "last_release": "",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/jyny/pasc2at",
+ "star": 120,
+ "commits": 34,
+ "modify_time": "2015-03-22 17:57:28",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/jimstudt/ook-decoder",
+ "star": 120,
+ "commits": 59,
+ "modify_time": "2018-05-09 02:00:09",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/itskindred/portpush",
+ "star": 120,
+ "commits": 10,
+ "modify_time": "2019-01-22 00:40:53",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/intel/generic-sensor-demos",
+ "star": 120,
+ "commits": 101,
+ "modify_time": "2019-10-12 19:12:47",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/hasherezade/tiny_tracer",
+ "star": 120,
+ "commits": 36,
+ "modify_time": "2019-07-08 16:14:43",
+ "last_release": "1.1",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/grunny/zap-cli",
+ "star": 120,
+ "commits": 109,
+ "modify_time": "2018-12-31 05:44:36",
+ "last_release": "v0.10.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/glacierw/mba",
+ "star": 120,
+ "commits": 235,
+ "modify_time": "2017-06-01 12:43:24",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/gasche/popl2016-papers",
+ "star": 120,
+ "commits": 134,
+ "modify_time": "2016-11-01 21:22:18",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/exp-db/ai-driven-waf",
+ "star": 120,
+ "commits": 6,
+ "modify_time": "2017-04-06 06:04:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/duo-labs/phinn",
+ "star": 120,
+ "commits": 2,
+ "modify_time": "2017-07-25 22:17:32",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/dimopouloselias/alpc-mmc-uac-bypass",
+ "star": 120,
+ "commits": 7,
+ "modify_time": "2019-04-05 20:56:42",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cylancevulnresearch/reflectivedllrefresher",
+ "star": 120,
+ "commits": 8,
+ "modify_time": "2018-09-19 20:59:33",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cllunsford/aws-signing-proxy",
+ "star": 120,
+ "commits": 58,
+ "modify_time": "2018-10-17 16:42:37",
+ "last_release": "0.2.2",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/changeofpace/overwatch-dump-fix",
+ "star": 120,
+ "commits": 34,
+ "modify_time": "2019-09-01 02:49:32",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/c0ny1/workscripts",
+ "star": 120,
+ "commits": 10,
+ "modify_time": "2019-05-29 04:38:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/byt3bl33d3r/ansibleplaybooks",
+ "star": 120,
+ "commits": 8,
+ "modify_time": "2019-03-15 17:21:23",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/breenmachine/javaunserializeexploits",
+ "star": 120,
+ "commits": 2,
+ "modify_time": "2015-11-06 16:35:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/breakingmalware/selfie",
+ "star": 120,
+ "commits": 5,
+ "modify_time": "2015-05-27 20:07:15",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ashleysommer/sanic-cors",
+ "star": 120,
+ "commits": 391,
+ "modify_time": "2019-09-18 23:47:35",
+ "last_release": "\n 0.9.9.post3\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/appnician/pastor",
+ "star": 120,
+ "commits": 17,
+ "modify_time": "2014-08-21 16:16:00",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/walkor/php-socks5",
+ "star": 119,
+ "commits": 22,
+ "modify_time": "2018-06-20 05:07:48",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/neo23x0/vti-dorks",
+ "star": 119,
+ "commits": 15,
+ "modify_time": "2019-09-03 09:39:08",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/Cyb0r9/winspy",
+ "star": 119,
+ "commits": 44,
+ "modify_time": "2018-10-31 15:45:01",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/imfht/educn-sqlScan",
+ "star": 119,
+ "commits": 17,
+ "modify_time": "2018-12-04 14:12:50",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/klsecservices/bat-armor",
+ "star": 119,
+ "commits": 5,
+ "modify_time": "2018-02-01 13:54:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zyantific/retypedef",
+ "star": 119,
+ "commits": 15,
+ "modify_time": "2015-01-03 17:04:51",
+ "last_release": "v1.0.2",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/xiangbab/web-hack",
+ "star": 119,
+ "commits": 37,
+ "modify_time": "2019-06-18 08:10:23",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/winheapexplorer/winheap-explorer",
+ "star": 119,
+ "commits": 27,
+ "modify_time": "2018-08-27 19:49:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/williballenthin/indxparse",
+ "star": 119,
+ "commits": 170,
+ "modify_time": "2018-10-01 17:20:38",
+ "last_release": "\n v1.2.2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vishnudxb/automated-pentest",
+ "star": 119,
+ "commits": 9,
+ "modify_time": "2019-03-27 13:48:56",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/vanhoefm/blackhat17-pocs",
+ "star": 119,
+ "commits": 23,
+ "modify_time": "2018-10-12 09:06:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/teamhg-memex/aquarium",
+ "star": 119,
+ "commits": 35,
+ "modify_time": "2018-05-29 21:29:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/stephenbrannon/iocextractor",
+ "star": 119,
+ "commits": 35,
+ "modify_time": "2013-09-24 18:50:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/stealth/lophttpd",
+ "star": 119,
+ "commits": 225,
+ "modify_time": "2019-11-06 13:16:58",
+ "last_release": "\n lophttpd-1.05s\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ryanries/passfiltex",
+ "star": 119,
+ "commits": 37,
+ "modify_time": "2019-07-24 22:21:20",
+ "last_release": "v1.1.8",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/packz/ropeme",
+ "star": 119,
+ "commits": 4,
+ "modify_time": "2016-04-23 08:15:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/p0w3rsh3ll/autoruns",
+ "star": 119,
+ "commits": 85,
+ "modify_time": "2019-02-25 21:08:15",
+ "last_release": "v13.94",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/neuroo/grabber",
+ "star": 119,
+ "commits": 2,
+ "modify_time": "2016-09-14 07:49:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mwsrc/njrat",
+ "star": 119,
+ "commits": 1,
+ "modify_time": "2016-12-24 07:54:28",
+ "last_release": "",
+ "lang": "Visual Basic .NET"
+ },
+ {
+ "link": "https://github.com/mniip/spectre-meltdown-poc",
+ "star": 119,
+ "commits": 14,
+ "modify_time": "2018-01-07 05:16:37",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/misp/misp-taxonomies",
+ "star": 119,
+ "commits": 792,
+ "modify_time": "2019-12-02 10:00:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mawenjian/china-cdn-domain-whitelist",
+ "star": 119,
+ "commits": 24,
+ "modify_time": "2017-10-10 11:23:07",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/jzadeh/chiron-elk",
+ "star": 119,
+ "commits": 55,
+ "modify_time": "2019-03-20 11:31:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/joyqi/socket-pipe",
+ "star": 119,
+ "commits": 44,
+ "modify_time": "2018-05-17 03:50:10",
+ "last_release": "",
+ "lang": "CoffeeScript"
+ },
+ {
+ "link": "https://github.com/intel/opencl-intercept-layer",
+ "star": 119,
+ "commits": 183,
+ "modify_time": "2019-12-10 06:48:39",
+ "last_release": "v2.2.1",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/hydrabus/hydrafw",
+ "star": 119,
+ "commits": 658,
+ "modify_time": "2019-10-23 18:27:44",
+ "last_release": "v0.9-beta",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/harvard-itsecurity/docker-misp",
+ "star": 119,
+ "commits": 53,
+ "modify_time": "2019-11-21 02:53:21",
+ "last_release": "",
+ "lang": "Dockerfile"
+ },
+ {
+ "link": "https://github.com/ghostmanager/shepherd",
+ "star": 119,
+ "commits": 8,
+ "modify_time": "2019-01-24 18:04:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fuzzysecurity/fermion",
+ "star": 119,
+ "commits": 19,
+ "modify_time": "2019-12-01 19:50:47",
+ "last_release": "v0.7",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/fergarrui/ethereum-security",
+ "star": 119,
+ "commits": 28,
+ "modify_time": "2019-11-10 18:58:31",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/fengxuangit/dede_exp_collect",
+ "star": 119,
+ "commits": 9,
+ "modify_time": "2016-05-27 11:30:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/erdiaker/torrequest",
+ "star": 119,
+ "commits": 5,
+ "modify_time": "2018-10-11 13:23:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/earthquake/universaldvc",
+ "star": 119,
+ "commits": 27,
+ "modify_time": "2018-03-24 18:57:37",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/cihanmehmet/sub.sh",
+ "star": 119,
+ "commits": 40,
+ "modify_time": "2019-12-07 21:07:44",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/alecmuffett/the-onion-diaries",
+ "star": 119,
+ "commits": 46,
+ "modify_time": "2017-09-27 20:27:37",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/akaion/jupiter",
+ "star": 119,
+ "commits": 15,
+ "modify_time": "2019-08-09 12:50:26",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/a-dma/yubitouch",
+ "star": 119,
+ "commits": 17,
+ "modify_time": "2019-11-04 08:08:49",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/saelo/35c3ctf",
+ "star": 118,
+ "commits": 1,
+ "modify_time": "2018-12-30 12:12:26",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/googleprojectzero/drsancov",
+ "star": 118,
+ "commits": 1,
+ "modify_time": "2019-09-02 09:53:36",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/shadowsocks/shadowsocks-hub",
+ "star": 118,
+ "commits": 19,
+ "modify_time": "2018-10-03 10:38:20",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/jgilhutton/PyxieWPS",
+ "star": 118,
+ "commits": 82,
+ "modify_time": "2019-11-11 21:43:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/WiPi-Hunter/PiFinger",
+ "star": 118,
+ "commits": 48,
+ "modify_time": "2018-07-03 16:38:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/yt1g3r/cve-2018-8174_exp",
+ "star": 118,
+ "commits": 2,
+ "modify_time": "2018-05-30 03:32:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/timwr/cve-2014-3153",
+ "star": 118,
+ "commits": 10,
+ "modify_time": "2017-04-25 07:23:56",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/tanjiti/icstools",
+ "star": 118,
+ "commits": null,
+ "modify_time": "2018-07-05 15:04:22",
+ "last_release": "",
+ "lang": "lua"
+ },
+ {
+ "link": "https://github.com/skelsec/pypykatz_server",
+ "star": 118,
+ "commits": 9,
+ "modify_time": "2019-03-15 17:57:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/shipcod3/mazda_getinfo",
+ "star": 118,
+ "commits": 23,
+ "modify_time": "2017-08-10 19:20:36",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/securityfirst/umbrella_android",
+ "star": 118,
+ "commits": 983,
+ "modify_time": "2019-03-10 06:55:35",
+ "last_release": "v0.8.0-beta",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/rootkiter/earthworm",
+ "star": 118,
+ "commits": 5,
+ "modify_time": "2019-01-03 05:15:43",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/ridter/mailget",
+ "star": 118,
+ "commits": 1,
+ "modify_time": "2018-07-05 16:21:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/radenvodka/recsech",
+ "star": 118,
+ "commits": 116,
+ "modify_time": "2019-12-07 09:26:56",
+ "last_release": "1.6.0",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/meatballs1/burp-extensions",
+ "star": 118,
+ "commits": 30,
+ "modify_time": "2013-07-23 18:02:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/malus-security/sandblaster",
+ "star": 118,
+ "commits": 4,
+ "modify_time": "2017-12-25 18:20:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/m8r0wn/crosslinked",
+ "star": 118,
+ "commits": 16,
+ "modify_time": "2019-11-11 15:47:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/liqinew/myutils",
+ "star": 118,
+ "commits": 21,
+ "modify_time": "2018-10-24 08:58:56",
+ "last_release": "V.1.1.7",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/hardenedlinux/stig-4-debian",
+ "star": 118,
+ "commits": 95,
+ "modify_time": "2019-07-01 21:09:31",
+ "last_release": "V2.0",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/hackstoic/eqgrp-free-file",
+ "star": 118,
+ "commits": 13,
+ "modify_time": "2016-10-09 13:11:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/furduhlutur/yar",
+ "star": 118,
+ "commits": 91,
+ "modify_time": "2019-11-15 14:12:37",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/endgameinc/clrguard",
+ "star": 118,
+ "commits": 6,
+ "modify_time": "2018-04-02 14:06:54",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/edoverflow/proof-of-concepts",
+ "star": 118,
+ "commits": 26,
+ "modify_time": "2019-11-06 11:45:48",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/domainaware/parsedmarc",
+ "star": 118,
+ "commits": 681,
+ "modify_time": "2019-12-06 00:50:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/danmcinerney/pymetasploit3",
+ "star": 118,
+ "commits": 72,
+ "modify_time": "2019-09-09 16:17:18",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/d4rkcat/handshaker",
+ "star": 118,
+ "commits": 1,
+ "modify_time": "2015-01-12 22:29:39",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/cr4sh/ioctlfuzzer",
+ "star": 118,
+ "commits": 7,
+ "modify_time": "2011-12-12 19:52:44",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/containers/udica",
+ "star": 118,
+ "commits": 144,
+ "modify_time": "2019-11-11 11:53:16",
+ "last_release": "v0.2.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/amossys/memitm",
+ "star": 118,
+ "commits": 12,
+ "modify_time": "2018-10-08 09:52:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/meliot/shcheck",
+ "star": 117,
+ "commits": 64,
+ "modify_time": "2019-11-28 19:19:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/willphillipscvdemo/raspberry-pi-camera-motion-detection.",
+ "star": 117,
+ "commits": 2,
+ "modify_time": "2018-05-07 21:58:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vulnerator/vulnerator",
+ "star": 117,
+ "commits": 138,
+ "modify_time": "2018-07-17 00:26:10",
+ "last_release": "v6.1.9",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/violentshell/rollmac",
+ "star": 117,
+ "commits": 14,
+ "modify_time": "2017-01-26 23:41:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ulissescastro/linux-native-backdoors",
+ "star": 117,
+ "commits": 32,
+ "modify_time": "2015-06-19 15:55:34",
+ "last_release": "",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/tutumcloud/ngrok",
+ "star": 117,
+ "commits": 313,
+ "modify_time": "2016-02-12 10:36:15",
+ "last_release": "\n 1.7.1\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/turing-technician/virtualfasthook",
+ "star": 117,
+ "commits": 9,
+ "modify_time": "2019-03-25 01:52:05",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/thom-s/netsec-ps-scripts",
+ "star": 117,
+ "commits": 51,
+ "modify_time": "2019-08-31 15:30:06",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/theori-io/zer0con2018_singi",
+ "star": 117,
+ "commits": 3,
+ "modify_time": "2018-04-01 02:26:06",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/sysml/clickos",
+ "star": 117,
+ "commits": 10469,
+ "modify_time": "2017-10-04 15:32:34",
+ "last_release": "v0.2",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/squiffy/masochist",
+ "star": 117,
+ "commits": 37,
+ "modify_time": "2015-01-03 05:43:15",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/spoofzu/deepviolet",
+ "star": 117,
+ "commits": 726,
+ "modify_time": "2019-07-19 03:52:14",
+ "last_release": "DeepViolet-5.1.16",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/shellntel/backdoors",
+ "star": 117,
+ "commits": 7,
+ "modify_time": "2015-06-12 16:56:04",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/saucer-man/saucerframe",
+ "star": 117,
+ "commits": 227,
+ "modify_time": "2019-11-25 13:06:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rednaga/native-shim",
+ "star": 117,
+ "commits": 19,
+ "modify_time": "2019-04-16 22:44:18",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/rafaeltoledo/android-security",
+ "star": 117,
+ "commits": 10,
+ "modify_time": "2017-05-09 15:14:31",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/perfectblue/ctf-writeups",
+ "star": 117,
+ "commits": 260,
+ "modify_time": "2019-12-03 08:01:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/patpadgett/corkscrew",
+ "star": 117,
+ "commits": 9,
+ "modify_time": "2019-01-11 17:17:17",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/nitr4x/whichcdn",
+ "star": 117,
+ "commits": 22,
+ "modify_time": "2017-05-05 09:42:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nccgroup/hodor",
+ "star": 117,
+ "commits": 1,
+ "modify_time": "2016-08-31 01:44:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/javelinnetworks/ir-tools",
+ "star": 117,
+ "commits": 14,
+ "modify_time": "2017-07-10 12:05:51",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/hugsy/stuff",
+ "star": 117,
+ "commits": 224,
+ "modify_time": "2019-10-05 18:15:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/honeynet/cuckooml",
+ "star": 117,
+ "commits": 5360,
+ "modify_time": "2016-12-26 23:42:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hadynz/xss-keylogger",
+ "star": 117,
+ "commits": 7,
+ "modify_time": "2014-10-26 11:16:09",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/gridsync/gridsync",
+ "star": 117,
+ "commits": 3402,
+ "modify_time": "2019-11-28 17:40:37",
+ "last_release": "v0.4.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gdssecurity/jetleak-testing-script",
+ "star": 117,
+ "commits": 7,
+ "modify_time": "2015-02-25 06:29:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/functionclub/uping",
+ "star": 117,
+ "commits": 10,
+ "modify_time": "2018-02-10 01:39:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ecapuano/web-traffic-generator",
+ "star": 117,
+ "commits": 17,
+ "modify_time": "2017-11-12 21:16:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dholm/dotgdb",
+ "star": 117,
+ "commits": 42,
+ "modify_time": "2016-04-30 16:20:21",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/dhayalanb/windows-php-reverse-shell",
+ "star": 117,
+ "commits": 5,
+ "modify_time": "2017-01-10 21:20:38",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/danmcinerney/device-pharmer",
+ "star": 117,
+ "commits": 40,
+ "modify_time": "2019-05-29 23:35:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cyberark/secretless-broker",
+ "star": 117,
+ "commits": 1420,
+ "modify_time": "2019-12-06 23:50:39",
+ "last_release": "v1.4.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/cvvt/dumpdex",
+ "star": 117,
+ "commits": 21,
+ "modify_time": "2016-05-11 14:05:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bsidessf/ctf-2017-release",
+ "star": 117,
+ "commits": 7,
+ "modify_time": "2017-08-15 03:59:59",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/bo0om/safiler",
+ "star": 117,
+ "commits": 12,
+ "modify_time": "2018-10-22 20:39:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bastibl/gr-keyfob",
+ "star": 117,
+ "commits": 18,
+ "modify_time": "2019-08-26 11:30:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/auth0/lock.android",
+ "star": 117,
+ "commits": 1111,
+ "modify_time": "2019-10-26 00:04:03",
+ "last_release": "\n 2.16.0\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/aramrami/owasp-csrfguard",
+ "star": 117,
+ "commits": 155,
+ "modify_time": "2019-11-08 05:06:54",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/aprosvetova/xiaomi-kettle",
+ "star": 117,
+ "commits": 8,
+ "modify_time": "2018-11-29 18:54:23",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/adrianyy/rw_socket_driver",
+ "star": 117,
+ "commits": 3,
+ "modify_time": "2019-02-22 15:23:44",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/0xphoenix/mazewalker",
+ "star": 117,
+ "commits": 25,
+ "modify_time": "2018-03-04 11:40:57",
+ "last_release": "v0.2",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/lincolnhard/openpose-darknet",
+ "star": 116,
+ "commits": 12,
+ "modify_time": "2018-11-09 09:43:55",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ircmaxell/stauros",
+ "star": 116,
+ "commits": 5,
+ "modify_time": "2016-09-07 18:16:55",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/cisco-talos/vboxhardening",
+ "star": 116,
+ "commits": 11,
+ "modify_time": "2017-04-19 09:47:28",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/babylonhealth/certificate-transparency-android",
+ "star": 116,
+ "commits": 193,
+ "modify_time": "2019-11-19 09:01:01",
+ "last_release": "0.2.0",
+ "lang": "Kotlin"
+ },
+ {
+ "link": "https://github.com/ze0r/cve-2018-8639-exp",
+ "star": 116,
+ "commits": 13,
+ "modify_time": "2019-04-08 08:26:25",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/y1ng1996/f-scrack",
+ "star": 116,
+ "commits": 11,
+ "modify_time": "2016-11-11 01:15:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xerub/idastuff",
+ "star": 116,
+ "commits": 20,
+ "modify_time": "2018-10-02 00:42:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/victims/victims-cve-db",
+ "star": 116,
+ "commits": 286,
+ "modify_time": "2018-11-12 11:15:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tylabs/quicksand_lite",
+ "star": 116,
+ "commits": 29,
+ "modify_time": "2019-02-23 14:45:10",
+ "last_release": "1.01.004",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/tide-emergency/yingji",
+ "star": 116,
+ "commits": 51,
+ "modify_time": "2019-11-15 08:27:51",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/tarlogicsecurity/tickey",
+ "star": 116,
+ "commits": 4,
+ "modify_time": "2019-05-28 15:07:24",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/tandasat/dotnethooking",
+ "star": 116,
+ "commits": 5,
+ "modify_time": "2018-02-09 22:14:20",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/t94j0/airmaster",
+ "star": 116,
+ "commits": 21,
+ "modify_time": "2018-10-22 22:25:46",
+ "last_release": "v1.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/skylined/edgedbg",
+ "star": 116,
+ "commits": 142,
+ "modify_time": "2018-05-28 18:19:54",
+ "last_release": "2016.12.30.1421",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/shubhampathak/autosetup",
+ "star": 116,
+ "commits": 13,
+ "modify_time": "2019-09-03 06:27:17",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/shiva-spampot/shiva",
+ "star": 116,
+ "commits": 111,
+ "modify_time": "2016-06-16 09:55:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/servian/aws-auto-remediate",
+ "star": 116,
+ "commits": 103,
+ "modify_time": "2019-07-24 01:04:10",
+ "last_release": "v1.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/secmobi/amatutor",
+ "star": 116,
+ "commits": 96,
+ "modify_time": "2012-08-09 11:25:02",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/roflsandwich/chrome-password-dumper",
+ "star": 116,
+ "commits": 16,
+ "modify_time": "2019-08-26 16:26:29",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/nospaceships/raw-socket-sniffer",
+ "star": 116,
+ "commits": 11,
+ "modify_time": "2018-10-01 21:24:32",
+ "last_release": "\n 2.1.0\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/nccgroup/decoder-improved",
+ "star": 116,
+ "commits": 81,
+ "modify_time": "2019-12-01 04:13:10",
+ "last_release": "v1.2.3",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/moreseclab/ddg_malware_clean_tool",
+ "star": 116,
+ "commits": 12,
+ "modify_time": "2019-06-04 08:33:59",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/melonwxd/elfhooker",
+ "star": 116,
+ "commits": 14,
+ "modify_time": "2018-12-13 02:12:30",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/markmckinnon/autopsy-plugins",
+ "star": 116,
+ "commits": 110,
+ "modify_time": "2019-10-31 00:05:09",
+ "last_release": "1.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mandatoryprogrammer/xsshunter_client",
+ "star": 116,
+ "commits": 8,
+ "modify_time": "2016-04-22 18:00:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/linhlhq/cve-2019-0604",
+ "star": 116,
+ "commits": 5,
+ "modify_time": "2019-03-22 05:45:37",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/landgrey/cve-2018-2894",
+ "star": 116,
+ "commits": 6,
+ "modify_time": "2018-07-20 12:46:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/joelverhagen/torsharp",
+ "star": 116,
+ "commits": 161,
+ "modify_time": "2019-11-24 17:43:09",
+ "last_release": "\n 2.2.0\n ",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/jin10086/ico-spider",
+ "star": 116,
+ "commits": 11,
+ "modify_time": "2018-09-22 03:58:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/iaik/drama",
+ "star": 116,
+ "commits": 9,
+ "modify_time": "2017-08-23 19:00:10",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/graniet/inspector",
+ "star": 116,
+ "commits": 32,
+ "modify_time": "2018-10-02 15:54:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/govanguard/list-pentest-tools",
+ "star": 116,
+ "commits": 26,
+ "modify_time": "2019-10-29 19:12:23",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/gdabah/distormx",
+ "star": 116,
+ "commits": 3,
+ "modify_time": "2016-07-01 23:29:55",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/evilsocket/dirsearch",
+ "star": 116,
+ "commits": 30,
+ "modify_time": "2017-08-04 17:42:45",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/dannagle/packetsender-android",
+ "star": 116,
+ "commits": 6,
+ "modify_time": "2018-06-01 01:40:00",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/d00rt/emotet_research",
+ "star": 116,
+ "commits": 3,
+ "modify_time": "2019-01-05 11:05:25",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/critters/twang",
+ "star": 116,
+ "commits": 10,
+ "modify_time": "2015-11-08 00:07:06",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/cr4sh/s6_pcie_microblaze",
+ "star": 116,
+ "commits": 10,
+ "modify_time": "2019-12-06 15:02:51",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/coffeehb/struts2_check",
+ "star": 116,
+ "commits": 8,
+ "modify_time": "2018-01-23 06:30:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/chaoslawful/tcc",
+ "star": 116,
+ "commits": 1,
+ "modify_time": "2010-06-27 15:02:48",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cdhowie/bitcoin-mining-proxy",
+ "star": 116,
+ "commits": 93,
+ "modify_time": "2011-07-07 02:58:01",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/caomulaodao/xss-filter-evasion-cheat-sheet-cn",
+ "star": 116,
+ "commits": 18,
+ "modify_time": "2014-05-18 10:29:54",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/brannondorsey/distributed-password-cracking",
+ "star": 116,
+ "commits": 7,
+ "modify_time": "2018-10-20 19:22:02",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/b4rtik/metasploit-execute-assembly",
+ "star": 116,
+ "commits": 37,
+ "modify_time": "2019-11-24 19:12:35",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ambionics/magento-exploits",
+ "star": 116,
+ "commits": 5,
+ "modify_time": "2019-03-29 14:16:59",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/abhi-r3v0/evabs",
+ "star": 116,
+ "commits": 27,
+ "modify_time": "2019-11-28 07:53:39",
+ "last_release": "\n v3\n ",
+ "lang": "CMake"
+ },
+ {
+ "link": "https://github.com/Cisco-Talos/TeslaDecrypt",
+ "star": 115,
+ "commits": 61,
+ "modify_time": "2016-06-08 20:27:39",
+ "last_release": "1.0",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/vallejocc/Reverse-Engineering-Arsenal",
+ "star": 115,
+ "commits": 33,
+ "modify_time": "2018-10-15 09:28:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/yanncam/exe2powershell",
+ "star": 115,
+ "commits": 14,
+ "modify_time": "2016-09-14 22:21:27",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/woj-ciech/pepe",
+ "star": 115,
+ "commits": 13,
+ "modify_time": "2019-04-12 13:48:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wknapik/vpnfailsafe",
+ "star": 115,
+ "commits": 43,
+ "modify_time": "2018-08-18 23:08:07",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/williballenthin/process-forest",
+ "star": 115,
+ "commits": 39,
+ "modify_time": "2018-04-02 22:30:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wifiphisher/extra-phishing-pages",
+ "star": 115,
+ "commits": 47,
+ "modify_time": "2018-12-23 18:34:56",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/webbreacher/tilde_enum",
+ "star": 115,
+ "commits": 93,
+ "modify_time": "2019-01-27 14:09:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/verctor/cs_xor64",
+ "star": 115,
+ "commits": 6,
+ "modify_time": "2018-10-14 12:13:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/valentinbreiz/ps4-linux-loader",
+ "star": 115,
+ "commits": 33,
+ "modify_time": "2018-05-30 20:16:04",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/therealsaumil/armx",
+ "star": 115,
+ "commits": 20,
+ "modify_time": "2019-11-23 09:16:49",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/theflakes/ultimate-forensics-vm",
+ "star": 115,
+ "commits": 74,
+ "modify_time": "2018-07-05 22:54:40",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/rtrouton/payload-free-package-creator",
+ "star": 115,
+ "commits": 25,
+ "modify_time": "2019-04-10 19:54:18",
+ "last_release": "2.3",
+ "lang": "AppleScript"
+ },
+ {
+ "link": "https://github.com/penafieljlm/inquisitor",
+ "star": 115,
+ "commits": 28,
+ "modify_time": "2017-07-29 18:18:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/njfox/java-deserialization-exploit",
+ "star": 115,
+ "commits": 35,
+ "modify_time": "2016-10-19 17:01:10",
+ "last_release": "\n v0.5.2-alpha\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/n4nu/reversing-challenges-list",
+ "star": 115,
+ "commits": 19,
+ "modify_time": "2019-07-03 08:11:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/metalnem/sharpfuzz",
+ "star": 115,
+ "commits": 389,
+ "modify_time": "2019-12-07 12:02:12",
+ "last_release": "\n v1.6.1\n ",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/mbechler/serianalyzer",
+ "star": 115,
+ "commits": 17,
+ "modify_time": "2017-04-17 11:33:08",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/m4sc3r4n0/avoidz",
+ "star": 115,
+ "commits": 17,
+ "modify_time": "2017-06-12 23:39:18",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/lucifer1993/alb",
+ "star": 115,
+ "commits": 15,
+ "modify_time": "2019-01-08 12:28:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lcatro/vuln_javascript",
+ "star": 115,
+ "commits": 52,
+ "modify_time": "2016-06-25 08:47:22",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/kmkz/exploit",
+ "star": 115,
+ "commits": 67,
+ "modify_time": "2019-12-05 14:19:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/khast3x/offensive-dockerfiles",
+ "star": 115,
+ "commits": 56,
+ "modify_time": "2018-11-16 21:25:41",
+ "last_release": "1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jpdias/botnet-lab",
+ "star": 115,
+ "commits": 109,
+ "modify_time": "2019-11-11 13:07:24",
+ "last_release": "0.1.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jko/nsearch",
+ "star": 115,
+ "commits": 353,
+ "modify_time": "2017-11-25 16:07:50",
+ "last_release": "v0.4-alpha",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jerryhoff/webgoat.net",
+ "star": 115,
+ "commits": 127,
+ "modify_time": "2014-02-22 16:00:50",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/jcqsteven/ghosttunnel",
+ "star": 115,
+ "commits": 47,
+ "modify_time": "2019-09-17 02:24:45",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/jas502n/cve-2018-17182",
+ "star": 115,
+ "commits": 11,
+ "modify_time": "2018-09-29 17:03:33",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jamesjgoodwin/wreckuests",
+ "star": 115,
+ "commits": 75,
+ "modify_time": "2018-11-14 14:04:06",
+ "last_release": "0.1.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ice799/ltrace",
+ "star": 115,
+ "commits": 315,
+ "modify_time": "2011-01-06 19:53:13",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/harsaroopdhillon/spectreexploit",
+ "star": 115,
+ "commits": null,
+ "modify_time": "2018-01-25 22:43:50",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/h01/proxyscanner",
+ "star": 115,
+ "commits": 6,
+ "modify_time": "2014-11-27 07:16:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/govolution/avepoc",
+ "star": 115,
+ "commits": 42,
+ "modify_time": "2019-04-20 21:17:34",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/gfwlist/tinylist",
+ "star": 115,
+ "commits": 9,
+ "modify_time": "2017-11-16 03:13:06",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/fox-it/invoke-credentialphisher",
+ "star": 115,
+ "commits": 11,
+ "modify_time": "2018-12-18 17:47:31",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/demi6od/chromefuzzer",
+ "star": 115,
+ "commits": 10,
+ "modify_time": "2015-07-18 00:46:54",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/cantoolz/cantoolz",
+ "star": 115,
+ "commits": 424,
+ "modify_time": "2017-11-29 12:59:25",
+ "last_release": "v3.7.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/c0d3z3r0/sudo-cve-2017-1000367",
+ "star": 115,
+ "commits": 27,
+ "modify_time": "2017-06-05 19:53:00",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/bartblaze/disable-intel-amt",
+ "star": 115,
+ "commits": 25,
+ "modify_time": "2017-05-18 19:26:26",
+ "last_release": "",
+ "lang": "Batchfile"
+ },
+ {
+ "link": "https://github.com/andprox/andprox",
+ "star": 115,
+ "commits": 157,
+ "modify_time": "2019-08-19 08:35:10",
+ "last_release": "v2.0.5",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/acmbvp/hacktoberfest",
+ "star": 115,
+ "commits": 838,
+ "modify_time": "2019-10-29 19:56:32",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/360netlab/dga",
+ "star": 115,
+ "commits": 62,
+ "modify_time": "2019-09-03 07:59:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/moxie0/tortunnel",
+ "star": 114,
+ "commits": 7,
+ "modify_time": "2011-09-20 21:41:32",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/fox-it/linux-luks-tpm-boot",
+ "star": 114,
+ "commits": 20,
+ "modify_time": "2018-10-04 07:46:29",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/m0xiaoxi/ctf_web_docker",
+ "star": 114,
+ "commits": 15,
+ "modify_time": "2019-07-11 04:02:28",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/realsanjay/DomainRecon",
+ "star": 114,
+ "commits": 29,
+ "modify_time": "2019-12-07 14:43:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/FSecureLABS/CVE-2018-4121",
+ "star": 114,
+ "commits": 1,
+ "modify_time": "2018-04-19 11:15:13",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/hdm/inetdata",
+ "star": 114,
+ "commits": 71,
+ "modify_time": "2019-02-12 23:36:08",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/zombiecraig/uds-server",
+ "star": 114,
+ "commits": 8,
+ "modify_time": "2019-01-10 14:52:47",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/zmrbak/pcwechathook",
+ "star": 114,
+ "commits": 223,
+ "modify_time": "2019-12-04 02:56:29",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/zcash/librustzcash",
+ "star": 114,
+ "commits": 998,
+ "modify_time": "2019-12-05 16:35:28",
+ "last_release": "",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/xiphosresearch/netelf",
+ "star": 114,
+ "commits": 19,
+ "modify_time": "2017-09-28 17:42:39",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/wpvsyou/mprop",
+ "star": 114,
+ "commits": 1,
+ "modify_time": "2017-09-12 07:01:49",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/waryas/eupmaccess",
+ "star": 114,
+ "commits": 8,
+ "modify_time": "2017-11-24 14:20:27",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/tyranid/canape.core",
+ "star": 114,
+ "commits": 25,
+ "modify_time": "2019-06-05 14:30:19",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/syphon1c/threatelligence",
+ "star": 114,
+ "commits": 3,
+ "modify_time": "2014-06-03 15:13:36",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/stringcare/androidlibrary",
+ "star": 114,
+ "commits": 209,
+ "modify_time": "2019-11-26 13:20:49",
+ "last_release": "v3.6",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/spiderlabs/sqlol",
+ "star": 114,
+ "commits": 16,
+ "modify_time": "2013-07-19 21:15:43",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/skahwah/wordsmith",
+ "star": 114,
+ "commits": 47,
+ "modify_time": "2018-05-03 13:44:00",
+ "last_release": "v2.1.1",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/saaramar/35c3_modern_windows_userspace_exploitation",
+ "star": 114,
+ "commits": 8,
+ "modify_time": "2019-01-06 11:20:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rosgos/mirai-source-code",
+ "star": 114,
+ "commits": 2,
+ "modify_time": "2016-10-02 23:45:32",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/reider-roque/pentest-tools",
+ "star": 114,
+ "commits": 57,
+ "modify_time": "2015-10-27 01:45:55",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/patio11/wrightverification",
+ "star": 114,
+ "commits": 20,
+ "modify_time": "2016-05-05 21:47:52",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/nil1666/auditdroid",
+ "star": 114,
+ "commits": 27,
+ "modify_time": "2016-10-12 04:27:55",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/mr-un1k0d3r/minidump",
+ "star": 114,
+ "commits": 11,
+ "modify_time": "2019-11-26 21:18:07",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/misp/misp-book",
+ "star": 114,
+ "commits": 554,
+ "modify_time": "2019-12-05 18:21:22",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/marcoramilli/malwaretrainingsets",
+ "star": 114,
+ "commits": 17,
+ "modify_time": "2019-07-23 08:57:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/malcomvetter/managedinjection",
+ "star": 114,
+ "commits": 6,
+ "modify_time": "2018-07-25 15:46:11",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/leurak/trollrat",
+ "star": 114,
+ "commits": 62,
+ "modify_time": "2016-08-17 10:33:57",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/kpwn/nullguard",
+ "star": 114,
+ "commits": 7,
+ "modify_time": "2015-08-17 22:19:05",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jaimehgb/raiwebwallet",
+ "star": 114,
+ "commits": 66,
+ "modify_time": "2018-01-30 23:30:29",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/eaglexiang/eagle.tunnel.go",
+ "star": 114,
+ "commits": 392,
+ "modify_time": "2019-09-21 06:50:17",
+ "last_release": "v1.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/dviros/excalibur",
+ "star": 114,
+ "commits": 23,
+ "modify_time": "2019-05-27 08:44:40",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/dragon2fly/vpngate-with-proxy",
+ "star": 114,
+ "commits": 216,
+ "modify_time": "2017-10-25 15:35:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/digital4rensics/malformity",
+ "star": 114,
+ "commits": 85,
+ "modify_time": "2014-06-11 21:18:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/darkerego/mips-binaries",
+ "star": 114,
+ "commits": 21,
+ "modify_time": "2019-10-19 07:01:03",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/danmcinerney/wifi-monitor",
+ "star": 114,
+ "commits": 24,
+ "modify_time": "2015-12-18 17:54:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/concourse/git-resource",
+ "star": 114,
+ "commits": 378,
+ "modify_time": "2019-12-09 15:49:13",
+ "last_release": "v1.6.2",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/baronpan/sysmonhunter",
+ "star": 114,
+ "commits": 6,
+ "modify_time": "2019-08-08 15:58:08",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/anbud/droidducky",
+ "star": 114,
+ "commits": 12,
+ "modify_time": "2015-09-28 18:37:51",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/airbus-seclab/warbirdvm",
+ "star": 114,
+ "commits": 3,
+ "modify_time": "2018-02-06 16:50:06",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/abhinavbom/threat-intelligence-hunter",
+ "star": 114,
+ "commits": 117,
+ "modify_time": "2018-07-09 20:13:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/a13xp0p0v/kernel-hack-drill",
+ "star": 114,
+ "commits": 13,
+ "modify_time": "2019-03-07 18:16:37",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/decalage2/olefile",
+ "star": 113,
+ "commits": 377,
+ "modify_time": "2019-05-10 13:19:58",
+ "last_release": "v0.46",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wtsxdev/vehicle-security",
+ "star": 113,
+ "commits": 2,
+ "modify_time": "2017-01-27 21:15:07",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/infosecn1nja/sharpdoor",
+ "star": 113,
+ "commits": 10,
+ "modify_time": "2019-09-30 16:11:24",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/portswigger/xss-cheatsheet-data",
+ "star": 113,
+ "commits": 38,
+ "modify_time": "2019-12-03 13:46:13",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/nccgroup/zulu",
+ "star": 113,
+ "commits": 8,
+ "modify_time": "2014-07-07 07:44:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/yonsm/ipafine",
+ "star": 113,
+ "commits": 27,
+ "modify_time": "2017-05-21 09:58:44",
+ "last_release": "",
+ "lang": "Objective-C++"
+ },
+ {
+ "link": "https://github.com/wireshark/winpcap",
+ "star": 113,
+ "commits": 1047,
+ "modify_time": "2015-10-07 21:36:19",
+ "last_release": "\n WINPCAP_4_1_0_2980\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/we5ter/flerken",
+ "star": 113,
+ "commits": 32,
+ "modify_time": "2019-08-21 07:11:10",
+ "last_release": "v1.0.2",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/securityclippy/elasticintel",
+ "star": 113,
+ "commits": 67,
+ "modify_time": "2018-08-08 05:11:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/scgywx/fooking",
+ "star": 113,
+ "commits": 38,
+ "modify_time": "2018-06-13 08:57:13",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/peterpt/eternal_check",
+ "star": 113,
+ "commits": 26,
+ "modify_time": "2018-12-08 21:35:27",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/p4-team/crypto-commons",
+ "star": 113,
+ "commits": 80,
+ "modify_time": "2019-11-18 20:29:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/oj/clr-meterpreter",
+ "star": 113,
+ "commits": 32,
+ "modify_time": "2019-11-07 01:16:24",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/mpgn/byp-sop",
+ "star": 113,
+ "commits": 10,
+ "modify_time": "2019-02-26 21:55:12",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/landgrey/dnstricker",
+ "star": 113,
+ "commits": 4,
+ "modify_time": "2017-11-07 01:32:05",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/jakkarth/icmptx",
+ "star": 113,
+ "commits": 17,
+ "modify_time": "2019-05-01 18:24:45",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/guardianproject/iocipher",
+ "star": 113,
+ "commits": 269,
+ "modify_time": "2019-07-05 13:58:33",
+ "last_release": "\n 0.5\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/fuzzysecurity/defcon24",
+ "star": 113,
+ "commits": 8,
+ "modify_time": "2016-09-02 22:51:52",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/fupinglee/mypython",
+ "star": 113,
+ "commits": 33,
+ "modify_time": "2019-02-24 16:04:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fabionoth/awesome-cyber-security",
+ "star": 113,
+ "commits": 20,
+ "modify_time": "2019-05-30 16:34:41",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/exodusintel/disclosures",
+ "star": 113,
+ "commits": 3,
+ "modify_time": "2017-05-16 16:20:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/evilsocket/pdusms",
+ "star": 113,
+ "commits": 3,
+ "modify_time": "2015-08-19 11:50:06",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/edthamm/lootbooty",
+ "star": 113,
+ "commits": 2,
+ "modify_time": "2013-08-05 15:46:51",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/dzzie/comraider",
+ "star": 113,
+ "commits": 5,
+ "modify_time": "2019-05-30 12:26:05",
+ "last_release": "",
+ "lang": "Visual Basic .NET"
+ },
+ {
+ "link": "https://github.com/drego85/joomlascan",
+ "star": 113,
+ "commits": 59,
+ "modify_time": "2019-06-14 13:54:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dragonquesthero/pubg-pak-hacker",
+ "star": 113,
+ "commits": 1,
+ "modify_time": "2019-05-01 14:06:08",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/diladele/websafety",
+ "star": 113,
+ "commits": 27,
+ "modify_time": "2019-11-30 14:56:43",
+ "last_release": "\n 7.1.0\n ",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/denny0223/scrabble",
+ "star": 113,
+ "commits": 5,
+ "modify_time": "2014-10-09 17:36:37",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/decoder-it/powershellveryless",
+ "star": 113,
+ "commits": 38,
+ "modify_time": "2019-07-29 07:34:41",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/chengchengcc/ark-tools",
+ "star": 113,
+ "commits": 17,
+ "modify_time": "2016-03-06 11:37:07",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/bugcrowd/disclosure-policy",
+ "star": 113,
+ "commits": 12,
+ "modify_time": "2019-10-12 15:47:38",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/bjmayor/hacker",
+ "star": 113,
+ "commits": 2,
+ "modify_time": "2016-12-05 10:07:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nsacyber/nsacyber.github.io",
+ "star": 112,
+ "commits": 53,
+ "modify_time": "2019-06-14 22:47:30",
+ "last_release": "\n 20190130\n ",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/v2rayv3/v2ray-sspanel-v3-mod_uim-plugin",
+ "star": 112,
+ "commits": 93,
+ "modify_time": "2019-06-19 06:49:13",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/prodigysml/dr.-watson",
+ "star": 112,
+ "commits": 42,
+ "modify_time": "2019-10-31 05:51:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/outflanknl/recon-ad",
+ "star": 112,
+ "commits": 6,
+ "modify_time": "2019-10-20 21:49:34",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/xuechiyaobai/CVE-2017-7092-PoC",
+ "star": 112,
+ "commits": 3,
+ "modify_time": "2019-03-25 02:38:05",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/SimplySecurity/SimplyTemplate",
+ "star": 112,
+ "commits": 113,
+ "modify_time": "2017-11-27 18:08:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/FSecureLABS/drozer-modules",
+ "star": 112,
+ "commits": 109,
+ "modify_time": "2017-08-17 20:43:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xplico/xplico",
+ "star": 112,
+ "commits": 170,
+ "modify_time": "2019-04-25 12:46:16",
+ "last_release": "v.1.2.2",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/x64dbg/scripts",
+ "star": 112,
+ "commits": 30,
+ "modify_time": "2019-09-22 17:21:53",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/williballenthin/evtxtract",
+ "star": 112,
+ "commits": 136,
+ "modify_time": "2019-03-22 17:18:42",
+ "last_release": "\n v0.2.3\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vusec/hammertime",
+ "star": 112,
+ "commits": 32,
+ "modify_time": "2018-10-18 22:00:39",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/tkisason/unhash",
+ "star": 112,
+ "commits": 13,
+ "modify_time": "2019-04-18 13:24:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tevora-threat/dragnet",
+ "star": 112,
+ "commits": 34,
+ "modify_time": "2019-06-16 01:08:23",
+ "last_release": "",
+ "lang": "Vue"
+ },
+ {
+ "link": "https://github.com/sroberts/malwarehouse",
+ "star": 112,
+ "commits": 82,
+ "modify_time": "2013-05-05 22:04:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sithis993/crypter",
+ "star": 112,
+ "commits": 181,
+ "modify_time": "2018-04-18 19:23:44",
+ "last_release": "2.41",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ruped24/killchain",
+ "star": 112,
+ "commits": 130,
+ "modify_time": "2019-06-15 05:59:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rup0rt/pcapfix",
+ "star": 112,
+ "commits": 152,
+ "modify_time": "2019-01-22 12:00:41",
+ "last_release": "v1.1.4",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ridter/cs_chinese_support",
+ "star": 112,
+ "commits": 8,
+ "modify_time": "2018-09-14 16:02:06",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/plazmaz/sublist3r",
+ "star": 112,
+ "commits": 144,
+ "modify_time": "2019-02-03 23:10:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pimps/wsuxploit",
+ "star": 112,
+ "commits": 18,
+ "modify_time": "2017-07-21 06:43:57",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/orange-cyberdefense/fenrir-ocd",
+ "star": 112,
+ "commits": 9,
+ "modify_time": "2018-05-25 14:21:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/opsxcq/docker-tor-hiddenservice-nginx",
+ "star": 112,
+ "commits": 68,
+ "modify_time": "2019-01-05 18:34:00",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/opendns/public-domain-lists",
+ "star": 112,
+ "commits": 42,
+ "modify_time": "2014-11-06 09:08:18",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/nospaceships/node-raw-socket",
+ "star": 112,
+ "commits": 117,
+ "modify_time": "2019-06-12 11:04:06",
+ "last_release": "\n 1.7.0\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/netbiosx/pentest-bookmarks",
+ "star": 112,
+ "commits": 37,
+ "modify_time": "2016-11-04 15:21:20",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/mthbernardes/artlas",
+ "star": 112,
+ "commits": 140,
+ "modify_time": "2016-06-14 20:34:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mncoppola/rpef",
+ "star": 112,
+ "commits": 3,
+ "modify_time": "2013-10-12 01:09:13",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/mkopylec/charon-spring-boot-starter",
+ "star": 112,
+ "commits": 364,
+ "modify_time": "2019-12-06 10:16:18",
+ "last_release": "4.5.0",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/mirror/reactos",
+ "star": 112,
+ "commits": 54694,
+ "modify_time": "2014-10-10 23:07:14",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/marcosvalle/awesome-windows-red-team",
+ "star": 112,
+ "commits": 9,
+ "modify_time": "2019-04-16 14:32:31",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ledgerhq/ledger-javacard",
+ "star": 112,
+ "commits": 35,
+ "modify_time": "2016-01-27 06:41:22",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/hivesolutions/netius",
+ "star": 112,
+ "commits": 4792,
+ "modify_time": "2019-11-12 16:59:12",
+ "last_release": "\n 1.17.55\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/google/csp-evaluator",
+ "star": 112,
+ "commits": 10,
+ "modify_time": "2018-12-13 15:41:57",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/ghost123gg/wep",
+ "star": 112,
+ "commits": 149,
+ "modify_time": "2019-01-02 12:34:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/funnykun/nessusreportinchinese",
+ "star": 112,
+ "commits": 5,
+ "modify_time": "2018-11-04 05:35:36",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ddcc/microparse",
+ "star": 112,
+ "commits": 7,
+ "modify_time": "2015-12-26 07:22:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/brock7/xdbg",
+ "star": 112,
+ "commits": 109,
+ "modify_time": "2017-04-27 05:49:32",
+ "last_release": "v0.3-5",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/blueudp/dorkme",
+ "star": 112,
+ "commits": 56,
+ "modify_time": "2018-08-12 13:35:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/arno0x/tcprelayinjecter",
+ "star": 112,
+ "commits": 2,
+ "modify_time": "2019-05-23 07:01:17",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/androidsecuritytools/lobotomy",
+ "star": 112,
+ "commits": 95,
+ "modify_time": "2015-08-13 19:27:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/andreafioraldi/angrgdb",
+ "star": 112,
+ "commits": 31,
+ "modify_time": "2019-06-28 15:42:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/alienvault-otx/yabin",
+ "star": 112,
+ "commits": 9,
+ "modify_time": "2018-11-06 16:17:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/agwa/titus",
+ "star": 112,
+ "commits": 75,
+ "modify_time": "2015-11-28 23:04:49",
+ "last_release": "\n 0.3\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/adamkramer/dll_hijack_detect",
+ "star": 112,
+ "commits": 14,
+ "modify_time": "2015-04-02 15:03:07",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/0x27/gitpass",
+ "star": 112,
+ "commits": 42,
+ "modify_time": "2017-11-14 23:48:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tidesec/decrypt_weblogic_password",
+ "star": 111,
+ "commits": 5,
+ "modify_time": "2019-11-29 15:39:17",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/spiderlabs/beef_injection_framework",
+ "star": 111,
+ "commits": 5,
+ "modify_time": "2014-05-26 08:23:24",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/woj-ciech/kamerka-gui",
+ "star": 111,
+ "commits": 20,
+ "modify_time": "2019-12-01 15:14:42",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/nsacyber/Maplesyrup",
+ "star": 111,
+ "commits": 9,
+ "modify_time": "2016-06-01 15:47:27",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/w-digital-scanner/w12scan-client",
+ "star": 111,
+ "commits": 85,
+ "modify_time": "2019-05-16 07:52:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zyw-200/firmafl",
+ "star": 111,
+ "commits": 46,
+ "modify_time": "2019-08-23 09:07:44",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/webarx-security/wpbullet",
+ "star": 111,
+ "commits": 34,
+ "modify_time": "2019-06-04 14:13:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vletoux/ntlminjector",
+ "star": 111,
+ "commits": 5,
+ "modify_time": "2017-06-08 19:01:21",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/tothi/pwn-hisilicon-dvr",
+ "star": 111,
+ "commits": 2,
+ "modify_time": "2017-09-07 14:01:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/seifreed/malware-scripts",
+ "star": 111,
+ "commits": null,
+ "modify_time": "2018-06-15 07:15:54",
+ "last_release": "",
+ "lang": "python"
+ },
+ {
+ "link": "https://github.com/sagehack/cloud-buster",
+ "star": 111,
+ "commits": 194,
+ "modify_time": "2019-07-01 06:06:24",
+ "last_release": "1.5",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rm-hull/lein-nvd",
+ "star": 111,
+ "commits": 213,
+ "modify_time": "2019-11-25 10:06:12",
+ "last_release": "\n 1.3.1\n ",
+ "lang": "Clojure"
+ },
+ {
+ "link": "https://github.com/raikia/smbcrunch",
+ "star": 111,
+ "commits": 12,
+ "modify_time": "2018-03-07 15:50:02",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/praetorian-code/vulcan",
+ "star": 111,
+ "commits": 1,
+ "modify_time": "2019-05-02 16:22:27",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/openjailbreak/evasi0n6",
+ "star": 111,
+ "commits": 1,
+ "modify_time": "2017-09-09 17:12:11",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ollyxar/php-malware-detector",
+ "star": 111,
+ "commits": 8,
+ "modify_time": "2018-12-18 15:28:47",
+ "last_release": "1.0.1",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/nu1lctf/n1ctf-2019",
+ "star": 111,
+ "commits": 33,
+ "modify_time": "2019-10-03 14:20:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mi-al/wifi-autopwner",
+ "star": 111,
+ "commits": 36,
+ "modify_time": "2019-01-14 10:10:49",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/merces/bashacks",
+ "star": 111,
+ "commits": 251,
+ "modify_time": "2019-07-21 23:06:11",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/mariovilas/shellcode_tools",
+ "star": 111,
+ "commits": 18,
+ "modify_time": "2015-06-21 10:09:05",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/lloydlabs/elf-strings",
+ "star": 111,
+ "commits": 3,
+ "modify_time": "2018-02-19 22:59:38",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/leviathan36/trigmap",
+ "star": 111,
+ "commits": 17,
+ "modify_time": "2019-05-16 12:28:52",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/lcatro/php_source_audit_tools",
+ "star": 111,
+ "commits": 4,
+ "modify_time": "2018-05-14 05:54:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kudelskisecurity/sgxfun",
+ "star": 111,
+ "commits": 47,
+ "modify_time": "2016-08-04 15:42:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kakawait/cas-security-spring-boot-starter",
+ "star": 111,
+ "commits": 208,
+ "modify_time": "2019-09-05 07:11:53",
+ "last_release": "0.8.1",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/ionescu007/hdk",
+ "star": 111,
+ "commits": 41,
+ "modify_time": "2019-01-11 23:51:32",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/httphacker/gethead",
+ "star": 111,
+ "commits": 44,
+ "modify_time": "2014-03-13 19:03:16",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/hook-s3c/cve-2018-11776-python-poc",
+ "star": 111,
+ "commits": 8,
+ "modify_time": "2018-08-25 02:12:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hook-s3c/blueborne-scanner",
+ "star": 111,
+ "commits": 5,
+ "modify_time": "2017-09-18 11:15:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gaprogman/owaspheaders.core",
+ "star": 111,
+ "commits": 148,
+ "modify_time": "2019-11-16 17:43:45",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/flyingcircusio/vulnix",
+ "star": 111,
+ "commits": 259,
+ "modify_time": "2019-11-26 10:49:32",
+ "last_release": "\n 1.9.3\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/despector/despector",
+ "star": 111,
+ "commits": 294,
+ "modify_time": "2018-07-16 21:35:14",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/damonmohammadbagher/meterpreter_payload_detection",
+ "star": 111,
+ "commits": 90,
+ "modify_time": "2018-09-15 15:32:14",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/cornell-brg/pydgin",
+ "star": 111,
+ "commits": 611,
+ "modify_time": "2016-07-27 20:38:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/codepr/creak",
+ "star": 111,
+ "commits": 40,
+ "modify_time": "2017-01-06 16:45:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/checkmarx/js-scp",
+ "star": 111,
+ "commits": 165,
+ "modify_time": "2019-10-06 10:22:15",
+ "last_release": "\n v0.2.7\n ",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/cfsworks/wavebird-reversing",
+ "star": 111,
+ "commits": 6,
+ "modify_time": "2017-12-24 13:45:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cert-w/certitude",
+ "star": 111,
+ "commits": 123,
+ "modify_time": "2017-12-28 20:53:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/carloop/simulator",
+ "star": 111,
+ "commits": 9,
+ "modify_time": "2018-06-03 21:56:25",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/brieflyx/ctf-pwns",
+ "star": 111,
+ "commits": 52,
+ "modify_time": "2019-12-04 04:45:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bishopfox/zigdiggity",
+ "star": 111,
+ "commits": 45,
+ "modify_time": "2019-10-28 13:28:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/austintgriffith/bouncer-proxy",
+ "star": 111,
+ "commits": 35,
+ "modify_time": "2018-10-07 00:11:30",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/audibleblink/gorsh",
+ "star": 111,
+ "commits": null,
+ "modify_time": "2019-05-15 04:31:00",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/arno0x/dnsdelivery",
+ "star": 111,
+ "commits": 5,
+ "modify_time": "2017-02-16 08:04:09",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/adrelanos/vpn-firewall",
+ "star": 111,
+ "commits": 95,
+ "modify_time": "2017-11-06 21:39:18",
+ "last_release": "\n 1.0-1\n ",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/hasherezade/chimera_pe",
+ "star": 110,
+ "commits": 24,
+ "modify_time": "2019-11-10 20:59:39",
+ "last_release": "0.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/suricata-rules/suricata-rules",
+ "star": 110,
+ "commits": 22,
+ "modify_time": "2019-09-11 09:41:37",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/barakat/cve-2019-16098",
+ "star": 110,
+ "commits": 4,
+ "modify_time": "2019-09-13 20:05:43",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/yuawn/CTF",
+ "star": 110,
+ "commits": 324,
+ "modify_time": "2019-11-09 06:22:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/Optixal/CEHv10-Notes",
+ "star": 110,
+ "commits": 9,
+ "modify_time": "2018-01-22 16:29:00",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/bit4woo/code2sec.com",
+ "star": 110,
+ "commits": 131,
+ "modify_time": "2019-12-04 07:47:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xxxyanchenxxx/sigkill",
+ "star": 110,
+ "commits": 19,
+ "modify_time": "2018-03-24 06:58:37",
+ "last_release": "",
+ "lang": "Smali"
+ },
+ {
+ "link": "https://github.com/x-ai/burpunlimitedre",
+ "star": 110,
+ "commits": 12,
+ "modify_time": "2017-12-08 13:47:55",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/voidsec/webrtc-leak",
+ "star": 110,
+ "commits": 7,
+ "modify_time": "2018-03-30 11:15:26",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/unixfreak0037/officeparser",
+ "star": 110,
+ "commits": 46,
+ "modify_time": "2018-08-20 17:20:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sudosammy/knary",
+ "star": 110,
+ "commits": 71,
+ "modify_time": "2019-07-03 10:30:58",
+ "last_release": "v2.2.3",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/strivexjun/memorymodulepp",
+ "star": 110,
+ "commits": 7,
+ "modify_time": "2019-03-10 05:21:58",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/sipcapture/captagent",
+ "star": 110,
+ "commits": 799,
+ "modify_time": "2019-10-03 10:22:20",
+ "last_release": "6.3.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/sero-cash/go-sero",
+ "star": 110,
+ "commits": 857,
+ "modify_time": "2019-12-10 08:00:54",
+ "last_release": "v1.0.1-rc6",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/sensepost/heartbleed-poc",
+ "star": 110,
+ "commits": 33,
+ "modify_time": "2014-07-10 21:17:22",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/scribery/tlog",
+ "star": 110,
+ "commits": 762,
+ "modify_time": "2019-12-02 05:14:25",
+ "last_release": "v7",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/samgranger/eqgrp",
+ "star": 110,
+ "commits": 6,
+ "modify_time": "2016-08-16 07:12:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rozbo/ios-pubgm-hack",
+ "star": 110,
+ "commits": 11,
+ "modify_time": "2018-04-09 11:44:42",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/rose-compiler/rose-develop",
+ "star": 110,
+ "commits": 1,
+ "modify_time": "2019-04-23 23:08:21",
+ "last_release": "\n v0.9.10.0\n ",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/dsccommunity/NetworkingDsc",
+ "star": 110,
+ "commits": 1223,
+ "modify_time": "2019-11-25 06:37:38",
+ "last_release": "\n 7.3.0.0-PSGallery\n ",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/nccgroup/typofinder",
+ "star": 110,
+ "commits": 329,
+ "modify_time": "2016-11-22 08:25:09",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/mattymcfatty/honeypi",
+ "star": 110,
+ "commits": 46,
+ "modify_time": "2018-10-04 22:21:55",
+ "last_release": "v02",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/malcomvetter/csexec",
+ "star": 110,
+ "commits": 7,
+ "modify_time": "2018-08-12 20:16:46",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/jwbensley/etherate",
+ "star": 110,
+ "commits": 130,
+ "modify_time": "2019-04-15 06:59:36",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jrentenaar/office-365-extractor",
+ "star": 110,
+ "commits": 17,
+ "modify_time": "2019-10-16 10:56:17",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/jgeralnik/pytroj",
+ "star": 110,
+ "commits": 22,
+ "modify_time": "2012-08-12 16:06:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hasherezade/chimera_pe",
+ "star": 110,
+ "commits": 24,
+ "modify_time": "2019-11-10 20:59:39",
+ "last_release": "0.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/h0nus/qrgen",
+ "star": 110,
+ "commits": 32,
+ "modify_time": "2019-09-20 17:23:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fransr/template-generator",
+ "star": 110,
+ "commits": 12,
+ "modify_time": "2017-01-06 19:18:32",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/fox-it/danderspritz-evtx",
+ "star": 110,
+ "commits": 7,
+ "modify_time": "2017-12-15 14:10:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dxa4481/xssjacking",
+ "star": 110,
+ "commits": 5,
+ "modify_time": "2017-03-18 16:14:27",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/dogangcr/vulnerable-sso",
+ "star": 110,
+ "commits": 9,
+ "modify_time": "2019-09-18 16:43:11",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/codewatchorg/sidestep",
+ "star": 110,
+ "commits": 42,
+ "modify_time": "2017-11-21 00:23:36",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/chaitanyaharitash/kimi",
+ "star": 110,
+ "commits": 28,
+ "modify_time": "2019-04-24 11:08:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/abhisek/pe-loader-sample",
+ "star": 110,
+ "commits": 7,
+ "modify_time": "2013-03-22 15:31:01",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/1n3/xsstracer",
+ "star": 110,
+ "commits": 5,
+ "modify_time": "2016-01-23 16:28:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wifiphisher/roguehostapd",
+ "star": 109,
+ "commits": 78,
+ "modify_time": "2019-12-09 00:45:13",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/shavitush/bhoptimer",
+ "star": 109,
+ "commits": 1628,
+ "modify_time": "2019-11-21 01:54:33",
+ "last_release": "v2.5.5a",
+ "lang": "SourcePawn"
+ },
+ {
+ "link": "https://github.com/vvmelody/ctf-web-challenges",
+ "star": 109,
+ "commits": 35,
+ "modify_time": "2019-08-08 07:18:00",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/meizjm3i/CTF-Challenge",
+ "star": 109,
+ "commits": 17,
+ "modify_time": "2018-09-12 11:15:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xvass/vscan",
+ "star": 109,
+ "commits": 88,
+ "modify_time": "2019-03-08 08:58:39",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/wbenny/ksocket",
+ "star": 109,
+ "commits": 7,
+ "modify_time": "2019-04-22 10:25:37",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/vegard/prog-fuzz",
+ "star": 109,
+ "commits": 23,
+ "modify_time": "2018-04-03 21:02:21",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/twelvesec/passcat",
+ "star": 109,
+ "commits": 37,
+ "modify_time": "2018-11-18 19:58:54",
+ "last_release": "v1.2.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/theori-io/cve-2016-0189",
+ "star": 109,
+ "commits": 2,
+ "modify_time": "2016-06-23 00:47:47",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/siguza/imobax",
+ "star": 109,
+ "commits": 3,
+ "modify_time": "2019-05-19 16:23:22",
+ "last_release": "1.0.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/securestate/syringe",
+ "star": 109,
+ "commits": 12,
+ "modify_time": "2018-01-27 19:43:44",
+ "last_release": "\n v1.6\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/rapid7/metasploit-omnibus",
+ "star": 109,
+ "commits": 437,
+ "modify_time": "2019-11-13 01:31:37",
+ "last_release": "\n 5.0.64\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/qax-a-team/weblogicenvironment",
+ "star": 109,
+ "commits": 3,
+ "modify_time": "2019-08-01 13:08:31",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/proxb/powershell_scripts",
+ "star": 109,
+ "commits": 28,
+ "modify_time": "2017-07-20 02:20:57",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/pbatard/bootimg-tools",
+ "star": 109,
+ "commits": 11,
+ "modify_time": "2018-03-24 14:04:48",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/p4t12ick/ypsilon",
+ "star": 109,
+ "commits": 25,
+ "modify_time": "2018-05-01 18:28:03",
+ "last_release": "",
+ "lang": "TeX"
+ },
+ {
+ "link": "https://github.com/niklasb/hack2win-chrome",
+ "star": 109,
+ "commits": 3,
+ "modify_time": "2019-07-20 17:15:34",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/needmorecowbell/giggity",
+ "star": 109,
+ "commits": 46,
+ "modify_time": "2019-04-09 01:33:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nb-star/security-operation",
+ "star": 109,
+ "commits": 4,
+ "modify_time": "2019-07-30 02:11:36",
+ "last_release": "",
+ "lang": "Roff"
+ },
+ {
+ "link": "https://github.com/moosedojo/mybff",
+ "star": 109,
+ "commits": 94,
+ "modify_time": "2017-01-03 16:25:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/m4cs/blackeye-python",
+ "star": 109,
+ "commits": 11,
+ "modify_time": "2019-02-14 05:16:39",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/lubyruffy/wyquery",
+ "star": 109,
+ "commits": 28,
+ "modify_time": "2015-09-26 09:42:14",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/linking12/tesla",
+ "star": 109,
+ "commits": null,
+ "modify_time": "2019-04-13 08:18:33",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/joxeankoret/membugtool",
+ "star": 109,
+ "commits": 7,
+ "modify_time": "2018-06-25 11:48:59",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/joecampo/random-user-agent",
+ "star": 109,
+ "commits": 13,
+ "modify_time": "2018-06-13 14:26:21",
+ "last_release": "1.3.0",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/jmortega/osint_tools_security_auditing",
+ "star": 109,
+ "commits": 9,
+ "modify_time": "2016-10-09 09:13:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jgamblin/blackhat-macos-config",
+ "star": 109,
+ "commits": 32,
+ "modify_time": "2018-08-05 00:40:18",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/gvb84/pbscan",
+ "star": 109,
+ "commits": 10,
+ "modify_time": "2018-02-20 20:22:26",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/greatis/anti-webminer",
+ "star": 109,
+ "commits": 108,
+ "modify_time": "2018-11-27 07:35:46",
+ "last_release": "1.1.0.2",
+ "lang": "Pascal"
+ },
+ {
+ "link": "https://github.com/goldshtn/etrace",
+ "star": 109,
+ "commits": 10,
+ "modify_time": "2017-06-29 06:50:20",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/fjvva/ecu-tool",
+ "star": 109,
+ "commits": 42,
+ "modify_time": "2015-02-11 15:59:49",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/elkentaro/kismetmobiledashboard",
+ "star": 109,
+ "commits": 59,
+ "modify_time": "2019-09-11 19:42:17",
+ "last_release": "V.3.-alpha",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/ekultek/graffiti",
+ "star": 109,
+ "commits": 24,
+ "modify_time": "2019-01-29 14:54:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/detroitenglish/pw-pwnage-cfworker",
+ "star": 109,
+ "commits": 83,
+ "modify_time": "2019-06-12 19:08:31",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/david-reguera-garcia-dreg/dbgchild",
+ "star": 109,
+ "commits": 99,
+ "modify_time": "2019-10-16 12:12:42",
+ "last_release": "beta10",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/danielcardeenas/audiostego",
+ "star": 109,
+ "commits": 46,
+ "modify_time": "2019-07-22 16:40:31",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/cloudtracer/paskto",
+ "star": 109,
+ "commits": 19,
+ "modify_time": "2018-12-28 04:01:00",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/behindthefirewalls/parsero",
+ "star": 109,
+ "commits": 81,
+ "modify_time": "2014-09-29 11:27:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/b3-v3r/hunner",
+ "star": 109,
+ "commits": 9,
+ "modify_time": "2019-02-01 21:23:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/b-mueller/frida-detection-demo",
+ "star": 109,
+ "commits": 11,
+ "modify_time": "2018-06-05 06:34:27",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/anssi-fr/bmc-tools",
+ "star": 109,
+ "commits": 9,
+ "modify_time": "2019-06-18 14:47:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/altjx/ipwn",
+ "star": 109,
+ "commits": 456,
+ "modify_time": "2019-09-22 00:52:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/v2ray/ext",
+ "star": 108,
+ "commits": 352,
+ "modify_time": "2019-07-25 09:22:45",
+ "last_release": "\n v4.15.0\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/virb3/de4dot-cex",
+ "star": 108,
+ "commits": 2019,
+ "modify_time": "2019-05-03 00:17:30",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/FSecureLABS/XRulez",
+ "star": 108,
+ "commits": 58,
+ "modify_time": "2018-12-11 15:13:26",
+ "last_release": "2.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/vidar-team/HCTF2016",
+ "star": 108,
+ "commits": 2,
+ "modify_time": "2016-11-30 04:39:35",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/3had0w/Fuzzing-Dicts",
+ "star": 108,
+ "commits": 63,
+ "modify_time": "2019-11-26 14:43:12",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/w3h/isf",
+ "star": 108,
+ "commits": 43,
+ "modify_time": "2019-01-22 02:32:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/souhardya/warchild",
+ "star": 108,
+ "commits": 14,
+ "modify_time": "2017-05-11 21:31:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sniperoj/attack-defense-challenges",
+ "star": 108,
+ "commits": 84,
+ "modify_time": "2019-11-29 05:04:22",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/sensepost/wadi",
+ "star": 108,
+ "commits": 34,
+ "modify_time": "2017-02-06 10:14:36",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/rootbsd/fridump3",
+ "star": 108,
+ "commits": 5,
+ "modify_time": "2019-04-04 10:06:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rohanpadhye/fuzzfactory",
+ "star": 108,
+ "commits": 46,
+ "modify_time": "2019-11-05 07:36:43",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/rapid7/awsaml",
+ "star": 108,
+ "commits": 382,
+ "modify_time": "2019-09-16 15:11:55",
+ "last_release": "v2.2.2",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/projectretroscope/retroscope",
+ "star": 108,
+ "commits": 18,
+ "modify_time": "2016-09-22 20:15:43",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/platypew/picoctf-2018-writeup",
+ "star": 108,
+ "commits": 126,
+ "modify_time": "2019-10-06 05:23:57",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/mpgn/cve-2019-7238",
+ "star": 108,
+ "commits": 6,
+ "modify_time": "2019-02-25 07:37:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/matiskay/html-similarity",
+ "star": 108,
+ "commits": 68,
+ "modify_time": "2019-06-12 04:01:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mactec0/kernelmode-manual-mapping-through-iat",
+ "star": 108,
+ "commits": 8,
+ "modify_time": "2019-07-23 20:08:46",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/m4cs/darkspiritz",
+ "star": 108,
+ "commits": 6,
+ "modify_time": "2019-02-15 02:34:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/libyal/libbde",
+ "star": 108,
+ "commits": 268,
+ "modify_time": "2019-12-09 04:39:31",
+ "last_release": "20191104",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/immmx/ubnt-mips-shadowsocks-libev",
+ "star": 108,
+ "commits": 45,
+ "modify_time": "2019-08-14 09:02:53",
+ "last_release": "3.2.0",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/hansesecure/exploitdev",
+ "star": 108,
+ "commits": 24,
+ "modify_time": "2018-03-06 08:10:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/geosn0w/myriam",
+ "star": 108,
+ "commits": 30,
+ "modify_time": "2018-04-28 11:20:39",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/frida/frida-node",
+ "star": 108,
+ "commits": 265,
+ "modify_time": "2019-12-05 16:34:38",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/fenix01/cheatengine-library",
+ "star": 108,
+ "commits": 57,
+ "modify_time": "2019-11-24 07:41:16",
+ "last_release": "v1.2.0",
+ "lang": "Pascal"
+ },
+ {
+ "link": "https://github.com/ez8-co/yapi",
+ "star": 108,
+ "commits": 43,
+ "modify_time": "2019-05-30 03:26:46",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/evilsocket/ergo-pe-av",
+ "star": 108,
+ "commits": 27,
+ "modify_time": "2019-05-28 11:05:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/emptymonkey/shelljack",
+ "star": 108,
+ "commits": 33,
+ "modify_time": "2016-08-16 21:56:49",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/empirectf/empirectf",
+ "star": 108,
+ "commits": 148,
+ "modify_time": "2019-08-26 13:59:18",
+ "last_release": "",
+ "lang": "Haxe"
+ },
+ {
+ "link": "https://github.com/chr4/sslsecure.vim",
+ "star": 108,
+ "commits": 35,
+ "modify_time": "2017-07-27 15:41:49",
+ "last_release": "\n v1.1.1\n ",
+ "lang": "Vim script"
+ },
+ {
+ "link": "https://github.com/binject/awesome-go-security",
+ "star": 108,
+ "commits": 28,
+ "modify_time": "2019-05-09 23:05:40",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/paralax/awesome-cybersecurity-internships",
+ "star": 107,
+ "commits": 57,
+ "modify_time": "2019-11-25 14:03:46",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/internetwache/ct_subdomains",
+ "star": 107,
+ "commits": 10295,
+ "modify_time": "2019-12-10 06:44:31",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/dafthack/check-localadminhash",
+ "star": 107,
+ "commits": 13,
+ "modify_time": "2019-06-05 21:09:39",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/firmianay/security-paper",
+ "star": 107,
+ "commits": 31,
+ "modify_time": "2019-11-22 18:25:29",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/g666gle/basequery",
+ "star": 107,
+ "commits": 41,
+ "modify_time": "2019-11-27 23:19:14",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/xzkzdx/weixin-spider",
+ "star": 107,
+ "commits": 38,
+ "modify_time": "2019-08-22 13:47:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/colemancda/wi-fi-crack",
+ "star": 107,
+ "commits": 31,
+ "modify_time": "2014-03-26 18:10:59",
+ "last_release": "2.1",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/zydeco/aah",
+ "star": 107,
+ "commits": 152,
+ "modify_time": "2019-11-10 13:15:36",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/xillwillx/cactustorch_ddeauto",
+ "star": 107,
+ "commits": 3,
+ "modify_time": "2017-10-24 18:40:26",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/walkor/php-http-proxy",
+ "star": 107,
+ "commits": 6,
+ "modify_time": "2018-06-15 13:16:15",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/tuluobo/leiter",
+ "star": 107,
+ "commits": 43,
+ "modify_time": "2019-06-22 11:39:01",
+ "last_release": "\n 0.0.4\n ",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/timeweb/ddosdetector",
+ "star": 107,
+ "commits": 72,
+ "modify_time": "2016-11-21 15:19:34",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/sidechannelmarvels/daredevil",
+ "star": 107,
+ "commits": 41,
+ "modify_time": "2019-01-19 22:50:26",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ryanmarcus/dirty-json",
+ "star": 107,
+ "commits": 145,
+ "modify_time": "2019-07-01 20:59:26",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/rubocop-hq/rubocop-emacs",
+ "star": 107,
+ "commits": 52,
+ "modify_time": "2019-03-26 14:24:14",
+ "last_release": "\n v0.5.0\n ",
+ "lang": "Emacs Lisp"
+ },
+ {
+ "link": "https://github.com/rpranshu/eternalview",
+ "star": 107,
+ "commits": 194,
+ "modify_time": "2019-04-30 07:10:48",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/r4wd3r/rid-hijacking",
+ "star": 107,
+ "commits": 29,
+ "modify_time": "2019-06-03 01:11:39",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/porterhau5/bloodhound-owned",
+ "star": 107,
+ "commits": 21,
+ "modify_time": "2017-10-24 02:24:43",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/pgarba/switchidaproloader",
+ "star": 107,
+ "commits": 25,
+ "modify_time": "2018-07-29 11:13:38",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/p3nt4/nuages",
+ "star": 107,
+ "commits": 63,
+ "modify_time": "2019-10-11 21:27:18",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/p3nt4/invoke-tmpdavfs",
+ "star": 107,
+ "commits": 11,
+ "modify_time": "2018-12-06 18:25:51",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/p0cl4bs/hanzoinjection",
+ "star": 107,
+ "commits": 12,
+ "modify_time": "2016-08-24 19:17:23",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/orsinium/django-bruteforce-protection",
+ "star": 107,
+ "commits": 44,
+ "modify_time": "2018-05-07 06:02:01",
+ "last_release": "1.0.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/offdev/zwsp-steg-js",
+ "star": 107,
+ "commits": 6,
+ "modify_time": "2018-09-17 07:26:20",
+ "last_release": "\n 1.0.1\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/nasa/pvslib",
+ "star": 107,
+ "commits": 300,
+ "modify_time": "2019-11-22 19:37:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mudongliang/linuxflaw",
+ "star": 107,
+ "commits": 374,
+ "modify_time": "2019-04-17 03:03:23",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/mspreitz/adel",
+ "star": 107,
+ "commits": 12,
+ "modify_time": "2014-10-31 08:29:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mozilla/garmr",
+ "star": 107,
+ "commits": 40,
+ "modify_time": "2016-02-18 08:59:16",
+ "last_release": "\n v0.2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mit-ll/ll-fuzzer",
+ "star": 107,
+ "commits": 1,
+ "modify_time": "2015-06-25 18:06:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/misp/misp-warninglists",
+ "star": 107,
+ "commits": 347,
+ "modify_time": "2019-11-13 19:43:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mdegrazia/sqlite-deleted-records-parser",
+ "star": 107,
+ "commits": 19,
+ "modify_time": "2015-06-22 06:01:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/matterpreter/shhmon",
+ "star": 107,
+ "commits": 24,
+ "modify_time": "2019-09-16 08:01:29",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/malwaretech/tinyxpb",
+ "star": 107,
+ "commits": 3,
+ "modify_time": "2014-12-29 19:32:13",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/lizhongnian/btpanel-ss",
+ "star": 107,
+ "commits": 12,
+ "modify_time": "2018-09-05 16:44:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/liyangready/mini-proxy",
+ "star": 107,
+ "commits": 11,
+ "modify_time": "2019-12-09 08:24:34",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/liuchenx/surgeconfig",
+ "star": 107,
+ "commits": 15,
+ "modify_time": "2016-06-14 11:01:15",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/leoid/cve-2019-0708",
+ "star": 107,
+ "commits": 7,
+ "modify_time": "2019-05-28 02:46:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lattera/articles",
+ "star": 107,
+ "commits": 76,
+ "modify_time": "2019-12-02 09:22:28",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/koush/efi-x99",
+ "star": 107,
+ "commits": 147,
+ "modify_time": "2019-01-27 01:30:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jthomas/serverless-pwned-passwords",
+ "star": 107,
+ "commits": 3,
+ "modify_time": "2017-08-15 15:26:57",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/ios-reverse-engineering-dev/swift-apps-reverse-engineering",
+ "star": 107,
+ "commits": 3,
+ "modify_time": "2017-06-08 04:20:35",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ioactive/melkor_elf_fuzzer",
+ "star": 107,
+ "commits": 3,
+ "modify_time": "2014-11-11 03:26:45",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/RealBearcat/Oracle-WebLogic-CVE-2017-10271",
+ "star": 107,
+ "commits": 59,
+ "modify_time": "2018-03-19 02:04:29",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/hongrisec/ai-machine-learning-security",
+ "star": 107,
+ "commits": 18,
+ "modify_time": "2019-01-16 02:20:16",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/holbertonschool/hack-the-virtual-memory",
+ "star": 107,
+ "commits": 64,
+ "modify_time": "2017-12-01 23:44:31",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ethereum/eth-tester",
+ "star": 107,
+ "commits": 564,
+ "modify_time": "2019-11-05 22:23:31",
+ "last_release": "\n v0.3.0-beta.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/egaus/maliciousmacrobot",
+ "star": 107,
+ "commits": 78,
+ "modify_time": "2018-12-06 20:45:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/eboda/34c3ctf",
+ "star": 107,
+ "commits": 5,
+ "modify_time": "2018-01-05 11:32:30",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/dannythesloth/vanillarat",
+ "star": 107,
+ "commits": 13,
+ "modify_time": "2019-06-08 19:51:33",
+ "last_release": "v1.7",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/danielplohmann/apiscout",
+ "star": 107,
+ "commits": 78,
+ "modify_time": "2019-12-08 10:23:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cj123/canijailbreak.com",
+ "star": 107,
+ "commits": 167,
+ "modify_time": "2019-11-25 22:07:22",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/c0d3p1ut0s/cve-2019-12086-jackson-databind-file-read",
+ "star": 107,
+ "commits": 2,
+ "modify_time": "2019-05-26 07:34:07",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/blackhacker511/blacknet",
+ "star": 107,
+ "commits": 223,
+ "modify_time": "2019-12-09 20:11:47",
+ "last_release": "v1.0.3.1",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/atlas0fd00m/cancat",
+ "star": 107,
+ "commits": 203,
+ "modify_time": "2019-08-02 16:08:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/anandkumar11u/oscp-60days",
+ "star": 107,
+ "commits": 27,
+ "modify_time": "2019-12-07 18:07:20",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/lettleprince/qladder",
+ "star": 106,
+ "commits": 26,
+ "modify_time": "2019-01-04 08:54:08",
+ "last_release": "\n 1.6.2\n ",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/vulhub/metadockers",
+ "star": 106,
+ "commits": 14,
+ "modify_time": "2019-12-01 03:12:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/astrelsky/ghidra-cpp-class-analyzer",
+ "star": 106,
+ "commits": 63,
+ "modify_time": "2019-11-23 22:34:26",
+ "last_release": "1.3",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/cylance/IntroductionToMachineLearningForSecurityPros",
+ "star": 106,
+ "commits": 11,
+ "modify_time": "2017-08-23 02:27:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/opensourcesec/CIRTKit",
+ "star": 106,
+ "commits": 25,
+ "modify_time": "2017-04-17 16:43:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zerosum0x0/puppetstrings",
+ "star": 106,
+ "commits": 6,
+ "modify_time": "2017-07-02 06:02:38",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/xobs/fernly",
+ "star": 106,
+ "commits": 162,
+ "modify_time": "2016-01-25 04:32:01",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/xme/toolbox",
+ "star": 106,
+ "commits": 52,
+ "modify_time": "2018-06-06 06:18:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/webbreacher/orcs",
+ "star": 106,
+ "commits": 53,
+ "modify_time": "2019-03-18 19:17:09",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/uber/py-find-injection",
+ "star": 106,
+ "commits": 3,
+ "modify_time": "2013-11-08 00:46:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/testerting/hacker101-ctf",
+ "star": 106,
+ "commits": 42,
+ "modify_time": "2019-11-25 11:24:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tandasat/simplesvmhook",
+ "star": 106,
+ "commits": 13,
+ "modify_time": "2019-09-03 01:23:58",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/sparksharly/dl_for_xss",
+ "star": 106,
+ "commits": 23,
+ "modify_time": "2017-10-15 01:59:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/shogunlab/shuriken",
+ "star": 106,
+ "commits": 43,
+ "modify_time": "2017-09-01 15:00:14",
+ "last_release": "v1.2.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sable/heros",
+ "star": 106,
+ "commits": 367,
+ "modify_time": "2019-11-14 10:35:49",
+ "last_release": "\n 1.2.0\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/rootkitsmm/win32k-fuzzer",
+ "star": 106,
+ "commits": 14,
+ "modify_time": "2015-11-28 13:59:14",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/realender/dwpa",
+ "star": 106,
+ "commits": 499,
+ "modify_time": "2019-10-26 09:45:35",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/pavelrevak/pystlink",
+ "star": 106,
+ "commits": 152,
+ "modify_time": "2019-11-29 18:56:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/neatmonster/amie",
+ "star": 106,
+ "commits": 7,
+ "modify_time": "2019-10-27 18:17:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mattbostock/go-ldpreload-backdoor",
+ "star": 106,
+ "commits": 12,
+ "modify_time": "2015-12-09 01:25:54",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/mapleray/proxy_pool",
+ "star": 106,
+ "commits": 5,
+ "modify_time": "2016-04-26 13:23:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lingerhk/fshell",
+ "star": 106,
+ "commits": 36,
+ "modify_time": "2016-12-22 04:40:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kohsuke/com4j",
+ "star": 106,
+ "commits": 481,
+ "modify_time": "2016-03-19 02:26:50",
+ "last_release": "\n com4j-parent-2.1\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/isecpartners/android-opendebug",
+ "star": 106,
+ "commits": 5,
+ "modify_time": "2013-12-14 18:26:21",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/ickerwx/tcpproxy",
+ "star": 106,
+ "commits": 71,
+ "modify_time": "2019-10-09 14:52:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hanc00l/some_pocsuite",
+ "star": 106,
+ "commits": 13,
+ "modify_time": "2019-11-26 02:12:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/guedou/jupyter-radare2",
+ "star": 106,
+ "commits": 3,
+ "modify_time": "2017-12-22 15:16:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/graph-x/davscan",
+ "star": 106,
+ "commits": 30,
+ "modify_time": "2019-07-09 19:42:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gottburgm/exploits",
+ "star": 106,
+ "commits": 72,
+ "modify_time": "2019-10-10 16:03:30",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/fpass/fpass",
+ "star": 106,
+ "commits": 132,
+ "modify_time": "2018-12-28 13:29:41",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/flosell/trailscraper",
+ "star": 106,
+ "commits": 335,
+ "modify_time": "2019-11-01 15:59:12",
+ "last_release": "0.5.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fastvpseestiou/antidoto",
+ "star": 106,
+ "commits": 92,
+ "modify_time": "2015-09-18 18:30:11",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/falseen/pysocket",
+ "star": 106,
+ "commits": 101,
+ "modify_time": "2018-01-10 09:30:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fail0verflow/radeon-tools",
+ "star": 106,
+ "commits": 5,
+ "modify_time": "2017-01-06 05:23:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dev-sec/ansible-mysql-hardening",
+ "star": 106,
+ "commits": 104,
+ "modify_time": "2019-10-17 19:47:00",
+ "last_release": "2.0.0",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/comaeio/hibr2bin",
+ "star": 106,
+ "commits": 36,
+ "modify_time": "2019-09-13 06:17:44",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/caledoniaproject/cve-2018-1270",
+ "star": 106,
+ "commits": 13,
+ "modify_time": "2018-04-12 05:48:15",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/boy-hack/webshellmanager",
+ "star": 106,
+ "commits": 13,
+ "modify_time": "2017-02-01 05:18:26",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/bnagy/gapstone",
+ "star": 106,
+ "commits": 140,
+ "modify_time": "2019-08-28 05:28:30",
+ "last_release": "\n 3.0.3\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/ben0xa/powershelldefense",
+ "star": 106,
+ "commits": 6,
+ "modify_time": "2016-06-12 17:07:43",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/b3rito/yotter",
+ "star": 106,
+ "commits": 19,
+ "modify_time": "2017-11-30 16:34:27",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/attekett/nodefuzz",
+ "star": 106,
+ "commits": 28,
+ "modify_time": "2017-03-18 10:08:50",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/anbai-inc/cve-2018-4878",
+ "star": 106,
+ "commits": 3,
+ "modify_time": "2018-02-22 07:10:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ajvb/awesome-tor",
+ "star": 106,
+ "commits": 41,
+ "modify_time": "2019-10-16 20:43:01",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ajinabraham/webappsec",
+ "star": 106,
+ "commits": 60,
+ "modify_time": "2019-04-08 19:28:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/aeondave/doork",
+ "star": 106,
+ "commits": 6,
+ "modify_time": "2016-07-26 08:17:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/aboutsecurity/rastrea2r",
+ "star": 106,
+ "commits": 52,
+ "modify_time": "2018-08-09 16:26:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/0xitx/ida_nightfall",
+ "star": 106,
+ "commits": 10,
+ "modify_time": "2019-06-25 15:49:30",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/hanc00l/captcha-python-test",
+ "star": 105,
+ "commits": 7,
+ "modify_time": "2016-10-18 14:24:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ehco1996/shadowsocksr-deprecated",
+ "star": 105,
+ "commits": 57,
+ "modify_time": "2019-02-19 12:50:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/0ang3el/websocket-smuggle",
+ "star": 105,
+ "commits": 4,
+ "modify_time": "2019-11-02 17:54:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/josh0xA/ThreadBoat",
+ "star": 105,
+ "commits": 23,
+ "modify_time": "2019-10-28 22:04:14",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/w-digital-scanner/w10scan",
+ "star": 105,
+ "commits": 15,
+ "modify_time": "2019-08-17 09:01:15",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/vstinner/python-ptrace",
+ "star": 105,
+ "commits": 325,
+ "modify_time": "2019-10-21 21:03:03",
+ "last_release": "\n 0.9.4\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/phishai/phish-protect",
+ "star": 105,
+ "commits": 35,
+ "modify_time": "2018-06-22 06:50:00",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/yurushao/droid_injectso",
+ "star": 105,
+ "commits": 25,
+ "modify_time": "2014-11-09 21:24:37",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/virustotal/vt-cli",
+ "star": 105,
+ "commits": 106,
+ "modify_time": "2019-11-28 11:42:40",
+ "last_release": "0.7.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/tkcert/testssl.sh-webfrontend",
+ "star": 105,
+ "commits": 27,
+ "modify_time": "2017-06-29 21:35:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/thomasdullien/heap_history_viewer",
+ "star": 105,
+ "commits": 74,
+ "modify_time": "2019-11-18 17:50:49",
+ "last_release": "v0.6",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/tengzhangchao/struts2_045-poc",
+ "star": 105,
+ "commits": 15,
+ "modify_time": "2017-03-08 01:20:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/t0thkr1s/revshellgen",
+ "star": 105,
+ "commits": 21,
+ "modify_time": "2019-11-22 09:08:41",
+ "last_release": "v1.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/spf-tools/spf-tools",
+ "star": 105,
+ "commits": 513,
+ "modify_time": "2019-11-25 20:14:54",
+ "last_release": "v2.0",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/soffensive/windowsblindread",
+ "star": 105,
+ "commits": 17,
+ "modify_time": "2019-09-12 15:39:46",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/shizzz477/msploitego",
+ "star": 105,
+ "commits": 99,
+ "modify_time": "2018-06-24 22:22:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/secretsquirrel/recomposer",
+ "star": 105,
+ "commits": 2,
+ "modify_time": "2013-10-30 14:26:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/secmob/pocforcve-2015-1528",
+ "star": 105,
+ "commits": 2,
+ "modify_time": "2015-08-28 01:30:00",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/saferman/cupper",
+ "star": 105,
+ "commits": 15,
+ "modify_time": "2017-05-25 16:03:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rub-nds/metadata-attacker",
+ "star": 105,
+ "commits": 45,
+ "modify_time": "2019-02-02 12:18:31",
+ "last_release": "1.1",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/roglew/guppy-proxy",
+ "star": 105,
+ "commits": 26,
+ "modify_time": "2019-06-28 20:16:25",
+ "last_release": "\n 0.0.15\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rednaga/dexhook",
+ "star": 105,
+ "commits": 8,
+ "modify_time": "2015-09-14 21:59:20",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/redlectroid/overthruster",
+ "star": 105,
+ "commits": 37,
+ "modify_time": "2018-08-07 16:22:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/quarkslab/android-restriction-bypass",
+ "star": 105,
+ "commits": 3,
+ "modify_time": "2019-03-27 07:39:54",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/picoctf/picoctf-platform-2",
+ "star": 105,
+ "commits": null,
+ "modify_time": "2017-02-04 14:23:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/phith0n/python-xss-filter",
+ "star": 105,
+ "commits": 19,
+ "modify_time": "2017-02-01 09:15:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/objective-see/processmonitor",
+ "star": 105,
+ "commits": 14,
+ "modify_time": "2019-11-30 20:18:00",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/niclet/yi-hack-v2",
+ "star": 105,
+ "commits": 18,
+ "modify_time": "2018-04-22 06:13:41",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/naxg/cve_2019_0708_bluekeep_rce",
+ "star": 105,
+ "commits": 7,
+ "modify_time": "2019-09-07 03:12:15",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/mozilla/django-session-csrf",
+ "star": 105,
+ "commits": 42,
+ "modify_time": "2018-01-17 18:28:26",
+ "last_release": "\n v0.7.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/monero-project/research-lab",
+ "star": 105,
+ "commits": 204,
+ "modify_time": "2018-06-19 15:57:45",
+ "last_release": "",
+ "lang": "TeX"
+ },
+ {
+ "link": "https://github.com/mitre/brawl-public-game-001",
+ "star": 105,
+ "commits": 8,
+ "modify_time": "2018-07-11 17:45:33",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/mindmac/intentfuzzer",
+ "star": 105,
+ "commits": 11,
+ "modify_time": "2017-05-31 16:30:44",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/mhmdiaa/second-order",
+ "star": 105,
+ "commits": 49,
+ "modify_time": "2018-02-08 17:13:53",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/lz1y/cve-2018-8420",
+ "star": 105,
+ "commits": 17,
+ "modify_time": "2018-09-18 05:47:26",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/leomaurodesenv/game-datasets",
+ "star": 105,
+ "commits": 49,
+ "modify_time": "2019-11-28 00:28:06",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/leeberg/bluehive",
+ "star": 105,
+ "commits": 37,
+ "modify_time": "2019-06-26 01:43:56",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/kkirsche/cve-2017-10271",
+ "star": 105,
+ "commits": 54,
+ "modify_time": "2018-01-26 14:15:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/intrepidusgroup/trustme",
+ "star": 105,
+ "commits": 10,
+ "modify_time": "2013-02-07 13:33:37",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ggrandes/bouncer",
+ "star": 105,
+ "commits": 235,
+ "modify_time": "2018-02-13 19:52:02",
+ "last_release": "\n v2.2.11\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/formyown/alesense-antivirus",
+ "star": 105,
+ "commits": 3,
+ "modify_time": "2018-01-04 09:31:12",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/fooying/3102",
+ "star": 105,
+ "commits": 231,
+ "modify_time": "2015-03-13 09:01:21",
+ "last_release": "2.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ex16x41/oscp-prep",
+ "star": 105,
+ "commits": 530,
+ "modify_time": "2019-08-23 20:09:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/danigargu/idatropy",
+ "star": 105,
+ "commits": 10,
+ "modify_time": "2018-02-06 11:28:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/chrisallenlane/watchtower",
+ "star": 105,
+ "commits": 256,
+ "modify_time": "2017-06-27 22:35:33",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/c0ny1/sqlmap4burp-plus-plus",
+ "star": 105,
+ "commits": 21,
+ "modify_time": "2019-11-07 05:50:04",
+ "last_release": "0.2",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/binarydefense/goatrider",
+ "star": 105,
+ "commits": 6,
+ "modify_time": "2018-11-20 21:17:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/armijnhemel/binaryanalysis-ng",
+ "star": 105,
+ "commits": 1570,
+ "modify_time": "2019-09-06 18:28:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/5alt/ultrarelay",
+ "star": 105,
+ "commits": 2,
+ "modify_time": "2018-11-28 09:45:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/3gstudent/smbtouch-scanner",
+ "star": 105,
+ "commits": 15,
+ "modify_time": "2017-05-02 00:25:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/0xdezzy/cve-2019-11539",
+ "star": 105,
+ "commits": 11,
+ "modify_time": "2019-09-04 17:39:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/axsuul/rails-reverse-proxy",
+ "star": 104,
+ "commits": 91,
+ "modify_time": "2018-04-20 15:43:44",
+ "last_release": "\n v0.9.2\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/kibodwapon/axis-1.4-rce-poc",
+ "star": 104,
+ "commits": 12,
+ "modify_time": "2019-07-09 02:33:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/thelinuxchoice/pyrat",
+ "star": 104,
+ "commits": 8,
+ "modify_time": "2019-02-11 11:29:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/inlets/inletsctl",
+ "star": 104,
+ "commits": 41,
+ "modify_time": "2019-12-09 10:36:12",
+ "last_release": "0.3.4",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/varunon9/remote-control-pc",
+ "star": 104,
+ "commits": 58,
+ "modify_time": "2019-01-03 16:12:08",
+ "last_release": "v1.4.0",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/ajayrandhawa/Keylogger",
+ "star": 104,
+ "commits": 36,
+ "modify_time": "2019-05-02 18:14:20",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ziplokk1/incapsula-cracker-py3",
+ "star": 104,
+ "commits": 46,
+ "modify_time": "2017-10-06 22:33:31",
+ "last_release": "v0.8.1",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/tyranid/deviceguardbypasses",
+ "star": 104,
+ "commits": 7,
+ "modify_time": "2017-08-02 18:20:38",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/trustedsec/ships",
+ "star": 104,
+ "commits": 27,
+ "modify_time": "2017-01-01 20:59:53",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/trailofbits/appjaillauncher",
+ "star": 104,
+ "commits": 7,
+ "modify_time": "2016-05-26 19:45:41",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/stefanoj3/dirstalk",
+ "star": 104,
+ "commits": 85,
+ "modify_time": "2019-11-22 06:02:20",
+ "last_release": "1.3.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/sploitfun/lsploits",
+ "star": 104,
+ "commits": 17,
+ "modify_time": "2015-06-09 16:20:36",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/sidechannelmarvels/jeangrey",
+ "star": 104,
+ "commits": 24,
+ "modify_time": "2018-11-14 02:14:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/secureskytechnology/study-struts2-s2-054_055-jackson-cve-2017-7525_cve-2017-15095",
+ "star": 104,
+ "commits": 13,
+ "modify_time": "2017-12-13 03:34:55",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/secmob/mosec2016",
+ "star": 104,
+ "commits": 1,
+ "modify_time": "2016-07-04 05:22:11",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/santoku/santoku-linux",
+ "star": 104,
+ "commits": 7,
+ "modify_time": "2014-05-14 20:54:06",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/re4son/kali-pi",
+ "star": 104,
+ "commits": 141,
+ "modify_time": "2019-01-13 10:16:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/r-smith/splice-admin",
+ "star": 104,
+ "commits": 44,
+ "modify_time": "2019-05-16 00:55:12",
+ "last_release": "v2019.0515",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/ohmyadd/wetland",
+ "star": 104,
+ "commits": 118,
+ "modify_time": "2018-12-26 14:30:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nmulasmajic/syscall_exploit_cve-2018-8897",
+ "star": 104,
+ "commits": 1,
+ "modify_time": "2018-08-08 20:08:30",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/netxfly/transparent-proxy-scanner",
+ "star": 104,
+ "commits": 9,
+ "modify_time": "2015-07-15 17:18:55",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/netevert/dnsmorph",
+ "star": 104,
+ "commits": 107,
+ "modify_time": "2019-11-24 18:41:15",
+ "last_release": "v1.2.7",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/nccgroup/outlookleaktest",
+ "star": 104,
+ "commits": 5,
+ "modify_time": "2018-05-12 09:55:44",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/mustlive/davoset",
+ "star": 104,
+ "commits": 94,
+ "modify_time": "2018-12-19 21:26:07",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/mlghuskie/nobastian",
+ "star": 104,
+ "commits": 5,
+ "modify_time": "2017-12-18 11:31:56",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/mehdilauters/wifiscanmap",
+ "star": 104,
+ "commits": 135,
+ "modify_time": "2017-07-27 10:50:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mebigfatguy/fb-contrib",
+ "star": 104,
+ "commits": 3594,
+ "modify_time": "2019-11-17 17:31:02",
+ "last_release": "\n v7.4.7\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/m8r0wn/activereign",
+ "star": 104,
+ "commits": 34,
+ "modify_time": "2019-11-11 15:39:10",
+ "last_release": "1.0.4",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/luyg24/it_security",
+ "star": 104,
+ "commits": 193,
+ "modify_time": "2019-10-07 09:04:14",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/langleyfoxall/laravel-nist-password-rules",
+ "star": 104,
+ "commits": 99,
+ "modify_time": "2019-09-17 21:38:25",
+ "last_release": "v4.1.1",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/joarleymoraes/net_guard",
+ "star": 104,
+ "commits": 11,
+ "modify_time": "2018-02-04 00:32:59",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/jessfraz/tupperwarewithspears",
+ "star": 104,
+ "commits": 3,
+ "modify_time": "2016-09-30 19:19:05",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/isc-projects/bind9",
+ "star": 104,
+ "commits": 30573,
+ "modify_time": "2019-12-09 21:20:40",
+ "last_release": "\n v9_15_6\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/heimashi/debug_view_kotlin",
+ "star": 104,
+ "commits": 17,
+ "modify_time": "2018-01-23 07:20:40",
+ "last_release": "",
+ "lang": "Kotlin"
+ },
+ {
+ "link": "https://github.com/ga0/pyprotect",
+ "star": 104,
+ "commits": 6,
+ "modify_time": "2018-07-30 07:05:00",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/dryruby/tor.rb",
+ "star": 104,
+ "commits": 42,
+ "modify_time": "2019-09-17 07:13:06",
+ "last_release": "\n 0.1.2\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/cvvt/apptroy",
+ "star": 104,
+ "commits": 7,
+ "modify_time": "2016-07-28 06:32:04",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/cornerpirate/socat-shell",
+ "star": 104,
+ "commits": 5,
+ "modify_time": "2016-02-04 16:35:18",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/cn33liz/tpminituacbypass",
+ "star": 104,
+ "commits": 5,
+ "modify_time": "2016-09-26 13:28:29",
+ "last_release": "v1.1",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/checkpointsw/scout",
+ "star": 104,
+ "commits": 36,
+ "modify_time": "2019-11-28 07:06:55",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/c0demap/codemap",
+ "star": 104,
+ "commits": 21,
+ "modify_time": "2016-07-01 15:30:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/botherder/vxcage",
+ "star": 104,
+ "commits": 38,
+ "modify_time": "2015-04-04 17:45:26",
+ "last_release": "\n 0.2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/blindfuzzy/lhf",
+ "star": 104,
+ "commits": 40,
+ "modify_time": "2017-08-17 05:00:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/auth0/auth0.swift",
+ "star": 104,
+ "commits": 517,
+ "modify_time": "2019-11-27 13:22:05",
+ "last_release": "1.19.3",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/adobe/avmplus",
+ "star": 104,
+ "commits": 4,
+ "modify_time": "2016-03-24 00:57:47",
+ "last_release": "",
+ "lang": "ActionScript"
+ },
+ {
+ "link": "https://github.com/sachinkamath/ntlmrecon",
+ "star": 103,
+ "commits": 19,
+ "modify_time": "2019-12-08 03:40:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wtsxdev/list-of-web-application-security",
+ "star": 103,
+ "commits": 4,
+ "modify_time": "2017-01-27 21:16:18",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/landgrey/taoman",
+ "star": 103,
+ "commits": 8,
+ "modify_time": "2017-05-05 13:28:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/greycatz/cloudunflare",
+ "star": 103,
+ "commits": 14,
+ "modify_time": "2019-10-24 19:49:54",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/Tegmen/RegEx-Brainfuck-Interpreter",
+ "star": 103,
+ "commits": 7,
+ "modify_time": "2017-10-30 04:14:24",
+ "last_release": "",
+ "lang": "Brainfuck"
+ },
+ {
+ "link": "https://github.com/kealdishx/ICMethodDigger",
+ "star": 103,
+ "commits": 25,
+ "modify_time": "2018-08-06 09:46:26",
+ "last_release": "\n 1.0.2\n ",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/paulc/dnslib",
+ "star": 103,
+ "commits": 248,
+ "modify_time": "2019-10-01 17:59:03",
+ "last_release": "\n 0.9.7\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wilddeer/sniffer",
+ "star": 103,
+ "commits": 118,
+ "modify_time": "2019-11-19 07:21:16",
+ "last_release": "3.3.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/wetw0rk/malicious-wordpress-plugin",
+ "star": 103,
+ "commits": 8,
+ "modify_time": "2017-10-11 16:33:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/virb3/apk-utilities",
+ "star": 103,
+ "commits": 30,
+ "modify_time": "2019-12-03 01:00:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/twistlock/cloud-discovery",
+ "star": 103,
+ "commits": 21,
+ "modify_time": "2019-08-21 09:41:26",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/tripwire/tardis",
+ "star": 103,
+ "commits": 4,
+ "modify_time": "2015-08-28 23:30:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/thecjw/frida-android-scripts",
+ "star": 103,
+ "commits": 48,
+ "modify_time": "2018-08-22 08:11:53",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/sroberts/cacador",
+ "star": 103,
+ "commits": 79,
+ "modify_time": "2018-07-14 12:35:03",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/sibears/hrast",
+ "star": 103,
+ "commits": 54,
+ "modify_time": "2019-04-26 10:45:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/samratashok/continuousintrusion",
+ "star": 103,
+ "commits": 8,
+ "modify_time": "2016-12-11 06:30:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rub-nds/tls-padding-oracles",
+ "star": 103,
+ "commits": 16,
+ "modify_time": "2019-09-21 07:12:20",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/quarantyne/quarantyne",
+ "star": 103,
+ "commits": 75,
+ "modify_time": "2018-11-29 23:03:43",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/pwnieexpress/pwn_plug_sources",
+ "star": 103,
+ "commits": 32,
+ "modify_time": "2014-01-16 19:56:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/preos-security/fwaudit",
+ "star": 103,
+ "commits": 32,
+ "modify_time": "2018-09-07 22:43:23",
+ "last_release": "v0.0.4",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/powershell/windowscompatibility",
+ "star": 103,
+ "commits": 92,
+ "modify_time": "2019-10-18 17:02:24",
+ "last_release": "v1.0.0",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/not-wlan/drvmap",
+ "star": 103,
+ "commits": 35,
+ "modify_time": "2019-06-23 22:03:38",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/noplay/scrapy-mongodb",
+ "star": 103,
+ "commits": 47,
+ "modify_time": "2017-03-09 07:33:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/m2team/privexec",
+ "star": 103,
+ "commits": 260,
+ "modify_time": "2019-11-19 01:06:06",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/m0n0ph1/win64-rovnix-vbr-bootkit",
+ "star": 103,
+ "commits": 8,
+ "modify_time": "2015-07-30 13:43:16",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/lucasg/findrpc",
+ "star": 103,
+ "commits": 24,
+ "modify_time": "2019-09-13 15:21:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/joel16/psv-vsh-menu",
+ "star": 103,
+ "commits": 61,
+ "modify_time": "2019-05-23 14:39:37",
+ "last_release": "3.40",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jasonsheh/sitescan",
+ "star": 103,
+ "commits": 114,
+ "modify_time": "2019-01-14 09:26:52",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/infodox/tsh-sctp",
+ "star": 103,
+ "commits": 2,
+ "modify_time": "2013-10-19 21:49:15",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/infertux/zeyple",
+ "star": 103,
+ "commits": 183,
+ "modify_time": "2019-10-29 05:42:28",
+ "last_release": "\n v1.2.2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/iluxonchik/blackhat-python-book",
+ "star": 103,
+ "commits": 41,
+ "modify_time": "2019-02-18 21:59:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/iceb0y/windows-container",
+ "star": 103,
+ "commits": 63,
+ "modify_time": "2017-07-29 17:39:34",
+ "last_release": "1.0-rc3",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/homjxi0e/poweravails",
+ "star": 103,
+ "commits": 67,
+ "modify_time": "2019-05-31 03:35:43",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/hasherezade/snippets",
+ "star": 103,
+ "commits": 43,
+ "modify_time": "2017-10-11 18:33:43",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/harmj0y/asreproast",
+ "star": 103,
+ "commits": 5,
+ "modify_time": "2018-09-25 03:25:59",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/greensea/mptunnel",
+ "star": 103,
+ "commits": 90,
+ "modify_time": "2016-08-29 02:47:30",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/gossithedog/threathunting",
+ "star": 103,
+ "commits": 9,
+ "modify_time": "2018-02-16 14:38:02",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/gosecure/csp-auditor",
+ "star": 103,
+ "commits": 38,
+ "modify_time": "2018-03-02 16:53:36",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/google/vxsig",
+ "star": 103,
+ "commits": 10,
+ "modify_time": "2019-10-20 11:59:24",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/glinares/officemalware",
+ "star": 103,
+ "commits": 4,
+ "modify_time": "2017-06-12 14:57:14",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/gelim/censys",
+ "star": 103,
+ "commits": 17,
+ "modify_time": "2017-08-18 09:04:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gdbinit/hydra",
+ "star": 103,
+ "commits": 7,
+ "modify_time": "2013-09-30 16:49:13",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/fuchsia-mirror/garnet",
+ "star": 103,
+ "commits": null,
+ "modify_time": "2018-12-28 23:46:20",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/fireeye/flashmingo",
+ "star": 103,
+ "commits": 4,
+ "modify_time": "2019-06-19 11:08:02",
+ "last_release": "\n v1.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/enkomio/sacara",
+ "star": 103,
+ "commits": 265,
+ "modify_time": "2019-12-08 11:36:03",
+ "last_release": "2.3",
+ "lang": "F#"
+ },
+ {
+ "link": "https://github.com/ehrishirajsharma/swiftness",
+ "star": 103,
+ "commits": 28,
+ "modify_time": "2018-10-01 10:35:05",
+ "last_release": "v0.3",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/cbayet/exploit-cve-2017-6008",
+ "star": 103,
+ "commits": 5,
+ "modify_time": "2018-06-25 12:41:41",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/b1eed/vulrec",
+ "star": 103,
+ "commits": 71,
+ "modify_time": "2019-12-09 16:47:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/allyshka/pwngitmanager",
+ "star": 103,
+ "commits": 5,
+ "modify_time": "2016-06-04 19:05:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/alexmyg/andropytool",
+ "star": 103,
+ "commits": 104,
+ "modify_time": "2019-05-23 10:40:59",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/1111joe1111/tuts",
+ "star": 103,
+ "commits": 3,
+ "modify_time": "2017-10-17 15:59:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/l3m0n/webfuzzattack",
+ "star": 102,
+ "commits": 5,
+ "modify_time": "2019-04-23 04:52:51",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/searking/ggfwzs_in_hack",
+ "star": 102,
+ "commits": 21,
+ "modify_time": "2018-12-24 03:12:20",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/raikia/recon-ng-api-key-creation",
+ "star": 102,
+ "commits": 5,
+ "modify_time": "2018-01-26 14:16:58",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/mazen160/jwt-pwn",
+ "star": 102,
+ "commits": 1,
+ "modify_time": "2019-10-22 13:41:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zwq0320/malicious_dynamic_behavior_detection_by_cnn",
+ "star": 102,
+ "commits": 1,
+ "modify_time": "2018-08-29 07:22:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zaf/sipshock",
+ "star": 102,
+ "commits": 7,
+ "modify_time": "2016-08-13 20:37:15",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/x41sec/x41-smartcard-fuzzing",
+ "star": 102,
+ "commits": 5,
+ "modify_time": "2019-01-15 07:17:46",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/wstart/db_baseline",
+ "star": 102,
+ "commits": 19,
+ "modify_time": "2018-05-28 01:29:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wolph/python-statsd",
+ "star": 102,
+ "commits": 179,
+ "modify_time": "2017-09-05 01:54:29",
+ "last_release": "\n v2.1.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vmavromatis/absolutely-proprietary",
+ "star": 102,
+ "commits": 90,
+ "modify_time": "2019-06-27 20:11:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/violentshell/rover",
+ "star": 102,
+ "commits": 12,
+ "modify_time": "2016-08-24 07:56:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/veramine/detections",
+ "star": 102,
+ "commits": 3,
+ "modify_time": "2017-03-21 05:15:03",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/uber/crumb",
+ "star": 102,
+ "commits": 93,
+ "modify_time": "2019-11-09 23:12:56",
+ "last_release": "\n 0.1.0\n ",
+ "lang": "Kotlin"
+ },
+ {
+ "link": "https://github.com/tbiehn/curryfinger",
+ "star": 102,
+ "commits": 1,
+ "modify_time": "2019-09-10 19:42:43",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/sensepost/gdi-palettes-exp",
+ "star": 102,
+ "commits": 11,
+ "modify_time": "2017-07-30 05:13:40",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/sakeven/httpproxy",
+ "star": 102,
+ "commits": 33,
+ "modify_time": "2018-03-04 11:50:54",
+ "last_release": "\n v2.0\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/rassec/a_scan_framework",
+ "star": 102,
+ "commits": 7,
+ "modify_time": "2018-08-31 02:57:33",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/patois/idapyhelper",
+ "star": 102,
+ "commits": 13,
+ "modify_time": "2019-11-23 13:16:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/padovah4ck/cve-2019-1253",
+ "star": 102,
+ "commits": 21,
+ "modify_time": "2019-09-12 14:43:47",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/n0fate/volafox",
+ "star": 102,
+ "commits": 143,
+ "modify_time": "2016-07-25 00:39:31",
+ "last_release": "v1.0.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mbevilacqua/appcompatprocessor",
+ "star": 102,
+ "commits": 168,
+ "modify_time": "2019-01-29 15:37:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/matrix1001/heapinspect",
+ "star": 102,
+ "commits": 51,
+ "modify_time": "2019-08-28 06:39:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/madeye/tcp_china",
+ "star": 102,
+ "commits": 8,
+ "modify_time": "2019-11-18 02:33:14",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/liuyufei/sslkiller",
+ "star": 102,
+ "commits": 7,
+ "modify_time": "2016-06-15 02:54:11",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/leeberg/bluecommand",
+ "star": 102,
+ "commits": 54,
+ "modify_time": "2019-04-19 03:19:25",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/kibodwapon/noeye",
+ "star": 102,
+ "commits": 19,
+ "modify_time": "2019-06-02 09:08:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jmpsec/osctrl",
+ "star": 102,
+ "commits": 211,
+ "modify_time": "2019-11-06 01:02:00",
+ "last_release": "v0.1.9",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/jkingsman/bishop",
+ "star": 102,
+ "commits": 152,
+ "modify_time": "2017-04-15 04:08:35",
+ "last_release": "v1.0.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/janniskirschner/horn3t",
+ "star": 102,
+ "commits": 5,
+ "modify_time": "2019-06-06 09:24:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/io-developer/php-whois",
+ "star": 102,
+ "commits": 339,
+ "modify_time": "2019-12-05 14:12:53",
+ "last_release": "3.4.3",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/huuck/adbhoney",
+ "star": 102,
+ "commits": 76,
+ "modify_time": "2019-11-09 03:58:03",
+ "last_release": "0.2-beta",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hc0d3r/sudohulk",
+ "star": 102,
+ "commits": 14,
+ "modify_time": "2018-03-09 12:19:41",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/google/pg_page_verification",
+ "star": 102,
+ "commits": 2,
+ "modify_time": "2018-02-09 23:43:43",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/feicong/android-app-sec",
+ "star": 102,
+ "commits": 1,
+ "modify_time": "2017-02-13 12:29:32",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/edoverflow/bugbountywiki",
+ "star": 102,
+ "commits": 2,
+ "modify_time": "2018-07-28 15:32:26",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/eddyverbruggen/nativescript-fingerprint-auth",
+ "star": 102,
+ "commits": 102,
+ "modify_time": "2019-11-09 09:14:45",
+ "last_release": "7.0.2",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/duo-labs/xray",
+ "star": 102,
+ "commits": 43,
+ "modify_time": "2018-11-29 21:31:31",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/decred/gominer",
+ "star": 102,
+ "commits": 108,
+ "modify_time": "2019-02-12 14:16:47",
+ "last_release": "\n v1.0.0\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/cujanovic/crlf-injection-payloads",
+ "star": 102,
+ "commits": 8,
+ "modify_time": "2018-09-18 13:04:56",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/buffer/pylibemu",
+ "star": 102,
+ "commits": 134,
+ "modify_time": "2019-12-05 09:13:53",
+ "last_release": "\n v0.6.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/azuregreen/injectcollection",
+ "star": 102,
+ "commits": 17,
+ "modify_time": "2017-04-03 13:41:30",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/awsmhacks/crackmapextreme",
+ "star": 102,
+ "commits": 133,
+ "modify_time": "2019-12-05 23:46:33",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/apg-intel/ipv6tools",
+ "star": 102,
+ "commits": 152,
+ "modify_time": "2018-06-24 02:05:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/anx1ang/poc_pentest",
+ "star": 102,
+ "commits": 28,
+ "modify_time": "2019-07-12 01:45:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ajinabraham/static-dom-xss-scanner",
+ "star": 102,
+ "commits": 5,
+ "modify_time": "2015-03-10 04:29:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ahmia/search",
+ "star": 102,
+ "commits": 458,
+ "modify_time": "2019-06-11 03:08:50",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/hmaverickadams/breach-parse",
+ "star": 101,
+ "commits": 14,
+ "modify_time": "2019-04-25 21:02:12",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/n1xbyte/donutcs",
+ "star": 101,
+ "commits": 25,
+ "modify_time": "2019-10-31 00:26:25",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/arkadiyt/bounty-targets",
+ "star": 101,
+ "commits": 60,
+ "modify_time": "2019-12-05 00:25:01",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/PolarisLab/SecPaper",
+ "star": 101,
+ "commits": 21,
+ "modify_time": "2019-03-13 06:25:30",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/6e726d/wig",
+ "star": 101,
+ "commits": 16,
+ "modify_time": "2019-08-05 15:49:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/znuh/re-dected",
+ "star": 101,
+ "commits": 9,
+ "modify_time": "2017-09-02 21:07:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xx0hcd/malleable-c2-profiles",
+ "star": 101,
+ "commits": 64,
+ "modify_time": "2019-09-10 17:57:12",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/w3c/webappsec-csp",
+ "star": 101,
+ "commits": 702,
+ "modify_time": "2019-11-25 07:49:41",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/utkusen/eda2",
+ "star": 101,
+ "commits": 5,
+ "modify_time": "2016-03-27 18:42:15",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/spiderlabs/airachnid-burp-extension",
+ "star": 101,
+ "commits": 11,
+ "modify_time": "2017-11-23 08:03:06",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/skysider/vulnpoc",
+ "star": 101,
+ "commits": 13,
+ "modify_time": "2019-06-17 08:09:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sam-b/hashdata",
+ "star": 101,
+ "commits": 74,
+ "modify_time": "2015-10-14 22:44:24",
+ "last_release": "\n v0.0.3\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/rub-syssec/nautilus",
+ "star": 101,
+ "commits": 12,
+ "modify_time": "2019-04-15 16:44:58",
+ "last_release": "",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/raw-packet/raw-packet",
+ "star": 101,
+ "commits": 643,
+ "modify_time": "2019-10-06 17:28:01",
+ "last_release": "v0.1.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/polarislab/secpaper",
+ "star": 101,
+ "commits": 21,
+ "modify_time": "2019-03-13 06:25:30",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/peterdavehello/tor-socks-proxy",
+ "star": 101,
+ "commits": 54,
+ "modify_time": "2019-12-07 12:19:56",
+ "last_release": "",
+ "lang": "Dockerfile"
+ },
+ {
+ "link": "https://github.com/onotelli/justniffer",
+ "star": 101,
+ "commits": 186,
+ "modify_time": "2019-10-11 00:18:32",
+ "last_release": "v0.5.15",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/netspi/burp-extensions",
+ "star": 101,
+ "commits": 46,
+ "modify_time": "2019-10-17 15:05:57",
+ "last_release": "1.0.0",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/nccgroup/tpmgenie",
+ "star": 101,
+ "commits": 7,
+ "modify_time": "2018-03-21 17:42:55",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/n00py/norknork",
+ "star": 101,
+ "commits": 18,
+ "modify_time": "2017-01-30 22:23:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mystech7/burp-hunter",
+ "star": 101,
+ "commits": 9,
+ "modify_time": "2018-08-31 19:28:08",
+ "last_release": "v1.3",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/mr-un1k0d3r/windows-signedbinary",
+ "star": 101,
+ "commits": 20,
+ "modify_time": "2018-11-19 19:35:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mkorman90/regipy",
+ "star": 101,
+ "commits": 100,
+ "modify_time": "2019-10-25 15:52:30",
+ "last_release": "1.2.5",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/milo2012/cve-2018-0296",
+ "star": 101,
+ "commits": 18,
+ "modify_time": "2018-12-09 11:57:14",
+ "last_release": "v0.0.4",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/mfontanini/dot11decrypt",
+ "star": 101,
+ "commits": 10,
+ "modify_time": "2017-06-14 04:18:36",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/mattifestation/deviceguardbypassmitigationrules",
+ "star": 101,
+ "commits": 13,
+ "modify_time": "2017-05-27 16:26:37",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/macr0phag3/sniffer",
+ "star": 101,
+ "commits": 110,
+ "modify_time": "2018-08-17 10:10:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kirillwow/ids_bypass",
+ "star": 101,
+ "commits": 6,
+ "modify_time": "2019-01-11 15:07:50",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/joernchen/xxeserve",
+ "star": 101,
+ "commits": 11,
+ "modify_time": "2016-06-02 15:36:27",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/ihebski/a-red-teamer-diaries",
+ "star": 101,
+ "commits": 30,
+ "modify_time": "2019-10-16 09:25:35",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/google/closure-linter",
+ "star": 101,
+ "commits": 96,
+ "modify_time": "2018-12-03 15:08:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/giovannidicanio/winreg",
+ "star": 101,
+ "commits": 33,
+ "modify_time": "2019-09-24 18:09:10",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/enigma0x3/invoke-loginprompt",
+ "star": 101,
+ "commits": 21,
+ "modify_time": "2016-05-23 17:12:10",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/electrajailbreak/cydia",
+ "star": 101,
+ "commits": 1707,
+ "modify_time": "2018-02-13 23:20:14",
+ "last_release": "",
+ "lang": "Objective-C++"
+ },
+ {
+ "link": "https://github.com/djrbliss/libplayground",
+ "star": 101,
+ "commits": 5,
+ "modify_time": "2012-01-14 22:17:46",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/darkoperator/defcon25_ps_workshop",
+ "star": 101,
+ "commits": 3,
+ "modify_time": "2017-07-29 07:17:37",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/damonmohammadbagher/nativepayload_reverse_tcp",
+ "star": 101,
+ "commits": 36,
+ "modify_time": "2019-09-08 22:24:58",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/cyclops-community/ctf",
+ "star": 101,
+ "commits": 1936,
+ "modify_time": "2019-12-03 20:32:36",
+ "last_release": "v1.5.5",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/cornerpirate/java-stager",
+ "star": 101,
+ "commits": 17,
+ "modify_time": "2018-08-06 21:35:57",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/clymb3r/misc-windows-hacking",
+ "star": 101,
+ "commits": 7,
+ "modify_time": "2014-11-02 22:48:42",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/clr2of8/gathercontacts",
+ "star": 101,
+ "commits": 12,
+ "modify_time": "2018-03-29 21:58:46",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/chrismaddalena/sharpcloud",
+ "star": 101,
+ "commits": 5,
+ "modify_time": "2018-09-18 02:24:05",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/ceh-tn/the-axer",
+ "star": 101,
+ "commits": 13,
+ "modify_time": "2018-05-03 22:30:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/blackhole1/autofindxssandcsrf",
+ "star": 101,
+ "commits": 8,
+ "modify_time": "2018-10-20 02:43:18",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/benjibobs/async_wake",
+ "star": 101,
+ "commits": 52,
+ "modify_time": "2017-12-18 21:18:28",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/akayn/postexploits",
+ "star": 101,
+ "commits": null,
+ "modify_time": "2017-09-30 17:13:12",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/adulau/cve-search",
+ "star": 101,
+ "commits": 1552,
+ "modify_time": "2019-11-22 10:14:56",
+ "last_release": "\n v2.6\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/0ffffffffh/dragondance",
+ "star": 101,
+ "commits": 10,
+ "modify_time": "2019-09-15 20:11:44",
+ "last_release": "v0.2.2",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/siguza/iometa",
+ "star": 100,
+ "commits": 59,
+ "modify_time": "2019-06-10 21:39:22",
+ "last_release": "\n 1.3.1\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/honwen/openwrt-shadowsocksr",
+ "star": 100,
+ "commits": 258,
+ "modify_time": "2019-12-02 17:05:26",
+ "last_release": "v2.5.2-d490456",
+ "lang": "Makefile"
+ },
+ {
+ "link": "https://github.com/paradiseduo/shadowsocksx-ng-r8",
+ "star": 100,
+ "commits": 383,
+ "modify_time": "2019-12-10 02:32:38",
+ "last_release": "1.4.7",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/snail007/proxy_admin_free",
+ "star": 100,
+ "commits": 24,
+ "modify_time": "2019-11-28 04:57:35",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/sciencemanx/ctf_import",
+ "star": 100,
+ "commits": 7,
+ "modify_time": "2016-12-13 14:15:09",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/woolabs/reverseng",
+ "star": 100,
+ "commits": 44,
+ "modify_time": "2015-08-03 04:51:59",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/williballenthin/shellbags",
+ "star": 100,
+ "commits": 165,
+ "modify_time": "2017-01-12 22:32:35",
+ "last_release": "\n v0.5.5\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vishnudxb/docker-blackeye",
+ "star": 100,
+ "commits": 4,
+ "modify_time": "2019-03-14 10:08:49",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/tbgsecurity/splunk_shells",
+ "star": 100,
+ "commits": 39,
+ "modify_time": "2017-04-07 02:49:50",
+ "last_release": "1.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/syss-research/outis",
+ "star": 100,
+ "commits": 72,
+ "modify_time": "2017-09-19 16:53:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/subutai-io/p2p",
+ "star": 100,
+ "commits": 2489,
+ "modify_time": "2019-02-22 10:57:19",
+ "last_release": "8.3.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/spring-epfl/lightnion",
+ "star": 100,
+ "commits": 532,
+ "modify_time": "2019-07-09 09:52:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/shellster/dcsyncmonitor",
+ "star": 100,
+ "commits": 5,
+ "modify_time": "2018-03-07 00:21:25",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/securestate/eapeak",
+ "star": 100,
+ "commits": 130,
+ "modify_time": "2018-10-11 07:45:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sapran/dontclickshit",
+ "star": 100,
+ "commits": 47,
+ "modify_time": "2018-11-17 13:19:57",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/nonce-disrespect/nonce-disrespect",
+ "star": 100,
+ "commits": 16,
+ "modify_time": "2017-04-10 09:36:20",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/nese-team/ourchallenges",
+ "star": 100,
+ "commits": 44,
+ "modify_time": "2019-09-03 14:22:14",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ncouture/mockssh",
+ "star": 100,
+ "commits": 71,
+ "modify_time": "2017-01-15 16:56:41",
+ "last_release": "v1.4.5",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nccgroup/gitpwnd",
+ "star": 100,
+ "commits": 29,
+ "modify_time": "2019-10-21 21:06:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/momika233/joomla-3.4.6-rce",
+ "star": 100,
+ "commits": 5,
+ "modify_time": "2019-10-10 02:00:51",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/malwarelu/malwasm",
+ "star": 100,
+ "commits": 5,
+ "modify_time": "2015-01-21 15:59:48",
+ "last_release": "\n v0.1.1\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/krintoxi/noobsec-toolkit",
+ "star": 100,
+ "commits": 104,
+ "modify_time": "2018-12-24 17:56:42",
+ "last_release": "2.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jpmorganchase/tessera",
+ "star": 100,
+ "commits": 4707,
+ "modify_time": "2019-12-06 17:19:22",
+ "last_release": "tessera-0.10.1",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/jonathansalwan/abf",
+ "star": 100,
+ "commits": 12,
+ "modify_time": "2015-08-20 10:05:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jonaschn/awesome-he",
+ "star": 100,
+ "commits": 16,
+ "modify_time": "2019-11-02 16:19:38",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/jndok/iokit-dumper-arm64",
+ "star": 100,
+ "commits": 9,
+ "modify_time": "2016-07-04 17:43:06",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ionescu007/hookingnirvana",
+ "star": 100,
+ "commits": 3,
+ "modify_time": "2016-01-27 03:29:42",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/g0rx/cve-2018-7600-drupal-rce",
+ "star": 100,
+ "commits": 20,
+ "modify_time": "2018-04-18 06:58:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fvantienen/dji_rev",
+ "star": 100,
+ "commits": 19,
+ "modify_time": "2017-09-13 13:25:40",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/fox-it/cobaltstrike-extraneous-space",
+ "star": 100,
+ "commits": 12,
+ "modify_time": "2019-04-30 09:08:50",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/eset/vba-dynamic-hook",
+ "star": 100,
+ "commits": 1,
+ "modify_time": "2016-03-16 08:52:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/elevenpaths/uac-a-mola",
+ "star": 100,
+ "commits": 56,
+ "modify_time": "2019-10-17 05:42:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cs01/pygdbmi",
+ "star": 100,
+ "commits": 104,
+ "modify_time": "2019-09-21 20:42:53",
+ "last_release": "\n 0.9.0.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cr4sh/uefi_boot_script_expl",
+ "star": 100,
+ "commits": 14,
+ "modify_time": "2016-01-25 14:13:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/comsecuris/luaqemu",
+ "star": 100,
+ "commits": 54387,
+ "modify_time": "2017-07-07 15:34:28",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cnlohr/fx3fun",
+ "star": 100,
+ "commits": 50,
+ "modify_time": "2018-08-07 04:15:17",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/blasty/moneyshot",
+ "star": 100,
+ "commits": 129,
+ "modify_time": "2015-06-03 10:24:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/avlidienbrunn/bountydash",
+ "star": 100,
+ "commits": 53,
+ "modify_time": "2018-04-03 12:49:56",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/artsabintsev/ethminer-for-macos",
+ "star": 100,
+ "commits": 12073,
+ "modify_time": "2018-02-28 16:53:45",
+ "last_release": "1.0.4",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/angr/claripy",
+ "star": 100,
+ "commits": 1911,
+ "modify_time": "2019-11-01 22:12:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/anders/pwgen",
+ "star": 100,
+ "commits": 68,
+ "modify_time": "2019-04-13 03:48:20",
+ "last_release": "1.5",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/alexplaskett/qnxsecurity",
+ "star": 100,
+ "commits": 33,
+ "modify_time": "2016-03-19 18:12:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/acceis/crypto_identifier",
+ "star": 100,
+ "commits": 11,
+ "modify_time": "2018-01-04 11:04:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/1hack0/bug-bounty-101",
+ "star": 100,
+ "commits": 14,
+ "modify_time": "2019-01-25 02:30:46",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/nfc-tools/milazycracker",
+ "star": 99,
+ "commits": 25,
+ "modify_time": "2019-10-10 16:13:38",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/javascript-obfuscator/javascript-obfuscator-ui",
+ "star": 99,
+ "commits": 120,
+ "modify_time": "2019-12-01 19:32:31",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/winterssy/miui-purify",
+ "star": 99,
+ "commits": 1,
+ "modify_time": "2019-02-06 00:53:29",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/devploit/xorpass",
+ "star": 99,
+ "commits": 3,
+ "modify_time": "2019-11-27 22:25:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cisagov/cset",
+ "star": 99,
+ "commits": 1366,
+ "modify_time": "2019-12-09 19:25:46",
+ "last_release": "\n 9.2.2\n ",
+ "lang": "TSQL"
+ },
+ {
+ "link": "https://github.com/dsccommunity/ComputerManagementDsc",
+ "star": 99,
+ "commits": 807,
+ "modify_time": "2019-11-25 06:43:01",
+ "last_release": "\n 6.4.0.0-PSGallery\n ",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/houjingyi233/CPU-vulnerability-collections",
+ "star": 99,
+ "commits": 35,
+ "modify_time": "2019-08-07 07:13:13",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/AonCyberLabs/Cexigua",
+ "star": 99,
+ "commits": 12,
+ "modify_time": "2017-08-24 13:20:09",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/gwillem/magevulndb",
+ "star": 99,
+ "commits": 83,
+ "modify_time": "2019-11-04 13:37:44",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/rapid7/le",
+ "star": 99,
+ "commits": 777,
+ "modify_time": "2019-11-19 14:45:45",
+ "last_release": "v1.4.44",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/Antid0teCom/ios-kerneldocs",
+ "star": 99,
+ "commits": 15,
+ "modify_time": "2017-09-10 14:15:42",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/atxsinn3r/amsiscanner",
+ "star": 99,
+ "commits": 5,
+ "modify_time": "2018-03-30 19:53:34",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/zodiacon/peexplorer",
+ "star": 99,
+ "commits": 66,
+ "modify_time": "2019-03-03 14:28:42",
+ "last_release": "0.61",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/ym2011/scanbackdoor",
+ "star": 99,
+ "commits": 20,
+ "modify_time": "2016-08-22 23:00:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xerpi/ds4vita",
+ "star": 99,
+ "commits": 33,
+ "modify_time": "2017-07-30 18:50:53",
+ "last_release": "1.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/wonderqs/blade",
+ "star": 99,
+ "commits": 14,
+ "modify_time": "2018-09-12 08:02:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/trimstray/massh-enum",
+ "star": 99,
+ "commits": 42,
+ "modify_time": "2019-11-15 08:11:17",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/trailofbits/sienna-locomotive",
+ "star": 99,
+ "commits": 9,
+ "modify_time": "2019-11-27 19:12:31",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/thehappydinoa/iosrestrictionbruteforce",
+ "star": 99,
+ "commits": 86,
+ "modify_time": "2018-09-09 14:57:38",
+ "last_release": "2.1.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/testingpens/malwarepersistencescripts",
+ "star": 99,
+ "commits": 4,
+ "modify_time": "2018-05-30 14:13:01",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/tecknicaltom/dsniff",
+ "star": 99,
+ "commits": 6,
+ "modify_time": "2010-06-29 05:51:57",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/target/webbreaker",
+ "star": 99,
+ "commits": null,
+ "modify_time": "2018-12-14 20:12:26",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/tandasat/exploitcapcom",
+ "star": 99,
+ "commits": 5,
+ "modify_time": "2017-02-17 16:46:51",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/sonickun/ctf-crypto-writeups",
+ "star": 99,
+ "commits": 82,
+ "modify_time": "2017-10-17 13:40:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/smythtech/sdnpwn",
+ "star": 99,
+ "commits": 58,
+ "modify_time": "2019-06-21 09:46:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/racwn/wp-file-analyser",
+ "star": 99,
+ "commits": 15,
+ "modify_time": "2016-02-07 15:38:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pwntester/s2-046-poc",
+ "star": 99,
+ "commits": 2,
+ "modify_time": "2017-03-21 10:11:39",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/pure-l0g1c/pulse",
+ "star": 99,
+ "commits": 36,
+ "modify_time": "2018-02-08 21:29:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/parrotsec/anonsurf",
+ "star": 99,
+ "commits": 89,
+ "modify_time": "2019-06-05 13:57:11",
+ "last_release": "\n debian/2.10+parrot2\n ",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/oxagast/ansvif",
+ "star": 99,
+ "commits": 441,
+ "modify_time": "2019-11-13 22:03:04",
+ "last_release": "1.12",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/nettitude/invoke-powerthief",
+ "star": 99,
+ "commits": 20,
+ "modify_time": "2018-07-19 13:19:40",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/mr-un1k0d3r/sct-obfuscator",
+ "star": 99,
+ "commits": 8,
+ "modify_time": "2017-07-07 03:34:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/misp/misp-training",
+ "star": 99,
+ "commits": 183,
+ "modify_time": "2019-12-09 19:22:23",
+ "last_release": "",
+ "lang": "TeX"
+ },
+ {
+ "link": "https://github.com/m4cs/traxss",
+ "star": 99,
+ "commits": 81,
+ "modify_time": "2019-10-21 14:43:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lorexxar/feigong",
+ "star": 99,
+ "commits": 48,
+ "modify_time": "2017-01-24 15:24:46",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/lmy375/pinvmp",
+ "star": 99,
+ "commits": 15,
+ "modify_time": "2018-05-27 08:13:50",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/lambdaconcept/minerva",
+ "star": 99,
+ "commits": 82,
+ "modify_time": "2019-11-11 21:45:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/johanlike/djy-oneplus6-or-oneplus6t-nethunter-andrax-kernel",
+ "star": 99,
+ "commits": 12,
+ "modify_time": "2019-10-06 21:50:10",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/jkinder/jakstab",
+ "star": 99,
+ "commits": 240,
+ "modify_time": "2017-03-31 08:46:48",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/intezer/memorypatchdetector",
+ "star": 99,
+ "commits": 26,
+ "modify_time": "2019-09-13 14:31:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/iaik/flush_flush",
+ "star": 99,
+ "commits": 10,
+ "modify_time": "2019-10-07 11:43:10",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hasherezade/pe-bear-releases",
+ "star": 99,
+ "commits": 6,
+ "modify_time": "2019-01-19 02:54:43",
+ "last_release": "0.3.9.7",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ganyao114/va_doc",
+ "star": 99,
+ "commits": 8,
+ "modify_time": "2018-06-25 10:07:48",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/finn-no/xss-html-filter",
+ "star": 99,
+ "commits": 44,
+ "modify_time": "2015-05-27 07:50:47",
+ "last_release": "\n xss-html-filter-1.5\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/darx0r/stingray",
+ "star": 99,
+ "commits": 29,
+ "modify_time": "2018-07-08 18:39:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cyberpoint/ruxcon2016etw",
+ "star": 99,
+ "commits": 22,
+ "modify_time": "2016-11-21 18:27:50",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/codelion/pathgrind",
+ "star": 99,
+ "commits": 54,
+ "modify_time": "2017-03-25 01:36:40",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/circl/url-abuse",
+ "star": 99,
+ "commits": 88,
+ "modify_time": "2019-08-22 16:53:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bontchev/wlscrape",
+ "star": 99,
+ "commits": 53,
+ "modify_time": "2016-10-24 10:23:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bishopfox/cve-2016-1764",
+ "star": 99,
+ "commits": 5,
+ "modify_time": "2016-04-09 23:23:20",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/bigdatagenomics/mango",
+ "star": 99,
+ "commits": 871,
+ "modify_time": "2019-12-03 19:34:20",
+ "last_release": "\n mango-parent-spark2_2.11-0.0.5\n ",
+ "lang": "Scala"
+ },
+ {
+ "link": "https://github.com/attactics/nmapgrapher",
+ "star": 99,
+ "commits": 17,
+ "modify_time": "2019-03-09 17:52:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/atredispartners/cve-2018-0952-systemcollector",
+ "star": 99,
+ "commits": 1,
+ "modify_time": "2018-08-21 20:24:56",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/aquynh/unidos",
+ "star": 98,
+ "commits": 13,
+ "modify_time": "2016-03-31 08:20:11",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/seajaysec/cypheroth",
+ "star": 98,
+ "commits": 80,
+ "modify_time": "2019-12-04 18:28:38",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/marcosd4h/sysmonx",
+ "star": 98,
+ "commits": 23,
+ "modify_time": "2019-09-17 12:07:04",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/chryzsh/awesome-bloodhound",
+ "star": 98,
+ "commits": 15,
+ "modify_time": "2019-11-18 17:32:13",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/radareorg/radare2-bindings",
+ "star": 98,
+ "commits": 890,
+ "modify_time": "2019-11-05 06:31:06",
+ "last_release": "\n 4.0.0\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/zsdlove/apkvulcheck",
+ "star": 98,
+ "commits": 36,
+ "modify_time": "2019-04-07 07:28:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/trendmicro/defplorex",
+ "star": 98,
+ "commits": 2,
+ "modify_time": "2017-07-27 00:33:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/superfly/wormhole",
+ "star": 98,
+ "commits": 73,
+ "modify_time": "2019-03-07 21:32:15",
+ "last_release": "v0.7.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/summitt/burp-ysoserial",
+ "star": 98,
+ "commits": 11,
+ "modify_time": "2016-05-19 13:29:29",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/singe/wifi-frequency-hacker",
+ "star": 98,
+ "commits": 8,
+ "modify_time": "2017-01-10 10:21:27",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/simp/simp-core",
+ "star": 98,
+ "commits": 464,
+ "modify_time": "2019-10-26 01:14:53",
+ "last_release": "6.4.0-ALPHA",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/silentbreaksec/throwbacklp",
+ "star": 98,
+ "commits": 14,
+ "modify_time": "2016-01-26 22:56:30",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/securityriskadvisors/cmd.jsp",
+ "star": 98,
+ "commits": 6,
+ "modify_time": "2017-07-26 15:43:42",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/sdhash/sdhash",
+ "star": 98,
+ "commits": 18,
+ "modify_time": "2013-12-09 23:13:15",
+ "last_release": "v4.0",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/scottgarner/beetbox",
+ "star": 98,
+ "commits": 25,
+ "modify_time": "2018-10-01 02:43:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sandialabs/dr_robot",
+ "star": 98,
+ "commits": 212,
+ "modify_time": "2019-10-28 21:19:26",
+ "last_release": "1.2.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sagishahar/lpeworkshop",
+ "star": 98,
+ "commits": 13,
+ "modify_time": "2019-01-15 15:05:43",
+ "last_release": "",
+ "lang": "Batchfile"
+ },
+ {
+ "link": "https://github.com/phith0n/realworldctf",
+ "star": 98,
+ "commits": 3,
+ "modify_time": "2019-09-19 03:29:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/onesourcecat/scan-framework",
+ "star": 98,
+ "commits": 15,
+ "modify_time": "2015-04-22 02:11:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nowrep/vita-shellbat",
+ "star": 98,
+ "commits": 25,
+ "modify_time": "2019-02-17 14:02:21",
+ "last_release": "r10",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/mushorg/tanner",
+ "star": 98,
+ "commits": 235,
+ "modify_time": "2019-08-16 14:46:14",
+ "last_release": "v0.6",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mixaill/fakepdb",
+ "star": 98,
+ "commits": 7,
+ "modify_time": "2019-08-12 08:22:56",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/milo2012/cve-2018-13382",
+ "star": 98,
+ "commits": 12,
+ "modify_time": "2019-08-13 15:06:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/micropython/micropython-unicorn",
+ "star": 98,
+ "commits": 95,
+ "modify_time": "2017-11-14 00:03:37",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/merculite/ble-security",
+ "star": 98,
+ "commits": 4,
+ "modify_time": "2016-10-01 14:41:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/matonis/page_brute",
+ "star": 98,
+ "commits": 27,
+ "modify_time": "2014-01-06 02:39:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/matiasb/demiurge",
+ "star": 98,
+ "commits": 20,
+ "modify_time": "2017-01-15 19:29:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ls0f/cracker",
+ "star": 98,
+ "commits": 60,
+ "modify_time": "2019-11-08 12:40:23",
+ "last_release": "v2.3.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/leesoh/yams",
+ "star": 98,
+ "commits": 30,
+ "modify_time": "2017-12-15 15:38:10",
+ "last_release": "v0.1.2-alpha",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ktecv2000/how-to-play-ctf",
+ "star": 98,
+ "commits": 2,
+ "modify_time": "2018-02-12 19:23:09",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/konstruktoid/ansible-role-hardening",
+ "star": 98,
+ "commits": 309,
+ "modify_time": "2019-11-26 14:43:45",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/kofktu/sniffer",
+ "star": 98,
+ "commits": 98,
+ "modify_time": "2019-04-15 00:58:12",
+ "last_release": "1.6.0",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/kitctf/writeups",
+ "star": 98,
+ "commits": 84,
+ "modify_time": "2017-08-26 16:16:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jakeajames/multi_path",
+ "star": 98,
+ "commits": 63,
+ "modify_time": "2018-07-02 18:24:25",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/irsl/jackson-rce-via-spel",
+ "star": 98,
+ "commits": 11,
+ "modify_time": "2018-01-09 08:14:03",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/insidegui/darkmode",
+ "star": 98,
+ "commits": 2,
+ "modify_time": "2016-07-12 17:21:24",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/guyingbo/shadowproxy",
+ "star": 98,
+ "commits": 175,
+ "modify_time": "2019-09-09 06:06:40",
+ "last_release": "\n v0.1.8\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/green-m/green-hat-suite",
+ "star": 98,
+ "commits": 51,
+ "modify_time": "2018-08-13 08:15:18",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/google/legilimency",
+ "star": 98,
+ "commits": 1,
+ "modify_time": "2017-10-03 15:47:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gebl/dirtycow-docker-vdso",
+ "star": 98,
+ "commits": 3,
+ "modify_time": "2016-11-01 15:52:23",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/fmk0/scripts",
+ "star": 98,
+ "commits": 12,
+ "modify_time": "2019-07-18 18:41:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/flothrone/bootguard",
+ "star": 98,
+ "commits": 7,
+ "modify_time": "2017-04-14 15:46:10",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/cojocar/bin2llvm",
+ "star": 98,
+ "commits": 12,
+ "modify_time": "2018-06-05 12:43:23",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/chango77747/adenumerator",
+ "star": 98,
+ "commits": 5,
+ "modify_time": "2016-12-15 18:15:38",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/byt3bl33d3r/slides",
+ "star": 98,
+ "commits": 11,
+ "modify_time": "2019-10-11 20:05:05",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/blackye/webdirdig",
+ "star": 98,
+ "commits": 3,
+ "modify_time": "2018-01-08 09:58:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/artlav/meteor_decoder",
+ "star": 98,
+ "commits": 18,
+ "modify_time": "2019-08-25 18:55:08",
+ "last_release": "",
+ "lang": "Pascal"
+ },
+ {
+ "link": "https://github.com/andrewmichaelsmith/bluepot",
+ "star": 98,
+ "commits": 11,
+ "modify_time": "2015-12-10 22:25:37",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/0x09al/go-deliver",
+ "star": 98,
+ "commits": 39,
+ "modify_time": "2018-06-18 17:05:25",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/bechurch/reverse-proxy-demo",
+ "star": 97,
+ "commits": 2,
+ "modify_time": "2018-07-12 03:04:25",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/tonyseek/rsocks",
+ "star": 97,
+ "commits": 53,
+ "modify_time": "2018-06-26 10:11:08",
+ "last_release": "\n v0.3.3\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/securisec/chepy",
+ "star": 97,
+ "commits": 131,
+ "modify_time": "2019-12-10 01:16:32",
+ "last_release": "1.4.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hackplayers/empire-mod-hackplayers",
+ "star": 97,
+ "commits": 211,
+ "modify_time": "2018-10-07 13:15:18",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/stephenturner/annotables",
+ "star": 97,
+ "commits": 46,
+ "modify_time": "2019-01-28 21:02:27",
+ "last_release": "v0.1.90",
+ "lang": "R"
+ },
+ {
+ "link": "https://github.com/virtualabs/radiobit",
+ "star": 97,
+ "commits": 11,
+ "modify_time": "2019-09-04 13:08:24",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/xyntax/security-conference-archive",
+ "star": 97,
+ "commits": 6,
+ "modify_time": "2019-09-11 10:03:09",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/cybercog/laravel-optimus",
+ "star": 97,
+ "commits": 40,
+ "modify_time": "2019-11-05 06:07:46",
+ "last_release": "3.4.0",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/4d61726b/virtualkd-redux",
+ "star": 97,
+ "commits": 57,
+ "modify_time": "2019-11-14 01:59:46",
+ "last_release": "2019.6",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/xct/ropstar",
+ "star": 97,
+ "commits": 8,
+ "modify_time": "2019-10-28 17:21:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/PAGalaxyLab/vxhunter",
+ "star": 97,
+ "commits": 88,
+ "modify_time": "2019-11-22 05:45:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/OWASP/owasp-summit-2017",
+ "star": 97,
+ "commits": 5796,
+ "modify_time": "2018-04-20 10:19:10",
+ "last_release": "summit-2017",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/zencodex/hack-android",
+ "star": 97,
+ "commits": 5,
+ "modify_time": "2015-11-03 13:49:07",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/zcgonvh/cve-2017-7269",
+ "star": 97,
+ "commits": 1,
+ "modify_time": "2017-03-30 22:19:57",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/woanware/usbdeviceforensics",
+ "star": 97,
+ "commits": 13,
+ "modify_time": "2019-08-14 15:43:05",
+ "last_release": "v0.0.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vmonaco/kloak",
+ "star": 97,
+ "commits": 86,
+ "modify_time": "2019-09-18 16:30:12",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/subgraph/fw-daemon",
+ "star": 97,
+ "commits": 219,
+ "modify_time": "2018-01-07 22:09:32",
+ "last_release": "\n v0.0.11\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/sskaje/6in4",
+ "star": 97,
+ "commits": 6,
+ "modify_time": "2019-02-12 08:09:26",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/shadowhatesyou/pipetap.sh",
+ "star": 97,
+ "commits": 3,
+ "modify_time": "2019-04-23 17:33:56",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/s0lst1c3/silentbridge",
+ "star": 97,
+ "commits": 9,
+ "modify_time": "2019-07-17 03:40:32",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/roglew/wifikill",
+ "star": 97,
+ "commits": 17,
+ "modify_time": "2014-01-02 02:14:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ridter/myjsrat",
+ "star": 97,
+ "commits": 7,
+ "modify_time": "2016-04-01 02:28:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rhinosecuritylabs/aggressor-scripts",
+ "star": 97,
+ "commits": 2,
+ "modify_time": "2018-03-31 18:48:00",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/renatoathaydes/go-hash",
+ "star": 97,
+ "commits": 124,
+ "modify_time": "2019-03-03 14:42:07",
+ "last_release": "0.9.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/qubesos/qubes-antievilmaid",
+ "star": 97,
+ "commits": 313,
+ "modify_time": "2019-11-30 02:31:55",
+ "last_release": "\n mm_3c8792c6\n ",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/quarkslab/qb-sync",
+ "star": 97,
+ "commits": 19,
+ "modify_time": "2015-07-13 09:17:15",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/piasy/fridaandroidtracer",
+ "star": 97,
+ "commits": 7,
+ "modify_time": "2018-04-14 08:58:57",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/p3nt4/magiccopy",
+ "star": 97,
+ "commits": 5,
+ "modify_time": "2019-05-22 00:48:53",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/netxfly/crack_ssh",
+ "star": 97,
+ "commits": 12,
+ "modify_time": "2018-09-27 08:54:28",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/mxi4oyu/dockerxscan",
+ "star": 97,
+ "commits": 107,
+ "modify_time": "2018-03-15 02:45:52",
+ "last_release": "0.5",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/mitshell/libmich",
+ "star": 97,
+ "commits": 264,
+ "modify_time": "2018-09-17 12:48:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/liruqi/mume-ios",
+ "star": 97,
+ "commits": 356,
+ "modify_time": "2018-04-24 08:50:12",
+ "last_release": "",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/libyal/libevtx",
+ "star": 97,
+ "commits": 267,
+ "modify_time": "2019-11-12 05:53:33",
+ "last_release": "20191104",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jeremywildsmith/x86devirt",
+ "star": 97,
+ "commits": 54,
+ "modify_time": "2018-09-21 21:29:34",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/itsmehacker/cardpwn",
+ "star": 97,
+ "commits": 31,
+ "modify_time": "2019-07-22 19:09:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/holly-hacker/eazfixer",
+ "star": 97,
+ "commits": 43,
+ "modify_time": "2018-10-06 13:06:16",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/georgenicolaou/w64owow64",
+ "star": 97,
+ "commits": 8,
+ "modify_time": "2017-05-17 05:59:00",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/fdiskyou/kcshell",
+ "star": 97,
+ "commits": 21,
+ "modify_time": "2017-04-24 20:29:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fdiskyou/iris",
+ "star": 97,
+ "commits": 14,
+ "modify_time": "2019-11-19 07:54:51",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/dakotanelson/sneaky-creeper",
+ "star": 97,
+ "commits": 193,
+ "modify_time": "2018-03-07 20:56:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cx9527/strongdb",
+ "star": 97,
+ "commits": 22,
+ "modify_time": "2016-06-20 07:03:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/chrisallenlane/drek",
+ "star": 97,
+ "commits": 8,
+ "modify_time": "2017-06-27 22:18:26",
+ "last_release": "\n v1.0.3\n ",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/an0nymous0/mybatisplugin-crack-javassist",
+ "star": 97,
+ "commits": 33,
+ "modify_time": "2019-06-21 06:07:22",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/86hh/dreamloader",
+ "star": 97,
+ "commits": 1,
+ "modify_time": "2018-12-19 23:56:34",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/0vercl0k/ollydbg2-python",
+ "star": 97,
+ "commits": 94,
+ "modify_time": "2014-07-08 12:47:00",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/xiangweizeng/darknet2ncnn",
+ "star": 96,
+ "commits": 30,
+ "modify_time": "2019-10-24 12:19:59",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/bl4de/dictionaries",
+ "star": 96,
+ "commits": 45,
+ "modify_time": "2019-12-07 01:07:09",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/404notf0und/always-learning",
+ "star": 96,
+ "commits": 135,
+ "modify_time": "2019-10-21 14:11:34",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/paulsec/shodan-firefox-addon",
+ "star": 96,
+ "commits": 24,
+ "modify_time": "2017-12-20 13:34:48",
+ "last_release": "0.3",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/guardianproject/pixelknot",
+ "star": 96,
+ "commits": 174,
+ "modify_time": "2019-09-05 09:45:58",
+ "last_release": "1.0.1",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/fboldewin/com-code-helper",
+ "star": 96,
+ "commits": 17,
+ "modify_time": "2019-11-22 14:39:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tyranid/windowsrpcclients",
+ "star": 96,
+ "commits": 2,
+ "modify_time": "2019-10-31 20:51:06",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/b17zr/ntlm_challenger",
+ "star": 96,
+ "commits": 2,
+ "modify_time": "2019-11-25 23:07:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/Smi1eSEC/Web-Security-Note",
+ "star": 96,
+ "commits": 23,
+ "modify_time": "2019-11-04 16:04:09",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/Presto412/Captcha-Cracker",
+ "star": 96,
+ "commits": 55,
+ "modify_time": "2019-01-04 06:37:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nkargas/Gen2-UHF-RFID-Reader",
+ "star": 96,
+ "commits": 17,
+ "modify_time": "2019-11-16 23:20:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nsacyber/Certificate-Authority-Situational-Awareness",
+ "star": 96,
+ "commits": 4,
+ "modify_time": "2016-06-02 16:49:16",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/xme/misp-docker",
+ "star": 96,
+ "commits": 30,
+ "modify_time": "2018-06-20 07:22:51",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/unix-ninja/shellfire",
+ "star": 96,
+ "commits": 6,
+ "modify_time": "2018-01-23 05:22:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/torque59/nosqlpot",
+ "star": 96,
+ "commits": 32,
+ "modify_time": "2017-01-19 14:15:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tengzhangchao/pycmd",
+ "star": 96,
+ "commits": 6,
+ "modify_time": "2017-07-14 02:06:25",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/sooshie/security-data-analysis",
+ "star": 96,
+ "commits": 15,
+ "modify_time": "2015-05-01 15:31:35",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/skiptomyliu/solutions-bwapp",
+ "star": 96,
+ "commits": 35,
+ "modify_time": "2016-11-30 05:41:00",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/secmobi/slides",
+ "star": 96,
+ "commits": 4,
+ "modify_time": "2017-02-11 22:26:57",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/s4n7h0/practical-reverse-engineering-using-radare2",
+ "star": 96,
+ "commits": 5,
+ "modify_time": "2017-02-18 07:54:09",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/robindavid/idasec",
+ "star": 96,
+ "commits": 19,
+ "modify_time": "2017-11-19 17:13:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/njcx/pocsuite_poc_collect",
+ "star": 96,
+ "commits": 3,
+ "modify_time": "2018-09-21 00:18:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/niallmcl/deep-android-malware-detection",
+ "star": 96,
+ "commits": 11,
+ "modify_time": "2017-11-25 07:00:45",
+ "last_release": "",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/neuroo/equip",
+ "star": 96,
+ "commits": 16,
+ "modify_time": "2016-12-14 20:09:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mrmtwoj/0day-mikrotik",
+ "star": 96,
+ "commits": 5,
+ "modify_time": "2018-07-25 14:32:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/momenbasel/keyfinder",
+ "star": 96,
+ "commits": 4,
+ "modify_time": "2019-08-07 06:07:14",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/michyamrane/okadminfinder3",
+ "star": 96,
+ "commits": 71,
+ "modify_time": "2019-05-17 00:23:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/magicming200/tomcat-weak-password-scanner",
+ "star": 96,
+ "commits": 33,
+ "modify_time": "2017-04-10 07:33:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/luctalpe/wmimon",
+ "star": 96,
+ "commits": 10,
+ "modify_time": "2017-05-05 13:18:36",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/leeon123/cc-attack",
+ "star": 96,
+ "commits": 106,
+ "modify_time": "2019-11-19 05:24:17",
+ "last_release": "v2.7.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/le4f/dnsmaper",
+ "star": 96,
+ "commits": 3,
+ "modify_time": "2015-01-12 12:27:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/k3170makan/goodork",
+ "star": 96,
+ "commits": 28,
+ "modify_time": "2013-06-08 23:13:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jjf012/passivescanner",
+ "star": 96,
+ "commits": 12,
+ "modify_time": "2017-08-17 16:00:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jgillam/burp-co2",
+ "star": 96,
+ "commits": 118,
+ "modify_time": "2017-10-18 04:38:19",
+ "last_release": "v1.1.12",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/jeffbryner/pyioc",
+ "star": 96,
+ "commits": 32,
+ "modify_time": "2013-04-22 23:34:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hongludianxue/bailu-sed-tool",
+ "star": 96,
+ "commits": 1,
+ "modify_time": "2019-09-09 05:17:17",
+ "last_release": "",
+ "lang": "Pascal"
+ },
+ {
+ "link": "https://github.com/he1m4n6a/btscan",
+ "star": 96,
+ "commits": 6,
+ "modify_time": "2018-04-18 03:18:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hahwul/mad-metasploit",
+ "star": 96,
+ "commits": 165,
+ "modify_time": "2019-11-24 14:51:40",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/google/service-worker-detector",
+ "star": 96,
+ "commits": 61,
+ "modify_time": "2019-11-04 14:23:52",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/glmcdona/strings2",
+ "star": 96,
+ "commits": 14,
+ "modify_time": "2019-12-05 01:02:17",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/geeksonsecurity/vuln-web-apps",
+ "star": 96,
+ "commits": 18,
+ "modify_time": "2019-10-03 18:53:29",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/gavinlyonsrepo/cylon",
+ "star": 96,
+ "commits": 136,
+ "modify_time": "2019-06-14 01:13:11",
+ "last_release": "5.6",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/felamos/weirdhta",
+ "star": 96,
+ "commits": 50,
+ "modify_time": "2019-11-22 12:36:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fdiskyou/www.rootkit.com",
+ "star": 96,
+ "commits": 27,
+ "modify_time": "2018-11-26 10:27:34",
+ "last_release": "",
+ "lang": "Pascal"
+ },
+ {
+ "link": "https://github.com/enzolovesbacon/inficere",
+ "star": 96,
+ "commits": 8,
+ "modify_time": "2014-05-19 18:47:40",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/dxxzst/free-proxy-list",
+ "star": 96,
+ "commits": 5106,
+ "modify_time": "2019-12-10 08:31:06",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/desudesutalk/desudesutalk",
+ "star": 96,
+ "commits": 265,
+ "modify_time": "2018-12-02 12:55:37",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/depoon/networkinterceptor",
+ "star": 96,
+ "commits": 61,
+ "modify_time": "2019-05-26 13:24:34",
+ "last_release": "0.0.8",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/danmcinerney/msf-autopwn",
+ "star": 96,
+ "commits": 37,
+ "modify_time": "2018-06-22 21:26:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/chaitin/pro",
+ "star": 96,
+ "commits": 4,
+ "modify_time": "2016-10-27 15:09:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cetfor/antidbg",
+ "star": 96,
+ "commits": 1,
+ "modify_time": "2018-03-06 21:20:04",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/bitbeans/streamcryptor",
+ "star": 96,
+ "commits": 114,
+ "modify_time": "2017-03-10 18:18:28",
+ "last_release": "v.0.5.1",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/bastienjalbert/topguw",
+ "star": 96,
+ "commits": 32,
+ "modify_time": "2019-09-12 11:02:11",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/baguswiratmaadi/catnip",
+ "star": 96,
+ "commits": 17,
+ "modify_time": "2019-04-13 17:04:29",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/anttikurittu/kirjuri",
+ "star": 96,
+ "commits": 250,
+ "modify_time": "2018-03-15 09:06:11",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/airbus-cert/regrippy",
+ "star": 96,
+ "commits": 26,
+ "modify_time": "2019-11-29 13:00:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/0day1day/mwcrawler",
+ "star": 96,
+ "commits": 5,
+ "modify_time": "2012-10-12 13:58:28",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ssd-secure-disclosure/advisories",
+ "star": 95,
+ "commits": 85,
+ "modify_time": "2019-11-17 10:00:09",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ashemery/LinuxForensics",
+ "star": 95,
+ "commits": 10,
+ "modify_time": "2019-10-18 06:03:34",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ContionMig/ContionMig-AntiCheat",
+ "star": 95,
+ "commits": null,
+ "modify_time": "2019-03-30 01:54:14",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/sectool/redteam-hardware-toolkit",
+ "star": 95,
+ "commits": 8,
+ "modify_time": "2018-06-30 17:21:58",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/Cyb0r9/quasar",
+ "star": 95,
+ "commits": 64,
+ "modify_time": "2018-10-30 09:08:18",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/open-keychain/openpgp-api",
+ "star": 95,
+ "commits": 154,
+ "modify_time": "2019-01-05 19:41:02",
+ "last_release": "\n v12\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/ubuntu-mate/mate-dock-applet",
+ "star": 95,
+ "commits": 337,
+ "modify_time": "2019-09-30 14:58:17",
+ "last_release": "19.10.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/frida/frida-java-bridge",
+ "star": 95,
+ "commits": 350,
+ "modify_time": "2019-12-05 19:08:55",
+ "last_release": "\n v3.3.0\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/xslim/mobiledevicemanager",
+ "star": 95,
+ "commits": 8,
+ "modify_time": "2017-11-27 12:00:57",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/v1cker/src_edu",
+ "star": 95,
+ "commits": 6,
+ "modify_time": "2017-03-21 13:19:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tehsyntx/loffice",
+ "star": 95,
+ "commits": 26,
+ "modify_time": "2017-02-15 20:16:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/songguoxiong/wenshu_utils",
+ "star": 95,
+ "commits": 49,
+ "modify_time": "2019-10-29 01:49:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/senjaxus/allakore_remote",
+ "star": 95,
+ "commits": null,
+ "modify_time": "2018-02-03 18:29:29",
+ "last_release": "",
+ "lang": "Pascal"
+ },
+ {
+ "link": "https://github.com/safebreach-labs/mkmalwarefrom",
+ "star": 95,
+ "commits": 5,
+ "modify_time": "2017-11-29 03:43:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ppabc/security_check",
+ "star": 95,
+ "commits": 6,
+ "modify_time": "2017-01-24 08:35:04",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/pengzhile/atlassian-agent",
+ "star": 95,
+ "commits": null,
+ "modify_time": "2018-12-10 05:36:06",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/oliverklee/pixy",
+ "star": 95,
+ "commits": 157,
+ "modify_time": "2018-01-24 00:37:24",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/nowsecure/samsung-ime-rce-poc",
+ "star": 95,
+ "commits": 5,
+ "modify_time": "2016-09-22 15:57:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nihilus/ida-idc-scripts",
+ "star": 95,
+ "commits": 8,
+ "modify_time": "2014-09-05 05:41:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/n4xh4ck5/cmssc4n",
+ "star": 95,
+ "commits": 22,
+ "modify_time": "2018-10-02 19:24:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/microsoftedge/jsdbg",
+ "star": 95,
+ "commits": 1502,
+ "modify_time": "2019-11-05 00:09:00",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/matrix07ksa/brute_force",
+ "star": 95,
+ "commits": 52,
+ "modify_time": "2019-09-28 00:55:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/martinvigo/voicemailautomator",
+ "star": 95,
+ "commits": 4,
+ "modify_time": "2018-09-13 05:11:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/malwaretech/fakembr",
+ "star": 95,
+ "commits": 4,
+ "modify_time": "2015-03-12 02:05:41",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/malaohu/arukas-api",
+ "star": 95,
+ "commits": 69,
+ "modify_time": "2017-07-14 03:14:48",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/lonely-night/fastjson_gadgets_scanner",
+ "star": 95,
+ "commits": 2,
+ "modify_time": "2019-09-01 14:19:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/localh0t/wildpwn",
+ "star": 95,
+ "commits": 11,
+ "modify_time": "2018-05-25 20:42:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jssimporter/jssimporter",
+ "star": 95,
+ "commits": 363,
+ "modify_time": "2019-10-14 20:08:18",
+ "last_release": "v1.0.5",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jlrodriguezf/whatspwn",
+ "star": 95,
+ "commits": 55,
+ "modify_time": "2016-04-13 06:57:21",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/jas502n/fuzz-wooyun-org",
+ "star": 95,
+ "commits": 7,
+ "modify_time": "2017-02-27 17:01:43",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/jas502n/2018-qwb-ctf",
+ "star": 95,
+ "commits": 40,
+ "modify_time": "2018-03-30 03:59:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ilikenwf/darkagent",
+ "star": 95,
+ "commits": 3,
+ "modify_time": "2013-04-15 19:57:51",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/guardianproject/tor-browser",
+ "star": 95,
+ "commits": 533575,
+ "modify_time": "2017-12-13 16:26:17",
+ "last_release": "\n Orfox-tor-browser-52.7.2esr-7.5-1\n ",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/gaasedelen/prefix",
+ "star": 95,
+ "commits": 8,
+ "modify_time": "2017-11-01 20:59:36",
+ "last_release": "\n v1.1.2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/frizb/sourcecodesniffer",
+ "star": 95,
+ "commits": 44,
+ "modify_time": "2018-06-13 16:58:45",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/feross/fullscreen-api-attack",
+ "star": 95,
+ "commits": 11,
+ "modify_time": "2013-04-18 07:31:53",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/eugeniodelfa/smali-cfgs",
+ "star": 95,
+ "commits": 27,
+ "modify_time": "2014-07-05 20:29:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/equk/windows",
+ "star": 95,
+ "commits": 120,
+ "modify_time": "2019-02-12 14:24:01",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/enigma0x3/invoke-altdsbackdoor",
+ "star": 95,
+ "commits": 11,
+ "modify_time": "2015-10-06 19:46:39",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/dzzie/vs_libemu",
+ "star": 95,
+ "commits": 167,
+ "modify_time": "2019-10-17 11:49:19",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/dugsong/pypcap",
+ "star": 95,
+ "commits": 89,
+ "modify_time": "2010-07-17 19:07:07",
+ "last_release": "\n PYPCAP_1_1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/djhohnstein/eventlogparser",
+ "star": 95,
+ "commits": 3,
+ "modify_time": "2019-03-29 02:21:13",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/covenantsql/cookiescanner",
+ "star": 95,
+ "commits": 64,
+ "modify_time": "2019-04-26 11:31:03",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/commixproject/commix-testbed",
+ "star": 95,
+ "commits": 68,
+ "modify_time": "2019-10-14 05:33:17",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/bughunterid/hackeronedb",
+ "star": 95,
+ "commits": 13,
+ "modify_time": "2018-12-16 12:20:10",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/blackploit/hash-identifier",
+ "star": 95,
+ "commits": 6,
+ "modify_time": "2018-03-14 05:12:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/australiancybersecuritycentre/windows_event_logging",
+ "star": 95,
+ "commits": 2,
+ "modify_time": "2017-07-31 06:05:18",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/beepisla/csgo-crash-exploit",
+ "star": 94,
+ "commits": 11,
+ "modify_time": "2019-08-23 09:43:50",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/functionclub/localecn",
+ "star": 94,
+ "commits": 6,
+ "modify_time": "2017-12-21 21:32:05",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/SewellDinG/LFIboomCTF",
+ "star": 94,
+ "commits": 10,
+ "modify_time": "2017-04-26 05:55:17",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/AdamLaurie/ChronIC",
+ "star": 94,
+ "commits": 9,
+ "modify_time": "2019-08-09 20:18:44",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/radareorg/r2con2017",
+ "star": 94,
+ "commits": 25,
+ "modify_time": "2017-10-23 21:29:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/waryas/umpmlib",
+ "star": 94,
+ "commits": 13,
+ "modify_time": "2017-11-24 14:23:25",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/w00dl3cs/exploit_playground",
+ "star": 94,
+ "commits": 6,
+ "modify_time": "2019-12-09 13:01:10",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/vletoux/smbscanner",
+ "star": 94,
+ "commits": 6,
+ "modify_time": "2019-04-09 12:00:59",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/thewhiteh4t/killcast",
+ "star": 94,
+ "commits": 26,
+ "modify_time": "2019-08-22 11:22:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/stealth/fraud-bridge",
+ "star": 94,
+ "commits": 10,
+ "modify_time": "2014-01-30 12:02:57",
+ "last_release": "\n rel-0.28s2\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/securityrat/securityrat",
+ "star": 94,
+ "commits": 748,
+ "modify_time": "2019-11-02 10:39:07",
+ "last_release": "v1.7.10",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/raikia/kali-setup",
+ "star": 94,
+ "commits": 174,
+ "modify_time": "2019-11-07 01:52:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/r0ysue/osg-teams",
+ "star": 94,
+ "commits": 355,
+ "modify_time": "2017-12-08 03:34:31",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/pyudev/pyudev",
+ "star": 94,
+ "commits": 1047,
+ "modify_time": "2019-10-04 21:30:03",
+ "last_release": "\n v0.21.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nccgroup/port-scan-automation",
+ "star": 94,
+ "commits": 1,
+ "modify_time": "2013-05-30 13:35:43",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/mr-un1k0d3r/shellcoding",
+ "star": 94,
+ "commits": 17,
+ "modify_time": "2019-05-14 19:53:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mindpointgroup/rhel6-stig",
+ "star": 94,
+ "commits": 435,
+ "modify_time": "2018-12-05 08:33:08",
+ "last_release": "0.9.7",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/mike-goodwin/owasp-threat-dragon-desktop",
+ "star": 94,
+ "commits": 162,
+ "modify_time": "2019-07-28 15:11:52",
+ "last_release": "0.1.27",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/mdsecactivebreach/sharppack",
+ "star": 94,
+ "commits": 3,
+ "modify_time": "2018-12-17 11:54:45",
+ "last_release": "",
+ "lang": "Batchfile"
+ },
+ {
+ "link": "https://github.com/lorenzog/dns-parallel-prober",
+ "star": 94,
+ "commits": 56,
+ "modify_time": "2018-01-22 15:41:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lgrangeia/cupid",
+ "star": 94,
+ "commits": 2,
+ "modify_time": "2014-05-29 14:49:00",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/lanmaster53/honeybadger",
+ "star": 94,
+ "commits": 40,
+ "modify_time": "2019-07-24 03:41:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jcs/login_duress",
+ "star": 94,
+ "commits": 10,
+ "modify_time": "2019-03-20 17:32:00",
+ "last_release": "\n v1.1\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/invictus1306/workshop-bsidesmunich2018",
+ "star": 94,
+ "commits": 4,
+ "modify_time": "2018-04-08 12:44:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/huntresslabs/evading-autoruns",
+ "star": 94,
+ "commits": 7,
+ "modify_time": "2017-10-16 17:43:20",
+ "last_release": "",
+ "lang": "Batchfile"
+ },
+ {
+ "link": "https://github.com/hlldz/apc-ppid",
+ "star": 94,
+ "commits": 7,
+ "modify_time": "2019-04-03 09:57:28",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/hasherezade/pe_recovery_tools",
+ "star": 94,
+ "commits": 56,
+ "modify_time": "2017-11-13 02:07:45",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/fuzzysecurity/capcom-rootkit",
+ "star": 94,
+ "commits": 2,
+ "modify_time": "2017-03-05 03:59:58",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/firefart/hashcollision-dos-poc",
+ "star": 94,
+ "commits": 30,
+ "modify_time": "2012-01-17 18:54:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/felberj/gotools",
+ "star": 94,
+ "commits": 13,
+ "modify_time": "2019-06-16 15:22:52",
+ "last_release": "v0.1.2",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/dzzie/idacompare",
+ "star": 94,
+ "commits": 41,
+ "modify_time": "2019-05-30 12:26:37",
+ "last_release": "",
+ "lang": "Visual Basic .NET"
+ },
+ {
+ "link": "https://github.com/donnchac/ubuntu-apport-exploitation",
+ "star": 94,
+ "commits": 13,
+ "modify_time": "2016-12-16 14:50:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dexpatcher/dex2jar",
+ "star": 94,
+ "commits": 537,
+ "modify_time": "2017-10-01 03:39:30",
+ "last_release": "v2.1-20171001-lanchon",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/dbheise/vm_setup",
+ "star": 94,
+ "commits": 44,
+ "modify_time": "2019-10-21 15:53:58",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/cspf-founder/javavulnerablelab",
+ "star": 94,
+ "commits": 28,
+ "modify_time": "2019-01-24 04:51:31",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/crowdstrike/crowdfms",
+ "star": 94,
+ "commits": 13,
+ "modify_time": "2014-02-13 15:03:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/criteo/cuttle",
+ "star": 94,
+ "commits": 447,
+ "modify_time": "2019-12-09 08:28:51",
+ "last_release": "0.10.3",
+ "lang": "Scala"
+ },
+ {
+ "link": "https://github.com/cossacklabs/0fc",
+ "star": 94,
+ "commits": 51,
+ "modify_time": "2016-03-19 18:42:29",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/compewter/copycat",
+ "star": 94,
+ "commits": 5,
+ "modify_time": "2017-05-04 18:40:47",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/colettecontreras/v2ray-ssrpanel-plugin",
+ "star": 94,
+ "commits": 31,
+ "modify_time": "2019-12-05 03:21:24",
+ "last_release": "v0.4.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/chorankates/h4ck",
+ "star": 94,
+ "commits": 82,
+ "modify_time": "2018-05-23 05:08:31",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/BeepIsla/csgo-crash-exploit",
+ "star": 94,
+ "commits": 11,
+ "modify_time": "2019-08-23 09:43:50",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/atarantini/wpbf",
+ "star": 94,
+ "commits": 103,
+ "modify_time": "2015-06-11 23:37:19",
+ "last_release": "1.0.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/arno0x/diverttcpconn",
+ "star": 94,
+ "commits": 2,
+ "modify_time": "2016-06-29 14:36:59",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/appsecco/defcon24-infra-monitoring-workshop",
+ "star": 94,
+ "commits": 15,
+ "modify_time": "2017-01-11 16:43:37",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/alanvivona/pwnshop",
+ "star": 94,
+ "commits": 222,
+ "modify_time": "2019-11-09 10:08:58",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/0xprateek/stardox",
+ "star": 94,
+ "commits": 73,
+ "modify_time": "2019-12-05 13:15:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gmdutra/cryptondie",
+ "star": 93,
+ "commits": 62,
+ "modify_time": "2019-12-01 15:51:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/in3tinct/see-surf",
+ "star": 93,
+ "commits": 76,
+ "modify_time": "2019-09-12 04:00:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cn-panda/javacodeaudit",
+ "star": 93,
+ "commits": 29,
+ "modify_time": "2019-12-03 02:36:00",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/gtworek/psbits",
+ "star": 93,
+ "commits": 116,
+ "modify_time": "2019-12-09 14:24:13",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/duraki/virtualcar",
+ "star": 93,
+ "commits": 36,
+ "modify_time": "2017-09-10 15:13:08",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/gmdutra/cryptondie",
+ "star": 93,
+ "commits": 62,
+ "modify_time": "2019-12-01 15:51:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ze0r/cve-2018-8453-exp",
+ "star": 93,
+ "commits": 13,
+ "modify_time": "2019-01-29 12:00:00",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/zcgonvh/ntdsdumpex",
+ "star": 93,
+ "commits": 5,
+ "modify_time": "2018-01-17 16:05:07",
+ "last_release": "v0.3",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/zachriggle/peda",
+ "star": 93,
+ "commits": 103,
+ "modify_time": "2015-06-29 19:30:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wiredcraft/dopy",
+ "star": 93,
+ "commits": 80,
+ "modify_time": "2016-07-07 08:35:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/weirdnox/emacs-gdb",
+ "star": 93,
+ "commits": 122,
+ "modify_time": "2019-10-26 22:27:44",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/vincentbernat/eudyptula-boot",
+ "star": 93,
+ "commits": 184,
+ "modify_time": "2019-07-06 04:18:19",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/tijme/not-your-average-web-crawler",
+ "star": 93,
+ "commits": 361,
+ "modify_time": "2019-02-02 12:40:09",
+ "last_release": "1.8.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/thuxnder/dalvik-obfuscator",
+ "star": 93,
+ "commits": 5,
+ "modify_time": "2015-02-18 07:15:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/themadinventor/ida-xtensa",
+ "star": 93,
+ "commits": 32,
+ "modify_time": "2019-08-20 19:27:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/them4hd1/pencrawler",
+ "star": 93,
+ "commits": 7,
+ "modify_time": "2018-04-29 19:32:12",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/teemu-l/execution-trace-viewer",
+ "star": 93,
+ "commits": 23,
+ "modify_time": "2019-07-11 07:46:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tdy218/ysoserial-cve-2018-2628",
+ "star": 93,
+ "commits": 23,
+ "modify_time": "2018-05-21 09:06:43",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/stufus/reconerator",
+ "star": 93,
+ "commits": 4,
+ "modify_time": "2018-07-25 10:56:06",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/stintel/vallumd",
+ "star": 93,
+ "commits": 119,
+ "modify_time": "2018-12-27 21:43:28",
+ "last_release": "\n 0.1.4\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/stamparm/tsusen",
+ "star": 93,
+ "commits": 115,
+ "modify_time": "2016-09-19 08:47:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sonatype-nexus-community/nancy",
+ "star": 93,
+ "commits": 67,
+ "modify_time": "2019-12-09 18:11:43",
+ "last_release": "v0.0.39",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/softsec-kaist/eclipser",
+ "star": 93,
+ "commits": 17,
+ "modify_time": "2019-07-14 06:42:44",
+ "last_release": "v1.0",
+ "lang": "F#"
+ },
+ {
+ "link": "https://github.com/sirmordred/angelaroot",
+ "star": 93,
+ "commits": 10,
+ "modify_time": "2018-10-21 12:29:08",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/shirosaidev/diskover-web",
+ "star": 93,
+ "commits": 471,
+ "modify_time": "2019-11-16 23:18:09",
+ "last_release": "v1.5.0.8",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/scumjr/the-sea-watcher",
+ "star": 93,
+ "commits": 1,
+ "modify_time": "2016-01-14 01:25:30",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/sadprocessor/empiredog",
+ "star": 93,
+ "commits": 18,
+ "modify_time": "2017-09-26 19:19:57",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/ro31337/hacktunnel",
+ "star": 93,
+ "commits": 19,
+ "modify_time": "2016-03-10 01:47:35",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/retirenet/dotnet-retire",
+ "star": 93,
+ "commits": 90,
+ "modify_time": "2019-11-02 21:06:15",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/positivetechnologies/seq2seq-web-attack-detection",
+ "star": 93,
+ "commits": 7,
+ "modify_time": "2018-09-04 12:45:26",
+ "last_release": "",
+ "lang": "Jupyter Notebook"
+ },
+ {
+ "link": "https://github.com/planetbeing/ios-jailbreak-patchfinder",
+ "star": 93,
+ "commits": 2,
+ "modify_time": "2013-03-03 18:40:52",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/osandamalith/ipobfuscator",
+ "star": 93,
+ "commits": 26,
+ "modify_time": "2016-05-03 16:01:39",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/openwiresec/metasploit",
+ "star": 93,
+ "commits": 1,
+ "modify_time": "2013-05-26 05:03:49",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/octokit/octokit.graphql.net",
+ "star": 93,
+ "commits": 962,
+ "modify_time": "2019-06-25 21:42:03",
+ "last_release": "v0.1.4-beta",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/nytrorst/xssfuzzer",
+ "star": 93,
+ "commits": 6,
+ "modify_time": "2019-01-23 22:22:40",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/n0tan3rd/squidwarc",
+ "star": 93,
+ "commits": 117,
+ "modify_time": "2019-02-05 04:52:19",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/ming1016/smck",
+ "star": 93,
+ "commits": 24,
+ "modify_time": "2017-12-02 04:54:10",
+ "last_release": "",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/mauri870/powershell-reverse-http",
+ "star": 93,
+ "commits": 13,
+ "modify_time": "2016-09-12 13:31:09",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/m0nad/dns-discovery",
+ "star": 93,
+ "commits": 73,
+ "modify_time": "2013-04-08 05:12:20",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/lu4p/torat",
+ "star": 93,
+ "commits": 118,
+ "modify_time": "2019-11-30 22:31:47",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/leonjza/ooktools",
+ "star": 93,
+ "commits": 16,
+ "modify_time": "2016-10-22 07:28:17",
+ "last_release": "1.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kentonv/dvorak-qwerty",
+ "star": 93,
+ "commits": 15,
+ "modify_time": "2018-01-02 07:46:36",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/integrity-sa/droidstatx",
+ "star": 93,
+ "commits": 34,
+ "modify_time": "2018-12-09 13:19:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hdm/juniper-cve-2015-7755",
+ "star": 93,
+ "commits": 18,
+ "modify_time": "2017-09-06 18:03:10",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/grepplabs/kafka-proxy",
+ "star": 93,
+ "commits": 111,
+ "modify_time": "2019-09-02 16:00:24",
+ "last_release": "v0.1.6",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/femto-dev/femto",
+ "star": 93,
+ "commits": 105,
+ "modify_time": "2017-07-07 18:48:27",
+ "last_release": "v1.3.0",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/elfmaster/dsym_obfuscate",
+ "star": 93,
+ "commits": 18,
+ "modify_time": "2019-01-10 05:25:45",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/dylanaraps/bin",
+ "star": 93,
+ "commits": 285,
+ "modify_time": "2019-12-04 17:14:30",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/debasishm89/hack_audio_captcha",
+ "star": 93,
+ "commits": 4,
+ "modify_time": "2015-04-11 19:07:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/debasishm89/burpy",
+ "star": 93,
+ "commits": 39,
+ "modify_time": "2018-04-04 05:27:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cymmetria/mtpot",
+ "star": 93,
+ "commits": 15,
+ "modify_time": "2017-03-20 22:02:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/clion007/dnsmasq",
+ "star": 93,
+ "commits": 625,
+ "modify_time": "2019-11-27 04:59:58",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/ckuethe/usbarmory",
+ "star": 93,
+ "commits": 49,
+ "modify_time": "2015-05-19 18:13:40",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/citizenlab/malware-signatures",
+ "star": 93,
+ "commits": 76,
+ "modify_time": "2016-11-17 19:27:09",
+ "last_release": "",
+ "lang": "Vim script"
+ },
+ {
+ "link": "https://github.com/carnal0wnage/metasploit-code",
+ "star": 93,
+ "commits": 22,
+ "modify_time": "2017-06-17 20:36:16",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/blackthorne/codetective",
+ "star": 93,
+ "commits": 45,
+ "modify_time": "2018-04-12 00:58:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/arthastang/iot-implant-toolkit",
+ "star": 93,
+ "commits": 39,
+ "modify_time": "2018-09-06 08:55:14",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/arno0x/webdavc2",
+ "star": 93,
+ "commits": 9,
+ "modify_time": "2017-09-20 12:40:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/abaykan/crawlbox",
+ "star": 93,
+ "commits": 14,
+ "modify_time": "2019-06-02 19:35:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/plazmaz/leaky-repo",
+ "star": 92,
+ "commits": 20,
+ "modify_time": "2019-11-15 03:54:28",
+ "last_release": "1.1.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gxfxyz/unblockchn",
+ "star": 92,
+ "commits": 20,
+ "modify_time": "2019-10-20 20:44:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/furniel/apk-changer",
+ "star": 92,
+ "commits": 919,
+ "modify_time": "2019-10-06 14:04:53",
+ "last_release": "v2.9.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hyuunnn/hyara",
+ "star": 92,
+ "commits": 149,
+ "modify_time": "2019-10-23 18:50:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mgreen27/Invoke-LiveResponse",
+ "star": 92,
+ "commits": 128,
+ "modify_time": "2019-05-20 03:00:07",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/OffXec/TheDoc",
+ "star": 92,
+ "commits": 4,
+ "modify_time": "2018-05-12 21:17:38",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/zonedb/zonedb",
+ "star": 92,
+ "commits": 2520,
+ "modify_time": "2019-12-10 08:14:44",
+ "last_release": "\n v1.0.2520\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/xinali/wooyun",
+ "star": 92,
+ "commits": 1,
+ "modify_time": "2017-03-08 06:08:56",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/tinysec/vulnerability",
+ "star": 92,
+ "commits": 10,
+ "modify_time": "2017-08-28 04:35:36",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/thezdi/abusing-silent-mitigations",
+ "star": 92,
+ "commits": 1,
+ "modify_time": "2015-06-19 15:21:47",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/thepaulbenoit/winpirate",
+ "star": 92,
+ "commits": null,
+ "modify_time": "2016-10-06 00:49:16",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/thelinuxchoice/brutecms",
+ "star": 92,
+ "commits": 25,
+ "modify_time": "2018-12-17 13:13:48",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/tarlogicsecurity/sasshimi",
+ "star": 92,
+ "commits": 18,
+ "modify_time": "2018-11-16 12:49:57",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/tandasat/guardmon",
+ "star": 92,
+ "commits": 14,
+ "modify_time": "2018-09-13 03:39:40",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/stratosphereips/manati",
+ "star": 92,
+ "commits": 681,
+ "modify_time": "2019-01-04 16:27:51",
+ "last_release": "v0.12.2a",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/stonedreamforest/re_sysdiag",
+ "star": 92,
+ "commits": 43,
+ "modify_time": "2018-01-15 12:43:02",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/stixproject/stix-viz",
+ "star": 92,
+ "commits": 283,
+ "modify_time": "2016-09-21 23:45:57",
+ "last_release": "v1.0.7a",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/shmuelyr/captainhook",
+ "star": 92,
+ "commits": 46,
+ "modify_time": "2017-02-26 01:19:24",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/sharepub/checkvm-sandbox",
+ "star": 92,
+ "commits": 3,
+ "modify_time": "2019-05-06 08:18:37",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/secvulture/dvta",
+ "star": 92,
+ "commits": 6,
+ "modify_time": "2016-08-28 03:15:24",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/reconjson/reconjson",
+ "star": 92,
+ "commits": 72,
+ "modify_time": "2018-12-08 12:06:17",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/privacypass/challenge-bypass-server",
+ "star": 92,
+ "commits": 31,
+ "modify_time": "2019-12-05 11:57:15",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/phillipmartin/gopassivedns",
+ "star": 92,
+ "commits": 55,
+ "modify_time": "2018-05-15 21:41:01",
+ "last_release": "v0.2.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/pagalaxylab/vulinfo",
+ "star": 92,
+ "commits": 55,
+ "modify_time": "2019-04-01 00:26:12",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/oznu/dns-zone-blacklist",
+ "star": 92,
+ "commits": 351,
+ "modify_time": "2019-12-03 14:02:30",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/oracle/kernel-fuzzing",
+ "star": 92,
+ "commits": 2,
+ "modify_time": "2016-10-14 20:24:54",
+ "last_release": "",
+ "lang": "Hack"
+ },
+ {
+ "link": "https://github.com/nihgwu/nevermore",
+ "star": 92,
+ "commits": 55,
+ "modify_time": "2014-10-21 14:00:26",
+ "last_release": "v0.2",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/neo23x0/dllrunner",
+ "star": 92,
+ "commits": 12,
+ "modify_time": "2015-02-16 10:35:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mvetsch/jwt4b",
+ "star": 92,
+ "commits": 182,
+ "modify_time": "2019-12-03 16:11:13",
+ "last_release": "1.10",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/mubix/not-in-pentesting-class",
+ "star": 92,
+ "commits": 4,
+ "modify_time": "2012-02-11 08:34:30",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/mthbernardes/sshlooterc",
+ "star": 92,
+ "commits": 2,
+ "modify_time": "2018-12-20 16:08:39",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/mrschyte/pentestkoala",
+ "star": 92,
+ "commits": 20,
+ "modify_time": "2018-08-27 12:41:35",
+ "last_release": "v1.0-1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/matthastings/dscompromised",
+ "star": 92,
+ "commits": 25,
+ "modify_time": "2016-03-16 23:09:45",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/log2timeline/dftimewolf",
+ "star": 92,
+ "commits": 205,
+ "modify_time": "2019-11-18 07:13:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/localh0t/backfuzz",
+ "star": 92,
+ "commits": 1,
+ "modify_time": "2019-06-10 06:14:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/likexian/whois-go",
+ "star": 92,
+ "commits": 45,
+ "modify_time": "2019-11-24 00:00:40",
+ "last_release": "\n v1.3.1\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/lcatro/webshell-detect-by-machine-learning",
+ "star": 92,
+ "commits": 12,
+ "modify_time": "2017-10-26 09:17:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kr105-zz/ps4-dlclose",
+ "star": 92,
+ "commits": 18,
+ "modify_time": "2016-04-27 21:24:36",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/knownsec/ethereum-smart-contracts-security-checklist",
+ "star": 92,
+ "commits": 34,
+ "modify_time": "2019-08-02 03:10:20",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/k33nteam/cc-shellcoding",
+ "star": 92,
+ "commits": 12,
+ "modify_time": "2014-12-24 07:47:02",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/jedisct1/bitbar-dnscrypt-proxy-switcher",
+ "star": 92,
+ "commits": 13,
+ "modify_time": "2018-10-15 13:53:12",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/hyuunnn/Hyara",
+ "star": 92,
+ "commits": 149,
+ "modify_time": "2019-10-23 18:50:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/henryho2006/rpiproxy",
+ "star": 92,
+ "commits": 28,
+ "modify_time": "2018-05-03 11:39:32",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/gynvael/stream-en",
+ "star": 92,
+ "commits": 37,
+ "modify_time": "2019-04-24 20:03:15",
+ "last_release": "",
+ "lang": "Roff"
+ },
+ {
+ "link": "https://github.com/grrrdog/tls-redirection",
+ "star": 92,
+ "commits": 12,
+ "modify_time": "2017-11-21 10:09:06",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/groundworkstech/pybfd",
+ "star": 92,
+ "commits": 31,
+ "modify_time": "2016-05-22 21:39:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gdbinit/efiswissknife",
+ "star": 92,
+ "commits": 1,
+ "modify_time": "2017-06-13 13:58:58",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/fengyouchao/webzmap",
+ "star": 92,
+ "commits": 20,
+ "modify_time": "2016-09-02 00:35:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/etherdream/https_hijack_demo",
+ "star": 92,
+ "commits": 28,
+ "modify_time": "2015-04-29 05:49:55",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/christian-roggia/open-myrtus",
+ "star": 92,
+ "commits": 4,
+ "modify_time": "2017-07-01 00:28:57",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/chadsr/nordvpn-networkmanager",
+ "star": 92,
+ "commits": 414,
+ "modify_time": "2019-12-04 13:36:35",
+ "last_release": "0.7.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/borntoberoot/powershell_ipv4portscanner",
+ "star": 92,
+ "commits": 58,
+ "modify_time": "2017-08-05 21:05:21",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/b1n4ry4rms/redteam-pentest-cheatsheets",
+ "star": 92,
+ "commits": 46,
+ "modify_time": "2019-02-14 03:43:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/auth0-blog/mean-rsvp-auth0",
+ "star": 92,
+ "commits": 85,
+ "modify_time": "2018-08-20 13:52:12",
+ "last_release": "",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/antitree/private-tor-network",
+ "star": 92,
+ "commits": 178,
+ "modify_time": "2019-01-12 17:18:07",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/andresriancho/websocket-fuzzer",
+ "star": 92,
+ "commits": 15,
+ "modify_time": "2018-11-23 13:51:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/alsidofficial/uncoverdcshadow",
+ "star": 92,
+ "commits": 1,
+ "modify_time": "2018-02-17 00:39:14",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/aedoo/allscanner",
+ "star": 92,
+ "commits": 14,
+ "modify_time": "2019-08-06 11:27:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/3xpl01tc0d3r/processinjection",
+ "star": 92,
+ "commits": 36,
+ "modify_time": "2019-11-02 17:13:41",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/vksrc/captcha_orz",
+ "star": 91,
+ "commits": 1,
+ "modify_time": "2019-04-09 08:47:34",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/zfl9/chinadns-ng",
+ "star": 91,
+ "commits": 235,
+ "modify_time": "2019-10-20 11:36:10",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/lockedbyte/cryptovenom",
+ "star": 91,
+ "commits": 21,
+ "modify_time": "2019-12-08 16:41:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lc/230-OOB",
+ "star": 91,
+ "commits": 40,
+ "modify_time": "2019-04-13 16:54:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/FSecureLABS/z3_and_angr_binary_analysis_workshop",
+ "star": 91,
+ "commits": 16,
+ "modify_time": "2018-11-30 13:33:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/woj-ciech/socialpath",
+ "star": 91,
+ "commits": 3,
+ "modify_time": "2019-09-23 22:16:37",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/wi-fi-analyzer/mdk3-master",
+ "star": 91,
+ "commits": 9,
+ "modify_time": "2015-05-24 23:28:09",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/wangyihang/apache-http-server-module-backdoor",
+ "star": 91,
+ "commits": 6,
+ "modify_time": "2018-05-29 09:38:04",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/wagiro/pintool",
+ "star": 91,
+ "commits": 22,
+ "modify_time": "2018-09-27 15:50:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/stefanscherer/adfs2",
+ "star": 91,
+ "commits": 115,
+ "modify_time": "2018-04-15 05:48:59",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/secwiki/android-kernel-exploits",
+ "star": 91,
+ "commits": 5,
+ "modify_time": "2018-03-12 14:59:30",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/russelltomkins/active-directory",
+ "star": 91,
+ "commits": 16,
+ "modify_time": "2017-09-07 11:56:28",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/pry0cc/proxydock",
+ "star": 91,
+ "commits": 3,
+ "modify_time": "2018-03-20 11:11:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pdjstone/wsuspect-proxy",
+ "star": 91,
+ "commits": 12,
+ "modify_time": "2015-10-23 11:42:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/p3pperp0tts/leaks_parser",
+ "star": 91,
+ "commits": 1,
+ "modify_time": "2019-02-08 11:20:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/n3tc4t/instabrute",
+ "star": 91,
+ "commits": 13,
+ "modify_time": "2017-04-10 17:12:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/n00py/hwacha",
+ "star": 91,
+ "commits": 63,
+ "modify_time": "2019-01-06 11:46:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mihazupan/httptosocks5proxy",
+ "star": 91,
+ "commits": 34,
+ "modify_time": "2019-10-11 15:14:44",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/louwrentius/ppss",
+ "star": 91,
+ "commits": 589,
+ "modify_time": "2019-07-16 22:19:25",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/loiclec/fuzzcheck-rs",
+ "star": 91,
+ "commits": 113,
+ "modify_time": "2019-09-18 18:20:18",
+ "last_release": "",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/liulilittle/paperairplane",
+ "star": 91,
+ "commits": 8,
+ "modify_time": "2017-11-12 13:36:14",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/knownsec/vxpwn",
+ "star": 91,
+ "commits": 3,
+ "modify_time": "2016-01-16 11:12:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/johntroony/blisqy",
+ "star": 91,
+ "commits": 20,
+ "modify_time": "2019-03-24 11:35:24",
+ "last_release": "0.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jbe2277/dotnetpad",
+ "star": 91,
+ "commits": 132,
+ "modify_time": "2019-08-24 20:24:33",
+ "last_release": "v3.0.1",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/hvqzao/liffy",
+ "star": 91,
+ "commits": 66,
+ "modify_time": "2016-03-20 13:24:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hdm/metasploit-framework",
+ "star": 91,
+ "commits": 50260,
+ "modify_time": "2019-01-23 21:20:10",
+ "last_release": "\n 4.6.0-RC2\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/hacksysteam/exploitation",
+ "star": 91,
+ "commits": 6,
+ "modify_time": "2017-02-14 13:10:18",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/google/minions",
+ "star": 91,
+ "commits": 142,
+ "modify_time": "2018-09-25 07:22:35",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/giantbranch/pwn-env-init",
+ "star": 91,
+ "commits": 47,
+ "modify_time": "2019-08-28 03:22:05",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/getsecnow/instagram-py",
+ "star": 91,
+ "commits": null,
+ "modify_time": "2018-07-10 02:27:55",
+ "last_release": "",
+ "lang": "python"
+ },
+ {
+ "link": "https://github.com/gdelugre/shell-factory",
+ "star": 91,
+ "commits": 565,
+ "modify_time": "2017-04-01 14:38:50",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/fortynorthsecurity/aggressorassessor",
+ "star": 91,
+ "commits": 24,
+ "modify_time": "2019-06-20 18:47:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/epam/nfstrace",
+ "star": 91,
+ "commits": 1544,
+ "modify_time": "2018-01-04 10:03:46",
+ "last_release": "0.4.3.2",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/dugsong/libdnet",
+ "star": 91,
+ "commits": 644,
+ "modify_time": "2010-10-13 00:39:53",
+ "last_release": "\n libdnet-1.12\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/djformby/grfics",
+ "star": 91,
+ "commits": 39,
+ "modify_time": "2019-07-30 14:55:14",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/arbazkiraak/certasset",
+ "star": 91,
+ "commits": 14,
+ "modify_time": "2018-09-23 19:22:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/abusesa/abusehelper",
+ "star": 91,
+ "commits": 2115,
+ "modify_time": "2019-09-27 12:17:27",
+ "last_release": "v5.7.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/abelcheung/rifiuti2",
+ "star": 91,
+ "commits": 320,
+ "modify_time": "2019-05-23 08:18:19",
+ "last_release": "0.7.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/5gsd/aimsicdl",
+ "star": 91,
+ "commits": 2276,
+ "modify_time": "2017-06-30 05:34:29",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/3gstudent/inject-dll-by-process-doppelganging",
+ "star": 91,
+ "commits": 8,
+ "modify_time": "2017-12-19 06:56:57",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/001spartan/aggressor_scripts",
+ "star": 91,
+ "commits": 49,
+ "modify_time": "2018-07-19 19:25:29",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/hackatnow/stretcher",
+ "star": 90,
+ "commits": 6,
+ "modify_time": "2019-01-03 17:14:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/shopify/browser_sniffer",
+ "star": 90,
+ "commits": 68,
+ "modify_time": "2019-11-26 19:42:26",
+ "last_release": "v1.1.3",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/besimorhino/pause-process",
+ "star": 90,
+ "commits": 9,
+ "modify_time": "2018-12-12 15:01:19",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/google/python_portpicker",
+ "star": 90,
+ "commits": 36,
+ "modify_time": "2019-08-06 00:10:58",
+ "last_release": "\n v1.3.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/caesar0301/pkt2flow",
+ "star": 90,
+ "commits": 69,
+ "modify_time": "2019-03-24 03:58:41",
+ "last_release": "\n v1.3\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/adonespitogo/adobot-io",
+ "star": 90,
+ "commits": 159,
+ "modify_time": "2019-04-22 18:22:29",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/hackatnow/cromos",
+ "star": 90,
+ "commits": 83,
+ "modify_time": "2017-12-13 02:19:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ne1llee/v2ray2clash",
+ "star": 90,
+ "commits": 38,
+ "modify_time": "2019-11-11 09:44:39",
+ "last_release": "v1.0.5",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/radareorg/r2con2019",
+ "star": 90,
+ "commits": 34,
+ "modify_time": "2019-10-15 14:26:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/watson/monster-drift",
+ "star": 90,
+ "commits": 103,
+ "modify_time": "2017-10-29 11:16:56",
+ "last_release": "\n v0.8.2\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/vv1ld/ps4hen",
+ "star": 90,
+ "commits": 15,
+ "modify_time": "2018-10-24 15:46:09",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/vmcall/ayyxam",
+ "star": 90,
+ "commits": 20,
+ "modify_time": "2019-05-18 19:16:44",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/tomchop/volatility-autoruns",
+ "star": 90,
+ "commits": 61,
+ "modify_time": "2019-07-18 19:36:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tbrand/dystopia",
+ "star": 90,
+ "commits": 75,
+ "modify_time": "2019-05-26 13:38:17",
+ "last_release": "",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/swiftonsecurity/phishingregex",
+ "star": 90,
+ "commits": 11,
+ "modify_time": "2017-03-20 22:52:20",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/struct/research",
+ "star": 90,
+ "commits": 9,
+ "modify_time": "2018-05-26 21:22:11",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/securitycompass/androidlabs",
+ "star": 90,
+ "commits": 55,
+ "modify_time": "2011-07-06 15:31:32",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/screetsec/pateensy",
+ "star": 90,
+ "commits": 28,
+ "modify_time": "2017-01-20 12:17:51",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/samsung/cotopaxi",
+ "star": 90,
+ "commits": 15,
+ "modify_time": "2019-12-06 16:15:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rub-syssec/marx",
+ "star": 90,
+ "commits": 33,
+ "modify_time": "2018-07-24 17:30:25",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/rchiossi/dexterity",
+ "star": 90,
+ "commits": 69,
+ "modify_time": "2016-03-07 23:10:32",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/rasta-mouse/aggressor-script",
+ "star": 90,
+ "commits": 8,
+ "modify_time": "2018-08-08 14:33:06",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/ragnaroek/mithril",
+ "star": 90,
+ "commits": 204,
+ "modify_time": "2019-05-05 10:57:58",
+ "last_release": "\n v0.10.0\n ",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/project-imas/app-password",
+ "star": 90,
+ "commits": 103,
+ "modify_time": "2014-08-14 14:14:22",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/plusvic/yara",
+ "star": 90,
+ "commits": 2250,
+ "modify_time": "2019-11-27 17:33:21",
+ "last_release": "\n v3.4.0\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/pandazheng/securitysite",
+ "star": 90,
+ "commits": 69,
+ "modify_time": "2019-03-19 00:53:10",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ossiozac/raspberry-pi-zero-rubber-ducky-duckberry-pi",
+ "star": 90,
+ "commits": 36,
+ "modify_time": "2018-09-29 16:37:12",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/operatorequals/httpimport",
+ "star": 90,
+ "commits": 115,
+ "modify_time": "2019-10-02 17:07:50",
+ "last_release": "\n 0.7.2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/netbiosx/digital-signature-hijack",
+ "star": 90,
+ "commits": 48,
+ "modify_time": "2017-11-07 20:59:46",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/nccgroup/cve-2017-8759",
+ "star": 90,
+ "commits": 43,
+ "modify_time": "2017-09-19 18:06:41",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/mozillasecurity/octo",
+ "star": 90,
+ "commits": 415,
+ "modify_time": "2019-04-01 23:10:31",
+ "last_release": "v2.0.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/mnemonic-no/act-platform",
+ "star": 90,
+ "commits": 356,
+ "modify_time": "2019-11-08 12:53:06",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/mingyuan-xia/patdroid",
+ "star": 90,
+ "commits": 88,
+ "modify_time": "2017-05-25 14:31:43",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/malshare/malshare-toolkit",
+ "star": 90,
+ "commits": 45,
+ "modify_time": "2019-09-24 13:49:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jollheef/libreoffice-remote-arbitrary-file-disclosure",
+ "star": 90,
+ "commits": 9,
+ "modify_time": "2018-02-10 07:54:50",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/jbman223/earlyap",
+ "star": 90,
+ "commits": 26,
+ "modify_time": "2019-07-04 06:56:05",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/isecpartners/tlspretense",
+ "star": 90,
+ "commits": 258,
+ "modify_time": "2017-12-07 08:45:35",
+ "last_release": "\n v0.7.0\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/igh0st/gh0st3.6_src",
+ "star": 90,
+ "commits": 1,
+ "modify_time": "2014-04-29 03:31:32",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/hfiref0x/vmde",
+ "star": 90,
+ "commits": 8,
+ "modify_time": "2017-12-18 04:50:03",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hanshaze/ms17-010-eternalblue-winxp-win10",
+ "star": 90,
+ "commits": 18,
+ "modify_time": "2017-09-30 18:04:50",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/guidovranken/cryptofuzz",
+ "star": 90,
+ "commits": 308,
+ "modify_time": "2019-12-08 22:26:37",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/grimm-co/notquite0dayfriday",
+ "star": 90,
+ "commits": 86,
+ "modify_time": "2018-09-14 14:46:49",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/giantbranch/pwn_deploy_chroot",
+ "star": 90,
+ "commits": 30,
+ "modify_time": "2019-11-07 07:02:16",
+ "last_release": "v2.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gast04/r4ge",
+ "star": 90,
+ "commits": 19,
+ "modify_time": "2019-09-03 18:10:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fireeye/flare-kscldr",
+ "star": 90,
+ "commits": 4,
+ "modify_time": "2019-05-03 16:01:42",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ffleming/timing_attack",
+ "star": 90,
+ "commits": 77,
+ "modify_time": "2019-10-13 03:19:26",
+ "last_release": "\n v0.7.1\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/elttam/advisories",
+ "star": 90,
+ "commits": 9,
+ "modify_time": "2018-10-08 02:15:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/darkoperator/powershell_scripts",
+ "star": 90,
+ "commits": 16,
+ "modify_time": "2016-08-05 01:05:33",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/consensys/truffle-security",
+ "star": 90,
+ "commits": 627,
+ "modify_time": "2019-12-04 16:11:57",
+ "last_release": "v1.6.2",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/chrizator/netattack",
+ "star": 90,
+ "commits": 9,
+ "modify_time": "2017-05-03 21:48:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/callmefeifei/svnhack",
+ "star": 90,
+ "commits": 1,
+ "modify_time": "2016-06-13 03:40:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/auth0/ruby-auth0",
+ "star": 90,
+ "commits": 486,
+ "modify_time": "2019-10-26 00:04:45",
+ "last_release": "v4.9.0",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/aprilahijriyan/w3brute",
+ "star": 90,
+ "commits": null,
+ "modify_time": "2019-05-21 12:11:27",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/akamai-threat-research/mqtt-pwn",
+ "star": 90,
+ "commits": 42,
+ "modify_time": "2019-11-07 18:10:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/adubbz/ghidra-switch-loader",
+ "star": 90,
+ "commits": 99,
+ "modify_time": "2019-09-28 10:52:12",
+ "last_release": "1.3.0",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/adafruit/adafruit-io-node",
+ "star": 90,
+ "commits": 271,
+ "modify_time": "2016-06-09 21:12:06",
+ "last_release": "\n v4.2.7\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/hackatnow/stretcher",
+ "star": 90,
+ "commits": 6,
+ "modify_time": "2019-01-03 17:14:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hackatnow/cromos",
+ "star": 90,
+ "commits": 83,
+ "modify_time": "2017-12-13 02:19:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/0x27/ssh_keyscanner",
+ "star": 90,
+ "commits": 17,
+ "modify_time": "2019-03-11 05:34:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lgandx/ccrawldns",
+ "star": 89,
+ "commits": 3,
+ "modify_time": "2019-07-25 21:40:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/honwen/luci-app-shadowsocksr",
+ "star": 89,
+ "commits": 108,
+ "modify_time": "2019-05-14 11:07:02",
+ "last_release": "v1.8.1-2",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/amaurymartiny/check-if-email-exists",
+ "star": 89,
+ "commits": 175,
+ "modify_time": "2019-12-09 10:00:21",
+ "last_release": "v0.6.0",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/Lopseg/Jsdir",
+ "star": 89,
+ "commits": 63,
+ "modify_time": "2019-05-19 05:09:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zeroSteiner/reflective-polymorphism",
+ "star": 89,
+ "commits": 31,
+ "modify_time": "2018-06-29 18:14:56",
+ "last_release": "v1.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/securisec/r2wiki",
+ "star": 89,
+ "commits": 2155,
+ "modify_time": "2019-09-04 01:17:59",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/LLVM-but-worse/java-disassembler",
+ "star": 89,
+ "commits": 238,
+ "modify_time": "2019-07-17 08:23:38",
+ "last_release": "1.2.0",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/zhunki/superion",
+ "star": 89,
+ "commits": 67,
+ "modify_time": "2019-03-01 02:59:40",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/wooyundota/dumpdex",
+ "star": 89,
+ "commits": 10,
+ "modify_time": "2018-03-02 05:10:26",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/willbengtson/trailblazer-aws",
+ "star": 89,
+ "commits": 2,
+ "modify_time": "2018-08-08 16:01:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vletoux/spoolerscanner",
+ "star": 89,
+ "commits": 4,
+ "modify_time": "2018-10-21 17:11:38",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/tomchop/unxor",
+ "star": 89,
+ "commits": 51,
+ "modify_time": "2019-08-25 07:59:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tomato42/tlslite-ng",
+ "star": 89,
+ "commits": 1492,
+ "modify_time": "2019-12-02 20:20:52",
+ "last_release": "v0.8.0-alpha33",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tigzy/malware-repo",
+ "star": 89,
+ "commits": 64,
+ "modify_time": "2018-03-05 12:45:03",
+ "last_release": "5.1",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/thomaspatzke/wase",
+ "star": 89,
+ "commits": 77,
+ "modify_time": "2019-09-18 20:47:54",
+ "last_release": "\n v1.2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/thelinuxchoice/infog",
+ "star": 89,
+ "commits": 7,
+ "modify_time": "2018-06-19 02:43:54",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/thehive-project/thehive4py",
+ "star": 89,
+ "commits": 192,
+ "modify_time": "2018-11-16 10:07:51",
+ "last_release": "1.5.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/smartbooks/smartspider",
+ "star": 89,
+ "commits": 13,
+ "modify_time": "2016-04-10 13:00:15",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/sinakarvandi/process-magics",
+ "star": 89,
+ "commits": 18,
+ "modify_time": "2019-10-21 08:50:56",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/sfan5/fi6s",
+ "star": 89,
+ "commits": 156,
+ "modify_time": "2019-10-10 15:26:57",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/session-replay-tools/intercept",
+ "star": 89,
+ "commits": 54,
+ "modify_time": "2019-07-03 08:54:43",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/schillings/swordphish",
+ "star": 89,
+ "commits": 11,
+ "modify_time": "2018-01-26 15:38:44",
+ "last_release": "v1.1",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/sam-b/windbg-plugins",
+ "star": 89,
+ "commits": 22,
+ "modify_time": "2018-04-10 09:09:45",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/richardlehane/siegfried",
+ "star": 89,
+ "commits": 955,
+ "modify_time": "2019-08-18 13:42:05",
+ "last_release": "v1.7.13",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/retme7/cve-2014-4322_poc",
+ "star": 89,
+ "commits": 12,
+ "modify_time": "2015-01-27 09:23:50",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/realoriginal/reflectivepotato",
+ "star": 89,
+ "commits": null,
+ "modify_time": "2018-12-04 15:36:31",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/patois/hrdevhelper",
+ "star": 89,
+ "commits": 11,
+ "modify_time": "2019-06-19 15:48:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/particle-iot/spark-protocol",
+ "star": 89,
+ "commits": 60,
+ "modify_time": "2017-02-03 21:40:25",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/notsosecure/blacklist3r",
+ "star": 89,
+ "commits": 18,
+ "modify_time": "2019-11-18 08:42:23",
+ "last_release": "v2.0",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/niklasb/sploits",
+ "star": 89,
+ "commits": 6,
+ "modify_time": "2019-07-20 17:16:18",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/neuroo/runtime-tracer",
+ "star": 89,
+ "commits": 3,
+ "modify_time": "2012-03-24 23:31:17",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/nanopool/claymore-xmr-miner",
+ "star": 89,
+ "commits": 3,
+ "modify_time": "2017-12-06 20:51:55",
+ "last_release": "v11.3",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/laktak/vanilla-chrome",
+ "star": 89,
+ "commits": 9,
+ "modify_time": "2015-03-21 19:50:14",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/julietkilo/canbabel",
+ "star": 89,
+ "commits": 101,
+ "modify_time": "2019-10-10 13:40:42",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/jamie72/ipapatch",
+ "star": 89,
+ "commits": 42,
+ "modify_time": "2017-03-29 05:36:09",
+ "last_release": "\n 1.0.1\n ",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/ifghou/wapiti",
+ "star": 89,
+ "commits": 341,
+ "modify_time": "2014-07-15 20:01:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/houqp/shell.py",
+ "star": 89,
+ "commits": 100,
+ "modify_time": "2015-07-27 09:51:03",
+ "last_release": "\n v0.5.3\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hannob/tlshelpers",
+ "star": 89,
+ "commits": 10,
+ "modify_time": "2019-04-28 17:53:33",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/graniet/gshark-framework",
+ "star": 89,
+ "commits": null,
+ "modify_time": "2017-07-04 08:37:31",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/gimini/noah",
+ "star": 89,
+ "commits": 35,
+ "modify_time": "2018-04-23 23:46:48",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/ehmicky/test-each",
+ "star": 89,
+ "commits": 328,
+ "modify_time": "2019-12-01 20:14:55",
+ "last_release": "1.8.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/dsnezhkov/typhoon",
+ "star": 89,
+ "commits": 14,
+ "modify_time": "2018-05-14 14:40:55",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/docbleach/docbleach",
+ "star": 89,
+ "commits": 168,
+ "modify_time": "2019-05-29 10:58:11",
+ "last_release": "v0.0.9",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/dobin/burpsentinel",
+ "star": 89,
+ "commits": 288,
+ "modify_time": "2017-03-26 14:14:22",
+ "last_release": "v0.5.1",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/dionysio/haveibeenpwned_lastpass",
+ "star": 89,
+ "commits": 8,
+ "modify_time": "2018-03-05 13:57:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/digininja/rsmangler",
+ "star": 89,
+ "commits": 36,
+ "modify_time": "2019-07-24 08:51:17",
+ "last_release": "1.5",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/devanshbatham/gorecon",
+ "star": 89,
+ "commits": 28,
+ "modify_time": "2019-06-21 07:18:01",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/dc3l1ne/weblogic-weakpassword-scnner",
+ "star": 89,
+ "commits": 80,
+ "modify_time": "2018-07-16 14:53:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/danielbohannon/out-fincodedcommand",
+ "star": 89,
+ "commits": 4,
+ "modify_time": "2017-07-02 16:32:48",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/cognosec/secbee",
+ "star": 89,
+ "commits": 13,
+ "modify_time": "2016-02-02 15:26:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/codecat/clawsearch",
+ "star": 89,
+ "commits": 24,
+ "modify_time": "2017-10-24 19:24:12",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/capstone-rust/capstone-rs",
+ "star": 89,
+ "commits": 365,
+ "modify_time": "2019-12-05 03:15:31",
+ "last_release": "v0.5.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/bkimminich/pwning-juice-shop",
+ "star": 89,
+ "commits": 884,
+ "modify_time": "2019-12-05 18:01:13",
+ "last_release": "\n v9.3.0\n ",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/bindog/toymalwareclassification",
+ "star": 89,
+ "commits": 4,
+ "modify_time": "2015-08-18 14:56:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bahome/batouchid",
+ "star": 89,
+ "commits": 13,
+ "modify_time": "2017-10-07 09:14:28",
+ "last_release": "\n 1.0.1\n ",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/amrthabet/winsrdf",
+ "star": 89,
+ "commits": 53,
+ "modify_time": "2014-04-29 13:16:19",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/adguardteam/adguardformac",
+ "star": 89,
+ "commits": 75,
+ "modify_time": "2019-08-08 10:34:59",
+ "last_release": "v2.3.1-beta",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/0xcl/clang-cfi-bypass-techniques",
+ "star": 89,
+ "commits": 2,
+ "modify_time": "2018-03-05 09:43:27",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/0x00-0x00/fakepip",
+ "star": 89,
+ "commits": 7,
+ "modify_time": "2019-01-07 19:33:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dawei101/tongsheclient.shadowsocks-go-ui",
+ "star": 88,
+ "commits": 20,
+ "modify_time": "2018-01-18 04:47:13",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/kjcracks/swift-dump",
+ "star": 88,
+ "commits": 4,
+ "modify_time": "2016-07-31 04:51:38",
+ "last_release": "",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/leoloobeek/comproxy",
+ "star": 88,
+ "commits": 7,
+ "modify_time": "2019-09-10 03:43:06",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/icchy/tracecorn",
+ "star": 88,
+ "commits": 92,
+ "modify_time": "2017-10-16 13:12:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zxgio/r2-cheatsheet",
+ "star": 88,
+ "commits": 92,
+ "modify_time": "2018-11-15 17:14:14",
+ "last_release": "",
+ "lang": "TeX"
+ },
+ {
+ "link": "https://github.com/zibility/remote",
+ "star": 88,
+ "commits": 2,
+ "modify_time": "2016-07-31 13:46:26",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/zendframework/zend-crypt",
+ "star": 88,
+ "commits": 7001,
+ "modify_time": "2019-10-24 07:13:52",
+ "last_release": "release-3.3.1",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/woj-ciech/kupa3",
+ "star": 88,
+ "commits": 7,
+ "modify_time": "2019-02-17 13:34:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vulhub/redis-rogue-getshell",
+ "star": 88,
+ "commits": 2,
+ "modify_time": "2019-07-11 12:56:47",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/vigem/hidguardian",
+ "star": 88,
+ "commits": 390,
+ "modify_time": "2019-12-08 20:46:16",
+ "last_release": "\n v4.2.176.0\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/uvasrg/evademl",
+ "star": 88,
+ "commits": 92,
+ "modify_time": "2019-12-03 03:02:12",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/ufrisk/kaslrfinder",
+ "star": 88,
+ "commits": 5,
+ "modify_time": "2016-11-26 12:40:19",
+ "last_release": "v1.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/tuupola/branca-spec",
+ "star": 88,
+ "commits": 41,
+ "modify_time": "2019-07-03 10:38:22",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/tum-i22/macke",
+ "star": 88,
+ "commits": 335,
+ "modify_time": "2019-11-08 09:04:48",
+ "last_release": "v2.0-beta",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/travis-ci/packer-templates",
+ "star": 88,
+ "commits": 2864,
+ "modify_time": "2019-11-29 10:24:36",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/tearsecurity/firstorder",
+ "star": 88,
+ "commits": 8,
+ "modify_time": "2018-08-13 16:17:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/suriyaakudoisc/keylogger",
+ "star": 88,
+ "commits": 65,
+ "modify_time": "2018-03-29 15:44:45",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/stealth/troubleshooter",
+ "star": 88,
+ "commits": 6,
+ "modify_time": "2016-06-21 09:17:44",
+ "last_release": "\n troubleshooter-0.1s2\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/smiegles/mass3",
+ "star": 88,
+ "commits": 11,
+ "modify_time": "2019-09-02 16:41:43",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/silentsignal/burp-image-size",
+ "star": 88,
+ "commits": 28,
+ "modify_time": "2018-06-27 11:06:10",
+ "last_release": "v0.4",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/sigploiter/gtscan",
+ "star": 88,
+ "commits": 30,
+ "modify_time": "2018-09-26 19:25:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/si9int/acamar",
+ "star": 88,
+ "commits": 22,
+ "modify_time": "2019-10-05 10:06:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/se55i0n/awvs_nessus_scanner_api",
+ "star": 88,
+ "commits": 18,
+ "modify_time": "2018-01-25 06:44:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sdnewhop/sdwannewhope",
+ "star": 88,
+ "commits": 68,
+ "modify_time": "2019-11-28 12:45:23",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/scala/jardiff",
+ "star": 88,
+ "commits": 78,
+ "modify_time": "2019-10-08 04:59:12",
+ "last_release": "v1.6.0",
+ "lang": "Scala"
+ },
+ {
+ "link": "https://github.com/sanix-darker/antiddos-system",
+ "star": 88,
+ "commits": 43,
+ "modify_time": "2019-02-28 10:25:17",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/rub-syssec/password-guessing-framework",
+ "star": 88,
+ "commits": 5,
+ "modify_time": "2019-07-11 17:44:23",
+ "last_release": "v0.0.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rub-nds/burpssoextension",
+ "star": 88,
+ "commits": 378,
+ "modify_time": "2019-06-24 09:16:05",
+ "last_release": "v3.3.1",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/rsertelon/android-keystore-recovery",
+ "star": 88,
+ "commits": 80,
+ "modify_time": "2019-10-01 07:47:28",
+ "last_release": "1.4.0",
+ "lang": "Scala"
+ },
+ {
+ "link": "https://github.com/rk700/attackrsa",
+ "star": 88,
+ "commits": 6,
+ "modify_time": "2017-11-03 10:17:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/renorobert/virtualbox-cve-2018-2844",
+ "star": 88,
+ "commits": 2,
+ "modify_time": "2018-08-28 08:06:32",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/realparisi/wmi_monitor",
+ "star": 88,
+ "commits": 13,
+ "modify_time": "2018-02-28 22:25:45",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/rassec/yandi-scanner",
+ "star": 88,
+ "commits": 7,
+ "modify_time": "2019-07-22 08:30:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ossindex/auditjs",
+ "star": 88,
+ "commits": 220,
+ "modify_time": "2019-09-19 21:22:49",
+ "last_release": "3.2.4",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/nearform/gammaray",
+ "star": 88,
+ "commits": 101,
+ "modify_time": "2019-05-18 23:43:28",
+ "last_release": "1.1.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/mothran/unicorn-decoder",
+ "star": 88,
+ "commits": 3,
+ "modify_time": "2015-10-11 18:51:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mind0xp/frida-python-binding",
+ "star": 88,
+ "commits": 33,
+ "modify_time": "2018-04-23 15:52:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/marinx/keylogger",
+ "star": 88,
+ "commits": 10,
+ "modify_time": "2019-02-14 22:55:02",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/mandatoryprogrammer/tarnish",
+ "star": 88,
+ "commits": 6,
+ "modify_time": "2019-01-26 21:50:21",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/maltelligence/maltelligence",
+ "star": 88,
+ "commits": 12,
+ "modify_time": "2015-08-25 02:02:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lovetingyuan/fq",
+ "star": 88,
+ "commits": 118,
+ "modify_time": "2017-05-24 10:00:40",
+ "last_release": "\n v3.0.5\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/jseidl/multi-tor",
+ "star": 88,
+ "commits": 11,
+ "modify_time": "2019-04-09 19:15:44",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/jnqpblc/sharpspray",
+ "star": 88,
+ "commits": 11,
+ "modify_time": "2019-06-30 03:10:51",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/jbreed/apkwash",
+ "star": 88,
+ "commits": 50,
+ "modify_time": "2018-08-26 16:05:34",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/federicodotta/handycollaborator",
+ "star": 88,
+ "commits": 12,
+ "modify_time": "2018-06-01 14:28:38",
+ "last_release": "v0.2",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/ernw/windows-insight",
+ "star": 88,
+ "commits": 17,
+ "modify_time": "2019-11-22 13:31:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ekse/unicorn-rs",
+ "star": 88,
+ "commits": 157,
+ "modify_time": "2019-11-01 20:32:47",
+ "last_release": "",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/egebalci/cminer",
+ "star": 88,
+ "commits": 25,
+ "modify_time": "2017-06-27 11:56:30",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/dutchcoders/ares",
+ "star": 88,
+ "commits": 54,
+ "modify_time": "2017-04-05 17:24:34",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/dirkjanm/impacket",
+ "star": 88,
+ "commits": 2621,
+ "modify_time": "2019-03-04 18:40:53",
+ "last_release": "\n impacket_0_9_18\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dantaler/detectionstring",
+ "star": 88,
+ "commits": 18,
+ "modify_time": "2015-12-14 14:47:36",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/cubicalabs/idasynergy",
+ "star": 88,
+ "commits": 12,
+ "modify_time": "2015-01-28 17:39:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/criteo/lolhttp",
+ "star": 88,
+ "commits": 116,
+ "modify_time": "2019-09-11 06:12:03",
+ "last_release": "0.13.0",
+ "lang": "Scala"
+ },
+ {
+ "link": "https://github.com/coinbase/dexter",
+ "star": 88,
+ "commits": 23,
+ "modify_time": "2019-06-21 21:02:39",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/cmackay/google-analytics-plugin",
+ "star": 88,
+ "commits": 106,
+ "modify_time": "2018-08-31 15:26:14",
+ "last_release": "v1.0.2",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/cisco-talos/ghidraaas",
+ "star": 88,
+ "commits": 2,
+ "modify_time": "2019-09-04 22:48:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/circl/bgp-ranking",
+ "star": 88,
+ "commits": 1212,
+ "modify_time": "2016-09-02 07:42:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/chihebchebbi/internet-of-things-pentesting-framework",
+ "star": 88,
+ "commits": 26,
+ "modify_time": "2018-07-02 05:37:17",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/chef-koch/malware-research",
+ "star": 88,
+ "commits": 58,
+ "modify_time": "2018-10-08 15:10:34",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cheetz/brutescrape",
+ "star": 88,
+ "commits": 4,
+ "modify_time": "2015-02-17 01:48:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/chatziko/location-guard",
+ "star": 88,
+ "commits": 204,
+ "modify_time": "2019-09-22 11:06:58",
+ "last_release": "v2.4.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/calidog/axeman",
+ "star": 88,
+ "commits": 24,
+ "modify_time": "2019-02-14 15:35:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/balika011/selfblow",
+ "star": 88,
+ "commits": 5,
+ "modify_time": "2019-07-20 10:32:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/appsecco/spaces-finder",
+ "star": 88,
+ "commits": 15,
+ "modify_time": "2019-11-28 03:28:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/andresriancho/jwt-fuzzer",
+ "star": 88,
+ "commits": 24,
+ "modify_time": "2018-07-24 15:22:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/adalenv/cve-2019-0708-tool",
+ "star": 88,
+ "commits": 8,
+ "modify_time": "2019-05-29 17:12:32",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/0x09al/cve-2017-11882-metasploit",
+ "star": 88,
+ "commits": 5,
+ "modify_time": "2017-11-21 20:34:57",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/aanarchyy/wifite-mod-pixiewps",
+ "star": 87,
+ "commits": 67,
+ "modify_time": "2015-06-28 17:15:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/demantz/frizzer",
+ "star": 87,
+ "commits": 1,
+ "modify_time": "2019-10-17 22:29:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ecstatic-nobel/Analyst-Arsenal",
+ "star": 87,
+ "commits": 130,
+ "modify_time": "2019-09-02 03:17:24",
+ "last_release": "v1.7",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nccgroup/DIBF",
+ "star": 87,
+ "commits": 72,
+ "modify_time": "2019-01-15 00:47:56",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/mzfr/ctf-writeups",
+ "star": 87,
+ "commits": 134,
+ "modify_time": "2019-06-30 12:03:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/duo-labs/phish-collect",
+ "star": 87,
+ "commits": 12,
+ "modify_time": "2019-08-21 21:23:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/blacknbunny/peanalyzer",
+ "star": 87,
+ "commits": 22,
+ "modify_time": "2019-04-15 08:17:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rancher/lb-controller",
+ "star": 87,
+ "commits": 235,
+ "modify_time": "2018-02-26 17:48:35",
+ "last_release": "\n v0.9.13\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/0xbharath/censys-enumeration",
+ "star": 87,
+ "commits": 15,
+ "modify_time": "2019-01-02 05:42:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/yaoyumeng/adore-ng",
+ "star": 87,
+ "commits": 11,
+ "modify_time": "2015-12-30 07:15:33",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/zoloziak/winnt4",
+ "star": 87,
+ "commits": 1,
+ "modify_time": "2011-09-24 14:18:16",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/zawawawa/gatelessgatesharp",
+ "star": 87,
+ "commits": 445,
+ "modify_time": "2018-06-28 23:38:41",
+ "last_release": "v1.3.8-alpha",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/yunxu1/jboss-_cve-2017-12149",
+ "star": 87,
+ "commits": 6,
+ "modify_time": "2019-03-13 08:56:59",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/xfreed0m/katzkatz",
+ "star": 87,
+ "commits": 14,
+ "modify_time": "2019-12-05 13:34:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/waterslidelts/waterslide",
+ "star": 87,
+ "commits": 55,
+ "modify_time": "2019-12-09 15:44:29",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/w3c/editing",
+ "star": 87,
+ "commits": 1033,
+ "modify_time": "2019-12-04 06:12:02",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/vegabird/xvna",
+ "star": 87,
+ "commits": 16,
+ "modify_time": "2018-02-08 10:45:53",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/v-p-b/avpwn",
+ "star": 87,
+ "commits": 16,
+ "modify_time": "2019-06-23 19:55:46",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/uploadcare/pyuploadcare",
+ "star": 87,
+ "commits": 697,
+ "modify_time": "2018-11-29 14:59:53",
+ "last_release": "v2.6.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/unicornteam/hackcube-special",
+ "star": 87,
+ "commits": 16,
+ "modify_time": "2019-11-25 09:27:56",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/twjitm/afhq",
+ "star": 87,
+ "commits": 25,
+ "modify_time": "2018-11-28 15:34:40",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/tozny/rancher-lets-encrypt",
+ "star": 87,
+ "commits": 54,
+ "modify_time": "2019-11-15 22:49:47",
+ "last_release": "v1.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sk4ddy/remediatetheflag",
+ "star": 87,
+ "commits": 70,
+ "modify_time": "2019-10-02 14:54:10",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/shjalayeri/drivecrypt",
+ "star": 87,
+ "commits": 2,
+ "modify_time": "2014-05-17 15:45:53",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/rudymatela/concise-cheat-sheets",
+ "star": 87,
+ "commits": 275,
+ "modify_time": "2019-06-23 20:48:41",
+ "last_release": "python-v0.1",
+ "lang": "TeX"
+ },
+ {
+ "link": "https://github.com/regit/pshitt",
+ "star": 87,
+ "commits": 23,
+ "modify_time": "2015-06-25 08:47:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/re4lity/schtasks-backdoor",
+ "star": 87,
+ "commits": 6,
+ "modify_time": "2017-08-25 06:02:26",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/piscou/fuzzwin",
+ "star": 87,
+ "commits": 68,
+ "modify_time": "2015-06-05 20:26:28",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/netspi/powershell-modules",
+ "star": 87,
+ "commits": 4,
+ "modify_time": "2015-10-21 20:41:17",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/necst/aamo",
+ "star": 87,
+ "commits": 3,
+ "modify_time": "2015-10-28 03:58:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nccgroup/onelogicalmyth_shell",
+ "star": 87,
+ "commits": 12,
+ "modify_time": "2019-10-29 10:16:17",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/mrdoulestar/whatminer",
+ "star": 87,
+ "commits": 16,
+ "modify_time": "2019-02-23 03:19:34",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/misson20000/twili",
+ "star": 87,
+ "commits": 423,
+ "modify_time": "2019-08-25 20:42:01",
+ "last_release": "v1.2.1",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/misp/misp-dashboard",
+ "star": 87,
+ "commits": 579,
+ "modify_time": "2019-11-13 19:46:34",
+ "last_release": "v1.3",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/mirkoschubert/gdpr-cli",
+ "star": 87,
+ "commits": 62,
+ "modify_time": "2018-06-08 21:19:09",
+ "last_release": "v0.3.4",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/lnxg33k/webhandler",
+ "star": 87,
+ "commits": 344,
+ "modify_time": "2018-07-24 10:24:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lloydlabs/windows-api-hashing",
+ "star": 87,
+ "commits": 8,
+ "modify_time": "2018-06-16 15:05:32",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/laginimaineb/msm8974_exploit",
+ "star": 87,
+ "commits": 3,
+ "modify_time": "2016-01-24 16:21:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/laconicwolf/burp-extensions",
+ "star": 87,
+ "commits": 73,
+ "modify_time": "2019-04-08 00:49:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jordan-wright/python-wireless-attacks",
+ "star": 87,
+ "commits": 3,
+ "modify_time": "2013-11-16 01:06:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/iphelix/ida-patcher",
+ "star": 87,
+ "commits": 1,
+ "modify_time": "2014-09-23 18:09:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/RealBearcat/Fastjson-Payload",
+ "star": 87,
+ "commits": 15,
+ "modify_time": "2018-01-20 17:43:12",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/huanghongkai/game-helper",
+ "star": 87,
+ "commits": 1,
+ "modify_time": "2019-04-22 03:39:36",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/hexhive/bopc",
+ "star": 87,
+ "commits": 24,
+ "modify_time": "2019-11-22 08:36:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hegusung/webhashcat",
+ "star": 87,
+ "commits": 63,
+ "modify_time": "2019-02-17 08:17:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hannob/tls-what-can-go-wrong",
+ "star": 87,
+ "commits": 17,
+ "modify_time": "2018-11-24 08:27:45",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/google/aff4",
+ "star": 87,
+ "commits": 124,
+ "modify_time": "2018-01-10 07:39:28",
+ "last_release": "v0.26.post1",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/filosottile/berserk",
+ "star": 87,
+ "commits": 28,
+ "modify_time": "2015-03-08 23:39:28",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/fgsect/fexm",
+ "star": 87,
+ "commits": 19,
+ "modify_time": "2018-10-19 21:44:57",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/eth0izzle/cracke-dit",
+ "star": 87,
+ "commits": 20,
+ "modify_time": "2019-10-03 16:41:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/enkomio/sojobo",
+ "star": 87,
+ "commits": 364,
+ "modify_time": "2019-11-08 09:38:03",
+ "last_release": "1.1",
+ "lang": "F#"
+ },
+ {
+ "link": "https://github.com/endermanch/malwaredatabase",
+ "star": 87,
+ "commits": 88,
+ "modify_time": "2019-12-06 10:59:53",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/doyensec/burpdeveltraining",
+ "star": 87,
+ "commits": 37,
+ "modify_time": "2019-03-20 10:16:12",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/deepzec/win-portfwd",
+ "star": 87,
+ "commits": 14,
+ "modify_time": "2018-08-06 05:23:18",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/cubecoders/confuserex-reborn",
+ "star": 87,
+ "commits": 458,
+ "modify_time": "2017-06-16 10:19:48",
+ "last_release": "1.0.15",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/crabkun/switcher",
+ "star": 87,
+ "commits": 14,
+ "modify_time": "2019-03-27 09:20:58",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/clr2of8/slackextract",
+ "star": 87,
+ "commits": 6,
+ "modify_time": "2019-09-16 19:02:33",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/clojure-goes-fast/clj-java-decompiler",
+ "star": 87,
+ "commits": 13,
+ "modify_time": "2019-08-27 06:12:13",
+ "last_release": "\n 0.2.1\n ",
+ "lang": "Clojure"
+ },
+ {
+ "link": "https://github.com/boy-hack/pythonwebhack",
+ "star": 87,
+ "commits": 15,
+ "modify_time": "2016-12-07 14:33:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/blackarbiter/android_code_arbiter",
+ "star": 87,
+ "commits": 1,
+ "modify_time": "2017-09-14 11:13:30",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/bkup/slackshell",
+ "star": 87,
+ "commits": 18,
+ "modify_time": "2018-05-31 18:41:32",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/assurancemaladiesec/certstreammonitor",
+ "star": 87,
+ "commits": 84,
+ "modify_time": "2019-11-03 19:05:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/alset0326/peda-arm",
+ "star": 87,
+ "commits": 159,
+ "modify_time": "2019-11-01 09:50:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/alexpark07/armscgen",
+ "star": 87,
+ "commits": 98,
+ "modify_time": "2017-08-26 04:33:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/airbus-seclab/bta",
+ "star": 87,
+ "commits": 565,
+ "modify_time": "2016-03-25 15:54:58",
+ "last_release": "\n v0.6\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/adafruit/freqshow",
+ "star": 87,
+ "commits": 6,
+ "modify_time": "2014-10-02 23:10:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/plsyssec/haybale",
+ "star": 86,
+ "commits": 320,
+ "modify_time": "2019-12-06 05:18:52",
+ "last_release": "\n v0.1.1\n ",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/skelsec/minikerberos",
+ "star": 86,
+ "commits": 31,
+ "modify_time": "2019-08-15 21:33:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/webbreacher/osinttools",
+ "star": 86,
+ "commits": 61,
+ "modify_time": "2019-01-10 17:33:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bignerd95/routeros-backup-tools",
+ "star": 86,
+ "commits": 32,
+ "modify_time": "2018-09-12 23:52:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/openai/neural-gpu",
+ "star": 86,
+ "commits": 253,
+ "modify_time": "2018-11-22 00:38:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/shack2/struts2vulstools",
+ "star": 86,
+ "commits": 5,
+ "modify_time": "2019-09-24 17:17:50",
+ "last_release": "2.3.20190927",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/liamg/pax",
+ "star": 86,
+ "commits": 19,
+ "modify_time": "2019-11-18 08:57:49",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/nccgroup/sadcloud",
+ "star": 86,
+ "commits": 34,
+ "modify_time": "2019-11-27 18:48:34",
+ "last_release": "",
+ "lang": "HCL"
+ },
+ {
+ "link": "https://github.com/nsacyber/LOCKLEVEL",
+ "star": 86,
+ "commits": 4,
+ "modify_time": "2016-06-08 23:24:16",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/HackThisSite/CTF-Writeups",
+ "star": 86,
+ "commits": 142,
+ "modify_time": "2019-03-24 21:54:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/eurialo/vsaudit",
+ "star": 86,
+ "commits": 21,
+ "modify_time": "2018-01-22 18:29:15",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/PolymathNetwork/polymath-token",
+ "star": 86,
+ "commits": 125,
+ "modify_time": "2018-01-31 21:21:38",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/stevenseeley/heaper",
+ "star": 86,
+ "commits": 60,
+ "modify_time": "2012-10-03 08:18:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vysecurity/genHTA",
+ "star": 86,
+ "commits": 2,
+ "modify_time": "2017-03-16 21:49:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/illikainen/exploits",
+ "star": 86,
+ "commits": 5,
+ "modify_time": "2017-08-17 18:16:09",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/ettic-team/dnsbin",
+ "star": 86,
+ "commits": 26,
+ "modify_time": "2018-06-26 22:04:01",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/mitre-attack/attack-website",
+ "star": 86,
+ "commits": 98,
+ "modify_time": "2019-12-05 13:37:38",
+ "last_release": "website-v1.0",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/zerothoughts/spring-jndi",
+ "star": 86,
+ "commits": 2,
+ "modify_time": "2016-01-22 20:30:04",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/zerosum0x0/threadcontinue",
+ "star": 86,
+ "commits": 7,
+ "modify_time": "2017-07-01 09:36:54",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/youmengxuefei/web_vul_scan",
+ "star": 86,
+ "commits": 3,
+ "modify_time": "2016-03-04 09:21:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/yehia-mamdouh/xssya",
+ "star": 86,
+ "commits": 17,
+ "modify_time": "2017-05-09 15:26:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wasiher/chrome_remote_interface_python",
+ "star": 86,
+ "commits": 68,
+ "modify_time": "2018-05-24 22:21:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vozzie/uacscript",
+ "star": 86,
+ "commits": 11,
+ "modify_time": "2015-08-26 06:23:09",
+ "last_release": "",
+ "lang": "Visual Basic .NET"
+ },
+ {
+ "link": "https://github.com/viralmaniar/smwyg-show-me-what-you-got",
+ "star": 86,
+ "commits": 7,
+ "modify_time": "2018-11-07 13:28:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ucsb-seclab/baredroid",
+ "star": 86,
+ "commits": 8,
+ "modify_time": "2016-08-20 09:32:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tendigi/xmrminer",
+ "star": 86,
+ "commits": null,
+ "modify_time": "2017-10-25 21:07:32",
+ "last_release": "",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/sysdream/fino",
+ "star": 86,
+ "commits": 42,
+ "modify_time": "2014-10-25 10:36:46",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/sogeti-esec-lab/lkd",
+ "star": 86,
+ "commits": 4,
+ "modify_time": "2015-10-21 13:59:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/santosomar/who_and_what_to_follow",
+ "star": 86,
+ "commits": 23,
+ "modify_time": "2018-10-04 22:39:23",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/rmitton/goaldis",
+ "star": 86,
+ "commits": 5,
+ "modify_time": "2018-01-03 17:54:43",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/radareorg/r2con2018",
+ "star": 86,
+ "commits": 42,
+ "modify_time": "2018-10-24 11:16:14",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/paralax/awesome-internet-scanning",
+ "star": 86,
+ "commits": 13,
+ "modify_time": "2019-01-16 18:06:21",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/oalabs/frida-wshook",
+ "star": 86,
+ "commits": 6,
+ "modify_time": "2017-05-31 03:25:48",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/nongiach/awesome-cryptocurrency-security",
+ "star": 86,
+ "commits": 29,
+ "modify_time": "2019-04-07 14:12:40",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/nlitsme/idbutil",
+ "star": 86,
+ "commits": 33,
+ "modify_time": "2019-07-15 14:22:05",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/nightowl131/aapg",
+ "star": 86,
+ "commits": 20,
+ "modify_time": "2019-10-10 10:05:03",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/nccgroup/blesuite",
+ "star": 86,
+ "commits": 30,
+ "modify_time": "2019-05-04 04:38:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nbulaj/proxy_fetcher",
+ "star": 86,
+ "commits": 150,
+ "modify_time": "2019-10-23 21:04:08",
+ "last_release": "0.11",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/moosedojo/praedasploit",
+ "star": 86,
+ "commits": 34,
+ "modify_time": "2014-10-31 21:35:57",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/mavproxyuser/p0vsredherring",
+ "star": 86,
+ "commits": 101,
+ "modify_time": "2017-09-13 13:26:20",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/mame82/unifyingvulnsdisclosurerepo",
+ "star": 86,
+ "commits": 30,
+ "modify_time": "2019-09-04 11:47:17",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/malwaretech/appcontainersandbox",
+ "star": 86,
+ "commits": 7,
+ "modify_time": "2018-12-02 16:30:21",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/malwaremusings/unpacker",
+ "star": 86,
+ "commits": 15,
+ "modify_time": "2016-03-05 07:34:09",
+ "last_release": "\n blog-2014-09-16\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kzen-networks/curv",
+ "star": 86,
+ "commits": 195,
+ "modify_time": "2019-12-09 10:49:52",
+ "last_release": "\n v0.2.3\n ",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/klaubert/waf-fle",
+ "star": 86,
+ "commits": 67,
+ "modify_time": "2015-08-26 01:26:37",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/kimci86/bkcrack",
+ "star": 86,
+ "commits": 40,
+ "modify_time": "2019-05-18 13:23:49",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/iamultra/ssrfsocks",
+ "star": 86,
+ "commits": 3,
+ "modify_time": "2012-08-08 17:55:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/huntergregal/scansploit",
+ "star": 86,
+ "commits": 9,
+ "modify_time": "2016-04-15 14:15:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/frpccluster/frpc-android",
+ "star": 86,
+ "commits": 49,
+ "modify_time": "2018-11-28 03:00:25",
+ "last_release": "v0.21.0-demo",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/frangarcj/oclockvita",
+ "star": 86,
+ "commits": 9,
+ "modify_time": "2017-04-30 10:30:12",
+ "last_release": "1.2.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/fr0gger/vthunting",
+ "star": 86,
+ "commits": 8,
+ "modify_time": "2019-12-08 15:05:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/findneo/rsa-attack",
+ "star": 86,
+ "commits": 15,
+ "modify_time": "2019-08-18 07:36:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/duanhongyi/gmssl",
+ "star": 86,
+ "commits": 15,
+ "modify_time": "2019-01-28 16:37:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/danmcinerney/fast-recon",
+ "star": 86,
+ "commits": 8,
+ "modify_time": "2016-01-18 21:00:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cgcl-codes/vuldeepecker",
+ "star": 86,
+ "commits": 15,
+ "modify_time": "2018-08-05 06:24:35",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/carmaa/nacker",
+ "star": 86,
+ "commits": 23,
+ "modify_time": "2014-09-24 16:15:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/c3d/elfe",
+ "star": 86,
+ "commits": 2823,
+ "modify_time": "2018-11-20 17:25:25",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/butteff/ubuntu-telemetry-free-privacy-secure",
+ "star": 86,
+ "commits": 30,
+ "modify_time": "2019-07-09 15:33:55",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/bsmali4/sicklepoc",
+ "star": 86,
+ "commits": 5,
+ "modify_time": "2017-07-29 11:10:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/azizaltuntas/network-analysis-tools",
+ "star": 86,
+ "commits": 11,
+ "modify_time": "2017-02-08 11:03:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/aidanharris/free-security-ebooks-from-packtpub",
+ "star": 86,
+ "commits": null,
+ "modify_time": "2017-04-19 21:08:38",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/advanced-threat-research/efi-whitelist",
+ "star": 86,
+ "commits": null,
+ "modify_time": "2017-04-24 22:37:31",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/1n3/prism-ap",
+ "star": 86,
+ "commits": 5,
+ "modify_time": "2019-05-09 21:13:08",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/catboy96/automator",
+ "star": 85,
+ "commits": 22,
+ "modify_time": "2019-03-10 10:18:16",
+ "last_release": "2.0.1",
+ "lang": "Visual Basic .NET"
+ },
+ {
+ "link": "https://github.com/adamdriscoll/snek",
+ "star": 85,
+ "commits": 24,
+ "modify_time": "2019-11-14 03:57:10",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/redpointgames/pkgsign",
+ "star": 85,
+ "commits": 51,
+ "modify_time": "2019-07-29 05:57:49",
+ "last_release": "\n 0.2.0-alpha.4\n ",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/tihmstar/ra1nsn0w",
+ "star": 85,
+ "commits": 8,
+ "modify_time": "2019-12-08 16:22:27",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/outflanknl/NetshHelperBeacon",
+ "star": 85,
+ "commits": 6,
+ "modify_time": "2016-09-26 19:57:08",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/FSecureLABS/ViridianFuzzer",
+ "star": 85,
+ "commits": 2,
+ "modify_time": "2019-02-14 17:30:19",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/lorentzenman/youzer",
+ "star": 85,
+ "commits": 7,
+ "modify_time": "2018-09-28 11:15:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://gitlab.com/pikatrack/pikatrack",
+ "star": 85,
+ "commits": null,
+ "modify_time": "2019-02-03 05:27:54",
+ "last_release": "",
+ "lang": "ruby"
+ },
+ {
+ "link": "https://github.com/zouxianyu/kernelhiddenexecute",
+ "star": 85,
+ "commits": 2,
+ "modify_time": "2019-08-08 16:29:08",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/zmap/ztag",
+ "star": 85,
+ "commits": 584,
+ "modify_time": "2018-10-16 16:35:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zhengmin1989/macos-10.12.2-exp-via-mach_voucher",
+ "star": 85,
+ "commits": 11,
+ "modify_time": "2017-04-18 09:46:16",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/zhangzhenfeng/anyscan",
+ "star": 85,
+ "commits": 73,
+ "modify_time": "2017-07-20 03:26:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/yeggor/uefi_retool",
+ "star": 85,
+ "commits": 92,
+ "modify_time": "2019-09-15 20:11:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wez3/msfenum",
+ "star": 85,
+ "commits": 33,
+ "modify_time": "2018-07-29 15:50:48",
+ "last_release": "0.1.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wanjunzh/ssct",
+ "star": 85,
+ "commits": 2,
+ "modify_time": "2017-12-21 07:46:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wallix/redemption",
+ "star": 85,
+ "commits": 16514,
+ "modify_time": "2019-12-09 15:55:26",
+ "last_release": "\n 7.3.51\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/vim2meta/keylogger",
+ "star": 85,
+ "commits": null,
+ "modify_time": "2018-04-14 17:52:06",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/vector35/binaryninja-plugins",
+ "star": 85,
+ "commits": null,
+ "modify_time": "2017-05-22 00:23:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/thomascannon/android-sms-spoof",
+ "star": 85,
+ "commits": 6,
+ "modify_time": "2012-12-14 07:26:19",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/thelsa/tp5-getshell",
+ "star": 85,
+ "commits": 19,
+ "modify_time": "2018-12-14 03:20:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/siguza/phoenixnonce",
+ "star": 85,
+ "commits": 12,
+ "modify_time": "2017-08-16 22:38:19",
+ "last_release": "1.1",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/siguza/iokit-utils",
+ "star": 85,
+ "commits": 20,
+ "modify_time": "2019-05-08 19:08:28",
+ "last_release": "1.3.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/sensepost/ms16-098",
+ "star": 85,
+ "commits": 5,
+ "modify_time": "2017-01-06 10:11:47",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/secmob/cansecwest2016",
+ "star": 85,
+ "commits": 2,
+ "modify_time": "2016-03-19 04:58:35",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/scravy/node-macaddress",
+ "star": 85,
+ "commits": 68,
+ "modify_time": "2019-04-29 09:09:05",
+ "last_release": "0.2.9",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/rtfpessoa/dependency_spy",
+ "star": 85,
+ "commits": 33,
+ "modify_time": "2019-10-19 14:11:25",
+ "last_release": "v0.6.0",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/rpranshu/autopwn",
+ "star": 85,
+ "commits": 65,
+ "modify_time": "2018-09-15 11:19:52",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/romainthomas/pyjadx",
+ "star": 85,
+ "commits": 37,
+ "modify_time": "2019-10-09 05:04:00",
+ "last_release": "\n 0.1.9\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/rocky/python2-trepan",
+ "star": 85,
+ "commits": 1025,
+ "modify_time": "2019-12-10 07:46:26",
+ "last_release": "\n release-python-2.4-3.2.4\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rjw57/hdcp-genkey",
+ "star": 85,
+ "commits": 18,
+ "modify_time": "2013-09-21 12:43:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/risksense-ops/ms17-010",
+ "star": 85,
+ "commits": 14,
+ "modify_time": "2017-05-18 05:17:04",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/rapid7/embedded-tools",
+ "star": 85,
+ "commits": 7,
+ "modify_time": "2014-10-30 02:45:06",
+ "last_release": "",
+ "lang": "AGS Script"
+ },
+ {
+ "link": "https://github.com/pyn3rd/cve-2018-3191",
+ "star": 85,
+ "commits": 16,
+ "modify_time": "2018-10-26 17:54:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pwnsdx/unsecure",
+ "star": 85,
+ "commits": 46,
+ "modify_time": "2019-01-03 04:16:27",
+ "last_release": "1.1",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/poerschke/uniscan",
+ "star": 85,
+ "commits": 2,
+ "modify_time": "2011-11-25 00:01:17",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/pnfsoftware/jeb2-samplecode",
+ "star": 85,
+ "commits": 100,
+ "modify_time": "2019-07-08 18:59:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/petermosmans/openssl",
+ "star": 85,
+ "commits": 12683,
+ "modify_time": "2017-07-06 01:00:00",
+ "last_release": "\n OpenSSL-fips-2_0_6\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/padovah4ck/psbypassclm",
+ "star": 85,
+ "commits": 21,
+ "modify_time": "2019-03-28 09:41:04",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/oreilly-japan/black-hat-python-jp-support",
+ "star": 85,
+ "commits": 46,
+ "modify_time": "2017-06-30 21:53:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ohjeongwook/flashhacker",
+ "star": 85,
+ "commits": 91,
+ "modify_time": "2015-10-12 05:06:59",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/nyx0/rovnix",
+ "star": 85,
+ "commits": 3,
+ "modify_time": "2015-02-25 04:52:04",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/naivenom/exploiting",
+ "star": 85,
+ "commits": 251,
+ "modify_time": "2018-12-16 20:22:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mlgualtieri/css-exfil-protection",
+ "star": 85,
+ "commits": 52,
+ "modify_time": "2019-10-15 20:12:21",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/mitchellkrogza/phishing.database",
+ "star": 85,
+ "commits": 8279,
+ "modify_time": "2019-12-10 07:12:15",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/maximehip/safari-ios10.3.2-macos-10.12.4-exploit-bugs",
+ "star": 85,
+ "commits": 2,
+ "modify_time": "2017-07-07 06:48:27",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/mauro-g/snuck",
+ "star": 85,
+ "commits": 6,
+ "modify_time": "2015-08-20 13:08:53",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/magiczer0/fastjson-rce-exploit",
+ "star": 85,
+ "commits": 8,
+ "modify_time": "2019-07-12 03:40:53",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/liuhui0613/thewind",
+ "star": 85,
+ "commits": 9,
+ "modify_time": "2015-09-09 15:14:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/laginimaineb/cve-2015-6639",
+ "star": 85,
+ "commits": 6,
+ "modify_time": "2016-05-27 16:41:18",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/lacertosusrepo/open-source-tweaks",
+ "star": 85,
+ "commits": 186,
+ "modify_time": "2019-12-10 03:36:09",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/kieranwalsh/powershell",
+ "star": 85,
+ "commits": 42,
+ "modify_time": "2019-06-03 14:30:03",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/jnastarot/furikuri",
+ "star": 85,
+ "commits": 131,
+ "modify_time": "2019-11-02 19:50:33",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/jakewharton/dalvik-dx",
+ "star": 85,
+ "commits": 18,
+ "modify_time": "2018-08-06 21:48:12",
+ "last_release": "\n dalvik-dx-9.0.0_r3\n ",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/initstring/evil-ssdp",
+ "star": 85,
+ "commits": 94,
+ "modify_time": "2019-06-02 11:42:17",
+ "last_release": "\n 08.-beta\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gitdurandal/dbd",
+ "star": 85,
+ "commits": 61,
+ "modify_time": "2016-01-04 04:33:43",
+ "last_release": "\n 1.5.0-QUACK\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/galoisinc/macaw",
+ "star": 85,
+ "commits": 1530,
+ "modify_time": "2019-12-06 19:23:26",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/exp-sky/hitcon-2016-windows-10-x64-edge-0day-and-exploit",
+ "star": 85,
+ "commits": 3,
+ "modify_time": "2016-07-26 03:47:07",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/equim-chan/h2s",
+ "star": 85,
+ "commits": 36,
+ "modify_time": "2019-06-17 20:28:20",
+ "last_release": "v0.2.11",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/electrojustin/triad-decompiler",
+ "star": 85,
+ "commits": 77,
+ "modify_time": "2015-10-22 03:30:18",
+ "last_release": "0.4.3",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/diablohorn/yara4pentesters",
+ "star": 85,
+ "commits": 20,
+ "modify_time": "2018-01-31 09:38:16",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/designer1337/aristois-legit",
+ "star": 85,
+ "commits": 164,
+ "modify_time": "2019-08-17 08:21:44",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/dcsync/pycobalt",
+ "star": 85,
+ "commits": 132,
+ "modify_time": "2019-05-03 18:28:27",
+ "last_release": "\n 1.4.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cunninglogic/dumlracer",
+ "star": 85,
+ "commits": 35,
+ "modify_time": "2018-11-20 13:48:46",
+ "last_release": "v1.1.1",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/countercept/doublepulsar-usermode-injector",
+ "star": 85,
+ "commits": 12,
+ "modify_time": "2017-06-27 15:31:32",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cneill/appsec-resources",
+ "star": 85,
+ "commits": 20,
+ "modify_time": "2018-11-06 05:21:22",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/cheeky4n6monkey/4n6-scripts",
+ "star": 85,
+ "commits": 65,
+ "modify_time": "2017-08-21 04:25:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bro/bro",
+ "star": 85,
+ "commits": 9256,
+ "modify_time": "2019-12-09 18:12:40",
+ "last_release": "\n v3.0.1-dev\n ",
+ "lang": "Zeek"
+ },
+ {
+ "link": "https://github.com/blackye/bkscanner",
+ "star": 85,
+ "commits": 9,
+ "modify_time": "2016-01-15 09:37:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bagder/spindly",
+ "star": 85,
+ "commits": 303,
+ "modify_time": "2012-07-15 18:28:59",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/awakened1712/cve-2019-11932",
+ "star": 85,
+ "commits": 12,
+ "modify_time": "2019-11-30 10:28:00",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/armenb/sharktools",
+ "star": 85,
+ "commits": 31,
+ "modify_time": "2013-09-30 13:13:56",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/aqiongbei/buy_pig_plan",
+ "star": 85,
+ "commits": 7,
+ "modify_time": "2019-11-15 11:02:58",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/angr/phuzzer",
+ "star": 85,
+ "commits": 208,
+ "modify_time": "2019-10-03 23:21:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/anbai-inc/attackfilter",
+ "star": 85,
+ "commits": 1,
+ "modify_time": "2018-01-27 10:30:20",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/aaronst/macholibre",
+ "star": 85,
+ "commits": 40,
+ "modify_time": "2019-05-09 22:52:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/5up3rc/nagascan",
+ "star": 85,
+ "commits": 10,
+ "modify_time": "2017-05-16 11:30:59",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gssdromen/v2rayc",
+ "star": 84,
+ "commits": 61,
+ "modify_time": "2019-11-05 09:36:49",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/0xfireball/modphuserex",
+ "star": 84,
+ "commits": 487,
+ "modify_time": "2017-04-10 03:11:35",
+ "last_release": "\n v1.0.0\n ",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/stonedreamforest/mirage",
+ "star": 84,
+ "commits": 44,
+ "modify_time": "2019-12-08 16:40:35",
+ "last_release": "v20191209",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/npist/v2rayms",
+ "star": 84,
+ "commits": 39,
+ "modify_time": "2019-03-28 00:58:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/justsoos/ss-ssr-v2ray-gadget",
+ "star": 84,
+ "commits": 49,
+ "modify_time": "2018-09-29 10:59:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/AonCyberLabs/SSH-Weak-DH",
+ "star": 84,
+ "commits": 40,
+ "modify_time": "2019-05-28 04:56:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/devploit/put2win",
+ "star": 84,
+ "commits": 37,
+ "modify_time": "2019-10-27 10:53:15",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/zcash-hackworks/pay-to-sudoku",
+ "star": 84,
+ "commits": 71,
+ "modify_time": "2017-06-08 23:07:40",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/security-cheatsheet/metasploit-cheat-sheet",
+ "star": 84,
+ "commits": 9,
+ "modify_time": "2018-11-04 10:11:41",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ztgrace/pwn_lab",
+ "star": 84,
+ "commits": 8,
+ "modify_time": "2015-08-28 23:51:02",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/zricethezav/h1domains",
+ "star": 84,
+ "commits": 398,
+ "modify_time": "2019-12-09 12:01:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ziconius/fudgec2",
+ "star": 84,
+ "commits": 137,
+ "modify_time": "2019-11-21 01:47:55",
+ "last_release": "v0.4.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/yandex/burp-molly-pack",
+ "star": 84,
+ "commits": 9,
+ "modify_time": "2018-02-08 12:13:43",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/xuanhuan/ss-panel",
+ "star": 84,
+ "commits": 753,
+ "modify_time": "2016-01-15 20:18:32",
+ "last_release": "\n v2.4.5\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/wonderkun/ctfenv",
+ "star": 84,
+ "commits": 6,
+ "modify_time": "2019-11-11 05:57:44",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/tingge/web-analytics",
+ "star": 84,
+ "commits": 58,
+ "modify_time": "2018-09-15 13:48:35",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/therook/nsshell",
+ "star": 84,
+ "commits": 8,
+ "modify_time": "2019-09-18 02:53:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tedsluis/dump1090",
+ "star": 84,
+ "commits": 953,
+ "modify_time": "2017-05-12 05:53:36",
+ "last_release": "\n v1.14\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/smxlabs/gibbersense",
+ "star": 84,
+ "commits": 4,
+ "modify_time": "2017-05-11 19:12:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/shodan-labs/iotdb",
+ "star": 84,
+ "commits": 4,
+ "modify_time": "2015-06-05 00:44:02",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/sensepost/birp",
+ "star": 84,
+ "commits": 65,
+ "modify_time": "2018-01-24 17:14:27",
+ "last_release": "\n v1.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/scotthelme/lets-encrypt-smart-renew",
+ "star": 84,
+ "commits": 13,
+ "modify_time": "2017-01-27 21:50:30",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/safebreach-labs/bitsinject",
+ "star": 84,
+ "commits": 8,
+ "modify_time": "2019-08-24 22:02:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rickgray/bypass-php-gd-process-to-rce",
+ "star": 84,
+ "commits": 3,
+ "modify_time": "2015-04-05 17:25:56",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/r00ts3c/ddos-rootsec",
+ "star": 84,
+ "commits": 81,
+ "modify_time": "2019-09-22 15:01:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pannzh/hidemyass",
+ "star": 84,
+ "commits": 10,
+ "modify_time": "2018-03-22 01:41:09",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/omererdem/honeything",
+ "star": 84,
+ "commits": 25,
+ "modify_time": "2016-03-16 09:57:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nullarray/archivist",
+ "star": 84,
+ "commits": 70,
+ "modify_time": "2019-11-12 12:08:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mgoffin/malwarecookbook",
+ "star": 84,
+ "commits": 1,
+ "modify_time": "2015-11-02 04:22:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/marfjeh/coinhive-block",
+ "star": 84,
+ "commits": 65,
+ "modify_time": "2018-11-28 12:06:10",
+ "last_release": "1.5",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/kapytein/jsonp",
+ "star": 84,
+ "commits": 3,
+ "modify_time": "2019-08-25 10:14:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/k4m4/dcipher",
+ "star": 84,
+ "commits": 20,
+ "modify_time": "2019-07-13 12:55:52",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/jiangsir404/s7scan",
+ "star": 84,
+ "commits": 12,
+ "modify_time": "2018-08-13 12:50:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hi-wenr0/mlcheckwebshell",
+ "star": 84,
+ "commits": 1,
+ "modify_time": "2018-02-02 06:44:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hasherezade/persistence_demos",
+ "star": 84,
+ "commits": 14,
+ "modify_time": "2017-05-18 19:37:12",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/haotianteng/chiron",
+ "star": 84,
+ "commits": 399,
+ "modify_time": "2019-12-01 08:53:17",
+ "last_release": "0.6",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hackerhouse-opensource/cve-2018-10933",
+ "star": 84,
+ "commits": 39,
+ "modify_time": "2018-10-21 21:23:53",
+ "last_release": "",
+ "lang": "Dockerfile"
+ },
+ {
+ "link": "https://github.com/glamrock/cupcake",
+ "star": 84,
+ "commits": 143,
+ "modify_time": "2019-07-25 20:25:57",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/fleetcaptain/turbolist3r",
+ "star": 84,
+ "commits": 165,
+ "modify_time": "2019-10-11 02:38:03",
+ "last_release": "v1.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/feeicn/papers",
+ "star": 84,
+ "commits": null,
+ "modify_time": "None",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/deniskr/keychainswiftapi",
+ "star": 84,
+ "commits": 41,
+ "modify_time": "2015-09-30 14:21:58",
+ "last_release": "\n 1.0.0\n ",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/dc414/upnp-exploiter",
+ "star": 84,
+ "commits": 5,
+ "modify_time": "2013-04-09 22:44:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/coco413/discoversubdomain",
+ "star": 84,
+ "commits": 27,
+ "modify_time": "2018-01-11 06:07:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cobbr/elite",
+ "star": 84,
+ "commits": 22,
+ "modify_time": "2019-08-03 05:29:34",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/cloudflare/jgc-talks",
+ "star": 84,
+ "commits": 22,
+ "modify_time": "2015-06-21 11:10:41",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/cleverbao/webrange",
+ "star": 84,
+ "commits": 6,
+ "modify_time": "2018-04-26 07:08:22",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/claucece/useful-crypto-resources",
+ "star": 84,
+ "commits": 139,
+ "modify_time": "2019-12-09 06:51:26",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/bug7sec/ransomware",
+ "star": 84,
+ "commits": 6,
+ "modify_time": "2017-09-09 03:55:10",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/basketwill/sysmon_reverse",
+ "star": 84,
+ "commits": 1,
+ "modify_time": "2019-01-30 14:40:07",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/arashpartow/proxy",
+ "star": 84,
+ "commits": 9,
+ "modify_time": "2018-12-22 19:06:12",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/anonion0/nsec3map",
+ "star": 84,
+ "commits": 20,
+ "modify_time": "2017-06-15 19:11:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/anexia-it/winshock-test",
+ "star": 84,
+ "commits": 13,
+ "modify_time": "2014-11-15 09:57:54",
+ "last_release": "\n release/0.2.1\n ",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/aasthayadav/compsecattacklabs",
+ "star": 84,
+ "commits": 10,
+ "modify_time": "2019-01-31 15:38:35",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/422926799/python",
+ "star": 84,
+ "commits": null,
+ "modify_time": "2019-01-19 02:01:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/3xp10it/mytoolkit",
+ "star": 84,
+ "commits": 45,
+ "modify_time": "2017-04-10 15:55:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/0x09al/browser-c2",
+ "star": 84,
+ "commits": 8,
+ "modify_time": "2018-05-25 15:12:12",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/supercowpowers/workbench",
+ "star": 83,
+ "commits": 1469,
+ "modify_time": "2017-05-02 16:22:03",
+ "last_release": "v0.3.4-alpha",
+ "lang": "Jupyter Notebook"
+ },
+ {
+ "link": "https://github.com/lifting-bits/microx",
+ "star": 83,
+ "commits": 60,
+ "modify_time": "2019-09-07 00:00:54",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/seclab-ucr/tcp_exploit",
+ "star": 83,
+ "commits": 13,
+ "modify_time": "2018-08-21 03:31:30",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/danmcinerney/search-google",
+ "star": 83,
+ "commits": 15,
+ "modify_time": "2018-08-24 14:30:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kmkz/powershell",
+ "star": 83,
+ "commits": 30,
+ "modify_time": "2019-11-18 13:09:22",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/payloadbox/sql-injection-payload-list",
+ "star": 83,
+ "commits": 12,
+ "modify_time": "2019-11-23 08:13:30",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/six2dez/oscp-human-guide",
+ "star": 83,
+ "commits": 23,
+ "modify_time": "2019-11-20 10:00:30",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/zerobyte-id-bak/Bashter",
+ "star": 83,
+ "commits": 45,
+ "modify_time": "2019-06-20 02:59:18",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/Cyb0r9/Androspy",
+ "star": 83,
+ "commits": 21,
+ "modify_time": "2018-11-14 18:42:41",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/n0tr00t/WVS_Patcher",
+ "star": 83,
+ "commits": 5,
+ "modify_time": "2015-10-08 05:36:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/openpreserve/fido",
+ "star": 83,
+ "commits": 369,
+ "modify_time": "2019-11-22 15:24:21",
+ "last_release": "v1.4.0rc1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/am0nsec/exploit",
+ "star": 83,
+ "commits": 82,
+ "modify_time": "2018-06-05 09:35:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xobs/novena-linux",
+ "star": 83,
+ "commits": 562451,
+ "modify_time": "2017-07-24 06:56:19",
+ "last_release": "\n v4.4-novena-r15\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/xajkep/wordlists",
+ "star": 83,
+ "commits": 85,
+ "modify_time": "2019-03-19 10:47:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vusec/vuzzer64",
+ "star": 83,
+ "commits": 21,
+ "modify_time": "2019-10-28 13:52:28",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/vspandan/ifuzzer",
+ "star": 83,
+ "commits": 6,
+ "modify_time": "2018-06-13 01:40:54",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/viralmaniar/peekaboo",
+ "star": 83,
+ "commits": 14,
+ "modify_time": "2019-04-29 06:27:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/unrealakama/nightshade",
+ "star": 83,
+ "commits": 91,
+ "modify_time": "2017-05-28 16:37:16",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/tlkh/prowler",
+ "star": 83,
+ "commits": 97,
+ "modify_time": "2019-01-23 14:49:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sogeti-esec-lab/rpcforge",
+ "star": 83,
+ "commits": 2,
+ "modify_time": "2017-11-14 16:41:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/slims/slims8_akasia",
+ "star": 83,
+ "commits": 688,
+ "modify_time": "2019-11-04 14:25:55",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/sjord/jwtcrack",
+ "star": 83,
+ "commits": 21,
+ "modify_time": "2019-11-26 11:04:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/scanlime/facewhisperer",
+ "star": 83,
+ "commits": 47,
+ "modify_time": "2016-09-07 01:53:59",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/s3rvac/retdec-python",
+ "star": 83,
+ "commits": 464,
+ "modify_time": "2018-10-10 16:09:17",
+ "last_release": "0.5.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/realtalk/cve-2013-2094",
+ "star": 83,
+ "commits": 1,
+ "modify_time": "2013-05-20 22:38:45",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/quantika14/guasap-whatsapp-foresincs-tool",
+ "star": 83,
+ "commits": 52,
+ "modify_time": "2019-07-09 18:03:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pwntester/dupekeyinjector",
+ "star": 83,
+ "commits": 21,
+ "modify_time": "2019-12-04 16:02:39",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/poteman/alibaba-3rd-security-algorithm-challenge",
+ "star": 83,
+ "commits": 8,
+ "modify_time": "2018-09-25 02:07:09",
+ "last_release": "",
+ "lang": "Jupyter Notebook"
+ },
+ {
+ "link": "https://github.com/piranhalysis/pirogue",
+ "star": 83,
+ "commits": 40,
+ "modify_time": "2019-02-12 20:47:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/phantom0301/vulcloud",
+ "star": 83,
+ "commits": 21,
+ "modify_time": "2019-01-25 03:02:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pedrib/poc",
+ "star": 83,
+ "commits": 304,
+ "modify_time": "2019-08-31 06:50:34",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/owasp/owasp-testing-guide",
+ "star": 83,
+ "commits": 61,
+ "modify_time": "2015-08-31 14:59:38",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/offensive-security/kali-cloud-build",
+ "star": 83,
+ "commits": 429,
+ "modify_time": "2019-04-24 15:26:05",
+ "last_release": "\n offical-7.1a-2013/07/05\n ",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/oalabs/frida-extract",
+ "star": 83,
+ "commits": 13,
+ "modify_time": "2017-03-02 04:24:38",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/oalabs/findyara",
+ "star": 83,
+ "commits": 15,
+ "modify_time": "2018-08-13 19:02:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nccgroup/blackboxprotobuf",
+ "star": 83,
+ "commits": 5,
+ "modify_time": "2018-08-23 16:34:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mr-xn/hackbar2.1.3",
+ "star": 83,
+ "commits": 7,
+ "modify_time": "2019-05-28 07:07:41",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/monoxgas/trebuchet",
+ "star": 83,
+ "commits": 9,
+ "modify_time": "2015-09-21 16:13:29",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/mmessano/powershell",
+ "star": 83,
+ "commits": 27,
+ "modify_time": "2014-03-20 19:16:02",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/marcusbotacin/branchmonitoringproject",
+ "star": 83,
+ "commits": 58,
+ "modify_time": "2018-11-12 21:57:42",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/localh0t/m4ngl3m3",
+ "star": 83,
+ "commits": 2,
+ "modify_time": "2019-06-10 16:48:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kmowery/canvas-fingerprinting",
+ "star": 83,
+ "commits": 130,
+ "modify_time": "2014-09-02 03:36:18",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/kingsquare/docker-tunnel",
+ "star": 83,
+ "commits": 15,
+ "modify_time": "2018-01-17 17:17:28",
+ "last_release": "stable",
+ "lang": "Makefile"
+ },
+ {
+ "link": "https://github.com/kcarretto/arsenal",
+ "star": 83,
+ "commits": 478,
+ "modify_time": "2019-09-17 02:17:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kai5263499/awesome-container-security",
+ "star": 83,
+ "commits": 78,
+ "modify_time": "2019-04-05 19:47:41",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/kacperszurek/gpg_reaper",
+ "star": 83,
+ "commits": 5,
+ "modify_time": "2018-03-07 16:35:27",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/justinsteven/advisories",
+ "star": 83,
+ "commits": 14,
+ "modify_time": "2019-03-30 03:46:35",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/jonwil/unlinker",
+ "star": 83,
+ "commits": 7,
+ "modify_time": "2016-11-25 00:11:30",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/jgillam/burp-paramalyzer",
+ "star": 83,
+ "commits": 80,
+ "modify_time": "2019-11-28 19:38:57",
+ "last_release": "v2.1.0",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/github-classroom-cybros/ethical-hacking",
+ "star": 83,
+ "commits": null,
+ "modify_time": "2018-10-01 13:31:41",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/fujitsulaboratories/comevizz",
+ "star": 83,
+ "commits": 21,
+ "modify_time": "2018-04-26 11:08:49",
+ "last_release": "",
+ "lang": "R"
+ },
+ {
+ "link": "https://github.com/friendlyarm/h3_lichee",
+ "star": 83,
+ "commits": 114,
+ "modify_time": "2018-12-18 07:19:25",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/enjoiz/bsqlinjector",
+ "star": 83,
+ "commits": 13,
+ "modify_time": "2018-07-12 07:54:31",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/einstein-/hexrays-python",
+ "star": 83,
+ "commits": 12,
+ "modify_time": "2014-01-28 20:54:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dword1511/onewire-over-uart",
+ "star": 83,
+ "commits": 22,
+ "modify_time": "2017-06-17 22:18:01",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/djhohnstein/processreimaging",
+ "star": 83,
+ "commits": 2,
+ "modify_time": "2019-06-21 21:48:27",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/decoder-it/lonelypotato",
+ "star": 83,
+ "commits": 7,
+ "modify_time": "2018-01-13 21:46:26",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/deadash/pbb_crack",
+ "star": 83,
+ "commits": 15,
+ "modify_time": "2019-04-06 15:14:57",
+ "last_release": "提取工具",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/danielplohmann/smda",
+ "star": 83,
+ "commits": 38,
+ "modify_time": "2019-08-21 08:00:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cyberark/skyark",
+ "star": 83,
+ "commits": 170,
+ "modify_time": "2019-10-04 22:09:50",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/claudioviviani/wordbrutepress",
+ "star": 83,
+ "commits": 30,
+ "modify_time": "2017-04-21 14:11:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/caledoniaproject/awesome-opensource-security",
+ "star": 83,
+ "commits": 1,
+ "modify_time": "2019-12-09 04:00:00",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/bwall/ircsnapshot",
+ "star": 83,
+ "commits": 94,
+ "modify_time": "2015-03-21 23:56:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/brainsmoke/ptrace-burrito",
+ "star": 83,
+ "commits": 88,
+ "modify_time": "2019-08-26 22:35:55",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/bones-codes/bombs",
+ "star": 83,
+ "commits": 43,
+ "modify_time": "2017-04-27 06:43:30",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/bluekezhou/binarywaf",
+ "star": 83,
+ "commits": 2,
+ "modify_time": "2016-12-21 08:44:42",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/benjaminsoelberg/reflectivepeloader",
+ "star": 83,
+ "commits": 20,
+ "modify_time": "2017-10-12 11:02:57",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/assafmo/xioc",
+ "star": 83,
+ "commits": 59,
+ "modify_time": "2019-05-06 07:01:34",
+ "last_release": "v1.1.11",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/amolnaik4/bodhi",
+ "star": 83,
+ "commits": 6,
+ "modify_time": "2018-10-29 16:38:06",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/401trg/detections",
+ "star": 83,
+ "commits": 96,
+ "modify_time": "2018-05-30 20:10:30",
+ "last_release": "1.0.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/1n3/httpoxyscan",
+ "star": 83,
+ "commits": 6,
+ "modify_time": "2017-08-09 15:11:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://bitbucket.org/jesusfreke/smali",
+ "star": 83,
+ "commits": null,
+ "modify_time": "2019-01-23 08:53:56.175000",
+ "last_release": "",
+ "lang": "java"
+ },
+ {
+ "link": "https://github.com/codesuki/ecs-nginx-proxy",
+ "star": 82,
+ "commits": 29,
+ "modify_time": "2018-08-07 02:20:54",
+ "last_release": "\n 0.4.0\n ",
+ "lang": "Dockerfile"
+ },
+ {
+ "link": "https://github.com/m4ll0k/burpsuite-secret_finder",
+ "star": 82,
+ "commits": 14,
+ "modify_time": "2019-12-09 02:17:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/taviso/cefdebug",
+ "star": 82,
+ "commits": 27,
+ "modify_time": "2019-10-12 16:28:23",
+ "last_release": "v0.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/uknowsec/loginlog_windows",
+ "star": 82,
+ "commits": 7,
+ "modify_time": "2019-09-30 04:11:59",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/intrigueio/tapir",
+ "star": 82,
+ "commits": 854,
+ "modify_time": "2014-12-09 21:50:54",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/imtiazkarimik23/atfuzzer",
+ "star": 82,
+ "commits": 70,
+ "modify_time": "2019-11-21 16:19:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zswang/jfogs",
+ "star": 82,
+ "commits": 26,
+ "modify_time": "2019-01-04 07:57:22",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/saneki-discontinued/FlatUI",
+ "star": 82,
+ "commits": 16,
+ "modify_time": "2016-06-21 17:37:51",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/zacbrown/powerkrabsetw",
+ "star": 82,
+ "commits": 7,
+ "modify_time": "2018-02-21 18:22:59",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/yehia-mamdouh/xssya-v-2.0",
+ "star": 82,
+ "commits": 13,
+ "modify_time": "2017-02-03 22:54:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xypiie/webshell",
+ "star": 82,
+ "commits": 6,
+ "modify_time": "2014-09-10 10:47:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wjp/idados",
+ "star": 82,
+ "commits": 46,
+ "modify_time": "2016-02-28 15:30:54",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/whyrusleeping/zmsg",
+ "star": 82,
+ "commits": 16,
+ "modify_time": "2017-03-30 23:18:09",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/wangyihang/ccupp",
+ "star": 82,
+ "commits": 15,
+ "modify_time": "2017-06-08 06:43:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/viktordegtyarev/callreclib",
+ "star": 82,
+ "commits": 11,
+ "modify_time": "2017-10-24 13:02:19",
+ "last_release": "",
+ "lang": "Kotlin"
+ },
+ {
+ "link": "https://github.com/trailofbits/ios-integrity-validator",
+ "star": 82,
+ "commits": 28,
+ "modify_time": "2019-02-28 20:45:03",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/techbliss/frida_for_ida_pro",
+ "star": 82,
+ "commits": 6,
+ "modify_time": "2015-04-05 07:30:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/takuzoo3868/penta",
+ "star": 82,
+ "commits": 10,
+ "modify_time": "2019-10-15 17:20:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/snail007/autostart",
+ "star": 82,
+ "commits": 15,
+ "modify_time": "2018-04-26 10:05:00",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/silascutler/lnkparse",
+ "star": 82,
+ "commits": 8,
+ "modify_time": "2018-09-18 14:41:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/shjalayeri/sysret",
+ "star": 82,
+ "commits": 4,
+ "modify_time": "2012-09-11 10:22:47",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/schierlm/javapayload",
+ "star": 82,
+ "commits": 111,
+ "modify_time": "2013-09-28 18:26:23",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/rlarabee/exploits",
+ "star": 82,
+ "commits": 8,
+ "modify_time": "2018-07-10 03:46:51",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/rjohnsondev/vim-compiler-go",
+ "star": 82,
+ "commits": 14,
+ "modify_time": "2016-06-28 22:00:10",
+ "last_release": "",
+ "lang": "Vim script"
+ },
+ {
+ "link": "https://github.com/ret2p4nda/kernel-pwn",
+ "star": 82,
+ "commits": 19,
+ "modify_time": "2019-05-02 09:27:57",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ray-cp/pwn_debug",
+ "star": 82,
+ "commits": 23,
+ "modify_time": "2019-08-10 06:34:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/random-robbie/aws-scanner",
+ "star": 82,
+ "commits": 27,
+ "modify_time": "2018-03-14 14:02:51",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/pvasa/easycrypt",
+ "star": 82,
+ "commits": 54,
+ "modify_time": "2018-09-28 14:39:35",
+ "last_release": "1.3.5",
+ "lang": "Kotlin"
+ },
+ {
+ "link": "https://github.com/plizonczyk/noiseprotocol",
+ "star": 82,
+ "commits": 94,
+ "modify_time": "2019-02-24 13:59:24",
+ "last_release": "\n v0.2.2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pinperepette/geotweet_gui",
+ "star": 82,
+ "commits": 52,
+ "modify_time": "2015-09-11 20:43:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pelock/pelock-software-protection-and-licensing-sdk",
+ "star": 82,
+ "commits": 10,
+ "modify_time": "2019-02-23 22:44:27",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/paulsapps/msgi",
+ "star": 82,
+ "commits": 933,
+ "modify_time": "2018-05-29 23:24:19",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/openzipkin/zipkin-ruby",
+ "star": 82,
+ "commits": 231,
+ "modify_time": "2019-11-23 04:09:51",
+ "last_release": "\n 0.42.0\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/nukem9/swissarmyknife",
+ "star": 82,
+ "commits": 50,
+ "modify_time": "2019-12-08 08:03:13",
+ "last_release": "4",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/nemerle/dcc",
+ "star": 82,
+ "commits": 141,
+ "modify_time": "2018-03-23 18:59:48",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/mwielgoszewski/burp-protobuf-decoder",
+ "star": 82,
+ "commits": 46,
+ "modify_time": "2014-03-04 19:42:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/maldroid/maldrolyzer",
+ "star": 82,
+ "commits": 26,
+ "modify_time": "2015-05-07 05:41:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/m4sc3r4n0/astroid",
+ "star": 82,
+ "commits": 11,
+ "modify_time": "2017-06-18 04:22:36",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/m4ll0k/wpsploit",
+ "star": 82,
+ "commits": null,
+ "modify_time": "2018-07-10 11:06:32",
+ "last_release": "",
+ "lang": "python"
+ },
+ {
+ "link": "https://github.com/lz1y/cve-2017-8759",
+ "star": 82,
+ "commits": 17,
+ "modify_time": "2017-11-09 02:41:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/llsourcell/antivirus_demo",
+ "star": 82,
+ "commits": 4,
+ "modify_time": "2016-09-08 00:20:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lcatro/browser_vuln_check",
+ "star": 82,
+ "commits": 10,
+ "modify_time": "2017-08-16 16:08:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/krmaxwell/tinfoleak",
+ "star": 82,
+ "commits": 3,
+ "modify_time": "2014-09-15 17:35:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/k33nteam/ie9-ie11-vulnerability-advanced-exploitation",
+ "star": 82,
+ "commits": 6,
+ "modify_time": "2013-09-10 04:57:36",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/juniorn1003/faitagram",
+ "star": 82,
+ "commits": 77,
+ "modify_time": "2018-09-30 12:02:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jinhang/12306_captcha",
+ "star": 82,
+ "commits": 2,
+ "modify_time": "2016-04-28 06:04:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jeanlouisferey/aws-securitygroup-grapher",
+ "star": 82,
+ "commits": 16,
+ "modify_time": "2019-08-09 12:59:26",
+ "last_release": "v1.1.0",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/indicodatasolutions/enso",
+ "star": 82,
+ "commits": 146,
+ "modify_time": "2019-08-12 12:17:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/idanr1986/cuckoodroid-2.0",
+ "star": 82,
+ "commits": 13,
+ "modify_time": "2017-08-07 11:27:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hackedteam/scout-win",
+ "star": 82,
+ "commits": 67,
+ "modify_time": "2015-04-02 09:35:26",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/graxcode/cafebabe",
+ "star": 82,
+ "commits": 42,
+ "modify_time": "2019-09-05 19:06:56",
+ "last_release": "0.1.2",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/grantseltzer/karn",
+ "star": 82,
+ "commits": 134,
+ "modify_time": "2019-11-23 18:35:30",
+ "last_release": "v2.0.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/gossithedog/zeroday",
+ "star": 82,
+ "commits": 11,
+ "modify_time": "2018-08-28 11:11:11",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/google/rekall-profiles",
+ "star": 82,
+ "commits": 1100,
+ "modify_time": "2018-09-17 11:54:41",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/glen-mac/gogetbucket",
+ "star": 82,
+ "commits": 28,
+ "modify_time": "2019-03-29 02:08:44",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/firecracker-microvm/firecracker-demo",
+ "star": 82,
+ "commits": 53,
+ "modify_time": "2019-11-12 12:51:33",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/exp-sky/asiasecwest-2018-chakra-vulnerability-and-exploit-bypass-all-system-mitigation",
+ "star": 82,
+ "commits": 1,
+ "modify_time": "2018-06-09 09:22:06",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/erforschr/bruteforce-http-auth",
+ "star": 82,
+ "commits": 34,
+ "modify_time": "2018-12-21 16:33:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/elephantos/elephant",
+ "star": 82,
+ "commits": 4,
+ "modify_time": "2016-03-30 13:13:41",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/eklitzke/ptrace-call-userspace",
+ "star": 82,
+ "commits": 17,
+ "modify_time": "2016-02-03 01:07:14",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ecx86/tcpbin",
+ "star": 82,
+ "commits": 31,
+ "modify_time": "2019-01-20 23:00:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dirtyfilthy/metassh",
+ "star": 82,
+ "commits": 27,
+ "modify_time": "2012-07-18 01:33:01",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/crackmes/crackmes",
+ "star": 82,
+ "commits": 23,
+ "modify_time": "2018-03-11 16:35:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/col-e/jremapper",
+ "star": 82,
+ "commits": 101,
+ "modify_time": "2019-12-05 23:43:52",
+ "last_release": "2.4.1",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/ckjbug/kali-linux-learning",
+ "star": 82,
+ "commits": 112,
+ "modify_time": "2018-08-29 07:02:44",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ciscodevnet/virlutils",
+ "star": 82,
+ "commits": 198,
+ "modify_time": "2019-04-04 17:58:25",
+ "last_release": "0.8.7",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/chrisjohnriley/random_code",
+ "star": 82,
+ "commits": 19,
+ "modify_time": "2013-11-20 09:01:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/chokepoint/crypthook",
+ "star": 82,
+ "commits": 17,
+ "modify_time": "2014-10-12 15:23:10",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/calaylin/bda",
+ "star": 82,
+ "commits": 152,
+ "modify_time": "2018-04-11 21:15:26",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/brutemap-dev/brutemap",
+ "star": 82,
+ "commits": 65,
+ "modify_time": "2019-06-13 05:04:29",
+ "last_release": "v1.1.4",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/basic4/widucky",
+ "star": 82,
+ "commits": 84,
+ "modify_time": "2016-12-17 19:12:26",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/baibaomen/baibaomen.httphijacker",
+ "star": 82,
+ "commits": 8,
+ "modify_time": "2018-09-24 16:23:26",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/avian2/noscript",
+ "star": 82,
+ "commits": 913,
+ "modify_time": "2018-07-25 07:56:09",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/audreyr/binaryornot",
+ "star": 82,
+ "commits": 182,
+ "modify_time": "2019-08-11 11:08:51",
+ "last_release": "0.4.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/argos83/ritm",
+ "star": 82,
+ "commits": 36,
+ "modify_time": "2019-07-09 09:43:14",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/anssi-fr/tabi",
+ "star": 82,
+ "commits": 13,
+ "modify_time": "2018-02-14 10:46:59",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/anbai-inc/cobaltstrike_hanization",
+ "star": 82,
+ "commits": null,
+ "modify_time": "2018-07-05 15:04:23",
+ "last_release": "",
+ "lang": "java"
+ },
+ {
+ "link": "https://github.com/alphasoc/nfr",
+ "star": 82,
+ "commits": 164,
+ "modify_time": "2019-12-04 06:23:33",
+ "last_release": "v1.8.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/abdsec/cve-2016-0801",
+ "star": 82,
+ "commits": 4,
+ "modify_time": "2016-05-13 11:36:17",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/7ym0n/security",
+ "star": 82,
+ "commits": 208,
+ "modify_time": "2019-02-27 11:38:40",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/10up/restricted-site-access",
+ "star": 82,
+ "commits": 352,
+ "modify_time": "2019-12-03 18:40:48",
+ "last_release": "7.2.0",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/0xffff0800/muddyc3v1.0.1-",
+ "star": 82,
+ "commits": 1,
+ "modify_time": "2019-07-18 17:14:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/0xcpu/winaltsyscallhandler",
+ "star": 82,
+ "commits": 11,
+ "modify_time": "2019-11-06 14:08:22",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/chxj1992/shadowsocks-manager-docker",
+ "star": 81,
+ "commits": 27,
+ "modify_time": "2017-12-29 06:47:07",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/sensepost/wpa_sycophant",
+ "star": 81,
+ "commits": 27,
+ "modify_time": "2019-08-06 22:00:01",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/googlecreativelab/tunnelvision",
+ "star": 81,
+ "commits": 16,
+ "modify_time": "2018-12-05 22:17:09",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/infoslack/docker-dvwa",
+ "star": 81,
+ "commits": 3,
+ "modify_time": "2016-12-01 16:48:37",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/hikariobfuscator/hanabi",
+ "star": 81,
+ "commits": 53,
+ "modify_time": "2019-05-08 20:51:35",
+ "last_release": "7.0@1b02aa@LoaderV4",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/asche910/flynet",
+ "star": 81,
+ "commits": 42,
+ "modify_time": "2019-11-30 14:07:54",
+ "last_release": "v2.0.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/OffXec/PAVELOW",
+ "star": 81,
+ "commits": 7,
+ "modify_time": "2018-05-08 05:51:54",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/nats-io/stan.java",
+ "star": 81,
+ "commits": 359,
+ "modify_time": "2019-09-26 18:07:47",
+ "last_release": "2.2.3",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/android-dtf/dtf",
+ "star": 81,
+ "commits": 47,
+ "modify_time": "2015-12-03 20:47:30",
+ "last_release": "\n v1.3.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ctfhacker/ctf-writeups",
+ "star": 81,
+ "commits": 76,
+ "modify_time": "2018-10-10 20:36:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zcutlip/exploit-poc",
+ "star": 81,
+ "commits": 115,
+ "modify_time": "2016-05-05 03:10:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xyzz/rop-rpc",
+ "star": 81,
+ "commits": 15,
+ "modify_time": "2018-01-07 12:32:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xoreaxeaxeax/vimmmex",
+ "star": 81,
+ "commits": 5,
+ "modify_time": "2016-07-01 03:19:12",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/vah13/avdetection",
+ "star": 81,
+ "commits": 13,
+ "modify_time": "2016-10-24 17:37:10",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/undeadsec/idisagree",
+ "star": 81,
+ "commits": 11,
+ "modify_time": "2018-07-25 01:06:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tyilo/asm_repl",
+ "star": 81,
+ "commits": 15,
+ "modify_time": "2015-12-09 05:21:35",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/talater/chrome-is-listening",
+ "star": 81,
+ "commits": 8,
+ "modify_time": "2014-01-21 23:02:40",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/strobejb/winspy",
+ "star": 81,
+ "commits": 8,
+ "modify_time": "2012-07-20 09:15:03",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/spiderlabs/msfrpc",
+ "star": 81,
+ "commits": 3,
+ "modify_time": "2012-01-06 03:55:40",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/skelsec/pypykatz_agent_dn",
+ "star": 81,
+ "commits": 7,
+ "modify_time": "2019-03-15 18:25:02",
+ "last_release": "0.0.2",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/silascutler/malpipe",
+ "star": 81,
+ "commits": 4,
+ "modify_time": "2018-11-20 16:36:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/siberas/watobo",
+ "star": 81,
+ "commits": 111,
+ "modify_time": "2017-09-18 15:36:12",
+ "last_release": "v1.0.0",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/shengqi158/svn_git_scanner",
+ "star": 81,
+ "commits": 1,
+ "modify_time": "2015-07-29 07:51:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/securestate/king-phisher-templates",
+ "star": 81,
+ "commits": 105,
+ "modify_time": "2019-08-19 17:54:00",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/sderosiaux/guidelines-to-create-a-strong-website",
+ "star": 81,
+ "commits": 158,
+ "modify_time": "2019-02-10 09:18:30",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/scwuaptx/lazyfragmentationheap",
+ "star": 81,
+ "commits": 5,
+ "modify_time": "2019-07-09 12:20:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rhaidiz/dribble",
+ "star": 81,
+ "commits": 15,
+ "modify_time": "2019-10-21 17:01:59",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/ratty3697/hackspy-trojan-exploit",
+ "star": 81,
+ "commits": 8,
+ "modify_time": "2017-05-02 08:12:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rapid7/jsobfu",
+ "star": 81,
+ "commits": 97,
+ "modify_time": "2017-01-18 23:30:44",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/r3dxpl0it/apache-superset-remote-code-execution-poc-cve-2018-8021",
+ "star": 81,
+ "commits": 7,
+ "modify_time": "2018-12-03 21:12:59",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/prezi/reddalert",
+ "star": 81,
+ "commits": 299,
+ "modify_time": "2018-11-14 11:29:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/poomsmart/idaobjctypes",
+ "star": 81,
+ "commits": 80,
+ "modify_time": "2019-11-23 05:06:54",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/nukem9/virtualdbghide",
+ "star": 81,
+ "commits": 44,
+ "modify_time": "2015-03-21 20:42:12",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/nowsecure/dirtycow",
+ "star": 81,
+ "commits": 26,
+ "modify_time": "2019-05-13 13:17:30",
+ "last_release": "0.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/nowsecure/airspy",
+ "star": 81,
+ "commits": 12,
+ "modify_time": "2019-08-19 12:00:07",
+ "last_release": "",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/nccgroup/requests-racer",
+ "star": 81,
+ "commits": 38,
+ "modify_time": "2019-08-09 20:01:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nccgroup/argumentinjectionhammer",
+ "star": 81,
+ "commits": 1,
+ "modify_time": "2019-04-16 16:44:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nao-sec/ektotal",
+ "star": 81,
+ "commits": 70,
+ "modify_time": "2019-11-02 06:41:48",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/mtojek/aws-lambda-go-proxy",
+ "star": 81,
+ "commits": 16,
+ "modify_time": "2018-01-21 17:50:28",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/mattcurrie/mgbdis",
+ "star": 81,
+ "commits": 43,
+ "modify_time": "2019-10-02 21:07:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/matt-knight/research",
+ "star": 81,
+ "commits": 14,
+ "modify_time": "2018-01-23 09:34:36",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/lukasikic/hacoder.py",
+ "star": 81,
+ "commits": 14,
+ "modify_time": "2016-07-08 14:10:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lufeirider/project",
+ "star": 81,
+ "commits": 172,
+ "modify_time": "2019-01-31 08:35:32",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/leoid/matchandreplace",
+ "star": 81,
+ "commits": 12,
+ "modify_time": "2019-05-13 13:04:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ktekeli/audio-steganography-algorithms",
+ "star": 81,
+ "commits": 16,
+ "modify_time": "2019-05-24 17:08:34",
+ "last_release": "",
+ "lang": "MATLAB"
+ },
+ {
+ "link": "https://github.com/kramse/security-courses",
+ "star": 81,
+ "commits": 659,
+ "modify_time": "2019-12-05 19:03:41",
+ "last_release": "",
+ "lang": "TeX"
+ },
+ {
+ "link": "https://github.com/jborean93/packer-windoze",
+ "star": 81,
+ "commits": 66,
+ "modify_time": "2019-12-09 07:12:57",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/jas502n/cve-2019-3396",
+ "star": 81,
+ "commits": 27,
+ "modify_time": "2019-11-01 14:33:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hvqzao/foolavc",
+ "star": 81,
+ "commits": 8,
+ "modify_time": "2018-01-15 14:57:51",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/huntergregal/png-idat-payload-generator",
+ "star": 81,
+ "commits": 28,
+ "modify_time": "2019-09-17 20:14:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/freedom-wy/js-reverse",
+ "star": 81,
+ "commits": 66,
+ "modify_time": "2019-11-06 14:44:37",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/fox-it/mkyara",
+ "star": 81,
+ "commits": 1,
+ "modify_time": "2019-03-28 13:16:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fgsect/scat",
+ "star": 81,
+ "commits": 56,
+ "modify_time": "2019-10-25 16:03:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fademind/hosts.extras",
+ "star": 81,
+ "commits": 122,
+ "modify_time": "2019-09-25 13:13:11",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/evilsocket/coffee",
+ "star": 81,
+ "commits": 3,
+ "modify_time": "2016-10-09 14:54:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/endgameinc/youarespecial",
+ "star": 81,
+ "commits": 11,
+ "modify_time": "2018-11-05 21:41:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ecstatic-nobel/posint",
+ "star": 81,
+ "commits": 27,
+ "modify_time": "2019-10-20 19:21:54",
+ "last_release": "v2.1",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/duoergun0729/4book",
+ "star": 81,
+ "commits": 79,
+ "modify_time": "2018-04-20 11:05:59",
+ "last_release": "",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/derrekr/android_security",
+ "star": 81,
+ "commits": 3,
+ "modify_time": "2017-04-03 18:54:04",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ddos-defense/bohatei",
+ "star": 81,
+ "commits": 7,
+ "modify_time": "2016-04-16 21:04:41",
+ "last_release": "",
+ "lang": "Roff"
+ },
+ {
+ "link": "https://github.com/david-risney/csp-fiddler-extension",
+ "star": 81,
+ "commits": 41,
+ "modify_time": "2015-07-15 04:44:17",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/coffeehb/ocift",
+ "star": 81,
+ "commits": 10,
+ "modify_time": "2017-04-10 06:24:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/chokepoint/beleth",
+ "star": 81,
+ "commits": 36,
+ "modify_time": "2014-02-04 03:22:31",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/chichou/wiggle",
+ "star": 81,
+ "commits": 23,
+ "modify_time": "2019-12-05 02:35:31",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/bruceye777/cronmon",
+ "star": 81,
+ "commits": 71,
+ "modify_time": "2018-12-04 08:51:23",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/blockchainlabsnz/awesome-solidity",
+ "star": 81,
+ "commits": 142,
+ "modify_time": "2019-09-13 01:51:49",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/asuri-team/pwn-sandbox",
+ "star": 81,
+ "commits": 1,
+ "modify_time": "2018-12-05 13:58:11",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/arguslab/argus-saf",
+ "star": 81,
+ "commits": 507,
+ "modify_time": "2019-01-08 02:26:38",
+ "last_release": "\n v3.2.0\n ",
+ "lang": "Scala"
+ },
+ {
+ "link": "https://github.com/andreybazhan/symstore",
+ "star": 81,
+ "commits": 2,
+ "modify_time": "2019-05-29 20:10:09",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/abarker/pdfcropmargins",
+ "star": 81,
+ "commits": 205,
+ "modify_time": "2019-11-27 21:39:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mr-un1k0d3r/maliciousdllgenerator",
+ "star": 80,
+ "commits": 25,
+ "modify_time": "2019-02-05 16:06:36",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/toyodadoubi/ssrstatus",
+ "star": 80,
+ "commits": 33,
+ "modify_time": "2018-11-25 04:59:02",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/thekingofduck/logontracer",
+ "star": 80,
+ "commits": 13,
+ "modify_time": "2019-05-16 06:08:26",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/shadowsocks/shadow-shop",
+ "star": 80,
+ "commits": 159,
+ "modify_time": "2019-05-25 10:25:15",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/automattic/vip-coding-standards",
+ "star": 80,
+ "commits": 793,
+ "modify_time": "2019-12-09 14:49:51",
+ "last_release": "2.0.0",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/warner/magic-wormhole.rs",
+ "star": 80,
+ "commits": 489,
+ "modify_time": "2019-12-05 16:55:21",
+ "last_release": "\n v0.0.2\n ",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/bastilleresearch/keysniffer",
+ "star": 80,
+ "commits": 3,
+ "modify_time": "2016-07-26 14:02:54",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ouqiang/mars",
+ "star": 80,
+ "commits": 21,
+ "modify_time": "2019-01-04 15:24:27",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/trailofbits/mishegos",
+ "star": 80,
+ "commits": 80,
+ "modify_time": "2019-12-06 01:57:38",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/vmikhav/AntiPacMan",
+ "star": 80,
+ "commits": 11,
+ "modify_time": "2018-01-30 09:24:51",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/helpsystems/wiwo",
+ "star": 80,
+ "commits": 4,
+ "modify_time": "2016-02-03 22:17:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zhkl0228/androidattacher",
+ "star": 80,
+ "commits": 15,
+ "modify_time": "2018-01-01 03:51:59",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/z00nx/reversemap",
+ "star": 80,
+ "commits": 8,
+ "modify_time": "2017-01-11 03:08:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/yosuke-furukawa/httpstat",
+ "star": 80,
+ "commits": 49,
+ "modify_time": "2019-11-12 18:01:01",
+ "last_release": "\n v1.5.2\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/wpo-foundation/win-shaper",
+ "star": 80,
+ "commits": 34,
+ "modify_time": "2017-04-26 13:57:19",
+ "last_release": "winshaper_1.0.0.2",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/trailofbits/molasses",
+ "star": 80,
+ "commits": 119,
+ "modify_time": "2019-06-04 18:58:42",
+ "last_release": "",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/tleyden/keynuker",
+ "star": 80,
+ "commits": 122,
+ "modify_time": "2018-07-05 22:50:47",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/thewhiteh4t/flashsploit",
+ "star": 80,
+ "commits": 22,
+ "modify_time": "2019-09-03 05:50:45",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/theevilbit/kex",
+ "star": 80,
+ "commits": 30,
+ "modify_time": "2019-07-31 21:11:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/takahiroharuyama/ida_haru",
+ "star": 80,
+ "commits": 16,
+ "modify_time": "2019-08-31 14:33:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/stef/libsphinx",
+ "star": 80,
+ "commits": 161,
+ "modify_time": "2019-10-10 22:57:35",
+ "last_release": "v0.10",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/smilezxlee/zxhookdetection",
+ "star": 80,
+ "commits": 12,
+ "modify_time": "2019-07-16 01:06:11",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/sebdraven/hack_lu_2017",
+ "star": 80,
+ "commits": 19,
+ "modify_time": "2018-05-18 16:05:34",
+ "last_release": "",
+ "lang": "Jupyter Notebook"
+ },
+ {
+ "link": "https://github.com/se55i0n/portscanner",
+ "star": 80,
+ "commits": 16,
+ "modify_time": "2017-10-29 14:05:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sbousseaden/panache_sysmon",
+ "star": 80,
+ "commits": null,
+ "modify_time": "2019-09-12 20:05:22",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/sashs/filebytes",
+ "star": 80,
+ "commits": 145,
+ "modify_time": "2019-10-04 08:52:34",
+ "last_release": "\n v0.10.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rsc-dev/pbd",
+ "star": 80,
+ "commits": 14,
+ "modify_time": "2017-10-17 05:27:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/riscure/rhme-2015",
+ "star": 80,
+ "commits": 10,
+ "modify_time": "2016-06-07 11:33:20",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/radiowar/firegoose",
+ "star": 80,
+ "commits": 29,
+ "modify_time": "2016-08-22 05:20:29",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/pyn3rd/cve-2018-2893",
+ "star": 80,
+ "commits": 8,
+ "modify_time": "2018-10-27 01:42:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ptresearch/mmdetect",
+ "star": 80,
+ "commits": 8,
+ "modify_time": "2018-10-05 10:08:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/programa-stic/security-advisories",
+ "star": 80,
+ "commits": 55,
+ "modify_time": "2017-02-22 23:00:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pielco11/doge",
+ "star": 80,
+ "commits": 36,
+ "modify_time": "2019-09-05 11:20:06",
+ "last_release": "v0.1",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/oranav/i9300_emmc_toolbox",
+ "star": 80,
+ "commits": 25,
+ "modify_time": "2018-04-10 23:04:24",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/nullarray/netset",
+ "star": 80,
+ "commits": 47,
+ "modify_time": "2019-08-04 05:18:22",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/nlitsme/pyidbutil",
+ "star": 80,
+ "commits": 37,
+ "modify_time": "2019-09-09 13:46:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nixawk/fuzzdb",
+ "star": 80,
+ "commits": 56,
+ "modify_time": "2018-04-14 12:36:16",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/mkishere/sshsyrup",
+ "star": 80,
+ "commits": 216,
+ "modify_time": "2019-02-25 05:05:58",
+ "last_release": "v0.6.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/menkrep1337/xsscon",
+ "star": 80,
+ "commits": 45,
+ "modify_time": "2019-09-01 02:32:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/manulqwerty/evil-winrar-gen",
+ "star": 80,
+ "commits": 12,
+ "modify_time": "2019-07-26 18:17:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lzjluzijie/websocks",
+ "star": 80,
+ "commits": 126,
+ "modify_time": "2018-12-03 07:00:16",
+ "last_release": "v0.15.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/lflare/picoctf_2017_writeup",
+ "star": 80,
+ "commits": 72,
+ "modify_time": "2017-05-15 05:11:04",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/legitbs/quals-2017",
+ "star": 80,
+ "commits": 4,
+ "modify_time": "2017-06-12 14:30:44",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/lcatro/cve-2017-7269-echo-poc",
+ "star": 80,
+ "commits": 7,
+ "modify_time": "2018-10-27 03:20:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/koenrh/s3enum",
+ "star": 80,
+ "commits": 100,
+ "modify_time": "2019-10-05 13:52:35",
+ "last_release": "v0.2.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/klsfct/getshell",
+ "star": 80,
+ "commits": 226,
+ "modify_time": "2018-03-24 20:00:57",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/keybase/python-triplesec",
+ "star": 80,
+ "commits": 66,
+ "modify_time": "2018-12-18 23:00:59",
+ "last_release": "\n v0.4\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/januzellij/hopperscripts",
+ "star": 80,
+ "commits": 9,
+ "modify_time": "2016-11-20 20:27:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/idapython/bin",
+ "star": 80,
+ "commits": 4,
+ "modify_time": "2016-01-08 15:48:59",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/garethflowers/tor-browser-portable",
+ "star": 80,
+ "commits": 85,
+ "modify_time": "2019-10-26 22:59:42",
+ "last_release": "v5.5.4",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/fastvpseestiou/fastnetmon",
+ "star": 80,
+ "commits": 1741,
+ "modify_time": "2016-04-07 13:25:26",
+ "last_release": "\n v1.1.2\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/fabiobaroni/awesome-chinese-infosec-websites",
+ "star": 80,
+ "commits": 7,
+ "modify_time": "2015-10-28 14:55:39",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/evil-e/sdb-explorer",
+ "star": 80,
+ "commits": 6,
+ "modify_time": "2017-05-11 11:56:03",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/escapingbug/ancypwn",
+ "star": 80,
+ "commits": 81,
+ "modify_time": "2019-09-18 00:55:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/davidkorczynski/repeconstruct",
+ "star": 80,
+ "commits": 13,
+ "modify_time": "2016-10-28 06:58:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/david942j/defcon-2017-tools",
+ "star": 80,
+ "commits": 197,
+ "modify_time": "2017-08-03 12:40:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cyberdefenseinstitute/cdir",
+ "star": 80,
+ "commits": 10,
+ "modify_time": "2019-10-10 02:39:40",
+ "last_release": "v1.3.4",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cbayet/poolsprayer",
+ "star": 80,
+ "commits": 5,
+ "modify_time": "2017-05-31 11:44:03",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/brandonasuncion/reverse-engineering-bluetooth-protocols",
+ "star": 80,
+ "commits": 12,
+ "modify_time": "2018-08-03 15:47:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bkth/attacking-edge-through-the-javascript-compiler",
+ "star": 80,
+ "commits": 6,
+ "modify_time": "2019-02-15 23:27:56",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/ax330d/functions-plus",
+ "star": 80,
+ "commits": 7,
+ "modify_time": "2018-09-21 14:51:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/asciimoo/filtron",
+ "star": 80,
+ "commits": 51,
+ "modify_time": "2018-02-18 12:53:31",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/alyakhtar/katastrophe",
+ "star": 80,
+ "commits": 73,
+ "modify_time": "2017-02-03 20:46:39",
+ "last_release": "\n 2.0.4\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/advancedhacker101/c-sharp-r.a.t-server",
+ "star": 80,
+ "commits": 46,
+ "modify_time": "2018-08-18 11:47:37",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/adi1090x/hackapk",
+ "star": 80,
+ "commits": 11,
+ "modify_time": "2018-03-25 15:06:10",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/ring04h/s5.go",
+ "star": 79,
+ "commits": 5,
+ "modify_time": "2016-10-23 09:20:00",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/iaik/ios-analysis",
+ "star": 79,
+ "commits": 4,
+ "modify_time": "2018-07-02 14:41:09",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/bishopfox/anti-anti-automation",
+ "star": 79,
+ "commits": 6,
+ "modify_time": "2014-08-18 21:30:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lanjelot/albatar",
+ "star": 79,
+ "commits": 24,
+ "modify_time": "2016-10-04 01:52:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/momika233/clamav_0day_exploit",
+ "star": 79,
+ "commits": 2,
+ "modify_time": "2019-11-03 08:57:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mozilla/authenticator-rs",
+ "star": 79,
+ "commits": 200,
+ "modify_time": "2019-10-09 20:31:15",
+ "last_release": "\n v0.2.6\n ",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/yifanlu/uvloader",
+ "star": 79,
+ "commits": 118,
+ "modify_time": "2018-01-05 13:10:42",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/yeyintminthuhtut/awesome-study-resources-for-kernel-hacking",
+ "star": 79,
+ "commits": 4,
+ "modify_time": "2016-07-14 07:12:19",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/xyntax/bingc",
+ "star": 79,
+ "commits": 5,
+ "modify_time": "2016-07-04 22:32:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/winscripting/uac-bypass",
+ "star": 79,
+ "commits": 5,
+ "modify_time": "2017-05-23 19:59:19",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/viralmaniar/in-spectre-meltdown",
+ "star": 79,
+ "commits": 13,
+ "modify_time": "2018-01-08 00:28:43",
+ "last_release": "1.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/torps/torps",
+ "star": 79,
+ "commits": 617,
+ "modify_time": "2017-01-16 15:03:28",
+ "last_release": "\n tor-0.2.4.23\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/tillson/git-hound",
+ "star": 79,
+ "commits": 63,
+ "modify_time": "2019-09-08 23:51:48",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/thom-s/docx-embeddedhtml-injection",
+ "star": 79,
+ "commits": 9,
+ "modify_time": "2018-12-10 16:19:49",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/thecodeartist/elf-parser",
+ "star": 79,
+ "commits": 29,
+ "modify_time": "2019-08-02 17:27:28",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/tandasat/findpg",
+ "star": 79,
+ "commits": 7,
+ "modify_time": "2014-06-24 01:59:11",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/subfinder/goaltdns",
+ "star": 79,
+ "commits": 40,
+ "modify_time": "2019-03-30 02:11:33",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/smealum/udsploit",
+ "star": 79,
+ "commits": 2,
+ "modify_time": "2017-02-11 19:44:37",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/sjhilt/gaspot",
+ "star": 79,
+ "commits": 26,
+ "modify_time": "2016-08-11 16:44:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/shendo/websnort",
+ "star": 79,
+ "commits": 47,
+ "modify_time": "2018-07-04 10:32:35",
+ "last_release": "v0.8",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/schollz/find3-cli-scanner",
+ "star": 79,
+ "commits": 88,
+ "modify_time": "2019-11-19 16:27:52",
+ "last_release": "\n v3.3.3\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/sawzeeyy/sanitiz3r",
+ "star": 79,
+ "commits": 12,
+ "modify_time": "2018-07-16 21:33:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/purduepaml/trojannn",
+ "star": 79,
+ "commits": 66,
+ "modify_time": "2019-02-21 20:36:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/powershell/psdscresources",
+ "star": 79,
+ "commits": 281,
+ "modify_time": "2019-06-26 18:35:16",
+ "last_release": "\n 2.12.0.0-PSGallery\n ",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/ostark/upper",
+ "star": 79,
+ "commits": 75,
+ "modify_time": "2019-05-03 12:20:36",
+ "last_release": "1.5.1",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/op7ic/edr-testing-script",
+ "star": 79,
+ "commits": 67,
+ "modify_time": "2019-08-16 14:07:43",
+ "last_release": "",
+ "lang": "Batchfile"
+ },
+ {
+ "link": "https://github.com/onioniot/openwrt-packages",
+ "star": 79,
+ "commits": 402,
+ "modify_time": "2019-01-16 19:39:33",
+ "last_release": "",
+ "lang": "Makefile"
+ },
+ {
+ "link": "https://github.com/nusr/awesome-macos-command-line-zh",
+ "star": 79,
+ "commits": 15,
+ "modify_time": "2019-05-15 03:26:14",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/nsacyber/netfil",
+ "star": 79,
+ "commits": 2,
+ "modify_time": "2017-03-16 16:10:13",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/nitr4x/reverse-me",
+ "star": 79,
+ "commits": 23,
+ "modify_time": "2018-10-04 08:00:00",
+ "last_release": "",
+ "lang": "Dockerfile"
+ },
+ {
+ "link": "https://github.com/nezza/sdqanalyzer",
+ "star": 79,
+ "commits": 26,
+ "modify_time": "2018-03-27 09:05:04",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/netxfly/xsec-dns-proxy",
+ "star": 79,
+ "commits": 3,
+ "modify_time": "2017-08-15 13:39:51",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/nanqinlang-mogic/v2ray",
+ "star": 79,
+ "commits": 6,
+ "modify_time": "2018-02-28 11:04:31",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/naltun/eyes.sh",
+ "star": 79,
+ "commits": 14,
+ "modify_time": "2019-02-16 15:56:42",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/mozilla/http-observatory-cli",
+ "star": 79,
+ "commits": 14,
+ "modify_time": "2017-02-08 20:31:26",
+ "last_release": "\n 1.0.2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mi3security/su-a-cyder",
+ "star": 79,
+ "commits": 26,
+ "modify_time": "2016-04-07 20:41:44",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/lightswitch05/hosts",
+ "star": 79,
+ "commits": 1007,
+ "modify_time": "2019-12-06 22:49:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/laconicwolf/nmap-scan-to-csv",
+ "star": 79,
+ "commits": 26,
+ "modify_time": "2019-02-04 19:23:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kromerm/adflab",
+ "star": 79,
+ "commits": 54,
+ "modify_time": "2018-06-04 22:12:08",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/kingsabri/godofwar",
+ "star": 79,
+ "commits": 33,
+ "modify_time": "2019-04-16 19:38:57",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/julienpalard/ashttp",
+ "star": 79,
+ "commits": 13,
+ "modify_time": "2014-04-02 14:26:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/imiyoo2010/teye_scanner_for_book",
+ "star": 79,
+ "commits": 3,
+ "modify_time": "2017-11-08 07:24:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ignitetechnologies/vulnhub-ctf-writeups",
+ "star": 79,
+ "commits": 13,
+ "modify_time": "2019-10-28 13:44:26",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/iamhdt/ecommerce-website-security-checklist",
+ "star": 79,
+ "commits": 23,
+ "modify_time": "2017-11-28 15:06:13",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/i2p/i2p.i2p-bote",
+ "star": 79,
+ "commits": 2147,
+ "modify_time": "2019-05-16 12:29:06",
+ "last_release": "\n v0.4.7\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/hexploitable/memscan",
+ "star": 79,
+ "commits": 14,
+ "modify_time": "2017-04-18 10:39:15",
+ "last_release": "v1.4-alpha",
+ "lang": "Objective-C++"
+ },
+ {
+ "link": "https://github.com/hahwul/metasploit-autopwn",
+ "star": 79,
+ "commits": 11,
+ "modify_time": "2018-08-04 07:48:55",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/hackndo/krack-poc",
+ "star": 79,
+ "commits": 18,
+ "modify_time": "2018-04-24 15:24:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/guedou/r2m2",
+ "star": 79,
+ "commits": 70,
+ "modify_time": "2019-05-05 19:47:06",
+ "last_release": "\n v0.3\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/google/giftstick",
+ "star": 79,
+ "commits": 57,
+ "modify_time": "2019-10-09 15:40:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/glinares/hephaestus",
+ "star": 79,
+ "commits": 2,
+ "modify_time": "2017-04-05 03:47:35",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/githubmaidou/tools",
+ "star": 79,
+ "commits": 79,
+ "modify_time": "2019-12-05 11:00:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gdbinit/mach_race",
+ "star": 79,
+ "commits": 3,
+ "modify_time": "2016-04-27 14:05:09",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/frida/frida-presentations",
+ "star": 79,
+ "commits": 18,
+ "modify_time": "2019-08-18 00:36:58",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/f0rgetting/presentations",
+ "star": 79,
+ "commits": 3,
+ "modify_time": "2018-11-12 05:33:13",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/djhohnstein/.net-profiler-dll-hijack",
+ "star": 79,
+ "commits": 1,
+ "modify_time": "2018-12-14 22:53:51",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/derekchiang/mesos-bitcoin-miner",
+ "star": 79,
+ "commits": 29,
+ "modify_time": "2017-12-06 06:30:14",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/de1ta-team/de1ctf2019",
+ "star": 79,
+ "commits": 45,
+ "modify_time": "2019-08-12 11:49:11",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/daradib/sidedoor",
+ "star": 79,
+ "commits": 75,
+ "modify_time": "2017-10-08 20:02:01",
+ "last_release": "debian/0.2.1-1",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/dancezarp/tbdex",
+ "star": 79,
+ "commits": 6,
+ "modify_time": "2017-02-28 14:13:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/damian89/xssfinder",
+ "star": 79,
+ "commits": 34,
+ "modify_time": "2018-10-07 10:13:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/corelan/dnshjmon",
+ "star": 79,
+ "commits": 24,
+ "modify_time": "2013-12-30 10:24:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/coderpirata/xpl-search",
+ "star": 79,
+ "commits": 42,
+ "modify_time": "2016-02-07 23:57:24",
+ "last_release": "1.0",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/certsocietegenerale/notifysecurity",
+ "star": 79,
+ "commits": 2,
+ "modify_time": "2018-11-08 16:52:52",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/cdhowie/netflix-no-ipv6-dns-proxy",
+ "star": 79,
+ "commits": 37,
+ "modify_time": "2018-11-28 04:30:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/brianwrf/hackrequests",
+ "star": 79,
+ "commits": 18,
+ "modify_time": "2017-09-12 19:53:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/billyv4/id-entify",
+ "star": 79,
+ "commits": 16,
+ "modify_time": "2018-06-05 16:55:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/axiomzen/eth-random",
+ "star": 79,
+ "commits": 66,
+ "modify_time": "2019-03-30 03:10:18",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/axi0mx/ios-kexec-utils",
+ "star": 79,
+ "commits": 19,
+ "modify_time": "2018-04-15 18:28:38",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/anfractuosity/ultrasonicnetworking",
+ "star": 79,
+ "commits": 4,
+ "modify_time": "2017-05-30 20:50:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/adafruit/adafruit_blesniffer_python",
+ "star": 79,
+ "commits": 27,
+ "modify_time": "2018-08-17 23:50:25",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/abaykan/53r3n17y",
+ "star": 79,
+ "commits": 49,
+ "modify_time": "2019-06-02 19:37:05",
+ "last_release": "V3.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zhoushuai0207/ladder",
+ "star": 78,
+ "commits": 9,
+ "modify_time": "2019-08-30 01:13:35",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/reswitched/loaders",
+ "star": 78,
+ "commits": 13,
+ "modify_time": "2019-04-08 20:59:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/uknowsec/sharpdecryptpwd",
+ "star": 78,
+ "commits": 14,
+ "modify_time": "2019-10-14 13:01:52",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/webbreacher/yoga",
+ "star": 78,
+ "commits": 80,
+ "modify_time": "2019-02-04 20:24:33",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/mr-un1k0d3r/redteamscripts",
+ "star": 78,
+ "commits": 27,
+ "modify_time": "2019-11-11 17:43:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/elliiot/ghidra_darknight",
+ "star": 78,
+ "commits": 7,
+ "modify_time": "2019-03-17 10:31:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/oftn-oswg/zerodrop",
+ "star": 78,
+ "commits": 83,
+ "modify_time": "2018-05-27 01:32:42",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/cylance/SMBTrap",
+ "star": 78,
+ "commits": 7,
+ "modify_time": "2015-06-02 17:22:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/helpsystems/Agafi",
+ "star": 78,
+ "commits": 13,
+ "modify_time": "2015-02-12 23:43:32",
+ "last_release": "v1.1",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/siberas/sjet",
+ "star": 78,
+ "commits": 27,
+ "modify_time": "2019-01-22 14:18:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/radareorg/radare2-pm",
+ "star": 78,
+ "commits": 330,
+ "modify_time": "2019-11-21 10:13:54",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/virb3/dneditor",
+ "star": 78,
+ "commits": 109,
+ "modify_time": "2017-03-18 09:23:01",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/unkn0wnh4ckr/hackers-tool-kit",
+ "star": 78,
+ "commits": 315,
+ "modify_time": "2019-12-03 20:20:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/trolldbois/python-haystack",
+ "star": 78,
+ "commits": 1823,
+ "modify_time": "2017-07-03 04:45:52",
+ "last_release": "\n v0.42\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/t-s-a/smbspider",
+ "star": 78,
+ "commits": 10,
+ "modify_time": "2013-11-13 18:49:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/stevemk14ebr/unihook",
+ "star": 78,
+ "commits": 175,
+ "modify_time": "2017-04-13 23:42:08",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/softsec-kaist/imf",
+ "star": 78,
+ "commits": 6,
+ "modify_time": "2018-01-09 00:09:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rwhitcroft/dnschan",
+ "star": 78,
+ "commits": 18,
+ "modify_time": "2015-12-23 16:11:23",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/rjhansen/nsrllookup",
+ "star": 78,
+ "commits": 59,
+ "modify_time": "2019-09-26 01:47:50",
+ "last_release": "1.4.2",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/regebro/pyroma",
+ "star": 78,
+ "commits": 266,
+ "modify_time": "2019-11-02 15:01:27",
+ "last_release": "\n 2.6\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/realalexandergeorgiev/tempracer",
+ "star": 78,
+ "commits": 11,
+ "modify_time": "2015-09-29 07:39:08",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/qtek/qradio",
+ "star": 78,
+ "commits": 13,
+ "modify_time": "2016-05-20 16:10:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pythonone/ms17-010",
+ "star": 78,
+ "commits": 20,
+ "modify_time": "2017-04-29 05:40:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pownjs/pown-whoarethey",
+ "star": 78,
+ "commits": 22,
+ "modify_time": "2019-09-27 21:01:08",
+ "last_release": "\n v2.4.0\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/pinkflawd/r2graphity",
+ "star": 78,
+ "commits": 56,
+ "modify_time": "2017-06-17 20:48:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pfalcon/scratchablock",
+ "star": 78,
+ "commits": 1207,
+ "modify_time": "2019-10-06 22:01:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/peterpt/fuzzbunch",
+ "star": 78,
+ "commits": 31,
+ "modify_time": "2018-06-08 09:42:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/palkeo/pakala",
+ "star": 78,
+ "commits": 189,
+ "modify_time": "2019-11-03 15:39:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/oblique/wificurse",
+ "star": 78,
+ "commits": 38,
+ "modify_time": "2013-10-30 21:25:50",
+ "last_release": "\n v0.3.9\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/miyagaw61/exgdb",
+ "star": 78,
+ "commits": 226,
+ "modify_time": "2019-10-06 14:01:53",
+ "last_release": "\n version3.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mattevans/pwned-passwords",
+ "star": 78,
+ "commits": 8,
+ "modify_time": "2019-06-11 21:07:16",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/markbaggett/domain_stats",
+ "star": 78,
+ "commits": 28,
+ "modify_time": "2018-10-19 14:20:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/malqr/malqr.github.io",
+ "star": 78,
+ "commits": 31,
+ "modify_time": "2017-02-14 16:30:53",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/liamrandall/bromalware-exercise",
+ "star": 78,
+ "commits": 17,
+ "modify_time": "2013-08-07 18:30:39",
+ "last_release": "",
+ "lang": "Zeek"
+ },
+ {
+ "link": "https://github.com/kelvinhack/devicemon",
+ "star": 78,
+ "commits": 58,
+ "modify_time": "2019-09-24 06:53:01",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/kala13x/scap",
+ "star": 78,
+ "commits": 25,
+ "modify_time": "2015-09-10 12:23:04",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jenkinsci/dependency-check-plugin",
+ "star": 78,
+ "commits": 912,
+ "modify_time": "2019-11-04 05:54:17",
+ "last_release": "\n dependency-check-jenkins-plugin-5.1.0\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/jeffbryner/nbdserver",
+ "star": 78,
+ "commits": 29,
+ "modify_time": "2017-03-31 19:27:14",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/jacobreynolds/ssrfdetector",
+ "star": 78,
+ "commits": 176,
+ "modify_time": "2017-04-10 02:21:46",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/idanr1986/cuckoo",
+ "star": 78,
+ "commits": 2740,
+ "modify_time": "2015-01-11 12:21:12",
+ "last_release": "\n 1.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hatriot/shellme",
+ "star": 78,
+ "commits": 5,
+ "modify_time": "2017-03-09 20:14:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gelim/nmap-erpscan",
+ "star": 78,
+ "commits": 23,
+ "modify_time": "2019-04-25 10:51:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gabrielg/cve-2014-1266-poc",
+ "star": 78,
+ "commits": 5,
+ "modify_time": "2014-02-25 19:28:42",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/g0tmi1k/vulninjector",
+ "star": 78,
+ "commits": 1,
+ "modify_time": "2013-02-18 21:14:32",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/frohoff/ciphr",
+ "star": 78,
+ "commits": 127,
+ "modify_time": "2018-08-04 01:36:10",
+ "last_release": "\n v0.0.4\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/etnaviv/etna_viv",
+ "star": 78,
+ "commits": 847,
+ "modify_time": "2019-11-17 21:20:03",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ernacktob/esp8266_wifi_raw",
+ "star": 78,
+ "commits": 19,
+ "modify_time": "2017-03-31 13:00:12",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/elfmaster/saruman",
+ "star": 78,
+ "commits": 2,
+ "modify_time": "2018-03-14 22:41:15",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/demonsec666/secist_script",
+ "star": 78,
+ "commits": 35,
+ "modify_time": "2018-02-06 11:27:51",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/cyphar/mkonion",
+ "star": 78,
+ "commits": 35,
+ "modify_time": "2016-12-16 07:42:42",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/cymmetria/honeycomb",
+ "star": 78,
+ "commits": 80,
+ "modify_time": "2019-02-16 02:33:51",
+ "last_release": "v0.0.11",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/clirimemini/keye",
+ "star": 78,
+ "commits": 29,
+ "modify_time": "2019-08-10 19:53:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cea-sec/torpylle",
+ "star": 78,
+ "commits": 11,
+ "modify_time": "2013-08-08 19:37:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/breadtk/onion_pi",
+ "star": 78,
+ "commits": 18,
+ "modify_time": "2014-03-03 01:54:36",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/acris/shadowsocks-asuswrt-merlin",
+ "star": 77,
+ "commits": 163,
+ "modify_time": "2019-10-16 13:46:07",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/qious/ss-panel-server",
+ "star": 77,
+ "commits": 173,
+ "modify_time": "2019-02-17 06:39:54",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/thelinuxchoice/droidtracker",
+ "star": 77,
+ "commits": 8,
+ "modify_time": "2019-01-07 23:45:55",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/virustotal/c-vtapi",
+ "star": 77,
+ "commits": 135,
+ "modify_time": "2019-07-10 09:41:22",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hasherezade/module_overloading",
+ "star": 77,
+ "commits": 25,
+ "modify_time": "2019-11-25 22:36:47",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/comwrg/fuck-gfw",
+ "star": 77,
+ "commits": 26,
+ "modify_time": "2019-10-08 06:22:18",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/foxhex0ne/hyperviper",
+ "star": 77,
+ "commits": 4,
+ "modify_time": "2019-11-07 04:29:34",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/iqiyi/qnsm",
+ "star": 77,
+ "commits": 27,
+ "modify_time": "2019-10-24 11:41:10",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ContionMig/KernelMode-Bypass",
+ "star": 77,
+ "commits": 6,
+ "modify_time": "2018-08-05 07:41:21",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/FSecureLABS/CVE-2016-7255",
+ "star": 77,
+ "commits": 2,
+ "modify_time": "2017-03-09 22:55:17",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/Phoenix1747/fake-sandbox",
+ "star": 77,
+ "commits": 208,
+ "modify_time": "2019-09-14 16:49:28",
+ "last_release": "1.7.6",
+ "lang": "Batchfile"
+ },
+ {
+ "link": "https://github.com/zer0mem/minihypervisorproject",
+ "star": 77,
+ "commits": 18,
+ "modify_time": "2014-07-02 08:46:48",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/wofeiwo/webshell-find-tools",
+ "star": 77,
+ "commits": null,
+ "modify_time": "2017-08-14 02:20:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/versprite/research",
+ "star": 77,
+ "commits": 346,
+ "modify_time": "2019-11-27 20:36:38",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/vergl4s/pentesting-dump",
+ "star": 77,
+ "commits": 25,
+ "modify_time": "2019-11-06 03:26:07",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/tuhinshubhra/shellstack",
+ "star": 77,
+ "commits": 8,
+ "modify_time": "2017-06-15 19:42:02",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/trolldbois/sslsnoop",
+ "star": 77,
+ "commits": 316,
+ "modify_time": "2015-10-29 02:46:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tinysec/iathook",
+ "star": 77,
+ "commits": 4,
+ "modify_time": "2016-10-27 11:18:36",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/thundergunexpress/badministration",
+ "star": 77,
+ "commits": 16,
+ "modify_time": "2019-08-25 16:31:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tezukanice/office8570",
+ "star": 77,
+ "commits": 4,
+ "modify_time": "2017-08-13 02:46:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tarampampam/mikrotik-hosts-parser",
+ "star": 77,
+ "commits": 81,
+ "modify_time": "2019-11-15 07:21:36",
+ "last_release": "v2.3.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/szimeus/evalyzer",
+ "star": 77,
+ "commits": 18,
+ "modify_time": "2017-03-02 22:25:29",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/subtlescope/bash-ransomware",
+ "star": 77,
+ "commits": 121,
+ "modify_time": "2016-04-03 02:14:50",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/stasinopoulos/jaidam",
+ "star": 77,
+ "commits": 18,
+ "modify_time": "2018-03-08 08:05:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/secwiki/webshell-2",
+ "star": 77,
+ "commits": 17,
+ "modify_time": "2016-11-21 15:36:08",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/securitystreak/security-scripts",
+ "star": 77,
+ "commits": 11,
+ "modify_time": "2017-04-24 19:17:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/schollz/find3-android-scanner",
+ "star": 77,
+ "commits": 36,
+ "modify_time": "2018-09-16 21:46:16",
+ "last_release": "v3.0.4",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/rizer0/blind-bash",
+ "star": 77,
+ "commits": 7,
+ "modify_time": "2019-08-19 18:28:17",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/r00t-3xp10it/resource_files",
+ "star": 77,
+ "commits": 487,
+ "modify_time": "2019-12-09 00:33:22",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/pingxcpost/f-nascan-plus",
+ "star": 77,
+ "commits": 6,
+ "modify_time": "2019-10-04 06:14:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/parsingteam/redlogin",
+ "star": 77,
+ "commits": 9,
+ "modify_time": "2018-06-28 04:15:06",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/paolomonti42/salt",
+ "star": 77,
+ "commits": 30,
+ "modify_time": "2018-09-10 17:07:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/owasp/ninja-pingu",
+ "star": 77,
+ "commits": 23,
+ "modify_time": "2014-04-14 21:46:27",
+ "last_release": "\n v1.0.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/open-power/skiboot",
+ "star": 77,
+ "commits": 5045,
+ "modify_time": "2019-12-05 12:42:59",
+ "last_release": "\n v5.4.11\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/olegberman/mitm-omegle",
+ "star": 77,
+ "commits": 12,
+ "modify_time": "2016-05-15 05:56:32",
+ "last_release": "",
+ "lang": "CoffeeScript"
+ },
+ {
+ "link": "https://github.com/oleavr/ios-inject-custom",
+ "star": 77,
+ "commits": 6,
+ "modify_time": "2019-08-24 01:28:05",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/nullarray/mimir",
+ "star": 77,
+ "commits": 43,
+ "modify_time": "2019-02-12 14:33:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nhoya/pastebinmarkdownxss",
+ "star": 77,
+ "commits": 16,
+ "modify_time": "2018-04-24 09:11:41",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/netxfly/x-proxy",
+ "star": 77,
+ "commits": 21,
+ "modify_time": "2019-08-01 12:23:18",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/mtjailed/jailbreakme",
+ "star": 77,
+ "commits": 106,
+ "modify_time": "2018-09-18 23:21:10",
+ "last_release": "1.1",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/mncoppola/linux-kernel-ctf",
+ "star": 77,
+ "commits": 15,
+ "modify_time": "2015-11-16 20:38:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mitchmoser/sputnik",
+ "star": 77,
+ "commits": 140,
+ "modify_time": "2019-10-01 04:59:17",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/likexian/whois-parser-go",
+ "star": 77,
+ "commits": 97,
+ "modify_time": "2019-11-24 00:04:33",
+ "last_release": "\n v1.10.2\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/k8scop/k8s-security-dashboard",
+ "star": 77,
+ "commits": 61,
+ "modify_time": "2019-03-27 12:23:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/k-vitali/malware-misc-re",
+ "star": 77,
+ "commits": 152,
+ "modify_time": "2019-11-21 18:02:05",
+ "last_release": "",
+ "lang": "Jupyter Notebook"
+ },
+ {
+ "link": "https://github.com/jndok/pegasusx",
+ "star": 77,
+ "commits": 8,
+ "modify_time": "2016-10-04 16:36:17",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jenyraval/phishing-simulation",
+ "star": 77,
+ "commits": 36,
+ "modify_time": "2019-09-26 09:34:50",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/horsicq/nfdx64dbg",
+ "star": 77,
+ "commits": 389,
+ "modify_time": "2019-12-09 20:14:59",
+ "last_release": "0.10",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/homjxi0e/apt",
+ "star": 77,
+ "commits": 28,
+ "modify_time": "2018-09-18 01:13:33",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/google/gscxscanner",
+ "star": 77,
+ "commits": 18,
+ "modify_time": "2019-07-09 17:49:50",
+ "last_release": "1.0.3",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/fs0c131y/cve-2018-20555",
+ "star": 77,
+ "commits": 5,
+ "modify_time": "2019-01-17 21:12:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/f5networks/f5-aws-cloudformation",
+ "star": 77,
+ "commits": 67,
+ "modify_time": "2019-12-05 22:09:25",
+ "last_release": "v5.2.0",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/f47h3r/hackingteam_exploits",
+ "star": 77,
+ "commits": 2,
+ "modify_time": "2015-07-07 19:02:42",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/enigmabridge/certbot-external-auth",
+ "star": 77,
+ "commits": 133,
+ "modify_time": "2019-05-30 21:59:09",
+ "last_release": "\n v0.1.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ekultek/xanxss",
+ "star": 77,
+ "commits": 18,
+ "modify_time": "2018-11-09 20:26:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dtag-dev-sec/explo",
+ "star": 77,
+ "commits": 63,
+ "modify_time": "2018-01-05 15:12:15",
+ "last_release": "\n 0.2.2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dictionaryhouse/dirpath_list",
+ "star": 77,
+ "commits": 4,
+ "modify_time": "2017-11-07 12:35:47",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/danieluhricek/lisa",
+ "star": 77,
+ "commits": 10,
+ "modify_time": "2019-10-04 19:18:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/daizhongyin/securitysdk",
+ "star": 77,
+ "commits": 21,
+ "modify_time": "2018-05-22 16:18:20",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/d3sre/use_case_applicability",
+ "star": 77,
+ "commits": 22,
+ "modify_time": "2019-12-07 14:35:26",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/cybereason/linux_plumber",
+ "star": 77,
+ "commits": 18,
+ "modify_time": "2019-06-25 13:15:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/csmacnz/coveralls.net",
+ "star": 77,
+ "commits": 389,
+ "modify_time": "2019-10-20 23:06:31",
+ "last_release": "1.0.0",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/cottinghamd/hardeningauditor",
+ "star": 77,
+ "commits": 148,
+ "modify_time": "2019-05-09 05:20:10",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/cocoahuke/ioskextdump",
+ "star": 77,
+ "commits": 21,
+ "modify_time": "2017-07-16 00:34:38",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/chunkingz/linsetmv1-2",
+ "star": 77,
+ "commits": 18,
+ "modify_time": "2019-08-05 14:11:53",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/bugsafe/wereport",
+ "star": 77,
+ "commits": 13,
+ "modify_time": "2017-10-29 09:58:14",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/blacknbunny/shellcodetoassembly",
+ "star": 77,
+ "commits": 33,
+ "modify_time": "2018-02-24 08:55:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bishopfox/firecat",
+ "star": 77,
+ "commits": 6,
+ "modify_time": "2014-11-19 22:05:23",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/asherags/amzsear",
+ "star": 77,
+ "commits": 19,
+ "modify_time": "2018-10-22 06:38:11",
+ "last_release": "2.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/apriorit/mhook",
+ "star": 77,
+ "commits": 91,
+ "modify_time": "2019-11-21 12:16:31",
+ "last_release": "2.5.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/anmavrid/smart-contracts",
+ "star": 77,
+ "commits": 185,
+ "modify_time": "2019-09-26 23:42:49",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/ank1036official/git_pentesting_toolkit",
+ "star": 77,
+ "commits": 42,
+ "modify_time": "2017-01-13 22:54:58",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/angelkitty/computer-virus",
+ "star": 77,
+ "commits": 22,
+ "modify_time": "2019-08-06 04:19:06",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/android-x86/android-x86.github.io",
+ "star": 77,
+ "commits": 264,
+ "modify_time": "2019-12-09 02:27:19",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/iaik/cache_template_attacks",
+ "star": 76,
+ "commits": 21,
+ "modify_time": "2019-03-14 15:42:44",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/galkan/tools",
+ "star": 76,
+ "commits": 151,
+ "modify_time": "2018-03-27 07:15:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mushorg/go-dpi",
+ "star": 76,
+ "commits": 33,
+ "modify_time": "2017-11-15 05:33:05",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/akenofu/oscp-cheat-sheet",
+ "star": 76,
+ "commits": 7,
+ "modify_time": "2019-11-01 21:09:46",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ts-way/gerix-wifi-cracker",
+ "star": 76,
+ "commits": 1,
+ "modify_time": "2011-09-20 21:52:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ztgrace/red_team_telemetry",
+ "star": 76,
+ "commits": 2,
+ "modify_time": "2019-02-21 17:38:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zencashofficial/arizen",
+ "star": 76,
+ "commits": 1486,
+ "modify_time": "2019-07-11 13:32:18",
+ "last_release": "v1.2.4",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/zcgonvh/cve-2017-7269-tool",
+ "star": 76,
+ "commits": 1,
+ "modify_time": "2017-05-16 18:47:07",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/yveaux/nrf24_sniffer",
+ "star": 76,
+ "commits": 24,
+ "modify_time": "2014-09-06 11:57:48",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/yashpl/mongobuster",
+ "star": 76,
+ "commits": 14,
+ "modify_time": "2019-08-24 09:17:44",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/xc0d3rz/metasploit-apk-embed-payload",
+ "star": 76,
+ "commits": 52,
+ "modify_time": "2017-07-23 20:13:32",
+ "last_release": "\n v0.3\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/v0s/plus22",
+ "star": 76,
+ "commits": 5,
+ "modify_time": "2015-01-11 18:18:48",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/threatexpress/tinyshell",
+ "star": 76,
+ "commits": 13,
+ "modify_time": "2018-01-31 12:43:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/the-c0d3r/admin-finder",
+ "star": 76,
+ "commits": 48,
+ "modify_time": "2019-04-26 01:08:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/superponible/volatility-plugins",
+ "star": 76,
+ "commits": 28,
+ "modify_time": "2017-10-23 15:38:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sup3ria/atlantr",
+ "star": 76,
+ "commits": 142,
+ "modify_time": "2019-05-11 23:16:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sniperoj/jeopardy-dockerfiles",
+ "star": 76,
+ "commits": 230,
+ "modify_time": "2019-11-26 07:04:03",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/sh4rk0-666/spykeyboard",
+ "star": 76,
+ "commits": 9,
+ "modify_time": "2018-09-01 02:28:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sevagas/windowsdefender_asr_bypass-offensivecon2019",
+ "star": 76,
+ "commits": 2,
+ "modify_time": "2019-02-24 20:12:53",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/sethsec/crossdomain-exploitation-framework",
+ "star": 76,
+ "commits": 47,
+ "modify_time": "2014-11-12 20:26:11",
+ "last_release": "",
+ "lang": "ActionScript"
+ },
+ {
+ "link": "https://github.com/root4loot/rescope",
+ "star": 76,
+ "commits": 197,
+ "modify_time": "2019-11-19 19:17:07",
+ "last_release": "2.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/retirejs/grunt-retire",
+ "star": 76,
+ "commits": 108,
+ "modify_time": "2019-04-15 07:03:05",
+ "last_release": "\n 1.0.8\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/re4son/wsl-kali-x",
+ "star": 76,
+ "commits": 21,
+ "modify_time": "2018-09-19 23:51:33",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/ph-7/obfuscator-class",
+ "star": 76,
+ "commits": 21,
+ "modify_time": "2019-05-04 02:26:29",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/oguzhantopgul/vezir-project",
+ "star": 76,
+ "commits": 48,
+ "modify_time": "2016-04-25 17:48:17",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/nickstadb/serialbrute",
+ "star": 76,
+ "commits": 3,
+ "modify_time": "2017-08-18 20:58:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nezteb/i_hate_wordpress",
+ "star": 76,
+ "commits": 65,
+ "modify_time": "2017-03-18 20:50:52",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/neohapsis/suddensix",
+ "star": 76,
+ "commits": 14,
+ "modify_time": "2013-08-07 17:33:14",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/moosd/needle",
+ "star": 76,
+ "commits": 44,
+ "modify_time": "2016-09-11 12:07:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/microsoft/adfswebcustomization",
+ "star": 76,
+ "commits": 37,
+ "modify_time": "2019-06-21 04:51:12",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/mgeide/poortego",
+ "star": 76,
+ "commits": 67,
+ "modify_time": "2018-04-11 18:09:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/maxfierke/fincher",
+ "star": 76,
+ "commits": 60,
+ "modify_time": "2019-11-11 19:09:34",
+ "last_release": "0.1.1",
+ "lang": "Crystal"
+ },
+ {
+ "link": "https://github.com/leveldown-security/svd-loader-ghidra",
+ "star": 76,
+ "commits": 6,
+ "modify_time": "2019-10-24 18:02:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lcatro/sise_traning_ctf_re",
+ "star": 76,
+ "commits": 5,
+ "modify_time": "2016-01-22 10:36:37",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/kolargol/openvpn",
+ "star": 76,
+ "commits": 80,
+ "modify_time": "2018-08-14 09:59:36",
+ "last_release": "\n v1.1-udp\n ",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/keithjjones/fileintel",
+ "star": 76,
+ "commits": 29,
+ "modify_time": "2017-01-09 16:16:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jils/flashbackchecker",
+ "star": 76,
+ "commits": 13,
+ "modify_time": "2012-08-23 18:04:56",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/inquest/python-sandboxapi",
+ "star": 76,
+ "commits": 117,
+ "modify_time": "2019-11-26 21:18:44",
+ "last_release": "v1.4.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/incredibleindishell/exploit-code-by-me",
+ "star": 76,
+ "commits": 39,
+ "modify_time": "2019-06-15 09:25:24",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/hardhatdigital/rails-security-audit",
+ "star": 76,
+ "commits": 13,
+ "modify_time": "2015-11-02 06:11:28",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/gregvish/l1tf-poc",
+ "star": 76,
+ "commits": 13,
+ "modify_time": "2018-10-08 08:01:33",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/greenbone/gvmd",
+ "star": 76,
+ "commits": 8898,
+ "modify_time": "2019-12-04 14:29:54",
+ "last_release": "v9.0.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/githacktools/brutedum",
+ "star": 76,
+ "commits": 5,
+ "modify_time": "2019-06-16 10:37:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gdbinit/gopher",
+ "star": 76,
+ "commits": 3,
+ "modify_time": "2015-09-04 16:41:19",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/foospidy/web-cve-tests",
+ "star": 76,
+ "commits": 133,
+ "modify_time": "2019-10-30 15:43:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/foolmitah/cve-2018-14729",
+ "star": 76,
+ "commits": 8,
+ "modify_time": "2018-12-15 10:30:07",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/feross/wiresheep",
+ "star": 76,
+ "commits": 69,
+ "modify_time": "2016-02-09 21:32:12",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/fakhrizulkifli/defeating-php-gd-imagecreatefromgif",
+ "star": 76,
+ "commits": 8,
+ "modify_time": "2015-06-22 13:23:15",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/evilsocket/nikeplus-fuelband-se-reversed",
+ "star": 76,
+ "commits": 4,
+ "modify_time": "2015-02-17 16:25:07",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/ethackdotorg/orwall",
+ "star": 76,
+ "commits": 599,
+ "modify_time": "2016-07-30 20:35:02",
+ "last_release": "\n 1.2.0\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/enovella/jebscripts",
+ "star": 76,
+ "commits": 4,
+ "modify_time": "2016-02-07 15:38:22",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/duo-labs/apple-t2-xpc",
+ "star": 76,
+ "commits": 9,
+ "modify_time": "2019-08-08 23:30:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dunglas/php-torcontrol",
+ "star": 76,
+ "commits": 46,
+ "modify_time": "2016-01-22 08:01:01",
+ "last_release": "v1.0.1",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/drael/gonetstat",
+ "star": 76,
+ "commits": 6,
+ "modify_time": "2018-07-22 22:19:34",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/dennisyurichev/yurichev.com",
+ "star": 76,
+ "commits": null,
+ "modify_time": "2019-09-04 13:58:29",
+ "last_release": "",
+ "lang": "M4"
+ },
+ {
+ "link": "https://github.com/decryptoniteteam/decryptonite",
+ "star": 76,
+ "commits": 5,
+ "modify_time": "2016-10-14 00:56:41",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/dantangfan/ddos",
+ "star": 76,
+ "commits": 8,
+ "modify_time": "2015-06-05 08:49:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/curlyboi/hashtopus",
+ "star": 76,
+ "commits": 54,
+ "modify_time": "2017-12-28 17:54:18",
+ "last_release": "1.2",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/brl/grlh",
+ "star": 76,
+ "commits": 5,
+ "modify_time": "2017-12-23 07:20:48",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/binject/binjection",
+ "star": 76,
+ "commits": 63,
+ "modify_time": "2019-12-05 22:11:30",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/bazad/x18-leak",
+ "star": 76,
+ "commits": 3,
+ "modify_time": "2018-03-07 08:07:03",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/bannsec/autopwn",
+ "star": 76,
+ "commits": 110,
+ "modify_time": "2019-11-16 22:01:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/auth0-blog/angular-auth0-aside",
+ "star": 76,
+ "commits": 110,
+ "modify_time": "2019-06-05 16:30:13",
+ "last_release": "",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/anssi-fr/bootcode_parser",
+ "star": 76,
+ "commits": 5,
+ "modify_time": "2018-02-27 11:03:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/alpha1ab/win2016lpe",
+ "star": 76,
+ "commits": 24,
+ "modify_time": "2018-09-28 05:28:59",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ahmadmansoor/advancedscript",
+ "star": 76,
+ "commits": 162,
+ "modify_time": "2019-09-24 07:01:40",
+ "last_release": "ver4.3",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ab77/black.box",
+ "star": 76,
+ "commits": 392,
+ "modify_time": "2019-11-06 20:56:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/1an0rmus/tekdefense",
+ "star": 76,
+ "commits": 66,
+ "modify_time": "2016-10-05 14:42:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/guardianproject/cacheword",
+ "star": 75,
+ "commits": 236,
+ "modify_time": "2017-01-31 21:13:52",
+ "last_release": "\n 0.1.1\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/ignitetechnologies/web-application-cheatsheet",
+ "star": 75,
+ "commits": 14,
+ "modify_time": "2019-09-24 08:07:02",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/x64dbg/xedparse",
+ "star": 75,
+ "commits": 162,
+ "modify_time": "2016-06-13 07:16:49",
+ "last_release": "1.0.26",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/shadowsocks/stackscript",
+ "star": 75,
+ "commits": 14,
+ "modify_time": "2014-07-15 06:24:12",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/mame82/duckencoder.py",
+ "star": 75,
+ "commits": 33,
+ "modify_time": "2018-08-10 20:34:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/leezj9671/secdevices_docker",
+ "star": 75,
+ "commits": 3,
+ "modify_time": "2019-07-08 11:58:20",
+ "last_release": "",
+ "lang": "Dockerfile"
+ },
+ {
+ "link": "https://github.com/ivbeg/awesome-forensicstools",
+ "star": 75,
+ "commits": 11,
+ "modify_time": "2019-09-18 20:05:46",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/daeken/ssrftest",
+ "star": 75,
+ "commits": 4,
+ "modify_time": "2019-03-23 19:14:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/osirislab/CSAW-CTF-2016-Quals",
+ "star": 75,
+ "commits": 1,
+ "modify_time": "2016-09-18 22:02:53",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jpalanco/nmap-scada",
+ "star": 75,
+ "commits": 10,
+ "modify_time": "2013-12-16 18:56:25",
+ "last_release": "",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/easyctf/librectf",
+ "star": 75,
+ "commits": 216,
+ "modify_time": "2019-02-17 23:29:32",
+ "last_release": "v0.0.0-8",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/zznop/pop-nedry",
+ "star": 75,
+ "commits": 4,
+ "modify_time": "2017-12-09 06:25:37",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/zenix-blurryface/sneakyexe",
+ "star": 75,
+ "commits": 16,
+ "modify_time": "2019-10-03 18:20:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ywolf/f-middlewarescan",
+ "star": 75,
+ "commits": null,
+ "modify_time": "2017-05-02 09:51:21",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/x0rz/tweetentropy",
+ "star": 75,
+ "commits": 7,
+ "modify_time": "2018-07-06 08:25:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wied03/centos-package-cron",
+ "star": 75,
+ "commits": 290,
+ "modify_time": "2019-04-18 14:42:20",
+ "last_release": "releases/1.0.10",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vvalien/win_exp",
+ "star": 75,
+ "commits": 6,
+ "modify_time": "2016-06-16 16:46:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vnik5287/kernel_rop",
+ "star": 75,
+ "commits": 5,
+ "modify_time": "2016-06-23 00:29:49",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/viralsecuritygroup/knoxout",
+ "star": 75,
+ "commits": 1,
+ "modify_time": "2016-09-18 06:55:34",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/vidar-team/hctf2015-all-problems",
+ "star": 75,
+ "commits": 51,
+ "modify_time": "2015-12-09 10:52:26",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/velocidex/c-aff4",
+ "star": 75,
+ "commits": 229,
+ "modify_time": "2019-08-20 12:42:41",
+ "last_release": "v3.3.rc3",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/va5c0/steghide-brute-force-tool",
+ "star": 75,
+ "commits": 7,
+ "modify_time": "2017-02-07 12:22:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/unchartedsoftware/aperture-tiles",
+ "star": 75,
+ "commits": 1900,
+ "modify_time": "2018-05-24 17:23:47",
+ "last_release": "v0.7.1",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/ttffdd/xbadmanners",
+ "star": 75,
+ "commits": 12,
+ "modify_time": "2019-01-17 21:01:55",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/tresacton/passwordstealer",
+ "star": 75,
+ "commits": 4,
+ "modify_time": "2019-10-27 10:55:48",
+ "last_release": "",
+ "lang": "Batchfile"
+ },
+ {
+ "link": "https://github.com/tp7309/ttdedroid",
+ "star": 75,
+ "commits": 51,
+ "modify_time": "2019-10-10 12:37:37",
+ "last_release": "v1.2.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sherifeldeeb/inmet",
+ "star": 75,
+ "commits": 59,
+ "modify_time": "2014-06-19 08:17:00",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/shashank-in/travisleaks",
+ "star": 75,
+ "commits": 21,
+ "modify_time": "2019-06-03 12:28:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/secrary/ida-scripts",
+ "star": 75,
+ "commits": 39,
+ "modify_time": "2019-02-26 13:57:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/scriptingxss/iotgoat",
+ "star": 75,
+ "commits": 57,
+ "modify_time": "2019-11-01 07:15:24",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/safebreach-labs/spacebin",
+ "star": 75,
+ "commits": 6,
+ "modify_time": "2017-07-30 20:25:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/s2e/docs",
+ "star": 75,
+ "commits": 116,
+ "modify_time": "2019-12-06 23:08:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rtlsdrblog/tempestsdr",
+ "star": 75,
+ "commits": 337,
+ "modify_time": "2017-11-24 00:57:07",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/rossmairm/pentools",
+ "star": 75,
+ "commits": 16,
+ "modify_time": "2015-12-17 21:31:04",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/ret2/p2o_2018",
+ "star": 75,
+ "commits": 3,
+ "modify_time": "2018-08-28 15:41:33",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/quangnh89/ollycapstone",
+ "star": 75,
+ "commits": 7,
+ "modify_time": "2015-02-04 01:24:55",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/pwdrkeg/honeyport",
+ "star": 75,
+ "commits": 10,
+ "modify_time": "2015-10-22 14:13:28",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/polaris64/web_exploit_detector",
+ "star": 75,
+ "commits": 52,
+ "modify_time": "2017-07-18 11:52:34",
+ "last_release": "\n v1.1.6\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/ntraiseharderror/antimalware-research",
+ "star": 75,
+ "commits": 70,
+ "modify_time": "2019-11-24 13:08:10",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/nightwatchcybersecurity/truegaze",
+ "star": 75,
+ "commits": 68,
+ "modify_time": "2019-11-24 02:04:57",
+ "last_release": "0.1.4",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/naworkcaj/bdvl",
+ "star": 75,
+ "commits": 21,
+ "modify_time": "2019-12-09 13:10:46",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/misterch0c/crimeboards",
+ "star": 75,
+ "commits": 14,
+ "modify_time": "2019-03-09 09:49:51",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/milabs/khook",
+ "star": 75,
+ "commits": 20,
+ "modify_time": "2019-06-18 16:33:52",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/magoo/incident-response-plan",
+ "star": 75,
+ "commits": 6,
+ "modify_time": "2016-09-29 21:03:33",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/m8r0wn/pymeta",
+ "star": 75,
+ "commits": 18,
+ "modify_time": "2019-11-11 15:47:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jschicht/logfileparser",
+ "star": 75,
+ "commits": 60,
+ "modify_time": "2019-08-18 09:10:16",
+ "last_release": "",
+ "lang": "AutoIt"
+ },
+ {
+ "link": "https://github.com/johnlatwc/msrc",
+ "star": 75,
+ "commits": 10,
+ "modify_time": "2018-09-12 12:47:30",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/j0nathanj/publications",
+ "star": 75,
+ "commits": 11,
+ "modify_time": "2019-01-12 18:09:16",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/j0bin/pentest-resources",
+ "star": 75,
+ "commits": 10,
+ "modify_time": "2016-07-14 12:52:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ivbeg/awesome-forensicstools",
+ "star": 75,
+ "commits": 11,
+ "modify_time": "2019-09-18 20:05:46",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/iagox86/poracle",
+ "star": 75,
+ "commits": 68,
+ "modify_time": "2019-01-17 00:53:17",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/hzqst/fuckcertverifytimevalidity",
+ "star": 75,
+ "commits": 5,
+ "modify_time": "2018-12-14 04:58:20",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/huaisha1224/shadowsocks-client",
+ "star": 75,
+ "commits": 13,
+ "modify_time": "2019-04-24 09:34:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hrbust86/hookmsrbysvm",
+ "star": 75,
+ "commits": 3,
+ "modify_time": "2018-06-19 03:46:42",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/highmeh/lure",
+ "star": 75,
+ "commits": 27,
+ "modify_time": "2019-11-27 15:47:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hiddenillusion/ipinfo",
+ "star": 75,
+ "commits": 4,
+ "modify_time": "2014-01-15 19:37:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/harmj0y/misc-powershell",
+ "star": 75,
+ "commits": 20,
+ "modify_time": "2016-07-04 03:20:45",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/hameda2/zydra",
+ "star": 75,
+ "commits": 31,
+ "modify_time": "2019-06-02 15:31:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hadojae/data",
+ "star": 75,
+ "commits": 78,
+ "modify_time": "2018-08-22 19:22:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gouveaheitor/awesome-biohacking",
+ "star": 75,
+ "commits": 39,
+ "modify_time": "2019-09-08 04:39:27",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/fopina/kdbxpasswordpwned",
+ "star": 75,
+ "commits": 32,
+ "modify_time": "2019-11-24 20:52:00",
+ "last_release": "0.5",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/evilpacket/xss.io",
+ "star": 75,
+ "commits": 7,
+ "modify_time": "2013-04-18 05:19:24",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/edelahozuah/awesome-wifi-security",
+ "star": 75,
+ "commits": 46,
+ "modify_time": "2019-04-10 16:47:06",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/dschadow/javasecurity",
+ "star": 75,
+ "commits": 983,
+ "modify_time": "2019-12-08 07:49:46",
+ "last_release": "2.0.0",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/directdefense/superserial",
+ "star": 75,
+ "commits": 5,
+ "modify_time": "2015-12-22 21:31:03",
+ "last_release": "0.3",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/dinotools/sslscan",
+ "star": 75,
+ "commits": 239,
+ "modify_time": "2014-06-26 19:48:11",
+ "last_release": "\n 1.10.2\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/dadas190/heavens-gate-2.0",
+ "star": 75,
+ "commits": 24,
+ "modify_time": "2017-07-23 16:24:22",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/coldzer0/ida-for-delphi",
+ "star": 75,
+ "commits": 13,
+ "modify_time": "2019-09-20 03:59:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/clrx/clrx-mirror",
+ "star": 75,
+ "commits": 4989,
+ "modify_time": "2019-11-16 07:52:02",
+ "last_release": "0.1.8",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/calidog/certstream-go",
+ "star": 75,
+ "commits": 32,
+ "modify_time": "2018-02-19 20:39:51",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/antojoseph/diff-droid",
+ "star": 75,
+ "commits": 1,
+ "modify_time": "2016-06-14 20:12:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ahhh/reverse_https_bot",
+ "star": 75,
+ "commits": 86,
+ "modify_time": "2016-01-07 23:00:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cisco-talos/snort-faq",
+ "star": 74,
+ "commits": 134,
+ "modify_time": "2019-09-11 22:39:41",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/pentestgeek/scripts",
+ "star": 74,
+ "commits": 1,
+ "modify_time": "2012-10-23 22:18:44",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/wtsxdev/android-security-list",
+ "star": 74,
+ "commits": 2,
+ "modify_time": "2017-01-27 21:16:07",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/dxa4481/damn-vulnerable-redis-container",
+ "star": 74,
+ "commits": 5,
+ "modify_time": "2016-09-11 02:34:17",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/andreafioraldi/frida-js-afl-instr",
+ "star": 74,
+ "commits": 11,
+ "modify_time": "2019-11-18 13:50:45",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/boypt/vmess2json",
+ "star": 74,
+ "commits": 90,
+ "modify_time": "2019-11-04 01:41:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ivanlei/airodump-iv",
+ "star": 74,
+ "commits": 31,
+ "modify_time": "2015-03-05 21:28:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/edoverflow/csp",
+ "star": 74,
+ "commits": 14,
+ "modify_time": "2019-11-06 11:44:31",
+ "last_release": "v1.0.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/Ph0en1x-XMU/Awesome-CTF-Book",
+ "star": 74,
+ "commits": 163,
+ "modify_time": "2019-07-16 03:09:19",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/lazorfuzz/python-hacklib",
+ "star": 74,
+ "commits": 100,
+ "modify_time": "2019-08-26 07:09:39",
+ "last_release": "\n 0.1.6\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/deeptechlabs/meltdown",
+ "star": 74,
+ "commits": 11,
+ "modify_time": "2018-01-07 02:52:24",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/shmilylty/cheetah-gui",
+ "star": 74,
+ "commits": 18,
+ "modify_time": "2018-05-15 13:32:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/avatarone/avatar-python",
+ "star": 74,
+ "commits": 52,
+ "modify_time": "2016-10-18 12:45:43",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/yoda66/androidembedit",
+ "star": 74,
+ "commits": 5,
+ "modify_time": "2018-10-06 13:41:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vanhoefm/dragonslayer",
+ "star": 74,
+ "commits": 14347,
+ "modify_time": "2019-04-24 20:44:42",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/twi1ight/ad-pentest-script",
+ "star": 74,
+ "commits": 3,
+ "modify_time": "2015-07-24 13:37:14",
+ "last_release": "",
+ "lang": "Visual Basic .NET"
+ },
+ {
+ "link": "https://github.com/tianjifou/ios-security-attack-and-prevent",
+ "star": 74,
+ "commits": 18,
+ "modify_time": "2018-10-19 03:13:26",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/tandasat/winioctldecoder",
+ "star": 74,
+ "commits": 9,
+ "modify_time": "2015-06-02 03:43:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/surajr/url-classification",
+ "star": 74,
+ "commits": 6,
+ "modify_time": "2019-07-11 20:01:07",
+ "last_release": "",
+ "lang": "Jupyter Notebook"
+ },
+ {
+ "link": "https://github.com/spotify/gcp-firewall-enforcer",
+ "star": 74,
+ "commits": 1,
+ "modify_time": "2017-02-03 14:43:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/s9mf/s9mf-php-webshell-bypass",
+ "star": 74,
+ "commits": 103,
+ "modify_time": "2019-05-04 13:53:10",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/ropnop/xxetimes",
+ "star": 74,
+ "commits": 11,
+ "modify_time": "2017-05-31 23:28:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pielco11/dot",
+ "star": 74,
+ "commits": 34,
+ "modify_time": "2018-09-11 10:47:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/phayes/sidefuzz",
+ "star": 74,
+ "commits": 136,
+ "modify_time": "2019-10-31 08:39:22",
+ "last_release": "",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/patrowl/patrowlengines",
+ "star": 74,
+ "commits": 328,
+ "modify_time": "2019-12-06 11:25:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/panagiotisdrakatos/javaransomware",
+ "star": 74,
+ "commits": 16,
+ "modify_time": "2017-05-25 13:37:48",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/owasp/sonarqube",
+ "star": 74,
+ "commits": 80,
+ "modify_time": "2019-04-01 19:40:05",
+ "last_release": "",
+ "lang": "Dockerfile"
+ },
+ {
+ "link": "https://github.com/nyan-x-cat/lime-miner",
+ "star": 74,
+ "commits": 14,
+ "modify_time": "2019-01-26 13:52:36",
+ "last_release": "v0.3.2",
+ "lang": "Visual Basic .NET"
+ },
+ {
+ "link": "https://github.com/noddos/noddos",
+ "star": 74,
+ "commits": 220,
+ "modify_time": "2019-09-11 21:17:07",
+ "last_release": "v0.5.6",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/nmaier/about-addons-memory",
+ "star": 74,
+ "commits": 92,
+ "modify_time": "2016-08-12 08:46:34",
+ "last_release": "v8",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/mtjailed/unjailme",
+ "star": 74,
+ "commits": 50,
+ "modify_time": "2018-03-28 20:56:40",
+ "last_release": "0.2",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/mdavis332/domainpasswordspray",
+ "star": 74,
+ "commits": 65,
+ "modify_time": "2019-09-06 13:29:16",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/matir/pwnableweb",
+ "star": 74,
+ "commits": 30,
+ "modify_time": "2014-06-07 01:27:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/matiasinsaurralde/transports",
+ "star": 74,
+ "commits": 150,
+ "modify_time": "2017-03-29 13:22:13",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/makefu/dnsmap",
+ "star": 74,
+ "commits": 41,
+ "modify_time": "2017-09-11 16:11:47",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/l3m0n/xss-filter-evasion-cheat-sheet-cn",
+ "star": 74,
+ "commits": 18,
+ "modify_time": "2014-05-18 10:29:54",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/l3m0n/wooyun-wiki",
+ "star": 74,
+ "commits": 2,
+ "modify_time": "2016-10-19 16:00:07",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/kasperskylab/forensicstools",
+ "star": 74,
+ "commits": 3,
+ "modify_time": "2018-01-25 13:18:12",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/integrissecurity/carbonator",
+ "star": 74,
+ "commits": 24,
+ "modify_time": "2015-07-27 03:14:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/grapheneos/platform_manifest",
+ "star": 74,
+ "commits": 625,
+ "modify_time": "2019-11-14 10:18:03",
+ "last_release": "\n QQ1A.191205.011.2019.12.02.23\n ",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/gento/dionaea",
+ "star": 74,
+ "commits": 915,
+ "modify_time": "2017-07-02 03:35:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ganapati/crawlic",
+ "star": 74,
+ "commits": 51,
+ "modify_time": "2016-11-22 08:34:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gamebooster/dota2-lua-engine",
+ "star": 74,
+ "commits": 70,
+ "modify_time": "2014-02-07 11:31:09",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/foxglovesec/hpwn",
+ "star": 74,
+ "commits": 2,
+ "modify_time": "2017-11-20 18:15:05",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/forte-research/untracer-afl",
+ "star": 74,
+ "commits": 61,
+ "modify_time": "2019-01-23 16:47:12",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/florianutz/ubuntu1604-cis",
+ "star": 74,
+ "commits": 76,
+ "modify_time": "2019-05-15 15:41:47",
+ "last_release": "2.0.3",
+ "lang": "Makefile"
+ },
+ {
+ "link": "https://github.com/eyeofra/winconmon",
+ "star": 74,
+ "commits": 3,
+ "modify_time": "2017-09-13 04:45:27",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/einstein-/poodle",
+ "star": 74,
+ "commits": 8,
+ "modify_time": "2015-10-09 23:43:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/edu4rdshl/tor-router",
+ "star": 74,
+ "commits": 11,
+ "modify_time": "2019-09-29 19:59:08",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/dobin/ffw",
+ "star": 74,
+ "commits": 322,
+ "modify_time": "2018-10-22 12:09:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dns-oarc/drool",
+ "star": 74,
+ "commits": 157,
+ "modify_time": "2019-09-03 15:38:17",
+ "last_release": "v1.1.0",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/dmayer/time_trial",
+ "star": 74,
+ "commits": 15,
+ "modify_time": "2014-08-06 18:47:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dlion/guesstor",
+ "star": 74,
+ "commits": 7,
+ "modify_time": "2015-12-01 14:02:36",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/devunwired/apktools",
+ "star": 74,
+ "commits": 43,
+ "modify_time": "2019-09-27 21:41:55",
+ "last_release": "0.7.3",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/david942j/heapinfo",
+ "star": 74,
+ "commits": 219,
+ "modify_time": "2019-11-29 01:11:52",
+ "last_release": "v1.2.0",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/cve-search/via4cve",
+ "star": 74,
+ "commits": 65,
+ "modify_time": "2019-06-13 20:42:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/coreos/torcx",
+ "star": 74,
+ "commits": 263,
+ "modify_time": "2019-04-18 13:28:02",
+ "last_release": "v0.2.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/compoterhacker/mehrai",
+ "star": 74,
+ "commits": 12,
+ "modify_time": "2017-02-27 05:31:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/certificate-helper/tls-inspector",
+ "star": 74,
+ "commits": 389,
+ "modify_time": "2019-12-02 00:30:07",
+ "last_release": "1.9.6",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/busindre/dumpzilla",
+ "star": 74,
+ "commits": 41,
+ "modify_time": "2018-03-24 17:50:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bannsec/stegoveritas",
+ "star": 74,
+ "commits": 107,
+ "modify_time": "2019-05-13 19:51:10",
+ "last_release": "\n 1.2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/azeria-labs/arm-assembly-examples",
+ "star": 74,
+ "commits": 9,
+ "modify_time": "2017-07-19 09:51:44",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/anvilventures/lookinsidethebox",
+ "star": 74,
+ "commits": 51,
+ "modify_time": "2019-10-23 16:24:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/anquanquantao/pentraining",
+ "star": 74,
+ "commits": 2,
+ "modify_time": "2018-05-21 06:30:35",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/aghorler/windows-10-hardening",
+ "star": 74,
+ "commits": 50,
+ "modify_time": "2018-01-03 04:49:38",
+ "last_release": "",
+ "lang": "Batchfile"
+ },
+ {
+ "link": "https://github.com/233boy/chinaip",
+ "star": 74,
+ "commits": 4,
+ "modify_time": "2018-04-18 08:40:17",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/0xeb/ida-qscripts",
+ "star": 74,
+ "commits": 9,
+ "modify_time": "2019-08-12 21:18:05",
+ "last_release": "v1.0.2",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/0x9ef/golang-uacbypasser",
+ "star": 74,
+ "commits": 14,
+ "modify_time": "2019-04-25 15:07:12",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/nict-csl/exist",
+ "star": 73,
+ "commits": 180,
+ "modify_time": "2019-11-19 04:46:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/openscap/openscap-daemon",
+ "star": 73,
+ "commits": 616,
+ "modify_time": "2019-11-29 12:01:42",
+ "last_release": "0.1.10",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cloudsec/exploit",
+ "star": 73,
+ "commits": 1,
+ "modify_time": "2015-01-09 12:47:06",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/programa-stic/hexag00n",
+ "star": 73,
+ "commits": 4,
+ "modify_time": "2017-01-23 18:44:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/veil-framework/veil-catapult",
+ "star": 73,
+ "commits": 8,
+ "modify_time": "2016-05-24 19:58:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/yingtongdou/graph-adversarial-learning-literature",
+ "star": 73,
+ "commits": 36,
+ "modify_time": "2019-11-22 05:49:17",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/checkymander/Sharp-SMBExec",
+ "star": 73,
+ "commits": 11,
+ "modify_time": "2019-03-01 16:45:46",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/Acmesec/CTFCrackTools-V2",
+ "star": 73,
+ "commits": 17,
+ "modify_time": "2019-09-08 12:42:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ctfhacker/ctf-vagrant-64",
+ "star": 73,
+ "commits": 10,
+ "modify_time": "2015-11-24 15:07:30",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/zhanghangorg/sqlinj-ant",
+ "star": 73,
+ "commits": 10,
+ "modify_time": "2016-07-13 04:03:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xuechiyaobai/v8_november_2017",
+ "star": 73,
+ "commits": 3,
+ "modify_time": "2018-01-25 05:23:54",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/xrobots/robotx",
+ "star": 73,
+ "commits": 19,
+ "modify_time": "2018-06-16 19:41:18",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/xpn/ssh-inject",
+ "star": 73,
+ "commits": 2,
+ "modify_time": "2017-04-18 22:11:50",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/watersalesman/aura-botnet",
+ "star": 73,
+ "commits": 139,
+ "modify_time": "2019-05-30 03:18:08",
+ "last_release": "v0.2.0",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/tigaxmt/hackerone-lessons",
+ "star": 73,
+ "commits": 29,
+ "modify_time": "2019-06-08 13:58:15",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/te-papa/aws-key-disabler",
+ "star": 73,
+ "commits": 38,
+ "modify_time": "2018-03-14 20:55:45",
+ "last_release": "1.1.2",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/sumoprojects/sumoeasyminer",
+ "star": 73,
+ "commits": 10,
+ "modify_time": "2018-04-03 06:37:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/spiderlabs/burplay",
+ "star": 73,
+ "commits": 4,
+ "modify_time": "2017-09-19 07:31:30",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/siguza/aprr",
+ "star": 73,
+ "commits": 13,
+ "modify_time": "2019-08-08 23:52:13",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/sidyhe/dxx",
+ "star": 73,
+ "commits": 45,
+ "modify_time": "2019-11-17 16:09:03",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/shellvm/shellvm",
+ "star": 73,
+ "commits": 51,
+ "modify_time": "2019-09-22 11:47:10",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/securifera/servicefu",
+ "star": 73,
+ "commits": 20,
+ "modify_time": "2018-12-13 00:17:09",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/rub-syssec/grimoire",
+ "star": 73,
+ "commits": 5,
+ "modify_time": "2019-10-10 12:03:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rrbranco/blackhat2016",
+ "star": 73,
+ "commits": 3,
+ "modify_time": "2016-08-10 18:47:11",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/rrbranco/blackhat2012",
+ "star": 73,
+ "commits": 31,
+ "modify_time": "2014-12-12 06:40:37",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ralphwetzel/theonionbox",
+ "star": 73,
+ "commits": 250,
+ "modify_time": "2019-12-02 22:02:58",
+ "last_release": "v19.2",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/qianniaoge/f-scrack",
+ "star": 73,
+ "commits": 5,
+ "modify_time": "2018-05-11 14:32:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/puppet-meteor/mopt-afl",
+ "star": 73,
+ "commits": 30,
+ "modify_time": "2019-11-09 14:33:42",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/phith0n/b374k",
+ "star": 73,
+ "commits": 54,
+ "modify_time": "2016-04-20 09:24:03",
+ "last_release": "\n v4.0.0\n ",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/nmalcolm/ipcamshell",
+ "star": 73,
+ "commits": 14,
+ "modify_time": "2016-09-14 17:42:26",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/nihilus/ida_signsrch",
+ "star": 73,
+ "commits": 2,
+ "modify_time": "2015-07-14 20:32:21",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/msuhanov/yarp",
+ "star": 73,
+ "commits": 82,
+ "modify_time": "2019-02-13 17:43:54",
+ "last_release": "1.0.28",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mkottman/luacrypto",
+ "star": 73,
+ "commits": 79,
+ "modify_time": "2013-09-25 20:15:22",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/minisafe/microscan",
+ "star": 73,
+ "commits": null,
+ "modify_time": "None",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/milo2012/ipv4bypass",
+ "star": 73,
+ "commits": 19,
+ "modify_time": "2019-07-11 01:56:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/marekrei/theano-tutorial",
+ "star": 73,
+ "commits": 12,
+ "modify_time": "2016-02-11 21:26:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lcatro/hacker_document",
+ "star": 73,
+ "commits": 6,
+ "modify_time": "2016-10-28 03:02:43",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/koemeet/rtti-obfuscator",
+ "star": 73,
+ "commits": 15,
+ "modify_time": "2017-10-17 18:52:06",
+ "last_release": "0.4",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/johnmaguire/cardinal",
+ "star": 73,
+ "commits": 393,
+ "modify_time": "2016-02-14 13:37:15",
+ "last_release": "v2.3.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jmortega/python-pentesting",
+ "star": 73,
+ "commits": 18,
+ "modify_time": "2019-11-04 11:00:11",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/jiangsir404/pbscan",
+ "star": 73,
+ "commits": 8,
+ "modify_time": "2019-05-02 03:33:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/internetarchive/warctools",
+ "star": 73,
+ "commits": 258,
+ "modify_time": "2019-11-20 23:07:26",
+ "last_release": "\n 4.10.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/inquisb/unix-privesc-check",
+ "star": 73,
+ "commits": 347,
+ "modify_time": "2016-09-26 13:44:24",
+ "last_release": "\n r2_0\n ",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/grahamedgecombe/ct-submit",
+ "star": 73,
+ "commits": 10,
+ "modify_time": "2016-07-19 16:55:15",
+ "last_release": "\n v1.1.2\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/fbkcs/msf-elf-in-memory-execution",
+ "star": 73,
+ "commits": 3,
+ "modify_time": "2018-11-23 18:28:56",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/dyjakan/interpreter-bugs",
+ "star": 73,
+ "commits": 12,
+ "modify_time": "2018-04-26 19:07:37",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/doublelabyrinth/sdokeycrypt-sys-local-privilege-elevation",
+ "star": 73,
+ "commits": 5,
+ "modify_time": "2019-03-13 01:24:06",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/dionach/panhunt",
+ "star": 73,
+ "commits": 59,
+ "modify_time": "2018-11-08 13:34:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/denandz/lpc_sniffer_tpm",
+ "star": 73,
+ "commits": 4,
+ "modify_time": "2019-03-12 22:15:48",
+ "last_release": "",
+ "lang": "Verilog"
+ },
+ {
+ "link": "https://github.com/decoder-it/psportfwd",
+ "star": 73,
+ "commits": 7,
+ "modify_time": "2018-06-30 16:14:20",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/cyberheartmi9/payloadsallthethings",
+ "star": 73,
+ "commits": 95,
+ "modify_time": "2017-08-15 00:37:09",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/cooloppo/reclass",
+ "star": 73,
+ "commits": 27,
+ "modify_time": "2014-11-24 00:38:35",
+ "last_release": "v0.4.2+001",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cn33liz/vbsmeter",
+ "star": 73,
+ "commits": 6,
+ "modify_time": "2017-05-25 19:09:18",
+ "last_release": "",
+ "lang": "Visual Basic .NET"
+ },
+ {
+ "link": "https://github.com/carlosgprado/brundlefuzz",
+ "star": 73,
+ "commits": 5,
+ "modify_time": "2016-09-10 18:11:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bit4woo/u2c",
+ "star": 73,
+ "commits": 25,
+ "modify_time": "2018-11-09 09:59:41",
+ "last_release": "v0.8",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/b4rtik/hiddenpowershelldll",
+ "star": 73,
+ "commits": 14,
+ "modify_time": "2018-11-16 18:41:46",
+ "last_release": "",
+ "lang": "Batchfile"
+ },
+ {
+ "link": "https://github.com/audibleblink/letsproxy",
+ "star": 73,
+ "commits": 3,
+ "modify_time": "2019-05-25 04:19:22",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/andrewmichaelsmith/honeypot-setup-script",
+ "star": 73,
+ "commits": 103,
+ "modify_time": "2015-03-08 22:04:02",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/3gstudent/homework-of-c-language",
+ "star": 73,
+ "commits": 153,
+ "modify_time": "2019-11-26 00:39:12",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/zhengshoujian/darknet-yolo-segmentation",
+ "star": 72,
+ "commits": 503,
+ "modify_time": "2019-07-27 05:48:06",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/golismero/openvas_lib",
+ "star": 72,
+ "commits": 101,
+ "modify_time": "2019-12-03 12:19:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/shellphish/afl-other-arch",
+ "star": 72,
+ "commits": 14,
+ "modify_time": "2018-09-18 00:00:13",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/v2ray/discussion",
+ "star": 72,
+ "commits": 1,
+ "modify_time": "2018-08-02 10:12:12",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/wallix/triplestore",
+ "star": 72,
+ "commits": 90,
+ "modify_time": "2018-02-13 14:38:50",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/wyexe/LOL_China",
+ "star": 72,
+ "commits": 20,
+ "modify_time": "2017-11-06 10:41:04",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/TheHive-Project/CortexDocs",
+ "star": 72,
+ "commits": 273,
+ "modify_time": "2019-12-09 15:00:07",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/zntfdr/awesome-twitter-bots",
+ "star": 72,
+ "commits": 16,
+ "modify_time": "2017-12-30 16:41:05",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/zcgonvh/ms16-032",
+ "star": 72,
+ "commits": 1,
+ "modify_time": "2017-03-15 17:14:36",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/xsec-lab/x-waf-admin",
+ "star": 72,
+ "commits": 14,
+ "modify_time": "2017-03-22 09:20:06",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/xlinshan/coldroot",
+ "star": 72,
+ "commits": 9,
+ "modify_time": "2016-03-30 02:24:30",
+ "last_release": "",
+ "lang": "Pascal"
+ },
+ {
+ "link": "https://github.com/xfreed0m/smtptester",
+ "star": 72,
+ "commits": 15,
+ "modify_time": "2019-12-05 13:33:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vusec/guardion",
+ "star": 72,
+ "commits": 4,
+ "modify_time": "2018-04-23 12:15:14",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/vrtadmin/first",
+ "star": 72,
+ "commits": 3,
+ "modify_time": "2016-11-22 14:20:32",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/vecna/sniffjoke",
+ "star": 72,
+ "commits": 772,
+ "modify_time": "2017-08-25 10:38:28",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/vanhauser-thc/afl-patches",
+ "star": 72,
+ "commits": 46,
+ "modify_time": "2019-09-10 18:56:21",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/timsneath/github-tracker",
+ "star": 72,
+ "commits": 46,
+ "modify_time": "2019-11-15 04:51:39",
+ "last_release": "",
+ "lang": "Dart"
+ },
+ {
+ "link": "https://github.com/tillmannw/honeytrap",
+ "star": 72,
+ "commits": 177,
+ "modify_time": "2017-05-24 09:22:16",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/tanjiti/fingerprint",
+ "star": 72,
+ "commits": 9,
+ "modify_time": "2016-11-15 06:47:41",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/sunweiliang/baiduyuncrack",
+ "star": 72,
+ "commits": 12,
+ "modify_time": "2018-03-29 09:09:57",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/spring-cloud/spring-cloud-stream-starters",
+ "star": 72,
+ "commits": 203,
+ "modify_time": "2019-11-22 14:51:30",
+ "last_release": "\n vHorsham.RELEASE\n ",
+ "lang": "XSLT"
+ },
+ {
+ "link": "https://github.com/skelsec/cve-2017-12542",
+ "star": 72,
+ "commits": 8,
+ "modify_time": "2018-04-15 12:01:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/securityautomation/dumpthegit",
+ "star": 72,
+ "commits": 7,
+ "modify_time": "2019-06-03 08:32:23",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/scumsec/recon-ng-modules",
+ "star": 72,
+ "commits": 8,
+ "modify_time": "2016-10-21 20:07:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/roothaxor/ransom",
+ "star": 72,
+ "commits": 26,
+ "modify_time": "2017-06-10 14:26:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rameshaditya/ducky",
+ "star": 72,
+ "commits": 63,
+ "modify_time": "2018-07-14 16:03:08",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/pyobfx/pyobfx",
+ "star": 72,
+ "commits": 192,
+ "modify_time": "2019-06-27 18:26:05",
+ "last_release": "v0.3-beta",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/purplei2p/i2pdbrowser",
+ "star": 72,
+ "commits": 103,
+ "modify_time": "2019-10-27 16:40:53",
+ "last_release": "1.2.8",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/powerdns/weakforced",
+ "star": 72,
+ "commits": 1196,
+ "modify_time": "2019-11-25 14:32:30",
+ "last_release": "v2.2.1",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/piccimario/iphone-backup-analyzer-2",
+ "star": 72,
+ "commits": 95,
+ "modify_time": "2014-05-05 08:18:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/niklasb/bspfuzz",
+ "star": 72,
+ "commits": 15,
+ "modify_time": "2019-04-01 09:03:54",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/mubix/ditto",
+ "star": 72,
+ "commits": 9,
+ "modify_time": "2015-08-30 21:59:48",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/mattifestation/powerworm",
+ "star": 72,
+ "commits": 1,
+ "modify_time": "2014-04-05 15:46:12",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/malwaretech/zombifyprocess",
+ "star": 72,
+ "commits": 2,
+ "modify_time": "2014-12-09 15:04:22",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/machn1k/scalpel-2.0",
+ "star": 72,
+ "commits": 1,
+ "modify_time": "2013-03-25 01:36:50",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/louisvillemetro/wazeccpprocessor",
+ "star": 72,
+ "commits": 177,
+ "modify_time": "2019-05-01 18:48:11",
+ "last_release": "v3.0",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/lorexxar/bscanner",
+ "star": 72,
+ "commits": 46,
+ "modify_time": "2016-08-20 07:24:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lixmk/concierge",
+ "star": 72,
+ "commits": 71,
+ "modify_time": "2018-06-26 20:22:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ksoona/attackvector",
+ "star": 72,
+ "commits": 94,
+ "modify_time": "2014-12-29 01:51:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jtripper/sslnuke",
+ "star": 72,
+ "commits": 5,
+ "modify_time": "2013-09-10 21:04:24",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/joridos/custom-ssh-backdoor",
+ "star": 72,
+ "commits": 2,
+ "modify_time": "2014-12-08 04:46:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jawz101/mobileadtrackers",
+ "star": 72,
+ "commits": 377,
+ "modify_time": "2019-12-08 00:13:03",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/jaredhaight/invoke-metasploitpayload",
+ "star": 72,
+ "commits": 16,
+ "modify_time": "2016-06-22 13:39:35",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/hosom/file-extraction",
+ "star": 72,
+ "commits": 35,
+ "modify_time": "2019-11-25 14:06:18",
+ "last_release": "",
+ "lang": "Zeek"
+ },
+ {
+ "link": "https://github.com/hexhive/hextype",
+ "star": 72,
+ "commits": 12,
+ "modify_time": "2018-03-26 17:59:31",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/hak5darren/bashbunny-payloads",
+ "star": 72,
+ "commits": 72,
+ "modify_time": "2017-03-28 13:10:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/feliam/cve-2014-4377",
+ "star": 72,
+ "commits": 7,
+ "modify_time": "2014-10-15 16:10:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ez-flash/omega-kernel",
+ "star": 72,
+ "commits": 8,
+ "modify_time": "2019-04-16 03:16:39",
+ "last_release": "\n k1.06_fw7\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/exp0se/harbinger",
+ "star": 72,
+ "commits": 7,
+ "modify_time": "2015-12-08 14:45:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/embedi/meloader",
+ "star": 72,
+ "commits": 3,
+ "modify_time": "2017-07-27 20:56:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/denglend/decode345",
+ "star": 72,
+ "commits": 24,
+ "modify_time": "2017-12-04 02:43:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/david415/ansible-tor",
+ "star": 72,
+ "commits": 58,
+ "modify_time": "2015-08-23 11:56:05",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/cveproject/automation-working-group",
+ "star": 72,
+ "commits": 111,
+ "modify_time": "2019-09-11 17:46:28",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/chinatiny/inlinehooklib",
+ "star": 72,
+ "commits": 7,
+ "modify_time": "2018-10-16 09:57:16",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cert-polska/n6",
+ "star": 72,
+ "commits": 35,
+ "modify_time": "2019-12-02 19:53:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/c4bbage/pentestscripts",
+ "star": 72,
+ "commits": 47,
+ "modify_time": "2018-10-01 07:40:18",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/busescanfly/rpi-hunter",
+ "star": 72,
+ "commits": 44,
+ "modify_time": "2019-04-22 18:37:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/binsigma/binsourcerer",
+ "star": 72,
+ "commits": 5,
+ "modify_time": "2015-02-04 16:50:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/antojoseph/droid-ff",
+ "star": 72,
+ "commits": 15,
+ "modify_time": "2016-10-11 10:13:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/angr/simuvex",
+ "star": 72,
+ "commits": 3385,
+ "modify_time": "2017-09-09 01:36:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/80vul/pasc2at",
+ "star": 72,
+ "commits": 40,
+ "modify_time": "2015-03-21 05:31:54",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/0xrawsec/golang-evtx",
+ "star": 72,
+ "commits": 43,
+ "modify_time": "2019-09-26 21:37:37",
+ "last_release": "v1.2.3",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/jiansiting/wpa2-krack",
+ "star": 71,
+ "commits": 2,
+ "modify_time": "2017-10-18 08:39:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/etsy/chef-whitelist",
+ "star": 71,
+ "commits": 9,
+ "modify_time": "2015-10-14 14:53:42",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/utkusen/rhodiola",
+ "star": 71,
+ "commits": 3,
+ "modify_time": "2019-08-11 01:01:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nahamsec/crtndstry",
+ "star": 71,
+ "commits": 28,
+ "modify_time": "2019-11-30 09:13:29",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/k8gege/scrun",
+ "star": 71,
+ "commits": 5,
+ "modify_time": "2019-07-27 07:10:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jeefo/yapb",
+ "star": 71,
+ "commits": 426,
+ "modify_time": "2019-12-01 20:42:31",
+ "last_release": "2.9",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/davidxanatos/taskexplorer",
+ "star": 71,
+ "commits": 32,
+ "modify_time": "2019-11-15 06:41:50",
+ "last_release": "v1.0.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/RManOfCN/ML_Malware_detect",
+ "star": 71,
+ "commits": 8,
+ "modify_time": "2019-05-03 10:57:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mozilla/overscripted",
+ "star": 71,
+ "commits": 59,
+ "modify_time": "2019-10-31 23:31:17",
+ "last_release": "",
+ "lang": "Jupyter Notebook"
+ },
+ {
+ "link": "https://github.com/JakobRPennington/information-security",
+ "star": 71,
+ "commits": 39,
+ "modify_time": "2019-06-20 09:18:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hc0d3r/alfheim",
+ "star": 71,
+ "commits": 65,
+ "modify_time": "2019-05-24 21:05:49",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/mushorg/buttinsky",
+ "star": 71,
+ "commits": 138,
+ "modify_time": "2013-06-04 15:32:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/yrp604/atc-sources",
+ "star": 71,
+ "commits": 1,
+ "modify_time": "2017-12-13 06:43:58",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/xyntax/baiduyun-brute",
+ "star": 71,
+ "commits": 6,
+ "modify_time": "2016-07-12 09:47:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/x64dbg/mona",
+ "star": 71,
+ "commits": 146,
+ "modify_time": "2017-12-01 15:00:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/waleedassar/antidebug",
+ "star": 71,
+ "commits": 5,
+ "modify_time": "2015-12-19 02:02:44",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/vlucas/pikirasa",
+ "star": 71,
+ "commits": 22,
+ "modify_time": "2019-06-14 01:10:09",
+ "last_release": "\n v1.0.4\n ",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/thelinuxchoice/keydroid",
+ "star": 71,
+ "commits": 10,
+ "modify_time": "2018-08-22 02:58:09",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/tengzhangchao/microsoftspider",
+ "star": 71,
+ "commits": 12,
+ "modify_time": "2017-05-27 09:10:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/utkusen/rhodiola",
+ "star": 71,
+ "commits": 3,
+ "modify_time": "2019-08-11 01:01:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tandasat/eopmon",
+ "star": 71,
+ "commits": 18,
+ "modify_time": "2017-03-05 12:19:00",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/soinull/assimilate",
+ "star": 71,
+ "commits": 20,
+ "modify_time": "2017-10-15 22:29:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/skelsec/msldap",
+ "star": 71,
+ "commits": 59,
+ "modify_time": "2019-11-23 12:43:02",
+ "last_release": "0.0.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sisoc-tokyo/real-timedetectionad_ver2",
+ "star": 71,
+ "commits": 68,
+ "modify_time": "2019-09-29 12:38:21",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/shift-crops/escapeme",
+ "star": 71,
+ "commits": 97,
+ "modify_time": "2018-09-03 01:36:15",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/rodneyviana/netext",
+ "star": 71,
+ "commits": 107,
+ "modify_time": "2019-12-05 22:14:42",
+ "last_release": "2.1.53.5000",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/redsift/ingraind",
+ "star": 71,
+ "commits": 341,
+ "modify_time": "2019-11-25 16:11:19",
+ "last_release": "",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/rcvalle/vmmfuzzer",
+ "star": 71,
+ "commits": 1,
+ "modify_time": "2016-08-02 04:31:35",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/razzile/liberation",
+ "star": 71,
+ "commits": 38,
+ "modify_time": "2016-08-30 21:05:18",
+ "last_release": "0.9.1",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ppabc/cc_iptables",
+ "star": 71,
+ "commits": 7,
+ "modify_time": "2016-09-01 03:14:42",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/opsxcq/exploit-cve-2014-6271",
+ "star": 71,
+ "commits": 26,
+ "modify_time": "2017-09-10 00:22:54",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/opsxcq/docker-vulnerable-dvwa",
+ "star": 71,
+ "commits": 40,
+ "modify_time": "2018-10-12 17:44:03",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/onplus/shadowsocks-websocket-python",
+ "star": 71,
+ "commits": 29,
+ "modify_time": "2017-11-29 08:24:26",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/nccgroup/ble-replay",
+ "star": 71,
+ "commits": 6,
+ "modify_time": "2016-08-25 00:09:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/n4xh4ck5/rastleak",
+ "star": 71,
+ "commits": 52,
+ "modify_time": "2018-05-09 19:13:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mrnasro/zynos-attacker",
+ "star": 71,
+ "commits": 4,
+ "modify_time": "2014-03-12 04:46:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/moyix/panda",
+ "star": 71,
+ "commits": 1719,
+ "modify_time": "2016-12-17 23:57:18",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/monnappa22/hollowfind",
+ "star": 71,
+ "commits": 2,
+ "modify_time": "2016-09-24 14:14:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mko-x/docker-clamav",
+ "star": 71,
+ "commits": 62,
+ "modify_time": "2019-11-22 17:41:50",
+ "last_release": "stretch-slim",
+ "lang": "Dockerfile"
+ },
+ {
+ "link": "https://github.com/mgeeky/exploit-development-tools",
+ "star": 71,
+ "commits": 14,
+ "modify_time": "2017-10-03 12:40:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mak/ekdeco",
+ "star": 71,
+ "commits": 35,
+ "modify_time": "2017-02-02 00:52:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/macmade/unicorn-bios",
+ "star": 71,
+ "commits": 145,
+ "modify_time": "2019-08-29 19:55:44",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/m4ll0k/aron",
+ "star": 71,
+ "commits": 16,
+ "modify_time": "2018-08-04 17:09:54",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/letsencrypt/ct-woodpecker",
+ "star": 71,
+ "commits": 82,
+ "modify_time": "2019-12-06 21:20:37",
+ "last_release": "\n v2.0.0\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/krmaxwell/dns-exfiltration",
+ "star": 71,
+ "commits": 3,
+ "modify_time": "2013-08-29 03:27:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kingzd/wxdemo",
+ "star": 71,
+ "commits": 23,
+ "modify_time": "2018-06-13 07:35:41",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/khr0x40sh/whitelistevasion",
+ "star": 71,
+ "commits": 9,
+ "modify_time": "2015-05-27 23:10:35",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/kholia/rc4-40-brute-office",
+ "star": 71,
+ "commits": 2,
+ "modify_time": "2012-12-09 07:15:04",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/joesmithjaffa/jenkins-shell",
+ "star": 71,
+ "commits": 2,
+ "modify_time": "2018-03-24 19:40:11",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/internetwache/internetwache-ctf-2016",
+ "star": 71,
+ "commits": 9,
+ "modify_time": "2016-03-04 12:52:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/icewall/bindifffilter",
+ "star": 71,
+ "commits": 6,
+ "modify_time": "2016-03-25 13:36:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/iamrootsh3ll/anchorwatch",
+ "star": 71,
+ "commits": 16,
+ "modify_time": "2019-03-14 20:48:58",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/hellais/buckle-up",
+ "star": 71,
+ "commits": 30,
+ "modify_time": "2012-02-05 10:38:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/geekchannel/webmap",
+ "star": 71,
+ "commits": 2,
+ "modify_time": "2013-05-20 07:02:51",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/enigma0x3/powershell-payload-excel-delivery",
+ "star": 71,
+ "commits": 37,
+ "modify_time": "2014-02-18 16:23:13",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/endgameinc/maxwell",
+ "star": 71,
+ "commits": 2,
+ "modify_time": "2017-01-24 14:55:39",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/danmcinerney/autorelay",
+ "star": 71,
+ "commits": 24,
+ "modify_time": "2016-05-13 16:06:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/d4vinci/pyloggy",
+ "star": 71,
+ "commits": 6,
+ "modify_time": "2017-06-17 23:10:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cseagle/collabreate",
+ "star": 71,
+ "commits": 73,
+ "modify_time": "2019-11-04 16:28:07",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/citybasebrooks/siac",
+ "star": 71,
+ "commits": 16,
+ "modify_time": "2018-10-31 01:21:12",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/chrispcampbell/qrocodile",
+ "star": 71,
+ "commits": 21,
+ "modify_time": "2018-02-15 00:08:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/brandis-project/brandis",
+ "star": 71,
+ "commits": 18,
+ "modify_time": "2017-07-22 07:09:28",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/bmaia/cross-utils",
+ "star": 71,
+ "commits": 20,
+ "modify_time": "2017-06-04 20:52:40",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/blitzcode/ghc-stack",
+ "star": 71,
+ "commits": 2,
+ "modify_time": "2014-01-21 15:20:19",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/azmatt/windowsenum",
+ "star": 71,
+ "commits": 3,
+ "modify_time": "2016-09-25 17:49:35",
+ "last_release": "",
+ "lang": "Batchfile"
+ },
+ {
+ "link": "https://github.com/attekett/surku",
+ "star": 71,
+ "commits": 32,
+ "modify_time": "2017-01-19 08:53:29",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/alexwebr/salsa20",
+ "star": 71,
+ "commits": 25,
+ "modify_time": "2016-07-29 03:33:12",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/7h3ram/flowinspect",
+ "star": 71,
+ "commits": 97,
+ "modify_time": "2017-10-13 03:28:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/3gstudent/inject-dll-by-apc",
+ "star": 71,
+ "commits": 24,
+ "modify_time": "2018-07-19 01:41:31",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/0ffffffffh/api-break-for-x64dbg",
+ "star": 71,
+ "commits": 36,
+ "modify_time": "2018-01-17 13:47:31",
+ "last_release": "BETA",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cn33liz/smashedpotato",
+ "star": 70,
+ "commits": 7,
+ "modify_time": "2016-01-29 14:31:18",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/ehco1996/aioshadowsocks",
+ "star": 70,
+ "commits": 203,
+ "modify_time": "2019-12-01 03:09:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mmcloughlin/cryptofuzz",
+ "star": 70,
+ "commits": 117,
+ "modify_time": "2019-04-03 18:00:59",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/s0md3v/predator",
+ "star": 70,
+ "commits": 10,
+ "modify_time": "2019-11-15 16:47:16",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/zbetcheckin/ipv6",
+ "star": 70,
+ "commits": 11,
+ "modify_time": "2017-05-04 09:00:45",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/Q2h1Cg/xss_scan",
+ "star": 70,
+ "commits": 3,
+ "modify_time": "2013-08-10 04:24:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sclorg/s2i-php-container",
+ "star": 70,
+ "commits": 291,
+ "modify_time": "2019-12-03 09:38:44",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/zxsecurity/gpsnitch",
+ "star": 70,
+ "commits": 5,
+ "modify_time": "2017-03-26 22:32:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ziirish/burp-ui",
+ "star": 70,
+ "commits": 2216,
+ "modify_time": "2019-11-09 22:13:22",
+ "last_release": "\n 0.6.6\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zer1t0/ticket_converter",
+ "star": 70,
+ "commits": 4,
+ "modify_time": "2019-05-14 07:43:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ysrc/obfusesmalitext",
+ "star": 70,
+ "commits": 1,
+ "modify_time": "2017-07-20 09:55:34",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/x4nth055/pythoncode-tutorials",
+ "star": 70,
+ "commits": 86,
+ "modify_time": "2019-12-10 09:31:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wufengxue/android-reverse",
+ "star": 70,
+ "commits": 37,
+ "modify_time": "2019-04-12 08:29:37",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/wbierbower/awesome-physics",
+ "star": 70,
+ "commits": 25,
+ "modify_time": "2019-07-17 14:29:08",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/war-and-code/jawfish",
+ "star": 70,
+ "commits": 65,
+ "modify_time": "2019-08-16 17:38:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/viperbluff/portwitness",
+ "star": 70,
+ "commits": 39,
+ "modify_time": "2019-01-21 00:32:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/veeti/disableflagsecure",
+ "star": 70,
+ "commits": 7,
+ "modify_time": "2014-09-28 23:51:53",
+ "last_release": "1.2",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/urld/passmgr",
+ "star": 70,
+ "commits": 44,
+ "modify_time": "2018-10-02 16:03:38",
+ "last_release": "v1.0.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/trailofbits/llvm-sanitizer-tutorial",
+ "star": 70,
+ "commits": 54,
+ "modify_time": "2019-10-24 17:22:05",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/timbo05sec/autocrack",
+ "star": 70,
+ "commits": 15,
+ "modify_time": "2018-04-16 21:55:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/thelinuxchoice/getwin",
+ "star": 70,
+ "commits": 14,
+ "modify_time": "2018-12-06 20:13:07",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/samratashok/race",
+ "star": 70,
+ "commits": 8,
+ "modify_time": "2019-09-03 13:36:21",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/saelo/jscpwn",
+ "star": 70,
+ "commits": 1,
+ "modify_time": "2016-10-27 20:22:37",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/rassec/rasscan",
+ "star": 70,
+ "commits": 4,
+ "modify_time": "2018-07-11 06:29:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rancher/runc-cve",
+ "star": 70,
+ "commits": 8,
+ "modify_time": "2019-02-15 19:02:24",
+ "last_release": "CVE-2019-5736-build3",
+ "lang": "Dockerfile"
+ },
+ {
+ "link": "https://github.com/quantumliu/antibtchack",
+ "star": 70,
+ "commits": 12,
+ "modify_time": "2017-05-13 07:00:05",
+ "last_release": "0.3.0beta",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/qburst/penq",
+ "star": 70,
+ "commits": 7,
+ "modify_time": "2013-05-30 05:29:33",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/qazbnm456/vwgen",
+ "star": 70,
+ "commits": 71,
+ "modify_time": "2017-12-10 05:23:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ptrrkssn/pnscan",
+ "star": 70,
+ "commits": 6,
+ "modify_time": "2019-11-21 21:57:19",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/programa-stic/marvin-django",
+ "star": 70,
+ "commits": 9,
+ "modify_time": "2016-03-08 19:27:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nray-scanner/nray",
+ "star": 70,
+ "commits": 18,
+ "modify_time": "2019-08-21 21:22:08",
+ "last_release": "v1.0.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/novoda/dojos",
+ "star": 70,
+ "commits": 768,
+ "modify_time": "2019-04-10 19:55:32",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/nmulasmajic/cve-2018-8897",
+ "star": 70,
+ "commits": 1,
+ "modify_time": "2018-05-10 20:47:27",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/nmalcolm/inventus",
+ "star": 70,
+ "commits": 15,
+ "modify_time": "2017-08-28 11:48:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/network-automation/ansible-napalm-samples",
+ "star": 70,
+ "commits": 25,
+ "modify_time": "2018-06-27 18:00:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nccgroup/windowsdaclenumproject",
+ "star": 70,
+ "commits": 52,
+ "modify_time": "2015-07-11 13:24:49",
+ "last_release": "1.11",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/minervalabsresearch/mystique",
+ "star": 70,
+ "commits": 14,
+ "modify_time": "2017-09-26 06:51:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/meejah/carml",
+ "star": 70,
+ "commits": 242,
+ "modify_time": "2019-10-23 05:25:00",
+ "last_release": "\n v19.1.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/malwarereversebrasil/maltran",
+ "star": 70,
+ "commits": null,
+ "modify_time": "2018-05-21 01:43:19",
+ "last_release": "",
+ "lang": "python"
+ },
+ {
+ "link": "https://github.com/maliceio/malice-av",
+ "star": 70,
+ "commits": 171,
+ "modify_time": "2018-11-26 01:39:27",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/m507/awae-preparation",
+ "star": 70,
+ "commits": 19,
+ "modify_time": "2019-09-02 00:51:30",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/lfzark/cookie-injecting-tools",
+ "star": 70,
+ "commits": 4,
+ "modify_time": "2014-07-31 14:30:30",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/laginimaineb/cve-2014-7920-7921",
+ "star": 70,
+ "commits": 4,
+ "modify_time": "2016-01-24 22:20:24",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/l4ys/ctf",
+ "star": 70,
+ "commits": 36,
+ "modify_time": "2019-05-13 05:46:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kevsersrca/2016lykagguvenligivesizmatestleri",
+ "star": 70,
+ "commits": 220,
+ "modify_time": "2017-02-21 08:15:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jpcertcc/malconfscan-with-cuckoo",
+ "star": 70,
+ "commits": 5,
+ "modify_time": "2019-12-05 06:28:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jovanbulck/nemesis",
+ "star": 70,
+ "commits": 27,
+ "modify_time": "2019-11-28 16:31:10",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/itsmehacker/ducky-exploit",
+ "star": 70,
+ "commits": 8,
+ "modify_time": "2019-04-29 11:45:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/irsdl/burpsuitejsbeautifier",
+ "star": 70,
+ "commits": 14,
+ "modify_time": "2014-05-20 18:35:43",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/intel/resilient-ml-research-platform",
+ "star": 70,
+ "commits": 68,
+ "modify_time": "2019-03-28 13:34:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ikkisoft/bradamsa",
+ "star": 70,
+ "commits": 6,
+ "modify_time": "2017-09-07 13:30:42",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/i2p/i2p.android.base",
+ "star": 70,
+ "commits": 7557,
+ "modify_time": "2019-12-03 15:42:13",
+ "last_release": "\n android-0.9.44\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/himadriganguly/sqlilabs",
+ "star": 70,
+ "commits": 11,
+ "modify_time": "2016-07-27 09:44:12",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/heidsoft/devops",
+ "star": 70,
+ "commits": 152,
+ "modify_time": "2019-01-22 13:44:28",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/greenbone/gvm-tools",
+ "star": 70,
+ "commits": 1037,
+ "modify_time": "2019-12-06 11:07:34",
+ "last_release": "v2.0.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/getdrive/lazy-rdp",
+ "star": 70,
+ "commits": 242,
+ "modify_time": "2019-10-24 06:24:32",
+ "last_release": "v.1.29",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/flxwu/spectre-attack-demo",
+ "star": 70,
+ "commits": 7,
+ "modify_time": "2018-01-25 21:27:13",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/fireeye/tools",
+ "star": 70,
+ "commits": 6,
+ "modify_time": "2014-12-11 21:30:03",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/esapi/owasp-esapi-js",
+ "star": 70,
+ "commits": 32,
+ "modify_time": "2015-06-08 16:21:20",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/diekmann/iptables_semantics",
+ "star": 70,
+ "commits": 2590,
+ "modify_time": "2018-05-26 14:47:57",
+ "last_release": "stable_jun_2017",
+ "lang": "Isabelle"
+ },
+ {
+ "link": "https://github.com/devopshq/artifactory",
+ "star": 70,
+ "commits": 346,
+ "modify_time": "2019-12-05 08:02:06",
+ "last_release": "v0.6",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/darkoperator/posh-virustotal",
+ "star": 70,
+ "commits": 28,
+ "modify_time": "2016-08-11 00:51:51",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/crackinglandia/pype32",
+ "star": 70,
+ "commits": 48,
+ "modify_time": "2015-10-27 00:04:57",
+ "last_release": "v0.1-alpha5",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/cooolis/cooolis.github.io",
+ "star": 70,
+ "commits": 5,
+ "modify_time": "2018-12-05 02:19:56",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/coldfusion39/domi-owned",
+ "star": 70,
+ "commits": 41,
+ "modify_time": "2017-04-03 22:53:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/chrisyer/lightsocks-nodejs",
+ "star": 70,
+ "commits": 26,
+ "modify_time": "2018-05-22 02:50:11",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/c0d3p1ut0s/java-security-manager-bypass",
+ "star": 70,
+ "commits": 4,
+ "modify_time": "2019-06-24 05:09:10",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/azuregreen/arkprotect",
+ "star": 70,
+ "commits": 28,
+ "modify_time": "2017-07-11 15:12:27",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/antelox/fopo-php-deobfuscator",
+ "star": 70,
+ "commits": 31,
+ "modify_time": "2017-05-04 15:20:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/anssi-fr/oradad",
+ "star": 70,
+ "commits": 13,
+ "modify_time": "2019-11-25 15:43:22",
+ "last_release": "2.6.130",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/androidtamer/androidtamer",
+ "star": 70,
+ "commits": 5,
+ "modify_time": "2017-10-25 06:32:00",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/alexdetrano/4can",
+ "star": 70,
+ "commits": 6,
+ "modify_time": "2019-11-27 03:14:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/alex9191/kernel-dll-injector",
+ "star": 70,
+ "commits": 3,
+ "modify_time": "2018-09-09 15:09:29",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hackatnow/certstreamcatcher",
+ "star": 70,
+ "commits": 29,
+ "modify_time": "2018-11-30 00:00:56",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/1ricardotavares/offensive-powershell",
+ "star": 70,
+ "commits": 26,
+ "modify_time": "2017-02-19 20:38:42",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/0xdevalias/sparty",
+ "star": 70,
+ "commits": 7,
+ "modify_time": "2013-11-12 08:04:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/0xcoto/evilusb",
+ "star": 70,
+ "commits": 15,
+ "modify_time": "2019-11-27 19:53:27",
+ "last_release": "",
+ "lang": "Batchfile"
+ },
+ {
+ "link": "https://github.com/jiang-xuan/deepinss",
+ "star": 69,
+ "commits": 209,
+ "modify_time": "2019-06-24 04:05:40",
+ "last_release": "v0.1.2",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/mitmproxy/netlib",
+ "star": 69,
+ "commits": 656,
+ "modify_time": "2016-02-18 23:02:08",
+ "last_release": "\n v0.16\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nccgroup/datajackproxy",
+ "star": 69,
+ "commits": 42,
+ "modify_time": "2019-07-21 01:51:53",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/0xd4d/dnspy-unity-mono",
+ "star": 69,
+ "commits": 480,
+ "modify_time": "2019-08-03 11:07:24",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/localtunnel/nginx",
+ "star": 69,
+ "commits": 5,
+ "modify_time": "2016-07-10 00:19:30",
+ "last_release": "",
+ "lang": "Nginx"
+ },
+ {
+ "link": "https://github.com/splewis/get5-web",
+ "star": 69,
+ "commits": 179,
+ "modify_time": "2019-11-24 18:42:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/opentoallctf/tips",
+ "star": 69,
+ "commits": 34,
+ "modify_time": "2019-10-05 20:41:50",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/substack/wit",
+ "star": 69,
+ "commits": 54,
+ "modify_time": "2015-01-05 07:18:55",
+ "last_release": "\n 1.3.4\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/FSecureLABS/SharpClipHistory",
+ "star": 69,
+ "commits": 8,
+ "modify_time": "2019-04-26 10:16:19",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/BBVA/patton",
+ "star": 69,
+ "commits": 172,
+ "modify_time": "2019-12-02 14:14:24",
+ "last_release": "\n v0.0.4\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zsxsoft/regeorg",
+ "star": 69,
+ "commits": 34,
+ "modify_time": "2018-11-18 14:07:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zodiacon/poolmonx",
+ "star": 69,
+ "commits": 9,
+ "modify_time": "2018-05-19 18:11:32",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/zldww2011/cve-2018-0802_poc",
+ "star": 69,
+ "commits": 3,
+ "modify_time": "2018-01-11 09:23:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zaproxy/zap-api-python",
+ "star": 69,
+ "commits": 89,
+ "modify_time": "2019-08-12 07:55:29",
+ "last_release": "0.0.15",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ying32/rproxy",
+ "star": 69,
+ "commits": 94,
+ "modify_time": "2019-05-12 03:55:25",
+ "last_release": "v0.6",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/xillwillx/tricky.lnk",
+ "star": 69,
+ "commits": 14,
+ "modify_time": "2017-05-25 14:27:50",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/x56/airpyrt-tools",
+ "star": 69,
+ "commits": 1,
+ "modify_time": "2016-03-19 19:40:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/v-p-b/pecloakcapstone",
+ "star": 69,
+ "commits": 7,
+ "modify_time": "2015-08-19 15:02:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/thombashi/allpairspy",
+ "star": 69,
+ "commits": 143,
+ "modify_time": "2019-05-11 08:49:50",
+ "last_release": "v2.5.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/thomasthelen/antidebugging",
+ "star": 69,
+ "commits": 26,
+ "modify_time": "2019-06-13 20:44:18",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/stixproject/openioc-to-stix",
+ "star": 69,
+ "commits": 121,
+ "modify_time": "2018-10-18 12:27:36",
+ "last_release": "v1.4.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/spiderlabs/cve_server",
+ "star": 69,
+ "commits": 184,
+ "modify_time": "2019-11-11 17:52:17",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/snubbegbg/install_raspi-config",
+ "star": 69,
+ "commits": 12,
+ "modify_time": "2017-06-29 22:16:50",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/skylined/bugs",
+ "star": 69,
+ "commits": 94,
+ "modify_time": "2016-11-10 14:43:12",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/shay-gueron/aes-gcm-siv",
+ "star": 69,
+ "commits": 31,
+ "modify_time": "2018-01-27 19:39:28",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/sensepost/autoresponder",
+ "star": 69,
+ "commits": 1,
+ "modify_time": "2015-12-11 13:28:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/s0lst1c3/sentrygun",
+ "star": 69,
+ "commits": 36,
+ "modify_time": "2017-11-30 06:56:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ryanohoro/csbruter",
+ "star": 69,
+ "commits": 4,
+ "modify_time": "2018-01-30 18:57:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/romanking98/house-of-roman",
+ "star": 69,
+ "commits": 27,
+ "modify_time": "2018-12-11 15:17:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/r0oth3x49/xpath",
+ "star": 69,
+ "commits": 74,
+ "modify_time": "2018-04-21 10:53:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pure-l0g1c/instaburst",
+ "star": 69,
+ "commits": null,
+ "modify_time": "2019-01-12 04:32:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/planet-work/php-malware-scanner",
+ "star": 69,
+ "commits": 36,
+ "modify_time": "2017-09-01 13:37:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/payatu/emffuzzer",
+ "star": 69,
+ "commits": 3,
+ "modify_time": "2016-12-28 12:04:56",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/patois/mrspicky",
+ "star": 69,
+ "commits": 9,
+ "modify_time": "2019-11-27 16:11:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/orjail/orjail",
+ "star": 69,
+ "commits": 192,
+ "modify_time": "2019-11-28 14:59:10",
+ "last_release": "\n 1.1-1\n ",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/oleavr/ospy",
+ "star": 69,
+ "commits": 569,
+ "modify_time": "2009-11-06 14:12:56",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/odensc/janus",
+ "star": 69,
+ "commits": 2,
+ "modify_time": "2017-12-10 11:18:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nwhacks-loki/loki",
+ "star": 69,
+ "commits": 115,
+ "modify_time": "2018-01-26 06:11:29",
+ "last_release": "",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/nmantani/fileinsight-plugins",
+ "star": 69,
+ "commits": 146,
+ "modify_time": "2019-11-24 16:39:52",
+ "last_release": "v1.4.3.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nektra/vtbl-ida-pro-plugin",
+ "star": 69,
+ "commits": 5,
+ "modify_time": "2013-03-27 21:43:41",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/nbeede/boombox",
+ "star": 69,
+ "commits": 13,
+ "modify_time": "2019-08-18 19:01:08",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/nairuzabulhul/roadmap",
+ "star": 69,
+ "commits": 348,
+ "modify_time": "2018-04-26 22:42:50",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/menjoo/android-ssl-pinning-webviews",
+ "star": 69,
+ "commits": 10,
+ "modify_time": "2018-06-12 15:00:14",
+ "last_release": "",
+ "lang": "Kotlin"
+ },
+ {
+ "link": "https://github.com/melvinsh/subresolve",
+ "star": 69,
+ "commits": 6,
+ "modify_time": "2016-07-04 19:57:58",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/m8r0wn/ldap_search",
+ "star": 69,
+ "commits": 15,
+ "modify_time": "2019-10-28 17:09:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lynnux/windbg_hilight",
+ "star": 69,
+ "commits": 15,
+ "modify_time": "2018-04-19 02:40:56",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/kureev/react-native-network-proxy",
+ "star": 69,
+ "commits": 5,
+ "modify_time": "2017-07-02 22:05:51",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/klks/checksec",
+ "star": 69,
+ "commits": 7,
+ "modify_time": "2017-03-26 05:00:28",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/kedebug/scdetective",
+ "star": 69,
+ "commits": 23,
+ "modify_time": "2014-04-18 07:56:52",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jaredhaight/windowsattackanddefenselab",
+ "star": 69,
+ "commits": 56,
+ "modify_time": "2019-09-04 13:35:05",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/itskindred/winportpush",
+ "star": 69,
+ "commits": 3,
+ "modify_time": "2019-01-22 00:39:17",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/incredibleindishell/windows-ad-environment-related",
+ "star": 69,
+ "commits": 45,
+ "modify_time": "2019-06-04 15:06:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ichooseyou/reclass64",
+ "star": 69,
+ "commits": 1,
+ "modify_time": "2014-02-07 17:27:35",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hxer/vulnapp",
+ "star": 69,
+ "commits": 9,
+ "modify_time": "2016-03-24 15:16:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hfiref0x/stryker",
+ "star": 69,
+ "commits": 7,
+ "modify_time": "2018-02-25 08:48:52",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/grazfather/blackhatpython",
+ "star": 69,
+ "commits": 45,
+ "modify_time": "2015-12-27 22:03:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/google/certificate-transparency-rfcs",
+ "star": 69,
+ "commits": 701,
+ "modify_time": "2019-11-04 09:53:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fr0gger/rocprotect-v1",
+ "star": 69,
+ "commits": 5,
+ "modify_time": "2019-01-28 10:46:14",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/el3ct71k/subdomain-analyzer",
+ "star": 69,
+ "commits": 13,
+ "modify_time": "2015-05-18 08:50:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dxwu/binderfilter",
+ "star": 69,
+ "commits": 63,
+ "modify_time": "2017-11-05 22:28:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/devnoname120/vitabright",
+ "star": 69,
+ "commits": 48,
+ "modify_time": "2019-11-27 01:43:43",
+ "last_release": "1.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/dchrastil/ttsl",
+ "star": 69,
+ "commits": 11,
+ "modify_time": "2017-03-20 17:04:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/chipik/sap_gw_rce_exploit",
+ "star": 69,
+ "commits": 9,
+ "modify_time": "2019-04-24 06:47:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cheetz/powertools",
+ "star": 69,
+ "commits": 196,
+ "modify_time": "2015-05-04 02:36:40",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/certtools/intelmq-manager",
+ "star": 69,
+ "commits": 521,
+ "modify_time": "2019-11-08 13:56:20",
+ "last_release": "2.1.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/brainsmoke/nyanmbr",
+ "star": 69,
+ "commits": 1,
+ "modify_time": "2013-01-21 22:19:35",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/biggerwing/cve-2019-0708-poc",
+ "star": 69,
+ "commits": 6,
+ "modify_time": "2019-05-30 02:43:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/begriffs/microservice-template",
+ "star": 69,
+ "commits": 74,
+ "modify_time": "2015-05-05 22:16:24",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/ascotbe/osmographic-brain-mapping",
+ "star": 69,
+ "commits": 12,
+ "modify_time": "2019-08-20 02:15:50",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/arvinddoraiswamy/slid",
+ "star": 69,
+ "commits": 49,
+ "modify_time": "2015-01-26 23:00:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/antoniococo/runascs",
+ "star": 69,
+ "commits": 6,
+ "modify_time": "2019-08-14 08:43:05",
+ "last_release": "v1.1",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/alexander-hanel/idapython6to7",
+ "star": 69,
+ "commits": 9,
+ "modify_time": "2017-12-26 15:22:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/adjoint-io/pedersen-commitment",
+ "star": 69,
+ "commits": null,
+ "modify_time": "2018-05-31 09:43:45",
+ "last_release": "",
+ "lang": "Haskell"
+ },
+ {
+ "link": "https://github.com/1135/equationexploit",
+ "star": 69,
+ "commits": 20,
+ "modify_time": "2018-07-29 02:19:09",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/yourtion/alfred_shadowsockscontroller",
+ "star": 68,
+ "commits": 24,
+ "modify_time": "2016-11-20 13:16:43",
+ "last_release": "0.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/secrary/hooking-via-instrumentationcallback",
+ "star": 68,
+ "commits": 4,
+ "modify_time": "2017-11-30 12:54:35",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/skelsec/kerberoast",
+ "star": 68,
+ "commits": 16,
+ "modify_time": "2019-11-13 23:19:01",
+ "last_release": "0.0.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cmu-sei/biggrep",
+ "star": 68,
+ "commits": 9,
+ "modify_time": "2018-03-15 13:39:57",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/gossip-sjtu/gossip_blog",
+ "star": 68,
+ "commits": 9,
+ "modify_time": "2019-12-06 10:38:29",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/feeicn/webproxy",
+ "star": 68,
+ "commits": 10,
+ "modify_time": "2018-08-02 02:22:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lylemi/browser-fuzz-summarize",
+ "star": 68,
+ "commits": 57,
+ "modify_time": "2019-11-12 11:39:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/0x90/wifi-scripts",
+ "star": 68,
+ "commits": 60,
+ "modify_time": "2015-09-07 08:18:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kiyadesu/Android",
+ "star": 68,
+ "commits": 47,
+ "modify_time": "2018-08-15 03:43:55",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/Synacktiv-contrib/CVE-2018-4193",
+ "star": 68,
+ "commits": 1,
+ "modify_time": "2019-02-13 13:08:30",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/dsccommunity/CertificateDsc",
+ "star": 68,
+ "commits": 581,
+ "modify_time": "2019-11-16 19:23:18",
+ "last_release": "\n 4.7.0.0-PSGallery\n ",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/radareorg/radare2-regressions",
+ "star": 68,
+ "commits": 5608,
+ "modify_time": "2019-12-09 07:04:18",
+ "last_release": "0.10.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/yolosec/routerkeygenandroid",
+ "star": 68,
+ "commits": 573,
+ "modify_time": "2018-05-19 11:00:05",
+ "last_release": "v4.1.5",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/usyd-blockchain/vandal",
+ "star": 68,
+ "commits": 866,
+ "modify_time": "2019-06-26 03:13:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tintinweb/ethereum-dasm",
+ "star": 68,
+ "commits": 76,
+ "modify_time": "2019-07-07 00:24:52",
+ "last_release": "v0.1.5",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/thehappydinoa/rootos",
+ "star": 68,
+ "commits": 27,
+ "modify_time": "2019-09-29 22:21:30",
+ "last_release": "1.3.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/stealth/plasmapulsar",
+ "star": 68,
+ "commits": 3,
+ "modify_time": "2017-05-19 10:47:34",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/stayliv3/burpsuite-changeu",
+ "star": 68,
+ "commits": 8,
+ "modify_time": "2017-02-17 06:08:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/spesmilo/electrum-docs",
+ "star": 68,
+ "commits": 163,
+ "modify_time": "2019-11-15 22:46:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/simplerisk/code",
+ "star": 68,
+ "commits": 101,
+ "modify_time": "2019-12-05 22:38:52",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/shengqi158/cve-2018-2628",
+ "star": 68,
+ "commits": 6,
+ "modify_time": "2018-07-20 01:24:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sepehrdaddev/xerxes",
+ "star": 68,
+ "commits": 259,
+ "modify_time": "2019-07-20 15:40:06",
+ "last_release": "v2.0beta",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/secfree/bcrpscan",
+ "star": 68,
+ "commits": 5,
+ "modify_time": "2014-04-26 12:01:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/screetsec/wordlist-dracos",
+ "star": 68,
+ "commits": 31,
+ "modify_time": "2017-02-04 15:00:55",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/samhaxr/xxrf-shots",
+ "star": 68,
+ "commits": 7,
+ "modify_time": "2018-10-10 12:10:46",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/sailro/bdtunnel",
+ "star": 68,
+ "commits": 70,
+ "modify_time": "2019-07-12 22:39:14",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/saelo/v9",
+ "star": 68,
+ "commits": 3,
+ "modify_time": "2019-02-14 11:57:53",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/rwfpl/rewolf-gogogadget",
+ "star": 68,
+ "commits": 2,
+ "modify_time": "2016-11-26 23:03:02",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/rvrsh3ll/word-doc-video-embed-exe-poc",
+ "star": 68,
+ "commits": 9,
+ "modify_time": "2018-11-01 21:48:35",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/richinseattle/evolutionarykernelfuzzing",
+ "star": 68,
+ "commits": 2,
+ "modify_time": "2017-07-28 02:26:57",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ps4dev/ps4sdk",
+ "star": 68,
+ "commits": 29,
+ "modify_time": "2017-10-04 23:14:43",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/poorbillionaire/usn-journal-parser",
+ "star": 68,
+ "commits": 142,
+ "modify_time": "2018-12-12 19:35:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/philipjohn/exploit-scanner-hashes",
+ "star": 68,
+ "commits": 145,
+ "modify_time": "2018-08-27 13:40:36",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/outflanknl/presentations",
+ "star": 68,
+ "commits": 14,
+ "modify_time": "2019-08-14 11:01:35",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ningzhenyu/nailgun",
+ "star": 68,
+ "commits": 14,
+ "modify_time": "2019-02-06 17:54:22",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/neural75/gqrx-scanner",
+ "star": 68,
+ "commits": 58,
+ "modify_time": "2019-08-26 08:37:26",
+ "last_release": "\n 1.0.1\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/mrh0wl/cloudmare",
+ "star": 68,
+ "commits": 40,
+ "modify_time": "2019-09-12 20:45:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mobrine-mob/m0b-tool",
+ "star": 68,
+ "commits": null,
+ "modify_time": "2018-05-22 20:13:44",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/mazenelzanaty/twlocation",
+ "star": 68,
+ "commits": 14,
+ "modify_time": "2018-04-10 11:59:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/markri/wp-sec",
+ "star": 68,
+ "commits": 81,
+ "modify_time": "2019-11-27 20:17:10",
+ "last_release": "\n 1.0.4\n ",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/marco-lancini/docker_offensive_elk",
+ "star": 68,
+ "commits": 25,
+ "modify_time": "2019-06-20 10:48:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/malwarialabs/derbycon2019",
+ "star": 68,
+ "commits": 4,
+ "modify_time": "2019-09-07 01:32:43",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/lunixbochs/revsync",
+ "star": 68,
+ "commits": 99,
+ "modify_time": "2019-04-12 18:02:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/leoloobeek/csharp",
+ "star": 68,
+ "commits": 9,
+ "modify_time": "2019-11-14 22:04:23",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/laanwj/decuda",
+ "star": 68,
+ "commits": 6,
+ "modify_time": "2010-07-24 12:28:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kkar/vbs-obfuscator-in-python",
+ "star": 68,
+ "commits": 6,
+ "modify_time": "2016-07-27 12:13:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kdaoudieh/bella",
+ "star": 68,
+ "commits": 11,
+ "modify_time": "2018-09-12 13:06:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jas502n/cve-2018-2628",
+ "star": 68,
+ "commits": 18,
+ "modify_time": "2019-09-30 01:18:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/invictus1306/arm-episodes",
+ "star": 68,
+ "commits": 51,
+ "modify_time": "2018-01-25 23:31:39",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/intrepidusgroup/rpi-atv",
+ "star": 68,
+ "commits": 10,
+ "modify_time": "2013-09-29 21:05:09",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/imp0wd3r/active-directory-pentest",
+ "star": 68,
+ "commits": 2,
+ "modify_time": "2018-01-16 06:17:03",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ihciah/inner-shadowsocks",
+ "star": 68,
+ "commits": 15,
+ "modify_time": "2018-04-25 07:22:21",
+ "last_release": "v1.0.4",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/idiom/pftriage",
+ "star": 68,
+ "commits": 75,
+ "modify_time": "2019-06-18 02:09:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ianmiell/autotrace",
+ "star": 68,
+ "commits": 249,
+ "modify_time": "2018-05-25 17:47:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/horsicq/stringsx64dbg",
+ "star": 68,
+ "commits": 288,
+ "modify_time": "2019-12-09 17:07:07",
+ "last_release": "0.04",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/holly-hacker/dnspy.extension.holly",
+ "star": 68,
+ "commits": 129,
+ "modify_time": "2019-07-22 13:38:25",
+ "last_release": "v0.3.0",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/henkaku/vitashell",
+ "star": 68,
+ "commits": 369,
+ "modify_time": "2017-05-12 15:35:00",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hacker0x01/h1-212-ctf-solutions",
+ "star": 68,
+ "commits": 39,
+ "modify_time": "2017-12-04 22:20:14",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/gadiluna/safe",
+ "star": 68,
+ "commits": 23,
+ "modify_time": "2019-09-15 17:53:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/funilrys/pyfunceble",
+ "star": 68,
+ "commits": 1320,
+ "modify_time": "2019-06-24 20:00:59",
+ "last_release": "2.2.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/flathub/linux-store-frontend",
+ "star": 68,
+ "commits": 467,
+ "modify_time": "2019-09-15 13:46:33",
+ "last_release": "\n 0.7.3\n ",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/fideliscyber/x509",
+ "star": 68,
+ "commits": 1,
+ "modify_time": "2018-02-05 15:31:30",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/endgameinc/eqllib",
+ "star": 68,
+ "commits": 33,
+ "modify_time": "2019-09-26 23:30:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/enddo/cjexploiter",
+ "star": 68,
+ "commits": null,
+ "modify_time": "2016-07-06 19:30:56",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/elfmaster/kdress",
+ "star": 68,
+ "commits": 3,
+ "modify_time": "2015-08-26 18:03:31",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/dpiekacz/gixlg",
+ "star": 68,
+ "commits": 31,
+ "modify_time": "2018-10-01 22:15:25",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/dev-sec/chef-windows-hardening",
+ "star": 68,
+ "commits": 77,
+ "modify_time": "2019-03-28 13:38:43",
+ "last_release": "\n v0.9.1\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/dekunukem/facepunch",
+ "star": 68,
+ "commits": 14,
+ "modify_time": "2018-01-26 15:11:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/davevs/dvxte",
+ "star": 68,
+ "commits": 18,
+ "modify_time": "2017-03-12 14:27:56",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/comaeio/livecloudkd",
+ "star": 68,
+ "commits": 19,
+ "modify_time": "2019-04-27 20:45:38",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/bastilleresearch/gr-nordic",
+ "star": 68,
+ "commits": 16,
+ "modify_time": "2016-09-27 14:41:41",
+ "last_release": "",
+ "lang": "CMake"
+ },
+ {
+ "link": "https://github.com/baguswiratmaadi/reverie",
+ "star": 68,
+ "commits": 12,
+ "modify_time": "2019-04-23 02:10:58",
+ "last_release": "v1.1",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/auth0/auth0.android",
+ "star": 68,
+ "commits": 568,
+ "modify_time": "2019-12-07 18:39:09",
+ "last_release": "1.19.1",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/angelkillah/zer0m0n",
+ "star": 68,
+ "commits": 102,
+ "modify_time": "2016-07-12 12:28:45",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/akayn/kbmon",
+ "star": 68,
+ "commits": null,
+ "modify_time": "2018-03-05 22:24:41",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/aerosoul94/ida_gel",
+ "star": 68,
+ "commits": 7,
+ "modify_time": "2019-10-03 18:07:44",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/987432340/lcx",
+ "star": 68,
+ "commits": 2,
+ "modify_time": "2015-03-13 13:29:31",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/3xp10it/xdump",
+ "star": 68,
+ "commits": 13,
+ "modify_time": "2017-08-08 12:58:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/0xfe/hacking-stellar",
+ "star": 68,
+ "commits": 57,
+ "modify_time": "2019-01-07 14:12:57",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/achillean/shodan-ruby",
+ "star": 67,
+ "commits": 12,
+ "modify_time": "2016-04-07 06:08:36",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/ehco1996/lazyspider",
+ "star": 67,
+ "commits": 18,
+ "modify_time": "2019-04-01 11:52:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/404notf0und/my-security-algorithm-architecture",
+ "star": 67,
+ "commits": 41,
+ "modify_time": "2019-10-03 15:39:59",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/pluwen/china-domain-whitelist",
+ "star": 67,
+ "commits": 107,
+ "modify_time": "2019-12-02 06:02:29",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/jedahan/haiku-wifi",
+ "star": 67,
+ "commits": 26,
+ "modify_time": "2012-01-31 04:30:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/static-flow/burpsuite-team-extension",
+ "star": 67,
+ "commits": 67,
+ "modify_time": "2019-10-23 22:02:26",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/phxbandit/scripts-and-tools",
+ "star": 67,
+ "commits": 623,
+ "modify_time": "2019-03-06 14:18:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vysecurity/CVE-2018-4878",
+ "star": 67,
+ "commits": 3,
+ "modify_time": "2018-02-10 19:38:57",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/phxbandit/scripts-and-tools",
+ "star": 67,
+ "commits": 623,
+ "modify_time": "2019-03-06 14:18:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/BrandonPlank/rootlessJB4",
+ "star": 67,
+ "commits": 59,
+ "modify_time": "2019-10-07 11:06:06",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/radareorg/radare2-webui",
+ "star": 67,
+ "commits": 165,
+ "modify_time": "2018-12-01 11:34:18",
+ "last_release": "\n 1.2.0\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/octopus-platform/bjoern",
+ "star": 67,
+ "commits": 720,
+ "modify_time": "2016-10-13 14:58:53",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/shmilylty/awesome-malware-analysis",
+ "star": 67,
+ "commits": 478,
+ "modify_time": "2017-08-28 05:27:18",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/xsuperbug/payloads",
+ "star": 67,
+ "commits": 99,
+ "modify_time": "2018-10-04 14:21:05",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/vesche/histstat",
+ "star": 67,
+ "commits": 35,
+ "modify_time": "2019-06-19 04:01:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/trpt/usbdeath",
+ "star": 67,
+ "commits": 7,
+ "modify_time": "2017-06-12 12:42:15",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/trailofbits/clang-cfi-showcase",
+ "star": 67,
+ "commits": 10,
+ "modify_time": "2019-01-10 15:20:09",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/toxydose/duckyspark",
+ "star": 67,
+ "commits": 48,
+ "modify_time": "2019-05-03 01:07:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tasket/qubes-vpn-support",
+ "star": 67,
+ "commits": 134,
+ "modify_time": "2019-07-05 05:15:22",
+ "last_release": "\n v1.4.2\n ",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/takeshixx/knxmap",
+ "star": 67,
+ "commits": 243,
+ "modify_time": "2018-08-22 19:01:41",
+ "last_release": "\n v0.10.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/stphivos/rat-shell",
+ "star": 67,
+ "commits": 15,
+ "modify_time": "2015-11-12 02:42:29",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/ssexxe/xxebugfind",
+ "star": 67,
+ "commits": 29,
+ "modify_time": "2014-09-04 21:57:44",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/sola-da/synode",
+ "star": 67,
+ "commits": 3,
+ "modify_time": "2017-12-22 10:27:36",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/sindresorhus/debounce-fn",
+ "star": 67,
+ "commits": 7,
+ "modify_time": "2019-04-21 14:53:29",
+ "last_release": "v3.0.1",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/secwiki/vulscritp",
+ "star": 67,
+ "commits": 98,
+ "modify_time": "2017-03-31 14:33:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/s1egesystems/ghostdelivery",
+ "star": 67,
+ "commits": 30,
+ "modify_time": "2019-11-09 17:40:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rootkiter/binary-files",
+ "star": 67,
+ "commits": 9,
+ "modify_time": "2019-03-09 06:51:49",
+ "last_release": "",
+ "lang": "YARA"
+ },
+ {
+ "link": "https://github.com/robbyfux/ragpicker",
+ "star": 67,
+ "commits": 20,
+ "modify_time": "2015-08-07 08:17:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/retme7/my-slides",
+ "star": 67,
+ "commits": 15,
+ "modify_time": "2019-11-04 08:13:56",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/pythonran/pcap_tools",
+ "star": 67,
+ "commits": 16,
+ "modify_time": "2017-04-09 07:44:04",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/puppetlabs/puppetlabs-inifile",
+ "star": 67,
+ "commits": 613,
+ "modify_time": "2019-12-09 13:10:02",
+ "last_release": "\n v4.0.0\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/pshep/anubis",
+ "star": 67,
+ "commits": 57,
+ "modify_time": "2013-11-06 18:10:41",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/pjialin/pyproxy-async",
+ "star": 67,
+ "commits": 38,
+ "modify_time": "2019-08-16 11:14:31",
+ "last_release": "0.2.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/oyyd/nysocks",
+ "star": 67,
+ "commits": 230,
+ "modify_time": "2018-09-27 14:36:19",
+ "last_release": "1.2.10",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/orleven/tentacle",
+ "star": 67,
+ "commits": 89,
+ "modify_time": "2019-06-28 05:27:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/netspi/burpcollaboratordnstunnel",
+ "star": 67,
+ "commits": 49,
+ "modify_time": "2019-10-08 21:34:51",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/mozilla/audit-go",
+ "star": 67,
+ "commits": 201,
+ "modify_time": "2019-03-29 07:06:18",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/microwave89/rtsectiontest",
+ "star": 67,
+ "commits": 12,
+ "modify_time": "2015-11-20 20:16:24",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/malwaretech/basichook",
+ "star": 67,
+ "commits": 3,
+ "modify_time": "2015-01-08 14:26:22",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/luigirizzo/netmap-libpcap",
+ "star": 67,
+ "commits": 1973,
+ "modify_time": "2016-02-11 23:09:47",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/lucasg/idamagnum",
+ "star": 67,
+ "commits": 3,
+ "modify_time": "2018-12-19 21:26:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lubyruffy/tcptunnel",
+ "star": 67,
+ "commits": 22,
+ "modify_time": "2018-03-18 05:34:32",
+ "last_release": "v1.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/leeqwind/holicpoc",
+ "star": 67,
+ "commits": 77,
+ "modify_time": "2018-05-29 11:29:03",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ktakayama/notificationcrash",
+ "star": 67,
+ "commits": 4,
+ "modify_time": "2017-12-02 15:01:19",
+ "last_release": "",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/jaegertracing/jaeger-client-cpp",
+ "star": 67,
+ "commits": 81,
+ "modify_time": "2019-11-23 22:50:39",
+ "last_release": "v0.5.0",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/itayc0hen/apt-ecosystem",
+ "star": 67,
+ "commits": 61,
+ "modify_time": "2019-10-30 14:49:18",
+ "last_release": "",
+ "lang": "YARA"
+ },
+ {
+ "link": "https://github.com/iscanner/iscanner_ios",
+ "star": 67,
+ "commits": 33,
+ "modify_time": "2018-04-28 12:39:41",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/irelance/jsc-decompile-mozjs-34",
+ "star": 67,
+ "commits": 20,
+ "modify_time": "2018-10-10 10:01:05",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/hlldz/wildpwn",
+ "star": 67,
+ "commits": 13,
+ "modify_time": "2018-03-10 18:52:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hercules-team/augeasproviders",
+ "star": 67,
+ "commits": 381,
+ "modify_time": "2019-06-26 11:11:42",
+ "last_release": "v2.0.0",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/harmj0y/impdump",
+ "star": 67,
+ "commits": 9,
+ "modify_time": "2016-12-05 14:26:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/grayddq/publicsecscan",
+ "star": 67,
+ "commits": 5,
+ "modify_time": "2019-04-19 10:11:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gmu-swe/phosphor",
+ "star": 67,
+ "commits": 901,
+ "modify_time": "2019-12-06 16:36:35",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/gen0cide/laforge",
+ "star": 67,
+ "commits": 192,
+ "modify_time": "2019-08-25 21:47:09",
+ "last_release": "v2.0.15",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/gabrtv/shocker",
+ "star": 67,
+ "commits": 9,
+ "modify_time": "2014-06-18 18:10:28",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/f5networks/f5-azure-arm-templates",
+ "star": 67,
+ "commits": 59,
+ "modify_time": "2019-12-09 20:13:38",
+ "last_release": "v7.1.1.0",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/exodusintel/cve-2019-0808",
+ "star": 67,
+ "commits": 1,
+ "modify_time": "2019-05-17 14:16:59",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/doctorwebltd/malware-iocs",
+ "star": 67,
+ "commits": 13,
+ "modify_time": "2019-10-03 11:47:35",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/dkhuuthe/madlira",
+ "star": 67,
+ "commits": 4,
+ "modify_time": "2019-02-27 10:21:17",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/deptofdefense/salsa",
+ "star": 67,
+ "commits": 46,
+ "modify_time": "2019-06-07 21:49:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/debasishm89/openxmolar",
+ "star": 67,
+ "commits": 26,
+ "modify_time": "2018-04-10 07:22:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/deadlyelder/tools-for-cryptanalysis",
+ "star": 67,
+ "commits": 59,
+ "modify_time": "2019-10-13 12:06:58",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/dapphub/ds-math",
+ "star": 67,
+ "commits": 60,
+ "modify_time": "2018-12-02 13:55:35",
+ "last_release": "",
+ "lang": "Nix"
+ },
+ {
+ "link": "https://github.com/cyboxproject/python-cybox",
+ "star": 67,
+ "commits": 1720,
+ "modify_time": "2019-12-03 19:33:19",
+ "last_release": "v2.1.0.20",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/codewhitesec/unmarshalpwn",
+ "star": 67,
+ "commits": 4,
+ "modify_time": "2018-06-25 07:11:27",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/codedx/codepulse",
+ "star": 67,
+ "commits": 733,
+ "modify_time": "2019-08-02 19:45:36",
+ "last_release": "v2.6.2",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/cobbr/sharpshell",
+ "star": 67,
+ "commits": 1,
+ "modify_time": "2018-12-11 16:20:42",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/chef-koch/projectx",
+ "star": 67,
+ "commits": 50,
+ "modify_time": "2019-11-07 19:25:13",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/changeofpace/mouclassinputinjection",
+ "star": 67,
+ "commits": 12,
+ "modify_time": "2019-10-27 12:52:16",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/byt3bl33d3r/beef-api",
+ "star": 67,
+ "commits": 25,
+ "modify_time": "2015-07-30 12:00:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bitsofinfo/stateful-process-command-proxy",
+ "star": 67,
+ "commits": 94,
+ "modify_time": "2016-11-10 23:18:50",
+ "last_release": "v1.0.1",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/bgeesaman/kube-env-stealer",
+ "star": 67,
+ "commits": 7,
+ "modify_time": "2019-09-10 05:58:05",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/azizaltuntas/pymap-scanner",
+ "star": 67,
+ "commits": 8,
+ "modify_time": "2018-02-10 17:01:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/adamdoupe/ctf-training",
+ "star": 67,
+ "commits": 43,
+ "modify_time": "2017-12-07 02:48:20",
+ "last_release": "",
+ "lang": "Makefile"
+ },
+ {
+ "link": "https://github.com/abazhaniuk/publications",
+ "star": 67,
+ "commits": 22,
+ "modify_time": "2017-10-30 22:57:19",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/3xp10it/xwifi",
+ "star": 67,
+ "commits": 28,
+ "modify_time": "2018-10-15 00:53:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/3gstudent/use-com-objects-to-bypass-uac",
+ "star": 67,
+ "commits": 7,
+ "modify_time": "2018-06-20 00:45:29",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/003random/getjs",
+ "star": 67,
+ "commits": 32,
+ "modify_time": "2018-11-14 23:41:35",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/mvdan/garble",
+ "star": 66,
+ "commits": 26,
+ "modify_time": "2019-12-11 16:09:58",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/shellphish/driller-afl",
+ "star": 66,
+ "commits": 18,
+ "modify_time": "2017-03-20 23:10:21",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/gojhonny/pentesting-scripts",
+ "star": 66,
+ "commits": 95,
+ "modify_time": "2017-01-21 10:04:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jipegit/irnotes",
+ "star": 66,
+ "commits": 17,
+ "modify_time": "2016-07-23 09:17:26",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/defuse/crackstation",
+ "star": 66,
+ "commits": 262,
+ "modify_time": "2019-06-05 01:05:00",
+ "last_release": "",
+ "lang": "Hack"
+ },
+ {
+ "link": "https://github.com/splunk/ta-microsoft-sysmon",
+ "star": 66,
+ "commits": 147,
+ "modify_time": "2019-07-30 06:03:48",
+ "last_release": "4.0.0",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/io12/pwninit",
+ "star": 66,
+ "commits": 50,
+ "modify_time": "2019-12-02 04:54:23",
+ "last_release": "2.1.0",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/moemod/csmoe",
+ "star": 66,
+ "commits": 644,
+ "modify_time": "2019-11-28 11:16:40",
+ "last_release": "continuous",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ethjs/ethjs-provider-signer",
+ "star": 66,
+ "commits": 9,
+ "modify_time": "2016-12-24 16:25:06",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/angelkitty/bilibili-smallvideo",
+ "star": 66,
+ "commits": 5,
+ "modify_time": "2018-10-10 07:18:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/chris-rands/emojify",
+ "star": 66,
+ "commits": 41,
+ "modify_time": "2019-10-25 22:35:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zadewg/livebox-0day",
+ "star": 66,
+ "commits": 35,
+ "modify_time": "2018-12-28 17:49:27",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/yifanlu/spider3dstools",
+ "star": 66,
+ "commits": 11,
+ "modify_time": "2015-03-27 20:38:27",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/yelp/parcelgen",
+ "star": 66,
+ "commits": 125,
+ "modify_time": "2019-02-04 14:21:19",
+ "last_release": "\n v1.0.3\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xnymia/suricata-signatures",
+ "star": 66,
+ "commits": 10,
+ "modify_time": "2017-05-15 23:03:54",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/weppos/whois-parser",
+ "star": 66,
+ "commits": 146,
+ "modify_time": "2019-06-25 22:12:16",
+ "last_release": "v1.0.1",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/wekillpeople/browser-dumpwd",
+ "star": 66,
+ "commits": 8,
+ "modify_time": "2016-05-30 09:40:06",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/webxscan/linux_rat",
+ "star": 66,
+ "commits": 5,
+ "modify_time": "2019-04-20 01:25:07",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/visualbasic6/chatter",
+ "star": 66,
+ "commits": 25,
+ "modify_time": "2019-04-09 23:52:29",
+ "last_release": "",
+ "lang": "Visual Basic .NET"
+ },
+ {
+ "link": "https://github.com/violentlydave/mkhtaccess_red",
+ "star": 66,
+ "commits": 15,
+ "modify_time": "2019-06-13 17:27:58",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/trailofbits/siderophile",
+ "star": 66,
+ "commits": 30,
+ "modify_time": "2019-12-02 22:38:47",
+ "last_release": "",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/thestr4ng3r/arcore-patch",
+ "star": 66,
+ "commits": 2,
+ "modify_time": "2017-12-30 12:25:33",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/therook/csrf-request-builder",
+ "star": 66,
+ "commits": 3,
+ "modify_time": "2012-05-23 03:59:03",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/syss-research/nrf24-playset",
+ "star": 66,
+ "commits": 12,
+ "modify_time": "2017-06-01 12:00:59",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/seanheelan/heaplayout",
+ "star": 66,
+ "commits": 35,
+ "modify_time": "2019-11-24 18:39:48",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/scorchsecurity/systorm",
+ "star": 66,
+ "commits": 19,
+ "modify_time": "2016-08-04 23:01:34",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/sapir/sonare",
+ "star": 66,
+ "commits": 107,
+ "modify_time": "2018-02-09 10:40:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/samratashok/deploy-deception",
+ "star": 66,
+ "commits": 12,
+ "modify_time": "2019-11-17 13:01:28",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/s4n7h0/nse",
+ "star": 66,
+ "commits": 10,
+ "modify_time": "2017-09-09 16:57:16",
+ "last_release": "",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/rwfpl/rewolf-dllpackager",
+ "star": 66,
+ "commits": 2,
+ "modify_time": "2015-03-13 23:16:04",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/remg427/misp42splunk",
+ "star": 66,
+ "commits": 338,
+ "modify_time": "2019-11-06 09:57:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/r3vn/punk.py",
+ "star": 66,
+ "commits": 9,
+ "modify_time": "2018-12-16 02:46:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pyn3rd/cve-2018-3252",
+ "star": 66,
+ "commits": 13,
+ "modify_time": "2018-12-07 04:31:49",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/pvachon/tsl-sdr",
+ "star": 66,
+ "commits": 180,
+ "modify_time": "2018-05-19 22:47:16",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/pure-l0g1c/hyprpulse",
+ "star": 66,
+ "commits": 10,
+ "modify_time": "2018-11-06 13:41:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/plazmaz/mongodb-honeyproxy",
+ "star": 66,
+ "commits": 31,
+ "modify_time": "2019-04-23 05:17:13",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/oj/bsides-2017-ctf-docker",
+ "star": 66,
+ "commits": 30,
+ "modify_time": "2017-03-22 02:32:10",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/nmgwddj/learn-windows-drivers",
+ "star": 66,
+ "commits": 24,
+ "modify_time": "2016-09-11 14:44:40",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ninoseki/miteru",
+ "star": 66,
+ "commits": 268,
+ "modify_time": "2019-11-27 13:37:13",
+ "last_release": "\n v0.12.13\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/nickcano/relocbonus",
+ "star": 66,
+ "commits": 21,
+ "modify_time": "2018-10-18 23:02:07",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/necst/crave",
+ "star": 66,
+ "commits": 66,
+ "modify_time": "2019-01-15 10:22:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nccgroup/goatcasino",
+ "star": 66,
+ "commits": 4,
+ "modify_time": "2018-10-24 17:57:25",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/mmcloughlin/pearl",
+ "star": 66,
+ "commits": 319,
+ "modify_time": "2018-09-09 11:44:31",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/martinoj2009/icmpexfil",
+ "star": 66,
+ "commits": 8,
+ "modify_time": "2018-01-31 01:01:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/marcobellaccini/pyaescrypt",
+ "star": 66,
+ "commits": 33,
+ "modify_time": "2019-06-22 13:45:41",
+ "last_release": "v0.4.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/maraudershell/marauder",
+ "star": 66,
+ "commits": 79,
+ "modify_time": "2019-10-20 23:54:47",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/mantvydasb/red-team-infrastructure-automation",
+ "star": 66,
+ "commits": 35,
+ "modify_time": "2019-02-01 12:49:45",
+ "last_release": "",
+ "lang": "HCL"
+ },
+ {
+ "link": "https://github.com/lovejj1994/simplify-core",
+ "star": 66,
+ "commits": 66,
+ "modify_time": "2017-10-11 03:52:23",
+ "last_release": "\n 1.0.0.M4\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/librecore-org/librecore",
+ "star": 66,
+ "commits": 19595,
+ "modify_time": "2016-12-05 13:27:48",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/lianglixin/sandvxposed",
+ "star": 66,
+ "commits": 168,
+ "modify_time": "2019-11-26 20:30:51",
+ "last_release": "0.0.9.4.2",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/ledgerhq/blue-loader-python",
+ "star": 66,
+ "commits": 146,
+ "modify_time": "2019-11-21 18:42:41",
+ "last_release": "\n 0.1.31\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jpsenior/threataggregator",
+ "star": 66,
+ "commits": 19,
+ "modify_time": "2016-02-05 16:09:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/josecl/cool-php-captcha",
+ "star": 66,
+ "commits": 40,
+ "modify_time": "2018-03-03 20:11:19",
+ "last_release": "\n 0.3\n ",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/jgamblin/badactors",
+ "star": 66,
+ "commits": 20,
+ "modify_time": "2017-04-04 13:17:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/javabeanz/owasp-security-logging",
+ "star": 66,
+ "commits": 177,
+ "modify_time": "2019-02-28 20:21:52",
+ "last_release": "v1.1.6",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/invictus1306/functrace",
+ "star": 66,
+ "commits": 26,
+ "modify_time": "2019-06-04 19:31:44",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/indeedops/shadowbuster",
+ "star": 66,
+ "commits": 2,
+ "modify_time": "2015-07-23 15:11:16",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/hc0d3r/sshd-poison",
+ "star": 66,
+ "commits": 13,
+ "modify_time": "2019-05-20 11:09:43",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hardenedlinux/firmware-anatomy",
+ "star": 66,
+ "commits": 84,
+ "modify_time": "2019-11-14 10:30:32",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/google/gonids",
+ "star": 66,
+ "commits": 315,
+ "modify_time": "2019-12-09 14:08:21",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/fossfreedom/coverart-browser",
+ "star": 66,
+ "commits": 1560,
+ "modify_time": "2017-09-28 17:27:53",
+ "last_release": "\n v2.1.2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/firefart/cve-2018-7600",
+ "star": 66,
+ "commits": 8,
+ "modify_time": "2018-04-16 20:46:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/etherdream/mitm-http-cache-poisoning",
+ "star": 66,
+ "commits": 9,
+ "modify_time": "2015-08-13 09:31:58",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/dlwyatt/protecteddata",
+ "star": 66,
+ "commits": 90,
+ "modify_time": "2016-03-18 18:59:51",
+ "last_release": "4.1.3",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/dimopouloselias/simpleshellcodeinjector",
+ "star": 66,
+ "commits": 15,
+ "modify_time": "2019-04-20 20:45:49",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/davidfowl/windbgcheatsheet",
+ "star": 66,
+ "commits": 11,
+ "modify_time": "2019-10-14 04:07:41",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/dangrie158/esptool",
+ "star": 66,
+ "commits": 56,
+ "modify_time": "2017-01-20 23:06:24",
+ "last_release": "",
+ "lang": "Eagle"
+ },
+ {
+ "link": "https://github.com/cytoscape/cytoscape.js-cose-bilkent",
+ "star": 66,
+ "commits": 257,
+ "modify_time": "2019-09-10 10:47:59",
+ "last_release": "v4.1.0",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/crange/crange",
+ "star": 66,
+ "commits": 68,
+ "modify_time": "2016-10-10 22:05:27",
+ "last_release": "\n 0.1.3\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cornerpirate/reportcompiler",
+ "star": 66,
+ "commits": 37,
+ "modify_time": "2019-06-30 22:34:39",
+ "last_release": "",
+ "lang": "Batchfile"
+ },
+ {
+ "link": "https://github.com/claudioviviani/ms17-010-m4ss-sc4nn3r",
+ "star": 66,
+ "commits": 20,
+ "modify_time": "2017-05-20 15:42:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/circl/cve-portal",
+ "star": 66,
+ "commits": 115,
+ "modify_time": "2017-04-19 14:46:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/christophetd/firepwned",
+ "star": 66,
+ "commits": 33,
+ "modify_time": "2018-03-02 21:37:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/chokepoint/jynx2",
+ "star": 66,
+ "commits": 1,
+ "modify_time": "2012-12-15 09:56:27",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/bwall/ssdc",
+ "star": 66,
+ "commits": 7,
+ "modify_time": "2016-08-17 14:47:28",
+ "last_release": "v1.2.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/brainfucksec/archtorify",
+ "star": 66,
+ "commits": 125,
+ "modify_time": "2019-11-08 18:39:48",
+ "last_release": "\n v1.19.4\n ",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/bolexliu/apptrack",
+ "star": 66,
+ "commits": 12,
+ "modify_time": "2019-03-20 11:59:21",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/bear/s3scan",
+ "star": 66,
+ "commits": 21,
+ "modify_time": "2016-11-24 18:53:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/avast-tl/capstone2llvmir",
+ "star": 66,
+ "commits": null,
+ "modify_time": "2018-01-18 08:22:34",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/atimorin/poc2013",
+ "star": 66,
+ "commits": 2,
+ "modify_time": "2013-11-04 05:13:45",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ankh2054/linux-pentest",
+ "star": 66,
+ "commits": 19,
+ "modify_time": "2019-11-04 19:16:14",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/akamajoris/php-extension-backdoor",
+ "star": 66,
+ "commits": 6,
+ "modify_time": "2014-08-20 18:55:40",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ajinabraham/xenotix-apk-reverser",
+ "star": 66,
+ "commits": 17,
+ "modify_time": "2015-03-10 04:30:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/0xrawsec/gene",
+ "star": 66,
+ "commits": 47,
+ "modify_time": "2019-08-21 18:43:06",
+ "last_release": "\n v1.6.2\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/0xabu/qemu",
+ "star": 66,
+ "commits": 44848,
+ "modify_time": "2016-03-16 20:48:19",
+ "last_release": "\n v2.4.1\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/0x36/cve-pocs",
+ "star": 66,
+ "commits": null,
+ "modify_time": "2019-01-10 20:36:21",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/p3nt4/metasploit-modules",
+ "star": 65,
+ "commits": 16,
+ "modify_time": "2017-03-01 02:34:51",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/project-imas/memory-security",
+ "star": 65,
+ "commits": 65,
+ "modify_time": "2014-10-08 12:25:26",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/zhengmin1989/ios-10-decrypted-kernel-cache",
+ "star": 65,
+ "commits": 1,
+ "modify_time": "2016-06-15 02:54:36",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/jtesta/rainbowcrackalack",
+ "star": 65,
+ "commits": 50,
+ "modify_time": "2019-08-08 14:41:49",
+ "last_release": "v1.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cve-search/git-vuln-finder",
+ "star": 65,
+ "commits": 8,
+ "modify_time": "2019-11-15 14:20:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nccgroup/gtfoblookup",
+ "star": 65,
+ "commits": 48,
+ "modify_time": "2019-10-29 16:52:59",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/s0md3v/Shiva",
+ "star": 65,
+ "commits": 7,
+ "modify_time": "2019-05-05 15:49:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/robclemons/Arpspoof",
+ "star": 65,
+ "commits": 18,
+ "modify_time": "2011-09-01 02:29:40",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/PlantDaddy/FuzzAP",
+ "star": 65,
+ "commits": 17,
+ "modify_time": "2016-11-14 04:58:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jocover/OpenUSRP",
+ "star": 65,
+ "commits": 59,
+ "modify_time": "2017-10-02 04:31:41",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/nsacyber/Splunk-Assessment-of-Mitigation-Implementations",
+ "star": 65,
+ "commits": 4,
+ "modify_time": "2016-05-25 22:46:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hatching/httpreplay",
+ "star": 65,
+ "commits": 191,
+ "modify_time": "2019-11-14 10:30:40",
+ "last_release": "\n 0.2.6\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/AdamLaurie/hdmi-sniff",
+ "star": 65,
+ "commits": 5,
+ "modify_time": "2014-08-27 18:05:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/FSecureLABS/drozer-agent",
+ "star": 65,
+ "commits": 202,
+ "modify_time": "2017-06-30 16:04:40",
+ "last_release": "\n 2.3.1\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/LMAX-Exchange/disruptor-proxy",
+ "star": 65,
+ "commits": 109,
+ "modify_time": "2019-11-01 11:04:37",
+ "last_release": "2.1.0",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/zhengmin1989/yalu102",
+ "star": 65,
+ "commits": 12,
+ "modify_time": "2017-01-29 16:29:51",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/zer0mem0ry/kernelreadwritememory",
+ "star": 65,
+ "commits": 6,
+ "modify_time": "2016-11-08 15:05:15",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/yelp/osxcollector_output_filters",
+ "star": 65,
+ "commits": 121,
+ "modify_time": "2019-06-19 14:56:04",
+ "last_release": "\n v1.1.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/we45/dvfaas-damn-vulnerable-functions-as-a-service",
+ "star": 65,
+ "commits": 13,
+ "modify_time": "2019-01-23 15:17:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wazehell/cve-2018-6389",
+ "star": 65,
+ "commits": 4,
+ "modify_time": "2018-02-06 15:36:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/turanmahmudov/instagraph",
+ "star": 65,
+ "commits": 206,
+ "modify_time": "2019-07-12 10:09:37",
+ "last_release": "",
+ "lang": "QML"
+ },
+ {
+ "link": "https://github.com/trevd/android_root",
+ "star": 65,
+ "commits": 9,
+ "modify_time": "2014-02-09 07:58:47",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/temesgeny/ppsx-file-generator",
+ "star": 65,
+ "commits": 6,
+ "modify_time": "2017-07-25 18:25:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tbarabosch/quincy",
+ "star": 65,
+ "commits": 14,
+ "modify_time": "2017-07-31 08:23:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/switchbrew/nx-hbexploit300-obf",
+ "star": 65,
+ "commits": 1,
+ "modify_time": "2018-04-23 22:10:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/soarlab/maline",
+ "star": 65,
+ "commits": 347,
+ "modify_time": "2016-06-13 21:35:11",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/smarttang/sosrp",
+ "star": 65,
+ "commits": 47,
+ "modify_time": "2018-02-08 07:57:34",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/sergejmueller/wpcheck",
+ "star": 65,
+ "commits": 70,
+ "modify_time": "2019-09-01 19:01:41",
+ "last_release": "1.2.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/secwiki/ipot",
+ "star": 65,
+ "commits": 66,
+ "modify_time": "2018-06-10 13:57:05",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/scipag/btle-sniffer",
+ "star": 65,
+ "commits": 60,
+ "modify_time": "2017-05-17 18:32:51",
+ "last_release": "\n 0.2.2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/samhaxr/takeover-v1",
+ "star": 65,
+ "commits": 11,
+ "modify_time": "2018-10-10 11:12:23",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/rust-fuzz/targets",
+ "star": 65,
+ "commits": 262,
+ "modify_time": "2019-08-24 15:23:28",
+ "last_release": "",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/rfxn/advanced-policy-firewall",
+ "star": 65,
+ "commits": 71,
+ "modify_time": "2019-08-07 13:11:44",
+ "last_release": "1.7.6-1",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/redhatproductsecurity/cve-howto",
+ "star": 65,
+ "commits": 18,
+ "modify_time": "2016-11-14 01:16:29",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/project-prismatica/prismatica",
+ "star": 65,
+ "commits": 97,
+ "modify_time": "2019-09-09 22:51:40",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/portswigger/command-injection-attacker",
+ "star": 65,
+ "commits": 221,
+ "modify_time": "2019-06-18 13:08:13",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/passivetotal/python_api",
+ "star": 65,
+ "commits": 91,
+ "modify_time": "2019-07-19 17:37:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/parsingteam/teleshadow2",
+ "star": 65,
+ "commits": 13,
+ "modify_time": "2018-06-28 04:13:46",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/pansen/macos-sandbox-profiles",
+ "star": 65,
+ "commits": 4,
+ "modify_time": "2014-09-16 06:51:53",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/ojasookert/cve-2017-0781",
+ "star": 65,
+ "commits": 1,
+ "modify_time": "2017-10-09 15:19:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/not-wlan/driver-hijack",
+ "star": 65,
+ "commits": 12,
+ "modify_time": "2018-05-03 11:13:53",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/nheijmans/malzoo",
+ "star": 65,
+ "commits": 76,
+ "modify_time": "2019-01-30 15:39:37",
+ "last_release": "",
+ "lang": "YARA"
+ },
+ {
+ "link": "https://github.com/naivenom/reversing-list",
+ "star": 65,
+ "commits": 224,
+ "modify_time": "2018-12-15 09:23:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mtesauro/owasp-wte",
+ "star": 65,
+ "commits": 71,
+ "modify_time": "2019-01-16 05:10:28",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/mitchellkrogza/the-big-list-of-hacked-malware-web-sites",
+ "star": 65,
+ "commits": 4139,
+ "modify_time": "2019-12-09 16:29:15",
+ "last_release": "",
+ "lang": "TSQL"
+ },
+ {
+ "link": "https://github.com/minishift/minishift-addons",
+ "star": 65,
+ "commits": 75,
+ "modify_time": "2019-05-15 16:57:19",
+ "last_release": "",
+ "lang": "Gherkin"
+ },
+ {
+ "link": "https://github.com/mcdallas/cryptotools",
+ "star": 65,
+ "commits": 127,
+ "modify_time": "2019-08-17 13:55:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/markclayton/bumpster",
+ "star": 65,
+ "commits": 14,
+ "modify_time": "2018-03-08 17:43:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/m000/dtracker",
+ "star": 65,
+ "commits": 44,
+ "modify_time": "2017-03-16 13:26:35",
+ "last_release": "\n v0.2\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/lukebaggett/google_socks",
+ "star": 65,
+ "commits": 15,
+ "modify_time": "2018-07-19 19:53:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lcamry/sqli-labs",
+ "star": 65,
+ "commits": 8,
+ "modify_time": "2017-06-09 08:12:00",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/lair-framework/go-nmap",
+ "star": 65,
+ "commits": 28,
+ "modify_time": "2019-12-02 05:21:57",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/jianmou/vulnctf",
+ "star": 65,
+ "commits": 37,
+ "modify_time": "2018-03-28 01:37:04",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/integeruser/on-pwning",
+ "star": 65,
+ "commits": 100,
+ "modify_time": "2019-07-25 10:00:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/immunit/xip",
+ "star": 65,
+ "commits": 11,
+ "modify_time": "2018-11-21 16:08:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/RealBearcat/S2-055",
+ "star": 65,
+ "commits": 16,
+ "modify_time": "2018-05-09 19:20:59",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/hmishra2250/botnet-detection-using-machine-learning",
+ "star": 65,
+ "commits": 44,
+ "modify_time": "2018-06-13 07:05:43",
+ "last_release": "",
+ "lang": "Jupyter Notebook"
+ },
+ {
+ "link": "https://github.com/hikerell/bfuzzer",
+ "star": 65,
+ "commits": 4,
+ "modify_time": "2015-03-20 02:41:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hangim/kcp-shadowsocks-docker",
+ "star": 65,
+ "commits": 65,
+ "modify_time": "2019-04-02 01:27:32",
+ "last_release": "",
+ "lang": "Dockerfile"
+ },
+ {
+ "link": "https://github.com/hackthelegacy/hack400tool",
+ "star": 65,
+ "commits": 26,
+ "modify_time": "2018-01-17 01:49:16",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/guardianproject/trustedintents",
+ "star": 65,
+ "commits": 53,
+ "modify_time": "2014-07-30 23:21:01",
+ "last_release": "\n 0.2\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/greenwolf/social_attacker",
+ "star": 65,
+ "commits": 8,
+ "modify_time": "2019-08-08 05:22:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gpg/libgcrypt",
+ "star": 65,
+ "commits": 2485,
+ "modify_time": "2019-11-12 13:50:05",
+ "last_release": "\n libgcrypt-1.8.5\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/funoverip/mcafee-sitelist-pwd-decryption",
+ "star": 65,
+ "commits": 7,
+ "modify_time": "2016-02-12 07:20:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fakhrizulkifli/defeating-php-gd-imagecreatefromjpeg",
+ "star": 65,
+ "commits": 9,
+ "modify_time": "2015-06-28 08:29:46",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/exposejs/expose",
+ "star": 65,
+ "commits": 1100,
+ "modify_time": "2019-07-26 12:19:44",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/daniestevez/free-outernet",
+ "star": 65,
+ "commits": 20,
+ "modify_time": "2018-02-03 09:30:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/d3vzer0/reternal-quickstart",
+ "star": 65,
+ "commits": 142,
+ "modify_time": "2019-09-09 16:47:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cymmetria/strutshoneypot",
+ "star": 65,
+ "commits": 16,
+ "modify_time": "2017-03-24 10:31:28",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/cryptax/dextools",
+ "star": 65,
+ "commits": 20,
+ "modify_time": "2018-07-12 15:40:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ch3k1/squidmagic",
+ "star": 65,
+ "commits": 185,
+ "modify_time": "2018-06-30 20:55:18",
+ "last_release": "v1.5",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cerbo/aws-waf-security-automation",
+ "star": 65,
+ "commits": 6,
+ "modify_time": "2018-10-25 02:01:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bluscreenofjeff/ccdc-scripts",
+ "star": 65,
+ "commits": 10,
+ "modify_time": "2017-08-16 05:40:08",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/blackhacker511/blackworm",
+ "star": 65,
+ "commits": 50,
+ "modify_time": "2019-11-23 02:55:11",
+ "last_release": "6.0",
+ "lang": "Visual Basic .NET"
+ },
+ {
+ "link": "https://github.com/blackarch/sploitctl",
+ "star": 65,
+ "commits": 141,
+ "modify_time": "2019-10-04 19:33:33",
+ "last_release": "\n v3.0.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/beaujeant/pwnadventure3",
+ "star": 65,
+ "commits": 30,
+ "modify_time": "2018-07-09 12:06:58",
+ "last_release": "",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/bastilleresearch/cabletap",
+ "star": 65,
+ "commits": 2,
+ "modify_time": "2017-07-29 22:28:58",
+ "last_release": "",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/basil00/pseudonode",
+ "star": 65,
+ "commits": 45,
+ "modify_time": "2016-02-07 06:54:05",
+ "last_release": "v0.6.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/anbc/andbug",
+ "star": 65,
+ "commits": 177,
+ "modify_time": "2014-01-19 08:38:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/agroce/tstl",
+ "star": 65,
+ "commits": 1622,
+ "modify_time": "2019-11-22 16:04:07",
+ "last_release": "R1.2.25",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/adhdproject/buildkit",
+ "star": 65,
+ "commits": 76,
+ "modify_time": "2018-01-11 00:12:04",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/0xfe/lumen",
+ "star": 65,
+ "commits": 117,
+ "modify_time": "2018-08-19 19:26:27",
+ "last_release": "v0.4.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/bkimminich/it-security-lecture",
+ "star": 64,
+ "commits": 308,
+ "modify_time": "2019-11-27 17:09:14",
+ "last_release": "\n enterjs2019\n ",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/functionclub/memtester",
+ "star": 64,
+ "commits": 3,
+ "modify_time": "2017-02-01 11:12:43",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/feeicn/exif",
+ "star": 64,
+ "commits": 6,
+ "modify_time": "2018-07-03 05:53:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/danielmiessler/caparser",
+ "star": 64,
+ "commits": 7,
+ "modify_time": "2017-04-20 20:22:18",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/bastilleresearch/keyjack",
+ "star": 64,
+ "commits": 1,
+ "modify_time": "2016-07-27 15:28:11",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/helpsystems/sentinel",
+ "star": 64,
+ "commits": 4,
+ "modify_time": "2014-03-12 23:37:57",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/enjoy-digital/pcie_screamer",
+ "star": 64,
+ "commits": 178,
+ "modify_time": "2019-11-29 12:44:20",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/NordicSemiconductor/nRF-Sniffer-for-802.15.4",
+ "star": 64,
+ "commits": 26,
+ "modify_time": "2019-04-30 14:17:45",
+ "last_release": "v0.7.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zenlulz/fasm.net",
+ "star": 64,
+ "commits": 3,
+ "modify_time": "2013-07-10 14:41:52",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/yarox24/attack_monitor",
+ "star": 64,
+ "commits": 8,
+ "modify_time": "2019-04-05 19:07:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xorpd/idsearch",
+ "star": 64,
+ "commits": 60,
+ "modify_time": "2016-11-26 09:45:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xiao70/x70fsd",
+ "star": 64,
+ "commits": 17,
+ "modify_time": "2019-04-23 12:45:00",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/wisec/dominator",
+ "star": 64,
+ "commits": 47,
+ "modify_time": "2012-09-30 10:09:51",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/vysecurity/att-ck_analysis",
+ "star": 64,
+ "commits": 14,
+ "modify_time": "2019-05-16 08:53:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vagnerpilar/windbgtree",
+ "star": 64,
+ "commits": 29,
+ "modify_time": "2018-09-20 18:05:30",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/thesph1nx/rt-101",
+ "star": 64,
+ "commits": 16,
+ "modify_time": "2019-07-31 06:35:52",
+ "last_release": "",
+ "lang": "Visual Basic .NET"
+ },
+ {
+ "link": "https://github.com/th3j0kr/jtb_investigator",
+ "star": 64,
+ "commits": 72,
+ "modify_time": "2018-12-12 22:00:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/team-su/suctf-2019",
+ "star": 64,
+ "commits": 6,
+ "modify_time": "2019-08-24 12:48:59",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/tabacof/adversarial",
+ "star": 64,
+ "commits": 40,
+ "modify_time": "2016-08-02 20:46:06",
+ "last_release": "",
+ "lang": "Fortran"
+ },
+ {
+ "link": "https://github.com/switchbrew/nx-hbexploit300",
+ "star": 64,
+ "commits": 4,
+ "modify_time": "2018-02-22 03:31:23",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/sukaralin/php_code_audit_project",
+ "star": 64,
+ "commits": 27,
+ "modify_time": "2019-02-15 06:15:21",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/snoyberg/markdown",
+ "star": 64,
+ "commits": 148,
+ "modify_time": "2018-09-20 09:07:05",
+ "last_release": "\n markdown-0.1.17.4\n ",
+ "lang": "Haskell"
+ },
+ {
+ "link": "https://github.com/snail007/anytunnel",
+ "star": 64,
+ "commits": 8,
+ "modify_time": "2019-10-29 23:35:09",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/smithclay/faassh",
+ "star": 64,
+ "commits": 24,
+ "modify_time": "2019-04-23 22:46:55",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/skelsec/pykerberoast",
+ "star": 64,
+ "commits": 8,
+ "modify_time": "2018-09-29 18:52:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sindresorhus/p-debounce",
+ "star": 64,
+ "commits": 9,
+ "modify_time": "2019-04-05 07:09:30",
+ "last_release": "v2.1.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/siguza/hsp4",
+ "star": 64,
+ "commits": 10,
+ "modify_time": "2018-02-28 18:34:09",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/sh1n0g1/shinobot",
+ "star": 64,
+ "commits": 26,
+ "modify_time": "2019-08-02 09:03:15",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/serain/netmap.js",
+ "star": 64,
+ "commits": 53,
+ "modify_time": "2018-11-20 13:32:03",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/secdr/sec-ml",
+ "star": 64,
+ "commits": 6,
+ "modify_time": "2017-05-15 15:10:31",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/scy-phy/minicps",
+ "star": 64,
+ "commits": 718,
+ "modify_time": "2018-11-04 08:40:33",
+ "last_release": "v1.1.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/salesforce/bro-sysmon",
+ "star": 64,
+ "commits": 57,
+ "modify_time": "2019-01-30 18:31:51",
+ "last_release": "",
+ "lang": "Zeek"
+ },
+ {
+ "link": "https://github.com/sadprocessor/cypherdog",
+ "star": 64,
+ "commits": 9,
+ "modify_time": "2019-03-26 11:00:41",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/ronangaillard/logitech-mouse",
+ "star": 64,
+ "commits": 21,
+ "modify_time": "2017-01-24 08:52:19",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/rgl/windows-domain-controller-vagrant",
+ "star": 64,
+ "commits": 35,
+ "modify_time": "2019-07-02 20:05:36",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/ralphje/imagemounter",
+ "star": 64,
+ "commits": 373,
+ "modify_time": "2018-09-17 16:03:27",
+ "last_release": "v3.0.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/qwaz/solved-hacking-problem",
+ "star": 64,
+ "commits": 132,
+ "modify_time": "2019-11-10 20:16:56",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/quokkalight/rkduck",
+ "star": 64,
+ "commits": 42,
+ "modify_time": "2016-06-24 11:16:24",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/programa-stic/ropc-llvm",
+ "star": 64,
+ "commits": 2,
+ "modify_time": "2013-10-03 14:37:59",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/pr4jwal/quick-scripts",
+ "star": 64,
+ "commits": 45,
+ "modify_time": "2018-08-25 21:50:51",
+ "last_release": "",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/pinkp4nther/aws-testing-notes",
+ "star": 64,
+ "commits": 16,
+ "modify_time": "2019-05-28 20:01:28",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/phonegapx/airplay",
+ "star": 64,
+ "commits": 4,
+ "modify_time": "2019-03-11 05:52:06",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/phackt/pentest",
+ "star": 64,
+ "commits": 390,
+ "modify_time": "2019-12-02 18:25:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/patrowl/patrowldocs",
+ "star": 64,
+ "commits": 34,
+ "modify_time": "2019-10-23 08:18:45",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/patois/genmc",
+ "star": 64,
+ "commits": 26,
+ "modify_time": "2019-11-23 13:17:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/openitsystem/itops",
+ "star": 64,
+ "commits": 20,
+ "modify_time": "2019-11-22 09:42:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nyx0/tinba",
+ "star": 64,
+ "commits": 3,
+ "modify_time": "2015-02-25 04:55:40",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/nccgroup/xendbg",
+ "star": 64,
+ "commits": 239,
+ "modify_time": "2019-08-12 23:22:05",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/mwleeds/android-malware-analysis",
+ "star": 64,
+ "commits": 120,
+ "modify_time": "2018-10-14 16:29:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mthbernardes/qmkhuehuebr",
+ "star": 64,
+ "commits": 3,
+ "modify_time": "2018-11-29 13:50:14",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/mitchellkrogza/fail2ban-blacklist-jail-for-repeat-offenders-with-perma-extended-banning",
+ "star": 64,
+ "commits": 42,
+ "modify_time": "2019-05-23 15:50:27",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/milesrichardson/docker-nfqueue-scapy",
+ "star": 64,
+ "commits": 5,
+ "modify_time": "2017-03-03 19:45:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mdrights/liveslak",
+ "star": 64,
+ "commits": 537,
+ "modify_time": "2019-09-08 14:05:11",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/mahdisafsafi/univdisasm",
+ "star": 64,
+ "commits": 52,
+ "modify_time": "2019-01-20 21:27:08",
+ "last_release": "",
+ "lang": "Pascal"
+ },
+ {
+ "link": "https://github.com/kasperskylab/vbscriptinternals",
+ "star": 64,
+ "commits": 5,
+ "modify_time": "2018-07-03 14:21:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/k4yt3x/scutum",
+ "star": 64,
+ "commits": 229,
+ "modify_time": "2019-05-05 22:00:02",
+ "last_release": "2.6.7",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/joswr1ght/cowpatty",
+ "star": 64,
+ "commits": 15,
+ "modify_time": "2018-11-30 11:30:06",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/javerous/torchat-mac",
+ "star": 64,
+ "commits": 315,
+ "modify_time": "2019-05-28 19:52:24",
+ "last_release": "version-1.3.2",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/jacksonvd/pwnedpasswordsdll",
+ "star": 64,
+ "commits": 18,
+ "modify_time": "2019-01-23 10:52:02",
+ "last_release": "3.1",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/itskindred/redviper",
+ "star": 64,
+ "commits": 5,
+ "modify_time": "2019-08-08 17:39:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ibrahimbalic/androidrat",
+ "star": 64,
+ "commits": 3,
+ "modify_time": "2013-08-09 02:05:48",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/hiikezoe/android_run_root_shell",
+ "star": 64,
+ "commits": 85,
+ "modify_time": "2013-06-20 09:32:50",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hamz-a/jeb2frida",
+ "star": 64,
+ "commits": 4,
+ "modify_time": "2019-10-06 22:04:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/halit/isip",
+ "star": 64,
+ "commits": 2,
+ "modify_time": "2015-12-17 12:24:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/googleinurl/routerhunterbr",
+ "star": 64,
+ "commits": 14,
+ "modify_time": "2015-11-19 22:12:47",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/gdbinit/pydbg64",
+ "star": 64,
+ "commits": 16,
+ "modify_time": "2012-03-12 00:38:01",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/fnmsd/chunkedhttpadapter",
+ "star": 64,
+ "commits": 4,
+ "modify_time": "2019-01-31 09:23:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/flankerhqd/bindump4j",
+ "star": 64,
+ "commits": 6,
+ "modify_time": "2019-09-28 15:11:51",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/falcon-lnhg/mwebfp",
+ "star": 64,
+ "commits": 16,
+ "modify_time": "2014-09-28 21:15:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/evilsocket/sum",
+ "star": 64,
+ "commits": 340,
+ "modify_time": "2019-11-27 13:39:13",
+ "last_release": "v1.2.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/evilsocket/fang",
+ "star": 64,
+ "commits": 22,
+ "modify_time": "2016-07-15 09:55:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dvdandroid/xposedmoduletemplate",
+ "star": 64,
+ "commits": 8,
+ "modify_time": "2019-03-10 20:57:17",
+ "last_release": "",
+ "lang": "FreeMarker"
+ },
+ {
+ "link": "https://github.com/dsnezhkov/sshorty",
+ "star": 64,
+ "commits": 34,
+ "modify_time": "2019-04-11 23:49:34",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/darkquasar/wmi_persistence",
+ "star": 64,
+ "commits": 13,
+ "modify_time": "2017-10-06 01:29:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/daniellerch/aletheia",
+ "star": 64,
+ "commits": 214,
+ "modify_time": "2019-11-26 19:09:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/da667/667s_shitlist",
+ "star": 64,
+ "commits": 20,
+ "modify_time": "2016-07-11 19:19:57",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/coolervoid/payloadmask",
+ "star": 64,
+ "commits": 16,
+ "modify_time": "2017-05-15 19:48:31",
+ "last_release": "0.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cdisselkoen/pitchfork",
+ "star": 64,
+ "commits": 162,
+ "modify_time": "2019-05-30 05:43:50",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/c0ny1/httpheadmodifer",
+ "star": 64,
+ "commits": 7,
+ "modify_time": "2018-10-10 15:34:48",
+ "last_release": "v0.1",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/bskari/sqlassie",
+ "star": 64,
+ "commits": 77,
+ "modify_time": "2012-06-30 21:45:37",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/bediger4000/php-malware-analysis",
+ "star": 64,
+ "commits": 615,
+ "modify_time": "2019-12-04 17:29:04",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/beardypig/ghidra-emotionengine",
+ "star": 64,
+ "commits": 117,
+ "modify_time": "2019-12-07 11:47:33",
+ "last_release": "v1.4.1",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/arlolra/meek",
+ "star": 64,
+ "commits": 196,
+ "modify_time": "2014-09-20 06:39:37",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/aress31/swurg",
+ "star": 64,
+ "commits": 126,
+ "modify_time": "2019-09-23 22:10:10",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/anon-exploiter/suid3num",
+ "star": 64,
+ "commits": 22,
+ "modify_time": "2019-11-27 09:39:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/angr/angr-dev",
+ "star": 64,
+ "commits": 448,
+ "modify_time": "2019-12-06 19:08:35",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/andrew-morris/stupid_malware",
+ "star": 64,
+ "commits": 4,
+ "modify_time": "2014-03-05 19:10:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/91yun/uml",
+ "star": 64,
+ "commits": 59,
+ "modify_time": "2017-05-09 15:24:03",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/0c34/govwa",
+ "star": 64,
+ "commits": 138,
+ "modify_time": "2018-01-04 12:56:29",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/worawit/cve-2019-0708",
+ "star": 63,
+ "commits": 4,
+ "modify_time": "2019-12-08 10:09:42",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/meituan-dianping/lyrebird-android",
+ "star": 63,
+ "commits": 44,
+ "modify_time": "2019-12-03 07:36:43",
+ "last_release": "v0.5.4",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/adamlaurie/sjcam",
+ "star": 63,
+ "commits": 23,
+ "modify_time": "2018-05-04 14:40:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zyantific/remodel",
+ "star": 63,
+ "commits": 91,
+ "modify_time": "2016-02-09 21:24:44",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/zzhouhe/pg1903",
+ "star": 63,
+ "commits": 7,
+ "modify_time": "2019-10-01 15:47:34",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/misp/misp-maltego",
+ "star": 63,
+ "commits": 81,
+ "modify_time": "2019-11-06 15:57:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/FirebaseExtended/unity-solutions",
+ "star": 63,
+ "commits": 42,
+ "modify_time": "2019-11-18 23:29:14",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/Freescale/u-boot-fslc",
+ "star": 63,
+ "commits": 52129,
+ "modify_time": "2018-09-28 13:26:36",
+ "last_release": "\n v2019.10\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/lifting-bits/fennec",
+ "star": 63,
+ "commits": 91,
+ "modify_time": "2019-08-06 21:10:11",
+ "last_release": "",
+ "lang": "LLVM"
+ },
+ {
+ "link": "https://github.com/crytic/etheno",
+ "star": 63,
+ "commits": 321,
+ "modify_time": "2019-12-03 11:58:41",
+ "last_release": "v0.2.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zyantific/zyan-hook-engine",
+ "star": 63,
+ "commits": 33,
+ "modify_time": "2019-10-24 14:10:13",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/zhongzhi107/raspberry-pi-tutorials",
+ "star": 63,
+ "commits": 7,
+ "modify_time": "2018-12-07 03:47:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zed-0xff/ctf",
+ "star": 63,
+ "commits": 61,
+ "modify_time": "2016-11-09 16:25:02",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/yuawn/hitcon-badge-2019",
+ "star": 63,
+ "commits": 10,
+ "modify_time": "2019-08-28 14:49:13",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/yryz/httpproxy",
+ "star": 63,
+ "commits": 15,
+ "modify_time": "2019-07-25 14:01:45",
+ "last_release": "v1.2",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/yara-rules/yara-endpoint",
+ "star": 63,
+ "commits": 39,
+ "modify_time": "2018-03-13 21:42:00",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/xorond/sudo-snooper",
+ "star": 63,
+ "commits": 17,
+ "modify_time": "2016-10-12 20:34:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xnffdd/proxypool",
+ "star": 63,
+ "commits": 27,
+ "modify_time": "2019-03-03 13:58:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wazehell/metateta",
+ "star": 63,
+ "commits": 5,
+ "modify_time": "2018-07-02 09:38:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tiaotiaolong/sec_interview_know_list",
+ "star": 63,
+ "commits": 31,
+ "modify_time": "2019-12-05 08:36:21",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/tevora-threat/powerview3-aggressor",
+ "star": 63,
+ "commits": 1,
+ "modify_time": "2018-07-24 21:51:44",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/sysopfb/malware_decoders",
+ "star": 63,
+ "commits": 8,
+ "modify_time": "2019-06-18 18:33:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sqall01/zwoelf",
+ "star": 63,
+ "commits": 78,
+ "modify_time": "2014-10-24 11:07:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sethsec/pycodeinjection",
+ "star": 63,
+ "commits": 16,
+ "modify_time": "2017-11-09 02:07:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/seemoo-lab/bcm-public",
+ "star": 63,
+ "commits": 442,
+ "modify_time": "2016-10-24 13:41:36",
+ "last_release": "v1.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/rvrsh3ll/sharpfruit",
+ "star": 63,
+ "commits": 2,
+ "modify_time": "2018-11-05 14:14:10",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/plashchynski/viewssld",
+ "star": 63,
+ "commits": 30,
+ "modify_time": "2017-08-13 21:29:29",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/pibigstar/parsevip",
+ "star": 63,
+ "commits": 53,
+ "modify_time": "2019-08-15 14:09:48",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/paulsec/spipscan",
+ "star": 63,
+ "commits": 69,
+ "modify_time": "2014-08-29 11:49:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/paulsec/metasearch-public",
+ "star": 63,
+ "commits": 9,
+ "modify_time": "2018-05-31 09:36:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/palmerc/securewebsockets",
+ "star": 63,
+ "commits": 44,
+ "modify_time": "2015-12-12 15:43:33",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/owasp/owaspwebgoatphp",
+ "star": 63,
+ "commits": 304,
+ "modify_time": "2019-07-08 09:08:41",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/owasp/appsec-browser-bundle",
+ "star": 63,
+ "commits": 15,
+ "modify_time": "2013-12-24 09:14:50",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/ophirharpaz/patched-minesweeper",
+ "star": 63,
+ "commits": 5,
+ "modify_time": "2018-03-29 07:40:39",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/opensecurityresearch/fsexploitme",
+ "star": 63,
+ "commits": 4,
+ "modify_time": "2014-12-05 14:34:59",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/nodesocket/cryptr",
+ "star": 63,
+ "commits": 21,
+ "modify_time": "2019-06-30 20:12:15",
+ "last_release": "2.1.1",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/nihilus/idastealth",
+ "star": 63,
+ "commits": 10,
+ "modify_time": "2014-09-14 00:32:14",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/nicksanzotta/wifisuite",
+ "star": 63,
+ "commits": 121,
+ "modify_time": "2018-10-22 00:24:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/netxfly/nginx_lua_security",
+ "star": 63,
+ "commits": 17,
+ "modify_time": "2017-05-04 08:13:39",
+ "last_release": "",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/nccgroup/berserko",
+ "star": 63,
+ "commits": 60,
+ "modify_time": "2019-08-12 09:44:30",
+ "last_release": "v1.1",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/mrrraou/waithax",
+ "star": 63,
+ "commits": 17,
+ "modify_time": "2017-01-07 13:15:24",
+ "last_release": "v1.1.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/mephux/ruby-nessus",
+ "star": 63,
+ "commits": 273,
+ "modify_time": "2019-10-21 19:59:07",
+ "last_release": "v1.2.0",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/maldiohead/cve-2019-6207",
+ "star": 63,
+ "commits": 16,
+ "modify_time": "2019-11-21 05:57:37",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/m-pays/m-cpuminer-v2",
+ "star": 63,
+ "commits": 3,
+ "modify_time": "2015-10-14 21:16:59",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/luin/serialize",
+ "star": 63,
+ "commits": 15,
+ "modify_time": "2017-06-04 12:42:13",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/luciusbono/packer-windows10",
+ "star": 63,
+ "commits": 60,
+ "modify_time": "2018-12-22 01:05:15",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/loolzec/asu",
+ "star": 63,
+ "commits": 457,
+ "modify_time": "2019-07-10 13:59:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/livingsocial/bundler-patch",
+ "star": 63,
+ "commits": 207,
+ "modify_time": "2019-01-11 06:07:51",
+ "last_release": "\n v1.2.0\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/konstantinberlin/malware-windows-audit-log-detection",
+ "star": 63,
+ "commits": 23,
+ "modify_time": "2015-09-03 13:18:13",
+ "last_release": "",
+ "lang": "MATLAB"
+ },
+ {
+ "link": "https://github.com/jvns/zine-formatter",
+ "star": 63,
+ "commits": 11,
+ "modify_time": "2019-06-03 03:59:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/josephlhall/dc25-votingvillage-report",
+ "star": 63,
+ "commits": 79,
+ "modify_time": "2018-05-09 18:43:23",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/jonoberheide/ksymhunter",
+ "star": 63,
+ "commits": 17,
+ "modify_time": "2011-03-28 04:20:11",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/iotsec/z3sec",
+ "star": 63,
+ "commits": 32,
+ "modify_time": "2017-12-22 23:39:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ioactive/fuzzndis",
+ "star": 63,
+ "commits": 6,
+ "modify_time": "2018-09-29 00:12:09",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/inndy/ctf-writeup",
+ "star": 63,
+ "commits": 31,
+ "modify_time": "2018-11-09 17:43:18",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hurley25/sniffer",
+ "star": 63,
+ "commits": 62,
+ "modify_time": "2013-02-24 13:47:37",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/hannob/apache-uaf",
+ "star": 63,
+ "commits": 3,
+ "modify_time": "2019-01-21 08:04:27",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/gr4ym4ntx/attackintel",
+ "star": 63,
+ "commits": 19,
+ "modify_time": "2018-11-27 04:28:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/georgeargyros/snowflake",
+ "star": 63,
+ "commits": 10,
+ "modify_time": "2017-08-01 13:50:34",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/gbaptista/luminous",
+ "star": 63,
+ "commits": 324,
+ "modify_time": "2019-09-14 16:56:31",
+ "last_release": "0.0.28",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/funkmyster/awesome-cloud-security",
+ "star": 63,
+ "commits": 10,
+ "modify_time": "2017-06-06 11:43:25",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/floyd-fuh/crass",
+ "star": 63,
+ "commits": 38,
+ "modify_time": "2018-12-05 17:20:44",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/faf0/thinkpad-scripts",
+ "star": 63,
+ "commits": 25,
+ "modify_time": "2018-01-26 05:12:43",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/esser420/eviltwinframework",
+ "star": 63,
+ "commits": 134,
+ "modify_time": "2017-11-07 18:57:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/emadshanab/facebook-bug-bounty-writeups",
+ "star": 63,
+ "commits": 8,
+ "modify_time": "2019-04-20 21:32:41",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/dorneanu/ixkeylog",
+ "star": 63,
+ "commits": 20,
+ "modify_time": "2019-09-02 07:44:22",
+ "last_release": "\n v0.1.1\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/dodola/fbhookfork",
+ "star": 63,
+ "commits": 23,
+ "modify_time": "2018-10-31 11:58:08",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/crescentvenus/walb",
+ "star": 63,
+ "commits": 69,
+ "modify_time": "2018-09-17 01:01:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/codelion/gramtest",
+ "star": 63,
+ "commits": 112,
+ "modify_time": "2018-05-20 02:35:31",
+ "last_release": "v0.2.2",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/chhsiao90/nitmproxy",
+ "star": 63,
+ "commits": 25,
+ "modify_time": "2017-03-29 06:50:33",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/carmaa/interrogate",
+ "star": 63,
+ "commits": 5,
+ "modify_time": "2019-10-06 20:20:27",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/c01db33f/concolica",
+ "star": 63,
+ "commits": 22,
+ "modify_time": "2014-11-13 05:42:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/breakingmalwareresearch/eleven",
+ "star": 63,
+ "commits": 4,
+ "modify_time": "2016-11-24 15:32:59",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/botherder/snoopdigg",
+ "star": 63,
+ "commits": 57,
+ "modify_time": "2019-07-23 20:51:36",
+ "last_release": "v1.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/bcapptain/dockernymous",
+ "star": 63,
+ "commits": 26,
+ "modify_time": "2018-10-14 19:13:09",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/argilo/gr-elster",
+ "star": 63,
+ "commits": 76,
+ "modify_time": "2019-09-16 04:09:40",
+ "last_release": "",
+ "lang": "CMake"
+ },
+ {
+ "link": "https://github.com/archlinux/arch-security-tracker",
+ "star": 63,
+ "commits": 442,
+ "modify_time": "2019-10-15 21:54:09",
+ "last_release": "0.9",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/antoinet/valora",
+ "star": 63,
+ "commits": 5,
+ "modify_time": "2017-08-04 22:43:19",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/aliasrobotics/aztarna",
+ "star": 63,
+ "commits": 278,
+ "modify_time": "2019-11-22 10:10:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/adulau/ssldump",
+ "star": 63,
+ "commits": 109,
+ "modify_time": "2019-09-22 15:39:59",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/abenkhadra/spedi",
+ "star": 63,
+ "commits": 114,
+ "modify_time": "2017-09-11 08:39:21",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/0x90/vpn-arsenal",
+ "star": 63,
+ "commits": 5,
+ "modify_time": "2017-06-18 09:43:41",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/harleo/asnip",
+ "star": 62,
+ "commits": 7,
+ "modify_time": "2019-11-26 20:17:05",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/ga1ois/bluehat-2019-seattle",
+ "star": 62,
+ "commits": 3,
+ "modify_time": "2019-12-02 20:21:10",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/payloadbox/xxe-injection-payload-list",
+ "star": 62,
+ "commits": 10,
+ "modify_time": "2019-11-23 08:14:08",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/draios/sysdigcloud-kubernetes",
+ "star": 62,
+ "commits": 561,
+ "modify_time": "2019-11-12 18:00:10",
+ "last_release": "2.5.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/taviso/dbusmap",
+ "star": 62,
+ "commits": 16,
+ "modify_time": "2019-11-22 22:42:53",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/intel/ad-rss-lib",
+ "star": 62,
+ "commits": 87,
+ "modify_time": "2019-12-03 09:46:21",
+ "last_release": "v1.6.0",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/tuter/monmob",
+ "star": 62,
+ "commits": 14,
+ "modify_time": "2015-12-04 17:34:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vysecurity/MaiInt",
+ "star": 62,
+ "commits": 6,
+ "modify_time": "2018-03-08 18:31:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/shmilylty/Sec-Box",
+ "star": 62,
+ "commits": 4,
+ "modify_time": "2017-03-30 01:36:40",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/weekEND-hub/pentest-tools",
+ "star": 62,
+ "commits": 10,
+ "modify_time": "2019-03-24 11:31:30",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/0e85dc6eaf/CTF-Writeups",
+ "star": 62,
+ "commits": 107,
+ "modify_time": "2019-09-28 16:07:57",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/avicoder/spoodle",
+ "star": 62,
+ "commits": 18,
+ "modify_time": "2018-10-31 15:18:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/crytic/pyevmasm",
+ "star": 62,
+ "commits": 74,
+ "modify_time": "2019-08-06 17:53:59",
+ "last_release": "0.2.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zigzagsecurity/survival-guide-radare2",
+ "star": 62,
+ "commits": 59,
+ "modify_time": "2019-03-17 19:11:04",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/yukinoshita47/pentest-tools-auto-installer",
+ "star": 62,
+ "commits": 23,
+ "modify_time": "2017-10-30 02:14:34",
+ "last_release": "v.1.2",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/yifanlu/psxperia",
+ "star": 62,
+ "commits": 20,
+ "modify_time": "2011-11-28 23:37:14",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/xipiter/idiotic",
+ "star": 62,
+ "commits": 7,
+ "modify_time": "2015-03-27 18:43:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wlach/orangutan",
+ "star": 62,
+ "commits": 96,
+ "modify_time": "2017-09-21 11:16:08",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/wintellect/procmondebugoutput",
+ "star": 62,
+ "commits": 30,
+ "modify_time": "2015-07-31 15:25:05",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/vnik5287/kaslr_tsx_bypass",
+ "star": 62,
+ "commits": 3,
+ "modify_time": "2017-10-15 23:28:29",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/tyranid/zeronights2017",
+ "star": 62,
+ "commits": 2,
+ "modify_time": "2017-11-19 21:45:40",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/tyranid/windows-attacksurface-workshop",
+ "star": 62,
+ "commits": 1,
+ "modify_time": "2018-08-07 03:34:16",
+ "last_release": "20190501",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/tony1016/burplogfilter",
+ "star": 62,
+ "commits": 7,
+ "modify_time": "2016-05-26 01:41:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tengzhangchao/portscan",
+ "star": 62,
+ "commits": 4,
+ "modify_time": "2018-05-21 07:41:21",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/swizzlez/invoke-enumsecuritytools",
+ "star": 62,
+ "commits": 13,
+ "modify_time": "2019-05-01 02:23:19",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/shuax/locateip",
+ "star": 62,
+ "commits": 60,
+ "modify_time": "2018-09-15 05:48:34",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/scipag/httprecon-nse",
+ "star": 62,
+ "commits": 5,
+ "modify_time": "2017-09-29 07:29:59",
+ "last_release": "",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/santandersecurityresearch/asvs",
+ "star": 62,
+ "commits": 32,
+ "modify_time": "2019-10-29 13:38:28",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/rich5/harness",
+ "star": 62,
+ "commits": 19,
+ "modify_time": "2016-01-21 19:10:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rhtconsulting/cfme-rhconsulting-scripts",
+ "star": 62,
+ "commits": 238,
+ "modify_time": "2019-07-24 13:44:13",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/psconfeu/2019",
+ "star": 62,
+ "commits": 123,
+ "modify_time": "2019-06-26 13:24:37",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/poorbillionaire/windows-prefetch-parser",
+ "star": 62,
+ "commits": 81,
+ "modify_time": "2016-05-01 05:45:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pklink/ppma",
+ "star": 62,
+ "commits": 222,
+ "modify_time": "2017-10-02 12:47:12",
+ "last_release": "0.6.0",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/pinnace/burp-jwt-fuzzhelper-extension",
+ "star": 62,
+ "commits": 79,
+ "modify_time": "2019-07-29 21:00:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/paranoidninja/scriptdotsh-malwaredevelopment",
+ "star": 62,
+ "commits": 8,
+ "modify_time": "2018-11-14 05:15:28",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/openprovider/whoisd",
+ "star": 62,
+ "commits": 229,
+ "modify_time": "2017-10-23 23:55:23",
+ "last_release": "\n 0.5.0\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/nullhypothesis/scramblesuit",
+ "star": 62,
+ "commits": 460,
+ "modify_time": "2014-07-12 03:53:53",
+ "last_release": "\n 2014.01.b\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nccgroup/cachegrab",
+ "star": 62,
+ "commits": 1,
+ "modify_time": "2018-01-04 00:08:17",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/moldabekov/virusgotal",
+ "star": 62,
+ "commits": 60,
+ "modify_time": "2019-10-17 10:17:25",
+ "last_release": "1.0.2",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/misp/misp-docker",
+ "star": 62,
+ "commits": 85,
+ "modify_time": "2019-11-15 14:24:56",
+ "last_release": "",
+ "lang": "Dockerfile"
+ },
+ {
+ "link": "https://github.com/merlijnwajer/tracy",
+ "star": 62,
+ "commits": 596,
+ "modify_time": "2019-05-10 12:35:09",
+ "last_release": "\n tracy-0.08\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/luoyanbei/testhookzz",
+ "star": 62,
+ "commits": 13,
+ "modify_time": "2019-05-10 03:28:55",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/lclevy/unarcrypto",
+ "star": 62,
+ "commits": 14,
+ "modify_time": "2018-11-10 21:17:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lbarman/kali-tools",
+ "star": 62,
+ "commits": 53,
+ "modify_time": "2018-01-20 16:30:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kutim/docker-security",
+ "star": 62,
+ "commits": 9,
+ "modify_time": "2018-06-27 07:29:43",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/knqyf263/gost",
+ "star": 62,
+ "commits": 43,
+ "modify_time": "2019-09-30 05:24:44",
+ "last_release": "\n v0.1.2\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/kingsabri/cve-in-ruby",
+ "star": 62,
+ "commits": 78,
+ "modify_time": "2018-11-26 07:23:04",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/joshuamart/autorecon",
+ "star": 62,
+ "commits": 39,
+ "modify_time": "2019-10-31 07:57:13",
+ "last_release": "v2.1",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/johnsonz/go-sni-detector",
+ "star": 62,
+ "commits": 56,
+ "modify_time": "2017-08-11 04:15:38",
+ "last_release": "v2.3.6",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/john-lin/docker-snort",
+ "star": 62,
+ "commits": 40,
+ "modify_time": "2019-04-29 14:56:38",
+ "last_release": "",
+ "lang": "Dockerfile"
+ },
+ {
+ "link": "https://github.com/jiayy/lkm-rootkit",
+ "star": 62,
+ "commits": 2,
+ "modify_time": "2014-12-30 09:47:05",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jiaoxianjun/rtl-sdr-lte",
+ "star": 62,
+ "commits": 93,
+ "modify_time": "2014-10-24 15:33:09",
+ "last_release": "v0.0.5",
+ "lang": "MATLAB"
+ },
+ {
+ "link": "https://github.com/jaksi/awslog",
+ "star": 62,
+ "commits": 18,
+ "modify_time": "2019-03-22 15:06:26",
+ "last_release": "\n v0.1.6\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hugsy/windbg_js_scripts",
+ "star": 62,
+ "commits": 85,
+ "modify_time": "2019-11-14 03:16:12",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/hexhive/malwash",
+ "star": 62,
+ "commits": 7,
+ "modify_time": "2016-08-09 06:52:24",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/hackinglab/mobilesf",
+ "star": 62,
+ "commits": 16,
+ "modify_time": "2016-07-05 16:06:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ha3mrx/hacking",
+ "star": 62,
+ "commits": 16,
+ "modify_time": "2018-07-02 22:01:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gentoo/libressl",
+ "star": 62,
+ "commits": 758,
+ "modify_time": "2019-11-03 03:37:19",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/gdbinit/osx_boubou",
+ "star": 62,
+ "commits": 2,
+ "modify_time": "2013-03-05 01:36:37",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/fs0c131y/samsunglocker",
+ "star": 62,
+ "commits": 2,
+ "modify_time": "2019-05-15 07:57:55",
+ "last_release": "",
+ "lang": "Kotlin"
+ },
+ {
+ "link": "https://github.com/frky/scat",
+ "star": 62,
+ "commits": 315,
+ "modify_time": "2017-08-19 02:37:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fare9/anbu",
+ "star": 62,
+ "commits": 9,
+ "modify_time": "2019-05-23 16:21:48",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/explife0011/cve-2019-0803",
+ "star": 62,
+ "commits": 3,
+ "modify_time": "2019-05-17 10:53:20",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/engmaher/baf",
+ "star": 62,
+ "commits": 1,
+ "modify_time": "2019-05-02 15:15:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/emptymonkey/drinkme",
+ "star": 62,
+ "commits": 19,
+ "modify_time": "2018-10-14 18:44:32",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/drduh/pc-engines-apu-router-guide",
+ "star": 62,
+ "commits": 47,
+ "modify_time": "2019-11-20 01:55:59",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/divineomega/laravel-password-exposed-validation-rule",
+ "star": 62,
+ "commits": 43,
+ "modify_time": "2019-09-06 11:16:03",
+ "last_release": "v2.1.0",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/developerkunal/converto",
+ "star": 62,
+ "commits": 38,
+ "modify_time": "2019-08-11 06:49:10",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/deepdivesec/gitmad",
+ "star": 62,
+ "commits": 50,
+ "modify_time": "2019-11-16 21:33:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/darm64/xnu",
+ "star": 62,
+ "commits": 112,
+ "modify_time": "2018-12-13 00:18:09",
+ "last_release": "\n xnu-4903.221.2\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/curiousdannii/ifvms.js",
+ "star": 62,
+ "commits": 166,
+ "modify_time": "2019-11-16 22:54:50",
+ "last_release": "v1.1.3",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/cosasdepuma/securitynotfound",
+ "star": 62,
+ "commits": 42,
+ "modify_time": "2019-10-11 23:43:26",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/cn-uofbasel/ccn-lite",
+ "star": 62,
+ "commits": 3279,
+ "modify_time": "2019-11-28 14:34:45",
+ "last_release": "2.0.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cmatthewbrooks/r2kit",
+ "star": 62,
+ "commits": 96,
+ "modify_time": "2019-01-10 00:48:17",
+ "last_release": "1.1",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/catalyst256/myjunk",
+ "star": 62,
+ "commits": 37,
+ "modify_time": "2019-06-10 09:52:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/calebwhiting/java-asm-obfuscator",
+ "star": 62,
+ "commits": 65,
+ "modify_time": "2017-12-04 20:25:27",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/auth0/webtask-scripts",
+ "star": 62,
+ "commits": 155,
+ "modify_time": "2017-09-20 17:02:24",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/andy10101/apksecurityanalysis",
+ "star": 62,
+ "commits": 14,
+ "modify_time": "2019-05-10 11:33:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/agustingianni/retools",
+ "star": 62,
+ "commits": 553,
+ "modify_time": "2017-08-13 21:15:53",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/9aylas/shortcut-payload-generator",
+ "star": 62,
+ "commits": 12,
+ "modify_time": "2018-02-06 22:15:54",
+ "last_release": "",
+ "lang": "AutoIt"
+ },
+ {
+ "link": "https://github.com/3lackrush/poc-bank",
+ "star": 62,
+ "commits": 60,
+ "modify_time": "2019-03-25 03:19:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/3gstudent/bitsadminexec",
+ "star": 62,
+ "commits": 11,
+ "modify_time": "2017-07-18 00:56:36",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://bitbucket.org/cse-assemblyline/assemblyline",
+ "star": 62,
+ "commits": null,
+ "modify_time": "2019-02-05 14:31:22.915000",
+ "last_release": "",
+ "lang": "python"
+ },
+ {
+ "link": "https://github.com/byt3bl33d3r/dhcpshock",
+ "star": 61,
+ "commits": 4,
+ "modify_time": "2014-09-30 20:48:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wtsxdev/fuzzing-resources",
+ "star": 61,
+ "commits": 5,
+ "modify_time": "2017-12-01 20:54:34",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/dafthack/rdpspray",
+ "star": 61,
+ "commits": 2,
+ "modify_time": "2018-10-12 18:31:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/project-imas/securefoundation",
+ "star": 61,
+ "commits": 104,
+ "modify_time": "2016-01-19 21:51:43",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/chroblert/domainweakpasswdcheck",
+ "star": 61,
+ "commits": 28,
+ "modify_time": "2019-12-04 01:03:10",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hacker0x01/docs.hackerone.com",
+ "star": 61,
+ "commits": 2212,
+ "modify_time": "2019-12-05 23:51:48",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/gushmazuko/winbypass",
+ "star": 61,
+ "commits": 58,
+ "modify_time": "2019-04-14 23:29:48",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/gat3way/airpirate",
+ "star": 61,
+ "commits": 15,
+ "modify_time": "2014-05-03 21:08:10",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/joshvillbrandt/wireless",
+ "star": 61,
+ "commits": 42,
+ "modify_time": "2019-06-27 23:59:55",
+ "last_release": "\n v0.3.3\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/misinfosecproject/amitt_framework",
+ "star": 61,
+ "commits": 27,
+ "modify_time": "2019-10-16 03:06:53",
+ "last_release": "",
+ "lang": "Jupyter Notebook"
+ },
+ {
+ "link": "https://github.com/EnableSecurity/Webapp-Exploit-Payloads",
+ "star": 61,
+ "commits": 72,
+ "modify_time": "2013-04-24 12:21:04",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/imfht/ScanSql",
+ "star": 61,
+ "commits": 47,
+ "modify_time": "2018-12-17 03:14:13",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/m4lv0id/LARE",
+ "star": 61,
+ "commits": 4,
+ "modify_time": "2017-06-16 08:02:08",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/mIcHyAmRaNe/wso-webshell",
+ "star": 61,
+ "commits": 24,
+ "modify_time": "2019-05-01 21:28:12",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/feexd/vbg",
+ "star": 61,
+ "commits": 3,
+ "modify_time": "2018-03-13 21:40:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/DanMcInerney/msfbot",
+ "star": 61,
+ "commits": 34,
+ "modify_time": "2018-10-16 20:09:00",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/praetorian-code/epictreasure",
+ "star": 61,
+ "commits": 22,
+ "modify_time": "2016-03-09 22:22:58",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/zhuowei/qemu",
+ "star": 61,
+ "commits": 62974,
+ "modify_time": "2018-07-21 15:34:25",
+ "last_release": "\n v2.11.2\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ysocorp/koa2-ratelimit",
+ "star": 61,
+ "commits": 50,
+ "modify_time": "2019-06-08 13:03:11",
+ "last_release": "v0.9.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/yelp/casper",
+ "star": 61,
+ "commits": 126,
+ "modify_time": "2019-11-12 20:10:36",
+ "last_release": "",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/yassergersy/sub6",
+ "star": 61,
+ "commits": null,
+ "modify_time": "2018-02-03 17:09:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/yajs/nikpeviewer",
+ "star": 61,
+ "commits": 7,
+ "modify_time": "2019-04-19 08:13:32",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/xlogicx/m2elf",
+ "star": 61,
+ "commits": 44,
+ "modify_time": "2017-11-16 23:06:09",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/wjpdeveloper/my-action-github",
+ "star": 61,
+ "commits": 7,
+ "modify_time": "2018-09-21 01:23:27",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/waffles-2/sambacry",
+ "star": 61,
+ "commits": 3,
+ "modify_time": "2017-05-26 07:43:02",
+ "last_release": "",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/vs4vijay/swissarmypi",
+ "star": 61,
+ "commits": 24,
+ "modify_time": "2019-05-20 07:15:27",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/veil-framework/veil-ordnance",
+ "star": 61,
+ "commits": 23,
+ "modify_time": "2015-09-15 14:41:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/treussart/probemanager",
+ "star": 61,
+ "commits": 1126,
+ "modify_time": "2019-04-10 04:14:39",
+ "last_release": "v1.2.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/trailofbits/deceptiveidn",
+ "star": 61,
+ "commits": 7,
+ "modify_time": "2017-05-08 13:58:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tobaljackson/2017-sit-re-presentation",
+ "star": 61,
+ "commits": 3,
+ "modify_time": "2018-01-30 16:26:55",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/tenable/posh-nessus",
+ "star": 61,
+ "commits": 73,
+ "modify_time": "2018-01-09 12:54:16",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/tandasat/debuglogger",
+ "star": 61,
+ "commits": 4,
+ "modify_time": "2018-07-23 23:42:01",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/t-vk/memory-hacking-class",
+ "star": 61,
+ "commits": 3,
+ "modify_time": "2016-05-18 12:27:14",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/syss-research/radio-hackbox",
+ "star": 61,
+ "commits": 12,
+ "modify_time": "2017-03-24 15:19:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sysinsider/usbtracker",
+ "star": 61,
+ "commits": 23,
+ "modify_time": "2015-08-13 17:47:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/synestraa/highcall-library",
+ "star": 61,
+ "commits": 60,
+ "modify_time": "2018-07-09 18:34:37",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/strozfriedberg/ntfs-linker",
+ "star": 61,
+ "commits": 228,
+ "modify_time": "2016-03-03 19:12:57",
+ "last_release": "v0.1.1",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/srounet/pymem",
+ "star": 61,
+ "commits": 101,
+ "modify_time": "2018-10-03 19:17:33",
+ "last_release": "\n 0.3\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sroberts/hubot-vtr-scripts",
+ "star": 61,
+ "commits": 480,
+ "modify_time": "2015-01-22 16:36:29",
+ "last_release": "",
+ "lang": "CoffeeScript"
+ },
+ {
+ "link": "https://github.com/smaash/fuckshitup",
+ "star": 61,
+ "commits": 9,
+ "modify_time": "2015-05-07 10:00:57",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/sha0/winvblock",
+ "star": 61,
+ "commits": 959,
+ "modify_time": "2016-01-25 00:31:00",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/secretsquirrel/backdoor-pyc",
+ "star": 61,
+ "commits": 7,
+ "modify_time": "2015-11-10 17:10:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/samyk/awesome-vehicle-security",
+ "star": 61,
+ "commits": 34,
+ "modify_time": "2016-07-29 04:06:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rickhe/rhwechat",
+ "star": 61,
+ "commits": 28,
+ "modify_time": "2017-10-12 02:33:27",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/pimps/cve-2018-7600",
+ "star": 61,
+ "commits": 12,
+ "modify_time": "2018-04-26 15:40:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pfalcon/awesome-linux-android-hacking",
+ "star": 61,
+ "commits": 16,
+ "modify_time": "2018-10-20 10:46:17",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/payatu/cve-2015-6086",
+ "star": 61,
+ "commits": 5,
+ "modify_time": "2016-04-22 06:42:35",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/pakt/decv",
+ "star": 61,
+ "commits": 2,
+ "modify_time": "2012-10-03 15:38:39",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/oowoodone/vmp_odplugin",
+ "star": 61,
+ "commits": 6,
+ "modify_time": "2016-04-16 01:39:23",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/oalabs/pyiatrebuild",
+ "star": 61,
+ "commits": 12,
+ "modify_time": "2018-02-12 05:19:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/null--/graviton",
+ "star": 61,
+ "commits": 129,
+ "modify_time": "2015-11-03 12:57:08",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/nanopool/claymore-xmr-cpu-miner",
+ "star": 61,
+ "commits": 3,
+ "modify_time": "2017-01-11 16:13:17",
+ "last_release": "v4.0",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/n00py/post-ex",
+ "star": 61,
+ "commits": 56,
+ "modify_time": "2017-04-12 19:46:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mwgg/passera",
+ "star": 61,
+ "commits": 82,
+ "modify_time": "2018-03-13 07:05:21",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/michenriksen/bucketlist",
+ "star": 61,
+ "commits": 5,
+ "modify_time": "2017-07-26 13:54:29",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/michael-yip/maltegovt",
+ "star": 61,
+ "commits": 43,
+ "modify_time": "2015-11-29 15:41:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mattifestation/pocsubjectinterfacepackage",
+ "star": 61,
+ "commits": 4,
+ "modify_time": "2018-01-07 20:27:47",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/maldevel/driver-loader",
+ "star": 61,
+ "commits": 18,
+ "modify_time": "2017-03-18 13:58:08",
+ "last_release": "v1.0",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/lijiejie/struts2_045_scan",
+ "star": 61,
+ "commits": 5,
+ "modify_time": "2017-06-03 14:47:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lesnuages/go-execute-assembly",
+ "star": 61,
+ "commits": 15,
+ "modify_time": "2019-03-22 16:09:13",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/kevthehermit/yarapcap",
+ "star": 61,
+ "commits": 7,
+ "modify_time": "2013-07-29 20:11:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/josue87/boomer",
+ "star": 61,
+ "commits": 72,
+ "modify_time": "2019-07-30 13:57:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/joliss/js-string-escape",
+ "star": 61,
+ "commits": 29,
+ "modify_time": "2016-03-11 01:11:56",
+ "last_release": "\n v1.0.1\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/jessfraz/tor",
+ "star": 61,
+ "commits": 34383,
+ "modify_time": "2019-12-06 21:02:08",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jaredcatkinson/evilnetconnectionwmiprovider",
+ "star": 61,
+ "commits": 9,
+ "modify_time": "2015-09-27 14:25:09",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/isecpartners/android-killpermandsigchecks",
+ "star": 61,
+ "commits": 8,
+ "modify_time": "2013-12-19 01:27:32",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/im-bug/blockchain-security-list",
+ "star": 61,
+ "commits": 5,
+ "modify_time": "2018-06-28 03:21:20",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/hamiltoniancycle/classnamedeobfuscator",
+ "star": 61,
+ "commits": 12,
+ "modify_time": "2015-03-08 16:01:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hacksysteam/wpadescape",
+ "star": 61,
+ "commits": 5,
+ "modify_time": "2019-09-03 07:17:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/graniet/operative-framework-hd",
+ "star": 61,
+ "commits": null,
+ "modify_time": "2019-01-02 20:35:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gdbinit/mpress_dumper",
+ "star": 61,
+ "commits": 10,
+ "modify_time": "2014-11-11 01:52:04",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/gamozolabs/falkervisor_beta",
+ "star": 61,
+ "commits": 3,
+ "modify_time": "2018-09-09 01:23:21",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/freewaf/waf-pe",
+ "star": 61,
+ "commits": 2,
+ "modify_time": "2013-07-26 01:48:20",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/evilsocket/libpe",
+ "star": 61,
+ "commits": 31,
+ "modify_time": "2015-02-17 16:24:44",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/engineyard/engineyard-serverside",
+ "star": 61,
+ "commits": 1087,
+ "modify_time": "2019-05-30 18:23:28",
+ "last_release": "v2.6.3",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/dxa4481/xssoauthpersistence",
+ "star": 61,
+ "commits": 6,
+ "modify_time": "2019-01-07 09:06:46",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/dodola/simplesmali",
+ "star": 61,
+ "commits": 13,
+ "modify_time": "2017-02-27 15:23:42",
+ "last_release": "1.01",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/devxoul/blockchain",
+ "star": 61,
+ "commits": 1,
+ "modify_time": "2018-01-14 19:17:45",
+ "last_release": "",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/danghvu/pwp",
+ "star": 61,
+ "commits": 5,
+ "modify_time": "2013-01-27 11:05:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/curi0usjack/adimporter",
+ "star": 61,
+ "commits": 20,
+ "modify_time": "2018-04-18 21:33:29",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/crs-support/ftw",
+ "star": 61,
+ "commits": 331,
+ "modify_time": "2019-11-21 16:34:16",
+ "last_release": "1.1.7",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cranklin/cranky-data-virus",
+ "star": 61,
+ "commits": 3,
+ "modify_time": "2016-12-26 10:38:16",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/convisoappsec/firefox_tunnel",
+ "star": 61,
+ "commits": 26,
+ "modify_time": "2018-03-21 16:59:39",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cisco-sas/katnip",
+ "star": 61,
+ "commits": 96,
+ "modify_time": "2019-02-01 14:52:53",
+ "last_release": "v0.2.5",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cifasis/nosy-newt",
+ "star": 61,
+ "commits": 17,
+ "modify_time": "2017-08-05 18:20:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/chronic-dev/bootrom-dumper",
+ "star": 61,
+ "commits": 3,
+ "modify_time": "2010-12-07 18:40:04",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/christophetd/ipv6teal",
+ "star": 61,
+ "commits": 3,
+ "modify_time": "2019-07-26 14:25:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/b-mueller/scrooge-mcetherface",
+ "star": 61,
+ "commits": 70,
+ "modify_time": "2019-07-07 09:37:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/apexlegendsuc/anti-cheat-emulator",
+ "star": 61,
+ "commits": 2,
+ "modify_time": "2019-05-05 21:28:15",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/anbai-inc/cve-2018-2893",
+ "star": 61,
+ "commits": 2,
+ "modify_time": "2018-07-19 05:58:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/abs0/wargames",
+ "star": 61,
+ "commits": 13,
+ "modify_time": "2016-08-21 19:53:29",
+ "last_release": "\n 1.02\n ",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/dvyukov/go-fuzz-corpus",
+ "star": 60,
+ "commits": 231,
+ "modify_time": "2019-09-19 16:06:20",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/tribler/py-ipv8",
+ "star": 60,
+ "commits": 1145,
+ "modify_time": "2019-12-09 11:04:45",
+ "last_release": "1.9",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nccgroup/asafw",
+ "star": 60,
+ "commits": 58,
+ "modify_time": "2019-11-12 09:45:03",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/shadowsocks/tun2socks-ios",
+ "star": 60,
+ "commits": 1,
+ "modify_time": "2015-07-22 15:53:57",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/motherfuzzers/meetups",
+ "star": 60,
+ "commits": 2,
+ "modify_time": "2019-08-23 20:56:06",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/phith0n/xray-poc-generation",
+ "star": 60,
+ "commits": 16,
+ "modify_time": "2019-08-23 08:21:38",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/jordanpotti/offensiveclouddistribution",
+ "star": 60,
+ "commits": 32,
+ "modify_time": "2019-11-06 02:39:58",
+ "last_release": "",
+ "lang": "HCL"
+ },
+ {
+ "link": "https://github.com/atlasnx/web-cfw-loader",
+ "star": 60,
+ "commits": 281,
+ "modify_time": "2019-09-29 11:38:27",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/landgrey/cve-2019-7609",
+ "star": 60,
+ "commits": 4,
+ "modify_time": "2019-10-23 07:10:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/samuelpowell/CX10-FNRF",
+ "star": 60,
+ "commits": 16,
+ "modify_time": "2018-02-18 21:11:14",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/intel/satt",
+ "star": 60,
+ "commits": 42,
+ "modify_time": "2019-04-23 08:29:14",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/imugee/pegasus",
+ "star": 60,
+ "commits": 146,
+ "modify_time": "2019-09-30 05:08:26",
+ "last_release": "v.0.1.pegasus",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/censorship-no-archive/ceno1",
+ "star": 60,
+ "commits": 1307,
+ "modify_time": "2016-06-29 12:02:15",
+ "last_release": "v1.0.0",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/zznop/bnida",
+ "star": 60,
+ "commits": 39,
+ "modify_time": "2019-07-07 01:37:10",
+ "last_release": "1.01",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zombiecraig/c0f",
+ "star": 60,
+ "commits": 11,
+ "modify_time": "2015-09-29 15:35:33",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/yingshang/banruo",
+ "star": 60,
+ "commits": 28,
+ "modify_time": "2019-12-04 15:15:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ultrasecurity/telekiller",
+ "star": 60,
+ "commits": 39,
+ "modify_time": "2019-05-05 11:20:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tycx2ry/docker_api_vul",
+ "star": 60,
+ "commits": 11,
+ "modify_time": "2016-05-18 16:08:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/try-to/electron-proxy",
+ "star": 60,
+ "commits": 34,
+ "modify_time": "2019-04-29 06:21:43",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/tmr232/idabuddy",
+ "star": 60,
+ "commits": 26,
+ "modify_time": "2017-09-17 08:52:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tkmru/awesome-linux-rootkits",
+ "star": 60,
+ "commits": 5,
+ "modify_time": "2017-12-17 05:14:38",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/tihmstar/v3ntex",
+ "star": 60,
+ "commits": 4,
+ "modify_time": "2019-02-13 15:57:39",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/thesph1nx/spacecow",
+ "star": 60,
+ "commits": 10,
+ "modify_time": "2019-06-12 07:20:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/texhex/biossledgehammer",
+ "star": 60,
+ "commits": 396,
+ "modify_time": "2019-06-24 17:37:41",
+ "last_release": "v6.0.2",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/tallakt/modbus-cli",
+ "star": 60,
+ "commits": 42,
+ "modify_time": "2018-10-16 05:57:43",
+ "last_release": "\n v0.0.13\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/steven-michaud/reverse-engineering-on-osx",
+ "star": 60,
+ "commits": 2,
+ "modify_time": "2015-10-03 21:23:34",
+ "last_release": "",
+ "lang": "Objective-C++"
+ },
+ {
+ "link": "https://github.com/stephenrkell/libcrunch",
+ "star": 60,
+ "commits": 677,
+ "modify_time": "2019-08-01 09:57:59",
+ "last_release": "",
+ "lang": "OCaml"
+ },
+ {
+ "link": "https://github.com/stefano-lupo/java-proxy-server",
+ "star": 60,
+ "commits": 12,
+ "modify_time": "2017-10-04 21:36:07",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/skahwah/automato",
+ "star": 60,
+ "commits": 31,
+ "modify_time": "2019-05-30 00:53:30",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/sensepost/anapickle",
+ "star": 60,
+ "commits": 1,
+ "modify_time": "2012-02-10 12:34:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/secwiki/macos-kernel-exploits",
+ "star": 60,
+ "commits": 8,
+ "modify_time": "2018-01-07 14:09:09",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/securifybv/shelllink",
+ "star": 60,
+ "commits": 12,
+ "modify_time": "2019-03-03 12:28:52",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/samvartaka/malware",
+ "star": 60,
+ "commits": 4,
+ "modify_time": "2015-09-13 16:10:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rprichard/win32-console-docs",
+ "star": 60,
+ "commits": 10,
+ "modify_time": "2017-05-21 09:42:19",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/rastating/xss-chef",
+ "star": 60,
+ "commits": 75,
+ "modify_time": "2019-11-24 19:05:03",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/quarkslab/lldbagility",
+ "star": 60,
+ "commits": 5,
+ "modify_time": "2019-10-08 12:38:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/phith0n/xdctf2015",
+ "star": 60,
+ "commits": 11,
+ "modify_time": "2015-10-08 02:46:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pdkt-team/ctf",
+ "star": 60,
+ "commits": 54,
+ "modify_time": "2019-06-03 19:43:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/owtf/wafbypasser",
+ "star": 60,
+ "commits": 50,
+ "modify_time": "2014-09-22 22:51:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/netstalking-core/netstalking-catalogue",
+ "star": 60,
+ "commits": 54,
+ "modify_time": "2019-11-25 12:27:54",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/nccgroup/webfeet",
+ "star": 60,
+ "commits": 11,
+ "modify_time": "2014-08-24 07:25:04",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/nao-sec/tknk_scanner",
+ "star": 60,
+ "commits": 31,
+ "modify_time": "2019-12-01 01:48:30",
+ "last_release": "v1.2.0",
+ "lang": "Vue"
+ },
+ {
+ "link": "https://github.com/mthbernardes/whoamimailbot",
+ "star": 60,
+ "commits": 16,
+ "modify_time": "2018-04-05 02:54:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/micyo202/yan-demo",
+ "star": 60,
+ "commits": 129,
+ "modify_time": "2018-10-19 00:58:01",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/lnslbrty/ptunnel-ng",
+ "star": 60,
+ "commits": 198,
+ "modify_time": "2019-12-05 18:28:23",
+ "last_release": "v1.42",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/leonjza/qrxfer",
+ "star": 60,
+ "commits": 5,
+ "modify_time": "2016-10-10 08:32:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lazenca/kernel-exploit-tech",
+ "star": 60,
+ "commits": 5,
+ "modify_time": "2019-07-20 13:55:17",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/kevin-robertson/conveigh",
+ "star": 60,
+ "commits": 1,
+ "modify_time": "2016-08-28 19:55:34",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/jmasterx/agui",
+ "star": 60,
+ "commits": 203,
+ "modify_time": "2018-03-21 20:27:34",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/jgrahamc/torhoney",
+ "star": 60,
+ "commits": 2,
+ "modify_time": "2014-09-23 10:13:50",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/java-deobfuscator/deobfuscator-gui",
+ "star": 60,
+ "commits": 84,
+ "modify_time": "2018-09-28 00:28:39",
+ "last_release": "3.2",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/intrepidusgroup/iglogger",
+ "star": 60,
+ "commits": 7,
+ "modify_time": "2013-05-01 15:53:51",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/iamckn/mousejack_transmit",
+ "star": 60,
+ "commits": 5,
+ "modify_time": "2016-07-10 14:10:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hoshimin/enjoythering0",
+ "star": 60,
+ "commits": 4,
+ "modify_time": "2016-08-28 18:36:36",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hood3drob1n/cve-2016-3714",
+ "star": 60,
+ "commits": 6,
+ "modify_time": "2016-05-07 17:27:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hasherezade/mypintools",
+ "star": 60,
+ "commits": 7,
+ "modify_time": "2017-07-05 15:44:42",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/harmj0y/cortana",
+ "star": 60,
+ "commits": 22,
+ "modify_time": "2014-11-25 05:37:54",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/grocid/ctf",
+ "star": 60,
+ "commits": 47,
+ "modify_time": "2019-04-07 20:09:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gravity-postquantum/gravity-sphincs",
+ "star": 60,
+ "commits": 14,
+ "modify_time": "2017-12-06 13:31:54",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/gitsquared/sherlock-js",
+ "star": 60,
+ "commits": 35,
+ "modify_time": "2019-12-07 11:57:33",
+ "last_release": "v2.0.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/geeksonsecurity/android-overlay-malware-example",
+ "star": 60,
+ "commits": 19,
+ "modify_time": "2018-01-05 09:56:35",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/galeone/letsencrypt-lighttpd",
+ "star": 60,
+ "commits": 19,
+ "modify_time": "2018-10-07 08:48:02",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/fireeye/volatility-plugins",
+ "star": 60,
+ "commits": 14,
+ "modify_time": "2016-07-05 02:59:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/finixbit/ftrace",
+ "star": 60,
+ "commits": 8,
+ "modify_time": "2018-04-26 13:48:02",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/filetofirewall/fof",
+ "star": 60,
+ "commits": 17,
+ "modify_time": "2015-09-04 01:57:00",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/eykd/owyl",
+ "star": 60,
+ "commits": 65,
+ "modify_time": "2014-11-29 15:35:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/exitmsconfig/engineering-box",
+ "star": 60,
+ "commits": 11,
+ "modify_time": "2019-02-22 05:32:53",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/esmog/nodexp",
+ "star": 60,
+ "commits": 14,
+ "modify_time": "2018-10-04 12:49:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ernw/static-toolbox",
+ "star": 60,
+ "commits": 16,
+ "modify_time": "2019-04-09 10:40:24",
+ "last_release": "1.04",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/dotcppfile/serbot",
+ "star": 60,
+ "commits": 28,
+ "modify_time": "2016-02-20 23:44:11",
+ "last_release": "18/2/2015",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/darkw1z/ps1jacker",
+ "star": 60,
+ "commits": 23,
+ "modify_time": "2018-09-05 07:25:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dai-lab/steganogan",
+ "star": 60,
+ "commits": 143,
+ "modify_time": "2019-08-08 15:19:27",
+ "last_release": "v0.1.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cudeso/tools",
+ "star": 60,
+ "commits": 96,
+ "modify_time": "2019-12-02 19:54:20",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/croemheld/lkm-rootkit",
+ "star": 60,
+ "commits": 49,
+ "modify_time": "2017-09-17 13:34:14",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/coolervoid/nozes",
+ "star": 60,
+ "commits": 15,
+ "modify_time": "2019-05-05 11:57:23",
+ "last_release": "nozes0.3",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/conix-security/btg",
+ "star": 60,
+ "commits": 213,
+ "modify_time": "2018-11-27 09:38:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cisco-talos/thanatosdecryptor",
+ "star": 60,
+ "commits": 4,
+ "modify_time": "2018-07-18 23:25:20",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/byt3bl33d3r/duckhunter",
+ "star": 60,
+ "commits": 37,
+ "modify_time": "2015-02-12 12:12:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/brendangregg/dtrace-tools",
+ "star": 60,
+ "commits": 8,
+ "modify_time": "2017-09-25 11:29:04",
+ "last_release": "",
+ "lang": "DTrace"
+ },
+ {
+ "link": "https://github.com/breaktoprotect/cve-2017-12615",
+ "star": 60,
+ "commits": 8,
+ "modify_time": "2018-05-07 05:18:30",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/brakmic/sinkholes",
+ "star": 60,
+ "commits": 34,
+ "modify_time": "2019-07-25 23:10:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/blackholesec/wifigod",
+ "star": 60,
+ "commits": null,
+ "modify_time": "2018-11-23 21:09:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/arvanaghi/windows-dll-injector",
+ "star": 60,
+ "commits": 21,
+ "modify_time": "2017-05-29 03:30:19",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/arthastang/iot-home-guard",
+ "star": 60,
+ "commits": 73,
+ "modify_time": "2018-11-24 09:09:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/argp/unmask_jemalloc",
+ "star": 60,
+ "commits": 26,
+ "modify_time": "2017-11-01 10:03:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/anssi-fr/audit-radius",
+ "star": 60,
+ "commits": 1,
+ "modify_time": "2018-10-15 14:42:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/alf45tar/pedalino",
+ "star": 60,
+ "commits": 712,
+ "modify_time": "2019-06-30 18:29:32",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ajmwagar/lor-axe",
+ "star": 60,
+ "commits": 35,
+ "modify_time": "2019-05-01 17:02:46",
+ "last_release": "",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/aglcaicai/kalitoolsmanual",
+ "star": 60,
+ "commits": 9,
+ "modify_time": "2018-10-12 04:06:10",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/9b/netinfo",
+ "star": 60,
+ "commits": 46,
+ "modify_time": "2019-10-17 16:27:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/javascript-obfuscator/gulp-javascript-obfuscator",
+ "star": 59,
+ "commits": 15,
+ "modify_time": "2019-04-19 14:32:40",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/shadowsocks/shadowsocks-restful-api",
+ "star": 59,
+ "commits": 13,
+ "modify_time": "2019-04-07 03:35:36",
+ "last_release": "v0.1.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/snoopysecurity/osce-prep",
+ "star": 59,
+ "commits": 9,
+ "modify_time": "2019-09-19 14:45:37",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/whid-injector/whid-31337",
+ "star": 59,
+ "commits": 31,
+ "modify_time": "2019-11-29 13:22:38",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/nationalsecurityagency/ghidra-data",
+ "star": 59,
+ "commits": 5,
+ "modify_time": "2019-04-03 17:34:40",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/angr/vex",
+ "star": 59,
+ "commits": 70,
+ "modify_time": "2019-09-14 22:05:05",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/aquasecurity/vuln-list",
+ "star": 59,
+ "commits": 2461,
+ "modify_time": "2019-12-10 09:54:36",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/auth0-blog/react-flux-debug-actions-sample",
+ "star": 59,
+ "commits": 10,
+ "modify_time": "2015-09-11 12:37:52",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/mozilla/frost",
+ "star": 59,
+ "commits": 282,
+ "modify_time": "2019-10-14 20:49:33",
+ "last_release": "\n 0.3.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/FSecureLABS/peas",
+ "star": 59,
+ "commits": 4,
+ "modify_time": "2016-10-07 10:03:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zhechkoz/pwin",
+ "star": 59,
+ "commits": 8,
+ "modify_time": "2018-09-01 23:05:56",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/zd2100/pscout",
+ "star": 59,
+ "commits": 18,
+ "modify_time": "2016-03-07 04:11:17",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/xyzz/amonet",
+ "star": 59,
+ "commits": 9,
+ "modify_time": "2019-01-29 19:16:38",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/xorrior/emailraider",
+ "star": 59,
+ "commits": 60,
+ "modify_time": "2016-05-26 02:05:51",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/xenithlabs/rfid-workshop",
+ "star": 59,
+ "commits": 1,
+ "modify_time": "2018-11-27 16:10:12",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/wledfor2/playhooky",
+ "star": 59,
+ "commits": 8,
+ "modify_time": "2018-07-07 21:48:47",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/wickett/lambhack",
+ "star": 59,
+ "commits": 14,
+ "modify_time": "2019-10-07 16:30:36",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/viele/onionskinrenderer",
+ "star": 59,
+ "commits": 45,
+ "modify_time": "2019-04-22 16:21:03",
+ "last_release": "v1.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ultimatehackers/infinity",
+ "star": 59,
+ "commits": null,
+ "modify_time": "2019-01-09 06:08:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tylabs/dovehawk",
+ "star": 59,
+ "commits": 46,
+ "modify_time": "2019-08-02 15:05:43",
+ "last_release": "1.01.002",
+ "lang": "Zeek"
+ },
+ {
+ "link": "https://github.com/tkcert/winnti-nmap-script",
+ "star": 59,
+ "commits": 4,
+ "modify_time": "2018-05-22 14:08:37",
+ "last_release": "",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/tiaotiaolong/ttlscan",
+ "star": 59,
+ "commits": 27,
+ "modify_time": "2018-09-23 06:46:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/thom-s/httphish",
+ "star": 59,
+ "commits": null,
+ "modify_time": "2019-01-19 18:05:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tech-srl/esh",
+ "star": 59,
+ "commits": 10,
+ "modify_time": "2016-07-01 14:43:33",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/tduehr/buby",
+ "star": 59,
+ "commits": 281,
+ "modify_time": "2015-04-24 13:28:36",
+ "last_release": "\n v1.6.0\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/tapio/nautilus-git-scripts",
+ "star": 59,
+ "commits": 22,
+ "modify_time": "2016-07-23 15:10:55",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/sukkaw/cloudflare-block-bad-bot-ruleset",
+ "star": 59,
+ "commits": 31,
+ "modify_time": "2019-08-08 08:29:06",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/strazzere/dehoser",
+ "star": 59,
+ "commits": 6,
+ "modify_time": "2013-01-02 22:13:11",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/sourceincite/cve-2018-8440",
+ "star": 59,
+ "commits": 11,
+ "modify_time": "2018-10-31 19:05:11",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/sonertari/sslproxy",
+ "star": 59,
+ "commits": 761,
+ "modify_time": "2019-08-13 07:12:20",
+ "last_release": "v0.7.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/skeeto/ptrace-examples",
+ "star": 59,
+ "commits": 2,
+ "modify_time": "2018-06-23 21:21:16",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/sirusdv/edgehttp2fuzzer",
+ "star": 59,
+ "commits": 4,
+ "modify_time": "2016-12-23 17:13:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sirbrillig/phpcs-variable-analysis",
+ "star": 59,
+ "commits": 176,
+ "modify_time": "2019-10-10 23:00:08",
+ "last_release": "v2.8.0",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/sfaci/masc",
+ "star": 59,
+ "commits": 184,
+ "modify_time": "2019-04-06 18:20:41",
+ "last_release": "masc-0.2.2",
+ "lang": "YARA"
+ },
+ {
+ "link": "https://github.com/sensepost/notruler",
+ "star": 59,
+ "commits": 21,
+ "modify_time": "2017-10-11 07:15:26",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/securityautomation/autosource",
+ "star": 59,
+ "commits": 25,
+ "modify_time": "2019-06-03 08:30:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/s9mf/xss_test",
+ "star": 59,
+ "commits": 369,
+ "modify_time": "2019-11-07 15:54:46",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/rvrsh3ll/sharpexcel4-dcom",
+ "star": 59,
+ "commits": 4,
+ "modify_time": "2019-10-12 01:18:36",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/rub-nds/johnny-you-are-fired",
+ "star": 59,
+ "commits": 57,
+ "modify_time": "2019-11-29 08:14:25",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/robertdavidgraham/cve-2015-5477",
+ "star": 59,
+ "commits": 10,
+ "modify_time": "2015-08-01 21:32:51",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/riscure/optee_fuzzer",
+ "star": 59,
+ "commits": 5,
+ "modify_time": "2019-11-24 16:59:40",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/rickgray/vscan-go",
+ "star": 59,
+ "commits": 8,
+ "modify_time": "2019-09-19 10:56:19",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/reptilehaus/eternal-blue",
+ "star": 59,
+ "commits": 49,
+ "modify_time": "2019-01-07 10:21:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/push0ebp/allirt",
+ "star": 59,
+ "commits": 22,
+ "modify_time": "2019-02-09 15:52:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/psychomario/pyinject",
+ "star": 59,
+ "commits": 24,
+ "modify_time": "2015-11-03 17:00:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/owasp/threat-model-cookbook",
+ "star": 59,
+ "commits": 27,
+ "modify_time": "2019-07-30 22:08:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/offensivepython/sniffy",
+ "star": 59,
+ "commits": 3,
+ "modify_time": "2014-03-22 22:00:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nviso-be/sec599",
+ "star": 59,
+ "commits": 49,
+ "modify_time": "2019-09-14 15:23:19",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/nettitude/powershell",
+ "star": 59,
+ "commits": null,
+ "modify_time": "2016-12-01 14:06:05",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/neonprimetime/phishingkittracker",
+ "star": 59,
+ "commits": 560,
+ "modify_time": "2019-06-21 14:50:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nebulouslabs/entropy-mnemonics",
+ "star": 59,
+ "commits": 26,
+ "modify_time": "2018-12-03 15:45:59",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/mozilla/zest",
+ "star": 59,
+ "commits": 456,
+ "modify_time": "2019-11-07 15:56:07",
+ "last_release": "\n 0.14.0\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/mgeeky/robustpentestmacro",
+ "star": 59,
+ "commits": 16,
+ "modify_time": "2018-02-12 23:23:10",
+ "last_release": "",
+ "lang": "Visual Basic .NET"
+ },
+ {
+ "link": "https://github.com/matishsiao/goinfo",
+ "star": 59,
+ "commits": 16,
+ "modify_time": "2017-08-03 14:20:06",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/markhc/windbg_to_c",
+ "star": 59,
+ "commits": 8,
+ "modify_time": "2016-10-16 18:37:42",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/malwaretech/uacelevator",
+ "star": 59,
+ "commits": 4,
+ "modify_time": "2014-11-07 19:09:32",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/leipzig/awesome-reproducible-research",
+ "star": 59,
+ "commits": 147,
+ "modify_time": "2019-12-05 18:26:44",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/kpwn/vpwn",
+ "star": 59,
+ "commits": 9,
+ "modify_time": "2015-03-20 15:56:47",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/koodous/androguard-yara",
+ "star": 59,
+ "commits": 36,
+ "modify_time": "2018-03-07 16:34:47",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jijinggang/golocproxy",
+ "star": 59,
+ "commits": 29,
+ "modify_time": "2017-03-14 02:16:52",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/jeremyngalloway/mod_plaintext.py",
+ "star": 59,
+ "commits": 4,
+ "modify_time": "2017-12-15 17:11:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jas502n/cve-2019-6340",
+ "star": 59,
+ "commits": 10,
+ "modify_time": "2019-05-28 02:55:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jas502n/cve-2019-11580",
+ "star": 59,
+ "commits": 16,
+ "modify_time": "2019-07-18 10:03:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/isra17/nrs",
+ "star": 59,
+ "commits": 73,
+ "modify_time": "2018-05-19 23:11:29",
+ "last_release": "\n v0.2.2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/intrinsec/comission",
+ "star": 59,
+ "commits": 189,
+ "modify_time": "2019-06-24 09:24:45",
+ "last_release": "\n v1.2.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/infosec-community/apac-conferences",
+ "star": 59,
+ "commits": 136,
+ "modify_time": "2019-11-12 13:20:13",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/howie6879/hproxy",
+ "star": 59,
+ "commits": 69,
+ "modify_time": "2018-08-18 08:55:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hgascon/adagio",
+ "star": 59,
+ "commits": 47,
+ "modify_time": "2019-07-11 13:46:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hduffddybz/linux_websites",
+ "star": 59,
+ "commits": 6,
+ "modify_time": "2015-12-06 06:14:19",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/hackedteam/soldier-win",
+ "star": 59,
+ "commits": 36,
+ "modify_time": "2015-03-19 15:10:01",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/gunnerstahl/jqshell",
+ "star": 59,
+ "commits": 10,
+ "modify_time": "2018-10-30 01:48:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/enigma0x3/outlookpersistence",
+ "star": 59,
+ "commits": 40,
+ "modify_time": "2015-05-19 18:36:57",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/dustyfresh/honeypress",
+ "star": 59,
+ "commits": 59,
+ "modify_time": "2019-05-12 15:27:09",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/dobin/yookiterm-slides",
+ "star": 59,
+ "commits": 52,
+ "modify_time": "2019-05-24 07:23:58",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/depletionmode/wsipc",
+ "star": 59,
+ "commits": 20,
+ "modify_time": "2019-01-09 18:09:01",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/davepacheco/node-heap-dump",
+ "star": 59,
+ "commits": 6,
+ "modify_time": "2011-09-24 15:49:22",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/dannycork/python-whois",
+ "star": 59,
+ "commits": 138,
+ "modify_time": "2019-10-16 09:26:20",
+ "last_release": "0.9.4",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cr4sh/drvhide-poc",
+ "star": 59,
+ "commits": 1,
+ "modify_time": "2010-12-23 13:08:38",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/cortesi/mitmproxy",
+ "star": 59,
+ "commits": 7840,
+ "modify_time": "2018-06-15 23:21:22",
+ "last_release": "\n v1.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/coolervoid/ninja_shell",
+ "star": 59,
+ "commits": 50,
+ "modify_time": "2018-02-28 15:40:26",
+ "last_release": "NinjaRawsockShell_v2.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/contrast-security-oss/contrast-ro0",
+ "star": 59,
+ "commits": 40,
+ "modify_time": "2017-10-09 18:17:57",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/cisco-talos/locky",
+ "star": 59,
+ "commits": 10,
+ "modify_time": "2017-06-21 19:39:34",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/capt-meelo/telewreck",
+ "star": 59,
+ "commits": 36,
+ "modify_time": "2018-08-14 07:47:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/binaryanalysisplatform/bap-ida-python",
+ "star": 59,
+ "commits": 85,
+ "modify_time": "2019-11-13 20:49:26",
+ "last_release": "v2.0.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bez0r/pdns2",
+ "star": 59,
+ "commits": 23,
+ "modify_time": "2014-03-27 18:48:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/attackercan/teamviewer-dumper",
+ "star": 59,
+ "commits": 5,
+ "modify_time": "2018-04-13 12:56:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/anteater/anteater",
+ "star": 59,
+ "commits": 261,
+ "modify_time": "2019-01-09 07:39:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/amoulu/tinysmaliemulator",
+ "star": 59,
+ "commits": 4,
+ "modify_time": "2017-07-12 17:39:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/aliasrobotics/rsf",
+ "star": 59,
+ "commits": 27,
+ "modify_time": "2018-12-28 08:58:52",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/alexhude/loadprocconfig",
+ "star": 59,
+ "commits": 7,
+ "modify_time": "2017-09-21 02:08:29",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/alexcn/onestack",
+ "star": 59,
+ "commits": 301,
+ "modify_time": "2019-06-20 09:37:03",
+ "last_release": "0.0.6",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/abhisek/pwnworks",
+ "star": 59,
+ "commits": 47,
+ "modify_time": "2018-02-13 17:50:18",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/daggerok/streaming-file-server",
+ "star": 58,
+ "commits": 236,
+ "modify_time": "2019-12-07 10:49:21",
+ "last_release": "4.3.32",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/v2ray/planning",
+ "star": 58,
+ "commits": 5,
+ "modify_time": "2017-01-11 08:07:05",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/shellphish/shellphish-afl",
+ "star": 58,
+ "commits": 43,
+ "modify_time": "2019-10-23 22:50:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/r00t-3xp10it/netool-toolkit",
+ "star": 58,
+ "commits": 8,
+ "modify_time": "2016-11-25 12:40:56",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/kevthehermit/spearphisher",
+ "star": 58,
+ "commits": 20,
+ "modify_time": "2015-07-09 17:33:23",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/medicean/as_bypass_php_disable_functions",
+ "star": 58,
+ "commits": 22,
+ "modify_time": "2019-11-11 07:32:56",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/lozzd/autonmap",
+ "star": 58,
+ "commits": 1,
+ "modify_time": "2012-09-24 18:27:14",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/yzyjim/shadowsocks-back-china-pac",
+ "star": 58,
+ "commits": 13,
+ "modify_time": "2019-06-05 20:53:13",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/vlad-tri/cve-2019-1132",
+ "star": 58,
+ "commits": 2,
+ "modify_time": "2019-09-08 07:58:11",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/cisco/mercury",
+ "star": 58,
+ "commits": 156,
+ "modify_time": "2019-12-09 14:49:17",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/Cyb0r9/DVR-Exploiter",
+ "star": 58,
+ "commits": 37,
+ "modify_time": "2018-10-11 16:54:31",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/deadbits/Intersect-2.5",
+ "star": 58,
+ "commits": 82,
+ "modify_time": "2017-02-16 02:05:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/OffXec/Samurai",
+ "star": 58,
+ "commits": 6,
+ "modify_time": "2018-05-10 03:34:02",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/hammackj/risu",
+ "star": 58,
+ "commits": 1994,
+ "modify_time": "2017-07-11 22:33:44",
+ "last_release": "\n v1.8.3\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/leonwxqian/lucky-js-fuzz",
+ "star": 58,
+ "commits": 14,
+ "modify_time": "2019-05-06 16:43:15",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/wuntee/androidaudittools",
+ "star": 58,
+ "commits": 3,
+ "modify_time": "2011-06-16 13:03:51",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/wizardforcel/sploitfun-linux-x86-exp-tut-zh",
+ "star": 58,
+ "commits": 11,
+ "modify_time": "2017-05-03 09:37:04",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/wavestone-cdt/dyode",
+ "star": 58,
+ "commits": 5,
+ "modify_time": "2017-10-07 08:05:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vivami/ms17-010",
+ "star": 58,
+ "commits": 26,
+ "modify_time": "2017-07-21 17:11:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vay3t/hax0rpi",
+ "star": 58,
+ "commits": 261,
+ "modify_time": "2019-03-31 21:31:01",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/vah13/win_zip_password",
+ "star": 58,
+ "commits": 19,
+ "modify_time": "2018-05-10 19:43:31",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/tyranid/infosec-presentations",
+ "star": 58,
+ "commits": 3,
+ "modify_time": "2019-05-13 19:54:40",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/tyranid/exploitdotnetdcom",
+ "star": 58,
+ "commits": 4,
+ "modify_time": "2014-10-14 22:44:26",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/turr0n/firebase",
+ "star": 58,
+ "commits": 21,
+ "modify_time": "2019-06-05 08:50:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/trisulnsm/trisul-scripts",
+ "star": 58,
+ "commits": 607,
+ "modify_time": "2019-06-08 12:25:02",
+ "last_release": "",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/tonyphipps/siem",
+ "star": 58,
+ "commits": 197,
+ "modify_time": "2019-12-08 03:51:55",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/tarlogicsecurity/arecibo",
+ "star": 58,
+ "commits": 7,
+ "modify_time": "2018-11-09 08:38:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/slangji/wp-missed-schedule",
+ "star": 58,
+ "commits": 187,
+ "modify_time": "2018-11-04 14:58:54",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/simplysecurity/simplydomain",
+ "star": 58,
+ "commits": 195,
+ "modify_time": "2019-09-04 04:51:33",
+ "last_release": "\n 2.0.9\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/she11c0der/scanners-box",
+ "star": 58,
+ "commits": 267,
+ "modify_time": "2019-10-30 01:58:45",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/sensepost/xrdp",
+ "star": 58,
+ "commits": 16,
+ "modify_time": "2017-04-11 13:48:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rootkitsmm/win10pcap-exploit",
+ "star": 58,
+ "commits": 16,
+ "modify_time": "2015-10-16 09:32:44",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/riscybusiness/riscypacker",
+ "star": 58,
+ "commits": null,
+ "modify_time": "2017-11-06 19:14:59",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/rehints/windbg",
+ "star": 58,
+ "commits": 5,
+ "modify_time": "2016-07-14 22:26:40",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/raesene/bwapp",
+ "star": 58,
+ "commits": 5,
+ "modify_time": "2018-03-14 21:13:12",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/quake4/mindminer",
+ "star": 58,
+ "commits": 2649,
+ "modify_time": "2019-12-09 07:24:17",
+ "last_release": "v5.9",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/pwntester/xmldecoder",
+ "star": 58,
+ "commits": 1,
+ "modify_time": "2013-08-01 08:34:14",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/psycopaths/jdart",
+ "star": 58,
+ "commits": 53,
+ "modify_time": "2018-09-17 06:50:32",
+ "last_release": "\n v1.0.1\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/pownjs/pown-proxy",
+ "star": 58,
+ "commits": 37,
+ "modify_time": "2019-05-16 05:25:43",
+ "last_release": "\n v2.1.0\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/portswigger/replicator",
+ "star": 58,
+ "commits": 6,
+ "modify_time": "2019-02-11 13:52:29",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/poliva/dexinfo",
+ "star": 58,
+ "commits": 11,
+ "modify_time": "2014-08-26 18:14:28",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/poc-consortium/scavenger",
+ "star": 58,
+ "commits": 333,
+ "modify_time": "2019-06-03 19:58:14",
+ "last_release": "1.7.8",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/p292/nackered",
+ "star": 58,
+ "commits": 10,
+ "modify_time": "2017-10-30 20:46:13",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/outflanknl/external_c2",
+ "star": 58,
+ "commits": 3,
+ "modify_time": "2017-09-17 12:21:28",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/opensecurityresearch/pentest-scripts",
+ "star": 58,
+ "commits": 5,
+ "modify_time": "2012-10-29 22:55:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nopernik/fuzzbunch_wrapper",
+ "star": 58,
+ "commits": 6,
+ "modify_time": "2017-04-23 01:15:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/noloader/sha-intrinsics",
+ "star": 58,
+ "commits": 173,
+ "modify_time": "2018-04-08 06:08:48",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/nightoftwelve/virtualhookex",
+ "star": 58,
+ "commits": 7,
+ "modify_time": "2017-06-25 18:31:31",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/nidom/buff",
+ "star": 58,
+ "commits": 8,
+ "modify_time": "2017-03-27 12:17:18",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/nccgroup/iodide",
+ "star": 58,
+ "commits": 11,
+ "modify_time": "2015-08-06 15:04:19",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/my-first-pr/hacktoberfest-2018",
+ "star": 58,
+ "commits": 2207,
+ "modify_time": "2018-11-01 02:50:30",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/mrgeffitas/hwfwbypass",
+ "star": 58,
+ "commits": 11,
+ "modify_time": "2018-10-14 20:30:31",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/monkeym4ster/domainfuzz",
+ "star": 58,
+ "commits": 4,
+ "modify_time": "2017-12-27 01:33:44",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/mist64/c64rom",
+ "star": 58,
+ "commits": 14,
+ "modify_time": "2019-04-14 20:29:30",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/mikkolehtisalo/cvesync",
+ "star": 58,
+ "commits": 22,
+ "modify_time": "2014-12-28 19:43:43",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/merttasci/weapons4pentester",
+ "star": 58,
+ "commits": 29,
+ "modify_time": "2016-12-08 12:25:01",
+ "last_release": "",
+ "lang": "ASP"
+ },
+ {
+ "link": "https://github.com/mdslab/wstun",
+ "star": 58,
+ "commits": 100,
+ "modify_time": "2019-05-27 09:39:06",
+ "last_release": "v1.0.11",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/malwarelu/tools",
+ "star": 58,
+ "commits": 4,
+ "modify_time": "2013-10-28 10:49:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lupino/shadowsocks-gui",
+ "star": 58,
+ "commits": 64,
+ "modify_time": "2014-06-13 11:36:08",
+ "last_release": "\n 0.4\n ",
+ "lang": "CoffeeScript"
+ },
+ {
+ "link": "https://github.com/littlerich/wechatluckymoney",
+ "star": 58,
+ "commits": 15,
+ "modify_time": "2017-08-21 09:18:00",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/killswitch-gui/persistence-survivability",
+ "star": 58,
+ "commits": 39,
+ "modify_time": "2016-09-11 03:12:42",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/kevthehermit/pentest",
+ "star": 58,
+ "commits": 2,
+ "modify_time": "2017-12-04 10:50:09",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/jas502n/ubuntu-0day",
+ "star": 58,
+ "commits": 37,
+ "modify_time": "2018-03-17 04:28:56",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ivanfratric/ropguard",
+ "star": 58,
+ "commits": 3,
+ "modify_time": "2015-05-03 11:25:49",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/int0/processisolator",
+ "star": 58,
+ "commits": 5,
+ "modify_time": "2017-12-03 00:55:57",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/infosecguerrilla/reflectivesoinjection",
+ "star": 58,
+ "commits": 5,
+ "modify_time": "2016-08-22 00:15:50",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hasherezade/crypto_utils",
+ "star": 58,
+ "commits": 30,
+ "modify_time": "2018-04-19 21:51:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hackstar7/wanacry",
+ "star": 58,
+ "commits": 2,
+ "modify_time": "2017-05-13 08:30:06",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/gynophage/solarized_ida",
+ "star": 58,
+ "commits": 5,
+ "modify_time": "2013-02-25 03:11:17",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/gwen001/actarus",
+ "star": 58,
+ "commits": 253,
+ "modify_time": "2019-11-14 09:42:29",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/grehack/ctf-challs",
+ "star": 58,
+ "commits": 123,
+ "modify_time": "2019-11-24 21:33:32",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/fjh658/hexrayscodexplorer",
+ "star": 58,
+ "commits": 154,
+ "modify_time": "2018-10-22 10:43:08",
+ "last_release": "\n 2.1\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/evilsocket/ftrace",
+ "star": 58,
+ "commits": 24,
+ "modify_time": "2018-04-17 23:55:08",
+ "last_release": "v1.2.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/eternalsakura/ctf_pwn",
+ "star": 58,
+ "commits": 49,
+ "modify_time": "2018-04-27 05:06:20",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/eternalc0der/teleshadow3",
+ "star": 58,
+ "commits": 32,
+ "modify_time": "2019-05-20 11:25:09",
+ "last_release": "3.1.0",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/eslint/eslint-scope",
+ "star": 58,
+ "commits": 307,
+ "modify_time": "2019-07-21 03:20:52",
+ "last_release": "v5.0.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/epinna/stegosip",
+ "star": 58,
+ "commits": 10,
+ "modify_time": "2016-11-02 20:04:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dsnet/udptunnel",
+ "star": 58,
+ "commits": 37,
+ "modify_time": "2019-05-31 21:27:31",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/dogoncouch/logdissect",
+ "star": 58,
+ "commits": 435,
+ "modify_time": "2019-02-23 19:14:45",
+ "last_release": "v3.1.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dev-zzo/exploits-nt-privesc",
+ "star": 58,
+ "commits": 29,
+ "modify_time": "2016-01-13 11:48:21",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/detroitenglish/haveibeenpwned-zxcvbn-lambda-api",
+ "star": 58,
+ "commits": 85,
+ "modify_time": "2019-08-27 09:07:56",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/d4rk007/blueghost",
+ "star": 58,
+ "commits": null,
+ "modify_time": "2019-06-30 04:01:54",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/cspf-founder/btslab",
+ "star": 58,
+ "commits": 9,
+ "modify_time": "2016-12-01 06:43:18",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/codereversing/directx9hook",
+ "star": 58,
+ "commits": 4,
+ "modify_time": "2015-12-15 13:56:07",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/coalfire-research/sqlinator",
+ "star": 58,
+ "commits": 15,
+ "modify_time": "2018-10-29 22:28:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cnotin/splunkwhisperer2",
+ "star": 58,
+ "commits": 9,
+ "modify_time": "2019-03-02 17:46:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cloudposse/sudosh",
+ "star": 58,
+ "commits": 10,
+ "modify_time": "2019-07-16 03:46:21",
+ "last_release": "0.2.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/circl/pymisp",
+ "star": 58,
+ "commits": null,
+ "modify_time": "2017-11-10 23:25:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/changeofpace/mouhidinputhook",
+ "star": 58,
+ "commits": 6,
+ "modify_time": "2019-08-18 03:01:07",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/cert-polska/ursadb",
+ "star": 58,
+ "commits": 58,
+ "modify_time": "2019-11-27 17:52:26",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/cc06/dns_transfer_check",
+ "star": 58,
+ "commits": 8,
+ "modify_time": "2015-10-23 13:06:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bwall/extracthosts",
+ "star": 58,
+ "commits": 14,
+ "modify_time": "2014-07-15 08:53:10",
+ "last_release": "v1.3.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/buginux/flexloader",
+ "star": 58,
+ "commits": 17,
+ "modify_time": "2017-06-04 14:42:35",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/brianwarehime/insp3ctor",
+ "star": 58,
+ "commits": 28,
+ "modify_time": "2018-02-05 01:44:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/azerg/remote_dll_injector",
+ "star": 58,
+ "commits": 40,
+ "modify_time": "2017-04-19 11:41:53",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ayra/zipbomb",
+ "star": 58,
+ "commits": 4,
+ "modify_time": "2016-08-02 23:44:19",
+ "last_release": "",
+ "lang": "Batchfile"
+ },
+ {
+ "link": "https://github.com/autodesk/continuous-threat-modeling",
+ "star": 58,
+ "commits": 7,
+ "modify_time": "2019-06-05 01:22:19",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/appsecco/vyapi",
+ "star": 58,
+ "commits": 18,
+ "modify_time": "2019-11-29 12:19:25",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/appliscale/cloud-security-audit",
+ "star": 58,
+ "commits": 130,
+ "modify_time": "2019-02-13 08:35:02",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/alisummer/qqipdetector",
+ "star": 58,
+ "commits": null,
+ "modify_time": "2017-07-08 11:45:33",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/adulau/malwareclassifier",
+ "star": 58,
+ "commits": 20,
+ "modify_time": "2017-01-27 20:42:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/aagarwal1012/image-steganography-library-android",
+ "star": 58,
+ "commits": 88,
+ "modify_time": "2019-09-17 21:52:42",
+ "last_release": "v1.1",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/3gstudent/cve-2017-8464-exp",
+ "star": 58,
+ "commits": 15,
+ "modify_time": "2017-10-09 01:01:20",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/yangzheng10/ss",
+ "star": 57,
+ "commits": 20,
+ "modify_time": "2018-05-04 03:02:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vonsdite/auto_shadowsocks",
+ "star": 57,
+ "commits": 70,
+ "modify_time": "2018-11-08 12:06:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zscdumin/vpn",
+ "star": 57,
+ "commits": 53,
+ "modify_time": "2019-11-12 10:29:14",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/leo-lb/wpbrute-rs",
+ "star": 57,
+ "commits": 6,
+ "modify_time": "2019-12-09 03:32:27",
+ "last_release": "",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/pownjs/pown-cdb",
+ "star": 57,
+ "commits": 34,
+ "modify_time": "2019-06-26 19:22:03",
+ "last_release": "\n v2.1.2\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/trustedsec/honeybadger",
+ "star": 57,
+ "commits": 13,
+ "modify_time": "2019-11-02 00:02:55",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/doctormckay/node-globaloffensive",
+ "star": 57,
+ "commits": 69,
+ "modify_time": "2019-06-13 20:29:47",
+ "last_release": "v2.0.2",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/m0n73/dc26_badgeemulator",
+ "star": 57,
+ "commits": 22,
+ "modify_time": "2018-08-21 06:55:31",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/gosecure/freshonions-torscraper",
+ "star": 57,
+ "commits": 310,
+ "modify_time": "2019-09-26 20:51:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/trailofbits/polyfile",
+ "star": 57,
+ "commits": 184,
+ "modify_time": "2019-12-04 18:51:50",
+ "last_release": "v0.1.4",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/obscuritylabs/InfoPhish",
+ "star": 57,
+ "commits": 25,
+ "modify_time": "2017-10-26 17:32:18",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/pyca/service-identity",
+ "star": 57,
+ "commits": 176,
+ "modify_time": "2019-06-08 13:55:08",
+ "last_release": "\n 18.1.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vysecurity/checkO365",
+ "star": 57,
+ "commits": 4,
+ "modify_time": "2018-06-11 19:20:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/shmilylty/awesome-application-security",
+ "star": 57,
+ "commits": 10,
+ "modify_time": "2017-04-08 18:54:27",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/auth0-samples/auth0-sso-dashboard",
+ "star": 57,
+ "commits": 188,
+ "modify_time": "2016-12-19 09:32:08",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/zond/qisniff",
+ "star": 57,
+ "commits": 35,
+ "modify_time": "2015-09-17 07:43:21",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/xtr4nge/fruityc2-client",
+ "star": 57,
+ "commits": 19,
+ "modify_time": "2017-04-14 09:31:42",
+ "last_release": "v0.4",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/xpn/getsystem-offline",
+ "star": 57,
+ "commits": 1,
+ "modify_time": "2016-02-07 23:52:20",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/windard/sm4",
+ "star": 57,
+ "commits": 6,
+ "modify_time": "2017-11-15 15:30:27",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/williballenthin/idawilli",
+ "star": 57,
+ "commits": 43,
+ "modify_time": "2019-10-17 16:06:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wh1t3rh1n0/ssh-phone-home",
+ "star": 57,
+ "commits": 18,
+ "modify_time": "2016-02-15 17:01:39",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/warflop/whoisleak",
+ "star": 57,
+ "commits": 8,
+ "modify_time": "2018-10-25 17:43:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wangyihang/awesome-web-security",
+ "star": 57,
+ "commits": 70,
+ "modify_time": "2017-10-20 21:41:19",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/walkingcat/symdiff",
+ "star": 57,
+ "commits": 5,
+ "modify_time": "2019-07-28 05:08:02",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/vulnerscom/burp-dirbuster",
+ "star": 57,
+ "commits": 4,
+ "modify_time": "2017-02-22 08:31:32",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/uniking/dingding",
+ "star": 57,
+ "commits": 30,
+ "modify_time": "2019-09-02 10:12:54",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/trustedsec/cors-poc",
+ "star": 57,
+ "commits": 8,
+ "modify_time": "2018-04-02 20:30:36",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/troydo42/cia-hacking-tools",
+ "star": 57,
+ "commits": null,
+ "modify_time": "2017-09-09 03:40:11",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/troybowman/dtxmsg",
+ "star": 57,
+ "commits": 69,
+ "modify_time": "2019-07-09 16:37:35",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/transparencytoolkit/harvester",
+ "star": 57,
+ "commits": 96,
+ "modify_time": "2017-07-22 15:55:34",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/tcpiplab/web-app-hacking-notes",
+ "star": 57,
+ "commits": 78,
+ "modify_time": "2017-10-27 06:53:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tanprathan/fridpa",
+ "star": 57,
+ "commits": 23,
+ "modify_time": "2017-10-06 15:23:52",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/t3rry7f/badtunnel_exp",
+ "star": 57,
+ "commits": 7,
+ "modify_time": "2016-06-20 12:43:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/superhuahua/xunfenges",
+ "star": 57,
+ "commits": 7,
+ "modify_time": "2017-09-05 06:24:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/spiderlabs/burpnotesextension",
+ "star": 57,
+ "commits": 7,
+ "modify_time": "2014-02-27 17:40:09",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/silverwind/oui",
+ "star": 57,
+ "commits": 762,
+ "modify_time": "2019-12-07 10:06:52",
+ "last_release": "\n 10.0.34\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/shssoichiro/zxcvbn-rs",
+ "star": 57,
+ "commits": 84,
+ "modify_time": "2019-11-27 12:31:39",
+ "last_release": "\n v2.0.0\n ",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/s1kr10s/struts2shell",
+ "star": 57,
+ "commits": null,
+ "modify_time": "2018-04-13 15:00:04",
+ "last_release": "",
+ "lang": "python"
+ },
+ {
+ "link": "https://github.com/rub-syssec/antifuzz",
+ "star": 57,
+ "commits": 4,
+ "modify_time": "2019-08-08 10:29:27",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/roryrjb/iplocation",
+ "star": 57,
+ "commits": 43,
+ "modify_time": "2019-12-08 16:20:43",
+ "last_release": "",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/roberteldersoftware/roberteldersoftwarediff",
+ "star": 57,
+ "commits": 12,
+ "modify_time": "2017-08-17 11:20:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rmusser01/hyperdbg",
+ "star": 57,
+ "commits": 58,
+ "modify_time": "2014-06-14 20:19:18",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/qssec/hades-lite",
+ "star": 57,
+ "commits": 16,
+ "modify_time": "2018-12-25 02:43:43",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/programa-stic/marvin-static-analyzer",
+ "star": 57,
+ "commits": 20,
+ "modify_time": "2018-11-22 20:11:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/petrgeorgievsky/gtarenderhook",
+ "star": 57,
+ "commits": 64,
+ "modify_time": "2018-08-18 22:48:37",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/pe3zx/mthc",
+ "star": 57,
+ "commits": 10,
+ "modify_time": "2019-09-19 10:07:48",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/opsdisk/metagoofil",
+ "star": 57,
+ "commits": 45,
+ "modify_time": "2019-12-09 20:03:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/openjailbreak/jailbreakme-1.0",
+ "star": 57,
+ "commits": 1,
+ "modify_time": "2017-09-09 18:53:00",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/openbazaar/go-onion-transport",
+ "star": 57,
+ "commits": 46,
+ "modify_time": "2019-03-22 15:03:06",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/nyan-x-cat/limeusb-csharp",
+ "star": 57,
+ "commits": 9,
+ "modify_time": "2019-06-11 15:36:53",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/nonenotnull/ssrfx",
+ "star": 57,
+ "commits": 7,
+ "modify_time": "2017-03-10 08:35:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nikolamilosevic86/owasp-seraphimdroid",
+ "star": 57,
+ "commits": 199,
+ "modify_time": "2017-08-20 10:24:35",
+ "last_release": "2.5",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/mrash/afl-cve",
+ "star": 57,
+ "commits": 113,
+ "modify_time": "2017-08-21 13:55:20",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/mch2112/sharp80",
+ "star": 57,
+ "commits": 279,
+ "modify_time": "2018-03-31 17:20:01",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/mame82/p4wnp1_nexmon_additions",
+ "star": 57,
+ "commits": 29,
+ "modify_time": "2018-03-29 13:28:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lion-gu/ioc-explorer",
+ "star": 57,
+ "commits": 18,
+ "modify_time": "2019-07-19 01:16:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/linkedin/jaqen",
+ "star": 57,
+ "commits": 1,
+ "modify_time": "2017-07-25 19:21:48",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/lief-project/tutorials",
+ "star": 57,
+ "commits": 18,
+ "modify_time": "2019-12-08 08:26:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lgg/awesome-keepass",
+ "star": 57,
+ "commits": 12,
+ "modify_time": "2019-10-03 21:21:39",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/leoid/b1tmass",
+ "star": 57,
+ "commits": 44,
+ "modify_time": "2019-02-20 18:03:35",
+ "last_release": "v1.0.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/konimarti/opc",
+ "star": 57,
+ "commits": 62,
+ "modify_time": "2019-11-13 04:22:54",
+ "last_release": "v0.3.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/k2/admmutate",
+ "star": 57,
+ "commits": 1,
+ "modify_time": "2016-09-05 21:42:32",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jx-sec/jxotp",
+ "star": 57,
+ "commits": 20,
+ "modify_time": "2018-09-30 08:56:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/justintime/docker-airsonos",
+ "star": 57,
+ "commits": 18,
+ "modify_time": "2016-10-25 19:15:09",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/jrock007/tob",
+ "star": 57,
+ "commits": null,
+ "modify_time": "None",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/joevennix/lan-js",
+ "star": 57,
+ "commits": 25,
+ "modify_time": "2019-05-28 14:39:43",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/jmcerrejon/pikiss",
+ "star": 57,
+ "commits": 338,
+ "modify_time": "2019-11-16 16:16:36",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/jcarlosn/gzip-http-time",
+ "star": 57,
+ "commits": 6,
+ "modify_time": "2016-02-22 11:46:46",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/jaybosamiya/busysteg",
+ "star": 57,
+ "commits": 13,
+ "modify_time": "2017-03-21 04:02:47",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/j3ers3/passlist",
+ "star": 57,
+ "commits": 34,
+ "modify_time": "2019-11-05 05:44:45",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/itskindred/pyembed",
+ "star": 57,
+ "commits": 7,
+ "modify_time": "2019-04-22 15:45:46",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/invokethreatguy/csasc",
+ "star": 57,
+ "commits": null,
+ "modify_time": "2018-06-30 19:34:47",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/henrypp/errorlookup",
+ "star": 57,
+ "commits": 147,
+ "modify_time": "2019-12-02 09:50:00",
+ "last_release": "v.2.3.2",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/he1m4n6a/dictbuilder",
+ "star": 57,
+ "commits": 37,
+ "modify_time": "2018-07-11 09:49:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hbowden/nextgen",
+ "star": 57,
+ "commits": 1167,
+ "modify_time": "2017-05-28 19:31:04",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hashmatter/p3lib",
+ "star": 57,
+ "commits": 75,
+ "modify_time": "2019-08-26 09:46:48",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/hackedteam/core-win64",
+ "star": 57,
+ "commits": 29,
+ "modify_time": "2014-01-16 14:22:14",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/gy-games/shield",
+ "star": 57,
+ "commits": 2,
+ "modify_time": "2017-08-28 09:04:30",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/guitmz/fe2o3",
+ "star": 57,
+ "commits": 8,
+ "modify_time": "2019-09-06 18:56:34",
+ "last_release": "",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/gnieboer/gnuradio_windows_build_scripts",
+ "star": 57,
+ "commits": 429,
+ "modify_time": "2019-06-15 19:20:38",
+ "last_release": "\n v1.6.0\n ",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/gigajew/powerdropper",
+ "star": 57,
+ "commits": 7,
+ "modify_time": "2019-07-21 18:56:13",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/gattermeier/nodejs-virus",
+ "star": 57,
+ "commits": 9,
+ "modify_time": "2016-02-25 22:54:01",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/firebug/pixel-perfect",
+ "star": 57,
+ "commits": 333,
+ "modify_time": "2016-06-07 07:40:25",
+ "last_release": "pixelperfect-2.0.14",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/exalab/anlinux-adfree",
+ "star": 57,
+ "commits": 37,
+ "modify_time": "2019-09-28 09:57:32",
+ "last_release": "v6.01",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/enkomio/anathema",
+ "star": 57,
+ "commits": 4,
+ "modify_time": "2018-01-16 13:35:52",
+ "last_release": "",
+ "lang": "F#"
+ },
+ {
+ "link": "https://github.com/datasoft/nova",
+ "star": 57,
+ "commits": 6,
+ "modify_time": "2015-02-09 21:31:16",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/danielkrupinski/memject",
+ "star": 57,
+ "commits": 40,
+ "modify_time": "2019-09-27 16:44:25",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ctsrc/pgen",
+ "star": 57,
+ "commits": 78,
+ "modify_time": "2019-11-15 22:52:54",
+ "last_release": "\n v1.1.2\n ",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/cryptogenic/ps4-4.0x-code-execution-poc",
+ "star": 57,
+ "commits": 7,
+ "modify_time": "2017-04-08 21:09:07",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/cr4sh/ida-vmware-gdb",
+ "star": 57,
+ "commits": 1,
+ "modify_time": "2012-07-02 12:04:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/coincoin7/wireless-router-vulnerability",
+ "star": 57,
+ "commits": 31,
+ "modify_time": "2017-12-13 03:32:53",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/codectile/paradise",
+ "star": 57,
+ "commits": 17,
+ "modify_time": "2017-02-12 09:50:09",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cleanunicorn/karl",
+ "star": 57,
+ "commits": 211,
+ "modify_time": "2019-11-26 12:49:12",
+ "last_release": "\n 0.8.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/chrismaddalena/goreport",
+ "star": 57,
+ "commits": 20,
+ "modify_time": "2019-07-23 03:50:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bo0om/cve-2017-7089",
+ "star": 57,
+ "commits": 3,
+ "modify_time": "2017-10-03 12:23:42",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/bao7uo/dp_crypto",
+ "star": 57,
+ "commits": 22,
+ "modify_time": "2019-06-16 09:53:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bagder/keyfreq",
+ "star": 57,
+ "commits": 64,
+ "modify_time": "2014-09-17 09:02:00",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/antoinevastel/fp-collect",
+ "star": 57,
+ "commits": 44,
+ "modify_time": "2018-12-18 15:18:42",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/angus-y/pyiris-backdoor",
+ "star": 57,
+ "commits": 374,
+ "modify_time": "2019-12-03 20:00:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/aliveteam/alive_reversing",
+ "star": 57,
+ "commits": 2185,
+ "modify_time": "2019-12-09 20:07:26",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/al0ne/nmap_bypass_ids",
+ "star": 57,
+ "commits": 3,
+ "modify_time": "2019-08-01 02:53:31",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/afagarap/malware-classification",
+ "star": 57,
+ "commits": 103,
+ "modify_time": "2019-12-06 13:54:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/acama/ctf",
+ "star": 57,
+ "commits": 47,
+ "modify_time": "2017-03-01 23:54:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/absolomb/pentesting",
+ "star": 57,
+ "commits": 17,
+ "modify_time": "2017-07-20 18:53:56",
+ "last_release": "",
+ "lang": "Batchfile"
+ },
+ {
+ "link": "https://github.com/15pb/wechat_tools",
+ "star": 57,
+ "commits": 7,
+ "modify_time": "2019-03-01 13:55:16",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://bitbucket.org/intrepidusgroup/mallory",
+ "star": 57,
+ "commits": null,
+ "modify_time": "2013-01-09 15:48:17.226000",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/125k/pwrdeauther",
+ "star": 56,
+ "commits": 51,
+ "modify_time": "2019-10-31 12:49:35",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/v2ray/v2rayng",
+ "star": 56,
+ "commits": 2,
+ "modify_time": "2017-09-11 01:49:24",
+ "last_release": "",
+ "lang": "Kotlin"
+ },
+ {
+ "link": "https://github.com/genymobile/copydeps",
+ "star": 56,
+ "commits": 37,
+ "modify_time": "2019-02-13 14:42:06",
+ "last_release": "\n 1.1.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pwning/plaidctf2014",
+ "star": 56,
+ "commits": 8,
+ "modify_time": "2014-05-02 16:02:42",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/evilsocket/pwngrid",
+ "star": 56,
+ "commits": 223,
+ "modify_time": "2019-11-14 12:52:44",
+ "last_release": "v1.10.3",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/rabbitmask/weblogicscanserver",
+ "star": 56,
+ "commits": 6,
+ "modify_time": "2019-06-28 08:24:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/thelsa/ueditor-getshell",
+ "star": 56,
+ "commits": 14,
+ "modify_time": "2018-08-27 15:44:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pengchujin/onesubscribe",
+ "star": 56,
+ "commits": 34,
+ "modify_time": "2019-03-04 16:04:30",
+ "last_release": "",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/geosn0w/chaos",
+ "star": 56,
+ "commits": 7,
+ "modify_time": "2019-02-14 22:49:28",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/ubernostrum/pwned-passwords-django",
+ "star": 56,
+ "commits": 101,
+ "modify_time": "2019-12-09 02:35:38",
+ "last_release": "\n 1.3.2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/giantbranch/mipsaudit",
+ "star": 56,
+ "commits": 11,
+ "modify_time": "2019-08-28 03:26:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/125K/PwrDeauther",
+ "star": 56,
+ "commits": 51,
+ "modify_time": "2019-10-31 12:49:35",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/hatching/sflock",
+ "star": 56,
+ "commits": 303,
+ "modify_time": "2019-04-29 18:22:33",
+ "last_release": "\n 0.3.9\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wkcaj/safecurl",
+ "star": 56,
+ "commits": 11,
+ "modify_time": "2014-05-22 14:28:18",
+ "last_release": "\n v1.1\n ",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/malscan/malscan",
+ "star": 56,
+ "commits": 401,
+ "modify_time": "2019-04-23 17:06:41",
+ "last_release": "v1.8.1",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/zerosum0x0/shellcodedriver",
+ "star": 56,
+ "commits": 4,
+ "modify_time": "2017-04-21 13:38:42",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/zephrfish/xsspayloads",
+ "star": 56,
+ "commits": 4,
+ "modify_time": "2018-09-17 10:37:32",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/zenvdeluca/net_healer",
+ "star": 56,
+ "commits": 430,
+ "modify_time": "2016-04-25 14:03:32",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/xyzz/ghidra-mep",
+ "star": 56,
+ "commits": 31,
+ "modify_time": "2019-08-09 01:00:49",
+ "last_release": "v0.2",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/xan7r/kerberoast",
+ "star": 56,
+ "commits": 37,
+ "modify_time": "2017-07-22 22:28:05",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/wuseman/wbruter",
+ "star": 56,
+ "commits": 53,
+ "modify_time": "2019-08-04 14:48:45",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/williballenthin/python-sdb",
+ "star": 56,
+ "commits": 29,
+ "modify_time": "2017-11-10 18:54:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/upgoingstar/hackerone_public_reports",
+ "star": 56,
+ "commits": 5,
+ "modify_time": "2015-12-13 09:13:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/unamer/pwnsandboxforctf",
+ "star": 56,
+ "commits": 42,
+ "modify_time": "2019-01-08 13:02:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ufrisk/leechcore",
+ "star": 56,
+ "commits": 30,
+ "modify_time": "2019-10-17 17:39:38",
+ "last_release": "v1.5",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/twz915/django-minicms",
+ "star": 56,
+ "commits": 12,
+ "modify_time": "2016-12-13 17:28:15",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/trojan-gfw/openwrt-trojan",
+ "star": 56,
+ "commits": 17,
+ "modify_time": "2019-10-08 10:41:30",
+ "last_release": "",
+ "lang": "Makefile"
+ },
+ {
+ "link": "https://github.com/toucan-system/pmcma",
+ "star": 56,
+ "commits": 9,
+ "modify_time": "2011-09-12 21:23:19",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/torque59/garfield",
+ "star": 56,
+ "commits": 20,
+ "modify_time": "2018-10-26 07:09:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/stef/pyrsp",
+ "star": 56,
+ "commits": 155,
+ "modify_time": "2019-08-01 21:54:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/stealth/crash",
+ "star": 56,
+ "commits": 32,
+ "modify_time": "2016-07-28 12:03:56",
+ "last_release": "\n crash-0.99s2\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/sophoslabs/cve-2018-18500",
+ "star": 56,
+ "commits": 4,
+ "modify_time": "2019-04-18 20:32:46",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/smihica/pyminizip",
+ "star": 56,
+ "commits": 67,
+ "modify_time": "2019-01-11 14:16:17",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/signetlabdei/lorawan",
+ "star": 56,
+ "commits": 143,
+ "modify_time": "2019-12-04 10:24:49",
+ "last_release": "\n v0.2.1\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/siberas/arpwn",
+ "star": 56,
+ "commits": 8,
+ "modify_time": "2016-05-28 15:28:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/securityriskadvisors/talr",
+ "star": 56,
+ "commits": 6,
+ "modify_time": "2019-02-01 04:01:22",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/seccon/seccon2017_online_ctf",
+ "star": 56,
+ "commits": 2,
+ "modify_time": "2017-12-13 14:33:25",
+ "last_release": "",
+ "lang": "WebAssembly"
+ },
+ {
+ "link": "https://github.com/scubsrgroup/automatic-exploit-generation",
+ "star": 56,
+ "commits": 30,
+ "modify_time": "2019-05-29 13:57:47",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/rolfrolles/pandemicml",
+ "star": 56,
+ "commits": 5,
+ "modify_time": "2019-05-28 23:26:49",
+ "last_release": "",
+ "lang": "OCaml"
+ },
+ {
+ "link": "https://github.com/rocky/python-xdis",
+ "star": 56,
+ "commits": 691,
+ "modify_time": "2019-12-10 02:53:45",
+ "last_release": "4.2.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/roccomuso/alveare",
+ "star": 56,
+ "commits": 53,
+ "modify_time": "2019-10-03 22:26:42",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/rgerganov/nfqsed",
+ "star": 56,
+ "commits": 11,
+ "modify_time": "2018-01-16 08:23:27",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/rehints/blackhat_2015",
+ "star": 56,
+ "commits": 4,
+ "modify_time": "2015-09-15 21:41:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rafiot/kittengroomer",
+ "star": 56,
+ "commits": 240,
+ "modify_time": "2017-10-25 21:09:55",
+ "last_release": "\n 1.3\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/r3nt0n/bopscrk",
+ "star": 56,
+ "commits": 28,
+ "modify_time": "2019-07-14 22:10:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pythonmaster41/go-for-oscp",
+ "star": 56,
+ "commits": 66,
+ "modify_time": "2017-05-17 08:47:59",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/pnfsoftware/jeb2-androsig",
+ "star": 56,
+ "commits": 120,
+ "modify_time": "2019-07-10 16:19:25",
+ "last_release": "\n 1.1.0\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/pirate/mesh-botnet",
+ "star": 56,
+ "commits": 192,
+ "modify_time": "2019-01-29 23:36:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/p1kachu/talking-with-cars",
+ "star": 56,
+ "commits": 155,
+ "modify_time": "2018-06-21 08:25:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ouspg/fuzz-testing-beginners-guide",
+ "star": 56,
+ "commits": 8,
+ "modify_time": "2018-05-04 10:41:46",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/opsxcq/exploit-blacknurse",
+ "star": 56,
+ "commits": 21,
+ "modify_time": "2016-12-14 17:24:42",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/obscuritylabs/os-cfdb",
+ "star": 56,
+ "commits": 472,
+ "modify_time": "2019-03-29 15:31:16",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/nukem9/virtualdbg",
+ "star": 56,
+ "commits": 58,
+ "modify_time": "2016-01-01 18:09:52",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/nextras/secured-links",
+ "star": 56,
+ "commits": 63,
+ "modify_time": "2019-08-12 14:42:00",
+ "last_release": "v1.5.0",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/newlog/exploiting",
+ "star": 56,
+ "commits": 91,
+ "modify_time": "2015-11-08 02:58:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/netflix/iep",
+ "star": 56,
+ "commits": 1112,
+ "modify_time": "2019-12-03 22:09:22",
+ "last_release": "v2.1.7",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/netflix-skunkworks/cloudaux",
+ "star": 56,
+ "commits": 211,
+ "modify_time": "2019-11-14 05:58:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/neo23x0/exotron",
+ "star": 56,
+ "commits": 11,
+ "modify_time": "2018-06-23 11:25:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nccgroup/hashcrack",
+ "star": 56,
+ "commits": 78,
+ "modify_time": "2019-09-06 07:33:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mzeyong/cve-2017-13089",
+ "star": 56,
+ "commits": 3,
+ "modify_time": "2017-11-15 08:36:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/myndtt/ctf-site",
+ "star": 56,
+ "commits": 16,
+ "modify_time": "2018-03-21 07:39:38",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/mwpcheung/ssl-kill-switch2",
+ "star": 56,
+ "commits": 39,
+ "modify_time": "2018-04-11 04:49:46",
+ "last_release": "\n 0.11\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/mvantellingen/psycopg2-ctypes",
+ "star": 56,
+ "commits": 234,
+ "modify_time": "2015-01-31 11:25:39",
+ "last_release": "\n 2.4.4\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/msftserver/ravencoin-wallet-with-miners",
+ "star": 56,
+ "commits": 25,
+ "modify_time": "2018-11-16 17:31:15",
+ "last_release": "6.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/mp911de/spring-cloud-vault-config-samples",
+ "star": 56,
+ "commits": 116,
+ "modify_time": "2019-10-21 10:35:31",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/molnarg/dead0007",
+ "star": 56,
+ "commits": 3,
+ "modify_time": "2014-08-21 06:54:43",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/moki-ics/moki",
+ "star": 56,
+ "commits": 59,
+ "modify_time": "2017-07-18 23:27:28",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/mogwailabs/mjet",
+ "star": 56,
+ "commits": 70,
+ "modify_time": "2019-04-29 06:26:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/marknote/teleshellbot",
+ "star": 56,
+ "commits": 6,
+ "modify_time": "2017-10-10 15:52:25",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/makerbot/miracle-grue",
+ "star": 56,
+ "commits": 1482,
+ "modify_time": "2013-02-19 20:10:58",
+ "last_release": "\n Release2.0.0\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/m0n0ph1/basic-file-crypter",
+ "star": 56,
+ "commits": 15,
+ "modify_time": "2015-07-29 22:28:05",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/lucamassarelli/yarasafe",
+ "star": 56,
+ "commits": 46,
+ "modify_time": "2019-09-09 21:23:40",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/linkedin/sometime",
+ "star": 56,
+ "commits": 8,
+ "modify_time": "2017-04-18 19:54:38",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/latestalexey/awesome-web-hacking",
+ "star": 56,
+ "commits": 74,
+ "modify_time": "2018-11-22 15:59:26",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/kevinmahaffey/tescat",
+ "star": 56,
+ "commits": 5,
+ "modify_time": "2015-08-07 07:08:09",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/keeper-security/commander",
+ "star": 56,
+ "commits": 677,
+ "modify_time": "2019-12-08 22:00:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jspspemu/jspspemu",
+ "star": 56,
+ "commits": 306,
+ "modify_time": "2019-11-21 21:04:14",
+ "last_release": "v0.0.3",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/jschicht/extractusnjrnl",
+ "star": 56,
+ "commits": 7,
+ "modify_time": "2019-07-30 19:17:08",
+ "last_release": "",
+ "lang": "AutoIt"
+ },
+ {
+ "link": "https://github.com/jpenalbae/r2-scripts",
+ "star": 56,
+ "commits": 21,
+ "modify_time": "2017-11-06 18:52:42",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/joxeankoret/maltindex",
+ "star": 56,
+ "commits": 5,
+ "modify_time": "2017-06-26 20:58:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/johnjohndoe/proguard",
+ "star": 56,
+ "commits": 56,
+ "modify_time": "2019-11-22 00:18:16",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/jnferguson/double-free-examples",
+ "star": 56,
+ "commits": 3,
+ "modify_time": "2017-07-01 21:03:36",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/jekil/hostmap",
+ "star": 56,
+ "commits": 389,
+ "modify_time": "2014-08-29 21:59:30",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/jduck/canhazaxs",
+ "star": 56,
+ "commits": 30,
+ "modify_time": "2018-11-07 20:22:24",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jas502n/cve-2018-3191",
+ "star": 56,
+ "commits": 14,
+ "modify_time": "2018-10-24 17:42:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jaapbrasser/sharedscripts",
+ "star": 56,
+ "commits": 155,
+ "modify_time": "2019-12-08 21:52:53",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/iriscouch/request_jquery",
+ "star": 56,
+ "commits": 1,
+ "modify_time": "2011-12-23 03:14:57",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/honeynet/ghost-usb-honeypot",
+ "star": 56,
+ "commits": 89,
+ "modify_time": "2015-03-24 14:35:33",
+ "last_release": "\n v0.3\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hamz-a/frida-android-libbinder",
+ "star": 56,
+ "commits": 6,
+ "modify_time": "2019-04-24 20:17:24",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/gnaixx/anti-debug",
+ "star": 56,
+ "commits": 11,
+ "modify_time": "2017-02-07 02:15:51",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/geeksonsecurity/illuminatejs",
+ "star": 56,
+ "commits": 12,
+ "modify_time": "2019-06-17 14:10:32",
+ "last_release": "",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/ge0rg/samsung-nx-hacks",
+ "star": 56,
+ "commits": 8,
+ "modify_time": "2015-04-02 08:31:18",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/gdssecurity/sqlbrute",
+ "star": 56,
+ "commits": 1,
+ "modify_time": "2011-04-27 19:40:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gajus/global-agent",
+ "star": 56,
+ "commits": 88,
+ "modify_time": "2019-11-18 21:23:37",
+ "last_release": "v2.1.7",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/foreni-packages/dhcpig",
+ "star": 56,
+ "commits": 7,
+ "modify_time": "2014-10-13 08:21:00",
+ "last_release": "\n upstream/0.2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/forallsecure/bncov",
+ "star": 56,
+ "commits": 30,
+ "modify_time": "2019-10-21 22:29:21",
+ "last_release": "v1.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fireeye/unicorn-libemu-shim",
+ "star": 56,
+ "commits": 2,
+ "modify_time": "2017-04-14 18:08:16",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/epinna/unusedpkg",
+ "star": 56,
+ "commits": 23,
+ "modify_time": "2016-10-18 11:50:36",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/emirozer/nixarmor",
+ "star": 56,
+ "commits": 32,
+ "modify_time": "2015-11-22 12:17:46",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/egorbo/intrinsicsplayground",
+ "star": 56,
+ "commits": 41,
+ "modify_time": "2018-12-04 11:44:23",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/dwizzzle/presentations",
+ "star": 56,
+ "commits": 6,
+ "modify_time": "2019-11-04 12:04:20",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/digitalocean/debian-sys-maint-roll-passwd",
+ "star": 56,
+ "commits": 17,
+ "modify_time": "2017-09-19 00:20:06",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/devzero2000/shellcoderhandbook",
+ "star": 56,
+ "commits": 3,
+ "modify_time": "2014-01-22 10:38:13",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/destine21/zipfileraider",
+ "star": 56,
+ "commits": 6,
+ "modify_time": "2018-11-30 06:07:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dapphub/ds-auth",
+ "star": 56,
+ "commits": 97,
+ "modify_time": "2018-12-02 13:53:07",
+ "last_release": "",
+ "lang": "Nix"
+ },
+ {
+ "link": "https://github.com/danielmiessler/blackhat-arsenal-tools",
+ "star": 56,
+ "commits": 86,
+ "modify_time": "2017-08-04 21:36:18",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/cuppa-joe/dsame",
+ "star": 56,
+ "commits": 51,
+ "modify_time": "2017-03-13 03:24:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cturt/ps2-yabasic-exploit",
+ "star": 56,
+ "commits": 8,
+ "modify_time": "2019-10-22 19:57:38",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/coolervoid/rootstealer",
+ "star": 56,
+ "commits": 2,
+ "modify_time": "2018-04-19 14:08:58",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cn33liz/ms17-012",
+ "star": 56,
+ "commits": 2,
+ "modify_time": "2017-03-28 16:47:39",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/chef-koch/windows-10-hardening",
+ "star": 56,
+ "commits": 20,
+ "modify_time": "2019-12-06 21:06:14",
+ "last_release": "\n 1.0\n ",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/bytebandits/writeups",
+ "star": 56,
+ "commits": 106,
+ "modify_time": "2019-11-13 10:24:29",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/bonkc/bugbountysubdomains",
+ "star": 56,
+ "commits": 13,
+ "modify_time": "2018-03-29 03:56:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bigsizeme/burplugin-java-rce",
+ "star": 56,
+ "commits": 11,
+ "modify_time": "2017-10-22 11:07:38",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/b-mueller/laser-ethereum",
+ "star": 56,
+ "commits": 335,
+ "modify_time": "2018-05-29 08:56:48",
+ "last_release": "v0.17.12",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/axoltl/hubcap",
+ "star": 56,
+ "commits": 1,
+ "modify_time": "2014-08-29 03:21:37",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/averagesecurityguy/ptnotes",
+ "star": 56,
+ "commits": 138,
+ "modify_time": "2018-03-16 16:41:52",
+ "last_release": "\n v1.4\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/angr/archinfo",
+ "star": 56,
+ "commits": 380,
+ "modify_time": "2019-12-04 21:41:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/amotzte/android-mock-location-for-development",
+ "star": 56,
+ "commits": 11,
+ "modify_time": "2017-08-15 12:05:21",
+ "last_release": "0.3",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/albertzsigovits/malware-writeups",
+ "star": 56,
+ "commits": 77,
+ "modify_time": "2019-11-25 10:34:22",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/heiher/hev-socks5-tproxy",
+ "star": 55,
+ "commits": 198,
+ "modify_time": "2019-09-26 11:05:00",
+ "last_release": "\n 1.7.2\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/instantwebp2p/peer-proxy",
+ "star": 55,
+ "commits": 208,
+ "modify_time": "2019-12-09 03:17:52",
+ "last_release": "\n 1.1.1\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/victorqribeiro/bruteforcetv",
+ "star": 55,
+ "commits": 5,
+ "modify_time": "2019-11-21 12:06:33",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/vanhoefm/dragondrain-and-time",
+ "star": 55,
+ "commits": 2931,
+ "modify_time": "2019-06-10 17:57:55",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ztgrace/pwnboard",
+ "star": 55,
+ "commits": 28,
+ "modify_time": "2018-03-29 01:42:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jpcertcc/cordova",
+ "star": 55,
+ "commits": 15,
+ "modify_time": "2019-02-09 17:15:37",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/osirislab/csaw-ctf-2018-finals",
+ "star": 55,
+ "commits": 3,
+ "modify_time": "2018-11-17 21:04:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/eyalz800/zpp_hypervisor",
+ "star": 55,
+ "commits": 25,
+ "modify_time": "2019-06-03 14:45:32",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/m1dr05/istheapp",
+ "star": 55,
+ "commits": 23,
+ "modify_time": "2019-11-15 17:04:32",
+ "last_release": "",
+ "lang": "Kotlin"
+ },
+ {
+ "link": "https://github.com/pengchujin/subscribevue",
+ "star": 55,
+ "commits": 32,
+ "modify_time": "2019-03-04 16:02:07",
+ "last_release": "",
+ "lang": "Vue"
+ },
+ {
+ "link": "https://github.com/ohjeongwook/powershellrunbox",
+ "star": 55,
+ "commits": 31,
+ "modify_time": "2019-10-25 16:54:17",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/lc/hacks",
+ "star": 55,
+ "commits": 7,
+ "modify_time": "2019-11-10 18:05:04",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/ripxorip/aerojump.nvim",
+ "star": 55,
+ "commits": 97,
+ "modify_time": "2019-10-21 17:26:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/resilar/crchack",
+ "star": 55,
+ "commits": 46,
+ "modify_time": "2019-10-08 13:33:29",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/re4lity/PoCorExp",
+ "star": 55,
+ "commits": 32,
+ "modify_time": "2019-07-16 19:08:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/RedTeamWing/Pentest_WiKi",
+ "star": 55,
+ "commits": 5,
+ "modify_time": "2019-11-10 08:41:55",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/SecureAuthCorp/SAP-Dissection-plug-in-for-Wireshark",
+ "star": 55,
+ "commits": 446,
+ "modify_time": "2019-11-05 20:58:01",
+ "last_release": "v0.6.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/PegasusLab/PegasusTeam",
+ "star": 55,
+ "commits": 9,
+ "modify_time": "2018-12-12 13:59:47",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/canonical-web-and-design/ubuntu.com",
+ "star": 55,
+ "commits": 9759,
+ "modify_time": "2019-12-10 09:52:05",
+ "last_release": "19.10",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/yrzx404/free-security-resources",
+ "star": 55,
+ "commits": 13,
+ "modify_time": "2017-09-01 02:38:18",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/winbagility/winbagility",
+ "star": 55,
+ "commits": 21,
+ "modify_time": "2018-02-02 17:58:09",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/watf-team/watf-bank",
+ "star": 55,
+ "commits": 84,
+ "modify_time": "2019-11-20 14:23:37",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/wangyihang/find-php-vulnerabilities",
+ "star": 55,
+ "commits": 24,
+ "modify_time": "2018-06-14 03:47:21",
+ "last_release": "\n v1.1.2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vletoux/ms17-010-scanner",
+ "star": 55,
+ "commits": 2,
+ "modify_time": "2017-07-16 13:06:59",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/ubeacsec/silverdog",
+ "star": 55,
+ "commits": 41,
+ "modify_time": "2018-07-02 09:39:59",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/tyranid/windowsruntimesecuritydemos",
+ "star": 55,
+ "commits": 2,
+ "modify_time": "2018-11-16 21:19:06",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/troyhunt/pineapplesurprise",
+ "star": 55,
+ "commits": 9,
+ "modify_time": "2014-11-30 07:55:09",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/trietptm/security-news",
+ "star": 55,
+ "commits": 821,
+ "modify_time": "2017-06-17 08:53:56",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/trickster0/enyx",
+ "star": 55,
+ "commits": 26,
+ "modify_time": "2019-08-22 18:15:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tinysec/jsrt",
+ "star": 55,
+ "commits": 152,
+ "modify_time": "2017-12-26 09:13:59",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/thesph1nx/slickermaster-rev4",
+ "star": 55,
+ "commits": 8,
+ "modify_time": "2019-08-06 18:56:14",
+ "last_release": "",
+ "lang": "Visual Basic .NET"
+ },
+ {
+ "link": "https://github.com/tgeaus/weak-password",
+ "star": 55,
+ "commits": 73,
+ "modify_time": "2019-05-27 01:19:40",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/synack/chaoticmarch",
+ "star": 55,
+ "commits": 27,
+ "modify_time": "2016-07-07 19:43:11",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/sowish/sqlmapapi_pi",
+ "star": 55,
+ "commits": 10,
+ "modify_time": "2016-08-27 09:43:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sourceperl/mbtget",
+ "star": 55,
+ "commits": 21,
+ "modify_time": "2019-04-08 16:21:50",
+ "last_release": "v1.5.0",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/sigint9/yaragui",
+ "star": 55,
+ "commits": 85,
+ "modify_time": "2017-06-18 20:01:41",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/shaanen/osint-combiner",
+ "star": 55,
+ "commits": 218,
+ "modify_time": "2017-09-15 09:18:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/season-lab/survey-symbolic-execution",
+ "star": 55,
+ "commits": 986,
+ "modify_time": "2018-05-03 19:55:43",
+ "last_release": "",
+ "lang": "TeX"
+ },
+ {
+ "link": "https://github.com/scriptjunkie/msfgui",
+ "star": 55,
+ "commits": 18,
+ "modify_time": "2016-10-18 11:41:39",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/saz/puppet-memcached",
+ "star": 55,
+ "commits": 275,
+ "modify_time": "2019-10-16 14:53:25",
+ "last_release": "\n v3.4.0\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/samlarenn/callbackdisabler",
+ "star": 55,
+ "commits": 6,
+ "modify_time": "2017-10-16 15:00:32",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/s2e/s2e-env",
+ "star": 55,
+ "commits": 360,
+ "modify_time": "2019-11-10 20:53:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/s-kanev/xiosim",
+ "star": 55,
+ "commits": 1371,
+ "modify_time": "2016-07-19 17:21:33",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/righettod/virtualhost-payload-generator",
+ "star": 55,
+ "commits": 14,
+ "modify_time": "2017-10-08 07:10:59",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/rapid7/reflectivedllinjection",
+ "star": 55,
+ "commits": 34,
+ "modify_time": "2019-05-16 05:59:24",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/rani-i/bluetoothdpoc",
+ "star": 55,
+ "commits": 10,
+ "modify_time": "2019-02-18 14:43:07",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/pidydx/smrt",
+ "star": 55,
+ "commits": 43,
+ "modify_time": "2016-01-11 17:37:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/outflanknl/scripts",
+ "star": 55,
+ "commits": 11,
+ "modify_time": "2019-10-30 09:01:24",
+ "last_release": "",
+ "lang": "Visual Basic .NET"
+ },
+ {
+ "link": "https://github.com/ouspg/libfuzzerfication",
+ "star": 55,
+ "commits": 483,
+ "modify_time": "2017-01-09 14:12:03",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/osql/osql",
+ "star": 55,
+ "commits": 4731,
+ "modify_time": "2019-06-12 19:46:29",
+ "last_release": "\n 3.3.2\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/nyx0/pony",
+ "star": 55,
+ "commits": 3,
+ "modify_time": "2015-02-25 05:25:27",
+ "last_release": "",
+ "lang": "Pascal"
+ },
+ {
+ "link": "https://github.com/nccgroup/mnemosyne",
+ "star": 55,
+ "commits": 26,
+ "modify_time": "2017-04-18 09:29:28",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/msfidelis/kill-router-",
+ "star": 55,
+ "commits": 32,
+ "modify_time": "2018-02-03 15:22:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mindpointgroup/ansible-vmware-provisioning",
+ "star": 55,
+ "commits": 20,
+ "modify_time": "2018-10-14 02:39:53",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/mefistotelis/ida-pro-loadmap",
+ "star": 55,
+ "commits": 7,
+ "modify_time": "2019-06-19 06:45:28",
+ "last_release": "1.3",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/m4sc3r4n0/spyrat",
+ "star": 55,
+ "commits": 3,
+ "modify_time": "2017-05-30 17:54:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lanjelot/twisted-honeypots",
+ "star": 55,
+ "commits": 29,
+ "modify_time": "2018-04-03 01:48:27",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/kkamagui/shadow-box-for-arm",
+ "star": 55,
+ "commits": 4,
+ "modify_time": "2018-06-05 05:59:19",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/kakaroto/ps3ida",
+ "star": 55,
+ "commits": 38,
+ "modify_time": "2012-08-25 19:07:52",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/jkpang/timliu-ios",
+ "star": 55,
+ "commits": 1422,
+ "modify_time": "2017-11-30 03:09:40",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/jes/chess-steg",
+ "star": 55,
+ "commits": 26,
+ "modify_time": "2019-04-16 11:45:11",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/jamessmith2/ethmonitoring",
+ "star": 55,
+ "commits": 40,
+ "modify_time": "2018-01-26 20:59:44",
+ "last_release": "1.10",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/huoji120/av-killer",
+ "star": 55,
+ "commits": 3,
+ "modify_time": "2018-02-08 12:22:27",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/hestat/lw-yara",
+ "star": 55,
+ "commits": 234,
+ "modify_time": "2019-11-28 11:47:41",
+ "last_release": "",
+ "lang": "YARA"
+ },
+ {
+ "link": "https://github.com/gyyyy/footprint",
+ "star": 55,
+ "commits": 89,
+ "modify_time": "2019-12-08 09:07:27",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/fox-it/bloodhound-import",
+ "star": 55,
+ "commits": 23,
+ "modify_time": "2019-12-09 16:33:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/flo354/androick",
+ "star": 55,
+ "commits": 8,
+ "modify_time": "2018-07-04 15:15:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/feliam/klee-taint",
+ "star": 55,
+ "commits": 1440,
+ "modify_time": "2017-10-23 14:06:46",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/elevenpaths/dirtytooth-raspberrypi",
+ "star": 55,
+ "commits": 5,
+ "modify_time": "2017-12-12 11:34:26",
+ "last_release": "2.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/eclypsium/screwed-drivers",
+ "star": 55,
+ "commits": 12,
+ "modify_time": "2019-10-18 00:27:47",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/dogoncouch/logesp",
+ "star": 55,
+ "commits": 962,
+ "modify_time": "2019-09-01 23:46:48",
+ "last_release": "v0.2-beta",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/docker-linux/kali-metasploit",
+ "star": 55,
+ "commits": 13,
+ "modify_time": "2016-09-17 05:59:47",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/danielkrupinski/vac-hooks",
+ "star": 55,
+ "commits": 318,
+ "modify_time": "2019-12-07 17:05:53",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cognifide/aem-rules-for-sonarqube",
+ "star": 55,
+ "commits": 547,
+ "modify_time": "2019-06-24 08:18:00",
+ "last_release": "v1.0-RC2",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/cignoraptor-ita/cignotrack",
+ "star": 55,
+ "commits": 132,
+ "modify_time": "2019-07-01 12:58:30",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/chadillac/mdns_recon",
+ "star": 55,
+ "commits": 10,
+ "modify_time": "2017-02-27 00:41:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/caseysmithrc/memmitm",
+ "star": 55,
+ "commits": null,
+ "modify_time": "2018-04-24 14:24:22",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/bsmali4/checksql",
+ "star": 55,
+ "commits": null,
+ "modify_time": "2016-11-07 05:28:34",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/brianloveswords/python-jws",
+ "star": 55,
+ "commits": 120,
+ "modify_time": "2017-09-21 21:15:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bazad/physmem",
+ "star": 55,
+ "commits": 2,
+ "modify_time": "2017-01-16 18:13:00",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/basketwill/z0bpctools",
+ "star": 55,
+ "commits": 8,
+ "modify_time": "2019-07-23 13:09:36",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/az0ne/python_backdoor",
+ "star": 55,
+ "commits": 8,
+ "modify_time": "2015-11-19 07:27:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/az0ne/jboss_autoexploit",
+ "star": 55,
+ "commits": 4,
+ "modify_time": "2015-12-06 12:58:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/attackanddefencesecuritylab/ad_webscanner",
+ "star": 55,
+ "commits": 179,
+ "modify_time": "2019-03-16 00:52:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/antitree/manitree",
+ "star": 55,
+ "commits": 28,
+ "modify_time": "2012-07-06 19:35:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/anestisb/melkor-android",
+ "star": 55,
+ "commits": 1,
+ "modify_time": "2014-08-21 03:08:40",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ahm3dhany/ids-evasion",
+ "star": 55,
+ "commits": 44,
+ "modify_time": "2017-09-13 15:04:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ahhh/ntp_trojan",
+ "star": 55,
+ "commits": 9,
+ "modify_time": "2015-10-11 00:18:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/abatchy17/introduction-to-manual-backdooring",
+ "star": 55,
+ "commits": 6,
+ "modify_time": "2017-05-30 23:24:00",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/5alt/zeroscan",
+ "star": 55,
+ "commits": 24,
+ "modify_time": "2019-09-18 07:02:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dhondta/sploitkit",
+ "star": 54,
+ "commits": 197,
+ "modify_time": "2019-12-10 20:47:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gh0stkey/ahrid",
+ "star": 54,
+ "commits": 5,
+ "modify_time": "2019-11-19 08:42:02",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/chengluffy/shadowsocksfree",
+ "star": 54,
+ "commits": 148,
+ "modify_time": "2019-11-17 10:21:23",
+ "last_release": "",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/mozillasecurity/libfuzzer-python-bridge",
+ "star": 54,
+ "commits": 9,
+ "modify_time": "2019-05-24 08:41:27",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/snail007/goproxy-heroku",
+ "star": 54,
+ "commits": 17,
+ "modify_time": "2019-09-17 01:48:16",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/ryhanson/keyslack",
+ "star": 54,
+ "commits": 10,
+ "modify_time": "2015-09-25 15:47:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xairy/ubuntu-hardening",
+ "star": 54,
+ "commits": 5,
+ "modify_time": "2019-12-01 09:07:07",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/secwiki/ctf-hub",
+ "star": 54,
+ "commits": 102,
+ "modify_time": "2018-08-28 13:57:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/giovannicolonna/msfvenom-backdoor-android",
+ "star": 54,
+ "commits": 6,
+ "modify_time": "2016-11-05 23:14:27",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/konklone/cdns-to-https",
+ "star": 54,
+ "commits": 57,
+ "modify_time": "2015-07-13 20:25:43",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/fatihh92/hackthebox-writeups",
+ "star": 54,
+ "commits": 180,
+ "modify_time": "2019-12-07 08:01:22",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ahref-group/superpanel",
+ "star": 54,
+ "commits": 28,
+ "modify_time": "2018-08-27 22:15:43",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/kkamagui/napper-for-tpm",
+ "star": 54,
+ "commits": 13,
+ "modify_time": "2019-11-26 02:43:46",
+ "last_release": "v1.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cuyler36/ghidra-gamecube-loader",
+ "star": 54,
+ "commits": 69,
+ "modify_time": "2019-11-23 18:44:40",
+ "last_release": "1.1.0",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/aravinthpanch/rssi",
+ "star": 54,
+ "commits": 111,
+ "modify_time": "2019-10-12 19:56:30",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/geovation/wifispy",
+ "star": 54,
+ "commits": 46,
+ "modify_time": "2016-04-15 16:52:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ediardo/kmdr-cli",
+ "star": 54,
+ "commits": 223,
+ "modify_time": "2019-11-25 17:07:26",
+ "last_release": "v0.4.0-0",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/usnistgov/acvp",
+ "star": 54,
+ "commits": 1152,
+ "modify_time": "2019-11-14 16:35:44",
+ "last_release": "v0.5-pre",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/YahooArchive/PyIOCe",
+ "star": 54,
+ "commits": 71,
+ "modify_time": "2015-03-10 03:58:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/southpolenator/SharpDebug",
+ "star": 54,
+ "commits": 1262,
+ "modify_time": "2019-10-02 22:13:37",
+ "last_release": "1.3.0.127",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/k4yt3x/defense-matrix",
+ "star": 54,
+ "commits": 86,
+ "modify_time": "2018-11-04 22:01:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/GraxCode/java-unpacker",
+ "star": 54,
+ "commits": 6,
+ "modify_time": "2018-02-07 10:57:30",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/zardus/idalink",
+ "star": 54,
+ "commits": 82,
+ "modify_time": "2018-10-17 21:30:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/x64dbg/snowman",
+ "star": 54,
+ "commits": 756,
+ "modify_time": "2019-06-23 14:35:30",
+ "last_release": "plugin-v1",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/whitehat-zero/powenum",
+ "star": 54,
+ "commits": 84,
+ "modify_time": "2017-10-19 14:05:02",
+ "last_release": "3.0",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/w181496/ctf",
+ "star": 54,
+ "commits": 138,
+ "modify_time": "2019-12-01 23:22:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vy/hrrs",
+ "star": 54,
+ "commits": 116,
+ "modify_time": "2019-11-26 18:04:05",
+ "last_release": "\n hrrs-parent-0.6\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/vulnerscom/vulners-scanner",
+ "star": 54,
+ "commits": 12,
+ "modify_time": "2018-07-25 13:23:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/userlandkernel/jailbreakme-unified",
+ "star": 54,
+ "commits": 146,
+ "modify_time": "2018-11-13 00:28:42",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/ucsb-seclab/agrigento",
+ "star": 54,
+ "commits": 8,
+ "modify_time": "2019-11-17 19:21:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/thelinuxchoice/tweetshell",
+ "star": 54,
+ "commits": 13,
+ "modify_time": "2018-06-15 01:10:59",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/tasox/logrm",
+ "star": 54,
+ "commits": 130,
+ "modify_time": "2019-07-09 07:06:07",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/tandasat/fu_hypervisor",
+ "star": 54,
+ "commits": 7,
+ "modify_time": "2018-01-28 13:54:34",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/soulxu/kvmsample",
+ "star": 54,
+ "commits": 1,
+ "modify_time": "2012-06-02 12:40:19",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/sisoma2/shellcodeloader",
+ "star": 54,
+ "commits": 9,
+ "modify_time": "2018-05-16 16:45:02",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/rwfpl/rewolf-msi-exploit",
+ "star": 54,
+ "commits": 8,
+ "modify_time": "2016-09-26 07:23:11",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/rodionovd/cuckoo-osx-analyzer",
+ "star": 54,
+ "commits": 375,
+ "modify_time": "2015-08-26 05:15:32",
+ "last_release": "0.3.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/raymon-tian/wfpfirewall",
+ "star": 54,
+ "commits": 20,
+ "modify_time": "2017-08-12 01:16:53",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/r3kapig/writeup",
+ "star": 54,
+ "commits": 42,
+ "modify_time": "2019-10-17 16:37:48",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/professormahi/ctf",
+ "star": 54,
+ "commits": 254,
+ "modify_time": "2019-04-15 19:05:32",
+ "last_release": "",
+ "lang": "MATLAB"
+ },
+ {
+ "link": "https://github.com/picatz/shodanz",
+ "star": 54,
+ "commits": 143,
+ "modify_time": "2019-12-05 02:22:33",
+ "last_release": "v2.0.0",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/patois/drgadget",
+ "star": 54,
+ "commits": 19,
+ "modify_time": "2017-02-02 17:10:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/passingtheknowledge/ganxo",
+ "star": 54,
+ "commits": 1,
+ "modify_time": "2017-05-30 20:11:38",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/objective-see/aurevoir",
+ "star": 54,
+ "commits": 19,
+ "modify_time": "2018-05-14 20:04:01",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/nnewsom/webbies",
+ "star": 54,
+ "commits": 37,
+ "modify_time": "2015-06-03 21:23:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nezza/scada-stuff",
+ "star": 54,
+ "commits": 12,
+ "modify_time": "2018-03-14 15:16:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/netstalking-core/netstalking-osint",
+ "star": 54,
+ "commits": 36,
+ "modify_time": "2019-10-10 20:42:12",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/netflix-skunkworks/aws-metadata-proxy",
+ "star": 54,
+ "commits": 2,
+ "modify_time": "2018-09-17 15:04:34",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/nelhage/reverse-android",
+ "star": 54,
+ "commits": 15,
+ "modify_time": "2011-03-21 22:52:02",
+ "last_release": "",
+ "lang": "Emacs Lisp"
+ },
+ {
+ "link": "https://github.com/nccgroup/assethook",
+ "star": 54,
+ "commits": 1,
+ "modify_time": "2017-05-17 05:22:37",
+ "last_release": "",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/mzpqnxow/embedded-toolkit",
+ "star": 54,
+ "commits": null,
+ "modify_time": "2019-03-16 22:28:38",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/muhammd/awesome-pentest",
+ "star": 54,
+ "commits": 4,
+ "modify_time": "2019-02-26 14:14:53",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/msimerson/sentry",
+ "star": 54,
+ "commits": 32,
+ "modify_time": "2016-12-28 21:38:29",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/mseclab/burp-pyjfuzz",
+ "star": 54,
+ "commits": 31,
+ "modify_time": "2017-04-10 10:20:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mirsamantajbakhsh/onionharvester",
+ "star": 54,
+ "commits": 31,
+ "modify_time": "2018-05-28 07:06:50",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/mikeryan/uberducky",
+ "star": 54,
+ "commits": 11,
+ "modify_time": "2018-12-05 17:47:36",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/mikerah/awesome-privacy-on-blockchains",
+ "star": 54,
+ "commits": 11,
+ "modify_time": "2019-09-08 22:20:11",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/microsoftedge/dev.microsoftedge.com-vms",
+ "star": 54,
+ "commits": 4,
+ "modify_time": "2018-01-26 15:04:06",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/matt-kempster/mips_to_c",
+ "star": 54,
+ "commits": 287,
+ "modify_time": "2019-11-01 10:37:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/matejbasic/pythonscrapybasicsetup",
+ "star": 54,
+ "commits": 30,
+ "modify_time": "2017-12-19 17:42:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/masood-m/yalih",
+ "star": 54,
+ "commits": 52,
+ "modify_time": "2019-06-18 23:23:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/malwaretech/fsthook",
+ "star": 54,
+ "commits": 2,
+ "modify_time": "2015-04-02 07:45:54",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/lontivero/vinchuca",
+ "star": 54,
+ "commits": 60,
+ "modify_time": "2017-04-05 15:26:33",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/letssudormrf/ssr-bbr-docker",
+ "star": 54,
+ "commits": 7,
+ "modify_time": "2017-08-08 14:24:18",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/klsecservices/s7scan",
+ "star": 54,
+ "commits": 18,
+ "modify_time": "2018-12-28 12:11:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/klionsec/bypassav-allthings",
+ "star": 54,
+ "commits": 15,
+ "modify_time": "2019-06-11 23:40:33",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/julbouln/ice40_eink_controller",
+ "star": 54,
+ "commits": 15,
+ "modify_time": "2019-09-25 16:22:30",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/islamadel/bat2exe",
+ "star": 54,
+ "commits": 4,
+ "modify_time": "2015-08-21 18:11:51",
+ "last_release": "1.4",
+ "lang": "Batchfile"
+ },
+ {
+ "link": "https://github.com/ioerror/crlwatch",
+ "star": 54,
+ "commits": 1849,
+ "modify_time": "2011-03-22 06:02:34",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/heurs/parsentfs",
+ "star": 54,
+ "commits": 2,
+ "modify_time": "2017-08-03 14:42:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hclx/dell_power_spoofer",
+ "star": 54,
+ "commits": 4,
+ "modify_time": "2014-02-26 06:10:20",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/hannob/superfishy",
+ "star": 54,
+ "commits": 24,
+ "modify_time": "2019-05-21 20:54:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hailocab/logslam",
+ "star": 54,
+ "commits": 3,
+ "modify_time": "2015-01-21 20:05:14",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/gray-panda/grayrepo",
+ "star": 54,
+ "commits": 63,
+ "modify_time": "2019-09-28 05:09:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gosecure/dllpasswordfilterimplant",
+ "star": 54,
+ "commits": 21,
+ "modify_time": "2019-04-30 19:35:58",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/google/security-crawl-maze",
+ "star": 54,
+ "commits": 25,
+ "modify_time": "2019-08-22 13:46:02",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/gehaxelt/ds_store",
+ "star": 54,
+ "commits": 9,
+ "modify_time": "2016-04-10 17:35:36",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/fedora-infra/asknot-ng",
+ "star": 54,
+ "commits": 291,
+ "modify_time": "2019-12-01 11:27:25",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/enovella/androidtrainings",
+ "star": 54,
+ "commits": 16,
+ "modify_time": "2018-09-19 00:50:42",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/dr0op/bufferfly",
+ "star": 54,
+ "commits": 12,
+ "modify_time": "2019-07-17 08:18:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cujanovic/subdomain-bruteforce-list",
+ "star": 54,
+ "commits": 14,
+ "modify_time": "2018-08-28 20:15:57",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/cranklin/python-virus",
+ "star": 54,
+ "commits": 2,
+ "modify_time": "2012-05-10 07:03:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/circl/potiron",
+ "star": 54,
+ "commits": 382,
+ "modify_time": "2019-03-01 08:12:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/census/windows_10_rs2_rs3_exploitation_primitives",
+ "star": 54,
+ "commits": 2,
+ "modify_time": "2018-02-27 15:21:45",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/casperreverser/casperreverse",
+ "star": 54,
+ "commits": 4,
+ "modify_time": "2017-02-14 01:15:21",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/byt3bl33d3r/invoke-autoit",
+ "star": 54,
+ "commits": 5,
+ "modify_time": "2017-07-08 15:13:56",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/bsidessf/ctf-2019-release",
+ "star": 54,
+ "commits": 1,
+ "modify_time": "2019-03-10 02:56:14",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/bronsa/tools.decompiler",
+ "star": 54,
+ "commits": 407,
+ "modify_time": "2019-05-26 10:09:00",
+ "last_release": "",
+ "lang": "Clojure"
+ },
+ {
+ "link": "https://github.com/az0ne/simple_zoomeye",
+ "star": 54,
+ "commits": 7,
+ "modify_time": "2016-04-02 01:36:27",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/ayoul3/privesc",
+ "star": 54,
+ "commits": 37,
+ "modify_time": "2018-09-10 17:42:28",
+ "last_release": "",
+ "lang": "Self"
+ },
+ {
+ "link": "https://github.com/auth0-blog/elm-with-jwt-api",
+ "star": 54,
+ "commits": 10,
+ "modify_time": "2017-04-26 14:44:24",
+ "last_release": "",
+ "lang": "Elm"
+ },
+ {
+ "link": "https://github.com/aserper/ddetect",
+ "star": 54,
+ "commits": 12,
+ "modify_time": "2017-11-24 15:44:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ajohnston9/ciscorouter",
+ "star": 54,
+ "commits": 97,
+ "modify_time": "2014-12-17 03:03:27",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/5up3rc/weblogic_cmd",
+ "star": 54,
+ "commits": 2,
+ "modify_time": "2017-07-13 02:32:33",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/5alt/vulhint",
+ "star": 54,
+ "commits": 9,
+ "modify_time": "2018-11-08 10:05:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/al0ne/nginx_log_check",
+ "star": 53,
+ "commits": 5,
+ "modify_time": "2019-12-09 05:05:20",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/sukaralin/cve-2019-2890",
+ "star": 53,
+ "commits": 6,
+ "modify_time": "2019-12-06 09:18:44",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/jeanphorn/common-password",
+ "star": 53,
+ "commits": 3,
+ "modify_time": "2015-04-27 02:39:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/shopify/voucher",
+ "star": 53,
+ "commits": 69,
+ "modify_time": "2019-12-04 15:12:11",
+ "last_release": "v2.0.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/mushorg/oschameleon",
+ "star": 53,
+ "commits": 45,
+ "modify_time": "2019-01-23 14:12:57",
+ "last_release": "\n 0.1.2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/moosedojo/spotter",
+ "star": 53,
+ "commits": 11,
+ "modify_time": "2019-03-17 15:30:59",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/threatexpress/pasties",
+ "star": 53,
+ "commits": 32,
+ "modify_time": "2019-11-18 05:25:08",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/0x90/wpsik",
+ "star": 53,
+ "commits": 8,
+ "modify_time": "2019-11-12 07:11:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/elevenpaths/telefonica-wannacry-filerestorer",
+ "star": 53,
+ "commits": 10,
+ "modify_time": "2017-05-26 16:55:27",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/thisislibra/genesis",
+ "star": 53,
+ "commits": 17,
+ "modify_time": "2019-11-20 13:25:04",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/criteo/kerberos-docker",
+ "star": 53,
+ "commits": 132,
+ "modify_time": "2019-01-30 22:21:23",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/hamz-a/frida-android-helper",
+ "star": 53,
+ "commits": 38,
+ "modify_time": "2019-11-21 00:20:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mohitkhemchandani/oscp-complete-guide",
+ "star": 53,
+ "commits": 9,
+ "modify_time": "2019-10-20 22:08:25",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/bazzite/nuxt-netlify",
+ "star": 53,
+ "commits": 141,
+ "modify_time": "2019-12-08 01:27:44",
+ "last_release": "v0.1.1",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/Synacktiv-contrib/Modmobmap",
+ "star": 53,
+ "commits": 5,
+ "modify_time": "2018-06-16 12:10:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/Synacktiv-contrib/stuffz",
+ "star": 53,
+ "commits": 6,
+ "modify_time": "2019-04-02 07:54:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ghostlulzhacks/rolljam",
+ "star": 53,
+ "commits": 3,
+ "modify_time": "2016-07-22 15:47:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jm33-m0/gfw_scripts",
+ "star": 53,
+ "commits": 97,
+ "modify_time": "2017-10-30 10:00:37",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/FSecureLABS/defcon25_uac_workshop",
+ "star": 53,
+ "commits": 2,
+ "modify_time": "2017-08-15 14:29:55",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/b-mueller/awesome-mythx-smart-contract-security-tools",
+ "star": 53,
+ "commits": 65,
+ "modify_time": "2019-11-03 12:05:56",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/zyrikby/fsquadra",
+ "star": 53,
+ "commits": 15,
+ "modify_time": "2017-08-31 17:02:41",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/zenfish/ipmi",
+ "star": 53,
+ "commits": 33,
+ "modify_time": "2015-09-30 23:15:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/z3prover/firewallchecker",
+ "star": 53,
+ "commits": 17,
+ "modify_time": "2019-12-04 21:13:33",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/xalfie/nix-auditor",
+ "star": 53,
+ "commits": 39,
+ "modify_time": "2019-03-24 11:59:58",
+ "last_release": "2.0",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/wrfly/gus-proxy",
+ "star": 53,
+ "commits": 72,
+ "modify_time": "2019-11-06 15:38:36",
+ "last_release": "v0.2",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/w3c/device-memory",
+ "star": 53,
+ "commits": 56,
+ "modify_time": "2018-10-17 13:57:27",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/vtagion/scripts",
+ "star": 53,
+ "commits": 49,
+ "modify_time": "2019-03-25 04:13:15",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/vbgamer45/semi-vb-decompiler",
+ "star": 53,
+ "commits": 1,
+ "modify_time": "2013-02-10 06:40:51",
+ "last_release": "",
+ "lang": "Visual Basic .NET"
+ },
+ {
+ "link": "https://github.com/uzetta27/easyrop",
+ "star": 53,
+ "commits": 59,
+ "modify_time": "2018-04-12 09:28:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/thuxnder/androiddevice.info",
+ "star": 53,
+ "commits": 14,
+ "modify_time": "2014-12-08 01:50:29",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/taokong/group_normalization",
+ "star": 53,
+ "commits": 7,
+ "modify_time": "2019-11-30 13:13:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/str4d/ire",
+ "star": 53,
+ "commits": 388,
+ "modify_time": "2019-11-10 19:38:31",
+ "last_release": "",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/spritz-research-group/ctf-writeups",
+ "star": 53,
+ "commits": 26,
+ "modify_time": "2017-12-17 23:21:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/snowflakedb/snowalert",
+ "star": 53,
+ "commits": 517,
+ "modify_time": "2019-12-06 05:40:18",
+ "last_release": "v1.9.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sneakerhax/pyphisher",
+ "star": 53,
+ "commits": 28,
+ "modify_time": "2019-07-17 01:47:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/secgroup/flower",
+ "star": 53,
+ "commits": 30,
+ "modify_time": "2019-11-05 17:04:59",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/scadacs/plcinject",
+ "star": 53,
+ "commits": 3,
+ "modify_time": "2015-08-08 04:15:26",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/reorx/python-terminal-color",
+ "star": 53,
+ "commits": 36,
+ "modify_time": "2019-11-04 14:12:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/powershell/gpregistrypolicy",
+ "star": 53,
+ "commits": 14,
+ "modify_time": "2018-02-12 18:26:28",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/payatu/cve-2018-14442",
+ "star": 53,
+ "commits": 3,
+ "modify_time": "2018-12-28 09:46:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/outscale/packetgraph",
+ "star": 53,
+ "commits": 1178,
+ "modify_time": "2019-12-09 12:42:17",
+ "last_release": "\n v18.02\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ollseg/ttt-ext",
+ "star": 53,
+ "commits": 20,
+ "modify_time": "2019-06-01 16:42:03",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/nwmonster/applysig",
+ "star": 53,
+ "commits": 3,
+ "modify_time": "2019-04-17 09:39:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nvssks/android-responder",
+ "star": 53,
+ "commits": 8,
+ "modify_time": "2016-10-20 09:25:09",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/niegowski/node-daemonize2",
+ "star": 53,
+ "commits": 85,
+ "modify_time": "2013-07-16 17:50:54",
+ "last_release": "\n v0.4.2\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/nameles-org/nameles",
+ "star": 53,
+ "commits": 87,
+ "modify_time": "2019-09-06 20:09:32",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/n0fate/ichainbreaker",
+ "star": 53,
+ "commits": 26,
+ "modify_time": "2019-07-24 09:36:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mq1n/dllthreadinjectiondetector",
+ "star": 53,
+ "commits": 3,
+ "modify_time": "2017-08-25 13:28:53",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/modzero/modjoda",
+ "star": 53,
+ "commits": 4,
+ "modify_time": "2018-02-14 08:46:19",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/mempodippy/snodew",
+ "star": 53,
+ "commits": 15,
+ "modify_time": "2017-06-22 22:42:42",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/m4ll0k/icloudbrutter",
+ "star": 53,
+ "commits": null,
+ "modify_time": "2018-06-21 11:09:30",
+ "last_release": "",
+ "lang": "python"
+ },
+ {
+ "link": "https://github.com/lgeek/dynamorio_pin_escape",
+ "star": 53,
+ "commits": 2,
+ "modify_time": "2016-02-08 11:45:42",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/kulisu/metasploit-pro-trial-grabber",
+ "star": 53,
+ "commits": 29,
+ "modify_time": "2015-06-12 07:47:15",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/kmcallister/alameda",
+ "star": 53,
+ "commits": 5,
+ "modify_time": "2012-11-18 06:00:43",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/juliocesarfort/netscreen-shodan-scanner",
+ "star": 53,
+ "commits": 2,
+ "modify_time": "2015-12-21 15:33:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jogolden/ghidraps4loader",
+ "star": 53,
+ "commits": 15,
+ "modify_time": "2019-03-20 00:47:39",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/jesseemond/cheat-and-gin",
+ "star": 53,
+ "commits": 60,
+ "modify_time": "2019-07-09 05:50:48",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/iabem97/securityd-racer2",
+ "star": 53,
+ "commits": null,
+ "modify_time": "2018-05-19 01:16:31",
+ "last_release": "",
+ "lang": "objective-c"
+ },
+ {
+ "link": "https://github.com/hirbodbehnam/shadowsocks-cloak-installer",
+ "star": 53,
+ "commits": 55,
+ "modify_time": "2019-09-27 07:32:17",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/hasherezade/vidi",
+ "star": 53,
+ "commits": 125,
+ "modify_time": "2019-12-01 01:03:59",
+ "last_release": "0.2.5.6",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/hackedteam/core-win32",
+ "star": 53,
+ "commits": 380,
+ "modify_time": "2015-01-21 15:50:35",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/h-j-13/malicious_domain_whois",
+ "star": 53,
+ "commits": 17,
+ "modify_time": "2018-05-24 01:28:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/guardicore/azure_password_harvesting",
+ "star": 53,
+ "commits": 13,
+ "modify_time": "2018-03-19 14:52:25",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/gluster/gluster-block",
+ "star": 53,
+ "commits": 339,
+ "modify_time": "2019-11-05 09:26:12",
+ "last_release": "v0.4",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/glmcdona/functionhacker",
+ "star": 53,
+ "commits": 4,
+ "modify_time": "2014-11-03 02:26:03",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/gideonn/insta-gallery-downloader",
+ "star": 53,
+ "commits": 18,
+ "modify_time": "2016-06-21 11:12:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gfoss/phpmyadmin_honeypot",
+ "star": 53,
+ "commits": 15,
+ "modify_time": "2015-07-03 17:14:30",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/g-solaria/osintforpentests",
+ "star": 53,
+ "commits": 4,
+ "modify_time": "2018-01-08 21:02:44",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/evyatarmeged/stegextract",
+ "star": 53,
+ "commits": 26,
+ "modify_time": "2018-05-30 12:21:30",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/evyatarmeged/humanoid",
+ "star": 53,
+ "commits": 28,
+ "modify_time": "2018-11-02 17:47:30",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/eschweiler/proreversing",
+ "star": 53,
+ "commits": 2,
+ "modify_time": "2012-11-04 17:35:47",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ericzimmerman/bstrings",
+ "star": 53,
+ "commits": 90,
+ "modify_time": "2019-10-03 13:13:00",
+ "last_release": "1.3.1.1",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/edoverflow/smith",
+ "star": 53,
+ "commits": 34,
+ "modify_time": "2019-10-25 17:32:26",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/edent/renault-zoe-api",
+ "star": 53,
+ "commits": 25,
+ "modify_time": "2019-05-30 12:48:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dmuhs/pastebin-scraper",
+ "star": 53,
+ "commits": 82,
+ "modify_time": "2017-06-04 15:44:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/diogomonica/actuary",
+ "star": 53,
+ "commits": 138,
+ "modify_time": "2017-09-15 17:12:15",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/dg92/node-express-postgres-redis-starter-kit",
+ "star": 53,
+ "commits": 12,
+ "modify_time": "2017-02-23 07:36:00",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/devsecops/defcon-workshop",
+ "star": 53,
+ "commits": 172,
+ "modify_time": "2017-08-01 00:35:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/deadbits/malware-analysis-scripts",
+ "star": 53,
+ "commits": 20,
+ "modify_time": "2019-07-15 00:18:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/daxio/k8s-lemp",
+ "star": 53,
+ "commits": 169,
+ "modify_time": "2019-10-26 14:25:49",
+ "last_release": "k8s-lemp-v1.4",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/datachi/memdb",
+ "star": 53,
+ "commits": 36,
+ "modify_time": "2015-06-19 18:56:59",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/damonmohammadbagher/nativepayload_image",
+ "star": 53,
+ "commits": 17,
+ "modify_time": "2018-12-30 11:59:52",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/d1str0/drupot",
+ "star": 53,
+ "commits": 54,
+ "modify_time": "2019-07-14 03:50:36",
+ "last_release": "\n v0.2.4\n ",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/coreyd97/stepper",
+ "star": 53,
+ "commits": 35,
+ "modify_time": "2019-10-25 10:40:44",
+ "last_release": "v1.3",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/coffeehb/sstif",
+ "star": 53,
+ "commits": null,
+ "modify_time": "2018-04-02 06:29:20",
+ "last_release": "",
+ "lang": "python"
+ },
+ {
+ "link": "https://github.com/cn33liz/p0shkiller",
+ "star": 53,
+ "commits": 9,
+ "modify_time": "2016-05-26 17:49:25",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/chryzsh/practical-hacking",
+ "star": 53,
+ "commits": 25,
+ "modify_time": "2018-12-23 17:35:12",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/christophetd/docker-python-sandbox",
+ "star": 53,
+ "commits": 83,
+ "modify_time": "2018-02-07 07:55:52",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/chen-charles/pedetour",
+ "star": 53,
+ "commits": 6,
+ "modify_time": "2018-09-08 04:36:47",
+ "last_release": "v1.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/carnal0wnage/malicious_file_maker",
+ "star": 53,
+ "commits": 10,
+ "modify_time": "2017-10-19 21:51:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bughunterid/bughunterid",
+ "star": 53,
+ "commits": 7,
+ "modify_time": "2018-12-13 10:08:01",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/bishopfox/pwn-pulse",
+ "star": 53,
+ "commits": 5,
+ "modify_time": "2019-09-24 14:53:44",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/arloor/httpproxy",
+ "star": 53,
+ "commits": 110,
+ "modify_time": "2019-09-11 13:30:12",
+ "last_release": "v1.5",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/aixxe/chameleon",
+ "star": 53,
+ "commits": 37,
+ "modify_time": "2017-01-02 14:58:03",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/agahlot/rtfm",
+ "star": 53,
+ "commits": 2,
+ "modify_time": "2016-10-19 12:49:36",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/advancedhacker101/c-sharp-r.a.t-client",
+ "star": 53,
+ "commits": 39,
+ "modify_time": "2018-08-18 11:48:44",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/ademakov/mainmemory",
+ "star": 53,
+ "commits": 1737,
+ "modify_time": "2019-12-05 07:22:50",
+ "last_release": "\n v0.3\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/0x4d31/sqhunter",
+ "star": 53,
+ "commits": 9,
+ "modify_time": "2017-06-28 05:32:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/0cch/0cchext",
+ "star": 53,
+ "commits": 162,
+ "modify_time": "2019-05-06 09:01:07",
+ "last_release": "1.0.19.2.97",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/sensepost/peanuts",
+ "star": 52,
+ "commits": 15,
+ "modify_time": "2018-03-11 19:42:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nixawk/hello-python2",
+ "star": 52,
+ "commits": 265,
+ "modify_time": "2018-12-01 06:20:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/michenriksen/hibp",
+ "star": 52,
+ "commits": 4,
+ "modify_time": "2014-07-18 09:38:09",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/tobefuturer/ida-swift-demangle",
+ "star": 52,
+ "commits": 2,
+ "modify_time": "2016-09-04 18:48:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/yadox666/wifi_ccc",
+ "star": 52,
+ "commits": 4,
+ "modify_time": "2017-09-20 12:18:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/shadowsocksr-live/shadowsocksr",
+ "star": 52,
+ "commits": 1215,
+ "modify_time": "2019-05-31 10:51:49",
+ "last_release": "3.2.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jas502n/solr_rce",
+ "star": 52,
+ "commits": 30,
+ "modify_time": "2019-11-13 06:22:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xfgryujk/cheatingtutorial",
+ "star": 52,
+ "commits": 20,
+ "modify_time": "2017-09-19 12:56:40",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/test-pipeline/orthrus",
+ "star": 52,
+ "commits": 231,
+ "modify_time": "2017-04-10 13:59:24",
+ "last_release": "v1.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bmegli/wifi-scan",
+ "star": 52,
+ "commits": 48,
+ "modify_time": "2019-11-17 08:36:43",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/giuliocomi/backoori",
+ "star": 52,
+ "commits": 51,
+ "modify_time": "2019-12-05 12:45:10",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/lengjibo/dedecmscan",
+ "star": 52,
+ "commits": 14,
+ "modify_time": "2019-08-16 06:43:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cylance/mitmcanary",
+ "star": 52,
+ "commits": 5,
+ "modify_time": "2016-10-08 14:33:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kruegerrobotics/lan-monitor",
+ "star": 52,
+ "commits": 109,
+ "modify_time": "2019-01-21 21:14:38",
+ "last_release": "v2.0.2",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/zhaochengxiang/ioswechatfakelocation",
+ "star": 52,
+ "commits": 12,
+ "modify_time": "2019-03-21 02:20:57",
+ "last_release": "",
+ "lang": "Logos"
+ },
+ {
+ "link": "https://github.com/x0day/multiproxies",
+ "star": 52,
+ "commits": 7,
+ "modify_time": "2014-09-06 06:03:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wraith-wireless/pyric",
+ "star": 52,
+ "commits": 183,
+ "modify_time": "2017-04-21 10:43:41",
+ "last_release": "0.1.6",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wkovacs64/hibp",
+ "star": 52,
+ "commits": 1277,
+ "modify_time": "2019-12-09 20:49:51",
+ "last_release": "v8.0.0",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/vmcall/mapdetection",
+ "star": 52,
+ "commits": 17,
+ "modify_time": "2017-11-03 09:37:54",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/virgilsecurity/virgil-crypto",
+ "star": 52,
+ "commits": 1477,
+ "modify_time": "2019-06-05 10:03:30",
+ "last_release": "v2.6.3",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/tyrmars/websafe-steppitguide",
+ "star": 52,
+ "commits": 21,
+ "modify_time": "2019-12-03 06:14:54",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/truneski/external_c2_framework",
+ "star": 52,
+ "commits": 49,
+ "modify_time": "2018-11-06 10:10:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/them4hd1/jcs",
+ "star": 52,
+ "commits": 7,
+ "modify_time": "2018-09-28 09:07:06",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/theevilbit/workshops",
+ "star": 52,
+ "commits": 3,
+ "modify_time": "2018-08-10 17:12:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/strivexjun/hidedll",
+ "star": 52,
+ "commits": 2,
+ "modify_time": "2019-05-28 16:41:06",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/shenzhenjinma/aliredenvelope",
+ "star": 52,
+ "commits": 4,
+ "modify_time": "2016-12-25 07:39:36",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/sektioneins/wwcd",
+ "star": 52,
+ "commits": 5,
+ "modify_time": "2016-11-29 23:03:29",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/secwiki/some-poc-or-exp",
+ "star": 52,
+ "commits": 45,
+ "modify_time": "2016-07-01 13:54:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ruedigergad/clj-net-pcap",
+ "star": 52,
+ "commits": 733,
+ "modify_time": "2019-02-24 13:29:56",
+ "last_release": "\n 1.7.0\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/rehints/blackhat_2017",
+ "star": 52,
+ "commits": 2,
+ "modify_time": "2017-07-28 23:18:41",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/rc0r/afl-fuzz",
+ "star": 52,
+ "commits": 210,
+ "modify_time": "2018-06-06 18:01:23",
+ "last_release": "\n 2.52b\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/pret/pokepinball",
+ "star": 52,
+ "commits": 515,
+ "modify_time": "2019-02-16 20:37:22",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/pldmgg/winadmincenterps",
+ "star": 52,
+ "commits": 21,
+ "modify_time": "2018-07-26 16:47:29",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/phdphuc/mac-a-mal",
+ "star": 52,
+ "commits": 4,
+ "modify_time": "2018-09-22 10:55:23",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/pentesthub/priviledgebook",
+ "star": 52,
+ "commits": 21,
+ "modify_time": "2016-06-21 04:00:08",
+ "last_release": "",
+ "lang": "ASP"
+ },
+ {
+ "link": "https://github.com/payloadbox/open-redirect-payload-list",
+ "star": 52,
+ "commits": 4,
+ "modify_time": "2019-08-22 19:55:09",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/patois/xray",
+ "star": 52,
+ "commits": 15,
+ "modify_time": "2019-11-23 13:18:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/palantir/exploitguard",
+ "star": 52,
+ "commits": 8,
+ "modify_time": "2019-10-25 15:14:51",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/owasp-ruhrpott/owasp-workshop-android-pentest",
+ "star": 52,
+ "commits": 49,
+ "modify_time": "2017-08-05 18:59:33",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/osandamalith/chromefreak",
+ "star": 52,
+ "commits": 24,
+ "modify_time": "2015-03-15 13:22:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/northwind6/webbug",
+ "star": 52,
+ "commits": 11,
+ "modify_time": "2017-03-16 03:58:45",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/nikallass/sharesearch",
+ "star": 52,
+ "commits": 2,
+ "modify_time": "2018-07-11 08:27:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/neo23x0/radiocarbon",
+ "star": 52,
+ "commits": 12,
+ "modify_time": "2017-11-12 12:00:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nelenkov/android-device-check",
+ "star": 52,
+ "commits": 8,
+ "modify_time": "2019-10-25 10:18:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mr-un1k0d3r/base64-obfuscator",
+ "star": 52,
+ "commits": 11,
+ "modify_time": "2018-06-05 20:55:06",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/mitchellkrogza/badd-boyz-hosts",
+ "star": 52,
+ "commits": 8307,
+ "modify_time": "2019-12-08 09:17:14",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/miguelangel-nubla/videop2proxy",
+ "star": 52,
+ "commits": 6,
+ "modify_time": "2018-09-28 23:52:15",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/medelibero/ddos-tools",
+ "star": 52,
+ "commits": 9,
+ "modify_time": "2012-08-07 18:48:13",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/matonis/yara_tools",
+ "star": 52,
+ "commits": 54,
+ "modify_time": "2019-01-12 07:41:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/marcan/lsirec",
+ "star": 52,
+ "commits": 8,
+ "modify_time": "2019-03-03 07:04:09",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/m-dwyer/cryptoblocker",
+ "star": 52,
+ "commits": 22,
+ "modify_time": "2016-08-26 21:53:11",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/lorexxar/redis-rogue-server",
+ "star": 52,
+ "commits": 3,
+ "modify_time": "2019-07-09 07:31:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/libraggbond/cve-2018-3191",
+ "star": 52,
+ "commits": 3,
+ "modify_time": "2018-10-23 17:28:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ldbfpiaoran/websearch",
+ "star": 52,
+ "commits": 18,
+ "modify_time": "2017-05-27 05:51:04",
+ "last_release": "",
+ "lang": "Roff"
+ },
+ {
+ "link": "https://github.com/kevthehermit/maildb",
+ "star": 52,
+ "commits": 16,
+ "modify_time": "2013-07-14 19:10:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/joker25000/dzjecter",
+ "star": 52,
+ "commits": 23,
+ "modify_time": "2018-05-02 21:08:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jieyu/maple",
+ "star": 52,
+ "commits": 20,
+ "modify_time": "2015-03-09 04:50:44",
+ "last_release": "\n 1.1.0\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/jfoote/burp-git-bridge",
+ "star": 52,
+ "commits": 49,
+ "modify_time": "2015-04-22 03:03:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jflyup/goms17-010",
+ "star": 52,
+ "commits": 14,
+ "modify_time": "2017-11-09 04:24:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jeffreysasaki/backdoor",
+ "star": 52,
+ "commits": 4,
+ "modify_time": "2015-05-25 08:35:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jeffbryner/mozdef",
+ "star": 52,
+ "commits": 2615,
+ "modify_time": "2018-06-18 21:35:06",
+ "last_release": "\n v1.20\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/inurlx/cloudkill3r",
+ "star": 52,
+ "commits": 9,
+ "modify_time": "2018-03-27 16:22:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/idapython/pyhexraysdeob",
+ "star": 52,
+ "commits": 2,
+ "modify_time": "2019-10-15 13:19:59",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/httpoxy/php-fpm-httpoxy-poc",
+ "star": 52,
+ "commits": 7,
+ "modify_time": "2016-09-09 09:58:31",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/hasherezade/process_chameleon",
+ "star": 52,
+ "commits": 16,
+ "modify_time": "2018-05-20 19:51:15",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hakanson/ng-owasp",
+ "star": 52,
+ "commits": 14,
+ "modify_time": "2016-02-07 20:35:37",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/grrrdog/tacotaco",
+ "star": 52,
+ "commits": 9,
+ "modify_time": "2019-08-27 15:18:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/georgenicolaou/heaveninjector",
+ "star": 52,
+ "commits": 10,
+ "modify_time": "2014-06-13 06:20:36",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/gentilkiwi/spectre_meltdown",
+ "star": 52,
+ "commits": 3,
+ "modify_time": "2018-01-06 16:00:29",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/fuzzstati0n/fuzzgoat",
+ "star": 52,
+ "commits": 38,
+ "modify_time": "2017-06-07 03:44:46",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/fkasler/dolos_cloak",
+ "star": 52,
+ "commits": 3,
+ "modify_time": "2019-08-07 04:53:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/filcab/patchdiff2",
+ "star": 52,
+ "commits": 75,
+ "modify_time": "2015-04-09 18:20:56",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/fideliscyber/indicators",
+ "star": 52,
+ "commits": 88,
+ "modify_time": "2017-07-19 20:14:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/feicong/zsxq_archives",
+ "star": 52,
+ "commits": null,
+ "modify_time": "2019-01-08 06:48:38",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ezelf/f5_cookieleaks",
+ "star": 52,
+ "commits": 14,
+ "modify_time": "2019-10-26 18:46:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/enthought/python-2.7.3",
+ "star": 52,
+ "commits": 1,
+ "modify_time": "2013-12-21 15:33:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/empireproject/empiremobile",
+ "star": 52,
+ "commits": 10,
+ "modify_time": "2019-02-20 17:23:44",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/disruptops/cred_scanner",
+ "star": 52,
+ "commits": 1,
+ "modify_time": "2018-05-16 05:15:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/didierstevens/beta",
+ "star": 52,
+ "commits": 40,
+ "modify_time": "2019-11-09 12:57:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/depthsecurity/dahua_dvr_auth_bypass",
+ "star": 52,
+ "commits": 8,
+ "modify_time": "2013-11-08 18:53:11",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/dennypage/dpinger",
+ "star": 52,
+ "commits": 95,
+ "modify_time": "2017-12-09 05:37:23",
+ "last_release": "v3.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/dedsecinside/awesome-scripts",
+ "star": 52,
+ "commits": 151,
+ "modify_time": "2019-10-23 11:01:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/crossbowerbt/gdb-python-utils",
+ "star": 52,
+ "commits": 8,
+ "modify_time": "2011-10-25 18:37:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/crond-jaist/cytrone",
+ "star": 52,
+ "commits": 35,
+ "modify_time": "2019-12-04 01:08:09",
+ "last_release": "1.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cn33liz/hsevd-stackoverflowx64",
+ "star": 52,
+ "commits": 7,
+ "modify_time": "2018-01-17 19:34:26",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cmars/ormesh",
+ "star": 52,
+ "commits": 67,
+ "modify_time": "2017-11-27 04:36:11",
+ "last_release": "v0.2.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/cisco-talos/pylocky_decryptor",
+ "star": 52,
+ "commits": 2,
+ "modify_time": "2018-12-04 16:56:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/christophetd/nmap-nse-info",
+ "star": 52,
+ "commits": 6,
+ "modify_time": "2017-06-08 15:02:24",
+ "last_release": "",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/cat-team-mmc/lysec",
+ "star": 52,
+ "commits": 13,
+ "modify_time": "2019-02-17 12:37:21",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/calidog/certstream-server",
+ "star": 52,
+ "commits": 29,
+ "modify_time": "2019-05-01 03:07:49",
+ "last_release": "1.1.0",
+ "lang": "Elixir"
+ },
+ {
+ "link": "https://github.com/bwall/bamf",
+ "star": 52,
+ "commits": 35,
+ "modify_time": "2014-08-17 05:10:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/blockadeio/chrome_extension",
+ "star": 52,
+ "commits": 35,
+ "modify_time": "2017-11-15 16:35:10",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/bkerler/oppo_decrypt",
+ "star": 52,
+ "commits": 9,
+ "modify_time": "2019-06-07 15:32:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bazad/threadexec",
+ "star": 52,
+ "commits": 8,
+ "modify_time": "2018-07-25 19:11:15",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/aungthurhahein/red-team-curation-list",
+ "star": 52,
+ "commits": 6,
+ "modify_time": "2019-03-08 09:32:42",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/atmoner/nodecrypto",
+ "star": 52,
+ "commits": 14,
+ "modify_time": "2019-01-02 15:04:37",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/aress31/jwtcat",
+ "star": 52,
+ "commits": 35,
+ "modify_time": "2019-11-22 08:16:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/apkjet/trustlookwannacrytoolkit",
+ "star": 52,
+ "commits": 18,
+ "modify_time": "2017-06-13 05:54:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/annsec/awesome-cybersecurity",
+ "star": 52,
+ "commits": 11,
+ "modify_time": "2017-04-20 20:53:27",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/9b/pdfxray_public",
+ "star": 52,
+ "commits": 38,
+ "modify_time": "2012-04-09 19:02:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/5alt/lianwifi",
+ "star": 52,
+ "commits": 9,
+ "modify_time": "2016-02-01 15:52:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/1522402210/blockchain-security-list",
+ "star": 52,
+ "commits": 1,
+ "modify_time": "2018-05-30 03:55:57",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/0xd34db33f/gfyp",
+ "star": 52,
+ "commits": 40,
+ "modify_time": "2018-03-06 19:08:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hack-with-github/awesome-hacking-tools",
+ "star": 51,
+ "commits": 2,
+ "modify_time": "2016-08-04 03:10:00",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ullaakut/awesome-macos-setup",
+ "star": 51,
+ "commits": 39,
+ "modify_time": "2019-10-21 12:05:50",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/calebmadrigal/radio-hacking-scripts",
+ "star": 51,
+ "commits": 26,
+ "modify_time": "2017-09-04 20:23:39",
+ "last_release": "",
+ "lang": "Jupyter Notebook"
+ },
+ {
+ "link": "https://github.com/fireeye/adfspoof",
+ "star": 51,
+ "commits": 13,
+ "modify_time": "2019-03-21 00:03:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/shadowsocks/libsscrypto",
+ "star": 51,
+ "commits": 27,
+ "modify_time": "2018-03-04 01:26:28",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jgamblin/nmapnetworkinventorycontainer",
+ "star": 51,
+ "commits": 6,
+ "modify_time": "2018-04-30 12:57:52",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/mitmproxy/docker-releases",
+ "star": 51,
+ "commits": 34,
+ "modify_time": "2018-05-25 21:43:29",
+ "last_release": "\n 4.0.1\n ",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/rek7/ddoor",
+ "star": 51,
+ "commits": 10,
+ "modify_time": "2019-11-16 07:17:58",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/k8gege/k8portscan",
+ "star": 51,
+ "commits": 15,
+ "modify_time": "2019-11-28 13:41:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ixzzving/ssr-vpn",
+ "star": 51,
+ "commits": 101,
+ "modify_time": "2019-11-22 03:15:42",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/zhovner/airport-sniffer",
+ "star": 51,
+ "commits": 49,
+ "modify_time": "2018-06-27 06:18:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/FSecureLABS/SharpGPO-RemoteAccessPolicies",
+ "star": 51,
+ "commits": 20,
+ "modify_time": "2019-04-18 15:28:50",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/wh1t3p1g/Struts2Environment",
+ "star": 51,
+ "commits": 6,
+ "modify_time": "2017-01-20 05:59:05",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/guardianproject/tor-android",
+ "star": 51,
+ "commits": 2021,
+ "modify_time": "2019-11-13 17:40:54",
+ "last_release": "\n tor-android-binary-tor-0.4.1.6\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/QAX-A-Team/redis_lua_exploit",
+ "star": 51,
+ "commits": 3,
+ "modify_time": "2018-06-20 11:33:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lich4/personal_script",
+ "star": 51,
+ "commits": 38,
+ "modify_time": "2019-12-08 02:27:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zodiacon/gflagsx",
+ "star": 51,
+ "commits": 28,
+ "modify_time": "2019-07-09 09:10:13",
+ "last_release": "0.82",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/znb/malware",
+ "star": 51,
+ "commits": 208,
+ "modify_time": "2015-08-14 14:46:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zeropointsecurity/goldenticket",
+ "star": 51,
+ "commits": 3,
+ "modify_time": "2019-10-07 13:17:54",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/yassergersy/cazador_unr",
+ "star": 51,
+ "commits": 392,
+ "modify_time": "2019-12-02 10:56:17",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/vrtadmin/first-plugin-ida",
+ "star": 51,
+ "commits": 23,
+ "modify_time": "2019-10-15 10:50:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tomladder/winlib",
+ "star": 51,
+ "commits": 78,
+ "modify_time": "2018-10-04 19:17:08",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/threatstack/deputize",
+ "star": 51,
+ "commits": 20,
+ "modify_time": "2017-08-13 13:50:24",
+ "last_release": "1.2.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/thez3ro/gogsownz",
+ "star": 51,
+ "commits": 6,
+ "modify_time": "2019-11-27 23:06:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tgianko/deemon",
+ "star": 51,
+ "commits": 622,
+ "modify_time": "2018-06-06 06:52:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sysopfb/malware_scripts",
+ "star": 51,
+ "commits": 15,
+ "modify_time": "2018-09-06 00:17:59",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sycloversecurity/ctf",
+ "star": 51,
+ "commits": 4,
+ "modify_time": "2017-05-31 04:03:47",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/stevespringett/threatmodel-sdk",
+ "star": 51,
+ "commits": 67,
+ "modify_time": "2019-11-18 01:55:40",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/sorz/moproxy",
+ "star": 51,
+ "commits": 290,
+ "modify_time": "2019-12-09 09:03:23",
+ "last_release": "v0.3.0",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/snare/kernelresolver",
+ "star": 51,
+ "commits": 2,
+ "modify_time": "2012-03-07 11:02:12",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/smourier/tracespy",
+ "star": 51,
+ "commits": 58,
+ "modify_time": "2019-10-14 14:53:39",
+ "last_release": "3.0.0.2",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/shengqi158/jackson-databind-rce-poc",
+ "star": 51,
+ "commits": 1,
+ "modify_time": "2018-01-11 10:54:05",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/sensepost/wifi-rifle",
+ "star": 51,
+ "commits": 2,
+ "modify_time": "2015-09-09 12:45:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sensepost/apostille",
+ "star": 51,
+ "commits": 20,
+ "modify_time": "2019-09-25 11:37:04",
+ "last_release": "\n v1.1\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/segmentio/metalsmith-markdown",
+ "star": 51,
+ "commits": 50,
+ "modify_time": "2019-10-30 20:00:42",
+ "last_release": "\n v1.3.0\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/sciencemanx/ftrace",
+ "star": 51,
+ "commits": 17,
+ "modify_time": "2017-01-20 05:19:43",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/romankh/gsm-assessment-toolkit",
+ "star": 51,
+ "commits": 65,
+ "modify_time": "2017-11-25 08:15:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rolfrolles/finspyvm",
+ "star": 51,
+ "commits": 7,
+ "modify_time": "2018-02-21 20:52:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/riscure/rhme-2017",
+ "star": 51,
+ "commits": 8,
+ "modify_time": "2018-05-24 12:15:15",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/red-team-labs/waldo",
+ "star": 51,
+ "commits": 29,
+ "modify_time": "2016-09-10 13:24:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/r1b/cve-2017-13089",
+ "star": 51,
+ "commits": 15,
+ "modify_time": "2018-02-02 11:29:34",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/qtgate/conet",
+ "star": 51,
+ "commits": 132,
+ "modify_time": "2019-07-26 09:02:53",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/pwnsdx/ios-uri-schemes-abuse-poc",
+ "star": 51,
+ "commits": 22,
+ "modify_time": "2016-12-25 20:10:07",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/pwn20wndstuff/osiris",
+ "star": 51,
+ "commits": 19,
+ "modify_time": "2018-11-21 04:07:32",
+ "last_release": "v1.0.6",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/puppetlabs/puppetlabs-puppetdb",
+ "star": 51,
+ "commits": 548,
+ "modify_time": "2019-10-18 22:23:37",
+ "last_release": "\n 7.4.0\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/pepelux/sippts",
+ "star": 51,
+ "commits": 90,
+ "modify_time": "2019-12-05 13:32:57",
+ "last_release": "\n v1.2.13.1\n ",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/pentestpartners/mykali",
+ "star": 51,
+ "commits": 38,
+ "modify_time": "2018-09-06 18:16:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/p292/ddeautocs",
+ "star": 51,
+ "commits": 15,
+ "modify_time": "2017-10-14 22:55:58",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/owasp/webgoat.net",
+ "star": 51,
+ "commits": 90,
+ "modify_time": "2013-03-01 19:18:34",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/owasp/vulnerable-web-application",
+ "star": 51,
+ "commits": 261,
+ "modify_time": "2019-07-15 14:43:40",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/osuseclab/sgxpectre",
+ "star": 51,
+ "commits": 7,
+ "modify_time": "2018-06-14 04:07:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/osbock/baldwisdom",
+ "star": 51,
+ "commits": 33,
+ "modify_time": "2016-04-04 19:40:02",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/orweis/winpcapy",
+ "star": 51,
+ "commits": 19,
+ "modify_time": "2017-09-17 08:58:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/offensive-security/nethunter-utils",
+ "star": 51,
+ "commits": 60,
+ "modify_time": "2019-04-25 09:08:38",
+ "last_release": "v1.2",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/nottinghamprisateam/pyersinia",
+ "star": 51,
+ "commits": 49,
+ "modify_time": "2016-03-07 22:50:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/netspi/burpextractor",
+ "star": 51,
+ "commits": 23,
+ "modify_time": "2018-08-03 20:35:47",
+ "last_release": "v1.2",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/nccgroup/ncloader",
+ "star": 51,
+ "commits": 24,
+ "modify_time": "2018-04-18 00:19:05",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/mrexodia/haxxmap",
+ "star": 51,
+ "commits": 1,
+ "modify_time": "2018-10-14 13:41:38",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/mobsf/capfuzz",
+ "star": 51,
+ "commits": 36,
+ "modify_time": "2019-09-01 02:00:19",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/metalnas/loubia",
+ "star": 51,
+ "commits": 8,
+ "modify_time": "2017-08-09 11:59:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lordgreggreg/skype-log-viewer",
+ "star": 51,
+ "commits": 15,
+ "modify_time": "2018-05-18 17:20:57",
+ "last_release": "v1.3",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/lokifer/blindelephant",
+ "star": 51,
+ "commits": 11,
+ "modify_time": "2016-02-27 08:37:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lemire/testingrng",
+ "star": 51,
+ "commits": 179,
+ "modify_time": "2019-05-30 17:28:58",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/kovige/netscan",
+ "star": 51,
+ "commits": 4,
+ "modify_time": "2016-10-27 03:19:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jyang772/xor_crypter",
+ "star": 51,
+ "commits": 27,
+ "modify_time": "2014-01-06 23:54:24",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/jianqiangzhao/cve-2016-2434",
+ "star": 51,
+ "commits": 2,
+ "modify_time": "2016-07-05 10:46:57",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jgamblin/nmaptable",
+ "star": 51,
+ "commits": 13,
+ "modify_time": "2017-09-21 10:16:02",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/jay-johnson/train-ai-with-django-swagger-jwt",
+ "star": 51,
+ "commits": 289,
+ "modify_time": "2018-11-02 05:45:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/intelstormteam/papers",
+ "star": 51,
+ "commits": 14,
+ "modify_time": "2019-11-05 21:36:17",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ikoz/androidsubstrate_hookingc_examples",
+ "star": 51,
+ "commits": 2,
+ "modify_time": "2015-06-01 14:42:37",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/huntcve/exploit",
+ "star": 51,
+ "commits": 10,
+ "modify_time": "2016-10-05 04:43:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/horsicq/xntsv",
+ "star": 51,
+ "commits": 28,
+ "modify_time": "2019-10-25 14:22:29",
+ "last_release": "2.01",
+ "lang": "TSQL"
+ },
+ {
+ "link": "https://github.com/hitripod/awesome-blockchain",
+ "star": 51,
+ "commits": 19,
+ "modify_time": "2019-07-13 01:05:03",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/hiddenillusion/nomorexor",
+ "star": 51,
+ "commits": 2,
+ "modify_time": "2018-06-11 11:16:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/harshilpatel007/hackinglabs",
+ "star": 51,
+ "commits": 19,
+ "modify_time": "2017-11-20 14:11:44",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/hack-with-github/infosec-badges",
+ "star": 51,
+ "commits": 4,
+ "modify_time": "2018-07-02 02:14:09",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/hack-hut/crabstick",
+ "star": 51,
+ "commits": 47,
+ "modify_time": "2019-05-08 23:04:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gnijuohz/awesome-developers",
+ "star": 51,
+ "commits": 18,
+ "modify_time": "2018-01-24 16:19:59",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/fuzzynop/fiveonceinyourlife",
+ "star": 51,
+ "commits": 2,
+ "modify_time": "2014-10-06 20:15:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/firesuncn/my_ctf_challenges",
+ "star": 51,
+ "commits": 9,
+ "modify_time": "2017-05-12 16:22:32",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/firegpg/firegpg",
+ "star": 51,
+ "commits": 703,
+ "modify_time": "2012-09-14 13:10:22",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/fergarrui/custom-bytecode-analyzer",
+ "star": 51,
+ "commits": 57,
+ "modify_time": "2018-03-27 08:21:38",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/elevenpaths/neto",
+ "star": 51,
+ "commits": 20,
+ "modify_time": "2019-01-15 11:57:27",
+ "last_release": "0.6.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dgoulet/kjackal",
+ "star": 51,
+ "commits": 31,
+ "modify_time": "2014-06-16 14:05:21",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/danigargu/urlfuzz",
+ "star": 51,
+ "commits": 13,
+ "modify_time": "2018-06-26 13:22:27",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/d-rickyy-b/pastepwn",
+ "star": 51,
+ "commits": 489,
+ "modify_time": "2019-11-11 22:44:09",
+ "last_release": "v1.1.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cytopia/crawlpy",
+ "star": 51,
+ "commits": 34,
+ "modify_time": "2018-11-01 15:04:26",
+ "last_release": "\n v0.4\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cseagle/ida_clemency",
+ "star": 51,
+ "commits": 1,
+ "modify_time": "2017-07-31 02:49:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cn33liz/macrometer",
+ "star": 51,
+ "commits": 3,
+ "modify_time": "2017-05-19 17:39:33",
+ "last_release": "",
+ "lang": "Visual Basic .NET"
+ },
+ {
+ "link": "https://github.com/cisco-talos/dyndataresolver",
+ "star": 51,
+ "commits": 17,
+ "modify_time": "2019-01-16 13:58:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cisco-talos/dotnet_windbg",
+ "star": 51,
+ "commits": 5,
+ "modify_time": "2017-07-19 14:51:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/chrisjohnriley/scythe",
+ "star": 51,
+ "commits": 91,
+ "modify_time": "2013-05-24 20:17:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/chrisad/wiki-dictionary-creator",
+ "star": 51,
+ "commits": 10,
+ "modify_time": "2019-08-27 08:48:09",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/carnal0wnage/pentesty_scripts",
+ "star": 51,
+ "commits": 34,
+ "modify_time": "2018-08-21 23:56:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/buffer/libemu",
+ "star": 51,
+ "commits": 580,
+ "modify_time": "2019-12-05 07:47:33",
+ "last_release": "\n v1.0.3\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/bromiley/olaf",
+ "star": 51,
+ "commits": 16,
+ "modify_time": "2018-07-17 17:58:14",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/blacktop/docker-ghidra",
+ "star": 51,
+ "commits": 50,
+ "modify_time": "2019-10-31 18:03:35",
+ "last_release": "",
+ "lang": "Makefile"
+ },
+ {
+ "link": "https://github.com/bkerler/mr",
+ "star": 51,
+ "commits": 12,
+ "modify_time": "2019-08-30 15:46:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/beep3r/poc-exp",
+ "star": 51,
+ "commits": 62,
+ "modify_time": "2018-09-24 02:26:47",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/bambish/scanqli",
+ "star": 51,
+ "commits": 26,
+ "modify_time": "2019-07-15 09:54:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/azure-samples/python-docs-hello-world",
+ "star": 51,
+ "commits": 18,
+ "modify_time": "2019-10-15 22:27:47",
+ "last_release": "91980",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/awnumar/blind-sql-bitshifting",
+ "star": 51,
+ "commits": 54,
+ "modify_time": "2017-12-02 20:22:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/angr/tracer",
+ "star": 51,
+ "commits": 393,
+ "modify_time": "2019-12-09 20:06:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/anestisb/radamsa-android",
+ "star": 51,
+ "commits": 15,
+ "modify_time": "2019-01-05 08:53:14",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/an0nud4y/blackeye",
+ "star": 51,
+ "commits": 25,
+ "modify_time": "2018-07-12 13:02:29",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/alephsecurity/initroot",
+ "star": 51,
+ "commits": 40,
+ "modify_time": "2017-08-30 15:17:07",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/aldelaro5/ghidra-gekko-broadway-lang",
+ "star": 51,
+ "commits": 8,
+ "modify_time": "2019-04-06 00:59:52",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ahmia/ahmia-crawler",
+ "star": 51,
+ "commits": 168,
+ "modify_time": "2019-11-14 08:51:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/afagarap/gru-svm",
+ "star": 51,
+ "commits": 371,
+ "modify_time": "2019-12-06 13:51:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/aeondave/tilt",
+ "star": 51,
+ "commits": 90,
+ "modify_time": "2014-05-16 16:42:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/adrianyy/keinject",
+ "star": 51,
+ "commits": 2,
+ "modify_time": "2018-10-06 20:10:43",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://bitbucket.org/ntquery/scyllahide",
+ "star": 51,
+ "commits": null,
+ "modify_time": "2019-01-08 19:10:16.716000",
+ "last_release": "",
+ "lang": "c"
+ },
+ {
+ "link": "https://github.com/danielmiessler/securitytools",
+ "star": 50,
+ "commits": 7,
+ "modify_time": "2016-05-21 06:33:51",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/frida/frida-tools",
+ "star": 50,
+ "commits": 81,
+ "modify_time": "2019-11-18 20:13:15",
+ "last_release": "\n 5.3.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wapiflapi/wsym",
+ "star": 50,
+ "commits": 6,
+ "modify_time": "2015-07-25 16:30:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xiphosresearch/steelcon-python-injection",
+ "star": 50,
+ "commits": 13,
+ "modify_time": "2014-08-07 15:07:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/circl/douglas-quaid",
+ "star": 50,
+ "commits": 389,
+ "modify_time": "2019-11-25 19:25:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/h2hconference/2019",
+ "star": 50,
+ "commits": 11,
+ "modify_time": "2019-11-19 01:32:05",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/mwz1tn/free-v2ray",
+ "star": 50,
+ "commits": 39,
+ "modify_time": "2019-10-24 16:43:15",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/smallmi/omms",
+ "star": 50,
+ "commits": 16,
+ "modify_time": "2019-06-28 01:42:46",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/tjson/tjson.js",
+ "star": 50,
+ "commits": 109,
+ "modify_time": "2019-12-05 15:38:35",
+ "last_release": "\n v0.1.2\n ",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/lab313ru/smd_ida_tools",
+ "star": 50,
+ "commits": 186,
+ "modify_time": "2019-03-19 22:22:09",
+ "last_release": "v1.24",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/lukechilds/onionite",
+ "star": 50,
+ "commits": 385,
+ "modify_time": "2018-06-27 08:05:29",
+ "last_release": "\n v1.1.3\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/Cyb0r9/network-attacker",
+ "star": 50,
+ "commits": 31,
+ "modify_time": "2019-02-19 15:59:12",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/Synacktiv-contrib/kernelcache-laundering",
+ "star": 50,
+ "commits": 3,
+ "modify_time": "2018-10-04 09:00:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zodiacon/windbgx",
+ "star": 50,
+ "commits": 39,
+ "modify_time": "2018-05-24 14:17:05",
+ "last_release": "0.1-alpha2",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/zengqiu/study",
+ "star": 50,
+ "commits": 32,
+ "modify_time": "2016-09-02 10:55:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zcgonvh/cve-2017-0213",
+ "star": 50,
+ "commits": 1,
+ "modify_time": "2017-07-01 16:06:19",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/xssninja/alexa-hacker-mode",
+ "star": 50,
+ "commits": 16,
+ "modify_time": "2017-08-31 05:38:00",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/williamshowalter/hdroot-bootkit-analysis",
+ "star": 50,
+ "commits": 11,
+ "modify_time": "2017-02-23 18:14:20",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/whatwg/mimesniff",
+ "star": 50,
+ "commits": 329,
+ "modify_time": "2019-07-16 09:15:41",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/weppos/dnscaa",
+ "star": 50,
+ "commits": 8,
+ "modify_time": "2018-06-24 17:32:31",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/virtuesecurity/aws-extender-cli",
+ "star": 50,
+ "commits": 10,
+ "modify_time": "2018-11-15 22:24:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vikasnkumar/wisecracker",
+ "star": 50,
+ "commits": 134,
+ "modify_time": "2016-12-05 21:58:35",
+ "last_release": "\n v1.0\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/vallejocc/poc-inject-data-wm_copydata",
+ "star": 50,
+ "commits": 2,
+ "modify_time": "2018-04-29 10:13:22",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/tsug0d/myawesomewebchallenge",
+ "star": 50,
+ "commits": 122,
+ "modify_time": "2019-12-03 04:11:37",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/tresacton/dspectrum",
+ "star": 50,
+ "commits": 14,
+ "modify_time": "2017-05-26 13:09:39",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/thezdi/derbycon2017",
+ "star": 50,
+ "commits": 8,
+ "modify_time": "2017-11-28 20:15:15",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/taogogo/taocms",
+ "star": 50,
+ "commits": 9,
+ "modify_time": "2014-05-24 16:09:13",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/ssyzh/weworktweak",
+ "star": 50,
+ "commits": 7,
+ "modify_time": "2019-04-23 09:58:16",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/sri-csl/stegotorus",
+ "star": 50,
+ "commits": 153,
+ "modify_time": "2015-07-22 20:02:27",
+ "last_release": "\n gitian-alpha-0.3\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/spiderlabs/thicknet",
+ "star": 50,
+ "commits": 5,
+ "modify_time": "2011-03-22 20:40:23",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/sourcingdenis/free-online-competitive-intelligence",
+ "star": 50,
+ "commits": 10,
+ "modify_time": "2019-02-10 11:22:55",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/soluto/webdriverio-zap-proxy",
+ "star": 50,
+ "commits": 39,
+ "modify_time": "2018-10-01 17:22:37",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/skelsec/biterrant",
+ "star": 50,
+ "commits": 4,
+ "modify_time": "2017-03-04 14:57:43",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/sfwishes/ollvm_de_fla",
+ "star": 50,
+ "commits": 4,
+ "modify_time": "2018-03-22 04:36:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/scarvell/grandstream_exploits",
+ "star": 50,
+ "commits": 18,
+ "modify_time": "2019-03-31 10:55:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sandertv/gophertunnel",
+ "star": 50,
+ "commits": 365,
+ "modify_time": "2019-12-01 11:23:16",
+ "last_release": "\n v1.3.5\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/samuelcolvin/dnserver",
+ "star": 50,
+ "commits": 11,
+ "modify_time": "2018-03-18 13:43:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ryanmallon/thelostvikingstools",
+ "star": 50,
+ "commits": 71,
+ "modify_time": "2017-05-06 22:08:29",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/realoriginal/reflective-rewrite",
+ "star": 50,
+ "commits": null,
+ "modify_time": "2018-12-25 13:57:14",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/pylyf/networm",
+ "star": 50,
+ "commits": 29,
+ "modify_time": "2019-12-07 16:38:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/psychotropos/xhunter1_privesc",
+ "star": 50,
+ "commits": 3,
+ "modify_time": "2018-08-18 16:00:38",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/praneethkarnena/ddos-scripts",
+ "star": 50,
+ "commits": 55,
+ "modify_time": "2019-07-06 17:28:48",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/platdrag/unblockablechains",
+ "star": 50,
+ "commits": 119,
+ "modify_time": "2018-12-12 07:07:54",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/piffall/pxesetupwizard",
+ "star": 50,
+ "commits": 118,
+ "modify_time": "2019-09-17 05:10:10",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/p1sec/sigfw",
+ "star": 50,
+ "commits": 44,
+ "modify_time": "2019-12-09 09:58:06",
+ "last_release": "v1.4-beta",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/newlog/r2_malware_unpacking_training",
+ "star": 50,
+ "commits": 7,
+ "modify_time": "2018-04-23 19:26:53",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/neargle/pil-rce-by-ghostbutt",
+ "star": 50,
+ "commits": 18,
+ "modify_time": "2018-01-25 03:43:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nccgroup/asadbg",
+ "star": 50,
+ "commits": 52,
+ "modify_time": "2019-12-02 16:37:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/navytitanium/dnsmasterchef",
+ "star": 50,
+ "commits": 75,
+ "modify_time": "2018-03-18 20:19:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/n0pe-sled/apache2-mod-rewrite-setup",
+ "star": 50,
+ "commits": 8,
+ "modify_time": "2017-04-21 20:46:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ms-iot/imx-iotcore",
+ "star": 50,
+ "commits": 137,
+ "modify_time": "2019-11-08 22:19:27",
+ "last_release": "imx-iotcore-v1.0.0",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/matthewdunwoody/block-parser",
+ "star": 50,
+ "commits": 27,
+ "modify_time": "2017-05-27 18:38:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mattcg/socks5-client",
+ "star": 50,
+ "commits": 62,
+ "modify_time": "2019-07-31 09:30:23",
+ "last_release": "\n v1.2.6\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/leonnewton/selfmodify",
+ "star": 50,
+ "commits": 11,
+ "modify_time": "2017-07-10 07:32:20",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/leocardoso94/push-notification-demo",
+ "star": 50,
+ "commits": 7,
+ "modify_time": "2018-07-05 17:38:16",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/klaver/sysctl",
+ "star": 50,
+ "commits": 13,
+ "modify_time": "2019-04-05 12:27:00",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/kfosaaen/get-lapspasswords",
+ "star": 50,
+ "commits": 6,
+ "modify_time": "2015-05-06 20:52:48",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/k0keoyo/dark_composition_case_study_integer_overflow",
+ "star": 50,
+ "commits": 4,
+ "modify_time": "2018-01-17 13:18:09",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/jpyorre/intelligenthoneynet",
+ "star": 50,
+ "commits": 72,
+ "modify_time": "2015-11-05 20:44:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jpenalbae/rarop",
+ "star": 50,
+ "commits": 17,
+ "modify_time": "2017-12-21 18:45:00",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/johnhhorton/node-nmap",
+ "star": 50,
+ "commits": 55,
+ "modify_time": "2018-02-01 19:44:17",
+ "last_release": "\n 1.3.0\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/jgamblin/curluseragent",
+ "star": 50,
+ "commits": 9,
+ "modify_time": "2016-10-05 11:55:25",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/jaybrown/dnscrypt-menu",
+ "star": 50,
+ "commits": 71,
+ "modify_time": "2018-04-17 21:29:41",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/jakewins/findbtc",
+ "star": 50,
+ "commits": 20,
+ "modify_time": "2017-12-10 16:09:28",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/importctf/instagram-hacker",
+ "star": 50,
+ "commits": 8,
+ "modify_time": "2019-10-24 01:29:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/idan5x/switcheroo",
+ "star": 50,
+ "commits": 4,
+ "modify_time": "2018-02-03 14:49:43",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/hfiref0x/mpenum",
+ "star": 50,
+ "commits": 9,
+ "modify_time": "2019-05-27 04:35:52",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hellohudi/androidreversenotes",
+ "star": 50,
+ "commits": 47,
+ "modify_time": "2019-07-16 02:24:43",
+ "last_release": "",
+ "lang": "Smali"
+ },
+ {
+ "link": "https://github.com/h2hconference/2017",
+ "star": 50,
+ "commits": 14,
+ "modify_time": "2018-02-05 16:20:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/h0nus/backtome",
+ "star": 50,
+ "commits": 15,
+ "modify_time": "2017-09-01 22:14:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gyim/stupidgit",
+ "star": 50,
+ "commits": 145,
+ "modify_time": "2011-07-08 23:46:10",
+ "last_release": "\n v0.2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/guillac/wsmanager",
+ "star": 50,
+ "commits": 21,
+ "modify_time": "2019-09-21 17:06:10",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/gobiasinfosec/wireless_query",
+ "star": 50,
+ "commits": 10,
+ "modify_time": "2017-06-14 14:03:19",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/fortiguard-lion/frida-scripts",
+ "star": 50,
+ "commits": 4,
+ "modify_time": "2018-10-30 03:53:35",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/fishstiqz/poolinfo",
+ "star": 50,
+ "commits": 10,
+ "modify_time": "2015-07-23 20:53:09",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/fireeye/remote_lookup",
+ "star": 50,
+ "commits": 1,
+ "modify_time": "2017-06-23 19:09:43",
+ "last_release": "",
+ "lang": "Visual Basic .NET"
+ },
+ {
+ "link": "https://github.com/essandess/adblock2privoxy",
+ "star": 50,
+ "commits": 131,
+ "modify_time": "2019-08-31 21:35:09",
+ "last_release": "",
+ "lang": "Haskell"
+ },
+ {
+ "link": "https://github.com/ericr/sol-function-profiler",
+ "star": 50,
+ "commits": 4,
+ "modify_time": "2017-07-21 14:45:55",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/edent/tweeview",
+ "star": 50,
+ "commits": 24,
+ "modify_time": "2017-03-25 21:25:28",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/drizzlerisk/ntpdoser",
+ "star": 50,
+ "commits": 16,
+ "modify_time": "2017-04-12 08:30:28",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/dgg-it/match-adhashes",
+ "star": 50,
+ "commits": 6,
+ "modify_time": "2018-08-16 19:57:28",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/daudmalik06/reconcat",
+ "star": 50,
+ "commits": 4,
+ "modify_time": "2018-03-08 23:08:22",
+ "last_release": "1.0.2",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/citp/thewebneverforgets",
+ "star": 50,
+ "commits": 10,
+ "modify_time": "2017-10-11 17:27:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cisco-talos/smi_check",
+ "star": 50,
+ "commits": 8,
+ "modify_time": "2017-04-26 15:07:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/channingbj/meerkat",
+ "star": 50,
+ "commits": 55,
+ "modify_time": "2017-08-25 11:30:34",
+ "last_release": "1.1",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/brampat/security",
+ "star": 50,
+ "commits": 357,
+ "modify_time": "2019-11-17 10:47:52",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/bluscreenofjeff/metasploit-resource-scripts",
+ "star": 50,
+ "commits": 8,
+ "modify_time": "2017-08-16 05:40:59",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/bishopfox/untwister",
+ "star": 50,
+ "commits": 117,
+ "modify_time": "2015-08-25 18:17:42",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ayoul3/cicspwn",
+ "star": 50,
+ "commits": 82,
+ "modify_time": "2017-02-12 15:26:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/aramosf/recoversqlite",
+ "star": 50,
+ "commits": 2,
+ "modify_time": "2016-06-17 14:08:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/antscode/macwifi",
+ "star": 50,
+ "commits": 38,
+ "modify_time": "2019-08-13 10:21:13",
+ "last_release": "v3.0",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/anssi-fr/route_leaks",
+ "star": 50,
+ "commits": 5,
+ "modify_time": "2018-12-07 12:46:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/andy928/xpenology",
+ "star": 50,
+ "commits": 11,
+ "modify_time": "2013-01-21 09:03:25",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/alexknvl/fuzzball",
+ "star": 50,
+ "commits": 25,
+ "modify_time": "2018-08-24 00:55:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/alainesp/hashsuitedroid",
+ "star": 50,
+ "commits": 35,
+ "modify_time": "2019-10-18 14:25:06",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/adrianherrera/virustotal",
+ "star": 50,
+ "commits": 39,
+ "modify_time": "2018-03-02 20:53:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/acoinfo/kidvpn",
+ "star": 50,
+ "commits": 8,
+ "modify_time": "2019-01-14 15:49:11",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/9ee1/capstone.net",
+ "star": 50,
+ "commits": 77,
+ "modify_time": "2019-05-17 16:52:30",
+ "last_release": "V2.0.2",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/0xhjk/caidao",
+ "star": 50,
+ "commits": 1,
+ "modify_time": "2017-06-12 14:07:02",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/0xd012/wifuzzit",
+ "star": 50,
+ "commits": 1,
+ "modify_time": "2013-01-25 22:30:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xueeinstein/darknet-vis",
+ "star": 49,
+ "commits": 395,
+ "modify_time": "2018-02-12 13:51:34",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/t00sh/assembly",
+ "star": 49,
+ "commits": 13,
+ "modify_time": "2016-08-28 10:53:04",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/secgroundzero/tetanus",
+ "star": 49,
+ "commits": 7,
+ "modify_time": "2019-05-05 17:11:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/shadowsocks/openwrt-feeds",
+ "star": 49,
+ "commits": 39,
+ "modify_time": "2019-08-12 16:04:58",
+ "last_release": "",
+ "lang": "Makefile"
+ },
+ {
+ "link": "https://github.com/qinyuhang/network-knowledge",
+ "star": 49,
+ "commits": 20,
+ "modify_time": "2018-02-15 16:32:52",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/0x00-0x00/cve-2019-0841-bypass",
+ "star": 49,
+ "commits": 2,
+ "modify_time": "2019-06-11 20:07:09",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/skelsec/responder3",
+ "star": 49,
+ "commits": 118,
+ "modify_time": "2019-08-15 22:49:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/winterssy/ssr-docker",
+ "star": 49,
+ "commits": 8,
+ "modify_time": "2019-11-07 07:03:29",
+ "last_release": "",
+ "lang": "Dockerfile"
+ },
+ {
+ "link": "https://github.com/fpfeng/g2w.online",
+ "star": 49,
+ "commits": 22,
+ "modify_time": "2017-09-05 16:27:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cnlohr/wifirxpower",
+ "star": 49,
+ "commits": 11,
+ "modify_time": "2017-09-26 01:31:24",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/makuga01/dnsfookup",
+ "star": 49,
+ "commits": 3,
+ "modify_time": "2019-09-17 18:48:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/portswigger/stepper",
+ "star": 49,
+ "commits": 40,
+ "modify_time": "2019-10-31 15:48:09",
+ "last_release": "\n v1.2\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/S3cur3Th1sSh1t/Creds",
+ "star": 49,
+ "commits": 197,
+ "modify_time": "2019-11-12 15:58:23",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/mrbrutti/Cartero",
+ "star": 49,
+ "commits": 182,
+ "modify_time": "2017-09-03 06:23:32",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/bigsen/Crack-file",
+ "star": 49,
+ "commits": 5,
+ "modify_time": "2018-07-06 11:53:04",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/zredshift/mimemagic",
+ "star": 49,
+ "commits": 18,
+ "modify_time": "2018-10-29 08:25:50",
+ "last_release": "v1.1.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/xme/powershell_scripts",
+ "star": 49,
+ "commits": 7,
+ "modify_time": "2015-12-09 08:09:34",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/xhorak/firefox-devedition-flatpak",
+ "star": 49,
+ "commits": 134,
+ "modify_time": "2019-11-18 14:36:09",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/whichbrowser/parser-javascript",
+ "star": 49,
+ "commits": 250,
+ "modify_time": "2019-11-30 20:24:13",
+ "last_release": "\n 0.5.1\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/undeadsec/herakeylogger",
+ "star": 49,
+ "commits": 6,
+ "modify_time": "2018-07-13 20:08:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/uitra/injectora",
+ "star": 49,
+ "commits": 37,
+ "modify_time": "2016-02-20 12:18:11",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/trailofbits/ctf-challenges",
+ "star": 49,
+ "commits": 15,
+ "modify_time": "2019-11-15 21:45:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tna0y/python-random-module-cracker",
+ "star": 49,
+ "commits": 28,
+ "modify_time": "2019-10-24 20:57:37",
+ "last_release": "0.1.5",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/timip/osee",
+ "star": 49,
+ "commits": 15,
+ "modify_time": "2019-02-15 20:26:59",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/thelsa/awbruter",
+ "star": 49,
+ "commits": 11,
+ "modify_time": "2018-02-02 14:35:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tfairane/andromalware",
+ "star": 49,
+ "commits": null,
+ "modify_time": "2018-04-15 11:07:16",
+ "last_release": "",
+ "lang": "java"
+ },
+ {
+ "link": "https://github.com/tanjiti/waftest",
+ "star": 49,
+ "commits": 39,
+ "modify_time": "2014-11-20 07:17:47",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/steinsgatep001/binary",
+ "star": 49,
+ "commits": 288,
+ "modify_time": "2018-04-22 07:39:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sroberts/jager",
+ "star": 49,
+ "commits": 158,
+ "modify_time": "2019-07-21 15:50:53",
+ "last_release": "",
+ "lang": "Jupyter Notebook"
+ },
+ {
+ "link": "https://github.com/sola-da/redos-vulnerabilities",
+ "star": 49,
+ "commits": 4,
+ "modify_time": "2017-12-06 15:39:06",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/silverwind/default-gateway",
+ "star": 49,
+ "commits": 152,
+ "modify_time": "2019-11-14 20:39:34",
+ "last_release": "\n 5.0.5\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/silentsignal/duncan",
+ "star": 49,
+ "commits": 27,
+ "modify_time": "2016-05-04 13:16:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sherlouk/swiftprovisioningprofile",
+ "star": 49,
+ "commits": 13,
+ "modify_time": "2018-11-26 15:34:33",
+ "last_release": "2.0.1",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/secureskytechnology/badlibrary",
+ "star": 49,
+ "commits": 11,
+ "modify_time": "2018-04-27 07:23:52",
+ "last_release": "\n v1.2\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/secrary/ellascanner",
+ "star": 49,
+ "commits": null,
+ "modify_time": "2016-09-30 20:00:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/screetsec/imr0t",
+ "star": 49,
+ "commits": 12,
+ "modify_time": "2019-04-26 07:17:22",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/scipag/nac_bypass",
+ "star": 49,
+ "commits": 6,
+ "modify_time": "2019-05-16 15:11:53",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/s7ephen/sandkit",
+ "star": 49,
+ "commits": 4,
+ "modify_time": "2010-07-15 14:12:55",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/rub-nds/tls-scanner",
+ "star": 49,
+ "commits": 461,
+ "modify_time": "2019-11-12 08:55:17",
+ "last_release": "3.0.2",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/rolisoft/host-scanner",
+ "star": 49,
+ "commits": 343,
+ "modify_time": "2016-06-29 01:49:02",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/retme7/broadanywhere_poc_by_retme_bug_17356824",
+ "star": 49,
+ "commits": 4,
+ "modify_time": "2014-11-26 05:06:52",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/relys/3ds_multi_decryptor",
+ "star": 49,
+ "commits": 57,
+ "modify_time": "2015-10-19 04:32:44",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/rapid7/metasploit-javapayload",
+ "star": 49,
+ "commits": 227,
+ "modify_time": "2015-07-02 03:23:12",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/rahra/onioncat",
+ "star": 49,
+ "commits": 327,
+ "modify_time": "2019-12-09 21:10:13",
+ "last_release": "\n v0.2.8\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/proofofcalc/cve-2019-6453-poc",
+ "star": 49,
+ "commits": 3,
+ "modify_time": "2019-02-18 13:10:37",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/prncc/steam-scraper",
+ "star": 49,
+ "commits": 79,
+ "modify_time": "2018-02-11 04:05:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pinkp4nther/sutekh",
+ "star": 49,
+ "commits": 21,
+ "modify_time": "2019-08-07 23:50:53",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/osrdrivers/kmexts",
+ "star": 49,
+ "commits": 1,
+ "modify_time": "2017-10-05 17:42:45",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/opensourcepentest/tools",
+ "star": 49,
+ "commits": 17,
+ "modify_time": "2018-12-04 09:22:48",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/niklasb/elgoog",
+ "star": 49,
+ "commits": 7,
+ "modify_time": "2018-07-09 12:45:29",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/necst/heldroid",
+ "star": 49,
+ "commits": 62,
+ "modify_time": "2016-10-21 19:45:40",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/mubix/whitechapel",
+ "star": 49,
+ "commits": 52,
+ "modify_time": "2013-11-22 20:55:51",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/mthbernardes/lfi-enum",
+ "star": 49,
+ "commits": 1,
+ "modify_time": "2019-04-08 21:56:51",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/mrvaughan/defcon2016gsmdata",
+ "star": 49,
+ "commits": 28,
+ "modify_time": "2016-11-02 17:25:13",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/mrschyte/socksmon",
+ "star": 49,
+ "commits": 4,
+ "modify_time": "2017-09-13 18:29:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mrash/fwsnort",
+ "star": 49,
+ "commits": 686,
+ "modify_time": "2018-11-26 00:15:23",
+ "last_release": "\n fwsnort-1.6.9-pre1\n ",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/mmotti/mmotti-host-file",
+ "star": 49,
+ "commits": null,
+ "modify_time": "2018-10-28 09:49:29",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/michael-yip/threattracker",
+ "star": 49,
+ "commits": 8,
+ "modify_time": "2015-03-09 22:30:59",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mcpa-stlouis/hack-the-arch",
+ "star": 49,
+ "commits": 541,
+ "modify_time": "2019-09-24 18:21:08",
+ "last_release": "v2.4",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/maldevel/rootkits-list-download",
+ "star": 49,
+ "commits": 6,
+ "modify_time": "2017-05-18 07:34:47",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/luizluca/bridge",
+ "star": 49,
+ "commits": 7,
+ "modify_time": "2017-03-21 21:20:55",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/llvm-but-worse/maple-ir",
+ "star": 49,
+ "commits": 1538,
+ "modify_time": "2019-11-15 08:20:18",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/juga0/dhcpcanon",
+ "star": 49,
+ "commits": 248,
+ "modify_time": "2018-04-14 16:57:34",
+ "last_release": "\n v0.8.5\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jcesarstef/ghhdb-github-hacking-database",
+ "star": 49,
+ "commits": 23,
+ "modify_time": "2019-10-02 15:01:26",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/isecpartners/rtspfuzzer",
+ "star": 49,
+ "commits": 59,
+ "modify_time": "2014-03-19 21:47:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hrkfdn/deckard",
+ "star": 49,
+ "commits": 66,
+ "modify_time": "2019-02-18 13:46:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/freddyb/html2dom",
+ "star": 49,
+ "commits": 60,
+ "modify_time": "2018-01-31 11:18:46",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/frankstain/pe-loader",
+ "star": 49,
+ "commits": 4,
+ "modify_time": "2013-06-23 14:05:51",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/fastly/wordpress-plugin",
+ "star": 49,
+ "commits": 232,
+ "modify_time": "2019-10-17 18:21:01",
+ "last_release": "\n 1.2.9\n ",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/fabiomsr/okhttp-peer-certificate-extractor",
+ "star": 49,
+ "commits": 5,
+ "modify_time": "2016-07-04 20:05:51",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/enigma0x3/messagebox",
+ "star": 49,
+ "commits": 4,
+ "modify_time": "2016-07-20 21:43:26",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/enclaveconsulting/crypto-pki",
+ "star": 49,
+ "commits": 37,
+ "modify_time": "2017-06-04 21:24:07",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/ember-cli/rfcs",
+ "star": 49,
+ "commits": 165,
+ "modify_time": "2019-01-20 04:43:32",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/dxa4481/whatsinmyredis",
+ "star": 49,
+ "commits": 13,
+ "modify_time": "2017-02-26 23:09:12",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/dstaulcu/ta-sigma-searches",
+ "star": 49,
+ "commits": 85,
+ "modify_time": "2018-04-24 04:10:15",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/dfirfpi/dpapilab",
+ "star": 49,
+ "commits": 10,
+ "modify_time": "2017-04-14 13:09:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dev-sec/chef-nginx-hardening",
+ "star": 49,
+ "commits": 174,
+ "modify_time": "2019-05-16 06:46:39",
+ "last_release": "v3.0.0",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/debasishm89/iofuzz",
+ "star": 49,
+ "commits": 11,
+ "modify_time": "2014-04-16 17:48:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/danielkrupinski/vac",
+ "star": 49,
+ "commits": 141,
+ "modify_time": "2019-11-27 15:45:23",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/coolervoid/firefox_tunnel",
+ "star": 49,
+ "commits": 16,
+ "modify_time": "2018-03-16 15:33:19",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/command-tab/awesome-n64-development",
+ "star": 49,
+ "commits": 69,
+ "modify_time": "2019-12-07 02:11:43",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/chef-koch/chromium-hardening",
+ "star": 49,
+ "commits": 216,
+ "modify_time": "2019-12-08 16:45:28",
+ "last_release": "\n Group-Policies\n ",
+ "lang": "Batchfile"
+ },
+ {
+ "link": "https://github.com/c-sto/gosecretsdump",
+ "star": 49,
+ "commits": 49,
+ "modify_time": "2019-12-10 03:28:26",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/bolunwang/backdoor",
+ "star": 49,
+ "commits": 19,
+ "modify_time": "2019-11-17 02:50:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/blackhacker511/blackrat",
+ "star": 49,
+ "commits": 36,
+ "modify_time": "2018-10-22 20:30:02",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/auraphp/aura.payload",
+ "star": 49,
+ "commits": 35,
+ "modify_time": "2018-04-08 20:39:28",
+ "last_release": "3.0.1",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/attify/attify-zigbee-framework",
+ "star": 49,
+ "commits": 190,
+ "modify_time": "2017-04-22 03:27:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ahupowerdns/galmon",
+ "star": 49,
+ "commits": 236,
+ "modify_time": "2019-12-04 20:49:39",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/agustingianni/utilities",
+ "star": 49,
+ "commits": 44,
+ "modify_time": "2019-01-05 02:21:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/0blio/filegps",
+ "star": 49,
+ "commits": 79,
+ "modify_time": "2019-11-27 16:50:39",
+ "last_release": "0.5",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/srar/socks2shadowsocks",
+ "star": 48,
+ "commits": 38,
+ "modify_time": "2019-12-06 07:47:50",
+ "last_release": "",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/pbnj/infosec-interview-questions",
+ "star": 48,
+ "commits": 4,
+ "modify_time": "2018-07-16 19:37:59",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/yeyintminthuhtut/lazy-redteamer-scripts",
+ "star": 48,
+ "commits": 11,
+ "modify_time": "2019-07-03 07:37:18",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/g0tmi1k/boot2root-scripts",
+ "star": 48,
+ "commits": 5,
+ "modify_time": "2015-11-09 07:35:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/intel/cve-bin-tool",
+ "star": 48,
+ "commits": 196,
+ "modify_time": "2019-11-27 22:24:19",
+ "last_release": "0.3.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hatriot/peachorchard",
+ "star": 48,
+ "commits": 24,
+ "modify_time": "2019-09-23 19:24:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cyrus-and/gproxy",
+ "star": 48,
+ "commits": 28,
+ "modify_time": "2016-09-16 12:11:28",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/rhinosecuritylabs/swagger-ez",
+ "star": 48,
+ "commits": 12,
+ "modify_time": "2019-04-05 21:50:39",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/littl3field/audix",
+ "star": 48,
+ "commits": 50,
+ "modify_time": "2019-11-25 15:26:50",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/c0nw0nk/coinhive",
+ "star": 48,
+ "commits": 13,
+ "modify_time": "2017-11-27 13:46:30",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/pomo-mondreganto/forcad",
+ "star": 48,
+ "commits": 143,
+ "modify_time": "2019-12-01 10:13:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tintoser/bluekeep-exploit",
+ "star": 48,
+ "commits": 38,
+ "modify_time": "2019-09-24 15:22:58",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/juniorjacob/readwrite-kernel-stable",
+ "star": 48,
+ "commits": 20,
+ "modify_time": "2019-09-08 15:13:53",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/bcosorg/whitepaper",
+ "star": 48,
+ "commits": 2,
+ "modify_time": "2019-08-14 13:00:09",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/trailofbits/polytracker",
+ "star": 48,
+ "commits": 29,
+ "modify_time": "2019-12-09 22:42:40",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/luckman666/devops_kkit",
+ "star": 48,
+ "commits": 18,
+ "modify_time": "2019-09-30 01:50:39",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/0xbird/0xbird.github.io",
+ "star": 48,
+ "commits": 44,
+ "modify_time": "2019-08-28 05:40:57",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/GDSSecurity/GDS-PMD-Security-Rules",
+ "star": 48,
+ "commits": 5,
+ "modify_time": "2015-11-18 16:07:51",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/anouarbensaad/honeypot-iot",
+ "star": 48,
+ "commits": 51,
+ "modify_time": "2019-05-09 00:06:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/YahooArchive/csptester",
+ "star": 48,
+ "commits": 16,
+ "modify_time": "2018-09-04 18:46:16",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/zodiacon/dllinjectionwiththreadcontext",
+ "star": 48,
+ "commits": 2,
+ "modify_time": "2017-09-04 11:43:59",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/zdresearch/owasp-honeypot",
+ "star": 48,
+ "commits": 321,
+ "modify_time": "2019-11-22 21:27:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/yolosec/upcgen",
+ "star": 48,
+ "commits": 78,
+ "modify_time": "2016-11-21 20:25:28",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/yeti-791/apt-guide",
+ "star": 48,
+ "commits": 7,
+ "modify_time": "2019-03-25 17:52:19",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/xl7dev/icsecurity",
+ "star": 48,
+ "commits": 37,
+ "modify_time": "2017-12-22 05:31:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wzw19890321/exploits",
+ "star": 48,
+ "commits": null,
+ "modify_time": "2018-08-23 09:45:15",
+ "last_release": "",
+ "lang": "html"
+ },
+ {
+ "link": "https://github.com/vmcall/eye_mapper",
+ "star": 48,
+ "commits": 3,
+ "modify_time": "2019-03-20 12:43:57",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/vegabird/prithvi",
+ "star": 48,
+ "commits": 8,
+ "modify_time": "2018-02-23 06:11:10",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/turnerlabs/antiope",
+ "star": 48,
+ "commits": 368,
+ "modify_time": "2019-10-11 14:59:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tuhinshubhra/wpintel",
+ "star": 48,
+ "commits": 20,
+ "modify_time": "2019-05-12 08:59:32",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/tonyzesto/pubgprivxcode85",
+ "star": 48,
+ "commits": 7,
+ "modify_time": "2017-07-18 09:40:22",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/tias/android-busybox-ndk",
+ "star": 48,
+ "commits": 67,
+ "modify_time": "2012-10-06 04:42:20",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/thcipriani/sshecret",
+ "star": 48,
+ "commits": 6,
+ "modify_time": "2019-10-25 17:11:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/t3chnocat/oscp-ctf",
+ "star": 48,
+ "commits": 6,
+ "modify_time": "2019-06-29 00:35:29",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/stoyan-shopov/troll",
+ "star": 48,
+ "commits": 447,
+ "modify_time": "2019-03-25 07:32:14",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ssbssa/heob",
+ "star": 48,
+ "commits": 572,
+ "modify_time": "2019-12-07 14:31:47",
+ "last_release": "3.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/sogeti-esec-lab/android-fde",
+ "star": 48,
+ "commits": 4,
+ "modify_time": "2015-02-03 13:31:48",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/softsec-kaist/gitctf",
+ "star": 48,
+ "commits": 42,
+ "modify_time": "2018-12-05 14:33:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/softscheck/scff",
+ "star": 48,
+ "commits": 11,
+ "modify_time": "2018-01-26 13:10:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/snovvcrash/fwdsh3ll",
+ "star": 48,
+ "commits": 67,
+ "modify_time": "2019-11-06 13:24:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/signalsec/kirlangic-ttf-fuzzer",
+ "star": 48,
+ "commits": 5,
+ "modify_time": "2015-11-06 05:30:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/salemove/jaeger-client-ruby",
+ "star": 48,
+ "commits": 104,
+ "modify_time": "2019-09-23 11:46:24",
+ "last_release": "\n v1.0.0\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/rustybird/corridor",
+ "star": 48,
+ "commits": 138,
+ "modify_time": "2018-09-06 11:20:36",
+ "last_release": "\n v0.11.7\n ",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/rubenespadas/dionaeafr",
+ "star": 48,
+ "commits": 174,
+ "modify_time": "2017-08-07 12:52:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rodrigoalvesvieira/soundkeylogger",
+ "star": 48,
+ "commits": 7,
+ "modify_time": "2016-07-12 04:06:48",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/rek7/postshell",
+ "star": 48,
+ "commits": 13,
+ "modify_time": "2019-09-09 18:50:15",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/reabout/datacon",
+ "star": 48,
+ "commits": 10,
+ "modify_time": "2019-05-26 07:58:55",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/r3kapig/wctf-2019",
+ "star": 48,
+ "commits": 9,
+ "modify_time": "2019-07-08 03:02:13",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/q3k/m16c-interface",
+ "star": 48,
+ "commits": 14,
+ "modify_time": "2017-07-19 22:21:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pymumu/jail-shell",
+ "star": 48,
+ "commits": 83,
+ "modify_time": "2018-07-19 02:54:40",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/proxb/poshprivilege",
+ "star": 48,
+ "commits": 29,
+ "modify_time": "2017-10-26 02:56:12",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/pbnj/infosec-interview-questions",
+ "star": 48,
+ "commits": 4,
+ "modify_time": "2018-07-16 19:37:59",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/pdasilva/vtrace_scripts",
+ "star": 48,
+ "commits": 9,
+ "modify_time": "2012-12-25 17:49:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pauljt/scanjs",
+ "star": 48,
+ "commits": 234,
+ "modify_time": "2014-05-08 07:05:49",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/osm0sis/apk-patcher",
+ "star": 48,
+ "commits": 7,
+ "modify_time": "2017-02-02 17:12:08",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/nyx0/kins",
+ "star": 48,
+ "commits": 3,
+ "modify_time": "2015-02-25 04:47:37",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/nixawk/nmap_vscan",
+ "star": 48,
+ "commits": 14,
+ "modify_time": "2017-12-12 00:32:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/moneroocean/xmr-node-proxy",
+ "star": 48,
+ "commits": 432,
+ "modify_time": "2019-12-03 00:30:51",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/mkdesu/cables",
+ "star": 48,
+ "commits": 132,
+ "modify_time": "2014-07-29 22:08:12",
+ "last_release": "\n v3.2.6\n ",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/metachar/pyhawk",
+ "star": 48,
+ "commits": 12,
+ "modify_time": "2018-12-21 05:59:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/menzow/sn1per-docker",
+ "star": 48,
+ "commits": 43,
+ "modify_time": "2018-04-29 09:02:32",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/mcollina/docker-loghose",
+ "star": 48,
+ "commits": 115,
+ "modify_time": "2019-05-24 12:56:35",
+ "last_release": "v1.2.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/mburakergenc/malware-detection-using-machine-learning",
+ "star": 48,
+ "commits": 8,
+ "modify_time": "2017-06-13 11:25:44",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/marten4n6/tinytor",
+ "star": 48,
+ "commits": 51,
+ "modify_time": "2019-04-27 10:59:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/marcocesarato/php-antimalware-scanner",
+ "star": 48,
+ "commits": 75,
+ "modify_time": "2019-11-17 17:14:42",
+ "last_release": "0.5.0.67",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/malwarelu/malware-lu",
+ "star": 48,
+ "commits": 139,
+ "modify_time": "2017-01-04 15:38:15",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/knrdl/yamot",
+ "star": 48,
+ "commits": 19,
+ "modify_time": "2018-04-21 15:06:03",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/klionsec/klionsec.github.io",
+ "star": 48,
+ "commits": 687,
+ "modify_time": "2019-04-27 12:06:43",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/kkamagui/iron-hid",
+ "star": 48,
+ "commits": 10,
+ "modify_time": "2018-06-05 05:56:34",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/k1p0d/h264_dvr_rce",
+ "star": 48,
+ "commits": 8,
+ "modify_time": "2016-03-28 13:49:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jinmo/ifred",
+ "star": 48,
+ "commits": 189,
+ "modify_time": "2019-09-15 05:31:26",
+ "last_release": "1.0.5",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/jdsecurity/cryptotrooper",
+ "star": 48,
+ "commits": 3,
+ "modify_time": "2016-03-04 23:18:28",
+ "last_release": "\n 1.1\n ",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/jdmccalpin/low-overhead-timers",
+ "star": 48,
+ "commits": 24,
+ "modify_time": "2019-10-17 16:00:26",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jas502n/cve-2019-11581",
+ "star": 48,
+ "commits": 14,
+ "modify_time": "2019-07-22 06:47:50",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/inode-/attackselector",
+ "star": 48,
+ "commits": 6,
+ "modify_time": "2017-11-23 15:22:42",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/incredibleindishell/ldap-credentials-collector-backdoor-generator",
+ "star": 48,
+ "commits": 14,
+ "modify_time": "2017-04-03 21:04:53",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/huangwc94/scraping-helper-chrome-extension",
+ "star": 48,
+ "commits": 37,
+ "modify_time": "2016-10-14 18:37:02",
+ "last_release": "0.3",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/hija/malwaredatascience",
+ "star": 48,
+ "commits": 36,
+ "modify_time": "2019-05-05 17:09:23",
+ "last_release": "",
+ "lang": "Jupyter Notebook"
+ },
+ {
+ "link": "https://github.com/hfiref0x/sxsexp",
+ "star": 48,
+ "commits": 18,
+ "modify_time": "2018-12-12 16:57:25",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/harrisonpim/bookworm",
+ "star": 48,
+ "commits": 39,
+ "modify_time": "2018-03-23 21:59:27",
+ "last_release": "",
+ "lang": "Jupyter Notebook"
+ },
+ {
+ "link": "https://github.com/hackedteam/vector-edk",
+ "star": 48,
+ "commits": 17,
+ "modify_time": "2015-04-09 13:57:44",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ha3mrx/facebook-cracker",
+ "star": 48,
+ "commits": 5,
+ "modify_time": "2018-09-20 16:51:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/guyanqi/awesome-privacy",
+ "star": 48,
+ "commits": 39,
+ "modify_time": "2019-12-06 22:09:01",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/filosottile/openbsd-fde-crack",
+ "star": 48,
+ "commits": 6,
+ "modify_time": "2016-08-31 15:22:41",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/federicoceratto/nim-httpauth",
+ "star": 48,
+ "commits": 40,
+ "modify_time": "2019-12-04 01:08:39",
+ "last_release": "0.1.0",
+ "lang": "Nim"
+ },
+ {
+ "link": "https://github.com/esecuritylab/kostebek",
+ "star": 48,
+ "commits": 9,
+ "modify_time": "2019-05-15 22:37:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/el3ct71k/autobrowser",
+ "star": 48,
+ "commits": 24,
+ "modify_time": "2016-10-27 15:09:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dishather/richprint",
+ "star": 48,
+ "commits": 9,
+ "modify_time": "2019-04-06 15:04:04",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/dflabs/nat",
+ "star": 48,
+ "commits": 3,
+ "modify_time": "2018-08-06 21:25:04",
+ "last_release": "",
+ "lang": "Batchfile"
+ },
+ {
+ "link": "https://github.com/debasishm89/iefuzz",
+ "star": 48,
+ "commits": 5,
+ "modify_time": "2017-06-15 06:31:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/danielmiessler/honeycrediptracker",
+ "star": 48,
+ "commits": 10,
+ "modify_time": "2016-11-08 20:47:36",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/danielfree/asus-v2ray-transparent-proxy",
+ "star": 48,
+ "commits": 17,
+ "modify_time": "2018-04-16 16:09:14",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/crond-jaist/cyris",
+ "star": 48,
+ "commits": 36,
+ "modify_time": "2019-03-29 06:45:38",
+ "last_release": "1.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cr4sh/msfontsfuzz",
+ "star": 48,
+ "commits": 3,
+ "modify_time": "2013-06-08 18:54:46",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/cr4sh/code-coverage-analysis-tools",
+ "star": 48,
+ "commits": 7,
+ "modify_time": "2013-06-08 18:56:22",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/cobbr/insecurepowershell",
+ "star": 48,
+ "commits": 5667,
+ "modify_time": "2017-12-18 07:56:16",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/clr2of8/detect-sslmitm",
+ "star": 48,
+ "commits": 6,
+ "modify_time": "2018-01-27 01:12:24",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/cleanunicorn/theo",
+ "star": 48,
+ "commits": 119,
+ "modify_time": "2019-11-21 14:49:51",
+ "last_release": "\n v0.8.2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cherrypill/system_info",
+ "star": 48,
+ "commits": 118,
+ "modify_time": "2017-09-11 18:16:40",
+ "last_release": "v1.3",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/chaitin/yanshi",
+ "star": 48,
+ "commits": 57,
+ "modify_time": "2017-01-16 08:20:21",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/cert-polska/malwarecage",
+ "star": 48,
+ "commits": 2,
+ "modify_time": "2018-01-16 11:28:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/can1357/safe_capcom",
+ "star": 48,
+ "commits": 11,
+ "modify_time": "2018-05-27 01:56:16",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/breakingmalware/avulnerabilitychecker",
+ "star": 48,
+ "commits": 4,
+ "modify_time": "2015-12-08 14:24:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bkerler/ghidra_installer",
+ "star": 48,
+ "commits": 44,
+ "modify_time": "2019-11-13 16:04:22",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/bignerd95/chimay-blue",
+ "star": 48,
+ "commits": 5,
+ "modify_time": "2018-03-18 18:59:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/backlion/webshell",
+ "star": 48,
+ "commits": 2,
+ "modify_time": "2017-08-10 05:55:01",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/auth0-blog/serverless-stories-lambda",
+ "star": 48,
+ "commits": 8,
+ "modify_time": "2017-05-15 23:37:21",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/austin-taylor/bluewall",
+ "star": 48,
+ "commits": 126,
+ "modify_time": "2019-04-07 13:36:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/appsecco/using-docker-kubernetes-for-automating-appsec-and-osint-workflows",
+ "star": 48,
+ "commits": 8,
+ "modify_time": "2019-04-04 05:33:56",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/anubisss/szimatszatyor",
+ "star": 48,
+ "commits": 80,
+ "modify_time": "2017-10-03 17:49:04",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/anbai-inc/burpstart",
+ "star": 48,
+ "commits": null,
+ "modify_time": "2018-07-12 18:36:48",
+ "last_release": "",
+ "lang": "java"
+ },
+ {
+ "link": "https://github.com/amrthabet/pysrdf",
+ "star": 48,
+ "commits": 8,
+ "modify_time": "2014-04-29 13:25:49",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/alessandrogario/ida-function-tagger",
+ "star": 48,
+ "commits": 7,
+ "modify_time": "2017-04-08 16:14:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/agusmakmun/python-wordlist-generator",
+ "star": 48,
+ "commits": 23,
+ "modify_time": "2017-02-02 12:41:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/1184893257/simplesniffer",
+ "star": 48,
+ "commits": 85,
+ "modify_time": "2013-01-13 10:13:39",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/jyvsectec/phr-model",
+ "star": 47,
+ "commits": 51,
+ "modify_time": "2019-12-03 10:00:49",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/cloudsec/aioshell",
+ "star": 47,
+ "commits": 1,
+ "modify_time": "2015-02-16 15:09:05",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/jpcertcc/owaspdocuments",
+ "star": 47,
+ "commits": 31,
+ "modify_time": "2017-05-20 07:07:16",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/iaik/jstemplate",
+ "star": 47,
+ "commits": 2,
+ "modify_time": "2018-08-06 14:03:03",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/k8gege/aggressor",
+ "star": 47,
+ "commits": 20,
+ "modify_time": "2019-11-26 14:24:53",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/consensys/defi-score",
+ "star": 47,
+ "commits": 96,
+ "modify_time": "2019-11-29 16:03:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hak5/sharkjack-payloads",
+ "star": 47,
+ "commits": 39,
+ "modify_time": "2019-11-20 17:47:52",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/bastilleresearch/scapy-radio",
+ "star": 47,
+ "commits": 12,
+ "modify_time": "2016-04-01 23:22:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nccgroup/sshession",
+ "star": 47,
+ "commits": 1,
+ "modify_time": "2019-10-21 19:21:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/evilsocket/pwnagotchi-plugins-contrib",
+ "star": 47,
+ "commits": 11,
+ "modify_time": "2019-12-07 12:22:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dreadl0ck/ja3",
+ "star": 47,
+ "commits": 28,
+ "modify_time": "2019-06-06 20:42:43",
+ "last_release": "1.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/asutorufa/ssrmicroclient",
+ "star": 47,
+ "commits": 556,
+ "modify_time": "2019-12-09 08:27:19",
+ "last_release": "0.2.9beta",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/payloadbox/rfi-lfi-payload-list",
+ "star": 47,
+ "commits": 9,
+ "modify_time": "2019-11-04 04:07:43",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/k8gege/Aggressor",
+ "star": 47,
+ "commits": 20,
+ "modify_time": "2019-11-26 14:24:53",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/beaugunderson/wifi-heatmap",
+ "star": 47,
+ "commits": 2,
+ "modify_time": "2017-01-22 20:12:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/paulmcmillan/kismetclient",
+ "star": 47,
+ "commits": 21,
+ "modify_time": "2013-04-19 19:26:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nyxgeek/ntlmscan",
+ "star": 47,
+ "commits": 18,
+ "modify_time": "2019-11-01 02:17:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vysecurity/CACTUSTORCH",
+ "star": 47,
+ "commits": 23,
+ "modify_time": "2018-07-03 10:30:57",
+ "last_release": "",
+ "lang": "Visual Basic .NET"
+ },
+ {
+ "link": "https://github.com/jaxBCD/RecScanSec",
+ "star": 47,
+ "commits": 44,
+ "modify_time": "2019-06-06 16:48:22",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/pwnlandia/shockpot",
+ "star": 47,
+ "commits": 27,
+ "modify_time": "2019-09-30 23:33:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jjo-sec/idataco",
+ "star": 47,
+ "commits": 19,
+ "modify_time": "2016-06-14 20:07:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ctf-o-matic/capture-the-flag",
+ "star": 47,
+ "commits": 116,
+ "modify_time": "2019-05-09 16:21:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zerosum0x0/loadlibrary-getprocaddress-replacements",
+ "star": 47,
+ "commits": 36,
+ "modify_time": "2016-11-07 15:47:25",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/zer0yu/zeroscan",
+ "star": 47,
+ "commits": 86,
+ "modify_time": "2018-10-25 16:15:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/yifanlu/3ds_injector",
+ "star": 47,
+ "commits": 44,
+ "modify_time": "2016-03-28 17:06:34",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/vletoux/detectpasswordviantlminflow",
+ "star": 47,
+ "commits": 6,
+ "modify_time": "2019-03-08 10:16:38",
+ "last_release": "1.0.1",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/vasco2016/shellsploit-framework",
+ "star": 47,
+ "commits": 228,
+ "modify_time": "2016-05-24 12:22:18",
+ "last_release": "\n v0.3\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vah13/sap_exploit",
+ "star": 47,
+ "commits": 7,
+ "modify_time": "2018-01-18 05:52:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/utkonos/lst2x64dbg",
+ "star": 47,
+ "commits": 39,
+ "modify_time": "2019-10-21 00:20:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/uploadcare/uploadcare-rails",
+ "star": 47,
+ "commits": 160,
+ "modify_time": "2018-12-10 22:08:33",
+ "last_release": "v1.2.1",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/tw-ncert/ctifeeds",
+ "star": 47,
+ "commits": 110,
+ "modify_time": "2016-09-26 08:16:50",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/trinitronx/vncpasswd.py",
+ "star": 47,
+ "commits": 79,
+ "modify_time": "2019-08-09 07:59:19",
+ "last_release": "v1.2.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/topshed/rpi_8x8griddraw",
+ "star": 47,
+ "commits": 41,
+ "modify_time": "2016-04-20 20:46:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tlamb96/kgb_messenger",
+ "star": 47,
+ "commits": 7,
+ "modify_time": "2019-07-05 03:46:14",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/threeaccents/botnet",
+ "star": 47,
+ "commits": 105,
+ "modify_time": "2019-05-11 05:45:31",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/threatminer/aptnotes",
+ "star": 47,
+ "commits": 345,
+ "modify_time": "2016-03-12 12:43:29",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/the-blockchain-bible/readme",
+ "star": 47,
+ "commits": 68,
+ "modify_time": "2019-10-28 05:55:11",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/tamirzb/cve-2018-9411",
+ "star": 47,
+ "commits": 5,
+ "modify_time": "2018-10-30 21:51:06",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/tamimmirza/intrusion-detection-system-using-deep-learning",
+ "star": 47,
+ "commits": 19,
+ "modify_time": "2019-01-05 06:43:57",
+ "last_release": "",
+ "lang": "Jupyter Notebook"
+ },
+ {
+ "link": "https://github.com/talvos/talvos",
+ "star": 47,
+ "commits": 888,
+ "modify_time": "2019-06-18 15:45:07",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/sunnyki/bareboot",
+ "star": 47,
+ "commits": 1470,
+ "modify_time": "2019-11-26 07:37:15",
+ "last_release": "\n v1.02.01\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/stormshadow07/beef-over-wan",
+ "star": 47,
+ "commits": 7,
+ "modify_time": "2018-03-11 06:29:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/stephenfewer/ollysockettrace",
+ "star": 47,
+ "commits": 3,
+ "modify_time": "2011-11-04 13:48:41",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/squalr/selfhackingapp",
+ "star": 47,
+ "commits": 5,
+ "modify_time": "2018-09-02 16:40:50",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/spacial/csirt",
+ "star": 47,
+ "commits": 324,
+ "modify_time": "2019-10-14 12:07:09",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/smilezxlee/zxrequestblock",
+ "star": 47,
+ "commits": 23,
+ "modify_time": "2019-10-15 07:47:33",
+ "last_release": "1.0.1",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/slowmist/blockchain-threat-intelligence",
+ "star": 47,
+ "commits": 9,
+ "modify_time": "2018-08-14 09:45:27",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/simsong/afflibv3",
+ "star": 47,
+ "commits": 49,
+ "modify_time": "2014-10-08 16:46:18",
+ "last_release": "\n v3.7.4\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/silica/sandbox",
+ "star": 47,
+ "commits": 3,
+ "modify_time": "2018-09-20 08:40:15",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/sherlly/pcrt",
+ "star": 47,
+ "commits": 4,
+ "modify_time": "2019-08-13 02:24:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sekhan/nightpi",
+ "star": 47,
+ "commits": 43,
+ "modify_time": "2019-07-02 15:51:37",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/securenetwork/nfcult",
+ "star": 47,
+ "commits": 9,
+ "modify_time": "2014-10-16 08:24:21",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/samoshkin/docker-letsencrypt-certgen",
+ "star": 47,
+ "commits": 6,
+ "modify_time": "2018-01-05 21:54:38",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/salesforce/autotriagebot",
+ "star": 47,
+ "commits": 4,
+ "modify_time": "2017-09-21 20:02:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/saaramar/publications",
+ "star": 47,
+ "commits": 7,
+ "modify_time": "2019-08-28 04:26:58",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/riscure/drop-ida-plugin",
+ "star": 47,
+ "commits": 3,
+ "modify_time": "2017-12-22 18:04:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/radare/bokken",
+ "star": 47,
+ "commits": null,
+ "modify_time": "2012-06-22 10:48:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/progmboy/cansecwest2017",
+ "star": 47,
+ "commits": 8,
+ "modify_time": "2017-04-13 08:43:43",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/pownjs/pown-duct",
+ "star": 47,
+ "commits": 11,
+ "modify_time": "2019-02-06 05:19:31",
+ "last_release": "\n v2.1.0\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/pierregode/linux-active-directory-join-script",
+ "star": 47,
+ "commits": 727,
+ "modify_time": "2019-12-05 08:54:42",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/ostorlab/jniostorlab",
+ "star": 47,
+ "commits": 3,
+ "modify_time": "2016-01-08 04:29:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/o2platform/defcon_resting",
+ "star": 47,
+ "commits": 16,
+ "modify_time": "2013-08-05 12:01:21",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/nyxgeek/dumpsniffer",
+ "star": 47,
+ "commits": 31,
+ "modify_time": "2017-09-28 02:39:40",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/neohapsis/mptcp-abuse",
+ "star": 47,
+ "commits": 6,
+ "modify_time": "2014-08-12 19:24:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nanshihui/android-reverse-tool",
+ "star": 47,
+ "commits": null,
+ "modify_time": "2017-06-07 10:54:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nahsra/antisamy",
+ "star": 47,
+ "commits": 44,
+ "modify_time": "2019-04-01 13:25:02",
+ "last_release": "v1.5.8",
+ "lang": "DIGITAL Command Language"
+ },
+ {
+ "link": "https://github.com/mozmark/ringleader",
+ "star": 47,
+ "commits": 129,
+ "modify_time": "2015-09-14 10:04:05",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/mobileforensicsresearch/mem",
+ "star": 47,
+ "commits": 12,
+ "modify_time": "2015-06-12 18:15:10",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/miladdiaz/mikrotikexploit",
+ "star": 47,
+ "commits": 14,
+ "modify_time": "2018-08-24 07:11:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mikewest/cookies-over-http-bad",
+ "star": 47,
+ "commits": 13,
+ "modify_time": "2018-04-07 10:12:15",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/lukasikic/unix-privilege-escalation-exploits-pack",
+ "star": 47,
+ "commits": 2,
+ "modify_time": "2014-12-24 22:03:07",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/lkys37en/start-adenum",
+ "star": 47,
+ "commits": 11,
+ "modify_time": "2019-11-04 21:15:31",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/lianglixin/memdllloader",
+ "star": 47,
+ "commits": 12,
+ "modify_time": "2018-07-31 13:06:52",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/leoetlino/botw-re-notes",
+ "star": 47,
+ "commits": 265,
+ "modify_time": "2019-09-21 16:25:34",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/kwilczynski/packer-templates",
+ "star": 47,
+ "commits": 126,
+ "modify_time": "2019-06-30 19:12:19",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/jreframeworker/jreframeworker",
+ "star": 47,
+ "commits": 294,
+ "modify_time": "2019-02-18 16:11:58",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/jonathankingston/ember-cli-sri",
+ "star": 47,
+ "commits": 64,
+ "modify_time": "2016-08-10 15:07:58",
+ "last_release": "\n v2.1.1\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/jeremyblackthorne/ghidra-keybindings",
+ "star": 47,
+ "commits": 2,
+ "modify_time": "2019-04-16 00:39:55",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/jameshabben/sysmon-queries",
+ "star": 47,
+ "commits": 10,
+ "modify_time": "2015-03-31 16:49:43",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/jackeriss/keyboard_recording_trojan",
+ "star": 47,
+ "commits": 22,
+ "modify_time": "2019-09-28 09:04:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ivrodriguezca/decrypt-ios-apps-script",
+ "star": 47,
+ "commits": 11,
+ "modify_time": "2019-06-14 00:37:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/intrd/nozzlr",
+ "star": 47,
+ "commits": 85,
+ "modify_time": "2017-12-08 17:35:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/initstring/lxd_root",
+ "star": 47,
+ "commits": 2,
+ "modify_time": "2019-05-21 06:15:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/imbushuo/boot-shim",
+ "star": 47,
+ "commits": 110,
+ "modify_time": "2019-01-26 10:15:36",
+ "last_release": "elf-aa64-loader-pre1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ihack4falafel/osee",
+ "star": 47,
+ "commits": 169,
+ "modify_time": "2019-07-30 18:59:10",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/iflody/mybuganalyze",
+ "star": 47,
+ "commits": 10,
+ "modify_time": "2019-01-08 04:25:51",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/hexhive/smotherspectre",
+ "star": 47,
+ "commits": 6,
+ "modify_time": "2019-11-12 14:48:56",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hax4us/apkmod",
+ "star": 47,
+ "commits": 59,
+ "modify_time": "2019-12-07 04:19:34",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/hasherezade/mal_unpack",
+ "star": 47,
+ "commits": 58,
+ "modify_time": "2019-11-21 17:04:54",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/hackvertor/visualfuzzer",
+ "star": 47,
+ "commits": 2,
+ "modify_time": "2018-03-08 09:06:11",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/h43z/dns-rebinding-tool",
+ "star": 47,
+ "commits": 8,
+ "modify_time": "2018-06-21 12:13:33",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/grant-olson/pyasm",
+ "star": 47,
+ "commits": 191,
+ "modify_time": "2012-01-29 19:22:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gosecure/break-fast-serial",
+ "star": 47,
+ "commits": 11,
+ "modify_time": "2017-03-27 21:34:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ggusoft/inforfinder",
+ "star": 47,
+ "commits": 25,
+ "modify_time": "2017-07-31 19:15:44",
+ "last_release": "1.0.9",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gerhart01/livecloudkd",
+ "star": 47,
+ "commits": 49,
+ "modify_time": "2019-10-30 18:55:36",
+ "last_release": "1.2.2.20193010beta",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/gdbinit/gdb-ng",
+ "star": 47,
+ "commits": 19,
+ "modify_time": "2013-12-16 02:56:11",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/gdbinit/extractmacho",
+ "star": 47,
+ "commits": 46,
+ "modify_time": "2019-05-09 16:15:56",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/fortrabbit/craft-copy",
+ "star": 47,
+ "commits": 169,
+ "modify_time": "2019-12-04 11:29:20",
+ "last_release": "1.0.0-RC9",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/felipedaragon/huntpad",
+ "star": 47,
+ "commits": 3,
+ "modify_time": "2018-05-26 03:03:35",
+ "last_release": "",
+ "lang": "Pascal"
+ },
+ {
+ "link": "https://github.com/fail0verflow/switch-arm-trusted-firmware",
+ "star": 47,
+ "commits": 3000,
+ "modify_time": "2018-01-28 09:15:25",
+ "last_release": "\n v1.5\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/essandess/easylist-pac-privoxy",
+ "star": 47,
+ "commits": 87,
+ "modify_time": "2019-12-08 13:21:21",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/ercoppa/symbolic-execution-tutorial",
+ "star": 47,
+ "commits": 18,
+ "modify_time": "2019-12-05 14:09:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/engelsjo/raspireader",
+ "star": 47,
+ "commits": 7,
+ "modify_time": "2019-01-18 20:59:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/embedi/amt_auth_bypass_poc",
+ "star": 47,
+ "commits": 2,
+ "modify_time": "2017-07-27 21:08:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dsopas/rfd-checker",
+ "star": 47,
+ "commits": 7,
+ "modify_time": "2019-02-26 16:48:28",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/david-reguera-garcia-dreg/enyelkm",
+ "star": 47,
+ "commits": 8,
+ "modify_time": "2018-03-26 13:02:20",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/dafthack/passphrasegen",
+ "star": 47,
+ "commits": 7,
+ "modify_time": "2018-06-27 15:34:48",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/collin80/m2ret",
+ "star": 47,
+ "commits": 118,
+ "modify_time": "2018-03-17 14:39:07",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/charlemaznable/lua-resty-wechat",
+ "star": 47,
+ "commits": 34,
+ "modify_time": "2019-08-13 04:48:05",
+ "last_release": "",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/brycx/checkpwn",
+ "star": 47,
+ "commits": 144,
+ "modify_time": "2019-10-16 07:41:05",
+ "last_release": "0.3.3",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/bit4woo/java_deserialize_vuln_lab",
+ "star": 47,
+ "commits": 16,
+ "modify_time": "2018-11-26 12:46:18",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/behavior3/behavior3py",
+ "star": 47,
+ "commits": 2,
+ "modify_time": "2018-10-21 13:59:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bediger4000/reverse-php-malware",
+ "star": 47,
+ "commits": 94,
+ "modify_time": "2019-07-14 15:33:18",
+ "last_release": "v.15",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/awalgarg/devtools-timing-attack",
+ "star": 47,
+ "commits": 4,
+ "modify_time": "2016-05-06 10:13:34",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/appsecconsulting/pentest-tools",
+ "star": 47,
+ "commits": 10,
+ "modify_time": "2018-12-07 19:44:10",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/antid0tecom/aarch64_armv81extension",
+ "star": 47,
+ "commits": 9,
+ "modify_time": "2017-09-11 09:44:29",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/anilbaranyelken/arpag",
+ "star": 47,
+ "commits": 15,
+ "modify_time": "2018-04-03 21:08:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/alexfrancow/a-detector",
+ "star": 47,
+ "commits": 29,
+ "modify_time": "2018-06-19 17:54:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/alessandroz/pupy",
+ "star": 47,
+ "commits": 1461,
+ "modify_time": "2017-05-16 21:11:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/agilebits/crackme",
+ "star": 47,
+ "commits": 99,
+ "modify_time": "2019-05-03 02:08:58",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/adafruit/adafruit-pi-externalroot-helper",
+ "star": 47,
+ "commits": 13,
+ "modify_time": "2015-06-08 22:20:41",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/4w4k3/knockmail",
+ "star": 47,
+ "commits": 3,
+ "modify_time": "2017-05-29 18:33:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dsnezhkov/deepsea",
+ "star": 46,
+ "commits": 37,
+ "modify_time": "2019-11-30 01:16:55",
+ "last_release": "v0.9",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/git-kevinchuang/potatso-swift5",
+ "star": 46,
+ "commits": 10,
+ "modify_time": "2019-06-19 08:49:24",
+ "last_release": "",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/125k/esp8266_wifi_captive_portal",
+ "star": 46,
+ "commits": 36,
+ "modify_time": "2019-10-31 12:51:05",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/hmbsbige/text_translation",
+ "star": 46,
+ "commits": 338,
+ "modify_time": "2019-12-02 09:44:55",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/asamy/x86-64-pe-emu",
+ "star": 46,
+ "commits": 16,
+ "modify_time": "2017-04-16 03:04:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fireeye/gocrack-ui",
+ "star": 46,
+ "commits": 49,
+ "modify_time": "2019-10-31 18:42:44",
+ "last_release": "v1.1.2",
+ "lang": "Vue"
+ },
+ {
+ "link": "https://github.com/landgrey/classhound",
+ "star": 46,
+ "commits": 5,
+ "modify_time": "2019-06-07 16:41:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rancher/remotedialer",
+ "star": 46,
+ "commits": 16,
+ "modify_time": "2019-09-30 22:18:01",
+ "last_release": "v0.2.3",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/gamelinux/echidna",
+ "star": 46,
+ "commits": 283,
+ "modify_time": "2012-01-10 09:27:25",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/lorenzb/libsubmarine",
+ "star": 46,
+ "commits": 99,
+ "modify_time": "2019-03-12 10:58:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/leotsui/cs259d_notes_hw_cn",
+ "star": 46,
+ "commits": 40,
+ "modify_time": "2018-05-04 11:07:14",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/stef/wireless-radar",
+ "star": 46,
+ "commits": 38,
+ "modify_time": "2019-03-05 14:29:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/securitytube/wifiscanvisualizer",
+ "star": 46,
+ "commits": 6,
+ "modify_time": "2015-08-14 07:55:46",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/epicrouterss/mssql-fileless-rootkit-warsqlkit",
+ "star": 46,
+ "commits": 4,
+ "modify_time": "2017-09-17 18:29:53",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/kurtcoke/demonhunter_exploitkit",
+ "star": 46,
+ "commits": 1,
+ "modify_time": "2015-06-26 15:14:48",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/cristianst85/quickconnectplugin",
+ "star": 46,
+ "commits": 144,
+ "modify_time": "2019-08-21 22:38:26",
+ "last_release": "0.5.2",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/ernado-x/x.web.sitemap",
+ "star": 46,
+ "commits": 85,
+ "modify_time": "2019-10-06 16:06:29",
+ "last_release": "v2.0.7",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/hdm/2017-BSidesLV-Modern-Recon",
+ "star": 46,
+ "commits": 10,
+ "modify_time": "2017-07-27 16:54:17",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/125K/ESP8266_WiFi_Captive_Portal",
+ "star": 46,
+ "commits": 36,
+ "modify_time": "2019-10-31 12:51:05",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/szepeviktor/waf4wordpress",
+ "star": 46,
+ "commits": 155,
+ "modify_time": "2019-11-17 17:49:04",
+ "last_release": "\n mu-4.14.0\n ",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/robotpy/robotpy-crio",
+ "star": 46,
+ "commits": 290,
+ "modify_time": "2018-06-07 21:27:50",
+ "last_release": "v2014.4.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/brunull/pace",
+ "star": 46,
+ "commits": 165,
+ "modify_time": "2019-10-19 14:26:55",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/koromodako/mkctf",
+ "star": 46,
+ "commits": 88,
+ "modify_time": "2019-09-01 09:30:52",
+ "last_release": "6.0.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/caarlos0-graveyard/gravekeeper",
+ "star": 46,
+ "commits": 11,
+ "modify_time": "2017-09-04 23:17:43",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/zznop/flyr",
+ "star": 46,
+ "commits": 76,
+ "modify_time": "2018-11-04 04:59:05",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/zxgio/gdb_gef-cheatsheet",
+ "star": 46,
+ "commits": 32,
+ "modify_time": "2019-11-23 12:44:40",
+ "last_release": "",
+ "lang": "TeX"
+ },
+ {
+ "link": "https://github.com/zodiacon/regeditx",
+ "star": 46,
+ "commits": 30,
+ "modify_time": "2019-10-29 16:40:04",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/znetstar/tor-router",
+ "star": 46,
+ "commits": 245,
+ "modify_time": "2019-11-24 03:44:02",
+ "last_release": "\n v4.0.13\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/zhuhuibeishadiao/pfhook",
+ "star": 46,
+ "commits": 3,
+ "modify_time": "2016-10-19 22:28:09",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/zerbea/hcxkeys",
+ "star": 46,
+ "commits": 53,
+ "modify_time": "2019-07-12 15:31:23",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/xumeiquer/yara-forensics",
+ "star": 46,
+ "commits": 121,
+ "modify_time": "2019-04-26 19:50:46",
+ "last_release": "",
+ "lang": "YARA"
+ },
+ {
+ "link": "https://github.com/xuchaoa/ctf_awd_platform",
+ "star": 46,
+ "commits": 169,
+ "modify_time": "2019-09-16 08:11:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xnianq/awd-frame",
+ "star": 46,
+ "commits": 3,
+ "modify_time": "2018-03-20 08:15:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wetw0rk/exploit-development",
+ "star": 46,
+ "commits": 17,
+ "modify_time": "2019-05-16 05:58:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wanttobeno/win_driver_mouse_and_key",
+ "star": 46,
+ "commits": 1,
+ "modify_time": "2018-08-28 13:17:52",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/viperbluff/waf_buster",
+ "star": 46,
+ "commits": 13,
+ "modify_time": "2018-12-19 17:35:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vdalibard/boat",
+ "star": 46,
+ "commits": 12,
+ "modify_time": "2017-05-23 09:57:00",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/v-p-b/kaspy_toolz",
+ "star": 46,
+ "commits": 7,
+ "modify_time": "2019-08-21 07:23:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/unixpickle/cve-2018-4407",
+ "star": 46,
+ "commits": 8,
+ "modify_time": "2018-11-01 21:30:01",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/uefitech/resources",
+ "star": 46,
+ "commits": 52,
+ "modify_time": "2018-06-17 13:30:01",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/turing-chain/honeypots-on-blockchain",
+ "star": 46,
+ "commits": 2,
+ "modify_time": "2019-04-20 03:06:28",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/trendmicro/rfquack",
+ "star": 46,
+ "commits": 33,
+ "modify_time": "2019-11-15 13:12:52",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/towerofhanoi/ctfsubmitter",
+ "star": 46,
+ "commits": 485,
+ "modify_time": "2018-11-07 23:34:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/testsecer/md5decrypt",
+ "star": 46,
+ "commits": 1,
+ "modify_time": "2017-11-24 07:33:58",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/te-k/analyst-scripts",
+ "star": 46,
+ "commits": 131,
+ "modify_time": "2019-12-10 00:34:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/stonedreamforest/re_avkmgr",
+ "star": 46,
+ "commits": 14,
+ "modify_time": "2017-11-27 15:21:10",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/spiderlabs/korelogic-rules",
+ "star": 46,
+ "commits": 8,
+ "modify_time": "2012-09-27 07:24:20",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/sowdust/ffff",
+ "star": 46,
+ "commits": 29,
+ "modify_time": "2019-11-12 11:20:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/silvermoonsecurity/security-misc",
+ "star": 46,
+ "commits": 4,
+ "modify_time": "2017-07-05 03:03:01",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/sidechannelmarvels/stark",
+ "star": 46,
+ "commits": 3,
+ "modify_time": "2016-12-03 20:39:17",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/shjalayeri/mcedp",
+ "star": 46,
+ "commits": 5,
+ "modify_time": "2012-09-26 10:57:20",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/setuid0-sec/swiss_e-voting_publications",
+ "star": 46,
+ "commits": 5,
+ "modify_time": "2019-03-12 14:34:28",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/sentenza/gimp-ela",
+ "star": 46,
+ "commits": 10,
+ "modify_time": "2018-10-02 17:31:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/safebreach-labs/altfs",
+ "star": 46,
+ "commits": 4,
+ "modify_time": "2019-04-04 20:14:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rustemsoft/skater-.net-obfuscator",
+ "star": 46,
+ "commits": 6,
+ "modify_time": "2018-06-06 12:30:47",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/rokasurbelis/system-security-testing",
+ "star": 46,
+ "commits": 63,
+ "modify_time": "2019-05-03 02:01:04",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/rodionovd/task_vaccine",
+ "star": 46,
+ "commits": 38,
+ "modify_time": "2014-11-26 16:15:58",
+ "last_release": "v0.1.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/rnehra01/arp-validator",
+ "star": 46,
+ "commits": 22,
+ "modify_time": "2017-11-02 11:50:20",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/raspberrypi/rpi-sense",
+ "star": 46,
+ "commits": 13,
+ "modify_time": "2016-02-01 10:29:44",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/randomuserid/tylium",
+ "star": 46,
+ "commits": 64,
+ "modify_time": "2019-11-05 15:48:42",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/radenvodka/pentol",
+ "star": 46,
+ "commits": 13,
+ "modify_time": "2019-04-17 11:39:25",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/pun1sh3r/facebot",
+ "star": 46,
+ "commits": 23,
+ "modify_time": "2014-08-27 06:57:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/psilupan/fray",
+ "star": 46,
+ "commits": 890,
+ "modify_time": "2019-12-10 05:10:33",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/pimps/cve-2017-5645",
+ "star": 46,
+ "commits": 6,
+ "modify_time": "2018-11-18 11:14:19",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/pentestpartners/ptp-rat",
+ "star": 46,
+ "commits": 4,
+ "modify_time": "2017-11-13 12:24:11",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/papadp/reflective-injection-detection",
+ "star": 46,
+ "commits": 3,
+ "modify_time": "2015-12-12 14:48:49",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/paloaltonetworks/aws-elb-autoscaling",
+ "star": 46,
+ "commits": 92,
+ "modify_time": "2019-07-24 22:02:09",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/pablomansanet/c0toolkit",
+ "star": 46,
+ "commits": 3,
+ "modify_time": "2018-12-03 17:40:28",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/p0cl4bs/facebrute",
+ "star": 46,
+ "commits": 2,
+ "modify_time": "2015-06-26 23:13:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/osminogin/docker-tor-simple",
+ "star": 46,
+ "commits": 47,
+ "modify_time": "2019-09-30 13:20:10",
+ "last_release": "",
+ "lang": "Makefile"
+ },
+ {
+ "link": "https://github.com/oscp/openshift-monitoring",
+ "star": 46,
+ "commits": 191,
+ "modify_time": "2019-07-03 13:30:18",
+ "last_release": "v1.4.4",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/octosavvi/espkey",
+ "star": 46,
+ "commits": 9,
+ "modify_time": "2018-08-03 04:18:05",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/nodiscc/srv01",
+ "star": 46,
+ "commits": 1581,
+ "modify_time": "2019-10-17 22:57:52",
+ "last_release": "0.9.9",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/netspi/awssigner",
+ "star": 46,
+ "commits": 58,
+ "modify_time": "2019-12-04 21:59:25",
+ "last_release": "1.70",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/n4xh4ck5/n4xd0rk",
+ "star": 46,
+ "commits": 28,
+ "modify_time": "2018-05-09 19:13:59",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/n3l5/irfartpull",
+ "star": 46,
+ "commits": 54,
+ "modify_time": "2017-04-06 03:14:54",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/mzpqnxow/gdb-static-cross",
+ "star": 46,
+ "commits": null,
+ "modify_time": "2019-01-22 18:30:36",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/mrsqar-ye/door404",
+ "star": 46,
+ "commits": 16,
+ "modify_time": "2018-09-17 18:37:08",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/maximehip/mach_portal",
+ "star": 46,
+ "commits": 3,
+ "modify_time": "2016-12-16 19:23:23",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/maltek/swift-frida",
+ "star": 46,
+ "commits": 182,
+ "modify_time": "2018-10-17 14:25:04",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/lwindolf/polscan",
+ "star": 46,
+ "commits": 836,
+ "modify_time": "2019-08-07 12:18:20",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/luis-hebendanz/msf-remote-console",
+ "star": 46,
+ "commits": 35,
+ "modify_time": "2018-09-22 16:31:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/logicalparadox/apnagent-ios",
+ "star": 46,
+ "commits": 14,
+ "modify_time": "2013-03-27 22:27:26",
+ "last_release": "\n 1.2.0\n ",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/laginimaineb/fuzz_zone",
+ "star": 46,
+ "commits": 3,
+ "modify_time": "2016-01-24 16:21:12",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/lafolle/flen",
+ "star": 46,
+ "commits": 21,
+ "modify_time": "2018-03-11 06:23:46",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/kisspeter/apifuzzer",
+ "star": 46,
+ "commits": 96,
+ "modify_time": "2019-11-19 15:53:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kaushikravikumar/realtimetaxiandroiddemo",
+ "star": 46,
+ "commits": 19,
+ "modify_time": "2018-07-17 17:33:00",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/jyao1/stm",
+ "star": 46,
+ "commits": 31,
+ "modify_time": "2016-12-14 04:02:53",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/justfoxing/ghidra_bridge",
+ "star": 46,
+ "commits": 95,
+ "modify_time": "2019-11-21 19:26:09",
+ "last_release": "0.0.8",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jthuraisamy/dirt",
+ "star": 46,
+ "commits": 64,
+ "modify_time": "2018-08-26 02:24:36",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/joshbegley/nsa-stories",
+ "star": 46,
+ "commits": 56,
+ "modify_time": "2015-04-07 16:39:42",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/jmg87/redteam-k8spwn",
+ "star": 46,
+ "commits": 24,
+ "modify_time": "2019-04-16 15:35:13",
+ "last_release": "",
+ "lang": "Dockerfile"
+ },
+ {
+ "link": "https://github.com/jeremyfetiveau/turbofan-exploit-for-issue-762874",
+ "star": 46,
+ "commits": 16,
+ "modify_time": "2019-04-25 15:12:55",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/iovisor/iovisor-ovn",
+ "star": 46,
+ "commits": 395,
+ "modify_time": "2017-03-03 16:56:35",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/inszva/tap0901",
+ "star": 46,
+ "commits": 1,
+ "modify_time": "2017-01-11 12:19:40",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/ice-ice/dnstunnel",
+ "star": 46,
+ "commits": 18,
+ "modify_time": "2019-05-17 06:44:18",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/hucmosin/purelove",
+ "star": 46,
+ "commits": 109,
+ "modify_time": "2019-05-31 06:44:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hectane/go-acl",
+ "star": 46,
+ "commits": 60,
+ "modify_time": "2019-06-04 04:17:25",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/hackedteam/core-macos",
+ "star": 46,
+ "commits": 565,
+ "modify_time": "2015-04-09 13:38:54",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/gsoros/gtrader",
+ "star": 46,
+ "commits": 674,
+ "modify_time": "2019-11-30 22:57:30",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/grierforensics/officedissector",
+ "star": 46,
+ "commits": 42,
+ "modify_time": "2017-10-13 16:18:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/grayddq/hids",
+ "star": 46,
+ "commits": 2,
+ "modify_time": "2017-12-29 06:35:50",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/gdssecurity/whitepapers",
+ "star": 46,
+ "commits": 12,
+ "modify_time": "2017-09-01 04:43:07",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/gdbinit/gatekeerper",
+ "star": 46,
+ "commits": 1,
+ "modify_time": "2015-11-09 16:57:07",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/gcmartinelli/entropy",
+ "star": 46,
+ "commits": 8,
+ "modify_time": "2019-10-11 02:55:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/funsecurity/apk_binder_script",
+ "star": 46,
+ "commits": 29,
+ "modify_time": "2014-04-07 16:58:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fingertips/wad",
+ "star": 46,
+ "commits": 43,
+ "modify_time": "2014-05-18 17:42:24",
+ "last_release": "v1.0.0",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/ericzimmerman/prefetch",
+ "star": 46,
+ "commits": 50,
+ "modify_time": "2019-07-16 17:10:55",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/erevus-cn/scan_webshell",
+ "star": 46,
+ "commits": 3,
+ "modify_time": "2017-08-08 08:20:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/disappeerlabs/disappeer",
+ "star": 46,
+ "commits": 21,
+ "modify_time": "2019-05-04 18:05:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/damonmohammadbagher/nativepayload_bssid",
+ "star": 46,
+ "commits": 42,
+ "modify_time": "2019-04-25 21:20:11",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/cve-search/pycvesearch",
+ "star": 46,
+ "commits": 13,
+ "modify_time": "2019-09-10 12:44:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cryptax/angeapk",
+ "star": 46,
+ "commits": 5,
+ "modify_time": "2019-07-25 07:36:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/codworth/esp-host",
+ "star": 46,
+ "commits": 117,
+ "modify_time": "2018-07-05 23:40:32",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/chentingz/snifferui",
+ "star": 46,
+ "commits": 66,
+ "modify_time": "2019-07-19 01:00:11",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/capeleidokos/elf_diff",
+ "star": 46,
+ "commits": 32,
+ "modify_time": "2019-05-02 16:58:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bwall/markovobfuscate",
+ "star": 46,
+ "commits": 6,
+ "modify_time": "2016-02-22 22:18:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bc-security/defcon27",
+ "star": 46,
+ "commits": 20,
+ "modify_time": "2019-08-15 03:07:15",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/azya52/seiko",
+ "star": 46,
+ "commits": 44,
+ "modify_time": "2018-05-30 09:17:55",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/averagesecurityguy/prometheus",
+ "star": 46,
+ "commits": 176,
+ "modify_time": "2015-05-01 03:12:47",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/automatedlab/automatedlab.common",
+ "star": 46,
+ "commits": 203,
+ "modify_time": "2019-11-20 17:19:29",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/aleksk/lazycopy",
+ "star": 46,
+ "commits": 45,
+ "modify_time": "2017-05-24 03:35:26",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/akhepcat/bridgeap",
+ "star": 46,
+ "commits": 81,
+ "modify_time": "2017-10-15 19:57:49",
+ "last_release": "2.0",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/activeadmin-plugins/active_admin_role",
+ "star": 46,
+ "commits": 56,
+ "modify_time": "2019-05-13 20:33:27",
+ "last_release": "\n v0.2.2\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/aaaddress1/vtmal",
+ "star": 46,
+ "commits": 3,
+ "modify_time": "2018-08-01 15:29:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/55-aa/cve-2016-3308",
+ "star": 46,
+ "commits": 12,
+ "modify_time": "2016-09-18 05:48:27",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/blacckhathaceekr/osint_tips",
+ "star": 45,
+ "commits": 13,
+ "modify_time": "2019-12-10 17:10:54",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/witee/note-shadowsocks",
+ "star": 45,
+ "commits": 46,
+ "modify_time": "2018-12-16 03:28:50",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/syst3ma/awesome-baseband-research",
+ "star": 45,
+ "commits": 13,
+ "modify_time": "2019-03-23 20:57:11",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/evilsocket/www.pwnagotchi.ai",
+ "star": 45,
+ "commits": 263,
+ "modify_time": "2019-12-07 12:07:28",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/f-secure/mqtt_fuzz",
+ "star": 45,
+ "commits": 3,
+ "modify_time": "2015-05-08 06:15:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/timwr/cve-2019-2215",
+ "star": 45,
+ "commits": 5,
+ "modify_time": "2019-11-12 03:40:42",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/zneak/jsx",
+ "star": 45,
+ "commits": 80,
+ "modify_time": "2012-11-20 06:29:33",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/shadowsocks/iptables",
+ "star": 45,
+ "commits": 2604,
+ "modify_time": "2015-11-09 04:54:10",
+ "last_release": "\n v1.4.21\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/avast/pelib",
+ "star": 45,
+ "commits": 97,
+ "modify_time": "2019-11-15 07:24:01",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/danielmiessler/iptables",
+ "star": 45,
+ "commits": 10,
+ "modify_time": "2014-07-08 04:24:16",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/soaringswine/lazyrecon_docker",
+ "star": 45,
+ "commits": 41,
+ "modify_time": "2019-11-21 18:07:13",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/ticarpi/my-pentesting-repo",
+ "star": 45,
+ "commits": 36,
+ "modify_time": "2019-02-05 18:23:42",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/onplus/v2ray-sitedat",
+ "star": 45,
+ "commits": 6,
+ "modify_time": "2017-12-11 22:47:27",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/k8gege/cve-2019-0604",
+ "star": 45,
+ "commits": 5,
+ "modify_time": "2019-10-18 14:49:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nims11/hostapd.py",
+ "star": 45,
+ "commits": 72,
+ "modify_time": "2015-07-20 12:05:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mpgn/cve-2018-17246",
+ "star": 45,
+ "commits": 4,
+ "modify_time": "2019-10-26 13:28:33",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/r0x4r/d4rkxss",
+ "star": 45,
+ "commits": 20,
+ "modify_time": "2019-11-13 11:11:51",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/FeeiCN/WSVD",
+ "star": 45,
+ "commits": 23,
+ "modify_time": "2017-08-16 09:12:33",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/Thibault-69/RAT-Hodin-v2.9",
+ "star": 45,
+ "commits": 138,
+ "modify_time": "2019-09-25 08:05:20",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/NotGlop/SysExec",
+ "star": 45,
+ "commits": 10,
+ "modify_time": "2017-05-15 10:55:20",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ETeissonniere/EliDecode",
+ "star": 45,
+ "commits": 48,
+ "modify_time": "2016-06-18 18:55:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/BorjaMerino/Windows-One-Way-Stagers",
+ "star": 45,
+ "commits": 26,
+ "modify_time": "2019-11-21 15:02:54",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/threatexpress/subshell",
+ "star": 45,
+ "commits": 17,
+ "modify_time": "2016-11-06 16:00:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/Drenn1/oracles-disasm",
+ "star": 45,
+ "commits": 803,
+ "modify_time": "2019-12-09 04:16:21",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/zynamics/msdn-plugin-ida",
+ "star": 45,
+ "commits": 6,
+ "modify_time": "2012-01-10 12:02:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zev3n/shodan_so",
+ "star": 45,
+ "commits": 9,
+ "modify_time": "2018-12-18 14:00:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vusec/dangsan",
+ "star": 45,
+ "commits": 1,
+ "modify_time": "2017-03-19 16:20:51",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/virtadpt/exocortex-halo",
+ "star": 45,
+ "commits": 645,
+ "modify_time": "2019-12-03 04:49:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/virink/awd_auto_attack_framework",
+ "star": 45,
+ "commits": 1,
+ "modify_time": "2019-06-21 09:32:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vduddu/deepweblinks",
+ "star": 45,
+ "commits": 10,
+ "modify_time": "2017-04-14 09:39:13",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/unk9vvn/andtroj",
+ "star": 45,
+ "commits": 216,
+ "modify_time": "2019-08-24 12:37:31",
+ "last_release": "\n 2.3.4\n ",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/tr3jer/incextensivelist",
+ "star": 45,
+ "commits": 31,
+ "modify_time": "2017-06-08 16:43:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/thomaspatzke/poodleattack",
+ "star": 45,
+ "commits": 15,
+ "modify_time": "2015-05-13 19:31:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tandasat/remotewritemonitor",
+ "star": 45,
+ "commits": 22,
+ "modify_time": "2015-07-17 23:41:16",
+ "last_release": "v1.5",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/stasinopoulos/ztexploit",
+ "star": 45,
+ "commits": 12,
+ "modify_time": "2016-01-15 11:58:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sqdwr/hidedriver",
+ "star": 45,
+ "commits": 2,
+ "modify_time": "2019-06-05 06:54:48",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/spiderlabs/modsecurity-apache",
+ "star": 45,
+ "commits": 117,
+ "modify_time": "2019-01-11 12:20:23",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/spiderlabs/groupenum",
+ "star": 45,
+ "commits": 9,
+ "modify_time": "2014-09-25 13:58:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sofish/imagexss.js",
+ "star": 45,
+ "commits": 5,
+ "modify_time": "2012-12-06 04:52:48",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/smilezxlee/zxhookutil",
+ "star": 45,
+ "commits": 25,
+ "modify_time": "2019-05-22 06:17:40",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/skoolkid/skoolkit",
+ "star": 45,
+ "commits": 2615,
+ "modify_time": "2019-11-09 13:32:40",
+ "last_release": "\n 8.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/silverwind/tcpie",
+ "star": 45,
+ "commits": 246,
+ "modify_time": "2019-11-21 19:51:34",
+ "last_release": "\n 8.0.1\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/shiva108/waes",
+ "star": 45,
+ "commits": 66,
+ "modify_time": "2019-07-30 09:53:16",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/shenghe/pcmanager",
+ "star": 45,
+ "commits": 1,
+ "modify_time": "2012-12-08 04:32:59",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/shd101wyy/python_reverse_tcp",
+ "star": 45,
+ "commits": 40,
+ "modify_time": "2015-05-07 22:11:28",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/seekintoo/chimay-red",
+ "star": 45,
+ "commits": 6,
+ "modify_time": "2018-06-11 17:31:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/secwiki/scaing-backdoor",
+ "star": 45,
+ "commits": 3,
+ "modify_time": "2016-03-13 08:41:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rumesh986/wifianalyse",
+ "star": 45,
+ "commits": 6,
+ "modify_time": "2016-08-08 14:38:04",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/rootup/autosploit",
+ "star": 45,
+ "commits": 43,
+ "modify_time": "2019-07-14 05:18:48",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/rootkitsmm/ms15-061",
+ "star": 45,
+ "commits": 11,
+ "modify_time": "2015-09-22 05:50:39",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ritvikb99/dark-fantasy-hack-tool",
+ "star": 45,
+ "commits": 10,
+ "modify_time": "2019-10-22 06:46:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/reevesrs24/winmacspoofer",
+ "star": 45,
+ "commits": 37,
+ "modify_time": "2016-09-22 07:29:54",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/redogwu/windows_kernel_exploit",
+ "star": 45,
+ "commits": 22,
+ "modify_time": "2018-11-11 14:22:32",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/reddelexc/hackerone-reports",
+ "star": 45,
+ "commits": 25,
+ "modify_time": "2019-11-30 03:15:26",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/rapid7/metasploit-aggregator",
+ "star": 45,
+ "commits": 59,
+ "modify_time": "2017-11-12 03:22:15",
+ "last_release": "\n v1.0.0\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/radareorg/cutter-plugins",
+ "star": 45,
+ "commits": 7,
+ "modify_time": "2019-12-10 08:07:11",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/qiang-yu/shadowsocksvpn-openwrt",
+ "star": 45,
+ "commits": 364,
+ "modify_time": "2018-08-25 06:50:36",
+ "last_release": "2.5.6-6-1",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/pure-l0g1c/apex",
+ "star": 45,
+ "commits": 19,
+ "modify_time": "2018-01-12 02:03:05",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/ps1dr3x/lachesis",
+ "star": 45,
+ "commits": 90,
+ "modify_time": "2019-05-24 16:49:41",
+ "last_release": "",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/portswigger/httpoxy-scanner",
+ "star": 45,
+ "commits": 10,
+ "modify_time": "2018-01-12 14:34:21",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/platypew/digispark-duckduino",
+ "star": 45,
+ "commits": 3,
+ "modify_time": "2019-02-01 01:09:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/phantom0301/pteye",
+ "star": 45,
+ "commits": 10,
+ "modify_time": "2019-03-25 06:58:18",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/orangetw/bug-bounty-reference",
+ "star": 45,
+ "commits": 59,
+ "modify_time": "2016-12-06 18:03:16",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/obscuresec/random",
+ "star": 45,
+ "commits": 58,
+ "modify_time": "2013-08-14 18:13:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nullsecuritynet/papers",
+ "star": 45,
+ "commits": 10,
+ "modify_time": "2019-09-29 16:45:53",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/nowsecure/r2lldb",
+ "star": 45,
+ "commits": 23,
+ "modify_time": "2019-01-22 10:44:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nowsecure/frida-trace",
+ "star": 45,
+ "commits": 40,
+ "modify_time": "2019-08-15 18:55:33",
+ "last_release": "\n v3.0.2\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/nccgroup/ransomware-simulator",
+ "star": 45,
+ "commits": 2,
+ "modify_time": "2016-07-04 17:28:50",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/nccgroup/psr",
+ "star": 45,
+ "commits": 8,
+ "modify_time": "2017-12-18 03:55:39",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/nccgroup/ip-reputation-snort-rule-generator",
+ "star": 45,
+ "commits": 12,
+ "modify_time": "2013-08-28 09:54:37",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/nccgroup/frisbeelite",
+ "star": 45,
+ "commits": 1,
+ "modify_time": "2013-11-05 10:01:50",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ncatlin/exilesniffer",
+ "star": 45,
+ "commits": 126,
+ "modify_time": "2019-03-28 06:59:07",
+ "last_release": "1.0.1",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/mthbernardes/fses",
+ "star": 45,
+ "commits": 8,
+ "modify_time": "2017-09-06 07:01:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/monstersb/hijackandroidpoweroff",
+ "star": 45,
+ "commits": 2,
+ "modify_time": "2014-11-12 10:30:36",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/monrocoury/admin-panel-finder",
+ "star": 45,
+ "commits": 30,
+ "modify_time": "2018-01-23 20:59:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/misp/mail_to_misp",
+ "star": 45,
+ "commits": 216,
+ "modify_time": "2019-07-23 12:45:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/miladmsft/threathunt",
+ "star": 45,
+ "commits": 58,
+ "modify_time": "2019-07-19 14:20:36",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/maoqyhz/droidcc",
+ "star": 45,
+ "commits": 34,
+ "modify_time": "2018-11-23 11:05:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/luc10/struts-rce-cve-2017-9805",
+ "star": 45,
+ "commits": 3,
+ "modify_time": "2017-09-08 06:26:05",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/linaro-swg/optee_examples",
+ "star": 45,
+ "commits": 42,
+ "modify_time": "2019-09-03 14:57:19",
+ "last_release": "\n 3.7.0\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/limithit/ngx_dynamic_limit_req_module",
+ "star": 45,
+ "commits": 134,
+ "modify_time": "2019-11-20 16:15:29",
+ "last_release": "1.9.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/lcatro/think-in-security",
+ "star": 45,
+ "commits": 5,
+ "modify_time": "2017-12-22 05:35:05",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/l4ys/idasignsrch",
+ "star": 45,
+ "commits": 4,
+ "modify_time": "2018-10-18 07:18:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kyrus/ida-translator",
+ "star": 45,
+ "commits": 18,
+ "modify_time": "2015-02-09 14:32:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kxcode/jndi-exploit-bypass-demo",
+ "star": 45,
+ "commits": 3,
+ "modify_time": "2019-09-10 12:14:13",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/kukfa/bindbg",
+ "star": 45,
+ "commits": 2,
+ "modify_time": "2018-04-13 18:08:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/knnspeed/simple-uefi-bootloader",
+ "star": 45,
+ "commits": 116,
+ "modify_time": "2019-09-18 15:14:40",
+ "last_release": "V2.3",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/kacos2000/windowstimeline",
+ "star": 45,
+ "commits": 332,
+ "modify_time": "2019-12-04 17:08:29",
+ "last_release": "\n v20,20\n ",
+ "lang": "TSQL"
+ },
+ {
+ "link": "https://github.com/juxhindb/oob-server",
+ "star": 45,
+ "commits": 22,
+ "modify_time": "2019-08-25 16:01:00",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/jevinskie/emusca",
+ "star": 45,
+ "commits": 14,
+ "modify_time": "2019-01-17 17:50:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jay/gethooks",
+ "star": 45,
+ "commits": 52,
+ "modify_time": "2019-03-20 22:58:53",
+ "last_release": "\n 1.01\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/invoke-ir/wmievent",
+ "star": 45,
+ "commits": 9,
+ "modify_time": "2016-02-23 03:00:47",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/ilammy/ftrace-hook",
+ "star": 45,
+ "commits": 12,
+ "modify_time": "2019-02-27 21:24:56",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ikkisoft/parrotng",
+ "star": 45,
+ "commits": 3,
+ "modify_time": "2015-03-19 09:21:36",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/igororlov/trafficlight",
+ "star": 45,
+ "commits": 21,
+ "modify_time": "2014-05-25 14:19:38",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/hvqzao/report-ng",
+ "star": 45,
+ "commits": 143,
+ "modify_time": "2019-11-14 11:18:16",
+ "last_release": "report-ng-0.9.9",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hansesecure/metasploit-modules",
+ "star": 45,
+ "commits": 6,
+ "modify_time": "2018-04-30 11:45:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hammackj/uirusu",
+ "star": 45,
+ "commits": 165,
+ "modify_time": "2017-11-06 16:49:38",
+ "last_release": "\n v1.1.1\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/groupgets/purethermal1-firmware",
+ "star": 45,
+ "commits": 244,
+ "modify_time": "2019-04-05 14:48:45",
+ "last_release": "1.2.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/gradiuscypher/grids",
+ "star": 45,
+ "commits": 109,
+ "modify_time": "2018-10-01 04:36:44",
+ "last_release": "",
+ "lang": "Dockerfile"
+ },
+ {
+ "link": "https://github.com/golem445/bunny_payloads",
+ "star": 45,
+ "commits": 6,
+ "modify_time": "2018-05-24 20:36:36",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/gojek/dollhouse",
+ "star": 45,
+ "commits": 24,
+ "modify_time": "2019-10-22 10:14:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/geosn0w/ios-10.1.1-project-0-exploit-fork",
+ "star": 45,
+ "commits": 11,
+ "modify_time": "2018-04-28 11:26:57",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/gentilkiwi/basic_rpc",
+ "star": 45,
+ "commits": 5,
+ "modify_time": "2016-07-31 22:23:05",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/gannimo/maldiv",
+ "star": 45,
+ "commits": 8,
+ "modify_time": "2015-12-02 18:20:01",
+ "last_release": "",
+ "lang": "TeX"
+ },
+ {
+ "link": "https://github.com/g4lb1t/smoothcriminal",
+ "star": 45,
+ "commits": 9,
+ "modify_time": "2017-10-13 11:21:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fvrmatteo/dmnp",
+ "star": 45,
+ "commits": 1,
+ "modify_time": "2018-02-06 09:08:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/f0rb1dd3n/papers",
+ "star": 45,
+ "commits": null,
+ "modify_time": "2018-06-25 00:45:46",
+ "last_release": "",
+ "lang": "c"
+ },
+ {
+ "link": "https://github.com/evi1clay/coolpool",
+ "star": 45,
+ "commits": 42,
+ "modify_time": "2017-05-26 04:13:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/equ1nox/srop-poc",
+ "star": 45,
+ "commits": null,
+ "modify_time": "2015-08-27 08:15:07",
+ "last_release": "",
+ "lang": "python"
+ },
+ {
+ "link": "https://github.com/entynetproject/geospy",
+ "star": 45,
+ "commits": 288,
+ "modify_time": "2019-12-09 22:18:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/enferex/asrepl",
+ "star": 45,
+ "commits": 154,
+ "modify_time": "2017-04-13 19:42:59",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/syst3ma/awesome-baseband-research",
+ "star": 45,
+ "commits": 13,
+ "modify_time": "2019-03-23 20:57:11",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/diocles/apt-transport-tor",
+ "star": 45,
+ "commits": 17,
+ "modify_time": "2016-05-15 20:57:22",
+ "last_release": "v0.1.1",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/devadvance/rootcloakplus",
+ "star": 45,
+ "commits": 10,
+ "modify_time": "2014-04-25 23:31:13",
+ "last_release": "\n v1.2\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/davidstutz/password-score",
+ "star": 45,
+ "commits": 33,
+ "modify_time": "2018-05-16 18:21:46",
+ "last_release": "1.0.1",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/databricks/mlflow",
+ "star": 45,
+ "commits": 611,
+ "modify_time": "2019-04-04 20:47:11",
+ "last_release": "\n v0.9.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cyberpython/wifiscanandmap",
+ "star": 45,
+ "commits": 4,
+ "modify_time": "2013-10-13 11:12:09",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/cossacklabs/hermes-core",
+ "star": 45,
+ "commits": 410,
+ "modify_time": "2019-04-21 22:13:15",
+ "last_release": "0.5.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/codemaxx/binary-exploitation",
+ "star": 45,
+ "commits": 41,
+ "modify_time": "2017-09-23 23:04:17",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/cdhigh/forwarder",
+ "star": 45,
+ "commits": 11,
+ "modify_time": "2016-03-26 09:26:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/carlosgprado/milf",
+ "star": 45,
+ "commits": 6,
+ "modify_time": "2013-03-15 18:08:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/carloop/simulator-program",
+ "star": 45,
+ "commits": 7,
+ "modify_time": "2016-06-02 04:26:32",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/c-bata/systracer",
+ "star": 45,
+ "commits": 9,
+ "modify_time": "2018-03-27 06:09:36",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/blackint3/awesome-debugging",
+ "star": 45,
+ "commits": 11,
+ "modify_time": "2019-09-08 08:33:07",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/binaryanalysisplatform/bap-tutorial",
+ "star": 45,
+ "commits": 6,
+ "modify_time": "2019-03-30 04:57:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bbva/apicheck",
+ "star": 45,
+ "commits": 266,
+ "modify_time": "2019-11-08 09:01:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bazad/xpc-string-leak",
+ "star": 45,
+ "commits": 2,
+ "modify_time": "2018-07-10 00:05:23",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/bazad/launchd-portrep",
+ "star": 45,
+ "commits": 10,
+ "modify_time": "2018-10-28 20:22:24",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/veracode-research/actuator-testbed",
+ "star": 45,
+ "commits": 4,
+ "modify_time": "2019-02-25 22:01:06",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/anvilventures/dawgmon",
+ "star": 45,
+ "commits": 85,
+ "modify_time": "2019-11-14 14:43:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/anssi-fr/bits_parser",
+ "star": 45,
+ "commits": 3,
+ "modify_time": "2018-02-01 10:25:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/anhkgg/awesome-windbg-extensions",
+ "star": 45,
+ "commits": 3,
+ "modify_time": "2019-03-27 07:57:15",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/andreafioraldi/cve_searchsploit",
+ "star": 45,
+ "commits": 33,
+ "modify_time": "2019-11-28 06:33:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/alphaseclab/anti-debug",
+ "star": 45,
+ "commits": 3,
+ "modify_time": "2018-07-27 08:51:58",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/aencode/elf_analysis",
+ "star": 45,
+ "commits": 32,
+ "modify_time": "2019-08-18 21:38:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/0x48piraj/malwarex",
+ "star": 45,
+ "commits": 60,
+ "modify_time": "2018-06-06 10:54:20",
+ "last_release": "",
+ "lang": "Pascal"
+ },
+ {
+ "link": "https://github.com/04x/instagramcracker",
+ "star": 45,
+ "commits": 14,
+ "modify_time": "2018-07-07 20:13:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/001spartan/csfm",
+ "star": 45,
+ "commits": 29,
+ "modify_time": "2017-12-27 00:05:57",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/uxmal/nucleus",
+ "star": 44,
+ "commits": 35,
+ "modify_time": "2017-10-02 08:01:02",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/igio90/hooah-trace",
+ "star": 44,
+ "commits": 52,
+ "modify_time": "2019-07-08 02:59:55",
+ "last_release": "",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/enablesecurity/tftptheft",
+ "star": 44,
+ "commits": 19,
+ "modify_time": "2016-04-20 01:55:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/project-imas/passcode-check",
+ "star": 44,
+ "commits": 38,
+ "modify_time": "2014-10-08 17:45:14",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/nkkollaw/reserved-subdomains",
+ "star": 44,
+ "commits": 37,
+ "modify_time": "2017-12-08 09:22:30",
+ "last_release": "v0.3.1",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/twtrubiks/csrf-tutorial",
+ "star": 44,
+ "commits": 6,
+ "modify_time": "2018-03-27 03:24:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/appsecco/defcon-26-workshop-attacking-and-auditing-docker-containers",
+ "star": 44,
+ "commits": 3,
+ "modify_time": "2019-11-12 09:41:09",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/shmilylty/Nmap-Reference-Guide",
+ "star": 44,
+ "commits": 3,
+ "modify_time": "2017-04-24 16:33:11",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/NewBee119/Deceptive-document",
+ "star": 44,
+ "commits": 37,
+ "modify_time": "2017-11-30 14:44:39",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/bivainis/NG6-starter-sass",
+ "star": 44,
+ "commits": 190,
+ "modify_time": "2016-10-21 07:05:09",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/ChiefyChief/dlink_shell_poc",
+ "star": 44,
+ "commits": 13,
+ "modify_time": "2018-07-11 20:02:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://gitlab.com/expliot_framework/expliot",
+ "star": 44,
+ "commits": null,
+ "modify_time": "2019-02-13 06:08:14",
+ "last_release": "",
+ "lang": "python"
+ },
+ {
+ "link": "https://github.com/zedshaw/zadm4py",
+ "star": 44,
+ "commits": 6,
+ "modify_time": "2018-03-21 04:42:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/yinzhixin/scanner",
+ "star": 44,
+ "commits": 7,
+ "modify_time": "2017-01-29 01:46:17",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/x0day/bannerscan",
+ "star": 44,
+ "commits": 5,
+ "modify_time": "2014-07-30 09:40:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wopss/renhook",
+ "star": 44,
+ "commits": 117,
+ "modify_time": "2019-11-12 10:00:52",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/wongsyrone/transocks-wong",
+ "star": 44,
+ "commits": 96,
+ "modify_time": "2019-09-04 11:16:29",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/wizh/rop-chainer",
+ "star": 44,
+ "commits": 11,
+ "modify_time": "2018-02-09 07:18:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wenjun1055/httpguard",
+ "star": 44,
+ "commits": 47,
+ "modify_time": "2014-10-03 02:56:00",
+ "last_release": "",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/vtky/resign",
+ "star": 44,
+ "commits": 8,
+ "modify_time": "2016-12-10 14:33:44",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/vincentbernat/ssl-dos",
+ "star": 44,
+ "commits": 31,
+ "modify_time": "2014-09-23 09:43:05",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/tribalchicken/volatility-filevault2",
+ "star": 44,
+ "commits": 9,
+ "modify_time": "2016-09-30 03:42:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tkyu/shadowsocks-csharp-mod",
+ "star": 44,
+ "commits": 431,
+ "modify_time": "2017-06-28 14:29:14",
+ "last_release": "0.0.1",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/thomasthelen/ollydbg-scripts",
+ "star": 44,
+ "commits": 8,
+ "modify_time": "2019-06-13 20:50:37",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/theori-io/jscript9-typedarray",
+ "star": 44,
+ "commits": 2,
+ "modify_time": "2016-06-27 23:43:12",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/tengzhangchao/pyshell",
+ "star": 44,
+ "commits": 16,
+ "modify_time": "2019-06-12 05:58:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/stamparm/blackbook",
+ "star": 44,
+ "commits": 1142,
+ "modify_time": "2019-12-10 02:06:02",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/sslab-gatech/perf-fuzz",
+ "star": 44,
+ "commits": 5,
+ "modify_time": "2019-04-02 19:58:23",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/sinakarvandi/windbg2ida",
+ "star": 44,
+ "commits": 27,
+ "modify_time": "2019-08-31 17:28:59",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/shotokanzh/pa-th-zuzu",
+ "star": 44,
+ "commits": 64,
+ "modify_time": "2016-09-27 12:48:28",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/serain/kubelet-anon-rce",
+ "star": 44,
+ "commits": 9,
+ "modify_time": "2019-01-14 10:49:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sensepost/wsproxy",
+ "star": 44,
+ "commits": 34,
+ "modify_time": "2017-07-19 16:28:25",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/securitytube/pcap2xml",
+ "star": 44,
+ "commits": 3,
+ "modify_time": "2015-03-17 09:13:17",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/security-onion-solutions/securityonion-saltstack",
+ "star": 44,
+ "commits": 1513,
+ "modify_time": "2019-10-11 13:28:59",
+ "last_release": "1.0.4",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/scy-phy/scapy-cip-enip",
+ "star": 44,
+ "commits": 14,
+ "modify_time": "2016-01-20 05:22:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/scwuaptx/peda",
+ "star": 44,
+ "commits": 170,
+ "modify_time": "2019-11-16 08:58:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sanix-darker/brute-force-login",
+ "star": 44,
+ "commits": 30,
+ "modify_time": "2019-11-23 02:05:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/samdmarshall/machodiff",
+ "star": 44,
+ "commits": 100,
+ "modify_time": "2015-07-16 00:32:28",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/rpaleari/qtrace",
+ "star": 44,
+ "commits": 9,
+ "modify_time": "2015-01-03 23:29:04",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/riverloopsec/apimote",
+ "star": 44,
+ "commits": 8,
+ "modify_time": "2014-06-01 17:50:27",
+ "last_release": "",
+ "lang": "IDL"
+ },
+ {
+ "link": "https://github.com/puuoi/ss-r-4in1",
+ "star": 44,
+ "commits": 7,
+ "modify_time": "2018-09-23 11:07:21",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/pupi1985/marfil",
+ "star": 44,
+ "commits": 62,
+ "modify_time": "2016-04-17 22:46:13",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/pstolarz/dumpext",
+ "star": 44,
+ "commits": 14,
+ "modify_time": "2016-06-28 10:52:16",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/portswigger/json-web-token-attacker",
+ "star": 44,
+ "commits": 230,
+ "modify_time": "2019-02-08 15:15:17",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/philsmd/itunes_backup2hashcat",
+ "star": 44,
+ "commits": 15,
+ "modify_time": "2017-02-04 08:22:16",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/petabi/sniffles",
+ "star": 44,
+ "commits": 469,
+ "modify_time": "2018-11-06 01:04:51",
+ "last_release": "\n 3.4.3\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/pentestgeek/burpcommander",
+ "star": 44,
+ "commits": 18,
+ "modify_time": "2018-09-18 01:01:05",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/pcchou/ctf-writeups",
+ "star": 44,
+ "commits": 26,
+ "modify_time": "2016-08-28 11:16:49",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/opencryptoproject/jcmathlib",
+ "star": 44,
+ "commits": 62,
+ "modify_time": "2019-08-03 21:15:11",
+ "last_release": "v1.0.1",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/olipratt/swagger-conformance",
+ "star": 44,
+ "commits": 179,
+ "modify_time": "2018-06-27 21:33:52",
+ "last_release": "0.2.5",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/oguzy/ovizart",
+ "star": 44,
+ "commits": 520,
+ "modify_time": "2013-04-22 08:13:02",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/nullbites/snakeeater",
+ "star": 44,
+ "commits": 6,
+ "modify_time": "2018-02-26 17:08:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ntraiseharderror/anti-delete",
+ "star": 44,
+ "commits": 3,
+ "modify_time": "2018-07-16 15:17:52",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/nozominetworks/tricotools",
+ "star": 44,
+ "commits": 15,
+ "modify_time": "2019-01-21 09:34:00",
+ "last_release": "",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/nicholasjackson/cnitch",
+ "star": 44,
+ "commits": 27,
+ "modify_time": "2017-09-04 11:50:59",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/mythicmaniac/keyboard-minigames",
+ "star": 44,
+ "commits": 14,
+ "modify_time": "2017-09-02 21:18:00",
+ "last_release": "1.0.3",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/mueller-ma/block-ads-via-dns",
+ "star": 44,
+ "commits": 15,
+ "modify_time": "2017-04-26 15:33:33",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/mrluanma/shadowsocks-websocket-python",
+ "star": 44,
+ "commits": 23,
+ "modify_time": "2019-08-23 14:53:41",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/misp/misp-stix-converter",
+ "star": 44,
+ "commits": 163,
+ "modify_time": "2019-02-12 17:30:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/milo2012/nmap2nessus",
+ "star": 44,
+ "commits": 27,
+ "modify_time": "2017-09-28 05:12:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/metricsgrimoire/cmetrics",
+ "star": 44,
+ "commits": 39,
+ "modify_time": "2012-07-16 07:37:24",
+ "last_release": "\n 0.2\n ",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/mattifestation/bcd",
+ "star": 44,
+ "commits": 7,
+ "modify_time": "2019-01-25 13:23:39",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/leveryd/vulndocker",
+ "star": 44,
+ "commits": 24,
+ "modify_time": "2019-11-07 10:02:46",
+ "last_release": "",
+ "lang": "TSQL"
+ },
+ {
+ "link": "https://github.com/lazywinadmin/winformps",
+ "star": 44,
+ "commits": 61,
+ "modify_time": "2016-08-20 02:25:33",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/laincode/shodan-seeker",
+ "star": 44,
+ "commits": 16,
+ "modify_time": "2019-08-09 07:48:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kudelskisecurity/sgx-reencrypt",
+ "star": 44,
+ "commits": 15,
+ "modify_time": "2016-08-25 13:17:08",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/kudelskisecurity/eddsa-fault-attack",
+ "star": 44,
+ "commits": 4,
+ "modify_time": "2017-10-05 07:21:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/junxzm1990/pomp",
+ "star": 44,
+ "commits": 14,
+ "modify_time": "2019-06-13 22:15:00",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jnqpblc/sharptask",
+ "star": 44,
+ "commits": 13,
+ "modify_time": "2019-07-05 05:16:58",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/jenkinsci/zap-plugin",
+ "star": 44,
+ "commits": 55,
+ "modify_time": "2019-11-12 12:44:31",
+ "last_release": "zap-1.1.0",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/jbremer/pyasm2",
+ "star": 44,
+ "commits": 107,
+ "modify_time": "2016-11-01 04:31:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/j-0-t/staekka",
+ "star": 44,
+ "commits": 9,
+ "modify_time": "2017-07-07 16:49:35",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/ironcorelabs/recrypt-rs",
+ "star": 44,
+ "commits": 69,
+ "modify_time": "2019-12-04 21:35:18",
+ "last_release": "\n 0.9.0\n ",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/im0qianqian/codeforceseduhacking",
+ "star": 44,
+ "commits": 47,
+ "modify_time": "2019-04-29 10:12:19",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/illusivenetworks-labs/historicprocesstree",
+ "star": 44,
+ "commits": 3,
+ "modify_time": "2018-01-30 15:40:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ikoz/jdwp-lib-injector",
+ "star": 44,
+ "commits": 18,
+ "modify_time": "2017-07-09 14:13:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/httparchive/bigquery",
+ "star": 44,
+ "commits": 110,
+ "modify_time": "2019-07-18 19:59:56",
+ "last_release": "",
+ "lang": "Jupyter Notebook"
+ },
+ {
+ "link": "https://github.com/harmj0y/encryptedstore",
+ "star": 44,
+ "commits": 1,
+ "modify_time": "2016-09-01 00:01:10",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/hackerdom/checksystem",
+ "star": 44,
+ "commits": 513,
+ "modify_time": "2019-11-22 20:21:40",
+ "last_release": "v2.0.0",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/grayddq/pubilcassetinfo",
+ "star": 44,
+ "commits": 11,
+ "modify_time": "2017-12-15 02:27:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/githacktools/ftpbruter",
+ "star": 44,
+ "commits": 13,
+ "modify_time": "2019-04-28 14:23:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/giovanifss/dumb",
+ "star": 44,
+ "commits": 12,
+ "modify_time": "2018-03-07 16:48:48",
+ "last_release": "",
+ "lang": "Haskell"
+ },
+ {
+ "link": "https://github.com/fsiamp/rhapis",
+ "star": 44,
+ "commits": 66,
+ "modify_time": "2019-08-14 12:19:04",
+ "last_release": "",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/fnord0/hurl",
+ "star": 44,
+ "commits": 20,
+ "modify_time": "2012-07-17 11:25:39",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/firmadyne/scraper",
+ "star": 44,
+ "commits": 13,
+ "modify_time": "2019-06-05 10:34:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fail0verflow/switch-u-boot",
+ "star": 44,
+ "commits": 47681,
+ "modify_time": "2018-02-12 07:42:02",
+ "last_release": "\n v2018.05-rc2\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/erpscanteam/cve-2018-2380",
+ "star": 44,
+ "commits": 6,
+ "modify_time": "2018-03-14 12:13:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/entynetproject/arissploit",
+ "star": 44,
+ "commits": 692,
+ "modify_time": "2019-12-09 17:33:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/enkomio/rundotnetdll",
+ "star": 44,
+ "commits": 9,
+ "modify_time": "2018-07-18 12:42:29",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/ecx86/shellcode_encoder",
+ "star": 44,
+ "commits": 7,
+ "modify_time": "2018-10-01 03:33:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dsopas/h1-search",
+ "star": 44,
+ "commits": 13,
+ "modify_time": "2019-02-26 13:09:52",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/dev-sec/ssl-baseline",
+ "star": 44,
+ "commits": 48,
+ "modify_time": "2019-05-16 07:08:41",
+ "last_release": "\n 1.4.0\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/depthsecurity/haveibeenharvested",
+ "star": 44,
+ "commits": 19,
+ "modify_time": "2018-01-09 16:23:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/darkkey/erlamsa",
+ "star": 44,
+ "commits": 235,
+ "modify_time": "2019-06-09 12:00:39",
+ "last_release": "",
+ "lang": "Erlang"
+ },
+ {
+ "link": "https://github.com/danse-macabre/ida-efitools",
+ "star": 44,
+ "commits": 48,
+ "modify_time": "2015-07-13 14:20:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/coolervoid/vision2",
+ "star": 44,
+ "commits": 13,
+ "modify_time": "2017-09-11 02:52:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/contrast-security-oss/djangoat",
+ "star": 44,
+ "commits": 819,
+ "modify_time": "2019-06-06 15:17:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/coltonon/reghookex",
+ "star": 44,
+ "commits": 51,
+ "modify_time": "2018-11-01 07:19:14",
+ "last_release": "3",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ccied/ugforum-analysis",
+ "star": 44,
+ "commits": 17,
+ "modify_time": "2019-01-08 14:13:35",
+ "last_release": "",
+ "lang": "Scala"
+ },
+ {
+ "link": "https://github.com/bugbountyresources/resources",
+ "star": 44,
+ "commits": 12,
+ "modify_time": "2018-12-06 13:53:40",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/brangerbriz/wifi-data-safari",
+ "star": 44,
+ "commits": 152,
+ "modify_time": "2018-07-31 19:31:29",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/bitthebyte/bitblinder",
+ "star": 44,
+ "commits": 11,
+ "modify_time": "2019-06-19 23:33:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bieberg0n/bjdns",
+ "star": 44,
+ "commits": 145,
+ "modify_time": "2019-08-29 09:14:06",
+ "last_release": "bjdns2-client-win-181014",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/azure/health-data-and-ai-blueprint",
+ "star": 44,
+ "commits": 123,
+ "modify_time": "2019-11-07 16:18:46",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/attackdebris/babel-sf",
+ "star": 44,
+ "commits": 141,
+ "modify_time": "2017-07-26 20:16:38",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/armanshan12/rkms",
+ "star": 44,
+ "commits": 44,
+ "modify_time": "2019-01-04 19:37:40",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/andychiare/netcore2-reverse-proxy",
+ "star": 44,
+ "commits": 2,
+ "modify_time": "2019-01-10 22:00:23",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/andrew-morris/kippo_detect",
+ "star": 44,
+ "commits": 2,
+ "modify_time": "2014-12-10 08:32:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ambionics/prestashop-exploits",
+ "star": 44,
+ "commits": 3,
+ "modify_time": "2018-07-17 09:02:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/amarkulo/openpasswordfilter",
+ "star": 44,
+ "commits": 32,
+ "modify_time": "2017-10-12 08:38:36",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/allyshka/vhostbrute",
+ "star": 44,
+ "commits": 7,
+ "modify_time": "2016-10-14 19:51:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/akayn/resources",
+ "star": 44,
+ "commits": null,
+ "modify_time": "2018-08-29 20:30:56",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/aikinogard/5th_place_solution_facebook_check_ins",
+ "star": 44,
+ "commits": 6,
+ "modify_time": "2016-07-08 21:29:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/aerosoul94/dynlib",
+ "star": 44,
+ "commits": 1,
+ "modify_time": "2017-12-16 22:22:17",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/advanced-threat-research/iocs",
+ "star": 44,
+ "commits": 63,
+ "modify_time": "2019-10-08 09:12:33",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/adrecon/adrecon",
+ "star": 44,
+ "commits": 80,
+ "modify_time": "2019-06-29 06:29:27",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/adguardteam/stealthmode",
+ "star": 44,
+ "commits": 31,
+ "modify_time": "2019-03-18 09:28:30",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/649/memfixed-mitigation-tool",
+ "star": 44,
+ "commits": 5,
+ "modify_time": "2018-03-21 23:09:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/649/apache-struts-shodan-exploit",
+ "star": 44,
+ "commits": 7,
+ "modify_time": "2018-08-30 00:15:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/5alt/emu",
+ "star": 44,
+ "commits": 6,
+ "modify_time": "2018-04-23 03:28:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/4k-developer/4k-botnet",
+ "star": 44,
+ "commits": 32,
+ "modify_time": "2018-08-16 16:47:51",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/3gstudent/windows-user-clone",
+ "star": 44,
+ "commits": 3,
+ "modify_time": "2017-11-09 10:05:23",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/3gstudent/dump-clear-password-after-kb2871997-installed",
+ "star": 44,
+ "commits": 14,
+ "modify_time": "2017-07-18 00:50:59",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/0x4d31/honeyku",
+ "star": 44,
+ "commits": 6,
+ "modify_time": "2019-04-24 01:35:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/grcasanova/badusb",
+ "star": 43,
+ "commits": 10,
+ "modify_time": "2018-10-25 11:26:48",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/jseidl/torblock",
+ "star": 43,
+ "commits": 7,
+ "modify_time": "2012-06-16 20:53:01",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/hellman/shtest",
+ "star": 43,
+ "commits": 8,
+ "modify_time": "2012-02-24 11:44:08",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/s0md3v/locky",
+ "star": 43,
+ "commits": 5,
+ "modify_time": "2019-05-05 15:49:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rocky/python-decompile3",
+ "star": 43,
+ "commits": 2358,
+ "modify_time": "2019-12-09 23:23:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/madeye/obfs4-tunnel",
+ "star": 43,
+ "commits": 6,
+ "modify_time": "2016-07-29 00:38:51",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/pwnlandia/mhn-splunk",
+ "star": 43,
+ "commits": 11,
+ "modify_time": "2019-09-30 23:21:07",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/warner/python-spake2",
+ "star": 43,
+ "commits": 140,
+ "modify_time": "2018-02-19 01:55:38",
+ "last_release": "\n v0.8\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nsacyber/http-connectivity-tester",
+ "star": 43,
+ "commits": 118,
+ "modify_time": "2019-03-21 01:23:03",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/p0cl4bs/shellcodes",
+ "star": 43,
+ "commits": 21,
+ "modify_time": "2017-07-20 18:52:01",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/tylerha97/findevil",
+ "star": 43,
+ "commits": 1,
+ "modify_time": "2017-02-24 01:56:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/thelinuxchoice/phurious",
+ "star": 43,
+ "commits": 3,
+ "modify_time": "2019-02-17 14:20:12",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/decalage2/balbuzard",
+ "star": 43,
+ "commits": 75,
+ "modify_time": "2019-06-17 07:21:06",
+ "last_release": "",
+ "lang": "YARA"
+ },
+ {
+ "link": "https://github.com/jmagnusson/bgtunnel",
+ "star": 43,
+ "commits": 65,
+ "modify_time": "2019-04-30 11:20:05",
+ "last_release": "\n 0.3.8\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/johnsonjason/RVDbg",
+ "star": 43,
+ "commits": 148,
+ "modify_time": "2018-11-07 17:30:10",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/rmax/scrapydo",
+ "star": 43,
+ "commits": 21,
+ "modify_time": "2017-02-24 03:16:08",
+ "last_release": "\n v0.2.2\n ",
+ "lang": "Jupyter Notebook"
+ },
+ {
+ "link": "https://github.com/praetorian-code/hashcatJS",
+ "star": 43,
+ "commits": 18,
+ "modify_time": "2016-02-26 14:57:57",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/nVisium/grails-nV",
+ "star": 43,
+ "commits": 151,
+ "modify_time": "2015-06-12 18:12:36",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/SecarmaLabs/dns-parallel-prober",
+ "star": 43,
+ "commits": 48,
+ "modify_time": "2017-10-04 12:49:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zer0mem/showmeyourgongfu",
+ "star": 43,
+ "commits": 22,
+ "modify_time": "2013-08-27 10:44:45",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/zacbrown/hiddentreasure-etw-demo",
+ "star": 43,
+ "commits": 23,
+ "modify_time": "2017-11-04 19:47:28",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/yelp/mycroft",
+ "star": 43,
+ "commits": 6,
+ "modify_time": "2015-05-07 23:29:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/yeahwu/google-ip-range",
+ "star": 43,
+ "commits": 5,
+ "modify_time": "2016-06-05 10:07:28",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/xyntax/drystan",
+ "star": 43,
+ "commits": 17,
+ "modify_time": "2016-07-07 22:28:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xpn/blockchainc2",
+ "star": 43,
+ "commits": 1,
+ "modify_time": "2019-01-02 11:29:51",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/xme/mime2vt",
+ "star": 43,
+ "commits": 28,
+ "modify_time": "2016-03-11 21:03:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xazlsec/pentest-project-lists",
+ "star": 43,
+ "commits": 3,
+ "modify_time": "2018-03-01 08:34:16",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/x64dbg/yarasigs",
+ "star": 43,
+ "commits": 72,
+ "modify_time": "2019-05-22 19:51:28",
+ "last_release": "",
+ "lang": "YARA"
+ },
+ {
+ "link": "https://github.com/williballenthin/python-ntfs",
+ "star": 43,
+ "commits": 173,
+ "modify_time": "2017-09-04 16:07:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/whitfin/s3-meta",
+ "star": 43,
+ "commits": 31,
+ "modify_time": "2019-11-08 00:02:29",
+ "last_release": "v1.0.1",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/whitewinterwolf/wwwolf-php-webshell",
+ "star": 43,
+ "commits": 5,
+ "modify_time": "2017-12-02 21:47:42",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/wh1t3rh1n0/pentest-scripts",
+ "star": 43,
+ "commits": 106,
+ "modify_time": "2018-03-22 15:53:57",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/wallarm/libdetection",
+ "star": 43,
+ "commits": 288,
+ "modify_time": "2019-11-27 06:42:46",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/w1nds/dll2shellcode",
+ "star": 43,
+ "commits": 7,
+ "modify_time": "2019-07-30 01:25:23",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/userr00t/universalunityhooks",
+ "star": 43,
+ "commits": 101,
+ "modify_time": "2019-08-05 17:44:33",
+ "last_release": "v.2.1.3",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/urcuqui/whitehat",
+ "star": 43,
+ "commits": 304,
+ "modify_time": "2019-09-27 19:21:24",
+ "last_release": "",
+ "lang": "Jupyter Notebook"
+ },
+ {
+ "link": "https://github.com/unkl4b/gitbackdorizer",
+ "star": 43,
+ "commits": 18,
+ "modify_time": "2018-05-15 14:35:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/technikempire/httpfilteringengine",
+ "star": 43,
+ "commits": 111,
+ "modify_time": "2017-11-11 00:21:02",
+ "last_release": "2.0.2",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/teal33t/poopak",
+ "star": 43,
+ "commits": 96,
+ "modify_time": "2019-10-13 20:39:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tea-deliverers/ctf-writeups",
+ "star": 43,
+ "commits": 3,
+ "modify_time": "2019-04-22 06:30:31",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/tbgsecurity/weaponize_splunk",
+ "star": 43,
+ "commits": 39,
+ "modify_time": "2018-10-18 15:03:03",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/t3kn1cs/infosec-rss-feeds",
+ "star": 43,
+ "commits": 4,
+ "modify_time": "2015-07-13 17:45:51",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/supernothing/sergio-proxy",
+ "star": 43,
+ "commits": 20,
+ "modify_time": "2011-09-29 13:39:29",
+ "last_release": "\n REL-0.2.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/strazzere/idant-wanna",
+ "star": 43,
+ "commits": 6,
+ "modify_time": "2016-03-23 05:54:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/stayliv3/embedded-device-lab",
+ "star": 43,
+ "commits": 7,
+ "modify_time": "2018-02-06 06:40:24",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/souhailhammou/drivers",
+ "star": 43,
+ "commits": 27,
+ "modify_time": "2019-04-06 18:24:13",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/sketchymoose/totalrecall",
+ "star": 43,
+ "commits": 5,
+ "modify_time": "2013-09-24 15:49:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/simonwunderlich/fft_eval",
+ "star": 43,
+ "commits": 75,
+ "modify_time": "2019-11-27 10:33:10",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/shipcod3/irc-bot-hunters",
+ "star": 43,
+ "commits": 68,
+ "modify_time": "2018-04-06 17:58:44",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/sh1nu11bi/routerhunter-2.0",
+ "star": 43,
+ "commits": 14,
+ "modify_time": "2015-11-19 18:50:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sekoialab/binaryinjectionmitigation",
+ "star": 43,
+ "commits": 4,
+ "modify_time": "2016-01-04 10:50:59",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/secdec/xssmap",
+ "star": 43,
+ "commits": 1,
+ "modify_time": "2017-12-12 21:46:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/savio-code/hexorbase",
+ "star": 43,
+ "commits": 23,
+ "modify_time": "2017-09-07 19:55:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/robertbaruch/polychip",
+ "star": 43,
+ "commits": 22,
+ "modify_time": "2018-04-22 19:01:59",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/revng/orchestra",
+ "star": 43,
+ "commits": 95,
+ "modify_time": "2019-02-14 09:50:59",
+ "last_release": "",
+ "lang": "Makefile"
+ },
+ {
+ "link": "https://github.com/rbaron/fitless",
+ "star": 43,
+ "commits": 13,
+ "modify_time": "2018-05-27 17:21:11",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/rapid7/dllhijackauditkit",
+ "star": 43,
+ "commits": 3,
+ "modify_time": "2014-10-16 20:02:14",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/ramadhanamizudin/python-icap-yara",
+ "star": 43,
+ "commits": 10,
+ "modify_time": "2017-02-24 08:00:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/philcryer/wpa2own",
+ "star": 43,
+ "commits": 36,
+ "modify_time": "2018-08-18 18:08:45",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/pentestmonkey/timing-attack-checker",
+ "star": 43,
+ "commits": 5,
+ "modify_time": "2011-09-04 17:26:03",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/partoftheworld/ghidrapy_functionstringassociate",
+ "star": 43,
+ "commits": 11,
+ "modify_time": "2019-09-20 21:10:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ocmdev/rita",
+ "star": 43,
+ "commits": 418,
+ "modify_time": "2018-01-27 02:27:20",
+ "last_release": "\n v1.0.0-beta\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/nyan-x-cat/lime-downloader",
+ "star": 43,
+ "commits": 12,
+ "modify_time": "2019-05-12 13:13:20",
+ "last_release": "v0.4.2",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/noahhhryan/krackattacks-test",
+ "star": 43,
+ "commits": 11430,
+ "modify_time": "2017-11-08 04:16:03",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/nirizr/pytest-idapro",
+ "star": 43,
+ "commits": 63,
+ "modify_time": "2018-11-03 01:10:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nikshepsvn/scatterfly",
+ "star": 43,
+ "commits": 85,
+ "modify_time": "2018-02-07 05:10:13",
+ "last_release": "0.06",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/netspi/heapdump-ios",
+ "star": 43,
+ "commits": 7,
+ "modify_time": "2015-01-07 19:15:00",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/neo23x0/imphash-generator",
+ "star": 43,
+ "commits": 2,
+ "modify_time": "2017-07-17 14:00:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nccgroup/royal_apt",
+ "star": 43,
+ "commits": 13,
+ "modify_time": "2018-03-16 10:12:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nalen98/ebpf-for-ghidra",
+ "star": 43,
+ "commits": 29,
+ "modify_time": "2019-09-23 14:20:51",
+ "last_release": "0.2.0+ghidra-9.0.4",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/n30m1nd/linux_heap_exploitation_intro_series",
+ "star": 43,
+ "commits": 16,
+ "modify_time": "2018-06-15 22:03:00",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/mubix/pykek",
+ "star": 43,
+ "commits": 11,
+ "modify_time": "2014-12-05 06:25:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mthbernardes/ipchecker",
+ "star": 43,
+ "commits": 14,
+ "modify_time": "2018-03-06 03:39:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mrowensnobody/presentation",
+ "star": 43,
+ "commits": 7,
+ "modify_time": "2018-08-30 20:25:18",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/mrgeffitas/sandbox_tester",
+ "star": 43,
+ "commits": 16,
+ "modify_time": "2017-04-06 12:46:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mixkorshun/django-antispam",
+ "star": 43,
+ "commits": 68,
+ "modify_time": "2018-03-22 13:39:48",
+ "last_release": "v1.0.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/misp/misp-taxii-server",
+ "star": 43,
+ "commits": 127,
+ "modify_time": "2019-04-02 09:36:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/miracle963/zjdroid",
+ "star": 43,
+ "commits": 2,
+ "modify_time": "2016-09-08 08:02:59",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/maxieds/chameleonminilivedebugger",
+ "star": 43,
+ "commits": 179,
+ "modify_time": "2019-08-07 20:20:42",
+ "last_release": "0.6.0-free",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/maldiohead/idapin",
+ "star": 43,
+ "commits": 3,
+ "modify_time": "2016-12-15 16:46:58",
+ "last_release": "",
+ "lang": "Batchfile"
+ },
+ {
+ "link": "https://github.com/m301/rdroid",
+ "star": 43,
+ "commits": 13,
+ "modify_time": "2018-04-27 02:35:33",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/lucifer1993/lasercrack",
+ "star": 43,
+ "commits": 3,
+ "modify_time": "2018-07-04 05:29:31",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/konstantin8105/ddos",
+ "star": 43,
+ "commits": 8,
+ "modify_time": "2019-02-17 12:16:45",
+ "last_release": "v2.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/kavishgr/xmlrpc-bruteforcer",
+ "star": 43,
+ "commits": 33,
+ "modify_time": "2019-11-02 10:22:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kacos2000/win10",
+ "star": 43,
+ "commits": 557,
+ "modify_time": "2019-11-24 21:51:50",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/jschicht/usnjrnl2csv",
+ "star": 43,
+ "commits": 28,
+ "modify_time": "2019-07-06 15:03:46",
+ "last_release": "",
+ "lang": "AutoIt"
+ },
+ {
+ "link": "https://github.com/jacobmisirian/dbltekgoippwn",
+ "star": 43,
+ "commits": 12,
+ "modify_time": "2017-03-28 21:35:47",
+ "last_release": "0.1.1",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/issue-db/issue-db",
+ "star": 43,
+ "commits": 8,
+ "modify_time": "2018-03-30 22:22:24",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/iricartb/buffer-overflow-vulnerability-services-tester-tool",
+ "star": 43,
+ "commits": 61,
+ "modify_time": "2017-10-20 11:46:02",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/intoli/slice",
+ "star": 43,
+ "commits": 108,
+ "modify_time": "2018-06-26 13:51:24",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/infosecn1nja/ycsm",
+ "star": 43,
+ "commits": 33,
+ "modify_time": "2019-07-02 07:32:51",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/ihaveamac/switchfs",
+ "star": 43,
+ "commits": 51,
+ "modify_time": "2019-04-18 02:44:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hillsbird/db_security",
+ "star": 43,
+ "commits": 4,
+ "modify_time": "2018-10-31 03:53:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hewlettpackard/reconbf",
+ "star": 43,
+ "commits": 301,
+ "modify_time": "2016-09-09 13:34:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/heptiolabs/ironclad",
+ "star": 43,
+ "commits": 1,
+ "modify_time": "2018-05-17 15:06:47",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/hamza-megahed/ctfs",
+ "star": 43,
+ "commits": 32,
+ "modify_time": "2017-05-22 14:56:18",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/gregversteeg/gaussianize",
+ "star": 43,
+ "commits": 10,
+ "modify_time": "2018-03-28 16:17:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/grayddq/passiveseccheck",
+ "star": 43,
+ "commits": 11,
+ "modify_time": "2017-12-26 08:43:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/giantbranch/gray-hat-python-src",
+ "star": 43,
+ "commits": 15,
+ "modify_time": "2019-08-28 03:27:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gcwnow/linux",
+ "star": 43,
+ "commits": 635722,
+ "modify_time": "2018-06-27 21:09:08",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/fygrave/honeyntp",
+ "star": 43,
+ "commits": 3,
+ "modify_time": "2014-03-27 07:20:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ethvpn/code",
+ "star": 43,
+ "commits": 21,
+ "modify_time": "2017-06-24 19:02:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/emoose/xvdtool",
+ "star": 43,
+ "commits": 147,
+ "modify_time": "2019-10-03 14:21:36",
+ "last_release": "v0.51",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/eboda/35c3",
+ "star": 43,
+ "commits": 3,
+ "modify_time": "2018-12-31 10:10:50",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/dominikstyp/auto-reaver",
+ "star": 43,
+ "commits": 73,
+ "modify_time": "2016-10-20 04:03:42",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/davidaq/vodo",
+ "star": 43,
+ "commits": 135,
+ "modify_time": "2018-03-27 07:43:55",
+ "last_release": "1.0.3",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/cmu-sei/cyobstract",
+ "star": 43,
+ "commits": 7,
+ "modify_time": "2018-08-30 15:44:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/chriswmorris/metaforge",
+ "star": 43,
+ "commits": 115,
+ "modify_time": "2019-03-18 11:22:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/christhecoolhut/easy-pickings",
+ "star": 43,
+ "commits": 2,
+ "modify_time": "2018-09-09 01:54:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/chrismaddalena/fox",
+ "star": 43,
+ "commits": 3,
+ "modify_time": "2018-06-26 02:12:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bulentrahimkazanci/windbg-cheat-sheet",
+ "star": 43,
+ "commits": 21,
+ "modify_time": "2018-11-30 12:50:45",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/bsdphk/pyreveng",
+ "star": 43,
+ "commits": 268,
+ "modify_time": "2019-11-11 17:18:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/brianwrf/roothelper",
+ "star": 43,
+ "commits": 37,
+ "modify_time": "2016-01-25 14:20:38",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/br3akp0int/gqlparser",
+ "star": 43,
+ "commits": 18,
+ "modify_time": "2018-10-31 12:18:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/borjamerino/tlsinjector",
+ "star": 43,
+ "commits": 2,
+ "modify_time": "2015-06-22 09:11:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bonsaiviking/tarpyt",
+ "star": 43,
+ "commits": 17,
+ "modify_time": "2012-10-19 22:09:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bendrucker/hapi-require-https",
+ "star": 43,
+ "commits": 69,
+ "modify_time": "2019-08-28 00:47:15",
+ "last_release": "\n v4.0.0\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/bayotop/sink-logger",
+ "star": 43,
+ "commits": 19,
+ "modify_time": "2018-12-27 18:36:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bartblaze/matire",
+ "star": 43,
+ "commits": 7,
+ "modify_time": "2018-02-16 22:20:19",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/auth0/auth0-drupal",
+ "star": 43,
+ "commits": 258,
+ "modify_time": "2019-10-26 00:01:45",
+ "last_release": "8.x-2.3",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/auth0-blog/aliens-go-home-part-1",
+ "star": 43,
+ "commits": 17,
+ "modify_time": "2018-02-15 18:16:42",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/ascendr/spectre-chrome",
+ "star": 43,
+ "commits": 10,
+ "modify_time": "2018-01-18 18:12:57",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/andreybazhan/dbgext",
+ "star": 43,
+ "commits": 9,
+ "modify_time": "2016-11-14 10:02:23",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/alphadelta/dumb",
+ "star": 43,
+ "commits": 14,
+ "modify_time": "2015-08-24 09:08:29",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/abrignoni/dfir-sql-query-repo",
+ "star": 43,
+ "commits": 215,
+ "modify_time": "2019-09-15 03:32:34",
+ "last_release": "",
+ "lang": "TSQL"
+ },
+ {
+ "link": "https://github.com/1an0rmus/yara",
+ "star": 43,
+ "commits": 7,
+ "modify_time": "2014-01-16 23:20:03",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/uknowsec/sharpcheckinfo",
+ "star": 42,
+ "commits": 14,
+ "modify_time": "2019-10-30 08:36:19",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/arnaucube/flock-botnet",
+ "star": 42,
+ "commits": 12,
+ "modify_time": "2018-10-07 14:47:06",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/dsasmblr/cheat-engine",
+ "star": 42,
+ "commits": 27,
+ "modify_time": "2019-10-25 21:19:06",
+ "last_release": "",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/ricterz/my-nse-scripts",
+ "star": 42,
+ "commits": 17,
+ "modify_time": "2019-08-03 09:19:52",
+ "last_release": "",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/fireeye/synfulknock",
+ "star": 42,
+ "commits": 16,
+ "modify_time": "2015-09-28 12:09:20",
+ "last_release": "",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/undeadsec/checkurl",
+ "star": 42,
+ "commits": 10,
+ "modify_time": "2018-01-24 15:28:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pagekite/pysocksipychain",
+ "star": 42,
+ "commits": 117,
+ "modify_time": "2019-11-25 17:57:36",
+ "last_release": "v2.1.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wireghoul/sploit-dev",
+ "star": 42,
+ "commits": 111,
+ "modify_time": "2019-11-08 23:00:15",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/v2ray/experiments",
+ "star": 42,
+ "commits": 44,
+ "modify_time": "2017-02-05 13:44:40",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/javascript-obfuscator/react-native-obfuscating-transformer",
+ "star": 42,
+ "commits": 22,
+ "modify_time": "2019-02-28 12:20:21",
+ "last_release": "",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/k8gege/porttran",
+ "star": 42,
+ "commits": 15,
+ "modify_time": "2019-10-10 03:29:07",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/t3hp0rp/hitcondockerfile",
+ "star": 42,
+ "commits": 120,
+ "modify_time": "2018-11-03 01:51:42",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/mohitkhemchandani/oscp_bible",
+ "star": 42,
+ "commits": 15,
+ "modify_time": "2019-10-30 18:52:39",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/kungfu-pro/kungfu-pro-issues",
+ "star": 42,
+ "commits": 18,
+ "modify_time": "2019-05-20 06:16:37",
+ "last_release": "v0.1.6",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/t7hm1/pyddos",
+ "star": 42,
+ "commits": 31,
+ "modify_time": "2018-06-05 12:32:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kryptoslogic/rdppot",
+ "star": 42,
+ "commits": 2,
+ "modify_time": "2019-06-06 11:05:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/3xploit-db/pentest-tools-framework",
+ "star": 42,
+ "commits": 177,
+ "modify_time": "2019-12-10 08:01:05",
+ "last_release": "v.2.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/3gstudent/Windows-EventLog-Bypass",
+ "star": 42,
+ "commits": 17,
+ "modify_time": "2018-08-06 00:07:02",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/bytecode77/slui-file-handler-hijack-privilege-escalation",
+ "star": 42,
+ "commits": 10,
+ "modify_time": "2019-02-27 20:41:18",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/lifting-bits/klee",
+ "star": 42,
+ "commits": 2175,
+ "modify_time": "2019-10-06 03:18:52",
+ "last_release": "\n v1.4.0\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/klsecservices/ios_mips_gdb",
+ "star": 42,
+ "commits": 2,
+ "modify_time": "2018-01-19 18:38:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/miss-d/blindy",
+ "star": 42,
+ "commits": 12,
+ "modify_time": "2017-07-16 13:20:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zhangboyang/pal3patch",
+ "star": 42,
+ "commits": 190,
+ "modify_time": "2019-11-09 10:02:12",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/z4ziggy/zigfrid",
+ "star": 42,
+ "commits": 2,
+ "modify_time": "2017-07-21 23:03:57",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/yosqueoy/ditsnap",
+ "star": 42,
+ "commits": 79,
+ "modify_time": "2017-04-01 07:59:34",
+ "last_release": "1.4.3.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/xisigr/paper",
+ "star": 42,
+ "commits": 5,
+ "modify_time": "2019-02-15 06:56:49",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/xibijj/awvscan",
+ "star": 42,
+ "commits": 5,
+ "modify_time": "2015-11-14 04:38:30",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/x899/ssh_brute_force",
+ "star": 42,
+ "commits": 17,
+ "modify_time": "2019-06-08 13:01:32",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/x41sec/slides",
+ "star": 42,
+ "commits": 10,
+ "modify_time": "2019-05-26 05:02:55",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/wuseman/tg799vac-xtreme-17.2-mint",
+ "star": 42,
+ "commits": 104,
+ "modify_time": "2019-12-08 23:14:40",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/wireghoul/doona",
+ "star": 42,
+ "commits": 143,
+ "modify_time": "2019-01-08 17:41:43",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/vlad902/findcrypt2-with-mmx",
+ "star": 42,
+ "commits": 2,
+ "modify_time": "2013-05-18 20:09:20",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/vanhauser-thc/afl-pin",
+ "star": 42,
+ "commits": 10,
+ "modify_time": "2019-06-23 09:50:36",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/uber/usb2fac",
+ "star": 42,
+ "commits": 22,
+ "modify_time": "2016-08-04 20:41:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tineola/tineola",
+ "star": 42,
+ "commits": 13,
+ "modify_time": "2019-10-28 16:30:31",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/threatstack/authkeys",
+ "star": 42,
+ "commits": 15,
+ "modify_time": "2019-09-04 12:59:32",
+ "last_release": "\n 2.1.2\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/thecjw/scoop-retools",
+ "star": 42,
+ "commits": 247,
+ "modify_time": "2019-12-08 09:25:56",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/taherio/redi",
+ "star": 42,
+ "commits": 40,
+ "modify_time": "2017-10-31 06:02:32",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/t0kx/exploit-cve-2015-3306",
+ "star": 42,
+ "commits": 3,
+ "modify_time": "2017-01-08 14:21:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/stypr/tmpleak",
+ "star": 42,
+ "commits": 6,
+ "modify_time": "2019-09-16 03:25:40",
+ "last_release": "",
+ "lang": "Pawn"
+ },
+ {
+ "link": "https://github.com/ssilence/scotty",
+ "star": 42,
+ "commits": 169,
+ "modify_time": "2014-08-18 19:09:36",
+ "last_release": "\n 0.9.2\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/sophsec/ffi-pcap",
+ "star": 42,
+ "commits": 528,
+ "modify_time": "2014-02-20 03:49:15",
+ "last_release": "\n v0.2.1\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/sh3llcod3/airscript-ng",
+ "star": 42,
+ "commits": 221,
+ "modify_time": "2019-11-01 16:52:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sendgrid/krampus",
+ "star": 42,
+ "commits": 24,
+ "modify_time": "2019-03-06 03:31:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/securestate/king-phisher-plugins",
+ "star": 42,
+ "commits": 379,
+ "modify_time": "2019-12-03 20:53:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/se55i0n/cwebscanner",
+ "star": 42,
+ "commits": 8,
+ "modify_time": "2017-12-20 03:15:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/salmg/magspoofpi",
+ "star": 42,
+ "commits": 37,
+ "modify_time": "2016-10-09 05:45:22",
+ "last_release": "",
+ "lang": "KiCad Layout"
+ },
+ {
+ "link": "https://github.com/s1egesystems/ghostsquadhackers-javascript-encrypter-encoder",
+ "star": 42,
+ "commits": 14,
+ "modify_time": "2019-06-14 22:36:24",
+ "last_release": "",
+ "lang": "Visual Basic .NET"
+ },
+ {
+ "link": "https://github.com/rogdham/cve-2018-11235",
+ "star": 42,
+ "commits": 2,
+ "modify_time": "2018-06-03 18:49:48",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/robbridgeman/adimporter",
+ "star": 42,
+ "commits": 25,
+ "modify_time": "2019-04-12 10:54:44",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/revolver-ocelot-saa/ghidrax64dbg",
+ "star": 42,
+ "commits": 3,
+ "modify_time": "2019-10-20 23:38:17",
+ "last_release": "v1.1.0-BETA",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/radioegor146/native-obfuscator",
+ "star": 42,
+ "commits": 243,
+ "modify_time": "2019-10-23 07:26:56",
+ "last_release": "1.7r",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/r0hi7/tortipi",
+ "star": 42,
+ "commits": 7,
+ "modify_time": "2018-11-30 05:44:28",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/pyn3rd/cve-2019-2618",
+ "star": 42,
+ "commits": 1,
+ "modify_time": "2019-04-17 11:13:28",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/paragonie/hpkp-builder",
+ "star": 42,
+ "commits": 6,
+ "modify_time": "2017-09-03 22:38:52",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/opsxcq/exploit-cve-2017-5715",
+ "star": 42,
+ "commits": 19,
+ "modify_time": "2018-01-09 22:27:20",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/operationnt414c/shellsecbat",
+ "star": 42,
+ "commits": 65,
+ "modify_time": "2019-08-17 16:28:46",
+ "last_release": "V10",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/openshift/openshift-extras",
+ "star": 42,
+ "commits": 775,
+ "modify_time": "2016-11-02 17:06:36",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/oasis-open/cti-stix-visualization",
+ "star": 42,
+ "commits": 119,
+ "modify_time": "2019-07-25 12:43:48",
+ "last_release": "\n v0.2.0\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/ntdiff/headers",
+ "star": 42,
+ "commits": 34,
+ "modify_time": "2019-12-06 19:17:51",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ntddk/temu",
+ "star": 42,
+ "commits": 33,
+ "modify_time": "2015-01-25 16:05:47",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/nowsecure/cybertruckchallenge19",
+ "star": 42,
+ "commits": 11,
+ "modify_time": "2019-09-26 22:40:50",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/nixawk/awesome-windows-debug",
+ "star": 42,
+ "commits": 43,
+ "modify_time": "2018-05-18 04:19:01",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ninoseki/mihari",
+ "star": 42,
+ "commits": 278,
+ "modify_time": "2019-11-30 06:34:21",
+ "last_release": "\n v0.16.0\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/nikolajschlej/zeronights2015",
+ "star": 42,
+ "commits": 7,
+ "modify_time": "2015-12-13 19:23:48",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/nihilus/idasimulator",
+ "star": 42,
+ "commits": 3,
+ "modify_time": "2014-09-02 23:30:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nihilus/guid-finder",
+ "star": 42,
+ "commits": 8,
+ "modify_time": "2016-01-24 20:50:51",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/nickstadb/poc",
+ "star": 42,
+ "commits": 11,
+ "modify_time": "2019-10-14 20:19:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nextsecurity/gozi-mbr-rootkit",
+ "star": 42,
+ "commits": 5,
+ "modify_time": "2016-10-25 20:38:47",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/narkisr/nmap4j",
+ "star": 42,
+ "commits": 50,
+ "modify_time": "2018-09-27 11:40:33",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/nanshihui/normal_hark_lite",
+ "star": 42,
+ "commits": 13,
+ "modify_time": "2016-04-27 03:40:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nanopony/apache-scalp",
+ "star": 42,
+ "commits": 22,
+ "modify_time": "2015-04-01 08:56:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/munsiwoo/ctf-web-prob",
+ "star": 42,
+ "commits": 92,
+ "modify_time": "2019-11-10 05:53:08",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/mrexodia/idapatch",
+ "star": 42,
+ "commits": 3,
+ "modify_time": "2016-09-03 01:06:57",
+ "last_release": "1.0.3",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/modzero/interestingfilescanner",
+ "star": 42,
+ "commits": 22,
+ "modify_time": "2018-06-18 08:57:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mitre-attack/attack-scripts",
+ "star": 42,
+ "commits": 21,
+ "modify_time": "2019-10-25 18:35:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mikalv/awesome-i2p",
+ "star": 42,
+ "commits": 32,
+ "modify_time": "2019-11-03 13:50:07",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/micli/netcoredebugging",
+ "star": 42,
+ "commits": 10,
+ "modify_time": "2018-09-19 00:53:17",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/mburrough/pentestingazureapps",
+ "star": 42,
+ "commits": 7,
+ "modify_time": "2019-01-31 08:18:53",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/martinvelez/w32evol",
+ "star": 42,
+ "commits": 69,
+ "modify_time": "2018-02-19 00:59:58",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/lxdcn/simple-vpn-demo",
+ "star": 42,
+ "commits": 13,
+ "modify_time": "2017-02-17 07:19:43",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/luciouskami/xigncode3bypass",
+ "star": 42,
+ "commits": 6,
+ "modify_time": "2019-03-04 00:41:24",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/loki-project/loki-messenger",
+ "star": 42,
+ "commits": 6381,
+ "modify_time": "2019-12-10 02:01:36",
+ "last_release": "v1.0.0-beta9",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/lianglixin/sksocks",
+ "star": 42,
+ "commits": 52,
+ "modify_time": "2019-07-22 09:30:07",
+ "last_release": "V1.2",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/leitbogioro/fuck_aliyun",
+ "star": 42,
+ "commits": 27,
+ "modify_time": "2019-03-31 07:07:22",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/k0r0pt/project-tauro",
+ "star": 42,
+ "commits": 24,
+ "modify_time": "2018-11-02 09:51:37",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/jonoberheide/stackjacking",
+ "star": 42,
+ "commits": 2,
+ "modify_time": "2011-04-20 04:59:41",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/johnsonz/go-checkiptools",
+ "star": 42,
+ "commits": 84,
+ "modify_time": "2017-11-07 09:45:01",
+ "last_release": "v3.8",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/jeremyfetiveau/pwn-just-in-time-exploit",
+ "star": 42,
+ "commits": 10,
+ "modify_time": "2019-01-26 07:33:18",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/jas502n/cve-2019-7238",
+ "star": 42,
+ "commits": 14,
+ "modify_time": "2019-08-19 17:33:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jaredlgillespie/proxyscrape",
+ "star": 42,
+ "commits": 127,
+ "modify_time": "2019-08-19 02:08:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/invictus-0x90/vulnerable_linux_driver",
+ "star": 42,
+ "commits": 36,
+ "modify_time": "2017-06-25 13:36:06",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/imp0wd3r/scanner",
+ "star": 42,
+ "commits": 21,
+ "modify_time": "2018-04-23 02:16:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/idc/ps4-fake-405",
+ "star": 42,
+ "commits": 11,
+ "modify_time": "2018-01-14 19:45:28",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ibm-security-intelligence/data-import",
+ "star": 42,
+ "commits": 55,
+ "modify_time": "2016-01-15 15:06:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/husam212/mitmer",
+ "star": 42,
+ "commits": 22,
+ "modify_time": "2014-09-04 22:07:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hannob/bignum-fuzz",
+ "star": 42,
+ "commits": 13,
+ "modify_time": "2018-11-11 08:19:00",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/guidovranken/rpcbomb",
+ "star": 42,
+ "commits": 3,
+ "modify_time": "2017-05-03 11:07:23",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/gnebbia/halive",
+ "star": 42,
+ "commits": 15,
+ "modify_time": "2019-08-05 16:11:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/flankerhqd/mediacodecoob",
+ "star": 42,
+ "commits": 3,
+ "modify_time": "2016-04-07 10:37:01",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/firebug/devtools-extension-examples",
+ "star": 42,
+ "commits": 142,
+ "modify_time": "2016-08-08 13:44:13",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/etnt/edbg",
+ "star": 42,
+ "commits": 56,
+ "modify_time": "2019-11-07 14:08:02",
+ "last_release": "0.1.4",
+ "lang": "Erlang"
+ },
+ {
+ "link": "https://github.com/edeca/rtfraptor",
+ "star": 42,
+ "commits": 16,
+ "modify_time": "2019-10-17 20:36:03",
+ "last_release": "\n v1.0.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/duo-labs/mysslstrip",
+ "star": 42,
+ "commits": 14,
+ "modify_time": "2015-05-11 22:39:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dineshshetty/ios-sandbox-dumper",
+ "star": 42,
+ "commits": 27,
+ "modify_time": "2019-11-25 16:35:41",
+ "last_release": "\n v2\n ",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/digitalinterruption/fridaworkshop",
+ "star": 42,
+ "commits": 6,
+ "modify_time": "2017-10-17 06:42:30",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/dhn/osee",
+ "star": 42,
+ "commits": 52,
+ "modify_time": "2019-09-22 21:40:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/deadpix3l/pydhe",
+ "star": 42,
+ "commits": 17,
+ "modify_time": "2018-03-29 03:06:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/davidtavarez/pinky",
+ "star": 42,
+ "commits": 106,
+ "modify_time": "2018-09-07 00:02:05",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/danwin/onion-link-list",
+ "star": 42,
+ "commits": 13,
+ "modify_time": "2019-02-23 09:54:06",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/danmcinerney/smb-reverse-brute",
+ "star": 42,
+ "commits": 8,
+ "modify_time": "2017-10-24 03:10:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/daddycocoaman/ironpentest",
+ "star": 42,
+ "commits": 8,
+ "modify_time": "2018-12-28 22:12:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cs-util-com/cscore",
+ "star": 42,
+ "commits": 564,
+ "modify_time": "2019-12-03 08:16:44",
+ "last_release": "v1.1.4",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/cr4sh/secretnet_expl",
+ "star": 42,
+ "commits": 11,
+ "modify_time": "2016-03-01 02:52:40",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/coston/react-obfuscate",
+ "star": 42,
+ "commits": 278,
+ "modify_time": "2019-12-08 23:34:05",
+ "last_release": "v3.6.2",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/ciscopsirt/openvulnapi",
+ "star": 42,
+ "commits": 215,
+ "modify_time": "2019-05-30 00:19:36",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/chrisad/ads-payload",
+ "star": 42,
+ "commits": 10,
+ "modify_time": "2019-02-23 23:10:11",
+ "last_release": "",
+ "lang": "Batchfile"
+ },
+ {
+ "link": "https://github.com/cemeyer/msp430-emu-uctf",
+ "star": 42,
+ "commits": 154,
+ "modify_time": "2015-06-10 20:38:13",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/btkrausen/aws",
+ "star": 42,
+ "commits": 34,
+ "modify_time": "2018-07-26 18:49:30",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/bneg/redteam-automation",
+ "star": 42,
+ "commits": 18,
+ "modify_time": "2018-01-26 20:04:25",
+ "last_release": "",
+ "lang": "HCL"
+ },
+ {
+ "link": "https://github.com/b1ack0wl/linux_mint_poc",
+ "star": 42,
+ "commits": 11,
+ "modify_time": "2019-06-26 01:48:09",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/azure/embarrassingly-parallel-image-classification",
+ "star": 42,
+ "commits": 96,
+ "modify_time": "2017-09-06 19:46:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/azonenberg/starshipraider",
+ "star": 42,
+ "commits": 162,
+ "modify_time": "2019-11-25 06:45:10",
+ "last_release": "",
+ "lang": "SystemVerilog"
+ },
+ {
+ "link": "https://github.com/aschzero/hera",
+ "star": 42,
+ "commits": 118,
+ "modify_time": "2019-05-27 21:54:26",
+ "last_release": "v0.2.5",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/anssi-fr/mabo",
+ "star": 42,
+ "commits": 13,
+ "modify_time": "2019-04-05 09:54:42",
+ "last_release": "",
+ "lang": "OCaml"
+ },
+ {
+ "link": "https://github.com/angorafuzzer/libdft64",
+ "star": 42,
+ "commits": 36,
+ "modify_time": "2019-04-02 12:10:39",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/anemonelabs/unmessage",
+ "star": 42,
+ "commits": 495,
+ "modify_time": "2017-09-15 21:12:40",
+ "last_release": "\n 0.2.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/an0nud4y/socialfish",
+ "star": 42,
+ "commits": 374,
+ "modify_time": "2018-10-28 07:28:38",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/alexcrichton/socks5-rs",
+ "star": 42,
+ "commits": 47,
+ "modify_time": "2018-04-20 17:33:17",
+ "last_release": "",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/ajmwagar/merino",
+ "star": 42,
+ "commits": 40,
+ "modify_time": "2019-10-08 21:14:38",
+ "last_release": "",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/abdesslem/ctf",
+ "star": 42,
+ "commits": 36,
+ "modify_time": "2018-05-19 21:07:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/9b/malpdfobj",
+ "star": 42,
+ "commits": 31,
+ "modify_time": "2011-04-11 00:13:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/4n4nk3/tinkerershell",
+ "star": 42,
+ "commits": 41,
+ "modify_time": "2019-08-24 13:57:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/1135/1135-cobaltstrike-toolkit",
+ "star": 42,
+ "commits": 13,
+ "modify_time": "2019-11-13 12:54:48",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/0xeb/ida-climacros",
+ "star": 42,
+ "commits": 7,
+ "modify_time": "2019-07-04 20:14:29",
+ "last_release": "v1.0.1",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/0x01h/pyddoz",
+ "star": 42,
+ "commits": 37,
+ "modify_time": "2019-10-01 17:25:49",
+ "last_release": "v1.0.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/0katz/cve-2019-12476",
+ "star": 42,
+ "commits": 11,
+ "modify_time": "2019-06-24 18:30:29",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/trojan-gfw/trojan-qt",
+ "star": 41,
+ "commits": 77,
+ "modify_time": "2019-05-06 19:34:28",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/v2ray/v2ray-shell_alpha",
+ "star": 41,
+ "commits": 65,
+ "modify_time": "2018-07-21 23:15:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hacker0x01/helpful-recon-data",
+ "star": 41,
+ "commits": 8,
+ "modify_time": "2019-01-24 05:01:53",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/simsong/dfxml",
+ "star": 41,
+ "commits": 582,
+ "modify_time": "2019-12-09 21:24:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/moosedojo/legion",
+ "star": 41,
+ "commits": 4,
+ "modify_time": "2017-07-27 01:48:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/spiderlabs/upnp-request-generator",
+ "star": 41,
+ "commits": 3,
+ "modify_time": "2013-08-09 16:03:44",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/l3m0n/my_ctf_challenges",
+ "star": 41,
+ "commits": 4,
+ "modify_time": "2018-07-23 05:29:24",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cisco-talos/covnavi",
+ "star": 41,
+ "commits": 1,
+ "modify_time": "2018-03-22 09:01:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mirage/wodan",
+ "star": 41,
+ "commits": 632,
+ "modify_time": "2019-05-09 13:08:03",
+ "last_release": "",
+ "lang": "OCaml"
+ },
+ {
+ "link": "https://github.com/3gstudent/apt34-jason",
+ "star": 41,
+ "commits": 5,
+ "modify_time": "2019-08-09 01:08:16",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/shibli2700/rekon",
+ "star": 41,
+ "commits": 15,
+ "modify_time": "2019-11-23 02:56:37",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/amimo/goron",
+ "star": 41,
+ "commits": 6,
+ "modify_time": "2019-10-25 15:36:52",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/artem-panchenko/counter-strike-docker",
+ "star": 41,
+ "commits": 23,
+ "modify_time": "2017-07-21 13:30:57",
+ "last_release": "",
+ "lang": "Makefile"
+ },
+ {
+ "link": "https://github.com/advancedhacker101/c-sharp-proxy-server",
+ "star": 41,
+ "commits": 23,
+ "modify_time": "2018-09-29 14:47:56",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/alxbrn/gdrv-loader",
+ "star": 41,
+ "commits": 12,
+ "modify_time": "2019-10-26 12:34:44",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/bcopeland/speccy",
+ "star": 41,
+ "commits": 73,
+ "modify_time": "2018-05-15 15:37:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/phspade/automated-scanner",
+ "star": 41,
+ "commits": 168,
+ "modify_time": "2019-12-10 01:54:13",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/abguthrie/goquery",
+ "star": 41,
+ "commits": 52,
+ "modify_time": "2019-11-21 22:34:35",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/kc0bfv/pcode-emulator",
+ "star": 41,
+ "commits": 2,
+ "modify_time": "2019-10-22 16:58:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/flankerhqd/vendor-android-cves",
+ "star": 41,
+ "commits": 5,
+ "modify_time": "2019-11-07 06:12:00",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/philomathic-guy/Malicious-Web-Content-Detection-Using-Machine-Learning",
+ "star": 41,
+ "commits": 221,
+ "modify_time": "2019-08-09 02:18:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/KD1991/OXUL103-Jailbreak",
+ "star": 41,
+ "commits": 7,
+ "modify_time": "2017-06-03 11:13:44",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/osirislab/CSAW-CTF-2017-Quals",
+ "star": 41,
+ "commits": 3,
+ "modify_time": "2017-09-17 23:45:19",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/TACIXAT/CFGScanDroid",
+ "star": 41,
+ "commits": 16,
+ "modify_time": "2015-01-29 14:33:06",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/cylance/MarkovObfuscate",
+ "star": 41,
+ "commits": 3,
+ "modify_time": "2016-08-03 21:27:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/CMU-18739L-S15/18739L-s15-coursedocs",
+ "star": 41,
+ "commits": 14,
+ "modify_time": "2015-04-21 18:59:31",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/verifynpm/tbv",
+ "star": 41,
+ "commits": 63,
+ "modify_time": "2019-08-25 14:35:32",
+ "last_release": "\n v0.3.6\n ",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/opencybersecurityalliance/stix-shifter",
+ "star": 41,
+ "commits": 240,
+ "modify_time": "2019-12-06 13:18:21",
+ "last_release": "2.8.4",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vpnguy-zz/snmpdos",
+ "star": 41,
+ "commits": 1,
+ "modify_time": "2014-03-01 00:01:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/Synacktiv-contrib/lightspeed",
+ "star": 41,
+ "commits": 1,
+ "modify_time": "2018-10-31 17:01:44",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/sharpstone/heroku-bouncer",
+ "star": 41,
+ "commits": 160,
+ "modify_time": "2019-04-17 10:25:52",
+ "last_release": "\n v0.7.1\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/lc/cspparse",
+ "star": 41,
+ "commits": 25,
+ "modify_time": "2019-07-23 03:25:18",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/flankerhqd/vendor-android-cves",
+ "star": 41,
+ "commits": 5,
+ "modify_time": "2019-11-07 06:12:00",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/zynga/hiccup",
+ "star": 41,
+ "commits": 14,
+ "modify_time": "2019-01-02 16:28:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zouxianyu/physicalmemoryrw",
+ "star": 41,
+ "commits": 2,
+ "modify_time": "2019-08-18 18:42:10",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/zhichao281/duilib-miniblinkbrowser",
+ "star": 41,
+ "commits": 124,
+ "modify_time": "2019-11-09 13:44:04",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/zer0mem/hypervisor",
+ "star": 41,
+ "commits": 9,
+ "modify_time": "2014-07-02 08:45:38",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/yingshang/hack",
+ "star": 41,
+ "commits": 13,
+ "modify_time": "2018-04-02 02:49:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xtiankisutsa/twiga",
+ "star": 41,
+ "commits": 13,
+ "modify_time": "2017-11-17 15:41:43",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/xaqron/stunnel",
+ "star": 41,
+ "commits": 6,
+ "modify_time": "2018-05-04 19:15:04",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/x64dbg/x64dbgpylib",
+ "star": 41,
+ "commits": 43,
+ "modify_time": "2019-07-29 11:24:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/x-way/iptables-tracer",
+ "star": 41,
+ "commits": 156,
+ "modify_time": "2019-12-06 23:28:29",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/wireghoul/lbmap",
+ "star": 41,
+ "commits": 147,
+ "modify_time": "2017-03-24 15:16:01",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/wanttobeno/dllprotect",
+ "star": 41,
+ "commits": 2,
+ "modify_time": "2018-10-18 03:06:31",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/v1v1/sleight",
+ "star": 41,
+ "commits": 18,
+ "modify_time": "2018-07-10 12:42:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/userexistserror/dllloadershellcode",
+ "star": 41,
+ "commits": 3,
+ "modify_time": "2018-11-14 07:36:59",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/traceflight/android-malware-datasets",
+ "star": 41,
+ "commits": 8,
+ "modify_time": "2018-10-10 04:22:32",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/theherogac/tf-card-plugin-tool",
+ "star": 41,
+ "commits": 25,
+ "modify_time": "2019-08-28 19:27:17",
+ "last_release": "2.26",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/thehackingsage/fluxion",
+ "star": 41,
+ "commits": 16,
+ "modify_time": "2018-01-22 11:54:15",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/thebabush/dumb-obfuscator",
+ "star": 41,
+ "commits": 11,
+ "modify_time": "2019-02-26 14:06:43",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/tengzhangchao/websniff",
+ "star": 41,
+ "commits": 11,
+ "modify_time": "2016-10-21 08:43:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/techwizrd/gitkraken",
+ "star": 41,
+ "commits": 3,
+ "modify_time": "2016-02-14 00:18:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tasket/qubes-vm-hardening",
+ "star": 41,
+ "commits": 88,
+ "modify_time": "2019-09-02 12:50:18",
+ "last_release": "0.9.3",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/talos-vulndev/fuzzflow",
+ "star": 41,
+ "commits": 4,
+ "modify_time": "2018-02-24 22:43:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/spiderlabs/firework",
+ "star": 41,
+ "commits": 1,
+ "modify_time": "2018-08-30 11:42:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sonofagl1tch/awsdetonationlab",
+ "star": 41,
+ "commits": 247,
+ "modify_time": "2019-04-15 18:05:17",
+ "last_release": "V2.1.1",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/smikims/arpspoof",
+ "star": 41,
+ "commits": 25,
+ "modify_time": "2016-03-13 08:54:35",
+ "last_release": "",
+ "lang": "ApacheConf"
+ },
+ {
+ "link": "https://github.com/sikkandar-sha/sec-audit",
+ "star": 41,
+ "commits": 5,
+ "modify_time": "2016-08-15 02:16:42",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/sesuperuser/super-bootimg",
+ "star": 41,
+ "commits": 203,
+ "modify_time": "2016-04-14 13:53:06",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/sensepost/frida-windows-playground",
+ "star": 41,
+ "commits": 6,
+ "modify_time": "2019-05-06 07:18:12",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/seemoo-lab/nexmon_debugger",
+ "star": 41,
+ "commits": 3,
+ "modify_time": "2017-12-23 23:31:15",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/secdec/attack-surface-detector-burp",
+ "star": 41,
+ "commits": 47,
+ "modify_time": "2019-02-08 19:10:00",
+ "last_release": "1.1.3",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/seadog007/noxctf-2018-psrf-as-pwn",
+ "star": 41,
+ "commits": 12,
+ "modify_time": "2018-09-10 03:21:14",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/scriptjunkie/kcap",
+ "star": 41,
+ "commits": 4,
+ "modify_time": "2016-09-17 20:06:39",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/scrapbird/sarlacc",
+ "star": 41,
+ "commits": 103,
+ "modify_time": "2018-04-17 09:37:52",
+ "last_release": "0.002",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rootkitsmm/cve-2016-0040",
+ "star": 41,
+ "commits": 8,
+ "modify_time": "2016-07-17 07:59:09",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/rappayne/webgoat.net",
+ "star": 41,
+ "commits": 31,
+ "modify_time": "2018-04-27 17:58:41",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/rapid7/vm-automation",
+ "star": 41,
+ "commits": 103,
+ "modify_time": "2018-04-25 21:47:32",
+ "last_release": "\n 0.1.7\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/r0bag/pentest",
+ "star": 41,
+ "commits": 55,
+ "modify_time": "2019-10-15 08:49:51",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/proxb/serverinventoryreport",
+ "star": 41,
+ "commits": 15,
+ "modify_time": "2017-05-10 03:07:39",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/ph4r05/kismet-deauth-wpa2-handshake-plugin",
+ "star": 41,
+ "commits": 3,
+ "modify_time": "2017-01-31 17:02:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/oways/sa-core-2018-004",
+ "star": 41,
+ "commits": 5,
+ "modify_time": "2018-04-28 16:19:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/outflanknl/net-gpppassword",
+ "star": 41,
+ "commits": 9,
+ "modify_time": "2019-10-14 14:41:51",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/oscarakaelvis/game-of-thrones-hacking-ctf",
+ "star": 41,
+ "commits": 14,
+ "modify_time": "2017-09-26 16:18:30",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/opsxcq/exploit-cve-2016-6515",
+ "star": 41,
+ "commits": 26,
+ "modify_time": "2017-09-10 21:05:24",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/opendns/og-miner",
+ "star": 41,
+ "commits": 6,
+ "modify_time": "2017-04-28 18:02:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ntddk/virustream",
+ "star": 41,
+ "commits": 2,
+ "modify_time": "2017-11-12 08:51:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nourabusoud/password-genie",
+ "star": 41,
+ "commits": 16,
+ "modify_time": "2018-03-13 23:03:54",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/nimai/mptcp-scapy",
+ "star": 41,
+ "commits": 3,
+ "modify_time": "2015-02-27 20:50:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/neverlovelynn/chrome_headless_xss",
+ "star": 41,
+ "commits": 33,
+ "modify_time": "2018-09-17 08:27:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/netspi/cmdsql",
+ "star": 41,
+ "commits": 12,
+ "modify_time": "2018-03-24 19:21:06",
+ "last_release": "",
+ "lang": "ASP"
+ },
+ {
+ "link": "https://github.com/netmap-unipi/netmap-tutorial",
+ "star": 41,
+ "commits": 42,
+ "modify_time": "2019-01-30 11:12:16",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/nao-sec/rigek",
+ "star": 41,
+ "commits": 18,
+ "modify_time": "2017-05-17 02:50:24",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/muodov/sqlmapchik",
+ "star": 41,
+ "commits": 30,
+ "modify_time": "2016-06-02 12:45:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mtve/yazecminer",
+ "star": 41,
+ "commits": 50,
+ "modify_time": "2017-09-04 12:42:07",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/moloch--/cve-2016-1764",
+ "star": 41,
+ "commits": 3,
+ "modify_time": "2016-04-08 23:00:55",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/minisafe/microweb",
+ "star": 41,
+ "commits": null,
+ "modify_time": "2017-07-12 06:01:25",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/mddanish/vulnerable-otp-application",
+ "star": 41,
+ "commits": 17,
+ "modify_time": "2019-11-13 11:35:42",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/masterbutcher/kali-cleaner",
+ "star": 41,
+ "commits": 9,
+ "modify_time": "2013-06-15 08:44:06",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/maecproject/malware-behaviors",
+ "star": 41,
+ "commits": 426,
+ "modify_time": "2019-08-20 14:53:30",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/linuxacademy/la-aws-security_specialty",
+ "star": 41,
+ "commits": 23,
+ "modify_time": "2019-04-11 08:30:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lingerhk/0net",
+ "star": 41,
+ "commits": 20,
+ "modify_time": "2015-06-27 17:49:19",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/koboi137/darksplitz",
+ "star": 41,
+ "commits": 6,
+ "modify_time": "2019-05-12 19:45:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kitctf/nginxpwn",
+ "star": 41,
+ "commits": 2,
+ "modify_time": "2016-03-23 12:05:10",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/killswitch-gui/hotload-driver",
+ "star": 41,
+ "commits": 30,
+ "modify_time": "2016-09-11 03:07:14",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/kanglictf/afl-qai",
+ "star": 41,
+ "commits": 4,
+ "modify_time": "2016-11-22 08:23:57",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jzdziarski/mod_evasive",
+ "star": 41,
+ "commits": 2,
+ "modify_time": "2017-02-22 02:33:36",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jpcertcc/impfuzzy",
+ "star": 41,
+ "commits": 18,
+ "modify_time": "2018-07-03 11:41:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jenkinsci/parameterized-scheduler-plugin",
+ "star": 41,
+ "commits": 111,
+ "modify_time": "2019-10-10 09:16:58",
+ "last_release": "parameterized-scheduler-0.5",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/jbreed/apkinjector",
+ "star": 41,
+ "commits": 38,
+ "modify_time": "2017-04-03 20:54:33",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/inaz2/unico",
+ "star": 41,
+ "commits": 1,
+ "modify_time": "2017-07-04 12:35:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/icchy/wctf2019-gtf",
+ "star": 41,
+ "commits": 1,
+ "modify_time": "2019-07-13 02:00:00",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/horsicq/pex64dbg",
+ "star": 41,
+ "commits": 215,
+ "modify_time": "2019-12-09 17:07:19",
+ "last_release": "0.03",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hook-s3c/cve-2019-0708-poc",
+ "star": 41,
+ "commits": 1,
+ "modify_time": "2019-05-14 21:03:13",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/guptachetan1997/crawling-projects",
+ "star": 41,
+ "commits": 63,
+ "modify_time": "2017-10-03 17:23:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gabamnml/hoper",
+ "star": 41,
+ "commits": 12,
+ "modify_time": "2017-08-28 17:31:58",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/fsiamp/brutesec",
+ "star": 41,
+ "commits": 2199,
+ "modify_time": "2019-08-14 11:29:40",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/frida/frida-swift",
+ "star": 41,
+ "commits": 38,
+ "modify_time": "2019-09-03 23:06:16",
+ "last_release": "",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/freewaf/waf-anti-tamper",
+ "star": 41,
+ "commits": 11,
+ "modify_time": "2013-07-26 01:51:29",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/forte-research/forte-fuzzbench",
+ "star": 41,
+ "commits": 205,
+ "modify_time": "2019-03-12 19:48:04",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/fooock/jshodan",
+ "star": 41,
+ "commits": 63,
+ "modify_time": "2018-01-07 02:42:03",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/fnzv/trsh",
+ "star": 41,
+ "commits": 55,
+ "modify_time": "2017-04-26 13:01:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/flyr4nk/xssscaner",
+ "star": 41,
+ "commits": 4,
+ "modify_time": "2013-06-05 07:59:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/feruxmax/meltdown",
+ "star": 41,
+ "commits": 4,
+ "modify_time": "2018-01-05 12:42:49",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/equalitie/ouinet",
+ "star": 41,
+ "commits": 3116,
+ "modify_time": "2019-12-09 09:20:59",
+ "last_release": "\n v0.4.0\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/empty-nest/emptynest",
+ "star": 41,
+ "commits": null,
+ "modify_time": "2017-10-17 19:14:19",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/dxsdyhm/gwelldemo",
+ "star": 41,
+ "commits": 325,
+ "modify_time": "2019-04-01 12:21:22",
+ "last_release": "0.4.4",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/dnlongen/reglister",
+ "star": 41,
+ "commits": 24,
+ "modify_time": "2016-09-12 20:48:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/devttys0/botox",
+ "star": 41,
+ "commits": 41,
+ "modify_time": "2017-04-12 19:08:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dentrax/netlyser",
+ "star": 41,
+ "commits": 14,
+ "modify_time": "2019-05-14 21:03:49",
+ "last_release": "",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/denizparlak/hayat",
+ "star": 41,
+ "commits": 42,
+ "modify_time": "2019-10-17 13:46:46",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/deep-security/aws-waf",
+ "star": 41,
+ "commits": 108,
+ "modify_time": "2019-04-24 02:43:04",
+ "last_release": "v2.0.2",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/deadbits/analyst-casefile",
+ "star": 41,
+ "commits": 13,
+ "modify_time": "2018-01-21 15:47:45",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/danielkrupinski/anubis",
+ "star": 41,
+ "commits": 394,
+ "modify_time": "2019-11-21 20:47:59",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/crysys/membrane",
+ "star": 41,
+ "commits": 9,
+ "modify_time": "2016-09-12 12:16:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/crowdstrike/pyspresso",
+ "star": 41,
+ "commits": 1,
+ "modify_time": "2016-06-17 14:49:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cr4sh/ptbypass-poc",
+ "star": 41,
+ "commits": 7,
+ "modify_time": "2011-01-24 13:55:45",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/cocoahuke/mackextdump",
+ "star": 41,
+ "commits": 9,
+ "modify_time": "2017-07-16 00:34:48",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/certcc/vulnerability-data-archive",
+ "star": 41,
+ "commits": 44,
+ "modify_time": "2019-05-14 13:30:14",
+ "last_release": "\n 2019_05_14\n ",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/c4bbage/webrobot-v1.8.2",
+ "star": 41,
+ "commits": 4,
+ "modify_time": "2016-01-22 08:43:32",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/c0nw0nk/nginx-lua-anti-ddos",
+ "star": 41,
+ "commits": 37,
+ "modify_time": "2019-11-18 18:50:08",
+ "last_release": "",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/bones-codes/the_colonel",
+ "star": 41,
+ "commits": 211,
+ "modify_time": "2015-02-04 01:46:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bluec0re/reversing-radare2",
+ "star": 41,
+ "commits": 6,
+ "modify_time": "2016-10-24 09:10:45",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/bahmutov/ban-sensitive-files",
+ "star": 41,
+ "commits": 58,
+ "modify_time": "2017-12-04 18:20:22",
+ "last_release": "v1.9.2",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/backto17/sinahousecrawler",
+ "star": 41,
+ "commits": 122,
+ "modify_time": "2017-02-13 09:24:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/baarsik/tauros-v2",
+ "star": 41,
+ "commits": 30,
+ "modify_time": "2018-10-10 20:08:59",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/azerg/packerpe",
+ "star": 41,
+ "commits": 151,
+ "modify_time": "2018-02-23 15:08:07",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/avdbg/saber",
+ "star": 41,
+ "commits": 72,
+ "modify_time": "2016-11-20 14:07:37",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/asm/deep_spectre",
+ "star": 41,
+ "commits": 6,
+ "modify_time": "2018-06-28 16:12:16",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/arthastang/router-exploit-shovel",
+ "star": 41,
+ "commits": 47,
+ "modify_time": "2019-07-15 10:35:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/arno0x/reflectivednsexfiltrator",
+ "star": 41,
+ "commits": 1,
+ "modify_time": "2018-01-10 14:06:23",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/anon6372098/fazscan",
+ "star": 41,
+ "commits": 91,
+ "modify_time": "2019-06-16 01:57:16",
+ "last_release": "v1.2",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/android-rooting-tools/libpingpong_exploit",
+ "star": 41,
+ "commits": 2,
+ "modify_time": "2015-11-22 05:43:18",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/andreafioraldi/pwntrace",
+ "star": 41,
+ "commits": 5,
+ "modify_time": "2018-04-06 18:44:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/alfa-group/robust-adv-malware-detection",
+ "star": 41,
+ "commits": 22,
+ "modify_time": "2018-08-31 18:33:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/alepacheco/androrw",
+ "star": 41,
+ "commits": null,
+ "modify_time": "2017-07-10 16:32:02",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/agrawalsmart7/autorecon",
+ "star": 41,
+ "commits": 86,
+ "modify_time": "2019-11-10 06:12:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/abdesslem/malwarehunter",
+ "star": 41,
+ "commits": 57,
+ "modify_time": "2015-09-28 15:44:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pgigioli/darknet_ros",
+ "star": 40,
+ "commits": 42,
+ "modify_time": "2018-04-18 02:12:20",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/zkeeer/shadowsocks-manager",
+ "star": 40,
+ "commits": 28,
+ "modify_time": "2018-12-18 04:35:05",
+ "last_release": "v1.1",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/asamy/forgottenmapeditor",
+ "star": 40,
+ "commits": 276,
+ "modify_time": "2014-09-30 23:20:09",
+ "last_release": "0.1-beta",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/robertdavidgraham/hamster",
+ "star": 40,
+ "commits": 3,
+ "modify_time": "2013-11-20 17:50:45",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/icodesign/proxy-uri",
+ "star": 40,
+ "commits": 13,
+ "modify_time": "2018-11-02 09:02:42",
+ "last_release": "",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/avast/yaracpp",
+ "star": 40,
+ "commits": 53,
+ "modify_time": "2019-07-09 11:05:33",
+ "last_release": "v1.0.1",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/wibiti/evedec",
+ "star": 40,
+ "commits": 13,
+ "modify_time": "2018-01-18 05:38:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jaredhaight/powerpunch",
+ "star": 40,
+ "commits": 24,
+ "modify_time": "2017-12-03 23:06:38",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/gallopsled/pwntools-binutils",
+ "star": 40,
+ "commits": 18,
+ "modify_time": "2017-01-04 20:24:16",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/damonmohammadbagher/nativepayload_reverseshell",
+ "star": 40,
+ "commits": 9,
+ "modify_time": "2019-12-02 16:01:36",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/guibacellar/dnci",
+ "star": 40,
+ "commits": 19,
+ "modify_time": "2019-06-19 01:28:33",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/nick-the-greek/aerial",
+ "star": 40,
+ "commits": 22,
+ "modify_time": "2018-09-22 17:10:24",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/flankerhqd/wifimonster",
+ "star": 40,
+ "commits": 11,
+ "modify_time": "2014-09-25 13:33:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/trailofbits/rubysec",
+ "star": 40,
+ "commits": 50,
+ "modify_time": "2018-11-15 20:30:09",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/TheSpeedX/PROXY-List",
+ "star": 40,
+ "commits": 57,
+ "modify_time": "2019-12-10 08:54:20",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/RaidAndFade/HacktoberChallenges2018",
+ "star": 40,
+ "commits": 1088,
+ "modify_time": "2018-11-14 06:08:42",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/PaloAltoNetworks/InstallerHijackingVulnerabilityScanner",
+ "star": 40,
+ "commits": 7,
+ "modify_time": "2015-03-25 15:34:06",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/nerrorsec/GoogleDorker",
+ "star": 40,
+ "commits": 35,
+ "modify_time": "2019-10-21 10:25:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gh0stkey/JSONandHTTPP",
+ "star": 40,
+ "commits": 6,
+ "modify_time": "2019-08-14 12:59:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/AonCyberLabs/Nmap-Scripts",
+ "star": 40,
+ "commits": 4,
+ "modify_time": "2015-11-18 16:08:54",
+ "last_release": "",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/FSecureLABS/honeypot_recipes",
+ "star": 40,
+ "commits": 8,
+ "modify_time": "2017-01-04 09:54:37",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/auth0-blog/hapi-jwt-authentication",
+ "star": 40,
+ "commits": 13,
+ "modify_time": "2017-08-10 22:45:05",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/crytic/eth-security-toolbox",
+ "star": 40,
+ "commits": 20,
+ "modify_time": "2019-12-04 23:12:56",
+ "last_release": "",
+ "lang": "Dockerfile"
+ },
+ {
+ "link": "https://gitlab.com/akihe/radamsa",
+ "star": 40,
+ "commits": null,
+ "modify_time": "2019-02-04 23:34:37",
+ "last_release": "",
+ "lang": "scheme"
+ },
+ {
+ "link": "https://github.com/zer0mem0ry/manualmap",
+ "star": 40,
+ "commits": 2,
+ "modify_time": "2017-04-18 17:42:39",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/zephrfish/attackdeploy",
+ "star": 40,
+ "commits": 40,
+ "modify_time": "2018-03-11 10:27:02",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/z-0ne/scans2-045-nmap",
+ "star": 40,
+ "commits": 6,
+ "modify_time": "2017-03-13 13:35:55",
+ "last_release": "",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/yifengyou/code-virtualization-and-automation-analysis",
+ "star": 40,
+ "commits": 2,
+ "modify_time": "2017-11-25 03:20:53",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/xiphosresearch/phuzz",
+ "star": 40,
+ "commits": 34,
+ "modify_time": "2017-01-24 17:07:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xiphosresearch/dnsbrute",
+ "star": 40,
+ "commits": 18,
+ "modify_time": "2016-12-09 14:39:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xiaoyanguoke/ciahackingtools",
+ "star": 40,
+ "commits": 1,
+ "modify_time": "2017-03-08 02:04:42",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/xchwarze/cain",
+ "star": 40,
+ "commits": 14,
+ "modify_time": "2019-11-27 22:36:18",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/x64dbg/interobfu",
+ "star": 40,
+ "commits": 34,
+ "modify_time": "2017-01-06 03:00:28",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/wso-shell/wso",
+ "star": 40,
+ "commits": null,
+ "modify_time": "2016-06-25 21:45:34",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/wirepair/idapinlogger",
+ "star": 40,
+ "commits": 8,
+ "modify_time": "2013-07-05 05:38:22",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/WildByDesign/AppContainer-Launcher",
+ "star": 40,
+ "commits": 144,
+ "modify_time": "2019-02-02 15:42:35",
+ "last_release": "2019-02-02",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/wi-fi-analyzer/wifi-arsenal",
+ "star": 40,
+ "commits": 293,
+ "modify_time": "2016-12-21 12:03:18",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/wearelegal/cinarat",
+ "star": 40,
+ "commits": 23,
+ "modify_time": "2017-10-29 14:38:42",
+ "last_release": "\n 1.0.1.1\n ",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/wangyihang/pwnme",
+ "star": 40,
+ "commits": 204,
+ "modify_time": "2019-12-07 07:48:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wangyihang/codiad-remote-code-execute-exploit",
+ "star": 40,
+ "commits": 44,
+ "modify_time": "2018-08-19 01:15:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/waja/maldetect",
+ "star": 40,
+ "commits": 192,
+ "modify_time": "2018-11-08 15:49:03",
+ "last_release": "\n upstream/1.6.2\n ",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/voidhack/write-ups",
+ "star": 40,
+ "commits": 182,
+ "modify_time": "2019-03-09 10:36:29",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/villanch/g3ar",
+ "star": 40,
+ "commits": 88,
+ "modify_time": "2017-06-16 18:07:12",
+ "last_release": "\n v0.3.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vigneshsrao/cve-2019-11707",
+ "star": 40,
+ "commits": 1,
+ "modify_time": "2019-08-18 07:41:51",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/txthinking/socks5",
+ "star": 40,
+ "commits": 32,
+ "modify_time": "2019-04-04 05:26:47",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/tmr232/brutal-ida",
+ "star": 40,
+ "commits": 3,
+ "modify_time": "2019-08-01 08:35:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/thaisenpm/loader3",
+ "star": 40,
+ "commits": 7,
+ "modify_time": "2019-04-29 02:43:54",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/tennc/1000php",
+ "star": 40,
+ "commits": 2,
+ "modify_time": "2016-07-26 21:03:31",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/tatsuya6502/recon_ex",
+ "star": 40,
+ "commits": 21,
+ "modify_time": "2016-04-10 14:13:45",
+ "last_release": "\n 0.9.1\n ",
+ "lang": "Elixir"
+ },
+ {
+ "link": "https://github.com/taintdroid/android_platform_dalvik",
+ "star": 40,
+ "commits": 5668,
+ "modify_time": "2012-09-27 00:12:26",
+ "last_release": "\n android-4.1.1_r6\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/stratosphereips/stratospheretestingframework",
+ "star": 40,
+ "commits": 820,
+ "modify_time": "2017-02-16 08:57:42",
+ "last_release": "\n 0.1.3alpha\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/stephenfewer/ollyheaptrace",
+ "star": 40,
+ "commits": 2,
+ "modify_time": "2011-11-04 13:52:18",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/stealth/fernmelder",
+ "star": 40,
+ "commits": 6,
+ "modify_time": "2014-01-30 12:01:45",
+ "last_release": "\n fernmelder-0-4s2\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/sinsoul/sinsoulwebremotecontrol",
+ "star": 40,
+ "commits": 3,
+ "modify_time": "2013-08-08 00:55:40",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/shadsidd/automated-xss-finder",
+ "star": 40,
+ "commits": 14,
+ "modify_time": "2013-08-07 10:55:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sensepost/go-out",
+ "star": 40,
+ "commits": 24,
+ "modify_time": "2019-09-30 08:11:14",
+ "last_release": "1.2",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/securifera/cve-2018-6546-exploit",
+ "star": 40,
+ "commits": 4,
+ "modify_time": "2018-04-15 21:59:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/scottjpack/shellshock_scanner",
+ "star": 40,
+ "commits": 10,
+ "modify_time": "2014-09-29 23:22:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/scorelab/androphsy",
+ "star": 40,
+ "commits": 34,
+ "modify_time": "2017-07-18 07:46:14",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/s2e/pykvm",
+ "star": 40,
+ "commits": 8,
+ "modify_time": "2019-01-07 22:31:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/s-macke/starflight-reverse",
+ "star": 40,
+ "commits": 392,
+ "modify_time": "2019-02-27 22:57:21",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/rr-/crc-manipulator",
+ "star": 40,
+ "commits": 144,
+ "modify_time": "2019-01-01 18:37:42",
+ "last_release": "0.5.2",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/rooklabs/milano",
+ "star": 40,
+ "commits": 61,
+ "modify_time": "2015-07-30 21:35:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/robputt796/py-dns-over-https-proxy",
+ "star": 40,
+ "commits": 23,
+ "modify_time": "2018-01-30 19:43:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/regehr/compiler-crashes",
+ "star": 40,
+ "commits": 12,
+ "modify_time": "2016-07-17 00:04:29",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/r00t-3xp10it/rc-exploiter",
+ "star": 40,
+ "commits": 24,
+ "modify_time": "2017-05-16 17:51:29",
+ "last_release": "",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/q3k/tpm2137",
+ "star": 40,
+ "commits": 17,
+ "modify_time": "2019-07-07 09:11:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pyllyukko/harden.sh",
+ "star": 40,
+ "commits": 1348,
+ "modify_time": "2019-12-04 20:45:40",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/pwnieexpress/metasploit-framework",
+ "star": 40,
+ "commits": 628,
+ "modify_time": "2014-01-13 16:46:30",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/olafhartong/detection-sources",
+ "star": 40,
+ "commits": 8,
+ "modify_time": "2019-03-04 06:07:49",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ocadotechnology/gcp-census",
+ "star": 40,
+ "commits": 108,
+ "modify_time": "2018-06-29 13:42:49",
+ "last_release": "v1.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/neuman/python-carteblanche",
+ "star": 40,
+ "commits": 55,
+ "modify_time": "2014-07-03 15:51:46",
+ "last_release": "v0.0.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nccgroup/triforceopenbsdfuzzer",
+ "star": 40,
+ "commits": 4,
+ "modify_time": "2016-10-31 18:56:13",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/nccgroup/lapith",
+ "star": 40,
+ "commits": 51,
+ "modify_time": "2013-08-30 10:42:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/n3uz/elastic-x-pack-crack",
+ "star": 40,
+ "commits": null,
+ "modify_time": "2018-05-11 09:15:44",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/n3k/pentest",
+ "star": 40,
+ "commits": 56,
+ "modify_time": "2019-10-30 16:52:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mykings/security-study-tutorial",
+ "star": 40,
+ "commits": 106,
+ "modify_time": "2019-11-29 07:57:50",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/mxmssh/idametrics",
+ "star": 40,
+ "commits": 47,
+ "modify_time": "2018-01-04 23:20:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mrsqar-ye/wpcrack",
+ "star": 40,
+ "commits": 2,
+ "modify_time": "2018-05-12 19:50:50",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/momalab/icsref",
+ "star": 40,
+ "commits": 8,
+ "modify_time": "2019-09-10 08:23:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mnrkbys/vss_carver",
+ "star": 40,
+ "commits": 11,
+ "modify_time": "2018-11-19 06:44:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/miwong/intellidroid",
+ "star": 40,
+ "commits": 30,
+ "modify_time": "2018-06-20 14:31:47",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/mikeperry-tor/vanguards",
+ "star": 40,
+ "commits": 322,
+ "modify_time": "2019-09-11 16:34:17",
+ "last_release": "\n v0.3.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mavrepis/shodanvulncheck",
+ "star": 40,
+ "commits": 3,
+ "modify_time": "2018-12-05 17:48:18",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/mame82/misc",
+ "star": 40,
+ "commits": 6,
+ "modify_time": "2019-07-09 15:53:17",
+ "last_release": "",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/mafintosh/ws-to-tcp",
+ "star": 40,
+ "commits": 2,
+ "modify_time": "2017-09-25 15:50:35",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/m0rtem/mailfail",
+ "star": 40,
+ "commits": 6,
+ "modify_time": "2017-08-22 18:06:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lukasikic/kodi-backdoor-generator",
+ "star": 40,
+ "commits": 3,
+ "modify_time": "2016-09-14 23:56:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lillypad/badger",
+ "star": 40,
+ "commits": 14,
+ "modify_time": "2016-04-12 11:34:38",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/lcatro/xss-hunter",
+ "star": 40,
+ "commits": 25,
+ "modify_time": "2016-10-09 05:32:13",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/lanjelot/ctfs",
+ "star": 40,
+ "commits": 13,
+ "modify_time": "2018-10-10 20:57:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/laginimaineb/cve-2016-2431",
+ "star": 40,
+ "commits": 2,
+ "modify_time": "2016-06-15 11:27:15",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/kokokuo/scraper-fourone-jobs",
+ "star": 40,
+ "commits": 86,
+ "modify_time": "2019-08-03 16:00:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kevingosse/windbg-extensions",
+ "star": 40,
+ "commits": 42,
+ "modify_time": "2019-01-28 16:32:50",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/kelvinhack/notruth",
+ "star": 40,
+ "commits": 43,
+ "modify_time": "2017-10-06 12:29:30",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/karttoon/trigen",
+ "star": 40,
+ "commits": 5,
+ "modify_time": "2017-07-02 23:25:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/karttoon/binsequencer",
+ "star": 40,
+ "commits": 8,
+ "modify_time": "2019-09-05 19:51:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/k2/scripting",
+ "star": 40,
+ "commits": 47,
+ "modify_time": "2019-05-21 05:22:23",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/jwnie/proxyservice",
+ "star": 40,
+ "commits": 27,
+ "modify_time": "2018-01-02 04:29:21",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/jsecurity101/windows-api-to-sysmon-events",
+ "star": 40,
+ "commits": 28,
+ "modify_time": "2019-10-16 15:18:46",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/jonbruner/twitter-analysis",
+ "star": 40,
+ "commits": 8,
+ "modify_time": "2017-04-27 06:28:15",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/jh00nbr/phishruffus",
+ "star": 40,
+ "commits": 14,
+ "modify_time": "2019-01-20 13:32:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jceminer/cn_cpu_miner",
+ "star": 40,
+ "commits": 229,
+ "modify_time": "2019-03-02 17:28:35",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/ivianuu/contributer",
+ "star": 40,
+ "commits": 22,
+ "modify_time": "2018-03-26 13:04:55",
+ "last_release": "1.0.0",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/iriscouch/audit_couchdb",
+ "star": 40,
+ "commits": 80,
+ "modify_time": "2011-11-06 01:56:20",
+ "last_release": "\n v0.3.1\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/ipopov/starttls-mitm",
+ "star": 40,
+ "commits": 7,
+ "modify_time": "2014-03-18 22:30:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/in7egral/taig8-ios-jailbreak-patchfinder",
+ "star": 40,
+ "commits": 5,
+ "modify_time": "2018-11-14 21:42:53",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ilovepp/firminsight",
+ "star": 40,
+ "commits": 21,
+ "modify_time": "2017-02-13 12:51:40",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/igorkorkin/hypervisorsdetection",
+ "star": 40,
+ "commits": 4,
+ "modify_time": "2015-06-16 13:04:56",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/icanhasfay/pypwned",
+ "star": 40,
+ "commits": 30,
+ "modify_time": "2019-09-27 20:41:59",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/homas/ioc2rpz",
+ "star": 40,
+ "commits": 356,
+ "modify_time": "2019-12-09 07:03:18",
+ "last_release": "1.0.0.0",
+ "lang": "Erlang"
+ },
+ {
+ "link": "https://github.com/hexx0r/cve-2016-0051",
+ "star": 40,
+ "commits": 6,
+ "modify_time": "2016-05-10 22:41:12",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/hackshields/antivirus",
+ "star": 40,
+ "commits": 1,
+ "modify_time": "2016-07-21 13:59:11",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/h0nus/spynoteshell",
+ "star": 40,
+ "commits": 15,
+ "modify_time": "2017-06-12 12:48:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/grapheneos/vanadium",
+ "star": 40,
+ "commits": 77,
+ "modify_time": "2019-11-27 22:47:16",
+ "last_release": "\n QQ1A.191205.011.2019.12.02.23\n ",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/godaddy/yara-rules",
+ "star": 40,
+ "commits": 11,
+ "modify_time": "2017-07-28 19:42:46",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/github/enable-security-alerts-sample",
+ "star": 40,
+ "commits": 33,
+ "modify_time": "2019-11-20 21:15:36",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/gamelinux/cxtracker",
+ "star": 40,
+ "commits": 164,
+ "modify_time": "2017-08-06 19:27:59",
+ "last_release": "\n 0.9.8\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/g763007297/gqresign",
+ "star": 40,
+ "commits": 16,
+ "modify_time": "2018-06-27 14:58:59",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/fireeye/chopshop",
+ "star": 40,
+ "commits": 249,
+ "modify_time": "2014-06-21 01:39:11",
+ "last_release": "\n RELEASE_3.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fideliscyber/yalda",
+ "star": 40,
+ "commits": 33,
+ "modify_time": "2017-08-02 04:45:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fi01/backdoor_mmap_tools",
+ "star": 40,
+ "commits": 211,
+ "modify_time": "2016-04-10 08:52:36",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/felipedaragon/plua-xe",
+ "star": 40,
+ "commits": 31,
+ "modify_time": "2018-05-24 23:29:08",
+ "last_release": "",
+ "lang": "Pascal"
+ },
+ {
+ "link": "https://github.com/farisv/cj2018-final-ctf",
+ "star": 40,
+ "commits": 14,
+ "modify_time": "2018-10-18 05:15:31",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/fabiobaroni/was",
+ "star": 40,
+ "commits": 6,
+ "modify_time": "2016-09-14 00:37:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/evilpacket/redis-sha-crack",
+ "star": 40,
+ "commits": 17,
+ "modify_time": "2013-11-03 00:51:19",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/evi1m0/webshell",
+ "star": 40,
+ "commits": 154,
+ "modify_time": "2014-09-24 08:25:44",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/embedi/meitools",
+ "star": 40,
+ "commits": null,
+ "modify_time": "2017-07-27 23:56:50",
+ "last_release": "",
+ "lang": "c++"
+ },
+ {
+ "link": "https://github.com/elastic/elasticsearch-groovy",
+ "star": 40,
+ "commits": 133,
+ "modify_time": "2019-09-10 10:57:32",
+ "last_release": "\n v1.7.5\n ",
+ "lang": "Groovy"
+ },
+ {
+ "link": "https://github.com/dzzie/re_plugins",
+ "star": 40,
+ "commits": 81,
+ "modify_time": "2019-05-30 12:29:38",
+ "last_release": "",
+ "lang": "Visual Basic .NET"
+ },
+ {
+ "link": "https://github.com/dzzie/hookexplorer",
+ "star": 40,
+ "commits": 6,
+ "modify_time": "2019-02-28 09:43:14",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/dutchcoders/troje",
+ "star": 40,
+ "commits": 5,
+ "modify_time": "2014-08-12 12:00:20",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/dhondta/rpl-attacks",
+ "star": 40,
+ "commits": 395,
+ "modify_time": "2019-11-20 14:28:17",
+ "last_release": "1.3.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/debasishm89/dotnetfuzz",
+ "star": 40,
+ "commits": 10,
+ "modify_time": "2018-11-10 16:10:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dbtsai/libdai",
+ "star": 40,
+ "commits": 391,
+ "modify_time": "2012-05-16 13:50:19",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/david-reguera-garcia-dreg/lsrootkit",
+ "star": 40,
+ "commits": 3,
+ "modify_time": "2018-05-31 12:59:16",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/d1w0u/arp-rootkit",
+ "star": 40,
+ "commits": null,
+ "modify_time": "None",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cowrie/docker-cowrie",
+ "star": 40,
+ "commits": 68,
+ "modify_time": "2019-09-06 14:40:03",
+ "last_release": "",
+ "lang": "Dockerfile"
+ },
+ {
+ "link": "https://github.com/colemination/poweroutlook",
+ "star": 40,
+ "commits": 9,
+ "modify_time": "2016-12-06 12:31:08",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/christhecoolhut/rocket-shot",
+ "star": 40,
+ "commits": 7,
+ "modify_time": "2019-03-26 19:45:59",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ccapton/brook-ok",
+ "star": 40,
+ "commits": 19,
+ "modify_time": "2018-12-02 14:47:15",
+ "last_release": "v1.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/azure/reverse-proxy-dotnet",
+ "star": 40,
+ "commits": 55,
+ "modify_time": "2019-04-08 21:27:00",
+ "last_release": "1.0.0-preview.2",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/atom/loophole",
+ "star": 40,
+ "commits": 19,
+ "modify_time": "2015-07-29 01:35:10",
+ "last_release": "\n v1.1.0\n ",
+ "lang": "CoffeeScript"
+ },
+ {
+ "link": "https://github.com/aqcurate/lsb-steganography",
+ "star": 40,
+ "commits": 36,
+ "modify_time": "2018-05-14 08:05:11",
+ "last_release": "v3.0.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/anwarmohamed/packetyzer",
+ "star": 40,
+ "commits": 87,
+ "modify_time": "2014-09-04 11:25:07",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/anudeepnd/pihole-unbound",
+ "star": 40,
+ "commits": 9,
+ "modify_time": "2019-02-12 14:46:52",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ambulong/phpmyxss",
+ "star": 40,
+ "commits": 10,
+ "modify_time": "2016-09-24 16:03:58",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/alexbredo/honeypot-camera",
+ "star": 40,
+ "commits": 9,
+ "modify_time": "2015-06-18 17:51:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/agustingianni/memrepl",
+ "star": 40,
+ "commits": 7,
+ "modify_time": "2017-10-14 11:16:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/agjmills/form-scrape",
+ "star": 40,
+ "commits": 2,
+ "modify_time": "2017-07-13 14:12:04",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/adityashrm21/raspberrypi-packet-sniffer",
+ "star": 40,
+ "commits": 60,
+ "modify_time": "2018-12-10 08:34:28",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/aaronsoria/panalizer",
+ "star": 40,
+ "commits": 12,
+ "modify_time": "2019-05-06 03:54:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/aaaddress1/puzzcode",
+ "star": 40,
+ "commits": 25,
+ "modify_time": "2017-12-22 20:22:07",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/0ang3el/hqli-playground",
+ "star": 40,
+ "commits": 5,
+ "modify_time": "2016-05-15 16:30:47",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/ysh329/darknet2caffe",
+ "star": 39,
+ "commits": 57,
+ "modify_time": "2018-11-18 00:38:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/googlecloudplatform/stackdriver-reverse-proxy",
+ "star": 39,
+ "commits": 27,
+ "modify_time": "2018-03-13 01:43:55",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/joxeankoret/tahh",
+ "star": 39,
+ "commits": 3,
+ "modify_time": "2015-06-19 08:32:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/honeynet/yapdns",
+ "star": 39,
+ "commits": 3,
+ "modify_time": "2015-06-19 14:36:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xl7dev/sectools",
+ "star": 39,
+ "commits": 20,
+ "modify_time": "2017-04-13 05:17:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/meituan-dianping/lyrebird-ios",
+ "star": 39,
+ "commits": 23,
+ "modify_time": "2019-10-12 02:48:19",
+ "last_release": "v0.2.9",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tarunkant/endpoint-finder",
+ "star": 39,
+ "commits": 8,
+ "modify_time": "2018-11-16 15:49:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zmap/zannotate",
+ "star": 39,
+ "commits": 78,
+ "modify_time": "2019-03-02 06:57:15",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/cldrn/davtest",
+ "star": 39,
+ "commits": 6,
+ "modify_time": "2018-10-08 18:37:10",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/thelinuxchoice/droidcam",
+ "star": 39,
+ "commits": 9,
+ "modify_time": "2019-01-07 18:54:47",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/cbeuw/cloak-android",
+ "star": 39,
+ "commits": 3,
+ "modify_time": "2019-02-17 10:19:26",
+ "last_release": "v2.1.1",
+ "lang": "Kotlin"
+ },
+ {
+ "link": "https://github.com/liang2580/btpanel-ss",
+ "star": 39,
+ "commits": 9,
+ "modify_time": "2018-02-03 08:38:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lvd2/ay-3-8910_reverse_engineered",
+ "star": 39,
+ "commits": 5,
+ "modify_time": "2019-11-26 17:54:03",
+ "last_release": "",
+ "lang": "Verilog"
+ },
+ {
+ "link": "https://github.com/zhongxunking/ids",
+ "star": 39,
+ "commits": 48,
+ "modify_time": "2019-02-26 16:30:33",
+ "last_release": "v1.2.2.RELEASE",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/scalesec/vulnado",
+ "star": 39,
+ "commits": 17,
+ "modify_time": "2019-07-18 23:12:23",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/x41sec/beanstack",
+ "star": 39,
+ "commits": 65,
+ "modify_time": "2019-09-12 08:21:30",
+ "last_release": "v0.5.1",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/pelock/simple-polymorphic-engine-spe32",
+ "star": 39,
+ "commits": 2,
+ "modify_time": "2019-10-21 21:48:41",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/InteliSecureLabs/Pineapple-Confs",
+ "star": 39,
+ "commits": 9,
+ "modify_time": "2013-06-16 14:55:37",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/FSecureLABS/3d-accelerated-exploitation",
+ "star": 39,
+ "commits": 1,
+ "modify_time": "2019-02-22 10:07:35",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/MSAdministrator/PPRT",
+ "star": 39,
+ "commits": 26,
+ "modify_time": "2017-07-30 04:03:37",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/mwsrc/BetterRAT",
+ "star": 39,
+ "commits": 1,
+ "modify_time": "2016-12-24 07:52:21",
+ "last_release": "",
+ "lang": "Visual Basic .NET"
+ },
+ {
+ "link": "https://github.com/tijme/similar-request-excluder",
+ "star": 39,
+ "commits": 88,
+ "modify_time": "2019-02-01 21:49:18",
+ "last_release": "v1.1.0",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/ironPeakServices/iron-alpine",
+ "star": 39,
+ "commits": 56,
+ "modify_time": "2019-12-06 10:14:14",
+ "last_release": "",
+ "lang": "Dockerfile"
+ },
+ {
+ "link": "https://github.com/zynamics/bincrowd-plugin-ida",
+ "star": 39,
+ "commits": 88,
+ "modify_time": "2012-01-10 11:17:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zjx20/socks-cli",
+ "star": 39,
+ "commits": 31,
+ "modify_time": "2017-10-25 10:45:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zibility/anti-rootkits",
+ "star": 39,
+ "commits": 3,
+ "modify_time": "2016-08-01 07:11:07",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/xvilka/hacklu",
+ "star": 39,
+ "commits": 117,
+ "modify_time": "2015-10-23 20:47:20",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/xpreeks/g0blin",
+ "star": 39,
+ "commits": 56,
+ "modify_time": "2018-01-10 20:10:05",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/xme/cuckoomx",
+ "star": 39,
+ "commits": 3,
+ "modify_time": "2012-08-02 13:03:36",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/x43x61x69/codeunsign",
+ "star": 39,
+ "commits": 4,
+ "modify_time": "2015-03-21 20:25:20",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/wuntee/burpauthzplugin",
+ "star": 39,
+ "commits": 42,
+ "modify_time": "2013-07-22 21:00:44",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/wraith-wireless/wraith",
+ "star": 39,
+ "commits": 473,
+ "modify_time": "2016-07-17 16:39:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/viaforensics/android-encryption",
+ "star": 39,
+ "commits": 4,
+ "modify_time": "2014-02-04 14:33:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vah13/sap_vulnerabilities",
+ "star": 39,
+ "commits": 43,
+ "modify_time": "2018-01-23 11:27:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/userlandkernel/plataoplomo",
+ "star": 39,
+ "commits": 65,
+ "modify_time": "2019-12-03 15:34:11",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/tum-i22/obfuscation-benchmarks",
+ "star": 39,
+ "commits": 35,
+ "modify_time": "2018-02-25 15:15:07",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/tomasreimers/tensorflow-graph-compression",
+ "star": 39,
+ "commits": 2,
+ "modify_time": "2017-01-02 16:44:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tjluoma/bash-fix",
+ "star": 39,
+ "commits": 40,
+ "modify_time": "2014-10-06 00:23:14",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/timothyye/namebeta",
+ "star": 39,
+ "commits": 35,
+ "modify_time": "2019-02-27 06:14:05",
+ "last_release": "V0.3",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/tiked/androrw",
+ "star": 39,
+ "commits": null,
+ "modify_time": "2017-07-10 16:32:02",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/therealsaumil/arm_shellcode",
+ "star": 39,
+ "commits": 6,
+ "modify_time": "2018-09-18 11:08:30",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/thecjw/ida_android_script",
+ "star": 39,
+ "commits": 10,
+ "modify_time": "2017-08-09 09:16:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/techbliss/adb_helper_qt_super_version",
+ "star": 39,
+ "commits": 17,
+ "modify_time": "2015-04-05 07:30:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/takahiroharuyama/openioc_scan",
+ "star": 39,
+ "commits": 31,
+ "modify_time": "2016-02-25 14:14:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/superkojiman/rfishell",
+ "star": 39,
+ "commits": 7,
+ "modify_time": "2016-10-01 19:03:04",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/sundaysec/andspoilt",
+ "star": 39,
+ "commits": 32,
+ "modify_time": "2018-08-20 22:29:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/stephenrkell/trap-syscalls",
+ "star": 39,
+ "commits": 184,
+ "modify_time": "2019-07-30 15:57:35",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/sophoslabs/cve-2019-0888",
+ "star": 39,
+ "commits": 3,
+ "modify_time": "2019-07-09 18:40:05",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/sneaksensed/hiddentear",
+ "star": 39,
+ "commits": 11,
+ "modify_time": "2016-08-23 14:31:36",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/smartinm/diskcryptor",
+ "star": 39,
+ "commits": 12,
+ "modify_time": "2013-12-31 23:00:00",
+ "last_release": "\n 1.0.802.118\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/simutrace/simutrace",
+ "star": 39,
+ "commits": 11,
+ "modify_time": "2015-09-09 11:02:01",
+ "last_release": "\n r3.2.2\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/silv3rhorn/artifactextractor",
+ "star": 39,
+ "commits": 48,
+ "modify_time": "2019-07-07 08:57:20",
+ "last_release": "20190707",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/shadow-workers/shadow-workers",
+ "star": 39,
+ "commits": 83,
+ "modify_time": "2019-04-25 05:14:28",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/senjaxus/delphi_remote_access_pc",
+ "star": 39,
+ "commits": null,
+ "modify_time": "2015-10-02 11:21:55",
+ "last_release": "",
+ "lang": "Pascal"
+ },
+ {
+ "link": "https://github.com/secgroup/mignis",
+ "star": 39,
+ "commits": 79,
+ "modify_time": "2019-04-01 10:30:04",
+ "last_release": "\n 0.9.5\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sdnewhop/grinder",
+ "star": 39,
+ "commits": 292,
+ "modify_time": "2019-11-28 18:32:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sauldoescode/rilti.js",
+ "star": 39,
+ "commits": 377,
+ "modify_time": "2018-11-14 05:10:09",
+ "last_release": "0.9.5",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/sam-b/hacksysdriverexploits",
+ "star": 39,
+ "commits": 11,
+ "modify_time": "2017-06-01 15:50:36",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/sadfud/exploits",
+ "star": 39,
+ "commits": 52,
+ "modify_time": "2019-03-24 21:09:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rr-/ida-images",
+ "star": 39,
+ "commits": 59,
+ "modify_time": "2019-03-31 10:42:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rootkiter/reverse-engineering",
+ "star": 39,
+ "commits": 26,
+ "modify_time": "2017-01-10 06:13:24",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/romanzaikin/ollydbg-v1.10-with-best-plugins-and-immunity-debugger-theme-",
+ "star": 39,
+ "commits": 14,
+ "modify_time": "2018-11-21 18:25:39",
+ "last_release": "",
+ "lang": "Batchfile"
+ },
+ {
+ "link": "https://github.com/riusksk/flashscanner",
+ "star": 39,
+ "commits": 11,
+ "modify_time": "2016-06-26 03:10:24",
+ "last_release": "",
+ "lang": "ActionScript"
+ },
+ {
+ "link": "https://github.com/ridter/webshell",
+ "star": 39,
+ "commits": 200,
+ "modify_time": "2015-04-02 14:28:38",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/resultsmayvary/ctf",
+ "star": 39,
+ "commits": 11,
+ "modify_time": "2017-09-26 08:14:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rebootuser/hashmash",
+ "star": 39,
+ "commits": 8,
+ "modify_time": "2016-08-30 18:51:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/raspberrypi/usbbootgui",
+ "star": 39,
+ "commits": 12,
+ "modify_time": "2019-02-12 16:46:06",
+ "last_release": "",
+ "lang": "M4"
+ },
+ {
+ "link": "https://github.com/ranginang67/firecrack",
+ "star": 39,
+ "commits": 112,
+ "modify_time": "2018-12-16 19:54:57",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/quhw/xtunnel",
+ "star": 39,
+ "commits": 6,
+ "modify_time": "2017-08-12 06:05:46",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/proteansec/fuzzyftp",
+ "star": 39,
+ "commits": 12,
+ "modify_time": "2014-01-04 15:01:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/portswigger/authz",
+ "star": 39,
+ "commits": 44,
+ "modify_time": "2017-02-13 12:27:55",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/phylliida/unityvoip",
+ "star": 39,
+ "commits": 10,
+ "modify_time": "2017-08-03 17:32:25",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/pedrorivera/siafpgaminer",
+ "star": 39,
+ "commits": 8,
+ "modify_time": "2018-02-07 06:06:14",
+ "last_release": "",
+ "lang": "VHDL"
+ },
+ {
+ "link": "https://github.com/outflanknl/doh_c2_trigger",
+ "star": 39,
+ "commits": 9,
+ "modify_time": "2018-10-25 14:22:21",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/opencoff/go-tunnel",
+ "star": 39,
+ "commits": 38,
+ "modify_time": "2019-10-23 03:55:17",
+ "last_release": "\n v0.4.1\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/oleavr/frida-agent-example",
+ "star": 39,
+ "commits": 19,
+ "modify_time": "2019-08-21 13:20:33",
+ "last_release": "",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/oasis-open/cti-documentation",
+ "star": 39,
+ "commits": 213,
+ "modify_time": "2019-08-21 18:33:19",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/ntdiff/ntdiff",
+ "star": 39,
+ "commits": 36,
+ "modify_time": "2019-12-06 19:18:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/noobscode/kalel",
+ "star": 39,
+ "commits": 151,
+ "modify_time": "2019-02-27 07:10:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/netspi/spoofspotter",
+ "star": 39,
+ "commits": 14,
+ "modify_time": "2018-06-13 03:51:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nao-sec/mal_getter",
+ "star": 39,
+ "commits": 88,
+ "modify_time": "2018-02-09 11:38:45",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/mthbernardes/houseproxy",
+ "star": 39,
+ "commits": 6,
+ "modify_time": "2017-12-04 13:10:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mrackwitz/jeroboam",
+ "star": 39,
+ "commits": 41,
+ "modify_time": "2019-10-03 16:43:22",
+ "last_release": "v1.1",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/mpgn/beast-poc",
+ "star": 39,
+ "commits": 11,
+ "modify_time": "2019-01-30 21:36:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/moriyoshi/devproxy",
+ "star": 39,
+ "commits": 50,
+ "modify_time": "2019-02-02 05:27:11",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/mindflavor/tdsbridge",
+ "star": 39,
+ "commits": 5,
+ "modify_time": "2019-05-30 20:11:17",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/milkdevil/ultimateapplockerbypasslist",
+ "star": 39,
+ "commits": 23,
+ "modify_time": "2017-12-21 14:30:34",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/micahflee/trollwot",
+ "star": 39,
+ "commits": 60,
+ "modify_time": "2014-05-09 17:14:50",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/meesong/nt-crucial-modules",
+ "star": 39,
+ "commits": 12,
+ "modify_time": "2019-06-16 05:05:57",
+ "last_release": "",
+ "lang": "Batchfile"
+ },
+ {
+ "link": "https://github.com/marco-lancini/docker_burp",
+ "star": 39,
+ "commits": 15,
+ "modify_time": "2019-05-06 20:15:37",
+ "last_release": "",
+ "lang": "Dockerfile"
+ },
+ {
+ "link": "https://github.com/lydell/eslump",
+ "star": 39,
+ "commits": 82,
+ "modify_time": "2019-11-02 16:18:38",
+ "last_release": "\n v2.0.0\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/lj147/awesome-wechat",
+ "star": 39,
+ "commits": 19,
+ "modify_time": "2019-02-22 04:19:29",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/lawliet89/llvm-obfuscator",
+ "star": 39,
+ "commits": 222,
+ "modify_time": "2016-09-13 06:57:05",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/laomu1988/koa2-proxy",
+ "star": 39,
+ "commits": 103,
+ "modify_time": "2017-11-09 13:27:25",
+ "last_release": "\n v1.1.5\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/laginimaineb/waroftheworlds",
+ "star": 39,
+ "commits": 2,
+ "modify_time": "2016-05-05 19:10:24",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/killeroo/powerping",
+ "star": 39,
+ "commits": 319,
+ "modify_time": "2019-08-13 13:03:01",
+ "last_release": "v1.3.0",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/keli/furion",
+ "star": 39,
+ "commits": 97,
+ "modify_time": "2019-01-25 07:40:47",
+ "last_release": "v1.5",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kdkanishka/virustotal-public-api-v2.0-client",
+ "star": 39,
+ "commits": 83,
+ "modify_time": "2016-07-29 08:26:08",
+ "last_release": "1.0.GA",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/joanbono/gurp",
+ "star": 39,
+ "commits": 49,
+ "modify_time": "2019-02-11 18:19:25",
+ "last_release": "v1.1.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/jevalenciap/iptodomain",
+ "star": 39,
+ "commits": 18,
+ "modify_time": "2017-01-11 22:37:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jas502n/st2-048",
+ "star": 39,
+ "commits": 33,
+ "modify_time": "2017-07-07 21:38:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jaredhaight/powershellclasslab",
+ "star": 39,
+ "commits": 285,
+ "modify_time": "2018-05-16 14:50:14",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/jamespayor/vector-homomorphic-encryption",
+ "star": 39,
+ "commits": 141,
+ "modify_time": "2017-06-26 20:32:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jakejarvis/subtake",
+ "star": 39,
+ "commits": 13,
+ "modify_time": "2019-09-02 12:36:22",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/izsh/ida-python-scripts",
+ "star": 39,
+ "commits": 2,
+ "modify_time": "2009-07-19 02:52:11",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/isecpartners/scout",
+ "star": 39,
+ "commits": 4,
+ "modify_time": "2014-02-19 18:29:44",
+ "last_release": "",
+ "lang": "Clojure"
+ },
+ {
+ "link": "https://github.com/igorbrigadir/twitter-advanced-search",
+ "star": 39,
+ "commits": 52,
+ "modify_time": "2019-10-21 20:00:10",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/hugsy/codebro",
+ "star": 39,
+ "commits": 61,
+ "modify_time": "2017-07-20 18:55:20",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/houbbit/haveibeenpwned",
+ "star": 39,
+ "commits": 8,
+ "modify_time": "2017-01-04 16:00:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hlandau/ortega",
+ "star": 39,
+ "commits": 16,
+ "modify_time": "2019-09-11 04:37:43",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hasherezade/petya_recovery",
+ "star": 39,
+ "commits": 42,
+ "modify_time": "2016-09-26 08:45:44",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/hackingthings/publications",
+ "star": 39,
+ "commits": 8,
+ "modify_time": "2019-08-14 17:45:52",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/grrrdog/zeronights-hackquest-2016",
+ "star": 39,
+ "commits": 8,
+ "modify_time": "2017-03-24 11:16:15",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/gmdutra/docker-inurlbr",
+ "star": 39,
+ "commits": null,
+ "modify_time": "2018-11-04 23:06:01",
+ "last_release": "",
+ "lang": "Dockerfile"
+ },
+ {
+ "link": "https://github.com/gh2o/rvi_capture",
+ "star": 39,
+ "commits": 13,
+ "modify_time": "2019-09-13 09:31:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gdbinit/gimmedebugah",
+ "star": 39,
+ "commits": 7,
+ "modify_time": "2013-05-28 16:27:31",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/function61/holepunch-client",
+ "star": 39,
+ "commits": 42,
+ "modify_time": "2019-05-15 11:55:03",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/exploitagency/github-esploit",
+ "star": 39,
+ "commits": 11,
+ "modify_time": "2017-07-12 20:47:50",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/elejke/docker-socks5",
+ "star": 39,
+ "commits": 12,
+ "modify_time": "2018-10-08 19:42:23",
+ "last_release": "",
+ "lang": "Dockerfile"
+ },
+ {
+ "link": "https://github.com/egebalci/keylogger",
+ "star": 39,
+ "commits": 7,
+ "modify_time": "2019-07-25 09:42:22",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/e-f-a/v3",
+ "star": 39,
+ "commits": 1657,
+ "modify_time": "2018-06-01 20:33:10",
+ "last_release": "3.0.2.6-Release.3",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/d1nfinite/sec-interview",
+ "star": 39,
+ "commits": 11,
+ "modify_time": "2019-11-03 11:48:08",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/dissectmalware/malwarecmdmonitor",
+ "star": 39,
+ "commits": 17,
+ "modify_time": "2018-09-18 06:02:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dissectmalware/batch_deobfuscator",
+ "star": 39,
+ "commits": 13,
+ "modify_time": "2018-10-11 02:24:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/directdefense/superserial-active",
+ "star": 39,
+ "commits": 15,
+ "modify_time": "2016-11-22 22:42:21",
+ "last_release": "0.5",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/dionach/passhunt",
+ "star": 39,
+ "commits": 5,
+ "modify_time": "2014-07-11 09:07:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/digitalbond/canbus-utils",
+ "star": 39,
+ "commits": 14,
+ "modify_time": "2015-07-02 23:28:48",
+ "last_release": "0.2.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/dfinke/onegetgistprovider",
+ "star": 39,
+ "commits": 35,
+ "modify_time": "2015-12-22 12:43:46",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/destructivevoice/destructivefarm",
+ "star": 39,
+ "commits": 82,
+ "modify_time": "2018-11-03 23:21:02",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/cyanogenmod/android_external_openssl",
+ "star": 39,
+ "commits": 626,
+ "modify_time": "2014-10-23 16:09:57",
+ "last_release": "\n cm-11.0-XNPH05Q-tomato-9828f8e9cc\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/csh/stegosploit",
+ "star": 39,
+ "commits": 10,
+ "modify_time": "2015-06-04 15:28:24",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/csecgroup/wafid",
+ "star": 39,
+ "commits": 6,
+ "modify_time": "2018-10-16 03:33:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cryptokrishtopher/binancescanner",
+ "star": 39,
+ "commits": 36,
+ "modify_time": "2018-03-03 19:14:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/coveros/zap-sonar-plugin",
+ "star": 39,
+ "commits": 24,
+ "modify_time": "2019-07-28 21:57:43",
+ "last_release": "sonar-zap-plugin-1.2.0",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/corelan/pin",
+ "star": 39,
+ "commits": 32,
+ "modify_time": "2015-12-29 03:12:09",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/cn33liz/hsevd-arbitraryoverwritegdi",
+ "star": 39,
+ "commits": 8,
+ "modify_time": "2017-02-13 15:56:37",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cmlh/maltego-haveibeenpwned",
+ "star": 39,
+ "commits": 113,
+ "modify_time": "2019-08-17 03:30:01",
+ "last_release": "2.5",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/chybeta/cve-2018-1000006-demo",
+ "star": 39,
+ "commits": 3,
+ "modify_time": "2018-01-25 03:29:12",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/chichou/10.13.5-sip-bypass",
+ "star": 39,
+ "commits": null,
+ "modify_time": "2018-06-14 08:34:09",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/brianwrf/sambahunter",
+ "star": 39,
+ "commits": 8,
+ "modify_time": "2017-05-30 16:13:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/breach/mod_strip",
+ "star": 39,
+ "commits": 111,
+ "modify_time": "2014-10-08 14:16:41",
+ "last_release": "\n v0.2.12\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/boy-hack/gowhatweb",
+ "star": 39,
+ "commits": 15,
+ "modify_time": "2019-01-11 14:16:17",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/bonelee/dns_tunnel_dectect_with_cnn",
+ "star": 39,
+ "commits": 4,
+ "modify_time": "2018-01-03 03:33:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bit4woo/burp_collaborator_http_api",
+ "star": 39,
+ "commits": 9,
+ "modify_time": "2018-05-27 14:33:43",
+ "last_release": "v0.2",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/binarymist/holisticinfosec-for-webdevelopers-fascicle0",
+ "star": 39,
+ "commits": 384,
+ "modify_time": "2019-03-07 10:02:19",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/bi-zone/rdtsc-checkvirt-poc",
+ "star": 39,
+ "commits": 16,
+ "modify_time": "2018-05-22 12:51:02",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/berke/jsure",
+ "star": 39,
+ "commits": 33,
+ "modify_time": "2011-04-08 12:39:09",
+ "last_release": "",
+ "lang": "OCaml"
+ },
+ {
+ "link": "https://github.com/bend/rar_crack",
+ "star": 39,
+ "commits": 9,
+ "modify_time": "2012-09-17 18:13:13",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/bdutro/ibm_pw_clear",
+ "star": 39,
+ "commits": 6,
+ "modify_time": "2019-11-28 15:24:02",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/bcsecorg/ethereum_devp2p_wireshark_dissector",
+ "star": 39,
+ "commits": 1,
+ "modify_time": "2018-06-12 02:16:20",
+ "last_release": "",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/bbva/patton-cli",
+ "star": 39,
+ "commits": 30,
+ "modify_time": "2019-05-06 14:05:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/averagesecurityguy/searchscan",
+ "star": 39,
+ "commits": 12,
+ "modify_time": "2017-09-18 19:21:34",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/auth0-blog/nodejs-awesome-polls",
+ "star": 39,
+ "commits": 2,
+ "modify_time": "2016-11-14 23:50:59",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/attackercan/cpp-sql-fuzzer",
+ "star": 39,
+ "commits": 40,
+ "modify_time": "2016-10-10 14:47:12",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/arinerron/cve-2016-5195",
+ "star": 39,
+ "commits": 45,
+ "modify_time": "2017-04-23 00:56:27",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/apxar/xlog",
+ "star": 39,
+ "commits": 7,
+ "modify_time": "2018-02-01 04:46:05",
+ "last_release": "",
+ "lang": "Roff"
+ },
+ {
+ "link": "https://github.com/appsecco/json-flash-csrf-poc",
+ "star": 39,
+ "commits": 5,
+ "modify_time": "2018-02-05 13:07:30",
+ "last_release": "",
+ "lang": "ActionScript"
+ },
+ {
+ "link": "https://github.com/aninstein/network-security-situation-awareness-system",
+ "star": 39,
+ "commits": 6,
+ "modify_time": "2017-10-28 02:53:17",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/andnxor/andnxor_dc24_badge",
+ "star": 39,
+ "commits": 7,
+ "modify_time": "2016-12-31 17:06:57",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/absozed/steamprivesc",
+ "star": 39,
+ "commits": 9,
+ "modify_time": "2019-08-12 13:51:06",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://bitbucket.org/dcid/ossec-hids",
+ "star": 39,
+ "commits": null,
+ "modify_time": "2018-10-14 23:00:07.156000",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/kamingchan/shadowsocks-munager",
+ "star": 38,
+ "commits": 106,
+ "modify_time": "2019-10-08 07:41:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hackertarget/nmap-nse-scripts",
+ "star": 38,
+ "commits": 3,
+ "modify_time": "2019-11-10 03:05:39",
+ "last_release": "",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/verideth/dll_hook-rs",
+ "star": 38,
+ "commits": 4,
+ "modify_time": "2019-12-11 06:33:53",
+ "last_release": "",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/cryptogenic/ps4-playground-3.55",
+ "star": 38,
+ "commits": 22,
+ "modify_time": "2016-08-13 02:48:15",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/internetwache/ssh-honeypot",
+ "star": 38,
+ "commits": 3,
+ "modify_time": "2015-01-04 11:55:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/trailofbits/algo-ng",
+ "star": 38,
+ "commits": 61,
+ "modify_time": "2019-08-20 10:58:59",
+ "last_release": "",
+ "lang": "HCL"
+ },
+ {
+ "link": "https://github.com/wtsxdev/exploit-development",
+ "star": 38,
+ "commits": 3,
+ "modify_time": "2017-01-27 21:12:52",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/fireeye/win10_volatility",
+ "star": 38,
+ "commits": 2796,
+ "modify_time": "2019-09-26 17:15:28",
+ "last_release": "\n 2.6.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/aliyuchang33/hv2ray",
+ "star": 38,
+ "commits": 51,
+ "modify_time": "2019-09-12 10:34:16",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/oasis-open/cti-taxii-client",
+ "star": 38,
+ "commits": 172,
+ "modify_time": "2019-08-30 17:19:18",
+ "last_release": "v0.5.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/k8gege/ciscoexploit",
+ "star": 38,
+ "commits": 13,
+ "modify_time": "2019-05-21 14:52:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fonta1n3/fullynoded",
+ "star": 38,
+ "commits": 84,
+ "modify_time": "2019-11-24 12:51:06",
+ "last_release": "",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/lucasnaja/useful-dev-tools",
+ "star": 38,
+ "commits": 306,
+ "modify_time": "2019-11-01 11:55:58",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/iwinston/javascript-code-protection-example",
+ "star": 38,
+ "commits": 18,
+ "modify_time": "2019-09-28 02:48:56",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/walkerfuz/PyDbgEng",
+ "star": 38,
+ "commits": 28,
+ "modify_time": "2017-12-29 05:22:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vysecurity/CobaltSplunk",
+ "star": 38,
+ "commits": 2,
+ "modify_time": "2018-05-31 12:13:56",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ContionMig/LSASS-Usermode-Bypass",
+ "star": 38,
+ "commits": 5,
+ "modify_time": "2018-08-09 02:02:12",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/hluwa/Smali-Anti-UsageSeach",
+ "star": 38,
+ "commits": 19,
+ "modify_time": "2017-04-28 13:18:17",
+ "last_release": "1.1",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/PegasusLab/WiFi-Miner-Detector",
+ "star": 38,
+ "commits": 10,
+ "modify_time": "2018-03-16 10:30:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/projecthorus/wenet",
+ "star": 38,
+ "commits": 136,
+ "modify_time": "2019-08-18 08:24:21",
+ "last_release": "\n v0.5\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dadas190/penetrator-wps",
+ "star": 38,
+ "commits": 10,
+ "modify_time": "2015-09-13 23:35:00",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/LiveMirror/pcshare",
+ "star": 38,
+ "commits": 2,
+ "modify_time": "2014-09-18 02:31:05",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/lijuno/nRF24_BLE",
+ "star": 38,
+ "commits": 11,
+ "modify_time": "2018-05-21 02:59:12",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://gitlab.com/initstring/evil-ssdp",
+ "star": 38,
+ "commits": null,
+ "modify_time": "2018-12-02 18:55:31",
+ "last_release": "",
+ "lang": "python"
+ },
+ {
+ "link": "https://github.com/zhuzhibo0/sslcloud",
+ "star": 38,
+ "commits": 3,
+ "modify_time": "2016-07-01 06:19:18",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/zeroq/amun",
+ "star": 38,
+ "commits": 66,
+ "modify_time": "2019-04-13 09:45:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ytisf/muninn",
+ "star": 38,
+ "commits": 9,
+ "modify_time": "2017-10-18 07:47:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/yaleimeng/free_proxy_pool",
+ "star": 38,
+ "commits": 66,
+ "modify_time": "2019-11-05 14:28:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xyntax/jboss-exp",
+ "star": 38,
+ "commits": 6,
+ "modify_time": "2015-12-16 21:30:34",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/xpaw/httpsys",
+ "star": 38,
+ "commits": 14,
+ "modify_time": "2015-05-07 11:24:58",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/xionox/moz-tor-relays",
+ "star": 38,
+ "commits": 8,
+ "modify_time": "2015-02-12 15:29:36",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/x43x61x69/mach-o-prettifier",
+ "star": 38,
+ "commits": 1,
+ "modify_time": "2014-04-28 04:53:43",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/wubonetcn/luawaf",
+ "star": 38,
+ "commits": 34,
+ "modify_time": "2019-09-01 06:21:40",
+ "last_release": "",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/voorivex/andrill",
+ "star": 38,
+ "commits": null,
+ "modify_time": "2019-09-11 12:37:39",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/tryghost/gscan",
+ "star": 38,
+ "commits": 435,
+ "modify_time": "2019-12-02 00:23:51",
+ "last_release": "v3.0.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/tripwire/padcheck",
+ "star": 38,
+ "commits": 8,
+ "modify_time": "2019-04-23 14:42:22",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/trailofbits/manticore-examples",
+ "star": 38,
+ "commits": 26,
+ "modify_time": "2019-11-13 16:53:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/thundercls/x64dbg_vs_dark",
+ "star": 38,
+ "commits": 3,
+ "modify_time": "2016-11-29 05:23:43",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/thugs-rumal/rumal",
+ "star": 38,
+ "commits": 291,
+ "modify_time": "2017-01-24 18:38:18",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/thomasdarimont/spring-boot-admin-keycloak-example",
+ "star": 38,
+ "commits": 24,
+ "modify_time": "2019-04-04 20:21:41",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/tevora-threat/splunk_pentest_app",
+ "star": 38,
+ "commits": 6,
+ "modify_time": "2016-04-22 00:41:06",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/terjanq/flag-capture",
+ "star": 38,
+ "commits": 222,
+ "modify_time": "2019-09-16 10:49:58",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/team-firebugs/burp-lfi-tests",
+ "star": 38,
+ "commits": 2,
+ "modify_time": "2016-10-04 15:03:41",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/te-k/pe",
+ "star": 38,
+ "commits": 34,
+ "modify_time": "2019-11-19 00:32:10",
+ "last_release": "",
+ "lang": "YARA"
+ },
+ {
+ "link": "https://github.com/tanninone/usvfs",
+ "star": 38,
+ "commits": 104,
+ "modify_time": "2017-08-13 08:41:44",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/tanc7/arms-commander",
+ "star": 38,
+ "commits": null,
+ "modify_time": "2018-10-25 02:39:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/taichisocks/shadowsocks",
+ "star": 38,
+ "commits": 11,
+ "modify_time": "2015-12-12 11:30:40",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/struct/hardenedpartitionalloc",
+ "star": 38,
+ "commits": 45,
+ "modify_time": "2018-03-03 21:44:19",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/stefanberger/libtpms",
+ "star": 38,
+ "commits": 475,
+ "modify_time": "2019-12-06 01:54:14",
+ "last_release": "\n v0.7.0\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/spiderlabs/iocs-idps",
+ "star": 38,
+ "commits": 25,
+ "modify_time": "2019-09-25 19:37:06",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/spender-sandbox/cuckoomon-modified",
+ "star": 38,
+ "commits": 1026,
+ "modify_time": "2017-04-26 10:39:25",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/shjalayeri/pwnypot",
+ "star": 38,
+ "commits": 3,
+ "modify_time": "2013-11-19 12:27:59",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/shellbombs/strongod",
+ "star": 38,
+ "commits": 7,
+ "modify_time": "2017-10-25 10:10:09",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/sh3llc0d3r1337/windows_reverse_shell_1",
+ "star": 38,
+ "commits": 2,
+ "modify_time": "2015-11-22 14:50:13",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/scubsrgroup/taint-analyse",
+ "star": 38,
+ "commits": 5,
+ "modify_time": "2017-03-16 02:04:42",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/scrapinghub/crawlera-headless-proxy",
+ "star": 38,
+ "commits": 224,
+ "modify_time": "2019-11-28 13:35:32",
+ "last_release": "1.2.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/scalys7/privilege-escalation-framework",
+ "star": 38,
+ "commits": 6,
+ "modify_time": "2016-11-26 12:43:02",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/sam-b/cve-2014-4113",
+ "star": 38,
+ "commits": 5,
+ "modify_time": "2016-02-14 20:21:20",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/saelo/ida_scripts",
+ "star": 38,
+ "commits": 3,
+ "modify_time": "2017-09-20 16:36:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/saeeddhqan/maryam",
+ "star": 38,
+ "commits": 12,
+ "modify_time": "2019-12-01 07:48:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rordi/docker-antivirus",
+ "star": 38,
+ "commits": 49,
+ "modify_time": "2018-11-22 10:41:38",
+ "last_release": "v2.0",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/rootup/redteam",
+ "star": 38,
+ "commits": 17,
+ "modify_time": "2019-02-16 05:31:36",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/roothaxor/pystat",
+ "star": 38,
+ "commits": 8,
+ "modify_time": "2017-08-21 14:29:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ring04h/wyscan",
+ "star": 38,
+ "commits": 20,
+ "modify_time": "2016-11-21 08:31:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rh0dev/expdev",
+ "star": 38,
+ "commits": 5,
+ "modify_time": "2018-03-14 19:54:57",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/ravn/jsocks",
+ "star": 38,
+ "commits": 32,
+ "modify_time": "2012-11-09 14:53:06",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/rapid7/rex-powershell",
+ "star": 38,
+ "commits": 168,
+ "modify_time": "2019-11-18 15:31:31",
+ "last_release": "\n v0.1.83\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/q1271964185/cyberspace_security_learning",
+ "star": 38,
+ "commits": 10,
+ "modify_time": "2019-11-28 15:32:01",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/programa-stic/marvin-dynamic-analyzer",
+ "star": 38,
+ "commits": 10,
+ "modify_time": "2017-02-24 14:59:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/politoinc/elk-hunting",
+ "star": 38,
+ "commits": 31,
+ "modify_time": "2017-10-31 13:13:24",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/pnfsoftware/jnihelper",
+ "star": 38,
+ "commits": 6,
+ "modify_time": "2019-05-20 04:07:35",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/phishai/idn_generator",
+ "star": 38,
+ "commits": 6,
+ "modify_time": "2018-03-21 11:46:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hackertarget/nmap-nse-scripts",
+ "star": 38,
+ "commits": 3,
+ "modify_time": "2019-11-10 03:05:39",
+ "last_release": "",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/percona-qa/percona-qa",
+ "star": 38,
+ "commits": 2848,
+ "modify_time": "2019-12-09 13:16:13",
+ "last_release": "",
+ "lang": "PLpgSQL"
+ },
+ {
+ "link": "https://github.com/peperunas/pasticciotto",
+ "star": 38,
+ "commits": 69,
+ "modify_time": "2019-06-10 15:48:48",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/outflanknl/redfile",
+ "star": 38,
+ "commits": 7,
+ "modify_time": "2019-08-24 15:41:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/omerporze/brokentooth",
+ "star": 38,
+ "commits": 6,
+ "modify_time": "2018-09-13 15:58:56",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/olbat/nvdcve",
+ "star": 38,
+ "commits": 731,
+ "modify_time": "2019-12-09 16:57:15",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/nzn/nsuserdefaults-aesencryptor",
+ "star": 38,
+ "commits": 27,
+ "modify_time": "2014-03-08 22:47:26",
+ "last_release": "\n 0.0.4\n ",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/northbit/bulletin-scraper",
+ "star": 38,
+ "commits": 21,
+ "modify_time": "2016-03-31 13:02:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nonenotnull/regeorg",
+ "star": 38,
+ "commits": 28,
+ "modify_time": "2016-02-09 12:52:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nccgroup/pip3line",
+ "star": 38,
+ "commits": 92,
+ "modify_time": "2016-10-09 21:24:06",
+ "last_release": "2.7.1",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/mozilla/minion-backend",
+ "star": 38,
+ "commits": 527,
+ "modify_time": "2015-09-11 22:05:11",
+ "last_release": "\n v0.4\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mitchellkrogza/fail2ban.webexploits",
+ "star": 38,
+ "commits": 57,
+ "modify_time": "2018-05-08 09:08:42",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/mcw0/pwn-hisilicon-dvr",
+ "star": 38,
+ "commits": 2,
+ "modify_time": "2017-09-07 14:01:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mcous/kicad-lib",
+ "star": 38,
+ "commits": 301,
+ "modify_time": "2017-02-20 22:10:09",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/matthewdfuller/intellifuzz-xss",
+ "star": 38,
+ "commits": 15,
+ "modify_time": "2012-09-24 21:50:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mashed-potatoes/usbtrojan",
+ "star": 38,
+ "commits": 22,
+ "modify_time": "2019-10-24 11:54:20",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/marespiaut/rayman_disasm",
+ "star": 38,
+ "commits": 11,
+ "modify_time": "2019-07-29 11:45:51",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/mainframed/mfsniffer",
+ "star": 38,
+ "commits": 9,
+ "modify_time": "2013-03-25 16:28:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/macmade/obfuscate",
+ "star": 38,
+ "commits": 2,
+ "modify_time": "2017-11-08 20:16:13",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/m4n3dw0lf/sslkill",
+ "star": 38,
+ "commits": 49,
+ "modify_time": "2017-08-11 13:32:55",
+ "last_release": "\n v1.2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lukacci/cpuhunter",
+ "star": 38,
+ "commits": 104,
+ "modify_time": "2019-07-03 00:02:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/luigirizzo/netmap-ipfw",
+ "star": 38,
+ "commits": 79,
+ "modify_time": "2018-11-29 08:52:48",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/luh2/detectdynamicjs",
+ "star": 38,
+ "commits": 73,
+ "modify_time": "2018-12-17 09:21:36",
+ "last_release": "v0.10",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/luciouskami/apex-eacbypass",
+ "star": 38,
+ "commits": 11,
+ "modify_time": "2019-02-26 09:52:26",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/lorentzenman/payday",
+ "star": 38,
+ "commits": 15,
+ "modify_time": "2019-07-24 05:25:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lnxg33k/misc",
+ "star": 38,
+ "commits": 25,
+ "modify_time": "2018-10-11 09:19:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lmammino/webhook-tunnel",
+ "star": 38,
+ "commits": 17,
+ "modify_time": "2018-08-30 20:30:17",
+ "last_release": "1.3.2",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/llt4l/iculeak.py",
+ "star": 38,
+ "commits": 8,
+ "modify_time": "2019-05-04 23:26:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/linted/linuxprivchecker",
+ "star": 38,
+ "commits": 109,
+ "modify_time": "2018-10-05 23:47:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lifetyper/asynchttpsdns",
+ "star": 38,
+ "commits": 27,
+ "modify_time": "2017-05-03 06:15:37",
+ "last_release": "v0.0.9",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lavalamp-/ws-backend-community",
+ "star": 38,
+ "commits": 96,
+ "modify_time": "2017-10-11 20:42:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kurapicabs/x64_tracer",
+ "star": 38,
+ "commits": 11,
+ "modify_time": "2016-08-12 08:29:26",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/keyus/xss",
+ "star": 38,
+ "commits": 7,
+ "modify_time": "2016-12-30 03:58:46",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/kevthehermit/volatility_plugins",
+ "star": 38,
+ "commits": 25,
+ "modify_time": "2016-10-17 10:44:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kernelmachine/haveibeenpwned",
+ "star": 38,
+ "commits": 30,
+ "modify_time": "2018-07-24 18:31:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/k2/languagebackdoors",
+ "star": 38,
+ "commits": 2,
+ "modify_time": "2016-09-05 20:32:28",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/jwillbold/rusty-jsyc",
+ "star": 38,
+ "commits": 104,
+ "modify_time": "2019-12-08 16:23:45",
+ "last_release": "",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/juxhindb/synner",
+ "star": 38,
+ "commits": 17,
+ "modify_time": "2019-03-20 20:17:39",
+ "last_release": "",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/jsmitty12/phpwhois",
+ "star": 38,
+ "commits": 751,
+ "modify_time": "2019-02-19 13:19:50",
+ "last_release": "\n v5.5.0\n ",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/jpiechowka/jenkins-cve-2016-0792",
+ "star": 38,
+ "commits": 7,
+ "modify_time": "2017-08-02 23:51:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/johnlatwc/macrojob",
+ "star": 38,
+ "commits": 8,
+ "modify_time": "2016-12-20 00:29:01",
+ "last_release": "",
+ "lang": "Visual Basic .NET"
+ },
+ {
+ "link": "https://github.com/jivoi/ansible-pentest-with-tor",
+ "star": 38,
+ "commits": 2,
+ "modify_time": "2015-06-19 15:48:47",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/jedisct1/libhydrogen",
+ "star": 38,
+ "commits": 284,
+ "modify_time": "2019-12-03 12:35:06",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/javafxports/javafxmobile-plugin",
+ "star": 38,
+ "commits": 170,
+ "modify_time": "2018-10-30 12:18:49",
+ "last_release": "\n 2.0.30\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/jasondoyle/google-nest-cam-bug-disclosures",
+ "star": 38,
+ "commits": 25,
+ "modify_time": "2017-07-03 14:41:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jakev/oat2dex-python",
+ "star": 38,
+ "commits": 2,
+ "modify_time": "2014-11-06 22:17:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/isgroup-srl/openmagic",
+ "star": 38,
+ "commits": 20,
+ "modify_time": "2014-04-11 02:34:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/initstring/lyricpass",
+ "star": 38,
+ "commits": 41,
+ "modify_time": "2019-08-25 02:52:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/incredibleindishell/local-file-disclosure-sql-injection-lab",
+ "star": 38,
+ "commits": 9,
+ "modify_time": "2017-03-14 06:34:38",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/hcamael/ctf-library",
+ "star": 38,
+ "commits": 17,
+ "modify_time": "2017-01-06 08:50:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hackedteam/test-av2",
+ "star": 38,
+ "commits": 1037,
+ "modify_time": "2014-08-29 07:17:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/guolei1130/global_httpdns",
+ "star": 38,
+ "commits": 27,
+ "modify_time": "2018-09-14 00:09:24",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/greycorbel/admpwd",
+ "star": 38,
+ "commits": 28,
+ "modify_time": "2018-12-08 12:11:30",
+ "last_release": "6.3.0",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/gnoxter/mountain_goat",
+ "star": 38,
+ "commits": 1,
+ "modify_time": "2016-08-20 01:39:31",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/githubixx/ansible-role-harden-linux",
+ "star": 38,
+ "commits": 28,
+ "modify_time": "2019-05-22 22:00:36",
+ "last_release": "\n v4.0.2\n ",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/gdbinit/kextstat_aslr",
+ "star": 38,
+ "commits": 23,
+ "modify_time": "2014-07-23 21:54:23",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/frida/frida-compile",
+ "star": 38,
+ "commits": 120,
+ "modify_time": "2019-12-02 01:33:27",
+ "last_release": "\n v9.1.0\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/fotisl/utimaco",
+ "star": 38,
+ "commits": 1,
+ "modify_time": "2017-01-24 20:31:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fluc-uc/emusdk",
+ "star": 38,
+ "commits": null,
+ "modify_time": "2018-06-19 10:12:11",
+ "last_release": "",
+ "lang": "c++"
+ },
+ {
+ "link": "https://github.com/firelizzard18/dc26-badge",
+ "star": 38,
+ "commits": 20,
+ "modify_time": "2018-08-16 20:35:30",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/fire30/ps4-2014-1303-poc",
+ "star": 38,
+ "commits": 10,
+ "modify_time": "2016-04-21 17:23:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/exploitx3/fuzzbunch",
+ "star": 38,
+ "commits": 5,
+ "modify_time": "2017-04-16 14:03:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/evilsocket/brutemachine",
+ "star": 38,
+ "commits": 7,
+ "modify_time": "2017-07-03 14:50:59",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/evilcry/pythonscripts",
+ "star": 38,
+ "commits": 29,
+ "modify_time": "2012-12-29 17:45:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/en14c/pivirus",
+ "star": 38,
+ "commits": 11,
+ "modify_time": "2018-06-25 14:04:39",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/draperlaboratory/cbat_tools",
+ "star": 38,
+ "commits": 171,
+ "modify_time": "2019-12-04 22:11:50",
+ "last_release": "",
+ "lang": "OCaml"
+ },
+ {
+ "link": "https://github.com/dnsdb/dnsdbq",
+ "star": 38,
+ "commits": 181,
+ "modify_time": "2019-12-09 21:05:18",
+ "last_release": "\n v1.4.0\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/danmcinerney/autoresp",
+ "star": 38,
+ "commits": 12,
+ "modify_time": "2016-03-16 22:49:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/danluu/fuzz.jl",
+ "star": 38,
+ "commits": 9,
+ "modify_time": "2014-11-15 16:27:22",
+ "last_release": "",
+ "lang": "Julia"
+ },
+ {
+ "link": "https://github.com/cysinfo/pymal",
+ "star": 38,
+ "commits": 1,
+ "modify_time": "2016-07-10 05:34:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cxueqin/falcon",
+ "star": 38,
+ "commits": 23,
+ "modify_time": "2019-10-12 16:21:05",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/curtbraz/invoke-neutralizeav",
+ "star": 38,
+ "commits": 20,
+ "modify_time": "2019-02-18 21:37:59",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/cudeso/cudeso-honeypot",
+ "star": 38,
+ "commits": 30,
+ "modify_time": "2015-08-10 23:59:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/commonexploits/icmpsh",
+ "star": 38,
+ "commits": 10,
+ "modify_time": "2013-05-17 09:24:16",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/codewhitesec/coldfusionpwn",
+ "star": 38,
+ "commits": 2,
+ "modify_time": "2018-03-12 16:46:49",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/chef-koch/ffck",
+ "star": 38,
+ "commits": 471,
+ "modify_time": "2019-12-09 21:18:40",
+ "last_release": "",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/changeofpace/force-page-protection",
+ "star": 38,
+ "commits": 8,
+ "modify_time": "2017-03-17 07:00:31",
+ "last_release": "v1.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cesnet/pakiti-server",
+ "star": 38,
+ "commits": 509,
+ "modify_time": "2019-09-24 14:58:37",
+ "last_release": "\n v3.1.0\n ",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/certtools/intelmq-feeds-documentation",
+ "star": 38,
+ "commits": 110,
+ "modify_time": "2016-09-26 08:16:50",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/cerberussecurity/cve-2017-5689",
+ "star": 38,
+ "commits": 3,
+ "modify_time": "2017-05-04 03:06:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/can1357/physical_mem_controller",
+ "star": 38,
+ "commits": 6,
+ "modify_time": "2018-05-03 22:48:49",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/boywhp/wifi_crack_windows",
+ "star": 38,
+ "commits": 4,
+ "modify_time": "2017-04-23 14:11:51",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/bluscreenofjeff/malleablec2profiles",
+ "star": 38,
+ "commits": 2,
+ "modify_time": "2017-01-20 08:45:06",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/blazeinfosec/ssrf-ntlm",
+ "star": 38,
+ "commits": 7,
+ "modify_time": "2017-12-18 17:39:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bit4woo/dnslog",
+ "star": 38,
+ "commits": 30,
+ "modify_time": "2019-11-29 08:24:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/battelle/repsych",
+ "star": 38,
+ "commits": 10,
+ "modify_time": "2015-12-31 12:10:12",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/ax330d/ida_pdb_loader",
+ "star": 38,
+ "commits": 6,
+ "modify_time": "2018-09-21 14:48:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/auth0/auth0-cordova",
+ "star": 38,
+ "commits": 103,
+ "modify_time": "2019-10-26 00:01:36",
+ "last_release": "v0.4.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/aurel26/ts-security-editor",
+ "star": 38,
+ "commits": 8,
+ "modify_time": "2017-06-07 15:08:13",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/asymmetric-infosec/power-response",
+ "star": 38,
+ "commits": 495,
+ "modify_time": "2019-12-08 02:35:54",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/arno0x/webdavdelivery",
+ "star": 38,
+ "commits": 4,
+ "modify_time": "2017-11-14 13:02:53",
+ "last_release": "",
+ "lang": "Visual Basic .NET"
+ },
+ {
+ "link": "https://github.com/aptnotes/tools",
+ "star": 38,
+ "commits": 16,
+ "modify_time": "2018-06-24 13:54:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ajmartel/irtriage",
+ "star": 38,
+ "commits": 671,
+ "modify_time": "2016-04-21 09:11:59",
+ "last_release": "",
+ "lang": "AutoIt"
+ },
+ {
+ "link": "https://github.com/adulau/dcfldd",
+ "star": 38,
+ "commits": 16,
+ "modify_time": "2018-06-17 08:42:43",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/adrianbzg/twitter-follow-exploit",
+ "star": 38,
+ "commits": 29,
+ "modify_time": "2017-09-25 12:35:28",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/adamkramer/rapid_env",
+ "star": 38,
+ "commits": 8,
+ "modify_time": "2015-03-08 11:40:07",
+ "last_release": "v0.3",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/activecm/passer",
+ "star": 38,
+ "commits": 26,
+ "modify_time": "2018-12-01 20:24:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/9seconds/httransform",
+ "star": 38,
+ "commits": 168,
+ "modify_time": "2019-11-25 08:40:34",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/5gsd/aicdm",
+ "star": 38,
+ "commits": 14,
+ "modify_time": "2017-06-19 14:40:14",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/54yimeng/sia-websites",
+ "star": 38,
+ "commits": 32,
+ "modify_time": "2019-03-07 05:51:42",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/3gstudent/eventlogedit-evt--general",
+ "star": 38,
+ "commits": 11,
+ "modify_time": "2018-09-11 00:13:39",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/0x90/upnp-arsenal",
+ "star": 38,
+ "commits": 11,
+ "modify_time": "2017-01-14 20:51:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/0x90/routerz",
+ "star": 38,
+ "commits": 16,
+ "modify_time": "2015-07-03 13:42:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/0x4a47/sectalks-mel0x14-ctf",
+ "star": 38,
+ "commits": 2,
+ "modify_time": "2018-02-11 12:04:24",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/xausky/shadowsocksgostplugin",
+ "star": 37,
+ "commits": 30,
+ "modify_time": "2019-11-11 09:17:27",
+ "last_release": "v2.8.1-3",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/mhaskar/octopus",
+ "star": 37,
+ "commits": 96,
+ "modify_time": "2019-12-09 21:13:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/snifer/l4bsforshell",
+ "star": 37,
+ "commits": 7,
+ "modify_time": "2014-09-13 12:32:40",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/hackplayers/reverseshell",
+ "star": 37,
+ "commits": 28,
+ "modify_time": "2018-05-07 14:04:36",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/intel/kernelflinger",
+ "star": 37,
+ "commits": 1206,
+ "modify_time": "2019-10-25 02:43:59",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/theos/logos",
+ "star": 37,
+ "commits": 542,
+ "modify_time": "2019-12-04 05:18:11",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/rednaga/disclosures",
+ "star": 37,
+ "commits": 27,
+ "modify_time": "2016-07-27 21:00:43",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/cn33liz/easysystem",
+ "star": 37,
+ "commits": 1,
+ "modify_time": "2016-10-28 18:45:01",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cn33liz/sharpcat",
+ "star": 37,
+ "commits": 6,
+ "modify_time": "2016-06-10 11:06:08",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/pwnieexpress/pwn_pad_sources",
+ "star": 37,
+ "commits": 734,
+ "modify_time": "2017-08-08 14:21:16",
+ "last_release": "\n 1.9.21\n ",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/vdoo-connected-trust/ghidra-pyi-generator",
+ "star": 37,
+ "commits": 10,
+ "modify_time": "2019-12-04 11:23:42",
+ "last_release": "2019-11-24",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/codeofdark/panda-obfuscator",
+ "star": 37,
+ "commits": 4,
+ "modify_time": "2018-09-18 12:01:55",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/vduddu/PentestResources",
+ "star": 37,
+ "commits": 69,
+ "modify_time": "2017-06-17 12:09:41",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/prsecurity/golang_c2",
+ "star": 37,
+ "commits": 14,
+ "modify_time": "2019-03-18 00:46:40",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/gedsh/invizible",
+ "star": 37,
+ "commits": 179,
+ "modify_time": "2019-12-09 13:53:30",
+ "last_release": "v0.3.8-beta",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/madhuakula/security-automation-with-ansible-2",
+ "star": 37,
+ "commits": 9,
+ "modify_time": "2018-07-10 09:59:00",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/nyan-x-cat/uac-escaper",
+ "star": 37,
+ "commits": 3,
+ "modify_time": "2019-09-16 16:53:21",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/ElectronicCats/SamyKamTools",
+ "star": 37,
+ "commits": 46,
+ "modify_time": "2018-01-08 22:06:21",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/soscleaner/soscleaner",
+ "star": 37,
+ "commits": 778,
+ "modify_time": "2019-11-20 19:45:30",
+ "last_release": "0.4.4-3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/muffins/rookit_playground",
+ "star": 37,
+ "commits": 14,
+ "modify_time": "2015-03-08 04:23:49",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/hsiafan/cute-proxy",
+ "star": 37,
+ "commits": 133,
+ "modify_time": "2019-06-10 02:24:42",
+ "last_release": "v1.0.1",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/robotools/defcon",
+ "star": 37,
+ "commits": 797,
+ "modify_time": "2019-11-18 04:30:11",
+ "last_release": "0.6.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zpsean/go4api",
+ "star": 37,
+ "commits": 258,
+ "modify_time": "2019-12-06 08:39:53",
+ "last_release": "0.65.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/zer0mem/kernelproject",
+ "star": 37,
+ "commits": 23,
+ "modify_time": "2014-07-04 08:31:42",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ze0r/cve-2019-0808-poc",
+ "star": 37,
+ "commits": 3,
+ "modify_time": "2019-03-25 12:10:39",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/yejiansnake/windows-sys-base",
+ "star": 37,
+ "commits": 11,
+ "modify_time": "2016-08-25 03:22:18",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ydkhatri/macforensics",
+ "star": 37,
+ "commits": 39,
+ "modify_time": "2019-11-21 22:45:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/woanware/autorunner",
+ "star": 37,
+ "commits": 26,
+ "modify_time": "2019-05-18 11:46:33",
+ "last_release": "v0.0.16",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/wkleinhenz/powershell-botnet",
+ "star": 37,
+ "commits": 23,
+ "modify_time": "2017-04-22 18:00:35",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/weebsec/weebdns",
+ "star": 37,
+ "commits": 14,
+ "modify_time": "2018-10-30 04:26:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/warner/petmail",
+ "star": 37,
+ "commits": 482,
+ "modify_time": "2017-07-20 05:43:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wal99d/slowloris",
+ "star": 37,
+ "commits": 14,
+ "modify_time": "2017-05-18 07:07:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/villanch/pr0xy",
+ "star": 37,
+ "commits": 4,
+ "modify_time": "2016-12-06 13:19:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vduddu/pentestresources",
+ "star": 37,
+ "commits": 69,
+ "modify_time": "2017-06-17 12:09:41",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/vanvan/ipfsproxyhttp",
+ "star": 37,
+ "commits": 41,
+ "modify_time": "2019-03-12 13:08:02",
+ "last_release": "1.0.0",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/tylous/auto_eap",
+ "star": 37,
+ "commits": 16,
+ "modify_time": "2016-10-09 22:49:51",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/twistlock/runc-cve-2019-5736",
+ "star": 37,
+ "commits": 12,
+ "modify_time": "2019-09-07 22:16:34",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/trustedsec/auto_settingcontent-ms",
+ "star": 37,
+ "commits": 3,
+ "modify_time": "2018-06-15 14:55:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tomsteele/pen-utils",
+ "star": 37,
+ "commits": 41,
+ "modify_time": "2018-04-27 04:43:38",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/ticosax/pseud",
+ "star": 37,
+ "commits": 294,
+ "modify_time": "2018-04-17 10:20:06",
+ "last_release": "1.0.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/the-c0d3r/sqli-scanner",
+ "star": 37,
+ "commits": 11,
+ "modify_time": "2017-02-02 07:15:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tevora-threat/aggressor-powerview",
+ "star": 37,
+ "commits": 1,
+ "modify_time": "2018-03-22 00:21:34",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/techgaun/mirai",
+ "star": 37,
+ "commits": 4,
+ "modify_time": "2016-10-07 01:32:16",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/tandasat/scavenger",
+ "star": 37,
+ "commits": 17,
+ "modify_time": "2015-07-17 23:42:43",
+ "last_release": "1.3",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/tahz7/traffic_analyser",
+ "star": 37,
+ "commits": 47,
+ "modify_time": "2018-07-05 15:23:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/syncsrc/microrenovator",
+ "star": 37,
+ "commits": 52,
+ "modify_time": "2018-08-25 20:12:02",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/spiderlabs/owasp-crs-documentation",
+ "star": 37,
+ "commits": 26,
+ "modify_time": "2018-12-20 21:30:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sk4ld/gridpot",
+ "star": 37,
+ "commits": 13,
+ "modify_time": "2015-03-23 18:20:30",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/sjord/jwtdemo",
+ "star": 37,
+ "commits": 9,
+ "modify_time": "2017-06-21 15:10:45",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/security-onion-solutions/securityonion-elastic",
+ "star": 37,
+ "commits": 1489,
+ "modify_time": "2019-11-12 21:27:28",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/saelo/feuerfuchs",
+ "star": 37,
+ "commits": 1,
+ "modify_time": "2016-12-30 13:27:50",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/rust-fuzz/libfuzzer-sys",
+ "star": 37,
+ "commits": 61,
+ "modify_time": "2019-12-02 21:58:27",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/raz0r/aemscan",
+ "star": 37,
+ "commits": 5,
+ "modify_time": "2019-02-19 17:23:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rahiel/firectl",
+ "star": 37,
+ "commits": 23,
+ "modify_time": "2018-03-29 12:13:34",
+ "last_release": "1.1.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/r00t-3xp10it/nmap-nse-modules",
+ "star": 37,
+ "commits": 130,
+ "modify_time": "2019-10-19 15:09:41",
+ "last_release": "",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/ptcoresec/ctf-scoreboard",
+ "star": 37,
+ "commits": 1,
+ "modify_time": "2012-12-11 21:16:35",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/projectcalico/typha",
+ "star": 37,
+ "commits": 609,
+ "modify_time": "2019-12-09 04:10:00",
+ "last_release": "\n v3.10.2\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/portswigger/distribute-damage",
+ "star": 37,
+ "commits": 20,
+ "modify_time": "2018-06-05 13:08:58",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/philwantsfish/gdb_commands",
+ "star": 37,
+ "commits": 32,
+ "modify_time": "2015-04-16 02:19:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/patois/nesldr",
+ "star": 37,
+ "commits": 3,
+ "modify_time": "2018-12-18 08:02:27",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/p0cl4bs/thanos",
+ "star": 37,
+ "commits": 4,
+ "modify_time": "2016-07-02 16:57:53",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/openzipkin/zipkin-finagle",
+ "star": 37,
+ "commits": 200,
+ "modify_time": "2019-11-11 19:18:43",
+ "last_release": "\n 2.1.4\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/netkiller/firewall",
+ "star": 37,
+ "commits": 31,
+ "modify_time": "2017-08-09 10:05:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/n0ise9914/rdpchecker",
+ "star": 37,
+ "commits": 18,
+ "modify_time": "2017-08-18 08:25:21",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/mwsrc/mass-malicious-script-dump",
+ "star": 37,
+ "commits": 1,
+ "modify_time": "2016-12-24 07:54:18",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/mstefanowich/filesignaturehijack",
+ "star": 37,
+ "commits": 5,
+ "modify_time": "2017-08-30 18:06:22",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/mozillasecurity/quokka",
+ "star": 37,
+ "commits": 26,
+ "modify_time": "2019-04-01 23:09:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mortenschenk/rtlcapturecontext-cfg-bypass",
+ "star": 37,
+ "commits": 2,
+ "modify_time": "2017-01-11 15:58:52",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/mortedamos/vehicle-hacking",
+ "star": 37,
+ "commits": 9,
+ "modify_time": "2017-05-31 18:56:21",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/mlafeldt/ps2rd",
+ "star": 37,
+ "commits": 649,
+ "modify_time": "2017-09-01 22:16:15",
+ "last_release": "\n v0.5.3\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/minervalabsresearch/blogposts",
+ "star": 37,
+ "commits": 18,
+ "modify_time": "2019-01-26 10:01:11",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/microsoft/cfu",
+ "star": 37,
+ "commits": 69,
+ "modify_time": "2019-11-26 19:48:30",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/medicean/sublimexssencode",
+ "star": 37,
+ "commits": 24,
+ "modify_time": "2017-08-01 07:48:29",
+ "last_release": "1.0.5",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/maravento/blackip",
+ "star": 37,
+ "commits": 61,
+ "modify_time": "2019-12-05 16:08:11",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/mailinneberg/broadpwn",
+ "star": 37,
+ "commits": 30,
+ "modify_time": "2017-09-22 12:14:25",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/m57/piescan",
+ "star": 37,
+ "commits": 30,
+ "modify_time": "2019-07-14 08:51:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/luckygeck/ycmdcompletion",
+ "star": 37,
+ "commits": 53,
+ "modify_time": "2017-03-10 14:04:23",
+ "last_release": "0.1.5",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lmax-exchange/angler",
+ "star": 37,
+ "commits": 133,
+ "modify_time": "2018-07-20 16:09:10",
+ "last_release": "v1.0.6",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/llir/grammar",
+ "star": 37,
+ "commits": 176,
+ "modify_time": "2019-12-05 05:47:16",
+ "last_release": "",
+ "lang": "Tcl"
+ },
+ {
+ "link": "https://github.com/libyal/libolecf",
+ "star": 37,
+ "commits": 136,
+ "modify_time": "2019-11-04 07:58:30",
+ "last_release": "20191104",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/lasq88/deobfuscate",
+ "star": 37,
+ "commits": 4,
+ "modify_time": "2018-07-23 20:27:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lallousx86/graphslick",
+ "star": 37,
+ "commits": 63,
+ "modify_time": "2014-11-20 22:13:54",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/korczis/upx",
+ "star": 37,
+ "commits": 2,
+ "modify_time": "2012-06-12 22:45:51",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/killswitch-gui/lterm",
+ "star": 37,
+ "commits": 57,
+ "modify_time": "2016-12-03 02:50:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kevva/caw",
+ "star": 37,
+ "commits": 30,
+ "modify_time": "2017-07-20 09:46:16",
+ "last_release": "\n v2.0.1\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/keenrivals/bugsite-index",
+ "star": 37,
+ "commits": 25,
+ "modify_time": "2018-02-21 12:46:27",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/julianschuette/condroid",
+ "star": 37,
+ "commits": 134,
+ "modify_time": "2016-03-08 17:44:12",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/johnnykv/mnemosyne",
+ "star": 37,
+ "commits": 289,
+ "modify_time": "2014-05-02 13:58:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/itznotabug/checkoutverifier",
+ "star": 37,
+ "commits": 33,
+ "modify_time": "2019-12-05 12:02:57",
+ "last_release": "1.6",
+ "lang": "Kotlin"
+ },
+ {
+ "link": "https://github.com/idc/ps4-entrypoint-405",
+ "star": 37,
+ "commits": 13,
+ "modify_time": "2017-12-28 23:34:30",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/hugsy/gef-extras",
+ "star": 37,
+ "commits": 80,
+ "modify_time": "2019-08-03 21:24:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hook-s3c/cve-2018-18852",
+ "star": 37,
+ "commits": 3,
+ "modify_time": "2019-01-26 03:48:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/greenbone/gvm-libs",
+ "star": 37,
+ "commits": 610,
+ "modify_time": "2019-12-07 14:58:43",
+ "last_release": "v11.0.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/gdbinit/crackme_nr1",
+ "star": 37,
+ "commits": 1,
+ "modify_time": "2013-06-11 16:57:52",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/flier/zipkin-cpp",
+ "star": 37,
+ "commits": 258,
+ "modify_time": "2017-10-12 04:04:19",
+ "last_release": "v0.3.1",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/flankerhqd/cve-2015-6620-poc",
+ "star": 37,
+ "commits": 5,
+ "modify_time": "2015-12-16 03:48:31",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/fishermansenemy/bucket_finder",
+ "star": 37,
+ "commits": 8,
+ "modify_time": "2013-06-24 12:12:02",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/fallengavin/srcinfo",
+ "star": 37,
+ "commits": 12,
+ "modify_time": "2017-12-11 02:08:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fabio-d/honeypot",
+ "star": 37,
+ "commits": 36,
+ "modify_time": "2016-02-19 12:48:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ez8-co/emock",
+ "star": 37,
+ "commits": 163,
+ "modify_time": "2019-09-24 02:09:26",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/exploit-install/shellsploit-framework",
+ "star": 37,
+ "commits": 169,
+ "modify_time": "2016-01-27 09:37:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ekoparty/ekolabs",
+ "star": 37,
+ "commits": 45,
+ "modify_time": "2018-12-10 19:52:14",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/egguncle/xposednavigationbar",
+ "star": 37,
+ "commits": 190,
+ "modify_time": "2019-02-20 15:57:37",
+ "last_release": "2.3.0",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/egguncle/ptraceinject",
+ "star": 37,
+ "commits": 6,
+ "modify_time": "2018-11-26 15:36:29",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/edoverflow/bug-bounty-responses",
+ "star": 37,
+ "commits": 11,
+ "modify_time": "2018-02-26 17:28:54",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/dungtv543/dutas",
+ "star": 37,
+ "commits": 10,
+ "modify_time": "2016-07-28 05:35:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dreadlocked/ssrfmap",
+ "star": 37,
+ "commits": 12,
+ "modify_time": "2018-08-23 08:38:35",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/dmb2168/oauthhunting",
+ "star": 37,
+ "commits": 5,
+ "modify_time": "2018-05-21 12:58:33",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/dhn/osce",
+ "star": 37,
+ "commits": 50,
+ "modify_time": "2018-07-07 23:56:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/desword/shellcode_tools",
+ "star": 37,
+ "commits": 23,
+ "modify_time": "2019-11-02 02:01:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dcid/doh-php-client",
+ "star": 37,
+ "commits": 10,
+ "modify_time": "2018-04-05 22:00:11",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/cylancevulnresearch/osx_runbin",
+ "star": 37,
+ "commits": 6,
+ "modify_time": "2017-02-10 01:27:53",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ctftime/ctftime.org",
+ "star": 37,
+ "commits": 2,
+ "modify_time": "2017-05-07 14:23:40",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/coalfire-research/vampire",
+ "star": 37,
+ "commits": 20,
+ "modify_time": "2019-05-22 20:57:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cervoise/abuse-bash-for-windows",
+ "star": 37,
+ "commits": 40,
+ "modify_time": "2019-05-29 09:29:01",
+ "last_release": "",
+ "lang": "Batchfile"
+ },
+ {
+ "link": "https://github.com/cert-se/megatron-java",
+ "star": 37,
+ "commits": 93,
+ "modify_time": "2017-03-29 10:39:30",
+ "last_release": "v.1.1.1",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/cedarctic/digiquack",
+ "star": 37,
+ "commits": 25,
+ "modify_time": "2017-12-02 13:41:51",
+ "last_release": "1.2.1",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/carbonblack/hexraysdeob",
+ "star": 37,
+ "commits": 21,
+ "modify_time": "2019-06-28 19:45:07",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/c0deh4cker/pwnableharness",
+ "star": 37,
+ "commits": 59,
+ "modify_time": "2019-11-09 08:59:56",
+ "last_release": "",
+ "lang": "Makefile"
+ },
+ {
+ "link": "https://github.com/bytesoverbombs/virusshare-search",
+ "star": 37,
+ "commits": 19,
+ "modify_time": "2019-11-27 23:10:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bx/bootloader_instrumentation_suite",
+ "star": 37,
+ "commits": 59,
+ "modify_time": "2019-04-05 19:36:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/breakingmalwareresearch/cfgexceptions",
+ "star": 37,
+ "commits": 6,
+ "modify_time": "2016-06-21 13:22:56",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/bfosterjr/ufgraph",
+ "star": 37,
+ "commits": 17,
+ "modify_time": "2014-11-16 08:45:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bes/keystorebrute",
+ "star": 37,
+ "commits": 9,
+ "modify_time": "2011-11-15 20:41:20",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/augustd/burp-suite-error-message-checks",
+ "star": 37,
+ "commits": 104,
+ "modify_time": "2018-09-30 15:54:38",
+ "last_release": "v2.0.0",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/aloz77/hiktools",
+ "star": 37,
+ "commits": 13,
+ "modify_time": "2014-11-02 20:23:22",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/abiondo/afl",
+ "star": 37,
+ "commits": 7,
+ "modify_time": "2018-09-22 11:49:56",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/73696e65/windows-exploits",
+ "star": 37,
+ "commits": 1,
+ "modify_time": "2016-03-03 17:36:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/3gstudent/shellcode-generater",
+ "star": 37,
+ "commits": 18,
+ "modify_time": "2017-07-18 00:49:43",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/3gstudent/from-system-authority-to-medium-authority",
+ "star": 37,
+ "commits": 9,
+ "modify_time": "2019-12-05 01:25:57",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/1337g/cve-2017-10271",
+ "star": 37,
+ "commits": 5,
+ "modify_time": "2017-12-23 13:10:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/0xbadc0de1/vmp_dbg",
+ "star": 37,
+ "commits": 1,
+ "modify_time": "2016-10-18 18:36:33",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/davidqhr/socccks",
+ "star": 36,
+ "commits": 55,
+ "modify_time": "2017-06-09 12:06:35",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/vulnerscom/scripts",
+ "star": 36,
+ "commits": 6,
+ "modify_time": "2017-05-20 16:22:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/offensive-security/kali-scripts",
+ "star": 36,
+ "commits": 2,
+ "modify_time": "2016-09-11 12:15:57",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/averagesecurityguy/exfil",
+ "star": 36,
+ "commits": 24,
+ "modify_time": "2017-04-27 04:18:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/frida/frida-website",
+ "star": 36,
+ "commits": 674,
+ "modify_time": "2019-12-10 05:43:07",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/tidesec/common_spider",
+ "star": 36,
+ "commits": 2,
+ "modify_time": "2019-01-07 12:31:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/snyk/broker",
+ "star": 36,
+ "commits": 466,
+ "modify_time": "2019-11-26 04:48:54",
+ "last_release": "v4.69.3",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/blole/injectory",
+ "star": 36,
+ "commits": 115,
+ "modify_time": "2017-07-24 17:39:41",
+ "last_release": "6.1.0",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/pilgun/acvtool",
+ "star": 36,
+ "commits": 6,
+ "modify_time": "2019-01-23 16:52:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ayrx/jnianalyzer",
+ "star": 36,
+ "commits": 42,
+ "modify_time": "2019-11-10 13:13:06",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/hiteshchoudhary/airvengers",
+ "star": 36,
+ "commits": 4,
+ "modify_time": "2015-04-14 10:22:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/chickenhook/chickenhook",
+ "star": 36,
+ "commits": 131,
+ "modify_time": "2019-12-03 21:54:32",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/x-o-r-r-o/php-webshells-collection",
+ "star": 36,
+ "commits": 80,
+ "modify_time": "2019-09-04 16:23:03",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/itshaadi/torbox",
+ "star": 36,
+ "commits": 15,
+ "modify_time": "2019-10-13 16:15:15",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/lightless233/Pansidong",
+ "star": 36,
+ "commits": 56,
+ "modify_time": "2017-05-15 08:08:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/opensourcesec/malstrom",
+ "star": 36,
+ "commits": 219,
+ "modify_time": "2018-01-25 18:19:34",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/joshrendek/hnypots-agent",
+ "star": 36,
+ "commits": 21,
+ "modify_time": "2018-10-17 01:51:40",
+ "last_release": "1.3",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/NewBee119/ctf_ics_traffic",
+ "star": 36,
+ "commits": 4,
+ "modify_time": "2018-08-09 02:48:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/Rivaill/blockchain-security-awesome",
+ "star": 36,
+ "commits": 7,
+ "modify_time": "2018-06-07 03:24:03",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/zephrfish/burpfeed",
+ "star": 36,
+ "commits": 24,
+ "modify_time": "2019-10-30 14:19:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xhak9x/hak9tools",
+ "star": 36,
+ "commits": 7,
+ "modify_time": "2018-09-14 21:42:51",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/wicg/ua-client-hints",
+ "star": 36,
+ "commits": 37,
+ "modify_time": "2019-12-04 11:32:35",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/visualbasic6/subdomain-bruteforce",
+ "star": 36,
+ "commits": 29,
+ "modify_time": "2019-03-19 23:22:06",
+ "last_release": "",
+ "lang": "Visual Basic .NET"
+ },
+ {
+ "link": "https://github.com/verizondigital/waflz",
+ "star": 36,
+ "commits": 245,
+ "modify_time": "2019-11-26 20:36:41",
+ "last_release": "\n 1.7.4\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/traetox/sshforshits",
+ "star": 36,
+ "commits": 18,
+ "modify_time": "2015-01-13 02:25:35",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/toperaproject/topera",
+ "star": 36,
+ "commits": 19,
+ "modify_time": "2014-01-05 04:09:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/titzanyic/clover",
+ "star": 36,
+ "commits": 15,
+ "modify_time": "2019-12-10 02:22:30",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/tatsui-geek/rpot",
+ "star": 36,
+ "commits": 36,
+ "modify_time": "2018-03-28 16:35:53",
+ "last_release": "\n 1.1\n ",
+ "lang": "Zeek"
+ },
+ {
+ "link": "https://github.com/takeshixx/deen",
+ "star": 36,
+ "commits": 591,
+ "modify_time": "2019-09-05 14:26:55",
+ "last_release": "\n v2.0.2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sympy/sympy-paper",
+ "star": 36,
+ "commits": 1638,
+ "modify_time": "2017-01-05 16:09:12",
+ "last_release": "SICOMP-submission",
+ "lang": "TeX"
+ },
+ {
+ "link": "https://github.com/steven-michaud/sandboxmirror",
+ "star": 36,
+ "commits": 17,
+ "modify_time": "2017-05-04 17:37:34",
+ "last_release": "\n v1.0.2\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/stephenfewer/ollycalltrace",
+ "star": 36,
+ "commits": 2,
+ "modify_time": "2011-11-04 14:02:29",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/static-flow/cloudcopy",
+ "star": 36,
+ "commits": 20,
+ "modify_time": "2019-11-02 17:36:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sinfulz/justtryharder",
+ "star": 36,
+ "commits": 76,
+ "modify_time": "2019-11-14 04:20:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sektioneins/xpwntool-lite",
+ "star": 36,
+ "commits": 1,
+ "modify_time": "2015-08-05 08:17:20",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/secwiki/iot",
+ "star": 36,
+ "commits": 45,
+ "modify_time": "2018-06-20 01:28:28",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/saelo/foxpwn",
+ "star": 36,
+ "commits": 1,
+ "modify_time": "2017-03-10 20:17:29",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/s0md3v/entropy",
+ "star": 36,
+ "commits": 9,
+ "modify_time": "2019-05-05 15:49:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rxwx/cve-2017-11882",
+ "star": 36,
+ "commits": 6,
+ "modify_time": "2018-01-02 14:31:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rvrsh3ll/pentesting-scripts",
+ "star": 36,
+ "commits": 60,
+ "modify_time": "2018-05-01 15:13:26",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/ruped24/tor_ip_switcher",
+ "star": 36,
+ "commits": 148,
+ "modify_time": "2019-06-15 06:00:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rolfrolles/wbdeshook",
+ "star": 36,
+ "commits": 3,
+ "modify_time": "2017-11-06 03:18:43",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/rinnegatamante/vitaquakeiii",
+ "star": 36,
+ "commits": 112,
+ "modify_time": "2019-11-24 10:13:38",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/rikonaka/katoolin4china",
+ "star": 36,
+ "commits": 104,
+ "modify_time": "2019-05-24 16:15:24",
+ "last_release": "v1.6",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rewanth1997/vuln-headers-extension",
+ "star": 36,
+ "commits": 27,
+ "modify_time": "2018-10-28 07:12:47",
+ "last_release": "1.1",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/redforcesec/dumpit",
+ "star": 36,
+ "commits": 7,
+ "modify_time": "2019-02-25 19:41:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/raymanfx/android-cve-checker",
+ "star": 36,
+ "commits": 81,
+ "modify_time": "2019-08-19 10:59:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/radare/ghidra-r2web",
+ "star": 36,
+ "commits": 25,
+ "modify_time": "2019-07-30 22:01:41",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/pwnagentsmith/ir_tool",
+ "star": 36,
+ "commits": 8,
+ "modify_time": "2016-02-01 09:49:05",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/plenumlab/lazyrecon",
+ "star": 36,
+ "commits": 83,
+ "modify_time": "2019-08-05 18:52:47",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/phar/eyephish",
+ "star": 36,
+ "commits": 7,
+ "modify_time": "2017-01-18 09:26:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/phage-nz/malware-hunting",
+ "star": 36,
+ "commits": 120,
+ "modify_time": "2019-03-19 00:40:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/paulzql/shadowsocks-ex",
+ "star": 36,
+ "commits": 69,
+ "modify_time": "2018-12-18 14:59:15",
+ "last_release": "v0.5.2",
+ "lang": "Elixir"
+ },
+ {
+ "link": "https://github.com/paulmehta/ablation",
+ "star": 36,
+ "commits": 2,
+ "modify_time": "2016-08-04 04:26:34",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/paradoxis/flask-unsign",
+ "star": 36,
+ "commits": 20,
+ "modify_time": "2019-07-19 16:12:36",
+ "last_release": "\n v0.0.2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/onionmail/onionmail",
+ "star": 36,
+ "commits": 39,
+ "modify_time": "2016-06-11 18:26:49",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/ofercas/ransomware_begone",
+ "star": 36,
+ "commits": 6,
+ "modify_time": "2016-03-15 08:52:41",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/notscimmy/pplib",
+ "star": 36,
+ "commits": 12,
+ "modify_time": "2019-09-05 10:20:15",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/not-matthias/nemesis",
+ "star": 36,
+ "commits": 207,
+ "modify_time": "2019-07-05 19:27:52",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/northern-lights/yara-parser",
+ "star": 36,
+ "commits": 141,
+ "modify_time": "2019-07-09 22:40:46",
+ "last_release": "v0.6.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/nopernik/msfvenom-bc-generator",
+ "star": 36,
+ "commits": 3,
+ "modify_time": "2016-07-17 21:32:47",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/nexusbots/umbreon-rootkit",
+ "star": 36,
+ "commits": 5,
+ "modify_time": "2016-10-14 07:38:36",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/nevillegrech/madmax",
+ "star": 36,
+ "commits": 902,
+ "modify_time": "2019-01-15 08:32:59",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/neinwechter/metasploit-framework",
+ "star": 36,
+ "commits": 39019,
+ "modify_time": "2016-07-25 18:57:13",
+ "last_release": "\n sprint-A05\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/nanoric/pkn",
+ "star": 36,
+ "commits": 35,
+ "modify_time": "2019-03-02 14:50:00",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/n3k/ekoparty2015_windows_smep_bypass",
+ "star": 36,
+ "commits": 2,
+ "modify_time": "2016-03-22 06:37:58",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/mthbernardes/strutszeiro",
+ "star": 36,
+ "commits": 11,
+ "modify_time": "2017-03-11 04:11:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mr-un1k0d3r/searchipowner",
+ "star": 36,
+ "commits": 8,
+ "modify_time": "2017-11-23 18:25:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mortenschenk/token-stealing-shellcode",
+ "star": 36,
+ "commits": 2,
+ "modify_time": "2017-02-27 12:22:49",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/mojachieee/go-honeypot",
+ "star": 36,
+ "commits": 19,
+ "modify_time": "2017-12-28 15:11:37",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/michael-yip/aptmalwarenotes",
+ "star": 36,
+ "commits": 4,
+ "modify_time": "2015-06-27 14:06:12",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/miaout17/lolize",
+ "star": 36,
+ "commits": 34,
+ "modify_time": "2011-08-27 12:05:28",
+ "last_release": "\n v0.0.3\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/mempodippy/cub3",
+ "star": 36,
+ "commits": 4,
+ "modify_time": "2016-05-18 03:48:15",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/manux81/canspy",
+ "star": 36,
+ "commits": 13,
+ "modify_time": "2016-10-06 15:15:12",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/mame82/munifying",
+ "star": 36,
+ "commits": 27,
+ "modify_time": "2019-09-08 12:33:08",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/linuxsec/indoxploit-shell",
+ "star": 36,
+ "commits": 26,
+ "modify_time": "2019-10-31 19:33:52",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/linkp2p/wps-pin",
+ "star": 36,
+ "commits": 7,
+ "modify_time": "2014-11-04 15:59:47",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/leoloobeek/gogreen",
+ "star": 36,
+ "commits": 26,
+ "modify_time": "2018-10-05 14:37:51",
+ "last_release": "v1.0.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/kkar/teamviewer-dumper-in-cpp",
+ "star": 36,
+ "commits": 4,
+ "modify_time": "2014-09-23 23:20:22",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/keeganjk/kali-anonymous",
+ "star": 36,
+ "commits": 5,
+ "modify_time": "2019-02-06 22:23:41",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/kawaxi/kali-setup",
+ "star": 36,
+ "commits": 69,
+ "modify_time": "2019-06-22 01:25:15",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/jrjr/paw.js",
+ "star": 36,
+ "commits": 20,
+ "modify_time": "2019-11-13 07:16:18",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/jhaddix/bug-bounty-reference",
+ "star": 36,
+ "commits": 128,
+ "modify_time": "2017-07-21 09:32:00",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/jamiebuilds/guarded-string",
+ "star": 36,
+ "commits": 5,
+ "modify_time": "2018-02-05 23:12:46",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/ivanfratric/winafl",
+ "star": 36,
+ "commits": 206,
+ "modify_time": "2019-03-11 12:04:51",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/in12hacker/vt_64_ept",
+ "star": 36,
+ "commits": 6,
+ "modify_time": "2015-10-27 08:46:58",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/illusivenetworks-labs/getconsolehistoryandoutput",
+ "star": 36,
+ "commits": 3,
+ "modify_time": "2018-01-11 10:50:50",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/igalia/snabb",
+ "star": 36,
+ "commits": 9286,
+ "modify_time": "2019-12-05 08:40:59",
+ "last_release": "v2018.04.01",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/hwroot/presentations",
+ "star": 36,
+ "commits": 8,
+ "modify_time": "2019-11-12 19:25:27",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/hromie/obfs4proxy-openvpn",
+ "star": 36,
+ "commits": 20,
+ "modify_time": "2019-08-31 09:55:47",
+ "last_release": "v0.15.1",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/hitanshu-dhawan/imagesteganography",
+ "star": 36,
+ "commits": 14,
+ "modify_time": "2017-11-05 10:13:49",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/gusbemacbe/suru-plus-dark",
+ "star": 36,
+ "commits": 58,
+ "modify_time": "2019-03-18 11:17:49",
+ "last_release": "v25.1",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/geosn0w/geofilza",
+ "star": 36,
+ "commits": 5,
+ "modify_time": "2019-07-15 00:42:18",
+ "last_release": "v2.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/gdssecurity/wcf-binary-soap-plug-in",
+ "star": 36,
+ "commits": 1,
+ "modify_time": "2011-07-25 15:00:23",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/gdssecurity/psattack",
+ "star": 36,
+ "commits": 202,
+ "modify_time": "2017-04-04 20:37:30",
+ "last_release": "v1.6",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/gdssecurity/burpee",
+ "star": 36,
+ "commits": 34,
+ "modify_time": "2011-12-03 21:01:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fuzzysecurity/defcon-beijing-uac",
+ "star": 36,
+ "commits": 1,
+ "modify_time": "2018-05-15 12:03:57",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/fuzzitdev/example-go",
+ "star": 36,
+ "commits": 47,
+ "modify_time": "2019-11-10 16:13:26",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/f-secure/reflash",
+ "star": 36,
+ "commits": 2,
+ "modify_time": "2017-03-15 14:38:48",
+ "last_release": "",
+ "lang": "D"
+ },
+ {
+ "link": "https://github.com/extremecoders-re/pjorion-deobfuscator",
+ "star": 36,
+ "commits": 7,
+ "modify_time": "2017-07-10 10:31:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/eurecom-s3/actaeon",
+ "star": 36,
+ "commits": 29,
+ "modify_time": "2014-10-04 16:19:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/erickutcher/httpdownloader",
+ "star": 36,
+ "commits": 84,
+ "modify_time": "2019-11-19 05:10:01",
+ "last_release": "v1.0.2.9",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ec-digit-csirc/virustotal-tools",
+ "star": 36,
+ "commits": 17,
+ "modify_time": "2017-02-03 16:27:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/draios/python-sdc-client",
+ "star": 36,
+ "commits": 343,
+ "modify_time": "2019-11-27 16:37:21",
+ "last_release": "v0.8.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dpt/the-great-escape",
+ "star": 36,
+ "commits": 1461,
+ "modify_time": "2019-11-21 00:50:56",
+ "last_release": "\n release-20190629\n ",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/dionach/codeigniterxor",
+ "star": 36,
+ "commits": 3,
+ "modify_time": "2015-08-06 12:53:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dankirk/regslscan",
+ "star": 36,
+ "commits": 9,
+ "modify_time": "2019-10-30 12:41:09",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/dahua966/web-awd-framework",
+ "star": 36,
+ "commits": 16,
+ "modify_time": "2018-12-13 07:51:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/d3sre/understanding_the_ndis_6_stack",
+ "star": 36,
+ "commits": 6,
+ "modify_time": "2016-06-26 18:15:45",
+ "last_release": "",
+ "lang": "Awk"
+ },
+ {
+ "link": "https://github.com/cyubuchen/free_proxy_website",
+ "star": 36,
+ "commits": 5,
+ "modify_time": "2019-04-09 09:13:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cyhe/iossecurity-attack",
+ "star": 36,
+ "commits": 26,
+ "modify_time": "2016-06-16 03:37:37",
+ "last_release": "",
+ "lang": "Objective-C++"
+ },
+ {
+ "link": "https://github.com/cweb/unicode-hax",
+ "star": 36,
+ "commits": 16,
+ "modify_time": "2016-04-29 21:42:53",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/cube0x0/security-assessment",
+ "star": 36,
+ "commits": 227,
+ "modify_time": "2019-12-04 07:42:17",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/ctubio/php-proxy-keyserver",
+ "star": 36,
+ "commits": 599,
+ "modify_time": "2019-07-02 22:31:06",
+ "last_release": "\n v0.3.4\n ",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/cr4sh/smram_parse",
+ "star": 36,
+ "commits": 4,
+ "modify_time": "2018-05-20 21:44:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cn33liz/tpminituacanniversarybypass",
+ "star": 36,
+ "commits": 5,
+ "modify_time": "2016-09-26 13:27:40",
+ "last_release": "v1.1",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/clr2of8/commentator",
+ "star": 36,
+ "commits": 2,
+ "modify_time": "2017-09-25 18:48:54",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/cliqz-oss/browser-android",
+ "star": 36,
+ "commits": 304,
+ "modify_time": "2019-12-02 10:07:03",
+ "last_release": "v1.8.8",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/cisco-talos/re2pcap",
+ "star": 36,
+ "commits": 15,
+ "modify_time": "2019-08-20 03:06:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/changeofpace/pe-header-dump-utilities",
+ "star": 36,
+ "commits": 10,
+ "modify_time": "2017-05-31 00:17:44",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/byt3bl33d3r/toby",
+ "star": 36,
+ "commits": 11,
+ "modify_time": "2015-07-05 22:52:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/brianwrf/s2-053-cve-2017-12611",
+ "star": 36,
+ "commits": 7,
+ "modify_time": "2017-09-08 11:59:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/brad-anton/proxbrute",
+ "star": 36,
+ "commits": 7,
+ "modify_time": "2016-09-25 20:57:34",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/bogdaan/spycss",
+ "star": 36,
+ "commits": 14,
+ "modify_time": "2018-02-03 11:24:50",
+ "last_release": "\n 0.0.3\n ",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/bobotig/cracker-ng",
+ "star": 36,
+ "commits": 86,
+ "modify_time": "2016-01-01 20:20:56",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/blackhole1/fecm",
+ "star": 36,
+ "commits": 19,
+ "modify_time": "2018-05-30 09:10:41",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/arodland/haproxy",
+ "star": 36,
+ "commits": 5719,
+ "modify_time": "2016-08-28 12:59:30",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/anseki/gnirts",
+ "star": 36,
+ "commits": 53,
+ "modify_time": "2019-11-09 08:57:26",
+ "last_release": "\n 1.1.7\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/anic/ida2pwntools",
+ "star": 36,
+ "commits": 16,
+ "modify_time": "2019-02-27 08:21:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/anantshri/ds_store_crawler_parser",
+ "star": 36,
+ "commits": 4,
+ "modify_time": "2019-05-12 07:38:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ahmia/ahmia-site",
+ "star": 36,
+ "commits": 508,
+ "modify_time": "2019-11-14 11:33:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/agroce/universalmutator",
+ "star": 36,
+ "commits": 226,
+ "modify_time": "2019-11-24 19:29:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/adamkramer/jmp2it",
+ "star": 36,
+ "commits": 21,
+ "modify_time": "2014-10-29 14:37:12",
+ "last_release": "v1.4",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/adamgreen/mri",
+ "star": 36,
+ "commits": 161,
+ "modify_time": "2017-06-27 21:10:57",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ab1gale/phpcms-2008-cve-2018-19127",
+ "star": 36,
+ "commits": 3,
+ "modify_time": "2018-11-09 09:55:35",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/a7vinx/swarm",
+ "star": 36,
+ "commits": 41,
+ "modify_time": "2016-12-21 11:47:20",
+ "last_release": "\n v0.6.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/7iosecurity/xss-payloads",
+ "star": 36,
+ "commits": 3,
+ "modify_time": "2016-02-02 13:22:21",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/5alt/zerorat",
+ "star": 36,
+ "commits": 11,
+ "modify_time": "2016-03-12 09:40:03",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/0x7ff/dimentio",
+ "star": 36,
+ "commits": 5,
+ "modify_time": "2019-12-05 08:02:33",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/0ang3el/unsafe-jax-rs-burp",
+ "star": 36,
+ "commits": 5,
+ "modify_time": "2017-03-17 17:54:59",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/unbinilium/surge",
+ "star": 35,
+ "commits": 26,
+ "modify_time": "2018-02-03 13:59:02",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/tidesec/mars",
+ "star": 35,
+ "commits": 6,
+ "modify_time": "2019-05-21 01:17:37",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/chaitin/safeline-open-platform",
+ "star": 35,
+ "commits": 33,
+ "modify_time": "2019-10-11 08:39:37",
+ "last_release": "",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/mak-/scanomaly",
+ "star": 35,
+ "commits": 42,
+ "modify_time": "2019-11-12 17:07:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nsacyber/bitlocker-guidance",
+ "star": 35,
+ "commits": 23,
+ "modify_time": "2019-07-24 12:36:49",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/lanjelot/web-hunter",
+ "star": 35,
+ "commits": 11,
+ "modify_time": "2016-03-30 04:24:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/galoisinc/llvm-pretty-bc-parser",
+ "star": 35,
+ "commits": 322,
+ "modify_time": "2019-09-30 18:33:42",
+ "last_release": "\n llvm-pretty-bc-parser-0.4.0.0\n ",
+ "lang": "LLVM"
+ },
+ {
+ "link": "https://github.com/paulsec/shodan.io-mobile-app",
+ "star": 35,
+ "commits": 8,
+ "modify_time": "2019-03-07 17:19:34",
+ "last_release": "\n v0.0.3\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/robindavid/captcha-basic-recognition",
+ "star": 35,
+ "commits": 3,
+ "modify_time": "2014-02-28 20:49:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vletoux/bluekeep-scanner",
+ "star": 35,
+ "commits": 1,
+ "modify_time": "2019-11-11 13:19:07",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/secfathy/bugzee",
+ "star": 35,
+ "commits": 10,
+ "modify_time": "2018-05-13 15:04:07",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/jasonniebauer/nmap-cheatsheet",
+ "star": 35,
+ "commits": 18,
+ "modify_time": "2019-11-05 01:01:01",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/fabriziofubelli/black-widow",
+ "star": 35,
+ "commits": 325,
+ "modify_time": "2019-12-09 22:18:34",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/scipr-lab/poly-commit",
+ "star": 35,
+ "commits": 22,
+ "modify_time": "2019-11-27 10:13:35",
+ "last_release": "",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/Re4son/Pocket-Kali-live-build",
+ "star": 35,
+ "commits": 19,
+ "modify_time": "2018-05-16 10:52:33",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/PolarisLab/AESGFIC",
+ "star": 35,
+ "commits": 2,
+ "modify_time": "2017-02-20 02:45:50",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/bit4woo/ReSign",
+ "star": 35,
+ "commits": 9,
+ "modify_time": "2018-07-16 08:59:55",
+ "last_release": "v2.2",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/intel/KVMGT-kernel",
+ "star": 35,
+ "commits": 427971,
+ "modify_time": "2015-01-15 02:13:38",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/yxhsea/xss",
+ "star": 35,
+ "commits": 4,
+ "modify_time": "2017-03-30 09:15:16",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/rumpkernel/rumpctrl",
+ "star": 35,
+ "commits": 681,
+ "modify_time": "2017-03-13 21:04:04",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/continuumsecurity/resty-burp",
+ "star": 35,
+ "commits": 23,
+ "modify_time": "2013-05-08 13:02:15",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/Rair-Project/rair-core",
+ "star": 35,
+ "commits": 235,
+ "modify_time": "2019-12-09 20:41:37",
+ "last_release": "",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/62726164/netscan",
+ "star": 35,
+ "commits": 65,
+ "modify_time": "2019-10-02 18:27:24",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/rickmacgillis/hackfastalgos",
+ "star": 35,
+ "commits": 123,
+ "modify_time": "2018-09-19 21:13:51",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/hash3liZer/airpydump",
+ "star": 35,
+ "commits": 9,
+ "modify_time": "2018-03-28 18:47:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zynamics/ida2sql-plugin-ida",
+ "star": 35,
+ "commits": 9,
+ "modify_time": "2012-01-10 11:59:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zhuowei/worthdoingbadly.com",
+ "star": 35,
+ "commits": 46,
+ "modify_time": "2019-07-08 21:01:44",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/zer0mem/libc",
+ "star": 35,
+ "commits": 22,
+ "modify_time": "2015-06-26 13:18:39",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/yvesago/shodan-cli",
+ "star": 35,
+ "commits": 17,
+ "modify_time": "2019-01-30 09:32:21",
+ "last_release": "v0.2.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/yuvadm/dg-m1q",
+ "star": 35,
+ "commits": 6,
+ "modify_time": "2017-08-22 13:53:48",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/yuange75/aspcode",
+ "star": 35,
+ "commits": 5,
+ "modify_time": "2015-05-17 12:31:28",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/yaokaiyang-assaultmaster/pythonportscanner",
+ "star": 35,
+ "commits": 42,
+ "modify_time": "2018-10-10 05:02:27",
+ "last_release": "v0.2.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/yang3yen/pysm4",
+ "star": 35,
+ "commits": 5,
+ "modify_time": "2017-03-21 10:57:59",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/yanceyblog/scrapy-multi",
+ "star": 35,
+ "commits": 4,
+ "modify_time": "2016-12-27 06:12:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xerub/ibex64",
+ "star": 35,
+ "commits": 12,
+ "modify_time": "2017-07-20 20:07:17",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/x-vector/x-rsa",
+ "star": 35,
+ "commits": 163,
+ "modify_time": "2019-11-28 08:13:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vixentael/zka-example",
+ "star": 35,
+ "commits": 42,
+ "modify_time": "2018-08-30 18:25:27",
+ "last_release": "",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/venam/browser",
+ "star": 35,
+ "commits": 123,
+ "modify_time": "2018-10-18 03:21:10",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ustayready/cloudburst",
+ "star": 35,
+ "commits": 1,
+ "modify_time": "2018-08-30 23:35:32",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/uncseclab/vmxxnr",
+ "star": 35,
+ "commits": 4,
+ "modify_time": "2016-05-20 21:01:35",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/umbertocicero/coinhive-monero",
+ "star": 35,
+ "commits": 17,
+ "modify_time": "2018-11-27 09:31:02",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/trylinux/lift",
+ "star": 35,
+ "commits": 89,
+ "modify_time": "2019-06-26 20:12:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/topcss/wannacry",
+ "star": 35,
+ "commits": 1,
+ "modify_time": "2017-05-18 01:01:04",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/tls-check/tls-check",
+ "star": 35,
+ "commits": 107,
+ "modify_time": "2018-01-25 15:01:36",
+ "last_release": "\n v1.01-Release\n ",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/tidesec/tdscanner",
+ "star": 35,
+ "commits": 10,
+ "modify_time": "2019-05-21 01:17:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/thecyaniteproject/exit_code_java",
+ "star": 35,
+ "commits": 6,
+ "modify_time": "2018-01-23 19:16:29",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/testingpens/constole",
+ "star": 35,
+ "commits": 7,
+ "modify_time": "2019-06-11 22:02:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/teovoinea/steganography",
+ "star": 35,
+ "commits": 44,
+ "modify_time": "2019-07-22 19:06:48",
+ "last_release": "v1.0.2",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/technicaldada/best-hacking-tools",
+ "star": 35,
+ "commits": 4,
+ "modify_time": "2018-04-15 15:44:08",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/superbuker/camhell",
+ "star": 35,
+ "commits": 10,
+ "modify_time": "2018-04-01 10:48:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sundowndev/covermyass",
+ "star": 35,
+ "commits": 51,
+ "modify_time": "2019-06-12 18:56:27",
+ "last_release": "v1.2.1",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/sud0man/pac4mac",
+ "star": 35,
+ "commits": 28,
+ "modify_time": "2019-03-04 17:00:47",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/stdarg/tcp-port-used",
+ "star": 35,
+ "commits": 48,
+ "modify_time": "2018-10-25 23:47:02",
+ "last_release": "\n v1.0.1\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/sqlcollaborative/invoke-sqlcmd2",
+ "star": 35,
+ "commits": 48,
+ "modify_time": "2018-11-14 11:52:36",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/spiderlabs/ackack",
+ "star": 35,
+ "commits": 1,
+ "modify_time": "2010-12-06 22:13:11",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/sndvul/waf_bypass_helper",
+ "star": 35,
+ "commits": null,
+ "modify_time": "2017-08-30 19:32:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sistr0/ps4-hen-vtx",
+ "star": 35,
+ "commits": 29,
+ "modify_time": "2019-06-01 17:52:42",
+ "last_release": "2.1.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/siberas/ida2sym",
+ "star": 35,
+ "commits": 11,
+ "modify_time": "2014-07-25 06:34:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/serval-snt-uni-lu/droidra",
+ "star": 35,
+ "commits": 24,
+ "modify_time": "2017-04-10 08:14:30",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/seanheelan/funserialize",
+ "star": 35,
+ "commits": 28,
+ "modify_time": "2017-08-13 20:04:38",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/sduverger/ld-shatner",
+ "star": 35,
+ "commits": 4,
+ "modify_time": "2011-10-28 17:28:23",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/scen/ionlib",
+ "star": 35,
+ "commits": 42,
+ "modify_time": "2014-01-15 07:27:51",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/scavanger/memorymodule.net",
+ "star": 35,
+ "commits": 7,
+ "modify_time": "2018-03-15 09:23:27",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/satoshinm/pill_duck",
+ "star": 35,
+ "commits": 66,
+ "modify_time": "2017-12-29 03:24:35",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/samyoyo/flux",
+ "star": 35,
+ "commits": 164,
+ "modify_time": "2016-03-06 20:28:29",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/roddhjav/pass-audit",
+ "star": 35,
+ "commits": 95,
+ "modify_time": "2019-11-10 20:21:48",
+ "last_release": "v1.0.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ritiek/rat-via-telegram",
+ "star": 35,
+ "commits": 4,
+ "modify_time": "2017-06-13 16:53:03",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/redth/android.signature.tool",
+ "star": 35,
+ "commits": 10,
+ "modify_time": "2014-06-20 19:54:32",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/realoriginal/alpc-diaghub",
+ "star": 35,
+ "commits": 5,
+ "modify_time": "2018-11-02 19:09:36",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/r0oth3x49/tor",
+ "star": 35,
+ "commits": 14,
+ "modify_time": "2018-04-21 10:55:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/propaganistas/email-obfuscator",
+ "star": 35,
+ "commits": 32,
+ "modify_time": "2018-02-02 08:15:34",
+ "last_release": "1.0.7",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/prodicode/arppd",
+ "star": 35,
+ "commits": 15,
+ "modify_time": "2018-06-25 00:19:30",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/dsccommunity/xFailOverCluster",
+ "star": 35,
+ "commits": 159,
+ "modify_time": "2019-09-18 21:57:21",
+ "last_release": "\n 1.12.0.0-PSGallery\n ",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/plutochiou/shadowsocks-rss",
+ "star": 35,
+ "commits": 1,
+ "modify_time": "2015-06-04 09:31:05",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/onurkarasalihoglu/pentest-tools",
+ "star": 35,
+ "commits": 15,
+ "modify_time": "2017-05-30 18:23:39",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/one-com/one-validation",
+ "star": 35,
+ "commits": 145,
+ "modify_time": "2018-06-04 07:24:07",
+ "last_release": "\n v2.2.2\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/offensive-security/kali-wsl-chroot",
+ "star": 35,
+ "commits": 7,
+ "modify_time": "2019-04-24 15:35:21",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/oddcoder/cutterdrcov",
+ "star": 35,
+ "commits": 67,
+ "modify_time": "2019-04-27 10:42:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ocatak/malware_api_class",
+ "star": 35,
+ "commits": 22,
+ "modify_time": "2019-07-13 08:01:53",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/nucypher/goumbral",
+ "star": 35,
+ "commits": 100,
+ "modify_time": "2018-09-13 15:34:28",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/ntraiseharderror/kaiser",
+ "star": 35,
+ "commits": 13,
+ "modify_time": "2018-12-06 08:36:06",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ntraiseharderror/antihook",
+ "star": 35,
+ "commits": 6,
+ "modify_time": "2019-05-15 23:34:26",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ns1/xdp-workshop",
+ "star": 35,
+ "commits": 45,
+ "modify_time": "2019-06-11 18:54:27",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/nnamon/practicalret2libc",
+ "star": 35,
+ "commits": 17,
+ "modify_time": "2016-10-27 23:48:06",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/nil0x42/duplicut",
+ "star": 35,
+ "commits": 203,
+ "modify_time": "2019-11-21 10:34:36",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/nihilus/ida_classinformer",
+ "star": 35,
+ "commits": 1,
+ "modify_time": "2015-05-08 01:54:42",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/nightlionsecurity/phpstress",
+ "star": 35,
+ "commits": 5,
+ "modify_time": "2014-05-17 15:57:30",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/nicoulaj/broom",
+ "star": 35,
+ "commits": 65,
+ "modify_time": "2019-02-05 18:57:33",
+ "last_release": "\n 1.7.0\n ",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/nhoya/mycroftai-rce",
+ "star": 35,
+ "commits": 5,
+ "modify_time": "2018-06-10 15:49:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/netxfly/eventlog-audit",
+ "star": 35,
+ "commits": 6,
+ "modify_time": "2014-07-15 11:44:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/netevert/delator",
+ "star": 35,
+ "commits": 37,
+ "modify_time": "2019-04-10 17:33:37",
+ "last_release": "v1.2.2",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/netcrusherorg/netcrusher-java",
+ "star": 35,
+ "commits": 180,
+ "modify_time": "2016-12-06 05:28:57",
+ "last_release": "\n netcrusher-core-0.10\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/neargle/tips-note",
+ "star": 35,
+ "commits": 55,
+ "modify_time": "2018-06-07 05:59:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ncsa/ossec-tools",
+ "star": 35,
+ "commits": 11,
+ "modify_time": "2016-03-18 21:19:21",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/n1nj4sec/pymemimporter",
+ "star": 35,
+ "commits": 4,
+ "modify_time": "2017-03-16 18:31:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/motazreda/malwarefragmentationtool",
+ "star": 35,
+ "commits": 51,
+ "modify_time": "2015-11-21 03:31:24",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/miserlou/onionchat",
+ "star": 35,
+ "commits": 112,
+ "modify_time": "2014-09-23 08:38:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/michaelstott/crlf-injection-scanner",
+ "star": 35,
+ "commits": 15,
+ "modify_time": "2019-10-19 14:54:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/meyer9/ethdasm",
+ "star": 35,
+ "commits": 38,
+ "modify_time": "2017-10-08 20:52:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/metalnem/zinio",
+ "star": 35,
+ "commits": 54,
+ "modify_time": "2017-09-30 10:49:25",
+ "last_release": "v1.1.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/maxlaverse/reverse-shell",
+ "star": 35,
+ "commits": 33,
+ "modify_time": "2019-08-07 20:40:21",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/machosec/mystique",
+ "star": 35,
+ "commits": 5,
+ "modify_time": "2017-04-02 04:01:07",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/m4ndingo/radare2gui_dotnet",
+ "star": 35,
+ "commits": 235,
+ "modify_time": "2016-12-30 12:03:04",
+ "last_release": "1.0.156",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/lmammino/distributed-jwt-cracker",
+ "star": 35,
+ "commits": 22,
+ "modify_time": "2018-10-21 17:48:22",
+ "last_release": "\n 1.0.0\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/laginimaineb/unpack_bootloader_image",
+ "star": 35,
+ "commits": 2,
+ "modify_time": "2016-01-24 16:21:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/l4ys/lazyklee",
+ "star": 35,
+ "commits": 24,
+ "modify_time": "2019-03-24 05:13:27",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/kung-foo/freki",
+ "star": 35,
+ "commits": 92,
+ "modify_time": "2017-04-03 11:52:15",
+ "last_release": "v1.1.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/ktenzer/openshift-on-openstack-123",
+ "star": 35,
+ "commits": 161,
+ "modify_time": "2019-08-23 11:44:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kitctf/ctfcode",
+ "star": 35,
+ "commits": 16,
+ "modify_time": "2015-06-24 14:39:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kingsabri/sqlmap-tamper-api",
+ "star": 35,
+ "commits": 35,
+ "modify_time": "2018-03-16 20:22:19",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/kingkaki/struts2-vulenv",
+ "star": 35,
+ "commits": 10,
+ "modify_time": "2018-09-09 10:41:22",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/jordan9001/superhide",
+ "star": 35,
+ "commits": 8,
+ "modify_time": "2017-12-07 05:34:19",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jmpews/goscan",
+ "star": 35,
+ "commits": 14,
+ "modify_time": "2017-02-08 10:51:22",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/jimmy-sonny/yayagen",
+ "star": 35,
+ "commits": 7,
+ "modify_time": "2018-10-09 15:14:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jackgu1988/dsploit-scripts",
+ "star": 35,
+ "commits": 28,
+ "modify_time": "2017-03-16 11:35:42",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/isometriks/isometriksspambundle",
+ "star": 35,
+ "commits": 34,
+ "modify_time": "2019-11-19 21:20:04",
+ "last_release": "v1.0.4",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/interference-security/kali-windows-binaries",
+ "star": 35,
+ "commits": 17,
+ "modify_time": "2017-05-05 08:00:56",
+ "last_release": "\n upstream/0.5\n ",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/immunio/apache-struts2-cve-2017-5638",
+ "star": 35,
+ "commits": 4,
+ "modify_time": "2017-03-13 13:31:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ilektrojohn/creepy-plugins",
+ "star": 35,
+ "commits": 12,
+ "modify_time": "2014-01-28 22:20:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ikkisoft/blazer",
+ "star": 35,
+ "commits": 20,
+ "modify_time": "2018-09-24 19:15:20",
+ "last_release": "0.3.2",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/iiseymour/game-of-life",
+ "star": 35,
+ "commits": 59,
+ "modify_time": "2016-05-21 11:36:16",
+ "last_release": "v1.0.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/huntergregal/malwaresandbox",
+ "star": 35,
+ "commits": 10,
+ "modify_time": "2017-05-18 22:25:14",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/huntergregal/bothunter",
+ "star": 35,
+ "commits": 8,
+ "modify_time": "2017-02-15 18:26:59",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/holloway/insiderer",
+ "star": 35,
+ "commits": 34,
+ "modify_time": "2015-05-11 09:20:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/henryhaohao/slider_captcha_crack",
+ "star": 35,
+ "commits": 13,
+ "modify_time": "2018-11-03 11:21:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/havysec/vulnerable-scene",
+ "star": 35,
+ "commits": 9,
+ "modify_time": "2018-02-07 02:02:03",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/hatriot/bugs",
+ "star": 35,
+ "commits": 8,
+ "modify_time": "2018-08-22 16:16:24",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/harvie/libpurple-core-answerscripts",
+ "star": 35,
+ "commits": 87,
+ "modify_time": "2016-09-11 00:06:58",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hanc00l/weblogic_wls_wsat_rce",
+ "star": 35,
+ "commits": null,
+ "modify_time": "2018-01-11 03:47:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hacking-and-coffee/defcon-for-n00bs",
+ "star": 35,
+ "commits": 41,
+ "modify_time": "2017-05-20 00:06:40",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/guardicore/labs_campaigns",
+ "star": 35,
+ "commits": 49,
+ "modify_time": "2019-09-17 07:57:24",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/gsurma/password_cracker",
+ "star": 35,
+ "commits": 11,
+ "modify_time": "2019-07-24 19:29:00",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/gry/shellshock-scanner",
+ "star": 35,
+ "commits": 17,
+ "modify_time": "2014-10-12 11:29:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/grugq/buggery",
+ "star": 35,
+ "commits": 28,
+ "modify_time": "2012-10-02 12:43:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/grrrdog/acedcup",
+ "star": 35,
+ "commits": 16,
+ "modify_time": "2016-04-14 15:53:28",
+ "last_release": "v1.0.3",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/greavesy1899/mafia2toolkit",
+ "star": 35,
+ "commits": 468,
+ "modify_time": "2019-12-05 22:33:57",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/gouveaheitor/security-spellbook",
+ "star": 35,
+ "commits": 221,
+ "modify_time": "2019-12-03 17:55:24",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/geek-repo/c2-blockchain",
+ "star": 35,
+ "commits": 9,
+ "modify_time": "2019-08-13 14:40:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gauthamgoli/rarpasswordcracker",
+ "star": 35,
+ "commits": 8,
+ "modify_time": "2016-12-10 18:16:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ganapati/wpyscan",
+ "star": 35,
+ "commits": 37,
+ "modify_time": "2016-05-11 08:21:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/friedkiwi/netcrypt",
+ "star": 35,
+ "commits": 20,
+ "modify_time": "2013-11-05 10:11:38",
+ "last_release": "v1.1",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/freach/docker-image-policy-plugin",
+ "star": 35,
+ "commits": 15,
+ "modify_time": "2017-11-21 12:43:00",
+ "last_release": "\n 0.0.4\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/firebroo/screw_decode",
+ "star": 35,
+ "commits": 2,
+ "modify_time": "2016-10-24 10:01:06",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/fdiskyou/dbi",
+ "star": 35,
+ "commits": 4,
+ "modify_time": "2018-07-25 07:24:52",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/farisv/prestashop-cve-2018-19126",
+ "star": 35,
+ "commits": 17,
+ "modify_time": "2018-12-12 22:11:45",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/extremecoders-re/bytecode_simplifier",
+ "star": 35,
+ "commits": 15,
+ "modify_time": "2017-07-11 19:21:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ericzimmerman/recmd",
+ "star": 35,
+ "commits": 117,
+ "modify_time": "2019-11-06 17:59:40",
+ "last_release": "0.7.0.0",
+ "lang": "Rebol"
+ },
+ {
+ "link": "https://github.com/enovella/ida2ghidra-kb",
+ "star": 35,
+ "commits": 4,
+ "modify_time": "2019-04-08 14:18:50",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/efficios/babeltrace",
+ "star": 35,
+ "commits": 4330,
+ "modify_time": "2019-12-04 23:07:44",
+ "last_release": "v2.0.0-rc4",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/digidotcom/python-wpa-supplicant",
+ "star": 35,
+ "commits": 41,
+ "modify_time": "2018-10-20 10:49:40",
+ "last_release": "\n 0.2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/davidbuchanan314/fusee-nano",
+ "star": 35,
+ "commits": 20,
+ "modify_time": "2018-09-10 17:21:57",
+ "last_release": "0.4",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/d4mianwayne/alfred",
+ "star": 35,
+ "commits": 96,
+ "modify_time": "2019-09-30 18:37:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cyberisltd/egresser",
+ "star": 35,
+ "commits": 5,
+ "modify_time": "2013-09-09 17:01:34",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/csurage/rootkit",
+ "star": 35,
+ "commits": 1,
+ "modify_time": "2013-04-17 04:20:52",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/cretz/tor-static",
+ "star": 35,
+ "commits": 49,
+ "modify_time": "2019-10-31 21:00:27",
+ "last_release": "tor-0.3.5.7",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/codereversing/wow64syscall",
+ "star": 35,
+ "commits": 6,
+ "modify_time": "2015-06-16 00:02:30",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/cloudflare/ipfs-ext",
+ "star": 35,
+ "commits": 12,
+ "modify_time": "2019-11-05 17:59:36",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/choller/llcov",
+ "star": 35,
+ "commits": 26,
+ "modify_time": "2016-01-27 16:34:34",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/charlesxsh/mdk3-master",
+ "star": 35,
+ "commits": 9,
+ "modify_time": "2015-05-24 23:28:09",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cgvwzq/spectre",
+ "star": 35,
+ "commits": 3,
+ "modify_time": "2018-01-08 18:24:34",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/carlospolop/legion",
+ "star": 35,
+ "commits": 27,
+ "modify_time": "2019-10-16 17:29:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/brianwrf/cve-2018-11788",
+ "star": 35,
+ "commits": 4,
+ "modify_time": "2019-01-06 11:50:43",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/bnbdr/ida-bpf-processor",
+ "star": 35,
+ "commits": 23,
+ "modify_time": "2018-08-27 19:40:05",
+ "last_release": "v2.0.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bnagy/crabstone",
+ "star": 35,
+ "commits": 83,
+ "modify_time": "2015-09-14 10:28:23",
+ "last_release": "\n 3.0.3-rc1\n ",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/bmx-routing/bmx7",
+ "star": 35,
+ "commits": 941,
+ "modify_time": "2019-07-21 20:23:17",
+ "last_release": "\n v7.1.1\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/bkth/tale-of-chakra-bugs",
+ "star": 35,
+ "commits": 1,
+ "modify_time": "2019-06-07 10:28:51",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/bkerler/dump_avb_signature",
+ "star": 35,
+ "commits": 11,
+ "modify_time": "2019-06-23 09:27:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/b4rd4k/vproxy",
+ "star": 35,
+ "commits": 41,
+ "modify_time": "2017-11-18 18:57:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/att/docker-forensics",
+ "star": 35,
+ "commits": 14,
+ "modify_time": "2019-03-13 16:53:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ashchan/bitcoin-ethereum-cryptography",
+ "star": 35,
+ "commits": 5,
+ "modify_time": "2017-05-22 00:39:25",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/arnaudsoullie/ics-default-passwords",
+ "star": 35,
+ "commits": 5,
+ "modify_time": "2017-02-28 06:59:34",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/argp/bap",
+ "star": 35,
+ "commits": 2598,
+ "modify_time": "2014-10-01 10:57:17",
+ "last_release": "\n bap-0.8\n ",
+ "lang": "OCaml"
+ },
+ {
+ "link": "https://github.com/appsecco/practical-recon-levelup0x02",
+ "star": 35,
+ "commits": 12,
+ "modify_time": "2019-01-24 06:55:18",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/amir20/sha-miner",
+ "star": 35,
+ "commits": 20,
+ "modify_time": "2019-02-27 21:31:51",
+ "last_release": "\n v0.0.5\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/alectrocute/unboundbl",
+ "star": 35,
+ "commits": 62,
+ "modify_time": "2019-03-18 16:44:24",
+ "last_release": "",
+ "lang": "Makefile"
+ },
+ {
+ "link": "https://github.com/alanquatermain/appencryptor",
+ "star": 35,
+ "commits": 1,
+ "modify_time": "2009-04-19 19:55:04",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/akalankauk/keep-it-secure-file-encryption",
+ "star": 35,
+ "commits": 5,
+ "modify_time": "2018-03-11 06:58:44",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/ac-mercury/mercuryiss-kali",
+ "star": 35,
+ "commits": 4,
+ "modify_time": "2018-04-25 14:33:12",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/3gstudent/createremotethread",
+ "star": 35,
+ "commits": 8,
+ "modify_time": "2017-07-18 00:49:06",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/0x00pf/stan",
+ "star": 35,
+ "commits": 27,
+ "modify_time": "2017-07-26 21:23:58",
+ "last_release": "\n STAN-0.4\n ",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/0pc0defr/wordpress-sploit-framework",
+ "star": 35,
+ "commits": 63,
+ "modify_time": "2016-09-19 15:35:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/0ang3el/hibernate-injection-study",
+ "star": 35,
+ "commits": 2,
+ "modify_time": "2016-05-15 16:40:39",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/04x/wpscan",
+ "star": 35,
+ "commits": 12,
+ "modify_time": "2019-01-23 17:07:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/atrosinenko/kbdysch",
+ "star": 34,
+ "commits": 3,
+ "modify_time": "2019-11-27 08:17:45",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/k0fin/eternalrelayx",
+ "star": 34,
+ "commits": 6,
+ "modify_time": "2019-07-10 21:07:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/screetsec/dracos",
+ "star": 34,
+ "commits": 20,
+ "modify_time": "2017-02-18 02:00:10",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/misterbianco/wifijammer-ng",
+ "star": 34,
+ "commits": 85,
+ "modify_time": "2018-02-13 06:15:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/angr/fidget",
+ "star": 34,
+ "commits": 245,
+ "modify_time": "2019-10-25 21:52:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/x64dbg/titanengine",
+ "star": 34,
+ "commits": 396,
+ "modify_time": "2019-09-23 10:01:14",
+ "last_release": "\n V0008\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/cbeuw/goquiet-android",
+ "star": 34,
+ "commits": 13,
+ "modify_time": "2019-02-17 10:09:56",
+ "last_release": "v1.1.1",
+ "lang": "Kotlin"
+ },
+ {
+ "link": "https://github.com/csploit/daemon",
+ "star": 34,
+ "commits": 104,
+ "modify_time": "2018-02-02 21:56:46",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/cnlh/httpmonitor",
+ "star": 34,
+ "commits": 17,
+ "modify_time": "2019-09-17 07:02:02",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/threatexpress/portplow",
+ "star": 34,
+ "commits": 5,
+ "modify_time": "2018-08-01 18:05:13",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/airbus-seclab/elfesteem",
+ "star": 34,
+ "commits": 232,
+ "modify_time": "2017-03-09 09:55:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/v2ray/geoip",
+ "star": 34,
+ "commits": 28,
+ "modify_time": "2019-02-28 23:12:01",
+ "last_release": "20190516.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/danmcinerney/best-channel",
+ "star": 34,
+ "commits": 6,
+ "modify_time": "2015-02-26 04:31:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sensepost/shinai-fi",
+ "star": 34,
+ "commits": 6,
+ "modify_time": "2018-10-26 09:22:54",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/rabbitmask/whoisweblogic",
+ "star": 34,
+ "commits": 18,
+ "modify_time": "2019-07-08 15:28:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vrthra/f1",
+ "star": 34,
+ "commits": 7,
+ "modify_time": "2019-11-21 10:39:16",
+ "last_release": "\n 0.0.4\n ",
+ "lang": "Jupyter Notebook"
+ },
+ {
+ "link": "https://github.com/parkovski/wsudo",
+ "star": 34,
+ "commits": 38,
+ "modify_time": "2019-06-20 06:48:27",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/koala633/hostbase",
+ "star": 34,
+ "commits": 470,
+ "modify_time": "2019-10-16 11:12:13",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/alexatiks/spring-security-jwt-csrf",
+ "star": 34,
+ "commits": 35,
+ "modify_time": "2019-02-23 19:11:35",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/gfwlist/tsilwfg",
+ "star": 34,
+ "commits": 8,
+ "modify_time": "2019-05-22 16:26:03",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/k8gege/zimbraexploit",
+ "star": 34,
+ "commits": 8,
+ "modify_time": "2019-05-08 16:22:58",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/technowlogy-pushpender/technowhorse",
+ "star": 34,
+ "commits": 57,
+ "modify_time": "2019-12-06 13:44:22",
+ "last_release": "v1.5",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/NTTITON/Malware",
+ "star": 34,
+ "commits": 55,
+ "modify_time": "2017-06-16 06:43:46",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/safflower/solveme",
+ "star": 34,
+ "commits": 89,
+ "modify_time": "2019-10-09 06:07:58",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/cloudfoundry-attic/dea_ng",
+ "star": 34,
+ "commits": 1615,
+ "modify_time": "2017-01-11 13:48:25",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/CVEProject/cveproject.github.io",
+ "star": 34,
+ "commits": 563,
+ "modify_time": "2019-11-13 19:11:10",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/zfigura/semblance",
+ "star": 34,
+ "commits": 148,
+ "modify_time": "2019-12-04 22:58:48",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ywjt/dshield",
+ "star": 34,
+ "commits": 75,
+ "modify_time": "2016-12-16 09:33:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/x0rloser/ps4_wifi_bt",
+ "star": 34,
+ "commits": 6,
+ "modify_time": "2018-04-04 08:33:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wortell/azsentinel",
+ "star": 34,
+ "commits": 40,
+ "modify_time": "2019-11-21 10:18:10",
+ "last_release": "0.6.1",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/wooyundota/intentmonitor",
+ "star": 34,
+ "commits": 18,
+ "modify_time": "2015-05-28 03:55:48",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/winkelsdorf/delphiencryptioncompendium",
+ "star": 34,
+ "commits": 139,
+ "modify_time": "2019-06-02 08:51:40",
+ "last_release": "3",
+ "lang": "Pascal"
+ },
+ {
+ "link": "https://github.com/vu-aml/adlib",
+ "star": 34,
+ "commits": 791,
+ "modify_time": "2018-10-11 17:05:25",
+ "last_release": "v1.2.1",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/veeral-patel/incidents",
+ "star": 34,
+ "commits": 802,
+ "modify_time": "2019-09-05 02:57:10",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/unicornsasfuel/sqlite_sqli_cheat_sheet",
+ "star": 34,
+ "commits": 5,
+ "modify_time": "2016-04-19 17:00:16",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/tweekfawkes/white_lightning",
+ "star": 34,
+ "commits": 25,
+ "modify_time": "2015-03-01 09:10:53",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/traveloka/terraform-aws-waf-owasp-top-10-rules",
+ "star": 34,
+ "commits": 21,
+ "modify_time": "2019-10-18 08:18:57",
+ "last_release": "v0.2.0",
+ "lang": "HCL"
+ },
+ {
+ "link": "https://github.com/tkisason/gcrack",
+ "star": 34,
+ "commits": 22,
+ "modify_time": "2013-02-14 16:10:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/thomaspatzke/burp-sessionauthtool",
+ "star": 34,
+ "commits": 19,
+ "modify_time": "2017-01-10 07:25:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tarlogicsecurity/eoploaddriver",
+ "star": 34,
+ "commits": 3,
+ "modify_time": "2018-06-14 08:09:00",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/swwwolf/obderef",
+ "star": 34,
+ "commits": 4,
+ "modify_time": "2018-01-29 17:44:22",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/swisskyrepo/chocolatine",
+ "star": 34,
+ "commits": 8,
+ "modify_time": "2017-12-16 19:33:35",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/swisscom/powergrr",
+ "star": 34,
+ "commits": 112,
+ "modify_time": "2019-06-12 09:29:21",
+ "last_release": "v0.9.1",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/sourcefrenchy/certexfil.client",
+ "star": 34,
+ "commits": 3,
+ "modify_time": "2019-05-31 23:15:13",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/sola-da/conflictjs",
+ "star": 34,
+ "commits": 11,
+ "modify_time": "2018-02-21 22:27:55",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/snyk/serverless-snyk",
+ "star": 34,
+ "commits": 42,
+ "modify_time": "2016-11-02 16:25:18",
+ "last_release": "v1.2.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/smithersec/bug-bounty-resources",
+ "star": 34,
+ "commits": 249,
+ "modify_time": "2019-11-16 08:22:16",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/smh17/bitcoin-hacking-tools",
+ "star": 34,
+ "commits": 2,
+ "modify_time": "2018-04-25 00:09:41",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/shengqi158/s2-055-poc",
+ "star": 34,
+ "commits": 1,
+ "modify_time": "2017-12-07 01:57:31",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/shendo/netsink",
+ "star": 34,
+ "commits": 54,
+ "modify_time": "2014-12-07 01:01:09",
+ "last_release": "v0.5",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sf197/telegra_csharp_c2",
+ "star": 34,
+ "commits": 26,
+ "modify_time": "2019-09-01 12:30:46",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/secmob/cve-2016-0846",
+ "star": 34,
+ "commits": 1,
+ "modify_time": "2016-04-08 05:20:05",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/secgroundzero/cs-aggressor-scripts",
+ "star": 34,
+ "commits": 9,
+ "modify_time": "2018-03-10 20:38:30",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/seancline/pyext",
+ "star": 34,
+ "commits": 53,
+ "modify_time": "2019-06-15 16:58:22",
+ "last_release": "PyExt-v0.1.34",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/sasdf/firstblood",
+ "star": 34,
+ "commits": 24,
+ "modify_time": "2018-12-02 19:46:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sangaline/svganimator",
+ "star": 34,
+ "commits": 26,
+ "modify_time": "2015-02-26 23:14:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sandrokeil/yubikey-full-disk-encryption-secure-boot-uefi",
+ "star": 34,
+ "commits": 26,
+ "modify_time": "2019-10-24 15:23:55",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/rvn0xsy/fastwhatwebsearch",
+ "star": 34,
+ "commits": null,
+ "modify_time": "2018-10-28 15:06:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rokups/reflectiveldr",
+ "star": 34,
+ "commits": 7,
+ "modify_time": "2018-11-05 11:25:24",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/reversingid/crackmes-repository",
+ "star": 34,
+ "commits": 18,
+ "modify_time": "2019-08-15 20:58:53",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/reverselab/kernel-pwn-challenge",
+ "star": 34,
+ "commits": 1,
+ "modify_time": "2012-10-02 00:42:21",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/reinhardvz/wsk",
+ "star": 34,
+ "commits": 11,
+ "modify_time": "2016-02-03 05:37:48",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/quarkslab/conf-presentations",
+ "star": 34,
+ "commits": 11,
+ "modify_time": "2019-06-13 09:06:20",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/qilinbaoleiji/baoleiji",
+ "star": 34,
+ "commits": 2,
+ "modify_time": "2016-06-16 16:54:25",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/pure-l0g1c/spectre",
+ "star": 34,
+ "commits": 6,
+ "modify_time": "2018-11-06 13:45:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ptylenda/kubernetes-for-windows",
+ "star": 34,
+ "commits": 50,
+ "modify_time": "2018-09-21 23:19:47",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/postmodern/rprogram",
+ "star": 34,
+ "commits": 329,
+ "modify_time": "2012-07-16 02:57:11",
+ "last_release": "\n v0.3.2\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/politoinc/yara-scanner",
+ "star": 34,
+ "commits": 31,
+ "modify_time": "2016-06-30 23:24:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/plutooo/wiiu",
+ "star": 34,
+ "commits": 2,
+ "modify_time": "2016-12-06 19:59:49",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/peterhinch/micropython-fourier",
+ "star": 34,
+ "commits": 18,
+ "modify_time": "2019-10-06 10:35:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/peterbjornx/meloader",
+ "star": 34,
+ "commits": 78,
+ "modify_time": "2019-09-05 12:41:43",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/penafieljlm/burp-tracer",
+ "star": 34,
+ "commits": 6,
+ "modify_time": "2017-10-12 06:57:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/peewpw/domainfrontdiscover",
+ "star": 34,
+ "commits": 3,
+ "modify_time": "2018-02-23 19:35:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pearinc/fogconnect",
+ "star": 34,
+ "commits": 130,
+ "modify_time": "2019-10-24 06:20:42",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/panyu6325/cve-2015-1805",
+ "star": 34,
+ "commits": 3,
+ "modify_time": "2016-04-20 03:52:22",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ossindex/audit.net",
+ "star": 34,
+ "commits": 117,
+ "modify_time": "2019-09-22 17:21:28",
+ "last_release": "v3.0.5",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/osiris123/cdriver_loader",
+ "star": 34,
+ "commits": 7,
+ "modify_time": "2014-11-09 14:21:22",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/oros42/dns_sniffer",
+ "star": 34,
+ "commits": 6,
+ "modify_time": "2018-07-03 17:32:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/olegzhr/altprobe",
+ "star": 34,
+ "commits": 243,
+ "modify_time": "2019-11-28 08:37:33",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/nyan-x-cat/disable-windows-defender",
+ "star": 34,
+ "commits": 15,
+ "modify_time": "2019-08-04 23:29:46",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/nv/setinterval-sniffer",
+ "star": 34,
+ "commits": 5,
+ "modify_time": "2013-05-28 17:08:42",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/nowsecure/r2frida-book",
+ "star": 34,
+ "commits": 15,
+ "modify_time": "2019-01-11 16:18:08",
+ "last_release": "v0.0.3",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/niemand-sec/directx11hook",
+ "star": 34,
+ "commits": 15,
+ "modify_time": "2019-01-19 14:04:01",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/nickcano/reloadlibrary",
+ "star": 34,
+ "commits": 3,
+ "modify_time": "2018-08-29 11:34:46",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/nfrumkin/forecast-prometheus",
+ "star": 34,
+ "commits": 12,
+ "modify_time": "2018-08-23 20:33:00",
+ "last_release": "",
+ "lang": "Jupyter Notebook"
+ },
+ {
+ "link": "https://github.com/newfuture/pac",
+ "star": 34,
+ "commits": 22,
+ "modify_time": "2018-05-04 20:36:09",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/mtjailed/purplesmoke",
+ "star": 34,
+ "commits": 19,
+ "modify_time": "2018-05-20 21:49:07",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/monosource/radare2-explorations",
+ "star": 34,
+ "commits": 27,
+ "modify_time": "2016-07-31 17:18:28",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/misp/docker-misp",
+ "star": 34,
+ "commits": 53,
+ "modify_time": "2019-11-21 02:53:21",
+ "last_release": "",
+ "lang": "Dockerfile"
+ },
+ {
+ "link": "https://github.com/mipu94/broids_unicorn",
+ "star": 34,
+ "commits": 5,
+ "modify_time": "2017-01-20 03:35:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/minervalabsresearch/coffeeshot",
+ "star": 34,
+ "commits": 5,
+ "modify_time": "2018-08-06 10:36:12",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/mhelwig/privdns",
+ "star": 34,
+ "commits": 4,
+ "modify_time": "2018-01-30 09:39:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mboehme/pythia",
+ "star": 34,
+ "commits": 224,
+ "modify_time": "2019-04-23 10:12:38",
+ "last_release": "\n 2.49b\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/mattiasgeniar/http-flooder",
+ "star": 34,
+ "commits": 5,
+ "modify_time": "2017-08-08 08:09:56",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/mainframed/logica",
+ "star": 34,
+ "commits": 17,
+ "modify_time": "2018-08-14 04:45:58",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/madsc13ntist/idapython",
+ "star": 34,
+ "commits": 4,
+ "modify_time": "2016-01-07 20:56:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lookingglass/opentpx",
+ "star": 34,
+ "commits": 15,
+ "modify_time": "2015-10-17 16:16:13",
+ "last_release": "\n 2.2.0.17\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/lolwaleet/reverseip",
+ "star": 34,
+ "commits": 13,
+ "modify_time": "2018-01-31 19:31:06",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/leonardonve/edm",
+ "star": 34,
+ "commits": 2,
+ "modify_time": "2018-09-01 14:16:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/leoloobeek/keyserver",
+ "star": 34,
+ "commits": 6,
+ "modify_time": "2018-11-10 02:33:34",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/ldionmarcil/sudo-backdoor",
+ "star": 34,
+ "commits": 12,
+ "modify_time": "2017-06-27 16:11:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lazenca/exploit-tech",
+ "star": 34,
+ "commits": 23,
+ "modify_time": "2019-04-29 09:07:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kudelskisecurity/cryptochallenge18",
+ "star": 34,
+ "commits": 17,
+ "modify_time": "2018-08-27 09:06:54",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/kpcyrd/boxxy-rs",
+ "star": 34,
+ "commits": 174,
+ "modify_time": "2019-08-11 21:40:22",
+ "last_release": "\n v0.11.0\n ",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/kasperskylab/actionscript3",
+ "star": 34,
+ "commits": 9,
+ "modify_time": "2018-10-05 20:36:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jay-johnson/owasp-jenkins",
+ "star": 34,
+ "commits": 8,
+ "modify_time": "2018-11-02 20:03:38",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/jasonhinds13/hackable",
+ "star": 34,
+ "commits": 22,
+ "modify_time": "2019-07-22 13:29:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jantonakos/threathuntingexcursions",
+ "star": 34,
+ "commits": 5,
+ "modify_time": "2017-03-17 15:16:19",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ipbc-dev/bittube-miner",
+ "star": 34,
+ "commits": 137,
+ "modify_time": "2018-08-02 14:43:36",
+ "last_release": "2.0.0.3",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/interference-security/multiport",
+ "star": 34,
+ "commits": 9,
+ "modify_time": "2016-02-27 18:52:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/indeedminers/xmr-aeon-stak",
+ "star": 34,
+ "commits": 383,
+ "modify_time": "2019-04-27 13:53:55",
+ "last_release": "2.10.4",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ilmila/springcss-cve-2014-3625",
+ "star": 34,
+ "commits": 6,
+ "modify_time": "2016-03-11 14:30:45",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/idl3r/ghidravmlinuxloader",
+ "star": 34,
+ "commits": 4,
+ "modify_time": "2019-07-01 13:02:51",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/honeypotio/techmap",
+ "star": 34,
+ "commits": 113,
+ "modify_time": "2017-09-04 21:09:35",
+ "last_release": "\n build.104\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/hestat/blazescan",
+ "star": 34,
+ "commits": 348,
+ "modify_time": "2018-11-10 17:02:06",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/hardenedlinux/armv7-nexus7-grsec",
+ "star": 34,
+ "commits": 18,
+ "modify_time": "2018-02-09 14:03:58",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/hackedteam/test-av",
+ "star": 34,
+ "commits": 1011,
+ "modify_time": "2013-01-14 13:57:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gwerz/reverse-engineearing",
+ "star": 34,
+ "commits": 3,
+ "modify_time": "2014-09-02 10:58:45",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/gtanczyk/dupocracy",
+ "star": 34,
+ "commits": 99,
+ "modify_time": "2013-06-19 19:58:24",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/google/amt-forensics",
+ "star": 34,
+ "commits": 2,
+ "modify_time": "2017-09-29 09:11:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gioyik/getexploit",
+ "star": 34,
+ "commits": 7,
+ "modify_time": "2015-06-26 16:38:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/g2p/vido",
+ "star": 34,
+ "commits": 87,
+ "modify_time": "2017-08-05 10:15:44",
+ "last_release": "\n v0.3.2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/friedappleteam/blackhat-asia-2017",
+ "star": 34,
+ "commits": 1,
+ "modify_time": "2017-03-30 11:55:06",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/flowztul/keyexec",
+ "star": 34,
+ "commits": 3,
+ "modify_time": "2019-01-10 14:08:39",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/ez8-co/unlocker",
+ "star": 34,
+ "commits": 33,
+ "modify_time": "2019-05-30 03:28:10",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/eyyub/tensorflow-cyclegan",
+ "star": 34,
+ "commits": 4,
+ "modify_time": "2017-07-16 23:26:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ernw/dizzy-legacy",
+ "star": 34,
+ "commits": 3,
+ "modify_time": "2017-07-27 12:31:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ernw/dizzy",
+ "star": 34,
+ "commits": 5,
+ "modify_time": "2018-07-25 12:18:45",
+ "last_release": "\n v2.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ericzimmerman/appcompatcacheparser",
+ "star": 34,
+ "commits": 94,
+ "modify_time": "2019-11-22 15:23:43",
+ "last_release": "1.2.0.0",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/emdel/ksfinder",
+ "star": 34,
+ "commits": 7,
+ "modify_time": "2016-09-28 15:44:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/embedi/dir8xx_poc",
+ "star": 34,
+ "commits": 1,
+ "modify_time": "2017-09-12 16:33:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/efficios/barectf",
+ "star": 34,
+ "commits": 227,
+ "modify_time": "2019-06-04 15:52:19",
+ "last_release": "\n v2.3.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/easonoutlook/rasticrac",
+ "star": 34,
+ "commits": 4,
+ "modify_time": "2015-07-13 12:19:48",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/dwin/gosecretboxpassword",
+ "star": 34,
+ "commits": 19,
+ "modify_time": "2019-02-14 19:46:15",
+ "last_release": "v1.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/duo-labs/cloudtrail-partitioner",
+ "star": 34,
+ "commits": 8,
+ "modify_time": "2019-10-21 16:21:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/doctorlai/vbscript_obfuscator",
+ "star": 34,
+ "commits": 11,
+ "modify_time": "2017-12-28 10:24:38",
+ "last_release": "",
+ "lang": "Visual Basic .NET"
+ },
+ {
+ "link": "https://github.com/dmchell/metasploit-framework",
+ "star": 34,
+ "commits": 41675,
+ "modify_time": "2017-03-28 14:34:50",
+ "last_release": "\n 4.14.5\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/dmaasland/mcfridafee",
+ "star": 34,
+ "commits": 3,
+ "modify_time": "2019-10-17 16:23:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dionach/headersanalyzer",
+ "star": 34,
+ "commits": 9,
+ "modify_time": "2014-09-04 08:33:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/devadvance/rootinspector",
+ "star": 34,
+ "commits": 7,
+ "modify_time": "2015-11-23 06:14:17",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/darx0r/reef",
+ "star": 34,
+ "commits": 13,
+ "modify_time": "2016-07-14 22:31:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/daniestevez/gr-outernet",
+ "star": 34,
+ "commits": 23,
+ "modify_time": "2017-07-18 18:27:22",
+ "last_release": "",
+ "lang": "CMake"
+ },
+ {
+ "link": "https://github.com/d3vilbug/brutal_ssh",
+ "star": 34,
+ "commits": 16,
+ "modify_time": "2018-03-04 16:00:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cysca/cysca2015",
+ "star": 34,
+ "commits": 6,
+ "modify_time": "2016-10-28 05:29:50",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/cymmetria/ciscoasa_honeypot",
+ "star": 34,
+ "commits": 9,
+ "modify_time": "2018-08-16 14:24:19",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/curehsu/ez-wave",
+ "star": 34,
+ "commits": 26,
+ "modify_time": "2016-01-17 23:36:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/claudiugeorgiu/riskindroid",
+ "star": 34,
+ "commits": 23,
+ "modify_time": "2019-05-18 19:07:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/chokepoint/jynxkit",
+ "star": 34,
+ "commits": 1,
+ "modify_time": "2012-12-15 09:51:44",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/chiehmin/sheepwall",
+ "star": 34,
+ "commits": 32,
+ "modify_time": "2018-02-03 06:19:45",
+ "last_release": "v0.1.1",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/cheery/spirthon",
+ "star": 34,
+ "commits": 17,
+ "modify_time": "2017-04-25 22:22:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cclgroupltd/ccl-bplist",
+ "star": 34,
+ "commits": 18,
+ "modify_time": "2016-02-23 13:54:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/breenmachine/hpwn",
+ "star": 34,
+ "commits": 2,
+ "modify_time": "2017-11-20 18:15:05",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/brad-anton/freeradius-wpe",
+ "star": 34,
+ "commits": 11,
+ "modify_time": "2014-07-26 20:08:08",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/bartavelle/rulesfinder",
+ "star": 34,
+ "commits": 68,
+ "modify_time": "2018-11-23 10:43:48",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/avplayer/avcamera",
+ "star": 34,
+ "commits": 65,
+ "modify_time": "2015-06-05 16:26:40",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/availlang/avail",
+ "star": 34,
+ "commits": 2342,
+ "modify_time": "2019-09-27 17:48:17",
+ "last_release": "\n release-1.4.1\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/attackercan/burp-xss-sql-plugin",
+ "star": 34,
+ "commits": 7,
+ "modify_time": "2016-09-28 21:46:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/asuri-team/ctf-xinetd",
+ "star": 34,
+ "commits": 10,
+ "modify_time": "2018-10-01 03:06:27",
+ "last_release": "1.0.1",
+ "lang": "Dockerfile"
+ },
+ {
+ "link": "https://github.com/arbazkiraak/burpblh",
+ "star": 34,
+ "commits": 13,
+ "modify_time": "2019-09-13 07:16:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ank1036official/cloudcheck",
+ "star": 34,
+ "commits": 10,
+ "modify_time": "2019-07-21 19:40:02",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/anbai-inc/secrss",
+ "star": 34,
+ "commits": 12,
+ "modify_time": "2018-02-03 02:06:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/am0nt31r0/osint-search",
+ "star": 34,
+ "commits": 58,
+ "modify_time": "2019-05-02 21:11:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/alon7/bbt-multiminer",
+ "star": 34,
+ "commits": 31,
+ "modify_time": "2017-08-04 22:43:31",
+ "last_release": "v1.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/aliasrobotics/rvd",
+ "star": 34,
+ "commits": 362,
+ "modify_time": "2019-12-09 08:44:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/alexbers/exploit_farm",
+ "star": 34,
+ "commits": 83,
+ "modify_time": "2017-12-05 19:00:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/alessiovierti/blindpie",
+ "star": 34,
+ "commits": 18,
+ "modify_time": "2019-01-29 08:30:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/adulau/misp-osint-collection",
+ "star": 34,
+ "commits": 14,
+ "modify_time": "2019-11-18 05:28:49",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/adamkramer/handle_monitor",
+ "star": 34,
+ "commits": 12,
+ "modify_time": "2015-04-03 16:03:53",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/3gstudent/ninjacopy",
+ "star": 34,
+ "commits": 5,
+ "modify_time": "2016-06-30 01:34:35",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/233sec/laravel-src",
+ "star": 34,
+ "commits": 17,
+ "modify_time": "2017-02-17 13:53:51",
+ "last_release": "0.05",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/garywill/linux-router",
+ "star": 33,
+ "commits": 97,
+ "modify_time": "2019-11-05 05:34:35",
+ "last_release": "\n 0.5.4\n ",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/mzz2017/v2raya",
+ "star": 33,
+ "commits": 106,
+ "modify_time": "2019-12-10 06:39:16",
+ "last_release": "v0.4.9",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/serverless-ss/slss",
+ "star": 33,
+ "commits": 48,
+ "modify_time": "2017-09-18 02:30:48",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/86hh/poc-viruses",
+ "star": 33,
+ "commits": 2,
+ "modify_time": "2019-11-23 18:34:21",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/mak-/reverse-shell-access-kernel-module",
+ "star": 33,
+ "commits": 3,
+ "modify_time": "2019-10-22 16:26:16",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/uwnetworkslab/cordova-plugin-tun2socks",
+ "star": 33,
+ "commits": 18,
+ "modify_time": "2017-06-20 14:39:17",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/landgrey/toolsparty",
+ "star": 33,
+ "commits": 15,
+ "modify_time": "2019-10-21 14:09:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/taviso/sharapi",
+ "star": 33,
+ "commits": 41,
+ "modify_time": "2019-12-03 00:44:08",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/jaredhaight/scripts",
+ "star": 33,
+ "commits": 5,
+ "modify_time": "2018-08-03 15:48:55",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/skelsec/socksohttp",
+ "star": 33,
+ "commits": 20,
+ "modify_time": "2018-10-17 17:54:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jipegit/twintelligence",
+ "star": 33,
+ "commits": 20,
+ "modify_time": "2018-01-30 21:39:58",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/gdbinit/bruteforcesysent",
+ "star": 33,
+ "commits": 13,
+ "modify_time": "2015-01-28 23:19:23",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/angr/angr-platforms",
+ "star": 33,
+ "commits": 132,
+ "modify_time": "2019-12-06 20:15:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/osirislab/csaw-ctf-2018-quals",
+ "star": 33,
+ "commits": 3,
+ "modify_time": "2018-09-17 20:42:27",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/stealth/injectso",
+ "star": 33,
+ "commits": 1,
+ "modify_time": "2016-03-09 10:13:56",
+ "last_release": "\n injectso-0-53s2\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hacker0x01/hacker101coursework",
+ "star": 33,
+ "commits": 12,
+ "modify_time": "2019-04-22 23:12:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/seemoo-lab/wireshark-awdl",
+ "star": 33,
+ "commits": 71506,
+ "modify_time": "2018-10-25 11:05:08",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/michenriksen/hackpad",
+ "star": 33,
+ "commits": 5,
+ "modify_time": "2014-02-18 08:15:50",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/jovanbulck/0xbadc0de",
+ "star": 33,
+ "commits": 8,
+ "modify_time": "2019-11-21 16:28:35",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/rhelmot/nclib",
+ "star": 33,
+ "commits": 80,
+ "modify_time": "2019-11-21 22:55:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xerpi/vita-libbaremetal",
+ "star": 33,
+ "commits": 46,
+ "modify_time": "2019-11-10 22:53:07",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ml31415/wpscrack",
+ "star": 33,
+ "commits": 4,
+ "modify_time": "2012-10-14 18:19:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/proteas/ios13-sandbox-profile-format",
+ "star": 33,
+ "commits": 2,
+ "modify_time": "2019-10-30 03:55:12",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/xerpi/vita-libbaremetal",
+ "star": 33,
+ "commits": 46,
+ "modify_time": "2019-11-10 22:53:07",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/NewBee119/IP-location",
+ "star": 33,
+ "commits": 13,
+ "modify_time": "2018-06-06 14:30:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/FortyNorthSecurity/Hasher",
+ "star": 33,
+ "commits": 48,
+ "modify_time": "2015-08-18 00:34:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/TeamMolecule/toshiba-mep-idp",
+ "star": 33,
+ "commits": 23,
+ "modify_time": "2018-06-26 03:57:28",
+ "last_release": "v0.3",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/openpreserve/scape-xcorrsound",
+ "star": 33,
+ "commits": 242,
+ "modify_time": "2018-05-07 09:16:31",
+ "last_release": "v2.0.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/busyluo/NetAssistant",
+ "star": 33,
+ "commits": 11,
+ "modify_time": "2019-09-03 09:23:20",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/googleapis/cloud-profiler-nodejs",
+ "star": 33,
+ "commits": 370,
+ "modify_time": "2019-11-25 16:54:39",
+ "last_release": "v3.0.1",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/NewBee119/check_ip",
+ "star": 33,
+ "commits": 27,
+ "modify_time": "2018-08-09 02:49:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zhou0/shadowsocks-perl",
+ "star": 33,
+ "commits": 1,
+ "modify_time": "2018-02-15 08:42:29",
+ "last_release": "0.9.3.3",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/xxwiredxx/nintendo-switch-joycon-hack",
+ "star": 33,
+ "commits": 23,
+ "modify_time": "2018-07-01 20:38:31",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/xurubin/aurasium",
+ "star": 33,
+ "commits": 4,
+ "modify_time": "2015-01-18 15:18:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xerpi/vita-libbaremetal",
+ "star": 33,
+ "commits": 46,
+ "modify_time": "2019-11-10 22:53:07",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/wolfram77web/app-peid",
+ "star": 33,
+ "commits": 2,
+ "modify_time": "2017-04-10 19:03:27",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/weaknetlabs/byteforce",
+ "star": 33,
+ "commits": 26,
+ "modify_time": "2017-11-06 12:39:23",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/wanttobeno/x64_aob_search",
+ "star": 33,
+ "commits": 1,
+ "modify_time": "2018-11-02 07:49:21",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/vixentael/ios-datasec-basics",
+ "star": 33,
+ "commits": 8,
+ "modify_time": "2019-03-18 03:14:01",
+ "last_release": "",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/versioneye/versioneye-security",
+ "star": 33,
+ "commits": 323,
+ "modify_time": "2018-08-27 19:49:25",
+ "last_release": "\n v1.3.0\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/vanhauser-thc/afl-dyninst",
+ "star": 33,
+ "commits": 40,
+ "modify_time": "2019-09-20 12:49:36",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/trailofbits/nyc-infosec",
+ "star": 33,
+ "commits": 161,
+ "modify_time": "2019-11-14 19:35:18",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/tp7309/ttpassgen",
+ "star": 33,
+ "commits": 100,
+ "modify_time": "2019-10-09 05:15:50",
+ "last_release": "v1.0.4",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tom4t0/cobalt-strike-persistence",
+ "star": 33,
+ "commits": 4,
+ "modify_time": "2017-03-19 08:44:32",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/tlgyt/wibr",
+ "star": 33,
+ "commits": 58,
+ "modify_time": "2018-10-30 04:17:46",
+ "last_release": "1.2.0",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/tlgyt/absent-loader",
+ "star": 33,
+ "commits": 22,
+ "modify_time": "2019-05-09 03:16:53",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/tienex/apfs",
+ "star": 33,
+ "commits": 1,
+ "modify_time": "2017-12-01 15:17:45",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/thisissecurity/malware",
+ "star": 33,
+ "commits": 25,
+ "modify_time": "2018-11-05 09:37:42",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/teebytes/tnt-fuzzer",
+ "star": 33,
+ "commits": 79,
+ "modify_time": "2019-09-10 12:10:08",
+ "last_release": "v2.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/taylanbildik/linux_dersleri",
+ "star": 33,
+ "commits": 515,
+ "modify_time": "2019-10-29 12:25:59",
+ "last_release": "andoid-v0.1.1",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/superkojiman/snuff",
+ "star": 33,
+ "commits": 5,
+ "modify_time": "2017-01-01 05:41:30",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/soufianetahiri/vault-8-hive",
+ "star": 33,
+ "commits": 345,
+ "modify_time": "2015-10-30 13:58:22",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/soufianetahiri/mirai-botnet",
+ "star": 33,
+ "commits": 6,
+ "modify_time": "2017-11-08 14:58:11",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/smileart/omg",
+ "star": 33,
+ "commits": 245,
+ "modify_time": "2019-01-31 17:09:45",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/smeegesec/smeegescrape",
+ "star": 33,
+ "commits": 13,
+ "modify_time": "2016-12-05 03:05:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/smaash/kunai",
+ "star": 33,
+ "commits": 9,
+ "modify_time": "2015-05-07 10:15:09",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/siberas/cve-2016-3309_reloaded",
+ "star": 33,
+ "commits": 4,
+ "modify_time": "2017-10-06 09:47:36",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/shieldfy/waf-detector",
+ "star": 33,
+ "commits": 14,
+ "modify_time": "2016-11-29 06:13:58",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/securesystemslab/periscope",
+ "star": 33,
+ "commits": 11,
+ "modify_time": "2019-03-27 17:12:51",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/saturnsvoid/windows-keylogger",
+ "star": 33,
+ "commits": 4,
+ "modify_time": "2018-11-28 05:22:53",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/sapran/ukraine-infosec-conferences",
+ "star": 33,
+ "commits": 138,
+ "modify_time": "2019-10-07 07:55:38",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/sam-b/windows_syscalls_dumper",
+ "star": 33,
+ "commits": 2,
+ "modify_time": "2017-02-13 20:05:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/s0cket7/torstat",
+ "star": 33,
+ "commits": null,
+ "modify_time": "2017-12-15 19:28:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/roshly/ayyhook-loader",
+ "star": 33,
+ "commits": 14,
+ "modify_time": "2018-08-09 16:25:11",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/rootlabs/torstat",
+ "star": 33,
+ "commits": null,
+ "modify_time": "2017-12-15 19:28:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/robertohuertasm/apk-decompiler",
+ "star": 33,
+ "commits": 15,
+ "modify_time": "2019-06-18 18:34:41",
+ "last_release": "v0.2.2",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/riramar/pubkey-pin-android",
+ "star": 33,
+ "commits": 6,
+ "modify_time": "2017-02-07 15:50:37",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/rh0dev/shellcode2asmjs",
+ "star": 33,
+ "commits": 4,
+ "modify_time": "2018-03-14 20:25:06",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/rems-project/sail-arm",
+ "star": 33,
+ "commits": 34,
+ "modify_time": "2019-11-21 19:23:32",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/rapid7/metasploit_data_models",
+ "star": 33,
+ "commits": 1516,
+ "modify_time": "2019-05-10 22:02:31",
+ "last_release": "\n v3.0.10\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/r35tart/redisdirscan",
+ "star": 33,
+ "commits": 6,
+ "modify_time": "2019-05-03 18:20:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/qazbnm456/ctf-course",
+ "star": 33,
+ "commits": 1,
+ "modify_time": "2015-07-13 23:15:25",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/q3k/ctf",
+ "star": 33,
+ "commits": 33,
+ "modify_time": "2019-06-24 00:15:47",
+ "last_release": "",
+ "lang": "Verilog"
+ },
+ {
+ "link": "https://github.com/ptresearch/pentest-detections",
+ "star": 33,
+ "commits": 36,
+ "modify_time": "2017-07-05 14:56:33",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/pr0cf5/ctf-writeups",
+ "star": 33,
+ "commits": 57,
+ "modify_time": "2019-10-25 16:18:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/portswigger/active-scan-plus-plus",
+ "star": 33,
+ "commits": 102,
+ "modify_time": "2019-06-13 14:38:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/peacand/burp-pytemplate",
+ "star": 33,
+ "commits": 4,
+ "modify_time": "2015-11-29 20:41:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/panagiotisdrakatos/t0rlib4j",
+ "star": 33,
+ "commits": 24,
+ "modify_time": "2017-10-23 14:45:48",
+ "last_release": "1.0.2",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/pan0pt1c0n/python-sockstress",
+ "star": 33,
+ "commits": 7,
+ "modify_time": "2015-09-09 22:29:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/p3n3troot0r/socketv2v",
+ "star": 33,
+ "commits": 11,
+ "modify_time": "2019-01-18 16:31:38",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/osssanitizer/osspolice",
+ "star": 33,
+ "commits": 6,
+ "modify_time": "2018-01-23 15:07:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nyx0/alina",
+ "star": 33,
+ "commits": 6,
+ "modify_time": "2015-02-25 00:14:24",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/nwhusted/auditdandroid",
+ "star": 33,
+ "commits": 169,
+ "modify_time": "2013-05-09 14:14:10",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/novetta/delilah",
+ "star": 33,
+ "commits": null,
+ "modify_time": "2015-06-11 12:30:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mzet-/ctf-writeups",
+ "star": 33,
+ "commits": 45,
+ "modify_time": "2018-05-13 22:14:01",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/mubix/fakenetbios",
+ "star": 33,
+ "commits": 7,
+ "modify_time": "2012-12-06 22:52:55",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/mtjailed/privateapimanager",
+ "star": 33,
+ "commits": 16,
+ "modify_time": "2017-12-21 14:02:47",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/mtalbi/vm_escape",
+ "star": 33,
+ "commits": 2,
+ "modify_time": "2017-09-24 18:04:36",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/mozillasecurity/orion",
+ "star": 33,
+ "commits": 381,
+ "modify_time": "2019-12-04 20:35:27",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/monolithworks/trueseeing",
+ "star": 33,
+ "commits": 412,
+ "modify_time": "2019-10-03 07:44:17",
+ "last_release": "\n 2.0.10\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/moldabekov/whatsipp",
+ "star": 33,
+ "commits": 8,
+ "modify_time": "2019-07-25 19:03:20",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/moheshmohan/pyssltest",
+ "star": 33,
+ "commits": 9,
+ "modify_time": "2016-03-29 11:25:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mmyydd/relative-pattern",
+ "star": 33,
+ "commits": 164,
+ "modify_time": "2015-07-18 01:30:28",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/milter-manager/milter-manager",
+ "star": 33,
+ "commits": 6555,
+ "modify_time": "2019-10-17 05:52:47",
+ "last_release": "2.1.5",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/mili-tan/mv2rayconfig",
+ "star": 33,
+ "commits": 55,
+ "modify_time": "2018-04-20 03:32:16",
+ "last_release": "Second",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/mgeeky/stracciatella",
+ "star": 33,
+ "commits": 13,
+ "modify_time": "2019-07-31 22:52:04",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/mfthomps/resim",
+ "star": 33,
+ "commits": 308,
+ "modify_time": "2019-11-26 21:16:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/menooker/fishhook",
+ "star": 33,
+ "commits": 15,
+ "modify_time": "2017-12-11 03:32:51",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/medicean/superterm",
+ "star": 33,
+ "commits": 13,
+ "modify_time": "2019-09-22 16:38:26",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/mattbierner/urban-dictionary-word-list",
+ "star": 33,
+ "commits": 14,
+ "modify_time": "2019-03-10 07:19:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mansosec/microsoft-malware-challenge",
+ "star": 33,
+ "commits": 13,
+ "modify_time": "2016-03-10 16:09:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/malware-revealer/malware-revealer",
+ "star": 33,
+ "commits": 118,
+ "modify_time": "2019-07-24 15:50:40",
+ "last_release": "v0.1",
+ "lang": "Jupyter Notebook"
+ },
+ {
+ "link": "https://github.com/maldiohead/cve-2019-8540",
+ "star": 33,
+ "commits": 12,
+ "modify_time": "2019-05-21 08:32:38",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/madirish/kojoney2",
+ "star": 33,
+ "commits": 227,
+ "modify_time": "2015-01-06 14:44:28",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/m1nl/pompa",
+ "star": 33,
+ "commits": 360,
+ "modify_time": "2019-12-06 11:24:19",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/luca-m/lsb-toolkit",
+ "star": 33,
+ "commits": 15,
+ "modify_time": "2013-06-10 15:37:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/long123king/tokenext",
+ "star": 33,
+ "commits": 13,
+ "modify_time": "2018-02-21 02:23:22",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/kingsunc/minidump",
+ "star": 33,
+ "commits": 2,
+ "modify_time": "2017-02-27 09:47:20",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/khr0x40sh/metasploit-modules",
+ "star": 33,
+ "commits": 8,
+ "modify_time": "2016-07-13 13:46:21",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/kevcui/mitm-scripts",
+ "star": 33,
+ "commits": 45,
+ "modify_time": "2019-11-25 14:55:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/karek314/ddos-deflate-nginx-cloudflare",
+ "star": 33,
+ "commits": 7,
+ "modify_time": "2018-01-27 12:37:11",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/kaorz/exploits_challenges",
+ "star": 33,
+ "commits": 67,
+ "modify_time": "2019-10-20 13:05:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kandru/ts3proxy",
+ "star": 33,
+ "commits": 78,
+ "modify_time": "2018-02-04 16:14:46",
+ "last_release": "v0.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jonmetz/androfuzz",
+ "star": 33,
+ "commits": 19,
+ "modify_time": "2014-09-04 23:33:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/joeferner/node-gitgui",
+ "star": 33,
+ "commits": 98,
+ "modify_time": "2013-09-23 14:17:46",
+ "last_release": "\n v0.0.2\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/jipegit/fect",
+ "star": 33,
+ "commits": 12,
+ "modify_time": "2018-01-30 21:38:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jianqiangzhao/mosec2016",
+ "star": 33,
+ "commits": 3,
+ "modify_time": "2016-07-04 12:32:20",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/jclem/ot_ex",
+ "star": 33,
+ "commits": 24,
+ "modify_time": "2017-08-21 15:37:20",
+ "last_release": "",
+ "lang": "Elixir"
+ },
+ {
+ "link": "https://github.com/jamesacampbell/python-examples",
+ "star": 33,
+ "commits": 301,
+ "modify_time": "2019-09-01 15:54:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jakeajames/reverse-engineering",
+ "star": 33,
+ "commits": null,
+ "modify_time": "2018-12-31 13:02:04",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/iteratec/juicy-ctf",
+ "star": 33,
+ "commits": 299,
+ "modify_time": "2019-10-27 18:20:23",
+ "last_release": "v1.3.1",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/integrity-sa/introspy-ios",
+ "star": 33,
+ "commits": 291,
+ "modify_time": "2016-10-16 11:52:54",
+ "last_release": "ios-tracer-v0.5.1",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/impakho/ciscn2019_final_web1",
+ "star": 33,
+ "commits": 2,
+ "modify_time": "2019-08-04 05:03:22",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/immunit/cve-2018-11759",
+ "star": 33,
+ "commits": 7,
+ "modify_time": "2018-12-11 12:58:57",
+ "last_release": "",
+ "lang": "Dockerfile"
+ },
+ {
+ "link": "https://github.com/illusivenetworks-labs/webtrap",
+ "star": 33,
+ "commits": 6,
+ "modify_time": "2018-03-28 13:44:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/RealBearcat/CVE-2017-16995",
+ "star": 33,
+ "commits": 10,
+ "modify_time": "2018-03-19 05:59:14",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/htbridge/pivaa",
+ "star": 33,
+ "commits": 15,
+ "modify_time": "2018-02-04 18:06:41",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/heikoheiko/pyethapp",
+ "star": 33,
+ "commits": 440,
+ "modify_time": "2015-05-09 10:25:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/guedou/r2scapy",
+ "star": 33,
+ "commits": 3,
+ "modify_time": "2017-11-24 08:39:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gregzem/aibolit",
+ "star": 33,
+ "commits": 150,
+ "modify_time": "2016-08-25 08:08:57",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/graxcode/zelixkiller",
+ "star": 33,
+ "commits": 35,
+ "modify_time": "2018-09-16 10:55:24",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/ganapati/firmflaws",
+ "star": 33,
+ "commits": 58,
+ "modify_time": "2018-02-09 16:05:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/g4lb1t/invoke-noshell",
+ "star": 33,
+ "commits": 16,
+ "modify_time": "2018-08-09 15:39:00",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/g4hsean/binauthor",
+ "star": 33,
+ "commits": 73,
+ "modify_time": "2016-09-16 16:53:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/francodacosta/phmagick",
+ "star": 33,
+ "commits": 44,
+ "modify_time": "2017-09-13 21:39:18",
+ "last_release": "5.0.1",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/fnk0c/organon",
+ "star": 33,
+ "commits": 277,
+ "modify_time": "2018-10-30 03:40:30",
+ "last_release": "v0.2.8",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/flyfishsec/rsgen",
+ "star": 33,
+ "commits": 30,
+ "modify_time": "2019-06-07 04:48:44",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/fkie-cad/iva",
+ "star": 33,
+ "commits": 9,
+ "modify_time": "2017-04-19 13:41:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/firebitsbr/hardeningone",
+ "star": 33,
+ "commits": 1,
+ "modify_time": "2012-02-15 12:49:38",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/evilsocket/altair",
+ "star": 33,
+ "commits": 21,
+ "modify_time": "2011-01-24 23:17:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/eset/volatility-browserhooks",
+ "star": 33,
+ "commits": 14,
+ "modify_time": "2018-12-14 11:32:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/enkomio/misc",
+ "star": 33,
+ "commits": 95,
+ "modify_time": "2019-11-29 10:38:51",
+ "last_release": "",
+ "lang": "F#"
+ },
+ {
+ "link": "https://github.com/egebalci/the-eye",
+ "star": 33,
+ "commits": 21,
+ "modify_time": "2017-01-26 13:12:24",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/dspinellis/cqmetrics",
+ "star": 33,
+ "commits": 159,
+ "modify_time": "2019-11-07 19:09:46",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/dnet/burp-oauth",
+ "star": 33,
+ "commits": 33,
+ "modify_time": "2018-06-27 11:07:49",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/dlshad/openvpn-shapeshifter",
+ "star": 33,
+ "commits": 32,
+ "modify_time": "2017-06-06 15:13:44",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/disruptops/resource-counter",
+ "star": 33,
+ "commits": 4,
+ "modify_time": "2018-05-24 23:44:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dfw1n/dfw1n-osint",
+ "star": 33,
+ "commits": 131,
+ "modify_time": "2019-09-02 06:22:43",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/dennisaa/patharmor",
+ "star": 33,
+ "commits": 5,
+ "modify_time": "2015-10-26 16:43:57",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/demonsec666/secist_applocker",
+ "star": 33,
+ "commits": 19,
+ "modify_time": "2018-02-07 04:05:44",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/dcso/spyre",
+ "star": 33,
+ "commits": 53,
+ "modify_time": "2019-10-16 07:40:23",
+ "last_release": "v1.1.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/davidwittman/wpxmlrpcbrute",
+ "star": 33,
+ "commits": 4,
+ "modify_time": "2016-06-06 23:31:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/damonmohammadbagher/nativepayload_arp",
+ "star": 33,
+ "commits": 86,
+ "modify_time": "2018-10-17 22:10:41",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/cz-nic/dns-fuzzing",
+ "star": 33,
+ "commits": 11,
+ "modify_time": "2016-02-18 09:40:06",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/cys3c/backdoorman",
+ "star": 33,
+ "commits": 22,
+ "modify_time": "2016-12-09 15:41:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cr4sh/aptiocalypsis",
+ "star": 33,
+ "commits": 3,
+ "modify_time": "2016-10-22 17:27:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cnrig/cnrig",
+ "star": 33,
+ "commits": 31,
+ "modify_time": "2018-04-26 22:39:17",
+ "last_release": "v0.1.5-release",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/cms-garden/cmsscanner",
+ "star": 33,
+ "commits": 167,
+ "modify_time": "2019-12-01 09:14:11",
+ "last_release": "0.5.0",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/chinatiny/gameanticheat",
+ "star": 33,
+ "commits": 13,
+ "modify_time": "2019-10-23 10:22:24",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/cert-w/hadoop-attack-library",
+ "star": 33,
+ "commits": 41,
+ "modify_time": "2017-03-02 18:38:38",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/cazala/coin-hive-proxy",
+ "star": 33,
+ "commits": 16,
+ "modify_time": "2018-02-03 20:28:52",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/bareflank/standalone_cxx",
+ "star": 33,
+ "commits": 35,
+ "modify_time": "2019-11-16 14:16:17",
+ "last_release": "v0.3",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/b3rito/trolo",
+ "star": 33,
+ "commits": 5,
+ "modify_time": "2017-02-28 17:33:04",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/avery3r/re-writeups",
+ "star": 33,
+ "commits": 8,
+ "modify_time": "2019-01-23 03:53:00",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/averagesecurityguy/twanalyze",
+ "star": 33,
+ "commits": 21,
+ "modify_time": "2014-01-01 05:27:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/arunsatyarth/oneminer",
+ "star": 33,
+ "commits": 212,
+ "modify_time": "2018-05-06 11:12:44",
+ "last_release": "v1.9",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/antriv/transfer_learning_text",
+ "star": 33,
+ "commits": 90,
+ "modify_time": "2018-04-27 00:55:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/anssi-fr/nogaxeh",
+ "star": 33,
+ "commits": 3,
+ "modify_time": "2016-06-22 15:37:20",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/amitwaisel/malproxy",
+ "star": 33,
+ "commits": 7,
+ "modify_time": "2019-06-23 17:03:25",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/akiym/pedal",
+ "star": 33,
+ "commits": 163,
+ "modify_time": "2019-10-27 19:33:11",
+ "last_release": "\n v2.0.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/adilmajid/privacy-for-the-paranoid",
+ "star": 33,
+ "commits": 85,
+ "modify_time": "2019-12-10 03:56:13",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/aa65535/chinadns",
+ "star": 33,
+ "commits": 218,
+ "modify_time": "2019-08-13 01:26:43",
+ "last_release": "\n v1.3.3\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/3gstudent/winpcap_install",
+ "star": 33,
+ "commits": 19,
+ "modify_time": "2017-07-18 00:52:30",
+ "last_release": "",
+ "lang": "Batchfile"
+ },
+ {
+ "link": "https://github.com/3gstudent/smallp0wnedshell",
+ "star": 33,
+ "commits": 10,
+ "modify_time": "2016-04-25 13:02:08",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/16667/metasploitable-3-ctf",
+ "star": 33,
+ "commits": 13,
+ "modify_time": "2017-12-12 16:25:29",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/0xcpu/bonomen",
+ "star": 33,
+ "commits": 33,
+ "modify_time": "2017-12-15 20:44:09",
+ "last_release": "",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/archimboldimao/surgeconfig",
+ "star": 32,
+ "commits": 5,
+ "modify_time": "2017-06-12 03:57:35",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/pbnj/s3-fuzzer",
+ "star": 32,
+ "commits": 4,
+ "modify_time": "2017-10-14 21:45:28",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/adrianherrera/afl-mutation-chain",
+ "star": 32,
+ "commits": 24,
+ "modify_time": "2019-12-11 07:27:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bigtan/cow",
+ "star": 32,
+ "commits": 41,
+ "modify_time": "2019-03-02 11:25:46",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/dxa4481/cors",
+ "star": 32,
+ "commits": 4,
+ "modify_time": "2017-07-09 18:49:36",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/paranoidninja/botnet-blogpost",
+ "star": 32,
+ "commits": 15,
+ "modify_time": "2018-03-25 09:18:11",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/sagishahar-zz/challenges",
+ "star": 32,
+ "commits": 6,
+ "modify_time": "2017-10-03 14:14:57",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/a0rtega/bdldr",
+ "star": 32,
+ "commits": 3,
+ "modify_time": "2016-03-12 17:14:53",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ytisf/randomgoodness",
+ "star": 32,
+ "commits": 51,
+ "modify_time": "2019-04-14 04:35:04",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/thekingofduck/bypassavaddusers",
+ "star": 32,
+ "commits": 16,
+ "modify_time": "2019-02-16 04:47:44",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/paranoidninja/threat-hunting",
+ "star": 32,
+ "commits": 23,
+ "modify_time": "2018-01-10 05:22:37",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/wi-fi-analyzer/3viltwinattacker",
+ "star": 32,
+ "commits": 23,
+ "modify_time": "2015-08-14 03:06:20",
+ "last_release": "\n v0.6.3\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ekultek/tadpole",
+ "star": 32,
+ "commits": 26,
+ "modify_time": "2018-12-12 17:09:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ibm/cloud-pak",
+ "star": 32,
+ "commits": 241,
+ "modify_time": "2019-12-09 22:48:24",
+ "last_release": "cp4d-2.5.0",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/localtunnel/go-localtunnel",
+ "star": 32,
+ "commits": 10,
+ "modify_time": "2017-03-26 22:30:59",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/cloudsploit/security-remediation-guides",
+ "star": 32,
+ "commits": 704,
+ "modify_time": "2019-10-22 10:29:51",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/sadicann/andor",
+ "star": 32,
+ "commits": 12,
+ "modify_time": "2019-12-06 14:22:03",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/zerobyte-id/netass2",
+ "star": 32,
+ "commits": 11,
+ "modify_time": "2019-11-18 03:02:21",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/hax4us/termux-x",
+ "star": 32,
+ "commits": 14,
+ "modify_time": "2019-02-28 06:47:26",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/kangtastic/cve-2019-2215",
+ "star": 32,
+ "commits": 10,
+ "modify_time": "2019-10-14 17:37:48",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/da667/ciderpress",
+ "star": 32,
+ "commits": 19,
+ "modify_time": "2019-10-02 23:00:39",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/gdbinit/efi_dxe_emulator",
+ "star": 32,
+ "commits": 1,
+ "modify_time": "2019-11-07 14:35:02",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/egebalci/xss-flare",
+ "star": 32,
+ "commits": 2,
+ "modify_time": "2019-10-12 07:58:01",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/sin5678/A-Protect",
+ "star": 32,
+ "commits": 2,
+ "modify_time": "2014-01-21 01:44:15",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/mwsrc/XtremeRAT",
+ "star": 32,
+ "commits": 1,
+ "modify_time": "2016-12-24 07:55:09",
+ "last_release": "",
+ "lang": "Pascal"
+ },
+ {
+ "link": "https://github.com/SewellDinG/SitePathScan",
+ "star": 32,
+ "commits": 3,
+ "modify_time": "2017-08-10 06:44:11",
+ "last_release": "\n v2.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cylance/NMAP-Cluster",
+ "star": 32,
+ "commits": 14,
+ "modify_time": "2019-04-12 20:32:20",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/helpsystems/GDIObjDump",
+ "star": 32,
+ "commits": 11,
+ "modify_time": "2015-09-18 21:06:41",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/Coalfire-Research/Doozer",
+ "star": 32,
+ "commits": 9,
+ "modify_time": "2014-10-20 22:27:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/imugee/xdv",
+ "star": 32,
+ "commits": 71,
+ "modify_time": "2019-09-03 07:54:30",
+ "last_release": "ver.0.8",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/blackgeneration/uncle-spufus",
+ "star": 32,
+ "commits": 39,
+ "modify_time": "2019-09-06 19:12:14",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/praetorian-code/ruby_hashcat",
+ "star": 32,
+ "commits": 41,
+ "modify_time": "2016-01-19 18:27:49",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/dd4rk/ctfwebscan",
+ "star": 32,
+ "commits": 34,
+ "modify_time": "2018-07-09 11:59:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zyantific/ida-cmake",
+ "star": 32,
+ "commits": 14,
+ "modify_time": "2017-09-02 18:36:47",
+ "last_release": "",
+ "lang": "CMake"
+ },
+ {
+ "link": "https://github.com/zjjno/interface-inspector-hook",
+ "star": 32,
+ "commits": 4,
+ "modify_time": "2018-03-23 03:25:54",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/zerokilo/n64loaderwv",
+ "star": 32,
+ "commits": 10,
+ "modify_time": "2019-09-27 20:33:14",
+ "last_release": "9.1.0",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/y123456yz/reading-and-comprehense-twemproxy0.4.1",
+ "star": 32,
+ "commits": 14,
+ "modify_time": "2019-04-07 07:29:04",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/wstart/webshell",
+ "star": 32,
+ "commits": 315,
+ "modify_time": "2016-04-20 03:52:06",
+ "last_release": "\n v-2016-03-05\n ",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/vulnex/tintorera",
+ "star": 32,
+ "commits": 3,
+ "modify_time": "2017-07-27 16:36:05",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/vulnerscom/detect-rules",
+ "star": 32,
+ "commits": 34,
+ "modify_time": "2019-08-01 06:06:34",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/vt-magnum-research/antimalware",
+ "star": 32,
+ "commits": 84,
+ "modify_time": "2014-09-26 10:32:46",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/vector35/generate_assembler",
+ "star": 32,
+ "commits": 69,
+ "modify_time": "2019-07-13 03:59:48",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/vah13/oracle-bi-bugs",
+ "star": 32,
+ "commits": 21,
+ "modify_time": "2019-07-17 14:34:27",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/twelvesec/bearerauthtoken",
+ "star": 32,
+ "commits": 66,
+ "modify_time": "2019-02-27 16:38:43",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/trustedsec/crackmapexec",
+ "star": 32,
+ "commits": 209,
+ "modify_time": "2016-03-30 19:11:28",
+ "last_release": "\n v2.3\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/truework/lambda-s3-antivirus",
+ "star": 32,
+ "commits": 16,
+ "modify_time": "2018-11-15 16:01:42",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/tripflex/cpsetup",
+ "star": 32,
+ "commits": 92,
+ "modify_time": "2019-05-22 23:42:37",
+ "last_release": "v1.5.0",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/tomsteele/burpstaticscan",
+ "star": 32,
+ "commits": 18,
+ "modify_time": "2016-12-22 04:00:06",
+ "last_release": "v1.0.2",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/tlgyt/dirtycowandroid",
+ "star": 32,
+ "commits": 43,
+ "modify_time": "2017-05-14 18:22:39",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/thetorproject/gettorbrowser",
+ "star": 32,
+ "commits": 8,
+ "modify_time": "2019-10-09 09:42:42",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/thesubtlety/shocens",
+ "star": 32,
+ "commits": 34,
+ "modify_time": "2018-08-07 04:36:20",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/tengzhangchao/information",
+ "star": 32,
+ "commits": 17,
+ "modify_time": "2016-10-09 07:08:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tdifg/payloads",
+ "star": 32,
+ "commits": 1,
+ "modify_time": "2016-08-17 01:33:19",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/tangxiaofeng7/srcinformation-gathering",
+ "star": 32,
+ "commits": 18,
+ "modify_time": "2019-09-06 07:50:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/syss-research/dns-mitm",
+ "star": 32,
+ "commits": 3,
+ "modify_time": "2017-03-10 07:57:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/swwwolf/cbtest",
+ "star": 32,
+ "commits": 7,
+ "modify_time": "2016-08-08 15:14:10",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/srakai/adun",
+ "star": 32,
+ "commits": 5,
+ "modify_time": "2017-10-05 12:58:16",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/spiperac/armroper",
+ "star": 32,
+ "commits": 21,
+ "modify_time": "2017-10-20 09:45:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/snorez/exploits",
+ "star": 32,
+ "commits": 11,
+ "modify_time": "2018-02-08 04:02:06",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/snawoot/linux-secureboot-kit",
+ "star": 32,
+ "commits": 105,
+ "modify_time": "2019-10-02 11:49:38",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/smpallen99/coherence_demo",
+ "star": 32,
+ "commits": 26,
+ "modify_time": "2017-08-03 17:13:10",
+ "last_release": "",
+ "lang": "Elixir"
+ },
+ {
+ "link": "https://github.com/sigploiter/m3uascan",
+ "star": 32,
+ "commits": 15,
+ "modify_time": "2018-05-16 01:03:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/shouc/knicky",
+ "star": 32,
+ "commits": 79,
+ "modify_time": "2019-06-22 22:29:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sergiocampama/launchpad",
+ "star": 32,
+ "commits": 68,
+ "modify_time": "2012-11-21 14:24:36",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/sekoialab/pe-tools",
+ "star": 32,
+ "commits": 12,
+ "modify_time": "2015-06-29 15:13:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/securityriskadvisors/redteamsiem",
+ "star": 32,
+ "commits": 4,
+ "modify_time": "2018-07-10 20:22:46",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/saml1er/gta-reversed",
+ "star": 32,
+ "commits": 64,
+ "modify_time": "2019-09-16 11:30:58",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/s03d4-164/hiryu",
+ "star": 32,
+ "commits": 50,
+ "modify_time": "2018-09-01 05:32:16",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/rurik/pe_carver",
+ "star": 32,
+ "commits": 16,
+ "modify_time": "2017-05-02 16:10:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rurik/java_idx_parser",
+ "star": 32,
+ "commits": 37,
+ "modify_time": "2018-02-28 13:19:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rudsarkar/crlf-injector",
+ "star": 32,
+ "commits": 8,
+ "modify_time": "2017-06-22 19:11:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/roo7break/powershell-scripts",
+ "star": 32,
+ "commits": 15,
+ "modify_time": "2013-10-17 15:08:24",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/ronomon/mime",
+ "star": 32,
+ "commits": 83,
+ "modify_time": "2019-09-27 09:16:15",
+ "last_release": "\n v3.3.0\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/robocyber/shodan-dorks",
+ "star": 32,
+ "commits": 1,
+ "modify_time": "2018-08-07 15:22:40",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/righettod/log-requests-to-sqlite",
+ "star": 32,
+ "commits": 79,
+ "modify_time": "2019-10-10 16:22:56",
+ "last_release": "v1.0.8",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/redteam-cyberark/google-domain-fronting",
+ "star": 32,
+ "commits": 2,
+ "modify_time": "2017-06-27 21:13:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/realtimeprojects/quixplorer",
+ "star": 32,
+ "commits": 241,
+ "modify_time": "2016-02-20 18:28:46",
+ "last_release": "\n v2.5.8\n ",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/rakion99/icememe",
+ "star": 32,
+ "commits": 10,
+ "modify_time": "2019-02-20 22:47:15",
+ "last_release": "v2.6.6654.23946",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/rafaelgss/hyzmall",
+ "star": 32,
+ "commits": 82,
+ "modify_time": "2019-08-06 16:38:34",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/raccoons-team/ctf",
+ "star": 32,
+ "commits": 117,
+ "modify_time": "2016-05-24 12:40:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/qwj/python-esp",
+ "star": 32,
+ "commits": 50,
+ "modify_time": "2019-01-23 19:30:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/puppetlabs/puppetlabs-java_ks",
+ "star": 32,
+ "commits": 597,
+ "modify_time": "2019-12-09 13:10:37",
+ "last_release": "\n v3.1.0\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/psmiraglia/ctf",
+ "star": 32,
+ "commits": 127,
+ "modify_time": "2016-05-06 15:41:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/phdphuc/mac-a-mal-cuckoo",
+ "star": 32,
+ "commits": 11,
+ "modify_time": "2018-06-12 15:34:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pbnj/s3-fuzzer",
+ "star": 32,
+ "commits": 4,
+ "modify_time": "2017-10-14 21:45:28",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/perceptionpoint/suprotect",
+ "star": 32,
+ "commits": 2,
+ "modify_time": "2018-11-19 14:42:47",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/pagalaxylab/ghidra_scripts",
+ "star": 32,
+ "commits": 3,
+ "modify_time": "2019-10-25 14:49:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pabloroca/obfuscateapi",
+ "star": 32,
+ "commits": 47,
+ "modify_time": "2019-02-06 13:18:10",
+ "last_release": "\n 1.0.2\n ",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/oshp/headers",
+ "star": 32,
+ "commits": 283,
+ "modify_time": "2019-02-01 01:00:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/oldbonhart/osint-resources",
+ "star": 32,
+ "commits": 23,
+ "modify_time": "2019-07-06 03:38:42",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/oalieno/ctf",
+ "star": 32,
+ "commits": 190,
+ "modify_time": "2019-10-21 14:27:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/o0xmuhe/realworldpwn",
+ "star": 32,
+ "commits": 45,
+ "modify_time": "2019-08-14 05:56:04",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/nyxgeek/nyxgeek-rules",
+ "star": 32,
+ "commits": 57,
+ "modify_time": "2019-05-10 07:31:46",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/ntraiseharderror/dreadnought",
+ "star": 32,
+ "commits": 6,
+ "modify_time": "2018-10-23 00:03:36",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/notdls/hackbar",
+ "star": 32,
+ "commits": 41,
+ "modify_time": "2018-06-06 08:04:56",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/netspi/skl",
+ "star": 32,
+ "commits": 3,
+ "modify_time": "2014-03-18 14:32:19",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/mwitkow/go-http-dialer",
+ "star": 32,
+ "commits": 12,
+ "modify_time": "2016-11-16 15:48:39",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/mthbernardes/leakmanager",
+ "star": 32,
+ "commits": 14,
+ "modify_time": "2017-11-22 01:30:39",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/mseclab/ahe17",
+ "star": 32,
+ "commits": 15,
+ "modify_time": "2017-06-27 00:48:55",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/mondoolabs/mondoo",
+ "star": 32,
+ "commits": 140,
+ "modify_time": "2019-12-02 20:48:30",
+ "last_release": "\n mondoo-0.35.0\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/mirchr/security-research",
+ "star": 32,
+ "commits": 31,
+ "modify_time": "2019-11-15 13:00:33",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/mimoo/rsa_pkcs1v1_5_attacks",
+ "star": 32,
+ "commits": 2,
+ "modify_time": "2018-11-30 18:45:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mikemeliz/torcrawl.py",
+ "star": 32,
+ "commits": 56,
+ "modify_time": "2019-07-26 15:55:33",
+ "last_release": "v1.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mhaggis/sysmon-splunk-app",
+ "star": 32,
+ "commits": 30,
+ "modify_time": "2018-08-21 17:28:10",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/mgale/dhcpsnoop",
+ "star": 32,
+ "commits": 25,
+ "modify_time": "2018-01-25 17:36:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mehdilauters/esp8266-wifiscanmap",
+ "star": 32,
+ "commits": 13,
+ "modify_time": "2016-08-16 14:58:20",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/mdegrazia/osx-quicklook-parser",
+ "star": 32,
+ "commits": 8,
+ "modify_time": "2016-10-05 15:21:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/maxkrivich/slowloris",
+ "star": 32,
+ "commits": 47,
+ "modify_time": "2019-04-16 08:04:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/malerisch/burp-csj",
+ "star": 32,
+ "commits": 15,
+ "modify_time": "2014-12-22 17:40:20",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/lylemi/dom-vuln-db",
+ "star": 32,
+ "commits": 25,
+ "modify_time": "2018-11-20 04:01:15",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/lycajb/lycajb",
+ "star": 32,
+ "commits": 13,
+ "modify_time": "2018-06-24 04:32:49",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/linvex/mitm-squid",
+ "star": 32,
+ "commits": 6,
+ "modify_time": "2014-08-27 15:49:53",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/linuxthor/uul",
+ "star": 32,
+ "commits": 13,
+ "modify_time": "2019-01-09 17:40:09",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/leebaird/assessment-manager",
+ "star": 32,
+ "commits": 155,
+ "modify_time": "2017-12-30 18:26:11",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/kuqadk3/ctf-and-learning",
+ "star": 32,
+ "commits": 445,
+ "modify_time": "2019-12-06 07:53:34",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/krystalgamer/dec2struct",
+ "star": 32,
+ "commits": 5,
+ "modify_time": "2017-09-06 09:16:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/knoobdev/bypass-facebook-ssl-pinning",
+ "star": 32,
+ "commits": 15,
+ "modify_time": "2018-03-16 15:40:56",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/kang-newbie/s-mbf",
+ "star": 32,
+ "commits": 193,
+ "modify_time": "2019-09-28 12:27:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jriguera/coreos-usb-creator",
+ "star": 32,
+ "commits": 14,
+ "modify_time": "2017-03-05 13:11:21",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/jp-bennett/fwknop2",
+ "star": 32,
+ "commits": 111,
+ "modify_time": "2018-11-19 16:08:43",
+ "last_release": "V1.2.3-release",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jonoberheide/kstructhunter",
+ "star": 32,
+ "commits": 5,
+ "modify_time": "2011-09-09 01:17:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jkkj93/mint-webshell-defender",
+ "star": 32,
+ "commits": 8,
+ "modify_time": "2017-02-16 14:46:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jgor/php-jpeg-shell",
+ "star": 32,
+ "commits": 2,
+ "modify_time": "2015-04-16 17:15:39",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/jduck/addjsif",
+ "star": 32,
+ "commits": 9,
+ "modify_time": "2015-01-15 05:49:02",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/jcsaezal/pmctrack",
+ "star": 32,
+ "commits": 49,
+ "modify_time": "2019-06-27 11:25:17",
+ "last_release": "\n v1.0\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/james9909/practicectf",
+ "star": 32,
+ "commits": 10,
+ "modify_time": "2019-02-07 00:42:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jacksonvd/pwnedpasswordsdll-api",
+ "star": 32,
+ "commits": 7,
+ "modify_time": "2019-01-23 11:05:28",
+ "last_release": "2.1",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/isecpartners/fuzzbox",
+ "star": 32,
+ "commits": 4,
+ "modify_time": "2012-10-09 18:20:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/iphelix/ida-pomidor",
+ "star": 32,
+ "commits": 3,
+ "modify_time": "2014-09-23 18:36:59",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/igh0st/crypters",
+ "star": 32,
+ "commits": 1,
+ "modify_time": "2014-02-26 03:10:10",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/idhyt/jeb-keygen",
+ "star": 32,
+ "commits": 5,
+ "modify_time": "2019-07-01 09:26:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/icestudent/ontl",
+ "star": 32,
+ "commits": 886,
+ "modify_time": "2016-05-05 19:16:34",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/RealBearcat/CVE-2017-12615",
+ "star": 32,
+ "commits": 8,
+ "modify_time": "2017-10-18 13:15:06",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/holloway/docvert-python3",
+ "star": 32,
+ "commits": 10,
+ "modify_time": "2015-10-25 00:27:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/harryr/maltrieve",
+ "star": 32,
+ "commits": 365,
+ "modify_time": "2017-05-10 11:17:36",
+ "last_release": "\n v0.7\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/graykernel/graystorm",
+ "star": 32,
+ "commits": 15,
+ "modify_time": "2019-03-06 19:40:46",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/globalpolicy/csarp-netcut",
+ "star": 32,
+ "commits": 24,
+ "modify_time": "2019-09-09 15:55:03",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/freener/exploits",
+ "star": 32,
+ "commits": 4,
+ "modify_time": "2017-11-15 10:22:05",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/forprevious/attack-analysis",
+ "star": 32,
+ "commits": 14,
+ "modify_time": "2015-01-06 05:06:20",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/falk3n/subversive",
+ "star": 32,
+ "commits": 8,
+ "modify_time": "2011-04-28 22:22:09",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/f18m/large-pcap-analyzer",
+ "star": 32,
+ "commits": 78,
+ "modify_time": "2019-11-17 21:21:28",
+ "last_release": "3.7.0",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/eurecom-s3/linux_screenshot_xwindows",
+ "star": 32,
+ "commits": 1,
+ "modify_time": "2018-05-15 12:08:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/edoverflow/legal-bug-bounty",
+ "star": 32,
+ "commits": 30,
+ "modify_time": "2019-12-04 21:04:26",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ecologylab/ecotuiodriver",
+ "star": 32,
+ "commits": 48,
+ "modify_time": "2017-04-13 06:59:17",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/dweinstein/dockerfile-androguard",
+ "star": 32,
+ "commits": 27,
+ "modify_time": "2018-04-02 16:34:05",
+ "last_release": "v2.0.1",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/duoduo369/oh-my-shadowsocks",
+ "star": 32,
+ "commits": 10,
+ "modify_time": "2015-05-06 04:26:40",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/dlrobertson/sylkie",
+ "star": 32,
+ "commits": 60,
+ "modify_time": "2018-07-15 16:23:29",
+ "last_release": "\n 0.0.4\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/digitalinterruption/vulnerable-xss-app",
+ "star": 32,
+ "commits": 4,
+ "modify_time": "2019-10-11 18:09:27",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/dg92/fractal-tree",
+ "star": 32,
+ "commits": 3,
+ "modify_time": "2017-10-26 14:11:50",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/derv82/werdy",
+ "star": 32,
+ "commits": 8,
+ "modify_time": "2012-08-18 06:22:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/deepwn/gitpagehijack",
+ "star": 32,
+ "commits": 17,
+ "modify_time": "2018-05-16 08:41:20",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/deadnumbers/pegasus",
+ "star": 32,
+ "commits": 1,
+ "modify_time": "2018-07-12 08:49:16",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ddvkid/ng-treetable",
+ "star": 32,
+ "commits": 46,
+ "modify_time": "2018-02-03 08:44:26",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/danpage/mascab",
+ "star": 32,
+ "commits": 17,
+ "modify_time": "2018-09-07 13:21:28",
+ "last_release": "",
+ "lang": "TeX"
+ },
+ {
+ "link": "https://github.com/csababarta/volatility_plugins",
+ "star": 32,
+ "commits": 21,
+ "modify_time": "2015-10-02 14:08:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/creaink/ucom",
+ "star": 32,
+ "commits": 10,
+ "modify_time": "2019-09-13 15:46:47",
+ "last_release": "v1.1.0",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/coldheat/quicksec",
+ "star": 32,
+ "commits": 2,
+ "modify_time": "2014-05-10 06:18:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/codingo/ransomware-json-dataset",
+ "star": 32,
+ "commits": 100,
+ "modify_time": "2019-11-01 23:47:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xfoxfu/clover",
+ "star": 32,
+ "commits": 114,
+ "modify_time": "2019-01-17 12:37:56",
+ "last_release": "\n v1.5\n ",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/cloudflare/salt-cloudflare",
+ "star": 32,
+ "commits": 33,
+ "modify_time": "2019-12-07 22:06:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/citp/email_tracking",
+ "star": 32,
+ "commits": 16,
+ "modify_time": "2018-05-02 23:19:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cfwprpht/free-ps2-pub-gen",
+ "star": 32,
+ "commits": 9,
+ "modify_time": "2018-04-08 17:15:07",
+ "last_release": "v1.5",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/certsocietegenerale/abuse_finder",
+ "star": 32,
+ "commits": 6,
+ "modify_time": "2017-01-04 17:04:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/boxproject/voucher",
+ "star": 32,
+ "commits": 22,
+ "modify_time": "2018-08-15 12:27:50",
+ "last_release": "v0.5",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/blacktop/docker-yara",
+ "star": 32,
+ "commits": 105,
+ "modify_time": "2019-10-19 15:51:33",
+ "last_release": "",
+ "lang": "YARA"
+ },
+ {
+ "link": "https://github.com/blackint3/none",
+ "star": 32,
+ "commits": 36,
+ "modify_time": "2019-07-29 06:56:41",
+ "last_release": "v1.0.2",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/bishopfox/idontspeakssl",
+ "star": 32,
+ "commits": 23,
+ "modify_time": "2019-06-06 16:51:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/binarlyhq/binarly-query",
+ "star": 32,
+ "commits": 27,
+ "modify_time": "2017-01-13 16:32:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/applebetas/mterminal-jailed",
+ "star": 32,
+ "commits": null,
+ "modify_time": "2018-02-18 01:34:03",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/angelkitty/ida7.0",
+ "star": 32,
+ "commits": 7,
+ "modify_time": "2019-07-15 02:14:29",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/andreafortuna/autotimeliner",
+ "star": 32,
+ "commits": 17,
+ "modify_time": "2018-11-23 07:56:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/amossys/fragscapy",
+ "star": 32,
+ "commits": 4,
+ "modify_time": "2019-09-15 09:56:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/alex9191/kernelmodemonitor",
+ "star": 32,
+ "commits": null,
+ "modify_time": "2018-06-24 11:14:47",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/adguardteam/adguardsdnsfilter",
+ "star": 32,
+ "commits": 230,
+ "modify_time": "2019-12-09 13:06:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/acama/webkitties",
+ "star": 32,
+ "commits": 8,
+ "modify_time": "2014-11-06 08:30:00",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/5loyd/makecode",
+ "star": 32,
+ "commits": 4,
+ "modify_time": "2015-07-28 01:33:01",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/404notf0und/ai-for-security-testing",
+ "star": 32,
+ "commits": 70,
+ "modify_time": "2019-01-16 04:17:01",
+ "last_release": "",
+ "lang": "Jupyter Notebook"
+ },
+ {
+ "link": "https://github.com/3gstudent/office-persistence",
+ "star": 32,
+ "commits": 17,
+ "modify_time": "2018-01-27 02:03:29",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/1bitsy/1bitsy-examples",
+ "star": 32,
+ "commits": 57,
+ "modify_time": "2018-11-06 03:42:33",
+ "last_release": "",
+ "lang": "Makefile"
+ },
+ {
+ "link": "https://github.com/0xebfe/3dsx-ida-pro-loader",
+ "star": 32,
+ "commits": 3,
+ "modify_time": "2015-03-01 18:10:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/shikanon/socks5proxy",
+ "star": 31,
+ "commits": 22,
+ "modify_time": "2019-10-25 03:44:45",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/xc2/shadowsocks-libev-tomato",
+ "star": 31,
+ "commits": 54,
+ "modify_time": "2018-03-07 11:13:26",
+ "last_release": "3.2.3-1",
+ "lang": "Makefile"
+ },
+ {
+ "link": "https://github.com/questescape/exploit",
+ "star": 31,
+ "commits": 13,
+ "modify_time": "2019-11-19 19:10:32",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cmu-sei/ghosts",
+ "star": 31,
+ "commits": 89,
+ "modify_time": "2019-09-27 12:22:12",
+ "last_release": "\n v2.5.7.0\n ",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/project-imas/encrypted_code_modules",
+ "star": 31,
+ "commits": 34,
+ "modify_time": "2014-09-11 19:32:19",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/rhinosecuritylabs/presentations",
+ "star": 31,
+ "commits": 4,
+ "modify_time": "2018-08-13 22:51:21",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/bypass007/vuln",
+ "star": 31,
+ "commits": 4,
+ "modify_time": "2018-04-02 16:23:21",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/bkerler/opencl_brute",
+ "star": 31,
+ "commits": 16,
+ "modify_time": "2019-10-09 20:01:35",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/fallibleinc/retirejslib",
+ "star": 31,
+ "commits": 18,
+ "modify_time": "2019-05-01 06:48:16",
+ "last_release": "\n 1.4\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/snowming04/cipher_encryption_type_identification",
+ "star": 31,
+ "commits": 13,
+ "modify_time": "2019-06-21 04:50:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/michenriksen/maltego",
+ "star": 31,
+ "commits": 3,
+ "modify_time": "2015-02-27 11:18:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/grayddq/eburst",
+ "star": 31,
+ "commits": 21,
+ "modify_time": "2019-11-21 07:52:45",
+ "last_release": "v0.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/spiderlabs/microphisher",
+ "star": 31,
+ "commits": 30,
+ "modify_time": "2013-11-25 18:22:58",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/pirate/django-concurrency-talk",
+ "star": 31,
+ "commits": 68,
+ "modify_time": "2019-11-24 08:24:46",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/thelinuxchoice/self-xss",
+ "star": 31,
+ "commits": 5,
+ "modify_time": "2019-10-10 13:07:39",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/k8gege/solrexp",
+ "star": 31,
+ "commits": 18,
+ "modify_time": "2019-11-02 07:18:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xuxiaodong/v2ray-for-ansible",
+ "star": 31,
+ "commits": 2,
+ "modify_time": "2019-11-07 07:20:47",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/d4vinci/wormy",
+ "star": 31,
+ "commits": 9,
+ "modify_time": "2017-01-22 18:00:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lbp0200/v2ray-vultr",
+ "star": 31,
+ "commits": 11,
+ "modify_time": "2019-10-02 04:29:21",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/wongsyrone/openwrt-v2ray",
+ "star": 31,
+ "commits": 6,
+ "modify_time": "2018-10-01 11:19:11",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/oasis-open/cti-taxii-server",
+ "star": 31,
+ "commits": 300,
+ "modify_time": "2019-12-06 15:39:07",
+ "last_release": "v0.4.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kiyadesu/android-reversing-challenges",
+ "star": 31,
+ "commits": 25,
+ "modify_time": "2019-02-27 08:17:38",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/bslassey/privacy-budget",
+ "star": 31,
+ "commits": 4,
+ "modify_time": "2019-08-28 01:47:16",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/XXH3X/Nethunter_Universal",
+ "star": 31,
+ "commits": 17,
+ "modify_time": "2018-07-19 23:32:12",
+ "last_release": "v3.1RC4",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/ProAppleOS/Upgrade-from-10.3.x-to-iOS-11.1.2-on-any-64Bit-device-with-Blobs",
+ "star": 31,
+ "commits": 12,
+ "modify_time": "2018-02-26 16:22:12",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/MojtabaTajik/Sandbox-Detection",
+ "star": 31,
+ "commits": 12,
+ "modify_time": "2017-08-27 07:02:33",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ret2got/Ethereum-JSONRPC-DNS-Rebinding",
+ "star": 31,
+ "commits": 3,
+ "modify_time": "2018-01-22 01:32:27",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/zwclose/hidusb2",
+ "star": 31,
+ "commits": 6,
+ "modify_time": "2017-06-15 22:38:22",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/zodiacon/perfmonx",
+ "star": 31,
+ "commits": 14,
+ "modify_time": "2018-08-17 13:50:51",
+ "last_release": "0.2beta",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/zeknox/scripts",
+ "star": 31,
+ "commits": 16,
+ "modify_time": "2014-04-23 13:32:43",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/ytisf/hemingway",
+ "star": 31,
+ "commits": 8,
+ "modify_time": "2016-11-27 04:52:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/yaofeifly/php_code_challenge",
+ "star": 31,
+ "commits": 5,
+ "modify_time": "2018-09-06 06:44:48",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/xme/dockers",
+ "star": 31,
+ "commits": 34,
+ "modify_time": "2019-02-04 20:04:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/withzombies/bnil-graph",
+ "star": 31,
+ "commits": 21,
+ "modify_time": "2019-07-13 13:05:46",
+ "last_release": "v1.2.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/whitequark/binja_itanium_cxx_abi",
+ "star": 31,
+ "commits": 53,
+ "modify_time": "2019-11-22 14:00:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/web2hack/trac",
+ "star": 31,
+ "commits": 15,
+ "modify_time": "2014-09-19 13:08:00",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/wasapi-community/data-transfer-apis",
+ "star": 31,
+ "commits": 81,
+ "modify_time": "2018-11-26 22:18:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wangxuan95/ustc-rvsoc",
+ "star": 31,
+ "commits": 57,
+ "modify_time": "2019-09-01 13:51:23",
+ "last_release": "",
+ "lang": "SystemVerilog"
+ },
+ {
+ "link": "https://github.com/unapibageek/thebicho",
+ "star": 31,
+ "commits": 10,
+ "modify_time": "2018-10-01 20:07:16",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ubient/laravel-pwned-passwords",
+ "star": 31,
+ "commits": 10,
+ "modify_time": "2019-09-03 14:18:01",
+ "last_release": "2.0.0",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/tyranid/zer0con_2018",
+ "star": 31,
+ "commits": 2,
+ "modify_time": "2018-03-30 05:13:29",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/tunnelshade/nightfury",
+ "star": 31,
+ "commits": 62,
+ "modify_time": "2016-08-24 04:07:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tripwire/openssl-ccs-inject-test",
+ "star": 31,
+ "commits": 11,
+ "modify_time": "2014-07-24 20:47:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/trailofbits/cfg-showcase",
+ "star": 31,
+ "commits": 8,
+ "modify_time": "2016-12-27 10:52:01",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/thusoy/postgres-mitm",
+ "star": 31,
+ "commits": 39,
+ "modify_time": "2018-07-31 11:07:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/thedarknet/hhvkit",
+ "star": 31,
+ "commits": 77,
+ "modify_time": "2015-08-14 16:14:03",
+ "last_release": "",
+ "lang": "Eagle"
+ },
+ {
+ "link": "https://github.com/th4nat0s/no_sandboxes",
+ "star": 31,
+ "commits": 7,
+ "modify_time": "2014-10-17 06:27:20",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/tandasat/cs_driver",
+ "star": 31,
+ "commits": 34,
+ "modify_time": "2016-05-04 15:22:44",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/talltechy/infosec_it-conferences-and-certs-usa",
+ "star": 31,
+ "commits": 59,
+ "modify_time": "2019-11-18 14:26:35",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/swatkat/arkitlib",
+ "star": 31,
+ "commits": 15,
+ "modify_time": "2011-12-29 17:18:44",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/starnightcyber/cve-2017-11882",
+ "star": 31,
+ "commits": 6,
+ "modify_time": "2017-11-28 03:06:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/staaldraad/fastfluxanalysis",
+ "star": 31,
+ "commits": 12,
+ "modify_time": "2017-01-16 08:26:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/st0rn/windows-10-exploit",
+ "star": 31,
+ "commits": 8,
+ "modify_time": "2018-10-29 08:20:19",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/silentsignal/burp-collab-gw",
+ "star": 31,
+ "commits": 6,
+ "modify_time": "2016-11-23 13:48:48",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/shadowsocksrr/shadowsocksx-ng",
+ "star": 31,
+ "commits": 309,
+ "modify_time": "2017-07-19 14:02:06",
+ "last_release": "\n 1.4.2-R8-subscribe-alpha-3\n ",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/safebreach-labs/cachetalk",
+ "star": 31,
+ "commits": 5,
+ "modify_time": "2017-07-14 18:53:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/s-o-t/telegram-3proxy-install",
+ "star": 31,
+ "commits": 6,
+ "modify_time": "2019-01-21 15:41:43",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/rub-nds/tls-attacker-burpextension",
+ "star": 31,
+ "commits": 47,
+ "modify_time": "2019-11-13 10:22:53",
+ "last_release": "v1.2",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/rprop/cppdll",
+ "star": 31,
+ "commits": 4,
+ "modify_time": "2017-07-27 16:23:53",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/roflsandwich/steam-eop",
+ "star": 31,
+ "commits": 15,
+ "modify_time": "2019-08-09 15:01:18",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/righettod/owasp-cs-book",
+ "star": 31,
+ "commits": null,
+ "modify_time": "2018-11-01 07:18:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/riftbit/docker-3proxy",
+ "star": 31,
+ "commits": 111,
+ "modify_time": "2019-08-15 15:03:48",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/raphaelyancey/virtual_fm_band",
+ "star": 31,
+ "commits": 66,
+ "modify_time": "2019-07-24 12:50:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/randommood/fallacyoffast",
+ "star": 31,
+ "commits": 14,
+ "modify_time": "2016-12-08 21:05:36",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/pyinx/zk-sniffer",
+ "star": 31,
+ "commits": 16,
+ "modify_time": "2017-08-28 03:50:04",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/programa-stic/pyasmjit",
+ "star": 31,
+ "commits": 48,
+ "modify_time": "2019-11-05 23:32:03",
+ "last_release": "\n v0.3.0\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/progmboy/kernel_vul_poc",
+ "star": 31,
+ "commits": 5,
+ "modify_time": "2018-01-04 09:52:50",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/prevade/cloudjack",
+ "star": 31,
+ "commits": 27,
+ "modify_time": "2018-09-20 17:13:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pmsosa/pylogger",
+ "star": 31,
+ "commits": 9,
+ "modify_time": "2017-05-26 20:20:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pigrecos/codedeobfuscator",
+ "star": 31,
+ "commits": 7,
+ "modify_time": "2016-02-03 15:45:04",
+ "last_release": "",
+ "lang": "Pascal"
+ },
+ {
+ "link": "https://github.com/php-fig-rectified/psr2r-sniffer",
+ "star": 31,
+ "commits": 258,
+ "modify_time": "2019-11-28 21:22:29",
+ "last_release": "0.6.3",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/phith0n/ctfdbbuilder",
+ "star": 31,
+ "commits": 15,
+ "modify_time": "2018-05-27 18:47:13",
+ "last_release": "0.1.1",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/patrickod/docker-tor-hidden-services",
+ "star": 31,
+ "commits": 1,
+ "modify_time": "2014-08-01 07:20:46",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/patois/brahma",
+ "star": 31,
+ "commits": 63,
+ "modify_time": "2015-10-02 21:12:01",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/pathway27/bookr-mod-vita",
+ "star": 31,
+ "commits": 152,
+ "modify_time": "2019-06-12 21:38:47",
+ "last_release": "v0.3.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/p3t3rp4rk3r/my_dirty_scripts",
+ "star": 31,
+ "commits": 24,
+ "modify_time": "2018-06-06 11:25:25",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/osandamalith/apimon",
+ "star": 31,
+ "commits": 9,
+ "modify_time": "2017-04-22 01:40:20",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/openscanner/xguardian",
+ "star": 31,
+ "commits": 36,
+ "modify_time": "2015-10-04 12:57:41",
+ "last_release": "",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/olehkulykov/libnhr",
+ "star": 31,
+ "commits": 113,
+ "modify_time": "2019-01-09 09:15:33",
+ "last_release": "0.5.2.100",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/nullhypothesis/zoossh",
+ "star": 31,
+ "commits": 102,
+ "modify_time": "2019-09-18 18:19:08",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/notscimmy/libelevate",
+ "star": 31,
+ "commits": 3,
+ "modify_time": "2018-09-20 06:23:54",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/northernsec/veracracker",
+ "star": 31,
+ "commits": 14,
+ "modify_time": "2018-11-30 09:38:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nopdev/binjadock",
+ "star": 31,
+ "commits": 11,
+ "modify_time": "2016-09-18 22:24:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nikomatsakis/cargo-incremental",
+ "star": 31,
+ "commits": 122,
+ "modify_time": "2018-05-07 08:37:43",
+ "last_release": "",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/netxfly/docker-remote-api-exp",
+ "star": 31,
+ "commits": 3,
+ "modify_time": "2017-02-14 09:34:45",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/nerdyprojects/hostapd-wpe-extended",
+ "star": 31,
+ "commits": 7,
+ "modify_time": "2018-11-13 14:16:42",
+ "last_release": "",
+ "lang": "Smarty"
+ },
+ {
+ "link": "https://github.com/needmorecowbell/funnel",
+ "star": 31,
+ "commits": 20,
+ "modify_time": "2019-04-08 06:03:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nccgroup/scomdecrypt",
+ "star": 31,
+ "commits": 4,
+ "modify_time": "2018-02-11 15:57:53",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/nbareil/net2pcap",
+ "star": 31,
+ "commits": 38,
+ "modify_time": "2013-06-26 17:53:33",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/naltun/eyes",
+ "star": 31,
+ "commits": 55,
+ "modify_time": "2018-11-10 05:26:06",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/mthbernardes/heimdall_webserver",
+ "star": 31,
+ "commits": 35,
+ "modify_time": "2017-08-09 21:51:16",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/mozfreddyb/webext-firstpartyisolation",
+ "star": 31,
+ "commits": 35,
+ "modify_time": "2019-07-15 09:21:58",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/moohax/proof-pudding",
+ "star": 31,
+ "commits": 3,
+ "modify_time": "2019-09-18 19:56:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mmarfil/tinfoilhat",
+ "star": 31,
+ "commits": 21,
+ "modify_time": "2019-03-09 13:38:20",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/mitrecnd/pynids",
+ "star": 31,
+ "commits": 10,
+ "modify_time": "2014-07-12 15:29:05",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/misp/misp-objects",
+ "star": 31,
+ "commits": 874,
+ "modify_time": "2019-12-06 14:05:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mindawei/aliyun-safe-match",
+ "star": 31,
+ "commits": 17,
+ "modify_time": "2018-02-02 04:39:03",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/mikegleasonjr/devproxy",
+ "star": 31,
+ "commits": 4,
+ "modify_time": "2017-06-03 23:06:57",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/mgeeky/hevd_kernel_exploit",
+ "star": 31,
+ "commits": 103,
+ "modify_time": "2017-10-06 11:24:00",
+ "last_release": "v0.11",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/medhini/malicious_website_detection",
+ "star": 31,
+ "commits": 10,
+ "modify_time": "2017-10-25 16:58:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/matthewrudy/fake-code4hk-app",
+ "star": 31,
+ "commits": 7,
+ "modify_time": "2014-09-17 06:51:45",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/matthewdunwoody/poshspy",
+ "star": 31,
+ "commits": 3,
+ "modify_time": "2017-04-04 21:35:03",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/matrix1001/interactive-pwnning-tutorial",
+ "star": 31,
+ "commits": 7,
+ "modify_time": "2019-08-01 12:56:56",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/mathboy7/ctf",
+ "star": 31,
+ "commits": 173,
+ "modify_time": "2019-04-14 21:25:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/malwares/malwares.github.io",
+ "star": 31,
+ "commits": 5,
+ "modify_time": "2017-03-03 08:08:52",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/madpowah/forensicpcap",
+ "star": 31,
+ "commits": 5,
+ "modify_time": "2014-12-08 14:17:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lxiaogirl/hack",
+ "star": 31,
+ "commits": 4,
+ "modify_time": "2017-09-05 04:40:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lr3800/teensy",
+ "star": 31,
+ "commits": 26,
+ "modify_time": "2019-05-07 09:26:30",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/leviathan36/ska",
+ "star": 31,
+ "commits": 7,
+ "modify_time": "2019-09-20 23:08:03",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/kost/nmap-nse",
+ "star": 31,
+ "commits": 5,
+ "modify_time": "2015-06-30 09:00:11",
+ "last_release": "",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/kiyadesu/android-reversing-challenges",
+ "star": 31,
+ "commits": 25,
+ "modify_time": "2019-02-27 08:17:38",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/karelorigin/xss-problems",
+ "star": 31,
+ "commits": 12,
+ "modify_time": "2018-10-22 19:01:18",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/junorouse/ctf",
+ "star": 31,
+ "commits": 23,
+ "modify_time": "2019-09-16 02:43:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jtalowell/crackme",
+ "star": 31,
+ "commits": 13,
+ "modify_time": "2019-08-29 08:01:13",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jofpin/fuckshell",
+ "star": 31,
+ "commits": 18,
+ "modify_time": "2015-01-11 15:32:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jehy/rutracker-free",
+ "star": 31,
+ "commits": 134,
+ "modify_time": "2019-05-29 10:19:07",
+ "last_release": "9.2.0",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/jaybosamiya/fuzzing-numpy",
+ "star": 31,
+ "commits": 44,
+ "modify_time": "2017-07-01 10:31:59",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/isoadam/gina_public",
+ "star": 31,
+ "commits": 3,
+ "modify_time": "2019-03-30 01:31:49",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/installation/rkhunter",
+ "star": 31,
+ "commits": 11,
+ "modify_time": "2013-08-29 21:37:52",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/ihack4falafel/subrosa",
+ "star": 31,
+ "commits": 20,
+ "modify_time": "2018-05-14 01:09:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/idkwim/frooksinatra",
+ "star": 31,
+ "commits": 28,
+ "modify_time": "2014-07-20 15:33:13",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/iamgublin/ndis6.30-netmonitor",
+ "star": 31,
+ "commits": 20,
+ "modify_time": "2018-11-27 13:49:25",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hfiref0x/rocall",
+ "star": 31,
+ "commits": 4,
+ "modify_time": "2019-12-02 17:14:33",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hasherezade/funky_malware_formats",
+ "star": 31,
+ "commits": 33,
+ "modify_time": "2019-11-21 23:04:51",
+ "last_release": "1.5",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/harryfrey/fakegumtree",
+ "star": 31,
+ "commits": 5,
+ "modify_time": "2018-12-06 23:35:08",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/hacksysteam/exploitreliabilitytestingsystem",
+ "star": 31,
+ "commits": 6,
+ "modify_time": "2015-04-24 13:31:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hackedteam/driver-win64",
+ "star": 31,
+ "commits": 3,
+ "modify_time": "2012-02-10 09:19:53",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/h2hconference/2018",
+ "star": 31,
+ "commits": 10,
+ "modify_time": "2018-12-10 01:25:49",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/guitmz/go-liora",
+ "star": 31,
+ "commits": 24,
+ "modify_time": "2018-05-15 11:30:44",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/gplcc/gplcc",
+ "star": 31,
+ "commits": 730,
+ "modify_time": "2019-11-26 15:22:51",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/glmcdona/malm",
+ "star": 31,
+ "commits": 9,
+ "modify_time": "2013-06-14 05:53:53",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/glamrock/stormy",
+ "star": 31,
+ "commits": 130,
+ "modify_time": "2015-06-03 17:29:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fzerorubigd/go0r",
+ "star": 31,
+ "commits": 3,
+ "modify_time": "2015-04-07 13:57:18",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/frederic/qemu-exynos-bootrom",
+ "star": 31,
+ "commits": 58313,
+ "modify_time": "2018-03-01 08:42:31",
+ "last_release": "\n v2.11.1\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/fr0gger/unprotect",
+ "star": 31,
+ "commits": 59,
+ "modify_time": "2019-06-23 13:05:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fortiguard-lion/rpcview",
+ "star": 31,
+ "commits": 60,
+ "modify_time": "2018-11-13 09:31:52",
+ "last_release": "\n v0.3.0\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/foonull/halomd",
+ "star": 31,
+ "commits": 504,
+ "modify_time": "2017-02-13 05:02:20",
+ "last_release": "",
+ "lang": "HLSL"
+ },
+ {
+ "link": "https://github.com/fkie-cad/luckycat",
+ "star": 31,
+ "commits": 193,
+ "modify_time": "2019-05-28 14:28:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fist0urs/kerberom",
+ "star": 31,
+ "commits": 18,
+ "modify_time": "2018-05-21 14:09:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ffmancera/pentesting-multitool",
+ "star": 31,
+ "commits": 43,
+ "modify_time": "2017-11-10 17:47:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ez8-co/xpjson",
+ "star": 31,
+ "commits": 103,
+ "modify_time": "2019-04-16 05:18:08",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/etsubu/nanovm",
+ "star": 31,
+ "commits": 53,
+ "modify_time": "2019-07-13 18:45:06",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/edoverflow/curate",
+ "star": 31,
+ "commits": 11,
+ "modify_time": "2018-07-19 11:20:44",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/ecleipteon/thalos",
+ "star": 31,
+ "commits": 59,
+ "modify_time": "2019-03-26 02:14:49",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/dzzie/myaut_contrib",
+ "star": 31,
+ "commits": 3,
+ "modify_time": "2017-08-18 00:18:04",
+ "last_release": "",
+ "lang": "Visual Basic .NET"
+ },
+ {
+ "link": "https://github.com/dhamuharker/xss-",
+ "star": 31,
+ "commits": 5,
+ "modify_time": "2016-02-24 07:12:57",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/desudesutalk/f5stegojs",
+ "star": 31,
+ "commits": 17,
+ "modify_time": "2016-08-25 02:25:01",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/defcon-russia/metasploit-payloads",
+ "star": 31,
+ "commits": 2526,
+ "modify_time": "2019-09-09 18:24:23",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/danilabs/scripts-nse",
+ "star": 31,
+ "commits": 9,
+ "modify_time": "2015-11-30 21:31:27",
+ "last_release": "",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/danielmiessler/ctfsolutiontypes",
+ "star": 31,
+ "commits": 16,
+ "modify_time": "2016-02-05 02:33:10",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/D0g3-Lab/i-SOON_CTF_2018",
+ "star": 31,
+ "commits": 4,
+ "modify_time": "2018-11-28 06:26:55",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/cunninglogic/lgpwn",
+ "star": 31,
+ "commits": 5,
+ "modify_time": "2013-06-26 00:42:58",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/ctxis/capemon",
+ "star": 31,
+ "commits": 165,
+ "modify_time": "2019-03-01 06:30:19",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cturt/gameboy_ghidrasleigh",
+ "star": 31,
+ "commits": 6,
+ "modify_time": "2019-08-04 14:28:27",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/csandker/inmemoryshellcode",
+ "star": 31,
+ "commits": 4,
+ "modify_time": "2019-07-26 09:08:16",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cryptolok/ghostinthechaos",
+ "star": 31,
+ "commits": 24,
+ "modify_time": "2018-09-19 15:50:48",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/cryptax/fittools",
+ "star": 31,
+ "commits": 15,
+ "modify_time": "2016-11-24 11:05:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cisco-talos/casc",
+ "star": 31,
+ "commits": 68,
+ "modify_time": "2018-09-12 15:07:44",
+ "last_release": "1.1.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/christianpapathanasiou/apache-rootkit",
+ "star": 31,
+ "commits": 3,
+ "modify_time": "2015-02-19 17:07:53",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/chdorner/epubinfo",
+ "star": 31,
+ "commits": 136,
+ "modify_time": "2014-10-20 15:50:45",
+ "last_release": "\n v0.4.4\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/charliedean/psexecspray",
+ "star": 31,
+ "commits": 29,
+ "modify_time": "2019-07-03 10:16:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bwsw/webshell",
+ "star": 31,
+ "commits": 43,
+ "modify_time": "2017-08-12 12:06:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bsvineethiitg/malwaregan",
+ "star": 31,
+ "commits": 10,
+ "modify_time": "2018-07-29 21:38:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/brimstone/rsocks",
+ "star": 31,
+ "commits": 2,
+ "modify_time": "2018-01-05 03:55:35",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/bmitch/codor",
+ "star": 31,
+ "commits": 177,
+ "modify_time": "2018-03-02 19:50:06",
+ "last_release": "1.1.1",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/bluscreenofjeff/scripts",
+ "star": 31,
+ "commits": 13,
+ "modify_time": "2017-09-04 23:39:01",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/bltsec/violent-python3",
+ "star": 31,
+ "commits": 6,
+ "modify_time": "2018-01-03 22:46:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/blackvikingpro/aresskit",
+ "star": 31,
+ "commits": 37,
+ "modify_time": "2019-09-13 22:36:20",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/benjamincrom/scrabble",
+ "star": 31,
+ "commits": 409,
+ "modify_time": "2018-01-02 17:58:54",
+ "last_release": "v1.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/basilfx/kippo-extra",
+ "star": 31,
+ "commits": 23,
+ "modify_time": "2015-11-15 16:45:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/as0ler/r2clutch",
+ "star": 31,
+ "commits": 1,
+ "modify_time": "2016-09-09 08:59:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/arthaud/formatstring",
+ "star": 31,
+ "commits": 14,
+ "modify_time": "2015-11-16 10:58:54",
+ "last_release": "\n v1.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/aron-tn/mega-bot",
+ "star": 31,
+ "commits": 39,
+ "modify_time": "2019-09-08 05:18:56",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/argilo/secplus",
+ "star": 31,
+ "commits": 14,
+ "modify_time": "2019-09-16 04:07:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/appliedsec/forensicscanner",
+ "star": 31,
+ "commits": 1,
+ "modify_time": "2012-11-29 15:06:06",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/anilyuk/punydomaincheck",
+ "star": 31,
+ "commits": 23,
+ "modify_time": "2019-07-29 07:27:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/andrewwebber/kate",
+ "star": 31,
+ "commits": 21,
+ "modify_time": "2019-05-06 20:36:01",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/amoghbl1/tor-browser",
+ "star": 31,
+ "commits": 533805,
+ "modify_time": "2017-08-01 21:16:48",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/alienrobotarmy/ctunnel",
+ "star": 31,
+ "commits": 7,
+ "modify_time": "2018-02-27 21:09:44",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/alex91ar/diamorphine",
+ "star": 31,
+ "commits": 28,
+ "modify_time": "2019-05-23 15:26:01",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/5n44p/omega-dock-new",
+ "star": 31,
+ "commits": 51,
+ "modify_time": "2018-06-13 13:20:12",
+ "last_release": "",
+ "lang": "KiCad Layout"
+ },
+ {
+ "link": "https://github.com/3gstudent/waitfor-persistence",
+ "star": 31,
+ "commits": 6,
+ "modify_time": "2017-06-30 01:22:34",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/211217613/c-hacking",
+ "star": 31,
+ "commits": 16,
+ "modify_time": "2016-02-18 22:08:25",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/0xr0/hediye",
+ "star": 31,
+ "commits": 9,
+ "modify_time": "2019-01-15 19:09:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/003random/icu",
+ "star": 31,
+ "commits": 43,
+ "modify_time": "2018-07-10 22:26:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/smallstrong0/ss",
+ "star": 30,
+ "commits": 10,
+ "modify_time": "2019-02-22 02:13:26",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/benhoyt/third",
+ "star": 30,
+ "commits": 7,
+ "modify_time": "2015-10-01 00:07:41",
+ "last_release": "",
+ "lang": "Forth"
+ },
+ {
+ "link": "https://github.com/bestoa/shadowsocks-vertx",
+ "star": 30,
+ "commits": 182,
+ "modify_time": "2019-01-08 10:21:16",
+ "last_release": "0.8.2",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/fqshare/free-ssr-v2ray-vpn",
+ "star": 30,
+ "commits": 17,
+ "modify_time": "2019-11-16 03:36:57",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/stelligent/aws-devsecops-workshop",
+ "star": 30,
+ "commits": 193,
+ "modify_time": "2019-11-15 20:46:44",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/scwuaptx/ais3-2017",
+ "star": 30,
+ "commits": 5,
+ "modify_time": "2017-09-03 10:41:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/amitshekhariitbhu/applock",
+ "star": 30,
+ "commits": 43,
+ "modify_time": "2017-06-26 04:00:51",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/hubert3/isniff",
+ "star": 30,
+ "commits": 9,
+ "modify_time": "2011-08-24 18:21:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/offensive-security/kali-linux-preseed",
+ "star": 30,
+ "commits": 7,
+ "modify_time": "2019-04-24 17:39:00",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/xyntax/waf-bypass",
+ "star": 30,
+ "commits": 2,
+ "modify_time": "2016-07-08 19:27:45",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/angr/binaries",
+ "star": 30,
+ "commits": 153,
+ "modify_time": "2019-11-12 16:43:13",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/pentestmonkey/yaptest",
+ "star": 30,
+ "commits": 119,
+ "modify_time": "2015-05-30 11:14:51",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/pwn20wndstuff/meridianjb",
+ "star": 30,
+ "commits": 608,
+ "modify_time": "2019-04-10 15:57:22",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jiansiting/cve-2019-2725",
+ "star": 30,
+ "commits": 3,
+ "modify_time": "2019-06-15 12:53:21",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/kkevsterrr/geneva",
+ "star": 30,
+ "commits": 10,
+ "modify_time": "2019-11-23 17:07:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hsluoyz/rmtsvc",
+ "star": 30,
+ "commits": 6,
+ "modify_time": "2017-07-22 06:59:26",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/starriv/docker-ss",
+ "star": 30,
+ "commits": 13,
+ "modify_time": "2019-08-07 06:57:46",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/acidprime/wirelessconfig",
+ "star": 30,
+ "commits": 60,
+ "modify_time": "2013-09-18 14:58:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/probr/probr-core",
+ "star": 30,
+ "commits": 464,
+ "modify_time": "2018-02-09 07:28:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tikeswar/kido",
+ "star": 30,
+ "commits": 31,
+ "modify_time": "2019-11-13 05:01:12",
+ "last_release": "",
+ "lang": "Jupyter Notebook"
+ },
+ {
+ "link": "https://github.com/ds19991999/secbox",
+ "star": 30,
+ "commits": 5,
+ "modify_time": "2019-12-05 08:21:25",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/monereum/monereum",
+ "star": 30,
+ "commits": 556,
+ "modify_time": "2019-11-07 06:56:14",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/masssmith/smgate",
+ "star": 30,
+ "commits": 67,
+ "modify_time": "2019-10-24 04:55:52",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/osirislab/Catfish",
+ "star": 30,
+ "commits": 8,
+ "modify_time": "2014-07-01 01:31:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nsacyber/Detect-CVE-2017-15361-TPM",
+ "star": 30,
+ "commits": 25,
+ "modify_time": "2018-09-04 21:35:35",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/TACIXAT/XorShift128Plus",
+ "star": 30,
+ "commits": 6,
+ "modify_time": "2016-11-04 16:59:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/intel/jit-spray-poc-for-ksp",
+ "star": 30,
+ "commits": 9,
+ "modify_time": "2016-05-31 06:12:21",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/zoranpandovski/awesome-testing-tools",
+ "star": 30,
+ "commits": 63,
+ "modify_time": "2019-10-28 09:47:02",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/zodiacon/apisetview",
+ "star": 30,
+ "commits": 6,
+ "modify_time": "2019-08-12 18:27:05",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/zerosteiner/advancedhttpserver",
+ "star": 30,
+ "commits": 227,
+ "modify_time": "2019-03-22 14:44:34",
+ "last_release": "\n v2.2.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zacbrown/powershellmethodauditor",
+ "star": 30,
+ "commits": 9,
+ "modify_time": "2017-09-19 18:06:29",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/ysrc/shelldaddy",
+ "star": 30,
+ "commits": 1,
+ "modify_time": "2018-01-17 10:15:52",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ymherklotz/verismith",
+ "star": 30,
+ "commits": 757,
+ "modify_time": "2019-12-10 02:25:08",
+ "last_release": "v0.5.0.1",
+ "lang": "Haskell"
+ },
+ {
+ "link": "https://github.com/xrivendell/pcsgolh",
+ "star": 30,
+ "commits": 40,
+ "modify_time": "2019-05-07 23:57:39",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/xoreos/xoreos-tools",
+ "star": 30,
+ "commits": 1513,
+ "modify_time": "2019-10-20 12:18:17",
+ "last_release": "v0.0.5",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/x/twitter-brute-force",
+ "star": 30,
+ "commits": 19,
+ "modify_time": "2013-04-22 20:28:46",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/wybiral/reverseproxy",
+ "star": 30,
+ "commits": 11,
+ "modify_time": "2018-06-24 19:29:06",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/vuetifyjs/simple",
+ "star": 30,
+ "commits": null,
+ "modify_time": "2018-02-13 11:49:47",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/vrutkovs/firefox-flatpak",
+ "star": 30,
+ "commits": 6,
+ "modify_time": "2017-01-25 17:37:36",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/vic4key/cat-driver",
+ "star": 30,
+ "commits": 1,
+ "modify_time": "2017-11-04 20:13:45",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/valsov/backnet",
+ "star": 30,
+ "commits": 152,
+ "modify_time": "2018-05-28 16:07:49",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/travisfsmith/mitre_attack",
+ "star": 30,
+ "commits": 3,
+ "modify_time": "2018-12-10 22:56:29",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/tomnomnom/rawhttp",
+ "star": 30,
+ "commits": 17,
+ "modify_time": "2019-07-08 10:45:52",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/tigerpuma/afl_unicorn",
+ "star": 30,
+ "commits": 218,
+ "modify_time": "2017-11-15 01:20:58",
+ "last_release": "\n 2.51b\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/thaisenpm/loader2",
+ "star": 30,
+ "commits": 55,
+ "modify_time": "2019-04-29 02:43:29",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/teamharekaze/harekazectf2019-challenges",
+ "star": 30,
+ "commits": 8,
+ "modify_time": "2019-06-08 13:35:55",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/surajr/machine-learning-approach-for-malware-detection",
+ "star": 30,
+ "commits": 5,
+ "modify_time": "2016-10-10 06:31:54",
+ "last_release": "",
+ "lang": "Jupyter Notebook"
+ },
+ {
+ "link": "https://github.com/spiderlabs/xmlmao",
+ "star": 30,
+ "commits": 14,
+ "modify_time": "2013-07-19 21:16:08",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/spiderlabs/modsecurity-status",
+ "star": 30,
+ "commits": 10,
+ "modify_time": "2014-05-27 12:42:17",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/spencerdodd/pysploit",
+ "star": 30,
+ "commits": 20,
+ "modify_time": "2017-08-15 14:45:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sooshie/packerid",
+ "star": 30,
+ "commits": 12,
+ "modify_time": "2016-07-19 19:55:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/skulltech/apk-payload-injector",
+ "star": 30,
+ "commits": 4,
+ "modify_time": "2016-11-21 10:47:20",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/skepticfx/damnvulnerable.me",
+ "star": 30,
+ "commits": 12,
+ "modify_time": "2019-04-29 21:25:59",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/simoninns/smallymouse2",
+ "star": 30,
+ "commits": 16,
+ "modify_time": "2017-05-31 17:52:19",
+ "last_release": "v1.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/sf197/hashboy-tool",
+ "star": 30,
+ "commits": 11,
+ "modify_time": "2019-02-12 11:14:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/serpilliere/elfesteem",
+ "star": 30,
+ "commits": 267,
+ "modify_time": "2018-10-30 16:36:25",
+ "last_release": "\n top\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sentinel-one/skream",
+ "star": 30,
+ "commits": 50,
+ "modify_time": "2018-11-01 18:12:57",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/security-onion-solutions/securityonion-setup",
+ "star": 30,
+ "commits": 304,
+ "modify_time": "2019-11-16 12:36:25",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/secdec/attack-surface-detector-zap",
+ "star": 30,
+ "commits": 94,
+ "modify_time": "2019-03-08 11:50:05",
+ "last_release": "1.1.4",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/scottmudge/debugautopatch",
+ "star": 30,
+ "commits": 25,
+ "modify_time": "2019-09-06 16:30:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rpgeeganage/file-less-ransomware-demo",
+ "star": 30,
+ "commits": 18,
+ "modify_time": "2017-06-14 09:15:18",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/rootkitsmm/cvexx-xx",
+ "star": 30,
+ "commits": 16,
+ "modify_time": "2015-12-06 09:53:03",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/rokups/hooker",
+ "star": 30,
+ "commits": 20,
+ "modify_time": "2019-09-07 11:37:23",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/rmtew/peasauce",
+ "star": 30,
+ "commits": 145,
+ "modify_time": "2017-03-12 04:15:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/revengecoming/demonhunter",
+ "star": 30,
+ "commits": 63,
+ "modify_time": "2018-04-29 00:38:23",
+ "last_release": "v1.1.7",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/putsi/privatecollaborator",
+ "star": 30,
+ "commits": 19,
+ "modify_time": "2019-10-21 07:55:36",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/psxdev/ps4sdk",
+ "star": 30,
+ "commits": 29,
+ "modify_time": "2017-12-26 20:18:34",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/psmitty7373/eif",
+ "star": 30,
+ "commits": 14,
+ "modify_time": "2018-11-23 12:48:18",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/pnptutorials/pnp-portablehackingmachine",
+ "star": 30,
+ "commits": 25,
+ "modify_time": "2017-07-10 19:55:15",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/pnfsoftware/jeb2-plugin-oat",
+ "star": 30,
+ "commits": 30,
+ "modify_time": "2019-05-20 04:00:17",
+ "last_release": "1.0.5",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/plaperdr/fprandom",
+ "star": 30,
+ "commits": 6,
+ "modify_time": "2017-07-26 13:02:20",
+ "last_release": "v1.2",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/pinktangent/endpoint-testing",
+ "star": 30,
+ "commits": 154,
+ "modify_time": "2018-07-26 13:43:06",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/pentesteracademy/linux-rootkits-red-blue-teams",
+ "star": 30,
+ "commits": 14,
+ "modify_time": "2019-07-09 12:26:49",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/paragon-software-group/paragon_apfs_sdk_ce",
+ "star": 30,
+ "commits": 5,
+ "modify_time": "2019-07-16 12:19:45",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/owodelta/coilgun",
+ "star": 30,
+ "commits": 48,
+ "modify_time": "2018-12-09 12:38:35",
+ "last_release": "v2.0",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/opt-oss/ng-netms",
+ "star": 30,
+ "commits": 159,
+ "modify_time": "2017-12-05 18:19:26",
+ "last_release": "3.70B",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/opentoallctf/ctf-tools",
+ "star": 30,
+ "commits": 234,
+ "modify_time": "2015-12-19 23:41:55",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/opendevsecops/terraform-aws-scanner",
+ "star": 30,
+ "commits": 43,
+ "modify_time": "2019-01-29 06:09:59",
+ "last_release": "\n v0.4.0\n ",
+ "lang": "HCL"
+ },
+ {
+ "link": "https://github.com/ntraiseharderror/unrunpe",
+ "star": 30,
+ "commits": 6,
+ "modify_time": "2018-10-23 00:03:09",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/nextco/android-decompiler",
+ "star": 30,
+ "commits": 5,
+ "modify_time": "2017-04-18 16:23:33",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/neu5ron/malware-traffic-analysis-pcaps",
+ "star": 30,
+ "commits": 30,
+ "modify_time": "2016-06-09 15:21:11",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/mstsec/mst",
+ "star": 30,
+ "commits": 11,
+ "modify_time": "2015-03-02 16:09:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mohemiv/tcltools",
+ "star": 30,
+ "commits": 20,
+ "modify_time": "2018-07-17 04:52:31",
+ "last_release": "",
+ "lang": "Tcl"
+ },
+ {
+ "link": "https://github.com/modzero/mod0umleitung",
+ "star": 30,
+ "commits": 16,
+ "modify_time": "2018-05-23 19:24:00",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/mitre-attack/bzar",
+ "star": 30,
+ "commits": 2,
+ "modify_time": "2019-05-16 19:50:42",
+ "last_release": "",
+ "lang": "Zeek"
+ },
+ {
+ "link": "https://github.com/mhaggis/app_splunk_sysmon_hunter",
+ "star": 30,
+ "commits": 3,
+ "modify_time": "2017-03-07 20:20:59",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/mhagger/diff-slider-tools",
+ "star": 30,
+ "commits": 169,
+ "modify_time": "2016-08-22 09:48:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/meatballs1/burp_jsbeautifier",
+ "star": 30,
+ "commits": 9,
+ "modify_time": "2013-06-24 17:39:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/markofu/hackeire",
+ "star": 30,
+ "commits": 40,
+ "modify_time": "2016-04-01 20:04:12",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/malcomvetter/dnscache",
+ "star": 30,
+ "commits": 2,
+ "modify_time": "2018-12-30 21:03:26",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/m6a-uds/dvca",
+ "star": 30,
+ "commits": 13,
+ "modify_time": "2018-09-12 18:58:36",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/loggerhead/shadowsocks",
+ "star": 30,
+ "commits": 792,
+ "modify_time": "2016-11-20 03:38:12",
+ "last_release": "\n 2.9.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lionheart/pwnedpasswords",
+ "star": 30,
+ "commits": 114,
+ "modify_time": "2019-07-09 16:05:49",
+ "last_release": "\n 2.0.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lanrat/spiderwho",
+ "star": 30,
+ "commits": 106,
+ "modify_time": "2018-04-25 21:17:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/klaasnicolaas/ha_nfc_scanner",
+ "star": 30,
+ "commits": 18,
+ "modify_time": "2019-10-13 13:32:09",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/kkthxbye-code/csgo_bugs",
+ "star": 30,
+ "commits": 16,
+ "modify_time": "2019-06-04 23:08:38",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/kingron/s",
+ "star": 30,
+ "commits": 5,
+ "modify_time": "2018-02-27 12:58:54",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/karottc/linux-virus",
+ "star": 30,
+ "commits": 3,
+ "modify_time": "2014-10-15 17:55:50",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/joostvanveen/php-security-pitfalls",
+ "star": 30,
+ "commits": 4,
+ "modify_time": "2013-07-24 15:54:10",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/jlevitsk/lazykali",
+ "star": 30,
+ "commits": 26,
+ "modify_time": "2016-09-04 15:03:08",
+ "last_release": "1.0.2",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/jhaddix/seclists",
+ "star": 30,
+ "commits": 446,
+ "modify_time": "2018-03-20 07:52:41",
+ "last_release": "\n 1.3\n ",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/jenly1314/baseurlmanager",
+ "star": 30,
+ "commits": 18,
+ "modify_time": "2019-07-23 03:34:40",
+ "last_release": "1.0.1",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/jaky5155/cve-2019-0708-exp",
+ "star": 30,
+ "commits": 19,
+ "modify_time": "2019-05-22 04:24:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/itsreallynick/office-crackros",
+ "star": 30,
+ "commits": 8,
+ "modify_time": "2017-02-14 05:54:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/improsec/get-badpasswords",
+ "star": 30,
+ "commits": 101,
+ "modify_time": "2019-05-23 11:12:32",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/immortal3/hidden-eye",
+ "star": 30,
+ "commits": 24,
+ "modify_time": "2017-03-05 08:02:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ickerwx/pattern",
+ "star": 30,
+ "commits": 7,
+ "modify_time": "2019-12-09 12:31:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/h2hconference/2016",
+ "star": 30,
+ "commits": 2,
+ "modify_time": "2016-12-21 22:07:08",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/fuzzdb-project/webshell",
+ "star": 30,
+ "commits": null,
+ "modify_time": "2016-05-16 01:34:58",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/fideliscyber/data_mining",
+ "star": 30,
+ "commits": 64,
+ "modify_time": "2017-07-23 01:36:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ezyang/csrf-magic",
+ "star": 30,
+ "commits": 39,
+ "modify_time": "2016-03-27 22:40:54",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/exorxw/kylin-llvm-obfuscator",
+ "star": 30,
+ "commits": 6,
+ "modify_time": "2018-02-12 08:35:33",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/eshengsky/noginx",
+ "star": 30,
+ "commits": 21,
+ "modify_time": "2019-06-12 08:42:46",
+ "last_release": "v2.0.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/enigma0x3/powershell-c2",
+ "star": 30,
+ "commits": 7,
+ "modify_time": "2014-02-05 03:41:39",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/endgameinc/instegogram",
+ "star": 30,
+ "commits": 1,
+ "modify_time": "2016-08-05 19:13:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/emersonelectricco/boomerang",
+ "star": 30,
+ "commits": 9,
+ "modify_time": "2017-03-24 19:13:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/echo-devim/xbackdoor",
+ "star": 30,
+ "commits": 13,
+ "modify_time": "2015-10-17 11:32:46",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/ebelties/domainwatch",
+ "star": 30,
+ "commits": 11,
+ "modify_time": "2019-01-25 19:27:53",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/dwestgard/threat_hunting_tables",
+ "star": 30,
+ "commits": 6,
+ "modify_time": "2018-10-21 15:02:42",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/dqi/ctf_writeup",
+ "star": 30,
+ "commits": 35,
+ "modify_time": "2017-08-07 09:39:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dhn/exploits",
+ "star": 30,
+ "commits": 14,
+ "modify_time": "2019-08-13 10:40:02",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/deroko/payloadrestrictions",
+ "star": 30,
+ "commits": 1,
+ "modify_time": "2017-09-05 12:34:16",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/demonsec666/security-toolkit",
+ "star": 30,
+ "commits": 1,
+ "modify_time": "2018-10-20 05:49:51",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/deadbits/shells",
+ "star": 30,
+ "commits": 11,
+ "modify_time": "2017-02-16 02:34:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/danilovazb/sawef",
+ "star": 30,
+ "commits": 28,
+ "modify_time": "2016-02-28 10:59:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/daft-freak/sdl-emscripten",
+ "star": 30,
+ "commits": 11362,
+ "modify_time": "2019-09-26 07:13:51",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/dado3212/polldaddyhack",
+ "star": 30,
+ "commits": 24,
+ "modify_time": "2019-08-05 03:21:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/curi0usjack/activedirectory",
+ "star": 30,
+ "commits": 14,
+ "modify_time": "2014-11-15 02:39:44",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/comeforu2012/fq_faq",
+ "star": 30,
+ "commits": 5,
+ "modify_time": "2015-09-13 03:58:11",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/certt/1000base",
+ "star": 30,
+ "commits": 16,
+ "modify_time": "2018-07-09 16:18:07",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/carstein/burp-extensions",
+ "star": 30,
+ "commits": 22,
+ "modify_time": "2015-11-20 14:05:59",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bshastry/afl-sancov",
+ "star": 30,
+ "commits": 86,
+ "modify_time": "2016-11-09 14:25:40",
+ "last_release": "v1.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/briterator/drpdb",
+ "star": 30,
+ "commits": 47,
+ "modify_time": "2017-08-30 05:33:22",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/botherder/flexikiller",
+ "star": 30,
+ "commits": 17,
+ "modify_time": "2017-04-29 12:27:15",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/blackmathit/2017-11882_generator",
+ "star": 30,
+ "commits": 8,
+ "modify_time": "2017-11-22 08:38:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/biprodeep/awesome-ml-for-cybersecurity",
+ "star": 30,
+ "commits": 38,
+ "modify_time": "2017-09-01 08:24:20",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/bannsec/pythaw",
+ "star": 30,
+ "commits": 8,
+ "modify_time": "2016-07-21 02:39:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bandrel/ocyara",
+ "star": 30,
+ "commits": 174,
+ "modify_time": "2018-10-30 14:14:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/azure/azure-cosmosdb-java",
+ "star": 30,
+ "commits": 499,
+ "modify_time": "2019-12-02 18:55:21",
+ "last_release": "v2.6.3",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/ayuto/dynamichooks",
+ "star": 30,
+ "commits": 55,
+ "modify_time": "2019-11-22 18:48:53",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/aurainfosec/xss_payloads",
+ "star": 30,
+ "commits": 5,
+ "modify_time": "2018-11-13 23:46:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/aurainfosec/burp-multi-browser-highlighting",
+ "star": 30,
+ "commits": 12,
+ "modify_time": "2017-09-21 20:45:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/armourbird/csf",
+ "star": 30,
+ "commits": 4,
+ "modify_time": "2019-08-07 22:03:56",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/andrewilyas/ens-adv-train-attack",
+ "star": 30,
+ "commits": 4,
+ "modify_time": "2018-02-19 07:10:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/alemalakra/xwaf",
+ "star": 30,
+ "commits": 23,
+ "modify_time": "2019-01-08 14:40:15",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/akalankauk/foxss-xss-penetration-testing-tool",
+ "star": 30,
+ "commits": 13,
+ "modify_time": "2018-10-31 02:05:39",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/airman604/jdbc-backdoor",
+ "star": 30,
+ "commits": 4,
+ "modify_time": "2018-10-13 18:37:14",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/a0xnirudh/webxploiter",
+ "star": 30,
+ "commits": 56,
+ "modify_time": "2016-02-29 08:50:40",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/7hxz233/ctf",
+ "star": 30,
+ "commits": 50,
+ "modify_time": "2018-12-16 07:08:13",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/5z1punch/oracle_java_shell_client",
+ "star": 30,
+ "commits": 3,
+ "modify_time": "2017-01-04 16:29:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/3xp10it/xupload",
+ "star": 30,
+ "commits": 30,
+ "modify_time": "2019-04-11 10:25:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/1lastbr3ath/drmine",
+ "star": 30,
+ "commits": 13,
+ "modify_time": "2018-08-29 09:54:50",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/0xddaa/pin",
+ "star": 30,
+ "commits": 31,
+ "modify_time": "2015-07-19 07:52:20",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/0pc0defr/yararules",
+ "star": 30,
+ "commits": 23,
+ "modify_time": "2015-08-14 16:33:51",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/pushkalkatara/darknet_ros",
+ "star": 29,
+ "commits": 2,
+ "modify_time": "2019-01-30 16:34:24",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/sevro/security-utilities",
+ "star": 29,
+ "commits": 57,
+ "modify_time": "2017-10-29 00:03:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/portswigger/scan-check-builder",
+ "star": 29,
+ "commits": 153,
+ "modify_time": "2019-06-12 14:55:09",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/m507/kali-tx",
+ "star": 29,
+ "commits": 61,
+ "modify_time": "2019-12-10 21:39:26",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/skybulk/bin2sc",
+ "star": 29,
+ "commits": 10,
+ "modify_time": "2019-12-07 04:29:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dreadl0ck/golang-libs",
+ "star": 29,
+ "commits": 6,
+ "modify_time": "2018-03-07 11:19:16",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/fs0c131y/conpresentations",
+ "star": 29,
+ "commits": 5,
+ "modify_time": "2019-11-05 20:16:16",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/infosec-au/phishjs",
+ "star": 29,
+ "commits": 3,
+ "modify_time": "2015-12-08 20:35:56",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/mandatoryprogrammer/pers",
+ "star": 29,
+ "commits": 2,
+ "modify_time": "2016-10-13 11:31:14",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/iaik/transientfail",
+ "star": 29,
+ "commits": 15,
+ "modify_time": "2019-10-16 08:03:20",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/denandz/secretserversecretstealer",
+ "star": 29,
+ "commits": 9,
+ "modify_time": "2018-06-19 03:08:36",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/uknowsec/sharpeventlog",
+ "star": 29,
+ "commits": 8,
+ "modify_time": "2019-10-15 06:26:52",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/guardianproject/pluto",
+ "star": 29,
+ "commits": 28,
+ "modify_time": "2018-10-11 21:31:59",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/guelfoweb/wp-waf",
+ "star": 29,
+ "commits": 30,
+ "modify_time": "2013-06-12 13:30:25",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/al0ne/suricata_optimize",
+ "star": 29,
+ "commits": 4,
+ "modify_time": "2019-10-14 02:44:58",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/yinghuocho/ghttproxy",
+ "star": 29,
+ "commits": 8,
+ "modify_time": "2016-04-07 23:03:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nicehash/sgminer-gm",
+ "star": 29,
+ "commits": 6634,
+ "modify_time": "2017-02-26 23:26:46",
+ "last_release": "5.5.5-8",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/certtools/malware_name_mapping",
+ "star": 29,
+ "commits": 160,
+ "modify_time": "2019-11-12 10:37:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/igio90/frida-onload",
+ "star": 29,
+ "commits": 7,
+ "modify_time": "2019-06-28 04:52:45",
+ "last_release": "",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/osirislab/csaw-ctf-2019-quals",
+ "star": 29,
+ "commits": 2,
+ "modify_time": "2019-09-18 19:12:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/trojan-gfw/trojan-quickstart",
+ "star": 29,
+ "commits": 9,
+ "modify_time": "2019-10-02 14:53:01",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/lunixbochs/mpwn",
+ "star": 29,
+ "commits": 7,
+ "modify_time": "2019-11-04 17:06:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/shadowsocks/libev",
+ "star": 29,
+ "commits": 15,
+ "modify_time": "2019-03-29 07:10:10",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/wpscanteam/vulnerablewordpress",
+ "star": 29,
+ "commits": 11,
+ "modify_time": "2016-04-26 17:50:03",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/stevemk14ebr/bf4-atombot",
+ "star": 29,
+ "commits": 13,
+ "modify_time": "2018-10-30 16:50:40",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/javascript-obfuscator/obfuscator-loader",
+ "star": 29,
+ "commits": 13,
+ "modify_time": "2018-06-01 10:50:57",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/stealth/libusipp",
+ "star": 29,
+ "commits": 91,
+ "modify_time": "2018-07-12 12:45:59",
+ "last_release": "\n libusipp-2.24s\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/charlie-belmer/subdomain_recon",
+ "star": 29,
+ "commits": 2,
+ "modify_time": "2019-11-15 22:25:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/honwen/openwrt-dnsmasq-extra",
+ "star": 29,
+ "commits": 136,
+ "modify_time": "2019-12-10 05:14:24",
+ "last_release": "v20190907",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/evilbotnet/openpimap",
+ "star": 29,
+ "commits": 10,
+ "modify_time": "2018-08-10 00:20:29",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/ahhh/wifi_trojans",
+ "star": 29,
+ "commits": 6,
+ "modify_time": "2015-10-11 00:18:06",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/6e726d/pywiwi",
+ "star": 29,
+ "commits": 32,
+ "modify_time": "2016-11-28 13:02:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/muteb/hoarder",
+ "star": 29,
+ "commits": 68,
+ "modify_time": "2019-12-02 14:51:30",
+ "last_release": "3.1.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pnfsoftware/jeb-golang-analyzer",
+ "star": 29,
+ "commits": 3,
+ "modify_time": "2019-12-09 20:44:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fabi1cazenave/suckless.vim",
+ "star": 29,
+ "commits": 29,
+ "modify_time": "2018-12-19 13:02:54",
+ "last_release": "",
+ "lang": "Vim script"
+ },
+ {
+ "link": "https://github.com/sektioneins/.ipa-PIE-Scanner",
+ "star": 29,
+ "commits": 3,
+ "modify_time": "2012-03-04 22:29:10",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/websecurity-quiz/websecurity-quiz.github.io",
+ "star": 29,
+ "commits": 14,
+ "modify_time": "2019-06-28 17:55:44",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/xymnal/wce",
+ "star": 29,
+ "commits": 3,
+ "modify_time": "2019-01-10 04:12:29",
+ "last_release": "beta",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/calebstewart/peach",
+ "star": 29,
+ "commits": 55,
+ "modify_time": "2016-10-29 19:53:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ztgreat/proxy",
+ "star": 29,
+ "commits": 25,
+ "modify_time": "2019-12-01 14:52:56",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/zkclown/getpwd",
+ "star": 29,
+ "commits": 72,
+ "modify_time": "2019-08-01 11:59:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zhuhuibeishadiao/minivtx64",
+ "star": 29,
+ "commits": 3,
+ "modify_time": "2016-10-15 03:28:01",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/zendframework/zendxml",
+ "star": 29,
+ "commits": 80,
+ "modify_time": "2019-01-22 19:43:16",
+ "last_release": "release-1.2.0",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/yolosec/ysoserial",
+ "star": 29,
+ "commits": 87,
+ "modify_time": "2016-09-19 21:33:00",
+ "last_release": "\n v0.0.4\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/xyntax/zzone-transfer",
+ "star": 29,
+ "commits": 8,
+ "modify_time": "2016-03-11 01:22:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/x64dbg/x64dbgbinja",
+ "star": 29,
+ "commits": 5,
+ "modify_time": "2017-02-28 17:40:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wangyinuo/memdump",
+ "star": 29,
+ "commits": null,
+ "modify_time": "2017-08-22 07:25:03",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/virqdroid/android_malware",
+ "star": 29,
+ "commits": 32,
+ "modify_time": "2017-09-26 08:41:43",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/vanhauser-thc/audit_scripts",
+ "star": 29,
+ "commits": 8,
+ "modify_time": "2019-04-02 09:43:18",
+ "last_release": "",
+ "lang": "Batchfile"
+ },
+ {
+ "link": "https://github.com/v-p-b/oracle_forms",
+ "star": 29,
+ "commits": 31,
+ "modify_time": "2018-07-17 17:21:15",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/usnistgov/nfiq2",
+ "star": 29,
+ "commits": 2,
+ "modify_time": "2019-09-10 14:53:35",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/troyhunt/hibp-stickers",
+ "star": 29,
+ "commits": 19,
+ "modify_time": "2018-12-12 19:01:55",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/tribalchicken/volatility-bitlocker",
+ "star": 29,
+ "commits": 12,
+ "modify_time": "2017-07-26 05:33:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tjunxiang92/android-vulnerabilities",
+ "star": 29,
+ "commits": 7,
+ "modify_time": "2016-10-04 03:34:01",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/tinywan/openresty-project-v0.01",
+ "star": 29,
+ "commits": 219,
+ "modify_time": "2017-12-28 08:53:30",
+ "last_release": "v0.02",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/theori-io/jscript9-typedarray-cfg",
+ "star": 29,
+ "commits": 1,
+ "modify_time": "2016-12-15 05:23:41",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/techbliss/yara_mailware_quick_menu_scanner",
+ "star": 29,
+ "commits": 16,
+ "modify_time": "2016-03-26 14:15:56",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/tai7sy/be_fuck",
+ "star": 29,
+ "commits": 2,
+ "modify_time": "2018-11-27 09:27:21",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/syworks/wpa-bruteforcer",
+ "star": 29,
+ "commits": 4,
+ "modify_time": "2014-01-07 07:58:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sycloversecurity/papers",
+ "star": 29,
+ "commits": 4,
+ "modify_time": "2017-05-22 06:21:04",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/stormshield/beholder-win32",
+ "star": 29,
+ "commits": 7,
+ "modify_time": "2016-09-13 20:19:19",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/slowmist/ontology-triones-service-node-security-checklist",
+ "star": 29,
+ "commits": 2,
+ "modify_time": "2018-06-27 11:28:47",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/slifty/tvarchive-duplitron",
+ "star": 29,
+ "commits": 121,
+ "modify_time": "2016-11-28 18:15:39",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/skelsec/windows_ad_dos_poc",
+ "star": 29,
+ "commits": 2,
+ "modify_time": "2018-09-19 23:33:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/shift/domain_exporter",
+ "star": 29,
+ "commits": 48,
+ "modify_time": "2019-01-01 23:19:30",
+ "last_release": "v0.1.8",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/sekirkity/seeclrly",
+ "star": 29,
+ "commits": 7,
+ "modify_time": "2017-03-06 19:16:47",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/securifera/cowcron",
+ "star": 29,
+ "commits": 3,
+ "modify_time": "2017-01-30 13:48:27",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/sdnewhop/sdwan-harvester",
+ "star": 29,
+ "commits": 21,
+ "modify_time": "2019-09-03 14:05:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sdasgup3/binary-decompilation",
+ "star": 29,
+ "commits": 1935,
+ "modify_time": "2019-06-13 03:28:40",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/scubsrgroup/lectures-a-weekly-information-security-knowledge-lecture-hall",
+ "star": 29,
+ "commits": 22,
+ "modify_time": "2016-09-21 06:26:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/schmalle/nodepot",
+ "star": 29,
+ "commits": 116,
+ "modify_time": "2015-08-23 16:29:30",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/savon-noir/nmap-webgui",
+ "star": 29,
+ "commits": 20,
+ "modify_time": "2013-06-18 16:51:23",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/rvazarkar/antipwny",
+ "star": 29,
+ "commits": 26,
+ "modify_time": "2013-11-18 21:37:55",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/rot42/gnuk-extractor",
+ "star": 29,
+ "commits": 4,
+ "modify_time": "2019-08-04 09:56:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rockmelodies/cve-2019-0708-exploit",
+ "star": 29,
+ "commits": 6,
+ "modify_time": "2019-05-15 02:51:23",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/rocketshipapps/hardenedpaste",
+ "star": 29,
+ "commits": 25,
+ "modify_time": "2017-07-03 01:00:02",
+ "last_release": "c1.2.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/ridter/hackredis",
+ "star": 29,
+ "commits": 3,
+ "modify_time": "2018-06-20 02:47:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/redteamwing/cobaltstrike_wiki",
+ "star": 29,
+ "commits": 13,
+ "modify_time": "2018-10-21 19:11:03",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/razorpay/alohomora",
+ "star": 29,
+ "commits": 64,
+ "modify_time": "2019-08-26 08:29:28",
+ "last_release": "\n 0.4.7\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rafiot/hackedteamcerts",
+ "star": 29,
+ "commits": 6,
+ "modify_time": "2015-07-14 21:19:06",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/radicallyopensecurity/netaidkit",
+ "star": 29,
+ "commits": 75,
+ "modify_time": "2016-03-14 17:57:53",
+ "last_release": "",
+ "lang": "Makefile"
+ },
+ {
+ "link": "https://github.com/r00tse7en/googlehackingtool",
+ "star": 29,
+ "commits": 17,
+ "modify_time": "2019-05-07 00:51:16",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/parasimpaticki/sandcastle",
+ "star": 29,
+ "commits": 89,
+ "modify_time": "2019-01-22 17:13:32",
+ "last_release": "1.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/opensourcehelpcommunity/contributingtomyproject",
+ "star": 29,
+ "commits": 35,
+ "modify_time": "2018-12-16 19:01:31",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/oclif/kaomoji",
+ "star": 29,
+ "commits": 8,
+ "modify_time": "2019-11-19 19:03:15",
+ "last_release": "",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/obscuritylabs/pefixup",
+ "star": 29,
+ "commits": 75,
+ "modify_time": "2019-09-13 22:15:50",
+ "last_release": "v0.0.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nuand/kalibrate-bladerf",
+ "star": 29,
+ "commits": 18,
+ "modify_time": "2017-12-29 19:05:57",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/notscimmy/libinject",
+ "star": 29,
+ "commits": 9,
+ "modify_time": "2018-09-09 04:26:56",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/netxfly/docker_ssh_honeypot",
+ "star": 29,
+ "commits": 3,
+ "modify_time": "2018-08-28 08:17:44",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/namreeb/wowned",
+ "star": 29,
+ "commits": 9,
+ "modify_time": "2017-12-21 08:17:07",
+ "last_release": "0.4",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/nahamsec/cmsfuzz",
+ "star": 29,
+ "commits": null,
+ "modify_time": "2015-10-14 23:21:04",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/mzfr/lswriteups",
+ "star": 29,
+ "commits": 12,
+ "modify_time": "2019-03-18 03:55:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mtigas/iobfs",
+ "star": 29,
+ "commits": 35,
+ "modify_time": "2016-07-15 23:10:19",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/mrmacete/r2-ios-kernelcache",
+ "star": 29,
+ "commits": 22,
+ "modify_time": "2019-03-10 18:24:31",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/mrfearless/apiinfo-plugin-x86",
+ "star": 29,
+ "commits": 10,
+ "modify_time": "2018-07-17 15:43:04",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/mosuan/auditdpy",
+ "star": 29,
+ "commits": 10,
+ "modify_time": "2019-04-10 09:33:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mogongtech/ransomdetection",
+ "star": 29,
+ "commits": 1,
+ "modify_time": "2017-10-29 05:10:10",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/mncoppola/stringipc",
+ "star": 29,
+ "commits": 3,
+ "modify_time": "2015-11-16 06:31:54",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/mitrecnd/htpy",
+ "star": 29,
+ "commits": 82,
+ "modify_time": "2019-10-18 20:18:09",
+ "last_release": "RELEASE_0.31",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/misterch0c/solidlity-vulnerable",
+ "star": 29,
+ "commits": 2,
+ "modify_time": "2018-04-17 17:37:42",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/mhatta/orchid",
+ "star": 29,
+ "commits": 625,
+ "modify_time": "2018-12-21 13:51:04",
+ "last_release": "v1.0.6",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/mephistools/diablo2-protocol",
+ "star": 29,
+ "commits": 284,
+ "modify_time": "2019-08-25 11:47:10",
+ "last_release": "\n 1.3.2\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/marakew/syser",
+ "star": 29,
+ "commits": 19,
+ "modify_time": "2019-07-05 09:11:38",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/mainframed/enumeration",
+ "star": 29,
+ "commits": 84,
+ "modify_time": "2019-11-25 21:17:14",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/madnikulin50/gordp",
+ "star": 29,
+ "commits": 10,
+ "modify_time": "2018-02-04 20:43:04",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/luffin/cve-2017-10271",
+ "star": 29,
+ "commits": 6,
+ "modify_time": "2018-01-10 02:34:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ludovicianul/geolog",
+ "star": 29,
+ "commits": 6,
+ "modify_time": "2019-06-20 05:52:17",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/kudelskisecurity/fumblechain",
+ "star": 29,
+ "commits": 9,
+ "modify_time": "2019-10-30 14:05:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kerrigan29a/idapython_virtualenv",
+ "star": 29,
+ "commits": 14,
+ "modify_time": "2017-06-20 16:18:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jtdowney/private_address_check",
+ "star": 29,
+ "commits": 34,
+ "modify_time": "2018-05-29 22:48:11",
+ "last_release": "\n v0.5.0\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/jruby/jruby-openssl",
+ "star": 29,
+ "commits": 1453,
+ "modify_time": "2019-03-01 17:59:36",
+ "last_release": "v0.10.2",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/joychou93/md5-extension-attack",
+ "star": 29,
+ "commits": 3,
+ "modify_time": "2016-06-08 05:13:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jnastarot/native_peloader",
+ "star": 29,
+ "commits": 1,
+ "modify_time": "2017-07-03 18:17:41",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jimyj/scanproxy",
+ "star": 29,
+ "commits": 42,
+ "modify_time": "2019-04-19 04:00:19",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/jaybrown/macos-security-updates",
+ "star": 29,
+ "commits": 10,
+ "modify_time": "2018-06-24 22:23:42",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/jacobsoo/threathunting",
+ "star": 29,
+ "commits": 133,
+ "modify_time": "2019-07-12 15:29:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/iweizime/dbghider",
+ "star": 29,
+ "commits": 6,
+ "modify_time": "2018-06-19 07:18:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/intezer/mop",
+ "star": 29,
+ "commits": 6,
+ "modify_time": "2019-08-08 08:33:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/inishantgrover/shodmon",
+ "star": 29,
+ "commits": 4,
+ "modify_time": "2019-03-24 13:22:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/illusivenetworks-labs/get-networkconnection",
+ "star": 29,
+ "commits": 2,
+ "modify_time": "2018-03-14 13:20:21",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/hvqzao/burp-flow",
+ "star": 29,
+ "commits": 51,
+ "modify_time": "2019-05-20 18:13:46",
+ "last_release": "1.24",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/hklcf/mirai",
+ "star": 29,
+ "commits": 4,
+ "modify_time": "2016-10-22 09:56:04",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hiddenillusion/filelookup",
+ "star": 29,
+ "commits": 8,
+ "modify_time": "2014-06-24 01:21:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/he1m4n6a/dcweb",
+ "star": 29,
+ "commits": 24,
+ "modify_time": "2018-07-07 14:55:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hcab14/tdoa",
+ "star": 29,
+ "commits": 100,
+ "modify_time": "2019-09-02 10:55:34",
+ "last_release": "\n v1.1\n ",
+ "lang": "MATLAB"
+ },
+ {
+ "link": "https://github.com/haxorthematrix/loc-nogps",
+ "star": 29,
+ "commits": 11,
+ "modify_time": "2014-10-17 14:37:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hahwul/xss-payload-without-anything",
+ "star": 29,
+ "commits": 6,
+ "modify_time": "2019-06-28 15:16:05",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ha71/pywhatcms",
+ "star": 29,
+ "commits": 12,
+ "modify_time": "2019-04-16 13:59:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gushmazuko/metasploit_in_termux",
+ "star": 29,
+ "commits": 25,
+ "modify_time": "2019-08-13 01:52:56",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/gcrahay/otx_misp",
+ "star": 29,
+ "commits": 103,
+ "modify_time": "2019-02-10 20:33:50",
+ "last_release": "\n v1.4.2\n ",
+ "lang": "Jupyter Notebook"
+ },
+ {
+ "link": "https://github.com/foxmole/pwnadventure3",
+ "star": 29,
+ "commits": 7,
+ "modify_time": "2017-10-19 12:06:33",
+ "last_release": "",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/fdciabdul/fbchecker",
+ "star": 29,
+ "commits": 28,
+ "modify_time": "2019-07-05 18:13:18",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/eymengunay/eohoneypotbundle",
+ "star": 29,
+ "commits": 71,
+ "modify_time": "2019-09-19 12:57:49",
+ "last_release": "v1.2.3",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/sevro/security-utilities",
+ "star": 29,
+ "commits": 57,
+ "modify_time": "2017-10-29 00:03:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ernw/binja-ipython",
+ "star": 29,
+ "commits": 3,
+ "modify_time": "2018-06-27 13:12:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/entynetproject/proton",
+ "star": 29,
+ "commits": 1696,
+ "modify_time": "2019-12-09 17:40:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dro/uac-launchinf-poc",
+ "star": 29,
+ "commits": 4,
+ "modify_time": "2018-08-03 00:22:40",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/drewlong/vbully",
+ "star": 29,
+ "commits": 23,
+ "modify_time": "2017-07-31 00:47:21",
+ "last_release": "2.0.0",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/donctl/sandy",
+ "star": 29,
+ "commits": 6,
+ "modify_time": "2014-09-30 18:13:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dmolnar/smartfuzz",
+ "star": 29,
+ "commits": 2,
+ "modify_time": "2009-07-10 23:33:53",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/dhuertas/des",
+ "star": 29,
+ "commits": 3,
+ "modify_time": "2012-09-11 09:53:45",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/defconrome/meetings-2019",
+ "star": 29,
+ "commits": 8,
+ "modify_time": "2019-10-01 20:02:29",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/dangkyokhoang/man-in-the-middle",
+ "star": 29,
+ "commits": 40,
+ "modify_time": "2019-10-09 16:11:56",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/daedalus/bitcoin-recover-privkey",
+ "star": 29,
+ "commits": 18,
+ "modify_time": "2019-08-16 02:18:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cyb3r3x3r/kalilinuxnethunter-termux",
+ "star": 29,
+ "commits": 15,
+ "modify_time": "2017-10-09 20:48:09",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/cryptogenic/rebot",
+ "star": 29,
+ "commits": 18,
+ "modify_time": "2019-07-17 19:44:20",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/cristianturetta/mad-spy",
+ "star": 29,
+ "commits": 34,
+ "modify_time": "2019-05-13 13:48:31",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/cretz/tor-dht-poc",
+ "star": 29,
+ "commits": 15,
+ "modify_time": "2018-08-22 18:19:31",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/conorpp/mitm-http-proxy",
+ "star": 29,
+ "commits": 76,
+ "modify_time": "2015-04-27 18:21:56",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/codeliker/mymig_meterpreter",
+ "star": 29,
+ "commits": 2,
+ "modify_time": "2014-12-08 13:44:14",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/chunkingz/vmr-mdk-k2-2017r-012x4",
+ "star": 29,
+ "commits": 15,
+ "modify_time": "2019-05-23 09:42:22",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/chichou/grab.js",
+ "star": 29,
+ "commits": 50,
+ "modify_time": "2017-06-15 03:28:36",
+ "last_release": "2.1.0",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/celestialpaler/cthackframework",
+ "star": 29,
+ "commits": 14,
+ "modify_time": "2019-07-09 08:03:45",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/catalyst256/sniffmypackets",
+ "star": 29,
+ "commits": 178,
+ "modify_time": "2014-04-14 07:39:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/calebfenton/native-harness-target",
+ "star": 29,
+ "commits": 7,
+ "modify_time": "2018-12-04 16:30:30",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/bugbounty-site/calexe",
+ "star": 29,
+ "commits": 4,
+ "modify_time": "2019-09-29 20:19:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bramp/myip",
+ "star": 29,
+ "commits": 48,
+ "modify_time": "2017-10-23 04:24:54",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/br101/libuwifi",
+ "star": 29,
+ "commits": 194,
+ "modify_time": "2019-12-05 16:31:18",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/borjamerino/plcinjector",
+ "star": 29,
+ "commits": 3,
+ "modify_time": "2016-12-13 23:14:26",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/bnagy/afl-launch",
+ "star": 29,
+ "commits": 21,
+ "modify_time": "2016-01-19 12:15:45",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/bgeesaman/subpath-exploit",
+ "star": 29,
+ "commits": 3,
+ "modify_time": "2018-03-23 13:41:02",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/barro/java-afl",
+ "star": 29,
+ "commits": 76,
+ "modify_time": "2018-04-30 16:40:09",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/aviavni/nativeleakdetector",
+ "star": 29,
+ "commits": 6,
+ "modify_time": "2018-01-05 09:24:32",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/auth0-blog/polymer-with-jwt-api",
+ "star": 29,
+ "commits": 17,
+ "modify_time": "2017-04-26 14:50:28",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/atlantis2013/evasion-tools",
+ "star": 29,
+ "commits": 34,
+ "modify_time": "2013-10-27 12:23:38",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/artemdinaburg/optimizevm",
+ "star": 29,
+ "commits": 7,
+ "modify_time": "2013-06-30 06:02:51",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/arlolra/ctypes-otr",
+ "star": 29,
+ "commits": 221,
+ "modify_time": "2016-12-15 03:27:16",
+ "last_release": "\n 0.0.4\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/arduinohannover/zpb30a1_firmware",
+ "star": 29,
+ "commits": 12,
+ "modify_time": "2018-01-17 02:36:19",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/android-rooting-tools/libkallsyms",
+ "star": 29,
+ "commits": 25,
+ "modify_time": "2016-04-04 08:40:30",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ammario/ipisp",
+ "star": 29,
+ "commits": 44,
+ "modify_time": "2019-10-17 15:09:26",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/alexoslabs/httpsscan",
+ "star": 29,
+ "commits": 77,
+ "modify_time": "2016-04-04 21:51:10",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/alex9191/netdriver",
+ "star": 29,
+ "commits": 2,
+ "modify_time": "2018-06-09 15:13:18",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/alberties/ghostfuscator",
+ "star": 29,
+ "commits": 8,
+ "modify_time": "2019-07-07 19:53:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/akihirosuda/aspectgo",
+ "star": 29,
+ "commits": 3,
+ "modify_time": "2016-08-02 01:34:20",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/ahmetgurel/pentest-hints",
+ "star": 29,
+ "commits": 85,
+ "modify_time": "2019-10-08 11:01:38",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/agustingianni/symrepl",
+ "star": 29,
+ "commits": 7,
+ "modify_time": "2018-03-04 20:59:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/adonley/ethereum-brute-force",
+ "star": 29,
+ "commits": 15,
+ "modify_time": "2019-08-01 02:23:13",
+ "last_release": "v0.2",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/3gstudent/gadgettojscript",
+ "star": 29,
+ "commits": 22,
+ "modify_time": "2019-10-11 01:18:20",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/0xdabbad00/openhips",
+ "star": 29,
+ "commits": 79,
+ "modify_time": "2013-01-07 19:58:35",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/0x90/nrf24-arsenal",
+ "star": 29,
+ "commits": 12,
+ "modify_time": "2017-07-14 05:59:01",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://bitbucket.org/camp0/aiengine",
+ "star": 29,
+ "commits": null,
+ "modify_time": "2019-02-01 20:48:27.763000",
+ "last_release": "",
+ "lang": "c++"
+ },
+ {
+ "link": "https://github.com/idkiro/ssmgr-install",
+ "star": 28,
+ "commits": 54,
+ "modify_time": "2019-10-21 01:32:14",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/zhou0/mysocks",
+ "star": 28,
+ "commits": 190,
+ "modify_time": "2018-01-07 13:04:42",
+ "last_release": "0.5.12",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/bennetthardwick/darknet.js",
+ "star": 28,
+ "commits": 108,
+ "modify_time": "2019-10-01 23:06:49",
+ "last_release": "\n v2.0.11\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/danielgatis/darknetpy",
+ "star": 28,
+ "commits": 2,
+ "modify_time": "2019-02-04 16:57:38",
+ "last_release": "",
+ "lang": "Jupyter Notebook"
+ },
+ {
+ "link": "https://github.com/portswigger/wordpress-scanner",
+ "star": 28,
+ "commits": 20,
+ "modify_time": "2018-05-29 13:18:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lincolnhard/facenet-darknet-inference",
+ "star": 28,
+ "commits": 3,
+ "modify_time": "2018-04-19 08:36:05",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/yaleh/kcp-shadowsocks-server",
+ "star": 28,
+ "commits": 36,
+ "modify_time": "2019-12-02 11:48:16",
+ "last_release": "\n 20191202\n ",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/iqiancheng/shadowsocks-awesome",
+ "star": 28,
+ "commits": 47,
+ "modify_time": "2016-09-16 07:54:56",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/tidesec/peach_fuzzing",
+ "star": 28,
+ "commits": 7,
+ "modify_time": "2019-11-29 15:39:00",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/bishopfox/cyberdic",
+ "star": 28,
+ "commits": 5,
+ "modify_time": "2019-10-23 23:53:40",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/jonathansalwan/vmndh-2k12",
+ "star": 28,
+ "commits": 7,
+ "modify_time": "2013-04-25 18:06:27",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/frida/v8",
+ "star": 28,
+ "commits": 55559,
+ "modify_time": "2019-05-17 11:57:09",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/shadowsocksr-live/ssrdroid",
+ "star": 28,
+ "commits": 115,
+ "modify_time": "2018-05-30 05:41:10",
+ "last_release": "\n v1.1.2Beta\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/lordnoteworthy/windows-exploitation",
+ "star": 28,
+ "commits": 23,
+ "modify_time": "2018-12-09 08:37:56",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/twintproject/twint-explorer",
+ "star": 28,
+ "commits": 6,
+ "modify_time": "2019-01-23 22:11:59",
+ "last_release": "1.2.1",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/dineshshetty/fridaloader",
+ "star": 28,
+ "commits": 8,
+ "modify_time": "2019-07-31 16:27:57",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/angorafuzzer/fuzzingrealprogrambenchstatistics",
+ "star": 28,
+ "commits": 5,
+ "modify_time": "2019-01-14 08:51:13",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/urinx/device-9",
+ "star": 28,
+ "commits": 15,
+ "modify_time": "2015-12-10 08:52:12",
+ "last_release": "",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/spiderlabs/deblaze",
+ "star": 28,
+ "commits": 1,
+ "modify_time": "2010-12-07 18:01:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/igrigorik/em-socksify",
+ "star": 28,
+ "commits": 47,
+ "modify_time": "2018-09-25 19:29:15",
+ "last_release": "\n v0.3.2\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/wyatu/pentestscripts",
+ "star": 28,
+ "commits": 1,
+ "modify_time": "2018-12-29 18:11:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cryptogenic/ps4console",
+ "star": 28,
+ "commits": 12,
+ "modify_time": "2016-08-25 17:10:15",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/timvisee/pixelpwnr",
+ "star": 28,
+ "commits": 89,
+ "modify_time": "2019-10-12 13:03:18",
+ "last_release": "",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/tribler/app-to-app-communicator",
+ "star": 28,
+ "commits": 48,
+ "modify_time": "2016-07-20 11:10:16",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/kasif-dekel/whatsapp-rce-patched",
+ "star": 28,
+ "commits": 1,
+ "modify_time": "2019-11-16 11:14:37",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/vxunderground/family",
+ "star": 28,
+ "commits": 63,
+ "modify_time": "2019-10-30 04:33:43",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/privacyint/appdata-environment-desktop",
+ "star": 28,
+ "commits": 45,
+ "modify_time": "2019-11-10 13:52:28",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/benoitsevens/applying-ttd-to-malware-analysis",
+ "star": 28,
+ "commits": 6,
+ "modify_time": "2019-10-23 05:28:40",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/scallywag/nbtscan",
+ "star": 28,
+ "commits": 1,
+ "modify_time": "2016-05-26 20:14:53",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cobbr/c2bridge",
+ "star": 28,
+ "commits": 7,
+ "modify_time": "2019-10-30 12:38:11",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/x1tan/cve-2019-13025",
+ "star": 28,
+ "commits": 3,
+ "modify_time": "2019-10-04 18:40:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vpnguy-zz/HandyHeaderHacker",
+ "star": 28,
+ "commits": 16,
+ "modify_time": "2018-01-11 21:44:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/Geta/404handler",
+ "star": 28,
+ "commits": 300,
+ "modify_time": "2019-12-04 18:52:02",
+ "last_release": "v10.1.0",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/praetorian-code/dert",
+ "star": 28,
+ "commits": 21,
+ "modify_time": "2016-01-19 18:28:28",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/zonksec/weblogic-serialization-exploit-updated",
+ "star": 28,
+ "commits": 3,
+ "modify_time": "2017-03-23 14:33:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zombiesam/wikigen",
+ "star": 28,
+ "commits": 8,
+ "modify_time": "2014-11-04 21:51:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zhanghaoyil/hawk-i",
+ "star": 28,
+ "commits": 6,
+ "modify_time": "2018-09-24 03:28:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zenware/bluemaho",
+ "star": 28,
+ "commits": 1,
+ "modify_time": "2016-06-28 17:04:33",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/zaproxy/zap-api-java",
+ "star": 28,
+ "commits": 183,
+ "modify_time": "2019-08-12 09:19:10",
+ "last_release": "v1.7.0",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/zanelackey/projects",
+ "star": 28,
+ "commits": 3,
+ "modify_time": "2012-04-25 20:48:59",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/z4yx/supervisor-mips32",
+ "star": 28,
+ "commits": 73,
+ "modify_time": "2019-12-04 08:38:51",
+ "last_release": "v1.2",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/yulewang/brook",
+ "star": 28,
+ "commits": 5,
+ "modify_time": "2019-02-24 13:41:46",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/yifiheaven/magicwall",
+ "star": 28,
+ "commits": 12,
+ "modify_time": "2018-11-07 09:20:28",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/yawning/obfsclient",
+ "star": 28,
+ "commits": 121,
+ "modify_time": "2015-05-11 19:42:38",
+ "last_release": "v0.0.2",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/xyzz/vita-ida-physdump",
+ "star": 28,
+ "commits": 3,
+ "modify_time": "2018-09-25 02:42:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xayon/pyrcrack",
+ "star": 28,
+ "commits": 57,
+ "modify_time": "2019-04-13 16:29:29",
+ "last_release": "\n 0.1.2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/x64dbg/slothbp",
+ "star": 28,
+ "commits": 11,
+ "modify_time": "2017-08-11 02:29:58",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/x64dbg/plugintemplate",
+ "star": 28,
+ "commits": 15,
+ "modify_time": "2018-03-24 17:04:41",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/wlmeng11/rtl-ultrasound",
+ "star": 28,
+ "commits": 56,
+ "modify_time": "2018-12-16 01:26:37",
+ "last_release": "\n v0.1.0\n ",
+ "lang": "Jupyter Notebook"
+ },
+ {
+ "link": "https://github.com/webpack/source-list-map",
+ "star": 28,
+ "commits": 50,
+ "modify_time": "2018-10-10 10:47:35",
+ "last_release": "v2.0.1",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/wanttobeno/win64driverstudy_src",
+ "star": 28,
+ "commits": 1,
+ "modify_time": "2018-03-23 23:37:21",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/wahengchang/nodejs-security-must-know",
+ "star": 28,
+ "commits": 7,
+ "modify_time": "2018-07-16 05:44:23",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/vusec/typearmor",
+ "star": 28,
+ "commits": 11,
+ "modify_time": "2017-04-06 23:02:52",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/visualbasic6/google-drive-exploit",
+ "star": 28,
+ "commits": 35,
+ "modify_time": "2019-03-08 14:29:43",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/virink/as_plugin_godofhacker",
+ "star": 28,
+ "commits": 2,
+ "modify_time": "2019-07-10 08:16:53",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/versprite/engage",
+ "star": 28,
+ "commits": 19,
+ "modify_time": "2018-03-28 19:43:07",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/vedaldi/visualindex",
+ "star": 28,
+ "commits": 20,
+ "modify_time": "2014-01-18 19:20:02",
+ "last_release": "",
+ "lang": "MATLAB"
+ },
+ {
+ "link": "https://github.com/v1cker/poc-exp",
+ "star": 28,
+ "commits": 2,
+ "modify_time": "2016-07-27 06:05:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/uber/bug-bounty-page",
+ "star": 28,
+ "commits": 26,
+ "modify_time": "2016-12-16 21:28:21",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/tuupola/whereami",
+ "star": 28,
+ "commits": 59,
+ "modify_time": "2017-12-06 13:25:15",
+ "last_release": "\n 0.4.1\n ",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/tradichel/awssecurityautomationframework",
+ "star": 28,
+ "commits": 23,
+ "modify_time": "2019-10-19 20:59:41",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/tr3jer/autohookspider",
+ "star": 28,
+ "commits": 13,
+ "modify_time": "2017-06-02 16:53:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/torbsd/openbsd-ports",
+ "star": 28,
+ "commits": 268,
+ "modify_time": "2018-02-24 22:51:57",
+ "last_release": "\n tbb-6.0.5-sans-pt-fix6\n ",
+ "lang": "Makefile"
+ },
+ {
+ "link": "https://github.com/themiddleblue/dnsenum",
+ "star": 28,
+ "commits": 13,
+ "modify_time": "2018-08-23 09:38:14",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/theforeman/foreman_openscap",
+ "star": 28,
+ "commits": 792,
+ "modify_time": "2019-11-26 15:26:50",
+ "last_release": "\n v2.0.2\n ",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/thalium/idatag",
+ "star": 28,
+ "commits": 88,
+ "modify_time": "2019-07-19 15:23:35",
+ "last_release": "v0.3",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/telanflow/dictgenerate",
+ "star": 28,
+ "commits": 31,
+ "modify_time": "2019-09-11 13:21:28",
+ "last_release": "1.0.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/talhasch/php-httpstat",
+ "star": 28,
+ "commits": 10,
+ "modify_time": "2016-10-07 17:58:49",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/superkojiman/scanreport",
+ "star": 28,
+ "commits": 22,
+ "modify_time": "2016-07-28 17:11:14",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/sukkaw/zsh-proxy",
+ "star": 28,
+ "commits": 18,
+ "modify_time": "2019-05-17 15:51:00",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/sqdwr/loadimageinject",
+ "star": 28,
+ "commits": 2,
+ "modify_time": "2019-01-09 15:27:48",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/sophoslabs/webassembly",
+ "star": 28,
+ "commits": 13,
+ "modify_time": "2019-12-04 00:56:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/skateman/purr",
+ "star": 28,
+ "commits": 78,
+ "modify_time": "2019-07-14 13:56:32",
+ "last_release": "\n v0.1.2\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/shanselman/daskeyboard-q-nightscout",
+ "star": 28,
+ "commits": 10,
+ "modify_time": "2019-02-08 23:04:35",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/securitygeneration/honeyport",
+ "star": 28,
+ "commits": 19,
+ "modify_time": "2017-02-22 16:06:33",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/secarmalabs/iotchecklist",
+ "star": 28,
+ "commits": 17,
+ "modify_time": "2017-08-25 18:50:16",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/sakeven/mika",
+ "star": 28,
+ "commits": 56,
+ "modify_time": "2018-03-04 11:46:24",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/rokasurbelis/system_safety_test",
+ "star": 28,
+ "commits": null,
+ "modify_time": "2019-01-10 10:08:37",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/richardc/puppet-datacat",
+ "star": 28,
+ "commits": 136,
+ "modify_time": "2017-06-21 08:55:55",
+ "last_release": "\n 0.6.2\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/rfdslabs/mimosa-framework",
+ "star": 28,
+ "commits": 14,
+ "modify_time": "2015-06-01 15:23:28",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/regehr/opt-fuzz",
+ "star": 28,
+ "commits": 182,
+ "modify_time": "2019-12-05 18:17:26",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/rccoder/awesome-shadowsocks-qt5-installation-on-debian",
+ "star": 28,
+ "commits": 5,
+ "modify_time": "2016-07-03 13:05:46",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/razc411/gobd",
+ "star": 28,
+ "commits": 82,
+ "modify_time": "2019-02-10 06:28:51",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/rapid7/mimikatz",
+ "star": 28,
+ "commits": 266,
+ "modify_time": "2019-12-06 14:18:59",
+ "last_release": "\n 2.2.0-20190813\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/qsecure-labs/overlord",
+ "star": 28,
+ "commits": 49,
+ "modify_time": "2019-10-31 14:15:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/qll/attacking-browser-extensions",
+ "star": 28,
+ "commits": 4,
+ "modify_time": "2016-05-22 21:05:03",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/qianshanhai/q-shell",
+ "star": 28,
+ "commits": 15,
+ "modify_time": "2015-06-11 20:49:55",
+ "last_release": "V3.3",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/pwntester/springbreaker",
+ "star": 28,
+ "commits": 6,
+ "modify_time": "2013-12-17 11:21:14",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/pwn2winctf/2017",
+ "star": 28,
+ "commits": 261,
+ "modify_time": "2017-11-01 11:04:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/puritys/chromesecureshell",
+ "star": 28,
+ "commits": 73,
+ "modify_time": "2019-03-21 19:14:53",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/psych0tr1a/elscripto",
+ "star": 28,
+ "commits": 9,
+ "modify_time": "2018-01-15 11:33:17",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/phaeilo/vol-openvpn",
+ "star": 28,
+ "commits": 2,
+ "modify_time": "2014-09-26 12:42:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/paulpc/nyx",
+ "star": 28,
+ "commits": 7,
+ "modify_time": "2015-12-30 22:31:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/packetforger/localroot",
+ "star": 28,
+ "commits": 8,
+ "modify_time": "2013-08-28 21:17:54",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/owasp/blt",
+ "star": 28,
+ "commits": 861,
+ "modify_time": "2019-03-15 05:25:53",
+ "last_release": "v0.5",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/oct0xor/deci3dbg",
+ "star": 28,
+ "commits": 1,
+ "modify_time": "2014-05-30 13:08:40",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/nyan-x-cat/dropless-malware",
+ "star": 28,
+ "commits": 2,
+ "modify_time": "2019-04-09 03:04:21",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/nvisium/moneyx",
+ "star": 28,
+ "commits": 137,
+ "modify_time": "2016-05-10 14:41:15",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/netspi/asa_tools",
+ "star": 28,
+ "commits": 5,
+ "modify_time": "2017-03-15 20:25:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nervous/greenkit-rootkit",
+ "star": 28,
+ "commits": 107,
+ "modify_time": "2018-01-19 00:10:48",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ne0nd0g/guinevere",
+ "star": 28,
+ "commits": 39,
+ "modify_time": "2017-12-22 17:31:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nats-io/nats-general",
+ "star": 28,
+ "commits": 48,
+ "modify_time": "2019-10-30 22:49:59",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/mxmssh/netafl",
+ "star": 28,
+ "commits": 10,
+ "modify_time": "2018-09-14 22:38:45",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/mvrcrypto/bitp0wn",
+ "star": 28,
+ "commits": 43,
+ "modify_time": "2019-04-19 06:43:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mvondracek/wifimitm",
+ "star": 28,
+ "commits": 276,
+ "modify_time": "2017-05-03 21:41:26",
+ "last_release": "\n 0.6\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ms3fgx/tsatool",
+ "star": 28,
+ "commits": 9,
+ "modify_time": "2016-03-19 01:38:01",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/mrwn007/m3m0",
+ "star": 28,
+ "commits": 44,
+ "modify_time": "2019-12-05 01:49:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mrmacete/r2scripts",
+ "star": 28,
+ "commits": 72,
+ "modify_time": "2019-01-01 13:05:03",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/mprhode/malware-prediction-rnn",
+ "star": 28,
+ "commits": 23,
+ "modify_time": "2018-06-19 07:42:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/misp/misp-rfc",
+ "star": 28,
+ "commits": 286,
+ "modify_time": "2019-12-05 18:19:33",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/misp/misp-cloud",
+ "star": 28,
+ "commits": 125,
+ "modify_time": "2019-12-05 19:45:22",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/mindmac/xposedautomation",
+ "star": 28,
+ "commits": 13,
+ "modify_time": "2014-11-02 09:31:00",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/mimoo/eureka",
+ "star": 28,
+ "commits": 33,
+ "modify_time": "2019-03-06 20:14:05",
+ "last_release": "2.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/mikhbur/conformer",
+ "star": 28,
+ "commits": 15,
+ "modify_time": "2018-11-14 18:24:34",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/michael4338/tdi",
+ "star": 28,
+ "commits": 1,
+ "modify_time": "2014-07-21 08:42:40",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/michael-myers/macos-wpa-psk",
+ "star": 28,
+ "commits": 8,
+ "modify_time": "2019-08-31 20:39:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mechpen/sockdump",
+ "star": 28,
+ "commits": 12,
+ "modify_time": "2019-07-24 05:27:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/martinstyk/apkanalyzer",
+ "star": 28,
+ "commits": 180,
+ "modify_time": "2017-06-22 15:20:16",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/markelog/adit",
+ "star": 28,
+ "commits": 110,
+ "modify_time": "2017-03-05 21:13:07",
+ "last_release": "\n v1.0.11\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/lufeirider/sqlchecker",
+ "star": 28,
+ "commits": 35,
+ "modify_time": "2019-08-12 03:22:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lucasfrag/kali-linux-tools-interface",
+ "star": 28,
+ "commits": 130,
+ "modify_time": "2019-07-05 20:26:04",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/lpefferkorn/ipdecap",
+ "star": 28,
+ "commits": 96,
+ "modify_time": "2018-10-14 12:02:06",
+ "last_release": "v0.7.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/l-n-s/transmission-i2p",
+ "star": 28,
+ "commits": 13,
+ "modify_time": "2018-01-06 17:24:23",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/knownsec/decrypt-ransomware",
+ "star": 28,
+ "commits": 1,
+ "modify_time": "2018-12-10 09:22:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kholia/exetractor-clone",
+ "star": 28,
+ "commits": null,
+ "modify_time": "2013-08-28 18:27:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jumbo-wjb/jpentest",
+ "star": 28,
+ "commits": 106,
+ "modify_time": "2018-11-28 16:59:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/johnaho/cloakify-powershell",
+ "star": 28,
+ "commits": 5,
+ "modify_time": "2019-07-10 05:11:26",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/jnastarot/enma_pe",
+ "star": 28,
+ "commits": 152,
+ "modify_time": "2019-11-10 14:21:58",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/jjyg/ssh_decoder",
+ "star": 28,
+ "commits": 7,
+ "modify_time": "2012-08-28 15:25:11",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/jiazhang0/seloader",
+ "star": 28,
+ "commits": 174,
+ "modify_time": "2018-07-17 09:38:09",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/jekil/udpot",
+ "star": 28,
+ "commits": 13,
+ "modify_time": "2019-08-16 14:17:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jeanshuang/potatso",
+ "star": 28,
+ "commits": 133,
+ "modify_time": "2018-05-04 08:01:31",
+ "last_release": "\n 1.4.4\n ",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/jayeshchauhan/skanda",
+ "star": 28,
+ "commits": 38,
+ "modify_time": "2013-07-06 13:03:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/inndy/ctf-from-zero-to-one",
+ "star": 28,
+ "commits": 1,
+ "modify_time": "2016-12-21 09:34:24",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/infosec-au/webappsec-toolkit",
+ "star": 28,
+ "commits": 24,
+ "modify_time": "2014-10-21 10:06:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ihebski/pentest-chainsaw",
+ "star": 28,
+ "commits": 10,
+ "modify_time": "2018-01-04 18:38:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/icewall/forcedelete",
+ "star": 28,
+ "commits": 2,
+ "modify_time": "2016-02-11 00:22:50",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ice3man543/malscan",
+ "star": 28,
+ "commits": 5,
+ "modify_time": "2018-03-11 06:57:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ibey0nd/nstproxy",
+ "star": 28,
+ "commits": 5,
+ "modify_time": "2018-04-08 02:07:45",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/hybtoy/ssrrmu",
+ "star": 28,
+ "commits": 67,
+ "modify_time": "2019-09-26 07:53:12",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/hoangprod/leospecial-veh-hook",
+ "star": 28,
+ "commits": 8,
+ "modify_time": "2019-01-14 15:28:56",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/hempnall/broyara",
+ "star": 28,
+ "commits": 10,
+ "modify_time": "2014-12-09 09:28:03",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/harryr/nanac",
+ "star": 28,
+ "commits": 19,
+ "modify_time": "2017-04-18 19:53:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hannob/pgpecosystem",
+ "star": 28,
+ "commits": 5,
+ "modify_time": "2015-03-22 10:15:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hackedteam/driver-win32",
+ "star": 28,
+ "commits": 5,
+ "modify_time": "2012-02-09 12:05:09",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/greenbone/python-gvm",
+ "star": 28,
+ "commits": 1135,
+ "modify_time": "2019-12-09 07:32:52",
+ "last_release": "v1.1.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/grayddq/passivedatasorting",
+ "star": 28,
+ "commits": 9,
+ "modify_time": "2017-12-21 08:46:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gossip-sjtu/k-hunt",
+ "star": 28,
+ "commits": 19,
+ "modify_time": "2018-11-03 02:20:07",
+ "last_release": "",
+ "lang": "TeX"
+ },
+ {
+ "link": "https://github.com/godinezj/metasploit-framework",
+ "star": 28,
+ "commits": 44032,
+ "modify_time": "2017-11-06 18:03:53",
+ "last_release": "\n blog-20150604\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/gdbinit/teloader",
+ "star": 28,
+ "commits": 1,
+ "modify_time": "2015-09-14 15:34:43",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/gdbinit/mario",
+ "star": 28,
+ "commits": 4,
+ "modify_time": "2015-04-13 16:30:37",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/gdbinit/can_i_suid",
+ "star": 28,
+ "commits": 4,
+ "modify_time": "2014-10-03 16:56:38",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/fuzzysecurity/bh-arsenal-2019",
+ "star": 28,
+ "commits": 3,
+ "modify_time": "2019-08-14 15:20:41",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/fozavci/metasploit-framework-with-viproy",
+ "star": 28,
+ "commits": 10,
+ "modify_time": "2017-03-15 03:50:30",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/foryujian/yujianrdpcrack",
+ "star": 28,
+ "commits": 18,
+ "modify_time": "2019-05-03 17:34:46",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/floyd-fuh/burp-httpfuzzer",
+ "star": 28,
+ "commits": 5,
+ "modify_time": "2017-01-31 16:00:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/flo354/iosforensic",
+ "star": 28,
+ "commits": 3,
+ "modify_time": "2014-06-10 14:52:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/firebug/firequery",
+ "star": 28,
+ "commits": 179,
+ "modify_time": "2016-06-07 07:36:08",
+ "last_release": "firequery-2.0.4",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/fdfalcon/typeisolationdbg",
+ "star": 28,
+ "commits": 1,
+ "modify_time": "2018-02-01 16:00:01",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/erriy/data_pirate",
+ "star": 28,
+ "commits": 28,
+ "modify_time": "2016-03-16 15:22:40",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ericzimmerman/amcacheparser",
+ "star": 28,
+ "commits": 85,
+ "modify_time": "2019-11-22 15:18:26",
+ "last_release": "1.2.0.0",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/enddo/hatdbg",
+ "star": 28,
+ "commits": null,
+ "modify_time": "2018-05-26 21:50:21",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/elynx/pokemon-go-xposed-mitm",
+ "star": 28,
+ "commits": 80,
+ "modify_time": "2016-09-27 08:36:34",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/eleemosynator/writeups",
+ "star": 28,
+ "commits": 17,
+ "modify_time": "2019-11-16 20:45:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/earayu/fastjson_jndi_poc",
+ "star": 28,
+ "commits": 4,
+ "modify_time": "2017-12-07 06:39:26",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/dshikashio/pybag",
+ "star": 28,
+ "commits": 24,
+ "modify_time": "2017-07-02 23:18:09",
+ "last_release": "v1.1.0",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/drme/ble-rc",
+ "star": 28,
+ "commits": 22,
+ "modify_time": "2018-03-15 22:03:37",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/dreadlocked/ctf-writeups",
+ "star": 28,
+ "commits": 16,
+ "modify_time": "2019-04-07 14:15:03",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/dottedmag/archmage",
+ "star": 28,
+ "commits": 163,
+ "modify_time": "2019-12-02 22:00:27",
+ "last_release": "\n v0.4.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dienuet/crossdomain",
+ "star": 28,
+ "commits": 35,
+ "modify_time": "2018-07-16 08:43:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dharmaofcode/gorp",
+ "star": 28,
+ "commits": 233,
+ "modify_time": "2019-10-02 07:08:30",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/defcon-russia/shortcut_auto_bind",
+ "star": 28,
+ "commits": 8,
+ "modify_time": "2018-03-22 10:59:08",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/deadbits/arcreactor",
+ "star": 28,
+ "commits": 35,
+ "modify_time": "2017-02-16 02:16:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dcso/misp-dockerized",
+ "star": 28,
+ "commits": 200,
+ "modify_time": "2019-11-09 15:38:14",
+ "last_release": "v1.3.0",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/darksecdevelopers/absorber",
+ "star": 28,
+ "commits": 40,
+ "modify_time": "2019-11-24 07:34:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dannagle/packetsender-ios",
+ "star": 28,
+ "commits": 5,
+ "modify_time": "2018-06-01 01:40:40",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/ctz/sgx-pwenclave",
+ "star": 28,
+ "commits": 15,
+ "modify_time": "2016-01-17 21:06:03",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ctxis/pac-leak-demo",
+ "star": 28,
+ "commits": 2,
+ "modify_time": "2016-10-04 09:04:49",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/ctxis/cbrcli",
+ "star": 28,
+ "commits": 11,
+ "modify_time": "2019-03-29 10:32:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cryptolu/whitebox",
+ "star": 28,
+ "commits": 16,
+ "modify_time": "2019-05-21 14:46:24",
+ "last_release": "\n WhibOx2019\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cryptax/droidlysis",
+ "star": 28,
+ "commits": 9,
+ "modify_time": "2019-10-11 09:21:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/crowdstrike/chopshop",
+ "star": 28,
+ "commits": 32,
+ "modify_time": "2016-07-15 20:39:59",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/crisu83/ctf-game",
+ "star": 28,
+ "commits": 132,
+ "modify_time": "2016-02-28 22:27:30",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/cr4sh/dbgcb",
+ "star": 28,
+ "commits": 5,
+ "modify_time": "2013-06-08 19:01:13",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/countercept/ppid-spoofing",
+ "star": 28,
+ "commits": 4,
+ "modify_time": "2018-12-21 15:26:55",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/codenothing/argv",
+ "star": 28,
+ "commits": 21,
+ "modify_time": "2014-02-03 09:21:56",
+ "last_release": "\n v0.0.2\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/codehaus-plexus/plexus-archiver",
+ "star": 28,
+ "commits": 753,
+ "modify_time": "2019-10-27 23:10:17",
+ "last_release": "\n plexus-archiver-4.2.1\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/cannanlly/gogotester",
+ "star": 28,
+ "commits": 89,
+ "modify_time": "2017-04-24 07:28:41",
+ "last_release": "gvs_test_version",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/calidog/certstream-js",
+ "star": 28,
+ "commits": 7,
+ "modify_time": "2019-02-18 18:51:17",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/burp-hash/burp-hash",
+ "star": 28,
+ "commits": 145,
+ "modify_time": "2015-08-05 22:28:45",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/brandonprry/clamav-fuzz",
+ "star": 28,
+ "commits": 21,
+ "modify_time": "2016-06-13 05:46:12",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/bot-man-jl/wfp-traffic-redirection-driver",
+ "star": 28,
+ "commits": 2,
+ "modify_time": "2018-06-30 08:51:07",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/bnbdr/wd-rce",
+ "star": 28,
+ "commits": 1,
+ "modify_time": "2019-05-22 19:10:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bit4woo/gui_burp_extender_para_encrypter",
+ "star": 28,
+ "commits": 14,
+ "modify_time": "2018-06-08 09:06:51",
+ "last_release": "v1.1.1",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/belove/avhbf",
+ "star": 28,
+ "commits": 5,
+ "modify_time": "2015-11-23 01:44:44",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/baltimorechad/pyonionscan",
+ "star": 28,
+ "commits": 43,
+ "modify_time": "2017-02-27 12:17:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/azmatt/anaximander",
+ "star": 28,
+ "commits": 9,
+ "modify_time": "2019-08-19 02:02:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ayrx/tlsenum",
+ "star": 28,
+ "commits": 78,
+ "modify_time": "2017-04-25 09:01:47",
+ "last_release": "v0.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/armissecurity/urgent11-detector",
+ "star": 28,
+ "commits": 18,
+ "modify_time": "2019-10-08 14:53:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/arm-software/sbsa-acs",
+ "star": 28,
+ "commits": 137,
+ "modify_time": "2019-10-20 10:04:55",
+ "last_release": "v19.09_REL2.3",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/antoinet/obike",
+ "star": 28,
+ "commits": 24,
+ "modify_time": "2019-05-09 19:53:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/antid0tecom/ipad_accessory_research",
+ "star": 28,
+ "commits": 10,
+ "modify_time": "2019-01-05 12:27:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/andrewsmhay/brisket",
+ "star": 28,
+ "commits": 487,
+ "modify_time": "2014-03-05 19:17:01",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/allocandinit/ollvm5.0.1",
+ "star": 28,
+ "commits": 13,
+ "modify_time": "2018-07-31 10:05:12",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/allglorytothehypnotoad/nodescan",
+ "star": 28,
+ "commits": 26,
+ "modify_time": "2017-08-07 17:27:52",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/alienwithin/scripts-sploits",
+ "star": 28,
+ "commits": 47,
+ "modify_time": "2018-12-06 08:09:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/alephsecurity/spectrebrowserresearch",
+ "star": 28,
+ "commits": 6,
+ "modify_time": "2018-06-25 08:09:05",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/airbus-seclab/gustave",
+ "star": 28,
+ "commits": 6,
+ "modify_time": "2019-06-11 13:25:06",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ahmadnourallah/pysploit-framework",
+ "star": 28,
+ "commits": 47,
+ "modify_time": "2017-07-27 20:48:48",
+ "last_release": "1.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/abatchy17/hevd-exploits",
+ "star": 28,
+ "commits": 10,
+ "modify_time": "2018-08-25 03:13:15",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/a7vinx/liinux",
+ "star": 28,
+ "commits": 2,
+ "modify_time": "2016-06-21 12:32:27",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/98587329/web-scan",
+ "star": 28,
+ "commits": null,
+ "modify_time": "2018-12-12 12:10:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/4n4nk3/wordlister",
+ "star": 28,
+ "commits": 33,
+ "modify_time": "2019-11-06 09:06:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/3gstudent/fuzzbunch",
+ "star": 28,
+ "commits": 3,
+ "modify_time": "2017-04-27 09:37:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/0xacb/github-desktop-poc",
+ "star": 28,
+ "commits": 8,
+ "modify_time": "2018-12-04 17:50:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/0x71/cuckoo-linux",
+ "star": 28,
+ "commits": 4530,
+ "modify_time": "2016-11-15 10:52:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/0utrider/malrecon",
+ "star": 28,
+ "commits": 42,
+ "modify_time": "2017-06-08 19:07:33",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/syst3ma/awesome_cisco_exploitation",
+ "star": 27,
+ "commits": 17,
+ "modify_time": "2017-10-07 11:10:40",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/adolfintel/notebot",
+ "star": 27,
+ "commits": 26,
+ "modify_time": "2019-01-18 11:15:25",
+ "last_release": "1.6",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/snail007/goproxy-cn",
+ "star": 27,
+ "commits": 20,
+ "modify_time": "2019-12-03 07:42:21",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/spiderlabs/modsecurity-log-utilities",
+ "star": 27,
+ "commits": 5,
+ "modify_time": "2018-05-03 12:25:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/radareorg/r2jp",
+ "star": 27,
+ "commits": 39,
+ "modify_time": "2019-02-04 15:13:05",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/infobyte/cve-2016-2776",
+ "star": 27,
+ "commits": 10,
+ "modify_time": "2016-10-03 20:37:10",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/gimini/tartarus",
+ "star": 27,
+ "commits": 4,
+ "modify_time": "2017-08-02 04:55:32",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/cyrus-and/chrome-page-graph",
+ "star": 27,
+ "commits": 10,
+ "modify_time": "2017-12-13 00:00:43",
+ "last_release": "\n v0.1.1\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/samyk/crak",
+ "star": 27,
+ "commits": 14,
+ "modify_time": "2018-12-02 20:55:25",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/getlantern/lampshade",
+ "star": 27,
+ "commits": 151,
+ "modify_time": "2019-12-05 03:11:49",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/averagesecurityguy/blue",
+ "star": 27,
+ "commits": 21,
+ "modify_time": "2016-03-17 01:52:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tidesec/auto_pentest_tool_course",
+ "star": 27,
+ "commits": 1,
+ "modify_time": "2019-10-30 02:26:26",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/security-onion-solutions/securityonion-docker",
+ "star": 27,
+ "commits": 82,
+ "modify_time": "2019-11-15 12:56:19",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/paranoidninja/pisociety",
+ "star": 27,
+ "commits": 18,
+ "modify_time": "2017-06-03 03:20:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fsecurelabs/avrop",
+ "star": 27,
+ "commits": 4,
+ "modify_time": "2016-11-03 16:05:32",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/thesp0nge/wordstress",
+ "star": 27,
+ "commits": 49,
+ "modify_time": "2016-05-11 13:18:46",
+ "last_release": "\n v0.70.0\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/hak5darren/ducky-flasher",
+ "star": 27,
+ "commits": 1,
+ "modify_time": "2013-04-16 23:42:21",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/nccgroup/nobex",
+ "star": 27,
+ "commits": 181,
+ "modify_time": "2019-09-05 16:45:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/netspi/daft",
+ "star": 27,
+ "commits": 16,
+ "modify_time": "2019-07-26 15:44:51",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/hephaest0s/creatorrc",
+ "star": 27,
+ "commits": 7,
+ "modify_time": "2016-06-05 10:40:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/purplei2p/i2pd-tools",
+ "star": 27,
+ "commits": 192,
+ "modify_time": "2019-08-02 20:05:02",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/offensive-security/kali-sly-pi",
+ "star": 27,
+ "commits": 16,
+ "modify_time": "2019-04-24 17:21:48",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/zaczero/sharploader",
+ "star": 27,
+ "commits": 109,
+ "modify_time": "2017-06-28 22:06:54",
+ "last_release": "v2.2",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/digivill/all-in-one-wifi-cracker",
+ "star": 27,
+ "commits": 3,
+ "modify_time": "2017-07-07 19:04:12",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/glenrobinson72/tableau-powershell-scripts",
+ "star": 27,
+ "commits": 65,
+ "modify_time": "2019-08-07 10:05:57",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/edoverflow/h1-cli",
+ "star": 27,
+ "commits": 5,
+ "modify_time": "2018-08-02 16:09:20",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/firewalltutor/firewalltutor.github.io",
+ "star": 27,
+ "commits": 2,
+ "modify_time": "2019-07-19 10:07:37",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/mvelazc0/purplespray",
+ "star": 27,
+ "commits": 12,
+ "modify_time": "2019-08-15 03:09:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vgkintsugi/ghidra-segasaturn-processor",
+ "star": 27,
+ "commits": 34,
+ "modify_time": "2019-11-02 02:01:08",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/imshubhamsingh/farmerchain",
+ "star": 27,
+ "commits": 243,
+ "modify_time": "2018-01-05 21:00:30",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/usdag/cstc",
+ "star": 27,
+ "commits": 4,
+ "modify_time": "2019-08-10 17:16:37",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/dixel/wifi-linux",
+ "star": 27,
+ "commits": 14,
+ "modify_time": "2018-03-24 15:30:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bendemott/captiveportal",
+ "star": 27,
+ "commits": 5,
+ "modify_time": "2015-01-05 20:39:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vulcainreo/dvid",
+ "star": 27,
+ "commits": 29,
+ "modify_time": "2019-12-05 21:37:17",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/gdabah/win32k-bugs",
+ "star": 27,
+ "commits": 2,
+ "modify_time": "2019-11-13 14:05:30",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/grapheneos/os_issue_tracker",
+ "star": 27,
+ "commits": 3,
+ "modify_time": "2019-09-26 22:42:25",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/axdsan/dnspy-stringsanalyzer",
+ "star": 27,
+ "commits": 22,
+ "modify_time": "2019-07-18 17:09:56",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/hrt/anticheatjs",
+ "star": 27,
+ "commits": 18,
+ "modify_time": "2019-10-20 22:24:29",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/usineur/SDLPoP",
+ "star": 27,
+ "commits": 565,
+ "modify_time": "2019-11-09 07:43:16",
+ "last_release": "vita-1.7",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/exploiteers/NestDFUAttack",
+ "star": 27,
+ "commits": 1,
+ "modify_time": "2014-06-26 15:04:51",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/fdiskyou/WinAllocTracer",
+ "star": 27,
+ "commits": 19,
+ "modify_time": "2018-11-27 14:03:17",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/alessiodallapiazza/WPScan",
+ "star": 27,
+ "commits": 5,
+ "modify_time": "2013-03-17 13:36:01",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/AICoE/prometheus-data-science",
+ "star": 27,
+ "commits": 20,
+ "modify_time": "2018-10-08 12:45:13",
+ "last_release": "",
+ "lang": "Jupyter Notebook"
+ },
+ {
+ "link": "https://github.com/1lastBr3ath/S2O",
+ "star": 27,
+ "commits": 6,
+ "modify_time": "2019-02-13 20:20:15",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/osirislab/xnippet",
+ "star": 27,
+ "commits": 4,
+ "modify_time": "2014-04-06 16:30:30",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/imwally/coffeeconnect",
+ "star": 27,
+ "commits": 20,
+ "modify_time": "2019-09-15 03:36:21",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/TaroballzChen/shecodject",
+ "star": 27,
+ "commits": 21,
+ "modify_time": "2017-12-29 17:53:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/backdoorhub/shell-backdoor-list",
+ "star": 27,
+ "commits": 26,
+ "modify_time": "2019-11-26 04:57:58",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/tatsui-geek/malware-traffic-analysis.net",
+ "star": 27,
+ "commits": 1,
+ "modify_time": "2018-01-16 12:42:41",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/shmilylty/kalitools",
+ "star": 27,
+ "commits": 220,
+ "modify_time": "2017-10-30 10:57:37",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/bit4woo/burp-api-drops",
+ "star": 27,
+ "commits": 18,
+ "modify_time": "2019-07-14 08:23:24",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/zjlywjh001/phrackctf-team-docker",
+ "star": 27,
+ "commits": 7,
+ "modify_time": "2018-10-16 10:38:18",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/zhaolong/libparser",
+ "star": 27,
+ "commits": 3,
+ "modify_time": "2013-07-21 06:14:34",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/zerothoughts/jndipoc",
+ "star": 27,
+ "commits": 4,
+ "modify_time": "2016-01-22 20:32:10",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/zerosum0x0/zeroload",
+ "star": 27,
+ "commits": 38,
+ "modify_time": "2018-03-10 02:05:19",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/zerokilo/xexloaderwv",
+ "star": 27,
+ "commits": 11,
+ "modify_time": "2019-09-27 20:38:18",
+ "last_release": "9.1",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/zee-ahmed/kube-owasp-zap",
+ "star": 27,
+ "commits": 6,
+ "modify_time": "2019-07-15 21:59:04",
+ "last_release": "",
+ "lang": "Smarty"
+ },
+ {
+ "link": "https://github.com/yifanlu/cgen",
+ "star": 27,
+ "commits": 1968,
+ "modify_time": "2015-12-28 21:58:00",
+ "last_release": "\n binutils_latest_snapshot\n ",
+ "lang": "Scheme"
+ },
+ {
+ "link": "https://github.com/yehgdotnet/s3scanner",
+ "star": 27,
+ "commits": 80,
+ "modify_time": "2018-02-23 21:15:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/yara-rules/r2yara",
+ "star": 27,
+ "commits": 54,
+ "modify_time": "2017-09-06 15:58:50",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/yanlinlin82/plcscan",
+ "star": 27,
+ "commits": 8,
+ "modify_time": "2012-12-04 15:32:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/yahuiwong/docker-ss-tproxy",
+ "star": 27,
+ "commits": 28,
+ "modify_time": "2019-08-31 15:33:09",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/xajkep/xpt",
+ "star": 27,
+ "commits": 12,
+ "modify_time": "2019-03-15 16:25:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wuseman/wloader",
+ "star": 27,
+ "commits": 7,
+ "modify_time": "2018-12-22 01:15:07",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/williballenthin/python-evt",
+ "star": 27,
+ "commits": 7,
+ "modify_time": "2015-10-07 09:35:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/whizkydee/type-reverse",
+ "star": 27,
+ "commits": 32,
+ "modify_time": "2018-09-28 21:35:03",
+ "last_release": "2.0.2",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/webstersprodigy/webstersprodigy",
+ "star": 27,
+ "commits": 43,
+ "modify_time": "2014-12-16 17:53:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/w4kfu/ida_loader",
+ "star": 27,
+ "commits": 43,
+ "modify_time": "2017-02-21 16:56:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vusec/typesan",
+ "star": 27,
+ "commits": 7,
+ "modify_time": "2017-04-08 21:00:38",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/vngkv123/ctf",
+ "star": 27,
+ "commits": 190,
+ "modify_time": "2019-04-07 20:11:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vertextoedge/windowfunctiontracer",
+ "star": 27,
+ "commits": 12,
+ "modify_time": "2019-09-26 08:56:42",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/vergecurrency/electrum-xvg-tor",
+ "star": 27,
+ "commits": 63,
+ "modify_time": "2018-05-04 00:45:05",
+ "last_release": "2.4.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vah13/oraclecve",
+ "star": 27,
+ "commits": 12,
+ "modify_time": "2019-04-17 07:35:30",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/undeadsec/goblinwordgenerator",
+ "star": 27,
+ "commits": 20,
+ "modify_time": "2018-07-06 21:33:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/u35s/ag",
+ "star": 27,
+ "commits": 2,
+ "modify_time": "2018-01-02 10:31:23",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/toxic-ig/sql-xss",
+ "star": 27,
+ "commits": 8,
+ "modify_time": "2017-05-25 15:21:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/torque59/aws-vulnerable-lambda",
+ "star": 27,
+ "commits": 16,
+ "modify_time": "2017-10-09 09:19:45",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/tinysec/runwithdll",
+ "star": 27,
+ "commits": 10,
+ "modify_time": "2016-10-21 11:12:50",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/tildedennis/malware",
+ "star": 27,
+ "commits": 27,
+ "modify_time": "2018-08-16 15:11:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/threatstack/pigsty",
+ "star": 27,
+ "commits": 99,
+ "modify_time": "2015-08-22 18:41:38",
+ "last_release": "\n v0.1.8\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/thoppe/5baa61e4c9b93f3f0682250b6cf8331b7ee68fd8",
+ "star": 27,
+ "commits": 18,
+ "modify_time": "2017-04-13 19:41:28",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/thombashi/pingparsing",
+ "star": 27,
+ "commits": 523,
+ "modify_time": "2019-05-11 16:36:39",
+ "last_release": "\n v0.18.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/thesecondsun/pasm",
+ "star": 27,
+ "commits": 6,
+ "modify_time": "2018-08-06 14:58:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/thehive-project/synapse",
+ "star": 27,
+ "commits": 97,
+ "modify_time": "2019-02-13 06:03:21",
+ "last_release": "\n 1.1.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/telnet22/kn0ck",
+ "star": 27,
+ "commits": 26,
+ "modify_time": "2019-11-08 04:05:29",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/technion/ct_advisor",
+ "star": 27,
+ "commits": 67,
+ "modify_time": "2019-10-22 21:13:41",
+ "last_release": "",
+ "lang": "Erlang"
+ },
+ {
+ "link": "https://github.com/tanjiti/perl_tools",
+ "star": 27,
+ "commits": 52,
+ "modify_time": "2017-04-27 05:32:14",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/szysec/ctftest",
+ "star": 27,
+ "commits": 122,
+ "modify_time": "2019-11-04 06:38:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/systemli/ansible-role-hidden-service",
+ "star": 27,
+ "commits": 76,
+ "modify_time": "2018-12-04 22:38:45",
+ "last_release": "\n 1.1.1\n ",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/syslog777/psak",
+ "star": 27,
+ "commits": 37,
+ "modify_time": "2018-03-25 22:48:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sweetsoftware/artemis",
+ "star": 27,
+ "commits": 10,
+ "modify_time": "2018-08-17 12:49:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/swackhamer/vt_notification_puller",
+ "star": 27,
+ "commits": 18,
+ "modify_time": "2016-06-29 02:56:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/surajfale/passthrough-minifilter-driver",
+ "star": 27,
+ "commits": 8,
+ "modify_time": "2019-10-03 05:14:46",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/supersaiyansss/wechatspider",
+ "star": 27,
+ "commits": 10,
+ "modify_time": "2017-09-19 14:17:56",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/strazzere/emacs-smali",
+ "star": 27,
+ "commits": 50,
+ "modify_time": "2019-01-28 18:16:48",
+ "last_release": "",
+ "lang": "Smali"
+ },
+ {
+ "link": "https://github.com/stefansundin/ec2-metadata-filter",
+ "star": 27,
+ "commits": 25,
+ "modify_time": "2019-12-01 08:36:13",
+ "last_release": "v1.0.2-1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/stebbins/strigil",
+ "star": 27,
+ "commits": 12,
+ "modify_time": "2018-04-07 21:40:48",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/stayliv3/iotsec",
+ "star": 27,
+ "commits": 9,
+ "modify_time": "2016-11-24 05:39:59",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/spuerbread/kun",
+ "star": 27,
+ "commits": 27,
+ "modify_time": "2019-10-30 02:03:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/souhailhammou/kernelsymbolshelper",
+ "star": 27,
+ "commits": 20,
+ "modify_time": "2019-06-19 10:27:52",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/sophsec/wordlist",
+ "star": 27,
+ "commits": 222,
+ "modify_time": "2012-06-12 00:17:56",
+ "last_release": "\n v0.1.1\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/smeegesec/burp-importer",
+ "star": 27,
+ "commits": 7,
+ "modify_time": "2016-02-10 20:37:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/skx/pam_pwnd",
+ "star": 27,
+ "commits": 36,
+ "modify_time": "2019-08-25 07:33:31",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/shikarisenpai/leak-ntlm-hash-via-html",
+ "star": 27,
+ "commits": 15,
+ "modify_time": "2018-03-30 14:51:27",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/shengnoah/riff",
+ "star": 27,
+ "commits": 7,
+ "modify_time": "2017-09-25 06:29:25",
+ "last_release": "",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/shadowsocksr-rm/openwrt-shadowsocksr",
+ "star": 27,
+ "commits": 250,
+ "modify_time": "2017-07-05 05:35:06",
+ "last_release": "\n v3.0.6-f713aa98\n ",
+ "lang": "Makefile"
+ },
+ {
+ "link": "https://github.com/shack2/swebscan",
+ "star": 27,
+ "commits": 11,
+ "modify_time": "2019-09-24 17:19:34",
+ "last_release": "5.0.2018.08.21",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/sentinel-one/minhook",
+ "star": 27,
+ "commits": 297,
+ "modify_time": "2018-03-27 14:47:27",
+ "last_release": "\n v1.3.3\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/securelayer7/csv-injection-vulnerable-php-script-",
+ "star": 27,
+ "commits": 13,
+ "modify_time": "2017-06-19 08:07:16",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/schdub/protodec",
+ "star": 27,
+ "commits": 13,
+ "modify_time": "2019-12-02 18:38:04",
+ "last_release": "v0.6.3-win",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/salmg/audiospoof",
+ "star": 27,
+ "commits": 5,
+ "modify_time": "2017-01-07 06:24:17",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/robinyo/ionic-angular-schematics",
+ "star": 27,
+ "commits": 117,
+ "modify_time": "2018-09-03 22:25:05",
+ "last_release": "",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/rithvikvibhu/nh-magisk-wifi-firmware",
+ "star": 27,
+ "commits": 11,
+ "modify_time": "2019-06-09 14:24:55",
+ "last_release": "\n v2.0.3\n ",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/rh01/raspi-driving-car",
+ "star": 27,
+ "commits": 91,
+ "modify_time": "2018-12-04 09:16:06",
+ "last_release": "",
+ "lang": "Jupyter Notebook"
+ },
+ {
+ "link": "https://github.com/retarded-skid/skidsuite-3",
+ "star": 27,
+ "commits": 46,
+ "modify_time": "2019-12-07 14:53:52",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/regit/opensvp",
+ "star": 27,
+ "commits": 65,
+ "modify_time": "2017-02-20 20:47:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/re4lity/secpaper",
+ "star": 27,
+ "commits": 19,
+ "modify_time": "2017-11-23 11:16:02",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/rakshitshah94/wordpress-wp-vcd-malware-attack-solution",
+ "star": 27,
+ "commits": 20,
+ "modify_time": "2018-08-25 13:25:43",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/rabrg/refactored-client",
+ "star": 27,
+ "commits": 90,
+ "modify_time": "2018-07-11 19:05:37",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/raandree/managedpasswordfilter",
+ "star": 27,
+ "commits": 27,
+ "modify_time": "2019-03-12 20:50:33",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/qingxp9/cve-2019-6203-poc",
+ "star": 27,
+ "commits": 11,
+ "modify_time": "2019-05-17 03:10:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/psiquelabs/dot2moon",
+ "star": 27,
+ "commits": 44,
+ "modify_time": "2018-07-13 17:27:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/progmboy/win32kext",
+ "star": 27,
+ "commits": 14,
+ "modify_time": "2019-10-14 02:34:10",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/powershell/dscconfigurations",
+ "star": 27,
+ "commits": 14,
+ "modify_time": "2017-04-19 21:36:18",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/portswigger/xss-validator",
+ "star": 27,
+ "commits": 94,
+ "modify_time": "2017-02-13 12:54:29",
+ "last_release": "\n 1.3.1\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/plaperdr/blink-docker",
+ "star": 27,
+ "commits": 126,
+ "modify_time": "2019-05-07 07:48:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/phreak87/espeensy-and-peensy-payload-generator-esp8266-teensy-3.5-",
+ "star": 27,
+ "commits": 20,
+ "modify_time": "2016-12-03 21:19:49",
+ "last_release": "",
+ "lang": "Visual Basic .NET"
+ },
+ {
+ "link": "https://github.com/paul-axe/ctf",
+ "star": 27,
+ "commits": 2,
+ "modify_time": "2019-07-07 11:07:45",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/owtf/owtf-docker",
+ "star": 27,
+ "commits": 89,
+ "modify_time": "2018-05-16 01:26:50",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/oracle/libdtrace-ctf",
+ "star": 27,
+ "commits": 435,
+ "modify_time": "2019-11-05 18:16:44",
+ "last_release": "\n 1.1.0\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/openbsm/bsmtrace",
+ "star": 27,
+ "commits": 63,
+ "modify_time": "2018-06-30 22:37:24",
+ "last_release": "\n v2.0.2\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/onelogicalmyth/invoke-gppcse",
+ "star": 27,
+ "commits": 16,
+ "modify_time": "2019-05-11 20:53:44",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/olsut/kinject-x64",
+ "star": 27,
+ "commits": 3,
+ "modify_time": "2015-04-10 18:26:49",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/okazakinagisa/vtbaseddebuggerwin7",
+ "star": 27,
+ "commits": 3,
+ "modify_time": "2018-01-28 17:12:47",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/nullhypothesis/sybilhunter",
+ "star": 27,
+ "commits": 72,
+ "modify_time": "2019-03-26 16:09:29",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/nullarray/amplispy",
+ "star": 27,
+ "commits": 21,
+ "modify_time": "2019-03-30 03:45:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nucypher/sputnik",
+ "star": 27,
+ "commits": 53,
+ "modify_time": "2018-09-15 19:15:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ninetysec/cknife",
+ "star": 27,
+ "commits": 140,
+ "modify_time": "2018-02-02 05:17:53",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/nihilus/ida-pro-swf",
+ "star": 27,
+ "commits": 4,
+ "modify_time": "2016-01-24 23:37:50",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/niexinming/safe_tool",
+ "star": 27,
+ "commits": 13,
+ "modify_time": "2017-11-27 16:38:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nicksanzotta/smbshakedown",
+ "star": 27,
+ "commits": 93,
+ "modify_time": "2017-03-11 23:06:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/netspi/jig",
+ "star": 27,
+ "commits": 3,
+ "modify_time": "2017-12-03 18:58:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/netdex/twinject",
+ "star": 27,
+ "commits": 213,
+ "modify_time": "2019-08-14 23:32:26",
+ "last_release": "1.3.1",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/nccgroup/jmxbf",
+ "star": 27,
+ "commits": 7,
+ "modify_time": "2017-02-01 14:24:06",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/nbshelton/bitdump",
+ "star": 27,
+ "commits": 34,
+ "modify_time": "2016-01-04 18:06:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/n4xh4ck5/v1d0m",
+ "star": 27,
+ "commits": 9,
+ "modify_time": "2019-08-04 13:00:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/n3uz/t-pot-autoinstall",
+ "star": 27,
+ "commits": null,
+ "modify_time": "2017-10-30 12:05:39",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/mzweilin/ipv6-attack-detector",
+ "star": 27,
+ "commits": 127,
+ "modify_time": "2017-04-12 03:59:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mrts/burp-suite-http-proxy-history-converter",
+ "star": 27,
+ "commits": 13,
+ "modify_time": "2018-03-13 11:44:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mortendahl/rust-paillier",
+ "star": 27,
+ "commits": 116,
+ "modify_time": "2018-11-29 12:41:19",
+ "last_release": "\n 0.2.0\n ",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/morphuslabs/distinct",
+ "star": 27,
+ "commits": 30,
+ "modify_time": "2017-10-19 14:28:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/moccajoghurt/memwars",
+ "star": 27,
+ "commits": 205,
+ "modify_time": "2018-10-07 14:05:03",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/misteriouser/nextkey",
+ "star": 27,
+ "commits": 5,
+ "modify_time": "2016-02-21 14:59:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/minecraftforge/fernflower",
+ "star": 27,
+ "commits": 468,
+ "modify_time": "2019-01-05 02:54:23",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/mimoo/timing_attack_ecdsa_tls",
+ "star": 27,
+ "commits": 73,
+ "modify_time": "2015-09-08 12:34:56",
+ "last_release": "",
+ "lang": "TeX"
+ },
+ {
+ "link": "https://github.com/milo2012/owadump",
+ "star": 27,
+ "commits": 9,
+ "modify_time": "2018-03-24 16:59:43",
+ "last_release": "0.3",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/microsoft/wafbench",
+ "star": 27,
+ "commits": 26,
+ "modify_time": "2019-11-27 09:17:53",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/mhaskar/xssradare",
+ "star": 27,
+ "commits": 18,
+ "modify_time": "2019-11-01 22:50:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mcolyer/ifuse",
+ "star": 27,
+ "commits": 89,
+ "modify_time": "2010-03-21 17:03:17",
+ "last_release": "\n 1.0.0\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/mcandre/stank",
+ "star": 27,
+ "commits": 87,
+ "modify_time": "2019-07-11 19:39:25",
+ "last_release": "v0.0.13",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/matteoserva/dirtycow-arm32",
+ "star": 27,
+ "commits": 23,
+ "modify_time": "2017-05-21 10:16:35",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/mahmudz/malware",
+ "star": 27,
+ "commits": 122,
+ "modify_time": "2017-06-29 20:06:40",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/magisterquis/dnsbotnet",
+ "star": 27,
+ "commits": 21,
+ "modify_time": "2019-08-01 21:33:20",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/m-r-j-o-h-n/swh-injector",
+ "star": 27,
+ "commits": 23,
+ "modify_time": "2019-06-06 06:31:09",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/luorui110120/idaplugins",
+ "star": 27,
+ "commits": 21,
+ "modify_time": "2016-02-29 10:47:44",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/lucdew/goransomware",
+ "star": 27,
+ "commits": 2,
+ "modify_time": "2015-03-15 13:51:45",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/lubyruffy/livemapdemo",
+ "star": 27,
+ "commits": 4,
+ "modify_time": "2014-12-23 10:27:24",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/lordnoteworthy/binary-auditing-solutions",
+ "star": 27,
+ "commits": 46,
+ "modify_time": "2019-04-23 11:55:57",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/loadenmb/tvasion",
+ "star": 27,
+ "commits": 15,
+ "modify_time": "2019-09-24 10:42:29",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/lianglixin/remotecontrol-x3",
+ "star": 27,
+ "commits": 17,
+ "modify_time": "2019-08-18 10:11:04",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/lcxl/lcxl-shadow",
+ "star": 27,
+ "commits": 7,
+ "modify_time": "2015-11-04 11:55:38",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/koto/squid-imposter",
+ "star": 27,
+ "commits": 4,
+ "modify_time": "2012-01-28 16:27:07",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/kostapc/putty-tunnel-manager",
+ "star": 27,
+ "commits": 36,
+ "modify_time": "2019-01-17 15:33:18",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/kensodev/micro-auth-proxy",
+ "star": 27,
+ "commits": 23,
+ "modify_time": "2017-08-18 19:53:47",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/kcreyts/plugxdecoder",
+ "star": 27,
+ "commits": 21,
+ "modify_time": "2013-04-29 16:05:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/karaulov/warcraftiii_dll_126-127",
+ "star": 27,
+ "commits": 170,
+ "modify_time": "2019-04-17 07:59:03",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/kafuuchinoq/v2raygeokit",
+ "star": 27,
+ "commits": 10,
+ "modify_time": "2018-01-03 09:43:53",
+ "last_release": "v0.0.3",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/kacperszurek/pentest_teamcity",
+ "star": 27,
+ "commits": 6,
+ "modify_time": "2018-03-01 13:50:27",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/slyd0g/TimeStomper",
+ "star": 27,
+ "commits": 14,
+ "modify_time": "2019-05-25 19:33:40",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/jsimonetti/tlstun",
+ "star": 27,
+ "commits": 61,
+ "modify_time": "2017-10-26 12:10:32",
+ "last_release": "v1.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/josue87/airopy",
+ "star": 27,
+ "commits": 5,
+ "modify_time": "2019-08-28 13:10:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/johndoe31415/ratched",
+ "star": 27,
+ "commits": 90,
+ "modify_time": "2019-12-05 21:55:08",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jofpin/sack",
+ "star": 27,
+ "commits": 23,
+ "modify_time": "2016-11-15 08:01:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jnastarot/soul_eater",
+ "star": 27,
+ "commits": 6,
+ "modify_time": "2019-06-11 23:05:50",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/jgegeny/gootkit-xswkit-js",
+ "star": 27,
+ "commits": 2,
+ "modify_time": "2016-05-10 10:51:01",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/jenkinsci/remoting-kafka-plugin",
+ "star": 27,
+ "commits": 139,
+ "modify_time": "2019-12-06 18:30:08",
+ "last_release": "\n remoting-kafka-plugin-2.0.1\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/izsh/exploits",
+ "star": 27,
+ "commits": 4,
+ "modify_time": "2012-07-07 15:49:02",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ispras/qemu",
+ "star": 27,
+ "commits": 70890,
+ "modify_time": "2019-07-30 21:02:05",
+ "last_release": "v2.7.50-windbg",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/intelpt/winafl-intelpt",
+ "star": 27,
+ "commits": 183,
+ "modify_time": "2018-12-31 10:32:49",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/int0/ltmdm64_poc",
+ "star": 27,
+ "commits": 6,
+ "modify_time": "2017-05-23 05:06:46",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/hyrathon/pocs",
+ "star": 27,
+ "commits": 7,
+ "modify_time": "2019-08-26 02:48:38",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hxp2k6/smart7ec-scan-console",
+ "star": 27,
+ "commits": 32,
+ "modify_time": "2016-02-27 07:40:59",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hknutzen/netspoc",
+ "star": 27,
+ "commits": 3782,
+ "modify_time": "2019-12-03 15:56:46",
+ "last_release": "\n v6.006\n ",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/hexgolems/pint",
+ "star": 27,
+ "commits": 44,
+ "modify_time": "2013-11-06 17:52:19",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/heptiolabs/certstream-slack",
+ "star": 27,
+ "commits": null,
+ "modify_time": "2018-01-08 21:53:41",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/hardenedlinux/embedded-iot_profile",
+ "star": 27,
+ "commits": 66,
+ "modify_time": "2019-06-05 08:30:46",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/hans-strudle/coinjack",
+ "star": 27,
+ "commits": 25,
+ "modify_time": "2017-11-07 01:17:31",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/hannob/selftls",
+ "star": 27,
+ "commits": 11,
+ "modify_time": "2016-02-13 20:00:10",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hackeryunen/django-xss-platform",
+ "star": 27,
+ "commits": 9,
+ "modify_time": "2019-05-16 14:56:58",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/gwroblew/detectxsslib",
+ "star": 27,
+ "commits": 17,
+ "modify_time": "2013-06-30 06:25:53",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/gustavosotnas/avd-launcher",
+ "star": 27,
+ "commits": 117,
+ "modify_time": "2018-01-04 15:44:06",
+ "last_release": "v2.0.1",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/greysign/pysec",
+ "star": 27,
+ "commits": 1,
+ "modify_time": "2012-05-14 10:05:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/giantpune/mailboxbomb",
+ "star": 27,
+ "commits": 7,
+ "modify_time": "2019-01-10 22:10:06",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/gdataadvancedanalytics/r2graphity",
+ "star": 27,
+ "commits": 15,
+ "modify_time": "2016-12-11 19:52:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fsacer/nps_payload",
+ "star": 27,
+ "commits": 11,
+ "modify_time": "2018-06-10 16:31:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fouroctets/android-malware-samples",
+ "star": 27,
+ "commits": 4,
+ "modify_time": "2017-03-11 03:02:40",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/fluxchief/binaryninja_avr",
+ "star": 27,
+ "commits": 34,
+ "modify_time": "2019-07-10 17:31:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fitblip/pydbg",
+ "star": 27,
+ "commits": 2,
+ "modify_time": "2012-04-18 22:17:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fireeye/vocab_scraper",
+ "star": 27,
+ "commits": 5,
+ "modify_time": "2019-04-22 15:44:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fare9/androidswissknife",
+ "star": 27,
+ "commits": 72,
+ "modify_time": "2017-05-11 07:26:51",
+ "last_release": "v3.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/enovella/re-scripts",
+ "star": 27,
+ "commits": 20,
+ "modify_time": "2019-07-05 07:13:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/edoverflow/security-template",
+ "star": 27,
+ "commits": 50,
+ "modify_time": "2019-07-04 11:02:50",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/syst3ma/awesome_cisco_exploitation",
+ "star": 27,
+ "commits": 17,
+ "modify_time": "2017-10-07 11:10:40",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/dustyfresh/dictionaries",
+ "star": 27,
+ "commits": 6,
+ "modify_time": "2019-08-14 22:19:33",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/dukebarman/ghidra-builder",
+ "star": 27,
+ "commits": 10,
+ "modify_time": "2019-10-03 10:31:46",
+ "last_release": "",
+ "lang": "Dockerfile"
+ },
+ {
+ "link": "https://github.com/duk3luk3/onion-py",
+ "star": 27,
+ "commits": 54,
+ "modify_time": "2017-05-03 12:21:42",
+ "last_release": "\n v0.4.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dragonfive/opencv_tld",
+ "star": 27,
+ "commits": 12,
+ "modify_time": "2017-03-10 02:13:47",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/dockage/tor-privoxy",
+ "star": 27,
+ "commits": 12,
+ "modify_time": "2019-04-05 08:18:25",
+ "last_release": "",
+ "lang": "Dockerfile"
+ },
+ {
+ "link": "https://github.com/dkemp/vulndev",
+ "star": 27,
+ "commits": 8,
+ "modify_time": "2015-07-22 16:41:29",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/djteller/memoryanalysis",
+ "star": 27,
+ "commits": 2310,
+ "modify_time": "2014-08-04 22:42:34",
+ "last_release": "\n 1.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/divyanshusahu/minictf",
+ "star": 27,
+ "commits": 82,
+ "modify_time": "2019-06-18 18:21:52",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/devdavisnunez/vhbb",
+ "star": 27,
+ "commits": 311,
+ "modify_time": "2019-02-04 20:33:30",
+ "last_release": "0.831",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/dev-sec/ansible-apache-hardening",
+ "star": 27,
+ "commits": 17,
+ "modify_time": "2019-04-30 13:56:18",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/deroko/activationcontexthook",
+ "star": 27,
+ "commits": 1,
+ "modify_time": "2017-09-22 22:42:15",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/deralexxx/firemisp",
+ "star": 27,
+ "commits": 42,
+ "modify_time": "2017-06-11 17:51:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/daveti/usbfilter",
+ "star": 27,
+ "commits": 3,
+ "modify_time": "2018-05-06 00:30:01",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/danmcinerney/invoke-cats",
+ "star": 27,
+ "commits": 4,
+ "modify_time": "2018-10-23 21:05:42",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/danielmiessler/atm",
+ "star": 27,
+ "commits": 20,
+ "modify_time": "2016-08-04 15:20:01",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/dadido3/d3hex",
+ "star": 27,
+ "commits": 104,
+ "modify_time": "2017-03-21 12:12:25",
+ "last_release": "v.0.967",
+ "lang": "PureBasic"
+ },
+ {
+ "link": "https://github.com/d4vinci/clickjacking-tester",
+ "star": 27,
+ "commits": 11,
+ "modify_time": "2017-03-03 20:00:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ctubio/php-proxy-stratum",
+ "star": 27,
+ "commits": 56,
+ "modify_time": "2016-03-22 20:13:55",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/colagrosso/avviso",
+ "star": 27,
+ "commits": 20,
+ "modify_time": "2012-08-05 08:17:23",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/coky-t/owasp-mstg-ja",
+ "star": 27,
+ "commits": 1296,
+ "modify_time": "2019-11-21 13:55:02",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/coh7eiqu8thabu/slocker",
+ "star": 27,
+ "commits": 1,
+ "modify_time": "2017-07-22 20:05:34",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/cn33liz/hsevd-stackoverflow",
+ "star": 27,
+ "commits": 6,
+ "modify_time": "2017-01-09 22:04:48",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/chuckixia/mirai-source-code",
+ "star": 27,
+ "commits": 45,
+ "modify_time": "2017-05-01 19:14:02",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cheetz/icmpshock",
+ "star": 27,
+ "commits": 4,
+ "modify_time": "2015-07-13 02:43:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/checkmyhttps/checkmyhttps",
+ "star": 27,
+ "commits": 116,
+ "modify_time": "2019-12-01 21:56:32",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/chainsecurity/constantinople-reentrancy",
+ "star": 27,
+ "commits": 7,
+ "modify_time": "2019-01-15 14:17:29",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/cainiaocome/xssgun",
+ "star": 27,
+ "commits": 4,
+ "modify_time": "2019-03-01 07:15:09",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/c0d3sh3lf/android_forensics",
+ "star": 27,
+ "commits": 5,
+ "modify_time": "2014-04-16 12:07:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bowlingtoolkit/discord-bots-hack-code",
+ "star": 27,
+ "commits": 42,
+ "modify_time": "2019-12-01 14:45:01",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/bollwarm/app-waf",
+ "star": 27,
+ "commits": 32,
+ "modify_time": "2018-07-10 02:42:51",
+ "last_release": "0.007",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/blackfan/web-inf-dict",
+ "star": 27,
+ "commits": 3,
+ "modify_time": "2018-03-23 09:36:59",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/bl4ckic3/modbus-fuzzer",
+ "star": 27,
+ "commits": 7,
+ "modify_time": "2014-05-04 18:35:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/biswa96/wslreverse",
+ "star": 27,
+ "commits": 47,
+ "modify_time": "2019-07-13 13:36:12",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/biezhi/goinx",
+ "star": 27,
+ "commits": 18,
+ "modify_time": "2017-11-08 06:09:24",
+ "last_release": "v0.0.2",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/bcdannyboy/research",
+ "star": 27,
+ "commits": 3,
+ "modify_time": "2018-12-14 13:04:10",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/badappsdevelopment/wifi-cracker",
+ "star": 27,
+ "commits": 35,
+ "modify_time": "2019-07-16 07:33:50",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/b-mueller/sabre",
+ "star": 27,
+ "commits": 325,
+ "modify_time": "2019-10-22 09:50:07",
+ "last_release": "v0.9.2",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/auth0/passport-wsfed-saml2",
+ "star": 27,
+ "commits": 42,
+ "modify_time": "2019-06-14 10:54:00",
+ "last_release": "v4.0.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/atom0s/ceautoasm-x64dbg",
+ "star": 27,
+ "commits": 6,
+ "modify_time": "2017-10-05 01:40:45",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/antville/antville",
+ "star": 27,
+ "commits": 4559,
+ "modify_time": "2019-05-23 08:39:48",
+ "last_release": "release-1.5",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/animeshshaw/chromeforensics",
+ "star": 27,
+ "commits": 63,
+ "modify_time": "2017-02-02 05:29:13",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/anarcheuz/android-pocs",
+ "star": 27,
+ "commits": 8,
+ "modify_time": "2016-05-05 09:00:33",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/anandtiwarics/datasploit",
+ "star": 27,
+ "commits": 253,
+ "modify_time": "2018-04-05 13:47:04",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/Digivill/All-in-One-WiFi-Cracker",
+ "star": 27,
+ "commits": 3,
+ "modify_time": "2017-07-07 19:04:12",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/alonemonkey/iosrebook-issues",
+ "star": 27,
+ "commits": 11,
+ "modify_time": "2018-07-31 15:24:53",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/alex9191/zerobank-ring0-bundle",
+ "star": 27,
+ "commits": null,
+ "modify_time": "2018-09-02 16:27:54",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/al45tair/ds_store",
+ "star": 27,
+ "commits": 34,
+ "modify_time": "2019-01-03 13:10:37",
+ "last_release": "\n v1.1.2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ajinabraham/xenotix-xbot",
+ "star": 27,
+ "commits": 5,
+ "modify_time": "2018-06-18 09:11:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ajinabraham/poc",
+ "star": 27,
+ "commits": 29,
+ "modify_time": "2018-12-09 06:07:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ahhh/goredshell",
+ "star": 27,
+ "commits": 33,
+ "modify_time": "2019-04-19 23:30:00",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/9b/pdfxray_lite",
+ "star": 27,
+ "commits": 4,
+ "modify_time": "2011-11-11 05:22:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/717021/pcmgr",
+ "star": 27,
+ "commits": 81,
+ "modify_time": "2019-08-17 14:39:41",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/3gstudent/com-object-hijacking",
+ "star": 27,
+ "commits": 3,
+ "modify_time": "2017-08-04 09:19:39",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/1ce0ear/dllloaderunpacker",
+ "star": 27,
+ "commits": 5,
+ "modify_time": "2018-05-27 21:06:50",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/0xicf/scadashutdowntool",
+ "star": 27,
+ "commits": 5,
+ "modify_time": "2015-11-29 04:52:05",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://bitbucket.org/daniel_plohmann/simplifire.idascope",
+ "star": 27,
+ "commits": null,
+ "modify_time": "2018-08-13 08:32:41.511000",
+ "last_release": "",
+ "lang": "python"
+ },
+ {
+ "link": "https://github.com/felipenoris/hyper-reverse-proxy",
+ "star": 26,
+ "commits": 17,
+ "modify_time": "2019-03-11 17:12:28",
+ "last_release": "v0.4.0",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/brucedone/darknet_demo",
+ "star": 26,
+ "commits": 3,
+ "modify_time": "2018-12-11 09:10:24",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/itsjohnye/lead-ios",
+ "star": 26,
+ "commits": 23,
+ "modify_time": "2019-08-16 17:45:29",
+ "last_release": "",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/cw1997/mysql-monitor",
+ "star": 26,
+ "commits": 3,
+ "modify_time": "2016-10-25 09:04:30",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/martin-ger/esp_peap_psk",
+ "star": 26,
+ "commits": 8,
+ "modify_time": "2018-12-11 18:14:28",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ufrisk/shellcode64",
+ "star": 26,
+ "commits": 2,
+ "modify_time": "2016-05-05 08:44:53",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/chokepoint/crunchpwn",
+ "star": 26,
+ "commits": 81,
+ "modify_time": "2014-02-16 00:50:48",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/snail007/goproxy-android",
+ "star": 26,
+ "commits": 11,
+ "modify_time": "2019-11-22 07:20:09",
+ "last_release": "v1.2",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/calebfenton/resequencer",
+ "star": 26,
+ "commits": 37,
+ "modify_time": "2017-06-25 18:21:51",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/epsylon/orb",
+ "star": 26,
+ "commits": 9,
+ "modify_time": "2018-03-29 17:44:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/honeynet/checkpot",
+ "star": 26,
+ "commits": 8,
+ "modify_time": "2018-08-17 19:07:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/oros42/arp_poisoning_detector",
+ "star": 26,
+ "commits": 5,
+ "modify_time": "2015-04-23 10:52:59",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/corelan/certmon",
+ "star": 26,
+ "commits": 69,
+ "modify_time": "2018-10-10 19:35:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nabla-c0d3/ios-reversing",
+ "star": 26,
+ "commits": 2,
+ "modify_time": "2017-01-01 21:32:42",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/oracle/dtrace-utils",
+ "star": 26,
+ "commits": 1366,
+ "modify_time": "2019-10-22 20:01:03",
+ "last_release": "\n 1.2.1-1\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/juju/plugins",
+ "star": 26,
+ "commits": 132,
+ "modify_time": "2017-02-02 16:28:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/infobyte/distro_checker",
+ "star": 26,
+ "commits": 18,
+ "modify_time": "2015-09-23 04:43:00",
+ "last_release": "v1.0.1",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/snifer/gpt",
+ "star": 26,
+ "commits": 29,
+ "modify_time": "2015-11-29 02:27:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/neo23x0/ti-falsepositives",
+ "star": 26,
+ "commits": 10,
+ "modify_time": "2019-02-01 06:57:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ctfd/plugins",
+ "star": 26,
+ "commits": 31,
+ "modify_time": "2018-10-30 23:11:54",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/lamster2018/learnndk",
+ "star": 26,
+ "commits": 21,
+ "modify_time": "2018-03-12 08:45:32",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/ajitsing/apktojava",
+ "star": 26,
+ "commits": 32,
+ "modify_time": "2018-10-14 05:19:15",
+ "last_release": "1.3.1",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/krowinski/tinyid",
+ "star": 26,
+ "commits": 13,
+ "modify_time": "2019-10-09 14:52:51",
+ "last_release": "v1.1",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/tokenrove/niffy",
+ "star": 26,
+ "commits": 97,
+ "modify_time": "2017-10-04 13:59:36",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/k8gege/sshshell",
+ "star": 26,
+ "commits": 19,
+ "modify_time": "2019-07-05 11:35:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bonnetn/vba-obfuscator",
+ "star": 26,
+ "commits": 97,
+ "modify_time": "2019-05-28 09:49:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/thomasking2014/slides",
+ "star": 26,
+ "commits": 6,
+ "modify_time": "2019-12-07 13:21:37",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/static-flow/directoryimporter",
+ "star": 26,
+ "commits": 6,
+ "modify_time": "2019-06-13 15:19:02",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/cure53/publications",
+ "star": 26,
+ "commits": 7,
+ "modify_time": "2015-10-21 08:52:21",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/elevenpaths/pesto",
+ "star": 26,
+ "commits": 20,
+ "modify_time": "2019-07-22 12:45:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/restincode/restincode",
+ "star": 26,
+ "commits": 219,
+ "modify_time": "2019-10-15 00:10:29",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/stratosphereips/StratosphereWindowsIps",
+ "star": 26,
+ "commits": 140,
+ "modify_time": "2016-05-24 09:43:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/CDuPlooy/Rootkit",
+ "star": 26,
+ "commits": 45,
+ "modify_time": "2016-10-30 13:17:58",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/FSecureLABS/Athena",
+ "star": 26,
+ "commits": 24,
+ "modify_time": "2018-01-18 11:51:55",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/kernelm0de/RunPE-ProcessHollowing",
+ "star": 26,
+ "commits": 2,
+ "modify_time": "2017-11-04 17:19:07",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/itechub/sqlmap-wiki-zhcn",
+ "star": 26,
+ "commits": 275,
+ "modify_time": "2019-10-02 13:31:35",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/meliot/ryanair-seats",
+ "star": 26,
+ "commits": 6,
+ "modify_time": "2017-08-31 21:46:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/joesecurity/jbxapi",
+ "star": 26,
+ "commits": 119,
+ "modify_time": "2019-11-20 12:23:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/FSecureLABS/incognito",
+ "star": 26,
+ "commits": 3,
+ "modify_time": "2018-08-09 12:27:11",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/yolosec/upckeygen",
+ "star": 26,
+ "commits": 67,
+ "modify_time": "2016-07-02 23:41:32",
+ "last_release": "v0.7",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/xyntax/campus-fakeap",
+ "star": 26,
+ "commits": 11,
+ "modify_time": "2016-04-23 15:00:12",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/xljiulang/debugviewer",
+ "star": 26,
+ "commits": 9,
+ "modify_time": "2018-12-05 03:41:14",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/xiphosresearch/smsisher",
+ "star": 26,
+ "commits": 4,
+ "modify_time": "2017-07-19 13:45:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wybiral/shh",
+ "star": 26,
+ "commits": 44,
+ "modify_time": "2019-10-04 00:11:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wwkenwong/ctf-writeup",
+ "star": 26,
+ "commits": 400,
+ "modify_time": "2019-07-13 19:33:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wuseman/tg799vac-xtream-v16.2-jade",
+ "star": 26,
+ "commits": 101,
+ "modify_time": "2019-01-30 17:18:54",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/wuseman/sagemcom-fast-5370e-telia",
+ "star": 26,
+ "commits": 82,
+ "modify_time": "2019-11-05 10:21:21",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/vulnogram/vulnogram",
+ "star": 26,
+ "commits": 78,
+ "modify_time": "2019-10-31 23:15:17",
+ "last_release": "v0.0.6",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/visweswaran1998/cybergod-ksgmprh",
+ "star": 26,
+ "commits": 60,
+ "modify_time": "2019-07-15 15:34:08",
+ "last_release": "1.3",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/venables/node-where",
+ "star": 26,
+ "commits": 8,
+ "modify_time": "2017-05-24 20:13:25",
+ "last_release": "\n v1.1.0\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/v-p-b/windowsdefendertools",
+ "star": 26,
+ "commits": 5,
+ "modify_time": "2018-08-21 16:22:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/twilightgod/malwarebuster",
+ "star": 26,
+ "commits": 17,
+ "modify_time": "2015-06-04 07:01:59",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/trojan-gfw/trojan-docker",
+ "star": 26,
+ "commits": 19,
+ "modify_time": "2019-10-02 15:01:49",
+ "last_release": "",
+ "lang": "Dockerfile"
+ },
+ {
+ "link": "https://github.com/tjcsec/ctf-platform",
+ "star": 26,
+ "commits": 137,
+ "modify_time": "2016-05-28 22:55:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tiankonguse/themole",
+ "star": 26,
+ "commits": 234,
+ "modify_time": "2017-02-26 05:21:31",
+ "last_release": "\n v0.3\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/threatminer/ioc_parser",
+ "star": 26,
+ "commits": 63,
+ "modify_time": "2016-03-05 19:22:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/thehappydinoa/tp-link-defaults",
+ "star": 26,
+ "commits": 8,
+ "modify_time": "2019-04-03 03:18:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tamirzb/cve-2017-13253",
+ "star": 26,
+ "commits": 9,
+ "modify_time": "2018-03-15 13:10:31",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/t00sh/ctf",
+ "star": 26,
+ "commits": 45,
+ "modify_time": "2019-09-16 11:11:13",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/symphonycms/xssfilter",
+ "star": 26,
+ "commits": 30,
+ "modify_time": "2017-04-03 07:32:10",
+ "last_release": "\n 1.5.0\n ",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/strobejb/sslhook",
+ "star": 26,
+ "commits": 3,
+ "modify_time": "2014-07-08 08:35:02",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/strikerx3/whvpclient",
+ "star": 26,
+ "commits": 23,
+ "modify_time": "2018-06-09 21:58:36",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/strawp/random-scripts",
+ "star": 26,
+ "commits": 73,
+ "modify_time": "2019-11-28 17:26:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/starnightcyber/findsubdomains",
+ "star": 26,
+ "commits": 49,
+ "modify_time": "2019-10-29 02:07:44",
+ "last_release": "3.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/souhailhammou/panda-antivirus-lpe",
+ "star": 26,
+ "commits": 23,
+ "modify_time": "2019-05-22 11:01:11",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/soprasteria/cybersecurity-dfm",
+ "star": 26,
+ "commits": 613,
+ "modify_time": "2019-06-12 15:33:48",
+ "last_release": "\n v0.7\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/somerset-recon/blog",
+ "star": 26,
+ "commits": 10,
+ "modify_time": "2019-04-05 08:26:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sinfocol/vboxdie-cracker",
+ "star": 26,
+ "commits": 12,
+ "modify_time": "2015-10-06 03:56:44",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/shverni/raspberry-pi-vpn-gateway",
+ "star": 26,
+ "commits": 58,
+ "modify_time": "2019-03-16 06:18:09",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/sensu-plugins/sensu-plugins-network-checks",
+ "star": 26,
+ "commits": 203,
+ "modify_time": "2019-04-19 20:29:11",
+ "last_release": "4.0.0",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/seankaiser/automation-scripts",
+ "star": 26,
+ "commits": 14,
+ "modify_time": "2014-07-08 20:51:43",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/ryaninf/cve-2018-2893",
+ "star": 26,
+ "commits": 6,
+ "modify_time": "2018-07-19 06:12:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rwfpl/rewolf-pcausa-exploit",
+ "star": 26,
+ "commits": 3,
+ "modify_time": "2017-03-13 15:31:53",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/rofl0r/nat-tunnel",
+ "star": 26,
+ "commits": 7,
+ "modify_time": "2019-05-25 02:02:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/risksense-ops/metasploit-framework",
+ "star": 26,
+ "commits": 53833,
+ "modify_time": "2019-11-08 03:32:19",
+ "last_release": "\n 4.12.26\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/rischardv/riscv-alphanumeric-shellcoding",
+ "star": 26,
+ "commits": 1,
+ "modify_time": "2019-08-06 21:37:26",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/releasel0ck/nettracer",
+ "star": 26,
+ "commits": 2,
+ "modify_time": "2019-08-24 15:24:05",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/rek7/descrypt-cpu-collision-cracker",
+ "star": 26,
+ "commits": 33,
+ "modify_time": "2019-04-14 17:26:06",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/qiuyuzhou/shadowsocks-ios",
+ "star": 26,
+ "commits": 214,
+ "modify_time": "2016-05-30 05:37:04",
+ "last_release": "\n 2.6.3\n ",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/qazbnm456/docker-war",
+ "star": 26,
+ "commits": 82,
+ "modify_time": "2016-08-25 02:46:38",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/pushinginertia/ip-blacklist",
+ "star": 26,
+ "commits": 321,
+ "modify_time": "2019-07-21 21:28:47",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/psaneme/kung-fu-malware",
+ "star": 26,
+ "commits": 72,
+ "modify_time": "2018-09-03 10:10:27",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/probely/ctf-challenges",
+ "star": 26,
+ "commits": 52,
+ "modify_time": "2017-10-06 13:42:52",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/plutonium-dbg/plutonium-dbg",
+ "star": 26,
+ "commits": 42,
+ "modify_time": "2019-01-06 18:56:23",
+ "last_release": "\n 0.1.1\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/philarkwright/dga-detection",
+ "star": 26,
+ "commits": 78,
+ "modify_time": "2017-09-09 12:32:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/panjks/t-pot-autoinstall",
+ "star": 26,
+ "commits": 60,
+ "modify_time": "2018-08-01 03:01:55",
+ "last_release": "\n 3.0\n ",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/owasp/owaspbugbounty",
+ "star": 26,
+ "commits": 80,
+ "modify_time": "2016-09-29 20:03:15",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/osmode/ddash",
+ "star": 26,
+ "commits": 202,
+ "modify_time": "2018-11-13 19:04:11",
+ "last_release": "v0.4-alpha",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/open-nsm/dockoo",
+ "star": 26,
+ "commits": 19,
+ "modify_time": "2016-03-03 07:27:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/onrik/django-webshell",
+ "star": 26,
+ "commits": 58,
+ "modify_time": "2019-02-21 12:13:57",
+ "last_release": "v0.2.5",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/offlinej/ida-rpc",
+ "star": 26,
+ "commits": 1,
+ "modify_time": "2019-04-26 12:22:56",
+ "last_release": "1.1",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/nowsecure/frida-uikit",
+ "star": 26,
+ "commits": 41,
+ "modify_time": "2019-09-24 22:33:12",
+ "last_release": "\n v4.0.4\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/noob-hackers/kalimux",
+ "star": 26,
+ "commits": 14,
+ "modify_time": "2019-10-06 03:00:41",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/nixpulvis/oursh",
+ "star": 26,
+ "commits": 289,
+ "modify_time": "2019-10-14 05:23:45",
+ "last_release": "v0.3.0",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/neuroo/pinpy",
+ "star": 26,
+ "commits": 3,
+ "modify_time": "2013-03-13 05:35:55",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/murmus/ctf",
+ "star": 26,
+ "commits": 113,
+ "modify_time": "2018-05-05 17:58:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mpgn/cve-2019-9580",
+ "star": 26,
+ "commits": 4,
+ "modify_time": "2019-03-13 19:26:27",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/monosource/radare2-explorations-binaries",
+ "star": 26,
+ "commits": 4,
+ "modify_time": "2017-01-04 10:52:44",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/modernistik/nmap-parser",
+ "star": 26,
+ "commits": 70,
+ "modify_time": "2019-01-26 19:46:20",
+ "last_release": "1.37",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/mitre/attack-navigator",
+ "star": 26,
+ "commits": 243,
+ "modify_time": "2018-12-18 02:45:21",
+ "last_release": "\n v2.2\n ",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/misp/misp-vagrant",
+ "star": 26,
+ "commits": 62,
+ "modify_time": "2019-08-29 09:24:29",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/michmich/analogvoltmeterclock",
+ "star": 26,
+ "commits": 5,
+ "modify_time": "2019-02-21 09:05:01",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/mgeeky/visualbasicobfuscator",
+ "star": 26,
+ "commits": 63,
+ "modify_time": "2018-02-07 21:06:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mdsecactivebreach/lambda-webbugs",
+ "star": 26,
+ "commits": 2,
+ "modify_time": "2018-09-10 18:59:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/matonis/rippe",
+ "star": 26,
+ "commits": 28,
+ "modify_time": "2014-08-08 18:24:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/marcograss/rust-kernelcache-extractor",
+ "star": 26,
+ "commits": 11,
+ "modify_time": "2019-10-03 02:31:21",
+ "last_release": "",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/marcnewlin/mousejack-nes-controller",
+ "star": 26,
+ "commits": 8,
+ "modify_time": "2016-12-27 10:41:17",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/mandatoryprogrammer/xcname",
+ "star": 26,
+ "commits": 11,
+ "modify_time": "2016-06-30 03:12:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lucifer1993/awesome-hacking",
+ "star": 26,
+ "commits": 3,
+ "modify_time": "2017-04-07 06:23:41",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/locomotive-crypto/crypto_book_1st",
+ "star": 26,
+ "commits": 196,
+ "modify_time": "2019-10-04 09:46:44",
+ "last_release": "v1.1",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/lloricode/ci-capstone",
+ "star": 26,
+ "commits": 748,
+ "modify_time": "2017-08-01 10:40:02",
+ "last_release": "v1.1",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/lennyleng/radioeye",
+ "star": 26,
+ "commits": 2,
+ "modify_time": "2014-09-02 09:45:41",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/kacheo/kernelrootkit",
+ "star": 26,
+ "commits": 2,
+ "modify_time": "2014-03-30 19:52:27",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/joxeankoret/mynav",
+ "star": 26,
+ "commits": 9,
+ "modify_time": "2014-08-25 14:05:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/joshzelonis/attack-eval-scoring",
+ "star": 26,
+ "commits": 19,
+ "modify_time": "2019-10-16 15:00:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/joda32/got-responded",
+ "star": 26,
+ "commits": 6,
+ "modify_time": "2019-03-21 05:30:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jlospinoso/unfurl",
+ "star": 26,
+ "commits": 6,
+ "modify_time": "2018-02-08 23:37:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jingpu/pintools",
+ "star": 26,
+ "commits": 7,
+ "modify_time": "2013-04-01 18:13:30",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/jgamblin/hackapie",
+ "star": 26,
+ "commits": 7,
+ "modify_time": "2015-10-09 00:25:50",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/jgamblin/defensive-s3-buckets",
+ "star": 26,
+ "commits": 7,
+ "modify_time": "2018-01-18 15:14:30",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/jchrisfarris/aws-service-control-policies",
+ "star": 26,
+ "commits": 4,
+ "modify_time": "2018-02-24 19:05:33",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/ioactive/bluecrawl",
+ "star": 26,
+ "commits": 2,
+ "modify_time": "2018-11-12 23:36:29",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/initstring/pentest-tools",
+ "star": 26,
+ "commits": 154,
+ "modify_time": "2019-10-18 00:56:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ilyatk/hookengine",
+ "star": 26,
+ "commits": 15,
+ "modify_time": "2017-01-13 07:34:50",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ihack4falafel/slink",
+ "star": 26,
+ "commits": 43,
+ "modify_time": "2018-06-17 12:50:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hydrabus/rhme-2016",
+ "star": 26,
+ "commits": 85,
+ "modify_time": "2017-03-27 18:33:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hrishioa/nomohead",
+ "star": 26,
+ "commits": 2,
+ "modify_time": "2016-01-31 00:18:37",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/hrbrmstr/crafter",
+ "star": 26,
+ "commits": 24,
+ "modify_time": "2018-03-27 10:39:10",
+ "last_release": "",
+ "lang": "R"
+ },
+ {
+ "link": "https://github.com/hpsocket/restclient-cpp",
+ "star": 26,
+ "commits": 19,
+ "modify_time": "2017-04-11 13:07:22",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/hiddenillusion/ir",
+ "star": 26,
+ "commits": 40,
+ "modify_time": "2019-10-31 17:57:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hestat/minerchk",
+ "star": 26,
+ "commits": 149,
+ "modify_time": "2018-08-19 10:30:16",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/hakbot/hakbot-origin-controller",
+ "star": 26,
+ "commits": 445,
+ "modify_time": "2019-06-28 22:04:26",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/gyje/bios_rootkit",
+ "star": 26,
+ "commits": 2,
+ "modify_time": "2017-05-01 04:12:16",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/grocid/passdesktop",
+ "star": 26,
+ "commits": 9,
+ "modify_time": "2018-02-04 17:07:26",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/gregwar/mitm",
+ "star": 26,
+ "commits": 11,
+ "modify_time": "2015-10-20 09:19:23",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/gosecure/burp-ntlm-challenge-decoder",
+ "star": 26,
+ "commits": 34,
+ "modify_time": "2019-02-26 23:10:17",
+ "last_release": "",
+ "lang": "Kotlin"
+ },
+ {
+ "link": "https://github.com/gmacario/easy-jenkins",
+ "star": 26,
+ "commits": 573,
+ "modify_time": "2019-05-17 20:51:54",
+ "last_release": "\n last-plugin-txt\n ",
+ "lang": "Groovy"
+ },
+ {
+ "link": "https://github.com/githacktools/githacktools",
+ "star": 26,
+ "commits": 5,
+ "modify_time": "2019-06-27 14:42:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ghassani/mclf-ida-loader",
+ "star": 26,
+ "commits": 9,
+ "modify_time": "2019-09-17 03:39:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/frida/frida-clr",
+ "star": 26,
+ "commits": 37,
+ "modify_time": "2019-09-03 23:29:49",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/flyrabbit/winproject",
+ "star": 26,
+ "commits": 73,
+ "modify_time": "2018-11-02 08:27:02",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/fireeye/pycommands",
+ "star": 26,
+ "commits": 4,
+ "modify_time": "2014-06-21 01:35:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fengxuangit/pyshell",
+ "star": 26,
+ "commits": 9,
+ "modify_time": "2015-10-11 07:44:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/felipedaragon/catarinka",
+ "star": 26,
+ "commits": 154,
+ "modify_time": "2019-09-12 17:36:53",
+ "last_release": "",
+ "lang": "Pascal"
+ },
+ {
+ "link": "https://github.com/eternityx/deadcell-oshgui",
+ "star": 26,
+ "commits": 11,
+ "modify_time": "2019-03-16 07:37:57",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ericpskl/exportec2volumeimage",
+ "star": 26,
+ "commits": 8,
+ "modify_time": "2019-04-17 14:24:58",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/embedi/ble_norton_core",
+ "star": 26,
+ "commits": 5,
+ "modify_time": "2018-05-02 08:50:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/eligrey/libxdr",
+ "star": 26,
+ "commits": 28,
+ "modify_time": "2015-10-15 17:59:42",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/egebalci/ticketbleed",
+ "star": 26,
+ "commits": 37,
+ "modify_time": "2017-02-20 13:08:23",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/eclypsium/publications",
+ "star": 26,
+ "commits": 3,
+ "modify_time": "2018-08-16 01:03:16",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ebiquity/unified-cybersecurity-ontology",
+ "star": 26,
+ "commits": 22,
+ "modify_time": "2019-05-06 01:43:27",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/dinotools/pysslscan",
+ "star": 26,
+ "commits": 287,
+ "modify_time": "2016-02-11 19:51:01",
+ "last_release": "\n 0.5.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dfct/inssidious",
+ "star": 26,
+ "commits": 136,
+ "modify_time": "2015-11-19 19:14:31",
+ "last_release": "\n v0.2\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/devnetsandbox/sbx_multi_ios",
+ "star": 26,
+ "commits": 89,
+ "modify_time": "2019-07-24 22:36:07",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/dev-sec/chef-postgres-hardening",
+ "star": 26,
+ "commits": 88,
+ "modify_time": "2018-10-23 06:54:21",
+ "last_release": "\n v2.0.0\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/david942j/rbelftools",
+ "star": 26,
+ "commits": 101,
+ "modify_time": "2019-10-27 13:58:34",
+ "last_release": "v1.1.1",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/danmcinerney/smb-autopwn",
+ "star": 26,
+ "commits": 7,
+ "modify_time": "2018-03-02 00:40:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/danghvu/nginx-1.4.0",
+ "star": 26,
+ "commits": 16,
+ "modify_time": "2018-06-07 23:22:37",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cyberhatcoil/acf",
+ "star": 26,
+ "commits": 24,
+ "modify_time": "2015-12-15 14:45:26",
+ "last_release": "1.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cyanidee/snowflake",
+ "star": 26,
+ "commits": null,
+ "modify_time": "2018-07-06 19:19:58",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/cuitche/code-obfuscation",
+ "star": 26,
+ "commits": 67,
+ "modify_time": "2018-03-05 03:41:26",
+ "last_release": "1.0.0",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/crackpkcs12/crackpkcs12",
+ "star": 26,
+ "commits": 11,
+ "modify_time": "2018-03-10 20:12:08",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/cpl/cryptor",
+ "star": 26,
+ "commits": 470,
+ "modify_time": "2019-09-17 19:02:33",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/cpasjuste/scummvm",
+ "star": 26,
+ "commits": 86925,
+ "modify_time": "2018-09-18 21:13:45",
+ "last_release": "2.12-2",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/cocowalla/snifter",
+ "star": 26,
+ "commits": 11,
+ "modify_time": "2018-12-16 20:24:56",
+ "last_release": "1.2",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/cleveridge/cleveridge-subdomain-scanner",
+ "star": 26,
+ "commits": 42,
+ "modify_time": "2016-01-07 15:54:17",
+ "last_release": "V0.03.003",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/chrisjd20/power_dump",
+ "star": 26,
+ "commits": 20,
+ "modify_time": "2018-12-14 15:40:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/chaitin/sqlchop-http-proxy",
+ "star": 26,
+ "commits": 9,
+ "modify_time": "2015-11-13 08:00:57",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/byt3bl33d3r/dnschef",
+ "star": 26,
+ "commits": 19,
+ "modify_time": "2019-03-28 04:20:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/brute-f0rce/ceh",
+ "star": 26,
+ "commits": 49,
+ "modify_time": "2018-06-15 16:44:34",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/bozhu/rc4-python",
+ "star": 26,
+ "commits": 6,
+ "modify_time": "2012-07-17 18:45:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/boxproject/box-staff-manager",
+ "star": 26,
+ "commits": 21,
+ "modify_time": "2018-08-15 12:05:54",
+ "last_release": "v0.5.0",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/blackbagtech/sleuthkit-apfs",
+ "star": 26,
+ "commits": 6115,
+ "modify_time": "2019-10-27 16:03:02",
+ "last_release": "\n sleuthkit-4.6.4\n ",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/bkimminich/webappsec-nutshell",
+ "star": 26,
+ "commits": 68,
+ "modify_time": "2018-02-15 14:54:11",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/bipabo1l/ssrf_scan",
+ "star": 26,
+ "commits": 7,
+ "modify_time": "2017-09-06 14:37:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/benjojo/traceroute-haiku",
+ "star": 26,
+ "commits": 18,
+ "modify_time": "2017-09-07 10:49:07",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/bazad/ctl_ctloutput-leak",
+ "star": 26,
+ "commits": 6,
+ "modify_time": "2017-12-07 01:04:28",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/battelle/sinkhole",
+ "star": 26,
+ "commits": 5,
+ "modify_time": "2015-12-31 09:52:45",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/bastkerg/recomp",
+ "star": 26,
+ "commits": 2,
+ "modify_time": "2014-12-08 18:46:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/avalon1610/lpc",
+ "star": 26,
+ "commits": 17,
+ "modify_time": "2013-06-07 06:22:39",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/atktgs/blackhat2015arsenal",
+ "star": 26,
+ "commits": 4,
+ "modify_time": "2015-08-13 17:51:48",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/astocko/json-x86-64",
+ "star": 26,
+ "commits": 11,
+ "modify_time": "2016-06-15 12:17:10",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/arosspope/cipher-crypt",
+ "star": 26,
+ "commits": 68,
+ "modify_time": "2019-10-03 09:58:16",
+ "last_release": "",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/armfazh/rfc7748_precomputed",
+ "star": 26,
+ "commits": 76,
+ "modify_time": "2019-12-02 09:25:46",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/aniketp/network-programming",
+ "star": 26,
+ "commits": 12,
+ "modify_time": "2018-01-02 18:47:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/andykamath/nfl-data-hacking",
+ "star": 26,
+ "commits": 17,
+ "modify_time": "2017-08-25 04:02:37",
+ "last_release": "",
+ "lang": "Jupyter Notebook"
+ },
+ {
+ "link": "https://github.com/androidtamer/frida-push",
+ "star": 26,
+ "commits": 10,
+ "modify_time": "2018-01-18 09:29:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/andreafioraldi/angrdbg",
+ "star": 26,
+ "commits": 47,
+ "modify_time": "2019-06-28 15:43:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/an0ny420/ps4-4.0x--4.05-code-execution-poc",
+ "star": 26,
+ "commits": 23,
+ "modify_time": "2017-10-22 19:47:35",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/alpackers/ctf-writeups",
+ "star": 26,
+ "commits": 298,
+ "modify_time": "2017-03-02 13:21:51",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/alfarom/nmap",
+ "star": 26,
+ "commits": null,
+ "modify_time": "2015-03-30 11:55:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/alfa100001/-cve-2017-0785-blueborne-poc",
+ "star": 26,
+ "commits": 5,
+ "modify_time": "2017-09-22 22:23:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/alexhorn/defendjs",
+ "star": 26,
+ "commits": 2,
+ "modify_time": "2017-02-25 13:48:04",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/alanshaw-github/minimips",
+ "star": 26,
+ "commits": 18,
+ "modify_time": "2018-05-20 09:05:55",
+ "last_release": "v2.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/aircrack-ng/openwips-ng",
+ "star": 26,
+ "commits": 248,
+ "modify_time": "2018-11-27 17:26:28",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/adon90/ip2hosts",
+ "star": 26,
+ "commits": 36,
+ "modify_time": "2019-07-05 11:07:28",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/adnanhodzic/anon-hotspot",
+ "star": 26,
+ "commits": 47,
+ "modify_time": "2019-11-19 07:25:39",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/adanvillarreal/spydan",
+ "star": 26,
+ "commits": 15,
+ "modify_time": "2018-01-04 22:02:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/5h311-1nj3c706/local-root-exploits",
+ "star": 26,
+ "commits": 13,
+ "modify_time": "2018-01-22 06:55:04",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/3gstudent/hiddenntregistry",
+ "star": 26,
+ "commits": 6,
+ "modify_time": "2017-12-07 07:21:18",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/0xsobky/regaxor",
+ "star": 26,
+ "commits": 4,
+ "modify_time": "2018-03-13 00:01:59",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/0x4d31/hassh-utils",
+ "star": 26,
+ "commits": 10,
+ "modify_time": "2019-10-04 02:18:45",
+ "last_release": "",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/skifary/c4msis",
+ "star": 25,
+ "commits": 27,
+ "modify_time": "2018-09-06 18:26:20",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/eth-sri/ilf",
+ "star": 25,
+ "commits": 1,
+ "modify_time": "2019-11-28 16:21:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/stealth/pam_schroedinger",
+ "star": 25,
+ "commits": 11,
+ "modify_time": "2014-03-27 10:41:15",
+ "last_release": "\n pam_schroedinger-0.2s2\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/mozillasecurity/avalanche",
+ "star": 25,
+ "commits": 115,
+ "modify_time": "2019-06-27 18:11:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pirate/fish-functions",
+ "star": 25,
+ "commits": 77,
+ "modify_time": "2019-11-18 18:12:45",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/mozillasecurity/laniakea",
+ "star": 25,
+ "commits": 438,
+ "modify_time": "2019-08-23 16:44:41",
+ "last_release": "v1.17.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jgamblin/kali-virtualbox",
+ "star": 25,
+ "commits": 9,
+ "modify_time": "2019-09-03 20:11:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/intrigueio/intrigue-ident",
+ "star": 25,
+ "commits": 284,
+ "modify_time": "2019-12-08 06:46:51",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/fuzzysecurity/dotnettojscript-languagemodebreakout",
+ "star": 25,
+ "commits": 4,
+ "modify_time": "2018-09-29 06:14:26",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/wtsxdev/application-security",
+ "star": 25,
+ "commits": 4,
+ "modify_time": "2017-01-27 21:11:06",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/isecpartners/peachfarmer",
+ "star": 25,
+ "commits": 55,
+ "modify_time": "2014-04-02 20:29:57",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/cr4sh/simpleunpacker",
+ "star": 25,
+ "commits": 2,
+ "modify_time": "2011-10-27 15:03:22",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/hikariobfuscator/noctilucence",
+ "star": 25,
+ "commits": 13,
+ "modify_time": "2019-04-23 14:21:41",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/jpcertcc/strelok",
+ "star": 25,
+ "commits": 3,
+ "modify_time": "2017-11-09 04:34:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/649/crash-ios-exploit",
+ "star": 25,
+ "commits": 14,
+ "modify_time": "2018-11-13 22:25:58",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/averagesecurityguy/scapy",
+ "star": 25,
+ "commits": 8,
+ "modify_time": "2015-10-19 03:25:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/flatpak/flatpak.github.io",
+ "star": 25,
+ "commits": 788,
+ "modify_time": "2019-11-13 15:54:04",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/gdbinit/adium-ng-preview",
+ "star": 25,
+ "commits": 8,
+ "modify_time": "2017-03-29 21:21:11",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/pyauth/pywarp",
+ "star": 25,
+ "commits": 22,
+ "modify_time": "2019-06-23 16:42:19",
+ "last_release": "v0.0.4",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/influxdata/wirey",
+ "star": 25,
+ "commits": 37,
+ "modify_time": "2019-10-14 02:47:46",
+ "last_release": "v0.3.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/offensive-security/gcc-arm-linux-gnueabihf-4.7",
+ "star": 25,
+ "commits": 3,
+ "modify_time": "2019-04-24 17:32:33",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/kpwn/rapd2",
+ "star": 25,
+ "commits": 1,
+ "modify_time": "2016-09-13 00:23:45",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/fsecurelabs/android-keystore-audit",
+ "star": 25,
+ "commits": 9,
+ "modify_time": "2019-11-27 12:31:15",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/banzaicloud/dast-operator",
+ "star": 25,
+ "commits": 37,
+ "modify_time": "2019-10-03 20:05:29",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/offensive-security/kali-linux-docker-rolling",
+ "star": 25,
+ "commits": 8,
+ "modify_time": "2019-04-24 15:31:28",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/opensecurityresearch/custompassivescanner",
+ "star": 25,
+ "commits": 1,
+ "modify_time": "2014-03-26 20:21:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/starnightcyber/subdomains",
+ "star": 25,
+ "commits": 10,
+ "modify_time": "2019-10-26 04:51:21",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/zjyl1994/v2switcher",
+ "star": 25,
+ "commits": 10,
+ "modify_time": "2018-05-28 10:47:50",
+ "last_release": "1.0.1",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/modify24x7/ultimate-advanced-apktool",
+ "star": 25,
+ "commits": 16,
+ "modify_time": "2019-01-27 14:54:06",
+ "last_release": "v4.1",
+ "lang": "Visual Basic .NET"
+ },
+ {
+ "link": "https://github.com/kylekirkby/python-exploit-search-tool",
+ "star": 25,
+ "commits": 7,
+ "modify_time": "2014-05-06 13:46:00",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/thog/ghidra_falcon",
+ "star": 25,
+ "commits": 44,
+ "modify_time": "2019-03-24 05:33:26",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/archer884/harsh",
+ "star": 25,
+ "commits": 67,
+ "modify_time": "2019-02-05 21:14:15",
+ "last_release": "",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/vivek-ramachandran/wi-door",
+ "star": 25,
+ "commits": 3,
+ "modify_time": "2015-08-05 17:58:27",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/clockfort/wifi-locator",
+ "star": 25,
+ "commits": 16,
+ "modify_time": "2010-12-09 23:45:56",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/security-prince/Resources-for-Application-Security",
+ "star": 25,
+ "commits": 35,
+ "modify_time": "2019-12-10 05:03:54",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/lanmaster53/cef",
+ "star": 25,
+ "commits": 15,
+ "modify_time": "2019-09-07 02:28:20",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/3xpl017/linpwn",
+ "star": 25,
+ "commits": 83,
+ "modify_time": "2019-10-01 08:25:07",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/security-prince/resources-for-application-security",
+ "star": 25,
+ "commits": 35,
+ "modify_time": "2019-12-10 05:03:54",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/trojan-tutor/trojan-tutor.github.io",
+ "star": 25,
+ "commits": 46,
+ "modify_time": "2019-10-15 11:27:50",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/airbus-cert/pstrace",
+ "star": 25,
+ "commits": 6,
+ "modify_time": "2019-10-10 14:22:21",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/avicoder/Hackerone",
+ "star": 25,
+ "commits": 21,
+ "modify_time": "2018-10-31 15:19:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/monsterzer0/Cyber-Security-Guide",
+ "star": 25,
+ "commits": 24,
+ "modify_time": "2017-06-03 08:58:11",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/retbandit-zz/BlackHat2017",
+ "star": 25,
+ "commits": 14,
+ "modify_time": "2018-02-15 18:34:59",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/5ee/SocialEngineerDBuilder",
+ "star": 25,
+ "commits": 10,
+ "modify_time": "2014-11-07 14:59:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/blacknbunny/encdecshellcode",
+ "star": 25,
+ "commits": 17,
+ "modify_time": "2019-08-29 11:19:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/loveraven42/tools",
+ "star": 25,
+ "commits": 12,
+ "modify_time": "2017-08-12 12:03:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/whyallyn/paythepony",
+ "star": 25,
+ "commits": 2,
+ "modify_time": "2014-03-31 00:51:41",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/riswandans/litesploit",
+ "star": 25,
+ "commits": 213,
+ "modify_time": "2016-04-10 11:43:46",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/zyrikby/android_permission_evolution",
+ "star": 25,
+ "commits": 3,
+ "modify_time": "2017-03-13 10:48:29",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/zyantific/continuum",
+ "star": 25,
+ "commits": 29,
+ "modify_time": "2016-09-13 03:13:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zhengmin1989/droidanalytics",
+ "star": 25,
+ "commits": 5,
+ "modify_time": "2015-05-13 17:43:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/yannayl/ctf-writeups",
+ "star": 25,
+ "commits": 5,
+ "modify_time": "2019-11-25 06:00:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xme/emlrender",
+ "star": 25,
+ "commits": 10,
+ "modify_time": "2018-05-18 14:38:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xmcp/acfan",
+ "star": 25,
+ "commits": 27,
+ "modify_time": "2019-03-23 04:44:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xfkxfk/pyvulhunter",
+ "star": 25,
+ "commits": 49,
+ "modify_time": "2016-02-25 08:41:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xebia/mobilehacktools",
+ "star": 25,
+ "commits": 148,
+ "modify_time": "2019-10-14 18:55:59",
+ "last_release": "0.1.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wirelesscollege/securitytools",
+ "star": 25,
+ "commits": 46,
+ "modify_time": "2015-04-22 05:28:14",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/wiire-a/bully",
+ "star": 25,
+ "commits": 37,
+ "modify_time": "2017-10-14 19:22:35",
+ "last_release": "\n v1.0-22\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/whyalwaysmea/mobilesafe",
+ "star": 25,
+ "commits": 22,
+ "modify_time": "2016-07-08 07:14:33",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/waytai/cloudsafe",
+ "star": 25,
+ "commits": 94,
+ "modify_time": "2013-12-30 04:25:54",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/w00t3k/insp3ctor",
+ "star": 25,
+ "commits": 13,
+ "modify_time": "2017-11-11 22:13:59",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vix597/vulny",
+ "star": 25,
+ "commits": 15,
+ "modify_time": "2017-04-22 19:31:06",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/varshapaidi/kernel_rootkit",
+ "star": 25,
+ "commits": 10,
+ "modify_time": "2014-05-05 00:15:30",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/vankyver/burp-vulners-scanner",
+ "star": 25,
+ "commits": 16,
+ "modify_time": "2017-07-10 10:45:34",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/v-p-b/bigiron",
+ "star": 25,
+ "commits": 11,
+ "modify_time": "2015-12-14 09:12:37",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/unexpectedby/awesome-pentest-tools",
+ "star": 25,
+ "commits": 11,
+ "modify_time": "2017-03-28 11:35:43",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/underhandedcrypto/entries",
+ "star": 25,
+ "commits": 9,
+ "modify_time": "2019-06-05 04:52:01",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/trailofbits/objcgraphview",
+ "star": 25,
+ "commits": 40,
+ "modify_time": "2019-08-30 15:20:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/toxic-ig/pythonkeylogger",
+ "star": 25,
+ "commits": 8,
+ "modify_time": "2017-04-12 01:48:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tosanjay/bopfunctionrecognition",
+ "star": 25,
+ "commits": 1,
+ "modify_time": "2013-01-08 22:06:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tomsteele/shellsquid",
+ "star": 25,
+ "commits": 69,
+ "modify_time": "2015-12-16 19:45:10",
+ "last_release": "v2.2.0",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/tijme/reverse-engineering",
+ "star": 25,
+ "commits": 29,
+ "modify_time": "2017-10-29 12:53:59",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/threatresponse/mad-king",
+ "star": 25,
+ "commits": 9,
+ "modify_time": "2016-09-18 20:48:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/thoughtfuldev/psimage-delivery",
+ "star": 25,
+ "commits": 4,
+ "modify_time": "2018-01-04 19:36:43",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/thekingofduck/autosploit_chs",
+ "star": 25,
+ "commits": 6,
+ "modify_time": "2018-02-24 13:24:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/the404hacking/windows-python-rat",
+ "star": 25,
+ "commits": 53,
+ "modify_time": "2018-05-23 05:10:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/the404hacking/websploit",
+ "star": 25,
+ "commits": 10,
+ "modify_time": "2017-11-11 06:20:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/technikempire/citadelcore",
+ "star": 25,
+ "commits": 95,
+ "modify_time": "2019-01-01 10:38:23",
+ "last_release": "v4.2.5",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/techbliss/ida_pro_ultimate_qt_build_guide",
+ "star": 25,
+ "commits": 4,
+ "modify_time": "2018-12-13 10:57:44",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/tasdikrahman/thanos",
+ "star": 25,
+ "commits": 16,
+ "modify_time": "2017-11-15 20:01:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tarcisio-marinho/rsb-framework",
+ "star": 25,
+ "commits": 170,
+ "modify_time": "2019-06-08 03:45:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tampe125/mongodb-scraper",
+ "star": 25,
+ "commits": 42,
+ "modify_time": "2016-03-04 10:23:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sysprogs/openocd",
+ "star": 25,
+ "commits": 8347,
+ "modify_time": "2019-11-18 03:32:02",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/syreal17/cardinal",
+ "star": 25,
+ "commits": 161,
+ "modify_time": "2017-10-03 19:51:43",
+ "last_release": "",
+ "lang": "LLVM"
+ },
+ {
+ "link": "https://github.com/symbolsource/symbolsource",
+ "star": 25,
+ "commits": 12,
+ "modify_time": "2018-05-06 19:08:56",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/stefanesser/serialkdpproxy",
+ "star": 25,
+ "commits": 2,
+ "modify_time": "2011-10-06 06:17:01",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/spiderlabs/yara-ruby",
+ "star": 25,
+ "commits": 96,
+ "modify_time": "2011-08-26 17:54:11",
+ "last_release": "\n v1.6.0\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/soluto/containers-security-project",
+ "star": 25,
+ "commits": 7,
+ "modify_time": "2018-07-03 08:47:25",
+ "last_release": "",
+ "lang": "Gherkin"
+ },
+ {
+ "link": "https://github.com/smiegles/certs",
+ "star": 25,
+ "commits": 9,
+ "modify_time": "2018-06-14 11:29:36",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/sipcapture/homer-api",
+ "star": 25,
+ "commits": 653,
+ "modify_time": "2018-08-12 11:26:11",
+ "last_release": "5.0.6",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/simonschuang/rpi-hostapd",
+ "star": 25,
+ "commits": 4,
+ "modify_time": "2016-09-21 08:53:01",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/sim642/whatpulse",
+ "star": 25,
+ "commits": 86,
+ "modify_time": "2019-09-29 08:46:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/si9int/screenshooter",
+ "star": 25,
+ "commits": 17,
+ "modify_time": "2018-07-10 20:53:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/shaxzy/nixware-csgo",
+ "star": 25,
+ "commits": 19,
+ "modify_time": "2019-01-31 15:36:33",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/shawarkhanethicalhacker/brutexss-1",
+ "star": 25,
+ "commits": 54,
+ "modify_time": "2016-11-22 19:48:44",
+ "last_release": "\n v1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/shakenetwork/mimipenguin",
+ "star": 25,
+ "commits": 104,
+ "modify_time": "2017-05-18 22:27:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/shahril96/online-assembler-disassembler",
+ "star": 25,
+ "commits": 13,
+ "modify_time": "2019-10-07 05:12:36",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/shadowsocksr-rm/shadowsocksx-ng",
+ "star": 25,
+ "commits": 309,
+ "modify_time": "2017-07-19 14:02:06",
+ "last_release": "\n 1.4.2-R8-subscribe-alpha-3\n ",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/sghctoma/multipass",
+ "star": 25,
+ "commits": 5,
+ "modify_time": "2015-12-08 17:34:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sethsec/nodejs-ssrf-app",
+ "star": 25,
+ "commits": 10,
+ "modify_time": "2016-09-26 15:54:03",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/scanfsec/ihoneyportscan",
+ "star": 25,
+ "commits": 7,
+ "modify_time": "2018-04-21 14:48:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sc0tfree/netbyte",
+ "star": 25,
+ "commits": 8,
+ "modify_time": "2017-06-18 23:23:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sash-ko/kaggle-malware-classification",
+ "star": 25,
+ "commits": 3,
+ "modify_time": "2015-05-12 13:47:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sap/vulnerability-assessment-kb",
+ "star": 25,
+ "commits": 26,
+ "modify_time": "2019-07-30 15:46:00",
+ "last_release": "2019-05-10",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/s54mtb/loradunchy",
+ "star": 25,
+ "commits": 74,
+ "modify_time": "2018-09-30 22:11:39",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ryantenney/php7",
+ "star": 25,
+ "commits": 21,
+ "modify_time": "2010-06-01 06:21:40",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/rverton/xssmap",
+ "star": 25,
+ "commits": 1,
+ "modify_time": "2014-12-18 09:40:56",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/rummykhan/sql-nightmare",
+ "star": 25,
+ "commits": 3,
+ "modify_time": "2017-03-18 20:03:48",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/rsrdesarrollo/sasshimi",
+ "star": 25,
+ "commits": 18,
+ "modify_time": "2018-11-16 12:49:57",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/renorobert/virtualbox-nat-dhcp-bugs",
+ "star": 25,
+ "commits": 3,
+ "modify_time": "2018-12-04 08:57:00",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/remmina/et-electron",
+ "star": 25,
+ "commits": 59,
+ "modify_time": "2019-06-13 15:39:37",
+ "last_release": "2.0.2",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/rafaybaloch/sop-bypass-mini-test-suite",
+ "star": 25,
+ "commits": 15,
+ "modify_time": "2019-07-12 08:20:12",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/quangnh89/dbgsymgrabber",
+ "star": 25,
+ "commits": 5,
+ "modify_time": "2019-09-04 14:41:20",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/qabin/kb-proxy",
+ "star": 25,
+ "commits": 38,
+ "modify_time": "2019-08-24 02:43:04",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/purkylin/kingproxy",
+ "star": 25,
+ "commits": 50,
+ "modify_time": "2018-03-08 09:27:47",
+ "last_release": "",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/proxb/pinvoke",
+ "star": 25,
+ "commits": 9,
+ "modify_time": "2016-08-02 00:50:43",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/prezi/django-zipkin",
+ "star": 25,
+ "commits": 77,
+ "modify_time": "2018-02-13 14:13:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/portswigger/taborator",
+ "star": 25,
+ "commits": 33,
+ "modify_time": "2019-12-05 15:56:17",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/portswigger/sqli-py",
+ "star": 25,
+ "commits": 79,
+ "modify_time": "2019-11-07 13:40:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pokeolaf/pokemongodecoderforburp",
+ "star": 25,
+ "commits": 7,
+ "modify_time": "2016-08-04 12:25:55",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/peoples-cloud/pc",
+ "star": 25,
+ "commits": 27,
+ "modify_time": "2017-06-07 15:31:50",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/pentestbox/scripts",
+ "star": 25,
+ "commits": 109,
+ "modify_time": "2018-05-08 13:00:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/parsiya/go-security",
+ "star": 25,
+ "commits": 16,
+ "modify_time": "2018-12-23 03:12:03",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/paralax/burningdogs",
+ "star": 25,
+ "commits": 250,
+ "modify_time": "2019-12-08 14:46:57",
+ "last_release": "",
+ "lang": "F#"
+ },
+ {
+ "link": "https://github.com/packtpublishing/digital-forensics-with-kali-linux",
+ "star": 25,
+ "commits": 6,
+ "modify_time": "2018-01-15 09:53:35",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/owtf/ptp",
+ "star": 25,
+ "commits": 361,
+ "modify_time": "2017-08-13 08:46:25",
+ "last_release": "v0.4.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/optixal/oscp-pwk-notes-public",
+ "star": 25,
+ "commits": 2,
+ "modify_time": "2019-07-01 09:04:15",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/opsxcq/docker-metasploit",
+ "star": 25,
+ "commits": 193,
+ "modify_time": "2019-02-12 01:36:20",
+ "last_release": "",
+ "lang": "Dockerfile"
+ },
+ {
+ "link": "https://github.com/opennota/hydra",
+ "star": 25,
+ "commits": 14,
+ "modify_time": "2018-09-11 06:31:54",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/omg2hei/vulnerability-env",
+ "star": 25,
+ "commits": 9,
+ "modify_time": "2018-08-14 03:45:23",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/nviso-be/decompile-py2exe",
+ "star": 25,
+ "commits": 9,
+ "modify_time": "2018-07-09 19:27:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nvisium/httpillage",
+ "star": 25,
+ "commits": 133,
+ "modify_time": "2015-10-22 16:27:58",
+ "last_release": "v1.0.1-beta",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/numirias/firefed",
+ "star": 25,
+ "commits": 147,
+ "modify_time": "2018-08-17 17:21:14",
+ "last_release": "\n v0.1.13\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nukem9/idaskins",
+ "star": 25,
+ "commits": 42,
+ "modify_time": "2016-11-23 02:26:10",
+ "last_release": "1.4.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/npm/npm-packlist",
+ "star": 25,
+ "commits": 106,
+ "modify_time": "2019-12-09 23:55:46",
+ "last_release": "\n v2.0.2\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/noobiedog/dir-xcan",
+ "star": 25,
+ "commits": 16,
+ "modify_time": "2014-12-18 14:11:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nixwizard/kube-alien",
+ "star": 25,
+ "commits": 3,
+ "modify_time": "2019-04-19 20:52:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nixos/security",
+ "star": 25,
+ "commits": 79,
+ "modify_time": "2017-03-15 23:18:01",
+ "last_release": "",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/nairuzabulhul/keyplexer",
+ "star": 25,
+ "commits": 28,
+ "modify_time": "2017-04-29 02:35:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mx-futhark/hook-any-text",
+ "star": 25,
+ "commits": 51,
+ "modify_time": "2019-07-21 10:32:01",
+ "last_release": "\n v1.0.0\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/mrfearless/apisearch-plugin-x86",
+ "star": 25,
+ "commits": 16,
+ "modify_time": "2018-07-17 15:43:25",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/moonagirl/ctf",
+ "star": 25,
+ "commits": 30,
+ "modify_time": "2018-07-04 08:11:49",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/moloch--/exploit-demos",
+ "star": 25,
+ "commits": 10,
+ "modify_time": "2016-09-14 21:01:42",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/mk-fg/dracut-crypt-sshd",
+ "star": 25,
+ "commits": 29,
+ "modify_time": "2016-02-28 21:37:56",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/mintty/wsltty.appx",
+ "star": 25,
+ "commits": 33,
+ "modify_time": "2019-05-28 06:50:49",
+ "last_release": "",
+ "lang": "Makefile"
+ },
+ {
+ "link": "https://github.com/milo2012/social-engineering-toys",
+ "star": 25,
+ "commits": 27,
+ "modify_time": "2016-02-01 15:21:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mikaelkall/massrecon",
+ "star": 25,
+ "commits": 83,
+ "modify_time": "2019-08-30 13:05:08",
+ "last_release": "\n 1.0.3\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/michaeldim02/hvazard",
+ "star": 25,
+ "commits": 26,
+ "modify_time": "2019-07-29 17:16:49",
+ "last_release": "v0.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/meitar/awesome-pentest",
+ "star": 25,
+ "commits": 676,
+ "modify_time": "2019-11-26 19:45:32",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/marshyski/sshwatch",
+ "star": 25,
+ "commits": 11,
+ "modify_time": "2013-07-21 23:12:59",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/maddevsio/telegram_bbbot",
+ "star": 25,
+ "commits": 29,
+ "modify_time": "2017-01-03 04:05:53",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/luftek/limesdr-usb",
+ "star": 25,
+ "commits": 71,
+ "modify_time": "2018-01-07 21:42:16",
+ "last_release": "",
+ "lang": "ANTLR"
+ },
+ {
+ "link": "https://github.com/leviathan36/wifibang",
+ "star": 25,
+ "commits": 38,
+ "modify_time": "2019-09-16 12:42:17",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/letheanmovement/lethean-vpn",
+ "star": 25,
+ "commits": 318,
+ "modify_time": "2019-04-11 04:14:28",
+ "last_release": "v4.0.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/legbacore/t2e_integrity_check",
+ "star": 25,
+ "commits": 8,
+ "modify_time": "2015-08-07 14:08:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/0xDRRB/hackrf_ook",
+ "star": 25,
+ "commits": 29,
+ "modify_time": "2019-01-23 13:43:15",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/leetchicken/afl",
+ "star": 25,
+ "commits": 181,
+ "modify_time": "2016-08-05 08:01:05",
+ "last_release": "\n 2.26b\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/leechristensen/tgscrack",
+ "star": 25,
+ "commits": 6,
+ "modify_time": "2015-11-18 19:49:30",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/ktemkin-archive/Atmosphere",
+ "star": 25,
+ "commits": 250,
+ "modify_time": "2018-03-31 21:36:54",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/kriw/ropchain",
+ "star": 25,
+ "commits": 247,
+ "modify_time": "2018-07-21 03:58:34",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/kostrin/pillage",
+ "star": 25,
+ "commits": 7,
+ "modify_time": "2017-02-07 17:46:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kost/vulnscan-pwcrack",
+ "star": 25,
+ "commits": 22,
+ "modify_time": "2012-11-05 07:03:22",
+ "last_release": "\n 0.2-brute\n ",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/kisom/surfraw",
+ "star": 25,
+ "commits": 448,
+ "modify_time": "2015-09-14 03:42:43",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/kirlovon/devil-backdoor",
+ "star": 25,
+ "commits": 51,
+ "modify_time": "2019-11-27 18:07:41",
+ "last_release": "Update-2",
+ "lang": "AutoIt"
+ },
+ {
+ "link": "https://github.com/kingtuna/hybrid-darknet-concept",
+ "star": 25,
+ "commits": 76,
+ "modify_time": "2016-10-06 16:57:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kennbroorg/iky",
+ "star": 25,
+ "commits": 323,
+ "modify_time": "2019-11-06 15:00:20",
+ "last_release": "\n v2.2.0\n ",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/joric/arduino-bitcoin-miner",
+ "star": 25,
+ "commits": 69,
+ "modify_time": "2018-08-10 10:35:10",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/jeremyfetiveau/exploits",
+ "star": 25,
+ "commits": 10,
+ "modify_time": "2015-05-08 14:02:33",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/jenkinsci/aqua-microscanner-plugin",
+ "star": 25,
+ "commits": 58,
+ "modify_time": "2019-10-30 10:24:48",
+ "last_release": "\n aqua-microscanner-1.0.8\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/jeffreye/avaloniailspy",
+ "star": 25,
+ "commits": 68,
+ "modify_time": "2018-09-03 14:45:04",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/jacktang310/kerneldebugonnexus6p",
+ "star": 25,
+ "commits": 10,
+ "modify_time": "2017-01-12 02:46:45",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/j4r3tt/gerix-wifi-cracker-2",
+ "star": 25,
+ "commits": 10,
+ "modify_time": "2016-10-12 07:01:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/initroot/fransrecon",
+ "star": 25,
+ "commits": 15,
+ "modify_time": "2019-08-02 12:23:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/infosec-community/apac-meetups",
+ "star": 25,
+ "commits": 89,
+ "modify_time": "2019-10-22 11:28:31",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/infodox/web-exploitation-engine",
+ "star": 25,
+ "commits": 5,
+ "modify_time": "2013-03-18 00:35:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/imagemlt/ctf_web_dockers",
+ "star": 25,
+ "commits": 67,
+ "modify_time": "2018-04-01 10:32:32",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/honeynet/phoneyc",
+ "star": 25,
+ "commits": 197,
+ "modify_time": "2015-05-22 14:17:11",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/himei29a/gichidan",
+ "star": 25,
+ "commits": 72,
+ "modify_time": "2018-04-20 22:13:08",
+ "last_release": "1.1.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/herrcore/cmddesktopswitch",
+ "star": 25,
+ "commits": 8,
+ "modify_time": "2016-05-27 19:44:45",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/hdm/axman",
+ "star": 25,
+ "commits": 1,
+ "modify_time": "2011-11-04 04:41:28",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/hatriot/delayloadinject",
+ "star": 25,
+ "commits": 3,
+ "modify_time": "2017-09-20 16:57:16",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/hasherezade/petya_key",
+ "star": 25,
+ "commits": 43,
+ "modify_time": "2017-07-26 11:26:04",
+ "last_release": "0.2",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/hasherezade/flareon2019",
+ "star": 25,
+ "commits": 8,
+ "modify_time": "2019-10-11 11:58:40",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/harleo/knockknock",
+ "star": 25,
+ "commits": 24,
+ "modify_time": "2019-11-23 10:56:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hanj4096/wukong",
+ "star": 25,
+ "commits": 15,
+ "modify_time": "2016-04-06 16:29:29",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hackingenvivo/doxing",
+ "star": 25,
+ "commits": 26,
+ "modify_time": "2017-11-18 02:21:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hackedteam/vector-macos-root",
+ "star": 25,
+ "commits": 12,
+ "modify_time": "2011-11-22 09:59:14",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/guardicore/vmware_guest_auth_bypass",
+ "star": 25,
+ "commits": 5,
+ "modify_time": "2017-07-27 21:03:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/graniet/domff",
+ "star": 25,
+ "commits": null,
+ "modify_time": "2016-11-24 19:40:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gluk256/misc",
+ "star": 25,
+ "commits": 35,
+ "modify_time": "2018-07-17 06:14:35",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/glinares/cscguard",
+ "star": 25,
+ "commits": 8,
+ "modify_time": "2018-05-03 15:46:23",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/gitguardian/getting-started-with-the-individual-app",
+ "star": 25,
+ "commits": 2,
+ "modify_time": "2019-04-04 08:10:20",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ghostlulzhacks/waybackmachine",
+ "star": 25,
+ "commits": 6,
+ "modify_time": "2019-04-21 15:57:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ghorbanzadeh/owaat",
+ "star": 25,
+ "commits": 2,
+ "modify_time": "2014-10-26 11:59:38",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/ghacksuserjs/torzillaprint",
+ "star": 25,
+ "commits": 1182,
+ "modify_time": "2019-12-09 20:26:10",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/gdssecurity/cloud-and-control",
+ "star": 25,
+ "commits": 26,
+ "modify_time": "2011-11-21 21:31:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gdbinit/rex_versus_the_romans",
+ "star": 25,
+ "commits": 6,
+ "modify_time": "2014-09-25 21:35:12",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/fygrave/dnslyzer",
+ "star": 25,
+ "commits": 115,
+ "modify_time": "2014-10-07 00:05:44",
+ "last_release": "pre.0.0.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fupinglee/crackcaptcahlogin",
+ "star": 25,
+ "commits": null,
+ "modify_time": "2017-11-22 11:01:49",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/fruho/fruhoapp",
+ "star": 25,
+ "commits": 167,
+ "modify_time": "2018-07-30 10:09:05",
+ "last_release": "fruho-0.0.26",
+ "lang": "Tcl"
+ },
+ {
+ "link": "https://github.com/foryujian/ipintervalmerge",
+ "star": 25,
+ "commits": 12,
+ "modify_time": "2019-05-05 09:03:13",
+ "last_release": "",
+ "lang": "Visual Basic .NET"
+ },
+ {
+ "link": "https://github.com/forensicitguy/libpreloadvaccine",
+ "star": 25,
+ "commits": 12,
+ "modify_time": "2019-08-31 04:10:16",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/fi01/libput_user_exploit",
+ "star": 25,
+ "commits": 2,
+ "modify_time": "2013-11-18 09:08:19",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ffiirree/capturer",
+ "star": 25,
+ "commits": 51,
+ "modify_time": "2019-07-11 07:53:14",
+ "last_release": "\n 1.1.1\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/exp-db/toolpool",
+ "star": 25,
+ "commits": 2,
+ "modify_time": "2017-07-29 13:44:43",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ethanent/sloww",
+ "star": 25,
+ "commits": 6,
+ "modify_time": "2018-08-13 22:29:36",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/embedi/tcl_shellcode",
+ "star": 25,
+ "commits": 3,
+ "modify_time": "2017-09-21 20:31:16",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/elechantelepate/bip_hack",
+ "star": 25,
+ "commits": 1,
+ "modify_time": "2014-10-22 17:51:37",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/ele7enxxh/mtkfbexploit",
+ "star": 25,
+ "commits": 2,
+ "modify_time": "2015-07-30 13:32:12",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/eik00d/reverse_dns_shellcode",
+ "star": 25,
+ "commits": 24,
+ "modify_time": "2017-01-21 18:53:10",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/duocircle/office365-setup-dkim-dmarc-spf",
+ "star": 25,
+ "commits": 11,
+ "modify_time": "2019-07-22 17:27:14",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/dragoneeg/struts2-048",
+ "star": 25,
+ "commits": 14,
+ "modify_time": "2017-07-08 02:08:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/domob1812/namecore",
+ "star": 25,
+ "commits": 23470,
+ "modify_time": "2019-12-09 08:12:51",
+ "last_release": "\n nc0.19.0.1\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/dominictobias/detourxs",
+ "star": 25,
+ "commits": 1,
+ "modify_time": "2013-11-13 18:18:05",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/dg92/graphql-nodejs-modular-kit",
+ "star": 25,
+ "commits": 5,
+ "modify_time": "2018-02-01 18:22:41",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/defuse/yescrypt",
+ "star": 25,
+ "commits": 106,
+ "modify_time": "2019-01-16 23:26:05",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/deep-fingerprinting/df",
+ "star": 25,
+ "commits": 27,
+ "modify_time": "2019-02-09 19:09:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/danpage/scale",
+ "star": 25,
+ "commits": 14,
+ "modify_time": "2019-11-14 12:12:42",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/danmcinerney/nmap-parser",
+ "star": 25,
+ "commits": 1,
+ "modify_time": "2015-04-29 20:40:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/danielstjules/toragent",
+ "star": 25,
+ "commits": 20,
+ "modify_time": "2017-12-11 03:09:55",
+ "last_release": "0.1.1",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/cybellum/vulnerabilities",
+ "star": 25,
+ "commits": 3,
+ "modify_time": "2018-04-01 12:58:50",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/cube0x8/chrome_ragamuffin",
+ "star": 25,
+ "commits": 33,
+ "modify_time": "2019-11-05 19:03:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cryptographrix/hootoo_ht-tm05-hacking",
+ "star": 25,
+ "commits": 7,
+ "modify_time": "2015-03-29 19:47:16",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/coincheckup/crypto-supplies",
+ "star": 25,
+ "commits": 196,
+ "modify_time": "2018-11-20 19:22:44",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/codewatchorg/powersniper",
+ "star": 25,
+ "commits": 15,
+ "modify_time": "2019-08-05 21:06:16",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/chuan-yun/esmeralda",
+ "star": 25,
+ "commits": 164,
+ "modify_time": "2017-12-31 16:12:04",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/cert-polska/hsn2-bundle",
+ "star": 25,
+ "commits": 146,
+ "modify_time": "2016-05-04 09:26:44",
+ "last_release": "\n HSN2.1\n ",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/cbrunsch/wmbus-sniffer-muc",
+ "star": 25,
+ "commits": 17,
+ "modify_time": "2013-07-29 14:56:15",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/calebfenton/androidemulatordetect",
+ "star": 25,
+ "commits": 1,
+ "modify_time": "2017-01-07 16:33:25",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/bypupil/ctfhub",
+ "star": 25,
+ "commits": 19,
+ "modify_time": "2018-06-11 03:39:56",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/buseclab/paybreak",
+ "star": 25,
+ "commits": 7,
+ "modify_time": "2018-08-09 04:58:14",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/boegel/mica",
+ "star": 25,
+ "commits": 52,
+ "modify_time": "2019-10-20 17:33:41",
+ "last_release": "1.0.1",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/bnagy/francis",
+ "star": 25,
+ "commits": 23,
+ "modify_time": "2016-09-03 01:50:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bkerler/oregondecoder",
+ "star": 25,
+ "commits": 1,
+ "modify_time": "2015-01-02 21:12:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/binkybear/honeypi",
+ "star": 25,
+ "commits": 20,
+ "modify_time": "2015-07-06 07:13:39",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/bfosterjr/windowsrtdev",
+ "star": 25,
+ "commits": 49,
+ "modify_time": "2016-05-05 01:41:51",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/batteryshark/miasma",
+ "star": 25,
+ "commits": 13,
+ "modify_time": "2013-08-10 09:02:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/azuregreen/arktooldrv",
+ "star": 25,
+ "commits": 16,
+ "modify_time": "2017-05-11 12:16:32",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/avineshwar/slurp",
+ "star": 25,
+ "commits": 9,
+ "modify_time": "2017-12-03 19:35:10",
+ "last_release": "\n 1.0.1\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/averagesecurityguy/crack",
+ "star": 25,
+ "commits": 33,
+ "modify_time": "2015-01-20 00:42:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/auth0-blog/blog-passwordless-authentication",
+ "star": 25,
+ "commits": 7,
+ "modify_time": "2017-12-21 23:32:56",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/atiger77/xunfeng_docker",
+ "star": 25,
+ "commits": 7,
+ "modify_time": "2016-12-22 12:49:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/apriorit/custom-bootloader",
+ "star": 25,
+ "commits": 1,
+ "modify_time": "2017-10-09 12:31:36",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ansorren/gdpatrol",
+ "star": 25,
+ "commits": 11,
+ "modify_time": "2018-08-22 16:47:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/andrew-morris/presentations",
+ "star": 25,
+ "commits": 22,
+ "modify_time": "2017-09-01 21:48:51",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/andreafioraldi/r2angrdbg",
+ "star": 25,
+ "commits": 15,
+ "modify_time": "2019-06-11 07:40:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/amoghbl1/orfox",
+ "star": 25,
+ "commits": 102,
+ "modify_time": "2016-08-18 11:05:59",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/alpinelinux/alpine-secdb",
+ "star": 25,
+ "commits": 155,
+ "modify_time": "2019-11-13 10:40:58",
+ "last_release": "",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/alephsecurity/edlrooter",
+ "star": 25,
+ "commits": 5,
+ "modify_time": "2018-01-25 12:06:17",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/aheadley/logitech-solar-k750-linux",
+ "star": 25,
+ "commits": 4,
+ "modify_time": "2011-11-23 22:54:48",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/aead/hydrogen",
+ "star": 25,
+ "commits": 21,
+ "modify_time": "2017-03-22 12:48:25",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/absingh31/tor_spider",
+ "star": 25,
+ "commits": 12,
+ "modify_time": "2018-02-22 19:23:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/aadityapurani/nodejs-red-team-cheat-sheet",
+ "star": 25,
+ "commits": 8,
+ "modify_time": "2019-07-28 01:57:44",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/4b5f5f4b/pocs",
+ "star": 25,
+ "commits": 1,
+ "modify_time": "2016-06-23 09:36:37",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/1337g/cve-2017-17215",
+ "star": 25,
+ "commits": 12,
+ "modify_time": "2018-01-04 02:31:56",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/0x00string/oldays",
+ "star": 25,
+ "commits": 10,
+ "modify_time": "2019-06-03 18:29:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/0x00-0x00/cve-2018-1000001",
+ "star": 25,
+ "commits": 8,
+ "modify_time": "2018-02-09 22:34:55",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/zelon88/ransomware_defender",
+ "star": 24,
+ "commits": 15,
+ "modify_time": "2019-11-18 21:14:10",
+ "last_release": "",
+ "lang": "Visual Basic .NET"
+ },
+ {
+ "link": "https://github.com/monkeydioude/capybara",
+ "star": 24,
+ "commits": 16,
+ "modify_time": "2019-11-04 07:57:29",
+ "last_release": "\n v1.1.0\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/thehive-project/awesome",
+ "star": 24,
+ "commits": 13,
+ "modify_time": "2019-12-11 14:12:23",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/nytrorst/hookme",
+ "star": 24,
+ "commits": 3,
+ "modify_time": "2016-11-24 08:57:57",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/iaik/interruptjs",
+ "star": 24,
+ "commits": 5,
+ "modify_time": "2017-06-22 14:21:06",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/reswitched/hacversionlistbot",
+ "star": 24,
+ "commits": 3,
+ "modify_time": "2017-10-02 23:43:20",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/shack2/jvapp",
+ "star": 24,
+ "commits": 4,
+ "modify_time": "2018-10-25 09:14:01",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/sektioneins/aarch64_cryptoextension",
+ "star": 24,
+ "commits": 3,
+ "modify_time": "2016-11-26 08:13:31",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/david942j/honest",
+ "star": 24,
+ "commits": 18,
+ "modify_time": "2018-06-01 04:31:47",
+ "last_release": "v1.0.0",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/yck1509/dnexplorer",
+ "star": 24,
+ "commits": 76,
+ "modify_time": "2015-01-24 12:43:57",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/felixgr/pytaint",
+ "star": 24,
+ "commits": 14,
+ "modify_time": "2013-10-18 19:53:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/l3m0n/vulenv",
+ "star": 24,
+ "commits": 2,
+ "modify_time": "2019-08-12 08:14:22",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/rehints/bootkitsbook",
+ "star": 24,
+ "commits": 6,
+ "modify_time": "2017-01-18 02:15:14",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/stealthcopter/steganography",
+ "star": 24,
+ "commits": 3,
+ "modify_time": "2015-12-09 12:09:03",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/n0tr00t/n0js",
+ "star": 24,
+ "commits": 10,
+ "modify_time": "2018-11-01 02:53:32",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/z3apa3a/3scan",
+ "star": 24,
+ "commits": 5,
+ "modify_time": "2014-11-27 14:20:52",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/tasvideos/vba-rerecording",
+ "star": 24,
+ "commits": 397,
+ "modify_time": "2019-02-05 15:57:13",
+ "last_release": "480LRC4",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/userlandkernel/usbusted",
+ "star": 24,
+ "commits": 16,
+ "modify_time": "2019-11-13 23:43:47",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jenkstom/python-ddns",
+ "star": 24,
+ "commits": 9,
+ "modify_time": "2017-02-08 16:01:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/openindex/remotesupporttool",
+ "star": 24,
+ "commits": 196,
+ "modify_time": "2019-03-22 05:20:49",
+ "last_release": "v1.1.1",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/kismon/kismon",
+ "star": 24,
+ "commits": 389,
+ "modify_time": "2019-10-16 11:21:46",
+ "last_release": "\n 1.0.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/trailofbits/trailofphish",
+ "star": 24,
+ "commits": 47,
+ "modify_time": "2017-12-21 22:54:44",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/cypurr-collective/cypurr-prezes",
+ "star": 24,
+ "commits": 87,
+ "modify_time": "2019-11-14 20:17:46",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/abhinavprasad47/bugbounty-starter-notes",
+ "star": 24,
+ "commits": 22,
+ "modify_time": "2019-09-20 17:30:44",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/yaseralnajjar/IDA-MSDN-helper",
+ "star": 24,
+ "commits": 9,
+ "modify_time": "2016-09-05 13:00:34",
+ "last_release": "",
+ "lang": "AutoIt"
+ },
+ {
+ "link": "https://github.com/hatching/tracy",
+ "star": 24,
+ "commits": 619,
+ "modify_time": "2019-08-01 12:01:20",
+ "last_release": "\n tracy-0.08\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/vmcall/token_manipulation",
+ "star": 24,
+ "commits": 12,
+ "modify_time": "2017-11-03 09:38:38",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/zsshen/yadd",
+ "star": 24,
+ "commits": 36,
+ "modify_time": "2018-12-15 17:11:53",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/zhuhuibeishadiao/pathmodification",
+ "star": 24,
+ "commits": 2,
+ "modify_time": "2018-07-18 03:16:16",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/zecure/shadowd_python",
+ "star": 24,
+ "commits": 41,
+ "modify_time": "2016-01-11 13:22:28",
+ "last_release": "v2.0.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xyntax/slides",
+ "star": 24,
+ "commits": 4,
+ "modify_time": "2019-08-25 09:05:11",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/xxczaki/logger",
+ "star": 24,
+ "commits": 15,
+ "modify_time": "2018-01-16 21:02:33",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/xgfan/ss-relay",
+ "star": 24,
+ "commits": 15,
+ "modify_time": "2016-03-14 03:37:07",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/woza-lab/woza",
+ "star": 24,
+ "commits": 3,
+ "modify_time": "2019-03-18 17:00:28",
+ "last_release": "",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/woodspeed/pentest",
+ "star": 24,
+ "commits": 2,
+ "modify_time": "2017-03-15 16:12:08",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/wchill/defcon26_badgehacking",
+ "star": 24,
+ "commits": 20,
+ "modify_time": "2018-09-18 00:10:27",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/vector35/hackinggames",
+ "star": 24,
+ "commits": 26,
+ "modify_time": "2015-04-20 01:51:10",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/twilio/starter-ruby",
+ "star": 24,
+ "commits": 29,
+ "modify_time": "2019-08-04 13:59:27",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/tuuunya/exploit",
+ "star": 24,
+ "commits": 5,
+ "modify_time": "2018-07-27 10:44:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/topranks/ms17-010_subnet",
+ "star": 24,
+ "commits": 143,
+ "modify_time": "2017-05-18 17:42:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/thypon/androidfuzz",
+ "star": 24,
+ "commits": 1,
+ "modify_time": "2014-03-28 13:29:05",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/thoughtfuldev/supergirloncrypt",
+ "star": 24,
+ "commits": 66,
+ "modify_time": "2018-03-23 09:25:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/thom-s/shodan-cli",
+ "star": 24,
+ "commits": null,
+ "modify_time": "2018-12-27 17:29:59",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/thelsa/ecshop-getshell",
+ "star": 24,
+ "commits": 6,
+ "modify_time": "2018-09-06 16:20:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/thehairyj/scout",
+ "star": 24,
+ "commits": 16,
+ "modify_time": "2019-11-04 12:18:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/thegeekht/loki.rat",
+ "star": 24,
+ "commits": 48,
+ "modify_time": "2018-01-05 16:10:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/thecybermind/ipredir",
+ "star": 24,
+ "commits": 13,
+ "modify_time": "2015-12-28 09:40:15",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/tgalal/consonance",
+ "star": 24,
+ "commits": 54,
+ "modify_time": "2019-05-22 06:03:11",
+ "last_release": "\n 0.1.3\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/te-k/openssh-backdoor",
+ "star": 24,
+ "commits": 2,
+ "modify_time": "2016-07-22 12:52:35",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/talos-vulndev/advisories",
+ "star": 24,
+ "commits": 4,
+ "modify_time": "2016-04-08 20:02:01",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/sushant94/rune",
+ "star": 24,
+ "commits": 44,
+ "modify_time": "2017-08-29 16:35:13",
+ "last_release": "",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/superkojiman/dirtshell",
+ "star": 24,
+ "commits": 7,
+ "modify_time": "2017-01-01 05:40:27",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/subinacls/filibuster",
+ "star": 24,
+ "commits": 167,
+ "modify_time": "2017-07-18 09:17:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/styx00/apache-vulns",
+ "star": 24,
+ "commits": 31,
+ "modify_time": "2018-01-30 13:32:53",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/stooged/apptousb-50x",
+ "star": 24,
+ "commits": 10,
+ "modify_time": "2019-02-19 02:42:39",
+ "last_release": "v5",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/stephenlb/spoken",
+ "star": 24,
+ "commits": 51,
+ "modify_time": "2018-09-14 23:24:42",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/stainless-steel/md5",
+ "star": 24,
+ "commits": 97,
+ "modify_time": "2019-11-01 14:14:02",
+ "last_release": "",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/spiderlabs/deface",
+ "star": 24,
+ "commits": 1,
+ "modify_time": "2010-12-07 18:33:30",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/sonicrules11/barbossa",
+ "star": 24,
+ "commits": null,
+ "modify_time": "2019-01-22 10:24:35",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/skyzyx/bad-passwords",
+ "star": 24,
+ "commits": 9,
+ "modify_time": "2017-09-16 19:16:08",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/skeeto/pgp-poisoner",
+ "star": 24,
+ "commits": 1,
+ "modify_time": "2019-08-09 04:05:31",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/sizzop/hevd-exploits",
+ "star": 24,
+ "commits": 4,
+ "modify_time": "2017-01-08 18:46:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/silvermoonsecurity/sandboxevasion",
+ "star": 24,
+ "commits": 2,
+ "modify_time": "2017-07-05 03:06:40",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/silentsignal/activescan3plus",
+ "star": 24,
+ "commits": 23,
+ "modify_time": "2017-01-30 12:11:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/shrdlu68/cl-tls",
+ "star": 24,
+ "commits": 24,
+ "modify_time": "2019-07-03 09:39:15",
+ "last_release": "",
+ "lang": "Common Lisp"
+ },
+ {
+ "link": "https://github.com/shawnduong/pxenum",
+ "star": 24,
+ "commits": 19,
+ "modify_time": "2018-09-19 05:03:34",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/sensepost/dnserver",
+ "star": 24,
+ "commits": 12,
+ "modify_time": "2017-12-19 14:24:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/secwiki/ti",
+ "star": 24,
+ "commits": 15,
+ "modify_time": "2018-05-02 02:06:20",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/secmob/cve-2015-6612",
+ "star": 24,
+ "commits": 2,
+ "modify_time": "2015-11-16 07:45:26",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/secdec/pen-test-automation",
+ "star": 24,
+ "commits": 1,
+ "modify_time": "2018-01-17 18:25:44",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/seccon/seccon2016_online_ctf",
+ "star": 24,
+ "commits": 2,
+ "modify_time": "2017-02-07 04:44:18",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/sciencemanx/ctf-tools",
+ "star": 24,
+ "commits": 12,
+ "modify_time": "2016-10-30 20:15:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/scanfsec/cve-2018-15982",
+ "star": 24,
+ "commits": 8,
+ "modify_time": "2019-12-07 14:17:53",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/samdmarshall/ios-internals",
+ "star": 24,
+ "commits": 9,
+ "modify_time": "2014-06-23 20:50:57",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/rootm0s/casper",
+ "star": 24,
+ "commits": null,
+ "modify_time": "2018-07-12 13:58:20",
+ "last_release": "",
+ "lang": "python"
+ },
+ {
+ "link": "https://github.com/rootkitsmm/winio-vidix",
+ "star": 24,
+ "commits": 10,
+ "modify_time": "2015-08-30 13:44:49",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/root-gg/wsp",
+ "star": 24,
+ "commits": 15,
+ "modify_time": "2018-11-30 08:25:03",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/robinmonjo/ngx_http_l",
+ "star": 24,
+ "commits": 34,
+ "modify_time": "2016-09-12 11:32:04",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/ring04h/cia-hacking-tools",
+ "star": 24,
+ "commits": 25,
+ "modify_time": "2017-09-09 03:40:11",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/ricterz/simple-dns",
+ "star": 24,
+ "commits": 8,
+ "modify_time": "2015-04-21 13:13:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/retrogamer74/firmwarev5.05_mirahen_baseinjection",
+ "star": 24,
+ "commits": 19,
+ "modify_time": "2018-06-01 18:40:57",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/restran/hacker-scripts",
+ "star": 24,
+ "commits": 2,
+ "modify_time": "2017-01-24 08:49:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/redshiftzero/awesome-threat-modeling",
+ "star": 24,
+ "commits": 6,
+ "modify_time": "2019-06-30 14:43:08",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/rciworks/rci.tutorials.csgo.cheat.external",
+ "star": 24,
+ "commits": 54,
+ "modify_time": "2019-08-24 12:12:58",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/rapid7/vaccination",
+ "star": 24,
+ "commits": 31,
+ "modify_time": "2013-05-14 11:23:08",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/prsecurity/neutrino",
+ "star": 24,
+ "commits": null,
+ "modify_time": "2018-11-25 23:04:03",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/portswigger/burp-smart-buster",
+ "star": 24,
+ "commits": 49,
+ "modify_time": "2018-01-22 10:26:48",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/polycone/pe-loader",
+ "star": 24,
+ "commits": 2,
+ "modify_time": "2018-06-01 13:33:01",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/polarislab/s2-045",
+ "star": 24,
+ "commits": 2,
+ "modify_time": "2017-03-07 05:37:54",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/plenumlab/gql-helper",
+ "star": 24,
+ "commits": 11,
+ "modify_time": "2018-12-14 22:05:20",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/peterwilli/iota-ion.lib.js",
+ "star": 24,
+ "commits": 34,
+ "modify_time": "2018-08-02 13:06:56",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/pertsev/web3_utilz",
+ "star": 24,
+ "commits": 14,
+ "modify_time": "2019-11-03 17:56:17",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/p4u/stratum-relay",
+ "star": 24,
+ "commits": 26,
+ "modify_time": "2018-03-15 12:25:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/owasp/owasp-proxy",
+ "star": 24,
+ "commits": 341,
+ "modify_time": "2016-10-18 14:00:28",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/osandamalith/shellcodes",
+ "star": 24,
+ "commits": 34,
+ "modify_time": "2017-03-21 15:15:59",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/osandamalith/imageexploiter",
+ "star": 24,
+ "commits": 12,
+ "modify_time": "2015-08-23 12:35:32",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/opticfusion1/mcantimalware",
+ "star": 24,
+ "commits": 304,
+ "modify_time": "2019-12-08 20:48:21",
+ "last_release": "4.13",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/operatorequals/chmod-stego",
+ "star": 24,
+ "commits": 18,
+ "modify_time": "2017-09-13 09:22:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/opensise/cve_poc_collect",
+ "star": 24,
+ "commits": 4,
+ "modify_time": "2016-09-24 07:20:47",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/oniondecoy/installer",
+ "star": 24,
+ "commits": 2,
+ "modify_time": "2017-08-14 09:10:56",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/oasis-open/cti-stix-elevator",
+ "star": 24,
+ "commits": 604,
+ "modify_time": "2019-12-09 19:37:11",
+ "last_release": "v2.0.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/o-o-overflow/dc2019f-super-smash-ooos",
+ "star": 24,
+ "commits": 22,
+ "modify_time": "2019-08-19 15:22:05",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/o-o-overflow/chall-www",
+ "star": 24,
+ "commits": 26,
+ "modify_time": "2018-05-13 23:30:26",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/nullarray/shogun",
+ "star": 24,
+ "commits": 28,
+ "modify_time": "2018-06-19 18:39:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/noobiedog/peanuts",
+ "star": 24,
+ "commits": 17,
+ "modify_time": "2018-12-02 11:05:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nocomplexity/securityprivacyreferencearchitecture",
+ "star": 24,
+ "commits": 127,
+ "modify_time": "2019-11-19 20:10:59",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nixer1337/nixware-gmod",
+ "star": 24,
+ "commits": 21,
+ "modify_time": "2018-12-06 19:10:08",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/nityanandagohain/proxy_configuration",
+ "star": 24,
+ "commits": 13,
+ "modify_time": "2018-07-02 10:45:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nccgroup/blesuite-cli",
+ "star": 24,
+ "commits": 2,
+ "modify_time": "2016-08-01 16:58:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nccgroup/binja_dynamics",
+ "star": 24,
+ "commits": 80,
+ "modify_time": "2017-08-18 16:12:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mlesniak/port-scanner",
+ "star": 24,
+ "commits": 39,
+ "modify_time": "2018-02-27 16:19:50",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/misje/dhcpoptinj",
+ "star": 24,
+ "commits": 123,
+ "modify_time": "2019-08-06 14:16:00",
+ "last_release": "0.5.3",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/michael4338/ndis",
+ "star": 24,
+ "commits": 3,
+ "modify_time": "2014-07-21 08:02:34",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/miaouplop/gwt-3d",
+ "star": 24,
+ "commits": 29,
+ "modify_time": "2016-02-12 15:00:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mehqq/public_writeup",
+ "star": 24,
+ "commits": 10,
+ "modify_time": "2017-03-20 19:29:41",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/martindrab/vrtuletree",
+ "star": 24,
+ "commits": 9,
+ "modify_time": "2017-02-21 22:03:53",
+ "last_release": "",
+ "lang": "Pascal"
+ },
+ {
+ "link": "https://github.com/marcusbotacin/anti.analysis",
+ "star": 24,
+ "commits": 11,
+ "modify_time": "2017-09-16 15:48:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/magento-engcom/php-7.2-support",
+ "star": 24,
+ "commits": 65780,
+ "modify_time": "2018-04-14 00:30:07",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/m4rktn/jogan",
+ "star": 24,
+ "commits": 23,
+ "modify_time": "2018-09-30 15:22:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ltangjian/firewall",
+ "star": 24,
+ "commits": 2,
+ "modify_time": "2016-02-16 01:38:29",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/lt/php-cryptopals",
+ "star": 24,
+ "commits": 150,
+ "modify_time": "2016-06-01 19:37:24",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/long123king/grep",
+ "star": 24,
+ "commits": 4,
+ "modify_time": "2017-04-07 07:57:58",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/lolwaleet/bannergrab",
+ "star": 24,
+ "commits": 3,
+ "modify_time": "2016-10-28 11:24:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lockedbyte/ddos2track",
+ "star": 24,
+ "commits": 5,
+ "modify_time": "2019-10-29 18:40:38",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/lesmargoulins/margoulineur2000",
+ "star": 24,
+ "commits": 83,
+ "modify_time": "2018-12-30 16:33:22",
+ "last_release": "v3.0",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/knqyf263/cve-2019-6467",
+ "star": 24,
+ "commits": 2,
+ "modify_time": "2019-04-25 03:53:07",
+ "last_release": "",
+ "lang": "Dockerfile"
+ },
+ {
+ "link": "https://github.com/kinomakino/threat-intelligence-data",
+ "star": 24,
+ "commits": 39,
+ "modify_time": "2019-06-12 08:31:39",
+ "last_release": "",
+ "lang": "Zeek"
+ },
+ {
+ "link": "https://github.com/kennell/ftpknocker",
+ "star": 24,
+ "commits": 74,
+ "modify_time": "2019-01-16 13:26:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/keithjjones/malgazer",
+ "star": 24,
+ "commits": 922,
+ "modify_time": "2019-06-14 18:16:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/karblue/pppoe-hijack",
+ "star": 24,
+ "commits": 2,
+ "modify_time": "2016-02-27 09:26:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kaist-ina/sgx-tor",
+ "star": 24,
+ "commits": 27,
+ "modify_time": "2019-03-04 02:10:11",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ka0labs/ctf-writeups",
+ "star": 24,
+ "commits": 14,
+ "modify_time": "2019-10-06 10:39:51",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/k0keoyo/hevd-arbitrary-overwrite-exploit-win10-rs3",
+ "star": 24,
+ "commits": 4,
+ "modify_time": "2017-11-17 05:09:45",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/jsondeveloper/dante-gui",
+ "star": 24,
+ "commits": 10,
+ "modify_time": "2019-03-21 12:28:35",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/joychou93/trident",
+ "star": 24,
+ "commits": 41,
+ "modify_time": "2017-10-03 16:23:59",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/jonas-schievink/ghidraxbe",
+ "star": 24,
+ "commits": 4,
+ "modify_time": "2019-03-25 12:24:09",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/joelwking/phantom-cyber",
+ "star": 24,
+ "commits": 68,
+ "modify_time": "2019-08-27 19:50:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jmcph4/crackerjack",
+ "star": 24,
+ "commits": 16,
+ "modify_time": "2019-01-01 04:59:20",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jiangxianli/googlehosttool",
+ "star": 24,
+ "commits": 13,
+ "modify_time": "2018-06-25 08:21:37",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/jacksongl/npm-vuln-poc",
+ "star": 24,
+ "commits": 85,
+ "modify_time": "2018-03-10 05:03:10",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/izuzak/urlreq",
+ "star": 24,
+ "commits": 12,
+ "modify_time": "2013-07-11 14:35:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/invoke-ir/presentations",
+ "star": 24,
+ "commits": 5,
+ "modify_time": "2016-08-09 20:21:06",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/informationshallbefree/spiegel-plus-unlocker-firefox",
+ "star": 24,
+ "commits": 28,
+ "modify_time": "2016-12-12 18:16:58",
+ "last_release": "1.0.3",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/ictu/zap-baseline",
+ "star": 24,
+ "commits": 82,
+ "modify_time": "2019-10-10 12:41:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hannob/ctgrab",
+ "star": 24,
+ "commits": 4,
+ "modify_time": "2017-07-30 01:46:19",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/hacksysteam/shellcodeofdeath",
+ "star": 24,
+ "commits": 5,
+ "modify_time": "2013-08-31 08:44:09",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hackedteam/rcs-backdoor",
+ "star": 24,
+ "commits": 86,
+ "modify_time": "2014-05-06 08:49:43",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/gynvael/arcanesector",
+ "star": 24,
+ "commits": 4,
+ "modify_time": "2018-12-05 19:32:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/guilhermeferreira/spikepp",
+ "star": 24,
+ "commits": 5,
+ "modify_time": "2017-03-07 18:59:18",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/goliatone/arpscan",
+ "star": 24,
+ "commits": 78,
+ "modify_time": "2018-11-20 05:50:56",
+ "last_release": "\n v1.0.2\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/ghostofgoes/adles",
+ "star": 24,
+ "commits": 538,
+ "modify_time": "2019-09-05 02:44:25",
+ "last_release": "1.4.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/freedomofpress/fingerprint-securedrop",
+ "star": 24,
+ "commits": 460,
+ "modify_time": "2017-02-25 01:28:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/foundstone/expertinvestigationguides",
+ "star": 24,
+ "commits": 19,
+ "modify_time": "2017-09-26 15:05:55",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/foteinosmerg/pymerkle",
+ "star": 24,
+ "commits": 614,
+ "modify_time": "2019-11-21 23:01:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fortiguard-lion/anti-dll-hijacking",
+ "star": 24,
+ "commits": 15,
+ "modify_time": "2015-12-11 07:00:23",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/forensicmatt/pancakeviewer",
+ "star": 24,
+ "commits": 48,
+ "modify_time": "2016-09-05 05:32:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fluproject/flunym0us",
+ "star": 24,
+ "commits": 1,
+ "modify_time": "2017-01-15 15:49:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/felmoltor/keepnote_import_nmap",
+ "star": 24,
+ "commits": 33,
+ "modify_time": "2016-07-08 18:58:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fajartheggman/f-tools",
+ "star": 24,
+ "commits": 137,
+ "modify_time": "2019-12-07 09:09:14",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/exp-sky/hitcon-2015-spartan-0day-exploit",
+ "star": 24,
+ "commits": 7,
+ "modify_time": "2015-09-01 06:30:52",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/eviltik/evilwaf",
+ "star": 24,
+ "commits": 50,
+ "modify_time": "2015-11-29 11:09:09",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/evilmog/hashcat-hcstat",
+ "star": 24,
+ "commits": 2,
+ "modify_time": "2018-02-13 19:39:12",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/evild3ad/isodump",
+ "star": 24,
+ "commits": 29,
+ "modify_time": "2019-06-09 17:39:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ettic-team/endpointfinder",
+ "star": 24,
+ "commits": 56,
+ "modify_time": "2019-05-30 21:23:46",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/equalitie/banjax",
+ "star": 24,
+ "commits": 409,
+ "modify_time": "2019-11-29 18:21:46",
+ "last_release": "v2.0.0",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/epsylon3/odbgscript",
+ "star": 24,
+ "commits": 184,
+ "modify_time": "2013-09-18 13:17:59",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/enovella/exploitrainings",
+ "star": 24,
+ "commits": 91,
+ "modify_time": "2018-10-23 01:16:18",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/edix/malwareresourcescanner",
+ "star": 24,
+ "commits": 20,
+ "modify_time": "2014-06-22 18:25:07",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/dsnezhkov/octohook",
+ "star": 24,
+ "commits": 24,
+ "modify_time": "2017-07-23 22:12:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dkovar/ircollect",
+ "star": 24,
+ "commits": 13,
+ "modify_time": "2013-08-07 15:09:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dizcza/docker-hashcat",
+ "star": 24,
+ "commits": 18,
+ "modify_time": "2019-03-12 20:30:56",
+ "last_release": "",
+ "lang": "Dockerfile"
+ },
+ {
+ "link": "https://github.com/dev-liyang/lytableviewwidget",
+ "star": 24,
+ "commits": 9,
+ "modify_time": "2018-06-11 01:20:07",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/desword/pwn_execrise",
+ "star": 24,
+ "commits": 10,
+ "modify_time": "2019-10-31 03:17:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/deadbits/maz",
+ "star": 24,
+ "commits": 39,
+ "modify_time": "2017-02-16 02:57:45",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/cym13/vbs-reverse-shell",
+ "star": 24,
+ "commits": 4,
+ "modify_time": "2018-02-17 19:05:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cyberisltd/gzipbloat",
+ "star": 24,
+ "commits": 1,
+ "modify_time": "2013-07-19 09:53:54",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/countercept/dotnet-gargoyle",
+ "star": 24,
+ "commits": 2,
+ "modify_time": "2018-12-06 13:36:07",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/cosine0/amphitrite",
+ "star": 24,
+ "commits": 38,
+ "modify_time": "2018-10-24 08:14:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/continuumsecurity/ropeytasks",
+ "star": 24,
+ "commits": 30,
+ "modify_time": "2017-06-18 17:33:02",
+ "last_release": "",
+ "lang": "Groovy"
+ },
+ {
+ "link": "https://github.com/commonsguy/autofillfollies",
+ "star": 24,
+ "commits": 8,
+ "modify_time": "2017-09-27 13:48:47",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/codingo/retrieve-windows-wifi-passwords",
+ "star": 24,
+ "commits": 12,
+ "modify_time": "2017-09-25 23:27:38",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/cngutierr/ersatzpassword",
+ "star": 24,
+ "commits": 27,
+ "modify_time": "2016-01-16 23:37:00",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/citguru/jobby",
+ "star": 24,
+ "commits": 2,
+ "modify_time": "2018-09-17 06:32:05",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/chrysh/ctf_writeups",
+ "star": 24,
+ "commits": 9,
+ "modify_time": "2019-02-21 14:54:59",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/chrislee35/flowtag",
+ "star": 24,
+ "commits": 11,
+ "modify_time": "2013-06-05 13:30:00",
+ "last_release": "\n v2.1.3\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/chausner/1337patch",
+ "star": 24,
+ "commits": 2,
+ "modify_time": "2017-06-03 23:37:01",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/bwesterb/pol",
+ "star": 24,
+ "commits": 399,
+ "modify_time": "2018-09-29 18:56:37",
+ "last_release": "\n 0.4.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/burningcodes/dexconfuse",
+ "star": 24,
+ "commits": 4,
+ "modify_time": "2015-03-07 07:08:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bunseokbot/darklight",
+ "star": 24,
+ "commits": 72,
+ "modify_time": "2019-07-06 06:03:05",
+ "last_release": "1.0.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bunseokbot/androtools",
+ "star": 24,
+ "commits": 9,
+ "modify_time": "2016-09-26 03:50:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/brainsmoke/pub-archive",
+ "star": 24,
+ "commits": 9,
+ "modify_time": "2018-01-16 15:52:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/brainsmoke/minemu",
+ "star": 24,
+ "commits": 416,
+ "modify_time": "2014-02-01 15:12:20",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/bountymachine/about",
+ "star": 24,
+ "commits": 12,
+ "modify_time": "2018-11-17 20:54:43",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/bounteous/libenom",
+ "star": 24,
+ "commits": 31,
+ "modify_time": "2016-08-31 14:05:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/blitz/baresifter",
+ "star": 24,
+ "commits": 126,
+ "modify_time": "2019-02-09 22:07:02",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/blackfan/jpg_payload",
+ "star": 24,
+ "commits": 2,
+ "modify_time": "2018-03-23 16:37:34",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/bkerler/slides_and_papers",
+ "star": 24,
+ "commits": 3,
+ "modify_time": "2019-02-05 20:56:00",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/betalo-sweden/forwardingproxy",
+ "star": 24,
+ "commits": 32,
+ "modify_time": "2019-01-19 15:40:53",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/begriffs/utofu",
+ "star": 24,
+ "commits": 3,
+ "modify_time": "2019-03-17 07:48:33",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/aykutcevik/idn-safe",
+ "star": 24,
+ "commits": 28,
+ "modify_time": "2019-10-02 12:55:06",
+ "last_release": "1.5",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/avalon1610/alpc",
+ "star": 24,
+ "commits": 6,
+ "modify_time": "2017-05-02 00:35:43",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/auth0-blog/nextjs-got",
+ "star": 24,
+ "commits": 18,
+ "modify_time": "2017-12-21 23:34:32",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/aurore54f/jast",
+ "star": 24,
+ "commits": 159,
+ "modify_time": "2018-10-25 07:37:18",
+ "last_release": "\n v2.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/arkadiyt/ssrf_filter",
+ "star": 24,
+ "commits": 37,
+ "modify_time": "2019-10-22 07:57:58",
+ "last_release": "1.0.7",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/arizvisa/afl-cygwin",
+ "star": 24,
+ "commits": 17,
+ "modify_time": "2016-04-04 22:45:54",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/anwi-wips/anwi",
+ "star": 24,
+ "commits": 20,
+ "modify_time": "2019-04-29 06:22:56",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/anweiss/dockerclientdsc",
+ "star": 24,
+ "commits": null,
+ "modify_time": "2014-09-20 17:59:22",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/antswordproject/antsword-labs",
+ "star": 24,
+ "commits": 21,
+ "modify_time": "2019-11-11 07:31:16",
+ "last_release": "",
+ "lang": "Dockerfile"
+ },
+ {
+ "link": "https://github.com/anssi-fr/packetweaver",
+ "star": 24,
+ "commits": 85,
+ "modify_time": "2019-11-04 15:05:44",
+ "last_release": "\n v0.3\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/akdeniz/mitmsocks4j",
+ "star": 24,
+ "commits": 5,
+ "modify_time": "2013-02-14 20:41:36",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/aerospaceresearch/dgsn_bigwhoop",
+ "star": 24,
+ "commits": 114,
+ "modify_time": "2015-12-05 18:54:50",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/adrianyy/x64-syscall",
+ "star": 24,
+ "commits": 3,
+ "modify_time": "2018-06-23 19:28:57",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/admintony/sql-injection",
+ "star": 24,
+ "commits": 11,
+ "modify_time": "2018-05-08 16:50:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/abarisani/abarisani.github.io",
+ "star": 24,
+ "commits": 36,
+ "modify_time": "2019-11-11 10:33:29",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/a-maumau/vesta",
+ "star": 24,
+ "commits": 54,
+ "modify_time": "2019-04-01 08:52:40",
+ "last_release": "v1.0.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/0xkiewicz/pwk-oscp",
+ "star": 24,
+ "commits": 17,
+ "modify_time": "2018-12-07 18:10:00",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/0xbc/chiasm-shell",
+ "star": 24,
+ "commits": 33,
+ "modify_time": "2017-01-27 04:58:13",
+ "last_release": "\n 1.0.0a9\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/0verl0ad/dumb0",
+ "star": 24,
+ "commits": 21,
+ "modify_time": "2018-01-30 23:51:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/00xc/h2buster",
+ "star": 24,
+ "commits": 78,
+ "modify_time": "2019-12-05 13:59:03",
+ "last_release": "v0.4c",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jonnybanana/essential-usb-rubber-ducky-printable-cheat-sheet",
+ "star": 23,
+ "commits": 21,
+ "modify_time": "2018-03-26 22:55:50",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/amirrezanasiri/usb-keystroke-injector",
+ "star": 23,
+ "commits": 18,
+ "modify_time": "2019-06-01 12:54:35",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/thelinuxchoice/clipboardme",
+ "star": 23,
+ "commits": 12,
+ "modify_time": "2019-04-23 02:08:05",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/hikariobfuscator/core",
+ "star": 23,
+ "commits": 29,
+ "modify_time": "2019-04-28 22:27:21",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/hak5/signalowl-payloads",
+ "star": 23,
+ "commits": 13,
+ "modify_time": "2019-10-04 16:55:12",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/diafygi/privacy-checklist",
+ "star": 23,
+ "commits": 4,
+ "modify_time": "2016-02-20 21:02:25",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/nextronsystems/valhallaapi",
+ "star": 23,
+ "commits": 87,
+ "modify_time": "2019-06-13 11:25:44",
+ "last_release": "v0.2.5",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lockfale/dotnetavbypass-master",
+ "star": 23,
+ "commits": 14,
+ "modify_time": "2017-11-27 16:51:45",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/kjcracks/brake",
+ "star": 23,
+ "commits": 31,
+ "modify_time": "2014-02-04 01:29:40",
+ "last_release": "0.0.7",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/sensepost/suru",
+ "star": 23,
+ "commits": 1,
+ "modify_time": "2012-02-10 12:37:56",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/fsecurelabs/jasmin",
+ "star": 23,
+ "commits": 2,
+ "modify_time": "2013-07-25 15:03:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/owasp/honeypot-project",
+ "star": 23,
+ "commits": 69,
+ "modify_time": "2019-09-01 14:41:39",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/wi-fi-analyzer/boopsuite",
+ "star": 23,
+ "commits": 115,
+ "modify_time": "2017-08-13 01:59:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hack-with-github/security-bookmarks",
+ "star": 23,
+ "commits": 1,
+ "modify_time": "2016-11-20 06:44:15",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ekultek/checkers",
+ "star": 23,
+ "commits": 10,
+ "modify_time": "2018-09-13 22:06:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/warner/magic-wormhole-transit-relay",
+ "star": 23,
+ "commits": 72,
+ "modify_time": "2019-09-11 07:25:26",
+ "last_release": "\n 0.2.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ntkernel/cve-2019-0708",
+ "star": 23,
+ "commits": 2,
+ "modify_time": "2019-07-25 01:03:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nicehash/cpuminer-opt",
+ "star": 23,
+ "commits": 5,
+ "modify_time": "2016-09-21 08:53:35",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/d4vinci/reversehttp",
+ "star": 23,
+ "commits": 4,
+ "modify_time": "2016-08-24 17:22:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/airbus-seclab/rebus",
+ "star": 23,
+ "commits": 546,
+ "modify_time": "2018-06-12 12:33:15",
+ "last_release": "\n v0.4\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/angr/archr",
+ "star": 23,
+ "commits": 228,
+ "modify_time": "2019-11-22 07:20:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/andresriancho/django-moth",
+ "star": 23,
+ "commits": 217,
+ "modify_time": "2015-12-04 12:50:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/robertdavidgraham/iotpasswds",
+ "star": 23,
+ "commits": 4,
+ "modify_time": "2016-10-27 08:02:38",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/inconshreveable/shroud",
+ "star": 23,
+ "commits": 21,
+ "modify_time": "2014-04-08 12:17:26",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/andresriancho/mongo-objectid-predict",
+ "star": 23,
+ "commits": 5,
+ "modify_time": "2018-05-02 15:28:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hikariobfuscator/swift",
+ "star": 23,
+ "commits": 4,
+ "modify_time": "2018-06-20 17:46:10",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/uber-common/paranoid-request",
+ "star": 23,
+ "commits": 10,
+ "modify_time": "2016-08-23 09:13:56",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/greenwolf/eslint-security-scanner-configs",
+ "star": 23,
+ "commits": 29,
+ "modify_time": "2019-06-04 23:14:35",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/urbanadventurer/urlcrazy",
+ "star": 23,
+ "commits": 2,
+ "modify_time": "2017-09-26 21:47:06",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/tam7t/cautious-pancake",
+ "star": 23,
+ "commits": 53,
+ "modify_time": "2018-11-13 04:31:43",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/keenwon/koa-subdomain",
+ "star": 23,
+ "commits": 186,
+ "modify_time": "2019-12-01 07:10:23",
+ "last_release": "\n v3.0.0\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/hahwul/ras-fuzzer",
+ "star": 23,
+ "commits": 10,
+ "modify_time": "2019-10-31 16:33:49",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/josephpei/uv2ray",
+ "star": 23,
+ "commits": 31,
+ "modify_time": "2019-11-29 08:17:39",
+ "last_release": "v0.1.5",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/ptonewreckin/blindref",
+ "star": 23,
+ "commits": 7,
+ "modify_time": "2017-03-14 05:39:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/k8gege/phpstudydoor",
+ "star": 23,
+ "commits": 8,
+ "modify_time": "2019-09-26 04:01:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nexxado/wifipasswords",
+ "star": 23,
+ "commits": 237,
+ "modify_time": "2017-03-30 07:50:11",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/aixxe/cstrike-basehook-linux",
+ "star": 23,
+ "commits": 54,
+ "modify_time": "2017-03-14 19:13:53",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/andreas0607/coinhive-blocker",
+ "star": 23,
+ "commits": 59,
+ "modify_time": "2018-07-09 12:51:30",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/rpp0/peapwn",
+ "star": 23,
+ "commits": 5,
+ "modify_time": "2014-08-27 14:22:40",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/vnik5287/wpa-autopwn",
+ "star": 23,
+ "commits": 3,
+ "modify_time": "2015-03-21 00:55:28",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/awsmhacks/awsmbloodhoundcustomqueries",
+ "star": 23,
+ "commits": 20,
+ "modify_time": "2019-11-12 17:39:04",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/doublelabyrinth/windowssudo",
+ "star": 23,
+ "commits": 3,
+ "modify_time": "2019-10-12 12:30:59",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/olliencc/winbinaryaudit",
+ "star": 23,
+ "commits": 4,
+ "modify_time": "2015-07-01 12:14:00",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/rarecoil/pantagrule",
+ "star": 23,
+ "commits": 1,
+ "modify_time": "2019-10-08 00:24:54",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/bing0o/python-scripts",
+ "star": 23,
+ "commits": 59,
+ "modify_time": "2019-12-07 19:55:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/coenjacobs/wp-haveibeenpwned",
+ "star": 23,
+ "commits": 5,
+ "modify_time": "2019-10-06 11:33:43",
+ "last_release": "0.1.1",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/henriksb/extensionspoofer",
+ "star": 23,
+ "commits": 13,
+ "modify_time": "2019-09-23 18:05:36",
+ "last_release": "",
+ "lang": "Visual Basic .NET"
+ },
+ {
+ "link": "https://github.com/vtsingaras/qcom-mbn-ida-loader",
+ "star": 23,
+ "commits": 4,
+ "modify_time": "2014-01-23 08:10:33",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/OpenJavaCard/openjavacard-ndef",
+ "star": 23,
+ "commits": 114,
+ "modify_time": "2019-07-10 21:08:56",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/ichukai/forwarder",
+ "star": 23,
+ "commits": 21,
+ "modify_time": "2016-11-15 10:38:11",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/praetorian-code/ctf-writeups",
+ "star": 23,
+ "commits": 19,
+ "modify_time": "2018-04-20 01:38:54",
+ "last_release": "",
+ "lang": "OpenEdge ABL"
+ },
+ {
+ "link": "https://github.com/jofpin/backcookie",
+ "star": 23,
+ "commits": 51,
+ "modify_time": "2016-10-18 23:36:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bannsec/angr-Windows",
+ "star": 23,
+ "commits": 17,
+ "modify_time": "2016-02-12 16:33:00",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/zidekmat/graphql_beautifier",
+ "star": 23,
+ "commits": 1,
+ "modify_time": "2017-12-07 00:23:12",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/zerosum0x0/slae64",
+ "star": 23,
+ "commits": 14,
+ "modify_time": "2014-12-27 01:15:16",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/zedsec390/defcon23",
+ "star": 23,
+ "commits": 1,
+ "modify_time": "2015-08-08 16:56:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zachriggle/pwndbg",
+ "star": 23,
+ "commits": 562,
+ "modify_time": "2017-04-21 20:10:30",
+ "last_release": "\n 2017.07.18\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xxpe3/clash_raspberrypi",
+ "star": 23,
+ "commits": 7,
+ "modify_time": "2019-10-02 21:23:32",
+ "last_release": "v0.10.2",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/xpn/rpcenum",
+ "star": 23,
+ "commits": 1,
+ "modify_time": "2019-07-31 21:26:07",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/xorpd/fcatalog_server",
+ "star": 23,
+ "commits": 161,
+ "modify_time": "2019-07-10 11:07:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xiaoxiaoleo/xiao-webshell",
+ "star": 23,
+ "commits": 5,
+ "modify_time": "2018-05-03 06:26:46",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/xiaoxiaoleo/pentest-script",
+ "star": 23,
+ "commits": 81,
+ "modify_time": "2018-06-12 05:26:57",
+ "last_release": "",
+ "lang": "Visual Basic .NET"
+ },
+ {
+ "link": "https://github.com/wyyqyl/hidemodule",
+ "star": 23,
+ "commits": 5,
+ "modify_time": "2013-03-31 06:36:01",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ww9210/kernel4.20_bpf_lpe",
+ "star": 23,
+ "commits": 3,
+ "modify_time": "2019-09-03 05:37:54",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/whitel1st/gp_hijack",
+ "star": 23,
+ "commits": 8,
+ "modify_time": "2018-04-06 21:48:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/whaleshark-team/chromeheadlessinterface",
+ "star": 23,
+ "commits": 7,
+ "modify_time": "2017-06-02 10:21:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/weaverheavy/threat-intelligence-tradecraft",
+ "star": 23,
+ "commits": 46,
+ "modify_time": "2018-02-14 13:45:19",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/wanttobeno/wmifilter",
+ "star": 23,
+ "commits": 1,
+ "modify_time": "2018-04-02 11:00:53",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/wanttobeno/screenshot",
+ "star": 23,
+ "commits": 2,
+ "modify_time": "2018-12-29 07:15:31",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/vti/cpan-audit",
+ "star": 23,
+ "commits": 88,
+ "modify_time": "2019-03-09 09:47:43",
+ "last_release": "\n 0.15\n ",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/verideth/repen",
+ "star": 23,
+ "commits": 17,
+ "modify_time": "2017-12-26 16:22:11",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/veggiedefender/marveloptics_malware",
+ "star": 23,
+ "commits": 2,
+ "modify_time": "2018-07-20 13:48:28",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/vchirikov/gotodnspy",
+ "star": 23,
+ "commits": 22,
+ "modify_time": "2019-09-11 21:27:15",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/vah13/burpcrlfplugin",
+ "star": 23,
+ "commits": 4,
+ "modify_time": "2017-01-25 05:41:37",
+ "last_release": "v1.1",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/universonic/shadowsocks-macos",
+ "star": 23,
+ "commits": 491,
+ "modify_time": "2019-06-07 13:07:41",
+ "last_release": "v1.8.2-beta1",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/tylabs/quicksand_tools",
+ "star": 23,
+ "commits": 19,
+ "modify_time": "2016-09-17 18:17:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tumi8/zmap",
+ "star": 23,
+ "commits": 1178,
+ "modify_time": "2019-08-24 18:58:25",
+ "last_release": "\n v2.1.1\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/tum-i22/vot4cs",
+ "star": 23,
+ "commits": 4,
+ "modify_time": "2016-08-01 12:59:34",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/true-systems/om5p-ac-v2-unlocker",
+ "star": 23,
+ "commits": 35,
+ "modify_time": "2017-02-13 14:59:49",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/trojancyborg/ida_jni_rename",
+ "star": 23,
+ "commits": null,
+ "modify_time": "2019-02-27 03:18:48",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/tothi/ctfs",
+ "star": 23,
+ "commits": 32,
+ "modify_time": "2017-09-28 22:56:08",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/torworld/fastrelay",
+ "star": 23,
+ "commits": 84,
+ "modify_time": "2019-11-27 01:52:22",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/tomrittervg/ct-tools",
+ "star": 23,
+ "commits": 22,
+ "modify_time": "2018-02-19 21:30:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tintinweb/unbox",
+ "star": 23,
+ "commits": 12,
+ "modify_time": "2018-03-28 15:26:59",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/theevilbit/exploits",
+ "star": 23,
+ "commits": 6,
+ "modify_time": "2019-10-12 12:16:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/the404hacking/xsscan",
+ "star": 23,
+ "commits": 30,
+ "modify_time": "2018-11-22 06:06:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/techguy-bhushan/xssrequestfilters",
+ "star": 23,
+ "commits": 23,
+ "modify_time": "2018-05-10 17:47:05",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/techgaun/xss-payloads",
+ "star": 23,
+ "commits": 12,
+ "modify_time": "2017-05-08 20:44:35",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/team-copper/captar",
+ "star": 23,
+ "commits": 275,
+ "modify_time": "2017-10-26 21:22:52",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/te-k/malware-classification",
+ "star": 23,
+ "commits": 9,
+ "modify_time": "2016-07-21 09:46:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tdh8316/investigo",
+ "star": 23,
+ "commits": 246,
+ "modify_time": "2019-12-08 12:44:17",
+ "last_release": "2.6.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/tarafans/collections",
+ "star": 23,
+ "commits": 5,
+ "modify_time": "2019-07-06 01:59:44",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/stixproject/stix-to-html",
+ "star": 23,
+ "commits": 487,
+ "modify_time": "2015-11-23 23:02:01",
+ "last_release": "v1.0.2",
+ "lang": "XSLT"
+ },
+ {
+ "link": "https://github.com/sshsshy/zerotrace",
+ "star": 23,
+ "commits": 10,
+ "modify_time": "2018-06-11 18:59:06",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/sourcerer-io/sourcerer-blog",
+ "star": 23,
+ "commits": 15,
+ "modify_time": "2018-06-21 19:17:18",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/somu1795/shodan_raspi",
+ "star": 23,
+ "commits": 55,
+ "modify_time": "2018-05-30 15:27:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/skons/ms17-0100",
+ "star": 23,
+ "commits": 2,
+ "modify_time": "2017-03-27 21:55:45",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/simonuvarov/expdev",
+ "star": 23,
+ "commits": 21,
+ "modify_time": "2017-07-07 11:58:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/shengqi158/weak_password_detect",
+ "star": 23,
+ "commits": 7,
+ "modify_time": "2016-02-24 10:22:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/shadowsocksfork/shadowsocksfork",
+ "star": 23,
+ "commits": 1,
+ "modify_time": "2015-08-22 04:58:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/seyptoo/7z-bruteforce",
+ "star": 23,
+ "commits": 79,
+ "modify_time": "2019-05-15 15:52:20",
+ "last_release": "v1.0-beta-7z-crack",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/secwiki/exp",
+ "star": 23,
+ "commits": 23,
+ "modify_time": "2015-08-20 02:59:45",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/samuelhbne/vpn-launchpad",
+ "star": 23,
+ "commits": 547,
+ "modify_time": "2019-10-13 01:55:17",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/s3xy/cve-2017-10271",
+ "star": 23,
+ "commits": 4,
+ "modify_time": "2017-12-25 06:21:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rwestergren/simple-hash-xss",
+ "star": 23,
+ "commits": 4,
+ "modify_time": "2016-03-02 14:34:57",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/roemhildtg/spectre-canjs",
+ "star": 23,
+ "commits": 867,
+ "modify_time": "2019-10-31 17:53:47",
+ "last_release": "v4.1.0",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/riyazwalikar/sql-injection-training-app",
+ "star": 23,
+ "commits": 4,
+ "modify_time": "2018-03-11 12:18:52",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/remnux/distro",
+ "star": 23,
+ "commits": 6,
+ "modify_time": "2016-12-17 17:50:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/releasel0ck/blind-sql-injector",
+ "star": 23,
+ "commits": 9,
+ "modify_time": "2018-09-16 10:50:40",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/rednaga/keystore-shim",
+ "star": 23,
+ "commits": 1,
+ "modify_time": "2017-09-21 21:43:26",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/redhat-cip/skydive",
+ "star": 23,
+ "commits": 999,
+ "modify_time": "2017-02-20 11:04:18",
+ "last_release": "\n v0.9.0\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/radare/diaphora",
+ "star": 23,
+ "commits": 133,
+ "modify_time": "2019-08-05 14:13:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/r0nen/ctf",
+ "star": 23,
+ "commits": 17,
+ "modify_time": "2019-01-07 18:47:55",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/ptresearch/intelme-crypto",
+ "star": 23,
+ "commits": 2,
+ "modify_time": "2018-06-04 10:29:00",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/proteas/afl-swift",
+ "star": 23,
+ "commits": 8,
+ "modify_time": "2017-11-03 05:45:07",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/privcount/privcount",
+ "star": 23,
+ "commits": 976,
+ "modify_time": "2019-01-11 16:15:02",
+ "last_release": "\n privcount-2.0.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pieterbork/blueborne",
+ "star": 23,
+ "commits": 6,
+ "modify_time": "2018-02-28 07:04:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pielco11/t2b-framework",
+ "star": 23,
+ "commits": 176,
+ "modify_time": "2018-11-27 15:53:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pfalcon/ida-xtensa2",
+ "star": 23,
+ "commits": 63,
+ "modify_time": "2017-02-24 12:09:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/paloaltonetworks/autofocus-lenz",
+ "star": 23,
+ "commits": 137,
+ "modify_time": "2019-10-16 20:51:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/padovah4ck/redsharp",
+ "star": 23,
+ "commits": 18,
+ "modify_time": "2018-12-17 15:37:04",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/p4p1/p4p1",
+ "star": 23,
+ "commits": 308,
+ "modify_time": "2018-02-12 21:39:44",
+ "last_release": "V6",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ozzi-/tld_scanner",
+ "star": 23,
+ "commits": 19,
+ "modify_time": "2019-09-17 12:03:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/osandamalith/pesecinfo",
+ "star": 23,
+ "commits": 8,
+ "modify_time": "2018-10-26 13:20:58",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/optixal/dotfiles",
+ "star": 23,
+ "commits": 15,
+ "modify_time": "2019-01-28 13:50:40",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/opensecurityresearch/ciphertest",
+ "star": 23,
+ "commits": 22,
+ "modify_time": "2017-05-17 17:23:21",
+ "last_release": "\n v0.2.2\n ",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/olihough86/stinkyphish",
+ "star": 23,
+ "commits": 31,
+ "modify_time": "2018-11-19 11:26:51",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/nullpxl/nullctf",
+ "star": 23,
+ "commits": 73,
+ "modify_time": "2019-12-01 02:16:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nuke99/sqlnuke",
+ "star": 23,
+ "commits": 3,
+ "modify_time": "2013-03-15 19:23:03",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/nucypher/nucypher-pre-python",
+ "star": 23,
+ "commits": 53,
+ "modify_time": "2017-10-08 00:21:08",
+ "last_release": "0.3",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/nitscan/inlinux",
+ "star": 23,
+ "commits": 4,
+ "modify_time": "2015-09-14 12:18:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/netspi/sqlc2",
+ "star": 23,
+ "commits": 54,
+ "modify_time": "2018-08-05 19:12:43",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/nccgroup/xcavator",
+ "star": 23,
+ "commits": 5,
+ "modify_time": "2013-10-30 15:58:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nccgroup/bleboy",
+ "star": 23,
+ "commits": 1,
+ "modify_time": "2018-03-09 03:12:20",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/nardholio/cve-2016-0728",
+ "star": 23,
+ "commits": 5,
+ "modify_time": "2018-12-31 16:52:31",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/nannib/imm2virtual",
+ "star": 23,
+ "commits": 67,
+ "modify_time": "2019-10-15 11:11:51",
+ "last_release": "",
+ "lang": "Pascal"
+ },
+ {
+ "link": "https://github.com/mricon/tor-relay-bootstrap-rpi",
+ "star": 23,
+ "commits": 57,
+ "modify_time": "2018-05-11 21:30:07",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/mrahmadt/smartgw",
+ "star": 23,
+ "commits": 102,
+ "modify_time": "2019-04-27 15:27:54",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/mortenschenk/bypassing_cfg_seh",
+ "star": 23,
+ "commits": 2,
+ "modify_time": "2017-03-28 05:46:06",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/moccajoghurt/drvmap_secure",
+ "star": 23,
+ "commits": 9,
+ "modify_time": "2018-10-31 23:43:45",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/microsoft/modsecurity",
+ "star": 23,
+ "commits": 1938,
+ "modify_time": "2019-11-23 00:11:44",
+ "last_release": "\n ApplicationGatewayModSec.1.0.34\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/merkjinx/saddam-plus-plus",
+ "star": 23,
+ "commits": 70,
+ "modify_time": "2017-06-01 19:28:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/meitar/awesome-malware",
+ "star": 23,
+ "commits": 6,
+ "modify_time": "2019-07-13 00:04:28",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/meisterp/torbrowser-overlay",
+ "star": 23,
+ "commits": 452,
+ "modify_time": "2019-12-04 08:46:55",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/mcibique/express-security",
+ "star": 23,
+ "commits": 154,
+ "modify_time": "2019-06-12 20:55:32",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/mbrengel/memscrimper",
+ "star": 23,
+ "commits": 7,
+ "modify_time": "2019-07-22 16:34:15",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/matviy/leaguereplayhook",
+ "star": 23,
+ "commits": 10,
+ "modify_time": "2016-10-22 02:02:31",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/mattcarothers/mhn-core-docker",
+ "star": 23,
+ "commits": 20,
+ "modify_time": "2018-03-29 15:06:41",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/markusteufelberger/afl-ddmin-mod",
+ "star": 23,
+ "commits": 9,
+ "modify_time": "2017-04-08 09:11:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/marcograss/cve-2014-4323",
+ "star": 23,
+ "commits": 7,
+ "modify_time": "2015-09-08 18:37:26",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/maikel233/x-hook-for-csgo",
+ "star": 23,
+ "commits": 139,
+ "modify_time": "2019-05-31 21:26:44",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/lxj616/dvwa-wooyun",
+ "star": 23,
+ "commits": 4,
+ "modify_time": "2015-12-23 10:18:14",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/lucascouto/krackattack-all-zero-tk-key",
+ "star": 23,
+ "commits": 9,
+ "modify_time": "2018-07-03 20:04:28",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/logicaltrust/minerva_lib",
+ "star": 23,
+ "commits": 76,
+ "modify_time": "2018-10-18 07:49:36",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/liblit/murphy",
+ "star": 23,
+ "commits": 5,
+ "modify_time": "2012-08-02 00:07:39",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/liamkarlmitchell/signaturescanner",
+ "star": 23,
+ "commits": 5,
+ "modify_time": "2014-12-04 07:20:15",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/leoid/mysql-injection-exfiltration-optimization",
+ "star": 23,
+ "commits": 4,
+ "modify_time": "2019-09-15 05:47:34",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/lbragues/pasteminer",
+ "star": 23,
+ "commits": 9,
+ "modify_time": "2013-04-10 10:48:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/laudarch/shellsploit",
+ "star": 23,
+ "commits": 65,
+ "modify_time": "2015-12-10 08:19:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kylebing/sslist",
+ "star": 23,
+ "commits": 95,
+ "modify_time": "2019-12-10 08:34:40",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/kx499/ostip",
+ "star": 23,
+ "commits": 39,
+ "modify_time": "2017-02-25 23:31:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kuqadk3/winrarer-ransomware",
+ "star": 23,
+ "commits": 28,
+ "modify_time": "2017-05-31 21:39:39",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/mwkmwkmwk/cpuadventure",
+ "star": 23,
+ "commits": 5,
+ "modify_time": "2019-09-22 17:53:03",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/kolanich/cleanunwantedupdates",
+ "star": 23,
+ "commits": 10,
+ "modify_time": "2015-12-19 15:20:36",
+ "last_release": "\n v0.0.2.3\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/kelvinhack/screencapattack",
+ "star": 23,
+ "commits": 16,
+ "modify_time": "2018-01-20 04:45:24",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jyang772/hideprocesshookmdl",
+ "star": 23,
+ "commits": 2,
+ "modify_time": "2014-01-10 01:50:13",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jvilk/mitmproxy-node",
+ "star": 23,
+ "commits": 36,
+ "modify_time": "2019-05-29 02:49:24",
+ "last_release": "",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/junxzm1990/afl-pt",
+ "star": 23,
+ "commits": 428,
+ "modify_time": "2019-06-13 22:52:15",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jplesperance/redis-sniffer",
+ "star": 23,
+ "commits": 136,
+ "modify_time": "2019-10-03 18:32:15",
+ "last_release": "v1.1.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jpiechowka/zip-shotgun",
+ "star": 23,
+ "commits": 49,
+ "modify_time": "2019-05-31 10:46:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/josefkarasek/docker101",
+ "star": 23,
+ "commits": 92,
+ "modify_time": "2016-06-10 16:42:17",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/jonathansalwan/x-tunnel-opaque-predicates",
+ "star": 23,
+ "commits": 4,
+ "modify_time": "2019-08-17 08:19:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jmscory/security-tool-chest",
+ "star": 23,
+ "commits": 30,
+ "modify_time": "2019-10-11 09:24:56",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/jgamblin/nmap-for-slack",
+ "star": 23,
+ "commits": 9,
+ "modify_time": "2016-05-14 20:33:03",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/jamesacampbell/elector",
+ "star": 23,
+ "commits": 26,
+ "modify_time": "2017-10-20 13:36:34",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/jackuhan/loginhook",
+ "star": 23,
+ "commits": 7,
+ "modify_time": "2016-07-25 01:39:49",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/j40903272/malconv-keras",
+ "star": 23,
+ "commits": 52,
+ "modify_time": "2018-10-08 19:08:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/RPwnage/Warri0r",
+ "star": 23,
+ "commits": 8,
+ "modify_time": "2018-12-24 15:14:45",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/ip2location/ip2proxy-php",
+ "star": 23,
+ "commits": 21,
+ "modify_time": "2019-12-02 06:45:36",
+ "last_release": "2.1.0",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/ioactive/kmdf_re",
+ "star": 23,
+ "commits": 2,
+ "modify_time": "2018-09-21 19:07:28",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/insomnihack/teaser-2017",
+ "star": 23,
+ "commits": 2,
+ "modify_time": "2017-01-27 10:03:06",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/insomnihack/insomnihack-2015",
+ "star": 23,
+ "commits": 21,
+ "modify_time": "2015-03-30 19:04:31",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/infosecsmith/mimikatzlite",
+ "star": 23,
+ "commits": 13,
+ "modify_time": "2014-05-06 01:36:30",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/immunio/immunio-xss-fuzzer",
+ "star": 23,
+ "commits": 6,
+ "modify_time": "2015-12-15 14:13:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/imgp3dev/drmitm",
+ "star": 23,
+ "commits": 38,
+ "modify_time": "2019-02-10 02:21:56",
+ "last_release": "",
+ "lang": "Nim"
+ },
+ {
+ "link": "https://github.com/ieeeicsg/ieee_taggant_system",
+ "star": 23,
+ "commits": 29,
+ "modify_time": "2018-01-10 18:41:54",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/RealBearcat/Jackson-CVE-2017-17485",
+ "star": 23,
+ "commits": 27,
+ "modify_time": "2018-08-17 10:01:53",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/hpd0ger/supertags",
+ "star": 23,
+ "commits": 7,
+ "modify_time": "2019-03-31 02:06:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/horusteknoloji/tr-phishinglist",
+ "star": 23,
+ "commits": 173,
+ "modify_time": "2019-05-14 12:45:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hgfischer/domainerator",
+ "star": 23,
+ "commits": 138,
+ "modify_time": "2017-06-06 21:08:01",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/hedgeh/sewindows",
+ "star": 23,
+ "commits": 69,
+ "modify_time": "2016-07-05 10:26:40",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hardenedbsd/secadm",
+ "star": 23,
+ "commits": 278,
+ "modify_time": "2018-12-03 17:26:20",
+ "last_release": "v0.5.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hani1990/phith0n-mind-map",
+ "star": 23,
+ "commits": 24,
+ "modify_time": "2017-02-13 04:43:43",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/guidovranken/openssl-x509-vulnerabilities",
+ "star": 23,
+ "commits": 12,
+ "modify_time": "2016-10-12 12:16:57",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/graniet/physics-command",
+ "star": 23,
+ "commits": null,
+ "modify_time": "2018-04-03 09:12:41",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/grammatech/gtirb-pprinter",
+ "star": 23,
+ "commits": 485,
+ "modify_time": "2019-12-09 17:15:37",
+ "last_release": "\n v0.1.1\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/gnuhpc/kibana-multitenant-proxy",
+ "star": 23,
+ "commits": 31,
+ "modify_time": "2019-05-06 06:51:25",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/german-namestnikov/unhidens",
+ "star": 23,
+ "commits": 9,
+ "modify_time": "2017-04-17 07:47:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gen0cide/hasherbasher",
+ "star": 23,
+ "commits": 3,
+ "modify_time": "2019-02-11 04:02:13",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/geekonlinecode/malware-machine-learning",
+ "star": 23,
+ "commits": 17,
+ "modify_time": "2018-04-01 09:07:54",
+ "last_release": "",
+ "lang": "Jupyter Notebook"
+ },
+ {
+ "link": "https://github.com/gcarq/arp-spoof",
+ "star": 23,
+ "commits": 5,
+ "modify_time": "2016-02-10 12:59:36",
+ "last_release": "",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/ga1ois/recon-2018-montreal",
+ "star": 23,
+ "commits": 5,
+ "modify_time": "2018-07-06 22:01:42",
+ "last_release": "",
+ "lang": "ActionScript"
+ },
+ {
+ "link": "https://github.com/freak3dot/wp-smart-honeypot",
+ "star": 23,
+ "commits": 18,
+ "modify_time": "2017-10-13 18:09:57",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/feliam/cve-2013-2729",
+ "star": 23,
+ "commits": 13,
+ "modify_time": "2014-03-29 14:07:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/farisv/appledos",
+ "star": 23,
+ "commits": 9,
+ "modify_time": "2018-12-04 08:21:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/exp-sky/hitcon-2014-ie-11-0day-windows-8.1-exploit",
+ "star": 23,
+ "commits": 3,
+ "modify_time": "2014-08-25 10:04:08",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ewhitehats/kovtertools",
+ "star": 23,
+ "commits": 5,
+ "modify_time": "2018-08-09 13:43:57",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/etherpot/contract",
+ "star": 23,
+ "commits": 10,
+ "modify_time": "2015-08-26 13:33:54",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/enfuzz/enfuzz",
+ "star": 23,
+ "commits": 1,
+ "modify_time": "2019-05-04 02:41:35",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/elevenpaths/usbhiddennetworks",
+ "star": 23,
+ "commits": 4,
+ "modify_time": "2017-07-12 11:04:11",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/elespike/burp-cph",
+ "star": 23,
+ "commits": 120,
+ "modify_time": "2019-08-17 16:22:26",
+ "last_release": "3.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dpaulson45/exchangelogcollector",
+ "star": 23,
+ "commits": 151,
+ "modify_time": "2019-08-19 18:11:53",
+ "last_release": "v2.11",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/dougallj/dj_ida_plugins",
+ "star": 23,
+ "commits": 2,
+ "modify_time": "2018-06-04 02:57:10",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/dns-oarc/dnsmeter",
+ "star": 23,
+ "commits": 53,
+ "modify_time": "2019-10-07 14:52:38",
+ "last_release": "v1.0.1",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/djhohnstein/wlbsctrl_poc",
+ "star": 23,
+ "commits": 4,
+ "modify_time": "2019-04-18 13:08:36",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/distrinet/xsr-framework",
+ "star": 23,
+ "commits": 1,
+ "modify_time": "2018-08-16 01:58:00",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/devwerks/xss-cheatsheet",
+ "star": 23,
+ "commits": 40,
+ "modify_time": "2019-10-10 19:31:48",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/devttys0/idascript",
+ "star": 23,
+ "commits": 11,
+ "modify_time": "2016-12-05 17:05:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dev-sec/chef-mysql-hardening",
+ "star": 23,
+ "commits": 117,
+ "modify_time": "2018-10-23 06:55:05",
+ "last_release": "\n v1.2.1\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/dev-sec/chef-apache-hardening",
+ "star": 23,
+ "commits": 76,
+ "modify_time": "2018-10-23 06:55:20",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/deturium/school-bus",
+ "star": 23,
+ "commits": 59,
+ "modify_time": "2018-04-25 13:57:28",
+ "last_release": "",
+ "lang": "Vue"
+ },
+ {
+ "link": "https://github.com/dax89/r2gui",
+ "star": 23,
+ "commits": null,
+ "modify_time": "2018-06-23 17:05:38",
+ "last_release": "",
+ "lang": "c++"
+ },
+ {
+ "link": "https://github.com/davidbuchanan314/cowroot",
+ "star": 23,
+ "commits": 9,
+ "modify_time": "2016-10-29 13:42:39",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/david-reguera-garcia-dreg/phook",
+ "star": 23,
+ "commits": 10,
+ "modify_time": "2017-05-26 23:55:08",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/dariubs/awesome-proxy",
+ "star": 23,
+ "commits": 12,
+ "modify_time": "2019-01-14 06:37:53",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/damonmohammadbagher/nativepayload_ip6dns",
+ "star": 23,
+ "commits": 24,
+ "modify_time": "2018-10-06 18:52:48",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/damian89/commoncrawlparser",
+ "star": 23,
+ "commits": 11,
+ "modify_time": "2018-07-17 16:28:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/d4vinci/anti_killer",
+ "star": 23,
+ "commits": 3,
+ "modify_time": "2016-08-03 18:52:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cyberheartmi9/cve-2017-8295",
+ "star": 23,
+ "commits": 8,
+ "modify_time": "2019-10-22 07:08:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/curl/curl-fuzzer",
+ "star": 23,
+ "commits": 95,
+ "modify_time": "2019-11-18 15:34:56",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ctu-iig/802.11p-linux",
+ "star": 23,
+ "commits": 493629,
+ "modify_time": "2014-12-18 11:34:34",
+ "last_release": "\n v3.16-rc7\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cr4sh/ida-ubigraph",
+ "star": 23,
+ "commits": 4,
+ "modify_time": "2013-06-08 18:58:34",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/costa-group/ethir",
+ "star": 23,
+ "commits": 829,
+ "modify_time": "2019-12-04 16:25:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cornerpirate/cve-offline",
+ "star": 23,
+ "commits": 39,
+ "modify_time": "2019-11-06 16:26:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/commonexploits/weape",
+ "star": 23,
+ "commits": 4,
+ "modify_time": "2013-09-01 17:31:30",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/coldshell/malware-scripts",
+ "star": 23,
+ "commits": 7,
+ "modify_time": "2019-01-18 18:30:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/coldev/coldevprolayer",
+ "star": 23,
+ "commits": 15,
+ "modify_time": "2019-01-20 05:01:40",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/cn33liz/hsevd-arbitraryoverwrite",
+ "star": 23,
+ "commits": 3,
+ "modify_time": "2017-01-15 10:47:58",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/claudijd/bnat",
+ "star": 23,
+ "commits": 144,
+ "modify_time": "2014-08-17 15:30:31",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/chengable/safe_code",
+ "star": 23,
+ "commits": 10,
+ "modify_time": "2017-03-20 07:10:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/certcc/dranzer",
+ "star": 23,
+ "commits": 8,
+ "modify_time": "2015-06-01 20:05:23",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/calmh/yardstick",
+ "star": 23,
+ "commits": 11,
+ "modify_time": "2016-12-02 22:23:36",
+ "last_release": "\n v0.0.3\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/bxlcity/malware",
+ "star": 23,
+ "commits": 122,
+ "modify_time": "2017-06-29 20:06:40",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/buckhacker/subdomaintakeovertools",
+ "star": 23,
+ "commits": 3,
+ "modify_time": "2018-09-12 05:52:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/brunneis/scihub-downloader",
+ "star": 23,
+ "commits": 10,
+ "modify_time": "2018-03-15 09:05:59",
+ "last_release": "v0.2.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/brucecio9999/cryptowire-advanced-autoit-ransomware-project",
+ "star": 23,
+ "commits": 2,
+ "modify_time": "2016-05-22 19:21:52",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/briansrebrenik/final_project",
+ "star": 23,
+ "commits": 32,
+ "modify_time": "2019-06-02 16:51:50",
+ "last_release": "",
+ "lang": "Jupyter Notebook"
+ },
+ {
+ "link": "https://github.com/bitthebyte/domainker",
+ "star": 23,
+ "commits": 249,
+ "modify_time": "2019-09-17 15:13:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/behzad-a/dytan",
+ "star": 23,
+ "commits": 6,
+ "modify_time": "2014-08-07 20:04:37",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/balika011/belf",
+ "star": 23,
+ "commits": 8,
+ "modify_time": "2018-06-05 18:18:22",
+ "last_release": "v0.2",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/b-g-goodell/research-lab",
+ "star": 23,
+ "commits": 293,
+ "modify_time": "2019-05-27 15:32:06",
+ "last_release": "",
+ "lang": "TeX"
+ },
+ {
+ "link": "https://github.com/az0ne/autoexp_plc",
+ "star": 23,
+ "commits": 3,
+ "modify_time": "2015-12-17 02:10:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/auth0-blog/rottentomatoes-clone",
+ "star": 23,
+ "commits": 2,
+ "modify_time": "2017-07-04 17:23:43",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/aur3lius-dev/spydir",
+ "star": 23,
+ "commits": 49,
+ "modify_time": "2018-04-11 16:28:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/armedpot/honeytrap",
+ "star": 23,
+ "commits": 190,
+ "modify_time": "2017-01-29 12:51:00",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/arizvisa/ndk",
+ "star": 23,
+ "commits": 18,
+ "modify_time": "2019-10-13 03:51:06",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/apriorit/svchostdemo",
+ "star": 23,
+ "commits": 3,
+ "modify_time": "2018-01-03 10:37:38",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/apestalk/debugwindow",
+ "star": 23,
+ "commits": 5,
+ "modify_time": "2017-05-11 08:17:35",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/antisomnus/sniffer",
+ "star": 23,
+ "commits": 90,
+ "modify_time": "2019-05-20 05:59:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/anotherik/rogueap-detector",
+ "star": 23,
+ "commits": 141,
+ "modify_time": "2018-12-23 16:30:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/anhkgg/get52pojietools",
+ "star": 23,
+ "commits": 3,
+ "modify_time": "2019-06-13 05:13:59",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/alexander-hanel/hansel",
+ "star": 23,
+ "commits": 14,
+ "modify_time": "2019-07-11 21:16:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/aff4/pyaff4",
+ "star": 23,
+ "commits": 253,
+ "modify_time": "2019-11-29 04:27:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/abhishekkr/eden_guide_to_hacking",
+ "star": 23,
+ "commits": 53,
+ "modify_time": "2017-12-27 14:39:59",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/93aef0ce4dd141ece6f5/packer",
+ "star": 23,
+ "commits": 15,
+ "modify_time": "2016-09-29 11:04:38",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/3xp10it/xwebshell",
+ "star": 23,
+ "commits": 5,
+ "modify_time": "2017-04-25 14:39:28",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/0xsobky/xssbuster",
+ "star": 23,
+ "commits": 69,
+ "modify_time": "2018-08-26 21:37:57",
+ "last_release": "v1.1.3",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/0x024/ms",
+ "star": 23,
+ "commits": 20,
+ "modify_time": "2017-08-05 03:18:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xadamxk/usb-rubber-ducky-app",
+ "star": 22,
+ "commits": 22,
+ "modify_time": "2017-07-27 20:35:21",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/cedx/reverse-proxy.js",
+ "star": 22,
+ "commits": 719,
+ "modify_time": "2019-12-09 20:35:12",
+ "last_release": "v9.0.0",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/wisepythagoras/website-fingerprinting",
+ "star": 22,
+ "commits": 1,
+ "modify_time": "2019-12-10 21:32:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hahwul/websocket-connection-smuggler",
+ "star": 22,
+ "commits": 5,
+ "modify_time": "2019-12-05 15:23:49",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/snail007/goproxy-ss-plugin-android",
+ "star": 22,
+ "commits": 44,
+ "modify_time": "2019-11-13 09:47:01",
+ "last_release": "v1.1",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/k8gege/pyladon",
+ "star": 22,
+ "commits": 9,
+ "modify_time": "2019-11-20 15:26:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/epsylon/anontwi",
+ "star": 22,
+ "commits": 5,
+ "modify_time": "2015-09-01 03:56:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nsacyber/driver-collider",
+ "star": 22,
+ "commits": 25,
+ "modify_time": "2017-12-18 16:49:10",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/shadowsocks/openssl-android",
+ "star": 22,
+ "commits": 4,
+ "modify_time": "2016-04-01 07:33:28",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ytisf/apate",
+ "star": 22,
+ "commits": 9,
+ "modify_time": "2019-03-20 12:38:03",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/dxa4481/mimikittenz4linux",
+ "star": 22,
+ "commits": 5,
+ "modify_time": "2016-12-29 17:56:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/d35m0nd142/joomla-components-exploits-auto-updating-scanner",
+ "star": 22,
+ "commits": 35,
+ "modify_time": "2018-04-01 12:21:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xyntax/xctf-2019-tfboys",
+ "star": 22,
+ "commits": 4,
+ "modify_time": "2019-10-27 09:11:38",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/nachowski/warpwallet_cracker",
+ "star": 22,
+ "commits": 25,
+ "modify_time": "2018-05-02 07:45:12",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/learnteachcode/code-coffee-compendium",
+ "star": 22,
+ "commits": 78,
+ "modify_time": "2019-12-02 04:26:46",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/5h4d0wb0y/socialbrute",
+ "star": 22,
+ "commits": 47,
+ "modify_time": "2019-10-29 11:47:25",
+ "last_release": "\n v1.0.2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/torpyorg/torpy",
+ "star": 22,
+ "commits": 33,
+ "modify_time": "2019-11-13 08:52:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mitre-cyber-academy/ctf-scoreboard",
+ "star": 22,
+ "commits": 615,
+ "modify_time": "2019-12-06 15:11:05",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/dylanbai8/c2ray",
+ "star": 22,
+ "commits": 42,
+ "modify_time": "2019-06-21 17:16:08",
+ "last_release": "6.0",
+ "lang": "Batchfile"
+ },
+ {
+ "link": "https://github.com/tismayil/rsdl",
+ "star": 22,
+ "commits": 8,
+ "modify_time": "2019-10-30 22:41:44",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/adde88/hostapd-mana-openwrt",
+ "star": 22,
+ "commits": 109,
+ "modify_time": "2019-09-26 17:40:24",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/andyvand/atherosromkit",
+ "star": 22,
+ "commits": 3,
+ "modify_time": "2015-04-23 20:21:11",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/brycethomas/liber80211",
+ "star": 22,
+ "commits": 3,
+ "modify_time": "2012-10-24 13:38:36",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/lbherrera/writeups",
+ "star": 22,
+ "commits": 14,
+ "modify_time": "2019-11-10 16:38:14",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/kizzx2/docker-openvpn-client-socks",
+ "star": 22,
+ "commits": 11,
+ "modify_time": "2019-10-08 15:19:29",
+ "last_release": "",
+ "lang": "Dockerfile"
+ },
+ {
+ "link": "https://github.com/geekscrapy/bingraph",
+ "star": 22,
+ "commits": 158,
+ "modify_time": "2019-03-05 17:22:46",
+ "last_release": "\n Release_3.0\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/geek1011/easy-novnc",
+ "star": 22,
+ "commits": 41,
+ "modify_time": "2019-09-24 17:20:10",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/circl/forensic-tools",
+ "star": 22,
+ "commits": 28,
+ "modify_time": "2019-09-25 12:23:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/adriangranados/wifiexplorer-sensor",
+ "star": 22,
+ "commits": 26,
+ "modify_time": "2019-10-10 22:11:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rndinfosecguy/vulture",
+ "star": 22,
+ "commits": 7,
+ "modify_time": "2019-06-29 08:48:31",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/yuiitsu/unproxy",
+ "star": 22,
+ "commits": 6,
+ "modify_time": "2016-08-29 03:46:02",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/penetrate2hack/itwsv",
+ "star": 22,
+ "commits": 36,
+ "modify_time": "2019-11-28 05:41:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/legendl3n/smarthooker",
+ "star": 22,
+ "commits": 9,
+ "modify_time": "2019-09-28 13:17:57",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/lowleveldesign/concerto",
+ "star": 22,
+ "commits": 17,
+ "modify_time": "2019-11-09 12:47:00",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/mzfr/HackTheBox-writeups",
+ "star": 22,
+ "commits": 51,
+ "modify_time": "2019-12-09 09:51:41",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/marcocesarato/PHP-AIO-Security",
+ "star": 22,
+ "commits": 196,
+ "modify_time": "2019-10-16 09:39:28",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/jianpingzju/Hypro",
+ "star": 22,
+ "commits": 23,
+ "modify_time": "2016-12-19 12:03:49",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/avast/retdec-regression-tests-framework",
+ "star": 22,
+ "commits": 113,
+ "modify_time": "2019-09-04 12:06:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/auth0-blog/ionic2-auth",
+ "star": 22,
+ "commits": 6,
+ "modify_time": "2016-05-27 14:19:13",
+ "last_release": "",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/vysecurity/basicAuth",
+ "star": 22,
+ "commits": 9,
+ "modify_time": "2017-09-11 12:39:24",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/zxsecurity/glugger",
+ "star": 22,
+ "commits": 21,
+ "modify_time": "2018-10-09 13:46:09",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/zigzag2050/mzphp2-deobfuscator",
+ "star": 22,
+ "commits": 6,
+ "modify_time": "2017-11-10 11:38:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zhutoulala/vulnscan",
+ "star": 22,
+ "commits": 63,
+ "modify_time": "2019-04-21 00:24:30",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/zerokilo/directedgraphswv",
+ "star": 22,
+ "commits": 9,
+ "modify_time": "2018-01-14 13:07:30",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/zachhuff386/dashcam",
+ "star": 22,
+ "commits": 11,
+ "modify_time": "2013-12-30 14:14:49",
+ "last_release": "0.1.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/yifengyou/x86-assembly-language-from-real-mode-to-protection-mode",
+ "star": 22,
+ "commits": 2,
+ "modify_time": "2017-11-15 08:39:12",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/wpatoolkit/cap-converter",
+ "star": 22,
+ "commits": 20,
+ "modify_time": "2015-12-30 17:55:31",
+ "last_release": "v1.4",
+ "lang": "Visual Basic .NET"
+ },
+ {
+ "link": "https://github.com/websecurify/acme-no-login-ng",
+ "star": 22,
+ "commits": 3,
+ "modify_time": "2018-10-29 14:51:06",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/webbreacher/emailwhois",
+ "star": 22,
+ "commits": 23,
+ "modify_time": "2018-07-21 15:49:23",
+ "last_release": "1.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/wangray/windbg-for-gdb-users",
+ "star": 22,
+ "commits": 12,
+ "modify_time": "2019-09-12 17:58:30",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/vmayoral/basic_robot_cybersecurity",
+ "star": 22,
+ "commits": 75,
+ "modify_time": "2019-07-01 17:05:49",
+ "last_release": "",
+ "lang": "Dockerfile"
+ },
+ {
+ "link": "https://github.com/uvbs/vmpdbg2",
+ "star": 22,
+ "commits": 3,
+ "modify_time": "2015-09-08 18:30:43",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/tyranid/canape",
+ "star": 22,
+ "commits": 29,
+ "modify_time": "2018-09-24 20:20:11",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tux-00/network_miner",
+ "star": 22,
+ "commits": 80,
+ "modify_time": "2016-05-19 09:30:58",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/tromey/gdb-helpers",
+ "star": 22,
+ "commits": 27,
+ "modify_time": "2017-05-08 22:00:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tophertimzen/shellcodetester",
+ "star": 22,
+ "commits": 9,
+ "modify_time": "2015-03-17 19:09:58",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/thedr1ver/wipster",
+ "star": 22,
+ "commits": 141,
+ "modify_time": "2016-08-01 17:02:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/textileio/dapp-template",
+ "star": 22,
+ "commits": 8,
+ "modify_time": "2018-07-18 19:32:43",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/technikempire/windivertsharp",
+ "star": 22,
+ "commits": 9,
+ "modify_time": "2018-10-15 17:09:07",
+ "last_release": "v1.4.3.3",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/techbliss/scylladumper",
+ "star": 22,
+ "commits": 21,
+ "modify_time": "2015-05-04 18:47:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tc39/proposal-intl-list-format",
+ "star": 22,
+ "commits": 63,
+ "modify_time": "2019-11-07 19:45:15",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/tandasat/cve-2014-0816",
+ "star": 22,
+ "commits": 8,
+ "modify_time": "2016-10-05 12:55:53",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/tak31337/medusa-gui",
+ "star": 22,
+ "commits": 1,
+ "modify_time": "2013-03-17 21:57:54",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/t2mune/nield",
+ "star": 22,
+ "commits": 38,
+ "modify_time": "2016-04-20 16:05:06",
+ "last_release": "v0.6.1",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/t0kx/exploit-cve-2016-9920",
+ "star": 22,
+ "commits": 10,
+ "modify_time": "2017-01-06 23:33:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/svelizdonoso/asyrv",
+ "star": 22,
+ "commits": 19,
+ "modify_time": "2018-10-13 03:01:08",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/superironbob/pdbwriter",
+ "star": 22,
+ "commits": 8,
+ "modify_time": "2017-11-16 19:43:16",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/sunkehappy/ios-reverse-engineering-tools-backup",
+ "star": 22,
+ "commits": 7,
+ "modify_time": "2015-11-19 11:46:19",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/steved3/kit_hunter",
+ "star": 22,
+ "commits": 38,
+ "modify_time": "2019-07-28 21:05:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/stephenhaunts/safepad",
+ "star": 22,
+ "commits": 131,
+ "modify_time": "2017-04-21 13:17:48",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/stamparm/dnslog",
+ "star": 22,
+ "commits": 19,
+ "modify_time": "2019-11-11 13:54:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/st2labs/sipi",
+ "star": 22,
+ "commits": 13,
+ "modify_time": "2018-12-24 15:00:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/spring-cloud/spring-cloud-scheduler",
+ "star": 22,
+ "commits": 36,
+ "modify_time": "2019-11-13 13:42:01",
+ "last_release": "\n v2.0.1.RELEASE\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/sipcapture/homer-ui",
+ "star": 22,
+ "commits": 405,
+ "modify_time": "2018-11-30 09:32:28",
+ "last_release": "5.0.6",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/siliconblade/volatility",
+ "star": 22,
+ "commits": 14,
+ "modify_time": "2014-11-16 07:13:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/silentsignal/burp-uuid",
+ "star": 22,
+ "commits": 12,
+ "modify_time": "2017-09-28 12:00:33",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/silentsignal/burp-requests",
+ "star": 22,
+ "commits": 32,
+ "modify_time": "2019-05-03 14:51:17",
+ "last_release": "v0.2.3",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/sensepost/misc-windows-hacking",
+ "star": 22,
+ "commits": 8,
+ "modify_time": "2016-11-16 23:13:10",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/sebastienbr/volatility",
+ "star": 22,
+ "commits": 3,
+ "modify_time": "2018-07-31 16:11:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/scenegate/yarhl",
+ "star": 22,
+ "commits": 581,
+ "modify_time": "2019-12-03 13:16:45",
+ "last_release": "v2.0",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/saulty4ish/fuzzsafedog",
+ "star": 22,
+ "commits": 8,
+ "modify_time": "2018-03-21 14:45:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sagi/android_pocs",
+ "star": 22,
+ "commits": 30,
+ "modify_time": "2017-02-09 01:42:01",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/saferwall/saferwall",
+ "star": 22,
+ "commits": 604,
+ "modify_time": "2019-12-07 11:53:34",
+ "last_release": "\n v0.0.1\n ",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/russianotter/networking",
+ "star": 22,
+ "commits": 100,
+ "modify_time": "2018-07-11 04:48:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rolfrolles/miscellaneous",
+ "star": 22,
+ "commits": 3,
+ "modify_time": "2019-01-22 22:35:15",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/robotastic/smartnet-scanner",
+ "star": 22,
+ "commits": 22,
+ "modify_time": "2013-11-10 12:15:09",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/reivhax/chimay-red-tiny",
+ "star": 22,
+ "commits": 25,
+ "modify_time": "2018-10-04 18:12:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rednixon/stegdetect",
+ "star": 22,
+ "commits": 19,
+ "modify_time": "2018-05-26 06:34:53",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/rceninja/re-scripts",
+ "star": 22,
+ "commits": 5,
+ "modify_time": "2019-10-14 14:24:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/random-robbie/bugbountydork",
+ "star": 22,
+ "commits": 5,
+ "modify_time": "2019-09-30 06:19:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/raesene/owasp_web_app_testing_cheatsheet_converter",
+ "star": 22,
+ "commits": 3,
+ "modify_time": "2012-09-16 12:13:28",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/raesene/dockerized-security-tools",
+ "star": 22,
+ "commits": 29,
+ "modify_time": "2019-08-21 07:53:10",
+ "last_release": "latest",
+ "lang": "Dockerfile"
+ },
+ {
+ "link": "https://github.com/radare/libdemangle",
+ "star": 22,
+ "commits": 3,
+ "modify_time": "2019-10-19 00:25:56",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/quikko/buquikker",
+ "star": 22,
+ "commits": 19,
+ "modify_time": "2019-10-14 13:48:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/puresec/lambda-proxy",
+ "star": 22,
+ "commits": 6,
+ "modify_time": "2019-01-11 07:08:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/powerscript/getdatareport",
+ "star": 22,
+ "commits": 22,
+ "modify_time": "2016-10-18 19:58:59",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/polyverse/envisen",
+ "star": 22,
+ "commits": 115,
+ "modify_time": "2019-10-05 03:10:51",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/pdjstone/cloudpets-web-bluetooth",
+ "star": 22,
+ "commits": 13,
+ "modify_time": "2017-03-08 11:02:34",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/payloadsecurity/vxcommunity",
+ "star": 22,
+ "commits": 98,
+ "modify_time": "2019-04-24 13:47:20",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/paul-tew/lifer",
+ "star": 22,
+ "commits": 62,
+ "modify_time": "2018-10-22 23:33:41",
+ "last_release": "v5.0.23",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/patois/idaplugins",
+ "star": 22,
+ "commits": 7,
+ "modify_time": "2017-02-05 11:44:26",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/owasp/owasp-swag",
+ "star": 22,
+ "commits": 93,
+ "modify_time": "2019-11-12 15:47:10",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/osandamalith/anti-debug",
+ "star": 22,
+ "commits": 13,
+ "modify_time": "2017-02-21 07:00:33",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/op7ic/shadowbroker-smb-scanner",
+ "star": 22,
+ "commits": 28,
+ "modify_time": "2017-05-19 07:14:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/onethawt/idapyscripts",
+ "star": 22,
+ "commits": 11,
+ "modify_time": "2015-09-17 14:56:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/oasis-open/cti-stix-validator",
+ "star": 22,
+ "commits": 389,
+ "modify_time": "2019-12-09 19:40:22",
+ "last_release": "\n v2.0.0.dev3\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nirizr/idasix",
+ "star": 22,
+ "commits": 29,
+ "modify_time": "2018-08-02 03:07:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nihilus/idascope",
+ "star": 22,
+ "commits": 47,
+ "modify_time": "2014-07-25 14:24:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nicksanzotta/linkscrape",
+ "star": 22,
+ "commits": null,
+ "modify_time": "2018-11-09 14:17:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/munmap/linux-kernel-bugs-db",
+ "star": 22,
+ "commits": 8,
+ "modify_time": "2014-09-21 10:43:07",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/mothran/tlslite",
+ "star": 22,
+ "commits": 251,
+ "modify_time": "2014-04-14 16:51:45",
+ "last_release": "\n v0.4.3\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/monnappa22/linux_mem_diff_tool",
+ "star": 22,
+ "commits": 4,
+ "modify_time": "2015-09-20 18:04:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/milo2012/burpsql",
+ "star": 22,
+ "commits": 10,
+ "modify_time": "2012-07-06 08:22:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/middlewares/payload",
+ "star": 22,
+ "commits": 66,
+ "modify_time": "2019-12-06 16:53:43",
+ "last_release": "v3.0.0",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/melvinsh/burptoggle",
+ "star": 22,
+ "commits": 8,
+ "modify_time": "2016-08-06 22:54:54",
+ "last_release": "",
+ "lang": "Swift"
+ },
+ {
+ "link": "https://github.com/meetpatty/basiliskii-vita",
+ "star": 22,
+ "commits": 32,
+ "modify_time": "2018-09-30 07:11:22",
+ "last_release": "v0.33",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/mdn/pab",
+ "star": 22,
+ "commits": 26,
+ "modify_time": "2019-07-03 14:50:06",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/mdegrazia/onionpeeler",
+ "star": 22,
+ "commits": 15,
+ "modify_time": "2017-09-20 16:43:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/martinvigo/metasploit-framework",
+ "star": 22,
+ "commits": 34149,
+ "modify_time": "2015-06-27 15:52:54",
+ "last_release": "\n 2014071601\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/marcovaldong/isgan",
+ "star": 22,
+ "commits": 4,
+ "modify_time": "2018-10-11 06:00:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/malcomvetter/antidebug",
+ "star": 22,
+ "commits": 1,
+ "modify_time": "2018-07-31 18:51:08",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/mablanco/docker-osmedeus",
+ "star": 22,
+ "commits": 35,
+ "modify_time": "2019-12-09 16:56:20",
+ "last_release": "\n 1.5-20190812\n ",
+ "lang": "Dockerfile"
+ },
+ {
+ "link": "https://github.com/lylemi/saker",
+ "star": 22,
+ "commits": 186,
+ "modify_time": "2019-11-12 12:16:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lorenzb/submarine_sends",
+ "star": 22,
+ "commits": 5,
+ "modify_time": "2018-11-16 17:37:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lorecioni/imagesplicingdetection",
+ "star": 22,
+ "commits": 294,
+ "modify_time": "2017-07-16 19:57:30",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/lockgit/py",
+ "star": 22,
+ "commits": 72,
+ "modify_time": "2019-10-21 07:46:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/liucan01/cve-list-pro",
+ "star": 22,
+ "commits": 1,
+ "modify_time": "2018-02-06 11:33:34",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/letusfsck/poc-exploit-mirror",
+ "star": 22,
+ "commits": 5,
+ "modify_time": "2017-11-26 07:04:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/leonardonve/dns2proxy_hsts",
+ "star": 22,
+ "commits": 6,
+ "modify_time": "2018-01-01 10:20:59",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/leoid/encoder",
+ "star": 22,
+ "commits": 2,
+ "modify_time": "2018-10-10 18:46:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/leechristensen/offensivepowershelltasking",
+ "star": 22,
+ "commits": 6,
+ "modify_time": "2015-12-24 19:16:25",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/lavalamp-/ws-frontend-community",
+ "star": 22,
+ "commits": 23,
+ "modify_time": "2018-01-16 20:15:48",
+ "last_release": "",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/lamableu/morfeus_gui",
+ "star": 22,
+ "commits": 93,
+ "modify_time": "2018-10-27 19:33:12",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/lakevilladom/goskylar",
+ "star": 22,
+ "commits": 82,
+ "modify_time": "2018-08-07 09:22:00",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/lac-japan/owasp-mobile-top-10-2016",
+ "star": 22,
+ "commits": 10,
+ "modify_time": "2018-02-27 04:49:56",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/laanwj/dwarf_to_c",
+ "star": 22,
+ "commits": 48,
+ "modify_time": "2019-04-28 19:02:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kutio/liblll",
+ "star": 22,
+ "commits": 21,
+ "modify_time": "2017-02-22 20:46:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kitsun3sec/pentest-cheat-sheets",
+ "star": 22,
+ "commits": 112,
+ "modify_time": "2019-06-05 12:12:32",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/katjahahn/jwscan",
+ "star": 22,
+ "commits": 7,
+ "modify_time": "2015-06-16 15:51:59",
+ "last_release": "",
+ "lang": "Scala"
+ },
+ {
+ "link": "https://github.com/k1p0d/zeus_reports_len",
+ "star": 22,
+ "commits": 11,
+ "modify_time": "2015-10-25 15:18:02",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/jusafing/pnaf",
+ "star": 22,
+ "commits": 20,
+ "modify_time": "2018-05-17 21:47:42",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/josephjkong/designing-bsd-rootkits",
+ "star": 22,
+ "commits": 2,
+ "modify_time": "2016-10-10 00:21:41",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/johntroony/luks-ops",
+ "star": 22,
+ "commits": 29,
+ "modify_time": "2017-04-05 09:19:36",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/jiangsir404/xss-sql-fuzz",
+ "star": 22,
+ "commits": 6,
+ "modify_time": "2018-12-04 10:34:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jhermann/dependency-check-py",
+ "star": 22,
+ "commits": 65,
+ "modify_time": "2019-07-15 17:58:24",
+ "last_release": "v0.2.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jgrahamc/torexit",
+ "star": 22,
+ "commits": 4,
+ "modify_time": "2016-02-26 17:46:01",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/jbremer/pyn",
+ "star": 22,
+ "commits": 42,
+ "modify_time": "2013-11-19 14:18:13",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/jas502n/st2-046-poc",
+ "star": 22,
+ "commits": 11,
+ "modify_time": "2018-08-17 05:15:40",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/jandre/brosquery",
+ "star": 22,
+ "commits": 19,
+ "modify_time": "2015-04-28 14:20:20",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/inverseintegral/ctf_writeups",
+ "star": 22,
+ "commits": 63,
+ "modify_time": "2019-06-24 21:10:07",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/invasi0nz/lo0sr",
+ "star": 22,
+ "commits": 23,
+ "modify_time": "2017-11-15 16:18:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/integrii/wormhole",
+ "star": 22,
+ "commits": 14,
+ "modify_time": "2017-11-20 19:08:53",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/ins1gn1a/netntlm-hashcat",
+ "star": 22,
+ "commits": 16,
+ "modify_time": "2019-11-24 22:23:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/infectedpacket/vxvault",
+ "star": 22,
+ "commits": 65,
+ "modify_time": "2015-12-16 05:07:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/iaik/prefetch",
+ "star": 22,
+ "commits": 3,
+ "modify_time": "2016-12-09 06:41:11",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/iagox86/ctfworkshop-2017",
+ "star": 22,
+ "commits": 20,
+ "modify_time": "2017-03-31 03:29:48",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hypnoze57/fshell",
+ "star": 22,
+ "commits": 12,
+ "modify_time": "2019-01-25 15:01:00",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/howmp/comfinder",
+ "star": 22,
+ "commits": 3,
+ "modify_time": "2019-01-09 13:55:30",
+ "last_release": "v0.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hongfeioo/userdevicetracker",
+ "star": 22,
+ "commits": 29,
+ "modify_time": "2017-12-04 09:19:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hoainam1989/training-application-security",
+ "star": 22,
+ "commits": 7,
+ "modify_time": "2017-05-29 18:53:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hfiref0x/bsodscreen",
+ "star": 22,
+ "commits": 2,
+ "modify_time": "2018-12-31 03:45:51",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hexhive/epoxy",
+ "star": 22,
+ "commits": 4,
+ "modify_time": "2017-05-18 18:19:42",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/herwonowr/catchme",
+ "star": 22,
+ "commits": 3,
+ "modify_time": "2017-11-01 05:42:00",
+ "last_release": "1.0.0",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hackerwarehouse/hw-dc26-badge",
+ "star": 22,
+ "commits": 5,
+ "modify_time": "2018-09-16 08:49:03",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/h3xx/jphs",
+ "star": 22,
+ "commits": 20,
+ "modify_time": "2017-11-22 02:40:32",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/guelfoweb/fbid",
+ "star": 22,
+ "commits": 16,
+ "modify_time": "2017-04-07 14:46:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/guardianproject/jtorctl",
+ "star": 22,
+ "commits": 48,
+ "modify_time": "2019-08-07 02:27:05",
+ "last_release": "\n v0.2\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/gregkcarson/googleappscriptse",
+ "star": 22,
+ "commits": 7,
+ "modify_time": "2017-03-01 18:43:16",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/grcasanova/supervirus",
+ "star": 22,
+ "commits": 5,
+ "modify_time": "2017-09-17 18:48:35",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/gr33ntii/malware-collection",
+ "star": 22,
+ "commits": 30,
+ "modify_time": "2017-07-02 16:15:58",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/ginuerzh/gosocks5",
+ "star": 22,
+ "commits": 25,
+ "modify_time": "2018-12-06 12:46:39",
+ "last_release": "\n v0.2.0\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/ghsec/bbprofiles",
+ "star": 22,
+ "commits": 21,
+ "modify_time": "2019-04-10 19:48:34",
+ "last_release": "",
+ "lang": "BitBake"
+ },
+ {
+ "link": "https://github.com/gdssecurity/osx-continuity-dialer-poc",
+ "star": 22,
+ "commits": 7,
+ "modify_time": "2015-11-18 16:07:08",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/frohoff/jdeserialize",
+ "star": 22,
+ "commits": 31,
+ "modify_time": "2011-10-27 01:31:20",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/freenas/middleware",
+ "star": 22,
+ "commits": 24812,
+ "modify_time": "2017-05-08 21:35:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fmagin/angr-cli",
+ "star": 22,
+ "commits": 85,
+ "modify_time": "2019-12-07 14:53:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/firmadyne/extractor",
+ "star": 22,
+ "commits": 10,
+ "modify_time": "2017-04-02 19:52:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/find-evil/msf-install-script-os-x-lion-mountain-lion",
+ "star": 22,
+ "commits": 41,
+ "modify_time": "2014-06-05 20:00:46",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/feedhenry/mobile-security",
+ "star": 22,
+ "commits": 197,
+ "modify_time": "2018-05-25 11:43:49",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/fcavallarin/htcrawl",
+ "star": 22,
+ "commits": 12,
+ "modify_time": "2019-11-08 12:49:42",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/fastly/waf_testbed",
+ "star": 22,
+ "commits": 43,
+ "modify_time": "2018-06-20 21:46:20",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/fare9/pba_analysis_tools",
+ "star": 22,
+ "commits": 20,
+ "modify_time": "2019-03-26 14:51:06",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/f0re1gners/ejudge",
+ "star": 22,
+ "commits": 82,
+ "modify_time": "2019-03-22 03:25:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/f-secure/elevation-of-privacy",
+ "star": 22,
+ "commits": 10,
+ "modify_time": "2019-05-17 11:17:45",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ettic-team/endpointfinder-burp",
+ "star": 22,
+ "commits": 4,
+ "modify_time": "2019-05-30 21:44:07",
+ "last_release": "0.0.2-beta",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/ernw/burpsuite-extensions",
+ "star": 22,
+ "commits": 8,
+ "modify_time": "2016-06-16 20:11:59",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/entropystring/javascript",
+ "star": 22,
+ "commits": 131,
+ "modify_time": "2019-06-12 03:47:47",
+ "last_release": "\n v4.2.0\n ",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/endgameinc/malware_evasion_competition",
+ "star": 22,
+ "commits": 4,
+ "modify_time": "2019-12-06 14:45:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/emanuil/php-reaper",
+ "star": 22,
+ "commits": 38,
+ "modify_time": "2016-08-09 13:04:21",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/ekiojp/dfex",
+ "star": 22,
+ "commits": 7,
+ "modify_time": "2019-10-28 03:02:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ehabhussein/ollydbg-binary-execution-visualizer",
+ "star": 22,
+ "commits": 4,
+ "modify_time": "2017-01-09 16:31:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dragonquesthero/kernel-force-delete",
+ "star": 22,
+ "commits": 9,
+ "modify_time": "2018-06-02 03:40:41",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/digiampietro/adbtools2",
+ "star": 22,
+ "commits": 96,
+ "modify_time": "2018-09-27 08:35:27",
+ "last_release": "\n v0.86\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/defcon-russia/metasploit-framework",
+ "star": 22,
+ "commits": 53150,
+ "modify_time": "2018-10-14 14:26:53",
+ "last_release": "\n 4.13.19\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/davehardy20/invoke-winrmattack",
+ "star": 22,
+ "commits": 6,
+ "modify_time": "2016-09-13 07:34:25",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/dariosharp/szpy",
+ "star": 22,
+ "commits": 54,
+ "modify_time": "2017-12-28 20:31:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/d3f4ultt/princesofpaypal",
+ "star": 22,
+ "commits": 6,
+ "modify_time": "2016-05-27 20:14:54",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/d35m0nd142/kadabra",
+ "star": 22,
+ "commits": 29,
+ "modify_time": "2017-06-09 16:10:44",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/cujanovic/cve-2016-8610-poc",
+ "star": 22,
+ "commits": 5,
+ "modify_time": "2016-12-28 10:12:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/criteo/vizsql",
+ "star": 22,
+ "commits": 51,
+ "modify_time": "2016-12-13 21:36:38",
+ "last_release": "",
+ "lang": "Scala"
+ },
+ {
+ "link": "https://github.com/criteo/slab",
+ "star": 22,
+ "commits": 222,
+ "modify_time": "2019-11-20 13:11:18",
+ "last_release": "0.4.14",
+ "lang": "Scala"
+ },
+ {
+ "link": "https://github.com/conmarap/website-fingerprinting",
+ "star": 22,
+ "commits": 41,
+ "modify_time": "2019-06-11 20:41:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cogset/shadowsocks",
+ "star": 22,
+ "commits": 18,
+ "modify_time": "2019-01-05 03:21:06",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/cobbr/insecurepowershellhost",
+ "star": 22,
+ "commits": 3,
+ "modify_time": "2017-12-19 03:29:30",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/citypw/suterusu",
+ "star": 22,
+ "commits": 39,
+ "modify_time": "2014-08-18 15:30:21",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cert-polska/nymaim-tools",
+ "star": 22,
+ "commits": 13,
+ "modify_time": "2017-02-13 16:11:42",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/celesteblue-dev/ps4-pkg2usb",
+ "star": 22,
+ "commits": 7,
+ "modify_time": "2018-03-04 22:54:22",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cblichmann/idajava",
+ "star": 22,
+ "commits": 19,
+ "modify_time": "2017-02-15 08:26:43",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/casualx/libex",
+ "star": 22,
+ "commits": 56,
+ "modify_time": "2014-10-08 18:56:24",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/capt-meelo/massmap",
+ "star": 22,
+ "commits": 4,
+ "modify_time": "2019-02-23 08:14:04",
+ "last_release": "",
+ "lang": "XSLT"
+ },
+ {
+ "link": "https://github.com/camoufl4g3/sqli-payload-fuzz3r",
+ "star": 22,
+ "commits": 10,
+ "modify_time": "2015-12-25 08:14:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bronzeme/ssdt_hook_x64",
+ "star": 22,
+ "commits": 1,
+ "modify_time": "2017-03-22 03:02:15",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/brandonprry/vulnerable_xxe",
+ "star": 22,
+ "commits": 3,
+ "modify_time": "2013-08-10 00:21:22",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/braindead-sec/rogue-captive",
+ "star": 22,
+ "commits": 35,
+ "modify_time": "2019-09-25 03:27:16",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/borjamerino/dns-polygraph",
+ "star": 22,
+ "commits": 11,
+ "modify_time": "2019-01-06 06:22:34",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/blazeinfosec/cve-2017-10366_peoplesoft",
+ "star": 22,
+ "commits": 5,
+ "modify_time": "2018-09-04 10:07:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/billy-ellis/arm-gadget-finder",
+ "star": 22,
+ "commits": null,
+ "modify_time": "2018-01-10 09:57:16",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/beatsbears/pkl",
+ "star": 22,
+ "commits": 2,
+ "modify_time": "2018-11-04 02:51:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/beardog108/snow10",
+ "star": 22,
+ "commits": 34,
+ "modify_time": "2018-02-24 04:24:54",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/bb107/winsudo",
+ "star": 22,
+ "commits": 45,
+ "modify_time": "2019-08-10 04:40:46",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/battelle/reductio",
+ "star": 22,
+ "commits": 2,
+ "modify_time": "2017-08-11 02:58:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/asuri-team/dproxy",
+ "star": 22,
+ "commits": 16,
+ "modify_time": "2018-10-31 09:14:09",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/arkhist/hacklinks",
+ "star": 22,
+ "commits": 317,
+ "modify_time": "2018-11-05 19:58:50",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/argilo/nrsc-5",
+ "star": 22,
+ "commits": 20,
+ "modify_time": "2017-09-13 03:03:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/apriorit/simple-antirootkit-sst-unhooker",
+ "star": 22,
+ "commits": 1,
+ "modify_time": "2017-02-26 10:18:43",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ansible/ansible-blog-examples",
+ "star": 22,
+ "commits": 9,
+ "modify_time": "2017-03-03 01:16:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/aloxaf/rbkcrack",
+ "star": 22,
+ "commits": 102,
+ "modify_time": "2019-11-22 21:15:28",
+ "last_release": "v0.2.1",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/almco/panorama",
+ "star": 22,
+ "commits": 14,
+ "modify_time": "2017-02-11 11:12:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/alexmx/insider",
+ "star": 22,
+ "commits": 89,
+ "modify_time": "2018-06-22 14:02:51",
+ "last_release": "v1.0.1",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/aflgo/oss-fuzz",
+ "star": 22,
+ "commits": 1785,
+ "modify_time": "2017-08-24 14:15:20",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/abatchy17/rop-emporium",
+ "star": 22,
+ "commits": 4,
+ "modify_time": "2017-10-25 05:15:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/aatxe/openmaple",
+ "star": 22,
+ "commits": 73,
+ "modify_time": "2014-02-18 15:58:18",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/5z1punch/my_php_kernel_handbook_for_pwn",
+ "star": 22,
+ "commits": 8,
+ "modify_time": "2017-05-25 14:31:04",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/0xsearches/sandcastle",
+ "star": 22,
+ "commits": 73,
+ "modify_time": "2017-06-12 21:25:27",
+ "last_release": "\n 1.2.3\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/0x584a/fuzzxssphp",
+ "star": 22,
+ "commits": 1,
+ "modify_time": "2016-10-23 09:01:27",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://bitbucket.org/lanmaster53/honeybadger",
+ "star": 22,
+ "commits": null,
+ "modify_time": "2016-04-27 21:53:26.437000",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/sorz/ssmanager",
+ "star": 21,
+ "commits": 56,
+ "modify_time": "2017-12-21 22:08:51",
+ "last_release": "v0.2.8",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/alibo/goquiet-shadowsocks-docker",
+ "star": 21,
+ "commits": 13,
+ "modify_time": "2018-10-05 20:03:58",
+ "last_release": "0.2.2",
+ "lang": "Dockerfile"
+ },
+ {
+ "link": "https://github.com/coallaoh/whitenblackbox",
+ "star": 21,
+ "commits": 21,
+ "modify_time": "2019-06-07 05:09:13",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/technowlogy-pushpender/technowlogger",
+ "star": 21,
+ "commits": 82,
+ "modify_time": "2019-12-11 08:09:19",
+ "last_release": "v1.5",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ins1gn1a/pwdlyser-cli",
+ "star": 21,
+ "commits": 136,
+ "modify_time": "2018-07-17 14:03:36",
+ "last_release": "2.5.2",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/shangxinbo/cardinal",
+ "star": 21,
+ "commits": 324,
+ "modify_time": "2017-09-28 05:38:24",
+ "last_release": "2.1.3",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/wrbug/charles-crack",
+ "star": 21,
+ "commits": 3,
+ "modify_time": "2018-11-15 03:15:22",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/ganapati/spaf",
+ "star": 21,
+ "commits": 11,
+ "modify_time": "2014-04-22 13:28:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jofpin/compaxss",
+ "star": 21,
+ "commits": 42,
+ "modify_time": "2015-10-15 20:08:07",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sweetsoftware/ftpkeylogger",
+ "star": 21,
+ "commits": 27,
+ "modify_time": "2014-12-25 17:39:47",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/juliocesarfort/webshotter",
+ "star": 21,
+ "commits": 3,
+ "modify_time": "2015-12-03 08:58:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/0x90/firmware-arsenal",
+ "star": 21,
+ "commits": 8,
+ "modify_time": "2018-04-11 02:09:42",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/mthbernardes/demoniware",
+ "star": 21,
+ "commits": 47,
+ "modify_time": "2016-09-29 15:00:59",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/spiderlabs/cerealbox",
+ "star": 21,
+ "commits": 5,
+ "modify_time": "2011-09-19 17:52:38",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/f-secure/headless-scanner-driver",
+ "star": 21,
+ "commits": 10,
+ "modify_time": "2016-08-11 10:23:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mitre/mitre.github.io",
+ "star": 21,
+ "commits": 81,
+ "modify_time": "2019-11-22 19:52:14",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/reswitched/rcm-modchips",
+ "star": 21,
+ "commits": 3,
+ "modify_time": "2018-05-22 07:44:11",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/functionclub/localproxy",
+ "star": 21,
+ "commits": 2,
+ "modify_time": "2017-07-30 03:04:38",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/awnumar/nixbot",
+ "star": 21,
+ "commits": 1,
+ "modify_time": "2018-07-22 19:56:59",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/shadowsocks/shadowsocks-hub-api",
+ "star": 21,
+ "commits": 23,
+ "modify_time": "2018-10-03 10:28:37",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/bkth/optimize_rce_chakra",
+ "star": 21,
+ "commits": 2,
+ "modify_time": "2019-11-17 23:19:26",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/gwolf3/visshous",
+ "star": 21,
+ "commits": 10,
+ "modify_time": "2019-11-12 06:30:36",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/netindev/allatori-v3.0",
+ "star": 21,
+ "commits": 40,
+ "modify_time": "2018-07-26 16:06:52",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/verabe/veriman",
+ "star": 21,
+ "commits": 41,
+ "modify_time": "2019-11-11 17:02:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/unexpectedby/sqli-dork-repository",
+ "star": 21,
+ "commits": 8,
+ "modify_time": "2018-09-18 00:17:26",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/cacti/documentation",
+ "star": 21,
+ "commits": 257,
+ "modify_time": "2019-12-08 21:36:02",
+ "last_release": "\n release/1.2.8\n ",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/tjetzinger/cloudcrackinstaller",
+ "star": 21,
+ "commits": 14,
+ "modify_time": "2012-09-05 22:12:34",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/initbrain/python-wi-fi-positioning-system",
+ "star": 21,
+ "commits": 29,
+ "modify_time": "2017-04-25 18:37:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/yeahhub/kali-linux-ebooks",
+ "star": 21,
+ "commits": 5,
+ "modify_time": "2019-09-19 03:31:45",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/nyan-x-cat/malwareshell",
+ "star": 21,
+ "commits": 5,
+ "modify_time": "2019-08-17 09:36:17",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/paulmillr/noble-ed25519",
+ "star": 21,
+ "commits": 36,
+ "modify_time": "2019-11-29 04:14:20",
+ "last_release": "\n 0.3.1\n ",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/hash3lizer/wifijammer",
+ "star": 21,
+ "commits": 37,
+ "modify_time": "2019-11-14 04:44:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/z3pp/zfuzz",
+ "star": 21,
+ "commits": 26,
+ "modify_time": "2019-11-24 19:12:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/vallejocc/Hacking-Busybox-Control",
+ "star": 21,
+ "commits": 10,
+ "modify_time": "2015-08-13 11:33:53",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/NewBee119/IoT_bot",
+ "star": 21,
+ "commits": 8,
+ "modify_time": "2017-03-29 03:24:18",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cylance/IDPanel",
+ "star": 21,
+ "commits": 3,
+ "modify_time": "2016-08-03 21:23:03",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/MindPointGroup/stig-cli",
+ "star": 21,
+ "commits": 76,
+ "modify_time": "2018-11-07 19:42:46",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/auth0-blog/rust-api-example",
+ "star": 21,
+ "commits": 9,
+ "modify_time": "2016-04-21 22:19:55",
+ "last_release": "",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/ChiefyChief/router_pwner",
+ "star": 21,
+ "commits": 4,
+ "modify_time": "2018-01-04 19:44:42",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/r-lyeh-archived/moon9",
+ "star": 21,
+ "commits": 167,
+ "modify_time": "2015-05-10 15:32:12",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/csirtgadgets/csirtg-smrt-v1",
+ "star": 21,
+ "commits": 431,
+ "modify_time": "2019-11-01 17:34:41",
+ "last_release": "1.0.10.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cryptomator/cryptomator-mac",
+ "star": 21,
+ "commits": 90,
+ "modify_time": "2019-11-27 12:32:17",
+ "last_release": "\n 1.5.0-beta1\n ",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/zliu-fd/windivertproxy",
+ "star": 21,
+ "commits": 4,
+ "modify_time": "2014-12-25 05:47:16",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/zhaozepeng/safewebview",
+ "star": 21,
+ "commits": 5,
+ "modify_time": "2017-02-10 07:55:34",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/zecopro/wpa-passwords",
+ "star": 21,
+ "commits": 10,
+ "modify_time": "2018-06-15 21:57:58",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/zapotek/cdpsnarf",
+ "star": 21,
+ "commits": 3,
+ "modify_time": "2010-10-13 21:49:42",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/xorpd/fcatalog_client",
+ "star": 21,
+ "commits": 73,
+ "modify_time": "2016-08-19 15:09:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/xinali/penework",
+ "star": 21,
+ "commits": 17,
+ "modify_time": "2018-05-10 08:54:44",
+ "last_release": "",
+ "lang": "Vue"
+ },
+ {
+ "link": "https://github.com/xbased/xhook",
+ "star": 21,
+ "commits": 4,
+ "modify_time": "2016-01-19 05:06:26",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/xazlsec/ctf-project-lists",
+ "star": 21,
+ "commits": 3,
+ "modify_time": "2018-03-01 08:33:32",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/wurstcommander/win10appremove",
+ "star": 21,
+ "commits": 67,
+ "modify_time": "2019-03-03 05:29:29",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/wolfvan/some-samples",
+ "star": 21,
+ "commits": 108,
+ "modify_time": "2017-10-02 10:51:18",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/wizardforcel/kali-linux-cookbook-zh",
+ "star": 21,
+ "commits": 64,
+ "modify_time": "2016-10-06 11:37:37",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/windbgscripts/pykd",
+ "star": 21,
+ "commits": 4,
+ "modify_time": "2015-03-09 21:54:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/warcraft23/virus-and-windows-api-programing",
+ "star": 21,
+ "commits": 1,
+ "modify_time": "2015-07-02 07:00:20",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/v-p-b/similarninja",
+ "star": 21,
+ "commits": 44,
+ "modify_time": "2018-12-10 09:14:17",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/unstabl3/recce",
+ "star": 21,
+ "commits": 50,
+ "modify_time": "2019-12-02 21:17:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/unamer/ctfhelper",
+ "star": 21,
+ "commits": 15,
+ "modify_time": "2018-01-22 08:06:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ucnt/aws-s3-bruteforce",
+ "star": 21,
+ "commits": 153,
+ "modify_time": "2018-11-06 13:20:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/txn2/n2proxy",
+ "star": 21,
+ "commits": 32,
+ "modify_time": "2018-10-22 02:54:50",
+ "last_release": "v1.3.1",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/tuhinshubhra/uboat-panel",
+ "star": 21,
+ "commits": 5,
+ "modify_time": "2018-08-25 23:15:45",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/troydo42/awesome-pen-test",
+ "star": 21,
+ "commits": 10,
+ "modify_time": "2018-03-20 18:57:34",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/threatstream/symhash",
+ "star": 21,
+ "commits": 7,
+ "modify_time": "2016-09-29 19:39:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/thomdixon/saltwatertaffy",
+ "star": 21,
+ "commits": 23,
+ "modify_time": "2017-12-20 17:07:45",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/thomaskeck/pyshellcode",
+ "star": 21,
+ "commits": 25,
+ "modify_time": "2017-01-03 15:08:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/the-c0d3r/pynmap",
+ "star": 21,
+ "commits": 41,
+ "modify_time": "2018-10-13 06:04:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/teamseri0us/pocs",
+ "star": 21,
+ "commits": 125,
+ "modify_time": "2019-10-31 03:55:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/syworks/wifi-harvester",
+ "star": 21,
+ "commits": 12,
+ "modify_time": "2014-03-24 13:00:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/syno3/babymux",
+ "star": 21,
+ "commits": 84,
+ "modify_time": "2018-10-09 14:31:01",
+ "last_release": "v1.3",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/swisskyrepo/whid_toolkit",
+ "star": 21,
+ "commits": 11,
+ "modify_time": "2018-03-13 10:49:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sushi2k/owasp-mstg",
+ "star": 21,
+ "commits": 6243,
+ "modify_time": "2019-12-10 08:22:44",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/stolas/windbg-darktheme",
+ "star": 21,
+ "commits": 2,
+ "modify_time": "2014-07-09 19:00:49",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/stevemcgrath/docker-nessus_scanner",
+ "star": 21,
+ "commits": 47,
+ "modify_time": "2019-11-15 15:37:54",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/status-im/awesome-secure-messaging",
+ "star": 21,
+ "commits": 23,
+ "modify_time": "2019-11-13 04:11:36",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/sslab-gatech/fuzzification",
+ "star": 21,
+ "commits": 4,
+ "modify_time": "2019-08-16 14:31:53",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/sporst/ida-pro-plugins",
+ "star": 21,
+ "commits": 3,
+ "modify_time": "2010-05-08 09:43:39",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/spec-sec/securechat",
+ "star": 21,
+ "commits": 3,
+ "modify_time": "2018-03-13 18:11:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/spchal/hacklu2018",
+ "star": 21,
+ "commits": 40,
+ "modify_time": "2018-10-17 14:58:29",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/sophoslabs/iocs",
+ "star": 21,
+ "commits": 16,
+ "modify_time": "2019-12-09 16:33:35",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/smirnovvad/rbuster",
+ "star": 21,
+ "commits": 24,
+ "modify_time": "2018-11-25 03:02:10",
+ "last_release": "",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/sirpsycho/firecall",
+ "star": 21,
+ "commits": 23,
+ "modify_time": "2018-03-29 12:39:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/simplevulnerabilitymanager/svm",
+ "star": 21,
+ "commits": 128,
+ "modify_time": "2019-12-02 00:10:41",
+ "last_release": "v2.1.1",
+ "lang": "Batchfile"
+ },
+ {
+ "link": "https://github.com/shieldfy/awesome-pentest",
+ "star": 21,
+ "commits": 104,
+ "modify_time": "2015-02-09 20:55:59",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/sharsi1/sublazerwlst",
+ "star": 21,
+ "commits": 7,
+ "modify_time": "2018-06-16 13:28:00",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/shakenetwork/onionscan",
+ "star": 21,
+ "commits": 130,
+ "modify_time": "2017-02-25 17:10:31",
+ "last_release": "\n OnionScan-0.2\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/shadowsocks-plus/shadowsocks-plus-win",
+ "star": 21,
+ "commits": 37,
+ "modify_time": "2017-02-28 06:10:53",
+ "last_release": "v0.1.2.5",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/sensepost/common-substr",
+ "star": 21,
+ "commits": 10,
+ "modify_time": "2019-02-10 11:23:03",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/secwiki/wooyun_articles",
+ "star": 21,
+ "commits": 7,
+ "modify_time": "2016-08-04 02:59:35",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/secwiki/webshell",
+ "star": 21,
+ "commits": 281,
+ "modify_time": "2015-10-19 15:48:43",
+ "last_release": "\n v-2015-07-20\n ",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/securityobscurity/cve-2015-0313",
+ "star": 21,
+ "commits": 4,
+ "modify_time": "2015-03-24 21:42:05",
+ "last_release": "",
+ "lang": "ActionScript"
+ },
+ {
+ "link": "https://github.com/secbone/docker-ss-libev",
+ "star": 21,
+ "commits": 60,
+ "modify_time": "2019-11-11 08:51:17",
+ "last_release": "\n 3.3.3\n ",
+ "lang": "Dockerfile"
+ },
+ {
+ "link": "https://github.com/sec0ps/va-pt",
+ "star": 21,
+ "commits": 716,
+ "modify_time": "2019-07-25 02:02:04",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/saucer-man/penetration-script",
+ "star": 21,
+ "commits": 61,
+ "modify_time": "2019-11-27 07:16:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sanketkarpe/anwi",
+ "star": 21,
+ "commits": 6,
+ "modify_time": "2018-08-03 14:03:25",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/sam-b/z3-stuff",
+ "star": 21,
+ "commits": 13,
+ "modify_time": "2016-03-21 22:54:12",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sadeghhayeri/lol-hacking",
+ "star": 21,
+ "commits": 11,
+ "modify_time": "2019-02-11 18:12:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rustybird/qubes-split-browser",
+ "star": 21,
+ "commits": 233,
+ "modify_time": "2019-11-06 18:08:51",
+ "last_release": "\n v0.8.3\n ",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/ropnop/pentest_charts",
+ "star": 21,
+ "commits": 9,
+ "modify_time": "2019-01-28 04:25:16",
+ "last_release": "",
+ "lang": "Smarty"
+ },
+ {
+ "link": "https://github.com/rootup/phdays9",
+ "star": 21,
+ "commits": 6,
+ "modify_time": "2019-05-24 13:36:54",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/roo7break/serialator",
+ "star": 21,
+ "commits": 6,
+ "modify_time": "2016-07-20 14:14:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/riscybusiness/jadoube",
+ "star": 21,
+ "commits": 13,
+ "modify_time": "2017-07-07 20:19:05",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/ridter/cs_custom_404",
+ "star": 21,
+ "commits": 1,
+ "modify_time": "2019-03-21 10:02:46",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/rgl/visual-studio-community-vagrant",
+ "star": 21,
+ "commits": 168,
+ "modify_time": "2019-12-06 21:00:49",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/rfalke/decompiler-subjects",
+ "star": 21,
+ "commits": 151,
+ "modify_time": "2018-11-15 07:15:10",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/retme7/launchanywhere_poc_by_retme_bug_7699048",
+ "star": 21,
+ "commits": 3,
+ "modify_time": "2014-08-19 07:32:32",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/reflare/afl-monitor",
+ "star": 21,
+ "commits": 24,
+ "modify_time": "2017-02-08 10:47:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rdkr/oniongen-go",
+ "star": 21,
+ "commits": 6,
+ "modify_time": "2017-04-15 12:46:15",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/rcenvironment/rce",
+ "star": 21,
+ "commits": 12,
+ "modify_time": "2019-11-29 12:33:56",
+ "last_release": "release-10.0.0",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/rapid7/msfrpc-client",
+ "star": 21,
+ "commits": 18,
+ "modify_time": "2018-05-15 22:03:01",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/ramshazar/orangetsai-springboot-actuator-poc",
+ "star": 21,
+ "commits": 11,
+ "modify_time": "2019-01-20 13:26:26",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/raikia/get-reconinfo",
+ "star": 21,
+ "commits": 7,
+ "modify_time": "2017-01-25 10:14:49",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/r3mlab/datajournalism-resources",
+ "star": 21,
+ "commits": 18,
+ "modify_time": "2019-06-18 15:31:00",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/pyke369/exabgp-helpers",
+ "star": 21,
+ "commits": 24,
+ "modify_time": "2019-10-24 10:50:38",
+ "last_release": "\n 1.3.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pwelch/virustotal_api",
+ "star": 21,
+ "commits": 47,
+ "modify_time": "2019-09-04 16:18:45",
+ "last_release": "\n v0.4.0\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/pure-l0g1c/keylogger",
+ "star": 21,
+ "commits": 12,
+ "modify_time": "2019-01-31 22:49:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pure-l0g1c/aircrack",
+ "star": 21,
+ "commits": 31,
+ "modify_time": "2017-08-19 15:02:49",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/psrcek/kali-mitm-evil-twin",
+ "star": 21,
+ "commits": 5,
+ "modify_time": "2016-01-23 18:07:29",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/portswigger/json-web-tokens",
+ "star": 21,
+ "commits": 181,
+ "modify_time": "2019-11-07 14:28:41",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/portswigger/freddy-deserialization-bug-finder",
+ "star": 21,
+ "commits": 45,
+ "modify_time": "2019-09-13 13:05:08",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/pirobot/pi_trees",
+ "star": 21,
+ "commits": 71,
+ "modify_time": "2019-10-18 00:41:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/peterfillmore/rfidiot",
+ "star": 21,
+ "commits": 78,
+ "modify_time": "2015-09-07 07:09:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/pastcompute/lca2015-radare2-tutorial",
+ "star": 21,
+ "commits": 17,
+ "modify_time": "2015-01-15 03:03:45",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ouroboros/juusankoubou",
+ "star": 21,
+ "commits": 171,
+ "modify_time": "2019-09-30 16:55:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/osandamalith/vbshellcode",
+ "star": 21,
+ "commits": 5,
+ "modify_time": "2016-07-31 20:24:54",
+ "last_release": "",
+ "lang": "Visual Basic .NET"
+ },
+ {
+ "link": "https://github.com/odedlaz/uberlogs",
+ "star": 21,
+ "commits": 92,
+ "modify_time": "2017-04-09 14:03:25",
+ "last_release": "\n v0.0.18\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nyx0/dll-inj3cti0n",
+ "star": 21,
+ "commits": 8,
+ "modify_time": "2015-01-25 05:14:11",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/nviso-be/nexus_5_bootloader_unpacker",
+ "star": 21,
+ "commits": 23,
+ "modify_time": "2017-08-05 20:43:01",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/nlitsme/idascripts",
+ "star": 21,
+ "commits": 13,
+ "modify_time": "2019-09-11 20:25:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nguyenkhong/cracknetdrive3",
+ "star": 21,
+ "commits": 9,
+ "modify_time": "2019-04-23 17:01:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/neurobin/letsacme",
+ "star": 21,
+ "commits": 136,
+ "modify_time": "2017-04-19 12:46:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/netxfly/xsec-ssh-firewall",
+ "star": 21,
+ "commits": 7,
+ "modify_time": "2017-02-21 10:59:35",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/neo23x0/prisma",
+ "star": 21,
+ "commits": 15,
+ "modify_time": "2015-09-27 05:17:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/neargle/secnewsbak",
+ "star": 21,
+ "commits": 9,
+ "modify_time": "2017-06-17 03:22:30",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/mtxiaowangzi/java-ee-vulnweb",
+ "star": 21,
+ "commits": 4,
+ "modify_time": "2018-04-20 15:36:55",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/mstxq17/dbleakscan",
+ "star": 21,
+ "commits": 6,
+ "modify_time": "2018-02-05 07:43:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/morpav/zceq_solver",
+ "star": 21,
+ "commits": 55,
+ "modify_time": "2017-01-06 17:03:35",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/mojtabatajik/besafe",
+ "star": 21,
+ "commits": null,
+ "modify_time": "2018-08-10 06:54:25",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/misp/misp-workbench",
+ "star": 21,
+ "commits": 71,
+ "modify_time": "2016-10-19 16:22:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mikolalysenko/lpf-ctf",
+ "star": 21,
+ "commits": 14,
+ "modify_time": "2014-09-11 15:46:47",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/mikkolehtisalo/gssapi-proxy",
+ "star": 21,
+ "commits": 2,
+ "modify_time": "2014-04-27 17:00:51",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/microwave89/drvtricks",
+ "star": 21,
+ "commits": 16,
+ "modify_time": "2017-10-06 23:07:29",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/microsoft/firewalleventmonitor",
+ "star": 21,
+ "commits": 6,
+ "modify_time": "2017-11-02 22:30:55",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/mdsecresearch/thriftdecoder",
+ "star": 21,
+ "commits": 3,
+ "modify_time": "2017-12-07 11:15:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mariusbalcytis/gentle-force",
+ "star": 21,
+ "commits": 12,
+ "modify_time": "2019-02-20 22:30:44",
+ "last_release": "\n 0.3.0\n ",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/marcolivierbouch/dirbpy",
+ "star": 21,
+ "commits": 142,
+ "modify_time": "2019-09-16 20:48:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/manhnho/shellsum",
+ "star": 21,
+ "commits": 7,
+ "modify_time": "2019-07-18 05:49:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/malwares/malware",
+ "star": 21,
+ "commits": 9,
+ "modify_time": "2016-11-12 08:34:39",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/lynnux/holyshit",
+ "star": 21,
+ "commits": 40,
+ "modify_time": "2014-08-05 15:31:13",
+ "last_release": "\n 0.3.3\n ",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/longtian/cache_attack_in_javascript",
+ "star": 21,
+ "commits": 20,
+ "modify_time": "2015-05-20 01:20:19",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/linuxlite/spectre-meltdown-checker-automated",
+ "star": 21,
+ "commits": 8,
+ "modify_time": "2018-01-17 07:19:13",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/kudelskisecurity/check_all_apks",
+ "star": 21,
+ "commits": 2,
+ "modify_time": "2017-08-08 06:34:20",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kslgroup/threadmap",
+ "star": 21,
+ "commits": 4,
+ "modify_time": "2017-09-21 14:04:08",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/krrr/wstan",
+ "star": 21,
+ "commits": 113,
+ "modify_time": "2017-11-07 01:04:14",
+ "last_release": "v0.4",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/khai-tran/burpjdser",
+ "star": 21,
+ "commits": 13,
+ "modify_time": "2015-04-08 02:30:17",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/k0keoyo/cve-2015-2546-exploit",
+ "star": 21,
+ "commits": 5,
+ "modify_time": "2017-05-25 14:27:39",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/jzadeh/aktaion2",
+ "star": 21,
+ "commits": 106,
+ "modify_time": "2017-12-19 03:51:51",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/joda32/certcrunchy",
+ "star": 21,
+ "commits": 34,
+ "modify_time": "2019-05-27 05:44:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jfernandez/ddos-deflate",
+ "star": 21,
+ "commits": 14,
+ "modify_time": "2011-01-31 18:06:03",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/jerome-ps/jn516xsniffer",
+ "star": 21,
+ "commits": 44,
+ "modify_time": "2018-04-30 20:01:36",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jenkinsci-cert/security-218",
+ "star": 21,
+ "commits": 17,
+ "modify_time": "2017-04-26 21:01:33",
+ "last_release": "",
+ "lang": "Groovy"
+ },
+ {
+ "link": "https://github.com/jasklabs/blackhat2017",
+ "star": 21,
+ "commits": 7,
+ "modify_time": "2017-07-19 04:34:00",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/jackullrich/trunpe",
+ "star": 21,
+ "commits": 10,
+ "modify_time": "2019-09-26 19:43:15",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ivmachiavelli/osint_opendata",
+ "star": 21,
+ "commits": 15,
+ "modify_time": "2018-01-04 12:34:32",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ins1gn1a/pwdlyser",
+ "star": 21,
+ "commits": 136,
+ "modify_time": "2018-07-17 14:03:36",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ikoniaris/kippo-malware",
+ "star": 21,
+ "commits": 23,
+ "modify_time": "2014-03-24 22:27:41",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/RealBearcat/CVE-2018-1297",
+ "star": 21,
+ "commits": 16,
+ "modify_time": "2018-03-09 11:35:18",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/holmesian/gh0st-light",
+ "star": 21,
+ "commits": 4,
+ "modify_time": "2015-12-31 05:13:57",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/hash3lizer/subrake",
+ "star": 21,
+ "commits": 40,
+ "modify_time": "2019-07-23 05:22:03",
+ "last_release": "v2.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/harris21/afot",
+ "star": 21,
+ "commits": 5,
+ "modify_time": "2017-09-25 14:44:57",
+ "last_release": "v1.0.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hackerdom/phdctf-2017",
+ "star": 21,
+ "commits": 250,
+ "modify_time": "2017-05-13 00:41:38",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hackedteam/vector-silent",
+ "star": 21,
+ "commits": 5,
+ "modify_time": "2013-11-15 15:33:25",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hack-all-the-things/charsetinspect",
+ "star": 21,
+ "commits": 3,
+ "modify_time": "2016-06-23 16:11:23",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gwen001/vhost-brute",
+ "star": 21,
+ "commits": 9,
+ "modify_time": "2017-11-23 15:09:01",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/gtoad/android_anti_debug",
+ "star": 21,
+ "commits": 3,
+ "modify_time": "2018-12-27 11:42:33",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/gnolizuh/quictun",
+ "star": 21,
+ "commits": 11,
+ "modify_time": "2018-05-17 11:11:57",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/gh0x0st/buffer_overflow",
+ "star": 21,
+ "commits": 12,
+ "modify_time": "2019-10-25 16:26:53",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gh0st-404/zs-personal-infiltration-syste",
+ "star": 21,
+ "commits": 49,
+ "modify_time": "2019-09-21 06:21:12",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/fuzzysecurity/capstonekeystone-powershell",
+ "star": 21,
+ "commits": 7,
+ "modify_time": "2016-11-15 12:38:11",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/funilrys/funceble",
+ "star": 21,
+ "commits": 251,
+ "modify_time": "2018-03-13 23:00:34",
+ "last_release": "1.4.0",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/flarn2006/bhstools",
+ "star": 21,
+ "commits": 155,
+ "modify_time": "2019-10-24 19:31:35",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fjh658/hexrayspytools",
+ "star": 21,
+ "commits": 189,
+ "modify_time": "2018-10-22 08:00:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/fabiobaroni/awesome-pentest",
+ "star": 21,
+ "commits": 142,
+ "modify_time": "2015-10-14 01:38:18",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/fabaff/fsl-test-bench",
+ "star": 21,
+ "commits": 1008,
+ "modify_time": "2019-10-29 18:38:32",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/f5networks/f5-google-gdm-templates",
+ "star": 21,
+ "commits": 92,
+ "modify_time": "2019-12-05 22:10:01",
+ "last_release": "v3.2.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/extremecoders-re/go-dispatch-proxy",
+ "star": 21,
+ "commits": 12,
+ "modify_time": "2019-02-25 18:05:55",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/ericsson/ecaudit",
+ "star": 21,
+ "commits": 137,
+ "modify_time": "2019-11-24 10:43:44",
+ "last_release": "\n ecaudit_c3.11-2.2.2\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/equalitie/bothound",
+ "star": 21,
+ "commits": 178,
+ "modify_time": "2017-01-10 13:36:55",
+ "last_release": "",
+ "lang": "Jupyter Notebook"
+ },
+ {
+ "link": "https://github.com/empier/memoryeditor",
+ "star": 21,
+ "commits": 13,
+ "modify_time": "2019-08-13 14:30:47",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/edwig/sslsocket",
+ "star": 21,
+ "commits": 11,
+ "modify_time": "2018-12-12 08:49:32",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/edoverflow/security-policy-specification-standard",
+ "star": 21,
+ "commits": 4,
+ "modify_time": "2018-01-29 16:24:18",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/duchengyao/hkdvr_login",
+ "star": 21,
+ "commits": 16,
+ "modify_time": "2019-05-17 09:46:37",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dsmatter/brootus",
+ "star": 21,
+ "commits": 15,
+ "modify_time": "2013-04-24 10:31:34",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/droberson/icmp-backdoor",
+ "star": 21,
+ "commits": 16,
+ "modify_time": "2018-10-22 18:04:04",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/drbeni/malquarium",
+ "star": 21,
+ "commits": 70,
+ "modify_time": "2019-05-06 17:50:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/digitaldisarray/osint-tools",
+ "star": 21,
+ "commits": 8,
+ "modify_time": "2019-09-27 21:40:47",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/digitalbond/ctf-challenges",
+ "star": 21,
+ "commits": 3,
+ "modify_time": "2016-08-19 21:24:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dialogs/electron-ssl-pinning",
+ "star": 21,
+ "commits": 16,
+ "modify_time": "2019-10-21 21:52:42",
+ "last_release": "\n v1.0.0\n ",
+ "lang": "TypeScript"
+ },
+ {
+ "link": "https://github.com/dheiland-r7/snmp",
+ "star": 21,
+ "commits": 4,
+ "modify_time": "2019-11-08 17:57:21",
+ "last_release": "",
+ "lang": "Perl"
+ },
+ {
+ "link": "https://github.com/dfir-it/supreme-backdoor-factory",
+ "star": 21,
+ "commits": 1,
+ "modify_time": "2019-02-26 19:22:08",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/deeponion/deeponion",
+ "star": 21,
+ "commits": 16698,
+ "modify_time": "2019-12-09 23:40:17",
+ "last_release": "v2.0.5",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/decalage2/oledump-contrib",
+ "star": 21,
+ "commits": 11,
+ "modify_time": "2015-07-12 13:53:52",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/dan7800/vulnerableandroidapporacle",
+ "star": 21,
+ "commits": 251,
+ "modify_time": "2018-07-16 12:04:20",
+ "last_release": "",
+ "lang": "Smali"
+ },
+ {
+ "link": "https://github.com/cyclaero/void-zones-tools",
+ "star": 21,
+ "commits": 45,
+ "modify_time": "2019-08-06 20:33:05",
+ "last_release": "v1.0.2",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/cr4sh/prl_guest_to_host",
+ "star": 21,
+ "commits": 4,
+ "modify_time": "2014-11-14 02:08:42",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/consensys/evm-analyzer-benchmark-suite",
+ "star": 21,
+ "commits": 17,
+ "modify_time": "2018-08-30 23:21:00",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/codereba/netmon",
+ "star": 21,
+ "commits": 8,
+ "modify_time": "2018-11-09 00:50:14",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/codeclimate/codeclimate-phpcodesniffer",
+ "star": 21,
+ "commits": 95,
+ "modify_time": "2018-08-29 17:15:54",
+ "last_release": "\n b163\n ",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/codahale/grpc-proxy",
+ "star": 21,
+ "commits": 108,
+ "modify_time": "2017-12-23 20:04:20",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/codahale/aes-gcm-siv",
+ "star": 21,
+ "commits": 141,
+ "modify_time": "2019-04-18 03:28:33",
+ "last_release": "\n v0.4.3\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/circl/pcapdj",
+ "star": 21,
+ "commits": 33,
+ "modify_time": "2017-08-25 19:56:06",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/christhecoolhut/instruction-stomp",
+ "star": 21,
+ "commits": 7,
+ "modify_time": "2019-05-10 21:05:24",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/chef-koch/bypass-adblockers",
+ "star": 21,
+ "commits": 13,
+ "modify_time": "2019-11-21 09:48:39",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/carlpulley/volatility",
+ "star": 21,
+ "commits": 176,
+ "modify_time": "2013-08-29 17:02:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bringhurst/xnufuzz",
+ "star": 21,
+ "commits": 4,
+ "modify_time": "2010-03-03 12:24:59",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/brenns10/pywall",
+ "star": 21,
+ "commits": 279,
+ "modify_time": "2015-04-28 03:37:46",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/botherder/snoopdroid",
+ "star": 21,
+ "commits": 39,
+ "modify_time": "2019-08-12 15:24:42",
+ "last_release": "\n v2.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/beerisgood/windows10_hardening",
+ "star": 21,
+ "commits": 56,
+ "modify_time": "2019-12-08 12:20:59",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/beched/abi-decompiler",
+ "star": 21,
+ "commits": 3,
+ "modify_time": "2019-06-15 10:27:01",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/audibleblink/doubletap",
+ "star": 21,
+ "commits": null,
+ "modify_time": "2019-03-07 02:43:52",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/assafmo/istorexit",
+ "star": 21,
+ "commits": 50,
+ "modify_time": "2019-07-30 06:38:10",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/arpitn30/nipper-ng",
+ "star": 21,
+ "commits": 4,
+ "modify_time": "2017-02-20 17:09:07",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/appsecco/winmanipulate",
+ "star": 21,
+ "commits": 3,
+ "modify_time": "2016-12-22 09:02:04",
+ "last_release": "",
+ "lang": "Visual Basic .NET"
+ },
+ {
+ "link": "https://github.com/appsecco/sqlinjection-training-app",
+ "star": 21,
+ "commits": 11,
+ "modify_time": "2019-06-04 10:20:57",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/apache-labor/labor",
+ "star": 21,
+ "commits": 327,
+ "modify_time": "2019-12-02 13:36:27",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/aozhimin/ios-reverse-engineering-presentation",
+ "star": 21,
+ "commits": 3,
+ "modify_time": "2017-02-10 10:34:16",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/aozhimin/ios-monitor-resources",
+ "star": 21,
+ "commits": 6,
+ "modify_time": "2017-05-28 06:09:32",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ankokuty/hakoniwabadstore",
+ "star": 21,
+ "commits": 22,
+ "modify_time": "2019-02-04 05:04:40",
+ "last_release": "v1.1",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/angela-d/autohosts",
+ "star": 21,
+ "commits": 80,
+ "modify_time": "2019-10-23 22:35:38",
+ "last_release": "3.0.1",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/alphadelta/png-mask",
+ "star": 21,
+ "commits": 18,
+ "modify_time": "2016-01-02 10:29:57",
+ "last_release": "v1.0.0-alpha.4",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/alcarl/nfcproxy",
+ "star": 21,
+ "commits": 8,
+ "modify_time": "2018-02-27 16:34:37",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/al-homedawy/injector",
+ "star": 21,
+ "commits": 7,
+ "modify_time": "2017-10-29 11:03:14",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/adamcaudill/curvelock",
+ "star": 21,
+ "commits": 40,
+ "modify_time": "2015-12-10 08:25:56",
+ "last_release": "v0.2.0",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/acutronicrobotics/mara_threat_model",
+ "star": 21,
+ "commits": 6,
+ "modify_time": "2019-09-03 12:37:39",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/7dog7/masscan_to_nmap",
+ "star": 21,
+ "commits": 23,
+ "modify_time": "2019-10-11 09:34:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/55-aa/cve-2015-0057",
+ "star": 21,
+ "commits": 34,
+ "modify_time": "2016-09-13 00:12:50",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/0xroot/whitesnow",
+ "star": 21,
+ "commits": 11,
+ "modify_time": "2013-02-22 17:55:59",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/0x09al/my-exploits",
+ "star": 21,
+ "commits": 7,
+ "modify_time": "2018-10-23 12:11:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/quark-engine/quark-engine",
+ "star": 20,
+ "commits": 201,
+ "modify_time": "2019-12-06 03:59:50",
+ "last_release": "v19.10",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/beardog108/onionr",
+ "star": 20,
+ "commits": 1404,
+ "modify_time": "2019-12-10 10:46:36",
+ "last_release": "\n 0.0.1\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/contextualist/proxlet",
+ "star": 20,
+ "commits": 3,
+ "modify_time": "2019-06-04 03:14:54",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/naveenrudra/rttm",
+ "star": 20,
+ "commits": 244,
+ "modify_time": "2019-11-12 01:04:07",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/pwn20wndstuff/pwn20wndstuff.github.io",
+ "star": 20,
+ "commits": 1,
+ "modify_time": "2018-06-07 07:33:43",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/tostapunk/pc-control-telegram-bot",
+ "star": 20,
+ "commits": 97,
+ "modify_time": "2018-09-13 21:02:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/scriptingxss/owasp-fstm",
+ "star": 20,
+ "commits": 4,
+ "modify_time": "2019-11-01 08:22:58",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/netik/dc27_badge",
+ "star": 20,
+ "commits": 1111,
+ "modify_time": "2019-08-12 18:55:58",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/natescarlet/gfwlist.acl",
+ "star": 20,
+ "commits": 163,
+ "modify_time": "2019-12-01 06:21:30",
+ "last_release": "2019.11.05",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/0xkira/pwn-dash-docset",
+ "star": 20,
+ "commits": 11,
+ "modify_time": "2019-07-02 14:09:09",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/alpheratzteam/obfuscator",
+ "star": 20,
+ "commits": 15,
+ "modify_time": "2019-10-10 20:06:33",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/mephi42/ida-kallsyms",
+ "star": 20,
+ "commits": 13,
+ "modify_time": "2019-10-27 12:12:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/foxhex0ne/slides",
+ "star": 20,
+ "commits": 3,
+ "modify_time": "2019-11-08 00:29:54",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/hyuunnn/ida_python_scripts",
+ "star": 20,
+ "commits": 79,
+ "modify_time": "2018-07-23 04:41:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nogoegst/onionize",
+ "star": 20,
+ "commits": 135,
+ "modify_time": "2019-01-27 20:55:33",
+ "last_release": "\n v4.2.0\n ",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/aress31/flarequench",
+ "star": 20,
+ "commits": 31,
+ "modify_time": "2019-09-26 13:07:13",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/inndy/formatstring-exploit",
+ "star": 20,
+ "commits": 5,
+ "modify_time": "2017-03-22 09:10:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sniperoj/attack-defense-platform",
+ "star": 20,
+ "commits": 24,
+ "modify_time": "2018-10-29 22:23:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/daimler/sechub",
+ "star": 20,
+ "commits": 156,
+ "modify_time": "2019-12-09 15:47:11",
+ "last_release": "v0.17.0-client",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/casework/CASE",
+ "star": 20,
+ "commits": 155,
+ "modify_time": "2019-05-13 21:38:23",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/ulexec/WindowsMalwareSourceCode",
+ "star": 20,
+ "commits": 2,
+ "modify_time": "2016-10-15 01:53:15",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/unexpectedBy/Automated-Malware-Analysis-List",
+ "star": 20,
+ "commits": 9,
+ "modify_time": "2017-03-26 19:18:57",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/boogie-org/symbooglix",
+ "star": 20,
+ "commits": 1215,
+ "modify_time": "2018-04-15 21:16:39",
+ "last_release": "\n icst16-snapshot-6\n ",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/UTSA-cyber/sceadan",
+ "star": 20,
+ "commits": 223,
+ "modify_time": "2014-11-04 22:08:54",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/takeshixx/nmap-scripts",
+ "star": 20,
+ "commits": 12,
+ "modify_time": "2017-03-09 20:51:50",
+ "last_release": "",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/AonCyberLabs/mbedtls-fuzz",
+ "star": 20,
+ "commits": 13,
+ "modify_time": "2016-09-09 04:39:25",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/thanasisk/go-ssh-cracker",
+ "star": 20,
+ "commits": 37,
+ "modify_time": "2016-09-08 14:14:06",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/FSecureLABS/captcha_cracking",
+ "star": 20,
+ "commits": 9,
+ "modify_time": "2019-01-17 10:25:21",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/aws-samples/aws-redshift-spectrum-poc",
+ "star": 20,
+ "commits": 29,
+ "modify_time": "2019-04-09 00:06:46",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/zznop/binjago",
+ "star": 20,
+ "commits": 17,
+ "modify_time": "2019-07-06 21:45:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ztrix/idascript",
+ "star": 20,
+ "commits": 11,
+ "modify_time": "2017-01-25 17:53:27",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zoebear/radia",
+ "star": 20,
+ "commits": 5,
+ "modify_time": "2017-08-23 02:16:36",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/zjjno/cornerstonehook",
+ "star": 20,
+ "commits": 1,
+ "modify_time": "2018-05-04 01:17:44",
+ "last_release": "",
+ "lang": "Objective-C"
+ },
+ {
+ "link": "https://github.com/zhuhuibeishadiao/drivermaper",
+ "star": 20,
+ "commits": 2,
+ "modify_time": "2018-08-26 05:20:52",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/zhongyang219/simplenotepad",
+ "star": 20,
+ "commits": 20,
+ "modify_time": "2019-04-01 03:59:58",
+ "last_release": "V1.25",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/zhl2008/ctf-framework",
+ "star": 20,
+ "commits": 76,
+ "modify_time": "2018-11-08 15:02:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/zerokilo/pdbdumpwv",
+ "star": 20,
+ "commits": 2,
+ "modify_time": "2019-09-12 17:14:43",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/yujokang/epex",
+ "star": 20,
+ "commits": 12,
+ "modify_time": "2016-09-11 21:01:26",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/youngyangyang04/nosqlinjectionattackdemo",
+ "star": 20,
+ "commits": 18,
+ "modify_time": "2016-11-26 08:36:44",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/yoshifan/ram-watch-cheat-engine",
+ "star": 20,
+ "commits": 161,
+ "modify_time": "2018-10-06 05:42:09",
+ "last_release": "\n 0.3\n ",
+ "lang": "Lua"
+ },
+ {
+ "link": "https://github.com/xiaoqx/pocs",
+ "star": 20,
+ "commits": 61,
+ "modify_time": "2018-07-25 03:57:20",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/xeushack/fake-login-page",
+ "star": 20,
+ "commits": 4,
+ "modify_time": "2017-03-21 15:46:05",
+ "last_release": "",
+ "lang": "CSS"
+ },
+ {
+ "link": "https://github.com/x-f1v3/cve-2019-3396",
+ "star": 20,
+ "commits": 8,
+ "modify_time": "2019-04-09 08:37:19",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/watterott/candiy-shield",
+ "star": 20,
+ "commits": 9,
+ "modify_time": "2019-11-21 09:02:14",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/w181496/fuckfastcgi",
+ "star": 20,
+ "commits": 5,
+ "modify_time": "2019-06-07 21:11:22",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/vortexau/mooscan",
+ "star": 20,
+ "commits": null,
+ "modify_time": "2018-08-29 21:55:45",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/virustotal/vt-go",
+ "star": 20,
+ "commits": 44,
+ "modify_time": "2019-12-09 09:30:10",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/vagabondan/ric-nomp",
+ "star": 20,
+ "commits": 575,
+ "modify_time": "2017-11-26 07:06:38",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/undefinedd/extract0r-",
+ "star": 20,
+ "commits": 2,
+ "modify_time": "2018-01-05 04:42:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ukncsc/mail-check",
+ "star": 20,
+ "commits": 7,
+ "modify_time": "2018-10-05 11:36:15",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/tunnelshade/pocuito",
+ "star": 20,
+ "commits": 17,
+ "modify_time": "2016-12-01 09:59:25",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/tum-i22/munch",
+ "star": 20,
+ "commits": 183,
+ "modify_time": "2019-02-22 12:57:28",
+ "last_release": "",
+ "lang": "Makefile"
+ },
+ {
+ "link": "https://github.com/trullj/sticky-keys-scanner",
+ "star": 20,
+ "commits": 5,
+ "modify_time": "2016-09-26 14:58:27",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/topolik/ois-dos",
+ "star": 20,
+ "commits": 4,
+ "modify_time": "2016-10-21 20:16:07",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/toolsprods/sniffvpn",
+ "star": 20,
+ "commits": 15,
+ "modify_time": "2016-07-18 17:43:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tongzeyu/hooksysenter",
+ "star": 20,
+ "commits": 2,
+ "modify_time": "2014-12-05 05:50:17",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/thisissecurity/sinkhole",
+ "star": 20,
+ "commits": 22,
+ "modify_time": "2018-10-04 14:21:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/theredspy15/multi-go",
+ "star": 20,
+ "commits": 290,
+ "modify_time": "2019-11-08 03:28:29",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/terencechow/pwnedpasswords",
+ "star": 20,
+ "commits": 20,
+ "modify_time": "2019-04-23 00:17:30",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/techbliss/x64dbg_script_editor",
+ "star": 20,
+ "commits": 67,
+ "modify_time": "2017-10-26 14:10:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/tafia/hyper-proxy",
+ "star": 20,
+ "commits": 30,
+ "modify_time": "2019-09-02 03:56:20",
+ "last_release": "\n v0.5.1\n ",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/sweetsoftware/simplebackdoor",
+ "star": 20,
+ "commits": 6,
+ "modify_time": "2014-06-22 11:20:19",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/stypr/ctf",
+ "star": 20,
+ "commits": 23,
+ "modify_time": "2016-03-07 08:10:12",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/staaldraad/metasploit",
+ "star": 20,
+ "commits": 9,
+ "modify_time": "2013-07-15 18:18:16",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/sslmate/ct-honeybee",
+ "star": 20,
+ "commits": 54,
+ "modify_time": "2019-06-29 16:27:05",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/spacepatcher/firehol-ip-aggregator",
+ "star": 20,
+ "commits": 210,
+ "modify_time": "2019-01-28 20:59:38",
+ "last_release": "v2.0.1",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/snifer/l4bsforandroid",
+ "star": 20,
+ "commits": 3,
+ "modify_time": "2014-09-04 05:25:22",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/slowmist/awesome-blockchain-bug-bounty",
+ "star": 20,
+ "commits": 2,
+ "modify_time": "2019-02-22 08:52:05",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/skocur/image-cipher",
+ "star": 20,
+ "commits": 83,
+ "modify_time": "2019-08-14 13:38:02",
+ "last_release": "v0.9.0",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/skepticfx/subquest",
+ "star": 20,
+ "commits": 106,
+ "modify_time": "2019-08-16 07:03:43",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/sinkmanu/cookiescanner",
+ "star": 20,
+ "commits": 6,
+ "modify_time": "2015-12-30 12:02:13",
+ "last_release": "\n v0.2\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/silentsignal/sslproxy",
+ "star": 20,
+ "commits": 34,
+ "modify_time": "2018-07-05 15:31:45",
+ "last_release": "",
+ "lang": "Erlang"
+ },
+ {
+ "link": "https://github.com/shwetankarora/gsm-packets-analysis-framework",
+ "star": 20,
+ "commits": 10,
+ "modify_time": "2016-06-02 19:59:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/sensepost/squeeza",
+ "star": 20,
+ "commits": 1,
+ "modify_time": "2012-02-10 12:37:48",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/sensepost/punch-q",
+ "star": 20,
+ "commits": 36,
+ "modify_time": "2019-09-09 07:34:39",
+ "last_release": "1.1.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/securitymb/burp-exceptions",
+ "star": 20,
+ "commits": 8,
+ "modify_time": "2017-03-20 21:18:25",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/securityinnovation/ofxpostern",
+ "star": 20,
+ "commits": 58,
+ "modify_time": "2018-10-31 04:41:37",
+ "last_release": "v0.2.0",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/secrary/findloop",
+ "star": 20,
+ "commits": 7,
+ "modify_time": "2019-03-30 14:23:52",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/sampi/create-react-app-hack",
+ "star": 20,
+ "commits": 12,
+ "modify_time": "2018-04-22 14:32:31",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/samhooke/steganography",
+ "star": 20,
+ "commits": 145,
+ "modify_time": "2013-05-03 10:14:58",
+ "last_release": "",
+ "lang": "MATLAB"
+ },
+ {
+ "link": "https://github.com/saelo/33c3ctf-repl",
+ "star": 20,
+ "commits": 1,
+ "modify_time": "2016-12-31 14:35:56",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/rub-nds/joseph",
+ "star": 20,
+ "commits": 221,
+ "modify_time": "2019-02-02 11:14:31",
+ "last_release": "1.0.2",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/rtrouton/create_macos_recovery",
+ "star": 20,
+ "commits": 6,
+ "modify_time": "2019-11-04 16:07:20",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/rohitjoshi9023/brutal-wordlist-generator",
+ "star": 20,
+ "commits": 18,
+ "modify_time": "2017-10-31 15:57:16",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/revspbird/hightlight",
+ "star": 20,
+ "commits": 11,
+ "modify_time": "2019-08-26 05:44:08",
+ "last_release": "02",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/reclassnet/reclass.net-frostbiteplugin",
+ "star": 20,
+ "commits": 29,
+ "modify_time": "2019-06-18 18:25:08",
+ "last_release": "v1.0.1",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/rd17/detor",
+ "star": 20,
+ "commits": 25,
+ "modify_time": "2017-07-12 09:12:34",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/rasta-mouse/invoke-loginprompt",
+ "star": 20,
+ "commits": 22,
+ "modify_time": "2017-06-17 20:46:58",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/rapid7/metasploit-baseline-builder",
+ "star": 20,
+ "commits": 149,
+ "modify_time": "2019-08-16 21:05:26",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ranchoice/44con2018",
+ "star": 20,
+ "commits": 3,
+ "modify_time": "2018-10-11 22:27:20",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/progmboy/vul_analyze_doc",
+ "star": 20,
+ "commits": 9,
+ "modify_time": "2017-04-19 10:42:59",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/pnfsoftware/pleaserop",
+ "star": 20,
+ "commits": 12,
+ "modify_time": "2017-10-06 17:38:57",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/plus-postech/soma",
+ "star": 20,
+ "commits": 293,
+ "modify_time": "2019-05-20 13:38:53",
+ "last_release": "",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/pluginkollektiv/antivirus",
+ "star": 20,
+ "commits": 99,
+ "modify_time": "2019-10-05 23:03:49",
+ "last_release": "\n v1.3.10\n ",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/pinkp4nther/shellcodes",
+ "star": 20,
+ "commits": 13,
+ "modify_time": "2019-10-23 20:20:34",
+ "last_release": "",
+ "lang": "Assembly"
+ },
+ {
+ "link": "https://github.com/pinkp4nther/pinkit",
+ "star": 20,
+ "commits": 14,
+ "modify_time": "2018-06-08 10:07:28",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/pentestbox/pentest-box-tools",
+ "star": 20,
+ "commits": 132,
+ "modify_time": "2016-07-21 07:30:29",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/patois/ndsldr",
+ "star": 20,
+ "commits": 4,
+ "modify_time": "2017-02-05 11:30:11",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/opsxcq/exploit-cve-2016-7434",
+ "star": 20,
+ "commits": 34,
+ "modify_time": "2017-09-11 23:19:43",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/oldb00t/aggressorscripts",
+ "star": 20,
+ "commits": 37,
+ "modify_time": "2017-05-01 16:15:01",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/olanderofc/officebrute",
+ "star": 20,
+ "commits": 10,
+ "modify_time": "2018-02-04 19:27:15",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/olafhartong/ta-sysmon-deploy",
+ "star": 20,
+ "commits": 33,
+ "modify_time": "2018-07-24 17:01:15",
+ "last_release": "",
+ "lang": "Batchfile"
+ },
+ {
+ "link": "https://github.com/odzhan/propagate",
+ "star": 20,
+ "commits": null,
+ "modify_time": "2018-07-09 12:12:21",
+ "last_release": "",
+ "lang": "c"
+ },
+ {
+ "link": "https://github.com/nyan-x-cat/lime-loader",
+ "star": 20,
+ "commits": 3,
+ "modify_time": "2019-04-12 00:33:52",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/nullarray/sysenum",
+ "star": 20,
+ "commits": 22,
+ "modify_time": "2018-04-14 14:09:31",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/nullarray/pyparser-cve",
+ "star": 20,
+ "commits": 13,
+ "modify_time": "2017-08-30 08:26:15",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nonlinear-chaos-order-etc/i2pchat",
+ "star": 20,
+ "commits": 118,
+ "modify_time": "2019-11-16 13:09:11",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/nkga/self-updater",
+ "star": 20,
+ "commits": 2,
+ "modify_time": "2018-05-20 03:09:36",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/nkga/cheat-driver",
+ "star": 20,
+ "commits": 1,
+ "modify_time": "2018-05-10 00:18:58",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/njsmith/machomachomangler",
+ "star": 20,
+ "commits": 74,
+ "modify_time": "2017-01-20 23:03:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/netspi/binrev",
+ "star": 20,
+ "commits": 2,
+ "modify_time": "2013-10-14 16:56:12",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/neargle/cve-2018-6574-poc",
+ "star": 20,
+ "commits": 17,
+ "modify_time": "2018-04-24 16:32:22",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ne0nd0g/adpasswordhealth",
+ "star": 20,
+ "commits": 19,
+ "modify_time": "2018-11-01 02:35:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nd13/penetration-testing-and-hacking",
+ "star": 20,
+ "commits": 1,
+ "modify_time": "2017-05-18 07:25:23",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/ncatlin/lockwatcher",
+ "star": 20,
+ "commits": 113,
+ "modify_time": "2016-07-17 00:01:40",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/nbulischeck/debugfs-backdoor",
+ "star": 20,
+ "commits": 33,
+ "modify_time": "2018-05-25 02:27:40",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/n0tty/random-hacking-scripts",
+ "star": 20,
+ "commits": 5,
+ "modify_time": "2018-09-27 09:54:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mullvad/libwfp",
+ "star": 20,
+ "commits": 197,
+ "modify_time": "2019-11-18 09:55:33",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/mtth-bfft/ntsec",
+ "star": 20,
+ "commits": 39,
+ "modify_time": "2019-05-21 20:20:49",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/mrexodia/ceautoattach",
+ "star": 20,
+ "commits": 5,
+ "modify_time": "2017-06-25 00:54:17",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/mozilla/mortar-layouts",
+ "star": 20,
+ "commits": 23,
+ "modify_time": "2013-01-24 21:26:49",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/mozilla-services/shavar-plugin-blocklist",
+ "star": 20,
+ "commits": 72,
+ "modify_time": "2018-02-06 16:15:32",
+ "last_release": "",
+ "lang": "XSLT"
+ },
+ {
+ "link": "https://github.com/mortenschenk/babuska-dolls",
+ "star": 20,
+ "commits": 2,
+ "modify_time": "2017-02-19 20:18:38",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/mntn0x/poc",
+ "star": 20,
+ "commits": 37,
+ "modify_time": "2019-12-05 02:56:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mk-fg/nflog-zmq-pcap-pipe",
+ "star": 20,
+ "commits": 84,
+ "modify_time": "2015-01-19 17:00:02",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/misp/misp-compliance",
+ "star": 20,
+ "commits": 53,
+ "modify_time": "2019-03-21 16:01:15",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/milo2012/pentest_automation",
+ "star": 20,
+ "commits": 13,
+ "modify_time": "2015-01-18 15:08:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/mfthomps/labtainers",
+ "star": 20,
+ "commits": 10325,
+ "modify_time": "2019-12-02 19:15:36",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/merces/scripts",
+ "star": 20,
+ "commits": 5,
+ "modify_time": "2016-05-06 21:23:01",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/mdsecactivebreach/cve-2018-4878",
+ "star": 20,
+ "commits": 1,
+ "modify_time": "2018-02-09 14:38:19",
+ "last_release": "",
+ "lang": "ActionScript"
+ },
+ {
+ "link": "https://github.com/mdsecactivebreach/angrypuppy",
+ "star": 20,
+ "commits": 77,
+ "modify_time": "2017-07-31 13:41:39",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/mayter/sec-charts",
+ "star": 20,
+ "commits": 8,
+ "modify_time": "2018-04-26 07:45:00",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/martinvigo/ransombile",
+ "star": 20,
+ "commits": 4,
+ "modify_time": "2018-09-18 12:44:46",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/manhnho/brutality",
+ "star": 20,
+ "commits": 15,
+ "modify_time": "2019-05-28 17:55:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/makinacorpus/spynner",
+ "star": 20,
+ "commits": 252,
+ "modify_time": "2019-03-26 13:57:41",
+ "last_release": "\n 2.19\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/lowleveldesign/diagnostics-tools",
+ "star": 20,
+ "commits": 14,
+ "modify_time": "2019-05-16 08:43:41",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/lnslbrty/potd",
+ "star": 20,
+ "commits": 144,
+ "modify_time": "2019-09-08 09:47:49",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/linuz/powerhungry",
+ "star": 20,
+ "commits": 77,
+ "modify_time": "2017-06-28 18:27:18",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/lersh/potatostream",
+ "star": 20,
+ "commits": 150,
+ "modify_time": "2017-11-02 02:05:29",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/kyonli/asuswrt-v2ray",
+ "star": 20,
+ "commits": 36,
+ "modify_time": "2018-08-31 05:57:27",
+ "last_release": "3.36.0-1",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/kudelskisecurity/go-manger-attack",
+ "star": 20,
+ "commits": 26,
+ "modify_time": "2018-02-05 16:54:31",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/kudelskisecurity/cryptochallenge17",
+ "star": 20,
+ "commits": 7,
+ "modify_time": "2017-07-06 12:05:19",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kingsabri/burp_suite_extension_ruby",
+ "star": 20,
+ "commits": 20,
+ "modify_time": "2017-02-13 22:23:08",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/kevthehermit/yaramail",
+ "star": 20,
+ "commits": 6,
+ "modify_time": "2013-04-22 11:44:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kevateam/ctf-attack-defense",
+ "star": 20,
+ "commits": 212,
+ "modify_time": "2019-06-26 13:46:52",
+ "last_release": "",
+ "lang": "TeX"
+ },
+ {
+ "link": "https://github.com/kelwin/peda",
+ "star": 20,
+ "commits": 116,
+ "modify_time": "2017-11-07 08:18:38",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/kdpryor/linuxvolprofiles",
+ "star": 20,
+ "commits": 14,
+ "modify_time": "2014-08-01 22:16:57",
+ "last_release": "2.0",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/karneades/defensomania",
+ "star": 20,
+ "commits": 19,
+ "modify_time": "2019-09-18 11:45:53",
+ "last_release": "v0.2.0",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/jrmuizel/kemufuzzer",
+ "star": 20,
+ "commits": 8,
+ "modify_time": "2010-09-17 16:59:03",
+ "last_release": "",
+ "lang": "Diff"
+ },
+ {
+ "link": "https://github.com/jovibor/libpe",
+ "star": 20,
+ "commits": 61,
+ "modify_time": "2019-09-19 01:57:29",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/joswr1ght/asleap",
+ "star": 20,
+ "commits": 1,
+ "modify_time": "2016-08-30 13:01:23",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/jordisk/thehive2sigma",
+ "star": 20,
+ "commits": 6,
+ "modify_time": "2019-03-17 19:58:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jonstewart/sifter",
+ "star": 20,
+ "commits": 103,
+ "modify_time": "2014-11-05 20:28:16",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/jonathanseals/ios-kexec-utils",
+ "star": 20,
+ "commits": 4,
+ "modify_time": "2016-04-21 05:38:36",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/johnnydep/cobaltstrike",
+ "star": 20,
+ "commits": 3,
+ "modify_time": "2017-05-05 21:28:55",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/jnastarot/shibari",
+ "star": 20,
+ "commits": 42,
+ "modify_time": "2019-06-07 21:04:20",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/jimmyastle/atomic-parser",
+ "star": 20,
+ "commits": 5,
+ "modify_time": "2018-08-30 13:51:29",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jidar/smith",
+ "star": 20,
+ "commits": 15,
+ "modify_time": "2017-08-17 15:48:30",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jiayunhan/opanalyzer",
+ "star": 20,
+ "commits": 2,
+ "modify_time": "2017-10-24 00:26:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/jeffbryner/kinectasploitv2",
+ "star": 20,
+ "commits": 2,
+ "modify_time": "2012-08-02 03:08:57",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/izuolan/pshell",
+ "star": 20,
+ "commits": 44,
+ "modify_time": "2017-11-19 08:36:24",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/ivan1ee/regasm_installutil_applockerbypass",
+ "star": 20,
+ "commits": 6,
+ "modify_time": "2018-12-10 11:17:41",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/it-gorillaz/lnk2pwn",
+ "star": 20,
+ "commits": 7,
+ "modify_time": "2018-11-23 17:18:49",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/icing/h2fuzz",
+ "star": 20,
+ "commits": 17,
+ "modify_time": "2019-03-13 10:50:38",
+ "last_release": "",
+ "lang": "Makefile"
+ },
+ {
+ "link": "https://github.com/iagox86/dnsmasq-fuzzing",
+ "star": 20,
+ "commits": 1022,
+ "modify_time": "2015-07-08 21:47:28",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/hybrisdisaster/asphashdos",
+ "star": 20,
+ "commits": 5,
+ "modify_time": "2012-01-06 23:05:02",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/hyuunnn/ida_python_scripts",
+ "star": 20,
+ "commits": 79,
+ "modify_time": "2018-07-23 04:41:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hrushikeshk/enum.py",
+ "star": 20,
+ "commits": 5,
+ "modify_time": "2018-02-02 11:43:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/hexabin/apkstat",
+ "star": 20,
+ "commits": 18,
+ "modify_time": "2017-08-15 21:29:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/heroku/omniauth-heroku",
+ "star": 20,
+ "commits": 79,
+ "modify_time": "2019-07-31 16:42:32",
+ "last_release": "\n v0.3.0\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/habohitron/habohitron",
+ "star": 20,
+ "commits": 22,
+ "modify_time": "2014-11-05 13:16:14",
+ "last_release": "",
+ "lang": "AutoIt"
+ },
+ {
+ "link": "https://github.com/guedou/flashre",
+ "star": 20,
+ "commits": 57,
+ "modify_time": "2019-07-23 08:47:22",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/graylog2/graylog-guide-snort",
+ "star": 20,
+ "commits": 8,
+ "modify_time": "2019-04-11 16:22:12",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/gravity-postquantum/prune-horst",
+ "star": 20,
+ "commits": 17,
+ "modify_time": "2018-01-17 14:07:07",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/grananqvist/machine-learning-web-application-firewall-and-dataset",
+ "star": 20,
+ "commits": 59,
+ "modify_time": "2018-02-26 12:13:12",
+ "last_release": "",
+ "lang": "Jupyter Notebook"
+ },
+ {
+ "link": "https://github.com/gosecure/gophish-cli",
+ "star": 20,
+ "commits": 57,
+ "modify_time": "2018-09-30 18:00:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gilks/enumerid",
+ "star": 20,
+ "commits": 19,
+ "modify_time": "2019-07-25 14:26:50",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/gamozolabs/slime_tree",
+ "star": 20,
+ "commits": 5,
+ "modify_time": "2019-03-20 22:37:27",
+ "last_release": "",
+ "lang": "Rust"
+ },
+ {
+ "link": "https://github.com/ez8-co/ezpp",
+ "star": 20,
+ "commits": 36,
+ "modify_time": "2018-05-23 12:40:25",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/extremecoders-re/re-list",
+ "star": 20,
+ "commits": 40,
+ "modify_time": "2019-11-26 04:49:20",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/exploit-install/thefatrat",
+ "star": 20,
+ "commits": 114,
+ "modify_time": "2016-09-14 03:59:44",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/euniceylee/waves",
+ "star": 20,
+ "commits": 37,
+ "modify_time": "2018-04-01 00:35:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/erpscanteam/cve-2018-2636",
+ "star": 20,
+ "commits": 6,
+ "modify_time": "2018-02-01 15:36:18",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/eosessentials/eos-proxy-token",
+ "star": 20,
+ "commits": 25,
+ "modify_time": "2019-01-16 08:19:22",
+ "last_release": "",
+ "lang": "WebAssembly"
+ },
+ {
+ "link": "https://github.com/envato/unwrappr",
+ "star": 20,
+ "commits": 306,
+ "modify_time": "2019-11-28 02:18:51",
+ "last_release": "\n v0.3.5\n ",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/enigmatos/fuzzlon",
+ "star": 20,
+ "commits": 3,
+ "modify_time": "2019-03-25 13:53:55",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/en14c/erebus",
+ "star": 20,
+ "commits": 1,
+ "modify_time": "2019-08-28 05:32:42",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/embedi/dji-ws-tools",
+ "star": 20,
+ "commits": 1,
+ "modify_time": "2018-03-07 14:33:04",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ekultek/strutter",
+ "star": 20,
+ "commits": 14,
+ "modify_time": "2018-09-12 14:28:34",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/edwardqiu/awesome-infosec",
+ "star": 20,
+ "commits": 32,
+ "modify_time": "2019-10-29 22:06:01",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/edelahozuah/awesome-tls-security",
+ "star": 20,
+ "commits": 17,
+ "modify_time": "2017-04-03 12:03:48",
+ "last_release": "",
+ "lang": "TeX"
+ },
+ {
+ "link": "https://github.com/eddietcc/cvenotes",
+ "star": 20,
+ "commits": 187,
+ "modify_time": "2019-02-14 18:14:54",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/downwithup/cve-2018-16712",
+ "star": 20,
+ "commits": 7,
+ "modify_time": "2018-12-01 23:02:46",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/dinamsky/malware-botnets",
+ "star": 20,
+ "commits": 6,
+ "modify_time": "2016-12-28 04:32:02",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/digitalbond/ibal",
+ "star": 20,
+ "commits": 3,
+ "modify_time": "2015-02-12 20:00:14",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/delicioushorse/writeups",
+ "star": 20,
+ "commits": 7,
+ "modify_time": "2019-03-18 16:41:04",
+ "last_release": "",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/deepwn/dn2.io",
+ "star": 20,
+ "commits": 19,
+ "modify_time": "2018-05-22 07:24:27",
+ "last_release": "",
+ "lang": ""
+ },
+ {
+ "link": "https://github.com/dearbytes/opensource-endpoint-monitoring",
+ "star": 20,
+ "commits": 5,
+ "modify_time": "2019-07-08 09:26:59",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/darkoperator/nessus-bridge-for-metasploit",
+ "star": 20,
+ "commits": 47,
+ "modify_time": "2013-05-01 12:34:45",
+ "last_release": "",
+ "lang": "Ruby"
+ },
+ {
+ "link": "https://github.com/danilabs/rexploit",
+ "star": 20,
+ "commits": 95,
+ "modify_time": "2016-06-30 18:47:43",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/danielhenrymantilla/shellcode-factory",
+ "star": 20,
+ "commits": 96,
+ "modify_time": "2018-08-22 14:46:16",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/danielbohannon/devsec-defense",
+ "star": 20,
+ "commits": 18,
+ "modify_time": "2018-04-15 22:54:07",
+ "last_release": "",
+ "lang": "PowerShell"
+ },
+ {
+ "link": "https://github.com/damonmohammadbagher/fakefilemaker",
+ "star": 20,
+ "commits": 5,
+ "modify_time": "2016-12-24 10:39:22",
+ "last_release": "",
+ "lang": "C#"
+ },
+ {
+ "link": "https://github.com/d4rkcat/stackflow",
+ "star": 20,
+ "commits": 2,
+ "modify_time": "2014-05-07 16:12:39",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/d00rt/hijacked_lokibot_version",
+ "star": 20,
+ "commits": 1,
+ "modify_time": "2018-07-06 08:14:17",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/czardoz/hornet",
+ "star": 20,
+ "commits": 166,
+ "modify_time": "2018-04-30 19:12:54",
+ "last_release": "\n 0.0.9\n ",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cymmetria/honeycomb_plugins",
+ "star": 20,
+ "commits": 62,
+ "modify_time": "2019-02-15 22:50:48",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/cyberclues/rtf_exploit_extractor",
+ "star": 20,
+ "commits": 6,
+ "modify_time": "2017-01-10 02:25:54",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/ctf-thanos/ctf-writeups",
+ "star": 20,
+ "commits": 18,
+ "modify_time": "2016-07-17 23:56:21",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/cryptomator/siv-mode",
+ "star": 20,
+ "commits": 103,
+ "modify_time": "2019-05-06 14:08:58",
+ "last_release": "1.3.1",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/cryptolok/epmg",
+ "star": 20,
+ "commits": 32,
+ "modify_time": "2019-01-16 22:02:29",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/cronn-de/ssh-proxy",
+ "star": 20,
+ "commits": 101,
+ "modify_time": "2019-12-09 12:39:07",
+ "last_release": "\n v1.4\n ",
+ "lang": "Java"
+ },
+ {
+ "link": "https://github.com/corb3nik/pwnbox",
+ "star": 20,
+ "commits": 22,
+ "modify_time": "2019-06-24 19:58:52",
+ "last_release": "",
+ "lang": "Shell"
+ },
+ {
+ "link": "https://github.com/codedotjs/twifo-cli",
+ "star": 20,
+ "commits": 25,
+ "modify_time": "2018-05-20 23:38:07",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/cloudfoundry-incubator/haproxy-boshrelease",
+ "star": 20,
+ "commits": 380,
+ "modify_time": "2019-11-26 01:03:43",
+ "last_release": "v9.8.0",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/cldrn/insecureprogrammingdb",
+ "star": 20,
+ "commits": 32,
+ "modify_time": "2019-06-21 14:31:14",
+ "last_release": "",
+ "lang": "Batchfile"
+ },
+ {
+ "link": "https://github.com/chrisjd20/cve-2017-9805.py",
+ "star": 20,
+ "commits": 14,
+ "modify_time": "2017-12-23 14:07:58",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/cbrnrd/netsploit",
+ "star": 20,
+ "commits": 171,
+ "modify_time": "2018-09-06 01:31:10",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/catalyst256/watcher",
+ "star": 20,
+ "commits": 36,
+ "modify_time": "2015-01-16 07:43:44",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/c1982/ripego",
+ "star": 20,
+ "commits": 19,
+ "modify_time": "2016-07-23 13:44:45",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/brianlam38/sec-cheatsheets",
+ "star": 20,
+ "commits": 770,
+ "modify_time": "2019-10-22 12:41:33",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/bnagy/osx-afl-llvm",
+ "star": 20,
+ "commits": 7,
+ "modify_time": "2016-12-22 05:16:49",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/blacchat/rkorova",
+ "star": 20,
+ "commits": 84,
+ "modify_time": "2019-01-28 19:49:29",
+ "last_release": "v1.1-alpha",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/bisoon/ps4-api-server",
+ "star": 20,
+ "commits": 5,
+ "modify_time": "2018-03-06 13:44:06",
+ "last_release": "\n 1.1\n ",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/binject/shellcode",
+ "star": 20,
+ "commits": 28,
+ "modify_time": "2019-11-01 08:49:04",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/arsunt/tr2main",
+ "star": 20,
+ "commits": 208,
+ "modify_time": "2019-06-30 19:50:39",
+ "last_release": "v0.8.2",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/arinkverma/google-foobar",
+ "star": 20,
+ "commits": 2,
+ "modify_time": "2017-02-20 11:04:31",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/aress31/sci",
+ "star": 20,
+ "commits": 37,
+ "modify_time": "2019-11-22 08:16:04",
+ "last_release": "",
+ "lang": "Smali"
+ },
+ {
+ "link": "https://github.com/arbazkiraak/hackbot",
+ "star": 20,
+ "commits": 61,
+ "modify_time": "2017-08-29 12:21:06",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/apriorit/antirootkit-anti-splicer",
+ "star": 20,
+ "commits": 1,
+ "modify_time": "2017-02-26 12:13:16",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/antirootkit/bdarkit",
+ "star": 20,
+ "commits": 1,
+ "modify_time": "2014-04-10 07:28:28",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/android-rooting-tools/libmsm_vfe_read_exploit",
+ "star": 20,
+ "commits": 1,
+ "modify_time": "2015-03-08 06:13:50",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/andrewgaspar/km-stl",
+ "star": 20,
+ "commits": 10,
+ "modify_time": "2016-07-12 09:00:46",
+ "last_release": "",
+ "lang": "C++"
+ },
+ {
+ "link": "https://github.com/amitnaik/php-backdoor",
+ "star": 20,
+ "commits": 3,
+ "modify_time": "2013-01-21 11:33:04",
+ "last_release": "",
+ "lang": "PHP"
+ },
+ {
+ "link": "https://github.com/alcideio/pipeline",
+ "star": 20,
+ "commits": 40,
+ "modify_time": "2019-10-30 05:37:07",
+ "last_release": "",
+ "lang": "JavaScript"
+ },
+ {
+ "link": "https://github.com/a232319779/phantom-3-standard",
+ "star": 20,
+ "commits": 37,
+ "modify_time": "2017-03-14 16:54:04",
+ "last_release": "",
+ "lang": "C"
+ },
+ {
+ "link": "https://github.com/73696e65/ctf-notes",
+ "star": 20,
+ "commits": 91,
+ "modify_time": "2017-02-06 09:12:47",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/649/netscraped-exploit",
+ "star": 20,
+ "commits": 4,
+ "modify_time": "2018-05-15 17:04:09",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/649/chrome-sandbox-exploit",
+ "star": 20,
+ "commits": 2,
+ "modify_time": "2017-10-13 23:28:18",
+ "last_release": "",
+ "lang": "HTML"
+ },
+ {
+ "link": "https://github.com/0x90/wifuzz",
+ "star": 20,
+ "commits": 10,
+ "modify_time": "2015-06-17 14:51:32",
+ "last_release": "",
+ "lang": "Python"
+ },
+ {
+ "link": "https://github.com/0x4445565a/portanoia",
+ "star": 20,
+ "commits": 19,
+ "modify_time": "2016-12-23 11:39:36",
+ "last_release": "",
+ "lang": "Go"
+ },
+ {
+ "link": "https://github.com/0x25/useful",
+ "star": 20,
+ "commits": 316,
+ "modify_time": "2019-12-05 08:22:43",
+ "last_release": "",
+ "lang": "Python"
+ }
+]
\ No newline at end of file
diff --git a/history/sec_tools_all_20191212140607.md b/history/sec_tools_all_20191212140607.md
new file mode 100644
index 0000000..783ff31
--- /dev/null
+++ b/history/sec_tools_all_20191212140607.md
@@ -0,0 +1,1033 @@
+# 说明
+- [英文版本](https://github.com/alphaSeclab/sec-tool-list/blob/master/Readme_en.md)
+- 因Github Readme显示行数有限, 当前页面显示的为不完整版, 只显示了星数最高的前1000个工具. [点击查看完整版](https://github.com/alphaSeclab/sec-tool-list/blob/master/Readme_full.md)
+- 我的其他Repo:
+ - [逆向资源](https://github.com/alphaSeclab/awesome-ida)
+ - [网络安全资源](https://github.com/alphaSeclab/awesome-cyber-security)
+ - [恶意代码分析报告](https://github.com/alphaSeclab/malware-analysis-reports)
+ - [漏洞分析文章](https://github.com/alphaSeclab/vul-analysis)
+
+# 工具列表
+- [**45523**星][11d] [C#] [shadowsocks/shadowsocks-windows](https://github.com/shadowsocks/shadowsocks-windows) If you want to keep a secret, you must also hide it from yourself.
+- [**34554**星][16d] [C++] [x64dbg/x64dbg](https://github.com/x64dbg/x64dbg) Windows平台x32/x64调试器
+- [**33926**星][10d] [Py] [minimaxir/big-list-of-naughty-strings](https://github.com/minimaxir/big-list-of-naughty-strings) “淘气”的字符串列表,当作为用户输入时很容易引发问题
+- [**32844**星][2m] [hack-with-github/awesome-hacking](https://github.com/hack-with-github/awesome-hacking) A collection of various awesome lists for hackers, pentesters and security researchers
+- [**32022**星][4y] [Py] [shadowsocks/shadowsocks](https://github.com/shadowsocks/shadowsocks)
+- [**30689**星][14d] [Go] [fatedier/frp](https://github.com/fatedier/frp) 快速的反向代理, 将NAT或防火墙之后的本地服务器暴露到公网
+- [**27836**星][2d] [Kotlin] [shadowsocks/shadowsocks-android](https://github.com/shadowsocks/shadowsocks-android) A shadowsocks client for Android
+- [**25977**星][2d] [Py] [certbot/certbot](https://github.com/certbot/certbot) Certbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any other CA that uses the ACME protocol.
+- [**25643**星][28d] [Swift] [shadowsocks/shadowsocksx-ng](https://github.com/shadowsocks/shadowsocksx-ng) Next Generation of ShadowsocksX
+- [**25330**星][3d] [Go] [v2ray/v2ray-core](https://github.com/v2ray/v2ray-core) A platform for building proxies to bypass network restrictions.
+- [**24826**星][2d] [xitu/gold-miner](https://github.com/xitu/gold-miner)
+- [**24727**星][5d] [trimstray/the-book-of-secret-knowledge](https://github.com/trimstray/the-book-of-secret-knowledge) A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.
+- [**22556**星][14d] [Shell] [mathiasbynens/dotfiles](https://github.com/mathiasbynens/dotfiles)
+- [**21874**星][9d] [PHP] [danielmiessler/seclists](https://github.com/danielmiessler/seclists) 多种类型资源收集:用户名、密码、URL、敏感数据类型、Fuzzing Payload、WebShell等
+- [**21778**星][12d] [Go] [filosottile/mkcert](https://github.com/filosottile/mkcert) A simple zero-config tool to make locally trusted development certificates with any names you'd like.
+- [**20680**星][5d] [Java] [skylot/jadx](https://github.com/skylot/jadx) dex 转 java 的反编译器
+- [**20159**星][5d] [Shell] [streisandeffect/streisand](https://github.com/StreisandEffect/streisand) Streisand sets up a new server running your choice of WireGuard, OpenConnect, OpenSSH, OpenVPN, Shadowsocks, sslh, Stunnel, or a Tor bridge. It also generates custom instructions for all of these services. At the end of the run you are given an HTML file with instructions that can be shared with friends, family members, and fellow activists.
+- [**19692**星][2m] [Jupyter Notebook] [camdavidsonpilon/probabilistic-programming-and-bayesian-methods-for-hackers](https://github.com/camdavidsonpilon/probabilistic-programming-and-bayesian-methods-for-hackers) aka "Bayesian Methods for Hackers": An introduction to Bayesian methods + probabilistic programming with a computation/understanding-first, mathematics-second point of view. All in pure Python ;)
+- [**19212**星][1y] [alvin9999/new-pac](https://github.com/alvin9999/new-pac) 科学/自由上网,免费ss/ssr/v2ray/goflyway账号,搭建教程
+- [**19076**星][2d] [Ruby] [rapid7/metasploit-framework](https://github.com/rapid7/metasploit-framework) Metasploit Framework
+- [**18676**星][3y] [fallibleinc/security-guide-for-developers](https://github.com/fallibleinc/security-guide-for-developers) Security Guide for Developers (实用性开发人员安全须知)
+- [**18476**星][2d] [Java] [nationalsecurityagency/ghidra](https://github.com/nationalsecurityagency/ghidra) 软件逆向框架
+- [**18390**星][3d] [Java] [alibaba/arthas](https://github.com/alibaba/arthas) Alibaba Java诊断利器Arthas
+- [**17641**星][4y] [Go] [inconshreveable/ngrok](https://github.com/inconshreveable/ngrok) 反向代理,在公网终端和本地服务之间创建安全的隧道
+- [**17069**星][6d] [Py] [mitmproxy/mitmproxy](https://github.com/mitmproxy/mitmproxy) An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
+- [**16769**星][2d] [C#] [powershell/powershell](https://github.com/powershell/powershell) PowerShell for every system!
+- [**15824**星][2d] [Py] [sqlmapproject/sqlmap](https://github.com/sqlmapproject/sqlmap) Automatic SQL injection and database takeover tool
+- [**15731**星][9m] [micropoor/micro8](https://github.com/micropoor/micro8) 从业10年渗透笔记
+- [**15718**星][3d] [C] [curl/curl](https://github.com/curl/curl) A command line tool and library for transferring data with URL syntax, supporting HTTP, HTTPS, FTP, FTPS, GOPHER, TFTP, SCP, SFTP, SMB, TELNET, DICT, LDAP, LDAPS, FILE, IMAP, SMTP, POP3, RTSP and RTMP. libcurl offers a myriad of powerful features
+- [**15363**星][21d] [Py] [drduh/macos-security-and-privacy-guide](https://github.com/drduh/macOS-Security-and-Privacy-Guide) Guide to securing and improving privacy on macOS
+- [**14744**星][1m] [gfwlist/gfwlist](https://github.com/gfwlist/gfwlist) gfwlist
+- [**14518**星][7d] [Java] [tencent/tinker](https://github.com/tencent/tinker) Tinker is a hot-fix solution library for Android, it supports dex, library and resources update without reinstall apk.
+- [**13736**星][9m] [JS] [bannedbook/fanqiang](https://github.com/bannedbook/fanqiang) 翻墙-科学上网
+- [**13548**星][28d] [Py] [corentinj/real-time-voice-cloning](https://github.com/corentinj/real-time-voice-cloning) Clone a voice in 5 seconds to generate arbitrary speech in real-time
+- [**13241**星][19d] [Go] [jesseduffield/lazydocker](https://github.com/jesseduffield/lazydocker) The lazier way to manage everything docker
+- [**12966**星][12d] [Py] [cool-rr/pysnooper](https://github.com/cool-rr/pysnooper) Never use print for debugging again
+- [**12742**星][3d] [Vue] [liyasthomas/postwoman](https://github.com/liyasthomas/postwoman)
+- [**12693**星][8d] [C] [shadowsocks/shadowsocks-libev](https://github.com/shadowsocks/shadowsocks-libev) libev port of shadowsocks
+- [**12544**星][9d] [C#] [0xd4d/dnspy](https://github.com/0xd4d/dnspy) .NET debugger and assembly editor
+- [**12325**星][2m] [Ruby] [diaspora/diaspora](https://github.com/diaspora/diaspora) A privacy-aware, distributed, open source social network.
+- [**12241**星][5d] [Java] [signalapp/signal-android](https://github.com/signalapp/Signal-Android) A private messenger for Android.
+- [**11977**星][1m] [Go] [buger/goreplay](https://github.com/buger/goreplay) 实时捕获HTTP流量并输入测试环境,以便持续使用真实数据测试你的系统
+- [**11890**星][6d] [C] [openssl/openssl](https://github.com/openssl/openssl) TLS/SSL and crypto library
+- [**11530**星][2d] [C] [radareorg/radare2](https://github.com/radareorg/radare2) unix-like reverse engineering framework and commandline tools
+- [**11418**星][3m] [C] [robertdavidgraham/masscan](https://github.com/robertdavidgraham/masscan) masscan:世界上最快的互联网端口扫描器,号称可6分钟内扫描整个互联网
+- [**11404**星][2d] [getlantern/download](https://github.com/getlantern/download) Lantern官方版本下载 蓝灯 翻墙 科学上网 外网 加速器 梯子 路由
+- [**11342**星][1m] [facert/awesome-spider](https://github.com/facert/awesome-spider) 爬虫集合
+- [**11278**星][2d] [Java] [oracle/graal](https://github.com/oracle/graal) Run Programs Faster Anywhere
+- [**11200**星][5d] [Py] [swisskyrepo/payloadsallthethings](https://github.com/swisskyrepo/payloadsallthethings) A list of useful payloads and bypass for Web Application Security and Pentest/CTF
+- [**11143**星][2m] [Jupyter Notebook] [selfteaching/the-craft-of-selfteaching](https://github.com/selfteaching/the-craft-of-selfteaching) One has no future if one couldn't teach themself.
+- [**11110**星][5d] [Py] [owasp/cheatsheetseries](https://github.com/owasp/cheatsheetseries) The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
+- [**11016**星][2y] [ObjC] [bang590/jspatch](https://github.com/bang590/jspatch) JSPatch bridge Objective-C and Javascript using the Objective-C runtime. You can call any Objective-C class and method in JavaScript by just including a small engine. JSPatch is generally used to hotfix iOS App.
+- [**10925**星][2d] [ObjC] [flipboard/flex](https://github.com/flipboard/flex) An in-app debugging and exploration tool for iOS
+- [**10907**星][2m] [CSS] [hacker0x01/hacker101](https://github.com/hacker0x01/hacker101) Hacker101
+- [**10830**星][15d] [enaqx/awesome-pentest](https://github.com/enaqx/awesome-pentest) 渗透测试资源/工具集
+- [**10780**星][2y] [CoffeeScript] [dropbox/zxcvbn](https://github.com/dropbox/zxcvbn) Low-Budget Password Strength Estimation
+- [**10757**星][19d] [Java] [konloch/bytecode-viewer](https://github.com/konloch/bytecode-viewer) A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)
+- [**10318**星][5d] [ruanyf/weekly](https://github.com/ruanyf/weekly) 科技爱好者周刊,每周五发布
+- [**10226**星][3d] [Go] [goharbor/harbor](https://github.com/goharbor/harbor) An open source trusted cloud native registry project that stores, signs, and scans content.
+- [**9830**星][8m] [imthenachoman/how-to-secure-a-linux-server](https://github.com/imthenachoman/how-to-secure-a-linux-server) An evolving how-to guide for securing a Linux server.
+- [**9613**星][4d] [Py] [sherlock-project/sherlock](https://github.com/sherlock-project/sherlock) Find Usernames Across Social Networks
+- [**9389**星][3d] [Go] [cnlh/nps](https://github.com/cnlh/nps) 一款轻量级、功能强大的内网穿透代理服务器。支持tcp、udp流量转发,支持内网http代理、内网socks5代理,同时支持snappy压缩、站点保护、加密传输、多路复用、header修改等。支持web图形化管理,集成多用户模式。
+- [**9358**星][6d] [Ruby] [postalhq/postal](https://github.com/postalhq/postal) 全功能邮件服务器
+- [**9266**星][3m] [JS] [localtunnel/localtunnel](https://github.com/localtunnel/localtunnel) expose yourself
+- [**9229**星][12d] [Java] [ibotpeaches/apktool](https://github.com/ibotpeaches/apktool) A tool for reverse engineering Android apk files
+- [**9185**星][2d] [C#] [icsharpcode/ilspy](https://github.com/icsharpcode/ilspy) .NET Decompiler
+- [**9148**星][29d] [JS] [valve/fingerprintjs2](https://github.com/valve/fingerprintjs2) Modern & flexible browser fingerprinting library
+- [**9069**星][11d] [PS] [lukesampson/scoop](https://github.com/lukesampson/scoop) A command-line installer for Windows.
+- [**9015**星][2m] [vitalysim/awesome-hacking-resources](https://github.com/vitalysim/awesome-hacking-resources) A collection of hacking / penetration testing resources to make you better!
+- [**8854**星][6m] [Go] [rkt/rkt](https://github.com/rkt/rkt) rkt is a pod-native container engine for Linux. It is composable, secure, and built on standards.
+- [**8739**星][17d] [C] [gentilkiwi/mimikatz](https://github.com/gentilkiwi/mimikatz) A little tool to play with Windows security
+- [**8646**星][28d] [Java] [android-hacker/virtualxposed](https://github.com/android-hacker/virtualxposed) A simple app to use Xposed without root, unlock the bootloader or modify system image, etc.
+- [**8525**星][1m] [microsoft/wsl](https://github.com/microsoft/WSL) Issues found on WSL
+- [**8443**星][7m] [Shell] [233boy/v2ray](https://github.com/233boy/v2ray) 最好用的 V2Ray 一键安装脚本 & 管理脚本
+- [**8424**星][2d] [Py] [wifiphisher/wifiphisher](https://github.com/wifiphisher/wifiphisher) 流氓AP框架, 用于RedTeam和Wi-Fi安全测试
+- [**8420**星][2y] [brannondorsey/wifi-cracking](https://github.com/brannondorsey/wifi-cracking) 破解WPA/WPA2 Wi-Fi 路由器
+- [**8044**星][9d] [trimstray/the-practical-linux-hardening-guide](https://github.com/trimstray/the-practical-linux-hardening-guide) This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).
+- [**8002**星][2m] [Py] [facebook/chisel](https://github.com/facebook/chisel) Chisel is a collection of LLDB commands to assist debugging iOS apps.
+- [**7986**星][1m] [Py] [mailpile/mailpile](https://github.com/mailpile/mailpile) A free & open modern, fast email client with user-friendly encryption and privacy features
+- [**7965**星][3y] [Go] [cyfdecyf/cow](https://github.com/cyfdecyf/cow) HTTP proxy written in Go. COW can automatically identify blocked sites and use parent proxies to access.
+- [**7945**星][4y] [ObjC] [shadowsocks/shadowsocks-ios](https://github.com/shadowsocks/shadowsocks-ios) Removed according to regulations.
+- [**7840**星][6d] [C++] [shiqiyu/libfacedetection](https://github.com/shiqiyu/libfacedetection) An open source library for face detection in images. The face detection speed can reach 1500FPS.
+- [**7731**星][3d] [JS] [gchq/cyberchef](https://github.com/gchq/cyberchef) The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis
+- [**7712**星][2d] [Go] [git-lfs/git-lfs](https://github.com/git-lfs/git-lfs) Git extension for versioning large files
+- [**7670**星][24d] [Java] [java-decompiler/jd-gui](https://github.com/java-decompiler/jd-gui) A standalone Java Decompiler GUI
+- [**7524**星][29d] [Py] [threat9/routersploit](https://github.com/threat9/routersploit) Exploitation Framework for Embedded Devices
+- [**7474**星][9d] [Go] [snail007/goproxy](https://github.com/snail007/goproxy) Proxy是高性能全功能的http代理、https代理、socks5代理、内网穿透、内网穿透p2p、内网穿透代理、内网穿透反向代理、内网穿透服务器、Websocket代理、TCP代理、UDP代理、DNS代理、DNS加密代理,代理API认证,全能跨平台代理服务器。
+- [**7412**星][1m] [C++] [shadowsocks/shadowsocks-qt5](https://github.com/shadowsocks/shadowsocks-qt5) A cross-platform shadowsocks GUI client
+- [**7397**星][1m] [Py] [s0md3v/xsstrike](https://github.com/s0md3v/XSStrike) Most advanced XSS scanner.
+- [**7246**星][19d] [Java] [lionsoul2014/ip2region](https://github.com/lionsoul2014/ip2region) Ip2region is a offline IP location library with accuracy rate of 99.9% and 0.0x millseconds searching performance. DB file is less then 5Mb with all ip address stored. binding for Java,PHP,C,Python,Nodejs,Golang,C#,lua. Binary,B-tree,Memory searching algorithm
+- [**7186**星][7m] [Shell] [teddysun/shadowsocks_install](https://github.com/teddysun/shadowsocks_install) Auto Install Shadowsocks Server for CentOS/Debian/Ubuntu
+- [**7017**星][16d] [Go] [future-architect/vuls](https://github.com/future-architect/vuls) 针对Linux/FreeBSD 编写的漏洞扫描器. Go 语言编写
+- [**6989**星][5d] [C] [hashcat/hashcat](https://github.com/hashcat/hashcat) 世界上最快最先进的密码恢复工具
+- [**6984**星][2d] [Go] [nats-io/nats-server](https://github.com/nats-io/nats-server) High-Performance server for NATS, the cloud native messaging system.
+- [**6984**星][2m] [JS] [cs01/gdbgui](https://github.com/cs01/gdbgui) Browser-based frontend to gdb (gnu debugger). Add breakpoints, view the stack, visualize data structures, and more in C, C++, Go, Rust, and Fortran. Run gdbgui from the terminal and a new tab will open in your browser.
+- [**6957**星][11d] [greatfire/wiki](https://github.com/greatfire/wiki) 自由浏览
+- [**6949**星][3m] [Java] [pxb1988/dex2jar](https://github.com/pxb1988/dex2jar) Tools to work with android .dex and java .class files
+- [**6869**星][2m] [Go] [sqshq/sampler](https://github.com/sqshq/sampler) A tool for shell commands execution, visualization and alerting. Configured with a simple YAML file.
+- [**6812**星][19d] [Shell] [awslabs/git-secrets](https://github.com/awslabs/git-secrets) Prevents you from committing secrets and credentials into git repositories
+- [**6732**星][9m] [Java] [amitshekhariitbhu/android-debug-database](https://github.com/amitshekhariitbhu/android-debug-database) A library for debugging android databases and shared preferences - Make Debugging Great Again
+- [**6683**星][3d] [Java] [zaproxy/zaproxy](https://github.com/zaproxy/zaproxy) 在开发和测试Web App时自动发现安全漏洞
+- [**6682**星][3y] [C++] [alibaba/andfix](https://github.com/alibaba/andfix) AndFix is a library that offer hot-fix for Android App.
+- [**6668**星][12d] [C++] [keepassxreboot/keepassxc](https://github.com/keepassxreboot/keepassxc) KeePassXC is a cross-platform community-driven port of the Windows application “Keepass Password Safe”.
+- [**6595**星][3d] [Py] [networkx/networkx](https://github.com/networkx/networkx) 用于创建、操纵和研究复杂网络的结构,Python包
+- [**6555**星][6m] [Go] [shadowsocks/shadowsocks-go](https://github.com/shadowsocks/shadowsocks-go) go port of shadowsocks (Deprecated)
+- [**6518**星][1m] [Py] [h2y/shadowrocket-adblock-rules](https://github.com/h2y/shadowrocket-adblock-rules) 提供多款 Shadowrocket 规则,带广告过滤功能。用于 iOS 未越狱设备选择性地自动翻墙。
+- [**6462**星][5d] [Shell] [cisofy/lynis](https://github.com/cisofy/lynis) Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
+- [**6451**星][17d] [Go] [bettercap/bettercap](https://github.com/bettercap/bettercap) 新版的bettercap, Go 编写. bettercap 是强大的、模块化、可移植且易于扩展的 MITM 框架, 旧版用 Ruby 编写
+- [**6448**星][9m] [HTML] [open-power-workgroup/hospital](https://github.com/open-power-workgroup/hospital) OpenPower工作组收集汇总的医院开放数据
+- [**6310**星][29d] [Py] [seatgeek/fuzzywuzzy](https://github.com/seatgeek/fuzzywuzzy) Fuzzy String Matching in Python
+- [**6197**星][2m] [ObjC] [johnno1962/injectionforxcode](https://github.com/johnno1962/injectionforxcode) Runtime Code Injection for Objective-C & Swift
+- [**6194**星][3y] [PS] [powershellmafia/powersploit](https://github.com/PowerShellMafia/PowerSploit) PowerSploit - A PowerShell Post-Exploitation Framework
+- [**6192**星][2m] [Py] [yandex/gixy](https://github.com/yandex/gixy) Nginx 配置静态分析工具,防止配置错误导致安全问题,自动化错误配置检测
+- [**6187**星][6m] [rmerl/asuswrt-merlin](https://github.com/rmerl/asuswrt-merlin) Enhanced version of Asus's router firmware (Asuswrt) (legacy code base)
+- [**6146**星][2d] [JS] [avwo/whistle](https://github.com/avwo/whistle) 基于Node实现的跨平台抓包调试代理工具(HTTP, HTTP2, HTTPS, Websocket)
+- [**6137**星][1y] [Hack] [facebook/fbctf](https://github.com/facebook/fbctf) Platform to host Capture the Flag competitions
+- [**6128**星][9m] [Py] [schollz/howmanypeoplearearound](https://github.com/schollz/howmanypeoplearearound) 检测 Wifi 信号统计你周围的人数
+- [**6092**星][15d] [Go] [usefathom/fathom](https://github.com/usefathom/fathom) Fathom Lite. Simple, privacy-focused website analytics. Built with Golang & Preact.
+- [**6074**星][16d] [Go] [quay/clair](https://github.com/quay/clair) Vulnerability Static Analysis for Containers
+- [**6074**星][16d] [Go] [quay/clair](https://github.com/quay/clair) clair:容器(appc、docker)漏洞静态分析工具。
+- [**6073**星][5m] [Java] [qihoo360/replugin](https://github.com/qihoo360/replugin) RePlugin - A flexible, stable, easy-to-use Android Plug-in Framework
+- [**6070**星][2y] [C] [jgamblin/mirai-source-code](https://github.com/jgamblin/mirai-source-code) Leaked Mirai Source Code for Research/IoC Development Purposes
+- [**6021**星][3d] [Py] [cyrus-and/gdb-dashboard](https://github.com/cyrus-and/gdb-dashboard) Modular visual interface for GDB in Python
+- [**6017**星][7d] [berzerk0/probable-wordlists](https://github.com/berzerk0/probable-wordlists) Version 2 is live! Wordlists sorted by probability originally created for password generation and testing - make sure your passwords aren't popular!
+- [**5972**星][2m] [Java] [google/android-classyshark](https://github.com/google/android-classyshark) 分析基于Android/Java的App或游戏
+- [**5968**星][2d] [Py] [gallopsled/pwntools](https://github.com/gallopsled/pwntools) CTF framework and exploit development library
+- [**5942**星][6m] [JS] [haotian-wang/google-access-helper](https://github.com/haotian-wang/google-access-helper) 谷歌访问助手破解版
+- [**5888**星][2d] [Py] [asciimoo/searx](https://github.com/asciimoo/searx) searx:网络元数据搜索引擎。汇总70 多个搜索引擎的搜素结果,避免用户被追踪或者被分析。可与 Tor 结合使用
+- [**5879**星][2d] [C++] [radareorg/cutter](https://github.com/radareorg/cutter) 逆向框架 radare2的Qt界面,iaito的升级版
+- [**5871**星][2m] [Gnuplot] [nasa-jpl/open-source-rover](https://github.com/nasa-jpl/open-source-rover) A build-it-yourself, 6-wheel rover based on the rovers on Mars!
+- [**5815**星][7m] [JS] [sindresorhus/fkill-cli](https://github.com/sindresorhus/fkill-cli) Fabulously kill processes. Cross-platform.
+- [**5773**星][1y] [qinyuhang/shadowsocksx-ng-r](https://github.com/qinyuhang/shadowsocksx-ng-r) Next Generation of ShadowsocksX
+- [**5766**星][3m] [ObjC] [square/ponydebugger](https://github.com/square/ponydebugger) Remote network and data debugging for your native iOS app using Chrome Developer Tools
+- [**5762**星][2m] [C] [spacehuhn/esp8266_deauther](https://github.com/spacehuhn/esp8266_deauther) 使用ESP8266 制作Wifi干扰器
+- [**5742**星][2y] [Py] [newsapps/beeswithmachineguns](https://github.com/newsapps/beeswithmachineguns) 创建多个micro EC2实例, 攻击指定Web App
+- [**5740**星][8m] [C] [xoreaxeaxeax/movfuscator](https://github.com/xoreaxeaxeax/movfuscator) C编译器,编译的二进制文件只有1个代码块。
+- [**5694**星][9d] [JS] [swagger-api/swagger-editor](https://github.com/swagger-api/swagger-editor) Swagger Editor
+- [**5693**星][2d] [Go] [casbin/casbin](https://github.com/casbin/casbin) An authorization library that supports access control models like ACL, RBAC, ABAC in Golang
+- [**5626**星][1m] [C] [rofl0r/proxychains-ng](https://github.com/rofl0r/proxychains-ng) proxychains ng (new generation) - a preloader which hooks calls to sockets in dynamically linked programs and redirects it through one or more socks/http proxies. continuation of the unmaintained proxychains project. the sf.net page is currently not updated, use releases from github release page instead.
+- [**5593**星][10d] [Ruby] [presidentbeef/brakeman](https://github.com/presidentbeef/brakeman) ROR程序的静态分析工具
+- [**5565**星][29d] [Roff] [max2max/freess](https://github.com/max2max/freess) 免费ss账号 免费shadowsocks账号 免费v2ray账号 (长期更新)
+- [**5540**星][20d] [rshipp/awesome-malware-analysis](https://github.com/rshipp/awesome-malware-analysis) A curated list of awesome malware analysis tools and resources.
+- [**5476**星][8m] [carpedm20/awesome-hacking](https://github.com/carpedm20/awesome-hacking) Hacking教程、工具和资源
+- [**5417**星][2m] [Py] [axi0mx/ipwndfu](https://github.com/axi0mx/ipwndfu) open-source jailbreaking tool for many iOS devices
+- [**5413**星][2y] [Rust] [autumnai/leaf](https://github.com/autumnai/leaf) Open Machine Intelligence Framework for Hackers. (GPU/CPU)
+- [**5371**星][5m] [C] [pwn20wndstuff/undecimus](https://github.com/pwn20wndstuff/undecimus) unc0ver jailbreak for iOS 11.0 - 12.4
+- [**5371**星][2d] [Py] [mlflow/mlflow](https://github.com/mlflow/mlflow) Open source platform for the machine learning lifecycle
+- [**5324**星][4d] [Go] [zricethezav/gitleaks](https://github.com/zricethezav/gitleaks) Audit git repos for secrets
+- [**5205**星][7m] [Py] [usarmyresearchlab/dshell](https://github.com/usarmyresearchlab/dshell) 网络审计分析
+- [**5196**星][3m] [Py] [ytisf/thezoo](https://github.com/ytisf/thezoo) A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.
+- [**5192**星][1m] [Py] [refirmlabs/binwalk](https://github.com/ReFirmLabs/binwalk) 固件分析工具(命令行+IDA插件)
+ - [IDA插件](https://github.com/ReFirmLabs/binwalk/tree/master/src/scripts)
+ - [binwalk](https://github.com/ReFirmLabs/binwalk/tree/master/src/binwalk)
+- [**5167**星][20d] [Shell] [vulhub/vulhub](https://github.com/vulhub/vulhub) Pre-Built Vulnerable Environments Based on Docker-Compose
+- [**5167**星][1y] [JS] [samyk/poisontap](https://github.com/samyk/poisontap) Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.
+- [**5148**星][6d] [PHP] [tennc/webshell](https://github.com/tennc/webshell) webshell收集
+- [**5123**星][21d] [C++] [avast/retdec](https://github.com/avast/retdec) 基于 LLVM 的可重定位机器码反编译器, 可检测壳、检测和重构C++类继承、重构函数/类型/结构体等、可反编译为 C 或 Python 2种高级语言格式
+- [**5118**星][15d] [ObjC] [macpass/macpass](https://github.com/MacPass/MacPass) A native OS X KeePass client
+- [**5118**星][4m] [Py] [n1nj4sec/pupy](https://github.com/n1nj4sec/pupy) Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) remote administration and post-exploitation tool mainly written in python
+- [**5089**星][2d] [Go] [dnscrypt/dnscrypt-proxy](https://github.com/DNSCrypt/dnscrypt-proxy) 灵活的DNS代理,支持现代的加密DNS协议,例如:DNS protocols such as DNSCrypt v2, DNS-over-HTTPS and Anonymized DNSCrypt.
+- [**5082**星][2m] [sbilly/awesome-security](https://github.com/sbilly/awesome-security) 与安全相关的软件、库、文档、书籍、资源和工具等收集
+- [**5065**星][2m] [Shell] [stackexchange/blackbox](https://github.com/stackexchange/blackbox) 文件使用PGP加密后隐藏在Git/Mercurial/Subversion
+- [**5059**星][1m] [Java] [meituan-dianping/walle](https://github.com/meituan-dianping/walle) Android Signature V2 Scheme签名下的新一代渠道包打包神器
+- [**5054**星][4y] [Py] [shadowsocksr-backup/shadowsocksr](https://github.com/shadowsocksr-backup/shadowsocksr) Python port of ShadowsocksR
+- [**5042**星][2d] [HTML] [owasp/owasp-mstg](https://github.com/owasp/owasp-mstg) 关于移动App安全开发、测试和逆向的相近手册
+- [**5037**星][4m] [PS] [empireproject/empire](https://github.com/EmpireProject/Empire) 后渗透框架. Windows客户端用PowerShell, Linux/OSX用Python. 之前PowerShell Empire和Python EmPyre的组合
+- [**5021**星][2d] [Py] [mobsf/mobile-security-framework-mobsf](https://github.com/MobSF/Mobile-Security-Framework-MobSF) Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
+- [**5005**星][2d] [C++] [coatisoftware/sourcetrail](https://github.com/coatisoftware/sourcetrail) Sourcetrail - free and open-source interactive source explorer
+- [**4996**星][2d] [ASP] [hq450/fancyss](https://github.com/hq450/fancyss) fancyss is a project providing tools to across the GFW on asuswrt/merlin based router.
+- [**4996**星][6d] [Go] [inlets/inlets](https://github.com/inlets/inlets) Expose your local endpoints to the Internet
+- [**4994**星][1m] [Py] [snare/voltron](https://github.com/snare/voltron) A hacky debugger UI for hackers
+- [**4953**星][22d] [Py] [trustedsec/social-engineer-toolkit](https://github.com/trustedsec/social-engineer-toolkit) The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.
+- [**4920**星][2d] [TS] [jigsaw-code/outline-client](https://github.com/jigsaw-code/outline-client) Outline clients, developed by Jigsaw. The Outline clients use the popular Shadowsocks protocol, and lean on the Cordova and Electron frameworks to support Windows, Android / ChromeOS, Linux, iOS and macOS.
+- [**4913**星][1y] [Go] [yinghuocho/firefly-proxy](https://github.com/yinghuocho/firefly-proxy) A proxy software to help circumventing the Great Firewall.
+- [**4909**星][2d] [Shell] [denisidoro/navi](https://github.com/denisidoro/navi) An interactive cheatsheet tool for the command-line
+- [**4897**星][11m] [Go] [bitly/oauth2_proxy](https://github.com/bitly/oauth2_proxy) 反向代理,静态文件服务器,提供Providers(Google/Github)认证
+- [**4883**星][2m] [Rust] [sharkdp/hexyl](https://github.com/sharkdp/hexyl) 命令行中查看hex
+- [**4881**星][5d] [Java] [guardianproject/haven](https://github.com/guardianproject/haven) 通过Android应用和设备上的传感器保护自己的个人空间和财产而又不损害
+- [**4869**星][2d] [Swift] [yanue/v2rayu](https://github.com/yanue/v2rayu) V2rayU,基于v2ray核心的mac版客户端,用于科学上网,使用swift编写,支持vmess,shadowsocks,socks5等服务协议,支持订阅, 支持二维码,剪贴板导入,手动配置,二维码分享等
+- [**4867**星][10d] [Py] [alessandroz/lazagne](https://github.com/alessandroz/lazagne) Credentials recovery project
+- [**4847**星][3d] [Go] [gcla/termshark](https://github.com/gcla/termshark) A terminal UI for tshark, inspired by Wireshark
+- [**4841**星][2d] [C] [offensive-security/exploitdb](https://github.com/offensive-security/exploitdb) The official Exploit Database repository
+- [**4803**星][8m] [Py] [10se1ucgo/disablewintracking](https://github.com/10se1ucgo/disablewintracking) Uses some known methods that attempt to minimize tracking in Windows 10
+- [**4782**星][2d] [C] [google/oss-fuzz](https://github.com/google/oss-fuzz) 开源软件fuzzing
+- [**4761**星][2d] [C++] [facebook/redex](https://github.com/facebook/redex) Android App字节码优化器
+- [**4724**星][2d] [C++] [paddlepaddle/paddle-lite](https://github.com/PaddlePaddle/Paddle-Lite) Multi-platform high performance deep learning inference engine (『飞桨』多平台高性能深度学习预测引擎)
+- [**4691**星][9d] [Py] [manisso/fsociety](https://github.com/manisso/fsociety) fsociety Hacking Tools Pack – A Penetration Testing Framework
+- [**4639**星][3d] [Py] [secdev/scapy](https://github.com/secdev/scapy) 交互式数据包操作, Python, 命令行+库
+- [**4638**星][18d] [C] [google/ios-webkit-debug-proxy](https://github.com/google/ios-webkit-debug-proxy) A DevTools proxy (Chrome Remote Debugging Protocol) for iOS devices (Safari Remote Web Inspector).
+- [**4637**星][6m] [powershell/win32-openssh](https://github.com/powershell/win32-openssh) Win32 port of OpenSSH
+- [**4633**星][2d] [JS] [beefproject/beef](https://github.com/beefproject/beef) The Browser Exploitation Framework Project
+- [**4615**星][12d] [Go] [ginuerzh/gost](https://github.com/ginuerzh/gost) GO语言实现的安全隧道
+- [**4589**星][11m] [Py] [ecthros/uncaptcha2](https://github.com/ecthros/uncaptcha2) defeating the latest version of ReCaptcha with 91% accuracy
+- [**4583**星][1y] [C] [upx/upx](https://github.com/upx/upx) UPX - the Ultimate Packer for eXecutables
+- [**4575**星][4d] [C++] [mozilla/rr](https://github.com/mozilla/rr) 记录与重放App的调试执行过程
+- [**4543**星][4d] [Ruby] [wpscanteam/wpscan](https://github.com/wpscanteam/wpscan) WPScan is a free, for non-commercial use, black box WordPress Vulnerability Scanner written for security professionals and blog maintainers to test the security of their WordPress websites.
+- [**4529**星][6d] [C] [jedisct1/dsvpn](https://github.com/jedisct1/dsvpn) A Dead Simple VPN.
+- [**4498**星][6d] [TS] [apis-guru/graphql-voyager](https://github.com/apis-guru/graphql-voyager)
+- [**4459**星][8d] [Py] [jopohl/urh](https://github.com/jopohl/urh) Universal Radio Hacker: investigate wireless protocols like a boss
+- [**4458**星][1y] [Go] [wallix/awless](https://github.com/wallix/awless) A Mighty CLI for AWS
+- [**4449**星][3d] [Go] [dragonflyoss/dragonfly](https://github.com/dragonflyoss/Dragonfly) Dragonfly is an intelligent P2P based image and file distribution system.
+- [**4446**星][2d] [Makefile] [frida/frida](https://github.com/frida/frida) Clone this repo to build Frida
+- [**4443**星][24d] [Py] [jofpin/trape](https://github.com/jofpin/trape) 学习在互联网上跟踪别人,获取其详细信息,并避免被别人跟踪
+- [**4411**星][2m] [Shell] [zardus/ctf-tools](https://github.com/zardus/ctf-tools) Some setup scripts for security research tools.
+- [**4359**星][6d] [Swift] [signalapp/signal-ios](https://github.com/signalapp/Signal-iOS) A private messenger for iOS.
+- [**4346**星][1m] [JS] [cure53/dompurify](https://github.com/cure53/dompurify) a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
+- [**4344**星][12m] [Py] [lennylxx/ipv6-hosts](https://github.com/lennylxx/ipv6-hosts) Fork of
+- [**4313**星][5m] [Py] [diafygi/acme-tiny](https://github.com/diafygi/acme-tiny) A tiny script to issue and renew TLS certs from Let's Encrypt
+- [**4283**星][7d] [Py] [tensorflow/cleverhans](https://github.com/tensorflow/cleverhans) Python库,基准测试(benchmark)机器学习系统的漏洞生成(to)对抗样本(adversarial examples)
+- [**4280**星][1m] [Shell] [ashishb/android-security-awesome](https://github.com/ashishb/android-security-awesome) A collection of android security related resources
+- [**4261**星][5d] [Rust] [timvisee/ffsend](https://github.com/timvisee/ffsend) Easily and securely share files from the command line
+- [**4258**星][11m] [JS] [butterproject/butter-desktop](https://github.com/butterproject/butter-desktop) All the free parts of Popcorn Time
+- [**4244**星][2y] [imeiji/shadowsocks_install](https://github.com/imeiji/shadowsocks_install) Auto install shadowsocks server,thanks 秋水逸冰
+- [**4241**星][4m] [Py] [dxa4481/trufflehog](https://github.com/dxa4481/trufflehog) Searches through git repositories for high entropy strings and secrets, digging deep into commit history
+- [**4215**星][7m] [ObjC] [alonemonkey/monkeydev](https://github.com/alonemonkey/monkeydev) CaptainHook Tweak、Logos Tweak and Command-line Tool、Patch iOS Apps, Without Jailbreak.
+- [**4211**星][9d] [Go] [gophish/gophish](https://github.com/gophish/gophish) 网络钓鱼工具包
+- [**4205**星][11d] [qazbnm456/awesome-web-security](https://github.com/qazbnm456/awesome-web-security) web 安全资源列表
+- [**4204**星][1y] [Go] [michenriksen/gitrob](https://github.com/michenriksen/gitrob) 查找push到公开的Github repo中的敏感信息
+- [**4202**星][2m] [Py] [evilsocket/opensnitch](https://github.com/evilsocket/opensnitch) opensnitch:Little Snitch 应用程序防火墙的 GNU/Linux 版本。(Little Snitch:Mac操作系统的应用程序防火墙,能防止应用程序在你不知道的情况下自动访问网络)
+- [**4198**星][2d] [Py] [openmined/pysyft](https://github.com/openmined/pysyft) A library for encrypted, privacy preserving machine learning
+- [**4190**星][13d] [we5ter/scanners-box](https://github.com/we5ter/scanners-box) 安全行业从业者自研开源扫描器合辑
+- [**4171**星][2y] [forter/security-101-for-saas-startups](https://github.com/forter/security-101-for-saas-startups) 初学者安全小窍门
+- [**4149**星][12m] [JS] [kdzwinel/betwixt](https://github.com/kdzwinel/betwixt) Betwixt will help you analyze web traffic outside the browser using familiar Chrome DevTools interface.
+- [**4131**星][5d] [Java] [spring-projects/spring-security](https://github.com/spring-projects/spring-security) Spring Security
+- [**4120**星][5m] [Py] [spiderclub/haipproxy](https://github.com/spiderclub/haipproxy)
+- [**4120**星][2m] [Py] [aboul3la/sublist3r](https://github.com/aboul3la/sublist3r) Fast subdomains enumeration tool for penetration testers
+- [**4096**星][2y] [Py] [xoreaxeaxeax/sandsifter](https://github.com/xoreaxeaxeax/sandsifter) sandsifter:x86 处理器 Fuzzer,查找 Intel 的隐藏指令和 CPU bug
+- [**4092**星][9m] [wtsxdev/reverse-engineering](https://github.com/wtsxdev/reverse-engineering) List of awesome reverse engineering resources
+- [**4046**星][1m] [JS] [sigalor/whatsapp-web-reveng](https://github.com/sigalor/whatsapp-web-reveng) WhatsApp Web API逆向与重新实现
+- [**4045**星][2m] [Java] [jesusfreke/smali](https://github.com/jesusfreke/smali) smali/baksmali
+- [**4044**星][2d] [Py] [google/clusterfuzz](https://github.com/google/clusterfuzz) Scalable fuzzing infrastructure.
+- [**4022**星][22d] [drduh/yubikey-guide](https://github.com/drduh/yubikey-guide) Guide to using YubiKey for GPG and SSH
+- [**4021**星][3m] [JS] [cuckoosandbox/cuckoo](https://github.com/cuckoosandbox/cuckoo) Cuckoo Sandbox is an automated dynamic malware analysis system
+- [**4000**星][1y] [JS] [travist/jsencrypt](https://github.com/travist/jsencrypt) A Javascript library to perform OpenSSL RSA Encryption, Decryption, and Key Generation.
+- [**3967**星][3m] [Py] [nullarray/autosploit](https://github.com/nullarray/autosploit) Automated Mass Exploiter
+- [**3961**星][5d] [Go] [dexidp/dex](https://github.com/dexidp/dex) OpenID Connect Identity (OIDC) and OAuth 2.0 Provider with Pluggable Connectors
+- [**3953**星][2m] [JS] [apsdehal/awesome-ctf](https://github.com/apsdehal/awesome-ctf) A curated list of CTF frameworks, libraries, resources and softwares
+- [**3953**星][2m] [JS] [apsdehal/awesome-ctf](https://github.com/apsdehal/awesome-ctf) A curated list of CTF frameworks, libraries, resources and softwares
+- [**3937**星][3d] [Py] [angr/angr](https://github.com/angr/angr) A powerful and user-friendly binary analysis platform!
+- [**3935**星][4m] [PHP] [paragonie/awesome-appsec](https://github.com/paragonie/awesome-appsec) A curated list of resources for learning about application security
+- [**3933**星][8m] [Go] [eranyanay/1m-go-websockets](https://github.com/eranyanay/1m-go-websockets) handling 1M websockets connections in Go
+- [**3923**星][1m] [C] [aquynh/capstone](https://github.com/aquynh/capstone) Capstone disassembly/disassembler framework: Core (Arm, Arm64, BPF, EVM, M68K, M680X, MOS65xx, Mips, PPC, RISCV, Sparc, SystemZ, TMS320C64x, Web Assembly, X86, X86_64, XCore) + bindings.
+- [**3920**星][2y] [C#] [shadowsocksr-backup/shadowsocksr-csharp](https://github.com/shadowsocksr-backup/shadowsocksr-csharp)
+- [**3915**星][16d] [Rust] [svenstaro/genact](https://github.com/svenstaro/genact) a nonsense activity generator
+- [**3893**星][2d] [C++] [baldurk/renderdoc](https://github.com/baldurk/renderdoc) RenderDoc is a stand-alone graphics debugging tool.
+- [**3878**星][2m] [PHP] [fuzzdb-project/fuzzdb](https://github.com/fuzzdb-project/fuzzdb) 通过动态App安全测试来查找App安全漏洞, 算是不带扫描器的漏洞扫描器
+- [**3869**星][2d] [Py] [secureauthcorp/impacket](https://github.com/SecureAuthCorp/impacket) Python类收集, 用于与网络协议交互
+- [**3848**星][7d] [JS] [shadowsocks/shadowsocks-manager](https://github.com/shadowsocks/shadowsocks-manager) A shadowsocks manager tool for multi user and traffic control.
+- [**3845**星][2d] [hq450/fancyss_history_package](https://github.com/hq450/fancyss_history_package) 科学上网插件的离线安装包储存在这里
+- [**3838**星][2m] [ObjC] [sveinbjornt/sloth](https://github.com/sveinbjornt/sloth) Mac app that shows all open files, directories and sockets in use by all running processes. Nice GUI for lsof.
+- [**3831**星][4y] [iosre/iosappreverseengineering](https://github.com/iosre/iosappreverseengineering) The world’s 1st book of very detailed iOS App reverse engineering skills :)
+- [**3813**星][1m] [jivoi/awesome-osint](https://github.com/jivoi/awesome-osint) OSINT资源收集
+- [**3799**星][5y] [shadowsocksr-backup/shadowsocks-rss](https://github.com/shadowsocksr-backup/shadowsocks-rss) ShadowsocksR update rss, SSR organization
+- [**3767**星][10m] [Py] [longld/peda](https://github.com/longld/peda) Python Exploit Development Assistance for GDB
+- [**3763**星][2m] [Py] [paralax/awesome-honeypots](https://github.com/paralax/awesome-honeypots) an awesome list of honeypot resources
+- [**3755**星][2m] [PHP] [ethicalhack3r/dvwa](https://github.com/ethicalhack3r/DVWA) Damn Vulnerable Web Application (DVWA)
+- [**3752**星][2m] [Go] [microsoft/ethr](https://github.com/microsoft/ethr) Ethr is a Network Performance Measurement Tool for TCP, UDP & HTTP.
+- [**3736**星][8d] [Go] [hashicorp/consul-template](https://github.com/hashicorp/consul-template) Template rendering, notifier, and supervisor for
+- [**3733**星][2m] [C] [iaik/meltdown](https://github.com/iaik/meltdown) This repository contains several applications, demonstrating the Meltdown bug.
+- [**3730**星][4m] [Py] [malwaredllc/byob](https://github.com/malwaredllc/byob) BYOB (Build Your Own Botnet)
+- [**3719**星][6d] [jjqqkk/chromium](https://github.com/jjqqkk/chromium) Chromium browser with SSL VPN. Use this browser to unblock websites.
+- [**3713**星][2d] [C] [atmosphere-nx/atmosphere](https://github.com/atmosphere-nx/atmosphere) Atmosphère is a work-in-progress customized firmware for the Nintendo Switch.
+- [**3684**星][2y] [JS] [samyk/evercookie](https://github.com/samyk/evercookie) JavaScript API,在浏览器中创建超级顽固的cookie,在标准Cookie、Flask Cookie等被清除之后依然能够识别客户端
+- [**3682**星][10d] [HTML] [hamukazu/lets-get-arrested](https://github.com/hamukazu/lets-get-arrested) This project is intended to protest against the police in Japan
+- [**3670**星][2d] [JS] [lesspass/lesspass](https://github.com/lesspass/lesspass)
+- [**3668**星][8d] [C#] [0xd4d/de4dot](https://github.com/0xd4d/de4dot) .NET deobfuscator and unpacker.
+- [**3667**星][1y] [Py] [misterch0c/shadowbroker](https://github.com/misterch0c/shadowbroker) 方程式最新泄露
+- [**3666**星][5m] [C] [secwiki/windows-kernel-exploits](https://github.com/secwiki/windows-kernel-exploits) windows-kernel-exploits Windows平台提权漏洞集合
+- [**3663**星][4m] [C] [facebook/fishhook](https://github.com/facebook/fishhook) A library that enables dynamically rebinding symbols in Mach-O binaries running on iOS.
+- [**3652**星][4d] [acl4ssr/acl4ssr](https://github.com/acl4ssr/acl4ssr) SSR 去广告ACL规则/SS完整GFWList规则,Telegram频道订阅地址
+- [**3647**星][2y] [Py] [qiyeboy/ipproxypool](https://github.com/qiyeboy/ipproxypool) IPProxyPool代理池项目,提供代理ip
+- [**3622**星][6d] [TS] [javascript-obfuscator/javascript-obfuscator](https://github.com/javascript-obfuscator/javascript-obfuscator) A powerful obfuscator for JavaScript and Node.js
+- [**3621**星][7d] [HTML] [consensys/smart-contract-best-practices](https://github.com/consensys/smart-contract-best-practices) A guide to smart contract security best practices
+- [**3619**星][5y] [C#] [brandonlw/psychson](https://github.com/brandonlw/Psychson) Phison 2251-03 (2303) Custom Firmware & Existing Firmware Patches (BadUSB)
+- [**3611**星][2m] [Java] [ffay/lanproxy](https://github.com/ffay/lanproxy) lanproxy是一个将局域网个人电脑、服务器代理到公网的内网穿透工具,支持tcp流量转发,可支持任何tcp上层协议(访问内网网站、本地支付接口调试、ssh访问、远程桌面...)。目前市面上提供类似服务的有花生壳、TeamView、GoToMyCloud等等,但要使用第三方的公网服务器就必须为第三方付费,并且这些服务都有各种各样的限制,此外,由于数据包会流经第三方,因此对数据安全也是一大隐患。技术交流QQ群 946273429
+- [**3604**星][8d] [PS] [bloodhoundad/bloodhound](https://github.com/BloodHoundAD/BloodHound) a single page Javascript web application, uses graph theory to reveal the hidden and often unintended relationships within an Active Directory environment.
+- [**3598**星][26d] [C++] [anbox/anbox](https://github.com/anbox/anbox) 在常规GNU / Linux系统上引导完整的Android系统,基于容器
+- [**3597**星][1y] [C#] [nummer/destroy-windows-10-spying](https://github.com/nummer/destroy-windows-10-spying) Destroy Windows Spying tool
+- [**3595**星][3y] [Perl] [x0rz/eqgrp](https://github.com/x0rz/eqgrp) Decrypted content of eqgrp-auction-file.tar.xz
+- [**3583**星][3d] [Shell] [drwetter/testssl.sh](https://github.com/drwetter/testssl.sh) 检查服务器任意端口对 TLS/SSL 的支持、协议以及一些加密缺陷,命令行工具
+- [**3580**星][5d] [C] [nmap/nmap](https://github.com/nmap/nmap) Nmap
+- [**3562**星][5d] [Pascal] [cheat-engine/cheat-engine](https://github.com/cheat-engine/cheat-engine) Cheat Engine. A development environment focused on modding
+- [**3542**星][6y] [R] [johnmyleswhite/ml_for_hackers](https://github.com/johnmyleswhite/ml_for_hackers) 《Machine Learning for Hackers》随书代码
+- [**3540**星][6d] [blacckhathaceekr/pentesting-bible](https://github.com/blacckhathaceekr/pentesting-bible) links reaches 10000 links & 10000 pdf files .Learn Ethical Hacking and penetration testing .hundreds of ethical hacking & penetration testing & red team & cyber security & computer science resources.
+- [**3538**星][4m] [Shell] [chengr28/revokechinacerts](https://github.com/chengr28/revokechinacerts) Revoke Chinese certificates.
+- [**3533**星][14d] [C] [tencent/tencentos-tiny](https://github.com/tencent/tencentos-tiny) 腾讯物联网终端操作系统
+- [**3514**星][3y] [C] [hak5darren/usb-rubber-ducky](https://github.com/hak5darren/usb-rubber-ducky)
+- [**3510**星][2d] [JS] [aol/moloch](https://github.com/aol/moloch) 数据包捕获、索引工具,支持数据库
+- [**3501**星][8m] [Go] [fanpei91/torsniff](https://github.com/fanpei91/torsniff) torsniff - a sniffer that sniffs torrents from BitTorrent network
+- [**3501**星][8m] [Go] [fanpei91/torsniff](https://github.com/fanpei91/torsniff) 从BitTorrent网络嗅探种子
+- [**3493**星][9m] [C] [rpisec/mbe](https://github.com/rpisec/mbe) Course materials for Modern Binary Exploitation by RPISEC
+- [**3485**星][5m] [PHP] [hanc00l/wooyun_public](https://github.com/hanc00l/wooyun_public) This repo is archived. Thanks for wooyun! 乌云公开漏洞、知识库爬虫和搜索 crawl and search for wooyun.org public bug(vulnerability) and drops
+- [**3481**星][8d] [C] [cyan4973/xxhash](https://github.com/cyan4973/xxhash) Extremely fast non-cryptographic hash algorithm
+- [**3471**星][2m] [C++] [trojan-gfw/trojan](https://github.com/trojan-gfw/trojan) An unidentifiable mechanism that helps you bypass GFW.
+- [**3442**星][9d] [C] [shellphish/how2heap](https://github.com/shellphish/how2heap) 学习各种堆利用技巧的repo
+- [**3442**星][8d] [Java] [meituan-dianping/robust](https://github.com/meituan-dianping/robust) Robust is an Android HotFix solution with high compatibility and high stability. Robust can fix bugs immediately without a reboot.
+- [**3441**星][15d] [Perl] [sullo/nikto](https://github.com/sullo/nikto) Nikto web server scanner
+- [**3419**星][9d] [C] [mikebrady/shairport-sync](https://github.com/mikebrady/shairport-sync) AirPlay audio player. Shairport Sync adds multi-room capability with Audio Synchronisation
+- [**3412**星][27d] [icodesign/potatso](https://github.com/icodesign/Potatso) Potatso is an iOS client that implements different proxies with the leverage of NetworkExtension framework in iOS 10+.
+- [**3410**星][5m] [Go] [jpillora/chisel](https://github.com/jpillora/chisel) 基于HTTP的快速 TCP 隧道
+- [**3408**星][24d] [PS] [samratashok/nishang](https://github.com/samratashok/nishang) 渗透框架,脚本和Payload收集,主要是PowerShell,涵盖渗透的各个阶段
+- [**3397**星][2y] [shadowsocksrr/shadowsocks-rss](https://github.com/shadowsocksrr/shadowsocks-rss) ShadowsocksR update rss, SSR organization
+- [**3344**星][2d] [jivoi/awesome-ml-for-cybersecurity](https://github.com/jivoi/awesome-ml-for-cybersecurity) 针对网络安全的机器学习资源列表
+- [**3343**星][6d] [C] [screetsec/thefatrat](https://github.com/screetsec/thefatrat) Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV softw…
+- [**3340**星][5m] [C++] [wangyu-/udp2raw-tunnel](https://github.com/wangyu-/udp2raw-tunnel) udp 打洞。通过raw socket给UDP包加上TCP或ICMP header,进而绕过UDP屏蔽或QoS,或在UDP不稳定的环境下提升稳定性
+- [**3334**星][10d] [Smarty] [anankke/sspanel-uim](https://github.com/anankke/sspanel-uim) 专为 Shadowsocks / ShadowsocksR / V2Ray 设计的多用户管理面板
+- [**3331**星][15d] [Py] [google/grr](https://github.com/google/grr) remote live forensics for incident response
+- [**3330**星][2d] [Py] [stamparm/maltrail](https://github.com/stamparm/maltrail) 恶意网络流量检测系统
+- [**3319**星][2y] [scanate/ethlist](https://github.com/scanate/ethlist) The Comprehensive Ethereum Reading List
+- [**3303**星][22d] [C] [vanhauser-thc/thc-hydra](https://github.com/vanhauser-thc/thc-hydra) 网络登录破解,支持多种服务
+- [**3301**星][2m] [Swift] [yagiz/bagel](https://github.com/yagiz/bagel) a little native network debugging tool for iOS
+- [**3298**星][9d] [C++] [fireice-uk/xmr-stak](https://github.com/fireice-uk/xmr-stak) Free Monero RandomX Miner and unified CryptoNight miner
+- [**3285**星][7d] [C] [microsoft/windows-driver-samples](https://github.com/microsoft/windows-driver-samples) This repo contains driver samples prepared for use with Microsoft Visual Studio and the Windows Driver Kit (WDK). It contains both Universal Windows Driver and desktop-only driver samples.
+- [**3278**星][6d] [C] [virustotal/yara](https://github.com/virustotal/yara) The pattern matching swiss knife
+- [**3276**星][3m] [C] [nbs-system/naxsi](https://github.com/nbs-system/naxsi) NAXSI is an open-source, high performance, low rules maintenance WAF for NGINX
+- [**3263**星][10d] [Java] [oldmanpushcart/greys-anatomy](https://github.com/oldmanpushcart/greys-anatomy) Java诊断工具
+- [**3262**星][2m] [Py] [volatilityfoundation/volatility](https://github.com/volatilityfoundation/volatility) An advanced memory forensics framework
+- [**3260**星][8d] [Shell] [toniblyx/my-arsenal-of-aws-security-tools](https://github.com/toniblyx/my-arsenal-of-aws-security-tools) List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.
+- [**3260**星][5y] [C++] [google/lmctfy](https://github.com/google/lmctfy) lmctfy is the open source version of Google’s container stack, which provides Linux application containers.
+- [**3259**星][7m] [JS] [sindresorhus/speed-test](https://github.com/sindresorhus/speed-test) Test your internet connection speed and ping using speedtest.net from the CLI
+- [**3255**星][4d] [ObjC] [objective-see/lulu](https://github.com/objective-see/lulu) LuLu is the free macOS firewall
+- [**3247**星][29d] [JS] [koenkk/zigbee2mqtt](https://github.com/koenkk/zigbee2mqtt) Zigbee
+- [**3242**星][16d] [Py] [laramies/theharvester](https://github.com/laramies/theharvester) E-mails, subdomains and names Harvester - OSINT
+- [**3238**星][2d] [TS] [jigsaw-code/outline-server](https://github.com/jigsaw-code/outline-server) Outline Manager, developed by Jigsaw. The Outline Manager application creates and manages Outline servers, powered by Shadowsocks. It uses the Electron framework to offer support for Windows, macOS and Linux.
+- [**3236**星][5m] [Go] [meshbird/meshbird](https://github.com/meshbird/meshbird) cloud-native multi-region multi-cloud decentralized private networking
+- [**3234**星][2y] [CSS] [jbtronics/crookedstylesheets](https://github.com/jbtronics/crookedstylesheets) 使用纯CSS收集网页/用户信息
+- [**3233**星][9d] [Go] [mozilla/sops](https://github.com/mozilla/sops) Simple and flexible tool for managing secrets
+- [**3228**星][2d] [C] [betaflight/betaflight](https://github.com/betaflight/betaflight) Open Source Flight Controller Firmware
+- [**3223**星][2m] [Shell] [gfw-breaker/ssr-accounts](https://github.com/gfw-breaker/ssr-accounts) 一键部署Shadowsocks服务;免费Shadowsocks账号分享;免费SS账号分享; 翻墙;无界,自由门,SquirrelVPN
+- [**3222**星][6d] [C] [tmate-io/tmate](https://github.com/tmate-io/tmate) Instant Terminal Sharing
+- [**3222**星][6d] [Go] [dvyukov/go-fuzz](https://github.com/dvyukov/go-fuzz) Randomized testing for Go
+- [**3221**星][4y] [C] [shadowsocks/chinadns](https://github.com/shadowsocks/chinadns) Protect yourself against DNS poisoning in China.
+- [**3213**星][1m] [TS] [google/incremental-dom](https://github.com/google/incremental-dom) An in-place DOM diffing library
+- [**3210**星][7m] [HTML] [leizongmin/js-xss](https://github.com/leizongmin/js-xss) Sanitize untrusted HTML (to prevent XSS) with a configuration specified by a Whitelist
+- [**3209**星][5m] [ObjC] [naituw/ipapatch](https://github.com/naituw/ipapatch) Patch iOS Apps, The Easy Way, Without Jailbreak.
+- [**3208**星][4m] [C] [yarrick/iodine](https://github.com/yarrick/iodine) 通过DNS服务器传输(tunnel)IPV4数据
+- [**3205**星][15d] [Py] [maurosoria/dirsearch](https://github.com/maurosoria/dirsearch) Web path scanner
+- [**3202**星][10d] [Rich Text Format] [the-art-of-hacking/h4cker](https://github.com/The-Art-of-Hacking/h4cker) 资源收集:hacking、渗透、数字取证、事件响应、漏洞研究、漏洞开发、逆向
+- [**3187**星][1y] [Py] [kootenpv/whereami](https://github.com/kootenpv/whereami) 使用Wifi信号和机器学习预测你的位置,精确度2-10米
+- [**3187**星][6m] [hslatman/awesome-threat-intelligence](https://github.com/hslatman/awesome-threat-intelligence) A curated list of Awesome Threat Intelligence resources
+- [**3186**星][1m] [C++] [spiderlabs/modsecurity](https://github.com/spiderlabs/modsecurity) ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analys…
+- [**3180**星][27d] [C] [magnumripper/johntheripper](https://github.com/magnumripper/johntheripper) This is the official repo for John the Ripper, "Jumbo" version. The "bleeding-jumbo" branch is based on 1.9.0-Jumbo-1 which was released on May 14, 2019. An import of the "core" version of john this jumbo was based on (or newer) is found in the "master" branch (CVS:
+- [**3169**星][1m] [C] [valdikss/goodbyedpi](https://github.com/valdikss/goodbyedpi) GoodbyeDPI—Passive Deep Packet Inspection blocker and Active DPI circumvention utility (for Windows)
+- [**3162**星][1y] [Shell] [toyodadoubi/doubi](https://github.com/toyodadoubi/doubi) 一个逗比写的各种逗比脚本~
+- [**3159**星][3d] [JS] [minbrowser/min](https://github.com/minbrowser/min) A fast, minimal browser that protects your privacy
+- [**3140**星][6d] [C] [meetecho/janus-gateway](https://github.com/meetecho/janus-gateway) Janus WebRTC Server
+- [**3137**星][2y] [shadowsocksr-backup/shadowsocksr-android](https://github.com/shadowsocksr-backup/shadowsocksr-android) A ShadowsocksR client for Android
+- [**3134**星][2d] [C++] [px4/firmware](https://github.com/px4/firmware) PX4 Autopilot Software
+- [**3125**星][3d] [Shell] [1n3/sn1per](https://github.com/1n3/sn1per) 自动化渗透测试框架
+- [**3123**星][30d] [meirwah/awesome-incident-response](https://github.com/meirwah/awesome-incident-response) A curated list of tools for incident response
+- [**3123**星][2m] [PS] [fireeye/commando-vm](https://github.com/fireeye/commando-vm) Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@fireeye.com
+- [**3122**星][5d] [Go] [uber/kraken](https://github.com/uber/kraken) P2P Docker registry capable of distributing TBs of data in seconds
+- [**3121**星][30d] [CSS] [readthedocs/sphinx_rtd_theme](https://github.com/readthedocs/sphinx_rtd_theme) Sphinx theme for readthedocs.org
+- [**3121**星][8d] [JS] [duo-labs/cloudmapper](https://github.com/duo-labs/cloudmapper) 生成AWS环境的网络拓扑图
+- [**3118**星][3d] [Shell] [speed47/spectre-meltdown-checker](https://github.com/speed47/spectre-meltdown-checker) 检查 Linux 主机是否受处理器漏洞Spectre & Meltdown 的影响
+- [**3113**星][2d] [C] [qemu/qemu](https://github.com/qemu/qemu) Official QEMU mirror. Please see
+- [**3107**星][2m] [Py] [byt3bl33d3r/crackmapexec](https://github.com/byt3bl33d3r/crackmapexec) 后渗透工具,自动化评估大型Active Directory网络的安全性
+- [**3106**星][7d] [Java] [deathmarine/luyten](https://github.com/deathmarine/luyten) An Open Source Java Decompiler Gui for Procyon
+- [**3105**星][10d] [Shell] [softwaredownload/openwrt-fanqiang](https://github.com/softwaredownload/openwrt-fanqiang) 最好的路由器翻墙、科学上网教程—OpenWrt—shadowsocks
+- [**3088**星][9d] [Shell] [trimstray/htrace.sh](https://github.com/trimstray/htrace.sh) My simple Swiss Army knife for http/https troubleshooting and profiling.
+- [**3087**星][3d] [Py] [tribler/tribler](https://github.com/tribler/tribler) Privacy enhanced BitTorrent client with P2P content discovery
+- [**3085**星][11d] [Go] [tencent/bk-cmdb](https://github.com/tencent/bk-cmdb) 蓝鲸智云配置平台(BlueKing CMDB)
+- [**3084**星][22d] [C] [unicorn-engine/unicorn](https://github.com/unicorn-engine/unicorn) Unicorn CPU emulator framework (ARM, AArch64, M68K, Mips, Sparc, X86)
+- [**3080**星][3m] [C] [zmap/zmap](https://github.com/zmap/zmap) ZMap is a fast single packet network scanner designed for Internet-wide network surveys.
+- [**3076**星][7m] [Go] [michenriksen/aquatone](https://github.com/michenriksen/aquatone) 子域名枚举工具。除了经典的爆破枚举之外,还利用多种开源工具和在线服务大幅度增加发现子域名的数量。
+- [**3071**星][9m] [JS] [jipegit/osxauditor](https://github.com/jipegit/osxauditor) OS X Auditor is a free Mac OS X computer forensics tool
+- [**3065**星][1m] [Java] [calebfenton/simplify](https://github.com/calebfenton/simplify) Generic Android Deobfuscator
+- [**3063**星][1y] [Swift] [zhuhaow/spechtlite](https://github.com/zhuhaow/spechtlite) A rule-based proxy for macOS
+- [**3052**星][2m] [JS] [valve/fingerprintjs](https://github.com/valve/fingerprintjs) Anonymous browser fingerprint
+- [**3049**星][4m] [C++] [google/robotstxt](https://github.com/google/robotstxt) The repository contains Google's robots.txt parser and matcher as a C++ library (compliant to C++11).
+- [**3043**星][3m] [Py] [spiderlabs/responder](https://github.com/spiderlabs/responder) LLMNR/NBT-NS/MDNS投毒,内置HTTP/SMB/MSSQL/FTP/LDAP认证服务器, 支持NTLMv1/NTLMv2/LMv2
+- [**3029**星][2m] [Go] [gwuhaolin/lightsocks](https://github.com/gwuhaolin/lightsocks) 轻量级网络混淆代理,基于 SOCKS5 协议,可用来代替 Shadowsocks
+- [**3027**星][9m] [C] [secwiki/linux-kernel-exploits](https://github.com/secwiki/linux-kernel-exploits) linux-kernel-exploits Linux平台提权漏洞集合
+- [**3001**星][1y] [PHP] [owner888/phpspider](https://github.com/owner888/phpspider) 《我用爬虫一天时间“偷了”知乎一百万用户,只为证明PHP是世界上最好的语言 》所使用的程序
+- [**2991**星][2d] [JS] [ntop/ntopng](https://github.com/ntop/ntopng) 基于Web的流量监控工具
+- [**2986**星][7d] [Py] [guardicore/monkey](https://github.com/guardicore/monkey) 自动化渗透测试工具, 测试数据中心的弹性, 以防范周边(perimeter)泄漏和内部服务器感染
+- [**2969**星][29d] [Go] [cookiey/yearning](https://github.com/cookiey/yearning) A most popular sql audit platform for mysql
+- [**2968**星][2d] [ObjC] [google/santa](https://github.com/google/santa) 用于Mac系统的二进制文件白名单/黑名单系统
+- [**2955**星][4d] [Py] [twintproject/twint](https://github.com/twintproject/twint) An advanced Twitter scraping & OSINT tool written in Python that doesn't use Twitter's API, allowing you to scrape a user's followers, following, Tweets and more while evading most API limitations.
+- [**2955**星][11d] [Go] [dominikh/go-tools](https://github.com/dominikh/go-tools) Staticcheck – a collection of static analysis tools for working with Go code
+- [**2949**星][8d] [JS] [webgoat/webgoat](https://github.com/webgoat/webgoat) 带漏洞WebApp
+- [**2948**星][2m] [Dockerfile] [thinkdevelop/free-ss-ssr](https://github.com/thinkdevelop/free-ss-ssr) SS账号、SSR账号、V2Ray账号
+- [**2947**星][1m] [Py] [andresriancho/w3af](https://github.com/andresriancho/w3af) Web App安全扫描器, 辅助开发者和渗透测试人员识别和利用Web App中的漏洞
+- [**2945**星][2y] [phith0n/mind-map](https://github.com/phith0n/mind-map) 各种安全相关思维导图整理收集
+- [**2942**星][21d] [Py] [cowrie/cowrie](https://github.com/cowrie/cowrie) 中型/交互型 SSH/Telnet 蜜罐,
+- [**2936**星][1y] [Py] [danmcinerney/wifijammer](https://github.com/danmcinerney/wifijammer) 持续劫持范围内的Wifi客户端和AP
+- [**2933**星][2d] [Zeek] [zeek/zeek](https://github.com/zeek/zeek) Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.
+- [**2932**星][11m] [Shell] [91yun/serverspeeder](https://github.com/91yun/serverspeeder) 锐速破解版
+- [**2920**星][23d] [Go] [securego/gosec](https://github.com/securego/gosec) Golang security checker
+- [**2916**星][2d] [JS] [evilsocket/pwnagotchi](https://github.com/evilsocket/pwnagotchi) 深度学习+Bettercap,基于A2C,从周围的WiFi环境中学习,以最大程度地利用捕获的WPA关键信息
+- [**2915**星][12d] [C] [libfuse/sshfs](https://github.com/libfuse/sshfs) A network filesystem client to connect to SSH servers
+- [**2909**星][2d] [Py] [trustedsec/ptf](https://github.com/trustedsec/ptf) 创建基于Debian/Ubuntu/ArchLinux的渗透测试环境
+- [**2901**星][1y] [Py] [byt3bl33d3r/mitmf](https://github.com/byt3bl33d3r/mitmf) Framework for Man-In-The-Middle attacks
+- [**2897**星][3d] [secfigo/awesome-fuzzing](https://github.com/secfigo/awesome-fuzzing) A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Development like root cause analysis.
+- [**2883**星][7m] [C] [p-h-c/phc-winner-argon2](https://github.com/p-h-c/phc-winner-argon2) The password hash Argon2, winner of PHC
+- [**2877**星][4y] [ObjC] [maciekish/iresign](https://github.com/maciekish/iresign) iReSign allows iDevice app bundles (.ipa) files to be signed or resigned with a digital certificate from Apple for distribution. This tool is aimed at enterprises users, for enterprise deployment, when the person signing the app is different than the person(s) developing it.
+- [**2858**星][2d] [C] [lxc/lxc](https://github.com/lxc/lxc) LXC - Linux Containers
+- [**2850**星][2d] [HTML] [ctf-wiki/ctf-wiki](https://github.com/ctf-wiki/ctf-wiki) CTF Wiki Online. Come and join us, we need you!
+- [**2850**星][4d] [Go] [99designs/aws-vault](https://github.com/99designs/aws-vault) A vault for securely storing and accessing AWS credentials in development environments
+- [**2845**星][2d] [ObjC] [facebook/idb](https://github.com/facebook/idb) idb is a flexible command line interface for automating iOS simulators and devices
+- [**2842**星][5m] [Py] [instantbox/instantbox](https://github.com/instantbox/instantbox) Get a clean, ready-to-go Linux box in seconds.
+- [**2840**星][23d] [C] [ossec/ossec-hids](https://github.com/ossec/ossec-hids) 入侵检测系统
+- [**2840**星][2m] [infosecn1nja/red-teaming-toolkit](https://github.com/infosecn1nja/red-teaming-toolkit) A collection of open source and commercial tools that aid in red team operations.
+- [**2839**星][8m] [C++] [wangyu-/udpspeeder](https://github.com/wangyu-/udpspeeder) A Tunnel which Improves your Network Quality on a High-latency Lossy Link by using Forward Error Correction,for All Traffics(TCP/UDP/ICMP)
+- [**2837**星][17d] [Py] [espressif/esptool](https://github.com/espressif/esptool) ESP8266 and ESP32 serial bootloader utility
+- [**2834**星][8m] [Shell] [goreliu/wsl-terminal](https://github.com/goreliu/wsl-terminal) Terminal emulator for Windows Subsystem for Linux (WSL)
+- [**2829**星][4m] [C] [juliocesarfort/public-pentesting-reports](https://github.com/juliocesarfort/public-pentesting-reports) Curated list of public penetration test reports released by several consulting firms and academic security groups
+- [**2829**星][1m] [Assembly] [cirosantilli/x86-bare-metal-examples](https://github.com/cirosantilli/x86-bare-metal-examples) 几十个用于学习 x86 系统编程的小型操作系统
+- [**2823**星][2y] [CSS] [maxchehab/css-keylogging](https://github.com/maxchehab/css-keylogging) Chrome extension and Express server that exploits keylogging abilities of CSS.
+- [**2820**星][7d] [C] [tmk/tmk_keyboard](https://github.com/tmk/tmk_keyboard) Atmel AVR 和 Cortex-M键盘固件收集
+- [**2814**星][8m] [C#] [quasar/quasarrat](https://github.com/quasar/quasarrat) Remote Administration Tool for Windows
+- [**2814**星][5d] [Py] [jrohy/multi-v2ray](https://github.com/jrohy/multi-v2ray) v2ray easy delpoy & manage tool, support multiple user & protocol manage
+- [**2808**星][2m] [paulsec/awesome-sec-talks](https://github.com/paulsec/awesome-sec-talks) A collected list of awesome security talks
+- [**2803**星][9m] [Py] [plasma-disassembler/plasma](https://github.com/plasma-disassembler/plasma) Plasma is an interactive disassembler for x86/ARM/MIPS. It can generates indented pseudo-code with colored syntax.
+- [**2798**星][19d] [Py] [androguard/androguard](https://github.com/androguard/androguard) Reverse engineering, Malware and goodware analysis of Android applications ... and more (ninja !)
+- [**2793**星][6d] [C] [klange/toaruos](https://github.com/klange/toaruos) A completely-from-scratch hobby operating system: bootloader, kernel, drivers, C library, and userspace including a composited graphical UI, dynamic linker, syntax-highlighting text editor, network stack, etc.
+- [**2793**星][2m] [Go] [kgretzky/evilginx2](https://github.com/kgretzky/evilginx2) 独立的MITM攻击工具,用于登录凭证钓鱼,可绕过双因素认证
+- [**2791**星][7d] [C++] [xmrig/xmrig](https://github.com/xmrig/xmrig) xmrig: 门罗币挖矿代码 CPU 版
+- [**2789**星][4y] [Lua] [loveshell/ngx_lua_waf](https://github.com/loveshell/ngx_lua_waf) ngx_lua_waf是一个基于lua-nginx-module(openresty)的web应用防火墙
+- [**2783**星][30d] [Makefile] [shadowsocks/openwrt-shadowsocks](https://github.com/shadowsocks/openwrt-shadowsocks) Shadowsocks-libev for OpenWrt/LEDE
+- [**2782**星][2y] [C] [seclab-ucr/intang](https://github.com/seclab-ucr/intang) research project for circumventing the "TCP reset attack" from the Great Firewall of China (GFW) by disrupting/desynchronizing the TCP Control Block (TCB) on the censorship devices.
+- [**2777**星][9d] [C++] [qtox/qtox](https://github.com/qtox/qtox) qTox is a chat, voice, video, and file transfer IM client using the encrypted peer-to-peer Tox protocol.
+- [**2769**星][4d] [C] [processhacker/processhacker](https://github.com/processhacker/processhacker) A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware.
+- [**2766**星][1m] [JS] [trufflesuite/ganache-cli](https://github.com/trufflesuite/ganache-cli) Fast Ethereum RPC client for testing and development
+- [**2756**星][2m] [secwiki/sec-chart](https://github.com/secwiki/sec-chart) 安全思维导图集合
+- [**2742**星][5d] [TS] [webhintio/hint](https://github.com/webhintio/hint)
+- [**2742**星][24d] [Makefile] [theos/theos](https://github.com/theos/theos) A cross-platform suite of tools for building and deploying software for iOS and other platforms.
+- [**2741**星][8m] [Py] [p0cl4bs/wifi-pumpkin](https://github.com/P0cL4bs/WiFi-Pumpkin) AP攻击框架, 创建虚假网络, 取消验证攻击、请求和凭证监控、透明代理、Windows更新攻击、钓鱼管理、ARP投毒、DNS嗅探、Pumpkin代理、动态图片捕获等
+- [**2739**星][23d] [JS] [s0md3v/awesomexss](https://github.com/s0md3v/AwesomeXSS) Awesome XSS stuff
+- [**2737**星][1y] [C] [vanhoefm/krackattacks-scripts](https://github.com/vanhoefm/krackattacks-scripts) 检测客户端和AP是否受KRACK漏洞影响
+- [**2735**星][18d] [JS] [cyu/rack-cors](https://github.com/cyu/rack-cors) Rack Middleware for handling Cross-Origin Resource Sharing (CORS), which makes cross-origin AJAX possible.
+- [**2730**星][3y] [Py] [hephaest0s/usbkill](https://github.com/hephaest0s/usbkill) 反取证开关. 监控USB端口变化, 有变化时立即关闭计算机
+- [**2717**星][2d] [PS] [redcanaryco/atomic-red-team](https://github.com/redcanaryco/atomic-red-team) Small and highly portable detection tests based on MITRE's ATT&CK.
+- [**2713**星][1m] [C] [taviso/loadlibrary](https://github.com/taviso/loadlibrary) 使 Linux系统加载并调用 Windows DLL
+- [**2703**星][3y] [Eagle] [samyk/magspoof](https://github.com/samyk/magspoof) 信用卡/磁条欺骗
+- [**2701**星][3d] [Go] [aquasecurity/trivy](https://github.com/aquasecurity/trivy) A Simple and Comprehensive Vulnerability Scanner for Containers, Suitable for CI
+- [**2698**星][7d] [ObjC] [dantheman827/ios-app-signer](https://github.com/dantheman827/ios-app-signer) This is an app for OS X that can (re)sign apps and bundle them into ipa files that are ready to be installed on an iOS device.
+- [**2690**星][1m] [ObjC] [kjcracks/clutch](https://github.com/kjcracks/clutch) Fast iOS executable dumper
+- [**2682**星][22d] [Go] [google/syzkaller](https://github.com/google/syzkaller) 一个unsupervised、以 coverage 为导向的Linux 系统调用fuzzer
+- [**2681**星][1y] [Py] [mame82/p4wnp1](https://github.com/mame82/p4wnp1) 基于Raspberry Pi Zero 或 Raspberry Pi Zero W 的USB攻击平台, 高度的可定制性
+- [**2674**星][3m] [Py] [drivendata/cookiecutter-data-science](https://github.com/drivendata/cookiecutter-data-science) A logical, reasonably standardized, but flexible project structure for doing and sharing data science work.
+- [**2662**星][2m] [rmusser01/infosec_reference](https://github.com/rmusser01/infosec_reference) An Information Security Reference That Doesn't Suck
+- [**2654**星][17d] [JS] [bkimminich/juice-shop](https://github.com/bkimminich/juice-shop) OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
+- [**2652**星][3m] [Java] [frohoff/ysoserial](https://github.com/frohoff/ysoserial) 生成会利用不安全的Java对象反序列化的Payload
+- [**2645**星][2m] [xairy/linux-kernel-exploitation](https://github.com/xairy/linux-kernel-exploitation) Linux 内核 Fuzz 和漏洞利用的资源收集
+- [**2645**星][1y] [HTML] [chybeta/web-security-learning](https://github.com/chybeta/web-security-learning) Web-Security-Learning
+- [**2641**星][1y] [C] [ckolivas/cgminer](https://github.com/ckolivas/cgminer) ASIC and FPGA miner in c for bitcoin
+- [**2640**星][2d] [Go] [slackhq/nebula](https://github.com/slackhq/nebula) A scalable overlay networking tool with a focus on performance, simplicity and security
+- [**2637**星][4m] [Java] [teevity/ice](https://github.com/teevity/ice) AWS Usage Tool
+- [**2625**星][8m] [leandromoreira/linux-network-performance-parameters](https://github.com/leandromoreira/linux-network-performance-parameters) Learn where some of the network sysctl variables fit into the Linux/Kernel network flow
+- [**2615**星][2m] [Swift] [zhuhaow/nekit](https://github.com/zhuhaow/nekit) A toolkit for Network Extension Framework
+- [**2612**星][4d] [JS] [popcorn-official/popcorn-desktop](https://github.com/popcorn-official/popcorn-desktop) Popcorn Time is a multi-platform, free software BitTorrent client that includes an integrated media player. Desktop ( Windows / Mac / Linux ) a Butter-Project Fork
+- [**2607**星][3y] [Ruby] [arachni/arachni](https://github.com/arachni/arachni) Web Application Security Scanner Framework
+- [**2603**星][23d] [JS] [knownsec/kcon](https://github.com/knownsec/kcon) KCon is a famous Hacker Con powered by Knownsec Team.
+- [**2601**星][1m] [pditommaso/awesome-pipeline](https://github.com/pditommaso/awesome-pipeline) A curated list of awesome pipeline toolkits inspired by Awesome Sysadmin
+- [**2596**星][21d] [C++] [fanout/pushpin](https://github.com/fanout/pushpin) Reverse proxy for realtime web services
+- [**2581**星][3d] [Go] [adguardteam/adguardhome](https://github.com/adguardteam/adguardhome) Network-wide ads & trackers blocking DNS server
+- [**2581**星][1m] [Shell] [medicean/vulapps](https://github.com/medicean/vulapps) 快速搭建各种漏洞环境(Various vulnerability environment)
+- [**2575**星][2m] [C] [huntergregal/mimipenguin](https://github.com/huntergregal/mimipenguin) dump 当前Linux用户的登录密码
+- [**2574**星][8y] [C] [id-software/quake](https://github.com/id-software/quake) Quake GPL Source Release
+- [**2568**星][1m] [C] [esnet/iperf](https://github.com/esnet/iperf) A TCP, UDP, and SCTP network bandwidth measurement tool
+- [**2566**星][2d] [C++] [danmar/cppcheck](https://github.com/danmar/cppcheck) static analysis of C/C++ code
+- [**2565**星][5m] [Java] [google/binnavi](https://github.com/google/binnavi) 二进制分析IDE, 对反汇编代码的控制流程图和调用图进行探查/导航/编辑/注释.(IDA插件的作用是导出反汇编)
+- [**2562**星][3m] [Py] [greenwolf/social_mapper](https://github.com/Greenwolf/social_mapper) 对多个社交网站的用户Profile图片进行大规模的人脸识别
+- [**2553**星][2y] [evilsocket/bettercap](https://github.com/evilsocket/bettercap) 中间人攻击框架,功能完整,模块化设计,轻便且易于扩展。
+- [**2551**星][9d] [Py] [cloudflare/flan](https://github.com/cloudflare/flan) A pretty sweet vulnerability scanner
+- [**2549**星][6m] [C] [geohot/qira](https://github.com/geohot/qira) QEMU Interactive Runtime Analyser
+- [**2543**星][19d] [Py] [hugsy/gef](https://github.com/hugsy/gef) gdb增强工具,使用Python API,用于漏洞开发和逆向分析。
+- [**2542**星][23d] [Go] [drk1wi/modlishka](https://github.com/drk1wi/modlishka) Modlishka. Reverse Proxy.
+- [**2533**星][8m] [offensive-security/kali-nethunter](https://github.com/offensive-security/kali-nethunter) The Kali NetHunter Project
+- [**2533**星][2y] [Py] [google/nogotofail](https://github.com/google/nogotofail) 网络安全测试, 辅助定位和修复弱TLS/SSL连接和敏感明文流量
+- [**2526**星][2d] [Shell] [teddysun/across](https://github.com/teddysun/across) This is a shell script for configure and start WireGuard VPN server
+- [**2525**星][3y] [HTML] [dirtycow/dirtycow.github.io](https://github.com/dirtycow/dirtycow.github.io) Dirty COW
+- [**2522**星][26d] [C] [yrutschle/sslh](https://github.com/yrutschle/sslh) Applicative Protocol Multiplexer (e.g. share SSH and HTTPS on the same port)
+- [**2516**星][3m] [kbandla/aptnotes](https://github.com/kbandla/aptnotes) Various public documents, whitepapers and articles about APT campaigns
+- [**2508**星][5m] [Go] [oj/gobuster](https://github.com/oj/gobuster) Directory/File, DNS and VHost busting tool written in Go
+- [**2507**星][2m] [Java] [jboss-javassist/javassist](https://github.com/jboss-javassist/javassist) Java bytecode engineering toolkit
+- [**2507**星][3y] [C] [dhavalkapil/icmptunnel](https://github.com/dhavalkapil/icmptunnel) Transparently tunnel your IP traffic through ICMP echo and reply packets.
+- [**2503**星][7m] [C++] [chengr28/pcap_dnsproxy](https://github.com/chengr28/pcap_dnsproxy) Pcap_DNSProxy, a local DNS server based on packet capturing
+- [**2501**星][28d] [Py] [ysrc/xunfeng](https://github.com/ysrc/xunfeng) 巡风是一款适用于企业内网的漏洞快速应急,巡航扫描系统。
+- [**2498**星][6m] [taichi-framework/taichi](https://github.com/taichi-framework/taichi) A framework to use Xposed module with or without Root/Unlock bootloader, supportting Android 5.0 ~ 10.0
+- [**2497**星][6d] [onlurking/awesome-infosec](https://github.com/onlurking/awesome-infosec) A curated list of awesome infosec courses and training resources.
+- [**2488**星][5y] [PHP] [audi-1/sqli-labs](https://github.com/audi-1/sqli-labs) SQLI labs to test error based, Blind boolean based, Time based.
+- [**2480**星][2y] [Py] [feross/spoofmac](https://github.com/feross/spoofmac) 伪造MAC地址(OS X, Windows, Linux)
+- [**2476**星][11m] [JS] [weixin/miaow](https://github.com/weixin/Miaow) A set of plugins for Sketch include drawing links & marks, UI Kit & Color sync, font & text replacing.
+- [**2476**星][4m] [Go] [ne0nd0g/merlin](https://github.com/ne0nd0g/merlin) Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.
+- [**2469**星][6d] [JS] [vitaly-t/pg-promise](https://github.com/vitaly-t/pg-promise) PostgreSQL interface for Node.js
+- [**2466**星][30d] [Py] [smicallef/spiderfoot](https://github.com/smicallef/spiderfoot) 自动收集指定目标的信息:IP、域名、主机名、网络子网、ASN、邮件地址、用户名
+- [**2464**星][3m] [C] [martin-ger/esp_wifi_repeater](https://github.com/martin-ger/esp_wifi_repeater) A full functional WiFi Repeater (correctly: a WiFi NAT Router)
+- [**2461**星][11m] [C#] [yck1509/confuserex](https://github.com/yck1509/confuserex) An open-source, free protector for .NET applications
+- [**2461**星][26d] [C++] [pavel-odintsov/fastnetmon](https://github.com/pavel-odintsov/fastnetmon) 快速 DDoS 检测/分析工具,支持 sflow/netflow/mirror
+- [**2454**星][21d] [Shell] [rebootuser/linenum](https://github.com/rebootuser/linenum) Scripted Local Linux Enumeration & Privilege Escalation Checks
+- [**2451**星][3y] [Py] [google/enjarify](https://github.com/google/enjarify) 将Dalvik字节码转换为对应的Java字节码
+- [**2444**星][2d] [PHP] [misp/misp](https://github.com/misp/misp) MISP (core software) - Open Source Threat Intelligence and Sharing Platform (formely known as Malware Information Sharing Platform)
+- [**2429**星][1m] [Py] [0xinfection/awesome-waf](https://github.com/0xinfection/awesome-waf)
+- [**2423**星][2d] [Py] [pwndbg/pwndbg](https://github.com/pwndbg/pwndbg) GDB插件,辅助漏洞开发和逆向
+- [**2420**星][1m] [TSQL] [rapid7/metasploitable3](https://github.com/rapid7/metasploitable3) Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities.
+- [**2417**星][26d] [Py] [infobyte/faraday](https://github.com/infobyte/faraday) 渗透测试和漏洞管理平台
+- [**2416**星][3y] [Py] [arthepsy/ssh-audit](https://github.com/arthepsy/ssh-audit) SSH server auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)
+- [**2411**星][26d] [Py] [xmendez/wfuzz](https://github.com/xmendez/wfuzz) Web application fuzzer
+- [**2410**星][8m] [Py] [lionsec/katoolin](https://github.com/lionsec/katoolin) Automatically install all Kali linux tools
+- [**2407**星][3y] [rpisec/malware](https://github.com/rpisec/malware) Course materials for Malware Analysis by RPISEC
+- [**2404**星][20d] [Java] [m66b/netguard](https://github.com/m66b/netguard) A simple way to block access to the internet per app
+- [**2395**星][3y] [OCaml] [facebookarchive/pfff](https://github.com/facebookarchive/pfff) 一堆工具的集合,用于执行静态分析、代码可视化、代码导航、保持格式的源码转换(例如:源码重构)。完美支持C、Java、JS、PHP,后续将支持其他一大堆语言。
+- [**2392**星][1m] [Go] [xtaci/kcp-go](https://github.com/xtaci/kcp-go) provide a smooth, resilient, ordered, error-checked and anonymous delivery of streams over UDP packets,
+- [**2389**星][8d] [C] [wireshark/wireshark](https://github.com/wireshark/wireshark) Read-only mirror of Wireshark's Git repository. GitHub won't let us disable pull requests. ☞ THEY WILL BE IGNORED HERE ☜ Please upload them at
+- [**2386**星][2y] [Py] [secretsquirrel/the-backdoor-factory](https://github.com/secretsquirrel/the-backdoor-factory) 为PE, ELF, Mach-O二进制文件添加Shellcode后门
+- [**2384**星][2d] [Go] [owasp/amass](https://github.com/owasp/amass) In-depth Attack Surface Mapping and Asset Discovery
+- [**2381**星][11m] [C] [haad/proxychains](https://github.com/haad/proxychains) a tool that forces any TCP connection made by any given application to follow through proxy like TOR or any other SOCKS4, SOCKS5 or HTTP(S) proxy. Supported auth-types: "user/pass" for SOCKS4/5, "basic" for HTTP.
+- [**2376**星][2d] [Java] [mock-server/mockserver](https://github.com/mock-server/mockserver) MockServer enables easy mocking of any system you integrate with via HTTP or HTTPS with clients written in Java, JavaScript and Ruby. MockServer also includes a proxy that introspects all proxied traffic including encrypted SSL traffic and supports Port Forwarding, Web Proxying (i.e. HTTP proxy), HTTPS Tunneling Proxying (using HTTP CONNECT) and…
+- [**2376**星][1y] [Py] [danmcinerney/lans.py](https://github.com/danmcinerney/lans.py) Inject code and spy on wifi users
+- [**2369**星][7d] [security-onion-solutions/security-onion](https://github.com/security-onion-solutions/security-onion) Linux distro for intrusion detection, enterprise security monitoring, and log management
+- [**2369**星][2m] [TeX] [crypto101/book](https://github.com/crypto101/book) Crypto 101, the introductory book on cryptography.
+- [**2366**星][4m] [Go] [mlabouardy/komiser](https://github.com/mlabouardy/komiser)
+- [**2364**星][2m] [Py] [ab77/netflix-proxy](https://github.com/ab77/netflix-proxy) Smart DNS proxy to watch Netflix
+- [**2362**星][1m] [Lua] [snabbco/snabb](https://github.com/snabbco/snabb) Simple and fast packet networking
+- [**2357**星][2d] [C] [domoticz/domoticz](https://github.com/domoticz/domoticz) monitor and configure various devices like: Lights, Switches, various sensors/meters like Temperature, Rain, Wind, UV, Electra, Gas, Water and much more
+- [**2352**星][1m] [Py] [ctfd/ctfd](https://github.com/CTFd/CTFd) CTFs as you need them
+- [**2349**星][11m] [hack-with-github/free-security-ebooks](https://github.com/hack-with-github/free-security-ebooks) Free Security and Hacking eBooks
+- [**2342**星][3m] [Go] [vuvuzela/vuvuzela](https://github.com/vuvuzela/vuvuzela) Private messaging system that hides metadata
+- [**2340**星][6y] [C] [stefanesser/dumpdecrypted](https://github.com/stefanesser/dumpdecrypted) Dumps decrypted mach-o files from encrypted iPhone applications from memory to disk. This tool is necessary for security researchers to be able to look under the hood of encryption.
+- [**2340**星][1m] [C] [hfiref0x/uacme](https://github.com/hfiref0x/uacme) Defeating Windows User Account Control
+- [**2337**星][1m] [JS] [pa11y/pa11y](https://github.com/pa11y/pa11y) Pa11y is your automated accessibility testing pal
+- [**2335**星][3d] [C] [tsl0922/ttyd](https://github.com/tsl0922/ttyd) Share your terminal over the web
+- [**2323**星][3d] [C#] [netchx/netch](https://github.com/netchx/netch) Game accelerator. Support Socks5, Shadowsocks, ShadowsocksR, V2Ray protocol. UDP NAT FullCone
+- [**2321**星][11m] [yeyintminthuhtut/awesome-red-teaming](https://github.com/yeyintminthuhtut/awesome-red-teaming) List of Awesome Red Teaming Resources
+- [**2318**星][5y] [C] [abrasive/shairport](https://github.com/abrasive/shairport) Airtunes emulator! Shairport is no longer maintained.
+- [**2304**星][1y] [Java] [csploit/android](https://github.com/csploit/android) cSploit - The most complete and advanced IT security professional toolkit on Android.
+- [**2301**星][15d] [HTML] [tikam02/devops-guide](https://github.com/tikam02/devops-guide) DevOps Guide from basic to advanced with Interview Questions and Notes
+- [**2295**星][3y] [Py] [lmacken/pyrasite](https://github.com/lmacken/pyrasite) 向运行中的 Python进程注入代码
+- [**2287**星][2y] [Py] [rootphantomer/blasting_dictionary](https://github.com/rootphantomer/blasting_dictionary) 爆破字典
+- [**2284**星][1m] [C] [moby/hyperkit](https://github.com/moby/hyperkit) A toolkit for embedding hypervisor capabilities in your application
+- [**2283**星][5m] [Py] [guohongze/adminset](https://github.com/guohongze/adminset) 自动化运维平台:CMDB、CD、DevOps、资产管理、任务编排、持续交付、系统监控、运维管理、配置管理
+- [**2282**星][3y] [Py] [therook/subbrute](https://github.com/therook/subbrute) A DNS meta-query spider that enumerates DNS records, and subdomains.
+- [**2281**星][3m] [JS] [retirejs/retire.js](https://github.com/retirejs/retire.js) scanner detecting the use of JavaScript libraries with known vulnerabilities
+- [**2276**星][24d] [JS] [talkingdata/inmap](https://github.com/talkingdata/inmap) 大数据地理可视化
+- [**2274**星][1m] [Shell] [v1s1t0r1sh3r3/airgeddon](https://github.com/v1s1t0r1sh3r3/airgeddon) This is a multi-use bash script for Linux systems to audit wireless networks.
+- [**2270**星][1m] [C] [aurorawright/luma3ds](https://github.com/aurorawright/luma3ds) Noob-proof (N)3DS "Custom Firmware"
+- [**2255**星][3m] [Py] [novnc/websockify](https://github.com/novnc/websockify) Websockify is a WebSocket to TCP proxy/bridge. This allows a browser to connect to any application/server/service. Implementations in Python, C, Node.js and Ruby.
+- [**2252**星][18d] [dumb-password-rules/dumb-password-rules](https://github.com/dumb-password-rules/dumb-password-rules) Shaming sites with dumb password rules.
+- [**2252**星][1m] [Shell] [eliaskotlyar/xiaomi-dafang-hacks](https://github.com/eliaskotlyar/xiaomi-dafang-hacks)
+- [**2248**星][12d] [PS] [k8gege/k8tools](https://github.com/k8gege/k8tools) K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)
+- [**2245**星][2y] [Go] [mehrdadrad/mylg](https://github.com/mehrdadrad/mylg) 网络诊断工具
+- [**2226**星][5y] [Go] [filosottile/heartbleed](https://github.com/filosottile/heartbleed) A checker (site and tool) for CVE-2014-0160
+- [**2217**星][1y] [JS] [cure53/h5sc](https://github.com/cure53/h5sc) HTML5 Security Cheatsheet - A collection of HTML5 related XSS attack vectors
+- [**2215**星][6y] [C++] [codebutler/firesheep](https://github.com/codebutler/firesheep) 演示HTTP会话劫持攻击的Firefox扩展
+- [**2213**星][2d] [Go] [aquasecurity/kube-bench](https://github.com/aquasecurity/kube-bench) Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark
+- [**2211**星][1m] [C] [texane/stlink](https://github.com/texane/stlink) stm32 discovery line linux programmer
+- [**2211**星][6d] [Go] [google/mtail](https://github.com/google/mtail) extract whitebox monitoring data from application logs for collection in a timeseries database
+- [**2209**星][22d] [Rust] [cloudflare/boringtun](https://github.com/cloudflare/boringtun) an implementation of the WireGuard® protocol designed for portability and speed.
+- [**2192**星][23d] [C++] [google/bloaty](https://github.com/google/bloaty) Bloaty McBloatface: a size profiler for binaries
+- [**2189**星][1m] [sobolevn/awesome-cryptography](https://github.com/sobolevn/awesome-cryptography) A curated list of cryptography resources and links.
+- [**2187**星][7d] [getlantern/lantern-binaries](https://github.com/getlantern/lantern-binaries) Lantern installers binary downloads.
+- [**2186**星][1y] [Py] [datasploit/datasploit](https://github.com/DataSploit/datasploit) 对指定目标执行多种侦查技术:企业、人、电话号码、比特币地址等
+- [**2184**星][3y] [enddo/awesome-windows-exploitation](https://github.com/enddo/awesome-windows-exploitation) A curated list of awesome Windows Exploitation resources, and shiny things. Inspired by awesom
+- [**2183**星][2d] [C] [armmbed/mbedtls](https://github.com/armmbed/mbedtls) An open source, portable, easy to use, readable and flexible SSL library
+- [**2179**星][1m] [JS] [secgroundzero/warberry](https://github.com/secgroundzero/warberry) WarBerryPi - Tactical Exploitation
+- [**2173**星][1y] [JS] [iam4x/pokemongo-webspoof](https://github.com/iam4x/pokemongo-webspoof)
+- [**2163**星][2m] [Go] [mmatczuk/go-http-tunnel](https://github.com/mmatczuk/go-http-tunnel) Fast and secure tunnels over HTTP/2
+- [**2162**星][1y] [C++] [maestron/botnets](https://github.com/maestron/botnets) This is a collection of #botnet source codes, unorganized. For EDUCATIONAL PURPOSES ONLY
+- [**2159**星][1m] [Py] [commixproject/commix](https://github.com/commixproject/commix) Automated All-in-One OS command injection and exploitation tool.
+- [**2158**星][9m] [exakat/php-static-analysis-tools](https://github.com/exakat/php-static-analysis-tools) A reviewed list of useful PHP static analysis tools
+- [**2158**星][1m] [C] [conorpp/u2f-zero](https://github.com/conorpp/u2f-zero) U2F USB token optimized for physical security, affordability, and style
+- [**2158**星][2m] [PHP] [antonioribeiro/tracker](https://github.com/antonioribeiro/tracker) Tracker gathers a lot of information from your requests to identify and store
+- [**2153**星][6y] [Ruby] [plamoni/siriproxy](https://github.com/plamoni/siriproxy) A (tampering) proxy server for Apple's Siri
+- [**2149**星][8d] [Java] [google/wycheproof](https://github.com/google/wycheproof) Project Wycheproof tests crypto libraries against known attacks.
+- [**2138**星][2m] [Py] [trustedsec/unicorn](https://github.com/trustedsec/unicorn) 通过PowerShell降级攻击, 直接将Shellcode注入到内存
+- [**2132**星][1m] [Py] [jonathansalwan/ropgadget](https://github.com/jonathansalwan/ropgadget) This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC and MIPS architectures.
+- [**2127**星][18d] [Assembly] [pret/pokered](https://github.com/pret/pokered) disassembly of Pokémon Red/Blue
+- [**2122**星][2y] [Py] [rub-nds/pret](https://github.com/rub-nds/pret) Printer Exploitation Toolkit - The tool that made dumpster diving obsolete.
+- [**2118**星][4d] [goq/telegram-list](https://github.com/goq/telegram-list) List of telegram groups, channels & bots // Список интересных групп, каналов и ботов телеграма // Список чатов для программистов
+- [**2117**星][1m] [Py] [elceef/dnstwist](https://github.com/elceef/dnstwist) 域名置换引擎,用于检测打字错误,网络钓鱼和企业间谍活动
+- [**2116**星][7m] [Py] [calebmadrigal/trackerjacker](https://github.com/calebmadrigal/trackerjacker) 映射你没连接到的Wifi网络, 类似于NMap, 另外可以追踪设备
+- [**2115**星][2d] [Py] [fortynorthsecurity/eyewitness](https://github.com/FortyNorthSecurity/EyeWitness) 给网站做快照,提供服务器Header信息,识别默认凭证等
+- [**2114**星][7y] [C++] [lloyd/node-memwatch](https://github.com/lloyd/node-memwatch) A NodeJS library to keep an eye on your memory usage, and discover and isolate leaks.
+- [**2107**星][4y] [C] [hashcat/hashcat-legacy](https://github.com/hashcat/hashcat-legacy) Advanced CPU-based password recovery utility
+- [**2105**星][8m] [Py] [linkedin/qark](https://github.com/linkedin/qark) 查找Android App的漏洞, 支持源码或APK文件
+- [**2103**星][3m] [yeahhub/hacking-security-ebooks](https://github.com/yeahhub/hacking-security-ebooks) Top 100 Hacking & Security E-Books (Free Download)
+- [**2103**星][23d] [infoslack/awesome-web-hacking](https://github.com/infoslack/awesome-web-hacking) A list of web application security
+- [**2095**星][2d] [C] [wireguard/wireguard](https://github.com/wireguard/wireguard) fast, modern, secure kernel VPN tunnel
+- [**2093**星][22d] [Ruby] [urbanadventurer/whatweb](https://github.com/urbanadventurer/whatweb) Next generation web scanner
+- [**2084**星][5d] [C] [flatpak/flatpak](https://github.com/flatpak/flatpak) Linux application sandboxing and distribution framework
+- [**2078**星][1m] [Go] [theupdateframework/notary](https://github.com/theupdateframework/notary) Notary is a project that allows anyone to have trust over arbitrary collections of data
+- [**2071**星][15d] [Shell] [wulabing/v2ray_ws-tls_bash_onekey](https://github.com/wulabing/v2ray_ws-tls_bash_onekey) V2Ray Nginx+vmess+ws+tls/ http2 over tls 一键安装脚本
+- [**2066**星][9m] [jermic/android-crack-tool](https://github.com/jermic/android-crack-tool)
+- [**2058**星][4m] [Py] [whaleshark-team/cobra](https://github.com/WhaleShark-Team/cobra) Source Code Security Audit (源代码安全审计)
+- [**2057**星][1y] [bluscreenofjeff/red-team-infrastructure-wiki](https://github.com/bluscreenofjeff/red-team-infrastructure-wiki) Wiki to collect Red Team infrastructure hardening resources
+- [**2054**星][7d] [swiftonsecurity/sysmon-config](https://github.com/swiftonsecurity/sysmon-config) Sysmon configuration file template with default high-quality event tracing
+- [**2051**星][2m] [tanprathan/mobileapp-pentest-cheatsheet](https://github.com/tanprathan/mobileapp-pentest-cheatsheet) The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.
+- [**2048**星][6m] [Go] [maxmcd/webtty](https://github.com/maxmcd/webtty) Share a terminal session over WebRTC
+- [**2047**星][1m] [edoverflow/bugbounty-cheatsheet](https://github.com/edoverflow/bugbounty-cheatsheet) A list of interesting payloads, tips and tricks for bug bounty hunters.
+- [**2045**星][2m] [C++] [lordnoteworthy/al-khaser](https://github.com/lordnoteworthy/al-khaser) 在野恶意软件使用的技术:虚拟机,仿真,调试器,沙盒检测。
+- [**2045**星][8m] [Shell] [foospidy/payloads](https://github.com/foospidy/payloads) web 攻击 Payload 集合
+- [**2043**星][12d] [Py] [nabla-c0d3/sslyze](https://github.com/nabla-c0d3/sslyze) SSL/TLS服务器扫描
+- [**2042**星][2y] [Py] [derv82/wifite](https://github.com/derv82/wifite) 自动化无线攻击工具
+- [**2039**星][5d] [C++] [openthread/openthread](https://github.com/openthread/openthread) OpenThread released by Google is an open-source implementation of the Thread networking protocol
+- [**2033**星][2d] [ObjC] [ios-control/ios-deploy](https://github.com/ios-control/ios-deploy) Install and debug iPhone apps from the command line, without using Xcode
+- [**2033**星][2d] [Py] [sensepost/objection](https://github.com/sensepost/objection) runtimemobile exploration
+- [**2029**星][3d] [Go] [goodrain/rainbond](https://github.com/goodrain/rainbond) Enterprise application cloud operating system(企业应用云操作系统)
+- [**2025**星][5y] [CoffeeScript] [shadowsocks/shadowsocks-gui](https://github.com/shadowsocks/shadowsocks-gui) Shadowsocks GUI client
+- [**2024**星][2d] [C++] [darthton/blackbone](https://github.com/darthton/blackbone) Windows memory hacking library
+- [**2017**星][3y] [Swift] [urinx/iosapphook](https://github.com/urinx/iosapphook) 专注于非越狱环境下iOS应用逆向研究,从dylib注入,应用重签名到App Hook
+- [**2016**星][23d] [Java] [genymobile/gnirehtet](https://github.com/genymobile/gnirehtet) Gnirehtet provides reverse tethering for Android
+- [**2016**星][9m] [C] [dekunukem/nintendo_switch_reverse_engineering](https://github.com/dekunukem/nintendo_switch_reverse_engineering) A look at inner workings of Joycon and Nintendo Switch
+- [**2014**星][1y] [C] [xoreaxeaxeax/rosenbridge](https://github.com/xoreaxeaxeax/rosenbridge) Hardware backdoors in some x86 CPUs
+- [**2014**星][5d] [Java] [jeremylong/dependencycheck](https://github.com/jeremylong/dependencycheck) OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
+- [**2005**星][4y] [C] [probablycorey/wax](https://github.com/probablycorey/wax) Wax is now being maintained by alibaba
+- [**2003**星][2m] [Go] [skynetservices/skydns](https://github.com/skynetservices/skydns) DNS service discovery for etcd
+- [**2000**星][1m] [qazbnm456/awesome-cve-poc](https://github.com/qazbnm456/awesome-cve-poc) CVE PoC列表
+- [**1996**星][29d] [Java] [elderdrivers/edxposed](https://github.com/elderdrivers/edxposed) Elder driver Xposed Framework.
+- [**1994**星][7m] [Py] [fsecurelabs/drozer](https://github.com/FSecureLABS/drozer) The Leading Security Assessment Framework for Android.
+- [**1994**星][3m] [infosecn1nja/ad-attack-defense](https://github.com/infosecn1nja/ad-attack-defense) Attack and defend active directory using modern post exploitation adversary tradecraft activity
+- [**1994**星][27d] [Swift] [github/softu2f](https://github.com/github/softu2f) Software U2F authenticator for macOS
+- [**1992**星][5d] [C#] [mathewsachin/captura](https://github.com/mathewsachin/captura) Capture Screen, Audio, Cursor, Mouse Clicks and Keystrokes
+- [**1990**星][8d] [HTML] [gtfobins/gtfobins.github.io](https://github.com/gtfobins/gtfobins.github.io) Curated list of Unix binaries that can be exploited to bypass system security restrictions
+- [**1989**星][4y] [Go] [yahoo/gryffin](https://github.com/yahoo/gryffin) Gryffin is a large scale web security scanning platform.
+- [**1989**星][2m] [C++] [asmjit/asmjit](https://github.com/asmjit/asmjit) Complete x86/x64 JIT and AOT Assembler for C++
+- [**1987**星][2y] [dloss/python-pentest-tools](https://github.com/dloss/python-pentest-tools) 可用于渗透测试的Python工具收集
+- [**1977**星][5d] [Go] [projectdiscovery/subfinder](https://github.com/projectdiscovery/subfinder) Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.
+- [**1977**星][5d] [Go] [projectdiscovery/subfinder](https://github.com/projectdiscovery/subfinder) 使用Passive Sources, Search Engines, Pastebins, Internet Archives等查找子域名
+- [**1972**星][1m] [Py] [momosecurity/aswan](https://github.com/momosecurity/aswan) 陌陌风控系统静态规则引擎,零基础简易便捷的配置多种复杂规则,实时高效管控用户异常行为。
+- [**1971**星][5d] [Py] [j3ssie/osmedeus](https://github.com/j3ssie/osmedeus) Fully automated offensive security framework for reconnaissance and vulnerability scanning
+- [**1966**星][11d] [Go] [ullaakut/cameradar](https://github.com/Ullaakut/cameradar) Cameradar hacks its way into RTSP videosurveillance cameras
+- [**1966**星][9m] [JS] [weichiachang/stacks-cli](https://github.com/weichiachang/stacks-cli) Check website stack from the terminal
+- [**1966**星][1y] [BitBake] [1n3/intruderpayloads](https://github.com/1n3/intruderpayloads) A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.
+- [**1955**星][7d] [Perl] [spiderlabs/owasp-modsecurity-crs](https://github.com/spiderlabs/owasp-modsecurity-crs) OWASP ModSecurity Core Rule Set (CRS) Project (Official Repository)
+- [**1953**星][2y] [obfuscator-llvm/obfuscator](https://github.com/obfuscator-llvm/obfuscator) Obfuscator-LLVM
+- [**1952**星][1y] [Go] [hyperhq/hyperd](https://github.com/hyperhq/hyperd) HyperContainer Daemon
+- [**1951**星][8d] [Py] [cea-sec/miasm](https://github.com/cea-sec/miasm) Reverse engineering framework in Python
+- [**1947**星][29d] [Py] [nixawk/pentest-wiki](https://github.com/nixawk/pentest-wiki) PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.
+- [**1945**星][5d] [C] [microsoft/procdump-for-linux](https://github.com/microsoft/procdump-for-linux) Linux 版本的 ProcDump
+- [**1942**星][3y] [C#] [lazocoder/windows-hacks](https://github.com/lazocoder/windows-hacks) Creative and unusual things that can be done with the Windows API.
+- [**1938**星][4m] [C] [meituan-dianping/logan](https://github.com/meituan-dianping/logan) Logan is a lightweight case logging system based on mobile platform.
+- [**1938**星][7d] [Go] [zalando/skipper](https://github.com/zalando/skipper) An HTTP router and reverse proxy for service composition, including use cases like Kubernetes Ingress
+- [**1935**星][19d] [Go] [mpolden/echoip](https://github.com/mpolden/echoip) IP address lookup service
+- [**1933**星][5m] [C] [darkk/redsocks](https://github.com/darkk/redsocks) transparent TCP-to-proxy redirector
+- [**1923**星][3y] [Py] [aoncyberlabs/windows-exploit-suggester](https://github.com/AonCyberLabs/Windows-Exploit-Suggester) This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules available for the missing bulletins.
+- [**1920**星][4y] [Py] [ziggear/shadowsocks](https://github.com/ziggear/shadowsocks) backup of
+- [**1920**星][2d] [C++] [powerdns/pdns](https://github.com/powerdns/pdns) PowerDNS
+- [**1920**星][9d] [CSS] [cyb3rward0g/helk](https://github.com/cyb3rward0g/helk) 对ELK栈进行分析,具备多种高级功能,例如SQL声明性语言,图形,结构化流,机器学习等
+- [**1918**星][3m] [toolswatch/blackhat-arsenal-tools](https://github.com/toolswatch/blackhat-arsenal-tools) Black Hat 武器库
+- [**1917**星][2d] [C] [ntop/ndpi](https://github.com/ntop/ndpi) Open Source Deep Packet Inspection Software Toolkit
+- [**1915**星][18d] [Py] [lanjelot/patator](https://github.com/lanjelot/patator) Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.
+- [**1914**星][7d] [Go] [solo-io/gloo](https://github.com/solo-io/gloo) An Envoy-Powered API Gateway
+- [**1914**星][2d] [chaitin/xray](https://github.com/chaitin/xray) xray 安全评估工具 | 使用之前务必先阅读文档
+- [**1903**星][3m] [Go] [minishift/minishift](https://github.com/minishift/minishift) Run OpenShift 3.x locally
+- [**1901**星][9d] [C] [chipsec/chipsec](https://github.com/chipsec/chipsec) 分析PC平台的安全性, 包括硬件、系统固件(BIOS/UEFI)和平台组件
+- [**1900**星][1y] [Py] [derv82/wifite2](https://github.com/derv82/wifite2) 无线网络审计工具wifite 的升级版/重制版
+- [**1898**星][3d] [C++] [mhammond/pywin32](https://github.com/mhammond/pywin32) Python for Windows (pywin32) Extensions
+- [**1896**星][7d] [Shell] [toniblyx/prowler](https://github.com/toniblyx/prowler) AWS Security Best Practices Assessment, Auditing, Hardening and Forensics Readiness Tool. It follows guidelines of the CIS Amazon Web Services Foundations Benchmark and DOZENS of additional checks including GDPR and HIPAA (+100). Official CIS for AWS guide:
+- [**1893**星][6d] [Py] [mozilla/mozdef](https://github.com/mozilla/mozdef) Mozilla Enterprise Defense Platform
+- [**1893**星][6m] [Java] [fuzion24/justtrustme](https://github.com/fuzion24/justtrustme) An xposed module that disables SSL certificate checking for the purposes of auditing an app with cert pinning
+- [**1886**星][4m] [C] [shadowsocks/simple-obfs](https://github.com/shadowsocks/simple-obfs) A simple obfuscating tool (Deprecated)
+- [**1884**星][1y] [Py] [aploium/zmirror](https://github.com/aploium/zmirror) The next-gen reverse proxy for full site mirroring
+- [**1880**星][4m] [Py] [python-security/pyt](https://github.com/python-security/pyt) Python Web App 安全漏洞检测和静态分析工具
+- [**1878**星][16d] [YARA] [yara-rules/rules](https://github.com/yara-rules/rules) Repository of yara rules
+- [**1878**星][5y] [C++] [tum-vision/lsd_slam](https://github.com/tum-vision/lsd_slam) LSD-SLAM
+- [**1878**星][2m] [Py] [pycqa/bandit](https://github.com/pycqa/bandit) 在Python代码中查找常见的安全问题
+- [**1877**星][2d] [C] [merbanan/rtl_433](https://github.com/merbanan/rtl_433) Program to decode traffic from Devices that are broadcasting on 433.9 MHz like temperature sensors
+- [**1876**星][9d] [olivierlaflamme/cheatsheet-god](https://github.com/olivierlaflamme/cheatsheet-god) Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet
+- [**1876**星][27d] [hmaverickadams/beginner-network-pentesting](https://github.com/hmaverickadams/beginner-network-pentesting) Notes for Beginner Network Pentesting Course
+- [**1873**星][12d] [Py] [aquasecurity/kube-hunter](https://github.com/aquasecurity/kube-hunter) Hunt for security weaknesses in Kubernetes clusters
+- [**1870**星][5d] [C#] [hmbsbige/shadowsocksr-windows](https://github.com/hmbsbige/shadowsocksr-windows) 【自用】Bug-Oriented Programming
+- [**1869**星][6d] [Java] [adoptopenjdk/jitwatch](https://github.com/adoptopenjdk/jitwatch) Log analyser / visualiser for Java HotSpot JIT compiler. Inspect inlining decisions, hot methods, bytecode, and assembly. View results in the JavaFX user interface.
+- [**1865**星][6d] [C++] [acidanthera/lilu](https://github.com/acidanthera/Lilu) Arbitrary kext and process patching on macOS
+- [**1865**星][10m] [PHP] [bartblaze/php-backdoors](https://github.com/bartblaze/php-backdoors) A collection of PHP backdoors. For educational or testing purposes only.
+- [**1864**星][23d] [C] [tinyproxy/tinyproxy](https://github.com/tinyproxy/tinyproxy) a light-weight HTTP/HTTPS proxy daemon for POSIX operating systems
+- [**1862**星][4y] [ObjC] [xcodeghostsource/xcodeghost](https://github.com/xcodeghostsource/xcodeghost) "XcodeGhost" Source
+- [**1860**星][9d] [Lua] [vulnerscom/nmap-vulners](https://github.com/vulnerscom/nmap-vulners) NSE script based on Vulners.com API
+- [**1857**星][5m] [bypass007/emergency-response-notes](https://github.com/bypass007/emergency-response-notes) 应急响应实战笔记,一个安全工程师的自我修养。
+- [**1855**星][2m] [Py] [pwnlandia/mhn](https://github.com/pwnlandia/mhn) 蜜罐网络
+- [**1854**星][5d] [TS] [snyk/snyk](https://github.com/snyk/snyk) CLI and build-time tool to find & fix known vulnerabilities in open-source dependencies
+- [**1854**星][11m] [C++] [googlecreativelab/open-nsynth-super](https://github.com/googlecreativelab/open-nsynth-super) Open NSynth Super is an experimental physical interface for the NSynth algorithm
+- [**1853**星][2d] [Py] [bregman-arie/devops-interview-questions](https://github.com/bregman-arie/devops-interview-questions) Linux, Jenkins, AWS, SRE, Prometheus, Docker, Python, Ansible, Git, Kubernetes, Terraform, OpenStack, SQL, NoSQL, Azure, GCP, DNS, Elastic
+- [**1853**星][4m] [Shell] [arismelachroinos/lscript](https://github.com/arismelachroinos/lscript) 自动化无线渗透和Hacking 任务的脚本
+- [**1852**星][3d] [C] [github/glb-director](https://github.com/github/glb-director) GitHub Load Balancer Director and supporting tooling.
+- [**1851**星][1y] [Java] [jindrapetrik/jpexs-decompiler](https://github.com/jindrapetrik/jpexs-decompiler) JPEXS Free Flash Decompiler
+- [**1848**星][6m] [Assembly] [pooler/cpuminer](https://github.com/pooler/cpuminer) cpuminer:莱特币和比特币的多线程 CPU 矿机
+- [**1847**星][8m] [Py] [netflix-skunkworks/stethoscope](https://github.com/Netflix-Skunkworks/stethoscope) Personalized, user-focused recommendations for employee information security.
+- [**1842**星][1m] [Jupyter Notebook] [hunters-forge/threathunter-playbook](https://github.com/hunters-forge/ThreatHunter-Playbook) A Threat hunter's playbook to aid the development of techniques and hypothesis for hunting campaigns.
+- [**1842**星][1y] [Java] [yeriomin/yalpstore](https://github.com/yeriomin/yalpstore) Download apks from Google Play Store
+- [**1842**星][2d] [C++] [pytorch/glow](https://github.com/pytorch/glow) Compiler for Neural Network hardware accelerators
+- [**1841**星][2m] [C] [retroplasma/earth-reverse-engineering](https://github.com/retroplasma/earth-reverse-engineering) Reversing Google's 3D satellite mode
+- [**1839**星][3y] [Java] [chora10/cknife](https://github.com/chora10/cknife) Cknife
+- [**1838**星][1y] [Py] [jinnlynn/genpac](https://github.com/jinnlynn/genpac) PAC/Dnsmasq/Wingy file Generator, working with gfwlist, support custom rules.
+- [**1830**星][2m] [Go] [influxdata/kapacitor](https://github.com/influxdata/kapacitor) Open source framework for processing, monitoring, and alerting on time series data
+- [**1828**星][3m] [JS] [coreybutler/node-windows](https://github.com/coreybutler/node-windows) Windows support for Node.JS scripts (daemons, eventlog, UAC, etc).
+- [**1828**星][1y] [CSS] [ctfs/write-ups-2015](https://github.com/ctfs/write-ups-2015) Wiki-like CTF write-ups repository, maintained by the community. 2015
+- [**1824**星][5d] [Py] [trailofbits/manticore](https://github.com/trailofbits/manticore) 动态二进制分析工具,支持符号执行(symbolic execution)、污点分析(taint analysis)、运行时修改。
+- [**1819**星][6d] [C] [mgba-emu/mgba](https://github.com/mgba-emu/mgba) mGBA Game Boy Advance Emulator
+- [**1818**星][2m] [djadmin/awesome-bug-bounty](https://github.com/djadmin/awesome-bug-bounty) A comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.
+- [**1815**星][5m] [Py] [veil-framework/veil](https://github.com/veil-framework/veil) generate metasploit payloads that bypass common anti-virus solutions
+- [**1814**星][6m] [C++] [iagox86/dnscat2](https://github.com/iagox86/dnscat2) 在 DNS 协议上创建加密的 C&C channel
+- [**1804**星][10d] [Go] [gdamore/tcell](https://github.com/gdamore/tcell) Tcell is an alternate terminal package, similar in some ways to termbox, but better in others.
+- [**1801**星][12m] [Go] [intelsdi-x/snap](https://github.com/intelsdi-x/snap) an open telemetry framework designed to simplify the collection, processing and publishing of system data through a single API.
+- [**1800**星][3y] [ObjC] [kpwn/yalu102](https://github.com/kpwn/yalu102) incomplete iOS 10.2 jailbreak for 64 bit devices by qwertyoruiopz and marcograssi
+- [**1795**星][7m] [Py] [lijiejie/subdomainsbrute](https://github.com/lijiejie/subdomainsbrute) 子域名爆破
+- [**1790**星][12m] [Py] [ctfs/write-ups-2017](https://github.com/ctfs/write-ups-2017) Wiki-like CTF write-ups repository, maintained by the community. 2017
+- [**1785**星][1y] [aozhimin/ios-monitor-platform](https://github.com/aozhimin/ios-monitor-platform)
+- [**1784**星][16d] [Shell] [pirate/wireguard-docs](https://github.com/pirate/wireguard-docs)
+- [**1781**星][15d] [Shell] [leebaird/discover](https://github.com/leebaird/discover) 自定义的bash脚本, 用于自动化多个渗透测试任务, 包括: 侦查、扫描、解析、在Metasploit中创建恶意Payload和Listener
+- [**1779**星][4y] [caesar0301/awesome-pcaptools](https://github.com/caesar0301/awesome-pcaptools) A collection of tools developed by other researchers in the Computer Science area to process network traces. All the right reserved for the original authors.
+- [**1778**星][15d] [C++] [apitrace/apitrace](https://github.com/apitrace/apitrace) Tools for tracing OpenGL, Direct3D, and other graphics APIs
+- [**1777**星][7m] [C++] [wrbug/dumpdex](https://github.com/wrbug/dumpdex) Android脱壳
+- [**1777**星][7d] [PHP] [ezyang/htmlpurifier](https://github.com/ezyang/htmlpurifier) Standards compliant HTML filter written in PHP
+- [**1777**星][5d] [Go] [convox/rack](https://github.com/convox/rack) Private PaaS built on native AWS services for maximum privacy and minimum upkeep
+- [**1774**星][3y] [ObjC] [tapwork/heapinspector-for-ios](https://github.com/tapwork/heapinspector-for-ios) Find memory issues & leaks in your iOS app without instruments
+- [**1774**星][3m] [Py] [epinna/weevely3](https://github.com/epinna/weevely3) Weaponized web shell
+- [**1772**星][2y] [JS] [cazala/coin-hive](https://github.com/cazala/coin-hive) CoinHive cryptocurrency miner for node.js
+- [**1770**星][3y] [ObjC] [alibaba/wax](https://github.com/alibaba/wax) Wax is a framework that lets you write native iPhone apps in Lua.
+- [**1761**星][6d] [C] [google/wuffs](https://github.com/google/wuffs) Wrangling Untrusted File Formats Safely
+- [**1761**星][2y] [CSS] [b374k/b374k](https://github.com/b374k/b374k) PHP Webshell with handy features
+- [**1760**星][3y] [Go] [elastic/logstash-forwarder](https://github.com/elastic/logstash-forwarder) An experiment to cut logs in preparation for processing elsewhere. Replaced by Filebeat:
+- [**1758**星][12m] [JS] [puppeteer/examples](https://github.com/puppeteer/examples) Use case-driven examples for using Puppeteer and headless chrome
+- [**1756**星][10d] [17mon/china_ip_list](https://github.com/17mon/china_ip_list)
+- [**1754**星][2m] [onethawt/idaplugins-list](https://github.com/onethawt/idaplugins-list) IDA插件收集
+- [**1747**星][2d] [PHP] [wordpress/wordpress-coding-standards](https://github.com/wordpress/wordpress-coding-standards) PHP_CodeSniffer rules (sniffs) to enforce WordPress coding conventions
+- [**1745**星][1y] [PS] [fuzzysecurity/powershell-suite](https://github.com/fuzzysecurity/powershell-suite) My musings with PowerShell
+- [**1744**星][1y] [coreb1t/awesome-pentest-cheat-sheets](https://github.com/coreb1t/awesome-pentest-cheat-sheets) Collection of the cheat sheets useful for pentesting
+- [**1742**星][3m] [tunz/js-vuln-db](https://github.com/tunz/js-vuln-db) A collection of JavaScript engine CVEs with PoCs
+- [**1739**星][21d] [ngalongc/bug-bounty-reference](https://github.com/ngalongc/bug-bounty-reference) Inspired by
+- [**1738**星][2y] [Go] [vzex/dog-tunnel](https://github.com/vzex/dog-tunnel) p2p tunnel,(udp mode work with kcp,
+- [**1735**星][2m] [PHP] [orangetw/my-ctf-web-challenges](https://github.com/orangetw/my-ctf-web-challenges) Collection of CTF Web challenges I made
+- [**1731**星][1m] [PS] [fireeye/flare-vm](https://github.com/fireeye/flare-vm) 火眼发布用于 Windows 恶意代码分析的虚拟机:FLARE VM
+- [**1730**星][3y] [Go] [s-rah/onionscan](https://github.com/s-rah/onionscan) OnionScan is a free and open source tool for investigating the Dark Web.
+- [**1730**星][6m] [Smali] [ahmyth/ahmyth-android-rat](https://github.com/ahmyth/ahmyth-android-rat) Android Remote Administration Tool
+- [**1723**星][14d] [selierlin/share-ssr-v2ray](https://github.com/selierlin/share-ssr-v2ray)
+- [**1719**星][4d] [C] [google/honggfuzz](https://github.com/google/honggfuzz) Security oriented fuzzer with powerful analysis options. Supports evolutionary, feedback-driven fuzzing based on code coverage (software- and hardware-based)
+- [**1718**星][9m] [Py] [constverum/proxybroker](https://github.com/constverum/proxybroker) Proxy [Finder | Checker | Server]. HTTP(S) & SOCKS
+- [**1717**星][4m] [Py] [lgandx/responder](https://github.com/lgandx/responder) Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.
+- [**1714**星][5d] [Ruby] [cliffe/secgen](https://github.com/cliffe/secgen) Create randomly insecure VMs
+- [**1710**星][1m] [Go] [eth0izzle/shhgit](https://github.com/eth0izzle/shhgit) 监听Github Event API,实时查找Github代码和Gist中的secret和敏感文件
+- [**1709**星][3m] [Py] [anorov/cloudflare-scrape](https://github.com/anorov/cloudflare-scrape) A Python module to bypass Cloudflare's anti-bot page.
+- [**1709**星][1y] [Java] [ac-pm/inspeckage](https://github.com/ac-pm/inspeckage) Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)
+- [**1707**星][3d] [TSQL] [brentozarultd/sql-server-first-responder-kit](https://github.com/brentozarultd/sql-server-first-responder-kit) sp_Blitz, sp_BlitzCache, sp_BlitzFirst, sp_BlitzIndex, and other SQL Server scripts for health checks and performance tuning.
+- [**1706**星][16d] [Go] [hashicorp/memberlist](https://github.com/hashicorp/memberlist) Golang package for gossip based membership and failure detection
+- [**1700**星][8m] [Py] [guelfoweb/knock](https://github.com/guelfoweb/knock) 使用 Wordlist 枚举子域名
+- [**1697**星][9m] [CSS] [bagder/http2-explained](https://github.com/bagder/http2-explained) A detailed document explaining and documenting HTTP/2, the successor to the widely popular HTTP/1.1 protocol
+- [**1696**星][3m] [PHP] [xtr4nge/fruitywifi](https://github.com/xtr4nge/fruitywifi) FruityWiFi is a wireless network auditing tool. The application can be installed in any Debian based system (Jessie) adding the extra packages. Tested in Debian, Kali Linux, Kali Linux ARM (Raspberry Pi), Raspbian (Raspberry Pi), Pwnpi (Raspberry Pi), Bugtraq, NetHunter.
+- [**1696**星][1y] [Swift] [haxpor/potatso](https://github.com/haxpor/potatso) Potatso is an iOS client that implements Shadowsocks proxy with the leverage of NetworkExtension framework. ***This project is unmaintained, try taking a look at this fork
+- [**1695**星][6m] [Py] [yelp/osxcollector](https://github.com/yelp/osxcollector) A forensic evidence collection & analysis toolkit for OS X
+- [**1695**星][3y] [CoffeeScript] [okturtles/dnschain](https://github.com/okturtles/dnschain) A blockchain-based DNS + HTTP server that fixes HTTPS security, and more!
+- [**1689**星][5m] [C] [networkprotocol/netcode.io](https://github.com/networkprotocol/netcode.io) A protocol for secure client/server connections over UDP
+- [**1687**星][5m] [JS] [expressjs/csurf](https://github.com/expressjs/csurf) CSRF token middleware
+- [**1687**星][15d] [HTML] [chromium/badssl.com](https://github.com/chromium/badssl.com)
+- [**1686**星][8m] [Makefile] [raspberrypi/noobs](https://github.com/raspberrypi/noobs) NOOBS (New Out Of Box Software) - An easy Operating System install manager for the Raspberry Pi
+- [**1685**星][4m] [R] [briatte/awesome-network-analysis](https://github.com/briatte/awesome-network-analysis) A curated list of awesome network analysis resources.
+- [**1683**星][1y] [owasp/devguide](https://github.com/owasp/devguide) The OWASP Guide
+- [**1682**星][3m] [Py] [rootm0s/winpwnage](https://github.com/rootm0s/winpwnage) UAC bypass, Elevate, Persistence and Execution methods
+- [**1677**星][30d] [Swift] [pmusolino/wormholy](https://github.com/pmusolino/wormholy) iOS network debugging, like a wizard 🧙♂️
+- [**1674**星][2d] [C++] [microsoft/detours](https://github.com/microsoft/detours) Detours is a software package for monitoring and instrumenting API calls on Windows. It is distributed in source code form.
+- [**1671**星][7m] [C++] [yegord/snowman](https://github.com/yegord/snowman) Snowman反编译器,支持x86, AMD64, ARM。有独立的GUI工具、命令行工具、IDA/Radare2/x64dbg插件,也可以作为库使用
+ - [IDA插件](https://github.com/yegord/snowman/tree/master/src/ida-plugin)
+ - [snowman](https://github.com/yegord/snowman/tree/master/src/snowman) QT界面
+ - [nocode](https://github.com/yegord/snowman/tree/master/src/nocode) 命令行工具
+ - [nc](https://github.com/yegord/snowman/tree/master/src/nc) 核心代码,可作为库使用
+- [**1668**星][2m] [NSIS] [angryip/ipscan](https://github.com/angryip/ipscan) Angry IP Scanner - fast and friendly network scanner
+- [**1666**星][2d] [Java] [apache/geode](https://github.com/apache/geode) Apache Geode
+- [**1663**星][4y] [Java] [dodola/hotfix](https://github.com/dodola/hotfix) 安卓App热补丁动态修复框架
+- [**1661**星][6m] [C] [easyhook/easyhook](https://github.com/easyhook/easyhook) The reinvention of Windows API Hooking
+- [**1661**星][2d] [Py] [cea-sec/ivre](https://github.com/cea-sec/ivre) Network recon framework.
+- [**1659**星][10d] [roave/securityadvisories](https://github.com/roave/securityadvisories) ensures that your application doesn't have installed dependencies with known security vulnerabilities
+- [**1656**星][6d] [JS] [tylerbrock/mongo-hacker](https://github.com/tylerbrock/mongo-hacker) MongoDB Shell Enhancements for Hackers
+- [**1655**星][3m] [Py] [boppreh/keyboard](https://github.com/boppreh/keyboard) Hook and simulate global keyboard events on Windows and Linux.
+- [**1654**星][2d] [JS] [ghacksuserjs/ghacks-user.js](https://github.com/ghacksuserjs/ghacks-user.js) An ongoing comprehensive user.js template for configuring and hardening Firefox privacy, security and anti-fingerprinting
+- [**1652**星][2y] [Shell] [juude/droidreverse](https://github.com/juude/droidreverse) android 逆向工程工具集
+- [**1652**星][7m] [dsasmblr/game-hacking](https://github.com/dsasmblr/game-hacking) Tutorials, tools, and more as related to reverse engineering video games.
+- [**1651**星][10m] [JS] [evilcos/xssor2](https://github.com/evilcos/xssor2) XSS'OR - Hack with JavaScript.
+- [**1650**星][1m] [Py] [ehco1996/django-sspanel](https://github.com/ehco1996/django-sspanel) 用diango开发的全新的shadowsocks网络面板
+- [**1650**星][7d] [HTML] [clong/detectionlab](https://github.com/clong/detectionlab) Vagrant & Packer scripts to build a lab environment complete with security tooling and logging best practices
+- [**1649**星][1y] [Py] [evyatarmeged/raccoon](https://github.com/evyatarmeged/raccoon) 高性能的侦查和漏洞扫描工具
+- [**1648**星][2d] [C#] [jbevain/cecil](https://github.com/jbevain/cecil) C#库, 探查/修改/生成 .NET App/库
+- [**1645**星][3y] [JS] [camwiegert/baffle](https://github.com/camwiegert/baffle) A tiny javascript library for obfuscating and revealing text in DOM elements.
+- [**1643**星][9m] [tylerha97/awesome-reversing](https://github.com/tylerha97/awesome-reversing) A curated list of awesome reversing resources
+- [**1643**星][11m] [Java] [fesh0r/fernflower](https://github.com/fesh0r/fernflower) Unofficial mirror of FernFlower Java decompiler (All pulls should be submitted upstream)
+- [**1638**星][4y] [Py] [ctfs/write-ups-2014](https://github.com/ctfs/write-ups-2014) Wiki-like CTF write-ups repository, maintained by the community. 2014
+- [**1638**星][11m] [C] [dlundquist/sniproxy](https://github.com/dlundquist/sniproxy) Proxies incoming HTTP and TLS connections based on the hostname contained in the initial request of the TCP session.
+- [**1638**星][4y] [Py] [ctfs/write-ups-2014](https://github.com/ctfs/write-ups-2014) Wiki-like CTF write-ups repository, maintained by the community. 2014
+- [**1636**星][4m] [Java] [jaredrummler/androidprocesses](https://github.com/jaredrummler/androidprocesses) DEPRECATED
+- [**1634**星][14d] [Go] [awnumar/memguard](https://github.com/awnumar/memguard) 处理内存中敏感的值,纯Go语言编写。
+- [**1631**星][6m] [Objective-C++] [tencent/oomdetector](https://github.com/tencent/oomdetector) OOMDetector is a memory monitoring component for iOS which provides you with OOM monitoring, memory allocation monitoring, memory leak detection and other functions.
+- [**1630**星][6d] [JS] [efforg/privacybadger](https://github.com/efforg/privacybadger) Privacy Badger is a browser extension that automatically learns to block invisible trackers.
+- [**1630**星][29d] [PHP] [c0ny1/upload-labs](https://github.com/c0ny1/upload-labs) 一个帮你总结所有类型的上传漏洞的靶场
+- [**1629**星][5d] [sarojaba/awesome-devblog](https://github.com/sarojaba/awesome-devblog) 어썸데브블로그. 국내 개발 블로그 모음(only 실명으로).
+- [**1624**星][2y] [jhaddix/tbhm](https://github.com/jhaddix/tbhm) The Bug Hunters Methodology
+- [**1624**星][4m] [CSS] [functionclub/v2ray.fun](https://github.com/functionclub/v2ray.fun) 正在开发的全新 V2ray.Fun
+- [**1621**星][2m] [Shell] [internetwache/gittools](https://github.com/internetwache/gittools) find websites with their .git repository available to the public
+- [**1618**星][28d] [Java] [tiann/epic](https://github.com/tiann/epic) Dynamic java method AOP hook for Android(continution of Dexposed on ART), Supporting 4.0~10.0
+- [**1615**星][2y] [JS] [addyosmani/a11y](https://github.com/addyosmani/a11y) Accessibility audit tooling for the web (beta)
+- [**1614**星][2m] [Go] [ysrc/yulong-hids](https://github.com/ysrc/yulong-hids) 一款由 YSRC 开源的主机入侵检测系统
+- [**1614**星][7m] [Go] [sipt/shuttle](https://github.com/sipt/shuttle) A web proxy in Golang with amazing features.
+- [**1612**星][3y] [Makefile] [drizzlerisk/drizzledumper](https://github.com/drizzlerisk/drizzledumper) 是一款基于内存搜索的Android脱壳工具。
+- [**1608**星][9m] [JS] [localtunnel/server](https://github.com/localtunnel/server) server for localtunnel.me
+- [**1608**星][10m] [C] [nmikhailov/validity90](https://github.com/nmikhailov/validity90) Reverse engineering of Validity/Synaptics 138a:0090, 138a:0094, 138a:0097, 06cb:0081, 06cb:009a fingerprint readers protocol
+- [**1606**星][2d] [C++] [lief-project/lief](https://github.com/lief-project/lief) Library to Instrument Executable Formats
+- [**1602**星][6m] [Py] [w1109790800/penetration](https://github.com/w1109790800/penetration) 渗透 超全面的渗透资料
+- [**1601**星][1y] [Py] [nccgroup/scout2](https://github.com/nccgroup/Scout2) Security auditing tool for AWS environments
+- [**1601**星][5m] [Py] [mozilla/cipherscan](https://github.com/mozilla/cipherscan) 查找指定目标支持的SSL ciphersuites
+- [**1600**星][5d] [Go] [bitnami-labs/sealed-secrets](https://github.com/bitnami-labs/sealed-secrets) A Kubernetes controller and tool for one-way encrypted Secrets
+- [**1599**星][2y] [JS] [keraf/nocoin](https://github.com/keraf/nocoin) No Coin is a tiny browser extension aiming to block coin miners such as Coinhive.
+- [**1598**星][15d] [Java] [spotbugs/spotbugs](https://github.com/spotbugs/spotbugs) SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.
+- [**1597**星][3m] [Py] [knownsec/pocsuite](https://github.com/knownsec/pocsuite) This project has stopped to maintenance, please to
+- [**1591**星][28d] [C] [ntop/n2n](https://github.com/ntop/n2n) Peer-to-peer VPN
+- [**1591**星][24d] [ivrodriguezca/re-ios-apps](https://github.com/ivrodriguezca/re-ios-apps) A completely free, open source and online course about Reverse Engineering iOS Applications.
+- [**1584**星][6m] [Ruby] [brunofacca/zen-rails-security-checklist](https://github.com/brunofacca/zen-rails-security-checklist) Checklist of security precautions for Ruby on Rails applications.
+- [**1583**星][4y] [l3m0n/pentest_study](https://github.com/l3m0n/pentest_study) 从零开始内网渗透学习
+- [**1582**星][1m] [ObjC] [ealeksandrov/provisionql](https://github.com/ealeksandrov/provisionql) Quick Look plugin for apps and provisioning profile files
+- [**1581**星][1y] [C] [qihoo360/phptrace](https://github.com/qihoo360/phptrace) A tracing and troubleshooting tool for PHP scripts.
+- [**1570**星][2m] [C] [firmianay/ctf-all-in-one](https://github.com/firmianay/ctf-all-in-one) CTF竞赛入门指南
+- [**1569**星][2y] [C] [samyk/pwnat](https://github.com/samyk/pwnat) The only tool and technique to punch holes through firewalls/NATs where both clients and server can be behind separate NATs without any 3rd party involvement. Pwnat uses a newly developed technique, exploiting a property of NAT translation tables, with no 3rd party, port forwarding, DMZ, router administrative requirements, STUN/TURN/UPnP/ICE, or…
+- [**1569**星][29d] [Py] [opendevops-cn/opendevops](https://github.com/opendevops-cn/opendevops) CODO是一款为用户提供企业多混合云、一站式DevOps、自动化运维、完全开源的云管理平台、自动化运维平台
+- [**1566**星][14d] [C] [codahale/bcrypt-ruby](https://github.com/codahale/bcrypt-ruby) Ruby binding for the OpenBSD bcrypt() password hashing algorithm, allowing you to easily store a secure hash of your users' passwords.
+- [**1565**星][17d] [Go] [sofastack/sofa-mosn](https://github.com/sofastack/sofa-mosn) 使用 Go 语言开发的网络代理软件,作为云原生的网络数据平面,旨在为服务提供多协议,模块化,智能化,安全的代理能力
+- [**1562**星][19d] [C] [p-gen/smenu](https://github.com/p-gen/smenu) Terminal utility that reads words from standard input or from a file and creates an interactive selection window just below the cursor. The selected word(s) are sent to standard output for further processing.
+- [**1562**星][14d] [Py] [k4m4/kickthemout](https://github.com/k4m4/kickthemout) 使用ARP欺骗,将设备从网络中踢出去
+- [**1561**星][16d] [Java] [gchq/gaffer](https://github.com/gchq/Gaffer) A large-scale entity and relation database supporting aggregation of properties
+- [**1560**星][1y] [Py] [unkl4b/gitminer](https://github.com/unkl4b/gitminer) Github内容挖掘
+- [**1560**星][6d] [Go] [caffix/amass](https://github.com/caffix/amass) 子域名枚举, 搜索互联网数据源, 使用机器学习猜测子域名. Go语言
+- [**1557**星][8m] [Py] [m4ll0k/wascan](https://github.com/m4ll0k/WAScan) WAScan - Web Application Scanner
+- [**1556**星][15d] [Go] [eolinker/goku-api-gateway](https://github.com/eolinker/goku-api-gateway) A Powerful HTTP API Gateway in pure golang!Goku API Gateway (中文名:悟空 API 网关)是一个基于 Golang开发的微服务网关,能够实现高性能 HTTP API 转发、服务编排、多租户管理、API 访问权限控制等目的,拥有强大的自定义插件系统可以自行扩展,并且提供友好的图形化配置界面,能够快速帮助企业进行 API 服务治理、提高 API 服务的稳定性和安全性。
+- [**1555**星][1m] [Shell] [mzet-/linux-exploit-suggester](https://github.com/mzet-/linux-exploit-suggester) Linux privilege escalation auditing tool
+- [**1549**星][7d] [PHP] [mewebstudio/captcha](https://github.com/mewebstudio/captcha) Captcha for Laravel 5 & 6
+- [**1549**星][1m] [Py] [joxeankoret/diaphora](https://github.com/joxeankoret/diaphora) program diffing
+- [**1548**星][1y] [C] [ctfs/write-ups-2016](https://github.com/ctfs/write-ups-2016) Wiki-like CTF write-ups repository, maintained by the community. 2016
+- [**1544**星][15d] [C] [raspberrypi/userland](https://github.com/raspberrypi/userland) Source code for ARM side libraries for interfacing to Raspberry Pi GPU.
+- [**1544**星][6y] [Py] [google/pyringe](https://github.com/google/pyringe) Debugger capable of attaching to and injecting code into python processes.
+- [**1543**星][2d] [Go] [juju/juju](https://github.com/juju/juju) Simple, secure devops tooling built to manage today's complex applications wherever you run your software.
+- [**1541**星][2y] [Py] [awolfly9/ipproxytool](https://github.com/awolfly9/ipproxytool) python ip proxy tool scrapy crawl. 抓取大量免费代理 ip,提取有效 ip 使用
+- [**1540**星][2y] [C++] [hteso/iaito](https://github.com/hteso/iaito) Radare2 GUI,使用Qt和C++
+- [**1539**星][2y] [C] [ezlippi/webbench](https://github.com/ezlippi/webbench) Webbench是Radim Kolar在1997年写的一个在linux下使用的非常简单的网站压测工具。它使用fork()模拟多个客户端同时访问我们设定的URL,测试网站在压力下工作的性能,最多可以模拟3万个并发连接去测试网站的负载能力。官网地址:
+- [**1537**星][9d] [Py] [lifting-bits/mcsema](https://github.com/lifting-bits/mcsema) 将x86, amd64, aarch64二进制文件转换成LLVM字节码
+ - [IDA7插件](https://github.com/lifting-bits/mcsema/tree/master/tools/mcsema_disass/ida7) 用于反汇编二进制文件并生成控制流程图
+ - [IDA插件](https://github.com/lifting-bits/mcsema/tree/master/tools/mcsema_disass/ida) 用于反汇编二进制文件并生成控制流程图
+ - [Binja插件](https://github.com/lifting-bits/mcsema/tree/master/tools/mcsema_disass/binja) 用于反汇编二进制文件并生成控制流程图
+ - [mcsema](https://github.com/lifting-bits/mcsema/tree/master/mcsema)
+- [**1536**星][4d] [Java] [ukanth/afwall](https://github.com/ukanth/afwall) AFWall+ (Android Firewall +) - iptables based firewall for Android
+- [**1533**星][13d] [emijrp/awesome-awesome](https://github.com/emijrp/awesome-awesome) A curated list of awesome curated lists of many topics.
+- [**1532**星][3y] [Py] [x0rz/eqgrp_lost_in_translation](https://github.com/x0rz/eqgrp_lost_in_translation) ShadowBrokers泄漏
+- [**1526**星][2d] [C++] [nmap/npcap](https://github.com/nmap/npcap) Nmap Project's packet sniffing library for Windows, based on WinPcap/Libpcap improved with NDIS 6 and LWF.
+- [**1522**星][1y] [HTML] [qiwihui/hiwifi-ss](https://github.com/qiwihui/hiwifi-ss) 极路由+ss配置
+- [**1521**星][4m] [TS] [spring-guides/tut-spring-security-and-angular-js](https://github.com/spring-guides/tut-spring-security-and-angular-js) Spring Security and Angular:: A tutorial on how to use Spring Security with a single page application with various backend architectures, ranging from a simple single server to an API gateway with OAuth2 authentication.
+- [**1521**星][3d] [C] [jiangwenyuan/nuster](https://github.com/jiangwenyuan/nuster) A high performance HTTP proxy cache server and RESTful NoSQL cache server based on HAProxy
+- [**1519**星][10m] [PS] [joefitzgerald/packer-windows](https://github.com/joefitzgerald/packer-windows) 使用Packer创建Vagrant boxes的模板
+- [**1518**星][9m] [Py] [google/rekall](https://github.com/google/rekall) Rekall Memory Forensic Framework
+- [**1517**星][8d] [Py] [zerosum0x0/koadic](https://github.com/zerosum0x0/koadic) 类似于Meterpreter、Powershell Empire 的post-exploitation rootkit,区别在于其大多数操作都是由 Windows 脚本主机 JScript/VBScript 执行
+- [**1516**星][5m] [snowming04/the-hacker-playbook-3-translation](https://github.com/snowming04/the-hacker-playbook-3-translation) 对 The Hacker Playbook 3 的翻译。
+- [**1514**星][3y] [Py] [sensepost/regeorg](https://github.com/sensepost/regeorg) The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.
+- [**1510**星][1y] [dripcap/dripcap](https://github.com/dripcap/dripcap)
+- [**1508**星][2m] [Shell] [haugene/docker-transmission-openvpn](https://github.com/haugene/docker-transmission-openvpn) Docker container running Transmission torrent client with WebUI over an OpenVPN tunnel
+- [**1505**星][2y] [Py] [eldraco/domain_analyzer](https://github.com/eldraco/domain_analyzer) 通过查找所有能够查找的信息,来分析任意域名的安全性
+- [**1504**星][27d] [Py] [hannob/snallygaster](https://github.com/hannob/snallygaster) Python脚本, 扫描HTTP服务器"秘密文件"
+- [**1499**星][5d] [YARA] [cybermonitor/apt_cybercriminal_campagin_collections](https://github.com/cybermonitor/apt_cybercriminal_campagin_collections) APT & CyberCriminal Campaign Collection
+- [**1497**星][4m] [Py] [epinna/tplmap](https://github.com/epinna/tplmap) 代码注入和服务器端模板注入(Server-Side Template Injection)漏洞利用,若干沙箱逃逸技巧。
+- [**1489**星][5d] [Py] [ahupp/python-magic](https://github.com/ahupp/python-magic) A python wrapper for libmagic
+- [**1486**星][2y] [Kotlin] [gh0u1l5/wechatmagician](https://github.com/gh0u1l5/wechatmagician) WechatMagician is a Xposed module written in Kotlin, that allows you to completely control your Wechat.
+- [**1485**星][7m] [C++] [wangyu-/tinyfecvpn](https://github.com/wangyu-/tinyfecvpn) A VPN Designed for Lossy Links, with Build-in Forward Error Correction(FEC) Support. Improves your Network Quality on a High-latency Lossy Link.
+- [**1482**星][7d] [Py] [bitsadmin/wesng](https://github.com/bitsadmin/wesng) Windows Exploit Suggester - Next Generation
+- [**1481**星][2d] [C] [sleuthkit/sleuthkit](https://github.com/sleuthkit/sleuthkit) The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.
+- [**1480**星][1y] [C++] [f1xpl/openauto](https://github.com/f1xpl/openauto) AndroidAuto headunit emulator
+- [**1479**星][3d] [C] [ctcaer/hekate](https://github.com/ctcaer/hekate) Nintendo Switch Bootloader - CTCaer mod
+- [**1478**星][8d] [C] [iqiyi/xhook](https://github.com/iqiyi/xhook) a PLT (Procedure Linkage Table) hook library for Android native ELF
+- [**1477**星][2d] [Shell] [blackarch/blackarch](https://github.com/blackarch/blackarch) BlackArch Linux is an Arch Linux-based distribution for penetration testers and security researchers.
+- [**1476**星][2m] [C++] [jmpews/hookzz](https://github.com/jmpews/hookzz) a hook framework for arm/arm64/ios/android, and [dev] branch is being refactored.
+- [**1471**星][27d] [minimaxir/hacker-news-undocumented](https://github.com/minimaxir/hacker-news-undocumented) Some of the hidden norms about Hacker News not otherwise covered in the Guidelines and the FAQ.
+- [**1470**星][3y] [Py] [veil-framework/veil-evasion](https://github.com/Veil-Framework/Veil-Evasion) a tool designed to generate metasploit payloads that bypass common anti-virus solutions.
+- [**1470**星][2d] [Go] [google/keytransparency](https://github.com/google/keytransparency) A transparent and secure way to look up public keys.
+- [**1469**星][6y] [C] [alibaba/lvs](https://github.com/alibaba/lvs) A distribution of Linux Virtual Server with some advanced features. It introduces a new packet forwarding method - FULLNAT other than NAT/Tunneling/DirectRouting, and defense mechanism against synflooding attack - SYNPROXY.
+- [**1466**星][29d] [Go] [neex/phuip-fpizdam](https://github.com/neex/phuip-fpizdam) Exploit for CVE-2019-11043
+- [**1464**星][6m] [Py] [oros42/imsi-catcher](https://github.com/oros42/imsi-catcher) This program show you IMSI numbers of cellphones around you.
+- [**1463**星][7d] [C] [ufrisk/pcileech](https://github.com/ufrisk/pcileech) DMA攻击工具。通过 PCIe 硬件设备使用 DMA,直接读写目标系统的内存。目标系统不需要安装驱动。
+- [**1462**星][9d] [edoverflow/can-i-take-over-xyz](https://github.com/edoverflow/can-i-take-over-xyz) "Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.
+- [**1459**星][3d] [Py] [enablesecurity/wafw00f](https://github.com/enablesecurity/wafw00f) 识别保护网站的WAF产品
+- [**1458**星][1y] [C++] [acaudwell/logstalgia](https://github.com/acaudwell/logstalgia) a visualization tool that replays or streams web server access logs as a retro arcade game simulation.
+- [**1455**星][1y] [Py] [d4vinci/cr3dov3r](https://github.com/d4vinci/cr3dov3r) Know the dangers of credential reuse attacks.
+- [**1453**星][13d] [C++] [srslte/srslte](https://github.com/srslte/srslte) Open source SDR LTE software suite from Software Radio Systems (SRS)
+- [**1451**星][2d] [Py] [rocky/python-uncompyle6](https://github.com/rocky/python-uncompyle6) Python反编译器,跨平台
+- [**1447**星][3y] [tiancode/learn-hacking](https://github.com/tiancode/learn-hacking) 开始学习Kali Linux 各种破解教程 渗透测试 逆向工程 HackThisSite挑战问题解答
+- [**1447**星][3y] [tiancode/learn-hacking](https://github.com/tiancode/learn-hacking) 开始学习Kali Linux 各种破解教程 渗透测试 逆向工程 HackThisSite挑战问题解答
+- [**1447**星][2m] [Py] [neo23x0/loki](https://github.com/neo23x0/loki) Loki - Simple IOC and Incident Response Scanner
+- [**1446**星][5d] [C] [tianocore/edk2](https://github.com/tianocore/edk2) A modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications
+- [**1446**星][20d] [Go] [skydive-project/skydive](https://github.com/skydive-project/skydive) An open source real-time network topology and protocols analyzer
+- [**1446**星][14d] [C++] [microsoft/seal](https://github.com/microsoft/seal) Microsoft SEAL is an easy-to-use and powerful homomorphic encryption library.
+- [**1445**星][3m] [C++] [vaibhavpandeyvpz/apkstudio](https://github.com/vaibhavpandeyvpz/apkstudio) Open-source, cross platform Qt based IDE for reverse-engineering Android application packages.
+- [**1437**星][5d] [Go] [google/gapid](https://github.com/google/gapid) Graphics API Debugger
+- [**1436**星][20d] [Kotlin] [cypherpunkarmory/userland](https://github.com/cypherpunkarmory/userland) The easiest way to run a Linux distribution or application on Android
+- [**1433**星][11m] [C] [tpruvot/ccminer](https://github.com/tpruvot/ccminer) CUDA Open Source miner project, for most nvidia cards
+- [**1433**星][1y] [TS] [pedronauck/reworm](https://github.com/pedronauck/reworm)
+- [**1432**星][6m] [C++] [x64dbg/scyllahide](https://github.com/x64dbg/scyllahide) Advanced usermode anti-anti-debugger
+- [**1432**星][2m] [C] [feralinteractive/gamemode](https://github.com/feralinteractive/gamemode) Optimise Linux system performance on demand
+- [**1429**星][5y] [C++] [gdbinit/machoview](https://github.com/gdbinit/machoview) MachOView fork
+- [**1427**星][9d] [ObjC] [nabla-c0d3/ssl-kill-switch2](https://github.com/nabla-c0d3/ssl-kill-switch2) Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS and OS X Apps
+- [**1426**星][20d] [C++] [plasma-umass/coz](https://github.com/plasma-umass/coz) Finding Code that Counts with Causal Profiling
+- [**1426**星][4y] [C++] [aappleby/smhasher](https://github.com/aappleby/smhasher) Automatically exported from code.google.com/p/smhasher
+- [**1425**星][3m] [Go] [google/stenographer](https://github.com/google/stenographer) Stenographer is a packet capture solution which aims to quickly spool all packets to disk, then provide simple, fast access to subsets of those packets. Discussion/announcements at stenographer@googlegroups.com
+- [**1424**星][8y] [Py] [moxie0/sslstrip](https://github.com/moxie0/sslstrip) A tool for exploiting Moxie Marlinspike's SSL "stripping" attack.
+- [**1424**星][11m] [Java] [aslody/legend](https://github.com/aslody/legend) (Android)无需Root即可Hook Java方法的框架, 支持Dalvik和Art环境
+- [**1423**星][14d] [Go] [google/google-ctf](https://github.com/google/google-ctf) Google CTF
+- [**1422**星][3y] [Py] [nathanlopez/stitch](https://github.com/nathanlopez/stitch) Python Remote Administration Tool (RAT)
+- [**1422**星][3y] [mandatoryprogrammer/northkoreadnsleak](https://github.com/mandatoryprogrammer/northkoreadnsleak) Snapshot of North Korea's DNS data taken from zone transfers.
+- [**1419**星][1m] [Py] [xdavidhu/mitmap](https://github.com/xdavidhu/mitmap)
+- [**1419**星][3y] [C] [antirez/dump1090](https://github.com/antirez/dump1090) Dump1090 is a simple Mode S decoder for RTLSDR devices
+- [**1418**星][5m] [PHP] [s4n7h0/xvwa](https://github.com/s4n7h0/xvwa) XVWA is a badly coded web application written in PHP/MySQL that helps security enthusiasts to learn application security.
+- [**1417**星][4m] [yadox666/the-hackers-hardware-toolkit](https://github.com/yadox666/the-hackers-hardware-toolkit) 用于Red Team、渗透、安全研究的最佳硬件产品集合
+- [**1417**星][4d] [Rust] [shadowsocks/shadowsocks-rust](https://github.com/shadowsocks/shadowsocks-rust) A Rust port of shadowsocks
+- [**1417**星][1m] [Go] [barnybug/cli53](https://github.com/barnybug/cli53) Command line tool for Amazon Route 53
+- [**1415**星][7d] [C] [z3apa3a/3proxy](https://github.com/z3apa3a/3proxy) 3proxy - tiny free proxy server
+- [**1414**星][8d] [C] [ettercap/ettercap](https://github.com/ettercap/ettercap) Ettercap Project
+- [**1413**星][24d] [XSLT] [lolbas-project/lolbas](https://github.com/lolbas-project/lolbas) Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
+- [**1413**星][24d] [Java] [chrisk44/hijacker](https://github.com/chrisk44/hijacker) Aircrack, Airodump, Aireplay, MDK3 and Reaver GUI Application for Android
+- [**1412**星][9d] [C] [namhyung/uftrace](https://github.com/namhyung/uftrace) Function (graph) tracer for user-space
+- [**1412**星][5m] [gitguardian/apisecuritybestpractices](https://github.com/gitguardian/apisecuritybestpractices) Resources to help you keep secrets (API keys, database credentials, certificates, ...) out of source code and remediate the issue in case of a leaked API key. Made available by GitGuardian.
+- [**1411**星][7d] [C++] [eteran/edb-debugger](https://github.com/eteran/edb-debugger) edb is a cross platform AArch32/x86/x86-64 debugger.
+- [**1411**星][3d] [Go] [cosmos72/gomacro](https://github.com/cosmos72/gomacro) Interactive Go interpreter and debugger with REPL, Eval, generics and Lisp-like macros
+- [**1410**星][3m] [Go] [hellogcc/100-gdb-tips](https://github.com/hellogcc/100-gdb-tips) A collection of gdb tips. 100 maybe just mean many here.
+- [**1408**星][3m] [HTML] [owasp/top10](https://github.com/owasp/top10) Official OWASP Top 10 Document Repository
+- [**1407**星][4d] [C++] [google/nsjail](https://github.com/google/nsjail) A light-weight process isolation tool, making use of Linux namespaces and seccomp-bpf syscall filters (with help of the kafel bpf language)
+- [**1405**星][1y] [HTML] [gwuhaolin/blog](https://github.com/gwuhaolin/blog) 浩麟的技术博客
+- [**1405**星][1y] [C++] [dotnet/llilc](https://github.com/dotnet/llilc) This repo contains LLILC, an LLVM based compiler for .NET Core. It includes a set of cross-platform .NET code generation tools that enables compilation of MSIL byte code to LLVM supported platforms.
+- [**1404**星][7d] [Java] [chinashiyu/gfw.press](https://github.com/chinashiyu/gfw.press) GFW.Press新一代军用级高强度加密抗干扰网络数据高速传输软件
+- [**1403**星][2d] [Go] [crazy-max/windowsspyblocker](https://github.com/crazy-max/windowsspyblocker)
+- [**1401**星][9m] [JS] [anttiviljami/browser-autofill-phishing](https://github.com/anttiviljami/browser-autofill-phishing) A simple demo of phishing by abusing the browser autofill feature
+- [**1399**星][16d] [Swift] [johnno1962/injectioniii](https://github.com/johnno1962/injectioniii) Re-write of Injection for Xcode in (mostly) Swift4
+- [**1397**星][1y] [Go] [filosottile/whosthere](https://github.com/filosottile/whosthere) A ssh server that knows who you are
+- [**1396**星][3y] [PS] [putterpanda/mimikittenz](https://github.com/putterpanda/mimikittenz) A post-exploitation powershell tool for extracting juicy info from memory.
+- [**1395**星][27d] [C] [quiet/org.quietmodem.quiet](https://github.com/quiet/org.quietmodem.quiet) Quiet for Android - TCP over sound
+- [**1393**星][4d] [atarity/deploy-your-own-saas](https://github.com/atarity/deploy-your-own-saas) List of "only yours" cloud services for everyday needs
+- [**1393**星][9d] [Py] [ekultek/whatwaf](https://github.com/ekultek/whatwaf) 检测并绕过WAF和保护系统
+- [**1392**星][16d] [C++] [jonathansalwan/triton](https://github.com/jonathansalwan/triton) Triton is a Dynamic Binary Analysis (DBA) framework. It provides internal components like a Dynamic Symbolic Execution (DSE) engine, a dynamic taint engine, AST representations of the x86, x86-64 and AArch64 Instructions Set Architecture (ISA), SMT simplification passes, an SMT solver interface and, the last but not least, Python bindings.
+- [**1388**星][4y] [PHP] [johntroony/php-webshells](https://github.com/johntroony/php-webshells) Common php webshells. Do not host the file(s) on your server!
+- [**1387**星][11m] [Py] [eth0izzle/bucket-stream](https://github.com/eth0izzle/bucket-stream) 通过certstream 监控多种证书 transparency 日志, 进而查找有趣的 Amazon S3 Buckets
+- [**1386**星][2y] [JS] [sqren/fb-sleep-stats](https://github.com/sqren/fb-sleep-stats) 使用Facebook追踪用户的睡觉习惯
+- [**1384**星][5d] [JS] [ix64/unlock-music](https://github.com/ix64/unlock-music) Unlock encrypted music file in browser. 在浏览器中解锁加密的音乐文件。
+- [**1381**星][6m] [Py] [almandin/fuxploider](https://github.com/almandin/fuxploider) 文件上传漏洞扫描和利用工具
+- [**1380**星][15d] [C] [dynamorio/drmemory](https://github.com/dynamorio/drmemory) Memory Debugger for Windows, Linux, Mac, and Android
+- [**1380**星][13d] [Shell] [drduh/pwd.sh](https://github.com/drduh/pwd.sh) GPG symmetric password manager
+- [**1378**星][13d] [OCaml] [mirage/mirage](https://github.com/mirage/mirage) MirageOS is a library operating system that constructs unikernels
+- [**1378**星][2d] [JS] [lockfale/osint-framework](https://github.com/lockfale/osint-framework) OSINT Framework
+- [**1375**星][15d] [Go] [unrolled/secure](https://github.com/unrolled/secure) HTTP middleware for Go that facilitates some quick security wins.
+- [**1375**星][11m] [JS] [intika/librefox](https://github.com/intika/librefox) Firefox with privacy enhancements
+- [**1374**星][4y] [C++] [valvesoftware/vogl](https://github.com/valvesoftware/vogl) OpenGL capture / playback debugger.
+- [**1373**星][5m] [Py] [s0md3v/striker](https://github.com/s0md3v/Striker) Striker is an offensive information and vulnerability scanner.
+- [**1373**星][9m] [PS] [danielbohannon/invoke-obfuscation](https://github.com/danielbohannon/invoke-obfuscation) PowerShell Obfuscator
+- [**1371**星][1m] [C] [zyantific/zydis](https://github.com/zyantific/zydis) 快速的轻量级x86/x86-64 反汇编库
+- [**1365**星][9d] [Go] [cortesi/modd](https://github.com/cortesi/modd) A flexible developer tool that runs processes and responds to filesystem changes
+- [**1363**星][2m] [Py] [fireeye/flare-floss](https://github.com/fireeye/flare-floss) 自动从恶意代码中提取反混淆后的字符串
+ - [floss](https://github.com/fireeye/flare-floss/tree/master/floss)
+ - [IDA插件](https://github.com/fireeye/flare-floss/blob/master/scripts/idaplugin.py)
+- [**1363**星][3y] [C++] [aslody/turbodex](https://github.com/aslody/turbodex) 在内存中快速加载dex
+- [**1362**星][1m] [grrrdog/java-deserialization-cheat-sheet](https://github.com/grrrdog/java-deserialization-cheat-sheet) The cheat sheet about Java Deserialization vulnerabilities
+- [**1361**星][7m] [Py] [vulnerscom/getsploit](https://github.com/vulnerscom/getsploit) Command line utility for searching and downloading exploits
+- [**1361**星][6m] [C++] [phpv8/v8js](https://github.com/phpv8/v8js) V8 Javascript Engine for PHP — This PHP extension embeds the Google V8 Javascript Engine
+- [**1359**星][2m] [C] [googleprojectzero/winafl](https://github.com/googleprojectzero/winafl) A fork of AFL for fuzzing Windows binaries
+- [**1355**星][10m] [HTML] [thelinuxchoice/blackeye](https://github.com/thelinuxchoice/blackeye) The most complete Phishing Tool, with 32 templates +1 customizable
+- [**1354**星][2d] [Py] [mitre/caldera](https://github.com/mitre/caldera) 自动化 adversary emulation 系统
+- [**1352**星][3y] [Py] [joaomatosf/jexboss](https://github.com/joaomatosf/jexboss) Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool
+- [**1351**星][3m] [C++] [raspberrypi/tools](https://github.com/raspberrypi/tools)
+- [**1350**星][4m] [C] [taviso/ctftool](https://github.com/taviso/ctftool) Interactive CTF Exploration Tool
+- [**1349**星][3y] [Py] [ddevault/evilpass](https://github.com/ddevault/evilpass) Slightly evil password strength checker
+- [**1349**星][19d] [C++] [rikkaapps/riru](https://github.com/rikkaapps/riru) Inject zygote process by replace libmemtrack
+- [**1349**星][5m] [Py] [lijiejie/githack](https://github.com/lijiejie/githack) git泄露利用脚本,通过泄露的.git文件夹下的文件,重建还原工程源代码
+- [**1348**星][10m] [rebeyond/behinder](https://github.com/rebeyond/behinder) “冰蝎”动态二进制加密网站管理客户端
+- [**1347**星][11m] [Rust] [das-labor/panopticon](https://github.com/das-labor/panopticon) A libre cross-platform disassembler.
+- [**1346**星][2y] [HTML] [daxeel/blockshell](https://github.com/daxeel/blockshell) 用于学习区块链技术概念的命令行工具, 例如 likechaining, mining,proof of work 等
+- [**1345**星][25d] [C] [x64dbg/x64dbgpy](https://github.com/x64dbg/x64dbgpy) Automating x64dbg using Python, Snapshots:
+- [**1345**星][12d] [Go] [securitywithoutborders/hardentools](https://github.com/securitywithoutborders/hardentools) 禁用许多有危险的Windows功能
+- [**1344**星][23d] [Go] [microcosm-cc/bluemonday](https://github.com/microcosm-cc/bluemonday) a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS
+- [**1343**星][23d] [Py] [s0md3v/arjun](https://github.com/s0md3v/Arjun) HTTP parameter discovery suite.
+- [**1342**星][12m] [C] [luke-jr/bfgminer](https://github.com/luke-jr/bfgminer) Modular ASIC/FPGA miner written in C, featuring overclocking, monitoring, fan speed control and remote interface capabilities.
+- [**1342**星][2m] [Go] [davrodpin/mole](https://github.com/davrodpin/mole) cli app to create ssh tunnels
+- [**1342**星][1y] [Py] [carmaa/inception](https://github.com/carmaa/inception) 利用基于PCI的DMA实现物理内存的操纵与Hacking,可以攻击FireWire,Thunderbolt,ExpressCard,PC Card和任何其他PCI / PCIe硬件接口
+- [**1341**星][3m] [Py] [maratyszcza/peachpy](https://github.com/maratyszcza/peachpy) x86-64 assembler embedded in Python
+- [**1341**星][1y] [XSLT] [api0cradle/lolbas](https://github.com/api0cradle/lolbas) Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
+- [**1340**星][1y] [kirikira/vtemplate](https://github.com/kirikira/vtemplate) v2ray的模板们
+- [**1340**星][7m] [Py] [feeicn/gsil](https://github.com/feeicn/gsil) GitHub敏感信息泄露监控,几乎实时监控,发送警告
+- [**1339**星][6y] [Perl] [intelisecurelabs/linux_exploit_suggester](https://github.com/InteliSecureLabs/Linux_Exploit_Suggester) Linux Exploit Suggester; based on operating system release number
+- [**1338**星][1m] [CSS] [undeadsec/socialfish](https://github.com/undeadsec/socialfish) 网络钓鱼培训与信息收集
+- [**1337**星][1y] [C] [madeye/proxydroid](https://github.com/madeye/proxydroid) Global Proxy for Android
+- [**1336**星][3m] [HTML] [thehive-project/thehive](https://github.com/thehive-project/thehive) a Scalable, Open Source and Free Security Incident Response Platform
+- [**1335**星][2m] [C++] [mfontanini/libtins](https://github.com/mfontanini/libtins) High-level, multiplatform C++ network packet sniffing and crafting library.
+- [**1334**星][4y] [mengskysama/shadowsocks](https://github.com/mengskysama/shadowsocks) A fast tunnel proxy that helps you bypass firewalls
+- [**1333**星][1y] [C] [gamelinux/passivedns](https://github.com/gamelinux/passivedns) A network sniffer that logs all DNS server replies for use in a passive DNS setup
+- [**1328**星][2d] [C++] [purplei2p/i2pd](https://github.com/purplei2p/i2pd) a full-featured C++ implementation of I2P client
+- [**1328**星][1y] [Py] [marten4n6/evilosx](https://github.com/marten4n6/evilosx) An evil RAT (Remote Administration Tool) for macOS / OS X.
+- [**1328**星][2y] [CoffeeScript] [atmos/camo](https://github.com/atmos/camo) all about making insecure assets look secure
+- [**1327**星][7m] [Go] [ssllabs/ssllabs-scan](https://github.com/ssllabs/ssllabs-scan) A command-line reference-implementation client for SSL Labs APIs, designed for automated and/or bulk testing.
+- [**1327**星][3d] [C] [intel/haxm](https://github.com/intel/haxm) Intel 开源的英特尔硬件加速执行管理器,通过硬件辅助的虚拟化引擎,加速 Windows/macOS 主机上的 IA emulation((x86/ x86_64) )
+- [**1327**星][10m] [C#] [cenmrev/v2rayw](https://github.com/cenmrev/v2rayw) GUI for v2ray-core on Windows
+- [**1325**星][21d] [C] [dtag-dev-sec/tpotce](https://github.com/dtag-dev-sec/tpotce) 创建多蜜罐平台T-Pot ISO 镜像
+- [**1324**星][1y] [C++] [rehints/hexrayscodexplorer](https://github.com/rehints/hexrayscodexplorer) 反编译插件, 多功能
+
+ 查看详情
+
+
+ - 自动类型重建
+ - 虚表识别/导航(反编译窗口)
+ - C-tree可视化与导出
+ - 对象浏览
+
+
+
+- [**1323**星][2d] [Go] [xiaoming2028/freenet](https://github.com/xiaoming2028/freenet) 科学上网/梯子/自由上网/翻墙 SS/SSR/V2Ray/Brook 搭建教程
+- [**1323**星][2m] [jaredthecoder/awesome-vehicle-security](https://github.com/jaredthecoder/awesome-vehicle-security)
+- [**1322**星][3d] [C] [oisf/suricata](https://github.com/OISF/suricata) a network IDS, IPS and NSM engine
+- [**1319**星][2y] [Py] [worawit/ms17-010](https://github.com/worawit/ms17-010) MS17-010
+- [**1317**星][1y] [mortenoir1/virtualbox_e1000_0day](https://github.com/mortenoir1/virtualbox_e1000_0day) VirtualBox E1000 Guest-to-Host Escape
+- [**1316**星][3m] [PS] [peewpw/invoke-psimage](https://github.com/peewpw/invoke-psimage) Encodes a PowerShell script in the pixels of a PNG file and generates a oneliner to execute
+- [**1314**星][10m] [C] [fancycode/memorymodule](https://github.com/fancycode/memorymodule) Library to load a DLL from memory.
+- [**1311**星][1m] [C++] [shadowsocks/libqtshadowsocks](https://github.com/shadowsocks/libqtshadowsocks) A lightweight and ultra-fast shadowsocks library written in C++14 with Qt framework
+- [**1309**星][12m] [Py] [xyntax/poc-t](https://github.com/xyntax/poc-t) 脚本调用框架,用于渗透测试中 采集|爬虫|爆破|批量PoC 等需要并发的任务
+- [**1309**星][3m] [Lua] [scipag/vulscan](https://github.com/scipag/vulscan) Nmap 模块,将 Nmap 转化为高级漏洞扫描器
+- [**1307**星][19d] [Py] [consensys/mythril](https://github.com/ConsenSys/mythril) Security analysis tool for EVM bytecode. Supports smart contracts built for Ethereum, Quorum, Vechain, Roostock, Tron and other EVM-compatible blockchains.
+- [**1307**星][27d] [C] [boywhp/fcn](https://github.com/boywhp/fcn) free connect your private network from anywhere
+- [**1304**星][17d] [nikitavoloboev/privacy-respecting](https://github.com/nikitavoloboev/privacy-respecting) PrivacyRespecting 服务和软件列表
+- [**1304**星][7d] [C] [cisco-talos/pyrebox](https://github.com/cisco-talos/pyrebox) 逆向沙箱,基于QEMU,Python Scriptable
+- [**1303**星][4m] [C++] [klee/klee](https://github.com/klee/klee) 基于 LLVM 的 symbolic 虚拟机
+- [**1300**星][1y] [Shell] [dana-at-cp/backdoor-apk](https://github.com/dana-at-cp/backdoor-apk) backdoor-apk is a shell script that simplifies the process of adding a backdoor to any Android APK file. Users of this shell script should have working knowledge of Linux, Bash, Metasploit, Apktool, the Android SDK, smali, etc. This shell script is provided as-is without warranty of any kind and is intended for educational purposes only.
+- [**1299**星][6d] [Go] [hacklcx/hfish](https://github.com/hacklcx/hfish) 扩展企业安全测试主动诱导型开源蜜罐框架系统,记录黑客攻击手段
+- [**1298**星][1y] [Go] [evilsocket/xray](https://github.com/evilsocket/xray) 自动化执行一些信息收集、网络映射的初始化工作
+- [**1293**星][4y] [C++] [microsoft/microsoft-pdb](https://github.com/microsoft/microsoft-pdb) Microsoft提供的有关PDB格式的信息
+- [**1293**星][5m] [JS] [feross/spoof](https://github.com/feross/spoof) Easily spoof your MAC address in macOS, Windows, & Linux!
+- [**1293**星][29d] [Java] [android-hacker/exposed](https://github.com/android-hacker/exposed) A library to use Xposed without root or recovery(or modify system image etc..).
+- [**1291**星][6d] [C] [traviscross/mtr](https://github.com/traviscross/mtr) Official repository for mtr, a network diagnostic tool
+- [**1291**星][2y] [Go] [malfunkt/hyperfox](https://github.com/malfunkt/hyperfox) 在局域网上代理和记录 HTTP 和 HTTPs 通信
\ No newline at end of file
diff --git a/history/sec_tools_all_20191212140607_en.md b/history/sec_tools_all_20191212140607_en.md
new file mode 100644
index 0000000..cd61b5c
--- /dev/null
+++ b/history/sec_tools_all_20191212140607_en.md
@@ -0,0 +1,1033 @@
+# PS
+- [中文版本](https://github.com/alphaSeclab/sec-tool-list/blob/master/Readme.md)
+- Because Github can not show all lines, this page only show the first 1000 tools sorted by star count. [Read Full Version Here](https://github.com/alphaSeclab/sec-tool-list/blob/master/Readme_full_en.md)
+- My Other Repo:
+ - [Reverse Engineering Resources](https://github.com/alphaSeclab/awesome-ida)
+ - [Cyber Security Resources](https://github.com/alphaSeclab/awesome-cyber-security)
+ - [Malware Analysis Reports](https://github.com/alphaSeclab/malware-analysis-reports)
+ - [Vul Analysis Reports](https://github.com/alphaSeclab/vul-analysis)
+
+# Tool List
+- [**45523**Star][11d] [C#] [shadowsocks/shadowsocks-windows](https://github.com/shadowsocks/shadowsocks-windows) If you want to keep a secret, you must also hide it from yourself.
+- [**34554**Star][16d] [C++] [x64dbg/x64dbg](https://github.com/x64dbg/x64dbg) An open-source x64/x32 debugger for windows.
+- [**33926**Star][10d] [Py] [minimaxir/big-list-of-naughty-strings](https://github.com/minimaxir/big-list-of-naughty-strings) The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.
+- [**32844**Star][2m] [hack-with-github/awesome-hacking](https://github.com/hack-with-github/awesome-hacking) A collection of various awesome lists for hackers, pentesters and security researchers
+- [**32022**Star][4y] [Py] [shadowsocks/shadowsocks](https://github.com/shadowsocks/shadowsocks)
+- [**30689**Star][14d] [Go] [fatedier/frp](https://github.com/fatedier/frp) A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.
+- [**27836**Star][2d] [Kotlin] [shadowsocks/shadowsocks-android](https://github.com/shadowsocks/shadowsocks-android) A shadowsocks client for Android
+- [**25977**Star][2d] [Py] [certbot/certbot](https://github.com/certbot/certbot) Certbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any other CA that uses the ACME protocol.
+- [**25643**Star][28d] [Swift] [shadowsocks/shadowsocksx-ng](https://github.com/shadowsocks/shadowsocksx-ng) Next Generation of ShadowsocksX
+- [**25330**Star][3d] [Go] [v2ray/v2ray-core](https://github.com/v2ray/v2ray-core) A platform for building proxies to bypass network restrictions.
+- [**24826**Star][2d] [xitu/gold-miner](https://github.com/xitu/gold-miner)
+- [**24727**Star][5d] [trimstray/the-book-of-secret-knowledge](https://github.com/trimstray/the-book-of-secret-knowledge) A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.
+- [**22556**Star][14d] [Shell] [mathiasbynens/dotfiles](https://github.com/mathiasbynens/dotfiles)
+- [**21874**Star][9d] [PHP] [danielmiessler/seclists](https://github.com/danielmiessler/seclists) SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
+- [**21778**Star][12d] [Go] [filosottile/mkcert](https://github.com/filosottile/mkcert) A simple zero-config tool to make locally trusted development certificates with any names you'd like.
+- [**20680**Star][5d] [Java] [skylot/jadx](https://github.com/skylot/jadx) Dex to Java decompiler
+- [**20159**Star][5d] [Shell] [streisandeffect/streisand](https://github.com/StreisandEffect/streisand) Streisand sets up a new server running your choice of WireGuard, OpenConnect, OpenSSH, OpenVPN, Shadowsocks, sslh, Stunnel, or a Tor bridge. It also generates custom instructions for all of these services. At the end of the run you are given an HTML file with instructions that can be shared with friends, family members, and fellow activists.
+- [**19692**Star][2m] [Jupyter Notebook] [camdavidsonpilon/probabilistic-programming-and-bayesian-methods-for-hackers](https://github.com/camdavidsonpilon/probabilistic-programming-and-bayesian-methods-for-hackers) aka "Bayesian Methods for Hackers": An introduction to Bayesian methods + probabilistic programming with a computation/understanding-first, mathematics-second point of view. All in pure Python ;)
+- [**19212**Star][1y] [alvin9999/new-pac](https://github.com/alvin9999/new-pac) 科学/自由上网,免费ss/ssr/v2ray/goflyway账号,搭建教程
+- [**19076**Star][2d] [Ruby] [rapid7/metasploit-framework](https://github.com/rapid7/metasploit-framework) Metasploit Framework
+- [**18676**Star][3y] [fallibleinc/security-guide-for-developers](https://github.com/fallibleinc/security-guide-for-developers) Security Guide for Developers (实用性开发人员安全须知)
+- [**18476**Star][2d] [Java] [nationalsecurityagency/ghidra](https://github.com/nationalsecurityagency/ghidra) Ghidra is a software reverse engineering (SRE) framework
+- [**18390**Star][3d] [Java] [alibaba/arthas](https://github.com/alibaba/arthas) Alibaba Java Diagnostic Tool Arthas
+- [**17641**Star][4y] [Go] [inconshreveable/ngrok](https://github.com/inconshreveable/ngrok) Introspected tunnels to localhost
+- [**17069**Star][6d] [Py] [mitmproxy/mitmproxy](https://github.com/mitmproxy/mitmproxy) An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
+- [**16769**Star][2d] [C#] [powershell/powershell](https://github.com/powershell/powershell) PowerShell for every system!
+- [**15824**Star][2d] [Py] [sqlmapproject/sqlmap](https://github.com/sqlmapproject/sqlmap) Automatic SQL injection and database takeover tool
+- [**15731**Star][9m] [micropoor/micro8](https://github.com/micropoor/micro8) Gitbook
+- [**15718**Star][3d] [C] [curl/curl](https://github.com/curl/curl) A command line tool and library for transferring data with URL syntax, supporting HTTP, HTTPS, FTP, FTPS, GOPHER, TFTP, SCP, SFTP, SMB, TELNET, DICT, LDAP, LDAPS, FILE, IMAP, SMTP, POP3, RTSP and RTMP. libcurl offers a myriad of powerful features
+- [**15363**Star][21d] [Py] [drduh/macos-security-and-privacy-guide](https://github.com/drduh/macOS-Security-and-Privacy-Guide) Guide to securing and improving privacy on macOS
+- [**14744**Star][1m] [gfwlist/gfwlist](https://github.com/gfwlist/gfwlist) gfwlist
+- [**14518**Star][7d] [Java] [tencent/tinker](https://github.com/tencent/tinker) Tinker is a hot-fix solution library for Android, it supports dex, library and resources update without reinstall apk.
+- [**13736**Star][9m] [JS] [bannedbook/fanqiang](https://github.com/bannedbook/fanqiang) 翻墙-科学上网
+- [**13548**Star][28d] [Py] [corentinj/real-time-voice-cloning](https://github.com/corentinj/real-time-voice-cloning) Clone a voice in 5 seconds to generate arbitrary speech in real-time
+- [**13241**Star][19d] [Go] [jesseduffield/lazydocker](https://github.com/jesseduffield/lazydocker) The lazier way to manage everything docker
+- [**12966**Star][12d] [Py] [cool-rr/pysnooper](https://github.com/cool-rr/pysnooper) Never use print for debugging again
+- [**12742**Star][3d] [Vue] [liyasthomas/postwoman](https://github.com/liyasthomas/postwoman)
+- [**12693**Star][8d] [C] [shadowsocks/shadowsocks-libev](https://github.com/shadowsocks/shadowsocks-libev) libev port of shadowsocks
+- [**12544**Star][9d] [C#] [0xd4d/dnspy](https://github.com/0xd4d/dnspy) .NET debugger and assembly editor
+- [**12325**Star][2m] [Ruby] [diaspora/diaspora](https://github.com/diaspora/diaspora) A privacy-aware, distributed, open source social network.
+- [**12241**Star][5d] [Java] [signalapp/signal-android](https://github.com/signalapp/Signal-Android) A private messenger for Android.
+- [**11977**Star][1m] [Go] [buger/goreplay](https://github.com/buger/goreplay) capturing and replaying live HTTP traffic into a test environment in order to continuously test your system with real data. It can be used to increase confidence in code deployments, configuration changes and infrastructure changes.
+- [**11890**Star][6d] [C] [openssl/openssl](https://github.com/openssl/openssl) TLS/SSL and crypto library
+- [**11530**Star][2d] [C] [radareorg/radare2](https://github.com/radareorg/radare2) unix-like reverse engineering framework and commandline tools
+- [**11418**Star][3m] [C] [robertdavidgraham/masscan](https://github.com/robertdavidgraham/masscan) TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.
+- [**11404**Star][2d] [getlantern/download](https://github.com/getlantern/download) Lantern官方版本下载 蓝灯 翻墙 科学上网 外网 加速器 梯子 路由
+- [**11342**Star][1m] [facert/awesome-spider](https://github.com/facert/awesome-spider) 爬虫集合
+- [**11278**Star][2d] [Java] [oracle/graal](https://github.com/oracle/graal) Run Programs Faster Anywhere
+- [**11200**Star][5d] [Py] [swisskyrepo/payloadsallthethings](https://github.com/swisskyrepo/payloadsallthethings) A list of useful payloads and bypass for Web Application Security and Pentest/CTF
+- [**11143**Star][2m] [Jupyter Notebook] [selfteaching/the-craft-of-selfteaching](https://github.com/selfteaching/the-craft-of-selfteaching) One has no future if one couldn't teach themself.
+- [**11110**Star][5d] [Py] [owasp/cheatsheetseries](https://github.com/owasp/cheatsheetseries) The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
+- [**11016**Star][2y] [ObjC] [bang590/jspatch](https://github.com/bang590/jspatch) JSPatch bridge Objective-C and Javascript using the Objective-C runtime. You can call any Objective-C class and method in JavaScript by just including a small engine. JSPatch is generally used to hotfix iOS App.
+- [**10925**Star][2d] [ObjC] [flipboard/flex](https://github.com/flipboard/flex) An in-app debugging and exploration tool for iOS
+- [**10907**Star][2m] [CSS] [hacker0x01/hacker101](https://github.com/hacker0x01/hacker101) Hacker101
+- [**10830**Star][15d] [enaqx/awesome-pentest](https://github.com/enaqx/awesome-pentest) A collection of awesome penetration testing resources, tools and other shiny things
+- [**10780**Star][2y] [CoffeeScript] [dropbox/zxcvbn](https://github.com/dropbox/zxcvbn) Low-Budget Password Strength Estimation
+- [**10757**Star][19d] [Java] [konloch/bytecode-viewer](https://github.com/konloch/bytecode-viewer) A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)
+- [**10318**Star][5d] [ruanyf/weekly](https://github.com/ruanyf/weekly) 科技爱好者周刊,每周五发布
+- [**10226**Star][3d] [Go] [goharbor/harbor](https://github.com/goharbor/harbor) An open source trusted cloud native registry project that stores, signs, and scans content.
+- [**9830**Star][8m] [imthenachoman/how-to-secure-a-linux-server](https://github.com/imthenachoman/how-to-secure-a-linux-server) An evolving how-to guide for securing a Linux server.
+- [**9613**Star][4d] [Py] [sherlock-project/sherlock](https://github.com/sherlock-project/sherlock) Find Usernames Across Social Networks
+- [**9389**Star][3d] [Go] [cnlh/nps](https://github.com/cnlh/nps) 一款轻量级、功能强大的内网穿透代理服务器。支持tcp、udp流量转发,支持内网http代理、内网socks5代理,同时支持snappy压缩、站点保护、加密传输、多路复用、header修改等。支持web图形化管理,集成多用户模式。
+- [**9358**Star][6d] [Ruby] [postalhq/postal](https://github.com/postalhq/postal) complete and fully featured mail server for use by websites & web servers
+- [**9266**Star][3m] [JS] [localtunnel/localtunnel](https://github.com/localtunnel/localtunnel) expose yourself
+- [**9229**Star][12d] [Java] [ibotpeaches/apktool](https://github.com/ibotpeaches/apktool) A tool for reverse engineering Android apk files
+- [**9185**Star][2d] [C#] [icsharpcode/ilspy](https://github.com/icsharpcode/ilspy) .NET Decompiler
+- [**9148**Star][29d] [JS] [valve/fingerprintjs2](https://github.com/valve/fingerprintjs2) Modern & flexible browser fingerprinting library
+- [**9069**Star][11d] [PS] [lukesampson/scoop](https://github.com/lukesampson/scoop) A command-line installer for Windows.
+- [**9015**Star][2m] [vitalysim/awesome-hacking-resources](https://github.com/vitalysim/awesome-hacking-resources) A collection of hacking / penetration testing resources to make you better!
+- [**8854**Star][6m] [Go] [rkt/rkt](https://github.com/rkt/rkt) rkt is a pod-native container engine for Linux. It is composable, secure, and built on standards.
+- [**8739**Star][17d] [C] [gentilkiwi/mimikatz](https://github.com/gentilkiwi/mimikatz) A little tool to play with Windows security
+- [**8646**Star][28d] [Java] [android-hacker/virtualxposed](https://github.com/android-hacker/virtualxposed) A simple app to use Xposed without root, unlock the bootloader or modify system image, etc.
+- [**8525**Star][1m] [microsoft/wsl](https://github.com/microsoft/WSL) Issues found on WSL
+- [**8443**Star][7m] [Shell] [233boy/v2ray](https://github.com/233boy/v2ray) 最好用的 V2Ray 一键安装脚本 & 管理脚本
+- [**8424**Star][2d] [Py] [wifiphisher/wifiphisher](https://github.com/wifiphisher/wifiphisher) 流氓AP框架, 用于RedTeam和Wi-Fi安全测试
+- [**8420**Star][2y] [brannondorsey/wifi-cracking](https://github.com/brannondorsey/wifi-cracking) Crack WPA/WPA2 Wi-Fi Routers with Airodump-ng and Aircrack-ng/Hashcat
+- [**8044**Star][9d] [trimstray/the-practical-linux-hardening-guide](https://github.com/trimstray/the-practical-linux-hardening-guide) This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).
+- [**8002**Star][2m] [Py] [facebook/chisel](https://github.com/facebook/chisel) Chisel is a collection of LLDB commands to assist debugging iOS apps.
+- [**7986**Star][1m] [Py] [mailpile/mailpile](https://github.com/mailpile/mailpile) A free & open modern, fast email client with user-friendly encryption and privacy features
+- [**7965**Star][3y] [Go] [cyfdecyf/cow](https://github.com/cyfdecyf/cow) HTTP proxy written in Go. COW can automatically identify blocked sites and use parent proxies to access.
+- [**7945**Star][4y] [ObjC] [shadowsocks/shadowsocks-ios](https://github.com/shadowsocks/shadowsocks-ios) Removed according to regulations.
+- [**7840**Star][6d] [C++] [shiqiyu/libfacedetection](https://github.com/shiqiyu/libfacedetection) An open source library for face detection in images. The face detection speed can reach 1500FPS.
+- [**7731**Star][3d] [JS] [gchq/cyberchef](https://github.com/gchq/cyberchef) The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis
+- [**7712**Star][2d] [Go] [git-lfs/git-lfs](https://github.com/git-lfs/git-lfs) Git extension for versioning large files
+- [**7670**Star][24d] [Java] [java-decompiler/jd-gui](https://github.com/java-decompiler/jd-gui) A standalone Java Decompiler GUI
+- [**7524**Star][29d] [Py] [threat9/routersploit](https://github.com/threat9/routersploit) Exploitation Framework for Embedded Devices
+- [**7474**Star][9d] [Go] [snail007/goproxy](https://github.com/snail007/goproxy) Proxy是高性能全功能的http代理、https代理、socks5代理、内网穿透、内网穿透p2p、内网穿透代理、内网穿透反向代理、内网穿透服务器、Websocket代理、TCP代理、UDP代理、DNS代理、DNS加密代理,代理API认证,全能跨平台代理服务器。
+- [**7412**Star][1m] [C++] [shadowsocks/shadowsocks-qt5](https://github.com/shadowsocks/shadowsocks-qt5) A cross-platform shadowsocks GUI client
+- [**7397**Star][1m] [Py] [s0md3v/xsstrike](https://github.com/s0md3v/XSStrike) Most advanced XSS scanner.
+- [**7246**Star][19d] [Java] [lionsoul2014/ip2region](https://github.com/lionsoul2014/ip2region) Ip2region is a offline IP location library with accuracy rate of 99.9% and 0.0x millseconds searching performance. DB file is less then 5Mb with all ip address stored. binding for Java,PHP,C,Python,Nodejs,Golang,C#,lua. Binary,B-tree,Memory searching algorithm
+- [**7186**Star][7m] [Shell] [teddysun/shadowsocks_install](https://github.com/teddysun/shadowsocks_install) Auto Install Shadowsocks Server for CentOS/Debian/Ubuntu
+- [**7017**Star][16d] [Go] [future-architect/vuls](https://github.com/future-architect/vuls) Agent-less vulnerability scanner for Linux, FreeBSD, Container Image, Running Container, WordPress, Programming language libraries, Network devices
+- [**6989**Star][5d] [C] [hashcat/hashcat](https://github.com/hashcat/hashcat) World's fastest and most advanced password recovery utility
+- [**6984**Star][2d] [Go] [nats-io/nats-server](https://github.com/nats-io/nats-server) High-Performance server for NATS, the cloud native messaging system.
+- [**6984**Star][2m] [JS] [cs01/gdbgui](https://github.com/cs01/gdbgui) Browser-based frontend to gdb (gnu debugger). Add breakpoints, view the stack, visualize data structures, and more in C, C++, Go, Rust, and Fortran. Run gdbgui from the terminal and a new tab will open in your browser.
+- [**6957**Star][11d] [greatfire/wiki](https://github.com/greatfire/wiki) 自由浏览
+- [**6949**Star][3m] [Java] [pxb1988/dex2jar](https://github.com/pxb1988/dex2jar) Tools to work with android .dex and java .class files
+- [**6869**Star][2m] [Go] [sqshq/sampler](https://github.com/sqshq/sampler) A tool for shell commands execution, visualization and alerting. Configured with a simple YAML file.
+- [**6812**Star][19d] [Shell] [awslabs/git-secrets](https://github.com/awslabs/git-secrets) Prevents you from committing secrets and credentials into git repositories
+- [**6732**Star][9m] [Java] [amitshekhariitbhu/android-debug-database](https://github.com/amitshekhariitbhu/android-debug-database) A library for debugging android databases and shared preferences - Make Debugging Great Again
+- [**6683**Star][3d] [Java] [zaproxy/zaproxy](https://github.com/zaproxy/zaproxy) The OWASP ZAP core project
+- [**6682**Star][3y] [C++] [alibaba/andfix](https://github.com/alibaba/andfix) AndFix is a library that offer hot-fix for Android App.
+- [**6668**Star][12d] [C++] [keepassxreboot/keepassxc](https://github.com/keepassxreboot/keepassxc) KeePassXC is a cross-platform community-driven port of the Windows application “Keepass Password Safe”.
+- [**6595**Star][3d] [Py] [networkx/networkx](https://github.com/networkx/networkx) Official NetworkX source code repository.
+- [**6555**Star][6m] [Go] [shadowsocks/shadowsocks-go](https://github.com/shadowsocks/shadowsocks-go) go port of shadowsocks (Deprecated)
+- [**6518**Star][1m] [Py] [h2y/shadowrocket-adblock-rules](https://github.com/h2y/shadowrocket-adblock-rules) 提供多款 Shadowrocket 规则,带广告过滤功能。用于 iOS 未越狱设备选择性地自动翻墙。
+- [**6462**Star][5d] [Shell] [cisofy/lynis](https://github.com/cisofy/lynis) Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
+- [**6451**Star][17d] [Go] [bettercap/bettercap](https://github.com/bettercap/bettercap) The Swiss Army knife for 802.11, BLE and Ethernet networks reconnaissance and MITM attacks.
+- [**6448**Star][9m] [HTML] [open-power-workgroup/hospital](https://github.com/open-power-workgroup/hospital) OpenPower工作组收集汇总的医院开放数据
+- [**6310**Star][29d] [Py] [seatgeek/fuzzywuzzy](https://github.com/seatgeek/fuzzywuzzy) Fuzzy String Matching in Python
+- [**6197**Star][2m] [ObjC] [johnno1962/injectionforxcode](https://github.com/johnno1962/injectionforxcode) Runtime Code Injection for Objective-C & Swift
+- [**6194**Star][3y] [PS] [powershellmafia/powersploit](https://github.com/PowerShellMafia/PowerSploit) PowerSploit - A PowerShell Post-Exploitation Framework
+- [**6192**Star][2m] [Py] [yandex/gixy](https://github.com/yandex/gixy) Nginx configuration static analyzer
+- [**6187**Star][6m] [rmerl/asuswrt-merlin](https://github.com/rmerl/asuswrt-merlin) Enhanced version of Asus's router firmware (Asuswrt) (legacy code base)
+- [**6146**Star][2d] [JS] [avwo/whistle](https://github.com/avwo/whistle) HTTP, HTTP2, HTTPS, Websocket debugging proxy
+- [**6137**Star][1y] [Hack] [facebook/fbctf](https://github.com/facebook/fbctf) Platform to host Capture the Flag competitions
+- [**6128**Star][9m] [Py] [schollz/howmanypeoplearearound](https://github.com/schollz/howmanypeoplearearound) Count the number of people around you
+- [**6092**Star][15d] [Go] [usefathom/fathom](https://github.com/usefathom/fathom) Fathom Lite. Simple, privacy-focused website analytics. Built with Golang & Preact.
+- [**6074**Star][16d] [Go] [quay/clair](https://github.com/quay/clair) Vulnerability Static Analysis for Containers
+- [**6074**Star][16d] [Go] [quay/clair](https://github.com/quay/clair) Vulnerability Static Analysis for Containers
+- [**6073**Star][5m] [Java] [qihoo360/replugin](https://github.com/qihoo360/replugin) RePlugin - A flexible, stable, easy-to-use Android Plug-in Framework
+- [**6070**Star][2y] [C] [jgamblin/mirai-source-code](https://github.com/jgamblin/mirai-source-code) Leaked Mirai Source Code for Research/IoC Development Purposes
+- [**6021**Star][3d] [Py] [cyrus-and/gdb-dashboard](https://github.com/cyrus-and/gdb-dashboard) Modular visual interface for GDB in Python
+- [**6017**Star][7d] [berzerk0/probable-wordlists](https://github.com/berzerk0/probable-wordlists) Version 2 is live! Wordlists sorted by probability originally created for password generation and testing - make sure your passwords aren't popular!
+- [**5972**Star][2m] [Java] [google/android-classyshark](https://github.com/google/android-classyshark) Analyze any Android/Java based app or game
+- [**5968**Star][2d] [Py] [gallopsled/pwntools](https://github.com/gallopsled/pwntools) CTF framework and exploit development library
+- [**5942**Star][6m] [JS] [haotian-wang/google-access-helper](https://github.com/haotian-wang/google-access-helper) 谷歌访问助手破解版
+- [**5888**Star][2d] [Py] [asciimoo/searx](https://github.com/asciimoo/searx) searx:网络元数据搜索引擎。汇总70 多个搜索引擎的搜素结果,避免用户被追踪或者被分析。可与 Tor 结合使用
+- [**5879**Star][2d] [C++] [radareorg/cutter](https://github.com/radareorg/cutter) Reverse Engineering Platform powered by radare2
+- [**5871**Star][2m] [Gnuplot] [nasa-jpl/open-source-rover](https://github.com/nasa-jpl/open-source-rover) A build-it-yourself, 6-wheel rover based on the rovers on Mars!
+- [**5815**Star][7m] [JS] [sindresorhus/fkill-cli](https://github.com/sindresorhus/fkill-cli) Fabulously kill processes. Cross-platform.
+- [**5773**Star][1y] [qinyuhang/shadowsocksx-ng-r](https://github.com/qinyuhang/shadowsocksx-ng-r) Next Generation of ShadowsocksX
+- [**5766**Star][3m] [ObjC] [square/ponydebugger](https://github.com/square/ponydebugger) Remote network and data debugging for your native iOS app using Chrome Developer Tools
+- [**5762**Star][2m] [C] [spacehuhn/esp8266_deauther](https://github.com/spacehuhn/esp8266_deauther) Cheap WiFi hacks
+- [**5742**Star][2y] [Py] [newsapps/beeswithmachineguns](https://github.com/newsapps/beeswithmachineguns) A utility for arming (creating) many bees (micro EC2 instances) to attack (load test) targets (web applications).
+- [**5740**Star][8m] [C] [xoreaxeaxeax/movfuscator](https://github.com/xoreaxeaxeax/movfuscator) The single instruction C compiler
+- [**5694**Star][9d] [JS] [swagger-api/swagger-editor](https://github.com/swagger-api/swagger-editor) Swagger Editor
+- [**5693**Star][2d] [Go] [casbin/casbin](https://github.com/casbin/casbin) An authorization library that supports access control models like ACL, RBAC, ABAC in Golang
+- [**5626**Star][1m] [C] [rofl0r/proxychains-ng](https://github.com/rofl0r/proxychains-ng) proxychains ng (new generation) - a preloader which hooks calls to sockets in dynamically linked programs and redirects it through one or more socks/http proxies. continuation of the unmaintained proxychains project. the sf.net page is currently not updated, use releases from github release page instead.
+- [**5593**Star][10d] [Ruby] [presidentbeef/brakeman](https://github.com/presidentbeef/brakeman) A static analysis security vulnerability scanner for Ruby on Rails applications
+- [**5565**Star][29d] [Roff] [max2max/freess](https://github.com/max2max/freess) 免费ss账号 免费shadowsocks账号 免费v2ray账号 (长期更新)
+- [**5540**Star][20d] [rshipp/awesome-malware-analysis](https://github.com/rshipp/awesome-malware-analysis) A curated list of awesome malware analysis tools and resources.
+- [**5476**Star][8m] [carpedm20/awesome-hacking](https://github.com/carpedm20/awesome-hacking) A curated list of awesome Hacking tutorials, tools and resources
+- [**5417**Star][2m] [Py] [axi0mx/ipwndfu](https://github.com/axi0mx/ipwndfu) open-source jailbreaking tool for many iOS devices
+- [**5413**Star][2y] [Rust] [autumnai/leaf](https://github.com/autumnai/leaf) Open Machine Intelligence Framework for Hackers. (GPU/CPU)
+- [**5371**Star][5m] [C] [pwn20wndstuff/undecimus](https://github.com/pwn20wndstuff/undecimus) unc0ver jailbreak for iOS 11.0 - 12.4
+- [**5371**Star][2d] [Py] [mlflow/mlflow](https://github.com/mlflow/mlflow) Open source platform for the machine learning lifecycle
+- [**5324**Star][4d] [Go] [zricethezav/gitleaks](https://github.com/zricethezav/gitleaks) Audit git repos for secrets
+- [**5205**Star][7m] [Py] [usarmyresearchlab/dshell](https://github.com/usarmyresearchlab/dshell) Dshell is a network forensic analysis framework.
+- [**5196**Star][3m] [Py] [ytisf/thezoo](https://github.com/ytisf/thezoo) A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.
+- [**5192**Star][1m] [Py] [refirmlabs/binwalk](https://github.com/ReFirmLabs/binwalk) a fast, easy to use tool for analyzing, reverse engineering, and extracting firmware images.
+ - [IDA插件](https://github.com/ReFirmLabs/binwalk/tree/master/src/scripts)
+ - [binwalk](https://github.com/ReFirmLabs/binwalk/tree/master/src/binwalk)
+- [**5167**Star][20d] [Shell] [vulhub/vulhub](https://github.com/vulhub/vulhub) Pre-Built Vulnerable Environments Based on Docker-Compose
+- [**5167**Star][1y] [JS] [samyk/poisontap](https://github.com/samyk/poisontap) Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.
+- [**5148**Star][6d] [PHP] [tennc/webshell](https://github.com/tennc/webshell) This is a webshell open source project
+- [**5123**Star][21d] [C++] [avast/retdec](https://github.com/avast/retdec) RetDec is a retargetable machine-code decompiler based on LLVM.
+- [**5118**Star][15d] [ObjC] [macpass/macpass](https://github.com/MacPass/MacPass) A native OS X KeePass client
+- [**5118**Star][4m] [Py] [n1nj4sec/pupy](https://github.com/n1nj4sec/pupy) Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) remote administration and post-exploitation tool mainly written in python
+- [**5089**Star][2d] [Go] [dnscrypt/dnscrypt-proxy](https://github.com/DNSCrypt/dnscrypt-proxy) dnscrypt-proxy 2 - A flexible DNS proxy, with support for encrypted DNS protocols.
+- [**5082**Star][2m] [sbilly/awesome-security](https://github.com/sbilly/awesome-security) A collection of awesome software, libraries, documents, books, resources and cools stuffs about security.
+- [**5065**Star][2m] [Shell] [stackexchange/blackbox](https://github.com/stackexchange/blackbox) Safely store secrets in Git/Mercurial/Subversion
+- [**5059**Star][1m] [Java] [meituan-dianping/walle](https://github.com/meituan-dianping/walle) Android Signature V2 Scheme签名下的新一代渠道包打包神器
+- [**5054**Star][4y] [Py] [shadowsocksr-backup/shadowsocksr](https://github.com/shadowsocksr-backup/shadowsocksr) Python port of ShadowsocksR
+- [**5042**Star][2d] [HTML] [owasp/owasp-mstg](https://github.com/owasp/owasp-mstg) The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security development, testing and reverse engineering.
+- [**5037**Star][4m] [PS] [empireproject/empire](https://github.com/EmpireProject/Empire) 后渗透框架. Windows客户端用PowerShell, Linux/OSX用Python. 之前PowerShell Empire和Python EmPyre的组合
+- [**5021**Star][2d] [Py] [mobsf/mobile-security-framework-mobsf](https://github.com/MobSF/Mobile-Security-Framework-MobSF) Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
+- [**5005**Star][2d] [C++] [coatisoftware/sourcetrail](https://github.com/coatisoftware/sourcetrail) Sourcetrail - free and open-source interactive source explorer
+- [**4996**Star][2d] [ASP] [hq450/fancyss](https://github.com/hq450/fancyss) fancyss is a project providing tools to across the GFW on asuswrt/merlin based router.
+- [**4996**Star][6d] [Go] [inlets/inlets](https://github.com/inlets/inlets) Expose your local endpoints to the Internet
+- [**4994**Star][1m] [Py] [snare/voltron](https://github.com/snare/voltron) A hacky debugger UI for hackers
+- [**4953**Star][22d] [Py] [trustedsec/social-engineer-toolkit](https://github.com/trustedsec/social-engineer-toolkit) The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.
+- [**4920**Star][2d] [TS] [jigsaw-code/outline-client](https://github.com/jigsaw-code/outline-client) Outline clients, developed by Jigsaw. The Outline clients use the popular Shadowsocks protocol, and lean on the Cordova and Electron frameworks to support Windows, Android / ChromeOS, Linux, iOS and macOS.
+- [**4913**Star][1y] [Go] [yinghuocho/firefly-proxy](https://github.com/yinghuocho/firefly-proxy) A proxy software to help circumventing the Great Firewall.
+- [**4909**Star][2d] [Shell] [denisidoro/navi](https://github.com/denisidoro/navi) An interactive cheatsheet tool for the command-line
+- [**4897**Star][11m] [Go] [bitly/oauth2_proxy](https://github.com/bitly/oauth2_proxy) A reverse proxy that provides authentication with Google, Github or other provider
+- [**4883**Star][2m] [Rust] [sharkdp/hexyl](https://github.com/sharkdp/hexyl) A command-line hex viewer
+- [**4881**Star][5d] [Java] [guardianproject/haven](https://github.com/guardianproject/haven) Haven is for people who need a way to protect their personal spaces and possessions without compromising their own privacy, through an Android app and on-device sensors
+- [**4869**Star][2d] [Swift] [yanue/v2rayu](https://github.com/yanue/v2rayu) V2rayU,基于v2ray核心的mac版客户端,用于科学上网,使用swift编写,支持vmess,shadowsocks,socks5等服务协议,支持订阅, 支持二维码,剪贴板导入,手动配置,二维码分享等
+- [**4867**Star][10d] [Py] [alessandroz/lazagne](https://github.com/alessandroz/lazagne) Credentials recovery project
+- [**4847**Star][3d] [Go] [gcla/termshark](https://github.com/gcla/termshark) A terminal UI for tshark, inspired by Wireshark
+- [**4841**Star][2d] [C] [offensive-security/exploitdb](https://github.com/offensive-security/exploitdb) The official Exploit Database repository
+- [**4803**Star][8m] [Py] [10se1ucgo/disablewintracking](https://github.com/10se1ucgo/disablewintracking) Uses some known methods that attempt to minimize tracking in Windows 10
+- [**4782**Star][2d] [C] [google/oss-fuzz](https://github.com/google/oss-fuzz) OSS-Fuzz - continuous fuzzing of open source software.
+- [**4761**Star][2d] [C++] [facebook/redex](https://github.com/facebook/redex) A bytecode optimizer for Android apps
+- [**4724**Star][2d] [C++] [paddlepaddle/paddle-lite](https://github.com/PaddlePaddle/Paddle-Lite) Multi-platform high performance deep learning inference engine (『飞桨』多平台高性能深度学习预测引擎)
+- [**4691**Star][9d] [Py] [manisso/fsociety](https://github.com/manisso/fsociety) fsociety Hacking Tools Pack – A Penetration Testing Framework
+- [**4639**Star][3d] [Py] [secdev/scapy](https://github.com/secdev/scapy) Scapy: the Python-based interactive packet manipulation program & library. Supports Python 2 & Python 3.
+- [**4638**Star][18d] [C] [google/ios-webkit-debug-proxy](https://github.com/google/ios-webkit-debug-proxy) A DevTools proxy (Chrome Remote Debugging Protocol) for iOS devices (Safari Remote Web Inspector).
+- [**4637**Star][6m] [powershell/win32-openssh](https://github.com/powershell/win32-openssh) Win32 port of OpenSSH
+- [**4633**Star][2d] [JS] [beefproject/beef](https://github.com/beefproject/beef) The Browser Exploitation Framework Project
+- [**4615**Star][12d] [Go] [ginuerzh/gost](https://github.com/ginuerzh/gost) GO Simple Tunnel - a simple tunnel written in golang
+- [**4589**Star][11m] [Py] [ecthros/uncaptcha2](https://github.com/ecthros/uncaptcha2) defeating the latest version of ReCaptcha with 91% accuracy
+- [**4583**Star][1y] [C] [upx/upx](https://github.com/upx/upx) UPX - the Ultimate Packer for eXecutables
+- [**4575**Star][4d] [C++] [mozilla/rr](https://github.com/mozilla/rr) Record and Replay Framework
+- [**4543**Star][4d] [Ruby] [wpscanteam/wpscan](https://github.com/wpscanteam/wpscan) WPScan is a free, for non-commercial use, black box WordPress Vulnerability Scanner written for security professionals and blog maintainers to test the security of their WordPress websites.
+- [**4529**Star][6d] [C] [jedisct1/dsvpn](https://github.com/jedisct1/dsvpn) A Dead Simple VPN.
+- [**4498**Star][6d] [TS] [apis-guru/graphql-voyager](https://github.com/apis-guru/graphql-voyager)
+- [**4459**Star][8d] [Py] [jopohl/urh](https://github.com/jopohl/urh) Universal Radio Hacker: investigate wireless protocols like a boss
+- [**4458**Star][1y] [Go] [wallix/awless](https://github.com/wallix/awless) A Mighty CLI for AWS
+- [**4449**Star][3d] [Go] [dragonflyoss/dragonfly](https://github.com/dragonflyoss/Dragonfly) Dragonfly is an intelligent P2P based image and file distribution system.
+- [**4446**Star][2d] [Makefile] [frida/frida](https://github.com/frida/frida) Clone this repo to build Frida
+- [**4443**Star][24d] [Py] [jofpin/trape](https://github.com/jofpin/trape) People tracker on the Internet: OSINT analysis and research tool by Jose Pino
+- [**4411**Star][2m] [Shell] [zardus/ctf-tools](https://github.com/zardus/ctf-tools) Some setup scripts for security research tools.
+- [**4359**Star][6d] [Swift] [signalapp/signal-ios](https://github.com/signalapp/Signal-iOS) A private messenger for iOS.
+- [**4346**Star][1m] [JS] [cure53/dompurify](https://github.com/cure53/dompurify) a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
+- [**4344**Star][12m] [Py] [lennylxx/ipv6-hosts](https://github.com/lennylxx/ipv6-hosts) Fork of
+- [**4313**Star][5m] [Py] [diafygi/acme-tiny](https://github.com/diafygi/acme-tiny) A tiny script to issue and renew TLS certs from Let's Encrypt
+- [**4283**Star][7d] [Py] [tensorflow/cleverhans](https://github.com/tensorflow/cleverhans) An adversarial example library for constructing attacks, building defenses, and benchmarking both
+- [**4280**Star][1m] [Shell] [ashishb/android-security-awesome](https://github.com/ashishb/android-security-awesome) A collection of android security related resources
+- [**4261**Star][5d] [Rust] [timvisee/ffsend](https://github.com/timvisee/ffsend) Easily and securely share files from the command line
+- [**4258**Star][11m] [JS] [butterproject/butter-desktop](https://github.com/butterproject/butter-desktop) All the free parts of Popcorn Time
+- [**4244**Star][2y] [imeiji/shadowsocks_install](https://github.com/imeiji/shadowsocks_install) Auto install shadowsocks server,thanks 秋水逸冰
+- [**4241**Star][4m] [Py] [dxa4481/trufflehog](https://github.com/dxa4481/trufflehog) Searches through git repositories for high entropy strings and secrets, digging deep into commit history
+- [**4215**Star][7m] [ObjC] [alonemonkey/monkeydev](https://github.com/alonemonkey/monkeydev) CaptainHook Tweak、Logos Tweak and Command-line Tool、Patch iOS Apps, Without Jailbreak.
+- [**4211**Star][9d] [Go] [gophish/gophish](https://github.com/gophish/gophish) Open-Source Phishing Toolkit
+- [**4205**Star][11d] [qazbnm456/awesome-web-security](https://github.com/qazbnm456/awesome-web-security) Curated list of Web Security materials and resources
+- [**4204**Star][1y] [Go] [michenriksen/gitrob](https://github.com/michenriksen/gitrob) Reconnaissance tool for GitHub organizations
+- [**4202**Star][2m] [Py] [evilsocket/opensnitch](https://github.com/evilsocket/opensnitch) a GNU/Linux port of the Little Snitch application firewall
+- [**4198**Star][2d] [Py] [openmined/pysyft](https://github.com/openmined/pysyft) A library for encrypted, privacy preserving machine learning
+- [**4190**Star][13d] [we5ter/scanners-box](https://github.com/we5ter/scanners-box) A powerful hacker toolkit collected more than 10 categories of open source scanners from Github - 安全行业从业者自研开源扫描器合辑
+- [**4171**Star][2y] [forter/security-101-for-saas-startups](https://github.com/forter/security-101-for-saas-startups) security tips for startups
+- [**4149**Star][12m] [JS] [kdzwinel/betwixt](https://github.com/kdzwinel/betwixt) Betwixt will help you analyze web traffic outside the browser using familiar Chrome DevTools interface.
+- [**4131**Star][5d] [Java] [spring-projects/spring-security](https://github.com/spring-projects/spring-security) Spring Security
+- [**4120**Star][5m] [Py] [spiderclub/haipproxy](https://github.com/spiderclub/haipproxy)
+- [**4120**Star][2m] [Py] [aboul3la/sublist3r](https://github.com/aboul3la/sublist3r) Fast subdomains enumeration tool for penetration testers
+- [**4096**Star][2y] [Py] [xoreaxeaxeax/sandsifter](https://github.com/xoreaxeaxeax/sandsifter) sandsifter:x86 处理器 Fuzzer,查找 Intel 的隐藏指令和 CPU bug
+- [**4092**Star][9m] [wtsxdev/reverse-engineering](https://github.com/wtsxdev/reverse-engineering) List of awesome reverse engineering resources
+- [**4046**Star][1m] [JS] [sigalor/whatsapp-web-reveng](https://github.com/sigalor/whatsapp-web-reveng) Reverse engineering WhatsApp Web.
+- [**4045**Star][2m] [Java] [jesusfreke/smali](https://github.com/jesusfreke/smali) smali/baksmali
+- [**4044**Star][2d] [Py] [google/clusterfuzz](https://github.com/google/clusterfuzz) Scalable fuzzing infrastructure.
+- [**4022**Star][22d] [drduh/yubikey-guide](https://github.com/drduh/yubikey-guide) Guide to using YubiKey for GPG and SSH
+- [**4021**Star][3m] [JS] [cuckoosandbox/cuckoo](https://github.com/cuckoosandbox/cuckoo) Cuckoo Sandbox is an automated dynamic malware analysis system
+- [**4000**Star][1y] [JS] [travist/jsencrypt](https://github.com/travist/jsencrypt) A Javascript library to perform OpenSSL RSA Encryption, Decryption, and Key Generation.
+- [**3967**Star][3m] [Py] [nullarray/autosploit](https://github.com/nullarray/autosploit) Automated Mass Exploiter
+- [**3961**Star][5d] [Go] [dexidp/dex](https://github.com/dexidp/dex) OpenID Connect Identity (OIDC) and OAuth 2.0 Provider with Pluggable Connectors
+- [**3953**Star][2m] [JS] [apsdehal/awesome-ctf](https://github.com/apsdehal/awesome-ctf) A curated list of CTF frameworks, libraries, resources and softwares
+- [**3953**Star][2m] [JS] [apsdehal/awesome-ctf](https://github.com/apsdehal/awesome-ctf) A curated list of CTF frameworks, libraries, resources and softwares
+- [**3937**Star][3d] [Py] [angr/angr](https://github.com/angr/angr) A powerful and user-friendly binary analysis platform!
+- [**3935**Star][4m] [PHP] [paragonie/awesome-appsec](https://github.com/paragonie/awesome-appsec) A curated list of resources for learning about application security
+- [**3933**Star][8m] [Go] [eranyanay/1m-go-websockets](https://github.com/eranyanay/1m-go-websockets) handling 1M websockets connections in Go
+- [**3923**Star][1m] [C] [aquynh/capstone](https://github.com/aquynh/capstone) Capstone disassembly/disassembler framework: Core (Arm, Arm64, BPF, EVM, M68K, M680X, MOS65xx, Mips, PPC, RISCV, Sparc, SystemZ, TMS320C64x, Web Assembly, X86, X86_64, XCore) + bindings.
+- [**3920**Star][2y] [C#] [shadowsocksr-backup/shadowsocksr-csharp](https://github.com/shadowsocksr-backup/shadowsocksr-csharp)
+- [**3915**Star][16d] [Rust] [svenstaro/genact](https://github.com/svenstaro/genact) a nonsense activity generator
+- [**3893**Star][2d] [C++] [baldurk/renderdoc](https://github.com/baldurk/renderdoc) RenderDoc is a stand-alone graphics debugging tool.
+- [**3878**Star][2m] [PHP] [fuzzdb-project/fuzzdb](https://github.com/fuzzdb-project/fuzzdb) Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
+- [**3869**Star][2d] [Py] [secureauthcorp/impacket](https://github.com/SecureAuthCorp/impacket) Impacket is a collection of Python classes for working with network protocols.
+- [**3848**Star][7d] [JS] [shadowsocks/shadowsocks-manager](https://github.com/shadowsocks/shadowsocks-manager) A shadowsocks manager tool for multi user and traffic control.
+- [**3845**Star][2d] [hq450/fancyss_history_package](https://github.com/hq450/fancyss_history_package) 科学上网插件的离线安装包储存在这里
+- [**3838**Star][2m] [ObjC] [sveinbjornt/sloth](https://github.com/sveinbjornt/sloth) Mac app that shows all open files, directories and sockets in use by all running processes. Nice GUI for lsof.
+- [**3831**Star][4y] [iosre/iosappreverseengineering](https://github.com/iosre/iosappreverseengineering) The world’s 1st book of very detailed iOS App reverse engineering skills :)
+- [**3813**Star][1m] [jivoi/awesome-osint](https://github.com/jivoi/awesome-osint) A curated list of amazingly awesome open source intelligence tools and resources
+- [**3799**Star][5y] [shadowsocksr-backup/shadowsocks-rss](https://github.com/shadowsocksr-backup/shadowsocks-rss) ShadowsocksR update rss, SSR organization
+- [**3767**Star][10m] [Py] [longld/peda](https://github.com/longld/peda) Python Exploit Development Assistance for GDB
+- [**3763**Star][2m] [Py] [paralax/awesome-honeypots](https://github.com/paralax/awesome-honeypots) an awesome list of honeypot resources
+- [**3755**Star][2m] [PHP] [ethicalhack3r/dvwa](https://github.com/ethicalhack3r/DVWA) Damn Vulnerable Web Application (DVWA)
+- [**3752**Star][2m] [Go] [microsoft/ethr](https://github.com/microsoft/ethr) Ethr is a Network Performance Measurement Tool for TCP, UDP & HTTP.
+- [**3736**Star][8d] [Go] [hashicorp/consul-template](https://github.com/hashicorp/consul-template) Template rendering, notifier, and supervisor for
+- [**3733**Star][2m] [C] [iaik/meltdown](https://github.com/iaik/meltdown) This repository contains several applications, demonstrating the Meltdown bug.
+- [**3730**Star][4m] [Py] [malwaredllc/byob](https://github.com/malwaredllc/byob) BYOB (Build Your Own Botnet)
+- [**3719**Star][6d] [jjqqkk/chromium](https://github.com/jjqqkk/chromium) Chromium browser with SSL VPN. Use this browser to unblock websites.
+- [**3713**Star][2d] [C] [atmosphere-nx/atmosphere](https://github.com/atmosphere-nx/atmosphere) Atmosphère is a work-in-progress customized firmware for the Nintendo Switch.
+- [**3684**Star][2y] [JS] [samyk/evercookie](https://github.com/samyk/evercookie) Produces persistent, respawning "super" cookies in a browser, abusing over a dozen techniques. Its goal is to identify users after they've removed standard cookies and other privacy data such as Flash cookies (LSOs), HTML5 storage, SilverLight storage, and others.
+- [**3682**Star][10d] [HTML] [hamukazu/lets-get-arrested](https://github.com/hamukazu/lets-get-arrested) This project is intended to protest against the police in Japan
+- [**3670**Star][2d] [JS] [lesspass/lesspass](https://github.com/lesspass/lesspass)
+- [**3668**Star][8d] [C#] [0xd4d/de4dot](https://github.com/0xd4d/de4dot) .NET deobfuscator and unpacker.
+- [**3667**Star][1y] [Py] [misterch0c/shadowbroker](https://github.com/misterch0c/shadowbroker) The Shadow Brokers "Lost In Translation" leak
+- [**3666**Star][5m] [C] [secwiki/windows-kernel-exploits](https://github.com/secwiki/windows-kernel-exploits) windows-kernel-exploits Windows平台提权漏洞集合
+- [**3663**Star][4m] [C] [facebook/fishhook](https://github.com/facebook/fishhook) A library that enables dynamically rebinding symbols in Mach-O binaries running on iOS.
+- [**3652**Star][4d] [acl4ssr/acl4ssr](https://github.com/acl4ssr/acl4ssr) SSR 去广告ACL规则/SS完整GFWList规则,Telegram频道订阅地址
+- [**3647**Star][2y] [Py] [qiyeboy/ipproxypool](https://github.com/qiyeboy/ipproxypool) IPProxyPool代理池项目,提供代理ip
+- [**3622**Star][6d] [TS] [javascript-obfuscator/javascript-obfuscator](https://github.com/javascript-obfuscator/javascript-obfuscator) A powerful obfuscator for JavaScript and Node.js
+- [**3621**Star][7d] [HTML] [consensys/smart-contract-best-practices](https://github.com/consensys/smart-contract-best-practices) A guide to smart contract security best practices
+- [**3619**Star][5y] [C#] [brandonlw/psychson](https://github.com/brandonlw/Psychson) Phison 2251-03 (2303) Custom Firmware & Existing Firmware Patches (BadUSB)
+- [**3611**Star][2m] [Java] [ffay/lanproxy](https://github.com/ffay/lanproxy) lanproxy是一个将局域网个人电脑、服务器代理到公网的内网穿透工具,支持tcp流量转发,可支持任何tcp上层协议(访问内网网站、本地支付接口调试、ssh访问、远程桌面...)。目前市面上提供类似服务的有花生壳、TeamView、GoToMyCloud等等,但要使用第三方的公网服务器就必须为第三方付费,并且这些服务都有各种各样的限制,此外,由于数据包会流经第三方,因此对数据安全也是一大隐患。技术交流QQ群 946273429
+- [**3604**Star][8d] [PS] [bloodhoundad/bloodhound](https://github.com/BloodHoundAD/BloodHound) a single page Javascript web application, uses graph theory to reveal the hidden and often unintended relationships within an Active Directory environment.
+- [**3598**Star][26d] [C++] [anbox/anbox](https://github.com/anbox/anbox) a container-based approach to boot a full Android system on a regular GNU/Linux system
+- [**3597**Star][1y] [C#] [nummer/destroy-windows-10-spying](https://github.com/nummer/destroy-windows-10-spying) Destroy Windows Spying tool
+- [**3595**Star][3y] [Perl] [x0rz/eqgrp](https://github.com/x0rz/eqgrp) Decrypted content of eqgrp-auction-file.tar.xz
+- [**3583**Star][3d] [Shell] [drwetter/testssl.sh](https://github.com/drwetter/testssl.sh) Testing TLS/SSL encryption anywhere on any port
+- [**3580**Star][5d] [C] [nmap/nmap](https://github.com/nmap/nmap) Nmap - the Network Mapper. Github mirror of official SVN repository.
+- [**3562**Star][5d] [Pascal] [cheat-engine/cheat-engine](https://github.com/cheat-engine/cheat-engine) Cheat Engine. A development environment focused on modding
+- [**3542**Star][6y] [R] [johnmyleswhite/ml_for_hackers](https://github.com/johnmyleswhite/ml_for_hackers) Code accompanying the book "Machine Learning for Hackers"
+- [**3540**Star][6d] [blacckhathaceekr/pentesting-bible](https://github.com/blacckhathaceekr/pentesting-bible) links reaches 10000 links & 10000 pdf files .Learn Ethical Hacking and penetration testing .hundreds of ethical hacking & penetration testing & red team & cyber security & computer science resources.
+- [**3538**Star][4m] [Shell] [chengr28/revokechinacerts](https://github.com/chengr28/revokechinacerts) Revoke Chinese certificates.
+- [**3533**Star][14d] [C] [tencent/tencentos-tiny](https://github.com/tencent/tencentos-tiny) 腾讯物联网终端操作系统
+- [**3514**Star][3y] [C] [hak5darren/usb-rubber-ducky](https://github.com/hak5darren/usb-rubber-ducky)
+- [**3510**Star][2d] [JS] [aol/moloch](https://github.com/aol/moloch) large scale, full packet capturing, indexing, and database system.
+- [**3501**Star][8m] [Go] [fanpei91/torsniff](https://github.com/fanpei91/torsniff) torsniff - a sniffer that sniffs torrents from BitTorrent network
+- [**3501**Star][8m] [Go] [fanpei91/torsniff](https://github.com/fanpei91/torsniff) a sniffer that sniffs torrents from BitTorrent network
+- [**3493**Star][9m] [C] [rpisec/mbe](https://github.com/rpisec/mbe) Course materials for Modern Binary Exploitation by RPISEC
+- [**3485**Star][5m] [PHP] [hanc00l/wooyun_public](https://github.com/hanc00l/wooyun_public) This repo is archived. Thanks for wooyun! 乌云公开漏洞、知识库爬虫和搜索 crawl and search for wooyun.org public bug(vulnerability) and drops
+- [**3481**Star][8d] [C] [cyan4973/xxhash](https://github.com/cyan4973/xxhash) Extremely fast non-cryptographic hash algorithm
+- [**3471**Star][2m] [C++] [trojan-gfw/trojan](https://github.com/trojan-gfw/trojan) An unidentifiable mechanism that helps you bypass GFW.
+- [**3442**Star][9d] [C] [shellphish/how2heap](https://github.com/shellphish/how2heap) A repository for learning various heap exploitation techniques.
+- [**3442**Star][8d] [Java] [meituan-dianping/robust](https://github.com/meituan-dianping/robust) Robust is an Android HotFix solution with high compatibility and high stability. Robust can fix bugs immediately without a reboot.
+- [**3441**Star][15d] [Perl] [sullo/nikto](https://github.com/sullo/nikto) Nikto web server scanner
+- [**3419**Star][9d] [C] [mikebrady/shairport-sync](https://github.com/mikebrady/shairport-sync) AirPlay audio player. Shairport Sync adds multi-room capability with Audio Synchronisation
+- [**3412**Star][27d] [icodesign/potatso](https://github.com/icodesign/Potatso) Potatso is an iOS client that implements different proxies with the leverage of NetworkExtension framework in iOS 10+.
+- [**3410**Star][5m] [Go] [jpillora/chisel](https://github.com/jpillora/chisel) A fast TCP tunnel over HTTP
+- [**3408**Star][24d] [PS] [samratashok/nishang](https://github.com/samratashok/nishang) Offensive PowerShell for red team, penetration testing and offensive security.
+- [**3397**Star][2y] [shadowsocksrr/shadowsocks-rss](https://github.com/shadowsocksrr/shadowsocks-rss) ShadowsocksR update rss, SSR organization
+- [**3344**Star][2d] [jivoi/awesome-ml-for-cybersecurity](https://github.com/jivoi/awesome-ml-for-cybersecurity) Awesome Machine Learning for Cyber Security
+- [**3343**Star][6d] [C] [screetsec/thefatrat](https://github.com/screetsec/thefatrat) Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV softw…
+- [**3340**Star][5m] [C++] [wangyu-/udp2raw-tunnel](https://github.com/wangyu-/udp2raw-tunnel) A Tunnel which Turns UDP Traffic into Encrypted UDP/FakeTCP/ICMP Traffic by using Raw Socket,helps you Bypass UDP FireWalls(or Unstable UDP Environment)
+- [**3334**Star][10d] [Smarty] [anankke/sspanel-uim](https://github.com/anankke/sspanel-uim) Across the Great Wall we can reach every corner in the world
+- [**3331**Star][15d] [Py] [google/grr](https://github.com/google/grr) remote live forensics for incident response
+- [**3330**Star][2d] [Py] [stamparm/maltrail](https://github.com/stamparm/maltrail) Malicious traffic detection system
+- [**3319**Star][2y] [scanate/ethlist](https://github.com/scanate/ethlist) The Comprehensive Ethereum Reading List
+- [**3303**Star][22d] [C] [vanhauser-thc/thc-hydra](https://github.com/vanhauser-thc/thc-hydra) hydra
+- [**3301**Star][2m] [Swift] [yagiz/bagel](https://github.com/yagiz/bagel) a little native network debugging tool for iOS
+- [**3298**Star][9d] [C++] [fireice-uk/xmr-stak](https://github.com/fireice-uk/xmr-stak) Free Monero RandomX Miner and unified CryptoNight miner
+- [**3285**Star][7d] [C] [microsoft/windows-driver-samples](https://github.com/microsoft/windows-driver-samples) This repo contains driver samples prepared for use with Microsoft Visual Studio and the Windows Driver Kit (WDK). It contains both Universal Windows Driver and desktop-only driver samples.
+- [**3278**Star][6d] [C] [virustotal/yara](https://github.com/virustotal/yara) The pattern matching swiss knife
+- [**3276**Star][3m] [C] [nbs-system/naxsi](https://github.com/nbs-system/naxsi) NAXSI is an open-source, high performance, low rules maintenance WAF for NGINX
+- [**3263**Star][10d] [Java] [oldmanpushcart/greys-anatomy](https://github.com/oldmanpushcart/greys-anatomy) Java诊断工具
+- [**3262**Star][2m] [Py] [volatilityfoundation/volatility](https://github.com/volatilityfoundation/volatility) An advanced memory forensics framework
+- [**3260**Star][8d] [Shell] [toniblyx/my-arsenal-of-aws-security-tools](https://github.com/toniblyx/my-arsenal-of-aws-security-tools) List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.
+- [**3260**Star][5y] [C++] [google/lmctfy](https://github.com/google/lmctfy) lmctfy is the open source version of Google’s container stack, which provides Linux application containers.
+- [**3259**Star][7m] [JS] [sindresorhus/speed-test](https://github.com/sindresorhus/speed-test) Test your internet connection speed and ping using speedtest.net from the CLI
+- [**3255**Star][4d] [ObjC] [objective-see/lulu](https://github.com/objective-see/lulu) LuLu is the free macOS firewall
+- [**3247**Star][29d] [JS] [koenkk/zigbee2mqtt](https://github.com/koenkk/zigbee2mqtt) Zigbee
+- [**3242**Star][16d] [Py] [laramies/theharvester](https://github.com/laramies/theharvester) E-mails, subdomains and names Harvester - OSINT
+- [**3238**Star][2d] [TS] [jigsaw-code/outline-server](https://github.com/jigsaw-code/outline-server) Outline Manager, developed by Jigsaw. The Outline Manager application creates and manages Outline servers, powered by Shadowsocks. It uses the Electron framework to offer support for Windows, macOS and Linux.
+- [**3236**Star][5m] [Go] [meshbird/meshbird](https://github.com/meshbird/meshbird) cloud-native multi-region multi-cloud decentralized private networking
+- [**3234**Star][2y] [CSS] [jbtronics/crookedstylesheets](https://github.com/jbtronics/crookedstylesheets) Webpage tracking only using CSS (and no JS)
+- [**3233**Star][9d] [Go] [mozilla/sops](https://github.com/mozilla/sops) Simple and flexible tool for managing secrets
+- [**3228**Star][2d] [C] [betaflight/betaflight](https://github.com/betaflight/betaflight) Open Source Flight Controller Firmware
+- [**3223**Star][2m] [Shell] [gfw-breaker/ssr-accounts](https://github.com/gfw-breaker/ssr-accounts) 一键部署Shadowsocks服务;免费Shadowsocks账号分享;免费SS账号分享; 翻墙;无界,自由门,SquirrelVPN
+- [**3222**Star][6d] [C] [tmate-io/tmate](https://github.com/tmate-io/tmate) Instant Terminal Sharing
+- [**3222**Star][6d] [Go] [dvyukov/go-fuzz](https://github.com/dvyukov/go-fuzz) Randomized testing for Go
+- [**3221**Star][4y] [C] [shadowsocks/chinadns](https://github.com/shadowsocks/chinadns) Protect yourself against DNS poisoning in China.
+- [**3213**Star][1m] [TS] [google/incremental-dom](https://github.com/google/incremental-dom) An in-place DOM diffing library
+- [**3210**Star][7m] [HTML] [leizongmin/js-xss](https://github.com/leizongmin/js-xss) Sanitize untrusted HTML (to prevent XSS) with a configuration specified by a Whitelist
+- [**3209**Star][5m] [ObjC] [naituw/ipapatch](https://github.com/naituw/ipapatch) Patch iOS Apps, The Easy Way, Without Jailbreak.
+- [**3208**Star][4m] [C] [yarrick/iodine](https://github.com/yarrick/iodine) Official git repo for iodine dns tunnel
+- [**3205**Star][15d] [Py] [maurosoria/dirsearch](https://github.com/maurosoria/dirsearch) Web path scanner
+- [**3202**Star][10d] [Rich Text Format] [the-art-of-hacking/h4cker](https://github.com/The-Art-of-Hacking/h4cker) 资源收集:hacking、渗透、数字取证、事件响应、漏洞研究、漏洞开发、逆向
+- [**3187**Star][1y] [Py] [kootenpv/whereami](https://github.com/kootenpv/whereami) Uses WiFi signals and machine learning (sklearn's RandomForest) to predict where you are.
+- [**3187**Star][6m] [hslatman/awesome-threat-intelligence](https://github.com/hslatman/awesome-threat-intelligence) A curated list of Awesome Threat Intelligence resources
+- [**3186**Star][1m] [C++] [spiderlabs/modsecurity](https://github.com/spiderlabs/modsecurity) ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analys…
+- [**3180**Star][27d] [C] [magnumripper/johntheripper](https://github.com/magnumripper/johntheripper) This is the official repo for John the Ripper, "Jumbo" version. The "bleeding-jumbo" branch is based on 1.9.0-Jumbo-1 which was released on May 14, 2019. An import of the "core" version of john this jumbo was based on (or newer) is found in the "master" branch (CVS:
+- [**3169**Star][1m] [C] [valdikss/goodbyedpi](https://github.com/valdikss/goodbyedpi) GoodbyeDPI—Passive Deep Packet Inspection blocker and Active DPI circumvention utility (for Windows)
+- [**3162**Star][1y] [Shell] [toyodadoubi/doubi](https://github.com/toyodadoubi/doubi) 一个逗比写的各种逗比脚本~
+- [**3159**Star][3d] [JS] [minbrowser/min](https://github.com/minbrowser/min) A fast, minimal browser that protects your privacy
+- [**3140**Star][6d] [C] [meetecho/janus-gateway](https://github.com/meetecho/janus-gateway) Janus WebRTC Server
+- [**3137**Star][2y] [shadowsocksr-backup/shadowsocksr-android](https://github.com/shadowsocksr-backup/shadowsocksr-android) A ShadowsocksR client for Android
+- [**3134**Star][2d] [C++] [px4/firmware](https://github.com/px4/firmware) PX4 Autopilot Software
+- [**3125**Star][3d] [Shell] [1n3/sn1per](https://github.com/1n3/sn1per) Automated pentest framework for offensive security experts
+- [**3123**Star][30d] [meirwah/awesome-incident-response](https://github.com/meirwah/awesome-incident-response) A curated list of tools for incident response
+- [**3123**Star][2m] [PS] [fireeye/commando-vm](https://github.com/fireeye/commando-vm) Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@fireeye.com
+- [**3122**Star][5d] [Go] [uber/kraken](https://github.com/uber/kraken) P2P Docker registry capable of distributing TBs of data in seconds
+- [**3121**Star][30d] [CSS] [readthedocs/sphinx_rtd_theme](https://github.com/readthedocs/sphinx_rtd_theme) Sphinx theme for readthedocs.org
+- [**3121**Star][8d] [JS] [duo-labs/cloudmapper](https://github.com/duo-labs/cloudmapper) CloudMapper helps you analyze your Amazon Web Services (AWS) environments.
+- [**3118**Star][3d] [Shell] [speed47/spectre-meltdown-checker](https://github.com/speed47/spectre-meltdown-checker) Spectre, Meltdown, Foreshadow, Fallout, RIDL, ZombieLoad vulnerability/mitigation checker for Linux & BSD
+- [**3113**Star][2d] [C] [qemu/qemu](https://github.com/qemu/qemu) Official QEMU mirror. Please see
+- [**3107**Star][2m] [Py] [byt3bl33d3r/crackmapexec](https://github.com/byt3bl33d3r/crackmapexec) A swiss army knife for pentesting networks
+- [**3106**Star][7d] [Java] [deathmarine/luyten](https://github.com/deathmarine/luyten) An Open Source Java Decompiler Gui for Procyon
+- [**3105**Star][10d] [Shell] [softwaredownload/openwrt-fanqiang](https://github.com/softwaredownload/openwrt-fanqiang) 最好的路由器翻墙、科学上网教程—OpenWrt—shadowsocks
+- [**3088**Star][9d] [Shell] [trimstray/htrace.sh](https://github.com/trimstray/htrace.sh) My simple Swiss Army knife for http/https troubleshooting and profiling.
+- [**3087**Star][3d] [Py] [tribler/tribler](https://github.com/tribler/tribler) Privacy enhanced BitTorrent client with P2P content discovery
+- [**3085**Star][11d] [Go] [tencent/bk-cmdb](https://github.com/tencent/bk-cmdb) 蓝鲸智云配置平台(BlueKing CMDB)
+- [**3084**Star][22d] [C] [unicorn-engine/unicorn](https://github.com/unicorn-engine/unicorn) Unicorn CPU emulator framework (ARM, AArch64, M68K, Mips, Sparc, X86)
+- [**3080**Star][3m] [C] [zmap/zmap](https://github.com/zmap/zmap) ZMap is a fast single packet network scanner designed for Internet-wide network surveys.
+- [**3076**Star][7m] [Go] [michenriksen/aquatone](https://github.com/michenriksen/aquatone) A Tool for Domain Flyovers
+- [**3071**Star][9m] [JS] [jipegit/osxauditor](https://github.com/jipegit/osxauditor) OS X Auditor is a free Mac OS X computer forensics tool
+- [**3065**Star][1m] [Java] [calebfenton/simplify](https://github.com/calebfenton/simplify) Generic Android Deobfuscator
+- [**3063**Star][1y] [Swift] [zhuhaow/spechtlite](https://github.com/zhuhaow/spechtlite) A rule-based proxy for macOS
+- [**3052**Star][2m] [JS] [valve/fingerprintjs](https://github.com/valve/fingerprintjs) Anonymous browser fingerprint
+- [**3049**Star][4m] [C++] [google/robotstxt](https://github.com/google/robotstxt) The repository contains Google's robots.txt parser and matcher as a C++ library (compliant to C++11).
+- [**3043**Star][3m] [Py] [spiderlabs/responder](https://github.com/spiderlabs/responder) a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.
+- [**3029**Star][2m] [Go] [gwuhaolin/lightsocks](https://github.com/gwuhaolin/lightsocks) lightweight network obfuscate proxy, based on socks5, to replace shadowsocks
+- [**3027**Star][9m] [C] [secwiki/linux-kernel-exploits](https://github.com/secwiki/linux-kernel-exploits) linux-kernel-exploits Linux平台提权漏洞集合
+- [**3001**Star][1y] [PHP] [owner888/phpspider](https://github.com/owner888/phpspider) 《我用爬虫一天时间“偷了”知乎一百万用户,只为证明PHP是世界上最好的语言 》所使用的程序
+- [**2991**Star][2d] [JS] [ntop/ntopng](https://github.com/ntop/ntopng) Web-based Traffic and Security Network Traffic Monitoring
+- [**2986**Star][7d] [Py] [guardicore/monkey](https://github.com/guardicore/monkey) Infection Monkey - An automated pentest tool
+- [**2969**Star][29d] [Go] [cookiey/yearning](https://github.com/cookiey/yearning) A most popular sql audit platform for mysql
+- [**2968**Star][2d] [ObjC] [google/santa](https://github.com/google/santa) A binary whitelisting/blacklisting system for macOS
+- [**2955**Star][4d] [Py] [twintproject/twint](https://github.com/twintproject/twint) An advanced Twitter scraping & OSINT tool written in Python that doesn't use Twitter's API, allowing you to scrape a user's followers, following, Tweets and more while evading most API limitations.
+- [**2955**Star][11d] [Go] [dominikh/go-tools](https://github.com/dominikh/go-tools) Staticcheck – a collection of static analysis tools for working with Go code
+- [**2949**Star][8d] [JS] [webgoat/webgoat](https://github.com/webgoat/webgoat) A deliberately insecure Web Application
+- [**2948**Star][2m] [Dockerfile] [thinkdevelop/free-ss-ssr](https://github.com/thinkdevelop/free-ss-ssr) SS账号、SSR账号、V2Ray账号
+- [**2947**Star][1m] [Py] [andresriancho/w3af](https://github.com/andresriancho/w3af) web application attack and audit framework, the open source web vulnerability scanner.
+- [**2945**Star][2y] [phith0n/mind-map](https://github.com/phith0n/mind-map) 各种安全相关思维导图整理收集
+- [**2942**Star][21d] [Py] [cowrie/cowrie](https://github.com/cowrie/cowrie) Cowrie SSH/Telnet Honeypot
+- [**2936**Star][1y] [Py] [danmcinerney/wifijammer](https://github.com/danmcinerney/wifijammer) Continuously jam all wifi clients/routers
+- [**2933**Star][2d] [Zeek] [zeek/zeek](https://github.com/zeek/zeek) Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.
+- [**2932**Star][11m] [Shell] [91yun/serverspeeder](https://github.com/91yun/serverspeeder) 锐速破解版
+- [**2920**Star][23d] [Go] [securego/gosec](https://github.com/securego/gosec) Golang security checker
+- [**2916**Star][2d] [JS] [evilsocket/pwnagotchi](https://github.com/evilsocket/pwnagotchi) Deep Reinforcement Learning instrumenting bettercap for WiFi pwning.
+- [**2915**Star][12d] [C] [libfuse/sshfs](https://github.com/libfuse/sshfs) A network filesystem client to connect to SSH servers
+- [**2909**Star][2d] [Py] [trustedsec/ptf](https://github.com/trustedsec/ptf) a way for modular support for up-to-date tools.
+- [**2901**Star][1y] [Py] [byt3bl33d3r/mitmf](https://github.com/byt3bl33d3r/mitmf) Framework for Man-In-The-Middle attacks
+- [**2897**Star][3d] [secfigo/awesome-fuzzing](https://github.com/secfigo/awesome-fuzzing) A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Development like root cause analysis.
+- [**2883**Star][7m] [C] [p-h-c/phc-winner-argon2](https://github.com/p-h-c/phc-winner-argon2) The password hash Argon2, winner of PHC
+- [**2877**Star][4y] [ObjC] [maciekish/iresign](https://github.com/maciekish/iresign) iReSign allows iDevice app bundles (.ipa) files to be signed or resigned with a digital certificate from Apple for distribution. This tool is aimed at enterprises users, for enterprise deployment, when the person signing the app is different than the person(s) developing it.
+- [**2858**Star][2d] [C] [lxc/lxc](https://github.com/lxc/lxc) LXC - Linux Containers
+- [**2850**Star][2d] [HTML] [ctf-wiki/ctf-wiki](https://github.com/ctf-wiki/ctf-wiki) CTF Wiki Online. Come and join us, we need you!
+- [**2850**Star][4d] [Go] [99designs/aws-vault](https://github.com/99designs/aws-vault) A vault for securely storing and accessing AWS credentials in development environments
+- [**2845**Star][2d] [ObjC] [facebook/idb](https://github.com/facebook/idb) idb is a flexible command line interface for automating iOS simulators and devices
+- [**2842**Star][5m] [Py] [instantbox/instantbox](https://github.com/instantbox/instantbox) Get a clean, ready-to-go Linux box in seconds.
+- [**2840**Star][23d] [C] [ossec/ossec-hids](https://github.com/ossec/ossec-hids) Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.
+- [**2840**Star][2m] [infosecn1nja/red-teaming-toolkit](https://github.com/infosecn1nja/red-teaming-toolkit) A collection of open source and commercial tools that aid in red team operations.
+- [**2839**Star][8m] [C++] [wangyu-/udpspeeder](https://github.com/wangyu-/udpspeeder) A Tunnel which Improves your Network Quality on a High-latency Lossy Link by using Forward Error Correction,for All Traffics(TCP/UDP/ICMP)
+- [**2837**Star][17d] [Py] [espressif/esptool](https://github.com/espressif/esptool) ESP8266 and ESP32 serial bootloader utility
+- [**2834**Star][8m] [Shell] [goreliu/wsl-terminal](https://github.com/goreliu/wsl-terminal) Terminal emulator for Windows Subsystem for Linux (WSL)
+- [**2829**Star][4m] [C] [juliocesarfort/public-pentesting-reports](https://github.com/juliocesarfort/public-pentesting-reports) Curated list of public penetration test reports released by several consulting firms and academic security groups
+- [**2829**Star][1m] [Assembly] [cirosantilli/x86-bare-metal-examples](https://github.com/cirosantilli/x86-bare-metal-examples) Dozens of minimal operating systems to learn x86 system programming. Tested on Ubuntu 17.10 host in QEMU 2.10 and real hardware. Userland cheat at:
+- [**2823**Star][2y] [CSS] [maxchehab/css-keylogging](https://github.com/maxchehab/css-keylogging) Chrome extension and Express server that exploits keylogging abilities of CSS.
+- [**2820**Star][7d] [C] [tmk/tmk_keyboard](https://github.com/tmk/tmk_keyboard) Keyboard firmwares for Atmel AVR and Cortex-M
+- [**2814**Star][8m] [C#] [quasar/quasarrat](https://github.com/quasar/quasarrat) Remote Administration Tool for Windows
+- [**2814**Star][5d] [Py] [jrohy/multi-v2ray](https://github.com/jrohy/multi-v2ray) v2ray easy delpoy & manage tool, support multiple user & protocol manage
+- [**2808**Star][2m] [paulsec/awesome-sec-talks](https://github.com/paulsec/awesome-sec-talks) A collected list of awesome security talks
+- [**2803**Star][9m] [Py] [plasma-disassembler/plasma](https://github.com/plasma-disassembler/plasma) Plasma is an interactive disassembler for x86/ARM/MIPS. It can generates indented pseudo-code with colored syntax.
+- [**2798**Star][19d] [Py] [androguard/androguard](https://github.com/androguard/androguard) Reverse engineering, Malware and goodware analysis of Android applications ... and more (ninja !)
+- [**2793**Star][6d] [C] [klange/toaruos](https://github.com/klange/toaruos) A completely-from-scratch hobby operating system: bootloader, kernel, drivers, C library, and userspace including a composited graphical UI, dynamic linker, syntax-highlighting text editor, network stack, etc.
+- [**2793**Star][2m] [Go] [kgretzky/evilginx2](https://github.com/kgretzky/evilginx2) Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication
+- [**2791**Star][7d] [C++] [xmrig/xmrig](https://github.com/xmrig/xmrig) xmrig: 门罗币挖矿代码 CPU 版
+- [**2789**Star][4y] [Lua] [loveshell/ngx_lua_waf](https://github.com/loveshell/ngx_lua_waf) ngx_lua_waf是一个基于lua-nginx-module(openresty)的web应用防火墙
+- [**2783**Star][30d] [Makefile] [shadowsocks/openwrt-shadowsocks](https://github.com/shadowsocks/openwrt-shadowsocks) Shadowsocks-libev for OpenWrt/LEDE
+- [**2782**Star][2y] [C] [seclab-ucr/intang](https://github.com/seclab-ucr/intang) research project for circumventing the "TCP reset attack" from the Great Firewall of China (GFW) by disrupting/desynchronizing the TCP Control Block (TCB) on the censorship devices.
+- [**2777**Star][9d] [C++] [qtox/qtox](https://github.com/qtox/qtox) qTox is a chat, voice, video, and file transfer IM client using the encrypted peer-to-peer Tox protocol.
+- [**2769**Star][4d] [C] [processhacker/processhacker](https://github.com/processhacker/processhacker) A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware.
+- [**2766**Star][1m] [JS] [trufflesuite/ganache-cli](https://github.com/trufflesuite/ganache-cli) Fast Ethereum RPC client for testing and development
+- [**2756**Star][2m] [secwiki/sec-chart](https://github.com/secwiki/sec-chart) 安全思维导图集合
+- [**2742**Star][5d] [TS] [webhintio/hint](https://github.com/webhintio/hint)
+- [**2742**Star][24d] [Makefile] [theos/theos](https://github.com/theos/theos) A cross-platform suite of tools for building and deploying software for iOS and other platforms.
+- [**2741**Star][8m] [Py] [p0cl4bs/wifi-pumpkin](https://github.com/P0cL4bs/WiFi-Pumpkin) Framework for Rogue Wi-Fi Access Point Attack
+- [**2739**Star][23d] [JS] [s0md3v/awesomexss](https://github.com/s0md3v/AwesomeXSS) Awesome XSS stuff
+- [**2737**Star][1y] [C] [vanhoefm/krackattacks-scripts](https://github.com/vanhoefm/krackattacks-scripts) test if clients or access points (APs) are affected by the KRACK attack against WPA2
+- [**2735**Star][18d] [JS] [cyu/rack-cors](https://github.com/cyu/rack-cors) Rack Middleware for handling Cross-Origin Resource Sharing (CORS), which makes cross-origin AJAX possible.
+- [**2730**Star][3y] [Py] [hephaest0s/usbkill](https://github.com/hephaest0s/usbkill) an anti-forensic kill-switch that waits for a change on your USB ports and then immediately shuts down your computer.
+- [**2717**Star][2d] [PS] [redcanaryco/atomic-red-team](https://github.com/redcanaryco/atomic-red-team) Small and highly portable detection tests based on MITRE's ATT&CK.
+- [**2713**Star][1m] [C] [taviso/loadlibrary](https://github.com/taviso/loadlibrary) Porting Windows Dynamic Link Libraries to Linux
+- [**2703**Star][3y] [Eagle] [samyk/magspoof](https://github.com/samyk/magspoof) A portable device that can spoof/emulate any magnetic stripe, credit card or hotel card "wirelessly", even on standard magstripe (non-NFC/RFID) readers. It can disable Chip&PIN and predict AMEX card numbers with 100% accuracy.
+- [**2701**Star][3d] [Go] [aquasecurity/trivy](https://github.com/aquasecurity/trivy) A Simple and Comprehensive Vulnerability Scanner for Containers, Suitable for CI
+- [**2698**Star][7d] [ObjC] [dantheman827/ios-app-signer](https://github.com/dantheman827/ios-app-signer) This is an app for OS X that can (re)sign apps and bundle them into ipa files that are ready to be installed on an iOS device.
+- [**2690**Star][1m] [ObjC] [kjcracks/clutch](https://github.com/kjcracks/clutch) Fast iOS executable dumper
+- [**2682**Star][22d] [Go] [google/syzkaller](https://github.com/google/syzkaller) syzkaller is an unsupervised coverage-guided kernel fuzzer
+- [**2681**Star][1y] [Py] [mame82/p4wnp1](https://github.com/mame82/p4wnp1) P4wnP1 is a highly customizable USB attack platform, based on a low cost Raspberry Pi Zero or Raspberry Pi Zero W.
+- [**2674**Star][3m] [Py] [drivendata/cookiecutter-data-science](https://github.com/drivendata/cookiecutter-data-science) A logical, reasonably standardized, but flexible project structure for doing and sharing data science work.
+- [**2662**Star][2m] [rmusser01/infosec_reference](https://github.com/rmusser01/infosec_reference) An Information Security Reference That Doesn't Suck
+- [**2654**Star][17d] [JS] [bkimminich/juice-shop](https://github.com/bkimminich/juice-shop) OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
+- [**2652**Star][3m] [Java] [frohoff/ysoserial](https://github.com/frohoff/ysoserial) A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
+- [**2645**Star][2m] [xairy/linux-kernel-exploitation](https://github.com/xairy/linux-kernel-exploitation) A bunch of links related to Linux kernel exploitation
+- [**2645**Star][1y] [HTML] [chybeta/web-security-learning](https://github.com/chybeta/web-security-learning) Web-Security-Learning
+- [**2641**Star][1y] [C] [ckolivas/cgminer](https://github.com/ckolivas/cgminer) ASIC and FPGA miner in c for bitcoin
+- [**2640**Star][2d] [Go] [slackhq/nebula](https://github.com/slackhq/nebula) A scalable overlay networking tool with a focus on performance, simplicity and security
+- [**2637**Star][4m] [Java] [teevity/ice](https://github.com/teevity/ice) AWS Usage Tool
+- [**2625**Star][8m] [leandromoreira/linux-network-performance-parameters](https://github.com/leandromoreira/linux-network-performance-parameters) Learn where some of the network sysctl variables fit into the Linux/Kernel network flow
+- [**2615**Star][2m] [Swift] [zhuhaow/nekit](https://github.com/zhuhaow/nekit) A toolkit for Network Extension Framework
+- [**2612**Star][4d] [JS] [popcorn-official/popcorn-desktop](https://github.com/popcorn-official/popcorn-desktop) Popcorn Time is a multi-platform, free software BitTorrent client that includes an integrated media player. Desktop ( Windows / Mac / Linux ) a Butter-Project Fork
+- [**2607**Star][3y] [Ruby] [arachni/arachni](https://github.com/arachni/arachni) Web Application Security Scanner Framework
+- [**2603**Star][23d] [JS] [knownsec/kcon](https://github.com/knownsec/kcon) KCon is a famous Hacker Con powered by Knownsec Team.
+- [**2601**Star][1m] [pditommaso/awesome-pipeline](https://github.com/pditommaso/awesome-pipeline) A curated list of awesome pipeline toolkits inspired by Awesome Sysadmin
+- [**2596**Star][21d] [C++] [fanout/pushpin](https://github.com/fanout/pushpin) Reverse proxy for realtime web services
+- [**2581**Star][3d] [Go] [adguardteam/adguardhome](https://github.com/adguardteam/adguardhome) Network-wide ads & trackers blocking DNS server
+- [**2581**Star][1m] [Shell] [medicean/vulapps](https://github.com/medicean/vulapps) 快速搭建各种漏洞环境(Various vulnerability environment)
+- [**2575**Star][2m] [C] [huntergregal/mimipenguin](https://github.com/huntergregal/mimipenguin) dump 当前Linux用户的登录密码
+- [**2574**Star][8y] [C] [id-software/quake](https://github.com/id-software/quake) Quake GPL Source Release
+- [**2568**Star][1m] [C] [esnet/iperf](https://github.com/esnet/iperf) A TCP, UDP, and SCTP network bandwidth measurement tool
+- [**2566**Star][2d] [C++] [danmar/cppcheck](https://github.com/danmar/cppcheck) static analysis of C/C++ code
+- [**2565**Star][5m] [Java] [google/binnavi](https://github.com/google/binnavi) a binary analysis IDE that allows to inspect, navigate, edit and annotate control flow graphs and call graphs of disassembled code.
+- [**2562**Star][3m] [Py] [greenwolf/social_mapper](https://github.com/Greenwolf/social_mapper) 对多个社交网站的用户Profile图片进行大规模的人脸识别
+- [**2553**Star][2y] [evilsocket/bettercap](https://github.com/evilsocket/bettercap) DEPRECATED, bettercap developement moved here:
+- [**2551**Star][9d] [Py] [cloudflare/flan](https://github.com/cloudflare/flan) A pretty sweet vulnerability scanner
+- [**2549**Star][6m] [C] [geohot/qira](https://github.com/geohot/qira) QEMU Interactive Runtime Analyser
+- [**2543**Star][19d] [Py] [hugsy/gef](https://github.com/hugsy/gef) GDB Enhanced Features for exploit devs & reversers
+- [**2542**Star][23d] [Go] [drk1wi/modlishka](https://github.com/drk1wi/modlishka) Modlishka. Reverse Proxy.
+- [**2533**Star][8m] [offensive-security/kali-nethunter](https://github.com/offensive-security/kali-nethunter) The Kali NetHunter Project
+- [**2533**Star][2y] [Py] [google/nogotofail](https://github.com/google/nogotofail) An on-path blackbox network traffic security testing tool
+- [**2526**Star][2d] [Shell] [teddysun/across](https://github.com/teddysun/across) This is a shell script for configure and start WireGuard VPN server
+- [**2525**Star][3y] [HTML] [dirtycow/dirtycow.github.io](https://github.com/dirtycow/dirtycow.github.io) Dirty COW
+- [**2522**Star][26d] [C] [yrutschle/sslh](https://github.com/yrutschle/sslh) Applicative Protocol Multiplexer (e.g. share SSH and HTTPS on the same port)
+- [**2516**Star][3m] [kbandla/aptnotes](https://github.com/kbandla/aptnotes) Various public documents, whitepapers and articles about APT campaigns
+- [**2508**Star][5m] [Go] [oj/gobuster](https://github.com/oj/gobuster) Directory/File, DNS and VHost busting tool written in Go
+- [**2507**Star][2m] [Java] [jboss-javassist/javassist](https://github.com/jboss-javassist/javassist) Java bytecode engineering toolkit
+- [**2507**Star][3y] [C] [dhavalkapil/icmptunnel](https://github.com/dhavalkapil/icmptunnel) Transparently tunnel your IP traffic through ICMP echo and reply packets.
+- [**2503**Star][7m] [C++] [chengr28/pcap_dnsproxy](https://github.com/chengr28/pcap_dnsproxy) Pcap_DNSProxy, a local DNS server based on packet capturing
+- [**2501**Star][28d] [Py] [ysrc/xunfeng](https://github.com/ysrc/xunfeng) 巡风是一款适用于企业内网的漏洞快速应急,巡航扫描系统。
+- [**2498**Star][6m] [taichi-framework/taichi](https://github.com/taichi-framework/taichi) A framework to use Xposed module with or without Root/Unlock bootloader, supportting Android 5.0 ~ 10.0
+- [**2497**Star][6d] [onlurking/awesome-infosec](https://github.com/onlurking/awesome-infosec) A curated list of awesome infosec courses and training resources.
+- [**2488**Star][5y] [PHP] [audi-1/sqli-labs](https://github.com/audi-1/sqli-labs) SQLI labs to test error based, Blind boolean based, Time based.
+- [**2480**Star][2y] [Py] [feross/spoofmac](https://github.com/feross/spoofmac) Spoof your MAC address
+- [**2476**Star][11m] [JS] [weixin/miaow](https://github.com/weixin/Miaow) A set of plugins for Sketch include drawing links & marks, UI Kit & Color sync, font & text replacing.
+- [**2476**Star][4m] [Go] [ne0nd0g/merlin](https://github.com/ne0nd0g/merlin) Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.
+- [**2469**Star][6d] [JS] [vitaly-t/pg-promise](https://github.com/vitaly-t/pg-promise) PostgreSQL interface for Node.js
+- [**2466**Star][30d] [Py] [smicallef/spiderfoot](https://github.com/smicallef/spiderfoot) SpiderFoot, the most complete OSINT collection and reconnaissance tool.
+- [**2464**Star][3m] [C] [martin-ger/esp_wifi_repeater](https://github.com/martin-ger/esp_wifi_repeater) A full functional WiFi Repeater (correctly: a WiFi NAT Router)
+- [**2461**Star][11m] [C#] [yck1509/confuserex](https://github.com/yck1509/confuserex) An open-source, free protector for .NET applications
+- [**2461**Star][26d] [C++] [pavel-odintsov/fastnetmon](https://github.com/pavel-odintsov/fastnetmon) very fast DDoS analyzer with sflow/netflow/mirror support
+- [**2454**Star][21d] [Shell] [rebootuser/linenum](https://github.com/rebootuser/linenum) Scripted Local Linux Enumeration & Privilege Escalation Checks
+- [**2451**Star][3y] [Py] [google/enjarify](https://github.com/google/enjarify) a tool for translating Dalvik bytecode to equivalent Java bytecode.
+- [**2444**Star][2d] [PHP] [misp/misp](https://github.com/misp/misp) MISP (core software) - Open Source Threat Intelligence and Sharing Platform (formely known as Malware Information Sharing Platform)
+- [**2429**Star][1m] [Py] [0xinfection/awesome-waf](https://github.com/0xinfection/awesome-waf)
+- [**2423**Star][2d] [Py] [pwndbg/pwndbg](https://github.com/pwndbg/pwndbg) Exploit Development and Reverse Engineering with GDB Made Easy
+- [**2420**Star][1m] [TSQL] [rapid7/metasploitable3](https://github.com/rapid7/metasploitable3) Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities.
+- [**2417**Star][26d] [Py] [infobyte/faraday](https://github.com/infobyte/faraday) Collaborative Penetration Test and Vulnerability Management Platform
+- [**2416**Star][3y] [Py] [arthepsy/ssh-audit](https://github.com/arthepsy/ssh-audit) SSH server auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)
+- [**2411**Star][26d] [Py] [xmendez/wfuzz](https://github.com/xmendez/wfuzz) Web application fuzzer
+- [**2410**Star][8m] [Py] [lionsec/katoolin](https://github.com/lionsec/katoolin) Automatically install all Kali linux tools
+- [**2407**Star][3y] [rpisec/malware](https://github.com/rpisec/malware) Course materials for Malware Analysis by RPISEC
+- [**2404**Star][20d] [Java] [m66b/netguard](https://github.com/m66b/netguard) A simple way to block access to the internet per app
+- [**2395**Star][3y] [OCaml] [facebookarchive/pfff](https://github.com/facebookarchive/pfff) Tools for code analysis, visualizations, or style-preserving source transformation.
+- [**2392**Star][1m] [Go] [xtaci/kcp-go](https://github.com/xtaci/kcp-go) A Crypto-Secure, Production-Grade Reliable-UDP Library for golang with FEC
+- [**2389**Star][8d] [C] [wireshark/wireshark](https://github.com/wireshark/wireshark) Read-only mirror of Wireshark's Git repository. GitHub won't let us disable pull requests. ☞ THEY WILL BE IGNORED HERE ☜ Please upload them at
+- [**2386**Star][2y] [Py] [secretsquirrel/the-backdoor-factory](https://github.com/secretsquirrel/the-backdoor-factory) Patch PE, ELF, Mach-O binaries with shellcode (NOT Supported)
+- [**2384**Star][2d] [Go] [owasp/amass](https://github.com/owasp/amass) In-depth Attack Surface Mapping and Asset Discovery
+- [**2381**Star][11m] [C] [haad/proxychains](https://github.com/haad/proxychains) a tool that forces any TCP connection made by any given application to follow through proxy like TOR or any other SOCKS4, SOCKS5 or HTTP(S) proxy. Supported auth-types: "user/pass" for SOCKS4/5, "basic" for HTTP.
+- [**2376**Star][2d] [Java] [mock-server/mockserver](https://github.com/mock-server/mockserver) MockServer enables easy mocking of any system you integrate with via HTTP or HTTPS with clients written in Java, JavaScript and Ruby. MockServer also includes a proxy that introspects all proxied traffic including encrypted SSL traffic and supports Port Forwarding, Web Proxying (i.e. HTTP proxy), HTTPS Tunneling Proxying (using HTTP CONNECT) and…
+- [**2376**Star][1y] [Py] [danmcinerney/lans.py](https://github.com/danmcinerney/lans.py) Inject code and spy on wifi users
+- [**2369**Star][7d] [security-onion-solutions/security-onion](https://github.com/security-onion-solutions/security-onion) Linux distro for intrusion detection, enterprise security monitoring, and log management
+- [**2369**Star][2m] [TeX] [crypto101/book](https://github.com/crypto101/book) Crypto 101, the introductory book on cryptography.
+- [**2366**Star][4m] [Go] [mlabouardy/komiser](https://github.com/mlabouardy/komiser)
+- [**2364**Star][2m] [Py] [ab77/netflix-proxy](https://github.com/ab77/netflix-proxy) Smart DNS proxy to watch Netflix
+- [**2362**Star][1m] [Lua] [snabbco/snabb](https://github.com/snabbco/snabb) Simple and fast packet networking
+- [**2357**Star][2d] [C] [domoticz/domoticz](https://github.com/domoticz/domoticz) monitor and configure various devices like: Lights, Switches, various sensors/meters like Temperature, Rain, Wind, UV, Electra, Gas, Water and much more
+- [**2352**Star][1m] [Py] [ctfd/ctfd](https://github.com/CTFd/CTFd) CTFs as you need them
+- [**2349**Star][11m] [hack-with-github/free-security-ebooks](https://github.com/hack-with-github/free-security-ebooks) Free Security and Hacking eBooks
+- [**2342**Star][3m] [Go] [vuvuzela/vuvuzela](https://github.com/vuvuzela/vuvuzela) Private messaging system that hides metadata
+- [**2340**Star][6y] [C] [stefanesser/dumpdecrypted](https://github.com/stefanesser/dumpdecrypted) Dumps decrypted mach-o files from encrypted iPhone applications from memory to disk. This tool is necessary for security researchers to be able to look under the hood of encryption.
+- [**2340**Star][1m] [C] [hfiref0x/uacme](https://github.com/hfiref0x/uacme) Defeating Windows User Account Control
+- [**2337**Star][1m] [JS] [pa11y/pa11y](https://github.com/pa11y/pa11y) Pa11y is your automated accessibility testing pal
+- [**2335**Star][3d] [C] [tsl0922/ttyd](https://github.com/tsl0922/ttyd) Share your terminal over the web
+- [**2323**Star][3d] [C#] [netchx/netch](https://github.com/netchx/netch) Game accelerator. Support Socks5, Shadowsocks, ShadowsocksR, V2Ray protocol. UDP NAT FullCone
+- [**2321**Star][11m] [yeyintminthuhtut/awesome-red-teaming](https://github.com/yeyintminthuhtut/awesome-red-teaming) List of Awesome Red Teaming Resources
+- [**2318**Star][5y] [C] [abrasive/shairport](https://github.com/abrasive/shairport) Airtunes emulator! Shairport is no longer maintained.
+- [**2304**Star][1y] [Java] [csploit/android](https://github.com/csploit/android) cSploit - The most complete and advanced IT security professional toolkit on Android.
+- [**2301**Star][15d] [HTML] [tikam02/devops-guide](https://github.com/tikam02/devops-guide) DevOps Guide from basic to advanced with Interview Questions and Notes
+- [**2295**Star][3y] [Py] [lmacken/pyrasite](https://github.com/lmacken/pyrasite) Inject code into running Python processes
+- [**2287**Star][2y] [Py] [rootphantomer/blasting_dictionary](https://github.com/rootphantomer/blasting_dictionary) 爆破字典
+- [**2284**Star][1m] [C] [moby/hyperkit](https://github.com/moby/hyperkit) A toolkit for embedding hypervisor capabilities in your application
+- [**2283**Star][5m] [Py] [guohongze/adminset](https://github.com/guohongze/adminset) 自动化运维平台:CMDB、CD、DevOps、资产管理、任务编排、持续交付、系统监控、运维管理、配置管理
+- [**2282**Star][3y] [Py] [therook/subbrute](https://github.com/therook/subbrute) A DNS meta-query spider that enumerates DNS records, and subdomains.
+- [**2281**Star][3m] [JS] [retirejs/retire.js](https://github.com/retirejs/retire.js) scanner detecting the use of JavaScript libraries with known vulnerabilities
+- [**2276**Star][24d] [JS] [talkingdata/inmap](https://github.com/talkingdata/inmap) 大数据地理可视化
+- [**2274**Star][1m] [Shell] [v1s1t0r1sh3r3/airgeddon](https://github.com/v1s1t0r1sh3r3/airgeddon) This is a multi-use bash script for Linux systems to audit wireless networks.
+- [**2270**Star][1m] [C] [aurorawright/luma3ds](https://github.com/aurorawright/luma3ds) Noob-proof (N)3DS "Custom Firmware"
+- [**2255**Star][3m] [Py] [novnc/websockify](https://github.com/novnc/websockify) Websockify is a WebSocket to TCP proxy/bridge. This allows a browser to connect to any application/server/service. Implementations in Python, C, Node.js and Ruby.
+- [**2252**Star][18d] [dumb-password-rules/dumb-password-rules](https://github.com/dumb-password-rules/dumb-password-rules) Shaming sites with dumb password rules.
+- [**2252**Star][1m] [Shell] [eliaskotlyar/xiaomi-dafang-hacks](https://github.com/eliaskotlyar/xiaomi-dafang-hacks)
+- [**2248**Star][12d] [PS] [k8gege/k8tools](https://github.com/k8gege/k8tools) K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)
+- [**2245**Star][2y] [Go] [mehrdadrad/mylg](https://github.com/mehrdadrad/mylg) Network Diagnostic Tool
+- [**2226**Star][5y] [Go] [filosottile/heartbleed](https://github.com/filosottile/heartbleed) A checker (site and tool) for CVE-2014-0160
+- [**2217**Star][1y] [JS] [cure53/h5sc](https://github.com/cure53/h5sc) HTML5 Security Cheatsheet - A collection of HTML5 related XSS attack vectors
+- [**2215**Star][6y] [C++] [codebutler/firesheep](https://github.com/codebutler/firesheep) A Firefox extension that demonstrates HTTP session hijacking attacks.
+- [**2213**Star][2d] [Go] [aquasecurity/kube-bench](https://github.com/aquasecurity/kube-bench) Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark
+- [**2211**Star][1m] [C] [texane/stlink](https://github.com/texane/stlink) stm32 discovery line linux programmer
+- [**2211**Star][6d] [Go] [google/mtail](https://github.com/google/mtail) extract whitebox monitoring data from application logs for collection in a timeseries database
+- [**2209**Star][22d] [Rust] [cloudflare/boringtun](https://github.com/cloudflare/boringtun) an implementation of the WireGuard® protocol designed for portability and speed.
+- [**2192**Star][23d] [C++] [google/bloaty](https://github.com/google/bloaty) Bloaty McBloatface: a size profiler for binaries
+- [**2189**Star][1m] [sobolevn/awesome-cryptography](https://github.com/sobolevn/awesome-cryptography) A curated list of cryptography resources and links.
+- [**2187**Star][7d] [getlantern/lantern-binaries](https://github.com/getlantern/lantern-binaries) Lantern installers binary downloads.
+- [**2186**Star][1y] [Py] [datasploit/datasploit](https://github.com/DataSploit/datasploit) 对指定目标执行多种侦查技术:企业、人、电话号码、比特币地址等
+- [**2184**Star][3y] [enddo/awesome-windows-exploitation](https://github.com/enddo/awesome-windows-exploitation) A curated list of awesome Windows Exploitation resources, and shiny things. Inspired by awesom
+- [**2183**Star][2d] [C] [armmbed/mbedtls](https://github.com/armmbed/mbedtls) An open source, portable, easy to use, readable and flexible SSL library
+- [**2179**Star][1m] [JS] [secgroundzero/warberry](https://github.com/secgroundzero/warberry) WarBerryPi - Tactical Exploitation
+- [**2173**Star][1y] [JS] [iam4x/pokemongo-webspoof](https://github.com/iam4x/pokemongo-webspoof)
+- [**2163**Star][2m] [Go] [mmatczuk/go-http-tunnel](https://github.com/mmatczuk/go-http-tunnel) Fast and secure tunnels over HTTP/2
+- [**2162**Star][1y] [C++] [maestron/botnets](https://github.com/maestron/botnets) This is a collection of #botnet source codes, unorganized. For EDUCATIONAL PURPOSES ONLY
+- [**2159**Star][1m] [Py] [commixproject/commix](https://github.com/commixproject/commix) Automated All-in-One OS command injection and exploitation tool.
+- [**2158**Star][9m] [exakat/php-static-analysis-tools](https://github.com/exakat/php-static-analysis-tools) A reviewed list of useful PHP static analysis tools
+- [**2158**Star][1m] [C] [conorpp/u2f-zero](https://github.com/conorpp/u2f-zero) U2F USB token optimized for physical security, affordability, and style
+- [**2158**Star][2m] [PHP] [antonioribeiro/tracker](https://github.com/antonioribeiro/tracker) Tracker gathers a lot of information from your requests to identify and store
+- [**2153**Star][6y] [Ruby] [plamoni/siriproxy](https://github.com/plamoni/siriproxy) A (tampering) proxy server for Apple's Siri
+- [**2149**Star][8d] [Java] [google/wycheproof](https://github.com/google/wycheproof) Project Wycheproof tests crypto libraries against known attacks.
+- [**2138**Star][2m] [Py] [trustedsec/unicorn](https://github.com/trustedsec/unicorn) Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.
+- [**2132**Star][1m] [Py] [jonathansalwan/ropgadget](https://github.com/jonathansalwan/ropgadget) This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC and MIPS architectures.
+- [**2127**Star][18d] [Assembly] [pret/pokered](https://github.com/pret/pokered) disassembly of Pokémon Red/Blue
+- [**2122**Star][2y] [Py] [rub-nds/pret](https://github.com/rub-nds/pret) Printer Exploitation Toolkit - The tool that made dumpster diving obsolete.
+- [**2118**Star][4d] [goq/telegram-list](https://github.com/goq/telegram-list) List of telegram groups, channels & bots // Список интересных групп, каналов и ботов телеграма // Список чатов для программистов
+- [**2117**Star][1m] [Py] [elceef/dnstwist](https://github.com/elceef/dnstwist) Domain name permutation engine for detecting typo squatting, phishing and corporate espionage
+- [**2116**Star][7m] [Py] [calebmadrigal/trackerjacker](https://github.com/calebmadrigal/trackerjacker) Like nmap for mapping wifi networks you're not connected to, plus device tracking
+- [**2115**Star][2d] [Py] [fortynorthsecurity/eyewitness](https://github.com/FortyNorthSecurity/EyeWitness) EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.
+- [**2114**Star][7y] [C++] [lloyd/node-memwatch](https://github.com/lloyd/node-memwatch) A NodeJS library to keep an eye on your memory usage, and discover and isolate leaks.
+- [**2107**Star][4y] [C] [hashcat/hashcat-legacy](https://github.com/hashcat/hashcat-legacy) Advanced CPU-based password recovery utility
+- [**2105**Star][8m] [Py] [linkedin/qark](https://github.com/linkedin/qark) Tool to look for several security related Android application vulnerabilities
+- [**2103**Star][3m] [yeahhub/hacking-security-ebooks](https://github.com/yeahhub/hacking-security-ebooks) Top 100 Hacking & Security E-Books (Free Download)
+- [**2103**Star][23d] [infoslack/awesome-web-hacking](https://github.com/infoslack/awesome-web-hacking) A list of web application security
+- [**2095**Star][2d] [C] [wireguard/wireguard](https://github.com/wireguard/wireguard) fast, modern, secure kernel VPN tunnel
+- [**2093**Star][22d] [Ruby] [urbanadventurer/whatweb](https://github.com/urbanadventurer/whatweb) Next generation web scanner
+- [**2084**Star][5d] [C] [flatpak/flatpak](https://github.com/flatpak/flatpak) Linux application sandboxing and distribution framework
+- [**2078**Star][1m] [Go] [theupdateframework/notary](https://github.com/theupdateframework/notary) Notary is a project that allows anyone to have trust over arbitrary collections of data
+- [**2071**Star][15d] [Shell] [wulabing/v2ray_ws-tls_bash_onekey](https://github.com/wulabing/v2ray_ws-tls_bash_onekey) V2Ray Nginx+vmess+ws+tls/ http2 over tls 一键安装脚本
+- [**2066**Star][9m] [jermic/android-crack-tool](https://github.com/jermic/android-crack-tool)
+- [**2058**Star][4m] [Py] [whaleshark-team/cobra](https://github.com/WhaleShark-Team/cobra) Source Code Security Audit (源代码安全审计)
+- [**2057**Star][1y] [bluscreenofjeff/red-team-infrastructure-wiki](https://github.com/bluscreenofjeff/red-team-infrastructure-wiki) Wiki to collect Red Team infrastructure hardening resources
+- [**2054**Star][7d] [swiftonsecurity/sysmon-config](https://github.com/swiftonsecurity/sysmon-config) Sysmon configuration file template with default high-quality event tracing
+- [**2051**Star][2m] [tanprathan/mobileapp-pentest-cheatsheet](https://github.com/tanprathan/mobileapp-pentest-cheatsheet) The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.
+- [**2048**Star][6m] [Go] [maxmcd/webtty](https://github.com/maxmcd/webtty) Share a terminal session over WebRTC
+- [**2047**Star][1m] [edoverflow/bugbounty-cheatsheet](https://github.com/edoverflow/bugbounty-cheatsheet) A list of interesting payloads, tips and tricks for bug bounty hunters.
+- [**2045**Star][2m] [C++] [lordnoteworthy/al-khaser](https://github.com/lordnoteworthy/al-khaser) Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.
+- [**2045**Star][8m] [Shell] [foospidy/payloads](https://github.com/foospidy/payloads) Git All the Payloads! A collection of web attack payloads.
+- [**2043**Star][12d] [Py] [nabla-c0d3/sslyze](https://github.com/nabla-c0d3/sslyze) Fast and powerful SSL/TLS server scanning library.
+- [**2042**Star][2y] [Py] [derv82/wifite](https://github.com/derv82/wifite) an automated wireless attack tool.
+- [**2039**Star][5d] [C++] [openthread/openthread](https://github.com/openthread/openthread) OpenThread released by Google is an open-source implementation of the Thread networking protocol
+- [**2033**Star][2d] [ObjC] [ios-control/ios-deploy](https://github.com/ios-control/ios-deploy) Install and debug iPhone apps from the command line, without using Xcode
+- [**2033**Star][2d] [Py] [sensepost/objection](https://github.com/sensepost/objection) runtimemobile exploration
+- [**2029**Star][3d] [Go] [goodrain/rainbond](https://github.com/goodrain/rainbond) Enterprise application cloud operating system(企业应用云操作系统)
+- [**2025**Star][5y] [CoffeeScript] [shadowsocks/shadowsocks-gui](https://github.com/shadowsocks/shadowsocks-gui) Shadowsocks GUI client
+- [**2024**Star][2d] [C++] [darthton/blackbone](https://github.com/darthton/blackbone) Windows memory hacking library
+- [**2017**Star][3y] [Swift] [urinx/iosapphook](https://github.com/urinx/iosapphook) 专注于非越狱环境下iOS应用逆向研究,从dylib注入,应用重签名到App Hook
+- [**2016**Star][23d] [Java] [genymobile/gnirehtet](https://github.com/genymobile/gnirehtet) Gnirehtet provides reverse tethering for Android
+- [**2016**Star][9m] [C] [dekunukem/nintendo_switch_reverse_engineering](https://github.com/dekunukem/nintendo_switch_reverse_engineering) A look at inner workings of Joycon and Nintendo Switch
+- [**2014**Star][1y] [C] [xoreaxeaxeax/rosenbridge](https://github.com/xoreaxeaxeax/rosenbridge) Hardware backdoors in some x86 CPUs
+- [**2014**Star][5d] [Java] [jeremylong/dependencycheck](https://github.com/jeremylong/dependencycheck) OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
+- [**2005**Star][4y] [C] [probablycorey/wax](https://github.com/probablycorey/wax) Wax is now being maintained by alibaba
+- [**2003**Star][2m] [Go] [skynetservices/skydns](https://github.com/skynetservices/skydns) DNS service discovery for etcd
+- [**2000**Star][1m] [qazbnm456/awesome-cve-poc](https://github.com/qazbnm456/awesome-cve-poc) A curated list of CVE PoCs.
+- [**1996**Star][29d] [Java] [elderdrivers/edxposed](https://github.com/elderdrivers/edxposed) Elder driver Xposed Framework.
+- [**1994**Star][7m] [Py] [fsecurelabs/drozer](https://github.com/FSecureLABS/drozer) The Leading Security Assessment Framework for Android.
+- [**1994**Star][3m] [infosecn1nja/ad-attack-defense](https://github.com/infosecn1nja/ad-attack-defense) Attack and defend active directory using modern post exploitation adversary tradecraft activity
+- [**1994**Star][27d] [Swift] [github/softu2f](https://github.com/github/softu2f) Software U2F authenticator for macOS
+- [**1992**Star][5d] [C#] [mathewsachin/captura](https://github.com/mathewsachin/captura) Capture Screen, Audio, Cursor, Mouse Clicks and Keystrokes
+- [**1990**Star][8d] [HTML] [gtfobins/gtfobins.github.io](https://github.com/gtfobins/gtfobins.github.io) Curated list of Unix binaries that can be exploited to bypass system security restrictions
+- [**1989**Star][4y] [Go] [yahoo/gryffin](https://github.com/yahoo/gryffin) Gryffin is a large scale web security scanning platform.
+- [**1989**Star][2m] [C++] [asmjit/asmjit](https://github.com/asmjit/asmjit) Complete x86/x64 JIT and AOT Assembler for C++
+- [**1987**Star][2y] [dloss/python-pentest-tools](https://github.com/dloss/python-pentest-tools) Python tools for penetration testers
+- [**1977**Star][5d] [Go] [projectdiscovery/subfinder](https://github.com/projectdiscovery/subfinder) Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.
+- [**1977**Star][5d] [Go] [projectdiscovery/subfinder](https://github.com/projectdiscovery/subfinder) 使用Passive Sources, Search Engines, Pastebins, Internet Archives等查找子域名
+- [**1972**Star][1m] [Py] [momosecurity/aswan](https://github.com/momosecurity/aswan) 陌陌风控系统静态规则引擎,零基础简易便捷的配置多种复杂规则,实时高效管控用户异常行为。
+- [**1971**Star][5d] [Py] [j3ssie/osmedeus](https://github.com/j3ssie/osmedeus) Fully automated offensive security framework for reconnaissance and vulnerability scanning
+- [**1966**Star][11d] [Go] [ullaakut/cameradar](https://github.com/Ullaakut/cameradar) Cameradar hacks its way into RTSP videosurveillance cameras
+- [**1966**Star][9m] [JS] [weichiachang/stacks-cli](https://github.com/weichiachang/stacks-cli) Check website stack from the terminal
+- [**1966**Star][1y] [BitBake] [1n3/intruderpayloads](https://github.com/1n3/intruderpayloads) A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.
+- [**1955**Star][7d] [Perl] [spiderlabs/owasp-modsecurity-crs](https://github.com/spiderlabs/owasp-modsecurity-crs) OWASP ModSecurity Core Rule Set (CRS) Project (Official Repository)
+- [**1953**Star][2y] [obfuscator-llvm/obfuscator](https://github.com/obfuscator-llvm/obfuscator) Obfuscator-LLVM
+- [**1952**Star][1y] [Go] [hyperhq/hyperd](https://github.com/hyperhq/hyperd) HyperContainer Daemon
+- [**1951**Star][8d] [Py] [cea-sec/miasm](https://github.com/cea-sec/miasm) Reverse engineering framework in Python
+- [**1947**Star][29d] [Py] [nixawk/pentest-wiki](https://github.com/nixawk/pentest-wiki) PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.
+- [**1945**Star][5d] [C] [microsoft/procdump-for-linux](https://github.com/microsoft/procdump-for-linux) A Linux version of the ProcDump Sysinternals tool
+- [**1942**Star][3y] [C#] [lazocoder/windows-hacks](https://github.com/lazocoder/windows-hacks) Creative and unusual things that can be done with the Windows API.
+- [**1938**Star][4m] [C] [meituan-dianping/logan](https://github.com/meituan-dianping/logan) Logan is a lightweight case logging system based on mobile platform.
+- [**1938**Star][7d] [Go] [zalando/skipper](https://github.com/zalando/skipper) An HTTP router and reverse proxy for service composition, including use cases like Kubernetes Ingress
+- [**1935**Star][19d] [Go] [mpolden/echoip](https://github.com/mpolden/echoip) IP address lookup service
+- [**1933**Star][5m] [C] [darkk/redsocks](https://github.com/darkk/redsocks) transparent TCP-to-proxy redirector
+- [**1923**Star][3y] [Py] [aoncyberlabs/windows-exploit-suggester](https://github.com/AonCyberLabs/Windows-Exploit-Suggester) This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules available for the missing bulletins.
+- [**1920**Star][4y] [Py] [ziggear/shadowsocks](https://github.com/ziggear/shadowsocks) backup of
+- [**1920**Star][2d] [C++] [powerdns/pdns](https://github.com/powerdns/pdns) PowerDNS
+- [**1920**Star][9d] [CSS] [cyb3rward0g/helk](https://github.com/cyb3rward0g/helk) The Hunting ELK
+- [**1918**Star][3m] [toolswatch/blackhat-arsenal-tools](https://github.com/toolswatch/blackhat-arsenal-tools) Official Black Hat Arsenal Security Tools Repository
+- [**1917**Star][2d] [C] [ntop/ndpi](https://github.com/ntop/ndpi) Open Source Deep Packet Inspection Software Toolkit
+- [**1915**Star][18d] [Py] [lanjelot/patator](https://github.com/lanjelot/patator) Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.
+- [**1914**Star][7d] [Go] [solo-io/gloo](https://github.com/solo-io/gloo) An Envoy-Powered API Gateway
+- [**1914**Star][2d] [chaitin/xray](https://github.com/chaitin/xray) xray 安全评估工具 | 使用之前务必先阅读文档
+- [**1903**Star][3m] [Go] [minishift/minishift](https://github.com/minishift/minishift) Run OpenShift 3.x locally
+- [**1901**Star][9d] [C] [chipsec/chipsec](https://github.com/chipsec/chipsec) Platform Security Assessment Framework
+- [**1900**Star][1y] [Py] [derv82/wifite2](https://github.com/derv82/wifite2) Rewrite of the popular wireless network auditor, "wifite"
+- [**1898**Star][3d] [C++] [mhammond/pywin32](https://github.com/mhammond/pywin32) Python for Windows (pywin32) Extensions
+- [**1896**Star][7d] [Shell] [toniblyx/prowler](https://github.com/toniblyx/prowler) AWS Security Best Practices Assessment, Auditing, Hardening and Forensics Readiness Tool. It follows guidelines of the CIS Amazon Web Services Foundations Benchmark and DOZENS of additional checks including GDPR and HIPAA (+100). Official CIS for AWS guide:
+- [**1893**Star][6d] [Py] [mozilla/mozdef](https://github.com/mozilla/mozdef) Mozilla Enterprise Defense Platform
+- [**1893**Star][6m] [Java] [fuzion24/justtrustme](https://github.com/fuzion24/justtrustme) An xposed module that disables SSL certificate checking for the purposes of auditing an app with cert pinning
+- [**1886**Star][4m] [C] [shadowsocks/simple-obfs](https://github.com/shadowsocks/simple-obfs) A simple obfuscating tool (Deprecated)
+- [**1884**Star][1y] [Py] [aploium/zmirror](https://github.com/aploium/zmirror) The next-gen reverse proxy for full site mirroring
+- [**1880**Star][4m] [Py] [python-security/pyt](https://github.com/python-security/pyt) A Static Analysis Tool for Detecting Security Vulnerabilities in Python Web Applications
+- [**1878**Star][16d] [YARA] [yara-rules/rules](https://github.com/yara-rules/rules) Repository of yara rules
+- [**1878**Star][5y] [C++] [tum-vision/lsd_slam](https://github.com/tum-vision/lsd_slam) LSD-SLAM
+- [**1878**Star][2m] [Py] [pycqa/bandit](https://github.com/pycqa/bandit) find common security issues in Python code.
+- [**1877**Star][2d] [C] [merbanan/rtl_433](https://github.com/merbanan/rtl_433) Program to decode traffic from Devices that are broadcasting on 433.9 MHz like temperature sensors
+- [**1876**Star][9d] [olivierlaflamme/cheatsheet-god](https://github.com/olivierlaflamme/cheatsheet-god) Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet
+- [**1876**Star][27d] [hmaverickadams/beginner-network-pentesting](https://github.com/hmaverickadams/beginner-network-pentesting) Notes for Beginner Network Pentesting Course
+- [**1873**Star][12d] [Py] [aquasecurity/kube-hunter](https://github.com/aquasecurity/kube-hunter) Hunt for security weaknesses in Kubernetes clusters
+- [**1870**Star][5d] [C#] [hmbsbige/shadowsocksr-windows](https://github.com/hmbsbige/shadowsocksr-windows) 【自用】Bug-Oriented Programming
+- [**1869**Star][6d] [Java] [adoptopenjdk/jitwatch](https://github.com/adoptopenjdk/jitwatch) Log analyser / visualiser for Java HotSpot JIT compiler. Inspect inlining decisions, hot methods, bytecode, and assembly. View results in the JavaFX user interface.
+- [**1865**Star][6d] [C++] [acidanthera/lilu](https://github.com/acidanthera/Lilu) Arbitrary kext and process patching on macOS
+- [**1865**Star][10m] [PHP] [bartblaze/php-backdoors](https://github.com/bartblaze/php-backdoors) A collection of PHP backdoors. For educational or testing purposes only.
+- [**1864**Star][23d] [C] [tinyproxy/tinyproxy](https://github.com/tinyproxy/tinyproxy) a light-weight HTTP/HTTPS proxy daemon for POSIX operating systems
+- [**1862**Star][4y] [ObjC] [xcodeghostsource/xcodeghost](https://github.com/xcodeghostsource/xcodeghost) "XcodeGhost" Source
+- [**1860**Star][9d] [Lua] [vulnerscom/nmap-vulners](https://github.com/vulnerscom/nmap-vulners) NSE script based on Vulners.com API
+- [**1857**Star][5m] [bypass007/emergency-response-notes](https://github.com/bypass007/emergency-response-notes) 应急响应实战笔记,一个安全工程师的自我修养。
+- [**1855**Star][2m] [Py] [pwnlandia/mhn](https://github.com/pwnlandia/mhn) Modern Honey Network
+- [**1854**Star][5d] [TS] [snyk/snyk](https://github.com/snyk/snyk) CLI and build-time tool to find & fix known vulnerabilities in open-source dependencies
+- [**1854**Star][11m] [C++] [googlecreativelab/open-nsynth-super](https://github.com/googlecreativelab/open-nsynth-super) Open NSynth Super is an experimental physical interface for the NSynth algorithm
+- [**1853**Star][2d] [Py] [bregman-arie/devops-interview-questions](https://github.com/bregman-arie/devops-interview-questions) Linux, Jenkins, AWS, SRE, Prometheus, Docker, Python, Ansible, Git, Kubernetes, Terraform, OpenStack, SQL, NoSQL, Azure, GCP, DNS, Elastic
+- [**1853**Star][4m] [Shell] [arismelachroinos/lscript](https://github.com/arismelachroinos/lscript) The LAZY script will make your life easier, and of course faster.
+- [**1852**Star][3d] [C] [github/glb-director](https://github.com/github/glb-director) GitHub Load Balancer Director and supporting tooling.
+- [**1851**Star][1y] [Java] [jindrapetrik/jpexs-decompiler](https://github.com/jindrapetrik/jpexs-decompiler) JPEXS Free Flash Decompiler
+- [**1848**Star][6m] [Assembly] [pooler/cpuminer](https://github.com/pooler/cpuminer) cpuminer:莱特币和比特币的多线程 CPU 矿机
+- [**1847**Star][8m] [Py] [netflix-skunkworks/stethoscope](https://github.com/Netflix-Skunkworks/stethoscope) Personalized, user-focused recommendations for employee information security.
+- [**1842**Star][1m] [Jupyter Notebook] [hunters-forge/threathunter-playbook](https://github.com/hunters-forge/ThreatHunter-Playbook) A Threat hunter's playbook to aid the development of techniques and hypothesis for hunting campaigns.
+- [**1842**Star][1y] [Java] [yeriomin/yalpstore](https://github.com/yeriomin/yalpstore) Download apks from Google Play Store
+- [**1842**Star][2d] [C++] [pytorch/glow](https://github.com/pytorch/glow) Compiler for Neural Network hardware accelerators
+- [**1841**Star][2m] [C] [retroplasma/earth-reverse-engineering](https://github.com/retroplasma/earth-reverse-engineering) Reversing Google's 3D satellite mode
+- [**1839**Star][3y] [Java] [chora10/cknife](https://github.com/chora10/cknife) Cknife
+- [**1838**Star][1y] [Py] [jinnlynn/genpac](https://github.com/jinnlynn/genpac) PAC/Dnsmasq/Wingy file Generator, working with gfwlist, support custom rules.
+- [**1830**Star][2m] [Go] [influxdata/kapacitor](https://github.com/influxdata/kapacitor) Open source framework for processing, monitoring, and alerting on time series data
+- [**1828**Star][3m] [JS] [coreybutler/node-windows](https://github.com/coreybutler/node-windows) Windows support for Node.JS scripts (daemons, eventlog, UAC, etc).
+- [**1828**Star][1y] [CSS] [ctfs/write-ups-2015](https://github.com/ctfs/write-ups-2015) Wiki-like CTF write-ups repository, maintained by the community. 2015
+- [**1824**Star][5d] [Py] [trailofbits/manticore](https://github.com/trailofbits/manticore) Symbolic execution tool
+- [**1819**Star][6d] [C] [mgba-emu/mgba](https://github.com/mgba-emu/mgba) mGBA Game Boy Advance Emulator
+- [**1818**Star][2m] [djadmin/awesome-bug-bounty](https://github.com/djadmin/awesome-bug-bounty) A comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.
+- [**1815**Star][5m] [Py] [veil-framework/veil](https://github.com/veil-framework/veil) generate metasploit payloads that bypass common anti-virus solutions
+- [**1814**Star][6m] [C++] [iagox86/dnscat2](https://github.com/iagox86/dnscat2) create an encrypted command-and-control (C&C) channel over the DNS protocol, which is an effective tunnel out of almost every network.
+- [**1804**Star][10d] [Go] [gdamore/tcell](https://github.com/gdamore/tcell) Tcell is an alternate terminal package, similar in some ways to termbox, but better in others.
+- [**1801**Star][12m] [Go] [intelsdi-x/snap](https://github.com/intelsdi-x/snap) an open telemetry framework designed to simplify the collection, processing and publishing of system data through a single API.
+- [**1800**Star][3y] [ObjC] [kpwn/yalu102](https://github.com/kpwn/yalu102) incomplete iOS 10.2 jailbreak for 64 bit devices by qwertyoruiopz and marcograssi
+- [**1795**Star][7m] [Py] [lijiejie/subdomainsbrute](https://github.com/lijiejie/subdomainsbrute) A fast sub domain brute tool for pentesters
+- [**1790**Star][12m] [Py] [ctfs/write-ups-2017](https://github.com/ctfs/write-ups-2017) Wiki-like CTF write-ups repository, maintained by the community. 2017
+- [**1785**Star][1y] [aozhimin/ios-monitor-platform](https://github.com/aozhimin/ios-monitor-platform)
+- [**1784**Star][16d] [Shell] [pirate/wireguard-docs](https://github.com/pirate/wireguard-docs)
+- [**1781**Star][15d] [Shell] [leebaird/discover](https://github.com/leebaird/discover) Custom bash scripts used to automate various penetration testing tasks including recon, scanning, parsing, and creating malicious payloads and listeners with Metasploit.
+- [**1779**Star][4y] [caesar0301/awesome-pcaptools](https://github.com/caesar0301/awesome-pcaptools) A collection of tools developed by other researchers in the Computer Science area to process network traces. All the right reserved for the original authors.
+- [**1778**Star][15d] [C++] [apitrace/apitrace](https://github.com/apitrace/apitrace) Tools for tracing OpenGL, Direct3D, and other graphics APIs
+- [**1777**Star][7m] [C++] [wrbug/dumpdex](https://github.com/wrbug/dumpdex) Android unpack
+- [**1777**Star][7d] [PHP] [ezyang/htmlpurifier](https://github.com/ezyang/htmlpurifier) Standards compliant HTML filter written in PHP
+- [**1777**Star][5d] [Go] [convox/rack](https://github.com/convox/rack) Private PaaS built on native AWS services for maximum privacy and minimum upkeep
+- [**1774**Star][3y] [ObjC] [tapwork/heapinspector-for-ios](https://github.com/tapwork/heapinspector-for-ios) Find memory issues & leaks in your iOS app without instruments
+- [**1774**Star][3m] [Py] [epinna/weevely3](https://github.com/epinna/weevely3) Weaponized web shell
+- [**1772**Star][2y] [JS] [cazala/coin-hive](https://github.com/cazala/coin-hive) CoinHive cryptocurrency miner for node.js
+- [**1770**Star][3y] [ObjC] [alibaba/wax](https://github.com/alibaba/wax) Wax is a framework that lets you write native iPhone apps in Lua.
+- [**1761**Star][6d] [C] [google/wuffs](https://github.com/google/wuffs) Wrangling Untrusted File Formats Safely
+- [**1761**Star][2y] [CSS] [b374k/b374k](https://github.com/b374k/b374k) PHP Webshell with handy features
+- [**1760**Star][3y] [Go] [elastic/logstash-forwarder](https://github.com/elastic/logstash-forwarder) An experiment to cut logs in preparation for processing elsewhere. Replaced by Filebeat:
+- [**1758**Star][12m] [JS] [puppeteer/examples](https://github.com/puppeteer/examples) Use case-driven examples for using Puppeteer and headless chrome
+- [**1756**Star][10d] [17mon/china_ip_list](https://github.com/17mon/china_ip_list)
+- [**1754**Star][2m] [onethawt/idaplugins-list](https://github.com/onethawt/idaplugins-list) A list of IDA Plugins
+- [**1747**Star][2d] [PHP] [wordpress/wordpress-coding-standards](https://github.com/wordpress/wordpress-coding-standards) PHP_CodeSniffer rules (sniffs) to enforce WordPress coding conventions
+- [**1745**Star][1y] [PS] [fuzzysecurity/powershell-suite](https://github.com/fuzzysecurity/powershell-suite) My musings with PowerShell
+- [**1744**Star][1y] [coreb1t/awesome-pentest-cheat-sheets](https://github.com/coreb1t/awesome-pentest-cheat-sheets) Collection of the cheat sheets useful for pentesting
+- [**1742**Star][3m] [tunz/js-vuln-db](https://github.com/tunz/js-vuln-db) A collection of JavaScript engine CVEs with PoCs
+- [**1739**Star][21d] [ngalongc/bug-bounty-reference](https://github.com/ngalongc/bug-bounty-reference) Inspired by
+- [**1738**Star][2y] [Go] [vzex/dog-tunnel](https://github.com/vzex/dog-tunnel) p2p tunnel,(udp mode work with kcp,
+- [**1735**Star][2m] [PHP] [orangetw/my-ctf-web-challenges](https://github.com/orangetw/my-ctf-web-challenges) Collection of CTF Web challenges I made
+- [**1731**Star][1m] [PS] [fireeye/flare-vm](https://github.com/fireeye/flare-vm) FireEye Labs Advanced Reverse Engineering
+- [**1730**Star][3y] [Go] [s-rah/onionscan](https://github.com/s-rah/onionscan) OnionScan is a free and open source tool for investigating the Dark Web.
+- [**1730**Star][6m] [Smali] [ahmyth/ahmyth-android-rat](https://github.com/ahmyth/ahmyth-android-rat) Android Remote Administration Tool
+- [**1723**Star][14d] [selierlin/share-ssr-v2ray](https://github.com/selierlin/share-ssr-v2ray)
+- [**1719**Star][4d] [C] [google/honggfuzz](https://github.com/google/honggfuzz) Security oriented fuzzer with powerful analysis options. Supports evolutionary, feedback-driven fuzzing based on code coverage (software- and hardware-based)
+- [**1718**Star][9m] [Py] [constverum/proxybroker](https://github.com/constverum/proxybroker) Proxy [Finder | Checker | Server]. HTTP(S) & SOCKS
+- [**1717**Star][4m] [Py] [lgandx/responder](https://github.com/lgandx/responder) Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.
+- [**1714**Star][5d] [Ruby] [cliffe/secgen](https://github.com/cliffe/secgen) Create randomly insecure VMs
+- [**1710**Star][1m] [Go] [eth0izzle/shhgit](https://github.com/eth0izzle/shhgit) Find GitHub secrets in real time
+- [**1709**Star][3m] [Py] [anorov/cloudflare-scrape](https://github.com/anorov/cloudflare-scrape) A Python module to bypass Cloudflare's anti-bot page.
+- [**1709**Star][1y] [Java] [ac-pm/inspeckage](https://github.com/ac-pm/inspeckage) Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)
+- [**1707**Star][3d] [TSQL] [brentozarultd/sql-server-first-responder-kit](https://github.com/brentozarultd/sql-server-first-responder-kit) sp_Blitz, sp_BlitzCache, sp_BlitzFirst, sp_BlitzIndex, and other SQL Server scripts for health checks and performance tuning.
+- [**1706**Star][16d] [Go] [hashicorp/memberlist](https://github.com/hashicorp/memberlist) Golang package for gossip based membership and failure detection
+- [**1700**Star][8m] [Py] [guelfoweb/knock](https://github.com/guelfoweb/knock) Knock Subdomain Scan
+- [**1697**Star][9m] [CSS] [bagder/http2-explained](https://github.com/bagder/http2-explained) A detailed document explaining and documenting HTTP/2, the successor to the widely popular HTTP/1.1 protocol
+- [**1696**Star][3m] [PHP] [xtr4nge/fruitywifi](https://github.com/xtr4nge/fruitywifi) FruityWiFi is a wireless network auditing tool. The application can be installed in any Debian based system (Jessie) adding the extra packages. Tested in Debian, Kali Linux, Kali Linux ARM (Raspberry Pi), Raspbian (Raspberry Pi), Pwnpi (Raspberry Pi), Bugtraq, NetHunter.
+- [**1696**Star][1y] [Swift] [haxpor/potatso](https://github.com/haxpor/potatso) Potatso is an iOS client that implements Shadowsocks proxy with the leverage of NetworkExtension framework. ***This project is unmaintained, try taking a look at this fork
+- [**1695**Star][6m] [Py] [yelp/osxcollector](https://github.com/yelp/osxcollector) A forensic evidence collection & analysis toolkit for OS X
+- [**1695**Star][3y] [CoffeeScript] [okturtles/dnschain](https://github.com/okturtles/dnschain) A blockchain-based DNS + HTTP server that fixes HTTPS security, and more!
+- [**1689**Star][5m] [C] [networkprotocol/netcode.io](https://github.com/networkprotocol/netcode.io) A protocol for secure client/server connections over UDP
+- [**1687**Star][5m] [JS] [expressjs/csurf](https://github.com/expressjs/csurf) CSRF token middleware
+- [**1687**Star][15d] [HTML] [chromium/badssl.com](https://github.com/chromium/badssl.com)
+- [**1686**Star][8m] [Makefile] [raspberrypi/noobs](https://github.com/raspberrypi/noobs) NOOBS (New Out Of Box Software) - An easy Operating System install manager for the Raspberry Pi
+- [**1685**Star][4m] [R] [briatte/awesome-network-analysis](https://github.com/briatte/awesome-network-analysis) A curated list of awesome network analysis resources.
+- [**1683**Star][1y] [owasp/devguide](https://github.com/owasp/devguide) The OWASP Guide
+- [**1682**Star][3m] [Py] [rootm0s/winpwnage](https://github.com/rootm0s/winpwnage) UAC bypass, Elevate, Persistence and Execution methods
+- [**1677**Star][30d] [Swift] [pmusolino/wormholy](https://github.com/pmusolino/wormholy) iOS network debugging, like a wizard 🧙♂️
+- [**1674**Star][2d] [C++] [microsoft/detours](https://github.com/microsoft/detours) Detours is a software package for monitoring and instrumenting API calls on Windows. It is distributed in source code form.
+- [**1671**Star][7m] [C++] [yegord/snowman](https://github.com/yegord/snowman) a native code to C/C++ decompiler, supporting x86, AMD64, and ARM architectures
+ - [IDA插件](https://github.com/yegord/snowman/tree/master/src/ida-plugin)
+ - [snowman](https://github.com/yegord/snowman/tree/master/src/snowman) QT界面
+ - [nocode](https://github.com/yegord/snowman/tree/master/src/nocode) 命令行工具
+ - [nc](https://github.com/yegord/snowman/tree/master/src/nc) 核心代码,可作为库使用
+- [**1668**Star][2m] [NSIS] [angryip/ipscan](https://github.com/angryip/ipscan) Angry IP Scanner - fast and friendly network scanner
+- [**1666**Star][2d] [Java] [apache/geode](https://github.com/apache/geode) Apache Geode
+- [**1663**Star][4y] [Java] [dodola/hotfix](https://github.com/dodola/hotfix) 安卓App热补丁动态修复框架
+- [**1661**Star][6m] [C] [easyhook/easyhook](https://github.com/easyhook/easyhook) The reinvention of Windows API Hooking
+- [**1661**Star][2d] [Py] [cea-sec/ivre](https://github.com/cea-sec/ivre) Network recon framework.
+- [**1659**Star][10d] [roave/securityadvisories](https://github.com/roave/securityadvisories) ensures that your application doesn't have installed dependencies with known security vulnerabilities
+- [**1656**Star][6d] [JS] [tylerbrock/mongo-hacker](https://github.com/tylerbrock/mongo-hacker) MongoDB Shell Enhancements for Hackers
+- [**1655**Star][3m] [Py] [boppreh/keyboard](https://github.com/boppreh/keyboard) Hook and simulate global keyboard events on Windows and Linux.
+- [**1654**Star][2d] [JS] [ghacksuserjs/ghacks-user.js](https://github.com/ghacksuserjs/ghacks-user.js) An ongoing comprehensive user.js template for configuring and hardening Firefox privacy, security and anti-fingerprinting
+- [**1652**Star][2y] [Shell] [juude/droidreverse](https://github.com/juude/droidreverse) reverse engineering tools for android
+- [**1652**Star][7m] [dsasmblr/game-hacking](https://github.com/dsasmblr/game-hacking) Tutorials, tools, and more as related to reverse engineering video games.
+- [**1651**Star][10m] [JS] [evilcos/xssor2](https://github.com/evilcos/xssor2) XSS'OR - Hack with JavaScript.
+- [**1650**Star][1m] [Py] [ehco1996/django-sspanel](https://github.com/ehco1996/django-sspanel) 用diango开发的全新的shadowsocks网络面板
+- [**1650**Star][7d] [HTML] [clong/detectionlab](https://github.com/clong/detectionlab) Vagrant & Packer scripts to build a lab environment complete with security tooling and logging best practices
+- [**1649**Star][1y] [Py] [evyatarmeged/raccoon](https://github.com/evyatarmeged/raccoon) A high performance offensive security tool for reconnaissance and vulnerability scanning
+- [**1648**Star][2d] [C#] [jbevain/cecil](https://github.com/jbevain/cecil) Cecil is a library to inspect, modify and create .NET programs and libraries.
+- [**1645**Star][3y] [JS] [camwiegert/baffle](https://github.com/camwiegert/baffle) A tiny javascript library for obfuscating and revealing text in DOM elements.
+- [**1643**Star][9m] [tylerha97/awesome-reversing](https://github.com/tylerha97/awesome-reversing) A curated list of awesome reversing resources
+- [**1643**Star][11m] [Java] [fesh0r/fernflower](https://github.com/fesh0r/fernflower) Unofficial mirror of FernFlower Java decompiler (All pulls should be submitted upstream)
+- [**1638**Star][4y] [Py] [ctfs/write-ups-2014](https://github.com/ctfs/write-ups-2014) Wiki-like CTF write-ups repository, maintained by the community. 2014
+- [**1638**Star][11m] [C] [dlundquist/sniproxy](https://github.com/dlundquist/sniproxy) Proxies incoming HTTP and TLS connections based on the hostname contained in the initial request of the TCP session.
+- [**1638**Star][4y] [Py] [ctfs/write-ups-2014](https://github.com/ctfs/write-ups-2014) Wiki-like CTF write-ups repository, maintained by the community. 2014
+- [**1636**Star][4m] [Java] [jaredrummler/androidprocesses](https://github.com/jaredrummler/androidprocesses) DEPRECATED
+- [**1634**Star][14d] [Go] [awnumar/memguard](https://github.com/awnumar/memguard) Secure software enclave for storage of sensitive information in memory.
+- [**1631**Star][6m] [Objective-C++] [tencent/oomdetector](https://github.com/tencent/oomdetector) OOMDetector is a memory monitoring component for iOS which provides you with OOM monitoring, memory allocation monitoring, memory leak detection and other functions.
+- [**1630**Star][6d] [JS] [efforg/privacybadger](https://github.com/efforg/privacybadger) Privacy Badger is a browser extension that automatically learns to block invisible trackers.
+- [**1630**Star][29d] [PHP] [c0ny1/upload-labs](https://github.com/c0ny1/upload-labs) 一个帮你总结所有类型的上传漏洞的靶场
+- [**1629**Star][5d] [sarojaba/awesome-devblog](https://github.com/sarojaba/awesome-devblog) 어썸데브블로그. 국내 개발 블로그 모음(only 실명으로).
+- [**1624**Star][2y] [jhaddix/tbhm](https://github.com/jhaddix/tbhm) The Bug Hunters Methodology
+- [**1624**Star][4m] [CSS] [functionclub/v2ray.fun](https://github.com/functionclub/v2ray.fun) 正在开发的全新 V2ray.Fun
+- [**1621**Star][2m] [Shell] [internetwache/gittools](https://github.com/internetwache/gittools) find websites with their .git repository available to the public
+- [**1618**Star][28d] [Java] [tiann/epic](https://github.com/tiann/epic) Dynamic java method AOP hook for Android(continution of Dexposed on ART), Supporting 4.0~10.0
+- [**1615**Star][2y] [JS] [addyosmani/a11y](https://github.com/addyosmani/a11y) Accessibility audit tooling for the web (beta)
+- [**1614**Star][2m] [Go] [ysrc/yulong-hids](https://github.com/ysrc/yulong-hids) 一款由 YSRC 开源的主机入侵检测系统
+- [**1614**Star][7m] [Go] [sipt/shuttle](https://github.com/sipt/shuttle) A web proxy in Golang with amazing features.
+- [**1612**Star][3y] [Makefile] [drizzlerisk/drizzledumper](https://github.com/drizzlerisk/drizzledumper) a memory-search-based Android unpack tool.
+- [**1608**Star][9m] [JS] [localtunnel/server](https://github.com/localtunnel/server) server for localtunnel.me
+- [**1608**Star][10m] [C] [nmikhailov/validity90](https://github.com/nmikhailov/validity90) Reverse engineering of Validity/Synaptics 138a:0090, 138a:0094, 138a:0097, 06cb:0081, 06cb:009a fingerprint readers protocol
+- [**1606**Star][2d] [C++] [lief-project/lief](https://github.com/lief-project/lief) Library to Instrument Executable Formats
+- [**1602**Star][6m] [Py] [w1109790800/penetration](https://github.com/w1109790800/penetration) 渗透 超全面的渗透资料
+- [**1601**Star][1y] [Py] [nccgroup/scout2](https://github.com/nccgroup/Scout2) Security auditing tool for AWS environments
+- [**1601**Star][5m] [Py] [mozilla/cipherscan](https://github.com/mozilla/cipherscan) A very simple way to find out which SSL ciphersuites are supported by a target.
+- [**1600**Star][5d] [Go] [bitnami-labs/sealed-secrets](https://github.com/bitnami-labs/sealed-secrets) A Kubernetes controller and tool for one-way encrypted Secrets
+- [**1599**Star][2y] [JS] [keraf/nocoin](https://github.com/keraf/nocoin) No Coin is a tiny browser extension aiming to block coin miners such as Coinhive.
+- [**1598**Star][15d] [Java] [spotbugs/spotbugs](https://github.com/spotbugs/spotbugs) SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.
+- [**1597**Star][3m] [Py] [knownsec/pocsuite](https://github.com/knownsec/pocsuite) This project has stopped to maintenance, please to
+- [**1591**Star][28d] [C] [ntop/n2n](https://github.com/ntop/n2n) Peer-to-peer VPN
+- [**1591**Star][24d] [ivrodriguezca/re-ios-apps](https://github.com/ivrodriguezca/re-ios-apps) A completely free, open source and online course about Reverse Engineering iOS Applications.
+- [**1584**Star][6m] [Ruby] [brunofacca/zen-rails-security-checklist](https://github.com/brunofacca/zen-rails-security-checklist) Checklist of security precautions for Ruby on Rails applications.
+- [**1583**Star][4y] [l3m0n/pentest_study](https://github.com/l3m0n/pentest_study) 从零开始内网渗透学习
+- [**1582**Star][1m] [ObjC] [ealeksandrov/provisionql](https://github.com/ealeksandrov/provisionql) Quick Look plugin for apps and provisioning profile files
+- [**1581**Star][1y] [C] [qihoo360/phptrace](https://github.com/qihoo360/phptrace) A tracing and troubleshooting tool for PHP scripts.
+- [**1570**Star][2m] [C] [firmianay/ctf-all-in-one](https://github.com/firmianay/ctf-all-in-one) CTF竞赛入门指南
+- [**1569**Star][2y] [C] [samyk/pwnat](https://github.com/samyk/pwnat) The only tool and technique to punch holes through firewalls/NATs where both clients and server can be behind separate NATs without any 3rd party involvement. Pwnat uses a newly developed technique, exploiting a property of NAT translation tables, with no 3rd party, port forwarding, DMZ, router administrative requirements, STUN/TURN/UPnP/ICE, or…
+- [**1569**Star][29d] [Py] [opendevops-cn/opendevops](https://github.com/opendevops-cn/opendevops) CODO是一款为用户提供企业多混合云、一站式DevOps、自动化运维、完全开源的云管理平台、自动化运维平台
+- [**1566**Star][14d] [C] [codahale/bcrypt-ruby](https://github.com/codahale/bcrypt-ruby) Ruby binding for the OpenBSD bcrypt() password hashing algorithm, allowing you to easily store a secure hash of your users' passwords.
+- [**1565**Star][17d] [Go] [sofastack/sofa-mosn](https://github.com/sofastack/sofa-mosn) MOSN is a modular observable smart network which can be used in service mesh deployed as a data plane sidecar.
+- [**1562**Star][19d] [C] [p-gen/smenu](https://github.com/p-gen/smenu) Terminal utility that reads words from standard input or from a file and creates an interactive selection window just below the cursor. The selected word(s) are sent to standard output for further processing.
+- [**1562**Star][14d] [Py] [k4m4/kickthemout](https://github.com/k4m4/kickthemout) kick devices out of your network and enjoy all the bandwidth for yourself.
+- [**1561**Star][16d] [Java] [gchq/gaffer](https://github.com/gchq/Gaffer) A large-scale entity and relation database supporting aggregation of properties
+- [**1560**Star][1y] [Py] [unkl4b/gitminer](https://github.com/unkl4b/gitminer) Tool for advanced mining for content on Github
+- [**1560**Star][6d] [Go] [caffix/amass](https://github.com/caffix/amass) In-depth Attack Surface Mapping and Asset Discovery
+- [**1557**Star][8m] [Py] [m4ll0k/wascan](https://github.com/m4ll0k/WAScan) WAScan - Web Application Scanner
+- [**1556**Star][15d] [Go] [eolinker/goku-api-gateway](https://github.com/eolinker/goku-api-gateway) A Powerful HTTP API Gateway in pure golang!Goku API Gateway (中文名:悟空 API 网关)是一个基于 Golang开发的微服务网关,能够实现高性能 HTTP API 转发、服务编排、多租户管理、API 访问权限控制等目的,拥有强大的自定义插件系统可以自行扩展,并且提供友好的图形化配置界面,能够快速帮助企业进行 API 服务治理、提高 API 服务的稳定性和安全性。
+- [**1555**Star][1m] [Shell] [mzet-/linux-exploit-suggester](https://github.com/mzet-/linux-exploit-suggester) Linux privilege escalation auditing tool
+- [**1549**Star][7d] [PHP] [mewebstudio/captcha](https://github.com/mewebstudio/captcha) Captcha for Laravel 5 & 6
+- [**1549**Star][1m] [Py] [joxeankoret/diaphora](https://github.com/joxeankoret/diaphora) program diffing
+- [**1548**Star][1y] [C] [ctfs/write-ups-2016](https://github.com/ctfs/write-ups-2016) Wiki-like CTF write-ups repository, maintained by the community. 2016
+- [**1544**Star][15d] [C] [raspberrypi/userland](https://github.com/raspberrypi/userland) Source code for ARM side libraries for interfacing to Raspberry Pi GPU.
+- [**1544**Star][6y] [Py] [google/pyringe](https://github.com/google/pyringe) Debugger capable of attaching to and injecting code into python processes.
+- [**1543**Star][2d] [Go] [juju/juju](https://github.com/juju/juju) Simple, secure devops tooling built to manage today's complex applications wherever you run your software.
+- [**1541**Star][2y] [Py] [awolfly9/ipproxytool](https://github.com/awolfly9/ipproxytool) python ip proxy tool scrapy crawl. 抓取大量免费代理 ip,提取有效 ip 使用
+- [**1540**Star][2y] [C++] [hteso/iaito](https://github.com/hteso/iaito) A Qt and C++ GUI for radare2 reverse engineering framework
+- [**1539**Star][2y] [C] [ezlippi/webbench](https://github.com/ezlippi/webbench) Webbench是Radim Kolar在1997年写的一个在linux下使用的非常简单的网站压测工具。它使用fork()模拟多个客户端同时访问我们设定的URL,测试网站在压力下工作的性能,最多可以模拟3万个并发连接去测试网站的负载能力。官网地址:
+- [**1537**Star][9d] [Py] [lifting-bits/mcsema](https://github.com/lifting-bits/mcsema) Framework for lifting x86, amd64, and aarch64 program binaries to LLVM bitcode
+ - [IDA7插件](https://github.com/lifting-bits/mcsema/tree/master/tools/mcsema_disass/ida7) 用于反汇编二进制文件并生成控制流程图
+ - [IDA插件](https://github.com/lifting-bits/mcsema/tree/master/tools/mcsema_disass/ida) 用于反汇编二进制文件并生成控制流程图
+ - [Binja插件](https://github.com/lifting-bits/mcsema/tree/master/tools/mcsema_disass/binja) 用于反汇编二进制文件并生成控制流程图
+ - [mcsema](https://github.com/lifting-bits/mcsema/tree/master/mcsema)
+- [**1536**Star][4d] [Java] [ukanth/afwall](https://github.com/ukanth/afwall) AFWall+ (Android Firewall +) - iptables based firewall for Android
+- [**1533**Star][13d] [emijrp/awesome-awesome](https://github.com/emijrp/awesome-awesome) A curated list of awesome curated lists of many topics.
+- [**1532**Star][3y] [Py] [x0rz/eqgrp_lost_in_translation](https://github.com/x0rz/eqgrp_lost_in_translation) Decrypted content of odd.tar.xz.gpg, swift.tar.xz.gpg and windows.tar.xz.gpg
+- [**1526**Star][2d] [C++] [nmap/npcap](https://github.com/nmap/npcap) Nmap Project's packet sniffing library for Windows, based on WinPcap/Libpcap improved with NDIS 6 and LWF.
+- [**1522**Star][1y] [HTML] [qiwihui/hiwifi-ss](https://github.com/qiwihui/hiwifi-ss) 极路由+ss配置
+- [**1521**Star][4m] [TS] [spring-guides/tut-spring-security-and-angular-js](https://github.com/spring-guides/tut-spring-security-and-angular-js) Spring Security and Angular:: A tutorial on how to use Spring Security with a single page application with various backend architectures, ranging from a simple single server to an API gateway with OAuth2 authentication.
+- [**1521**Star][3d] [C] [jiangwenyuan/nuster](https://github.com/jiangwenyuan/nuster) A high performance HTTP proxy cache server and RESTful NoSQL cache server based on HAProxy
+- [**1519**Star][10m] [PS] [joefitzgerald/packer-windows](https://github.com/joefitzgerald/packer-windows) Windows templates that can be used to create boxes for Vagrant using Packer
+- [**1518**Star][9m] [Py] [google/rekall](https://github.com/google/rekall) Rekall Memory Forensic Framework
+- [**1517**Star][8d] [Py] [zerosum0x0/koadic](https://github.com/zerosum0x0/koadic) Koadic C3 COM Command & Control - JScript RAT
+- [**1516**Star][5m] [snowming04/the-hacker-playbook-3-translation](https://github.com/snowming04/the-hacker-playbook-3-translation) 对 The Hacker Playbook 3 的翻译。
+- [**1514**Star][3y] [Py] [sensepost/regeorg](https://github.com/sensepost/regeorg) The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.
+- [**1510**Star][1y] [dripcap/dripcap](https://github.com/dripcap/dripcap)
+- [**1508**Star][2m] [Shell] [haugene/docker-transmission-openvpn](https://github.com/haugene/docker-transmission-openvpn) Docker container running Transmission torrent client with WebUI over an OpenVPN tunnel
+- [**1505**Star][2y] [Py] [eldraco/domain_analyzer](https://github.com/eldraco/domain_analyzer) Analyze the security of any domain by finding all the information possible. Made in python.
+- [**1504**Star][27d] [Py] [hannob/snallygaster](https://github.com/hannob/snallygaster) Tool to scan for secret files on HTTP servers
+- [**1499**Star][5d] [YARA] [cybermonitor/apt_cybercriminal_campagin_collections](https://github.com/cybermonitor/apt_cybercriminal_campagin_collections) APT & CyberCriminal Campaign Collection
+- [**1497**Star][4m] [Py] [epinna/tplmap](https://github.com/epinna/tplmap) Server-Side Template Injection and Code Injection Detection and Exploitation Tool
+- [**1489**Star][5d] [Py] [ahupp/python-magic](https://github.com/ahupp/python-magic) A python wrapper for libmagic
+- [**1486**Star][2y] [Kotlin] [gh0u1l5/wechatmagician](https://github.com/gh0u1l5/wechatmagician) WechatMagician is a Xposed module written in Kotlin, that allows you to completely control your Wechat.
+- [**1485**Star][7m] [C++] [wangyu-/tinyfecvpn](https://github.com/wangyu-/tinyfecvpn) A VPN Designed for Lossy Links, with Build-in Forward Error Correction(FEC) Support. Improves your Network Quality on a High-latency Lossy Link.
+- [**1482**Star][7d] [Py] [bitsadmin/wesng](https://github.com/bitsadmin/wesng) Windows Exploit Suggester - Next Generation
+- [**1481**Star][2d] [C] [sleuthkit/sleuthkit](https://github.com/sleuthkit/sleuthkit) The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.
+- [**1480**Star][1y] [C++] [f1xpl/openauto](https://github.com/f1xpl/openauto) AndroidAuto headunit emulator
+- [**1479**Star][3d] [C] [ctcaer/hekate](https://github.com/ctcaer/hekate) Nintendo Switch Bootloader - CTCaer mod
+- [**1478**Star][8d] [C] [iqiyi/xhook](https://github.com/iqiyi/xhook) a PLT (Procedure Linkage Table) hook library for Android native ELF
+- [**1477**Star][2d] [Shell] [blackarch/blackarch](https://github.com/blackarch/blackarch) BlackArch Linux is an Arch Linux-based distribution for penetration testers and security researchers.
+- [**1476**Star][2m] [C++] [jmpews/hookzz](https://github.com/jmpews/hookzz) a hook framework for arm/arm64/ios/android, and [dev] branch is being refactored.
+- [**1471**Star][27d] [minimaxir/hacker-news-undocumented](https://github.com/minimaxir/hacker-news-undocumented) Some of the hidden norms about Hacker News not otherwise covered in the Guidelines and the FAQ.
+- [**1470**Star][3y] [Py] [veil-framework/veil-evasion](https://github.com/Veil-Framework/Veil-Evasion) a tool designed to generate metasploit payloads that bypass common anti-virus solutions.
+- [**1470**Star][2d] [Go] [google/keytransparency](https://github.com/google/keytransparency) A transparent and secure way to look up public keys.
+- [**1469**Star][6y] [C] [alibaba/lvs](https://github.com/alibaba/lvs) A distribution of Linux Virtual Server with some advanced features. It introduces a new packet forwarding method - FULLNAT other than NAT/Tunneling/DirectRouting, and defense mechanism against synflooding attack - SYNPROXY.
+- [**1466**Star][29d] [Go] [neex/phuip-fpizdam](https://github.com/neex/phuip-fpizdam) Exploit for CVE-2019-11043
+- [**1464**Star][6m] [Py] [oros42/imsi-catcher](https://github.com/oros42/imsi-catcher) This program show you IMSI numbers of cellphones around you.
+- [**1463**Star][7d] [C] [ufrisk/pcileech](https://github.com/ufrisk/pcileech) Direct Memory Access (DMA) Attack Software
+- [**1462**Star][9d] [edoverflow/can-i-take-over-xyz](https://github.com/edoverflow/can-i-take-over-xyz) "Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.
+- [**1459**Star][3d] [Py] [enablesecurity/wafw00f](https://github.com/enablesecurity/wafw00f) identify and fingerprint Web Application Firewall (WAF) products protecting a website.
+- [**1458**Star][1y] [C++] [acaudwell/logstalgia](https://github.com/acaudwell/logstalgia) a visualization tool that replays or streams web server access logs as a retro arcade game simulation.
+- [**1455**Star][1y] [Py] [d4vinci/cr3dov3r](https://github.com/d4vinci/cr3dov3r) Know the dangers of credential reuse attacks.
+- [**1453**Star][13d] [C++] [srslte/srslte](https://github.com/srslte/srslte) Open source SDR LTE software suite from Software Radio Systems (SRS)
+- [**1451**Star][2d] [Py] [rocky/python-uncompyle6](https://github.com/rocky/python-uncompyle6) A cross-version Python bytecode decompiler
+- [**1447**Star][3y] [tiancode/learn-hacking](https://github.com/tiancode/learn-hacking) 开始学习Kali Linux 各种破解教程 渗透测试 逆向工程 HackThisSite挑战问题解答
+- [**1447**Star][3y] [tiancode/learn-hacking](https://github.com/tiancode/learn-hacking) 开始学习Kali Linux 各种破解教程 渗透测试 逆向工程 HackThisSite挑战问题解答
+- [**1447**Star][2m] [Py] [neo23x0/loki](https://github.com/neo23x0/loki) Loki - Simple IOC and Incident Response Scanner
+- [**1446**Star][5d] [C] [tianocore/edk2](https://github.com/tianocore/edk2) A modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications
+- [**1446**Star][20d] [Go] [skydive-project/skydive](https://github.com/skydive-project/skydive) An open source real-time network topology and protocols analyzer
+- [**1446**Star][14d] [C++] [microsoft/seal](https://github.com/microsoft/seal) Microsoft SEAL is an easy-to-use and powerful homomorphic encryption library.
+- [**1445**Star][3m] [C++] [vaibhavpandeyvpz/apkstudio](https://github.com/vaibhavpandeyvpz/apkstudio) Open-source, cross platform Qt based IDE for reverse-engineering Android application packages.
+- [**1437**Star][5d] [Go] [google/gapid](https://github.com/google/gapid) Graphics API Debugger
+- [**1436**Star][20d] [Kotlin] [cypherpunkarmory/userland](https://github.com/cypherpunkarmory/userland) The easiest way to run a Linux distribution or application on Android
+- [**1433**Star][11m] [C] [tpruvot/ccminer](https://github.com/tpruvot/ccminer) CUDA Open Source miner project, for most nvidia cards
+- [**1433**Star][1y] [TS] [pedronauck/reworm](https://github.com/pedronauck/reworm)
+- [**1432**Star][6m] [C++] [x64dbg/scyllahide](https://github.com/x64dbg/scyllahide) Advanced usermode anti-anti-debugger
+- [**1432**Star][2m] [C] [feralinteractive/gamemode](https://github.com/feralinteractive/gamemode) Optimise Linux system performance on demand
+- [**1429**Star][5y] [C++] [gdbinit/machoview](https://github.com/gdbinit/machoview) MachOView fork
+- [**1427**Star][9d] [ObjC] [nabla-c0d3/ssl-kill-switch2](https://github.com/nabla-c0d3/ssl-kill-switch2) Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS and OS X Apps
+- [**1426**Star][20d] [C++] [plasma-umass/coz](https://github.com/plasma-umass/coz) Finding Code that Counts with Causal Profiling
+- [**1426**Star][4y] [C++] [aappleby/smhasher](https://github.com/aappleby/smhasher) Automatically exported from code.google.com/p/smhasher
+- [**1425**Star][3m] [Go] [google/stenographer](https://github.com/google/stenographer) Stenographer is a packet capture solution which aims to quickly spool all packets to disk, then provide simple, fast access to subsets of those packets. Discussion/announcements at stenographer@googlegroups.com
+- [**1424**Star][8y] [Py] [moxie0/sslstrip](https://github.com/moxie0/sslstrip) A tool for exploiting Moxie Marlinspike's SSL "stripping" attack.
+- [**1424**Star][11m] [Java] [aslody/legend](https://github.com/aslody/legend) A framework for hook java methods.
+- [**1423**Star][14d] [Go] [google/google-ctf](https://github.com/google/google-ctf) Google CTF
+- [**1422**Star][3y] [Py] [nathanlopez/stitch](https://github.com/nathanlopez/stitch) Python Remote Administration Tool (RAT)
+- [**1422**Star][3y] [mandatoryprogrammer/northkoreadnsleak](https://github.com/mandatoryprogrammer/northkoreadnsleak) Snapshot of North Korea's DNS data taken from zone transfers.
+- [**1419**Star][1m] [Py] [xdavidhu/mitmap](https://github.com/xdavidhu/mitmap)
+- [**1419**Star][3y] [C] [antirez/dump1090](https://github.com/antirez/dump1090) Dump1090 is a simple Mode S decoder for RTLSDR devices
+- [**1418**Star][5m] [PHP] [s4n7h0/xvwa](https://github.com/s4n7h0/xvwa) XVWA is a badly coded web application written in PHP/MySQL that helps security enthusiasts to learn application security.
+- [**1417**Star][4m] [yadox666/the-hackers-hardware-toolkit](https://github.com/yadox666/the-hackers-hardware-toolkit) The best hacker's gadgets for Red Team pentesters and security researchers.
+- [**1417**Star][4d] [Rust] [shadowsocks/shadowsocks-rust](https://github.com/shadowsocks/shadowsocks-rust) A Rust port of shadowsocks
+- [**1417**Star][1m] [Go] [barnybug/cli53](https://github.com/barnybug/cli53) Command line tool for Amazon Route 53
+- [**1415**Star][7d] [C] [z3apa3a/3proxy](https://github.com/z3apa3a/3proxy) 3proxy - tiny free proxy server
+- [**1414**Star][8d] [C] [ettercap/ettercap](https://github.com/ettercap/ettercap) Ettercap Project
+- [**1413**Star][24d] [XSLT] [lolbas-project/lolbas](https://github.com/lolbas-project/lolbas) Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
+- [**1413**Star][24d] [Java] [chrisk44/hijacker](https://github.com/chrisk44/hijacker) Aircrack, Airodump, Aireplay, MDK3 and Reaver GUI Application for Android
+- [**1412**Star][9d] [C] [namhyung/uftrace](https://github.com/namhyung/uftrace) Function (graph) tracer for user-space
+- [**1412**Star][5m] [gitguardian/apisecuritybestpractices](https://github.com/gitguardian/apisecuritybestpractices) Resources to help you keep secrets (API keys, database credentials, certificates, ...) out of source code and remediate the issue in case of a leaked API key. Made available by GitGuardian.
+- [**1411**Star][7d] [C++] [eteran/edb-debugger](https://github.com/eteran/edb-debugger) edb is a cross platform AArch32/x86/x86-64 debugger.
+- [**1411**Star][3d] [Go] [cosmos72/gomacro](https://github.com/cosmos72/gomacro) Interactive Go interpreter and debugger with REPL, Eval, generics and Lisp-like macros
+- [**1410**Star][3m] [Go] [hellogcc/100-gdb-tips](https://github.com/hellogcc/100-gdb-tips) A collection of gdb tips. 100 maybe just mean many here.
+- [**1408**Star][3m] [HTML] [owasp/top10](https://github.com/owasp/top10) Official OWASP Top 10 Document Repository
+- [**1407**Star][4d] [C++] [google/nsjail](https://github.com/google/nsjail) A light-weight process isolation tool, making use of Linux namespaces and seccomp-bpf syscall filters (with help of the kafel bpf language)
+- [**1405**Star][1y] [HTML] [gwuhaolin/blog](https://github.com/gwuhaolin/blog) 浩麟的技术博客
+- [**1405**Star][1y] [C++] [dotnet/llilc](https://github.com/dotnet/llilc) This repo contains LLILC, an LLVM based compiler for .NET Core. It includes a set of cross-platform .NET code generation tools that enables compilation of MSIL byte code to LLVM supported platforms.
+- [**1404**Star][7d] [Java] [chinashiyu/gfw.press](https://github.com/chinashiyu/gfw.press) GFW.Press新一代军用级高强度加密抗干扰网络数据高速传输软件
+- [**1403**Star][2d] [Go] [crazy-max/windowsspyblocker](https://github.com/crazy-max/windowsspyblocker)
+- [**1401**Star][9m] [JS] [anttiviljami/browser-autofill-phishing](https://github.com/anttiviljami/browser-autofill-phishing) A simple demo of phishing by abusing the browser autofill feature
+- [**1399**Star][16d] [Swift] [johnno1962/injectioniii](https://github.com/johnno1962/injectioniii) Re-write of Injection for Xcode in (mostly) Swift4
+- [**1397**Star][1y] [Go] [filosottile/whosthere](https://github.com/filosottile/whosthere) A ssh server that knows who you are
+- [**1396**Star][3y] [PS] [putterpanda/mimikittenz](https://github.com/putterpanda/mimikittenz) A post-exploitation powershell tool for extracting juicy info from memory.
+- [**1395**Star][27d] [C] [quiet/org.quietmodem.quiet](https://github.com/quiet/org.quietmodem.quiet) Quiet for Android - TCP over sound
+- [**1393**Star][4d] [atarity/deploy-your-own-saas](https://github.com/atarity/deploy-your-own-saas) List of "only yours" cloud services for everyday needs
+- [**1393**Star][9d] [Py] [ekultek/whatwaf](https://github.com/ekultek/whatwaf) Detect and bypass web application firewalls and protection systems
+- [**1392**Star][16d] [C++] [jonathansalwan/triton](https://github.com/jonathansalwan/triton) Triton is a Dynamic Binary Analysis (DBA) framework. It provides internal components like a Dynamic Symbolic Execution (DSE) engine, a dynamic taint engine, AST representations of the x86, x86-64 and AArch64 Instructions Set Architecture (ISA), SMT simplification passes, an SMT solver interface and, the last but not least, Python bindings.
+- [**1388**Star][4y] [PHP] [johntroony/php-webshells](https://github.com/johntroony/php-webshells) Common php webshells. Do not host the file(s) on your server!
+- [**1387**Star][11m] [Py] [eth0izzle/bucket-stream](https://github.com/eth0izzle/bucket-stream) Find interesting Amazon S3 Buckets by watching certificate transparency logs.
+- [**1386**Star][2y] [JS] [sqren/fb-sleep-stats](https://github.com/sqren/fb-sleep-stats) Use Facebook to track your friends’ sleeping habits
+- [**1384**Star][5d] [JS] [ix64/unlock-music](https://github.com/ix64/unlock-music) Unlock encrypted music file in browser. 在浏览器中解锁加密的音乐文件。
+- [**1381**Star][6m] [Py] [almandin/fuxploider](https://github.com/almandin/fuxploider) File upload vulnerability scanner and exploitation tool.
+- [**1380**Star][15d] [C] [dynamorio/drmemory](https://github.com/dynamorio/drmemory) Memory Debugger for Windows, Linux, Mac, and Android
+- [**1380**Star][13d] [Shell] [drduh/pwd.sh](https://github.com/drduh/pwd.sh) GPG symmetric password manager
+- [**1378**Star][13d] [OCaml] [mirage/mirage](https://github.com/mirage/mirage) MirageOS is a library operating system that constructs unikernels
+- [**1378**Star][2d] [JS] [lockfale/osint-framework](https://github.com/lockfale/osint-framework) OSINT Framework
+- [**1375**Star][15d] [Go] [unrolled/secure](https://github.com/unrolled/secure) HTTP middleware for Go that facilitates some quick security wins.
+- [**1375**Star][11m] [JS] [intika/librefox](https://github.com/intika/librefox) Firefox with privacy enhancements
+- [**1374**Star][4y] [C++] [valvesoftware/vogl](https://github.com/valvesoftware/vogl) OpenGL capture / playback debugger.
+- [**1373**Star][5m] [Py] [s0md3v/striker](https://github.com/s0md3v/Striker) Striker is an offensive information and vulnerability scanner.
+- [**1373**Star][9m] [PS] [danielbohannon/invoke-obfuscation](https://github.com/danielbohannon/invoke-obfuscation) PowerShell Obfuscator
+- [**1371**Star][1m] [C] [zyantific/zydis](https://github.com/zyantific/zydis) Fast and lightweight x86/x86-64 disassembler library
+- [**1365**Star][9d] [Go] [cortesi/modd](https://github.com/cortesi/modd) A flexible developer tool that runs processes and responds to filesystem changes
+- [**1363**Star][2m] [Py] [fireeye/flare-floss](https://github.com/fireeye/flare-floss) Automatically extract obfuscated strings from malware.
+ - [floss](https://github.com/fireeye/flare-floss/tree/master/floss)
+ - [IDA插件](https://github.com/fireeye/flare-floss/blob/master/scripts/idaplugin.py)
+- [**1363**Star][3y] [C++] [aslody/turbodex](https://github.com/aslody/turbodex) fast load dex in memory.
+- [**1362**Star][1m] [grrrdog/java-deserialization-cheat-sheet](https://github.com/grrrdog/java-deserialization-cheat-sheet) The cheat sheet about Java Deserialization vulnerabilities
+- [**1361**Star][7m] [Py] [vulnerscom/getsploit](https://github.com/vulnerscom/getsploit) Command line utility for searching and downloading exploits
+- [**1361**Star][6m] [C++] [phpv8/v8js](https://github.com/phpv8/v8js) V8 Javascript Engine for PHP — This PHP extension embeds the Google V8 Javascript Engine
+- [**1359**Star][2m] [C] [googleprojectzero/winafl](https://github.com/googleprojectzero/winafl) A fork of AFL for fuzzing Windows binaries
+- [**1355**Star][10m] [HTML] [thelinuxchoice/blackeye](https://github.com/thelinuxchoice/blackeye) The most complete Phishing Tool, with 32 templates +1 customizable
+- [**1354**Star][2d] [Py] [mitre/caldera](https://github.com/mitre/caldera) Automated Adversary Emulation
+- [**1352**Star][3y] [Py] [joaomatosf/jexboss](https://github.com/joaomatosf/jexboss) Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool
+- [**1351**Star][3m] [C++] [raspberrypi/tools](https://github.com/raspberrypi/tools)
+- [**1350**Star][4m] [C] [taviso/ctftool](https://github.com/taviso/ctftool) Interactive CTF Exploration Tool
+- [**1349**Star][3y] [Py] [ddevault/evilpass](https://github.com/ddevault/evilpass) Slightly evil password strength checker
+- [**1349**Star][19d] [C++] [rikkaapps/riru](https://github.com/rikkaapps/riru) Inject zygote process by replace libmemtrack
+- [**1349**Star][5m] [Py] [lijiejie/githack](https://github.com/lijiejie/githack) A `.git` folder disclosure exploit
+- [**1348**Star][10m] [rebeyond/behinder](https://github.com/rebeyond/behinder) “冰蝎”动态二进制加密网站管理客户端
+- [**1347**Star][11m] [Rust] [das-labor/panopticon](https://github.com/das-labor/panopticon) A libre cross-platform disassembler.
+- [**1346**Star][2y] [HTML] [daxeel/blockshell](https://github.com/daxeel/blockshell) A command line utility for learning Blockchain technical concepts likechaining, mining, proof of work etc.
+- [**1345**Star][25d] [C] [x64dbg/x64dbgpy](https://github.com/x64dbg/x64dbgpy) Automating x64dbg using Python, Snapshots:
+- [**1345**Star][12d] [Go] [securitywithoutborders/hardentools](https://github.com/securitywithoutborders/hardentools) Hardentools is a utility that disables a number of risky Windows features.
+- [**1344**Star][23d] [Go] [microcosm-cc/bluemonday](https://github.com/microcosm-cc/bluemonday) a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS
+- [**1343**Star][23d] [Py] [s0md3v/arjun](https://github.com/s0md3v/Arjun) HTTP parameter discovery suite.
+- [**1342**Star][12m] [C] [luke-jr/bfgminer](https://github.com/luke-jr/bfgminer) Modular ASIC/FPGA miner written in C, featuring overclocking, monitoring, fan speed control and remote interface capabilities.
+- [**1342**Star][2m] [Go] [davrodpin/mole](https://github.com/davrodpin/mole) cli app to create ssh tunnels
+- [**1342**Star][1y] [Py] [carmaa/inception](https://github.com/carmaa/inception) a physical memory manipulation and hacking tool exploiting PCI-based DMA. The tool can attack over FireWire, Thunderbolt, ExpressCard, PC Card and any other PCI/PCIe interfaces.
+- [**1341**Star][3m] [Py] [maratyszcza/peachpy](https://github.com/maratyszcza/peachpy) x86-64 assembler embedded in Python
+- [**1341**Star][1y] [XSLT] [api0cradle/lolbas](https://github.com/api0cradle/lolbas) Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
+- [**1340**Star][1y] [kirikira/vtemplate](https://github.com/kirikira/vtemplate) v2ray的模板们
+- [**1340**Star][7m] [Py] [feeicn/gsil](https://github.com/feeicn/gsil) GitHub Sensitive Information Leakage
+- [**1339**Star][6y] [Perl] [intelisecurelabs/linux_exploit_suggester](https://github.com/InteliSecureLabs/Linux_Exploit_Suggester) Linux Exploit Suggester; based on operating system release number
+- [**1338**Star][1m] [CSS] [undeadsec/socialfish](https://github.com/undeadsec/socialfish) Educational Phishing Tool & Information Collector
+- [**1337**Star][1y] [C] [madeye/proxydroid](https://github.com/madeye/proxydroid) Global Proxy for Android
+- [**1336**Star][3m] [HTML] [thehive-project/thehive](https://github.com/thehive-project/thehive) a Scalable, Open Source and Free Security Incident Response Platform
+- [**1335**Star][2m] [C++] [mfontanini/libtins](https://github.com/mfontanini/libtins) High-level, multiplatform C++ network packet sniffing and crafting library.
+- [**1334**Star][4y] [mengskysama/shadowsocks](https://github.com/mengskysama/shadowsocks) A fast tunnel proxy that helps you bypass firewalls
+- [**1333**Star][1y] [C] [gamelinux/passivedns](https://github.com/gamelinux/passivedns) A network sniffer that logs all DNS server replies for use in a passive DNS setup
+- [**1328**Star][2d] [C++] [purplei2p/i2pd](https://github.com/purplei2p/i2pd) a full-featured C++ implementation of I2P client
+- [**1328**Star][1y] [Py] [marten4n6/evilosx](https://github.com/marten4n6/evilosx) An evil RAT (Remote Administration Tool) for macOS / OS X.
+- [**1328**Star][2y] [CoffeeScript] [atmos/camo](https://github.com/atmos/camo) all about making insecure assets look secure
+- [**1327**Star][7m] [Go] [ssllabs/ssllabs-scan](https://github.com/ssllabs/ssllabs-scan) A command-line reference-implementation client for SSL Labs APIs, designed for automated and/or bulk testing.
+- [**1327**Star][3d] [C] [intel/haxm](https://github.com/intel/haxm) cross-platform hardware-assisted virtualization engine (hypervisor), widely used as an accelerator for Android Emulator and QEMU
+- [**1327**Star][10m] [C#] [cenmrev/v2rayw](https://github.com/cenmrev/v2rayw) GUI for v2ray-core on Windows
+- [**1325**Star][21d] [C] [dtag-dev-sec/tpotce](https://github.com/dtag-dev-sec/tpotce) 创建多蜜罐平台T-Pot ISO 镜像
+- [**1324**Star][1y] [C++] [rehints/hexrayscodexplorer](https://github.com/rehints/hexrayscodexplorer) Hex-Rays Decompiler plugin for better code navigation
+
+ View Details
+
+
+ - 自动类型重建
+ - 虚表识别/导航(反编译窗口)
+ - C-tree可视化与导出
+ - 对象浏览
+
+
+
+- [**1323**Star][2d] [Go] [xiaoming2028/freenet](https://github.com/xiaoming2028/freenet) 科学上网/梯子/自由上网/翻墙 SS/SSR/V2Ray/Brook 搭建教程
+- [**1323**Star][2m] [jaredthecoder/awesome-vehicle-security](https://github.com/jaredthecoder/awesome-vehicle-security)
+- [**1322**Star][3d] [C] [oisf/suricata](https://github.com/OISF/suricata) a network IDS, IPS and NSM engine
+- [**1319**Star][2y] [Py] [worawit/ms17-010](https://github.com/worawit/ms17-010) MS17-010
+- [**1317**Star][1y] [mortenoir1/virtualbox_e1000_0day](https://github.com/mortenoir1/virtualbox_e1000_0day) VirtualBox E1000 Guest-to-Host Escape
+- [**1316**Star][3m] [PS] [peewpw/invoke-psimage](https://github.com/peewpw/invoke-psimage) Encodes a PowerShell script in the pixels of a PNG file and generates a oneliner to execute
+- [**1314**Star][10m] [C] [fancycode/memorymodule](https://github.com/fancycode/memorymodule) Library to load a DLL from memory.
+- [**1311**Star][1m] [C++] [shadowsocks/libqtshadowsocks](https://github.com/shadowsocks/libqtshadowsocks) A lightweight and ultra-fast shadowsocks library written in C++14 with Qt framework
+- [**1309**Star][12m] [Py] [xyntax/poc-t](https://github.com/xyntax/poc-t) remote vulnerability PoC/EXP framework
+- [**1309**Star][3m] [Lua] [scipag/vulscan](https://github.com/scipag/vulscan) Advanced vulnerability scanning with Nmap NSE
+- [**1307**Star][19d] [Py] [consensys/mythril](https://github.com/ConsenSys/mythril) Security analysis tool for EVM bytecode. Supports smart contracts built for Ethereum, Quorum, Vechain, Roostock, Tron and other EVM-compatible blockchains.
+- [**1307**Star][27d] [C] [boywhp/fcn](https://github.com/boywhp/fcn) free connect your private network from anywhere
+- [**1304**Star][17d] [nikitavoloboev/privacy-respecting](https://github.com/nikitavoloboev/privacy-respecting) Curated List of Privacy Respecting Services and Software
+- [**1304**Star][7d] [C] [cisco-talos/pyrebox](https://github.com/cisco-talos/pyrebox) Python scriptable Reverse Engineering Sandbox, a Virtual Machine instrumentation and inspection framework based on QEMU
+- [**1303**Star][4m] [C++] [klee/klee](https://github.com/klee/klee) KLEE Symbolic Execution Engine
+- [**1300**Star][1y] [Shell] [dana-at-cp/backdoor-apk](https://github.com/dana-at-cp/backdoor-apk) backdoor-apk is a shell script that simplifies the process of adding a backdoor to any Android APK file. Users of this shell script should have working knowledge of Linux, Bash, Metasploit, Apktool, the Android SDK, smali, etc. This shell script is provided as-is without warranty of any kind and is intended for educational purposes only.
+- [**1299**Star][6d] [Go] [hacklcx/hfish](https://github.com/hacklcx/hfish) Extend the enterprise security test open source honeypot system , Record hacker attacks. 扩展企业安全测试主动诱导型开源蜜罐框架系统,记录黑客攻击手段
+- [**1298**Star][1y] [Go] [evilsocket/xray](https://github.com/evilsocket/xray) XRay is a tool for recon, mapping and OSINT gathering from public networks.
+- [**1293**Star][4y] [C++] [microsoft/microsoft-pdb](https://github.com/microsoft/microsoft-pdb) Information from Microsoft about the PDB format. We'll try to keep this up to date. Just trying to help the CLANG/LLVM community get onto Windows.
+- [**1293**Star][5m] [JS] [feross/spoof](https://github.com/feross/spoof) Easily spoof your MAC address in macOS, Windows, & Linux!
+- [**1293**Star][29d] [Java] [android-hacker/exposed](https://github.com/android-hacker/exposed) A library to use Xposed without root or recovery(or modify system image etc..).
+- [**1291**Star][6d] [C] [traviscross/mtr](https://github.com/traviscross/mtr) Official repository for mtr, a network diagnostic tool
+- [**1291**Star][2y] [Go] [malfunkt/hyperfox](https://github.com/malfunkt/hyperfox) HTTP/HTTPs MITM proxy and traffic recorder with on-the-fly TLS cert generation.
\ No newline at end of file
diff --git a/history/sec_tools_all_20191212140607_full.md b/history/sec_tools_all_20191212140607_full.md
new file mode 100644
index 0000000..d00efb3
--- /dev/null
+++ b/history/sec_tools_all_20191212140607_full.md
@@ -0,0 +1,18042 @@
+# 说明
+- [英文版本](https://github.com/alphaSeclab/sec-tool-list/blob/master/Readme_en.md)
+- 因Github Readme显示行数有限, 当前页面显示的为不完整版, 只显示了星数最高的前1000个工具. [点击查看完整版](https://github.com/alphaSeclab/sec-tool-list/blob/master/Readme_full.md)
+- 我的其他Repo:
+ - [逆向资源](https://github.com/alphaSeclab/awesome-ida)
+ - [网络安全资源](https://github.com/alphaSeclab/awesome-cyber-security)
+ - [恶意代码分析报告](https://github.com/alphaSeclab/malware-analysis-reports)
+ - [漏洞分析文章](https://github.com/alphaSeclab/vul-analysis)
+
+# 工具列表
+- [**45523**星][11d] [C#] [shadowsocks/shadowsocks-windows](https://github.com/shadowsocks/shadowsocks-windows) If you want to keep a secret, you must also hide it from yourself.
+- [**34554**星][16d] [C++] [x64dbg/x64dbg](https://github.com/x64dbg/x64dbg) Windows平台x32/x64调试器
+- [**33926**星][10d] [Py] [minimaxir/big-list-of-naughty-strings](https://github.com/minimaxir/big-list-of-naughty-strings) “淘气”的字符串列表,当作为用户输入时很容易引发问题
+- [**32844**星][2m] [hack-with-github/awesome-hacking](https://github.com/hack-with-github/awesome-hacking) A collection of various awesome lists for hackers, pentesters and security researchers
+- [**32022**星][4y] [Py] [shadowsocks/shadowsocks](https://github.com/shadowsocks/shadowsocks)
+- [**30689**星][14d] [Go] [fatedier/frp](https://github.com/fatedier/frp) 快速的反向代理, 将NAT或防火墙之后的本地服务器暴露到公网
+- [**27836**星][2d] [Kotlin] [shadowsocks/shadowsocks-android](https://github.com/shadowsocks/shadowsocks-android) A shadowsocks client for Android
+- [**25977**星][2d] [Py] [certbot/certbot](https://github.com/certbot/certbot) Certbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any other CA that uses the ACME protocol.
+- [**25643**星][28d] [Swift] [shadowsocks/shadowsocksx-ng](https://github.com/shadowsocks/shadowsocksx-ng) Next Generation of ShadowsocksX
+- [**25330**星][3d] [Go] [v2ray/v2ray-core](https://github.com/v2ray/v2ray-core) A platform for building proxies to bypass network restrictions.
+- [**24826**星][2d] [xitu/gold-miner](https://github.com/xitu/gold-miner)
+- [**24727**星][5d] [trimstray/the-book-of-secret-knowledge](https://github.com/trimstray/the-book-of-secret-knowledge) A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.
+- [**22556**星][14d] [Shell] [mathiasbynens/dotfiles](https://github.com/mathiasbynens/dotfiles)
+- [**21874**星][9d] [PHP] [danielmiessler/seclists](https://github.com/danielmiessler/seclists) 多种类型资源收集:用户名、密码、URL、敏感数据类型、Fuzzing Payload、WebShell等
+- [**21778**星][12d] [Go] [filosottile/mkcert](https://github.com/filosottile/mkcert) A simple zero-config tool to make locally trusted development certificates with any names you'd like.
+- [**20680**星][5d] [Java] [skylot/jadx](https://github.com/skylot/jadx) dex 转 java 的反编译器
+- [**20159**星][5d] [Shell] [streisandeffect/streisand](https://github.com/StreisandEffect/streisand) Streisand sets up a new server running your choice of WireGuard, OpenConnect, OpenSSH, OpenVPN, Shadowsocks, sslh, Stunnel, or a Tor bridge. It also generates custom instructions for all of these services. At the end of the run you are given an HTML file with instructions that can be shared with friends, family members, and fellow activists.
+- [**19692**星][2m] [Jupyter Notebook] [camdavidsonpilon/probabilistic-programming-and-bayesian-methods-for-hackers](https://github.com/camdavidsonpilon/probabilistic-programming-and-bayesian-methods-for-hackers) aka "Bayesian Methods for Hackers": An introduction to Bayesian methods + probabilistic programming with a computation/understanding-first, mathematics-second point of view. All in pure Python ;)
+- [**19212**星][1y] [alvin9999/new-pac](https://github.com/alvin9999/new-pac) 科学/自由上网,免费ss/ssr/v2ray/goflyway账号,搭建教程
+- [**19076**星][2d] [Ruby] [rapid7/metasploit-framework](https://github.com/rapid7/metasploit-framework) Metasploit Framework
+- [**18676**星][3y] [fallibleinc/security-guide-for-developers](https://github.com/fallibleinc/security-guide-for-developers) Security Guide for Developers (实用性开发人员安全须知)
+- [**18476**星][2d] [Java] [nationalsecurityagency/ghidra](https://github.com/nationalsecurityagency/ghidra) 软件逆向框架
+- [**18390**星][3d] [Java] [alibaba/arthas](https://github.com/alibaba/arthas) Alibaba Java诊断利器Arthas
+- [**17641**星][4y] [Go] [inconshreveable/ngrok](https://github.com/inconshreveable/ngrok) 反向代理,在公网终端和本地服务之间创建安全的隧道
+- [**17069**星][6d] [Py] [mitmproxy/mitmproxy](https://github.com/mitmproxy/mitmproxy) An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
+- [**16769**星][2d] [C#] [powershell/powershell](https://github.com/powershell/powershell) PowerShell for every system!
+- [**15824**星][2d] [Py] [sqlmapproject/sqlmap](https://github.com/sqlmapproject/sqlmap) Automatic SQL injection and database takeover tool
+- [**15731**星][9m] [micropoor/micro8](https://github.com/micropoor/micro8) 从业10年渗透笔记
+- [**15718**星][3d] [C] [curl/curl](https://github.com/curl/curl) A command line tool and library for transferring data with URL syntax, supporting HTTP, HTTPS, FTP, FTPS, GOPHER, TFTP, SCP, SFTP, SMB, TELNET, DICT, LDAP, LDAPS, FILE, IMAP, SMTP, POP3, RTSP and RTMP. libcurl offers a myriad of powerful features
+- [**15363**星][21d] [Py] [drduh/macos-security-and-privacy-guide](https://github.com/drduh/macOS-Security-and-Privacy-Guide) Guide to securing and improving privacy on macOS
+- [**14744**星][1m] [gfwlist/gfwlist](https://github.com/gfwlist/gfwlist) gfwlist
+- [**14518**星][7d] [Java] [tencent/tinker](https://github.com/tencent/tinker) Tinker is a hot-fix solution library for Android, it supports dex, library and resources update without reinstall apk.
+- [**13736**星][9m] [JS] [bannedbook/fanqiang](https://github.com/bannedbook/fanqiang) 翻墙-科学上网
+- [**13548**星][28d] [Py] [corentinj/real-time-voice-cloning](https://github.com/corentinj/real-time-voice-cloning) Clone a voice in 5 seconds to generate arbitrary speech in real-time
+- [**13241**星][19d] [Go] [jesseduffield/lazydocker](https://github.com/jesseduffield/lazydocker) The lazier way to manage everything docker
+- [**12966**星][12d] [Py] [cool-rr/pysnooper](https://github.com/cool-rr/pysnooper) Never use print for debugging again
+- [**12742**星][3d] [Vue] [liyasthomas/postwoman](https://github.com/liyasthomas/postwoman)
+- [**12693**星][8d] [C] [shadowsocks/shadowsocks-libev](https://github.com/shadowsocks/shadowsocks-libev) libev port of shadowsocks
+- [**12544**星][9d] [C#] [0xd4d/dnspy](https://github.com/0xd4d/dnspy) .NET debugger and assembly editor
+- [**12325**星][2m] [Ruby] [diaspora/diaspora](https://github.com/diaspora/diaspora) A privacy-aware, distributed, open source social network.
+- [**12241**星][5d] [Java] [signalapp/signal-android](https://github.com/signalapp/Signal-Android) A private messenger for Android.
+- [**11977**星][1m] [Go] [buger/goreplay](https://github.com/buger/goreplay) 实时捕获HTTP流量并输入测试环境,以便持续使用真实数据测试你的系统
+- [**11890**星][6d] [C] [openssl/openssl](https://github.com/openssl/openssl) TLS/SSL and crypto library
+- [**11530**星][2d] [C] [radareorg/radare2](https://github.com/radareorg/radare2) unix-like reverse engineering framework and commandline tools
+- [**11418**星][3m] [C] [robertdavidgraham/masscan](https://github.com/robertdavidgraham/masscan) masscan:世界上最快的互联网端口扫描器,号称可6分钟内扫描整个互联网
+- [**11404**星][2d] [getlantern/download](https://github.com/getlantern/download) Lantern官方版本下载 蓝灯 翻墙 科学上网 外网 加速器 梯子 路由
+- [**11342**星][1m] [facert/awesome-spider](https://github.com/facert/awesome-spider) 爬虫集合
+- [**11278**星][2d] [Java] [oracle/graal](https://github.com/oracle/graal) Run Programs Faster Anywhere
+- [**11200**星][5d] [Py] [swisskyrepo/payloadsallthethings](https://github.com/swisskyrepo/payloadsallthethings) A list of useful payloads and bypass for Web Application Security and Pentest/CTF
+- [**11143**星][2m] [Jupyter Notebook] [selfteaching/the-craft-of-selfteaching](https://github.com/selfteaching/the-craft-of-selfteaching) One has no future if one couldn't teach themself.
+- [**11110**星][5d] [Py] [owasp/cheatsheetseries](https://github.com/owasp/cheatsheetseries) The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
+- [**11016**星][2y] [ObjC] [bang590/jspatch](https://github.com/bang590/jspatch) JSPatch bridge Objective-C and Javascript using the Objective-C runtime. You can call any Objective-C class and method in JavaScript by just including a small engine. JSPatch is generally used to hotfix iOS App.
+- [**10925**星][2d] [ObjC] [flipboard/flex](https://github.com/flipboard/flex) An in-app debugging and exploration tool for iOS
+- [**10907**星][2m] [CSS] [hacker0x01/hacker101](https://github.com/hacker0x01/hacker101) Hacker101
+- [**10830**星][15d] [enaqx/awesome-pentest](https://github.com/enaqx/awesome-pentest) 渗透测试资源/工具集
+- [**10780**星][2y] [CoffeeScript] [dropbox/zxcvbn](https://github.com/dropbox/zxcvbn) Low-Budget Password Strength Estimation
+- [**10757**星][19d] [Java] [konloch/bytecode-viewer](https://github.com/konloch/bytecode-viewer) A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)
+- [**10318**星][5d] [ruanyf/weekly](https://github.com/ruanyf/weekly) 科技爱好者周刊,每周五发布
+- [**10226**星][3d] [Go] [goharbor/harbor](https://github.com/goharbor/harbor) An open source trusted cloud native registry project that stores, signs, and scans content.
+- [**9830**星][8m] [imthenachoman/how-to-secure-a-linux-server](https://github.com/imthenachoman/how-to-secure-a-linux-server) An evolving how-to guide for securing a Linux server.
+- [**9613**星][4d] [Py] [sherlock-project/sherlock](https://github.com/sherlock-project/sherlock) Find Usernames Across Social Networks
+- [**9389**星][3d] [Go] [cnlh/nps](https://github.com/cnlh/nps) 一款轻量级、功能强大的内网穿透代理服务器。支持tcp、udp流量转发,支持内网http代理、内网socks5代理,同时支持snappy压缩、站点保护、加密传输、多路复用、header修改等。支持web图形化管理,集成多用户模式。
+- [**9358**星][6d] [Ruby] [postalhq/postal](https://github.com/postalhq/postal) 全功能邮件服务器
+- [**9266**星][3m] [JS] [localtunnel/localtunnel](https://github.com/localtunnel/localtunnel) expose yourself
+- [**9229**星][12d] [Java] [ibotpeaches/apktool](https://github.com/ibotpeaches/apktool) A tool for reverse engineering Android apk files
+- [**9185**星][2d] [C#] [icsharpcode/ilspy](https://github.com/icsharpcode/ilspy) .NET Decompiler
+- [**9148**星][29d] [JS] [valve/fingerprintjs2](https://github.com/valve/fingerprintjs2) Modern & flexible browser fingerprinting library
+- [**9069**星][11d] [PS] [lukesampson/scoop](https://github.com/lukesampson/scoop) A command-line installer for Windows.
+- [**9015**星][2m] [vitalysim/awesome-hacking-resources](https://github.com/vitalysim/awesome-hacking-resources) A collection of hacking / penetration testing resources to make you better!
+- [**8854**星][6m] [Go] [rkt/rkt](https://github.com/rkt/rkt) rkt is a pod-native container engine for Linux. It is composable, secure, and built on standards.
+- [**8739**星][17d] [C] [gentilkiwi/mimikatz](https://github.com/gentilkiwi/mimikatz) A little tool to play with Windows security
+- [**8646**星][28d] [Java] [android-hacker/virtualxposed](https://github.com/android-hacker/virtualxposed) A simple app to use Xposed without root, unlock the bootloader or modify system image, etc.
+- [**8525**星][1m] [microsoft/wsl](https://github.com/microsoft/WSL) Issues found on WSL
+- [**8443**星][7m] [Shell] [233boy/v2ray](https://github.com/233boy/v2ray) 最好用的 V2Ray 一键安装脚本 & 管理脚本
+- [**8424**星][2d] [Py] [wifiphisher/wifiphisher](https://github.com/wifiphisher/wifiphisher) 流氓AP框架, 用于RedTeam和Wi-Fi安全测试
+- [**8420**星][2y] [brannondorsey/wifi-cracking](https://github.com/brannondorsey/wifi-cracking) 破解WPA/WPA2 Wi-Fi 路由器
+- [**8044**星][9d] [trimstray/the-practical-linux-hardening-guide](https://github.com/trimstray/the-practical-linux-hardening-guide) This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).
+- [**8002**星][2m] [Py] [facebook/chisel](https://github.com/facebook/chisel) Chisel is a collection of LLDB commands to assist debugging iOS apps.
+- [**7986**星][1m] [Py] [mailpile/mailpile](https://github.com/mailpile/mailpile) A free & open modern, fast email client with user-friendly encryption and privacy features
+- [**7965**星][3y] [Go] [cyfdecyf/cow](https://github.com/cyfdecyf/cow) HTTP proxy written in Go. COW can automatically identify blocked sites and use parent proxies to access.
+- [**7945**星][4y] [ObjC] [shadowsocks/shadowsocks-ios](https://github.com/shadowsocks/shadowsocks-ios) Removed according to regulations.
+- [**7840**星][6d] [C++] [shiqiyu/libfacedetection](https://github.com/shiqiyu/libfacedetection) An open source library for face detection in images. The face detection speed can reach 1500FPS.
+- [**7731**星][3d] [JS] [gchq/cyberchef](https://github.com/gchq/cyberchef) The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis
+- [**7712**星][2d] [Go] [git-lfs/git-lfs](https://github.com/git-lfs/git-lfs) Git extension for versioning large files
+- [**7670**星][24d] [Java] [java-decompiler/jd-gui](https://github.com/java-decompiler/jd-gui) A standalone Java Decompiler GUI
+- [**7524**星][29d] [Py] [threat9/routersploit](https://github.com/threat9/routersploit) Exploitation Framework for Embedded Devices
+- [**7474**星][9d] [Go] [snail007/goproxy](https://github.com/snail007/goproxy) Proxy是高性能全功能的http代理、https代理、socks5代理、内网穿透、内网穿透p2p、内网穿透代理、内网穿透反向代理、内网穿透服务器、Websocket代理、TCP代理、UDP代理、DNS代理、DNS加密代理,代理API认证,全能跨平台代理服务器。
+- [**7412**星][1m] [C++] [shadowsocks/shadowsocks-qt5](https://github.com/shadowsocks/shadowsocks-qt5) A cross-platform shadowsocks GUI client
+- [**7397**星][1m] [Py] [s0md3v/xsstrike](https://github.com/s0md3v/XSStrike) Most advanced XSS scanner.
+- [**7246**星][19d] [Java] [lionsoul2014/ip2region](https://github.com/lionsoul2014/ip2region) Ip2region is a offline IP location library with accuracy rate of 99.9% and 0.0x millseconds searching performance. DB file is less then 5Mb with all ip address stored. binding for Java,PHP,C,Python,Nodejs,Golang,C#,lua. Binary,B-tree,Memory searching algorithm
+- [**7186**星][7m] [Shell] [teddysun/shadowsocks_install](https://github.com/teddysun/shadowsocks_install) Auto Install Shadowsocks Server for CentOS/Debian/Ubuntu
+- [**7017**星][16d] [Go] [future-architect/vuls](https://github.com/future-architect/vuls) 针对Linux/FreeBSD 编写的漏洞扫描器. Go 语言编写
+- [**6989**星][5d] [C] [hashcat/hashcat](https://github.com/hashcat/hashcat) 世界上最快最先进的密码恢复工具
+- [**6984**星][2d] [Go] [nats-io/nats-server](https://github.com/nats-io/nats-server) High-Performance server for NATS, the cloud native messaging system.
+- [**6984**星][2m] [JS] [cs01/gdbgui](https://github.com/cs01/gdbgui) Browser-based frontend to gdb (gnu debugger). Add breakpoints, view the stack, visualize data structures, and more in C, C++, Go, Rust, and Fortran. Run gdbgui from the terminal and a new tab will open in your browser.
+- [**6957**星][11d] [greatfire/wiki](https://github.com/greatfire/wiki) 自由浏览
+- [**6949**星][3m] [Java] [pxb1988/dex2jar](https://github.com/pxb1988/dex2jar) Tools to work with android .dex and java .class files
+- [**6869**星][2m] [Go] [sqshq/sampler](https://github.com/sqshq/sampler) A tool for shell commands execution, visualization and alerting. Configured with a simple YAML file.
+- [**6812**星][19d] [Shell] [awslabs/git-secrets](https://github.com/awslabs/git-secrets) Prevents you from committing secrets and credentials into git repositories
+- [**6732**星][9m] [Java] [amitshekhariitbhu/android-debug-database](https://github.com/amitshekhariitbhu/android-debug-database) A library for debugging android databases and shared preferences - Make Debugging Great Again
+- [**6683**星][3d] [Java] [zaproxy/zaproxy](https://github.com/zaproxy/zaproxy) 在开发和测试Web App时自动发现安全漏洞
+- [**6682**星][3y] [C++] [alibaba/andfix](https://github.com/alibaba/andfix) AndFix is a library that offer hot-fix for Android App.
+- [**6668**星][12d] [C++] [keepassxreboot/keepassxc](https://github.com/keepassxreboot/keepassxc) KeePassXC is a cross-platform community-driven port of the Windows application “Keepass Password Safe”.
+- [**6595**星][3d] [Py] [networkx/networkx](https://github.com/networkx/networkx) 用于创建、操纵和研究复杂网络的结构,Python包
+- [**6555**星][6m] [Go] [shadowsocks/shadowsocks-go](https://github.com/shadowsocks/shadowsocks-go) go port of shadowsocks (Deprecated)
+- [**6518**星][1m] [Py] [h2y/shadowrocket-adblock-rules](https://github.com/h2y/shadowrocket-adblock-rules) 提供多款 Shadowrocket 规则,带广告过滤功能。用于 iOS 未越狱设备选择性地自动翻墙。
+- [**6462**星][5d] [Shell] [cisofy/lynis](https://github.com/cisofy/lynis) Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
+- [**6451**星][17d] [Go] [bettercap/bettercap](https://github.com/bettercap/bettercap) 新版的bettercap, Go 编写. bettercap 是强大的、模块化、可移植且易于扩展的 MITM 框架, 旧版用 Ruby 编写
+- [**6448**星][9m] [HTML] [open-power-workgroup/hospital](https://github.com/open-power-workgroup/hospital) OpenPower工作组收集汇总的医院开放数据
+- [**6310**星][29d] [Py] [seatgeek/fuzzywuzzy](https://github.com/seatgeek/fuzzywuzzy) Fuzzy String Matching in Python
+- [**6197**星][2m] [ObjC] [johnno1962/injectionforxcode](https://github.com/johnno1962/injectionforxcode) Runtime Code Injection for Objective-C & Swift
+- [**6194**星][3y] [PS] [powershellmafia/powersploit](https://github.com/PowerShellMafia/PowerSploit) PowerSploit - A PowerShell Post-Exploitation Framework
+- [**6192**星][2m] [Py] [yandex/gixy](https://github.com/yandex/gixy) Nginx 配置静态分析工具,防止配置错误导致安全问题,自动化错误配置检测
+- [**6187**星][6m] [rmerl/asuswrt-merlin](https://github.com/rmerl/asuswrt-merlin) Enhanced version of Asus's router firmware (Asuswrt) (legacy code base)
+- [**6146**星][2d] [JS] [avwo/whistle](https://github.com/avwo/whistle) 基于Node实现的跨平台抓包调试代理工具(HTTP, HTTP2, HTTPS, Websocket)
+- [**6137**星][1y] [Hack] [facebook/fbctf](https://github.com/facebook/fbctf) Platform to host Capture the Flag competitions
+- [**6128**星][9m] [Py] [schollz/howmanypeoplearearound](https://github.com/schollz/howmanypeoplearearound) 检测 Wifi 信号统计你周围的人数
+- [**6092**星][15d] [Go] [usefathom/fathom](https://github.com/usefathom/fathom) Fathom Lite. Simple, privacy-focused website analytics. Built with Golang & Preact.
+- [**6074**星][16d] [Go] [quay/clair](https://github.com/quay/clair) Vulnerability Static Analysis for Containers
+- [**6074**星][16d] [Go] [quay/clair](https://github.com/quay/clair) clair:容器(appc、docker)漏洞静态分析工具。
+- [**6073**星][5m] [Java] [qihoo360/replugin](https://github.com/qihoo360/replugin) RePlugin - A flexible, stable, easy-to-use Android Plug-in Framework
+- [**6070**星][2y] [C] [jgamblin/mirai-source-code](https://github.com/jgamblin/mirai-source-code) Leaked Mirai Source Code for Research/IoC Development Purposes
+- [**6021**星][3d] [Py] [cyrus-and/gdb-dashboard](https://github.com/cyrus-and/gdb-dashboard) Modular visual interface for GDB in Python
+- [**6017**星][7d] [berzerk0/probable-wordlists](https://github.com/berzerk0/probable-wordlists) Version 2 is live! Wordlists sorted by probability originally created for password generation and testing - make sure your passwords aren't popular!
+- [**5972**星][2m] [Java] [google/android-classyshark](https://github.com/google/android-classyshark) 分析基于Android/Java的App或游戏
+- [**5968**星][2d] [Py] [gallopsled/pwntools](https://github.com/gallopsled/pwntools) CTF framework and exploit development library
+- [**5942**星][6m] [JS] [haotian-wang/google-access-helper](https://github.com/haotian-wang/google-access-helper) 谷歌访问助手破解版
+- [**5888**星][2d] [Py] [asciimoo/searx](https://github.com/asciimoo/searx) searx:网络元数据搜索引擎。汇总70 多个搜索引擎的搜素结果,避免用户被追踪或者被分析。可与 Tor 结合使用
+- [**5879**星][2d] [C++] [radareorg/cutter](https://github.com/radareorg/cutter) 逆向框架 radare2的Qt界面,iaito的升级版
+- [**5871**星][2m] [Gnuplot] [nasa-jpl/open-source-rover](https://github.com/nasa-jpl/open-source-rover) A build-it-yourself, 6-wheel rover based on the rovers on Mars!
+- [**5815**星][7m] [JS] [sindresorhus/fkill-cli](https://github.com/sindresorhus/fkill-cli) Fabulously kill processes. Cross-platform.
+- [**5773**星][1y] [qinyuhang/shadowsocksx-ng-r](https://github.com/qinyuhang/shadowsocksx-ng-r) Next Generation of ShadowsocksX
+- [**5766**星][3m] [ObjC] [square/ponydebugger](https://github.com/square/ponydebugger) Remote network and data debugging for your native iOS app using Chrome Developer Tools
+- [**5762**星][2m] [C] [spacehuhn/esp8266_deauther](https://github.com/spacehuhn/esp8266_deauther) 使用ESP8266 制作Wifi干扰器
+- [**5742**星][2y] [Py] [newsapps/beeswithmachineguns](https://github.com/newsapps/beeswithmachineguns) 创建多个micro EC2实例, 攻击指定Web App
+- [**5740**星][8m] [C] [xoreaxeaxeax/movfuscator](https://github.com/xoreaxeaxeax/movfuscator) C编译器,编译的二进制文件只有1个代码块。
+- [**5694**星][9d] [JS] [swagger-api/swagger-editor](https://github.com/swagger-api/swagger-editor) Swagger Editor
+- [**5693**星][2d] [Go] [casbin/casbin](https://github.com/casbin/casbin) An authorization library that supports access control models like ACL, RBAC, ABAC in Golang
+- [**5626**星][1m] [C] [rofl0r/proxychains-ng](https://github.com/rofl0r/proxychains-ng) proxychains ng (new generation) - a preloader which hooks calls to sockets in dynamically linked programs and redirects it through one or more socks/http proxies. continuation of the unmaintained proxychains project. the sf.net page is currently not updated, use releases from github release page instead.
+- [**5593**星][10d] [Ruby] [presidentbeef/brakeman](https://github.com/presidentbeef/brakeman) ROR程序的静态分析工具
+- [**5565**星][29d] [Roff] [max2max/freess](https://github.com/max2max/freess) 免费ss账号 免费shadowsocks账号 免费v2ray账号 (长期更新)
+- [**5540**星][20d] [rshipp/awesome-malware-analysis](https://github.com/rshipp/awesome-malware-analysis) A curated list of awesome malware analysis tools and resources.
+- [**5476**星][8m] [carpedm20/awesome-hacking](https://github.com/carpedm20/awesome-hacking) Hacking教程、工具和资源
+- [**5417**星][2m] [Py] [axi0mx/ipwndfu](https://github.com/axi0mx/ipwndfu) open-source jailbreaking tool for many iOS devices
+- [**5413**星][2y] [Rust] [autumnai/leaf](https://github.com/autumnai/leaf) Open Machine Intelligence Framework for Hackers. (GPU/CPU)
+- [**5371**星][5m] [C] [pwn20wndstuff/undecimus](https://github.com/pwn20wndstuff/undecimus) unc0ver jailbreak for iOS 11.0 - 12.4
+- [**5371**星][2d] [Py] [mlflow/mlflow](https://github.com/mlflow/mlflow) Open source platform for the machine learning lifecycle
+- [**5324**星][4d] [Go] [zricethezav/gitleaks](https://github.com/zricethezav/gitleaks) Audit git repos for secrets
+- [**5205**星][7m] [Py] [usarmyresearchlab/dshell](https://github.com/usarmyresearchlab/dshell) 网络审计分析
+- [**5196**星][3m] [Py] [ytisf/thezoo](https://github.com/ytisf/thezoo) A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.
+- [**5192**星][1m] [Py] [refirmlabs/binwalk](https://github.com/ReFirmLabs/binwalk) 固件分析工具(命令行+IDA插件)
+ - [IDA插件](https://github.com/ReFirmLabs/binwalk/tree/master/src/scripts)
+ - [binwalk](https://github.com/ReFirmLabs/binwalk/tree/master/src/binwalk)
+- [**5167**星][20d] [Shell] [vulhub/vulhub](https://github.com/vulhub/vulhub) Pre-Built Vulnerable Environments Based on Docker-Compose
+- [**5167**星][1y] [JS] [samyk/poisontap](https://github.com/samyk/poisontap) Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.
+- [**5148**星][6d] [PHP] [tennc/webshell](https://github.com/tennc/webshell) webshell收集
+- [**5123**星][21d] [C++] [avast/retdec](https://github.com/avast/retdec) 基于 LLVM 的可重定位机器码反编译器, 可检测壳、检测和重构C++类继承、重构函数/类型/结构体等、可反编译为 C 或 Python 2种高级语言格式
+- [**5118**星][15d] [ObjC] [macpass/macpass](https://github.com/MacPass/MacPass) A native OS X KeePass client
+- [**5118**星][4m] [Py] [n1nj4sec/pupy](https://github.com/n1nj4sec/pupy) Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) remote administration and post-exploitation tool mainly written in python
+- [**5089**星][2d] [Go] [dnscrypt/dnscrypt-proxy](https://github.com/DNSCrypt/dnscrypt-proxy) 灵活的DNS代理,支持现代的加密DNS协议,例如:DNS protocols such as DNSCrypt v2, DNS-over-HTTPS and Anonymized DNSCrypt.
+- [**5082**星][2m] [sbilly/awesome-security](https://github.com/sbilly/awesome-security) 与安全相关的软件、库、文档、书籍、资源和工具等收集
+- [**5065**星][2m] [Shell] [stackexchange/blackbox](https://github.com/stackexchange/blackbox) 文件使用PGP加密后隐藏在Git/Mercurial/Subversion
+- [**5059**星][1m] [Java] [meituan-dianping/walle](https://github.com/meituan-dianping/walle) Android Signature V2 Scheme签名下的新一代渠道包打包神器
+- [**5054**星][4y] [Py] [shadowsocksr-backup/shadowsocksr](https://github.com/shadowsocksr-backup/shadowsocksr) Python port of ShadowsocksR
+- [**5042**星][2d] [HTML] [owasp/owasp-mstg](https://github.com/owasp/owasp-mstg) 关于移动App安全开发、测试和逆向的相近手册
+- [**5037**星][4m] [PS] [empireproject/empire](https://github.com/EmpireProject/Empire) 后渗透框架. Windows客户端用PowerShell, Linux/OSX用Python. 之前PowerShell Empire和Python EmPyre的组合
+- [**5021**星][2d] [Py] [mobsf/mobile-security-framework-mobsf](https://github.com/MobSF/Mobile-Security-Framework-MobSF) Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
+- [**5005**星][2d] [C++] [coatisoftware/sourcetrail](https://github.com/coatisoftware/sourcetrail) Sourcetrail - free and open-source interactive source explorer
+- [**4996**星][2d] [ASP] [hq450/fancyss](https://github.com/hq450/fancyss) fancyss is a project providing tools to across the GFW on asuswrt/merlin based router.
+- [**4996**星][6d] [Go] [inlets/inlets](https://github.com/inlets/inlets) Expose your local endpoints to the Internet
+- [**4994**星][1m] [Py] [snare/voltron](https://github.com/snare/voltron) A hacky debugger UI for hackers
+- [**4953**星][22d] [Py] [trustedsec/social-engineer-toolkit](https://github.com/trustedsec/social-engineer-toolkit) The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.
+- [**4920**星][2d] [TS] [jigsaw-code/outline-client](https://github.com/jigsaw-code/outline-client) Outline clients, developed by Jigsaw. The Outline clients use the popular Shadowsocks protocol, and lean on the Cordova and Electron frameworks to support Windows, Android / ChromeOS, Linux, iOS and macOS.
+- [**4913**星][1y] [Go] [yinghuocho/firefly-proxy](https://github.com/yinghuocho/firefly-proxy) A proxy software to help circumventing the Great Firewall.
+- [**4909**星][2d] [Shell] [denisidoro/navi](https://github.com/denisidoro/navi) An interactive cheatsheet tool for the command-line
+- [**4897**星][11m] [Go] [bitly/oauth2_proxy](https://github.com/bitly/oauth2_proxy) 反向代理,静态文件服务器,提供Providers(Google/Github)认证
+- [**4883**星][2m] [Rust] [sharkdp/hexyl](https://github.com/sharkdp/hexyl) 命令行中查看hex
+- [**4881**星][5d] [Java] [guardianproject/haven](https://github.com/guardianproject/haven) 通过Android应用和设备上的传感器保护自己的个人空间和财产而又不损害
+- [**4869**星][2d] [Swift] [yanue/v2rayu](https://github.com/yanue/v2rayu) V2rayU,基于v2ray核心的mac版客户端,用于科学上网,使用swift编写,支持vmess,shadowsocks,socks5等服务协议,支持订阅, 支持二维码,剪贴板导入,手动配置,二维码分享等
+- [**4867**星][10d] [Py] [alessandroz/lazagne](https://github.com/alessandroz/lazagne) Credentials recovery project
+- [**4847**星][3d] [Go] [gcla/termshark](https://github.com/gcla/termshark) A terminal UI for tshark, inspired by Wireshark
+- [**4841**星][2d] [C] [offensive-security/exploitdb](https://github.com/offensive-security/exploitdb) The official Exploit Database repository
+- [**4803**星][8m] [Py] [10se1ucgo/disablewintracking](https://github.com/10se1ucgo/disablewintracking) Uses some known methods that attempt to minimize tracking in Windows 10
+- [**4782**星][2d] [C] [google/oss-fuzz](https://github.com/google/oss-fuzz) 开源软件fuzzing
+- [**4761**星][2d] [C++] [facebook/redex](https://github.com/facebook/redex) Android App字节码优化器
+- [**4724**星][2d] [C++] [paddlepaddle/paddle-lite](https://github.com/PaddlePaddle/Paddle-Lite) Multi-platform high performance deep learning inference engine (『飞桨』多平台高性能深度学习预测引擎)
+- [**4691**星][9d] [Py] [manisso/fsociety](https://github.com/manisso/fsociety) fsociety Hacking Tools Pack – A Penetration Testing Framework
+- [**4639**星][3d] [Py] [secdev/scapy](https://github.com/secdev/scapy) 交互式数据包操作, Python, 命令行+库
+- [**4638**星][18d] [C] [google/ios-webkit-debug-proxy](https://github.com/google/ios-webkit-debug-proxy) A DevTools proxy (Chrome Remote Debugging Protocol) for iOS devices (Safari Remote Web Inspector).
+- [**4637**星][6m] [powershell/win32-openssh](https://github.com/powershell/win32-openssh) Win32 port of OpenSSH
+- [**4633**星][2d] [JS] [beefproject/beef](https://github.com/beefproject/beef) The Browser Exploitation Framework Project
+- [**4615**星][12d] [Go] [ginuerzh/gost](https://github.com/ginuerzh/gost) GO语言实现的安全隧道
+- [**4589**星][11m] [Py] [ecthros/uncaptcha2](https://github.com/ecthros/uncaptcha2) defeating the latest version of ReCaptcha with 91% accuracy
+- [**4583**星][1y] [C] [upx/upx](https://github.com/upx/upx) UPX - the Ultimate Packer for eXecutables
+- [**4575**星][4d] [C++] [mozilla/rr](https://github.com/mozilla/rr) 记录与重放App的调试执行过程
+- [**4543**星][4d] [Ruby] [wpscanteam/wpscan](https://github.com/wpscanteam/wpscan) WPScan is a free, for non-commercial use, black box WordPress Vulnerability Scanner written for security professionals and blog maintainers to test the security of their WordPress websites.
+- [**4529**星][6d] [C] [jedisct1/dsvpn](https://github.com/jedisct1/dsvpn) A Dead Simple VPN.
+- [**4498**星][6d] [TS] [apis-guru/graphql-voyager](https://github.com/apis-guru/graphql-voyager)
+- [**4459**星][8d] [Py] [jopohl/urh](https://github.com/jopohl/urh) Universal Radio Hacker: investigate wireless protocols like a boss
+- [**4458**星][1y] [Go] [wallix/awless](https://github.com/wallix/awless) A Mighty CLI for AWS
+- [**4449**星][3d] [Go] [dragonflyoss/dragonfly](https://github.com/dragonflyoss/Dragonfly) Dragonfly is an intelligent P2P based image and file distribution system.
+- [**4446**星][2d] [Makefile] [frida/frida](https://github.com/frida/frida) Clone this repo to build Frida
+- [**4443**星][24d] [Py] [jofpin/trape](https://github.com/jofpin/trape) 学习在互联网上跟踪别人,获取其详细信息,并避免被别人跟踪
+- [**4411**星][2m] [Shell] [zardus/ctf-tools](https://github.com/zardus/ctf-tools) Some setup scripts for security research tools.
+- [**4359**星][6d] [Swift] [signalapp/signal-ios](https://github.com/signalapp/Signal-iOS) A private messenger for iOS.
+- [**4346**星][1m] [JS] [cure53/dompurify](https://github.com/cure53/dompurify) a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
+- [**4344**星][12m] [Py] [lennylxx/ipv6-hosts](https://github.com/lennylxx/ipv6-hosts) Fork of
+- [**4313**星][5m] [Py] [diafygi/acme-tiny](https://github.com/diafygi/acme-tiny) A tiny script to issue and renew TLS certs from Let's Encrypt
+- [**4283**星][7d] [Py] [tensorflow/cleverhans](https://github.com/tensorflow/cleverhans) Python库,基准测试(benchmark)机器学习系统的漏洞生成(to)对抗样本(adversarial examples)
+- [**4280**星][1m] [Shell] [ashishb/android-security-awesome](https://github.com/ashishb/android-security-awesome) A collection of android security related resources
+- [**4261**星][5d] [Rust] [timvisee/ffsend](https://github.com/timvisee/ffsend) Easily and securely share files from the command line
+- [**4258**星][11m] [JS] [butterproject/butter-desktop](https://github.com/butterproject/butter-desktop) All the free parts of Popcorn Time
+- [**4244**星][2y] [imeiji/shadowsocks_install](https://github.com/imeiji/shadowsocks_install) Auto install shadowsocks server,thanks 秋水逸冰
+- [**4241**星][4m] [Py] [dxa4481/trufflehog](https://github.com/dxa4481/trufflehog) Searches through git repositories for high entropy strings and secrets, digging deep into commit history
+- [**4215**星][7m] [ObjC] [alonemonkey/monkeydev](https://github.com/alonemonkey/monkeydev) CaptainHook Tweak、Logos Tweak and Command-line Tool、Patch iOS Apps, Without Jailbreak.
+- [**4211**星][9d] [Go] [gophish/gophish](https://github.com/gophish/gophish) 网络钓鱼工具包
+- [**4205**星][11d] [qazbnm456/awesome-web-security](https://github.com/qazbnm456/awesome-web-security) web 安全资源列表
+- [**4204**星][1y] [Go] [michenriksen/gitrob](https://github.com/michenriksen/gitrob) 查找push到公开的Github repo中的敏感信息
+- [**4202**星][2m] [Py] [evilsocket/opensnitch](https://github.com/evilsocket/opensnitch) opensnitch:Little Snitch 应用程序防火墙的 GNU/Linux 版本。(Little Snitch:Mac操作系统的应用程序防火墙,能防止应用程序在你不知道的情况下自动访问网络)
+- [**4198**星][2d] [Py] [openmined/pysyft](https://github.com/openmined/pysyft) A library for encrypted, privacy preserving machine learning
+- [**4190**星][13d] [we5ter/scanners-box](https://github.com/we5ter/scanners-box) 安全行业从业者自研开源扫描器合辑
+- [**4171**星][2y] [forter/security-101-for-saas-startups](https://github.com/forter/security-101-for-saas-startups) 初学者安全小窍门
+- [**4149**星][12m] [JS] [kdzwinel/betwixt](https://github.com/kdzwinel/betwixt) Betwixt will help you analyze web traffic outside the browser using familiar Chrome DevTools interface.
+- [**4131**星][5d] [Java] [spring-projects/spring-security](https://github.com/spring-projects/spring-security) Spring Security
+- [**4120**星][5m] [Py] [spiderclub/haipproxy](https://github.com/spiderclub/haipproxy)
+- [**4120**星][2m] [Py] [aboul3la/sublist3r](https://github.com/aboul3la/sublist3r) Fast subdomains enumeration tool for penetration testers
+- [**4096**星][2y] [Py] [xoreaxeaxeax/sandsifter](https://github.com/xoreaxeaxeax/sandsifter) sandsifter:x86 处理器 Fuzzer,查找 Intel 的隐藏指令和 CPU bug
+- [**4092**星][9m] [wtsxdev/reverse-engineering](https://github.com/wtsxdev/reverse-engineering) List of awesome reverse engineering resources
+- [**4046**星][1m] [JS] [sigalor/whatsapp-web-reveng](https://github.com/sigalor/whatsapp-web-reveng) WhatsApp Web API逆向与重新实现
+- [**4045**星][2m] [Java] [jesusfreke/smali](https://github.com/jesusfreke/smali) smali/baksmali
+- [**4044**星][2d] [Py] [google/clusterfuzz](https://github.com/google/clusterfuzz) Scalable fuzzing infrastructure.
+- [**4022**星][22d] [drduh/yubikey-guide](https://github.com/drduh/yubikey-guide) Guide to using YubiKey for GPG and SSH
+- [**4021**星][3m] [JS] [cuckoosandbox/cuckoo](https://github.com/cuckoosandbox/cuckoo) Cuckoo Sandbox is an automated dynamic malware analysis system
+- [**4000**星][1y] [JS] [travist/jsencrypt](https://github.com/travist/jsencrypt) A Javascript library to perform OpenSSL RSA Encryption, Decryption, and Key Generation.
+- [**3967**星][3m] [Py] [nullarray/autosploit](https://github.com/nullarray/autosploit) Automated Mass Exploiter
+- [**3961**星][5d] [Go] [dexidp/dex](https://github.com/dexidp/dex) OpenID Connect Identity (OIDC) and OAuth 2.0 Provider with Pluggable Connectors
+- [**3953**星][2m] [JS] [apsdehal/awesome-ctf](https://github.com/apsdehal/awesome-ctf) A curated list of CTF frameworks, libraries, resources and softwares
+- [**3953**星][2m] [JS] [apsdehal/awesome-ctf](https://github.com/apsdehal/awesome-ctf) A curated list of CTF frameworks, libraries, resources and softwares
+- [**3937**星][3d] [Py] [angr/angr](https://github.com/angr/angr) A powerful and user-friendly binary analysis platform!
+- [**3935**星][4m] [PHP] [paragonie/awesome-appsec](https://github.com/paragonie/awesome-appsec) A curated list of resources for learning about application security
+- [**3933**星][8m] [Go] [eranyanay/1m-go-websockets](https://github.com/eranyanay/1m-go-websockets) handling 1M websockets connections in Go
+- [**3923**星][1m] [C] [aquynh/capstone](https://github.com/aquynh/capstone) Capstone disassembly/disassembler framework: Core (Arm, Arm64, BPF, EVM, M68K, M680X, MOS65xx, Mips, PPC, RISCV, Sparc, SystemZ, TMS320C64x, Web Assembly, X86, X86_64, XCore) + bindings.
+- [**3920**星][2y] [C#] [shadowsocksr-backup/shadowsocksr-csharp](https://github.com/shadowsocksr-backup/shadowsocksr-csharp)
+- [**3915**星][16d] [Rust] [svenstaro/genact](https://github.com/svenstaro/genact) a nonsense activity generator
+- [**3893**星][2d] [C++] [baldurk/renderdoc](https://github.com/baldurk/renderdoc) RenderDoc is a stand-alone graphics debugging tool.
+- [**3878**星][2m] [PHP] [fuzzdb-project/fuzzdb](https://github.com/fuzzdb-project/fuzzdb) 通过动态App安全测试来查找App安全漏洞, 算是不带扫描器的漏洞扫描器
+- [**3869**星][2d] [Py] [secureauthcorp/impacket](https://github.com/SecureAuthCorp/impacket) Python类收集, 用于与网络协议交互
+- [**3848**星][7d] [JS] [shadowsocks/shadowsocks-manager](https://github.com/shadowsocks/shadowsocks-manager) A shadowsocks manager tool for multi user and traffic control.
+- [**3845**星][2d] [hq450/fancyss_history_package](https://github.com/hq450/fancyss_history_package) 科学上网插件的离线安装包储存在这里
+- [**3838**星][2m] [ObjC] [sveinbjornt/sloth](https://github.com/sveinbjornt/sloth) Mac app that shows all open files, directories and sockets in use by all running processes. Nice GUI for lsof.
+- [**3831**星][4y] [iosre/iosappreverseengineering](https://github.com/iosre/iosappreverseengineering) The world’s 1st book of very detailed iOS App reverse engineering skills :)
+- [**3813**星][1m] [jivoi/awesome-osint](https://github.com/jivoi/awesome-osint) OSINT资源收集
+- [**3799**星][5y] [shadowsocksr-backup/shadowsocks-rss](https://github.com/shadowsocksr-backup/shadowsocks-rss) ShadowsocksR update rss, SSR organization
+- [**3767**星][10m] [Py] [longld/peda](https://github.com/longld/peda) Python Exploit Development Assistance for GDB
+- [**3763**星][2m] [Py] [paralax/awesome-honeypots](https://github.com/paralax/awesome-honeypots) an awesome list of honeypot resources
+- [**3755**星][2m] [PHP] [ethicalhack3r/dvwa](https://github.com/ethicalhack3r/DVWA) Damn Vulnerable Web Application (DVWA)
+- [**3752**星][2m] [Go] [microsoft/ethr](https://github.com/microsoft/ethr) Ethr is a Network Performance Measurement Tool for TCP, UDP & HTTP.
+- [**3736**星][8d] [Go] [hashicorp/consul-template](https://github.com/hashicorp/consul-template) Template rendering, notifier, and supervisor for
+- [**3733**星][2m] [C] [iaik/meltdown](https://github.com/iaik/meltdown) This repository contains several applications, demonstrating the Meltdown bug.
+- [**3730**星][4m] [Py] [malwaredllc/byob](https://github.com/malwaredllc/byob) BYOB (Build Your Own Botnet)
+- [**3719**星][6d] [jjqqkk/chromium](https://github.com/jjqqkk/chromium) Chromium browser with SSL VPN. Use this browser to unblock websites.
+- [**3713**星][2d] [C] [atmosphere-nx/atmosphere](https://github.com/atmosphere-nx/atmosphere) Atmosphère is a work-in-progress customized firmware for the Nintendo Switch.
+- [**3684**星][2y] [JS] [samyk/evercookie](https://github.com/samyk/evercookie) JavaScript API,在浏览器中创建超级顽固的cookie,在标准Cookie、Flask Cookie等被清除之后依然能够识别客户端
+- [**3682**星][10d] [HTML] [hamukazu/lets-get-arrested](https://github.com/hamukazu/lets-get-arrested) This project is intended to protest against the police in Japan
+- [**3670**星][2d] [JS] [lesspass/lesspass](https://github.com/lesspass/lesspass)
+- [**3668**星][8d] [C#] [0xd4d/de4dot](https://github.com/0xd4d/de4dot) .NET deobfuscator and unpacker.
+- [**3667**星][1y] [Py] [misterch0c/shadowbroker](https://github.com/misterch0c/shadowbroker) 方程式最新泄露
+- [**3666**星][5m] [C] [secwiki/windows-kernel-exploits](https://github.com/secwiki/windows-kernel-exploits) windows-kernel-exploits Windows平台提权漏洞集合
+- [**3663**星][4m] [C] [facebook/fishhook](https://github.com/facebook/fishhook) A library that enables dynamically rebinding symbols in Mach-O binaries running on iOS.
+- [**3652**星][4d] [acl4ssr/acl4ssr](https://github.com/acl4ssr/acl4ssr) SSR 去广告ACL规则/SS完整GFWList规则,Telegram频道订阅地址
+- [**3647**星][2y] [Py] [qiyeboy/ipproxypool](https://github.com/qiyeboy/ipproxypool) IPProxyPool代理池项目,提供代理ip
+- [**3622**星][6d] [TS] [javascript-obfuscator/javascript-obfuscator](https://github.com/javascript-obfuscator/javascript-obfuscator) A powerful obfuscator for JavaScript and Node.js
+- [**3621**星][7d] [HTML] [consensys/smart-contract-best-practices](https://github.com/consensys/smart-contract-best-practices) A guide to smart contract security best practices
+- [**3619**星][5y] [C#] [brandonlw/psychson](https://github.com/brandonlw/Psychson) Phison 2251-03 (2303) Custom Firmware & Existing Firmware Patches (BadUSB)
+- [**3611**星][2m] [Java] [ffay/lanproxy](https://github.com/ffay/lanproxy) lanproxy是一个将局域网个人电脑、服务器代理到公网的内网穿透工具,支持tcp流量转发,可支持任何tcp上层协议(访问内网网站、本地支付接口调试、ssh访问、远程桌面...)。目前市面上提供类似服务的有花生壳、TeamView、GoToMyCloud等等,但要使用第三方的公网服务器就必须为第三方付费,并且这些服务都有各种各样的限制,此外,由于数据包会流经第三方,因此对数据安全也是一大隐患。技术交流QQ群 946273429
+- [**3604**星][8d] [PS] [bloodhoundad/bloodhound](https://github.com/BloodHoundAD/BloodHound) a single page Javascript web application, uses graph theory to reveal the hidden and often unintended relationships within an Active Directory environment.
+- [**3598**星][26d] [C++] [anbox/anbox](https://github.com/anbox/anbox) 在常规GNU / Linux系统上引导完整的Android系统,基于容器
+- [**3597**星][1y] [C#] [nummer/destroy-windows-10-spying](https://github.com/nummer/destroy-windows-10-spying) Destroy Windows Spying tool
+- [**3595**星][3y] [Perl] [x0rz/eqgrp](https://github.com/x0rz/eqgrp) Decrypted content of eqgrp-auction-file.tar.xz
+- [**3583**星][3d] [Shell] [drwetter/testssl.sh](https://github.com/drwetter/testssl.sh) 检查服务器任意端口对 TLS/SSL 的支持、协议以及一些加密缺陷,命令行工具
+- [**3580**星][5d] [C] [nmap/nmap](https://github.com/nmap/nmap) Nmap
+- [**3562**星][5d] [Pascal] [cheat-engine/cheat-engine](https://github.com/cheat-engine/cheat-engine) Cheat Engine. A development environment focused on modding
+- [**3542**星][6y] [R] [johnmyleswhite/ml_for_hackers](https://github.com/johnmyleswhite/ml_for_hackers) 《Machine Learning for Hackers》随书代码
+- [**3540**星][6d] [blacckhathaceekr/pentesting-bible](https://github.com/blacckhathaceekr/pentesting-bible) links reaches 10000 links & 10000 pdf files .Learn Ethical Hacking and penetration testing .hundreds of ethical hacking & penetration testing & red team & cyber security & computer science resources.
+- [**3538**星][4m] [Shell] [chengr28/revokechinacerts](https://github.com/chengr28/revokechinacerts) Revoke Chinese certificates.
+- [**3533**星][14d] [C] [tencent/tencentos-tiny](https://github.com/tencent/tencentos-tiny) 腾讯物联网终端操作系统
+- [**3514**星][3y] [C] [hak5darren/usb-rubber-ducky](https://github.com/hak5darren/usb-rubber-ducky)
+- [**3510**星][2d] [JS] [aol/moloch](https://github.com/aol/moloch) 数据包捕获、索引工具,支持数据库
+- [**3501**星][8m] [Go] [fanpei91/torsniff](https://github.com/fanpei91/torsniff) torsniff - a sniffer that sniffs torrents from BitTorrent network
+- [**3501**星][8m] [Go] [fanpei91/torsniff](https://github.com/fanpei91/torsniff) 从BitTorrent网络嗅探种子
+- [**3493**星][9m] [C] [rpisec/mbe](https://github.com/rpisec/mbe) Course materials for Modern Binary Exploitation by RPISEC
+- [**3485**星][5m] [PHP] [hanc00l/wooyun_public](https://github.com/hanc00l/wooyun_public) This repo is archived. Thanks for wooyun! 乌云公开漏洞、知识库爬虫和搜索 crawl and search for wooyun.org public bug(vulnerability) and drops
+- [**3481**星][8d] [C] [cyan4973/xxhash](https://github.com/cyan4973/xxhash) Extremely fast non-cryptographic hash algorithm
+- [**3471**星][2m] [C++] [trojan-gfw/trojan](https://github.com/trojan-gfw/trojan) An unidentifiable mechanism that helps you bypass GFW.
+- [**3442**星][9d] [C] [shellphish/how2heap](https://github.com/shellphish/how2heap) 学习各种堆利用技巧的repo
+- [**3442**星][8d] [Java] [meituan-dianping/robust](https://github.com/meituan-dianping/robust) Robust is an Android HotFix solution with high compatibility and high stability. Robust can fix bugs immediately without a reboot.
+- [**3441**星][15d] [Perl] [sullo/nikto](https://github.com/sullo/nikto) Nikto web server scanner
+- [**3419**星][9d] [C] [mikebrady/shairport-sync](https://github.com/mikebrady/shairport-sync) AirPlay audio player. Shairport Sync adds multi-room capability with Audio Synchronisation
+- [**3412**星][27d] [icodesign/potatso](https://github.com/icodesign/Potatso) Potatso is an iOS client that implements different proxies with the leverage of NetworkExtension framework in iOS 10+.
+- [**3410**星][5m] [Go] [jpillora/chisel](https://github.com/jpillora/chisel) 基于HTTP的快速 TCP 隧道
+- [**3408**星][24d] [PS] [samratashok/nishang](https://github.com/samratashok/nishang) 渗透框架,脚本和Payload收集,主要是PowerShell,涵盖渗透的各个阶段
+- [**3397**星][2y] [shadowsocksrr/shadowsocks-rss](https://github.com/shadowsocksrr/shadowsocks-rss) ShadowsocksR update rss, SSR organization
+- [**3344**星][2d] [jivoi/awesome-ml-for-cybersecurity](https://github.com/jivoi/awesome-ml-for-cybersecurity) 针对网络安全的机器学习资源列表
+- [**3343**星][6d] [C] [screetsec/thefatrat](https://github.com/screetsec/thefatrat) Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV softw…
+- [**3340**星][5m] [C++] [wangyu-/udp2raw-tunnel](https://github.com/wangyu-/udp2raw-tunnel) udp 打洞。通过raw socket给UDP包加上TCP或ICMP header,进而绕过UDP屏蔽或QoS,或在UDP不稳定的环境下提升稳定性
+- [**3334**星][10d] [Smarty] [anankke/sspanel-uim](https://github.com/anankke/sspanel-uim) 专为 Shadowsocks / ShadowsocksR / V2Ray 设计的多用户管理面板
+- [**3331**星][15d] [Py] [google/grr](https://github.com/google/grr) remote live forensics for incident response
+- [**3330**星][2d] [Py] [stamparm/maltrail](https://github.com/stamparm/maltrail) 恶意网络流量检测系统
+- [**3319**星][2y] [scanate/ethlist](https://github.com/scanate/ethlist) The Comprehensive Ethereum Reading List
+- [**3303**星][22d] [C] [vanhauser-thc/thc-hydra](https://github.com/vanhauser-thc/thc-hydra) 网络登录破解,支持多种服务
+- [**3301**星][2m] [Swift] [yagiz/bagel](https://github.com/yagiz/bagel) a little native network debugging tool for iOS
+- [**3298**星][9d] [C++] [fireice-uk/xmr-stak](https://github.com/fireice-uk/xmr-stak) Free Monero RandomX Miner and unified CryptoNight miner
+- [**3285**星][7d] [C] [microsoft/windows-driver-samples](https://github.com/microsoft/windows-driver-samples) This repo contains driver samples prepared for use with Microsoft Visual Studio and the Windows Driver Kit (WDK). It contains both Universal Windows Driver and desktop-only driver samples.
+- [**3278**星][6d] [C] [virustotal/yara](https://github.com/virustotal/yara) The pattern matching swiss knife
+- [**3276**星][3m] [C] [nbs-system/naxsi](https://github.com/nbs-system/naxsi) NAXSI is an open-source, high performance, low rules maintenance WAF for NGINX
+- [**3263**星][10d] [Java] [oldmanpushcart/greys-anatomy](https://github.com/oldmanpushcart/greys-anatomy) Java诊断工具
+- [**3262**星][2m] [Py] [volatilityfoundation/volatility](https://github.com/volatilityfoundation/volatility) An advanced memory forensics framework
+- [**3260**星][8d] [Shell] [toniblyx/my-arsenal-of-aws-security-tools](https://github.com/toniblyx/my-arsenal-of-aws-security-tools) List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.
+- [**3260**星][5y] [C++] [google/lmctfy](https://github.com/google/lmctfy) lmctfy is the open source version of Google’s container stack, which provides Linux application containers.
+- [**3259**星][7m] [JS] [sindresorhus/speed-test](https://github.com/sindresorhus/speed-test) Test your internet connection speed and ping using speedtest.net from the CLI
+- [**3255**星][4d] [ObjC] [objective-see/lulu](https://github.com/objective-see/lulu) LuLu is the free macOS firewall
+- [**3247**星][29d] [JS] [koenkk/zigbee2mqtt](https://github.com/koenkk/zigbee2mqtt) Zigbee
+- [**3242**星][16d] [Py] [laramies/theharvester](https://github.com/laramies/theharvester) E-mails, subdomains and names Harvester - OSINT
+- [**3238**星][2d] [TS] [jigsaw-code/outline-server](https://github.com/jigsaw-code/outline-server) Outline Manager, developed by Jigsaw. The Outline Manager application creates and manages Outline servers, powered by Shadowsocks. It uses the Electron framework to offer support for Windows, macOS and Linux.
+- [**3236**星][5m] [Go] [meshbird/meshbird](https://github.com/meshbird/meshbird) cloud-native multi-region multi-cloud decentralized private networking
+- [**3234**星][2y] [CSS] [jbtronics/crookedstylesheets](https://github.com/jbtronics/crookedstylesheets) 使用纯CSS收集网页/用户信息
+- [**3233**星][9d] [Go] [mozilla/sops](https://github.com/mozilla/sops) Simple and flexible tool for managing secrets
+- [**3228**星][2d] [C] [betaflight/betaflight](https://github.com/betaflight/betaflight) Open Source Flight Controller Firmware
+- [**3223**星][2m] [Shell] [gfw-breaker/ssr-accounts](https://github.com/gfw-breaker/ssr-accounts) 一键部署Shadowsocks服务;免费Shadowsocks账号分享;免费SS账号分享; 翻墙;无界,自由门,SquirrelVPN
+- [**3222**星][6d] [C] [tmate-io/tmate](https://github.com/tmate-io/tmate) Instant Terminal Sharing
+- [**3222**星][6d] [Go] [dvyukov/go-fuzz](https://github.com/dvyukov/go-fuzz) Randomized testing for Go
+- [**3221**星][4y] [C] [shadowsocks/chinadns](https://github.com/shadowsocks/chinadns) Protect yourself against DNS poisoning in China.
+- [**3213**星][1m] [TS] [google/incremental-dom](https://github.com/google/incremental-dom) An in-place DOM diffing library
+- [**3210**星][7m] [HTML] [leizongmin/js-xss](https://github.com/leizongmin/js-xss) Sanitize untrusted HTML (to prevent XSS) with a configuration specified by a Whitelist
+- [**3209**星][5m] [ObjC] [naituw/ipapatch](https://github.com/naituw/ipapatch) Patch iOS Apps, The Easy Way, Without Jailbreak.
+- [**3208**星][4m] [C] [yarrick/iodine](https://github.com/yarrick/iodine) 通过DNS服务器传输(tunnel)IPV4数据
+- [**3205**星][15d] [Py] [maurosoria/dirsearch](https://github.com/maurosoria/dirsearch) Web path scanner
+- [**3202**星][10d] [Rich Text Format] [the-art-of-hacking/h4cker](https://github.com/The-Art-of-Hacking/h4cker) 资源收集:hacking、渗透、数字取证、事件响应、漏洞研究、漏洞开发、逆向
+- [**3187**星][1y] [Py] [kootenpv/whereami](https://github.com/kootenpv/whereami) 使用Wifi信号和机器学习预测你的位置,精确度2-10米
+- [**3187**星][6m] [hslatman/awesome-threat-intelligence](https://github.com/hslatman/awesome-threat-intelligence) A curated list of Awesome Threat Intelligence resources
+- [**3186**星][1m] [C++] [spiderlabs/modsecurity](https://github.com/spiderlabs/modsecurity) ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analys…
+- [**3180**星][27d] [C] [magnumripper/johntheripper](https://github.com/magnumripper/johntheripper) This is the official repo for John the Ripper, "Jumbo" version. The "bleeding-jumbo" branch is based on 1.9.0-Jumbo-1 which was released on May 14, 2019. An import of the "core" version of john this jumbo was based on (or newer) is found in the "master" branch (CVS:
+- [**3169**星][1m] [C] [valdikss/goodbyedpi](https://github.com/valdikss/goodbyedpi) GoodbyeDPI—Passive Deep Packet Inspection blocker and Active DPI circumvention utility (for Windows)
+- [**3162**星][1y] [Shell] [toyodadoubi/doubi](https://github.com/toyodadoubi/doubi) 一个逗比写的各种逗比脚本~
+- [**3159**星][3d] [JS] [minbrowser/min](https://github.com/minbrowser/min) A fast, minimal browser that protects your privacy
+- [**3140**星][6d] [C] [meetecho/janus-gateway](https://github.com/meetecho/janus-gateway) Janus WebRTC Server
+- [**3137**星][2y] [shadowsocksr-backup/shadowsocksr-android](https://github.com/shadowsocksr-backup/shadowsocksr-android) A ShadowsocksR client for Android
+- [**3134**星][2d] [C++] [px4/firmware](https://github.com/px4/firmware) PX4 Autopilot Software
+- [**3125**星][3d] [Shell] [1n3/sn1per](https://github.com/1n3/sn1per) 自动化渗透测试框架
+- [**3123**星][30d] [meirwah/awesome-incident-response](https://github.com/meirwah/awesome-incident-response) A curated list of tools for incident response
+- [**3123**星][2m] [PS] [fireeye/commando-vm](https://github.com/fireeye/commando-vm) Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@fireeye.com
+- [**3122**星][5d] [Go] [uber/kraken](https://github.com/uber/kraken) P2P Docker registry capable of distributing TBs of data in seconds
+- [**3121**星][30d] [CSS] [readthedocs/sphinx_rtd_theme](https://github.com/readthedocs/sphinx_rtd_theme) Sphinx theme for readthedocs.org
+- [**3121**星][8d] [JS] [duo-labs/cloudmapper](https://github.com/duo-labs/cloudmapper) 生成AWS环境的网络拓扑图
+- [**3118**星][3d] [Shell] [speed47/spectre-meltdown-checker](https://github.com/speed47/spectre-meltdown-checker) 检查 Linux 主机是否受处理器漏洞Spectre & Meltdown 的影响
+- [**3113**星][2d] [C] [qemu/qemu](https://github.com/qemu/qemu) Official QEMU mirror. Please see
+- [**3107**星][2m] [Py] [byt3bl33d3r/crackmapexec](https://github.com/byt3bl33d3r/crackmapexec) 后渗透工具,自动化评估大型Active Directory网络的安全性
+- [**3106**星][7d] [Java] [deathmarine/luyten](https://github.com/deathmarine/luyten) An Open Source Java Decompiler Gui for Procyon
+- [**3105**星][10d] [Shell] [softwaredownload/openwrt-fanqiang](https://github.com/softwaredownload/openwrt-fanqiang) 最好的路由器翻墙、科学上网教程—OpenWrt—shadowsocks
+- [**3088**星][9d] [Shell] [trimstray/htrace.sh](https://github.com/trimstray/htrace.sh) My simple Swiss Army knife for http/https troubleshooting and profiling.
+- [**3087**星][3d] [Py] [tribler/tribler](https://github.com/tribler/tribler) Privacy enhanced BitTorrent client with P2P content discovery
+- [**3085**星][11d] [Go] [tencent/bk-cmdb](https://github.com/tencent/bk-cmdb) 蓝鲸智云配置平台(BlueKing CMDB)
+- [**3084**星][22d] [C] [unicorn-engine/unicorn](https://github.com/unicorn-engine/unicorn) Unicorn CPU emulator framework (ARM, AArch64, M68K, Mips, Sparc, X86)
+- [**3080**星][3m] [C] [zmap/zmap](https://github.com/zmap/zmap) ZMap is a fast single packet network scanner designed for Internet-wide network surveys.
+- [**3076**星][7m] [Go] [michenriksen/aquatone](https://github.com/michenriksen/aquatone) 子域名枚举工具。除了经典的爆破枚举之外,还利用多种开源工具和在线服务大幅度增加发现子域名的数量。
+- [**3071**星][9m] [JS] [jipegit/osxauditor](https://github.com/jipegit/osxauditor) OS X Auditor is a free Mac OS X computer forensics tool
+- [**3065**星][1m] [Java] [calebfenton/simplify](https://github.com/calebfenton/simplify) Generic Android Deobfuscator
+- [**3063**星][1y] [Swift] [zhuhaow/spechtlite](https://github.com/zhuhaow/spechtlite) A rule-based proxy for macOS
+- [**3052**星][2m] [JS] [valve/fingerprintjs](https://github.com/valve/fingerprintjs) Anonymous browser fingerprint
+- [**3049**星][4m] [C++] [google/robotstxt](https://github.com/google/robotstxt) The repository contains Google's robots.txt parser and matcher as a C++ library (compliant to C++11).
+- [**3043**星][3m] [Py] [spiderlabs/responder](https://github.com/spiderlabs/responder) LLMNR/NBT-NS/MDNS投毒,内置HTTP/SMB/MSSQL/FTP/LDAP认证服务器, 支持NTLMv1/NTLMv2/LMv2
+- [**3029**星][2m] [Go] [gwuhaolin/lightsocks](https://github.com/gwuhaolin/lightsocks) 轻量级网络混淆代理,基于 SOCKS5 协议,可用来代替 Shadowsocks
+- [**3027**星][9m] [C] [secwiki/linux-kernel-exploits](https://github.com/secwiki/linux-kernel-exploits) linux-kernel-exploits Linux平台提权漏洞集合
+- [**3001**星][1y] [PHP] [owner888/phpspider](https://github.com/owner888/phpspider) 《我用爬虫一天时间“偷了”知乎一百万用户,只为证明PHP是世界上最好的语言 》所使用的程序
+- [**2991**星][2d] [JS] [ntop/ntopng](https://github.com/ntop/ntopng) 基于Web的流量监控工具
+- [**2986**星][7d] [Py] [guardicore/monkey](https://github.com/guardicore/monkey) 自动化渗透测试工具, 测试数据中心的弹性, 以防范周边(perimeter)泄漏和内部服务器感染
+- [**2969**星][29d] [Go] [cookiey/yearning](https://github.com/cookiey/yearning) A most popular sql audit platform for mysql
+- [**2968**星][2d] [ObjC] [google/santa](https://github.com/google/santa) 用于Mac系统的二进制文件白名单/黑名单系统
+- [**2955**星][4d] [Py] [twintproject/twint](https://github.com/twintproject/twint) An advanced Twitter scraping & OSINT tool written in Python that doesn't use Twitter's API, allowing you to scrape a user's followers, following, Tweets and more while evading most API limitations.
+- [**2955**星][11d] [Go] [dominikh/go-tools](https://github.com/dominikh/go-tools) Staticcheck – a collection of static analysis tools for working with Go code
+- [**2949**星][8d] [JS] [webgoat/webgoat](https://github.com/webgoat/webgoat) 带漏洞WebApp
+- [**2948**星][2m] [Dockerfile] [thinkdevelop/free-ss-ssr](https://github.com/thinkdevelop/free-ss-ssr) SS账号、SSR账号、V2Ray账号
+- [**2947**星][1m] [Py] [andresriancho/w3af](https://github.com/andresriancho/w3af) Web App安全扫描器, 辅助开发者和渗透测试人员识别和利用Web App中的漏洞
+- [**2945**星][2y] [phith0n/mind-map](https://github.com/phith0n/mind-map) 各种安全相关思维导图整理收集
+- [**2942**星][21d] [Py] [cowrie/cowrie](https://github.com/cowrie/cowrie) 中型/交互型 SSH/Telnet 蜜罐,
+- [**2936**星][1y] [Py] [danmcinerney/wifijammer](https://github.com/danmcinerney/wifijammer) 持续劫持范围内的Wifi客户端和AP
+- [**2933**星][2d] [Zeek] [zeek/zeek](https://github.com/zeek/zeek) Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.
+- [**2932**星][11m] [Shell] [91yun/serverspeeder](https://github.com/91yun/serverspeeder) 锐速破解版
+- [**2920**星][23d] [Go] [securego/gosec](https://github.com/securego/gosec) Golang security checker
+- [**2916**星][2d] [JS] [evilsocket/pwnagotchi](https://github.com/evilsocket/pwnagotchi) 深度学习+Bettercap,基于A2C,从周围的WiFi环境中学习,以最大程度地利用捕获的WPA关键信息
+- [**2915**星][12d] [C] [libfuse/sshfs](https://github.com/libfuse/sshfs) A network filesystem client to connect to SSH servers
+- [**2909**星][2d] [Py] [trustedsec/ptf](https://github.com/trustedsec/ptf) 创建基于Debian/Ubuntu/ArchLinux的渗透测试环境
+- [**2901**星][1y] [Py] [byt3bl33d3r/mitmf](https://github.com/byt3bl33d3r/mitmf) Framework for Man-In-The-Middle attacks
+- [**2897**星][3d] [secfigo/awesome-fuzzing](https://github.com/secfigo/awesome-fuzzing) A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Development like root cause analysis.
+- [**2883**星][7m] [C] [p-h-c/phc-winner-argon2](https://github.com/p-h-c/phc-winner-argon2) The password hash Argon2, winner of PHC
+- [**2877**星][4y] [ObjC] [maciekish/iresign](https://github.com/maciekish/iresign) iReSign allows iDevice app bundles (.ipa) files to be signed or resigned with a digital certificate from Apple for distribution. This tool is aimed at enterprises users, for enterprise deployment, when the person signing the app is different than the person(s) developing it.
+- [**2858**星][2d] [C] [lxc/lxc](https://github.com/lxc/lxc) LXC - Linux Containers
+- [**2850**星][2d] [HTML] [ctf-wiki/ctf-wiki](https://github.com/ctf-wiki/ctf-wiki) CTF Wiki Online. Come and join us, we need you!
+- [**2850**星][4d] [Go] [99designs/aws-vault](https://github.com/99designs/aws-vault) A vault for securely storing and accessing AWS credentials in development environments
+- [**2845**星][2d] [ObjC] [facebook/idb](https://github.com/facebook/idb) idb is a flexible command line interface for automating iOS simulators and devices
+- [**2842**星][5m] [Py] [instantbox/instantbox](https://github.com/instantbox/instantbox) Get a clean, ready-to-go Linux box in seconds.
+- [**2840**星][23d] [C] [ossec/ossec-hids](https://github.com/ossec/ossec-hids) 入侵检测系统
+- [**2840**星][2m] [infosecn1nja/red-teaming-toolkit](https://github.com/infosecn1nja/red-teaming-toolkit) A collection of open source and commercial tools that aid in red team operations.
+- [**2839**星][8m] [C++] [wangyu-/udpspeeder](https://github.com/wangyu-/udpspeeder) A Tunnel which Improves your Network Quality on a High-latency Lossy Link by using Forward Error Correction,for All Traffics(TCP/UDP/ICMP)
+- [**2837**星][17d] [Py] [espressif/esptool](https://github.com/espressif/esptool) ESP8266 and ESP32 serial bootloader utility
+- [**2834**星][8m] [Shell] [goreliu/wsl-terminal](https://github.com/goreliu/wsl-terminal) Terminal emulator for Windows Subsystem for Linux (WSL)
+- [**2829**星][4m] [C] [juliocesarfort/public-pentesting-reports](https://github.com/juliocesarfort/public-pentesting-reports) Curated list of public penetration test reports released by several consulting firms and academic security groups
+- [**2829**星][1m] [Assembly] [cirosantilli/x86-bare-metal-examples](https://github.com/cirosantilli/x86-bare-metal-examples) 几十个用于学习 x86 系统编程的小型操作系统
+- [**2823**星][2y] [CSS] [maxchehab/css-keylogging](https://github.com/maxchehab/css-keylogging) Chrome extension and Express server that exploits keylogging abilities of CSS.
+- [**2820**星][7d] [C] [tmk/tmk_keyboard](https://github.com/tmk/tmk_keyboard) Atmel AVR 和 Cortex-M键盘固件收集
+- [**2814**星][8m] [C#] [quasar/quasarrat](https://github.com/quasar/quasarrat) Remote Administration Tool for Windows
+- [**2814**星][5d] [Py] [jrohy/multi-v2ray](https://github.com/jrohy/multi-v2ray) v2ray easy delpoy & manage tool, support multiple user & protocol manage
+- [**2808**星][2m] [paulsec/awesome-sec-talks](https://github.com/paulsec/awesome-sec-talks) A collected list of awesome security talks
+- [**2803**星][9m] [Py] [plasma-disassembler/plasma](https://github.com/plasma-disassembler/plasma) Plasma is an interactive disassembler for x86/ARM/MIPS. It can generates indented pseudo-code with colored syntax.
+- [**2798**星][19d] [Py] [androguard/androguard](https://github.com/androguard/androguard) Reverse engineering, Malware and goodware analysis of Android applications ... and more (ninja !)
+- [**2793**星][6d] [C] [klange/toaruos](https://github.com/klange/toaruos) A completely-from-scratch hobby operating system: bootloader, kernel, drivers, C library, and userspace including a composited graphical UI, dynamic linker, syntax-highlighting text editor, network stack, etc.
+- [**2793**星][2m] [Go] [kgretzky/evilginx2](https://github.com/kgretzky/evilginx2) 独立的MITM攻击工具,用于登录凭证钓鱼,可绕过双因素认证
+- [**2791**星][7d] [C++] [xmrig/xmrig](https://github.com/xmrig/xmrig) xmrig: 门罗币挖矿代码 CPU 版
+- [**2789**星][4y] [Lua] [loveshell/ngx_lua_waf](https://github.com/loveshell/ngx_lua_waf) ngx_lua_waf是一个基于lua-nginx-module(openresty)的web应用防火墙
+- [**2783**星][30d] [Makefile] [shadowsocks/openwrt-shadowsocks](https://github.com/shadowsocks/openwrt-shadowsocks) Shadowsocks-libev for OpenWrt/LEDE
+- [**2782**星][2y] [C] [seclab-ucr/intang](https://github.com/seclab-ucr/intang) research project for circumventing the "TCP reset attack" from the Great Firewall of China (GFW) by disrupting/desynchronizing the TCP Control Block (TCB) on the censorship devices.
+- [**2777**星][9d] [C++] [qtox/qtox](https://github.com/qtox/qtox) qTox is a chat, voice, video, and file transfer IM client using the encrypted peer-to-peer Tox protocol.
+- [**2769**星][4d] [C] [processhacker/processhacker](https://github.com/processhacker/processhacker) A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware.
+- [**2766**星][1m] [JS] [trufflesuite/ganache-cli](https://github.com/trufflesuite/ganache-cli) Fast Ethereum RPC client for testing and development
+- [**2756**星][2m] [secwiki/sec-chart](https://github.com/secwiki/sec-chart) 安全思维导图集合
+- [**2742**星][5d] [TS] [webhintio/hint](https://github.com/webhintio/hint)
+- [**2742**星][24d] [Makefile] [theos/theos](https://github.com/theos/theos) A cross-platform suite of tools for building and deploying software for iOS and other platforms.
+- [**2741**星][8m] [Py] [p0cl4bs/wifi-pumpkin](https://github.com/P0cL4bs/WiFi-Pumpkin) AP攻击框架, 创建虚假网络, 取消验证攻击、请求和凭证监控、透明代理、Windows更新攻击、钓鱼管理、ARP投毒、DNS嗅探、Pumpkin代理、动态图片捕获等
+- [**2739**星][23d] [JS] [s0md3v/awesomexss](https://github.com/s0md3v/AwesomeXSS) Awesome XSS stuff
+- [**2737**星][1y] [C] [vanhoefm/krackattacks-scripts](https://github.com/vanhoefm/krackattacks-scripts) 检测客户端和AP是否受KRACK漏洞影响
+- [**2735**星][18d] [JS] [cyu/rack-cors](https://github.com/cyu/rack-cors) Rack Middleware for handling Cross-Origin Resource Sharing (CORS), which makes cross-origin AJAX possible.
+- [**2730**星][3y] [Py] [hephaest0s/usbkill](https://github.com/hephaest0s/usbkill) 反取证开关. 监控USB端口变化, 有变化时立即关闭计算机
+- [**2717**星][2d] [PS] [redcanaryco/atomic-red-team](https://github.com/redcanaryco/atomic-red-team) Small and highly portable detection tests based on MITRE's ATT&CK.
+- [**2713**星][1m] [C] [taviso/loadlibrary](https://github.com/taviso/loadlibrary) 使 Linux系统加载并调用 Windows DLL
+- [**2703**星][3y] [Eagle] [samyk/magspoof](https://github.com/samyk/magspoof) 信用卡/磁条欺骗
+- [**2701**星][3d] [Go] [aquasecurity/trivy](https://github.com/aquasecurity/trivy) A Simple and Comprehensive Vulnerability Scanner for Containers, Suitable for CI
+- [**2698**星][7d] [ObjC] [dantheman827/ios-app-signer](https://github.com/dantheman827/ios-app-signer) This is an app for OS X that can (re)sign apps and bundle them into ipa files that are ready to be installed on an iOS device.
+- [**2690**星][1m] [ObjC] [kjcracks/clutch](https://github.com/kjcracks/clutch) Fast iOS executable dumper
+- [**2682**星][22d] [Go] [google/syzkaller](https://github.com/google/syzkaller) 一个unsupervised、以 coverage 为导向的Linux 系统调用fuzzer
+- [**2681**星][1y] [Py] [mame82/p4wnp1](https://github.com/mame82/p4wnp1) 基于Raspberry Pi Zero 或 Raspberry Pi Zero W 的USB攻击平台, 高度的可定制性
+- [**2674**星][3m] [Py] [drivendata/cookiecutter-data-science](https://github.com/drivendata/cookiecutter-data-science) A logical, reasonably standardized, but flexible project structure for doing and sharing data science work.
+- [**2662**星][2m] [rmusser01/infosec_reference](https://github.com/rmusser01/infosec_reference) An Information Security Reference That Doesn't Suck
+- [**2654**星][17d] [JS] [bkimminich/juice-shop](https://github.com/bkimminich/juice-shop) OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
+- [**2652**星][3m] [Java] [frohoff/ysoserial](https://github.com/frohoff/ysoserial) 生成会利用不安全的Java对象反序列化的Payload
+- [**2645**星][2m] [xairy/linux-kernel-exploitation](https://github.com/xairy/linux-kernel-exploitation) Linux 内核 Fuzz 和漏洞利用的资源收集
+- [**2645**星][1y] [HTML] [chybeta/web-security-learning](https://github.com/chybeta/web-security-learning) Web-Security-Learning
+- [**2641**星][1y] [C] [ckolivas/cgminer](https://github.com/ckolivas/cgminer) ASIC and FPGA miner in c for bitcoin
+- [**2640**星][2d] [Go] [slackhq/nebula](https://github.com/slackhq/nebula) A scalable overlay networking tool with a focus on performance, simplicity and security
+- [**2637**星][4m] [Java] [teevity/ice](https://github.com/teevity/ice) AWS Usage Tool
+- [**2625**星][8m] [leandromoreira/linux-network-performance-parameters](https://github.com/leandromoreira/linux-network-performance-parameters) Learn where some of the network sysctl variables fit into the Linux/Kernel network flow
+- [**2615**星][2m] [Swift] [zhuhaow/nekit](https://github.com/zhuhaow/nekit) A toolkit for Network Extension Framework
+- [**2612**星][4d] [JS] [popcorn-official/popcorn-desktop](https://github.com/popcorn-official/popcorn-desktop) Popcorn Time is a multi-platform, free software BitTorrent client that includes an integrated media player. Desktop ( Windows / Mac / Linux ) a Butter-Project Fork
+- [**2607**星][3y] [Ruby] [arachni/arachni](https://github.com/arachni/arachni) Web Application Security Scanner Framework
+- [**2603**星][23d] [JS] [knownsec/kcon](https://github.com/knownsec/kcon) KCon is a famous Hacker Con powered by Knownsec Team.
+- [**2601**星][1m] [pditommaso/awesome-pipeline](https://github.com/pditommaso/awesome-pipeline) A curated list of awesome pipeline toolkits inspired by Awesome Sysadmin
+- [**2596**星][21d] [C++] [fanout/pushpin](https://github.com/fanout/pushpin) Reverse proxy for realtime web services
+- [**2581**星][3d] [Go] [adguardteam/adguardhome](https://github.com/adguardteam/adguardhome) Network-wide ads & trackers blocking DNS server
+- [**2581**星][1m] [Shell] [medicean/vulapps](https://github.com/medicean/vulapps) 快速搭建各种漏洞环境(Various vulnerability environment)
+- [**2575**星][2m] [C] [huntergregal/mimipenguin](https://github.com/huntergregal/mimipenguin) dump 当前Linux用户的登录密码
+- [**2574**星][8y] [C] [id-software/quake](https://github.com/id-software/quake) Quake GPL Source Release
+- [**2568**星][1m] [C] [esnet/iperf](https://github.com/esnet/iperf) A TCP, UDP, and SCTP network bandwidth measurement tool
+- [**2566**星][2d] [C++] [danmar/cppcheck](https://github.com/danmar/cppcheck) static analysis of C/C++ code
+- [**2565**星][5m] [Java] [google/binnavi](https://github.com/google/binnavi) 二进制分析IDE, 对反汇编代码的控制流程图和调用图进行探查/导航/编辑/注释.(IDA插件的作用是导出反汇编)
+- [**2562**星][3m] [Py] [greenwolf/social_mapper](https://github.com/Greenwolf/social_mapper) 对多个社交网站的用户Profile图片进行大规模的人脸识别
+- [**2553**星][2y] [evilsocket/bettercap](https://github.com/evilsocket/bettercap) 中间人攻击框架,功能完整,模块化设计,轻便且易于扩展。
+- [**2551**星][9d] [Py] [cloudflare/flan](https://github.com/cloudflare/flan) A pretty sweet vulnerability scanner
+- [**2549**星][6m] [C] [geohot/qira](https://github.com/geohot/qira) QEMU Interactive Runtime Analyser
+- [**2543**星][19d] [Py] [hugsy/gef](https://github.com/hugsy/gef) gdb增强工具,使用Python API,用于漏洞开发和逆向分析。
+- [**2542**星][23d] [Go] [drk1wi/modlishka](https://github.com/drk1wi/modlishka) Modlishka. Reverse Proxy.
+- [**2533**星][8m] [offensive-security/kali-nethunter](https://github.com/offensive-security/kali-nethunter) The Kali NetHunter Project
+- [**2533**星][2y] [Py] [google/nogotofail](https://github.com/google/nogotofail) 网络安全测试, 辅助定位和修复弱TLS/SSL连接和敏感明文流量
+- [**2526**星][2d] [Shell] [teddysun/across](https://github.com/teddysun/across) This is a shell script for configure and start WireGuard VPN server
+- [**2525**星][3y] [HTML] [dirtycow/dirtycow.github.io](https://github.com/dirtycow/dirtycow.github.io) Dirty COW
+- [**2522**星][26d] [C] [yrutschle/sslh](https://github.com/yrutschle/sslh) Applicative Protocol Multiplexer (e.g. share SSH and HTTPS on the same port)
+- [**2516**星][3m] [kbandla/aptnotes](https://github.com/kbandla/aptnotes) Various public documents, whitepapers and articles about APT campaigns
+- [**2508**星][5m] [Go] [oj/gobuster](https://github.com/oj/gobuster) Directory/File, DNS and VHost busting tool written in Go
+- [**2507**星][2m] [Java] [jboss-javassist/javassist](https://github.com/jboss-javassist/javassist) Java bytecode engineering toolkit
+- [**2507**星][3y] [C] [dhavalkapil/icmptunnel](https://github.com/dhavalkapil/icmptunnel) Transparently tunnel your IP traffic through ICMP echo and reply packets.
+- [**2503**星][7m] [C++] [chengr28/pcap_dnsproxy](https://github.com/chengr28/pcap_dnsproxy) Pcap_DNSProxy, a local DNS server based on packet capturing
+- [**2501**星][28d] [Py] [ysrc/xunfeng](https://github.com/ysrc/xunfeng) 巡风是一款适用于企业内网的漏洞快速应急,巡航扫描系统。
+- [**2498**星][6m] [taichi-framework/taichi](https://github.com/taichi-framework/taichi) A framework to use Xposed module with or without Root/Unlock bootloader, supportting Android 5.0 ~ 10.0
+- [**2497**星][6d] [onlurking/awesome-infosec](https://github.com/onlurking/awesome-infosec) A curated list of awesome infosec courses and training resources.
+- [**2488**星][5y] [PHP] [audi-1/sqli-labs](https://github.com/audi-1/sqli-labs) SQLI labs to test error based, Blind boolean based, Time based.
+- [**2480**星][2y] [Py] [feross/spoofmac](https://github.com/feross/spoofmac) 伪造MAC地址(OS X, Windows, Linux)
+- [**2476**星][11m] [JS] [weixin/miaow](https://github.com/weixin/Miaow) A set of plugins for Sketch include drawing links & marks, UI Kit & Color sync, font & text replacing.
+- [**2476**星][4m] [Go] [ne0nd0g/merlin](https://github.com/ne0nd0g/merlin) Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.
+- [**2469**星][6d] [JS] [vitaly-t/pg-promise](https://github.com/vitaly-t/pg-promise) PostgreSQL interface for Node.js
+- [**2466**星][30d] [Py] [smicallef/spiderfoot](https://github.com/smicallef/spiderfoot) 自动收集指定目标的信息:IP、域名、主机名、网络子网、ASN、邮件地址、用户名
+- [**2464**星][3m] [C] [martin-ger/esp_wifi_repeater](https://github.com/martin-ger/esp_wifi_repeater) A full functional WiFi Repeater (correctly: a WiFi NAT Router)
+- [**2461**星][11m] [C#] [yck1509/confuserex](https://github.com/yck1509/confuserex) An open-source, free protector for .NET applications
+- [**2461**星][26d] [C++] [pavel-odintsov/fastnetmon](https://github.com/pavel-odintsov/fastnetmon) 快速 DDoS 检测/分析工具,支持 sflow/netflow/mirror
+- [**2454**星][21d] [Shell] [rebootuser/linenum](https://github.com/rebootuser/linenum) Scripted Local Linux Enumeration & Privilege Escalation Checks
+- [**2451**星][3y] [Py] [google/enjarify](https://github.com/google/enjarify) 将Dalvik字节码转换为对应的Java字节码
+- [**2444**星][2d] [PHP] [misp/misp](https://github.com/misp/misp) MISP (core software) - Open Source Threat Intelligence and Sharing Platform (formely known as Malware Information Sharing Platform)
+- [**2429**星][1m] [Py] [0xinfection/awesome-waf](https://github.com/0xinfection/awesome-waf)
+- [**2423**星][2d] [Py] [pwndbg/pwndbg](https://github.com/pwndbg/pwndbg) GDB插件,辅助漏洞开发和逆向
+- [**2420**星][1m] [TSQL] [rapid7/metasploitable3](https://github.com/rapid7/metasploitable3) Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities.
+- [**2417**星][26d] [Py] [infobyte/faraday](https://github.com/infobyte/faraday) 渗透测试和漏洞管理平台
+- [**2416**星][3y] [Py] [arthepsy/ssh-audit](https://github.com/arthepsy/ssh-audit) SSH server auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)
+- [**2411**星][26d] [Py] [xmendez/wfuzz](https://github.com/xmendez/wfuzz) Web application fuzzer
+- [**2410**星][8m] [Py] [lionsec/katoolin](https://github.com/lionsec/katoolin) Automatically install all Kali linux tools
+- [**2407**星][3y] [rpisec/malware](https://github.com/rpisec/malware) Course materials for Malware Analysis by RPISEC
+- [**2404**星][20d] [Java] [m66b/netguard](https://github.com/m66b/netguard) A simple way to block access to the internet per app
+- [**2395**星][3y] [OCaml] [facebookarchive/pfff](https://github.com/facebookarchive/pfff) 一堆工具的集合,用于执行静态分析、代码可视化、代码导航、保持格式的源码转换(例如:源码重构)。完美支持C、Java、JS、PHP,后续将支持其他一大堆语言。
+- [**2392**星][1m] [Go] [xtaci/kcp-go](https://github.com/xtaci/kcp-go) provide a smooth, resilient, ordered, error-checked and anonymous delivery of streams over UDP packets,
+- [**2389**星][8d] [C] [wireshark/wireshark](https://github.com/wireshark/wireshark) Read-only mirror of Wireshark's Git repository. GitHub won't let us disable pull requests. ☞ THEY WILL BE IGNORED HERE ☜ Please upload them at
+- [**2386**星][2y] [Py] [secretsquirrel/the-backdoor-factory](https://github.com/secretsquirrel/the-backdoor-factory) 为PE, ELF, Mach-O二进制文件添加Shellcode后门
+- [**2384**星][2d] [Go] [owasp/amass](https://github.com/owasp/amass) In-depth Attack Surface Mapping and Asset Discovery
+- [**2381**星][11m] [C] [haad/proxychains](https://github.com/haad/proxychains) a tool that forces any TCP connection made by any given application to follow through proxy like TOR or any other SOCKS4, SOCKS5 or HTTP(S) proxy. Supported auth-types: "user/pass" for SOCKS4/5, "basic" for HTTP.
+- [**2376**星][2d] [Java] [mock-server/mockserver](https://github.com/mock-server/mockserver) MockServer enables easy mocking of any system you integrate with via HTTP or HTTPS with clients written in Java, JavaScript and Ruby. MockServer also includes a proxy that introspects all proxied traffic including encrypted SSL traffic and supports Port Forwarding, Web Proxying (i.e. HTTP proxy), HTTPS Tunneling Proxying (using HTTP CONNECT) and…
+- [**2376**星][1y] [Py] [danmcinerney/lans.py](https://github.com/danmcinerney/lans.py) Inject code and spy on wifi users
+- [**2369**星][7d] [security-onion-solutions/security-onion](https://github.com/security-onion-solutions/security-onion) Linux distro for intrusion detection, enterprise security monitoring, and log management
+- [**2369**星][2m] [TeX] [crypto101/book](https://github.com/crypto101/book) Crypto 101, the introductory book on cryptography.
+- [**2366**星][4m] [Go] [mlabouardy/komiser](https://github.com/mlabouardy/komiser)
+- [**2364**星][2m] [Py] [ab77/netflix-proxy](https://github.com/ab77/netflix-proxy) Smart DNS proxy to watch Netflix
+- [**2362**星][1m] [Lua] [snabbco/snabb](https://github.com/snabbco/snabb) Simple and fast packet networking
+- [**2357**星][2d] [C] [domoticz/domoticz](https://github.com/domoticz/domoticz) monitor and configure various devices like: Lights, Switches, various sensors/meters like Temperature, Rain, Wind, UV, Electra, Gas, Water and much more
+- [**2352**星][1m] [Py] [ctfd/ctfd](https://github.com/CTFd/CTFd) CTFs as you need them
+- [**2349**星][11m] [hack-with-github/free-security-ebooks](https://github.com/hack-with-github/free-security-ebooks) Free Security and Hacking eBooks
+- [**2342**星][3m] [Go] [vuvuzela/vuvuzela](https://github.com/vuvuzela/vuvuzela) Private messaging system that hides metadata
+- [**2340**星][6y] [C] [stefanesser/dumpdecrypted](https://github.com/stefanesser/dumpdecrypted) Dumps decrypted mach-o files from encrypted iPhone applications from memory to disk. This tool is necessary for security researchers to be able to look under the hood of encryption.
+- [**2340**星][1m] [C] [hfiref0x/uacme](https://github.com/hfiref0x/uacme) Defeating Windows User Account Control
+- [**2337**星][1m] [JS] [pa11y/pa11y](https://github.com/pa11y/pa11y) Pa11y is your automated accessibility testing pal
+- [**2335**星][3d] [C] [tsl0922/ttyd](https://github.com/tsl0922/ttyd) Share your terminal over the web
+- [**2323**星][3d] [C#] [netchx/netch](https://github.com/netchx/netch) Game accelerator. Support Socks5, Shadowsocks, ShadowsocksR, V2Ray protocol. UDP NAT FullCone
+- [**2321**星][11m] [yeyintminthuhtut/awesome-red-teaming](https://github.com/yeyintminthuhtut/awesome-red-teaming) List of Awesome Red Teaming Resources
+- [**2318**星][5y] [C] [abrasive/shairport](https://github.com/abrasive/shairport) Airtunes emulator! Shairport is no longer maintained.
+- [**2304**星][1y] [Java] [csploit/android](https://github.com/csploit/android) cSploit - The most complete and advanced IT security professional toolkit on Android.
+- [**2301**星][15d] [HTML] [tikam02/devops-guide](https://github.com/tikam02/devops-guide) DevOps Guide from basic to advanced with Interview Questions and Notes
+- [**2295**星][3y] [Py] [lmacken/pyrasite](https://github.com/lmacken/pyrasite) 向运行中的 Python进程注入代码
+- [**2287**星][2y] [Py] [rootphantomer/blasting_dictionary](https://github.com/rootphantomer/blasting_dictionary) 爆破字典
+- [**2284**星][1m] [C] [moby/hyperkit](https://github.com/moby/hyperkit) A toolkit for embedding hypervisor capabilities in your application
+- [**2283**星][5m] [Py] [guohongze/adminset](https://github.com/guohongze/adminset) 自动化运维平台:CMDB、CD、DevOps、资产管理、任务编排、持续交付、系统监控、运维管理、配置管理
+- [**2282**星][3y] [Py] [therook/subbrute](https://github.com/therook/subbrute) A DNS meta-query spider that enumerates DNS records, and subdomains.
+- [**2281**星][3m] [JS] [retirejs/retire.js](https://github.com/retirejs/retire.js) scanner detecting the use of JavaScript libraries with known vulnerabilities
+- [**2276**星][24d] [JS] [talkingdata/inmap](https://github.com/talkingdata/inmap) 大数据地理可视化
+- [**2274**星][1m] [Shell] [v1s1t0r1sh3r3/airgeddon](https://github.com/v1s1t0r1sh3r3/airgeddon) This is a multi-use bash script for Linux systems to audit wireless networks.
+- [**2270**星][1m] [C] [aurorawright/luma3ds](https://github.com/aurorawright/luma3ds) Noob-proof (N)3DS "Custom Firmware"
+- [**2255**星][3m] [Py] [novnc/websockify](https://github.com/novnc/websockify) Websockify is a WebSocket to TCP proxy/bridge. This allows a browser to connect to any application/server/service. Implementations in Python, C, Node.js and Ruby.
+- [**2252**星][18d] [dumb-password-rules/dumb-password-rules](https://github.com/dumb-password-rules/dumb-password-rules) Shaming sites with dumb password rules.
+- [**2252**星][1m] [Shell] [eliaskotlyar/xiaomi-dafang-hacks](https://github.com/eliaskotlyar/xiaomi-dafang-hacks)
+- [**2248**星][12d] [PS] [k8gege/k8tools](https://github.com/k8gege/k8tools) K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)
+- [**2245**星][2y] [Go] [mehrdadrad/mylg](https://github.com/mehrdadrad/mylg) 网络诊断工具
+- [**2226**星][5y] [Go] [filosottile/heartbleed](https://github.com/filosottile/heartbleed) A checker (site and tool) for CVE-2014-0160
+- [**2217**星][1y] [JS] [cure53/h5sc](https://github.com/cure53/h5sc) HTML5 Security Cheatsheet - A collection of HTML5 related XSS attack vectors
+- [**2215**星][6y] [C++] [codebutler/firesheep](https://github.com/codebutler/firesheep) 演示HTTP会话劫持攻击的Firefox扩展
+- [**2213**星][2d] [Go] [aquasecurity/kube-bench](https://github.com/aquasecurity/kube-bench) Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark
+- [**2211**星][1m] [C] [texane/stlink](https://github.com/texane/stlink) stm32 discovery line linux programmer
+- [**2211**星][6d] [Go] [google/mtail](https://github.com/google/mtail) extract whitebox monitoring data from application logs for collection in a timeseries database
+- [**2209**星][22d] [Rust] [cloudflare/boringtun](https://github.com/cloudflare/boringtun) an implementation of the WireGuard® protocol designed for portability and speed.
+- [**2192**星][23d] [C++] [google/bloaty](https://github.com/google/bloaty) Bloaty McBloatface: a size profiler for binaries
+- [**2189**星][1m] [sobolevn/awesome-cryptography](https://github.com/sobolevn/awesome-cryptography) A curated list of cryptography resources and links.
+- [**2187**星][7d] [getlantern/lantern-binaries](https://github.com/getlantern/lantern-binaries) Lantern installers binary downloads.
+- [**2186**星][1y] [Py] [datasploit/datasploit](https://github.com/DataSploit/datasploit) 对指定目标执行多种侦查技术:企业、人、电话号码、比特币地址等
+- [**2184**星][3y] [enddo/awesome-windows-exploitation](https://github.com/enddo/awesome-windows-exploitation) A curated list of awesome Windows Exploitation resources, and shiny things. Inspired by awesom
+- [**2183**星][2d] [C] [armmbed/mbedtls](https://github.com/armmbed/mbedtls) An open source, portable, easy to use, readable and flexible SSL library
+- [**2179**星][1m] [JS] [secgroundzero/warberry](https://github.com/secgroundzero/warberry) WarBerryPi - Tactical Exploitation
+- [**2173**星][1y] [JS] [iam4x/pokemongo-webspoof](https://github.com/iam4x/pokemongo-webspoof)
+- [**2163**星][2m] [Go] [mmatczuk/go-http-tunnel](https://github.com/mmatczuk/go-http-tunnel) Fast and secure tunnels over HTTP/2
+- [**2162**星][1y] [C++] [maestron/botnets](https://github.com/maestron/botnets) This is a collection of #botnet source codes, unorganized. For EDUCATIONAL PURPOSES ONLY
+- [**2159**星][1m] [Py] [commixproject/commix](https://github.com/commixproject/commix) Automated All-in-One OS command injection and exploitation tool.
+- [**2158**星][9m] [exakat/php-static-analysis-tools](https://github.com/exakat/php-static-analysis-tools) A reviewed list of useful PHP static analysis tools
+- [**2158**星][1m] [C] [conorpp/u2f-zero](https://github.com/conorpp/u2f-zero) U2F USB token optimized for physical security, affordability, and style
+- [**2158**星][2m] [PHP] [antonioribeiro/tracker](https://github.com/antonioribeiro/tracker) Tracker gathers a lot of information from your requests to identify and store
+- [**2153**星][6y] [Ruby] [plamoni/siriproxy](https://github.com/plamoni/siriproxy) A (tampering) proxy server for Apple's Siri
+- [**2149**星][8d] [Java] [google/wycheproof](https://github.com/google/wycheproof) Project Wycheproof tests crypto libraries against known attacks.
+- [**2138**星][2m] [Py] [trustedsec/unicorn](https://github.com/trustedsec/unicorn) 通过PowerShell降级攻击, 直接将Shellcode注入到内存
+- [**2132**星][1m] [Py] [jonathansalwan/ropgadget](https://github.com/jonathansalwan/ropgadget) This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC and MIPS architectures.
+- [**2127**星][18d] [Assembly] [pret/pokered](https://github.com/pret/pokered) disassembly of Pokémon Red/Blue
+- [**2122**星][2y] [Py] [rub-nds/pret](https://github.com/rub-nds/pret) Printer Exploitation Toolkit - The tool that made dumpster diving obsolete.
+- [**2118**星][4d] [goq/telegram-list](https://github.com/goq/telegram-list) List of telegram groups, channels & bots // Список интересных групп, каналов и ботов телеграма // Список чатов для программистов
+- [**2117**星][1m] [Py] [elceef/dnstwist](https://github.com/elceef/dnstwist) 域名置换引擎,用于检测打字错误,网络钓鱼和企业间谍活动
+- [**2116**星][7m] [Py] [calebmadrigal/trackerjacker](https://github.com/calebmadrigal/trackerjacker) 映射你没连接到的Wifi网络, 类似于NMap, 另外可以追踪设备
+- [**2115**星][2d] [Py] [fortynorthsecurity/eyewitness](https://github.com/FortyNorthSecurity/EyeWitness) 给网站做快照,提供服务器Header信息,识别默认凭证等
+- [**2114**星][7y] [C++] [lloyd/node-memwatch](https://github.com/lloyd/node-memwatch) A NodeJS library to keep an eye on your memory usage, and discover and isolate leaks.
+- [**2107**星][4y] [C] [hashcat/hashcat-legacy](https://github.com/hashcat/hashcat-legacy) Advanced CPU-based password recovery utility
+- [**2105**星][8m] [Py] [linkedin/qark](https://github.com/linkedin/qark) 查找Android App的漏洞, 支持源码或APK文件
+- [**2103**星][3m] [yeahhub/hacking-security-ebooks](https://github.com/yeahhub/hacking-security-ebooks) Top 100 Hacking & Security E-Books (Free Download)
+- [**2103**星][23d] [infoslack/awesome-web-hacking](https://github.com/infoslack/awesome-web-hacking) A list of web application security
+- [**2095**星][2d] [C] [wireguard/wireguard](https://github.com/wireguard/wireguard) fast, modern, secure kernel VPN tunnel
+- [**2093**星][22d] [Ruby] [urbanadventurer/whatweb](https://github.com/urbanadventurer/whatweb) Next generation web scanner
+- [**2084**星][5d] [C] [flatpak/flatpak](https://github.com/flatpak/flatpak) Linux application sandboxing and distribution framework
+- [**2078**星][1m] [Go] [theupdateframework/notary](https://github.com/theupdateframework/notary) Notary is a project that allows anyone to have trust over arbitrary collections of data
+- [**2071**星][15d] [Shell] [wulabing/v2ray_ws-tls_bash_onekey](https://github.com/wulabing/v2ray_ws-tls_bash_onekey) V2Ray Nginx+vmess+ws+tls/ http2 over tls 一键安装脚本
+- [**2066**星][9m] [jermic/android-crack-tool](https://github.com/jermic/android-crack-tool)
+- [**2058**星][4m] [Py] [whaleshark-team/cobra](https://github.com/WhaleShark-Team/cobra) Source Code Security Audit (源代码安全审计)
+- [**2057**星][1y] [bluscreenofjeff/red-team-infrastructure-wiki](https://github.com/bluscreenofjeff/red-team-infrastructure-wiki) Wiki to collect Red Team infrastructure hardening resources
+- [**2054**星][7d] [swiftonsecurity/sysmon-config](https://github.com/swiftonsecurity/sysmon-config) Sysmon configuration file template with default high-quality event tracing
+- [**2051**星][2m] [tanprathan/mobileapp-pentest-cheatsheet](https://github.com/tanprathan/mobileapp-pentest-cheatsheet) The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.
+- [**2048**星][6m] [Go] [maxmcd/webtty](https://github.com/maxmcd/webtty) Share a terminal session over WebRTC
+- [**2047**星][1m] [edoverflow/bugbounty-cheatsheet](https://github.com/edoverflow/bugbounty-cheatsheet) A list of interesting payloads, tips and tricks for bug bounty hunters.
+- [**2045**星][2m] [C++] [lordnoteworthy/al-khaser](https://github.com/lordnoteworthy/al-khaser) 在野恶意软件使用的技术:虚拟机,仿真,调试器,沙盒检测。
+- [**2045**星][8m] [Shell] [foospidy/payloads](https://github.com/foospidy/payloads) web 攻击 Payload 集合
+- [**2043**星][12d] [Py] [nabla-c0d3/sslyze](https://github.com/nabla-c0d3/sslyze) SSL/TLS服务器扫描
+- [**2042**星][2y] [Py] [derv82/wifite](https://github.com/derv82/wifite) 自动化无线攻击工具
+- [**2039**星][5d] [C++] [openthread/openthread](https://github.com/openthread/openthread) OpenThread released by Google is an open-source implementation of the Thread networking protocol
+- [**2033**星][2d] [ObjC] [ios-control/ios-deploy](https://github.com/ios-control/ios-deploy) Install and debug iPhone apps from the command line, without using Xcode
+- [**2033**星][2d] [Py] [sensepost/objection](https://github.com/sensepost/objection) runtimemobile exploration
+- [**2029**星][3d] [Go] [goodrain/rainbond](https://github.com/goodrain/rainbond) Enterprise application cloud operating system(企业应用云操作系统)
+- [**2025**星][5y] [CoffeeScript] [shadowsocks/shadowsocks-gui](https://github.com/shadowsocks/shadowsocks-gui) Shadowsocks GUI client
+- [**2024**星][2d] [C++] [darthton/blackbone](https://github.com/darthton/blackbone) Windows memory hacking library
+- [**2017**星][3y] [Swift] [urinx/iosapphook](https://github.com/urinx/iosapphook) 专注于非越狱环境下iOS应用逆向研究,从dylib注入,应用重签名到App Hook
+- [**2016**星][23d] [Java] [genymobile/gnirehtet](https://github.com/genymobile/gnirehtet) Gnirehtet provides reverse tethering for Android
+- [**2016**星][9m] [C] [dekunukem/nintendo_switch_reverse_engineering](https://github.com/dekunukem/nintendo_switch_reverse_engineering) A look at inner workings of Joycon and Nintendo Switch
+- [**2014**星][1y] [C] [xoreaxeaxeax/rosenbridge](https://github.com/xoreaxeaxeax/rosenbridge) Hardware backdoors in some x86 CPUs
+- [**2014**星][5d] [Java] [jeremylong/dependencycheck](https://github.com/jeremylong/dependencycheck) OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
+- [**2005**星][4y] [C] [probablycorey/wax](https://github.com/probablycorey/wax) Wax is now being maintained by alibaba
+- [**2003**星][2m] [Go] [skynetservices/skydns](https://github.com/skynetservices/skydns) DNS service discovery for etcd
+- [**2000**星][1m] [qazbnm456/awesome-cve-poc](https://github.com/qazbnm456/awesome-cve-poc) CVE PoC列表
+- [**1996**星][29d] [Java] [elderdrivers/edxposed](https://github.com/elderdrivers/edxposed) Elder driver Xposed Framework.
+- [**1994**星][7m] [Py] [fsecurelabs/drozer](https://github.com/FSecureLABS/drozer) The Leading Security Assessment Framework for Android.
+- [**1994**星][3m] [infosecn1nja/ad-attack-defense](https://github.com/infosecn1nja/ad-attack-defense) Attack and defend active directory using modern post exploitation adversary tradecraft activity
+- [**1994**星][27d] [Swift] [github/softu2f](https://github.com/github/softu2f) Software U2F authenticator for macOS
+- [**1992**星][5d] [C#] [mathewsachin/captura](https://github.com/mathewsachin/captura) Capture Screen, Audio, Cursor, Mouse Clicks and Keystrokes
+- [**1990**星][8d] [HTML] [gtfobins/gtfobins.github.io](https://github.com/gtfobins/gtfobins.github.io) Curated list of Unix binaries that can be exploited to bypass system security restrictions
+- [**1989**星][4y] [Go] [yahoo/gryffin](https://github.com/yahoo/gryffin) Gryffin is a large scale web security scanning platform.
+- [**1989**星][2m] [C++] [asmjit/asmjit](https://github.com/asmjit/asmjit) Complete x86/x64 JIT and AOT Assembler for C++
+- [**1987**星][2y] [dloss/python-pentest-tools](https://github.com/dloss/python-pentest-tools) 可用于渗透测试的Python工具收集
+- [**1977**星][5d] [Go] [projectdiscovery/subfinder](https://github.com/projectdiscovery/subfinder) Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.
+- [**1977**星][5d] [Go] [projectdiscovery/subfinder](https://github.com/projectdiscovery/subfinder) 使用Passive Sources, Search Engines, Pastebins, Internet Archives等查找子域名
+- [**1972**星][1m] [Py] [momosecurity/aswan](https://github.com/momosecurity/aswan) 陌陌风控系统静态规则引擎,零基础简易便捷的配置多种复杂规则,实时高效管控用户异常行为。
+- [**1971**星][5d] [Py] [j3ssie/osmedeus](https://github.com/j3ssie/osmedeus) Fully automated offensive security framework for reconnaissance and vulnerability scanning
+- [**1966**星][11d] [Go] [ullaakut/cameradar](https://github.com/Ullaakut/cameradar) Cameradar hacks its way into RTSP videosurveillance cameras
+- [**1966**星][9m] [JS] [weichiachang/stacks-cli](https://github.com/weichiachang/stacks-cli) Check website stack from the terminal
+- [**1966**星][1y] [BitBake] [1n3/intruderpayloads](https://github.com/1n3/intruderpayloads) A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.
+- [**1955**星][7d] [Perl] [spiderlabs/owasp-modsecurity-crs](https://github.com/spiderlabs/owasp-modsecurity-crs) OWASP ModSecurity Core Rule Set (CRS) Project (Official Repository)
+- [**1953**星][2y] [obfuscator-llvm/obfuscator](https://github.com/obfuscator-llvm/obfuscator) Obfuscator-LLVM
+- [**1952**星][1y] [Go] [hyperhq/hyperd](https://github.com/hyperhq/hyperd) HyperContainer Daemon
+- [**1951**星][8d] [Py] [cea-sec/miasm](https://github.com/cea-sec/miasm) Reverse engineering framework in Python
+- [**1947**星][29d] [Py] [nixawk/pentest-wiki](https://github.com/nixawk/pentest-wiki) PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.
+- [**1945**星][5d] [C] [microsoft/procdump-for-linux](https://github.com/microsoft/procdump-for-linux) Linux 版本的 ProcDump
+- [**1942**星][3y] [C#] [lazocoder/windows-hacks](https://github.com/lazocoder/windows-hacks) Creative and unusual things that can be done with the Windows API.
+- [**1938**星][4m] [C] [meituan-dianping/logan](https://github.com/meituan-dianping/logan) Logan is a lightweight case logging system based on mobile platform.
+- [**1938**星][7d] [Go] [zalando/skipper](https://github.com/zalando/skipper) An HTTP router and reverse proxy for service composition, including use cases like Kubernetes Ingress
+- [**1935**星][19d] [Go] [mpolden/echoip](https://github.com/mpolden/echoip) IP address lookup service
+- [**1933**星][5m] [C] [darkk/redsocks](https://github.com/darkk/redsocks) transparent TCP-to-proxy redirector
+- [**1923**星][3y] [Py] [aoncyberlabs/windows-exploit-suggester](https://github.com/AonCyberLabs/Windows-Exploit-Suggester) This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules available for the missing bulletins.
+- [**1920**星][4y] [Py] [ziggear/shadowsocks](https://github.com/ziggear/shadowsocks) backup of
+- [**1920**星][2d] [C++] [powerdns/pdns](https://github.com/powerdns/pdns) PowerDNS
+- [**1920**星][9d] [CSS] [cyb3rward0g/helk](https://github.com/cyb3rward0g/helk) 对ELK栈进行分析,具备多种高级功能,例如SQL声明性语言,图形,结构化流,机器学习等
+- [**1918**星][3m] [toolswatch/blackhat-arsenal-tools](https://github.com/toolswatch/blackhat-arsenal-tools) Black Hat 武器库
+- [**1917**星][2d] [C] [ntop/ndpi](https://github.com/ntop/ndpi) Open Source Deep Packet Inspection Software Toolkit
+- [**1915**星][18d] [Py] [lanjelot/patator](https://github.com/lanjelot/patator) Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.
+- [**1914**星][7d] [Go] [solo-io/gloo](https://github.com/solo-io/gloo) An Envoy-Powered API Gateway
+- [**1914**星][2d] [chaitin/xray](https://github.com/chaitin/xray) xray 安全评估工具 | 使用之前务必先阅读文档
+- [**1903**星][3m] [Go] [minishift/minishift](https://github.com/minishift/minishift) Run OpenShift 3.x locally
+- [**1901**星][9d] [C] [chipsec/chipsec](https://github.com/chipsec/chipsec) 分析PC平台的安全性, 包括硬件、系统固件(BIOS/UEFI)和平台组件
+- [**1900**星][1y] [Py] [derv82/wifite2](https://github.com/derv82/wifite2) 无线网络审计工具wifite 的升级版/重制版
+- [**1898**星][3d] [C++] [mhammond/pywin32](https://github.com/mhammond/pywin32) Python for Windows (pywin32) Extensions
+- [**1896**星][7d] [Shell] [toniblyx/prowler](https://github.com/toniblyx/prowler) AWS Security Best Practices Assessment, Auditing, Hardening and Forensics Readiness Tool. It follows guidelines of the CIS Amazon Web Services Foundations Benchmark and DOZENS of additional checks including GDPR and HIPAA (+100). Official CIS for AWS guide:
+- [**1893**星][6d] [Py] [mozilla/mozdef](https://github.com/mozilla/mozdef) Mozilla Enterprise Defense Platform
+- [**1893**星][6m] [Java] [fuzion24/justtrustme](https://github.com/fuzion24/justtrustme) An xposed module that disables SSL certificate checking for the purposes of auditing an app with cert pinning
+- [**1886**星][4m] [C] [shadowsocks/simple-obfs](https://github.com/shadowsocks/simple-obfs) A simple obfuscating tool (Deprecated)
+- [**1884**星][1y] [Py] [aploium/zmirror](https://github.com/aploium/zmirror) The next-gen reverse proxy for full site mirroring
+- [**1880**星][4m] [Py] [python-security/pyt](https://github.com/python-security/pyt) Python Web App 安全漏洞检测和静态分析工具
+- [**1878**星][16d] [YARA] [yara-rules/rules](https://github.com/yara-rules/rules) Repository of yara rules
+- [**1878**星][5y] [C++] [tum-vision/lsd_slam](https://github.com/tum-vision/lsd_slam) LSD-SLAM
+- [**1878**星][2m] [Py] [pycqa/bandit](https://github.com/pycqa/bandit) 在Python代码中查找常见的安全问题
+- [**1877**星][2d] [C] [merbanan/rtl_433](https://github.com/merbanan/rtl_433) Program to decode traffic from Devices that are broadcasting on 433.9 MHz like temperature sensors
+- [**1876**星][9d] [olivierlaflamme/cheatsheet-god](https://github.com/olivierlaflamme/cheatsheet-god) Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet
+- [**1876**星][27d] [hmaverickadams/beginner-network-pentesting](https://github.com/hmaverickadams/beginner-network-pentesting) Notes for Beginner Network Pentesting Course
+- [**1873**星][12d] [Py] [aquasecurity/kube-hunter](https://github.com/aquasecurity/kube-hunter) Hunt for security weaknesses in Kubernetes clusters
+- [**1870**星][5d] [C#] [hmbsbige/shadowsocksr-windows](https://github.com/hmbsbige/shadowsocksr-windows) 【自用】Bug-Oriented Programming
+- [**1869**星][6d] [Java] [adoptopenjdk/jitwatch](https://github.com/adoptopenjdk/jitwatch) Log analyser / visualiser for Java HotSpot JIT compiler. Inspect inlining decisions, hot methods, bytecode, and assembly. View results in the JavaFX user interface.
+- [**1865**星][6d] [C++] [acidanthera/lilu](https://github.com/acidanthera/Lilu) Arbitrary kext and process patching on macOS
+- [**1865**星][10m] [PHP] [bartblaze/php-backdoors](https://github.com/bartblaze/php-backdoors) A collection of PHP backdoors. For educational or testing purposes only.
+- [**1864**星][23d] [C] [tinyproxy/tinyproxy](https://github.com/tinyproxy/tinyproxy) a light-weight HTTP/HTTPS proxy daemon for POSIX operating systems
+- [**1862**星][4y] [ObjC] [xcodeghostsource/xcodeghost](https://github.com/xcodeghostsource/xcodeghost) "XcodeGhost" Source
+- [**1860**星][9d] [Lua] [vulnerscom/nmap-vulners](https://github.com/vulnerscom/nmap-vulners) NSE script based on Vulners.com API
+- [**1857**星][5m] [bypass007/emergency-response-notes](https://github.com/bypass007/emergency-response-notes) 应急响应实战笔记,一个安全工程师的自我修养。
+- [**1855**星][2m] [Py] [pwnlandia/mhn](https://github.com/pwnlandia/mhn) 蜜罐网络
+- [**1854**星][5d] [TS] [snyk/snyk](https://github.com/snyk/snyk) CLI and build-time tool to find & fix known vulnerabilities in open-source dependencies
+- [**1854**星][11m] [C++] [googlecreativelab/open-nsynth-super](https://github.com/googlecreativelab/open-nsynth-super) Open NSynth Super is an experimental physical interface for the NSynth algorithm
+- [**1853**星][2d] [Py] [bregman-arie/devops-interview-questions](https://github.com/bregman-arie/devops-interview-questions) Linux, Jenkins, AWS, SRE, Prometheus, Docker, Python, Ansible, Git, Kubernetes, Terraform, OpenStack, SQL, NoSQL, Azure, GCP, DNS, Elastic
+- [**1853**星][4m] [Shell] [arismelachroinos/lscript](https://github.com/arismelachroinos/lscript) 自动化无线渗透和Hacking 任务的脚本
+- [**1852**星][3d] [C] [github/glb-director](https://github.com/github/glb-director) GitHub Load Balancer Director and supporting tooling.
+- [**1851**星][1y] [Java] [jindrapetrik/jpexs-decompiler](https://github.com/jindrapetrik/jpexs-decompiler) JPEXS Free Flash Decompiler
+- [**1848**星][6m] [Assembly] [pooler/cpuminer](https://github.com/pooler/cpuminer) cpuminer:莱特币和比特币的多线程 CPU 矿机
+- [**1847**星][8m] [Py] [netflix-skunkworks/stethoscope](https://github.com/Netflix-Skunkworks/stethoscope) Personalized, user-focused recommendations for employee information security.
+- [**1842**星][1m] [Jupyter Notebook] [hunters-forge/threathunter-playbook](https://github.com/hunters-forge/ThreatHunter-Playbook) A Threat hunter's playbook to aid the development of techniques and hypothesis for hunting campaigns.
+- [**1842**星][1y] [Java] [yeriomin/yalpstore](https://github.com/yeriomin/yalpstore) Download apks from Google Play Store
+- [**1842**星][2d] [C++] [pytorch/glow](https://github.com/pytorch/glow) Compiler for Neural Network hardware accelerators
+- [**1841**星][2m] [C] [retroplasma/earth-reverse-engineering](https://github.com/retroplasma/earth-reverse-engineering) Reversing Google's 3D satellite mode
+- [**1839**星][3y] [Java] [chora10/cknife](https://github.com/chora10/cknife) Cknife
+- [**1838**星][1y] [Py] [jinnlynn/genpac](https://github.com/jinnlynn/genpac) PAC/Dnsmasq/Wingy file Generator, working with gfwlist, support custom rules.
+- [**1830**星][2m] [Go] [influxdata/kapacitor](https://github.com/influxdata/kapacitor) Open source framework for processing, monitoring, and alerting on time series data
+- [**1828**星][3m] [JS] [coreybutler/node-windows](https://github.com/coreybutler/node-windows) Windows support for Node.JS scripts (daemons, eventlog, UAC, etc).
+- [**1828**星][1y] [CSS] [ctfs/write-ups-2015](https://github.com/ctfs/write-ups-2015) Wiki-like CTF write-ups repository, maintained by the community. 2015
+- [**1824**星][5d] [Py] [trailofbits/manticore](https://github.com/trailofbits/manticore) 动态二进制分析工具,支持符号执行(symbolic execution)、污点分析(taint analysis)、运行时修改。
+- [**1819**星][6d] [C] [mgba-emu/mgba](https://github.com/mgba-emu/mgba) mGBA Game Boy Advance Emulator
+- [**1818**星][2m] [djadmin/awesome-bug-bounty](https://github.com/djadmin/awesome-bug-bounty) A comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.
+- [**1815**星][5m] [Py] [veil-framework/veil](https://github.com/veil-framework/veil) generate metasploit payloads that bypass common anti-virus solutions
+- [**1814**星][6m] [C++] [iagox86/dnscat2](https://github.com/iagox86/dnscat2) 在 DNS 协议上创建加密的 C&C channel
+- [**1804**星][10d] [Go] [gdamore/tcell](https://github.com/gdamore/tcell) Tcell is an alternate terminal package, similar in some ways to termbox, but better in others.
+- [**1801**星][12m] [Go] [intelsdi-x/snap](https://github.com/intelsdi-x/snap) an open telemetry framework designed to simplify the collection, processing and publishing of system data through a single API.
+- [**1800**星][3y] [ObjC] [kpwn/yalu102](https://github.com/kpwn/yalu102) incomplete iOS 10.2 jailbreak for 64 bit devices by qwertyoruiopz and marcograssi
+- [**1795**星][7m] [Py] [lijiejie/subdomainsbrute](https://github.com/lijiejie/subdomainsbrute) 子域名爆破
+- [**1790**星][12m] [Py] [ctfs/write-ups-2017](https://github.com/ctfs/write-ups-2017) Wiki-like CTF write-ups repository, maintained by the community. 2017
+- [**1785**星][1y] [aozhimin/ios-monitor-platform](https://github.com/aozhimin/ios-monitor-platform)
+- [**1784**星][16d] [Shell] [pirate/wireguard-docs](https://github.com/pirate/wireguard-docs)
+- [**1781**星][15d] [Shell] [leebaird/discover](https://github.com/leebaird/discover) 自定义的bash脚本, 用于自动化多个渗透测试任务, 包括: 侦查、扫描、解析、在Metasploit中创建恶意Payload和Listener
+- [**1779**星][4y] [caesar0301/awesome-pcaptools](https://github.com/caesar0301/awesome-pcaptools) A collection of tools developed by other researchers in the Computer Science area to process network traces. All the right reserved for the original authors.
+- [**1778**星][15d] [C++] [apitrace/apitrace](https://github.com/apitrace/apitrace) Tools for tracing OpenGL, Direct3D, and other graphics APIs
+- [**1777**星][7m] [C++] [wrbug/dumpdex](https://github.com/wrbug/dumpdex) Android脱壳
+- [**1777**星][7d] [PHP] [ezyang/htmlpurifier](https://github.com/ezyang/htmlpurifier) Standards compliant HTML filter written in PHP
+- [**1777**星][5d] [Go] [convox/rack](https://github.com/convox/rack) Private PaaS built on native AWS services for maximum privacy and minimum upkeep
+- [**1774**星][3y] [ObjC] [tapwork/heapinspector-for-ios](https://github.com/tapwork/heapinspector-for-ios) Find memory issues & leaks in your iOS app without instruments
+- [**1774**星][3m] [Py] [epinna/weevely3](https://github.com/epinna/weevely3) Weaponized web shell
+- [**1772**星][2y] [JS] [cazala/coin-hive](https://github.com/cazala/coin-hive) CoinHive cryptocurrency miner for node.js
+- [**1770**星][3y] [ObjC] [alibaba/wax](https://github.com/alibaba/wax) Wax is a framework that lets you write native iPhone apps in Lua.
+- [**1761**星][6d] [C] [google/wuffs](https://github.com/google/wuffs) Wrangling Untrusted File Formats Safely
+- [**1761**星][2y] [CSS] [b374k/b374k](https://github.com/b374k/b374k) PHP Webshell with handy features
+- [**1760**星][3y] [Go] [elastic/logstash-forwarder](https://github.com/elastic/logstash-forwarder) An experiment to cut logs in preparation for processing elsewhere. Replaced by Filebeat:
+- [**1758**星][12m] [JS] [puppeteer/examples](https://github.com/puppeteer/examples) Use case-driven examples for using Puppeteer and headless chrome
+- [**1756**星][10d] [17mon/china_ip_list](https://github.com/17mon/china_ip_list)
+- [**1754**星][2m] [onethawt/idaplugins-list](https://github.com/onethawt/idaplugins-list) IDA插件收集
+- [**1747**星][2d] [PHP] [wordpress/wordpress-coding-standards](https://github.com/wordpress/wordpress-coding-standards) PHP_CodeSniffer rules (sniffs) to enforce WordPress coding conventions
+- [**1745**星][1y] [PS] [fuzzysecurity/powershell-suite](https://github.com/fuzzysecurity/powershell-suite) My musings with PowerShell
+- [**1744**星][1y] [coreb1t/awesome-pentest-cheat-sheets](https://github.com/coreb1t/awesome-pentest-cheat-sheets) Collection of the cheat sheets useful for pentesting
+- [**1742**星][3m] [tunz/js-vuln-db](https://github.com/tunz/js-vuln-db) A collection of JavaScript engine CVEs with PoCs
+- [**1739**星][21d] [ngalongc/bug-bounty-reference](https://github.com/ngalongc/bug-bounty-reference) Inspired by
+- [**1738**星][2y] [Go] [vzex/dog-tunnel](https://github.com/vzex/dog-tunnel) p2p tunnel,(udp mode work with kcp,
+- [**1735**星][2m] [PHP] [orangetw/my-ctf-web-challenges](https://github.com/orangetw/my-ctf-web-challenges) Collection of CTF Web challenges I made
+- [**1731**星][1m] [PS] [fireeye/flare-vm](https://github.com/fireeye/flare-vm) 火眼发布用于 Windows 恶意代码分析的虚拟机:FLARE VM
+- [**1730**星][3y] [Go] [s-rah/onionscan](https://github.com/s-rah/onionscan) OnionScan is a free and open source tool for investigating the Dark Web.
+- [**1730**星][6m] [Smali] [ahmyth/ahmyth-android-rat](https://github.com/ahmyth/ahmyth-android-rat) Android Remote Administration Tool
+- [**1723**星][14d] [selierlin/share-ssr-v2ray](https://github.com/selierlin/share-ssr-v2ray)
+- [**1719**星][4d] [C] [google/honggfuzz](https://github.com/google/honggfuzz) Security oriented fuzzer with powerful analysis options. Supports evolutionary, feedback-driven fuzzing based on code coverage (software- and hardware-based)
+- [**1718**星][9m] [Py] [constverum/proxybroker](https://github.com/constverum/proxybroker) Proxy [Finder | Checker | Server]. HTTP(S) & SOCKS
+- [**1717**星][4m] [Py] [lgandx/responder](https://github.com/lgandx/responder) Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.
+- [**1714**星][5d] [Ruby] [cliffe/secgen](https://github.com/cliffe/secgen) Create randomly insecure VMs
+- [**1710**星][1m] [Go] [eth0izzle/shhgit](https://github.com/eth0izzle/shhgit) 监听Github Event API,实时查找Github代码和Gist中的secret和敏感文件
+- [**1709**星][3m] [Py] [anorov/cloudflare-scrape](https://github.com/anorov/cloudflare-scrape) A Python module to bypass Cloudflare's anti-bot page.
+- [**1709**星][1y] [Java] [ac-pm/inspeckage](https://github.com/ac-pm/inspeckage) Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)
+- [**1707**星][3d] [TSQL] [brentozarultd/sql-server-first-responder-kit](https://github.com/brentozarultd/sql-server-first-responder-kit) sp_Blitz, sp_BlitzCache, sp_BlitzFirst, sp_BlitzIndex, and other SQL Server scripts for health checks and performance tuning.
+- [**1706**星][16d] [Go] [hashicorp/memberlist](https://github.com/hashicorp/memberlist) Golang package for gossip based membership and failure detection
+- [**1700**星][8m] [Py] [guelfoweb/knock](https://github.com/guelfoweb/knock) 使用 Wordlist 枚举子域名
+- [**1697**星][9m] [CSS] [bagder/http2-explained](https://github.com/bagder/http2-explained) A detailed document explaining and documenting HTTP/2, the successor to the widely popular HTTP/1.1 protocol
+- [**1696**星][3m] [PHP] [xtr4nge/fruitywifi](https://github.com/xtr4nge/fruitywifi) FruityWiFi is a wireless network auditing tool. The application can be installed in any Debian based system (Jessie) adding the extra packages. Tested in Debian, Kali Linux, Kali Linux ARM (Raspberry Pi), Raspbian (Raspberry Pi), Pwnpi (Raspberry Pi), Bugtraq, NetHunter.
+- [**1696**星][1y] [Swift] [haxpor/potatso](https://github.com/haxpor/potatso) Potatso is an iOS client that implements Shadowsocks proxy with the leverage of NetworkExtension framework. ***This project is unmaintained, try taking a look at this fork
+- [**1695**星][6m] [Py] [yelp/osxcollector](https://github.com/yelp/osxcollector) A forensic evidence collection & analysis toolkit for OS X
+- [**1695**星][3y] [CoffeeScript] [okturtles/dnschain](https://github.com/okturtles/dnschain) A blockchain-based DNS + HTTP server that fixes HTTPS security, and more!
+- [**1689**星][5m] [C] [networkprotocol/netcode.io](https://github.com/networkprotocol/netcode.io) A protocol for secure client/server connections over UDP
+- [**1687**星][5m] [JS] [expressjs/csurf](https://github.com/expressjs/csurf) CSRF token middleware
+- [**1687**星][15d] [HTML] [chromium/badssl.com](https://github.com/chromium/badssl.com)
+- [**1686**星][8m] [Makefile] [raspberrypi/noobs](https://github.com/raspberrypi/noobs) NOOBS (New Out Of Box Software) - An easy Operating System install manager for the Raspberry Pi
+- [**1685**星][4m] [R] [briatte/awesome-network-analysis](https://github.com/briatte/awesome-network-analysis) A curated list of awesome network analysis resources.
+- [**1683**星][1y] [owasp/devguide](https://github.com/owasp/devguide) The OWASP Guide
+- [**1682**星][3m] [Py] [rootm0s/winpwnage](https://github.com/rootm0s/winpwnage) UAC bypass, Elevate, Persistence and Execution methods
+- [**1677**星][30d] [Swift] [pmusolino/wormholy](https://github.com/pmusolino/wormholy) iOS network debugging, like a wizard 🧙♂️
+- [**1674**星][2d] [C++] [microsoft/detours](https://github.com/microsoft/detours) Detours is a software package for monitoring and instrumenting API calls on Windows. It is distributed in source code form.
+- [**1671**星][7m] [C++] [yegord/snowman](https://github.com/yegord/snowman) Snowman反编译器,支持x86, AMD64, ARM。有独立的GUI工具、命令行工具、IDA/Radare2/x64dbg插件,也可以作为库使用
+ - [IDA插件](https://github.com/yegord/snowman/tree/master/src/ida-plugin)
+ - [snowman](https://github.com/yegord/snowman/tree/master/src/snowman) QT界面
+ - [nocode](https://github.com/yegord/snowman/tree/master/src/nocode) 命令行工具
+ - [nc](https://github.com/yegord/snowman/tree/master/src/nc) 核心代码,可作为库使用
+- [**1668**星][2m] [NSIS] [angryip/ipscan](https://github.com/angryip/ipscan) Angry IP Scanner - fast and friendly network scanner
+- [**1666**星][2d] [Java] [apache/geode](https://github.com/apache/geode) Apache Geode
+- [**1663**星][4y] [Java] [dodola/hotfix](https://github.com/dodola/hotfix) 安卓App热补丁动态修复框架
+- [**1661**星][6m] [C] [easyhook/easyhook](https://github.com/easyhook/easyhook) The reinvention of Windows API Hooking
+- [**1661**星][2d] [Py] [cea-sec/ivre](https://github.com/cea-sec/ivre) Network recon framework.
+- [**1659**星][10d] [roave/securityadvisories](https://github.com/roave/securityadvisories) ensures that your application doesn't have installed dependencies with known security vulnerabilities
+- [**1656**星][6d] [JS] [tylerbrock/mongo-hacker](https://github.com/tylerbrock/mongo-hacker) MongoDB Shell Enhancements for Hackers
+- [**1655**星][3m] [Py] [boppreh/keyboard](https://github.com/boppreh/keyboard) Hook and simulate global keyboard events on Windows and Linux.
+- [**1654**星][2d] [JS] [ghacksuserjs/ghacks-user.js](https://github.com/ghacksuserjs/ghacks-user.js) An ongoing comprehensive user.js template for configuring and hardening Firefox privacy, security and anti-fingerprinting
+- [**1652**星][2y] [Shell] [juude/droidreverse](https://github.com/juude/droidreverse) android 逆向工程工具集
+- [**1652**星][7m] [dsasmblr/game-hacking](https://github.com/dsasmblr/game-hacking) Tutorials, tools, and more as related to reverse engineering video games.
+- [**1651**星][10m] [JS] [evilcos/xssor2](https://github.com/evilcos/xssor2) XSS'OR - Hack with JavaScript.
+- [**1650**星][1m] [Py] [ehco1996/django-sspanel](https://github.com/ehco1996/django-sspanel) 用diango开发的全新的shadowsocks网络面板
+- [**1650**星][7d] [HTML] [clong/detectionlab](https://github.com/clong/detectionlab) Vagrant & Packer scripts to build a lab environment complete with security tooling and logging best practices
+- [**1649**星][1y] [Py] [evyatarmeged/raccoon](https://github.com/evyatarmeged/raccoon) 高性能的侦查和漏洞扫描工具
+- [**1648**星][2d] [C#] [jbevain/cecil](https://github.com/jbevain/cecil) C#库, 探查/修改/生成 .NET App/库
+- [**1645**星][3y] [JS] [camwiegert/baffle](https://github.com/camwiegert/baffle) A tiny javascript library for obfuscating and revealing text in DOM elements.
+- [**1643**星][9m] [tylerha97/awesome-reversing](https://github.com/tylerha97/awesome-reversing) A curated list of awesome reversing resources
+- [**1643**星][11m] [Java] [fesh0r/fernflower](https://github.com/fesh0r/fernflower) Unofficial mirror of FernFlower Java decompiler (All pulls should be submitted upstream)
+- [**1638**星][4y] [Py] [ctfs/write-ups-2014](https://github.com/ctfs/write-ups-2014) Wiki-like CTF write-ups repository, maintained by the community. 2014
+- [**1638**星][11m] [C] [dlundquist/sniproxy](https://github.com/dlundquist/sniproxy) Proxies incoming HTTP and TLS connections based on the hostname contained in the initial request of the TCP session.
+- [**1638**星][4y] [Py] [ctfs/write-ups-2014](https://github.com/ctfs/write-ups-2014) Wiki-like CTF write-ups repository, maintained by the community. 2014
+- [**1636**星][4m] [Java] [jaredrummler/androidprocesses](https://github.com/jaredrummler/androidprocesses) DEPRECATED
+- [**1634**星][14d] [Go] [awnumar/memguard](https://github.com/awnumar/memguard) 处理内存中敏感的值,纯Go语言编写。
+- [**1631**星][6m] [Objective-C++] [tencent/oomdetector](https://github.com/tencent/oomdetector) OOMDetector is a memory monitoring component for iOS which provides you with OOM monitoring, memory allocation monitoring, memory leak detection and other functions.
+- [**1630**星][6d] [JS] [efforg/privacybadger](https://github.com/efforg/privacybadger) Privacy Badger is a browser extension that automatically learns to block invisible trackers.
+- [**1630**星][29d] [PHP] [c0ny1/upload-labs](https://github.com/c0ny1/upload-labs) 一个帮你总结所有类型的上传漏洞的靶场
+- [**1629**星][5d] [sarojaba/awesome-devblog](https://github.com/sarojaba/awesome-devblog) 어썸데브블로그. 국내 개발 블로그 모음(only 실명으로).
+- [**1624**星][2y] [jhaddix/tbhm](https://github.com/jhaddix/tbhm) The Bug Hunters Methodology
+- [**1624**星][4m] [CSS] [functionclub/v2ray.fun](https://github.com/functionclub/v2ray.fun) 正在开发的全新 V2ray.Fun
+- [**1621**星][2m] [Shell] [internetwache/gittools](https://github.com/internetwache/gittools) find websites with their .git repository available to the public
+- [**1618**星][28d] [Java] [tiann/epic](https://github.com/tiann/epic) Dynamic java method AOP hook for Android(continution of Dexposed on ART), Supporting 4.0~10.0
+- [**1615**星][2y] [JS] [addyosmani/a11y](https://github.com/addyosmani/a11y) Accessibility audit tooling for the web (beta)
+- [**1614**星][2m] [Go] [ysrc/yulong-hids](https://github.com/ysrc/yulong-hids) 一款由 YSRC 开源的主机入侵检测系统
+- [**1614**星][7m] [Go] [sipt/shuttle](https://github.com/sipt/shuttle) A web proxy in Golang with amazing features.
+- [**1612**星][3y] [Makefile] [drizzlerisk/drizzledumper](https://github.com/drizzlerisk/drizzledumper) 是一款基于内存搜索的Android脱壳工具。
+- [**1608**星][9m] [JS] [localtunnel/server](https://github.com/localtunnel/server) server for localtunnel.me
+- [**1608**星][10m] [C] [nmikhailov/validity90](https://github.com/nmikhailov/validity90) Reverse engineering of Validity/Synaptics 138a:0090, 138a:0094, 138a:0097, 06cb:0081, 06cb:009a fingerprint readers protocol
+- [**1606**星][2d] [C++] [lief-project/lief](https://github.com/lief-project/lief) Library to Instrument Executable Formats
+- [**1602**星][6m] [Py] [w1109790800/penetration](https://github.com/w1109790800/penetration) 渗透 超全面的渗透资料
+- [**1601**星][1y] [Py] [nccgroup/scout2](https://github.com/nccgroup/Scout2) Security auditing tool for AWS environments
+- [**1601**星][5m] [Py] [mozilla/cipherscan](https://github.com/mozilla/cipherscan) 查找指定目标支持的SSL ciphersuites
+- [**1600**星][5d] [Go] [bitnami-labs/sealed-secrets](https://github.com/bitnami-labs/sealed-secrets) A Kubernetes controller and tool for one-way encrypted Secrets
+- [**1599**星][2y] [JS] [keraf/nocoin](https://github.com/keraf/nocoin) No Coin is a tiny browser extension aiming to block coin miners such as Coinhive.
+- [**1598**星][15d] [Java] [spotbugs/spotbugs](https://github.com/spotbugs/spotbugs) SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.
+- [**1597**星][3m] [Py] [knownsec/pocsuite](https://github.com/knownsec/pocsuite) This project has stopped to maintenance, please to
+- [**1591**星][28d] [C] [ntop/n2n](https://github.com/ntop/n2n) Peer-to-peer VPN
+- [**1591**星][24d] [ivrodriguezca/re-ios-apps](https://github.com/ivrodriguezca/re-ios-apps) A completely free, open source and online course about Reverse Engineering iOS Applications.
+- [**1584**星][6m] [Ruby] [brunofacca/zen-rails-security-checklist](https://github.com/brunofacca/zen-rails-security-checklist) Checklist of security precautions for Ruby on Rails applications.
+- [**1583**星][4y] [l3m0n/pentest_study](https://github.com/l3m0n/pentest_study) 从零开始内网渗透学习
+- [**1582**星][1m] [ObjC] [ealeksandrov/provisionql](https://github.com/ealeksandrov/provisionql) Quick Look plugin for apps and provisioning profile files
+- [**1581**星][1y] [C] [qihoo360/phptrace](https://github.com/qihoo360/phptrace) A tracing and troubleshooting tool for PHP scripts.
+- [**1570**星][2m] [C] [firmianay/ctf-all-in-one](https://github.com/firmianay/ctf-all-in-one) CTF竞赛入门指南
+- [**1569**星][2y] [C] [samyk/pwnat](https://github.com/samyk/pwnat) The only tool and technique to punch holes through firewalls/NATs where both clients and server can be behind separate NATs without any 3rd party involvement. Pwnat uses a newly developed technique, exploiting a property of NAT translation tables, with no 3rd party, port forwarding, DMZ, router administrative requirements, STUN/TURN/UPnP/ICE, or…
+- [**1569**星][29d] [Py] [opendevops-cn/opendevops](https://github.com/opendevops-cn/opendevops) CODO是一款为用户提供企业多混合云、一站式DevOps、自动化运维、完全开源的云管理平台、自动化运维平台
+- [**1566**星][14d] [C] [codahale/bcrypt-ruby](https://github.com/codahale/bcrypt-ruby) Ruby binding for the OpenBSD bcrypt() password hashing algorithm, allowing you to easily store a secure hash of your users' passwords.
+- [**1565**星][17d] [Go] [sofastack/sofa-mosn](https://github.com/sofastack/sofa-mosn) 使用 Go 语言开发的网络代理软件,作为云原生的网络数据平面,旨在为服务提供多协议,模块化,智能化,安全的代理能力
+- [**1562**星][19d] [C] [p-gen/smenu](https://github.com/p-gen/smenu) Terminal utility that reads words from standard input or from a file and creates an interactive selection window just below the cursor. The selected word(s) are sent to standard output for further processing.
+- [**1562**星][14d] [Py] [k4m4/kickthemout](https://github.com/k4m4/kickthemout) 使用ARP欺骗,将设备从网络中踢出去
+- [**1561**星][16d] [Java] [gchq/gaffer](https://github.com/gchq/Gaffer) A large-scale entity and relation database supporting aggregation of properties
+- [**1560**星][1y] [Py] [unkl4b/gitminer](https://github.com/unkl4b/gitminer) Github内容挖掘
+- [**1560**星][6d] [Go] [caffix/amass](https://github.com/caffix/amass) 子域名枚举, 搜索互联网数据源, 使用机器学习猜测子域名. Go语言
+- [**1557**星][8m] [Py] [m4ll0k/wascan](https://github.com/m4ll0k/WAScan) WAScan - Web Application Scanner
+- [**1556**星][15d] [Go] [eolinker/goku-api-gateway](https://github.com/eolinker/goku-api-gateway) A Powerful HTTP API Gateway in pure golang!Goku API Gateway (中文名:悟空 API 网关)是一个基于 Golang开发的微服务网关,能够实现高性能 HTTP API 转发、服务编排、多租户管理、API 访问权限控制等目的,拥有强大的自定义插件系统可以自行扩展,并且提供友好的图形化配置界面,能够快速帮助企业进行 API 服务治理、提高 API 服务的稳定性和安全性。
+- [**1555**星][1m] [Shell] [mzet-/linux-exploit-suggester](https://github.com/mzet-/linux-exploit-suggester) Linux privilege escalation auditing tool
+- [**1549**星][7d] [PHP] [mewebstudio/captcha](https://github.com/mewebstudio/captcha) Captcha for Laravel 5 & 6
+- [**1549**星][1m] [Py] [joxeankoret/diaphora](https://github.com/joxeankoret/diaphora) program diffing
+- [**1548**星][1y] [C] [ctfs/write-ups-2016](https://github.com/ctfs/write-ups-2016) Wiki-like CTF write-ups repository, maintained by the community. 2016
+- [**1544**星][15d] [C] [raspberrypi/userland](https://github.com/raspberrypi/userland) Source code for ARM side libraries for interfacing to Raspberry Pi GPU.
+- [**1544**星][6y] [Py] [google/pyringe](https://github.com/google/pyringe) Debugger capable of attaching to and injecting code into python processes.
+- [**1543**星][2d] [Go] [juju/juju](https://github.com/juju/juju) Simple, secure devops tooling built to manage today's complex applications wherever you run your software.
+- [**1541**星][2y] [Py] [awolfly9/ipproxytool](https://github.com/awolfly9/ipproxytool) python ip proxy tool scrapy crawl. 抓取大量免费代理 ip,提取有效 ip 使用
+- [**1540**星][2y] [C++] [hteso/iaito](https://github.com/hteso/iaito) Radare2 GUI,使用Qt和C++
+- [**1539**星][2y] [C] [ezlippi/webbench](https://github.com/ezlippi/webbench) Webbench是Radim Kolar在1997年写的一个在linux下使用的非常简单的网站压测工具。它使用fork()模拟多个客户端同时访问我们设定的URL,测试网站在压力下工作的性能,最多可以模拟3万个并发连接去测试网站的负载能力。官网地址:
+- [**1537**星][9d] [Py] [lifting-bits/mcsema](https://github.com/lifting-bits/mcsema) 将x86, amd64, aarch64二进制文件转换成LLVM字节码
+ - [IDA7插件](https://github.com/lifting-bits/mcsema/tree/master/tools/mcsema_disass/ida7) 用于反汇编二进制文件并生成控制流程图
+ - [IDA插件](https://github.com/lifting-bits/mcsema/tree/master/tools/mcsema_disass/ida) 用于反汇编二进制文件并生成控制流程图
+ - [Binja插件](https://github.com/lifting-bits/mcsema/tree/master/tools/mcsema_disass/binja) 用于反汇编二进制文件并生成控制流程图
+ - [mcsema](https://github.com/lifting-bits/mcsema/tree/master/mcsema)
+- [**1536**星][4d] [Java] [ukanth/afwall](https://github.com/ukanth/afwall) AFWall+ (Android Firewall +) - iptables based firewall for Android
+- [**1533**星][13d] [emijrp/awesome-awesome](https://github.com/emijrp/awesome-awesome) A curated list of awesome curated lists of many topics.
+- [**1532**星][3y] [Py] [x0rz/eqgrp_lost_in_translation](https://github.com/x0rz/eqgrp_lost_in_translation) ShadowBrokers泄漏
+- [**1526**星][2d] [C++] [nmap/npcap](https://github.com/nmap/npcap) Nmap Project's packet sniffing library for Windows, based on WinPcap/Libpcap improved with NDIS 6 and LWF.
+- [**1522**星][1y] [HTML] [qiwihui/hiwifi-ss](https://github.com/qiwihui/hiwifi-ss) 极路由+ss配置
+- [**1521**星][4m] [TS] [spring-guides/tut-spring-security-and-angular-js](https://github.com/spring-guides/tut-spring-security-and-angular-js) Spring Security and Angular:: A tutorial on how to use Spring Security with a single page application with various backend architectures, ranging from a simple single server to an API gateway with OAuth2 authentication.
+- [**1521**星][3d] [C] [jiangwenyuan/nuster](https://github.com/jiangwenyuan/nuster) A high performance HTTP proxy cache server and RESTful NoSQL cache server based on HAProxy
+- [**1519**星][10m] [PS] [joefitzgerald/packer-windows](https://github.com/joefitzgerald/packer-windows) 使用Packer创建Vagrant boxes的模板
+- [**1518**星][9m] [Py] [google/rekall](https://github.com/google/rekall) Rekall Memory Forensic Framework
+- [**1517**星][8d] [Py] [zerosum0x0/koadic](https://github.com/zerosum0x0/koadic) 类似于Meterpreter、Powershell Empire 的post-exploitation rootkit,区别在于其大多数操作都是由 Windows 脚本主机 JScript/VBScript 执行
+- [**1516**星][5m] [snowming04/the-hacker-playbook-3-translation](https://github.com/snowming04/the-hacker-playbook-3-translation) 对 The Hacker Playbook 3 的翻译。
+- [**1514**星][3y] [Py] [sensepost/regeorg](https://github.com/sensepost/regeorg) The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.
+- [**1510**星][1y] [dripcap/dripcap](https://github.com/dripcap/dripcap)
+- [**1508**星][2m] [Shell] [haugene/docker-transmission-openvpn](https://github.com/haugene/docker-transmission-openvpn) Docker container running Transmission torrent client with WebUI over an OpenVPN tunnel
+- [**1505**星][2y] [Py] [eldraco/domain_analyzer](https://github.com/eldraco/domain_analyzer) 通过查找所有能够查找的信息,来分析任意域名的安全性
+- [**1504**星][27d] [Py] [hannob/snallygaster](https://github.com/hannob/snallygaster) Python脚本, 扫描HTTP服务器"秘密文件"
+- [**1499**星][5d] [YARA] [cybermonitor/apt_cybercriminal_campagin_collections](https://github.com/cybermonitor/apt_cybercriminal_campagin_collections) APT & CyberCriminal Campaign Collection
+- [**1497**星][4m] [Py] [epinna/tplmap](https://github.com/epinna/tplmap) 代码注入和服务器端模板注入(Server-Side Template Injection)漏洞利用,若干沙箱逃逸技巧。
+- [**1489**星][5d] [Py] [ahupp/python-magic](https://github.com/ahupp/python-magic) A python wrapper for libmagic
+- [**1486**星][2y] [Kotlin] [gh0u1l5/wechatmagician](https://github.com/gh0u1l5/wechatmagician) WechatMagician is a Xposed module written in Kotlin, that allows you to completely control your Wechat.
+- [**1485**星][7m] [C++] [wangyu-/tinyfecvpn](https://github.com/wangyu-/tinyfecvpn) A VPN Designed for Lossy Links, with Build-in Forward Error Correction(FEC) Support. Improves your Network Quality on a High-latency Lossy Link.
+- [**1482**星][7d] [Py] [bitsadmin/wesng](https://github.com/bitsadmin/wesng) Windows Exploit Suggester - Next Generation
+- [**1481**星][2d] [C] [sleuthkit/sleuthkit](https://github.com/sleuthkit/sleuthkit) The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.
+- [**1480**星][1y] [C++] [f1xpl/openauto](https://github.com/f1xpl/openauto) AndroidAuto headunit emulator
+- [**1479**星][3d] [C] [ctcaer/hekate](https://github.com/ctcaer/hekate) Nintendo Switch Bootloader - CTCaer mod
+- [**1478**星][8d] [C] [iqiyi/xhook](https://github.com/iqiyi/xhook) a PLT (Procedure Linkage Table) hook library for Android native ELF
+- [**1477**星][2d] [Shell] [blackarch/blackarch](https://github.com/blackarch/blackarch) BlackArch Linux is an Arch Linux-based distribution for penetration testers and security researchers.
+- [**1476**星][2m] [C++] [jmpews/hookzz](https://github.com/jmpews/hookzz) a hook framework for arm/arm64/ios/android, and [dev] branch is being refactored.
+- [**1471**星][27d] [minimaxir/hacker-news-undocumented](https://github.com/minimaxir/hacker-news-undocumented) Some of the hidden norms about Hacker News not otherwise covered in the Guidelines and the FAQ.
+- [**1470**星][3y] [Py] [veil-framework/veil-evasion](https://github.com/Veil-Framework/Veil-Evasion) a tool designed to generate metasploit payloads that bypass common anti-virus solutions.
+- [**1470**星][2d] [Go] [google/keytransparency](https://github.com/google/keytransparency) A transparent and secure way to look up public keys.
+- [**1469**星][6y] [C] [alibaba/lvs](https://github.com/alibaba/lvs) A distribution of Linux Virtual Server with some advanced features. It introduces a new packet forwarding method - FULLNAT other than NAT/Tunneling/DirectRouting, and defense mechanism against synflooding attack - SYNPROXY.
+- [**1466**星][29d] [Go] [neex/phuip-fpizdam](https://github.com/neex/phuip-fpizdam) Exploit for CVE-2019-11043
+- [**1464**星][6m] [Py] [oros42/imsi-catcher](https://github.com/oros42/imsi-catcher) This program show you IMSI numbers of cellphones around you.
+- [**1463**星][7d] [C] [ufrisk/pcileech](https://github.com/ufrisk/pcileech) DMA攻击工具。通过 PCIe 硬件设备使用 DMA,直接读写目标系统的内存。目标系统不需要安装驱动。
+- [**1462**星][9d] [edoverflow/can-i-take-over-xyz](https://github.com/edoverflow/can-i-take-over-xyz) "Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.
+- [**1459**星][3d] [Py] [enablesecurity/wafw00f](https://github.com/enablesecurity/wafw00f) 识别保护网站的WAF产品
+- [**1458**星][1y] [C++] [acaudwell/logstalgia](https://github.com/acaudwell/logstalgia) a visualization tool that replays or streams web server access logs as a retro arcade game simulation.
+- [**1455**星][1y] [Py] [d4vinci/cr3dov3r](https://github.com/d4vinci/cr3dov3r) Know the dangers of credential reuse attacks.
+- [**1453**星][13d] [C++] [srslte/srslte](https://github.com/srslte/srslte) Open source SDR LTE software suite from Software Radio Systems (SRS)
+- [**1451**星][2d] [Py] [rocky/python-uncompyle6](https://github.com/rocky/python-uncompyle6) Python反编译器,跨平台
+- [**1447**星][3y] [tiancode/learn-hacking](https://github.com/tiancode/learn-hacking) 开始学习Kali Linux 各种破解教程 渗透测试 逆向工程 HackThisSite挑战问题解答
+- [**1447**星][3y] [tiancode/learn-hacking](https://github.com/tiancode/learn-hacking) 开始学习Kali Linux 各种破解教程 渗透测试 逆向工程 HackThisSite挑战问题解答
+- [**1447**星][2m] [Py] [neo23x0/loki](https://github.com/neo23x0/loki) Loki - Simple IOC and Incident Response Scanner
+- [**1446**星][5d] [C] [tianocore/edk2](https://github.com/tianocore/edk2) A modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications
+- [**1446**星][20d] [Go] [skydive-project/skydive](https://github.com/skydive-project/skydive) An open source real-time network topology and protocols analyzer
+- [**1446**星][14d] [C++] [microsoft/seal](https://github.com/microsoft/seal) Microsoft SEAL is an easy-to-use and powerful homomorphic encryption library.
+- [**1445**星][3m] [C++] [vaibhavpandeyvpz/apkstudio](https://github.com/vaibhavpandeyvpz/apkstudio) Open-source, cross platform Qt based IDE for reverse-engineering Android application packages.
+- [**1437**星][5d] [Go] [google/gapid](https://github.com/google/gapid) Graphics API Debugger
+- [**1436**星][20d] [Kotlin] [cypherpunkarmory/userland](https://github.com/cypherpunkarmory/userland) The easiest way to run a Linux distribution or application on Android
+- [**1433**星][11m] [C] [tpruvot/ccminer](https://github.com/tpruvot/ccminer) CUDA Open Source miner project, for most nvidia cards
+- [**1433**星][1y] [TS] [pedronauck/reworm](https://github.com/pedronauck/reworm)
+- [**1432**星][6m] [C++] [x64dbg/scyllahide](https://github.com/x64dbg/scyllahide) Advanced usermode anti-anti-debugger
+- [**1432**星][2m] [C] [feralinteractive/gamemode](https://github.com/feralinteractive/gamemode) Optimise Linux system performance on demand
+- [**1429**星][5y] [C++] [gdbinit/machoview](https://github.com/gdbinit/machoview) MachOView fork
+- [**1427**星][9d] [ObjC] [nabla-c0d3/ssl-kill-switch2](https://github.com/nabla-c0d3/ssl-kill-switch2) Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS and OS X Apps
+- [**1426**星][20d] [C++] [plasma-umass/coz](https://github.com/plasma-umass/coz) Finding Code that Counts with Causal Profiling
+- [**1426**星][4y] [C++] [aappleby/smhasher](https://github.com/aappleby/smhasher) Automatically exported from code.google.com/p/smhasher
+- [**1425**星][3m] [Go] [google/stenographer](https://github.com/google/stenographer) Stenographer is a packet capture solution which aims to quickly spool all packets to disk, then provide simple, fast access to subsets of those packets. Discussion/announcements at stenographer@googlegroups.com
+- [**1424**星][8y] [Py] [moxie0/sslstrip](https://github.com/moxie0/sslstrip) A tool for exploiting Moxie Marlinspike's SSL "stripping" attack.
+- [**1424**星][11m] [Java] [aslody/legend](https://github.com/aslody/legend) (Android)无需Root即可Hook Java方法的框架, 支持Dalvik和Art环境
+- [**1423**星][14d] [Go] [google/google-ctf](https://github.com/google/google-ctf) Google CTF
+- [**1422**星][3y] [Py] [nathanlopez/stitch](https://github.com/nathanlopez/stitch) Python Remote Administration Tool (RAT)
+- [**1422**星][3y] [mandatoryprogrammer/northkoreadnsleak](https://github.com/mandatoryprogrammer/northkoreadnsleak) Snapshot of North Korea's DNS data taken from zone transfers.
+- [**1419**星][1m] [Py] [xdavidhu/mitmap](https://github.com/xdavidhu/mitmap)
+- [**1419**星][3y] [C] [antirez/dump1090](https://github.com/antirez/dump1090) Dump1090 is a simple Mode S decoder for RTLSDR devices
+- [**1418**星][5m] [PHP] [s4n7h0/xvwa](https://github.com/s4n7h0/xvwa) XVWA is a badly coded web application written in PHP/MySQL that helps security enthusiasts to learn application security.
+- [**1417**星][4m] [yadox666/the-hackers-hardware-toolkit](https://github.com/yadox666/the-hackers-hardware-toolkit) 用于Red Team、渗透、安全研究的最佳硬件产品集合
+- [**1417**星][4d] [Rust] [shadowsocks/shadowsocks-rust](https://github.com/shadowsocks/shadowsocks-rust) A Rust port of shadowsocks
+- [**1417**星][1m] [Go] [barnybug/cli53](https://github.com/barnybug/cli53) Command line tool for Amazon Route 53
+- [**1415**星][7d] [C] [z3apa3a/3proxy](https://github.com/z3apa3a/3proxy) 3proxy - tiny free proxy server
+- [**1414**星][8d] [C] [ettercap/ettercap](https://github.com/ettercap/ettercap) Ettercap Project
+- [**1413**星][24d] [XSLT] [lolbas-project/lolbas](https://github.com/lolbas-project/lolbas) Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
+- [**1413**星][24d] [Java] [chrisk44/hijacker](https://github.com/chrisk44/hijacker) Aircrack, Airodump, Aireplay, MDK3 and Reaver GUI Application for Android
+- [**1412**星][9d] [C] [namhyung/uftrace](https://github.com/namhyung/uftrace) Function (graph) tracer for user-space
+- [**1412**星][5m] [gitguardian/apisecuritybestpractices](https://github.com/gitguardian/apisecuritybestpractices) Resources to help you keep secrets (API keys, database credentials, certificates, ...) out of source code and remediate the issue in case of a leaked API key. Made available by GitGuardian.
+- [**1411**星][7d] [C++] [eteran/edb-debugger](https://github.com/eteran/edb-debugger) edb is a cross platform AArch32/x86/x86-64 debugger.
+- [**1411**星][3d] [Go] [cosmos72/gomacro](https://github.com/cosmos72/gomacro) Interactive Go interpreter and debugger with REPL, Eval, generics and Lisp-like macros
+- [**1410**星][3m] [Go] [hellogcc/100-gdb-tips](https://github.com/hellogcc/100-gdb-tips) A collection of gdb tips. 100 maybe just mean many here.
+- [**1408**星][3m] [HTML] [owasp/top10](https://github.com/owasp/top10) Official OWASP Top 10 Document Repository
+- [**1407**星][4d] [C++] [google/nsjail](https://github.com/google/nsjail) A light-weight process isolation tool, making use of Linux namespaces and seccomp-bpf syscall filters (with help of the kafel bpf language)
+- [**1405**星][1y] [HTML] [gwuhaolin/blog](https://github.com/gwuhaolin/blog) 浩麟的技术博客
+- [**1405**星][1y] [C++] [dotnet/llilc](https://github.com/dotnet/llilc) This repo contains LLILC, an LLVM based compiler for .NET Core. It includes a set of cross-platform .NET code generation tools that enables compilation of MSIL byte code to LLVM supported platforms.
+- [**1404**星][7d] [Java] [chinashiyu/gfw.press](https://github.com/chinashiyu/gfw.press) GFW.Press新一代军用级高强度加密抗干扰网络数据高速传输软件
+- [**1403**星][2d] [Go] [crazy-max/windowsspyblocker](https://github.com/crazy-max/windowsspyblocker)
+- [**1401**星][9m] [JS] [anttiviljami/browser-autofill-phishing](https://github.com/anttiviljami/browser-autofill-phishing) A simple demo of phishing by abusing the browser autofill feature
+- [**1399**星][16d] [Swift] [johnno1962/injectioniii](https://github.com/johnno1962/injectioniii) Re-write of Injection for Xcode in (mostly) Swift4
+- [**1397**星][1y] [Go] [filosottile/whosthere](https://github.com/filosottile/whosthere) A ssh server that knows who you are
+- [**1396**星][3y] [PS] [putterpanda/mimikittenz](https://github.com/putterpanda/mimikittenz) A post-exploitation powershell tool for extracting juicy info from memory.
+- [**1395**星][27d] [C] [quiet/org.quietmodem.quiet](https://github.com/quiet/org.quietmodem.quiet) Quiet for Android - TCP over sound
+- [**1393**星][4d] [atarity/deploy-your-own-saas](https://github.com/atarity/deploy-your-own-saas) List of "only yours" cloud services for everyday needs
+- [**1393**星][9d] [Py] [ekultek/whatwaf](https://github.com/ekultek/whatwaf) 检测并绕过WAF和保护系统
+- [**1392**星][16d] [C++] [jonathansalwan/triton](https://github.com/jonathansalwan/triton) Triton is a Dynamic Binary Analysis (DBA) framework. It provides internal components like a Dynamic Symbolic Execution (DSE) engine, a dynamic taint engine, AST representations of the x86, x86-64 and AArch64 Instructions Set Architecture (ISA), SMT simplification passes, an SMT solver interface and, the last but not least, Python bindings.
+- [**1388**星][4y] [PHP] [johntroony/php-webshells](https://github.com/johntroony/php-webshells) Common php webshells. Do not host the file(s) on your server!
+- [**1387**星][11m] [Py] [eth0izzle/bucket-stream](https://github.com/eth0izzle/bucket-stream) 通过certstream 监控多种证书 transparency 日志, 进而查找有趣的 Amazon S3 Buckets
+- [**1386**星][2y] [JS] [sqren/fb-sleep-stats](https://github.com/sqren/fb-sleep-stats) 使用Facebook追踪用户的睡觉习惯
+- [**1384**星][5d] [JS] [ix64/unlock-music](https://github.com/ix64/unlock-music) Unlock encrypted music file in browser. 在浏览器中解锁加密的音乐文件。
+- [**1381**星][6m] [Py] [almandin/fuxploider](https://github.com/almandin/fuxploider) 文件上传漏洞扫描和利用工具
+- [**1380**星][15d] [C] [dynamorio/drmemory](https://github.com/dynamorio/drmemory) Memory Debugger for Windows, Linux, Mac, and Android
+- [**1380**星][13d] [Shell] [drduh/pwd.sh](https://github.com/drduh/pwd.sh) GPG symmetric password manager
+- [**1378**星][13d] [OCaml] [mirage/mirage](https://github.com/mirage/mirage) MirageOS is a library operating system that constructs unikernels
+- [**1378**星][2d] [JS] [lockfale/osint-framework](https://github.com/lockfale/osint-framework) OSINT Framework
+- [**1375**星][15d] [Go] [unrolled/secure](https://github.com/unrolled/secure) HTTP middleware for Go that facilitates some quick security wins.
+- [**1375**星][11m] [JS] [intika/librefox](https://github.com/intika/librefox) Firefox with privacy enhancements
+- [**1374**星][4y] [C++] [valvesoftware/vogl](https://github.com/valvesoftware/vogl) OpenGL capture / playback debugger.
+- [**1373**星][5m] [Py] [s0md3v/striker](https://github.com/s0md3v/Striker) Striker is an offensive information and vulnerability scanner.
+- [**1373**星][9m] [PS] [danielbohannon/invoke-obfuscation](https://github.com/danielbohannon/invoke-obfuscation) PowerShell Obfuscator
+- [**1371**星][1m] [C] [zyantific/zydis](https://github.com/zyantific/zydis) 快速的轻量级x86/x86-64 反汇编库
+- [**1365**星][9d] [Go] [cortesi/modd](https://github.com/cortesi/modd) A flexible developer tool that runs processes and responds to filesystem changes
+- [**1363**星][2m] [Py] [fireeye/flare-floss](https://github.com/fireeye/flare-floss) 自动从恶意代码中提取反混淆后的字符串
+ - [floss](https://github.com/fireeye/flare-floss/tree/master/floss)
+ - [IDA插件](https://github.com/fireeye/flare-floss/blob/master/scripts/idaplugin.py)
+- [**1363**星][3y] [C++] [aslody/turbodex](https://github.com/aslody/turbodex) 在内存中快速加载dex
+- [**1362**星][1m] [grrrdog/java-deserialization-cheat-sheet](https://github.com/grrrdog/java-deserialization-cheat-sheet) The cheat sheet about Java Deserialization vulnerabilities
+- [**1361**星][7m] [Py] [vulnerscom/getsploit](https://github.com/vulnerscom/getsploit) Command line utility for searching and downloading exploits
+- [**1361**星][6m] [C++] [phpv8/v8js](https://github.com/phpv8/v8js) V8 Javascript Engine for PHP — This PHP extension embeds the Google V8 Javascript Engine
+- [**1359**星][2m] [C] [googleprojectzero/winafl](https://github.com/googleprojectzero/winafl) A fork of AFL for fuzzing Windows binaries
+- [**1355**星][10m] [HTML] [thelinuxchoice/blackeye](https://github.com/thelinuxchoice/blackeye) The most complete Phishing Tool, with 32 templates +1 customizable
+- [**1354**星][2d] [Py] [mitre/caldera](https://github.com/mitre/caldera) 自动化 adversary emulation 系统
+- [**1352**星][3y] [Py] [joaomatosf/jexboss](https://github.com/joaomatosf/jexboss) Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool
+- [**1351**星][3m] [C++] [raspberrypi/tools](https://github.com/raspberrypi/tools)
+- [**1350**星][4m] [C] [taviso/ctftool](https://github.com/taviso/ctftool) Interactive CTF Exploration Tool
+- [**1349**星][3y] [Py] [ddevault/evilpass](https://github.com/ddevault/evilpass) Slightly evil password strength checker
+- [**1349**星][19d] [C++] [rikkaapps/riru](https://github.com/rikkaapps/riru) Inject zygote process by replace libmemtrack
+- [**1349**星][5m] [Py] [lijiejie/githack](https://github.com/lijiejie/githack) git泄露利用脚本,通过泄露的.git文件夹下的文件,重建还原工程源代码
+- [**1348**星][10m] [rebeyond/behinder](https://github.com/rebeyond/behinder) “冰蝎”动态二进制加密网站管理客户端
+- [**1347**星][11m] [Rust] [das-labor/panopticon](https://github.com/das-labor/panopticon) A libre cross-platform disassembler.
+- [**1346**星][2y] [HTML] [daxeel/blockshell](https://github.com/daxeel/blockshell) 用于学习区块链技术概念的命令行工具, 例如 likechaining, mining,proof of work 等
+- [**1345**星][25d] [C] [x64dbg/x64dbgpy](https://github.com/x64dbg/x64dbgpy) Automating x64dbg using Python, Snapshots:
+- [**1345**星][12d] [Go] [securitywithoutborders/hardentools](https://github.com/securitywithoutborders/hardentools) 禁用许多有危险的Windows功能
+- [**1344**星][23d] [Go] [microcosm-cc/bluemonday](https://github.com/microcosm-cc/bluemonday) a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS
+- [**1343**星][23d] [Py] [s0md3v/arjun](https://github.com/s0md3v/Arjun) HTTP parameter discovery suite.
+- [**1342**星][12m] [C] [luke-jr/bfgminer](https://github.com/luke-jr/bfgminer) Modular ASIC/FPGA miner written in C, featuring overclocking, monitoring, fan speed control and remote interface capabilities.
+- [**1342**星][2m] [Go] [davrodpin/mole](https://github.com/davrodpin/mole) cli app to create ssh tunnels
+- [**1342**星][1y] [Py] [carmaa/inception](https://github.com/carmaa/inception) 利用基于PCI的DMA实现物理内存的操纵与Hacking,可以攻击FireWire,Thunderbolt,ExpressCard,PC Card和任何其他PCI / PCIe硬件接口
+- [**1341**星][3m] [Py] [maratyszcza/peachpy](https://github.com/maratyszcza/peachpy) x86-64 assembler embedded in Python
+- [**1341**星][1y] [XSLT] [api0cradle/lolbas](https://github.com/api0cradle/lolbas) Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
+- [**1340**星][1y] [kirikira/vtemplate](https://github.com/kirikira/vtemplate) v2ray的模板们
+- [**1340**星][7m] [Py] [feeicn/gsil](https://github.com/feeicn/gsil) GitHub敏感信息泄露监控,几乎实时监控,发送警告
+- [**1339**星][6y] [Perl] [intelisecurelabs/linux_exploit_suggester](https://github.com/InteliSecureLabs/Linux_Exploit_Suggester) Linux Exploit Suggester; based on operating system release number
+- [**1338**星][1m] [CSS] [undeadsec/socialfish](https://github.com/undeadsec/socialfish) 网络钓鱼培训与信息收集
+- [**1337**星][1y] [C] [madeye/proxydroid](https://github.com/madeye/proxydroid) Global Proxy for Android
+- [**1336**星][3m] [HTML] [thehive-project/thehive](https://github.com/thehive-project/thehive) a Scalable, Open Source and Free Security Incident Response Platform
+- [**1335**星][2m] [C++] [mfontanini/libtins](https://github.com/mfontanini/libtins) High-level, multiplatform C++ network packet sniffing and crafting library.
+- [**1334**星][4y] [mengskysama/shadowsocks](https://github.com/mengskysama/shadowsocks) A fast tunnel proxy that helps you bypass firewalls
+- [**1333**星][1y] [C] [gamelinux/passivedns](https://github.com/gamelinux/passivedns) A network sniffer that logs all DNS server replies for use in a passive DNS setup
+- [**1328**星][2d] [C++] [purplei2p/i2pd](https://github.com/purplei2p/i2pd) a full-featured C++ implementation of I2P client
+- [**1328**星][1y] [Py] [marten4n6/evilosx](https://github.com/marten4n6/evilosx) An evil RAT (Remote Administration Tool) for macOS / OS X.
+- [**1328**星][2y] [CoffeeScript] [atmos/camo](https://github.com/atmos/camo) all about making insecure assets look secure
+- [**1327**星][7m] [Go] [ssllabs/ssllabs-scan](https://github.com/ssllabs/ssllabs-scan) A command-line reference-implementation client for SSL Labs APIs, designed for automated and/or bulk testing.
+- [**1327**星][3d] [C] [intel/haxm](https://github.com/intel/haxm) Intel 开源的英特尔硬件加速执行管理器,通过硬件辅助的虚拟化引擎,加速 Windows/macOS 主机上的 IA emulation((x86/ x86_64) )
+- [**1327**星][10m] [C#] [cenmrev/v2rayw](https://github.com/cenmrev/v2rayw) GUI for v2ray-core on Windows
+- [**1325**星][21d] [C] [dtag-dev-sec/tpotce](https://github.com/dtag-dev-sec/tpotce) 创建多蜜罐平台T-Pot ISO 镜像
+- [**1324**星][1y] [C++] [rehints/hexrayscodexplorer](https://github.com/rehints/hexrayscodexplorer) 反编译插件, 多功能
+
+ 查看详情
+
+
+ - 自动类型重建
+ - 虚表识别/导航(反编译窗口)
+ - C-tree可视化与导出
+ - 对象浏览
+
+
+
+- [**1323**星][2d] [Go] [xiaoming2028/freenet](https://github.com/xiaoming2028/freenet) 科学上网/梯子/自由上网/翻墙 SS/SSR/V2Ray/Brook 搭建教程
+- [**1323**星][2m] [jaredthecoder/awesome-vehicle-security](https://github.com/jaredthecoder/awesome-vehicle-security)
+- [**1322**星][3d] [C] [oisf/suricata](https://github.com/OISF/suricata) a network IDS, IPS and NSM engine
+- [**1319**星][2y] [Py] [worawit/ms17-010](https://github.com/worawit/ms17-010) MS17-010
+- [**1317**星][1y] [mortenoir1/virtualbox_e1000_0day](https://github.com/mortenoir1/virtualbox_e1000_0day) VirtualBox E1000 Guest-to-Host Escape
+- [**1316**星][3m] [PS] [peewpw/invoke-psimage](https://github.com/peewpw/invoke-psimage) Encodes a PowerShell script in the pixels of a PNG file and generates a oneliner to execute
+- [**1314**星][10m] [C] [fancycode/memorymodule](https://github.com/fancycode/memorymodule) Library to load a DLL from memory.
+- [**1311**星][1m] [C++] [shadowsocks/libqtshadowsocks](https://github.com/shadowsocks/libqtshadowsocks) A lightweight and ultra-fast shadowsocks library written in C++14 with Qt framework
+- [**1309**星][12m] [Py] [xyntax/poc-t](https://github.com/xyntax/poc-t) 脚本调用框架,用于渗透测试中 采集|爬虫|爆破|批量PoC 等需要并发的任务
+- [**1309**星][3m] [Lua] [scipag/vulscan](https://github.com/scipag/vulscan) Nmap 模块,将 Nmap 转化为高级漏洞扫描器
+- [**1307**星][19d] [Py] [consensys/mythril](https://github.com/ConsenSys/mythril) Security analysis tool for EVM bytecode. Supports smart contracts built for Ethereum, Quorum, Vechain, Roostock, Tron and other EVM-compatible blockchains.
+- [**1307**星][27d] [C] [boywhp/fcn](https://github.com/boywhp/fcn) free connect your private network from anywhere
+- [**1304**星][17d] [nikitavoloboev/privacy-respecting](https://github.com/nikitavoloboev/privacy-respecting) PrivacyRespecting 服务和软件列表
+- [**1304**星][7d] [C] [cisco-talos/pyrebox](https://github.com/cisco-talos/pyrebox) 逆向沙箱,基于QEMU,Python Scriptable
+- [**1303**星][4m] [C++] [klee/klee](https://github.com/klee/klee) 基于 LLVM 的 symbolic 虚拟机
+- [**1300**星][1y] [Shell] [dana-at-cp/backdoor-apk](https://github.com/dana-at-cp/backdoor-apk) backdoor-apk is a shell script that simplifies the process of adding a backdoor to any Android APK file. Users of this shell script should have working knowledge of Linux, Bash, Metasploit, Apktool, the Android SDK, smali, etc. This shell script is provided as-is without warranty of any kind and is intended for educational purposes only.
+- [**1299**星][6d] [Go] [hacklcx/hfish](https://github.com/hacklcx/hfish) 扩展企业安全测试主动诱导型开源蜜罐框架系统,记录黑客攻击手段
+- [**1298**星][1y] [Go] [evilsocket/xray](https://github.com/evilsocket/xray) 自动化执行一些信息收集、网络映射的初始化工作
+- [**1293**星][4y] [C++] [microsoft/microsoft-pdb](https://github.com/microsoft/microsoft-pdb) Microsoft提供的有关PDB格式的信息
+- [**1293**星][5m] [JS] [feross/spoof](https://github.com/feross/spoof) Easily spoof your MAC address in macOS, Windows, & Linux!
+- [**1293**星][29d] [Java] [android-hacker/exposed](https://github.com/android-hacker/exposed) A library to use Xposed without root or recovery(or modify system image etc..).
+- [**1291**星][6d] [C] [traviscross/mtr](https://github.com/traviscross/mtr) Official repository for mtr, a network diagnostic tool
+- [**1291**星][2y] [Go] [malfunkt/hyperfox](https://github.com/malfunkt/hyperfox) 在局域网上代理和记录 HTTP 和 HTTPs 通信
+- [**1289**星][2m] [Py] [virtualabs/btlejack](https://github.com/virtualabs/btlejack) Bluetooth Low Energy Swiss-army knife
+- [**1289**星][21d] [JS] [icymind/vrouter](https://github.com/icymind/vrouter) 一个基于 VirtualBox 和 openwrt 构建的项目, 旨在实现 macOS / Windows 平台的透明代理.
+- [**1285**星][12d] [PHP] [friendsofphp/security-advisories](https://github.com/friendsofphp/security-advisories) A database of PHP security advisories
+- [**1283**星][9m] [michalmalik/linux-re-101](https://github.com/michalmalik/linux-re-101) Linux逆向资源收集
+- [**1283**星][2m] [Py] [codingo/reconnoitre](https://github.com/codingo/reconnoitre) A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.
+- [**1279**星][2m] [C] [seemoo-lab/nexmon](https://github.com/seemoo-lab/nexmon) The C-based Firmware Patching Framework for Broadcom/Cypress WiFi Chips that enables Monitor Mode, Frame Injection and much more
+- [**1279**星][9m] [Go] [perlin-network/noise](https://github.com/perlin-network/noise) A decentralized P2P networking stack written in Go.
+- [**1279**星][4y] [Py] [elvanderb/tcp-32764](https://github.com/elvanderb/tcp-32764) some codes and notes about the backdoor listening on TCP-32764 in linksys WAG200G.
+- [**1278**星][26d] [Py] [viper-framework/viper](https://github.com/viper-framework/viper) Binary analysis and management framework
+- [**1277**星][4d] [Shell] [firehol/blocklist-ipsets](https://github.com/firehol/blocklist-ipsets) ipsets dynamically updated with firehol's update-ipsets.sh script
+- [**1277**星][8d] [Py] [pyauth/pyotp](https://github.com/pyauth/pyotp) Python One-Time Password Library
+- [**1277**星][4d] [Shell] [firehol/blocklist-ipsets](https://github.com/firehol/blocklist-ipsets) ipsets dynamically updated with firehol's update-ipsets.sh script
+- [**1277**星][29d] [Go] [dreadl0ck/netcap](https://github.com/dreadl0ck/netcap) A framework for secure and scalable network traffic analysis -
+- [**1277**星][1m] [Py] [bethgelab/foolbox](https://github.com/bethgelab/foolbox) Python toolbox to create adversarial examples that fool neural networks in PyTorch, TensorFlow, Keras, …
+- [**1273**星][1y] [PS] [dafthack/mailsniper](https://github.com/dafthack/mailsniper) 在Microsoft Exchange环境中搜索邮件中包含的指定内容:密码、insider intel、网络架构信息等
+- [**1271**星][1y] [JS] [sakurity/securelogin](https://github.com/sakurity/securelogin) 针对网站和App的去中心化的认证协议
+- [**1271**星][2m] [Py] [ganapati/rsactftool](https://github.com/ganapati/rsactftool) RSA攻击工具,主要用于CTF,从弱公钥和/或uncipher数据中回复私钥
+- [**1270**星][3m] [Py] [alessandroz/beroot](https://github.com/alessandroz/beroot) Privilege Escalation Project - Windows / Linux / Mac
+- [**1269**星][3m] [Java] [googlearchive/android-runtimepermissions](https://github.com/googlearchive/android-RuntimePermissions) This sample has been deprecated/archived. Check this repo for related samples:
+- [**1269**星][3m] [Go] [solo-io/squash](https://github.com/solo-io/squash) The debugger for microservices
+- [**1269**星][1y] [Py] [ethereum/pyethapp](https://github.com/ethereum/pyethapp)
+- [**1267**星][7m] [PHP] [ganlvtech/down_52pojie_cn](https://github.com/ganlvtech/down_52pojie_cn) A single page file explorer that can be hosted on static website. 吾爱破解论坛 爱盘
+- [**1267**星][2d] [C] [aircrack-ng/aircrack-ng](https://github.com/aircrack-ng/aircrack-ng) WiFi security auditing tools suite
+- [**1263**星][4d] [JS] [forwardemail/free-email-forwarding](https://github.com/forwardemail/free-email-forwarding)
+- [**1261**星][11m] [Py] [unapibageek/ctfr](https://github.com/unapibageek/ctfr) Abusing Certificate Transparency logs for getting HTTPS websites subdomains.
+- [**1260**星][12m] [PHP] [you2php/delete](https://github.com/you2php/delete) (迫于压力,本项目停止维护,请尽快fork代码。1月1日之后删除项目)[免翻墙工具]A free and open-source youtube video proxy script [Written in PHP]
+- [**1256**星][1m] [PS] [hak5/bashbunny-payloads](https://github.com/hak5/bashbunny-payloads) The Official Bash Bunny Payload Repository
+- [**1255**星][2y] [JS] [samyk/skyjack](https://github.com/samyk/skyjack) A drone engineered to autonomously seek out, hack, and wirelessly take full control over any other Parrot or 3DR drones within wireless or flying distance, creating an army of zombie drones under your control.
+- [**1253**星][4d] [JS] [archerysec/archerysec](https://github.com/archerysec/archerysec) Centralize Vulnerability Assessment and Management for DevSecOps Team
+- [**1253**星][4m] [JS] [bubenshchykov/ngrok](https://github.com/bubenshchykov/ngrok) Expose your localhost to the web. Node wrapper for ngrok.
+- [**1251**星][3d] [Shell] [mitchellkrogza/nginx-ultimate-bad-bot-blocker](https://github.com/mitchellkrogza/nginx-ultimate-bad-bot-blocker) Nginx Block Bad Bots, Spam Referrer Blocker, Vulnerability Scanners, User-Agents, Malware, Adware, Ransomware, Malicious Sites, with anti-DDOS, Wordpress Theme Detector Blocking and Fail2Ban Jail for Repeat Offenders
+- [**1250**星][2y] [Py] [vaguileradiaz/tinfoleak](https://github.com/vaguileradiaz/tinfoleak) Twitter 智能分析工具
+- [**1247**星][1m] [Vue] [chaitin/passionfruit](https://github.com/chaitin/passionfruit) iOSapp 黑盒评估工具。功能丰富,自带基于web的 GUI
+- [**1244**星][3m] [michalmalik/osx-re-101](https://github.com/michalmalik/osx-re-101) OSX/iOS逆向资源收集
+- [**1244**星][2y] [ObjC] [krausefx/detect.location](https://github.com/krausefx/detect.location) An easy way to access the user's iOS location data without actually having access
+- [**1243**星][3m] [Shell] [rootsongjc/kubernetes-vagrant-centos-cluster](https://github.com/rootsongjc/kubernetes-vagrant-centos-cluster) Setting up a distributed Kubernetes cluster along with Istio service mesh locally with Vagrant and VirtualBox, only PoC or Demo use.
+- [**1243**星][10m] [C] [a0rtega/pafish](https://github.com/a0rtega/pafish) Pafish is a demonstration tool that employs several techniques to detect sandboxes and analysis environments in the same way as malware families do.
+- [**1242**星][9d] [Py] [thekingofduck/fuzzdicts](https://github.com/thekingofduck/fuzzdicts) Web Pentesting Fuzz 字典,一个就够了。
+- [**1241**星][4y] [firesuncn/bluelotus_xssreceiver](https://github.com/firesuncn/bluelotus_xssreceiver) XSS平台 CTF工具 Web安全工具
+- [**1241**星][1y] [Ruby] [eliotsykes/rails-security-checklist](https://github.com/eliotsykes/rails-security-checklist)
+- [**1240**星][2m] [Go] [google/martian](https://github.com/google/martian) Martian is a library for building custom HTTP/S proxies
+- [**1238**星][1y] [Kotlin] [gh0u1l5/wechatspellbook](https://github.com/gh0u1l5/wechatspellbook) 一个使用Kotlin编写的开源微信插件框架,底层需要 Xposed 或 VirtualXposed 等Hooking框架的支持,而顶层可以轻松对接Java、Kotlin、Scala等JVM系语言。让程序员能够在几分钟内编写出简单的微信插件,随意揉捏微信的内部逻辑。
+- [**1233**星][3y] [Py] [desaster/kippo](https://github.com/desaster/kippo) Kippo - SSH Honeypot
+- [**1230**星][8m] [Py] [flipkart-incubator/astra](https://github.com/flipkart-incubator/astra) 自动化的REST API安全测试脚本
+- [**1229**星][5m] [chalker/notes](https://github.com/chalker/notes) Some public notes
+- [**1228**星][3y] [C] [tsudakageyu/minhook](https://github.com/tsudakageyu/minhook) The Minimalistic x86/x64 API Hooking Library for Windows
+- [**1228**星][3d] [C++] [nasa-sw-vnv/ikos](https://github.com/nasa-sw-vnv/ikos) Static analyzer for C/C++ based on the theory of Abstract Interpretation.
+- [**1227**星][6d] [C] [datatheorem/trustkit](https://github.com/datatheorem/trustkit) Easy SSL pinning validation and reporting for iOS, macOS, tvOS and watchOS.
+- [**1227**星][1y] [Py] [danmcinerney/net-creds](https://github.com/danmcinerney/net-creds) Sniffs sensitive data from interface or pcap
+- [**1225**星][28d] [Java] [find-sec-bugs/find-sec-bugs](https://github.com/find-sec-bugs/find-sec-bugs) The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)
+- [**1224**星][3y] [CoffeeScript] [shadowsocks/shadowsocks-nodejs](https://github.com/shadowsocks/shadowsocks-nodejs)
+- [**1223**星][28d] [Go] [jsha/minica](https://github.com/jsha/minica) minica is a small, simple CA intended for use in situations where the CA operator also operates each host where a certificate will be used.
+- [**1222**星][5y] [cure53/xsschallengewiki](https://github.com/cure53/XSSChallengeWiki) Welcome to the XSS Challenge Wiki!
+- [**1222**星][4m] [Py] [owtf/owtf](https://github.com/owtf/owtf) 进攻性 Web 测试框架。着重于 OWASP + PTES,尝试统合强大的工具,提高渗透测试的效率。大部分以Python 编写
+- [**1222**星][5y] [cure53/xsschallengewiki](https://github.com/cure53/xsschallengewiki) Welcome to the XSS Challenge Wiki!
+- [**1221**星][5d] [Py] [harismuneer/ultimate-facebook-scraper](https://github.com/harismuneer/ultimate-facebook-scraper)
+- [**1221**星][13d] [Py] [google/timesketch](https://github.com/google/timesketch) Collaborative forensic timeline analysis
+- [**1221**星][1y] [Go] [cloudflare/redoctober](https://github.com/cloudflare/redoctober) Go server for two-man rule style file encryption and decryption.
+- [**1220**星][1y] [C#] [cn33liz/p0wnedshell](https://github.com/cn33liz/p0wnedshell) PowerShell Runspace Post Exploitation Toolkit
+- [**1215**星][6d] [C] [dynamorio/dynamorio](https://github.com/dynamorio/dynamorio) Dynamic Instrumentation Tool Platform
+- [**1213**星][10d] [JS] [jpcertcc/logontracer](https://github.com/jpcertcc/logontracer) 通过可视化和分析Windows事件日志来调查恶意的Windows登录
+- [**1209**星][1m] [Py] [codingo/nosqlmap](https://github.com/codingo/NoSQLMap) Automated NoSQL database enumeration and web application exploitation tool.
+- [**1208**星][6d] [ObjC] [onionbrowser/onionbrowser](https://github.com/onionbrowser/onionbrowser) An open-source, privacy-enhancing web browser for iOS, utilizing the Tor anonymity network
+- [**1207**星][7m] [riusksk/secbook](https://github.com/riusksk/secbook) 信息安全从业者书单推荐
+- [**1206**星][7d] [Java] [linkedin/dexmaker](https://github.com/linkedin/dexmaker) A utility for doing compile or runtime code generation targeting Android's Dalvik VM
+- [**1206**星][3m] [Java] [javiersantos/piracychecker](https://github.com/javiersantos/piracychecker) An Android library that prevents your app from being pirated / cracked using Google Play Licensing (LVL), APK signature protection and more. API 14+ required.
+- [**1206**星][3m] [JS] [davidbau/seedrandom](https://github.com/davidbau/seedrandom) seeded random number generator for Javascript
+- [**1205**星][4d] [YARA] [horsicq/detect-it-easy](https://github.com/horsicq/detect-it-easy) Program for determining types of files for Windows, Linux and MacOS.
+- [**1204**星][5d] [dweinstein/awesome-frida](https://github.com/dweinstein/awesome-frida) frida 资源列表
+- [**1202**星][1y] [felixgr/secure-ios-app-dev](https://github.com/felixgr/secure-ios-app-dev) iOSApp 最常见漏洞收集
+- [**1202**星][3m] [C] [droe/sslsplit](https://github.com/droe/sslsplit) 透明SSL/TLS拦截
+- [**1201**星][2y] [C] [saminiir/level-ip](https://github.com/saminiir/level-ip) a Linux userspace TCP/IP stack, implemented with TUN/TAP devices.
+- [**1201**星][3m] [C] [dgiese/dustcloud](https://github.com/dgiese/dustcloud) Xiaomi Smart Home Device Reverse Engineering and Hacking
+- [**1201**星][23d] [Py] [achillean/shodan-python](https://github.com/achillean/shodan-python) The official Python library for Shodan
+- [**1200**星][11m] [JS] [mame82/p4wnp1_aloa](https://github.com/mame82/p4wnp1_aloa) 将 Rapsberry Pi Zero W 转变成灵活的渗透平台
+- [**1198**星][1y] [Go] [rancher/convoy](https://github.com/rancher/convoy) A Docker volume plugin, managing persistent container volumes.
+- [**1198**星][8m] [joe-shenouda/awesome-cyber-skills](https://github.com/joe-shenouda/awesome-cyber-skills) A curated list of hacking environments where you can train your cyber skills legally and safely
+- [**1198**星][20d] [Py] [cve-search/cve-search](https://github.com/cve-search/cve-search) 导入CVE/CPE 到本地 MongoDB 数据库,以便后续在本地进行搜索和处理
+- [**1197**星][9m] [C] [f0rb1dd3n/reptile](https://github.com/f0rb1dd3n/reptile) LKM Linux rootkit
+- [**1192**星][1m] [Go] [smallstep/certificates](https://github.com/smallstep/certificates) 私有的证书颁发机构(X.509和SSH)和ACME服务器,用于安全的自动证书管理,因此您可以在SSH和SSO处使用TLS
+- [**1192**星][7y] [Py] [mothran/mongol](https://github.com/mothran/mongol) A simple python tool to pinpoint the IP addresses of machines working for the Great Firewall of China.
+- [**1192**星][6y] [gdbinit/gdbinit](https://github.com/gdbinit/gdbinit) Gdbinit for OS X, iOS and others - x86, x86_64 and ARM
+- [**1191**星][3m] [Py] [jtesta/ssh-mitm](https://github.com/jtesta/ssh-mitm) SSH 中间人攻击工具
+- [**1189**星][3y] [Roff] [matiasinsaurralde/facebook-tunnel](https://github.com/matiasinsaurralde/facebook-tunnel) Tunneling Internet traffic over Facebook chat.
+- [**1189**星][10m] [C] [blechschmidt/massdns](https://github.com/blechschmidt/massdns) A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)
+- [**1189**星][25d] [Shell] [anudeepnd/whitelist](https://github.com/anudeepnd/whitelist) A simple tool to add commonly white listed domains to your Pi-Hole setup.
+- [**1188**星][2m] [jadagates/shadowsocksbio](https://github.com/jadagates/shadowsocksbio) 记录一下SS的前世今生,以及一个简单的教程总结
+- [**1187**星][6d] [Py] [lyft/cartography](https://github.com/lyft/cartography) Cartography is a Python tool that consolidates infrastructure assets and the relationships between them in an intuitive graph view powered by a Neo4j database.
+- [**1186**星][3d] [C] [luigirizzo/netmap](https://github.com/luigirizzo/netmap) an framework for very fast packet I/O from userspace
+- [**1185**星][2y] [C] [mubix/post-exploitation](https://github.com/mubix/post-exploitation) post-exploitation工具收集
+- [**1181**星][8d] [C] [the-tcpdump-group/tcpdump](https://github.com/the-tcpdump-group/tcpdump) the TCPdump network dissector
+- [**1179**星][2y] [Java] [weexteam/hackernews-app-powered-by-apache-weex](https://github.com/weexteam/hackernews-App-powered-by-Apache-Weex) 首个使用 Weex 和 Vue 开发的 Hacker News 原生应用。
+- [**1178**星][4m] [C] [ambrop72/badvpn](https://github.com/ambrop72/badvpn) NCD scripting language, tun2socks proxifier, P2P VPN
+- [**1177**星][7m] [ssrarchive/shadowsocks-rss](https://github.com/ssrarchive/shadowsocks-rss) Shadowsocksr project backup
+- [**1175**星][5y] [Py] [hackappcom/ibrute](https://github.com/hackappcom/ibrute) AppleID bruteforce p0c
+- [**1174**星][28d] [Py] [cujanovic/ssrf-testing](https://github.com/cujanovic/ssrf-testing) SSRF (Server Side Request Forgery) testing resources
+- [**1173**星][3m] [Go] [shadowsocks/v2ray-plugin](https://github.com/shadowsocks/v2ray-plugin) A SIP003 plugin based on v2ray
+- [**1171**星][6d] [JS] [lirantal/is-website-vulnerable](https://github.com/lirantal/is-website-vulnerable) finds publicly known security vulnerabilities in a website's frontend JavaScript libraries
+- [**1168**星][22d] [Go] [genuinetools/reg](https://github.com/genuinetools/reg) Docker registry v2 command line client and repo listing generator with security checks.
+- [**1166**星][1m] [Go] [shawn1m/overture](https://github.com/shawn1m/overture) A customized DNS forwarder written in Go
+- [**1165**星][26d] [JS] [alonemonkey/frida-ios-dump](https://github.com/alonemonkey/frida-ios-dump) pull decrypted ipa from jailbreak device
+- [**1164**星][17d] [Py] [programa-stic/barf-project](https://github.com/programa-stic/barf-project) A multiplatform open source Binary Analysis and Reverse engineering Framework
+- [**1164**星][4y] [Ruby] [cryptosphere/cryptosphere](https://github.com/cryptosphere/cryptosphere) Encrypted peer-to-peer web application platform for decentralized, privacy-preserving applications
+- [**1162**星][4m] [C] [skeeto/endlessh](https://github.com/skeeto/endlessh) SSH tarpit that slowly sends an endless banner
+- [**1162**星][15d] [Go] [pusher/oauth2_proxy](https://github.com/pusher/oauth2_proxy) A reverse proxy that provides authentication with Google, Github or other providers.
+- [**1162**星][1m] [TS] [mgechev/ngrev](https://github.com/mgechev/ngrev) Tool for reverse engineering of Angular applications
+- [**1159**星][6y] [PHP] [lucb1e/cookielesscookies](https://github.com/lucb1e/cookielesscookies) Demo of tracking using etags instead of cookies (or localstorage or anything else)
+- [**1158**星][22d] [m4ll0k/awesome-hacking-tools](https://github.com/m4ll0k/awesome-hacking-tools) Awesome Hacking Tools
+- [**1156**星][7d] [Py] [p4-team/ctf](https://github.com/p4-team/ctf) Ctf solutions from p4 team
+- [**1155**星][3m] [Go] [mozilla/mig](https://github.com/mozilla/mig) 分布式实时数字取证和研究平台
+- [**1151**星][8m] [Py] [mebus/cupp](https://github.com/mebus/cupp) Common User Passwords Profiler (CUPP)
+- [**1150**星][1y] [HTML] [nsacyber/windows-secure-host-baseline](https://github.com/nsacyber/Windows-Secure-Host-Baseline) Windows 10和Windows Server 2016 DoD 安全主机基准设置的配置指南
+- [**1147**星][1m] [Jupyter Notebook] [ibm/adversarial-robustness-toolbox](https://github.com/ibm/adversarial-robustness-toolbox) Python library for adversarial machine learning, attacks and defences for neural networks, logistic regression, decision trees, SVM, gradient boosted trees, Gaussian processes and more with multiple framework support
+- [**1145**星][22d] [Py] [13o-bbr-bbq/machine_learning_security](https://github.com/13o-bbr-bbq/machine_learning_security) 机器学习与安全的几个Topic
+ - [Security_and_MachineLearning](https://github.com/13o-bbr-bbq/machine_learning_security/tree/master/Security_and_MachineLearning) 网络安全与机器学习课程
+ - [Vulnerabilities_of_ML](https://github.com/13o-bbr-bbq/machine_learning_security/blob/master/Vulnerabilities_of_ML/) 机器学习漏洞的汇总
+ - [Analytics](https://github.com/13o-bbr-bbq/machine_learning_security/tree/master/Analytics) 使用k-means分析捕获的数据包
+ - [CNN_test](https://github.com/13o-bbr-bbq/machine_learning_security/tree/master/CNN_test) 生成针对CNN的adversarial样例
+ - [DeepExploit](https://github.com/13o-bbr-bbq/machine_learning_security/tree/master/DeepExploit) 使用机器学习的全自动化渗透测试
+ - [Generator](https://github.com/13o-bbr-bbq/machine_learning_security/tree/master/Generator) 使用遗传算法和生成对抗网络,全自动生成大量用于Web应用程序评估的注入代码。
+ - [Recommender](https://github.com/13o-bbr-bbq/machine_learning_security/tree/master/Recommender) 推荐用于检测Web应用程序漏洞的最佳注入代码。
+ - [Saivs](https://github.com/13o-bbr-bbq/machine_learning_security/tree/master/Saivs) 发现Web应用程序中的漏洞的AI
+- [**1144**星][3y] [PS] [powershellempire/powertools](https://github.com/powershellempire/powertools) PowerShell项目的集合,重点是进攻性操作
+ - [PewPewPew](https://github.com/powershellempire/powertools/tree/master/PewPewPew) scripts that utilize a common pattern to host a script on a PowerShell webserver, invoke the IEX download cradle to download/execute the target code and post the results back to the server, and then post-process any results.
+ - [PowerBreach](https://github.com/powershellempire/powertools/tree/master/PowerBreach) a backdoor toolkit that aims to provide the user a wide variety of methods to backdoor a system.
+ - [PowerPick](https://github.com/powershellempire/powertools/tree/master/PowerPick) allowing the execution of Powershell functionality without the use of Powershell.exe
+- [**1143**星][2d] [C] [nethack/nethack](https://github.com/nethack/nethack) Official NetHack Git Repository
+- [**1143**星][4m] [C++] [cgdb/cgdb](https://github.com/cgdb/cgdb) Console front-end to the GNU debugger
+- [**1142**星][7m] [hikariobfuscator/hikari](https://github.com/HikariObfuscator/Hikari) LLVM Obfuscator
+- [**1140**星][5d] [w00t3k/awesome-cellular-hacking](https://github.com/w00t3k/awesome-cellular-hacking) Awesome-Cellular-Hacking
+- [**1140**星][2m] [HTML] [cure53/httpleaks](https://github.com/cure53/httpleaks) HTTPLeaks - All possible ways, a website can leak HTTP requests
+- [**1139**星][12d] [C] [xroche/httrack](https://github.com/xroche/httrack) download a World Wide website from the Internet to a local directory, building recursively all directories, getting html, images, and other files from the server to your computer.
+- [**1139**星][4m] [Py] [rhinosecuritylabs/pacu](https://github.com/rhinosecuritylabs/pacu) The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.
+- [**1139**星][21d] [Batchfile] [ckjbug/hacking](https://github.com/ckjbug/hacking)
+- [**1139**星][11m] [Py] [certsocietegenerale/fir](https://github.com/certsocietegenerale/fir) Fast Incident Response
+- [**1138**星][2d] [C] [shadowsocksr-live/shadowsocksr-native](https://github.com/shadowsocksr-live/shadowsocksr-native) 从容翻越党国敏感日 ShadowsocksR (SSR) native implementation for all platforms, GFW terminator
+- [**1138**星][2y] [Py] [hackathonhackers/personal-sites](https://github.com/hackathonhackers/personal-sites) List of Hackathon Hackers' personal sites.
+- [**1138**星][5d] [Py] [darkoperator/dnsrecon](https://github.com/darkoperator/dnsrecon) DNS 枚举脚本
+- [**1135**星][6m] [nebgnahz/awesome-iot-hacks](https://github.com/nebgnahz/awesome-iot-hacks) A Collection of Hacks in IoT Space so that we can address them (hopefully).
+- [**1134**星][4m] [Vue] [0xbug/hawkeye](https://github.com/0xbug/hawkeye) GitHub 泄露监控系统(GitHub Sensitive Information Leakage Monitor Spider)
+- [**1132**星][2y] [C++] [x64dbg/gleebug](https://github.com/x64dbg/gleebug) Debugging Framework for Windows.
+- [**1132**星][2y] [Py] [out0fmemory/goagent-always-available](https://github.com/out0fmemory/goagent-always-available) 一直可用的GoAgent,会定时扫描可用的google gae ip,提供可自动化获取ip运行的版本
+- [**1131**星][5m] [Py] [qyriad/fusee-launcher](https://github.com/Qyriad/fusee-launcher) NVIDIA Tegra X1处理器Fusée Gelée漏洞exploit的launcher. (Fusée Gelée: 冷启动漏洞,允许在bootROM早期, 通过NVIDIA Tegra系列嵌入式处理器上的Tegra恢复模式(RCM)执行完整、未经验证的任意代码)
+- [**1130**星][8m] [majikarp/awesome-programming-books](https://github.com/majikarp/awesome-programming-books)
+- [**1130**星][2d] [C++] [crosire/reshade](https://github.com/crosire/reshade) A generic post-processing injector for games and video software.
+- [**1129**星][22d] [HTML] [securitytxt/security-txt](https://github.com/securitytxt/security-txt) 网站定义安全策略的“标准”
+- [**1128**星][8m] [C++] [cppcon/cppcon2018](https://github.com/cppcon/cppcon2018) Slides and other materials from CppCon 2018
+- [**1127**星][3m] [Go] [mmcloughlin/avo](https://github.com/mmcloughlin/avo) Generate x86 Assembly with Go
+- [**1125**星][3m] [Py] [openai/neural-mmo](https://github.com/openai/neural-mmo) Code for the paper "Neural MMO: A Massively Multiagent Game Environment for Training and Evaluating Intelligent Agents"
+- [**1123**星][7d] [C#] [nicehash/nicehashminer](https://github.com/nicehash/NiceHashMiner) NiceHash Miner
+- [**1122**星][13d] [Java] [huangyz0918/androidwm](https://github.com/huangyz0918/androidwm) 一个支持不可见数字水印(隐写术)的android图像水印库。
+- [**1120**星][3m] [Py] [thoughtfuldev/eagleeye](https://github.com/thoughtfuldev/eagleeye) Stalk your Friends. Find their Instagram, FB and Twitter Profiles using Image Recognition and Reverse Image Search.
+- [**1120**星][2m] [bo0om/fuzz.txt](https://github.com/bo0om/fuzz.txt) Potentially dangerous files
+- [**1118**星][10m] [Py] [openrce/sulley](https://github.com/openrce/sulley) A pure-python fully automated and unattended fuzzing framework.
+- [**1117**星][1y] [paulsec/awesome-windows-domain-hardening](https://github.com/PaulSec/awesome-windows-domain-hardening) A curated list of awesome Security Hardening techniques for Windows.
+- [**1117**星][3d] [C] [blacksphere/blackmagic](https://github.com/blacksphere/blackmagic) In application debugger for ARM Cortex microcontrollers.
+- [**1116**星][6d] [PS] [microsoftdocs/virtualization-documentation](https://github.com/MicrosoftDocs/Virtualization-Documentation) Place to store our documentation, code samples, etc for public consumption.
+- [**1115**星][1y] [ObjC] [yulingtianxia/fishchat](https://github.com/yulingtianxia/fishchat) Hook WeChat.app on non-jailbroken devices.
+- [**1115**星][10m] [evilsocket/bleah](https://github.com/evilsocket/bleah) 低功耗蓝牙扫描器
+- [**1115**星][1y] [aoh/radamsa](https://github.com/aoh/radamsa) a general-purpose fuzzer
+- [**1114**星][3d] [Py] [hhyo/archery](https://github.com/hhyo/archery) SQL 审核查询平台
+- [**1113**星][5m] [Java] [manbanggroup/phantom](https://github.com/manbanggroup/phantom) 唯一零 Hook 稳定占坑类 Android 热更新插件化方案
+- [**1113**星][20d] [C++] [keystone-engine/keystone](https://github.com/keystone-engine/keystone) Keystone assembler framework: Core (Arm, Arm64, Hexagon, Mips, PowerPC, Sparc, SystemZ & X86) + bindings
+- [**1113**星][2m] [Py] [john-kurkowski/tldextract](https://github.com/john-kurkowski/tldextract) Accurately separate the TLD from the registered domain and subdomains of a URL, using the Public Suffix List.
+- [**1110**星][3y] [Shell] [fritz-smh/yi-hack](https://github.com/fritz-smh/yi-hack) Xiaomi Yi Ants camera hack
+- [**1110**星][3y] [ObjC] [dyci/dyci-main](https://github.com/dyci/dyci-main) Dynamic Code Injection Tool for Objective-C
+- [**1110**星][8m] [Py] [0x00-0x00/shellpop](https://github.com/0x00-0x00/shellpop) 在渗透中生产简易的/复杂的反向/绑定Shell
+- [**1109**星][1y] [Py] [wibiti/uncompyle2](https://github.com/wibiti/uncompyle2) Python 2.7 decompiler
+- [**1108**星][2d] [C++] [facebookincubator/oomd](https://github.com/facebookincubator/oomd) A userspace out-of-memory killer
+- [**1108**星][1y] [Py] [byt3bl33d3r/gcat](https://github.com/byt3bl33d3r/gcat) A PoC backdoor that uses Gmail as a C&C server
+- [**1105**星][5m] [zbetcheckin/security_list](https://github.com/zbetcheckin/security_list) Great security list for fun and profit
+- [**1103**星][10d] [C] [solokeys/solo](https://github.com/solokeys/solo) open security key supporting FIDO2 & U2F over USB + NFC
+- [**1103**星][23d] [slowmist/knowledge-base](https://github.com/slowmist/knowledge-base) Knowledge Base 慢雾安全团队知识库
+- [**1103**星][1y] [ObjC] [neoneggplant/eggshell](https://github.com/neoneggplant/eggshell) iOS/macOS/Linux Remote Administration Tool
+- [**1103**星][7d] [C++] [google/sandboxed-api](https://github.com/google/sandboxed-api) Sandboxed API automatically generates sandboxes for C/C++ libraries
+- [**1102**星][1y] [Py] [bugcrowd/hunt](https://github.com/bugcrowd/HUNT) Burp和ZAP的扩展收集
+- [**1100**星][13d] [Py] [gerbenjavado/linkfinder](https://github.com/gerbenjavado/linkfinder) A python script that finds endpoints in JavaScript files
+- [**1100**星][5m] [Py] [coffeehb/some-poc-or-exp](https://github.com/coffeehb/some-poc-or-exp) 各种漏洞poc、Exp的收集或编写
+- [**1099**星][19d] [Go] [sensepost/ruler](https://github.com/sensepost/ruler) 自动化利用Exchange 服务的repo
+- [**1097**星][2y] [Py] [ring04h/wydomain](https://github.com/ring04h/wydomain) to discover subdomains of your target domain
+- [**1097**星][7d] [OCaml] [binaryanalysisplatform/bap](https://github.com/binaryanalysisplatform/bap) Binary Analysis Platform
+- [**1097**星][9m] [C] [baoleiji/qilinbaoleiji](https://github.com/baoleiji/qilinbaoleiji) 堡垒机-麒麟堡垒机,集堡垒机、SSLVPN-堡垒机内置、动态口令-堡垒机内置、应用审计-堡垒机内置、数据库审计-堡垒机内置、CA证书-堡垒机内置-堡垒机内置、云桌面-堡垒机内置、密码自动修改为一体的堡垒机系统
+- [**1096**星][2m] [PHP] [tuhinshubhra/red_hawk](https://github.com/tuhinshubhra/red_hawk) 信息收集、漏洞扫描、爬虫多合一
+- [**1096**星][1y] [PS] [rasta-mouse/sherlock](https://github.com/rasta-mouse/sherlock) PowerShell script to quickly find missing software patches for local privilege escalation vulnerabilities.
+- [**1095**星][8m] [Ruby] [lionsec/xerosploit](https://github.com/lionsec/xerosploit) Efficient and advanced man in the middle framework
+- [**1092**星][10m] [Py] [secforce/sparta](https://github.com/secforce/sparta) 网络基础架构渗透测试
+- [**1091**星][3m] [JS] [leng-yue/lengyue-vcode](https://github.com/leng-yue/lengyue-vcode) 各种滑动验证码识别 [腾讯云] [易盾] [Vaptcha] [Geetest] [极验] 各种网站破解
+- [**1090**星][15d] [C] [containers/bubblewrap](https://github.com/containers/bubblewrap) Unprivileged sandboxing tool
+- [**1090**星][1m] [snoopysecurity/awesome-burp-extensions](https://github.com/snoopysecurity/awesome-burp-extensions) Burp扩展收集
+- [**1090**星][24d] [Verilog] [cliffordwolf/picorv32](https://github.com/cliffordwolf/picorv32) PicoRV32 - A Size-Optimized RISC-V CPU
+- [**1088**星][28d] [Go] [looterz/grimd](https://github.com/looterz/grimd) Fast dns proxy that can run anywhere, built to black-hole internet advertisements and malware servers.
+- [**1087**星][10d] [C++] [cxbx-reloaded/cxbx-reloaded](https://github.com/cxbx-reloaded/cxbx-reloaded) Xbox (Original) Emulator
+- [**1086**星][6y] [C] [stephenfewer/reflectivedllinjection](https://github.com/stephenfewer/reflectivedllinjection) Reflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process.
+- [**1084**星][2m] [Go] [nadoo/glider](https://github.com/nadoo/glider) 正向代理,支持若干协议
+- [**1083**星][3m] [Py] [landgrey/pydictor](https://github.com/landgrey/pydictor) A powerful and useful hacker dictionary builder for a brute-force attack
+- [**1082**星][8m] [Go] [sevlyar/go-daemon](https://github.com/sevlyar/go-daemon) A library for writing system daemons in golang.
+- [**1080**星][2m] [PHP] [nbs-system/php-malware-finder](https://github.com/nbs-system/php-malware-finder) Detect potentially malicious PHP files
+- [**1078**星][2d] [PHP] [automattic/jetpack](https://github.com/automattic/jetpack) Increase your traffic, view your stats, speed up your site, and protect yourself from hackers with Jetpack.
+- [**1077**星][3m] [Py] [storyyeller/krakatau](https://github.com/storyyeller/krakatau) Java decompiler, assembler, and disassembler
+- [**1076**星][2m] [Py] [stampery/mongoaudit](https://github.com/stampery/mongoaudit)
+- [**1075**星][3d] [Py] [offensive-security/exploitdb-bin-sploits](https://github.com/offensive-security/exploitdb-bin-sploits) Exploit Database binary exploits located in the /sploits directory
+- [**1073**星][3m] [C] [tpruvot/cpuminer-multi](https://github.com/tpruvot/cpuminer-multi) crypto cpuminer (linux + windows)
+- [**1073**星][1m] [guardrailsio/awesome-golang-security](https://github.com/guardrailsio/awesome-golang-security) Awesome Golang Security resources
+- [**1072**星][1m] [C++] [whitequark/unfork](https://github.com/whitequark/unfork) unfork(2) is the inverse of fork(2). sort of.
+- [**1072**星][2y] [C++] [fireice-uk/xmr-stak-cpu](https://github.com/fireice-uk/xmr-stak-cpu) Monero CPU miner
+- [**1071**星][3d] [Py] [googleprojectzero/domato](https://github.com/googleprojectzero/domato) ProjectZero 开源的 DOM fuzzer
+- [**1071**星][6m] [C] [tcurdt/iproxy](https://github.com/tcurdt/iproxy) Let's you connect your laptop to the iPhone to surf the web.
+- [**1071**星][5m] [Py] [nccgroup/winpayloads](https://github.com/nccgroup/winpayloads) Undetectable Windows Payload Generation
+- [**1071**星][7m] [Py] [lucifer1993/struts-scan](https://github.com/lucifer1993/struts-scan) struts2漏洞全版本检测和利用工具
+- [**1070**星][3y] [C] [citusdata/pg_shard](https://github.com/citusdata/pg_shard) ATTENTION: pg_shard is superseded by Citus, its more powerful replacement
+- [**1068**星][5y] [Py] [observerss/textfilter](https://github.com/observerss/textfilter) 敏感词过滤的几种实现+某1w词敏感词库
+- [**1065**星][3m] [C] [zerosum0x0/cve-2019-0708](https://github.com/zerosum0x0/cve-2019-0708) Scanner PoC for CVE-2019-0708 RDP RCE vuln
+- [**1065**星][7m] [PS] [nytrorst/netripper](https://github.com/nytrorst/netripper) 后渗透工具,针对Windows, 使用API Hooking拦截网络流量和加密相关函数, 可捕获明文和加密前后的内容
+- [**1063**星][2y] [wtsxdev/machine-learning-for-cyber-security](https://github.com/wtsxdev/machine-learning-for-cyber-security) Curated list of tools and resources related to the use of machine learning for cyber security
+- [**1062**星][27d] [C] [quiet/quiet](https://github.com/quiet/quiet) Transmit data with sound. Includes binaries for soundcards and .wav files.
+- [**1061**星][3m] [Py] [infosec-au/altdns](https://github.com/infosec-au/altdns) Generates permutations, alterations and mutations of subdomains and then resolves them
+- [**1060**星][2d] [Py] [forseti-security/forseti-security](https://github.com/forseti-security/forseti-security) A community-driven collection of open source tools to improve the security of your Google Cloud Platform environments
+- [**1057**星][3y] [Perl] [samyk/usbdriveby](https://github.com/samyk/usbdriveby) USBdriveby exploits the trust of USB devices by emulating an HID keyboard and mouse, installing a cross-platform firewall-evading backdoor, and rerouting DNS within seconds of plugging it in.
+- [**1056**星][9d] [Py] [yelp/detect-secrets](https://github.com/yelp/detect-secrets) An enterprise friendly way of detecting and preventing secrets in code.
+- [**1056**星][9d] [Kotlin] [ingokegel/jclasslib](https://github.com/ingokegel/jclasslib) jclasslib bytecode viewer is a tool that visualizes all aspects of compiled Java class files and the contained bytecode.
+- [**1056**星][5d] [Rust] [fgribreau/mailchecker](https://github.com/fgribreau/mailchecker) 邮件检测库,跨语言。覆盖33078虚假邮件提供者
+- [**1054**星][9d] [C++] [simsong/tcpflow](https://github.com/simsong/tcpflow) TCP/IP packet demultiplexer. Download from:
+- [**1052**星][7m] [C] [cr-marcstevens/sha1collisiondetection](https://github.com/cr-marcstevens/sha1collisiondetection) Library and command line tool to detect SHA-1 collision in a file
+- [**1052**星][2m] [Boo] [byt3bl33d3r/silenttrinity](https://github.com/byt3bl33d3r/silenttrinity) An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR
+- [**1051**星][9d] [C++] [wavm/wavm](https://github.com/WAVM/WAVM) WebAssembly Virtual Machine
+- [**1051**星][27d] [Py] [sundowndev/phoneinfoga](https://github.com/sundowndev/phoneinfoga) Advanced information gathering & OSINT tool for phone numbers
+- [**1050**星][3d] [Rust] [zboxfs/zbox](https://github.com/zboxfs/zbox) Zero-details, privacy-focused in-app file system.
+- [**1049**星][14d] [Py] [yzddmr6/webshell-venom](https://github.com/yzddmr6/webshell-venom) 免杀webshell无限生成工具(利用随机异或无限免杀D盾)
+- [**1048**星][15d] [Py] [fireeye/flare-ida](https://github.com/fireeye/flare-ida) 多工具
+ - [StackStrings](https://github.com/fireeye/flare-ida/blob/master/plugins/stackstrings_plugin.py) 自动恢复手动构造的字符串
+ - [Struct Typer](https://github.com/fireeye/flare-ida/blob/master/plugins/struct_typer_plugin.py) implements the struct typing described [here](https://www.mandiant.com/blog/applying-function-types-structure-fields-ida/)
+ - [ApplyCalleeType](https://github.com/fireeye/flare-ida/blob/master/python/flare/apply_callee_type.py) specify or choose a function type for indirect calls as described [here](https://www.fireeye.com/blog/threat-research/2015/04/flare_ida_pro_script.html)
+ - [argtracker](https://github.com/fireeye/flare-ida/blob/master/python/flare/argtracker.py) 识别函数使用的静态参数
+ - [idb2pat](https://github.com/fireeye/flare-ida/blob/master/python/flare/idb2pat.py) FLIRT签名生成
+ - [objc2_analyzer](https://github.com/fireeye/flare-ida/blob/master/python/flare/objc2_analyzer.py) 在目标Mach-O可执行文件的与Objective-C运行时相关的部分中定义的选择器引用及其实现之间创建交叉引用
+ - [MSDN Annotations](https://github.com/fireeye/flare-ida/tree/master/python/flare/IDB_MSDN_Annotator) 从XML文件中提取MSDN信息,添加到IDB数据库中
+ - [ironstrings](https://github.com/fireeye/flare-ida/tree/master/python/flare/ironstrings) 使用代码模拟执行(flare-emu), 恢复构造的字符串
+ - [Shellcode Hashes](https://github.com/fireeye/flare-ida/tree/master/shellcode_hashes) 生成Hash数据库
+- [**1046**星][20d] [denji/awesome-http-benchmark](https://github.com/denji/awesome-http-benchmark) HTTP(S) benchmark tools, testing/debugging, & restAPI (RESTful)
+- [**1045**星][5m] [Py] [woj-ciech/kamerka](https://github.com/woj-ciech/kamerka) 利用Shodan构建交互式摄像头地图
+- [**1044**星][9m] [Shell] [firehol/firehol](https://github.com/firehol/firehol) A firewall for humans...
+- [**1041**星][2m] [C] [trailofbits/ctf](https://github.com/trailofbits/ctf) CTF Field Guide
+- [**1041**星][3m] [Py] [h4ckforjob/dirmap](https://github.com/h4ckforjob/dirmap) 一个高级web目录、文件扫描工具,功能将会强于DirBuster、Dirsearch、cansina、御剑。
+- [**1040**星][8m] [Py] [lucifer1993/angelsword](https://github.com/lucifer1993/angelsword) Python3编写的CMS漏洞检测框架
+- [**1040**星][4m] [PS] [kevin-robertson/inveigh](https://github.com/kevin-robertson/inveigh) Windows PowerShell ADIDNS/LLMNR/mDNS/NBNS spoofer/man-in-the-middle tool
+- [**1040**星][2m] [JS] [freetubeapp/freetube](https://github.com/freetubeapp/freetube) An Open Source YouTube app for privacy
+- [**1040**星][1m] [Py] [ezaquarii/vpn-at-home](https://github.com/ezaquarii/vpn-at-home) 1-click, self-hosted deployment of OpenVPN with DNS ad blocking sinkhole
+- [**1039**星][1y] [Batchfile] [nextronsystems/aptsimulator](https://github.com/NextronSystems/APTSimulator) A toolset to make a system look as if it was the victim of an APT attack
+- [**1038**星][1m] [C] [t6x/reaver-wps-fork-t6x](https://github.com/t6x/reaver-wps-fork-t6x) 攻击 Wi-Fi Protected Setup (WPS), 恢复 WPA/WPA2 密码
+- [**1038**星][7m] [nanopool/claymore-dual-miner](https://github.com/nanopool/claymore-dual-miner) Claymore's Dual Ethereum+Decred_Siacoin_Lbry AMD+NVIDIA GPU Miner
+- [**1037**星][2m] [C] [xairy/kernel-exploits](https://github.com/xairy/kernel-exploits) My proof-of-concept exploits for the Linux kernel
+- [**1037**星][7m] [HTML] [sindresorhus/devtools-detect](https://github.com/sindresorhus/devtools-detect) Detect if DevTools is open and its orientation
+- [**1036**星][15d] [HTML] [defectdojo/django-defectdojo](https://github.com/defectdojo/django-defectdojo) DefectDojo is an open-source application vulnerability correlation and security orchestration tool.
+- [**1036**星][5y] [C] [crmulliner/adbi](https://github.com/crmulliner/adbi) Android Dynamic Binary Instrumentation Toolkit
+- [**1032**星][3y] [C++] [zyq8709/dexhunter](https://github.com/zyq8709/dexhunter) General Automatic Unpacking Tool for Android Dex Files
+- [**1032**星][1y] [PS] [danmcinerney/icebreaker](https://github.com/danmcinerney/icebreaker) Gets plaintext Active Directory credentials if you're on the internal network but outside the AD environment
+- [**1029**星][20d] [Py] [nccgroup/scoutsuite](https://github.com/nccgroup/scoutsuite) Multi-Cloud Security Auditing Tool
+- [**1029**星][2y] [PS] [nccgroup/redsnarf](https://github.com/nccgroup/redsnarf) 渗透测试工具,使用OpSec Safe 技术从 Windows 工作站,服务器和域控制器提取 hash 和凭据
+- [**1029**星][5m] [C] [govolution/avet](https://github.com/govolution/avet) 免杀工具
+- [**1029**星][29d] [denji/nginx-tuning](https://github.com/denji/nginx-tuning) NGINX tuning for best performance
+- [**1028**星][18d] [Py] [ct-open-source/tuya-convert](https://github.com/ct-open-source/tuya-convert) A collection of scripts to flash Tuya IoT devices to alternative firmwares
+- [**1025**星][6m] [stephenturner/oneliners](https://github.com/stephenturner/oneliners) Useful bash one-liners for bioinformatics.
+- [**1025**星][2y] [ObjC] [zhengmin1989/ios_ice_and_fire](https://github.com/zhengmin1989/ios_ice_and_fire) iOS冰与火之歌
+- [**1024**星][12m] [Go] [twitchyliquid64/subnet](https://github.com/twitchyliquid64/subnet) Simple, auditable & elegant VPN, built with TLS mutual authentication and TUN.
+- [**1024**星][1y] [naetw/ctf-pwn-tips](https://github.com/naetw/ctf-pwn-tips) Here record some tips about pwn. Something is obsoleted and won't be updated. Sorry about that.
+- [**1021**星][3m] [Py] [byt3bl33d3r/deathstar](https://github.com/byt3bl33d3r/deathstar) 在Active Directory环境中使用Empire自动获取域管理员权限
+- [**1019**星][27d] [Shell] [trimstray/sandmap](https://github.com/trimstray/sandmap) 使用NMap引擎, 辅助网络和系统侦查(reconnaissance)
+- [**1018**星][1m] [C] [s0lst1c3/eaphammer](https://github.com/s0lst1c3/eaphammer) 针对WPA2-Enterprise 网络的定向双重攻击(evil twin attacks)
+- [**1018**星][9m] [Go] [maliceio/malice](https://github.com/maliceio/malice) 开源版的VirusTotal
+- [**1014**星][3m] [HTML] [owasp/nodegoat](https://github.com/owasp/nodegoat) 学习OWASP安全威胁Top10如何应用到Web App的,以及如何处理
+- [**1014**星][2y] [JS] [umpox/zero-width-detection](https://github.com/umpox/zero-width-detection) Fingerprinting小技巧
+- [**1014**星][11d] [Py] [securestate/king-phisher](https://github.com/securestate/king-phisher) Phishing Campaign Toolkit
+- [**1014**星][5m] [C++] [everdox/infinityhook](https://github.com/everdox/infinityhook) Hook system calls, context switches, page faults and more.
+- [**1014**星][1y] [Py] [d4vinci/dr0p1t-framework](https://github.com/d4vinci/dr0p1t-framework) 创建免杀的Dropper
+- [**1014**星][3y] [C++] [aguinet/wannakey](https://github.com/aguinet/wannakey) XP 系统从内存中恢复 Wanacry 最初使用 RSA 私钥(要求主机感染后未重启)
+- [**1011**星][8d] [Rich Text Format] [decalage2/oletools](https://github.com/decalage2/oletools) oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.
+- [**1009**星][1y] [C] [ionescu007/simplevisor](https://github.com/ionescu007/simplevisor) 英特尔VT-x虚拟机管理程序,简单、可移植。支持Windows和UEFI
+- [**1008**星][24d] [Swift] [rockbruno/swiftshield](https://github.com/rockbruno/swiftshield) wift/OBJ-C Obfuscator
+- [**1008**星][5d] [JS] [monzo/response](https://github.com/monzo/response) Monzo's real-time incident response and reporting tool
+- [**1008**星][1y] [JS] [0xsobky/hackvault](https://github.com/0xsobky/hackvault) A container repository for my public web hacks!
+- [**1007**星][1m] [Go] [justinas/nosurf](https://github.com/justinas/nosurf) CSRF protection middleware for Go.
+- [**1004**星][1y] [Py] [entropy1337/infernal-twin](https://github.com/entropy1337/infernal-twin) 自动化无线Hack 工具
+- [**1002**星][24d] [C] [hacksysteam/hacksysextremevulnerabledriver](https://github.com/hacksysteam/hacksysextremevulnerabledriver) HackSys Extreme Vulnerable Windows Driver
+- [**1002**星][1m] [C] [google/fuzzer-test-suite](https://github.com/google/fuzzer-test-suite) Set of tests for fuzzing engines
+- [**1001**星][7m] [sundowndev/hacker-roadmap](https://github.com/sundowndev/hacker-roadmap)
+- [**1001**星][9m] [onethawt/reverseengineering-reading-list](https://github.com/onethawt/reverseengineering-reading-list) A list of Reverse Engineering articles, books, and papers
+- [**1000**星][11m] [Batchfile] [sagishahar-zz/lpeworkshop](https://github.com/sagishahar-zz/lpeworkshop) Windows / Linux Local Privilege Escalation Workshop
+- [**1000**星][5m] [adolfintel/windows10-privacy](https://github.com/adolfintel/windows10-privacy) Win10隐私指南
+- [**999**星][28d] [C] [bt3gl/pentesting-toolkit](https://github.com/bt3gl/Pentesting-Toolkit) 渗透测试,CTF和战争游戏的工具收集
+- [**999**星][2m] [ObjC] [lmirosevic/gbdeviceinfo](https://github.com/lmirosevic/gbdeviceinfo) Detects the hardware, software and display of the current iOS or Mac OS X device at runtime.
+- [**999**星][8m] [Go] [adtac/autovpn](https://github.com/adtac/autovpn) THIS PROJECT IS UNMAINTAINED.
+- [**998**星][5m] [Ruby] [mdp/rotp](https://github.com/mdp/rotp) Ruby One Time Password library
+- [**998**星][12m] [C#] [kenvix/usbcopyer](https://github.com/kenvix/usbcopyer) 插上U盘自动按需复制文件
+- [**998**星][2y] [Py] [danmcinerney/xsscrapy](https://github.com/danmcinerney/xsscrapy) XSS spider - 66/66 wavsep XSS detected
+- [**997**星][12m] [PHP] [secwiki/cms-hunter](https://github.com/secwiki/cms-hunter) CMS漏洞测试用例集合
+- [**996**星][1m] [Py] [x0rz/phishing_catcher](https://github.com/x0rz/phishing_catcher) 使用Certstream 捕获钓鱼域名
+- [**995**星][9m] [Go] [gencebay/httplive](https://github.com/gencebay/httplive) HTTP Request & Response Service, Mock HTTP
+- [**992**星][4m] [C] [gsliepen/tinc](https://github.com/gsliepen/tinc) a VPN daemon
+- [**990**星][1y] [Py] [tylous/sniffair](https://github.com/tylous/sniffair) 无线渗透框架. 解析被动收集的无线数据, 执行复杂的无线攻击
+- [**988**星][3d] [C#] [k8gege/ladon](https://github.com/k8gege/ladon) 大型内网渗透扫描器&Cobalt Strike,包含信息收集/端口扫描/服务识别/网络资产/密码爆破/漏洞检测/漏洞利用。漏洞检测含MS17010、Weblogic、ActiveMQ、Tomcat等,密码口令爆破含(Mysql、Oracle、MSSQL)、FTP、SSH(Linux)、VNC、Windows(IPC、WMI、SMB)等,可高度自定义插件支持.NET程序集、DLL(C#/Delphi/VC)、PowerShell等语言编写的插件,支持通过配置INI批量调用任意外部程序或命令,EXP生成器一键生成Web漏洞POC,可快速扩展扫描或利用能力。支持Cobalt Strike插件化直接内存加载Ladon扫描快速拓展内网横向移动
+- [**988**星][3y] [JS] [yahooarchive/xss-filters](https://github.com/YahooArchive/xss-filters) Secure XSS Filters.
+- [**988**星][4m] [Go] [nosequeldeebee/blockchain-tutorial](https://github.com/nosequeldeebee/blockchain-tutorial) Write and publish your own blockchain in less than 200 lines of Go
+- [**987**星][10m] [Py] [xiphosresearch/exploits](https://github.com/xiphosresearch/exploits) Miscellaneous exploit code
+- [**987**星][3d] [Py] [jekil/awesome-hacking](https://github.com/jekil/awesome-hacking) Awesome hacking is an awesome collection of hacking tools.
+- [**986**星][1m] [C] [wiire-a/pixiewps](https://github.com/wiire-a/pixiewps) An offline Wi-Fi Protected Setup brute-force utility
+- [**986**星][1y] [HTML] [sensepost/mana](https://github.com/sensepost/mana) *DEPRECATED* mana toolkit for wifi rogue AP attacks and MitM
+- [**986**星][3m] [Py] [ekultek/bluekeep](https://github.com/ekultek/bluekeep) Proof of concept for CVE-2019-0708
+- [**981**星][1y] [Py] [fsecurelabs/needle](https://github.com/FSecureLABS/needle) The iOS Security Testing Framework
+- [**980**星][1m] [C] [zardus/preeny](https://github.com/zardus/preeny) Some helpful preload libraries for pwning stuff.
+- [**980**星][2m] [Py] [syss-research/seth](https://github.com/syss-research/seth) Perform a MitM attack and extract clear text credentials from RDP connections
+- [**979**星][1m] [hoshsadiq/adblock-nocoin-list](https://github.com/hoshsadiq/adblock-nocoin-list) Block lists to prevent JavaScript miners
+- [**978**星][23d] [JS] [lukechilds/reverse-shell](https://github.com/lukechilds/reverse-shell) Reverse Shell as a Service
+- [**978**星][12d] [Py] [kiminewt/pyshark](https://github.com/kiminewt/pyshark) Python wrapper for tshark, allowing python packet parsing using wireshark dissectors
+- [**978**星][2m] [Jupyter Notebook] [hyperparticle/one-pixel-attack-keras](https://github.com/hyperparticle/one-pixel-attack-keras) Keras implementation of "One pixel attack for fooling deep neural networks" using differential evolution on Cifar10 and ImageNet
+- [**978**星][3y] [Py] [dowsnature/dowsdns](https://github.com/dowsnature/dowsdns) 快速翻跃中国防火墙
+- [**978**星][26d] [Jupyter Notebook] [aarshayj/analytics_vidhya](https://github.com/aarshayj/analytics_vidhya) Codes related to activities on AV including articles, hackathons and discussions.
+- [**976**星][7m] [0x4d31/awesome-threat-detection](https://github.com/0x4d31/awesome-threat-detection) A curated list of awesome threat detection and hunting resources
+- [**975**星][3y] [Py] [synack/knockknock](https://github.com/synack/knockknock) displays persistent items (scripts, commands, binaries, etc.), that are set to execute automatically on OS X
+- [**975**星][2y] [Py] [moosedojo/apt2](https://github.com/moosedojo/apt2) 自动化渗透测试工具包。执行NMap扫描, 或者导入Nexpose, Nessus, NMap扫描结果
+- [**974**星][24d] [Rust] [sozu-proxy/sozu](https://github.com/sozu-proxy/sozu) Sōzu HTTP reverse proxy, configurable at runtime, fast and safe, built in Rust. It is awesome! Ping us on gitter to know more
+- [**973**星][2m] [Py] [ondyari/faceforensics](https://github.com/ondyari/faceforensics) Github of the FaceForensics dataset
+- [**973**星][1m] [HTML] [n0tr00t/sreg](https://github.com/n0tr00t/sreg) 可对使用者通过输入email、phone、username的返回用户注册的所有互联网护照信息。
+- [**973**星][7m] [Py] [m57/dnsteal](https://github.com/m57/dnsteal) DNS Exfiltration tool for stealthily sending files over DNS requests.
+- [**973**星][12m] [Java] [huolizhuminh/networkpacketcapture](https://github.com/huolizhuminh/networkpacketcapture) It is used to capture network packet via Android VPN.
+- [**972**星][6d] [C++] [herumi/xbyak](https://github.com/herumi/xbyak) a JIT assembler for x86(IA-32)/x64(AMD64, x86-64) MMX/SSE/SSE2/SSE3/SSSE3/SSE4/FPU/AVX/AVX2/AVX-512 by C++ header
+- [**971**星][29d] [Py] [x64dbg/docs](https://github.com/x64dbg/docs) x64dbg文档
+- [**971**星][27d] [Go] [vishvananda/netlink](https://github.com/vishvananda/netlink) Simple netlink library for go.
+- [**971**星][3m] [ctfs/resources](https://github.com/ctfs/resources) A general collection of information, tools, and tips regarding CTFs and similar security competitions
+- [**969**星][4m] [Assembly] [corkami/pocs](https://github.com/corkami/pocs) Proof of Concepts (PE, PDF...)
+- [**968**星][5m] [C] [rbsec/sslscan](https://github.com/rbsec/sslscan) 测试启用SSL/TLS的服务,发现其支持的cipher suites
+- [**968**星][2m] [C] [olimex/olinuxino](https://github.com/olimex/olinuxino) OLINUXINO is Open Source / Open Hardware, low cost from EUR 24 Linux Industrial grade Single Board Computer capable to operate -25+85C
+- [**967**星][8m] [Py] [selwin/python-user-agents](https://github.com/selwin/python-user-agents) A Python library that provides an easy way to identify devices like mobile phones, tablets and their capabilities by parsing (browser) user agent strings.
+- [**967**星][4m] [Go] [dominicbreuker/pspy](https://github.com/dominicbreuker/pspy) 一个命令行工具, 无需根权限就可以窥探Linux进程
+- [**966**星][3y] [C] [cybellum/doubleagent](https://github.com/cybellum/doubleagent) Zero-Day Code Injection and Persistence Technique
+- [**966**星][3y] [Java] [androidvts/android-vts](https://github.com/androidvts/android-vts) Android Vulnerability Test Suite - In the spirit of open data collection, and with the help of the community, let's take a pulse on the state of Android security. NowSecure presents an on-device app to test for recent device vulnerabilities.
+- [**965**星][5d] [C++] [dvorka/mindforger](https://github.com/dvorka/mindforger) Thinking notebook and Markdown IDE.
+- [**965**星][1m] [C#] [cobbr/covenant](https://github.com/cobbr/covenant) Covenant is a collaborative .NET C2 framework for red teamers.
+- [**964**星][7m] [PHP] [jenssegers/optimus](https://github.com/jenssegers/optimus) id transformation With this library, you can transform your internal id's to obfuscated integers based on Knuth's integer has和
+- [**962**星][4m] [Py] [0xinfection/tidos-framework](https://github.com/0xInfection/TIDoS-Framework) Web App渗透测试框架, 攻击性, 手动
+- [**962**星][3d] [bromite/bromite](https://github.com/bromite/bromite) Bromite is Chromium plus ad blocking and privacy enhancements; take back your browser!
+- [**962**星][3y] [Py] [abatchy17/windowsexploits](https://github.com/abatchy17/windowsexploits) Windows exploits, mostly precompiled. Not being updated. Check
+- [**961**星][4y] [pillarjs/understanding-csrf](https://github.com/pillarjs/understanding-csrf) What are CSRF tokens and how do they work?
+- [**961**星][1m] [PS] [netspi/powerupsql](https://github.com/netspi/powerupsql) 攻击SQL服务器的PowerShell工具箱
+- [**961**星][3y] [Go] [jaksi/sshesame](https://github.com/jaksi/sshesame) A fake SSH server that lets everyone in and logs their activity
+- [**957**星][2m] [JS] [pillarjs/cookies](https://github.com/pillarjs/cookies) Signed and unsigned cookies based on Keygrip
+- [**956**星][2d] [Py] [shmilylty/oneforall](https://github.com/shmilylty/oneforall) 子域收集工具
+- [**956**星][27d] [Py] [fireeye/flare-fakenet-ng](https://github.com/fireeye/flare-fakenet-ng) 下一代动态网络分析工具
+- [**955**星][7d] [C++] [hasherezade/pe-sieve](https://github.com/hasherezade/pe-sieve) Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).
+- [**953**星][4m] [Py] [hatriot/zarp](https://github.com/hatriot/zarp) 网络攻击工具,主要是本地网络攻击
+- [**952**星][12d] [HTML] [sprov065/v2-ui](https://github.com/sprov065/v2-ui) 支持多协议多用户的 v2ray 面板,Support multi-protocol multi-user v2ray panel
+- [**952**星][1y] [JS] [fabienvauchelles/scrapoxy](https://github.com/fabienvauchelles/scrapoxy) Scrapoxy hides your scraper behind a cloud. It starts a pool of proxies to send your requests. Now, you can crawl without thinking about blacklisting!
+- [**951**星][8d] [Py] [mozilla/openwpm](https://github.com/mozilla/OpenWPM) A web privacy measurement framework
+- [**951**星][2y] [C] [fdiskyou/injectallthethings](https://github.com/fdiskyou/injectallthethings) Seven different DLL injection techniques in one single project.
+- [**950**星][2y] [Py] [trycatchhcf/cloakify](https://github.com/trycatchhcf/cloakify) CloakifyFactory - Data Exfiltration & Infiltration In Plain Sight; Convert any filetype into list of everyday strings, using Text-Based Steganography; Evade DLP/MLS Devices, Defeat Data Whitelisting Controls, Social Engineering of Analysts, Evade AV Detection
+- [**948**星][2y] [Py] [arnaucube/coffeeminer](https://github.com/arnaucube/coffeeMiner) collaborative (mitm) cryptocurrency mining pool in wifi networks
+- [**947**星][6m] [C] [dhavalkapil/heap-exploitation](https://github.com/dhavalkapil/heap-exploitation) This book on heap exploitation is a guide to understanding the internals of glibc's heap and various attacks possible on the heap structure.
+- [**947**星][8d] [HTML] [darksecdevelopers/hiddeneye](https://github.com/darksecdevelopers/hiddeneye) Modern Phishing Tool With Advanced Functionality And Multiple Tunnelling Services [ Android-Support-Available ]
+- [**946**星][9d] [Py] [sashs/ropper](https://github.com/sashs/ropper) Display information about files in different file formats and find gadgets to build rop chains for different architectures (x86/x86_64, ARM/ARM64, MIPS, PowerPC, SPARC64). For disassembly ropper uses the awesome Capstone Framework.
+- [**946**星][4d] [Go] [ffuf/ffuf](https://github.com/ffuf/ffuf) Fast web fuzzer written in Go
+- [**946**星][2m] [C] [basil00/divert](https://github.com/basil00/divert) 用户模式数据包拦截库,适用于Win 7/8/10
+- [**944**星][2m] [C++] [cisco-talos/clamav-devel](https://github.com/Cisco-Talos/clamav-devel) ClamAV Development - FAQ is here:
+- [**944**星][2y] [C#] [invoke-ir/powerforensics](https://github.com/invoke-ir/powerforensics) PowerForensics provides an all in one platform for live disk forensic analysis
+- [**944**星][4m] [Py] [intelxed/xed](https://github.com/intelxed/xed) x86 encoder decoder
+- [**943**星][13d] [Py] [theupdateframework/tuf](https://github.com/theupdateframework/tuf) A framework for securing software update systems
+- [**942**星][2y] [HTML] [chybeta/software-security-learning](https://github.com/chybeta/software-security-learning) Software-Security-Learning
+- [**941**星][3m] [zhaoweih/shadowsocks-tutorial](https://github.com/zhaoweih/shadowsocks-tutorial)
+- [**940**星][5y] [Py] [mothran/bunny](https://github.com/mothran/bunny) Bunny is a wireless. meshing, darknet that uses 802.11 to hide its communications
+- [**940**星][10m] [Shell] [1n3/findsploit](https://github.com/1n3/findsploit) Find exploits in local and online databases instantly
+- [**939**星][1y] [JS] [netflix-skunkworks/sleepy-puppy](https://github.com/Netflix-Skunkworks/sleepy-puppy) Sleepy Puppy XSS Payload Management Framework
+- [**939**星][12m] [Py] [gaasedelen/lighthouse](https://github.com/gaasedelen/lighthouse) 从DBI中收集代码覆盖情况,在IDA/Binja中映射、浏览、查看
+ - [coverage-frida](https://github.com/gaasedelen/lighthouse/blob/master/coverage/frida/README.md) 使用Frida收集信息
+ - [coverage-pin](https://github.com/gaasedelen/lighthouse/blob/master/coverage/pin/README.md) 使用Pin收集覆盖信息
+ - [插件](https://github.com/gaasedelen/lighthouse/blob/master/plugin/lighthouse_plugin.py) 支持IDA和BinNinja
+- [**939**星][3y] [Py] [countercept/doublepulsar-detection-script](https://github.com/countercept/doublepulsar-detection-script) python脚本,用于扫描网络中感染DOUBLEPULSAR的操作系统。
+- [**939**星][3m] [Py] [christophetd/cloudflair](https://github.com/christophetd/cloudflair) a tool to find origin servers of websites protected by CloudFlare who are publicly exposed and don't restrict network access to the CloudFlare IP ranges as they should
+- [**939**星][4m] [bugcrowd/bugcrowd_university](https://github.com/bugcrowd/bugcrowd_university) 研究者社区的教育内容
+- [**938**星][9m] [wtsxdev/penetration-testing](https://github.com/wtsxdev/penetration-testing) List of awesome penetration testing resources, tools and other shiny things
+- [**938**星][17d] [Py] [knownsec/pocsuite3](https://github.com/knownsec/pocsuite3) 远程漏洞测试与PoC开发框架
+- [**938**星][2y] [Perl] [infobyte/evilgrade](https://github.com/infobyte/evilgrade) 供应链攻击: 注入虚假的update
+- [**936**星][2y] [deepspaceharbor/awesome-ai-security](https://github.com/DeepSpaceHarbor/Awesome-AI-Security)
+- [**936**星][2y] [C++] [securesocketfunneling/ssf](https://github.com/securesocketfunneling/ssf) 网络工具包:TCP 和 UDP 端口转发、SOCKS 代理、远程 shell,跨平台
+- [**935**星][1y] [Java] [google/firing-range](https://github.com/google/firing-range) a test bed for web application security scanners, providing synthetic, wide coverage for an array of vulnerabilities.
+- [**935**星][2m] [Py] [d4vinci/one-lin3r](https://github.com/d4vinci/one-lin3r) 轻量级框架,提供在渗透测试中需要的所有one-liners
+- [**934**星][13d] [Ruby] [david942j/one_gadget](https://github.com/david942j/one_gadget) The best tool for finding one gadget RCE in libc.so.6
+- [**933**星][2y] [Py] [tomchop/malcom](https://github.com/tomchop/malcom) Malcom - Malware Communications Analyzer
+- [**931**星][30d] [Py] [nullsecuritynet/tools](https://github.com/nullsecuritynet/tools) Security and Hacking Tools, Exploits, Proof of Concepts, Shellcodes, Scripts.
+- [**930**星][5m] [threathuntingproject/threathunting](https://github.com/threathuntingproject/threathunting) An informational repo about hunting for adversaries in your IT environment.
+- [**930**星][7d] [C++] [kde/heaptrack](https://github.com/kde/heaptrack) Linux的堆内存分析器
+- [**930**星][6d] [OCaml] [airbus-seclab/bincat](https://github.com/airbus-seclab/bincat) 二进制代码静态分析工具。值分析(寄存器、内存)、污点分析、类型重建和传播(propagation)、前向/后向分析
+- [**929**星][7m] [Py] [osirislab/hack-night](https://github.com/osirislab/Hack-Night) a sobering introduction to offensive security
+- [**928**星][3y] [C] [tyilo/insert_dylib](https://github.com/tyilo/insert_dylib) Command line utility for inserting a dylib load command into a Mach-O binary
+- [**928**星][9m] [C] [microsoft/windows-driver-frameworks](https://github.com/microsoft/windows-driver-frameworks) Windows驱动框架(WDF)
+- [**927**星][2y] [C++] [genoil/cpp-ethereum](https://github.com/genoil/cpp-ethereum) [Warning: Repo inactive] Ethereum GPU miner with OpenCL, CUDA and stratum support
+- [**927**星][1y] [Py] [m4n3dw0lf/pythem](https://github.com/m4n3dw0lf/pythem) 多功能渗透测试框架
+- [**927**星][4m] [Py] [airbnb/binaryalert](https://github.com/airbnb/binaryalert) 实时恶意代码检测,无需服务器
+- [**926**星][3y] [Eagle] [samyk/keysweeper](https://github.com/samyk/keysweeper) KeySweeper is a stealthy Arduino-based device, camouflaged as a functioning USB wall charger, that wirelessly and passively sniffs, decrypts, logs and reports back (over GSM) all keystrokes from any Microsoft wireless keyboard in the vicinity.
+- [**925**星][8m] [JS] [song-li/cross_browser](https://github.com/song-li/cross_browser) cross_browser_fingerprinting
+- [**924**星][5m] [PHP] [tidesec/wdscanner](https://github.com/tidesec/wdscanner) 分布式web漏洞扫描、客户管理、漏洞定期扫描、子域名枚举、端口扫描、网站爬虫、暗链检测、坏链检测、网站指纹搜集、专项漏洞检测、代理搜集及部署等功能。
+- [**924**星][1y] [C++] [miek/inspectrum](https://github.com/miek/inspectrum) analysing captured signals, primarily from software-defined radio receivers.
+- [**924**星][3d] [Py] [eliben/pyelftools](https://github.com/eliben/pyelftools) Parsing ELF and DWARF in Python
+- [**923**星][3m] [Ruby] [weppos/whois](https://github.com/weppos/whois) An intelligent — pure Ruby — WHOIS client and parser.
+- [**923**星][2m] [Py] [tuhinshubhra/cmseek](https://github.com/tuhinshubhra/cmseek) CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and over 170 other CMSs
+- [**923**星][3m] [Py] [sa7mon/s3scanner](https://github.com/sa7mon/s3scanner) Scan for open AWS S3 buckets and dump the contents
+- [**922**星][1y] [Shell] [ywb94/openwrt-ssr](https://github.com/ywb94/openwrt-ssr) ShadowsocksR-libev for OpenWrt
+- [**922**星][2y] [C#] [jaredhaight/psattack](https://github.com/jaredhaight/psattack) 组合知名的PowerShell安全工具,生成自包含/自定义的PowerShell控制台,简化在渗透中PowerShell命令的使用。支持提权、侦查、数据渗透等。
+- [**921**星][2d] [Go] [grafeas/grafeas](https://github.com/grafeas/grafeas) Artifact Metadata API
+- [**921**星][2y] [JS] [diracdeltas/sniffly](https://github.com/diracdeltas/sniffly) Sniffing browser history using HSTS
+- [**919**星][2y] [HTML] [snorby/snorby](https://github.com/snorby/snorby) Ruby On Rails Application For Network Security Monitoring
+- [**918**星][2d] [C#] [googleprojectzero/sandbox-attacksurface-analysis-tools](https://github.com/googleprojectzero/sandbox-attacksurface-analysis-tools) 沙箱攻击面(Attack Surface)分析工具,用于测试 Windows 上沙箱的各种属性
+- [**918**星][1m] [Go] [opensec-cn/kunpeng](https://github.com/opensec-cn/kunpeng) Golang编写的开源POC框架/库,以动态链接库的形式提供各种语言调用,通过此项目可快速开发漏洞检测类的系统。
+- [**918**星][6m] [PS] [api0cradle/ultimateapplockerbypasslist](https://github.com/api0cradle/ultimateapplockerbypasslist) The goal of this repository is to document the most common techniques to bypass AppLocker.
+- [**917**星][1m] [tom0li/collection-document](https://github.com/tom0li/collection-document) Collection of quality safety articles
+- [**917**星][6m] [JS] [reswitched/pegaswitch](https://github.com/reswitched/pegaswitch) PegaSwitch is an exploit toolkit for the Nintendo Switch
+- [**916**星][7y] [designativedave/androrat](https://github.com/designativedave/androrat) Remote Administration Tool for Android devices
+- [**914**星][8m] [C] [0x90/wifi-arsenal](https://github.com/0x90/wifi-arsenal) WiFi arsenal
+- [**913**星][23d] [Go] [square/ghostunnel](https://github.com/square/ghostunnel) A simple SSL/TLS proxy with mutual authentication for securing non-TLS services
+- [**912**星][8m] [ObjC] [tobefuturer/restore-symbol](https://github.com/tobefuturer/restore-symbol) A reverse engineering tool to restore stripped symbol table for iOS app.
+- [**912**星][2m] [TeX] [ethereum/yellowpaper](https://github.com/ethereum/yellowpaper) The "Yellow Paper": Ethereum's formal specification
+- [**912**星][7d] [C#] [elevenpaths/foca](https://github.com/elevenpaths/foca) Tool to find metadata and hidden information in the documents.
+- [**912**星][3y] [Rust] [dagenix/rust-crypto](https://github.com/dagenix/rust-crypto) A (mostly) pure-Rust implementation of various cryptographic algorithms.
+- [**912**星][7m] [cn0xroot/rfsec-toolkit](https://github.com/cn0xroot/rfsec-toolkit) RFSec-ToolKit is a collection of Radio Frequency Communication Protocol Hacktools.无线通信协议相关的工具集,可借助SDR硬件+相关工具对无线通信进行研究。Collect with ♥ by HackSmith
+- [**910**星][8m] [HTML] [thelinuxchoice/shellphish](https://github.com/thelinuxchoice/shellphish) 针对18个社交媒体的钓鱼工具:Instagram, Facebook, Snapchat, Github, Twitter, Yahoo, Protonmail, Spotify, Netflix, Linkedin, Wordpress, Origin, Steam, Microsoft, InstaFollowers, Gitlab, Pinterest
+- [**910**星][9m] [Shell] [ivanilves/xiringuito](https://github.com/ivanilves/xiringuito) SSH-based "VPN for poors"
+- [**910**星][8d] [C] [arm-software/arm-trusted-firmware](https://github.com/arm-software/arm-trusted-firmware) Arm A-Profile体系结构(Armv8-A和Armv7-A)的安全世界软件的参考实现,其中包括Exception Level 3(EL3)安全监视器。
+- [**909**星][2y] [Py] [sweetsoftware/ares](https://github.com/sweetsoftware/ares) Python botnet and backdoor
+- [**909**星][7y] [Java] [sonyxperiadev/apkanalyser](https://github.com/sonyxperiadev/apkanalyser)
+- [**909**星][1y] [Swift] [skreweverything/swift-keylogger](https://github.com/skreweverything/swift-keylogger) Keylogger for mac written in Swift using HID
+- [**908**星][5y] [Py] [pwnieexpress/raspberry_pwn](https://github.com/pwnieexpress/raspberry_pwn) 树莓派渗透测试套件
+- [**907**星][7y] [C] [jbangert/trapcc](https://github.com/jbangert/trapcc) Computing with traps
+- [**906**星][7m] [C++] [dfhack/dfhack](https://github.com/DFHack/dfhack) Memory hacking library for Dwarf Fortress and a set of tools that use it
+- [**906**星][3y] [Java] [summitt/burp-non-http-extension](https://github.com/summitt/burp-non-http-extension) Non-HTTP Protocol Extension (NoPE) Proxy and DNS for Burp Suite.
+- [**906**星][19d] [Py] [mschwager/fierce](https://github.com/mschwager/fierce) A DNS reconnaissance tool for locating non-contiguous IP space.
+- [**906**星][5m] [Py] [m0rtem/cloudfail](https://github.com/m0rtem/cloudfail) 通过错误配置的DNS和老数据库,发现CloudFlare网络后面的隐藏IP
+- [**905**星][2d] [C++] [seladb/pcapplusplus](https://github.com/seladb/pcapplusplus) PcapPlusPlus is a multiplatform C++ library for capturing, parsing and crafting of network packets. It is designed to be efficient, powerful and easy to use. It provides C++ wrappers for the most popular packet processing engines such as libpcap, WinPcap, DPDK and PF_RING.
+- [**904**星][3m] [ObjC] [ptoomey3/keychain-dumper](https://github.com/ptoomey3/keychain-dumper) A tool to check which keychain items are available to an attacker once an iOS device has been jailbroken
+- [**904**星][1y] [Go] [huacnlee/flora-kit](https://github.com/huacnlee/flora-kit) 基于 shadowsocks-go 做的完善实现,完全兼容 Surge 的配置文件
+- [**903**星][6y] [C] [visgean/zeus](https://github.com/visgean/zeus) NOT MY CODE! Zeus trojan horse - leaked in 2011, I am not the author. I have created this repository to make the access for study as easy as possible.
+- [**903**星][6d] [C] [cossacklabs/themis](https://github.com/cossacklabs/themis) 用于存储或通信的加密库,可用于Swift, ObjC, Android, С++, JS, Python, Ruby, PHP, Go。
+- [**902**星][28d] [Go] [mehrdadrad/radvpn](https://github.com/mehrdadrad/radvpn) Decentralized VPN
+- [**901**星][8d] [Py] [hasecuritysolutions/vulnwhisperer](https://github.com/HASecuritySolutions/VulnWhisperer) Create actionable data from your Vulnerability Scans
+- [**901**星][1y] [Py] [nixawk/labs](https://github.com/nixawk/labs) 漏洞分析实验室。包含若干CVE 漏洞(CVE-2016-6277、CVE-2017-5689…)
+- [**897**星][5y] [Java] [wszf/androrat](https://github.com/wszf/androrat) Remote Administration Tool for Android
+- [**897**星][13d] [Shell] [dominicbreuker/stego-toolkit](https://github.com/dominicbreuker/stego-toolkit) Collection of steganography tools - helps with CTF challenges
+- [**896**星][1m] [Py] [woj-ciech/leaklooker](https://github.com/woj-ciech/leaklooker) Find open databases - Powered by Binaryedge.io
+- [**896**星][10m] [C++] [secrary/injectproc](https://github.com/secrary/injectproc) Process Injection Techniques [This project is not maintained anymore]
+- [**896**星][14d] [C++] [adafruit/adafruit_ssd1306](https://github.com/adafruit/adafruit_ssd1306) Arduino library for SSD1306 monochrome 128x64 and 128x32 OLEDs
+- [**894**星][2y] [Ruby] [whitewidowscanner/whitewidow](https://github.com/whitewidowscanner/whitewidow) SQL Vulnerability Scanner
+- [**894**星][3m] [Py] [trustedsec/hate_crack](https://github.com/trustedsec/hate_crack) 使用HashCat 的自动哈希破解工具
+- [**893**星][11m] [JS] [levskaya/jslinux-deobfuscated](https://github.com/levskaya/jslinux-deobfuscated) An old version of Mr. Bellard's JSLinux rewritten to be human readable, hand deobfuscated and annotated.
+- [**891**星][4m] [derpopo/uabe](https://github.com/derpopo/uabe) Unity Assets Bundle Extractor
+- [**890**星][30d] [Go] [smallstep/cli](https://github.com/smallstep/cli) 🧰 A zero trust swiss army knife for working with X509, OAuth, JWT, OATH OTP, etc.
+- [**889**星][9d] [Py] [swisskyrepo/ssrfmap](https://github.com/swisskyrepo/ssrfmap) Automatic SSRF fuzzer and exploitation tool
+- [**888**星][11d] [C] [buserror/simavr](https://github.com/buserror/simavr) simavr is a lean, mean and hackable AVR simulator for linux & OSX
+- [**887**星][12m] [Py] [rev3rsesecurity/webmap](https://github.com/rev3rsesecurity/webmap) Nmap Web Dashboard and Reporting
+- [**887**星][2y] [Perl] [p0pr0ck5/lua-resty-waf](https://github.com/p0pr0ck5/lua-resty-waf) High-performance WAF built on the OpenResty stack
+- [**886**星][2y] [PS] [windowsexploits/exploits](https://github.com/windowsexploits/exploits) Windows Exploits
+- [**886**星][9d] [Py] [ajinabraham/nodejsscan](https://github.com/ajinabraham/nodejsscan) NodeJsScan is a static security code scanner for Node.js applications.
+- [**885**星][4m] [C] [theofficialflow/h-encore](https://github.com/theofficialflow/h-encore) Fully chained kernel exploit for the PS Vita on firmwares 3.65-3.68
+- [**885**星][5m] [JS] [dpnishant/appmon](https://github.com/dpnishant/appmon) 用于监视和篡改本地macOS,iOS和android应用程序的系统API调用的自动化框架。基于Frida。
+- [**884**星][2y] [Py] [nsacyber/gosecure](https://github.com/nsacyber/goSecure) An easy to use and portable Virtual Private Network (VPN) system built with Linux and a Raspberry Pi. #nsacyber
+- [**884**星][27d] [C++] [whid-injector/whid](https://github.com/whid-injector/whid) WiFi HID Injector - An USB Rubberducky / BadUSB On Steroids.
+- [**882**星][4m] [Kotlin] [eycorsican/kitsunebi-android](https://github.com/eycorsican/kitsunebi-android) A fully-featured V2Ray client for Android.
+- [**879**星][5d] [Py] [derekselander/lldb](https://github.com/derekselander/lldb) A collection of LLDB aliases/regexes and Python scripts to aid in your debugging sessions
+- [**879**星][7d] [C] [apple/cups](https://github.com/apple/cups) a standards-based, open source printing system
+- [**878**星][3d] [JS] [opencti-platform/opencti](https://github.com/opencti-platform/opencti) Open Cyber Threat Intelligence Platform
+- [**878**星][3y] [bastilleresearch/mousejack](https://github.com/bastilleresearch/mousejack) MouseJack device discovery and research tools
+- [**878**星][21d] [aptnotes/data](https://github.com/aptnotes/data) APTnotes data
+- [**877**星][1m] [HTML] [hookmaster/frida-all-in-one](https://github.com/hookmaster/frida-all-in-one) 《FRIDA操作手册》by
+- [**877**星][2m] [C] [504ensicslabs/lime](https://github.com/504ensicslabs/lime) LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices, such as those powered by Android. The tool supports acquiring memory either to the file system of the device or over the network. LiME is unique in that it is the first tool that allows full memory captures f…
+- [**876**星][2d] [C] [u-boot/u-boot](https://github.com/u-boot/u-boot) "Das U-Boot" Source Tree
+- [**876**星][4m] [CSS] [outflanknl/redelk](https://github.com/outflanknl/redelk) 跟踪和警告Blue Team活动以及长期运营中的更高可用性
+- [**875**星][10m] [C++] [wisk/medusa](https://github.com/wisk/medusa) An open source interactive disassembler
+- [**875**星][2m] [Ruby] [w181496/web-ctf-cheatsheet](https://github.com/w181496/web-ctf-cheatsheet) Web CTF CheatSheet
+- [**875**星][2y] [Py] [marcwebbie/passpie](https://github.com/marcwebbie/passpie) 命令行中管理密码
+- [**875**星][7m] [Py] [erocarrera/pefile](https://github.com/erocarrera/pefile) pefile is a Python module to read and work with PE (Portable Executable) files
+- [**874**星][3m] [Py] [w-digital-scanner/w9scan](https://github.com/w-digital-scanner/w9scan) Plug-in type web vulnerability scanner
+- [**874**星][8m] [Py] [redacted/xkcd-password-generator](https://github.com/redacted/xkcd-password-generator) Generate secure multiword passwords/passphrases, inspired by XKCD
+- [**872**星][1m] [C] [cisco/joy](https://github.com/cisco/joy) 捕获和分析网络流数据和intraflow数据,用于网络研究、取证和安全监视
+- [**871**星][2y] [C] [paboldin/meltdown-exploit](https://github.com/paboldin/meltdown-exploit) Meltdown exploit
+- [**871**星][3m] [escapingbug/awesome-browser-exploit](https://github.com/escapingbug/awesome-browser-exploit) awesome list of browser exploitation tutorials
+- [**870**星][1m] [C] [zhaojh329/rtty](https://github.com/zhaojh329/rtty) Access your device's terminal from anywhere via the web.
+- [**870**星][20d] [Go] [itchyny/bed](https://github.com/itchyny/bed) Binary editor written in Go
+- [**870**星][1m] [Py] [al0ne/vxscan](https://github.com/al0ne/vxscan) python3写的综合扫描工具,主要用来存活验证,敏感文件探测(目录扫描/js泄露接口/html注释泄露),WAF/CDN识别,端口扫描,指纹/服务识别,操作系统识别,POC扫描,SQL注入,绕过CDN,查询旁站等功能,主要用来甲方自测或乙方授权测试,请勿用来搞破坏。
+- [**870**星][6m] [Go] [40t/go-sniffer](https://github.com/40t/go-sniffer)
+- [**867**星][2y] [C] [aircrack-ng/aircrack-ng-archive](https://github.com/aircrack-ng/aircrack-ng-archive) Pre-migration repository. New repository ➙
+- [**867**星][3m] [Java] [googlearchive/android-bluetoothlegatt](https://github.com/googlearchive/android-BluetoothLeGatt) Migrated:
+- [**867**星][8m] [C++] [google/security-research-pocs](https://github.com/google/security-research-pocs) Proof-of-concept codes created as part of security research done by Google Security Team.
+- [**867**星][4m] [Go] [fireeye/gocrack](https://github.com/fireeye/gocrack) 火眼开源的密码破解工具,可以跨多个 GPU 服务器执行任务
+- [**866**星][10m] [Shell] [esc0rtd3w/wifi-hacker](https://github.com/esc0rtd3w/wifi-hacker) Shell Script For Attacking Wireless Connections Using Built-In Kali Tools. Supports All Securities (WEP, WPS, WPA, WPA2)
+- [**865**星][10m] [Visual Basic .NET] [mdsecactivebreach/sharpshooter](https://github.com/mdsecactivebreach/sharpshooter) Payload Generation Framework
+- [**865**星][2y] [C++] [illera88/ponce](https://github.com/illera88/ponce) 简化污点分析+符号执行
+- [**865**星][8d] [PHP] [ambionics/phpggc](https://github.com/ambionics/phpggc) PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.
+- [**863**星][9d] [Batchfile] [mr-xn/burpsuite-collections](https://github.com/mr-xn/burpsuite-collections) BurpSuite收集:包括不限于 Burp 文章、破解版、插件(非BApp Store)、汉化等相关教程,欢迎添砖加瓦---burpsuite-pro burpsuite-extender burpsuite cracked-version hackbar hacktools fuzzing fuzz-testing burp-plugin burp-extensions bapp-store brute-force-attacks brute-force-passwords waf sqlmap jar
+- [**863**星][15d] [Java] [lamster2018/easyprotector](https://github.com/lamster2018/easyprotector) 一行代码检测XP/调试/多开/模拟器/root
+- [**862**星][3d] [explife0011/awesome-windows-kernel-security-development](https://github.com/explife0011/awesome-windows-kernel-security-development) windows kernel security development
+- [**861**星][10d] [Py] [jimmy201602/webterminal](https://github.com/jimmy201602/webterminal) ssh rdp vnc telnet sftp bastion/jump web putty xshell terminal jumpserver audit realtime monitor rz/sz 堡垒机 云桌面 linux devops sftp websocket file management rz/sz 自动化运维 审计 录像 文件管理 sftp上传 实时监控 录像回放 网页版rz/sz上传下载 django
+- [**860**星][2m] [jonascz/how-to-prevent-scraping](https://github.com/jonascz/how-to-prevent-scraping) The ultimate guide on preventing Website Scraping
+- [**860**星][7m] [Py] [s0md3v/recondog](https://github.com/s0md3v/ReconDog) Reconnaissance Swiss Army Knife
+- [**858**星][10m] [Shell] [shadowsocks/luci-app-shadowsocks](https://github.com/shadowsocks/luci-app-shadowsocks) OpenWrt/LEDE LuCI for Shadowsocks-libev
+- [**858**星][18d] [Py] [ticarpi/jwt_tool](https://github.com/ticarpi/jwt_tool) 测试,调整和破解JSON Web Token 的工具包
+- [**858**星][2m] [ignitetechnologies/privilege-escalation](https://github.com/ignitetechnologies/privilege-escalation) This cheasheet is aimed at the CTF Players and Beginners to help them understand the fundamentals of Privilege Escalation with examples.
+- [**858**星][1y] [Ruby] [enjoiz/xxeinjector](https://github.com/enjoiz/xxeinjector) Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.
+- [**857**星][4d] [JS] [mellow-io/mellow](https://github.com/mellow-io/mellow) Mellow is a rule-based global transparent proxy client for Windows, macOS and Linux.
+- [**857**星][2d] [Py] [circl/ail-framework](https://github.com/circl/ail-framework) AIL framework - Analysis Information Leak framework
+- [**856**星][4m] [Py] [lijiejie/bbscan](https://github.com/lijiejie/bbscan) A vulnerability scanner focus on scanning large number of targets in short time with a minimal set of rules.
+- [**855**星][2y] [CoffeeScript] [onplus/shadowsocks-heroku](https://github.com/onplus/shadowsocks-heroku) 一键部署 Free Shadowsocks-Heroku
+- [**855**星][3d] [C++] [google/uiforetw](https://github.com/google/uiforetw) User interface for recording and managing ETW traces
+- [**854**星][10m] [Shell] [thelinuxchoice/userrecon](https://github.com/thelinuxchoice/userrecon) Find usernames across over 75 social networks
+- [**854**星][3m] [Py] [649/memcrashed-ddos-exploit](https://github.com/649/memcrashed-ddos-exploit) DDoS attack tool for sending forged UDP packets to vulnerable Memcached servers obtained using Shodan API
+- [**853**星][2y] [PS] [curi0usjack/luckystrike](https://github.com/curi0usJack/luckystrike) A PowerShell based utility for the creation of malicious Office macro documents.
+- [**853**星][2m] [JS] [vksrc/github-monitor](https://github.com/vksrc/github-monitor) Github Sensitive Information Leakage Monitor(Github信息泄漏监控系统)
+- [**853**星][2m] [Go] [ukhomeoffice/repo-security-scanner](https://github.com/ukhomeoffice/repo-security-scanner) CLI tool that finds secrets accidentally committed to a git repo, eg passwords, private keys
+- [**853**星][7m] [Go] [misecurity/x-patrol](https://github.com/misecurity/x-patrol) github泄露扫描系统
+- [**852**星][2d] [C++] [henrypp/simplewall](https://github.com/henrypp/simplewall) 为Windows 过滤平台提供的配置界面
+- [**852**星][3y] [C++] [0vercl0k/rp](https://github.com/0vercl0k/rp) rp++ is a full-cpp written tool that aims to find ROP sequences in PE/Elf/Mach-O x86/x64 binaries. It is open-source and has been tested on several OS: Debian / Windows 8.1 / Mac OSX Lion (10.7.3). Moreover, it is x64 compatible and supports Intel syntax. Standalone executables can also be directly downloaded.
+- [**851**星][1m] [Go] [sahilm/fuzzy](https://github.com/sahilm/fuzzy) Go library that provides fuzzy string matching optimized for filenames and code symbols in the style of Sublime Text, VSCode, IntelliJ IDEA et al.
+- [**851**星][13d] [Py] [nil0x42/phpsploit](https://github.com/nil0x42/phpsploit) Stealth post-exploitation framework
+- [**851**星][3y] [Py] [hubert3/isniff-gps](https://github.com/hubert3/isniff-gps) Passive sniffing tool for capturing and visualising WiFi location data disclosed by iOS devices
+- [**851**星][7d] [JS] [cloudsploit/scans](https://github.com/cloudsploit/scans) Cloud security configuration checks
+- [**850**星][1m] [C] [spacehuhn/wifi_ducky](https://github.com/spacehuhn/wifi_ducky) Upload, save and run keystroke injection payloads with an ESP8266 + ATMEGA32U4
+- [**849**星][3d] [C] [zerbea/hcxtools](https://github.com/zerbea/hcxtools) Portable solution for capturing wlan traffic and conversion to hashcat formats (recommended by hashcat) and to John the Ripper formats. hcx: h = hash, c = capture, convert and calculate candidates, x = different hashtypes
+- [**849**星][29d] [Roff] [slimm609/checksec.sh](https://github.com/slimm609/checksec.sh) 检查可执行文件(PIE, RELRO, PaX, Canaries, ASLR, Fortify Source)属性的 bash 脚本
+- [**849**星][5d] [Py] [lylemi/learn-web-hacking](https://github.com/lylemi/learn-web-hacking) Web安全学习笔记
+- [**848**星][12m] [PHP] [walkor/shadowsocks-php](https://github.com/walkor/shadowsocks-php) A php port of shadowsocks based on workerman. A socks5 proxy written in PHP.
+- [**847**星][4y] [utkusen/hidden-tear](https://github.com/utkusen/hidden-tear) an open source ransomware honeypot
+- [**847**星][2y] [Py] [nccgroup/demiguise](https://github.com/nccgroup/demiguise) HTA加密
+- [**847**星][3m] [Py] [anorov/pysocks](https://github.com/anorov/pysocks) A SOCKS proxy client and wrapper for Python.
+- [**846**星][2d] [Shell] [firmadyne/firmadyne](https://github.com/firmadyne/firmadyne) Platform for emulation and dynamic analysis of Linux-based firmware
+- [**846**星][3y] [C] [examplecode/mproxy](https://github.com/examplecode/mproxy) c 语言实现的一个最小的http代理,支持翻墙
+- [**845**星][1y] [Py] [kgretzky/evilginx](https://github.com/kgretzky/evilginx) man-in-the-middle attack framework used for phishing credentials and session cookies of any web service
+- [**844**星][3m] [Py] [x90skysn3k/brutespray](https://github.com/x90skysn3k/brutespray) 获取 nmapGNMAP 输出,自动调用 Medusa 使用默认证书爆破服务(brute-forces services)
+- [**844**星][8m] [JS] [serpicoproject/serpico](https://github.com/serpicoproject/serpico) 渗透测试报告生成和协作工具
+- [**844**星][3d] [C++] [openzwave/open-zwave](https://github.com/openzwave/open-zwave) a C++ library to control Z-Wave Networks via a USB Z-Wave Controller.
+- [**844**星][3d] [YARA] [neo23x0/signature-base](https://github.com/neo23x0/signature-base) Signature base for my scanner tools
+- [**843**星][6m] [C] [brendan-rius/c-jwt-cracker](https://github.com/brendan-rius/c-jwt-cracker) C 语言编写的 JWT 爆破工具
+- [**842**星][3y] [Shell] [hellofwy/ss-bash](https://github.com/hellofwy/ss-bash) Shadowsocks流量管理脚本
+- [**842**星][3y] [C] [gurnec/hashcheck](https://github.com/gurnec/hashcheck) HashCheck Shell Extension for Windows with added SHA2, SHA3, and multithreading; originally from code.kliu.org
+- [**842**星][5d] [C] [emsec/chameleonmini](https://github.com/emsec/chameleonmini) The ChameleonMini is a versatile contactless smartcard emulator compliant to NFC. The ChameleonMini was developed by
+- [**841**星][9d] [trimstray/iptables-essentials](https://github.com/trimstray/iptables-essentials) Common Firewall Rules and Commands.
+- [**841**星][3y] [Py] [ring04h/weakfilescan](https://github.com/ring04h/weakfilescan) 动态多线程敏感信息泄露检测工具
+- [**840**星][2m] [Go] [henson/proxypool](https://github.com/henson/proxypool) Golang实现的IP代理池
+- [**840**星][5m] [Java] [dragonite-network/dragonite-java](https://github.com/dragonite-network/dragonite-java) A reliable application level data transport protocol based on UDP, highly optimized for lossy & unstable networks. (Java version)
+- [**840**星][28d] [C#] [borntoberoot/networkmanager](https://github.com/borntoberoot/networkmanager) A powerful tool for managing networks and troubleshoot network problems!
+- [**839**星][15d] [Py] [jordanpotti/awsbucketdump](https://github.com/jordanpotti/awsbucketdump) 快速枚举 AWS S3 Buckets,查找感兴趣的文件。类似于子域名爆破,但针对S3 Bucket,有额外功能,例如下载文件等
+- [**838**星][1m] [C] [facebook/transform360](https://github.com/facebook/transform360) Transform360 is an equirectangular to cubemap transform for 360 video.
+- [**838**星][1y] [HTML] [ustayready/credsniper](https://github.com/ustayready/credsniper) CredSniper is a phishing framework written with the Python micro-framework Flask and Jinja2 templating which supports capturing 2FA tokens.
+- [**837**星][27d] [PHP] [raikia/fiercephish](https://github.com/Raikia/FiercePhish) FiercePhish is a full-fledged phishing framework to manage all phishing engagements. It allows you to track separate phishing campaigns, schedule sending of emails, and much more.
+- [**837**星][5y] [Py] [pentestmonkey/windows-privesc-check](https://github.com/pentestmonkey/windows-privesc-check) 独立工具,查找Windows系统上可导致本地提权的错误配置
+- [**837**星][3m] [JS] [creditease-sec/insight](https://github.com/creditease-sec/insight) 洞察-宜信集应用系统资产管理、漏洞全生命周期管理、安全知识库管理三位一体的平台。
+- [**836**星][2d] [Java] [sleuthkit/autopsy](https://github.com/sleuthkit/autopsy) Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by law enforcement, military, and corporate examiners to investigate what happened on a computer. You can even use it to recover photos from your camera's memory card.
+- [**836**星][7m] [Shell] [niklasb/libc-database](https://github.com/niklasb/libc-database) Build a database of libc offsets to simplify exploitation
+- [**836**星][1y] [Shell] [kpwn/iosre](https://github.com/kpwn/iosre) iOS Reverse Engineering
+- [**833**星][14d] [v33ru/iotsecurity101](https://github.com/v33ru/iotsecurity101) From IoT Pentesting to IoT Security
+- [**833**星][7m] [ObjC] [sevenbits/mac-linux-usb-loader](https://github.com/sevenbits/mac-linux-usb-loader) Boot Linux on your Mac, easily
+- [**832**星][5d] [Haskell] [galoisinc/cryptol](https://github.com/galoisinc/cryptol) The Language of Cryptography
+- [**832**星][1m] [cugu/awesome-forensics](https://github.com/cugu/awesome-forensics) A curated list of awesome forensic analysis tools and resources
+- [**831**星][17d] [C#] [pwntester/ysoserial.net](https://github.com/pwntester/ysoserial.net) 生成Payload,恶意利用不安全的 .NET 对象反序列化
+- [**831**星][5m] [Py] [ma1co/sony-pmca-re](https://github.com/ma1co/sony-pmca-re) Reverse engineering Sony PlayMemories Camera Apps
+- [**830**星][2d] [C++] [tasvideos/bizhawk](https://github.com/tasvideos/bizhawk) BizHawk is a multi-system emulator written in C#. BizHawk provides nice features for casual gamers such as full screen, and joypad support in addition to full rerecording and debugging tools for all system cores.
+- [**830**星][24d] [redhuntlabs/redhunt-os](https://github.com/redhuntlabs/redhunt-os) Virtual Machine for Adversary Emulation and Threat Hunting
+- [**830**星][9m] [Py] [ietf-wg-acme/acme](https://github.com/ietf-wg-acme/acme) A protocol for automating certificate issuance
+- [**829**星][5y] [halfkiss/zjdroid](https://github.com/halfkiss/zjdroid) 基于Xposed Framewrok的动态逆向分析模块
+- [**828**星][4y] [etsy/midas](https://github.com/etsy/midas) Mac入侵检测分析系统
+- [**827**星][7m] [Go] [tiagorlampert/chaos](https://github.com/tiagorlampert/chaos) a PoC that allow generate payloads and control remote operating system
+- [**827**星][11m] [sandboxescaper/randomrepo](https://github.com/sandboxescaper/randomrepo) Repo for random stuff
+- [**826**星][7m] [Batchfile] [kkkgo/kms_vl_all](https://github.com/kkkgo/kms_vl_all)
+- [**826**星][9d] [JS] [cypress-io/cypress-example-recipes](https://github.com/cypress-io/cypress-example-recipes) Various recipes for testing common scenarios with Cypress
+- [**825**星][2y] [PHP] [zhufaner/shadowsocks-manage-system](https://github.com/zhufaner/shadowsocks-manage-system) 科学上网管理系统
+- [**825**星][21d] [PHP] [symfony/security-csrf](https://github.com/symfony/security-csrf) 一个CsrfTokenManager类,用于生成和验证CSRF令牌
+- [**825**星][29d] [Py] [salesforce/ja3](https://github.com/salesforce/ja3) SSL/TLS 客户端指纹,用于恶意代码检测
+- [**825**星][2m] [C++] [redasmorg/redasm](https://github.com/redasmorg/redasm) The OpenSource Disassembler
+- [**824**星][3d] [GLSL] [khronosgroup/spirv-cross](https://github.com/khronosgroup/spirv-cross) a practical tool and library for performing reflection on SPIR-V and disassembling SPIR-V back to high level languages.
+- [**824**星][5m] [Shell] [danielmiessler/robotsdisallowed](https://github.com/danielmiessler/robotsdisallowed) A curated list of the most common and most interesting robots.txt disallowed directories.
+- [**824**星][4y] [PS] [clymb3r/powershell](https://github.com/clymb3r/powershell) Useful PowerShell scripts
+- [**823**星][1m] [Py] [corelan/mona](https://github.com/corelan/mona) 用于Immunity Debugger的mona.py
+- [**823**星][2y] [PS] [besimorhino/powercat](https://github.com/besimorhino/powercat) PowerShell实现的Netcat
+- [**822**星][24d] [Shell] [zfl9/ss-tproxy](https://github.com/zfl9/ss-tproxy) SS/SSR/V2Ray/Socks5 透明代理 for Linux
+- [**822**星][2d] [Py] [kerlomz/captcha_trainer](https://github.com/kerlomz/captcha_trainer) 基于深度学习的图片验证码的解决方案
+- [**821**星][6y] [Py] [ilektrojohn/creepy](https://github.com/ilektrojohn/creepy) A geolocation OSINT tool. Offers geolocation information gathering through social networking platforms.
+- [**821**星][9d] [Py] [yampelo/beagle](https://github.com/yampelo/beagle) Beagle is an incident response and digital forensics tool which transforms security logs and data into graphs.
+- [**821**星][8d] [Elixir] [nccgroup/sobelow](https://github.com/nccgroup/sobelow) Phoenix 框架安全方面的静态分析工具(Phoenix 框架:支持对webUI,接口, web性能,mobile app 或 mobile browser 进行自动化测试和监控的平台)
+- [**821**星][2d] [cveproject/cvelist](https://github.com/cveproject/cvelist) Pilot program for CVE submission through GitHub
+- [**820**星][24d] [C] [emmericp/ixy](https://github.com/emmericp/ixy) Simple userspace packet processing for educational purposes
+- [**819**星][1m] [Java] [stealthcopter/androidnetworktools](https://github.com/stealthcopter/androidnetworktools) Set of useful android network tools
+- [**819**星][2m] [Py] [jeffzh3ng/fuxi](https://github.com/jeffzh3ng/fuxi) 渗透测试平台
+- [**819**星][2m] [AutoIt] [bioruebe/uniextract2](https://github.com/bioruebe/uniextract2) Universal Extractor 2 is an unofficial updated and extended version of the original UniExtract by Jared Breland. It brings several hundred changes including community-wanted ones such as a batch mode, auto-updater and scan-only-functionality.
+- [**818**星][6m] [numirias/security](https://github.com/numirias/security) Some of my security stuff and vulnerabilities. Nothing advanced. More to come.
+- [**817**星][2m] [Shell] [shr3ddersec/shr3dkit](https://github.com/shr3ddersec/shr3dkit) Red Team Tool Kit
+- [**816**星][29d] [C] [rust-fuzz/afl.rs](https://github.com/rust-fuzz/afl.rs)
+- [**814**星][2y] [Py] [pirate/security-growler](https://github.com/pirate/security-growler)
+- [**814**星][3m] [feeicn/security-ppt](https://github.com/feeicn/security-ppt) 大安全各领域各公司各会议分享的PPT
+- [**814**星][5d] [C] [dynup/kpatch](https://github.com/dynup/kpatch) live kernel patching
+- [**813**星][2y] [Ruby] [elevenpaths/eternalblue-doublepulsar-metasploit](https://github.com/elevenpaths/eternalblue-doublepulsar-metasploit) Module of Metasploit to exploit the vulnerability Eternalblue-Doublepulsar.
+- [**812**星][15d] [JS] [sindresorhus/is-online](https://github.com/sindresorhus/is-online) 检查互联网连接是否正常
+- [**811**星][1y] [Py] [utkusen/leviathan](https://github.com/utkusen/leviathan) wide range mass audit toolkit
+- [**811**星][1y] [Py] [utkusen/leviathan](https://github.com/utkusen/leviathan) 多功能审计工具包,包括多种服务发现(FTP、SSH、Talnet、RDP、MYSQL)、爆破、远程命令执行、SQL注入扫描、指定漏洞利用,集成了Masscan、Ncrack、DSSS等工具。
+- [**811**星][2y] [C] [timwr/cve-2016-5195](https://github.com/timwr/cve-2016-5195) CVE-2016-5195 (dirtycow/dirtyc0w) proof of concept for Android
+- [**811**星][5y] [ObjC] [isecpartners/ios-ssl-kill-switch](https://github.com/isecpartners/ios-ssl-kill-switch) Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS Apps
+- [**811**星][7y] [C] [inquisb/icmpsh](https://github.com/inquisb/icmpsh) Simple reverse ICMP shell
+- [**810**星][8m] [Py] [nccgroup/featherduster](https://github.com/nccgroup/featherduster) 自动化的密码分析工具,模块化
+- [**809**星][1y] [C++] [tencent/tscancode](https://github.com/tencent/tscancode) A static code analyzer for C++, C#, Lua
+- [**808**星][2y] [C#] [nicehash/nicehashminer-archived](https://github.com/nicehash/nicehashminer-archived) NiceHash easy to use CPU&GPU Miner
+- [**808**星][3m] [C] [strazzere/android-unpacker](https://github.com/strazzere/android-unpacker) Android Unpacker presented at Defcon 22: Android Hacker Protection Level 0
+- [**806**星][1m] [Swift] [googleprojectzero/fuzzilli](https://github.com/googleprojectzero/fuzzilli) A JavaScript Engine Fuzzer
+- [**806**星][3y] [Py] [fuzzbunch/fuzzbunch](https://github.com/fuzzbunch/fuzzbunch) NSA finest tool
+- [**806**星][2y] [Ruby] [dmayer/idb](https://github.com/dmayer/idb) iOS 渗透和研究过程中简化一些常见的任务
+- [**805**星][17d] [Ruby] [rastating/wordpress-exploit-framework](https://github.com/rastating/wordpress-exploit-framework) WordPress 漏洞利用框架
+- [**805**星][5m] [C++] [ptrkrysik/gr-gsm](https://github.com/ptrkrysik/gr-gsm) Gnuradio blocks and tools for receiving GSM transmissions
+- [**804**星][2y] [Swift] [zhuhaow/specht](https://github.com/zhuhaow/specht) A rule-based proxy app built with Network Extension for macOS
+- [**804**星][3y] [shmilylty/awesome-hacking](https://github.com/shmilylty/awesome-hacking) awesome hacking chinese version
+- [**804**星][6d] [Py] [jivoi/pentest](https://github.com/jivoi/pentest) 渗透测试工具
+- [**803**星][2m] [Py] [acmesec/ctfcracktools](https://github.com/Acmesec/CTFCrackTools) 中国国内首个CTF工具框架,旨在帮助CTFer快速攻克难关
+- [**803**星][3y] [te-k/flexidie](https://github.com/te-k/flexidie) Source code and binaries of FlexiSpy from the Flexidie dump
+- [**803**星][2y] [Go] [schollz/find-lf](https://github.com/schollz/find-lf) Track the location of every Wi-Fi device (
+- [**802**星][3m] [Py] [techgaun/github-dorks](https://github.com/techgaun/github-dorks) 快速搜索Github repo中的敏感信息
+- [**802**星][3m] [Py] [secforce/tunna](https://github.com/secforce/tunna) Tunna is a set of tools which will wrap and tunnel any TCP communication over HTTP. It can be used to bypass network restrictions in fully firewalled environments.
+- [**802**星][2m] [Py] [hellman/xortool](https://github.com/hellman/xortool) 分析多字节异或密码
+- [**802**星][1m] [Shell] [andreyvit/create-dmg](https://github.com/andreyvit/create-dmg) 用于构建精美DMG的Shell脚本
+- [**801**星][2y] [vysecurity/redtips](https://github.com/vysecurity/RedTips) Red Team Tips as posted by
+- [**801**星][3y] [C#] [netflix/fido](https://github.com/netflix/fido) an orchestration layer used to automate the incident response process by evaluating, assessing and responding to malware
+- [**801**星][2d] [Py] [ericsson/codechecker](https://github.com/ericsson/codechecker) CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy
+- [**800**星][28d] [Rust] [edu4rdshl/findomain](https://github.com/edu4rdshl/findomain) The fastest and cross-platform subdomain enumerator, don't waste your time.
+- [**800**星][6d] [C++] [aslody/whale](https://github.com/aslody/whale) Hook Framework for Android/IOS/Linux/MacOS
+- [**799**星][6y] [Pascal] [prof7bit/torchat](https://github.com/prof7bit/torchat) Decentralized anonymous instant messenger on top of Tor Hidden Services
+- [**799**星][1y] [ObjC] [igrsoft/kismac2](https://github.com/igrsoft/kismac2) KisMAC is a free, open source wireless stumbling and security tool for Mac OS X.
+- [**799**星][3m] [Py] [awslabs/aws-config-rules](https://github.com/awslabs/aws-config-rules) [Node, Python, Java] Repository of sample Custom Rules for AWS Config.
+- [**798**星][3d] [Py] [complianceascode/content](https://github.com/ComplianceAsCode/content) Security compliance content in SCAP, Bash, Ansible, and other formats
+- [**798**星][8d] [proxymanapp/proxyman](https://github.com/proxymanapp/proxyman) Modern and Delightful HTTP Debugging Proxy for macOS, iOS and Android
+- [**798**星][11m] [Py] [mak-/parameth](https://github.com/mak-/parameth) 在文件中(例如PHP 文件)暴力搜索GET 和 POST 请求的参数
+- [**797**星][3y] [Go] [ryhanson/phishery](https://github.com/ryhanson/phishery) 启用 SSL 的 HTTP 服务器,首要目的是通过基本身份认证进行网络钓鱼,以获取凭证。自带将钓鱼url 注入 .docx Word 文档的功能,用户打开Word 文档时会向钓鱼 url 发送请求,并自动弹出认证对话框。
+- [**797**星][3y] [Go] [codahale/sneaker](https://github.com/codahale/sneaker) A tool for securely storing secrets on S3 using Amazon KMS.
+- [**795**星][7m] [Py] [phaethon/kamene](https://github.com/phaethon/kamene) Network packet and pcap file crafting/sniffing/manipulation/visualization security tool. Originally forked from scapy in 2015 and providing python3 compatibility since then.
+- [**795**星][22d] [Py] [yeti-platform/yeti](https://github.com/yeti-platform/yeti) 情报威胁管理平台
+- [**794**星][2m] [sh4hin/androl4b](https://github.com/sh4hin/androl4b) 用于评估Android应用程序,逆向工程和恶意软件分析的虚拟机
+- [**793**星][3y] [Py] [empireproject/empyre](https://github.com/empireproject/empyre) A post-exploitation OS X/Linux agent written in Python 2.7
+- [**791**星][4m] [Py] [srinivas11789/pcapxray](https://github.com/srinivas11789/pcapxray) A Network Forensics Tool
+- [**790**星][2y] [Go] [evilsocket/dnssearch](https://github.com/evilsocket/dnssearch) A subdomain enumeration tool.
+- [**790**星][3y] [C++] [bwall/hashpump](https://github.com/bwall/hashpump) A tool to exploit the hash length extension attack in various hashing algorithms
+- [**789**星][10m] [C#] [terminals-origin/terminals](https://github.com/terminals-origin/terminals) Terminals is a secure, multi tab terminal services/remote desktop client. It uses Terminal Services ActiveX Client (mstscax.dll). The project started from the need of controlling multiple connections simultaneously. It is a complete replacement for the mstsc.exe (Terminal Services) client. This is official source moved from Codeplex.
+- [**789**星][2d] [C] [fwupd/fwupd](https://github.com/fwupd/fwupd) A simple daemon to allow session software to update firmware
+- [**788**星][3d] [Java] [zstackio/zstack](https://github.com/zstackio/zstack) ZStack - the open-source IaaS software
+- [**787**星][1m] [CSS] [smartping/smartping](https://github.com/smartping/smartping) 综合性网络质量(PING)检测工具,支持正/反向PING绘图、互PING拓扑绘图与报警、全国PING延迟地图与在线检测工具等功能
+- [**787**星][2y] [Shell] [screetsec/dracnmap](https://github.com/screetsec/dracnmap) Dracnmap is an open source program which is using to exploit the network and gathering information with nmap help. Nmap command comes with lots of options that can make the utility more robust and difficult to follow for new users. Hence Dracnmap is designed to perform fast scaning with the utilizing script engine of nmap and nmap can perform va…
+- [**787**星][2m] [Py] [numba/llvmlite](https://github.com/numba/llvmlite) A lightweight LLVM python binding for writing JIT compilers
+- [**787**星][1m] [microsoft/msrc-security-research](https://github.com/microsoft/msrc-security-research) Security Research from the Microsoft Security Response Center (MSRC)
+- [**786**星][2m] [Go] [dreddsa5dies/gohacktools](https://github.com/dreddsa5dies/gohacktools) Golang编写的多款Hacking工具
+- [**785**星][2m] [C] [netsniff-ng/netsniff-ng](https://github.com/netsniff-ng/netsniff-ng) A Swiss army knife for your daily Linux network plumbing.
+- [**785**星][12d] [Go] [rebuy-de/aws-nuke](https://github.com/rebuy-de/aws-nuke) Nuke a whole AWS account and delete all its resources.
+- [**785**星][2y] [C] [jklmnn/imagejs](https://github.com/jklmnn/imagejs) 将javascript打包到有效的图像文件。
+- [**784**星][4y] [Assembly] [xoreaxeaxeax/sinkhole](https://github.com/xoreaxeaxeax/sinkhole) Architectural privilege escalation on x86
+- [**784**星][5m] [TSQL] [threathunterx/nebula](https://github.com/threathunterx/nebula) "星云"业务风控系统,主工程
+- [**784**星][8m] [Go] [parsiya/hacking-with-go](https://github.com/parsiya/hacking-with-go) Golang for Security Professionals
+- [**784**星][7m] [Java] [blankeer/mdwechat](https://github.com/blankeer/mdwechat) 一个能让微信 Material Design 化的 Xposed 模块
+- [**784**星][2m] [Py] [bishopfox/gitgot](https://github.com/bishopfox/gitgot) Semi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets.
+- [**784**星][3y] [Go] [armon/go-socks5](https://github.com/armon/go-socks5) SOCKS5 server in Golang
+- [**782**星][11m] [v2-dev/awesome-social-engineering](https://github.com/v2-dev/awesome-social-engineering) 社会工程学资源集合
+- [**782**星][3y] [Go] [summitroute/osxlockdown](https://github.com/summitroute/osxlockdown) [No longer maintained] Apple OS X tool to audit for, and remediate, security configuration settings.
+- [**782**星][29d] [Ruby] [net-ssh/net-ssh](https://github.com/net-ssh/net-ssh) Pure Ruby implementation of an SSH (protocol 2) client
+- [**782**星][1y] [PS] [kevin-robertson/invoke-thehash](https://github.com/kevin-robertson/invoke-thehash) 执行 pass the hash WMI 和 SMB 任务的PowerShell函数
+- [**780**星][2m] [C] [nixos/patchelf](https://github.com/nixos/patchelf) A small utility to modify the dynamic linker and RPATH of ELF executables
+- [**780**星][4y] [C++] [denandz/keefarce](https://github.com/denandz/keefarce) Extracts passwords from a KeePass 2.x database, directly from memory.
+- [**779**星][2y] [Py] [secretsquirrel/bdfproxy](https://github.com/secretsquirrel/bdfproxy) Patch Binaries via MITM: BackdoorFactory + mitmProxy. (NOT SUPPORTED)
+- [**779**星][1m] [Py] [konradit/gopro-py-api](https://github.com/konradit/gopro-py-api) Unofficial GoPro API Library for Python - connect to GoPro via WiFi.
+- [**777**星][7d] [Go] [kolide/fleet](https://github.com/kolide/fleet) A flexible control server for osquery fleets
+- [**777**星][1m] [Py] [kevthehermit/ratdecoders](https://github.com/kevthehermit/ratdecoders) Python Decoders for Common Remote Access Trojans
+- [**777**星][8d] [C#] [justcoding121/titanium-web-proxy](https://github.com/justcoding121/titanium-web-proxy) A cross-platform asynchronous HTTP(S) proxy server in C#.
+- [**777**星][2m] [Py] [gosecure/malboxes](https://github.com/gosecure/malboxes) Builds malware analysis Windows VMs so that you don't have to.
+- [**777**星][2y] [C++] [dor1s/libfuzzer-workshop](https://github.com/dor1s/libfuzzer-workshop) Repository for materials of "Modern fuzzing of C/C++ Projects" workshop.
+- [**777**星][15d] [Go] [bishopfox/sliver](https://github.com/bishopfox/sliver) 一个通用的跨平台植入程序框架,该框架C3支持Mutual-TLS,HTTP(S)和DNS
+- [**777**星][14d] [Shell] [aqzt/kjyw](https://github.com/aqzt/kjyw) 快捷运维,代号kjyw,项目基于shell、python,运维脚本工具库,收集各类运维常用工具脚本,实现快速安装nginx、mysql、php、redis、nagios、运维经常使用的脚本等等...
+- [**776**星][2y] [Py] [marvis/pytorch-caffe-darknet-convert](https://github.com/marvis/pytorch-caffe-darknet-convert) convert between pytorch, caffe prototxt/weights and darknet cfg/weights
+- [**776**星][1y] [C++] [polysync/oscc](https://github.com/polysync/oscc) Open Source Car Control
+- [**776**星][2m] [C++] [nodejs/llnode](https://github.com/nodejs/llnode) An lldb plugin for Node.js and V8, which enables inspection of JavaScript states for insights into Node.js processes and their core dumps.
+- [**775**星][12m] [HTML] [sense-of-security/adrecon](https://github.com/sense-of-security/adrecon) 收集Active Directory信息并生成报告
+- [**775**星][2y] [Py] [dagrz/aws_pwn](https://github.com/dagrz/aws_pwn) A collection of AWS penetration testing junk
+- [**774**星][2y] [TS] [uwnetworkslab/uproxy-p2p](https://github.com/uwnetworkslab/uproxy-p2p) Internet without borders
+- [**774**星][4y] [amq/firefox-debloat](https://github.com/amq/firefox-debloat) Stop Firefox leaking data about you
+- [**773**星][2y] [Py] [viralmaniar/passhunt](https://github.com/viralmaniar/passhunt) Passhunt is a simple tool for searching of default credentials for network devices, web applications and more. Search through 523 vendors and their 2084 default passwords.
+- [**772**星][8d] [payloadbox/xss-payload-list](https://github.com/payloadbox/xss-payload-list) XSS 漏洞Payload列表
+- [**772**星][10d] [Go] [liamg/tfsec](https://github.com/liamg/tfsec)
+- [**771**星][4y] [C++] [google/rowhammer-test](https://github.com/google/rowhammer-test) 以正常的用户模式进程执行,检测rowhammer漏洞
+- [**769**星][2y] [HTML] [wi-fi-analyzer/fluxion](https://github.com/wi-fi-analyzer/fluxion) fluxion:linset 的重制版,兼容最新版 Kali
+- [**769**星][2d] [C++] [shekyan/slowhttptest](https://github.com/shekyan/slowhttptest) 应用层DoS攻击模拟器
+- [**769**星][2m] [HTML] [rewardone/oscprepo](https://github.com/rewardone/oscprepo) A list of commands, scripts, resources, and more that I have gathered and attempted to consolidate for use as OSCP (and more) study material. Commands in 'Usefulcommands' Keepnote. Bookmarks and reading material in 'BookmarkList' Keepnote. Reconscan in scripts folder.
+- [**769**星][2d] [Py] [jtpereyda/boofuzz](https://github.com/jtpereyda/boofuzz) 网络协议Fuzzing框架, sulley的继任者
+- [**769**星][4d] [C#] [damianh/proxykit](https://github.com/damianh/proxykit) A toolkit to create code-first HTTP reverse proxies on ASP.NET Core
+- [**768**星][5y] [Py] [shadowsocks/chinadns-python](https://github.com/shadowsocks/chinadns-python) Protect yourself against DNS poisoning in China.
+- [**768**星][1m] [Py] [vesche/scanless](https://github.com/vesche/scanless) 端口扫描器
+- [**768**星][2d] [Java] [tmobile/pacbot](https://github.com/tmobile/pacbot) PacBot (Policy as Code Bot)
+- [**767**星][2m] [daviddias/awesome-hacking-locations](https://github.com/daviddias/awesome-hacking-locations)
+- [**767**星][3d] [JS] [brianlovin/security-checklist](https://github.com/brianlovin/security-checklist) A checklist for staying safe on the internet
+- [**766**星][7d] [C++] [snort3/snort3](https://github.com/snort3/snort3) 下一代Snort IPS(入侵防御系统)。
+- [**765**星][5y] [C#] [azzvx/gogotester](https://github.com/azzvx/gogotester)
+- [**765**星][1y] [pfarb/awesome-crypto-papers](https://github.com/pfarb/awesome-crypto-papers) A curated list of cryptography papers, articles, tutorials and howtos.
+- [**765**星][15d] [axtmueller/windows-kernel-explorer](https://github.com/axtmueller/windows-kernel-explorer) Windows内核研究工具
+- [**764**星][7m] [Py] [gkbrk/slowloris](https://github.com/gkbrk/slowloris) HTTP DoS 服务攻击,主要影响多线程服务器
+- [**764**星][2m] [Py] [ashutosh1206/crypton](https://github.com/ashutosh1206/crypton) Library consisting of explanation and implementation of all the existing attacks on various Encryption Systems, Digital Signatures, Authentication methods along with example challenges from CTFs
+- [**763**星][1y] [Java] [mbechler/marshalsec](https://github.com/mbechler/marshalsec) Java解密器(Unmarshaller)安全 - 将数据转换为可执行的代码
+- [**763**星][10m] [Py] [hlldz/spookflare](https://github.com/hlldz/spookflare) Loader, dropper generator with multiple features for bypassing client-side and network-side countermeasures.
+- [**762**星][7y] [grugq/portal](https://github.com/grugq/portal) Personal Onion Router To Assure Liberty
+- [**762**星][11m] [C++] [comaeio/porosity](https://github.com/comaeio/porosity) *UNMAINTAINED* Decompiler and Security Analysis tool for Blockchain-based Ethereum Smart-Contracts
+- [**761**星][20d] [Py] [mubix/shellshocker-pocs](https://github.com/mubix/shellshocker-pocs) Collection of Proof of Concepts and Potential Targets for #ShellShocker
+- [**761**星][3m] [jakejarvis/awesome-shodan-queries](https://github.com/jakejarvis/awesome-shodan-queries)
+- [**760**星][4m] [Py] [s0md3v/hash-buster](https://github.com/s0md3v/Hash-Buster) Crack hashes in seconds.
+- [**760**星][8m] [Py] [misterbianco/boopsuite](https://github.com/MisterBianco/BoopSuite) 无线审计与安全测试
+- [**760**星][22d] [Go] [thoughtworks/talisman](https://github.com/thoughtworks/talisman) By hooking into the pre-push hook provided by Git, Talisman validates the outgoing changeset for things that look suspicious - such as authorization tokens and private keys.
+- [**760**星][1m] [Py] [snovvcrash/usbrip](https://github.com/snovvcrash/usbrip) Simple CLI forensics tool for tracking USB device artifacts (history of USB events) on GNU/Linux
+- [**760**星][5m] [Py] [lgandx/pcredz](https://github.com/lgandx/pcredz) This tool extracts Credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, SMTP, FTP, IMAP, etc from a pcap file or from a live interface.
+- [**760**星][4m] [Go] [haccer/subjack](https://github.com/haccer/subjack) 异步多线程扫描子域列表,识别能够被劫持的子域。Go 编写
+- [**759**星][3y] [masatokinugawa/filterbypass](https://github.com/masatokinugawa/filterbypass) 浏览器XSS 过滤绕过清单
+- [**756**星][1m] [Py] [nekmo/dirhunt](https://github.com/nekmo/dirhunt) Web爬虫, 针对搜索和分析路径做了优化
+- [**756**星][1y] [Py] [greatsct/greatsct](https://github.com/greatsct/greatsct) 生成绕过常见防病毒解决方案和应用程序白名单解决方案的metasploit payload
+- [**755**星][3y] [Py] [eastee/rebreakcaptcha](https://github.com/eastee/rebreakcaptcha) A logic vulnerability, dubbed ReBreakCaptcha, which lets you easily bypass Google's ReCaptcha v2 anywhere on the web
+- [**755**星][2d] [Go] [banzaicloud/bank-vaults](https://github.com/banzaicloud/bank-vaults) A Vault swiss-army knife: a K8s operator, Go client with automatic token renewal, automatic configuration, multiple unseal options and more. A CLI tool to init, unseal and configure Vault (auth methods, secret engines). Direct secret injection into Pods.
+- [**754**星][6d] [Ruby] [rubysec/ruby-advisory-db](https://github.com/rubysec/ruby-advisory-db) A database of vulnerable Ruby Gems
+- [**753**星][4m] [Py] [threatexpress/domainhunter](https://github.com/threatexpress/domainhunter) Checks expired domains for categorization/reputation and Archive.org history to determine good candidates for phishing and C2 domain names
+- [**753**星][2y] [Py] [redballoonshenanigans/monitordarkly](https://github.com/redballoonshenanigans/monitordarkly) Poc, Presentation of Monitor OSD Exploitation, and shenanigans of high quality.
+- [**753**星][4m] [Shell] [nahamsec/lazyrecon](https://github.com/nahamsec/lazyrecon) 侦查(reconnaissance)过程自动化脚本, 可自动使用Sublist3r/certspotter获取子域名, 调用nmap/dirsearch等
+- [**753**星][19d] [Py] [korcankaraokcu/pince](https://github.com/korcankaraokcu/pince) A reverse engineering tool that'll supply the place of Cheat Engine for linux
+- [**752**星][5d] [C] [wolfssl/wolfssl](https://github.com/wolfssl/wolfssl) wolfSSL (formerly CyaSSL) is a small, fast, portable implementation of TLS/SSL for embedded devices to the cloud. wolfSSL supports up to TLS 1.3!
+- [**752**星][10m] [PS] [davehull/kansa](https://github.com/davehull/kansa) A Powershell incident response framework
+- [**751**星][2d] [Py] [rajkumrdusad/tool-x](https://github.com/rajkumrdusad/tool-x) Tool-X is a kali linux hacking Tool installer. Tool-X developed for termux and other android terminals. using Tool-X you can install almost 370+ hacking tools in termux app and other linux based distributions.
+- [**751**星][23d] [Java] [owasp/securityshepherd](https://github.com/owasp/securityshepherd) Web and mobile application security training platform
+- [**749**星][15d] [HTML] [tennc/fuzzdb](https://github.com/tennc/fuzzdb) 一个fuzzdb扩展库
+- [**749**星][2y] [PHP] [sektioneins/pcc](https://github.com/sektioneins/pcc) PHP 安全配置检查器
+- [**748**星][2y] [Go] [pforemski/dingo](https://github.com/pforemski/dingo) A DNS client in Go that supports Google DNS over HTTPS
+- [**748**星][2y] [Py] [d35m0nd142/lfisuite](https://github.com/d35m0nd142/lfisuite) Totally Automatic LFI Exploiter (+ Reverse Shell) and Scanner
+- [**748**星][2m] [Py] [buffer/thug](https://github.com/buffer/thug) Python low-interaction honeyclient
+- [**747**星][11m] [Py] [infobyte/spoilerwall](https://github.com/infobyte/spoilerwall) Spoilerwall introduces a brand new concept in the field of network hardening. Avoid being scanned by spoiling movies on all your ports!
+- [**747**星][4y] [fabiobaroni/awesome-exploit-development](https://github.com/fabiobaroni/awesome-exploit-development) A curated list of resources (books, tutorials, courses, tools and vulnerable applications) for learning about Exploit Development
+- [**747**星][6m] [Go] [cbeuw/goquiet](https://github.com/cbeuw/goquiet) A Shadowsocks obfuscation plugin utilising domain fronting to evade deep packet inspection
+- [**747**星][4m] [aleenzz/cobalt_strike_wiki](https://github.com/aleenzz/cobalt_strike_wiki) Cobalt Strike系列
+- [**746**星][3y] [PHP] [googleinurl/scanner-inurlbr](https://github.com/googleinurl/scanner-inurlbr) Advanced search in search engines, enables analysis provided to exploit GET / POST capturing emails & urls, with an internal custom validation junction for each target / url found.
+- [**745**星][1y] [Py] [oddcod3/phantom-evasion](https://github.com/oddcod3/phantom-evasion) Python AV evasion tool capable to generate FUD executable even with the most common 32 bit metasploit payload(exe/elf/dmg/apk)
+- [**744**星][5y] [C++] [zerovm/zerovm](https://github.com/zerovm/zerovm) Open-source lightweight virtualization platform
+- [**744**星][1y] [Perl] [moham3driahi/th3inspector](https://github.com/moham3driahi/th3inspector) 多合一信息收集工具
+- [**744**星][8d] [Go] [activecm/rita](https://github.com/activecm/rita) Real Intelligence Threat Analytics
+- [**743**星][5m] [C] [neurobin/shc](https://github.com/neurobin/shc) Shell script compiler
+- [**743**星][27d] [HTML] [m4cs/babysploit](https://github.com/m4cs/babysploit) 渗透测试工具包,旨在使您轻松学习如何使用更大,更复杂的框架(例如Metasploit)
+- [**743**星][11d] [Py] [jendrikseipp/vulture](https://github.com/jendrikseipp/vulture) Find dead Python code
+- [**742**星][1m] [Py] [khast3x/h8mail](https://github.com/khast3x/h8mail) Password Breach Hunting and Email OSINT tool, locally or using premium services. Supports chasing down related email
+- [**741**星][9d] [trimstray/linux-hardening-checklist](https://github.com/trimstray/linux-hardening-checklist) Simple checklist to help you deploying the most important areas of the GNU/Linux production systems - work in progress.
+- [**741**星][4y] [ObjC] [kjcracks/yololib](https://github.com/kjcracks/yololib) dylib injector for mach-o binaries
+- [**741**星][3y] [C] [gentilkiwi/wanakiwi](https://github.com/gentilkiwi/wanakiwi) wanakiwi
+- [**741**星][3d] [C++] [csmith-project/creduce](https://github.com/csmith-project/creduce) C-Reduce, a C program reducer
+- [**740**星][1m] [C] [yrp604/rappel](https://github.com/yrp604/rappel) A linux-based assembly REPL for x86, amd64, armv7, and armv8
+- [**740**星][6m] [Go] [talkingdata/owl](https://github.com/talkingdata/owl) 企业级分布式监控告警系
+- [**740**星][1y] [C#] [eladshamir/internal-monologue](https://github.com/eladshamir/internal-monologue) 在不接触LSASS的情况下提取NTLM hash
+- [**739**星][22d] [Py] [ricterz/genpass](https://github.com/ricterz/genpass) 中国特色的弱口令生成器
+- [**739**星][2y] [Swift] [novatecconsulting/facerecognition-in-arkit](https://github.com/novatecconsulting/facerecognition-in-arkit) Detects faces using the Vision-API and runs the extracted face through a CoreML-model to identiy the specific persons.
+- [**739**星][5m] [PS] [hausec/adape-script](https://github.com/hausec/adape-script) Active Directory Assessment and Privilege Escalation Script
+- [**738**星][1y] [Py] [uber-common/metta](https://github.com/uber-common/metta) An information security preparedness tool to do adversarial simulation.
+- [**738**星][2y] [Py] [toolswatch/vfeed](https://github.com/toolswatch/vfeed) The Correlated CVE Vulnerability And Threat Intelligence Database API
+- [**738**星][15d] [Jupyter Notebook] [bukosabino/ta](https://github.com/bukosabino/ta) Technical Analysis Library using Pandas (Python)
+- [**737**星][3y] [HTML] [xyntax/1000php](https://github.com/xyntax/1000php) 1000个PHP代码审计案例(2016.7以前乌云公开漏洞)
+- [**737**星][5d] [C] [rapid7/metasploit-payloads](https://github.com/rapid7/metasploit-payloads) Unified repository for different Metasploit Framework payloads
+- [**736**星][6m] [C] [unamer/vmware_escape](https://github.com/unamer/vmware_escape) VMwareWorkStation 12.5.5 之前版本的逃逸 Exploit
+- [**736**星][6m] [Py] [devttys0/ida](https://github.com/devttys0/ida) IDA插件/脚本/模块收集
+ - [wpsearch](https://github.com/devttys0/ida/blob/master/scripts/wpsearch.py) 查找在MIPS WPS checksum实现中常见的立即数
+ - [md5hash](https://github.com/devttys0/ida/tree/master/modules/md5hash) 纯Python版的MD5 hash实现(IDA的hashlib有问题)
+ - [alleycat](https://github.com/devttys0/ida/tree/master/plugins/alleycat) 查找向指定的函数内代码块的路径、查找两个或多个函数之间的路径、生成交互式调用图、可编程
+ - [codatify](https://github.com/devttys0/ida/tree/master/plugins/codatify) 定义IDA自动化分析时miss的ASCII字符串、函数、代码。将data段的所有未定义字节转换为DWORD(于是IDA可识别函数和跳转表指针)
+ - [fluorescence](https://github.com/devttys0/ida/tree/master/plugins/fluorescence) 高亮函数调用指令
+ - [leafblower](https://github.com/devttys0/ida/tree/master/plugins/leafblower) 识别常用的POSIX函数:printf, sprintf, memcmp, strcpy等
+ - [localxrefs](https://github.com/devttys0/ida/tree/master/plugins/localxrefs) 在当前函数内部查找所有对任意选择文本的引用
+ - [mipslocalvars](https://github.com/devttys0/ida/tree/master/plugins/mipslocalvars) 对栈上只用于存储寄存器的变量进行命名,简化栈数据分析(MISP)
+ - [mipsrop](https://github.com/devttys0/ida/tree/master/plugins/mipsrop) 在MIPS可执行代码中搜寻ROP。查找常见的ROP
+ - [rizzo](https://github.com/devttys0/ida/tree/master/plugins/rizzo) 对2个或多个IDB之间的函数进行识别和重命名,基于:函数签名、对唯一字符串/常量的引用、模糊签名、调用图
+- [**735**星][7m] [sandboxescaper/polarbearrepo](https://github.com/sandboxescaper/polarbearrepo)
+- [**735**星][6d] [C++] [google/shaderc](https://github.com/google/shaderc) A collection of tools, libraries, and tests for Vulkan shader compilation.
+- [**735**星][10d] [Shell] [dokku/dokku-letsencrypt](https://github.com/dokku/dokku-letsencrypt) BETA: Automatic Let's Encrypt TLS Certificate installation for dokku
+- [**735**星][1y] [Py] [averagesecurityguy/scripts](https://github.com/averagesecurityguy/scripts) Scripts I use during pentest engagements.
+- [**734**星][3d] [TS] [casbin/node-casbin](https://github.com/casbin/node-casbin) An authorization library that supports access control models like ACL, RBAC, ABAC in Node.js
+- [**733**星][2y] [Java] [gcssloop/encrypt](https://github.com/gcssloop/encrypt) [暂停维护]Android 加密解密工具包。
+- [**732**星][3m] [C] [rdesktop/rdesktop](https://github.com/rdesktop/rdesktop) rdesktop is an open source UNIX client for connecting to Windows Remote Desktop Services, capably of natively speaking Remote Desktop Protocol (RDP) in order to present the user's Windows desktop. rdesktop is known to work with Windows server version ranging from NT 4 terminal server to Windows 2012 R2.
+- [**732**星][27d] [HTML] [pagerduty/incident-response-docs](https://github.com/pagerduty/incident-response-docs) PagerDuty's Incident Response Documentation.
+- [**731**星][2y] [JS] [xl7dev/burpsuite](https://github.com/xl7dev/burpsuite) BurpSuite using the document and some extensions
+- [**731**星][9m] [Py] [mr-un1k0d3r/dkmc](https://github.com/mr-un1k0d3r/dkmc) DKMC - Dont kill my cat - Malicious payload evasion tool
+- [**731**星][29d] [C] [iaik/zombieload](https://github.com/iaik/zombieload) ZombieLoad攻击PoC
+- [**731**星][4m] [Lua] [cldrn/nmap-nse-scripts](https://github.com/cldrn/nmap-nse-scripts) My collection of nmap NSE scripts
+- [**731**星][2y] [Py] [alex/letsencrypt-aws](https://github.com/alex/letsencrypt-aws)
+- [**730**星][2m] [JS] [mandatoryprogrammer/xsshunter](https://github.com/mandatoryprogrammer/xsshunter) The XSS Hunter service - a portable version of XSSHunter.com
+- [**730**星][3y] [C++] [ionescu007/lxss](https://github.com/ionescu007/lxss) Win10 Linux 子系统相关
+- [**729**星][3d] [C] [pmem/pmdk](https://github.com/pmem/pmdk) Persistent Memory Development Kit
+- [**729**星][1y] [Ruby] [chaps-io/access-granted](https://github.com/chaps-io/access-granted) Multi-role and whitelist based authorization gem for Rails (and not only Rails!)
+- [**728**星][6m] [Py] [ztgrace/changeme](https://github.com/ztgrace/changeme) 默认证书扫描器
+- [**727**星][1y] [Py] [the-robot/sqliv](https://github.com/the-robot/sqliv) massive SQL injection vulnerability scanner
+- [**727**星][10m] [PS] [l0ss/grouper](https://github.com/l0ss/grouper) A PowerShell script for helping to find vulnerable settings in AD Group Policy. (deprecated, use Grouper2 instead!)
+- [**726**星][1m] [C++] [stealth/sshttp](https://github.com/stealth/sshttp) SSH/HTTP(S) multiplexer. Run a webserver and a sshd on the same port w/o changes.
+- [**726**星][2m] [C] [jedisct1/minisign](https://github.com/jedisct1/minisign) A dead simple tool to sign files and verify digital signatures.
+- [**726**星][5d] [Py] [anchore/anchore-engine](https://github.com/anchore/anchore-engine) A service that analyzes docker images and applies user-defined acceptance policies to allow automated container image validation and certification
+- [**725**星][1y] [Py] [rfunix/pompem](https://github.com/rfunix/pompem) Find exploit tool
+- [**725**星][3d] [Py] [globaleaks/globaleaks](https://github.com/globaleaks/globaleaks) The Open-Source Whistleblowing Software
+- [**725**星][6m] [Assembly] [cirosantilli/x86-assembly-cheat](https://github.com/cirosantilli/x86-assembly-cheat) the bulk of the x86 instruction examples with assertions.
+- [**725**星][2d] [Py] [abhinavsingh/proxy.py](https://github.com/abhinavsingh/proxy.py) ⚡⚡⚡Fast, Lightweight, Pluggable, TLS interception capable proxy server focused on Network monitoring, controls & Application development, testing, debugging
+- [**724**星][10d] [Perl] [gouveaheitor/nipe](https://github.com/GouveaHeitor/nipe) Nipe is a script to make Tor Network your default gateway.
+- [**724**星][3m] [Java] [isafeblue/trackray](https://github.com/isafeblue/trackray) 溯光 (TrackRay) 3 beta⚡渗透测试框架(资产扫描|指纹识别|暴力破解|网页爬虫|端口扫描|漏洞扫描|代码审计|AWVS|NMAP|Metasploit|SQLMap)
+- [**724**星][6m] [Go] [anshumanbh/git-all-secrets](https://github.com/anshumanbh/git-all-secrets) 结合多个开源 git 搜索工具实现的代码审计工具
+- [**723**星][8d] [C] [strace/strace](https://github.com/strace/strace) strace is a diagnostic, debugging and instructional userspace utility for Linux
+- [**723**星][8m] [C] [mempodippy/vlany](https://github.com/mempodippy/vlany) Linux LD_PRELOAD rootkit (x86 and x86_64 architectures)
+- [**722**星][2m] [Py] [shawndevans/smbmap](https://github.com/shawndevans/smbmap) SMB枚举
+- [**722**星][1y] [Py] [keystone-engine/keypatch](https://github.com/keystone-engine/keypatch) 汇编/补丁插件, 支持多架构, 基于Keystone引擎
+- [**722**星][1m] [C++] [facebook/threatexchange](https://github.com/facebook/threatexchange) Share threat information with vetted partners
+- [**722**星][3m] [Py] [cloudflare/bpftools](https://github.com/cloudflare/bpftools) BPF Tools - packet analyst toolkit
+- [**721**星][3d] [CSS] [w-digital-scanner/w12scan](https://github.com/w-digital-scanner/w12scan) a network asset discovery engine that can automatically aggregate related assets for analysis and use
+- [**721**星][2m] [JS] [kohgylw/kiftd](https://github.com/kohgylw/kiftd) sky driver & cloud driver open source server application : kiftd . welcome to the home page:
+- [**721**星][1m] [Py] [diyan/pywinrm](https://github.com/diyan/pywinrm) Python实现的WinRM客户端
+- [**720**星][6m] [Py] [zyantific/idaskins](https://github.com/zyantific/idaskins) 皮肤插件
+- [**720**星][10m] [C] [ztane/python-levenshtein](https://github.com/ztane/python-levenshtein) The Levenshtein Python C extension module contains functions for fast computation of Levenshtein distance and string similarity
+- [**719**星][7d] [Py] [skelsec/pypykatz](https://github.com/skelsec/pypykatz) 纯Python实现的Mimikatz
+- [**719**星][7m] [C] [meyerd/n2n](https://github.com/meyerd/n2n) A development branch of the n2n p2p vpn software
+- [**718**星][1y] [Shell] [c0ny1/vulstudy](https://github.com/c0ny1/vulstudy) 使用docker快速搭建各大漏洞学习平台,目前可以一键搭建12个平台。
+- [**717**星][1y] [JS] [melonproject/oyente](https://github.com/melonproject/oyente) An Analysis Tool for Smart Contracts
+- [**716**星][8d] [voorivex/pentest-guide](https://github.com/voorivex/pentest-guide) 基于OWASP的渗透测试指南,包括测试案例,资源和示例。
+- [**716**星][2y] [Py] [madeye/sssniff](https://github.com/madeye/sssniff) sssniff:ShadowSocks流量嗅探
+- [**715**星][1m] [streaak/keyhacks](https://github.com/streaak/keyhacks) Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.
+- [**715**星][2y] [kristate/krackinfo](https://github.com/kristate/krackinfo) Vendor Response Matrix for KRACK WPA2 (Key Reinstallation Attack)
+- [**715**星][10d] [Py] [f-secure/see](https://github.com/f-secure/see) 在安全环境中构建测试自动化的框架
+- [**715**星][2m] [Java] [col-e/recaf](https://github.com/col-e/recaf) A modern Java bytecode editor
+- [**714**星][2m] [HTML] [j00ru/windows-syscalls](https://github.com/j00ru/windows-syscalls) Windows 系统调用表(NT/2000/XP/2003/Vista/2008/7/2012/8/10)
+- [**714**星][11m] [PHP] [defuse/password-hashing](https://github.com/defuse/password-hashing) Password hashing code.
+- [**714**星][1y] [Java] [d3vilbug/hackbar](https://github.com/d3vilbug/hackbar) HackBar plugin for Burpsuite
+- [**713**星][4m] [Py] [rhinosecuritylabs/security-research](https://github.com/rhinosecuritylabs/security-research) Exploits written by the Rhino Security Labs team
+- [**713**星][3d] [Py] [idapython/src](https://github.com/idapython/src) IDAPython源码
+- [**713**星][5m] [Py] [adamlaurie/rfidiot](https://github.com/adamlaurie/rfidiot) python RFID / NFC library & tools
+- [**712**星][1y] [C#] [p3nt4/powershdll](https://github.com/p3nt4/powershdll) 使用rundll32执行PowerShell,绕过软件限制
+- [**712**星][9d] [C] [openvisualcloud/svt-av1](https://github.com/openvisualcloud/svt-av1) Welcome to the GitHub repo for the SVT-AV1! Help us grow the community by subscribing to our SVT-AV1 mailing list!
+- [**712**星][3y] [JS] [mozilla/node-client-sessions](https://github.com/mozilla/node-client-sessions) secure sessions stored in cookies
+- [**712**星][2d] [Go] [gruntwork-io/cloud-nuke](https://github.com/gruntwork-io/cloud-nuke) 通过检查(删除)其中的所有资源来清理云帐户
+- [**712**星][3d] [C] [aircrack-ng/rtl8812au](https://github.com/aircrack-ng/rtl8812au) RTL8812AU/21AU and RTL8814AU driver with monitor mode and frame injection
+- [**711**星][4d] [C++] [tandasat/hyperplatform](https://github.com/tandasat/hyperplatform) 基于Intel VT-x的虚拟机管理程序,旨在在Windows上提供精简的VM-exit过滤平台
+- [**711**星][1y] [snifer/security-cheatsheets](https://github.com/snifer/security-cheatsheets) A collection of cheatsheets for various infosec tools and topics.
+- [**711**星][3y] [C++] [nicehash/nheqminer](https://github.com/nicehash/nheqminer) Equihash miner for NiceHash
+- [**710**星][2y] [Java] [rover12421/shakaapktool](https://github.com/rover12421/shakaapktool) ShakaApktool
+- [**709**星][2y] [HTML] [rapid7/hackazon](https://github.com/rapid7/hackazon) A modern vulnerable web app
+- [**709**星][2m] [C] [nuand/bladerf](https://github.com/nuand/bladerf) bladeRF USB 3.0 Superspeed Software Defined Radio Source Code
+- [**709**星][2y] [Py] [google/ssl_logger](https://github.com/google/ssl_logger) 解密并记录进程的SSL 流程
+- [**709**星][4m] [bit4woo/python_sec](https://github.com/bit4woo/python_sec) python安全和代码审计相关资料收集 resource collection of python security and code review
+- [**708**星][2d] [ly0n/awesome-robotic-tooling](https://github.com/ly0n/awesome-robotic-tooling) Robotic resources and tools for professional robotic development with ROS in C++ and Python.
+- [**708**星][19d] [Scala] [linkedin/photon-ml](https://github.com/linkedin/photon-ml) A scalable machine learning library on Apache Spark
+- [**708**星][2y] [Go] [sidkshatriya/dontbug](https://github.com/sidkshatriya/dontbug) Dontbug is a reverse debugger for PHP
+- [**708**星][7m] [Py] [giacomolaw/keylogger](https://github.com/giacomolaw/keylogger) A simple keylogger for Windows, Linux and Mac
+- [**707**星][5d] [Go] [pomerium/pomerium](https://github.com/pomerium/pomerium) Pomerium is an identity-aware access proxy.
+- [**707**星][3m] [Py] [sevagas/macro_pack](https://github.com/sevagas/macro_pack) 自动生成并混淆MS 文档, 用于渗透测试、演示、社会工程评估等
+- [**707**星][11m] [HTML] [juansacco/exploitpack](https://github.com/juansacco/exploitpack) Exploit Pack -The next generation exploit framework
+- [**707**星][5m] [JS] [crits/crits](https://github.com/crits/crits) 恶意软件和威胁仓库,利用其他开源软件为分析师和安全专家构建威胁防御的统一工具
+- [**706**星][27d] [PHP] [ssl/ezxss](https://github.com/ssl/ezxss) ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.
+- [**705**星][3y] [PS] [gimini/powermemory](https://github.com/gimini/powermemory) Exploit the credentials present in files and memory
+- [**705**星][4y] [Py] [androbugs/androbugs_framework](https://github.com/androbugs/androbugs_framework) AndroBugs Framework is an efficient Android vulnerability scanner that helps developers or hackers find potential security vulnerabilities in Android applications. No need to install on Windows.
+- [**704**星][5d] [hackplayers/hackthebox-writeups](https://github.com/hackplayers/hackthebox-writeups) Writeups for HacktheBox 'boot2root' machines
+- [**704**星][2y] [PS] [samratashok/kautilya](https://github.com/samratashok/kautilya) 可为人机接口设备提供各种有效Payload,这可能有助于在渗透测试期间破坏计算机
+- [**704**星][9d] [Py] [mushorg/conpot](https://github.com/mushorg/conpot) ICS/SCADA honeypot
+- [**703**星][1y] [Jupyter Notebook] [anishathalye/obfuscated-gradients](https://github.com/anishathalye/obfuscated-gradients) Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples
+- [**702**星][4m] [C++] [darthton/xenos](https://github.com/darthton/xenos) Windows DLL 注入器
+- [**701**星][5y] [C] [malcolmrobb/dump1090](https://github.com/malcolmrobb/dump1090) Dump1090 is a simple Mode S decoder for RTLSDR devices
+- [**701**星][1m] [C++] [cmu-sei/pharos](https://github.com/cmu-sei/pharos) 二进制程序的自动化静态分析工具
+- [**700**星][2y] [yichengchen/shadowsocksx-r](https://github.com/yichengchen/shadowsocksx-r) Next Generation of ShadowsocksX
+- [**700**星][15d] [C#] [multipoolminer/multipoolminer](https://github.com/multipoolminer/multipoolminer) Monitors crypto mining pools in real-time in order to find the most profitable for your machine. Controls any miner that is available via command line.
+- [**699**星][8d] [C#] [mganss/htmlsanitizer](https://github.com/mganss/htmlsanitizer) Cleans HTML to avoid XSS attacks
+- [**699**星][10d] [Ruby] [intrigueio/intrigue-core](https://github.com/intrigueio/intrigue-core) 外部攻击面发现框架,自动化OSINT
+- [**699**星][4y] [Py] [gunnery/gunnery](https://github.com/gunnery/gunnery) Remote task execution tool
+- [**699**星][1y] [Py] [bugscanteam/dnslog](https://github.com/bugscanteam/dnslog) 监控 DNS 解析记录和 HTTP 访问记录
+- [**698**星][22d] [C] [scanmem/scanmem](https://github.com/scanmem/scanmem) memory scanner for Linux
+- [**698**星][2m] [Py] [mjg59/python-broadlink](https://github.com/mjg59/python-broadlink) Python模块,用于控制Broadlink RM2 / 3(Pro)遥控器、A1传感器平台和SP2 / 3智能插头
+- [**697**星][8m] [C] [hfiref0x/tdl](https://github.com/hfiref0x/tdl) Driver loader for bypassing Windows x64 Driver Signature Enforcement
+- [**697**星][4m] [CSS] [ajinabraham/cmsscan](https://github.com/ajinabraham/cmsscan) Scan Wordpress, Drupal, Joomla, vBulletin websites for Security issues
+- [**696**星][2m] [C#] [harleyqu1nn/aggressorscripts](https://github.com/harleyqu1nn/aggressorscripts) Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources
+- [**695**星][3m] [uknowsec/active-directory-pentest-notes](https://github.com/uknowsec/active-directory-pentest-notes) 个人域渗透学习笔记
+- [**695**星][5m] [C++] [stealth/opmsg](https://github.com/stealth/opmsg) opmsg message encryption
+- [**695**星][2y] [Py] [sensepost/det](https://github.com/sensepost/det) 可以同时使用单个或多个通道执行数据渗透的PoC
+- [**693**星][1m] [YARA] [rednaga/apkid](https://github.com/rednaga/apkid) Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android
+- [**693**星][3m] [netflix/security-bulletins](https://github.com/netflix/security-bulletins) Security Bulletins that relate to Netflix Open Source
+- [**693**星][2m] [Go] [dliv3/venom](https://github.com/dliv3/venom) Venom - A Multi-hop Proxy for Penetration Testers
+- [**692**星][3y] [Ruby] [phatworx/devise_security_extension](https://github.com/phatworx/devise_security_extension) An enterprise security extension for devise, trying to meet industrial standard security demands for web applications.
+- [**692**星][3d] [HTML] [owasp/asvs](https://github.com/owasp/asvs) Application Security Verification Standard
+- [**691**星][15d] [C] [shadow/shadow](https://github.com/shadow/shadow) shadow:独特的离散事件(discrete-event)网络仿真器/模拟器,可以通过模拟互联网拓扑运行真正的应用程序,如 Tor 和 Bitcoin
+- [**691**星][5m] [C++] [google/certificate-transparency](https://github.com/google/certificate-transparency) Auditing for TLS certificates.
+- [**691**星][2m] [C++] [bareflank/hypervisor](https://github.com/bareflank/hypervisor) lightweight hypervisor SDK written in C++ with support for Windows, Linux and UEFI
+- [**690**星][8m] [JS] [zyfworks/steam-key](https://github.com/zyfworks/steam-key) Steam远程激活
+- [**690**星][5y] [C] [vmt/udis86](https://github.com/vmt/udis86) Disassembler Library for x86 and x86-64
+- [**690**星][2d] [C] [powershell/openssh-portable](https://github.com/powershell/openssh-portable) Portable OpenSSH, all Win32-OpenSSH releases and wiki are managed at
+- [**690**星][7m] [Py] [mr-un1k0d3r/powerlessshell](https://github.com/mr-un1k0d3r/powerlessshell) 依靠MSBuild.exe远程执行PowerShell脚本和命令
+- [**689**星][28d] [Java] [wrbug/developerhelper](https://github.com/wrbug/developerhelper) 帮助开发人员快速开发的工具
+- [**688**星][6m] [Py] [mobier/shadowsocksr-speed](https://github.com/mobier/shadowsocksr-speed) SSR 批量测试节点有效带宽
+- [**688**星][7y] [Ruby] [juuso/bozocrack](https://github.com/juuso/bozocrack) A silly & effective MD5 cracker in Ruby
+- [**688**星][13d] [Py] [grayddq/gscan](https://github.com/grayddq/gscan) 本程序旨在为安全应急响应人员对Linux主机排查时提供便利,实现主机侧Checklist的自动全面化检测,根据检测结果自动数据聚合,进行黑客攻击路径溯源。
+- [**688**星][2m] [C#] [cobbr/sharpsploit](https://github.com/cobbr/sharpsploit) SharpSploit is a .NET post-exploitation library written in C#
+- [**687**星][2d] [Java] [peergos/peergos](https://github.com/peergos/peergos) A decentralised, secure file storage and social network
+- [**687**星][8m] [Py] [kiorky/spynner](https://github.com/kiorky/spynner) Programmatic web browsing module with AJAX support for Python
+- [**687**星][2y] [C] [1n3/privesc](https://github.com/1n3/privesc) A collection of Windows, Linux and MySQL privilege escalation scripts and exploits.
+- [**687**星][8m] [Shell] [1n3/brutex](https://github.com/1n3/brutex) Automatically brute force all services running on a target.
+- [**686**星][23d] [OCaml] [moby/vpnkit](https://github.com/moby/vpnkit) A toolkit for embedding VPN capabilities in your application
+- [**686**星][10m] [Py] [merrychap/shellen](https://github.com/merrychap/shellen) 交互式Shellcode开发环境
+- [**686**星][5m] [leezj9671/pentest_interview](https://github.com/leezj9671/pentest_interview) 个人准备渗透测试和安全面试的经验之谈,和去部分厂商的面试题,干货真的满满~
+- [**685**星][1y] [C] [saelo/pwn2own2018](https://github.com/saelo/pwn2own2018) Pwn2Own 2018 Safari+macOS 漏洞利用链
+- [**685**星][1m] [Py] [iceyhexman/onlinetools](https://github.com/iceyhexman/onlinetools) 在线cms识别|信息泄露|工控|系统|物联网安全|cms漏洞扫描|nmap端口扫描|子域名获取|待续..
+- [**683**星][12m] [HTML] [zhengmin1989/myarticles](https://github.com/zhengmin1989/myarticles) 蒸米的文章(iOS冰与火之歌系列,一步一步学ROP系列,安卓动态调试七种武器系列等)
+- [**683**星][5y] [C] [antirez/hping](https://github.com/antirez/hping) send custom TCP/IP packets and to display target replies like ping do with ICMP replies
+- [**683**星][2m] [JS] [animir/node-rate-limiter-flexible](https://github.com/animir/node-rate-limiter-flexible) Node.js rate limit requests by key with atomic increments. Protection from DDoS and Brute-Force attacks in process Memory, Redis, MongoDb, Memcached, MySQL, PostgreSQL, Cluster or PM
+- [**681**星][11m] [ObjC] [unixpickle/jamwifi](https://github.com/unixpickle/jamwifi) A GUI, easy to use WiFi network jammer for Mac OS X
+- [**681**星][19d] [Py] [rurik/noriben](https://github.com/rurik/noriben) Portable, Simple, Malware Analysis Sandbox
+- [**680**星][6m] [Py] [paranoidninja/carboncopy](https://github.com/paranoidninja/carboncopy) A tool which creates a spoofed certificate of any online website and signs an Executable for AV Evasion. Works for both Windows and Linux
+- [**680**星][9m] [Shell] [dmarmor/epichrome](https://github.com/dmarmor/epichrome) An application (Epichrome.app) and Chrome extension (Epichrome Helper) to create and use Chrome-based SSBs on Mac OSX.
+- [**680**星][2m] [andrewjkerr/security-cheatsheets](https://github.com/andrewjkerr/security-cheatsheets)
+- [**679**星][2m] [Swift] [yenom/bitcoinkit](https://github.com/yenom/BitcoinKit) Bitcoin protocol toolkit for Swift
+- [**679**星][1y] [PS] [arvanaghi/sessiongopher](https://github.com/Arvanaghi/SessionGopher) 使用WMI为远程访问工具(如WinSCP,PuTTY,SuperPuTTY,FileZilla和Microsoft远程桌面)提取保存的会话信息。PowerShell编写
+- [**678**星][2d] [Java] [ron190/jsql-injection](https://github.com/ron190/jsql-injection) Java编写的自动化 SQL 注入工具,跨平台
+- [**678**星][2m] [Go] [pquerna/otp](https://github.com/pquerna/otp) 一次性密码工具,Golang编写
+- [**678**星][2d] [Kotlin] [mygod/vpnhotspot](https://github.com/mygod/vpnhotspot) Share your VPN connection over hotspot or repeater! (root required)
+- [**678**星][2y] [Py] [kkevsterrr/backdoorme](https://github.com/kkevsterrr/backdoorme) powerful auto-backdooring utility
+- [**678**星][3d] [Py] [kevthehermit/pastehunter](https://github.com/kevthehermit/pastehunter) Scanning pastebin with yara rules
+- [**677**星][29d] [ptresearch/attackdetection](https://github.com/ptresearch/attackdetection) 搜索新的漏洞和0day,进行服现并创建PoC exp,以了解这些安全漏洞的工作方式,以及如何在网络层上检测到相关的攻击
+- [**677**星][1m] [Go] [google/gofuzz](https://github.com/google/gofuzz) Fuzz testing for go.
+- [**677**星][13d] [XSLT] [adon90/pentest_compilation](https://github.com/adon90/pentest_compilation) Compilation of commands, tips and scripts that helped me throughout Vulnhub, Hackthebox, OSCP and real scenarios
+- [**676**星][10d] [C] [zerbea/hcxdumptool](https://github.com/zerbea/hcxdumptool) Small tool to capture packets from wlan devices.
+- [**676**星][5m] [C#] [outflanknl/evilclippy](https://github.com/outflanknl/evilclippy) A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows.
+- [**675**星][5d] [C] [google/boringssl](https://github.com/google/boringssl) Mirror of BoringSSL
+- [**674**星][7m] [Java] [pagalaxylab/yahfa](https://github.com/PAGalaxyLab/YAHFA) Yet Another Hook Framework for ART
+- [**674**星][3y] [PHP] [xl7dev/webshell](https://github.com/xl7dev/webshell) Webshell && Backdoor Collection
+- [**674**星][3y] [Batchfile] [ufologist/onekey-decompile-apk](https://github.com/ufologist/onekey-decompile-apk) 一步到位反编译apk工具(onekey decompile apk)
+- [**674**星][1y] [Py] [endgameinc/rta](https://github.com/endgameinc/rta) 根据MITER ATT&CK进行建模,针对恶意tradecraft测试其检测功能。脚本框架
+- [**674**星][1y] [C] [billy-ellis/exploit-challenges](https://github.com/billy-ellis/exploit-challenges) A collection of vulnerable ARM binaries for practicing exploit development
+- [**673**星][2y] [Py] [trycatchhcf/dumpsterfire](https://github.com/trycatchhcf/dumpsterfire) 用于构建自定义的、时间延迟的分布式安全事件,模块化、菜单驱动、跨平台。轻松为Blue&Red Team演习和传感器/警报映射创建自定义事件链。
+- [**673**星][8m] [offensive-security/kali-arm-build-scripts](https://github.com/offensive-security/kali-arm-build-scripts) Kali Linux ARM build scripts
+- [**673**星][7m] [PHP] [ircmaxell/php-compiler](https://github.com/ircmaxell/php-compiler) A compiler. For PHP
+- [**673**星][7m] [Go] [honeytrap/honeytrap](https://github.com/honeytrap/honeytrap) 高级蜜罐框架, 可以运行/监控/管理蜜罐. Go语言编写
+- [**672**星][4m] [Py] [v3n0m-scanner/v3n0m-scanner](https://github.com/v3n0m-scanner/v3n0m-scanner) Popular Pentesting scanner in Python3.6 for SQLi/XSS/LFI/RFI and other Vulns
+- [**672**星][22d] [C#] [obfuscar/obfuscar](https://github.com/obfuscar/obfuscar) Open source obfuscation tool for .NET assemblies
+- [**672**星][2m] [Ruby] [mozilla/ssh_scan](https://github.com/mozilla/ssh_scan) A prototype SSH configuration and policy scanner (Blog:
+- [**672**星][7d] [Py] [blackorbird/apt_report](https://github.com/blackorbird/apt_report) Interesting apt report collection and some special ioc express
+- [**671**星][10m] [JS] [theori-io/pwnjs](https://github.com/theori-io/pwnjs) 辅助开发浏览器exploit 的 JS 模块
+- [**671**星][5m] [bloodzer0/ossa](https://github.com/bloodzer0/ossa) Open-Source Security Architecture | 开源安全架构
+- [**670**星][4y] [praetorian-code/hob0rules](https://github.com/praetorian-code/Hob0Rules) Password cracking rules for Hashcat based on statistics and industry patterns
+- [**670**星][4d] [C#] [uxmal/reko](https://github.com/uxmal/reko) Reko is a binary decompiler.
+- [**670**星][6y] [C] [robertdavidgraham/heartleech](https://github.com/robertdavidgraham/heartleech) Demonstrates the "heartbleed" problem using full OpenSSL stack
+- [**670**星][3y] [Py] [n1nj4sec/memorpy](https://github.com/n1nj4sec/memorpy) Python库, 使用ctypes搜索/编辑 Windows / Linux / macOS / SunOS 程序内存
+- [**669**星][11d] [Shell] [wslutilities/wslu](https://github.com/wslutilities/wslu) A collection of utilities for Windows 10 Linux Subsystems
+- [**668**星][8d] [C++] [leggedrobotics/darknet_ros](https://github.com/leggedrobotics/darknet_ros) YOLO ROS: Real-Time Object Detection for ROS
+- [**668**星][23d] [HCL] [rhinosecuritylabs/cloudgoat](https://github.com/rhinosecuritylabs/cloudgoat) CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool
+- [**667**星][10m] [C++] [zrax/pycdc](https://github.com/zrax/pycdc) C++ python bytecode disassembler and decompiler
+- [**667**星][2y] [Py] [lijiejie/htpwdscan](https://github.com/lijiejie/htpwdscan) A python HTTP weak pass scanner
+- [**667**星][11d] [Py] [kbandla/dpkt](https://github.com/kbandla/dpkt) fast, simple packet creation / parsing, with definitions for the basic TCP/IP protocols
+- [**667**星][3m] [C#] [ghostpack/rubeus](https://github.com/ghostpack/rubeus) 原始Kerberos交互和滥用,C#编写
+- [**667**星][1y] [dsasmblr/hacking-online-games](https://github.com/dsasmblr/hacking-online-games) A curated list of tutorials/resources for hacking online games.
+- [**667**星][1m] [doridori/android-security-reference](https://github.com/doridori/android-security-reference) A W.I.P Android Security Ref
+- [**667**星][17d] [Py] [anouarbensaad/vulnx](https://github.com/anouarbensaad/vulnx) An Intelligent Bot Auto Shell Injector that detect vulnerabilities in multiple types of CMS
+- [**666**星][8m] [Py] [m4ll0k/wpseku](https://github.com/m4ll0k/wpseku) WPSeku - Wordpress Security Scanner
+- [**665**星][6m] [C] [robertdavidgraham/rdpscan](https://github.com/robertdavidgraham/rdpscan) A quick scanner for the CVE-2019-0708 "BlueKeep" vulnerability.
+- [**665**星][2y] [Py] [jhaddix/domain](https://github.com/jhaddix/domain) Setup script for Regon-ng
+- [**665**星][7y] [Java] [honeynet/apkinspector](https://github.com/honeynet/apkinspector) APKinspector is a powerful GUI tool for analysts to analyze the Android applications.
+- [**665**星][23d] [C] [google/afl](https://github.com/google/afl) american fuzzy lop - a security-oriented fuzzer
+- [**664**星][8d] [Py] [jazzband/django-axes](https://github.com/jazzband/django-axes) Keep track of failed login attempts in Django-powered sites.
+- [**664**星][7d] [Py] [gwen001/pentest-tools](https://github.com/gwen001/pentest-tools) 日常使用的渗透工具集合
+- [**664**星][6m] [Py] [droope/droopescan](https://github.com/droope/droopescan) A plugin-based scanner that aids security researchers in identifying issues with several CMSs, mainly Drupal & Silverstripe.
+- [**663**星][11m] [C#] [wwillv/godofhacker](https://github.com/wwillv/godofhacker) 由各种顶级黑客技术结合而成,基本功能覆盖面广,可满足大多数人的基本需求
+- [**663**星][2y] [shadowsocksr-backup/shadowsocksx-ng](https://github.com/shadowsocksr-backup/shadowsocksx-ng) Next Generation of ShadowsocksX
+- [**663**星][6m] [C++] [gossip-sjtu/armariris](https://github.com/gossip-sjtu/armariris) 孤挺花(Armariris) -- 由上海交通大学密码与计算机安全实验室维护的LLVM混淆框架
+- [**663**星][28d] [Java] [google/conscrypt](https://github.com/google/conscrypt) Conscrypt is a Java Security Provider that implements parts of the Java Cryptography Extension and Java Secure Socket Extension.
+- [**663**星][5m] [Py] [aploium/shootback](https://github.com/aploium/shootback) a reverse TCP tunnel let you access target behind NAT or firewall
+- [**663**星][1y] [Go] [0x09al/raven](https://github.com/0x09al/raven) raven is a Linkedin information gathering tool that can be used by pentesters to gather information about an organization employees using Linkedin.
+- [**662**星][9m] [C] [samdenty/wi-pwn](https://github.com/samdenty/Wi-PWN) performs deauth attacks on cheap Arduino boards
+- [**662**星][4d] [JS] [sadeghhayeri/greentunnel](https://github.com/sadeghhayeri/greentunnel) Green Tunnel is an anti-censorship utility designed to bypass DPI system that are put in place by various ISPs to block access to certain websites.
+- [**662**星][6m] [Py] [golismero/golismero](https://github.com/golismero/golismero) 安全测试框架,当前主要是Web安全,可轻松扩展到其他扫描
+- [**661**星][2y] [Py] [ysrc/gourdscanv2](https://github.com/ysrc/gourdscanv2) 被动式漏洞扫描系统
+- [**660**星][3y] [Ruby] [igrigorik/em-proxy](https://github.com/igrigorik/em-proxy) EventMachine Proxy DSL for writing high-performance transparent / intercepting proxies in Ruby
+- [**660**星][1y] [Py] [deepzec/bad-pdf](https://github.com/deepzec/bad-pdf) create malicious PDF file to steal NTLM(NTLMv1/NTLMv2) Hashes from windows machines
+- [**660**星][1y] [chybeta/code-audit-challenges](https://github.com/chybeta/code-audit-challenges) Code-Audit-Challenges
+- [**660**星][1m] [Kotlin] [chuckerteam/chucker](https://github.com/chuckerteam/chucker) simplifies the inspection of HTTP(S) requests/responses, and Throwables fired by your Android App
+- [**659**星][24d] [redhuntlabs/awesome-asset-discovery](https://github.com/redhuntlabs/awesome-asset-discovery) List of Awesome Asset Discovery Resources
+- [**659**星][2y] [Py] [galkan/crowbar](https://github.com/galkan/crowbar) 渗透测试期间使用的暴力破解工具
+- [**658**星][2y] [Py] [travisfsmith/sweetsecurity](https://github.com/travisfsmith/sweetsecurity) Network Security Monitoring on Raspberry Pi type devices
+- [**658**星][8m] [Shell] [rfxn/linux-malware-detect](https://github.com/rfxn/linux-malware-detect) Linux Malware Detection (LMD)
+- [**658**星][8d] [Py] [igogo-x86/hexrayspytools](https://github.com/igogo-x86/hexrayspytools) 结构体和类重建插件
+- [**658**星][6m] [TeX] [bettercrypto/applied-crypto-hardening](https://github.com/bettercrypto/applied-crypto-hardening) Best Current Practices regarding secure online communication and configuration of services using cryptography.
+- [**657**星][2m] [Py] [tib3rius/autorecon](https://github.com/tib3rius/autorecon) AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.
+- [**657**星][5m] [Perl] [jondonas/linux-exploit-suggester-2](https://github.com/jondonas/linux-exploit-suggester-2) Next-Generation Linux Kernel Exploit Suggester
+- [**657**星][1y] [Rust] [endgameinc/xori](https://github.com/endgameinc/xori) Xori is an automation-ready disassembly and static analysis library for PE32, 32+ and shellcode
+- [**656**星][2d] [the-akira/computer-science-resources](https://github.com/the-akira/Computer-Science-Resources) A list of resources in different fields of Computer Science (multiple languages)
+- [**656**星][9m] [Java] [vulnerscom/burp-vulners-scanner](https://github.com/vulnerscom/burp-vulners-scanner) Vulnerability scanner based on vulners.com search API
+- [**656**星][2d] [Py] [quentinhardy/odat](https://github.com/quentinhardy/odat) Oracle Database Attacking Tool
+- [**655**星][9m] [Jupyter Notebook] [supercowpowers/data_hacking](https://github.com/SuperCowPowers/data_hacking) Data Hacking Project
+- [**655**星][6m] [Go] [yawning/obfs4](https://github.com/yawning/obfs4) The obfourscator (Courtesy mirror)
+- [**655**星][6m] [Perl] [moham3driahi/xattacker](https://github.com/moham3driahi/xattacker) X Attacker Tool ☣ Website Vulnerability Scanner & Auto Exploiter
+- [**654**星][6m] [Py] [rabbitmask/weblogicscan](https://github.com/rabbitmask/weblogicscan) Weblogic一键漏洞检测工具,V1.3
+- [**654**星][2m] [Py] [hisxo/gitgraber](https://github.com/hisxo/gitgraber) monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe...
+- [**654**星][18d] [Shell] [diego-treitos/linux-smart-enumeration](https://github.com/diego-treitos/linux-smart-enumeration) Linux enumeration tool for pentesting and CTFs with verbosity levels
+- [**653**星][8m] [C] [wifidog/wifidog-gateway](https://github.com/wifidog/wifidog-gateway) Repository for the wifidog-gateway captive portal designed for embedded systems
+- [**653**星][4y] [Py] [praetorian-code/pentestly](https://github.com/praetorian-code/pentestly) Python和Powershell内部渗透测试框架
+- [**653**星][2y] [C] [fail0verflow/shofel2](https://github.com/fail0verflow/shofel2) Tegra X1 bootrom exploit
+- [**653**星][20d] [Java] [dineshshetty/android-insecurebankv2](https://github.com/dineshshetty/android-insecurebankv2) Vulnerable Android application for developers and security enthusiasts to learn about Android insecurities
+- [**652**星][3y] [C] [rentzsch/mach_inject](https://github.com/rentzsch/mach_inject) interprocess code injection for Mac OS X
+- [**651**星][10m] [Roff] [palantir/windows-event-forwarding](https://github.com/palantir/windows-event-forwarding) 使用 Windows 事件转发实现网络事件监测和防御
+- [**651**星][1y] [Py] [knownsec/rd_checklist](https://github.com/knownsec/rd_checklist) 知道创宇研发技能表
+- [**650**星][4m] [C#] [shack2/snetcracker](https://github.com/shack2/snetcracker) 超级弱口令检查工具是一款Windows平台的弱口令审计工具,支持批量多线程检查,可快速发现弱密码、弱口令账号,密码支持和用户名结合进行检查,大大提高成功率,支持自定义服务端口和字典。
+- [**650**星][2y] [C++] [nathancastle/bootshellcredentialprovider](https://github.com/nathancastle/bootshellcredentialprovider) Windows 10 Credential Provider intended to simplify the process of logging directly into alternative shells to Windows Explorer.
+- [**649**星][1m] [Shell] [toutyrater/v2ray-guide](https://github.com/toutyrater/v2ray-guide)
+- [**649**星][6m] [PHP] [l3m0n/bypass_disable_functions_shell](https://github.com/l3m0n/bypass_disable_functions_shell) 一个各种方式突破Disable_functions达到命令执行的shell
+- [**649**星][2y] [C] [eugnis/spectre-attack](https://github.com/eugnis/spectre-attack) Example of using revealed "Spectre" exploit (CVE-2017-5753 and CVE-2017-5715)
+- [**649**星][15d] [YARA] [eset/malware-ioc](https://github.com/eset/malware-ioc) Indicators of Compromises (IOC) of our various investigations
+- [**648**星][3y] [ObjC] [isecpartners/introspy-ios](https://github.com/isecpartners/introspy-ios) Security profiling for blackbox iOS
+- [**647**星][1y] [Py] [simplysecurity/simplyemail](https://github.com/SimplySecurity/SimplyEmail) Email recon made fast and easy, with a framework to build on
+- [**647**星][9m] [ObjC] [chenxiancai/stcobfuscator](https://github.com/chenxiancai/stcobfuscator) iOS全局自动化 代码混淆 工具!支持cocoapod组件代码一并 混淆,完美避开hardcode方法、静态库方法和系统库方法!
+- [**646**星][3y] [Java] [facebookarchive/proguard](https://github.com/facebookarchive/proguard) A fork of ProGuard.
+- [**645**星][5y] [Shell] [hannob/bashcheck](https://github.com/hannob/bashcheck) test script for shellshocker and related vulnerabilities
+- [**645**星][1y] [Java] [faizann24/wifi-bruteforcer-fsecurify](https://github.com/faizann24/wifi-bruteforcer-fsecurify) Android app,无需 Root 即可爆破 Wifi 密码
+- [**644**星][5m] [C++] [eliboa/tegrarcmgui](https://github.com/eliboa/tegrarcmgui) C++ GUI for TegraRcmSmash (Fusée Gelée exploit for Nintendo Switch)
+- [**644**星][5m] [JS] [draios/sysdig-inspect](https://github.com/draios/sysdig-inspect) A powerful opensource interface for container troubleshooting and security investigation
+- [**643**星][3m] [Py] [gquere/pwn_jenkins](https://github.com/gquere/pwn_jenkins) 有关攻击Jenkins服务器的笔记
+- [**643**星][2y] [C] [coolstar/electra](https://github.com/coolstar/electra) iOS 11.0 - 11.1.2 越狱工具包, 基于 async_awake
+- [**642**星][22d] [C++] [thingpulse/esp8266-weather-station](https://github.com/ThingPulse/esp8266-weather-station) New version of the ESP8266 Weather Station
+- [**642**星][4y] [Py] [paulsec/twittor](https://github.com/paulsec/twittor) A fully featured backdoor that uses Twitter as a C&C server
+- [**642**星][5m] [PHP] [mattiasgeniar/php-exploit-scripts](https://github.com/mattiasgeniar/php-exploit-scripts) A collection of PHP exploit scripts, found when investigating hacked servers. These are stored for educational purposes and to test fuzzers and vulnerability scanners. Feel free to contribute.
+- [**642**星][10m] [Dockerfile] [aquasecurity/microscanner](https://github.com/aquasecurity/microscanner) Scan your container images for package vulnerabilities with Aqua Security
+- [**641**星][5m] [Py] [pyupio/safety](https://github.com/pyupio/safety) 检查所有已安装 Python 包, 查找已知的安全漏洞
+- [**641**星][2y] [harmj0y/cheatsheets](https://github.com/harmj0y/cheatsheets) Cheat sheets for various projects.
+- [**641**星][1y] [Go] [ga0/netgraph](https://github.com/ga0/netgraph) A cross platform http sniffer with a web UI
+- [**640**星][2y] [Shell] [kitten/setup-simple-ipsec-l2tp-vpn](https://github.com/kitten/setup-simple-ipsec-l2tp-vpn) Setup a simple IPSec/L2TP VPN Server for Ubuntu and Debian
+- [**640**星][3m] [C++] [stevemk14ebr/polyhook](https://github.com/stevemk14ebr/polyhook) x86/x64 C++ Hooking Library
+- [**640**星][3d] [Java] [ganyao114/sandhook](https://github.com/ganyao114/sandhook) Android ART Hook/Native Inline Hook/Single Instruction Hook - support 4.4 - 10.0 32/64 bit - Xposed API Compat
+- [**639**星][3d] [Go] [ullaakut/gorsair](https://github.com/ullaakut/gorsair) Gorsair hacks its way into remote docker containers that expose their APIs
+- [**639**星][7d] [Py] [thewhiteh4t/seeker](https://github.com/thewhiteh4t/seeker) Accurately Locate Smartphones using Social Engineering
+- [**639**星][1y] [Py] [lmco/laikaboss](https://github.com/lmco/laikaboss) Laika BOSS: Object Scanning System
+- [**639**星][8m] [Py] [klen/pylama](https://github.com/klen/pylama) Code audit tool for python.
+- [**639**星][23d] [C] [kernelslacker/trinity](https://github.com/kernelslacker/trinity) Linux system call fuzzer
+- [**639**星][8m] [cryptogenic/exploit-writeups](https://github.com/cryptogenic/exploit-writeups) A collection where my current and future writeups for exploits/CTF will go
+- [**638**星][11m] [HTML] [bl4de/security_whitepapers](https://github.com/bl4de/security_whitepapers) Collection of misc IT Security related whitepapers, presentations, slides - hacking, bug bounty, web application security, XSS, CSRF, SQLi
+- [**637**星][1y] [Py] [floodsung/learningtocompare_fsl](https://github.com/floodsung/LearningToCompare_FSL) PyTorch code for CVPR 2018 paper: Learning to Compare: Relation Network for Few-Shot Learning (Few-Shot Learning part)
+- [**637**星][5m] [smgorelik/windows-rce-exploits](https://github.com/smgorelik/windows-rce-exploits) The exploit samples database is a repository for **RCE** (remote code execution) exploits and Proof-of-Concepts for **WINDOWS**, the samples are uploaded for education purposes for red and blue teams.
+- [**637**星][4m] [Jupyter Notebook] [parrt/lolviz](https://github.com/parrt/lolviz) A simple Python data-structure visualization tool for lists of lists, lists, dictionaries; primarily for use in Jupyter notebooks / presentations
+- [**637**星][26d] [Ruby] [markets/invisible_captcha](https://github.com/markets/invisible_captcha) Simple and flexible spam protection solution for Rails applications.
+
+- [**637**星][2y] [PHP] [duoergun0729/1book](https://github.com/duoergun0729/1book) 《Web安全之机器学习入门》
+- [**636**星][2y] [C] [qihoo360/mysql-sniffer](https://github.com/qihoo360/mysql-sniffer) mysql-sniffer is a network traffic analyzer tool for mysql, it is developed by Qihoo DBA and infrastructure team
+- [**636**星][3y] [PS] [hlldz/invoke-phant0m](https://github.com/hlldz/invoke-phant0m) Windows Event Log Killer
+- [**636**星][1y] [JS] [alcuadrado/hieroglyphy](https://github.com/alcuadrado/hieroglyphy) 将所有JavaScript代码转换为等价的()[] {}!+字符序列!,可在浏览器中运行
+- [**635**星][2m] [C++] [apple/swift-lldb](https://github.com/apple/swift-lldb) This is the version of LLDB that supports the Swift programming language & REPL.
+- [**635**星][15d] [webdigi/aws-vpn-server-setup](https://github.com/webdigi/aws-vpn-server-setup) Setup your own private, secure, free* VPN on the Amazon AWS Cloud in 10 minutes. CloudFormation
+- [**635**星][1y] [Swift] [phynet/ios-url-schemes](https://github.com/phynet/ios-url-schemes) a github solution from my gist of iOS list for urls schemes
+- [**635**星][6d] [C++] [nodejs/node-addon-api](https://github.com/nodejs/node-addon-api) Module for using N-API from C++
+- [**635**星][2y] [Py] [mschwager/dhcpwn](https://github.com/mschwager/dhcpwn) testing DHCP IP exhaustion attacks, sniff local DHCP traffic
+- [**635**星][11d] [Py] [igio90/dwarf](https://github.com/igio90/dwarf) Full featured multi arch/os debugger built on top of PyQt5 and frida
+- [**635**星][10m] [Py] [dirkjanm/privexchange](https://github.com/dirkjanm/privexchange) 通过滥用Exchange交换您对Domain Admin privs的特权
+- [**634**星][4y] [PHP] [emposha/php-shell-detector](https://github.com/emposha/php-shell-detector) Web Shell Detector – is a php script that helps you find and identify php/cgi(perl)/asp/aspx shells. Web Shell Detector has a “web shells” signature database that helps to identify “web shell” up to 99%.
+- [**633**星][6m] [C] [travisgoodspeed/md380tools](https://github.com/travisgoodspeed/md380tools) Python tools and patched firmware for the TYT-MD380
+- [**633**星][6m] [Py] [binarydefense/artillery](https://github.com/binarydefense/artillery) The Artillery Project is an open-source blue team tool designed to protect Linux and Windows operating systems through multiple methods.
+- [**632**星][9m] [webbreacher/offensiveinterview](https://github.com/webbreacher/offensiveinterview) Interview questions to screen offensive (red team/pentest) candidates
+- [**631**星][4y] [CoffeeScript] [shadowsocks/shadowsocks-chromeapp](https://github.com/shadowsocks/shadowsocks-chromeapp) Chrome client for shadowsocks
+- [**631**星][10m] [Py] [mehulj94/braindamage](https://github.com/mehulj94/braindamage) Remote administration tool which uses Telegram as a C&C server
+- [**630**星][5m] [Go] [zmap/zgrab](https://github.com/zmap/zgrab) A Banner Grabber, in Go
+- [**629**星][8m] [Shell] [g0tmi1k/msfpc](https://github.com/g0tmi1k/msfpc) MSFvenom Payload Creator (MSFPC)
+- [**629**星][2y] [C] [client9/libinjection](https://github.com/client9/libinjection) SQL / SQLI tokenizer parser analyzer
+- [**629**星][5m] [ankane/secure_rails](https://github.com/ankane/secure_rails) Rails安全最佳实战
+- [**629**星][4m] [3gstudent/pentest-and-development-tips](https://github.com/3gstudent/pentest-and-development-tips) A collection of pentest and development tips
+- [**628**星][2d] [PS] [olafhartong/sysmon-modular](https://github.com/olafhartong/sysmon-modular) sysmon配置模块收集
+- [**628**星][2y] [C++] [codilime/veles](https://github.com/codilime/veles) Binary data analysis and visualization tool
+- [**627**星][7m] [yeyintminthuhtut/awesome-advanced-windows-exploitation-references](https://github.com/yeyintminthuhtut/Awesome-Advanced-Windows-Exploitation-References) List of Awesome Advanced Windows Exploitation References
+- [**626**星][1y] [C] [nfc-tools/mfoc](https://github.com/nfc-tools/mfoc) Mifare Classic Offline Cracker
+- [**626**星][4y] [jeanphorn/wordlist](https://github.com/jeanphorn/wordlist) Collection of some common wordlists such as RDP password, user name list, ssh password wordlist for brute force. IP Cameras Default Passwords.
+- [**625**星][2y] [C] [shadowsocksr-backup/shadowsocksr-libev](https://github.com/shadowsocksr-backup/shadowsocksr-libev) libev port of ShadowsocksR
+- [**625**星][11m] [C++] [ohpe/juicy-potato](https://github.com/ohpe/juicy-potato) A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM.
+- [**625**星][3y] [C] [chokepoint/azazel](https://github.com/chokepoint/azazel) Azazel is a userland rootkit based off of the original LD_PRELOAD technique from Jynx rootkit. It is more robust and has additional features, and focuses heavily around anti-debugging and anti-detection.
+- [**625**星][2m] [Py] [alichtman/stronghold](https://github.com/alichtman/stronghold) Easily configure macOS security settings from the terminal.
+- [**624**星][4y] [JS] [n0wa11/gfw_whitelist](https://github.com/n0wa11/gfw_whitelist) A Pac File of the Whitelisted Websites for the Great Firewall of China (GFW)
+- [**624**星][2d] [arkadiyt/bounty-targets-data](https://github.com/arkadiyt/bounty-targets-data) This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/etc) that are eligible for reports
+- [**623**星][2y] [C] [tgraf/bmon](https://github.com/tgraf/bmon) 带宽监控器和速率估计器
+- [**623**星][3m] [C] [gdabah/distorm](https://github.com/gdabah/distorm) Powerful Disassembler Library For x86/AMD64
+- [**622**星][9d] [Py] [virt-manager/virt-manager](https://github.com/virt-manager/virt-manager) Desktop tool for managing virtual machines via libvirt
+- [**622**星][6m] [Java] [sigploiter/sigploit](https://github.com/sigploiter/sigploit) Telecom Signaling Exploitation Framework - SS7, GTP, Diameter & SIP
+- [**622**星][3m] [PHP] [hongrisec/php-audit-labs](https://github.com/hongrisec/php-audit-labs) 一个关于PHP的代码审计项目
+- [**621**星][2y] [turbo/openftp4](https://github.com/turbo/openftp4) A list of all FTP servers in IPv4 that allow anonymous logins.
+- [**621**星][3m] [Py] [3xp10it/xwaf](https://github.com/3xp10it/xwaf) waf 自动爆破(绕过)工具
+- [**621**星][5m] [Py] [deibit/cansina](https://github.com/deibit/cansina) web 内容发现工具。发出各种请求并过滤回复,识别是否存在请求的资源。
+- [**621**星][2y] [Py] [0xbug/sqliscanner](https://github.com/0xbug/sqliscanner) Automatic SQL injection with Charles and sqlmap api
+- [**620**星][9m] [Py] [epsylon/ufonet](https://github.com/epsylon/ufonet) 用于发起DDoS和DoS攻击的工具包。
+- [**620**星][5m] [JS] [derhuerst/tcp-over-websockets](https://github.com/derhuerst/tcp-over-websockets) Tunnel TCP through WebSockets.
+- [**619**星][5y] [PHP] [pr0x13/idict](https://github.com/pr0x13/idict) iCloud Apple iD BruteForcer
+- [**619**星][10m] [PS] [mattifestation/powershellarsenal](https://github.com/mattifestation/powershellarsenal) A PowerShell Module Dedicated to Reverse Engineering
+- [**619**星][4y] [Go] [leo-stone/hack-petya](https://github.com/leo-stone/hack-petya) 搜索key,恢复 petya 加密的 mft
+- [**618**星][4m] [bypass007/safety-project-collection](https://github.com/bypass007/safety-project-collection) 收集一些比较优秀的开源安全项目,以帮助甲方安全从业人员构建企业安全能力。
+- [**617**星][1y] [Lua] [unixhot/waf](https://github.com/unixhot/waf) 使用Nginx+Lua实现的WAF(版本v1.0)
+- [**617**星][12d] [C] [thewover/donut](https://github.com/thewover/donut) Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters
+- [**617**星][1y] [Go] [lunixbochs/usercorn](https://github.com/lunixbochs/usercorn) 通过模拟器对二进制文件进行动态分析
+- [**616**星][3d] [HTML] [v2ray/manual](https://github.com/v2ray/manual) Source code for
+- [**616**星][1y] [Shell] [wireghoul/htshells](https://github.com/wireghoul/htshells) 自包含的Web Shell和通过.htaccess文件进行的其他攻击。
+- [**616**星][3m] [C] [matheus-garbelini/esp32_esp8266_attacks](https://github.com/matheus-garbelini/esp32_esp8266_attacks) Proof of Concept of ESP32/8266 Wi-Fi vulnerabilties (CVE-2019-12586, CVE-2019-12587, CVE-2019-12588)
+- [**616**星][21d] [Go] [evilsocket/arc](https://github.com/evilsocket/arc) 可用于管理私密数据的工具. 后端是 Go 语言编写的 RESTful 服务器, 前台是Html + JavaScript
+- [**615**星][4m] [Lua] [jx-sec/jxwaf](https://github.com/jx-sec/jxwaf) JXWAF(锦衣盾)是一款基于openresty(nginx+lua)开发的web应用防火墙
+- [**615**星][1y] [jiangsir404/audit-learning](https://github.com/jiangsir404/audit-learning) 记录自己对《代码审计》的理解和总结,对危险函数的深入分析以及在p牛的博客和代码审计圈的收获
+- [**614**星][3y] [ObjC] [macmade/keychaincracker](https://github.com/macmade/keychaincracker) macOS keychain cracking tool
+- [**614**星][6y] [Assembly] [adriancable/8086tiny](https://github.com/adriancable/8086tiny) Official repository for 8086tiny: a tiny PC emulator/virtual machine
+- [**614**星][1y] [Py] [adamcaudill/equationgroupleak](https://github.com/adamcaudill/equationgroupleak) Archive of leaked Equation Group materials
+- [**613**星][1m] [C++] [acidanthera/virtualsmc](https://github.com/acidanthera/virtualsmc) SMC emulator layer
+- [**613**星][2m] [Py] [sourcelair/ceryx](https://github.com/sourcelair/ceryx) Dynamic reverse proxy based on NGINX OpenResty with an API
+- [**613**星][1y] [langyanduan/reborn](https://github.com/langyanduan/reborn) The missing proxy for macOS
+- [**613**星][2y] [Py] [fanhuaandluomu/geetest_break](https://github.com/fanhuaandluomu/geetest_break) 极验验证码破解-源码+手册
+- [**612**星][10m] [Py] [zdresearch/owasp-nettacker](https://github.com/zdresearch/OWASP-Nettacker) Automated Penetration Testing Framework
+- [**612**星][1y] [Ruby] [thesp0nge/dawnscanner](https://github.com/thesp0nge/dawnscanner) Dawn is a static analysis security scanner for ruby written web applications. It supports Sinatra, Padrino and Ruby on Rails frameworks.
+- [**612**星][27d] [C] [quiet/quiet-lwip](https://github.com/quiet/quiet-lwip) create TCP and UDP connections over an audio channel
+- [**612**星][3m] [Py] [netflix/repokid](https://github.com/netflix/repokid) AWS Least Privilege for Distributed, High-Velocity Deployment
+- [**612**星][6m] [Py] [eliasgranderubio/dagda](https://github.com/eliasgranderubio/dagda) Docker安全套件
+- [**612**星][3m] [Go] [eldadru/ksniff](https://github.com/eldadru/ksniff) Kubectl plugin to ease sniffing on kubernetes pods using tcpdump and wireshark
+- [**612**星][3m] [Shell] [ashishb/osx-and-ios-security-awesome](https://github.com/ashishb/osx-and-ios-security-awesome) OSX and iOS related security tools
+- [**612**星][9m] [Py] [al-azif/ps4-exploit-host](https://github.com/al-azif/ps4-exploit-host) Easy PS4 Exploit Hosting
+- [**611**星][4y] [Batchfile] [windowslies/blockwindows](https://github.com/windowslies/blockwindows) Stop Windows 10 Nagging and Spying. Works with Win7-10
+- [**611**星][4m] [Py] [faizann24/xsspy](https://github.com/faizann24/xsspy) Web Application XSS Scanner
+- [**611**星][8m] [denji/golang-tls](https://github.com/denji/golang-tls) Simple Golang HTTPS/TLS Examples
+- [**608**星][7m] [JS] [vincentcox/stacoan](https://github.com/vincentcox/stacoan) StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications.
+- [**607**星][24d] [PS] [farag2/windows-10-setup-script](https://github.com/farag2/windows-10-setup-script) Script to setup Windows 10 1903/1909
+- [**607**星][3m] [Py] [matlink/gplaycli](https://github.com/matlink/gplaycli) Google Play Downloader via Command line
+- [**607**星][8m] [Shell] [cokebar/gfwlist2dnsmasq](https://github.com/cokebar/gfwlist2dnsmasq) A shell script which convert gfwlist into dnsmasq rules. Python version:
+- [**607**星][1y] [C#] [bonesoul/coiniumserv](https://github.com/bonesoul/coiniumserv) Next-gen crypto currency mining pool software
+- [**606**星][2y] [PS] [peewpw/invoke-wcmdump](https://github.com/peewpw/invoke-wcmdump) PowerShell Script to Dump Windows Credentials from the Credential Manager
+- [**606**星][7m] [aleenzz/mysql_sql_bypass_wiki](https://github.com/aleenzz/mysql_sql_bypass_wiki) mysql注入,bypass的一些心得
+- [**606**星][9m] [C#] [0xbadjuju/tokenvator](https://github.com/0xbadjuju/tokenvator) A tool to elevate privilege with Windows Tokens
+- [**605**星][15d] [404notf0und/ai-for-security-learning](https://github.com/404notf0und/ai-for-security-learning) 安全场景、基于AI的安全算法和安全数据分析学习资料整理
+- [**605**星][3m] [Py] [0xgalz/virtuailor](https://github.com/0xgalz/virtuailor) 利用IDA调试获取的信息,自动创建C++的虚表
+
+ 查看详情
+
+
+ ## 静态部分:
+ - 检测非直接调用
+ - 利用条件断点, Hook非直接调用的值赋值过程
+
+ ## 动态 部分
+ - 创建虚表结构
+ - 重命名函数和虚表地址
+ - 给反汇编非直接调用添加结构偏移
+ - 给非直接调用到虚表之间添加交叉引用
+
+ ## 使用
+ - File -> Script File -> Main.py(设置断点) -> IDA调试器执行
+
+
+
+- [**604**星][2m] [Swift] [gradients/gradients](https://github.com/Gradients/Gradients) A curated collection of 180 splendid gradients made in swift
+- [**604**星][10d] [Shell] [securityftw/cs-suite](https://github.com/securityftw/cs-suite) Cloud Security Suite - One stop tool for auditing the security posture of AWS/GCP/Azure infrastructure.
+- [**603**星][1y] [C] [scottybauer/android_kernel_cve_pocs](https://github.com/scottybauer/android_kernel_cve_pocs) A list of my CVE's with POCs
+- [**602**星][28d] [Max] [maktm/flirtdb](https://github.com/Maktm/FLIRTDB) A community driven collection of IDA FLIRT signature files
+- [**602**星][19d] [Py] [webrecorder/pywb](https://github.com/webrecorder/pywb) 重放和记录Web存档
+- [**602**星][6m] [C] [pelya/android-keyboard-gadget](https://github.com/pelya/android-keyboard-gadget) Convert your Android device into USB keyboard/mouse, control your PC from your Android device remotely, including BIOS/bootloader.
+- [**602**星][7y] [Py] [m0mchil/poclbm](https://github.com/m0mchil/poclbm) poclbm:比特币挖掘
+- [**602**星][2y] [Py] [bhdresh/cve-2017-0199](https://github.com/bhdresh/cve-2017-0199) Exploit toolkit CVE-2017-0199 - v4.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft Office RCE. It could generate a malicious RTF/PPSX file and deliver metasploit / meterpreter / other payload to victim without any complex configuration.
+- [**601**星][3y] [Py] [omriher/captipper](https://github.com/omriher/captipper) Malicious HTTP traffic explorer
+- [**601**星][2d] [C#] [microsoft/clrmd](https://github.com/microsoft/clrmd) Microsoft.Diagnostics.Runtime is a set of APIs for introspecting processes and dumps.
+- [**601**星][2y] [HTML] [jiji262/wooyun_articles](https://github.com/jiji262/wooyun_articles) drops.wooyun.org 乌云Drops文章备份
+- [**601**星][4y] [Py] [hatriot/clusterd](https://github.com/hatriot/clusterd) 应用程序服务器攻击工具包
+- [**601**星][9m] [Java] [c0ny1/chunked-coding-converter](https://github.com/c0ny1/chunked-coding-converter) Burp suite 分块传输辅助插件
+- [**600**星][30d] [C++] [mdhiggins/esp8266-http-ir-blaster](https://github.com/mdhiggins/esp8266-http-ir-blaster) ESP8266 Compatible IR Blaster that accepts HTTP commands for use with services like Amazon Echo
+- [**599**星][3d] [Py] [witten/borgmatic](https://github.com/witten/borgmatic) Simple, configuration-driven backup software for servers and workstations
+- [**599**星][2y] [Py] [secretsquirrel/sigthief](https://github.com/secretsquirrel/sigthief) 一次窃取签名并制作一个无效签名
+- [**599**星][5d] [ntkernel/lantern](https://github.com/ntkernel/lantern) V2Ray配置文件,蓝灯(Lantern)破解,手机版+win版
+- [**598**星][1y] [PS] [fortynorthsecurity/wmimplant](https://github.com/FortyNorthSecurity/WMImplant) This is a PowerShell based tool that is designed to act like a RAT. Its interface is that of a shell where any command that is supported is translated into a WMI-equivalent for use on a network/remote machine. WMImplant is WMI based.
+- [**598**星][1y] [Shell] [pires/kubernetes-vagrant-coreos-cluster](https://github.com/pires/kubernetes-vagrant-coreos-cluster) Kubernetes cluster (for testing purposes) made easy with Vagrant and CoreOS.
+- [**597**星][18d] [Py] [nongiach/arm_now](https://github.com/nongiach/arm_now) 快速创建并运行不同CPU架构的虚拟机, 用于逆向分析或执行二进制文件. 基于QEMU
+- [**597**星][1m] [Py] [hslatman/awesome-industrial-control-system-security](https://github.com/hslatman/awesome-industrial-control-system-security) 工控系统安全资源列表
+- [**597**星][6m] [C] [hashcat/hashcat-utils](https://github.com/hashcat/hashcat-utils) Small utilities that are useful in advanced password cracking
+- [**597**星][3d] [YARA] [didierstevens/didierstevenssuite](https://github.com/didierstevens/didierstevenssuite) 工具、脚本列表
+- [**597**星][12d] [Go] [antoniomika/sish](https://github.com/antoniomika/sish) An open source serveo/ngrok alternative. HTTP(S)/WS(S)/TCP Tunnels to localhost using only SSH.
+- [**596**星][1m] [siguza/ios-resources](https://github.com/siguza/ios-resources) Useful resources for iOS hacking
+- [**596**星][2m] [PS] [ramblingcookiemonster/powershell](https://github.com/ramblingcookiemonster/powershell) 各种PowerShell函数和脚本
+- [**596**星][5d] [azure/aks](https://github.com/azure/aks) Azure Kubernetes Service
+- [**595**星][4y] [Makefile] [zhengmin1989/thesevenweapons](https://github.com/zhengmin1989/thesevenweapons) 安卓动态调试七种武器
+- [**595**星][16d] [C] [openvpn/openvpn-gui](https://github.com/openvpn/openvpn-gui) OpenVPN GUI is a graphical frontend for OpenVPN running on Windows XP / Vista / 7 / 8. It creates an icon in the notification area from which you can control OpenVPN to start/stop your VPN tunnels, view the log and do other useful things.
+- [**595**星][5m] [fabrimagic72/malware-samples](https://github.com/fabrimagic72/malware-samples) 恶意软件样本
+- [**595**星][7d] [Go] [cloudflare/cloudflared](https://github.com/cloudflare/cloudflared) Argo Tunnel client
+- [**595**星][1y] [Py] [brannondorsey/passgan](https://github.com/brannondorsey/passgan) A Deep Learning Approach for Password Guessing (
+- [**594**星][23d] [Py] [glasgowembedded/glasgow](https://github.com/GlasgowEmbedded/glasgow) Scots Army Knife for electronics
+- [**594**星][3m] [Py] [thewhiteh4t/pwnedornot](https://github.com/thewhiteh4t/pwnedornot) OSINT Tool for Finding Passwords of Compromised Email Addresses
+- [**594**星][6m] [Py] [dmpayton/django-admin-honeypot](https://github.com/dmpayton/django-admin-honeypot)
+- [**594**星][3y] [C++] [breakingmalwareresearch/atom-bombing](https://github.com/breakingmalwareresearch/atom-bombing) Brand New Code Injection for Windows
+- [**593**星][18d] [PHP] [zhuifengshaonianhanlu/pikachu](https://github.com/zhuifengshaonianhanlu/pikachu) 一个好玩的Web安全-漏洞测试平台
+- [**593**星][8d] [Py] [trustedsec/trevorc2](https://github.com/trustedsec/trevorc2) 通过正常的可浏览的网站隐藏 C&C 指令的客户端/服务器模型,因为时间间隔不同,检测变得更加困难,并且获取主机数据时不会使用 POST 请求
+- [**593**星][6d] [C] [mrexodia/titanhide](https://github.com/mrexodia/titanhide) 用于隐藏某些进程调试器的驱动程序
+- [**592**星][2m] [Py] [pwning/public-writeup](https://github.com/pwning/public-writeup) CTF write-ups by Plaid Parliament of Pwning
+- [**592**星][1m] [HTML] [owasp/railsgoat](https://github.com/owasp/railsgoat) A vulnerable version of Rails that follows the OWASP Top 10
+- [**592**星][2y] [Go] [nim4/dbshield](https://github.com/nim4/dbshield) Database firewall written in Go
+- [**591**星][2y] [Py] [sc0tfree/mentalist](https://github.com/sc0tfree/mentalist) 自定义wordlist 生成器,带界面,可生成与 Hashcat、Johnthe Ripper 兼容的 wordlist
+- [**591**星][3m] [Go] [moul/sshportal](https://github.com/moul/sshportal) Transparent SSH bastion
+- [**590**星][2y] [Go] [timest/goscan](https://github.com/timest/goscan) goscan is a simple and efficient IPv4 network scanner that discovers all active devices on local subnet.
+- [**590**星][11m] [pandazheng/ioshackstudy](https://github.com/pandazheng/ioshackstudy) IOS安全学习资料汇总
+- [**590**星][2y] [Py] [eldraco/salamandra](https://github.com/eldraco/salamandra) Salamandra is a tool to find spy microphones that use radio freq to transmit. It uses SDR.
+- [**590**星][7y] [Py] [dabeaz/bitey](https://github.com/dabeaz/bitey) Import LLVM bitcode directly into Python and use it as an extension module.
+- [**590**星][6m] [Ruby] [bit4woo/summit_ppt](https://github.com/bit4woo/summit_ppt) 各种安全大会PPT PDF
+- [**589**星][3m] [Py] [pahaz/sshtunnel](https://github.com/pahaz/sshtunnel) SSH tunnels to remote server.
+- [**589**星][1y] [brunty/awesome-checker-services](https://github.com/brunty/awesome-checker-services) List of links to the various checkers out there on the web for sites, domains, security etc
+- [**589**星][1m] [Py] [1n3/blackwidow](https://github.com/1n3/blackwidow) A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.
+- [**588**星][28d] [Go] [nytimes/gziphandler](https://github.com/nytimes/gziphandler) Go middleware to gzip HTTP responses
+- [**587**星][13d] [C++] [lhy0403/qv2ray](https://github.com/lhy0403/qv2ray) v2ray linux Windows macOS GUI, 使用 Qt & c++, 支持 vmess ss socks,支持 vmess:// 扫描二维码,路由编辑,附带 Windows/Plasma 工具栏
+- [**587**星][3y] [Perl 6] [rapid7/iotseeker](https://github.com/rapid7/iotseeker) scan a network for specific types of IoT devices to detect if they are using the default, factory set credentials.
+- [**587**星][3y] [hack-with-github/windows](https://github.com/hack-with-github/windows) Awesome tools to exploit Windows !
+- [**587**星][3y] [C] [cr4sh/thinkpwn](https://github.com/cr4sh/thinkpwn) Lenovo ThinkPad System Management Mode arbitrary code execution 0day exploit
+- [**586**星][12d] [lirantal/awesome-nodejs-security](https://github.com/lirantal/awesome-nodejs-security) Awesome Node.js Security resources
+- [**586**星][2y] [Swift] [krisyu/swift14macosapps](https://github.com/krisyu/swift14macosapps) approaching macOS development using swift with 14 mini projects.
+- [**585**星][2m] [Py] [thinkst/opencanary](https://github.com/thinkst/opencanary) Modular and decentralised honeypot
+- [**585**星][8m] [Java] [olacabs/jackhammer](https://github.com/olacabs/jackhammer) 安全漏洞评估和管理工具
+- [**585**星][21d] [C++] [henrypp/memreduct](https://github.com/henrypp/memreduct) Lightweight real-time memory management application to monitor and clean system memory on your computer.
+- [**585**星][4y] [certsocietegenerale/irm](https://github.com/certsocietegenerale/irm) Incident Response Methodologies
+- [**584**星][8m] [Py] [woj-ciech/danger-zone](https://github.com/woj-ciech/danger-zone) Correlate data between domains, IPs and email addresses, present it as a graph and store everything into Elasticsearch and JSON files.
+- [**584**星][9m] [C++] [secrary/makin](https://github.com/secrary/makin) reveal anti-debugging and anti-VM tricks
+- [**584**星][1m] [PS] [monoxgas/srdi](https://github.com/monoxgas/srdi) Shellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode
+- [**584**星][2y] [Java] [findbugsproject/findbugs](https://github.com/findbugsproject/findbugs) 一个使用静态分析在Java代码中查找错误的程序
+- [**584**星][11d] [Ruby] [dev-sec/ansible-ssh-hardening](https://github.com/dev-sec/ansible-ssh-hardening) This Ansible role provides numerous security-related ssh configurations, providing all-round base protection.
+- [**583**星][2d] [Py] [vivisect/vivisect](https://github.com/vivisect/vivisect)
+- [**583**星][3y] [C] [ktap/ktap](https://github.com/ktap/ktap) a new scripting dynamic tracing tool for Linux
+- [**583**星][5m] [d30sa1/rootkits-list-download](https://github.com/d30sa1/rootkits-list-download) Rootkit收集
+- [**582**星][8d] [Py] [facebookincubator/weasel](https://github.com/facebookincubator/weasel) DNS covert channel implant for Red Teams.
+- [**582**星][1y] [Py] [softscheck/tplink-smartplug](https://github.com/softscheck/tplink-smartplug) TP-Link WiFi SmartPlug Client and Wireshark Dissector
+- [**582**星][7m] [Py] [ekultek/zeus-scanner](https://github.com/ekultek/zeus-scanner) Advanced reconnaissance utility
+- [**582**星][2m] [Go] [dimitarpetrov/stegify](https://github.com/dimitarpetrov/stegify) Go tool for LSB steganography, capable of hiding any file within an image.
+- [**581**星][1y] [Py] [spencerdodd/kernelpop](https://github.com/spencerdodd/kernelpop) 内核提权枚举和漏洞利用框架
+- [**581**星][2m] [C++] [secrary/andromeda](https://github.com/secrary/andromeda) Andromeda - Interactive Reverse Engineering Tool for Android Applications
+- [**581**星][9m] [Py] [romanz/amodem](https://github.com/romanz/amodem) 使用简单的耳机在两台计算机之间传输文件,实现真正的气密通信(通过扬声器和麦克风)或音频电缆(以提高传输速度)
+- [**581**星][3y] [Py] [mlsecproject/combine](https://github.com/mlsecproject/combine) 从公开的资源中收集IOC
+- [**581**星][24d] [Ruby] [hackplayers/evil-winrm](https://github.com/hackplayers/evil-winrm) 用户Hacking/渗透的终极WinRM shell
+- [**581**星][1y] [JS] [cryptogenic/ps4-5.05-kernel-exploit](https://github.com/cryptogenic/ps4-5.05-kernel-exploit) A fully implemented kernel exploit for the PS4 on 5.05FW
+- [**581**星][3d] [clarketm/proxy-list](https://github.com/clarketm/proxy-list) A list of free, public, forward proxy servers. UPDATED DAILY!
+- [**580**星][2m] [C] [pyca/bcrypt](https://github.com/pyca/bcrypt) Modern(-ish) password hashing for your software and your servers
+- [**580**星][2y] [PHP] [pentestgeek/phishing-frenzy](https://github.com/pentestgeek/phishing-frenzy) Rubyon Rails 钓鱼框架
+- [**580**星][6m] [nshalabi/sysmontools](https://github.com/nshalabi/sysmontools) Utilities for Sysmon
+- [**580**星][7m] [Py] [googlecloudplatform/flask-talisman](https://github.com/googlecloudplatform/flask-talisman) HTTP security headers for Flask
+- [**580**星][2y] [Py] [ant4g0nist/lisa.py](https://github.com/ant4g0nist/lisa.py) -An Exploit Dev Swiss Army Knife.
+- [**579**星][1y] [CSS] [functionclub/ssr-bash-python](https://github.com/functionclub/ssr-bash-python) 一个SSR多用户控制脚本
+- [**579**星][1y] [Go] [manifoldco/torus-cli](https://github.com/manifoldco/torus-cli) A secure, shared workspace for secrets
+- [**579**星][1m] [C] [getdnsapi/stubby](https://github.com/getdnsapi/stubby) Stubby is the name given to a mode of using getdns which enables it to act as a local DNS Privacy stub resolver (using DNS-over-TLS).
+- [**579**星][1y] [Java] [federicodotta/brida](https://github.com/federicodotta/brida) The new bridge between Burp Suite and Frida!
+- [**579**星][4y] [80vul/phpcodz](https://github.com/80vul/phpcodz) 在php源代码的基础上去分析容易导致php应用程序的一些安全问题的根本所在
+- [**578**星][1y] [C#] [tyranid/dotnettojscript](https://github.com/tyranid/dotnettojscript) 创建从内存中加载.NET v2程序集的JScript文件
+- [**578**星][6m] [Py] [timthony/self_drive](https://github.com/timthony/self_drive) 基于树莓派的自动驾驶小车,利用树莓派和tensorflow实现小车在赛道的自动驾驶。(Self-driving car based on raspberry pi(tensorflow))
+- [**578**星][3y] [Pascal] [t-d-k/librecrypt](https://github.com/t-d-k/librecrypt) Windows的透明、即时磁盘加密,兼容LUKS
+- [**578**星][10m] [mtivadar/windows10_ntfs_crash_dos](https://github.com/mtivadar/windows10_ntfs_crash_dos) Windows NTFS文件系统崩溃漏洞PoC
+- [**577**星][1y] [C++] [qbdi/qbdi](https://github.com/QBDI/QBDI) A Dynamic Binary Instrumentation framework based on LLVM.
+- [**577**星][12m] [HTML] [r00t-3xp10it/morpheus](https://github.com/r00t-3xp10it/morpheus) Morpheus - Automating Ettercap TCP/IP (MITM-hijacking Tool)
+- [**576**星][24d] [PS] [threatexpress/red-team-scripts](https://github.com/threatexpress/red-team-scripts) A collection of Red Team focused tools, scripts, and notes
+- [**576**星][3d] [Go] [mysteriumnetwork/node](https://github.com/mysteriumnetwork/node) Mysterium Node - VPN server and client for Mysterium Network
+- [**576**星][3m] [Py] [jonluca/anubis](https://github.com/jonluca/anubis) Subdomain enumeration and information gathering tool
+- [**576**星][2y] [Py] [dutchgraa/crackcoin](https://github.com/dutchgraa/crackcoin) Very basic blockchain-free cryptocurrency PoC in Python
+- [**575**星][18d] [Go] [yggdrasil-network/yggdrasil-go](https://github.com/yggdrasil-network/yggdrasil-go) An experiment in scalable routing as an encrypted IPv6 overlay network
+- [**575**星][2m] [Go] [shopify/kubeaudit](https://github.com/shopify/kubeaudit) kubeaudit helps you audit your Kubernetes clusters against common security controls
+- [**575**星][2y] [JS] [shadowsocks-plus/shadowsocks-plus](https://github.com/shadowsocks-plus/shadowsocks-plus)
+- [**575**星][9m] [Py] [fox-it/mitm6](https://github.com/fox-it/mitm6) exploits the default configuration of Windows to take over the default DNS server
+- [**574**星][1m] [Py] [nekmo/amazon-dash](https://github.com/nekmo/amazon-dash) Hack your Amazon Dash to run what you want.
+- [**574**星][6m] [PHP] [s3inlc/hashtopolis](https://github.com/s3inlc/hashtopolis) Hashcat wrapper, 用于跨平台分布式Hash破解
+- [**574**星][5m] [Py] [nidem/kerberoast](https://github.com/nidem/kerberoast) 一系列用于攻击MS Kerberos实现的工具
+- [**574**星][4m] [Py] [neo23x0/yargen](https://github.com/neo23x0/yargen) yarGen is a generator for YARA rules
+- [**574**星][3y] [C] [iagox86/hash_extender](https://github.com/iagox86/hash_extender)
+- [**574**星][4y] [C#] [elevenpaths/evilfoca](https://github.com/elevenpaths/evilfoca) Tool to analyze and test security in IPv4 and IPv6 data networks
+- [**574**星][14d] [Perl] [bollwarm/sectoolset](https://github.com/bollwarm/sectoolset) 安全项目工具集合
+- [**573**星][2y] [C++] [zneak/fcd](https://github.com/zneak/fcd) An optimizing decompiler
+- [**573**星][4y] [C++] [microsoft/iediagnosticsadapter](https://github.com/microsoft/iediagnosticsadapter) IE Diagnostics Adapter is a standalone exe that enables tools to debug and diagnose IE11 using the Chrome remote debug protocol.
+- [**573**星][3y] [C] [jgarzik/cpuminer](https://github.com/jgarzik/cpuminer) CPU miner for bitcoin
+- [**573**星][3m] [Perl] [alisamtechnology/atscan](https://github.com/alisamtechnology/atscan) Advanced dork Search & Mass Exploit Scanner
+- [**572**星][27d] [Py] [0kee-team/watchad](https://github.com/0kee-team/watchad) AD Security Intrusion Detection System
+- [**572**星][2y] [Py] [nnamon/linux-exploitation-course](https://github.com/nnamon/linux-exploitation-course) 中级 Linux 漏洞开发课程
+- [**572**星][2y] [hack-with-github/awesome-security-gists](https://github.com/hack-with-github/awesome-security-gists) Gist收集
+- [**572**星][2m] [HTML] [gwillem/magento-malware-scanner](https://github.com/gwillem/magento-malware-scanner) 用于检测 Magento 恶意软件的规则/样本集合
+- [**572**星][16d] [Java] [alexzaitsev/apk-dependency-graph](https://github.com/alexzaitsev/apk-dependency-graph) Android class dependency visualizer. This tool helps to visualize the current state of the project.
+- [**571**星][10d] [Py] [nsacyber/walkoff](https://github.com/nsacyber/WALKOFF) A flexible, easy to use, automation framework allowing users to integrate their capabilities and devices to cut through the repetitive, tedious tasks slowing them down. #nsacyber
+- [**571**星][11m] [Py] [ddevault/pass-rotate](https://github.com/ddevault/pass-rotate) A tool and library for rotating your password on online services
+- [**571**星][4y] [Go] [fzipp/gocyclo](https://github.com/fzipp/gocyclo) Calculate cyclomatic complexities of functions in Go source code.
+- [**571**星][3y] [HTML] [bitdust/wamacry](https://github.com/bitdust/wamacry) 假装自己是个病毒
+- [**570**星][2m] [Py] [tarunkant/gopherus](https://github.com/tarunkant/gopherus) This tool generates gopher link for exploiting SSRF and gaining RCE in various servers
+- [**570**星][23d] [C] [jhallen/joes-sandbox](https://github.com/jhallen/joes-sandbox)
+- [**570**星][18d] [Py] [graphenex/graphenex](https://github.com/graphenex/graphenex) Automated System Hardening Framework
+- [**570**星][2y] [PS] [411hall/jaws](https://github.com/411hall/jaws) JAWS - Just Another Windows (Enum) Script
+- [**569**星][7m] [ObjC] [rpetrich/captainhook](https://github.com/rpetrich/captainhook) Common hooking/monkey patching headers for Objective-C on Mac OS X and iPhone OS. MIT licensed
+- [**569**星][4y] [Py] [musalbas/heartbleed-masstest](https://github.com/musalbas/heartbleed-masstest) Multi-threaded tool for scanning many hosts for CVE-2014-0160.
+- [**569**星][12d] [Java] [guardianproject/netcipher](https://github.com/guardianproject/netcipher) a library for Android that provides multiple means to improve network security in mobile applications
+- [**569**星][5m] [Py] [codingo/vhostscan](https://github.com/codingo/vhostscan) A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.
+- [**568**星][1y] [Solidity] [crytic/not-so-smart-contracts](https://github.com/crytic/not-so-smart-contracts) 常见的以太坊智能合约漏洞示例,包括来自真实智能合约的代码。
+- [**568**星][5m] [C++] [sgan81/apfs-fuse](https://github.com/sgan81/apfs-fuse) FUSE driver for APFS (Apple File System)
+- [**568**星][11m] [Py] [genetic-malware/ebowla](https://github.com/genetic-malware/ebowla) Framework for Making Environmental Keyed Payloads (NO LONGER SUPPORTED)
+- [**568**星][2d] [HTML] [fate0/proxylist](https://github.com/fate0/proxylist) proxylist, generate by fate0/getproxy project in every 15 minute
+- [**568**星][1y] [C] [externalist/exploit_playground](https://github.com/externalist/exploit_playground) Analysis of public exploits or my 1day exploits
+- [**567**星][2y] [Visual Basic .NET] [mdsecactivebreach/cactustorch](https://github.com/mdsecactivebreach/cactustorch) Payload Generation for Adversary Simulations
+- [**567**星][2y] [C] [matthijskooijman/arduino-lmic](https://github.com/matthijskooijman/arduino-lmic) LoraWAN-in-C library, adapted to run under the Arduino environment
+- [**567**星][3m] [C++] [lowpowerlab/rfm69](https://github.com/lowpowerlab/rfm69) RFM69 library for RFM69W, RFM69HW, RFM69CW, RFM69HCW (semtech SX1231, SX1231H)
+- [**566**星][11m] [JS] [raineorshine/solgraph](https://github.com/raineorshine/solgraph) Visualize Solidity control flow for smart contract security analysis.
+- [**566**星][10m] [C] [justinsteven/dostackbufferoverflowgood](https://github.com/justinsteven/dostackbufferoverflowgood) 跨站点脚本编写者的演示和教程,这些站点编写者不能很好地堆积缓冲区溢出,并且也想做其他事情
+- [**565**星][3y] [HTML] [salesforce/vulnreport](https://github.com/salesforce/vulnreport) 渗透测试管理和自动化平台
+- [**565**星][21d] [ObjC] [hdb-li/lldebugtool](https://github.com/hdb-li/lldebugtool) LLDebugTool is a debugging tool for developers and testers that can help you analyze and manipulate data in non-xcode situations.
+- [**565**星][6m] [C#] [fremag/memoscope.net](https://github.com/fremag/memoscope.net) Dump and analyze .Net applications memory ( a gui for WinDbg and ClrMd )
+- [**565**星][3y] [Py] [edwardz246003/iis_exploit](https://github.com/edwardz246003/iis_exploit) Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header beginning with "If: Port Knocking
+- [**510**星][9d] [C++] [miki151/keeperrl](https://github.com/miki151/keeperrl) Source code of KeeperRL
+- [**509**星][2y] [Py] [robindavid/lsb-steganography](https://github.com/robindavid/lsb-steganography) Python program to steganography files into images using the Least Significant Bit.
+- [**509**星][3y] [Py] [reyammer/shellnoob](https://github.com/reyammer/shellnoob) A shellcode writing toolkit
+- [**509**星][5m] [C] [nurupo/rootkit](https://github.com/nurupo/rootkit) Linux rootkit,针对 Ubuntu 16.04 及 10.04 (Linux 内核 4.4.0/2.6.32), 支持 i386 和 amd64
+- [**509**星][12m] [Go] [mthbernardes/gtrs](https://github.com/mthbernardes/gtrs) 使用Google翻译器作为代理将任意命令发送到受感染的计算机
+- [**508**星][3m] [C++] [xmrig/xmrig-nvidia](https://github.com/xmrig/xmrig-nvidia) xmrig-nvidia: 门罗币挖矿代码 N卡版本
+- [**508**星][2y] [Py] [sjvasquez/web-traffic-forecasting](https://github.com/sjvasquez/web-traffic-forecasting) Kaggle | Web Traffic Forecasting
+- [**508**星][2y] [C] [samyk/opensesame](https://github.com/samyk/opensesame) OpenSesame attacks wireless garages and can open most fixed-code garages and gates in seconds using a Mattel toy
+- [**508**星][1m] [Py] [platomav/meanalyzer](https://github.com/platomav/meanalyzer) Intel Engine Firmware Analysis Tool
+- [**508**星][2m] [Groovy] [bryansharp/hibeaver](https://github.com/bryansharp/hibeaver) Java字节码修改神器
+- [**507**星][11m] [Py] [idarlingteam/idarling](https://github.com/IDArlingTeam/IDArling) 多人协作插件
+- [**507**星][5d] [Py] [mozillasecurity/funfuzz](https://github.com/mozillasecurity/funfuzz) A collection of fuzzers in a harness for testing the SpiderMonkey JavaScript engine.
+- [**507**星][7d] [Py] [certtools/intelmq](https://github.com/certtools/intelmq) IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
+- [**506**星][5m] [Py] [rabbitstack/fibratus](https://github.com/rabbitstack/fibratus) Windows内核探索和跟踪工具
+- [**506**星][4m] [PHP] [nettitude/xss_payloads](https://github.com/nettitude/xss_payloads) Exploitation for XSS
+- [**506**星][7m] [C] [iovisor/ply](https://github.com/iovisor/ply) Dynamic Tracing in Linux
+- [**506**星][5m] [PHP] [delight-im/php-auth](https://github.com/delight-im/php-auth) Authentication for PHP. Simple, lightweight and secure.
+- [**505**星][5d] [Py] [theresafewconors/sooty](https://github.com/theresafewconors/sooty) The SOC Analysts all-in-one CLI tool to automate and speed up workflow.
+- [**505**星][8m] [JS] [mindedsecurity/jstillery](https://github.com/mindedsecurity/jstillery) Advanced JavaScript Deobfuscation via Partial Evaluation
+- [**505**星][4m] [Java] [happylishang/cacheemulatorchecker](https://github.com/happylishang/cacheemulatorchecker) Android模拟器检测,检测Android模拟器 ,获取相对真实的IMEI AndroidId 序列号 MAC地址等,作为DeviceID,应对防刷需求等
+- [**504**星][2d] [C] [greenbone/openvas](https://github.com/greenbone/openvas) Open Vulnerability Assessment Scanner
+- [**504**星][3y] [OCaml] [trustinsoft/tis-interpreter](https://github.com/trustinsoft/tis-interpreter) 在执行以传统方式编译的相同程序时,检测C程序中细微的错误,这些错误可能不会产生明显的影响。
+- [**504**星][3m] [Go] [timothyye/godns](https://github.com/timothyye/godns) A dynamic DNS client tool, supports AliDNS, Cloudflare, Google Domains, DNSPod, HE.net & DuckDNS, written in Go.
+- [**504**星][3m] [mutability/dump1090](https://github.com/mutability/dump1090) Dump1090 is a simple Mode S decoder for RTLSDR devices
+- [**503**星][2y] [Java] [nsacyber/grassmarlin](https://github.com/nsacyber/GRASSMARLIN) Provides situational awareness of Industrial Control Systems (ICS) and Supervisory Control and Data Acquisition (SCADA) networks in support of network security assessments. #nsacyber
+- [**503**星][12m] [C] [google/ktsan](https://github.com/google/ktsan) 用于Linux内核的快速数据竞赛检测器
+- [**502**星][2y] [C++] [andrivet/advobfuscator](https://github.com/andrivet/advobfuscator) Obfuscation library based on C++11/14 and metaprogramming
+- [**502**星][2y] [JS] [kevva/wifi-password](https://github.com/kevva/wifi-password) Get current wifi password
+- [**502**星][3m] [Go] [cyberark/summon](https://github.com/cyberark/summon) CLI that provides on-demand secrets access for common DevOps tools
+- [**502**星][1m] [Py] [storyyeller/enjarify](https://github.com/storyyeller/enjarify) 将Dalvik字节码转为对应的Java字节码(google Fork版)
+- [**502**星][9m] [C#] [lowleveldesign/wtrace](https://github.com/lowleveldesign/wtrace) Command line tracing tool for Windows, based on ETW.
+- [**502**星][7m] [Py] [lijiejie/ds_store_exp](https://github.com/lijiejie/ds_store_exp) A .DS_Store file disclosure exploit. It parses .DS_Store file and downloads files recursively.
+- [**502**星][2y] [Py] [chybeta/cmspoc](https://github.com/chybeta/cmspoc) CMS渗透测试框架
+- [**502**星][2m] [Py] [byt3bl33d3r/sprayingtoolkit](https://github.com/byt3bl33d3r/sprayingtoolkit) Scripts to make password spraying attacks against Lync/S4B & OWA a lot quicker, less painful and more efficient
+- [**501**星][7d] [JS] [shadowsocks/shadowsocks-org](https://github.com/shadowsocks/shadowsocks-org)
+- [**501**星][20d] [owasp/wstg](https://github.com/owasp/wstg) The OWASP Web Security Testing Guide includes a "best practice" penetration testing framework which users can implement in their own organizations and a "low level" penetration testing guide that describes techniques for testing most common web application and web service security issues.
+- [**501**星][20d] [owasp/wstg](https://github.com/OWASP/wstg) The OWASP Web Security Testing Guide includes a "best practice" penetration testing framework which users can implement in their own organizations and a "low level" penetration testing guide that describes techniques for testing most common web application and web service security issues.
+- [**501**星][22d] [Go] [genuinetools/amicontained](https://github.com/genuinetools/amicontained) Container introspection tool. Find out what container runtime is being used as well as features available.
+- [**500**星][25d] [PS] [stefanscherer/packer-windows](https://github.com/stefanscherer/packer-windows) Windows Packer 模板:Win10, Server 2016, 1709, 1803, 1809, 2019, 1903, Insider with Docker
+- [**500**星][20d] [JS] [sindresorhus/public-ip](https://github.com/sindresorhus/public-ip) 快速获取外网IP地址
+- [**500**星][9m] [C] [nowsecure/fsmon](https://github.com/nowsecure/fsmon) monitor filesystem on iOS / OS X / Android / FirefoxOS / Linux
+- [**500**星][3y] [C] [gaffe23/linux-inject](https://github.com/gaffe23/linux-inject) Tool for injecting a shared object into a Linux process
+- [**499**星][2m] [JS] [acmesec/pocbox](https://github.com/Acmesec/PoCBox) 赏金猎人的脆弱性测试辅助平台
+- [**499**星][3y] [C] [huawei/huawei_liteos_kernel](https://github.com/huawei/huawei_liteos_kernel)
+- [**499**星][8d] [Swift] [google/science-journal-ios](https://github.com/google/science-journal-ios) Use the sensors in your mobile devices to perform science experiments. Science doesn’t just happen in the classroom or lab—tools like Science Journal let you see how the world works with just your phone.
+- [**499**星][7y] [Java] [chainsdd/superuser](https://github.com/chainsdd/superuser) Android superuser permissions app (from Zinx)
+- [**499**星][3m] [Py] [awslabs/aws-security-benchmark](https://github.com/awslabs/aws-security-benchmark) Open source demos, concept and guidance related to the AWS CIS Foundation framework.
+- [**498**星][17d] [xrkk/awesome-ida](https://github.com/xrkk/awesome-ida) moved to:
+- [**498**星][8m] [Py] [tp4a/teleport](https://github.com/tp4a/teleport) Teleport是一款简单易用的堡垒机系统。
+- [**498**星][4y] [Assembly] [xoreaxeaxeax/repsych](https://github.com/xoreaxeaxeax/repsych) Psychological warfare in reverse engineering
+- [**498**星][4y] [Py] [vector35/deprecated-binaryninja-python](https://github.com/vector35/deprecated-binaryninja-python) Deprecated Binary Ninja prototype written in Python
+- [**498**星][9m] [C++] [kirschju/demovfuscator](https://github.com/kirschju/demovfuscator) 对抗控制流线性化的工具,反混淆器。
+- [**498**星][2m] [govolution/betterdefaultpasslist](https://github.com/govolution/betterdefaultpasslist)
+- [**498**星][7y] [C] [ghughes/fruitstrap](https://github.com/ghughes/fruitstrap) Install and debug iPhone apps from the command line, without using Xcode
+- [**498**星][8m] [ernw/hardening](https://github.com/ernw/hardening) Repository of Hardening Guides
+- [**498**星][2y] [PS] [danielbohannon/invoke-cradlecrafter](https://github.com/danielbohannon/invoke-cradlecrafter) PowerShell Remote Download Cradle Generator & Obfuscator
+- [**498**星][3y] [C] [android-rooting-tools/android_run_root_shell](https://github.com/android-rooting-tools/android_run_root_shell)
+- [**497**星][8m] [Shell] [stamusnetworks/selks](https://github.com/stamusnetworks/selks) A Suricata based IDS/IPS distro
+- [**497**星][2y] [C++] [rbei-etas/busmaster](https://github.com/rbei-etas/busmaster) 模拟,分析和测试数据总线系统,例如CAN。
+- [**497**星][6m] [Visual Basic .NET] [nyan-x-cat/lime-rat](https://github.com/nyan-x-cat/lime-rat) LimeRAT | Simple, yet powerful remote administration tool for Windows (RAT)
+- [**497**星][29d] [netbiosx/checklists](https://github.com/netbiosx/checklists) 参与的各种渗透测试的清单
+- [**497**星][2m] [C] [m0nad/diamorphine](https://github.com/m0nad/diamorphine) 适用于Linux Kernels 2.6.x / 3.x / 4.x(x86和x86_64)的LKM rootkit
+- [**497**星][7m] [ASP] [landgrey/webshell-detect-bypass](https://github.com/landgrey/webshell-detect-bypass) 绕过专业工具检测的Webshell研究文章和免杀的Webshell
+- [**496**星][24d] [C#] [akiver/csgo-demos-manager](https://github.com/akiver/csgo-demos-manager)
+- [**496**星][2m] [xairy/vmware-exploitation](https://github.com/xairy/vmware-exploitation) A bunch of links related to VMware escape exploits
+- [**496**星][2y] [C] [triaquae/crazyeye](https://github.com/triaquae/crazyeye) OpenSource IT Automation Software
+- [**496**星][2y] [JS] [rptec/squid-pac](https://github.com/rptec/squid-pac) 利用国外VPS搭建多协议代理服务,squid PAC代理服务器,25端口翻墙 ....墙已加高,https网站已失效,普通站点仍可代理..建议使用ssr替代
+- [**496**星][24d] [C] [r0hi7/binexp](https://github.com/r0hi7/binexp) Linux Binary Exploitation
+- [**496**星][1y] [PLpgSQL] [nologic/idaref](https://github.com/nologic/idaref) 指令参考插件.
+- [**496**星][1y] [XSLT] [honze-net/nmap-bootstrap-xsl](https://github.com/honze-net/nmap-bootstrap-xsl) A Nmap XSL implementation with Bootstrap.
+- [**496**星][5d] [C] [anestisb/vdexextractor](https://github.com/anestisb/vdexextractor) Tool to decompile & extract Android Dex bytecode from Vdex files
+- [**495**星][9m] [manoelt/50m_ctf_writeup](https://github.com/manoelt/50m_ctf_writeup) $50 Million CTF from Hackerone - Writeup
+- [**495**星][7m] [Py] [initstring/dirty_sock](https://github.com/initstring/dirty_sock) Linux privilege escalation exploit via snapd (CVE-2019-7304)
+- [**495**星][1y] [Py] [c0ny1/upload-fuzz-dic-builder](https://github.com/c0ny1/upload-fuzz-dic-builder) 上传漏洞fuzz字典生成脚本
+- [**494**星][2y] [tengzhangchao/sec-box](https://github.com/tengzhangchao/sec-box) information security Tools Box (信息安全工具以及资源集合)
+- [**494**星][2m] [PHP] [nzedb/nzedb](https://github.com/nzedb/nzedb) 自动扫描Usenet,类似于爬虫扫描互联网的方式
+- [**494**星][2y] [Go] [evilsocket/sg1](https://github.com/evilsocket/sg1) 用于数据加密、提取和隐蔽通信的瑞士军刀
+- [**494**星][5d] [Go] [cossacklabs/acra](https://github.com/cossacklabs/acra) 数据库保护套件
+- [**493**星][4m] [PHP] [susers/writeups](https://github.com/susers/writeups) 国内各大CTF赛题及writeup整理
+- [**493**星][2m] [Perl 6] [rezasp/joomscan](https://github.com/rezasp/joomscan) Perl语言编写的Joomla CMS漏洞扫描器
+- [**493**星][5y] [Py] [offensivepython/nscan](https://github.com/offensivepython/nscan) 由Masscan和Zmap启发而设计的快速网络扫描仪,该扫描仪针对Internet范围内的扫描目的进行了优化。
+- [**493**星][1m] [C] [hasherezade/demos](https://github.com/hasherezade/demos) Demos of various injection techniques found in malware
+- [**492**星][2y] [sergey-pronin/awesome-vulnerability-research](https://github.com/sergey-pronin/Awesome-Vulnerability-Research)
+- [**492**星][7m] [Py] [danigargu/heap-viewer](https://github.com/danigargu/heap-viewer) 查看glibc堆, 主要用于漏洞开发
+- [**491**星][9d] [nahamsec/resources-for-beginner-bug-bounty-hunters](https://github.com/nahamsec/resources-for-beginner-bug-bounty-hunters) A list of resources for those interested in getting started in bug bounties
+- [**491**星][11m] [C] [yangyangwithgnu/bypass_disablefunc_via_ld_preload](https://github.com/yangyangwithgnu/bypass_disablefunc_via_ld_preload) 通过LD_PRELOA绕过disable_functions(不需要/ usr / sbin / sendmail)
+- [**491**星][15d] [Py] [wetw0rk/sickle](https://github.com/wetw0rk/sickle) Payload development tool
+- [**491**星][20d] [Py] [scottbez1/splitflap](https://github.com/scottbez1/splitflap) DIY split-flap display
+- [**491**星][2y] [PS] [powershellmafia/cimsweep](https://github.com/powershellmafia/cimsweep) CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.
+- [**491**星][4m] [Py] [maddiestone/idapythonembeddedtoolkit](https://github.com/maddiestone/idapythonembeddedtoolkit) 自动分析嵌入式设备的固件
+- [**491**星][14d] [JS] [iddoeldor/frida-snippets](https://github.com/iddoeldor/frida-snippets) Hand-crafted Frida examples
+- [**490**星][16d] [Py] [typeerror/domained](https://github.com/TypeError/domained) Multi Tool Subdomain Enumeration
+- [**490**星][2y] [C++] [turbo/kpti-poc-collection](https://github.com/turbo/kpti-poc-collection) Meltdown/Spectre PoC src collection.
+- [**490**星][27d] [Shell] [trimstray/multitor](https://github.com/trimstray/multitor) Shell脚本, 创建多个Tor实例, 并使用HAProxy实现负载均衡
+- [**490**星][2m] [Ruby] [kaich/codeobscure](https://github.com/kaich/codeobscure) code obscure for object-c project. 方便强大的OC工程代码自动混淆工具
+- [**489**星][6y] [C] [bitly/simplehttp](https://github.com/bitly/simplehttp) a family of libraries and daemons for building scalable web infrastructure
+- [**489**星][3m] [Py] [yanxiu0614/subdomain3](https://github.com/yanxiu0614/subdomain3) 简单快速的子域名爆破工具。
+- [**489**星][26d] [C] [tihmstar/tsschecker](https://github.com/tihmstar/tsschecker) a powerfull tool to check tss signing status of various devices and firmwares
+- [**489**星][3y] [PS] [secabstraction/powercat](https://github.com/secabstraction/powercat) 可与Netcat和Ncat一起使用的PowerShell TCP / IP瑞士军刀
+- [**489**星][1y] [C] [mikeryan/crackle](https://github.com/mikeryan/crackle) Crack and decrypt BLE encryption
+- [**489**星][1y] [Shell] [leonteale/pentestpackage](https://github.com/leonteale/pentestpackage) 一整套我已经制作或经常使用的渗透脚本
+- [**489**星][15d] [C] [jiayy/android_vuln_poc-exp](https://github.com/jiayy/android_vuln_poc-exp) This project contains pocs and exploits for vulneribilities I found (mostly)
+- [**489**星][10m] [Py] [insecurityofthings/jackit](https://github.com/insecurityofthings/jackit) Exploit Code for Mousejack
+- [**489**星][2y] [b-mueller/android_app_security_checklist](https://github.com/b-mueller/android_app_security_checklist) Android App Security Checklist
+- [**489**星][10d] [Go] [arminc/clair-scanner](https://github.com/arminc/clair-scanner) Docker containers vulnerability scan
+- [**489**星][4d] [Py] [alexhude/uemu](https://github.com/alexhude/uemu) 基于Unicorn的模拟器插件
+- [**488**星][2d] [Py] [trailofbits/deepstate](https://github.com/trailofbits/deepstate) A unit test-like interface for fuzzing and symbolic execution
+- [**488**星][5y] [Py] [infodox/python-pty-shells](https://github.com/infodox/python-pty-shells) Python PTY backdoors - full PTY or nothing!
+- [**488**星][2m] [Go] [gen2brain/cam2ip](https://github.com/gen2brain/cam2ip) 将任何网络摄像头转换为IP 摄像机
+- [**488**星][1y] [PS] [dafthack/domainpasswordspray](https://github.com/dafthack/domainpasswordspray) DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!
+- [**488**星][1y] [Py] [attify/firmware-analysis-toolkit](https://github.com/attify/firmware-analysis-toolkit) Toolkit to emulate firmware and analyse it for security vulnerabilities
+- [**487**星][10m] [Ruby] [sidaf/homebrew-pentest](https://github.com/sidaf/homebrew-pentest) 一个包含一些Homebrew formulas的Tap,包含与渗透测试相关的工具。
+- [**487**星][7d] [Go] [psiphon-labs/psiphon-tunnel-core](https://github.com/psiphon-labs/psiphon-tunnel-core) Psiphon client and server components implemented in Go. These components provides core tunnel functionality, handling all aspects of evading blocking and relaying traffic through Psiphon.
+- [**487**星][1y] [C] [nfc-tools/mfcuk](https://github.com/nfc-tools/mfcuk) MiFare Classic Universal toolKit (MFCUK)
+- [**487**星][4y] [JS] [mandatoryprogrammer/sonar.js](https://github.com/mandatoryprogrammer/sonar.js) 通过 WebRTC IP 枚举,结合 WebSockets 和外部资源指纹,来识别内网主机的漏洞并发动攻击的框架
+- [**487**星][18d] [Rust] [kpcyrd/sn0int](https://github.com/kpcyrd/sn0int) Semi-automatic OSINT framework and package manager
+- [**487**星][13d] [Py] [ctxis/cape](https://github.com/ctxis/cape) Malware Configuration And Payload Extraction
+- [**487**星][6m] [PHP] [cfreal/exploits](https://github.com/cfreal/exploits) Some of my exploits.
+- [**486**星][5m] [PHP] [wonderkun/ctf_web](https://github.com/wonderkun/ctf_web) a project aim to collect CTF web practices .
+- [**486**星][1y] [Py] [shawarkhanethicalhacker/brutexss](https://github.com/shawarkhanethicalhacker/brutexss) BruteXSS - Cross-Site Scripting Bruteforcer
+- [**486**星][2y] [Py] [khalilbijjou/wafninja](https://github.com/khalilbijjou/wafninja) WAFNinja is a tool which contains two functions to attack Web Application Firewalls.
+- [**486**星][11m] [Go] [evanmiller/hecate](https://github.com/evanmiller/hecate) Hex编辑器
+- [**485**星][2m] [Py] [fcavallarin/htcap](https://github.com/fcavallarin/htcap) htcap is a web application scanner able to crawl single page application (SPA) recursively by intercepting ajax calls and DOM changes.
+- [**485**星][10m] [C] [theofficialflow/nonpdrm](https://github.com/theofficialflow/nonpdrm) A plugin that allows you to bypass DRM protection on any PS Vita content
+- [**485**星][1m] [radareorg/awesome-radare2](https://github.com/radareorg/awesome-radare2) A curated list of awesome projects, articles and the other materials powered by Radare2
+- [**485**星][10d] [C] [projectacrn/acrn-hypervisor](https://github.com/projectacrn/acrn-hypervisor) defines a device hypervisor reference stack and an architecture for running multiple software subsystems, managed securely, on a consolidated system by means of a virtual machine manager.
+- [**485**星][1y] [lmy375/awesome-vmp](https://github.com/lmy375/awesome-vmp) 虚拟机分析相关资料
+- [**485**星][1m] [hugetiny/awesome-vpn](https://github.com/hugetiny/awesome-vpn) A curated list of awesome free VPNs and proxies.免费的代理,科学上网,翻墙,梯子大集合
+- [**484**星][2y] [Py] [zdresearch/owasp-zsc](https://github.com/zdresearch/OWASP-ZSC) Shellcode/Obfuscate Code Generator
+- [**484**星][2y] [Py] [xyuanmu/xx-mini](https://github.com/xyuanmu/xx-mini) XX-Net 精简版
+- [**484**星][8d] [Py] [netflix-skunkworks/diffy](https://github.com/netflix-skunkworks/diffy) Diffy is a triage tool used during cloud-centric security incidents, to help digital forensics and incident response (DFIR) teams quickly identify suspicious hosts on which to focus their response.
+- [**484**星][2m] [Go] [gorilla/csrf](https://github.com/gorilla/csrf) 为Go Web应用程序和服务提供CSRF预防中间件
+- [**483**星][15d] [C++] [ce-programming/cemu](https://github.com/CE-Programming/CEmu) Third-party TI-84 Plus CE / TI-83 Premium CE emulator, focused on developer features
+- [**483**星][3y] [Py] [erevus-cn/pocscan](https://github.com/erevus-cn/pocscan) Will to be a niubility scan-framework
+- [**483**星][1y] [JS] [emilbayes/secure-password](https://github.com/emilbayes/secure-password) Making Password storage safer for all
+- [**483**星][2y] [Py] [armissecurity/blueborne](https://github.com/armissecurity/blueborne) PoC scripts demonstrating the BlueBorne vulnerabilities
+- [**482**星][28d] [PHP] [zhuzhichao/ip-location-zh](https://github.com/zhuzhichao/ip-location-zh) 获取 IP 地址的真实地理位置
+- [**482**星][9m] [Py] [r35tart/rw_password](https://github.com/r35tart/rw_password) 此项目用来提取收集以往泄露的密码中符合条件的强弱密码
+- [**482**星][3m] [C] [microsoft/symcrypt](https://github.com/microsoft/symcrypt) Cryptographic library
+- [**482**星][7d] [Py] [iti/ics-security-tools](https://github.com/iti/ics-security-tools) Tools, tips, tricks, and more for exploring ICS Security.
+- [**482**星][2y] [PS] [gofetchad/gofetch](https://github.com/gofetchad/gofetch) 自动执行BloodHound应用程序生成的攻击计划。
+- [**482**星][11m] [Shell] [craigz28/firmwalker](https://github.com/craigz28/firmwalker) 一个简单的bash脚本,用于搜索提取或安装的固件文件系统。
+- [**482**星][1y] [Java] [continuumsecurity/bdd-security](https://github.com/continuumsecurity/bdd-security) 一个安全测试框架,该框架使用“行为驱动开发”概念来创建自我验证的安全规范。
+- [**481**星][1m] [Py] [yassineaboukir/sublert](https://github.com/yassineaboukir/sublert) Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific organizations and issued TLS/SSL certificate.
+- [**481**星][2y] [C] [realjtg/meltdown](https://github.com/realjtg/meltdown) Meltdown PoC for reading passwords from Google Chrome.
+- [**481**星][8m] [C] [nongiach/sudo_inject](https://github.com/nongiach/sudo_inject) [Linux] Two Privilege Escalation techniques abusing sudo token
+- [**481**星][4m] [C] [limpkin/mooltipass](https://github.com/limpkin/mooltipass) Github repository dedicated to the mooltipass project
+- [**480**星][2m] [Java] [tornaco/x-apm](https://github.com/tornaco/x-apm) 应用管理 Xposed
+- [**480**星][3y] [Py] [lgandx/poc](https://github.com/lgandx/poc) Various PoCs
+- [**480**星][2d] [Java] [joychou93/java-sec-code](https://github.com/joychou93/java-sec-code) Java Web Common Vulnerabilities and Security Code.
+- [**480**星][1y] [Swift] [icepa/icepa](https://github.com/icepa/icepa) iOS system-wide VPN based Tor client
+- [**480**星][2m] [C#] [chmorgan/sharppcap](https://github.com/chmorgan/sharppcap) Official repository - Fully managed, cross platform (Windows, Mac, Linux) .NET library for capturing packets
+- [**480**星][4d] [Batchfile] [chef-koch/regtweaks](https://github.com/chef-koch/regtweaks) Windows注册表调整(Win 7-Win 10)
+- [**479**星][3y] [JS] [vincentchanx/shadowsocks-over-websocket](https://github.com/vincentchanx/shadowsocks-over-websocket) 免费使用 Heroku 部署 shadowsocks
+- [**479**星][8m] [Java] [chengdedeng/waf](https://github.com/chengdedeng/waf)
+- [**479**星][2y] [Objective-C++] [bishopfox/bfinject](https://github.com/bishopfox/bfinject) Dylib injection for iOS 11.0 - 11.1.2 with LiberiOS and Electra jailbreaks
+- [**479**星][3m] [Py] [bashfuscator/bashfuscator](https://github.com/bashfuscator/bashfuscator) A fully configurable and extendable Bash obfuscation framework. This tool is intended to help both red team and blue team.
+- [**479**星][1m] [Py] [aoii103/darknet_chinesetrading](https://github.com/aoii103/darknet_chinesetrading) 暗网中文网监控实时爬虫
+- [**478**星][2m] [C++] [opengenus/quark](https://github.com/opengenus/quark) Stay happy while offline | World's first offline search engine.
+- [**478**星][8m] [Dockerfile] [mikesplain/openvas-docker](https://github.com/mikesplain/openvas-docker) A Docker container for Openvas
+- [**478**星][1y] [JS] [koto/xsschef](https://github.com/koto/xsschef) Chrome extension Exploitation Framework
+- [**477**星][1y] [C++] [tandasat/ddimon](https://github.com/tandasat/ddimon) Monitoring and controlling kernel API calls with stealth hook using EPT
+- [**477**星][2y] [Py] [pjlantz/droidbox](https://github.com/pjlantz/droidbox) Dynamic analysis of Android apps
+- [**477**星][5m] [JS] [ehrishirajsharma/swiftnessx](https://github.com/ehrishirajsharma/swiftnessx) A cross-platform note-taking & target-tracking app for penetration testers.
+- [**476**星][1y] [Go] [yinqiwen/gsnova](https://github.com/yinqiwen/gsnova) Private proxy solution & network troubleshooting tool.
+- [**476**星][4m] [Py] [xillwillx/skiptracer](https://github.com/xillwillx/skiptracer) OSINT python webscaping framework
+- [**476**星][1m] [xiangpasama/jdsrc-small-classroom](https://github.com/xiangpasama/jdsrc-small-classroom) 京东SRC小课堂系列文章
+- [**476**星][1m] [Java] [wagiro/burpbounty](https://github.com/wagiro/burpbounty) Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through a very intuitive graphical interface.
+- [**476**星][3y] [Lua] [viruscamp/luadec](https://github.com/viruscamp/luadec) Lua Decompiler for lua 5.1 , 5.2 and 5.3
+- [**476**星][1y] [ksluckow/awesome-symbolic-execution](https://github.com/ksluckow/awesome-symbolic-execution) A curated list of awesome symbolic execution resources including essential research papers, lectures, videos, and tools.
+- [**475**星][5d] [Py] [hunters-forge/mordor](https://github.com/hunters-forge/mordor) Re-play Adversarial Techniques
+- [**475**星][6y] [Ruby] [zed-0xff/zsteg](https://github.com/zed-0xff/zsteg) detect stegano-hidden data in PNG & BMP
+- [**475**星][2y] [C#] [tlaster/yourav](https://github.com/tlaster/yourav) 宇宙级最轻量杀毒软件
+- [**475**星][2y] [Ruby] [ring0lab/catphish](https://github.com/ring0lab/catphish) 用于网络钓鱼及企业间谍活动。Ruby编写
+- [**475**星][1y] [C] [nanshihui/scan-t](https://github.com/nanshihui/scan-t) a new crawler based on python with more function including Network fingerprint search
+- [**475**星][2y] [C++] [jessek/hashdeep](https://github.com/jessek/hashdeep) 用于为任意数量的文件计算哈希或消息摘要,同时可以选择递归地挖掘目录结构,跨平台
+- [**474**星][3y] [CoffeeScript] [rastapasta/pokemon-go-mitm](https://github.com/rastapasta/pokemon-go-mitm)
+- [**474**星][3m] [Shell] [staz0t/hashcatch](https://github.com/staz0t/hashcatch) Capture handshakes of nearby WiFi networks automatically
+- [**474**星][3y] [Py] [4w4k3/beelogger](https://github.com/4w4k3/beelogger) Generate Gmail Emailing Keyloggers to Windows.
+- [**473**星][2m] [C#] [rasta-mouse/watson](https://github.com/rasta-mouse/watson) Enumerate missing KBs and suggest exploits for useful Privilege Escalation vulnerabilities
+- [**473**星][1m] [JS] [lyxhh/lxhtoolhttpdecrypt](https://github.com/lyxhh/lxhtoolhttpdecrypt) Simple Android/iOS protocol analysis and utilization tool
+- [**473**星][2y] [Ruby] [0xsauby/yasuo](https://github.com/0xsauby/yasuo) ruby 脚本,扫描网络中存在漏洞的第三方 web app
+- [**472**星][9d] [C] [tklengyel/drakvuf](https://github.com/tklengyel/drakvuf) DRAKVUF Black-box Binary Analysis
+- [**472**星][26d] [pixelcyber/thor](https://github.com/pixelcyber/thor) HTTP Sniffer/Capture on iOS for Network Debug & Inspect.
+- [**472**星][8m] [Java] [alpha1e0/pentestdb](https://github.com/alpha1e0/pentestdb) WEB渗透测试数据库
+- [**471**星][12m] [itrump/ssfree](https://github.com/itrump/ssfree) provide shadowsocks free tutorial and free account
+- [**471**星][1m] [TS] [mitre-attack/attack-navigator](https://github.com/mitre-attack/attack-navigator) 提供ATT&CK矩阵的基本导航和注释的Web App
+- [**471**星][6m] [palantir/osquery-configuration](https://github.com/palantir/osquery-configuration) 使用 osquery 做事件检测和响应
+- [**471**星][3m] [Py] [olafhartong/threathunting](https://github.com/olafhartong/threathunting) A Splunk app mapped to MITRE ATT&CK to guide your threat hunts
+- [**471**星][9m] [Py] [aker-gateway/aker](https://github.com/aker-gateway/aker) SSH bastion/jump host/jumpserver
+- [**470**星][11m] [Py] [wapiflapi/villoc](https://github.com/wapiflapi/villoc) Visualization of heap operations.
+- [**470**星][8m] [C++] [glmcdona/process-dump](https://github.com/glmcdona/process-dump) Windows tool for dumping malware PE files from memory back to disk for analysis.
+- [**470**星][5d] [JS] [codemanki/cloudscraper](https://github.com/codemanki/cloudscraper) Node.js library to bypass cloudflare's anti-ddos page
+- [**470**星][1m] [Py] [bit4woo/teemo](https://github.com/bit4woo/teemo) 域名和电子邮件地址收集工具
+- [**469**星][9d] [Py] [fportantier/habu](https://github.com/fportantier/habu) Hacking Toolkit
+- [**469**星][5m] [Solidity] [provable-things/ethereum-api](https://github.com/provable-things/ethereum-api) Provable API for Ethereum smart contracts
+- [**469**星][2m] [Go] [square/certigo](https://github.com/square/certigo) A utility to examine and validate certificates in a variety of formats
+- [**469**星][2m] [Py] [netzob/netzob](https://github.com/netzob/netzob) Protocol Reverse Engineering, Modeling and Fuzzing
+- [**469**星][3y] [C] [lucyoa/kernel-exploits](https://github.com/lucyoa/kernel-exploits)
+- [**469**星][11m] [PHP] [l3m0n/pentest_tools](https://github.com/l3m0n/pentest_tools) 收集一些小型实用的工具
+- [**469**星][2d] [C] [jayddee/cpuminer-opt](https://github.com/jayddee/cpuminer-opt) Optimized multi algo CPU miner
+- [**469**星][1y] [hack-with-github/powerful-plugins](https://github.com/hack-with-github/powerful-plugins) Powerful plugins and add-ons for hackers
+- [**469**星][3y] [Shell] [g0tmi1k/os-scripts](https://github.com/g0tmi1k/os-scripts) Personal Collection of Operating Systems Scripts
+- [**469**星][8m] [C++] [everettjf/machoexplorer](https://github.com/everettjf/machoexplorer) MachO文件查看器,支持Windows和macOS
+- [**469**星][4y] [Ruby] [crossref/pdfextract](https://github.com/crossref/pdfextract) MOVED TO
+- [**469**星][7d] [Go] [arvanaghi/checkplease](https://github.com/arvanaghi/checkplease) Sandbox evasion modules written in PowerShell, Python, Go, Ruby, C, C#, Perl, and Rust.
+- [**469**星][4d] [Py] [aidaho12/haproxy-wi](https://github.com/aidaho12/haproxy-wi) Web interface for managing Haproxy servers
+- [**469**星][2y] [adi0x90/attifyos](https://github.com/adi0x90/attifyos) IoT 安全评估/渗透测试工具包
+- [**468**星][10d] [C] [skeeto/enchive](https://github.com/skeeto/enchive) Encrypted personal archives
+- [**468**星][2y] [Smali] [sensepost/kwetza](https://github.com/sensepost/kwetza) Python 脚本,将 Meterpreter payload 注入 Andorid App
+- [**468**星][9d] [Py] [fportantier/habu](https://github.com/fportantier/habu) Python 编写的网络工具工具包,主要用于教学/理解网络攻击中的一些概念
+- [**468**星][4y] [JS] [philbooth/complexity-report](https://github.com/philbooth/complexity-report) [UNMAINTAINED] Software complexity analysis for JavaScript projects
+- [**468**星][2d] [C] [libreswan/libreswan](https://github.com/libreswan/libreswan) an Internet Key Exchange (IKE) implementation for Linux.
+- [**468**星][2y] [C] [leurak/memz](https://github.com/leurak/memz) 为Danooct1的用户制作的恶意软件系列制作的木马。
+- [**468**星][7y] [Shell] [kosborn/p2p-adb](https://github.com/kosborn/p2p-adb) Phone to Phone Android Debug Bridge - A project for "debugging" phones... from other phones.
+- [**468**星][4y] [Py] [dxa4481/wpa2-halfhandshake-crack](https://github.com/dxa4481/wpa2-halfhandshake-crack) This is a POC to show it is possible to capture enough of a handshake with a user from a fake AP to crack a WPA2 network without knowing the passphrase of the actual AP.
+- [**468**星][2m] [Py] [coleifer/micawber](https://github.com/coleifer/micawber) 用于从URL中提取丰富的内容库
+- [**467**星][4y] [Py] [einstein-/decompiler](https://github.com/EiNSTeiN-/decompiler) 多后端的反编译器, 支持IDA和Capstone.
+- [**467**星][3m] [Java] [strazzere/anti-emulator](https://github.com/strazzere/anti-emulator) Android Anti-Emulator
+- [**467**星][1y] [C] [laruence/taint](https://github.com/laruence/taint) Taint is a PHP extension, used for detecting XSS codes
+- [**467**星][5y] [Perl] [jbittel/httpry](https://github.com/jbittel/httpry) HTTP日志记录和信息检索工具
+- [**466**星][3m] [miscreant/meta](https://github.com/miscreant/meta) 具备错误使用抗性的(Misuse-resistant )对称加密库,支持 AES-SIV (RFC5297) 和 CHAIN/STREAM
+- [**466**星][21d] [Py] [k8gege/k8cscan](https://github.com/k8gege/k8cscan) 大型内网渗透自定义插件化扫描神器,包含信息收集、网络资产、漏洞扫描、密码爆破、漏洞利用,程序采用多线程批量扫描大型内网多个IP段C段主机,目前插件包含: C段旁注扫描、子域名扫描、Ftp密码爆破、Mysql密码爆破、Oracle密码爆破、MSSQL密码爆破、Windows/Linux系统密码爆破、存活主机扫描、端口扫描、Web信息探测、操作系统版本探测、Cisco思科设备扫描等,支持调用任意外部程序或脚本,支持Cobalt Strike联动
+- [**466**星][3m] [PS] [evotecit/pswinreporting](https://github.com/evotecit/pswinreporting) This PowerShell Module has multiple functionalities, but one of the signature features of this module is the ability to parse Security logs on Domain Controllers providing easy to use access to AD Events.
+- [**466**星][6d] [C] [bootleg/ret-sync](https://github.com/bootleg/ret-sync) 在反汇编工具和调试器之间同步调试会话
+ - [GDB插件](https://github.com/bootleg/ret-sync/tree/master/ext_gdb)
+ - [Ghidra插件](https://github.com/bootleg/ret-sync/tree/master/ext_ghidra)
+ - [IDA插件](https://github.com/bootleg/ret-sync/tree/master/ext_ida)
+ - [LLDB](https://github.com/bootleg/ret-sync/tree/master/ext_lldb)
+ - [OD](https://github.com/bootleg/ret-sync/tree/master/ext_olly1)
+ - [OD2](https://github.com/bootleg/ret-sync/tree/master/ext_olly2)
+ - [WinDgb](https://github.com/bootleg/ret-sync/tree/master/ext_windbg/sync)
+ - [x64dbg](https://github.com/bootleg/ret-sync/tree/master/ext_x64dbg)
+- [**466**星][26d] [C#] [akaion/bleak](https://github.com/akaion/bleak) A Windows native DLL injection library that supports several methods of injection.
+- [**465**星][3y] [Py] [trustedsec/meterssh](https://github.com/trustedsec/meterssh) MeterSSH is a way to take shellcode, inject it into memory then tunnel whatever port you want to over SSH to mask any type of communications as a normal SSH connection. The way it works is by injecting shellcode into memory, then wrapping a port spawned (meterpeter in this case) by the shellcode over SSH back to the attackers machine. Then conne…
+- [**465**星][1y] [Py] [ptresearch/unme11](https://github.com/ptresearch/unme11) Intel ME 11.x Firmware Images Unpacker
+- [**465**星][1m] [LLVM] [jonathansalwan/tigress_protection](https://github.com/jonathansalwan/tigress_protection) Playing with the Tigress binary protection. Break some of its protections and solve some of its challenges. Automatic deobfuscation using symbolic execution, taint analysis and LLVM.
+- [**465**星][1m] [Go] [gen0cide/gscript](https://github.com/gen0cide/gscript) 基于运行时参数,动态安装恶意软件
+- [**464**星][26d] [JS] [siujoeng-lau/workers-proxy](https://github.com/siujoeng-lau/workers-proxy) Lightweight reverse proxy implemented with Cloudflare Workers.
+- [**464**星][4m] [Py] [viralmaniar/powershell-rat](https://github.com/viralmaniar/powershell-rat) Python based backdoor that uses Gmail to exfiltrate data through attachment. This RAT will help during red team engagements to backdoor any Windows machines. It tracks the user activity using screen capture and sends it to an attacker as an e-mail attachment.
+- [**464**星][1m] [Py] [stamparm/dsvw](https://github.com/stamparm/dsvw) Damn Small Vulnerable Web
+- [**464**星][2y] [C] [shinyquagsire23/switch-fightstick](https://github.com/shinyquagsire23/switch-fightstick) Proof-of-Concept LUFA Project for the Nintendo Switch. Pretends to be a HORI Pokken Pad which only prints Splatoon 2 Posts
+- [**464**星][8m] [Java] [owasp/owasp-webscarab](https://github.com/owasp/owasp-webscarab) OWASP WebScarab
+- [**464**星][9d] [C] [irontec/sngrep](https://github.com/irontec/sngrep) Ncurses SIP Messages flow viewer
+- [**464**星][2y] [Py] [firstlookmedia/pdf-redact-tools](https://github.com/firstlookmedia/pdf-redact-tools) 在发布之前安全地编辑和剥离文档中的元数据
+- [**464**星][6y] [Py] [bramcohen/dissidentx](https://github.com/bramcohen/dissidentx) Bram's steganographic framework
+- [**463**星][3y] [remath/literature_review](https://github.com/remath/literature_review) Survey of program analysis research with a focus on machine code
+- [**463**星][5y] [pyrotek3/powershell-ad-recon](https://github.com/pyrotek3/powershell-ad-recon) PowerShell Scripts I find useful
+- [**463**星][8d] [C++] [mikesart/gpuvis](https://github.com/mikesart/gpuvis) GPU Trace Visualizer
+- [**463**星][6y] [C] [martona/mhook](https://github.com/martona/mhook) A Windows API hooking library
+- [**463**星][2y] [Py] [coalfire-research/java-deserialization-exploits](https://github.com/coalfire-research/java-deserialization-exploits) A collection of curated Java Deserialization Exploits
+- [**463**星][2y] [C++] [aimtuxofficial/aimtux](https://github.com/aimtuxofficial/aimtux) A large Linux csgo cheat/hack
+- [**462**星][3m] [C++] [fsecurelabs/c3](https://github.com/FSecureLABS/C3) 一个用于快速定制C2通道原型的框架,同时仍提供与现有攻击性工具包的集成。
+- [**462**星][17d] [Rust] [rust-fuzz/cargo-fuzz](https://github.com/rust-fuzz/cargo-fuzz) libFuzzer的wrapper
+- [**462**星][7m] [C#] [microsoft/dbgshell](https://github.com/microsoft/dbgshell) PowerShell编写的Windows调试器引擎前端
+- [**462**星][10d] [Java] [lennartkoopmann/nzyme](https://github.com/lennartkoopmann/nzyme) 直接收集空中的802.11 管理帧,并将其发送到 Graylog,用于WiFi IDS, 监控, 及事件响应。(Graylog:开源的日志管理系统)
+- [**462**星][24d] [C] [jkornev/hidden](https://github.com/jkornev/hidden) Windows驱动,带用户模式接口:隐藏文件系统和注册表对象、保护进程等
+- [**462**星][7m] [Shell] [jgmdev/ddos-deflate](https://github.com/jgmdev/ddos-deflate) Fork of DDoS Deflate with fixes, improvements and new features.
+- [**462**星][2y] [Go] [egebalci/hercules](https://github.com/egebalci/hercules) HERCULES is a special payload generator that can bypass antivirus softwares.
+- [**462**星][2y] [Py] [dchrastil/scrapedin](https://github.com/dchrastil/scrapedin) A tool to scrape LinkedIn without API restrictions for data reconnaissance
+- [**461**星][1y] [Py] [mehulj94/radium](https://github.com/mehulj94/Radium) Python keylogger with multiple features.
+- [**461**星][6m] [Shell] [vincentcox/bypass-firewalls-by-dns-history](https://github.com/vincentcox/bypass-firewalls-by-dns-history) Firewall bypass script based on DNS history records. This script will search for DNS A history records and check if the server replies for that domain. Handy for bugbounty hunters.
+- [**461**星][8m] [Py] [ustayready/fireprox](https://github.com/ustayready/fireprox) AWS API Gateway management tool for creating on the fly HTTP pass-through proxies for unique IP rotation
+- [**461**星][5m] [C] [phoenhex/files](https://github.com/phoenhex/files) Phoenhex 团队的exploits/POCs/presentation
+- [**461**星][15d] [gradiuscypher/infosec_getting_started](https://github.com/gradiuscypher/infosec_getting_started) A collection of resources/documentation/links/etc to help people learn about Infosec and break into the field.
+- [**461**星][4m] [C++] [emoon/prodbg](https://github.com/emoon/prodbg) Debugging the way it's meant to be done
+- [**461**星][16d] [Java] [dsheirer/sdrtrunk](https://github.com/dsheirer/sdrtrunk) A cross-platform java application for decoding, monitoring, recording and streaming trunked mobile and related radio protocols using Software Defined Radios (SDR). Website:
+- [**461**星][2y] [Py] [0xdeadbeefjerky/office-dde-payloads](https://github.com/0xdeadbeefjerky/office-dde-payloads) Collection of scripts and templates to generate Office documents embedded with the DDE, macro-less command execution technique.
+- [**460**星][2y] [Kotlin] [v2ray-android/actinium](https://github.com/v2ray-android/actinium) A 3rd party V2Ray client for Android
+- [**460**星][18d] [Py] [shellphish/rex](https://github.com/shellphish/rex) Shellphish's automated exploitation engine, originally created for the Cyber Grand Challenge.
+- [**460**星][2m] [Py] [savio-code/fern-wifi-cracker](https://github.com/savio-code/fern-wifi-cracker) 无线安全审计和攻击工具, 能破解/恢复 WEP/WPA/WPSkey等
+- [**460**星][10m] [Go] [netxfly/x-crack](https://github.com/netxfly/x-crack) Weak password scanner, Support: FTP/SSH/SNMP/MSSQL/MYSQL/PostGreSQL/REDIS/ElasticSearch/MONGODB
+- [**460**星][4m] [C++] [comaeio/opcde](https://github.com/comaeio/opcde) OPCDE Cybersecurity Conference Materials
+- [**460**星][9m] [C] [cofyc/dnscrypt-wrapper](https://github.com/cofyc/dnscrypt-wrapper) This is dnscrypt wrapper (server-side dnscrypt proxy), which helps to add dnscrypt support to any name resolver.
+- [**459**星][29d] [Shell] [wireghoul/graudit](https://github.com/wireghoul/graudit) 简单的脚本和签名集,进行源代码审计
+- [**459**星][6m] [Py] [threezh1/jsfinder](https://github.com/threezh1/jsfinder) JSFinder is a tool for quickly extracting URLs and subdomains from JS files on a website.
+- [**459**星][1y] [C] [ntruchsess/arduino_uip](https://github.com/ntruchsess/arduino_uip) A plugin-replacement of the stock Arduino Ethernet library for ENC28J60 shields and breakout boards. Full support for persistent (streaming) TCP-connections and UDP (Client and Server each), ARP, ICMP, DHCP and DNS. Build around Adam Dunkels uIP Stack. Further developed version can be found on
+- [**459**星][1y] [HTML] [metnew/uxss-db](https://github.com/metnew/uxss-db)
+- [**459**星][1y] [Cycript] [codermjlee/mjcript](https://github.com/codermjlee/mjcript) 【越狱-逆向】基于Cycript实现的一些实用函数
+- [**459**星][9m] [Py] [christhecoolhut/zeratool](https://github.com/christhecoolhut/zeratool) Automatic Exploit Generation (AEG) and remote flag capture for exploitable CTF problems
+- [**458**星][4m] [mel0day/redteam-bcs](https://github.com/mel0day/redteam-bcs) BCS(北京网络安全大会)2019 红队行动会议重点内容
+
+- [**458**星][3y] [valvesoftware/csgo-osx-linux](https://github.com/ValveSoftware/csgo-osx-linux) 反恐精英全球攻势
+- [**458**星][8m] [C] [sandeepmistry/arduino-nrf5](https://github.com/sandeepmistry/arduino-nrf5) Arduino Core for Nordic Semiconductor nRF5 based boards
+- [**458**星][3m] [PHP] [nette/latte](https://github.com/nette/latte) ☕ Latte: the intuitive and fast template engine for those who want the most secure PHP sites.
+- [**458**星][4y] [JS] [ghostwords/chameleon](https://github.com/ghostwords/chameleon) Browser fingerprinting protection for everybody.
+- [**458**星][2d] [C] [exim/exim](https://github.com/exim/exim) Exim Mail Transport Agent - source, testsuite and documentation
+- [**457**星][3y] [Py] [vpnguy-zz/ntpdos](https://github.com/vpnguy-zz/ntpdos) Create a DDOS attack using NTP servers
+- [**457**星][3m] [Py] [blacknbunny/cve-2018-10933](https://github.com/blacknbunny/CVE-2018-10933) Spawn to shell without any credentials by using CVE-2018-10933 (LibSSH)
+- [**457**星][1m] [C#] [tyranid/oleviewdotnet](https://github.com/tyranid/oleviewdotnet) OLE/COM查看和检测工具,.NET语言编写
+- [**457**星][4m] [C] [jarun/keysniffer](https://github.com/jarun/keysniffer)
+- [**457**星][6m] [PHP] [flozz/p0wny-shell](https://github.com/flozz/p0wny-shell) Single-file PHP shell
+- [**456**星][26d] [PHP] [pk-fr/yakpro-po](https://github.com/pk-fr/yakpro-po) YAK Pro - Php Obfuscator
+- [**456**星][3y] [C] [haka-security/haka](https://github.com/haka-security/haka) a collection of tools that allows capturing TCP/IP packets and filtering them based on Lua policy files.
+- [**456**星][2m] [Py] [globaleaks/tor2web](https://github.com/globaleaks/tor2web) Tor2web is an HTTP proxy software that enables access to Tor Hidden Services by mean of common web browsers
+- [**455**星][2y] [Py] [yukinoshita47/yuki-chan-the-auto-pentest](https://github.com/yukinoshita47/yuki-chan-the-auto-pentest) 一个自动渗透测试工具,该工具将为您审核所有标准安全性测试方法。
+- [**455**星][2y] [Jupyter Notebook] [saurabhmathur96/clickbait-detector](https://github.com/saurabhmathur96/clickbait-detector) 使用深度学习检测clickbait headlines
+- [**455**星][7d] [Py] [rabobank-cdc/dettect](https://github.com/rabobank-cdc/dettect) Detect Tactics, Techniques & Combat Threats
+- [**455**星][8d] [PS] [mr-un1k0d3r/redteampowershellscripts](https://github.com/mr-un1k0d3r/redteampowershellscripts) 在红队练习中可能会有用的各种PowerShell脚本
+- [**455**星][11m] [Py] [mandatoryprogrammer/tldr](https://github.com/mandatoryprogrammer/tldr) TLDR (TLD Records) is a continually updated DNS archive of zone transfer attempts again all existing TLD nameservers as well as the root servers.
+- [**455**星][2y] [Py] [idanr1986/cuckoo-droid](https://github.com/idanr1986/cuckoo-droid) Automated Android Malware Analysis with Cuckoo Sandbox.
+- [**455**星][6m] [Py] [dr0op/weblogicscan](https://github.com/dr0op/weblogicscan) 增强版WeblogicScan、检测结果更精确、插件化、添加CVE-2019-2618,CVE-2019-2729检测,Python3支持
+- [**454**星][3m] [JS] [sindresorhus/get-port](https://github.com/sindresorhus/get-port) Get an available port
+- [**454**星][4y] [C] [lucasjones/cpuminer-multi](https://github.com/lucasjones/cpuminer-multi) Multi-algo CPUMiner & Reference Cryptonote Miner (JSON-RPC 2.0)
+- [**454**星][2y] [Py] [embedi/cve-2017-11882](https://github.com/embedi/cve-2017-11882) Proof-of-Concept exploits for CVE-2017-11882
+- [**453**星][1y] [Go] [ncsa/ssh-auditor](https://github.com/ncsa/ssh-auditor) 扫描网络中的弱SSH密码
+- [**453**星][1y] [CSS] [fmstrat/diy-ipmi](https://github.com/fmstrat/diy-ipmi) A DIY IPMI / IP KVM system utilizing the Raspberry Pi
+- [**453**星][2y] [C] [cr4sh/openreil](https://github.com/cr4sh/openreil) Open source library that implements translator and tools for REIL (Reverse Engineering Intermediate Language)
+- [**453**星][7d] [Py] [census-instrumentation/opencensus-python](https://github.com/census-instrumentation/opencensus-python) A stats collection and distributed tracing framework
+- [**453**星][9m] [C++] [ahupowerdns/hello-dns](https://github.com/ahupowerdns/hello-dns) Hello and welcome to DNS!
+- [**452**星][3m] [PS] [rvrsh3ll/misc-powershell-scripts](https://github.com/rvrsh3ll/misc-powershell-scripts) PowerShell工具集
+- [**452**星][7m] [Py] [n1xbyte/cve-2019-0708](https://github.com/n1xbyte/cve-2019-0708) dump
+- [**452**星][10m] [C] [martinmarinov/tempestsdr](https://github.com/martinmarinov/tempestsdr) Remote video eavesdropping using a software-defined radio platform
+- [**452**星][4y] [clowwindy/shadowsocks-libev](https://github.com/clowwindy/shadowsocks-libev)
+- [**452**星][1y] [bfuzzy/auditd-attack](https://github.com/bfuzzy/auditd-attack) A Linux Auditd rule set mapped to MITRE's Attack Framework
+- [**451**星][5d] [SystemVerilog] [lowrisc/opentitan](https://github.com/lowrisc/opentitan) Open source silicon root of trust
+- [**451**星][17d] [Py] [controlscanmdr/cyphon](https://github.com/controlscanmdr/cyphon) 事件管理和响应平台
+- [**451**星][2m] [Java] [windysha/xpatch](https://github.com/windysha/xpatch) 免Root实现app加载Xposed插件工具。This is a tool to repackage apk file, then the apk can load any xposed modules installed in the device. It is another way to hook an app without root device.
+- [**451**星][3y] [C++] [vusec/drammer](https://github.com/vusec/drammer) Native binary for testing Android phones for the Rowhammer bug
+- [**451**星][2y] [PS] [spiderlabs/portia](https://github.com/spiderlabs/portia) Portia aims to automate a number of techniques commonly performed on internal network penetration tests after a low privileged account has been compromised.
+- [**451**星][8m] [C++] [rek7/mxtract](https://github.com/rek7/mxtract) 一个基于linux的开源工具,用于分析和转储内存。
+- [**451**星][8d] [meitar/awesome-cybersecurity-blueteam](https://github.com/meitar/awesome-cybersecurity-blueteam)
+- [**451**星][7d] [PHP] [akaunting/firewall](https://github.com/akaunting/firewall) Web Application Firewall (WAF) package for Laravel
+- [**450**星][2m] [Py] [scwuaptx/pwngdb](https://github.com/scwuaptx/pwngdb) gdb for pwn
+- [**450**星][8y] [Perl] [aoncyberlabs/padbuster](https://github.com/AonCyberLabs/PadBuster) 自动化执行Padding Oracle攻击的脚本
+- [**450**星][2m] [Py] [super-l/superl-url](https://github.com/super-l/superl-url) 根据关键词,对搜索引擎内容检索结果的网址内容进行采集的一款轻量级软程序。 程序主要运用于安全渗透测试项目,以及批量评估各类CMS系统0DAY的影响程度,同时也是批量采集自己获取感兴趣的网站的一个小程序~~ 可自动从搜索引擎采集相关网站的真实地址与标题等信息,可保存为文件,自动去除重复URL。同时,也可以自定义忽略多条域名等。
+- [**450**星][4m] [Py] [s0md3v/goop](https://github.com/s0md3v/goop) Google Search Scraper
+- [**450**星][4m] [C++] [omerya/invisi-shell](https://github.com/omerya/invisi-shell) 隐藏您的Powershell脚本。绕过所有Powershell安全功能
+- [**450**星][3y] [C] [nccgroup/triforceafl](https://github.com/nccgroup/triforceafl) AFL/QEMU fuzzing with full-system emulation.
+- [**450**星][3m] [m1ghtym0/browser-pwn](https://github.com/m1ghtym0/browser-pwn) An updated collection of resources targeting browser-exploitation.
+- [**450**星][4y] [Py] [alienvault-labs/alienvaultlabs](https://github.com/alienvault-labs/alienvaultlabs) Alienvault Labs Projects Random Stuff
+- [**449**星][11m] [Kotlin] [shadowsocks/kcptun-android](https://github.com/shadowsocks/kcptun-android) kcptun for Android.
+- [**449**星][2d] [PS] [mantvydasb/redteam-tactics-and-techniques](https://github.com/mantvydasb/RedTeam-Tactics-and-Techniques) Red Teaming Tactics and Techniques
+- [**449**星][3m] [Go] [stripe/safesql](https://github.com/stripe/safesql) Static analysis tool for Golang that protects against SQL injections
+- [**449**星][5m] [PHP] [kasperskylab/klara](https://github.com/kasperskylab/klara) Kaspersky's GReAT KLara
+- [**449**星][6m] [JS] [coalfire-research/npk](https://github.com/coalfire-research/npk) A mostly-serverless distributed hash cracking platform
+- [**448**星][14d] [Py] [s0md3v/corsy](https://github.com/s0md3v/corsy) CORS Misconfiguration Scanner
+- [**448**星][10d] [C++] [ondrejbudai/hidviz](https://github.com/ondrejbudai/hidviz) 深入分析 USB HID设备通信的工具
+- [**448**星][2m] [Shell] [l-n-s/wireguard-install](https://github.com/l-n-s/wireguard-install) WireGuard VPN server installer
+- [**448**星][8m] [YARA] [ghidraninja/ghidra_scripts](https://github.com/ghidraninja/ghidra_scripts) Ghidra脚本
+ - [binwalk](https://github.com/ghidraninja/ghidra_scripts/blob/master/binwalk.py) 对当前程序运行BinWalk, 标注找到的内容
+ - [yara](https://github.com/ghidraninja/ghidra_scripts/blob/master/yara.py) 使用Yara查找加密常量
+ - [swift_demangler](https://github.com/ghidraninja/ghidra_scripts/blob/master/swift_demangler.py) 自动demangle Swift函数名
+ - [golang_renamer](https://github.com/ghidraninja/ghidra_scripts/blob/master/golang_renamer.py) 恢复stripped Go二进制文件的函数名
+- [**447**星][3d] [Py] [sidechannelmarvels/deadpool](https://github.com/sidechannelmarvels/deadpool) Repository of various public white-box cryptographic implementations and their practical attacks.
+- [**447**星][5m] [PS] [sans-blue-team/deepbluecli](https://github.com/sans-blue-team/deepbluecli) a PowerShell Module for Threat Hunting via Windows Event Logs
+- [**447**星][11m] [C++] [ntquery/scylla](https://github.com/ntquery/scylla) Imports Reconstructor
+- [**447**星][7m] [HTML] [ctf-wiki/ctf-challenges](https://github.com/ctf-wiki/ctf-challenges)
+- [**447**星][3m] [C] [cloudflare/cloudflare-blog](https://github.com/cloudflare/cloudflare-blog) Cloudflare Blog code samples
+- [**447**星][5m] [Py] [cchio/deep-pwning](https://github.com/cchio/deep-pwning) 一个轻量级的框架,用于试验机器学习模型,目的是评估其对主动攻击者的鲁棒性
+- [**447**星][3y] [aptive/penetration-testing-tools](https://github.com/aptive/penetration-testing-tools) 为所有常用的渗透测试工具(通常是Kali或其他渗透测试发行版中不存在的工具)创建一个存储库。
+- [**447**星][4m] [C++] [alexhude/friend](https://github.com/alexhude/friend) 反汇编显示增强, 文档增强插件
+- [**446**星][6y] [Go] [titanous/heartbleeder](https://github.com/titanous/heartbleeder) OpenSSL CVE-2014-0160 Heartbleed vulnerability test
+- [**446**星][1y] [JS] [simonepri/upash](https://github.com/simonepri/upash) 允许您拥有一个干净且易于使用的API,以在您的应用程序中无缝使用任何密码哈希算法。
+- [**446**星][14d] [Py] [nsonaniya2010/subdomainizer](https://github.com/nsonaniya2010/subdomainizer) A tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github.
+- [**446**星][5d] [C++] [khronosgroup/spirv-tools](https://github.com/khronosgroup/spirv-tools) provides an API and commands for processing SPIR-V module
+- [**446**星][2y] [POV-Ray SDL] [hzqst/syscall-monitor](https://github.com/hzqst/syscall-monitor) 使用Intel VT-X/EPT实现的系统调用追踪工具,类似于Sysinternal的Process Monitor,支持Win7+
+- [**445**星][6m] [C] [riverloopsec/killerbee](https://github.com/riverloopsec/killerbee) IEEE 802.15.4/ZigBee Security Research Toolkit
+- [**444**星][5d] [Shell] [r00t-3xp10it/fakeimageexploiter](https://github.com/r00t-3xp10it/fakeimageexploiter) Use a Fake image.jpg to exploit targets (hide known file extensions)
+- [**444**星][6d] [C#] [malwareinfosec/ekfiddle](https://github.com/malwareinfosec/ekfiddle) A framework based on the Fiddler web debugger to study Exploit Kits, malvertising and malicious traffic in general.
+- [**444**星][1y] [Rust] [ierror/ssh-permit-a38](https://github.com/ierror/ssh-permit-a38) SSH秘钥的中心化管理与部署
+- [**444**星][2y] [ObjC] [aburgh/disk-arbitrator](https://github.com/aburgh/disk-arbitrator) A Mac OS X forensic utility which manages file system mounting in support of forensic procedures.
+- [**443**星][6m] [Go] [solo-io/sqoop](https://github.com/solo-io/sqoop) The GraphQL Engine powered by Gloo
+- [**443**星][8y] [Py] [openrce/paimei](https://github.com/openrce/paimei) A reverse engineering framework written in Python.
+- [**443**星][7m] [jnusimba/miscsecnotes](https://github.com/jnusimba/miscsecnotes) some learning notes about Web/Cloud/Docker Security、 Penetration Test、 Security Building
+- [**443**星][11m] [Batchfile] [ion-storm/sysmon-config](https://github.com/ion-storm/sysmon-config) Advanced Sysmon configuration, Installer & Auto Updater with high-quality event tracing
+- [**443**星][1m] [Py] [gameye98/lazymux](https://github.com/gameye98/lazymux) termux tool installer
+- [**443**星][3y] [Py] [brianwrf/hackutils](https://github.com/brianwrf/hackutils) 基于BeautifulSoup bs4模块的用于渗透测试和网络安全研究的黑客工具套件
+- [**443**星][6m] [Py] [albinowax/activescanplusplus](https://github.com/albinowax/activescanplusplus) ActiveScan++ Burp Suite Plugin
+- [**442**星][6m] [C#] [sdrapkin/securitydriven.inferno](https://github.com/sdrapkin/securitydriven.inferno)
+- [**442**星][2m] [Go] [retroplasma/flyover-reverse-engineering](https://github.com/retroplasma/flyover-reverse-engineering) Reversing Apple's 3D satellite mode
+- [**442**星][1y] [Py] [jfoote/exploitable](https://github.com/jfoote/exploitable) The 'exploitable' GDB plugin. I don't work at CERT anymore, but here is the original homepage:
+- [**442**星][3y] [Py] [jekyc/wig](https://github.com/jekyc/wig) WebApp 信息收集器,可识别多种内容管理系统和其他管理程序
+- [**442**星][1y] [Go] [ice3man543/subover](https://github.com/ice3man543/subover) A Powerful Subdomain Takeover Tool
+- [**441**星][6m] [C++] [ajkhoury/reclassex](https://github.com/ajkhoury/ReClassEx) ReClassEx
+- [**441**星][1y] [C] [ryancdotorg/brainflayer](https://github.com/ryancdotorg/brainflayer) A proof-of-concept cracker for cryptocurrency brainwallets and other low entropy key alogrithms.
+- [**441**星][3y] [Py] [ring04h/wyproxy](https://github.com/ring04h/wyproxy) proxying and recording HTTP/HTTPs/Socks5 proxy flow, save to MYSQL database.
+- [**441**星][1m] [Go] [cbeuw/cloak](https://github.com/cbeuw/cloak) A universal pluggable transport utilising TLS domain fronting to evade deep packet inspection and active probing from state-level adversaries
+- [**441**星][6d] [Jupyter Notebook] [borealisai/advertorch](https://github.com/borealisai/advertorch) A Toolbox for Adversarial Robustness Research
+- [**440**星][4y] [C#] [keepwn/altman](https://github.com/keepwn/altman) the cross platform webshell tool in .NET
+- [**440**星][2y] [JS] [brannondorsey/whonow](https://github.com/brannondorsey/whonow) 恶意DNS服务器, 可动态执行DNS重绑定攻击
+- [**439**星][3m] [C++] [pstavirs/ostinato](https://github.com/pstavirs/ostinato) Packet/Traffic Generator and Analyzer
+- [**439**星][1m] [Py] [polymorf/findcrypt-yara](https://github.com/polymorf/findcrypt-yara) 使用Yara规则查找加密常量
+- [**439**星][4y] [Java] [payatu/diva-android](https://github.com/payatu/diva-android) DIVA Android - Damn Insecure and vulnerable App for Android
+- [**439**星][4y] [Py] [nimia/public_drown_scanner](https://github.com/nimia/public_drown_scanner)
+- [**439**星][2y] [magoo/redteam-plan](https://github.com/magoo/redteam-plan) 规划 redteam 练习时要考虑的问题
+- [**439**星][3y] [CSS] [graniet/chromebackdoor](https://github.com/graniet/chromebackdoor) 一个渗透测试工具PoC,使用MITB技术在启动后生成Windows可执行文件“ .exe”,并在大多数流行的浏览器上运行恶意扩展或脚本,并通过C&C发送所有DOM数据。
+- [**439**星][12d] [Py] [google/vulncode-db](https://github.com/google/vulncode-db) a database for vulnerabilities and their corresponding source code if available
+- [**439**星][2d] [C] [facebook/openbmc](https://github.com/facebook/openbmc) OpenBMC is an open software framework to build a complete Linux image for a Board Management Controller (BMC).
+- [**439**星][1y] [JS] [digitalsecurity/btlejuice](https://github.com/digitalsecurity/btlejuice) BtleJuice Bluetooth Smart (LE) Man-in-the-Middle framework
+- [**439**星][1m] [Py] [brendan-w/python-obd](https://github.com/brendan-w/python-obd) OBD-II serial module for reading engine data
+- [**438**星][2d] [C++] [stevemk14ebr/polyhook_2_0](https://github.com/stevemk14ebr/polyhook_2_0) C++17, x86/x64 Hooking Libary v2.0
+- [**438**星][8m] [PS] [nsacyber/event-forwarding-guidance](https://github.com/nsacyber/Event-Forwarding-Guidance) 帮助管理员使用Windows事件转发(WEF)收集与安全相关的Windows事件日志
+- [**438**星][9d] [mitre/cti](https://github.com/mitre/cti) Cyber Threat Intelligence Repository expressed in STIX 2.0
+- [**438**星][4y] [Py] [laramies/metagoofil](https://github.com/laramies/metagoofil) 提取目标网站中可用的公共文档(pdf,doc,xls,ppt等)的元数据
+- [**438**星][24d] [Py] [j00ru/ctf-tasks](https://github.com/j00ru/ctf-tasks) An archive of low-level CTF challenges developed over the years
+- [**437**星][5m] [Java] [graxcode/jbytemod-beta](https://github.com/graxcode/jbytemod-beta) Java bytecode editor
+- [**437**星][2y] [PHP] [arrexel/phpbash](https://github.com/arrexel/phpbash) A semi-interactive PHP shell compressed into a single file.
+- [**436**星][1m] [TSQL] [404notf0und/security-data-analysis-and-visualization](https://github.com/404notf0und/security-data-analysis-and-visualization) 2018-2020青年安全圈-活跃技术博主/博客
+- [**436**星][3d] [TS] [fuzzitdev/jsfuzz](https://github.com/fuzzitdev/jsfuzz) coverage guided fuzz testing for javascript
+- [**436**星][2y] [Py] [undeadsec/evilurl](https://github.com/undeadsec/evilurl) 为IDN同形文字攻击生成unicode邪恶域,并对其进行检测。
+- [**436**星][2y] [Vim script] [tmhedberg/simpylfold](https://github.com/tmhedberg/simpylfold) No-BS Python code folding for Vim
+- [**436**星][2m] [Py] [romanzaikin/burpextension-whatsapp-decryption-checkpoint](https://github.com/romanzaikin/burpextension-whatsapp-decryption-checkpoint) This tool was created during our research at Checkpoint Software Technologies on Whatsapp Protocol (This repository will be updated after BlackHat 2019)
+- [**436**星][6d] [Py] [ionelmc/python-hunter](https://github.com/ionelmc/python-hunter) Hunter is a flexible code tracing toolkit.
+- [**436**星][4y] [Py] [foxglovesec/javaunserializeexploits](https://github.com/foxglovesec/javaunserializeexploits)
+- [**436**星][4m] [Go] [ethereumproject/go-ethereum](https://github.com/ethereumproject/go-ethereum) Go language implementation of the original/classic design of the Ethereum protocol
+- [**436**星][2y] [PS] [danielbohannon/revoke-obfuscation](https://github.com/danielbohannon/revoke-obfuscation) PowerShell Obfuscation Detection Framework
+- [**436**星][4m] [ctftraining/ctftraining](https://github.com/ctftraining/ctftraining) CTF Training 经典赛题复现环境
+- [**436**星][2d] [JS] [ayms/node-tor](https://github.com/ayms/node-tor) Javascript implementation of the Tor (or Tor like) anonymizer project (The Onion Router)
+- [**436**星][2m] [Py] [admintony/prepare-for-awd](https://github.com/admintony/prepare-for-awd) AWD攻防赛脚本集合
+- [**436**星][1y] [Py] [0x4d31/honeylambda](https://github.com/0x4d31/honeylambda) honeyλ - a simple, serverless application designed to create and monitor fake HTTP endpoints (i.e. URL honeytokens) automatically, on top of AWS Lambda and Amazon API Gateway
+- [**435**星][11m] [Py] [neohapsis/bbqsql](https://github.com/neohapsis/bbqsql) SQL Injection Exploitation Tool
+- [**435**星][3y] [C] [mncoppola/suterusu](https://github.com/mncoppola/suterusu) An LKM rootkit targeting Linux 2.6/3.x on x86(_64), and ARM
+- [**434**星][4m] [Py] [ridter/redis-rce](https://github.com/ridter/redis-rce) Redis 4.x/5.x RCE
+- [**434**星][4m] [Go] [coyim/coyim](https://github.com/coyim/coyim) a safe and secure chat client
+- [**434**星][8m] [Go] [client9/ipcat](https://github.com/client9/ipcat) Categorization of IP Addresses
+- [**433**星][3y] [Py] [secureworks/dcept](https://github.com/secureworks/dcept) A tool for deploying and detecting use of Active Directory honeytokens
+- [**433**星][8y] [C++] [moxie0/sslsniff](https://github.com/moxie0/sslsniff) A tool for automated MITM attacks on SSL connections.
+- [**432**星][8m] [Py] [aws-samples/aws-waf-sample](https://github.com/aws-samples/aws-waf-sample) This repository contains example scripts and sets of rules for the AWS WAF service. Please be aware that the applicability of these examples to specific workloads may vary.
+- [**432**星][7m] [Ruby] [tidesec/fuzzscanner](https://github.com/tidesec/fuzzscanner) 一个主要用于信息搜集的工具集,主要是用于对网站子域名、开放端口、端口指纹、c段地址、敏感目录等信息进行批量搜集。
+- [**432**星][7y] [C] [juuso/keychaindump](https://github.com/juuso/keychaindump) A proof-of-concept tool for reading OS X keychain passwords
+- [**432**星][12m] [Shell] [jactor-sue/deepin-apps-installation](https://github.com/jactor-sue/deepin-apps-installation) 本仓库介绍如何在基于Ubuntu的系统上安装Deepin移植的软件
+- [**432**星][2m] [Go] [gorilla/securecookie](https://github.com/gorilla/securecookie) Package gorilla/securecookie encodes and decodes authenticated and optionally encrypted cookie values for Go web applications.
+- [**432**星][2m] [Ruby] [aderyabin/sniffer](https://github.com/aderyabin/sniffer) Log and Analyze Outgoing HTTP Requests
+- [**431**星][1y] [HTML] [dnfwah/dnfwah](https://github.com/DNFWAH/DNFWAH) It's an ezine: DO NOT FUCK WITH A HACKER
+- [**431**星][2m] [Py] [pan-unit42/public_tools](https://github.com/pan-unit42/public_tools)
+- [**431**星][9m] [Go] [amyangxyz/assassingo](https://github.com/amyangxyz/assassingo) 一个可扩展的并发信息收集和漏洞扫描框架,具有基于WebSocket的Web GUI。
+- [**431**星][4y] [C] [alonho/pytrace](https://github.com/alonho/pytrace) pytrace is a fast python tracer. it records function calls, arguments and return values. can be used for debugging and profiling.
+- [**430**星][2d] [Py] [w-digital-scanner/w13scan](https://github.com/w-digital-scanner/w13scan) Passive Security Scanner (被动式安全扫描器)
+- [**430**星][26d] [C] [guardianproject/orbot](https://github.com/guardianproject/orbot) The Github home of Orbot: Tor on Android (Also available on gitlab!)
+- [**430**星][2m] [Py] [superhedgy/attacksurfacemapper](https://github.com/superhedgy/attacksurfacemapper) AttackSurfaceMapper is a tool that aims to automate the reconnaissance process.
+- [**430**星][2y] [C] [siguza/iohideous](https://github.com/siguza/iohideous) IOHIDFamily 0day
+- [**430**星][4y] [JS] [mozilla/scanjs](https://github.com/mozilla/scanjs) javascript代码的静态分析工具。
+- [**430**星][7m] [Pascal] [mojtabatajik/robber](https://github.com/mojtabatajik/robber) 查找易于发生DLL劫持的可执行文件
+- [**430**星][1y] [meitar/awesome-lockpicking](https://github.com/meitar/awesome-lockpicking) 有关锁、保险箱、钥匙的指南、工具及其他资源的列表
+- [**430**星][2y] [Py] [lightbulb-framework/lightbulb-framework](https://github.com/lightbulb-framework/lightbulb-framework) Web App 防火墙和过滤器的审计框架
+- [**430**星][2y] [ObjC] [keith/hopper-swift-demangle](https://github.com/keith/hopper-swift-demangle) A Hopper plugin for demangle Swift symbols
+- [**430**星][4m] [Py] [crocs-muni/roca](https://github.com/crocs-muni/roca) 测试公共 RSA 密钥是否存在某些漏洞
+- [**430**星][11m] [captainarash/the_holy_book_of_x86](https://github.com/captainarash/the_holy_book_of_x86) A simple guide to x86 architecture, assembly, memory management, paging, segmentation, SMM, BIOS....
+- [**430**星][28d] [C#] [0xd4d/iced](https://github.com/0xd4d/iced) x86/x64 disassembler, instruction decoder & encoder
+- [**429**星][1m] [Java] [aosp-mirror/platform_dalvik](https://github.com/aosp-mirror/platform_dalvik)
+- [**429**星][28d] [Py] [stamparm/fetch-some-proxies](https://github.com/stamparm/fetch-some-proxies) Simple Python script for fetching "some" (usable) proxies
+- [**428**星][1m] [C] [sciresm/hactool](https://github.com/sciresm/hactool) hactool is a tool to view information about, decrypt, and extract common file formats for the Nintendo Switch, especially Nintendo Content Archives.
+- [**428**星][3d] [C++] [ridiculousfish/libdivide](https://github.com/ridiculousfish/libdivide) Official git repository for libdivide: optimized integer division
+- [**428**星][3m] [Py] [payatu/tiredful-api](https://github.com/payatu/tiredful-api) An intentionally designed broken web application based on REST API.
+- [**428**星][2m] [Py] [obsidianforensics/hindsight](https://github.com/obsidianforensics/hindsight) Internet history forensics for Google Chrome/Chromium
+- [**428**星][2y] [ObjC] [jackrex/fakewechatloc](https://github.com/jackrex/fakewechatloc) 手把手教你制作一款iOS越狱App
+- [**428**星][2y] [Py] [evilsocket/smali_emulator](https://github.com/evilsocket/smali_emulator) This software will emulate a smali source file generated by apktool.
+- [**428**星][2y] [JS] [bradoyler/xmr-miner](https://github.com/bradoyler/xmr-miner) Web-based Cryptocurrency miner, built with Vue.js
+- [**428**星][10m] [Py] [appsecco/bugcrowd-levelup-subdomain-enumeration](https://github.com/appsecco/bugcrowd-levelup-subdomain-enumeration) This repository contains all the material from the talk "Esoteric sub-domain enumeration techniques" given at Bugcrowd LevelUp 2017 virtual conference
+- [**427**星][3m] [Perl] [wireghoul/dotdotpwn](https://github.com/wireghoul/dotdotpwn) DotDotPwn - The Directory Traversal Fuzzer
+- [**427**星][1y] [C] [novicelive/research-rootkit](https://github.com/novicelive/research-rootkit) LibZeroEvil & the Research Rootkit project.
+- [**427**星][8d] [TeX] [corkami/docs](https://github.com/corkami/docs) documentations, slides decks...
+- [**426**星][2m] [Py] [nullhypothesis/exitmap](https://github.com/nullhypothesis/exitmap) A fast and modular scanner for Tor exit relays.
+- [**426**星][1y] [Py] [endgameinc/gym-malware](https://github.com/endgameinc/gym-malware) 基于OpenAI Gym 实现的恶意代码操作环境,其目标是实现可以学习如何修改 PE 文件以达到特定目的(例如绕过AV)的 agent。(OpenAIGym:开发和通过比较强化学习算法的工具包)
+- [**425**星][4y] [HTML] [praetorian-code/dvrf](https://github.com/praetorian-code/DVRF) The Damn Vulnerable Router Firmware Project
+- [**425**星][2y] [rsmudge/malleable-c2-profiles](https://github.com/rsmudge/malleable-c2-profiles) Malleable C2 is a domain specific language to redefine indicators in Beacon's communication. This repository is a collection of Malleable C2 profiles that you may use. These profiles work with Cobalt Strike 3.x.
+- [**425**星][11m] [Py] [lordamit/brightness](https://github.com/lordamit/brightness) Brightness Controller
+- [**424**星][7y] [C] [spinkham/skipfish](https://github.com/spinkham/skipfish) Web application security scanner created by lcamtuf for google - Unofficial Mirror
+- [**424**星][3m] [PS] [p3nt4/invoke-socksproxy](https://github.com/p3nt4/invoke-socksproxy) Socks proxy server using powershell. Supports local and reverse connections for pivoting.
+- [**424**星][3d] [Go] [openshift/odo](https://github.com/openshift/odo) OpenShift Do - Fast, iterative OpenShift development
+- [**424**星][9d] [C] [newaetech/chipwhisperer](https://github.com/newaetech/chipwhisperer) thecomplete open-source toolchain for side-channel power analysis and glitchingattacks
+- [**424**星][3m] [JS] [lolimay/shadowsocks-deepin](https://github.com/lolimay/shadowsocks-deepin)
+- [**424**星][3m] [Py] [jotygill/openpyn-nordvpn](https://github.com/jotygill/openpyn-nordvpn) Easily connect to and switch between, OpenVPN servers hosted by NordVPN on Linux (+patch leakes)
+- [**424**星][4y] [C++] [jonathansalwan/pintools](https://github.com/jonathansalwan/pintools) Pintool example and PoC for dynamic binary analysis
+- [**424**星][5m] [iovisor/bpf-docs](https://github.com/iovisor/bpf-docs) Presentations and docs
+- [**424**星][2d] [Shell] [energizedprotection/block](https://github.com/energizedprotection/block) Let's make an annoyance free, better open internet, altogether!
+- [**424**星][7d] [Java] [dependencytrack/dependency-track](https://github.com/dependencytrack/dependency-track) Dependency-Track is an intelligent Supply Chain Component Analysis platform that allows organizations to identify and reduce risk from the use of third-party and open source components.
+- [**423**星][1y] [PHP] [ysrc/webshell-sample](https://github.com/ysrc/webshell-sample) 收集自网络各处的 webshell 样本,用于测试 webshell 扫描器检测率。
+- [**423**星][3d] [xuanhun/hackingresource](https://github.com/xuanhun/hackingresource) “玄魂工作室--安全圈” 知识星球内资源汇总
+- [**423**星][1y] [ring04h/papers](https://github.com/ring04h/papers) my security summit papers
+- [**423**星][4m] [re4lity/hacking-with-golang](https://github.com/re4lity/hacking-with-golang) Golang安全资源合集
+- [**423**星][3y] [Makefile] [mindmac/androideagleeye](https://github.com/mindmac/androideagleeye) An Xposed and adbi based module which is capable of hooking both Java and Native methods targeting Android OS.
+- [**423**星][10m] [C] [hardenedlinux/linux-exploit-development-tutorial](https://github.com/hardenedlinux/linux-exploit-development-tutorial) a series tutorial for linux exploit development to newbie.
+- [**423**星][4m] [Shell] [ashishb/android-malware](https://github.com/ashishb/android-malware) Collection of android malware samples
+- [**423**星][30d] [Awk] [alecmuffett/eotk](https://github.com/alecmuffett/eotk) Enterprise Onion Toolkit
+- [**422**星][2y] [fwgs/cs16-client](https://github.com/fwgs/cs16-client) Counter-Strike 1.6 rewritten client.dll. Without VGUI, ParticleMan and ecology friendy.
+- [**422**星][1y] [Py] [shmilylty/cheetah](https://github.com/shmilylty/cheetah) a very fast brute force webshell password tool
+- [**422**星][4m] [Go] [yl2chen/cidranger](https://github.com/yl2chen/cidranger) Fast IP to CIDR lookup in Golang
+- [**422**星][2y] [Lua] [xsec-lab/x-waf](https://github.com/xsec-lab/x-waf) 适用于中小企业的云waf
+- [**422**星][10m] [Py] [d4vinci/cuteit](https://github.com/d4vinci/cuteit) IP obfuscator made to make a malicious ip a bit cuter
+- [**421**星][19d] [C] [mcgill-dmas/kam1n0-community](https://github.com/McGill-DMaS/Kam1n0-Community) 汇编代码管理与分析平台(独立工具+IDA插件)
+ - [IDA插件](https://github.com/McGill-DMaS/Kam1n0-Community/tree/master2.x/kam1n0-clients/ida-plugin)
+ - [kam1n0](https://github.com/McGill-DMaS/Kam1n0-Community/tree/master2.x/kam1n0)
+- [**421**星][3y] [riusksk/vul_war](https://github.com/riusksk/vul_war) 《漏洞战争:软件漏洞分析精要》配套资料
+- [**421**星][11m] [Lua] [w3h/icsmaster](https://github.com/w3h/icsmaster) 整合工控安全相关资源
+- [**421**星][2y] [C++] [unamer/cve-2018-8120](https://github.com/unamer/cve-2018-8120) CVE-2018-8120 Windows LPE exploit
+- [**421**星][1y] [Py] [thehackingsage/hacktronian](https://github.com/thehackingsage/hacktronian) All in One Hacking Tool for Linux & Android
+- [**421**星][2y] [Go] [subgraph/oz](https://github.com/subgraph/oz) a sandboxing system targeting everyday workstation applications
+- [**421**星][3y] [Py] [mengskysama/shadowsocks-rm](https://github.com/mengskysama/shadowsocks-rm) A fast tunnel proxy that helps you bypass firewalls
+- [**421**星][2m] [Rust] [kpcyrd/sniffglue](https://github.com/kpcyrd/sniffglue) Secure multithreaded packet sniffer
+- [**421**星][1y] [JS] [ciscocsirt/gosint](https://github.com/ciscocsirt/gosint) 收集、处理、索引高质量IOC的框架
+- [**420**星][5m] [Java] [bit4woo/recaptcha](https://github.com/bit4woo/recaptcha) reCAPTCHA = REcognize CAPTCHA: A Burp Suite Extender that recognize CAPTCHA and use for intruder payload 自动识别图形验证码并用于burp intruder爆破模块的插件
+- [**420**星][3m] [Shell] [jsamr/bootiso](https://github.com/jsamr/bootiso) A bash script to securely create a bootable USB device from one ISO file. Just curl it, chmod it and go!
+- [**420**星][3m] [jack-liang/kalitools](https://github.com/jack-liang/kalitools) Kali Linux工具清单
+- [**420**星][2m] [C] [desowin/usbpcap](https://github.com/desowin/usbpcap) USB packet capture for Windows
+- [**419**星][4y] [Shell] [imagetragick/pocs](https://github.com/imagetragick/pocs) Proof of Concepts for CVE-2016–3714
+- [**419**星][1y] [Py] [ekultek/pybelt](https://github.com/ekultek/pybelt) 黑客工具
+- [**419**星][16d] [Perl] [chinarulezzz/pixload](https://github.com/chinarulezzz/pixload) Image Payload Creating/Injecting tools
+- [**419**星][4y] [ObjC] [asido/systemmonitor](https://github.com/asido/systemmonitor) iOS application providing you all information about your device - hardware, operating system, processor, memory, GPU, network interface, storage and battery, including OpenGL powered visual representation in real time.
+- [**419**星][5m] [C] [anssi-fr/ad-control-paths](https://github.com/anssi-fr/ad-control-paths) Active Directory Control Paths auditing and graphing tools
+- [**418**星][2y] [opentechfund/secure-email](https://github.com/opentechfund/secure-email) Overview of projects working on next-generation secure email.
+- [**418**星][11m] [Shell] [nilotpalbiswas/auto-root-exploit](https://github.com/nilotpalbiswas/auto-root-exploit) Auto Root Exploit Tool
+- [**418**星][3m] [Py] [misterch0c/malsploitbase](https://github.com/misterch0c/malsploitbase) Malware exploits
+- [**418**星][1y] [Go] [kragniz/tor-controller](https://github.com/kragniz/tor-controller) Run Tor onion services on Kubernetes
+- [**418**星][11m] [C] [jpr5/ngrep](https://github.com/jpr5/ngrep) ngrep is like GNU grep applied to the network layer. It's a PCAP-based tool that allows you to specify an extended regular or hexadecimal expression to match against data payloads of packets. It understands many kinds of protocols, including IPv4/6, TCP, UDP, ICMPv4/6, IGMP and Raw, across a wide variety of interface types, and understands BPF f…
+- [**418**星][3m] [Py] [honeynet/droidbot](https://github.com/honeynet/droidbot) A lightweight test input generator for Android. Similar to Monkey, but with more intelligence and cool features!
+- [**418**星][10d] [dropsofzut/awesome-security-weixin-official-accounts](https://github.com/dropsofzut/awesome-security-weixin-official-accounts) 网络安全类公众号推荐,欢迎大家推荐
+- [**418**星][3y] [Py] [chishaxie/blindwatermark](https://github.com/chishaxie/blindwatermark) 盲水印 by python
+- [**418**星][7m] [7kbstorm/7kbscan-webpathbrute](https://github.com/7kbstorm/7kbscan-webpathbrute) 路径暴力探测工具
+- [**417**星][1m] [Kotlin] [hmbsbige/shadowsocksr-android](https://github.com/hmbsbige/shadowsocksr-android) A ShadowsocksR client for Android, written in Kotlin.
+- [**417**星][1y] [Py] [veekxt/v2ray-template](https://github.com/veekxt/v2ray-template) v2ray 模板,v2ray 配置生成工具
+- [**417**星][2m] [C] [openresty/luajit2](https://github.com/openresty/luajit2) OpenResty's Branch of LuaJIT 2
+- [**417**星][5m] [C] [mykter/afl-training](https://github.com/mykter/afl-training) Exercises to learn how to fuzz with American Fuzzy Lop
+- [**417**星][7d] [C++] [simonkagstrom/kcov](https://github.com/simonkagstrom/kcov) Code coverage tool for compiled programs, Python and Bash which uses debugging information to collect and report data without special compilation options
+- [**417**星][11m] [ObjC] [mxabc/devdatatool](https://github.com/mxabc/devdatatool) 编码转换、摘要(hash)、加解密(MD5、SHA、SHA3、SM3、HMAC、DES、3DES、AES、SM4)
+- [**417**星][14d] [PHP] [mm0r1/exploits](https://github.com/mm0r1/exploits) Pwn stuff.
+- [**417**星][3y] [C++] [malwares/botnet](https://github.com/malwares/botnet) Botnet
+- [**417**星][2d] [C] [deeponion/deeponion-legacy](https://github.com/deeponion/deeponion-legacy) Official Source Repo for DeepOnion - Anonymous Cryptocurrency on TOR Network (legacy)
+- [**417**星][1y] [JS] [chokcoco/httphijack](https://github.com/chokcoco/httphijack) 使用Javascript实现前端防御http劫持及防御XSS攻击,并且对可疑攻击进行上报
+- [**417**星][8m] [Py] [awslabs/aws-waf-security-automations](https://github.com/awslabs/aws-waf-security-automations) This solution automatically deploys a single web access control list (web ACL) with a set of AWS WAF rules designed to filter common web-based attacks.
+- [**416**星][3m] [Rust] [exodusvpn/exodus](https://github.com/ExodusVPN/exodus) network proxy and tunnel (VPN)
+- [**416**星][3y] [Py] [x3omdax/penbox](https://github.com/x3omdax/penbox) 渗透测试框架-包含所有工具的工具
+- [**416**星][10m] [Py] [powerscript/katanaframework](https://github.com/powerscript/katanaframework) 用于进行渗透测试的框架,基于一个简单而全面的结构,任何人都可以使用,修改和共享。Python编写
+- [**416**星][6d] [C] [frida/frida-python](https://github.com/frida/frida-python) Frida Python bindings
+- [**416**星][2y] [JS] [evilcos/xssor](https://github.com/evilcos/xssor) XSSOR:方便XSS与CSRF的工具,
+- [**415**星][1y] [zhengmin1989/greatiosjailbreakmaterial](https://github.com/zhengmin1989/greatiosjailbreakmaterial) Great iOS Jailbreak Material! - I read hundreds of papers and PPTs. Only list the most useful materials here!
+- [**415**星][8m] [Shell] [sroberts/awesome-iocs](https://github.com/sroberts/awesome-iocs) A collection of sources of indicators of compromise.
+- [**415**星][5m] [preos-security/awesome-firmware-security](https://github.com/preos-security/awesome-firmware-security) Awesome Firmware Security & Other Helpful Documents
+- [**415**星][3m] [C] [odzhan/injection](https://github.com/odzhan/injection) Windows process injection methods
+- [**415**星][3d] [C] [libvmi/libvmi](https://github.com/libvmi/libvmi) The official home of the LibVMI project is at
+- [**415**星][2d] [Py] [graalvm/graalpython](https://github.com/graalvm/graalpython) A Python 3 implementation built on GraalVM
+- [**415**星][2d] [Py] [forensicartifacts/artifacts](https://github.com/forensicartifacts/artifacts) Digital Forensics Artifact Repository
+- [**415**星][3y] [Py] [ciscocsirt/malspider](https://github.com/ciscocsirt/malspider) Malspider is a web spidering framework that detects characteristics of web compromises.
+- [**414**星][10m] [Py] [autocracy/python-ipy](https://github.com/autocracy/python-ipy) IPy are a Python class and tools for handling of IPv4 and IPv6 addresses and networks. It is similar to Net::IP Perl module.
+- [**414**星][11d] [hunters-forge/ossem](https://github.com/hunters-forge/OSSEM) Open Source Security Events Metadata (OSSEM)
+- [**414**星][3m] [Scala] [thehive-project/cortex](https://github.com/TheHive-Project/Cortex) a Powerful Observable Analysis and Active Response Engine
+- [**414**星][5d] [Shell] [thesecondsun/bashark](https://github.com/thesecondsun/bashark) Bash post exploitation toolkit
+- [**414**星][23d] [Py] [sibson/redbeat](https://github.com/sibson/redbeat) RedBeat is a Celery Beat Scheduler that stores the scheduled tasks and runtime metadata in Redis.
+- [**414**星][5d] [C] [samba-team/samba](https://github.com/samba-team/samba) 适用于Linux和Unix的标准Windows interoperability程序套件
+- [**414**星][2y] [Py] [ridter/cve-2017-11882](https://github.com/ridter/cve-2017-11882) CVE-2017-11882 from
+- [**414**星][3y] [pgaijin66/xss-payloads](https://github.com/pgaijin66/xss-payloads) List of advanced XSS payloads
+- [**414**星][5m] [Java] [nccgroup/freddy](https://github.com/nccgroup/freddy) 自动识别 Java/.NET 应用程序中的反序列化漏洞
+- [**414**星][2y] [Py] [kvasirsecurity/kvasir](https://github.com/kvasirsecurity/kvasir) 渗透测试数据管理
+- [**414**星][23d] [C#] [jbe2277/waf](https://github.com/jbe2277/waf) Win Application Framework (WAF) is a lightweight Framework that helps you to create well structured XAML Applications.
+- [**414**星][5d] [Py] [dashingsoft/pyarmor](https://github.com/dashingsoft/pyarmor) A tool used to obfuscate python scripts, bind obfuscated scripts to fixed machine or expire obfuscated scripts.
+- [**414**星][4d] [Py] [chef-koch/nsablocklist](https://github.com/chef-koch/nsablocklist) HOSTS file and research project to block all known NSA / GCHQ / C.I.A. / F.B.I. spying server
+- [**414**星][10m] [Py] [autocracy/python-ipy](https://github.com/autocracy/python-ipy) IPy are a Python class and tools for handling of IPv4 and IPv6 addresses and networks. It is similar to Net::IP Perl module.
+- [**413**星][25d] [Py] [epsylon/xsser](https://github.com/epsylon/xsser) Cross Site "Scripter" (aka XSSer) is an automatic -framework- to detect, exploit and report XSS vulnerabilities in web-based applications.
+- [**413**星][3m] [C++] [avast/retdec-idaplugin](https://github.com/avast/retdec-idaplugin) retdec 的 IDA 插件
+- [**413**星][1y] [PHP] [wupco/weblogger](https://github.com/wupco/weblogger) 针对ctf线下赛流量抓取(php)、真实环境流量抓取分析的工具
+- [**413**星][29d] [C++] [tenable/routeros](https://github.com/tenable/routeros) 对 MikroTik的RouterOS进行安全性研究时使用的各种工具和漏洞
+- [**413**星][5m] [Py] [stanislav-web/opendoor](https://github.com/stanislav-web/opendoor) OWASP WEB Directory Scanner
+- [**413**星][3y] [prife/virtualappdoc](https://github.com/prife/virtualappdoc)
+- [**413**星][4y] [Py] [ngalongc/autolocalprivilegeescalation](https://github.com/ngalongc/autolocalprivilegeescalation) An automated script that download potential exploit for linux kernel from exploitdb, and compile them automatically
+- [**413**星][4y] [Java] [lukefalsina/grab-n-run](https://github.com/lukefalsina/grab-n-run) Grab’n Run, a simple and effective Java Library for Android projects to secure dynamic code loading.
+- [**413**星][2y] [Py] [kromtech/s3-inspector](https://github.com/kromtech/s3-inspector) 检查AWS S3 bucket权限
+- [**413**星][5y] [Java] [jeremyh/jbcrypt](https://github.com/jeremyh/jbcrypt) A Java implementation of OpenBSD's Blowfish password hashing code
+- [**413**星][2y] [C] [henkaku/henkaku](https://github.com/henkaku/henkaku) Homebrew enabler for PS Vita
+- [**413**星][4y] [C++] [demi6od/smashing_the_browser](https://github.com/demi6od/smashing_the_browser) Smashing The Browser: From Vulnerability Discovery To Exploit
+- [**413**星][9d] [C] [aarond10/https_dns_proxy](https://github.com/aarond10/https_dns_proxy) A lightweight DNS-over-HTTPS proxy.
+- [**412**星][11m] [TS] [polymer/prpl-server](https://github.com/Polymer/prpl-server) An HTTP server for Node designed to serve PRPL apps in production.
+- [**412**星][2y] [vasanthk/web-security-basics](https://github.com/vasanthk/web-security-basics) web 安全基础
+- [**412**星][4m] [C] [hfiref0x/vboxhardenedloader](https://github.com/hfiref0x/vboxhardenedloader) VirtualBox VM detection mitigation loader
+- [**412**星][2d] [Java] [batfish/batfish](https://github.com/batfish/batfish) Batfish is a network configuration analysis tool that can find bugs and guarantee the correctness of (planned or current) network configurations. It enables network engineers to rapidly and safely evolve their network, without fear of outages or security breaches.
+- [**412**星][2y] [Py] [51x/whp](https://github.com/51x/whp) Micro$oft Windows Hacking Pack
+- [**411**星][5m] [Ruby] [praetorian-code/purple-team-attack-automation](https://github.com/praetorian-code/purple-team-attack-automation) Praetorian's public release of our Metasploit automation of MITRE ATT&CK™ TTPs
+- [**411**星][7y] [Java] [wg/scrypt](https://github.com/wg/scrypt) Java implementation of scrypt
+- [**411**星][25d] [Py] [osnr/horrifying-pdf-experiments](https://github.com/osnr/horrifying-pdf-experiments)
+- [**411**星][2y] [Py] [operatorequals/covertutils](https://github.com/operatorequals/covertutils) Python2包,包含 N 多用于实现自定义后门的模块,从文件传输到自定义Shell,应有尽有
+- [**411**星][4m] [ObjC] [lavabit/libdime](https://github.com/lavabit/libdime) The DIME resolver library and command line utilities.
+- [**411**星][23d] [C++] [hoshimin/kernel-bridge](https://github.com/hoshimin/kernel-bridge) Windows kernel hacking framework, driver template, hypervisor and API written on C++
+- [**411**星][3m] [Pascal] [felipedaragon/sandcat](https://github.com/felipedaragon/sandcat) 为渗透测试和开发者准备的轻量级浏览器, 基于Chromium和Lua
+- [**411**星][9d] [Py] [corkami/collisions](https://github.com/corkami/collisions) Hash collisions and their exploitations
+- [**411**星][3y] [C] [0x27/linux.mirai](https://github.com/0x27/linux.mirai) Leaked Linux.Mirai Source Code for Research/IoC Development Purposes
+- [**410**星][9m] [Assembly] [mewmew/dissection](https://github.com/mewmew/dissection) The dissection of a simple "hello world" ELF binary.
+- [**410**星][11m] [C] [titansec/openwaf](https://github.com/titansec/openwaf) Web security protection system based on openresty
+- [**410**星][25d] [Go] [gcla/gowid](https://github.com/gcla/gowid) Compositional widgets for terminal user interfaces, written in Go, inspired by urwid.
+- [**410**星][6m] [Py] [dnsviz/dnsviz](https://github.com/dnsviz/dnsviz) s a tool suite for analysis and visualization of Domain Name System (DNS) behavior, including its security extensions (DNSSEC)
+- [**410**星][4m] [Shell] [d4rk007/redghost](https://github.com/d4rk007/redghost) Linux post exploitation framework written in bash designed to assist red teams in persistence, reconnaissance, privilege escalation and leaving no trace.
+- [**410**星][3m] [C++] [cobaltfusion/debugviewpp](https://github.com/cobaltfusion/debugviewpp) DebugView++, collects, views, filters your application logs, and highlights information that is important to you!
+- [**410**星][2y] [Py] [cloudburst/libheap](https://github.com/cloudburst/libheap) 用于检查ptmalloc的python库(glibc用户空间堆实现)
+- [**409**星][28d] [husnainfareed/awesome-ethical-hacking-resources](https://github.com/husnainfareed/Awesome-Ethical-Hacking-Resources)
+- [**409**星][9m] [Py] [linklayer/pyvit](https://github.com/linklayer/pyvit) 与汽车接口的工具包。它旨在实现汽车系统中使用的通用硬件接口和协议。
+- [**409**星][3m] [Py] [windsooon/cherry](https://github.com/Windsooon/cherry) text classification - no machine learning knowledge needed
+- [**409**星][2y] [zyfworks/ssr-backup](https://github.com/zyfworks/ssr-backup) ShadowsocksR backups
+- [**409**星][4d] [Py] [ytisf/pyexfil](https://github.com/ytisf/pyexfil) 用于数据渗透的Python包
+- [**409**星][2y] [Py] [ojasookert/cve-2017-0785](https://github.com/ojasookert/cve-2017-0785) Blueborne CVE-2017-0785 Android information leak vulnerability
+- [**409**星][2y] [Py] [nahamsec/jsparser](https://github.com/nahamsec/jsparser) using Tornado and JSBeautifier to parse relative URLs from JavaScript files
+- [**409**星][5m] [Py] [itayc0hen/a-journey-into-radare2](https://github.com/itayc0hen/a-journey-into-radare2) A series of tutorials about radare2 framework from
+- [**409**星][2m] [CSS] [angea/pocorgtfo](https://github.com/angea/pocorgtfo) a "PoC or GTFO" mirror with extra article index, direct links and clean PDFs.
+- [**408**星][5d] [JS] [0vercl0k/cve-2019-11708](https://github.com/0vercl0k/cve-2019-11708) Full exploit chain (CVE-2019-11708 & CVE-2019-9810) against Firefox on Windows 64-bit.
+- [**408**星][2y] [Py] [xapax/oscp](https://github.com/xapax/oscp)
+- [**408**星][3y] [C] [robertyim/shadowsocksx](https://github.com/RobertYim/ShadowsocksX) Fork of shadowsocks-iOS
+- [**408**星][7d] [C] [ufrisk/memprocfs](https://github.com/ufrisk/memprocfs) The Memory Process File System
+- [**408**星][29d] [C++] [souhardya/uboat](https://github.com/souhardya/uboat) HTTP Botnet Project
+- [**408**星][2y] [Py] [rub-syssec/kafl](https://github.com/rub-syssec/kafl) Code for the USENIX 2017 paper: kAFL: Hardware-Assisted Feedback Fuzzing for OS Kernels
+- [**408**星][2y] [C++] [lyle-nel/siga](https://github.com/lyle-nel/siga) Population based metaheuristic for password cracking. Siga(Simple genetic algorithm)
+- [**408**星][2y] [Java] [fourbrother/kstools](https://github.com/fourbrother/kstools) Android中自动爆破签名工具
+- [**408**星][2y] [C] [devshane/zork](https://github.com/devshane/zork) The DUNGEON (Zork I) source
+- [**408**星][8d] [Go] [cloudfoundry/gorouter](https://github.com/cloudfoundry/gorouter) CF Router
+- [**407**星][1y] [C] [ww9210/linux_kernel_exploits](https://github.com/ww9210/linux_kernel_exploits) Repo for FUZE project. I will also publish some Linux kernel LPE exploits for various real world kernel vulnerabilities here. the samples are uploaded for education purposes for red and blue teams.
+- [**407**星][15d] [Java] [spring-cloud/spring-cloud-security](https://github.com/spring-cloud/spring-cloud-security) Security concerns for distributed applications implemented in Spring
+- [**407**星][3m] [PS] [officedev/o365-investigationtooling](https://github.com/officedev/o365-investigationtooling)
+- [**407**星][7m] [Java] [nccgroup/burpsuitehttpsmuggler](https://github.com/nccgroup/burpsuitehttpsmuggler) A Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniques
+- [**407**星][3y] [PHP] [naneau/php-obfuscator](https://github.com/naneau/php-obfuscator) A parsing PHP obfuscator
+- [**407**星][8m] [Py] [mitrecnd/chopshop](https://github.com/mitrecnd/chopshop) Protocol Analysis/Decoder Framework
+- [**407**星][8m] [kai5263499/osx-security-awesome](https://github.com/kai5263499/osx-security-awesome) A collection of OSX and iOS security resources
+- [**407**星][18d] [Py] [bl4de/security-tools](https://github.com/bl4de/security-tools) Collection of small security tools created mostly in Python. CTFs, pentests and so on
+- [**407**星][1m] [Ruby] [arkadiyt/aws_public_ips](https://github.com/arkadiyt/aws_public_ips) Fetch all public IP addresses tied to your AWS account. Works with IPv4/IPv6, Classic/VPC networking, and across all AWS services
+- [**406**星][24d] [PHP] [spatie/ssl-certificate](https://github.com/spatie/ssl-certificate) A class to validate SSL certificates
+- [**406**星][17d] [Py] [jiangxufeng/v2rayl](https://github.com/jiangxufeng/v2rayl) v2ray linux GUI客户端,支持订阅、vemss、ss等协议,自动更新订阅、检查版本更新
+- [**406**星][1m] [C++] [wbenny/hvpp](https://github.com/wbenny/hvpp) hvpp is a lightweight Intel x64/VT-x hypervisor written in C++ focused primarily on virtualization of already running operating system
+- [**406**星][1y] [Java] [testwhat/smaliex](https://github.com/testwhat/smaliex) A wrapper to get de-optimized dex from odex/oat/vdex.
+- [**406**星][9d] [Rust] [m4b/goblin](https://github.com/m4b/goblin) An impish, cross-platform binary parsing crate, written in Rust
+- [**406**星][1y] [Py] [fossfreedom/indicator-sysmonitor](https://github.com/fossfreedom/indicator-sysmonitor) Ubuntu application indicator to show various system parameters
+- [**406**星][3y] [Py] [breenmachine/httpscreenshot](https://github.com/breenmachine/httpscreenshot)
+- [**405**星][1m] [Py] [lanmaster53/recon-ng](https://github.com/lanmaster53/recon-ng) Open Source Intelligence gathering tool aimed at reducing the time spent harvesting information from open sources.
+- [**405**星][29d] [Shell] [s0md3v/diggy](https://github.com/s0md3v/Diggy) Extract endpoints from apk files.
+- [**405**星][3d] [Py] [crytic/slither](https://github.com/crytic/slither) Static Analyzer for Solidity
+- [**405**星][3y] [Py] [xitu/macos-security-and-privacy-guide](https://github.com/xitu/macos-security-and-privacy-guide) A practical guide to securing macOS.
+- [**405**星][1y] [C++] [vah13/extracttvpasswords](https://github.com/vah13/extracttvpasswords) tool to extract passwords from TeamViewer memory using Frida
+- [**405**星][3m] [C#] [shack2/supersqlinjectionv1](https://github.com/shack2/supersqlinjectionv1) 超级SQL注入工具(SSQLInjection)是一款基于HTTP协议自组包的SQL注入工具,采用C#开发,直接操作TCP会话来进行HTTP交互,支持出现在HTTP协议任意位置的SQL注入,支持各种类型的SQL注入,支持HTTPS模式注入;支持以盲注、错误显示、Union注入等方式来获取数据;支持Access/MySQL/SQLServer/Oracle/PostgreSQL/DB2/SQLite/Informix等数据库;支持手动灵活的进行SQL注入绕过,可自定义进行字符替换等绕过注入防护。本工具为渗透测试人员、信息安全工程师等掌握SQL注入技能的人员设计,需要使用人员对SQL注入有一定了解。
+- [**405**星][5y] [Py] [paloaltonetworks/wirelurkerdetector](https://github.com/paloaltonetworks/wirelurkerdetector) Script for detecting the WireLurker malware family
+- [**405**星][5y] [ObjC] [mp0w/ios-headers](https://github.com/mp0w/ios-headers) iOS 5.0/5.1/6.0/6.1/7.0/7.1/8.0/8.1 Headers of All Frameworks (private and not) + SpringBoard
+- [**405**星][1y] [C] [coalfire-research/ios-11.1.2-15b202-jailbreak](https://github.com/coalfire-research/ios-11.1.2-15b202-jailbreak) iOS 11.1.2 (15B202) Jailbreak
+- [**404**星][3m] [C] [thundercls/xanalyzer](https://github.com/thundercls/xanalyzer) xAnalyzer plugin for x64dbg
+- [**404**星][5y] [Ruby] [svent/jsdetox](https://github.com/svent/jsdetox) A Javascript malware analysis tool
+- [**404**星][3y] [C++] [iaik/rowhammerjs](https://github.com/iaik/rowhammerjs) JavaScript中的远程软件引发的故障攻击
+- [**404**星][17d] [Java] [google/closure-templates](https://github.com/google/closure-templates) A client- and server-side templating system that helps you dynamically build reusable HTML and UI elements
+- [**404**星][1y] [Go] [chaitin/cloudwalker](https://github.com/chaitin/cloudwalker) CloudWalker Platform
+- [**404**星][2y] [JS] [cagataycali/xss-listener](https://github.com/cagataycali/xss-listener)
+- [**404**星][2y] [Makefile] [bettermanbao/openwrt-shadowsocksr-libev-full](https://github.com/bettermanbao/openwrt-shadowsocksr-libev-full) ShadowsocksR-libev-full for OpenWrt
+- [**403**星][2y] [Ruby] [fuzzapi/fuzzapi](https://github.com/Fuzzapi/fuzzapi) Fuzzapi is a tool used for REST API pentesting and uses API_Fuzzer gem
+- [**403**星][5y] [vk496/linset](https://github.com/vk496/linset) 双面恶魔攻击(EvilTwin Attack)bash 脚本
+- [**403**星][2y] [C++] [rootm0s/injectors](https://github.com/rootm0s/injectors)
+- [**403**星][23d] [Py] [nsmfoo/antivmdetection](https://github.com/nsmfoo/antivmdetection) Script to create templates to use with VirtualBox to make vm detection harder
+- [**403**星][9d] [JS] [handshake-org/hsd](https://github.com/handshake-org/hsd) Handshake Daemon & Full Node
+- [**403**星][9m] [C] [darthton/hyperbone](https://github.com/darthton/hyperbone) Minimalistic VT-x hypervisor with hooks
+- [**403**星][2y] [PS] [danielbohannon/invoke-dosfuscation](https://github.com/danielbohannon/invoke-dosfuscation) Cmd.exe Command Obfuscation Generator & Detection Test Harness
+- [**403**星][10m] [Py] [christruncer/pentestscripts](https://github.com/christruncer/pentestscripts) 渗透脚本
+- [**403**星][3y] [CSS] [710leo/zvuldrill](https://github.com/710leo/zvuldrill) Web漏洞演练平台
+- [**402**星][2m] [C] [liudf0716/xkcptun](https://github.com/liudf0716/xkcptun) xkcptun is kcp tunnel for OpenWRT&LEDE, implemented in c language
+- [**402**星][3y] [C#] [zenlulz/memorysharp](https://github.com/zenlulz/memorysharp) Windows程序内存编辑库,C#编写,可向远程进程注入输入和代码,或读取远程进程内存
+- [**402**星][5y] [Py] [syworks/waidps](https://github.com/syworks/waidps) Wireless Auditing, Intrusion Detection & Prevention System
+- [**402**星][3y] [C++] [rwfpl/rewolf-wow64ext](https://github.com/rwfpl/rewolf-wow64ext) 在64位Windows系统上的WOW64 layer下运行x86程序
+- [**402**星][4m] [Java] [megatronking/netbare](https://github.com/megatronking/netbare) Net packets capture & injection library designed for Android
+- [**402**星][2y] [C] [fuzion24/androidkernelexploitationplayground](https://github.com/fuzion24/androidkernelexploitationplayground)
+- [**402**星][10m] [Go] [evilsocket/shellz](https://github.com/evilsocket/shellz) shellz is a small utility to track and control your ssh, telnet, web and custom shells and tunnels.
+- [**402**星][4y] [Py] [1an0rmus/tekdefense-automater](https://github.com/1an0rmus/tekdefense-automater) Automater - IP URL and MD5 OSINT Analysis
+- [**401**星][22d] [HTML] [w3c/webappsec](https://github.com/w3c/webappsec) Web App安全工作组
+- [**401**星][4y] [Py] [sleventyeleven/linuxprivchecker](https://github.com/sleventyeleven/linuxprivchecker) Linux提权检查脚本
+- [**401**星][21d] [ObjC] [sap/macos-enterprise-privileges](https://github.com/sap/macos-enterprise-privileges) For Mac users in an Enterprise environment this app ensures secure environment and yet gives the User control over administration of their machine by elevating their level of access to Administrator privilege on macOS X. Users can set the time frame using Preferences to perform specific tasks such as install or remove an application.
+- [**401**星][6y] [Java] [isecpartners/introspy-android](https://github.com/isecpartners/introspy-android) Security profiling for blackbox Android
+- [**401**星][3d] [JS] [aztecprotocol/aztec](https://github.com/aztecprotocol/aztec) Public repository for the AZTEC protocol
+- [**400**星][1m] [Py] [fbngrm/matroschka](https://github.com/fbngrm/Matroschka) Python隐写术工具,可在图像中红隐藏文本或图像
+- [**400**星][5d] [Java] [spring-cloud/spring-cloud-gcp](https://github.com/spring-cloud/spring-cloud-gcp) Integration for Google Cloud Platform APIs with Spring
+- [**400**星][11m] [skyblueeternal/thinkphp-rce-poc-collection](https://github.com/skyblueeternal/thinkphp-rce-poc-collection) thinkphp v5.x 远程代码执行漏洞-POC集合
+- [**400**星][1y] [Py] [jpaulmora/pyrit](https://github.com/jpaulmora/pyrit) The famous WPA precomputed cracker, Migrated from Google.
+- [**400**星][12m] [Py] [dstmath/frida-unpack](https://github.com/dstmath/frida-unpack) 基于Frida的脱壳工具
+- [**399**星][6d] [C++] [lifting-bits/remill](https://github.com/lifting-bits/remill) Library for lifting of x86, amd64, and aarch64 machine code to LLVM bitcode
+- [**399**星][2y] [Java] [pqpo/inputmethodholder](https://github.com/pqpo/inputmethodholder) A keyboard listener for Android which by hooking the InputMethodManager. 通过hook监听系统键盘显示
+- [**399**星][2y] [Py] [ezelf/cve-2018-9995_dvr_credentials](https://github.com/ezelf/cve-2018-9995_dvr_credentials) (CVE-2018-9995) Get DVR Credentials
+- [**399**星][11m] [JS] [eviltik/evilscan](https://github.com/eviltik/evilscan) 大规模 IP/端口扫描器,Node.js 编写
+- [**399**星][4d] [Go] [dan-v/rattlesnakeos-stack](https://github.com/dan-v/rattlesnakeos-stack) Build your own privacy and security focused Android OS in the cloud on a continuous basis with OTA updates.
+- [**399**星][5m] [Py] [cea-sec/sibyl](https://github.com/cea-sec/sibyl) A Miasm2 based function divination.
+- [**399**星][3y] [Java] [ac-pm/sslunpinning_xposed](https://github.com/ac-pm/sslunpinning_xposed) Android Xposed Module to bypass SSL certificate validation (Certificate Pinning).
+- [**399**星][2y] [JS] [0xdea/frida-scripts](https://github.com/0xdea/frida-scripts) A collection of my Frida.re instrumentation scripts to facilitate reverse engineering of mobile apps.
+- [**398**星][3y] [Py] [sekoialab/fastir_collector](https://github.com/sekoialab/fastir_collector) 实时在Windows上收集不同的artefacts,并将结果记录在csv或json文件中。通过对这些artefacts的分析,可以发现较早的compromission
+- [**398**星][3y] [C] [kablaa/ctf-workshop](https://github.com/kablaa/ctf-workshop) Challenges for Binary Exploitation Workshop
+- [**398**星][1y] [Py] [grayddq/publicmonitors](https://github.com/grayddq/publicmonitors) 对公网IP列表进行端口服务扫描,发现周期内的端口服务变化情况和弱口令安全风险
+- [**398**星][4d] [C] [freifunk-gluon/gluon](https://github.com/freifunk-gluon/gluon) a modular framework for creating OpenWrt-based firmwares for wireless mesh nodes
+- [**398**星][4m] [PHP] [floedesigntechnologies/phpcs-security-audit](https://github.com/floedesigntechnologies/phpcs-security-audit) phpcs-security-audit is a set of PHP_CodeSniffer rules that finds vulnerabilities and weaknesses related to security in PHP code
+- [**398**星][3m] [Go] [cloudflare/mitmengine](https://github.com/cloudflare/mitmengine) A MITM (monster-in-the-middle) detection tool. Used to build MALCOLM:
+- [**397**星][2m] [Py] [x899/chrome_password_grabber](https://github.com/x899/chrome_password_grabber) Get unencrypted 'Saved Password' from Google Chrome
+- [**397**星][2m] [HTML] [thinkst/canarytokens](https://github.com/thinkst/canarytokens) Canarytokens helps track activity and actions on your network.
+- [**397**星][3y] [Scala] [philwantsfish/shard](https://github.com/philwantsfish/shard) A command line tool to detect shared passwords
+- [**397**星][3m] [ph055a/osint-collection](https://github.com/ph055a/osint-collection) Maintained collection of OSINT related resources. (All Free & Actionable)
+- [**397**星][3m] [Py] [mushorg/glastopf](https://github.com/mushorg/glastopf) Web Application Honeypot
+- [**397**星][3m] [Py] [duo-labs/cloudtracker](https://github.com/duo-labs/cloudtracker) CloudTracker helps you find over-privileged IAM users and roles by comparing CloudTrail logs with current IAM policies.
+- [**396**星][14d] [Java] [spring-cloud/spring-cloud-aws](https://github.com/spring-cloud/spring-cloud-aws) Integration for Amazon Web Services APIs with Spring
+- [**396**星][2y] [Py] [se55i0n/dbscanner](https://github.com/se55i0n/dbscanner) 自动扫描内网常见sql、no-sql数据库脚本(mysql、mssql、oracle、postgresql、redis、mongodb、memcached、elasticsearch),包含未授权访问及常规弱口令检测
+- [**396**星][2y] [Java] [routerkeygen/routerkeygenandroid](https://github.com/routerkeygen/routerkeygenandroid) Router Keygen generate default WPA/WEP keys for several routers.
+- [**396**星][1y] [Go] [riobard/go-shadowsocks2](https://github.com/riobard/go-shadowsocks2) Experimental Shadowsocks in Go. Stable fork at
+- [**396**星][3d] [Py] [moloch--/rootthebox](https://github.com/moloch--/rootthebox) A Game of Hackers (CTF Scoreboard & Game Manager)
+- [**396**星][6y] [Py] [milo2012/osintstalker](https://github.com/milo2012/osintstalker) osintstalker
+- [**396**星][1m] [Logos] [limneos/classdump-dyld](https://github.com/limneos/classdump-dyld) Class-dump any Mach-o file without extracting it from dyld_shared_cache
+- [**396**星][3y] [Py] [ioactive/jdwp-shellifier](https://github.com/ioactive/jdwp-shellifier) 由测试人员针对活跃的JDWP服务使用,以获取远程执行代码。
+- [**396**星][7m] [HTML] [gexos/hacking-tools-repository](https://github.com/gexos/hacking-tools-repository) A list of security/hacking tools that have been collected from the internet. Suggestions are welcomed.
+- [**396**星][2y] [C] [fireyfly/pixd](https://github.com/fireyfly/pixd) visualizing binary data using a colour palette
+- [**396**星][10m] [Ruby] [dreadlocked/drupalgeddon2](https://github.com/dreadlocked/drupalgeddon2) Exploit for Drupal v7.x + v8.x (Drupalgeddon 2 / CVE-2018-7600 / SA-CORE-2018-002)
+- [**396**星][2y] [PS] [cryps1s/darksurgeon](https://github.com/cryps1s/darksurgeon) DARKSURGEON is a Windows packer project to empower incident response, digital forensics, malware analysis, and network defense.
+- [**396**星][4m] [ansjdnakjdnajkd/ios](https://github.com/ansjdnakjdnajkd/ios) iOS渗透测试最有用的工具
+- [**395**星][2y] [C++] [hatriot/token-priv](https://github.com/hatriot/token-priv) Token Privilege Research
+- [**395**星][2d] [Go] [graniet/operative-framework](https://github.com/graniet/operative-framework) operative framework is a OSINT investigation framework, you can interact with multiple targets, execute multiple modules, create links with target, export rapport to PDF file, add note to target or results, interact with RESTFul API, write your own modules.
+- [**395**星][2y] [JS] [derjanb/hamiyoca](https://github.com/derjanb/hamiyoca) Hash me if you can - A Bitcoin miner that supports pure Javscript, WebWorker and WebGL mining.
+- [**395**星][4y] [PHP] [breakthenet/hackme-sql-injection-challenges](https://github.com/breakthenet/hackme-sql-injection-challenges) Pen test your "friend's" online MMORPG game - specific focus, sql injection opportunities
+- [**394**星][11d] [Makefile] [kuoruan/openwrt-v2ray](https://github.com/kuoruan/openwrt-v2ray) V2Ray for OpenWrt
+- [**394**星][6d] [Py] [eerkunt/terraform-compliance](https://github.com/eerkunt/terraform-compliance) a lightweight, security focused, BDD test framework against terraform.
+- [**394**星][1y] [sweis/crypto-might-not-suck](https://github.com/sweis/crypto-might-not-suck) List of crypto projects that might not suck
+- [**394**星][4y] [C++] [sektioneins/suidguard](https://github.com/sektioneins/suidguard) SUIDGuard - a TrustedBSD Kernel Extension that adds mitigations to protect SUID/SGID processes a bit more
+- [**394**星][11m] [Swift] [ibm/mac-ibm-enrollment-app](https://github.com/ibm/mac-ibm-enrollment-app) The Mac@IBM enrollment app makes setting up macOS with Jamf Pro more intuitive for users and easier for IT. The application offers IT admins the ability to gather additional information about their users during setup, allows users to customize their enrollment by selecting apps or bundles of apps to install during setup, and provides users with …
+- [**394**星][1y] [hillbrad/u2freviews](https://github.com/hillbrad/u2freviews) Reviews of U2F devices
+- [**394**星][1y] [Py] [cr4shcod3/pureblood](https://github.com/cr4shcod3/pureblood) 为黑客/渗透测试/漏洞赏金创建的渗透测试框架
+- [**393**星][11m] [Py] [mitre/multiscanner](https://github.com/mitre/multiscanner) Modular file scanning/analysis framework
+- [**393**星][1y] [Go] [tomnomnom/waybackurls](https://github.com/tomnomnom/waybackurls) Fetch all the URLs that the Wayback Machine knows about for a domain
+- [**393**星][1y] [Shell] [killswitch-gui/cobaltstrike-toolkit](https://github.com/killswitch-gui/cobaltstrike-toolkit) Some useful scripts for CobaltStrike
+- [**393**星][1m] [YARA] [guelfoweb/peframe](https://github.com/guelfoweb/peframe) PEframe is a open source tool to perform static analysis on Portable Executable malware and malicious MS Office documents.
+- [**393**星][2y] [Java] [federicodotta/java-deserialization-scanner](https://github.com/federicodotta/java-deserialization-scanner) All-in-one plugin for Burp Suite for the detection and the exploitation of Java deserialization vulnerabilities
+- [**393**星][2y] [Py] [fate0/pychrome](https://github.com/fate0/pychrome) A Python Package for the Google Chrome Dev Protocol [threading base]
+- [**393**星][12m] [Py] [essandess/isp-data-pollution](https://github.com/essandess/isp-data-pollution) ISP Data Pollution to Protect Private Browsing History with Obfuscation
+- [**393**星][1m] [Py] [clr2of8/dpat](https://github.com/clr2of8/dpat) 域密码审核工具
+- [**393**星][2y] [JS] [chpmrc/zero-width-chrome-extension](https://github.com/chpmrc/zero-width-chrome-extension) Chrome扩展, 将网页中可用于Fingerprinting的"零长度"字符替换为搞笑的表情
+- [**392**星][4y] [Py] [zhengmin1989/rop_step_by_step](https://github.com/zhengmin1989/rop_step_by_step) 一步一步学ROP
+- [**392**星][7m] [Py] [jm33-m0/mec](https://github.com/jm33-m0/mec) for concurrent exploiting
+- [**392**星][12m] [C++] [googleprojectzero/functionsimsearch](https://github.com/googleprojectzero/functionsimsearch) 基于 MinHash 的代码相似性搜索验证代码
+- [**392**星][1y] [C#] [squalr/squalr](https://github.com/squalr/squalr) 高性能的内存编辑软件,允许用户在Windows桌面游戏中创建和共享作弊文件
+- [**392**星][7m] [Py] [savon-noir/python-libnmap](https://github.com/savon-noir/python-libnmap) libnmap is a python library to run nmap scans, parse and diff scan results. It supports python 2.6 up to 3.4. It's wonderful.
+- [**392**星][7m] [Py] [repoog/gitprey](https://github.com/repoog/gitprey) Searching sensitive files and contents in GitHub associated to company name or other key words
+- [**392**星][1m] [Py] [nginxinc/nginx-ldap-auth](https://github.com/nginxinc/nginx-ldap-auth) Example of LDAP authentication using ngx_http_auth_request_module
+- [**392**星][3d] [Scala] [lihaoyi/utest](https://github.com/lihaoyi/utest) A simple testing framework for Scala
+- [**392**星][3y] [C#] [harmj0y/keethief](https://github.com/harmj0y/keethief) 从内存中提取KeePass 2.X密钥材料,以及KeePass触发系统的植入后门和枚举。
+- [**392**星][12d] [PS] [d0nkeys/redteam](https://github.com/d0nkeys/redteam) Red Team 脚本
+- [**392**星][12m] [C++] [cseagle/sk3wldbg](https://github.com/cseagle/sk3wldbg) 用Unicorn引擎做后端的调试插件
+- [**392**星][1y] [Py] [chrismaddalena/odin](https://github.com/chrismaddalena/odin) Automated network asset, email, and social media profile discovery and cataloguing.
+- [**391**星][9m] [Py] [williballenthin/python-evtx](https://github.com/williballenthin/python-evtx) 纯Python编写的Windows事件日志解析器
+- [**391**星][2y] [r0ysue/osg-translationteam](https://github.com/r0ysue/osg-translationteam) 看雪iOS安全小组的翻译团队作品集合,如有勘误,欢迎斧正!
+- [**391**星][10m] [Go] [mozilla/masche](https://github.com/mozilla/masche) MIG Memory Forensic library
+- [**391**星][1y] [Go] [mauri870/ransomware](https://github.com/mauri870/ransomware) A POC Windows crypto-ransomware (Academic)
+- [**391**星][3y] [JS] [mandatoryprogrammer/judasdns](https://github.com/mandatoryprogrammer/judasdns) Nameserver DNS poisoning attacks made easy
+- [**391**星][7d] [C] [hasherezade/hollows_hunter](https://github.com/hasherezade/hollows_hunter) Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
+- [**391**星][2y] [Py] [conorpp/btproxy](https://github.com/conorpp/btproxy) Man in the Middle analysis tool for Bluetooth.
+- [**391**星][6m] [JS] [capacitorset/box-js](https://github.com/capacitorset/box-js) A tool for studying JavaScript malware.
+- [**391**星][2m] [Py] [bitbrute/evillimiter](https://github.com/bitbrute/evillimiter) Tool that limits bandwidth of devices on the same network without access.
+- [**390**星][28d] [ym2011/securitymanagement](https://github.com/ym2011/securitymanagement) share with you some knowledge for Information Security Management,ISO27001,Information Security Class Protect ,SDLC,etc.
+- [**390**星][29d] [Shell] [yadominjinta/atilo](https://github.com/yadominjinta/atilo) Linux installer for termux
+- [**390**星][2y] [Shell] [und3rf10w/kali-anonsurf](https://github.com/und3rf10w/kali-anonsurf) A port of ParrotSec's stealth and anonsurf modules to Kali Linux
+- [**390**星][14d] [Shell] [th3xace/sudo_killer](https://github.com/th3xace/sudo_killer) A tool to identify and exploit sudo rules' misconfigurations and vulnerabilities within sudo
+- [**390**星][2y] [C++] [swwwolf/wdbgark](https://github.com/swwwolf/wdbgark) WinDBG Anti-RootKit Extension
+- [**390**星][3y] [stamparm/eternalrocks](https://github.com/stamparm/eternalrocks) EternalRocks蠕虫
+- [**390**星][6y] [C++] [p0sixspwn/p0sixspwn](https://github.com/p0sixspwn/p0sixspwn) Released in accordance with GPL licensing.
+- [**390**星][1y] [C] [laurelai/decompile-dump](https://github.com/laurelai/decompile-dump) stuxnet反编译的部分代码
+- [**389**星][9m] [Shell] [microsoft/linux-vm-tools](https://github.com/microsoft/linux-vm-tools) Hyper-V Linux Guest VM Enhancements
+- [**389**星][10m] [Py] [rustyshackleford221/oscp-prep](https://github.com/rustyshackleford221/oscp-prep) A comprehensive guide/material for anyone looking to get into infosec or take the OSCP exam
+- [**389**星][26d] [Py] [paulgclark/waveconverter](https://github.com/paulgclark/waveconverter) An Open Source tool for RF reverse engineering.
+- [**389**星][12m] [Shell] [mthbernardes/sshlooter](https://github.com/mthbernardes/sshlooter) Script to steal passwords from ssh.
+- [**389**星][2m] [milabs/awesome-linux-rootkits](https://github.com/milabs/awesome-linux-rootkits) awesome-linux-rootkits
+- [**389**星][1y] [JS] [linushenze/webkit-regex-exploit](https://github.com/linushenze/webkit-regex-exploit)
+- [**389**星][4y] [ObjC] [kpwn/tpwn](https://github.com/kpwn/tpwn) xnu local privilege escalation via cve-2015-???? & cve-2015-???? for 10.10.5, 0day at the time | poc or gtfo
+- [**389**星][23d] [JS] [joeferner/node-http-mitm-proxy](https://github.com/joeferner/node-http-mitm-proxy) HTTP Man In The Middle (MITM) Proxy
+- [**389**星][16d] [Py] [idaholab/malcolm](https://github.com/idaholab/malcolm) Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files) and Zeek logs.
+- [**389**星][6m] [C++] [hasherezade/dll_to_exe](https://github.com/hasherezade/dll_to_exe) Converts a DLL into EXE
+- [**389**星][3y] [Py] [gstarnberger/uncompyle](https://github.com/gstarnberger/uncompyle) Python decompiler
+- [**389**星][25d] [C] [coolervoid/0d1n](https://github.com/coolervoid/0d1n) Web security tool to make fuzzing at HTTP/S, Beta
+- [**389**星][2d] [C#] [collinbarrett/filterlists](https://github.com/collinbarrett/filterlists) independent, comprehensive directory of filter and host lists for advertisements, trackers, malware, and annoyances.
+- [**389**星][16d] [Py] [bdcht/amoco](https://github.com/bdcht/amoco) yet another tool for analysing binaries
+- [**389**星][3m] [Go] [alphasoc/flightsim](https://github.com/alphasoc/flightsim) A utility to generate malicious network traffic and evaluate controls
+- [**388**星][2y] [PS] [shellntel/scripts](https://github.com/shellntel/scripts) A collection of scripts from the security professionals at www.shellntel.com.
+- [**388**星][2y] [Perl] [rapid7/metasploit-vulnerability-emulator](https://github.com/rapid7/metasploit-vulnerability-emulator) Created by Jin Qian via the GitHub Connector
+- [**388**星][2y] [Py] [mricon/rev-proxy-grapher](https://github.com/mricon/rev-proxy-grapher) Reverse proxy grapher
+- [**388**星][3y] [Py] [mandatoryprogrammer/cloudflare_enum](https://github.com/mandatoryprogrammer/cloudflare_enum) CloudFlare DNS枚举工具
+- [**387**星][3m] [PS] [cyberark/aclight](https://github.com/cyberark/ACLight) A script for advanced discovery of Privileged Accounts - includes Shadow Admins
+- [**387**星][1m] [tobiasbueschel/awesome-pokemon](https://github.com/tobiasbueschel/awesome-pokemon) A curated list of awesome Pokémon & Pokémon GO resources, tools and more.
+- [**387**星][1m] [Java] [tiagorlampert/saint](https://github.com/tiagorlampert/saint) a Spyware Generator for Windows systems written in Java
+- [**387**星][1m] [Py] [riotgames/cloud-inquisitor](https://github.com/riotgames/cloud-inquisitor) Enforce ownership and data security within AWS
+- [**387**星][3y] [Py] [funkandwagnalls/ranger](https://github.com/funkandwagnalls/ranger) A tool for security professionals to access and interact with remote Microsoft Windows based systems.
+- [**387**星][2y] [Py] [frizb/vanquish](https://github.com/frizb/vanquish) Vanquish is Kali Linux based Enumeration Orchestrator. Vanquish leverages the opensource enumeration tools on Kali to perform multiple active information gathering phases.
+- [**387**星][4m] [Ruby] [elastic/puppet-elasticsearch](https://github.com/elastic/puppet-elasticsearch) Elasticsearch Puppet module
+- [**387**星][13d] [Ruby] [digininja/cewl](https://github.com/digininja/cewl) CeWL is a Custom Word List Generator
+- [**387**星][3m] [JS] [710leo/urlooker](https://github.com/710leo/urlooker) 企业级url监控
+- [**387**星][3y] [Py] [36hours/idaemu](https://github.com/36hours/idaemu) 基于Unicorn引擎的代码模拟插件
+- [**386**星][3y] [ObjC] [kpwn/yalu](https://github.com/kpwn/yalu) incomplete ios 8.4.1 jailbreak by Kim Jong Cracks (8.4.1 codesign & sandbox bypass w/ LPE to root & untether)
+- [**386**星][2y] [Java] [irsdl/iis-shortname-scanner](https://github.com/irsdl/iis-shortname-scanner) latest version of scanners for IIS short filename (8.3) disclosure vulnerability
+- [**386**星][12m] [Assembly] [hasherezade/pe_to_shellcode](https://github.com/hasherezade/pe_to_shellcode) Converts PE into a shellcode
+- [**386**星][7m] [Py] [google/upvote](https://github.com/google/upvote) A multi-platform binary whitelisting solution
+- [**386**星][15d] [HTML] [blabla1337/skf-flask](https://github.com/blabla1337/skf-flask) Security Knowledge Framework (SKF) Python Flask / Angular project
+- [**386**星][5m] [C#] [bitsadmin/nopowershell](https://github.com/bitsadmin/nopowershell) 使用C#"重写"的PowerShell, 支持执行与PowerShell类似的命令, 然而对所有的PowerShell日志机制都不可见
+- [**385**星][11d] [Haskell] [crytic/echidna](https://github.com/crytic/echidna) Ethereum fuzz testing framework
+- [**385**星][5m] [Py] [ynvb/die](https://github.com/ynvb/die) 使用IDA调试器收集动态运行信息, 辅助静态分析
+- [**385**星][9d] [Py] [maqp/tfc](https://github.com/maqp/tfc) Tinfoil Chat - Onion-routed, endpoint secure messaging system
+- [**385**星][2y] [m0l1ce/wooyunallbugs](https://github.com/m0l1ce/wooyunallbugs) wooyun_all_bugs
+- [**385**星][1y] [Ruby] [aphyr/tund](https://github.com/aphyr/tund) SSH reverse tunnel daemon
+- [**384**星][8m] [C] [zerosum0x0/smbdoor](https://github.com/zerosum0x0/smbdoor) Windows kernel backdoor via registering a malicious SMB handler
+- [**384**星][7m] [tidesec/tide](https://github.com/tidesec/tide) 目前实现了网络空间资产探测、指纹检索、漏洞检测、漏洞全生命周期管理、poc定向检测、暗链检测、挂马监测、敏感字检测、DNS监测、网站可用性监测、漏洞库管理、安全预警等等~
+- [**384**星][1y] [C++] [stanfordpl/x64asm](https://github.com/stanfordpl/x64asm) x86-64 assembler library
+- [**384**星][4y] [PHP] [spiderlabs/mcir](https://github.com/spiderlabs/mcir) The Magical Code Injection Rainbow! MCIR is a framework for building configurable vulnerability testbeds. MCIR is also a collection of configurable vulnerability testbeds.
+- [**384**星][2y] [Assembly] [sgayou/kindle-5.6.5-jailbreak](https://github.com/sgayou/kindle-5.6.5-jailbreak) Kindle 5.6.5 exploitation tools.
+- [**384**星][3y] [Py] [sensepost/dns-shell](https://github.com/sensepost/dns-shell) DNS-Shell is an interactive Shell over DNS channel
+- [**384**星][1m] [C#] [microsoft/binskim](https://github.com/microsoft/binskim) 二进制静态分析工具,可为PE和ELF二进制格式提供安全性和正确性分析
+- [**384**星][2m] [C++] [llvm-mirror/lldb](https://github.com/llvm-mirror/lldb) Mirror of official lldb git repository located at
+- [**384**星][9m] [Ruby] [hatbashbr/hatcloud](https://github.com/hatbashbr/hatcloud) discontinued
+- [**384**星][2y] [C++] [equalitie/np1sec](https://github.com/equalitie/np1sec) 端对端加密的多用户通信协议
+- [**383**星][6d] [Makefile] [crifan/scientific_network_summary](https://github.com/crifan/scientific_network_summary) 总结关于科学上网的概念方法及工具
+- [**383**星][3y] [Ruby] [stephenfewer/grinder](https://github.com/stephenfewer/grinder) Grinder is a system to automate the fuzzing of web browsers and the management of a large number of crashes.
+- [**383**星][25d] [C++] [simsong/bulk_extractor](https://github.com/simsong/bulk_extractor) 取证工具
+- [**383**星][1y] [JS] [securing/gattacker](https://github.com/securing/gattacker) A Node.js package for BLE (Bluetooth Low Energy) security assessment using Man-in-the-Middle and other attacks
+- [**383**星][2m] [Py] [ptresearch/inteltxe-poc](https://github.com/ptresearch/inteltxe-poc) Intel Management Engine JTAG Proof of Concept
+- [**383**星][3m] [PHP] [msurguy/honeypot](https://github.com/msurguy/honeypot) 一种简单有效的方法,来阻止某些进入您网站的垃圾邮件机器人
+- [**383**星][1y] [HTML] [maestron/reverse-engineering-tutorials](https://github.com/maestron/reverse-engineering-tutorials) Reverse Engineering Tutorials
+- [**383**星][1y] [Java] [davidbuchanan314/nxloader](https://github.com/davidbuchanan314/nxloader) My first Android app: Launch Fusée Gelée payloads from stock Android (CVE-2018-6242)
+- [**382**星][22d] [PHP] [terrylinooo/shieldon](https://github.com/terrylinooo/shieldon) Web Application Firewall (WAF) for PHP.
+- [**382**星][30d] [Py] [stamparm/dsss](https://github.com/stamparm/dsss) Damn Small SQLi Scanner
+- [**382**星][2m] [Py] [sab0tag3d/siet](https://github.com/sab0tag3d/siet) Smart Install Exploitation Tool
+- [**382**星][3m] [Py] [p1r06u3/opencanary_web](https://github.com/p1r06u3/opencanary_web) The web management platform of honeypot
+- [**382**星][2y] [Java] [nickstadb/barmie](https://github.com/nickstadb/barmie) 枚举和攻击Java RMI(远程方法调用)服务。
+- [**382**星][2m] [Shell] [kabachook/k8s-security](https://github.com/kabachook/k8s-security) Kubernetes security notes and best practices
+- [**382**星][2y] [Py] [fireeye/reelphish](https://github.com/fireeye/reelphish)
+- [**382**星][1y] [Py] [ex0dus-0x/brut3k1t](https://github.com/ex0dus-0x/brut3k1t) security-oriented bruteforce framework
+- [**382**星][1m] [Go] [cretz/bine](https://github.com/cretz/bine) Go library for accessing and embedding Tor clients and servers
+- [**381**星][28d] [C++] [0x09al/rdpthief](https://github.com/0x09al/rdpthief) Extracting Clear Text Passwords from mstsc.exe using API Hooking.
+- [**381**星][2m] [thejambo/awesome-testing](https://github.com/thejambo/awesome-testing) A curated list of testing resources
+- [**381**星][4y] [Py] [sensepost/snoopy-ng](https://github.com/sensepost/snoopy-ng) 模块化数字terrestrial跟踪框架
+- [**381**星][28d] [JS] [nccgroup/tracy](https://github.com/nccgroup/tracy) 查找web app中所有的sinks and sources, 并以易于理解的方式显示这些结果
+- [**381**星][2m] [Jupyter Notebook] [microsoft/windowsdefenderatp-hunting-queries](https://github.com/microsoft/windowsdefenderatp-hunting-queries) 在MS Defender ATP中进行高级查询的示例
+- [**381**星][1y] [C] [markus-go/bonesi](https://github.com/markus-go/bonesi) BoNeSi - the DDoS Botnet Simulator
+- [**381**星][5y] [JS] [le4f/pcap-analyzer](https://github.com/le4f/pcap-analyzer) online pcap forensic
+- [**381**星][7m] [Py] [hurricanelabs/machinae](https://github.com/hurricanelabs/machinae) Machinae Security Intelligence Collector
+- [**381**星][10m] [Py] [hahwul/a2sv](https://github.com/hahwul/a2sv) 自动扫描并检测常见的和已知的SSL 漏洞
+- [**381**星][1y] [JS] [empireproject/empire-gui](https://github.com/empireproject/empire-gui) Empire开渗透框架的图形界面
+- [**381**星][2m] [dsopas/assessment-mindset](https://github.com/dsopas/assessment-mindset) 安全相关的思维导图, 可用于pentesting, bug bounty, red-teamassessments
+- [**381**星][4y] [Py] [deresz/funcap](https://github.com/deresz/funcap) 使用IDA调试时记录动态信息, 辅助静态分析
+- [**381**星][11m] [C] [coolstar/electra1131](https://github.com/coolstar/electra1131) electra1131: Electra for iOS 11.0 - 11.3.1
+- [**381**星][1m] [C#] [bloodhoundad/sharphound](https://github.com/bloodhoundad/sharphound) C#重写BloodHound Ingestor
+- [**381**星][4m] [C++] [bastibl/gr-ieee802-11](https://github.com/bastibl/gr-ieee802-11) IEEE 802.11 a/g/p Transceiver
+- [**380**星][12d] [TS] [shroudedcode/apk-mitm](https://github.com/shroudedcode/apk-mitm)
+- [**380**星][2y] [C] [sandeepmistry/arduino-bleperipheral](https://github.com/sandeepmistry/arduino-bleperipheral) An Arduino library for creating custom BLE peripherals with Nordic Semiconductor's nRF8001 or nR51822.
+- [**380**星][10m] [C] [robertfisk/usg](https://github.com/robertfisk/usg) The USG is Good, not Bad
+- [**380**星][3y] [JS] [risingstack/protect](https://github.com/risingstack/protect) 保护 Node.js 网页服务
+- [**380**星][2d] [Ruby] [puppetlabs/puppetlabs-mysql](https://github.com/puppetlabs/puppetlabs-mysql) MySQL Puppet Module / Manifests + Types & Providers
+- [**380**星][7d] [C++] [msoos/cryptominisat](https://github.com/msoos/cryptominisat) An advanced SAT solver
+- [**380**星][3y] [C] [micrictor/stuxnet](https://github.com/micrictor/stuxnet) Open-source decompile of Stuxnet/myRTUs
+- [**380**星][4m] [Py] [foospidy/honeypy](https://github.com/foospidy/honeypy) A low to medium interaction honeypot.
+- [**380**星][3m] [Jupyter Notebook] [endgameinc/ember](https://github.com/endgameinc/ember) 110万PE文件的数据集合, 可用于训练相关模型. PE文件信息主要包括: SHA256/histogram(直方图)/byteentropy(字节熵)/字符串/PE头信息/段信息/导入表/导出表
+- [**379**星][5y] [Py] [mfrister/pushproxy](https://github.com/mfrister/pushproxy) A man-in-the-middle proxy for iOS and OS X device push connections
+- [**379**星][3y] [slyth11907/cheatsheets](https://github.com/slyth11907/cheatsheets) Helped during my OSCP lab days.
+- [**379**星][1y] [Py] [rhinosecuritylabs/sleuthql](https://github.com/rhinosecuritylabs/sleuthql) Python3 Burp History parsing tool to discover potential SQL injection points. To be used in tandem with SQLmap.
+- [**379**星][1y] [CSS] [nowsecure/secure-mobile-development](https://github.com/nowsecure/secure-mobile-development) A Collection of Secure Mobile Development Best Practices
+- [**379**星][3m] [Rust] [microsoft/lain](https://github.com/microsoft/lain) A fuzzer framework built in Rust
+- [**379**星][7m] [jnusimba/androidsecnotes](https://github.com/jnusimba/androidsecnotes) some learning notes about Android Security
+- [**379**星][7d] [C++] [google/binexport](https://github.com/google/binexport) 将反汇编以Protocol Buffer的形式导出为PostgreSQL数据库, 导入到BinNavi中使用
+- [**379**星][2y] [ObjC] [codermjlee/mjapptools](https://github.com/codermjlee/mjapptools) 【越狱-逆向】处理iOS APP信息的命令行工具
+- [**378**星][7m] [unprovable/pentesthardware](https://github.com/unprovable/pentesthardware) 公开笔记整理
+- [**378**星][2y] [Shell] [screetsec/microsploit](https://github.com/screetsec/microsploit) Fast and easy create backdoor office exploitation using module metasploit packet , Microsoft Office , Open Office , Macro attack , Buffer Overflow
+- [**378**星][2y] [TeX] [mimoo/rsa-and-lll-attacks](https://github.com/mimoo/rsa-and-lll-attacks) attacking RSA via lattice reductions (LLL)
+- [**378**星][9m] [Py] [k4m4/onioff](https://github.com/k4m4/onioff) url检测器,深度检测网页链接
+- [**378**星][4m] [C] [hackgnar/ble_ctf](https://github.com/hackgnar/ble_ctf) A Bluetooth low energy capture the flag
+- [**378**星][1m] [C] [furrtek/portapack-havoc](https://github.com/furrtek/portapack-havoc) Custom firmware for the HackRF SDR + PortaPack H1 addon
+- [**378**星][13d] [Ruby] [david942j/seccomp-tools](https://github.com/david942j/seccomp-tools) 用于seccomp分析
+- [**378**星][1y] [PHP] [bo0om/php_imap_open_exploit](https://github.com/bo0om/php_imap_open_exploit) Bypassing disabled exec functions in PHP (c) CRLF
+- [**378**星][1m] [Py] [0x4d31/fatt](https://github.com/0x4d31/fatt) FATT /fingerprintAllTheThings - a pyshark based script for extracting network metadata and fingerprints from pcap files and live network traffic
+- [**377**星][2y] [PS] [gfoss/psrecon](https://github.com/gfoss/psrecon) 使用PowerShell(v2或更高版本)从远程Windows主机收集数据,将数据组织到文件夹中,对所有提取的数据进行哈希处理,对PowerShell和各种系统属性进行哈希处理,然后将数据发送给安全团队
+- [**377**星][27d] [Py] [fox-it/bloodhound.py](https://github.com/fox-it/bloodhound.py) 基于Python的BloodHound Ingestor,基于Impacket
+- [**377**星][1y] [ansible/ansible-lockdown](https://github.com/ansible/ansible-lockdown) Ansible playbook roles for security
+- [**376**星][6m] [Ruby] [mdp/gibberish](https://github.com/mdp/gibberish) Simple Ruby encryption module
+- [**376**星][8m] [C] [ridter/pentest](https://github.com/ridter/pentest) 渗透工具
+- [**376**星][27d] [Py] [random-robbie/my-shodan-scripts](https://github.com/random-robbie/my-shodan-scripts) Collection of Scripts for shodan searching stuff.
+- [**376**星][1m] [HTML] [howsecureismypassword/hsimp](https://github.com/howsecureismypassword/hsimp) How Secure is My Password for your own website
+- [**376**星][4y] [C#] [goliate/hidden-tear](https://github.com/goliate/hidden-tear) 勒索软件
+- [**376**星][16d] [Ruby] [dradis/dradis-ce](https://github.com/dradis/dradis-ce) 面向信息安全团队的协作框架
+- [**376**星][2m] [Py] [dinotools/dionaea](https://github.com/dinotools/dionaea) Home of the dionaea honeypot
+- [**376**星][5y] [C++] [clymb3r/kdexploitme](https://github.com/clymb3r/kdexploitme) A kernel driver to practice writing exploits against, as well as some example exploits using public techniques.
+- [**376**星][2y] [Py] [0x4d31/burpa](https://github.com/0x4d31/burpa) Burp-Automator: A Burp Suite Automation Tool with Slack Integration. It can be used with Jenkins and Selenium to automate Dynamic Application Security Testing (DAST).
+- [**375**星][10m] [Py] [wyatu/cve-2018-20250](https://github.com/wyatu/cve-2018-20250) exp for
+- [**375**星][3y] [C] [sensepost/usabuse](https://github.com/sensepost/usabuse) Universal Serial aBUSe is a project to demonstrate the risks of hardware bypasses of software security by Rogan Dawes at SensePost.
+- [**375**星][7m] [Py] [secrary/ssma](https://github.com/secrary/ssma) SSMA - Simple Static Malware Analyzer [This project is not maintained anymore]
+- [**375**星][1y] [Py] [rhynorater/cve-2018-15473-exploit](https://github.com/rhynorater/cve-2018-15473-exploit) Exploit written in Python for CVE-2018-15473 with threading and export formats
+- [**375**星][3y] [Go] [q3k/crowbar](https://github.com/q3k/crowbar) Tunnel TCP over a plain HTTP session (warning: mediocre Go code)
+- [**375**星][2m] [Java] [nccgroup/autorepeater](https://github.com/nccgroup/autorepeater) Automated HTTP Request Repeating With Burp Suite
+- [**375**星][2m] [Py] [maldevel/emailharvester](https://github.com/maldevel/emailharvester) Email addresses harvester
+- [**375**星][1y] [C++] [liveoverflow/pwnadventure3](https://github.com/liveoverflow/pwnadventure3) PwnAdventure3 Server
+- [**375**星][5y] [C] [jvns/kernel-module-fun](https://github.com/jvns/kernel-module-fun) Some fun things you can do with kernel modules (all "bad ideas")
+- [**375**星][6y] [C] [heardrwt/revealloader](https://github.com/heardrwt/revealloader) Reveal Loader dynamically loads libReveal.dylib (Reveal.app support) into iOS apps on jailbroken devices.
+- [**375**星][3y] [C++] [evilsocket/arminject](https://github.com/evilsocket/arminject) An application to dynamically inject a shared object into a running process on ARM architectures.
+- [**375**星][2y] [aozhimin/ios-debug-hacks](https://github.com/aozhimin/ios-debug-hacks)
+- [**375**星][2y] [Py] [1111joe1111/ida_ea](https://github.com/1111joe1111/ida_ea) 用于辅助漏洞开发和逆向
+- [**374**星][4m] [Py] [xuanhun/pythonhackingbook1](https://github.com/xuanhun/pythonhackingbook1) Python黑客编程之极速入门
+
+- [**374**星][21d] [C++] [tihmstar/futurerestore](https://github.com/tihmstar/futurerestore) A hacked up idevicerestore wrapper, which allows specifying SEP and Baseband for restoring
+- [**374**星][21d] [Py] [skavngr/rapidscan](https://github.com/skavngr/rapidscan) | The Multi-Tool Web Vulnerability Scanner.
+- [**374**星][3m] [Shell] [screetsec/vegile](https://github.com/screetsec/vegile) This tool will setting up your backdoor/rootkits when backdoor already setup it will be hidden your spesisifc process,unlimited your session in metasploit and transparent. Even when it killed, it will re-run again. There always be a procces which while run another process,So we can assume that this procces is unstopable like a Ghost in The Shell
+- [**374**星][8m] [opencybertranslationproject/linux-basics-for-hackers](https://github.com/opencybertranslationproject/linux-basics-for-hackers) 书籍《Linux Basics for Hackers》2019版中文翻译版
+- [**374**星][14d] [Py] [fkie-cad/fact_core](https://github.com/fkie-cad/fact_core) Firmware Analysis and Comparison Tool
+- [**374**星][2m] [C++] [crypto2011/idr](https://github.com/crypto2011/idr) Interactive Delphi Reconstructor
+- [**373**星][6m] [Py] [vysecurity/domlink](https://github.com/vysecurity/DomLink) 一种将具有注册组织名称和电子邮件的域链接到其他域的工具。
+- [**373**星][10m] [c] [cryptsetup/cryptsetup](https://gitlab.com/cryptsetup/cryptsetup)
+- [**373**星][21d] [zer0yu/cybersecurityrss](https://github.com/zer0yu/cybersecurityrss) RSS: 优秀的个人情报来源
+- [**373**星][5m] [xtiankisutsa/awesome-mobile-ctf](https://github.com/xtiankisutsa/awesome-mobile-ctf) This is a curated list of mobile based CTFs, write-ups and vulnerable apps. Most of them are android based due to the popularity of the platform.
+- [**373**星][2y] [PS] [xorrior/remoterecon](https://github.com/xorrior/remoterecon) Remote Recon and Collection
+- [**373**星][8d] [JS] [nowsecure/r2frida](https://github.com/nowsecure/r2frida) Radare2 and Frida better together.
+- [**373**星][5d] [C++] [microsoft/llvm-mctoll](https://github.com/microsoft/llvm-mctoll) statically (AOT) translates (or raises) binaries to LLVM IR
+- [**372**星][2y] [Elixir] [robinmonjo/coincoin](https://github.com/robinmonjo/coincoin) Blockchain based cryptocurrency proof-of-concept in Elixir. Feedback welcome
+- [**372**星][1y] [Shell] [ptb/mac-setup](https://github.com/ptb/mac-setup)
+- [**372**星][2m] [Py] [pielco11/fav-up](https://github.com/pielco11/fav-up) IP lookup from favicon using Shodan
+- [**372**星][2d] [C++] [netis/packet-agent](https://github.com/netis/packet-agent) A toolset for network packet capture, forwarding and analysis via GRE/Cloud.
+- [**372**星][26d] [JS] [nccgroup/singularity](https://github.com/nccgroup/singularity) A DNS rebinding attack framework.
+- [**372**星][3d] [C++] [namecoin/namecoin-core](https://github.com/namecoin/namecoin-core) Reimplementation of Namecoin on top of the current Bitcoin Core codebase.
+- [**372**星][3y] [C++] [m00nrise/processhider](https://github.com/m00nrise/processhider) Post-exploitation tool for hiding processes from monitoring applications
+- [**372**星][2m] [AngelScript] [inquest/malware-samples](https://github.com/inquest/malware-samples) A collection of malware samples and relevant dissection information, most probably referenced from
+- [**372**星][10d] [hkbakke/bash-insulter](https://github.com/hkbakke/bash-insulter) Insults the user when typing wrong command
+- [**372**星][3y] [georgiaw/smartphone-pentest-framework](https://github.com/georgiaw/smartphone-pentest-framework) 智能手机渗透测试
+- [**372**星][2m] [Py] [dedsecinside/torbot](https://github.com/dedsecinside/torbot) Dark Web OSINT Tool
+- [**372**星][1y] [Go] [cardigann/cardigann](https://github.com/cardigann/cardigann) A proxy server for adding new indexers to Sonarr, SickRage and other media managers
+- [**371**星][21d] [cisco-talos/clamav-faq](https://github.com/cisco-talos/clamav-faq) ClamAV FAQ
+- [**371**星][3y] [PHP] [nikicat/web-malware-collection](https://github.com/nikicat/web-malware-collection) Clone of svn repository of
+- [**371**星][6m] [Rust] [gamozolabs/orange_slice](https://github.com/gamozolabs/orange_slice) A research kernel and hypervisor attempting to get fully deterministic emulation with minimum performance cost
+- [**371**星][2y] [C] [cr4sh/windowsregistryrootkit](https://github.com/cr4sh/windowsregistryrootkit) Kernel rootkit, that lives inside the Windows registry values data
+- [**371**星][3y] [Py] [androidhooker/hooker](https://github.com/androidhooker/hooker) Hooker is an opensource project for dynamic analyses of Android applications. This project provides various tools and applications that can be use to automaticaly intercept and modify any API calls made by a targeted application.
+- [**371**星][4y] [JS] [allfro/burpkit](https://github.com/allfro/burpkit) Next-gen BurpSuite penetration testing tool
+- [**370**星][2m] [Dockerfile] [onplus/v2hero](https://github.com/onplus/v2hero) All Free . Deploy V2Ray to Heroku . v2ray学习参考
+- [**370**星][7m] [Py] [s0md3v/cloak](https://github.com/s0md3v/Cloak) Cloak can backdoor any python script with some tricks.
+- [**370**星][2m] [Py] [tmr232/sark](https://github.com/tmr232/sark) IDAPython的高级抽象
+- [**370**星][7m] [Py] [tidesec/tidefinger](https://github.com/tidesec/tidefinger) 指纹识别小工具,汲取整合了多个web指纹库,结合了多种指纹检测方法,让指纹检测更快捷、准确。
+- [**370**星][4y] [Py] [rrenaud/gibberish-detector](https://github.com/rrenaud/gibberish-detector) A small program to detect gibberish using a Markov Chain
+- [**370**星][3m] [renwax23/xss-payloads](https://github.com/renwax23/xss-payloads) List of XSS Vectors/Payloads
+- [**370**星][2m] [Py] [lyft/metadataproxy](https://github.com/lyft/metadataproxy) A proxy for AWS's metadata service that gives out scoped IAM credentials from STS
+- [**370**星][2y] [C++] [breenmachine/rottenpotatong](https://github.com/breenmachine/rottenpotatong) New version of RottenPotato as a C++ DLL and standalone C++ binary - no need for meterpreter or other tools.
+- [**370**星][17d] [PHP] [blackarch/webshells](https://github.com/blackarch/webshells) Various webshells. We accept pull requests for additions to this collection.
+- [**370**星][1y] [C++] [alonemonkey/iosrebook](https://github.com/alonemonkey/iosrebook) 《iOS应用逆向与安全》随书源码
+- [**369**星][5y] [Go] [vishvananda/wormhole](https://github.com/vishvananda/wormhole) A smart proxy to connect docker containers.
+- [**369**星][22d] [Py] [pdbpp/pdbpp](https://github.com/pdbpp/pdbpp) pdb++, a drop-in replacement for pdb (the Python debugger)
+- [**369**星][3m] [C++] [werkamsus/lilith](https://github.com/werkamsus/lilith) Lilith, The Open Source C++ Remote Administration Tool (RAT)
+- [**369**星][9d] [Shell] [trimstray/otseca](https://github.com/trimstray/otseca) 安全审计工具, 搜索并转储系统配置
+- [**369**星][9m] [Py] [sibears/idagolanghelper](https://github.com/sibears/idagolanghelper) 解析Go语言编译的二进制文件中的GoLang类型信息
+- [**369**星][4m] [Py] [p1sec/qcsuper](https://github.com/p1sec/qcsuper) QCSuper is a tool communicating with Qualcomm-based phones and modems, allowing to capture raw 2G/3G/4G radio frames, among other things.
+- [**369**星][7y] [Py] [moxie0/knockknock](https://github.com/moxie0/knockknock) A simple, secure, and stealthy port knocking implementation that does not use libpcap or bind to a socket interface.
+- [**369**星][5m] [C] [hzqst/vmwarehardenedloader](https://github.com/hzqst/vmwarehardenedloader) Vmware Hardened VM detection mitigation loader (anti anti-vm)
+- [**369**星][1m] [Py] [emtunc/slackpirate](https://github.com/emtunc/slackpirate) Slack枚举和提取工具-从Slack工作区中提取敏感信息
+- [**368**星][2y] [Java] [zc-zh-001/shadowsocks-share](https://github.com/zc-zh-001/shadowsocks-share) 示例站点
+- [**368**星][3m] [lcatro/source-and-fuzzing](https://github.com/lcatro/Source-and-Fuzzing) 一些阅读源码和Fuzzing 的经验,涵盖黑盒与白盒测试..
+- [**368**星][1y] [C] [battelle/afl-unicorn](https://github.com/Battelle/afl-unicorn) afl-unicorn lets you fuzz any piece of binary that can be emulated by Unicorn Engine.
+- [**368**星][8d] [Ruby] [winrb/winrm](https://github.com/winrb/winrm) 在Windows中使用WinRM的功能调用原生对象的SOAP库。Ruby编写
+- [**368**星][7y] [C++] [opensecurityresearch/dllinjector](https://github.com/opensecurityresearch/dllinjector) 实现各种方法的dll注入工具
+- [**368**星][2y] [Py] [lightos/credmap](https://github.com/lightos/credmap) 在若干已知网站测试用户提供的认证信息,检查是否有密码重复使用
+- [**368**星][3y] [C++] [jlospinoso/gargoyle](https://github.com/jlospinoso/gargoyle) 躲避内存扫描的技术
+- [**368**星][2y] [jaybosamiya/security-notes](https://github.com/jaybosamiya/security-notes)
+- [**368**星][2y] [Shell] [functionclub/yankeebbr](https://github.com/functionclub/yankeebbr) 来自Loc大佬Yankee魔改的BBR的Debian一键安装包
+- [**368**星][6m] [Swift] [evermeer/passportscanner](https://github.com/evermeer/passportscanner) Scan the MRZ code of a passport and extract the firstname, lastname, passport number, nationality, date of birth, expiration date and personal numer.
+- [**368**星][11m] [Py] [crypt0s/fakedns](https://github.com/crypt0s/fakedns) A regular-expression based python MITM DNS server with support for DNS Rebinding attacks
+- [**367**星][3y] [Java] [ssun125/lanmitm](https://github.com/ssun125/lanmitm) Android中间人攻击测试工具
+- [**367**星][5d] [Py] [realgam3/pymultitor](https://github.com/realgam3/pymultitor) pymultitor:Python 多线程 Tor 脚本
+- [**367**星][1m] [Py] [micahflee/torbrowser-launcher](https://github.com/micahflee/torbrowser-launcher) Securely and easily download, verify, install, and launch Tor Browser in Linux
+- [**367**星][2m] [Py] [l4ys/lazyida](https://github.com/l4ys/lazyida) 若干快速访问功能, 扫描字符串格式化漏洞
+
+ 查看详情
+
+
+ ### 功能
+ - 快速移除函数返回类型
+ - 数据格式(format)快速转换
+ - 扫描字符串格式化漏洞
+ - 双击跳转vtable函数
+ - 快捷键: w/c/v
+
+
+
+- [**367**星][8m] [PS] [ferreirasc/oscp](https://github.com/ferreirasc/oscp) oscp study
+- [**367**星][2y] [feicong/sec_skills](https://github.com/feicong/sec_skills) 软件安全工程师技能表
+- [**367**星][11m] [Py] [enablesecurity/sipvicious](https://github.com/enablesecurity/sipvicious) SIPVicious suite is a set of security tools that can be used to audit SIP based VoIP systems.
+- [**367**星][4m] [Ruby] [digininja/pipal](https://github.com/digininja/pipal) Pipal, THE password analyser
+- [**367**星][2y] [Py] [cclabsinc/rfcrack](https://github.com/cclabsinc/rfcrack) A Software Defined Radio Attack Tool
+- [**367**星][10y] [C] [brl/obfuscated-openssh](https://github.com/brl/obfuscated-openssh)
+- [**367**星][2y] [JS] [brannondorsey/dns-rebind-toolkit](https://github.com/brannondorsey/dns-rebind-toolkit) A front-end JavaScript toolkit for creating DNS rebinding attacks.
+- [**367**星][11m] [Py] [awslabs/aws-security-automation](https://github.com/awslabs/aws-security-automation) Collection of scripts and resources for DevSecOps and Automated Incident Response Security
+- [**367**星][2y] [Py] [ajinabraham/owasp-xenotix-xss-exploit-framework](https://github.com/ajinabraham/owasp-xenotix-xss-exploit-framework) OWASP Xenotix XSS Exploit Framework is an advanced Cross Site Scripting (XSS) vulnerability detection and exploitation framework.
+- [**366**星][2y] [Py] [vysecurity/morphhta](https://github.com/vysecurity/morphHTA) morphHTA - Morphing Cobalt Strike's evil.HTA
+- [**366**星][5d] [Java] [zaproxy/zap-extensions](https://github.com/zaproxy/zap-extensions) OWASP ZAP Add-ons
+- [**366**星][4y] [Py] [ywolf/f-nascan](https://github.com/ywolf/f-nascan) Scanning a network asset information script
+- [**366**星][2y] [wtsxdev/malware-analysis](https://github.com/wtsxdev/malware-analysis) List of awesome malware analysis tools and resources
+- [**366**星][1y] [PS] [netspi/pesecurity](https://github.com/netspi/pesecurity) 检查PE(EXE/DLL)编译选项是否有:ASLR, DEP, SafeSEH, StrongNaming, Authenticode。PowerShell模块
+- [**366**星][3m] [Py] [neo23x0/munin](https://github.com/neo23x0/munin) Online hash checker for Virustotal and other services
+- [**366**星][2m] [PS] [gdedrouas/exchange-ad-privesc](https://github.com/gdedrouas/exchange-ad-privesc) Exchange privilege escalations to Active Directory
+- [**366**星][2y] [PHP] [attackercan/regexp-security-cheatsheet](https://github.com/attackercan/regexp-security-cheatsheet)
+- [**365**星][3m] [Py] [pageauc/pi-timolo](https://github.com/pageauc/pi-timolo) Raspberry PI-TIMOLO ( PI-TImelapse, MOtion, LOwLight ) uses RPI picamera and python for Remote Headless Security Monitoring & Auto Sync files with rclone remote storage services. Auto Twilight Transitions and Low Light Camera Settings. This project is featured on Awesome List
+- [**365**星][29d] [Shell] [matthewpierson/1033-ota-downgrader](https://github.com/matthewpierson/1033-ota-downgrader) First ever tool to downgrade ANY iPhone 5s, ANY iPad Air and (almost any) iPad Mini 2 to 10.3.3 with OTA blobs + checkm8!
+- [**365**星][1y] [hannob/vulns](https://github.com/hannob/vulns) Named vulnerabilities and their practical impact
+- [**365**星][2m] [Elm] [elm-community/elm-test](https://github.com/elm-community/elm-test) moved to elm-explorations/test
+- [**365**星][23d] [chenerlich/fcl](https://github.com/chenerlich/fcl) FCL (Fileless Command Lines) - Known command lines of fileless malicious executions
+- [**365**星][2y] [TS] [cazala/coin-hive-stratum](https://github.com/cazala/coin-hive-stratum) use CoinHive's JavaScript miner on any stratum pool
+- [**365**星][7m] [Py] [carnal0wnage/weirdaal](https://github.com/carnal0wnage/weirdaal) WeirdAAL (AWS Attack Library)
+- [**365**星][5y] [C] [arialdomartini/morris-worm](https://github.com/arialdomartini/morris-worm) The original Morris Worm source code
+- [**364**星][9m] [C++] [tripwire/tripwire-open-source](https://github.com/tripwire/tripwire-open-source) Open Source Tripwire®
+- [**364**星][1y] [C++] [szechyjs/dsd](https://github.com/szechyjs/dsd) Digital Speech Decoder
+- [**364**星][2y] [C] [k0keoyo/kdriver-fuzzer](https://github.com/k0keoyo/kdriver-fuzzer)
+- [**364**星][10m] [Go] [frichetten/cve-2019-5736-poc](https://github.com/frichetten/cve-2019-5736-poc) PoC for CVE-2019-5736
+- [**363**星][2y] [ObjC] [wzqcongcong/macsubstrate](https://github.com/wzqcongcong/macsubstrate) Substrate for macOS
+- [**363**星][1y] [Shell] [writeups/ios](https://github.com/writeups/ios) Here you can find write ups for iOS Vulnerabilities that have been released.
+- [**363**星][10m] [C++] [thosakwe/t2b](https://github.com/thosakwe/t2b) A wicked-powerful text macro language for building binary files.
+- [**363**星][1m] [C++] [steven-michaud/hookcase](https://github.com/steven-michaud/hookcase) Tool for reverse engineering macOS/OS X
+- [**363**星][8d] [Go] [sslmate/certspotter](https://github.com/sslmate/certspotter) Certificate Transparency Log Monitor
+- [**363**星][14d] [C#] [security-code-scan/security-code-scan](https://github.com/security-code-scan/security-code-scan) Vulnerability Patterns Detector for C# and VB.NET
+- [**363**星][2y] [Py] [rc0r/afl-utils](https://github.com/rc0r/afl-utils) Utilities for automated crash sample processing/analysis, easy afl-fuzz job management and corpus optimization
+- [**363**星][2y] [petoolse/petools](https://github.com/petoolse/petools) PE Tools - Portable executable (PE) manipulation toolkit
+- [**363**星][5y] [PHP] [onesourcecat/phpvulhunter](https://github.com/onesourcecat/phpvulhunter) A tool that can scan php vulnerabilities automatically using static analysis methods
+- [**363**星][2y] [Shell] [m4sc3r4n0/evil-droid](https://github.com/m4sc3r4n0/evil-droid) 创建和生成并嵌入APK Payload,用来渗透android平台
+- [**363**星][5d] [C++] [istio/proxy](https://github.com/istio/proxy) a microservice proxy that can be used on the client and server side, and forms a microservice mesh
+- [**363**星][2y] [Erlang] [ernw/ss7maper](https://github.com/ernw/ss7maper) 渗透测试工具包
+- [**363**星][1y] [Go] [alexkohler/prealloc](https://github.com/alexkohler/prealloc) prealloc is a Go static analysis tool to find slice declarations that could potentially be preallocated.
+- [**363**星][11m] [Py] [ajinabraham/xenotix-python-keylogger](https://github.com/ajinabraham/xenotix-python-keylogger) Xenotix Python Keylogger for Windows.
+- [**362**星][4d] [CSS] [d2-projects/folder-explorer](https://github.com/d2-projects/folder-explorer) 分析文件目录,统计数据并以树形结构和图表的形式展示结果,也可以导出多种格式留存 | Analyse your folders and display the results in tree and statistical charts. If necessary, this software can help you export multiple file formats
+- [**362**星][10m] [Py] [secynic/ipwhois](https://github.com/secynic/ipwhois) 检索和解析IPv4和IPv6地址的Whois数据
+- [**362**星][2y] [Py] [roglew/pappy-proxy](https://github.com/roglew/pappy-proxy) An intercepting proxy for web application testing
+- [**362**星][2m] [C] [rgov/thunderbolt3unblocker](https://github.com/rgov/thunderbolt3unblocker) Enable unsupported Thunderbolt 3 peripherals on macOS
+- [**362**星][3y] [C] [gbrindisi/malware](https://github.com/gbrindisi/malware) malware source codes
+- [**362**星][9m] [fr0gger/awesome-ida-x64-olly-plugin](https://github.com/fr0gger/awesome-ida-x64-olly-plugin) IDA x64DBG OllyDBG 插件收集
+- [**362**星][5m] [Makefile] [crifan/android_app_security_crack](https://github.com/crifan/android_app_security_crack) 安卓应用的安全和破解
+- [**362**星][2y] [bluscreenofjeff/aggressorscripts](https://github.com/bluscreenofjeff/aggressorscripts) Aggressor scripts for use with Cobalt Strike 3.0+
+- [**361**星][4y] [Go] [inconshreveable/srvdir](https://github.com/inconshreveable/srvdir) Expose any folder as an HTTPS fileserver
+- [**361**星][3y] [C] [fsecurelabs/kernelfuzzer](https://github.com/FSecureLABS/KernelFuzzer) Cross Platform Kernel Fuzzer Framework
+- [**361**星][21d] [Py] [tenable/poc](https://github.com/tenable/poc) 漏洞PoC
+- [**361**星][9y] [C] [psgroove/psgroove](https://github.com/psgroove/psgroove) an open-source reimplementation of the psjailbreak exploit for AT90USB and related microcontrollers.
+- [**361**星][2m] [Java] [patrickfav/uber-apk-signer](https://github.com/patrickfav/uber-apk-signer) A cli tool that helps signing and zip aligning single or multiple Android application packages (APKs) with either debug or provided release certificates. It supports v1, v2 and v3 Android signing scheme has an embedded debug keystore and auto verifies after signing.
+- [**360**星][4m] [Py] [visipedia/inat_comp](https://github.com/visipedia/inat_comp) iNaturalist competition details
+- [**360**星][3y] [C] [rafael-santiago/pig](https://github.com/rafael-santiago/pig) A Linux packet crafting tool.
+- [**360**星][7m] [Py] [orangetw/awesome-jenkins-rce-2019](https://github.com/orangetw/awesome-jenkins-rce-2019) There is no pre-auth RCE in Jenkins since May 2017, but this is the one!
+- [**360**星][1m] [Go] [optiopay/klar](https://github.com/optiopay/klar) Integration of Clair and Docker Registry
+- [**360**星][4y] [mozilla/minion](https://github.com/mozilla/minion) 由Mozilla构建的安全测试框架,用于弥合开发人员和安全测试人员之间的鸿沟。
+- [**360**星][10d] [Py] [davidtavarez/pwndb](https://github.com/davidtavarez/pwndb) Search for leaked credentials
+- [**360**星][14d] [Py] [checkpointsw/karta](https://github.com/checkpointsw/karta) source code assisted fast binary matching plugin for IDA
+- [**360**星][2m] [Py] [a0rtega/metame](https://github.com/a0rtega/metame) metame is a metamorphic code engine for arbitrary executables
+- [**359**星][3y] [C] [xiaoweime/wprotect](https://github.com/xiaoweime/wprotect) uses code-virtualization technic to protect binary from being reverse-engineered or unwanted modified.
+- [**359**星][4m] [C++] [wbenny/pdbex](https://github.com/wbenny/pdbex) pdbex is a utility for reconstructing structures and unions from the PDB into compilable C headers
+- [**359**星][2y] [udpsec/awesome-vpn](https://github.com/udpsec/awesome-vpn) 科学上网的有趣项目集锦,欢迎大家pr自己喜欢的项目到这里。
+- [**359**星][4y] [HTML] [mubix/post-exploitation-wiki](https://github.com/mubix/post-exploitation-wiki) Post Exploitation Wiki
+- [**359**星][1m] [C#] [andrew-schofield/keepass2-haveibeenpwned](https://github.com/andrew-schofield/keepass2-haveibeenpwned) Simple Have I Been Pwned checker for KeePass
+- [**358**星][4y] [Py] [bugscanteam/hackhttp](https://github.com/bugscanteam/hackhttp) Hackhttp is an HTTP library, written in Python.
+- [**358**星][4m] [C++] [googleprojectzero/brokentype](https://github.com/googleprojectzero/BrokenType) TrueType and OpenType font fuzzing toolset
+- [**358**星][4m] [C] [the-cracker-technology/andrax-mobile-pentest](https://github.com/the-cracker-technology/andrax-mobile-pentest) ANDRAX The first and unique Penetration Testing platform for Android smartphones
+- [**358**星][6m] [C#] [technitiumsoftware/dnsserver](https://github.com/technitiumsoftware/dnsserver) Technitium DNS Server
+- [**358**星][3d] [Java] [spring-cloud/spring-cloud-commons](https://github.com/spring-cloud/spring-cloud-commons) Common classes used in different Spring Cloud implementations
+- [**358**星][3y] [Py] [sangaline/advanced-web-scraping-tutorial](https://github.com/sangaline/advanced-web-scraping-tutorial) The Zipru scraper developed in the Advanced Web Scraping Tutorial.
+- [**358**星][5y] [C] [crmulliner/ddi](https://github.com/crmulliner/ddi) Dynamic Dalvik Instrumentation Toolkit
+- [**358**星][2y] [C++] [can1357/cve-2018-8897](https://github.com/can1357/cve-2018-8897) Arbitrary code execution with kernel privileges using CVE-2018-8897.
+- [**358**星][4y] [Py] [ahhh/reverse_dns_shell](https://github.com/ahhh/reverse_dns_shell) A python reverse shell that uses DNS as the c2 channel
+- [**357**星][23d] [JS] [saucxs/watermark-dom](https://github.com/saucxs/watermark-dom) watermark.js是网站的水印组件,降低数据泄密风险。1、版本,2、水印插件-使用,3、水印插件-testTool(测试工具),4、内置方法,5、支持各种属性配置使用,等等。欢迎访问:
+- [**357**星][3y] [Py] [spender-sandbox/cuckoo-modified](https://github.com/spender-sandbox/cuckoo-modified) cuckoo改版
+- [**357**星][6d] [C#] [sonarsource/sonar-dotnet](https://github.com/sonarsource/sonar-dotnet) 用于C#和VB.NET语言的静态代码分析器,用作SonarQube和SonarCloud平台的扩展。
+- [**357**星][11d] [C] [rfk/pyenchant](https://github.com/rfk/pyenchant) spellchecking library for python
+- [**357**星][23d] [ObjC] [prateek147/dvia](https://github.com/prateek147/dvia) Damn Vulnerable iOS App (DVIA) is an iOS application that is damn vulnerable. Its main goal is to provide a platform to mobile security enthusiasts/professionals or students to test their iOS penetration testing skills in a legal environment. This application covers all the common vulnerabilities found in iOS applications (following OWASP top 10…
+- [**357**星][14d] [Kotlin] [portswigger/turbo-intruder](https://github.com/portswigger/turbo-intruder) Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results.
+- [**357**星][2y] [JS] [kamikat/tttfi](https://github.com/kamikat/tttfi) IFTTT 中间件。从 IFTTT webhook 中提取数据传递给脚本,并将脚本的输出发送回 IFTTT。脚本语言支持 Python/Perl/Go。
+- [**357**星][2m] [Java] [hubspot/jinjava](https://github.com/hubspot/jinjava) Jinja template engine for Java
+- [**357**星][3y] [C++] [gamehackingbook/gamehackingcode](https://github.com/gamehackingbook/gamehackingcode) 《游戏黑客:为在线游戏开发自主机器人》一书的代码。
+- [**357**星][9d] [fkromer/awesome-ros2](https://github.com/fkromer/awesome-ros2) The Robot Operating System Version 2.0 is awesome!
+- [**357**星][7m] [PHP] [fate0/prvd](https://github.com/fate0/prvd) PHP Runtime Vulnerability Detection
+- [**357**星][2m] [Py] [denyhosts/denyhosts](https://github.com/denyhosts/denyhosts) Automated host blocking from SSH brute force attacks
+- [**357**星][5m] [Java] [bit4woo/domain_hunter](https://github.com/bit4woo/domain_hunter) A Burp Suite Extender that try to find sub-domain, similar-domain and related-domain of an organization, not only a domain! 利用burp收集整个企业、组织的域名(不仅仅是单个主域名)的插件
+- [**357**星][4m] [Py] [a3sal0n/cyberthreathunting](https://github.com/a3sal0n/cyberthreathunting) A collection of resources for Threat Hunters
+- [**356**星][4y] [Py] [mitmproxy/pathod](https://github.com/mitmproxy/pathod)
+- [**356**星][4y] [Py] [aoncyberlabs/evilabigail](https://github.com/AonCyberLabs/EvilAbigail) 自动化Linux evil maid 攻击
+- [**356**星][5m] [Py] [xtiankisutsa/mara_framework](https://github.com/xtiankisutsa/mara_framework) MARA is a Mobile Application Reverse engineering and Analysis Framework. It is a toolkit that puts together commonly used mobile application reverse engineering and analysis tools to assist in testing mobile applications against the OWASP mobile security threats.
+- [**356**星][8m] [C] [vulnreproduction/linuxflaw](https://github.com/vulnreproduction/linuxflaw) This repo records all the vulnerabilities of linux software I have reproduced in my local workspace
+- [**356**星][2y] [Py] [ustayready/credking](https://github.com/ustayready/credking) Password spraying using AWS Lambda for IP rotation
+- [**356**星][5m] [C++] [trendmicro/tlsh](https://github.com/trendmicro/tlsh) a fuzzy matching library
+- [**356**星][8d] [C] [rhdunn/espeak](https://github.com/rhdunn/espeak) eSpeak NG is an open source speech synthesizer that supports 101 languages and accents.
+- [**356**星][2y] [Makefile] [opensecurityresearch/hostapd-wpe](https://github.com/opensecurityresearch/hostapd-wpe) Modified hostapd to facilitate AP impersonation attacks
+- [**356**星][6m] [Go] [lukechampine/jsteg](https://github.com/lukechampine/jsteg) JPEG steganography
+- [**356**星][2m] [Py] [hell0w0rld0/github-hunter](https://github.com/hell0w0rld0/github-hunter) This tool is for sensitive information searching on Github - The Fast Version here:
+- [**356**星][1y] [C] [emptymonkey/revsh](https://github.com/emptymonkey/revsh) A reverse shell with terminal support, data tunneling, and advanced pivoting capabilities.
+- [**356**星][5y] [Py] [ebranca/owasp-pysec](https://github.com/ebranca/owasp-pysec) OWASP Python Security Project
+- [**356**星][2m] [Py] [chenjj/corscanner](https://github.com/chenjj/corscanner) Fast CORS misconfiguration vulnerabilities scanner
+- [**355**星][17d] [Shell] [dnscrypt/dnscrypt-server-docker](https://github.com/dnscrypt/dnscrypt-server-docker) A Docker image for a non-censoring, non-logging, DNSSEC-capable, DNSCrypt-enabled DNS resolver
+- [**355**星][17d] [Java] [wycm/selenium-geetest-crack](https://github.com/wycm/selenium-geetest-crack) selenium破解滑动验证码
+- [**355**星][2y] [Py] [scalingexcellence/scrapybook](https://github.com/scalingexcellence/scrapybook) Scrapy Book Code
+- [**355**星][1m] [C++] [openvpn/openvpn3](https://github.com/openvpn/openvpn3) OpenVPN 3 is a C++ class library that implements the functionality of an OpenVPN client, and is protocol-compatible with the OpenVPN 2.x branch.
+- [**355**星][3y] [Py] [gallopsled/pwntools-write-ups](https://github.com/gallopsled/pwntools-write-ups) A colleciton of CTF write-ups all using pwntools
+- [**355**星][3y] [JS] [antimalware/manul](https://github.com/antimalware/manul) Antimalware tool for websites
+- [**355**星][2m] [C#] [3f/dllexport](https://github.com/3f/dllexport) .NET DllExport
+- [**354**星][4m] [C] [intel/libipt](https://github.com/intel/libipt) libipt - an Intel(R) Processor Trace decoder library
+- [**354**星][7m] [PHP] [s0md3v/nano](https://github.com/s0md3v/nano) PHP Webshell家族
+- [**354**星][2m] [JS] [fsecurelabs/dref](https://github.com/FSecureLABS/dref) DNS 重绑定利用框架
+- [**354**星][3y] [virajkulkarni14/webdevelopersecuritychecklist](https://github.com/virajkulkarni14/webdevelopersecuritychecklist) A checklist of important security issues you should consider when creating a web application.
+- [**354**星][3m] [snyk/zip-slip-vulnerability](https://github.com/snyk/zip-slip-vulnerability) Zip Slip Vulnerability (Arbitrary file write through archive extraction)
+- [**354**星][8y] [Py] [openrce/pydbg](https://github.com/openrce/pydbg) A pure-python win32 debugger interface.
+- [**354**星][2m] [C] [nccgroup/phantap](https://github.com/nccgroup/phantap) Phantom Tap (PhanTap) - an ‘invisible’ network tap aimed at red teams
+- [**354**星][8d] [Py] [lockgit/hacking](https://github.com/lockgit/hacking) Hacking工具收集
+- [**354**星][2y] [Shell] [koenbuyens/kalirouter](https://github.com/koenbuyens/kalirouter) 将 KaliLinux 主机转变为路由器,使用 Wireshark 记录所有的网络流量,同时将 HTTP/HTTPS 流量发送到其他主机的拦截代理(例如 BurpSuite)
+- [**354**星][1y] [Py] [i3visio/osrframework](https://github.com/i3visio/osrframework) 开源研究框架,提供 API 和工具执行更加精确的在线研究,例如用户名检查、DNS lookup、信息泄露研究、深度 web 研究、正则表达式提取等。
+- [**354**星][2d] [C#] [digitalruby/ipban](https://github.com/digitalruby/ipban) 监视Windows/Linux系统的登录失败和不良行为,并封禁对应的IP地址。高度可配置,精简且功能强大。
+- [**354**星][3y] [C] [adtac/fssb](https://github.com/adtac/fssb) A filesystem sandbox for Linux using syscall intercepts.
+- [**353**星][16d] [Go] [quay/jwtproxy](https://github.com/quay/jwtproxy) An HTTP-Proxy that adds AuthN through JWTs
+- [**353**星][13d] [TeX] [vlsergey/infosec](https://github.com/vlsergey/infosec) MIPT无线电工程与控制系统部信息保护教科书
+- [**353**星][2d] [Java] [portswigger/http-request-smuggler](https://github.com/PortSwigger/http-request-smuggler) an extension for Burp Suite designed to help you launch HTTP Request Smuggling attack
+- [**353**星][2d] [Shell] [ukncsc/lme](https://github.com/ukncsc/lme) Logging Made Easy
+- [**353**星][5m] [Py] [hasherezade/malware_analysis](https://github.com/hasherezade/malware_analysis) Various snippets created during malware analysis
+- [**353**星][15d] [Py] [gosecure/pyrdp](https://github.com/gosecure/pyrdp) RDP man-in-the-middle (mitm) and library for Python 3 with the ability to watch connections live or after the fact
+- [**353**星][2y] [C++] [glsl-debugger/glsl-debugger](https://github.com/glsl-debugger/glsl-debugger) GLSL source level debugger.
+- [**353**星][1m] [Ruby] [dev-sec/chef-os-hardening](https://github.com/dev-sec/chef-os-hardening) This chef cookbook provides numerous security-related configurations, providing all-round base protection.
+- [**353**星][7d] [Py] [depthsecurity/armory](https://github.com/depthsecurity/armory) Armory is a tool meant to take in a lot of external and discovery data from a lot of tools, add it to a database and correlate all of related information.
+- [**353**星][16d] [Go] [quay/jwtproxy](https://github.com/quay/jwtproxy) An HTTP-Proxy that adds AuthN through JWTs
+- [**352**星][2m] [C] [tboox/vm86](https://github.com/tboox/vm86) a very simple and lightweight x86 virtual machine
+- [**352**星][2y] [C++] [zerosum0x0/winrepl](https://github.com/zerosum0x0/winrepl) 实现了“读取->执行->打印 循环”的Windows汇编代码,x86+x64
+- [**352**星][5m] [Makefile] [xdite/internet-security](https://github.com/xdite/internet-security) 互联网资安风控实战
+- [**352**星][2d] [wenzel/awesome-virtualization](https://github.com/wenzel/awesome-virtualization) Collection of resources about Virtualization
+- [**352**星][3y] [ObjC] [naituw/hackingfacebook](https://github.com/naituw/hackingfacebook) Kill Facebook for iOS's SSL Pinning
+- [**352**星][3m] [Shell] [maldevel/pentestkit](https://github.com/maldevel/pentestkit) 渗透脚本和工具
+- [**352**星][3d] [C#] [leaguesandbox/gameserver](https://github.com/leaguesandbox/gameserver) League Sandbox's Game Server
+- [**352**星][4y] [fireeye/iocs](https://github.com/fireeye/iocs) FireEye Publicly Shared Indicators of Compromise (IOCs)
+- [**351**星][2m] [Shell] [vitalysim/totalrecon](https://github.com/vitalysim/totalrecon) TotalRecon installs all the recon tools you need
+- [**351**星][10d] [hackerschoice/thc-tesla-powerwall2-hack](https://github.com/hackerschoice/thc-tesla-powerwall2-hack) TESLA PowerWall 2安全雪茄
+- [**351**星][2m] [C#] [vletoux/pingcastle](https://github.com/vletoux/pingcastle) Get Active Directory Security at 80% in 20% of the time
+- [**351**星][6m] [Java] [syvaidya/openstego](https://github.com/syvaidya/openstego) OpenStego is a steganography application that provides two functionalities: a) Data Hiding: It can hide any data within a cover file (e.g. images). b) Watermarking: Watermarking files (e.g. images) with an invisible signature. It can be used to detect unauthorized file copying.
+- [**351**星][1m] [C++] [sslab-gatech/qsym](https://github.com/sslab-gatech/qsym) A Practical Concolic Execution Engine Tailored for Hybrid Fuzzing
+- [**351**星][6y] [C] [rentzsch/mach_override](https://github.com/rentzsch/mach_override) runtime function overriding for Mac OS X
+- [**351**星][2y] [TeX] [plailect/keyshuffling](https://github.com/plailect/keyshuffling) Keyshuffling Attack for Persistent Early Code Execution in the Nintendo 3DS Secure Bootchain
+- [**351**星][8m] [C] [p0cl4bs/kadimus](https://github.com/p0cl4bs/kadimus) Kadimus is a tool to check sites to lfi vulnerability , and also exploit it...
+- [**351**星][5m] [b3nac/android-reports-and-resources](https://github.com/b3nac/android-reports-and-resources) A big list of Android Hackerone disclosed reports and other resources.
+- [**351**星][12m] [Py] [aancw/belati](https://github.com/aancw/belati) The Traditional Swiss Army Knife for OSINT
+- [**350**星][7m] [C] [turing-technician/fasthook](https://github.com/turing-technician/fasthook) Android ART Hook
+- [**350**星][1m] [Go] [tomnomnom/httprobe](https://github.com/tomnomnom/httprobe) Take a list of domains and probe for working HTTP and HTTPS servers
+- [**350**星][2y] [notsosecure/password_cracking_rules](https://github.com/notsosecure/password_cracking_rules) One rule to crack all passwords. or atleast we hope so.
+- [**350**星][2y] [Py] [mazen160/struts-pwn](https://github.com/mazen160/struts-pwn) Apache Struts CVE-2017-5638 漏洞利用
+- [**350**星][2y] [Shell] [mazen160/firefox-security-toolkit](https://github.com/mazen160/firefox-security-toolkit) A tool that transforms Firefox browsers into a penetration testing suite
+- [**350**星][2d] [Ruby] [jjyg/metasm](https://github.com/jjyg/metasm) This is the main repository for metasm, a free assembler / disassembler / compiler written in ruby
+- [**350**星][7m] [Py] [iphelix/pack](https://github.com/iphelix/pack) PACK (Password Analysis and Cracking Kit)
+- [**350**星][11d] [Shell] [fanyueciyuan/eazy-for-ss](https://github.com/fanyueciyuan/eazy-for-ss) A Bypassgfw Collection
+- [**350**星][1m] [Py] [devrandom/gitian-builder](https://github.com/devrandom/gitian-builder) Build packages in a secure deterministic fashion inside a VM
+- [**349**星][2m] [JS] [whitequark/ipaddr.js](https://github.com/whitequark/ipaddr.js) IP address manipulation library in JavaScript
+- [**349**星][2d] [C] [vanhauser-thc/aflplusplus](https://github.com/vanhauser-thc/aflplusplus) 带社区补丁的afl 2.56b
+- [**349**星][4m] [Py] [tatanus/spf](https://github.com/tatanus/spf) SpeedPhishing Framework
+- [**349**星][5m] [Py] [swisskyrepo/wordpresscan](https://github.com/swisskyrepo/wordpresscan) WPScan rewritten in Python + some WPSeku ideas
+- [**349**星][20d] [C] [liji32/sameboy](https://github.com/liji32/sameboy) Game Boy and Game Boy Color emulator written in C
+- [**349**星][7m] [Haskell] [jpmorganchase/constellation](https://github.com/jpmorganchase/constellation) Peer-to-peer encrypted message exchange
+- [**349**星][2m] [C] [jedisct1/swift-sodium](https://github.com/jedisct1/swift-sodium) Safe and easy to use crypto for iOS and macOS
+- [**349**星][3m] [Brainfuck] [hexhive/printbf](https://github.com/hexhive/printbf) Brainfuck interpreter inside printf
+- [**349**星][21d] [TeX] [haifengl/bigdata](https://github.com/haifengl/bigdata) Introduction to Big Data
+- [**349**星][6m] [Shell] [hackplayers/4nonimizer](https://github.com/hackplayers/4nonimizer) A bash script for anonymizing the public IP used to browsing Internet, managing the connection to TOR network and to different VPNs providers (OpenVPN)
+- [**349**星][5d] [Py] [alecmuffett/real-world-onion-sites](https://github.com/alecmuffett/real-world-onion-sites) This is a list of substantial, commercial-or-social-good mainstream websites which provide onion services.
+- [**348**星][2m] [Java] [droidefense/engine](https://github.com/droidefense/engine) Droidefense: Advance Android Malware Analysis Framework
+- [**348**星][1m] [C] [seccomp/libseccomp](https://github.com/seccomp/libseccomp) an easy to use, platform independent, interface to the Linux Kernel's syscall filtering mechanism
+- [**348**星][1y] [PS] [rootclay/powershell-attack-guide](https://github.com/rootclay/powershell-attack-guide) Powershell攻击指南----黑客后渗透之道
+
+- [**348**星][2y] [Py] [maldevel/gdog](https://github.com/maldevel/gdog) Python 编写的后门,使用 Gmail 做 C&C
+- [**348**星][2y] [PS] [fuzzysecurity/pskernel-primitives](https://github.com/fuzzysecurity/pskernel-primitives) Exploit primitives for PowerShell
+- [**348**星][2m] [Java] [esapi/esapi-java-legacy](https://github.com/esapi/esapi-java-legacy) ESAPI (The OWASP Enterprise Security API) is a free, open source, web application security control library that makes it easier for programmers to write lower-risk applications.
+- [**348**星][3y] [C] [cr4sh/smmbackdoor](https://github.com/cr4sh/smmbackdoor) System Management Mode backdoor for UEFI
+- [**347**星][2m] [Shell] [orlikoski/skadi](https://github.com/orlikoski/Skadi) collection, processing and advanced analysis of forensic artifacts and images.
+- [**347**星][10m] [C] [wapiflapi/exrs](https://github.com/wapiflapi/exrs) Exercises for learning Reverse Engineering and Exploitation.
+- [**347**星][4y] [Java] [rsmudge/cortana-scripts](https://github.com/rsmudge/cortana-scripts) A collection of Cortana scripts that you may use with Armitage and Cobalt Strike 2.x. Cortana Scripts are not compatible with Cobalt Strike 3.x. Cobalt Strike 3.x uses a variant of Cortana called Aggressor Script.
+- [**347**星][1y] [Py] [quickbreach/smbetray](https://github.com/quickbreach/smbetray) SMB MiTM tool with a focus on attacking clients through file content swapping, lnk swapping, as well as compromising any data passed over the wire in cleartext.
+- [**347**星][2y] [Py] [nopernik/sshpry](https://github.com/nopernik/sshpry) Seamlessly spy on SSH session like it is your tty
+- [**347**星][2y] [Ruby] [jobertabma/virtual-host-discovery](https://github.com/jobertabma/virtual-host-discovery) 枚举服务器上的虚拟主机(Ruby脚本)
+- [**347**星][5y] [C] [inquisb/shellcodeexec](https://github.com/inquisb/shellcodeexec) Script to execute in memory a sequence of opcodes
+- [**347**星][6m] [C] [earthquake/chw00t](https://github.com/earthquake/chw00t) Unices chroot breaking tool
+- [**347**星][2y] [dostoevskylabs/dostoevsky-pentest-notes](https://github.com/dostoevskylabs/dostoevsky-pentest-notes) Notes for taking the OSCP in 2097. Read in book form on GitBook
+- [**347**星][4d] [Shell] [archstrike/archstrike](https://github.com/archstrike/archstrike) An Arch Linux repository for security professionals and enthusiasts. Done the Arch Way and optimized for i686, x86_64, ARMv6, ARMv7 and ARMv8.
+- [**346**星][1m] [Py] [ym2011/pest](https://github.com/ym2011/PEST) 渗透脚本
+- [**346**星][3m] [C#] [rasta-mouse/tikitorch](https://github.com/rasta-mouse/tikitorch) Process Injection
+- [**346**星][12d] [hongrisec/web-security-attack](https://github.com/hongrisec/web-security-attack) Web安全相关内容
+- [**346**星][25d] [C#] [fuzzysecurity/sharp-suite](https://github.com/fuzzysecurity/sharp-suite) My musings with C#
+- [**346**星][2y] [enzet/symbolic-execution](https://github.com/enzet/symbolic-execution) 图解符号执行进化史
+- [**346**星][11m] [Py] [darkspiritz/darkspiritz](https://github.com/darkspiritz/darkspiritz) 适用于Linux,MacOS和Windows系统的渗透测试框架。
+- [**346**星][1y] [C] [bretley/how2exploit_binary](https://github.com/bretley/how2exploit_binary) An in depth tutorial on how to do binary exploitation
+- [**345**星][2y] [Go] [propervillain/moistpetal](https://github.com/propervillain/moistpetal) 模块化的 RedTeam 恶意代码框架
+- [**345**星][4m] [Java] [google/graphicsfuzz](https://github.com/google/graphicsfuzz) A testing framework for automatically finding and simplifying bugs in graphics shader compilers.
+- [**345**星][1y] [C] [codermjlee/mjcodeobfuscation](https://github.com/codermjlee/mjcodeobfuscation) 一个用于代码混淆和字符串加密的Mac小Demo
+- [**345**星][3y] [Py] [animeshshaw/hash-algorithm-identifier](https://github.com/animeshshaw/hash-algorithm-identifier) A python tool to identify different Hash Function Algorithms
+- [**344**星][8d] [Perl] [keydet89/regripper2.8](https://github.com/keydet89/regripper2.8) 从注册表中提取/解析信息(键,值,数据)并将其呈现出来进行分析。
+- [**344**星][7y] [benvium/libimobiledevice-macosx](https://github.com/benvium/libimobiledevice-macosx) Binary distribution of the libimobiledevice library for Mac OS X
+- [**344**星][5m] [Py] [adrianvollmer/powerhub](https://github.com/adrianvollmer/powerhub) A post exploitation tool based on a web application, focusing on bypassing endpoint protection and application whitelisting
+- [**343**星][1y] [valvesoftware/source-1-games](https://github.com/valvesoftware/source-1-games) Source 1 based games such as TF2 and Counter-Strike: Source
+- [**343**星][2m] [Ruby] [sunitparekh/data-anonymization](https://github.com/sunitparekh/data-anonymization) 帮助您构建匿名的生产数据转储,可用于性能测试,安全性测试,调试和开发。
+- [**343**星][1y] [Py] [theopolis/uefi-firmware-parser](https://github.com/theopolis/uefi-firmware-parser) Parse BIOS/Intel ME/UEFI firmware related structures: Volumes, FileSystems, Files, etc
+- [**343**星][6d] [C++] [nativescript/android-runtime](https://github.com/nativescript/android-runtime) Android runtime for NativeScript (based on V8)
+- [**343**星][2y] [leelikar/deepweb](https://github.com/leelikar/deepweb) 暗网网址大全TOR
+- [**343**星][2y] [hannob/meltdownspectre-patches](https://github.com/hannob/meltdownspectre-patches) Summary of the patch status for Meltdown / Spectre
+- [**343**星][2y] [Py] [eplox/tcp-starvation](https://github.com/eplox/tcp-starvation) TCP-Starvation 漏洞
+- [**343**星][2y] [C++] [ele7enxxh/poc-exp](https://github.com/ele7enxxh/poc-exp) 某些 Android 漏洞的poc/exp
+- [**343**星][12m] [Assembly] [egebalci/amber](https://github.com/egebalci/amber) 反射式PE加壳器,用于绕过安全产品和缓解措施
+- [**343**星][12m] [Ruby] [calebfenton/dex-oracle](https://github.com/calebfenton/dex-oracle) A pattern based Dalvik deobfuscator which uses limited execution to improve semantic analysis
+- [**343**星][2y] [Shell] [brannondorsey/mitm-router](https://github.com/brannondorsey/mitm-router) mitm-router:将任何一台Linux 计算机转变成公开的 Wi-Fi 网络,并且默认Man-in-the-middle 所有 http 流量
+- [**342**星][1y] [Py] [varbaek/xsser](https://github.com/varbaek/xsser) From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017 + Extras
+- [**342**星][9d] [C++] [thezdi/poc](https://github.com/thezdi/poc) Proofs-of-concept
+- [**342**星][2m] [C#] [steamdatabase/valveresourceformat](https://github.com/steamdatabase/valveresourceformat) Valve's Source 2 resource file format (also known as Stupid Valve Format) parser and decompiler.
+- [**342**星][8m] [Py] [skorov/ridrelay](https://github.com/skorov/ridrelay) 通过使用具有低priv的SMB中继来枚举您没有信誉的域上的用户名。
+- [**342**星][4d] [Shell] [r00t-3xp10it/backdoorppt](https://github.com/r00t-3xp10it/backdoorppt) 将Exe格式Payload伪装成Doc(.ppt)
+- [**342**星][5y] [Py] [neohapsis/neopi](https://github.com/neohapsis/neopi) a Python script that uses a variety of statistical methods to detect obfuscated and encrypted content within text/script files
+- [**342**星][4y] [Shell] [marshyski/quick-secure](https://github.com/marshyski/quick-secure) Quickly secure UNIX/Linux systems
+- [**342**星][24d] [Augeas] [hercules-team/augeas](https://github.com/hercules-team/augeas) A configuration editing tool and API
+- [**342**星][18d] [Py] [fgeek/pyfiscan](https://github.com/fgeek/pyfiscan) Web App 漏洞及版本扫描
+- [**341**星][1y] [Shell] [dylanbai8/onekey_caddy_php7_sqlite3](https://github.com/dylanbai8/onekey_caddy_php7_sqlite3) 小内存 VPS 一键搭建 Caddy+PHP7+Sqlite3 环境 (支持VPS最小内存64M),一键翻墙 caddy+web(php+sqlite3)+v2ray+bbr。
+- [**341**星][2y] [C++] [usb-tools/usbproxy-legacy](https://github.com/usb-tools/USBProxy-legacy) A proxy for USB devices, libUSB and gadgetFS - this project is unmaintained, try here:
+- [**341**星][6m] [C] [zeex/subhook](https://github.com/zeex/subhook) Simple hooking library for C/C++ (x86 only, 32/64-bit, no dependencies)
+- [**341**星][10m] [yarnpkg/rfcs](https://github.com/yarnpkg/rfcs) RFCs for changes to Yarn
+- [**341**星][2m] [Go] [wweir/sower](https://github.com/wweir/sower) Sower is a cross-platform intelligent transparent proxy solution.
+- [**341**星][2y] [Py] [sslab-gatech/drk](https://github.com/sslab-gatech/drk) breaks kernel address space layout randomization (KASLR) by exploiting TLB and decoded i-cache side channel.
+- [**341**星][2y] [Py] [sarfata/voodooprivacy](https://github.com/sarfata/voodooprivacy) Roll your own VPN server on Amazon EC2 and battle-ready firewall for OS X
+- [**341**星][8m] [Java] [portswigger/param-miner](https://github.com/portswigger/param-miner) identifies hidden, unlinked parameters. It's particularly useful for finding web cache poisoning vulnerabilities
+- [**341**星][4m] [Java] [portswigger/backslash-powered-scanner](https://github.com/portswigger/backslash-powered-scanner) Finds unknown classes of injection vulnerabilities
+- [**341**星][1m] [Shell] [nullarray/roothelper](https://github.com/nullarray/roothelper) 辅助在被攻克系统上的提权过程:自动枚举、下载、解压并执行提权脚本
+- [**341**星][9m] [Py] [iphelix/dnschef](https://github.com/iphelix/dnschef) DNS 代理,用于渗透测试和恶意代码分析
+- [**341**星][2y] [C] [hfiref0x/dsefix](https://github.com/hfiref0x/dsefix) Windows x64 Driver Signature Enforcement Overrider
+- [**341**星][3y] [Py] [fengxuangit/fox-scan](https://github.com/fengxuangit/fox-scan) Fox-scan is a initiative and passive SQL Injection vulnerable Test tools.
+- [**341**星][5d] [Py] [darryllane/bluto](https://github.com/darryllane/bluto) DNS Recon | Brute Forcer | DNS Zone Transfer | DNS Wild Card Checks | DNS Wild Card Brute Forcer | Email Enumeration | Staff Enumeration | Compromised Account Checking
+- [**341**星][26d] [D] [cybershadow/rabcdasm](https://github.com/cybershadow/rabcdasm) Robust ABC (ActionScript Bytecode) [Dis-]Assembler
+- [**341**星][2y] [Py] [c0ny1/xxe-lab](https://github.com/c0ny1/xxe-lab) 一个包含php,java,python,C#等各种语言版本的XXE漏洞Demo
+- [**340**星][1m] [veracode-research/solr-injection](https://github.com/veracode-research/solr-injection) Apache Solr Injection Research
+- [**340**星][3m] [C] [thorkill/eresi](https://github.com/thorkill/eresi) The ERESI Reverse Engineering Software Interface
+- [**340**星][5m] [C] [theofficialflow/trinity](https://github.com/theofficialflow/trinity) Trinity Exploit - Emulator Escape
+- [**340**星][6m] [teoseller/osquery-attck](https://github.com/teoseller/osquery-attck) Mapping the MITRE ATT&CK Matrix with Osquery
+- [**340**星][4m] [Py] [stamusnetworks/scirius](https://github.com/stamusnetworks/scirius) Scirius is a web application for Suricata ruleset management.
+- [**340**星][2m] [softwareunderground/awesome-open-geoscience](https://github.com/softwareunderground/awesome-open-geoscience) Curated from repositories that make our lives as geoscientists, hackers and data wranglers easier or just more awesome
+- [**340**星][2y] [slowmist/eos-bp-nodes-security-checklist](https://github.com/slowmist/eos-bp-nodes-security-checklist) EOS超级节点安全执行指南
+- [**340**星][2y] [Py] [securityinnovation/authmatrix](https://github.com/securityinnovation/authmatrix) AuthMatrix is a Burp Suite extension that provides a simple way to test authorization in web applications and web services.
+- [**340**星][2y] [Go] [rapidloop/vlan-nats](https://github.com/rapidloop/vlan-nats) 使用 NATS 创建的虚拟 LAN
+- [**340**星][2d] [Py] [qwj/python-proxy](https://github.com/qwj/python-proxy) HTTP/Socks4/Socks5/Shadowsocks/ShadowsocksR/SSH/Redirect/Pf TCP/UDP asynchronous tunnel proxy implemented in Python 3 asyncio.
+- [**340**星][2d] [Py] [qilingframework/qiling](https://github.com/qilingframework/qiling) Qiling Advanced Binary Emulation framework
+- [**340**星][2y] [Py] [pathetiq/burpsmartbuster](https://github.com/pathetiq/burpsmartbuster) A Burp Suite content discovery plugin that add the smart into the Buster!
+- [**340**星][1m] [Py] [leitbogioro/ssr.go](https://github.com/leitbogioro/ssr.go) A new shadowsocksR config manager
+- [**340**星][2m] [JS] [dns-oarc/packetq](https://github.com/dns-oarc/packetq) A tool that provides a basic SQL-frontend to PCAP-files
+- [**340**星][2y] [Py] [bugscanteam/githack](https://github.com/bugscanteam/githack) .git 泄漏利用工具,可还原历史版本
+- [**340**星][11m] [C] [blendin/3snake](https://github.com/blendin/3snake) reads memory from sshd and sudo system calls that handle password based authentication
+- [**340**星][1m] [veracode-research/solr-injection](https://github.com/veracode-research/solr-injection) Apache Solr注入研究
+- [**340**星][2m] [Ruby] [anaynayak/aws-security-viz](https://github.com/anaynayak/aws-security-viz) Visualize your aws security groups.
+- [**339**星][1y] [C++] [qax-a-team/eventcleaner](https://github.com/QAX-A-Team/EventCleaner) A tool mainly to erase specified records from Windows event logs, with additional functionalities.
+- [**339**星][5y] [JS] [yndi/darkjpeg](https://github.com/yndi/darkjpeg) JPEG steganography web service
+- [**339**星][2m] [C] [trailofbits/cb-multios](https://github.com/trailofbits/cb-multios) DARPA Challenges Sets for Linux, Windows, and macOS
+- [**339**星][1y] [Py] [tophanttechnology/osprey](https://github.com/tophanttechnology/osprey) 由TCC(斗象能力中心)出品并长期维护的开源漏洞检测框架
+- [**339**星][1y] [Java] [rub-nds/ws-attacker](https://github.com/rub-nds/ws-attacker) Web服务渗透测试框架,模块化。
+- [**339**星][11m] [Py] [joxeankoret/nightmare](https://github.com/joxeankoret/nightmare) A distributed fuzzing testing suite with web administration
+- [**339**星][11m] [JS] [gabemarshall/brosec](https://github.com/gabemarshall/brosec) Brosec - An interactive reference tool to help security professionals utilize useful payloads and commands.
+- [**339**星][10d] [Py] [1120362990/vulnerability-list](https://github.com/1120362990/vulnerability-list) 在渗透测试中快速检测常见中间件、组件的高危漏洞。
+- [**338**星][2d] [Go] [v2ray/domain-list-community](https://github.com/v2ray/domain-list-community) Community managed domain list
+- [**338**星][28d] [Shell] [umputun/nginx-le](https://github.com/umputun/nginx-le) Nginx with automatic let's encrypt (docker image)
+- [**338**星][1y] [Ruby] [srcclr/commit-watcher](https://github.com/srcclr/commit-watcher) Find interesting and potentially hazardous commits in git projects
+- [**338**星][2y] [Py] [pepitoh/vbad](https://github.com/pepitoh/vbad) VBA Obfuscation Tools combined with an MS office document generator
+- [**338**星][2m] [PHP] [opsxcq/exploit-cve-2016-10033](https://github.com/opsxcq/exploit-cve-2016-10033) PHPMailer < 5.2.18 Remote Code Execution exploit and vulnerable container
+- [**338**星][2y] [C] [natebrune/silk-guardian](https://github.com/natebrune/silk-guardian) << Silk Guardian >> is an anti-forensic kill-switch that waits for a change on your usb ports and then wipes your ram, deletes precious files, and turns off your computer.
+- [**338**星][4y] [PS] [kevin-robertson/tater](https://github.com/kevin-robertson/tater) Tater is a PowerShell implementation of the Hot Potato Windows Privilege Escalation exploit from
+- [**338**星][5m] [Py] [initstring/passphrase-wordlist](https://github.com/initstring/passphrase-wordlist) Passphrase wordlist and hashcat rules for offline cracking of long, complex passwords
+- [**338**星][7m] [C] [git-hulk/tcpkit](https://github.com/git-hulk/tcpkit) A tool analyzes tcp packets with Lua
+- [**338**星][3d] [Ruby] [cyberark/conjur](https://github.com/cyberark/conjur) CyberArk Conjur automatically secures secrets used by privileged users and machine identities
+- [**338**星][3y] [C#] [ben0xa/nps](https://github.com/ben0xa/nps) 不用PowerShell.exe执行PowerShell指令
+- [**338**星][3m] [Py] [alexmojaki/snoop](https://github.com/alexmojaki/snoop) A powerful set of Python debugging tools, based on PySnooper
+- [**337**星][4m] [C] [merces/pev](https://github.com/merces/pev) The PE file analysis toolkit
+- [**337**星][2y] [C] [mbevand/silentarmy](https://github.com/mbevand/silentarmy) Zcash miner optimized for AMD & Nvidia GPUs
+- [**337**星][4d] [C] [lemire/code-used-on-daniel-lemire-s-blog](https://github.com/lemire/code-used-on-daniel-lemire-s-blog) This is a repository for the code posted on my blog
+- [**337**星][8m] [Py] [dirkjanm/ldapdomaindump](https://github.com/dirkjanm/ldapdomaindump) Active Directory information dumper via LDAP
+- [**336**星][6d] [Java] [sap/vulnerability-assessment-tool](https://github.com/sap/vulnerability-assessment-tool) Analyses your Java and Python applications for open-source dependencies with known vulnerabilities, using both static analysis and testing to determine code context and usage for greater accuracy.
+- [**336**星][6y] [C] [orangetw/tsh](https://github.com/orangetw/tsh) Tiny SHell is an open-source UNIX backdoor.
+- [**336**星][6m] [Py] [fbkcs/thunderdns](https://github.com/fbkcs/thunderdns) 使用DNS协议转发TCP流量. Python编写, 无需编译客户端, 支持socks5
+- [**336**星][3m] [Java] [denimgroup/threadfix](https://github.com/denimgroup/threadfix) 软件漏洞汇总和管理系统,可帮助组织汇总漏洞数据,生成虚拟补丁,并与软件缺陷跟踪系统进行交互
+- [**336**星][4y] [HTML] [cxxr/lostpass](https://github.com/cxxr/lostpass) Pixel-perfect LastPass phishing
+- [**336**星][3y] [Shell] [0xm3r/cgpwn](https://github.com/0xm3r/cgpwn) A lightweight VM for hardware hacking, RE (fuzzing, symEx, exploiting etc) and wargaming tasks
+- [**335**星][29d] [stardustsky/saidict](https://github.com/stardustsky/saidict) 弱口令,敏感目录,敏感文件等渗透测试常用攻击字典
+
+- [**335**星][4m] [Py] [chris408/ct-exposer](https://github.com/chris408/ct-exposer) An OSINT tool that discovers sub-domains by searching Certificate Transparency logs
+- [**335**星][3d] [Py] [artisan-roaster-scope/artisan](https://github.com/artisan-roaster-scope/artisan) helps coffee roasters record, analyze, and control roast profiles
+- [**335**星][2y] [PS] [arno0x/powershellscripts](https://github.com/arno0x/powershellscripts) Collection of PowerShell scripts
+- [**334**星][3m] [Py] [romanz/trezor-agent](https://github.com/romanz/trezor-agent) Hardware-based SSH/PGP agent
+- [**334**星][2m] [Py] [raikia/uhoh365](https://github.com/raikia/uhoh365) A script that can see if an email address is valid in Office365 (user/email enumeration). This does not perform any login attempts, is unthrottled, and is incredibly useful for social engineering assessments to find which emails exist and which don't.
+- [**334**星][3y] [Py] [nccgroup/abptts](https://github.com/nccgroup/abptts) TCP tunneling over HTTP/HTTPS for web application servers
+- [**334**星][3d] [JS] [meituan-dianping/lyrebird](https://github.com/meituan-dianping/lyrebird) 基于拦截以及模拟HTTP/HTTPS网络请求的面向移动应用的插件化测试工作台
+- [**334**星][2d] [Shell] [loyess/shell](https://github.com/loyess/shell) Shadowsocks-libev with plugins one-click installation. For example: v2ray-plugin, kcptun, simple-obfs, goquiet, cloak...
+- [**334**星][2y] [C#] [foxglovesec/rottenpotato](https://github.com/foxglovesec/rottenpotato) RottenPotato local privilege escalation from service account to SYSTEM
+- [**333**星][9d] [TeX] [radareorg/radare2book](https://github.com/radareorg/radare2book) Radare2 official book
+- [**333**星][2y] [HTML] [superkieran/wooyundrops](https://github.com/superkieran/wooyundrops) Wooyun知识库,乌云知识库,
+- [**333**星][1y] [C++] [rv8-io/rv8](https://github.com/rv8-io/rv8) RISC-V simulator for x86-64
+- [**333**星][8m] [Py] [rek7/fireelf](https://github.com/rek7/fireelf) Fileless Linux Malware Framework
+- [**333**星][4m] [Py] [rbsec/dnscan](https://github.com/rbsec/dnscan) a python wordlist-based DNS subdomain scanner.
+- [**333**星][7m] [Dockerfile] [mykings/docker-vulnerability-environment](https://github.com/mykings/docker-vulnerability-environment) Use the docker to build a vulnerability environment
+- [**333**星][9m] [JS] [mhzed/wstunnel](https://github.com/mhzed/wstunnel) tunnel over websocket
+- [**333**星][6d] [PS] [mgeeky/penetration-testing-tools](https://github.com/mgeeky/penetration-testing-tools) A collection of my Penetration Testing scripts, tools, cheatsheets collected over years, used during real-world assignments or collected from various good quality sources.
+- [**333**星][12m] [Py] [mdsecactivebreach/linkedint](https://github.com/mdsecactivebreach/linkedint) A LinkedIn scraper for reconnaissance during adversary simulation
+- [**333**星][8d] [C] [mattiwatti/efiguard](https://github.com/mattiwatti/efiguard) Disable PatchGuard and DSE at boot time
+- [**333**星][3y] [Py] [jandre/safe-commit-hook](https://github.com/jandre/safe-commit-hook) pre-commit hook for Git that checks for suspicious files.
+- [**332**星][1y] [Py] [leapsecurity/inspy](https://github.com/leapsecurity/InSpy) A python based LinkedIn enumeration tool
+- [**332**星][11d] [Go] [unixpickle/gobfuscate](https://github.com/unixpickle/gobfuscate) Obfuscate Go binaries and packages
+- [**332**星][2d] [Coq] [symbiflow/prjxray](https://github.com/symbiflow/prjxray) Documenting the Xilinx 7-series bit-stream format.
+- [**332**星][8m] [Py] [romanvm/python-web-pdb](https://github.com/romanvm/python-web-pdb) Web-based remote UI for Python's PDB debugger
+- [**332**星][1y] [Ruby] [packetfu/packetfu](https://github.com/packetfu/packetfu) 数据包篡改工具。Ruby语言编写。
+- [**332**星][7m] [offensive-security/kali-linux-recipes](https://github.com/offensive-security/kali-linux-recipes) Kali Linux Recipes
+- [**332**星][12m] [Py] [joxeankoret/pigaios](https://github.com/joxeankoret/pigaios) A tool for matching and diffing source codes directly against binaries.
+- [**332**星][5y] [Py] [graydon/bors](https://github.com/graydon/bors) Integration robot for buildbot and github
+- [**332**星][6d] [Java] [datatheorem/trustkit-android](https://github.com/datatheorem/trustkit-android) Easy SSL pinning validation and reporting for Android.
+- [**332**星][3y] [Logos] [bishopfox/ispy](https://github.com/bishopfox/ispy) A reverse engineering framework for iOS
+- [**332**星][11m] [c] [tildeslash/monit](https://bitbucket.org/tildeslash/monit)
+- [**331**星][7m] [Py] [s0md3v/jshell](https://github.com/s0md3v/JShell) JShell - Get a JavaScript shell with XSS.
+- [**331**星][7m] [C] [wbenny/injdrv](https://github.com/wbenny/injdrv) proof-of-concept Windows Driver for injecting DLL into user-mode processes using APC
+- [**331**星][6y] [JS] [toolness/security-adventure](https://github.com/toolness/security-adventure) Go on an educational Web security adventure!
+- [**331**星][5m] [Go] [sysdream/hershell](https://github.com/sysdream/hershell) Go 语言编写的反向 Shell
+- [**331**星][1y] [snyk/vulnerabilitydb](https://github.com/snyk/vulnerabilitydb) Snyk's public vulnerability database
+- [**331**星][2y] [Py] [sgayou/medfusion-4000-research](https://github.com/sgayou/medfusion-4000-research) Medfusion 4000 security research & a MQX RCE.
+- [**331**星][1m] [C] [pwarren/rtl-entropy](https://github.com/pwarren/rtl-entropy) An entropy generator using SDR peripherals, including rtl-sdr and BladeRF
+- [**331**星][9m] [C] [olimex/diy-laptop](https://github.com/olimex/diy-laptop) Do It Yourself Open Source Hardware and Software Modular Hacker's Friendly Laptop
+- [**331**星][1m] [Java] [nationalsecurityagency/timely](https://github.com/nationalsecurityagency/timely) Accumulo backed time series database
+- [**331**星][1y] [Py] [flipkart-incubator/rta](https://github.com/flipkart-incubator/rta) Red team Arsenal - An intelligent scanner to detect security vulnerabilities in company's layer 7 assets.
+- [**331**星][7y] [Java] [brutall/brut.apktool](https://github.com/brutall/brut.apktool) A tool for reverse engineering Android apk files
+- [**331**星][29d] [Jupyter Notebook] [beeva/beeva-best-practices](https://github.com/beeva/beeva-best-practices) Best Practices and Style Guides in BEEVA
+- [**330**星][3y] [C++] [xilun/cbwin](https://github.com/xilun/cbwin) Launch Windows programs from "Bash on Ubuntu on Windows" (WSL)
+- [**330**星][1y] [Py] [vmware/liota](https://github.com/vmware/liota)
+- [**330**星][2d] [C] [spurious/sdl-mirror](https://github.com/spurious/sdl-mirror) An unofficial, automated SDL2 and SDL1.2 HG mirror.
+- [**330**星][4m] [C++] [safebreach-labs/pinjectra](https://github.com/safebreach-labs/pinjectra) Pinjectra is a C/C++ OOP-like library that implements Process Injection techniques (with focus on Windows 10 64-bit)
+- [**330**星][7m] [Java] [jaegertracing/jaeger-kubernetes](https://github.com/jaegertracing/jaeger-kubernetes) Support for deploying Jaeger into Kubernetes
+- [**330**星][10m] [C#] [ghostpack/sharpdump](https://github.com/ghostpack/sharpdump) SharpDump is a C# port of PowerSploit's Out-Minidump.ps1 functionality.
+- [**330**星][1m] [Py] [daniestevez/gr-satellites](https://github.com/daniestevez/gr-satellites) GNU Radio decoders for several Amateur satellites
+- [**330**星][2y] [Py] [cyberheartmi9/cve-2017-12617](https://github.com/cyberheartmi9/cve-2017-12617) Apache Tomcat < 9.0.1 (Beta) / < 8.5.23 / < 8.0.47 / < 7.0.8 - JSP Upload Bypass / Remote Code Execution
+- [**330**星][4m] [Go] [capsule8/capsule8](https://github.com/capsule8/capsule8) 对云本地,容器和传统的基于 Linux 的服务器执行高级的行为监控
+- [**330**星][5y] [Py] [byt3bl33d3r/pth-toolkit](https://github.com/byt3bl33d3r/pth-toolkit) Modified version of the passing-the-hash tool collection made to work straight out of the box
+- [**330**星][15d] [JS] [auth0/repo-supervisor](https://github.com/auth0/repo-supervisor) Serverless工具,在pull请求中扫描源码,搜索密码及其他秘密
+- [**329**星][3y] [Java] [seven456/safewebview](https://github.com/seven456/safewebview) Android Safe WebView、解决WebView的Js对象注入漏洞、支持网页将JS函数(function)传到Java层,方便回调;
+- [**329**星][1y] [C++] [polidea/siriusobfuscator](https://github.com/polidea/siriusobfuscator) a tool for performing source-to-source obfuscation of Swift projects
+- [**329**星][3m] [Py] [pfalcon/scratchabit](https://github.com/pfalcon/scratchabit) 交互式反汇编工具, 有与IDAPython兼容的插件API
+- [**329**星][4y] [C#] [koczkatamas/cve-2016-0051](https://github.com/koczkatamas/cve-2016-0051) EoP (Win7) & BSoD (Win10) PoC for CVE-2016-0051 (MS-016)
+- [**329**星][5m] [Py] [knipknap/exscript](https://github.com/knipknap/exscript) A Python module making Telnet and SSH easy
+- [**329**星][3y] [Visual Basic .NET] [khr0x40sh/macroshop](https://github.com/khr0x40sh/macroshop) Collection of scripts to aid in delivering payloads via Office Macros. Most are python. See
+- [**329**星][10m] [Py] [justicerage/freedomfighting](https://github.com/justicerage/freedomfighting) A collection of scripts which may come in handy during your freedom fighting activities.
+- [**329**星][5d] [Java] [jaegertracing/jaeger-client-java](https://github.com/jaegertracing/jaeger-client-java) Jaeger Bindings for Java OpenTracing API
+- [**329**星][2m] [CSS] [guyoung/captfencoder](https://github.com/guyoung/captfencoder) CaptfEncoder是一款跨平台网络安全工具套件,提供网络安全相关编码转换、古典密码、密码学、特殊编码等工具,并聚合各类在线工具。
+- [**329**星][2d] [Java] [bit4woo/knife](https://github.com/bit4woo/knife) A burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅
+- [**329**星][1y] [Shell] [1n3/goohak](https://github.com/1n3/goohak) Automatically Launch Google Hacking Queries Against A Target Domain
+- [**328**星][7m] [TS] [plasma-umass/bleak](https://github.com/plasma-umass/bleak) BLeak: Automatically Debugging Memory Leaks in Web Applications
+- [**328**星][2d] [stamparm/ipsum](https://github.com/stamparm/ipsum) Daily feed of bad IPs (with blacklist hit scores)
+- [**328**星][1y] [JS] [shmakov/honeypot](https://github.com/shmakov/honeypot) Low interaction honeypot that displays real time attacks
+- [**328**星][3y] [Pascal] [malwares/remote-access-trojan](https://github.com/malwares/remote-access-trojan) Windows Remote-Access-Trojan
+- [**328**星][2y] [C#] [liberxue/wechatyunchart](https://github.com/liberxue/wechatyunchart) 微信多开多账号机器人 云客服系统 微商营销 系统web协议一键登录 非公众号微信机器人微信群管家 微信自动回复 微信定时发送消息 微信多账号登录 微信网页版本协议多开 一键登录 红包数量提醒 微信用户识别男女签名备注地理位置等,群发 自动发消息 定时发消息 群消息监控 机器人回复 ,定时回复,超时回复 聊天记录保存,聊天记录查看
+- [**328**星][3y] [Py] [faizann24/fwaf-machine-learning-driven-web-application-firewall](https://github.com/faizann24/fwaf-machine-learning-driven-web-application-firewall) 机器学习驱动的WAF,可高精度检测恶意查询
+- [**328**星][12d] [Py] [efforg/starttls-everywhere](https://github.com/efforg/starttls-everywhere) A system for ensuring & authenticating STARTTLS encryption between mail servers
+- [**328**星][11m] [C] [e-ago/bitcracker](https://github.com/e-ago/bitcracker) BitLocker密码破解器
+- [**328**星][3m] [Py] [defaultnamehere/cookie_crimes](https://github.com/defaultnamehere/cookie_crimes) Read local Chrome cookies without root or decrypting
+- [**328**星][4m] [C] [csete/gpredict](https://github.com/csete/gpredict) a real time satellite tracking and orbit prediction program
+for the Linux desktop
+- [**328**星][1m] [TS] [algolia/hn-search](https://github.com/algolia/hn-search) Hacker News Search
+- [**327**星][16d] [Py] [datadriventests/ddt](https://github.com/datadriventests/ddt) Data-Driven Tests for Python Unittest
+- [**327**星][3m] [Shell] [vanhoefm/modwifi](https://github.com/vanhoefm/modwifi)
+- [**327**星][15d] [Java] [spring-cloud/spring-cloud-openfeign](https://github.com/spring-cloud/spring-cloud-openfeign) Support for using OpenFeign in Spring Cloud apps
+- [**327**星][1m] [C] [royhills/arp-scan](https://github.com/royhills/arp-scan) The ARP Scanner
+- [**327**星][3y] [JS] [qgy18/pangolin](https://github.com/qgy18/pangolin) A light weight http tunnels to localhost.
+- [**327**星][4y] [JS] [pwnsdx/randomdns](https://github.com/pwnsdx/randomdns) improve the security, privacy and anonymity of DNSCrypt
+- [**327**星][6m] [Go] [nhoya/gosint](https://github.com/nhoya/gosint) OSINT Swiss Army Knife
+- [**327**星][30d] [Py] [m8r0wn/nullinux](https://github.com/m8r0wn/nullinux) SMB null 会话识别和枚举工具
+- [**327**星][2m] [PS] [joelgmsec/autordpwn](https://github.com/joelgmsec/autordpwn) The Shadow Attack Framework
+- [**327**星][9d] [Py] [fireeye/stringsifter](https://github.com/fireeye/stringsifter) A machine learning tool that automatically ranks strings based on their relevance for malware analysis.
+- [**327**星][3y] [Ruby] [antisnatchor/phishlulz](https://github.com/antisnatchor/phishlulz)
+- [**326**星][22d] [Go] [square/sharkey](https://github.com/square/sharkey) Sharkey is a service for managing certificates for use by OpenSSH
+- [**326**星][10m] [Py] [samhaxr/hackbox](https://github.com/samhaxr/hackbox) 集合了某些Hacking工具和技巧的攻击工具
+- [**326**星][9m] [pxlpnk/awesome-ruby-security](https://github.com/pxlpnk/awesome-ruby-security) Awesome Ruby Security resources
+- [**326**星][2d] [Batchfile] [mitchellkrogza/ultimate.hosts.blacklist](https://github.com/mitchellkrogza/ultimate.hosts.blacklist) The Ultimate Unified Hosts file for protecting your network, computer, smartphones and Wi-Fi devices against millions of bad web sites. Protect your children and family from gaining access to bad web sites and protect your devices and pc from being infected with Malware or Ransomware.
+- [**326**星][2y] [Java] [mar-v-in/arthook](https://github.com/mar-v-in/arthook) Library for hooking on ART
+- [**326**星][3m] [Shell] [extremeshok/clamav-unofficial-sigs](https://github.com/extremeshok/clamav-unofficial-sigs) ClamAV Unofficial Signatures Updater maintained by eXtremeSHOK.com
+- [**326**星][6y] [C] [diegocr/netcat](https://github.com/diegocr/netcat) NetCat for Windows
+- [**326**星][4m] [C++] [cedarctic/digispark-scripts](https://github.com/cedarctic/digispark-scripts) USB Rubber Ducky type scripts written for the DigiSpark.
+- [**326**星][2y] [Py] [baldassarrefe/deep-koalarization](https://github.com/baldassarrefe/deep-koalarization) Keras/Tensorflow implementation of our paper Grayscale Image Colorization using deep CNN and Inception-ResNet-v2 (
+- [**325**星][27d] [C++] [secure-software-engineering/phasar](https://github.com/secure-software-engineering/phasar) A LLVM-based static analysis framework.
+- [**325**星][2m] [C] [xelerance/xl2tpd](https://github.com/xelerance/xl2tpd) an implementation of the Layer 2 Tunnelling Protocol (RFC 2661)
+- [**325**星][3m] [Py] [vulmon/vulmap](https://github.com/vulmon/vulmap) Vulmap Online Local Vulnerability Scanners Project
+- [**325**星][3d] [PHP] [scheb/two-factor-bundle](https://github.com/scheb/two-factor-bundle) Two-factor authentication for Symfony applications
+- [**325**星][5m] [Go] [saturnsvoid/gobot2](https://github.com/saturnsvoid/gobot2) Second Version of The GoBot Botnet, But more advanced.
+- [**325**星][3y] [Shell] [nsakey/nsa-rules](https://github.com/nsakey/nsa-rules) Password cracking rules and masks for hashcat that I generated from cracked passwords.
+- [**325**星][3y] [mikesiko/practicalmalwareanalysis-labs](https://github.com/mikesiko/practicalmalwareanalysis-labs) Binaries for the book Practical Malware Analysis
+- [**325**星][2y] [TeX] [ivyl/rootkit](https://github.com/ivyl/rootkit) Sample Rootkit for Linux
+- [**325**星][6d] [Py] [initstring/linkedin2username](https://github.com/initstring/linkedin2username) Generate username lists for companies on LinkedIn
+- [**324**星][1y] [Java] [ysrc/liudao](https://github.com/ysrc/liudao) “六道”实时业务风控系统
+- [**324**星][11m] [Py] [secwiki/office-exploits](https://github.com/secwiki/office-exploits) office-exploits Office漏洞集合
+- [**324**星][2y] [Rust] [pravic/winapi-kmd-rs](https://github.com/pravic/winapi-kmd-rs) Rust编写的Windows内核模式驱动
+- [**324**星][1y] [JS] [nccgroup/wssip](https://github.com/nccgroup/wssip) 服务器和客户端之间通信时自定义 WebSocket 数据的捕获、修改和发送。
+- [**324**星][8m] [Py] [jasonstrimpel/volatility-trading](https://github.com/jasonstrimpel/volatility-trading) A complete set of volatility estimators based on Euan Sinclair's Volatility Trading
+- [**324**星][5y] [C] [ioerror/tlsdate](https://github.com/ioerror/tlsdate) secure parasitic rdate replacement
+- [**324**星][5m] [JS] [hr/crypter](https://github.com/hr/crypter) An innovative, convenient and secure cross-platform encryption app
+- [**324**星][11m] [Py] [alessandroz/lazagneforensic](https://github.com/alessandroz/lazagneforensic) Windows passwords decryption from dump files
+- [**323**星][9d] [PS] [fortynorthsecurity/egress-assess](https://github.com/FortyNorthSecurity/Egress-Assess) Egress-Assess is a tool used to test egress data detection capabilities
+- [**323**星][29d] [Shell] [zmarch/orc](https://github.com/zmarch/orc) Orc is a post-exploitation framework for Linux written in Bash
+- [**323**星][3y] [C] [vusec/revanc](https://github.com/vusec/revanc) Reverse Engineering Page Table Caches in Your Processor
+- [**323**星][10m] [QMake] [ncatlin/rgat](https://github.com/ncatlin/rgat) 指令追踪可视化, 辅助建立目标行为和代码之间的连接.
+- [**323**星][3y] [Py] [ius/rsatool](https://github.com/ius/rsatool) rsatool can be used to calculate RSA and RSA-CRT parameters
+- [**323**星][21d] [Py] [atc-project/atomic-threat-coverage](https://github.com/atc-project/atomic-threat-coverage) Actionable analytics designed to combat threats based on MITRE's ATT&CK.
+- [**322**星][3d] [HTML] [tanjiti/sec_profile](https://github.com/tanjiti/sec_profile) 爬取secwiki和xuanwu.github.io/sec.today,分析安全信息站点、安全趋势、提取安全工作者账号(twitter,weixin,github等)
+- [**322**星][1y] [C] [smartdone/dexdump](https://github.com/smartdone/dexdump) 一个用来快速脱一代壳的工具(稍微改下就可以脱类抽取那种壳)(Android)
+- [**322**星][2m] [ObjC] [auth0/simplekeychain](https://github.com/auth0/simplekeychain) A Keychain helper for iOS to make it very simple to store/obtain values from iOS Keychain
+- [**322**星][1y] [C++] [alicanakyol/sems](https://github.com/alicanakyol/sems) Virtualbox, VirtualMachine, Cuckoo, Anubis, ThreatExpert, Sandboxie, QEMU, Analysis Tools Detection Tools
+- [**321**星][4y] [Py] [ztrix/zio](https://github.com/ztrix/zio) easy-to-use io library for pwning development, supporting an unified interface for local process pwning and TCP socket io
+- [**321**星][7m] [C#] [yalcinyolalan/wssat](https://github.com/yalcinyolalan/wssat) web service security scanning tool which provides a dynamic environment to add, update or delete vulnerabilities by just editing its configuration files
+- [**321**星][4y] [Perl] [truongkma/ctf-tools](https://github.com/truongkma/ctf-tools) tổng hợp tool ctf
+- [**321**星][1m] [Go] [tomnomnom/assetfinder](https://github.com/tomnomnom/assetfinder) Find domains and subdomains related to a given domain
+- [**321**星][2y] [PHP] [tanjiti/webshellsample](https://github.com/tanjiti/webshellsample) webshell sample for WebShell Log Analysis
+- [**321**星][2y] [Kotlin] [ollide/intellij-java2smali](https://github.com/ollide/intellij-java2smali) A plugin for IntelliJ IDEA & Android Studio to easily compile Java & Kotlin files to smali.
+- [**321**星][3m] [PS] [kmkz/pentesting](https://github.com/kmkz/pentesting) 渗透测试技巧
+- [**321**星][8d] [C] [google/safeside](https://github.com/google/safeside) Understand and mitigate software-observable side-channels
+- [**321**星][24d] [C] [dyninst/dyninst](https://github.com/dyninst/dyninst) Tools for binary instrumentation, analysis, and modification.
+- [**320**星][22d] [Py] [mr-un1k0d3r/scshell](https://github.com/mr-un1k0d3r/scshell) Fileless lateral movement tool that relies on ChangeServiceConfigA to run command
+- [**320**星][3m] [Solidity] [provable-things/ethereum-examples](https://github.com/provable-things/ethereum-examples) Code examples showing how to use the Provable API on Ethereum
+- [**320**星][9m] [JS] [zyszys/awesome-captcha](https://github.com/zyszys/awesome-captcha)
+- [**320**星][2d] [Py] [vector35/binaryninja-api](https://github.com/vector35/binaryninja-api) Public API, examples, documentation and issues for Binary Ninja
+- [**320**星][2m] [Py] [owasp/owasp-vwad](https://github.com/owasp/owasp-vwad) The OWASP Vulnerable Web Applications Directory Project (VWAD) is a comprehensive and well maintained registry of all known vulnerable web applications currently available.
+- [**320**星][12m] [cryin/paper](https://github.com/cryin/paper) Web Security Technology & Vulnerability Analysis Whitepapers
+- [**320**星][2m] [HTML] [coinbase/salus](https://github.com/coinbase/salus) Security scanner coordinator
+- [**319**星][3m] [xsleaks/xsleaks](https://github.com/xsleaks/xsleaks) A collection of browser-based side channel attack vectors.
+- [**319**星][27d] [Go] [wangyihang/platypus](https://github.com/wangyihang/platypus) A modern multiple reverse shell sessions/clients manager via terminal written in go
+- [**319**星][7d] [C#] [tmoonlight/nsmartproxy](https://github.com/tmoonlight/nsmartproxy) NSmartProxy是一款开源免费的内网穿透工具。采用.NET CORE的全异步模式打造。(NSmartProxy is an open source reverse proxy tool that creates a secure tunnel from a public endpoint to a locally service.)
+- [**319**星][27d] [C++] [silverf0x/rpcview](https://github.com/silverf0x/rpcview) RpcView is a free tool to explore and decompile Microsoft RPC interfaces
+- [**319**星][1y] [Py] [securing/dumpsterdiver](https://github.com/securing/dumpsterdiver) Tool to search secrets in various filetypes.
+- [**319**星][4m] [HTML] [intezer/linux-explorer](https://github.com/intezer/linux-explorer) 针对Linux 系统的现场取证工具箱. Web 界面, 简单易用
+- [**319**星][1m] [C] [hfiref0x/syscalltables](https://github.com/hfiref0x/syscalltables) Windows NT x64系统调用表
+- [**319**星][2y] [ObjC] [doadam/ziva](https://github.com/doadam/ziva) An iOS kernel exploit designated to work on all iOS devices <= 10.3.1
+- [**319**星][13d] [cryptax/confsec](https://github.com/cryptax/confsec) Security, hacking conferences (list)
+- [**319**星][24d] [Py] [census/shadow](https://github.com/census/shadow) jemalloc heap exploitation framework
+- [**319**星][2m] [Py] [admintony/svnexploit](https://github.com/admintony/svnexploit) SvnExploit支持SVN源代码泄露全版本Dump源码
+- [**319**星][9m] [Py] [a2u/cve-2018-7600](https://github.com/a2u/cve-2018-7600)
+- [**318**星][20d] [trustedsec/physical-docs](https://github.com/trustedsec/physical-docs) This is a collection of legal wording and documentation used for physical security assessments. The goal is to hopefully allow this as a template for other companies to use and to protect themselves when conducting physical security assessments.
+- [**318**星][1y] [Ruby] [carletonstuberg/browser-backdoor](https://github.com/CarletonStuberg/browser-backdoor) BrowserBackdoor is an Electron Application with a JavaScript WebSocket Backdoor and a Ruby Command-Line Listener
+- [**318**星][3d] [Java] [wiglenet/wigle-wifi-wardriving](https://github.com/wiglenet/wigle-wifi-wardriving) Nethugging client for Android, from wigle.net
+- [**318**星][1y] [C#] [spiderlabs/dohc2](https://github.com/spiderlabs/dohc2) DoHC2 allows the ExternalC2 library from Ryan Hanson (
+- [**318**星][3m] [C] [rehints/publications](https://github.com/rehints/publications) Conference slides and White-papers
+- [**318**星][3y] [Py] [j91321/rext](https://github.com/j91321/rext) Router EXploitation Toolkit - small toolkit for easy creation and usage of various python scripts that work with embedded devices.
+- [**318**星][18d] [C] [frida/frida-core](https://github.com/frida/frida-core) Frida core library intended for static linking into bindings
+- [**318**星][2y] [C] [fireeye/rvmi](https://github.com/fireeye/rvmi) steroids 调试器,利用 VMI(Virtual Machine Introspection) 和内存取证来提供全面的系统分析
+- [**318**星][12m] [crazywa1ker/darthsidious-chinese](https://github.com/crazywa1ker/darthsidious-chinese) 从0开始你的域渗透之旅
+- [**318**星][10m] [Py] [cisco-sas/kitty](https://github.com/cisco-sas/kitty) Fuzzing framework written in python
+- [**318**星][7d] [JS] [chichou/bagbak](https://github.com/ChiChou/bagbak) Yet another frida based iOS dumpdecrypted, works on iOS 13 with checkra1n and supports decrypting app extensions
+- [**318**星][2y] [C++] [bastilleresearch/gr-lora](https://github.com/bastilleresearch/gr-lora) GNU Radio OOT module implementing the LoRa PHY, based on
+- [**317**星][2y] [ysrc/f-scrack](https://github.com/ysrc/f-scrack) F-Scrack is a single file bruteforcer supports multi-protocol
+- [**317**星][6m] [Py] [williballenthin/python-idb](https://github.com/williballenthin/python-idb) idb 文件解析和分析工具
+- [**317**星][4m] [JS] [vngkv123/asiagaming](https://github.com/vngkv123/asiagaming) Chrome, Safari Exploitation
+- [**317**星][5y] [shadowsocksr-rm/shadowsocks-rss](https://github.com/shadowsocksr-rm/shadowsocks-rss) ShadowsocksR update rss, SSR organization
+- [**317**星][3y] [C] [sdhand/x11fs](https://github.com/sdhand/x11fs) 操作X windows
+- [**317**星][4m] [push0ebp/sig-database](https://github.com/push0ebp/sig-database) IDA FLIRT Signature Database
+- [**317**星][13d] [JS] [privacypass/challenge-bypass-extension](https://github.com/privacypass/challenge-bypass-extension) 用于匿名认证的浏览器扩展
+- [**317**星][3y] [C++] [pipesocks/pipesocks](https://github.com/pipesocks/pipesocks) A pipe-like SOCKS5 tunnel system.
+- [**317**星][7d] [C] [phaag/nfdump](https://github.com/phaag/nfdump) Netflow processing tools
+- [**317**星][1m] [Visual Basic .NET] [nccgroup/vcg](https://github.com/nccgroup/vcg) Code security scanning tool.
+- [**317**星][2y] [marcan/speculation-bugs](https://github.com/marcan/speculation-bugs) Docs and resources on CPU Speculative Execution bugs
+- [**317**星][1y] [C++] [m0n0ph1/process-hollowing](https://github.com/m0n0ph1/process-hollowing) Great explanation of Process Hollowing (a Technique often used in Malware)
+- [**317**星][5y] [C++] [frida/cryptoshark](https://github.com/frida/cryptoshark) Self-optimizing cross-platform code tracer based on dynamic recompilation
+- [**317**星][2m] [HTML] [eugenekolo/sec-tools](https://github.com/eugenekolo/sec-tools) A set of security related tools
+- [**317**星][3y] [C] [chobits/tapip](https://github.com/chobits/tapip) user-mode TCP/IP stack based on linux tap device
+- [**316**星][6d] [PHP] [anonaddy/anonaddy](https://github.com/anonaddy/anonaddy) Anonymous email forwarding
+- [**316**星][5d] [Java] [spongepowered/mixin](https://github.com/spongepowered/mixin) Mixin is a trait/mixin and bytecode weaving framework for Java using ASM
+- [**316**星][3y] [C] [scumjr/dirtycow-vdso](https://github.com/scumjr/dirtycow-vdso) PoC for Dirty COW (CVE-2016-5195)
+- [**316**星][2m] [C] [ohjeongwook/darungrim](https://github.com/ohjeongwook/darungrim) 软件补丁分析工具
+ - [IDA插件](https://github.com/ohjeongwook/darungrim/tree/master/Src/IDAPlugin)
+ - [DGEngine](https://github.com/ohjeongwook/darungrim/tree/master/Src/DGEngine)
+- [**316**星][7y] [Py] [moxie0/chapcrack](https://github.com/moxie0/chapcrack) A tool for parsing and decrypting MS-CHAPv2 network handshakes
+- [**316**星][3d] [C++] [knxd/knxd](https://github.com/knxd/knxd) a very common building automation protocol which runs on dedicated 9600-baud wire as well as IP multicast
+- [**316**星][1y] [PHP] [grt1st/wooyun_search](https://github.com/grt1st/wooyun_search) 乌云公开漏洞、知识库搜索 search from wooyun.org
+- [**316**星][2y] [Py] [ethventures/cryptotracker](https://github.com/ethventures/cryptotracker) A complete open source system for tracking and visualizing cryptocurrency price movements on leading exchanges
+- [**316**星][8m] [HTML] [ethereum/ethereum-org](https://github.com/ethereum/ethereum-org) [ARCHIVED] Ethereum Foundation website from 2016-2019
+- [**316**星][24d] [C] [ascii-boxes/boxes](https://github.com/ascii-boxes/boxes) Command line ASCII boxes unlimited!
+- [**315**星][11d] [trimstray/technical-whitepapers](https://github.com/trimstray/technical-whitepapers) 收集:IT白皮书、PPT、PDF、Hacking、Web应用程序安全性、数据库、逆向等
+- [**315**星][2y] [Py] [tnich/honssh](https://github.com/tnich/honssh) 记录客户端和服务器之间的所有 SSH 通信
+- [**315**星][1y] [C] [tharina/blackhoodie-2018-workshop](https://github.com/tharina/blackhoodie-2018-workshop) Slides and challenges for my binary exploitation workshop at BlackHoodie 2018.
+- [**315**星][5y] [C] [seastorm/puttyrider](https://github.com/seastorm/puttyrider) Hijack Putty sessions in order to sniff conversation and inject Linux commands.
+- [**315**星][8m] [Py] [n0fate/chainbreaker](https://github.com/n0fate/chainbreaker) Mac OS X Keychain Forensic Tool
+- [**315**星][26d] [Py] [circl/lookyloo](https://github.com/circl/lookyloo) Lookyloo is a web interface allowing to scrape a website and then displays a tree of domains calling each other.
+- [**314**星][1y] [Go] [benjojo/bgp-battleships](https://github.com/benjojo/bgp-battleships) Play battleships using BGP
+- [**314**星][6m] [waylau/vpngate-mirrors](https://github.com/waylau/vpngate-mirrors) Here are the newset VPN Gate web site’s mirrors .With the VPN Gate, you can get through your government's firewall to browse restricted websites.提供最新的访问 VPN Gate 镜像网站,通过使用 VPN 自由访问互联网(翻墙)!
+- [**314**星][5d] [C++] [trailofbits/pe-parse](https://github.com/trailofbits/pe-parse) Principled, lightweight C/C++ PE parser
+- [**314**星][3y] [PHP] [snoopysecurity/dvws](https://github.com/snoopysecurity/dvws) Damn Vulnerable Web Services is an insecure web application with multiple vulnerable web service components that can be used to learn real world web service vulnerabilities.
+- [**314**星][3y] [Py] [saelo/armpwn](https://github.com/saelo/armpwn) Repository to train/learn memory corruption on the ARM platform.
+- [**314**星][7d] [C++] [psi-rockin/dobiestation](https://github.com/psi-rockin/dobiestation) A dog-themed PS2 emulator
+- [**314**星][2y] [PHP] [offensive-security/masscan-web-ui](https://github.com/offensive-security/masscan-web-ui) MASSCAN Web UI
+- [**314**星][5m] [Py] [mvrozanti/rat-via-telegram](https://github.com/mvrozanti/rat-via-telegram) Windows Remote Administration Tool via Telegram
+- [**314**星][12m] [Gherkin] [middleman/middleman-blog](https://github.com/middleman/middleman-blog) Blog Engine Extension
+- [**314**星][4y] [C] [jvinet/knock](https://github.com/jvinet/knock) A port-knocking daemon
+- [**314**星][8m] [JS] [jivesearch/jivesearch](https://github.com/jivesearch/jivesearch) A search engine that doesn't track you.
+- [**314**星][4m] [Py] [hash3lizer/wifibroot](https://github.com/hash3lizer/wifibroot) A WiFi Pentest Cracking tool for WPA/WPA2 (Handshake, PMKID, Cracking, EAPOL, Deauthentication)
+- [**314**星][2y] [PS] [dafthack/powermeta](https://github.com/dafthack/powermeta) PowerMeta searches for publicly available files hosted on various websites for a particular domain by using specially crafted Google, and Bing searches. It then allows for the download of those files from the target domain. After retrieving the files, the metadata associated with them can be analyzed by PowerMeta. Some interesting things commonl…
+- [**314**星][1m] [Shell] [brainfucksec/kalitorify](https://github.com/brainfucksec/kalitorify) Transparent proxy through Tor for Kali Linux OS
+- [**314**星][5m] [Shell] [1n3/reverseapk](https://github.com/1n3/reverseapk) Quickly analyze and reverse engineer Android packages
+- [**313**星][2y] [Py] [sebdah/scrapy-mongodb](https://github.com/sebdah/scrapy-mongodb) MongoDB pipeline for Scrapy. This module supports both MongoDB in standalone setups and replica sets. scrapy-mongodb will insert the items to MongoDB as soon as your spider finds data to extract.
+- [**313**星][2d] [Py] [google/turbinia](https://github.com/google/turbinia) Automation and Scaling of Digital Forensics Tools
+- [**313**星][5d] [Java] [erudika/para](https://github.com/erudika/para) Open source back-end server for web, mobile and IoT. The backend for busy developers. (self-hosted or hosted)
+- [**313**星][10m] [PS] [cyb3rward0g/invoke-attackapi](https://github.com/cyb3rward0g/invoke-attackapi) A PowerShell script to interact with the MITRE ATT&CK Framework via its own API
+- [**313**星][3y] [Py] [chinoogawa/fbht](https://github.com/chinoogawa/fbht) Facebook Hacking Tool
+- [**313**星][10d] [Shell] [al0ne/linuxcheck](https://github.com/al0ne/linuxcheck) linux信息收集/应急响应/常见后门检测脚本
+- [**312**星][3m] [Shell] [zw963/asuswrt-merlin-transparent-proxy](https://github.com/zw963/asuswrt-merlin-transparent-proxy) transparent proxy base on ss, v2ray, ipset, iptables, chinadns on asuswrt merlin.
+- [**312**星][5m] [Java] [shengqi158/fastjson-remote-code-execute-poc](https://github.com/shengqi158/fastjson-remote-code-execute-poc) 直接用intellij IDEA打开即可 首先编译得到Test.class,然后运行Poc.java
+- [**312**星][7m] [C] [pmem/syscall_intercept](https://github.com/pmem/syscall_intercept) Linux系统调用拦截框架,通过 hotpatching 进程标准C库的机器码实现。
+- [**312**星][3m] [Ruby] [owasp/glue](https://github.com/owasp/glue) Application Security Automation
+- [**312**星][2y] [Py] [nneonneo/sha1collider](https://github.com/nneonneo/sha1collider) Build two PDFs that have different content but identical SHA1 sums.
+- [**312**星][21d] [YARA] [needmorecowbell/hamburglar](https://github.com/needmorecowbell/hamburglar) collect useful information from urls, directories, and files
+- [**312**星][23d] [C#] [malware-dev/mdk-se](https://github.com/malware-dev/mdk-se) Malware's Development Kit for SE
+- [**312**星][3d] [Java] [leibnitz27/cfr](https://github.com/leibnitz27/cfr) This is the public repository for the CFR Java decompiler
+- [**312**星][4m] [HTML] [koutto/jok3r](https://github.com/koutto/jok3r) 一个Python3 CLI应用程序,旨在帮助渗透测试人员进行网络基础结构和Web黑盒安全性测试。
+- [**312**星][3y] [C++] [fdiskyou/hunter](https://github.com/fdiskyou/hunter) (l)user hunter using WinAPI calls only
+- [**312**星][3m] [Py] [dpwe/audfprint](https://github.com/dpwe/audfprint) Landmark-based audio fingerprinting
+- [**312**星][5m] [Py] [cisco-talos/mutiny-fuzzer](https://github.com/cisco-talos/mutiny-fuzzer)
+- [**312**星][4m] [TeX] [chronaeon/beigepaper](https://github.com/chronaeon/beigepaper) Rewrite of the Yellowpaper in non-Yellowpaper syntax.
+- [**312**星][1y] [Py] [christophetd/censys-subdomain-finder](https://github.com/christophetd/censys-subdomain-finder) 利用搜索引擎 Censys 提供的 certificate transparency 日志, 实现子域名枚举. (Censys: 搜索联网设备信息的搜索引擎)
+- [**312**星][2y] [C] [caseyscarborough/keylogger](https://github.com/caseyscarborough/keylogger) A no-frills keylogger for Mac OS X.
+- [**312**星][2y] [burntmybagel/oscp-prep](https://github.com/burntmybagel/oscp-prep) A list of the resources I use as I get ready for the exam
+- [**312**星][3y] [Py] [blankwall/macheap](https://github.com/blankwall/macheap) OS X malloc introspection tool
+- [**311**星][6y] [Py] [shadowsocks/shadowdns](https://github.com/shadowsocks/shadowdns) A DNS forwarder using Shadowsocks as the server
+- [**311**星][3m] [PHP] [elfsundae/laravel-hashid](https://github.com/elfsundae/laravel-hashid) Obfuscate your data by generating reversible, non-sequential, URL-safe identifiers.
+- [**311**星][5y] [C] [jenssegers/rtl8188-hostapd](https://github.com/jenssegers/rtl8188-hostapd) hostapd for Realtek RTL8188
+- [**311**星][11d] [HTML] [vanhauser-thc/thc-archive](https://github.com/vanhauser-thc/thc-archive) All releases of the security research group (a.k.a. hackers) The Hacker's Choice
+- [**311**星][1y] [Py] [twelvesec/gasmask](https://github.com/twelvesec/gasmask) Information gathering tool - OSINT
+- [**311**星][8m] [C] [tomac/yersinia](https://github.com/tomac/yersinia) layer 2 攻击框架
+- [**311**星][1y] [Py] [stormshadow07/hacktheworld](https://github.com/stormshadow07/hacktheworld) An Python Script For Generating Payloads that Bypasses All Antivirus so far .
+- [**311**星][1y] [Py] [sharadkumar97/osint-spy](https://github.com/sharadkumar97/osint-spy) Performs OSINT scan on email/domain/ip_address/organization using OSINT-SPY. It can be used by Data Miners, Infosec Researchers, Penetration Testers and cyber crime investigator in order to find deep information about their target. If you want to ask something please feel free to reach out to me at sharad@osint-spy.com
+- [**311**星][8m] [Py] [screetsec/brutesploit](https://github.com/screetsec/brutesploit) BruteSploit is a collection of method for automated Generate, Bruteforce and Manipulation wordlist with interactive shell. That can be used during a penetration test to enumerate and maybe can be used in CTF for manipulation,combine,transform and permutation some words or file text :p
+- [**311**星][2y] [Py] [munki/createosxinstallpkg](https://github.com/munki/createosxinstallpkg) Tools for packaging OS X installers
+- [**311**星][2y] [Shell] [milesrichardson/docker-onion-nmap](https://github.com/milesrichardson/docker-onion-nmap) 使用 nmap 扫描 Tor 隐藏网络的Docker 镜像。基于 alpine,使用proxychains 做 nmap 的包装
+- [**311**星][6y] [TeX] [alobbs/macchanger](https://github.com/alobbs/macchanger) makes the maniputation of MAC addresses of network interfaces easier.
+- [**310**星][3y] [Shell] [screetsec/lalin](https://github.com/screetsec/lalin) this script automatically install any package for pentest with uptodate tools , and lazy command for run the tools like lazynmap , install another and update to new #actually for lazy people hahaha #and Lalin is remake the lazykali with fixed bugs , added new features and uptodate tools . It's compatible with the latest release of Kali (Rolling)
+- [**310**星][4m] [Py] [salesforce/hassh](https://github.com/salesforce/hassh) HASSH is a network fingerprinting standard which can be used to identify specific Client and Server SSH implementations. The fingerprints can be easily stored, searched and shared in the form of a small MD5 fingerprint.
+- [**310**星][3y] [OCaml] [microsoft/slayer](https://github.com/microsoft/slayer) SLAyer is an automatic formal verification tool that uses separation logic to verify memory safety of C programs.
+- [**310**星][3m] [PS] [kevin-robertson/powermad](https://github.com/kevin-robertson/powermad) PowerShell MachineAccountQuota and DNS exploit tools
+- [**310**星][2y] [Py] [ioactive/xdiff](https://github.com/ioactive/xdiff) Extended Differential Fuzzing Framework
+- [**310**星][2y] [C++] [exploitagency/esploitv2](https://github.com/exploitagency/esploitv2) WiFi Keystroke Injection Tool designed for an Atmega 32u4/ESP8266 Paired via Serial (Cactus WHID Firmware). Also features Serial, HTTP, and PASV FTP exfiltration methods and an integrated Credential Harvester Phishing tool called ESPortal.
+- [**310**星][5y] [C++] [dedis/dissent](https://github.com/dedis/dissent) Provably Anonymous Overlay
+- [**310**星][11m] [Ruby] [darkoperator/metasploit-plugins](https://github.com/darkoperator/metasploit-plugins) Plugins for Metasploit Framework
+- [**310**星][3m] [Py] [circl/circlean](https://github.com/circl/circlean) USB key cleaner
+- [**310**星][1y] [1522402210/2018-blackhat-tools-list](https://github.com/1522402210/2018-blackhat-tools-list) 2018 BlackHat Tools List
+- [**309**星][7m] [ring04h/pentest](https://github.com/ring04h/pentest) 渗透测试用到的东东
+
+- [**309**星][2y] [Shell] [kennyn510/wpa2-wordlists](https://github.com/kennyn510/wpa2-wordlists) A collection of wordlists dictionaries for password cracking
+- [**309**星][8m] [Py] [wangyihang/webshell-sniper](https://github.com/wangyihang/webshell-sniper) webshell管理器,命令行工具
+- [**309**星][1y] [Py] [tintinweb/scapy-ssl_tls](https://github.com/tintinweb/scapy-ssl_tls) SSL/TLS layers for scapy the interactive packet manipulation tool
+- [**309**星][3y] [scadastrangelove/scadapass](https://github.com/scadastrangelove/scadapass) SCADA StrangeLove Default/Hardcoded Passwords List
+- [**309**星][4y] [Py] [packetloop/packetpig](https://github.com/packetloop/packetpig) Open Source Big Data Security Analytics
+- [**309**星][7m] [HTML] [nccgroup/crosssitecontenthijacking](https://github.com/nccgroup/crosssitecontenthijacking) Content hijacking proof-of-concept using Flash, PDF and Silverlight
+- [**309**星][21d] [PHP] [nakiami/mellivora](https://github.com/nakiami/mellivora) Mellivora is a CTF engine written in PHP
+- [**309**星][1m] [C] [lordnoteworthy/cpu-internals](https://github.com/lordnoteworthy/cpu-internals) Intel / AMD CPU Internals
+- [**309**星][1y] [PHP] [helloxz/ipinfo](https://github.com/helloxz/ipinfo) 整合多接口的IP查询工具。
+- [**309**星][1y] [Java] [ebryx/aes-killer](https://github.com/ebryx/aes-killer) Burp plugin to decrypt AES Encrypted traffic of mobile apps on the fly
+- [**309**星][2y] [Py] [armbues/ioc_parser](https://github.com/armbues/ioc_parser) Tool to extract indicators of compromise from security reports in PDF format
+- [**308**星][14d] [Py] [ym2011/poc-exp](https://github.com/ym2011/poc-exp) Collecting and writing PoC or EXP for vulnerabilities on some application
+- [**308**星][4y] [Py] [stripe/topmodel](https://github.com/stripe/topmodel) Standard evaluations for binary classifiers so you don't have to
+- [**308**星][3d] [Nim] [status-im/nimbus](https://github.com/status-im/nimbus) an Ethereum 1.0 & 2.0 Client for Resource-Restricted Devices
+- [**308**星][1y] [Java] [s4n7h0/halcyon](https://github.com/s4n7h0/halcyon) First IDE for Nmap Script (NSE) Development.
+- [**308**星][1y] [C++] [nevermoe/unity_metadata_loader](https://github.com/nevermoe/unity_metadata_loader) 将global-metadata.dat中的字符串和方法/类名称加载到IDA
+- [**308**星][2y] [C++] [kirillkovalenko/nssm](https://github.com/kirillkovalenko/nssm) Non-Sucking Service Manager
+- [**308**星][4m] [PS] [enigma0x3/misc-powershell-stuff](https://github.com/enigma0x3/misc-powershell-stuff) random powershell goodness
+- [**308**星][25d] [C#] [ch0pin/aviator](https://github.com/ch0pin/aviator) Antivirus evasion project
+- [**308**星][21d] [PS] [canix1/adaclscanner](https://github.com/canix1/adaclscanner) Repo for ADACLScan.ps1 - Your number one script for ACL's in Active Directory
+- [**308**星][3y] [Py] [bishopfox/spoofcheck](https://github.com/bishopfox/spoofcheck) Simple script that checks a domain for email protections
+- [**308**星][4y] [Py] [arecker/bennedetto](https://github.com/arecker/bennedetto) the turn-based budget
+- [**308**星][5m] [Py] [algo7/bluekeep_cve-2019-0708_poc_to_exploit](https://github.com/algo7/bluekeep_cve-2019-0708_poc_to_exploit) Porting BlueKeep PoC from
+- [**307**星][5m] [C] [sixstars/ctf](https://github.com/sixstars/ctf) A writeup summary for CTF competitions, problems.
+- [**307**星][10d] [Swift] [securing/iossecuritysuite](https://github.com/securing/iossecuritysuite) iOS platform security & anti-tampering Swift library
+- [**307**星][9m] [ObjC] [qhd/anymethodlog](https://github.com/qhd/anymethodlog) Log any method call of object in Objective-C
+- [**307**星][3y] [Ruby] [michenriksen/birdwatcher](https://github.com/michenriksen/birdwatcher) Data analysis and OSINT framework for Twitter
+- [**307**星][5m] [Batchfile] [frizb/windows-privilege-escalation](https://github.com/frizb/windows-privilege-escalation) Windows Privilege Escalation Techniques and Scripts
+- [**306**星][2d] [dnscrypt/dnscrypt-resolvers](https://github.com/dnscrypt/dnscrypt-resolvers) Lists of public DNSCrypt-enabled DNS resolvers
+- [**306**星][2y] [Go] [q2h1cg/dnsbrute](https://github.com/Q2h1Cg/dnsbrute) a fast domain brute tool
+- [**306**星][5m] [Py] [travitch/whole-program-llvm](https://github.com/travitch/whole-program-llvm) A wrapper script to build whole-program LLVM bitcode files
+- [**306**星][2y] [C] [tomwimmenhove/subarufobrob](https://github.com/tomwimmenhove/subarufobrob) 劫持斯巴鲁汽车的钥匙(Subaru's key fob),偷得它连条裤子都不剩
+- [**306**星][2y] [Py] [timsutton/python-macadmin-tools](https://github.com/timsutton/python-macadmin-tools) List of open-source Python-based Mac sysadmin tools
+- [**306**星][2y] [Py] [p1kachu/v0lt](https://github.com/p1kachu/v0lt) Security CTF Toolkit (Not maintained anymore)
+- [**306**星][11d] [C#] [nyan-x-cat/asyncrat-c-sharp](https://github.com/nyan-x-cat/asyncrat-c-sharp) Open-Source Remote Administration Tool For Windows C# (RAT)
+- [**306**星][2y] [C] [nationalsecurityagency/dcp](https://github.com/nationalsecurityagency/dcp) Digest, stat, and copy files from one location to another in the same read pass
+- [**306**星][3m] [Ruby] [m0nad/hellraiser](https://github.com/m0nad/hellraiser) Vulnerability Scanner
+- [**306**星][20d] [C] [jhuisi/charm](https://github.com/jhuisi/charm) A Framework for Rapidly Prototyping Cryptosystems
+- [**306**星][5y] [C++] [draperlaboratory/fracture](https://github.com/draperlaboratory/fracture) an architecture-independent decompiler to LLVM IR
+- [**306**星][1m] [PS] [darkoperator/posh-secmod](https://github.com/darkoperator/posh-secmod) PowerShell Module with Security cmdlets for security work
+- [**306**星][2m] [Py] [coalfire-research/slackor](https://github.com/coalfire-research/slackor) A Golang implant that uses Slack as a command and control server
+- [**306**星][6d] [Py] [baderj/domain_generation_algorithms](https://github.com/baderj/domain_generation_algorithms) 域名生成算法
+- [**305**星][2y] [PHP] [walkor/workerman-statistics](https://github.com/walkor/workerman-statistics) 一个分布式统计监控系统 包含PHP客户端 、服务端
+- [**305**星][1y] [C#] [vmcall/loadlibrayy](https://github.com/vmcall/loadlibrayy) x64 manualmapper with kernel elevation and thread hijacking capabilities
+- [**305**星][2y] [Py] [wisedoge/proxypool](https://github.com/wisedoge/proxypool) 跨语言IP代理池,Python实现。
+- [**305**星][2d] [Java] [widdix/aws-s3-virusscan](https://github.com/widdix/aws-s3-virusscan) Free Antivirus for S3 Buckets
+- [**305**星][5m] [Batchfile] [lmc999/auto-add-routes](https://github.com/lmc999/auto-add-routes) China Route for VPN
+- [**305**星][1m] [CSS] [justinmeiners/lc3-vm](https://github.com/justinmeiners/lc3-vm) Write your own virtual machine for the LC-3 computer!
+- [**305**星][2y] [Java] [joaomatosf/javadeserh2hc](https://github.com/joaomatosf/javadeserh2hc) Sample codes written for the Hackers to Hackers Conference magazine 2017 (H2HC).
+- [**305**星][14d] [bigsinger/androididchanger](https://github.com/bigsinger/androididchanger) Xposed Module for Changing Android Device Info
+- [**305**星][11m] [Py] [basucert/winboxpoc](https://github.com/basucert/winboxpoc) Proof of Concept of Winbox Critical Vulnerability (CVE-2018-14847)
+- [**305**星][2y] [JS] [arno0x/dnsexfiltrator](https://github.com/arno0x/dnsexfiltrator) Data exfiltration over DNS request covert channel
+- [**304**星][2y] [Shell] [sirzdy/shadowsocks](https://github.com/sirzdy/shadowsocks) 与 ShadowSocks 有关的教程、文件等
+- [**304**星][1y] [Py] [fsecurelabs/win_driver_plugin](https://github.com/FSecureLABS/win_driver_plugin) A tool to help when dealing with Windows IOCTL codes or reversing Windows drivers.
+- [**304**星][2m] [Py] [hatching/vmcloak](https://github.com/hatching/vmcloak) Automated Virtual Machine Generation and Cloaking for Cuckoo Sandbox.
+- [**304**星][2y] [Shell] [ugukkylbklaom/vultr-ss-firewall](https://github.com/ugukkylbklaom/vultr-ss-firewall) 一整套网络加速方案(SS),速度,安全,便捷 面面俱到,操作简单,适合非IT专业人士
+- [**304**星][10m] [PHP] [steverobbins/magescan](https://github.com/steverobbins/magescan) Scan a Magento site for information
+- [**304**星][8m] [Ruby] [secgen/secgen](https://github.com/secgen/secgen) Generate vulnerable virtual machines on the fly (current team development is taking place in the cliffe/SecGen fork)
+- [**304**星][3y] [Shell] [safebreach-labs/pwndsh](https://github.com/safebreach-labs/pwndsh) Post-exploitation framework (and an interactive shell) developed in Bash shell scripting
+- [**304**星][3y] [C] [raspberrypi/maynard](https://github.com/raspberrypi/maynard) Desktop environment for Wayland
+- [**304**星][12m] [Py] [r3vn/badkarma](https://github.com/r3vn/badkarma) network reconnaissance toolkit
+- [**304**星][7m] [Py] [nccgroup/cyber-defence](https://github.com/nccgroup/cyber-defence) Information released publicly by NCC Group's Cyber Defence team
+- [**304**星][1m] [C] [nagyd/sdlpop](https://github.com/nagyd/sdlpop) An open-source port of Prince of Persia, based on the disassembly of the DOS version.
+- [**304**星][2y] [C++] [m0n0ph1/malware-1](https://github.com/m0n0ph1/malware-1) Malware source code samples leaked online uploaded to GitHub for those who want to analyze the code.
+- [**304**星][2y] [JS] [kristian-lange/net-glimpse](https://github.com/kristian-lange/net-glimpse) 1) Real-time visualization of network traffic (Ethernet and Internet), and 2) Streaming of header data from your network interfaces via WebSockets
+- [**304**星][4m] [JS] [hynekpetrak/malware-jail](https://github.com/hynekpetrak/malware-jail) Sandbox for semi-automatic Javascript malware analysis, deobfuscation and payload extraction. Written for Node.js
+- [**304**星][21d] [JS] [ethereum/devp2p](https://github.com/ethereum/devp2p) Ethereum peer-to-peer networking specifications
+- [**304**星][4y] [Py] [clusterhq/powerstrip](https://github.com/clusterhq/powerstrip) A tool for prototyping Docker extensions
+- [**303**星][9m] [JS] [ning1022/sqlinjectionwiki](https://github.com/ning1022/SQLInjectionWiki) 一个专注于聚合和记录各种SQL注入方法的wiki
+- [**303**星][2y] [Py] [spritz-research-group/skype-type](https://github.com/spritz-research-group/skype-type) Don't Skype & Type! Keyboard acoustic eavesdropping tool.
+- [**303**星][1m] [Py] [salls/angrop](https://github.com/salls/angrop) a rop gadget finder and chain builder
+- [**303**星][1m] [Py] [rhinosecuritylabs/cves](https://github.com/rhinosecuritylabs/cves) A collection of proof-of-concept exploit scripts written by the team at Rhino Security Labs for various CVEs.
+- [**303**星][3y] [Perl] [julienbedard/browsersploit](https://github.com/julienbedard/browsersploit) BrowserExploit is an advanced browser exploit pack for doing internal and external pentesting, helping gaining access to internal computers.
+- [**303**星][3m] [Ruby] [fozavci/viproy-voipkit](https://github.com/fozavci/viproy-voipkit) VoIP渗透测试工具和 Metasploit 框架
+- [**303**星][14d] [C#] [dynatrace/superdump](https://github.com/dynatrace/superdump) A service for automated crash-dump analysis
+- [**303**星][21d] [Py] [christhecoolhut/firmware_slap](https://github.com/christhecoolhut/firmware_slap) Discovering vulnerabilities in firmware through concolic analysis and function clustering.
+- [**303**星][2m] [Py] [3ndg4me/autoblue-ms17-010](https://github.com/3ndg4me/autoblue-ms17-010) This is just an semi-automated fully working, no-bs, non-metasploit version of the public exploit code for MS17-010
+- [**302**星][3m] [Py] [xinsss/conf-for-surge-shadowrocket](https://github.com/xinsss/conf-for-surge-shadowrocket) Surge Shadowrocket conf
+- [**302**星][4m] [Py] [zhaoweiho/securitymanageframwork](https://github.com/zhaoweiho/securitymanageframwork) Security Manage Framwork is a security management platform for enterprise intranet, which includes asset management, vulnerability management, account management, knowledge base management, security scanning automation function modules, and can be used for internal security management. This platform is designed to help Party A with fewer securit…
+- [**302**星][1m] [Py] [xdavidhu/langhost](https://github.com/xdavidhu/langhost) A LAN dropbox chatbot controllable via Telegram
+- [**302**星][1m] [Shell] [vitaly-kamluk/bitscout](https://github.com/vitaly-kamluk/bitscout) 远程数据取证工具
+- [**302**星][10m] [Shell] [swoodford/aws](https://github.com/swoodford/aws) A collection of bash shell scripts for automating various tasks with Amazon Web Services using the AWS CLI and jq.
+- [**302**星][1y] [Dockerfile] [ston3o/docker-hacklab](https://github.com/ston3o/docker-hacklab) My personal hacklab, create your own.
+- [**302**星][2m] [JS] [robbendebiene/gesturefy](https://github.com/robbendebiene/gesturefy) Navigate, operate and browse faster with mouse gestures! A customizable Firefox mouse gesture add-on with a variety of different commands.
+- [**302**星][4y] [Py] [lekensteyn/pacemaker](https://github.com/lekensteyn/pacemaker) Heartbleed (CVE-2014-0160) client exploit
+- [**302**星][3y] [C++] [kgretzky/obfusion](https://github.com/kgretzky/obfusion) bfusion - C++ X86 Code Obfuscation Library
+- [**302**星][1y] [Shell] [jas502n/st2-057](https://github.com/jas502n/st2-057) St2-057 Poc Example
+- [**302**星][7m] [Java] [ilmila/j2eescan](https://github.com/ilmila/j2eescan) J2EEScan is a plugin for Burp Suite Proxy. The goal of this plugin is to improve the test coverage during web application penetration tests on J2EE applications.
+- [**302**星][11m] [Assembly] [guitmz/virii](https://github.com/guitmz/virii) Collection of ancient computer virus source codes
+- [**302**星][6y] [Py] [astrand/pyobfuscate](https://github.com/astrand/pyobfuscate) a source code obfuscator
+- [**301**星][13d] [C#] [zodiacon/procmonx](https://github.com/zodiacon/procmonx) 通过Windows事件日志获取与Process Monitor显示的相同的信息,无需内核驱动
+- [**301**星][6d] [Py] [vmware/tern](https://github.com/vmware/tern) Open Source compliance for containers
+- [**301**星][1y] [Py] [two06/inception](https://github.com/two06/inception) Provides In-memory compilation and reflective loading of C# apps for AV evasion.
+- [**301**星][30d] [Py] [stamparm/dsxs](https://github.com/stamparm/dsxs) Damn Small XSS Scanner
+- [**301**星][4m] [Py] [rootviii/proxy_requests](https://github.com/rootviii/proxy_requests) a class that uses scraped proxies to make an http GET/POST request (Python requests)
+- [**301**星][3y] [Py] [ring04h/wyportmap](https://github.com/ring04h/wyportmap) 目标端口扫描+系统服务指纹识别
+- [**301**星][16d] [Py] [qubesos/qubes-secpack](https://github.com/qubesos/qubes-secpack) Qubes Security Pack
+- [**301**星][2m] [no-github/dork-admin](https://github.com/no-github/dork-admin) 盘点近年来的数据泄露、供应链污染事件
+- [**301**星][2m] [Go] [fairwindsops/rbac-lookup](https://github.com/fairwindsops/rbac-lookup) Easily find roles and cluster roles attached to any user, service account, or group name in your Kubernetes cluster
+- [**301**星][2m] [JS] [bettercap/caplets](https://github.com/bettercap/caplets) 使用.cap脚本, 自动化bettercap的交互式会话
+- [**301**星][13d] [PHP] [bepsvpt/secure-headers](https://github.com/bepsvpt/secure-headers) PHP Secure Headers
+- [**301**星][2m] [Py] [austin-taylor/flare](https://github.com/austin-taylor/flare) 网络流量和行为分析的分析框架
+- [**301**星][2m] [C] [9176324/shark](https://github.com/9176324/shark) Turn off PatchGuard in real time for win7 (7600) ~ win10 (18950).
+- [**300**星][11m] [Py] [mr-un1k0d3r/catmyphish](https://github.com/Mr-Un1k0d3r/CatMyPhish) Search for categorized domain
+- [**300**星][5m] [Py] [wangyihang/githacker](https://github.com/wangyihang/githacker) a multiple threads tool to detect whether a site has git source leaks, and has the ability to download the site source to the local
+- [**300**星][9d] [Py] [skylined/bugid](https://github.com/skylined/bugid) Detect, analyze and uniquely identify crashes in Windows applications
+- [**300**星][9m] [C] [raspberrypi/quake3](https://github.com/raspberrypi/quake3) provide a baseline Quake 3 which may be used
+for further development
+- [**300**星][3y] [Java] [nvisium/xssvalidator](https://github.com/nvisium/xssvalidator) This is a burp intruder extender that is designed for automation and validation of XSS vulnerabilities.
+- [**300**星][1y] [C] [nektra/deviare2](https://github.com/nektra/deviare2) Deviare API Hook
+- [**300**星][2m] [Shell] [mitchellkrogza/apache-ultimate-bad-bot-blocker](https://github.com/mitchellkrogza/apache-ultimate-bad-bot-blocker) Apache Block Bad Bots, (Referer) Spam Referrer Blocker, Vulnerability Scanners, Malware, Adware, Ransomware, Malicious Sites, Wordpress Theme Detectors and Fail2Ban Jail for Repeat Offenders
+- [**300**星][7m] [Py] [0xacb/viewgen](https://github.com/0xacb/viewgen) viewgen is a ViewState tool capable of generating both signed and encrypted payloads with leaked validation keys
+- [**299**星][2m] [C] [vusec/vuzzer](https://github.com/vusec/vuzzer) depends heavily on a modeified version of DataTracker, which in turn depends on LibDFT pintool.
+- [**299**星][26d] [C] [tarsnap/scrypt](https://github.com/tarsnap/scrypt) The scrypt key derivation function was originally developed for use in the Tarsnap online backup system and is designed to be far more secure against hardware brute-force attacks than alternative functions such as PBKDF2 or bcrypt.
+- [**299**星][3m] [JS] [smartdone/frida-scripts](https://github.com/smartdone/frida-scripts) 一些frida脚本
+- [**299**星][9m] [C++] [secrary/idenlib](https://github.com/secrary/idenlib) Library Function Identification [prototype project - signatures might change in future releases]
+- [**299**星][2m] [C#] [ossindex/devaudit](https://github.com/ossindex/devaudit) Open-source, cross-platform, multi-purpose security auditing tool
+- [**299**星][11m] [Py] [mseclab/pyjfuzz](https://github.com/mseclab/pyjfuzz) PyJFuzz - Python JSON Fuzzer
+- [**299**星][3y] [C] [miohtama/python-levenshtein](https://github.com/miohtama/python-levenshtein) The Levenshtein Python C extension module contains functions for fast computation of Levenshtein distance and string similarity
+- [**299**星][2y] [Py] [hellman/libformatstr](https://github.com/hellman/libformatstr) Simplify format string exploitation.
+- [**299**星][5y] [Perl] [fwaeytens/dnsenum](https://github.com/fwaeytens/dnsenum) dnsenum is a perl script that enumerates DNS information
+- [**299**星][7m] [C++] [cyphunk/jtagenum](https://github.com/cyphunk/jtagenum) Given an Arduino compatible microcontroller or Raspberry PI (experimental), JTAGenum scans pins[] for basic JTAG functionality and can be used to enumerate the Instruction Register for undocumented instructions. Props to JTAG scanner and Arduinull which came before JTAGenum and forwhich much of the code and logic is based on. Feel free to branch…
+- [**299**星][4m] [Py] [cyberark/kubiscan](https://github.com/cyberark/kubiscan) A tool to scan Kubernetes cluster for risky permissions
+- [**299**星][1y] [Py] [bhdresh/cve-2017-8759](https://github.com/bhdresh/cve-2017-8759) Exploit toolkit CVE-2017-8759 - v1.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft .NET Framework RCE. It could generate a malicious RTF file and deliver metasploit / meterpreter / other payload to victim without any complex configuration.
+- [**299**星][2m] [Py] [alexandreborges/malwoverview](https://github.com/alexandreborges/malwoverview) Malwoverview.py is a first response tool to perform an initial and quick triage in a directory containing malware samples, specific malware sample, suspect URL and domains. Additionally, it allows to download and send samples to main online sandboxes.
+- [**299**星][5m] [0xradi/owasp-web-checklist](https://github.com/0xradi/owasp-web-checklist) OWASP Web Application Security Testing Checklist
+- [**299**星][2y] [Shell] [0x90/kali-scripts](https://github.com/0x90/kali-scripts) Some usefull scripts for KaliLinux
+- [**298**星][4y] [Py] [zer0h/httpscan](https://github.com/zer0h/httpscan) 一个爬虫式的网段Web主机发现小工具 # A HTTP Service detector with a crawler from IP/CIDR
+- [**298**星][1y] [Java] [vmware/burp-rest-api](https://github.com/vmware/burp-rest-api) REST/JSON API to the Burp Suite security tool.
+- [**298**星][2y] [C++] [rootm0s/protectors](https://github.com/rootm0s/protectors)
+- [**298**星][1y] [PS] [onelogicalmyth/zeroday-powershell](https://github.com/onelogicalmyth/zeroday-powershell) A PowerShell example of the Windows zero day priv esc
+- [**298**星][2y] [krausefx/steal.password](https://github.com/krausefx/steal.password) Easily get the user's Apple ID password, just by asking
+- [**298**星][2y] [C] [igrr/esptool-ck](https://github.com/igrr/esptool-ck) ESP8266 build/flash helper tool by Christian Klippel
+- [**298**星][4y] [Py] [emposha/shell-detector](https://github.com/emposha/shell-detector) Shell Detector – is a application that helps you find and identify php/cgi(perl)/asp/aspx shells. Shell Detector has a “web shells” signature database that helps to identify “web shell” up to 99%.
+- [**298**星][3m] [Py] [cisco-talos/ghida](https://github.com/cisco-talos/ghida) 在IDA中集成Ghidra反编译器
+- [**298**星][2m] [Py] [christhecoolhut/pinctf](https://github.com/christhecoolhut/pinctf) Using Intel's PIN tool to solve CTF problems
+- [**298**星][2m] [Py] [bishopfox/eyeballer](https://github.com/bishopfox/eyeballer) 用于大型网络渗透测试中需要从大量基于Web的主机中找到“有趣的”目标
+- [**298**星][2m] [HTML] [balsn/ctf_writeup](https://github.com/balsn/ctf_writeup) CTF writeups from Balsn
+- [**298**星][6y] [Py] [andresriancho/nimbostratus](https://github.com/andresriancho/nimbostratus) Tools for fingerprinting and exploiting Amazon cloud infrastructures
+- [**297**星][2y] [C] [pwning/docs](https://github.com/pwning/docs) Tips, Tricks, and Suggestions for Running a CTF
+- [**297**星][9d] [JS] [w3c/webappsec-trusted-types](https://github.com/w3c/webappsec-trusted-types) A browser API to prevent DOM-Based Cross Site Scripting in modern web applications.
+- [**297**星][12m] [Shell] [yw9381/burp_suite_doc_zh_cn](https://github.com/yw9381/burp_suite_doc_zh_cn) 这是基于Burp Suite官方文档翻译而来的中文版文档
+- [**297**星][2y] [Py] [trustedsec/nps_payload](https://github.com/trustedsec/nps_payload) Python 脚本,生成能够绕过基础入侵检测的 payload
+- [**297**星][2d] [C++] [squalr/squally](https://github.com/squalr/squally) 2D Platformer Game for Teaching Game Hacking - C++/cocos2d-x
+- [**297**星][4d] [Java] [shred/acme4j](https://github.com/shred/acme4j) a protocol that a certificate authority (CA) and an applicant can use to automate the process of verification and certificate issuance
+- [**297**星][4y] [samyk/proxygambit](https://github.com/samyk/proxygambit) Anonymize and fracture network traffic/Internet access over a point-to-point wireless link or through TCP->GSM->wifi tunnel (advanced resurrection of ProxyHam)
+- [**297**星][18d] [Go] [ropnop/kerbrute](https://github.com/ropnop/kerbrute) A tool to perform Kerberos pre-auth bruteforcing
+- [**297**星][4y] [Py] [orf/cyborg](https://github.com/orf/cyborg) Python web scraping framework
+- [**297**星][7d] [Py] [mozillasecurity/dharma](https://github.com/mozillasecurity/dharma) Generation-based, context-free grammar fuzzer.
+- [**297**星][3y] [Go] [janeczku/rancher-letsencrypt](https://github.com/janeczku/rancher-letsencrypt) A Rancher service that obtains free SSL/TLS certificates from the Let's Encrypt CA, adds them to Rancher's certificate store and manages renewal and propagation of updated certificates to load balancer
+- [**297**星][2y] [PHP] [interference-security/empire-web](https://github.com/interference-security/empire-web) PowerShell Empire 的Web界面,
+- [**297**星][2m] [C#] [fireeye/sharpersist](https://github.com/fireeye/sharpersist) Windows persistence toolkit
+- [**297**星][9m] [C] [basil00/reqrypt](https://github.com/basil00/reqrypt) HTTP 请求 tunneling 工具
+- [**297**星][2y] [Py] [allyshka/rogue-mysql-server](https://github.com/allyshka/rogue-mysql-server) MySQL fake server for read files of connected clients
+- [**296**星][8m] [C++] [wangyu-/udp2raw-multiplatform](https://github.com/wangyu-/udp2raw-multiplatform) multi-platform(cross-platform) version of udp2raw-tunnel, which supports Windows/Mac/BSD natively
+- [**296**星][2d] [ugvf2009/miles](https://github.com/ugvf2009/miles) 二爷翻墙,专注翻墙30年,但没有掌握核心科技^_^
+- [**296**星][2y] [C++] [sensepost/rattler](https://github.com/sensepost/rattler) 自动识别可用于 DLLpreloading 攻击的 DLL
+- [**296**星][3m] [Py] [saghul/aiodns](https://github.com/saghul/aiodns) Simple DNS resolver for asyncio
+- [**296**星][4m] [C++] [rolfrolles/hexraysdeob](https://github.com/rolfrolles/hexraysdeob) 利用Hex-Rays microcode API破解编译器级别的混淆
+- [**296**星][2d] [C++] [hasherezade/bearparser](https://github.com/hasherezade/bearparser) Portable Executable parsing library (from PE-bear)
+- [**296**星][7d] [Py] [govanguard/legion](https://github.com/govanguard/legion) Legion is an open source, easy-to-use, super-extensible and semi-automated network penetration testing tool that aids in discovery, reconnaissance and exploitation of information systems.
+- [**296**星][7m] [Py] [edent/bmw-i-remote](https://github.com/edent/bmw-i-remote) A reverse engineered interface for the BMW i3 Electric Car
+- [**296**星][2y] [Shell] [checkpointsw/android_unpacker](https://github.com/checkpointsw/android_unpacker) A (hopefully) generic unpacker for packed Android apps.
+- [**296**星][5m] [PLpgSQL] [amachanic/sp_whoisactive](https://github.com/amachanic/sp_whoisactive) sp_whoisactive
+- [**295**星][4d] [JS] [aws-samples/aws-serverless-security-workshop](https://github.com/aws-samples/aws-serverless-security-workshop) In this workshop, you will learn techniques to secure a serverless application built with AWS Lambda, Amazon API Gateway and RDS Aurora. We will cover AWS services and features you can leverage to improve the security of a serverless applications in 5 domains: identity & access management, code, data, infrastructure, logging & monitoring.
+- [**295**星][6m] [Java] [teamwalrus/walrus](https://github.com/TeamWalrus/Walrus) An Android app that lets you use your access control card cloning devices in the field.
+- [**295**星][4m] [Shell] [anti-ddos/anti-ddos](https://github.com/anti-ddos/Anti-DDOS)
+- [**295**星][1y] [JS] [xxxily/fiddler-plus](https://github.com/xxxily/fiddler-plus) 自定义的Fiddler规则,多环境切换、解决跨域开发、快速调试线上代码必备|高效调试分析利器
+- [**295**星][2y] [swiftonsecurity/swiftfilter](https://github.com/swiftonsecurity/swiftfilter) Exchange Transport rules to detect and enable response to phishing
+- [**295**星][1y] [Shell] [sevagas/swap_digger](https://github.com/sevagas/swap_digger) swap_digger is a tool used to automate Linux swap analysis during post-exploitation or forensics. It automates swap extraction and searches for Linux user credentials, web forms credentials, web forms emails, http basic authentication, Wifi SSID and keys, etc.
+- [**295**星][3y] [C] [s2e/s2e-old](https://github.com/s2e/s2e-old) This is the archived S2E 1.0 repo. We do not maintain it anymore.
+- [**295**星][7m] [Py] [s0md3v/zen](https://github.com/s0md3v/zen) 查找Github用户的邮箱地址
+- [**295**星][5m] [C#] [raikia/credninja](https://github.com/raikia/credninja) A multithreaded tool designed to identify if credentials are valid, invalid, or local admin valid credentials within a network at-scale via SMB, plus now with a user hunter
+- [**295**星][2y] [PS] [outflanknl/invoke-adlabdeployer](https://github.com/outflanknl/invoke-adlabdeployer) Automated deployment of Windows and Active Directory test lab networks. Useful for red and blue teams.
+- [**295**星][4d] [C++] [hasherezade/libpeconv](https://github.com/hasherezade/libpeconv) 用于映射和取消映射PE 文件的库
+- [**295**星][1y] [C#] [ghostpack/sharpup](https://github.com/ghostpack/sharpup) SharpUp is a C# port of various PowerUp functionality.
+- [**295**星][3d] [Shell] [fdiskyou/zines](https://github.com/fdiskyou/zines) Mirror of my favourite hacking Zines for the lulz, nostalgy, and reference
+- [**295**星][1m] [JS] [doyensec/electronegativity](https://github.com/doyensec/electronegativity) Electronegativity is a tool to identify misconfigurations and security anti-patterns in Electron applications.
+- [**295**星][3m] [Java] [amaembo/huntbugs](https://github.com/amaembo/huntbugs) Java bytecode static analyzer
+- [**294**星][3d] [C] [ebwi11/agentsmith-hids](https://github.com/EBWi11/AgentSmith-HIDS) Low performance loss and by LKM technology HIDS tool, from E_Bwill.
+- [**294**星][1y] [Py] [anasaboureada/penetration-testing-study-notes](https://github.com/AnasAboureada/Penetration-Testing-Study-Notes) Penetration Testing notes, resources and scripts
+- [**294**星][6y] [Py] [xiaomi-sa/smartdns](https://github.com/xiaomi-sa/smartdns) 基于Twisted实现的智能dns系统
+- [**294**星][2y] [Py] [ricmoo/pyaes](https://github.com/ricmoo/pyaes) Pure-Python implementation of AES block-cipher and common modes of operation.
+- [**294**星][9m] [C] [rhboot/shim](https://github.com/rhboot/shim) a trivial EFI application that, when run, attempts to open and execute another application
+- [**294**星][1m] [Lua] [pentesteracademy/patoolkit](https://github.com/pentesteracademy/patoolkit) 一组流量分析插件,用于将Wireshark的功能从微分析工具和协议解析器扩展到宏分析器和威胁猎人。
+- [**294**星][3y] [Py] [n1nj4sec/pr0cks](https://github.com/n1nj4sec/pr0cks) python script setting up a transparent proxy to forward all TCP and DNS traffic through a SOCKS / SOCKS5 or HTTP(CONNECT) proxy using iptables -j REDIRECT target
+- [**294**星][2m] [Go] [mdsecactivebreach/o365-attack-toolkit](https://github.com/mdsecactivebreach/o365-attack-toolkit) A toolkit to attack Office365
+- [**294**星][7m] [HTML] [maaaaz/androwarn](https://github.com/maaaaz/androwarn) Yet another static code analyzer for malicious Android applications
+- [**294**星][3y] [lucyoa/ctf-wiki](https://github.com/lucyoa/ctf-wiki) Hacking techniques useful during CTFs
+- [**294**星][7m] [Shell] [eschultze/urlextractor](https://github.com/eschultze/urlextractor) Information gathering & website reconnaissance |
+- [**294**星][10m] [Shell] [ctf-wiki/ctf-tools](https://github.com/ctf-wiki/ctf-tools) CTF 工具集合
+- [**294**星][1y] [Shell] [cryptolok/ghostinthenet](https://github.com/cryptolok/ghostinthenet) Ultimate Network Stealther that makes Linux a Ghost In The Net and protects from MITM/DOS/scan
+- [**294**星][8m] [Py] [boy-hack/w8fuckcdn](https://github.com/boy-hack/w8fuckcdn) 通过扫描全网绕过CDN获取网站IP地址
+- [**294**星][1y] [CSS] [appsecco/dvna](https://github.com/appsecco/dvna) Damn Vulnerable NodeJS Application
+- [**294**星][12d] [TS] [acekyd/made-in-nigeria](https://github.com/acekyd/made-in-nigeria) It is rumored that Nigerians only know how to consume tools and not create them. Here is a curation of awesome tools built by Nigerians that can be used by anybody and from anywhere in the world.
+- [**294**星][2y] [C] [aanarchyy/bully](https://github.com/aanarchyy/bully) a new implementation of the WPS brute force attack
+- [**293**星][4m] [C] [shadowsocks/simple-obfs-android](https://github.com/shadowsocks/simple-obfs-android) A simple obfuscating tool for Android
+- [**293**星][8m] [vysecurity/domainfrontinglists](https://github.com/vysecurity/DomainFrontingLists) A list of Domain Frontable Domains by CDN
+- [**293**星][14d] [C++] [xmrig/xmrig-proxy](https://github.com/xmrig/xmrig-proxy) Monero (XMR) Stratum protocol proxy
+- [**293**星][7m] [Py] [vulscanteam/vulscan](https://github.com/vulscanteam/vulscan) vulscan 扫描系统:最新的poc&exp漏洞扫描,redis未授权、敏感文件、java反序列化、tomcat命令执行及各种未授权扫描等...
+- [**293**星][4y] [trustedsec/artillery](https://github.com/trustedsec/artillery) The Artillery Project is an open-source blue team tool designed to protect Linux and Windows operating systems through multiple methods.
+- [**293**星][6m] [YARA] [supportintelligence/icewater](https://github.com/supportintelligence/icewater) 16,432 Free Yara rules created by
+- [**293**星][1m] [Py] [strazzere/golang_loader_assist](https://github.com/strazzere/golang_loader_assist) 辅助Go逆向
+- [**293**星][6m] [C] [skx/simple.vm](https://github.com/skx/simple.vm) Simple virtual machine which inteprets bytecode.
+- [**293**星][10m] [HTML] [s1gh/ctf-literature](https://github.com/s1gh/ctf-literature) Collection of free books, papers and articles related to CTF challenges.
+- [**293**星][10d] [qubesos/qubes-issues](https://github.com/qubesos/qubes-issues) The Qubes OS Project issue tracker
+- [**293**星][5m] [C] [pulkin/esp8266-injection-example](https://github.com/pulkin/esp8266-injection-example) Example project to demonstrate packet injection / sniffer capabilities of ESP8266 IC.
+- [**293**星][2y] [C++] [minhaskamal/trojancockroach](https://github.com/minhaskamal/trojancockroach) A Stealthy Trojan Spyware (keylogger-spyware-malware-worm-spy-virus-fud-undetectable-computer-windows-pc-c-c++)
+- [**293**星][2m] [C] [mboehme/aflfast](https://github.com/mboehme/aflfast) AFLFast (extends AFL with Power Schedules)
+- [**293**星][2m] [Scala] [jmcardon/tsec](https://github.com/jmcardon/tsec) Type-safe general-cryptography library -
+- [**293**星][15d] [Visual Basic .NET] [itm4n/vba-runpe](https://github.com/itm4n/vba-runpe) A VBA implementation of the RunPE technique or how to bypass application whitelisting.
+- [**293**星][3y] [invoke-ir/forensicposters](https://github.com/invoke-ir/forensicposters)
+- [**293**星][8m] [C] [gianlucaborello/libprocesshider](https://github.com/gianlucaborello/libprocesshider) Hide a process under Linux using the ld preloader (
+- [**292**星][1m] [Py] [lucifer1993/tpscan](https://github.com/lucifer1993/tpscan) 一键ThinkPHP漏洞检测
+- [**292**星][5y] [C++] [smartdec/smartdec](https://github.com/smartdec/smartdec) 反编译器, 带IDA插件(进阶版为snowman)
+ - [IDA插件](https://github.com/smartdec/smartdec/tree/master/src/ida-plugin)
+ - [nocode](https://github.com/smartdec/smartdec/tree/master/src/nocode) 命令行反编译器
+ - [smartdec](https://github.com/smartdec/smartdec/tree/master/src/smartdec) 带GUI界面的反编译器
+ - [nc](https://github.com/smartdec/smartdec/tree/master/src/nc) 反编译器的核心代码
+- [**292**星][8y] [ObjC] [nst/spyphone](https://github.com/nst/spyphone) This project shows the kind of data a rogue iPhone application can collect.
+- [**292**星][4y] [Py] [northbit/metaphor](https://github.com/northbit/metaphor) Stagefright with ASLR bypass
+- [**292**星][2d] [Zeek] [mitre-attack/car](https://github.com/mitre-attack/car) Cyber Analytics Repository
+- [**292**星][11m] [JS] [jeija/bluefluff](https://github.com/jeija/bluefluff) Reverse Engineering Furby Connect's Bluetooth Protocol and Update Format
+- [**292**星][16d] [Java] [ganyao114/sandvxposed](https://github.com/ganyao114/sandvxposed) Xposed environment without root (OS 5.0 - 10.0)
+- [**292**星][2m] [Py] [fplyth0ner-combie/bug-project-framework](https://github.com/fplyth0ner-combie/bug-project-framework) 漏洞利用框架模块分享仓库
+- [**292**星][1y] [findneo/newbie-security-list](https://github.com/findneo/newbie-security-list) 网络安全学习资料,欢迎补充
+- [**292**星][3d] [Java] [adjust/android_sdk](https://github.com/adjust/android_sdk) This is the Android SDK of Adjust
+- [**291**星][11m] [Shell] [cyb0r9/socialbox](https://github.com/Cyb0r9/SocialBox) SocialBox is a Bruteforce Attack Framework [ Facebook , Gmail , Instagram ,Twitter ] , Coded By Belahsan Ouerghi
+- [**291**星][5m] [enkomio/taipan](https://github.com/enkomio/Taipan) Web application vulnerability scanner
+- [**291**星][2m] [Py] [vulnerscom/api](https://github.com/vulnerscom/api) Python 2/3 library for the Vulners Database
+- [**291**星][3y] [Py] [ustwo/mastermind](https://github.com/ustwo/mastermind) Man in the middle testing
+- [**291**星][10d] [C++] [tevador/randomx](https://github.com/tevador/randomx) Proof of work algorithm based on random code execution
+- [**291**星][2y] [Py] [orangetw/tiny-url-fuzzer](https://github.com/orangetw/tiny-url-fuzzer) A tiny and cute URL fuzzer
+- [**291**星][4m] [C#] [mvelazc0/defcon27_csharp_workshop](https://github.com/mvelazc0/defcon27_csharp_workshop) Writing custom backdoor payloads with C# - Defcon 27
+- [**291**星][2y] [Java] [kingsollyu/appenv](https://github.com/kingsollyu/appenv) 应用变量
+- [**291**星][6m] [C] [kholia/dedrop](https://github.com/kholia/dedrop) Looking inside the (Drop) box. Security Analysis of Dropbox. Updated WOOT '13 paper and other goodies.
+- [**291**星][3y] [Py] [kevthehermit/volutility](https://github.com/kevthehermit/volutility) Web App for Volatility framework
+- [**291**星][2y] [JS] [ffay/proxygateway](https://github.com/ffay/proxygateway) Proxy Gateway基于openresty(nginx lua module)开发,可以作为接口网关(api gateway)使用,整合业务模块接口,微服务治理聚合,通过web配置界面,能够轻松进行代理配置管理,支持负载均衡,服务器状态检测等
+- [**291**星][1y] [C] [fail0verflow/ps4-kexec](https://github.com/fail0verflow/ps4-kexec) Implementation of the kexec system call for PS4
+- [**291**星][10m] [C] [a1ext/labeless](https://github.com/a1ext/labeless) 在IDA和调试器之间无缝同步Label/注释等
+ - [IDA插件](https://github.com/a1ext/labeless/tree/master/labeless_ida)
+ - [OD](https://github.com/a1ext/labeless/tree/master/labeless_olly)
+ - [OD2](https://github.com/a1ext/labeless/tree/master/labeless_olly2)
+ - [x64dbg](https://github.com/a1ext/labeless/tree/master/labeless_x64dbg)
+- [**290**星][1y] [Py] [gallopsled/pwntools-tutorial](https://github.com/gallopsled/pwntools-tutorial) Tutorials for getting started with Pwntools
+- [**290**星][3y] [Py] [cokebar/gfwlist2dnsmasq_python](https://github.com/cokebar/gfwlist2dnsmasq_python) Just another python script to auto-generate dnsmasq ipset rules using gfwlist. Shell script version:
+- [**290**星][3m] [C++] [xmrig/xmrig-amd](https://github.com/xmrig/xmrig-amd) xmrig-amd: 门罗币挖矿代码 A卡版本
+- [**290**星][5m] [marcinguy/cve-2019-2107](https://github.com/marcinguy/cve-2019-2107) CVE-2019-2107
+- [**290**星][4m] [C#] [l0ss/grouper2](https://github.com/l0ss/grouper2) Find vulnerabilities in AD Group Policy
+- [**290**星][10m] [Py] [immunit/drupwn](https://github.com/immunit/drupwn) Drupal enumeration & exploitation tool
+- [**290**星][1y] [Py] [flipkart-incubator/watchdog](https://github.com/flipkart-incubator/watchdog) 全面的安全扫描和漏洞管理工具
+- [**290**星][2y] [HTML] [dxa4481/cssinjection](https://github.com/dxa4481/cssinjection) Stealing CSRF tokens with CSS injection (without iFrames)
+- [**290**星][1m] [Go] [decomp/decomp](https://github.com/decomp/decomp) Components of a decompilation pipeline.
+- [**290**星][4y] [Perl] [bishopfox/theos-jailed](https://github.com/bishopfox/theos-jailed) A version of Theos/CydiaSubstrate for non-jailbroken iOS devices
+- [**290**星][2m] [Py] [a1ext/auto_re](https://github.com/a1ext/auto_re) 自动化函数重命名
+- [**289**星][15d] [Roff] [ysurac/openmptcprouter](https://github.com/ysurac/openmptcprouter) OpenMPTCProuter is an open source solution to aggregate multiple internet connections using Multipath TCP (MPTCP) on OpenWrt
+- [**289**星][6m] [JS] [joshuaferrara/node-csgo](https://github.com/joshuaferrara/node-csgo) A node-steam plugin for Counter-Strike: Global Offensive.
+- [**289**星][3y] [PS] [fortynorthsecurity/wmiops](https://github.com/FortyNorthSecurity/WMIOps) This repo is for WMIOps, a powershell script which uses WMI for various purposes across a network.
+- [**289**星][4d] [PHP] [voku/anti-xss](https://github.com/voku/anti-xss)
+- [**289**星][7m] [Py] [ropnop/windapsearch](https://github.com/ropnop/windapsearch) Python script to enumerate users, groups and computers from a Windows domain through LDAP queries
+- [**289**星][2m] [JS] [pownjs/pown-recon](https://github.com/pownjs/pown-recon) A powerful target reconnaissance framework powered by graph theory.
+- [**289**星][5m] [Py] [opsdisk/pagodo](https://github.com/opsdisk/pagodo) pagodo (Passive Google Dork) - Automate Google Hacking Database scraping
+- [**289**星][3m] [JS] [kspearrin/ff-password-exporter](https://github.com/kspearrin/ff-password-exporter) Easily export your passwords from Firefox.
+- [**289**星][2y] [Py] [kootenpv/gittyleaks](https://github.com/kootenpv/gittyleaks) Discover where your sensitive data has been leaked.
+- [**289**星][2y] [Py] [gbrindisi/xsssniper](https://github.com/gbrindisi/xsssniper) An automatic XSS discovery tool
+- [**289**星][2y] [C] [creaktive/tsh](https://github.com/creaktive/tsh) Tiny SHell - An open-source UNIX backdoor
+- [**289**星][4d] [Shell] [adferrand/docker-letsencrypt-dns](https://github.com/adferrand/docker-letsencrypt-dns) Docker with Certbot + Lexicon to provide Let's Encrypt SSL certificates validated by DNS challenges
+- [**288**星][1y] [Py] [zhl2008/awd-platform](https://github.com/zhl2008/awd-platform) a project to set up your awd environment(web challenges only) quickly
+- [**288**星][7m] [Py] [williballenthin/python-registry](https://github.com/williballenthin/python-registry) 用于对Windows NT注册表文件进行纯读取访问的Python库
+- [**288**星][2y] [Py] [websploit/websploit](https://github.com/websploit/websploit) websploit is an advanced MITM framework
+- [**288**星][4d] [C] [troglobit/nemesis](https://github.com/troglobit/nemesis) 网络数据包构造和注入的命令行工具
+- [**288**星][2d] [Py] [sosreport/sos](https://github.com/sosreport/sos) A unified tool for collecting system logs and other debug information
+- [**288**星][5m] [C++] [rampagex/firmware-mod-kit](https://github.com/rampagex/firmware-mod-kit) Automatically exported from code.google.com/p/firmware-mod-kit
+- [**288**星][10d] [PHP] [phpmussel/phpmussel](https://github.com/phpmussel/phpmussel) PHP-based anti-virus anti-trojan anti-malware solution.
+- [**288**星][7m] [JS] [ma3k4h3d/papers](https://github.com/ma3k4h3d/papers) Some papers about cyber security
+- [**288**星][12m] [Java] [indywidualny/faceslim](https://github.com/indywidualny/faceslim) Web App for Facebook. Lightweight, ad-free, chat support and modern look.
+- [**288**星][3y] [Py] [dhilipsiva/webapp-checklist](https://github.com/dhilipsiva/webapp-checklist) Technical details that a programmer of a web application should consider before making the site public.
+- [**288**星][3y] [C++] [develbranch/tinyantivirus](https://github.com/develbranch/tinyantivirus) TinyAntivirus is an open source antivirus engine designed for detecting polymorphic virus and disinfecting it.
+- [**288**星][3m] [Py] [covertcodes/multitun](https://github.com/covertcodes/multitun) Tunnel arbitrary traffic through an innocuous WebSocket. Clients can 'see' each other, resulting in a stealth WebSocket VPN.
+- [**288**星][10m] [C++] [anhkgg/superdllhijack](https://github.com/anhkgg/superdllhijack) SuperDllHijack:A general DLL hijack technology, don't need to manually export the same function interface of the DLL, so easy! 一种通用Dll劫持技术,不再需要手工导出Dll的函数接口了
+- [**287**星][6m] [Shell] [greenwolf/spray](https://github.com/Greenwolf/Spray) A Password Spraying tool for Active Directory Credentials by Jacob Wilkin(Greenwolf)
+- [**287**星][1y] [Py] [klsecservices/rpivot](https://github.com/klsecservices/rpivot) socks4 reverse proxy for penetration testing
+- [**287**星][8m] [C] [tangsilian/android-vuln](https://github.com/tangsilian/android-vuln) 安卓内核提权漏洞分析
+- [**287**星][2m] [Py] [utiso/dorkbot](https://github.com/utiso/dorkbot) 扫描谷歌搜索返回的网页,查找网页漏洞
+- [**287**星][2m] [Shell] [tehw0lf/airbash](https://github.com/tehw0lf/airbash) 全自动的WPAPSK握手包捕获脚本, 用于渗透测试
+- [**287**星][10m] [C] [samhocevar/zzuf](https://github.com/samhocevar/zzuf)
+- [**287**星][1y] [C++] [paranoidninja/pandoras-box](https://github.com/paranoidninja/pandoras-box) 渗透和Red Team脚本
+- [**287**星][23d] [HTML] [mozillasecurity/fuzzdata](https://github.com/mozillasecurity/fuzzdata) Fuzzing resources for feeding various fuzzers with input.
+- [**287**星][9d] [C#] [matterpreter/offensivecsharp](https://github.com/matterpreter/offensivecsharp) Collection of Offensive C# Tooling
+- [**287**星][1y] [Py] [manwhoami/mmetokendecrypt](https://github.com/manwhoami/mmetokendecrypt) Decrypts and extracts iCloud and MMe authorization tokens on Apple macOS / OS X. No user authentication needed. 🏅🌩
+- [**287**星][4m] [Py] [lufeirider/cve-2019-2725](https://github.com/lufeirider/cve-2019-2725) CVE-2019-2725 命令回显
+- [**287**星][2y] [C++] [godaddy/procfilter](https://github.com/godaddy/procfilter) Windows 进程过滤系统。可以使用 Yara 规则匹配进程模块,从而阻止匹配的进程启动
+- [**287**星][11m] [C++] [gamozolabs/applepie](https://github.com/gamozolabs/applepie) A hypervisor for fuzzing built with WHVP and Bochs
+- [**287**星][12m] [C] [dgoulet/torsocks](https://github.com/dgoulet/torsocks) Library to torify application - NOTE: upstream has been moved to
+- [**287**星][6m] [Shell] [0ki/mikrotik-tools](https://github.com/0ki/mikrotik-tools) Tools for Mikrotik devices - universal jailbreak tool
+- [**286**星][1y] [C] [str8outtaheap/heapwn](https://github.com/str8outtaheap/heapwn) Linux Heap Exploitation Practice
+- [**286**星][21d] [Go] [zmap/zgrab2](https://github.com/zmap/zgrab2) Go Application Layer Scanner
+- [**286**星][1m] [Py] [xdavidhu/portspider](https://github.com/xdavidhu/portspider) A lightning fast multithreaded network scanner framework with modules.
+- [**286**星][1y] [Java] [webgoat/webgoat-legacy](https://github.com/webgoat/webgoat-legacy) Legacy WebGoat 6.0 - Deliberately insecure JavaEE application
+- [**286**星][4d] [Lua] [theherogac/autoplugin](https://github.com/theherogac/autoplugin) Autoplugin for PSVITA
+- [**286**星][7m] [C++] [mattiwatti/pplkiller](https://github.com/mattiwatti/pplkiller) Protected Processes Light Killer
+- [**286**星][2y] [ivmachiavelli/osint_team_links](https://github.com/ivmachiavelli/osint_team_links) Links for the OSINT Team
+- [**286**星][3m] [Py] [feliam/pysymemu](https://github.com/feliam/pysymemu) An intel 64 symbolic emulator
+- [**286**星][7m] [Py] [cesar-rodriguez/terrascan](https://github.com/cesar-rodriguez/terrascan) Collection of security and best practice test for static code analysis of terraform templates
+- [**286**星][5y] [Py] [aaronportnoy/toolbag](https://github.com/aaronportnoy/toolbag) 反编译强化插件
+- [**285**星][7m] [C] [thingpulse/esp8266-weather-station-color](https://github.com/ThingPulse/esp8266-weather-station-color) ESP8266 Weather Station in Color using ILI9341 TFT 240x320 display
+- [**285**星][10m] [wallarm/awesome-nginx-security](https://github.com/wallarm/awesome-nginx-security)
+- [**285**星][22d] [Shell] [petit-miner/blueberry-pi](https://github.com/petit-miner/blueberry-pi) Blueberry PI
+- [**285**星][10m] [ntruopensourceproject/ntru-crypto](https://github.com/ntruopensourceproject/ntru-crypto) Open Source NTRU Public Key Cryptography and Reference Code
+- [**285**星][3y] [Py] [nanshihui/poccollect](https://github.com/nanshihui/poccollect) a plenty of poc based on python
+- [**285**星][5m] [JS] [mike-goodwin/owasp-threat-dragon](https://github.com/mike-goodwin/owasp-threat-dragon) An open source, online threat modelling tool from OWASP
+- [**285**星][3y] [Go] [longxboy/lunnel](https://github.com/longxboy/lunnel) fast reverse-proxy
+- [**285**星][4y] [C++] [kennytm/miscellaneous](https://github.com/kennytm/miscellaneous) This repository contains stuff which would be helpful for jailbroken iOS development.
+- [**285**星][1y] [Py] [fox-it/aclpwn.py](https://github.com/fox-it/aclpwn.py) 与BloodHound交互, 识别并利用基于ACL的提权路径
+- [**285**星][2y] [evilsocket/bettercap-proxy-modules](https://github.com/evilsocket/bettercap-proxy-modules) This repository contains some bettercap transparent proxy example modules.
+- [**285**星][2y] [Py] [eik00d/cantoolz](https://github.com/eik00d/cantoolz) CANToolz - framework for black-box CAN network analysis
+- [**285**星][2y] [C] [devio/walruss](https://github.com/devio/walruss) PC-Wahl 10 Hacking Tools
+- [**285**星][1y] [Py] [code-scan/dzscan](https://github.com/code-scan/dzscan) Dzscan
+- [**285**星][2y] [Java] [cnfree/eclipse-class-decompiler](https://github.com/cnfree/eclipse-class-decompiler) Eclipse Class Decompiler integrates JD, Jad, FernFlower, CFR, Procyon seamlessly with Eclipse and allows Java developers to debug class files without source code directly
+- [**285**星][3m] [Py] [apache/incubator-spot](https://github.com/apache/incubator-spot) Mirror of Apache Spot
+- [**284**星][1m] [JS] [agoric/ses](https://github.com/agoric/ses) SES (Secure EcmaScript) is a secure runtime for running third-party code safely
+- [**284**星][2m] [Py] [yzddmr6/webcrack](https://github.com/yzddmr6/webcrack) 网站后台弱口令/万能密码批量检测工具
+- [**284**星][3y] [C] [unix-thrust/beurk](https://github.com/unix-thrust/beurk) BEURK Experimental Unix RootKit
+- [**284**星][9d] [Py] [target/strelka](https://github.com/target/strelka) Real-time, container-based file scanning at enterprise scale
+- [**284**星][12m] [Py] [mrash/afl-cov](https://github.com/mrash/afl-cov) Produce code coverage results with gcov from afl-fuzz test cases
+- [**284**星][1m] [Py] [lorexxar/cobra-w](https://github.com/lorexxar/cobra-w) Cobra-W -> Cobra-White 白盒源代码审计工具-白帽子版
+- [**284**星][2y] [Swift] [krausefx/watch.user](https://github.com/krausefx/watch.user) Every iOS app you ever gave permission to use your camera can record you any time it runs - without notice
+- [**284**星][12m] [Py] [justicerage/ffm](https://github.com/justicerage/ffm) Freedom Fighting Mode: open source hacking harness
+- [**284**星][2y] [Shell] [jobertabma/recon.sh](https://github.com/jobertabma/recon.sh) 跟踪,识别和存储侦查(reconnaissance)工具的输出
+- [**284**星][1y] [Shell] [ha71/namechk](https://github.com/ha71/namechk) Osint tool based on namechk.com for checking usernames on more than 100 websites, forums and social networks.
+- [**284**星][4y] [C] [firnsy/barnyard2](https://github.com/firnsy/barnyard2) Barnyard2 is a dedicated spooler for Snort's unified2 binary output format.
+- [**284**星][5d] [Go] [cruise-automation/fwanalyzer](https://github.com/cruise-automation/fwanalyzer) a tool to analyze filesystem images for security
+- [**284**星][6m] [Go] [anshumanbh/tko-subs](https://github.com/anshumanbh/tko-subs) A tool that can help detect and takeover subdomains with dead DNS records
+- [**284**星][6m] [Py] [airbus-seclab/cpu_rec](https://github.com/airbus-seclab/cpu_rec) 在任意二进制文件中识别CPU 指令
+- [**283**星][3m] [C++] [yuanyuanxiang/simpleremoter](https://github.com/yuanyuanxiang/simpleremoter) 基于gh0st的远程控制器:实现了终端管理、进程管理、窗口管理、远程桌面、文件管理、语音管理、视频管理、服务管理、注册表管理等功能,优化全部代码及整理排版,修复内存泄漏缺陷,程序运行稳定。此项目初版见:
+- [**283**星][9d] [C] [tomb5/tomb5](https://github.com/tomb5/tomb5) Chronicles Disassembly translated to C source code.
+- [**283**星][4m] [tanprathan/owasp-testing-checklist](https://github.com/tanprathan/owasp-testing-checklist) OWASP based Web Application Security Testing Checklist is an Excel based checklist which helps you to track the status of completed and pending test cases.
+- [**283**星][5m] [Go] [suyashkumar/ssl-proxy](https://github.com/suyashkumar/ssl-proxy)
+- [**283**星][1y] [Rust] [superandroidanalyzer/super](https://github.com/superandroidanalyzer/super) Secure, Unified, Powerful and Extensible Rust Android Analyzer
+- [**283**星][2y] [Java] [simbiose/encryption](https://github.com/simbiose/encryption) Encryption is a simple way to encrypt and decrypt strings on Android and Java project.
+- [**283**星][4m] [Py] [shenril/sitadel](https://github.com/shenril/sitadel) Web Application Security Scanner
+- [**283**星][7d] [Py] [punch-cyber/stoq](https://github.com/punch-cyber/stoq) simplify the mundane and repetitive tasks an analyst is required to do
+- [**283**星][1y] [Py] [mazen160/struts-pwn_cve-2018-11776](https://github.com/mazen160/struts-pwn_cve-2018-11776) An exploit for Apache Struts CVE-2018-11776
+- [**283**星][3y] [C] [matt-wu/aes](https://github.com/matt-wu/aes) Understanding AES & Rijndael
+- [**283**星][7m] [Java] [katjahahn/portex](https://github.com/katjahahn/portex) Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness
+- [**283**星][9m] [C] [jiaoxianjun/btle](https://github.com/jiaoxianjun/btle) Bluetooth Low Energy (BLE) packet sniffer and generator for both standard and non standard (raw bit).
+- [**283**星][2y] [C++] [google/syzygy](https://github.com/google/syzygy) a suite of tools for the instrumentation of COFF object files and PE binaries
+- [**283**星][1y] [Java] [elkokc/reflector](https://github.com/elkokc/reflector) Burp 插件,浏览网页时实时查找反射 XSS
+- [**283**星][3y] [HTML] [buddhalabs/packetstorm-exploits](https://github.com/buddhalabs/packetstorm-exploits) Collection of publicly available exploits from Packetstorm
+- [**282**星][3y] [Go] [geohot/lolrecaptcha](https://github.com/geohot/lolrecaptcha) We try to break the recaptcha for the Merry Christmas for all!
+- [**282**星][2y] [Py] [0xislamtaha/python-rootkit](https://github.com/0xIslamTaha/Python-Rootkit) Python Remote Administration Tool (RAT) to gain meterpreter session
+- [**282**星][9m] [C#] [nsacyber/windows-event-log-messages](https://github.com/nsacyber/Windows-Event-Log-Messages) 检索Windows二进制文件中嵌入的Windows事件日志消息的定义,并以discoverable的格式提供它们
+- [**282**星][1y] [HTML] [googleprojectzero/p0tools](https://github.com/googleprojectzero/p0tools) Project Zero Docs and Tools
+- [**282**星][3d] [Py] [qiskit/qiskit-aqua](https://github.com/Qiskit/qiskit-aqua) Aqua provides a library and tools to build applications for noisy quantum computers.
+- [**282**星][3m] [Py] [thekingofduck/easyxsspayload](https://github.com/thekingofduck/easyxsspayload) XssPayload List . Usage:
+- [**282**星][2y] [Py] [ssooking/ctfdefense](https://github.com/ssooking/ctfdefense) Some tools for CTF off line
+- [**282**星][5m] [Perl] [shirkdog/pulledpork](https://github.com/shirkdog/pulledpork) Pulled Pork for Snort and Suricata rule management (from Google code)
+- [**282**星][8m] [Py] [phage-nz/ph0neutria](https://github.com/phage-nz/ph0neutria) ph0neutria is a malware zoo builder that sources samples straight from the wild. Everything is stored in Viper for ease of access and manageability.
+- [**282**星][5d] [PS] [nullbind/powershellery](https://github.com/nullbind/powershellery) This repo contains Powershell scripts used for general hackery.
+- [**282**星][3y] [C] [leaflabs/libmaple](https://github.com/leaflabs/libmaple) [INACTIVE] C and C++ library for STM32 ARM Cortex-M3 development boards.
+- [**282**星][3m] [Py] [joxeankoret/pyew](https://github.com/joxeankoret/pyew) Official repository for Pyew.
+- [**282**星][2m] [Java] [exalab/anlinux-app](https://github.com/exalab/anlinux-app) AnLinux allow you to run Linux on Android without root access.
+- [**282**星][22d] [drduh/debian-privacy-server-guide](https://github.com/drduh/debian-privacy-server-guide) Guide to using a remote Debian server for security and privacy services
+- [**282**星][1y] [Ruby] [danmcinerney/pentest-machine](https://github.com/danmcinerney/pentest-machine) Automates some pentest jobs via nmap xml file
+- [**282**星][1y] [JS] [chrisallenlane/novahot](https://github.com/chrisallenlane/novahot) Webshell框架,实现了基于Json的API,可与任何语言编写的后门(默认支持PHP/Ruby/Python)进行通信。
+- [**282**星][2y] [Py] [bit4woo/passmaker](https://github.com/bit4woo/passmaker) 可以自定义规则的密码字典生成器,支持图形界面 A password-generator that base on the rules that you specified
+- [**282**星][2m] [C] [ayeks/sgx-hardware](https://github.com/ayeks/sgx-hardware) This is a list of hardware which is supports Intel SGX - Software Guard Extensions.
+- [**281**星][3y] [C++] [googleprojectzero/symboliclink-testing-tools](https://github.com/googleprojectzero/symboliclink-testing-tools) 用于测试Windows的各种符号链接类型的一套工具
+- [**281**星][1y] [CSS] [w-digital-scanner/w11scan](https://github.com/w-digital-scanner/w11scan) 分布式WEB指纹识别平台 Distributed WEB fingerprint identification platform
+- [**281**星][9y] [Py] [ptoomey3/evilarc](https://github.com/ptoomey3/evilarc) Create tar/zip archives that can exploit directory traversal vulnerabilities
+- [**281**星][1y] [Py] [novicelive/bintut](https://github.com/novicelive/bintut) Teach you a binary exploitation for great good.
+- [**281**星][3m] [PHP] [nico3333fr/csp-useful](https://github.com/nico3333fr/csp-useful) Collection of scripts, thoughts about CSP (Content Security Policy)
+- [**281**星][4y] [Py] [monnappa22/limon](https://github.com/monnappa22/limon) Limon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators of Linux malware. It allows one to inspect Linux malware before execution, during execution, and after execution (post-mortem analysis) by performing static, dynamic and memory analysis using open s…
+- [**281**星][8m] [Py] [micropyramid/forex-python](https://github.com/micropyramid/forex-python) Foreign exchange rates, Bitcoin price index and currency conversion using ratesapi.io
+- [**281**星][4y] [Py] [mandatoryprogrammer/xssless](https://github.com/mandatoryprogrammer/xssless) An automated XSS payload generator written in python.
+- [**281**星][10m] [maaaaz/impacket-examples-windows](https://github.com/maaaaz/impacket-examples-windows) The great impacket example scripts compiled for Windows
+- [**281**星][1m] [Py] [cwerling/psptool](https://github.com/cwerling/psptool) Display, extract, and manipulate PSP firmware inside UEFI images
+- [**281**星][9m] [Py] [chenjiandongx/async-proxy-pool](https://github.com/chenjiandongx/async-proxy-pool)
+- [**281**星][6m] [Shell] [chaifeng/ufw-docker](https://github.com/chaifeng/ufw-docker) To fix the Docker and UFW security flaw without disabling iptables
+- [**281**星][1m] [C] [aflsmart/aflsmart](https://github.com/aflsmart/aflsmart) Smart Greybox Fuzzing (
+- [**280**星][2y] [Go] [unixpickle/kahoot-hack](https://github.com/unixpickle/kahoot-hack) Reverse engineering kahoot.it
+- [**280**星][1m] [Py] [0xinfection/xsrfprobe](https://github.com/0xInfection/XSRFProbe) The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
+- [**280**星][27d] [Shell] [trimstray/mkchain](https://github.com/trimstray/mkchain) 建立从根证书到最终用户证书的有效的SSL证书链, 修复不完整的证书链并下载所有缺少的CA证书
+- [**280**星][2y] [Py] [xoreaxeaxeax/reductio](https://github.com/xoreaxeaxeax/reductio) An exploration of code homeomorphism
+- [**280**星][8d] [Py] [tomato42/tlsfuzzer](https://github.com/tomato42/tlsfuzzer) SSL and TLS protocol test suite and fuzzer
+- [**280**星][2y] [C++] [sam-b/windows_kernel_address_leaks](https://github.com/sam-b/windows_kernel_address_leaks) Windows上从用户模式泄漏内核模式信息的示例
+- [**280**星][3m] [Py] [hacktoolspack/hack-tools](https://github.com/hacktoolspack/hack-tools) hack tools
+- [**280**星][4y] [Py] [fuzzing/mffa](https://github.com/fuzzing/mffa) Media Fuzzing Framework for Android
+- [**280**星][27d] [Py] [fireeye/flare-emu](https://github.com/fireeye/flare-emu) 结合Unicorn引擎, 简化模拟脚本的编写
+- [**280**星][26d] [Py] [facebook/fbkutils](https://github.com/facebook/fbkutils) A variety of utilities built and maintained by Facebook's Linux Kernel Team that we wish to share with the community.
+- [**280**星][12d] [Py] [ekultek/whatbreach](https://github.com/ekultek/whatbreach) OSINT tool to find breached emails, databases, pastes, and relevant information
+- [**280**星][1m] [C++] [changeofpace/viviennevmm](https://github.com/changeofpace/viviennevmm) VivienneVMM is a stealthy debugging framework implemented via an Intel VT-x hypervisor.
+- [**280**星][3y] [C] [andreafabrizi/prism](https://github.com/andreafabrizi/prism) PRISM is an user space stealth reverse shell backdoor, written in pure C.
+- [**280**星][7m] [aleenzz/mssql_sql_bypass_wiki](https://github.com/aleenzz/mssql_sql_bypass_wiki) MSSQL注入提权,bypass的一些总结
+- [**280**星][1m] [Py] [0xinfection/xsrfprobe](https://github.com/0xinfection/xsrfprobe) The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
+- [**280**星][2m] [C] [0xdea/exploits](https://github.com/0xdea/exploits) 研究员 0xdeadbeef 的公开exploits 收集
+- [**279**星][2m] [Py] [bennington-distributed-systems-2017/darkdarkgo](https://github.com/bennington-distributed-systems-2017/darkdarkgo) Modeled Google and Bing to build a distributed search engine for the dark web
+- [**279**星][1y] [Py] [rassec/pentester-fully-automatic-scanner](https://github.com/rassec/pentester-fully-automatic-scanner) DNS Subdomain● Brute force ● Web Spider ● Nmap Scan ● etc
+- [**279**星][1y] [Py] [rassec/pentester-fully-automatic-scanner](https://github.com/RASSec/pentestER-Fully-automatic-scanner) DNS Subdomain● Brute force ● Web Spider ● Nmap Scan ● etc
+- [**279**星][3d] [Shell] [wuseman/emagnet](https://github.com/wuseman/emagnet) Emagnet is a tool for find leaked databases with 97.1% accurate to grab mail + password together from pastebin leaks. Support for brute forcing spotify accounts, instagram accounts, ssh servers, microsoft rdp clients and gmail accounts
+- [**279**星][2y] [C++] [rovo89/android_art](https://github.com/rovo89/android_art) Android ART with modifications for the Xposed framework.
+- [**279**星][6m] [Py] [ridter/exchange2domain](https://github.com/ridter/exchange2domain) CVE-2018-8581
+- [**279**星][3y] [Py] [pmsosa/duckhunt](https://github.com/pmsosa/duckhunt) Prevent RubberDucky (or other keystroke injection) attacks
+- [**279**星][2m] [Py] [pbiernat/ripr](https://github.com/pbiernat/ripr) Package Binary Code as a Python class using Binary Ninja and Unicorn Engine
+- [**279**星][8m] [Py] [nightbringer21/fridump](https://github.com/nightbringer21/fridump) A universal memory dumper using Frida
+- [**279**星][6m] [Py] [mthbernardes/rsg](https://github.com/mthbernardes/rsg) 多种方式生成反向Shell
+- [**279**星][5y] [ApacheConf] [micahflee/fixubuntu](https://github.com/micahflee/fixubuntu) This is the code that powers https://fixubuntu.com/.
+- [**279**星][3y] [Py] [maldevel/ipgeolocation](https://github.com/maldevel/ipgeolocation) Retrieve IP Geolocation information
+- [**279**星][5y] [JS] [fix-macosx/fix-macosx](https://github.com/fix-macosx/fix-macosx) This is the code that powers https://fix-macosx.com/.
+- [**279**星][3y] [C] [firefart/dirtycow](https://github.com/firefart/dirtycow)
+- [**279**星][2m] [C#] [fireeye/silketw](https://github.com/fireeye/silketw) flexible C# wrappers for ETW
+- [**279**星][1y] [C++] [fireeye/flare-wmi](https://github.com/fireeye/flare-wmi) 描述Windows管理规范(WMI)技术的各种文档和代码项目
+- [**279**星][23d] [C] [droberson/ssh-honeypot](https://github.com/droberson/ssh-honeypot) Fake sshd that logs ip addresses, usernames, and passwords.
+- [**279**星][2m] [Java] [appium/sign](https://github.com/appium/sign) Sign.jar automatically signs an apk with the Android test certificate.
+- [**279**星][1y] [C] [abeluck/stegdetect](https://github.com/abeluck/stegdetect) UNMAINTAINED. USE AT OWN RISK. Stegdetect is an automated tool for detecting steganographic content in images.
+- [**279**星][2d] [a2u/free-proxy-list](https://github.com/a2u/free-proxy-list)
+- [**278**星][2d] [PS] [microsoftdocs/windows-driver-docs](https://github.com/MicrosoftDocs/windows-driver-docs) 官方Windows驱动程序工具包文档
+- [**278**星][1y] [Py] [fsecurelabs/wepwnise](https://github.com/FSecureLABS/wePWNise) WePWNise generates architecture independent VBA code to be used in Office documents or templates and automates bypassing application control and exploit mitigation software.
+- [**278**星][3y] [JS] [wuchangming/https-mitm-proxy-handbook](https://github.com/wuchangming/https-mitm-proxy-handbook) 基于Node.js的HTTPS MITM(中间人)代理的原理和实现
+- [**278**星][11d] [Java] [optimatika/ojalgo](https://github.com/optimatika/ojalgo) Java code that has to do with mathematics, linear algebra and optimisation.
+- [**278**星][2m] [Py] [mcw0/poc](https://github.com/mcw0/poc) Issues has been disabled for these PoC's, as they are simply PoC, Public Domain and unsupported.
+- [**278**星][2y] [Py] [iniqua/plecost](https://github.com/iniqua/plecost) Wordpress 博客引擎的漏洞指纹识别和漏洞查找工具
+- [**278**星][18d] [Py] [hnfull/intensio-obfuscator](https://github.com/hnfull/intensio-obfuscator) Obfuscate a python code 2.x and 3.x
+- [**278**星][15d] [Py] [franccesco/getaltname](https://github.com/franccesco/getaltname) 直接从SSL证书中提取子域名或虚拟域名
+- [**278**星][2y] [JS] [dpnishant/raptor](https://github.com/dpnishant/raptor) Web-based Source Code Vulnerability Scanner
+- [**278**星][12d] [C++] [crosire/d3d8to9](https://github.com/crosire/d3d8to9) A D3D8 pseudo-driver which converts API calls and bytecode shaders to equivalent D3D9 ones.
+- [**278**星][10d] [HTML] [bl4de/ctf](https://github.com/bl4de/ctf) CTF (Capture The Flag) writeups, code snippets, notes, scripts
+- [**277**星][3m] [Java] [ztosec/secscan-authcheck](https://github.com/ztosec/secscan-authcheck) 越权检测工具
+- [**277**星][12m] [Py] [wyatu/cve-2018-8581](https://github.com/wyatu/cve-2018-8581) CVE-2018-8581 | Microsoft Exchange Server Elevation of Privilege Vulnerability
+- [**277**星][2y] [Assembly] [tinysec/windows-syscall-table](https://github.com/tinysec/windows-syscall-table) Win XP 到 Win 10 的系统调用表,包括 SSDT 和 Shadow SSDT
+- [**277**星][1m] [Py] [sneakerhax/runbooks](https://github.com/sneakerhax/runbooks) Command references, posts, and resources for different topics
+- [**277**星][7m] [C] [rieck/malheur](https://github.com/rieck/malheur) A Tool for Automatic Analysis of Malware Behavior
+- [**277**星][6m] [Perl] [rezasp/vbscan](https://github.com/rezasp/vbscan) OWASP VBScan is a Black Box vBulletin Vulnerability Scanner
+- [**277**星][15d] [C] [o-gs/dji-firmware-tools](https://github.com/o-gs/dji-firmware-tools) Tools for handling firmwares of DJI products, with focus on quadcopters.
+- [**277**星][2m] [C] [lfittl/libpg_query](https://github.com/lfittl/libpg_query) C library for accessing the PostgreSQL parser outside of the server environment
+- [**277**星][12m] [C++] [jmmartinez/easy-just-in-time](https://github.com/jmmartinez/easy-just-in-time) LLVM Optimization to extract a function, embedded in its intermediate representation in the binary, and execute it using the LLVM Just-In-Time compiler.
+- [**277**星][15d] [Py] [hugsy/defcon_27_windbg_workshop](https://github.com/hugsy/defcon_27_windbg_workshop) DEFCON 27 workshop - Modern Debugging with WinDbg Preview
+- [**277**星][14d] [disclose/disclose](https://github.com/disclose/disclose) Driving safety, simplicity, and standardization in vulnerability disclosure.
+- [**277**星][20d] [Java] [c0ny1/fastjsonexploit](https://github.com/c0ny1/fastjsonexploit) Fastjson vulnerability quickly exploits the framework(fastjson漏洞快速利用框架)
+- [**276**星][11d] [C] [jedisct1/pure-ftpd](https://github.com/jedisct1/pure-ftpd) Pure FTP server
+- [**276**星][1m] [C] [grapheneos/hardened_malloc](https://github.com/GrapheneOS/hardened_malloc) Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability / integration over time.
+- [**276**星][5y] [C++] [tsiv/ccminer-cryptonight](https://github.com/tsiv/ccminer-cryptonight)
+- [**276**星][2y] [C] [taviso/rbndr](https://github.com/taviso/rbndr) Simple DNS Rebinding Service
+- [**276**星][1m] [Go] [rmikehodges/hidensneak](https://github.com/rmikehodges/hidensneak) 通过提供快速部署,管理和关闭各种云服务的界面,协助管理渗透测试人员的攻击基础架构
+- [**276**星][2d] [Java] [nationalsecurityagency/datawave](https://github.com/nationalsecurityagency/datawave) DataWave is an ingest/query framework that leverages Apache Accumulo to provide fast, secure data access.
+- [**276**星][11d] [Py] [liuchangfreeman/c--compiler](https://github.com/liuchangfreeman/c--compiler) C--compiler which implements LL(1)\LR(0)\SLR\LR(1) and semantic analysis and MIPS generate
+- [**276**星][3m] [Py] [jpcertcc/aa-tools](https://github.com/jpcertcc/aa-tools) 多脚本
+ - [apt17scan.py](https://github.com/jpcertcc/aa-tools/blob/master/apt17scan.py) Volatility插件, 检测APT17相关的恶意代码并提取配置
+ - [emdivi_postdata_decoder](https://github.com/jpcertcc/aa-tools/blob/master/emdivi_postdata_decoder.py) 解码Emdivi post的数据
+ - [emdivi_string_decryptor](https://github.com/jpcertcc/aa-tools/blob/master/emdivi_string_decryptor.py) IDAPython脚本, 解密Emdivi内的字符串
+ - [citadel_decryptor](https://github.com/jpcertcc/aa-tools/tree/master/citadel_decryptor) Data decryption tool for Citadel
+ - [adwind_string_decoder](https://github.com/jpcertcc/aa-tools/blob/master/adwind_string_decoder.py) Python script for decoding strings inside Adwind
+ - [redleavesscan](https://github.com/jpcertcc/aa-tools/blob/master/redleavesscan.py) Volatility plugin for detecting RedLeaves and extracting its config
+ - [datper_splunk](https://github.com/jpcertcc/aa-tools/blob/master/datper_splunk.py) Python script for detects Datper communication and adds result field to Splunk index
+ - [datper_elk](https://github.com/jpcertcc/aa-tools/blob/master/datper_elk.py) Python script for detects Datper communication and adds result field to Elasticsearch index
+ - [tscookie_decode](https://github.com/jpcertcc/aa-tools/blob/master/tscookie_decode.py) Python script for decrypting and parsing TSCookie configure data
+ - [wellmess_cookie_decode](https://github.com/jpcertcc/aa-tools/blob/master/wellmess_cookie_decode.py) Python script for decoding WellMess's cookie data (support Python2)
+ - [cobaltstrikescan](https://github.com/jpcertcc/aa-tools/blob/master/cobaltstrikescan.py) Volatility plugin for detecting Cobalt Strike Beacon and extracting its config
+ - [tscookie_data_decode](https://github.com/jpcertcc/aa-tools/blob/master/tscookie_data_decode.py) Python script for decrypting and parsing TSCookie configure data
+- [**276**星][4y] [XSLT] [ironbee/ironbee](https://github.com/ironbee/ironbee) Universal web application security sensor intended for real-time monitoring and defense.
+- [**276**星][12m] [Py] [hongrisec/ctf-training](https://github.com/hongrisec/ctf-training) 收集各大比赛的题目和Writeup
+- [**276**星][1y] [Java] [ewilded/shelling](https://github.com/ewilded/shelling) SHELLING - a comprehensive OS command injection payload generator
+- [**276**星][2y] [Py] [dirtyfilthy/freshonions-torscraper](https://github.com/dirtyfilthy/freshonions-torscraper) Fresh Onions is an open source TOR spider / hidden service onion crawler hosted at zlal32teyptf4tvi.onion
+- [**276**星][12d] [C#] [dahall/vanara](https://github.com/dahall/vanara) A set of .NET libraries for Windows implementing PInvoke calls to many native Windows APIs with supporting wrappers.
+- [**276**星][3m] [Shell] [cryptolok/aslray](https://github.com/cryptolok/aslray) Linux ELF x32/x64 ASLR DEP/NX bypass exploit with stack-spraying
+- [**276**星][2y] [Py] [anssi-fr/polichombr](https://github.com/anssi-fr/polichombr) Collaborative malware analysis framework
+- [**276**星][4m] [Py] [18f/domain-scan](https://github.com/18f/domain-scan) A lightweight pipeline, locally or in Lambda, for scanning things like HTTPS, third party service use, and web accessibility.
+- [**275**星][10d] [TS] [javascript-obfuscator/webpack-obfuscator](https://github.com/javascript-obfuscator/webpack-obfuscator) javascript-obfuscator plugin for Webpack
+- [**275**星][3m] [Vue] [zerx0r/kage](https://github.com/Zerx0r/Kage) Kage is Graphical User Interface for Metasploit Meterpreter and Session Handler
+- [**275**星][7m] [Shell] [venshine/decompile-apk](https://github.com/venshine/decompile-apk) APK 反编译
+- [**275**星][3m] [C] [sensepost/hostapd-mana](https://github.com/sensepost/hostapd-mana) SensePost's modified hostapd for wifi attacks.
+- [**275**星][7d] [Go] [openzipkin/zipkin-go](https://github.com/openzipkin/zipkin-go) Zipkin tracer library for go
+- [**275**星][5m] [geerlingguy/ansible-role-security](https://github.com/geerlingguy/ansible-role-security) Ansible Role - Security
+- [**275**星][3y] [Java] [fourbrother/icodetools](https://github.com/fourbrother/icodetools) Android中动态自动插入代码到apk中工具
+- [**275**星][1y] [Java] [florent37/android-nosql](https://github.com/florent37/android-nosql) Lightweight, simple structured NoSQL database for Android
+- [**275**星][2y] [Java] [commonsguy/cwac-security](https://github.com/commonsguy/cwac-security) CWAC-Security: Helping You Help Your Users Defend Their Data
+- [**274**星][6m] [Py] [k8gege/cve-2019-0708](https://github.com/k8gege/cve-2019-0708) 3389远程桌面代码执行漏洞CVE-2019-0708批量检测工具(Rdpscan Bluekeep Check)
+- [**274**星][8d] [C] [br101/horst](https://github.com/br101/horst) “horst” - lightweight IEEE802.11 wireless LAN analyzer with a text interface
+- [**274**星][3y] [Py] [ptr32void/ostrica](https://github.com/ptr32void/ostrica)
+- [**274**星][1y] [PHP] [psecio/parse](https://github.com/psecio/parse) Parse: A Static Security Scanner
+- [**274**星][3d] [Perl] [owasp/o-saft](https://github.com/owasp/o-saft) O-Saft - OWASP SSL advanced forensic tool
+- [**274**星][22d] [Go] [muraenateam/muraena](https://github.com/muraenateam/muraena) Muraena is an almost-transparent reverse proxy aimed at automating phishing and post-phishing activities.
+- [**274**星][2y] [Java] [mateuszk87/badintent](https://github.com/mateuszk87/badintent) Intercept, modify, repeat and attack Android's Binder transactions using Burp Suite
+- [**274**星][29d] [Go] [kubernetes-sigs/application](https://github.com/kubernetes-sigs/application) Application metadata descriptor CRD
+- [**274**星][12m] [C] [jmk-foofus/medusa](https://github.com/jmk-foofus/medusa) Medusa is a speedy, parallel, and modular, login brute-forcer.
+- [**274**星][3y] [C] [iaik/cjag](https://github.com/iaik/cjag) CJAG is an open-source implementation of our cache-based jamming agreement.
+- [**274**星][1y] [C++] [dekimir/ramfuzz](https://github.com/dekimir/ramfuzz) Combining Unit Tests, Fuzzing, and AI
+- [**274**星][21d] [C] [beckus/qemu_stm32](https://github.com/beckus/qemu_stm32) QEMU with an STM32 microcontroller implementation
+- [**274**星][7m] [C++] [aekras1a/updated-carbanak-source-with-plugins](https://github.com/aekras1a/updated-carbanak-source-with-plugins)
+- [**274**星][3d] [Py] [abhi-r3v0/adhrit](https://github.com/abhi-r3v0/adhrit) Android Security Suite for APK reversing, in-depth reconnaissance and static bytecode analysis based on Ghera benchmarks.
+- [**273**星][8m] [C] [rofl0r/microsocks](https://github.com/rofl0r/microsocks) tiny, portable SOCKS5 server with very moderate resource usage
+- [**273**星][4m] [Py] [mariovilas/winappdbg](https://github.com/mariovilas/winappdbg) WinAppDbg Debugger
+- [**273**星][2y] [Go] [kisesy/gscan_quic](https://github.com/kisesy/gscan_quic) Google Quic 扫描工具
+- [**273**星][2y] [C++] [isometric/bucketcompressiontrick](https://github.com/isometric/bucketcompressiontrick) Cool trick to store 4 5-bit values in one 16-bit value.
+- [**272**星][2m] [C++] [windytan/redsea](https://github.com/windytan/redsea) A lightweight RDS to JSON decoder
+- [**272**星][16d] [C++] [steve-m/kalibrate-rtl](https://github.com/steve-m/kalibrate-rtl) fork of
+- [**272**星][4y] [C] [robertdavidgraham/pemcrack](https://github.com/robertdavidgraham/pemcrack) Cracks SSL PEM files that hold encrypted private keys. Brute forces or dictionary cracks. This code is extraordinarily slow, DON'T JUDGE ME!!!
+- [**272**星][3m] [Py] [pysmt/pysmt](https://github.com/pysmt/pysmt) A library for SMT formulae manipulation and solving
+- [**272**星][3d] [PS] [nettitude/poshc2](https://github.com/nettitude/PoshC2) Python Server for PoshC2
+- [**272**星][3d] [PS] [nettitude/poshc2](https://github.com/nettitude/poshc2) Python Server for PoshC2
+- [**272**星][8m] [Py] [mozillasecurity/peach](https://github.com/mozillasecurity/peach) Peach is a fuzzing framework which uses a DSL for building fuzzers and an observer based architecture to execute and monitor them.
+- [**272**星][3y] [Py] [joxeankoret/multiav](https://github.com/joxeankoret/multiav) MultiAV scanner with Python and JSON API. Disclaimer: I don't maintain it any more.
+- [**272**星][1y] [Shell] [jgamblin/carhackingtools](https://github.com/jgamblin/carhackingtools) Install and Configure Common Car Hacking Tools.
+- [**272**星][4m] [Py] [invernizzi/scapy-http](https://github.com/invernizzi/scapy-http) Support for HTTP in Scapy
+- [**272**星][8d] [Py] [ghostop14/sparrow-wifi](https://github.com/ghostop14/sparrow-wifi) Next-Gen GUI-based WiFi and Bluetooth Analyzer for Linux
+- [**272**星][2y] [C++] [gellin/teamviewer_permissions_hook_v1](https://github.com/gellin/teamviewer_permissions_hook_v1) A proof of concept injectable C++ dll, that uses naked inline hooking and direct memory modification to change your TeamViewer permissions.
+- [**272**星][1y] [Py] [gbafana25/esp8266_honeypot](https://github.com/gbafana25/esp8266_honeypot) THE ESP8266 HONEYPOT: A PROJECT TO TRAP SCRIPT KIDDIES EVERYWHRE!!
+- [**272**星][2y] [Java] [crowhawk/magictoe](https://github.com/crowhawk/magictoe) 基于webmagic + springboot + mybatis的Java爬虫,使用Echarts进行数据可视化分析,提供了从爬虫获取数据到数据持久化、数据可视化分析以及构建简单的代理池等一整套解决方案模板。
+- [**271**星][2y] [C] [bishopfox/bfdecrypt](https://github.com/bishopfox/bfdecrypt) Utility to decrypt App Store apps on jailbroken iOS 11.x
+- [**271**星][7m] [Py] [s0md3v/breacher](https://github.com/s0md3v/Breacher) An advanced multithreaded admin panel finder written in python.
+- [**271**星][2d] [Py] [shaypal5/cachier](https://github.com/shaypal5/cachier) Persistent, stale-free, local and cross-machine caching for Python functions.
+- [**271**星][7m] [s0md3v/mypapers](https://github.com/s0md3v/mypapers) Repository for hosting my research papers
+- [**271**星][2y] [Java] [reoky/android-crackme-challenge](https://github.com/reoky/android-crackme-challenge) A collection of reverse engineering challenges for learning about the Android operating system and mobile security.
+- [**271**星][3y] [Py] [quandyfactory/dicttoxml](https://github.com/quandyfactory/dicttoxml) Simple library to convert a Python dictionary or other native data type into a valid XML string.
+- [**271**星][23d] [Swift] [prateek147/dvia-v2](https://github.com/prateek147/dvia-v2) Damn Vulnerable iOS App (DVIA) is an iOS application that is damn vulnerable. Its main goal is to provide a platform to mobile security enthusiasts/professionals or students to test their iOS penetration testing skills in a legal environment. This project is developed and maintained by @prateekg147. The vulnerabilities and solutions covered in t…
+- [**271**星][10m] [Py] [pisupply/papirus](https://github.com/pisupply/papirus) Resources for PaPiRus ePaper eInk displays
+- [**271**星][8m] [offensive-security/nethunter-lrt](https://github.com/offensive-security/nethunter-lrt) The Nethunter Linux Root Toolkit is a collection of bash scripts which install Nethunter onto a supported device.
+- [**271**星][10m] [Vala] [naxuroqa/venom](https://github.com/naxuroqa/venom) a modern Tox client for the GNU/Linux desktop
+- [**271**星][17d] [C#] [mkaring/confuserex](https://github.com/mkaring/confuserex) An open-source, free protector for .NET applications
+- [**271**星][3y] [Py] [lgandx/responder-windows](https://github.com/lgandx/responder-windows) Responder Windows Version Beta
+- [**271**星][3y] [jinyu121/surgerule](https://github.com/jinyu121/surgerule) Deprecate since 2016
+- [**271**星][3y] [Py] [inaz2/roputils](https://github.com/inaz2/roputils) A Return-oriented Programming toolkit
+- [**271**星][2m] [JS] [hynekpetrak/javascript-malware-collection](https://github.com/hynekpetrak/javascript-malware-collection) Collection of almost 40.000 javascript malware samples
+- [**271**星][2y] [Py] [hadi999/nxcrypt](https://github.com/hadi999/nxcrypt) NXcrypt - 'python backdoor' framework
+- [**271**星][5y] [Scala] [fix-macosx/net-monitor](https://github.com/fix-macosx/net-monitor) Toolkit for auditing "phone home" behavior on Mac OS X Yosemite.
+- [**271**星][3y] [C] [cisco-talos/mbrfilter](https://github.com/cisco-talos/mbrfilter) Cisco Talos MBR Filter Driver
+- [**271**星][2y] [C] [can1357/theperfectinjector](https://github.com/can1357/theperfectinjector) Literally, the perfect injector.
+- [**271**星][2y] [JS] [bugbountyforum/xss-radar](https://github.com/bugbountyforum/xss-radar)
+- [**270**星][3m] [mattnotmax/cyberchef-recipes](https://github.com/mattnotmax/cyberchef-recipes) A list of cyber-chef recipes
+- [**270**星][2d] [HTML] [vernesong/openclash](https://github.com/vernesong/openclash) A Clash Client For OpenWrt
+- [**270**星][4y] [C++] [cisco-talos/moflow](https://github.com/Cisco-Talos/moflow) Release Branches for MoFlow
+- [**270**星][1y] [Shell] [zephrfish/dockerattack](https://github.com/zephrfish/dockerattack) Various Tools and Docker Images
+- [**270**星][3m] [ObjC] [veorq/siphash](https://github.com/veorq/siphash) High-speed pseudorandom function (reference code)
+- [**270**星][12m] [Shell] [thelinuxchoice/instainsane](https://github.com/thelinuxchoice/instainsane) Multi-threaded Instagram Brute Forcer (100 attemps at once)
+- [**270**星][1y] [JS] [ropnop/serverless_toolkit](https://github.com/ropnop/serverless_toolkit) A collection of useful Serverless functions I use when pentesting
+- [**270**星][6y] [C] [robertdavidgraham/isowall](https://github.com/robertdavidgraham/isowall) This is a mini-firewall that completely isolates a target device from the local network.
+- [**270**星][6d] [JS] [protofire/solhint](https://github.com/protofire/solhint) Security and Style Guide validations.
+- [**270**星][16d] [PHP] [pan-unit42/iocs](https://github.com/pan-unit42/iocs) Indicators from Unit 42 Public Reports
+- [**270**星][1m] [Py] [nccgroup/pmapper](https://github.com/nccgroup/pmapper) A tool for quickly evaluating IAM permissions in AWS.
+- [**270**星][6m] [Java] [nationalsecurityagency/lemongrenade](https://github.com/nationalsecurityagency/lemongrenade) Data-driven automation platform
+- [**270**星][5y] [leonardonve/sslstrip2](https://github.com/leonardonve/sslstrip2) SSLStrip version to defeat HSTS
+- [**270**星][3y] [C] [laginimaineb/extractkeymaster](https://github.com/laginimaineb/extractkeymaster) Exploit that extracts Qualcomm's KeyMaster keys using CVE-2015-6639 and CVE-2016-2431
+- [**270**星][5y] [C] [conradev/dumpdecrypted](https://github.com/conradev/dumpdecrypted) Dumps decrypted mach-o files from encrypted iPhone applications from memory to disk. This tool is necessary for security researchers to be able to look under the hood of encryption.
+- [**270**星][11m] [Py] [appsecco/the-art-of-subdomain-enumeration](https://github.com/appsecco/the-art-of-subdomain-enumeration) This repository contains all the supplement material for the book "The art of sub-domain enumeration"
+- [**269**星][10m] [Shell] [thelinuxchoice/instashell](https://github.com/thelinuxchoice/instashell) Multi-threaded Instagram Brute Forcer without password limit
+- [**269**星][18d] [Dockerfile] [pengchujin/v2raydocker](https://github.com/pengchujin/v2raydocker) 一键v2ray ws + tls 方便就完事了
+- [**269**星][4d] [Py] [abhisharma404/vault](https://github.com/abhisharma404/vault) swiss army knife for hackers
+- [**269**星][7d] [Py] [xfreed0m/rdpassspray](https://github.com/xfreed0m/rdpassspray) Python3 tool to perform password spraying using RDP
+- [**269**星][2y] [Py] [toyakula/luna](https://github.com/toyakula/luna) luna webscanner
+- [**269**星][2y] [sam-b/windows_kernel_resources](https://github.com/sam-b/windows_kernel_resources) Papers, blogposts, tutorials etc for learning about Windows kernel exploitation, internals and (r|b)ootkits
+- [**269**星][3y] [ptresearch/me-disablement](https://github.com/ptresearch/me-disablement)
+- [**269**星][9d] [Rust] [nccgroup/dirble](https://github.com/nccgroup/dirble) Fast directory scanning and scraping tool
+- [**269**星][3m] [mattnotmax/cyberchef-recipes](https://github.com/mattnotmax/cyberchef-recipes) A list of cyber-chef recipes
+- [**269**星][2y] [Py] [lunarca/simpleemailspoofer](https://github.com/lunarca/simpleemailspoofer) A simple Python CLI to spoof emails.
+- [**269**星][4m] [PHP] [lawrenceamer/0xsp-mongoose](https://github.com/lawrenceamer/0xsp-mongoose) Privilege Escalation Enumeration Toolkit (64/32 ) , fast , intelligent enumeration with Web API integration . Mastering Your Own Finding
+- [**269**星][2y] [Py] [eth0izzle/needl](https://github.com/eth0izzle/needl) Take back your privacy. Lose yourself in the haystack.
+- [**269**星][7m] [Go] [cloudfoundry/java-buildpack-memory-calculator](https://github.com/cloudfoundry/java-buildpack-memory-calculator) Cloud Foundry JVM Memory Calculator
+- [**269**星][1y] [Shell] [abedalqaderswedan1/aswcrypter](https://github.com/abedalqaderswedan1/aswcrypter) An Bash&Python Script For Generating Payloads that Bypasses All Antivirus so far [FUD]
+- [**269**星][11m] [Py] [LaNMaSteR53/recon-ng](https://bitbucket.org/lanmaster53/recon-ng)
+- [**268**星][6m] [Shell] [yangchuansheng/love-gfw](https://github.com/yangchuansheng/love-gfw)
+- [**268**星][3y] [HTML] [xem/minix86](https://github.com/xem/minix86) x86 (MS-DOS) documentation, disassembler and emulator - WIP
+- [**268**星][10m] [C++] [wbenny/mini-tor](https://github.com/wbenny/mini-tor) 使用 MSCNG/CryptoAPI 实现的 Tor 协议
+- [**268**星][1y] [Go] [tomsteele/blacksheepwall](https://github.com/tomsteele/blacksheepwall) blacksheepwall is a hostname reconnaissance tool
+- [**268**星][22d] [Py] [peikexin9/deepxplore](https://github.com/peikexin9/deepxplore) DeepXplore code release
+- [**268**星][6d] [JS] [nodejs/security-wg](https://github.com/nodejs/security-wg) Node.js Security Working Group
+- [**268**星][3y] [Java] [matthiaskaiser/jmet](https://github.com/matthiaskaiser/jmet) Java Message Exploitation Tool
+- [**268**星][4y] [C] [leechristensen/unmanagedpowershell](https://github.com/leechristensen/unmanagedpowershell) Executes PowerShell from an unmanaged process
+- [**268**星][8d] [Py] [ledger-donjon/lascar](https://github.com/ledger-donjon/lascar) Ledger's Advanced Side-Channel Analysis Repository
+- [**268**星][6m] [Py] [juhakivekas/multidiff](https://github.com/juhakivekas/multidiff) Binary data diffing for multiple objects or streams of data
+- [**268**星][4y] [Py] [jboone/tpms](https://github.com/jboone/tpms) Tire Pressure Monitoring System decoding tools.
+- [**268**星][6d] [Java] [jackofmosttrades/gadgetinspector](https://github.com/jackofmosttrades/gadgetinspector) A byte code analyzer for finding deserialization gadget chains in Java applications
+- [**268**星][11m] [Py] [ionelmc/python-manhole](https://github.com/ionelmc/python-manhole) Debugging manhole for python applications.
+- [**268**星][3y] [insidetrust/statistically-likely-usernames](https://github.com/insidetrust/statistically-likely-usernames) Wordlists for creating statistically likely username lists for use in password attacks and security testing
+- [**268**星][3y] [Py] [ghirensics/ghiro](https://github.com/ghirensics/ghiro) Automated image forensics tool
+- [**268**星][19d] [Py] [eset/ipyida](https://github.com/eset/ipyida) 集成IPython控制台
+- [**268**星][4d] [Py] [den1al/jsshell](https://github.com/den1al/jsshell) An interactive multi-user web JS shell
+- [**268**星][1y] [Py] [c0rel0ader/east](https://github.com/c0rel0ader/east) Exploits and Security Tools Framework 2.0.1
+- [**267**星][2m] [Java] [w296488320/nullproguard](https://github.com/w296488320/nullproguard) 空白混淆 源码
+- [**267**星][3m] [Java] [vida-nyu/ache](https://github.com/vida-nyu/ache) ACHE is a web crawler for domain-specific search.
+- [**267**星][1y] [Py] [ucsb-seclab/bootstomp](https://github.com/ucsb-seclab/bootstomp) a bootloader vulnerability finder
+- [**267**星][4y] [C] [samsung/adbi](https://github.com/samsung/adbi) Android Dynamic Binary Instrumentation tool for tracing Android native layer
+- [**267**星][1m] [Py] [quitten/autorize](https://github.com/quitten/autorize) Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application security people work and allow them perform an automatic authorization tests
+- [**267**星][2y] [Py] [hegusung/avsignseek](https://github.com/hegusung/avsignseek) Tool written in python3 to determine where the AV signature is located in a binary/payload
+- [**267**星][1m] [Py] [google/grr-doc](https://github.com/google/grr-doc) Documentation for the GRR Rapid Reponse framework
+- [**267**星][2y] [C] [cameronswinoga/yabfc](https://github.com/cameronswinoga/yabfc) Yet Another Brainfuck Compiler; No dependencies and from the ground up
+- [**267**星][4y] [C] [blankwall/macdbg](https://github.com/blankwall/macdbg) Simple easy to use C and python debugging framework for OSX
+- [**266**星][4d] [zodiacon/alltools](https://github.com/zodiacon/alltools) All reasonably stable tools
+- [**266**星][3y] [waylau/free-vpn](https://github.com/waylau/free-vpn) We Provide Newset Free VPN Service. PC, mobile phones and network appliances, no software installation. With the VPN Service,you can get through your government's firewall to browse restricted websites.提供最新的免费的 VPN 服务,通过使用 VPN 自由访问互联网(翻墙)!无论是PC端,移动端都无需安装客户端。
+- [**266**星][2y] [Shell] [superkojiman/pwnbox](https://github.com/superkojiman/pwnbox) 包含逆向和漏洞利用工具的Docker容器
+- [**266**星][3y] [Java] [subgraph/vega](https://github.com/subgraph/vega) Subgraph Vega
+- [**266**星][3y] [Java] [rsmudge/armitage](https://github.com/rsmudge/armitage) a graphical cyber attack management tool for Metasploit that
+visualizes your targets, recommends exploits, and exposes the advanced
+capabilities of the framework.
+- [**266**星][2y] [paloaltonetworks/minemeld](https://github.com/paloaltonetworks/minemeld) Main MineMeld documentation repo
+- [**266**星][5m] [C] [outflanknl/dumpert](https://github.com/outflanknl/dumpert) LSASS memory dumper using direct system calls and API unhooking.
+- [**266**星][1y] [l1k/osxparanoia](https://github.com/l1k/osxparanoia) Preventing OS X from phoning home to Cupertino
+- [**266**星][3m] [Py] [kupferlauncher/kupfer](https://github.com/kupferlauncher/kupfer) kupfer, smart, quick launcher. `master' is kupfer's release branch.
+- [**266**星][2y] [TeX] [hjl-tools/x86-psabi](https://github.com/hjl-tools/x86-psabi) x86 psABI download
+- [**266**星][11m] [Py] [hakril/pythonforwindows](https://github.com/hakril/pythonforwindows) 简化Python与Windows操作系统交互的库
+- [**266**星][21d] [JS] [d3/d3-interpolate](https://github.com/d3/d3-interpolate) Interpolate numbers, colors, strings, arrays, objects, whatever!
+- [**266**星][9m] [Dockerfile] [cryptax/androidre](https://github.com/cryptax/androidre) 用于Android 逆向的 Docker 容器
+- [**266**星][3y] [Visual Basic .NET] [cn33liz/starfighters](https://github.com/cn33liz/starfighters) A JavaScript and VBScript Based Empire Launcher, which runs within their own embedded PowerShell Host.
+- [**266**星][2y] [beahunt3r/windows-hunting](https://github.com/beahunt3r/windows-hunting) aid windows threat hunters to look for some common artifacts during their day to day operations
+- [**266**星][4m] [C] [bcoles/kernel-exploits](https://github.com/bcoles/kernel-exploits) Various kernel exploits
+- [**265**星][2d] [Py] [nucypher/nucypher](https://github.com/nucypher/nucypher) A decentralized network offering accessible, intuitive, and extensible cryptographic runtimes and interfaces for secrets management and dynamic access control.
+- [**265**星][3m] [JS] [hawkeyesec/scanner-cli](https://github.com/hawkeyesec/scanner-cli) A project security/vulnerability/risk scanning tool
+- [**265**星][12m] [Py] [trycatchhcf/packetwhisper](https://github.com/trycatchhcf/packetwhisper) Stealthily exfiltrate data and defeat attribution using DNS queries and text-based steganography. Avoid the problems associated with typical DNS exfiltration methods. Transfer data between systems without the communicating devices directly connecting to each other or to a common endpoint. No need to control a DNS Name Server.
+- [**265**星][2y] [PHP] [sqlmapproject/testenv](https://github.com/sqlmapproject/testenv) A collection of web pages vulnerable to SQL injection flaws
+- [**265**星][3y] [Go] [pwaller/goupx](https://github.com/pwaller/goupx) Fix golang compiled binaries on x86_64 so that they can be packed with UPX
+- [**265**星][2m] [Assembly] [pret/pokeyellow](https://github.com/pret/pokeyellow) Disassembly of Pokemon Yellow
+- [**265**星][1y] [JS] [portswigger/hackability](https://github.com/portswigger/hackability) Probe a rendering engine for vulnerabilities and other features
+- [**265**星][2y] [PS] [invoke-ir/ace](https://github.com/invoke-ir/ace) Automated, Collection, and Enrichment Platform
+- [**265**星][2m] [C#] [hackplayers/salsa-tools](https://github.com/hackplayers/salsa-tools) Salsa Tools - ShellReverse TCP/UDP/ICMP/DNS/SSL/BINDTCP/Shellcode/SILENTTRINITY and AV bypass, AMSI patched
+- [**265**星][4m] [Py] [fwkz/riposte](https://github.com/fwkz/riposte) Python package for wrapping applications inside a tailored interactive shell
+- [**265**星][7d] [Py] [exodus-privacy/exodus](https://github.com/exodus-privacy/exodus) Platform to audit trackers used by Android application
+- [**265**星][3d] [Py] [earthquake/xfltreat](https://github.com/earthquake/xfltreat) XFLTReaT tunnelling framework
+- [**265**星][4y] [C++] [breakingmalware/powerloaderex](https://github.com/breakingmalware/powerloaderex) Advanced Code Injection Technique for x32 / x64
+- [**265**星][7d] [Py] [armmbed/mbed-cli](https://github.com/armmbed/mbed-cli) Arm Mbed Command Line Interface
+- [**265**星][2y] [Py] [antojoseph/frida-android-hooks](https://github.com/antojoseph/frida-android-hooks) Lets you hook Method Calls in Frida ( Android )
+- [**265**星][7d] [Go] [adguardteam/dnsproxy](https://github.com/adguardteam/dnsproxy) Simple DNS proxy with DoH, DoT, and DNSCrypt support
+- [**264**星][1m] [Makefile] [pop-os/iso](https://github.com/pop-os/iso) ools necessary for building Pop!_OS ISOs.
+- [**264**星][2m] [C++] [theevilbit/injection](https://github.com/theevilbit/injection) various process injection technique
+- [**264**星][4m] [Go] [skx/tunneller](https://github.com/skx/tunneller) Allow internal services, running on localhost, to be accessed over the internet..
+- [**264**星][4y] [Py] [rpp0/aggr-inject](https://github.com/rpp0/aggr-inject) Remote frame injection PoC by exploiting a standard compliant A-MPDU aggregation vulnerability in 802.11n networks.
+- [**264**星][3y] [C++] [professor-plum/reflective-driver-loader](https://github.com/professor-plum/reflective-driver-loader) injection technique base off Reflective DLL injection
+- [**264**星][6y] [C] [pakt/ropc](https://github.com/pakt/ropc) A Turing complete ROP compiler
+- [**264**星][3y] [Py] [mame82/duck2spark](https://github.com/mame82/duck2spark) Converter for raw RubberDucky payloads to Digispark Arduino IDE Sketch source.
+- [**264**星][3m] [Go] [lightningnetwork/lightning-onion](https://github.com/lightningnetwork/lightning-onion) Onion Routed Micropayments for the Lightning Network
+- [**264**星][21d] [Py] [hubblestack/hubble](https://github.com/hubblestack/hubble) Hubble is a modular, open-source security compliance framework. The project provides on-demand profile-based auditing, real-time security event notifications, alerting, and reporting. HubbleStack is a free and open source project made possible by Adobe.
+- [**264**星][3d] [C] [eua/wxhexeditor](https://github.com/eua/wxhexeditor) wxHexEditor official GIT repo
+- [**264**星][3y] [Java] [codewatchorg/bypasswaf](https://github.com/codewatchorg/bypasswaf) Add headers to all Burp requests to bypass some WAF products
+- [**264**星][8d] [Py] [azure/azure-storage-python](https://github.com/azure/azure-storage-python) Microsoft Azure Storage Library for Python
+- [**264**星][3y] [C++] [antire-book/dont_panic](https://github.com/antire-book/dont_panic) Linux bind shell with anti-reverse engineering techniques
+- [**263**星][2y] [dloss/binary-parsing](https://github.com/dloss/binary-parsing) A list of generic tools for parsing binary data structures, such as file formats, network protocols or bitstreams
+- [**263**星][8m] [Shell] [thelinuxchoice/saycheese](https://github.com/thelinuxchoice/saycheese) Grab target's webcam shots by link
+- [**263**星][8m] [Java] [adonespitogo/adobot](https://github.com/adonespitogo/adobot) Open-source android spyware
+- [**263**星][8d] [C++] [souffle-lang/souffle](https://github.com/souffle-lang/souffle) Soufflé is a variant of Datalog for tool designers crafting analyses in Horn clauses. Soufflé synthesizes a native parallel C++ program from a logic specification.
+- [**263**星][7m] [Py] [pe3zx/huawei-block-list](https://github.com/pe3zx/huawei-block-list) Captured DNS requests from Huawei P30 Pro to a block list
+- [**263**星][2y] [Py] [lightos/panoptic](https://github.com/lightos/panoptic) Panoptic is an open source penetration testing tool that automates the process of search and retrieval of content for common log and config files through path traversal vulnerabilities.
+- [**263**星][5m] [CSS] [l4wio/ctf-challenges-by-me](https://github.com/l4wio/ctf-challenges-by-me) Pwnable|Web Security|Cryptography CTF-style challenges
+- [**263**星][4d] [C++] [fransbouma/injectablegenericcamerasystem](https://github.com/fransbouma/injectablegenericcamerasystem) This is a generic camera system to be used as the base for cameras for taking screenshots within games. The main purpose of the system is to hijack the in-game 3D camera by overwriting values in its camera structure with our own values so we can control where the camera is located, it's pitch/yaw/roll values, its FoV and the camera's look vector.
+- [**263**星][9d] [Py] [firstlookmedia/gpgsync](https://github.com/firstlookmedia/gpgsync) let users always have up-to-date OpenPGP public keys for other members of their organization.
+- [**263**星][2y] [Py] [enddo/smod](https://github.com/enddo/smod) 一个模块化的框架,具有您可能需要的各种诊断和攻击功能,才能渗透到Modbus协议
+- [**263**星][2y] [Py] [dkovar/analyzemft](https://github.com/dkovar/analyzemft) fully parse the MFT file from an NTFS filesystem and present the results as accurately as possible in multiple format
+- [**263**星][5m] [C++] [d35ha/callobfuscator](https://github.com/d35ha/callobfuscator) Obfuscate specific windows apis with different apis
+- [**262**星][8m] [offensive-security/nethunter-app](https://github.com/offensive-security/nethunter-app) NetHunter android application
+- [**262**星][4y] [Py] [cisco-talos/ropmemu](https://github.com/Cisco-Talos/ROPMEMU) ROPMEMU is a framework to analyze, dissect and decompile complex code-reuse attacks.
+- [**262**星][2m] [Go] [zmap/zdns](https://github.com/zmap/zdns) 快速DNS查找, 命令行工具
+- [**262**星][2y] [HTML] [wisec/domxsswiki](https://github.com/wisec/domxsswiki) Automatically exported from code.google.com/p/domxsswiki
+- [**262**星][7y] [Py] [stripe-ctf/stripe-ctf-2.0](https://github.com/stripe-ctf/stripe-ctf-2.0) Capture the Flag: Web Edition
+- [**262**星][3m] [HTML] [sp1d3r/swf_json_csrf](https://github.com/sp1d3r/swf_json_csrf) 简化基于 SWF的 JSON CSRF exploitation
+- [**262**星][2m] [Go] [sensepost/godoh](https://github.com/sensepost/godoh) A DNS-over-HTTPS Command & Control Proof of Concept
+- [**262**星][4m] [C] [portcullislabs/linikatz](https://github.com/portcullislabs/linikatz) UNIX版本的Mimikatz
+- [**262**星][8m] [Py] [needmorecowbell/sniff-paste](https://github.com/needmorecowbell/sniff-paste) Pastebin OSINT Harvester
+- [**262**星][1y] [PHP] [mrsqar-ye/badmod](https://github.com/mrsqar-ye/badmod) CMS auto detect and exploit.
+- [**262**星][2y] [Java] [maxcamillo/android-keystore-password-recover](https://github.com/maxcamillo/android-keystore-password-recover) Automatically exported from code.google.com/p/android-keystore-password-recover
+- [**262**星][7m] [Shell] [lieanu/libcsearcher](https://github.com/lieanu/libcsearcher) glibc offset search for ctf.
+- [**262**星][1y] [PS] [fox-it/invoke-aclpwn](https://github.com/fox-it/invoke-aclpwn)
+- [**262**星][1y] [Ruby] [evait-security/envizon](https://github.com/evait-security/envizon) 网络可视化工具, 在渗透测试中快速识别最可能的目标
+- [**262**星][6m] [Batchfile] [diogo-fernan/ir-rescue](https://github.com/diogo-fernan/ir-rescue) A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.
+- [**262**星][1y] [C++] [chadski/sharpneedle](https://github.com/chadski/sharpneedle) Inject C# code into a running process
+- [**262**星][11m] [Py] [ant4g0nist/susanoo](https://github.com/ant4g0nist/susanoo) A REST API security testing framework.
+- [**262**星][1m] [C#] [airvpn/eddie](https://github.com/airvpn/eddie) OpenVPN UI
+- [**261**星][7y] [C++] [sin5678/gh0st](https://github.com/sin5678/gh0st) a open source remote administrator tool
+- [**261**星][2y] [Py] [zhangchenchen/proxyspider](https://github.com/zhangchenchen/proxyspider) 代理IP 采集程序
+- [**261**星][1m] [Py] [xdavidhu/probesniffer](https://github.com/xdavidhu/probesniffer)
+- [**261**星][1y] [JS] [roccomuso/netcat](https://github.com/roccomuso/netcat) Netcat client and server modules written in pure Javascript for Node.j
+- [**261**星][7y] [C] [quarkslab/quarkspwdump](https://github.com/quarkslab/quarkspwdump) Dump various types of Windows credentials without injecting in any process.
+- [**261**星][3m] [ObjC] [preemptive/ppios-rename](https://github.com/preemptive/ppios-rename) Symbol obfuscator for iOS apps
+- [**261**星][1y] [C] [pornin/cttk](https://github.com/pornin/cttk) Constant-Time Toolkit
+- [**261**星][1y] [Dockerfile] [pgorczak/srslte-docker-emulated](https://github.com/pgorczak/srslte-docker-emulated) Minimal end-to-end LTE. Dockerized and emulated radio over shared memory.
+- [**261**星][3y] [Py] [pablocelayes/rsa-wiener-attack](https://github.com/pablocelayes/rsa-wiener-attack) A Python implementation of the Wiener attack on RSA public-key encryption scheme.
+- [**261**星][3m] [Py] [no0be/dnslivery](https://github.com/no0be/dnslivery) Easy files and payloads delivery over DNS
+- [**261**星][7d] [C++] [niemand-sec/anticheat-testing-framework](https://github.com/niemand-sec/anticheat-testing-framework) Framework to test any Anti-Cheat
+- [**261**星][5y] [C] [mysql/mysql-proxy](https://github.com/mysql/mysql-proxy) MySQL Proxy is a simple program that sits between your client and MySQL server(s) and that can monitor, analyze or transform their communication. Its flexibility allows for a wide variety of uses, including load balancing, failover, query analysis, query filtering and modification, and many more.
+- [**261**星][9m] [C] [landhb/hideprocess](https://github.com/landhb/hideprocess) A basic Direct Kernel Object Manipulation rootkit that removes a process from the EPROCESS list, hiding it from the Task Manager
+- [**261**星][3y] [jmpews/pwn2exploit](https://github.com/jmpews/pwn2exploit) all mine papers, pwn & exploit
+- [**261**星][7m] [JS] [jesusprubio/strong-node](https://github.com/jesusprubio/strong-node)
+- [**261**星][1m] [Py] [felixweyne/imaginaryc2](https://github.com/felixweyne/imaginaryc2) Imaginary C2 is a python tool which aims to help in the behavioral (network) analysis of malware. Imaginary C2 hosts a HTTP server which captures HTTP requests towards selectively chosen domains/IPs. Additionally, the tool aims to make it easy to replay captured Command-and-Control responses/served payloads.
+- [**261**星][1y] [C++] [ewhitehats/invisiblepersistence](https://github.com/ewhitehats/invisiblepersistence) Persisting in the Windows registry "invisibly"
+- [**261**星][3y] [Py] [ecthros/pina-colada](https://github.com/ecthros/pina-colada) A powerful and extensible wireless drop box
+- [**261**星][3y] [Py] [dorneanu/smalisca](https://github.com/dorneanu/smalisca) Static Code Analysis for Smali files
+- [**261**星][6d] [Go] [carbonblack/binee](https://github.com/carbonblack/binee) binary emulation environment
+- [**261**星][3m] [Py] [amimo/dcc](https://github.com/amimo/dcc) DCC (Dex-to-C Compiler) is method-based aot compiler that can translate DEX code to C code.
+- [**260**星][2y] [C#] [v2ray/v2rayn](https://github.com/v2ray/v2rayn) A Windows GUI client for V2Ray.
+- [**260**星][11m] [Py] [hysnsec/devsecops-studio](https://github.com/hysnsec/DevSecOps-Studio) DevSecOps Distribution - Virtual Environment to learn DevSecOps
+- [**260**星][3m] [Py] [m4ll0k/konan](https://github.com/m4ll0k/Konan) Konan - Advanced Web Application Dir Scanner
+- [**260**星][4m] [payloadbox/command-injection-payload-list](https://github.com/payloadbox/command-injection-payload-list)
+- [**260**星][2d] [Go] [wanchain/go-wanchain](https://github.com/wanchain/go-wanchain) Wanchain Client Source Code
+- [**260**星][7m] [Py] [quitten/doser.py](https://github.com/quitten/doser.py) DoS tool for HTTP requests (inspired by hulk but has more functionalities)
+- [**260**星][11m] [C] [nbulischeck/tyton](https://github.com/nbulischeck/tyton) Linux内核模式Rootkit Hunter. 可检测隐藏系统模块、系统调用表Hooking、网络协议Hooking等
+- [**260**星][3d] [Java] [mr-xn/penetration_testing_poc](https://github.com/mr-xn/penetration_testing_poc) 渗透测试有关的POC、EXP、脚本、提权、小工具等
+- [**260**星][6m] [Py] [andsens/bootstrap-vz](https://github.com/andsens/bootstrap-vz) Bootstrap Debian images for virtualized environments
+- [**260**星][1y] [C++] [alpha1ab/cve-2018-8120](https://github.com/alpha1ab/cve-2018-8120) CVE-2018-8120 Exploit for Win2003 Win2008 WinXP Win7
+- [**259**星][7m] [Py] [s0md3v/sqlmate](https://github.com/s0md3v/sqlmate) A friend of SQLmap which will do what you always expected from SQLmap.
+- [**259**星][1y] [Py] [wipi-hunter/pidense](https://github.com/wipi-hunter/pidense) Monitor illegal wireless network activities.
+- [**259**星][28d] [Ruby] [rapid7/recog](https://github.com/rapid7/recog) Pattern recognition for hosts, services, and content
+- [**259**星][3d] [Ruby] [puppetlabs/puppetlabs-firewall](https://github.com/puppetlabs/puppetlabs-firewall) Puppet Firewall Module
+- [**259**星][4y] [Py] [netxfly/passive_scan](https://github.com/netxfly/passive_scan) 基于http代理的web漏洞扫描器的实现
+- [**259**星][6m] [Py] [mbro95/portablecellnetwork](https://github.com/mbro95/portablecellnetwork) Utilize a Raspberry Pi and a Nuand BladeRF to generate your own portable local cell network
+- [**259**星][4y] [Ruby] [lubyruffy/fofa](https://github.com/lubyruffy/fofa) 针对全球范围的最全的网站数据信息库,提供给网民(更多的是安全技术研究人员)进行查询
+- [**259**星][4m] [Py] [giantbranch/python-hacker-code](https://github.com/giantbranch/python-hacker-code) 《python黑帽子:黑客与渗透测试编程之道》代码及实验文件,字典等
+
+- [**259**星][8m] [Elixir] [elixiumnetwork/elixium_core](https://github.com/elixiumnetwork/elixium_core) A privacy-preserving decentralized application network
+- [**259**星][2y] [Py] [cryptolok/morphaes](https://github.com/cryptolok/morphaes) IDPS & SandBox & AntiVirus STEALTH KILLER. MorphAES is the world's first polymorphic shellcode engine, with metamorphic properties and capability to bypass sandboxes, which makes it undetectable for an IDPS, it's cross-platform as well and library-independent.
+- [**259**星][2y] [Py] [countercept/python-exe-unpacker](https://github.com/countercept/python-exe-unpacker) A helper script for unpacking and decompiling EXEs compiled from python code.
+- [**258**星][7y] [eugeneching/ida-consonance](https://github.com/eugeneching/ida-consonance) 黑色皮肤插件
+- [**258**星][1y] [Py] [pycqa/mccabe](https://github.com/pycqa/mccabe) McCabe complexity checker for Python
+- [**258**星][2y] [Go] [netxfly/xsec-ip-database](https://github.com/netxfly/xsec-ip-database) 恶意IP 和域名库。通过爬虫定期拉取网络中公开的恶意ip 库来获取恶意IP和域名,且支持与自有的其他安全产品联动(HIDS、WAF、蜜罐、防火墙等产品),实时更新IP库
+- [**258**星][7y] [Java] [isecpartners/android-ssl-bypass](https://github.com/isecpartners/android-ssl-bypass) Black box tool to bypass SSL verification on Android, even when pinning is used.
+- [**258**星][2m] [PHP] [incredibleindishell/ssrf_vulnerable_lab](https://github.com/incredibleindishell/ssrf_vulnerable_lab) This Lab contain the sample codes which are vulnerable to Server-Side Request Forgery attack
+- [**258**星][3y] [Perl] [fuzyll/defcon-vm](https://github.com/fuzyll/defcon-vm) Files from my DEFCON CTF VM.
+- [**258**星][29d] [Py] [diogo-fernan/malsub](https://github.com/diogo-fernan/malsub) A Python RESTful API framework for online malware analysis and threat intelligence services.
+- [**258**星][1y] [C++] [dga-mi-ssi/yaco](https://github.com/dga-mi-ssi/yaco) 利用Git版本控制,同步多人对相同二进制文件的修改
+- [**258**星][1m] [Py] [cedricbonhomme/stegano](https://github.com/cedricbonhomme/stegano) Stegano is a pure Python steganography module.
+- [**258**星][3y] [C#] [brandonprry/gray_hat_csharp_code](https://github.com/brandonprry/gray_hat_csharp_code) This repository contains full code examples from the book Gray Hat C#
+- [**258**星][3d] [Smali] [bin4ry/deejayeye-modder](https://github.com/bin4ry/deejayeye-modder)
+- [**258**星][2m] [C] [basil00/torwall](https://github.com/basil00/torwall) Tallow - Transparent Tor for Windows
+- [**258**星][30d] [anyeduke/enterprise-security-skill](https://github.com/anyeduke/enterprise-security-skill) 用于记录企业安全规划,建设,运营,攻防的相关资源
+
+- [**258**星][2d] [HTML] [ansible/community](https://github.com/ansible/community) This repository is for management of all Ansible community related initiatives.
+- [**257**星][21d] [C] [radareorg/r2dec-js](https://github.com/radareorg/r2dec-js) radare2 plugin - converts asm to pseudo-C code.
+- [**257**星][2m] [C#] [orlikoski/cylr](https://github.com/orlikoski/CyLR) CyLR - Live Response Collection Tool
+- [**257**星][3m] [Rust] [radareorg/radeco](https://github.com/radareorg/radeco) radare2-based decompiler and symbol executor
+- [**257**星][2y] [Go] [zboya/gomitmproxy](https://github.com/zboya/gomitmproxy) gomitmproxy是想用golang语言实现[mitmproxy],实现http(s)代理
+- [**257**星][21d] [C] [radareorg/r2dec-js](https://github.com/radareorg/r2dec-js) radare2插件,将汇编代码反编译为C伪代码
+- [**257**星][2y] [voulnet/cve-2017-8759-exploit-sample](https://github.com/voulnet/cve-2017-8759-exploit-sample) Running CVE-2017-8759 exploit sample.
+- [**257**星][2y] [Py] [thetwitchy/xxer](https://github.com/thetwitchy/xxer) A blind XXE injection callback handler. Uses HTTP and FTP to extract information. Originally written in Ruby by ONsec-Lab.
+- [**257**星][2m] [Go] [sachaos/tcpterm](https://github.com/sachaos/tcpterm) tcpterm is a packet visualizer in TUI.
+- [**257**星][20d] [rustsec/advisory-db](https://github.com/rustsec/advisory-db) Security advisory database for Rust crates published through crates.io
+- [**257**星][4m] [Py] [rrwick/basecalling-comparison](https://github.com/rrwick/basecalling-comparison) A comparison of different Oxford Nanopore basecallers
+- [**257**星][3y] [Py] [rolisoft/reconscan](https://github.com/rolisoft/reconscan) Network reconnaissance and vulnerability assessment tools.
+- [**257**星][3y] [Py] [rockymeza/wifi](https://github.com/rockymeza/wifi) [unmaintained] WiFi tools for linux
+- [**257**星][18d] [C++] [rob--/memoryjs](https://github.com/rob--/memoryjs) Read and write process memory in NodeJS (finally!)
+- [**257**星][2m] [C++] [poweradminllc/paexec](https://github.com/poweradminllc/paexec) Remote execution, like PsExec
+- [**257**星][5y] [Py] [pbartek/pyobd-pi](https://github.com/pbartek/pyobd-pi) Fixes to pyobd for Raspberry Pi / BeagleBone Black
+- [**257**星][10m] [C] [p0f/p0f](https://github.com/p0f/p0f) p0f unofficial git repo
+- [**257**星][2y] [Java] [l-jinbin/apksignaturekiller](https://github.com/l-jinbin/apksignaturekiller) 一键破解APK签名校验
+- [**257**星][12m] [Shell] [karek314/macos-home-call-drop](https://github.com/karek314/macos-home-call-drop) Simple shell script to fix macOS privacy issues and remove mostly useless macOS calls to cupertino
+- [**257**星][3y] [PHP] [hackademic/hackademic](https://github.com/hackademic/hackademic) the main hackademic code repository
+- [**257**星][14d] [Py] [guimaizi/get_domain](https://github.com/guimaizi/get_domain) 域名收集与监测
+- [**257**星][29d] [Py] [frint0/email-enum](https://github.com/frint0/email-enum) Email-Enum searches mainstream websites and tells you if an email is registered! #DEPRECATED
+- [**257**星][3y] [Java] [flankerhqd/jaadas](https://github.com/flankerhqd/jaadas) Joint Advanced Defect assEsment for android applications
+- [**257**星][1y] [Java] [danicuestasuarez/nmapgui](https://github.com/danicuestasuarez/nmapgui) Advanced Graphical User Interface for NMap
+- [**257**星][2y] [Py] [chrizator/netattack2](https://github.com/chrizator/netattack2) 网络扫描和攻击脚本
+- [**257**星][1y] [Py] [berzerk0/bewgor](https://github.com/berzerk0/bewgor) Bull's Eye Wordlist Generator - Does your password rely on predictable patterns of accessible info?
+- [**256**星][10m] [Py] [crytic/ethersplay](https://github.com/crytic/ethersplay) EVM dissassembler
+- [**256**星][7m] [Py] [xairy/easy-linux-pwn](https://github.com/xairy/easy-linux-pwn) A set of Linux binary exploitation tasks for beginners on various architectures
+- [**256**星][2y] [Py] [unamer/cve-2017-11882](https://github.com/unamer/cve-2017-11882) CVE-2017-11882 Exploit accepts over 17k bytes long command/code in maximum.
+- [**256**星][3y] [Py] [thomastjdev/wmd](https://github.com/thomastjdev/wmd) Python framework for IT security tools
+- [**256**星][2y] [TS] [srar/memcachedos](https://github.com/srar/memcachedos) Memcache 反射DDOS攻击脚本经供学习参考使用
+- [**256**星][4y] [Py] [smaash/snitch](https://github.com/smaash/snitch) information gathering via dorks
+- [**256**星][5m] [C] [rub-syssec/omen](https://github.com/rub-syssec/omen) Ordered Markov ENumerator - Password Guesser
+- [**256**星][2d] [Java] [ripe-ncc/whois](https://github.com/ripe-ncc/whois) RIPE Database whois code repository
+- [**256**星][3m] [Py] [rhinosecuritylabs/iprotate_burp_extension](https://github.com/rhinosecuritylabs/iprotate_burp_extension) Extension for Burp Suite which uses AWS API Gateway to rotate your IP on every request.
+- [**256**星][10m] [C++] [ramadhanamizudin/malware](https://github.com/ramadhanamizudin/malware) Malware Samples. Uploaded to GitHub for those want to analyse the code. Code mostly from:
+- [**256**星][7d] [Py] [minio/minio-py](https://github.com/minio/minio-py) MinIO Client SDK for Python
+- [**256**星][1y] [Py] [m4ll0k/galileo](https://github.com/m4ll0k/galileo) Galileo - Web Application Audit Framework
+- [**256**星][9m] [Go] [erbbysam/dnsgrep](https://github.com/erbbysam/dnsgrep) Quickly Search Large DNS Datasets
+- [**256**星][3m] [Py] [clemfromspace/scrapy-selenium](https://github.com/clemfromspace/scrapy-selenium) Scrapy middleware to handle javascript pages using selenium
+- [**256**星][2y] [Ruby] [bcoles/ssrf_proxy](https://github.com/bcoles/ssrf_proxy) SSRF Proxy facilitates tunneling HTTP communications through servers vulnerable to Server-Side Request Forgery.
+- [**256**星][2m] [C] [a2nkf/macos-kernel-exploit](https://github.com/a2nkf/macos-kernel-exploit) macOS Kernel Exploit for CVE-2019-8781. Credit for the bug goes to
+- [**255**星][6m] [nsacyber/hardware-and-firmware-security-guidance](https://github.com/nsacyber/Hardware-and-Firmware-Security-Guidance) Guidance for the Spectre, Meltdown, Speculative Store Bypass, Rogue System Register Read, Lazy FP State Restore, Bounds Check Bypass Store, TLBleed, and L1TF/Foreshadow vulnerabilities as well as general hardware and firmware security guidance. #nsacyber
+- [**255**星][3m] [Py] [lorentzenman/sheepl](https://github.com/lorentzenman/sheepl) Creating realistic user behaviour for supporting tradecraft development within lab environments
+- [**255**星][5m] [zhaoweiho/web-sec-interview](https://github.com/zhaoweiho/web-sec-interview) Information Security (Web Security/Penetration Testing Direction) Interview Questions/Solutions 信息安全(Web安全/渗透测试方向)面试题/解题思路
+- [**255**星][3y] [C] [w-shackleton/android-netspoof](https://github.com/w-shackleton/android-netspoof) Network Spoofer
+- [**255**星][1y] [Py] [stephenmcd/hot-redis](https://github.com/stephenmcd/hot-redis) Rich Python data types for Redis
+- [**255**星][16d] [Java] [spring-cloud/spring-cloud-task](https://github.com/spring-cloud/spring-cloud-task) Short lived microservices with Spring Batch
+- [**255**星][4y] [C] [roxas75/rxtools](https://github.com/roxas75/rxtools) a collection of hacking tools for Nintendo 3DS/3DSXL/2DS, compatible with all the system versions from 4.1 to 9.2
+- [**255**星][3m] [Py] [qunarcorp/open_dnsdb](https://github.com/qunarcorp/open_dnsdb) OpenDnsdb 是去哪儿网OPS团队开源的基于Python语言的DNS管理系统
+- [**255**星][3m] [HTML] [pagerduty/security-training](https://github.com/pagerduty/security-training) Public version of PagerDuty's employee security training courses.
+- [**255**星][5y] [Vim script] [ngmy/vim-rubocop](https://github.com/ngmy/vim-rubocop) The Vim RuboCop plugin runs RuboCop and displays the results in Vim
+- [**255**星][1y] [Shell] [m4ll0k/autonse](https://github.com/m4ll0k/autonse) Massive NSE (Nmap Scripting Engine) AutoSploit and AutoScanner
+- [**255**星][3y] [Py] [lijiejie/iis_shortname_scanner](https://github.com/lijiejie/iis_shortname_scanner) an IIS shortname Scanner
+- [**255**星][3m] [Jupyter Notebook] [jmartinezheras/2018-machinelearning-lectures-esa](https://github.com/jmartinezheras/2018-machinelearning-lectures-esa) Machine Learning Lectures at the European Space Agency (ESA) in 2018
+- [**255**星][2m] [Shell] [cytoscape/cytoscape](https://github.com/cytoscape/cytoscape) an open source platform for network analysis and visualization
+- [**255**星][3y] [Py] [airsage/petrel](https://github.com/airsage/petrel) Tools for writing, submitting, debugging, and monitoring Storm topologies in pure Python
+- [**254**星][2y] [PS] [p3nt4/invoke-piper](https://github.com/p3nt4/Invoke-Piper) Forward local or remote tcp ports through SMB pipes.
+- [**254**星][2y] [PS] [xorrior/randomps-scripts](https://github.com/xorrior/randomps-scripts) PowerShell Scripts focused on Post-Exploitation Capabilities
+- [**254**星][1y] [Py] [wenfengshi/ddos-dos-tools](https://github.com/wenfengshi/ddos-dos-tools) some sort of ddos-tools
+- [**254**星][4m] [Racket] [tyrchen/racket-book](https://github.com/tyrchen/racket-book) 关于racket的入门书
+- [**254**星][7y] [Java] [sporst/swfretools](https://github.com/sporst/swfretools) SWF file reverse engineering tools
+- [**254**星][3m] [Shell] [projectzeroindia/cve-2019-11510](https://github.com/projectzeroindia/cve-2019-11510) Exploit for Arbitrary File Read on Pulse Secure SSL VPN (CVE-2019-11510)
+- [**254**星][5m] [Go] [lesnuages/hershell](https://github.com/lesnuages/hershell) Multiplatform reverse shell generator
+- [**254**星][7m] [Go] [lavalamp-/ipv666](https://github.com/lavalamp-/ipv666) IPV6地址枚举工具. Go编写
+- [**254**星][1y] [PHP] [interference-security/dvws](https://github.com/interference-security/dvws) OWSAP Damn Vulnerable Web Sockets (DVWS) is a vulnerable web application which works on web sockets for client-server communication.
+- [**254**星][22d] [Py] [google/docker-explorer](https://github.com/google/docker-explorer) A tool to help forensicate offline docker acquisitions
+- [**254**星][3y] [Haskell] [galoisinc/haskell-tor](https://github.com/galoisinc/haskell-tor) A Haskell implementation of the Tor protocol.
+- [**254**星][3m] [PHP] [dotboris/vuejs-serverside-template-xss](https://github.com/dotboris/vuejs-serverside-template-xss) Demo of a Vue.js app that mixes both clientside templates and serverside templates leading to an XSS vulnerability
+- [**254**星][2y] [Py] [1n3/wordpress-xmlrpc-brute-force-exploit](https://github.com/1n3/wordpress-xmlrpc-brute-force-exploit) Wordpress XMLRPC System Multicall Brute Force Exploit (0day) by 1N3 @ CrowdShield
+- [**253**星][2m] [Go] [ihciah/rabbit-tcp](https://github.com/ihciah/rabbit-tcp) A multi-connection TCP forwarder/accelerator
+- [**253**星][9d] [PS] [bc-security/empire](https://github.com/bc-security/empire) Empire is a PowerShell and Python post-exploitation agent.
+- [**253**星][3m] [C] [seemoo-lab/owl](https://github.com/seemoo-lab/owl) An open Apple Wireless Direct Link (AWDL) implementation written in C
+- [**253**星][16d] [thelsa/cs-checklist](https://github.com/thelsa/cs-checklist) PC客户端(C-S架构)渗透测试checklist / Client side(C-S) penestration checklist
+- [**253**星][1m] [TS] [tensorflow/tfjs-tsne](https://github.com/tensorflow/tfjs-tsne) a improved tSNE implementation that runs in the browser.
+- [**253**星][3y] [Py] [rickey-g/fancybear](https://github.com/rickey-g/fancybear) Fancy Bear Source Code
+- [**253**星][5d] [C] [proftpd/proftpd](https://github.com/proftpd/proftpd) a highly configurable FTP daemon for Unix and Unix-like operating systems
+- [**253**星][28d] [C] [pbhogan/scrypt](https://github.com/pbhogan/scrypt) A Ruby gem with native C extension for the scrypt password hashing algorithm.
+- [**253**星][12m] [Java] [owasp/owasp-java-encoder](https://github.com/owasp/owasp-java-encoder) The OWASP Java Encoder is a Java 1.5+ simple-to-use drop-in high-performance encoder class with no dependencies and little baggage. This project will help Java web developers defend against Cross Site Scripting!
+- [**253**星][16d] [C] [icing/mod_md](https://github.com/icing/mod_md) Let's Encrypt (ACME) support for Apache httpd
+- [**253**星][5d] [Py] [duo-labs/dlint](https://github.com/duo-labs/dlint) Dlint is a tool for encouraging best coding practices and helping ensure we're writing secure Python code.
+- [**253**星][4y] [Py] [danmcinerney/fakeap](https://github.com/danmcinerney/fakeap) Create fake AP in Kali with 1 command
+- [**253**星][21d] [Py] [cloudflare/python-cloudflare](https://github.com/cloudflare/python-cloudflare) Python wrapper for the Cloudflare Client API v4
+- [**253**星][1y] [C] [benjamin-42/trident](https://github.com/benjamin-42/trident)
+- [**253**星][2m] [Py] [b16f00t/whapa](https://github.com/b16f00t/whapa) WhatsApp Parser Toolset v1.14
+- [**253**星][3d] [Jupyter Notebook] [aws-samples/aws-security-workshops](https://github.com/aws-samples/aws-security-workshops) A collection of the latest AWS Security workshops
+- [**252**星][6m] [Shell] [ctfhacker/epictreasure](https://github.com/ctfhacker/EpicTreasure) Batteries included CTF VM
+- [**252**星][1y] [C++] [comaeio/swishdbgext](https://github.com/comaeio/SwishDbgExt) Incident Response & Digital Forensics Debugging Extension
+- [**252**星][4y] [Shell] [nccgroup/vlan-hopping---frogger](https://github.com/nccgroup/vlan-hopping---frogger) Simple VLAN enumeration and hopping script.
+- [**252**星][1y] [C] [v-e-o/poc](https://github.com/v-e-o/poc) PoC of CVE/Exploit
+- [**252**星][4m] [Py] [thewhiteh4t/finalrecon](https://github.com/thewhiteh4t/finalrecon) OSINT Tool for All-In-One Web Reconnaissance
+- [**252**星][4d] [ObjC] [strongbox-password-safe/strongbox](https://github.com/strongbox-password-safe/strongbox) A KeePass/Password Safe Client for iOS and OS X
+- [**252**星][2d] [Vue] [nluedtke/linux_kernel_cves](https://github.com/nluedtke/linux_kernel_cves) Tracking CVEs for the linux Kernel
+- [**252**星][6m] [HTML] [mikewest/http-state-tokens](https://github.com/mikewest/http-state-tokens) Incrementally better HTTP state management.
+- [**252**星][1y] [PS] [mdsecresearch/lyncsniper](https://github.com/mdsecresearch/lyncsniper) 用于渗透测试的工具,可在内部或Office 365中托管Lync和Skype for Business部署。
+- [**252**星][10m] [jeffzh3ng/insectsawake](https://github.com/jeffzh3ng/insectsawake) Network Vulnerability Scanner
+- [**252**星][5m] [Py] [jcesarstef/dotdotslash](https://github.com/jcesarstef/dotdotslash) Python脚本, 查找目录遍历漏洞
+- [**252**星][7m] [Py] [itskindred/procspy](https://github.com/itskindred/procspy) Python tool that monitors and logs user-run commands on a Linux system for either offensive or defensive purposes..
+- [**252**星][9m] [Visual Basic .NET] [houjingyi233/office-exploit-case-study](https://github.com/houjingyi233/office-exploit-case-study)
+- [**252**星][2y] [C] [hfiref0x/cve-2015-1701](https://github.com/hfiref0x/cve-2015-1701) Win32k LPE vulnerability used in APT attack
+- [**252**星][2y] [Py] [deadpix3l/cryptsky](https://github.com/deadpix3l/cryptsky) A simple, fully python ransomware PoC
+- [**252**星][9m] [C] [chef-koch/android-vulnerabilities-overview](https://github.com/chef-koch/android-vulnerabilities-overview) An small overview of known Android vulnerabilities
+- [**252**星][5y] [Py] [allfro/sploitego](https://github.com/allfro/sploitego) a local pen-test transform package that uses the Canari Framework for local transform execution in Maltego.
+- [**251**星][6m] [isafeblue/mind-map](https://github.com/isafeblue/mind-map) 超详细的渗透测试思维导图
+- [**251**星][3m] [Shell] [sprov065/sprov-ui](https://github.com/sprov065/sprov-ui) 一个支持多协议多用户的v2ray Web面板
+- [**251**星][5m] [Shell] [thesecondsun/revssl](https://github.com/thesecondsun/revssl) A simple script that automates generation of OpenSSL reverse shells
+- [**251**星][30d] [Py] [rvrsh3ll/findfrontabledomains](https://github.com/rvrsh3ll/findfrontabledomains) Search for potential frontable domains
+- [**251**星][5m] [Py] [redteamoperations/pivotsuite](https://github.com/redteamoperations/pivotsuite) Network Pivoting Toolkit
+- [**251**星][1m] [Py] [platomav/mcextractor](https://github.com/platomav/mcextractor) Intel, AMD, VIA & Freescale Microcode Extraction Tool
+- [**251**星][2y] [Java] [panhongwei/tracereader](https://github.com/panhongwei/tracereader) android小工具,通过读取trace文件,回溯整个整个程序执行调用树。
+- [**251**星][5m] [Java] [nfcgate/nfcgate](https://github.com/nfcgate/nfcgate) An NFC relay application for Android
+- [**251**星][13d] [Swift] [netyouli/whc_scan](https://github.com/netyouli/whc_scan) 高效强大扫描分析iOS和Android项目里没有使用的类Mac开源工具,清理项目垃圾类,让项目结构干净清爽,升级维护得心应手. Efficient and powerful scanning analysis iOS and Android project no classes used in Mac open source tools, cleaning rubbish class project, make project structure clean and relaxed, upgrade maintenance
+- [**251**星][1y] [Py] [kootenpv/sky](https://github.com/kootenpv/sky) a web scraping framework
+- [**251**星][4m] [C#] [kevin-robertson/inveighzero](https://github.com/kevin-robertson/inveighzero) Windows C# LLMNR/mDNS/NBNS/DNS spoofer/man-in-the-middle tool
+- [**251**星][6d] [Py] [jaegertracing/jaeger-client-python](https://github.com/jaegertracing/jaeger-client-python) Jaeger Bindings for Python OpenTracing API
+- [**251**星][2y] [ObjC] [feicong/macbook](https://github.com/feicong/macbook) 《macOS软件安全与逆向分析》随书源码
+- [**251**星][2m] [Py] [cvandeplas/pystemon](https://github.com/cvandeplas/pystemon) Monitoring tool for PasteBin-alike sites written in Python. Inspired by pastemon
+- [**251**星][1y] [C#] [brianhama/de4dot](https://github.com/brianhama/de4dot) .NET deobfuscator and unpacker.
+- [**250**星][15d] [neo23x0/auditd](https://github.com/neo23x0/auditd) Best Practice Auditd Configuration
+- [**250**星][3y] [Py] [prahladyeri/hotspotd](https://github.com/prahladyeri/hotspotd) Simple daemon to create a wifi hotspot on Linux
+- [**250**星][11m] [crytic/awesome-ethereum-security](https://github.com/crytic/awesome-ethereum-security) A curated list of awesome Ethereum security references
+- [**250**星][4y] [Py] [wooyun/tangscan](https://github.com/wooyun/tangscan) 企业在线安全平台
+- [**250**星][4y] [Py] [whitepacket/zib-trojan](https://github.com/whitepacket/zib-trojan) The Open Tor Botnet (ZIB); Python-based forever-FUD IRC Trojan
+- [**250**星][10m] [Py] [wh0ale/src-experience](https://github.com/wh0ale/src-experience) 工欲善其事,必先利其器
+- [**250**星][4y] [PHP] [phpwhois/phpwhois](https://github.com/phpwhois/phpwhois) phpWhois general repository
+- [**250**星][6d] [TS] [ninoseki/mitaka](https://github.com/ninoseki/mitaka) A browser extension for OSINT search
+- [**250**星][20d] [C] [nccgroup/sniffle](https://github.com/nccgroup/sniffle) A sniffer for Bluetooth 5 and 4.x LE
+- [**250**星][2y] [PS] [killswitch-gui/pentesting-scripts](https://github.com/killswitch-gui/pentesting-scripts) A ton of helpful tools
+- [**250**星][1y] [Py] [igio90/frick](https://github.com/igio90/frick) aka the first debugger built on top of frida
+- [**250**星][3y] [C] [guanchao/appprotect](https://github.com/guanchao/appprotect) 整理一些app常见的加固方法,包括java层、native层和资源文件加固等
+- [**250**星][4m] [Py] [fsgmhoward/shadowsocks-py-mu](https://github.com/fsgmhoward/shadowsocks-py-mu) A fast tunnel proxy server for multiple users
+- [**250**星][2y] [Py] [dbgx/lldb.nvim](https://github.com/dbgx/lldb.nvim) Debugger integration with a focus on ease-of-use.
+- [**250**星][3y] [Py] [census/choronzon](https://github.com/census/choronzon) An evolutionary knowledge-based fuzzer
+- [**250**星][1y] [Py] [avramit/instahack](https://github.com/avramit/instahack) Instagram bruteforce tool
+- [**250**星][3y] [Py] [asweigart/codebreaker](https://github.com/asweigart/codebreaker) "Hacking Secret Ciphers with Python" programs
+- [**249**星][15d] [Py] [zephrfish/googd0rker](https://github.com/zephrfish/googd0rker) GoogD0rker is a tool for firing off google dorks against a target domain, it is purely for OSINT against a specific target domain. READ the readme before messaging or tweeting me.
+- [**249**星][16d] [Java] [xuxueli/xxl-excel](https://github.com/xuxueli/xxl-excel) A flexible tool for translating Java objects and Excel documents.(Java对象和Excel转换工具XXL-EXCEL)
+- [**249**星][6d] [C] [tpm2-software/tpm2-tools](https://github.com/tpm2-software/tpm2-tools) The source repository for the TPM (Trusted Platform Module) 2 tools
+- [**249**星][25d] [Py] [tipam/pi3d](https://github.com/tipam/pi3d) Simple, yet powerful, 3D Python graphics library for beginners and school children running on the Raspberry Pi.
+- [**249**星][7y] [rentzsch/mach_star](https://github.com/rentzsch/mach_star) code injection and function overriding for Mac OS X
+- [**249**星][2m] [owasp/api-security](https://github.com/owasp/api-security) OWASP API Security Project
+- [**249**星][3y] [Py] [livz/cloacked-pixel](https://github.com/livz/cloacked-pixel) LSB steganography and detection
+- [**249**星][2y] [Mask] [lcatro/fuzzing-imagemagick](https://github.com/lcatro/fuzzing-imagemagick) OpenSource My ImageMagick Fuzzer ..
+- [**249**星][3y] [JS] [jesusprubio/bluebox-ng](https://github.com/jesusprubio/bluebox-ng) Pentesting framework using Node.js powers, focused in VoIP.
+- [**249**星][8m] [C] [jakeajames/rootlessjb](https://github.com/jakeajames/rootlessjb)
+- [**249**星][2y] [Py] [intezer/docker-ida](https://github.com/intezer/docker-ida) 在Docker容器中执行IDA, 以自动化/可扩展/分布式的方式执行IDAPython脚本
+- [**249**星][2d] [C] [gpg/gnupg](https://github.com/gpg/gnupg) The GNU Privacy Guard
+- [**249**星][2y] [Java] [godlikewangjun/dexknife-wj](https://github.com/godlikewangjun/dexknife-wj) apk加固插件 带签名校验、dex加密、资源混淆
+- [**249**星][6d] [HTML] [gfw-breaker/open-proxy](https://github.com/gfw-breaker/open-proxy) 一键部署被墙网站反向代理; 免翻墙访问被禁网站
+- [**249**星][8m] [Py] [dirkjanm/adidnsdump](https://github.com/dirkjanm/adidnsdump) Active Directory Integrated DNS dumping by any authenticated user
+- [**249**星][2y] [Py] [0x4d31/salt-scanner](https://github.com/0x4d31/salt-scanner) Linux vulnerability scanner based on Salt Open and Vulners audit API, with Slack notifications and JIRA integration
+- [**248**星][1m] [Rust] [falconre/falcon](https://github.com/falconre/falcon) Formal Binary Analysis Framework in Rust
+- [**248**星][1y] [batchfile] [zerodot1/coinblockerlists](https://github.com/zerodot1/coinblockerlists) Simple lists that can help prevent cryptomining in the browser or other applications.
+- [**248**星][1m] [PS] [sdcampbell/internal-pentest-playbook](https://github.com/sdcampbell/internal-pentest-playbook) Internal Network Penetration Test Playbook
+- [**248**星][2y] [Py] [rxwx/cve-2018-0802](https://github.com/rxwx/cve-2018-0802) PoC Exploit for CVE-2018-0802 (and optionally CVE-2017-11882)
+- [**248**星][1m] [Py] [quantopian/qdb](https://github.com/quantopian/qdb) Quantopian Remote Debugger for Python
+- [**248**星][2y] [Java] [portswigger/collaborator-everywhere](https://github.com/portswigger/collaborator-everywhere) Burp Suite 扩展,通过注入非侵入性 headers 来增强代理流量,通过引起 Pingback 到 Burp Collaborator 来揭露后端系统
+- [**248**星][2y] [C++] [minhaskamal/stupidkeylogger](https://github.com/minhaskamal/stupidkeylogger) A Terrific Keystroke Recorder (keylogger-key-logger-spyware-spy-trojan-simple-virus-for-windows-10-7-xp-smart-c-c++-cpp-code)
+- [**248**星][5y] [Ruby] [hakirisec/hakiri_toolbelt](https://github.com/hakirisec/hakiri_toolbelt) Secure Ruby apps with Hakiri
+- [**248**星][2y] [C] [dosomder/iovyroot](https://github.com/dosomder/iovyroot) CVE-2015-1805 root tool
+- [**247**星][1y] [Py] [warflop/cloudbunny](https://github.com/warflop/cloudbunny) CloudBunny is a tool to capture the real IP of the server that uses a WAF as a proxy or protection. In this tool we used three search engines to search domain information: Shodan, Censys and Zoomeye.
+- [**247**星][5m] [C++] [tonychen56/hackertools](https://github.com/tonychen56/hackertools) 使用MFC编写的病毒技术合集
+- [**247**星][2y] [Py] [spaze/oprah-proxy](https://github.com/spaze/oprah-proxy) Generate credentials for Opera's "browser VPN"
+- [**247**星][3m] [Shell] [solomonsklash/chomp-scan](https://github.com/solomonsklash/chomp-scan) A scripted pipeline of tools to streamline the bug bounty/penetration test reconnaissance phase, so you can focus on chomping bugs.
+- [**247**星][4y] [Py] [n0tr00t/beebeeto-framework](https://github.com/n0tr00t/beebeeto-framework) 规范化POC/EXP平台
+- [**247**星][1y] [Perl] [mrash/psad](https://github.com/mrash/psad) iptables 的入侵检测和日志分析
+- [**247**星][22d] [C] [mame82/logitacker](https://github.com/mame82/logitacker) Enumerate and test Logitech wireless input devices for vulnerabilities with a nRF52840 radio dongle.
+- [**247**星][5m] [JS] [lewisardern/bxss](https://github.com/lewisardern/bxss) bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.
+- [**247**星][2y] [PS] [leoloobeek/lapstoolkit](https://github.com/leoloobeek/lapstoolkit) Tool to audit and attack LAPS environments
+- [**247**星][1y] [Py] [hsury/geetest3-crack](https://github.com/hsury/geetest3-crack)
+- [**247**星][4m] [C] [gbps/gbhv](https://github.com/gbps/gbhv) Simple x86-64 VT-x Hypervisor with EPT Hooking
+- [**247**星][2y] [Shell] [freelancepentester/ddos-script](https://github.com/freelancepentester/ddos-script) All things to do after installing Kali Linux and Add more awesome hacking tools to your Kali Linux system
+- [**247**星][1m] [Java] [fanhua1994/dzfilter](https://github.com/fanhua1994/dzfilter) 【停止维护】使用DFA算法实现的内容安全,反垃圾,智能鉴黄,敏感词过滤,不良信息检测,文本校验,敏感词检测,包括关键词提取,过滤html标签等。
+- [**247**星][2y] [Go] [dzonerzy/gowapt](https://github.com/dzonerzy/gowapt) Go Web Application Penetration Test
+- [**247**星][3m] [Py] [corrad1nho/qomui](https://github.com/corrad1nho/qomui) Qomui (Qt OpenVPN Management UI)
+- [**246**星][1y] [Py] [boppreh/mouse](https://github.com/boppreh/mouse) Hook and simulate global mouse events in pure Python
+- [**246**星][1y] [Shell] [dylanbai8/v2ray_h2-tls_website_onekey](https://github.com/dylanbai8/v2ray_h2-tls_website_onekey) V2RAY 基于 CADDY 的 VMESS+H2+TLS+Website(Use Host)+Rinetd BBR 一键安装脚本
+- [**246**星][10d] [Shell] [bkuhlmann/mac_os-config](https://github.com/bkuhlmann/mac_os-config) Shell scripts for customized macOS machine setup and configuration.
+- [**246**星][17d] [Py] [susmithkrishnan/torghost](https://github.com/SusmithKrishnan/torghost) Tor anonimizer
+- [**246**星][6d] [Java] [nats-io/nats.java](https://github.com/nats-io/nats.java) Java client for NATS
+- [**246**星][3y] [Py] [tcstool/fireaway](https://github.com/tcstool/fireaway) Next Generation Firewall Audit and Bypass Tool
+- [**246**星][20d] [C++] [s0uthwest/futurerestore](https://github.com/s0uthwest/futurerestore) iOS upgrade and downgrade tool utilizing SHSH blobs
+- [**246**星][1y] [Py] [rub-syssec/microcode](https://github.com/rub-syssec/microcode) Microcode Updates for the USENIX 2017 paper: Reverse Engineering x86 Processor Microcode
+- [**246**星][2y] [Py] [maian-tool/maian](https://github.com/maian-tool/maian) automatic tool for finding trace vulnerabilities in Ethereum smart contracts
+- [**246**星][3y] [C] [jamesbarlow/icmptunnel](https://github.com/jamesbarlow/icmptunnel) Tunnel IP over ICMP.
+- [**246**星][4y] [Py] [jackgitgz/cnblogsspider](https://github.com/jackgitgz/cnblogsspider) 用scrapy采集cnblogs列表页爬虫
+- [**246**星][2m] [Py] [gildasio/h2t](https://github.com/gildasio/h2t) h2t (HTTP Hardening Tool) scans a website and suggests security headers to apply
+- [**246**星][2y] [Py] [gdelugre/ida-arm-system-highlight](https://github.com/gdelugre/ida-arm-system-highlight) 用于高亮和解码 ARM 系统指令
+- [**246**星][4m] [Py] [bontchev/pcodedmp](https://github.com/bontchev/pcodedmp) A VBA p-code disassembler
+- [**246**星][4y] [C] [begeekmyfriend/cuckoofilter](https://github.com/begeekmyfriend/cuckoofilter) Substitute for bloom filter.
+- [**246**星][4m] [C] [ampotos/dynstruct](https://github.com/ampotos/dynstruct) Reverse engineering tool for automatic structure recovering and memory use analysis based on DynamoRIO and Capstone
+- [**245**星][7y] [Ruby] [urbanesec/zackattack](https://github.com/urbanesec/ZackAttack) Unveiled at DEF CON 20, NTLM Relaying to ALL THE THINGS!
+- [**245**星][2y] [ludiosarchive/unfixed-security-bugs](https://github.com/ludiosarchive/unfixed-security-bugs) 已公开但未修复的漏洞列表。包括Chrome、VirtualBox、WeeChat、Windows(7-10)等知名软件。
+- [**245**星][9d] [C++] [strazzere/android-scripts](https://github.com/strazzere/android-scripts) Android逆向脚本收集
+- [**245**星][2y] [C#] [sparkfunx/skimmer_scanner](https://github.com/sparkfunx/skimmer_scanner) A mobile app for detecting bluetooth gas pump credit card skimmers
+- [**245**星][5m] [Shell] [peterpt/eternal_scanner](https://github.com/peterpt/eternal_scanner) 永恒之蓝漏洞的网络扫描器
+- [**245**星][3y] [Java] [neophob/pixelcontroller](https://github.com/neophob/pixelcontroller) (LED) Matrix Control Software, supports various Hardware, Keywords: LED Matrix, OSC, Realtime, VJ, Arduino, Teensy, RPI
+- [**245**星][4m] [PS] [nccgroup/azucar](https://github.com/nccgroup/azucar) Azure环境安全审计工具
+- [**245**星][3m] [Py] [inquest/threatingestor](https://github.com/inquest/threatingestor) Extract and aggregate threat intelligence.
+- [**245**星][16d] [C++] [evpo/encryptpad](https://github.com/evpo/encryptpad) Minimalist secure text editor and binary encryptor that implements RFC 4880 Open PGP format: symmetrically encrypted, compressed and integrity protected. The editor can protect files with passwords, key files or both.
+- [**245**星][7m] [ethicalhack3r/wordpress_plugin_security_testing_cheat_sheet](https://github.com/ethicalhack3r/wordpress_plugin_security_testing_cheat_sheet) WordPress插件安全测试备忘录。
+- [**245**星][2y] [PHP] [enygma/expose](https://github.com/enygma/expose) An Intrusion Detection System library loosely based on PHP IDS
+- [**245**星][2y] [JS] [cryptogenic/ps4-4.55-kernel-exploit](https://github.com/cryptogenic/ps4-4.55-kernel-exploit) A fully implemented kernel exploit for the PS4 on 4.55FW
+- [**245**星][12m] [Py] [crowdstrike/forensics](https://github.com/crowdstrike/forensics) Scripts and code referenced in CrowdStrike blog posts
+- [**245**星][20d] [Java] [c0ny1/jsencrypter](https://github.com/c0ny1/jsencrypter) 一个用于加密传输爆破的Burp Suite插件
+- [**244**星][2y] [C] [zer0mem0ry/kernelbhop](https://github.com/zer0mem0ry/kernelbhop) Cheat that uses a driver instead WinAPI for Reading / Writing memory.
+- [**244**星][2y] [Py] [xyuanmu/checkiptools](https://github.com/xyuanmu/checkiptools) CheckIPTools 扫描谷歌IP以及实用IP转换小工具
+- [**244**星][11d] [Py] [voulnet/barq](https://github.com/voulnet/barq) The AWS Cloud Post Exploitation framework!
+- [**244**星][8m] [C++] [ucsb-seclab/difuze](https://github.com/ucsb-seclab/difuze) 针对 Linux 内核驱动的 Fuzzer
+- [**244**星][4m] [Java] [righettod/poc-graphql](https://github.com/righettod/poc-graphql) Research on GraphQL from an AppSec point of view.
+- [**244**星][1m] [platomav/cpumicrocodes](https://github.com/platomav/cpumicrocodes) Intel, AMD, VIA & Freescale CPU Microcode Repositories
+- [**244**星][2y] [Shell] [pentester-io/commonspeak](https://github.com/pentester-io/commonspeak) 利用谷歌BigQuery 平台的公共数据集生成 wordlist
+- [**244**星][2y] [Py] [neohapsis/creddump7](https://github.com/neohapsis/creddump7)
+- [**244**星][3y] [misterch0c/awesome-hacking](https://github.com/misterch0c/awesome-hacking) A collection of various awesome lists for hackers, pentesters and security researchers
+- [**244**星][2m] [C++] [microsoft/krabsetw](https://github.com/microsoft/krabsetw) KrabsETW provides a modern C++ wrapper and a .NET wrapper around the low-level ETW trace consumption functions.
+- [**244**星][4y] [Py] [metac0rtex/githarvester](https://github.com/metac0rtex/githarvester) harvesting information from GitHub
+- [**244**星][3m] [C] [leebrotherston/tls-fingerprinting](https://github.com/leebrotherston/tls-fingerprinting) TLS Fingerprinting
+- [**244**星][2y] [Py] [jakespringer/angr_ctf](https://github.com/jakespringer/angr_ctf)
+- [**244**星][4m] [Py] [initroot/burpjslinkfinder](https://github.com/initroot/burpjslinkfinder) Burp Extension for a passive scanning JS files for endpoint links.
+- [**244**星][2y] [hsis007/useful_websites_for_pentester](https://github.com/hsis007/useful_websites_for_pentester) This repository is to make life of the pentester easy as it is a collection of the websites that can be used by pentesters for day to day studies and to remain updated.
+- [**244**星][5y] [C++] [gametutorials/tutorials](https://github.com/gametutorials/tutorials) This holds the tutorials for GameTutorials.com
+- [**244**星][2y] [C] [espressif/esp32-nesemu](https://github.com/espressif/esp32-nesemu) Proof-of-concept NES emulator for the ESP32
+- [**244**星][3y] [Py] [donnchac/onionbalance](https://github.com/donnchac/onionbalance) OnionBalance provides load-balancing and redundancy for Tor hidden services
+- [**244**星][8d] [Py] [cisco-config-analysis-tool/ccat](https://github.com/cisco-config-analysis-tool/ccat) Cisco Config Analysis Tool
+- [**244**星][2y] [HTML] [arno0x/embedinhtml](https://github.com/arno0x/embedinhtml) Embed and hide any file in an HTML file
+- [**244**星][9m] [Py] [antoniococo/sharpyshell](https://github.com/antoniococo/sharpyshell) ASP.NET webshell,小型,混淆,针对C# Web App
+- [**244**星][1y] [C#] [0xbadjuju/wheresmyimplant](https://github.com/0xbadjuju/wheresmyimplant) A Bring Your Own Land Toolkit that Doubles as a WMI Provider
+- [**244**星][8m] [0x4d31/awesome-oscp](https://github.com/0x4d31/awesome-oscp) A curated list of awesome OSCP resources
+- [**243**星][23d] [Py] [0xeb-bp/bluekeep](https://github.com/0xeb-bp/bluekeep) Public work for CVE-2019-0708
+- [**243**星][13d] [Py] [orlikoski/cdqr](https://github.com/orlikoski/CDQR) The Cold Disk Quick Response (CDQR) tool is a fast and easy to use forensic artifact parsing tool that works on disk images, mounted drives and extracted artifacts from Windows, Linux, MacOS, and Android devices
+- [**243**星][3m] [Py] [usb-tools/facedancer](https://github.com/usb-tools/Facedancer) modern FaceDancer core for multiple devices-- including GreatFET
+- [**243**星][2d] [CSS] [steamdatabase/gametracking-dota2](https://github.com/steamdatabase/gametracking-dota2)
+- [**243**星][3y] [Py] [sensepost/autodane](https://github.com/sensepost/autodane) Auto Domain Admin and Network Exploitation.
+- [**243**星][4y] [Py] [rockerflower/shadowsocks](https://github.com/rockerflower/shadowsocks)
+- [**243**星][4m] [C++] [nektra/deviare-inproc](https://github.com/nektra/deviare-inproc) Deviare In Process Instrumentation Engine
+- [**243**星][2y] [Py] [mindpointgroup/cloudfrunt](https://github.com/mindpointgroup/cloudfrunt) A tool for identifying misconfigured CloudFront domains
+- [**243**星][3m] [Shell] [leviathan36/kaboom](https://github.com/leviathan36/kaboom) An automated pentest tool
+- [**243**星][3y] [C] [hyln9/vikiroot](https://github.com/hyln9/vikiroot) CVE-2016-5195 (Dirty COW) PoC for Android 6.0.1 Marshmallow
+- [**243**星][2y] [C++] [fireice-uk/xmr-stak-nvidia](https://github.com/fireice-uk/xmr-stak-nvidia) Monero NVIDIA miner
+- [**243**星][3m] [JS] [antswordproject/ant](https://github.com/antswordproject/ant) 实时上线的 XSS 盲打平台
+- [**242**星][4y] [C++] [piker-alpha/macosxbootloader](https://github.com/piker-alpha/macosxbootloader) Pike's bootloader
+- [**242**星][6d] [Go] [grafeas/kritis](https://github.com/grafeas/kritis) Deploy-time Policy Enforcer for Kubernetes applications
+- [**242**星][9m] [C] [pegasuslab/ghosttunnel](https://github.com/PegasusLab/GhostTunnel) GhostTunnel is a covert backdoor transmission method that can be used in an isolated environment.
+- [**242**星][4m] [C] [pagalaxylab/unifuzzer](https://github.com/PAGalaxyLab/uniFuzzer) A fuzzing tool for closed-source binaries based on Unicorn and LibFuzzer
+- [**242**星][10m] [C++] [revng/revng](https://github.com/revng/revng) 二进制分析工具,基于QEMU 和LLVM
+- [**242**星][12m] [xcsh/unity-game-hacking](https://github.com/xcsh/unity-game-hacking) A guide for hacking unity games
+- [**242**星][3y] [PHP] [tdifg/webshell](https://github.com/tdifg/webshell) WebShell Collect
+- [**242**星][7m] [Lua] [rvn0xsy/nse_vuln](https://github.com/rvn0xsy/nse_vuln) Nmap扫描、漏洞利用脚本
+- [**242**星][2y] [Py] [nirvik/iwant](https://github.com/nirvik/iwant) Commandline tool for searching and downloading files in LAN network, without any central server
+- [**242**星][1y] [Go] [netspi/goddi](https://github.com/netspi/goddi) goddi (go dump domain info) dumps Active Directory domain information
+- [**242**星][2y] [Py] [minhnhat93/tf-sndcgan](https://github.com/minhnhat93/tf-sndcgan) Tensorflow Implementation of the paper "Spectral Normalization for Generative Adversarial Networks" (ICML 2017 workshop)
+- [**242**星][4y] [C++] [meeloo/xspray](https://github.com/meeloo/xspray) A front end for lldb on OS X for Mac and iOS targets, with a twist
+- [**242**星][9m] [Py] [mazen160/bfac](https://github.com/mazen160/bfac) 自动化 web app 备份文件测试工具,可检测备份文件是否会泄露 web app 源代码
+- [**242**星][2m] [C] [llvm-mirror/compiler-rt](https://github.com/llvm-mirror/compiler-rt) Mirror of official compiler-rt git repository located at
+- [**242**星][8m] [Py] [lionsec/wifresti](https://github.com/lionsec/wifresti) Find your wireless network password in Windows , Linux and Mac OS
+- [**242**星][2y] [C#] [jephthai/openpasswordfilter](https://github.com/jephthai/openpasswordfilter) An open source custom password filter DLL and userspace service to better protect / control Active Directory domain passwords.
+- [**242**星][2y] [Shell] [h0nus/roguesploit](https://github.com/h0nus/roguesploit) Powerfull Wi-Fi trap!
+- [**242**星][28d] [cujanovic/open-redirect-payloads](https://github.com/cujanovic/open-redirect-payloads) Open Redirect Payloads
+- [**242**星][1m] [croqaz/awesome-decentralized](https://github.com/croqaz/awesome-decentralized)
+- [**242**星][2m] [Java] [c0ny1/passive-scan-client](https://github.com/c0ny1/passive-scan-client) Burp被动扫描流量转发插件
+- [**242**星][3m] [Py] [atexio/mercure](https://github.com/atexio/mercure) 对员工进行网络钓鱼的培训
+- [**241**星][9d] [Rust] [hippolot/anevicon](https://github.com/Hippolot/anevicon)
+- [**241**星][6y] [Py] [zigoo0/webpwn3r](https://github.com/zigoo0/webpwn3r) WebPwn3r - Web Applications Security Scanner.
+- [**241**星][6m] [JS] [we11cheng/wcshadowrocket](https://github.com/we11cheng/wcshadowrocket) iOS Shadowrocket(砸壳重签,仅供参考,添加节点存在问题)。另一个fq项目potatso源码参见:
+- [**241**星][7m] [C++] [smaffer/vgax](https://github.com/smaffer/vgax) VGA library for Arduino UNO
+- [**241**星][1y] [Java] [shiltemann/ctf-writeups-public](https://github.com/shiltemann/ctf-writeups-public) Writeups for infosec Capture the Flag events by team Galaxians
+- [**241**星][3m] [JS] [owasp/dvsa](https://github.com/owasp/dvsa) a Damn Vulnerable Serverless Application
+- [**241**星][8m] [Py] [openstack/syntribos](https://github.com/openstack/syntribos) 自动化的 API 安全测试工具
+- [**241**星][2y] [Py] [leonardonve/dns2proxy](https://github.com/leonardonve/dns2proxy) Offensive DNS server
+- [**241**星][1y] [kinimiwar/penetration-testing](https://github.com/kinimiwar/penetration-testing) List of awesome penetration testing resources, tools and other shiny things
+- [**241**星][1y] [Py] [hgascon/pulsar](https://github.com/hgascon/pulsar) 具有自动学习、模拟协议功能的网络 fuzzer
+- [**241**星][5m] [C] [compsec-snu/razzer](https://github.com/compsec-snu/razzer) A Kernel fuzzer focusing on race bugs
+- [**241**星][3y] [C] [astsam/rtl8812au](https://github.com/astsam/rtl8812au) RTL8812AU/21AU and RTL8814AU driver with monitor mode and frame injection
+- [**241**星][10m] [psiphon/psiphon-circumvention-system](https://bitbucket.org/psiphon/psiphon-circumvention-system)
+- [**240**星][3m] [JS] [mattcg/socks5-http-client](https://github.com/mattcg/socks5-http-client) SOCKS v5 HTTP client implementation in JavaScript for Node.js.
+- [**240**星][5m] [crytic/evm-opcodes](https://github.com/crytic/evm-opcodes) Ethereum opcodes and instruction reference
+- [**240**星][1y] [C++] [woxihuannisja/bangcle](https://github.com/woxihuannisja/bangcle) The second generation Android Hardening Protection
+- [**240**星][2y] [ObjC] [sticktron/g0blin](https://github.com/sticktron/g0blin) a work-in-progress jailbreak for iOS 10.3.x (A7-A9)
+- [**240**星][3y] [JS] [samsung/jalangi2](https://github.com/samsung/jalangi2) Dynamic analysis framework for JavaScript
+- [**240**星][1y] [Ruby] [rastating/joomlavs](https://github.com/rastating/joomlavs) A black box, Ruby powered, Joomla vulnerability scanner
+- [**240**星][6m] [Java] [petercunha/jenkins-rce](https://github.com/petercunha/jenkins-rce)
+- [**240**星][3y] [Py] [pcbje/gransk](https://github.com/pcbje/gransk) Document processing for investigations
+- [**240**星][5d] [JS] [myetherwallet/ethereum-lists](https://github.com/myetherwallet/ethereum-lists) A repository for maintaining lists of things like malicious URLs, fake token addresses, and so forth. We love lists.
+- [**240**星][8m] [C++] [mstfknn/malware-sample-library](https://github.com/mstfknn/malware-sample-library) Malware sample library.
+- [**240**星][21d] [Py] [mez0cc/ms17-010-python](https://github.com/mez0cc/ms17-010-python) MS17-010: Python and Meterpreter
+- [**240**星][12d] [Py] [mandatoryprogrammer/trusttrees](https://github.com/mandatoryprogrammer/trusttrees) a script to recursively follow all the possible delegation paths for a target domain and graph the relationships between various nameservers along the way.
+- [**240**星][2y] [C] [limneos/mobileminer](https://github.com/limneos/mobileminer) CPU Miner for ARM64 iOS Devices
+- [**240**星][2m] [Java] [kwart/jd-cmd](https://github.com/kwart/jd-cmd) Command line Java Decompiler
+- [**240**星][2y] [C] [jas502n/0day-security-software-vulnerability-analysis-technology](https://github.com/jas502n/0day-security-software-vulnerability-analysis-technology) 0day安全_软件漏洞分析技术
+- [**240**星][3y] [Py] [intrepidusgroup/mallory](https://github.com/intrepidusgroup/mallory) Mallory - MiTM TCP and UDP Proxy
+- [**240**星][3y] [Shell] [g0tmi1k/debian-ssh](https://github.com/g0tmi1k/debian-ssh) Debian OpenSSL Predictable PRNG (CVE-2008-0166)
+- [**240**星][9m] [JS] [exodusintel/cve-2019-5786](https://github.com/exodusintel/cve-2019-5786) FileReader Exploit
+- [**240**星][4d] [Shell] [essandess/macos-fortress](https://github.com/essandess/macos-fortress) Firewall and Privatizing Proxy for Trackers, Attackers, Malware, Adware, and Spammers with Anti-Virus On-Demand and On-Access Scanning (PF, squid, privoxy, hphosts, dshield, emergingthreats, hostsfile, PAC file, clamav)
+- [**240**星][2y] [PS] [dafthack/hostrecon](https://github.com/dafthack/hostrecon) This function runs a number of checks on a system to help provide situational awareness to a penetration tester during the reconnaissance phase. It gathers information about the local system, users, and domain information. It does not use any 'net', 'ipconfig', 'whoami', 'netstat', or other system commands to help avoid detection.
+- [**240**星][6y] [C++] [clinicallyinane/shellcode_launcher](https://github.com/clinicallyinane/shellcode_launcher) Shellcode launcher utility
+- [**240**星][2m] [Py] [a3sal0n/falcongate](https://github.com/a3sal0n/falcongate) A smart gateway to stop hackers and Malware attacks
+- [**239**星][1y] [C++] [zhuhaow/libnekit](https://github.com/zhuhaow/libnekit) Efficient and Flexible Network Utility Library
+- [**239**星][7m] [Py] [beeware/bugjar](https://github.com/beeware/bugjar) A interactive graphical debugger for Python code.
+- [**239**星][2y] [Py] [xhujoy/pysc2-agents](https://github.com/xhujoy/pysc2-agents) This is a simple implementation of DeepMind's PySC2 RL agents.
+- [**239**星][2y] [PS] [und3rf10w/aggressor-scripts](https://github.com/und3rf10w/aggressor-scripts) Aggressor scripts I've made for Cobalt Strike
+- [**239**星][2m] [Py] [sc1341/instagramosint](https://github.com/sc1341/instagramosint) An Instagram Open Source Intelligence Tool
+- [**239**星][1m] [PHP] [psecio/versionscan](https://github.com/psecio/versionscan) A PHP version scanner for reporting possible vulnerabilities
+- [**239**星][2y] [Py] [panagiks/rspet](https://github.com/panagiks/rspet) RSPET (Reverse Shell and Post Exploitation Tool) is a Python based reverse shell equipped with functionalities that assist in a post exploitation scenario.
+- [**239**星][2y] [Py] [nettitude/prowl](https://github.com/nettitude/prowl) an email harvesting tool that scrapes Yahoo for Linkedin profiles associated to the users search terms and identifies job titles
+- [**239**星][5d] [Makefile] [kframework/evm-semantics](https://github.com/kframework/evm-semantics) K Semantics of the Ethereum Virtual Machine (EVM)
+- [**239**星][5m] [C++] [facebook/ds2](https://github.com/facebook/ds2) Debug server for lldb.
+- [**239**星][10m] [Py] [epickrram/grav](https://github.com/epickrram/grav) Performance visualisation tools
+- [**239**星][3y] [Go] [egebalci/egesploit](https://github.com/egebalci/egesploit) EGESPLOIT is a golang library for malware development
+- [**239**星][10m] [PHP] [delight-im/php-privacypolicy](https://github.com/delight-im/php-privacypolicy) Programmatically composable privacy policies for humans and machines
+- [**239**星][2y] [Py] [battelle/sandsifter](https://github.com/battelle/sandsifter) The x86 processor fuzzer
+- [**239**星][13d] [Py] [avatartwo/avatar2](https://github.com/avatartwo/avatar2) targetorchestration 框架,重点是嵌入式设备固件的动态分析
+- [**238**星][3m] [Go] [jpillora/ipfilter](https://github.com/jpillora/ipfilter) A package for IP Filtering in Go (golang)
+- [**238**星][2y] [C] [zerosum0x0/defcon-25-workshop](https://github.com/zerosum0x0/defcon-25-workshop) Windows Post-Exploitation / Malware Forward Engineering DEF CON 25 Workshop
+- [**238**星][2y] [Py] [preempt/credssp](https://github.com/preempt/credssp) CVE-2018-0886(Windows CredSSP协议验证过程中的RCE漏洞)PoC
+- [**238**星][8d] [pe3zx/my-infosec-awesome](https://github.com/pe3zx/my-infosec-awesome) My curated list of awesome links, resources and tools on infosec related topics
+- [**238**星][2m] [Java] [nickstadb/serializationdumper](https://github.com/nickstadb/serializationdumper) A tool to dump Java serialization streams in a more human readable form.
+- [**238**星][1y] [Py] [matthewclarkmay/geoip-attack-map](https://github.com/matthewclarkmay/geoip-attack-map) Cyber security geoip attack map that follows syslog and parses IPs/port numbers to visualize attackers in real time.
+- [**238**星][4y] [C] [jethrogb/uefireverse](https://github.com/jethrogb/uefireverse) Tools to help with Reverse Engineering UEFI-based firmware
+- [**238**星][5y] [C] [jduck/asus-cmd](https://github.com/jduck/asus-cmd) ASUS Router infosvr UDP Broadcast root Command Execution
+- [**238**星][4y] [HTML] [ikarienator/phantomjs_hide_and_seek](https://github.com/ikarienator/phantomjs_hide_and_seek) Some ideas around spoofing and detecting user agents.
+- [**238**星][8d] [JS] [frenchyeti/dexcalibur](https://github.com/frenchyeti/dexcalibur) Dynamic binary instrumentation tool designed for Android application and powered by Frida. It disassembles dex, analyzes it statically, generates hooks, discovers reflected methods, stores intercepted data and does new things from it. Its aim is to be an all-in-one Android reverse engineering platform.
+- [**238**星][2m] [Java] [ata4/bspsrc](https://github.com/ata4/bspsrc) A Source engine map decompiler
+- [**238**星][9d] [Py] [a13xp0p0v/kconfig-hardened-check](https://github.com/a13xp0p0v/kconfig-hardened-check) A script for checking the hardening options in the Linux kernel config
+- [**237**星][7d] [Py] [tencent/qt4a](https://github.com/tencent/qt4a) QTA driver for Android app
+- [**237**星][22d] [Py] [pyhackertarget/hackertarget](https://github.com/pyhackertarget/hackertarget) attack surface discovery and identification of security vulnerabilities
+- [**237**星][3y] [Py] [trustedsec/tap](https://github.com/trustedsec/tap) The TrustedSec Attack Platform is a reliable method for droppers on an infrastructure in order to ensure established connections to an organization.
+- [**237**星][1m] [Py] [timlib/webxray](https://github.com/timlib/webxray) webxray is a tool for analyzing third-party content on webpages and identifying the companies which collect user data.
+- [**237**星][2m] [Java] [samlraider/samlraider](https://github.com/samlraider/samlraider) SAML2 Burp Extension
+- [**237**星][21d] [pomerium/awesome-zero-trust](https://github.com/pomerium/awesome-zero-trust) A curated collection of awesome resources for the zero-trust security model.
+- [**237**星][2y] [Ruby] [nahamsec/hostilesubbruteforcer](https://github.com/nahamsec/hostilesubbruteforcer)
+- [**237**星][4m] [PS] [microsoft/aaronlocker](https://github.com/microsoft/aaronlocker) Windows应用程序白名单
+- [**237**星][9d] [Py] [inforion/idapython-cheatsheet](https://github.com/inforion/idapython-cheatsheet) Scripts and cheatsheets for IDAPython
+- [**237**星][9m] [harmoc/ctftools](https://github.com/harmoc/ctftools) Personal CTF Toolkit
+- [**237**星][2d] [JS] [hackademix/noscript](https://github.com/hackademix/noscript) The popular NoScript Security Suite browser extension.
+- [**237**星][10m] [C] [geosn0w/osirisjailbreak12](https://github.com/geosn0w/osirisjailbreak12) iOS 12.0 -> 12.1.2 Incomplete Osiris Jailbreak with CVE-2019-6225 by GeoSn0w (FCE365)
+- [**237**星][3y] [Py] [ftramer/steal-ml](https://github.com/ftramer/steal-ml) 机器学习即服务平台上的模型提取攻击
+- [**237**星][2y] [C] [ele7enxxh/android-afl](https://github.com/ele7enxxh/android-afl) Fuzzing Android program with american fuzzy lop (AFL)
+- [**237**星][28d] [Rust] [danleh/wasabi](https://github.com/danleh/wasabi) A dynamic analysis framework for WebAssembly programs.
+- [**237**星][3y] [C++] [damellis/cellphone2](https://github.com/damellis/cellphone2) Second iteration of the DIY cellphone (based on the Arduino GSM shield).
+- [**237**星][8m] [Py] [daenerys-sre/source](https://github.com/daenerys-sre/source) 使IDA和Ghidra脚本通用, 无需修改
+- [**237**星][3m] [cujanovic/markdown-xss-payloads](https://github.com/cujanovic/markdown-xss-payloads) XSS payloads for exploiting Markdown syntax
+- [**237**星][6m] [Py] [cuckoosandbox/community](https://github.com/cuckoosandbox/community) Repository of modules and signatures contributed by the community
+- [**237**星][4m] [JS] [consensys/surya](https://github.com/consensys/surya) A set of utilities for exploring Solidity contracts
+- [**237**星][28d] [JS] [bet4it/hyperpwn](https://github.com/bet4it/hyperpwn) A hyper plugin to provide a flexible GDB GUI with the help of GEF, pwndbg or peda
+- [**237**星][2y] [Py] [arno0x/wsc2](https://github.com/arno0x/wsc2) A WebSocket C2 Tool
+- [**236**星][2y] [Go] [zyfworks/anothersteamcommunityfix](https://github.com/zyfworks/anothersteamcommunityfix) 通过修改hosts转发HTTP请求的方式临时性修复SteamCommunity在中国大陆无法访问的小工具
+- [**236**星][11m] [C] [r3x/how2kernel](https://github.com/r3x/how2kernel) This Repository aims at giving a basic idea about Kernel Exploitation.
+- [**236**星][3m] [Py] [cylance/cybot](https://github.com/cylance/CyBot) Open Source Threat Intelligence Chat Bot
+- [**236**星][3m] [Py] [brad-sp/cuckoo-modified](https://github.com/brad-sp/cuckoo-modified) Modified edition of cuckoo
+- [**236**星][5d] [w0lfschild/macos_headers](https://github.com/w0lfschild/macos_headers) a class dump of most Apple Applications and Frameworks on macOS
+- [**236**星][7m] [C++] [strivexjun/xantidebug](https://github.com/strivexjun/xantidebug) VMProtect 3.x Anti-debug Method Improved
+- [**236**星][4y] [C] [softethervpn/win10pcap](https://github.com/softethervpn/win10pcap) WinPcap for Windows 10 (NDIS 6.x driver model)
+- [**236**星][2y] [C++] [pellegre/libcrafter](https://github.com/pellegre/libcrafter) C++ 编写的网络数据包嗅探和解码库
+- [**236**星][3d] [HCL] [nozaq/terraform-aws-secure-baseline](https://github.com/nozaq/terraform-aws-secure-baseline) Terraform module to set up your AWS account with the secure baseline configuration based on CIS Amazon Web Services Foundations.
+- [**236**星][2y] [Py] [nccgroup/shocker](https://github.com/nccgroup/shocker) A tool to find and exploit servers vulnerable to Shellshock
+- [**236**星][2m] [JS] [martinzhou2015/srcms](https://github.com/martinzhou2015/srcms) SRCMS企业应急响应与缺陷管理系统
+- [**236**星][24d] [C] [kubo/plthook](https://github.com/kubo/plthook) Hook function calls by replacing PLT(Procedure Linkage Table) entries.
+- [**236**星][11m] [Go] [fardog/secureoperator](https://github.com/fardog/secureoperator) A DNS-protocol proxy for DNS-over-HTTPS providers, such as Google and Cloudflare
+- [**236**星][11m] [duoergun0729/2book](https://github.com/duoergun0729/2book) 《Web安全之深度学习实战》
+- [**236**星][5y] [C] [conix-security/zer0m0n](https://github.com/conix-security/zer0m0n) zer0m0n driver for cuckoo sandbox
+- [**235**星][27d] [C] [cmu-sei/scale](https://github.com/cmu-sei/scale) SCALe (Source Code Analysis Lab) is a static analysis aggregator/correlator which enables a source code analyst to combine static analysis results from multiple tools into one interface, and also provides mappings for diagnostics from the tools to the SEI CERT Secure Coding standards.
+- [**235**星][3m] [Swift] [shadowsocksr-live/ishadowsocksr](https://github.com/shadowsocksr-live/ishadowsocksr) ShadowsocksR for iOS, come from
+- [**235**星][4m] [C#] [fsecurelabs/sharpgpoabuse](https://github.com/FSecureLABS/SharpGPOAbuse) take advantage of a user's edit rights on a Group Policy Object (GPO) in order to compromise the objects that are controlled by that GPO.
+- [**235**星][1y] [Py] [3summer/ctf-rsa-tool](https://github.com/3summer/CTF-RSA-tool) a little tool help CTFer solve RSA problem
+- [**235**星][6y] [Py] [xen0ph0n/yaragenerator](https://github.com/xen0ph0n/yaragenerator) quick, simple, and effective yara rule creation to isolate malware families and other malicious objects of interest
+- [**235**星][3y] [Py] [withdk/badusb2-mitm-poc](https://github.com/withdk/badusb2-mitm-poc) BadUSB 2.0 USB-HID MiTM POC
+- [**235**星][1m] [C] [wbenny/ia32-doc](https://github.com/wbenny/ia32-doc) IA32-doc is a project which aims to put as many definitions from the Intel Manual into machine-processable format as possible
+- [**235**星][1m] [C#] [tyranid/exploitremotingservice](https://github.com/tyranid/exploitremotingservice) A tool to exploit .NET Remoting Services
+- [**235**星][1y] [Java] [nccgroup/burpsuiteloggerplusplus](https://github.com/nccgroup/burpsuiteloggerplusplus) Burp Suite Logger++: Log activities of all the tools in Burp Suite
+- [**235**星][4y] [Py] [mwielgoszewski/python-paddingoracle](https://github.com/mwielgoszewski/python-paddingoracle) A portable, padding oracle exploit API
+- [**235**星][1y] [JS] [holyvier/prototype-pollution-nsec18](https://github.com/holyvier/prototype-pollution-nsec18) Content released at NorthSec 2018 for my talk on prototype pollution
+- [**235**星][8m] [Go] [gocaio/goca](https://github.com/gocaio/goca) Goca Scanner
+- [**235**星][2y] [Py] [evait-security/weeman](https://github.com/evait-security/weeman) HTTP server for phishing in python
+- [**235**星][1m] [HTML] [edoverflow/bugbountyguide](https://github.com/edoverflow/bugbountyguide) Bug Bounty Guide is a launchpad for bug bounty programs and bug bounty hunters.
+- [**235**星][10m] [Py] [cryin/javaid](https://github.com/cryin/javaid) java source code static code analysis and danger function identify prog
+- [**235**星][9m] [Py] [codeinthehole/purl](https://github.com/codeinthehole/purl) A simple, immutable URL class with a clean API for interrogation and manipulation.
+- [**235**星][9m] [Py] [airbus-seclab/ilo4_toolbox](https://github.com/airbus-seclab/ilo4_toolbox) Toolbox for HPE iLO4 & iLO5 analysis
+- [**235**星][10m] [JS] [adamyordan/cve-2019-1003000-jenkins-rce-poc](https://github.com/adamyordan/cve-2019-1003000-jenkins-rce-poc) Jenkins RCE Proof-of-Concept: SECURITY-1266 / CVE-2019-1003000 (Script Security), CVE-2019-1003001 (Pipeline: Groovy), CVE-2019-1003002 (Pipeline: Declarative)
+- [**234**星][5m] [Shell] [hak5/packetsquirrel-payloads](https://github.com/hak5/packetsquirrel-payloads) The Official Packet Squirrel Payload Repository
+- [**234**星][10d] [C#] [xenocoderce/neo-confuserex](https://github.com/xenocoderce/neo-confuserex) Updated ConfuserEX, an open-source, free obfuscator for .NET applications
+- [**234**星][2y] [TS] [weichx/cerialize](https://github.com/weichx/cerialize) Easy serialization through ES7/Typescript annotations
+- [**234**星][11m] [C] [reisyukaku/reinand](https://github.com/reisyukaku/reinand) Minimalist 3DS custom firmware.
+- [**234**星][4y] [Py] [pyana/pyana](https://github.com/pyana/pyana) 使用Unicorn框架模拟执行Shellcode(Windows)
+- [**234**星][21d] [Julia] [jrevels/cassette.jl](https://github.com/jrevels/cassette.jl) Overdub Your Julia Code
+- [**234**星][4y] [PS] [invoke-ir/uproot](https://github.com/invoke-ir/uproot) Currently not updated for WMIEvent module...
+- [**234**星][1y] [Ruby] [hahwul/droid-hunter](https://github.com/hahwul/droid-hunter) (deprecated) Android application vulnerability analysis and Android pentest tool
+- [**234**星][2m] [C] [grant-h/qu1ckr00t](https://github.com/grant-h/qu1ckr00t) A PoC application demonstrating the power of an Android kernel arbitrary R/W.
+- [**234**星][2d] [Ruby] [fabric8io/fluent-plugin-kubernetes_metadata_filter](https://github.com/fabric8io/fluent-plugin-kubernetes_metadata_filter) Enrich your fluentd events with Kubernetes metadata
+- [**234**星][1y] [Java] [difcareer/sqlmap4burp](https://github.com/difcareer/sqlmap4burp) sqlmap embed in burpsuite
+- [**234**星][1m] [C] [didi/kemon](https://github.com/didi/kemon) An Open-Source Pre and Post Callback-Based Framework for macOS Kernel Monitoring.
+- [**234**星][7m] [JS] [cliqz-oss/local-sheriff](https://github.com/cliqz-oss/local-sheriff) Think of Local sheriff as a recon tool in your browser (WebExtension). While you normally browse the internet, Local Sheriff works in the background to empower you in identifying what data points (PII) are being shared / leaked to which all third-parties.
+- [**234**星][6y] [Py] [adastra-thw/pyhacks](https://github.com/adastra-thw/pyhacks) Python Scripts for Hacking .
+- [**233**星][2y] [wizardforcel/web-hacking-101-zh](https://github.com/wizardforcel/web-hacking-101-zh)
+- [**233**星][2y] [Py] [robotattackorg/robot-detect](https://github.com/robotattackorg/robot-detect) Detection script for the ROBOT vulnerability
+- [**233**星][7m] [Py] [patois/dsync](https://github.com/patois/dsync) 反汇编和反编译窗口同步插件
+- [**233**星][2y] [palantir/alerting-detection-strategy-framework](https://github.com/palantir/alerting-detection-strategy-framework) A framework for developing alerting and detection strategies for incident response.
+- [**233**星][10m] [Py] [nethunteros/punter](https://github.com/nethunteros/punter) 使用 DNSDumpster, WHOIS, Reverse WHOIS 挖掘域名
+- [**233**星][6m] [Py] [maaaaz/nmaptocsv](https://github.com/maaaaz/nmaptocsv) A simple python script to convert Nmap output to CSV
+- [**233**星][2y] [C] [larsbrinkhoff/httptunnel](https://github.com/larsbrinkhoff/httptunnel) Bidirectional data stream tunnelled in HTTP requests.
+- [**233**星][2y] [JS] [google/password-alert](https://github.com/google/password-alert) A Chrome Extension to help protect against phishing attacks.
+- [**233**星][2m] [Py] [gilligan/vim-lldb](https://github.com/gilligan/vim-lldb) lldb debugger integration plugin for vim
+- [**233**星][4d] [Common Lisp] [cffi/cffi](https://github.com/cffi/cffi) The Common Foreign Function Interface
+- [**233**星][28d] [Go] [apuigsech/seekret](https://github.com/apuigsech/seekret) Go library and command line to seek for secrets on various sources.
+- [**232**星][2m] [C] [yifengyou/the-design-and-implementation-of-a-64-bit-os](https://github.com/yifengyou/The-design-and-implementation-of-a-64-bit-os) 《一个64位操作系统的设计与实现》读书笔记&随书源码
+- [**232**星][2m] [Ruby] [zt2/sqli-hunter](https://github.com/zt2/sqli-hunter) SQLi-Hunter is a simple HTTP proxy server and a SQLMAP API wrapper that makes digging SQLi easy.
+- [**232**星][5y] [C] [sztupy/luadec51](https://github.com/sztupy/luadec51) Lua Decompiler for Lua version 5.1
+- [**232**星][5y] [PHP] [smaash/quasibot](https://github.com/smaash/quasibot) complex webshell manager, quasi-http botnet.
+- [**232**星][2m] [C++] [richkmeli/richkware](https://github.com/richkmeli/richkware) Framework for building Windows malware, written in C++
+- [**232**星][9m] [Go] [masterzen/winrm](https://github.com/masterzen/winrm) Windows远程命令执行,命令行工具+库,Go编写
+- [**232**星][4y] [C] [markjandrews/wrk-v1.2](https://github.com/markjandrews/wrk-v1.2) Windows研究内核
+- [**232**星][16d] [C#] [icsharpcode/avaloniailspy](https://github.com/icsharpcode/avaloniailspy) Avalonia-based .NET Decompiler (port of ILSpy)
+- [**232**星][2m] [Propeller Spin] [grandideastudio/jtagulator](https://github.com/grandideastudio/jtagulator) Assisted discovery of on-chip debug interfaces
+- [**232**星][2y] [C++] [fireeye/simplifygraph](https://github.com/fireeye/simplifygraph) 复杂graphs的简化
+- [**232**星][4y] [JS] [firebug/firebug.next](https://github.com/firebug/firebug.next) Next Firebug generation built on top of native Firefox developer tools
+- [**232**星][9d] [Java] [dexpatcher/dexpatcher-tool](https://github.com/dexpatcher/dexpatcher-tool) Android Dalvik bytecode patcher.
+- [**232**星][4m] [C] [devnoname120/vhbb](https://github.com/devnoname120/vhbb) Browse, download, and launch Vita homebrews!
+- [**232**星][2y] [d33tah/call-for-wpa3](https://github.com/d33tah/call-for-wpa3) Call for WPA3 - what's wrong with WPA2 security and how to fix it
+- [**232**星][6m] [cr0hn/nosqlinjection_wordlists](https://github.com/cr0hn/nosqlinjection_wordlists) This repository contains payload to test NoSQL Injections
+- [**232**星][3y] [C] [canbus-triple/canbus-triple](https://github.com/canbus-triple/canbus-triple) CANBus Triple – The car hacking platform
+- [**232**星][3m] [Py] [boy-hack/airbug](https://github.com/boy-hack/airbug) Airbug(空气洞),收集漏洞poc用于安全产品
+- [**231**星][10m] [HTML] [nicehash/excavator](https://github.com/nicehash/excavator) NiceHash's proprietary low-level CUDA miner
+- [**231**星][1m] [HTML] [badd1e/disclosures](https://github.com/badd1e/disclosures) Zero-day and N-day security vulnerability notes, analysis, and proof-of-concepts
+- [**231**星][6d] [HTML] [dependency-check/dependency-check-sonar-plugin](https://github.com/dependency-check/dependency-check-sonar-plugin) Integrates Dependency-Check reports into SonarQube
+- [**231**星][1y] [Jupyter Notebook] [wesleyraptor/streamingphish](https://github.com/wesleyraptor/streamingphish) 使用受监督的机器学习, 从证书透明度(Certificate Transparency)日志中检测钓鱼域名
+- [**231**星][2y] [Py] [utds3lab/multiverse](https://github.com/utds3lab/multiverse) 不适用启发式(heuristics)的静态二进制文件重写入(rewriter)工具
+- [**231**星][3y] [C#] [thrdev/socks5](https://github.com/thrdev/socks5) A full-fledged high-performance socks5 proxy server written in C#. Plugin support included.
+- [**231**星][4m] [Java] [thisislibra/androidprojectcreator](https://github.com/thisislibra/androidprojectcreator) Convert an APK to an Android Studio Project using multiple open-source decompilers
+- [**231**星][2y] [C++] [silentbreaksec/throwback](https://github.com/silentbreaksec/throwback) HTTP/S Beaconing Implant
+- [**231**星][4y] [Shell] [nccgroup/metasploitavevasion](https://github.com/nccgroup/metasploitavevasion) Metasploit AV Evasion Tool
+- [**231**星][3y] [HTML] [mongodb-labs/disasm](https://github.com/mongodb-labs/disasm) Interactive Disassembler GUI - This Repository is NOT a supported MongoDB product
+- [**231**星][2y] [Shell] [linuz/sticky-keys-slayer](https://github.com/linuz/sticky-keys-slayer) Scans for accessibility tools backdoors via RDP
+- [**231**星][2y] [Jupyter Notebook] [james91b/ida_ipython](https://github.com/james91b/ida_ipython) 嵌入IPython内核,集成IPython
+- [**231**星][1y] [C++] [ionescu007/simpleator](https://github.com/ionescu007/simpleator) Windows x64用户模式应用程序模拟器
+- [**231**星][2y] [C] [hardenedlinux/grsecurity-101-tutorials](https://github.com/hardenedlinux/grsecurity-101-tutorials) 增强 Linux 内核安全的内核补丁集
+- [**231**星][7m] [Shell] [fransr/bountyplz](https://github.com/fransr/bountyplz) Automated security reporting from markdown templates (HackerOne and Bugcrowd are currently the platforms supported)
+- [**231**星][3m] [Py] [evilmog/ntlmv1-multi](https://github.com/evilmog/ntlmv1-multi) 修改NTLMv1/NTLMv1-ESS/MSCHAPv1 Hask, 使其可以在hashcat中用DES模式14000破解
+- [**231**星][2d] [euphrat1ca/security_w1k1](https://github.com/euphrat1ca/security_w1k1) collect
+- [**231**星][2y] [C] [battelle/movfuscator](https://github.com/battelle/movfuscator) The single instruction C compiler
+- [**230**星][10m] [C++] [googleprojectzero/bochspwn-reloaded](https://github.com/googleprojectzero/bochspwn-reloaded) A Bochs-based instrumentation performing kernel memory taint tracking to detect disclosure of uninitialized memory to ring 3
+- [**230**星][2d] [C] [shchmue/lockpick_rcm](https://github.com/shchmue/lockpick_rcm) Nintendo Switch encryption key derivation bare metal RCM payload
+- [**230**星][5y] [Shell] [s3jensen/iret](https://github.com/s3jensen/iret)
+- [**230**星][7d] [PS] [rsmudge/elevatekit](https://github.com/rsmudge/elevatekit) The Elevate Kit demonstrates how to use third-party privilege escalation attacks with Cobalt Strike's Beacon payload.
+- [**230**星][5m] [HTML] [rootup/bfuzz](https://github.com/rootup/bfuzz) Fuzzing Browsers
+- [**230**星][3y] [C] [omriiluz/nrf24-btle-decoder](https://github.com/omriiluz/nrf24-btle-decoder) Sniff and decode NRF24L01+ and Bluetooth Low Energy using RTL-SDR
+- [**230**星][2y] [C++] [nickcano/xenoscan](https://github.com/nickcano/xenoscan) Open source memory scanner written in C++
+- [**230**星][2m] [PS] [miriamxyra/eventlist](https://github.com/miriamxyra/eventlist) help improving your Audit capabilities and to help to build your Security Operation Center.
+- [**230**星][3y] [Visual Basic .NET] [malwares/crypter](https://github.com/malwares/crypter) Windows Crypter
+- [**230**星][8m] [C] [ctz/cifra](https://github.com/ctz/cifra) A collection of cryptographic primitives targeted at embedded use.
+- [**230**星][2m] [Java] [commonsguy/cwac-netsecurity](https://github.com/commonsguy/cwac-netsecurity) CWAC-NetSecurity: Simplifying Secure Internet Access
+- [**230**星][3y] [Perl] [brendangregg/heatmap](https://github.com/brendangregg/heatmap) Heat map generation tools
+- [**230**星][4m] [Py] [beaengine/beaengine](https://github.com/beaengine/beaengine) BeaEngine disasm project
+- [**230**星][1y] [Py] [audibleblink/doxycannon](https://github.com/audibleblink/doxycannon) 为一堆OpenVPN文件分别创建Docker容器, 每个容器开启SOCKS5代理服务器并绑定至Docker主机端口, 再结合使用Burp或ProxyChains, 构建私有的Botnet
+- [**229**星][1y] [C] [iceonsun/rsock](https://github.com/iceonsun/rsock) The best companion of kcptun
+- [**229**星][1y] [Java] [xxxyanchenxxx/virtualappex](https://github.com/xxxyanchenxxx/virtualappex) VirtualApp 9.0适配
+- [**229**星][4m] [JS] [varchashva/letsmapyournetwork](https://github.com/varchashva/letsmapyournetwork) Lets Map Your Network enables you to visualise your physical network in form of graph with zero manual error
+- [**229**星][7m] [ObjC] [uliwitness/ulikit](https://github.com/uliwitness/ulikit) Miscellaneous open-sourced MacOS Cocoa code by yours truly.
+- [**229**星][6y] [squonk42/tl-wr703n](https://github.com/squonk42/tl-wr703n) Reverse Engineering work on the TP-LINK TL-WR703N 150M 802.11n Wi-Fi Router
+- [**229**星][9m] [C++] [microsoft/windbg-samples](https://github.com/microsoft/windbg-samples) Sample extensions, scripts, and API uses for WinDbg.
+- [**229**星][2y] [Batchfile] [mdsecactivebreach/rdpinception](https://github.com/mdsecactivebreach/rdpinception) A proof of concept for the RDP Inception Attack
+- [**229**星][5y] [keesj/gomo](https://github.com/keesj/gomo) Wiki pages about Android internals
+- [**229**星][4m] [C++] [justasmasiulis/lazy_importer](https://github.com/justasmasiulis/lazy_importer) library for importing functions from dlls in a hidden, reverse engineer unfriendly way
+- [**229**星][2d] [OCaml] [fstarlang/kremlin](https://github.com/fstarlang/kremlin) KreMLin is a tool for extracting low-level F* programs to readable C code
+- [**229**星][2m] [C] [elfmaster/libelfmaster](https://github.com/elfmaster/libelfmaster) Secure ELF parsing/loading library for forensics reconstruction of malware, and robust reverse engineering tools
+- [**229**星][4y] [Py] [danmcinerney/elite-proxy-finder](https://github.com/danmcinerney/elite-proxy-finder) Finds public elite anonymity proxies and concurrently tests them
+- [**229**星][4y] [JS] [brainshave/ancient-oak](https://github.com/brainshave/ancient-oak) Immutable data trees in JavaScript.
+- [**229**星][1y] [Shell] [aplura/tango](https://github.com/aplura/tango) Honeypot Intelligence with Splunk
+- [**229**星][1y] [Py] [amiller/honeybadgerbft](https://github.com/amiller/honeybadgerbft) The Honey Badger of BFT Protocols
+- [**229**星][2y] [CoffeeScript] [521xueweihan/shadowsocks-heroku](https://github.com/521xueweihan/shadowsocks-heroku) 本项目已删除
+- [**228**星][5m] [aleenzz/php_bug_wiki](https://github.com/aleenzz/php_bug_wiki) 代码审计相关的一些知识
+- [**228**星][3y] [C] [klsecservices/invoke-vnc](https://github.com/klsecservices/Invoke-Vnc) executes a VNC agent in-memory and initiates a reverse connection, or binds to a specified port.
+- [**228**星][1y] [C++] [wwwg/wasmdec](https://github.com/wwwg/wasmdec) WebAssembly to C decompiler
+- [**228**星][3m] [Py] [whitel1st/docem](https://github.com/whitel1st/docem) Uility to embed XXE and XSS payloads in docx,odt,pptx,etc (OXML_XEE on steroids)
+- [**228**星][1m] [Py] [webbreacher/whatsmyname](https://github.com/webbreacher/whatsmyname) This repository has the unified data required to perform user enumeration on various websites. Content is in a JSON file and can easily be used in other projects.
+- [**228**星][28d] [C] [vusec/ridl](https://github.com/vusec/ridl) RIDL test suite and exploits
+- [**228**星][4y] [Py] [trustedsec/spraywmi](https://github.com/trustedsec/spraywmi) SprayWMI is an easy way to get mass shells on systems that support WMI. Much more effective than PSEXEC as it does not leave remnants on a system.
+- [**228**星][4m] [C] [tishion/mmloader](https://github.com/tishion/mmloader) 绕过Windows PE Loader,直接从内存中加载DLL模块(x86/x64)
+- [**228**星][11m] [C] [stephenbradshaw/vulnserver](https://github.com/stephenbradshaw/vulnserver) Vulnerable server used for learning software exploitation
+- [**228**星][2m] [C++] [soarqin/finalhe](https://github.com/soarqin/finalhe) Final h-encore, a tool to push h-encore exploit for PS VITA/PS TV automatically
+- [**228**星][3y] [C++] [secrary/infectpe](https://github.com/secrary/infectpe) Inject custom code into PE file [This project is not maintained anymore]
+- [**228**星][6d] [HTML] [patrowl/patrowlmanager](https://github.com/patrowl/patrowlmanager) PatrOwl - Open Source, Smart and Scalable Security Operations Orchestration Platform
+- [**228**星][2y] [C] [opsxcq/exploit-cve-2017-7494](https://github.com/opsxcq/exploit-cve-2017-7494) SambaCry exploit and vulnerable container (CVE-2017-7494)
+- [**228**星][4y] [C] [maijin/workshop2015](https://github.com/maijin/workshop2015)
+- [**228**星][1y] [Py] [leapsecurity/libssh-scanner](https://github.com/leapsecurity/libssh-scanner) Script to identify hosts vulnerable to CVE-2018-10933
+- [**228**星][2m] [Py] [johnnykv/heralding](https://github.com/johnnykv/heralding) Credentials catching honeypot
+- [**228**星][9m] [Py] [ivanvza/arpy](https://github.com/ivanvza/arpy) Mac OSX ARP spoof (MiTM) tool that can also plug into Gource
+- [**228**星][2y] [Java] [ikkisoft/serialkiller](https://github.com/ikkisoft/serialkiller) Look-Ahead Java Deserialization Library
+- [**228**星][9m] [Py] [honeynet/beeswarm](https://github.com/honeynet/beeswarm) Honeypot deployment made easy
+- [**228**星][2d] [C] [frida/frida-gum](https://github.com/frida/frida-gum) Low-level code instrumentation library used by frida-core
+- [**228**星][2y] [Py] [fortunec00kie/bug-monitor](https://github.com/fortunec00kie/bug-monitor) Seebug、structs、cve漏洞实时监控推送系统
+- [**228**星][1y] [C#] [djhohnstein/sharpweb](https://github.com/djhohnstein/sharpweb) .NET 2.0 CLR project to retrieve saved browser credentials from Google Chrome, Mozilla Firefox and Microsoft Internet Explorer/Edge.
+- [**228**星][3d] [Java] [constellation-app/constellation](https://github.com/constellation-app/constellation) A graph-focused data visualisation and interactive analysis application.
+- [**228**星][26d] [Go] [cloudflare/xdpcap](https://github.com/cloudflare/xdpcap) tcpdump like XDP packet capture
+- [**228**星][2m] [Py] [anon-exploiter/sitebroker](https://github.com/anon-exploiter/sitebroker) A cross-platform python based utility for information gathering and penetration testing automation!
+- [**228**星][2y] [PHP] [adamdoupe/wackopicko](https://github.com/adamdoupe/wackopicko) WackoPicko is a vulnerable web application used to test web application vulnerability scanners.
+- [**227**星][3y] [PS] [xyntax/badusb-code](https://github.com/xyntax/badusb-code) 收集badusb的一些利用方式及代码
+- [**227**星][7m] [C] [wkz/ply](https://github.com/wkz/ply) Light-weight Dynamic Tracer for Linux
+- [**227**星][3y] [Swift] [trailofbits/secureenclavecrypto](https://github.com/trailofbits/secureenclavecrypto) Demonstration library for using the Secure Enclave on iOS
+- [**227**星][1y] [C#] [tevora-threat/sharpview](https://github.com/tevora-threat/sharpview) C# implementation of harmj0y's PowerView
+- [**227**星][2y] [C#] [t3ntman/social-engineering-payloads](https://github.com/t3ntman/social-engineering-payloads) Collection of social engineering payloads
+- [**227**星][9m] [Go] [stevenaldinger/decker](https://github.com/stevenaldinger/decker) Declarative penetration testing orchestration framework
+- [**227**星][3y] [Py] [scrapy-plugins/scrapy-jsonrpc](https://github.com/scrapy-plugins/scrapy-jsonrpc) Scrapy extension to control spiders using JSON-RPC
+- [**227**星][2y] [Py] [requests/requests-ntlm](https://github.com/requests/requests-ntlm) NTLM authentication support for Requests.
+- [**227**星][7m] [Shell] [r00t-3xp10it/meterpreter_paranoid_mode-ssl](https://github.com/r00t-3xp10it/meterpreter_paranoid_mode-ssl) Meterpreter Paranoid Mode - SSL/TLS connections
+- [**227**星][7m] [Py] [paradoxis/stegcracker](https://github.com/paradoxis/stegcracker) Steganography brute-force utility to uncover hidden data inside files
+- [**227**星][9d] [Py] [mzfr/gtfo](https://github.com/mzfr/gtfo) Search gtfobins and lolbas files from your terminal
+- [**227**星][2y] [Py] [mazen160/struts-pwn_cve-2017-9805](https://github.com/mazen160/struts-pwn_cve-2017-9805) An exploit for Apache Struts CVE-2017-9805
+- [**227**星][2m] [C] [leecher1337/ntvdmx64](https://github.com/leecher1337/ntvdmx64) 在64位版本上执行Windows DOS版的 NTVDM
+- [**227**星][2d] [C] [ipsn/go-libtor](https://github.com/ipsn/go-libtor) Self-contained Tor from Go
+- [**227**星][3m] [C++] [dreamstalker/rehlds](https://github.com/dreamstalker/rehlds) Reverse-engineered HLDS
+- [**227**星][3m] [C] [dongdongshe/neuzz](https://github.com/dongdongshe/neuzz) neural network assisted fuzzer
+- [**227**星][3y] [Perl] [davidpepper/fierce-domain-scanner](https://github.com/davidpepper/fierce-domain-scanner) Fierce.pl Domain Scanner
+- [**227**星][10m] [Py] [calidog/certstream-python](https://github.com/calidog/certstream-python) Python library for connecting to CertStream
+- [**227**星][2y] [Py] [automatingosint/osint_public](https://github.com/automatingosint/osint_public)
+- [**227**星][4y] [Py] [allfro/pymetasploit](https://github.com/allfro/pymetasploit) A full-fledged msfrpc library for Metasploit framework.
+- [**226**星][1y] [lanjelot/kb](https://github.com/lanjelot/kb) Respositoy of all my notes on infosec I have been building up over the years
+- [**226**星][3y] [Py] [praetorian-code/pyshell](https://github.com/praetorian-code/pyshell) PyShell makes interacting with web-based command injection less painful, emulating the feel of an interactive shell as much as possible.
+- [**226**星][8m] [PHP] [wmjonssen/centcount-analytics](https://github.com/wmjonssen/centcount-analytics) An open-source web analytics software. Developed by PHP + MySQL + Redis, Can be easily deployed on your own server, 100% data ownership.
+- [**226**星][2m] [Py] [volatilityfoundation/profiles](https://github.com/volatilityfoundation/profiles) Volatility profiles for Linux and Mac OS X
+- [**226**星][3y] [Py] [uber/focuson](https://github.com/uber/focuson) 查找基于 flask 的 Python Web App 安全问题的工具。
+- [**226**星][4y] [Py] [trevp/tlslite](https://github.com/trevp/tlslite) TLS Library in python
+- [**226**星][7d] [TS] [qtgate/qtgate-desktop-client](https://github.com/qtgate/qtgate-desktop-client) Become a trustworthy ally for the Internet Freedom
+- [**226**星][1y] [Go] [opennota/check](https://github.com/opennota/check) A set of utilities for checking Go sources. This repository has migrated to
+- [**226**星][1y] [Go] [netxfly/sec_check](https://github.com/netxfly/sec_check) 服务器安全检测的辅助工具
+- [**226**星][1y] [Py] [marekrei/sequence-labeler](https://github.com/marekrei/sequence-labeler) Neural network sequence labeling model
+- [**226**星][4y] [Py] [hood3drob1n/jsrat-py](https://github.com/hood3drob1n/jsrat-py) This is my implementation of JSRat.ps1 in Python so you can now run the attack server from any OS instead of being limited to a Windows OS with Powershell enabled.
+- [**226**星][6m] [Rust] [gamozolabs/mesos](https://github.com/gamozolabs/mesos) Binary coverage tool without binary modification for Windows
+- [**226**星][8d] [Py] [elevenpaths/homepwn](https://github.com/elevenpaths/homepwn) HomePwn - Swiss Army Knife for Pentesting of IoT Devices
+- [**226**星][4m] [Py] [duo-labs/isthislegit](https://github.com/duo-labs/isthislegit) 收集、分析和回复网络钓鱼邮件的框架
+- [**226**星][1m] [cpuu/awesome-fuzzing](https://github.com/cpuu/awesome-fuzzing) A curated list of awesome Fuzzing(or Fuzz Testing) for software security
+- [**226**星][2m] [Go] [brompwnie/botb](https://github.com/brompwnie/botb) A container analysis and exploitation tool for pentesters and engineers.
+- [**226**星][6m] [Py] [blark/aiodnsbrute](https://github.com/blark/aiodnsbrute) Python 3.5+ DNS asynchronous brute force utility
+- [**226**星][2y] [Py] [alibaba/iossecaudit](https://github.com/alibaba/iossecaudit) iOS Security Audit Toolit - A semi-automatic tool for iOS App security audit and iOS reverse engineering
+- [**225**星][1y] [dustyfresh/php-vulnerability-audit-cheatsheet](https://github.com/dustyfresh/php-vulnerability-audit-cheatsheet) This will assist you in the finding of potentially vulnerable PHP code. Each type of grep command is categorized in the type of vulnerabilities you generally find with that function.
+- [**225**星][5y] [Ruby] [pwnwiki/q](https://github.com/pwnwiki/q) Exploit Pack for Metasploit - Collection of modules gathered across time and internets
+- [**225**星][13d] [JS] [txthinking/blackwhite](https://github.com/txthinking/blackwhite) Domain, CIDR, IP black/white list, PAC generator
+- [**225**星][1y] [C++] [ucsb-seclab/dr_checker](https://github.com/ucsb-seclab/dr_checker) 用于Linux 内核驱动程序的漏洞检测工具
+- [**225**星][1m] [C] [snar/bgpq3](https://github.com/snar/bgpq3) bgp filtering automation tool
+- [**225**星][1m] [Py] [sethsec/celerystalk](https://github.com/sethsec/celerystalk) An asynchronous enumeration & vulnerability scanner. Run all the tools on all the hosts.
+- [**225**星][7d] [o-mg/demonseed](https://github.com/o-mg/demonseed) minimal malicious USB cabl
+- [**225**星][5y] [Py] [nccgroup/umap](https://github.com/nccgroup/umap) The USB host security assessment tool
+- [**225**星][5y] [Py] [nanyomy/dht-woodworm](https://github.com/nanyomy/dht-woodworm) this python repo is used to get the info_hash from DHT network, enjoy it
+- [**225**星][5y] [ObjC] [limneos/weak_classdump](https://github.com/limneos/weak_classdump) Cycript real-time classdump . An alternative for encrypted binaries
+- [**225**星][4m] [JS] [jtmelton/appsensor](https://github.com/jtmelton/appsensor) A toolkit for building self-defending applications through real-time event detection and response
+- [**225**星][2m] [Py] [jackeriss/email_my_pc](https://github.com/jackeriss/email_my_pc) 远程监控电脑,也许一切只需要一封邮件。
+- [**225**星][2y] [fuzzysecurity/defcon25](https://github.com/fuzzysecurity/defcon25) UAC 0day, all day!
+- [**225**星][3m] [Py] [eth0izzle/the-endorser](https://github.com/eth0izzle/the-endorser) An OSINT tool that allows you to draw out relationships between people on LinkedIn via endorsements/skills.
+- [**225**星][2m] [Py] [crowdstrike/automactc](https://github.com/crowdstrike/automactc) Automated Mac Forensic Triage Collector
+- [**225**星][3y] [chaitin/sqlchop](https://github.com/chaitin/sqlchop) [DEPRECATED]A novel SQL injection detection engine built on top of SQL tokenizing and syntax analysis.
+- [**224**星][8m] [Py] [sethmlarson/virtualbox-python](https://github.com/sethmlarson/virtualbox-python) Complete implementation of VirtualBox's COM API with a Pythonic interface.
+- [**224**星][4y] [Java] [nowsecure/android-forensics](https://github.com/nowsecure/android-forensics) Open source Android Forensics app and framework
+- [**224**星][14d] [GLSL] [westpointltd/tls_prober](https://github.com/westpointltd/tls_prober) A tool to fingerprint SSL/TLS servers
+- [**224**星][4m] [C] [semmle/securityexploits](https://github.com/semmle/securityexploits) PoC exploits from the Semmle Security Research team
+- [**224**星][2y] [Py] [rub-syssec/syntia](https://github.com/rub-syssec/syntia) Program synthesis based deobfuscation framework for the USENIX 2017 paper "Syntia: Synthesizing the Semantics of Obfuscated Code"
+- [**224**星][5m] [Py] [rub-nds/corstest](https://github.com/rub-nds/corstest) A simple CORS misconfiguration scanner
+- [**224**星][4y] [PHP] [ripsscanner/rips](https://github.com/ripsscanner/rips) RIPS - A static source code analyser for vulnerabilities in PHP scripts
+- [**224**星][6m] [ANTLR] [myriadrf/limesdr-usb](https://github.com/myriadrf/limesdr-usb) USB 3.0 version of the LimeSDR board
+- [**224**星][1m] [C] [libyal/libfvde](https://github.com/libyal/libfvde) Library and tools to access FileVault Drive Encryption (FVDE) encrypted volumes
+- [**224**星][6d] [Py] [kmyk/online-judge-tools](https://github.com/kmyk/online-judge-tools) Tools for online judge services. Downloading sample cases, Testing/Submitting your code, and various utilities.
+- [**224**星][9d] [Py] [jamesturk/django-honeypot](https://github.com/jamesturk/django-honeypot)
+- [**224**星][1y] [Shell] [edoverflow/megplus](https://github.com/edoverflow/megplus) Automated reconnaissance wrapper — TomNomNom's meg on steroids. [DEPRECATED]
+- [**224**星][2d] [Py] [cyberreboot/poseidon](https://github.com/cyberreboot/poseidon) Poseidon is a python-based application that leverages software defined networks (SDN) to acquire and then feed network traffic to a number of machine learning techniques. The machine learning algorithms classify and predict both the type of device and if the device is acting normally or abnormally.
+- [**224**星][1y] [PHP] [cuckoosandbox/monitor](https://github.com/cuckoosandbox/monitor) The new Cuckoo Monitor.
+- [**224**星][1y] [Shell] [ctfs/write-ups-2018](https://github.com/ctfs/write-ups-2018) Wiki-like CTF write-ups repository, maintained by the community. 2018
+- [**224**星][3y] [Py] [az0ne/github_nuggests](https://github.com/az0ne/github_nuggests) 自动爬取Github上文件敏感信息泄露,抓取邮箱密码并自动登录邮箱验证,支持126,qq,sina,163邮箱
+- [**224**星][3y] [PHP] [aszone/avenger-sh](https://github.com/aszone/avenger-sh) Project for finding vunerabilities in mass.
+- [**224**星][2y] [Py] [9b/chirp](https://github.com/9b/chirp) Interface to manage and centralize Google Alert information
+- [**224**星][7m] [Java] [0xalexei/infiltrate2019](https://github.com/0xalexei/infiltrate2019) INFILTRATE 2019 Demo Materials
+- [**223**星][26d] [C++] [boomerangdecompiler/boomerang](https://github.com/BoomerangDecompiler/boomerang) Boomerang Decompiler - Fighting the code-rot :)
+- [**223**星][3m] [Java] [virb3/trustmealready](https://github.com/virb3/trustmealready) Disable SSL verification and pinning on Android, system-wide
+- [**223**星][2y] [Go] [vedhavyas/zwfp](https://github.com/vedhavyas/zwfp) Zero-Width fingerprinting
+- [**223**星][1m] [Dockerfile] [thinkst/canarytokens-docker](https://github.com/thinkst/canarytokens-docker) Docker configuration to quickly setup your own Canarytokens.
+- [**223**星][4y] [Ruby] [strazzere/apkfuscator](https://github.com/strazzere/apkfuscator) A generic DEX file obfuscator and munger
+- [**223**星][27d] [Py] [secureworks/dalton](https://github.com/secureworks/dalton) 使用预定义/指定的规则, 针对IDS传感器(例如Snort/Suricata)进行网络数据包捕获
+- [**223**星][2m] [Shell] [screetsec/sudomy](https://github.com/screetsec/sudomy) Sudomy is a subdomain enumeration tool, created using a bash script, to analyze domains and collect subdomains in fast and comprehensive way . Report output in HTML or CSV format
+- [**223**星][6m] [Py] [ruped24/toriptables2](https://github.com/ruped24/toriptables2) Tor Iptables script is an anonymizer that sets up iptables and tor to route all services and traffic including DNS through the Tor network.
+- [**223**星][5m] [JS] [pavanw3b/sh00t](https://github.com/pavanw3b/sh00t) Security Testing is not as simple as right click > Scan. It's messy, a tough game. What if you had missed to test just that one thing and had to regret later? Sh00t is a highly customizable, intelligent platform that understands the life of bug hunters and emphasizes on manual security testing.
+- [**223**星][10m] [C] [muquit/mailsend](https://github.com/muquit/mailsend) A program to send mail via SMTP from command line
+- [**223**星][2y] [Max] [maroueneboubakri/lscan](https://github.com/maroueneboubakri/lscan) lscan is a library identification tool on statically linked/stripped binaries
+- [**223**星][1y] [Java] [ewilded/psychopath](https://github.com/ewilded/psychopath) psychoPATH - an advanced path traversal tool. Features: evasive techniques, dynamic web root list generation, output encoding, site map-searching payload generator, LFI mode, nix & windows support, single byte generator, payload export.
+- [**223**星][10m] [C#] [equifox/ksdumper](https://github.com/equifox/ksdumper) Dumping processes using the power of kernel space !
+- [**223**星][3y] [Py] [dxa4481/snapper](https://github.com/dxa4481/snapper) A security tool for grabbing screenshots of many web hosts
+- [**223**星][11m] [Perl] [daniel-nichter/hackmysql.com](https://github.com/daniel-nichter/hackmysql.com) Deprecated tools from HackMySQL.com
+- [**223**星][6m] [JS] [cr0hn/vulnerable-node](https://github.com/cr0hn/vulnerable-node) A very vulnerable web site written in NodeJS with the purpose of have a project with identified vulnerabilities to test the quality of security analyzers tools tools
+- [**223**星][2m] [Go] [caddyserver/forwardproxy](https://github.com/caddyserver/forwardproxy) Forward proxy plugin for the Caddy web server
+- [**223**星][2m] [Py] [brent-stone/can_reverse_engineering](https://github.com/brent-stone/can_reverse_engineering) Automated Payload Reverse Engineering Pipeline for the Controller Area Network (CAN) protocol
+- [**223**星][6y] [Shell] [brav0hax/easy-creds](https://github.com/brav0hax/easy-creds) leverages tools for stealing credentials during a pen test
+- [**223**星][2y] [Py] [beetlechunks/redsails](https://github.com/beetlechunks/redsails) RedSails is a Python based post-exploitation project aimed at bypassing host based security monitoring and logging. DerbyCon 2017 Talk:
+- [**222**星][3y] [Java] [guardianproject/lildebi](https://github.com/guardianproject/lildebi) UNMAINTAINED please adopt! we can no longer maintain this
+- [**222**星][1y] [C++] [wnagzihxa1n/browsersecurity](https://github.com/wnagzihxa1n/browsersecurity) 我在学习浏览器安全过程中整理的漏洞分析笔记与相关的学习资料
+- [**222**星][13d] [PHP] [wapmorgan/phpcodefixer](https://github.com/wapmorgan/phpcodefixer) Analyzer of PHP code to search issues with deprecated functionality in newer interpreter versions.
+- [**222**星][2d] [vixentael/my-talks](https://github.com/vixentael/my-talks) List of my talks and workshops: security engineering, applied cryptography, secure software development
+- [**222**星][1y] [Py] [tkcert/mail-security-tester](https://github.com/tkcert/mail-security-tester) A testing framework for mail security and filtering solutions.
+- [**222**星][2y] [Ruby] [sophsec/ruby-nmap](https://github.com/sophsec/ruby-nmap) A Rubyful interface to the Nmap exploration tool and security / port scanner.
+- [**222**星][13d] [HTML] [sectalks/sectalks](https://github.com/sectalks/sectalks) CTFs, solutions and presentations
+- [**222**星][3m] [Py] [rivermont/spidy](https://github.com/rivermont/spidy) The simple, easy to use command line web crawler.
+- [**222**星][12m] [C++] [rexdf/commandtrayhost](https://github.com/rexdf/commandtrayhost) 监控Windows systray的命令行工具
+- [**222**星][2y] [C] [lgeek/spec_poc_arm](https://github.com/lgeek/spec_poc_arm) (AArch64 硬件平台)Meltdown PoC(变种3a): 从用户模式读取所有的 ARM 系统寄存器
+- [**222**星][4y] [lavalamp-/password-lists](https://github.com/lavalamp-/password-lists) Password lists for use in penetration testing situations, broken up by TLD.
+- [**222**星][7m] [Py] [kingkaki/weblogic-scan](https://github.com/kingkaki/weblogic-scan) weblogic 漏洞扫描工具
+- [**222**星][2y] [JS] [jameshabben/evolve](https://github.com/jameshabben/evolve) Web interface for the Volatility Memory Forensics Framework
+- [**222**星][2y] [C++] [intelpt/windowsintelpt](https://github.com/intelpt/windowsintelpt) 实现Intel Skylake架构下的Intel处理器追踪功能的Windows驱动
+- [**222**星][2y] [C] [iaik/armageddon](https://github.com/iaik/armageddon) This repository contains tools to perform modern cache attacks on ARM.
+- [**222**星][3m] [Py] [caringcaribou/caringcaribou](https://github.com/caringcaribou/caringcaribou) A friendly car security exploration tool for the CAN bus
+- [**222**星][4m] [PS] [byt3bl33d3r/offensivedlr](https://github.com/byt3bl33d3r/offensivedlr) Toolbox containing research notes & PoC code for weaponizing .NET's DLR
+- [**222**星][3y] [axi0mx/alloc8](https://github.com/axi0mx/alloc8) Write-up for alloc8 untethered bootrom exploit for iPhone 3GS
+- [**221**星][2d] [C] [googleprojectzero/ktrw](https://github.com/googleprojectzero/ktrw) An iOS kernel debugger based on a KTRR bypass for A11 iPhones that works with LLDB.
+- [**221**星][10m] [Java] [uprootlabs/gngr](https://github.com/uprootlabs/gngr) a cross-platform browser focussed on privacy.
+- [**221**星][29d] [PS] [tonyphipps/meerkat](https://github.com/tonyphipps/meerkat) A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.
+- [**221**星][1y] [C] [openorbis/mira-project](https://github.com/openorbis/mira-project) The Homebrew Platform
+- [**221**星][2y] [Py] [ofek/privy](https://github.com/ofek/privy) An easy, fast lib to correctly password-protect your data
+- [**221**星][3d] [Py] [mushorg/snare](https://github.com/mushorg/snare) Super Next generation Advanced Reactive honEypot
+- [**221**星][6m] [Py] [malwarecantfly/vba2graph](https://github.com/malwarecantfly/vba2graph) Generate call graphs from VBA code, for easier analysis of malicious documents.
+- [**221**星][1y] [C] [hashcat/princeprocessor](https://github.com/hashcat/princeprocessor) Standalone password candidate generator using the PRINCE algorithm
+- [**221**星][2y] [C++] [ha7ilm/qtcsdr](https://github.com/ha7ilm/qtcsdr) It turns your Raspberry Pi 2 and RTL-SDR into an amateur radio transceiver! (Released under BSD license.)
+- [**221**星][2y] [Perl] [csirtgadgets/massive-octo-spice](https://github.com/csirtgadgets/massive-octo-spice) DEPRECATED - USE v3 (bearded-avenger)
+- [**221**星][3m] [Go] [cloudflare/tls-tris](https://github.com/cloudflare/tls-tris) crypto/tls, now with 100% more 1.3. THE API IS NOT STABLE AND DOCUMENTATION IS NOT GUARANTEED.
+- [**221**星][11m] [Py] [chris408/known_hosts-hashcat](https://github.com/chris408/known_hosts-hashcat) A guide and tool for cracking ssh known_hosts files with hashcat
+- [**221**星][3y] [Smarty] [analytically/haproxy-ddos](https://github.com/analytically/haproxy-ddos) DDOS and attack resilient HAProxy configuration. To be used behind CloudFlare.
+- [**221**星][3y] [1u4nx/exploit-exercises-nebula](https://github.com/1u4nx/exploit-exercises-nebula) Exploit-Exercises Nebula全攻略——Linux平台下的漏洞分析入门
+- [**220**星][7m] [Shell] [t0xst/linux](https://github.com/t0xst/linux) linux安全检查
+- [**220**星][26d] [Py] [volatilityfoundation/community](https://github.com/volatilityfoundation/community) Volatility plugins developed and maintained by the community
+- [**220**星][5m] [Shell] [vedetta-com/vedetta](https://github.com/vedetta-com/vedetta) OpenBSD Router Boilerplate
+- [**220**星][8m] [Go] [valyala/goloris](https://github.com/valyala/goloris) Slowloris for nginx DoS. Written in go
+- [**220**星][2y] [sh4hin/mobileapp-pentest-cheatsheet](https://github.com/sh4hin/mobileapp-pentest-cheatsheet) The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.
+- [**220**星][3y] [Standard ML] [rootkovska/codehash.db](https://github.com/rootkovska/codehash.db) A public database for software and firmware hashes
+- [**220**星][4y] [C] [rapid7/meterpreter](https://github.com/rapid7/meterpreter) THIS REPO IS OBSOLETE. USE
+- [**220**星][11m] [PHP] [paragonie/anti-csrf](https://github.com/paragonie/anti-csrf) Full-Featured Anti-CSRF Library
+- [**220**星][8m] [opennetworkingfoundation/delta](https://github.com/opennetworkingfoundation/delta) PROJECT DELTA: SDN SECURITY EVALUATION FRAMEWORK
+- [**220**星][1y] [Go] [maksadbek/tcpovericmp](https://github.com/maksadbek/tcpovericmp) TCP implementation over ICMP protocol to bypass firewalls
+- [**220**星][8m] [letoram/senseye](https://github.com/letoram/senseye) Dynamic Visual Debugging / Reverse Engineering Toolsuite
+- [**220**星][2y] [Py] [kbdancer/tplinkkey](https://github.com/kbdancer/tplinkkey) 根据TPLINK系列路由器存在的漏洞批量扫描获取wifi密码
+- [**220**星][4y] [PS] [jseidl/babadook](https://github.com/jseidl/babadook) Connection-less Powershell Persistent and Resilient Backdoor
+- [**220**星][2m] [Py] [initstring/uptux](https://github.com/initstring/uptux) Linux privilege escalation checks (systemd, dbus, socket fun, etc)
+- [**220**星][12m] [C] [gkdr/lurch](https://github.com/gkdr/lurch) XEP-0384: OMEMO Encryption for libpurple.
+- [**220**星][2y] [Py] [feicong/jni_helper](https://github.com/feicong/jni_helper) AndroidSO自动化分析工具(非虫)
+- [**220**星][1y] [C#] [easy66/monohooker](https://github.com/easy66/monohooker) hook C# method at runtime without modify dll file (such as UnityEditor.dll)
+- [**220**星][2y] [C++] [bee13oy/av_kernel_vulns](https://github.com/bee13oy/av_kernel_vulns) Pocs for Antivirus Software‘s Kernel Vulnerabilities
+- [**220**星][2y] [Py] [artkond/cisco-snmp-rce](https://github.com/artkond/cisco-snmp-rce) Cisco SNMP 服务 REC 漏洞 PoC(CVE-2017-6736)
+- [**219**星][2y] [itrump/shadowsocksrss](https://github.com/itrump/shadowsocksrss) shadowsocksR backup, windows / android / mac downloads, source code backup
+- [**219**星][4m] [security-checklist/php-security-check-list](https://github.com/security-checklist/php-security-check-list) PHP Security Check List [ EN ]
+- [**219**星][16d] [Py] [wazuh/wazuh-ruleset](https://github.com/wazuh/wazuh-ruleset) ruleset is used to detect attacks, intrusions, software misuse, configuration problems, application errors, malware, rootkits, system anomalies or security policy violations.
+- [**219**星][2y] [Py] [vlall/darksearch](https://github.com/vlall/darksearch) query cached onion sites, irc chatrooms, various pdfs, game chats, blackhat forums etc
+- [**219**星][8m] [Py] [skewwg/vulscan](https://github.com/skewwg/vulscan) 漏洞扫描:st2、tomcat、未授权访问等等
+- [**219**星][8d] [sab0tag3d/mitm-cheatsheet](https://github.com/sab0tag3d/mitm-cheatsheet) All MITM attacks in one place.
+- [**219**星][5m] [ObjC] [rickyzhang82/tethering](https://github.com/rickyzhang82/tethering) Proxy and DNS Server on iOS
+- [**219**星][2y] [Shell] [r00t-3xp10it/trojanizer](https://github.com/r00t-3xp10it/trojanizer) 将用户提供的2个可执行文件打包为自解压文件, 自解压文件在执行时会执行可执行文件
+- [**219**星][12m] [Shell] [nviso-be/magisktrustusercerts](https://github.com/nviso-be/magisktrustusercerts) A Magisk module that automatically adds user certificates to the system root CA store
+- [**219**星][2y] [Ruby] [nahamsec/lazys3](https://github.com/nahamsec/lazys3)
+- [**219**星][2y] [Go] [gamexg/proxyclient](https://github.com/gamexg/proxyclient) golang 代理库,和net一致的API。支持 socks4、socks4a、socks5、http、https 等代理协议。
+- [**219**星][2m] [C] [david942j/ctf-writeups](https://github.com/david942j/ctf-writeups) Collection of scripts and writeups
+- [**219**星][8m] [Py] [coalfire-research/deathmetal](https://github.com/coalfire-research/deathmetal) Red team & penetration testing tools to exploit the capabilities of Intel AMT
+- [**219**星][7m] [bhdresh/dejavu](https://github.com/bhdresh/dejavu) deception framework which can be used to deploy decoys across the infrastructure
+- [**219**星][1y] [basilfx/tradfri-hacking](https://github.com/basilfx/tradfri-hacking) Hacking the IKEA TRÅDFRI light bulbs and accessories.
+- [**218**星][1m] [PHP] [zigoo0/jsonbee](https://github.com/zigoo0/jsonbee) A ready to use JSONP endpoints/payloads to help bypass content security policy (CSP) of different websites.
+- [**218**星][8m] [JS] [zhuyingda/veneno](https://github.com/zhuyingda/veneno) 用Node.js编写的Web安全测试框架
+- [**218**星][3y] [C] [sslab-gatech/opensgx](https://github.com/sslab-gatech/opensgx) An open platform for Intel SGX Environments & Prerequisites
+- [**218**星][1y] [PHP] [softius/php-cross-domain-proxy](https://github.com/softius/php-cross-domain-proxy) PHP Proxy for Cross Domain Requests
+- [**218**星][1y] [JS] [roccomuso/kickthemout](https://github.com/roccomuso/kickthemout) Kick devices off your network by performing an ARP Spoof attack with Node.js.
+- [**218**星][1y] [Py] [nccgroup/driverbuddy](https://github.com/nccgroup/driverbuddy) 辅助逆向Windows内核驱动
+- [**218**星][6m] [Py] [mgeeky/tomcatwardeployer](https://github.com/mgeeky/tomcatwardeployer) Apache Tomcat auto WAR deployment & pwning penetration testing tool.
+- [**218**星][1y] [Py] [mazen160/server-status_pwn](https://github.com/mazen160/server-status_pwn) A script that monitors and extracts requested URLs and clients connected to the service by exploiting publicly accessible Apache server-status instances.
+- [**218**星][11m] [AppleScript] [lifepillar/csvkeychain](https://github.com/lifepillar/csvkeychain) Import/export between Apple Keychain.app and plain CSV file.
+- [**218**星][9m] [jesusprubio/awesome-nodejs-pentest](https://github.com/jesusprubio/awesome-nodejs-pentest)
+- [**218**星][8m] [ivan1ee/net-deserialize](https://github.com/ivan1ee/net-deserialize) 总结了十篇.Net反序列化文章,持续更新
+- [**218**星][10m] [C] [feexd/pocs](https://github.com/feexd/pocs)
+- [**218**星][2m] [C++] [d3v1l401/findcrypt-ghidra](https://github.com/d3v1l401/findcrypt-ghidra) IDA Pro's FindCrypt ported to Ghidra, with an updated and customizable signature database
+- [**218**星][2y] [cure53/browser-sec-whitepaper](https://github.com/cure53/browser-sec-whitepaper) Cure53 Browser Security White Paper
+- [**218**星][2y] [Py] [chromium/web-page-replay](https://github.com/chromium/web-page-replay) Record live Web pages and use them for local performance testing!
+- [**218**星][3m] [Shell] [blacktop/docker-cuckoo](https://github.com/blacktop/docker-cuckoo) Cuckoo Sandbox Dockerfile
+- [**217**星][10m] [JS] [jopyth/mmm-remote-control](https://github.com/jopyth/mmm-remote-control) Magic Mirror Module to shutdown or configure your mirror
+- [**217**星][10m] [Py] [mckinsey666/vocabs](https://github.com/Mckinsey666/vocabs) A lightweight online dictionary integration to the command line
+- [**217**星][2y] [C++] [spacehuhn/arduinopcap](https://github.com/spacehuhn/arduinopcap) A library for creating and sending .pcap files for Wireshark and other programms.
+- [**217**星][1y] [Py] [sensepost/spartan](https://github.com/sensepost/spartan) Frontpage and Sharepoint fingerprinting and attack tool.
+- [**217**星][3y] [Py] [rajeshmajumdar/brutexss](https://github.com/rajeshmajumdar/brutexss) BruteXSS is a tool written in python simply to find XSS vulnerabilities in web application. This tool was originally developed by Shawar Khan in CLI. I just redesigned it and made it GUI for more convienience.
+- [**217**星][3d] [C++] [p4lang/p4c](https://github.com/p4lang/p4c) P4_16 prototype compiler
+- [**217**星][27d] [Py] [nteseyes/pylane](https://github.com/nteseyes/pylane) An python vm injector with debug tools, based on gdb.
+- [**217**星][2y] [Py] [maxwellkoh/2fassassin](https://github.com/maxwellkoh/2fassassin) Bypass Two-Factor-Authentication
+- [**217**星][2d] [C] [libyal/libesedb](https://github.com/libyal/libesedb) Library and tools to access the Extensible Storage Engine (ESE) Database File (EDB) format.
+- [**217**星][9m] [Go] [justmao945/mallory](https://github.com/justmao945/mallory) HTTP/HTTPS proxy over SSH
+- [**217**星][9m] [Go] [joncooperworks/judas](https://github.com/joncooperworks/judas) a phishing proxy
+- [**217**星][4m] [Py] [isaacdelly/plutus](https://github.com/isaacdelly/plutus) An automated bitcoin wallet collider that brute forces random wallet addresses
+- [**217**星][4m] [Py] [iojw/socialscan](https://github.com/iojw/socialscan) Check email address and username availability on online platforms with 100% accuracy
+- [**217**星][1y] [Py] [dionach/cmsmap](https://github.com/dionach/cmsmap) CMSmap is a python open source CMS scanner that automates the process of detecting security flaws of the most popular CMSs.
+- [**217**星][16d] [Puppet] [dev-sec/puppet-os-hardening](https://github.com/dev-sec/puppet-os-hardening) This puppet module provides numerous security-related configurations, providing all-round base protection.
+- [**217**星][2y] [PS] [arno0x/dbc2](https://github.com/arno0x/dbc2) DBC2 (DropboxC2) is a modular post-exploitation tool, composed of an agent running on the victim's machine, a controler, running on any machine, powershell modules, and Dropbox servers as a means of communication.
+- [**216**星][3y] [Java] [zhengmin1989/wechatsportcheat](https://github.com/zhengmin1989/wechatsportcheat) 手把手教你当微信运动第一名 – 利用Android Hook进行微信运动作弊
+- [**216**星][23d] [JS] [strangerealintel/cyberthreatintel](https://github.com/strangerealintel/cyberthreatintel) Analysis of malware and Cyber Threat Intel of APT and cybercriminals groups
+- [**216**星][6y] [Shell] [silverfoxx/pwnstar](https://github.com/silverfoxx/pwnstar) PwnSTAR (Pwn SofT-Ap scRipt) - for all your fake-AP needs!
+- [**216**星][10m] [puresec/awesome-serverless-security](https://github.com/puresec/awesome-serverless-security) A curated list of awesome serverless security resources such as (e)books, articles, whitepapers, blogs and research papers.
+- [**216**星][1y] [PS] [lukebaggett/dnscat2-powershell](https://github.com/lukebaggett/dnscat2-powershell) A Powershell client for dnscat2, an encrypted DNS command and control tool.
+- [**216**星][2m] [Py] [icsec/airpwn-ng](https://github.com/icsec/airpwn-ng) force the target's browser to do what we want
+- [**216**星][5m] [guardrailsio/awesome-dotnet-security](https://github.com/guardrailsio/awesome-dotnet-security) Awesome .NET Security Resources
+- [**216**星][6d] [JS] [giper45/dockersecurityplayground](https://github.com/giper45/dockersecurityplayground) A Microservices-based framework for the study of Network Security and Penetration Test techniques
+- [**216**星][1y] [foobarto/redteam-notebook](https://github.com/foobarto/redteam-notebook) Collection of commands, tips and tricks and references I found useful during preparation for OSCP exam.
+- [**216**星][3y] [Py] [darryllane/bluto-old](https://github.com/darryllane/bluto-old) Recon, Subdomain Bruting, Zone Transfers
+- [**216**星][2y] [Py] [003random/003recon](https://github.com/003random/003recon) Some tools to automate recon - 003random
+- [**215**星][25d] [JS] [saul/demofile](https://github.com/saul/demofile) Node.js library for parsing Counter-Strike: Global Offensive demo files
+- [**215**星][3m] [Py] [shodansploit/shodansploit](https://github.com/shodansploit/shodansploit)
+- [**215**星][3m] [C++] [lifting-bits/grr](https://github.com/lifting-bits/grr) High-throughput fuzzer and emulator of DECREE binaries
+- [**215**星][1y] [C] [meliot/filewatcher](https://github.com/meliot/filewatcher) A simple auditing utility for macOS
+- [**215**星][2m] [C] [xyzz/gamecard-microsd](https://github.com/xyzz/gamecard-microsd) microSD adapter for PlayStation Vita
+- [**215**星][1y] [PHP] [wofeiwo/webcgi-exploits](https://github.com/wofeiwo/webcgi-exploits) Multi-language web CGI interfaces exploits.
+- [**215**星][2y] [Py] [thiber-org/userline](https://github.com/thiber-org/userline) 从Windows安全事件中查询并报告用户登录关系
+- [**215**星][9m] [C] [sleinen/samplicator](https://github.com/sleinen/samplicator) Send copies of (UDP) datagrams to multiple receivers, with optional sampling and spoofing
+- [**215**星][11m] [C#] [rainwayapp/warden](https://github.com/rainwayapp/warden) Warden.NET is an easy to use process management library for keeping track of processes on Windows.
+- [**215**星][7d] [Py] [rackerlabs/scantron](https://github.com/rackerlabs/scantron) A distributed nmap / masscan scanning framework
+- [**215**星][5y] [Py] [qgriffith/openeats](https://github.com/qgriffith/openeats) Recipe Management Site created in Django
+- [**215**星][1y] [Go] [orderbynull/lottip](https://github.com/orderbynull/lottip) Simple MySQL proxy for query logging with web GUI
+- [**215**星][3y] [Py] [mkorman90/volatilitybot](https://github.com/mkorman90/volatilitybot) An automated memory analyzer for malware samples and memory dumps
+- [**215**星][2y] [Py] [mailinneberg/blueborne](https://github.com/mailinneberg/blueborne) Purpose only! The dangers of Bluetooth implementations: Unveiling zero day vulnerabilities and security flaws in modern Bluetooth stacks.
+- [**215**星][6y] [Perl] [llaera/slowloris.pl](https://github.com/llaera/slowloris.pl) A new DOS Perl Programm
+- [**215**星][2y] [Py] [lennonchin/code-confuse-plugin](https://github.com/lennonchin/code-confuse-plugin) iOS代码混淆插件
+- [**215**星][1m] [Py] [khast3x/redcloud](https://github.com/khast3x/redcloud) Comfy & powerful Red Team Infrastructure deployement using Docker
+- [**215**星][1m] [Py] [inquest/python-iocextract](https://github.com/inquest/python-iocextract) IoC提取器
+- [**215**星][2m] [C] [hyc/fcrackzip](https://github.com/hyc/fcrackzip) A braindead program for cracking encrypted ZIP archives. Forked from
+- [**215**星][6m] [Py] [gmr/queries](https://github.com/gmr/queries) PostgreSQL database access simplified
+- [**215**星][2y] [Py] [famavott/osint-scraper](https://github.com/famavott/osint-scraper) 输入人名或邮箱地址, 自动从互联网爬取关于此人的信息
+- [**215**星][3m] [PHP] [cyrus-and/fracker](https://github.com/cyrus-and/fracker) PHP function tracker
+- [**215**星][5y] [Py] [bonsaiviking/nfspy](https://github.com/bonsaiviking/nfspy) ID-spoofing NFS client
+- [**214**星][2y] [C#] [azure99/shadowsocksrcsm](https://github.com/azure99/shadowsocksrcsm) SSRC#魔改版,修复原版链接并进行人性化修改
+- [**214**星][1y] [Py] [threatresponse/aws_ir](https://github.com/threatresponse/aws_ir) Python installable command line utiltity for mitigation of host and key compromises.
+- [**214**星][11m] [Shell] [proxycannon/proxycannon-ng](https://github.com/proxycannon/proxycannon-ng) 使用多个云环境构建私人僵尸网络, 用于渗透测试和RedTeaming
+- [**214**星][9m] [PS] [outflanknl/excel4-dcom](https://github.com/outflanknl/excel4-dcom) PowerShell and Cobalt Strike scripts for lateral movement using Excel 4.0 / XLM macros via DCOM (direct shellcode injection in Excel.exe)
+- [**214**星][6d] [C] [open-mpi/hwloc](https://github.com/open-mpi/hwloc) easing the process of discovering hardware resources in parallel architectures.
+- [**214**星][4y] [Py] [mitsuhiko/python-regex-scanner](https://github.com/mitsuhiko/python-regex-scanner) Demo of how to use the underlying SRE engine to build a regex scanner
+- [**214**星][9d] [Go] [jasonish/evebox](https://github.com/jasonish/evebox) 基于 Web 的事件查看器, 可查看Suricata EVE事件
+- [**214**星][2d] [Py] [hyperspy/hyperspy](https://github.com/hyperspy/hyperspy) Multidimensional data analysis
+- [**214**星][4y] [C] [fuzzysecurity/unix-privesc](https://github.com/fuzzysecurity/unix-privesc) Local UNIX PrivEsc Aggregation
+- [**214**星][6m] [C#] [erfg12/memory.dll](https://github.com/erfg12/memory.dll) C# Hacking library for making PC game trainers.
+- [**214**星][2m] [C] [dns-oarc/dnscap](https://github.com/dns-oarc/dnscap) Network capture utility designed specifically for DNS traffic
+- [**214**星][6d] [Shell] [controlplaneio/kubesec](https://github.com/controlplaneio/kubesec) Security risk analysis for Kubernetes resources
+- [**213**星][7m] [Py] [xhak9x/fbi](https://github.com/xhak9x/fbi) Facebook Information
+- [**213**星][3y] [C++] [xdnice/pcshare](https://github.com/xdnice/pcshare) 远程控制软件,可以监视目标机器屏幕、注册表、文件系统等。
+- [**213**星][2y] [Py] [wwong99/pentest-notes](https://github.com/wwong99/pentest-notes)
+- [**213**星][2y] [Py] [trustedsec/egressbuster](https://github.com/trustedsec/egressbuster) Egressbuster is a method to check egress filtering and identify if ports are allowed. If they are, you can automatically spawn a shell.
+- [**213**星][1m] [C] [trailofbits/krf](https://github.com/trailofbits/krf) A kernelspace syscall interceptor and randomized faulter
+- [**213**星][9m] [Py] [teag1e/burpcollector](https://github.com/teag1e/burpcollector) 通过BurpSuite来构建自己的爆破字典,可以通过字典爆破来发现隐藏资产。
+- [**213**星][2m] [Java] [tdunning/log-synth](https://github.com/tdunning/log-synth) Generates more or less realistic log data for testing simple aggregation queries.
+- [**213**星][5m] [Py] [spiderlabs/hosthunter](https://github.com/spiderlabs/hosthunter) HostHunter a recon tool for discovering hostnames using OSINT techniques.
+- [**213**星][2y] [C#] [shanek2/invtero.net](https://github.com/shanek2/invtero.net) A high speed (Gbps) Forensics, Memory integrity & assurance. Includes offensive & defensive memory capabilities. Find/Extract processes, hypervisors (including nested) in memory dumps using microarchitechture independent Virtual Machiene Introspection techniques
+- [**213**星][5m] [Py] [quoscient/octopus](https://github.com/quoscient/octopus) Security Analysis tool for WebAssembly module and Blockchain Smart Contracts (BTC/ETH/NEO/EOS)
+- [**213**星][5m] [Py] [pynetwork/pypcap](https://github.com/pynetwork/pypcap) python libpcap module, forked from code.google.com/p/pypcap, now actively maintained
+- [**213**星][1y] [Kotlin] [paphonb/androidp-ify](https://github.com/paphonb/androidp-ify) [Xposed] Use features introduced in Android P on your O+ Device!
+- [**213**星][2y] [C++] [nu1lctf/n1ctf-2018](https://github.com/nu1lctf/n1ctf-2018) Official repository containing files related to N1CTF 2018.
+- [**213**星][5m] [C] [n0b0dycn/redis-rogue-server](https://github.com/n0b0dycn/redis-rogue-server) Redis(<=5.0.5) RCE
+- [**213**星][4y] [HTML] [musalbas/address-spoofing-poc](https://github.com/musalbas/address-spoofing-poc) Chrome address spoofing vulnerability proof-of-concept for HTTPS. (Original by David Leo.)
+- [**213**星][1y] [Py] [kurobeats/fimap](https://github.com/kurobeats/fimap) fimap is a little python tool which can find, prepare, audit, exploit and even google automatically for local and remote file inclusion bugs in webapps.
+- [**213**星][3m] [Py] [jordanpotti/cloudscraper](https://github.com/jordanpotti/cloudscraper) Tool to enumerate targets in search of cloud resources. S3 Buckets, Azure Blobs, Digital Ocean Storage Space.
+- [**213**星][2y] [C++] [jamesp6000/wsprrypi](https://github.com/jamesp6000/wsprrypi) Raspberry Pi WSPR transmitter using NTP based frequency calibration
+- [**213**星][1m] [Go] [improbable-eng/kedge](https://github.com/improbable-eng/kedge) kEdge - Kubernetes Edge Proxy for gRPC and HTTP Microservices
+- [**213**星][1y] [Py] [feicong/lua_re](https://github.com/feicong/lua_re) reverse engineering for lua(lua/luac/luajit/lua_dec/lua_loader/lua_proc)
+- [**213**星][1y] [Py] [evict/poc_cve-2018-1002105](https://github.com/evict/poc_cve-2018-1002105) PoC for CVE-2018-1002105.
+- [**213**星][2y] [Py] [euphrat1ca/fuzzdb-collect](https://github.com/euphrat1ca/fuzzdb-collect) 网络上安全资源的搜集
+- [**213**星][3y] [C#] [dxflatline/flatpipes](https://github.com/dxflatline/flatpipes) A TCP proxy over named pipes. Originally created for maintaining a meterpreter session over 445 for less network alarms.
+- [**213**星][4y] [Py] [ctfs/write-ups-2013](https://github.com/ctfs/write-ups-2013) Wiki-like CTF write-ups repository, maintained by the community. 2013
+- [**213**星][4y] [PLpgSQL] [cseagle/freedom](https://github.com/cseagle/freedom) 从IDA中导出反汇编信息, 导入到binnavi中使用
+- [**213**星][5m] [Shell] [cryptolok/crykex](https://github.com/cryptolok/crykex) Linux Memory Cryptographic Keys Extractor
+- [**213**星][5m] [Py] [coffeehb/tools](https://github.com/coffeehb/tools) 一些实用的python脚本
+- [**213**星][2y] [C++] [bromiumlabs/packerattacker](https://github.com/bromiumlabs/packerattacker) C++ application that uses memory and code hooks to detect packers
+- [**213**星][8m] [Py] [atlas0fd00m/rfcat](https://github.com/atlas0fd00m/rfcat) swiss-army knife of ISM band radio
+- [**212**星][2y] [hackathonhackers/groups](https://github.com/hackathonhackers/groups) A listing of all the subgroups of Hackathon Hackers
+- [**212**星][3m] [C++] [atxsinn3r/vulncases](https://github.com/atxsinn3r/VulnCases) Oh it's just a bunch of vulns for references.
+- [**212**星][1y] [C] [suvllian/process-inject](https://github.com/suvllian/process-inject) 在Windows环境下的进程注入方法:远程线程注入、创建进程挂起注入、反射注入、APCInject、SetWindowHookEX注入
+- [**212**星][2d] [Py] [sofianehamlaoui/lockdoor-framework](https://github.com/sofianehamlaoui/lockdoor-framework)
+- [**212**星][3d] [Ruby] [puppetlabs/puppetlabs-postgresql](https://github.com/puppetlabs/puppetlabs-postgresql) Puppet module for managing PostgreSQL
+- [**212**星][16d] [Py] [nyxgeek/lyncsmash](https://github.com/nyxgeek/lyncsmash) locate and attack Lync/Skype for Business
+- [**212**星][4m] [Shell] [neo23x0/fenrir](https://github.com/neo23x0/fenrir) Simple Bash IOC Scanner
+- [**212**星][2m] [Julia] [juliaci/benchmarktools.jl](https://github.com/juliaci/benchmarktools.jl) A benchmarking framework for the Julia language
+- [**212**星][2y] [Shell] [johnnyxmas/scancannon](https://github.com/johnnyxmas/scancannon) Combines the speed of masscan with the reliability and detailed enumeration of nmap
+- [**212**星][2y] [Shell] [jakewmeyer/geo](https://github.com/jakewmeyer/geo) A Bash utility for easy wan, lan, router, dns, mac address, and geolocation output,
+- [**212**星][4m] [Py] [infosecn1nja/maliciousmacromsbuild](https://github.com/infosecn1nja/maliciousmacromsbuild) Generates Malicious Macro and Execute Powershell or Shellcode via MSBuild Application Whitelisting Bypass.
+- [**212**星][2m] [Py] [eset/malware-research](https://github.com/eset/malware-research) 恶意代码分析中用到的代码/工具
+- [**212**星][2y] [PS] [cobbr/psamsi](https://github.com/cobbr/psamsi) PSAmsi is a tool for auditing and defeating AMSI signatures.
+- [**211**星][7m] [HTML] [facebook/delegatedrecoveryspecification](https://github.com/facebook/DelegatedRecoverySpecification) Allows an application to delegate the capability to recover an account to an account controlled by the same user or entity at a third party service provider.
+- [**211**星][3y] [Py] [newbee119/telnet-scanner](https://github.com/NewBee119/telnet-scanner) telnet服务密码撞库
+- [**211**星][3m] [Shell] [xu-jian/vps](https://github.com/xu-jian/vps) 个人笔记汇总
+- [**211**星][1m] [C++] [trailofbits/winchecksec](https://github.com/trailofbits/winchecksec) Checksec, but for Windows: static detection of executable's opt-in security mitigations
+- [**211**星][3d] [C++] [thalium/icebox](https://github.com/thalium/icebox) Virtual Machine Introspection, Tracing & Debugging
+- [**211**星][7m] [C] [owasp/igoat](https://github.com/owasp/igoat) OWASP iGoat - A Learning Tool for iOS App Pentesting and Security by Swaroop Yermalkar
+- [**211**星][9m] [Py] [nullarray/dorknet](https://github.com/nullarray/dorknet) Selenium powered Python script to automate searching for vulnerable web apps.
+- [**211**星][1y] [Py] [mateuszk87/pcapviz](https://github.com/mateuszk87/pcapviz) Visualize network topologies and collect graph statistics based on pcap files
+- [**211**星][1y] [C#] [leechristensen/spoolsample](https://github.com/leechristensen/spoolsample) PoC tool to coerce Windows hosts authenticate to other machines via the MS-RPRN RPC interface. This is possible via other protocols as well.
+- [**211**星][10m] [jeansgit/redteam](https://github.com/jeansgit/redteam) RedTeam资料收集整理
+- [**211**星][7m] [Py] [jas502n/cnvd-c-2019-48814](https://github.com/jas502n/cnvd-c-2019-48814) WebLogic wls9-async反序列化远程命令执行漏洞
+- [**211**星][1m] [Py] [inquest/omnibus](https://github.com/inquest/omnibus) The OSINT Omnibus (beta release)
+- [**211**星][9m] [Py] [gosecure/php7-opcache-override](https://github.com/gosecure/php7-opcache-override) Security-related PHP7 OPcache abuse tools and demo
+- [**211**星][4m] [Ruby] [bdmac/strong_password](https://github.com/bdmac/strong_password) Entropy-based password strength checking for Ruby and Rails.
+- [**211**星][2y] [Py] [arno0x/ntlmrelaytoews](https://github.com/arno0x/ntlmrelaytoews) ntlm relay attack to Exchange Web Services
+- [**211**星][20d] [Shell] [aress31/wirespy](https://github.com/aress31/wirespy) Framework designed to automate various wireless networks attacks (the project was presented on Pentester Academy TV's toolbox in 2017).
+- [**210**星][1y] [Py] [elmundio87/terraform_validate](https://github.com/elmundio87/terraform_validate) Assists in the enforcement of user-defined standards in Terraform
+- [**210**星][9m] [Go] [cloudflare/cloudflare-ingress-controller](https://github.com/cloudflare/cloudflare-ingress-controller) A Kubernetes ingress controller for Cloudflare's Argo Tunnels
+- [**210**星][1m] [Shell] [zfl9/gfwlist2privoxy](https://github.com/zfl9/gfwlist2privoxy) 将 gfwlist.txt(Adblock Plus 规则)转换为 privoxy.action
+- [**210**星][1y] [C++] [tandasat/pgresarch](https://github.com/tandasat/pgresarch) PatchGuard Research
+- [**210**星][4m] [PHP] [rizer0/log-killer](https://github.com/rizer0/log-killer) Clear all your logs in [linux/windows] servers
+- [**210**星][11m] [Go] [ooclab/otunnel](https://github.com/ooclab/otunnel) peer-to-peer tunnel tool
+- [**210**星][5m] [Py] [nucypher/nufhe](https://github.com/nucypher/nufhe) NuCypher fully homomorphic encryption (NuFHE) library implemented in Python
+- [**210**星][12m] [Java] [neo23x0/fnord](https://github.com/neo23x0/fnord) Pattern Extractor for Obfuscated Code
+- [**210**星][3m] [C++] [mapbox/jni.hpp](https://github.com/mapbox/jni.hpp) A modern, type-safe, header-only, C++14 wrapper for JNI
+- [**210**星][2y] [Py] [kamorin/dhcpig](https://github.com/kamorin/dhcpig) DHCP exhaustion script written in python using scapy network library
+- [**210**星][16d] [Java] [jikesrvm/jikesrvm](https://github.com/jikesrvm/jikesrvm) a flexible open testbed to prototype virtual machine technologies and experiment with a large variety of design alternatives
+- [**210**星][7y] [haohaolee/shadowsocks-openwrt](https://github.com/haohaolee/shadowsocks-openwrt) A package of shadowsocks for OpenWrt
+- [**210**星][4m] [C++] [eternityx/deadcell-csgo](https://github.com/eternityx/deadcell-csgo) Full source to the CS:GO cheat
+- [**210**星][4m] [Java] [dschanoeh/kayak](https://github.com/dschanoeh/kayak) Kayak is a CAN bus analysis tool based on SocketCAN
+- [**210**星][8m] [JS] [dirtbags/pcapdb](https://github.com/dirtbags/pcapdb) 分布式、搜索优化的网络数据包捕获系统
+- [**210**星][6m] [Py] [dirkjanm/krbrelayx](https://github.com/dirkjanm/krbrelayx) Kerberos unconstrained delegation abuse toolkit
+- [**210**星][1y] [Py] [danmcinerney/msf-autoshell](https://github.com/danmcinerney/msf-autoshell) Feed the tool a .nessus file and it will automatically get you MSF shell
+- [**209**星][6d] [Py] [f0cker/crackq](https://github.com/f0cker/crackq) CrackQ: A Python Hashcat cracking queue system
+- [**209**星][2y] [PHP] [defuse/crackstation-hashdb](https://github.com/defuse/crackstation-hashdb) CrackStation.net's Lookup Table Implementation.
+- [**209**星][2y] [C] [fsecurelabs/osxfuzz](https://github.com/FSecureLABS/OSXFuzz) macOS Kernel Fuzzer
+- [**209**星][7m] [C++] [googleprojectzero/bochspwn](https://github.com/googleprojectzero/bochspwn) A Bochs-based instrumentation project designed to log kernel memory references, to identify "double fetches" and other OS vulnerabilities
+- [**209**星][3y] [Shell] [ztgrace/sticky_keys_hunter](https://github.com/ztgrace/sticky_keys_hunter) A script to test an RDP host for sticky keys and utilman backdoor.
+- [**209**星][3y] [Java] [subgraph/orchid](https://github.com/subgraph/orchid)
+- [**209**星][2y] [C] [silvermoonsecurity/passivefuzzframeworkosx](https://github.com/silvermoonsecurity/passivefuzzframeworkosx) This framework is for fuzzing OSX kernel vulnerability based on passive inline hook mechanism in kernel mode.
+- [**209**星][17d] [sigp/solidity-security-blog](https://github.com/sigp/solidity-security-blog) Comprehensive list of known attack vectors and common anti-patterns
+- [**209**星][2m] [Py] [si9int/cc.py](https://github.com/si9int/cc.py) Extracting URLs of a specific target based on the results of "commoncrawl.org"
+- [**209**星][2y] [JS] [shutterstock/lil-brother](https://github.com/shutterstock/lil-brother) Track clicks and other client-side events on web pages
+- [**209**星][1m] [shogunlab/awesome-hyper-v-exploitation](https://github.com/shogunlab/awesome-hyper-v-exploitation) A curated list of Hyper-V exploitation resources, fuzzing and vulnerability research.
+- [**209**星][3y] [C++] [shinnok/johnny](https://github.com/shinnok/johnny) The GUI frontend to the John the Ripper password cracker
+- [**209**星][7m] [PHP] [samdark/yii2-webshell](https://github.com/samdark/yii2-webshell) Web shell allows to run yii console commands using a browser
+- [**209**星][1y] [MATLAB] [lts4/deepfool](https://github.com/lts4/deepfool) A simple and accurate method to fool deep neural networks
+- [**209**星][29d] [Py] [leancloud/satori](https://github.com/leancloud/satori) LeanCloud 维护的监控系统
+- [**209**星][2y] [k0keoyo/some-kernel-fuzzing-paper](https://github.com/k0keoyo/some-kernel-fuzzing-paper) Some kernel fuzzing paper about windows and linux
+- [**209**星][5m] [C] [hunter-ht-2018/ptfuzzer](https://github.com/hunter-ht-2018/ptfuzzer) Improving AFL by using Intel PT to collect branch information
+- [**209**星][2m] [Java] [h3xstream/http-script-generator](https://github.com/h3xstream/http-script-generator) ZAP/Burp plugin that generate script to reproduce a specific HTTP request (Intended for fuzzing or scripted attacks)
+- [**209**星][8m] [Py] [djm/python-scrapyd-api](https://github.com/djm/python-scrapyd-api) A Python wrapper for working with Scrapyd's API.
+- [**209**星][3d] [decalage2/awesome-security-hardening](https://github.com/decalage2/awesome-security-hardening) A collection of awesome security hardening guides, tools and other resources
+- [**209**星][2y] [Py] [danigargu/explodingcan](https://github.com/danigargu/explodingcan) Python 版本的CVE-2017-7269 漏洞利用代码. NSA 泄露工具中的 ExplodingCan 即是利用此漏洞
+- [**209**星][7m] [C] [coolervoid/raptor_waf](https://github.com/coolervoid/raptor_waf) Raptor - WAF - Web application firewall using DFA [ Current version ] - Beta
+- [**209**星][4m] [HTML] [ajinabraham/droid-application-fuzz-framework](https://github.com/ajinabraham/droid-application-fuzz-framework) Android application fuzzing framework with fuzzers and crash monitor.
+- [**209**星][2m] [adguardteam/adguardforwindows](https://github.com/adguardteam/adguardforwindows) Windows系统范围的AdBlocker
+- [**208**星][2m] [Shell] [hak5/lanturtle-modules](https://github.com/hak5/lanturtle-modules) The Official LAN Turtle Module Repository
+- [**208**星][1m] [Py] [seahoh/gotox](https://github.com/seahoh/gotox) 本地自动代理,修改自 goagent。
+- [**208**星][2y] [Py] [pirate-crew/iptv](https://github.com/pirate-crew/iptv) Search and perform brute force attacks on illegal IPTV Servers
+- [**208**星][6m] [PHP] [momosecurity/rhizobia_p](https://github.com/momosecurity/rhizobia_p) PHP安全SDK及编码规范
+- [**208**星][6m] [Perl] [modzero/mod0burpuploadscanner](https://github.com/modzero/mod0burpuploadscanner) HTTP file upload scanner for Burp Proxy
+- [**208**星][2m] [C] [joyent/mdb_v8](https://github.com/joyent/mdb_v8) postmortem debugging for Node.js and other V8-based programs
+- [**208**星][5m] [PS] [harmj0y/damp](https://github.com/harmj0y/damp) The Discretionary ACL Modification Project: Persistence Through Host-based Security Descriptor Modification
+- [**208**星][2y] [emilyanncr/windows-post-exploitation](https://github.com/emilyanncr/windows-post-exploitation) Windows post-exploitation tools, resources, techniques and commands to use during post-exploitation phase of penetration test. Contributions are appreciated. Enjoy!
+- [**208**星][2y] [Py] [bluscreenofjeff/malleable-c2-randomizer](https://github.com/bluscreenofjeff/malleable-c2-randomizer) A script to randomize Cobalt Strike Malleable C2 profiles and reduce the chances of flagging signature-based detection controls
+- [**208**星][8m] [Py] [blueboxgroup/ursula](https://github.com/blueboxgroup/ursula) Ansible playbooks for operating OpenStack - Powering Blue Box Cloud.
+- [**208**星][3y] [Py] [agoragames/kairos](https://github.com/agoragames/kairos) Python module for time series data in Redis and Mongo
+- [**207**星][2m] [Py] [edboffical/bsp](https://github.com/edboffical/bsp) shadowsocks多用户、流量、限时管理接口
+- [**207**星][9d] [Py] [byt3bl33d3r/witnessme](https://github.com/byt3bl33d3r/witnessme) Web Inventory tool, takes screenshots of webpages using Pyppeteer (headless Chrome/Chromium) and provides some extra bells & whistles to make life easier.
+- [**207**星][2y] [Go] [sun8911879/shadowsocksr](https://github.com/sun8911879/shadowsocksr) ShadowsocksR(SSR) for Go library
+- [**207**星][1m] [Ruby] [v2ray/homebrew-v2ray](https://github.com/v2ray/homebrew-v2ray) The homebrew tap for v2ray-core.
+- [**207**星][2y] [C#] [them4hd1/vayne-rat](https://github.com/them4hd1/vayne-rat) An Advanced C# .NET Rat, It’s Stable and Contains Many Features.
+- [**207**星][5y] [C] [sorbo/tcpcrypt](https://github.com/sorbo/tcpcrypt) a protocol that attempts to encrypt (almost) all of your network traffic
+- [**207**星][2y] [Go] [netxfly/xsec-proxy-scanner](https://github.com/netxfly/xsec-proxy-scanner) 速度超快、小巧的代理服务器扫描器
+- [**207**星][2y] [JS] [konklone/shaaaaaaaaaaaaa](https://github.com/konklone/shaaaaaaaaaaaaa) Check if a website has weak SHA-1 TLS certificates.
+- [**207**星][2m] [Py] [jwilk/python-afl](https://github.com/jwilk/python-afl) American Fuzzy Lop fork server and instrumentation for pure-Python code
+- [**207**星][7m] [Py] [invictus1306/beebug](https://github.com/invictus1306/beebug) A tool for checking exploitability
+- [**207**星][1y] [C] [crozone/spectrepoc](https://github.com/crozone/spectrepoc) Proof of concept code for the Spectre CPU exploit.
+- [**207**星][4d] [TS] [bevry/getmac](https://github.com/bevry/getmac) Get the mac address of the current machine you are on via Node.js
+- [**207**星][4y] [C++] [altf4/untwister](https://github.com/altf4/untwister) Seed recovery tool for PRNGs
+- [**207**星][8m] [1hack0/facebook-bug-bounty-write-ups](https://github.com/1hack0/facebook-bug-bounty-write-ups) Hunting Bugs for Fun and Profit
+- [**206**星][3y] [Go] [yinghuocho/gotun2socks](https://github.com/yinghuocho/gotun2socks) A Golang implementation of tun2socks
+- [**206**星][15d] [Java] [owasp/mstg-hacking-playground](https://github.com/OWASP/MSTG-Hacking-Playground) 不安全的iOS/Android App集合
+- [**206**星][2y] [C] [yifanlu/taihen](https://github.com/yifanlu/taihen) CFW framework for PS Vita
+- [**206**星][2y] [Java] [udark/underdark-android](https://github.com/udark/underdark-android) Bluetooth peer-to-peer mesh networking for Android
+- [**206**星][23d] [Py] [stamparm/identywaf](https://github.com/stamparm/identywaf) Blind WAF identification tool
+- [**206**星][2y] [C] [royhills/ike-scan](https://github.com/royhills/ike-scan) The IKE Scanner
+- [**206**星][8m] [C++] [rogue-kdc/cve-2019-0841](https://github.com/rogue-kdc/cve-2019-0841) PoC code for CVE-2019-0841 Privilege Escalation vulnerability
+- [**206**星][1y] [Py] [orf/xcat](https://github.com/orf/xcat) 辅助盲 Xpath 注入,检索正在由 Xpath 查询处理的整个 XML 文档,读取主机文件系统上的任意文件,并使用出站 HTTP 请求,使服务器将数据直接发送到xcat
+- [**206**星][4y] [PS] [mattifestation/wmi_backdoor](https://github.com/mattifestation/wmi_backdoor) A PoC WMI backdoor presented at Black Hat 2015
+- [**206**星][1y] [Py] [malicialab/avclass](https://github.com/malicialab/avclass) AVClass malware labeling tool
+- [**206**星][20d] [Go] [kotakanbe/go-cve-dictionary](https://github.com/kotakanbe/go-cve-dictionary) Build a local copy of CVE (NVD and Japanese JVN). Server mode for easy querying.
+- [**206**星][9y] [JS] [jwhitehorn/jsminer](https://github.com/jwhitehorn/jsminer) A Javascript Bitcoin miner
+- [**206**星][1y] [faizann24/resources-for-learning-hacking](https://github.com/faizann24/resources-for-learning-hacking) All the resources I could find for learning Ethical Hacking and penetration testing.
+- [**206**星][7d] [C] [derrekr/fastboot3ds](https://github.com/derrekr/fastboot3ds) A homebrew bootloader for the Nintendo 3DS that is similar to android's fastboot.
+- [**206**星][3y] [Py] [countercept/doublepulsar-c2-traffic-decryptor](https://github.com/countercept/doublepulsar-c2-traffic-decryptor) A python2 script for processing a PCAP file to decrypt C2 traffic sent to DOUBLEPULSAR implant
+- [**206**星][5y] [C] [cbuchner1/ccminer](https://github.com/cbuchner1/ccminer) Christian Buchner's & Christian H.'s CUDA miner project
+- [**206**星][2y] [0x4d31/deception-as-detection](https://github.com/0x4d31/deception-as-detection) Deception based detection techniques mapped to the MITRE’s ATT&CK framework
+- [**205**星][3m] [JS] [yzddmr6/as_webshell_venom](https://github.com/yzddmr6/as_webshell_venom) 免杀webshell无限生成工具蚁剑版
+- [**205**星][27d] [C++] [apt69/comahawk](https://github.com/apt69/comahawk) Privilege Escalation: Weaponizing CVE-2019-1405 and CVE-2019-1322
+- [**205**星][2y] [C#] [shinlor/v2rays](https://github.com/shinlor/v2rays) 一个V2Ray的Windows客户端
+- [**205**星][2y] [toleda/wireless_half-mini](https://github.com/toleda/wireless_half-mini) macOS Airport Half Mini (WiFi and Bluetooth)
+- [**205**星][9m] [C] [paradoxis/php-backdoor](https://github.com/Paradoxis/PHP-Backdoor) Your interpreter isn’t safe anymore — The PHP module backdoor
+- [**205**星][14d] [D] [dlang-community/d-scanner](https://github.com/dlang-community/D-Scanner) Swiss-army knife for D source code
+- [**205**星][3y] [Go] [praetorian-code/trudy](https://github.com/praetorian-code/trudy) A transparent proxy that can modify and drop traffic for arbitrary TCP connections.
+- [**205**星][3m] [Py] [openstack/hacking](https://github.com/openstack/hacking) OpenStack Hacking Style Checks
+- [**205**星][15d] [vschiavoni/sgx-papers](https://github.com/vschiavoni/sgx-papers) A list of system papers using/about Intel SGX
+- [**205**星][5m] [YARA] [th3hurrican3/pepper](https://github.com/th3hurrican3/pepper) An open source script to perform malware static analysis on Portable Executable
+- [**205**星][6y] [Lua] [spiderlabs/nmap-tools](https://github.com/spiderlabs/nmap-tools) SpiderLabs shared Nmap Tools
+- [**205**星][5y] [C] [snare/ida-efiutils](https://github.com/snare/ida-efiutils) 辅助ELF逆向
+- [**205**星][1y] [Go] [raz-varren/xsshell](https://github.com/raz-varren/xsshell) XSS反向Shell框架
+- [**205**星][4y] [Shell] [rand0m1ze/ezsploit](https://github.com/rand0m1ze/ezsploit) Linux bash script automation for metasploit
+- [**205**星][16d] [Py] [patois/idacyber](https://github.com/patois/idacyber) 交互式数据可视化插件
+- [**205**星][2y] [OCaml] [montyly/gueb](https://github.com/montyly/gueb) Static analyzer detecting Use-After-Free on binary
+- [**205**星][16d] [Py] [m4ll0k/smbrute](https://github.com/m4ll0k/smbrute) SMB Protocol Bruteforce
+- [**205**星][2m] [Shell] [keepwannabe/remot3d](https://github.com/keepwannabe/remot3d) is a simple tool created for large pentesters as well as just for the pleasure of defacers to control server by backdoors
+- [**205**星][1y] [JS] [jpcertcc/sysmonsearch](https://github.com/jpcertcc/sysmonsearch) Investigate suspicious activity by visualizing Sysmon's event log
+- [**205**星][2m] [C] [jasonwhite/ducible](https://github.com/jasonwhite/ducible) 使PE和PDB的构建具有可复制性
+- [**205**星][10m] [C] [hzqst/unicorn_pe](https://github.com/hzqst/unicorn_pe) 模拟Windows PE文件的代码执行,基于Unicorn
+- [**205**星][11m] [C#] [enkomio/shed](https://github.com/enkomio/shed) 查看和转储运行中的 .NET文件。分析 .NET 恶意软件的新方式
+- [**205**星][2m] [Py] [elevenpaths/ibombshell](https://github.com/elevenpaths/ibombshell) Tool to deploy a post-exploitation prompt at any time
+- [**205**星][1y] [Go] [akagi201/cryptotrader](https://github.com/akagi201/cryptotrader) A cryptocurrency trader for all famous exchanges
+- [**204**星][9d] [Py] [mzfr/rsh](https://github.com/mzfr/rsh) generate reverse shell from CLI for linux and Windows.
+- [**204**星][2y] [JS] [xmcp/gofw](https://github.com/xmcp/gofw) Chrome 扩展:麻麻再也不用担心 Google API 抽风了
+- [**204**星][4y] [Py] [aoncyberlabs/xxe-recursive-download](https://github.com/AonCyberLabs/xxe-recursive-download)
+- [**204**星][1y] [HTML] [xsscx/commodity-injection-signatures](https://github.com/xsscx/commodity-injection-signatures) Commodity Injection Signatures, Malicious Inputs, XSS, HTTP Header Injection, XXE, RCE, Javascript, XSLT
+- [**204**星][2y] [C++] [rfidtool/esp-rfid-tool](https://github.com/rfidtool/esp-rfid-tool) A tool for logging data/testing devices with a Wiegand Interface. Can be used to create a portable RFID reader or installed directly into an existing installation. Provides access to a web based interface using WiFi in AP or Client mode. Will work with nearly all devices that contain a standard 5V Wiegand interface. Primary target group is 26-37…
+- [**204**星][6d] [Java] [owasp/benchmark](https://github.com/owasp/benchmark) OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web app written in Java, it supports analysis by Static (SAST), Dynamic (DAST), and Runtime (IAST) tools that support Java. The idea is that since it is fully runnable and all the vulnerabilities are actually expl…
+- [**204**星][5d] [C] [niluje/kindletool](https://github.com/niluje/kindletool) A tool for creating & extracting Kindle updates and more
+- [**204**星][10y] [C] [nextgens/tor](https://github.com/nextgens/tor) Tor is free software and an open network that helps you defend against a form of network surveillance that threatens personal freedom and privacy, confidential business activities and relationships, and state security known as traffic analysis.
+- [**204**星][1m] [TS] [helmetjs/csp](https://github.com/helmetjs/csp) Content Security Policy middleware
+- [**204**星][6y] [CoffeeScript] [fw42/honeymap](https://github.com/fw42/honeymap) Real-time websocket stream of GPS events on a fancy SVG world map
+- [**204**星][1y] [Py] [fireeye/idawasm](https://github.com/fireeye/idawasm) WebAssembly的加载器和解析器
+- [**204**星][2y] [Java] [facebookresearch/asynchronousratchetingtree](https://github.com/facebookresearch/asynchronousratchetingtree) 用于"端到端的加密群组消息"的协议
+- [**204**星][2y] [evnm/research-in-production](https://github.com/evnm/research-in-production) A collection of research papers categorized by real-world systems that enact them
+- [**204**星][1y] [C#] [damonmohammadbagher/nativepayload_dns](https://github.com/damonmohammadbagher/nativepayload_dns) C# code for Transferring Backdoor Payloads by DNS Traffic and Bypassing Anti-viruses
+- [**204**星][4m] [HCL] [byt3bl33d3r/red-baron](https://github.com/byt3bl33d3r/red-baron) Automate creating resilient, disposable, secure and agile infrastructure for Red Teams
+- [**204**星][30d] [C#] [b4rtik/redpeanut](https://github.com/b4rtik/redpeanut) RedPeanut is a small RAT developed in .Net Core 2 and its agent in .Net 3.5 / 4.0.
+- [**204**星][1y] [C++] [azonenberg/openfpga](https://github.com/azonenberg/openfpga) Open FPGA tools
+- [**204**星][4m] [Shell] [anshumanbh/brutesubs](https://github.com/anshumanbh/brutesubs) An automation framework for running multiple open sourced subdomain bruteforcing tools (in parallel) using your own wordlists via Docker Compose
+- [**204**星][6y] [C#] [0xd4d/antinet](https://github.com/0xd4d/antinet) .NET anti-managed debugger and anti-profiler code
+- [**203**星][7m] [JS] [wingleung/save-page-state](https://github.com/wingleung/save-page-state) A chrome extension to save the state of a page for further analysis
+- [**203**星][2y] [Py] [rootlabs/smap](https://github.com/suraj-root/smap) Handy tool for shellcode analysis
+- [**203**星][1y] [C#] [spiderlabs/sharpcompile](https://github.com/spiderlabs/sharpcompile) SharpCompile is an aggressor script for Cobalt Strike which allows you to compile and execute C# in realtime. This is a more slick approach than manually compiling an .NET assembly and loading it into Cobalt Strike. The project aims to make it easier to move away from adhoc PowerShell execution instead creating a temporary assembly and executing…
+- [**203**星][7m] [JS] [sixstars/starctf2019](https://github.com/sixstars/starctf2019) official source code of *CTF2019
+- [**203**星][1y] [Py] [shaohua0116/group-normalization-tensorflow](https://github.com/shaohua0116/group-normalization-tensorflow) A TensorFlow implementation of Group Normalization on the task of image classification
+- [**203**星][2m] [Py] [rpisec/llvm-deobfuscator](https://github.com/rpisec/llvm-deobfuscator)
+- [**203**星][2y] [C] [peperunas/injectopi](https://github.com/peperunas/injectopi) 一堆Windows 代码注入教程
+- [**203**星][1y] [Py] [omergunal/pot](https://github.com/omergunal/pot) Phishing on Twitter
+- [**203**星][3y] [C] [google/kasan](https://github.com/google/kasan) KernelAddressSanitizer, a fast memory error detector for the Linux kernel
+- [**203**星][3y] [C] [deadbits/insecureprogramming](https://github.com/deadbits/insecureprogramming) mirror of gera's insecure programming examples |
+- [**202**星][4m] [jiansiting/kali-windows](https://github.com/jiansiting/kali-windows) Kali Windows
+- [**202**星][2y] [Py] [newbee119/ti_collector](https://github.com/NewBee119/Ti_Collector) 本项目致力于收集网上公开来源的威胁情报,主要关注信誉类威胁情报(如IP/域名等),以及事件类威胁情报。
+- [**202**星][2m] [Ruby] [vonahisec/leprechaun](https://github.com/vonahisec/leprechaun) This tool is used to map out the network data flow to help penetration testers identify potentially valuable targets.
+- [**202**星][3m] [C++] [mc-imperial/jfs](https://github.com/mc-imperial/jfs) an experimental constraint solverdesigned to investigate using coverage guided fuzzing as an incomplete strategyfor solving boolean, BitVector, and floating-point constraints.
+- [**202**星][2m] [PS] [wiredpulse/posh-r2](https://github.com/wiredpulse/posh-r2) PowerShell - Rapid Response... For the incident responder in you!
+- [**202**星][2y] [weilaihui/ss-net](https://github.com/weilaihui/ss-net) 共享shadowsocks主机
+- [**202**星][2y] [Py] [tkmru/nao](https://github.com/tkmru/nao) 移除死代码(dead code), 基于Unicorn引擎
+- [**202**星][1y] [PS] [sud0woodo/dcomrade](https://github.com/sud0woodo/dcomrade) Powershell script for enumerating vulnerable DCOM Applications
+- [**202**星][6d] [stuhirst/awssecurity](https://github.com/stuhirst/awssecurity) for AWS Security material
+- [**202**星][2m] [C++] [oisf/libhtp](https://github.com/oisf/libhtp) LibHTP is a security-aware parser for the HTTP protocol and the related bits and pieces.
+- [**202**星][3y] [Py] [mseclab/nathan](https://github.com/mseclab/nathan) Android Emulator for mobile security testing
+- [**202**星][4y] [Py] [m57/ardt](https://github.com/m57/ardt) Akamai Reflective DDoS Tool - Attack the origin host behind the Akamai Edge hosts and DDoS protection offered by Akamai services.
+- [**202**星][1y] [Erlang] [kudelskisecurity/scannerl](https://github.com/kudelskisecurity/scannerl) scannerl:模块化、分布式指纹识别引擎,在单个主机运行即可扫描数千目标,也可轻松的部署到多台主机
+- [**202**星][3y] [C++] [k2/ehtrace](https://github.com/k2/ehtrace) 跟踪Windows上二进制文件的执行。
+- [**202**星][1y] [C] [gtoad/android_inline_hook](https://github.com/gtoad/android_inline_hook) Build an so file to automatically do the android_native_hook work. Supports thumb-2/arm32 and ARM64 ! With this, tools like Xposed can do android native hook.
+- [**202**星][7m] [Py] [greekn/rce-bug](https://github.com/greekn/rce-bug) 新漏洞感知项目 主要帮助大家 记录一些重大漏洞 漏洞方面的细节
+- [**202**星][6y] [Py] [gifts/rogue-mysql-server](https://github.com/gifts/rogue-mysql-server) Rogue MySql Server
+- [**202**星][1y] [Shell] [fics/atcmd](https://github.com/fics/atcmd) Android AT command scripts and firmware extraction
+- [**202**星][8m] [Py] [f5networks/f5-common-python](https://github.com/f5networks/f5-common-python) Python SDK for configuration and monitoring of F5® BIG-IP® devices via the iControl® REST API.
+- [**202**星][2y] [Py] [euske/pyrexecd](https://github.com/euske/pyrexecd) 独立的SSH服务器(Windows)
+- [**202**星][3y] [Py] [endgameinc/dga_predict](https://github.com/endgameinc/dga_predict) Predicting Domain Generation Algorithms using LSTMs
+- [**202**星][7m] [C] [doublelabyrinth/how-does-navicat-encrypt-password](https://github.com/doublelabyrinth/how-does-navicat-encrypt-password) This repository tells you how Navicat encrypts database password.
+- [**202**星][14d] [Py] [doomedraven/virustotalapi](https://github.com/doomedraven/virustotalapi) VirusTotal Full api
+- [**202**星][5m] [TeX] [decrypto-org/rupture](https://github.com/decrypto-org/rupture) A framework for BREACH and other compression-based crypto attacks
+- [**202**星][2y] [Java] [cgutman/adblib](https://github.com/cgutman/adblib) A Java library implementation of the ADB network protocol
+- [**202**星][3d] [Py] [angr/cle](https://github.com/angr/cle) CLE Loads Everything (at least, many binary formats!)
+- [**201**星][20d] [C++] [can1357/byepg](https://github.com/can1357/byepg) Defeating Patchguard universally for Windows 8, Windows 8.1 and all versions of Windows 10 regardless of HVCI
+- [**201**星][4m] [Py] [yelp/threat_intel](https://github.com/yelp/threat_intel) Threat Intelligence APIs
+- [**201**星][2d] [Shell] [x1mdev/reconpi](https://github.com/x1mdev/reconpi) ReconPi - A lightweight recon tool that performs extensive scanning with the latest tools.
+- [**201**星][4m] [Py] [thesph1nx/absolutezero](https://github.com/thesph1nx/absolutezero) Python APT Backdoor 1.0.0.1
+- [**201**星][7m] [Java] [rolfrolles/ghidrapal](https://github.com/rolfrolles/ghidrapal) Ghidra 程序分析库(无文档)
+- [**201**星][11m] [Py] [medbenali/cyberscan](https://github.com/medbenali/cyberscan) Network's Forensics ToolKit
+- [**201**星][1y] [JS] [lmammino/jwt-cracker](https://github.com/lmammino/jwt-cracker) jwt-cracker:HS256JWT 令牌暴力破解工具,只对弱密码有效
+- [**201**星][2m] [C++] [kalymos/psnee](https://github.com/kalymos/psnee) PsNee, an open source stealth modchip for the Sony Playstation 1
+- [**201**星][2y] [Py] [joker25000/devploit](https://github.com/joker25000/devploit)
+- [**201**星][23d] [Rust] [jedisct1/rust-doh](https://github.com/jedisct1/rust-doh) A fast and secure DoH (DNS-over-HTTP) server proxy written in Rust.
+- [**201**星][11m] [Py] [infamoussyn/rogue](https://github.com/infamoussyn/rogue) An extensible toolkit providing penetration testers an easy-to-use platform to deploy Access Points during penetration testing and red team engagements.
+- [**201**星][2y] [SourcePawn] [fnmsd/awvs_script_decode](https://github.com/fnmsd/awvs_script_decode) 解密好的AWVS10.5 data/script/目录下的脚本
+- [**201**星][6m] [C#] [bedthegod/confuserex-mod-by-bed](https://github.com/bedthegod/confuserex-mod-by-bed) Beds Protector | Best free obfuscation out right now
+- [**201**星][6m] [Py] [ares-x/awd-predator-framework](https://github.com/ares-x/awd-predator-framework) AWD攻防赛webshell批量利用框架
+- [**201**星][3m] [Ruby] [appfolio/gemsurance](https://github.com/appfolio/gemsurance) Gem vulnerability checker using rubysec/ruby-advisory-db
+- [**200**星][26d] [Jupyter Notebook] [hunters-forge/attack-python-client](https://github.com/hunters-forge/ATTACK-Python-Client) Python Script to access ATT&CK content available in STIX via a public TAXII server
+- [**200**星][3y] [Py] [tuuunya/webdirscan](https://github.com/TuuuNya/webdirscan) 跨平台的web目录扫描工具
+- [**200**星][1y] [newbee119/threat-intelligence](https://github.com/NewBee119/threat-intelligence) 收集的一些国外能提供提供威胁情报的公司,涵盖网络安全、工控安全、终端安全、移动安全等领域
+- [**200**星][3y] [tuuunya/fuzz_dict](https://github.com/TuuuNya/fuzz_dict) 常用的一些fuzz及爆破字典,欢迎大神继续提供新的字典及分类。
+- [**200**星][1y] [Py] [sec-bit/awesome-buggy-erc20-tokens](https://github.com/sec-bit/awesome-buggy-erc20-tokens) A Collection of Vulnerabilities in ERC20 Smart Contracts With Tokens Affected
+- [**200**星][5m] [C++] [rainers/cv2pdb](https://github.com/rainers/cv2pdb) converter of DMD CodeView/DWARF debug information to PDB files
+- [**200**星][7m] [PS] [powershell/operation-validation-framework](https://github.com/powershell/operation-validation-framework) executing validation of the operation of a system
+- [**200**星][10m] [HTML] [mxmssh/drltrace](https://github.com/mxmssh/drltrace) Drltrace is a library calls tracer for Windows and Linux applications.
+- [**200**星][2y] [Py] [linw1995/lightsocks-python](https://github.com/linw1995/lightsocks-python)
+- [**200**星][4m] [C] [jas502n/cve-2019-13272](https://github.com/jas502n/cve-2019-13272) Linux 4.10 < 5.1.17 PTRACE_TRACEME local root
+- [**200**星][6m] [Py] [hellogoldsnakeman/masnmapscan-v1.0](https://github.com/hellogoldsnakeman/masnmapscan-v1.0) 一款端口扫描器。整合了masscan和nmap两款扫描器,masscan扫描端口,nmap扫描端口对应服务,二者结合起来实现了又快又好地扫描。并且加入了防火墙的功能
+- [**200**星][1y] [C] [hashcat/kwprocessor](https://github.com/hashcat/kwprocessor) Advanced keyboard-walk generator with configureable basechars, keymap and routes
+- [**200**星][2y] [Py] [dragen1860/learningtocompare-pytorch](https://github.com/dragen1860/learningtocompare-pytorch) Pytorch Implementation for CVPR2018 Paper: Learning to Compare: Relation Network for Few-Shot Learning
+- [**200**星][5m] [Py] [doyensec/graph-ql](https://github.com/doyensec/graph-ql) GraphQL Security Research Material
+- [**200**星][6m] [Py] [dowjones/hammer](https://github.com/dowjones/hammer) Dow Jones Hammer : Protect the cloud with the power of the cloud(AWS)
+- [**200**星][2y] [C] [david-reguera-garcia-dreg/anticuckoo](https://github.com/david-reguera-garcia-dreg/anticuckoo) A tool to detect and crash Cuckoo Sandbox
+- [**200**星][3y] [C] [crowdstrike/tortilla](https://github.com/crowdstrike/tortilla) solution for Windows that transparently routes all TCP and DNS traffic through Tor
+- [**200**星][3y] [C] [cnlohr/espthernet](https://github.com/cnlohr/espthernet) ESP8266 10-Base-T Ethernet Driver
+- [**200**星][1y] [C] [bazad/blanket](https://github.com/bazad/blanket) CVE-2018-4280: Mach port replacement vulnerability in launchd on iOS 11.2.6 leading to sandbox escape, privilege escalation, and codesigning bypass.
+- [**200**星][12d] [anudeepnd/blacklist](https://github.com/anudeepnd/blacklist) Curated and well-maintained host file to block ads, tracking, cryptomining and more! Updated regularly.
+- [**199**星][10m] [Py] [kevthehermit/ducktoolkit](https://github.com/kevthehermit/ducktoolkit) Encoding Tools for Rubber Ducky
+- [**199**星][2m] [Py] [tylous/vibe](https://github.com/tylous/vibe) A framework for stealthy domain reconnaissance
+- [**199**星][3y] [Assembly] [vector35/pwnadventurez](https://github.com/vector35/pwnadventurez) NES zombie survival game made to be hacked
+- [**199**星][2m] [C] [uninett/mod_auth_mellon](https://github.com/uninett/mod_auth_mellon) An Apache module with a simple SAML 2.0 service provider
+- [**199**星][2y] [ObjC] [tihmstar/doubleh3lix](https://github.com/tihmstar/doubleh3lix) Jailbreak for iOS 10.x 64bit devices without KTRR
+- [**199**星][1y] [ObjC] [sunweiliang/neteasemusiccrack](https://github.com/sunweiliang/neteasemusiccrack) iOS网易云音乐 免VIP下载、去广告、去更新 无需越狱...
+- [**199**星][2m] [C++] [secrary/drsemu](https://github.com/secrary/drsemu) 根据动态行为检测恶意代码并进行分类
+- [**199**星][3y] [PHP] [redteamsecuritytraining/plugbot-plug](https://github.com/redteamsecuritytraining/PlugBot-Plug) The "bot" component of the PlugBot project
+- [**199**星][1y] [C++] [quarkslab/binmap](https://github.com/quarkslab/binmap) system scanner
+- [**199**星][12m] [iamcryptoki/snowden-archive](https://github.com/iamcryptoki/snowden-archive)
+- [**199**星][2y] [iaik/kaiser](https://github.com/iaik/kaiser) Kernel Address Isolation to have Side-channels Efficiently Removed
+- [**199**星][2y] [Go] [ezekg/git-hound](https://github.com/ezekg/git-hound) Git plugin that prevents sensitive data from being committed.
+- [**199**星][2y] [Java] [ernw/androtickler](https://github.com/ernw/androtickler) Penetration testing and auditing toolkit for Android apps.
+- [**199**星][1y] [Dockerfile] [eadom/ctf_xinetd](https://github.com/eadom/ctf_xinetd) A docker repository for deploying pwnable challenges in CTF
+- [**199**星][3y] [C] [dismantl/linux-injector](https://github.com/dismantl/linux-injector) Utility for injecting executable code into a running process on x86/x64 Linux
+- [**199**星][4y] [JS] [cturt/ps4-playground](https://github.com/cturt/ps4-playground) A set of PS4 experiments using the WebKit exploit
+- [**199**星][3y] [Py] [climate-mirror/datasets](https://github.com/climate-mirror/datasets) For tracking data mirroring progress
+- [**198**星][4m] [Py] [googleprojectzero/ios-messaging-tools](https://github.com/googleprojectzero/ios-messaging-tools) several tools Project Zero uses to test iPhone messaging
+- [**198**星][2y] [Py] [alienvault-otx/apiv2](https://github.com/AlienVault-OTX/ApiV2) quickly identify related infrastructure and malware
+- [**198**星][2m] [Py] [thehive-project/thehivedocs](https://github.com/TheHive-Project/TheHiveDocs) Documentation of TheHive
+- [**198**星][1y] [Py] [wipi-hunter/pikarma](https://github.com/WiPi-Hunter/PiKarma) Detects wireless network attacks performed by KARMA module
+- [**198**星][8d] [Swift] [auth0/lock.swift](https://github.com/auth0/Lock.swift) A Swift & iOS framework to authenticate using Auth0 and with a Native Look & Feel
+- [**198**星][5y] [rutkai/pentest-bookmarks](https://github.com/rutkai/pentest-bookmarks) A collection of penetration testing related sites
+- [**198**星][7m] [C] [zombiecraig/icsim](https://github.com/zombiecraig/icsim) Instrument Cluster Simulator
+- [**198**星][9d] [Java] [spring-cloud-samples/spring-cloud-contract-samples](https://github.com/spring-cloud-samples/spring-cloud-contract-samples) Samples for Spring Cloud Contract project
+- [**198**星][2y] [proteas/native-lldb-for-ios](https://github.com/proteas/native-lldb-for-ios) native LLDB(v3.8) for iOS
+- [**198**星][8m] [Py] [nccgroup/g-scout](https://github.com/nccgroup/g-scout) Google Cloud Platform Security Tool
+- [**198**星][5m] [PS] [mkellerman/invoke-commandas](https://github.com/mkellerman/invoke-commandas) Invoke Command As System/Interactive/GMSA/User on Local/Remote machine & returns PSObjects.
+- [**198**星][1y] [Py] [mike01/pypacker](https://github.com/mike01/pypacker) packet manipulation lib for Python
+- [**198**星][2m] [Py] [meejah/txtorcon](https://github.com/meejah/txtorcon) Twisted-based asynchronous Tor control protocol implementation. Includes unit-tests, examples, state-tracking code and configuration abstraction.
+- [**198**星][2y] [Go] [magoo/authtables](https://github.com/magoo/authtables) AuthTables is a microservice that helps detect "Account Take Over" caused by simple credential theft. If bad actors are stealing your users passwords, AuthTables may be useful.
+- [**198**星][2y] [C] [lsds/spectre-attack-sgx](https://github.com/lsds/spectre-attack-sgx) Spectre attack against SGX enclave
+- [**198**星][2y] [C#] [jaredhaight/psattackbuildtool](https://github.com/jaredhaight/psattackbuildtool) A tool for building PS>Attack, an offensive PowerShell console that makes it easy for pentesters to use PowerShell.
+- [**198**星][3y] [Py] [isofew/sssniff](https://github.com/isofew/sssniff) ShadowSocks(SS) traffic sniffer
+- [**198**星][6m] [Py] [google/in-silico-labeling](https://github.com/google/in-silico-labeling) Code for In silico labeling: Predicting fluorescent labels in unlabeled images
+- [**198**星][5m] [C#] [ghostpack/sharpdpapi](https://github.com/ghostpack/sharpdpapi) SharpDPAPI is a C# port of some Mimikatz DPAPI functionality.
+- [**198**星][3y] [Py] [faizann24/using-machine-learning-to-detect-malicious-urls](https://github.com/faizann24/using-machine-learning-to-detect-malicious-urls) 使用机器学习检测恶意URL
+- [**198**星][4y] [Py] [f8left/decllvm](https://github.com/f8left/decllvm) IDA plugin for OLLVM analysis
+- [**198**星][2d] [C] [beave/sagan](https://github.com/beave/sagan) Sagan uses a 'Snort like' engine and rules to analyze logs (syslog/event log/snmptrap/netflow/etc)
+- [**198**星][5m] [Py] [athre0z/wasm](https://github.com/athre0z/wasm) WebAssembly decoder & disassembler library
+- [**197**星][4m] [Kotlin] [shadowsocks/v2ray-plugin-android](https://github.com/shadowsocks/v2ray-plugin-android) A SIP003 V2ray plugin on Android
+- [**197**星][2y] [ObjC] [siguza/v0rtex](https://github.com/siguza/v0rtex) IOSurface exploit
+- [**197**星][6d] [C#] [secana/penet](https://github.com/secana/penet) Portable Executable (PE) library written in .Net
+- [**197**星][7y] [C++] [scanlime/arduino-lelo-remote](https://github.com/scanlime/arduino-lelo-remote) Arduino library for remote-control Lelo vibrators
+- [**197**星][1y] [Py] [s1kr10s/apache-struts-v3](https://github.com/s1kr10s/apache-struts-v3)
+- [**197**星][4y] [Java] [pwntester/serialkillerbypassgadgetcollection](https://github.com/pwntester/serialkillerbypassgadgetcollection) Collection of bypass gadgets to extend and wrap ysoserial payloads
+- [**197**星][2y] [Go] [minio/concert](https://github.com/minio/concert) Concert is a console based certificate generation tool for letsencrypt.org.
+- [**197**星][3m] [infosecn1nja/awesome-mitre-attack](https://github.com/infosecn1nja/awesome-mitre-attack) A curated list of awesome resources related to Mitre ATT&CK™ Framework
+- [**197**星][2y] [C] [domblack/php-scrypt](https://github.com/domblack/php-scrypt) A PHP wrapper fo the scrypt hashing algorithm
+- [**197**星][2y] [Py] [detuxsandbox/detux](https://github.com/detuxsandbox/detux) The Multiplatform Linux Sandbox
+- [**197**星][4m] [cryptoseb/cryptopaper](https://github.com/cryptoseb/cryptopaper) Privacy, Security, and Anonymity For Every Internet User.
+- [**197**星][2m] [Py] [cisco-talos/decept](https://github.com/cisco-talos/decept) Decept Network Protocol Proxy
+- [**197**星][2d] [OCaml] [bitblaze-fuzzball/fuzzball](https://github.com/bitblaze-fuzzball/fuzzball) Vine-based Binary Symbolic Execution
+- [**197**星][20d] [F#] [b2r2-org/b2r2](https://github.com/b2r2-org/b2r2) B2R2 is a collection of useful algorithms, functions, and tools for binary analysis.
+- [**197**星][5d] [Py] [angr/angr-management](https://github.com/angr/angr-management) A GUI for angr. Being developed *very* slowly.
+- [**197**星][2y] [ObjC] [alonemonkey/dumpdecrypted](https://github.com/alonemonkey/dumpdecrypted) Dumps decrypted mach-o files from encrypted applications、framework or app extensions.
+- [**196**星][2m] [ignitetechnologies/hackthebox-ctf-writeups](https://github.com/ignitetechnologies/hackthebox-ctf-writeups) This cheasheet is aimed at the CTF Players and Beginners to help them sort Hack The Box Labs on the basis of Operating System and Difficulty.
+- [**196**星][12d] [JS] [ret2got/disasm.pro](https://github.com/ret2got/disasm.pro) A realtime assembler/disassembler (formerly known as disasm.ninja)
+- [**196**星][5m] [C#] [zodiacon/drivermon](https://github.com/zodiacon/drivermon) Monitor activity of any driver
+- [**196**星][2y] [Py] [yvesalexandre/bandicoot](https://github.com/yvesalexandre/bandicoot) an open-source python toolbox to analyze mobile phone metadata
+- [**196**星][2y] [Py] [sqlab/symgdb](https://github.com/sqlab/symgdb) symbolic execution plugin for gdb
+- [**196**星][3y] [Ruby] [spiderlabs/malware-analysis](https://github.com/spiderlabs/malware-analysis) A repository of tools and scripts related to malware analysis
+- [**196**星][25d] [Py] [seemoo-lab/internalblue](https://github.com/seemoo-lab/internalblue) Bluetooth experimentation framework for Broadcom and Cypress chips.
+- [**196**星][2y] [C] [saaramar/execve_exploit](https://github.com/saaramar/execve_exploit) Hardcore corruption of my execve() vulnerability in WSL
+- [**196**星][10m] [JS] [rook2pawn/node-ddos](https://github.com/rook2pawn/node-ddos) Stop denial of service attacks, configurable allowable burst rate.
+- [**196**星][3y] [C] [robertdavidgraham/telnetlogger](https://github.com/robertdavidgraham/telnetlogger) Simulates enough of a Telnet connection in order to log failed login attempts.
+- [**196**星][1y] [Py] [pstirparo/mac4n6](https://github.com/pstirparo/mac4n6) Collection of forensics artifacs location for Mac OS X and iOS
+- [**196**星][8m] [JS] [pillarjs/csrf](https://github.com/pillarjs/csrf) Logic behind CSRF token creation and verification.
+- [**196**星][3d] [C] [denandz/fuzzotron](https://github.com/denandz/fuzzotron) A TCP/UDP based network daemon fuzzer
+- [**196**星][3y] [Ruby] [crowecybersecurity/ps1encode](https://github.com/crowecybersecurity/ps1encode) Script used to generate and encode a PowerShell based Metasploit payloads.
+- [**196**星][2y] [Java] [abstractj/kalium](https://github.com/abstractj/kalium) Java binding to the Networking and Cryptography (NaCl) library with the awesomeness of libsodium
+- [**195**星][3y] [Py] [falseen/shadowsocks-pyqt](https://github.com/falseen/shadowsocks-pyqt) 一个用PyQt5实现的shadowsocks 客户端, 可以在 windows、linux、OSX 等平台上运行
+- [**195**星][8d] [C++] [spacehuhn/wifiduck](https://github.com/spacehuhn/wifiduck) Wireless keystroke injection attack platform
+- [**195**星][2m] [Py] [yingcong/facelet_bank](https://github.com/yingcong/facelet_bank) Facelet-Bank for Fast Portrait Manipulation (pytorch)
+- [**195**星][25d] [Lua] [ocsaf/freevulnsearch](https://github.com/ocsaf/freevulnsearch) Free and open NMAP NSE script to query vulnerabilities via the cve-search.org API.
+- [**195**星][1y] [Java] [nocheatplus/nocheatplus](https://github.com/nocheatplus/nocheatplus) Anti cheating plugin for Minecraft (Bukkit/Spigot).
+- [**195**星][9m] [Py] [mpgn/cve-2019-0192](https://github.com/mpgn/cve-2019-0192) RCE on Apache Solr using deserialization of untrusted data via jmx.serviceUrl
+- [**195**星][3y] [mechaphish/mecha-docs](https://github.com/mechaphish/mecha-docs) Documentation for the Mechanical Phish.
+- [**195**星][1y] [Batchfile] [knightmare2600/shadowbrokers](https://github.com/knightmare2600/shadowbrokers) Guides, Tools, Tips and such for working with the Shadow Brokers dumps
+- [**195**星][9m] [hannoch/scaner](https://github.com/hannoch/scaner) 开源扫描器的集合,包括子域枚举、数据库漏洞扫描器、弱密码或信息泄漏扫描器、端口扫描器、指纹扫描器以及其他大规模扫描仪、模块扫描器等。对于其他著名的扫描工具,如:awvs、nmap,w3af将不包含在集合范围内。
+- [**195**星][4m] [Ruby] [delvelabs/vane](https://github.com/delvelabs/vane) A GPL fork of the popular wordpress vulnerability scanner WPScan
+- [**195**星][2y] [Py] [cheetz/sslscrape](https://github.com/cheetz/sslscrape) SSLScrape | A scanning tool for scaping hostnames from SSL certificates.
+- [**195**星][1y] [C++] [cararasu/holodec](https://github.com/cararasu/holodec) Decompiler for x86 and x86-64 ELF binaries
+- [**195**星][4m] [Py] [boy-hack/hack-requests](https://github.com/boy-hack/hack-requests) 给黑客们使用的http底层网络库
+- [**195**星][3m] [Groovy] [alvarosanchez/grails-spring-security-rest](https://github.com/alvarosanchez/grails-spring-security-rest) Grails plugin to implement token-based, RESTful authentication using Spring Security
+- [**195**星][23d] [C] [aircrack-ng/mdk4](https://github.com/aircrack-ng/mdk4) a proof-of-concept tool to exploit common IEEE 802.11 protocol weaknesses.
+- [**195**星][3m] [04x/icg-autoexploiterbot](https://github.com/04x/icg-autoexploiterbot) Wordpress
+- [**194**星][2m] [Java] [trojan-gfw/igniter](https://github.com/trojan-gfw/igniter) A trojan client for Android (UNDER CONSTRUCTION).
+- [**194**星][11m] [Py] [hackatnow/djangohunter](https://github.com/hackatnow/djangohunter) Tool designed to help identify incorrectly configured Django applications that are exposing sensitive information.
+- [**194**星][7y] [Java] [nvisium-jack-mannino/owasp-goatdroid-project](https://github.com/nvisium-jack-mannino/OWASP-GoatDroid-Project) *This project is no longer maintained* OWASP GoatDroid is a fully functional and self-contained training environment for educating developers and testers on Android security. GoatDroid requires minimal dependencies and is ideal for both Android beginners as well as more advanced users. The project currently includes two applications: FourGoats, …
+- [**194**星][1y] [Rust] [genet-app/genet](https://github.com/genet-app/genet) 网络分析工具, 界面版, 跨平台
+- [**194**星][9m] [zardus/wargame-nexus](https://github.com/zardus/wargame-nexus) An sorted and updated list of security wargame sites.
+- [**194**星][3y] [Py] [xairy/mipt-ctf](https://github.com/xairy/mipt-ctf) A small course on CTF (wargames) for beginners [in Russian]
+- [**194**星][1y] [C++] [unapibageek/cbm](https://github.com/unapibageek/cbm) Car Backdoor Maker
+- [**194**星][10y] [Ruby] [sfeley/candy](https://github.com/sfeley/candy) Transparent persistence for MongoDB
+- [**194**星][2m] [PS] [sadprocessor/somestuff](https://github.com/sadprocessor/somestuff) Some PowerShell Stuff
+- [**194**星][8m] [Py] [ropnop/impacket_static_binaries](https://github.com/ropnop/impacket_static_binaries) Standalone binaries for Linux/Windows of Impacket's examples
+- [**194**星][5m] [C++] [panda-re/lava](https://github.com/panda-re/lava) 大规模自动化漏洞Addition工具
+- [**194**星][5y] [C#] [nccgroup/upnp-pentest-toolkit](https://github.com/nccgroup/upnp-pentest-toolkit) UPnP Pentest Toolkit for Windows
+- [**194**星][3y] [JS] [mhils/honeyproxy](https://github.com/mhils/honeyproxy) This project is now part of
+- [**194**星][8m] [Py] [lingerhk/hacking_script](https://github.com/lingerhk/hacking_script) 开发或收集的一些网络安全方面的脚本、小工具
+- [**194**星][3d] [Java] [ldtteam/minecolonies](https://github.com/ldtteam/minecolonies) Minecolonies minecraft mod
+- [**194**星][3m] [jdonsec/allthingsssrf](https://github.com/jdonsec/allthingsssrf) This is a collection of writeups, cheatsheets, videos, books related to SSRF in one single location
+- [**194**星][2y] [Py] [f3d0x0/gpon](https://github.com/f3d0x0/gpon) Exploit for Remote Code Execution on GPON home routers (CVE-2018-10562) written in Python. Initially disclosed by VPNMentor (
+- [**194**星][11m] [Visual Basic .NET] [dragokas/hijackthis](https://github.com/dragokas/hijackthis) A free utility that finds malware, adware and other security threats
+- [**194**星][5m] [Go] [cuishark/cuishark](https://github.com/cuishark/cuishark) A protocol analyzer like a wireshark on CUI. cuishark is using libwireshark to analyze packets.
+- [**194**星][11m] [JS] [comotion/vsf](https://github.com/comotion/vsf) Varnish Security Firewall
+- [**194**星][11m] [Py] [hackatnow/djangohunter](https://github.com/hackatnow/djangohunter) Tool designed to help identify incorrectly configured Django applications that are exposing sensitive information.
+- [**193**星][6m] [Shell] [suniceman/ss-fly](https://github.com/suniceman/ss-fly) 一键脚本搭建ss/ssr并开启bbr内核加速(Ubuntu/CentOS/Debian)
+- [**193**星][2y] [PS] [vysecurity/angrypuppy](https://github.com/vysecurity/ANGRYPUPPY) Bloodhound Attack Path Automation in CobaltStrike
+- [**193**星][1m] [ObjC] [ripperhe/debugo](https://github.com/ripperhe/Debugo)
+- [**193**星][2y] [Py] [abdulrah33m/cl0nemast3r](https://github.com/Abdulrah33m/Cl0neMast3r) Git all your favorite tools in one click
+- [**193**星][11m] [JS] [zer4tul/hacker-howto](https://github.com/zer4tul/hacker-howto) 本文原文由知名Hacker Eric S. Raymond 所撰写,教你如何成为一名黑客。
+- [**193**星][3m] [C++] [xortroll/emuiibo](https://github.com/xortroll/emuiibo) Virtual amiibo (amiibo emulation) system for Nintendo Switch
+- [**193**星][3y] [Go] [vesche/lonely-shell](https://github.com/vesche/lonely-shell) poc https reverse shell
+- [**193**星][9m] [Batchfile] [tai7sy/fuckcdn](https://github.com/tai7sy/fuckcdn) CDN真实IP扫描,易语言开发
+- [**193**星][11m] [Py] [scanlime/coastermelt](https://github.com/scanlime/coastermelt) An effort to make open source firmware for burning anything other than Blu-Ray data onto plastic discs with a BD-R drive.
+- [**193**星][1m] [Shell] [roddhjav/pass-tomb](https://github.com/roddhjav/pass-tomb) A pass extension that helps you to keep the whole tree of password encrypted inside a tomb.
+- [**193**星][3d] [CSS] [owasp/samm](https://github.com/owasp/samm)
+- [**193**星][4m] [C] [nowsecure/frida-cycript](https://github.com/nowsecure/frida-cycript) Cycript fork powered by Frida.
+- [**193**星][6m] [C++] [linushenze/keysteal](https://github.com/linushenze/keysteal) A macOS <= 10.14.3 Keychain exploit
+- [**193**星][1m] [Py] [joxeankoret/cosa-nostra](https://github.com/joxeankoret/cosa-nostra) Cosa Nostra, a FOSS graph based malware clusterization toolkit.
+- [**193**星][2m] [C#] [jakobbotsch/fuzzlyn](https://github.com/jakobbotsch/fuzzlyn) Fuzzer for the .NET toolchains, developed as a project for the 2018 Language-Based Security course at Aarhus University.
+- [**193**星][2m] [C++] [googleprojectzero/street-party](https://github.com/googleprojectzero/street-party) Street Party is a suite of tools that allows the RTP streams of video conferencing implementations to be viewed and modified.
+- [**193**星][1y] [Py] [frizb/bypassing-web-application-firewalls](https://github.com/frizb/bypassing-web-application-firewalls) A series of python scripts for generating weird character combinations for bypassing web application firewalls (WAF) and XSS blockers
+- [**193**星][2y] [Py] [francisck/danderspritz_docs](https://github.com/francisck/danderspritz_docs) The goal of this project is to examine, reverse, and document the different modules available in the Equation Group's DanderSpritz post-exploitation framework leaked by the ShadowBrokers
+- [**193**星][8m] [Py] [fastly/ftw](https://github.com/fastly/ftw) ftw:WAF 测试框架
+- [**193**星][1y] [C] [ehsahil/recon-my-way](https://github.com/ehsahil/recon-my-way) This repository created for personal use and added tools from my latest blog post.
+- [**193**星][9d] [JS] [dvandal/cryptonote-nodejs-pool](https://github.com/dvandal/cryptonote-nodejs-pool) Mining pool for all CryptoNote based coins using Cryptonight, Cryptonight Light and Cryptonight Heavy algorithms
+- [**193**星][3m] [Java] [derekbabb/cybersecurity](https://github.com/derekbabb/cybersecurity) A curriculum for a high school cyber security course.
+- [**193**星][6y] [C] [datasoft/honeyd](https://github.com/datasoft/honeyd) virtual honeypots
+- [**193**星][3y] [C#] [codeshark-dev/nofuserex](https://github.com/codeshark-dev/nofuserex) Free deobfuscator for ConfuserEx.
+- [**193**星][4y] [Clojure] [clojurewerkz/meltdown](https://github.com/clojurewerkz/meltdown) Clojure interface to Reactor, an event-driven programming and stream processing toolkit for the JVM
+- [**193**星][21d] [C] [cathugger/mkp224o](https://github.com/cathugger/mkp224o) vanity address generator for tor onion v3 (ed25519) hidden services
+- [**193**星][5m] [C++] [boyan-milanov/ropgenerator](https://github.com/boyan-milanov/ropgenerator) ROPGenerator is a tool that helps you building ROP exploits by finding and chaining gadgets together
+- [**193**星][2m] [Py] [auth0/auth0-python](https://github.com/auth0/auth0-python) All information regarding using Auth0 with Python
+- [**192**星][23d] [Go] [cruise-automation/k-rail](https://github.com/cruise-automation/k-rail) Kubernetes security tool for policy enforcement
+- [**192**星][4y] [Py] [isecpartners/libtech-auditing-cheatsheet](https://github.com/isecpartners/libtech-auditing-cheatsheet)
+- [**192**星][3y] [Ruby] [zed-0xff/pedump](https://github.com/zed-0xff/pedump) 转储PE文件,Ruby编写
+- [**192**星][2m] [Py] [unipacker/unipacker](https://github.com/unipacker/unipacker) Automatic and platform-independent unpacker for Windows binaries based on emulation
+- [**192**星][6y] [Py] [smeegesec/hashtag](https://github.com/smeegesec/hashtag) Password Hash Identification
+- [**192**星][4y] [C++] [mubix/netview](https://github.com/mubix/netview) Netview enumerates systems using WinAPI calls
+- [**192**星][2y] [Java] [mesosphere/cassandra-mesos-deprecated](https://github.com/mesosphere/cassandra-mesos-deprecated) [DEPRECATED] This project is deprecated. It will be archived on December 1, 2017.
+- [**192**星][1y] [Py] [malwaredllc/bamf](https://github.com/malwaredllc/bamf) BAMF (Backdoor Access Machine Farmer)
+- [**192**星][5m] [Go] [lc/secretz](https://github.com/lc/secretz) secretz, minimizing the large attack surface of Travis CI
+- [**192**星][1m] [Py] [lazza/recuperabit](https://github.com/lazza/recuperabit) A tool for forensic file system reconstruction.
+- [**192**星][11m] [C] [ionescu007/winipt](https://github.com/ionescu007/winipt) 利用Win10 1809添加的Intel处理器追踪功能进行进程追踪
+- [**192**星][8d] [Go] [google/certificate-transparency-go](https://github.com/google/certificate-transparency-go) Auditing for TLS certificates, Go code.
+- [**192**星][1m] [furrtek/dmg-cpu-inside](https://github.com/furrtek/dmg-cpu-inside) Reverse-engineered schematics for DMG-CPU-B
+- [**192**星][1y] [Py] [foospidy/dbdat](https://github.com/foospidy/dbdat) performs numerous checks on a database to evaluate security.
+- [**192**星][3m] [Py] [dionach/phemail](https://github.com/dionach/phemail) PhEmail is a python open source phishing email tool that automates the process of sending phishing emails as part of a social engineering test
+- [**192**星][2y] [Assembly] [cybereason/siofra](https://github.com/cybereason/siofra) a tool designed to identify and exploit DLL hijacking vulnerabilities in Windows programs
+- [**192**星][5y] [ActionScript] [cure53/flashbang](https://github.com/cure53/flashbang) Project "Flashbang" - An open-source Flash-security helper
+- [**192**星][2y] [C++] [caledoniaproject/xlcloudclient](https://github.com/caledoniaproject/xlcloudclient) 迅雷离线Linux客户端,多种漏洞利用 ;-P 大家慢慢挖掘吧 哈哈 觉得好就点下 Star / Fork 吧
+- [**192**星][2y] [Py] [brucetg/pentest-tools](https://github.com/brucetg/pentest-tools) 内网渗透工具
+- [**192**星][2y] [C] [bindecy/hugedirtycowpoc](https://github.com/bindecy/hugedirtycowpoc) A POC for the Huge Dirty Cow vulnerability (CVE-2017-1000405)
+- [**192**星][12m] [Py] [0xr0/shellver](https://github.com/0xr0/shellver) Reverse Shell Cheat Sheet TooL
+- [**191**星][2m] [Java] [tongxiji/shadowsocks-java](https://github.com/tongxiji/shadowsocks-java) shadowsocks server base on netty4 , tcp & udp full support,
+- [**191**星][3y] [Go] [koding/tunnel](https://github.com/koding/tunnel) Tunnel proxy package in Go
+- [**191**星][2y] [Java] [p3gleg/pwnback](https://github.com/P3GLEG/PwnBack) Burp Extender plugin that generates a sitemap of a website using Wayback Machine
+- [**191**星][1y] [HTML] [yaseng/iot-security-wiki](https://github.com/yaseng/iot-security-wiki) IOT security wiki
+- [**191**星][3y] [Py] [xyntax/dirbrute](https://github.com/xyntax/dirbrute) 多线程WEB目录爆破工具 [Multi-thread WEB directory blasting tool(with dics inside) ]
+- [**191**星][2y] [Py] [viralmaniar/wifi-dumper](https://github.com/viralmaniar/wifi-dumper) This is an open source tool to dump the wifi profiles and cleartext passwords of the connected access points on the Windows machine. This tool will help you in a Wifi penetration testing. Furthermore, it is useful while performing red team or an internal infrastructure engagements.
+- [**191**星][3m] [Shell] [unbinilium/twist](https://github.com/unbinilium/twist) A light script for you to setup shadowsocks-libev server with high-speed connections and newest powerful features
+- [**191**星][7m] [Py] [tintinweb/pub](https://github.com/tintinweb/pub) Vulnerability Notes, PoC Exploits and Write-Ups for security issues disclosed by tintinweb
+- [**191**星][20d] [Py] [skyscanner/lambdaguard](https://github.com/skyscanner/lambdaguard) AWS Serverless Security
+- [**191**星][2m] [JS] [sindresorhus/internal-ip](https://github.com/sindresorhus/internal-ip) Get your internal IP address
+- [**191**星][4m] [Py] [sham00n/buster](https://github.com/sham00n/buster) An advanced tool for email reconnaissance
+- [**191**星][4m] [ObjC] [riusksk/secconarchive](https://github.com/riusksk/secconarchive) Security Conference Archive
+- [**191**星][2m] [Py] [projectante/dnsgen](https://github.com/projectante/dnsgen) Generates combination of domain names from the provided input.
+- [**191**星][6m] [pochubs/pochubs](https://github.com/pochubs/pochubs) PocHubs是为了整合网上知名开源框架的漏洞详细和POC
+- [**191**星][2m] [onesecure/shadowagentnotes](https://github.com/onesecure/shadowagentnotes)
+- [**191**星][2m] [Py] [niklasrosenstein/pydoc-markdown](https://github.com/niklasrosenstein/pydoc-markdown) Create Python API documentation in Markdown format.
+- [**191**星][3m] [Py] [jrspruitt/ubi_reader](https://github.com/jrspruitt/ubi_reader) Collection of Python scripts for reading information about and extracting data from UBI and UBIFS images.
+- [**191**星][4y] [C++] [isecpartners/jailbreak](https://github.com/isecpartners/jailbreak) Jailbreak
+- [**191**星][2y] [PS] [gimini/mimidbg](https://github.com/gimini/mimidbg) PowerShell oneliner to retrieve wdigest passwords from the memory
+- [**191**星][26d] [Py] [ghostmanager/ghostwriter](https://github.com/ghostmanager/ghostwriter) The SpecterOps project management and reporting engine
+- [**191**星][7m] [Shell] [gaenserich/hostsblock](https://github.com/gaenserich/hostsblock) an ad- and malware-blocking script for Linux
+- [**191**星][4y] [HTML] [faber03/androidmalwareevaluatingtools](https://github.com/faber03/androidmalwareevaluatingtools) Evaluation tools for malware Android
+- [**191**星][7d] [Go] [esrrhs/pingtunnel](https://github.com/esrrhs/pingtunnel) a tool that advertises tcp/udp/sock5 traffic as icmp traffic for forwarding.流量转发工具.
+- [**191**星][11m] [Py] [emersonelectricco/fsf](https://github.com/emersonelectricco/fsf) File Scanning Framework
+- [**191**星][13d] [Shell] [drduh/purse](https://github.com/drduh/purse) GPG asymmetric (YubiKey) password manager
+- [**191**星][7m] [C] [andikleen/simple-pt](https://github.com/andikleen/simple-pt) Simple Intel CPU processor tracing on Linux
+- [**191**星][1y] [Py] [ak1t4/open-redirect-scanner](https://github.com/ak1t4/open-redirect-scanner) open-redirect-scanner:open redirect subdomains scanner
+- [**191**星][12m] [JS] [78778443/permeate](https://github.com/78778443/permeate) 一个用于渗透透测试演练的WEB系统,用于提升寻找网站能力,也可以用于web安全教学
+- [**190**星][17d] [Py] [skelsec/jackdaw](https://github.com/skelsec/jackdaw) gather gather gather
+- [**190**星][12m] [Py] [zerokeeper/webeye](https://github.com/zerokeeper/webeye) 快速简单地识别WEB服务器类型、CMS类型、WAF类型、WHOIS信息、以及语言框架的小脚本
+- [**190**星][9d] [JS] [xiaokanghub/frida-android-unpack](https://github.com/xiaokanghub/frida-android-unpack) this unpack script for Android O and Android P
+- [**190**星][3y] [C++] [wapiflapi/veles](https://github.com/wapiflapi/veles) Visual reverse engineering tool.
+- [**190**星][1y] [PHP] [smarttang/w3a_soc](https://github.com/smarttang/w3a_soc) Web日志审计与网络监控集合一身的平台
+- [**190**星][2m] [JS] [quarkslab/irma](https://github.com/quarkslab/irma) IRMA is an asynchronous & customizable analysis system for suspicious files.
+- [**190**星][2m] [Ruby] [philnash/pwned](https://github.com/philnash/pwned) An easy, Ruby way to use the Pwned Passwords API.
+- [**190**星][8m] [JS] [or3stis/apparatus](https://github.com/or3stis/apparatus) A graphical security analysis tool for IoT networks
+- [**190**星][2m] [noorqureshi/kali-linux-cheatsheet](https://github.com/noorqureshi/kali-linux-cheatsheet) Kali Linux Cheat Sheet for Penetration Testers
+- [**190**星][2y] [C] [nongiach/cve](https://github.com/nongiach/cve)
+- [**190**星][1y] [Py] [nettitude/scrounger](https://github.com/nettitude/scrounger) Mobile application testing toolkit
+- [**190**星][2y] [Py] [neex/gifoeb](https://github.com/neex/gifoeb) exploit for ImageMagick's uninitialized memory disclosure in gif coder
+- [**190**星][2y] [Py] [mxdg/passbytcp](https://github.com/mxdg/passbytcp) 内网 tcp 穿透
+- [**190**星][3m] [Py] [milo2012/metasploithelper](https://github.com/milo2012/metasploithelper) metasploitHelper
+- [**190**星][3m] [Shell] [lateralblast/lunar](https://github.com/lateralblast/lunar) A UNIX security auditing tool based on several security frameworks
+- [**190**星][4y] [JS] [isecpartners/introspy-analyzer](https://github.com/isecpartners/introspy-analyzer) a set of iOS and Android tools designed to help understand what an iOS or Android application is doing at runtime and assist in the identification of potential security issues.
+- [**190**星][12m] [Go] [gravitational/cve-2018-1002105](https://github.com/gravitational/cve-2018-1002105) Test utility for cve-2018-1002105
+- [**190**星][7m] [Py] [g0tmi1k/exe2hex](https://github.com/g0tmi1k/exe2hex) encodes an executable binary file into ASCII text format
+- [**190**星][7m] [Py] [corelan/windbglib](https://github.com/corelan/windbglib) Public repository for windbglib, a wrapper around pykd.pyd (for Windbg), used by mona.py
+- [**190**星][2y] [JS] [chichou/etacsufbo](https://github.com/chichou/etacsufbo) 基于 AST 变换的简易 Javascript 反混淆辅助工具
+- [**190**星][4y] [C++] [aslody/elfhook](https://github.com/aslody/elfhook) modify PLT to hook api, supported android 5\6.
+- [**190**星][6y] [Py] [andrewf/pcap2har](https://github.com/andrewf/pcap2har) A convertor from .pcap network capture files to HTTP Archive files.
+- [**190**星][9m] [Go] [0x4d31/honeybits](https://github.com/0x4d31/honeybits) A PoC tool designed to enhance the effectiveness of your traps by spreading breadcrumbs & honeytokens across your systems to lure the attacker toward your honeypots
+- [**189**星][2y] [Kotlin] [borisf/classyshark-bytecode-viewer](https://github.com/borisf/classyshark-bytecode-viewer) Browse your Java/Kotlin compiled code
+- [**189**星][2d] [Py] [duo-labs/parliament](https://github.com/duo-labs/parliament) AWS IAM linting library
+- [**189**星][9m] [JS] [noahziheng/ssr-helper](https://github.com/noahziheng/ssr-helper) A CLI helper of ShadowsocksR Python
+- [**189**星][2y] [C] [sud01oo/processinjection](https://github.com/sud01oo/ProcessInjection) Some ways to inject a DLL into a alive process
+- [**189**星][2y] [Py] [sheldoncoupeheure/autosqli](https://github.com/sheldoncoupeheure/AutoSQLi) An automatic SQL Injection tool which takes advantage of ~DorkNet~ Googler, Ddgr, WhatWaf and sqlmap.
+- [**189**星][5d] [Py] [ydkhatri/mac_apt](https://github.com/ydkhatri/mac_apt) macOS Artifact Parsing Tool
+- [**189**星][2y] [Go] [woj-ciech/osint](https://github.com/woj-ciech/osint)
+- [**189**星][8d] [Py] [webfp/tor-browser-selenium](https://github.com/webfp/tor-browser-selenium) Tor Browser automation with Selenium.
+- [**189**星][2y] [Py] [sherjilozair/dqn](https://github.com/sherjilozair/dqn) Basic DQN implementation
+- [**189**星][5y] [C++] [rwfpl/rewolf-x86-virtualizer](https://github.com/rwfpl/rewolf-x86-virtualizer) Simple VM based x86 PE (portable exectuable) protector.
+- [**189**星][1y] [Java] [rebeyond/memshell](https://github.com/rebeyond/memshell) a webshell resides in the memory of java web server
+- [**189**星][1m] [Py] [phype/telnet-iot-honeypot](https://github.com/phype/telnet-iot-honeypot) Python telnet honeypot for catching botnet binaries
+- [**189**星][13d] [Py] [mozillasecurity/grizzly](https://github.com/mozillasecurity/grizzly) A cross-platform browser fuzzing framework
+- [**189**星][8m] [Py] [m4ll0k/takeover](https://github.com/m4ll0k/takeover) 子域名漏洞扫描器
+- [**189**星][3y] [HTML] [liveoverflow/lo_nintendoswitch](https://github.com/liveoverflow/lo_nintendoswitch) Some of my PoC stuff for the Nintendo Switch
+- [**189**星][9m] [C++] [kelvinhack/khypervisor](https://github.com/kelvinhack/khypervisor) 适用于Windows的类似于bluepill的轻量级、嵌套VMM,提供并模拟英特尔VT-x的基本功能
+- [**189**星][4y] [Py] [jduck/cve-2015-1538-1](https://github.com/jduck/cve-2015-1538-1) An exploit for CVE-2015-1538-1 - Google Stagefright ‘stsc’ MP4 Atom Integer Overflow Remote Code Execution
+- [**189**星][7y] [C++] [hzphreak/vminjector](https://github.com/hzphreak/vminjector) DLL Injection tool to unlock guest VMs
+- [**189**星][1y] [Go] [floyernick/fleep-go](https://github.com/floyernick/fleep-go) 根据文件的"magic number"判定文件的格式, Go语言编写
+- [**189**星][6d] [OCaml] [fkie-cad/cwe_checker](https://github.com/fkie-cad/cwe_checker) cwe_checker finds vulnerable patterns in binary executables
+- [**189**星][2y] [PS] [cybereason/invoke-wmilm](https://github.com/cybereason/invoke-wmilm) a PoC script for various methods to acheive authenticated remote code execution via WMI
+- [**189**星][1m] [Shell] [controlplaneio/netassert](https://github.com/controlplaneio/netassert) Network security testing for DevSecOps workflows
+- [**189**星][3y] [Shell] [b3rito/yodo](https://github.com/b3rito/yodo) Local Privilege Escalation
+- [**189**星][5m] [PHP] [automattic/camptix](https://github.com/automattic/camptix) an easy to use and flexible event ticketing plugin created
+- [**189**星][2m] [ObjC] [alexxy/netdiscover](https://github.com/alexxy/netdiscover) a network address discovering tool
+- [**189**星][2m] [Py] [alainiamburg/sniffrom](https://github.com/alainiamburg/sniffrom) A tool for passive data capture and reconnaissance of serial flash chips. It is used in conjunction with a Saleae logic analyzer to reconstruct flash memory contents and extract contextual information about device operations.
+- [**188**星][1y] [Py] [thesecondsun/shellab](https://github.com/thesecondsun/shellab) Shellcode开发/丰富工具,支持Windows/Linux
+- [**188**星][2m] [Py] [scwuaptx/ctf](https://github.com/scwuaptx/ctf) Some CTF write up
+- [**188**星][4y] [Java] [ripe-ncc/hadoop-pcap](https://github.com/ripe-ncc/hadoop-pcap) Hadoop library to read packet capture (PCAP) files
+- [**188**星][4m] [C] [reswitched/libtransistor](https://github.com/reswitched/libtransistor) Open source toolchain for Switch development
+- [**188**星][4y] [Py] [paulsec/hqlmap](https://github.com/paulsec/hqlmap) (Deprecated) HQLmap, Automatic tool to exploit HQL injections
+- [**188**星][25d] [Py] [osquery/osquery-python](https://github.com/osquery/osquery-python) Python bindings for osquery's Thrift API
+- [**188**星][2y] [Perl] [moham3driahi/xbruteforcer](https://github.com/moham3driahi/xbruteforcer) X Brute Forcer Tool
+- [**188**星][4m] [Py] [milo2012/cve-2018-13379](https://github.com/milo2012/cve-2018-13379) CVE-2018-13379
+- [**188**星][2m] [Py] [matrix1001/welpwn](https://github.com/matrix1001/welpwn) make pwnning an art, freeing you from dozens of meaningless jobs
+- [**188**星][1y] [Py] [malwarereversebrasil/malwaresearch](https://github.com/malwarereversebrasil/malwaresearch) A command line tool to find malwares on http://openmalware.org
+- [**188**星][4y] [krmaxwell/coding-entertainment](https://github.com/krmaxwell/coding-entertainment) Puzzles, challenges, games, CTFs, and other entertainment via coding
+- [**188**星][1m] [Rust] [kpcyrd/badtouch](https://github.com/kpcyrd/badtouch) 可编程的网络验证破解的库, Rust编写
+- [**188**星][6y] [Java] [jsontest/jsontest](https://github.com/jsontest/jsontest) JSON Testing Service - JSONTest.com
+- [**188**星][2m] [Shell] [jagerzhang/cckiller](https://github.com/jagerzhang/cckiller) Linux轻量级CC攻击防御工具脚本
+- [**188**星][3m] [Py] [internetarchive/warcprox](https://github.com/internetarchive/warcprox) WARC writing MITM HTTP/S proxy
+- [**188**星][3y] [C] [hashcat/maskprocessor](https://github.com/hashcat/maskprocessor) High-Performance word generator with a per-position configureable charset
+- [**188**星][2m] [PHP] [gallopyd/domain-tool](https://github.com/gallopyd/domain-tool) 微信域名拦截检测、QQ域名拦截检测、域名Whois查询:
+- [**188**星][10m] [Haskell] [cifasis/quickfuzz](https://github.com/cifasis/quickfuzz) An experimental grammar fuzzer in Haskell using QuickCheck
+- [**188**星][2y] [C++] [ahxr/ghost](https://github.com/ahxr/ghost) a light RAT that gives the server/attacker full remote access to the user's command-line interprete
+- [**187**星][2m] [ObjC] [shadowsocksr-live/ssrmac](https://github.com/shadowsocksr-live/ssrmac) ShadowsocksR (SSR) client for macOS
+- [**187**星][16d] [PHP] [0blio/caesar](https://github.com/0blio/Caesar) An HTTP based RAT (Remote Administration Tool) that allows you to remotely control devices from your browser
+- [**187**星][3m] [Py] [swisskyrepo/damnwebscanner](https://github.com/swisskyrepo/damnwebscanner) Another web vulnerabilities scanner, this extension works on Chrome and Opera
+- [**187**星][3m] [slowmist/papers](https://github.com/slowmist/papers) SlowMist Vulnerability Research Advisories
+- [**187**星][17d] [Py] [rastating/shiva](https://github.com/rastating/shiva) An Ansible playbook to provision a host for penetration testing and CTF challenges
+- [**187**星][6m] [PS] [phink-team/cobaltstrike-ms17-010](https://github.com/phink-team/cobaltstrike-ms17-010) cobaltstrike ms17-010 module and some other
+- [**187**星][5y] [Ruby] [m4rco-/dorothy2](https://github.com/m4rco-/dorothy2) A malware/botnet analysis framework written in Ruby.
+- [**187**星][2y] [C] [laanwj/etna_viv](https://github.com/laanwj/etna_viv) Etnaviv is a project to build a FOSS driver for the Vivante GCxxx series of embedded GPUs - laanwj's personal fork - upstream is
+- [**187**星][2y] [Py] [kokjo/universalrop](https://github.com/kokjo/universalrop) universalrop:使用unicorn 和 z3 生成 ROP 链
+- [**187**星][14d] [Shell] [kalilinuxtricksyt/easysploit](https://github.com/kalilinuxtricksyt/easysploit) EasySploit - Metasploit automation (EASIER and FASTER than EVER)
+- [**187**星][2y] [Visual Basic .NET] [joesecurity/pafishmacro](https://github.com/joesecurity/pafishmacro) Pafish Macro is a Macro enabled Office Document to detect malware analysis systems and sandboxes. It uses evasion & detection techniques implemented by malicious documents.
+- [**187**星][1y] [Py] [he1m4n6a/findwebshell](https://github.com/he1m4n6a/findwebshell) findWebshell是一款基于python开发的webshell检测工具。
+- [**187**星][9m] [C#] [goldshtn/minidumper](https://github.com/goldshtn/minidumper) Write minidumps of .NET processes with full memory, only CLR heaps, or no memory at all
+- [**187**星][13d] [Ruby] [erwanlr/fingerprinter](https://github.com/erwanlr/fingerprinter) CMS/LMS/Library etc Versions Fingerprinter
+- [**187**星][3y] [Py] [droope/pwlist](https://github.com/droope/pwlist) Password lists obtained from strangers attempting to log in to my server.
+- [**187**星][3y] [Py] [drizzlerisk/tunpacker](https://github.com/drizzlerisk/tunpacker) TUnpacker是一款Android脱壳工具
+- [**187**星][2m] [Py] [danigargu/dereferencing](https://github.com/danigargu/dereferencing) 调试时寄存器和栈显示增强
+- [**187**星][7m] [JS] [antoinevastel/fpscanner](https://github.com/antoinevastel/fpscanner)
+- [**187**星][5d] [C] [aflgo/aflgo](https://github.com/aflgo/aflgo) Directed Greybox Fuzzing with AFL
+- [**186**星][1y] [bo0om/waf-bypass-cheat-sheet](https://github.com/bo0om/waf-bypass-cheat-sheet) Another way to bypass WAF Cheat Sheet (draft)
+- [**186**星][3y] [C] [tunz/afl-fuzz-js](https://github.com/tunz/afl-fuzz-js) afl-fuzz for javascript
+- [**186**星][1y] [Py] [ha3mrx/ddos-attack](https://github.com/ha3mrx/ddos-attack) DDos-Attack Is A Python script online Attack
+- [**186**星][4m] [Py] [ex0dus-0x/doxbox](https://github.com/ex0dus-0x/doxbox) web-based OSINT and reconaissance toolkit
+- [**186**星][3y] [Lua] [automayt/ics-pcap](https://github.com/automayt/ics-pcap) A collection of ICS/SCADA PCAPs
+- [**186**星][3y] [Py] [xyntax/filesensor](https://github.com/xyntax/filesensor) 基于爬虫的动态敏感文件探测工具
+- [**186**星][1y] [wooyundota/droiddrops](https://github.com/wooyundota/droiddrops) 梳理下自己之前写过的文章
+- [**186**星][3y] [Shell] [wismna/hackpi](https://github.com/wismna/hackpi) Hacking tool inside a Raspberry Pi zero
+- [**186**星][1m] [Shell] [tomdev/teh_s3_bucketeers](https://github.com/tomdev/teh_s3_bucketeers) S3 bucket 搜索引擎
+- [**186**星][3y] [PS] [sekirkity/browsergather](https://github.com/sekirkity/browsergather) Fileless web browser information extraction
+- [**186**星][6y] [C] [saelo/cve-2014-0038](https://github.com/saelo/cve-2014-0038) Linux local root exploit for CVE-2014-0038
+- [**186**星][5y] [Py] [rpp0/scapy-fakeap](https://github.com/rpp0/scapy-fakeap) Fake wireless Access Point (AP) implementation using Python and Scapy, intended for convenient testing of 802.11 protocols and implementations.
+- [**186**星][24d] [C] [rfc1036/whois](https://github.com/rfc1036/whois) Intelligent WHOIS client
+- [**186**星][8m] [offensive-security/cryptsetup-nuke-keys](https://github.com/offensive-security/cryptsetup-nuke-keys) A patch for cryptsetup which adds the option to nuke all keyslots given a certain passphrase.
+- [**186**星][4y] [Java] [netspi/weblogicpassworddecryptor](https://github.com/netspi/weblogicpassworddecryptor) PowerShell script and Java code to decrypt WebLogic passwords
+- [**186**星][6m] [ObjC] [nakiostudio/twitterx](https://github.com/nakiostudio/twitterx) Keeping Twitter for macOS alive with code injection
+- [**186**星][3y] [Ruby] [miketierney/artii](https://github.com/miketierney/artii) A small gem to generate ASCII art from text fed in to it
+- [**186**星][2d] [Rust] [insanitybit/grapl](https://github.com/insanitybit/grapl) Graph platform for Detection and Response
+- [**186**星][8m] [PS] [hansesecure/credgrap_ie_edge](https://github.com/hansesecure/credgrap_ie_edge) Extract stored credentials from Internet Explorer and Edge
+- [**186**星][1y] [Py] [d4vinci/pastejacker](https://github.com/d4vinci/pastejacker) Hacking systems with the automation of PasteJacking attacks.
+- [**185**星][3y] [Nginx] [awslabs/ecs-nginx-reverse-proxy](https://github.com/awslabs/ecs-nginx-reverse-proxy) Reference architecture for deploying Nginx on ECS, both as a basic static resource server, and as a reverse proxy in front of a dynamic application server.
+- [**185**星][3y] [Py] [f-secure/mittn](https://github.com/f-secure/mittn) Mittn: Security test tool runner for test automation in CI
+- [**185**星][8m] [Rust] [nebgnahz/cv-rs](https://github.com/nebgnahz/cv-rs) Rust wrapper for OpenCV (manual at this point)
+- [**185**星][4m] [C++] [chrisps/hexext](https://github.com/chrisps/Hexext) 通过操作microcode, 优化反编译器的数据
+- [**185**星][1y] [yellowbyte/analysis-of-anti-analysis](https://github.com/yellowbyte/analysis-of-anti-analysis) writings on anti-reverse engineering
+- [**185**星][7y] [CoffeeScript] [shadowsocks/shadowsocks-dotcloud](https://github.com/shadowsocks/shadowsocks-dotcloud) a port of shadowsocks via websockets protocol, able to tunnel through HTTP proxy
+- [**185**星][2y] [Py] [savio-code/ghost-phisher](https://github.com/savio-code/ghost-phisher) 带 GUI的钓鱼工具
+- [**185**星][3y] [pwnsdx/badcode](https://github.com/pwnsdx/badcode) (Discontinued) BadCode is a signature database for static source code scanner that identify bad security practices.
+- [**185**星][2y] [Py] [ninijay/pycurity](https://github.com/ninijay/pycurity) Python Security Scripts
+- [**185**星][5y] [C++] [nihilus/scyllahide](https://github.com/nihilus/scyllahide) 用户模式反-反调试
+- [**185**星][6y] [mynameismeerkat/pyretic](https://github.com/mynameismeerkat/pyretic) pyREtic is an extensible framework for in-memory Python bytecode reverse engineering
+- [**185**星][1y] [Py] [mr-un1k0d3r/unibyav](https://github.com/mr-un1k0d3r/unibyav)
+- [**185**星][6m] [Py] [lijiejie/idea_exploit](https://github.com/lijiejie/idea_exploit) Gather sensitive information from (.idea) folder for pentesters
+- [**185**星][1y] [Py] [hexhive/t-fuzz](https://github.com/hexhive/t-fuzz)
+- [**185**星][12m] [PS] [felixweyne/processspawncontrol](https://github.com/felixweyne/processspawncontrol) a Powershell tool which aims to help in the behavioral (process) analysis of malware. PsC suspends newly launched processes, and gives the analyst the option to either keep the process suspended, or to resume it.
+- [**185**星][3y] [Go] [eahydra/socks](https://github.com/eahydra/socks) socks -- a proxy server.
+- [**185**星][6y] [Py] [danmcinerney/dnsspoof](https://github.com/danmcinerney/dnsspoof) DNS spoofer. Drops DNS responses from the router and replaces it with the spoofed DNS response
+- [**185**星][2d] [Py] [certcc/certfuzz](https://github.com/certcc/certfuzz) This project contains the source code for the CERT Basic Fuzzing Framework (BFF) and the CERT Failure Observation Engine (FOE).
+- [**185**星][7m] [Java] [bypass007/nessus_to_report](https://github.com/bypass007/nessus_to_report) Nessus中文报告自动化脚本
+- [**185**星][3y] [Py] [andy10101/apkdetecter](https://github.com/andy10101/apkdetecter) Android Apk查壳工具及源代码
+- [**185**星][3y] [ObjC] [alonemonkey/macreverse](https://github.com/alonemonkey/macreverse) MacReverse Tools and Demo
+- [**184**星][8m] [offensive-security/nethunter-devices](https://github.com/offensive-security/nethunter-devices) NetHunter Devices
+- [**184**星][1y] [PHP] [yaofeifly/vub_env](https://github.com/yaofeifly/vub_env) 跟踪真实漏洞相关靶场环境搭建
+- [**184**星][2y] [PS] [xtr4nge/fruityc2](https://github.com/xtr4nge/fruityc2) FruityC2 is a post-exploitation (and open source) framework based on the deployment of agents on compromised machines. Agents are managed from a web interface under the control of an operator.
+- [**184**星][3m] [Py] [stixproject/python-stix](https://github.com/stixproject/python-stix) A Python library for parsing, manipulating, and generating STIX content.
+- [**184**星][5m] [JS] [s0md3v/quark](https://github.com/s0md3v/quark) Quark is a data visualization framework.
+- [**184**星][24d] [Py] [rhinosecuritylabs/ccat](https://github.com/rhinosecuritylabs/ccat) Cloud Container Attack Tool (CCAT) is a tool for testing security of container environments.
+- [**184**星][3y] [CSS] [r00tkillah/horsepill](https://github.com/r00tkillah/horsepill) a PoC of a ramdisk based containerizing root kit
+- [**184**星][2m] [Py] [pure-l0g1c/loki](https://github.com/pure-l0g1c/loki) Remote Access Tool/Botnet
+- [**184**星][2m] [Py] [naategh/pyck](https://github.com/naategh/pyck) A collection of useful Python hacking scripts for beginners
+- [**184**星][2y] [C++] [killvxk/disablewin10patchguardpoc](https://github.com/killvxk/disablewin10patchguardpoc) pseudo-code to show how to disable patchguard with win10
+- [**184**星][3y] [Shell] [jivoi/openssh-backdoor-kit](https://github.com/jivoi/openssh-backdoor-kit)
+- [**184**星][2d] [Go] [getlantern/lantern](https://github.com/getlantern/lantern) Lantern官方版本下载 蓝灯 翻墙 科学上网 外网 加速器 梯子 路由 lantern censorship-circumvention censorship gfw vpn accelerator
+- [**184**星][1y] [C++] [fuwaneko/node-protobuf](https://github.com/fuwaneko/node-protobuf) Google Protocol Buffers wrapper for Node.js [UNMAINTAINED]
+- [**184**星][3d] [enovella/tee-reversing](https://github.com/enovella/tee-reversing) A curated list of public TEE resources for learning how to reverse-engineer and achieve trusted code execution on ARM devices
+- [**184**星][3y] [Pascal] [bowlofstew/rootkit.com](https://github.com/bowlofstew/rootkit.com) Mirror of users section of rootkit.com
+- [**184**星][20d] [C++] [blackint3/openark](https://github.com/blackint3/openark) 反Rootkit工具(Windows)
+- [**184**星][2d] [Go] [asciimoo/morty](https://github.com/asciimoo/morty) morty:去除恶意HTML标签和属性,去除外部资源引用以防止第三方信息泄露
+- [**183**星][3d] [C#] [carlospolop/privilege-escalation-awesome-scripts-suite](https://github.com/carlospolop/privilege-escalation-awesome-scripts-suite) PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
+- [**183**星][1y] [Perl] [portswigger/upload-scanner](https://github.com/portswigger/upload-scanner) HTTP file upload scanner for Burp Proxy
+- [**183**星][10d] [Lua] [kuoruan/luci-app-v2ray](https://github.com/kuoruan/luci-app-v2ray) LuCI support for V2Ray
+- [**183**星][2m] [Py] [angr/pyvex](https://github.com/angr/pyvex) Python bindings for Valgrind's VEX IR.
+- [**183**星][4y] [Py] [xen0ph0n/virustotal_api_tool](https://github.com/xen0ph0n/virustotal_api_tool) A Tool To Leverage Virus Total's Private API Key
+- [**183**星][26d] [C] [wizardmac/readstat](https://github.com/wizardmac/readstat) Command-line tool (+ C library) for converting SAS, Stata, and SPSS files
+- [**183**星][2y] [Py] [wavestone-cdt/hadoop-attack-library](https://github.com/wavestone-cdt/hadoop-attack-library) A collection of pentest tools and resources targeting Hadoop environments
+- [**183**星][2m] [Ruby] [tresacton/dspectrumgui](https://github.com/tresacton/dspectrumgui) The goal of this app is to make it trivial to demodulate most basic RF transmission, and provide a digital worksheet for your reverse engineering efforts.
+- [**183**星][2y] [Smali] [sslab-gatech/avpass](https://github.com/sslab-gatech/avpass) Tool for leaking and bypassing Android malware detection system
+- [**183**星][1y] [C++] [sidechannelmarvels/tracer](https://github.com/sidechannelmarvels/tracer) Set of Dynamic Binary Instrumentation and visualization tools for execution traces.
+- [**183**星][2m] [Java] [sensepost/mallet](https://github.com/sensepost/mallet) Mallet is an intercepting proxy for arbitrary protocols
+- [**183**星][10m] [sapphirex00/threat-hunting](https://github.com/sapphirex00/threat-hunting) Personal compilation of APT malware from whitepaper releases, documents and own research
+- [**183**星][5m] [Py] [s0md3v/orbit](https://github.com/s0md3v/orbit) Blockchain Transactions Investigation Tool
+- [**183**星][4y] [rmusser01/cheatsheets](https://github.com/rmusser01/cheatsheets) Penetration Testing/Security Cheatsheets
+- [**183**星][3m] [radareorg/r2con](https://github.com/radareorg/r2con) Radare Congress Stuff
+- [**183**星][10m] [Py] [r4stl1n/ssh-brute-forcer](https://github.com/r4stl1n/ssh-brute-forcer) A Simple Multi-Threaded SSH Brute Forcer
+- [**183**星][2y] [Py] [plazmaz/lnkup](https://github.com/plazmaz/lnkup) Generates malicious LNK file payloads for data exfiltration
+- [**183**星][2y] [Go] [petercunha/goat](https://github.com/petercunha/goat) a trojan created in Go, using Twitter as a the C&C server
+- [**183**星][2y] [Py] [paulsec/api-dnsdumpster.com](https://github.com/paulsec/api-dnsdumpster.com) (Unofficial) Python API for
+- [**183**星][3d] [Py] [mzfr/liffy](https://github.com/mzfr/liffy) Local file inclusion exploitation tool
+- [**183**星][3y] [Py] [misterch0c/firminator_backend](https://github.com/misterch0c/firminator_backend) The first open source vulnerability scanner for firmwares
+- [**183**星][2y] [Py] [joxeankoret/cve-2017-7494](https://github.com/joxeankoret/cve-2017-7494) Remote root exploit for the SAMBA CVE-2017-7494 vulnerability
+- [**183**星][2y] [C#] [ioncodes/dnpatch](https://github.com/ioncodes/dnpatch) .NET Patcher library using dnlib
+- [**183**星][9d] [CSS] [hongkonggong/tldr-digital-security](https://github.com/hongkonggong/tldr-digital-security) TLDR Digital Safety Checklist
+- [**183**星][3y] [Py] [hatbashbr/shodanhat](https://github.com/hatbashbr/shodanhat) search for hosts info with shodan
+- [**183**星][30d] [feeicn/securityinterviewquestions](https://github.com/feeicn/securityinterviewquestions) 网络信息安全从业者面试指南(持续补充各公司招聘题目和侧重点)
+- [**183**星][5m] [XSLT] [ernw/nmap-parse-output](https://github.com/ernw/nmap-parse-output) Converts/manipulates/extracts data from a Nmap scan output.
+- [**183**星][11m] [Py] [crowecybersecurity/ad-ldap-enum](https://github.com/crowecybersecurity/ad-ldap-enum) An LDAP based Active Directory user and group enumeration tool
+- [**183**星][3d] [C#] [carlospolop/privilege-escalation-awesome-scripts-suite](https://github.com/carlospolop/privilege-escalation-awesome-scripts-suite) PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
+- [**183**星][4y] [Py] [breenmachine/dnsftp](https://github.com/breenmachine/dnsftp) Client/Server scripts to transfer files over DNS. Client scripts are small and only use native tools on the host OS.
+- [**183**星][2y] [C#] [bhdresh/lazykatz](https://github.com/bhdresh/lazykatz) Lazykatz is an automation developed to extract credentials from remote targets protected with AV and/or application whitelisting software.
+- [**183**星][6m] [Py] [3xp10it/xcdn](https://github.com/3xp10it/xcdn) Try to find out the real ip behind cdn
+- [**182**星][7d] [Py] [aas-n/spraykatz](https://github.com/aas-n/spraykatz) A tool to spray love around the world.
+- [**182**星][3y] [CSS] [kali-docs-cn/kali-linux-cookbook-zh](https://github.com/kali-docs-cn/kali-linux-cookbook-zh)
+- [**182**星][4y] [C++] [zecure/shadowd](https://github.com/zecure/shadowd) The Shadow Daemon web application firewall server
+- [**182**星][10m] [Py] [welchbj/bscan](https://github.com/welchbj/bscan) an asynchronous target enumeration tool
+- [**182**星][2m] [Py] [vector35/community-plugins](https://github.com/vector35/community-plugins) Repository for community provided Binary Ninja plugins
+- [**182**星][6m] [Java] [spring-io/nohttp](https://github.com/spring-io/nohttp) A project for ensuring that https is used
+- [**182**星][7m] [Py] [s0md3v/bolt](https://github.com/s0md3v/bolt) CSRF Scanner
+- [**182**星][2m] [C++] [rumpkernel/rumprun-packages](https://github.com/rumpkernel/rumprun-packages) Ready-made packages of software for running on the Rumprun unikernel
+- [**182**星][1y] [Rust] [rabbitstack/rabbitc](https://github.com/rabbitstack/rabbitc) Micro container runtime
+- [**182**星][7m] [C] [owasp/igoat-swift](https://github.com/owasp/igoat-swift) OWASP iGoat (Swift) - A Damn Vulnerable Swift Application for iOS
+- [**182**星][2m] [noraj/oscp-exam-report-template-markdown](https://github.com/noraj/oscp-exam-report-template-markdown) OSCP Exam Report Template in Markdown
+- [**182**星][16d] [Py] [natlas/natlas](https://github.com/natlas/natlas) Scaling Network Scanning. Changes prior to 1.0 may cause difficult to avoid backwards incompatibilities. You've been warned.
+- [**182**星][7d] [Go] [milo2012/pathbrute](https://github.com/milo2012/pathbrute) 服务器目录/文件爆破工具
+- [**182**星][6m] [Py] [metachar/mercury](https://github.com/metachar/mercury) Mercury is a hacking tool used to collect information and use the information to further hurt the target
+- [**182**星][5y] [knoy/icloudhacker](https://github.com/knoy/icloudhacker) Arduino code to brute force Macbook's 4-digit iCloud PINs
+- [**182**星][7d] [Py] [jpcertcc/malconfscan](https://github.com/jpcertcc/malconfscan) Volatility plugin for extracts configuration data of known malware
+- [**182**星][5m] [C++] [jackullrich/shellcodestdio](https://github.com/jackullrich/shellcodestdio) 辅助编写Windows平台的位置无关Shellcode,支持x86/x64
+- [**182**星][3m] [Py] [j3ssie/iposint](https://github.com/j3ssie/iposint)
+- [**182**星][5y] [C] [gdbinit/onyx-the-black-cat](https://github.com/gdbinit/onyx-the-black-cat) Kernel extension to disable anti-debug tricks and other useful XNU "features"
+- [**182**星][3y] [Py] [cldrn/rainmap-lite](https://github.com/cldrn/rainmap-lite) Web界面,从浏览器中启动Nmap扫描. 界面是响应式, 可在手机/平板/PC浏览器中使用
+- [**182**星][4y] [Pascal] [chiggins/malware_sources](https://github.com/chiggins/malware_sources) I found all of these samples on MalwareTech through Twitter somewhere
+- [**182**星][1y] [Dockerfile] [cboin/re_lab](https://github.com/cboin/re_lab) 包含一些逆向工具的Docker容器
+- [**182**星][2m] [Py] [carlashley/tccprofile](https://github.com/carlashley/tccprofile) Creates a TCC profile for new Privacy Payloads in macOS Mojave
+- [**182**星][11m] [Py] [boy-hack/gwhatweb](https://github.com/boy-hack/gwhatweb) 网站CMS识别
+- [**182**星][5y] [Py] [bishopfox/rickmote](https://github.com/bishopfox/rickmote) The Rickmote Controller: Hijack TVs using Google Chromecast
+- [**182**星][2y] [PS] [absolomb/windowsenum](https://github.com/absolomb/windowsenum) A Powershell Privilege Escalation Enumeration Script.
+- [**182**星][5m] [Py] [abdulgaphy/r3con1z3r](https://github.com/abdulgaphy/r3con1z3r) R3con1z3r is a lightweight Web information gathering tool with an intuitive features written in python. it provides a powerful environment in which open source intelligence (OSINT) web-based footprinting can be conducted quickly and thoroughly.
+- [**182**星][10m] [Py] [0x27/ciscorv320dump](https://github.com/0x27/ciscorv320dump) CVE-2019-1652 /CVE-2019-1653 Exploits For Dumping Cisco RV320 Configurations & Debugging Data AND Remote Root Exploit!
+- [**182**星][4y] [Py] [0vercl0k/z3-playground](https://github.com/0vercl0k/z3-playground) A repository to store Z3-python scripts you can use as examples, reminders, whatever.
+- [**181**星][8m] [shadowsocks/papers](https://github.com/shadowsocks/papers) List of papers related to shadowsocks
+- [**181**星][2y] [Py] [0x09al/wordsteal](https://github.com/0x09AL/WordSteal) This script will create a POC that will steal NTML hashes from a remote computer. Do not use this for illegal purposes.The author does not keep responsibility for any illegal action you do.
+- [**181**星][16d] [TS] [tensult/cloud-reports](https://github.com/tensult/cloud-reports) Scans your AWS cloud resources and generates reports. Check out free hosted version:
+- [**181**星][1m] [Go] [staaldraad/xxeserv](https://github.com/staaldraad/xxeserv) A mini webserver with FTP support for XXE payloads
+- [**181**星][2y] [spacehuhn/arduinoarpspoof](https://github.com/spacehuhn/arduinoarpspoof) Kicks out everyone in your LAN via with an enc28j60 ethernet controller and Arduino.
+- [**181**星][1m] [Py] [so87/oscp-pwk](https://github.com/so87/oscp-pwk) This is my cheatsheet and scripts developed while taking the Offensive Security Penetration Testing with Kali Linux course.
+- [**181**星][2y] [C#] [ryhanson/externalc2](https://github.com/ryhanson/externalc2) A library for integrating communication channels with the Cobalt Strike External C2 server
+- [**181**星][10m] [Py] [riramar/hsecscan](https://github.com/riramar/hsecscan) A security scanner for HTTP response headers.
+- [**181**星][8m] [lucifer1993/cmsprint](https://github.com/lucifer1993/cmsprint) CMS和中间件指纹库
+- [**181**星][3y] [C] [kriswebdev/android_aircrack](https://github.com/kriswebdev/android_aircrack) Aircrack-ng command-line for Android. Binaries & source.
+- [**181**星][6m] [Py] [keithjjones/hostintel](https://github.com/keithjjones/hostintel) A modular Python application to collect intelligence for malicious hosts.
+- [**181**星][5y] [jasonqng/chinese-keywords](https://github.com/jasonqng/chinese-keywords) Collected sensitive Chinese keywords from various sources; for censorship testing and searching for sensitive content
+- [**181**星][4y] [C++] [jacob-baines/elfparser](https://github.com/jacob-baines/elfparser) Cross Platform ELF analysis
+- [**181**星][2m] [Go] [hehnope/slurp](https://github.com/hehnope/slurp) Evaluate the security of S3 buckets
+- [**181**星][8d] [Py] [fireeye/pwnauth](https://github.com/fireeye/pwnauth)
+- [**181**星][2m] [Py] [eth-sri/debin](https://github.com/eth-sri/debin) Machine Learning to Deobfuscate Binaries
+- [**181**星][2m] [Py] [delvelabs/tachyon](https://github.com/delvelabs/tachyon) Fast http dead file finder.
+- [**181**星][5y] [C++] [darkwallet/darkleaks](https://github.com/darkwallet/darkleaks) Decentralised Information Black Market
+- [**181**星][3y] [Py] [ctxis/wsuspect-proxy](https://github.com/ctxis/wsuspect-proxy) WSUSpect Proxy - a tool for MITM'ing insecure WSUS connections
+- [**181**星][2y] [PS] [cobbr/obfuscatedempire](https://github.com/cobbr/obfuscatedempire) ObfuscatedEmpire is a fork of Empire with Invoke-Obfuscation integrated directly into it's functionality.
+- [**181**星][3y] [Py] [anantshri/svn-extractor](https://github.com/anantshri/svn-extractor) simple script to extract all web resources by means of .SVN folder exposed over network.
+- [**181**星][3y] [Py] [4w4k3/repy2exe](https://github.com/4w4k3/repy2exe) A Reverse Engineering Tool for py2exe applications.
+- [**180**星][9d] [Py] [absozed/dockerpwn.py](https://github.com/absozed/dockerpwn.py) Python automation of Docker.sock abuse
+- [**180**星][7m] [Go] [knownsec/gsm](https://github.com/knownsec/gsm) 使用树莓派配合硬件来进行短信转发
+- [**180**星][12m] [C++] [zsshen/probedroid](https://github.com/zsshen/probedroid) A SDK for the creation of analysis tools without obtaining app source code in order to profile runtime performance, examine code coverage, and track high-risk behaviors of a given app on Android 5.0 and above.
+- [**180**星][7m] [Java] [yubico/ykneo-openpgp](https://github.com/yubico/ykneo-openpgp) OpenPGP applet for the YubiKey NEO
+- [**180**星][27d] [Py] [the-useless-one/pywerview](https://github.com/the-useless-one/pywerview) A (partial) Python rewriting of PowerSploit's PowerView
+- [**180**星][2y] [Py] [tenrec-builders/pi-scan](https://github.com/tenrec-builders/pi-scan) Pi Scan is a simple, robust capture appliance for book scanners. It runs on a Raspberry Pi 2.
+- [**180**星][5d] [Py] [tarcisio-marinho/gonnacry](https://github.com/tarcisio-marinho/gonnacry) A Linux Ransomware
+- [**180**星][3m] [Py] [spiderlabs/ikeforce](https://github.com/spiderlabs/ikeforce)
+- [**180**星][2y] [Py] [solusipse/spectrology](https://github.com/solusipse/spectrology) Images to audio files with corresponding spectrograms encoder.
+- [**180**星][3m] [C#] [rasta-mouse/amsiscanbufferbypass](https://github.com/rasta-mouse/amsiscanbufferbypass) Circumvent AMSI by patching AmsiScanBuffer
+- [**180**星][5m] [PS] [phillips321/adaudit](https://github.com/phillips321/adaudit) 自动域名审计
+- [**180**星][22d] [JS] [nowsecure/node-applesign](https://github.com/nowsecure/node-applesign) NodeJS module and commandline utility for re-signing iOS applications (IPA files).
+- [**180**星][2y] [Py] [nopernik/sshpry2.0](https://github.com/nopernik/sshpry2.0) SSHPry v2 - Spy & Control os SSH Connected client's TTY
+- [**180**星][4d] [Py] [misp/misp-galaxy](https://github.com/misp/misp-galaxy) Clusters and elements to attach to MISP events or attributes (like threat actors)
+- [**180**星][8m] [C#] [marx-yu/wopihost](https://github.com/marx-yu/wopihost) Office Online Server Wopi Host implement, No need Cobalt. Support DOCX, XLSX, PPTX online editing.
+- [**180**星][2y] [PHP] [lcatro/php-webshell-bypass-waf](https://github.com/lcatro/php-webshell-bypass-waf) 分享PHP WebShell 绕过WAF 的一些经验 Share some experience about PHP WebShell bypass WAF and Anti-AV
+- [**180**星][1m] [Py] [joxeankoret/idamagicstrings](https://github.com/joxeankoret/idamagicstrings) 从字符串常量中提取信息
+- [**180**星][2y] [Py] [jeffxue/web-log-parser](https://github.com/jeffxue/web-log-parser) web日志分析工具
+- [**180**星][2y] [Shell] [ha71/whatcms](https://github.com/ha71/whatcms) CMS Detection and Exploit Kit based on Whatcms.org API
+- [**180**星][4y] [JS] [gamexg/shadowsocks_admin](https://github.com/gamexg/shadowsocks_admin) 一个 shadowsocks 服务器多账号管理系统,后端使用 shadowsocks-go 。支持多节点、流量限制等功能。
+- [**180**星][1y] [Py] [fnk0c/cangibrina](https://github.com/fnk0c/cangibrina) A fast and powerfull dashboard (admin) finder
+- [**180**星][6d] [PHP] [divineomega/password_exposed](https://github.com/divineomega/password_exposed)
+- [**179**星][4y] [Py] [offlinemark/poet](https://github.com/offlinemark/poet) Post-exploitation tool
+- [**179**星][12m] [Shell] [thelinuxchoice/locator](https://github.com/thelinuxchoice/locator) Geolocator, Ip Tracker, Device Info by URL (Serveo and Ngrok)
+- [**179**星][6m] [Py] [fox-it/cve-2019-1040-scanner](https://github.com/fox-it/cve-2019-1040-scanner)
+- [**179**星][4y] [Py] [offlinemark/poet](https://github.com/offlinemark/poet) Post-exploitation tool
+- [**179**星][4m] [TeX] [hackl/tikz-network](https://github.com/hackl/tikz-network) A tool to visualize complex networks in LaTeX
+- [**179**星][22d] [Py] [yelp/py_zipkin](https://github.com/yelp/py_zipkin) Provides utilities to facilitate the usage of Zipkin in Python
+- [**179**星][3y] [Py] [videns/vulners-scanner](https://github.com/videns/vulners-scanner) Vulnerability scanner based on vulners.com audit API
+- [**179**星][5m] [C] [therealsaumil/static-arm-bins](https://github.com/therealsaumil/static-arm-bins) 静态编译的arm二进制文件, 用于调试和运行时分析
+- [**179**星][9m] [Py] [spamscope/spamscope](https://github.com/spamscope/spamscope) Fast Advanced Spam Analysis Tool
+- [**179**星][12d] [Shell] [silverpoision/rock-on](https://github.com/silverpoision/rock-on) Rock-On is a all in one Recon tool that will just get a single entry of the Domain name and do all of the work alone.
+- [**179**星][2d] [Py] [rndinfosecguy/scavenger](https://github.com/rndinfosecguy/scavenger) Crawler (Bot) searching for credential leaks on different paste sites.
+- [**179**星][3y] [Py] [redteamsecurity/autonessus](https://github.com/redteamsecurity/autonessus) This script communicates with the Nessus API in an attempt to help with automating scans. Depending on the flag issued with the script, you can list all scans, list all policies, start, stop, pause, and resume a scan.
+- [**179**星][1m] [Py] [nolze/msoffcrypto-tool](https://github.com/nolze/msoffcrypto-tool) Python tool and library for decrypting MS Office files with passwords or other keys
+- [**179**星][4y] [Shell] [nccgroup/cisco-snmp-enumeration](https://github.com/nccgroup/cisco-snmp-enumeration) Automated Cisco SNMP Enumeration, Brute Force, Configuration Download and Password Cracking
+- [**179**星][4y] [Py] [offlinemark/poet](https://github.com/offlinemark/poet) Post-exploitation tool
+- [**179**星][13d] [Py] [meliht/mr.sip](https://github.com/meliht/mr.sip) SIP-Based Audit and Attack Tool
+- [**179**星][2y] [Shell] [malaohu/ssr-with-net-speeder](https://github.com/malaohu/ssr-with-net-speeder) Shadowsocksr with net speeder
+- [**179**星][7m] [kaonashi-passwords/kaonashi](https://github.com/kaonashi-passwords/kaonashi) Wordlist, rules and masks from Kaonashi project (RootedCON 2019)
+- [**179**星][4y] [ObjC] [iosre/hippocamphairsalon](https://github.com/iosre/hippocamphairsalon) A simple universal memory editor (game trainer) on OSX/iOS
+- [**179**星][4m] [Py] [hanul93/kicomav](https://github.com/hanul93/kicomav) KicomAV is an open source (GPL v2) antivirus engine designed for detecting malware and disinfecting it.
+- [**179**星][2m] [C++] [google/libprotobuf-mutator](https://github.com/google/libprotobuf-mutator) Library for structured fuzzing with protobuffers
+- [**179**星][6y] [C] [devttys0/littleblackbox](https://github.com/devttys0/littleblackbox) Database of private SSL/SSH keys for embedded devices
+- [**179**星][4m] [Py] [blackarch/wordlistctl](https://github.com/blackarch/wordlistctl) Fetch, install and search wordlist archives from websites and torrent peers.
+- [**179**星][7m] [C++] [arsenalrecon/arsenal-image-mounter](https://github.com/arsenalrecon/arsenal-image-mounter) Arsenal Image Mounter mounts the contents of disk images as complete disks in Microsoft Windows.
+- [**179**星][3m] [Py] [anssi-fr/secuml](https://github.com/anssi-fr/secuml) Machine Learning for Computer Security
+- [**179**星][11m] [Py] [acceis/leakscraper](https://github.com/acceis/leakscraper) LeakScraper is an efficient set of tools to process and visualize huge text files containing credentials. Theses tools are designed to help penetration testers and redteamers doing OSINT by gathering credentials belonging to their target.
+- [**179**星][20d] [JS] [0vercl0k/cve-2019-9810](https://github.com/0vercl0k/cve-2019-9810) Exploit for CVE-2019-9810 Firefox on Windows 64-bit.
+- [**178**星][11m] [zekesnider/nintendoswitchrestapi](https://github.com/zekesnider/nintendoswitchrestapi) Reverse engineered REST API used in the Nintendo Switch app for iOS. Includes documentation on Splatoon 2's API.
+- [**178**星][4y] [ObjC] [x43x61x69/otx](https://github.com/x43x61x69/otx) The Mach-O disassembler. Now 64bit and Xcode 6 compatible.
+- [**178**星][3m] [C] [soxrok2212/pskracker](https://github.com/soxrok2212/pskracker) An all-in-one WPA/WPS toolkit
+- [**178**星][1y] [PS] [samratashok/admodule](https://github.com/samratashok/admodule) Microsoft signed ActiveDirectory PowerShell module
+- [**178**星][2y] [C] [phoenixos/kernel](https://github.com/phoenixos/kernel) PhoenixOS Kernel Open Source Code
+- [**178**星][8m] [pandazheng/threat-intelligence-analyst](https://github.com/pandazheng/threat-intelligence-analyst) 威胁情报,恶意样本分析,开源Malware代码收集
+- [**178**星][2y] [Swift] [nvisium/swift.nv](https://github.com/nvisium/swift.nv) Security Training Tool that demonstrates common mobile application vulnerabilities using Swift in iOS
+- [**178**星][6m] [C] [neurodroid/cryptonite](https://github.com/neurodroid/cryptonite) EncFS and TrueCrypt on Android
+- [**178**星][2y] [Py] [netflix-skunkworks/repulsive-grizzly](https://github.com/netflix-skunkworks/repulsive-grizzly) Application Layer DoS Testing Framework
+- [**178**星][2y] [Py] [maldevel/canisrufus](https://github.com/maldevel/canisrufus) canisrufus:Python 编写的后门,使用 Github 做 C&C
+- [**178**星][3m] [lengjibo/att-ck-cn](https://github.com/lengjibo/att-ck-cn) ATT&CK实操
+- [**178**星][1y] [Py] [iagcl/watchmen](https://github.com/iagcl/watchmen) (Not maintained anymore) Watchmen - AWS account compliance using centrally managed Config Rules
+- [**178**星][6m] [Py] [hasherezade/ida_ifl](https://github.com/hasherezade/ida_ifl) 交互式函数列表
+- [**178**星][3y] [Ruby] [espreto/wpsploit](https://github.com/espreto/wpsploit) WPSploit - Exploiting Wordpress With Metasploit
+- [**178**星][4m] [JS] [authcov/authcov](https://github.com/authcov/authcov) Web app authorization coverage scanning
+- [**178**星][2y] [aozhimin/mosec-2017](https://github.com/aozhimin/mosec-2017) 盘古团队和 POC 主办的移动安全技术峰会
+- [**178**星][2y] [C++] [0x09al/dns-persist](https://github.com/0x09al/dns-persist) DNS-Persist is a post-exploitation agent which uses DNS for command and control.
+- [**177**星][4m] [C++] [samyk/combobreaker](https://github.com/samyk/combobreaker) Motorized, portable, 3D printed, Arduino-based combination lock cracker
+- [**177**星][11m] [Go] [fnzv/net-shield](https://github.com/fnzv/net-Shield) An Easy and Simple Anti-DDoS solution for VPS,Dedicated Servers and IoT devices - Beta
+- [**177**星][2y] [Py] [woj-ciech/daily-dose-of-malware](https://github.com/woj-ciech/daily-dose-of-malware) Script lets you gather malicious software and c&c servers from open source platforms like Malshare, Malcode, Google, Cymon - vxvault, cybercrime tracker and c2 for Pony.
+- [**177**星][6m] [Py] [trailofbits/binjascripts](https://github.com/trailofbits/binjascripts) Scripts for Binary Ninja
+- [**177**星][6y] [Py] [syworks/wireless-ids](https://github.com/syworks/wireless-ids) Ability to detect suspicious activity such as (WEP/WPA/WPS) attack by sniffing the air for wireless packets.
+- [**177**星][3m] [JS] [sindresorhus/is-reachable](https://github.com/sindresorhus/is-reachable) Check if servers are reachable
+- [**177**星][2y] [rapid7/sonar](https://github.com/rapid7/sonar) Project Sonar
+- [**177**星][1y] [random-robbie/bugbounty-scans](https://github.com/random-robbie/bugbounty-scans) aquatone results for sites with bug bountys
+- [**177**星][2y] [C] [mcarpenter/afl](https://github.com/mcarpenter/afl) DEPRECATED. Will be removed 09/2019. Please see
+- [**177**星][1y] [Py] [johnlatwc/pypowershellxray](https://github.com/johnlatwc/pypowershellxray) Python script to decode common encoded PowerShell scripts
+- [**177**星][5m] [Shell] [ginjachris/pentmenu](https://github.com/ginjachris/pentmenu) A bash script for recon and DOS attacks
+- [**177**星][8m] [eoftedal/writings](https://github.com/eoftedal/writings) blog posts
+- [**177**星][12d] [Py] [dictation-toolbox/aenea](https://github.com/dictation-toolbox/aenea) Client-server library for using voice macros from Dragon NaturallySpeaking and Dragonfly on remote/non-windows hosts.
+- [**177**星][7m] [PS] [decoder-it/psgetsystem](https://github.com/decoder-it/psgetsystem) getsystem via parent process using ps1 & embeded c#
+- [**177**星][15d] [Py] [critical-start/pastebin_scraper](https://github.com/critical-start/pastebin_scraper) monitor pastebin for interesting information
+- [**177**星][3m] [C] [cloudflare/mmproxy](https://github.com/cloudflare/mmproxy) mmproxy, the magical PROXY protocol gateway
+- [**176**星][7m] [JS] [openwisp/netjsongraph.js](https://github.com/openwisp/netjsongraph.js) NetJSON NetworkGraph visualizer based on d3.js
+- [**176**星][3d] [HTML] [zaproxy/zap-core-help](https://github.com/zaproxy/zap-core-help) The help files for the OWASP ZAP core
+- [**176**星][1y] [C++] [ysrc/antivirtualapp](https://github.com/ysrc/antivirtualapp) 检测当前app是否运行在VirtualApp虚拟机中
+- [**176**星][28d] [Py] [yassineaboukir/asnlookup](https://github.com/yassineaboukir/asnlookup) Leverage ASN to look up IP addresses (IPv4 & IPv6) owned by a specific organization for reconnaissance purposes, then run port scanning on it.
+- [**176**星][13d] [Py] [thekingofduck/filemonitor](https://github.com/thekingofduck/filemonitor) 文件变化实时监控工具(代码审计/黑盒/白盒审计辅助工具)
+- [**176**星][2m] [rust-fuzz/trophy-case](https://github.com/rust-fuzz/trophy-case)
+- [**176**星][3y] [C] [riscure/rhme-2016](https://github.com/riscure/rhme-2016) Rhme2 challenge (2016)
+- [**176**星][19d] [Py] [mschwager/gitem](https://github.com/mschwager/gitem) A Github organization reconnaissance tool.
+- [**176**星][2m] [Py] [mrschyte/nmap-converter](https://github.com/mrschyte/nmap-converter) Python script for converting nmap reports into XLS
+- [**176**星][3m] [Py] [martinvigo/email2phonenumber](https://github.com/martinvigo/email2phonenumber) A OSINT tool to obtain a target's phone number just by having his email address
+- [**176**星][4y] [Go] [jrozner/sonar](https://github.com/jrozner/sonar) Self contained cross platform DNS recon tool
+- [**176**星][1y] [C#] [jaredhaight/sharpattack](https://github.com/jaredhaight/sharpattack) A simple wrapper for C# tools
+- [**176**星][2y] [Shell] [ioactive/repossessed](https://github.com/ioactive/repossessed) A project designed to parse public source code repositories and find various types of vulnerabilities.
+- [**176**星][3y] [hexorg/cheatenginetables](https://github.com/hexorg/cheatenginetables) Repository of tables for CheatEngine
+- [**176**星][6y] [C] [gat3way/hashkill](https://github.com/gat3way/hashkill) hashkill password recovery tool
+- [**176**星][4y] [Shell] [floyd-fuh/tiny-mitm-proxy](https://github.com/floyd-fuh/tiny-mitm-proxy) Probably one of the smallest SSL MITM proxies you can make
+- [**176**星][11m] [C] [fate0/xmark](https://github.com/fate0/xmark) A PHP7 extension that can hook most functions/classes and parts of opcodes
+- [**176**星][4y] [Py] [csababarta/ntdsxtract](https://github.com/csababarta/ntdsxtract) Active Directory forensic framework
+- [**176**星][4y] [PHP] [chuckfw/owaspbwa](https://github.com/chuckfw/owaspbwa) OWASP Broken Web Applications Project
+- [**176**星][2y] [Shell] [bitvijays/pentest-scripts](https://github.com/bitvijays/pentest-scripts) 渗透用脚本
+- [**176**星][4y] [C#] [alphadelta/secure-desktop](https://github.com/alphadelta/secure-desktop) Anti-keylogger/anti-rat application for Windows
+- [**176**星][11m] [Java] [aalhuz/navex](https://github.com/aalhuz/navex) is an exploit generation framework for web applications.
+- [**175**星][2y] [C++] [fireice-uk/xmr-stak-amd](https://github.com/fireice-uk/xmr-stak-amd) Monero AMD miner
+- [**175**星][16d] [Java] [0kee-team/javaprobe](https://github.com/0kee-team/javaprobe) A Java runtime information-gathering tool which uses the Java Attach API for information acquisition
+- [**175**星][2y] [PS] [fsecurelabs/azurite](https://github.com/FSecureLABS/Azurite) Enumeration and reconnaissance activities in the Microsoft Azure Cloud.
+- [**175**星][1m] [C] [radareorg/radare2-extras](https://github.com/radareorg/radare2-extras) Source graveyard and random candy for radare2
+- [**175**星][3y] [Shell] [praetorian-code/mitm-vm](https://github.com/praetorian-code/mitm-vm) An easy-to-deploy virtual machine that can provide flexible man-in-the-middle capabilities.
+- [**175**星][4m] [Py] [techbliss/python_editor](https://github.com/techbliss/python_editor) Python脚本编辑窗口
+- [**175**星][1y] [sysml/lightvm](https://github.com/sysml/lightvm) a virtualization solution based on Xen that is optimized to offer fast boot-times regardless of the number of active VMs
+- [**175**星][2y] [sie504/struts-s2-xxx](https://github.com/sie504/struts-s2-xxx) 整理收集Struts2漏洞环境
+- [**175**星][4y] [Py] [secforce/snmp-brute](https://github.com/secforce/snmp-brute) Fast SNMP brute force, enumeration, CISCO config downloader and password cracking script.
+- [**175**星][5y] [JS] [samyk/quickjack](https://github.com/samyk/quickjack) Quickjack is a point-and-click tool for intuitively producing advanced clickjacking and frame slicing attacks.
+- [**175**星][2y] [Perl] [portcullislabs/enum4linux](https://github.com/portcullislabs/enum4linux) enum4Linux is a Linux alternative to enum.exe for enumerating data from Windows and Samba hosts.
+- [**175**星][9m] [PHP] [paragonie/password_lock](https://github.com/paragonie/password_lock) Wraps Bcrypt-SHA2 in Authenticated Encryption
+- [**175**星][3y] [Go] [nats-io/nats-top](https://github.com/nats-io/nats-top) A top-like tool for monitoring NATS servers.
+- [**175**星][2y] [Java] [ms0x0/dayu](https://github.com/ms0x0/dayu) 一款开源指纹识别工具。
+- [**175**星][2y] [Py] [jasonish/py-idstools](https://github.com/jasonish/py-idstools) idstools: Snort and Suricata Rule and Event Utilities in Python (Including a Rule Update Tool)
+- [**175**星][2m] [C#] [jaegertracing/jaeger-client-csharp](https://github.com/jaegertracing/jaeger-client-csharp) C# client (tracer) for Jaeger
+- [**175**星][9m] [guardrailsio/awesome-java-security](https://github.com/guardrailsio/awesome-java-security) Awesome Java Security Resources
+- [**175**星][7y] [Py] [gdssecurity/gwt-penetration-testing-toolset](https://github.com/gdssecurity/gwt-penetration-testing-toolset) 辅助渗透测试GWT程序的3个工具
+- [**175**星][3y] [C#] [gangzhuo/kcptun-gui-windows](https://github.com/gangzhuo/kcptun-gui-windows) 隧道工具kcptun的GUI
+- [**175**星][3m] [C#] [dionach/ntdsaudit](https://github.com/dionach/ntdsaudit) An Active Directory audit utility
+- [**175**星][9m] [HTML] [cryptogenic/ps4-6.20-webkit-code-execution-exploit](https://github.com/cryptogenic/ps4-6.20-webkit-code-execution-exploit) A WebKit exploit using CVE-2018-4441 to obtain RCE on PS4 6.20.
+- [**175**星][4y] [Ruby] [brav0hax/smbexec](https://github.com/brav0hax/smbexec) A rapid psexec style attack with samba tools
+- [**175**星][1y] [Shell] [brannondorsey/sniff-probes](https://github.com/brannondorsey/sniff-probes) Plug-and-play bash script for sniffing 802.11 probes requests
+- [**175**星][5m] [C] [acama/xrop](https://github.com/acama/xrop) Tool to generate ROP gadgets for ARM, AARCH64, x86, MIPS, PPC, RISCV, SH4 and SPARC
+- [**175**星][1y] [Py] [0xbug/biu-framework](https://github.com/0xbug/biu-framework) Security Scan Framework For Enterprise Intranet Based Services
+- [**174**星][2d] [Go] [jaeles-project/jaeles](https://github.com/jaeles-project/jaeles) The Swiss Army knife for automated Web Application Testing
+- [**174**星][7m] [Py] [osirislab/ctf-solutions](https://github.com/osirislab/CTF-Solutions) Solutions to a variety of Capture The Flag challenges from different competitions.
+- [**174**星][11m] [PS] [qax-a-team/cobaltstrike-toolset](https://github.com/QAX-A-Team/CobaltStrike-Toolset) Aggressor Script, Kits, Malleable C2 Profiles, External C2 and so on
+- [**174**星][1y] [PHP] [securitypaper/mail_fishing](https://github.com/SecurityPaper/mail_fishing) 甲方安全工程师必备,内部钓鱼系统
+- [**174**星][2y] [Py] [virtuesecurity/aws-extender](https://github.com/virtuesecurity/aws-extender) AWS Extender (Cloud Storage Tester) is a Burp plugin to assess permissions of cloud storage containers on AWS, Google Cloud and Azure.
+- [**174**星][4m] [Py] [tweksteen/jenkins-decrypt](https://github.com/tweksteen/jenkins-decrypt) Credentials dumper for Jenkins
+- [**174**星][6m] [HTML] [trishmapow/rf-jam-replay](https://github.com/trishmapow/rf-jam-replay) Jam and replay attack on vehicle keyless entry systems.
+- [**174**星][2m] [C++] [threeme3/wsprrypi](https://github.com/threeme3/wsprrypi) Bareback LF/MF/HF/VHF WSPR transmitter using a Raspberry Pi
+- [**174**星][5y] [Py] [smarnach/pyexiftool](https://github.com/smarnach/pyexiftool) a Python library to communicate with an instance of Phil Harvey's excellent ExifTool command-line application.
+- [**174**星][4y] [Py] [shadowsocks-backup/shadowsocks](https://github.com/shadowsocks-backup/shadowsocks)
+- [**174**星][3y] [Java] [secure-software-engineering/droidbench](https://github.com/secure-software-engineering/droidbench) A micro-benchmark suite to assess the stability of taint-analysis tools for Android
+- [**174**星][6d] [HTML] [openvizsla/ov_ftdi](https://github.com/openvizsla/ov_ftdi) FT2232H-based USB sniffer
+- [**174**星][2m] [Py] [markbaggett/srum-dump](https://github.com/markbaggett/srum-dump) A forensics tool to convert the data in the Windows srum (System Resource Usage Monitor) database to an xlsx spreadsheet.
+- [**174**星][6m] [Go] [liamg/furious](https://github.com/liamg/furious) Golang IP/port scanner with SYN (stealth) scanning and device manufacturer identification
+- [**174**星][1y] [Dockerfile] [kozmic/laravel-poc-cve-2018-15133](https://github.com/kozmic/laravel-poc-cve-2018-15133) PoC for CVE-2018-15133 (Laravel unserialize vulnerability)
+- [**174**星][1y] [JS] [knownsec/wam](https://github.com/knownsec/wam) Web App Monitor
+- [**174**星][1y] [Go] [ice3man543/hawkeye](https://github.com/ice3man543/hawkeye) Hawkeye filesystem analysis tool
+- [**174**星][4y] [C] [hvqzao/foolav](https://github.com/hvqzao/foolav) Pentest tool for antivirus evasion and running arbitrary payload on target Wintel host
+- [**174**星][3m] [fkie-cad/awesome-embedded-and-iot-security](https://github.com/fkie-cad/awesome-embedded-and-iot-security) A curated list of awesome embedded and IoT security resources.
+- [**174**星][2y] [Java] [fengyouchao/sockslib](https://github.com/fengyouchao/sockslib) A Java library of SOCKS5 protocol including client and server
+- [**174**星][2y] [Py] [duo-labs/idapython](https://github.com/duo-labs/idapython) Duo 实验室使用的IDAPython 脚本收集
+ - [cortex_m_firmware](https://github.com/duo-labs/idapython/blob/master/cortex_m_firmware.py) 整理包含ARM Cortex M微控制器固件的IDA Pro数据库
+ - [amnesia](https://github.com/duo-labs/idapython/blob/master/amnesia.py) 使用字节级启发式在IDA Pro数据库中的未定义字节中查找ARM Thumb指令
+ - [REobjc](https://github.com/duo-labs/idapython/blob/master/reobjc.py) 在Objective-C的调用函数和被调用函数之间进行适当的交叉引用
+- [**174**星][2m] [Py] [comthings/pandwarf](https://github.com/comthings/pandwarf) RF analysis tool with a sub-1 GHz wireless transceiver controlled by a smartphone or
+- [**174**星][1m] [Py] [codewatchorg/sqlipy](https://github.com/codewatchorg/sqlipy) sqlipy: Burp Suite 插件, 使用 SQLMap API 集成SQLMap
+- [**174**星][1m] [Java] [calebfenton/apkfile](https://github.com/calebfenton/apkfile) Android app analysis and feature extraction library
+- [**174**星][29d] [azure/azure-storage-java](https://github.com/azure/azure-storage-java) Microsoft Azure Storage Library for Java
+- [**174**星][4m] [Py] [antonin-deniau/cave_miner](https://github.com/antonin-deniau/cave_miner) Search for code cave in all binaries
+- [**174**星][1m] [PHP] [78778443/xssplatform](https://github.com/78778443/xssplatform) 一个经典的XSS渗透管理平台
+- [**174**星][2y] [PS] [3gstudent/list-rdp-connections-history](https://github.com/3gstudent/list-rdp-connections-history) Use powershell to list the RDP Connections History of logged-in users or all users
+- [**173**星][8m] [dgiese/dustcloud-documentation](https://github.com/dgiese/dustcloud-documentation) Xiaomi Smart Home Device Reverse Engineering and Hacking - Documentation Repo
+- [**173**星][4m] [PHP] [opensec-cn/chip](https://github.com/opensec-cn/chip) a simple tool to detect potential security threat in php code
+- [**173**星][16d] [microsvuln/awesome-afl](https://github.com/microsvuln/awesome-afl) A curated list of different AFL forks and AFL inspired fuzzers with detailed equivalent academic papers with AFL-fuzzing tutorials
+- [**173**星][1m] [Py] [fsecurelabs/jandroid](https://github.com/fsecurelabs/jandroid)
+- [**173**星][1m] [Go] [gavinguan24/ahri](https://github.com/gavinguan24/ahri) Ahri is an intranet sharing tool. Like VPN
+- [**173**星][6d] [Py] [alienvault-otx/otx-python-sdk](https://github.com/AlienVault-OTX/OTX-Python-SDK) The Python SDK for AlienVault OTX
+- [**173**星][1y] [Py] [apt55/google_explorer](https://github.com/APT55/google_explorer) Mass exploitation tool in python
+- [**173**星][2m] [C#] [zodiacon/kernelexplorer](https://github.com/zodiacon/kernelexplorer)
+- [**173**星][3m] [JS] [zjonsson/node-unzipper](https://github.com/zjonsson/node-unzipper) node.js cross-platform unzip using streams
+- [**173**星][7y] [Py] [trivio/common_crawl_index](https://github.com/trivio/common_crawl_index) billions of pages randomly crawled from the internet
+- [**173**星][1m] [C] [rokups/virtual-reality](https://github.com/rokups/virtual-reality) Stealthy backdoor for Windows operating systems
+- [**173**星][6m] [Java] [ota4j-team/opentest4j](https://github.com/ota4j-team/opentest4j) Open Test Alliance for the JVM
+- [**173**星][4y] [Py] [osandamalith/lfifreak](https://github.com/osandamalith/lfifreak) A unique automated LFi Exploiter with Bind/Reverse Shells
+- [**173**星][4m] [Dockerfile] [obscuritylabs/rai](https://github.com/obscuritylabs/rai) Rapid Attack Infrastructure (RAI)
+- [**173**星][14d] [C] [netoptimizer/network-testing](https://github.com/netoptimizer/network-testing) Network Testing Tools for testing the Linux network stack
+- [**173**星][2y] [Py] [nccgroup/aws-recipes](https://github.com/nccgroup/aws-recipes) A number of Recipes for AWS
+- [**173**星][7d] [C] [microsoft/pqcrypto-sidh](https://github.com/microsoft/pqcrypto-sidh) SIDH Library is a fast and portable software library that implements state-of-the-art supersingular isogeny cryptographic schemes. The chosen parameters aim to provide security against attackers running a large-scale quantum computer, and security against classical algorithms.
+- [**173**星][1y] [ObjC] [macmade/filevaultcracker](https://github.com/macmade/filevaultcracker) macOS FileVault cracking tool
+- [**173**星][5d] [C] [lttng/lttng-tools](https://github.com/lttng/lttng-tools) The lttng-tools project provides a session daemon (lttng-sessiond) that acts as a tracing registry, the "lttng" command line for tracing control, a lttng-ctl library for tracing control and a lttng-relayd for network streaming.
+- [**173**星][6m] [Py] [lmco/dart](https://github.com/lmco/dart) DART is a test documentation tool created by the Lockheed Martin Red Team to document and report on penetration tests, especially in isolated network environments.
+- [**173**星][7m] [C#] [krzys-h/undertalemodtool](https://github.com/krzys-h/undertalemodtool) The most complete tool for modding, decompiling and unpacking Undertale (and other Game Maker: Studio games!)
+- [**173**星][11m] [C++] [jonatan1024/clrinject](https://github.com/jonatan1024/clrinject) 将 C#EXE 或 DLL 程序集注入任意CLR 运行时或者其他进程的 AppDomain
+- [**173**星][3m] [JS] [infusion/node-dhcp](https://github.com/infusion/node-dhcp) A DHCP server and client written in pure JavaScript
+- [**173**星][3y] [PS] [infocyte/pshunt](https://github.com/infocyte/pshunt) Powershell Threat Hunting Module
+- [**173**星][1y] [C#] [ikende/beetle.dt](https://github.com/ikende/beetle.dt) 分布式压力测试工具
+- [**173**星][7y] [Py] [grutz/h3c-pt-tools](https://github.com/grutz/h3c-pt-tools) Huawei/H3C/HP Penetration Testing Tools
+- [**173**星][2y] [C] [geosn0w/reverse-engineering-tutorials](https://github.com/geosn0w/reverse-engineering-tutorials) Some Reverse Engineering Tutorials for Beginners
+- [**173**星][2m] [Shell] [duy13/vddos-protection](https://github.com/duy13/vddos-protection) Welcome to vDDoS, a HTTP(S) DDoS Protection Reverse Proxy. Thank you for using!
+- [**173**星][4m] [dhaval17/awsome-security-write-ups-and-pocs](https://github.com/dhaval17/awsome-security-write-ups-and-pocs) Awesome Writeups and POCs
+- [**173**星][4y] [Py] [dc3l1ne/blasting_dictionary](https://github.com/dc3l1ne/blasting_dictionary) 爆破字典
+- [**173**星][3m] [cptgibbon/house-of-corrosion](https://github.com/cptgibbon/house-of-corrosion) A description of the "House of Corrosion" GLIBC heap exploitation technique.
+- [**173**星][3y] [Py] [comsecuris/shannonre](https://github.com/comsecuris/shannonre) Helpful scripts for various tasks performed during reverse engineering the Shannon Baseband with the goal to exploit the Samsung Galaxy S6
+- [**173**星][2y] [Py] [cldrn/macphish](https://github.com/cldrn/macphish) macphish:Office 宏 Payload 生成器(Mac 版)
+- [**173**星][2m] [Py] [busescanfly/pretty](https://github.com/busescanfly/pretty) "PRinter Exploitation Toolkit" LAN automation tool
+- [**173**星][2y] [CSS] [bhdresh/socialengineeringpayloads](https://github.com/bhdresh/socialengineeringpayloads) This is a collection of social engineering tricks and payloads being used for credential theft and spear phishing attacks.
+- [**172**星][24d] [OCaml] [mirage/alcotest](https://github.com/mirage/alcotest) A lightweight and colourful test framework
+- [**172**星][10d] [Py] [fireeye/fidl](https://github.com/fireeye/fidl) A sane API for IDA Pro's decompiler. Useful for malware RE and vulnerability research
+- [**172**星][2y] [C++] [zerocoin/libzerocoin](https://github.com/zerocoin/libzerocoin) Zerocoin: C++ lib for anonymous extension to bitcoin
+- [**172**星][2y] [C] [xerub/extra_recipe](https://github.com/xerub/extra_recipe) extra_recipe:Exception-orientedexploitation
+- [**172**星][2y] [PS] [ubeeri/invoke-usersimulator](https://github.com/ubeeri/invoke-usersimulator) Simulates common user behaviour on local and remote Windows hosts.
+- [**172**星][2y] [Py] [tr3jer/dnsautorebinding](https://github.com/tr3jer/dnsautorebinding) ssrf、ssrfIntranetFuzz、dnsRebinding、recordEncode、dnsPoisoning、Support ipv4/ipv6
+- [**172**星][3y] [Py] [tonybeltramelli/deep-spying](https://github.com/tonybeltramelli/deep-spying) 使用Smartwatch和深度学习进行间谍活动
+- [**172**星][6m] [C++] [strivexjun/driverinjectdll](https://github.com/strivexjun/driverinjectdll) Using Driver Global Injection dll, it can hide DLL modules
+- [**172**星][4d] [C++] [samyk/frisky](https://github.com/samyk/frisky) Instruments to assist in binary application reversing and augmentation, geared towards walled gardens like iOS and macOS
+- [**172**星][2y] [Py] [omergunal/hackerbot](https://github.com/omergunal/hackerbot) chatbot 和 hacking 工具的结合版
+- [**172**星][1y] [Py] [niloofarkheirkhah/nili](https://github.com/niloofarkheirkhah/nili) nili:网络扫描工具,中间人,协议逆向工程和 Fuzzing
+- [**172**星][11m] [Py] [metachar/hatch](https://github.com/metachar/hatch) Hatch is a brute force tool that is used to brute force most websites
+- [**172**星][1m] [ASP] [lowleveldesign/debug-recipes](https://github.com/lowleveldesign/debug-recipes) My notes collected while debugging various .NET and Windows problems.
+- [**172**星][6d] [Shell] [lavabit/robox](https://github.com/lavabit/robox) The tools needed to robotically create/configure/provision a large number of operating systems, for a variety of hypervisors, using packer.
+- [**172**星][3y] [C] [henkaku/offline-installer](https://github.com/henkaku/offline-installer)
+- [**172**星][2m] [JS] [hapijs/crumb](https://github.com/hapijs/crumb) CSRF crumb generation and validation for hapi
+- [**172**星][4y] [JS] [fnando/password_strength](https://github.com/fnando/password_strength) Check password strength against several rules. Includes ActiveRecord/ActiveModel support.
+- [**172**星][2m] [Py] [fgsect/unicorefuzz](https://github.com/fgsect/unicorefuzz) Fuzzing the Kernel Using AFL-Unicorn
+- [**172**星][1y] [JS] [brannondorsey/host-validation](https://github.com/brannondorsey/host-validation) Express.js middleware for "Host" and "Referer" header validation to protect against DNS rebinding attacks.
+- [**172**星][3y] [Py] [4w4k3/insanity-framework](https://github.com/4w4k3/insanity-framework) Generate Payloads and Control Remote Machines. [Discontinued]
+- [**171**星][1m] [Py] [out0fmemory/qqwry.dat](https://github.com/out0fmemory/qqwry.dat) 自动更新的纯真ip库,每天自动更新
+- [**171**星][2y] [vysecurity/cve-2017-8759](https://github.com/vysecurity/CVE-2017-8759) CVE-2017-8759 - A vulnerability in the SOAP WDSL parser.
+- [**171**星][7m] [C] [ciyze/windows-rootkits](https://github.com/ciyze/Windows-Rootkits)
+- [**171**星][6m] [C] [noracodes/crackmes](https://github.com/NoraCodes/crackmes) Some CrackMe codes for Linux x86/x86_64
+- [**171**星][10m] [winmin/awesome-vm-exploit](https://github.com/winmin/awesome-vm-exploit) share some useful archives about vm and qemu escape exploit.
+- [**171**星][10m] [Shell] [trustedsec/hardcidr](https://github.com/trustedsec/hardcidr) hardCIDR is a Linux Bash script, but also functions under macOS. Your mileage may vary on other distros. The script with no specified options will query ARIN and a pool of BGP route servers. The route server is selected at random at runtime.
+- [**171**星][6m] [JS] [sindresorhus/ipify](https://github.com/sindresorhus/ipify) Get your public IP address
+- [**171**星][2y] [Ruby] [section9labs/cartero](https://github.com/section9labs/cartero) Cartero - Social Engineering Framework
+- [**171**星][2m] [C#] [samueltulach/virustotaluploader](https://github.com/samueltulach/virustotaluploader) C# Open-Source Winforms application for uploading files to VirusTotal
+- [**171**星][3y] [PHP] [rpisec/hackthevote](https://github.com/rpisec/hackthevote) Handouts, setup scripts, sources, and solutions for challenges from Hack The Vote
+- [**171**星][2m] [Java] [rohanpadhye/jqf](https://github.com/rohanpadhye/jqf) JQF + Zest: Coverage-guided semantic fuzzing for Java.
+- [**171**星][10m] [C] [q3k/cve-2019-5736-poc](https://github.com/q3k/cve-2019-5736-poc) Unweaponized Proof of Concept for CVE-2019-5736 (Docker escape)
+- [**171**星][4y] [JS] [philbooth/escomplex](https://github.com/philbooth/escomplex) Software complexity analysis of JavaScript-family abstract syntax trees
+- [**171**星][3y] [C++] [phat3/pindemonium](https://github.com/phat3/pindemonium) A pintool in order to unpack malware
+- [**171**星][1y] [ObjC] [objective-see/donotdisturb](https://github.com/objective-see/donotdisturb) Detect Evil Maid Attacks
+- [**171**星][5m] [C#] [nettitude/sharpsocks](https://github.com/nettitude/sharpsocks) Tunnellable HTTP/HTTPS socks4a proxy written in C# and deployable via PowerShell
+- [**171**星][10m] [Shell] [lcashdol/exploits](https://github.com/lcashdol/exploits) Exploits for various CVEs
+- [**171**星][3y] [kayrus/kubelet-exploit](https://github.com/kayrus/kubelet-exploit)
+- [**171**星][11m] [Java] [joychou93/webshell](https://github.com/joychou93/webshell) 入侵分析时发现的Webshell后门
+- [**171**星][6m] [C++] [hoangprod/andrewspecial](https://github.com/hoangprod/andrewspecial) AndrewSpecial, dumping lsass' memory stealthily and bypassing "Cilence" since 2019.
+- [**171**星][2d] [C] [heimdal/heimdal](https://github.com/heimdal/heimdal) a Kerberos 5 implementation
+- [**171**星][4y] [Shell] [halpomeranz/lmg](https://github.com/halpomeranz/lmg) Script for automating Linux memory capture and analysis
+- [**171**星][1m] [Py] [gleeda/memtriage](https://github.com/gleeda/memtriage) 快速查询Windows计算机上的内存。使用Winpmem驱动访问物理内存,使用Volatility分析
+- [**171**星][12m] [C#] [fullmetalcache/powerline](https://github.com/fullmetalcache/powerline)
+- [**171**星][9m] [C++] [ecx86/classinformer-ida7](https://github.com/ecx86/classinformer-ida7) ClassInformer backported for IDA Pro 7.0
+- [**171**星][2m] [Ruby] [devise-security/devise-security](https://github.com/devise-security/devise-security) A security extension for devise, meeting industrial standard security demands for web applications.
+- [**171**星][1m] [C] [curl/doh](https://github.com/curl/doh) stand-alone application for DoH (DNS-over-HTTPS) name resolves and lookups
+- [**171**星][7m] [Py] [bilelmoussaoui/authenticator](https://github.com/bilelmoussaoui/authenticator) 2FA code generator for GNOME
+- [**171**星][2y] [C++] [bayshorenetworks/yextend](https://github.com/bayshorenetworks/yextend) Yara integrated software to handle archive file data.
+- [**171**星][2y] [Go] [arwmq9b6/dnsproxy](https://github.com/arwmq9b6/dnsproxy) 防 DNS 缓存污染,兼顾查询质量与速度
+- [**171**星][12m] [Py] [andreafioraldi/idangr](https://github.com/andreafioraldi/idangr) 在IDA中使用angrdbg调试器进行调试
+- [**171**星][3y] [Py] [4shadoww/hakkuframework](https://github.com/4shadoww/hakkuframework) Hakku Framework penetration testing
+- [**170**星][2y] [Go] [out0fmemory/goproxy-always-available](https://github.com/out0fmemory/goproxy-always-available) fork from goproxy Becaust it closed!! 1632版本自动扫描可用ip
+- [**170**星][3m] [Rust] [phra/rustbuster](https://github.com/phra/rustbuster) A Comprehensive Web Fuzzer and Content Discovery Tool
+- [**170**星][1y] [Py] [vergl4s/instarecon](https://github.com/vergl4s/instarecon) Automated digital reconnaissance
+- [**170**星][8m] [HTML] [tylert/pocorgtfo](https://github.com/tylert/pocorgtfo) International Journal of Proof-of-Concept or Get The F*** Out (PoC||GTFO or PoC or GTFO)
+- [**170**星][15d] [Py] [skyscanner/cfripper](https://github.com/skyscanner/cfripper) Lambda function to "rip apart" a CloudFormation template and check it for security compliance.
+- [**170**星][2y] [Py] [securingsam/krackdetector](https://github.com/securingsam/krackdetector) 在网络中检测和预防 KRACK 攻击
+- [**170**星][1y] [PHP] [robocoder/rips-scanner](https://github.com/robocoder/rips-scanner) RIPS - A static source code analyser for vulnerabilities in PHP scripts
+- [**170**星][1y] [ramen0x3f/aggressorscripts](https://github.com/ramen0x3f/aggressorscripts)
+- [**170**星][3y] [HTML] [purpleteam/snarf](https://github.com/purpleteam/snarf) Snarf man-in-the-middle / relay suite
+- [**170**星][6y] [Py] [paulsec/csrft](https://github.com/paulsec/csrft) A lightweight CSRF Toolkit for easy Proof of concept
+- [**170**星][2y] [Py] [omri9741/cve-2017-7494](https://github.com/omri9741/cve-2017-7494) Samba 漏洞(CVE-2017-7494)PoC
+- [**170**星][6d] [Py] [misp/pymisp](https://github.com/misp/pymisp) Python library using the MISP Rest API
+- [**170**星][1y] [PS] [mattifestation/pssysmontools](https://github.com/mattifestation/pssysmontools) Sysmon Tools for PowerShell
+- [**170**星][1y] [PS] [mattifestation/pic_bindshell](https://github.com/mattifestation/pic_bindshell) Position Independent Windows Shellcode Written in C
+- [**170**星][3y] [Py] [luyishisi/nyspider](https://github.com/luyishisi/nyspider) 各种爬虫---大众点评,安居客,58,人人贷,拍拍贷, IT桔子,拉勾网,豆瓣,搜房网,ASO100,气象数据,猫眼电影,链家,PM25.in...
+- [**170**星][6m] [C] [0xkira/qemu-vm-escape](https://github.com/0xKira/qemu-vm-escape) an exploit for CVE-2019-6778
+- [**170**星][10m] [HTML] [jensvoid/lorg](https://github.com/jensvoid/lorg) Apache Logfile Security Analyzer
+- [**170**星][1m] [Shell] [edoverflow/contact.sh](https://github.com/edoverflow/contact.sh) An OSINT tool to find contacts in order to report security vulnerabilities.
+- [**170**星][1y] [C#] [eaglexiang/eagle.tunnel.dotnet.core](https://github.com/eaglexiang/eagle.tunnel.dotnet.core) 稳定易用的代理工具
+- [**170**星][3y] [C] [cyrus-and/mysql-unsha1](https://github.com/cyrus-and/mysql-unsha1) 无需明文密码,认证MySQL服务器
+- [**170**星][2y] [PHP] [cryin/assetsview](https://github.com/cryin/assetsview) Assets View资产发现、网络拓扑管理系统
+- [**170**星][3y] [C++] [cr4sh/fwexpl](https://github.com/cr4sh/fwexpl) PC firmware exploitation tool and library
+- [**170**星][14d] [JS] [cert-polska/mquery](https://github.com/cert-polska/mquery) YARA malware query accelerator (web frontend)
+- [**170**星][2m] [C] [beehive-lab/mambo](https://github.com/beehive-lab/mambo) ARM运行时二进制文件修改工具,低耗版。
+- [**170**星][2y] [Py] [awhitehatter/mailoney](https://github.com/awhitehatter/mailoney) An SMTP Honeypot
+- [**170**星][2m] [CSS] [7dog7/bottleneckosmosis](https://github.com/7dog7/bottleneckosmosis) 瓶颈渗透,web渗透,red红队,fuzz param,注释,js字典,ctf
+- [**169**星][3d] [Py] [hpfeeds/hpfeeds](https://github.com/hpfeeds/hpfeeds) Honeynet Project generic authenticated datafeed protocol
+- [**169**星][2m] [JS] [wuchangming/node-mitmproxy](https://github.com/wuchangming/node-mitmproxy) node-mitmproxy is an extensible man-in-the-middle(MITM) proxy server for HTTP/HTTPS base on Node.js.
+- [**169**星][2y] [Py] [undeadsec/debinject](https://github.com/undeadsec/debinject) Inject malicious code into *.debs
+- [**169**星][4m] [Py] [racepwn/racepwn](https://github.com/racepwn/racepwn) a librace library and a racepwn utility that are designed to test a race condition attack through protocols that use a TCP connection
+- [**169**星][1m] [PS] [olafhartong/attackdatamap](https://github.com/olafhartong/attackdatamap) A datasource assessment on an event level to show potential coverage or the MITRE ATT&CK framework
+- [**169**星][6m] [C] [octomagon/davegrohl](https://github.com/octomagon/davegrohl) A Password Cracker for macOS
+- [**169**星][7m] [Shell] [munki/bootstrappr](https://github.com/munki/bootstrappr) A bare-bones tool to install a set of packages on a target volume.
+- [**169**星][8m] [Go] [mimah/gomet](https://github.com/mimah/gomet) Multi-platform agent written in Golang. TCP forwarding, socks5, tunneling, pivoting, shell, download, exec
+- [**169**星][16d] [Py] [in-toto/in-toto](https://github.com/in-toto/in-toto) in-toto is a framework to protect supply chain integrity.
+- [**169**星][2y] [Py] [googulator/teslacrack](https://github.com/googulator/teslacrack) Decryptor for the TeslaCrypt malware
+- [**169**星][5y] [Puppet] [garethr/pentesting-playground](https://github.com/garethr/pentesting-playground) Code for installing various security minded tools onto Vagrant powered virtual machines
+- [**169**星][2y] [Ruby] [fuzzapi/api-fuzzer](https://github.com/fuzzapi/api-fuzzer) API Fuzzer which allows to fuzz request attributes using common pentesting techniques and lists vulnerabilities
+- [**169**星][3y] [cn33liz/msbuildshell](https://github.com/cn33liz/msbuildshell) MSBuildShell, a Powershell Host running within MSBuild.exe
+- [**169**星][11m] [C] [carolemieux/afl-rb](https://github.com/carolemieux/afl-rb) AFL Fuzz 工具的修改版,针对 Rare Branches
+- [**169**星][1y] [C] [autopear/ipainstaller](https://github.com/autopear/ipainstaller) Install IPA from command line
+- [**169**星][2y] [Py] [3gstudent/worse-pdf](https://github.com/3gstudent/worse-pdf) Turn a normal PDF file into malicious.Use to steal Net-NTLM Hashes from windows machines.
+- [**168**星][3d] [C++] [radareorg/r2ghidra-dec](https://github.com/radareorg/r2ghidra-dec) Deep ghidra decompiler integration for radare2
+- [**168**星][6m] [Py] [zerosteiner/mayhem](https://github.com/zerosteiner/mayhem) Runtime Process Manipulation
+- [**168**星][2y] [C#] [x41sec/browser-security-whitepaper-2017](https://github.com/x41sec/browser-security-whitepaper-2017) X41 Browser Security White Paper - Tools and PoCs
+- [**168**星][9m] [Clojure] [weavejester/crypto-password](https://github.com/weavejester/crypto-password) Library for securely hashing passwords
+- [**168**星][1y] [Shell] [tokyoneon/armor](https://github.com/tokyoneon/armor) Armor is a simple Bash script designed to create encrypted macOS payloads capable of evading antivirus scanners.
+- [**168**星][4m] [C++] [strivexjun/aheadlib-x86-x64](https://github.com/strivexjun/aheadlib-x86-x64) hijack dll Source Code Generator. support x86/x64
+- [**168**星][2y] [spacehuhn/wifi_keylogger](https://github.com/spacehuhn/wifi_keylogger) DIY Arduino Wi-Fi Keylogger (Proof of Concept)
+- [**168**星][4y] [C] [silver13/h8mini-acro](https://github.com/silver13/h8mini-acro) acro firmware for eachine H8 mini
+- [**168**星][7m] [JS] [sentinel-official/sentinel](https://github.com/sentinel-official/sentinel) Sentinel is an interoperable secure network layer offering the Sentinel Service Chain exclusively for distributed & decentralized native services like - dVPN, Sentrix (dChat and dVoIP) and more.
+- [**168**星][5m] [PHP] [scr34m/php-malware-scanner](https://github.com/scr34m/php-malware-scanner) Scans PHP files for malwares and known threats
+- [**168**星][11m] [Py] [ridter/cve-2018-15982_exp](https://github.com/ridter/cve-2018-15982_exp) exp of CVE-2018-15982
+- [**168**星][3d] [C++] [radareorg/r2ghidra-dec](https://github.com/radareorg/r2ghidra-dec) Deep ghidra decompiler integration for radare2
+- [**168**星][2m] [JS] [puresec/serverless-puresec-cli](https://github.com/puresec/serverless-puresec-cli) Serverless plugin for least privileges.
+- [**168**星][4y] [Shell] [pr0x13/ibrutr](https://github.com/pr0x13/ibrutr) iCloud Bruteforce PoC - with MultiCurl
+- [**168**星][2m] [C#] [n0dec/malwless](https://github.com/n0dec/malwless) Test Blue Team detections without running any attack.
+- [**168**星][11m] [Py] [mnkgrover08-zz/whatsapp_automation](https://github.com/mnkgrover08-zz/whatsapp_automation) Whatsapp Automation is a collection of APIs that interact with WhatsApp messenger running in an Android emulator, allowing developers to build projects that automate sending and receiving messages, adding new contacts and broadcasting messages multiple contacts.
+- [**168**星][2y] [Py] [mdsecactivebreach/chameleon](https://github.com/mdsecactivebreach/chameleon) A tool for evading Proxy categorisation
+- [**168**星][4d] [Java] [mcdcorp/opentest](https://github.com/mcdcorp/opentest) Open source test automation tool for web applications, mobile apps and APIs
+- [**168**星][1y] [Java] [k-tamura/easybuggy](https://github.com/k-tamura/easybuggy) Too buggy web application
+- [**168**星][2y] [PS] [javelinnetworks/honeypotbuster](https://github.com/javelinnetworks/honeypotbuster)
+- [**168**星][6y] [Py] [infodox/python-dll-injection](https://github.com/infodox/python-dll-injection) Python toolkit for injecting DLL files into running processes on Windows
+- [**168**星][5m] [C++] [immunant/selfrando](https://github.com/immunant/selfrando) Function order shuffling to defend against ROP and other types of code reuse
+- [**168**星][2y] [HTML] [ihebski/angryfuzzer](https://github.com/ihebski/angryfuzzer) Tools for information gathering
+- [**168**星][3m] [Py] [gnebbia/pdlist](https://github.com/gnebbia/pdlist) A passive subdomain finder
+- [**168**星][4y] [Go] [filosottile/cve-2016-2107](https://github.com/filosottile/cve-2016-2107) Simple test for the May 2016 OpenSSL padding oracle (CVE-2016-2107)
+- [**168**星][6y] [JS] [evilcos/xssprobe](https://github.com/evilcos/xssprobe) xss probe to steal page info: browser, ua, lang, referer, location, toplocation, cookie, domain, title, screen, flash, etc.
+- [**168**星][4y] [Py] [dynetics/malfunction](https://github.com/dynetics/malfunction) Malware Analysis Tool using Function Level Fuzzy Hashing
+- [**168**星][26d] [chbrian/awesome-adversarial-examples-dl](https://github.com/chbrian/awesome-adversarial-examples-dl) A curated list of awesome resources for adversarial examples in deep learning
+- [**168**星][6m] [PHP] [blackhole1/webrtcxss](https://github.com/blackhole1/webrtcxss) 利用XSS入侵内网(Use XSS automation Invade intranet)
+- [**168**星][2m] [TSQL] [baidu-security/app-env-docker](https://github.com/baidu-security/app-env-docker) 基于 Docker 的真实应用测试环境
+- [**168**星][11m] [Java] [anbai-inc/javaweb-codereview](https://github.com/anbai-inc/javaweb-codereview) 演示java代码审计的示例程序
+- [**168**星][3y] [Shell] [0x90/wps-scripts](https://github.com/0x90/wps-scripts) WPS hacking scripts
+- [**167**星][3y] [JS] [norma-inc/atear](https://github.com/norma-inc/atear) Wireless Hacking, WiFi Security, Vulnerability Analyzer, Pentestration
+- [**167**星][4y] [Py] [praetorian-code/gladius](https://github.com/praetorian-code/gladius) Automated Responder/secretsdump.py cracking
+- [**167**星][8y] [Py] [zynamics/objc-helper-plugin-ida](https://github.com/zynamics/objc-helper-plugin-ida) 辅助Objective-C二进制文件的分析
+- [**167**星][4y] [C] [vlad902/hacking-team-windows-kernel-lpe](https://github.com/vlad902/hacking-team-windows-kernel-lpe) Previously-0day exploit from the Hacking Team leak, written by Eugene Ching/Qavar.
+- [**167**星][1y] [Py] [tintinweb/ida-batch_decompile](https://github.com/tintinweb/ida-batch_decompile) 将多个文件及其import用附加注释(外部参照,堆栈变量大小)反编译到pseudocode.c文件
+- [**167**星][1y] [sumas/oscp-cheatsheet-god](https://github.com/sumas/oscp-cheatsheet-god)
+- [**167**星][28d] [ObjC] [subito-it/sbtuitesttunnel](https://github.com/subito-it/sbtuitesttunnel) Enable network mocks and more in UI Tests
+- [**167**星][1y] [Py] [spiderlabs/scavenger](https://github.com/spiderlabs/scavenger) is a multi-threaded post-exploitation scanning tool for scavenging systems, finding most frequently used files and folders as well as "interesting" files containing sensitive information.
+- [**167**星][2y] [Py] [smokeleeteveryday/ctf_writeups](https://github.com/smokeleeteveryday/ctf_writeups) CTF Writeups
+- [**167**星][5y] [JS] [skycrab/leakscan](https://github.com/skycrab/leakscan) 在线漏洞扫描
+- [**167**星][8d] [JS] [sereneblue/chameleon](https://github.com/sereneblue/chameleon) A WebExtension port of Random Agent Spoofer
+- [**167**星][1y] [Swift] [rlovelett/langserver-swift](https://github.com/rlovelett/langserver-swift) A Swift implementation of the open Language Server Protocol.
+- [**167**星][5d] [Java] [pwittchen/reactivewifi](https://github.com/pwittchen/reactivewifi) Android library listening available WiFi Access Points and related information with RxJava Observables
+- [**167**星][6d] [C] [odzhan/shellcode](https://github.com/odzhan/shellcode) 针对Windows/Linux/BSD的Shellcode
+- [**167**星][2y] [Py] [northernsec/cve-scan](https://github.com/northernsec/cve-scan) Scan systems with NMap and parse the output to a list of CVE's, CWE's and DPE's
+- [**167**星][5y] [CSS] [nknetobserver/nknetobserver.github.io](https://github.com/nknetobserver/nknetobserver.github.io) Scans of North Korean IP Space
+- [**167**星][2y] [C++] [mortenschenk/bhusa2017](https://github.com/mortenschenk/bhusa2017) Content from presentation at BHUSA 2017
+- [**167**星][2d] [C++] [mipt-ilab/mipt-mips](https://github.com/mipt-ilab/mipt-mips) Cycle-accurate pre-silicon simulator of RISC-V and MIPS CPUs
+- [**167**星][2y] [Rust] [loggerhead/shadowsocks-rust](https://github.com/loggerhead/shadowsocks-rust) Oh my implementation of Shadowsocks in Rust
+- [**167**星][3y] [C] [hugsy/proxenet](https://github.com/hugsy/proxenet) The ONLY hacker friendly proxy for webapp pentests.
+- [**167**星][4m] [Py] [googlecloudplatform/psq](https://github.com/googlecloudplatform/psq) Cloud Pub/Sub Task Queue for Python
+- [**167**星][8m] [Py] [githacktools/billcipher](https://github.com/githacktools/billcipher) Information Gathering tool for a Website or IP address
+- [**167**星][1y] [Java] [ge0rg/memorizingtrustmanager](https://github.com/ge0rg/memorizingtrustmanager) A "plugin" for Android Java to allow asking the user about SSL certificates
+- [**167**星][28d] [JS] [eggjs/egg-security](https://github.com/eggjs/egg-security) Security plugin for egg, force performance too.
+- [**167**星][8m] [PS] [dviros/credsleaker](https://github.com/dviros/credsleaker) Credsleaker allows an attacker to craft a highly convincing credentials prompt using Windows Security, validate it against the DC and in turn leak it via an HTTP request.
+- [**167**星][4m] [C] [droe/xnumon](https://github.com/droe/xnumon) monitor macOS for malicious activity
+- [**167**星][1y] [HTML] [c4o/chinesedarkwebcrawler](https://github.com/c4o/chinesedarkwebcrawler) 中文暗网爬虫
+- [**167**星][17d] [Py] [botherder/targetedthreats](https://github.com/botherder/targetedthreats) Collection of IOCs related to targeting of civil society
+- [**167**星][2m] [JS] [bencoder/js13k-2019](https://github.com/bencoder/js13k-2019) xx142-b2.exe. An entry for js13kgames 2019
+- [**167**星][1y] [Py] [belane/linux-soft-exploit-suggester](https://github.com/belane/linux-soft-exploit-suggester) linux-soft-exploit-suggester:通过 exploit database 搜索 Linux 系统中有漏洞的软件
+- [**167**星][1y] [Py] [bazad/ida_kernelcache](https://github.com/bazad/ida_kernelcache) 使用IDA Pro重建iOS内核缓存的C++类
+- [**166**星][5y] [PHP] [pentestmonkey/php-reverse-shell](https://github.com/pentestmonkey/php-reverse-shell)
+- [**166**星][4y] [C] [zeek/packet-bricks](https://github.com/zeek/packet-bricks) A netmap-based packet layer for distributing and filtering traffic.
+- [**166**星][16d] [C] [progmem/switch-fightstick](https://github.com/progmem/switch-fightstick) Proof-of-Concept LUFA Project for the Nintendo Switch. Uses reverse-engineering of the Pokken Tournament Pro Pad for the Wii U and Switch System v3.0.0
+- [**166**星][1y] [Py] [wipi-hunter/pisavar](https://github.com/WiPi-Hunter/PiSavar) Detects PineAP module and starts deauthentication attack
+- [**166**星][9d] [Shell] [offensive-security/exploitdb-papers](https://github.com/offensive-security/exploitdb-papers) exploit-database-papers
+- [**166**星][10m] [Py] [tijme/angularjs-csti-scanner](https://github.com/tijme/angularjs-csti-scanner) Automated client-side template injection (sandbox escape/bypass) detection for AngularJS.
+- [**166**星][23d] [Py] [securestate/termineter](https://github.com/securestate/termineter) Smart Meter Security Testing Framework
+- [**166**星][7y] [PHP] [secrule/falcon](https://github.com/secrule/falcon) Falcon是一款基于inotify-tools 开发的Web服务器文件监控平台 能够实时监控Web目录文件变化(新增,修改,删除),判断文件内容是否包含恶意代码,自动隔离常见Webshell,保证Web目录文件安全
+- [**166**星][3m] [Vala] [ricotz/plank](https://github.com/ricotz/plank) the simplest dock on the planet
+- [**166**星][3m] [PS] [r3mrum/psdecode](https://github.com/r3mrum/psdecode) PowerShell script for deobfuscating encoded PowerShell scripts
+- [**166**星][7m] [proteas/unstripped-ios-kernels](https://github.com/proteas/unstripped-ios-kernels) Unstripped iOS Kernels
+- [**166**星][2y] [Py] [priyankgada/python-for-hackers](https://github.com/priyankgada/python-for-hackers) Python for Hackers - Youtube Tutorials - Priyank Gada
+- [**166**星][2y] [PS] [peewpw/invoke-bsod](https://github.com/peewpw/invoke-bsod) For when you want a computer to be done - without admin!
+- [**166**星][10m] [Py] [mpgn/poodle-poc](https://github.com/mpgn/poodle-poc)
+- [**166**星][2y] [Py] [monrocoury/forensic-tools](https://github.com/monrocoury/forensic-tools) A collection of tools for forensic analysis
+- [**166**星][1y] [Py] [milo2012/pentest_scripts](https://github.com/milo2012/pentest_scripts)
+- [**166**星][1y] [Py] [hanc00l/weblogic_unserialize_exploit](https://github.com/hanc00l/weblogic_unserialize_exploit) java unserialize vul for weblogic exploit
+- [**166**星][2y] [Java] [cryptocubik/browserprint](https://github.com/cryptocubik/browserprint) An open-source browser fingerprinting suite.
+- [**166**星][3y] [Haskell] [corsis/portfusion](https://github.com/corsis/portfusion) Haskell-powered cross-platform transport-layer distributed reverse / forward proxy & tunneling solution – currently available for all TCP protocols (RDP, VNC, HTTP(S), SSH, ...).
+- [**166**星][2y] [C++] [bigric3/cve-2018-8120](https://github.com/bigric3/cve-2018-8120)
+- [**166**星][3y] [Shell] [backlion/hack-for-tools](https://github.com/backlion/hack-for-tools) 常用的黑客神器
+- [**166**星][1y] [Py] [azizaltuntas/camelishing](https://github.com/azizaltuntas/camelishing) Social Engineering Tool
+- [**166**星][2m] [Shell] [1n3/massbleed](https://github.com/1n3/massbleed) MassBleed SSL Vulnerability Scanner
+- [**165**星][2y] [C++] [spacehuhn/packetmonitor32](https://github.com/spacehuhn/packetmonitor32) ESP32 Packet Monitor + SD card!
+- [**165**星][7y] [Perl] [yuri-gushin/roboo](https://github.com/yuri-gushin/roboo) uses advanced non-interactive HTTP challenge/response mechanisms to detect and subsequently mitigate HTTP robots
+- [**165**星][5y] [Perl] [xme/hoover](https://github.com/xme/hoover) Wireless Probe Requests Sniffer
+- [**165**星][2m] [C++] [westerndigitalcorporation/swerv-iss](https://github.com/westerndigitalcorporation/swerv-iss) Western Digital’s Open Source RISC-V SweRV Instruction Set Simulator
+- [**165**星][3y] [Py] [sowish/lnscan](https://github.com/sowish/lnscan) 详细的内部网络信息扫描器
+- [**165**星][3m] [Scheme] [siraben/zkeme80](https://github.com/siraben/zkeme80) An assembler and operating system for the TI-84+ written in Scheme, Forth and Z80 assembly.
+- [**165**星][7m] [Ruby] [r00t-3xp10it/msf-auxiliarys](https://github.com/r00t-3xp10it/msf-auxiliarys) My collection of metasploit auxiliary post-modules
+- [**165**星][5y] [Roff] [opendns/security_ninjas_appsec_training](https://github.com/opendns/security_ninjas_appsec_training) OpenDNS application security training program
+- [**165**星][2y] [Shell] [moexin/easy-v2ray](https://github.com/moexin/easy-v2ray) 简单的V2ray一键配置包,小白也能简单上手。
+- [**165**星][1y] [C] [jioundai/bluedroid](https://github.com/jioundai/bluedroid) PoCs of Vulnerabilities on Bluedroid
+- [**165**星][4m] [JS] [grempe/diceware](https://github.com/grempe/diceware) A tool for generating strong Diceware passwords, with entropy and crack time estimates.
+- [**165**星][2y] [C++] [google/pawn](https://github.com/google/pawn) 从基于 Intel 的工作站和笔记本电脑中提取 BIOS 固件
+- [**165**星][3y] [Standard ML] [gamelinux/prads](https://github.com/gamelinux/prads) Passive Real-time Asset Detection System
+- [**165**星][2m] [C] [fullmetal5/bluebomb](https://github.com/fullmetal5/bluebomb) A Bluetooth exploit for the Nintendo Wii.
+- [**165**星][2y] [C] [cyassl/cyassl](https://github.com/cyassl/cyassl) Please use wolfSSL now instead:
+- [**165**星][9m] [C++] [creepsky/creepminer](https://github.com/creepsky/creepminer) Burstcoin C++ CPU and GPU Miner
+- [**165**星][4m] [C++] [creddefense/creddefense](https://github.com/creddefense/creddefense) Credential and Red Teaming Defense for Windows Environments
+- [**165**星][2m] [Py] [chtd/psycopg2cffi](https://github.com/chtd/psycopg2cffi) Port to cffi with some speed improvements
+- [**165**星][1y] [Py] [certcc/keyfinder](https://github.com/certcc/keyfinder) A tool for finding and analyzing private (and public) key files, including support for Android APK files.
+- [**165**星][3d] [Py] [adamcaudill/yawast](https://github.com/adamcaudill/yawast) YAWAST ...where a pentest starts. Security Toolkit for Web-based Applications
+- [**164**星][2m] [Java] [lilifengcode/burpsuite-plugins-usage](https://github.com/lilifengcode/burpsuite-plugins-usage) Burpsuite-Plugins-Usage
+- [**164**星][13d] [Rust] [hippolot/finshir](https://github.com/Hippolot/finshir)
+- [**164**星][9m] [thehackingsage/hackdroid](https://github.com/thehackingsage/hackdroid) Penetration Testing Apps for Android
+- [**164**星][3m] [Swift] [ryasnoy/applocker](https://github.com/ryasnoy/applocker) AppLocker - simple lock screen for iOS Application ( Swift 4+, iOS 9.0+) Touch ID / Face ID
+- [**164**星][2d] [Py] [paloaltonetworks/ansible-pan](https://github.com/paloaltonetworks/ansible-pan) Ansible modules for Palo Alto Networks NGFWs
+- [**164**星][3y] [JS] [nvisium/django.nv](https://github.com/nvisium/django.nv) Vulnerable Django Application
+- [**164**星][2y] [JS] [nospaceships/node-net-ping](https://github.com/nospaceships/node-net-ping) Ping and trace route to many hosts at once.
+- [**164**星][8d] [C#] [mr-un1k0d3r/redteamcsharpscripts](https://github.com/mr-un1k0d3r/redteamcsharpscripts) C# Script used for Red Team
+- [**164**星][11m] [Py] [mosuan/filescan](https://github.com/mosuan/filescan) 敏感文件扫描 / 二次判断降低误报率 / 扫描内容规则化 / 多目录扫描
+- [**164**星][3m] [mdrights/digital-rights](https://github.com/mdrights/digital-rights) 抵抗国家机器对公民的监控
+- [**164**星][2y] [Py] [manisso/crips](https://github.com/manisso/crips) IP Tools To quickly get information about IP Address's, Web Pages and DNS records.
+- [**164**星][3y] [C] [jedisct1/blacknurse](https://github.com/jedisct1/blacknurse) BlackNurse attack PoC
+- [**164**星][4y] [C] [jdbirdwell/afl](https://github.com/jdbirdwell/afl) american fuzzy lop for network fuzzing (unofficial) -- official afl site is
+- [**164**星][3y] [C#] [jamesjlinden/unity-decompiled](https://github.com/jamesjlinden/unity-decompiled)
+- [**164**星][11m] [Py] [ghostmanager/domaincheck](https://github.com/ghostmanager/domaincheck) DomainCheck is designed to assist operators with monitoring changes related to their domain names. This includes negative changes in categorization, VirusTotal detections, and appearances on malware blacklists. DomainCheck currently works only with NameCheap.
+- [**164**星][2y] [Py] [fs0c131y/aadhaarsearchengine](https://github.com/fs0c131y/aadhaarsearchengine) Find Aadhaar cards thanks to Google
+- [**164**星][2m] [C] [elementsproject/secp256k1-zkp](https://github.com/elementsproject/secp256k1-zkp) Experimental fork of libsecp256k1 with support for pedersen commitments and range proofs.
+- [**164**星][1y] [Py] [c0ny1/pwcracker](https://github.com/c0ny1/pwcracker) 一款插件化的密码爆破框架
+- [**164**星][3y] [Shell] [brandonprry/wicked_cool_shell_scripts_2e](https://github.com/brandonprry/wicked_cool_shell_scripts_2e) Full shell scripts for the second edition of Wicked Cool Shell Scripts
+- [**164**星][2y] [PS] [ankh2054/windows-pentest](https://github.com/ankh2054/windows-pentest) Windows Pentest Scripts
+- [**164**星][6m] [PS] [alsidofficial/wsuspendu](https://github.com/alsidofficial/wsuspendu) Implement WSUSpendu attack
+- [**163**星][2y] [sniperoj/attack-defense-framework](https://github.com/SniperOJ/Attack-Defense-Framework)
+- [**163**星][5y] [Py] [q2h1cg/cms-exploit-framework](https://github.com/Q2h1Cg/CMS-Exploit-Framework) CMS Exploit Framework
+- [**163**星][26d] [PS] [dsccommunity/activedirectorydsc](https://github.com/dsccommunity/ActiveDirectoryDsc) 包含用于部署和配置Active Directory的DSC资源
+- [**163**星][6m] [C] [bytecode77/r77-rootkit](https://github.com/bytecode77/r77-rootkit) Ring 3 Rootkit DLL
+- [**163**星][2y] [HTML] [threatexpress/metatwin](https://github.com/threatexpress/metatwin) The project is designed as a file resource cloner. Metadata, including digital signature, is extracted from one file and injected into another.
+- [**163**星][1y] [Py] [walkerfuz/morph](https://github.com/walkerfuz/morph) An open source fuzzing framework for fun.
+- [**163**星][6m] [Py] [wafpassproject/wafpass](https://github.com/wafpassproject/wafpass) wafpass:利用所有Payload 的绕过技巧分析参数,旨在为安全解决方案(例如WAF)确定基准。
+- [**163**星][4y] [C] [uptimejp/sql_firewall](https://github.com/uptimejp/sql_firewall) SQL Firewall Extension for PostgreSQL
+- [**163**星][3y] [C] [teran-mckinney/raru](https://github.com/teran-mckinney/raru) raru: run as random user
+- [**163**星][21d] [Py] [swisskyrepo/graphqlmap](https://github.com/swisskyrepo/graphqlmap) GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes.
+- [**163**星][3y] [Py] [sourcekris/rsactftool](https://github.com/sourcekris/rsactftool) RSA CTF Tool - Tool to attack RSA public keys and ciphertexts in common ways
+- [**163**星][3y] [C] [scslab/tcpcrypt](https://github.com/scslab/tcpcrypt) Fast TCP encryption
+- [**163**星][2y] [Py] [rxwx/cve-2017-8570](https://github.com/rxwx/cve-2017-8570) Proof of Concept exploit for CVE-2017-8570
+- [**163**星][4m] [Py] [pinterest/thrift-tools](https://github.com/pinterest/thrift-tools) thrift-tools is a library and a set of tools to introspect Apache Thrift traffic.
+- [**163**星][2y] [C] [oalabs/blobrunner](https://github.com/oalabs/blobrunner) Quickly debug shellcode extracted during malware analysis
+- [**163**星][3y] [Makefile] [kost/nmap-android](https://github.com/kost/nmap-android) Nmap on Android - Makefile/diff/scripts to build it with Android NDK
+- [**163**星][12d] [C++] [jrfonseca/drmingw](https://github.com/jrfonseca/drmingw) Postmortem debugging tools for MinGW.
+- [**163**星][8m] [hd421/monitoring-systems-cheat-sheet](https://github.com/hd421/monitoring-systems-cheat-sheet) A cheat sheet for pentesters and researchers about vulnerabilities in well-known monitoring systems.
+- [**163**星][2y] [Shell] [functionclub/fail2ban](https://github.com/functionclub/fail2ban) 最简单的防止SSH暴力破解的脚本
+- [**163**星][3m] [JS] [friedrith/node-wifi](https://github.com/friedrith/node-wifi)
+- [**163**星][10m] [C] [davidgfnet/wireshark-whatsapp](https://github.com/davidgfnet/wireshark-whatsapp) Whatsapp dissector plugin for wireshark
+- [**163**星][2y] [PS] [cyberark/riskyspn](https://github.com/cyberark/riskyspn) Detect and abuse risky SPNs
+- [**163**星][1y] [Py] [boy-hack/poc-t](https://github.com/boy-hack/poc-t) 基于poc-t 并在此基础上增加批量功能!
+- [**163**星][2m] [C++] [bastibl/gr-ieee802-15-4](https://github.com/bastibl/gr-ieee802-15-4) IEEE 802.15.4 ZigBee Transceiver
+- [**163**星][4m] [Py] [alpha1e0/kiwi](https://github.com/alpha1e0/kiwi) kiwi:安全源码审计工具
+- [**162**星][18d] [Groovy] [jeremylong/dependency-check-gradle](https://github.com/jeremylong/dependency-check-gradle) The dependency-check gradle plugin allows projects to monitor dependent libraries for known, published vulnerabilities.
+- [**162**星][2y] [Py] [hackatnow/shodanwave](https://github.com/hackatnow/shodanwave) Shodanwave is a tool for exploring and obtaining information from Netwave IP Camera.
+- [**162**星][3y] [Py] [chenjiandongx/github-spider](https://github.com/chenjiandongx/Github-spider) Github 仓库及用户分析爬虫
+- [**162**星][4y] [Py] [osirislab/fentanyl](https://github.com/osirislab/Fentanyl) 简化打补丁
+- [**162**星][2m] [Py] [x64dbg/x64dbgida](https://github.com/x64dbg/x64dbgida) x64dbg插件,用于IDA数据导入导出
+- [**162**星][3y] [Py] [wh1t3rh1n0/air-hammer](https://github.com/wh1t3rh1n0/air-hammer) A WPA Enterprise horizontal brute-force attack tool
+- [**162**星][2m] [Shell] [securityriskadvisors/vectr](https://github.com/securityriskadvisors/vectr) VECTR is a tool that facilitates tracking of your red and blue team testing activities to measure detection and prevention capabilities across different attack scenarios
+- [**162**星][1y] [Py] [saltstack/salt-contrib](https://github.com/saltstack/salt-contrib) Salt Module Contributions
+- [**162**星][8m] [Py] [sa7mon/miniprint](https://github.com/sa7mon/miniprint) A medium interaction printer honeypot
+- [**162**星][1m] [Py] [opentimestamps/opentimestamps-client](https://github.com/opentimestamps/opentimestamps-client) Command-line tool to create and validate timestamp proofs with the OpenTimestamps protocol
+- [**162**星][27d] [Py] [neo23x0/yaranalyzer](https://github.com/neo23x0/yaranalyzer) Yara Rule Analyzer and Statistics
+- [**162**星][2m] [Py] [mykings/python-masscan](https://github.com/mykings/python-masscan) python-masscan is a python library which helps in using masscan port scanner.
+- [**162**星][6y] [XSLT] [ironbee/waf-research](https://github.com/ironbee/waf-research) WAF Research
+- [**162**星][10m] [Scala] [input-output-hk/mantis](https://github.com/input-output-hk/mantis) A Scala based client for Ethereum Classic.
+- [**162**星][5y] [PS] [harmj0y/powerup](https://github.com/harmj0y/powerup) This version of PowerUp is now unsupported. See
+- [**162**星][6y] [C] [gdbinit/readmem](https://github.com/gdbinit/readmem) A small OS X/iOS userland util to dump processes memory
+- [**162**星][2y] [C] [gabrielrcouto/reaver-wps](https://github.com/gabrielrcouto/reaver-wps) Brute force attack against Wifi Protected Setup
+- [**162**星][2y] [C++] [encounter/futurerestore](https://github.com/encounter/futurerestore) (unmaintained) iOS upgrade and downgrade tool utilizing SHSH blobs (unofficial fork supporting iOS 11 and newer devices)
+- [**162**星][1m] [Visual Basic .NET] [dzzie/sysanalyzer](https://github.com/dzzie/sysanalyzer) Automated malcode analysis system - read more ->
+- [**162**星][4m] [C] [dyne/dnscrypt-proxy](https://github.com/dyne/dnscrypt-proxy) DNSCrypt-Proxy repository, frankly maintained for what it does (no new features planned)
+- [**162**星][7m] [Py] [dyboy2017/wtf_scan](https://github.com/dyboy2017/wtf_scan) 一款WEB端的在线敏感资产扫描器,扫描网站中的指纹、漏洞及相关敏感信息,针对已经识别的CMS指纹,进行二次0day扫描利用,一键GetShell也不是不可能!!!
+- [**162**星][2y] [Shell] [danilabs/tools-tbhm](https://github.com/danilabs/tools-tbhm) Tools of "The Bug Hunters Methodology V2 by
+- [**162**星][7m] [Py] [d4stiny/dell-support-assist-rce-poc](https://github.com/d4stiny/dell-support-assist-rce-poc)
+- [**162**星][5m] [Py] [cvandeplas/elk-forensics](https://github.com/cvandeplas/elk-forensics) ELK configuration files for Forensic Analysts and Incident Handlers (unmaintained)
+- [**162**星][2m] [JS] [ant4g0nist/vegvisir](https://github.com/ant4g0nist/vegvisir) 基于浏览器的LLDB 调试器
+- [**162**星][5m] [C++] [a5-/gamerfood_csgo](https://github.com/a5-/gamerfood_csgo) Fully featured CSGO cheat by Team Gamerfood
+- [**162**星][2y] [Py] [hackatnow/shodanwave](https://github.com/hackatnow/shodanwave) Shodanwave is a tool for exploring and obtaining information from Netwave IP Camera.
+- [**161**星][1y] [Java] [iqiyi/dexsplitter](https://github.com/iqiyi/dexsplitter) Analyze contribution rate of each module to the apk size
+- [**161**星][24d] [C#] [hmbsbige/nattypetester](https://github.com/hmbsbige/nattypetester) 测试当前网络的NAT类型(STUN)
+- [**161**星][4y] [Py] [appknox/afe](https://github.com/appknox/AFE) Android Framework for Exploitation, is a framework for exploiting android based devices
+- [**161**星][2y] [Py] [tulpar/tulpar](https://github.com/tulpar/tulpar) Tulpar - Web Vulnerability Scanner
+- [**161**星][2m] [Py] [lc/theftfuzzer](https://github.com/lc/theftfuzzer) TheftFuzzer is a tool that fuzzes Cross-Origin Resource Sharing implementations for common misconfigurations.
+- [**161**星][8m] [C++] [momo5502/cod-exploits](https://github.com/momo5502/cod-exploits)
+- [**161**星][6m] [Py] [yassineaboukir/cve-2018-0296](https://github.com/yassineaboukir/cve-2018-0296) Script to test for Cisco ASA path traversal vulnerability (CVE-2018-0296) and extract system information.
+- [**161**星][11m] [HTML] [yaph/domxssscanner](https://github.com/yaph/domxssscanner) DOMXSS Scanner is an online tool to scan source code for DOM based XSS vulnerabilities
+- [**161**星][7m] [C#] [xorrior/random-csharptools](https://github.com/xorrior/random-csharptools) Collection of CSharp Assemblies focused on Post-Exploitation Capabilities
+- [**161**星][2m] [Py] [wish-i-was/femida](https://github.com/wish-i-was/femida) Automated blind-xss search for Burp Suite
+- [**161**星][1y] [Py] [veorq/blueflower](https://github.com/veorq/blueflower) a grep -r for secrets
+- [**161**星][1m] [Py] [staticafi/symbiotic](https://github.com/staticafi/symbiotic) Symbiotic is a tool for finding bugs in computer programs based on instrumentation, program slicing and KLEE
+- [**161**星][2y] [secwiki/hack-movie](https://github.com/secwiki/hack-movie) 黑客相关的电视剧/电影/纪录片
+- [**161**星][15d] [Py] [regala/burp-scope-monitor](https://github.com/regala/burp-scope-monitor) Burp Suite Extension to monitor new scope
+- [**161**星][6m] [C] [rapid7/mettle](https://github.com/rapid7/mettle) This is an implementation of a native-code Meterpreter, designed for portability, embeddability, and low resource utilization.
+- [**161**星][2y] [Py] [rajeshmajumdar/ploitkit](https://github.com/rajeshmajumdar/ploitkit) The Hacker's ToolBox
+- [**161**星][8y] [C] [poelzi/openchronos](https://github.com/poelzi/openchronos) Open Source Firmware for the TI EZ430-Chronos Watch
+- [**161**星][3y] [Py] [pentesteres/delorean](https://github.com/pentesteres/delorean) NTP Main-in-the-Middle tool
+- [**161**星][3y] [Go] [openwhitebox/aes](https://github.com/openwhitebox/aes) Implementations of white-box AES constructions and their cryptanalyses.
+- [**161**星][2y] [netbiosx/default-credentials](https://github.com/netbiosx/default-credentials) Default usernames and passwords for various systems (VoIP,IPMI,Oracle).
+- [**161**星][1y] [msuhanov/regf](https://github.com/msuhanov/regf) Windows注册表文件格式规范
+- [**161**星][3y] [miserlou/mackenzie](https://github.com/miserlou/mackenzie) AWS Lambda Infection Toolkit // Persistent Lambda Malware PoC
+- [**161**星][1y] [jnusimba/linuxsecnotes](https://github.com/jnusimba/linuxsecnotes) some learning notes about Linux Security
+- [**161**星][5m] [C] [jakeajames/jelbreklib](https://github.com/jakeajames/jelbreklib) Give me tfp0, I give you jelbrek
+- [**161**星][3y] [Py] [hkm/whoishere.py](https://github.com/hkm/whoishere.py) WIFI Client Detection - Identify people by assigning a name to a device performing a wireless probe request.
+- [**161**星][3y] [Shell] [hiroshimanrise/anonym8](https://github.com/hiroshimanrise/anonym8) Sets Transparent proxy tunnel through Tor, I2P, Privoxy, Polipo and modify DNS; Include Anonymizing Relay Monitor (arm), macchanger and wipe (Cleans ram/cache & swap-space) features, ID spoofing has never been so easy.
+- [**161**星][3m] [Java] [eth-sri/securify](https://github.com/eth-sri/securify) Security Scanner for Ethereum Smart Contracts
+- [**161**星][8m] [C] [eniac/faas](https://github.com/eniac/faas) Factoring as a Service
+- [**161**星][2y] [Go] [elithrar/simple-scrypt](https://github.com/elithrar/simple-scrypt) A convenience library for generating, comparing and inspecting password hashes using the scrypt KDF in Go
+- [**161**星][4d] [C++] [devinacker/bsnes-plus](https://github.com/devinacker/bsnes-plus) debug-oriented fork of bsnes
+- [**161**星][8m] [HTML] [decal/werdlists](https://github.com/decal/werdlists)
+- [**161**星][27d] [Py] [davedoesdev/python-jwt](https://github.com/davedoesdev/python-jwt) Python module for generating and verifying JSON Web Tokens
+- [**161**星][3y] [Py] [ctfs/write-ups-tools](https://github.com/ctfs/write-ups-tools) A collection of tools used to maintain and create CTF write-up folders
+- [**161**星][5d] [Py] [citizenlab/test-lists](https://github.com/citizenlab/test-lists) URL testing lists intended for discovering website censorship
+- [**161**星][3m] [Py] [blacktop/virustotal-api](https://github.com/blacktop/virustotal-api) Virus Total Public/Private/Intel API
+- [**161**星][3y] [Py] [artkond/cisco-rce](https://github.com/artkond/cisco-rce) CVE-2017-3881 Cisco Catalyst Remote Code Execution PoC
+- [**161**星][21d] [C] [altramayor/gatekeeper](https://github.com/altramayor/gatekeeper) First open source DDoS protection system
+- [**161**星][2y] [Py] [aim4r/voldiff](https://github.com/aim4r/voldiff) Malware Memory Footprint Analysis based on Volatility
+- [**161**星][5d] [Shell] [0xmachos/mosl](https://github.com/0xmachos/mosl) Bash script to audit and fix macOS Catalina (10.15.x) security settings
+- [**161**星][6m] [0xbug/biu](https://github.com/0xbug/biu) 网络资产发现、漏洞扫描
+- [**160**星][24d] [JS] [paperseller/chn-iplist](https://github.com/paperseller/chn-iplist) Chnroutes rules for routers、Shadowrocket、Quantumult、Kitsunebi、acl、BifrostV、v2rayNG、clash、pac、v2ray config file.
+- [**160**星][10m] [C] [iaik/sgxrop](https://github.com/IAIK/sgxrop) The code to the SGX-ROP paper
+- [**160**星][2y] [C] [ninjaprawn/async_wake-fun](https://github.com/ninjaprawn/async_wake-fun) iOS/MacOS 11 内核双释放漏洞 exp
+- [**160**星][3y] [C] [yifanlu/psvimgtools](https://github.com/yifanlu/psvimgtools) Decrypt Vita CMA backups
+- [**160**星][19d] [AGS Script] [tinyfpga/tinyfpga-bootloader](https://github.com/tinyfpga/tinyfpga-bootloader) An open source USB bootloader for FPGAs
+- [**160**星][2y] [Java] [the404hacking/androrat](https://github.com/the404hacking/androrat) AndroRAT | Remote Administrator Tool for Android OS Hacking
+- [**160**星][1y] [splunk/botsv1](https://github.com/splunk/botsv1) A sample security dataset and CTF platform
+- [**160**星][4y] [PHP] [spiderlabs/cryptomg](https://github.com/spiderlabs/cryptomg) CryptOMG is a configurable CTF style test bed that highlights common flaws in cryptographic implementations.
+- [**160**星][3y] [C++] [sakshamsharma/http-over-protocol](https://github.com/sakshamsharma/http-over-protocol) HOP: A proxy server to enable arbitrary protocols behind an HTTP proxy
+- [**160**星][3m] [JS] [mrgeffitas/ironsquirrel](https://github.com/mrgeffitas/ironsquirrel) Encrypted exploit delivery for the masses
+- [**160**星][3y] [Py] [moha99sa/evilap_defender](https://github.com/moha99sa/evilap_defender) Protect your Wireless Network from Evil Access Points!
+- [**160**星][2y] [Py] [matiasb/unpy2exe](https://github.com/matiasb/unpy2exe) Extract .pyc files from executables created with py2exe
+- [**160**星][2m] [JS] [lelinhtinh/de4js](https://github.com/lelinhtinh/de4js) JavaScript Deobfuscator and Unpacker
+- [**160**星][3y] [Ruby] [kost/dockscan](https://github.com/kost/dockscan) dockscan:docker安全漏洞扫描和审计工具。
+- [**160**星][8m] [klionsec/redteammanual](https://github.com/klionsec/redteammanual)
+- [**160**星][2y] [Py] [juancarlospaco/css-html-js-minify](https://github.com/juancarlospaco/css-html-js-minify) StandAlone Async cross-platform Minifier for the Web.
+- [**160**星][3m] [C#] [hunniccyber/sharpsniper](https://github.com/hunniccyber/sharpsniper) Find specific users in active directory via their username and logon IP address
+- [**160**星][2m] [C++] [gregwar/fatcat](https://github.com/gregwar/fatcat) FAT filesystems explore, extract, repair, and forensic tool
+- [**160**星][1y] [HTML] [exploitprotocol/mobile-security-wiki](https://github.com/exploitprotocol/mobile-security-wiki)
+- [**160**星][15d] [Shell] [dshield-isc/dshield](https://github.com/dshield-isc/dshield) DShield Raspberry Pi Sensor
+- [**160**星][2y] [C] [dhavalkapil/libdheap](https://github.com/dhavalkapil/libdheap) A shared (dynamic) library that can be transparently injected into different processes to detect memory corruption in glibc heap
+- [**160**星][3m] [Py] [d0c-s4vage/gramfuzz](https://github.com/d0c-s4vage/gramfuzz) gramfuzz is a grammar-based fuzzer that lets one define complex grammars to generate text and binary data formats.
+- [**160**星][18d] [JS] [bkimminich/juice-shop-ctf](https://github.com/bkimminich/juice-shop-ctf) Juice Shop CTF 环境配置工具
+- [**160**星][3y] [Py] [504ensicslabs/damm](https://github.com/504ensicslabs/damm) Differential Analysis of Malware in Memory
+- [**159**星][3d] [HTML] [v2ray/v2ray.github.io](https://github.com/v2ray/v2ray.github.io) V2Ray Portal
+- [**159**星][7m] [PS] [nickrod518/powershell-scripts](https://github.com/nickrod518/powershell-scripts) PowerShell scripts ranging from SCCM, MSO, AD, and other corporate enterprise uses... to sending cat facts to coworkers.
+- [**159**星][7m] [C] [zhuhuibeishadiao/newhidedriverex](https://github.com/zhuhuibeishadiao/newhidedriverex) Hide Driver By MiProcessLoaderEntry
+- [**159**星][4m] [whoisflynn/oscp-exam-report-template](https://github.com/whoisflynn/oscp-exam-report-template) Modified template for the OSCP Exam and Labs. Used during my passing attempt
+- [**159**星][1m] [F#] [softsec-kaist/codealchemist](https://github.com/softsec-kaist/codealchemist) Semantics-aware Code Generation for Finding JS engine Vulnerabilities
+- [**159**星][2m] [smilezxlee/crackediosapps](https://github.com/smilezxlee/crackediosapps) iOS端破解版App集合,包含破解版QQ、破解版抖音、破解版百度网盘、破解版麻花、钉钉打卡助手、破解版墨墨背单词、破解版网易云音乐、破解版芒果TV
+- [**159**星][9m] [Py] [sch3m4/androidpatternlock](https://github.com/sch3m4/androidpatternlock) A little Python tool to crack the Pattern Lock on Android devices
+- [**159**星][4y] [Py] [plaguescanner/plaguescanner](https://github.com/plaguescanner/plaguescanner) Open source multiple AV scanner framework
+- [**159**星][2y] [C] [phhusson/super-bootimg](https://github.com/phhusson/super-bootimg) Tools to edit Android boot.img. NDK buildable, to be usable in an update.zip
+- [**159**星][3y] [Py] [nneonneo/eqgrp-free-file](https://github.com/nneonneo/eqgrp-free-file) Free sampling of files from the purported Equation Group hack.
+- [**159**星][2m] [Py] [nforest/droidimg](https://github.com/nforest/droidimg) Android/Linux vmlinux loader
+- [**159**星][5y] [Py] [netspi/sshkey-grab](https://github.com/netspi/sshkey-grab) Grab ssh keys from ssh-agent
+- [**159**星][5m] [Java] [netspi/javaserialkiller](https://github.com/netspi/javaserialkiller) Burp extension to perform Java Deserialization Attacks
+- [**159**星][26d] [C++] [mxmssh/manul](https://github.com/mxmssh/manul) Manul is a coverage-guided parallel fuzzer for open-source and blackbox binaries on Windows, Linux and MacOS
+- [**159**星][1y] [malwarearchaeology/attack](https://github.com/malwarearchaeology/attack) MITRE ATT&CK Windows Logging Cheat Sheets
+- [**159**星][3m] [Go] [lukasikic/subzy](https://github.com/lukasikic/subzy) Subdomain takeover vulnerability checker
+- [**159**星][1y] [JS] [logicalhacking/dvhma](https://github.com/logicalhacking/dvhma) Damn Vulnerable Hybrid Mobile App (DVHMA) is an hybrid mobile app (for Android) that intentionally contains vulnerabilities.
+- [**159**星][5m] [JS] [k4m4/dcipher-cli](https://github.com/k4m4/dcipher-cli) Crack hashes using online rainbow & lookup table attack services, right from your terminal
+- [**159**星][2y] [C++] [hussein-aitlahcen/blackhole](https://github.com/hussein-aitlahcen/blackhole) C# RAT (Remote Administration Tool)
+- [**159**星][17d] [Java] [gantman/jail-monkey](https://github.com/gantman/jail-monkey) A React Native library for identifying if a phone is rooted or mocking locations
+- [**159**星][2y] [TS] [cupslab/password_meter](https://github.com/cupslab/password_meter) 数据驱动的密码测量仪表,可对密码进行强度和可用性检测
+- [**159**星][10m] [Py] [censys/censys-python](https://github.com/censys/censys-python) Python Library for Censys
+- [**159**星][11m] [Go] [botherder/kraken](https://github.com/botherder/kraken) Cross-platform Yara scanner written in Go
+- [**158**星][20d] [Java] [fuzzitdev/javafuzz](https://github.com/fuzzitdev/javafuzz) coverage guided fuzz testing for java
+- [**158**星][1m] [Py] [travisfoley/dfirtriage](https://github.com/travisfoley/dfirtriage) Digital forensic acquisition tool for Windows based incident response.
+- [**158**星][1y] [Go] [remeh/sizedwaitgroup](https://github.com/remeh/sizedwaitgroup) SizedWaitGroup has the same role and close to the same API as the Golang sync.WaitGroup but it adds a limit on the amount of goroutines started concurrently.
+- [**158**星][6y] [Ruby] [resque/resque-loner](https://github.com/resque/resque-loner) Support for unique jobs in Resque: Only one job with the same payload per queue.
+- [**158**星][4y] [Go] [vyrus001/go-mimikatz](https://github.com/vyrus001/go-mimikatz) A wrapper around a pre-compiled version of the Mimikatz executable for the purpose of anti-virus evasion.
+- [**158**星][4y] [Shell] [theresalu/rspiducky](https://github.com/theresalu/rspiducky)
+- [**158**星][8m] [C] [tboox/itrace](https://github.com/tboox/itrace) Trace objc method call for ios and mac
+- [**158**星][2y] [HTML] [secmob/pwnfest2016](https://github.com/secmob/pwnfest2016) full exploit of pwnfest2016, slide and full text of syscan2017
+- [**158**星][5m] [samanl33t/awesome-mainframe-hacking](https://github.com/samanl33t/awesome-mainframe-hacking)
+- [**158**星][15d] [Batchfile] [pyn3rd/cve-2019-0232](https://github.com/pyn3rd/cve-2019-0232) Apache Tomcat Remote Code Execution on Windows
+- [**158**星][2y] [Py] [phishai/phish-ai-api](https://github.com/phishai/phish-ai-api) phish.ai 公开和私有的API接口, Python编写
+- [**158**星][9m] [Shell] [nullarray/intrec-pack](https://github.com/nullarray/intrec-pack) Intelligence and Reconnaissance Package/Bundle installer.
+- [**158**星][1y] [Py] [musicmancorley/briarids](https://github.com/musicmancorley/briarids) An All-In-One home intrusion detection system (IDS) solution for the Raspberry PI.
+- [**158**星][2y] [Py] [kuburan/txtool](https://github.com/kuburan/txtool) an easy pentesting tool.
+- [**158**星][1y] [joychou93/sks](https://github.com/joychou93/sks) Security Knowledge Structure(安全知识汇总)
+- [**158**星][2m] [C#] [jlospinoso/beamgun](https://github.com/jlospinoso/beamgun) A rogue-USB-device defeat program for Windows.
+- [**158**星][2y] [Py] [jeffball55/rop_compiler](https://github.com/jeffball55/rop_compiler) An open source, multi-architecture ROP compiler written in python
+- [**158**星][2y] [javierolmedo/shodan-filters](https://github.com/javierolmedo/shodan-filters) A list of shodan filters
+- [**158**星][9d] [Py] [itsmehacker/darkscrape](https://github.com/itsmehacker/darkscrape) OSINT Tool For Scraping Dark Websites
+- [**158**星][3m] [C++] [ion28/bluespawn](https://github.com/ion28/bluespawn) Windows-based Active Defense and EDR tool to empower Blue Teams
+- [**158**星][1y] [Py] [hadiasghari/pyasn](https://github.com/hadiasghari/pyasn) Python IP address to Autonomous System Number lookup module. (Supports fast local lookups, and historical lookups using archived BGP dumps.)
+- [**158**星][3y] [Java] [googlecloudplatform/endpoints-codelab-android](https://github.com/googlecloudplatform/endpoints-codelab-android) endpoints-codelab-android
+- [**158**星][7d] [LLVM] [galoisinc/reopt](https://github.com/galoisinc/reopt) A tool for analyzing x86-64 binaries.
+- [**158**星][5y] [C] [fuzion24/androidobfuscation-ndk](https://github.com/fuzion24/androidobfuscation-ndk) Example of obfuscating an Android NDK project using O-LLVM
+- [**158**星][1y] [C++] [doublelabyrinth/010editor-keygen](https://github.com/doublelabyrinth/010editor-keygen) A keygen for 010Editor
+- [**158**星][4y] [Py] [crown-prince/python_poc](https://github.com/crown-prince/python_poc) 一款python编写的Web安全检测PoC&&EXP框架
+- [**158**星][2m] [Py] [c0rvax/project-black](https://github.com/c0rvax/project-black) Pentest/BugBounty progress control with scanning modules
+- [**158**星][4y] [Py] [blazeinfosec/bt2](https://github.com/blazeinfosec/bt2) 电报后门,使用电报做C&C 服务器
+- [**158**星][1y] [Py] [bayotop/off-by-slash](https://github.com/bayotop/off-by-slash) off-by-slash: Bupr扩展, 检测利用Nginx错误配置导致的重名遍历(alias traversal)
+- [**158**星][1m] [C#] [andrewlock/netescapades.aspnetcore.securityheaders](https://github.com/andrewlock/netescapades.aspnetcore.securityheaders) Small package to allow adding security headers to ASP.NET Core websites
+- [**158**星][2y] [Py] [alephsecurity/abootool](https://github.com/alephsecurity/abootool) abootool:基于静态知识(从bootloader 镜像中提取的字符串)动态 fuzz 隐藏的 fastboot OEM 指令
+- [**157**星][16d] [C++] [lifting-bits/rellic](https://github.com/lifting-bits/rellic) Rellic produces goto-free C output from LLVM bitcode
+- [**157**星][6m] [Py] [ecstatic-nobel/osweep](https://github.com/ecstatic-nobel/OSweep) Don't Just Search OSINT. Sweep It.
+- [**157**星][1y] [Py] [ultrasecurity/webkiller](https://github.com/ultrasecurity/webkiller) 多功能渗透测试辅助脚本
+- [**157**星][7m] [JS] [tidesec/proxy_pool](https://github.com/tidesec/proxy_pool) Proxy_Pool(代理资源池),一个小巧的代理ip抓取+评估+存储+展示的一体化的工具,包括了web展示和接口。
+- [**157**星][3y] [Py] [theevilbit/exploit_generator](https://github.com/theevilbit/exploit_generator) Automated Exploit generation with WinDBG
+- [**157**星][2y] [swannman/ircapabilities](https://github.com/swannman/ircapabilities) Incident Response Hierarchy of Needs
+- [**157**星][2y] [C] [spajed/processrefund](https://github.com/spajed/processrefund) An attempt at Process Doppelgänging
+- [**157**星][3m] [PS] [shiva108/ctf-notes](https://github.com/shiva108/ctf-notes) Everything needed for doing CTFs
+- [**157**星][5m] [Rust] [rust-fuzz/honggfuzz-rs](https://github.com/rust-fuzz/honggfuzz-rs) Fuzz your Rust code with Google-developed Honggfuzz !
+- [**157**星][4y] [C#] [radiowar/nfcgui](https://github.com/radiowar/nfcgui) 图形化NFC协议安全分析工具,主要针对Mifare卡,基于libnfc完成
+- [**157**星][1y] [C++] [openats/openats](https://github.com/openats/openats) 天线追踪系统
+- [**157**星][2m] [C++] [nitrokey/nitrokey-app](https://github.com/nitrokey/nitrokey-app) a cross-platform (runs under Windows, Linux and Mac OS) application created to manage Nitrokey devices
+- [**157**星][6m] [mrmugiwara/ctf-tools](https://github.com/mrmugiwara/ctf-tools) Useful CTF Tools
+- [**157**星][2y] [C] [lctf/lctf2017](https://github.com/lctf/lctf2017) Source code, writeups and exps in LCTF2017.
+- [**157**星][6m] [C] [kkamagui/shadow-box-for-x86](https://github.com/kkamagui/shadow-box-for-x86) Lightweight and Practical Kernel Protector for x86 (Presented at BlackHat Asia 2017/2018, beVX 2018 and HITBSecConf 2017)
+- [**157**星][8y] [C++] [kavika13/remcom](https://github.com/kavika13/remcom) Remote Command Executor: A OSS replacement for PsExec and RunAs - or Telnet without having to install a server. Take your pick :)
+- [**157**星][3y] [HTML] [jonnyhightower/neet](https://github.com/jonnyhightower/neet) Neet - Network Enumeration and Exploitation Tool
+- [**157**星][2y] [Py] [joker25000/optiva-framework](https://github.com/joker25000/optiva-framework) Optiva-Framework
+- [**157**星][2y] [Py] [galkan/flashlight](https://github.com/galkan/flashlight) Pentesters spend too much time during information gathering phase. Flashlight (Fener) provides services to scan network/ports and gather information rapidly on target networks. So Flashlight should be the choice to automate discovery step during a penetration test. In this article, usage of Flashligh application will be explained.
+- [**157**星][4m] [C++] [fritzone/obfy](https://github.com/fritzone/obfy) A tiny C++ obfuscation framework
+- [**157**星][3y] [Py] [facert/github_search](https://github.com/facert/github_search) 根据 keywords 搜索 github 上面的 repos, 并通过 web 展示
+- [**157**星][9y] [C] [comex/star](https://github.com/comex/star) the code behind the second incarnation of jailbreakme.com
+- [**157**星][15d] [Py] [angr/heaphopper](https://github.com/angr/heaphopper) HeapHopper is a bounded model checking framework for Heap-implementations
+- [**157**星][3y] [Py] [4w4k3/umbrella](https://github.com/4w4k3/umbrella) 用于渗透的File Dropper
+- [**156**星][24d] [SourcePawn] [splewis/csgo-practice-mode](https://github.com/splewis/csgo-practice-mode) CS:GO Sourcemod plugin for private team/individual practice servers
+- [**156**星][3y] [Go] [wille/cry](https://github.com/wille/cry) Cross platform PoC ransomware written in Go
+- [**156**星][3y] [C++] [zer0mem0ry/runpe](https://github.com/zer0mem0ry/runpe) 在与主机进程相同的地址空间中运行另一个Windows PE
+- [**156**星][3y] [Ruby] [waterlink/rack-reverse-proxy](https://github.com/waterlink/rack-reverse-proxy) A Reverse Proxy for Rack
+- [**156**星][2m] [SystemVerilog] [ufrisk/pcileech-fpga](https://github.com/ufrisk/pcileech-fpga) FPGA 模块,可与 PCILeech DMA(Direct Memory Access )攻击软件组合使用
+- [**156**星][2y] [Py] [tintinweb/striptls](https://github.com/tintinweb/striptls) proxy poc implementation of STARTTLS stripping attacks
+- [**156**星][11m] [C] [soldierx/libhijack](https://github.com/soldierx/libhijack) Runtime Process Infection Made Easy
+- [**156**星][2y] [C++] [rossja/tinynuke](https://github.com/rossja/tinynuke) zeus-style banking trojan
+- [**156**星][3m] [Py] [rhinosecuritylabs/cloud-security-research](https://github.com/rhinosecuritylabs/cloud-security-research) Cloud-related research releases from the Rhino Security Labs team.
+- [**156**星][2y] [PS] [psconfeu/2018](https://github.com/psconfeu/2018) PowerShell Conference Europe 2018 Slides and Demo Scripts
+- [**156**星][1y] [YARA] [mikesxrs/open-source-yara-rules](https://github.com/mikesxrs/open-source-yara-rules) YARA Rules I come across on the internet
+- [**156**星][2y] [C++] [mharjac/bad_ducky](https://github.com/mharjac/bad_ducky) Rubber Ducky compatible clone based on CJMCU BadUSB HW.
+- [**156**星][6m] [Shell] [maldevel/blue-team](https://github.com/maldevel/blue-team) Blue Team Scripts
+- [**156**星][1y] [Py] [madengr/ham2mon](https://github.com/madengr/ham2mon) GNU Radio based SDR scanner for narrow band FM demodulation
+- [**156**星][2y] [Go] [ls0f/gortcp](https://github.com/ls0f/gortcp) 内网穿透、远程文件上传下载、命令执行
+- [**156**星][1y] [Java] [lightless233/java-unserialization-study](https://github.com/lightless233/java-unserialization-study) QAQ Just study unserialize vulnerabilities in Java :)
+- [**156**星][9y] [Py] [jonty/idiocy](https://github.com/jonty/idiocy) Idiocy is a warning shot to people browsing the internet insecurely.
+- [**156**星][2m] [JS] [interference-security/frida-scripts](https://github.com/interference-security/frida-scripts) Frida Scripts
+- [**156**星][18d] [C] [hfiref0x/ntcall64](https://github.com/hfiref0x/ntcall64) Windows NT x64 syscall fuzzer
+- [**156**星][1m] [JS] [henices/chrome-proxy-helper](https://github.com/henices/chrome-proxy-helper) Chrome PROXY extension, set proxy for Chrome browser
+- [**156**星][1y] [TS] [handsomeone/scout](https://github.com/handsomeone/scout) 可能是东半球最灵活的 URL 监控系统
+- [**156**星][23d] [Py] [gprmax/gprmax](https://github.com/gprmax/gprmax) gprMax is open source software that simulates electromagnetic wave propagation using the Finite-Difference Time-Domain (FDTD) method for numerical modelling of Ground Penetrating Radar (GPR)
+- [**156**星][3y] [C++] [gbonacini/cve-2016-5195](https://github.com/gbonacini/cve-2016-5195) A CVE-2016-5195 exploit example.
+- [**156**星][1y] [Py] [fireeye/geologonalyzer](https://github.com/fireeye/geologonalyzer) GeoLogonalyzer is a utility to analyze remote access logs for anomalies such as travel feasibility and data center sources.
+- [**156**星][3y] [Py] [fire30/ps4-3.55-code-execution-poc](https://github.com/fire30/ps4-3.55-code-execution-poc)
+- [**156**星][8m] [dsignr/disallowed-usernames](https://github.com/dsignr/disallowed-usernames) An open source database of disallowed usernames for software projects to prevent phishing and impersonation.
+- [**156**星][2d] [C#] [djkaty/il2cppinspector](https://github.com/djkaty/il2cppinspector) The easy way to extract types and metadata from Unity IL2CPP binaries
+- [**156**星][9m] [dckc/awesome-ocap](https://github.com/dckc/awesome-ocap) Awesome Object Capabilities andCapability-based Security
+- [**156**星][8m] [Visual Basic .NET] [christophetd/spoofing-office-macro](https://github.com/christophetd/spoofing-office-macro) a VBA macro spawning a process with a spoofed parent and command line.
+- [**156**星][6m] [ObjC] [chichou/sploits](https://github.com/chichou/sploits) CVE-2018-4310
+- [**156**星][4m] [Py] [certcc/trommel](https://github.com/certcc/trommel) Sift Through Embedded Device Files to Identify Potential Vulnerable Indicators
+- [**156**星][2m] [Go] [c-sto/recursebuster](https://github.com/c-sto/recursebuster) rapid content discovery tool for recursively querying webservers, handy in pentesting and web application assessments
+- [**156**星][4y] [Py] [borjamerino/pazuzu](https://github.com/borjamerino/pazuzu) Reflective DLL to run binaries from memory
+- [**156**星][2y] [PHP] [bo0om/cve-2017-5124](https://github.com/bo0om/cve-2017-5124) Chrome < 62 uxss exploit (CVE-2017-5124)
+- [**156**星][2y] [C] [armadito/armadito-av](https://github.com/armadito/armadito-av) Armadito antivirus main repository
+- [**156**星][1y] [C#] [anthemtotheego/sharpcradle](https://github.com/anthemtotheego/sharpcradle)
+- [**156**星][13d] [Scala] [albuch/sbt-dependency-check](https://github.com/albuch/sbt-dependency-check) SBT Plugin for OWASP DependencyCheck. Monitor your dependencies and report if there are any publicly known vulnerabilities (e.g. CVEs).
+- [**155**星][2m] [Go] [ihciah/go-shadowsocks-magic](https://github.com/ihciah/go-shadowsocks-magic) A shadowsocks implementation in golang with Multi-connection Acceleration
+- [**155**星][11m] [feeicn/vulture](https://github.com/feeicn/vulture) 分布式近实时全覆盖资产和漏洞扫描器
+- [**155**星][3m] [C] [ajkhoury/uefi-bootkit](https://github.com/ajkhoury/UEFI-Bootkit) A small bootkit which does not rely on x64 assembly.
+- [**155**星][2y] [Py] [crytic/ida-evm](https://github.com/crytic/ida-evm) 以太坊虚拟机的Processor模块
+- [**155**星][3y] [Py] [z0noxz/powerstager](https://github.com/z0noxz/powerstager) powerstager:创建可执行文件,用于下载PowerShell Payload,将其加载到内存,并使用混淆的EC方法运行
+- [**155**星][3y] [C] [x0rz/ssh-honeypot](https://github.com/x0rz/ssh-honeypot) Fake sshd that logs ip addresses, usernames, and passwords.
+- [**155**星][4m] [Shell] [weaveworks/tcptracer-bpf](https://github.com/weaveworks/tcptracer-bpf) eBPF program using kprobes to trace TCP events without run-time compilation dependencies
+- [**155**星][8m] [Shell] [viralmaniar/i-see-you](https://github.com/viralmaniar/i-see-you) ISeeYou is a Bash and Javascript tool to find the exact location of the users during social engineering or phishing engagements. Using exact location coordinates an attacker can perform preliminary reconnaissance which will help them in performing further targeted attacks.
+- [**155**星][1y] [Py] [sublimelinter/sublimelinter-shellcheck](https://github.com/sublimelinter/sublimelinter-shellcheck) This linter plugin for SublimeLinter provides an interface to shellcheck.
+- [**155**星][10d] [Java] [spring-cloud/spring-cloud-vault](https://github.com/spring-cloud/spring-cloud-vault) Configuration Integration with HashiCorp Vault
+- [**155**星][4m] [Assembly] [smealum/butthax](https://github.com/smealum/butthax) lovense hush buttplug exploit chain
+- [**155**星][8m] [Common Lisp] [oblivia-simplex/roper](https://github.com/oblivia-simplex/roper) Return Oriented Programme Evolution with ROPER
+- [**155**星][2m] [Py] [nucypher/pyumbral](https://github.com/nucypher/pyumbral) NuCypher's reference implementation of Umbral (threshold proxy re-encryption) using OpenSSL and Cryptography.io
+- [**155**星][4y] [Py] [n0tr00t/beehive](https://github.com/n0tr00t/beehive) Beehive is an open-source vulnerability detection framework based on Beebeeto-framework. Security researcher can use it to find vulnerability, exploits, subsequent attacks, etc.
+- [**155**星][4m] [mac4n6/presentations](https://github.com/mac4n6/presentations) Presentation Archives for my macOS and iOS Related Research
+- [**155**星][27d] [Java] [itzsomebody/radon](https://github.com/itzsomebody/radon) A crappy Java bytecode obfuscator (meaning: not for production use)
+- [**155**星][10m] [Ruby] [hatlord/snmpwn](https://github.com/hatlord/snmpwn) An SNMPv3 User Enumerator and Attack tool
+- [**155**星][7y] [evilcos/xss.swf](https://github.com/evilcos/xss.swf) a tiny tool for swf hacking, just browse it:)
+- [**155**星][3y] [JS] [escomplex/complexity-report](https://github.com/escomplex/complexity-report) **UNMAINTAINED** Software complexity analysis for JavaScript projects
+- [**155**星][11m] [Py] [epsylon/cintruder](https://github.com/epsylon/cintruder) Captcha Intruder (CIntruder) is an automatic pentesting tool to bypass captchas.
+- [**155**星][6y] [C] [defuse/sockstress](https://github.com/defuse/sockstress) Sockstress (TCP DoS) implementation.
+- [**155**星][2y] [Ruby] [chrislee35/passivedns-client](https://github.com/chrislee35/passivedns-client) passivedns-client provides a library and a query tool for querying several passive DNS providers
+- [**155**星][5y] [C] [arisada/midgetpack](https://github.com/arisada/midgetpack) midgetpack is a multiplatform secure ELF packer
+- [**155**星][11d] [Py] [antichown/subdomain-takeover](https://github.com/antichown/subdomain-takeover) Subdomain Takeover Scanner | Subdomain Takeover Tool | by 0x94
+- [**155**星][2m] [C] [airbus-seclab/crashos](https://github.com/airbus-seclab/crashos) crashos:一个极简的操作系统,通过创建畸形的系统配置,导致 hypervisor 崩溃,从而辅助 hypervisor 漏洞研究
+- [**154**星][4d] [Py] [zeddyu/http-smuggling-lab](https://github.com/zeddyu/http-smuggling-lab) Use HTTP Smuggling Lab to learn HTTP Smuggling.
+- [**154**星][3y] [Visual Basic .NET] [mwsrc/plasmarat](https://github.com/mwsrc/PlasmaRAT) Remote Access Trojan(RAT), Miner, DDoS
+- [**154**星][7m] [C#] [wohlstand/destroy-windows-10-spying](https://github.com/wohlstand/destroy-windows-10-spying) 禁用/销毁Windows的间谍功能
+- [**154**星][10m] [Py] [vulnerscom/zabbix-threat-control](https://github.com/vulnerscom/zabbix-threat-control) Zabbix vulnerability assessment plugin
+- [**154**星][6d] [Go] [ullaakut/nmap](https://github.com/ullaakut/nmap) Idiomatic nmap library for go developers
+- [**154**星][4m] [threatexpress/malleable-c2](https://github.com/threatexpress/malleable-c2) Cobalt Strike Malleable C2 Design and Reference Guide
+- [**154**星][3y] [C] [stonedreamforest/naiheqiao](https://github.com/stonedreamforest/naiheqiao) open-source x86/x64 usermode anti-anti-debug plugin
+- [**154**星][11m] [C] [sjvermeu/cvechecker](https://github.com/sjvermeu/cvechecker) Command-line utility to scan the system and report on potential vulnerabilities, based on public CVE data
+- [**154**星][2y] [Py] [secretsquirrel/fido](https://github.com/secretsquirrel/fido) Teaching old shellcode new tricks
+- [**154**星][2y] [C] [scen/osxinj](https://github.com/scen/osxinj) osx dylib injection
+- [**154**星][3m] [Java] [rednaga/axmlprinter](https://github.com/rednaga/axmlprinter) Library for parsing and printing compiled Android manifest files
+- [**154**星][2m] [Java] [reddr/libscout](https://github.com/reddr/libscout) Third-party library detector for Java/Android apps
+- [**154**星][13d] [Shell] [realtho/partyloud](https://github.com/realtho/partyloud) A simple tool to generate fake web browsing and mitigate tracking
+- [**154**星][5m] [Py] [ragibson/steganography](https://github.com/ragibson/steganography) Least Significant Bit Steganography for bitmap images (.bmp and .png), WAV sound files, and byte sequences. Simple LSB Steganalysis (LSB extraction) for bitmap images.
+- [**154**星][5d] [Pascal] [passbyyou888/zserver4d](https://github.com/passbyyou888/zserver4d) ZServer4D 是一套从商业项目剥离而出的云服务器中间件,可以承载百万级的分布式负载服务,并且支持IoT及内网穿透
+- [**154**星][2y] [PHP] [paralax/lfi-labs](https://github.com/paralax/lfi-labs) small set of PHP scripts to practice exploiting LFI, RFI and CMD injection vulns
+- [**154**星][2m] [Rust] [net-reflow/reflow](https://github.com/net-reflow/reflow) Content-routable socks5 proxy switcher for your entire LAN.
+- [**154**星][2y] [Py] [moyix/creddump](https://github.com/moyix/creddump) Automatically exported from code.google.com/p/creddump
+- [**154**星][6d] [Go] [mimoo/disco](https://github.com/mimoo/disco) a protocol to encrypt communications and a cryptographic library based on Disco
+- [**154**星][4y] [Py] [kbandla/immunitydebugger](https://github.com/kbandla/immunitydebugger) ImmunityDebugger
+- [**154**星][4m] [AutoIt] [jschicht/rawcopy](https://github.com/jschicht/rawcopy) copy files off NTFS volumes by using low level disk reading method
+- [**154**星][10m] [Shell] [joukewitteveen/netctl](https://github.com/joukewitteveen/netctl) Profile based systemd network management
+- [**154**星][27d] [Go] [jollheef/out-of-tree](https://github.com/jollheef/out-of-tree) out-of-tree kernel {module, exploit} development tool
+- [**154**星][2d] [Py] [nccgroup/keimpx](https://github.com/nccgroup/keimpx) Check for valid credentials across a network over SMB
+- [**154**星][2y] [C] [ifding/radare2-tutorial](https://github.com/ifding/radare2-tutorial) Reverse Engineering using Radare2
+- [**154**星][29d] [hl2guide/all-in-one-customized-adblock-list](https://github.com/hl2guide/all-in-one-customized-adblock-list) An all-in-one adblock list that thoroughly blocks trackers, popup ads, ads, unwanted cookies, fake news, cookie warning messages, unwanted comment sections, crypto-coin mining, YouTube clutter, Twitter guff and social network hassles. Development is halted at version 2.8.
+- [**154**星][9m] [C++] [changeofpace/self-remapping-code](https://github.com/changeofpace/self-remapping-code) This program remaps its image to prevent the page protection of pages contained in the image from being modified via NtProtectVirtualMemory.
+- [**154**星][7m] [C#] [anthemtotheego/sharpexec](https://github.com/anthemtotheego/sharpexec) an offensive security C# tool designed to aid with lateral movement
+- [**154**星][2y] [Ruby] [0x09al/cve-2018-8174-msf](https://github.com/0x09al/cve-2018-8174-msf) CVE-2018-8174 - VBScript memory corruption exploit.
+- [**153**星][4y] [Go] [inconshreveable/go-tunnel](https://github.com/inconshreveable/go-tunnel) [DEPRECATED] Tunnel to localhost as a library
+- [**153**星][11m] [CSS] [kali-docs-cn/kali-linux-web-pentest-cookbook-zh](https://github.com/kali-docs-cn/kali-linux-web-pentest-cookbook-zh)
+- [**153**星][2y] [Java] [zjlywjh001/phrackctf-platform-team](https://github.com/zjlywjh001/phrackctf-platform-team) CTF platfrom(Team Version) developed by Jarvis from Phrack Team. 做一个功能最全的CTF平台。
+- [**153**星][3m] [HTML] [zer0yu/berserker](https://github.com/zer0yu/berserker) A list of useful payloads for Web Application Security and Pentest/CTF
+- [**153**星][3y] [ysrc/androidobfusedictionary](https://github.com/ysrc/androidobfusedictionary) Android ProGuard变态混淆字典
+- [**153**星][1y] [voidfyoo/cve-2018-3191](https://github.com/voidfyoo/cve-2018-3191) CVE-2018-3191 payload generator
+- [**153**星][8m] [valdikss/super-uefiinsecureboot-disk](https://github.com/valdikss/super-uefiinsecureboot-disk) Super UEFIinSecureBoot Disk: Boot any OS or .efi file without disabling UEFI Secure Boot
+- [**153**星][3y] [Ruby] [urbanadventurer/username-anarchy](https://github.com/urbanadventurer/username-anarchy) Username tools for penetration testing
+- [**153**星][3m] [Py] [trustedsec/ridenum](https://github.com/trustedsec/ridenum) Rid_enum is a null session RID cycle attack for brute forcing domain controllers.
+- [**153**星][2y] [ASP] [testsecer/webshell](https://github.com/testsecer/webshell) 这是一个WebShell收集项目
+- [**153**星][4y] [Py] [samyoyo/weeman](https://github.com/samyoyo/weeman) HTTP Server for phishing in Python
+- [**153**星][3d] [Py] [renatahodovan/fuzzinator](https://github.com/renatahodovan/fuzzinator) Fuzzinator Random Testing Framework
+- [**153**星][10m] [Ruby] [palkan/n_plus_one_control](https://github.com/palkan/n_plus_one_control) RSpec and Minitest matchers to prevent N+1 queries problem
+- [**153**星][2y] [HTML] [mpirnat/lets-be-bad-guys](https://github.com/mpirnat/lets-be-bad-guys) A deliberately-vulnerable website and exercises for teaching about the OWASP Top 10
+- [**153**星][8m] [Py] [k0retux/fuddly](https://github.com/k0retux/fuddly) Fuzzing/数据操纵(Data Manipulation)框架
+- [**153**星][2y] [JS] [cazala/react-coin-hive](https://github.com/cazala/react-coin-hive) Mine cryptocurrency while your users haven't engaged with your content lately
+- [**153**星][2y] [Py] [atlassian/localstack](https://github.com/atlassian/localstack)
+- [**153**星][12m] [Go] [adguardteam/adguarddns](https://github.com/adguardteam/adguarddns) Public DNS resolver that protects you from ad trackers
+- [**153**星][5m] [Shell] [0xmitsurugi/gimmecredz](https://github.com/0xmitsurugi/gimmecredz) You're a #pentester and you totally pwn that linux box, congrats! Now what? You can launch gimmecredz.sh which will try to extract all passwords from known locations.
+- [**153**星][3y] [Makefile] [0x36/vpnpivot](https://github.com/0x36/vpnpivot) Explore the network using VPNPivot tool
+- [**152**星][7m] [Py] [vysecurity/linkedint](https://github.com/vysecurity/linkedint) LinkedIn Recon Tool
+- [**152**星][12d] [C#] [vivami/sauroneye](https://github.com/vivami/sauroneye) Search tool to find specific files containing specific words, i.e. files containing passwords..
+- [**152**星][2y] [Py] [0xbing/wukong-agent](https://github.com/0xbing/wukong-agent) Web scan foundation framework
+- [**152**星][1y] [Py] [vanpersiexp/expcamera](https://github.com/vanpersiexp/expcamera) Exploit Netwave and GoAhead IP Camera
+- [**152**星][6d] [Py] [thehive-project/cortex-analyzers](https://github.com/thehive-project/cortex-analyzers) Cortex Analyzers Repository
+- [**152**星][4y] [thecreeper/privacyfox](https://github.com/thecreeper/privacyfox) PrivacyFox tweaks various preferences in Firefox in order to enhance the privacy of users; it will also try to enforce these changes to maintain your privacy online.
+- [**152**星][6m] [PS] [stealthbits/poshkatz](https://github.com/stealthbits/poshkatz) PowerShell module for Mimikatz
+- [**152**星][2y] [JS] [snooze6/fios](https://github.com/snooze6/fios) small proof of concept gui for auditing iOS applications based on objection
+- [**152**星][7d] [Py] [shirosaidev/sharesniffer](https://github.com/shirosaidev/sharesniffer) 远程文件系统自动嗅探、挂载和爬取
+- [**152**星][2m] [Py] [richiercyrus/venator](https://github.com/richiercyrus/venator) Venator is a python tool used to gather data for proactive detection of malicious activity on macOS devices.
+- [**152**星][4d] [C] [pkroma/processhacker](https://github.com/pkroma/processhacker) A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware—mirror of
+- [**152**星][5y] [C++] [mothran/aflpin](https://github.com/mothran/aflpin) aflpin enables afl to fuzz blackbox binaries using a pin tool to trace execution branches.
+- [**152**星][2y] [Py] [laie/worldsfirstsha2vulnerability](https://github.com/laie/worldsfirstsha2vulnerability) Sha256 vulnerability for full rounds. Circular hash attack.
+- [**152**星][3y] [C] [ixty/xarch_shellcode](https://github.com/ixty/xarch_shellcode) Cross Architecture Shellcode in C
+- [**152**星][7y] [Py] [intrepidusgroup/imdmtools](https://github.com/intrepidusgroup/imdmtools) Intrepidus Group's iOS MDM tools
+- [**152**星][6m] [Objective-C++] [gaoshilei/mmplugin](https://github.com/gaoshilei/mmplugin) 微信自动抢红包、修改运动步数、朋友圈小视频转发等功能(无需越狱),附微信重签名教程
+- [**152**星][2y] [Java] [floyd-fuh/jks-private-key-cracker-hashcat](https://github.com/floyd-fuh/jks-private-key-cracker-hashcat) Nail in the JKS coffin - Cracking passwords of private key entries in a JKS file
+- [**152**星][8y] [dotfighter/torshammer](https://github.com/dotfighter/torshammer) Tor's hammer. Slow post DDOS tool written in python.
+- [**152**星][7y] [C] [dannvix/keylogger-osx](https://github.com/dannvix/keylogger-osx) Very simple keylogger for self-quantifying on Mac OS X
+- [**152**星][3m] [Shell] [countercept/snake](https://github.com/countercept/snake) snake - a malware storage zoo
+- [**152**星][2d] [Shell] [bitnami/bitnami-docker-nginx](https://github.com/bitnami/bitnami-docker-nginx) Bitnami nginx Docker Image
+- [**152**星][1m] [C] [angr/patcherex](https://github.com/angr/patcherex) Shellphish's automated patching engine, originally created for the Cyber Grand Challenge.
+- [**151**星][1y] [Java] [zhangjiupeng/agentx](https://github.com/zhangjiupeng/agentx) Shadowsocks升级版,支持协议伪装和流量压缩,易于扩展,可统计流量
+- [**151**星][3y] [PS] [nsacyber/pass-the-hash-guidance](https://github.com/nsacyber/pass-the-hash-guidance) Configuration guidance for implementing Pass-the-Hash mitigations. #nsacyber
+- [**151**星][23d] [C] [tiiffi/mcrcon](https://github.com/tiiffi/mcrcon) Rcon client for Minecraft
+- [**151**星][1m] [C] [processhacker/plugins-extra](https://github.com/processhacker/plugins-extra) These are highly unstable, buggy, incomplete plugins that are not included with Process Hacker by default.
+- [**151**星][3y] [zbetcheckin/pdf_analysis](https://github.com/zbetcheckin/pdf_analysis) Several PDF analysis reassembled with additional tips and tools
+- [**151**星][2y] [Rust] [trailofbits/flying-sandbox-monster](https://github.com/trailofbits/flying-sandbox-monster) 如何将 Windows Defender 放到沙箱中运行,以及关于 Windows 系统上 Rust 的若干思考
+- [**151**星][1y] [Py] [souhardya/zerodoor](https://github.com/souhardya/zerodoor) A script written lazily for generating cross-platform backdoors on the go :)
+- [**151**星][2y] [CSS] [saadeghi/browser-hack-sass-mixins](https://github.com/saadeghi/browser-hack-sass-mixins) Browser hack sass mixin - Apply your SCSS to a specific browser - CSS hacks for: IE, Chrome, Firefox, Edge, Opera
+- [**151**星][2d] [HTML] [retest/recheck-web](https://github.com/retest/recheck-web) recheck for web apps – change comparison tool with local Golden Masters, Git-like ignore syntax and "Unbreakable Selenium" tests.
+- [**151**星][2y] [Py] [reswitched/cagetheunicorn](https://github.com/reswitched/cagetheunicorn) Debugging/emulating environment for Switch code
+- [**151**星][2y] [Java] [psiinon/bodgeit](https://github.com/psiinon/bodgeit) The BodgeIt Store is a vulnerable web application which is currently aimed at people who are new to pen testing.
+- [**151**星][5m] [Assembly] [peterferrie/win-exec-calc-shellcode](https://github.com/peterferrie/win-exec-calc-shellcode) 执行calc.exe的Shellcode (x86/x64, 所有版本/SPs)
+- [**151**星][6y] [onx/cih](https://github.com/onx/cih) The source code of the CIH virus
+- [**151**星][2y] [CSS] [m6a-uds/ssrf-lab](https://github.com/m6a-uds/ssrf-lab) Lab for exploring SSRF vulnerabilities
+- [**151**星][8d] [C] [libimobiledevice/libirecovery](https://github.com/libimobiledevice/libirecovery) Library and utility to talk to iBoot/iBSS via USB on Mac OS X, Windows, and Linux
+- [**151**星][2m] [Java] [leadroyal/fastjson-blacklist](https://github.com/leadroyal/fastjson-blacklist)
+- [**151**星][2y] [C++] [l3cr0f/dccwbypassuac](https://github.com/l3cr0f/dccwbypassuac) Windows 8.1 and 10 UAC bypass abusing WinSxS in "dccw.exe".
+- [**151**星][5m] [Py] [kacperszurek/burp_wp](https://github.com/kacperszurek/burp_wp) Find known vulnerabilities in WordPress plugins and themes using Burp Suite proxy. WPScan like plugin for Burp.
+- [**151**星][2y] [Py] [k4m4/dymerge](https://github.com/k4m4/dymerge) takes given wordlists and merges them into one dynamic dictionary that can then be used as ammunition for a successful dictionary based (or bruteforce) attack.
+- [**151**星][30d] [Py] [jymcheong/autottp](https://github.com/jymcheong/autottp) Automated Tactics Techniques & Procedures
+- [**151**星][3y] [PS] [johnnydep/owa-toolkit](https://github.com/johnnydep/owa-toolkit) Powershell module to assist in attacking Exchange/Outlook Web Access
+- [**151**星][1y] [Py] [jiangsir404/php-code-audit](https://github.com/jiangsir404/php-code-audit) php code audit for cms vulnerabilities / 代码审计,对一些大型cms漏洞的复现研究,更新源码和漏洞exp
+- [**151**星][29d] [jeremymain/gpuprofiler](https://github.com/jeremymain/gpuprofiler) Understand your application and workflow resource requirements
+- [**151**星][2m] [Py] [iamblackhacker/facebook-bruteforce](https://github.com/iamblackhacker/facebook-bruteforce) Bruteforce attack on Facebook account using python script
+- [**151**星][5y] [Shell] [hellman/fixenv](https://github.com/hellman/fixenv) Fix stack addresses (when no ASLR) with and without debugging
+- [**151**星][3m] [C] [hasherezade/process_doppelganging](https://github.com/hasherezade/process_doppelganging) 进程注入技术 Process Doppelganging 的实现代码
+- [**151**星][8m] [Py] [githacktools/leaked](https://github.com/githacktools/leaked) Leaked? 2.1 - A Checking tool for Hash codes, Passwords and Emails leaked
+- [**151**星][1y] [css] [eun/ctf.tf](https://github.com/eun/ctf.tf) A database of collected CTFs and their solutions.
+- [**151**星][3y] [Shell] [buguroo/cuckooautoinstall](https://github.com/buguroo/cuckooautoinstall) Auto Installer Script for Cuckoo Sandbox
+- [**151**星][2y] [JS] [alexzzz9/ps4-5.01-webkit-exploit-poc](https://github.com/alexzzz9/ps4-5.01-webkit-exploit-poc) PS4 5.01 WebKit Exploit PoC
+- [**150**星][13d] [C] [ray-cp/vm-escape](https://github.com/ray-cp/vm-escape) some interesting vm-escape game
+- [**150**星][1m] [Py] [tintinweb/ecdsa-private-key-recovery](https://github.com/tintinweb/ecdsa-private-key-recovery) A simple library to recover the private key of ECDSA and DSA signatures sharing the same nonce k and therefore having identical signature parameter r
+- [**150**星][3m] [Py] [stuhli/dfirtrack](https://github.com/stuhli/dfirtrack) 数字取证, 与事件响应追踪. 基于Django
+- [**150**星][9y] [Shell] [spiderlabs/jboss-autopwn](https://github.com/spiderlabs/jboss-autopwn) A JBoss script for obtaining remote shell access
+- [**150**星][1y] [Py] [shawarkhanethicalhacker/d-tect](https://github.com/shawarkhanethicalhacker/d-tect) D-TECT - Pentesting the Modern Web
+- [**150**星][2y] [Py] [sensepost/userenum](https://github.com/sensepost/userenum) Domain user enumeration tool
+- [**150**星][3y] [C++] [scateu/kalibrate-hackrf](https://github.com/scateu/kalibrate-hackrf) kalibrate for hackrf
+- [**150**星][12d] [Py] [rogerhu/gdb-heap](https://github.com/rogerhu/gdb-heap) Heap Analyzer for Python
+- [**150**星][5y] [Py] [rep/dionaea](https://github.com/rep/dionaea) dionaea low interaction honeypot (forked from dionaea.carnivore.it)
+- [**150**星][2y] [Py] [orppra/ropa](https://github.com/orppra/ropa) ROP 链创建工具, 带界面, 基于 Ropper
+- [**150**星][5m] [Py] [moyix/pdbparse](https://github.com/moyix/pdbparse) Python code to parse Microsoft PDB files
+- [**150**星][1y] [C] [matthiaskramm/swftools](https://github.com/matthiaskramm/swftools) Utilities for editing and generating Adobe Flash (SWF) files.
+- [**150**星][2y] [Py] [malwaretech/trickbot-toolkit](https://github.com/malwaretech/trickbot-toolkit) A collection of tools for dealing with TrickBot
+- [**150**星][2y] [Go] [kudelskisecurity/cdf](https://github.com/kudelskisecurity/cdf) automatically test the correctness and security of cryptographic software
+- [**150**星][1y] [Shell] [hiruna/wifi-txpower-unlocker](https://github.com/hiruna/wifi-txpower-unlocker) bash 脚本, 从 Central Regulatory Domain Agent 和 Wireles Regulatory Database 获取源, 生成修改版的 regulatory.bin 并 patch 内核, 以解锁 WiFi TX power
+- [**150**星][6y] [Py] [hiddenillusion/analyzepe](https://github.com/hiddenillusion/analyzepe) Wraps around various tools and provides some additional checks/information to produce a centralized report of a PE file.
+- [**150**星][16d] [Py] [gdbinit/lldbinit](https://github.com/gdbinit/lldbinit) A gdbinit clone for LLDB
+- [**150**星][2y] [Py] [ga-ryo/idafuzzy](https://github.com/ga-ryo/idafuzzy) 模糊搜索: 命令/函数/结构体
+- [**150**星][7m] [Py] [fox-it/adconnectdump](https://github.com/fox-it/adconnectdump) Dump Azure AD Connect credentials for Azure AD and Active Directory
+- [**150**星][3y] [Py] [enginebai/pymedium](https://github.com/enginebai/pymedium) Unofficial Medium Python Flask API and SDK
+- [**150**星][2y] [dragonquesthero/awesome-windows-security-development](https://github.com/dragonquesthero/awesome-windows-security-development) awesome-windows-security-development
+- [**150**星][1y] [C#] [codewhitesec/lethalhta](https://github.com/codewhitesec/lethalhta) Lateral Movement technique using DCOM and HTA
+- [**150**星][2y] [Py] [cls1991/ng](https://github.com/cls1991/ng) 获取未连接的 Wifi 的密码
+- [**150**星][1y] [Py] [ax330d/hrdev](https://github.com/ax330d/hrdev) 反编译输出增强: 使用Python Clang解析标准的IDA反编译结果
+- [**150**星][3y] [Py] [alschwalm/foresight](https://github.com/alschwalm/foresight) A tool for predicting the output of random number generators
+- [**150**星][2y] [C] [alexdenisov/bitcode_retriever](https://github.com/alexdenisov/bitcode_retriever) Retrieves Bitcode from Mach-O binaries
+- [**150**星][2y] [Py] [aipengjie/sensitivefilescan](https://github.com/aipengjie/sensitivefilescan)
+- [**149**星][1y] [C++] [ajkhoury/sigmaker-x64](https://github.com/ajkhoury/SigMaker-x64) IDA Pro 7.0 compatible SigMaker plugin
+- [**149**星][11m] [Go] [znly/strobfus](https://github.com/znly/strobfus) String obfuscation
+- [**149**星][1m] [C] [wmkhoo/taintgrind](https://github.com/wmkhoo/taintgrind) A taint-tracking plugin for the Valgrind memory checking tool
+- [**149**星][11m] [Py] [wangshub/hmpa-pi](https://github.com/wangshub/hmpa-pi) 在树莓派上,利用 Wireshark 扫描附近网络 WiFi 设备,并对扫描结果通过邮件或者微信进行推送
+- [**149**星][4y] [trietptm/sql-injection-payloads](https://github.com/trietptm/sql-injection-payloads) SQL Injection Payloads for Burp Suite, OWASP Zed Attack Proxy,...
+- [**149**星][1y] [C] [theofficialflow/update365](https://github.com/theofficialflow/update365) Custom Firmware 3.65 HENkaku Ensō Updater for PS Vita
+- [**149**星][17d] [Py] [swehner/foos](https://github.com/swehner/foos) Instant replay system for foosball table
+- [**149**星][8m] [Py] [safebreach-labs/sireprat](https://github.com/safebreach-labs/sireprat) Remote Command Execution as SYSTEM on Windows IoT Core
+- [**149**星][2m] [JS] [rwjblue/ember-cli-content-security-policy](https://github.com/rwjblue/ember-cli-content-security-policy) use Content Security Policy (CSP) in your project
+- [**149**星][20d] [HTML] [neal1991/gshark](https://github.com/neal1991/gshark) Scan for sensitive information easily and effectively.
+- [**149**星][1m] [Py] [nccgroup/idahunt](https://github.com/nccgroup/idahunt) 在IDA外部使用IDAPython脚本, 批量创建/读取/解析IDB文件, 可编写自己的IDB分析脚本,命令行工具,
+- [**149**星][3y] [Java] [mwielgoszewski/jython-burp-api](https://github.com/mwielgoszewski/jython-burp-api) Develop Burp extensions in Jython
+- [**149**星][1y] [PS] [mattifestation/psreflect](https://github.com/mattifestation/psreflect) Easily define in-memory enums, structs, and Win32 functions in PowerShell
+- [**149**星][6y] [C++] [kaiserfarrell/malware](https://github.com/kaiserfarrell/malware) virus collection source code
+- [**149**星][9d] [C] [jovanbulck/sgx-step](https://github.com/jovanbulck/sgx-step) A practical attack framework for precise enclave execution control
+- [**149**星][2m] [Ruby] [jekyll/github-metadata](https://github.com/jekyll/github-metadata) Jekyll plugin to propagate the `site.github` namespace and set default values for use with GitHub Pages.
+- [**149**星][4y] [C++] [hiwincn/htran](https://github.com/hiwincn/htran) HTran is a connection bouncer, a kind of proxy server. A “listener” program is hacked stealthily onto an unsuspecting host anywhere on the Internet. When it receives signals from the actual target system, it redirects it to the hacker’s server.
+- [**149**星][7m] [Py] [ethereum/evmlab](https://github.com/ethereum/evmlab) Utilities for interacting with the Ethereum virtual machine
+- [**149**星][2m] [Py] [eth-sri/diffai](https://github.com/eth-sri/diffai) 用于保护神经网络抵御攻击的库
+- [**149**星][2y] [JS] [djadmin/passw0rd](https://github.com/djadmin/passw0rd)
+- [**149**星][2y] [Shell] [dhavalkapil/luaver](https://github.com/dhavalkapil/luaver) Lua Version Manager - Managing and switching between different versions of Lua, LuaJIT and Luarocks made easy
+- [**149**星][5y] [Py] [devttys0/wps](https://github.com/devttys0/wps) WPS related utilities
+- [**149**星][3y] [Jupyter Notebook] [dchad/malware-detection](https://github.com/dchad/malware-detection) Malware Detection and Classification Using Machine Learning
+- [**149**星][1y] [chryzsh/awesome-windows-security](https://github.com/chryzsh/awesome-windows-security) List of Awesome Windows Security Resources
+- [**149**星][20d] [JS] [certsocietegenerale/swordphish-awareness](https://github.com/certsocietegenerale/swordphish-awareness) Swordphish Phishing Awareness Tool
+- [**149**星][1y] [brucetg/app_security](https://github.com/brucetg/app_security)
+- [**149**星][4y] [Py] [arxsys/dff](https://github.com/arxsys/dff) DFF (Digital Forensics Framework) is a Forensics Framework coming with command line and graphical interfaces. DFF can be used to investigate hard drives and volatile memory and create reports about user and system activities.
+- [**149**星][1y] [PS] [airbus-seclab/powersap](https://github.com/airbus-seclab/powersap) powersap:PowershellSAP 评估工具。所有公开且流行/有效的工具的PowerShell 重制版,例如 Bizploit、Metasploitauxiliary 模块、网络收集的 Python 脚本。
+- [**149**星][8m] [C] [adrianyy/eacreversing](https://github.com/adrianyy/eacreversing) Reversing EasyAntiCheat.
+- [**149**星][11m] [Py] [649/crashcast-exploit](https://github.com/649/crashcast-exploit) This tool allows you mass play any YouTube video, terminate apps and rename Chromecast device(s) obtained from Shodan.io
+- [**149**星][3y] [Java] [1998lixin/wechat-database](https://github.com/1998lixin/wechat-database) 破解微信数据库 获取想要的数据
+- [**148**星][12m] [Java] [wnagzihxa1n/ctf-mobile](https://github.com/wnagzihxa1n/CTF-Mobile) CTF Solutions by me
+- [**148**星][2m] [C] [cntools/cnping](https://github.com/cntools/cnping) Minimal Graphical IPV4 Ping Tool
+- [**148**星][5d] [Py] [tuhinshubhra/extanalysis](https://github.com/tuhinshubhra/extanalysis) Browser Extension Analysis Framework - Scan, Analyse Chrome and firefox extensions for vulnerabilities and intels
+- [**148**星][3m] [Py] [trailofbits/protofuzz](https://github.com/trailofbits/protofuzz) Google Protocol Buffers message generator
+- [**148**星][9m] [C] [trailofbits/onesixtyone](https://github.com/trailofbits/onesixtyone) Fast SNMP Scanner
+- [**148**星][6m] [Py] [thekingofduck/burpfakeip](https://github.com/thekingofduck/burpfakeip) 一个用于伪造ip地址进行爆破的Burp Suite插件
+- [**148**星][3m] [Py] [secdec/adapt](https://github.com/secdec/adapt) WebApp自动化渗透测试工具
+- [**148**星][1y] [Py] [raminfp/linux_exploit_development](https://github.com/raminfp/linux_exploit_development) Linux Exploit Development Techniques
+- [**148**星][6m] [Shell] [petermosmans/security-scripts](https://github.com/petermosmans/security-scripts) A collection of security related Python and Bash shell scripts. Analyze hosts on generic security vulnerabilities. Wrapper around popular tools like nmap (portscanner), nikto (webscanner) and testssl.sh (SSL/TLS scanner)
+- [**148**星][2y] [owenliang/php-fpm-code-analysis](https://github.com/owenliang/php-fpm-code-analysis) php-fpm源码分析
+- [**148**星][2y] [C] [ortegaalfredo/kscope](https://github.com/ortegaalfredo/kscope) Small tool to visualize small differences on syscall timing
+- [**148**星][1y] [PS] [nexxai/cryptoblocker](https://github.com/nexxai/cryptoblocker) A script to deploy File Server Resource Manager and associated scripts to block infected users
+- [**148**星][5y] [Py] [mveytsman/dilettante](https://github.com/mveytsman/dilettante) Maven central doesn't do SSL when serving you JARs. Dilettante is a MiTM proxy for exploiting that.
+- [**148**星][9m] [mpgn/cve-2019-5418](https://github.com/mpgn/cve-2019-5418) CVE-2019-5418 - File Content Disclosure on Ruby on Rails
+- [**148**星][19d] [C] [microchiptech/cryptoauthlib](https://github.com/microchiptech/cryptoauthlib) Library for interacting with the Crypto Authentication secure elements
+- [**148**星][5m] [PHP] [mebjas/csrf-protector-php](https://github.com/mebjas/csrf-protector-php) CSRF Protector library: standalone library for CSRF mitigation
+- [**148**星][3y] [HTML] [luxiaok/dnsmasqweb](https://github.com/luxiaok/dnsmasqweb) 基于DNSmasq的DNS解析、以及DHCP地址分配系统
+- [**148**星][24d] [leonjza/awesome-nmap-grep](https://github.com/leonjza/awesome-nmap-grep) Awesome Nmap Grep
+- [**148**星][10d] [Py] [ivandokov/phockup](https://github.com/ivandokov/phockup) Media sorting tool to organize photos and videos from your camera in folders by year, month and day.
+- [**148**星][1y] [Py] [hugsy/binja-retdec](https://github.com/hugsy/binja-retdec) Binary Ninja plugin to decompile binaries using RetDec API
+- [**148**星][9m] [C++] [googleprojectzero/comparecoverage](https://github.com/googleprojectzero/comparecoverage) Clang instrumentation module for tracing variable and buffer comparisons in C/C++ and saving the coverage data to .sancov files
+- [**148**星][3y] [C] [felixwilhelm/mario_baslr](https://github.com/felixwilhelm/mario_baslr) PoC for breaking hypervisor ASLR using branch target buffer collisions
+- [**148**星][5y] [C++] [f-secure/sulo](https://github.com/f-secure/sulo) Dynamic instrumentation tool for Adobe Flash Player built on Intel Pin
+- [**148**星][2y] [C] [elfmaster/skeksi_virus](https://github.com/elfmaster/skeksi_virus) Devestating and awesome Linux X86_64 ELF Virus
+- [**148**星][28d] [C++] [dekuan/vwfirewall](https://github.com/dekuan/vwfirewall) 微盾®VirtualWall®防火墙整套源代码
+- [**148**星][11m] [Ruby] [darkoperator/meterpreter-scripts](https://github.com/darkoperator/meterpreter-scripts) Meterpreter Scripts that I'm working on
+- [**148**星][9m] [C] [darkabode/zerokit](https://github.com/darkabode/zerokit) Zerokit/GAPZ rootkit (non buildable and only for researching)
+- [**148**星][12m] [C] [caesar0301/http-sniffer](https://github.com/caesar0301/http-sniffer) A multi-threading tool to sniff TCP flow statistics and embedded HTTP headers from PCAP file. Each TCP flow carrying HTTP is exported to text file in json format.
+- [**148**星][11m] [Py] [bhavsec/reconspider](https://github.com/bhavsec/reconspider)
+- [**148**星][1y] [Py] [anselal/antminer-monitor](https://github.com/anselal/antminer-monitor) Cryptocurrency mining hardware monitor using a simple web interface
+- [**148**星][1y] [Py] [0xalexei/windowsdefendertools](https://github.com/0xalexei/windowsdefendertools) Tools for instrumenting Windows Defender's mpengine.dll
+- [**147**星][10m] [Shell] [v2ray/dist](https://github.com/v2ray/dist) Mirror of V2Ray core releases
+- [**147**星][8d] [HTML] [izar/pytm](https://github.com/izar/pytm) A Pythonic framework for threat modeling
+- [**147**星][10m] [Py] [zhovner/mfdread](https://github.com/zhovner/mfdread) Mifare 1k/4k dumps parser in human readable format
+- [**147**星][4y] [C] [valdikss/openvpn-fix-dns-leak-plugin](https://github.com/valdikss/openvpn-fix-dns-leak-plugin) OpenVPN plugin to fix Windows DNS Leaks
+- [**147**星][2y] [Py] [valardragon/ctf-crypto](https://github.com/valardragon/ctf-crypto) Contains tools for solving RSA and other crypto problems in CTFs.
+- [**147**星][1y] [C++] [tandasat/memorymon](https://github.com/tandasat/memorymon) Detecting execution of kernel memory where is not backed by any image file
+- [**147**星][3y] [C] [sysprogs/virtualkd](https://github.com/sysprogs/virtualkd)
+- [**147**星][5y] [C] [strazzere/android-lkms](https://github.com/strazzere/android-lkms) Android Loadable Kernel Modules - mostly used for reversing and debugging on controlled systems/emulators
+- [**147**星][2y] [Py] [stfpeak/ctf](https://github.com/stfpeak/ctf) some experience in CTFs
+- [**147**星][6m] [shramos/awesome-cybersecurity-datasets](https://github.com/shramos/awesome-cybersecurity-datasets) A curated list of amazingly awesome Cybersecurity datasets
+- [**147**星][3y] [Py] [risksense-ops/cve-2016-6366](https://github.com/risksense-ops/cve-2016-6366) Public repository for improvements to the EXTRABACON exploit
+- [**147**星][2y] [C] [r-a-w/torproxy](https://github.com/r-a-w/torproxy) TorProxy is a tool which uses netfilter hooks in the linux kernel to route all network traffic through the Tor network
+- [**147**星][3y] [Py] [mpgn/padding-oracle-attack](https://github.com/mpgn/padding-oracle-attack) An exploit for the Padding Oracle Attack
+- [**147**星][2y] [PS] [milo2012/portia](https://github.com/milo2012/portia) portia:自动化内网渗透测试工具
+- [**147**星][2y] [Py] [mandiant/ioc_writer](https://github.com/mandiant/ioc_writer)
+- [**147**星][2y] [Shell] [madmantm/ubuntu-pentest-tools](https://github.com/madmantm/ubuntu-pentest-tools) Script to install security tools, on ubuntu, i follow each new releases.
+- [**147**星][1y] [C++] [justasmasiulis/nt_wrapper](https://github.com/justasmasiulis/nt_wrapper) 对原生Windows系统API的Wrapper
+- [**147**星][3d] [Shell] [hardenedlinux/debian-gnu-linux-profiles](https://github.com/hardenedlinux/debian-gnu-linux-profiles) Debian GNU/Linux based Services Profiles
+- [**147**星][1y] [JS] [gabemarshall/microctfs](https://github.com/gabemarshall/microctfs) Small CTF challenges running on Docker
+- [**147**星][2m] [Py] [frint0/mass-pwn-vbulletin](https://github.com/frint0/mass-pwn-vbulletin) Identify vulnerable (RCE) vBulletin 5.0.0 - 5.5.4 instances using Shodan (CVE-2019-16759)
+- [**147**星][3y] [C#] [endgameinc/py2exedecompiler](https://github.com/endgameinc/py2exedecompiler) Decompiles Exe created by Py2Exe using uncompyle6 for both python 2 and 3.
+- [**147**星][18d] [C++] [emsec/hal](https://github.com/emsec/hal) HAL – The Hardware Analyzer
+- [**147**星][3y] [Py] [drizzlerisk/bunpacker](https://github.com/drizzlerisk/bunpacker) BUnpacker是一款Android脱壳工具
+- [**147**星][2m] [Ruby] [dev-sec/ansible-nginx-hardening](https://github.com/dev-sec/ansible-nginx-hardening) This Ansible role provides secure nginx configurations.
+- [**147**星][1m] [C] [cyrus-and/zizzania](https://github.com/cyrus-and/zizzania) Automated DeAuth attack
+- [**147**星][2m] [C#] [cyberark/zbang](https://github.com/cyberark/zbang) zBang is a risk assessment tool that detects potential privileged account threats
+- [**147**星][11m] [C#] [cobbr/sharpgen](https://github.com/cobbr/sharpgen) SharpGen is a .NET Core console application that utilizes the Rosyln C# compiler to quickly cross-compile .NET Framework console applications or libraries.
+- [**147**星][6m] [C++] [checkpointsw/invizzzible](https://github.com/checkpointsw/invizzzible) InviZzzible is a tool for assessment of your virtual environments in an easy and reliable way. It contains the most recent and up to date detection and evasion techniques as well as fixes for them.
+- [**147**星][22d] [Py] [bugcrowd/vulnerability-rating-taxonomy](https://github.com/bugcrowd/vulnerability-rating-taxonomy) Bugcrowd’s baseline priority ratings for common security vulnerabilities
+- [**147**星][3y] [Py] [biosbits/bits](https://github.com/biosbits/bits) BIOS Implementation Test Suite
+- [**147**星][11m] [Shell] [aturl/awesome-anti-gfw](https://github.com/aturl/awesome-anti-gfw) 突破网络审查和封锁的开源工具清单。
+- [**147**星][7m] [C] [0x00pf/0x00sec_code](https://github.com/0x00pf/0x00sec_code) Code for my 0x00sec.org posts
+- [**146**星][8d] [C] [immunityinc/libptrace](https://github.com/immunityinc/libptrace) An event driven multi-core process debugging, tracing, and manipulation framework.
+- [**146**星][3m] [hmaverickadams/tcm-security-sample-pentest-report](https://github.com/hmaverickadams/tcm-security-sample-pentest-report) Sample pentest report provided by TCM Security
+- [**146**星][5m] [C++] [darthton/polychaos](https://github.com/darthton/polychaos) PE permutation library
+- [**146**星][22d] [PHP] [dunglas/dunglasangularcsrfbundle](https://github.com/dunglas/dunglasangularcsrfbundle) Automatic CSRF protection for JavaScript apps using a Symfony API
+- [**146**星][5m] [C#] [mr-un1k0d3r/maliciousclickoncegenerator](https://github.com/Mr-Un1k0d3r/MaliciousClickOnceGenerator) Quick Malicious ClickOnceGenerator for Red Team
+- [**146**星][2y] [Py] [vduddu/malware](https://github.com/vduddu/malware) Rootkits | Backdoors | Sniffers | Virus | Ransomware | Steganography | Cryptography | Shellcodes | Webshells | Keylogger | Botnets | Worms | Other Network Tools
+- [**146**星][2y] [Py] [undeadsec/enigma](https://github.com/undeadsec/enigma) Multiplatform payload dropper
+- [**146**星][1y] [ObjC] [tihmstar/jelbrektime](https://github.com/tihmstar/jelbrektime) An developer jailbreak for Apple watch S3 watchOS 4.1
+- [**146**星][3m] [Ruby] [seattlerb/ruby2ruby](https://github.com/seattlerb/ruby2ruby) a means of generating pure ruby code easily from RubyParser compatible
+- [**146**星][1y] [JS] [saelo/cve-2018-4233](https://github.com/saelo/cve-2018-4233) Exploit for CVE-2018-4233, a WebKit JIT optimization bug used during Pwn2Own 2018
+- [**146**星][11m] [Py] [ritiek/scribd-downloader](https://github.com/ritiek/scribd-downloader) A scribd-downloader that just works
+- [**146**星][5y] [HTML] [pwnwiki/kaliwiki](https://github.com/pwnwiki/kaliwiki) Unofficial Kali Documentation Project
+- [**146**星][6m] [olafhartong/sysmon-cheatsheet](https://github.com/olafhartong/sysmon-cheatsheet) All sysmon event types and their fields explained
+- [**146**星][4m] [Java] [netsoss/headless-burp](https://github.com/netsoss/headless-burp) Automate security tests using Burp Suite.
+- [**146**星][3y] [C] [nccgroup/triforcelinuxsyscallfuzzer](https://github.com/nccgroup/triforcelinuxsyscallfuzzer) A linux system call fuzzer using TriforceAFL
+- [**146**星][6d] [misterch0c/what_is_this_c2](https://github.com/misterch0c/what_is_this_c2) For all these times you're asking yourself "what is this panel again?"
+- [**146**星][2y] [Py] [mhelwig/apk-anal](https://github.com/mhelwig/apk-anal) Android APK analyzer based on radare2 and others.
+- [**146**星][11d] [C] [mate-desktop/caja](https://github.com/mate-desktop/caja) Caja, the file manager for the MATE desktop
+- [**146**星][2y] [Go] [magisterquis/sshhipot](https://github.com/magisterquis/sshhipot) High-interaction MitM SSH honeypot
+- [**146**星][9m] [Java] [lanchon/haystack](https://github.com/lanchon/haystack) Signature Spoofing Patcher for Android
+- [**146**星][4m] [HTML] [l4bf0x/phishingpretexts](https://github.com/l4bf0x/phishingpretexts) A library of pretexts to use on offensive phishing engagements.
+- [**146**星][11m] [Shell] [kevlar1818/is_my_password_pwned](https://github.com/kevlar1818/is_my_password_pwned) How often does your password appear in the Pwned Passwords database? Uses the k-anonymity API.
+- [**146**星][1y] [Py] [jekil/hardentheworld](https://github.com/jekil/hardentheworld) Harden the world is a community driven project to develop hardening guidelines and checklists for common software and devices.
+- [**146**星][24d] [Perl] [henshin/filebuster](https://github.com/henshin/filebuster) An extremely fast and flexible web fuzzer
+- [**146**星][3m] [PostScript] [guardianproject/orfox](https://github.com/guardianproject/orfox) UPDATE: Orfox is being replaced by Tor Browser for Android. All future work and comments will be handled by Tor Project.
+- [**146**星][3y] [C] [gentilkiwi/wanadecrypt](https://github.com/gentilkiwi/wanadecrypt) A decryptor for Wanacry (you need the private key!)
+- [**146**星][27d] [Py] [futuresharks/rpi-security](https://github.com/futuresharks/rpi-security) A security system written in python to run on a Raspberry Pi with motion detection and mobile notifications
+- [**146**星][4m] [Py] [fireeye/pywintrace](https://github.com/fireeye/pywintrace) Python 编写的 ETW(Event Tracing for Windows) Wrapper
+- [**146**星][3m] [C] [fgont/ipv6toolkit](https://github.com/fgont/ipv6toolkit) SI6 Networks' IPv6 Toolkit
+- [**146**星][2d] [Shell] [entynetproject/ehtools](https://github.com/entynetproject/ehtools) Wi-Fi tools keep getting more and more accessible to beginners, and the Ehtools Framework is a framework of serious penetration tools that can be explored easily from within it. This powerful and simple tool can be used for everything from installing new add-ons to grabbing a WPA handshake in a matter of seconds. Plus, it's easy to install, set …
+- [**146**星][1m] [Ruby] [dev-sec/ssh-baseline](https://github.com/dev-sec/ssh-baseline) DevSec SSH Baseline - InSpec Profile
+- [**146**星][2m] [Py] [decoxviii/karma](https://github.com/decoxviii/karma) Find leaked emails with your passwords
+- [**146**星][4y] [Lua] [davidm/lua-inspect](https://github.com/davidm/lua-inspect) Lua code analysis, with plugins for HTML and SciTE
+- [**146**星][1m] [Py] [chrispetrou/hrshell](https://github.com/chrispetrou/hrshell) HRShell is an HTTPS/HTTP reverse shell built with flask. It is an advanced C2 server with many features & capabilities.
+- [**146**星][5y] [C++] [blankwall/python_pin](https://github.com/blankwall/python_pin)
+- [**146**星][18d] [Py] [bash-c/pwn_repo](https://github.com/bash-c/pwn_repo) To store some CTF_pwn_bins and exploits for self-practice
+- [**146**星][2y] [Py] [appsecco/vulnerable-apps](https://github.com/appsecco/vulnerable-apps)
+- [**146**星][1y] [Py] [andresriancho/race-condition-exploit](https://github.com/andresriancho/race-condition-exploit) Tool to help with the exploitation of web application race conditions
+- [**146**星][2m] [C++] [alschwalm/dwarfexport](https://github.com/alschwalm/dwarfexport) Export dwarf debug information from IDA Pro
+- [**145**星][4m] [Py] [reb311ion/rebel-framework](https://github.com/reb311ion/rebel-framework) Advanced and easy to use penetration testing framework
+- [**145**星][3y] [C] [sciencemanx/dress](https://github.com/sciencemanx/dress) add symbols back into a stripped ELF binary (~strip)
+- [**145**星][2y] [C] [yepher/razberry](https://github.com/yepher/razberry) Notes About ZWave and RazBerry
+- [**145**星][20d] [Py] [wenzel/pyvmidbg](https://github.com/wenzel/pyvmidbg) LibVMI-based debug server, implemented in Python. Building a guest aware, stealth and agentless full-system debugger
+- [**145**星][3y] [PHP] [webshellpub/awsome-webshell](https://github.com/webshellpub/awsome-webshell) webshell样本大合集。收集各种webshell用于webshell分析与发现。——
+- [**145**星][5m] [ObjC] [ursachec/cpaproxy](https://github.com/ursachec/cpaproxy) A thin Objective-C wrapper around Tor.
+- [**145**星][3m] [CSS] [rubyfu/rubyfu](https://github.com/rubyfu/rubyfu) Rubyfu, where Ruby goes evil!
+- [**145**星][2m] [Py] [ripe-atlas-community/ripe-atlas-community-contrib](https://github.com/ripe-atlas-community/ripe-atlas-community-contrib) Repository for links towards tools written during hackathons, and a collection of contributions by the community of the RIPE Atlas visualizations, tools for analysing measurements data and other scripts
+- [**145**星][10m] [Dockerfile] [remnux/docker](https://github.com/remnux/docker) This repository contains Dockerfiles for building Docker images of popular malware analysis tools. See
+- [**145**星][3y] [C] [pustladi/windows-2000](https://github.com/pustladi/windows-2000) Windows 2000专业版的源码
+- [**145**星][1y] [ObjC] [psychotea/meridianjb](https://github.com/psychotea/meridianjb) An iOS 10.x Jailbreak for all 64-bit devices.
+- [**145**星][1y] [Shell] [projectatomic/container-storage-setup](https://github.com/projectatomic/container-storage-setup) Service to set up storage for Docker and other container systems
+- [**145**星][4y] [JS] [nowsecure/owasp-password-strength-test](https://github.com/nowsecure/owasp-password-strength-test) OWASP Password Strength Test for Node.js
+- [**145**星][4y] [R] [mlsecproject/tiq-test](https://github.com/mlsecproject/tiq-test) Threat Intelligence Quotient Test - Dataviz and Statistical Analysis of TI feeds
+- [**145**星][7d] [JS] [mike-works/web-security-fundamentals](https://github.com/mike-works/web-security-fundamentals)
+- [**145**星][1m] [C#] [mihaifm/hibpofflinecheck](https://github.com/mihaifm/hibpofflinecheck) Keepass plugin that performs offline and online checks against HaveIBeenPwned passwords
+- [**145**星][1y] [Py] [marty90/pychromedevtools](https://github.com/marty90/pychromedevtools) PyChromeDevTools is a python module that allows one to interact with Google Chrome using Chrome DevTools Protocol within a Python script.
+- [**145**星][6m] [Py] [macr0phag3/githubmonitor](https://github.com/macr0phag3/githubmonitor) 根据关键字与 hosts 生成的关键词,利用 github 提供的 api,监控 git 泄漏。
+- [**145**星][4y] [C++] [lcatro/network_backdoor_scanner](https://github.com/lcatro/network_backdoor_scanner) This is a backdoor about discover network device ,and it can hidden reverse connecting the hacker's server with encrypt commuication 后渗透后门程序,适合在已经攻陷的内网中做下一步的网络信息扫描..
+- [**145**星][9m] [Py] [kacperszurek/exploits](https://github.com/kacperszurek/exploits) 提权漏洞利用集合
+- [**145**星][5m] [AutoIt] [igromanru/dark-souls-iii-cheat-engine-guide](https://github.com/igromanru/dark-souls-iii-cheat-engine-guide) Latest CE table and guide for Dark Souls 3
+- [**145**星][3y] [Py] [elcodigok/wphardening](https://github.com/elcodigok/wphardening) Wordpress 安全加固工具
+- [**145**星][5m] [Py] [echowei/deeptraffic](https://github.com/echowei/deeptraffic) Deep Learning models for network traffic classification
+- [**145**星][25d] [C++] [cybermaggedon/cyberprobe](https://github.com/cybermaggedon/cyberprobe) Capturing, analysing and responding to cyber attacks
+- [**145**星][2y] [Ruby] [conradirwin/dotgpg](https://github.com/conradirwin/dotgpg) A secure and easy-to-use store for your production secrets
+- [**145**星][1y] [Go] [brimstone/go-shellcode](https://github.com/brimstone/go-shellcode) Load shellcode into a new process
+- [**145**星][11m] [Py] [airbuscyber/grap](https://github.com/airbuscyber/grap) define and match graph patterns within binaries
+- [**144**星][5y] [Py] [ring04h/thorns](https://github.com/ring04h/thorns) thorns_project 分布式异步队列系统
+- [**144**星][3y] [ObjC] [project-imas/security-check](https://github.com/project-imas/security-check) Application level, attached debug detect and jailbreak checking
+- [**144**星][3y] [Ruby] [yahooarchive/rtrace](https://github.com/yahooarchive/rtrace) Rtrace is an x86/x86_64 native code debugger written in Ruby with zero dependencies
+- [**144**星][4y] [ObjC] [etsy/bughunt-ios](https://github.com/etsy/bughunt-ios)
+- [**144**星][1y] [Py] [viralmaniar/remote-desktop-caching-](https://github.com/viralmaniar/remote-desktop-caching-) This tool allows one to recover old RDP (mstsc) session information in the form of broken PNG files. These PNG files allows Red Team member to extract juicy information such as LAPS passwords or any sensitive information on the screen. Blue Team member can reconstruct PNG files to see what an attacker did on a compromised host. It is extremely u…
+- [**144**星][4y] [C] [ud2/advisories](https://github.com/ud2/advisories) Security advisories
+- [**144**星][4m] [Java] [shack2/javaserializetools](https://github.com/shack2/javaserializetools) Java反序列化漏洞利用工具V1.0 Java反序列化相关漏洞的检查工具,采用JDK 1.8+NetBeans8.2开发,软件运行必须安装JDK 1.8或者以上版本。 支持:weblogic xml反序列化漏洞 CVE-2017-10271/CNVD-C-2019-48814/CVE-2019-2725检查。
+- [**144**星][20d] [Shell] [securecodebox/securecodebox](https://github.com/securecodebox/securecodebox) SecureCodeBox - continuous secure delivery out of the box
+- [**144**星][10d] [Go] [rverton/webanalyze](https://github.com/rverton/webanalyze) Port of Wappalyzer (uncovers technologies used on websites) in Go to automate scanning.
+- [**144**星][7y] [C] [rsmudge/metasploit-loader](https://github.com/rsmudge/metasploit-loader) A client compatible with Metasploit's staging protocol
+- [**144**星][5y] [PHP] [pentestgeek/phishing-frenzy-templates](https://github.com/pentestgeek/phishing-frenzy-templates) Phishing Scenarios Used for Phishing Frenzy
+- [**144**星][7y] [Shell] [offensive-security/hid-backdoor-peensy](https://github.com/offensive-security/hid-backdoor-peensy) Reliable Teensy Penetration Testing Payload
+- [**144**星][4m] [Py] [nccgroup/umap2](https://github.com/nccgroup/umap2) Umap2 is the second revision of NCC Group's python based USB host security assessment tool.
+- [**144**星][4m] [Py] [nccgroup/fuzzowski](https://github.com/nccgroup/fuzzowski) the Network Protocol Fuzzer that we will want to use.
+- [**144**星][6m] [Py] [nashcontrol/bounty-monitor](https://github.com/nashcontrol/bounty-monitor) Leverage certificate transparency live feed to monitor for newly issued subdomain certificates (last 90 days, configurable), for domains participating in bug bounty programs.
+- [**144**星][2y] [Shell] [n0pe-sled/postfix-server-setup](https://github.com/n0pe-sled/postfix-server-setup)
+- [**144**星][2y] [Py] [mdsecactivebreach/powerdns](https://github.com/mdsecactivebreach/powerdns) Powershell DNS Delivery
+- [**144**星][3y] [HTML] [landley/aboriginal](https://github.com/landley/aboriginal) provides virtual Linux images you can boot under QEMU, within which you can compile and test any software you like.
+- [**144**星][4y] [Java] [kantega/notsoserial](https://github.com/kantega/notsoserial) Java Agent which mitigates deserialisation attacks by making certain classes unserializable
+- [**144**星][1y] [C] [geosn0w/osiris-jailbreak](https://github.com/geosn0w/osiris-jailbreak) An incomplete iOS 11.2 -> iOS 11.3.1 Jailbreak
+- [**144**星][3d] [fdiskyou/threat-intel](https://github.com/fdiskyou/threat-intel) Archive of publicly available threat INTel reports (mostly APT Reports but not limited to).
+- [**144**星][2y] [Shell] [depoon/iosdylibinjectiondemo](https://github.com/depoon/iosdylibinjectiondemo) Using this Repository to demo how to inject dynamic libraries into cracked ipa files for jailed iOS devices
+- [**144**星][2y] [Py] [davidpany/wmi_forensics](https://github.com/davidpany/wmi_forensics)
+- [**144**星][14d] [PHP] [danwin/hosting](https://github.com/danwin/hosting) This is a setup for a TOR based shared hosting server
+- [**144**星][2y] [chan9390/awesome-mitm](https://github.com/chan9390/awesome-mitm) Curated List of MitM frameworks on GitHub
+- [**144**星][15d] [Py] [andresriancho/enumerate-iam](https://github.com/andresriancho/enumerate-iam) Enumerate the permissions associated with AWS credential set
+- [**143**星][4m] [Py] [daeken/httprebind](https://github.com/daeken/httprebind) Automatic tool for DNS rebinding-based SSRF attacks
+- [**143**星][30d] [Shell] [sclorg/s2i-python-container](https://github.com/sclorg/s2i-python-container) Python container images based on Red Hat Software Collections and intended for OpenShift and general usage, that provide a platform for building and running Python applications. Users can choose between Red Hat Enterprise Linux, Fedora, and CentOS based images.
+- [**143**星][12d] [security-cheatsheet/reverse-shell-cheatsheet](https://github.com/security-cheatsheet/reverse-shell-cheatsheet)
+- [**143**星][1y] [Py] [checkymander/imessagesbackdoor](https://github.com/checkymander/iMessagesBackdoor) A script to help set up an event handler in order to install a persistent backdoor that can be activated by sending a message.
+- [**143**星][7m] [C++] [zombiecraig/udsim](https://github.com/zombiecraig/udsim) a graphical simulator that can emulate different modules in a vehicle and respond to UDS request.
+- [**143**星][7m] [Py] [vinayakumarr/network-intrusion-detection](https://github.com/vinayakumarr/network-intrusion-detection) Network Intrusion Detection KDDCup '99', NSL-KDD and UNSW-NB15
+- [**143**星][2y] [JS] [theori-io/zer0con2018_bpak](https://github.com/theori-io/zer0con2018_bpak) 为Google Chrome创建1-dayExploit(Zer0Con)
+- [**143**星][3y] [CSS] [sensepost/jack](https://github.com/sensepost/jack) Drag and Drop ClickJacking PoC development assistance tool.
+- [**143**星][3y] [HTML] [secmob/badkernel](https://github.com/secmob/badkernel) Full exploit of CVE-2016-6754(BadKernel) and slide of SyScan360 2016
+- [**143**星][2y] [C] [salls/kernel-exploits](https://github.com/salls/kernel-exploits) Some kernel exploits
+- [**143**星][2y] [C] [rodionovd/liblorgnette](https://github.com/rodionovd/liblorgnette) Interprocess dlsym() for OS X & iOS
+- [**143**星][3y] [Assembly] [ricardojrdez/anti-analysis-tricks](https://github.com/ricardojrdez/anti-analysis-tricks) Bunch of techniques potentially used by malware to detect analysis environments
+- [**143**星][2m] [C++] [raspberrypi/piserver](https://github.com/raspberrypi/piserver) Raspberry Pi Server wizard to serve Raspbian to network booting Pis
+- [**143**星][5m] [Java] [quentinhardy/jndiat](https://github.com/quentinhardy/jndiat) 渗透工具, 通过T3协议攻击Weblogic服务器
+- [**143**星][3m] [Py] [nuid/nebulousad](https://github.com/nuid/nebulousad) NebulousAD automated credential auditing tool.
+- [**143**星][2d] [C] [ntpsec/ntpsec](https://github.com/ntpsec/ntpsec) The Network Time Protocol suite, refactored GitHub is a mirror of
+- [**143**星][8m] [ASP] [misterch0c/apt34](https://github.com/misterch0c/apt34) APT34/OILRIG leak
+- [**143**星][8d] [C] [libyal/libpff](https://github.com/libyal/libpff) Library and tools to access the Personal Folder File (PFF) and the Offline Folder File (OFF) format
+- [**143**星][2m] [C] [grimm-co/killerbeez](https://github.com/grimm-co/killerbeez) A distributed fuzzer which aims to pull in the best technologies, make them play nicely together, and run on multiple O/Ses.
+- [**143**星][10m] [Shell] [essandess/macos-openvpn-server](https://github.com/essandess/macos-openvpn-server) macOS OpenVPN Server and Client Configuration (OpenVPN, Tunnelblick, PF)
+- [**143**星][8m] [Py] [dvopsway/datasploit](https://github.com/dvopsway/datasploit) A tool to perform various OSINT techniques, aggregate all the raw data, visualise it on a dashboard, and facilitate alerting and monitoring on the data.
+- [**143**星][3y] [Py] [codexgigassys/codex-backend](https://github.com/codexgigassys/codex-backend) Codex Gigas malware DNA profiling search engine discovers malware patterns and characteristics assisting individuals who are attracted in malware hunting.
+- [**143**星][8d] [Rust] [brycx/orion](https://github.com/brycx/orion) Easy and usable rust crypto
+- [**143**星][3y] [Py] [blackye/lalascan](https://github.com/blackye/lalascan) 自主开发的分布式web漏洞扫描框架,集合webkit爬虫,Subdomain子域名发现,sqli、反射xss、Domxss等owasp top10漏洞扫描和边界资产发现能力。同时为通用CMS POC扫描提供了插件扩展平台
+- [**143**星][1m] [bin2415/fuzzing_paper](https://github.com/bin2415/fuzzing_paper) puzzing related paper
+- [**143**星][4y] [JS] [ben174/hsts-cookie](https://github.com/ben174/hsts-cookie) Creates a HSTS Supercookie to fingerprint a browser
+- [**143**星][1y] [Shell] [adi90x/rancher-active-proxy](https://github.com/adi90x/rancher-active-proxy) All in one active reverse proxy for Rancher !
+- [**143**星][1y] [Py] [aatlasis/chiron](https://github.com/aatlasis/chiron) An IPv6 Security Assessment framework with advanced IPv6 Extension Headers manipulation capabilities.
+- [**142**星][11m] [C++] [virustotal/qt-virustotal-uploader](https://github.com/virustotal/qt-virustotal-uploader) VirusTotal Uploader written in C++ using QT framework
+- [**142**星][4y] [JS] [urinx/browspy](https://github.com/urinx/browspy) 浏览器用户全部信息收集js
+- [**142**星][1m] [Py] [mubix/osx-wificleaner](https://github.com/mubix/osx-wificleaner) Cleans out "open" wireless connections from OSX machine
+- [**142**星][4y] [C] [valdikss/p0f-mtu](https://github.com/valdikss/p0f-mtu) p0f with patches to save MTU value and export it via API (for VPN detection)
+- [**142**星][2m] [Py] [usableprivacy/upribox](https://github.com/usableprivacy/upribox) Usable Privacy Box
+- [**142**星][1y] [Go] [target/portauthority](https://github.com/target/portauthority) API that leverages Clair to scan Docker Registries and Kubernetes Clusters for vulnerabilities
+- [**142**星][3y] [PS] [sw4mpf0x/powerlurk](https://github.com/sw4mpf0x/powerlurk) Malicious WMI Events using PowerShell
+- [**142**星][3y] [Java] [secarmalabs/psychopath](https://github.com/secarmalabs/psychopath) psychoPATH - hunting file uploads & LFI in the dark. This tool is a customisable payload generator designed for blindly detecting LFI & web file upload implementations allowing to write files into the webroot (aka document root). The "blind" aspect is the key here and is inherent to dynamic testing usually conducted with no access to the source …
+- [**142**星][3y] [Py] [safebreach-labs/pacdoor](https://github.com/safebreach-labs/pacdoor) Proof-of-concept JavaScript malware implemented as a Proxy Auto-Configuration (PAC) File
+- [**142**星][2y] [Py] [ridter/rtf_11882_0802](https://github.com/ridter/rtf_11882_0802) PoC for CVE-2018-0802 And CVE-2017-11882
+- [**142**星][10m] [Java] [rani-i/mi365locker](https://github.com/rani-i/mi365locker) Xiaomi Mi365 Scooter locker
+- [**142**星][1y] [Py] [packtpublishing/mastering-machine-learning-for-penetration-testing](https://github.com/packtpublishing/mastering-machine-learning-for-penetration-testing) 《Mastering Machine Learning for Penetration Testing》随书代码
+- [**142**星][2y] [Java] [nickstadb/deserlab](https://github.com/nickstadb/deserlab) Java deserialization exploitation lab.
+- [**142**星][3y] [Shell] [nccgroup/chuckle](https://github.com/nccgroup/chuckle) An automated SMB relay exploitation script.
+- [**142**星][2y] [Ruby] [michenriksen/searchpass](https://github.com/michenriksen/searchpass) searchpass:离线搜索网络设备、Web应用程序等的默认凭据
+- [**142**星][3y] [C] [mdsecresearch/publications](https://github.com/mdsecresearch/publications) A list of published research documents
+- [**142**星][2m] [C] [mak-/mak_it-linux-rootkit](https://github.com/mak-/mak_it-linux-rootkit) This is a linux rootkit using many of the techniques described on
+- [**142**星][3y] [PHP] [laurent22/so-sql-injections](https://github.com/laurent22/so-sql-injections) SQL injection vulnerabilities in Stack Overflow PHP questions
+- [**142**星][11m] [Go] [justinazoff/bro-pdns](https://github.com/justinazoff/bro-pdns) Passive DNS collection using Bro
+- [**142**星][2y] [Py] [julieeen/kleefl](https://github.com/julieeen/kleefl) kleefl:结合了符号执行的Fuzzer,针对普通 C/C++ 应用程序
+- [**142**星][1m] [PS] [jaredcatkinson/psreflect-functions](https://github.com/jaredcatkinson/psreflect-functions) Module to provide PowerShell functions that abstract Win32 API functions
+- [**142**星][2y] [PHP] [drego85/ddos-php-script](https://github.com/drego85/ddos-php-script) Script to perform a DoS or DDoS UDP Flood by PHP
+- [**142**星][1y] [C] [dots-tb/lolicon](https://github.com/dots-tb/lolicon) Small vita shell ran from kernel that allows for actual overclocking
+- [**142**星][9m] [Py] [dlcowen/fseventsparser](https://github.com/dlcowen/fseventsparser) Parser for OSX/iOS FSEvents Logs
+- [**142**星][3m] [C] [covertcodes/freqwatch](https://github.com/covertcodes/freqwatch) Keep track of the airwaves with RTL-SDR; snoop and capture everything into a DB
+- [**142**星][3m] [Pascal] [coldzer0/cmulator](https://github.com/coldzer0/cmulator) Cmulator is ( x86 - x64 ) Scriptable Reverse Engineering Sandbox Emulator for shellcode and PE binaries . Based on Unicorn & Zydis Engine & javascript
+- [**142**星][5m] [Py] [codingo/minesweeper](https://github.com/codingo/minesweeper) A Burpsuite plugin (BApp) to aid in the detection of scripts being loaded from over 23000 malicious cryptocurrency mining domains (cryptojacking).
+- [**142**星][3y] [C] [clearlinux/cve-check-tool](https://github.com/clearlinux/cve-check-tool) Original Automated CVE Checking Tool
+- [**142**星][8m] [Py] [bloodhoundad/bloodhound-tools](https://github.com/bloodhoundad/bloodhound-tools) Miscellaneous tools for BloodHound
+- [**142**星][26d] [Ruby] [bitzesty/devise_zxcvbn](https://github.com/bitzesty/devise_zxcvbn) Devise plugin to reject weak passwords using zxcvbn
+- [**142**星][2y] [Py] [balidani/tinyctf-platform](https://github.com/balidani/tinyctf-platform) Yet another CTF platform
+- [**142**星][10d] [Py] [argp/iboot64helper](https://github.com/argp/iboot64helper) IDAPython loader to help with AArch64 iBoot, iBEC, and SecureROM reverse engineering
+- [**141**星][7d] [Py] [volatilityfoundation/volatility3](https://github.com/volatilityfoundation/volatility3) Volatility 3.0 development
+- [**141**星][3y] [kejane/securityrss](https://github.com/kejane/SecurityRSS) 网络安全相关的RSS订阅列表
+- [**141**星][5y] [PHP] [veerupandey/penetration-testing-toolkit](https://github.com/veerupandey/penetration-testing-toolkit) A web interface to automate Scanning, Generating metasploit payload, Network Testing,Exploring CMS,Information Gathering and much more
+- [**141**星][2y] [C] [tyranid/windows-logical-eop-workshop](https://github.com/tyranid/windows-logical-eop-workshop) source code for my Windows Logical Privilege Escalation workshop examples
+- [**141**星][9m] [C] [trailofbits/osquery-extensions](https://github.com/trailofbits/osquery-extensions) osquery extensions by Trail of Bits
+- [**141**星][3y] [C] [thispc/psiphon](https://github.com/thispc/psiphon) A multi-functional version of a popular network circumvention tool
+- [**141**星][11m] [Py] [t4d/phishingkithunter](https://github.com/t4d/phishingkithunter) Find phishing kits which use your brand/organization's files and image.
+- [**141**星][1m] [Java] [superblaubeere27/obfuscator](https://github.com/superblaubeere27/obfuscator) A java obfuscator (GUI)
+- [**141**星][2y] [Py] [snare/binjatron](https://github.com/snare/binjatron) Binary Ninja plugin for Voltron integration
+- [**141**星][4m] [Go] [skx/simple-vpn](https://github.com/skx/simple-vpn) A simple VPN allowing mesh-like communication between nodes, over websockets
+- [**141**星][2y] [Py] [secureworks/flowsynth](https://github.com/secureworks/flowsynth) a network packet capture compiler
+- [**141**星][2y] [Py] [sarah314/spypi](https://github.com/sarah314/spypi) An (un-)ethical hacking-station based on Raspberry Pi and Python
+- [**141**星][5y] [Java] [retme7/cve-2014-7911_poc](https://github.com/retme7/cve-2014-7911_poc) Local root exploit for Nexus5 Android 4.4.4(KTU84P)
+- [**141**星][25d] [PHP] [openzipkin/zipkin-php](https://github.com/openzipkin/zipkin-php) official PHP Tracer implementation for Zipkin
+- [**141**星][8m] [ObjC] [objective-see/reikey](https://github.com/objective-see/reikey) Malware and other applications may install persistent keyboard "event taps" to intercept your keystrokes. ReiKey can scan, detect, and monitor for such taps!
+- [**141**星][6m] [C++] [oatpp/oatpp-examples](https://github.com/oatpp/oatpp-examples) List of example projects of how to use oat++ framework
+- [**141**星][2y] [Py] [nviso-be/binsnitch](https://github.com/nviso-be/binsnitch) Detect silent (unwanted) changes to files on your system
+- [**141**星][2y] [Ruby] [nccgroup/binproxy](https://github.com/nccgroup/binproxy) BinProxy is a proxy for arbitrary TCP connections. You can define custom message formats using the BinData gem.
+- [**141**星][4m] [Shell] [mbahadou/postenum](https://github.com/mbahadou/postenum) Postenum is a clean, nice and easy tool for basic/advanced privilege escalation techniques. Postenum tool is intended to be executed locally on a Linux box.
+- [**141**星][1y] [landgrey/upload-labs-writeup](https://github.com/landgrey/upload-labs-writeup) upload-labs writeup
+- [**141**星][3y] [Py] [kgretzky/python-x86-obfuscator](https://github.com/kgretzky/python-x86-obfuscator) This is a **WIP** tool that performs shellcode obfuscation in x86 instruction set.
+- [**141**星][4m] [Py] [karmenzind/fp-server](https://github.com/karmenzind/fp-server) Free proxy server, continuously crawling and providing proxies, based on Tornado and Scrapy. 免费代理服务器,基于Tornado和Scrapy,在本地搭建属于自己的代理池
+- [**141**星][1m] [Java] [joshjdevl/libsodium-jni](https://github.com/joshjdevl/libsodium-jni) (Android) Networking and Cryptography Library (NaCL) JNI binding. JNI is utilized for fastest access to native code. Accessible either in Android or Java application. Uses SWIG to generate Java JNI bindings. SWIG definitions are extensible to other languages.
+- [**141**星][3y] [C] [jongates/jon](https://github.com/jongates/jon) jon 是一款LINUX系统攻防工具箱,包含扫描,入侵,痕迹清理,木马,网站测试等各种黑客工具。Jon is a toolbox of Linux, including scanning, intrusion, trace cleaning, Trojan horse, website testing and other hacker tools.
+- [**141**星][6m] [Py] [integrity-sa/burpcollaborator-docker](https://github.com/integrity-sa/burpcollaborator-docker) This repository includes a set of scripts to install a Burp Collaborator Server in a docker environment, using a LetsEncrypt wildcard certificate. The objective is to simplify as much as possible the process of setting up and maintaining the server.
+- [**141**星][3m] [PHP] [incredibleindishell/cors-vulnerable-lab](https://github.com/incredibleindishell/cors-vulnerable-lab) Sample vulnerable code and its exploit code
+- [**141**星][2y] [C++] [honorarybot/pulsedbg](https://github.com/honorarybot/pulsedbg) Hypervisor-based debugger
+- [**141**星][2y] [C++] [hjc4869/uacbypass](https://github.com/hjc4869/uacbypass) A demo to bypass windows 10 default UAC configuration using IFileOperation and dll hijacking
+- [**141**星][2y] [Py] [gumblex/ptproxy](https://github.com/gumblex/ptproxy) Turn any pluggable transport for Tor into an obfuscating TCP tunnel.
+- [**141**星][3m] [CoffeeScript] [furqansoftware/node-whois](https://github.com/furqansoftware/node-whois) A simple WHOIS client for NodeJS
+- [**141**星][7m] [C] [coolervoid/hiddenwall](https://github.com/coolervoid/hiddenwall) Tool to generate a Linux kernel module for custom rules with Netfilter hooking. (block ports, Hidden mode, rootkit functions etc)
+- [**141**星][1y] [Py] [bruce30262/twindbg](https://github.com/bruce30262/twindbg) PEDA-like debugger UI for WinDbg
+- [**141**星][1y] [Py] [brain-research/tensorfuzz](https://github.com/brain-research/tensorfuzz) A library for performing coverage guided fuzzing of neural networks
+- [**141**星][16d] [Py] [blueudp/deep-explorer](https://github.com/blueudp/deep-explorer) Deep Explorer is a tool developed in python which purpose is the search of hidden services in tor network, using Ahmia Browser and crawling the links obtained
+- [**141**星][4y] [Py] [blackye/jenkins](https://github.com/blackye/jenkins) Jenkins漏洞探测、用户抓取爆破
+- [**140**星][1m] [uknowsec/sharptoolsaggressor](https://github.com/uknowsec/sharptoolsaggressor) 内网渗透中常用的c#程序整合成cs脚本,直接内存加载。持续更新~
+- [**140**星][14d] [JS] [dfirkuiper/kuiper](https://github.com/dfirkuiper/kuiper) a digital investigation platform that provides a capabilities for the investigation team and individuals to parse, search, visualize collected evidences (evidences could be collected by fast traige script like Hoarder)
+- [**140**星][2y] [Py] [we5ter/gsdf](https://github.com/We5ter/GSDF) 基于谷歌SSL透明证书的子域名查询工具
+- [**140**星][1m] [Shell] [cloudfoundry-incubator/docker-boshrelease](https://github.com/cloudfoundry-incubator/docker-boshrelease) Docker BOSH Release
+- [**140**星][1y] [Java] [tomsteele/burpbuddy](https://github.com/tomsteele/burpbuddy) burpbuddy exposes Burp Suites's extender API over the network through various mediums, with the goal of enabling development in any language without the restrictions of the JVM
+- [**140**星][3y] [ObjC] [zhengmin1989/os-x-10.11.6-exp-via-pegasus](https://github.com/zhengmin1989/os-x-10.11.6-exp-via-pegasus) Local privilege escalation for OS X 10.11.6 via PEGASUS
+- [**140**星][27d] [Py] [wmliang/pe-afl](https://github.com/wmliang/pe-afl)
+- [**140**星][3y] [Py] [vvalien/sharpmeter](https://github.com/vvalien/sharpmeter) A Simple Way To Make Meterpreter Reverse Payloads
+- [**140**星][2y] [C++] [talos-vulndev/afl-dyninst](https://github.com/talos-vulndev/afl-dyninst) American Fuzzy Lop + Dyninst == AFL Fuzzing blackbox binaries
+- [**140**星][2y] [Shell] [systematicat/hack-captive-portals](https://github.com/systematicat/hack-captive-portals) Hack any Captive portal using MAC-spoofing technique
+- [**140**星][2y] [Py] [sumanj/frankencert](https://github.com/sumanj/frankencert) Adversarial Testing of Certificate Validation in SSL/TLS Implementations
+- [**140**星][4y] [Py] [shengqi158/pyvulhunter](https://github.com/shengqi158/pyvulhunter) python audit tool 审计 注入 inject
+- [**140**星][2m] [Py] [scrapinghub/python-scrapinghub](https://github.com/scrapinghub/python-scrapinghub) A client interface for Scrapinghub's API
+- [**140**星][5y] [Shell] [s7ephen/osx-sandbox--seatbelt--profiles](https://github.com/s7ephen/osx-sandbox--seatbelt--profiles) A repository for configuration profiles for OSX's Seatbelt Application Sandbox
+- [**140**星][5m] [Py] [ridter/cve-2019-1040](https://github.com/ridter/cve-2019-1040) CVE-2019-1040 with Exchange
+- [**140**星][3m] [Py] [pybind/python_example](https://github.com/pybind/python_example) Example pybind11 module built with a Python-based build system
+- [**140**星][10m] [Py] [payloadsecurity/vxapi](https://github.com/payloadsecurity/vxapi) A generic interface and CLI for all endpoints of the Falcon Sandbox API
+- [**140**星][2y] [Py] [nullarray/cypher](https://github.com/nullarray/cypher) Pythonic ransomware proof of concept.
+- [**140**星][4y] [C++] [nihilus/hexrays_tools](https://github.com/nihilus/hexrays_tools) 辅助结构体定义和虚函数检测
+- [**140**星][2d] [C#] [microsoft/windowsprotocoltestsuites](https://github.com/microsoft/windowsprotocoltestsuites) 针对Windows开放规范的实现提供了互操作性测试
+- [**140**星][2m] [C#] [med0x2e/gadgettojscript](https://github.com/med0x2e/gadgettojscript) A tool for generating .NET serialized gadgets that can trigger .NET assembly load/execution when deserialized using BinaryFormatter from JS/VBS/VBA based scripts.
+- [**140**星][2y] [Java] [lorenzoongithub/nudge4j](https://github.com/lorenzoongithub/nudge4j) Get inside your JVM
+- [**140**星][1y] [laxa/hackingtools](https://github.com/laxa/hackingtools) Exhaustive list of hacking tools
+- [**140**星][6y] [Tcl] [koto/mosquito](https://github.com/koto/mosquito) XSS exploitation tool - access victims through HTTP proxy
+- [**140**星][7y] [C] [johnath/beep](https://github.com/johnath/beep) beep is a command line tool for linux that beeps the PC speaker
+- [**140**星][2y] [C] [ixty/mandibule](https://github.com/ixty/mandibule) 向远程进程注入ELF文件
+- [**140**星][4y] [HTML] [hexgolems/schem](https://github.com/hexgolems/schem) A debugger frontend
+- [**140**星][2y] [guanchao/androidchecklist](https://github.com/guanchao/androidchecklist) Android应用审计checklist整理
+- [**140**星][7m] [Visual Basic .NET] [dzzie/pdfstreamdumper](https://github.com/dzzie/pdfstreamdumper) research tool for the analysis of malicious pdf documents. make sure to run the installer first to get all of the 3rd party dlls installed correctly.
+- [**140**星][4y] [Py] [dzonerzy/acunetix_0day](https://github.com/dzonerzy/acunetix_0day) Acunetix 0day RCE
+- [**140**星][3y] [C] [dismantl/improvedreflectivedllinjection](https://github.com/dismantl/improvedreflectivedllinjection) An improvement of the original reflective DLL injection technique by Stephen Fewer of Harmony Security
+- [**140**星][2m] [C++] [dfir-orc/dfir-orc](https://github.com/dfir-orc/dfir-orc) Forensics artefact collection tool for systems running Microsoft Windows
+- [**140**星][1y] [Py] [codypierce/hackers-grep](https://github.com/codypierce/hackers-grep) hackers-grep is a utility to search for strings in PE executables including imports, exports, and debug symbols
+- [**140**星][3y] [C#] [cn33liz/cscriptshell](https://github.com/cn33liz/cscriptshell) CScriptShell, a Powershell Host running within cscript.exe
+- [**140**星][2y] [PHP] [bugku/bwvs](https://github.com/bugku/bwvs) Web漏洞渗透测试靶场
+- [**140**星][3y] [JS] [atiger77/dionaea](https://github.com/atiger77/dionaea) 基于Docker的蜜罐系统
+- [**139**星][3y] [Py] [n1nj4sec/mimipy](https://github.com/n1nj4sec/mimipy) port of mimipenguin.sh in python with some additional protection features
+- [**139**星][8d] [C#] [0xd4d/jitdasm](https://github.com/0xd4d/jitdasm) Disassemble jitted .NET methods
+- [**139**星][7d] [Rust] [bytecodealliance/wasmparser](https://github.com/bytecodealliance/wasmparser) A simple event-driven library for parsing WebAssembly binary files
+- [**139**星][2m] [crytic/blockchain-security-contacts](https://github.com/crytic/blockchain-security-contacts) Directory of security contacts for blockchain companies
+- [**139**星][2d] [Java] [zaproxy/zap-hud](https://github.com/zaproxy/zap-hud) 看ZAP如何解决安全工具的UX特别难用的问题
+- [**139**星][4m] [Py] [wangyihang/sourceleakhacker](https://github.com/wangyihang/sourceleakhacker) a muilt-thread web source leak detector
+- [**139**星][1y] [Py] [und3rf10w/external_c2_framework](https://github.com/und3rf10w/external_c2_framework) Python api for usage with cobalt strike's External C2 specification
+- [**139**星][4d] [C] [twogood/unshield](https://github.com/twogood/unshield) Tool and library to extract CAB files from InstallShield installers
+- [**139**星][3m] [Py] [technicaldada/hackerpro](https://github.com/technicaldada/hackerpro) All in One Hacking Tool for Linux & Android (Termux). Hackers are welcome in our blog
+- [**139**星][2y] [spoock1024/web-security](https://github.com/spoock1024/web-security) Web安全中比较好的文章
+- [**139**星][4y] [Py] [spiderlabs/cribdrag](https://github.com/spiderlabs/cribdrag) cribdrag - an interactive crib dragging tool for cryptanalysis on ciphertext generated with reused or predictable stream cipher keys
+- [**139**星][3y] [Py] [skochinsky/me-tools](https://github.com/skochinsky/me-tools) Tools for working with Intel ME
+- [**139**星][2d] [Py] [santatic/web2attack](https://github.com/santatic/web2attack) Web hacking framework with tools, exploits by python
+- [**139**星][2y] [C] [saleemrashid/ledger-mcu-backdoor](https://github.com/saleemrashid/ledger-mcu-backdoor) Proof of concept for Ledger MCU exploit
+- [**139**星][1m] [Py] [rhinosecuritylabs/gcpbucketbrute](https://github.com/rhinosecuritylabs/gcpbucketbrute) A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated.
+- [**139**星][5d] [recolic/awesome-hust](https://github.com/recolic/awesome-hust) HUST experiments, reports, and useful tools.
+- [**139**星][1m] [HTML] [proabiral/inception](https://github.com/proabiral/inception) A highly configurable tool to check for whatever you like against any number of hosts.
+- [**139**星][2m] [Verilog] [osresearch/spispy](https://github.com/osresearch/spispy) An open source SPI flash emulator and monitor
+- [**139**星][2m] [nathanchance/android-kernel-clang](https://github.com/nathanchance/android-kernel-clang) Information on compiling Android kernels with Clang
+- [**139**星][9m] [Py] [mtivadar/qiew](https://github.com/mtivadar/qiew) Home of Qiew - Reverse engineering tool
+- [**139**星][4m] [Py] [mgeeky/expdevbadchars](https://github.com/mgeeky/expdevbadchars) Bad Characters highlighter for exploit development purposes supporting multiple input formats while comparing.
+- [**139**星][4y] [Py] [lauixdata/wechat_hack](https://github.com/lauixdata/wechat_hack) 微信黑客攻击平台 - 已经废弃
+- [**139**星][2y] [l3m0n/linux_information](https://github.com/l3m0n/linux_information) 自动化收集linux信息
+- [**139**星][17d] [Jupyter Notebook] [kelu124/echomods](https://github.com/kelu124/echomods) Open source ultrasound processing modules and building blocks
+- [**139**星][2m] [C#] [juunas11/aspnetcore-security-headers](https://github.com/juunas11/aspnetcore-security-headers) Middleware for adding security headers to an ASP.NET Core application.
+- [**139**星][6m] [Py] [jaxbcd/zeebsploit](https://github.com/jaxbcd/zeebsploit) web scanner - exploitation - information gathering
+- [**139**星][7m] [Py] [iphelix/ida-sploiter](https://github.com/iphelix/ida-sploiter) 辅助漏洞研究
+- [**139**星][11m] [C++] [guidovranken/libfuzzer-gv](https://github.com/guidovranken/libfuzzer-gv) 加强版 libFuzzer:超快速Fuzzing 的新技巧
+- [**139**星][24d] [C] [glv2/bruteforce-luks](https://github.com/glv2/bruteforce-luks) Try to find the password of a LUKS encrypted volume.
+- [**139**星][2y] [C] [gkaindl/meltdown-poc](https://github.com/gkaindl/meltdown-poc) A quick PoC to try out the "meltdown" timing attack.
+- [**139**星][11m] [C++] [finixbit/elf-parser](https://github.com/finixbit/elf-parser) Lightweight elf binary parser with no external dependencies - Sections, Symbols, Relocations, Segments
+- [**139**星][2y] [C] [eterna1/puszek-rootkit](https://github.com/eterna1/puszek-rootkit) linux rootkit
+- [**139**星][10m] [PS] [empireproject/psinject](https://github.com/empireproject/psinject) Inject PowerShell into any process
+- [**139**星][2m] [Py] [cboesecurity/password_pwncheck](https://github.com/cboesecurity/password_pwncheck) Kerberos / Windows AD / Linux PAM password change check against breached lists (HIBP), and other rules
+- [**139**星][1y] [Py] [c0r3dump3d/osueta](https://github.com/c0r3dump3d/osueta) A simple Python script to exploit the OpenSSH User Enumeration Timing Attack.
+- [**139**星][5y] [PHP] [btoplak/joomla-anti-malware-scan-script--jamss-](https://github.com/btoplak/joomla-anti-malware-scan-script--jamss-) a Joomla! and WordPress Security script that automatically scans the Joomla! or Wordpress files for some patterns and "fingerprints" of malware, trojans or other injections into PHP code
+- [**139**星][11m] [Py] [bignerd95/winboxexploit](https://github.com/bignerd95/winboxexploit) Proof of Concept of Winbox Critical Vulnerability
+- [**139**星][2m] [Scala] [azure/azure-cosmosdb-spark](https://github.com/azure/azure-cosmosdb-spark) Apache Spark Connector for Azure Cosmos DB
+- [**139**星][6y] [Ruby] [aidanns/vagrant-reload](https://github.com/aidanns/vagrant-reload) A plugin that allows you to reload a Vagrant plugin as a provisioning step.
+- [**138**星][3m] [ckjbug/xmind-learning](https://github.com/ckjbug/xmind-learning) 各种安全相关思维导图整理收集
+- [**138**星][7m] [JS] [wzdnzd/shadowsocksx-ng-r](https://github.com/wzdnzd/shadowsocksx-ng-r) Shadowsocks Client for MacOS
+- [**138**星][2d] [C++] [tenzir/vast](https://github.com/tenzir/vast) a scalable foundation for a security operations center (SOC): a rich data model for security data, high-throughput ingestion of telemetry, low-latency search, and flexible export in various formats.
+- [**138**星][1m] [Py] [darkarp/chromepass](https://github.com/darkarp/chromepass) Chromepass - Hacking Chrome Saved Passwords
+- [**138**星][8m] [Shell] [wazehell/pe-linux](https://github.com/wazehell/pe-linux) Linux Privilege Escalation Tool By WazeHell
+- [**138**星][7m] [Shell] [vcheckzen/familycloudspeederinshell](https://github.com/vcheckzen/familycloudspeederinshell) [ 天翼家庭云/天翼云盘提速 Shell 版 ] A Shell Implementation of FamilyCloudSpeeder, ESurfing
+- [**138**星][1y] [Py] [ultimatelabs/zoom](https://github.com/ultimatelabs/zoom) Automatic & lightning fast wordpress vulnerability scanner
+- [**138**星][1y] [C++] [tromp/equihash](https://github.com/tromp/equihash) multi-parameter Equihash proof-of-work multi-threaded C solvers
+- [**138**星][3m] [Py] [threatexpress/cs2modrewrite](https://github.com/threatexpress/cs2modrewrite) Convert Cobalt Strike profiles to modrewrite scripts
+- [**138**星][9m] [C++] [thefox/keylogger](https://github.com/thefox/keylogger) Keylogger for Windows.
+- [**138**星][12m] [C] [tharina/35c3ctf](https://github.com/tharina/35c3ctf) 35C3 Junior CTF pwnables
+- [**138**星][8y] [JS] [substack/node-password-reset](https://github.com/substack/node-password-reset) middleware for password reset emails
+- [**138**星][1m] [Shell] [shellhub/shellhub](https://github.com/shellhub/shellhub) shell script hub
+- [**138**星][7y] [C] [quarkslab/dreamboot](https://github.com/quarkslab/dreamboot) UEFI bootkit
+- [**138**星][7m] [C++] [macmade/dyld_cache_extract](https://github.com/macmade/dyld_cache_extract) A macOS utility to extract dynamic libraries from the dyld_shared_cache of macOS and iOS.
+- [**138**星][2y] [Py] [jrbancel/chromagnon](https://github.com/jrbancel/chromagnon) Chrome/Chromium Forensic Tool : Parses History, Visited Links, Downloaded Files and Cache
+- [**138**星][2y] [ObjC] [jiangbolee/changelocation](https://github.com/jiangbolee/changelocation) 改变自己的定位地址(免越狱打卡)
+- [**138**星][7m] [C] [jgm/lunamark](https://github.com/jgm/lunamark) Lua library for conversion between markup formats
+- [**138**星][6y] [Py] [jezdez/django-discover-runner](https://github.com/jezdez/django-discover-runner) A Django test runner based on unittest2's test discovery.
+- [**138**星][4m] [Go] [greenboxal/dns-heaven](https://github.com/greenboxal/dns-heaven) 通过/etc/resolv.conf 启用本地 DNS stack 来修复(愚蠢的) macOS DNS stack
+- [**138**星][2y] [Py] [google/tcp_killer](https://github.com/google/tcp_killer) 关闭 Linux或 MacOS 的 Tcp 端口
+- [**138**星][6m] [C] [glv2/bruteforce-wallet](https://github.com/glv2/bruteforce-wallet) Try to find the password of an encrypted Peercoin (or Bitcoin, Litecoin, etc...) wallet file.
+- [**138**星][10m] [Py] [gawen/virustotal](https://github.com/gawen/virustotal)
+- [**138**星][8m] [JS] [exodusintel/chromium-941743](https://github.com/exodusintel/chromium-941743) Chrome v8 1Day Exploit by István Kurucsai
+- [**138**星][4m] [CSS] [epfl-vlsc/memoro](https://github.com/epfl-vlsc/memoro) 堆详情查探器, 可查看进程分配堆的位置和时间, 以及进程如何使用堆内存
+- [**138**星][2m] [C] [dgiardini/rtl-ais](https://github.com/dgiardini/rtl-ais) A simple AIS tuner and generic dual-frequency FM demodulator
+- [**138**星][2m] [C] [dekunukem/kbord](https://github.com/dekunukem/kbord) Scriptable mechanical keypad with OLED display and RGB backlight.
+- [**138**星][2y] [Py] [cyberark/shimit](https://github.com/cyberark/shimit) A tool that implements the Golden SAML attack
+- [**138**星][16d] [Go] [cloudflare/cfssl_trust](https://github.com/cloudflare/cfssl_trust) CFSSL's CA trust store repository
+- [**138**星][6m] [Perl] [caledoniaproject/jenkins-cli-exploit](https://github.com/caledoniaproject/jenkins-cli-exploit) Jenkins CommonCollections Exploit
+- [**138**星][24d] [C] [antelle/argon2-browser](https://github.com/antelle/argon2-browser) Argon2 library compiled for browser runtime
+- [**138**星][9m] [Py] [ale5000-git/tingle](https://github.com/ale5000-git/tingle) Android patcher
+- [**137**星][4y] [Py] [pentestmonkey/pysecdump](https://github.com/pentestmonkey/pysecdump) 从Windows系统中转储安全相关信息,Python编写
+- [**137**星][9m] [Go] [snail007/shadowtunnel](https://github.com/snail007/shadowtunnel) secure tunnel which help you protecting your tcp traffic between your machine and your service on remote.
+- [**137**星][1m] [JS] [fcavallarin/domdig](https://github.com/fcavallarin/domdig) DOM XSS scanner for Single Page Applications
+- [**137**星][11m] [Shell] [tacticthreat/penetrationtesting-notes](https://github.com/tacticthreat/PenetrationTesting-Notes) Penetration Testing Notes and Playbook (PTP)
+- [**137**星][8m] [Py] [mdudek-ics/trisis-triton-hatman](https://github.com/MDudek-ICS/TRISIS-TRITON-HATMAN) Repository containting original and decompiled files of TRISIS/TRITON/HATMAN malware
+- [**137**星][18d] [Shell] [reb311ion/tornado](https://github.com/reb311ion/tornado) All in one MITM tool .
+- [**137**星][4y] [C] [xairy/kaslr-bypass-via-prefetch](https://github.com/xairy/kaslr-bypass-via-prefetch) A proof-of-concept KASLR bypass for the Linux kernel via timing prefetch (dilettante implementation, better read the original paper:
+- [**137**星][5y] [ObjC] [tyranid/ie11sandboxescapes](https://github.com/tyranid/ie11sandboxescapes) Some example source code for fixed IE11 sandbox escapes.
+- [**137**星][2y] [Java] [tinylcy/classanalyzer](https://github.com/tinylcy/classanalyzer) A Java Class File Disassembler
+- [**137**星][8y] [stefanesser/ida-ios-toolkit](https://github.com/stefanesser/ida-ios-toolkit) 辅助处理iOS kernelcache的IDAPython收集
+- [**137**星][4y] [PS] [secabstraction/wmisploit](https://github.com/secabstraction/wmisploit) a small set of PowerShell scripts that leverage the WMI service, for post-exploitation use
+- [**137**星][1y] [Py] [quentinhardy/scriptsandexploits](https://github.com/quentinhardy/scriptsandexploits) Some scripts and exploits
+- [**137**星][4y] [Py] [puniaze/portdog](https://github.com/puniaze/portdog) network anomaly detector aimed to detect port scanning techniques
+- [**137**星][2m] [HTML] [nusenu/ansible-relayor](https://github.com/nusenu/ansible-relayor) An Ansible Role for Tor Relay Operators
+- [**137**星][9m] [Py] [nh2/strace-pipes-presentation](https://github.com/nh2/strace-pipes-presentation) 利用strace+管道/socket进行调试
+- [**137**星][1y] [Java] [netspi/wsdler](https://github.com/netspi/wsdler) WSDL Parser extension for Burp
+- [**137**星][3y] [Py] [misterch0c/twitterbftd](https://github.com/misterch0c/twitterbftd) Twitter Back From The Dead looks in a user tweets history for domain names that are available for registration
+- [**137**星][26d] [PS] [lazywinadmin/adsips](https://github.com/lazywinadmin/adsips) PowerShell module to interact with Active Directory using ADSI and the System.DirectoryServices namespace (.NET Framework)
+- [**137**星][3y] [C] [koutto/ioctlbf](https://github.com/koutto/ioctlbf) Windows Kernel Drivers fuzzer
+- [**137**星][10m] [Py] [johndekroon/serializekiller](https://github.com/johndekroon/serializekiller) Mass scanner for the Java serialize bug
+- [**137**星][2m] [ignitetechnologies/ctf-difficulty](https://github.com/ignitetechnologies/ctf-difficulty) This cheasheet is aimed at the CTF Players and Beginners to help them sort the CTF Challenges on the basis of Difficulties.
+- [**137**星][2m] [ObjC] [icepa/tor.framework](https://github.com/icepa/tor.framework) Tor framework for the iCepa project
+- [**137**星][2y] [Java] [helios-decompiler/standalone-app](https://github.com/helios-decompiler/standalone-app) All-in-one Java reverse engineering tool
+- [**137**星][7m] [C] [hc0d3r/mysql-magic](https://github.com/hc0d3r/mysql-magic) dump mysql client password from memory
+- [**137**星][2y] [greymd/cve-2017-1000117](https://github.com/greymd/cve-2017-1000117) Check Git's vulnerability CVE-2017-1000117
+- [**137**星][9d] [C++] [grammatech/ddisasm](https://github.com/grammatech/ddisasm) A fast and accurate disassembler
+- [**137**星][2y] [Py] [gradiusx/hevd-python-solutions](https://github.com/gradiusx/hevd-python-solutions) Python solutions for the HackSysTeam Extreme Vulnerable Driver
+- [**137**星][2y] [Java] [gnaixx/hidex-hack](https://github.com/gnaixx/hidex-hack) anti reverse by hack dex file
+- [**137**星][7m] [Py] [giovanifss/gitmails](https://github.com/giovanifss/gitmails) An information gathering tool to collect git commit emails in version control host services
+- [**137**星][3y] [C] [ebursztein/malusb](https://github.com/ebursztein/malusb) Malicious USB
+- [**137**星][17d] [Ruby] [dev-sec/chef-ssh-hardening](https://github.com/dev-sec/chef-ssh-hardening) This chef cookbook provides secure ssh-client and ssh-server configurations.
+- [**137**星][3y] [C] [cr4sh/peibackdoor](https://github.com/cr4sh/peibackdoor) PEI stage backdoor for UEFI compatible firmware
+- [**137**星][5y] [Py] [byt3bl33d3r/sslstrip2](https://github.com/byt3bl33d3r/sslstrip2) A mirror of the original SSLstrip+ code by Leonardo Nve
+- [**137**星][3y] [JS] [as0ler/frida-scripts](https://github.com/as0ler/frida-scripts) Repository including some useful frida script for iOS Reversing
+- [**137**星][2y] [Py] [anhkgg/pyrat](https://github.com/anhkgg/pyrat) PyRat,a rat by python xmlrpc
+- [**137**星][5m] [C] [akayn/demos](https://github.com/akayn/demos) Windows Kernel Exploitation. Static & dynamic analysis, exploits & vuln research. Mitigations bypass's, genric bug-class's.
+- [**137**星][1y] [PLpgSQL] [1eez/103976](https://github.com/1eez/103976) 103976个英语单词库(sql版,csv版,Excel版)包含英文单词,中文翻译,单词的词性及多种词义,执行SQL语句就可以生成表,支持SQL Server,MySQL等多种数据库
+- [**136**星][9d] [Scala] [shiftleftsecurity/joern](https://github.com/shiftleftsecurity/joern) Open-source code analysis platform for C/C++ based on code property graphs
+- [**136**星][2y] [Py] [vysecurity/ipfuscator](https://github.com/vysecurity/IPFuscator) IPFuscator - A tool to automatically generate alternative IP representations
+- [**136**星][14d] [PS] [lazywinadmin/monitor-adgroupmembership](https://github.com/lazywinadmin/Monitor-ADGroupMembership) PowerShell script to monitor Active Directory groups and send an email when someone is changing the membership
+- [**136**星][6y] [Py] [osirislab/ctf-challenges](https://github.com/osirislab/CTF-Challenges) A repository of challenges from various CTF competitions.
+- [**136**星][2y] [PS] [gpoguy/getvulnerablegpo](https://github.com/gpoguy/getvulnerablegpo) PowerShell script to find 'vulnerable' security-related GPOs that should be hardended
+- [**136**星][1y] [nsacyber/unfetter](https://github.com/nsacyber/unfetter) Identifies defensive gaps in security posture by leveraging Mitre's ATT&CK framework. #nsacyber
+- [**136**星][2m] [JS] [jesusprubio/shodan-client](https://github.com/jesusprubio/shodan-client)
+- [**136**星][6y] [C++] [zer0fl4g/nanomite](https://github.com/zer0fl4g/nanomite) Windows上用于x64和x86的图形调试器
+- [**136**星][8m] [Py] [yt1g3r/cve-2019-3396_exp](https://github.com/yt1g3r/cve-2019-3396_exp) CVE-2019-3396 confluence SSTI RCE
+- [**136**星][3y] [Java] [ysrc/anti-emulator](https://github.com/ysrc/anti-emulator) 基于文件特征的Android模拟器检测
+- [**136**星][1y] [C] [xvortex/ps4-hen-vtx](https://github.com/xvortex/ps4-hen-vtx) A fully implemented kernel exploit for the PS4 with HEN
+- [**136**星][12m] [JS] [thx/magix-inspector](https://github.com/thx/magix-inspector) magix项目调试分析工具
+- [**136**星][4m] [Jupyter Notebook] [threathuntingproject/hunter](https://github.com/threathuntingproject/hunter) A threat hunting / data analysis environment based on Python, Pandas, PySpark and Jupyter Notebook.
+- [**136**星][7y] [C] [t57root/pwnginx](https://github.com/t57root/pwnginx) Pwn nginx - a nginx backdoor provides shell access, socks5 tunneling, http password sniffing.
+- [**136**星][28d] [Py] [swisskyrepo/vulny-code-static-analysis](https://github.com/swisskyrepo/vulny-code-static-analysis) Basic script to detect vulnerabilities into a PHP source code using statical analysis, based on regex
+- [**136**星][4y] [scfwse/blockchinasoftware](https://github.com/scfwse/blockchinasoftware) 国产安全软件免疫补丁
+- [**136**星][4m] [C] [rmmh/abbrase](https://github.com/rmmh/abbrase) password generation based on abbreviating phrases made with markov chains
+- [**136**星][1y] [Py] [nirizr/rematch](https://github.com/nirizr/rematch) REmatch, a complete binary diffing framework that is free and strives to be open source and community driven.
+- [**136**星][6y] [Py] [nightnord/ljd](https://github.com/nightnord/ljd) LuaJIT raw-bytecode decompiler
+- [**136**星][3d] [Py] [misp/misp-modules](https://github.com/misp/misp-modules) Modules for expansion services, import and export in MISP
+- [**136**星][1y] [HTML] [maestron/hacking-tutorials](https://github.com/maestron/hacking-tutorials) hacking-tutorials
+- [**136**星][3m] [Go] [leviathan1995/fari-proxy](https://github.com/leviathan1995/fari-proxy) To freedom
+- [**136**星][4m] [PS] [leechristensen/random](https://github.com/leechristensen/random) Assorted scripts and one off things
+- [**136**星][3y] [kurobeats/pentest-bookmarks](https://github.com/kurobeats/pentest-bookmarks) Open Penetration Testing Bookmarks Collection
+- [**136**星][2m] [C] [kubo/funchook](https://github.com/kubo/funchook) Funchook - an API Hook Library
+- [**136**星][3y] [ObjC] [kpwn/935csbypass](https://github.com/kpwn/935csbypass) codesign bypass (get out of rop without JIT)
+- [**136**星][2y] [Shell] [junbaor/shell_script](https://github.com/junbaor/shell_script) 一键安装 shadowsocks,支持 chacha20-ietf-poly1305 加密方式
+- [**136**星][7m] [Py] [itskindred/moddetective](https://github.com/itskindred/moddetective) modDetective is a small Python tool that chronologizes files based on modification time in order to investigate recent system activity.
+- [**136**星][3y] [Py] [hasameli/foghorn](https://github.com/hasameli/foghorn) The foghorn project is a DNS proxy intended to reduce user exposure to phishing and other malicious items that can be interdicted by DNS greylisting
+- [**136**星][2d] [JS] [h3xstream/burp-retire-js](https://github.com/h3xstream/burp-retire-js) Burp/ZAP/Maven extension that integrate Retire.js repository to find vulnerable Javascript libraries.
+- [**136**星][7y] [Py] [gdssecurity/wifitap](https://github.com/gdssecurity/wifitap) wifitap updated for BT5r3
+- [**136**星][2y] [Py] [duoergun0729/3book](https://github.com/duoergun0729/3book) 《Web安全之强化学习与GAN》
+- [**136**星][3y] [Java] [dodola/deepinvirtualapp](https://github.com/dodola/deepinvirtualapp) VirtualApp的技术文档和各个技术点拆解demo
+- [**136**星][4m] [Py] [derekhe/proxypool](https://github.com/derekhe/proxypool) 高质量免费代理池——每日1w+代理资源滚动更新
+- [**136**星][2y] [Py] [ctxis/canape](https://github.com/ctxis/canape) CANAPE Network Testing Tool
+- [**136**星][8d] [C#] [chrisnas/debuggingextensions](https://github.com/chrisnas/debuggingextensions) Host of debugging-related extensions such as post-mortem tools or WinDBG extensions
+- [**136**星][3y] [C] [chris-johnston/binarykeyboard](https://github.com/chris-johnston/binarykeyboard) A keyboard with two buttons that types in binary.
+- [**136**星][1m] [TS] [chame1eon/jnitrace](https://github.com/chame1eon/jnitrace) A Frida based tool that traces usage of the JNI API in Android apps.
+- [**136**星][4m] [JS] [chabou/hyper-pane](https://github.com/chabou/hyper-pane) Extension for Hyper.app to enhance pane navigation.
+- [**136**星][2y] [Rust] [bryant/argon2rs](https://github.com/bryant/argon2rs) The pure-Rust password hashing library running on Argon2.
+- [**136**星][2m] [Py] [bo0om/parampampam](https://github.com/bo0om/parampampam) brute discover GET and POST parameters.
+- [**136**星][4y] [Go] [bearded-web/bearded](https://github.com/bearded-web/bearded)
+- [**136**星][7d] [Py] [arizvisa/ida-minsc](https://github.com/arizvisa/ida-minsc) a plugin for IDA Pro that assists a user with scripting the IDAPython plugin that is bundled with the disassembler.
+- [**136**星][14d] [PS] [antoniococo/conptyshell](https://github.com/antoniococo/conptyshell) ConPtyShell - Fully Interactive Reverse Shell for Windows
+- [**136**星][1y] [C] [alex3434/wmi-static-spoofer](https://github.com/alex3434/wmi-static-spoofer) Spoofing the Windows 10 HDD/diskdrive serialnumber from kernel without hooking
+- [**136**星][2y] [Go] [aiportal/wechat-proxy](https://github.com/aiportal/wechat-proxy) 微信代理服务
+- [**135**星][13d] [JS] [snyk/goof](https://github.com/snyk/goof) Super vulnerable todo list application
+- [**135**星][11m] [PS] [vysecurity/aggressor-vysec](https://github.com/vysecurity/Aggressor-VYSEC) CobaltStrike Aggressor Scripts
+- [**135**星][12m] [Shell] [onmyway133/swiftsnippets](https://github.com/onmyway133/SwiftSnippets) A collection of Swift snippets to be used in Xcode
+- [**135**星][1y] [Py] [crytic/rattle](https://github.com/crytic/rattle) evm binary static analysis
+- [**135**星][13d] [Haskell] [jackmiranda/herms](https://github.com/JackMiranda/herms) a Haskell-based Recipe Manager (yes, food recipes) for the command line
+- [**135**星][2y] [JS] [usscltd/dorks](https://github.com/usscltd/dorks) google hack database automation tool
+- [**135**星][2y] [thec00n/smart-contract-honeypots](https://github.com/thec00n/smart-contract-honeypots) 智能合约蜜罐收集
+- [**135**星][3y] [Ruby] [tagomoris/fluent-plugin-secure-forward](https://github.com/tagomoris/fluent-plugin-secure-forward) input/output plugin to forward fluentd messages over SSL with authentication.
+- [**135**星][3y] [Py] [sviehb/jefferson](https://github.com/sviehb/jefferson) JFFS2 filesystem extraction tool
+- [**135**星][6y] [Java] [sectooladdict/wavsep](https://github.com/sectooladdict/wavsep) The Web Application Vulnerability Scanner Evaluation Project
+- [**135**星][2y] [C#] [poshsec/poshsecframework](https://github.com/poshsec/poshsecframework) A framework for PowerShell and PoshSec scripts for network management, security, and maintenance.
+- [**135**星][8d] [pomerium/awesome-security-audits](https://github.com/pomerium/awesome-security-audits) A collection of public security audits.
+- [**135**星][2y] [Shell] [peterjaric/archaeologit](https://github.com/peterjaric/archaeologit) 扫描GitHub repo的历史, 按指定模式查找敏感信息, 例如用户名密码
+- [**135**星][4y] [osandamalith/exe2image](https://github.com/osandamalith/exe2image) A simple utility to convert EXE files to JPEG images and vice versa.
+- [**135**星][5d] [Py] [oasis-open/cti-python-stix2](https://github.com/oasis-open/cti-python-stix2) OASIS TC Open Repository: Python APIs for STIX 2
+- [**135**星][7y] [Ruby] [mubix/vt-notify](https://github.com/mubix/vt-notify) Get email notification when Virus Total has a copy of your binary.
+- [**135**星][30d] [Py] [m8r0wn/subscraper](https://github.com/m8r0wn/subscraper) External pentest and bug bounty tool to perform subdomain enumeration through various techniques. SubScraper will provide information such as HTTP & DNS lookups to aid in potential next steps.
+- [**135**星][8m] [PS] [logrhythm-labs/pie](https://github.com/logrhythm-labs/pie) Phishing Intelligence Engine
+- [**135**星][3y] [PS] [latkin/1poshword](https://github.com/latkin/1poshword) PowerShell client for 1Password
+- [**135**星][1y] [Go] [lanrat/certgraph](https://github.com/lanrat/certgraph) 抓取 SSL 证书并创建有向图, 图中每个域都是一个节点, 域的证书的替代名称作为节点的边
+- [**135**星][3y] [Py] [laginimaineb/android_fde_bruteforce](https://github.com/laginimaineb/android_fde_bruteforce) Scripts to bruteforce Android's Full Disk Encryption off the device
+- [**135**星][2y] [Rust] [kpcyrd/rshijack](https://github.com/kpcyrd/rshijack) TCP连接劫持
+- [**135**星][3y] [C] [keenerd/rtl-sdr-misc](https://github.com/keenerd/rtl-sdr-misc) A bucket of various work-in-progress rtl-sdr ideas.
+- [**135**星][7m] [Shell] [itskindred/jalesc](https://github.com/itskindred/jalesc) Just Another Linux Enumeration Script: A Bash script for locally enumerating a compromised Linux box
+- [**135**星][3y] [C++] [ioactive/i-know-where-your-page-lives](https://github.com/ioactive/i-know-where-your-page-lives) 对的Windows 10内核进行非随机化
+- [**135**星][11m] [C++] [herumi/msoffice](https://github.com/herumi/msoffice) A tool/lib to encrypt/decrypt Microsoft Office Document
+- [**135**星][7m] [C] [dzzie/scdbg](https://github.com/dzzie/scdbg) note: current build is VS_LIBEMU project. This cross platform gcc build is for Linux users but is no longer updated. modification of the libemu sctest project to add basic debugger capabilities and more output useful for manual RE. The newer version will run under WINE
+- [**135**星][5m] [PHP] [designsecurity/progpilot](https://github.com/designsecurity/progpilot) A static analysis tool for security
+- [**135**星][22d] [C] [davidbuchanan314/tardis](https://github.com/davidbuchanan314/tardis) Trace And Rewrite Delays In Syscalls: Hooking time-related Linux syscalls to warp a process's perspective of time, using ptrace.
+- [**135**星][3y] [C] [cryptosphere/sysrandom](https://github.com/cryptosphere/sysrandom) Secure random number generation for Ruby using system RNG facilities
+- [**135**星][8d] [Py] [certcc/tapioca](https://github.com/certcc/tapioca) CERT Tapioca for MITM network analysis
+- [**135**星][7m] [Py] [cbhue/pyfuscation](https://github.com/cbhue/pyfuscation) Obfuscate powershell scripts by replacing Function names, Variables and Parameters.
+- [**135**星][2m] [Py] [arch4ngel/eavesarp](https://github.com/arch4ngel/eavesarp) Analyze ARP requests to identify intercommunicating hosts and stale network address configurations (SNACs)
+- [**135**星][2m] [Go] [0xrawsec/whids](https://github.com/0xrawsec/whids) Open Source Endpoint Detection System for Windows
+- [**134**星][6d] [Py] [dhondta/dronesploit](https://github.com/dhondta/dronesploit) Drone pentesting framework console
+- [**134**星][24d] [Go] [getlantern/http-proxy](https://github.com/getlantern/http-proxy) HTTP Proxy with TLS support
+- [**134**星][2d] [Shell] [adroitadorkhan/energizedprotection](https://github.com/AdroitAdorKhan/EnergizedProtection) A merged collection of hosts from reputable sources. #StayEnergized!
+- [**134**星][4y] [Ruby] [dradis/dradis-legacy](https://github.com/dradis/dradis-legacy) This is a LEGACY repo head to
+- [**134**星][10m] [C] [yadutaf/tracepkt](https://github.com/yadutaf/tracepkt) 跟踪 Linux 系统 PING 数据包跨网络接口和命名空间的路线,支持 IPv4 及 IPv6
+- [**134**星][2m] [Py] [wudimahua/firewall](https://github.com/wudimahua/firewall) 美国国家安全局NSA下属方程式黑客组织(Equation Group)被The Shadow Brokers(影子经纪人)hack出来的并免费分享的源码
+- [**134**星][9d] [C++] [thiagoralves/openplc_v3](https://github.com/thiagoralves/openplc_v3) OpenPLC Runtime version 3
+- [**134**星][5m] [tarraschk/richelieu](https://github.com/tarraschk/richelieu) List of the most common French passwords
+- [**134**星][1y] [Py] [soledad208/cve-2018-10933](https://github.com/soledad208/cve-2018-10933) CVE-2018-10933 very simple POC
+- [**134**星][2y] [C] [silentsignal/sheep-wolf](https://github.com/silentsignal/sheep-wolf) 现实中早已有MD5 碰撞攻击的实例,然而一些安全软件依然已 MD5 标识恶意样本。此工具用于检测安全工具内部是否使用 MD5 标识样本
+- [**134**星][3m] [Py] [seomoz/reppy](https://github.com/seomoz/reppy) Modern robots.txt Parser for Python
+- [**134**星][10m] [PS] [securemode/invoke-apex](https://github.com/securemode/invoke-apex) A PowerShell-based toolkit and framework consisting of a collection of techniques and tradecraft for use in red team, post-exploitation, adversary simulation, or other offensive security tasks.
+- [**134**星][11m] [Py] [scrapinghub/scrapy-training](https://github.com/scrapinghub/scrapy-training) Scrapy Training companion code
+- [**134**星][3m] [Py] [revng/llvmcpy](https://github.com/revng/llvmcpy) Python bindings for LLVM auto-generated from the LLVM-C API
+- [**134**星][2y] [Py] [random-robbie/jira-scan](https://github.com/random-robbie/jira-scan) CVE-2017-9506 - SSRF
+- [**134**星][2y] [Py] [pjlantz/hale](https://github.com/pjlantz/hale) Botnet command & control monitor
+- [**134**星][20d] [C++] [pichi-router/pichi](https://github.com/pichi-router/pichi) Flexible Rule-Based Proxy
+- [**134**星][5y] [PHP] [phith0n/xsshtml](https://github.com/phith0n/xsshtml) php富文本过滤类,XSS Filter
+- [**134**星][4m] [C++] [phildo/expandpass](https://github.com/phildo/expandpass) Implements a simple nested grammar for expanding passwords
+- [**134**星][3y] [Shell] [pasahitz/zirikatu](https://github.com/pasahitz/zirikatu) Fud Payload generator script
+- [**134**星][5d] [Go] [palantir/policy-bot](https://github.com/palantir/policy-bot) A GitHub App that enforces approval policies on pull requests
+- [**134**星][3d] [C] [openmpt/openmpt](https://github.com/openmpt/openmpt) Official read-only git mirror of the OpenMPT and libopenmpt subversion repository at
+- [**134**星][3d] [Py] [omegak2/pypoe](https://github.com/omegak2/pypoe) Collection of Python Tools for Path of Exile
+- [**134**星][2y] [ObjC] [objective-see/sniffmk](https://github.com/objective-see/sniffmk) sniff mouse and keyboard events
+- [**134**星][1m] [C] [nomorefood/putty-cac](https://github.com/nomorefood/putty-cac) Windows 安全Shell客户端,支持智能卡&证书
+- [**134**星][1y] [C++] [nitram2342/degate](https://github.com/nitram2342/degate) Open source software for chip reverse engineering.
+- [**134**星][3d] [Py] [netevert/pockint](https://github.com/netevert/pockint) A portable OSINT Swiss Army Knife for DFIR/OSINT professionals
+- [**134**星][5m] [Shell] [nccgroup/bkscan](https://github.com/nccgroup/bkscan) BlueKeep scanner supporting NLA
+- [**134**星][6m] [Go] [mylxsw/remote-tail](https://github.com/mylxsw/remote-tail) RemoteTail用于同步监控多台服务器日志文件变更,一句话说就是多主机的远程tail。
+- [**134**星][2y] [Py] [mohamednourtn/terminator](https://github.com/mohamednourtn/terminator) Terminator metasploit payload generator
+- [**134**星][2y] [mafutian/software](https://github.com/mafutian/software) 破解版工具/软件
+- [**134**星][8m] [PS] [klionsec/decryption-tool](https://github.com/klionsec/decryption-tool)
+- [**134**星][3y] [Swift] [kidneyband/potatso-ios](https://github.com/kidneyband/potatso-ios) Potatso is an iOS client that implements Shadowsocks proxy with the leverage of NetworkExtension framework in iOS 9.
+- [**134**星][9m] [Py] [jzadeh/aktaion](https://github.com/jzadeh/aktaion) 基于微行为(Micro Behavior)的漏洞检测和自动化GPO策略生成
+- [**134**星][3m] [PHP] [jorijn/laravel-security-checker](https://github.com/jorijn/laravel-security-checker) Added Laravel functionality to SensioLabs Security Checker. Adds a command to check for, and optionally emails you, vulnerabilities when they affect you.
+- [**134**星][1y] [Makefile] [jonathansalwan/binary-samples](https://github.com/jonathansalwan/binary-samples) Samples of binary with different formats and architectures. A test suite for your binary analysis tools.
+- [**134**星][3m] [C] [guillem96/argon-nx](https://github.com/guillem96/argon-nx) an immutable payload which is injected to your Nintendo Switch via Fusee Gelee exploit.
+- [**134**星][5y] [C] [goldshtn/windbg-extensions](https://github.com/goldshtn/windbg-extensions) Various extensions for WinDbg
+- [**134**星][1y] [ellerbrock/docker-security-images](https://github.com/ellerbrock/docker-security-images)
+- [**134**星][1y] [Py] [dionach/reposcanner](https://github.com/dionach/reposcanner) Python script to scan Git repos for interesting strings
+- [**134**星][1y] [Swift] [danleechina/mixplaintext](https://github.com/danleechina/mixplaintext) 可对 Xcode 项目工程所有的 objective-c 文件内包含的明文进行加密混淆,提高逆向分析难度。
+- [**134**星][4y] [Shell] [commonexploits/port-scan-automation](https://github.com/commonexploits/port-scan-automation) Automate NMAP Scans and Generate Custom Nessus Policies Automatically
+- [**134**星][3m] [YARA] [citizenlab/malware-indicators](https://github.com/citizenlab/malware-indicators) Citizen Lab Malware Reports
+- [**134**星][3y] [Py] [blacktop/malice](https://github.com/blacktop/malice) VirusTotal Wanna Be
+- [**134**星][2y] [Py] [binarydefense/auto-ossec](https://github.com/binarydefense/auto-ossec) 为Linux和Windows自动配置OSSEC代理
+- [**134**星][5y] [Py] [ashdnazg/pyreshark](https://github.com/ashdnazg/pyreshark) A Wireshark plugin providing a simple interface for writing dissectors in Python.
+- [**134**星][4m] [PS] [anssi-fr/adtimeline](https://github.com/anssi-fr/adtimeline) PowerShell script creating a timeline of Active Directory changes with replication metadata
+- [**134**星][3y] [akibsayyed/safeseven](https://github.com/akibsayyed/safeseven) SS7 Assessment Tool
+- [**134**星][2y] [HTML] [4b5f5f4b/exploits](https://github.com/4b5f5f4b/exploits)
+- [**134**星][1m] [0xhelloworld/public](https://github.com/0xhelloworld/public) stuff i'm willing to share with the world lol
+- [**133**星][4y] [C++] [qihoo360/artdumper](https://github.com/qihoo360/artdumper) 从oat文件中dump出来dex的工具
+- [**133**星][2m] [Kotlin] [gosecure/dtd-finder](https://github.com/gosecure/dtd-finder) List DTDs and generate XXE payloads using those local DTDs.
+- [**133**星][29d] [Batchfile] [pr0cf5/kernel-exploit-practice](https://github.com/pr0cf5/kernel-exploit-practice) repository for kernel exploit practice
+- [**133**星][2d] [Py] [baidu-security/openrasp-iast](https://github.com/baidu-security/openrasp-iast) IAST 灰盒扫描工具
+- [**133**星][1y] [Py] [zxlie/website-ssl.sh](https://github.com/zxlie/website-ssl.sh) 低门槛跨入Https大门!网站ssl证书自动生成工具(http到https的转变),燥起来吧!
+- [**133**星][1y] [Py] [youngyangyang04/nosqlattack](https://github.com/youngyangyang04/nosqlattack) NoSQLAttack is an open source Python tool to automate exploit MongoDB server IP on Internet and disclose the database data by MongoDB default configuration weaknesses and injection attacks.
+- [**133**星][5y] [Java] [wanchouchou/apkprotect](https://github.com/wanchouchou/apkprotect) 通付盾第一代安全加固方案
+- [**133**星][1y] [Py] [threatresponse/margaritashotgun](https://github.com/threatresponse/margaritashotgun) Remote Memory Acquisition Tool
+- [**133**星][7m] [shipcod3/mysapadventures](https://github.com/shipcod3/mysapadventures) A quick methodology on testing / hacking SAP Applications for n00bz and bug bounty hunters
+- [**133**星][2y] [sashs/arm_exploitation](https://github.com/sashs/arm_exploitation) Exploitation on ARM-based Systems (Troopers18)
+- [**133**星][2y] [C] [potmdehex/multipath_kfree](https://github.com/potmdehex/multipath_kfree) low effort jb
+- [**133**星][9m] [Shell] [nullarray/mida-multitool](https://github.com/nullarray/mida-multitool) Bash script purposed for system enumeration, vulnerability identification and privilege escalation.
+- [**133**星][2y] [C++] [nezha-dt/nezha](https://github.com/nezha-dt/nezha) nezha:高效的domain-independent differential fuzzer
+- [**133**星][3m] [Py] [nccgroup/thetick](https://github.com/nccgroup/thetick) A simple embedded Linux backdoor.
+- [**133**星][2d] [Py] [manifoldai/docker-cookiecutter-data-science](https://github.com/manifoldai/docker-cookiecutter-data-science) A fork of the cookiecutter-data-science leveraging Docker for local development.
+- [**133**星][7m] [C++] [luis-hebendanz/0pack](https://github.com/luis-hebendanz/0pack) A novel technique to hide code from debuggers
+- [**133**星][3y] [PHP] [ksanchezcld/hacking_cheat_sheet](https://github.com/ksanchezcld/hacking_cheat_sheet) All my Hacking|Pentesting Notes
+- [**133**星][9m] [PHP] [k4mpr3t/b4tm4n](https://github.com/k4mpr3t/b4tm4n) Php webshell
+- [**133**星][4y] [C] [jvoisin/pangu](https://github.com/jvoisin/pangu) Toolkit to detect/crash/attack GNU debugging-related tools
+- [**133**星][4m] [Py] [hannob/optionsbleed](https://github.com/hannob/optionsbleed) a proof of concept code to test for the Optionsbleed bug in Apache httpd (CVE-2017-9798)
+- [**133**星][23d] [Ruby] [hahwul/xspear](https://github.com/hahwul/xspear) Powerfull XSS Scanning and Parameter analysis tool&gem
+- [**133**星][1y] [CSS] [gbrindisi/wordpot](https://github.com/gbrindisi/wordpot) A Wordpress Honeypot
+- [**133**星][3y] [C++] [felixwilhelm/xenpwn](https://github.com/felixwilhelm/xenpwn) Xenpwn is a toolkit for memory access tracing using hardware-assisted virtualization
+- [**133**星][1y] [Shell] [europa502/sharp](https://github.com/europa502/sharp) An anti-ARP-spoofing application software that use active and passive scanning methods to detect and remove any ARP-spoofer from the network.
+- [**133**星][15d] [C] [drahnr/oregano](https://github.com/drahnr/oregano) Schematic capture and circuit simulator
+- [**133**星][10m] [C#] [davidfowl/multiprotocolaspnetcore](https://github.com/davidfowl/multiprotocolaspnetcore) Multi-protocol Server with ASP.NET Core and Kestrel
+- [**133**星][1y] [PS] [darkoperator/posh-sysmon](https://github.com/darkoperator/posh-sysmon) PowerShell module for creating and managing Sysinternals Sysmon config files.
+- [**133**星][1m] [Py] [csirtgadgets/bearded-avenger](https://github.com/csirtgadgets/bearded-avenger) CIF v3 -- the fastest way to consume threat intelligence
+- [**133**星][9m] [JS] [crowdstrike/falcon-orchestrator](https://github.com/crowdstrike/falcon-orchestrator) CrowdStrike Falcon Orchestrator provides automated workflow and response capabilities
+- [**133**星][3y] [C++] [chenenyu/androidsecurity](https://github.com/chenenyu/androidsecurity) Android安全实践
+- [**133**星][1y] [Py] [carlosgprado/jarvis](https://github.com/carlosgprado/jarvis) 多功能, 带界面,辅助静态分析、漏洞挖掘、动态追踪(Pin)、导入导出等
+ - [IDA插件](https://github.com/carlosgprado/jarvis/tree/master/IDAPlugin)
+ - [PinTracer](https://github.com/carlosgprado/jarvis/tree/master/PinTracer)
+- [**133**星][4y] [C] [bwall/pemcracker](https://github.com/bwall/pemcracker) Tool to crack encrypted PEM files
+- [**133**星][2y] [Py] [bharshbarger/autosint](https://github.com/bharshbarger/autosint) Tool to automate common OSINT tasks
+- [**133**星][11m] [Ruby] [bahaabdelwahed/killshot](https://github.com/bahaabdelwahed/killshot) A Penetration Testing Framework, Information gathering tool & Website Vulnerability Scanner
+- [**133**星][8y] [Perl] [anestisb/webacoo](https://github.com/anestisb/webacoo) Web Backdoor Cookie Script-Kit
+- [**133**星][3m] [Py] [1n3/exploits](https://github.com/1n3/exploits) Exploits by 1N3 @CrowdShield
+- [**132**星][2m] [Shell] [starttoaster/docker-traefik](https://github.com/starttoaster/docker-traefik) Script to setup Traefik reverse-proxy in Docker with Compose
+- [**132**星][2y] [Py] [chenjiandongx/soksaccounts](https://github.com/chenjiandongx/soksaccounts) Shadowsocks 账号爬虫
+- [**132**星][2m] [C#] [lithnet/ad-password-protection](https://github.com/lithnet/ad-password-protection) Active Directory password filter featuring breached password checking and custom complexity rules
+- [**132**星][4m] [PHP] [zsxsoft/my-ctf-challenges](https://github.com/zsxsoft/my-ctf-challenges) My CTF Challenges
+- [**132**星][4y] [JS] [walkdoer/life-time-tracker](https://github.com/walkdoer/Life-Time-Tracker) 个人时间跟踪,可视化个人活动数据,管理个人生活,利用过去来指导未来,基于柳比歇夫的统计方法
+- [**132**星][12m] [Dockerfile] [theonemule/docker-waf](https://github.com/theonemule/docker-waf) An NGINX and ModSecurity based Web Application Firewall for Docker
+- [**132**星][1y] [Py] [thehive-project/hippocampe](https://github.com/thehive-project/hippocampe) Threat Feed Aggregation, Made Easy
+- [**132**星][4m] [Py] [tensorflow/tensorboard-plugin-example](https://github.com/tensorflow/tensorboard-plugin-example)
+- [**132**星][5y] [C] [smealum/ninjhax](https://github.com/smealum/ninjhax) 3ds homebrew-enabling exploit for 4.0-9.2
+- [**132**星][2y] [sky8964/home](https://github.com/sky8964/home) 【墙外到墙内搬运工】郭文贵 推特党 兲朝浮世绘 小民之心 辛灏年 曹长青 袁红冰 旗袍 袁腾飞 翻墙 科学上网 | 搬运工 自由 民主 法治 宪政 人权 平等 视频 音频 文字版 在线 播放 下载 民运 维权 王岐山 孟建柱 孙力军 傅振华 江棉恒 江泽民 习近平 温家宝 王芳 董卿 杨澜 周小平 吴征 唐柏桥 e租宝 泛亚 共产党 赵家 盜国贼 内幕 黑暗 灾难 专政 上访 游行 暴乱 欺骗 谎言 腐败 通奸 权贵 马航 老兵 活摘 启蒙 墙外 墙内 防火墙 防火长城 功夫网 党文化 民阵 爆料 九评 杨建利 郭宝胜 昭明 反共 法轮功 自媒体 Youtube 油管 推特 Twitter 网盘 传播 关注 五毛 自干五 特务 红二代 红三代 官二代 土共 共匪
+- [**132**星][3d] [Py] [rvn0xsy/cooolis-ms](https://github.com/rvn0xsy/cooolis-ms) Cooolis-ms is a server that supports the Metasploit Framework RPC. It is used to work with the Shellcode and PE loader. To some extent, it bypasses the static killing of anti-virus software, and allows the Cooolis-ms server to communicate with the Metasploit server. Separation.
+- [**132**星][10m] [C] [regehr/ub-canaries](https://github.com/regehr/ub-canaries) collection of C/C++ programs that try to get compilers to exploit undefined behavior
+- [**132**星][2m] [Py] [rastrea2r/rastrea2r](https://github.com/rastrea2r/rastrea2r) Collecting & Hunting for IOCs with gusto and style
+- [**132**星][2y] [Py] [pwning/defcon25-public](https://github.com/pwning/defcon25-public) DEFCON 25 某Talk用到的 反汇编器和 IDA 模块
+- [**132**星][6m] [CMake] [pothosware/pothossdr](https://github.com/pothosware/pothossdr) Pothos SDR Windows开发环境
+- [**132**星][10d] [Lua] [nnposter/nndefaccts](https://github.com/nnposter/nndefaccts) nnposter's alternate fingerprint dataset for Nmap script http-default-accounts
+- [**132**星][22d] [PS] [netspi/powershell](https://github.com/netspi/powershell) NetSPI PowerShell Scripts
+- [**132**星][7m] [Py] [mitrecnd/whodat](https://github.com/mitrecnd/whodat) Pivotable Reverse WhoIs / PDNS Fusion with Registrant Tracking & Alerting plus API for automated queries (JSON/CSV/TXT)
+- [**132**星][4y] [Py] [korelogicsecurity/mastiff](https://github.com/korelogicsecurity/mastiff) Malware static analysis framework
+- [**132**星][5d] [C] [jnider/delinker](https://github.com/jnider/delinker) Unlinks a binary executable to get back a set of .o object files for further transformation and re-linking.
+- [**132**星][1m] [jlopp/physical-bitcoin-attacks](https://github.com/jlopp/physical-bitcoin-attacks) A list of known attacks against Bitcoin / crypto asset owning entities that occurred in meatspace.
+- [**132**星][8m] [Py] [jas502n/cve-2019-2618](https://github.com/jas502n/cve-2019-2618) Weblogic Upload Vuln(Need username password)-CVE-2019-2618
+- [**132**星][2m] [Py] [ivan1ee/struts2-057-exp](https://github.com/ivan1ee/struts2-057-exp) s2-057 最新漏洞分析和EXP脚本
+- [**132**星][8m] [C] [hfiref0x/wdextract](https://github.com/hfiref0x/wdextract) Extract Windows Defender database from vdm files and unpack it
+- [**132**星][21d] [Go] [fanpei91/gap-proxy](https://github.com/fanpei91/gap-proxy) gap-proxy 是一个加速网络的 SOCKS5 安全代理工具。
+- [**132**星][6y] [esxgx/easy-ecc](https://github.com/esxgx/easy-ecc) Simple and secure ECC and ECDSA
+- [**132**星][3y] [Batchfile] [eliteandroidapps/whatsapp-key-db-extractor](https://github.com/eliteandroidapps/whatsapp-key-db-extractor) Allows WhatsApp users to extract their cipher key and databases on non-rooted Android devices.
+- [**132**星][2m] [Py] [defense-cyber-crime-center/dc3-mwcp](https://github.com/defense-cyber-crime-center/dc3-mwcp)
+- [**132**星][5m] [PS] [cyberark/ketshash](https://github.com/cyberark/ketshash) 基于事件查看器日志,检测可疑的特权 NTLM 连接, 尤其是 Pass-The-Hash 攻击
+- [**132**星][4y] [HTML] [code-scan/brodomain](https://github.com/code-scan/brodomain) 兄弟域名查询
+- [**132**星][11d] [Shell] [cfn-modules/docs](https://github.com/cfn-modules/docs) Rapid CloudFormation: Modular, production ready, open source.
+- [**132**星][2m] [Py] [batuhaniskr/twitter-intelligence](https://github.com/batuhaniskr/twitter-intelligence) Twitter Intelligence OSINT project performs tracking and analysis of the Twitter
+- [**132**星][16d] [C] [arsv/minibase](https://github.com/arsv/minibase) small static userspace tools for Linux
+- [**132**星][3y] [aqzt/sso](https://github.com/aqzt/sso) 项目主要是汇集整理服务器安全运维规范,包括运维工程师必须遵守的规范、服务器运维中注意事项、故障避免手段等文档,帮助运维工程师避免服务器安全和运维故障,方便运维工程师学习成长。
+- [**132**星][4d] [Java] [apache/commons-compress](https://github.com/apache/commons-compress) Mirror of Apache Commons Compress
+- [**132**星][4y] [Py] [andrewmohawk/rfcathelpers](https://github.com/andrewmohawk/rfcathelpers) Helper scripts for RfCat devices
+- [**132**星][2y] [Visual Basic .NET] [alibawazeeer/rat-njrat-0.7d-modded-source-code](https://github.com/alibawazeeer/rat-njrat-0.7d-modded-source-code) NJR
+- [**131**星][1y] [PS] [nsacyber/applocker-guidance](https://github.com/nsacyber/applocker-guidance) Configuration guidance for implementing application whitelisting with AppLocker. #nsacyber
+- [**131**星][3y] [Py] [hanc00l/wifitest](https://github.com/hanc00l/wifitest) 一个简单的wifi弱口令暴破的python脚本,可自动实时破解,不需要使用aircrack-ng抓包
+- [**131**星][4y] [okturtles/blockchainid](https://github.com/okturtles/blockchainid) Decentralized alternative to Facebook Login and OpenID
+- [**131**星][2y] [Shell] [coldhakca/tor-relay-bootstrap](https://github.com/coldhakca/tor-relay-bootstrap) Script to bootstrap a Debian server to be a set-and-forget Tor relay
+- [**131**星][2y] [JS] [oyyd/encryptsocks](https://github.com/oyyd/encryptsocks) Encrypt your socks transmission.
+- [**131**星][2y] [C#] [m0xiaoxi/ctftools](https://github.com/m0xiaoxi/CTFtools) 本项目主要搜集一些关于信息安全攻防相关的知识与工具,便于个人的渗透工作。
+- [**131**星][4y] [Py] [ricterz/websocket-injection](https://github.com/ricterz/websocket-injection) WebSocket 中转注入工具
+- [**131**星][2y] [C] [airbus-seclab/ramooflax](https://github.com/airbus-seclab/ramooflax) a bare metal (type 1) VMM (hypervisor) with a python remote control API
+- [**131**星][2y] [C++] [vmcall/latebros](https://github.com/vmcall/latebros) x64 usermode rootkit
+- [**131**星][5m] [Py] [zeropwn/spyse.py](https://github.com/zeropwn/spyse.py) Python API wrapper and command-line client for the tools hosted on spyse.com.
+- [**131**星][2m] [TS] [xyfir/ptorx](https://github.com/xyfir/ptorx)
+- [**131**星][1y] [wpscanteam/wpscan-v3](https://github.com/wpscanteam/wpscan-v3) THIS REPOSITORY HAS BEEN MOVED TO
+- [**131**星][6y] [ActionScript] [wordpress/secure-swfupload](https://github.com/wordpress/secure-swfupload) A fork of the long-abandoned SWFUpload project, maintained by WordPress and others to ensure that a secure version of SWFUpload exists. Report security vulnerabilities to swfupload-security@wordpress.org.
+- [**131**星][26d] [Py] [wangyihang/exploit-framework](https://github.com/wangyihang/exploit-framework)
+- [**131**星][1y] [PHP] [tools2/zend-decoder](https://github.com/tools2/zend-decoder) 还原ZendGuard处理后的php代码
+- [**131**星][3y] [HTML] [theori-io/chakra-2016-11](https://github.com/theori-io/chakra-2016-11) Proof-of-Concept exploit for Edge bugs (CVE-2016-7200 & CVE-2016-7201)
+- [**131**星][3y] [PS] [tevora-threat/eternal_blue_powershell](https://github.com/tevora-threat/eternal_blue_powershell) Port of eternal blue exploits to powershell
+- [**131**星][10m] [Rust] [shnatsel/libdiffuzz](https://github.com/shnatsel/libdiffuzz) Custom memory allocator that helps discover reads from uninitialized memory
+- [**131**星][3y] [Py] [schumilo/vusbf](https://github.com/schumilo/vusbf)
+- [**131**星][7y] [C] [saurik/mempodroid](https://github.com/saurik/mempodroid)
+- [**131**星][3y] [Py] [safebreach-labs/pyekaboo](https://github.com/safebreach-labs/pyekaboo) Proof-of-concept program that is able to to hijack/hook/proxy Python module(s) thanks to $PYTHONPATH variable
+- [**131**星][2y] [Ruby] [rapid7/nexpose-client](https://github.com/rapid7/nexpose-client) DEPRECATED: Rapid7 Nexpose API client library written in Ruby
+- [**131**星][5m] [JS] [owasp/passfault](https://github.com/owasp/passfault) OWASP Passfault evaluates passwords and enforces password policy in a completely different way.
+- [**131**星][1y] [Py] [nopernik/mpdns](https://github.com/nopernik/mpdns) Multi-Purpose DNS Server
+- [**131**星][1y] [Py] [mschwager/0wned](https://github.com/mschwager/0wned) Code execution via Python package installation.
+- [**131**星][2d] [JS] [mozilla/fxa](https://github.com/mozilla/fxa) Monorepo for Firefox Accounts
+- [**131**星][5y] [Java] [mogwaisec/mjet](https://github.com/mogwaisec/mjet) Mogwai Java Management Extensions (JMX) Exploitation Toolkit
+- [**131**星][2y] [C#] [m0xiaoxi/ctftools](https://github.com/m0xiaoxi/ctftools) 本项目主要搜集一些关于信息安全攻防相关的知识与工具,便于个人的渗透工作。
+- [**131**星][2y] [MATLAB] [lts4/universal](https://github.com/lts4/universal) Universal adversarial perturbations
+- [**131**星][2y] [Py] [jlospinoso/memcachedump](https://github.com/jlospinoso/memcachedump) Use your Shodan API Key to dump all the contents of exposed memcached servers.
+- [**131**星][2y] [Shell] [jgamblin/quickinstall](https://github.com/jgamblin/quickinstall) A Shell Script To Take Care Of Ubuntu Basics
+- [**131**星][3y] [C] [jcadduono/android_external_dirtycow](https://github.com/jcadduono/android_external_dirtycow) CVE-2016-5195 (dirtycow/dirtyc0w) - recowvery fork
+- [**131**星][9m] [JS] [htfy96/v2ray-config-gen](https://github.com/htfy96/v2ray-config-gen) V2Ray Configuration generator
+- [**131**星][4m] [C] [hoshimin/hooklib](https://github.com/hoshimin/hooklib) The functions interception library written on pure C and NativeAPI with UserMode and KernelMode support
+- [**131**星][4y] [C] [hiteshd/android-rootkit](https://github.com/hiteshd/android-rootkit) A rootkit for Android. Based on "Android platform based linux kernel rootkit" from Phrack Issue 68
+- [**131**星][6y] [Py] [hiddenillusion/analyzepdf](https://github.com/hiddenillusion/analyzepdf) Tool to help analyze PDF files
+- [**131**星][1m] [Java] [games647/fastlogin](https://github.com/games647/fastlogin) Checks if a minecraft player has a valid paid account. If so, they can skip offline authentication automatically. (premium auto login)
+- [**131**星][6y] [Java] [fuzion24/androidziparbitrage](https://github.com/fuzion24/androidziparbitrage) Exploit for Android Zip bugs: 8219321, 9695860, and 9950697
+- [**131**星][7m] [Go] [empijei/wapty](https://github.com/empijei/wapty) Go语言编写的Burp的替代品。(已不再维护)
+- [**131**星][3m] [PHP] [edsonmedina/php_testability](https://github.com/edsonmedina/php_testability) Analyses and reports testability issues of a php codebase
+- [**131**星][7m] [Java] [comsecuris/gdbghidra](https://github.com/comsecuris/gdbghidra) a visual bridge between a GDB session and GHIDRA
+- [**131**星][1y] [Py] [cisco-talos/bass](https://github.com/cisco-talos/bass) 从先前生成的恶意软件集群的样本中自动生成AV签名
+- [**131**星][2y] [Py] [chrisrimondi/vulntoes](https://github.com/chrisrimondi/vulntoes) Vulnerability Data in ES
+- [**131**星][2m] [C] [celesteblue-dev/psvita-re-tools](https://github.com/celesteblue-dev/psvita-re-tools) A bundle of RE tools for analyzing and modding PSVita OS
+- [**131**星][2d] [Shell] [binhex/arch-rtorrentvpn](https://github.com/binhex/arch-rtorrentvpn) Docker build script for Arch Linux base with ruTorrent, rTorrent, Flood, Privoxy and OpenVPN
+- [**131**星][6d] [Shell] [beta-tester/rpi-pxe-server](https://github.com/beta-tester/rpi-pxe-server) setup a Raspberry Pi as an PXE-Server
+- [**131**星][1m] [Go] [arnaucube/go-snark](https://github.com/arnaucube/go-snark) zkSNARK library implementation in Go
+- [**131**星][2y] [PHP] [anssi-fr/ad-permissions](https://github.com/anssi-fr/ad-permissions) Active Directory permissions (ACL/ACE) auditing tools
+- [**131**星][1y] [C++] [3gstudent/eventlogedit-evtx--evolution](https://github.com/3gstudent/eventlogedit-evtx--evolution) 从Windows XML事件日志(EVTX)文件中删除个别行
+- [**131**星][1y] [Py] [0x09al/dropboxc2c](https://github.com/0x09al/dropboxc2c) DropboxC2C is a post-exploitation agent which uses Dropbox Infrastructure for command and control operations.
+- [**130**星][2y] [Py] [zcutlip/bowcaster](https://github.com/zcutlip/bowcaster) Exploit Development Framework
+- [**130**星][1y] [PS] [xor-function/fathomless](https://github.com/xor-function/fathomless) A collection of post-exploitation tools for network red teaming. (Migrating to Fathomless Project)
+- [**130**星][2y] [C#] [xiaoxiaoleo/windows_pentest_tools](https://github.com/xiaoxiaoleo/windows_pentest_tools) My pentest tools used two years ago. Part1
+- [**130**星][6m] [Py] [wfzsec/awd_attack_framework](https://github.com/wfzsec/awd_attack_framework) awd攻防常用脚本+不死马+crontab+防御方法
+- [**130**星][1y] [Py] [wangyihang/reverse-shell-manager](https://github.com/wangyihang/reverse-shell-manager)
+- [**130**星][4m] [theofficialflow/h-encore-2](https://github.com/theofficialflow/h-encore-2) Fully chained kernel exploit for the PS Vita on firmwares 3.65-3.72
+- [**130**星][9m] [Shell] [tenable/router_badusb](https://github.com/tenable/router_badusb) BadUSB in Routers
+- [**130**星][2m] [Py] [shieldersec/webtech](https://github.com/shieldersec/webtech) Identify technologies used on websites.
+- [**130**星][2y] [Py] [ropnop/windows_sshagent_extract](https://github.com/ropnop/windows_sshagent_extract) PoC code to extract private keys from Windows 10's built in ssh-agent service
+- [**130**星][9m] [C++] [quarkslab/arybo](https://github.com/quarkslab/arybo) Manipulation, canonicalization and identification of mixed boolean-arithmetic symbolic expressions
+- [**130**星][7m] [TS] [phiresky/nmap-log-parse](https://github.com/phiresky/nmap-log-parse) Logs which devices are in your local network and draws graphs
+- [**130**星][23d] [Shell] [oktasecuritylabs/passprotect-js](https://github.com/oktasecuritylabs/passprotect-js) A simple JavaScript library to help you protect your users' passwords
+- [**130**星][3y] [Java] [mwsrc/betterandrorat](https://github.com/mwsrc/betterandrorat) Android Remote Access Trojan
+- [**130**星][9m] [HTML] [minhaskamal/cuteviruscollection](https://github.com/minhaskamal/cuteviruscollection) A Collection of Cute But Deadly Viruses (small-unharmful-annoying-harmless-funny-malware-virus-worm-windows-xp-7-10)
+- [**130**星][3m] [Go] [malfunkt/arpfox](https://github.com/malfunkt/arpfox) An arpspoof alternative (written in Go) that injects spoofed ARP packets into a LAN
+- [**130**星][1m] [Py] [log2timeline/dfvfs](https://github.com/log2timeline/dfvfs) Digital Forensics Virtual File System (dfVFS)
+- [**130**星][8m] [Py] [landgrey/abuse-ssl-bypass-waf](https://github.com/landgrey/abuse-ssl-bypass-waf) Bypassing WAF by abusing SSL/TLS Ciphers
+- [**130**星][7m] [Py] [kd8bny/limeaide](https://github.com/kd8bny/limeaide) A python application designed to remotely dump RAM of a Linux client and create a volatility profile for later analysis on your local host.
+- [**130**星][9d] [inquest/yara-rules](https://github.com/inquest/yara-rules) A collection of YARA rules we wish to share with the world, most probably referenced from
+- [**130**星][3y] [Py] [infosec-au/enumxff](https://github.com/infosec-au/enumxff) Enumerating IPs in X-Forwarded-Headers to bypass 403 restrictions
+- [**130**星][2y] [PHP] [incredibleindishell/sqlite-lab](https://github.com/incredibleindishell/sqlite-lab) This code is vulnerable to SQL Injection and having SQLite database. For SQLite database, SQL Injection payloads are different so it is for fun. Just enjoy it \m/
+- [**130**星][4y] [Lua] [glennzw/shodan-hq-nse](https://github.com/glennzw/shodan-hq-nse) Shodan HQ nmap plugin - passively scan targets
+- [**130**星][7m] [gaerae/awesome-algorithms-education](https://github.com/gaerae/awesome-algorithms-education) A curated list to learning and practicing about algorithm.
+- [**130**星][2m] [Py] [decoxviii/userrecon-py](https://github.com/decoxviii/userrecon-py) Username recognition on various websites.
+- [**130**星][2y] [Py] [comsecuris/ida_strcluster](https://github.com/comsecuris/ida_strcluster) 扩展IDA的字符串导航功能
+- [**130**星][1y] [Py] [blacknbunny/mcreator](https://github.com/blacknbunny/mcreator) 反向Shell生成器, 自带AV绕过技术
+- [**130**星][2m] [Py] [benjeems/packetstrider](https://github.com/benjeems/packetstrider) A network packet forensics tool for SSH
+- [**130**星][3m] [Py] [apperian/ios-checkipa](https://github.com/apperian/ios-checkipa) Scans an IPA file and parses its Info.plist and embedded.mobileprovision files. Performs checks of expected key/value relationships and displays the results.
+- [**130**星][2y] [Py] [andrewaeva/dga](https://github.com/andrewaeva/dga) The repository that contains the algorithms for generating domain names, dictionaries of malicious domain names. Developed to research the possibility of applying machine learning and neural networks to detect and classify malicious domains.
+- [**130**星][30d] [PHP] [ahref-group/ss-panel-smarty-edition](https://github.com/ahref-group/ss-panel-smarty-edition) Forked from
+- [**130**星][2m] [Py] [3xpl017/netpwn](https://github.com/3xpl017/netpwn) Tool made to automate tasks of pentesting.
+- [**129**星][2m] [C++] [michalmonday/supremeduck](https://github.com/michalmonday/supremeduck) Wireless "Rubber ducky" controlled by smartphone.
+- [**129**星][3y] [Swift] [magic-akari/wannacry](https://github.com/magic-akari/wannacry)
+- [**129**星][3m] [Py] [kootenpv/access_points](https://github.com/kootenpv/access_points) Scan your WiFi and get access point information and signal quality
+- [**129**星][2y] [Py] [nccgroup/susanrtti](https://github.com/nccgroup/SusanRTTI) RTTI解析插件
+- [**129**星][2d] [TS] [wkovacs64/pwned](https://github.com/wkovacs64/pwned) A command-line tool for querying the 'Have I been pwned?' service.
+- [**129**星][10m] [Shell] [weaknetlabs/penetration-testing-grimoire](https://github.com/weaknetlabs/penetration-testing-grimoire) Custom Tools and Notes from my own Penetration Testing Experience
+- [**129**星][2y] [C#] [v2ray/v2ray-panel-master](https://github.com/v2ray/v2ray-panel-master) Deprecated
+- [**129**星][1y] [C#] [ustayready/casperstager](https://github.com/ustayready/casperstager) PoC for persisting .NET payloads in Windows Notification Facility (WNF) state names using low-level Windows Kernel API calls.
+- [**129**星][7m] [Py] [tarlogicsecurity/chankro](https://github.com/tarlogicsecurity/chankro) Herramienta para evadir disable_functions y open_basedir
+- [**129**星][2d] [Py] [swimlane/pyattck](https://github.com/swimlane/pyattck) A Python Module to interact with the Mitre ATT&CK Framework
+- [**129**星][2m] [Py] [svenito/exploit-pattern](https://github.com/svenito/exploit-pattern) generate and search pattern string for exploit development
+- [**129**星][6y] [Go] [stripe-ctf/octopus](https://github.com/stripe-ctf/octopus) Many-armed network simulator
+- [**129**星][2y] [C] [smeso/mtpwn](https://github.com/smeso/mtpwn) PoC exploit for arbitrary file read/write in locked Samsung Android device via MTP (SVE-2017-10086)
+- [**129**星][6d] [JS] [smartcontractsecurity/swc-registry](https://github.com/smartcontractsecurity/swc-registry) Smart Contract Weakness Classification and Test Cases
+- [**129**星][4y] [C++] [slauc91/anticheat](https://github.com/slauc91/anticheat) RootKit & Cheat Scanner - Windows
+- [**129**星][4y] [HTML] [skylined/localnetworkscanner](https://github.com/skylined/localnetworkscanner) PoC Javascript that scans your local network when you open a webpage
+- [**129**星][1y] [C] [siguza/cl0ver](https://github.com/siguza/cl0ver) tfp0 for iOS 9.0-9.3.4
+- [**129**星][7m] [C++] [schnocker/noeye](https://github.com/schnocker/noeye) An usermode BE Rootkit Bypass
+- [**129**星][7m] [JS] [pownjs/pown](https://github.com/pownjs/pown) Pown.js is a security testing an exploitation toolkit built on top of Node.js and NPM.
+- [**129**星][7m] [OCaml] [plum-umd/redexer](https://github.com/plum-umd/redexer) The Redexer binary instrumentation framework for Dalvik bytecode
+- [**129**星][2y] [Go] [netxfly/xsec-traffic](https://github.com/netxfly/xsec-traffic) 恶意流量分析程序
+- [**129**星][4m] [HTML] [mxk/win10-secure-baseline-gpo](https://github.com/mxk/win10-secure-baseline-gpo) Windows 10 and Server 2016 Secure Baseline Group Policy
+- [**129**星][7m] [Shell] [munki/installr](https://github.com/munki/installr) A tool designed for use in Recovery boot to do a "fresh" install of macOS and additional packages.
+- [**129**星][2y] [mandatoryprogrammer/russiadnsleak](https://github.com/mandatoryprogrammer/russiadnsleak) Summary and archives of leaked Russian TLD DNS data
+- [**129**星][3y] [PHP] [malwares/exploitkit](https://github.com/malwares/exploitkit) Exploitkit
+- [**129**星][1y] [Shell] [jsitech/relayer](https://github.com/jsitech/relayer) SMB Relay Attack Script
+- [**129**星][4y] [Go] [jordan-wright/elastichoney](https://github.com/jordan-wright/elastichoney) A Simple Elasticsearch Honeypot
+- [**129**星][3m] [Py] [j3ssie/metabigor](https://github.com/j3ssie/metabigor) Command line Search Engines Framework but without API key
+- [**129**星][1m] [Py] [initstring/cloud_enum](https://github.com/initstring/cloud_enum) Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.
+- [**129**星][2y] [PHP] [hcamael/ctf_repo](https://github.com/hcamael/ctf_repo)
+- [**129**星][11d] [C++] [hasherezade/iat_patcher](https://github.com/hasherezade/iat_patcher) Persistent IAT hooking application - based on bearparser
+- [**129**星][7m] [C++] [gossip-sjtu/tripledoggy](https://github.com/gossip-sjtu/tripledoggy) 基于clang static analyzer的源码漏洞检测插件
+- [**129**星][21d] [gajos112/oscp](https://github.com/gajos112/oscp) Materials for OSCP exam
+- [**129**星][3y] [Py] [friedappleteam/frapl](https://github.com/friedappleteam/frapl) 在Frida Client和IDA之间建立连接,将运行时信息直接导入IDA,并可直接在IDA中控制Frida
+ - [IDA插件](https://github.com/FriedAppleTeam/FRAPL/tree/master/Framework/FridaLink)
+ - [Frida脚本](https://github.com/FriedAppleTeam/FRAPL/tree/master/Framework/FRAPL)
+- [**129**星][4y] [Py] [elceef/bitlocker](https://github.com/elceef/bitlocker) Volatility Framework plugin for extracting BitLocker FVEK (Full Volume Encryption Key)
+- [**129**星][1y] [Py] [ekultek/dagon](https://github.com/ekultek/dagon) Dagon:哈希破解和操纵系统,可以爆破多种哈希类型,创建爆破字典,自动哈希算法验证,从 Unicode 到 ASCII 的随机salt 生成等。
+- [**129**星][2y] [Py] [dviros/rat-via-telegram](https://github.com/dviros/rat-via-telegram) 使用Telegram控制已经攻克的Windows主机
+- [**129**星][6m] [Py] [cr0hn/enteletaor](https://github.com/cr0hn/enteletaor) Message Queue & Broker Injection tool
+- [**129**星][2y] [Py] [comsecuris/gdbida](https://github.com/comsecuris/gdbida) 使用GDB调试时,在IDA中自动跟随当前GDB的调试位置
+ - [IDA插件](https://github.com/comsecuris/gdbida/blob/master/ida_gdb_bridge.py)
+ - [GDB脚本](https://github.com/comsecuris/gdbida/blob/master/gdb_ida_bridge_client.py)
+- [**129**星][2y] [HTML] [chybeta/waf-bypass](https://github.com/chybeta/waf-bypass) WAF Bypass Cheatsheet
+- [**129**星][2y] [Ruby] [benlaurie/objecthash](https://github.com/benlaurie/objecthash) A way to cryptographically hash objects (in the JSON-ish sense) that works cross-language. And, therefore, cross-encoding.
+- [**129**星][4y] [Go] [benjojo/dos_ssh](https://github.com/benjojo/dos_ssh) Use BIOS ram hacks to make a SSH server out of any INT 10 13h app (MS-DOS is one of those)
+- [**129**星][6m] [C] [abhishekkr/n00brat](https://github.com/abhishekkr/n00brat) Remote Administration Toolkit (or Trojan) for POSiX (Linux/Unix) system working as a Web Service
+- [**128**星][4y] [Py] [snare/idiot](https://github.com/snare/idiot) Your best is an idiot
+- [**128**星][4y] [C] [stefanesser/opensource_taig](https://github.com/stefanesser/opensource_taig) Lets create an open source version of the latest TaiG jailbreak.
+- [**128**星][20d] [Rust] [gamozolabs/fzero_fuzzer](https://github.com/gamozolabs/fzero_fuzzer) A fast Rust-based safe and thead-friendly grammar-based fuzz generator
+- [**128**星][2m] [C] [jollheef/lpe](https://github.com/jollheef/lpe) collection of verified Linux kernel exploits
+- [**128**星][2y] [Py] [unfetter-discover/unfetter-analytic](https://github.com/unfetter-discover/unfetter-analytic) a framework for collecting events (process creation, network connections, Window Event Logs, etc.) from a client machine (Windows 7) and performing CAR analytics to detect potential adversary activity
+- [**128**星][9m] [Vim script] [logico-ar/typewriter](https://github.com/logico-ar/typewriter) An iA Writer inspired color scheme. It has support for vim, vim airline, vim lightline, tmux and urxvt/xterm.
+- [**128**星][2y] [Shell] [newbee119/ssh-scanner](https://github.com/NewBee119/ssh-scanner) ssh password guessing,ssh登录密码破解
+- [**128**星][6d] [Py] [you0708/ida](https://github.com/you0708/ida) 查找加密常量
+ - [IDA主题](https://github.com/you0708/ida/tree/master/theme)
+ - [findcrypt](https://github.com/you0708/ida/tree/master/idapython_tools/findcrypt) IDA FindCrypt/FindCrypt2 插件的Python版本
+- [**128**星][2y] [Java] [yandex/burp-molly-scanner](https://github.com/yandex/burp-molly-scanner) Turn your Burp suite into headless active web application vulnerability scanner
+- [**128**星][6y] [Py] [valdikss/billgates-botnet-tracker](https://github.com/valdikss/billgates-botnet-tracker) Some tools to monitor BillGates CnC servers
+- [**128**星][6m] [Py] [tuuunya/webpocket](https://github.com/tuuunya/webpocket) Exploit management framework
+- [**128**星][1m] [Py] [stratosphereips/stratospherelinuxips](https://github.com/stratosphereips/stratospherelinuxips) an intrusion prevention system that is based on behavioral detections and machine learning algorithms
+- [**128**星][3m] [Py] [shellster/ldapper](https://github.com/shellster/ldapper) AD LDAP Command Line Searching that doesn't suck.
+- [**128**星][1y] [C++] [s3team/vmhunt](https://github.com/s3team/vmhunt) Extraction and Simplification of Virtualized Binary Code
+- [**128**星][4y] [PHP] [ramadhanamizudin/wordpress-scanner](https://github.com/ramadhanamizudin/wordpress-scanner) Wordpress Vulnerability Scanner
+- [**128**星][24d] [PHP] [propaganistas/laravel-fakeid](https://github.com/propaganistas/laravel-fakeid) Automatic model ID obfuscation in routes for Laravel 5
+- [**128**星][4m] [Py] [paulsec/det](https://github.com/paulsec/det) (extensible) Data Exfiltration Toolkit (DET)
+- [**128**星][2m] [Java] [openzipkin/brave-webmvc-example](https://github.com/openzipkin/brave-webmvc-example) See how much time Spring services spend on an http request. — Edit
+- [**128**星][5y] [Shell] [mrschyte/dockerpot](https://github.com/mrschyte/dockerpot) A docker based honeypot.
+- [**128**星][1y] [TeX] [maxking/linux-vulnerabilities-10-years](https://github.com/maxking/linux-vulnerabilities-10-years) My MS thesis on survey of a decade fo Linux Kernel CVEs, their categories and various mitigations that exist.
+- [**128**星][30d] [Py] [m8r0wn/enumdb](https://github.com/m8r0wn/enumdb) MySQL/MSSQL 爆破和后渗透工具, 搜索数据库并提取敏感信息
+- [**128**星][1y] [C++] [m0n0ph1/iat-hooking-revisited](https://github.com/m0n0ph1/iat-hooking-revisited) Import address table (IAT) hooking is a well documented technique for intercepting calls to imported functions.
+- [**128**星][2y] [Shell] [lavalamp-/ws-docker-community](https://github.com/lavalamp-/ws-docker-community) Web Sight Docker Deployment
+- [**128**星][19d] [TS] [justinpealing/html-query-plan](https://github.com/justinpealing/html-query-plan) Display SQL Server Execution Plans in HTML
+- [**128**星][2m] [C++] [itm4n/usodllloader](https://github.com/itm4n/usodllloader) Windows - Weaponizing privileged file writes with the Update Session Orchestrator service
+- [**128**星][2y] [C] [gsmk/hexagon](https://github.com/gsmk/hexagon) IDA processor module for the hexagon (QDSP6) processor
+- [**128**星][8m] [Ruby] [firefart/wordpresspingbackportscanner](https://github.com/firefart/wordpresspingbackportscanner) WordpressPingbackPortScanner
+- [**128**星][1y] [Py] [deepzec/grok-backdoor](https://github.com/deepzec/grok-backdoor) Simple python backdoor with Ngrok tunnel support
+- [**128**星][3y] [HTML] [danladi/httppwnly](https://github.com/danladi/httppwnly) "Repeater" style XSS post-exploitation tool for mass browser control. Primarily a PoC to show why HttpOnly flag isn't a complete protection against session hijacking via XSS
+- [**128**星][3m] [Py] [claudiugeorgiu/obfuscapk](https://github.com/claudiugeorgiu/obfuscapk) A black-box obfuscation tool for Android apps
+- [**128**星][12d] [Py] [bullseye0/shodan-eye](https://github.com/bullseye0/shodan-eye) Shodan Eye This tool collects all the information about all devices directly connected to the internet using the specified keywords that you enter. Author: Jolanda de Koff
+- [**128**星][1y] [C#] [anthemtotheego/sharpsploitconsole](https://github.com/anthemtotheego/sharpsploitconsole)
+- [**128**星][4y] [Py] [andrewhilts/snifflab](https://github.com/andrewhilts/snifflab) Scripts to create your own MITM'ing, packet sniffing WiFi access point
+- [**128**星][3y] [C] [adamcaudill/ccsrch](https://github.com/adamcaudill/ccsrch) Cross-platform credit card (PAN) search tool for security assessments
+- [**127**星][10m] [whid-injector/awesome-go-offensive-tools](https://github.com/whid-injector/awesome-go-offensive-tools) List of Awesome Offensive Tools written in GO
+- [**127**星][5d] [PHP] [curtbraz/phishing-api](https://github.com/curtbraz/phishing-api) Comprehensive Web Based Phishing Suite of Tools for Rapid Deployment and Real-Time Alerting!
+- [**127**星][2m] [C#] [fireeye/duedlligence](https://github.com/fireeye/duedlligence) Shellcode runner for all application whitelisting bypasses
+- [**127**星][20d] [Py] [secureauthcorp/pysap](https://github.com/SecureAuthCorp/pysap) pysap is an open source Python library that provides modules for crafting and sending packets using SAP's NI, Diag, Enqueue, Router, Message Server, SNC, IGS and RFC protocols.
+- [**127**星][14d] [PHP] [breach-tw/breach.tw](https://github.com/breach-tw/breach.tw) A service that can track data breaches like "Have I Been Pwned", but it is specific for Taiwan.
+- [**127**星][1y] [HTML] [xhak9x/socialphish](https://github.com/xhak9x/socialphish) The most complete Phishing Tool, with 32 templates +1 customizable
+- [**127**星][2m] [Py] [v3aqb/fwlite](https://github.com/v3aqb/fwlite) A anti-censorship HTTP proxy with builtin shadowsocks support.
+- [**127**星][2m] [Go] [ullaakut/camerattack](https://github.com/ullaakut/camerattack) An attack tool designed to remotely disable CCTV camera streams (like in spy movies)
+- [**127**星][1y] [Py] [spotify/gcp-audit](https://github.com/spotify/gcp-audit) A tool for auditing security properties of GCP projects.
+- [**127**星][3y] [CSS] [shellntel/vcr](https://github.com/shellntel/vcr) Vulnerability Compliance Report Tool used to parse Nessus files into html reports created by SynerComm, Inc.
+- [**127**星][2m] [Rust] [rust-ammonia/ammonia](https://github.com/rust-ammonia/ammonia) Repair and secure untrusted HTML
+- [**127**星][2y] [Py] [rootlabs/nwatch](https://github.com/rootlabs/nwatch) a handy tool for host discovery, portscanning and operating system fingerprinting.
+- [**127**星][1y] [Py] [qiyeboy/baseproxy](https://github.com/qiyeboy/baseproxy) Asynchronous HTTP/HTTPS proxy that intercepts and modifies messages(异步http/https代理,可拦截修改报文)
+- [**127**星][5m] [Shell] [pssss/security-baseline](https://github.com/pssss/security-baseline) Linux/Windows 安全加固脚本
+- [**127**星][5m] [Go] [mushorg/glutton](https://github.com/mushorg/glutton) Generic Low Interaction Honeypot
+- [**127**星][12m] [C++] [mq1n/nomercy](https://github.com/mq1n/nomercy) Open source anti cheat
+- [**127**星][2y] [Go] [massung/chip-8](https://github.com/massung/chip-8) Assembler and Emulator in Go
+- [**127**星][22d] [C] [libyal/libewf](https://github.com/libyal/libewf) Libewf is a library to access the Expert Witness Compression Format (EWF)
+- [**127**星][9m] [leezj9671/offensiveinterview](https://github.com/leezj9671/offensiveinterview) 翻译国外的
+- [**127**星][7m] [Go] [l3m0n/whatweb](https://github.com/l3m0n/whatweb) 更快速的进行Web应用指纹识别
+- [**127**星][1y] [Py] [kaniini/antissh](https://github.com/kaniini/antissh) An IRC bot which monitors for compromised embedded devices being used as proxies.
+- [**127**星][4y] [C] [jndok/stfusip](https://github.com/jndok/stfusip) System Integrity Protection (SIP) bypass for OSX 10.11.1 - 10.11.2 - 10.11.3
+- [**127**星][6y] [Py] [ikotler/hackersh](https://github.com/ikotler/hackersh) A free and open source command-line shell and scripting language designed especially for security testing
+- [**127**星][2m] [grrrdog/weird_proxies](https://github.com/grrrdog/weird_proxies) Reverse proxies cheatsheet
+- [**127**星][2y] [C++] [gitmirar/meltdown-poc](https://github.com/gitmirar/meltdown-poc) A PoC implementation of the meltdown attack described in
+- [**127**星][1y] [C] [gamozolabs/falkervisor_grilled_cheese](https://github.com/gamozolabs/falkervisor_grilled_cheese)
+- [**127**星][5y] [Py] [fox-it/cryptophp](https://github.com/fox-it/cryptophp) CryptoPHP Indicators of Compromise
+- [**127**星][2y] [Py] [fireeye/flare-dbg](https://github.com/fireeye/flare-dbg) to aid malware reverse engineers in rapidly developing debugger scripts.
+- [**127**星][4y] [C] [fi01/cve-2015-3636](https://github.com/fi01/cve-2015-3636) PoC code for 32 bit Android OS
+- [**127**星][7m] [enovella/r2frida-wiki](https://github.com/enovella/r2frida-wiki) This repo aims at providing practical examples on how to use r2frida
+- [**127**星][3m] [JS] [electrode-io/electrode-csrf-jwt](https://github.com/electrode-io/electrode-csrf-jwt) Stateless Cross-Site Request Forgery (CSRF) protection with JWT
+- [**127**星][3y] [C] [davidbuchanan314/pwn-mbr](https://github.com/davidbuchanan314/pwn-mbr) A simple MBR hijack demonstration
+- [**127**星][2d] [Py] [darkarnium/secpub](https://github.com/darkarnium/secpub) Published security vulnerabilities and associated information.
+- [**127**星][3m] [Rust] [d0nutptr/sic](https://github.com/d0nutptr/sic) A tool to perform Sequential Import Chaining
+- [**127**星][2m] [Py] [cyb0r9/ispy](https://github.com/cyb0r9/ispy) ispy V1.0 - Eternalblue(ms17-010)/Bluekeep(CVE-2019-0708) Scanner and exploit ( Metasploit automation )
+- [**127**星][6y] [C++] [crowdstrike/crowddetox](https://github.com/crowdstrike/crowddetox) CrowdStrike CrowdDetox Plugin for Hex-Rays,automatically removes junk code and variables from Hex-Rays function decompilation
+- [**127**星][20d] [C] [cisco-talos/file2pcap](https://github.com/cisco-talos/file2pcap) make various types of packet captures containing the content of any file that you specify
+- [**127**星][3y] [Java] [chora10/fuzzdomain](https://github.com/chora10/fuzzdomain) FuzzDomain
+- [**127**星][4y] [C++] [chago/advmp](https://github.com/chago/advmp) 大自然的搬运工-Android虚拟机保护Demo
+- [**127**星][4y] [Py] [caijiji/vulscritp](https://github.com/caijiji/vulscritp) 内网渗透脚本
+- [**127**星][1y] [Java] [bmax121/budhook](https://github.com/bmax121/budhook) An Android hook framework written like Xposed,based on YAHFA.
+- [**127**星][5m] [Shell] [bet4it/build-an-efficient-pwn-environment](https://github.com/bet4it/build-an-efficient-pwn-environment) How to build an efficient pwn development environment in 2019
+- [**127**星][3d] [Java] [baidu-security/openrasp-testcases](https://github.com/baidu-security/openrasp-testcases) OpenRASP 漏洞测试环境
+- [**127**星][4m] [HTML] [b-mueller/smashing-smart-contracts](https://github.com/b-mueller/smashing-smart-contracts) (HITBSecConf 2018)smashing smart contracts
+- [**127**星][5y] [Py] [0xpoly/centry](https://github.com/0xpoly/centry) Panic button for protection against cold boot attacks
+- [**127**星][2y] [Py] [0ang3el/easycsrf](https://github.com/0ang3el/easycsrf)
+- [**126**星][4y] [Py] [sektioneins/sandbox_toolkit](https://github.com/sektioneins/sandbox_toolkit) Toolkit for binary iOS / OS X sandbox profiles
+- [**126**星][4y] [Assembly] [osirislab/shellcode](https://github.com/osirislab/Shellcode) a repository of Shellcode written by students in NYU-Polytechnic's ISIS lab.
+- [**126**星][2y] [Py] [opensourcesec/forager](https://github.com/opensourcesec/Forager) Multithreaded threat Intelligence gathering built with Python3
+- [**126**星][5y] [CSS] [merces/aleph](https://github.com/merces/aleph) An Open Source Malware Analysis Pipeline System
+- [**126**星][1y] [C++] [urshadow/stringobfuscator](https://github.com/urshadow/stringobfuscator) Compile-time string obfuscation (C++14)
+- [**126**星][8m] [C] [treehacks/botnet-hackpack](https://github.com/treehacks/botnet-hackpack) Build a basic Command & Control botnet in C
+- [**126**星][10m] [C#] [terribledev/hardhat](https://github.com/terribledev/hardhat) Help secure .net core apps with various HTTP headers (such as CSP's)
+- [**126**星][3y] [Shell] [takeshixx/redstar-tools](https://github.com/takeshixx/redstar-tools) Tools for Red Star OS (붉은별)
+- [**126**星][10y] [C] [spotify/linux](https://github.com/spotify/linux) Spotify's Linux kernel for Debian-based systems
+- [**126**星][2y] [Py] [sparksharly/sharly](https://github.com/sparksharly/sharly) 基于HMM的web异常参数检测
+- [**126**星][4m] [JS] [sowdust/searchbook](https://github.com/sowdust/searchbook) A Firefox extension for executing some Graph-like searches against Facebook.
+- [**126**星][30d] [CSS] [redhatofficial/redhatofficial.github.io](https://github.com/redhatofficial/redhatofficial.github.io) The official Red Hat project page.
+- [**126**星][1y] [Py] [pyn3rd/cve-2018-3245](https://github.com/pyn3rd/cve-2018-3245) CVE-2018-3245-PoC
+- [**126**星][2y] [Py] [pybind/cmake_example](https://github.com/pybind/cmake_example) Example pybind11 module built with a CMake-based build system
+- [**126**星][2m] [PS] [nccgroup/accomplice](https://github.com/nccgroup/accomplice) Tools for discovery and abuse of COM hijacks
+- [**126**星][3m] [Py] [mvelazc0/oriana](https://github.com/mvelazc0/oriana) Oriana is a threat hunting tool that leverages a subset of Windows events to build relationships, calculate totals and run analytics. The results are presented in a Web layer to help defenders identify outliers and suspicious behavior on corporate environments.
+- [**126**星][7m] [Go] [mritd/idgen](https://github.com/mritd/idgen) 一个使用 golang 编写的大陆身份证生成器
+- [**126**星][4m] [C++] [marcosd4h/memhunter](https://github.com/marcosd4h/memhunter) Live hunting of code injection techniques
+- [**126**星][12d] [Shell] [maravento/blackweb](https://github.com/maravento/blackweb) Domains Blacklist for Squid
+- [**126**星][4y] [PHP] [lietdai/doom](https://github.com/lietdai/doom) DOOM是在thorn上实现的分布式任务分发的ip端口漏洞扫描器
+- [**126**星][3m] [Roff] [kirtar22/litmus_test](https://github.com/kirtar22/litmus_test) Detecting ATT&CK techniques & tactics for Linux
+- [**126**星][4y] [Py] [jakecooper/oneplustwobot](https://github.com/jakecooper/oneplustwobot) A series of exploits used to jump the OnePlus reservation queue.
+- [**126**星][2y] [C] [hfiref0x/zeroaccess](https://github.com/hfiref0x/zeroaccess) ZeroAccess v3 toolkit
+- [**126**星][2y] [C] [hardenedlinux/offensive_poc](https://github.com/hardenedlinux/offensive_poc) Writing PoC for fun and educate people take security seriously;-)
+- [**126**星][2m] [Py] [google/ctfscoreboard](https://github.com/google/ctfscoreboard) Scoreboard for Capture The Flag competitions.
+- [**126**星][7m] [Py] [ex0dus-0x/dedsploit](https://github.com/ex0dus-0x/dedsploit) Network protocol auditing framework
+- [**126**星][2m] [PHP] [dragonbe/hibp](https://github.com/dragonbe/hibp) A composer package to verify if a password was previously used in a breach using Have I Been Pwned API.
+- [**126**星][2m] [Py] [doyler/securitytools](https://github.com/doyler/securitytools) A single repository for any security tools, scripts, documentation, etc. that I add
+- [**126**星][19d] [C++] [detexploit/detexploit](https://github.com/detexploit/detexploit) OSS Vulnerability Scanner for Windows Platform
+- [**126**星][5m] [Py] [davidjacobson/safetext](https://github.com/davidjacobson/safetext) Script to remove homoglyphs and zero-width characters to allow for safe distribution of documents from anonymous sources.
+- [**126**星][1y] [JS] [danielstjules/blankshield](https://github.com/danielstjules/blankshield) Prevent reverse tabnabbing phishing attacks caused by _blank
+- [**126**星][3y] [C] [ctxis/rdp-replay](https://github.com/ctxis/rdp-replay) Replay RDP traffic from PCAP
+- [**126**星][1y] [Py] [cisco-talos/fnc-1](https://github.com/cisco-talos/fnc-1) Fake News Challenge
+- [**126**星][6y] [Lua] [bobsayshilol/luajit-decomp](https://github.com/bobsayshilol/luajit-decomp) LuaJIT decompiler
+- [**126**星][6y] [atimorin/scada-tools](https://github.com/atimorin/scada-tools)
+- [**125**星][9d] [Py] [d0g3-lab/h1ve](https://github.com/d0g3-lab/h1ve) 自研CTF平台,同时具备解题、攻防对抗模式
+- [**125**星][2y] [C] [firmianay/life-long-learner](https://github.com/firmianay/life-long-learner) Personal Notes About Everything.
+- [**125**星][17d] [xrkk/awesome-cyber-security](https://github.com/xrkk/awesome-cyber-security) [Moved to:
+- [**125**星][19d] [JS] [maxmeng93/get-free-ss](https://github.com/maxmeng93/get-free-ss) 【停止维护】Node爬虫学习:自动爬取网络上公开的免费 SS\SSR 账号密码,并替换掉软件中旧的账号。
+- [**125**星][4y] [JS] [wisdom/regex-dos](https://github.com/Wisdom/RegEx-DoS)
+- [**125**星][30d] [Py] [yuxiaokui/intranet-penetration](https://github.com/yuxiaokui/intranet-penetration) 内网渗透必备工具。
+- [**125**星][2y] [vidar-team/hctf2017](https://github.com/vidar-team/hctf2017)
+- [**125**星][9m] [Py] [stamparm/hontel](https://github.com/stamparm/hontel) Telnet Honeypot
+- [**125**星][12m] [Py] [sabri-zaki/easy_hack](https://github.com/sabri-zaki/easy_hack) Hack the World using Termux
+- [**125**星][7y] [pwnwiki/webappdefaultsdb](https://github.com/pwnwiki/webappdefaultsdb) A DB of known Web Application Admin URLS, Username/Password Combos and Exploits
+- [**125**星][1m] [C] [projecthorus/radiosonde_auto_rx](https://github.com/projecthorus/radiosonde_auto_rx) Automatically Track Radiosonde Launches using RTLSDR
+- [**125**星][20d] [Py] [picoctf/picoctf](https://github.com/picoctf/picoctf) The platform used to run picoCTF. A great framework to host any CTF.
+- [**125**星][2d] [Perl] [philsmd/7z2hashcat](https://github.com/philsmd/7z2hashcat) extract information from password-protected .7z archives (and .sfx files) such that you can crack these "hashes" with hashcat
+- [**125**星][1m] [osm0sis/android-busybox-ndk](https://github.com/osm0sis/android-busybox-ndk) Keeping track of instructions and patches for building busybox with the Android NDK
+- [**125**星][9d] [C++] [omenscan/achoir](https://github.com/omenscan/achoir) Windows Live Artifacts Acquisition Script
+- [**125**星][18d] [Go] [ns3777k/go-shodan](https://github.com/ns3777k/go-shodan) Shodan API client
+- [**125**星][1m] [C++] [monoxgas/flyingafalseflag](https://github.com/monoxgas/flyingafalseflag) Slides and Code for the BHUSA 2019 talk: Flying a False Flag
+- [**125**星][4m] [PS] [mikefrobbins/powershell](https://github.com/mikefrobbins/powershell) PowerShell scripts and functions
+- [**125**星][4y] [Py] [leastauthority/ethereum-analyses](https://github.com/leastauthority/ethereum-analyses)
+- [**125**星][1y] [C] [lctf/lctf2018](https://github.com/lctf/lctf2018) Source code, writeups and exps in LCTF2018.
+- [**125**星][9d] [C#] [jitbit/aspnetsaml](https://github.com/jitbit/aspnetsaml) Very simple SAML 2.0 consumer module for ASP.NET/C#
+- [**125**星][6m] [Py] [jinmo/ctfs](https://github.com/jinmo/ctfs) ctf exploit codes or writeups
+- [**125**星][2y] [Perl] [infoslack/sec-tools](https://github.com/infoslack/sec-tools) Docker images for infosec tools
+- [**125**星][3y] [JS] [infosec-au/little-doctor](https://github.com/infosec-au/little-doctor) a JavaScript worm that can exfiltrate files, microphone, webcam, and other data
+- [**125**星][3y] [PHP] [ikoniaris/kippo-graph](https://github.com/ikoniaris/kippo-graph) Visualize statistics from a Kippo SSH honeypot
+- [**125**星][2y] [C++] [gpoulios/ropinjector](https://github.com/gpoulios/ropinjector) Patching ROP-encoded shellcodes into PEs
+- [**125**星][5m] [Py] [fireeye/flare-qdb](https://github.com/fireeye/flare-qdb) 操纵和修改Windows和Linux的软件行为的调试器,包括命令行工具和Python调试器
+- [**125**星][4d] [JS] [feross/cs253.stanford.edu](https://github.com/feross/cs253.stanford.edu) CS 253 Web Security course at Stanford University
+- [**125**星][3m] [Shell] [exalab/anlinux-resources](https://github.com/exalab/anlinux-resources) Image and Script for LinuxOnAndroid App
+- [**125**星][1y] [C] [emptymonkey/mimic](https://github.com/emptymonkey/mimic) Hide processes as a normal user in Linux.
+- [**125**星][2m] [Py] [deroko/lldbinit](https://github.com/deroko/lldbinit) Similar implementation of .gdbinit from fG
+- [**125**星][7m] [Perl] [davisjam/vuln-regex-detector](https://github.com/davisjam/vuln-regex-detector) Detect vulnerable regexes in your project. REDOS, catastrophic backtracking.
+- [**125**星][8m] [Py] [danigargu/syms2elf](https://github.com/danigargu/syms2elf) 将IDA Pro和Radare2识别的符号(目前仅函数)导出到ELF符号表
+- [**125**星][3y] [Py] [codypierce/pyemu](https://github.com/codypierce/pyemu) 在IDA中使用x86模拟器
+- [**125**星][8m] [Py] [chg-hou/enmicromsg.db-password-cracker](https://github.com/chg-hou/enmicromsg.db-password-cracker) Crack the password of EnMicroMsg.db with brute-force attack.
+- [**125**星][10m] [Shell] [capt-meelo/lazyrecon](https://github.com/capt-meelo/lazyrecon) An automated approach to performing recon for bug bounty hunting and penetration testing.
+- [**125**星][4y] [Py] [bwall/bamfdetect](https://github.com/bwall/bamfdetect) Identifies and extracts information from bots and other malware
+- [**125**星][2y] [PS] [borntoberoot/powershell_ipv4networkscanner](https://github.com/borntoberoot/powershell_ipv4networkscanner) Powerful asynchronus IPv4 Network Scanner for PowerShell
+- [**124**星][14d] [Py] [aquasecurity/tracee](https://github.com/aquasecurity/tracee) a lightweight, easy to use container and system tracing tool
+- [**124**星][2m] [PHP] [binarymaster/3wifi](https://github.com/binarymaster/3wifi) 3WiFi Wireless Database
+- [**124**星][5d] [JS] [lirantal/lockfile-lint](https://github.com/lirantal/lockfile-lint) Lint an npm or yarn lockfile to analyze and detect security issues
+- [**124**星][3y] [JS] [bakerface/wireless-tools](https://github.com/bakerface/wireless-tools) Wireless tools for Node.js
+- [**124**星][8d] [JS] [radareorg/radare2-r2pipe](https://github.com/radareorg/radare2-r2pipe) Access radare2 via pipe from any programming language!
+- [**124**星][5m] [C++] [xorrior/raven](https://github.com/xorrior/raven) CobaltStrike External C2 for Websockets
+- [**124**星][3y] [JS] [vtky/swizzler2](https://github.com/vtky/swizzler2) Swizzler2 - Hacking iOS applications
+- [**124**星][5y] [Py] [urule99/jsunpack-n](https://github.com/urule99/jsunpack-n) Automatically exported from code.google.com/p/jsunpack-n
+- [**124**星][1y] [Shell] [thelinuxchoice/facebash](https://github.com/thelinuxchoice/facebash) Facebook Brute Forcer in shellscript using TOR
+- [**124**星][6m] [Py] [thekingofduck/mysqlmonitor](https://github.com/thekingofduck/mysqlmonitor) MySQL实时监控工具(代码审计/黑盒/白盒审计辅助工具)
+- [**124**星][17d] [Py] [t4d/stalkphish](https://github.com/t4d/stalkphish) StalkPhish - The Phishing kits stalker, harvesting phishing kits for investigations.
+- [**124**星][7y] [Py] [sysdream/pysqli](https://github.com/sysdream/pysqli) Python SQL injection framework
+- [**124**星][2m] [HTML] [sundaysec/android-exploits](https://github.com/sundaysec/android-exploits) A collection of android Exploits and Hacks
+- [**124**星][7m] [C++] [saaramar/deterministic_lfh](https://github.com/saaramar/deterministic_lfh) Have fun with the LowFragmentationHeap
+- [**124**星][4y] [Shell] [reider-roque/linpostexp](https://github.com/reider-roque/linpostexp) Linux post exploitation enumeration and exploit checking tools
+- [**124**星][3m] [Py] [platomav/biosutilities](https://github.com/platomav/biosutilities) Various BIOS Utilities for Modding/Research
+- [**124**星][2m] [C#] [nyan-x-cat/lime-crypter](https://github.com/nyan-x-cat/lime-crypter) Simple obfuscation tool
+- [**124**星][3m] [C] [matrixssl/matrixssl](https://github.com/matrixssl/matrixssl) Lightweight Embedded SSL/TLS Implementation for IoT Devices
+- [**124**星][1y] [Py] [leezj9671/socialdb_vue_flask](https://github.com/leezj9671/socialdb_vue_flask) 一个小型的较为简陋的社工库查询系统,使用Vue.js+Flask+MongoDB.可用52g, 本人不提供任何社工库资源. A tiny social engineering database system, including backend and frontend.
+- [**124**星][4m] [Py] [lakiw/pcfg_cracker](https://github.com/lakiw/pcfg_cracker) Probabilistic Context Free Grammar (PCFG) password guess generator
+- [**124**星][4m] [Py] [igio90/uddbg](https://github.com/igio90/uddbg) A gdb like debugger that provide a runtime env to unicorn emulator and additionals features!
+- [**124**星][3m] [Py] [highmeh/pentest_scripts](https://github.com/highmeh/pentest_scripts) penetration testing scripts
+- [**124**星][1m] [C++] [grammatech/gtirb](https://github.com/grammatech/gtirb) Intermediate Representation for Binary analysis and transformation
+- [**124**星][1y] [Shell] [dtag-dev-sec/t-pot-autoinstall](https://github.com/dtag-dev-sec/t-pot-autoinstall) Deprecated - Please use T-Pot Universal Installer
+- [**124**星][4y] [Py] [davidoren/cuckoosploit](https://github.com/davidoren/cuckoosploit) An environment for comprehensive, automated analysis of web-based exploits, based on Cuckoo sandbox.
+- [**124**星][1y] [C#] [codecracker-tools/megadumper](https://github.com/codecracker-tools/megadumper) Dump native and .NET assemblies
+- [**124**星][4d] [chef-koch/online-privacy-test-resource-list](https://github.com/chef-koch/online-privacy-test-resource-list) Privacy Online Test and Resource Compendium (POTARC) 🕵🏻
+- [**124**星][1y] [Py] [c0mmand3ropsec/cve-2017-10271](https://github.com/c0mmand3ropsec/cve-2017-10271) WebLogic Exploit
+- [**124**星][2y] [Java] [brompwnie/uitkyk](https://github.com/brompwnie/uitkyk) Android Frida库, 用于分析App查找恶意行为
+- [**124**星][11m] [Shell] [antonlindstrom/passpwn](https://github.com/antonlindstrom/passpwn) 检查Unix密码管理器(pass)中的密码是否发生过泄露
+- [**124**星][3y] [JS] [antojoseph/diff-gui](https://github.com/antojoseph/diff-gui) GUI for Frida -Scripts
+- [**124**星][2y] [Py] [alonemonkey/antiantidebug](https://github.com/alonemonkey/antiantidebug) tweak、 lldb python for anti anti debug
+- [**124**星][2y] [HTML] [alienwithin/owasp-mth3l3m3nt-framework](https://github.com/alienwithin/owasp-mth3l3m3nt-framework) 辅助渗透测试与漏洞利用
+- [**124**星][23d] [C++] [adamyaxley/obfuscate](https://github.com/adamyaxley/obfuscate) Guaranteed compile-time string literal obfuscation header-only library for C++14
+- [**123**星][4d] [Julia] [alertot/detectem](https://github.com/alertot/detectem) detect software and its version on websites.
+- [**123**星][2m] [Go] [yahoo/yfuzz](https://github.com/yahoo/yfuzz) 利用 Kubernetes 实现分布式 fuzzing
+- [**123**星][11m] [C] [wenzel/r2vmi](https://github.com/wenzel/r2vmi) Hypervisor-Level Debugger based on Radare2 / LibVMI, using VMI IO and debug plugins
+- [**123**星][5m] [Py] [veerendra2/wifi-deauth-attack](https://github.com/veerendra2/wifi-deauth-attack) An automated script for deauthentication attack
+- [**123**星][4y] [Py] [ucsb-seclab/leakless](https://github.com/ucsb-seclab/leakless) Function redirection via ELF tricks.
+- [**123**星][7y] [steamedfish/gfwiplist](https://github.com/steamedfish/gfwiplist) 可用于翻墙路由表的墙外IP列表
+- [**123**星][3m] [Go] [stalkr/dns-reverse-proxy](https://github.com/stalkr/dns-reverse-proxy) DNS Reverse Proxy
+- [**123**星][4m] [PHP] [spidermate/b-xssrf](https://github.com/spidermate/b-xssrf) Toolkit to detect and keep track on Blind XSS, XXE & SSRF
+- [**123**星][4m] [Py] [skyplabs/probequest](https://github.com/skyplabs/probequest) Toolkit for Playing with Wi-Fi Probe Requests
+- [**123**星][3m] [secure-data-analysis-data-sharing/data-analysis](https://github.com/secure-data-analysis-data-sharing/data-analysis) 资料分享
+- [**123**星][3y] [JS] [salesforce/secure-filters](https://github.com/salesforce/secure-filters) Anti-XSS Security Filters for EJS and More
+- [**123**星][2y] [Py] [riverloopsec/tumblerf](https://github.com/riverloopsec/tumblerf) a unified fuzzing framework for low-level RF and HW protocol/PHY/MAC analysis
+- [**123**星][5y] [Py] [ring04h/dirfuzz](https://github.com/ring04h/dirfuzz) 多线程网站目录穷举扫描
+- [**123**星][6m] [PHP] [radenvodka/svscanner](https://github.com/radenvodka/svscanner) SVScanner - Scanner Vulnerability And MaSsive Exploit.
+- [**123**星][2m] [Py] [radare/radare2ida](https://github.com/radare/radare2ida) Tools, documentation and scripts to move projects from IDA to R2 and viceversa
+- [**123**星][26d] [PS] [dsccommunity/xwebadministration](https://github.com/dsccommunity/xWebAdministration) This module contains DSC resources for deployment and configuration of web servers and components around those.
+- [**123**星][4y] [Py] [pentestmonkey/gateway-finder](https://github.com/pentestmonkey/gateway-finder) Tool to identify routers on the local LAN and paths to the Internet
+- [**123**星][1y] [Gherkin] [owasp-cloud-security/owasp-cloud-security](https://github.com/owasp-cloud-security/owasp-cloud-security) OWASP Cloud Security - Enabling conversations through threat and control stories
+- [**123**星][3y] [JS] [openmarshall/shortcutss](https://github.com/openmarshall/shortcutss) This is a Mac Shadowsocks client equipped with global shortcuts to switch proxy mode !
+- [**123**星][3y] [PS] [onelogicalmyth/automated-ad-setup](https://github.com/onelogicalmyth/automated-ad-setup) A PowerShell script that aims to have a fully configured domain built in under 10 minutes, but also apply security configuration and hardening.
+- [**123**星][7m] [PS] [nyxgeek/o365recon](https://github.com/nyxgeek/o365recon) o365recon:PowerShell脚本,使用单个 cred 来转储完整的 o365 用户列表,组列表和组成员
+- [**123**星][11m] [Py] [niklasb/3dpwn](https://github.com/niklasb/3dpwn) VirtualBox 3D exploits & PoCs
+- [**123**星][2y] [Shell] [niclet/xiaomi_hack](https://github.com/niclet/xiaomi_hack) Xiaomi common hack for cameras (Mijia 360)
+- [**123**星][2m] [C++] [nettitude/simplepeloader](https://github.com/nettitude/simplepeloader) In-Memory PE Loader
+- [**123**星][2y] [Shell] [nccgroup/lazydroid](https://github.com/nccgroup/lazydroid) bash script to facilitate some aspects of an Android application assessment
+- [**123**星][4y] [Py] [moloch--/csp-bypass](https://github.com/moloch--/csp-bypass) A Burp Plugin for Detecting Weaknesses in Content Security Policies
+- [**123**星][3y] [malwares/dangerouszone](https://github.com/malwares/dangerouszone) Dangerous Malwares
+- [**123**星][11m] [Pascal] [mahdisafsafi/debugengine](https://github.com/mahdisafsafi/debugengine) Delphi debug framework
+- [**123**星][7y] [Ruby] [livingsocial/keyspace](https://github.com/livingsocial/keyspace) Capability-based secure key management and credential storage
+- [**123**星][4m] [k0rz3n/googlehacking-page](https://github.com/k0rz3n/googlehacking-page) This is a summary of my study and use of Google hacking. I hope I can share it with you. If you like, please give me a star or fork it, thank you.
+- [**123**星][1y] [JS] [jonaslejon/tor-fingerprint](https://github.com/jonaslejon/tor-fingerprint) Tor Browser and Tails version fingerprint PoC
+- [**123**星][5m] [HTML] [jlleitschuh/zoom_vulnerability_poc](https://github.com/jlleitschuh/zoom_vulnerability_poc)
+- [**123**星][7m] [Py] [jerrychan807/wspih](https://github.com/jerrychan807/wspih) Website Sensitive Personal Information Hunter 网站个人敏感信息文件扫描器
+- [**123**星][5y] [jacobsoo/androidslides](https://github.com/jacobsoo/androidslides)
+- [**123**星][1y] [PS] [itm4n/ikeext-privesc](https://github.com/itm4n/ikeext-privesc) Windows IKEEXT DLL Hijacking Exploit Tool
+- [**123**星][3y] [Py] [inguma/bokken](https://github.com/inguma/bokken) Dear user: This is a git mirror of our Mercurial repository in
+- [**123**星][1y] [PHP] [gwen001/s3-buckets-finder](https://github.com/gwen001/s3-buckets-finder) Find aws s3 buckets and extract datas.
+- [**123**星][1m] [Java] [graylog2/graylog-plugin-threatintel](https://github.com/graylog2/graylog-plugin-threatintel) Graylog Processing Pipeline functions to enrich log messages with IoC information from threat intelligence databases
+- [**123**星][1m] [Go] [fuzzitdev/fuzzit](https://github.com/fuzzitdev/fuzzit) CLI to integrate continuous fuzzing with Fuzzit
+- [**123**星][8y] [evilcos/python-webshell](https://github.com/evilcos/python-webshell) webshell writen in python
+- [**123**星][4y] [Py] [equalitie/learn2ban](https://github.com/equalitie/learn2ban) Open source machine learning DDOS detection tool
+- [**123**星][6y] [PHP] [disk0nn3ct/cookiecatcher](https://github.com/disk0nn3ct/cookiecatcher) assist in the exploitation of XSS (Cross Site Scripting) vulnerabilities within web applications to steal user session IDs
+- [**123**星][2y] [C] [coolervoid/mosca](https://github.com/coolervoid/mosca) Manual search tool to find bugs like a grep unix command - Beta
+- [**123**星][5y] [Shell] [chrisfosterelli/dockerrootplease](https://github.com/chrisfosterelli/dockerrootplease) Gives you root on the hostOS, if you're a member of the 'docker' group.
+- [**123**星][3y] [C++] [cheetahsec/avmdbg](https://github.com/cheetahsec/avmdbg) a lightweight debugger for android virtual machine.
+- [**123**星][2y] [Py] [blazeinfosec/pcrappyfuzzer](https://github.com/blazeinfosec/pcrappyfuzzer) pcrappyfuzzer:Scapy+ radamsa 的简单组合,从 pcap 文件中提取数据,执行快速 Fuzz
+- [**123**星][8m] [C++] [binspector/binspector](https://github.com/binspector/binspector) A binary format analysis tool
+- [**123**星][19d] [JS] [0vercl0k/windbg-scripts](https://github.com/0vercl0k/windbg-scripts) A bunch of JavaScript extensions for WinDbg.
+- [**122**星][4y] [C] [trustedsec/pivoter](https://github.com/trustedsec/pivoter) Pivoter is a proxy tool for pentesters to have easier lateral movement.
+- [**122**星][11m] [Shell] [wulabing/ssr-manyuser_glzjin_shell](https://github.com/wulabing/ssr-manyuser_glzjin_shell) sspanel v3 魔改版 后端一键安装配置管理脚本
+- [**122**星][8m] [C++] [hmbsbige/getcndomainsandipv4](https://github.com/hmbsbige/getcndomainsandipv4) 获取国内 IP 和域名,生成路由表和 PAC 文件
+- [**122**星][1m] [Py] [fuzzitdev/pythonfuzz](https://github.com/fuzzitdev/pythonfuzz) coverage guided fuzz testing for python
+- [**122**星][3y] [C] [nsacyber/control-flow-integrity](https://github.com/nsacyber/Control-Flow-Integrity) A proposed hardware-based method for stopping known memory corruption exploitation techniques. #nsacyber
+- [**122**星][2m] [Ruby] [chef/knife-openstack](https://github.com/chef/knife-openstack) Chef knife plug-in for OpenStack
+- [**122**星][4y] [C++] [lifting-bits/codereason](https://github.com/lifting-bits/codereason) Semantic Binary Code Analysis Framework
+- [**122**星][2y] [Java] [zjlywjh001/phrackctf-platform-personal](https://github.com/zjlywjh001/phrackctf-platform-personal) CTF platfrom developed by Jarvis from Phrack Team. 做一个功能最全的CTF平台。
+- [**122**星][2y] [C#] [zerosum0x0/runshellcode](https://github.com/zerosum0x0/runshellcode) .NET GUI program that runs shellcode
+- [**122**星][5y] [C++] [zachriggle/ida-splode](https://github.com/zachriggle/ida-splode) 使用Pin收集动态运行数据, 导入到IDA中查看
+ - [IDA插件](https://github.com/zachriggle/ida-splode/tree/master/py)
+ - [PinTool](https://github.com/zachriggle/ida-splode/tree/master/src)
+- [**122**星][1y] [C#] [xenocoderce/noisette-obfuscator](https://github.com/xenocoderce/noisette-obfuscator) An Obfuscator for .NET assembly
+- [**122**星][2y] [Py] [wossl33/wossl](https://github.com/wossl33/wossl) OpenSSL对称算法、哈希校验、非对称算法、证书管理、SSL安全
+- [**122**星][6y] [tombkeeper/shellcode_template_in_c](https://github.com/tombkeeper/shellcode_template_in_c)
+- [**122**星][3y] [PS] [silverhack/voyeur](https://github.com/silverhack/voyeur) VOYEUR's main purpose is to generate a fast (and pretty) Active Directory report. The tool is developed entirely in PowerShell (a powerful scripting language) without dependencies (just .Net Framework 3.5 and Ofiice Excel if you want an useful and pretty report). The generated report is a perfect starting point for well-established forensic, inc…
+- [**122**星][4y] [Py] [raffaele-forte/climber](https://github.com/raffaele-forte/climber) Check UNIX/Linux systems for privilege escalation
+- [**122**星][2m] [Py] [netflix-skunkworks/policyuniverse](https://github.com/netflix-skunkworks/policyuniverse) Parse and Process AWS IAM Policies, Statements, ARNs, and wildcards.
+- [**122**星][3y] [Ruby] [melvinsh/vcsmap](https://github.com/melvinsh/vcsmap) vcsmap is a plugin-based tool to scan public version control systems for sensitive information.
+- [**122**星][2m] [Py] [mdiazcl/fuzzbunch-debian](https://github.com/mdiazcl/fuzzbunch-debian) Fuzzbunch deployment for Debian - Intructions: Readme.md
+- [**122**星][1y] [PS] [mattifestation/bhusa2018_sysmon](https://github.com/mattifestation/bhusa2018_sysmon) All materials from our Black Hat 2018 "Subverting Sysmon" talk
+- [**122**星][3y] [C] [l0n3c0d3r/ceed](https://github.com/l0n3c0d3r/ceed) A tiny x86 compiler with ELF and PE target
+- [**122**星][2y] [PHP] [jamalc0m/wphunter](https://github.com/jamalc0m/wphunter) WPHunter A Wordpress Vulnerability Scanner
+- [**122**星][3y] [C++] [ivildeed/vmw_vmx_overloader](https://github.com/ivildeed/vmw_vmx_overloader) Loading unsigned code into kernel in Windows 10 (64) with help of VMware Workstation Pro/Player design flaw
+- [**122**星][2y] [Java] [isstac/kelinci](https://github.com/isstac/kelinci) AFL-based fuzzing for Java
+- [**122**星][4y] [irsl/adb-backup-apk-injection](https://github.com/irsl/adb-backup-apk-injection) Android ADB backup APK Injection POC
+- [**122**星][3y] [Py] [grazfather/practicalmalwarelabs](https://github.com/grazfather/practicalmalwarelabs) Keep track of the labs from the book "Practical Malware Analysis"
+- [**122**星][4m] [C++] [f4exb/dsdcc](https://github.com/f4exb/dsdcc) Digital Speech Decoder (DSD) rewritten as a C++ library
+- [**122**星][2y] [Java] [ezequielpereira/gae-rce](https://github.com/ezequielpereira/gae-rce) Google App Engine - Remote Code Execution bug ($36k bug bounty)
+- [**122**星][2y] [Go] [egebalci/arcanus](https://github.com/egebalci/arcanus) ARCANUS is a customized payload generator/handler.
+- [**122**星][4m] [C] [dschanoeh/socketcand](https://github.com/dschanoeh/socketcand) A deprecated fork of socketcand. Please got to linux-can for the latest version.
+- [**122**星][4y] [PHP] [dermotblair/webvulscan](https://github.com/dermotblair/webvulscan) Web Application Vulnerability Scanner.
+- [**122**星][11m] [PHP] [damianofalcioni/ip-biter](https://github.com/damianofalcioni/ip-biter) The Hacker-friendly E-Mail (but not only) Tracking Framework
+- [**122**星][3y] [JS] [cn33liz/jsmeter](https://github.com/cn33liz/jsmeter) JavaScript Reversed TCP Meterpreter Stager
+- [**122**星][3m] [HTML] [chromium/trickuri](https://github.com/chromium/trickuri) to allow testing of applications' display of URLs.
+- [**122**星][2m] [Py] [chrispetrou/fdsploit](https://github.com/chrispetrou/fdsploit) File Inclusion & Directory Traversal fuzzing, enumeration & exploitation tool.
+- [**122**星][12m] [Py] [axt/angr-utils](https://github.com/axt/angr-utils) Handy utilities for the angr binary analysis framework, most notably CFG visualization
+- [**122**星][2y] [Py] [alephsecurity/firehorse](https://github.com/alephsecurity/firehorse) 漏洞开发与利用之: 在紧急加载模式(EDM,Emergency Download Mode)下刷机时使用的固件包(高通)
+- [**122**星][28d] [Java] [al3xtjames/ghidra-firmware-utils](https://github.com/al3xtjames/ghidra-firmware-utils) Ghidra utilities for analyzing PC firmware
+- [**122**星][2y] [Batchfile] [3gstudent/clr-injection](https://github.com/3gstudent/clr-injection) Use CLR to inject all the .NET apps
+- [**122**星][2y] [CSS] [0xbug/orangescan](https://github.com/0xbug/orangescan) 在线子域名信息收集工具
+- [**121**星][8m] [C] [xhuvom/darknetfaceid](https://github.com/xhuvom/darknetfaceid) A YOLO darknet implementation of facial recognition from automatic annotation of facial images.
+- [**121**星][8d] [ukncsc/zero-trust-architecture](https://github.com/ukncsc/zero-trust-architecture) Principles to help you design and deploy a zero trust architecture
+- [**121**星][4y] [C] [cuckoosandbox/cuckoomon](https://github.com/cuckoosandbox/cuckoomon) DEPRECATED - replaced with "monitor"
+- [**121**星][2m] [Py] [yelp/amira](https://github.com/yelp/amira) Automated Malware Incident Response & Analysis
+- [**121**星][2y] [we5ter/awesome-platforms](https://github.com/we5ter/awesome-platforms) A curated list of awesome security platforms,including CTF/Security Response Center/Bug Tracker and so on.
+- [**121**星][11d] [HTML] [trendmicro/securecodingdojo](https://github.com/trendmicro/securecodingdojo) a platform for delivering secure coding training
+- [**121**星][7m] [Py] [tidesec/web_pwd_common_crack](https://github.com/tidesec/web_pwd_common_crack) 通用web弱口令破解脚本,旨在批量检测那些没有验证码的管理后台,可用于刷分~
+- [**121**星][2m] [Go] [teknogeek/ssrf-sheriff](https://github.com/teknogeek/ssrf-sheriff) A simple SSRF-testing sheriff written in Go
+- [**121**星][2y] [C] [sqlmapproject/udfhack](https://github.com/sqlmapproject/udfhack) Database takeover user-defined functions for MySQL and PostgreSQL
+- [**121**星][2y] [C#] [schnocker/hleaker](https://github.com/schnocker/hleaker) An usermode alternative for DuplicateHandle.
+- [**121**星][4y] [sandysekharan/ctf-tool](https://github.com/sandysekharan/ctf-tool) A curated list of Capture The Flag (CTF) frameworks, libraries, resources and softwares.
+- [**121**星][15d] [PS] [rgl/windows-2016-vagrant](https://github.com/rgl/windows-2016-vagrant) Windows 2012R2/10/2016/2019 Base Vagrant Box (
+- [**121**星][6d] [Py] [renatahodovan/grammarinator](https://github.com/renatahodovan/grammarinator) ANTLR v4 grammar-based test generator
+- [**121**星][24d] [Py] [redhuntlabs/burpsuite-asset_discover](https://github.com/redhuntlabs/burpsuite-asset_discover) Burp Suite extension to discover assets from HTTP response.
+- [**121**星][3m] [Py] [redaelli/imago-forensics](https://github.com/redaelli/imago-forensics) Imago is a python tool that extract digital evidences from images.
+- [**121**星][1m] [C++] [rebzzel/kiero](https://github.com/rebzzel/kiero) Universal graphical hook for a D3D9-D3D12, OpenGL and Vulcan based games.
+- [**121**星][3y] [Java] [rastapasta/pokemon-go-xposed](https://github.com/rastapasta/pokemon-go-xposed)
+- [**121**星][11m] [Shell] [qinghuas/ss-panel-and-ss-py-mu](https://github.com/qinghuas/ss-panel-and-ss-py-mu) SS Panel V3 前端/节点端安装脚本,及相关附属工具管理
+- [**121**星][11d] [PS] [dsccommunity/xpsdesiredstateconfiguration](https://github.com/dsccommunity/xPSDesiredStateConfiguration)
+- [**121**星][1y] [Py] [powdahound/redis-collectd-plugin](https://github.com/powdahound/redis-collectd-plugin) A Redis plugin for collectd.
+- [**121**星][10d] [C++] [phackt/stager.dll](https://github.com/phackt/stager.dll) Code from this article:
+- [**121**星][3m] [XSLT] [pcapng/pcapng](https://github.com/pcapng/pcapng) PCAP next generation file format specification
+- [**121**星][7m] [Py] [owasp/serverless-goat](https://github.com/owasp/serverless-goat) a serverless application demonstrating common serverless security flaws
+- [**121**星][1y] [nagwww/s3-leaks](https://github.com/nagwww/s3-leaks) List of S3 Hacks
+- [**121**星][3d] [HTML] [mozillasecurity/fuzzmanager](https://github.com/mozillasecurity/fuzzmanager) A fuzzing management tools collection
+- [**121**星][1m] [JS] [mazen160/xless](https://github.com/mazen160/xless) The Serverless Blind XSS App
+- [**121**星][3y] [malwares/webshell](https://github.com/malwares/webshell) WebShell Dump
+- [**121**星][28d] [maddiestone/conpresentations](https://github.com/maddiestone/conpresentations) Slide decks from my conference presentations
+- [**121**星][4y] [PS] [maaaaz/crackmapexecwin](https://github.com/maaaaz/crackmapexecwin) The great CrackMapExec tool compiled for Windows
+- [**121**星][3y] [HTML] [louchaooo/kali-tools-zh](https://github.com/louchaooo/kali-tools-zh)
+- [**121**星][7y] [Py] [liato/android-market-api-py](https://github.com/liato/android-market-api-py) A Python port of the java Android Market API.
+- [**121**星][6m] [AutoIt] [jschicht/mft2csv](https://github.com/jschicht/mft2csv) Extract $MFT record info and log it to a csv file.
+- [**121**星][1y] [Shell] [joanbono/snorter](https://github.com/joanbono/snorter) Snort + Barnyard2 + Pulledpork → The easy way!
+- [**121**星][6y] [Py] [infodox/exploits](https://github.com/infodox/exploits) Some exploits and exploit development stuff.
+- [**121**星][4y] [Scala] [guillaumebort/scasm](https://github.com/guillaumebort/scasm) A a dynamic x86_64 assembler in Scala — Code for the live coding session @ Devoxx france 2016
+- [**121**星][3y] [PS] [fuzzysecurity/hacksysteam-pskernelpwn](https://github.com/fuzzysecurity/hacksysteam-pskernelpwn) Accompanying blog posts on using PowerShell to exploit the @HackSysTeam Extreme Vulnerable Driver (HEVD).
+- [**121**星][2y] [Shell] [feicong/ida_for_mac_green](https://github.com/feicong/ida_for_mac_green) IDAPro 绿化增强版 (macOS)
+- [**121**星][14d] [Go] [facebookincubator/nvdtools](https://github.com/facebookincubator/nvdtools) A set of tools to work with the feeds (vulnerabilities, CPE dictionary etc.) distributed by National Vulnerability Database (NVD)
+- [**121**星][2y] [Ruby] [ehloonion/onionmx](https://github.com/ehloonion/onionmx) Onion delivery, so delicious
+- [**121**星][10m] [Perl] [dave-theunsub/clamtk](https://github.com/dave-theunsub/clamtk) An easy to use, light-weight, on-demand virus scanner for Linux systems
+- [**121**星][1m] [cujanovic/content-bruteforcing-wordlist](https://github.com/cujanovic/content-bruteforcing-wordlist) Wordlist for content(directory) bruteforce discovering with Burp or dirsearch
+- [**121**星][2m] [Py] [ctxis/beemka](https://github.com/ctxis/beemka) Basic Electron Exploitation
+- [**121**星][3y] [cloudsec/research](https://github.com/cloudsec/research) the core papers i researched about kernel security.
+- [**121**星][4y] [Batchfile] [brianwrf/winsystemhelper](https://github.com/brianwrf/winsystemhelper) A tool that checks and downloads scripts that will aid with privilege escalation on a Windows system.
+- [**121**星][1y] [C] [bob-beck/libtls](https://github.com/bob-beck/libtls) libtls tutorial, exercises, test CA and exercise solutions
+- [**121**星][1y] [Java] [b3dk7/stegexpose](https://github.com/b3dk7/stegexpose) A steganalysis tool for detecting LSB steganography in images
+- [**121**星][7m] [C] [aczid/crypto1_bs](https://github.com/aczid/crypto1_bs) Bitsliced Crypto-1 brute-forcer
+- [**121**星][1y] [PHP] [a0xnirudh/kurukshetra](https://github.com/a0xnirudh/kurukshetra) 通过交互式解决问题的方式来学习安全编程
+- [**121**星][4y] [Shell] [91yun/vpn](https://github.com/91yun/vpn) vpn一键安装包
+- [**121**星][3d] [C++] [0vercl0k/blazefox](https://github.com/0vercl0k/blazefox) Blazefox exploits for Windows 10 RS5 64-bit.
+- [**120**星][2y] [Go] [zxsecurity/steamer](https://github.com/zxsecurity/steamer) 导入、搜索和管理公开泄露的数据
+- [**120**星][3y] [Assembly] [yaseng/pentest](https://github.com/yaseng/pentest) some pentest scripts & tools by yaseng@uauc.net
+- [**120**星][4y] [Ruby] [yangbh/hammer](https://github.com/yangbh/hammer) A web vulnerability scanner framework
+- [**120**星][3y] [Shell] [xmikos/cryptboot](https://github.com/xmikos/cryptboot) Encrypted boot partition manager with UEFI Secure Boot support
+- [**120**星][2y] [JS] [wofeiwo/website-analyzer](https://github.com/wofeiwo/website-analyzer) Analyze and display the Web technology of current page.
+- [**120**星][1y] [Py] [wavestone-cdt/wavecrack](https://github.com/wavestone-cdt/wavecrack) 多用户之间共享Hastcat cracking box 的 Web 界面
+- [**120**星][2y] [Jupyter Notebook] [teamhg-memex/deep-deep](https://github.com/teamhg-memex/deep-deep) Adaptive crawler which uses Reinforcement Learning methods
+- [**120**星][2y] [Py] [szcf-weiya/sinaspider](https://github.com/szcf-weiya/sinaspider) 动态IP解决新浪的反爬虫机制,快速抓取内容。
+- [**120**星][4y] [Py] [synack/dylibhijack](https://github.com/synack/dylibhijack) python utilities related to dylib hijacking on OS X
+- [**120**星][5m] [Py] [rabbitmask/weblogicscanlot](https://github.com/rabbitmask/weblogicscanlot) WeblogicScanLot系列,Weblogic漏洞批量检测工具,V2.2
+- [**120**星][3y] [Java] [pwntester/jre8u20_rce_gadget](https://github.com/pwntester/jre8u20_rce_gadget) JRE8u20_RCE_Gadget
+- [**120**星][2y] [Swift] [nsexceptional/runtime](https://github.com/nsexceptional/runtime) An Objective-C simulator written in Swift.
+- [**120**星][6y] [Lua] [nixuehan/belial](https://github.com/nixuehan/belial) 基于nginx lua module 的一个 waf .
+- [**120**星][8y] [Py] [mostawesomedude/construct](https://github.com/mostawesomedude/construct) Python binary parsing library
+- [**120**星][1y] [Py] [mitre/cascade-server](https://github.com/mitre/cascade-server) a research project at MITRE which seeks to automate much of the investigative work a “blue-team” team would perform to determine the scope and maliciousness of suspicious behavior on a network using host data
+- [**120**星][1y] [Py] [mikesiegel/ews-crack](https://github.com/mikesiegel/ews-crack) 利用 EWS 绕过 Office365 2FA/MDM
+- [**120**星][2y] [C] [marsyy/littl_tools](https://github.com/marsyy/littl_tools)
+- [**120**星][2y] [Swift] [lxdcn/nepackettunnelvpndemo](https://github.com/lxdcn/nepackettunnelvpndemo) iOS VPN client implementation demo based on iOS9 NetworkExtension NETunnelProvider APIs
+- [**120**星][18d] [Java] [kyhsgeekcode/android-disassembler](https://github.com/kyhsgeekcode/android-disassembler) Disassemble ANY files including .so (NDK, JNI), Windows PE(EXE, DLL, SYS, etc), linux binaries, libraries, and any other files such as pictures, audios, etc(for fun)files on Android. Capstone-based disassembler application on android. 안드로이드 NDK 공유 라이브러리, Windows 바이너리, etc,... 리버싱 앱
+- [**120**星][5m] [Rust] [kanishkarj/snoopy](https://github.com/kanishkarj/snoopy) A highly configurable multi-threaded packet sniffer and parser build in rust-lang.
+- [**120**星][5y] [jyny/pasc2at](https://github.com/jyny/pasc2at) 高级PHP应用程序漏洞审核技术 by 80vul
+- [**120**星][2y] [C] [jimstudt/ook-decoder](https://github.com/jimstudt/ook-decoder) Ook-decoder reads On-Off Keying radio data commonly used in the 433MHz ISM bands using a software defined radio (SDR).
+- [**120**星][11m] [Shell] [itskindred/portpush](https://github.com/itskindred/portpush) A small Bash utility used for pivoting into internal networks upon compromising a public-facing host.
+- [**120**星][2m] [HTML] [intel/generic-sensor-demos](https://github.com/intel/generic-sensor-demos) applications that demonstrate how to use the Generic Sensor API.
+- [**120**星][5m] [C++] [hasherezade/tiny_tracer](https://github.com/hasherezade/tiny_tracer) A Pin Tool for tracing API calls etc
+- [**120**星][12m] [Py] [grunny/zap-cli](https://github.com/grunny/zap-cli) A simple tool for interacting with OWASP ZAP from the commandline.
+- [**120**星][3y] [C] [glacierw/mba](https://github.com/glacierw/mba) Malware Behavior Analyzer
+- [**120**星][3y] [gasche/popl2016-papers](https://github.com/gasche/popl2016-papers) Links to publicly available preprints for the POPL'16 conference
+- [**120**星][3y] [Py] [exp-db/ai-driven-waf](https://github.com/exp-db/ai-driven-waf) Artificial intelligence-driven Web Firewall
+- [**120**星][2y] [JS] [duo-labs/phinn](https://github.com/duo-labs/phinn) phinn:生成脱机 Chrome 扩展,使用 bespoke convolutional 神经网络来检测网络钓鱼攻击
+- [**120**星][8m] [C] [dimopouloselias/alpc-mmc-uac-bypass](https://github.com/dimopouloselias/alpc-mmc-uac-bypass) UAC Bypass with mmc via alpc
+- [**120**星][1y] [C] [cylancevulnresearch/reflectivedllrefresher](https://github.com/cylancevulnresearch/reflectivedllrefresher) Universal Unhooking
+- [**120**星][1y] [Go] [cllunsford/aws-signing-proxy](https://github.com/cllunsford/aws-signing-proxy) Golang http proxy to transparently sign requests to AWS endpoints
+- [**120**星][3m] [C] [changeofpace/overwatch-dump-fix](https://github.com/changeofpace/overwatch-dump-fix) x64dbg plugin which removes anti-dumping and obfuscation techniques from the popular FPS game Overwatch.
+- [**120**星][7m] [Py] [c0ny1/workscripts](https://github.com/c0ny1/workscripts) 信息安全工程师工作常用脚本
+- [**120**星][9m] [byt3bl33d3r/ansibleplaybooks](https://github.com/byt3bl33d3r/ansibleplaybooks) A collection of Ansible Playbooks that configure Kali to use Fish & install a number of tools
+- [**120**星][4y] [Py] [breenmachine/javaunserializeexploits](https://github.com/breenmachine/javaunserializeexploits)
+- [**120**星][5y] [C++] [breakingmalware/selfie](https://github.com/breakingmalware/selfie) 对自修改代码进行脱壳
+- [**120**星][3m] [Py] [ashleysommer/sanic-cors](https://github.com/ashleysommer/sanic-cors) A Sanic extension for handling Cross Origin Resource Sharing (CORS), making cross-origin AJAX possible. Based on flask-cors by Cory Dolphin.
+- [**120**星][5y] [Go] [appnician/pastor](https://github.com/appnician/pastor) Pastor stores all your passwords without storing them anywhere.
+- [**119**星][1y] [PHP] [walkor/php-socks5](https://github.com/walkor/php-socks5) socks5 proxy written in PHP based on workerman.
+- [**119**星][3m] [neo23x0/vti-dorks](https://github.com/neo23x0/vti-dorks) Awesome VirusTotal Intelligence Search Queries
+- [**119**星][1y] [Shell] [cyb0r9/winspy](https://github.com/Cyb0r9/winspy) WinSpy a Windows reverse shell Backdoor creator with an Automatic IP Poisener
+- [**119**星][1y] [imfht/educn-sqlscan](https://github.com/imfht/educn-sqlScan) 对全国edu域名以及其二级域名进行的一次Sql注入,预计花费时间为三天,结束时候将提交至漏洞平台
+- [**119**星][2y] [Py] [klsecservices/bat-armor](https://github.com/klsecservices/bat-armor) Encode powershell payload into bat files
+- [**119**星][5y] [C++] [zyantific/retypedef](https://github.com/zyantific/retypedef) 函数名称替换,可以自定义规则
+- [**119**星][6m] [xiangbab/web-hack](https://github.com/xiangbab/web-hack) 一份网络安全入门的资料。
+- [**119**星][1y] [Py] [winheapexplorer/winheap-explorer](https://github.com/winheapexplorer/winheap-explorer) heap-based bugs detection in x86 machine code for Windows applications.
+- [**119**星][1y] [Py] [williballenthin/indxparse](https://github.com/williballenthin/indxparse) Tool suite for inspecting NTFS artifacts.
+- [**119**星][9m] [Shell] [vishnudxb/automated-pentest](https://github.com/vishnudxb/automated-pentest) Minimal docker container of Parrot OS for running an automated scan & pentest report.
+- [**119**星][1y] [Py] [vanhoefm/blackhat17-pocs](https://github.com/vanhoefm/blackhat17-pocs) Proof of concepts of attacks against Wi-Fi implementations
+- [**119**星][2y] [Py] [teamhg-memex/aquarium](https://github.com/teamhg-memex/aquarium) Splash + HAProxy + Docker Compose
+- [**119**星][6y] [Py] [stephenbrannon/iocextractor](https://github.com/stephenbrannon/iocextractor) IOC (Indicator of Compromise) Extractor: a program to help extract IOCs from text files.
+- [**119**星][1m] [C++] [stealth/lophttpd](https://github.com/stealth/lophttpd) lots of performance (or lots of porn, if you prefer) httpd: Easy, chrooted, fast and simple to use HTTP server for static content. Runs on Linux, BSD, Android and OSX/Darwin. It's free but if you like it, consider donating to the EFF:
+- [**119**星][5m] [C] [ryanries/passfiltex](https://github.com/ryanries/passfiltex) PassFiltEx. An Active Directory Password Filter.
+- [**119**星][4y] [Py] [packz/ropeme](https://github.com/packz/ropeme) ROPME is a set of python scripts to generate ROP gadgets and payload.
+- [**119**星][10m] [PS] [p0w3rsh3ll/autoruns](https://github.com/p0w3rsh3ll/autoruns)
+- [**119**星][3y] [Py] [neuroo/grabber](https://github.com/neuroo/grabber) [DON'T USE ME] plain ol' web apps scanner
+- [**119**星][3y] [Visual Basic .NET] [mwsrc/njrat](https://github.com/mwsrc/njrat) njRAT SRC Extract
+- [**119**星][2y] [C] [mniip/spectre-meltdown-poc](https://github.com/mniip/spectre-meltdown-poc) spectre meltdown poc
+- [**119**星][10d] [Py] [misp/misp-taxonomies](https://github.com/misp/misp-taxonomies) Taxonomies used in MISP taxonomy system and can be used by other information sharing tool.
+- [**119**星][2y] [mawenjian/china-cdn-domain-whitelist](https://github.com/mawenjian/china-cdn-domain-whitelist) 中国CDN服务提供商域名白名单(China CDN Service Providers' Domain Whitelist)
+- [**119**星][9m] [Py] [jzadeh/chiron-elk](https://github.com/jzadeh/chiron-elk) Chiron Home Based ML Intrusion Detection System
+- [**119**星][2y] [CoffeeScript] [joyqi/socket-pipe](https://github.com/joyqi/socket-pipe) forward your socket from one address to anoter without any configs
+- [**119**星][2d] [C++] [intel/opencl-intercept-layer](https://github.com/intel/opencl-intercept-layer) Intercept Layer for Debugging and Analyzing OpenCL Applications
+- [**119**星][2m] [C] [hydrabus/hydrafw](https://github.com/hydrabus/hydrafw) HydraFW official firmware for HydraBus/HydraNFC for researcher, hackers, students, embedded software developers or anyone interested in debugging/hacking/developing/penetration testing
+- [**119**星][21d] [Dockerfile] [harvard-itsecurity/docker-misp](https://github.com/harvard-itsecurity/docker-misp) Automated Docker MISP container - Malware Information Sharing Platform and Threat Sharing
+- [**119**星][11m] [Py] [ghostmanager/shepherd](https://github.com/ghostmanager/shepherd) A Django application to help red team operators manage a library of domain names
+- [**119**星][10d] [JS] [fuzzysecurity/fermion](https://github.com/fuzzysecurity/fermion) Fermion, an electron wrapper for Frida & Monaco.
+- [**119**星][1m] [JS] [fergarrui/ethereum-security](https://github.com/fergarrui/ethereum-security) Security issues in Ethereum demonstrated in mocha tests. The fix is also demonstrated
+- [**119**星][4y] [Py] [fengxuangit/dede_exp_collect](https://github.com/fengxuangit/dede_exp_collect) collection dedecms exp use pocsuite framework 收集织梦的一些漏洞,并用pocsuite框架写出利用程序。打造一键日dede
+- [**119**星][1y] [Py] [erdiaker/torrequest](https://github.com/erdiaker/torrequest) Simple Python interface for HTTP(s) requests over Tor
+- [**119**星][2y] [C++] [earthquake/universaldvc](https://github.com/earthquake/universaldvc) Universal Dynamic Virtual Channel connector for Remote Desktop Services
+- [**119**星][4d] [Shell] [cihanmehmet/sub.sh](https://github.com/cihanmehmet/sub.sh) Online Subdomain Detect Script
+- [**119**星][2y] [alecmuffett/the-onion-diaries](https://github.com/alecmuffett/the-onion-diaries) Blog-type notes about building Onion sites
+- [**119**星][4m] [C#] [akaion/jupiter](https://github.com/akaion/jupiter) A Windows virtual memory editing library with support for pattern scanning.
+- [**119**星][1m] [Shell] [a-dma/yubitouch](https://github.com/a-dma/yubitouch) Bash script for setting or clearing touch requirements for # cryptographic operations the OpenPGP application on a YubiKey 4
+- [**118**星][12m] [C] [saelo/35c3ctf](https://github.com/saelo/35c3ctf) Source code and exploits for some 35c3ctf challenges.
+- [**118**星][3m] [C++] [googleprojectzero/drsancov](https://github.com/googleprojectzero/drsancov) DynamoRIO plugin to get ASAN and SanitizerCoverage compatible output for closed-source executables
+- [**118**星][1y] [JS] [shadowsocks/shadowsocks-hub](https://github.com/shadowsocks/shadowsocks-hub) A web app managing shadowsocks users, servers, nodes, products, accounts, and traffic. Suitable for internal use by companies, organizations, and friends.
+- [**118**星][30d] [Py] [jgilhutton/pyxiewps](https://github.com/jgilhutton/PyxieWPS) Pyxiewps is a wireless attack tool to retrieve the WPS pin in seconds.
+- [**118**星][1y] [Py] [wipi-hunter/pifinger](https://github.com/WiPi-Hunter/PiFinger) determine whether the network we are connected for is opened by Wifi- Pineapple
+- [**118**星][2y] [Py] [yt1g3r/cve-2018-8174_exp](https://github.com/yt1g3r/cve-2018-8174_exp) CVE-2018-8174_python
+- [**118**星][3y] [C] [timwr/cve-2014-3153](https://github.com/timwr/cve-2014-3153) CVE-2014-3153 aka towelroot
+- [**118**星][1y] [lua] [tanjiti/icstools](https://github.com/tanjiti/icstools) ics security tools
+- [**118**星][9m] [Py] [skelsec/pypykatz_server](https://github.com/skelsec/pypykatz_server) the server part of a server-agent model credential acquiring tool based on pypykatz
+- [**118**星][2y] [Shell] [shipcod3/mazda_getinfo](https://github.com/shipcod3/mazda_getinfo) A PoC that the USB port is an attack surface for a Mazda car's infotainment system and how Mazda hacks are made
+- [**118**星][9m] [Java] [securityfirst/umbrella_android](https://github.com/securityfirst/umbrella_android) Digital and Physical Security Advice App
+- [**118**星][11m] [CSS] [rootkiter/earthworm](https://github.com/rootkiter/earthworm) Tool for tunnel
+- [**118**星][1y] [Py] [ridter/mailget](https://github.com/ridter/mailget) 通过脉脉用户猜测企业邮箱
+- [**118**星][5d] [PHP] [radenvodka/recsech](https://github.com/radenvodka/recsech) Recsech is a tool for doing Footprinting and Reconnaissance on the target web. Recsech collects information such as DNS Information, Sub Domains, HoneySpot Detected, Subdomain takeovers, Reconnaissance On Github and much more you can see in Features in tools .
+- [**118**星][6y] [Py] [meatballs1/burp-extensions](https://github.com/meatballs1/burp-extensions) Burp Suite Extensions
+- [**118**星][2y] [Py] [malus-security/sandblaster](https://github.com/malus-security/sandblaster) Reversing the Apple sandbox
+- [**118**星][30d] [Py] [m8r0wn/crosslinked](https://github.com/m8r0wn/crosslinked) LinkedIn enumeration tool to extract valid employee names from an organization through search engine scraping. Names can be formatted in a defined naming convention for further security testing.
+- [**118**星][1y] [Java] [liqinew/myutils](https://github.com/liqinew/myutils) 包含全方位的工具的工具项目
+- [**118**星][5m] [Shell] [hardenedlinux/stig-4-debian](https://github.com/hardenedlinux/stig-4-debian) Security Technical Implementation Guide for Debian
+- [**118**星][3y] [Py] [hackstoic/eqgrp-free-file](https://github.com/hackstoic/eqgrp-free-file) Free sampling of files from the purported Equation Group hack.
+- [**118**星][26d] [Go] [furduhlutur/yar](https://github.com/furduhlutur/yar) Yar is a tool for plunderin' organizations, users and/or repositories.
+- [**118**星][2y] [C] [endgameinc/clrguard](https://github.com/endgameinc/clrguard) a proof of concept project to explore instrumenting the Common Language Runtime (CLR) for security purposes.
+- [**118**星][1m] [HTML] [edoverflow/proof-of-concepts](https://github.com/edoverflow/proof-of-concepts) A little collection of fun and creative proof of concepts to demonstrate the potential impact of a security vulnerability.
+- [**118**星][6d] [Py] [domainaware/parsedmarc](https://github.com/domainaware/parsedmarc) 解析DMARC报告的Python脚本, 含cli
+- [**118**星][3m] [PS] [danmcinerney/pymetasploit3](https://github.com/danmcinerney/pymetasploit3) Automation library for Metasploit
+- [**118**星][5y] [Shell] [d4rkcat/handshaker](https://github.com/d4rkcat/handshaker) Detect, capture, crack WPA/2 handshakes, WEP Keys and geotag with Android GPS
+- [**118**星][8y] [C] [cr4sh/ioctlfuzzer](https://github.com/cr4sh/ioctlfuzzer) Automatically exported from code.google.com/p/ioctlfuzzer
+- [**118**星][1m] [Py] [containers/udica](https://github.com/containers/udica) This repository contains a tool for generating SELinux security profiles for containers
+- [**118**星][1y] [Py] [amossys/memitm](https://github.com/amossys/memitm) Tool to make in memory man in the middle
+- [**117**星][13d] [Py] [meliot/shcheck](https://github.com/meliot/shcheck) check security headers on a target website
+- [**117**星][2y] [Py] [willphillipscvdemo/raspberry-pi-camera-motion-detection.](https://github.com/willphillipscvdemo/raspberry-pi-camera-motion-detection.) Using Python code with a Raspberry-Pi, PIR motion and a Picamera, you can create a device which will email you a snapshot image when someone enters your room.
+- [**117**星][1y] [C#] [vulnerator/vulnerator](https://github.com/vulnerator/vulnerator) The official distribution of the vulnerability parsing utility.
+- [**117**星][3y] [Py] [violentshell/rollmac](https://github.com/violentshell/rollmac) Automated WiFi limit evasion
+- [**117**星][4y] [Lua] [ulissescastro/linux-native-backdoors](https://github.com/ulissescastro/linux-native-backdoors) Repository holding all alternatives of *nix backdoors.
+- [**117**星][4y] [Go] [tutumcloud/ngrok](https://github.com/tutumcloud/ngrok) Introspected tunnels to localhost
+- [**117**星][9m] [Java] [turing-technician/virtualfasthook](https://github.com/turing-technician/virtualfasthook) Android application hooking tool based on FastHook + VirtualApp
+- [**117**星][3m] [PS] [thom-s/netsec-ps-scripts](https://github.com/thom-s/netsec-ps-scripts) Collection of PowerShell network security scripts for system administrators.
+- [**117**星][2y] [ObjC] [theori-io/zer0con2018_singi](https://github.com/theori-io/zer0con2018_singi)
+- [**117**星][2y] [C++] [sysml/clickos](https://github.com/sysml/clickos) The Click modular router: fast modular packet processing and analysis
+- [**117**星][5y] [C] [squiffy/masochist](https://github.com/squiffy/masochist) XNU Rootkit Framework
+- [**117**星][5m] [Java] [spoofzu/deepviolet](https://github.com/spoofzu/deepviolet) Tool for introspection of SSL\TLS sessions
+- [**117**星][5y] [C] [shellntel/backdoors](https://github.com/shellntel/backdoors)
+- [**117**星][17d] [Py] [saucer-man/saucerframe](https://github.com/saucer-man/saucerframe) python3批量poc检测工具
+- [**117**星][8m] [C] [rednaga/native-shim](https://github.com/rednaga/native-shim) A "shim" for loading native jni files for Android active debugging
+- [**117**星][3y] [Java] [rafaeltoledo/android-security](https://github.com/rafaeltoledo/android-security) An app showcase of some techniques to improve Android app security
+- [**117**星][9d] [Py] [perfectblue/ctf-writeups](https://github.com/perfectblue/ctf-writeups) Perfect Blue's CTF Writeups
+- [**117**星][11m] [Shell] [patpadgett/corkscrew](https://github.com/patpadgett/corkscrew) Corkscrew is a tool for tunneling SSH through HTTP proxies.
+- [**117**星][3y] [Py] [nitr4x/whichcdn](https://github.com/nitr4x/whichcdn) WhichCDN allows to detect if a given website is protected by a Content Delivery Network
+- [**117**星][3y] [Py] [nccgroup/hodor](https://github.com/nccgroup/hodor) Hodor! Fuzzer..
+- [**117**星][2y] [PS] [javelinnetworks/ir-tools](https://github.com/javelinnetworks/ir-tools) forensics of domain based attacks on an infected host
+- [**117**星][2m] [Py] [hugsy/stuff](https://github.com/hugsy/stuff) Misc tools for reversing, exploit and pentest
+- [**117**星][3y] [Py] [honeynet/cuckooml](https://github.com/honeynet/cuckooml) Machine Learning for Cuckoo Sandbox
+- [**117**星][5y] [JS] [hadynz/xss-keylogger](https://github.com/hadynz/xss-keylogger) A keystroke logger to exploit XSS vulnerabilities in a site - for my personal Educational purposes only
+- [**117**星][13d] [Py] [gridsync/gridsync](https://github.com/gridsync/gridsync) Synchronize local directories with Tahoe-LAFS storage grids
+- [**117**星][5y] [Py] [gdssecurity/jetleak-testing-script](https://github.com/gdssecurity/jetleak-testing-script) Script to test if a server is vulnerable to the JetLeak vulnerability
+- [**117**星][2y] [Py] [functionclub/uping](https://github.com/functionclub/uping) 一个24小时监测VPS延迟的工具
+- [**117**星][2y] [Py] [ecapuano/web-traffic-generator](https://github.com/ecapuano/web-traffic-generator) A quick and dirty HTTP/S "organic" traffic generator.
+- [**117**星][4y] [Shell] [dholm/dotgdb](https://github.com/dholm/dotgdb) GDB scripts to add support for low level debugging and reverse engineering
+- [**117**星][3y] [PHP] [dhayalanb/windows-php-reverse-shell](https://github.com/dhayalanb/windows-php-reverse-shell) Simple php reverse shell implemented using binary .
+- [**117**星][7m] [Py] [danmcinerney/device-pharmer](https://github.com/danmcinerney/device-pharmer) Opens 1K+ IPs or Shodan search results and attempts to login
+- [**117**星][5d] [Go] [cyberark/secretless-broker](https://github.com/cyberark/secretless-broker) Secure your apps by making them Secretless
+- [**117**星][4y] [Py] [cvvt/dumpdex](https://github.com/cvvt/dumpdex) 基于IDA python的Android DEX内存dump工具
+- [**117**星][2y] [Ruby] [bsidessf/ctf-2017-release](https://github.com/bsidessf/ctf-2017-release) Our released code for BSidesSF CTF 2017
+- [**117**星][1y] [Py] [bo0om/safiler](https://github.com/bo0om/safiler) Safari local file reader
+- [**117**星][4m] [Py] [bastibl/gr-keyfob](https://github.com/bastibl/gr-keyfob) Transceiver for Hella wireless car key fobs.
+- [**117**星][2m] [Java] [auth0/lock.android](https://github.com/auth0/lock.android) Android Library to authenticate using Auth0 and with a Native Look & Feel
+- [**117**星][1m] [Java] [aramrami/owasp-csrfguard](https://github.com/aramrami/owasp-csrfguard) OWASP CSRFGuard 3.1.0
+- [**117**星][1y] [Go] [aprosvetova/xiaomi-kettle](https://github.com/aprosvetova/xiaomi-kettle) Xiaomi Kettle BLE protocol reverse-engineered
+- [**117**星][10m] [C] [adrianyy/rw_socket_driver](https://github.com/adrianyy/rw_socket_driver) Driver that uses network sockets to communicate with client and read/ write protected process memory.
+- [**117**星][2y] [C++] [0xphoenix/mazewalker](https://github.com/0xphoenix/mazewalker) 使用Pin收集数据,导入到IDA中查看
+ - [mazeui](https://github.com/0xphoenix/mazewalker/blob/master/MazeUI/mazeui.py) 在IDA中显示界面
+ - [PyScripts](https://github.com/0xPhoeniX/MazeWalker/tree/master/MazeTracer/PyScripts) Python脚本,处理收集到的数据
+ - [PinClient](https://github.com/0xPhoeniX/MazeWalker/tree/master/MazeTracer/src)
+- [**116**星][1y] [C++] [lincolnhard/openpose-darknet](https://github.com/lincolnhard/openpose-darknet) Openpose implementation using darknet
+- [**116**星][3y] [PHP] [ircmaxell/stauros](https://github.com/ircmaxell/stauros) A fast XSS sanitization library for PHP
+- [**116**星][3y] [Shell] [cisco-talos/vboxhardening](https://github.com/cisco-talos/vboxhardening)
+- [**116**星][23d] [Kotlin] [babylonhealth/certificate-transparency-android](https://github.com/babylonhealth/certificate-transparency-android) Certificate transparency for Android and Java
+- [**116**星][8m] [C++] [ze0r/cve-2018-8639-exp](https://github.com/ze0r/cve-2018-8639-exp)
+- [**116**星][3y] [Py] [y1ng1996/f-scrack](https://github.com/y1ng1996/f-scrack)
+- [**116**星][1y] [Py] [xerub/idastuff](https://github.com/xerub/idastuff) 针对ARM处理器
+- [**116**星][1y] [Py] [victims/victims-cve-db](https://github.com/victims/victims-cve-db) CVE database store
+- [**116**星][10m] [C] [tylabs/quicksand_lite](https://github.com/tylabs/quicksand_lite) quicksand_lite:命令行工具,扫描 Office 文档 stream
+- [**116**星][27d] [PHP] [tide-emergency/yingji](https://github.com/tide-emergency/yingji) 应急相关内容积累
+- [**116**星][7m] [C] [tarlogicsecurity/tickey](https://github.com/tarlogicsecurity/tickey) Tool to extract Kerberos tickets from Linux kernel keys.
+- [**116**星][2y] [C#] [tandasat/dotnethooking](https://github.com/tandasat/dotnethooking) Sample use cases of the .NET native code hooking technique
+- [**116**星][1y] [Go] [t94j0/airmaster](https://github.com/t94j0/airmaster) Use ExpiredDomains.net and BlueCoat to find useful domains for red team.
+- [**116**星][2y] [C++] [skylined/edgedbg](https://github.com/skylined/edgedbg) A simple command line exe to start and debug the Microsoft Edge browser.
+- [**116**星][3m] [Shell] [shubhampathak/autosetup](https://github.com/shubhampathak/autosetup) Auto setup is a bash script compatible with Debian based distributions to install and setup necessary programs.
+- [**116**星][3y] [Py] [shiva-spampot/shiva](https://github.com/shiva-spampot/shiva) Spam Honeypot with Intelligent Virtual Analyzer
+- [**116**星][5m] [Py] [servian/aws-auto-remediate](https://github.com/servian/aws-auto-remediate) Open source application to instantly remediate common security issues through the use of AWS Config
+- [**116**星][7y] [C] [secmobi/amatutor](https://github.com/secmobi/amatutor) Android恶意代码分析教程
+- [**116**星][4m] [PS] [roflsandwich/chrome-password-dumper](https://github.com/roflsandwich/chrome-password-dumper)
+- [**116**星][1y] [C] [nospaceships/raw-socket-sniffer](https://github.com/nospaceships/raw-socket-sniffer) Packet capture on Windows without a kernel driver
+- [**116**星][11d] [Java] [nccgroup/decoder-improved](https://github.com/nccgroup/decoder-improved) Improved decoder for Burp Suite
+- [**116**星][6m] [Shell] [moreseclab/ddg_malware_clean_tool](https://github.com/moreseclab/ddg_malware_clean_tool) Watchdogs 、kthrotlds 挖矿蠕虫清理脚本。
+- [**116**星][12m] [C++] [melonwxd/elfhooker](https://github.com/melonwxd/elfhooker) 兼容Android 32位和64位。基于EFL文件格式Hook的demo,hook了SurfaceFlinger进程的eglSwapBuffers函数,替换为new_eglSwapBuffers
+- [**116**星][1m] [Py] [markmckinnon/autopsy-plugins](https://github.com/markmckinnon/autopsy-plugins) Autopsy Python Plugins
+- [**116**星][4y] [Py] [mandatoryprogrammer/xsshunter_client](https://github.com/mandatoryprogrammer/xsshunter_client) Correlated injection proxy tool for XSS Hunter
+- [**116**星][9m] [C#] [linhlhq/cve-2019-0604](https://github.com/linhlhq/cve-2019-0604) CVE-2019-0604
+- [**116**星][1y] [Py] [landgrey/cve-2018-2894](https://github.com/landgrey/cve-2018-2894) CVE-2018-2894 WebLogic Unrestricted File Upload Lead To RCE Check Script
+- [**116**星][17d] [C#] [joelverhagen/torsharp](https://github.com/joelverhagen/torsharp) Use Tor for your C# HTTP clients. Tor + Privoxy =
+- [**116**星][1y] [Py] [jin10086/ico-spider](https://github.com/jin10086/ico-spider) download ICO source code from etherscan
+- [**116**星][2y] [C++] [iaik/drama](https://github.com/iaik/drama) This repository contains examples of DRAMA reverse-engineering and side-channel attacks
+- [**116**星][1y] [Py] [graniet/inspector](https://github.com/graniet/inspector) The Inspector tool is a privilege escalation helper (PoC), easy to deployed on web server, this tool can list process running with root, check kernel version, check history file, get possible exploit ...
+- [**116**星][1m] [govanguard/list-pentest-tools](https://github.com/govanguard/list-pentest-tools) A curated list of network penetration testing tools.
+- [**116**星][3y] [C] [gdabah/distormx](https://github.com/gdabah/distormx) The ultimate hooking library
+- [**116**星][2y] [Go] [evilsocket/dirsearch](https://github.com/evilsocket/dirsearch) A Go implementation of dirsearch.
+- [**116**星][2y] [Java] [dannagle/packetsender-android](https://github.com/dannagle/packetsender-android) Packet Sender for Android, Send/Receive UDP/TCP
+- [**116**星][11m] [C] [d00rt/emotet_research](https://github.com/d00rt/emotet_research) documentation about the packer of Emotet and its unpacker.
+- [**116**星][4y] [C++] [critters/twang](https://github.com/critters/twang) Arduino-based 1D dungeon crawler
+- [**116**星][5d] [C] [cr4sh/s6_pcie_microblaze](https://github.com/cr4sh/s6_pcie_microblaze) PCI Express DIY hacking toolkit for Xilinx SP605
+- [**116**星][2y] [Py] [coffeehb/struts2_check](https://github.com/coffeehb/struts2_check) 一个用于识别目标网站是否采用Struts2框架开发的工具demo
+- [**116**星][9y] [C] [chaoslawful/tcc](https://github.com/chaoslawful/tcc) track of Tiny C Compiler
+- [**116**星][8y] [PHP] [cdhowie/bitcoin-mining-proxy](https://github.com/cdhowie/bitcoin-mining-proxy) Multi-pool, multi-worker proxy for Bitcoin miners, supporting long polling and pool failover
+- [**116**星][6y] [caomulaodao/xss-filter-evasion-cheat-sheet-cn](https://github.com/caomulaodao/xss-filter-evasion-cheat-sheet-cn) XSS_Filter_Evasion_Cheat_Sheet 中文版
+- [**116**星][1y] [JS] [brannondorsey/distributed-password-cracking](https://github.com/brannondorsey/distributed-password-cracking) Borrow CPU cycles from visitor's web browsers to crack MD5 password hashes
+- [**116**星][17d] [C++] [b4rtik/metasploit-execute-assembly](https://github.com/b4rtik/metasploit-execute-assembly) Custom Metasploit post module to executing a .NET Assembly from Meterpreter session
+- [**116**星][9m] [Py] [ambionics/magento-exploits](https://github.com/ambionics/magento-exploits) Exploits for Magento 2.3.0 and lower
+- [**116**星][14d] [CMake] [abhi-r3v0/evabs](https://github.com/abhi-r3v0/evabs) An open source Android application that is intentionally vulnerable so as to act as a learning platform for Android application security beginners.
+- [**115**星][4y] [C++] [cisco-talos/tesladecrypt](https://github.com/Cisco-Talos/TeslaDecrypt) Decryption Tool
+- [**115**星][1y] [Py] [vallejocc/reverse-engineering-arsenal](https://github.com/vallejocc/Reverse-Engineering-Arsenal) 逆向脚本收集
+ - [WinDbg](https://github.com/vallejocc/Reverse-Engineering-Arsenal/blob/master/WinDbg) Windbg脚本收集
+ - [IDA-set_symbols_for_addresses](https://github.com/vallejocc/Reverse-Engineering-Arsenal/blob/master/IDA/set_symbols_for_addresses.py) 遍历所有区段查找与指定的(地址,符号)匹配的DWORD地址,并将对应地址的值命名
+ - [IDA-stack_strings_deobfuscator_1](https://github.com/vallejocc/Reverse-Engineering-Arsenal/blob/master/IDA/stack_strings_deobfuscator_1.py) 反混淆栈字符串
+ - [RevealPE](https://github.com/vallejocc/Reverse-Engineering-Arsenal/tree/master/Standalone/RevealPE)
+- [**115**星][3y] [C++] [yanncam/exe2powershell](https://github.com/yanncam/exe2powershell) exe2powershell - exe2bat reborn for modern Windows
+- [**115**星][8m] [Py] [woj-ciech/pepe](https://github.com/woj-ciech/pepe) Collect information about email addresses from Pastebin
+- [**115**星][1y] [Shell] [wknapik/vpnfailsafe](https://github.com/wknapik/vpnfailsafe) IP leak prevention for OpenVPN
+- [**115**星][2y] [Py] [williballenthin/process-forest](https://github.com/williballenthin/process-forest) Reconstruct process trees from event logs
+- [**115**星][12m] [HTML] [wifiphisher/extra-phishing-pages](https://github.com/wifiphisher/extra-phishing-pages) Community-built scenarios for Wifiphisher
+- [**115**星][11m] [Py] [webbreacher/tilde_enum](https://github.com/webbreacher/tilde_enum) Takes a URL and checks the system for the tilde enum vuln and then find the files.
+- [**115**星][1y] [Py] [verctor/cs_xor64](https://github.com/verctor/cs_xor64) cobaltstrike xor64.bin补完计划
+- [**115**星][2y] [C] [valentinbreiz/ps4-linux-loader](https://github.com/valentinbreiz/ps4-linux-loader) A simple payload that let you run Linux on your 4.05 / 4.55 / 5.01 / 5.05 PS4
+- [**115**星][19d] [Shell] [therealsaumil/armx](https://github.com/therealsaumil/armx) ARM-X Firmware Emulation Framework
+- [**115**星][1y] [Shell] [theflakes/ultimate-forensics-vm](https://github.com/theflakes/ultimate-forensics-vm) Evolving directions on building the best Open Source Forensics VM
+- [**115**星][8m] [AppleScript] [rtrouton/payload-free-package-creator](https://github.com/rtrouton/payload-free-package-creator)
+- [**115**星][2y] [Py] [penafieljlm/inquisitor](https://github.com/penafieljlm/inquisitor) Opinionated organisation-centric OSINT footprinting inspired from recon-ng and Maltego
+- [**115**星][3y] [Java] [njfox/java-deserialization-exploit](https://github.com/njfox/java-deserialization-exploit)
+- [**115**星][5m] [Py] [n4nu/reversing-challenges-list](https://github.com/n4nu/reversing-challenges-list) CTF Reversing Challenges List
+- [**115**星][5d] [C#] [metalnem/sharpfuzz](https://github.com/metalnem/sharpfuzz) AFL-based fuzz testing for .NET
+- [**115**星][3y] [Java] [mbechler/serianalyzer](https://github.com/mbechler/serianalyzer) A static byte code analyzer for Java deserialization gadget research
+- [**115**星][2y] [Ruby] [m4sc3r4n0/avoidz](https://github.com/m4sc3r4n0/avoidz) Avoidz tool to bypass most A.V softwares
+- [**115**星][11m] [Py] [lucifer1993/alb](https://github.com/lucifer1993/alb) 攻击日志分析工具
+- [**115**星][3y] [C++] [lcatro/vuln_javascript](https://github.com/lcatro/vuln_javascript) 模拟一个存在漏洞的JavaScript 运行环境,用来学习浏览器漏洞原理和练习如何编写Shellcode (a JavaScript Execute Envirment which study browser vuln and how to write Shellcode ) ..
+- [**115**星][6d] [Py] [kmkz/exploit](https://github.com/kmkz/exploit) Exploits and advisories
+- [**115**星][1y] [Py] [khast3x/offensive-dockerfiles](https://github.com/khast3x/offensive-dockerfiles) Offensive tools as Dockerfiles. Lightweight & Ready to go
+- [**115**星][1m] [Py] [jpdias/botnet-lab](https://github.com/jpdias/botnet-lab) An IRC based tool for testing the capabilities of a botnet.
+- [**115**星][2y] [Py] [jko/nsearch](https://github.com/jko/nsearch) minimal script to help find script into the nse database
+- [**115**星][6y] [C#] [jerryhoff/webgoat.net](https://github.com/jerryhoff/webgoat.net) OWASP WebGoat.NET
+- [**115**星][3m] [PS] [jcqsteven/ghosttunnel](https://github.com/jcqsteven/ghosttunnel) 基于360提出的Ghost Tunnel攻击复现
+- [**115**星][1y] [C] [jas502n/cve-2018-17182](https://github.com/jas502n/cve-2018-17182) Linux 内核VMA-UAF 提权漏洞(CVE-2018-17182),0day
+- [**115**星][1y] [Py] [jamesjgoodwin/wreckuests](https://github.com/jamesjgoodwin/wreckuests) Wreckuests — yet another one hard-hitting tool to run DDoS atacks with HTTP-flood
+- [**115**星][9y] [C] [ice799/ltrace](https://github.com/ice799/ltrace) ltrace intercepts and records dynamic library calls which are called by an executed process and the signals received by that process. It can also intercept and print the system calls executed by the program.
+- [**115**星][2y] [C] [harsaroopdhillon/spectreexploit](https://github.com/harsaroopdhillon/spectreexploit) SpectreExploit POC
+- [**115**星][5y] [Py] [h01/proxyscanner](https://github.com/h01/proxyscanner) python HTTP代理扫描
+- [**115**星][8m] [C] [govolution/avepoc](https://github.com/govolution/avepoc) avepoc:一些免杀的 poc
+- [**115**星][2y] [gfwlist/tinylist](https://github.com/gfwlist/tinylist) Tiny version of gfwlist, focusing on common websites ONLY
+- [**115**星][12m] [PS] [fox-it/invoke-credentialphisher](https://github.com/fox-it/invoke-credentialphisher)
+- [**115**星][4y] [JS] [demi6od/chromefuzzer](https://github.com/demi6od/chromefuzzer) fuzz
+- [**115**星][2y] [Py] [cantoolz/cantoolz](https://github.com/cantoolz/cantoolz) CANToolz - Black-box CAN network analysis framework
+- [**115**星][3y] [C] [c0d3z3r0/sudo-cve-2017-1000367](https://github.com/c0d3z3r0/sudo-cve-2017-1000367)
+- [**115**星][3y] [Batchfile] [bartblaze/disable-intel-amt](https://github.com/bartblaze/disable-intel-amt) Windows系统禁用AMT
+- [**115**星][4m] [Java] [andprox/andprox](https://github.com/andprox/andprox) Native Android Proxmark3 client (no root required)
+- [**115**星][1m] [JS] [acmbvp/hacktoberfest](https://github.com/acmbvp/hacktoberfest) Make your first PR! ~ A beginner friendly repository made specifically for open source beginners. Add your profile, a blog or any program under any language (it can be anything from a hello-world program to a complex data structure algorithm) or update the existing one. Just make sure to add the file under the correct directory. Happy hacking!
+- [**115**星][3m] [Py] [360netlab/dga](https://github.com/360netlab/dga) Suspicious DGA from PDNS and Sandbox.
+- [**114**星][8y] [C++] [moxie0/tortunnel](https://github.com/moxie0/tortunnel) A partial Onion Proxy implementation that's designed to build single-hop circuits through Tor exit nodes
+- [**114**星][1y] [Shell] [fox-it/linux-luks-tpm-boot](https://github.com/fox-it/linux-luks-tpm-boot) A guide for setting up LUKS boot with a key from TPM in Linux
+- [**114**星][5m] [PHP] [m0xiaoxi/ctf_web_docker](https://github.com/m0xiaoxi/ctf_web_docker) dockers for CTF_Web.
+- [**114**星][4d] [Py] [realsanjay/domainrecon](https://github.com/realsanjay/DomainRecon) Based on URL and Organization Name, collect the IP Ranges, subdomains using various tools like Amass, subfinder, etc.. And check for uphost and Run Masscan to grap CNAME entries, take the screenshot of all the found subdomains using WebScreeShot and more...
+- [**114**星][2y] [JS] [fsecurelabs/cve-2018-4121](https://github.com/FSecureLABS/CVE-2018-4121) macOS 10.13.3 (17D47) Safari Wasm Exploit
+- [**114**星][10m] [Ruby] [hdm/inetdata](https://github.com/hdm/inetdata) Internet data acquisition
+- [**114**星][11m] [C] [zombiecraig/uds-server](https://github.com/zombiecraig/uds-server) CAN UDS Simulator and Fuzzer
+- [**114**星][8d] [C] [zmrbak/pcwechathook](https://github.com/zmrbak/pcwechathook) 云课堂《2019 PC微信 探秘》示例代码
+- [**114**星][6d] [Rust] [zcash/librustzcash](https://github.com/zcash/librustzcash) Rust-language assets for Zcash
+- [**114**星][2y] [C] [xiphosresearch/netelf](https://github.com/xiphosresearch/netelf) Run executables from memory, over the network, on Windows, Linux, OpenVMS... routers... spaceships... toasters etc.
+- [**114**星][2y] [wpvsyou/mprop](https://github.com/wpvsyou/mprop) 修改Android prop脚本工具
+- [**114**星][2y] [C++] [waryas/eupmaccess](https://github.com/waryas/eupmaccess) This DKOM exploit enables any app in usermode to access physical memory directly
+- [**114**星][6m] [C#] [tyranid/canape.core](https://github.com/tyranid/canape.core) A network proxy library written in C# for .NET Core based on CANAPE
+- [**114**星][6y] [CSS] [syphon1c/threatelligence](https://github.com/syphon1c/threatelligence) Threatelligence is a simple cyber threat intelligence feed collector, using Elasticsearch, Kibana and Python to automatically collect intelligence from custom or public sources. Automatically updates feeds and tries to further enhance data for dashboards.
+- [**114**星][16d] [Java] [stringcare/androidlibrary](https://github.com/stringcare/androidlibrary) Android library to reveal or obfuscate strings and assets at runtime
+- [**114**星][6y] [spiderlabs/sqlol](https://github.com/spiderlabs/sqlol) A configurable SQL injection test-bed
+- [**114**星][2y] [Ruby] [skahwah/wordsmith](https://github.com/skahwah/wordsmith) The aim of Wordsmith is to assist with creating tailored wordlists. This is mostly based on geolocation.
+- [**114**星][11m] [Py] [saaramar/35c3_modern_windows_userspace_exploitation](https://github.com/saaramar/35c3_modern_windows_userspace_exploitation)
+- [**114**星][3y] [C] [rosgos/mirai-source-code](https://github.com/rosgos/mirai-source-code)
+- [**114**星][4y] [Perl] [reider-roque/pentest-tools](https://github.com/reider-roque/pentest-tools) Penetration testing scripts
+- [**114**星][4y] [Ruby] [patio11/wrightverification](https://github.com/patio11/wrightverification) (Failed) verification of the signature posted by Craig Wright on May 2, 2016
+- [**114**星][3y] [Java] [nil1666/auditdroid](https://github.com/nil1666/auditdroid) AduitDroid
+- [**114**星][15d] [C#] [mr-un1k0d3r/minidump](https://github.com/mr-un1k0d3r/minidump) alternative to procdump
+- [**114**星][6d] [Shell] [misp/misp-book](https://github.com/misp/misp-book) User guide of MISP
+- [**114**星][5m] [Py] [marcoramilli/malwaretrainingsets](https://github.com/marcoramilli/malwaretrainingsets) Free Malware Training Datasets for Machine Learning
+- [**114**星][1y] [C#] [malcomvetter/managedinjection](https://github.com/malcomvetter/managedinjection) A proof of concept for dynamically loading .net assemblies at runtime with only a minimal convention pre-knowledge
+- [**114**星][3y] [C#] [leurak/trollrat](https://github.com/leurak/trollrat) A remote trolling software mainly intended for Tech Support Scammers.
+- [**114**星][4y] [C] [kpwn/nullguard](https://github.com/kpwn/nullguard) kext kills all 32bit binaries lacking __PAGEZERO (required for exploitation of kernel NULL derefs)
+- [**114**星][2y] [JS] [jaimehgb/raiwebwallet](https://github.com/jaimehgb/raiwebwallet) Raiblocks raiwallet.com wallet source code
+- [**114**星][3m] [Go] [eaglexiang/eagle.tunnel.go](https://github.com/eaglexiang/eagle.tunnel.go) 稳定的代理工具,比.NET版本更轻量和易用
+- [**114**星][7m] [PS] [dviros/excalibur](https://github.com/dviros/excalibur) Excalibur is an Eternalblue exploit payload based "Powershell" for the Bashbunny project.
+- [**114**星][2y] [Py] [dragon2fly/vpngate-with-proxy](https://github.com/dragon2fly/vpngate-with-proxy) vpn gate client for linux, be able to connect to open vpn server through proxy
+- [**114**星][6y] [Py] [digital4rensics/malformity](https://github.com/digital4rensics/malformity) Malformity is a Maltego project based on the Canari framework for malicious binary and infrastructure research.
+- [**114**星][2m] [Shell] [darkerego/mips-binaries](https://github.com/darkerego/mips-binaries) Various binaries for the mips architecture.
+- [**114**星][4y] [Py] [danmcinerney/wifi-monitor](https://github.com/danmcinerney/wifi-monitor) Prints the IPs on your local network that're sending the most packets
+- [**114**星][2d] [Shell] [concourse/git-resource](https://github.com/concourse/git-resource) tracks commits in a branch of a Git repository
+- [**114**星][4m] [JS] [baronpan/sysmonhunter](https://github.com/baronpan/sysmonhunter) An easy ATT&CK-based Sysmon hunting tool, showing in Blackhat USA 2019 Arsenal
+- [**114**星][4y] [Shell] [anbud/droidducky](https://github.com/anbud/droidducky) SImple duckyscript interpreter in Bash.
+- [**114**星][2y] [Ruby] [airbus-seclab/warbirdvm](https://github.com/airbus-seclab/warbirdvm) An analysis of the Warbird virtual-machine protection for the CI!g_pStore
+- [**114**星][1y] [Py] [abhinavbom/threat-intelligence-hunter](https://github.com/abhinavbom/threat-intelligence-hunter) TIH is an intelligence tool that helps you in searching for IOCs across multiple openly available security feeds and some well known APIs. The idea behind the tool is to facilitate searching and storing of frequently added IOCs for creating your own local database of indicators.
+- [**114**星][9m] [C] [a13xp0p0v/kernel-hack-drill](https://github.com/a13xp0p0v/kernel-hack-drill) Linux kernel exploitation experiments
+- [**113**星][7m] [Py] [decalage2/olefile](https://github.com/decalage2/olefile) olefile is a Python package to parse, read and write Microsoft OLE2 files (also called Structured Storage, Compound File Binary Format or Compound Document File Format), such as Microsoft Office 97-2003 documents, vbaProject.bin in MS Office 2007+ files, Image Composer and FlashPix files, Outlook messages, StickyNotes, several Microscopy file fo…
+- [**113**星][3y] [wtsxdev/vehicle-security](https://github.com/wtsxdev/vehicle-security) List of resources for learning about vehicle security and car hacking
+- [**113**星][2m] [C#] [infosecn1nja/sharpdoor](https://github.com/infosecn1nja/sharpdoor) SharpDoor is alternative RDPWrap written in C# to allowed multiple RDP (Remote Desktop) sessions by patching termsrv.dll file.
+- [**113**星][9d] [portswigger/xss-cheatsheet-data](https://github.com/portswigger/xss-cheatsheet-data) This repository contains all the XSS cheatsheet data to allow contributions from the community.
+- [**113**星][5y] [Py] [nccgroup/zulu](https://github.com/nccgroup/zulu) The Zulu fuzzer
+- [**113**星][3y] [Objective-C++] [yonsm/ipafine](https://github.com/yonsm/ipafine) iOS IPA package refine and resign
+- [**113**星][4y] [C] [wireshark/winpcap](https://github.com/wireshark/winpcap) The WinPcap packet capture library. Pull requests will be ignored. Please upload changes to
+- [**113**星][4m] [we5ter/flerken](https://github.com/we5ter/flerken) A Solution For Cross-Platform Obfuscated Commands Detection
+- [**113**星][1y] [Py] [securityclippy/elasticintel](https://github.com/securityclippy/elasticintel) Serverless, low cost, threat intel aggregation for enterprise or personal use, backed by ElasticSearch.
+- [**113**星][1y] [C++] [scgywx/fooking](https://github.com/scgywx/fooking) distributed gateway server(php game server, tcp server, websocket server)
+- [**113**星][1y] [Shell] [peterpt/eternal_check](https://github.com/peterpt/eternal_check) 检查指定IP是否有某些SMB漏洞, 比如永恒之蓝. 基于nmap
+- [**113**星][23d] [Py] [p4-team/crypto-commons](https://github.com/p4-team/crypto-commons) Small python module for common CTF crypto functions
+- [**113**星][1m] [C#] [oj/clr-meterpreter](https://github.com/oj/clr-meterpreter) The full story of the CLR implementation of Meterpreter
+- [**113**星][10m] [HTML] [mpgn/byp-sop](https://github.com/mpgn/byp-sop) 🏴☠️ Bypass Same Origin Policy with DNS-rebinding to retrieve local server files 🏴☠️
+- [**113**星][2y] [JS] [landgrey/dnstricker](https://github.com/landgrey/dnstricker) A simple dns resolver of dns-record and web-record log server for pentesting
+- [**113**星][7m] [C] [jakkarth/icmptx](https://github.com/jakkarth/icmptx) IP-over-ICMP tunnel
+- [**113**星][5m] [Java] [guardianproject/iocipher](https://github.com/guardianproject/iocipher) make non-root mountable encrypted disk shares
+- [**113**星][3y] [PS] [fuzzysecurity/defcon24](https://github.com/fuzzysecurity/defcon24) DefCon24
+- [**113**星][10m] [Py] [fupinglee/mypython](https://github.com/fupinglee/mypython) 一些常用的Python脚本
+- [**113**星][7m] [fabionoth/awesome-cyber-security](https://github.com/fabionoth/awesome-cyber-security) A collection of awesome software, libraries, documents, books, resources and cools stuffs about security.
+- [**113**星][3y] [Py] [exodusintel/disclosures](https://github.com/exodusintel/disclosures) all of Exodus Intelligence's disclosure material
+- [**113**星][4y] [Java] [evilsocket/pdusms](https://github.com/evilsocket/pdusms) PoC app for raw pdu manipulation on Android.
+- [**113**星][6y] [edthamm/lootbooty](https://github.com/edthamm/lootbooty) WIreless Hacking Tools
+- [**113**星][7m] [Visual Basic .NET] [dzzie/comraider](https://github.com/dzzie/comraider) ActiveX Fuzzing tool with GUI, object browser, system scanner, and distributed auditing capabilities
+- [**113**星][6m] [Py] [drego85/joomlascan](https://github.com/drego85/joomlascan) A free software to find the components installed in Joomla CMS, built out of the ashes of Joomscan.
+- [**113**星][8m] [C++] [dragonquesthero/pubg-pak-hacker](https://github.com/dragonquesthero/pubg-pak-hacker) 使用Windows内核驱动隐藏文件及自身,绕过BE
+- [**113**星][11d] [Shell] [diladele/websafety](https://github.com/diladele/websafety) Simple and powerful web filter for HTTP and HTTPS traffic
+- [**113**星][5y] [Shell] [denny0223/scrabble](https://github.com/denny0223/scrabble) Simple tool to recover .git folder from remote server
+- [**113**星][5m] [C#] [decoder-it/powershellveryless](https://github.com/decoder-it/powershellveryless) Constrained Language Mode + AMSI bypass all in one
+- [**113**星][4y] [C++] [chengchengcc/ark-tools](https://github.com/chengchengcc/ark-tools) Windows Ark 工具的工程和一些demo
+- [**113**星][2m] [bugcrowd/disclosure-policy](https://github.com/bugcrowd/disclosure-policy) Open Source Vulnerability Disclosure Framework. Maintained by Bugcrowd.
+- [**113**星][3y] [Py] [bjmayor/hacker](https://github.com/bjmayor/hacker) python绝技:运用python成为顶级黑客 这本书的源码
+- [**112**星][6m] [PS] [nsacyber/nsacyber.github.io](https://github.com/nsacyber/nsacyber.github.io) NSA Cybersecurity. Formerly known as NSA Information Assurance and the Information Assurance Directorate
+- [**112**星][6m] [v2rayv3/v2ray-sspanel-v3-mod_uim-plugin](https://github.com/v2rayv3/v2ray-sspanel-v3-mod_uim-plugin)
+- [**112**星][1m] [Py] [prodigysml/dr.-watson](https://github.com/prodigysml/dr.-watson) Dr. Watson is a simple Burp Suite extension that helps find assets, keys, subdomains, IP addresses, and other useful information! It's your very own discovery side kick, the Dr. Watson to your Sherlock!
+- [**112**星][2m] [C++] [outflanknl/recon-ad](https://github.com/outflanknl/recon-ad) Recon-AD, an AD recon tool based on ADSI and reflective DLL’s
+- [**112**星][9m] [HTML] [xuechiyaobai/cve-2017-7092-poc](https://github.com/xuechiyaobai/CVE-2017-7092-PoC) This is the Pwn2Own 2017 Safari backup vul's exploit.
+- [**112**星][2y] [Py] [simplysecurity/simplytemplate](https://github.com/SimplySecurity/SimplyTemplate) Phishing Template Generation Made Easy
+- [**112**星][2y] [Py] [fsecurelabs/drozer-modules](https://github.com/FSecureLABS/drozer-modules) leading security testing framework for Android.
+- [**112**星][8m] [PHP] [xplico/xplico](https://github.com/xplico/xplico) Open Source Network Forensic Analysis Tool (NFAT)
+- [**112**星][3m] [C++] [x64dbg/scripts](https://github.com/x64dbg/scripts) A collection of x64dbg scripts. Feel free to submit a pull request to add your script.
+- [**112**星][9m] [Py] [williballenthin/evtxtract](https://github.com/williballenthin/evtxtract) EVTXtract recovers and reconstructs fragments of EVTX log files from raw binary data, including unallocated space and memory images.
+- [**112**星][1y] [C] [vusec/hammertime](https://github.com/vusec/hammertime) a software suite for testing, profiling and simulating the Rowhammer DRAM defect, built on top of the RAMSES address translation library.
+- [**112**星][8m] [Py] [tkisason/unhash](https://github.com/tkisason/unhash) unhash is a set of tools designed to enable better password auditing
+- [**112**星][6m] [Vue] [tevora-threat/dragnet](https://github.com/tevora-threat/dragnet) Your Social Engineering Sidekick
+- [**112**星][7y] [Py] [sroberts/malwarehouse](https://github.com/sroberts/malwarehouse) A warehouse for your malware
+- [**112**星][2y] [Py] [sithis993/crypter](https://github.com/sithis993/crypter) Crypter - Python-based builder and ransomware compiled to Windows executable using PyInstaller
+- [**112**星][6m] [Py] [ruped24/killchain](https://github.com/ruped24/killchain) A unified console to perform the "kill chain" stages of attacks.
+- [**112**星][11m] [C] [rup0rt/pcapfix](https://github.com/rup0rt/pcapfix) repair corrupted pcap files
+- [**112**星][1y] [ridter/cs_chinese_support](https://github.com/ridter/cs_chinese_support) Cobalt strike 修改支持回显中文。
+- [**112**星][10m] [Py] [plazmaz/sublist3r](https://github.com/plazmaz/sublist3r) Fast subdomains enumeration tool for penetration testers
+- [**112**星][2y] [Shell] [pimps/wsuxploit](https://github.com/pimps/wsuxploit) wsuxploit:MiTM 漏洞利用脚本,用于将“假冒”更新注入到非 SSL WSUS 流量中
+- [**112**星][2y] [Py] [orange-cyberdefense/fenrir-ocd](https://github.com/orange-cyberdefense/fenrir-ocd)
+- [**112**星][11m] [C] [opsxcq/docker-tor-hiddenservice-nginx](https://github.com/opsxcq/docker-tor-hiddenservice-nginx) Easily setup a hidden service inside the Tor network
+- [**112**星][5y] [opendns/public-domain-lists](https://github.com/opendns/public-domain-lists) OpenDNS public domain lists of domain names for training/testing classifiers
+- [**112**星][6m] [C++] [nospaceships/node-raw-socket](https://github.com/nospaceships/node-raw-socket) Raw sockets for Node.js.
+- [**112**星][3y] [netbiosx/pentest-bookmarks](https://github.com/netbiosx/pentest-bookmarks) Database of websites for penetration testing
+- [**112**星][3y] [Py] [mthbernardes/artlas](https://github.com/mthbernardes/artlas) Apache Real Time Logs Analyzer System
+- [**112**星][6y] [C] [mncoppola/rpef](https://github.com/mncoppola/rpef) Abstracts and expedites the process of backdooring stock firmware images for consumer/SOHO routers
+- [**112**星][6d] [Java] [mkopylec/charon-spring-boot-starter](https://github.com/mkopylec/charon-spring-boot-starter) Reverse proxy implementation in form of a Spring Boot starter.
+- [**112**星][5y] [C] [mirror/reactos](https://github.com/mirror/reactos) svn://svn.reactos.org/reactos/trunk
+- [**112**星][8m] [marcosvalle/awesome-windows-red-team](https://github.com/marcosvalle/awesome-windows-red-team) A curated list of awesome Windows frameworks, libraries, software and resources for Red Teams
+- [**112**星][4y] [Java] [ledgerhq/ledger-javacard](https://github.com/ledgerhq/ledger-javacard) Ledger Unplugged - Java Card implementation of Ledger Bitcoin Hardware Wallet
+- [**112**星][29d] [Py] [hivesolutions/netius](https://github.com/hivesolutions/netius) Readable, simple and fast asynchronous non-blocking network apps
+- [**112**星][12m] [JS] [google/csp-evaluator](https://github.com/google/csp-evaluator) check if a Content Security Policy (CSP) serves as a strong mitigation against cross-site scripting attacks
+- [**112**星][11m] [Py] [ghost123gg/wep](https://github.com/ghost123gg/wep) A generator to weaponize Macro payloads that can evade EMET and utilises native VB migration.
+- [**112**星][1y] [funnykun/nessusreportinchinese](https://github.com/funnykun/nessusreportinchinese) 半自动化将 Nessus 英文报告(csv格式)生成中文 excel ,中文漏洞库已有700多条常见漏洞,后续再进一步加上新漏洞自动翻译,实现全自动化
+- [**112**星][4y] [Py] [ddcc/microparse](https://github.com/ddcc/microparse) Microcode parser for AMD, Intel, and VIA processors
+- [**112**星][3y] [C++] [brock7/xdbg](https://github.com/brock7/xdbg) Open-source user-mode Anti-Anti-Debug plugin for x64dbg & cheatengine.
+- [**112**星][1y] [Py] [blueudp/dorkme](https://github.com/blueudp/dorkme) [WORKING IN V2, WITH PROXIES, CUSTOM USER AGENT... TO MUCH BETTER!]DorkMe is a tool designed with the purpose of making easier the searching of vulnerabilities with Google Dorks, such as SQL Injection vulnerabilities.
+- [**112**星][7m] [C++] [arno0x/tcprelayinjecter](https://github.com/arno0x/tcprelayinjecter) Tool for injecting a "TCP Relay" managed assembly into unmanaged processes
+- [**112**星][4y] [Py] [androidsecuritytools/lobotomy](https://github.com/androidsecuritytools/lobotomy) Android Security Toolkit
+- [**112**星][6m] [Py] [andreafioraldi/angrgdb](https://github.com/andreafioraldi/angrgdb) Use angr inside GDB. Create an angr state from the current debugger state.
+- [**112**星][1y] [Py] [alienvault-otx/yabin](https://github.com/alienvault-otx/yabin) A Yara rule generator for finding related samples and hunting
+- [**112**星][4y] [C++] [agwa/titus](https://github.com/agwa/titus) Totally Isolated TLS Unwrapping Server
+- [**112**星][5y] [C++] [adamkramer/dll_hijack_detect](https://github.com/adamkramer/dll_hijack_detect) Detects DLL hijacking in running processes on Windows systems
+- [**112**星][2y] [Py] [0x27/gitpass](https://github.com/0x27/gitpass) Open Source Your Password (Mismanagement)!
+- [**111**星][12d] [Java] [tidesec/decrypt_weblogic_password](https://github.com/tidesec/decrypt_weblogic_password) 搜集了市面上绝大部分weblogic解密方式,整理了7种解密weblogic的方法及响应工具。
+- [**111**星][6y] [Ruby] [spiderlabs/beef_injection_framework](https://github.com/spiderlabs/beef_injection_framework) Inject beef hooks into HTTP traffic and track hooked systems from cmdline
+- [**111**星][10d] [CSS] [woj-ciech/kamerka-gui](https://github.com/woj-ciech/kamerka-gui) Ultimate Internet of Things/Industrial Control Systems reconnaissance tool.
+- [**111**星][4y] [C] [nsacyber/maplesyrup](https://github.com/nsacyber/Maplesyrup) Assesses CPU security of embedded devices. #nsacyber
+- [**111**星][7m] [Py] [w-digital-scanner/w12scan-client](https://github.com/w-digital-scanner/w12scan-client) 网络资产搜索发现引擎,w12scan 扫描端程序
+- [**111**星][4m] [C] [zyw-200/firmafl](https://github.com/zyw-200/firmafl) FIRM-AFL is the first high-throughput greybox fuzzer for IoT firmware.
+- [**111**星][6m] [Py] [webarx-security/wpbullet](https://github.com/webarx-security/wpbullet) A static code analysis for WordPress (and PHP)
+- [**111**星][3y] [PS] [vletoux/ntlminjector](https://github.com/vletoux/ntlminjector) In case you didn't now how to restore the user password after a password reset (get the previous hash with DCSync)
+- [**111**星][2y] [Py] [tothi/pwn-hisilicon-dvr](https://github.com/tothi/pwn-hisilicon-dvr)
+- [**111**星][1y] [Py] [seifreed/malware-scripts](https://github.com/seifreed/malware-scripts) Useful scripts related with malware
+- [**111**星][5m] [Py] [sagehack/cloud-buster](https://github.com/sagehack/cloud-buster) A Cloudflare resolver that works
+- [**111**星][17d] [Clojure] [rm-hull/lein-nvd](https://github.com/rm-hull/lein-nvd) National Vulnerability Database dependency-checker plugin for Leiningen
+- [**111**星][2y] [Perl] [raikia/smbcrunch](https://github.com/raikia/smbcrunch) 3 tools that work together to simplify reconaissance of Windows File Shares
+- [**111**星][7m] [C++] [praetorian-code/vulcan](https://github.com/praetorian-code/vulcan) a tool to make it easy and fast to test various forms of injection
+- [**111**星][2y] [C] [openjailbreak/evasi0n6](https://github.com/openjailbreak/evasi0n6) Evasi0n6 Jailbreak by Evad3rs for iOS 6.0-6.1.2
+- [**111**星][12m] [PHP] [ollyxar/php-malware-detector](https://github.com/ollyxar/php-malware-detector) PHP malware detector
+- [**111**星][2m] [Py] [nu1lctf/n1ctf-2019](https://github.com/nu1lctf/n1ctf-2019)
+- [**111**星][11m] [Shell] [mi-al/wifi-autopwner](https://github.com/mi-al/wifi-autopwner) script to automate searching and auditing Wi-Fi networks with weak security
+- [**111**星][5m] [Shell] [merces/bashacks](https://github.com/merces/bashacks) Set of functions to increase productivity while hacking with Bash
+- [**111**星][4y] [C] [mariovilas/shellcode_tools](https://github.com/mariovilas/shellcode_tools) Miscellaneous tools written in Python, mostly centered around shellcodes.
+- [**111**星][2y] [Go] [lloydlabs/elf-strings](https://github.com/lloydlabs/elf-strings) read an ELF binary's string sections within a given binary. This is meant to be much like the strings UNIX utility, however is purpose built for ELF binaries.
+- [**111**星][7m] [Shell] [leviathan36/trigmap](https://github.com/leviathan36/trigmap) A wrapper for Nmap to automate penetration testing
+- [**111**星][2y] [Py] [lcatro/php_source_audit_tools](https://github.com/lcatro/php_source_audit_tools) PHP 白盒分析工具,结合AST 和数据流跟踪分析代码,达到自动化白盒审计功能
+- [**111**星][3y] [Py] [kudelskisecurity/sgxfun](https://github.com/kudelskisecurity/sgxfun) SGX command-line tools and paper
+- [**111**星][3m] [Java] [kakawait/cas-security-spring-boot-starter](https://github.com/kakawait/cas-security-spring-boot-starter) Spring boot starter for Apereo CAS client fully integrated with Spring security
+- [**111**星][11m] [C] [ionescu007/hdk](https://github.com/ionescu007/hdk) (unofficial) Hyper-V® Development Kit
+- [**111**星][6y] [CSS] [httphacker/gethead](https://github.com/httphacker/gethead) HTTP Header Analysis Vulnerability Tool
+- [**111**星][1y] [Py] [hook-s3c/cve-2018-11776-python-poc](https://github.com/hook-s3c/cve-2018-11776-python-poc) Working Python test and PoC for CVE-2018-11776, includes Docker lab
+- [**111**星][2y] [Py] [hook-s3c/blueborne-scanner](https://github.com/hook-s3c/blueborne-scanner) Bluetooth scanner for local devices that may be vulnerable to Blueborne exploit
+- [**111**星][25d] [C#] [gaprogman/owaspheaders.core](https://github.com/gaprogman/owaspheaders.core) A .NET Core middleware for injecting the Owasp recommended HTTP Headers for increased security
+- [**111**星][16d] [Py] [flyingcircusio/vulnix](https://github.com/flyingcircusio/vulnix) Vulnerability (CVE) scanner for Nix/NixOS.
+- [**111**星][1y] [Java] [despector/despector](https://github.com/despector/despector) Java / Kotlin Decompiler and AST Library
+- [**111**星][1y] [C#] [damonmohammadbagher/meterpreter_payload_detection](https://github.com/damonmohammadbagher/meterpreter_payload_detection) Meterpreter_Payload_Detection.exe tool for detecting Meterpreter in memory like IPS-IDS and Forensics tool
+- [**111**星][3y] [Py] [cornell-brg/pydgin](https://github.com/cornell-brg/pydgin) A (Py)thon (D)SL for (G)enerating (In)struction set simulators.
+- [**111**星][3y] [Py] [codepr/creak](https://github.com/codepr/creak) Poison, reset, spoof, redirect MITM script
+- [**111**星][2m] [checkmarx/js-scp](https://github.com/checkmarx/js-scp) JavaScript Secure Coding Practices guide
+- [**111**星][2y] [Py] [cfsworks/wavebird-reversing](https://github.com/cfsworks/wavebird-reversing) Reverse-engineering the WaveBird protocol for the betterment of mankind
+- [**111**星][2y] [Py] [cert-w/certitude](https://github.com/cert-w/certitude) The Seeker of IOC
+- [**111**星][2y] [carloop/simulator](https://github.com/carloop/simulator) CAN bus simulator on the Rasperry Pi
+- [**111**星][8d] [Py] [brieflyx/ctf-pwns](https://github.com/brieflyx/ctf-pwns) Some pwn challenges selected for training and education.
+- [**111**星][2m] [Py] [bishopfox/zigdiggity](https://github.com/bishopfox/zigdiggity) A ZigBee hacking toolkit by Bishop Fox
+- [**111**星][1y] [JS] [austintgriffith/bouncer-proxy](https://github.com/austintgriffith/bouncer-proxy) 👮🏻
+- [**111**星][7m] [PS] [audibleblink/gorsh](https://github.com/audibleblink/gorsh) A Golang Reverse Shell w/ a Tmux-driven psuedo-C2 Interface
+- [**111**星][3y] [PS] [arno0x/dnsdelivery](https://github.com/arno0x/dnsdelivery) DNSDelivery provides delivery and in memory execution of shellcode or .Net assembly using DNS requests delivery channel.
+- [**111**星][2y] [Shell] [adrelanos/vpn-firewall](https://github.com/adrelanos/vpn-firewall) Leak Protection (Fail Safe Mechanism) for (Open)VPN
+- [**110**星][1m] [C] [hasherezade/chimera_pe](https://github.com/hasherezade/chimera_pe) ChimeraPE (a PE injector type - alternative to: RunPE, ReflectiveLoader, etc) - a template for manual loading of EXE, loading imports payload-side
+- [**110**星][3m] [suricata-rules/suricata-rules](https://github.com/suricata-rules/suricata-rules) Suricata IDS rules
+- [**110**星][3m] [C++] [barakat/cve-2019-16098](https://github.com/barakat/cve-2019-16098) Local privilege escalation PoC exploit for CVE-2019-16098
+- [**110**星][1m] [Py] [yuawn/ctf](https://github.com/yuawn/CTF) CTF write-ups and some wargame sites write-ups.
+- [**110**星][2y] [optixal/cehv10-notes](https://github.com/Optixal/CEHv10-Notes)
+- [**110**星][8d] [Py] [bit4woo/code2sec.com](https://github.com/bit4woo/code2sec.com) xmind\code\articles for my personal blog 个人博客上的资源备份存储,也是个人分享的汇总
+- [**110**星][2y] [Smali] [xxxyanchenxxx/sigkill](https://github.com/xxxyanchenxxx/sigkill) 一键绕过App签名验证
+- [**110**星][2y] [Java] [x-ai/burpunlimitedre](https://github.com/x-ai/burpunlimitedre) This project !replace! BurpUnlimited of depend (BurpSutie version 1.7.27). It is NOT intended to replace them!
+- [**110**星][2y] [JS] [voidsec/webrtc-leak](https://github.com/voidsec/webrtc-leak) Check if your VPN leaks your IP address via the WebRTC technology
+- [**110**星][1y] [Py] [unixfreak0037/officeparser](https://github.com/unixfreak0037/officeparser) Extract embedded files and macros from office documents.
+- [**110**星][5m] [Go] [sudosammy/knary](https://github.com/sudosammy/knary) A simple HTTP(S) and DNS Canary bot with Slack/Discord/MS Teams & Pushover support
+- [**110**星][9m] [C] [strivexjun/memorymodulepp](https://github.com/strivexjun/memorymodulepp) Library to load a DLL from memory
+- [**110**星][2m] [C] [sipcapture/captagent](https://github.com/sipcapture/captagent) 100% Open-Source Packet Capture Agent for HEP
+- [**110**星][2d] [Go] [sero-cash/go-sero](https://github.com/sero-cash/go-sero) The Total Solution for Blockchain with Privacy Protecting
+- [**110**星][5y] [Ruby] [sensepost/heartbleed-poc](https://github.com/sensepost/heartbleed-poc) Test for SSL heartbeat vulnerability (CVE-2014-0160)
+- [**110**星][10d] [C] [scribery/tlog](https://github.com/scribery/tlog) Terminal I/O logger
+- [**110**星][3y] [Py] [samgranger/eqgrp](https://github.com/samgranger/eqgrp) Mirror
+- [**110**星][2y] [ObjC] [rozbo/ios-pubgm-hack](https://github.com/rozbo/ios-pubgm-hack) iOS吃鸡辅助
+- [**110**星][8m] [rose-compiler/rose-develop](https://github.com/rose-compiler/rose-develop) The latest development version of rose. It may not pass all regression tests.
+- [**110**星][17d] [PS] [dsccommunity/networkingdsc](https://github.com/dsccommunity/NetworkingDsc)
+- [**110**星][3y] [JS] [nccgroup/typofinder](https://github.com/nccgroup/typofinder) A finder of domain typos showing country of IP address
+- [**110**星][1y] [Shell] [mattymcfatty/honeypi](https://github.com/mattymcfatty/honeypi)
+- [**110**星][1y] [C#] [malcomvetter/csexec](https://github.com/malcomvetter/csexec) An implementation of PSExec in C#
+- [**110**星][8m] [C] [jwbensley/etherate](https://github.com/jwbensley/etherate) Linux CLI Ethernet and MPLS Testing Tool
+- [**110**星][2m] [PS] [jrentenaar/office-365-extractor](https://github.com/jrentenaar/office-365-extractor) The Office 365 Extractor is a tool that allows for complete and reliable extraction of the Unified Audit Log (UAL)
+- [**110**星][7y] [Py] [jgeralnik/pytroj](https://github.com/jgeralnik/pytroj) A tool for infected .pyc files with arbitrary code that spreads out to infect all other .pyc files
+- [**110**星][1m] [C] [hasherezade/chimera_pe](https://github.com/hasherezade/chimera_pe) ChimeraPE (a PE injector type - alternative to: RunPE, ReflectiveLoader, etc) - a template for manual loading of EXE, loading imports payload-side
+- [**110**星][3m] [Py] [h0nus/qrgen](https://github.com/h0nus/qrgen) Simple script for generating Malformed QRCodes.
+- [**110**星][3y] [JS] [fransr/template-generator](https://github.com/fransr/template-generator) A simple variable based template editor using handlebarjs+strapdownjs. The idea is to use variables in markdown based files to easily replace the variables with content. Data is saved temporarily in local storage. PHP is only needed to generate the list of files in the dropdown of templates.
+- [**110**星][2y] [Py] [fox-it/danderspritz-evtx](https://github.com/fox-it/danderspritz-evtx) Parse evtx files and detect use of the DanderSpritz eventlogedit module
+- [**110**星][3y] [HTML] [dxa4481/xssjacking](https://github.com/dxa4481/xssjacking) Abusing Self-XSS and Clickjacking to trigger XSS
+- [**110**星][3m] [Java] [dogangcr/vulnerable-sso](https://github.com/dogangcr/vulnerable-sso) vulnerable single sign on
+- [**110**星][2y] [C++] [codewatchorg/sidestep](https://github.com/codewatchorg/sidestep) Yet another AV evasion tool
+- [**110**星][8m] [Py] [chaitanyaharitash/kimi](https://github.com/chaitanyaharitash/kimi) Script to generate malicious debian packages (debain trojans).
+- [**110**星][7y] [C++] [abhisek/pe-loader-sample](https://github.com/abhisek/pe-loader-sample) Proof of concept implementation of in-memory PE Loader based on ReflectiveDLLInjection Technique
+- [**110**星][4y] [Py] [1n3/xsstracer](https://github.com/1n3/xsstracer) A small python script to check for Cross-Site Tracing (XST)
+- [**109**星][3d] [C] [wifiphisher/roguehostapd](https://github.com/wifiphisher/roguehostapd) Hostapd fork including Wi-Fi attacks and providing Python bindings with ctypes.
+- [**109**星][21d] [SourcePawn] [shavitush/bhoptimer](https://github.com/shavitush/bhoptimer) A bunnyhop timer plugin for Counter-Strike: Source, Counter-Strike: Global Offensive and Team Fortress 2.
+- [**109**星][4m] [PHP] [vvmelody/ctf-web-challenges](https://github.com/vvmelody/ctf-web-challenges)
+- [**109**星][1y] [Py] [meizjm3i/ctf-challenge](https://github.com/meizjm3i/CTF-Challenge) CTF题目收集
+- [**109**星][9m] [Shell] [xvass/vscan](https://github.com/xvass/vscan) vulnerability scanner tool using nmap and nse scripts
+- [**109**星][8m] [C] [wbenny/ksocket](https://github.com/wbenny/ksocket) 在Windows驱动中使用WSK建立网络连接的示例
+- [**109**星][2y] [C++] [vegard/prog-fuzz](https://github.com/vegard/prog-fuzz) Compiler/source code fuzzing tool using AFL instrumentation
+- [**109**星][1y] [C] [twelvesec/passcat](https://github.com/twelvesec/passcat) Passwords Recovery Tool
+- [**109**星][3y] [HTML] [theori-io/cve-2016-0189](https://github.com/theori-io/cve-2016-0189) Proof-of-Concept exploit for CVE-2016-0189 (VBScript Memory Corruption in IE11)
+- [**109**星][7m] [C] [siguza/imobax](https://github.com/siguza/imobax) iOS Mobile Backup Extractor
+- [**109**星][2y] [C] [securestate/syringe](https://github.com/securestate/syringe) A General Purpose DLL & Code Injection Utility
+- [**109**星][29d] [Ruby] [rapid7/metasploit-omnibus](https://github.com/rapid7/metasploit-omnibus) Packaging metasploit-framework with omnibus
+- [**109**星][4m] [Shell] [qax-a-team/weblogicenvironment](https://github.com/qax-a-team/weblogicenvironment) Weblogic环境搭建工具
+- [**109**星][2y] [PS] [proxb/powershell_scripts](https://github.com/proxb/powershell_scripts) Miscellaneous scripts for things that I have done; more scripts will arrive as I get time to update this repo.
+- [**109**星][2y] [C] [pbatard/bootimg-tools](https://github.com/pbatard/bootimg-tools) Android boot.img creation and extraction tools [NOTE: This project is NO LONGER maintained]
+- [**109**星][2y] [TeX] [p4t12ick/ypsilon](https://github.com/p4t12ick/ypsilon) Automated Use Case Testing
+- [**109**星][5m] [C++] [niklasb/hack2win-chrome](https://github.com/niklasb/hack2win-chrome) This is collaborative work of Ned Williamson and Niklas Baumstark
+- [**109**星][8m] [Py] [needmorecowbell/giggity](https://github.com/needmorecowbell/giggity) Wraps github api for openly available information about an organization, user, or repo
+- [**109**星][5m] [Roff] [nb-star/security-operation](https://github.com/nb-star/security-operation) 安全运维技巧整理
+- [**109**星][3y] [Py] [moosedojo/mybff](https://github.com/moosedojo/mybff) myBFF - a Brute Force Framework
+- [**109**星][10m] [HTML] [m4cs/blackeye-python](https://github.com/m4cs/blackeye-python) BlackEye Phishing Kit in Python w Serveo Subdomain Creation | Educational Purposes Only
+- [**109**星][4y] [Ruby] [lubyruffy/wyquery](https://github.com/lubyruffy/wyquery) Wooyun查询系统
+- [**109**星][8m] [linking12/tesla](https://github.com/linking12/tesla) Tesla is a gateway service that provides dynamic routing,waf,support spring cloud,gRPC,DUBBO and more.
+- [**109**星][1y] [C++] [joxeankoret/membugtool](https://github.com/joxeankoret/membugtool) A DBI tool to discover heap memory related bugs
+- [**109**星][1y] [PHP] [joecampo/random-user-agent](https://github.com/joecampo/random-user-agent) Generate real random user-agents
+- [**109**星][3y] [Py] [jmortega/osint_tools_security_auditing](https://github.com/jmortega/osint_tools_security_auditing) osint_tools_security_auditing
+- [**109**星][1y] [Shell] [jgamblin/blackhat-macos-config](https://github.com/jgamblin/blackhat-macos-config) Configure Your Macbook For Blackhat
+- [**109**星][2y] [C] [gvb84/pbscan](https://github.com/gvb84/pbscan) Faster and more efficient stateless SYN scanner and banner grabber due to userland TCP/IP stack usage.
+- [**109**星][1y] [Pascal] [greatis/anti-webminer](https://github.com/greatis/anti-webminer) Anti-WebMiner protects your PC against web cryptocurrency miners (JS scripts like Coinhive executed in the browser) by modifying Windows hosts file
+- [**109**星][2y] [C#] [goldshtn/etrace](https://github.com/goldshtn/etrace) Command-line tool for ETW tracing on files and real-time events
+- [**109**星][5y] [fjvva/ecu-tool](https://github.com/fjvva/ecu-tool) Tool to communicate with vehicle ECUs based on Arduino
+- [**109**星][3m] [JS] [elkentaro/kismetmobiledashboard](https://github.com/elkentaro/kismetmobiledashboard) Mobile UI for kismet
+- [**109**星][11m] [Py] [ekultek/graffiti](https://github.com/ekultek/graffiti) A tool to generate obfuscated one liners to aid in penetration testing
+- [**109**星][6m] [JS] [detroitenglish/pw-pwnage-cfworker](https://github.com/detroitenglish/pw-pwnage-cfworker) Deploy a Cloudflare Worker to sanely score users' new passwords with zxcvbn AND check for matches against haveibeenpwned's 7.8+ billion breached accounts
+- [**109**星][2m] [C] [david-reguera-garcia-dreg/dbgchild](https://github.com/david-reguera-garcia-dreg/dbgchild) Debug Child Process Tool (auto attach)
+- [**109**星][5m] [C++] [danielcardeenas/audiostego](https://github.com/danielcardeenas/audiostego) Audio file steganography. Hides files or text inside audio files and retrieve them automatically
+- [**109**星][12m] [JS] [cloudtracer/paskto](https://github.com/cloudtracer/paskto) Paskto - Passive Web Scanner
+- [**109**星][5y] [Py] [behindthefirewalls/parsero](https://github.com/behindthefirewalls/parsero) Parsero | Robots.txt audit tool
+- [**109**星][10m] [Py] [b3-v3r/hunner](https://github.com/b3-v3r/hunner) Hacking framework
+- [**109**星][2y] [C] [b-mueller/frida-detection-demo](https://github.com/b-mueller/frida-detection-demo) Some examples for detecting frida on Android
+- [**109**星][6m] [Py] [anssi-fr/bmc-tools](https://github.com/anssi-fr/bmc-tools) RDP Bitmap Cache parser
+- [**109**星][3m] [Py] [altjx/ipwn](https://github.com/altjx/ipwn)
+- [**108**星][5m] [Go] [v2ray/ext](https://github.com/v2ray/ext) Utilities to support Project V
+- [**108**星][7m] [C#] [virb3/de4dot-cex](https://github.com/virb3/de4dot-cex) de4dot deobfuscator with full support for vanilla ConfuserEx
+- [**108**星][1y] [C] [fsecurelabs/xrulez](https://github.com/FSecureLABS/XRulez) A command line tool for creating malicious outlook rules
+- [**108**星][3y] [vidar-team/hctf2016](https://github.com/vidar-team/HCTF2016) HCTF 2016 CHALLENGES
+- [**108**星][15d] [3had0w/fuzzing-dicts](https://github.com/3had0w/Fuzzing-Dicts) Web Security Dictionary
+- [**108**星][11m] [Py] [w3h/isf](https://github.com/w3h/isf) ISF(Industrial Security Exploitation Framework) is a exploitation framework based on Python.
+- [**108**星][3y] [Py] [souhardya/warchild](https://github.com/souhardya/warchild) War Child denial of service testing suite
+- [**108**星][13d] [PHP] [sniperoj/attack-defense-challenges](https://github.com/sniperoj/attack-defense-challenges) Challenges of CTF Attack with Defense mode
+- [**108**星][3y] [JS] [sensepost/wadi](https://github.com/sensepost/wadi) Wadi Fuzzing Harness
+- [**108**星][8m] [Py] [rootbsd/fridump3](https://github.com/rootbsd/fridump3) A universal memory dumper using Frida for Python 3
+- [**108**星][1m] [C] [rohanpadhye/fuzzfactory](https://github.com/rohanpadhye/fuzzfactory) Domain-Specific Fuzzing with Waypoints
+- [**108**星][3m] [JS] [rapid7/awsaml](https://github.com/rapid7/awsaml) Awsaml is an application for providing automatically rotated temporary AWS credentials.
+- [**108**星][3y] [projectretroscope/retroscope](https://github.com/projectretroscope/retroscope) Public release of the RetroScope Android memory forensics framework
+- [**108**星][2m] [Assembly] [platypew/picoctf-2018-writeup](https://github.com/platypew/picoctf-2018-writeup) Writeup for picoCTF 2018
+- [**108**星][10m] [Py] [mpgn/cve-2019-7238](https://github.com/mpgn/cve-2019-7238) 🐱💻 Poc of CVE-2019-7238 - Nexus Repository Manager 3 Remote Code Execution 🐱💻
+- [**108**星][6m] [Py] [matiskay/html-similarity](https://github.com/matiskay/html-similarity) Compare html similarity using structural and style metrics
+- [**108**星][5m] [C++] [mactec0/kernelmode-manual-mapping-through-iat](https://github.com/mactec0/kernelmode-manual-mapping-through-iat) Manual mapping without creating any threads, with rw only access
+- [**108**星][10m] [Py] [m4cs/darkspiritz](https://github.com/m4cs/darkspiritz)
+- [**108**星][3d] [C] [libyal/libbde](https://github.com/libyal/libbde) Library and tools to access the BitLocker Drive Encryption (BDE) encrypted volumes
+- [**108**星][4m] [Shell] [immmx/ubnt-mips-shadowsocks-libev](https://github.com/immmx/ubnt-mips-shadowsocks-libev) Cross complie shadowsocks for UBNT devices based on mipsel or mips64
+- [**108**星][2y] [Py] [hansesecure/exploitdev](https://github.com/hansesecure/exploitdev)
+- [**108**星][2y] [geosn0w/myriam](https://github.com/geosn0w/myriam) A vulnerable iOS App with Security Challenges for the Security Researcher inside you.
+- [**108**星][6d] [C++] [frida/frida-node](https://github.com/frida/frida-node) Frida Node.js bindings
+- [**108**星][18d] [Pascal] [fenix01/cheatengine-library](https://github.com/fenix01/cheatengine-library) Cheat Engine Library is based on CheatEngine a debugger and coding environment particularly aimed at games, but can also be used for other purposes like debugging applications and used in schools for teaching how computers work
+- [**108**星][7m] [C++] [ez8-co/yapi](https://github.com/ez8-co/yapi) fusion injector that reduce differences between x64, wow64 and x86 processes
+- [**108**星][7m] [Py] [evilsocket/ergo-pe-av](https://github.com/evilsocket/ergo-pe-av) 🧠 🦠 An artificial neural network and API to detect Windows malware, based on Ergo and LIEF.
+- [**108**星][3y] [C] [emptymonkey/shelljack](https://github.com/emptymonkey/shelljack) A keystroke / terminal logger for Linux.
+- [**108**星][4m] [Haxe] [empirectf/empirectf](https://github.com/empirectf/empirectf) EmpireCTF – write-ups, videos, capture the flag, cybersecurity
+- [**108**星][2y] [Vim script] [chr4/sslsecure.vim](https://github.com/chr4/sslsecure.vim) Highlight insecure SSL configuration in Vim (works for all OpenSSL/ LibreSSL cipher strings, independent of the filetype)
+- [**108**星][7m] [binject/awesome-go-security](https://github.com/binject/awesome-go-security) A dedicated place for cool golang security projects
+- [**107**星][17d] [paralax/awesome-cybersecurity-internships](https://github.com/paralax/awesome-cybersecurity-internships) a list of cybersecurity internships
+- [**107**星][2d] [internetwache/ct_subdomains](https://github.com/internetwache/ct_subdomains) An hourly updated list of subdomains gathered from certificate transparency logs
+- [**107**星][6m] [PS] [dafthack/check-localadminhash](https://github.com/dafthack/check-localadminhash) Check-LocalAdminHash is a PowerShell tool that attempts to authenticate to multiple hosts over either WMI or SMB using a password hash to determine if the provided credential is a local administrator. It's useful if you obtain a password hash for a user and want to see where they are local admin on a network. It is essentially a Frankenstein of …
+- [**107**星][19d] [firmianay/security-paper](https://github.com/firmianay/security-paper) (与本人兴趣强相关的)各种安全or计算机资料收集
+- [**107**星][14d] [Shell] [g666gle/basequery](https://github.com/g666gle/basequery) BaseQuery is a way to organize public combo-lists and data breaches in a way that you can easily search through everything
+- [**107**星][4m] [Py] [xzkzdx/weixin-spider](https://github.com/xzkzdx/weixin-spider) 微信公众号爬虫,公众号历史文章,文章评论,文章阅读及在看数据,可视化web页面,可部署于Windows服务器。基于Python3之flask/mysql/redis/mitmproxy/pywin32等实现,高效微信爬虫,微信公众号爬虫,历史文章,文章评论,数据更新。
+- [**107**星][6y] [ObjC] [colemancda/wi-fi-crack](https://github.com/colemancda/wi-fi-crack) OS X GUI for Aircrack-NG
+- [**107**星][1m] [ObjC] [zydeco/aah](https://github.com/zydeco/aah) arm64 architecture handler
+- [**107**星][2y] [Shell] [xillwillx/cactustorch_ddeauto](https://github.com/xillwillx/cactustorch_ddeauto) OFFICE DDEAUTO Payload Generation script
+- [**107**星][1y] [PHP] [walkor/php-http-proxy](https://github.com/walkor/php-http-proxy) HTTP proxy written in PHP based on workerman.
+- [**107**星][6m] [Swift] [tuluobo/leiter](https://github.com/tuluobo/leiter) 一个基于 NEKit 的网络 Proxy App。
+- [**107**星][3y] [C++] [timeweb/ddosdetector](https://github.com/timeweb/ddosdetector) A flexible tool for analyzing network traffic and automation of the process of protection against DDoS attacks.
+- [**107**星][11m] [C++] [sidechannelmarvels/daredevil](https://github.com/sidechannelmarvels/daredevil) A tool to perform (higher-order) correlation power analysis attacks (CPA).
+- [**107**星][5m] [JS] [ryanmarcus/dirty-json](https://github.com/ryanmarcus/dirty-json) A parser for invalid JSON
+- [**107**星][9m] [Emacs Lisp] [rubocop-hq/rubocop-emacs](https://github.com/rubocop-hq/rubocop-emacs) An Emacs interface for RuboCop
+- [**107**星][8m] [Shell] [rpranshu/eternalview](https://github.com/rpranshu/eternalview) EternalView is an all in one basic information gathering and vulnerability assessment tool
+- [**107**星][6m] [PS] [r4wd3r/rid-hijacking](https://github.com/r4wd3r/rid-hijacking) Windows RID Hijacking persistence technique
+- [**107**星][2y] [Ruby] [porterhau5/bloodhound-owned](https://github.com/porterhau5/bloodhound-owned) A collection of files for adding and leveraging custom properties in BloodHound.
+- [**107**星][1y] [pgarba/switchidaproloader](https://github.com/pgarba/switchidaproloader) Loader for IDA Pro to support the Nintendo Switch NRO binaries
+- [**107**星][2m] [JS] [p3nt4/nuages](https://github.com/p3nt4/nuages) A modular C2 framework
+- [**107**星][1y] [PS] [p3nt4/invoke-tmpdavfs](https://github.com/p3nt4/invoke-tmpdavfs) Memory Backed Powershell WebDav Server
+- [**107**星][3y] [C#] [p0cl4bs/hanzoinjection](https://github.com/p0cl4bs/hanzoinjection) injecting arbitrary codes in memory to bypass common antivirus solutions
+- [**107**星][2y] [Py] [orsinium/django-bruteforce-protection](https://github.com/orsinium/django-bruteforce-protection) Bruteforce protection for Django projects based on Redis. Simple, powerful, extendable.
+- [**107**星][1y] [JS] [offdev/zwsp-steg-js](https://github.com/offdev/zwsp-steg-js) 零宽度空间隐写术, 将隐藏的消息编码/解码为不可打印/可读的字符
+- [**107**星][19d] [Py] [nasa/pvslib](https://github.com/nasa/pvslib) NASA PVS Library of Formal Developments
+- [**107**星][8m] [C] [mudongliang/linuxflaw](https://github.com/mudongliang/linuxflaw) This repo records all the vulnerabilities of linux software I have reproduced in my local workspace
+- [**107**星][5y] [Py] [mspreitz/adel](https://github.com/mspreitz/adel) dumps all important SQLite Databases from a connected Android smartphone to the local disk and analyzes these files in a forensically accurate workflow
+- [**107**星][4y] [Py] [mozilla/garmr](https://github.com/mozilla/garmr) inspect the responses from websites for basic security requirements.
+- [**107**星][4y] [Py] [mit-ll/ll-fuzzer](https://github.com/mit-ll/ll-fuzzer) An automated NFC fuzzing framework for Android devices.
+- [**107**星][28d] [Py] [misp/misp-warninglists](https://github.com/misp/misp-warninglists) Warning lists to inform users of MISP about potential false-positives or other information in indicators
+- [**107**星][4y] [Py] [mdegrazia/sqlite-deleted-records-parser](https://github.com/mdegrazia/sqlite-deleted-records-parser) recover deleted entries in an SQLite database and places the output into either a TSV file or text file (-r)
+- [**107**星][3m] [C#] [matterpreter/shhmon](https://github.com/matterpreter/shhmon) Neutering Sysmon via driver unload
+- [**107**星][5y] [C] [malwaretech/tinyxpb](https://github.com/malwaretech/tinyxpb) Windows XP 32-Bit Bootkit
+- [**107**星][1y] [Py] [lizhongnian/btpanel-ss](https://github.com/lizhongnian/btpanel-ss) 基于宝塔Linux面板的shadowsocks可视化管理插件,本人博客,欢迎大家指导
+- [**107**星][3d] [JS] [liyangready/mini-proxy](https://github.com/liyangready/mini-proxy) A very mini transparent proxy for http/https by NodeJS.Just like squid. 基于nodejs的迷你易用的proxy
+- [**107**星][3y] [liuchenx/surgeconfig](https://github.com/liuchenx/surgeconfig) surge app shadowsocks config
+- [**107**星][7m] [Py] [leoid/cve-2019-0708](https://github.com/leoid/cve-2019-0708) Only Hitting PoC [Tested on Windows Server 2008 r2]
+- [**107**星][10d] [lattera/articles](https://github.com/lattera/articles) Various articles I've written
+- [**107**星][11m] [Py] [koush/efi-x99](https://github.com/koush/efi-x99) Hackintosh Guide: Gigabyte X99P-SLI, Intel 6950X, Nvidia Titan Xp
+- [**107**星][2y] [Go] [jthomas/serverless-pwned-passwords](https://github.com/jthomas/serverless-pwned-passwords) serverless-pwned-passwords:提供了1个API,用于从各种数据泄漏的巨大密码库中检查潜在密码
+- [**107**星][3y] [ios-reverse-engineering-dev/swift-apps-reverse-engineering](https://github.com/ios-reverse-engineering-dev/swift-apps-reverse-engineering) Swift Apps Reverse Engineering reading book
+- [**107**星][5y] [C] [ioactive/melkor_elf_fuzzer](https://github.com/ioactive/melkor_elf_fuzzer) Melkor is a very intuitive and easy-to-use ELF file format fuzzer to find functional and security bugs in ELF parsers.
+- [**107**星][2y] [Java] [realbearcat/oracle-weblogic-cve-2017-10271](https://github.com/RealBearcat/Oracle-WebLogic-CVE-2017-10271) WebLogic Wls-wsat XMLDecoder 反序列化
+- [**107**星][11m] [hongrisec/ai-machine-learning-security](https://github.com/hongrisec/ai-machine-learning-security) 一个关于人工智能渗透测试分析系列
+- [**107**星][2y] [C] [holbertonschool/hack-the-virtual-memory](https://github.com/holbertonschool/hack-the-virtual-memory) This is a series of small articles / tutorials based around virtual memory. The goal is to learn some CS basics, but in a different and more practical way.
+- [**107**星][1m] [Py] [ethereum/eth-tester](https://github.com/ethereum/eth-tester) Tool suite for testing ethereum applications.
+- [**107**星][1y] [Py] [egaus/maliciousmacrobot](https://github.com/egaus/maliciousmacrobot) Malicious Macro Bot Project
+- [**107**星][2y] [JS] [eboda/34c3ctf](https://github.com/eboda/34c3ctf) Challenge Sources & Exploits for the 34C3 CTF
+- [**107**星][6m] [C#] [dannythesloth/vanillarat](https://github.com/dannythesloth/vanillarat) VanillaRat is an advanced remote administration tool completely coded in C# for Windows.
+- [**107**星][4d] [Py] [danielplohmann/apiscout](https://github.com/danielplohmann/apiscout) 简化导入API恢复。可以从内存中恢复API信息。包含命令行版本和IDA插件。可以处理PE头被抹掉等ImpRec/ImpRec无法处理的情况。
+- [**107**星][16d] [HTML] [cj123/canijailbreak.com](https://github.com/cj123/canijailbreak.com) a website which tells you whether you can jailbreak your iOS device.
+- [**107**星][7m] [Java] [c0d3p1ut0s/cve-2019-12086-jackson-databind-file-read](https://github.com/c0d3p1ut0s/cve-2019-12086-jackson-databind-file-read)
+- [**107**星][2d] [PHP] [blackhacker511/blacknet](https://github.com/blackhacker511/blacknet) Free Advanced Windows BotNET with Secure PHP Panel
+- [**107**星][4m] [Py] [atlas0fd00m/cancat](https://github.com/atlas0fd00m/cancat) swiss army knife of Controller Area Networks (CAN) often used in cars and building automation, etc...
+- [**107**星][4d] [Shell] [anandkumar11u/oscp-60days](https://github.com/anandkumar11u/oscp-60days) OSCP All Tools are Here ...!! ***
+- [**106**星][11m] [Swift] [lettleprince/qladder](https://github.com/lettleprince/qladder) QLadder is a project for iOS client. It uses shadowsocks as server-side.
+- [**106**星][11d] [Py] [vulhub/metadockers](https://github.com/vulhub/metadockers) Responsible for visualization the vulhub and docker
+- [**106**星][18d] [Java] [astrelsky/ghidra-cpp-class-analyzer](https://github.com/astrelsky/ghidra-cpp-class-analyzer) Ghidra C++ Class and Run Time Type Information Analyzer
+- [**106**星][2y] [Py] [cylance/introductiontomachinelearningforsecuritypros](https://github.com/cylance/IntroductionToMachineLearningForSecurityPros) 书的示例代码:Introduction to Artificial Intelligence for Security Professionals
+- [**106**星][3y] [Py] [opensourcesec/cirtkit](https://github.com/opensourcesec/CIRTKit) Tools for the Computer Incident Response Team
+- [**106**星][2y] [C++] [zerosum0x0/puppetstrings](https://github.com/zerosum0x0/puppetstrings) Hitch a free ride to Ring 0 on Windows
+- [**106**星][4y] [C] [xobs/fernly](https://github.com/xobs/fernly) a simple operating system designed for use in the reverse engineering of the Fernvale CPU
+- [**106**星][2y] [Py] [xme/toolbox](https://github.com/xme/toolbox) Miscelaneous useful scripts for my day to day projects
+- [**106**星][9m] [webbreacher/orcs](https://github.com/webbreacher/orcs) OSINT Resource Classification System
+- [**106**星][6y] [Py] [uber/py-find-injection](https://github.com/uber/py-find-injection) Look for SQL injection attacks in python source code
+- [**106**星][17d] [Py] [testerting/hacker101-ctf](https://github.com/testerting/hacker101-ctf) Hacker101 CTF Writeup
+- [**106**星][3m] [C++] [tandasat/simplesvmhook](https://github.com/tandasat/simplesvmhook) SimpleSvmHook is a research purpose hypervisor for Windows on AMD processors.
+- [**106**星][2y] [Py] [sparksharly/dl_for_xss](https://github.com/sparksharly/dl_for_xss) Deep learnning for detection with xss
+- [**106**星][2y] [Py] [shogunlab/shuriken](https://github.com/shogunlab/shuriken) Cross-Site Scripting (XSS) command line tool for testing lists of XSS payloads on web apps.
+- [**106**星][28d] [Java] [sable/heros](https://github.com/sable/heros) IFDS/IDE Solver for Soot
+- [**106**星][4y] [C] [rootkitsmm/win32k-fuzzer](https://github.com/rootkitsmm/win32k-fuzzer) Fuzz and Detect "Use After Free" vulnerability in win32k.sys ( Heap based )
+- [**106**星][2m] [PHP] [realender/dwpa](https://github.com/realender/dwpa) Distributed WPA PSK auditor
+- [**106**星][12d] [Py] [pavelrevak/pystlink](https://github.com/pavelrevak/pystlink) Python tool for flashing and debugging STM32 devices using ST-LINK/V2
+- [**106**星][2m] [Py] [neatmonster/amie](https://github.com/neatmonster/amie) 针对ARM架构的`FRIEND`插件, 文档增强
+- [**106**星][4y] [Go] [mattbostock/go-ldpreload-backdoor](https://github.com/mattbostock/go-ldpreload-backdoor) LD_PRELOAD libc hooking using Go
+- [**106**星][4y] [Py] [mapleray/proxy_pool](https://github.com/mapleray/proxy_pool) python 代理池
+- [**106**星][3y] [Py] [lingerhk/fshell](https://github.com/lingerhk/fshell) 基于机器学习的分布式webshell检测系统
+- [**106**星][4y] [C] [kohsuke/com4j](https://github.com/kohsuke/com4j) Type-safe Java/COM binding
+- [**106**星][6y] [Java] [isecpartners/android-opendebug](https://github.com/isecpartners/android-opendebug) Make any application debuggable
+- [**106**星][2m] [Py] [ickerwx/tcpproxy](https://github.com/ickerwx/tcpproxy) Intercepting TCP proxy to modify raw TCP streams using modules on incoming or outgoing traffic
+- [**106**星][16d] [Py] [hanc00l/some_pocsuite](https://github.com/hanc00l/some_pocsuite) 用于漏洞排查的pocsuite3验证POC代码
+- [**106**星][2y] [Py] [guedou/jupyter-radare2](https://github.com/guedou/jupyter-radare2) Just a simple radare2 Jupyter kernel
+- [**106**星][5m] [Py] [graph-x/davscan](https://github.com/graph-x/davscan) Fingerprints servers, finds exploits, scans WebDAV. May or may not also make coffee.
+- [**106**星][2m] [Perl] [gottburgm/exploits](https://github.com/gottburgm/exploits) Containing Self Made Perl Reproducers / PoC Codes
+- [**106**星][12m] [JS] [fpass/fpass](https://github.com/fpass/fpass) 类似于 LastPass的密码管理工具
+- [**106**星][1m] [Py] [flosell/trailscraper](https://github.com/flosell/trailscraper) A command-line tool to get valuable information out of AWS CloudTrail
+- [**106**星][4y] [Perl] [fastvpseestiou/antidoto](https://github.com/fastvpseestiou/antidoto) Linux antimalware and antirootkit tool
+- [**106**星][2y] [Py] [falseen/pysocket](https://github.com/falseen/pysocket) 通过monkey patch动态修改 socket 的项目。在不修改源码的情况下给 socket 增加一些诸如限制客户端数量、前置代理之类的功能。让我们将 Monkey Patch 进行到底吧!
+- [**106**星][3y] [Py] [fail0verflow/radeon-tools](https://github.com/fail0verflow/radeon-tools) Radeon reverse engineering tools
+- [**106**星][2m] [Ruby] [dev-sec/ansible-mysql-hardening](https://github.com/dev-sec/ansible-mysql-hardening) This Ansible role provides security configuration for MySQL.
+- [**106**星][3m] [C++] [comaeio/hibr2bin](https://github.com/comaeio/hibr2bin) Comae Hibernation File Decompressor
+- [**106**星][2y] [Java] [caledoniaproject/cve-2018-1270](https://github.com/caledoniaproject/cve-2018-1270) Spring messaging STOMP protocol RCE
+- [**106**星][3y] [JS] [boy-hack/webshellmanager](https://github.com/boy-hack/webshellmanager) w8ay 一句话WEB端管理工具
+- [**106**星][4m] [Go] [bnagy/gapstone](https://github.com/bnagy/gapstone) gapstone is a Go binding for the capstone disassembly library
+- [**106**星][3y] [PS] [ben0xa/powershelldefense](https://github.com/ben0xa/powershelldefense) Some PowerShell Defensive Scripts
+- [**106**星][2y] [Shell] [b3rito/yotter](https://github.com/b3rito/yotter) Bash 脚本, 执行侦察,然后使用 dirb 发现可能导致信息泄露的目录
+- [**106**星][3y] [JS] [attekett/nodefuzz](https://github.com/attekett/nodefuzz)
+- [**106**星][2y] [Py] [anbai-inc/cve-2018-4878](https://github.com/anbai-inc/cve-2018-4878) CVE-2018-4878 样本
+- [**106**星][2m] [ajvb/awesome-tor](https://github.com/ajvb/awesome-tor) A list of awesome Tor related projects, articles, papers, etc
+- [**106**星][8m] [Py] [ajinabraham/webappsec](https://github.com/ajinabraham/webappsec) Web Application Security
+- [**106**星][3y] [Py] [aeondave/doork](https://github.com/aeondave/doork) Passive Vulnerability Auditor
+- [**106**星][1y] [Py] [aboutsecurity/rastrea2r](https://github.com/aboutsecurity/rastrea2r) Collecting & Hunting for IOCs with gusto and style
+- [**106**星][6m] [CSS] [0xitx/ida_nightfall](https://github.com/0xitx/ida_nightfall) 黑色主题插件
+- [**105**星][3y] [Py] [hanc00l/captcha-python-test](https://github.com/hanc00l/captcha-python-test) 学习验证码识别的相关技术,包括opencv、tesseract、机器学习算法(kNN和SVM)等,将原作者的算法改为python
+- [**105**星][10m] [Py] [ehco1996/shadowsocksr-deprecated](https://github.com/ehco1996/shadowsocksr-deprecated) ssr mod version for django-sspanel
+- [**105**星][1m] [Py] [0ang3el/websocket-smuggle](https://github.com/0ang3el/websocket-smuggle) Issues with WebSocket reverse proxying allowing to smuggle HTTP requests
+- [**105**星][1m] [C++] [josh0xa/threadboat](https://github.com/josh0xA/ThreadBoat) Program uses Thread Execution Hijacking to Inject Native Shellcode into a Standard Win32 Application
+- [**105**星][4m] [w-digital-scanner/w10scan](https://github.com/w-digital-scanner/w10scan) 全自动搜索互联网漏洞
+- [**105**星][2m] [Py] [vstinner/python-ptrace](https://github.com/vstinner/python-ptrace) a debugger using ptrace (Linux, BSD and Darwin system call to trace processes) written in Python
+- [**105**星][1y] [JS] [phishai/phish-protect](https://github.com/phishai/phish-protect) 警报并可能阻止IDN/Unicode域名的网站
+- [**105**星][5y] [C] [yurushao/droid_injectso](https://github.com/yurushao/droid_injectso) A shared libraries injection tool.
+- [**105**星][14d] [Go] [virustotal/vt-cli](https://github.com/virustotal/vt-cli) VirusTotal Command Line Interface
+- [**105**星][2y] [Py] [tkcert/testssl.sh-webfrontend](https://github.com/tkcert/testssl.sh-webfrontend) Web Frontend for testssl.sh
+- [**105**星][23d] [C++] [thomasdullien/heap_history_viewer](https://github.com/thomasdullien/heap_history_viewer) A program to draw rectangles from heap traces.
+- [**105**星][3y] [Py] [tengzhangchao/struts2_045-poc](https://github.com/tengzhangchao/struts2_045-poc) Struts2-045 POC
+- [**105**星][20d] [Py] [t0thkr1s/revshellgen](https://github.com/t0thkr1s/revshellgen) Reverse shell generator written in Python.
+- [**105**星][16d] [Shell] [spf-tools/spf-tools](https://github.com/spf-tools/spf-tools) Shell scripts for taming the SPF (Sender Policy Framework) records in order to fight 10-maximum-DNS-look-ups limit.
+- [**105**星][3m] [soffensive/windowsblindread](https://github.com/soffensive/windowsblindread) A list of files / paths to probe when arbitrary files can be read on a Microsoft Windows operating system
+- [**105**星][1y] [Py] [shizzz477/msploitego](https://github.com/shizzz477/msploitego) 将Metasploit数据库导入到数据挖掘工具Maltego并进行分析的框架
+- [**105**星][6y] [Py] [secretsquirrel/recomposer](https://github.com/secretsquirrel/recomposer) Randomly changes Win32/64 PE Files for 'safer' uploading to malware and sandbox sites.
+- [**105**星][4y] [C++] [secmob/pocforcve-2015-1528](https://github.com/secmob/pocforcve-2015-1528) I'll submit the poc after blackhat
+- [**105**星][3y] [Py] [saferman/cupper](https://github.com/saferman/cupper) 社工密码生成器
+- [**105**星][10m] [PHP] [rub-nds/metadata-attacker](https://github.com/rub-nds/metadata-attacker) A tool to generate media files with malicious metadata
+- [**105**星][6m] [Py] [roglew/guppy-proxy](https://github.com/roglew/guppy-proxy) 用于WebApp安全测试的拦截代理(intercepting proxy)
+- [**105**星][4y] [Java] [rednaga/dexhook](https://github.com/rednaga/dexhook) DexHook is a xposed module for capturing dynamically loaded dex files.
+- [**105**星][1y] [Py] [redlectroid/overthruster](https://github.com/redlectroid/overthruster) HID attack payload generator for Arduinos
+- [**105**星][9m] [C++] [quarkslab/android-restriction-bypass](https://github.com/quarkslab/android-restriction-bypass) PoC to bypass Android restrictions
+- [**105**星][3y] [Py] [picoctf/picoctf-platform-2](https://github.com/picoctf/picoctf-platform-2) A genericized version of picoCTF 2014 that can be easily adapted to host CTF or programming competitions.
+- [**105**星][3y] [Py] [phith0n/python-xss-filter](https://github.com/phith0n/python-xss-filter) Based on native Python module HTMLParser purifier of HTML, To Clear all javascript in html
+- [**105**星][11d] [ObjC] [objective-see/processmonitor](https://github.com/objective-see/processmonitor) Process Monitor Library (based on Apple's new Endpoint Security Framework)
+- [**105**星][2y] [Shell] [niclet/yi-hack-v2](https://github.com/niclet/yi-hack-v2) Xiaomi Yi Ants Camera 2 hack
+- [**105**星][3m] [Ruby] [naxg/cve_2019_0708_bluekeep_rce](https://github.com/naxg/cve_2019_0708_bluekeep_rce) bluekeep exploit
+- [**105**星][2y] [Py] [mozilla/django-session-csrf](https://github.com/mozilla/django-session-csrf) CSRF protection for Django without cookies.
+- [**105**星][1y] [TeX] [monero-project/research-lab](https://github.com/monero-project/research-lab) A general repo for Monero Research Lab work in progress and completed work
+- [**105**星][1y] [mitre/brawl-public-game-001](https://github.com/mitre/brawl-public-game-001) Data from a BRAWL Automated Adversary Emulation Exercise
+- [**105**星][3y] [Java] [mindmac/intentfuzzer](https://github.com/mindmac/intentfuzzer) A Tool to fuzz Intent on Android
+- [**105**星][2y] [Go] [mhmdiaa/second-order](https://github.com/mhmdiaa/second-order) 爬取web app, 收集 URL, 扫描second-order 子域名接管
+- [**105**星][1y] [HTML] [lz1y/cve-2018-8420](https://github.com/lz1y/cve-2018-8420) 原PoC甚至符号都打错了!太不走心了!
+- [**105**星][14d] [leomaurodesenv/game-datasets](https://github.com/leomaurodesenv/game-datasets)
+- [**105**星][6m] [PS] [leeberg/bluehive](https://github.com/leeberg/bluehive) PowerShell based Active Directory Honey User Account Management with Universal Dashboards
+- [**105**星][2y] [Py] [kkirsche/cve-2017-10271](https://github.com/kkirsche/cve-2017-10271) Oracle WebLogic WLS-WSAT Remote Code Execution Exploit (CVE-2017-10271)
+- [**105**星][7y] [intrepidusgroup/trustme](https://github.com/intrepidusgroup/trustme) Disable certificate trust checks on iOS devices.
+- [**105**星][2y] [Java] [ggrandes/bouncer](https://github.com/ggrandes/bouncer) Bouncer is a network TCP port redirector/forward proxy (like rinetd) with extra features like Reverse tunneling (like ssh -R), SSL tunneling (like stunnel), connection Failover, LoadBalancing and Clustering. In pure Java (BIO)
+- [**105**星][2y] [C] [formyown/alesense-antivirus](https://github.com/formyown/alesense-antivirus) 一款拥有完整交互界面与驱动级拦截能力的开源杀毒软件
+- [**105**星][5y] [Py] [fooying/3102](https://github.com/fooying/3102) A domain/ip fuzzing tool for vulnerability mining
+- [**105**星][4m] [Py] [ex16x41/oscp-prep](https://github.com/ex16x41/oscp-prep) my oscp prep collection
+- [**105**星][2y] [Py] [danigargu/idatropy](https://github.com/danigargu/idatropy) 使用idapython和matplotlib的功能生成熵和直方图的图表
+- [**105**星][2y] [Ruby] [chrisallenlane/watchtower](https://github.com/chrisallenlane/watchtower) Watchtower is a Static Code Analysis tool designed to assist security auditors who are tasked with performing manual code reviews. It is platform- and language-agnostic.
+- [**105**星][1m] [Java] [c0ny1/sqlmap4burp-plus-plus](https://github.com/c0ny1/sqlmap4burp-plus-plus) sqlmap4burp++是一款兼容Windows,mac,linux多个系统平台的Burp与sqlmap联动插件
+- [**105**星][1y] [Py] [binarydefense/goatrider](https://github.com/binarydefense/goatrider) GoatRider is a simple tool that will dynamically pull down Artillery Threat Intelligence Feeds, TOR, AlienVaults OTX, and the Alexa top 1 million websites and do a comparison to a hostname file or IP file.
+- [**105**星][3m] [Py] [armijnhemel/binaryanalysis-ng](https://github.com/armijnhemel/binaryanalysis-ng) Binary Analysis Next Generation (BANG)
+- [**105**星][1y] [Py] [5alt/ultrarelay](https://github.com/5alt/ultrarelay) poison and relay NTLM credentials
+- [**105**星][3y] [Py] [3gstudent/smbtouch-scanner](https://github.com/3gstudent/smbtouch-scanner) Automatically scan the inner network to detect whether they are vulnerable.
+- [**105**星][3m] [Py] [0xdezzy/cve-2019-11539](https://github.com/0xdezzy/cve-2019-11539) Exploit for the Post-Auth RCE vulnerability in Pulse Secure Connect
+- [**104**星][2y] [Ruby] [axsuul/rails-reverse-proxy](https://github.com/axsuul/rails-reverse-proxy) A reverse proxy for Ruby on Rails
+- [**104**星][5m] [Py] [kibodwapon/axis-1.4-rce-poc](https://github.com/kibodwapon/axis-1.4-rce-poc) Axis <=1.4 远程命令执行(RCE) POC
+- [**104**星][10m] [Py] [thelinuxchoice/pyrat](https://github.com/thelinuxchoice/pyrat) Windows Remote Administration Tool (RAT)
+- [**104**星][3d] [Go] [inlets/inletsctl](https://github.com/inlets/inletsctl) Fast HTTP (L7) and TCP (L4) tunnels written in Go
+- [**104**星][11m] [Java] [varunon9/remote-control-pc](https://github.com/varunon9/remote-control-pc) Control Laptop using Android. Remote control PC consists of android as well as desktop app written in Java to control laptop using phone.
+- [**104**星][7m] [C++] [ajayrandhawa/keylogger](https://github.com/ajayrandhawa/Keylogger) Blackcat Keylogger is 100% invisible keylogger not only for users, but also undetectable by antivirus software. Blackcat keylogger Monitors all keystokes, Mouse clicks. It has a seperate process which continues capture system screenshot and send to ftp server in given time.
+- [**104**星][2y] [HTML] [ziplokk1/incapsula-cracker-py3](https://github.com/ziplokk1/incapsula-cracker-py3) Python3 compatible way to bypass sites guarded with Incapsula
+- [**104**星][2y] [C#] [tyranid/deviceguardbypasses](https://github.com/tyranid/deviceguardbypasses) A repository of some of my Windows 10 Device Guard Bypasses
+- [**104**星][3y] [JS] [trustedsec/ships](https://github.com/trustedsec/ships) The Shared Host Integrated Password System (SHIPS) is a solution to provide unique and rotated local super user or administrator passwords for environments where it is not possible or not appropriate to disable these local accounts. Clients may be configured to rotate passwords automatically. Stored passwords can be retrieved by desktop support …
+- [**104**星][4y] [C++] [trailofbits/appjaillauncher](https://github.com/trailofbits/appjaillauncher) CTF Challenge Framework for Windows 8 and above
+- [**104**星][20d] [Go] [stefanoj3/dirstalk](https://github.com/stefanoj3/dirstalk) a multi threaded application designed to brute force paths on web servers.
+- [**104**星][5y] [C] [sploitfun/lsploits](https://github.com/sploitfun/lsploits) Linux Exploits
+- [**104**星][1y] [Py] [sidechannelmarvels/jeangrey](https://github.com/sidechannelmarvels/jeangrey) A tool to perform differential fault analysis attacks (DFA).
+- [**104**星][2y] [Java] [secureskytechnology/study-struts2-s2-054_055-jackson-cve-2017-7525_cve-2017-15095](https://github.com/secureskytechnology/study-struts2-s2-054_055-jackson-cve-2017-7525_cve-2017-15095) Struts2の脆弱性S2-045, S2-055 および Jackson の脆弱性 CVE-2017-7525, CVE-2017-15095 の調査報告
+- [**104**星][3y] [C++] [secmob/mosec2016](https://github.com/secmob/mosec2016) The slides and exploit of mosec2016
+- [**104**星][6y] [santoku/santoku-linux](https://github.com/santoku/santoku-linux) Linux Distro for Mobile Security, Malware Analysis, and Forensics
+- [**104**星][11m] [Py] [re4son/kali-pi](https://github.com/re4son/kali-pi) Sticky Fingers Kali Pi
+- [**104**星][7m] [C#] [r-smith/splice-admin](https://github.com/r-smith/splice-admin) A remote Windows administration tool. You know you want it.
+- [**104**星][12m] [Py] [ohmyadd/wetland](https://github.com/ohmyadd/wetland) A high interaction SSH honeypot
+- [**104**星][1y] [C++] [nmulasmajic/syscall_exploit_cve-2018-8897](https://github.com/nmulasmajic/syscall_exploit_cve-2018-8897) Implements the POP/MOV SS (CVE-2018-8897) vulnerability by leveraging SYSCALL to perform a local privilege escalation (LPE).
+- [**104**星][4y] [Go] [netxfly/transparent-proxy-scanner](https://github.com/netxfly/transparent-proxy-scanner) 基于vpn和透明代理的web漏洞扫描器的实现思路及demo
+- [**104**星][17d] [Go] [netevert/dnsmorph](https://github.com/netevert/dnsmorph) 域名排列(permutation)引擎, Go编写
+- [**104**星][2y] [C#] [nccgroup/outlookleaktest](https://github.com/nccgroup/outlookleaktest) The Outlook HTML Leak Test Project
+- [**104**星][12m] [Perl] [mustlive/davoset](https://github.com/mustlive/davoset) DDoS attacks via other sites execution tool (DAVOSET) - it is command line tool for conducting DDoS attacks on the sites via Abuse of Functionality and XML External Entities vulnerabilities at other sites.
+- [**104**星][2y] [C++] [mlghuskie/nobastian](https://github.com/mlghuskie/nobastian) NoBastian - Universal Ring3 IPC based BattlEye/EAC/FaceIt/ESEA/MRAC bypass
+- [**104**星][2y] [Py] [mehdilauters/wifiscanmap](https://github.com/mehdilauters/wifiscanmap) an other wifi mapping tool
+- [**104**星][24d] [Java] [mebigfatguy/fb-contrib](https://github.com/mebigfatguy/fb-contrib) a FindBugs/SpotBugs plugin for doing static code analysis for java code bases
+- [**104**星][30d] [Py] [m8r0wn/activereign](https://github.com/m8r0wn/activereign) A Network Enumeration and Attack Toolset
+- [**104**星][2m] [Shell] [luyg24/it_security](https://github.com/luyg24/it_security) 业内信息安全标准
+- [**104**星][3m] [PHP] [langleyfoxall/laravel-nist-password-rules](https://github.com/langleyfoxall/laravel-nist-password-rules)
+- [**104**星][2y] [Shell] [joarleymoraes/net_guard](https://github.com/joarleymoraes/net_guard) 命令行工具, 利用 ARP 协议检测网络中的未知设备
+- [**104**星][3y] [Go] [jessfraz/tupperwarewithspears](https://github.com/jessfraz/tupperwarewithspears) Distributed load testing with containers, Apache benchmark, with OpenVSwitch for networking.
+- [**104**星][2d] [C] [isc-projects/bind9](https://github.com/isc-projects/bind9) a complete, highly portable implementation of the DNS (Domain Name System) protocol.
+- [**104**星][2y] [Kotlin] [heimashi/debug_view_kotlin](https://github.com/heimashi/debug_view_kotlin) 用kotlin实现的Android浮层调试控制台,实时的显示内存、FPS、文字log、app启动时间、Activity启动时间
+- [**104**星][1y] [C++] [ga0/pyprotect](https://github.com/ga0/pyprotect) A lightweight python code protector, makes your python project harder to reverse engineer
+- [**104**星][3m] [Ruby] [dryruby/tor.rb](https://github.com/dryruby/tor.rb) Tor.rb is a Ruby library for interacting with the Tor anonymity network.
+- [**104**星][3y] [Java] [cvvt/apptroy](https://github.com/cvvt/apptroy) An Online Analysis System for Packed Android Malware
+- [**104**星][4y] [Shell] [cornerpirate/socat-shell](https://github.com/cornerpirate/socat-shell) Socat can be used to establish a reverse shell with bash tab completion and full shell functionality
+- [**104**星][3y] [C++] [cn33liz/tpminituacbypass](https://github.com/cn33liz/tpminituacbypass) Bypassing User Account Control (UAC) using TpmInit.exe
+- [**104**星][14d] [C] [checkpointsw/scout](https://github.com/checkpointsw/scout) Instruction based research debugger
+- [**104**星][3y] [Py] [c0demap/codemap](https://github.com/c0demap/codemap) Hook IDA,调试命中断点时将寄存器/内存信息保存到数据库,在web浏览器中查看
+ - [IDA插件](https://github.com/c0demap/codemap/blob/master/idapythonrc.py)
+ - [Web服务器](https://github.com/c0demap/codemap/tree/master/codemap/server)
+- [**104**星][5y] [Py] [botherder/vxcage](https://github.com/botherder/vxcage) REST API based malware repository (abandoned)
+- [**104**星][2y] [Py] [blindfuzzy/lhf](https://github.com/blindfuzzy/lhf) A modular recon tool for pentesting
+- [**104**星][15d] [Swift] [auth0/auth0.swift](https://github.com/auth0/auth0.swift) Swift toolkit for Auth0 API
+- [**104**星][4y] [ActionScript] [adobe/avmplus](https://github.com/adobe/avmplus) Source code for the Actionscript virtual machine
+- [**103**星][4d] [Py] [sachinkamath/ntlmrecon](https://github.com/sachinkamath/ntlmrecon) A fast and flexible NTLM reconnaissance tool
+- [**103**星][3y] [wtsxdev/list-of-web-application-security](https://github.com/wtsxdev/list-of-web-application-security) List of web application security
+- [**103**星][3y] [Py] [landgrey/taoman](https://github.com/landgrey/taoman) 快速收集
+- [**103**星][2m] [Shell] [greycatz/cloudunflare](https://github.com/greycatz/cloudunflare) Reconnaissance Real IP address for Cloudflare Bypass
+- [**103**星][2y] [Brainfuck] [tegmen/regex-brainfuck-interpreter](https://github.com/Tegmen/RegEx-Brainfuck-Interpreter) A Brainfuck interpreter in RegEx only (using Find/Replace)
+- [**103**星][1y] [ObjC] [kealdishx/icmethoddigger](https://github.com/kealdishx/ICMethodDigger) An easy way to print almost methods including private methods (supported arm64 architecture devices).
+- [**103**星][2m] [Py] [paulc/dnslib](https://github.com/paulc/dnslib) A Python library to encode/decode DNS wire-format packets
+- [**103**星][23d] [JS] [wilddeer/sniffer](https://github.com/wilddeer/sniffer) browser/engine/os/device detection tool
+- [**103**星][2y] [Py] [wetw0rk/malicious-wordpress-plugin](https://github.com/wetw0rk/malicious-wordpress-plugin) malicious-wordpress-plugin:生成带反向 Shell 的 wordpress 插件
+- [**103**星][9d] [Py] [virb3/apk-utilities](https://github.com/virb3/apk-utilities) Tools and scripts to manipulate Android APKs
+- [**103**星][4m] [Go] [twistlock/cloud-discovery](https://github.com/twistlock/cloud-discovery) Cloud Discovery provides a point in time enumeration of all the cloud native platform services
+- [**103**星][4y] [Py] [tripwire/tardis](https://github.com/tripwire/tardis) Threat Analysis, Reconnaissance, and Data Intelligence System
+- [**103**星][1y] [JS] [thecjw/frida-android-scripts](https://github.com/thecjw/frida-android-scripts) Some frida scripts
+- [**103**星][1y] [Go] [sroberts/cacador](https://github.com/sroberts/cacador) 从文本块中提取常见的IoC
+- [**103**星][8m] [Py] [sibears/hrast](https://github.com/sibears/hrast) 演示如何修改AST(抽象语法树)
+- [**103**星][3y] [Py] [samratashok/continuousintrusion](https://github.com/samratashok/continuousintrusion) Material related to my talks at various conferences on using Continuous Integration tools (Jenkins, Teamcity, Go, Hudson, CruiseControl) for penetration testing
+- [**103**星][3m] [rub-nds/tls-padding-oracles](https://github.com/rub-nds/tls-padding-oracles) New TLS Padding Oracles
+- [**103**星][1y] [Java] [quarantyne/quarantyne](https://github.com/quarantyne/quarantyne) Modern Web Firewall: stop account takeovers, weak passwords, cloud IPs, DoS attacks, disposable emails
+- [**103**星][6y] [Py] [pwnieexpress/pwn_plug_sources](https://github.com/pwnieexpress/pwn_plug_sources) Public source repository for the Pwn Plug platform.
+- [**103**星][1y] [Py] [preos-security/fwaudit](https://github.com/preos-security/fwaudit) Platform Firmware Auditing Tool
+- [**103**星][2m] [PS] [powershell/windowscompatibility](https://github.com/powershell/windowscompatibility) Module that allows Windows PowerShell Modules to be used from PSCore6
+- [**103**星][6m] [C++] [not-wlan/drvmap](https://github.com/not-wlan/drvmap) driver mapper / capcom wrapper
+- [**103**星][3y] [Py] [noplay/scrapy-mongodb](https://github.com/noplay/scrapy-mongodb) Mongodb support for scrapy
+- [**103**星][23d] [C++] [m2team/privexec](https://github.com/m2team/privexec) Run the program with the specified permission level (C++17 required)
+- [**103**星][4y] [C] [m0n0ph1/win64-rovnix-vbr-bootkit](https://github.com/m0n0ph1/win64-rovnix-vbr-bootkit) Win64/Rovnix - Volume Boot Record Bootkit
+- [**103**星][3m] [Py] [lucasg/findrpc](https://github.com/lucasg/findrpc) 从二进制文件中提取内部的RPC结构体
+- [**103**星][7m] [C] [joel16/psv-vsh-menu](https://github.com/joel16/psv-vsh-menu) A VSH menu tai-hen plugin for the PS VITA.
+- [**103**星][11m] [JS] [jasonsheh/sitescan](https://github.com/jasonsheh/sitescan) A tool help get the basic information of one site
+- [**103**星][6y] [C] [infodox/tsh-sctp](https://github.com/infodox/tsh-sctp) An open-source UNIX backdoor
+- [**103**星][1m] [Py] [infertux/zeyple](https://github.com/infertux/zeyple) Postfix filter/hook to automatically encrypt outgoing emails with PGP/GPG
+- [**103**星][10m] [Py] [iluxonchik/blackhat-python-book](https://github.com/iluxonchik/blackhat-python-book) Code from Blackhat Python book
+- [**103**星][2y] [C++] [iceb0y/windows-container](https://github.com/iceb0y/windows-container) A lightweight sandbox for Windows application
+- [**103**星][7m] [PS] [homjxi0e/poweravails](https://github.com/homjxi0e/poweravails) PowerAvails Powershell .NET Operating system
+- [**103**星][2y] [C++] [hasherezade/snippets](https://github.com/hasherezade/snippets) Various code snippets and small PoCs, to be used for tests or as ready-made skeletons.
+- [**103**星][1y] [PS] [harmj0y/asreproast](https://github.com/harmj0y/asreproast) Project that retrieves crackable hashes from KRB5 AS-REP responses for users without kerberoast preauthentication enabled.
+- [**103**星][3y] [C] [greensea/mptunnel](https://github.com/greensea/mptunnel) MPUDP Tunnel (User space MultiPath UDP)
+- [**103**星][2y] [gossithedog/threathunting](https://github.com/gossithedog/threathunting) Tools for hunting for threats.
+- [**103**星][2y] [Java] [gosecure/csp-auditor](https://github.com/gosecure/csp-auditor) Burp and ZAP plugin to analyse Content-Security-Policy headers or generate template CSP configuration from crawling a Website
+- [**103**星][2m] [C++] [google/vxsig](https://github.com/google/vxsig) Automatically generate AV byte signatures from sets of similar binaries.
+- [**103**星][2y] [glinares/officemalware](https://github.com/glinares/officemalware)
+- [**103**星][2y] [Py] [gelim/censys](https://github.com/gelim/censys) Python code to query the Censys public scan database.
+- [**103**星][6y] [C] [gdbinit/hydra](https://github.com/gdbinit/hydra) A kernel extension and userland daemon to patch applications
+- [**103**星][12m] [fuchsia-mirror/garnet](https://github.com/fuchsia-mirror/garnet)
+- [**103**星][6m] [Py] [fireeye/flashmingo](https://github.com/fireeye/flashmingo) Automatic analysis of SWF files based on some heuristics. Extensible via plugins.
+- [**103**星][4d] [F#] [enkomio/sacara](https://github.com/enkomio/sacara) A stack based intermediate language aimed at software protection by running in a software VM
+- [**103**星][1y] [Swift] [ehrishirajsharma/swiftness](https://github.com/ehrishirajsharma/swiftness) A note-taking macOS app for penetration-testers.
+- [**103**星][1y] [C++] [cbayet/exploit-cve-2017-6008](https://github.com/cbayet/exploit-cve-2017-6008) Exploits for CVE-2017-6008, a kernel pool buffer overflow leading to privilege escalation.
+- [**103**星][2d] [Py] [b1eed/vulrec](https://github.com/b1eed/vulrec) 漏洞复现记录
+- [**103**星][4y] [Py] [allyshka/pwngitmanager](https://github.com/allyshka/pwngitmanager) Git manager for pentesters
+- [**103**星][7m] [Py] [alexmyg/andropytool](https://github.com/alexmyg/andropytool) A framework for automated extraction of static and dynamic features from Android applications
+- [**103**星][2y] [Py] [1111joe1111/tuts](https://github.com/1111joe1111/tuts) Reverse engineering tutorials
+- [**102**星][8m] [l3m0n/webfuzzattack](https://github.com/l3m0n/webfuzzattack) web模糊测试 - 将漏洞可能性放大
+- [**102**星][12m] [searking/ggfwzs_in_hack](https://github.com/searking/ggfwzs_in_hack) hack VIP for chrome-extension 谷歌访问助手
+- [**102**星][2y] [raikia/recon-ng-api-key-creation](https://github.com/raikia/recon-ng-api-key-creation) One of the biggest annoyances of using Recon-ng is getting everything set up to use it. So here I’ll outline the different API keys it can use and where to get them yourself.
+- [**102**星][2m] [Py] [mazen160/jwt-pwn](https://github.com/mazen160/jwt-pwn) Security Testing Scripts for JWT
+- [**102**星][1y] [Py] [zwq0320/malicious_dynamic_behavior_detection_by_cnn](https://github.com/zwq0320/malicious_dynamic_behavior_detection_by_cnn) 使用CNN进行样本恶意动态行为检测
+- [**102**星][3y] [Go] [zaf/sipshock](https://github.com/zaf/sipshock) A scanner for SIP proxies vulnerable to Shellshock
+- [**102**星][11m] [C] [x41sec/x41-smartcard-fuzzing](https://github.com/x41sec/x41-smartcard-fuzzing) X41 Smartcard Fuzzer
+- [**102**星][2y] [Py] [wstart/db_baseline](https://github.com/wstart/db_baseline) 数据库基线检查工具
+- [**102**星][2y] [Py] [wolph/python-statsd](https://github.com/wolph/python-statsd) Python Client for the Etsy NodeJS Statsd Server
+- [**102**星][6m] [Py] [vmavromatis/absolutely-proprietary](https://github.com/vmavromatis/absolutely-proprietary) Proprietary package detector for arch-based distros. Compares your installed packages against Parabola's package blacklist and then prints your Stallman Freedom Index (free/total).
+- [**102**星][3y] [Py] [violentshell/rover](https://github.com/violentshell/rover) Proof of Concept code for CVE-2016-5696
+- [**102**星][3y] [veramine/detections](https://github.com/veramine/detections)
+- [**102**星][1m] [Kotlin] [uber/crumb](https://github.com/uber/crumb) An annotation processor for breadcrumbing metadata across compilation boundaries.
+- [**102**星][3m] [Go] [tbiehn/curryfinger](https://github.com/tbiehn/curryfinger) CURRYFINGER - SNI & Host header spoofing utility.
+- [**102**星][2y] [C++] [sensepost/gdi-palettes-exp](https://github.com/sensepost/gdi-palettes-exp) 滥用 GDI 对象来揭示内核漏洞利用
+- [**102**星][2y] [Go] [sakeven/httpproxy](https://github.com/sakeven/httpproxy) 基于 Go 开发,支持 http/1.1 以上版本的 HTTP(S) 代理。(Why not try out Mika?)
+- [**102**星][1y] [JS] [rassec/a_scan_framework](https://github.com/rassec/a_scan_framework) Network Security Vulnerability Manage
+- [**102**星][19d] [Py] [patois/idapyhelper](https://github.com/patois/idapyhelper) IDAPython脚本编写辅助
+- [**102**星][3m] [C#] [padovah4ck/cve-2019-1253](https://github.com/padovah4ck/cve-2019-1253) Poc for CVE-2019-1253
+- [**102**星][3y] [Py] [n0fate/volafox](https://github.com/n0fate/volafox) Mac OS X Memory Analysis Toolkit
+- [**102**星][11m] [Py] [mbevilacqua/appcompatprocessor](https://github.com/mbevilacqua/appcompatprocessor) "Evolving AppCompat/AmCache data analysis beyond grep"
+- [**102**星][4m] [Py] [matrix1001/heapinspect](https://github.com/matrix1001/heapinspect)
+- [**102**星][24d] [C] [madeye/tcp_china](https://github.com/madeye/tcp_china) TCP China congestion control algorithm
+- [**102**星][3y] [Java] [liuyufei/sslkiller](https://github.com/liuyufei/sslkiller) SSLKiller is used for killing SSL verification functions on Android client side. With SSLKiller, You can intercept app's HTTPS communication packages between the client and server.
+- [**102**星][8m] [PS] [leeberg/bluecommand](https://github.com/leeberg/bluecommand) Dashboarding and Tooling front-end for PowerShell Empire using PowerShell Universal Dashboard
+- [**102**星][6m] [Py] [kibodwapon/noeye](https://github.com/kibodwapon/noeye) A blind mode exploit framework (a dns server and a web app) that like wvs's AcuMonitor Service or burpsuite's collabrator or cloudeye
+- [**102**星][1m] [Go] [jmpsec/osctrl](https://github.com/jmpsec/osctrl) Fast and efficient osquery management
+- [**102**星][3y] [JS] [jkingsman/bishop](https://github.com/jkingsman/bishop) Hunt for vulnerable websites as you browse.
+- [**102**星][6m] [Py] [janniskirschner/horn3t](https://github.com/janniskirschner/horn3t) Powerful Visual Subdomain Enumeration at the Click of a Mouse
+- [**102**星][6d] [PHP] [io-developer/php-whois](https://github.com/io-developer/php-whois) PHP WHOIS provides parsed and raw whois lookup of domains and ASN routes. PHP 5.4+ and 7+ compatible
+- [**102**星][1m] [Py] [huuck/adbhoney](https://github.com/huuck/adbhoney) Low interaction honeypot designed for Android Debug Bridge over TCP/IP
+- [**102**星][2y] [C] [hc0d3r/sudohulk](https://github.com/hc0d3r/sudohulk) 使用ptraceHook系统调用execve, 监控并修改sudo命令的参数
+- [**102**星][2y] [C] [google/pg_page_verification](https://github.com/google/pg_page_verification) verify checksums on PostgreSQL data pages without having to load each page into shared buffer cache
+- [**102**星][3y] [feicong/android-app-sec](https://github.com/feicong/android-app-sec) ISC 2016安全训练营-安卓app逆向与安全防护 ppt
+- [**102**星][1y] [edoverflow/bugbountywiki](https://github.com/edoverflow/bugbountywiki) The Bug Bounty Wiki
+- [**102**星][1m] [TS] [eddyverbruggen/nativescript-fingerprint-auth](https://github.com/eddyverbruggen/nativescript-fingerprint-auth)
+- [**102**星][1y] [Java] [duo-labs/xray](https://github.com/duo-labs/xray) X-Ray allows you to scan your Android device for security vulnerabilities that put your device at risk.
+- [**102**星][10m] [C++] [decred/gominer](https://github.com/decred/gominer) Go (golang) based GPU miner for Decred.
+- [**102**星][1y] [cujanovic/crlf-injection-payloads](https://github.com/cujanovic/crlf-injection-payloads) Payloads for CRLF Injection
+- [**102**星][7d] [Py] [buffer/pylibemu](https://github.com/buffer/pylibemu) A Libemu Cython wrapper
+- [**102**星][3y] [C++] [azuregreen/injectcollection](https://github.com/azuregreen/injectcollection) A collection of injection via vc++ in ring3
+- [**102**星][6d] [PS] [awsmhacks/crackmapextreme](https://github.com/awsmhacks/crackmapextreme) For all your network pentesting needs
+- [**102**星][1y] [Py] [apg-intel/ipv6tools](https://github.com/apg-intel/ipv6tools) IPv6Tools is a robust modular framework that enables the ability to visually audit an IPv6 enabled network.
+- [**102**星][5m] [Py] [anx1ang/poc_pentest](https://github.com/anx1ang/poc_pentest)
+- [**102**星][5y] [Py] [ajinabraham/static-dom-xss-scanner](https://github.com/ajinabraham/static-dom-xss-scanner) Static DOM XSS Scanner is a Static Analysis tool written in python that will iterate through all the JavaScript and HTML files under the given directory and will list out all the possible sources and sinks that may cause DOM XSS. At the end of the scan, the tool will generate an HTML report.
+- [**102**星][6m] [HTML] [ahmia/search](https://github.com/ahmia/search) Ahmia - Search Engine for onion services.
+- [**101**星][8m] [Shell] [hmaverickadams/breach-parse](https://github.com/hmaverickadams/breach-parse) A tool for parsing breached passwords
+- [**101**星][1m] [C#] [n1xbyte/donutcs](https://github.com/n1xbyte/donutcs) dem sharp donuts
+- [**101**星][7d] [Ruby] [arkadiyt/bounty-targets](https://github.com/arkadiyt/bounty-targets) This project crawls bug bounty platform scopes (like Hackerone/Bugcrowd/etc) hourly and dumps them into the bounty-targets-data repo
+- [**101**星][9m] [polarislab/secpaper](https://github.com/PolarisLab/SecPaper) SecurityPaper For
+- [**101**星][4m] [Py] [6e726d/wig](https://github.com/6e726d/wig) Tools for 802.11 information gathering.
+- [**101**星][2y] [Py] [znuh/re-dected](https://github.com/znuh/re-dected) tools for playing with DECT
+- [**101**星][3m] [xx0hcd/malleable-c2-profiles](https://github.com/xx0hcd/malleable-c2-profiles) Cobalt Strike - Malleable C2 Profiles. A collection of profiles used in different projects using Cobalt Strike
+- [**101**星][17d] [HTML] [w3c/webappsec-csp](https://github.com/w3c/webappsec-csp) WebAppSec Content Security Policy
+- [**101**星][4y] [utkusen/eda2](https://github.com/utkusen/eda2) a more complex ransomware honeypot
+- [**101**星][2y] [Java] [spiderlabs/airachnid-burp-extension](https://github.com/spiderlabs/airachnid-burp-extension) A Burp Extension to test applications for vulnerability to the Web Cache Deception attack
+- [**101**星][6m] [Py] [skysider/vulnpoc](https://github.com/skysider/vulnpoc) Vulnerability Verification Environment based on Docker
+- [**101**星][4y] [Ruby] [sam-b/hashdata](https://github.com/sam-b/hashdata) A command line Hash Identifying tool.
+- [**101**星][8m] [Rust] [rub-syssec/nautilus](https://github.com/rub-syssec/nautilus) a grammar based feedback fuzzer
+- [**101**星][2m] [Py] [raw-packet/raw-packet](https://github.com/raw-packet/raw-packet) Raw-packet Project
+- [**101**星][9m] [polarislab/secpaper](https://github.com/polarislab/secpaper) SecurityPaper For
+- [**101**星][5d] [Dockerfile] [peterdavehello/tor-socks-proxy](https://github.com/peterdavehello/tor-socks-proxy) Setup Tor SOCKS5 proxy server with a < 10MB
+- [**101**星][2m] [C] [onotelli/justniffer](https://github.com/onotelli/justniffer) Justniffer Just A Network TCP Packet Sniffer .Justniffer is a network protocol analyzer that captures network traffic and produces logs in a customized way, can emulate Apache web server log files, track response times and extract all "intercepted" files from the HTTP traffic
+- [**101**星][2m] [Java] [netspi/burp-extensions](https://github.com/netspi/burp-extensions) Central Repo for Burp extensions
+- [**101**星][2y] [C++] [nccgroup/tpmgenie](https://github.com/nccgroup/tpmgenie) TPM Genie is an I2C bus interposer for discrete Trusted Platform Modules
+- [**101**星][3y] [Py] [n00py/norknork](https://github.com/n00py/norknork) Powershell Empire Persistence finder
+- [**101**星][1y] [Java] [mystech7/burp-hunter](https://github.com/mystech7/burp-hunter) XSS Hunter Burp Plugin
+- [**101**星][1y] [Py] [mr-un1k0d3r/windows-signedbinary](https://github.com/mr-un1k0d3r/windows-signedbinary) Generate Windows Signed Binary With a Different Hash
+- [**101**星][2m] [Py] [mkorman90/regipy](https://github.com/mkorman90/regipy) Regipy is an os independent python library for parsing offline registry hives
+- [**101**星][1y] [Go] [milo2012/cve-2018-0296](https://github.com/milo2012/cve-2018-0296) Test CVE-2018-0296 and extract usernames
+- [**101**星][2y] [C++] [mfontanini/dot11decrypt](https://github.com/mfontanini/dot11decrypt) An 802.11 WEP/WPA2 on-the-fly decrypter.
+- [**101**星][3y] [mattifestation/deviceguardbypassmitigationrules](https://github.com/mattifestation/deviceguardbypassmitigationrules) A reference Device Guard code integrity policy consisting of FilePublisher deny rules for published Device Guard configuration bypasses
+- [**101**星][1y] [Py] [macr0phag3/sniffer](https://github.com/macr0phag3/sniffer) A Sniffer for Open-WLAN
+- [**101**星][11m] [C] [kirillwow/ids_bypass](https://github.com/kirillwow/ids_bypass) 入侵检测系统(IDS)绕过PoC
+- [**101**星][4y] [Ruby] [joernchen/xxeserve](https://github.com/joernchen/xxeserve) XXE Out of Band Server.
+- [**101**星][2m] [ihebski/a-red-teamer-diaries](https://github.com/ihebski/a-red-teamer-diaries) RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.
+- [**101**星][1y] [Py] [google/closure-linter](https://github.com/google/closure-linter) Automatically exported from code.google.com/p/closure-linter
+- [**101**星][3m] [C++] [giovannidicanio/winreg](https://github.com/giovannidicanio/winreg) Convenient high-level C++ wrapper around the Windows Registry API
+- [**101**星][4y] [PS] [enigma0x3/invoke-loginprompt](https://github.com/enigma0x3/invoke-loginprompt) Invokes a Windows Security Login Prompt and outputs the clear text password.
+- [**101**星][2y] [Objective-C++] [electrajailbreak/cydia](https://github.com/electrajailbreak/cydia) Cydia modified for iOS 11/Electra
+- [**101**星][8y] [C] [djrbliss/libplayground](https://github.com/djrbliss/libplayground) A simple framework for developing Linux kernel heap exploit techniques
+- [**101**星][2y] [PS] [darkoperator/defcon25_ps_workshop](https://github.com/darkoperator/defcon25_ps_workshop) Materials of Workshop presented at DEFCON 25
+- [**101**星][3m] [C#] [damonmohammadbagher/nativepayload_reverse_tcp](https://github.com/damonmohammadbagher/nativepayload_reverse_tcp) Meterpreter Encrypted Payload by C#
+- [**101**星][8d] [C++] [cyclops-community/ctf](https://github.com/cyclops-community/ctf) Cyclops Tensor Framework: parallel arithmetic on multidimensional arrays
+- [**101**星][1y] [Java] [cornerpirate/java-stager](https://github.com/cornerpirate/java-stager) A PoC Java Stager which can download, compile, and execute a Java file in memory.
+- [**101**星][5y] [C++] [clymb3r/misc-windows-hacking](https://github.com/clymb3r/misc-windows-hacking) Miscellaneous projects related to attacking Windows.
+- [**101**星][2y] [Java] [clr2of8/gathercontacts](https://github.com/clr2of8/gathercontacts) A Burp Suite Extension to pull Employee Names from Google and Bing LinkedIn Search Results
+- [**101**星][1y] [C#] [chrismaddalena/sharpcloud](https://github.com/chrismaddalena/sharpcloud) Simple C# for checking for the existence of credential files related to AWS, Microsoft Azure, and Google Compute.
+- [**101**星][2y] [Py] [ceh-tn/the-axer](https://github.com/ceh-tn/the-axer) replace the manual procedure of creating your payloads with msfvenom , making it easier and a lot quicker
+- [**101**星][1y] [JS] [blackhole1/autofindxssandcsrf](https://github.com/blackhole1/autofindxssandcsrf) 自动化检测页面是否存在XSS和CSRF漏洞的浏览器插件(A plugin for browser that checks automatically whether a page haves XSS and CSRF vulnerabilities)
+- [**101**星][2y] [C] [benjibobs/async_wake](https://github.com/benjibobs/async_wake) iOS 11.1.2 kernel exploit and PoC local kernel debugger by
+- [**101**星][2y] [C] [akayn/postexploits](https://github.com/akayn/postexploits) post exploitation: Keyloggers, UacByPass etc..
+- [**101**星][20d] [Py] [adulau/cve-search](https://github.com/adulau/cve-search) cve-search is a tool to import CVE (Common Vulnerabilities and Exposures) and CPE (Common Platform Enumeration) into a MongoDB to facilitate search and processing of CVEs.
+- [**101**星][3m] [Java] [0ffffffffh/dragondance](https://github.com/0ffffffffh/dragondance) 在Ghidra中进行代码覆盖情况的可视化
+ - [Ghidra插件](https://github.com/0ffffffffh/dragondance/blob/master/README.md)
+ - [coverage-pin](https://github.com/0ffffffffh/dragondance/blob/master/coveragetools/README.md) 使用Pin收集信息
+- [**100**星][6m] [C] [siguza/iometa](https://github.com/siguza/iometa) Just another IOKit class dumper
+- [**100**星][9d] [Makefile] [honwen/openwrt-shadowsocksr](https://github.com/honwen/openwrt-shadowsocksr) ShadowsocksR-libev for OpenWrt/LEDE
+- [**100**星][2d] [JS] [paradiseduo/shadowsocksx-ng-r8](https://github.com/paradiseduo/shadowsocksx-ng-r8) ShadowsocksX-NG-R for MacOS
+- [**100**星][14d] [Shell] [snail007/proxy_admin_free](https://github.com/snail007/proxy_admin_free) A powerful web console of snail007/goproxy .
+- [**100**星][3y] [C] [sciencemanx/ctf_import](https://github.com/sciencemanx/ctf_import) Run basic functions from stripped binaries cross platform
+- [**100**星][4y] [woolabs/reverseng](https://github.com/woolabs/reverseng) 《Reverse Engineering for Beginners》翻译
+- [**100**星][3y] [Py] [williballenthin/shellbags](https://github.com/williballenthin/shellbags) Cross-platform, open-source shellbag parser
+- [**100**星][9m] [Shell] [vishnudxb/docker-blackeye](https://github.com/vishnudxb/docker-blackeye) Docker container for creating the phishing sites using Blackeye
+- [**100**星][3y] [Py] [tbgsecurity/splunk_shells](https://github.com/tbgsecurity/splunk_shells) Weaponizing Splunk with reverse and bind shells.
+- [**100**星][2y] [Py] [syss-research/outis](https://github.com/syss-research/outis) outis is a custom Remote Administration Tool (RAT) or something like that. It was build to support various transport methods (like DNS) and platforms (like Powershell).
+- [**100**星][10m] [Go] [subutai-io/p2p](https://github.com/subutai-io/p2p) P2P Cloud project allows users to build their private networks.
+- [**100**星][5m] [Py] [spring-epfl/lightnion](https://github.com/spring-epfl/lightnion) A light version of Tor portable to the browser
+- [**100**星][2y] [C] [shellster/dcsyncmonitor](https://github.com/shellster/dcsyncmonitor) Monitors for DCSYNC and DCSHADOW attacks and create custom Windows Events for these events.
+- [**100**星][1y] [Py] [securestate/eapeak](https://github.com/securestate/eapeak) Analysis Suite For EAP Enabled Wireless Networks
+- [**100**星][1y] [sapran/dontclickshit](https://github.com/sapran/dontclickshit) Як не стати кібер-жертвою
+- [**100**星][3y] [CSS] [nonce-disrespect/nonce-disrespect](https://github.com/nonce-disrespect/nonce-disrespect) Nonce-Disrespecting Adversaries: Practical Forgery Attacks on GCM in TLS
+- [**100**星][3m] [C] [nese-team/ourchallenges](https://github.com/nese-team/ourchallenges) writeups for our challenges
+- [**100**星][3y] [Py] [ncouture/mockssh](https://github.com/ncouture/mockssh) Mock an SSH server and define all commands it supports (Python, Twisted)
+- [**100**星][2m] [Py] [nccgroup/gitpwnd](https://github.com/nccgroup/gitpwnd) gitpwnd:网络渗透测试工具,可使攻击者向被攻击机器发送命令,并使用 git repo 作为 C&C 传输层接收结果
+- [**100**星][2m] [momika233/joomla-3.4.6-rce](https://github.com/momika233/joomla-3.4.6-rce) Joomla 3.4.6 – Remote Code Execution
+- [**100**星][5y] [JS] [malwarelu/malwasm](https://github.com/malwarelu/malwasm) Offline debugger for malware's reverse engineering
+- [**100**星][12m] [Py] [krintoxi/noobsec-toolkit](https://github.com/krintoxi/noobsec-toolkit) NoobSecToolkit is a Python Based Tool kit that brings together powerful security and anonymity tools and scripts with predefined security configurations and modifications. Making it very simple for students and the inexperienced to get started with offensive security!
+- [**100**星][5d] [Java] [jpmorganchase/tessera](https://github.com/jpmorganchase/tessera) Enterprise Implementation of Quorum's transaction manager
+- [**100**星][4y] [Py] [jonathansalwan/abf](https://github.com/jonathansalwan/abf) Abstract Binary Format Manipulation - ELF, PE and Mach-O format
+- [**100**星][1m] [jonaschn/awesome-he](https://github.com/jonaschn/awesome-he)
+- [**100**星][3y] [C] [jndok/iokit-dumper-arm64](https://github.com/jndok/iokit-dumper-arm64) tool for statically reconstructing the IOKit classes hierarchy from iOS kernelcache dumps
+- [**100**星][4y] [C] [ionescu007/hookingnirvana](https://github.com/ionescu007/hookingnirvana) Recon 2015 Presentation from Alex Ionescu
+- [**100**星][2y] [Py] [g0rx/cve-2018-7600-drupal-rce](https://github.com/g0rx/cve-2018-7600-drupal-rce) CVE-2018-7600 Drupal RCE
+- [**100**星][2y] [C++] [fvantienen/dji_rev](https://github.com/fvantienen/dji_rev) DJI Reverse engineering
+- [**100**星][8m] [fox-it/cobaltstrike-extraneous-space](https://github.com/fox-it/cobaltstrike-extraneous-space) Historical list of {Cobalt Strike,NanoHTTPD} servers
+- [**100**星][4y] [Py] [eset/vba-dynamic-hook](https://github.com/eset/vba-dynamic-hook) dynamically analyzes VBA macros inside Office documents by hooking function calls
+- [**100**星][2m] [Py] [elevenpaths/uac-a-mola](https://github.com/elevenpaths/uac-a-mola)
+- [**100**星][3m] [Py] [cs01/pygdbmi](https://github.com/cs01/pygdbmi) A library to parse gdb mi output, as well as control gdb subprocesses
+- [**100**星][4y] [Py] [cr4sh/uefi_boot_script_expl](https://github.com/cr4sh/uefi_boot_script_expl) CHIPSEC module that exploits UEFI boot script table vulnerability
+- [**100**星][2y] [C] [comsecuris/luaqemu](https://github.com/comsecuris/luaqemu) QEMU-based framework exposing several of QEMU-internal APIs to a LuaJIT core injected into QEMU itself. Among other things, this allows fast prototyping of target systems without any native code and minimal effort in Lua.
+- [**100**星][1y] [C] [cnlohr/fx3fun](https://github.com/cnlohr/fx3fun) Charles's playground for the Cypress FX3
+- [**100**星][5y] [Py] [blasty/moneyshot](https://github.com/blasty/moneyshot) A collection of python scripts to aid you in the final steps of binary exploitation or during the construction of buffers.
+- [**100**星][2y] [JS] [avlidienbrunn/bountydash](https://github.com/avlidienbrunn/bountydash) 从所有BugBounty平台收集你获取的奖励信息, 生成进度和漏洞类型信息图表等
+- [**100**星][2y] [C++] [artsabintsev/ethminer-for-macos](https://github.com/artsabintsev/ethminer-for-macos) Ethereum GPU Miner for macOS.
+- [**100**星][1m] [Py] [angr/claripy](https://github.com/angr/claripy) An abstraction layer for constraint solvers.
+- [**100**星][8m] [ObjC] [anders/pwgen](https://github.com/anders/pwgen) password generator for OS X
+- [**100**星][4y] [Py] [alexplaskett/qnxsecurity](https://github.com/alexplaskett/qnxsecurity) QNX and BB10 Security Tools
+- [**100**星][2y] [Py] [acceis/crypto_identifier](https://github.com/acceis/crypto_identifier) Crypto tool for pentest and ctf : try to uncipher data using multiple algorithms and block chaining modes. Usefull for a quick check on unknown cipher text and key dictionnary
+- [**100**星][11m] [1hack0/bug-bounty-101](https://github.com/1hack0/bug-bounty-101) Happy Hunting
+- [**99**星][2m] [Shell] [nfc-tools/milazycracker](https://github.com/nfc-tools/milazycracker) Mifare Classic Plus - Hardnested Attack Implementation for SCL3711 LibNFC USB reader
+- [**99**星][10d] [JS] [javascript-obfuscator/javascript-obfuscator-ui](https://github.com/javascript-obfuscator/javascript-obfuscator-ui) A web UI to the JavaScript Obfuscator node.js package.
+- [**99**星][10m] [winterssy/miui-purify](https://github.com/winterssy/miui-purify) 个人兴趣项目存档,使用 apktool 魔改 MIUI ROM,去除 MIUI 系统新增的广告。
+- [**99**星][14d] [Py] [devploit/xorpass](https://github.com/devploit/xorpass) Encoder to bypass WAF filters using XOR operations
+- [**99**星][2d] [TSQL] [cisagov/cset](https://github.com/cisagov/cset) Cybersecurity Evaluation Tool
+- [**99**星][17d] [PS] [dsccommunity/computermanagementdsc](https://github.com/dsccommunity/ComputerManagementDsc)
+- [**99**星][4m] [houjingyi233/cpu-vulnerability-collections](https://github.com/houjingyi233/CPU-vulnerability-collections)
+- [**99**星][2y] [Shell] [aoncyberlabs/cexigua](https://github.com/AonCyberLabs/Cexigua) Linux based inter-process code injection without ptrace(2)
+- [**99**星][1m] [PHP] [gwillem/magevulndb](https://github.com/gwillem/magevulndb) Central repository for third party Magento extensions with known security issues.
+- [**99**星][22d] [Py] [rapid7/le](https://github.com/rapid7/le) A command line utility for a convenient access to Logentries logging infrastructure.
+- [**99**星][2y] [antid0tecom/ios-kerneldocs](https://github.com/Antid0teCom/ios-kerneldocs) Various files helping to better understand the iOS / WatchOS / tvOS kernels
+- [**99**星][2y] [C++] [atxsinn3r/amsiscanner](https://github.com/atxsinn3r/amsiscanner) A C/C++ implementation of Microsoft's Antimalware Scan Interface
+- [**99**星][9m] [C#] [zodiacon/peexplorer](https://github.com/zodiacon/peexplorer) Portable Executable Explorer
+- [**99**星][3y] [Py] [ym2011/scanbackdoor](https://github.com/ym2011/scanbackdoor) Webshell扫描工具,通过各种规则和算法实现服务器脚本后门查杀
+- [**99**星][2y] [C] [xerpi/ds4vita](https://github.com/xerpi/ds4vita)
+- [**99**星][1y] [Py] [wonderqs/blade](https://github.com/wonderqs/blade) A webshell connection tool with customized WAF bypass payloads
+- [**99**星][27d] [Shell] [trimstray/massh-enum](https://github.com/trimstray/massh-enum) OpenSSH 2.3 up to 7.4 Mass Username Enumeration (CVE-2018-15473).
+- [**99**星][14d] [C++] [trailofbits/sienna-locomotive](https://github.com/trailofbits/sienna-locomotive) A user-friendly fuzzing and crash triage tool for Windows
+- [**99**星][1y] [Py] [thehappydinoa/iosrestrictionbruteforce](https://github.com/thehappydinoa/iosrestrictionbruteforce) Crack iOS Restriction Passcodes with Python
+- [**99**星][2y] [PS] [testingpens/malwarepersistencescripts](https://github.com/testingpens/malwarepersistencescripts) A collection of scripts I've written to help red and blue teams with malware persistence techniques.
+- [**99**星][9y] [C] [tecknicaltom/dsniff](https://github.com/tecknicaltom/dsniff) dsniff is a collection of tools for network auditing and penetration testing.
+- [**99**星][12m] [target/webbreaker](https://github.com/target/webbreaker) 自动并集中管理DAST,将其作为 DevOps pipeline 的一部分。(DAST:Dynamic Application Security Test,动态应用程序安全测试)
+- [**99**星][3y] [C++] [tandasat/exploitcapcom](https://github.com/tandasat/exploitcapcom) This is a standalone exploit for a vulnerable feature in Capcom.sys
+- [**99**星][2y] [Py] [sonickun/ctf-crypto-writeups](https://github.com/sonickun/ctf-crypto-writeups)
+- [**99**星][6m] [Py] [smythtech/sdnpwn](https://github.com/smythtech/sdnpwn) SDN 渗透测试工具包。(SDN:Software-Defined Networks,软件定义网络)
+- [**99**星][4y] [Py] [racwn/wp-file-analyser](https://github.com/racwn/wp-file-analyser) Find modified, missing and extra files in a WordPress directory
+- [**99**星][3y] [Java] [pwntester/s2-046-poc](https://github.com/pwntester/s2-046-poc) S2-046-PoC
+- [**99**星][2y] [Py] [pure-l0g1c/pulse](https://github.com/pure-l0g1c/pulse) Brute Force For Facebook,Instagram & Twitter
+- [**99**星][6m] [Shell] [parrotsec/anonsurf](https://github.com/parrotsec/anonsurf) parrot anonymous mode
+- [**99**星][28d] [C++] [oxagast/ansvif](https://github.com/oxagast/ansvif) A Not So Very Intelligent Fuzzer: An advanced fuzzing framework designed to find vulnerabilities in C/C++ code.
+- [**99**星][1y] [PS] [nettitude/invoke-powerthief](https://github.com/nettitude/invoke-powerthief) The PowerThIEf, an Internet Explorer Post Exploitation library
+- [**99**星][2y] [Py] [mr-un1k0d3r/sct-obfuscator](https://github.com/mr-un1k0d3r/sct-obfuscator) Cobalt Strike SCT payload obfuscator
+- [**99**星][2d] [TeX] [misp/misp-training](https://github.com/misp/misp-training) MISP trainings, threat intel and information sharing training materials with source code
+- [**99**星][2m] [Py] [m4cs/traxss](https://github.com/m4cs/traxss) traxss | Automated XSS Vulnerability Scanner Currently In Development
+- [**99**星][3y] [lorexxar/feigong](https://github.com/lorexxar/feigong) Feigong,针对各种情况自由变化的mysql注入脚本,In view of the different things freely change the mysql injection script
+- [**99**星][2y] [CSS] [lmy375/pinvmp](https://github.com/lmy375/pinvmp) 虚拟化代码辅助分析工具
+- [**99**星][30d] [Py] [lambdaconcept/minerva](https://github.com/lambdaconcept/minerva) A 32-bit RISC-V soft processor
+- [**99**星][2m] [Shell] [johanlike/djy-oneplus6-or-oneplus6t-nethunter-andrax-kernel](https://github.com/johanlike/djy-oneplus6-or-oneplus6t-nethunter-andrax-kernel) DJY Nethunter And Andrax Kernel Oneplus6-Oneplus6T
+- [**99**星][3y] [Java] [jkinder/jakstab](https://github.com/jkinder/jakstab) The Jakstab static analysis platform for binaries
+- [**99**星][3m] [Py] [intezer/memorypatchdetector](https://github.com/intezer/memorypatchdetector) Detects code differentials between executables in disk and the corresponding processes/modules in memory
+- [**99**星][2m] [C] [iaik/flush_flush](https://github.com/iaik/flush_flush) This repository contains examples of Flush+Flush cache attacks
+- [**99**星][11m] [hasherezade/pe-bear-releases](https://github.com/hasherezade/pe-bear-releases) PE-bear (builds only)
+- [**99**星][1y] [Java] [ganyao114/va_doc](https://github.com/ganyao114/va_doc) VirtualApp 代码注释
+- [**99**星][5y] [Java] [finn-no/xss-html-filter](https://github.com/finn-no/xss-html-filter) Open Sourced HTML filtering utility for Java. Used to parse user-submitted input and sanitize it against potential cross site scripting attacks, malicious html, or simply badly formed html.
+- [**99**星][1y] [Py] [darx0r/stingray](https://github.com/darx0r/stingray) 递归查找函数和字符串
+- [**99**星][3y] [C#] [cyberpoint/ruxcon2016etw](https://github.com/cyberpoint/ruxcon2016etw) Ruxcon2016 POC Code
+- [**99**星][3y] [C] [codelion/pathgrind](https://github.com/codelion/pathgrind) Path based Dynamic Analysis
+- [**99**星][4m] [Py] [circl/url-abuse](https://github.com/circl/url-abuse) A Versatile Software for URL review, analysis and black-list reporting
+- [**99**星][3y] [Py] [bontchev/wlscrape](https://github.com/bontchev/wlscrape) A tool for scrapping the possible malware from the Wikileaks AKP leak
+- [**99**星][4y] [JS] [bishopfox/cve-2016-1764](https://github.com/bishopfox/cve-2016-1764) Recovery of Plaintext iMessage Data Without Breaking Crypto
+- [**99**星][8d] [Scala] [bigdatagenomics/mango](https://github.com/bigdatagenomics/mango) A scalable genome browser. Apache 2 licensed.
+- [**99**星][9m] [Py] [attactics/nmapgrapher](https://github.com/attactics/nmapgrapher) A tool to generate graph and other output from NMAP XML files
+- [**99**星][1y] [C#] [atredispartners/cve-2018-0952-systemcollector](https://github.com/atredispartners/cve-2018-0952-systemcollector) PoC for Privilege Escalation in Windows 10 Diagnostics Hub Standard Collector Service
+- [**98**星][4y] [C] [aquynh/unidos](https://github.com/aquynh/unidos) MSDOS emulator built on top of Unicorn engine
+- [**98**星][7d] [Shell] [seajaysec/cypheroth](https://github.com/seajaysec/cypheroth) Automated, extensible toolset that runs cypher queries against Bloodhound's Neo4j backend and saves output to spreadsheets.
+- [**98**星][3m] [C++] [marcosd4h/sysmonx](https://github.com/marcosd4h/sysmonx) An Augmented Drop-In Replacement of Sysmon
+- [**98**星][23d] [chryzsh/awesome-bloodhound](https://github.com/chryzsh/awesome-bloodhound) A curated list of awesome BloodhoundAD resources
+- [**98**星][1m] [C] [radareorg/radare2-bindings](https://github.com/radareorg/radare2-bindings) Bindings of the r2 api for Valabind and friends
+- [**98**星][8m] [Py] [zsdlove/apkvulcheck](https://github.com/zsdlove/apkvulcheck) This is a tool to help androidcoder to check the flaws in their projects.
+- [**98**星][2y] [Py] [trendmicro/defplorex](https://github.com/trendmicro/defplorex) 一种用于大规模电子犯罪取证的机器学习工具包
+- [**98**星][9m] [Go] [superfly/wormhole](https://github.com/superfly/wormhole) Fly.io secure tunnel
+- [**98**星][4y] [Java] [summitt/burp-ysoserial](https://github.com/summitt/burp-ysoserial) YSOSERIAL Integration with burp suite
+- [**98**星][3y] [singe/wifi-frequency-hacker](https://github.com/singe/wifi-frequency-hacker) A modified frequency regulatory domain configuration that doesn't limit you.
+- [**98**星][2m] [Ruby] [simp/simp-core](https://github.com/simp/simp-core) The base SIMP build repository
+- [**98**星][4y] [PHP] [silentbreaksec/throwbacklp](https://github.com/silentbreaksec/throwbacklp) Listening Post for Throwback Implant
+- [**98**星][2y] [Java] [securityriskadvisors/cmd.jsp](https://github.com/securityriskadvisors/cmd.jsp) A super small jsp webshell with file upload capabilities.
+- [**98**星][6y] [C++] [sdhash/sdhash](https://github.com/sdhash/sdhash) allows two arbitrary blobs of data to be compared for similarity based on common strings of binary data
+- [**98**星][1y] [Py] [scottgarner/beetbox](https://github.com/scottgarner/beetbox) Python code that powers the BeetBox.
+- [**98**星][1m] [Py] [sandialabs/dr_robot](https://github.com/sandialabs/dr_robot) This tool can be used to enumerate the subdomains associated with a company by aggregating the results of multiple OSINT (Open Source Intelligence) tools.
+- [**98**星][11m] [Batchfile] [sagishahar/lpeworkshop](https://github.com/sagishahar/lpeworkshop) Windows/Linux本地提权工作室
+- [**98**星][3m] [Py] [phith0n/realworldctf](https://github.com/phith0n/realworldctf) My Real World CTF challenges
+- [**98**星][5y] [Py] [onesourcecat/scan-framework](https://github.com/onesourcecat/scan-framework) A framework used for Vulnerability scanning
+- [**98**星][10m] [C] [nowrep/vita-shellbat](https://github.com/nowrep/vita-shellbat) taiHEN plugin that shows battery percent in statusbar
+- [**98**星][4m] [Py] [mushorg/tanner](https://github.com/mushorg/tanner) He who flays the hide
+- [**98**星][4m] [C++] [mixaill/fakepdb](https://github.com/mixaill/fakepdb) 通过IDA数据库生成PDB文件
+- [**98**星][4m] [Py] [milo2012/cve-2018-13382](https://github.com/milo2012/cve-2018-13382) CVE-2018-13382
+- [**98**星][2y] [C] [micropython/micropython-unicorn](https://github.com/micropython/micropython-unicorn) 基于 Unicorn 模拟器的虚拟微控制器(virtual microcontroller),以及针对此虚拟微控制器的 MicroPython。
+- [**98**星][3y] [Py] [merculite/ble-security](https://github.com/merculite/ble-security) Hacking Bluetooth Low Energy Locks
+- [**98**星][6y] [Py] [matonis/page_brute](https://github.com/matonis/page_brute) a digital forensic tool purposed to analyze and categorize individual paged memory frames from Windows Page Files by appying YARA-based signatures to fix-sized blocks of pagefile.sys
+- [**98**星][3y] [Py] [matiasb/demiurge](https://github.com/matiasb/demiurge) PyQuery-based scraping micro-framework.
+- [**98**星][1m] [Go] [ls0f/cracker](https://github.com/ls0f/cracker) tunnel over http[s]
+- [**98**星][2y] [Py] [leesoh/yams](https://github.com/leesoh/yams) A collectionof Ansible roles for automating infosec builds.
+- [**98**星][2y] [ktecv2000/how-to-play-ctf](https://github.com/ktecv2000/how-to-play-ctf) CTF入門建議
+- [**98**星][15d] [Shell] [konstruktoid/ansible-role-hardening](https://github.com/konstruktoid/ansible-role-hardening) Ansible role to apply a security baseline. Systemd edition.
+- [**98**星][8m] [Swift] [kofktu/sniffer](https://github.com/kofktu/sniffer) Networking activity logger for Swift
+- [**98**星][2y] [Py] [kitctf/writeups](https://github.com/kitctf/writeups) CTF writeups
+- [**98**星][1y] [C] [jakeajames/multi_path](https://github.com/jakeajames/multi_path) multi_path with root and sandbox escape
+- [**98**星][2y] [Java] [irsl/jackson-rce-via-spel](https://github.com/irsl/jackson-rce-via-spel) An example project that exploits the default typing issue in Jackson-databind via Spring application contexts and expressions
+- [**98**星][3y] [ObjC] [insidegui/darkmode](https://github.com/insidegui/darkmode) Enable "real dark mode" on OS X / macOS
+- [**98**星][3m] [Py] [guyingbo/shadowproxy](https://github.com/guyingbo/shadowproxy) A proxy server that implements Socks5/Shadowsocks/Redirect/HTTP (tcp) and Shadowsocks/TProxy/Tunnel (udp) protocols.
+- [**98**星][1y] [Ruby] [green-m/green-hat-suite](https://github.com/green-m/green-hat-suite) Green-hat-suite is a tool to generate meterpreter/shell which could evade antivirus.
+- [**98**星][2y] [Py] [google/legilimency](https://github.com/google/legilimency) A Memory Research Platform for iOS
+- [**98**星][3y] [Shell] [gebl/dirtycow-docker-vdso](https://github.com/gebl/dirtycow-docker-vdso)
+- [**98**星][5m] [Py] [fmk0/scripts](https://github.com/fmk0/scripts)
+- [**98**星][3y] [flothrone/bootguard](https://github.com/flothrone/bootguard)
+- [**98**星][2y] [C++] [cojocar/bin2llvm](https://github.com/cojocar/bin2llvm) A binary to LLVM translator
+- [**98**星][3y] [PS] [chango77747/adenumerator](https://github.com/chango77747/adenumerator) Active Directory enumeration from non-domain system.
+- [**98**星][2m] [byt3bl33d3r/slides](https://github.com/byt3bl33d3r/slides) Slides from various talks that I've given over the years
+- [**98**星][2y] [Py] [blackye/webdirdig](https://github.com/blackye/webdirdig) web敏感目录、信息泄漏批量扫描脚本,结合爬虫、目录深度遍历。
+- [**98**星][4m] [Pascal] [artlav/meteor_decoder](https://github.com/artlav/meteor_decoder) A portable decoder for METEOR M weather satellite LRPT signal
+- [**98**星][4y] [Java] [andrewmichaelsmith/bluepot](https://github.com/andrewmichaelsmith/bluepot) Bluetooth Honeypot
+- [**98**星][1y] [Go] [0x09al/go-deliver](https://github.com/0x09al/go-deliver) Go-deliver is a payload delivery tool coded in Go.
+- [**97**星][1y] [Go] [bechurch/reverse-proxy-demo](https://github.com/bechurch/reverse-proxy-demo)
+- [**97**星][1y] [Py] [tonyseek/rsocks](https://github.com/tonyseek/rsocks) A SOCKS 4/5 reverse proxy server
+- [**97**星][2d] [Py] [securisec/chepy](https://github.com/securisec/chepy) Chepy is a python lib/cli equivalent of the awesome CyberChef tool.
+- [**97**星][1y] [PS] [hackplayers/empire-mod-hackplayers](https://github.com/hackplayers/empire-mod-hackplayers) PowerShell Empire mod to post-exploit the World!
+- [**97**星][11m] [R] [stephenturner/annotables](https://github.com/stephenturner/annotables) R data package for annotating/converting Gene IDs
+- [**97**星][3m] [C] [virtualabs/radiobit](https://github.com/virtualabs/radiobit) Micro:Bit Radio framework
+- [**97**星][3m] [xyntax/security-conference-archive](https://github.com/xyntax/security-conference-archive) Collection of Security Conference Slides/Papers
+- [**97**星][1m] [PHP] [cybercog/laravel-optimus](https://github.com/cybercog/laravel-optimus) Transform your internal id's to obfuscated integers based on Knuth's integer hash.
+- [**97**星][28d] [C++] [4d61726b/virtualkd-redux](https://github.com/4d61726b/virtualkd-redux) VirtualKD-Redux - A revival and modernization of VirtualKD
+- [**97**星][1m] [Py] [xct/ropstar](https://github.com/xct/ropstar) Automatic exploit generation for simple linux pwn challenges.
+- [**97**星][20d] [Py] [pagalaxylab/vxhunter](https://github.com/PAGalaxyLab/vxhunter) 用于分析基于VxWorks的嵌入式设备的工具集
+ - [R2](https://github.com/PAGalaxyLab/vxhunter/blob/master/firmware_tools/vxhunter_r2_py2.py)
+ - [IDA插件](https://github.com/PAGalaxyLab/vxhunter/blob/master/firmware_tools/vxhunter_ida.py)
+ - [Ghidra插件](https://github.com/PAGalaxyLab/vxhunter/tree/master/firmware_tools/ghidra)
+- [**97**星][2y] [CSS] [owasp/owasp-summit-2017](https://github.com/OWASP/owasp-summit-2017) Content for OWASP Summit 2017 site
+- [**97**星][4y] [Java] [zencodex/hack-android](https://github.com/zencodex/hack-android) Collection tools for hack android, java
+- [**97**星][3y] [Ruby] [zcgonvh/cve-2017-7269](https://github.com/zcgonvh/cve-2017-7269) cve-2017-7269:修订版msf模块
+- [**97**星][4m] [Py] [woanware/usbdeviceforensics](https://github.com/woanware/usbdeviceforensics) Python script for extracting USB information from Windows registry hives
+- [**97**星][3m] [C] [vmonaco/kloak](https://github.com/vmonaco/kloak) Keystroke-level online anonymization kernel: obfuscates typing behavior at the device level.
+- [**97**星][2y] [Go] [subgraph/fw-daemon](https://github.com/subgraph/fw-daemon) Subgraph Application Firewall
+- [**97**星][10m] [Shell] [sskaje/6in4](https://github.com/sskaje/6in4) IPv6-in-IPv4 Tunnel Server
+- [**97**星][8m] [Shell] [shadowhatesyou/pipetap.sh](https://github.com/shadowhatesyou/pipetap.sh) This script invokes tcpdump over ssh piping to STDOUT, allowing remote use of wireshark
+- [**97**星][5m] [C] [s0lst1c3/silentbridge](https://github.com/s0lst1c3/silentbridge) Silentbridge is a toolkit for bypassing 802.1x-2010 and 802.1x-2004.
+- [**97**星][6y] [Py] [roglew/wifikill](https://github.com/roglew/wifikill) A python program to kick people off of wifi
+- [**97**星][4y] [Py] [ridter/myjsrat](https://github.com/ridter/myjsrat) This is JSRat.ps1 in Python
+- [**97**星][2y] [PS] [rhinosecuritylabs/aggressor-scripts](https://github.com/rhinosecuritylabs/aggressor-scripts) Aggregation of Cobalt Strike's aggressor scripts.
+- [**97**星][9m] [Go] [renatoathaydes/go-hash](https://github.com/renatoathaydes/go-hash) Small utility to store secret information like passwords.
+- [**97**星][12d] [Shell] [qubesos/qubes-antievilmaid](https://github.com/qubesos/qubes-antievilmaid) an implementation of a TPM-based dynamic (Intel TXT) trusted
+boot for dracut/initramfs-based OSes (Fedora, Qubes, etc.) with a primary goal
+to prevent Evil Maid attacks.
+- [**97**星][4y] [C++] [quarkslab/qb-sync](https://github.com/quarkslab/qb-sync) 使用调试器调试时,自动在IDA中跟随调试位置
+ - [GDB插件](https://github.com/quarkslab/qb-sync/tree/master/ext_gdb)
+ - [IDA插件](https://github.com/quarkslab/qb-sync/tree/master/ext_ida)
+ - [LLDB](https://github.com/quarkslab/qb-sync/tree/master/ext_lldb)
+ - [OD2](https://github.com/quarkslab/qb-sync/tree/master/ext_olly2)
+ - [WinDbg](https://github.com/quarkslab/qb-sync/tree/master/ext_windbg/sync)
+ - [x64dbg](https://github.com/quarkslab/qb-sync/tree/master/ext_x64dbg)
+- [**97**星][2y] [Java] [piasy/fridaandroidtracer](https://github.com/piasy/fridaandroidtracer) A runnable jar that generate Javascript hook script to hook Android classes.
+- [**97**星][7m] [PS] [p3nt4/magiccopy](https://github.com/p3nt4/magiccopy) Powershell script to exfiltrate large files quickly and securely
+- [**97**星][1y] [Go] [netxfly/crack_ssh](https://github.com/netxfly/crack_ssh) go写的协程版的ssh\redis\mongodb弱口令破解工具
+- [**97**星][2y] [Go] [mxi4oyu/dockerxscan](https://github.com/mxi4oyu/dockerxscan) DockerXScan——Docker镜像漏洞扫描器
+- [**97**星][1y] [Py] [mitshell/libmich](https://github.com/mitshell/libmich) Easy developpement of formats [de]coding for network protocols (IP, mobile...) and files
+- [**97**星][2y] [Swift] [liruqi/mume-ios](https://github.com/liruqi/mume-ios) an iOS client that implements custom proxies with the leverage of Network Extension framework introduced by Apple since iOS 9
+- [**97**星][30d] [C] [libyal/libevtx](https://github.com/libyal/libevtx) Library and tools to access the Windows XML Event Log (EVTX) format
+- [**97**星][1y] [C++] [jeremywildsmith/x86devirt](https://github.com/jeremywildsmith/x86devirt) A project that aims to automatically devirtualize code that has been virtualized using x86virt
+- [**97**星][5m] [Py] [itsmehacker/cardpwn](https://github.com/itsmehacker/cardpwn) OSINT Tool to find Breached Credit Cards Information
+- [**97**星][1y] [C#] [holly-hacker/eazfixer](https://github.com/holly-hacker/eazfixer) A deobfuscation tool for Eazfuscator.
+- [**97**星][3y] [C] [georgenicolaou/w64owow64](https://github.com/georgenicolaou/w64owow64) Library that allows you to run 64bit code on a Wow64 32bit process
+- [**97**星][3y] [Py] [fdiskyou/kcshell](https://github.com/fdiskyou/kcshell) 交互式汇编/反汇编 Shell,Python3编写,基于Keystone/Capstone
+- [**97**星][23d] [C++] [fdiskyou/iris](https://github.com/fdiskyou/iris) WinDbg extension to display Windows process mitigations
+- [**97**星][2y] [Py] [dakotanelson/sneaky-creeper](https://github.com/dakotanelson/sneaky-creeper) Get your APT on using social media as a tool for data exfiltration.
+- [**97**星][3y] [Py] [cx9527/strongdb](https://github.com/cx9527/strongdb) gdb plugin for android debugging
+- [**97**星][2y] [HTML] [chrisallenlane/drek](https://github.com/chrisallenlane/drek) drek:静态代码分析工具,用于执行以安全性为主的代码审计
+- [**97**星][6m] [Java] [an0nymous0/mybatisplugin-crack-javassist](https://github.com/an0nymous0/mybatisplugin-crack-javassist) Javassist实现的破解IDEA MybatisPlugin修改字节码工具,仅供学习用途。
+- [**97**星][12m] [Assembly] [86hh/dreamloader](https://github.com/86hh/dreamloader) Simple 32/64-bit PEs loader.
+- [**97**星][5y] [C++] [0vercl0k/ollydbg2-python](https://github.com/0vercl0k/ollydbg2-python) Scripting OllyDBG2 using Python is now possible!
+- [**96**星][2m] [C++] [xiangweizeng/darknet2ncnn](https://github.com/xiangweizeng/darknet2ncnn) Darknet2ncnn converts the darknet model to the ncnn model
+- [**96**星][5d] [Ruby] [bl4de/dictionaries](https://github.com/bl4de/dictionaries) Misc dictionaries for directory/file enumeration, username enumeration, password dictionary/bruteforce attacks
+- [**96**星][2m] [404notf0und/always-learning](https://github.com/404notf0und/always-learning) 404 Not Found的知识库:计算机基础、前端技术、编程技术、底层研究、安全技术、安全研究、人工智能、企业安全建设、安全发展、综合素质
+- [**96**星][2y] [JS] [paulsec/shodan-firefox-addon](https://github.com/paulsec/shodan-firefox-addon) Shodan Firefox Add-on
+- [**96**星][3m] [Java] [guardianproject/pixelknot](https://github.com/guardianproject/pixelknot) Image stego app using the F5 algorithm
+- [**96**星][19d] [Py] [fboldewin/com-code-helper](https://github.com/fboldewin/com-code-helper) IDAPython脚本, 辅助重建MS COM 代码
+- [**96**星][1m] [C#] [tyranid/windowsrpcclients](https://github.com/tyranid/windowsrpcclients) This respository is a collection of C# class libraries which implement RPC clients for various versions of the Windows Operating System from 7 to Windows 10.
+- [**96**星][16d] [Py] [b17zr/ntlm_challenger](https://github.com/b17zr/ntlm_challenger) Parse NTLM over HTTP challenge messages
+- [**96**星][1m] [smi1esec/web-security-note](https://github.com/Smi1eSEC/Web-Security-Note) Record some common Web security sites
+- [**96**星][11m] [Py] [presto412/captcha-cracker](https://github.com/Presto412/Captcha-Cracker) Cracks the Captcha at VIT University's Academics Portal
+- [**96**星][25d] [Py] [nkargas/gen2-uhf-rfid-reader](https://github.com/nkargas/Gen2-UHF-RFID-Reader) Gen2 UHF RFID reader with USRP and GNU Radio. Tested with USRPN200 and GNU Radio v3.7.4
+- [**96**星][4y] [PS] [nsacyber/certificate-authority-situational-awareness](https://github.com/nsacyber/Certificate-Authority-Situational-Awareness) Identifies unexpected and prohibited certificate authority certificates on Windows systems. #nsacyber
+- [**96**星][1y] [Shell] [xme/misp-docker](https://github.com/xme/misp-docker) Docker container for MISP
+- [**96**星][2y] [Py] [unix-ninja/shellfire](https://github.com/unix-ninja/shellfire) Exploitation shell for exploiting LFI, RFI, and command injection vulnerabilities
+- [**96**星][3y] [Py] [torque59/nosqlpot](https://github.com/torque59/nosqlpot) The NoSQL Honeypot Framework
+- [**96**星][2y] [Java] [tengzhangchao/pycmd](https://github.com/tengzhangchao/pycmd) python+php+jsp WebShell(一句话木马)
+- [**96**星][5y] [sooshie/security-data-analysis](https://github.com/sooshie/security-data-analysis) A series of labs that will help users apply various data science techniques to security related data.
+- [**96**星][3y] [HTML] [skiptomyliu/solutions-bwapp](https://github.com/skiptomyliu/solutions-bwapp) In progress rough solutions to bWAPP / bee-box
+- [**96**星][3y] [secmobi/slides](https://github.com/secmobi/slides) My presentations in some recent security conferences
+- [**96**星][3y] [C] [s4n7h0/practical-reverse-engineering-using-radare2](https://github.com/s4n7h0/practical-reverse-engineering-using-radare2) Training Materials of Practical Reverse Engineering using Radare2
+- [**96**星][2y] [Py] [robindavid/idasec](https://github.com/robindavid/idasec) IDA插件,与Binsec 平台进行交互
+- [**96**星][1y] [Py] [njcx/pocsuite_poc_collect](https://github.com/njcx/pocsuite_poc_collect) 收集一些 poc with pocsuite框架
+- [**96**星][2y] [Lua] [niallmcl/deep-android-malware-detection](https://github.com/niallmcl/deep-android-malware-detection) Code for Deep Android Malware Detection paper
+- [**96**星][3y] [Py] [neuroo/equip](https://github.com/neuroo/equip) Python bytecode instrumentation library
+- [**96**星][1y] [Py] [mrmtwoj/0day-mikrotik](https://github.com/mrmtwoj/0day-mikrotik)
+- [**96**星][4m] [HTML] [momenbasel/keyfinder](https://github.com/momenbasel/keyfinder) Keyfinder
+- [**96**星][7m] [Py] [michyamrane/okadminfinder3](https://github.com/michyamrane/okadminfinder3) [ Admin panel finder / Admin Login Page Finder ] ¢σ∂є∂ ву
+- [**96**星][3y] [Py] [magicming200/tomcat-weak-password-scanner](https://github.com/magicming200/tomcat-weak-password-scanner) 醉考拉tomcat后台弱口令扫描器,命令行版+图形界面版。
+- [**96**星][3y] [C++] [luctalpe/wmimon](https://github.com/luctalpe/wmimon) Tool to monitor WMI activity on Windows
+- [**96**星][23d] [Py] [leeon123/cc-attack](https://github.com/leeon123/cc-attack) Using Socks4/5 proxy to make a multithread Http-flood/Https-flood (cc) attack.
+- [**96**星][5y] [Py] [le4f/dnsmaper](https://github.com/le4f/dnsmaper) 子域名枚举与地图标记
+- [**96**星][7y] [Py] [k3170makan/goodork](https://github.com/k3170makan/goodork) Command line go0gle dorking tool
+- [**96**星][2y] [Py] [jjf012/passivescanner](https://github.com/jjf012/passivescanner) a passive scanner based on Mitmproxy and Arachni
+- [**96**星][2y] [Java] [jgillam/burp-co2](https://github.com/jgillam/burp-co2) A collection of enhancements for Portswigger's popular Burp Suite web penetration testing tool.
+- [**96**星][7y] [Py] [jeffbryner/pyioc](https://github.com/jeffbryner/pyioc) Python tools for IOC (Indicator of Compromise) handling
+- [**96**星][3m] [Pascal] [hongludianxue/bailu-sed-tool](https://github.com/hongludianxue/bailu-sed-tool) 白鹿社工字典生成器,灵活与易用兼顾。
+- [**96**星][2y] [Py] [he1m4n6a/btscan](https://github.com/he1m4n6a/btscan) 批量漏洞扫描框架
+- [**96**星][17d] [Ruby] [hahwul/mad-metasploit](https://github.com/hahwul/mad-metasploit) Metasploit custom modules, plugins, resource script and.. awesome metasploit collection
+- [**96**星][1m] [JS] [google/service-worker-detector](https://github.com/google/service-worker-detector) This extension detects if a website registers a Service Worker.
+- [**96**星][7d] [C++] [glmcdona/strings2](https://github.com/glmcdona/strings2) extracting strings from binary data
+- [**96**星][2m] [geeksonsecurity/vuln-web-apps](https://github.com/geeksonsecurity/vuln-web-apps) A curated list of vulnerable web applications.
+- [**96**星][6m] [Shell] [gavinlyonsrepo/cylon](https://github.com/gavinlyonsrepo/cylon) Updates, maintenance, backups and system checks in a TUI menu driven bash shell script for an Arch based Linux distro
+- [**96**星][20d] [Py] [felamos/weirdhta](https://github.com/felamos/weirdhta) A python tool to create obfuscated HTA script.
+- [**96**星][1y] [Pascal] [fdiskyou/www.rootkit.com](https://github.com/fdiskyou/www.rootkit.com)
+- [**96**星][6y] [C] [enzolovesbacon/inficere](https://github.com/enzolovesbacon/inficere) Mac OS X rootkit - for learning purposes
+- [**96**星][2d] [dxxzst/free-proxy-list](https://github.com/dxxzst/free-proxy-list) Free proxy list 免费的代理IP,定时更新,优先更新:
+- [**96**星][1y] [JS] [desudesutalk/desudesutalk](https://github.com/desudesutalk/desudesutalk) Steganography for imageboards
+- [**96**星][7m] [Swift] [depoon/networkinterceptor](https://github.com/depoon/networkinterceptor) iOS URLRequest interception framework
+- [**96**星][1y] [Py] [danmcinerney/msf-autopwn](https://github.com/danmcinerney/msf-autopwn) Autoexploitation of some of the most common vulnerabilities in wild
+- [**96**星][3y] [Py] [chaitin/pro](https://github.com/chaitin/pro) A crappy tool used in our private PS4 jailbreak
+- [**96**星][2y] [C] [cetfor/antidbg](https://github.com/cetfor/antidbg) A bunch of Windows anti-debugging tricks.
+- [**96**星][3y] [C#] [bitbeans/streamcryptor](https://github.com/bitbeans/streamcryptor) Stream encryption & decryption with libsodium and protobuf
+- [**96**星][3m] [Java] [bastienjalbert/topguw](https://github.com/bastienjalbert/topguw) A software to make easier some cracking GSM steps (known plaintext attack vector)
+- [**96**星][8m] [Shell] [baguswiratmaadi/catnip](https://github.com/baguswiratmaadi/catnip) Cat-Nip Automated Basic Pentest Tool - Designed For Kali Linux
+- [**96**星][2y] [JS] [anttikurittu/kirjuri](https://github.com/anttikurittu/kirjuri) Kirjuri is a web application for managing cases and physical forensic evidence items.
+- [**96**星][13d] [Py] [airbus-cert/regrippy](https://github.com/airbus-cert/regrippy) a framework for reading and extracting useful forensics data from Windows registry hives
+- [**96**星][7y] [0day1day/mwcrawler](https://github.com/0day1day/mwcrawler) Python Malware Crawler for Zoos and Repositories
+- [**95**星][25d] [C] [ssd-secure-disclosure/advisories](https://github.com/ssd-secure-disclosure/advisories) SSD Secure Disclosure Advisories
+- [**95**星][2m] [ashemery/linuxforensics](https://github.com/ashemery/LinuxForensics) Everything related to Linux Forensics
+- [**95**星][9m] [C] [sagaantheepic/sagaan-anticheat-v2.0](https://github.com/ContionMig/ContionMig-AntiCheat) Anti Cheat i made in my free time. Credits to everyone who helped are in the files and some are in the code. I will definitely improve this Anti Cheat along the way, now its just beta. Enjoy.
+- [**95**星][1y] [sectool/redteam-hardware-toolkit](https://github.com/sectool/redteam-hardware-toolkit)
+- [**95**星][1y] [Shell] [cyb0r9/quasar](https://github.com/Cyb0r9/quasar) An Information Gathering Framework For Lazy Penetration Testers
+- [**95**星][11m] [Java] [open-keychain/openpgp-api](https://github.com/open-keychain/openpgp-api) OpenPGP API library
+- [**95**星][2m] [Py] [ubuntu-mate/mate-dock-applet](https://github.com/ubuntu-mate/mate-dock-applet) application dock for the MATE panel
+- [**95**星][6d] [JS] [frida/frida-java-bridge](https://github.com/frida/frida-java-bridge) Java runtime interop from Frida
+- [**95**星][2y] [ObjC] [xslim/mobiledevicemanager](https://github.com/xslim/mobiledevicemanager) Manage iOS devices through iTunes lib
+- [**95**星][3y] [Py] [v1cker/src_edu](https://github.com/v1cker/src_edu) 为各位出色的渗透工程师提供攻击目标。
+- [**95**星][3y] [Py] [tehsyntx/loffice](https://github.com/tehsyntx/loffice) Lazy Office Analyzer
+- [**95**星][1m] [Py] [songguoxiong/wenshu_utils](https://github.com/songguoxiong/wenshu_utils) 裁判文书网 参数加解密工具库 for Python and Java
+- [**95**星][2y] [Pascal] [senjaxus/allakore_remote](https://github.com/senjaxus/allakore_remote) AllaKore Remote is Open Source Remote Access software written in Delphi Seattle.
+- [**95**星][2y] [Py] [safebreach-labs/mkmalwarefrom](https://github.com/safebreach-labs/mkmalwarefrom) Proof-of-concept two-stage dropper generator that uses bits from external sources
+- [**95**星][3y] [Shell] [ppabc/security_check](https://github.com/ppabc/security_check) LINUX安全检查脚本,支持centos5,centos6,ubuntu
+- [**95**星][1y] [Java] [pengzhile/atlassian-agent](https://github.com/pengzhile/atlassian-agent) Atlassian's productions crack.
+- [**95**星][2y] [Java] [oliverklee/pixy](https://github.com/oliverklee/pixy) Pixy is a scanner static code analysis tools that scans PHP applications for security vulnerabilities.
+- [**95**星][3y] [Py] [nowsecure/samsung-ime-rce-poc](https://github.com/nowsecure/samsung-ime-rce-poc) Samsung Remote Code Execution as System User
+- [**95**星][5y] [Py] [nihilus/ida-idc-scripts](https://github.com/nihilus/ida-idc-scripts) 多个IDC脚本收集
+- [**95**星][1y] [Py] [n4xh4ck5/cmssc4n](https://github.com/n4xh4ck5/cmssc4n) Tool to identify if a domain is a CMS such as Wordpress, Moodle, Joomla, Drupal or Prestashop
+- [**95**星][1m] [JS] [microsoftedge/jsdbg](https://github.com/microsoftedge/jsdbg) Debugging extensions for Microsoft Edge and other Chromium-based browsers
+- [**95**星][3m] [Py] [matrix07ksa/brute_force](https://github.com/matrix07ksa/brute_force) Brute_Force_Attack Gmail Hotmail Twitter Facebook Netflix
+- [**95**星][1y] [Py] [martinvigo/voicemailautomator](https://github.com/martinvigo/voicemailautomator) A tool that serves as a Proof of Concept for the research I presented at DEF CON 26, "Compromising online accounts by cracking voicemail systems"
+- [**95**星][5y] [C++] [malwaretech/fakembr](https://github.com/malwaretech/fakembr) TDL4 style rootkit to spoof read/write requests to master boot record
+- [**95**星][2y] [CSS] [malaohu/arukas-api](https://github.com/malaohu/arukas-api) Arukas API 自动获取IP和端口,SSR服务器订阅,Arukas 监测启动
+- [**95**星][3m] [Py] [lonely-night/fastjson_gadgets_scanner](https://github.com/lonely-night/fastjson_gadgets_scanner)
+- [**95**星][2y] [Py] [localh0t/wildpwn](https://github.com/localh0t/wildpwn) unix wildcard attacks
+- [**95**星][2m] [Py] [jssimporter/jssimporter](https://github.com/jssimporter/jssimporter) Upload packages made with AutoPkg to your Jamf Pro server with customizable policies.
+- [**95**星][4y] [Shell] [jlrodriguezf/whatspwn](https://github.com/jlrodriguezf/whatspwn) Linux tool used to extract sensitive data, inject backdoor or drop remote shells on android devices.
+- [**95**星][3y] [PHP] [jas502n/fuzz-wooyun-org](https://github.com/jas502n/fuzz-wooyun-org) WooYun Fuzz 库
+- [**95**星][2y] [Py] [jas502n/2018-qwb-ctf](https://github.com/jas502n/2018-qwb-ctf) 2018强网杯CTF___题目整理
+- [**95**星][7y] [C#] [ilikenwf/darkagent](https://github.com/ilikenwf/darkagent) DarkAgent Remote Administration Tool RAT by DragonHunter
+- [**95**星][2y] [guardianproject/tor-browser](https://github.com/guardianproject/tor-browser) UPDATE: Orfox is being replaced by Tor Browser for Android. All future work and comments will be handled by Tor Project.
+- [**95**星][2y] [Py] [gaasedelen/prefix](https://github.com/gaasedelen/prefix) IDA 插件,为函数添加前缀
+- [**95**星][1y] [HTML] [frizb/sourcecodesniffer](https://github.com/frizb/sourcecodesniffer) The Source Code Sniffer is a poor man’s static code analysis tool (SCA) that leverages regular expressions. Designed to highlight high risk functions (Injection, LFI/RFI, file uploads etc) across multiple languages (ASP, Java, CSharp, PHP, Perl, Python, JavaScript, HTML etc) in a highly configurable manner.
+- [**95**星][7y] [JS] [feross/fullscreen-api-attack](https://github.com/feross/fullscreen-api-attack) Demo of phishing attack on the native HTML5 full screen API.
+- [**95**星][5y] [Py] [eugeniodelfa/smali-cfgs](https://github.com/eugeniodelfa/smali-cfgs) Smali Control Flow Graph's
+- [**95**星][10m] [PS] [equk/windows](https://github.com/equk/windows) tweaks for Windows
+- [**95**星][4y] [PS] [enigma0x3/invoke-altdsbackdoor](https://github.com/enigma0x3/invoke-altdsbackdoor)
+- [**95**星][2m] [C++] [dzzie/vs_libemu](https://github.com/dzzie/vs_libemu) Visual Studio 2008 port of the libemu library that includes scdbg.exe, a modification of the sctest project, that includes more hooks, interactive debugging, reporting features, and ability to work with file format exploit shellcode.
+- [**95**星][9y] [Py] [dugsong/pypcap](https://github.com/dugsong/pypcap) Automatically exported from code.google.com/p/pypcap
+- [**95**星][9m] [C#] [djhohnstein/eventlogparser](https://github.com/djhohnstein/eventlogparser) Parse PowerShell and Security event logs for sensitive information.
+- [**95**星][8m] [Go] [covenantsql/cookiescanner](https://github.com/covenantsql/cookiescanner) Cookie Scanner for GDPR compliance
+- [**95**星][2m] [PHP] [commixproject/commix-testbed](https://github.com/commixproject/commix-testbed) A collection of web pages, vulnerable to command injection flaws.
+- [**95**星][12m] [bughunterid/hackeronedb](https://github.com/bughunterid/hackeronedb) The unofficial HackerOne disclosure Timeline
+- [**95**星][2y] [Py] [blackploit/hash-identifier](https://github.com/blackploit/hash-identifier) Software to identify the different types of hashes used to encrypt data and especially passwords
+- [**95**星][2y] [PS] [australiancybersecuritycentre/windows_event_logging](https://github.com/australiancybersecuritycentre/windows_event_logging) Windows Event Forwarding subscriptions, configuration files and scripts that assist with implementing ACSC's protect publication, Technical Guidance for Windows Event Logging.
+- [**94**星][4m] [JS] [beepisla/csgo-crash-exploit](https://github.com/beepisla/csgo-crash-exploit) Allows you to crash any Windows user
+- [**94**星][2y] [Shell] [functionclub/localecn](https://github.com/functionclub/localecn) 更改Linux服务器终端显示语言为中文的脚本
+- [**94**星][3y] [HTML] [sewellding/lfiboomctf](https://github.com/SewellDinG/LFIboomCTF) 本地文件包含漏洞&&PHP利用协议&&实践源码
+- [**94**星][4m] [C] [adamlaurie/chronic](https://github.com/AdamLaurie/ChronIC) A wearable Sub-GHz RF hacking tool
+- [**94**星][2y] [Py] [radareorg/r2con2017](https://github.com/radareorg/r2con2017) r2con 2017 September 6-9
+- [**94**星][2y] [C++] [waryas/umpmlib](https://github.com/waryas/umpmlib) A library to manipulate physical memory from usermode.
+- [**94**星][3d] [JS] [w00dl3cs/exploit_playground](https://github.com/w00dl3cs/exploit_playground)
+- [**94**星][8m] [PS] [vletoux/smbscanner](https://github.com/vletoux/smbscanner) Smb Scanner from PingCastle
+- [**94**星][4m] [Py] [thewhiteh4t/killcast](https://github.com/thewhiteh4t/killcast) Manipulate Chromecast Devices in your Network
+- [**94**星][6y] [C++] [stealth/fraud-bridge](https://github.com/stealth/fraud-bridge) ICMP and DNS tunneling via IPv4 and IPv6
+- [**94**星][1m] [JS] [securityrat/securityrat](https://github.com/securityrat/securityrat) OWASP SecurityRAT (version 1.x) - Tool for handling security requirements in development
+- [**94**星][1m] [Py] [raikia/kali-setup](https://github.com/raikia/kali-setup) Script for Kali that adds a bunch of tools and customizes it to be much better
+- [**94**星][2y] [ObjC] [r0ysue/osg-teams](https://github.com/r0ysue/osg-teams) 希望大家在合作中学习姿势、提升技术、交流感情。比赛第二,友谊第一。
+- [**94**星][2m] [Py] [pyudev/pyudev](https://github.com/pyudev/pyudev) Python bindings to libudev (with support for PyQt4, PySide, pygobject and wx)
+- [**94**星][7y] [Shell] [nccgroup/port-scan-automation](https://github.com/nccgroup/port-scan-automation) Automate NMAP Scans and Generate Custom Nessus Policies Automatically
+- [**94**星][7m] [Py] [mr-un1k0d3r/shellcoding](https://github.com/mr-un1k0d3r/shellcoding) Shellcoding utilities
+- [**94**星][1y] [Shell] [mindpointgroup/rhel6-stig](https://github.com/mindpointgroup/rhel6-stig) Ansible role for Red Hat 6 DISA STIG
+- [**94**星][5m] [CSS] [mike-goodwin/owasp-threat-dragon-desktop](https://github.com/mike-goodwin/owasp-threat-dragon-desktop) An installable desktop variant of OWASP Threat Dragon
+- [**94**星][12m] [Batchfile] [mdsecactivebreach/sharppack](https://github.com/mdsecactivebreach/sharppack) insider threat assessments that lets you defeat application whitelisting to execute arbitrary DotNet and PowerShell tools.
+- [**94**星][2y] [Py] [lorenzog/dns-parallel-prober](https://github.com/lorenzog/dns-parallel-prober) PoC for an adaptive parallelised DNS prober
+- [**94**星][6y] [lgrangeia/cupid](https://github.com/lgrangeia/cupid) Patch for hostapd and wpa_supplicant to attempt to exploit heartbleed on EAP-PEAP/TLS/TTLS connections
+- [**94**星][5m] [Py] [lanmaster53/honeybadger](https://github.com/lanmaster53/honeybadger) a framework for targeted geolocation
+- [**94**星][9m] [C] [jcs/login_duress](https://github.com/jcs/login_duress) A BSD authentication module for duress passwords
+- [**94**星][2y] [Py] [invictus1306/workshop-bsidesmunich2018](https://github.com/invictus1306/workshop-bsidesmunich2018) ARM shellcode and exploit development - BSidesMunich 2018
+- [**94**星][2y] [Batchfile] [huntresslabs/evading-autoruns](https://github.com/huntresslabs/evading-autoruns) 几种用于逃避常见的驻留枚举工具的技术(Evading Autoruns,Derbycon 2017)
+- [**94**星][8m] [C++] [hlldz/apc-ppid](https://github.com/hlldz/apc-ppid) Adds a user-mode asynchronous procedure call (APC) object to the APC queue of the specified thread and spoof the Parent Process.
+- [**94**星][2y] [C++] [hasherezade/pe_recovery_tools](https://github.com/hasherezade/pe_recovery_tools) Helper tools for recovering dumped PE files
+- [**94**星][3y] [PS] [fuzzysecurity/capcom-rootkit](https://github.com/fuzzysecurity/capcom-rootkit) Capcom Rootkit POC
+- [**94**星][8y] [Py] [firefart/hashcollision-dos-poc](https://github.com/firefart/hashcollision-dos-poc) Proof of Concept for the PHP and JAVA Hashcollision Denial of service attack
+- [**94**星][6m] [Java] [felberj/gotools](https://github.com/felberj/gotools) Plugin for Ghidra to assist reversing Golang binaries
+- [**94**星][7m] [Visual Basic .NET] [dzzie/idacompare](https://github.com/dzzie/idacompare) 汇编级别对比工具
+- [**94**星][3y] [Py] [donnchac/ubuntu-apport-exploitation](https://github.com/donnchac/ubuntu-apport-exploitation) This project contains a PoC and exploit generator for a code execution bug in Ubuntu's Apport crash reporter
+- [**94**星][2y] [Java] [dexpatcher/dex2jar](https://github.com/dexpatcher/dex2jar) Unofficial dex2jar updated for Android 8
+- [**94**星][2m] [PS] [dbheise/vm_setup](https://github.com/dbheise/vm_setup) A collection of scripts to initialize a windows VM to run all the malwares!
+- [**94**星][11m] [Java] [cspf-founder/javavulnerablelab](https://github.com/cspf-founder/javavulnerablelab) Vulnerable Java based Web Application
+- [**94**星][6y] [Py] [crowdstrike/crowdfms](https://github.com/crowdstrike/crowdfms) CrowdStrike Feed Management System
+- [**94**星][3d] [Scala] [criteo/cuttle](https://github.com/criteo/cuttle) An embedded job scheduler.
+- [**94**星][4y] [C++] [cossacklabs/0fc](https://github.com/cossacklabs/0fc) Anonymous web chat server, built on top of Themis/WebThemis
+- [**94**星][3y] [JS] [compewter/copycat](https://github.com/compewter/copycat) Universal MITM web server
+- [**94**星][7d] [Go] [colettecontreras/v2ray-ssrpanel-plugin](https://github.com/colettecontreras/v2ray-ssrpanel-plugin) A buildin V2ray plugin for SSRPanel to sync users from database to v2ray, to log traffics/system info
+- [**94**星][2y] [Shell] [chorankates/h4ck](https://github.com/chorankates/h4ck) a collection of writeups and tools related to ~embedded device ~hacking
+- [**94**星][4m] [JS] [beepisla/csgo-crash-exploit](https://github.com/BeepIsla/csgo-crash-exploit) Allows you to crash any Windows user
+- [**94**星][5y] [Py] [atarantini/wpbf](https://github.com/atarantini/wpbf) Remotely test password strength of WordPress bloging software
+- [**94**星][3y] [C] [arno0x/diverttcpconn](https://github.com/arno0x/diverttcpconn) A TCP packet diverter for Windows platform
+- [**94**星][3y] [appsecco/defcon24-infra-monitoring-workshop](https://github.com/appsecco/defcon24-infra-monitoring-workshop) Defcon24 Workshop Contents : Ninja Level Infrastructure Monitoring
+- [**94**星][1m] [Assembly] [alanvivona/pwnshop](https://github.com/alanvivona/pwnshop) Exploit Development and Reverse Engineering topics
+- [**94**星][7d] [Py] [0xprateek/stardox](https://github.com/0xprateek/stardox) Github stargazers information gathering tool
+- [**93**星][10d] [Py] [gmdutra/cryptondie](https://github.com/gmdutra/cryptondie) PoC - cryptonDie is a ransomware developed for study purposes.
+- [**93**星][3m] [Py] [in3tinct/see-surf](https://github.com/in3tinct/see-surf) Python based scanner to find potential SSRF parameters
+- [**93**星][9d] [JS] [cn-panda/javacodeaudit](https://github.com/cn-panda/javacodeaudit) Learn java code auditing from scratch 一个Java 代码审计入门的小项目
+- [**93**星][2d] [PS] [gtworek/psbits](https://github.com/gtworek/psbits) Simple (mainly PowerShell) solutions allowing you to dig a bit deeper than usual.
+- [**93**星][2y] [C] [duraki/virtualcar](https://github.com/duraki/virtualcar) A virtual car. Because you wouldn't download a car, would you?
+- [**93**星][10d] [Py] [gmdutra/cryptondie](https://github.com/gmdutra/cryptondie) PoC - cryptonDie is a ransomware developed for study purposes.
+- [**93**星][11m] [C++] [ze0r/cve-2018-8453-exp](https://github.com/ze0r/cve-2018-8453-exp) cve-2018-8453 exp
+- [**93**星][2y] [C] [zcgonvh/ntdsdumpex](https://github.com/zcgonvh/ntdsdumpex) NTDS.dit offline dumper with non-elevated
+- [**93**星][4y] [Py] [zachriggle/peda](https://github.com/zachriggle/peda) PEDA - Python Exploit Development Assistance for GDB
+- [**93**星][3y] [Py] [wiredcraft/dopy](https://github.com/wiredcraft/dopy) Digital Ocean Python
+- [**93**星][2m] [C] [weirdnox/emacs-gdb](https://github.com/weirdnox/emacs-gdb) GDB graphical interface for GNU Emacs
+- [**93**星][5m] [Shell] [vincentbernat/eudyptula-boot](https://github.com/vincentbernat/eudyptula-boot) Boot a Linux kernel in a VM without a dedicated root filesystem.
+- [**93**星][10m] [Py] [tijme/not-your-average-web-crawler](https://github.com/tijme/not-your-average-web-crawler) A web crawler (for bug hunting) that gathers more than you can imagine.
+- [**93**星][5y] [Py] [thuxnder/dalvik-obfuscator](https://github.com/thuxnder/dalvik-obfuscator) a set of tools/scripts to obfuscate and manipulate dex files
+- [**93**星][4m] [Py] [themadinventor/ida-xtensa](https://github.com/themadinventor/ida-xtensa) 分析Tensilica Xtensa (as seen in ESP8266)
+- [**93**星][2y] [C#] [them4hd1/pencrawler](https://github.com/them4hd1/pencrawler) An Advanced Web Crawler and DirBuster
+- [**93**星][5m] [Py] [teemu-l/execution-trace-viewer](https://github.com/teemu-l/execution-trace-viewer) Tool for viewing and analyzing execution traces
+- [**93**星][2y] [Java] [tdy218/ysoserial-cve-2018-2628](https://github.com/tdy218/ysoserial-cve-2018-2628) Some codes for bypassing Oracle WebLogic CVE-2018-2628 patch
+- [**93**星][1y] [C#] [stufus/reconerator](https://github.com/stufus/reconerator) C# Targeted Attack Reconnissance Tools
+- [**93**星][12m] [C] [stintel/vallumd](https://github.com/stintel/vallumd) Centralize or distribute IPset blacklists
+- [**93**星][3y] [Py] [stamparm/tsusen](https://github.com/stamparm/tsusen) Network traffic sensor
+- [**93**星][2d] [Go] [sonatype-nexus-community/nancy](https://github.com/sonatype-nexus-community/nancy) A tool to check for vulnerabilities in your Golang dependencies, powered by Sonatype OSS Index
+- [**93**星][5m] [F#] [softsec-kaist/eclipser](https://github.com/softsec-kaist/eclipser) Grey-box Concolic Testing on Binary Code
+- [**93**星][1y] [Java] [sirmordred/angelaroot](https://github.com/sirmordred/angelaroot) An app which escalates root privilege on device and installs SuperSU through newly vulnerability "angela root" without unlocking bootloader
+- [**93**星][25d] [PHP] [shirosaidev/diskover-web](https://github.com/shirosaidev/diskover-web) Web file manager, disk space usage, storage search engine and file system analytics for diskover
+- [**93**星][4y] [C] [scumjr/the-sea-watcher](https://github.com/scumjr/the-sea-watcher) Implementation of the SMM rootkit "The Watcher"
+- [**93**星][2y] [PS] [sadprocessor/empiredog](https://github.com/sadprocessor/empiredog) A collection of PowerShell Modules for BloodHound/Empire Orchestration
+- [**93**星][4y] [JS] [ro31337/hacktunnel](https://github.com/ro31337/hacktunnel) HackTunnel is web-based peer-to-peer chat software for anonymous and encrypted communication written with Go language
+- [**93**星][1m] [C#] [retirenet/dotnet-retire](https://github.com/retirenet/dotnet-retire) Open source vulnerability scanner for .NET Core projects
+- [**93**星][1y] [Jupyter Notebook] [positivetechnologies/seq2seq-web-attack-detection](https://github.com/positivetechnologies/seq2seq-web-attack-detection) The implementation of the Seq2Seq model for web attack detection. The Seq2Seq model is usually used in Neural Machine Translation. The main goal of this project is to demonstrate the relevance of the NLP approach for web security.
+- [**93**星][7y] [C] [planetbeing/ios-jailbreak-patchfinder](https://github.com/planetbeing/ios-jailbreak-patchfinder) Analyzes a binary iOS kernel to determine function offsets and where to apply the canonical jailbreak patches.
+- [**93**星][4y] [C] [osandamalith/ipobfuscator](https://github.com/osandamalith/ipobfuscator) A simple tool to convert the IP to a DWORD IP
+- [**93**星][7y] [Ruby] [openwiresec/metasploit](https://github.com/openwiresec/metasploit)
+- [**93**星][6m] [C#] [octokit/octokit.graphql.net](https://github.com/octokit/octokit.graphql.net) A GitHub GraphQL client library for .NET
+- [**93**星][11m] [HTML] [nytrorst/xssfuzzer](https://github.com/nytrorst/xssfuzzer) XSS Fuzzer is a tool which generates XSS payloads based on user-defined vectors and fuzzing lists.
+- [**93**星][10m] [JS] [n0tan3rd/squidwarc](https://github.com/n0tan3rd/squidwarc) Squidwarc is a high fidelity, user scriptable, archival crawler that uses Chrome or Chromium with or without a head
+- [**93**星][2y] [Swift] [ming1016/smck](https://github.com/ming1016/smck) 用 Swift 编写的工程代码静态分析命令行工具 smck
+- [**93**星][3y] [Go] [mauri870/powershell-reverse-http](https://github.com/mauri870/powershell-reverse-http)
+- [**93**星][7y] [C] [m0nad/dns-discovery](https://github.com/m0nad/dns-discovery) DNS-Discovery is a multithreaded subdomain bruteforcer.
+- [**93**星][11d] [Go] [lu4p/torat](https://github.com/lu4p/torat) ToRat is a Remote Administation tool written in Go using Tor as a transport mechanism and RPC for communication
+- [**93**星][3y] [Py] [leonjza/ooktools](https://github.com/leonjza/ooktools) help with the reverse engineering of on-off keying data sources
+- [**93**星][2y] [C++] [kentonv/dvorak-qwerty](https://github.com/kentonv/dvorak-qwerty) "Dvorak-Qwerty ⌘" (DQ) keyboard layout for Windows and Unix/Linux/X
+- [**93**星][1y] [Py] [integrity-sa/droidstatx](https://github.com/integrity-sa/droidstatx) Python tool that generates an Xmind map with all the information gathered and any evidence of possible vulnerabilities identified via static analysis. The map itself is an Android Application Pentesting Methodology component, which assists Pentesters to cover all important areas during an assessment.
+- [**93**星][2y] [C] [hdm/juniper-cve-2015-7755](https://github.com/hdm/juniper-cve-2015-7755) Notes, binaries, and related information from analysis of the CVE-2015-7755 & CVE-2015-7756 issues within Juniper ScreenOS
+- [**93**星][3m] [Go] [grepplabs/kafka-proxy](https://github.com/grepplabs/kafka-proxy) Proxy connections to Kafka cluster. Connect through SOCKS Proxy, HTTP Proxy or to cluster running in Kubernetes.
+- [**93**星][2y] [C++] [femto-dev/femto](https://github.com/femto-dev/femto) Sequence Indexing and Search
+- [**93**星][11m] [C] [elfmaster/dsym_obfuscate](https://github.com/elfmaster/dsym_obfuscate) Obfuscates dynamic symbol table
+- [**93**星][7d] [Shell] [dylanaraps/bin](https://github.com/dylanaraps/bin)
+- [**93**星][5y] [Py] [debasishm89/hack_audio_captcha](https://github.com/debasishm89/hack_audio_captcha) Collection of Scripts written to Solve/Crack Audio reCapcha Challenges
+- [**93**星][2y] [Py] [debasishm89/burpy](https://github.com/debasishm89/burpy) Portable and flexible web application security assessment tool.It parses Burp Suite log and performs various tests depending on the module provided and finally generate a HTML report.
+- [**93**星][3y] [Py] [cymmetria/mtpot](https://github.com/cymmetria/mtpot) Open Source Telnet Honeypot
+- [**93**星][15d] [Shell] [clion007/dnsmasq](https://github.com/clion007/dnsmasq) 全自动dnsmasq及hosts科学上网,防DNS劫持及全面广告屏蔽脚本
+- [**93**星][5y] [Shell] [ckuethe/usbarmory](https://github.com/ckuethe/usbarmory) Scripts, learnings, sample configurations, and random whining
+- [**93**星][3y] [Vim script] [citizenlab/malware-signatures](https://github.com/citizenlab/malware-signatures) Yara rules for malware families seen as part of targeted threats project
+- [**93**星][2y] [Ruby] [carnal0wnage/metasploit-code](https://github.com/carnal0wnage/metasploit-code) Metasploit modules that didn't make it into trunk for some reason or the other
+- [**93**星][2y] [Py] [blackthorne/codetective](https://github.com/blackthorne/codetective) a tool to determine the crypto/encoding algorithm used according to traces from its representation
+- [**93**星][1y] [Shell] [arthastang/iot-implant-toolkit](https://github.com/arthastang/iot-implant-toolkit) Toolkit for implant attack of IoT devices
+- [**93**星][2y] [Py] [arno0x/webdavc2](https://github.com/arno0x/webdavc2) A WebDAV PROPFIND C2 tool
+- [**93**星][6m] [Py] [abaykan/crawlbox](https://github.com/abaykan/crawlbox) Web目录爆破脚本
+- [**92**星][27d] [Py] [plazmaz/leaky-repo](https://github.com/plazmaz/leaky-repo) Benchmarking repo for secrets scanning
+- [**92**星][2m] [Py] [gxfxyz/unblockchn](https://github.com/gxfxyz/unblockchn) Unblock CHN - Shadowsocks 回国解锁代理分流配置工具 (路由器 & Surge) - Unblock Youku 衍生工具
+- [**92**星][2m] [Py] [furniel/apk-changer](https://github.com/furniel/apk-changer) Command line program for modifying apk files
+- [**92**星][2m] [Py] [hyuunnn/hyara](https://github.com/hyuunnn/hyara) Yara rule making tool (IDA Pro & Binary Ninja Plugin)
+- [**92**星][7m] [PS] [mgreen27/invoke-liveresponse](https://github.com/mgreen27/Invoke-LiveResponse) Invoke-LiveResponse
+- [**92**星][2y] [Shell] [offxec/thedoc](https://github.com/OffXec/TheDoc) TheDoc is a simple but very useful SQLMAP automator with built in admin finder, hash cracker(using hashca) and more!
+- [**92**星][2d] [Go] [zonedb/zonedb](https://github.com/zonedb/zonedb) Public Zone Database
+- [**92**星][3y] [HTML] [xinali/wooyun](https://github.com/xinali/wooyun) wooyun public information backup
+- [**92**星][2y] [JS] [tinysec/vulnerability](https://github.com/tinysec/vulnerability) vulnerability:作者收集的Windows内核漏洞。
+- [**92**星][4y] [HTML] [thezdi/abusing-silent-mitigations](https://github.com/thezdi/abusing-silent-mitigations) Understanding weaknesses within Internet Explorer's Isolated Heap and MemoryProtection
+- [**92**星][3y] [PS] [thepaulbenoit/winpirate](https://github.com/thepaulbenoit/winpirate) Automated sticky keys hack. Post exploitation it grabs browser passwords, history, and network passwords
+- [**92**星][12m] [Shell] [thelinuxchoice/brutecms](https://github.com/thelinuxchoice/brutecms) Multi-threaded CMS BruteForcer to WordPress, Joomla, Drupal, OpenCart
+- [**92**星][1y] [Go] [tarlogicsecurity/sasshimi](https://github.com/tarlogicsecurity/sasshimi) SSH Tunnelling in "RAW mode", via STDIN/OUT without using forwarding channels
+- [**92**星][1y] [C++] [tandasat/guardmon](https://github.com/tandasat/guardmon) Hypervisor based tool for monitoring system register accesses.
+- [**92**星][11m] [Py] [stratosphereips/manati](https://github.com/stratosphereips/manati) A web-based tool to assist the work of the intuitive threat analysts.
+- [**92**星][2y] [C] [stonedreamforest/re_sysdiag](https://github.com/stonedreamforest/re_sysdiag) 逆向火绒安全软件驱动——sysdiag
+- [**92**星][3y] [HTML] [stixproject/stix-viz](https://github.com/stixproject/stix-viz) STIX Visualization Tool
+- [**92**星][3y] [C++] [shmuelyr/captainhook](https://github.com/shmuelyr/captainhook) CaptainHook is perfect x86/x64 hook environment
+- [**92**星][7m] [C++] [sharepub/checkvm-sandbox](https://github.com/sharepub/checkvm-sandbox) source code
+- [**92**星][3y] [PS] [secvulture/dvta](https://github.com/secvulture/dvta) Damn Vulnerable Thick Client App
+- [**92**星][1y] [reconjson/reconjson](https://github.com/reconjson/reconjson) ReconJSON is a project dedicated to creating a flexible and consistent JSON format across popular recon tools.
+- [**92**星][7d] [Go] [privacypass/challenge-bypass-server](https://github.com/privacypass/challenge-bypass-server) a TCP server that is compatible with the Privacy Pass browser extension
+- [**92**星][2y] [Go] [phillipmartin/gopassivedns](https://github.com/phillipmartin/gopassivedns) Network-based DNS logging in Go
+- [**92**星][9m] [pagalaxylab/vulinfo](https://github.com/pagalaxylab/vulinfo) These are the vulnerabilities discovered by Galaxy Lab.
+- [**92**星][9d] [JS] [oznu/dns-zone-blacklist](https://github.com/oznu/dns-zone-blacklist) This project generates dnsmasq, bind and unbound zone files to be used in DNS based AD Blockers.
+- [**92**星][3y] [Hack] [oracle/kernel-fuzzing](https://github.com/oracle/kernel-fuzzing) Fuzzers for the Linux kernel
+- [**92**星][5y] [JS] [nihgwu/nevermore](https://github.com/nihgwu/nevermore) a shadowsocks client powered by node-webkit
+- [**92**星][5y] [Py] [neo23x0/dllrunner](https://github.com/neo23x0/dllrunner) Smart DLL execution for malware analysis in sandbox systems
+- [**92**星][8d] [Java] [mvetsch/jwt4b](https://github.com/mvetsch/jwt4b) JWT Support for Burp
+- [**92**星][8y] [Ruby] [mubix/not-in-pentesting-class](https://github.com/mubix/not-in-pentesting-class) The Dirty Secrets They Didn't Teach You In Pentesting Class
+- [**92**星][12m] [C] [mthbernardes/sshlooterc](https://github.com/mthbernardes/sshlooterc) It's the C version of
+- [**92**星][1y] [C] [mrschyte/pentestkoala](https://github.com/mrschyte/pentestkoala) pentestkoala:修改版dropbear SSH 服务器
+- [**92**星][4y] [PS] [matthastings/dscompromised](https://github.com/matthastings/dscompromised) managing and infecting systems via Windows Desired State Configuration (DSC)
+- [**92**星][24d] [Py] [log2timeline/dftimewolf](https://github.com/log2timeline/dftimewolf) A framework for orchestrating forensic collection, processing and data export
+- [**92**星][6m] [Py] [localh0t/backfuzz](https://github.com/localh0t/backfuzz) protocol fuzzing toolkit
+- [**92**星][18d] [Go] [likexian/whois-go](https://github.com/likexian/whois-go) Go module for domain and ip whois info query
+- [**92**星][2y] [Py] [lcatro/webshell-detect-by-machine-learning](https://github.com/lcatro/webshell-detect-by-machine-learning) 使用机器学习识别WebShell
+- [**92**星][4y] [C] [kr105-zz/ps4-dlclose](https://github.com/kr105-zz/ps4-dlclose) Fully implemented dlclose exploit for PS4 fw 1.76 with included linux loader
+- [**92**星][4m] [knownsec/ethereum-smart-contracts-security-checklist](https://github.com/knownsec/ethereum-smart-contracts-security-checklist) Ethereum Smart Contracts Security CheckList From Knownsec 404 Team
+- [**92**星][5y] [C++] [k33nteam/cc-shellcoding](https://github.com/k33nteam/cc-shellcoding)
+- [**92**星][1y] [Shell] [jedisct1/bitbar-dnscrypt-proxy-switcher](https://github.com/jedisct1/bitbar-dnscrypt-proxy-switcher) BitBar plugin to control dnscrypt-proxy usage
+- [**92**星][2m] [Py] [hyuunnn/hyara](https://github.com/hyuunnn/Hyara) 辅助编写Yara规则
+ - [IDA插件](https://github.com/hy00un/hyara/tree/master/IDA%20Plugin)
+ - [BinaryNinja插件](https://github.com/hy00un/hyara/tree/master/BinaryNinja%20Plugin)
+- [**92**星][2y] [Shell] [henryho2006/rpiproxy](https://github.com/henryho2006/rpiproxy) Make a Raspberry PI as a proxy route, work with shadowsocks server, provide clean dns/proxy service
+- [**92**星][8m] [Roff] [gynvael/stream-en](https://github.com/gynvael/stream-en) Sourcecode created during my Livestream (English)
+- [**92**星][2y] [grrrdog/tls-redirection](https://github.com/grrrdog/tls-redirection) raise awareness of a little-known group of attacks, TLS redirection / Virtual Host Confusion, and to bring all the information related to this topic together.
+- [**92**星][4y] [Py] [groundworkstech/pybfd](https://github.com/groundworkstech/pybfd) A Python interface to the GNU Binary File Descriptor (BFD) library.
+- [**92**星][2y] [C++] [gdbinit/efiswissknife](https://github.com/gdbinit/efiswissknife) 辅助 (U)EFI reversing 逆向
+- [**92**星][3y] [Py] [fengyouchao/webzmap](https://github.com/fengyouchao/webzmap) 通过web方式管理运行zmap扫描任务, 并提供 RESTful API 方便第三方程序调用控制zmap任务
+- [**92**星][5y] [JS] [etherdream/https_hijack_demo](https://github.com/etherdream/https_hijack_demo) HTTPS Frontend Hijack
+- [**92**星][2y] [C] [christian-roggia/open-myrtus](https://github.com/christian-roggia/open-myrtus) RCEed version of computer malware / rootkit MyRTUs / Stuxnet.
+- [**92**星][8d] [Py] [chadsr/nordvpn-networkmanager](https://github.com/chadsr/nordvpn-networkmanager) A CLI tool for automating the importing, securing and usage of NordVPN (and in the future, more) OpenVPN servers through NetworkManager.
+- [**92**星][2y] [PS] [borntoberoot/powershell_ipv4portscanner](https://github.com/borntoberoot/powershell_ipv4portscanner) Powerful asynchronus IPv4 Port Scanner for PowerShell
+- [**92**星][10m] [Py] [b1n4ry4rms/redteam-pentest-cheatsheets](https://github.com/b1n4ry4rms/redteam-pentest-cheatsheets) Red Teaming :: Penetration Testing :: Offensive Security :: OSCP :: OSCE :: CheatSheets :: Tools :: etc...
+- [**92**星][1y] [TS] [auth0-blog/mean-rsvp-auth0](https://github.com/auth0-blog/mean-rsvp-auth0) MEAN stack application with Auth0 (see sample deployed at
+- [**92**星][11m] [Shell] [antitree/private-tor-network](https://github.com/antitree/private-tor-network) Run an isolated instance of a tor network in Docker containers
+- [**92**星][1y] [Py] [andresriancho/websocket-fuzzer](https://github.com/andresriancho/websocket-fuzzer) HTML5 WebSocket message fuzzer
+- [**92**星][2y] [PS] [alsidofficial/uncoverdcshadow](https://github.com/alsidofficial/uncoverdcshadow) A PowerShell utility to dynamically uncover a DCShadow attack
+- [**92**星][4m] [Py] [aedoo/allscanner](https://github.com/aedoo/allscanner) 数据库和其他服务的弱端口的弱口令检测以及未授权访问的集成检测工具。 Weak password blasting of weak ports and integrated detection tools for unauthorized access.
+- [**92**星][1m] [C#] [3xpl01tc0d3r/processinjection](https://github.com/3xpl01tc0d3r/processinjection) The program is designed to demonstrate various process injection techniques
+- [**91**星][8m] [JS] [vksrc/captcha_orz](https://github.com/vksrc/captcha_orz) 验证码识别
+- [**91**星][2m] [C] [zfl9/chinadns-ng](https://github.com/zfl9/chinadns-ng) chinadns next generation, refactoring with epoll and ipset
+- [**91**星][3d] [Py] [lockedbyte/cryptovenom](https://github.com/lockedbyte/cryptovenom) Cryptovenom: The Cryptography Swiss Army Knife
+- [**91**星][8m] [Py] [lc/230-oob](https://github.com/lc/230-OOB) An Out-of-Band XXE server for retrieving file contents over FTP.
+- [**91**星][1y] [Py] [fsecurelabs/z3_and_angr_binary_analysis_workshop](https://github.com/FSecureLABS/z3_and_angr_binary_analysis_workshop) Code and exercises for a workshop on z3 and angr
+- [**91**星][3m] [CSS] [woj-ciech/socialpath](https://github.com/woj-ciech/socialpath) Track users across social media platforms
+- [**91**星][5y] [C] [wi-fi-analyzer/mdk3-master](https://github.com/wi-fi-analyzer/mdk3-master)
+- [**91**星][2y] [C] [wangyihang/apache-http-server-module-backdoor](https://github.com/wangyihang/apache-http-server-module-backdoor)
+- [**91**星][1y] [Py] [wagiro/pintool](https://github.com/wagiro/pintool) This tool can be useful for solving some reversing challenges in CTFs events.
+- [**91**星][2y] [PS] [stefanscherer/adfs2](https://github.com/stefanscherer/adfs2) Multi Vagrant environment with Active Directory
+- [**91**星][2y] [C] [secwiki/android-kernel-exploits](https://github.com/secwiki/android-kernel-exploits) android kernel exploits漏洞集合
+- [**91**星][2y] [PS] [russelltomkins/active-directory](https://github.com/russelltomkins/active-directory) Collection of scripts for Querying and Managing Active Directory and Domain Controllers
+- [**91**星][2y] [Py] [pry0cc/proxydock](https://github.com/pry0cc/proxydock) ProxyDock is a Dockerfile and Bash script that converts your OpenVPN files into local proxies.
+- [**91**星][4y] [Py] [pdjstone/wsuspect-proxy](https://github.com/pdjstone/wsuspect-proxy) Python tool to inject fake updates into unencrypted WSUS traffic
+- [**91**星][10m] [Py] [p3pperp0tts/leaks_parser](https://github.com/p3pperp0tts/leaks_parser) Parser for data dumps Collection #1 / Collection #2-5
+- [**91**星][3y] [Py] [n3tc4t/instabrute](https://github.com/n3tc4t/instabrute) Instagram password bruteforcer
+- [**91**星][11m] [Py] [n00py/hwacha](https://github.com/n00py/hwacha) Deploy payloads to *Nix systems en masse
+- [**91**星][2m] [C#] [mihazupan/httptosocks5proxy](https://github.com/mihazupan/httptosocks5proxy) C# Http to Socks5 proxy implementation
+- [**91**星][5m] [Shell] [louwrentius/ppss](https://github.com/louwrentius/ppss) Parallel Processing Shell Script
+- [**91**星][3m] [Rust] [loiclec/fuzzcheck-rs](https://github.com/loiclec/fuzzcheck-rs) Structure-aware, in-process, coverage-guided, evolutionary fuzzing engine for Rust functions.
+- [**91**星][2y] [C++] [liulilittle/paperairplane](https://github.com/liulilittle/paperairplane) 一个类似于Proxifier的SOCKS5代理工具
+- [**91**星][4y] [Py] [knownsec/vxpwn](https://github.com/knownsec/vxpwn) VxWorks漏洞挖掘相关
+- [**91**星][9m] [Py] [johntroony/blisqy](https://github.com/johntroony/blisqy) Version 0.2 - Exploit Time-based blind-SQL injection in HTTP-Headers (MySQL/MariaDB).
+- [**91**星][4m] [C#] [jbe2277/dotnetpad](https://github.com/jbe2277/dotnetpad) The Waf DotNetPad is a simple and fast code editor that makes fun to program with C# or Visual Basic.
+- [**91**星][4y] [Py] [hvqzao/liffy](https://github.com/hvqzao/liffy) Local File Inclusion Exploitation Tool (mirror)
+- [**91**星][11m] [Ruby] [hdm/metasploit-framework](https://github.com/hdm/metasploit-framework) Metasploit Framework
+- [**91**星][3y] [C] [hacksysteam/exploitation](https://github.com/hacksysteam/exploitation) Windows Software Exploitation
+- [**91**星][1y] [Go] [google/minions](https://github.com/google/minions) Distributed filesystem scanner
+- [**91**星][4m] [Shell] [giantbranch/pwn-env-init](https://github.com/giantbranch/pwn-env-init) CTF PWN 做题环境一键搭建脚本
+- [**91**星][1y] [Py] [getsecnow/instagram-py](https://github.com/getsecnow/instagram-py) Simple Instagram brute force script written in python
+- [**91**星][3y] [C++] [gdelugre/shell-factory](https://github.com/gdelugre/shell-factory) C++-based shellcode builder
+- [**91**星][6m] [Py] [fortynorthsecurity/aggressorassessor](https://github.com/fortynorthsecurity/aggressorassessor) Aggressor scripts for phases of a pen test or red team assessment
+- [**91**星][2y] [C++] [epam/nfstrace](https://github.com/epam/nfstrace) Network file system monitor and analyzer
+- [**91**星][9y] [C] [dugsong/libdnet](https://github.com/dugsong/libdnet) a simplified, portable interface to several low-level
+networking routines
+- [**91**星][4m] [C++] [djformby/grfics](https://github.com/djformby/grfics) Graphical Realism Framework for Industrial Control Simulations
+- [**91**星][1y] [Py] [arbazkiraak/certasset](https://github.com/arbazkiraak/certasset) Takes ip range, Scan all open SSL Certs, Grab Cnames
+- [**91**星][3m] [Py] [abusesa/abusehelper](https://github.com/abusesa/abusehelper) A framework for receiving and redistributing abuse feeds
+- [**91**星][7m] [C] [abelcheung/rifiuti2](https://github.com/abelcheung/rifiuti2) Windows Recycle Bin analyser
+- [**91**星][2y] [Java] [5gsd/aimsicdl](https://github.com/5gsd/aimsicdl) AIMSICD Lite (Android IMSI-Catcher Detector) - reloaded!
+- [**91**星][2y] [C] [3gstudent/inject-dll-by-process-doppelganging](https://github.com/3gstudent/inject-dll-by-process-doppelganging) Process Doppelgänging
+- [**91**星][1y] [001spartan/aggressor_scripts](https://github.com/001spartan/aggressor_scripts) A collection of useful scripts for Cobalt Strike
+- [**90**星][11m] [Py] [hackatnow/stretcher](https://github.com/hackatnow/stretcher) Tool designed to help identify open Elasticsearch servers that are exposing sensitive information
+- [**90**星][15d] [Ruby] [shopify/browser_sniffer](https://github.com/shopify/browser_sniffer) Properly detect what browser you are dealing with
+- [**90**星][12m] [PS] [besimorhino/pause-process](https://github.com/besimorhino/pause-process) PowerShell script which allows pausing\unpausing Win32/64 exes
+- [**90**星][4m] [Py] [google/python_portpicker](https://github.com/google/python_portpicker) A module to find available network ports for testing.
+- [**90**星][9m] [C] [caesar0301/pkt2flow](https://github.com/caesar0301/pkt2flow) A simple utility to classify packets into flows. It's so simple that only one task is aimed to finish. For Deep Packet Inspection or flow classification, it's so common to analyze the feature of one specific flow. I have make the attempt to use made-ready tools like tcpflows, tcpslice, tcpsplit, but all these tools try to either decrease the tra…
+- [**90**星][8m] [JS] [adonespitogo/adobot-io](https://github.com/adonespitogo/adobot-io) Android Spyware Server
+- [**90**星][2y] [Py] [hackatnow/cromos](https://github.com/hackatnow/cromos) Cromos is a tool for downloading legitimate extensions of the Chrome Web Store and inject codes in the background of the application.
+- [**90**星][1m] [Go] [ne1llee/v2ray2clash](https://github.com/ne1llee/v2ray2clash) V2ray、SSR subscribe convert to Clash、QuantumultX
+- [**90**星][2m] [Py] [radareorg/r2con2019](https://github.com/radareorg/r2con2019) slides and materials
+- [**90**星][2y] [JS] [watson/monster-drift](https://github.com/watson/monster-drift) a radio controlled car with Node.js and HackRF.
+- [**90**星][1y] [C] [vv1ld/ps4hen](https://github.com/vv1ld/ps4hen) PS4 Homebrew ENabler based on Flatz writeup and using IDC's codebase
+- [**90**星][7m] [C] [vmcall/ayyxam](https://github.com/vmcall/ayyxam) Bypass for The Digital Exam Monitor developed by the Danish Ministry of Education (Den Digitale Prøvevagt) and ExamCookie
+- [**90**星][5m] [Py] [tomchop/volatility-autoruns](https://github.com/tomchop/volatility-autoruns) Autoruns plugin for the Volatility framework
+- [**90**星][7m] [Rust] [tbrand/dystopia](https://github.com/tbrand/dystopia) Anonymity on the Internet by Transparent way.
+- [**90**星][3y] [swiftonsecurity/phishingregex](https://github.com/swiftonsecurity/phishingregex) Backup of my phishing regular expression testing bench
+- [**90**星][2y] [HTML] [struct/research](https://github.com/struct/research) A repo for various research
+- [**90**星][8y] [Java] [securitycompass/androidlabs](https://github.com/securitycompass/androidlabs) Android security labs
+- [**90**星][3y] [C++] [screetsec/pateensy](https://github.com/screetsec/pateensy) Payload for teensy like a rubber ducky but the syntax is different. this Human interfaes device ( HID attacks ). Penetration With Teensy
+- [**90**星][5d] [Py] [samsung/cotopaxi](https://github.com/samsung/cotopaxi) Set of tools for security testing of Internet of Things devices using specific network IoT protocols
+- [**90**星][1y] [C++] [rub-syssec/marx](https://github.com/rub-syssec/marx) 揭示C++程序中的类继承结构
+ - [IDA导出](https://github.com/rub-syssec/marx/blob/master/ida_export/export.py)
+ - [IDA导入插件](https://github.com/rub-syssec/marx/tree/master/ida_import)
+ - [core](https://github.com/rub-syssec/marx/tree/master/src)
+- [**90**星][4y] [C] [rchiossi/dexterity](https://github.com/rchiossi/dexterity) Dex manipulation library
+- [**90**星][1y] [PS] [rasta-mouse/aggressor-script](https://github.com/rasta-mouse/aggressor-script) Collection of Aggressor Scripts for Cobalt Strike
+- [**90**星][7m] [Rust] [ragnaroek/mithril](https://github.com/ragnaroek/mithril) Pure Rust Monero Miner
+- [**90**星][5y] [ObjC] [project-imas/app-password](https://github.com/project-imas/app-password) Custom iOS user authentication mechanism (password with security questions for self reset)
+- [**90**星][14d] [C] [plusvic/yara](https://github.com/plusvic/yara) The pattern matching swiss knife
+- [**90**星][9m] [pandazheng/securitysite](https://github.com/pandazheng/securitysite) 收集了一些安全公司的博客
+- [**90**星][1y] [Shell] [ossiozac/raspberry-pi-zero-rubber-ducky-duckberry-pi](https://github.com/ossiozac/raspberry-pi-zero-rubber-ducky-duckberry-pi) A £10 Rubber Ducky USB HID! A USB device which emulates a keyboard and automates key entry.
+- [**90**星][2m] [Py] [operatorequals/httpimport](https://github.com/operatorequals/httpimport) Module for remote in-memory Python package/module loading through HTTP/S
+- [**90**星][2y] [PS] [netbiosx/digital-signature-hijack](https://github.com/netbiosx/digital-signature-hijack) Binaries, PowerShell scripts and information about Digital Signature Hijacking.
+- [**90**星][2y] [nccgroup/cve-2017-8759](https://github.com/nccgroup/cve-2017-8759) NCC Group's analysis and exploitation of CVE-2017-8759 along with further refinements
+- [**90**星][8m] [JS] [mozillasecurity/octo](https://github.com/mozillasecurity/octo) A fuzzing library in JavaScript.
+- [**90**星][1m] [Java] [mnemonic-no/act-platform](https://github.com/mnemonic-no/act-platform) Open platform for collection and exchange of threat intelligence information
+- [**90**星][3y] [Java] [mingyuan-xia/patdroid](https://github.com/mingyuan-xia/patdroid) A Program Analysis Toolkit for Android
+- [**90**星][3m] [Py] [malshare/malshare-toolkit](https://github.com/malshare/malshare-toolkit) Set of tools for interacting with Malshare
+- [**90**星][2y] [jollheef/libreoffice-remote-arbitrary-file-disclosure](https://github.com/jollheef/libreoffice-remote-arbitrary-file-disclosure) Proof of concept of LibreOffice remote arbitrary file disclosure vulnerability
+- [**90**星][5m] [HTML] [jbman223/earlyap](https://github.com/jbman223/earlyap) Proxy specifically available for AP scores to enable simple early access to your scores without any storing of your College Board account details or dealing with untrustable proxies.
+- [**90**星][2y] [Ruby] [isecpartners/tlspretense](https://github.com/isecpartners/tlspretense) A test framework for testing SSL/TLS client certificate validation.
+- [**90**星][6y] [C++] [igh0st/gh0st3.6_src](https://github.com/igh0st/gh0st3.6_src)
+- [**90**星][2y] [C] [hfiref0x/vmde](https://github.com/hfiref0x/vmde) Source from VMDE paper, adapted to 2015
+- [**90**星][2y] [Ruby] [hanshaze/ms17-010-eternalblue-winxp-win10](https://github.com/hanshaze/ms17-010-eternalblue-winxp-win10) EternalBlue Metasploit Port to various Windows Versions from Windows XP SP2 up to Windows 10 Pro
+- [**90**星][3d] [C] [guidovranken/cryptofuzz](https://github.com/guidovranken/cryptofuzz)
+- [**90**星][1y] [C] [grimm-co/notquite0dayfriday](https://github.com/grimm-co/notquite0dayfriday) This is a repo which documents real bugs in real software to illustrate trends, learn how to prevent or find them more quickly.
+- [**90**星][1m] [Py] [giantbranch/pwn_deploy_chroot](https://github.com/giantbranch/pwn_deploy_chroot) 可以方便地部署一个或者多个pwn题到一个docker容器中(使用chroot,并可以设置是否使用我自己写的catflag程序替换默认的/bin/sh程序,以增加安全性)
+- [**90**星][3m] [Py] [gast04/r4ge](https://github.com/gast04/r4ge) Symbolic Execution Tool in r2
+- [**90**星][7m] [C] [fireeye/flare-kscldr](https://github.com/fireeye/flare-kscldr) 内核中加载Shellcode: 实例、方法与工具
+- [**90**星][2m] [Ruby] [ffleming/timing_attack](https://github.com/ffleming/timing_attack) timing_attack:对 Webapp 执行 timing 攻击
+- [**90**星][1y] [Py] [elttam/advisories](https://github.com/elttam/advisories)
+- [**90**星][3y] [PS] [darkoperator/powershell_scripts](https://github.com/darkoperator/powershell_scripts) Powershell Scripts
+- [**90**星][7d] [JS] [consensys/truffle-security](https://github.com/consensys/truffle-security) MythX smart contract security verification plugin for Truffle Framework
+- [**90**星][3y] [Py] [chrizator/netattack](https://github.com/chrizator/netattack) A simple python script to scan and attack wireless networks.
+- [**90**星][3y] [Py] [callmefeifei/svnhack](https://github.com/callmefeifei/svnhack) 一个Svn信息泄露辅助工具,可以使用这个脚本列取网站目录,读取源码文件以及下载整站代码。
+- [**90**星][2m] [Ruby] [auth0/ruby-auth0](https://github.com/auth0/ruby-auth0) Ruby toolkit for Auth0 API
+- [**90**星][7m] [aprilahijriyan/w3brute](https://github.com/aprilahijriyan/w3brute) Automatic Web Application Brute Force Attack Tool
+- [**90**星][1m] [Py] [akamai-threat-research/mqtt-pwn](https://github.com/akamai-threat-research/mqtt-pwn) MQTT-PWN intends to be a one-stop-shop for IoT Broker penetration-testing and security assessment operations.
+- [**90**星][3m] [Java] [adubbz/ghidra-switch-loader](https://github.com/adubbz/ghidra-switch-loader) Nintendo Switch loader for Ghidra
+- [**90**星][4y] [JS] [adafruit/adafruit-io-node](https://github.com/adafruit/adafruit-io-node) A Node.js Adafruit IO Node.js Client, Local Server, & io.adafruit.com TLS Tunnel.
+- [**90**星][11m] [Py] [hackatnow/stretcher](https://github.com/hackatnow/stretcher) Tool designed to help identify open Elasticsearch servers that are exposing sensitive information
+- [**90**星][2y] [Py] [hackatnow/cromos](https://github.com/hackatnow/cromos) Cromos is a tool for downloading legitimate extensions of the Chrome Web Store and inject codes in the background of the application.
+- [**90**星][9m] [Py] [0x27/ssh_keyscanner](https://github.com/0x27/ssh_keyscanner) ssh public host key scanner using shodan
+- [**89**星][5m] [Py] [lgandx/ccrawldns](https://github.com/lgandx/ccrawldns) This small utility retrieves from the CommonCrawl data set unique subdomains for a given domain name.
+- [**89**星][7m] [Shell] [honwen/luci-app-shadowsocksr](https://github.com/honwen/luci-app-shadowsocksr) OpenWrt/LEDE LuCI for ShadowsocksR-libev
+- [**89**星][3d] [Rust] [amaurymartiny/check-if-email-exists](https://github.com/amaurymartiny/check-if-email-exists) Check if an email address exists without sending any email.
+- [**89**星][7m] [Py] [lopseg/jsdir](https://github.com/Lopseg/Jsdir) Jsdir is a Burp Suite extension that extracts hidden paths from js files and beautifies it for further reading.
+- [**89**星][1y] [C] [zerosteiner/reflective-polymorphism](https://github.com/zeroSteiner/reflective-polymorphism) Reflective Polymorphism
+- [**89**星][3m] [Py] [securisec/r2wiki](https://github.com/securisec/r2wiki) Radare 2 wiki
+- [**89**星][5m] [Java] [llvm-but-worse/java-disassembler](https://github.com/LLVM-but-worse/java-disassembler) The Java Disassembler
+- [**89**星][10m] [C++] [zhunki/superion](https://github.com/zhunki/superion) Superion is a fuzzer which extends the famous AFL to support structured inputs such as JavaScript and XML.
+- [**89**星][2y] [ObjC] [wooyundota/dumpdex](https://github.com/wooyundota/dumpdex) Android Unpack tool based on Cydia
+- [**89**星][1y] [Py] [willbengtson/trailblazer-aws](https://github.com/willbengtson/trailblazer-aws) Blazing CloudTrail since 2018
+- [**89**星][1y] [PS] [vletoux/spoolerscanner](https://github.com/vletoux/spoolerscanner) Check if MS-RPRN is remotely available with powershell/c#
+- [**89**星][4m] [Py] [tomchop/unxor](https://github.com/tomchop/unxor) unXOR will search a XORed file and try to guess the key using known-plaintext attacks.
+- [**89**星][9d] [Py] [tomato42/tlslite-ng](https://github.com/tomato42/tlslite-ng) New home of the TLS implementation in pure python
+- [**89**星][2y] [HTML] [tigzy/malware-repo](https://github.com/tigzy/malware-repo) Malware Repository Framework
+- [**89**星][3m] [Py] [thomaspatzke/wase](https://github.com/thomaspatzke/wase) The Web Audit Search Engine - Index and Search HTTP Requests and Responses in Web Application Audits with ElasticSearch
+- [**89**星][1y] [Shell] [thelinuxchoice/infog](https://github.com/thelinuxchoice/infog) Information Gathering Tool
+- [**89**星][1y] [Py] [thehive-project/thehive4py](https://github.com/thehive-project/thehive4py) Python API Client for TheHive
+- [**89**星][4y] [C#] [smartbooks/smartspider](https://github.com/smartbooks/smartspider) 网络信息智能采集系统,是一款基于http协议的Web信息采集软件,应用于网站信息采集,信息安全监控等领域。
+- [**89**星][2m] [C++] [sinakarvandi/process-magics](https://github.com/sinakarvandi/process-magics) This is a collection of interesting codes about Windows Process creation.
+- [**89**星][2m] [C] [sfan5/fi6s](https://github.com/sfan5/fi6s) IPV6扫描器
+- [**89**星][5m] [C] [session-replay-tools/intercept](https://github.com/session-replay-tools/intercept) An auxiliary tool for tcpcopy and tcpburn
+- [**89**星][2y] [C#] [schillings/swordphish](https://github.com/schillings/swordphish) Schillings SwordPhish empowers organisations and engages its employees to establish the key component of any cyber security strategy: the Human Firewall.
+- [**89**星][2y] [HTML] [sam-b/windbg-plugins](https://github.com/sam-b/windbg-plugins) Any useful windbg plugins I've written.
+- [**89**星][4m] [Go] [richardlehane/siegfried](https://github.com/richardlehane/siegfried) signature-based file format identification
+- [**89**星][5y] [C] [retme7/cve-2014-4322_poc](https://github.com/retme7/cve-2014-4322_poc) Gain privileges:system -> root,as a part of
+- [**89**星][1y] [PS] [realoriginal/reflectivepotato](https://github.com/realoriginal/reflectivepotato) MSFRottenPotato built as a Reflective DLL.
+- [**89**星][6m] [Py] [patois/hrdevhelper](https://github.com/patois/hrdevhelper) 反编译函数CTree可视化
+- [**89**星][3y] [JS] [particle-iot/spark-protocol](https://github.com/particle-iot/spark-protocol) Node.JS module for hosting direct encrypted CoAP socket connections
+- [**89**星][24d] [C#] [notsosecure/blacklist3r](https://github.com/notsosecure/blacklist3r) project-blacklist3r
+- [**89**星][5m] [C++] [niklasb/sploits](https://github.com/niklasb/sploits)
+- [**89**星][8y] [C] [neuroo/runtime-tracer](https://github.com/neuroo/runtime-tracer) 使用Pin收集运行数据并在IDA中显示
+ - [PinTool](https://github.com/neuroo/runtime-tracer/tree/master/tracer)
+ - [IDA插件](https://github.com/neuroo/runtime-tracer/tree/master/ida-pin)
+- [**89**星][2y] [nanopool/claymore-xmr-miner](https://github.com/nanopool/claymore-xmr-miner) Claymore's CryptoNote GPU Miner
+- [**89**星][5y] [JS] [laktak/vanilla-chrome](https://github.com/laktak/vanilla-chrome) Vanilla Cookie Manager is a Whitelist Manager that helps protect your privacy. Automatically removes unwanted cookies.
+- [**89**星][2m] [Java] [julietkilo/canbabel](https://github.com/julietkilo/canbabel) Translator for several Controller Area Network (CAN) description formats
+- [**89**星][3y] [ObjC] [jamie72/ipapatch](https://github.com/jamie72/ipapatch) Patch iOS Apps, The Easy Way, Without Jailbreak.
+- [**89**星][5y] [Py] [ifghou/wapiti](https://github.com/ifghou/wapiti) A web-application vulnerability scanner
+- [**89**星][4y] [Py] [houqp/shell.py](https://github.com/houqp/shell.py) shell power for python
+- [**89**星][8m] [Shell] [hannob/tlshelpers](https://github.com/hannob/tlshelpers) A collection of shell scripts that help handling X.509 certificate and TLS issues
+- [**89**星][2y] [PHP] [graniet/gshark-framework](https://github.com/graniet/gshark-framework) gshark-framework:执行web post exploitation,可与多个 Web 后门交互,并执行自定义脚本
+- [**89**星][2y] [PS] [gimini/noah](https://github.com/gimini/noah) an agentless open source Incident Response framework based on PowerShell
+- [**89**星][10d] [JS] [ehmicky/test-each](https://github.com/ehmicky/test-each)
+- [**89**星][2y] [C#] [dsnezhkov/typhoon](https://github.com/dsnezhkov/typhoon) recon under the radar
+- [**89**星][7m] [Java] [docbleach/docbleach](https://github.com/docbleach/docbleach)
+- [**89**星][3y] [Java] [dobin/burpsentinel](https://github.com/dobin/burpsentinel) GUI Burp Plugin to ease discovering of security holes in web applications
+- [**89**星][2y] [Py] [dionysio/haveibeenpwned_lastpass](https://github.com/dionysio/haveibeenpwned_lastpass) Check if your lastpass passwords have been pwned by someone
+- [**89**星][5m] [Ruby] [digininja/rsmangler](https://github.com/digininja/rsmangler) RSMangler will take a wordlist and perform various manipulations on it similar to those done by John the Ripper with a few extras.
+- [**89**星][6m] [Go] [devanshbatham/gorecon](https://github.com/devanshbatham/gorecon) Gorecon is a All in one Reconnaissance Tool , a.k.a swiss knife for Reconnaissance , A tool that every pentester/bughunter might wanna consider into their arsenal
+- [**89**星][1y] [Py] [dc3l1ne/weblogic-weakpassword-scnner](https://github.com/dc3l1ne/weblogic-weakpassword-scnner)
+- [**89**星][2y] [PS] [danielbohannon/out-fincodedcommand](https://github.com/danielbohannon/out-fincodedcommand) POC Highlighting Obfuscation Techniques used by FIN threat actors based on cmd.exe's replace functionality and cmd.exe/powershell.exe's stdin command invocation capabilities
+- [**89**星][4y] [Py] [cognosec/secbee](https://github.com/cognosec/secbee) a ZigBee security testing tool developed
+- [**89**星][2y] [C] [codecat/clawsearch](https://github.com/codecat/clawsearch) A memory scanner plugin for x64dbg, inspired by Cheat Engine.
+- [**89**星][7d] [C] [capstone-rust/capstone-rs](https://github.com/capstone-rust/capstone-rs) high-level Capstone system bindings for Rust
+- [**89**星][6d] [bkimminich/pwning-juice-shop](https://github.com/bkimminich/pwning-juice-shop) GitBook markdown content for the eBook "Pwning OWASP Juice Shop"
+- [**89**星][4y] [Py] [bindog/toymalwareclassification](https://github.com/bindog/toymalwareclassification) Kaggle微软恶意代码分类
+- [**89**星][2y] [ObjC] [bahome/batouchid](https://github.com/bahome/batouchid) git 最全面的支付宝 指纹解锁 和 手势解锁 封装以及逻辑处理!
+- [**89**星][6y] [C++] [amrthabet/winsrdf](https://github.com/amrthabet/winsrdf) Security Research and Development Framework
+- [**89**星][4m] [adguardteam/adguardformac](https://github.com/adguardteam/adguardformac) Open bug tracker for Mac version of AdGuard
+- [**89**星][2y] [HTML] [0xcl/clang-cfi-bypass-techniques](https://github.com/0xcl/clang-cfi-bypass-techniques) 三种利用漏洞绕过Clang Control Flow Integrity (CFI)的技巧(应用于Chromium时)
+- [**89**星][11m] [Py] [0x00-0x00/fakepip](https://github.com/0x00-0x00/fakepip) Pip install exploit package
+- [**88**星][2y] [Go] [dawei101/tongsheclient.shadowsocks-go-ui](https://github.com/dawei101/tongsheclient.shadowsocks-go-ui) shadowsocks client for all desktop platform(mac osx/windows/linux) with golang
+- [**88**星][3y] [Swift] [kjcracks/swift-dump](https://github.com/kjcracks/swift-dump) Generate readable Swift code from binaries
+- [**88**星][3m] [C++] [leoloobeek/comproxy](https://github.com/leoloobeek/comproxy) PoC for proxying COM objects when hijacking
+- [**88**星][2y] [Py] [icchy/tracecorn](https://github.com/icchy/tracecorn) Windows API 调用追踪,用作恶意代码分析
+- [**88**星][1y] [TeX] [zxgio/r2-cheatsheet](https://github.com/zxgio/r2-cheatsheet) Radare2 cheat-sheet
+- [**88**星][3y] [C++] [zibility/remote](https://github.com/zibility/remote) 参考Gh0st源码,实现的一款PC远程协助软件,拥有远程Shell、文件管理、桌面管理、消息发送等功能。
+- [**88**星][2m] [PHP] [zendframework/zend-crypt](https://github.com/zendframework/zend-crypt) Cryptographic component from Zend Framework
+- [**88**星][10m] [Py] [woj-ciech/kupa3](https://github.com/woj-ciech/kupa3) Tracking the trackers. Draw connections between scripts and domains on website.
+- [**88**星][5m] [C] [vulhub/redis-rogue-getshell](https://github.com/vulhub/redis-rogue-getshell) 利用redis 4.x/5.x master/slave 模式getshell
+- [**88**星][3d] [C] [vigem/hidguardian](https://github.com/vigem/hidguardian) Windows kernel-mode driver for controlling access to various input devices.
+- [**88**星][9d] [CSS] [uvasrg/evademl](https://github.com/uvasrg/evademl) 绕过基于机器学习的恶意软件分类器
+- [**88**星][3y] [C] [ufrisk/kaslrfinder](https://github.com/ufrisk/kaslrfinder) Kernel Address Space Layout Randomization (KASLR) Recovery Software
+- [**88**星][5m] [tuupola/branca-spec](https://github.com/tuupola/branca-spec) Authenticated and encrypted API tokens using modern crypto
+- [**88**星][1m] [Py] [tum-i22/macke](https://github.com/tum-i22/macke) Modular And Compositional analysis with KLEE Engine
+- [**88**星][13d] [Ruby] [travis-ci/packer-templates](https://github.com/travis-ci/packer-templates) Templates for Packer!
+- [**88**星][1y] [Py] [tearsecurity/firstorder](https://github.com/tearsecurity/firstorder) A traffic analyzer to evade Empire's communication from Anomaly-Based IDS
+- [**88**星][2y] [PS] [suriyaakudoisc/keylogger](https://github.com/suriyaakudoisc/keylogger)
+- [**88**星][3y] [C] [stealth/troubleshooter](https://github.com/stealth/troubleshooter) setroubleshootd xSports
+- [**88**星][3m] [Go] [smiegles/mass3](https://github.com/smiegles/mass3) 使用DNS和一堆DNS解析器, 快速枚举预定义的AWS S3 bucket
+- [**88**星][1y] [Java] [silentsignal/burp-image-size](https://github.com/silentsignal/burp-image-size) Image size issues plugin for Burp Suite
+- [**88**星][1y] [Py] [sigploiter/gtscan](https://github.com/sigploiter/gtscan) The Nmap Scanner for Telco
+- [**88**星][2m] [Py] [si9int/acamar](https://github.com/si9int/acamar) A Python3 based single-file subdomain enumerator
+- [**88**星][2y] [Py] [se55i0n/awvs_nessus_scanner_api](https://github.com/se55i0n/awvs_nessus_scanner_api) 扫描器Awvs 11和Nessus 7 Api利用脚本
+- [**88**星][14d] [sdnewhop/sdwannewhope](https://github.com/sdnewhop/sdwannewhope) 通过分析不同的SD-WAN解决方案, 回答SD-WAN安全性方面的问题(SD-WAN: 软件定义的广域网)
+- [**88**星][2m] [Scala] [scala/jardiff](https://github.com/scala/jardiff) A tool for comparing JAR files, including Scala pickled signatures and method code
+- [**88**星][10m] [PHP] [sanix-darker/antiddos-system](https://github.com/sanix-darker/antiddos-system)
+- [**88**星][5m] [Py] [rub-syssec/password-guessing-framework](https://github.com/rub-syssec/password-guessing-framework) A Framework for Comparing Password Guessing Strategies
+- [**88**星][6m] [Java] [rub-nds/burpssoextension](https://github.com/rub-nds/burpssoextension) An extension for BurpSuite that highlights SSO messages in Burp's proxy window..
+- [**88**星][2m] [Scala] [rsertelon/android-keystore-recovery](https://github.com/rsertelon/android-keystore-recovery) A tool to recover your lost Android keystore password
+- [**88**星][2y] [Py] [rk700/attackrsa](https://github.com/rk700/attackrsa) An all-in-one tool including many common attacks against RSA problems in CTF.
+- [**88**星][1y] [C] [renorobert/virtualbox-cve-2018-2844](https://github.com/renorobert/virtualbox-cve-2018-2844)
+- [**88**星][2y] [PS] [realparisi/wmi_monitor](https://github.com/realparisi/wmi_monitor) Log newly created WMI consumers and processes to the Windows Application event log
+- [**88**星][5m] [Py] [rassec/yandi-scanner](https://github.com/rassec/yandi-scanner) Network Security Vulnerability Scanner
+- [**88**星][3m] [JS] [ossindex/auditjs](https://github.com/ossindex/auditjs) Audits an NPM package.json file to identify known vulnerabilities.
+- [**88**星][7m] [Go] [nearform/gammaray](https://github.com/nearform/gammaray) Node.js vulnerability scanner
+- [**88**星][4y] [Py] [mothran/unicorn-decoder](https://github.com/mothran/unicorn-decoder) Simple shellcode decoder using unicorn-engine
+- [**88**星][2y] [Py] [mind0xp/frida-python-binding](https://github.com/mind0xp/frida-python-binding) Easy to use Frida python binding script
+- [**88**星][10m] [Go] [marinx/keylogger](https://github.com/marinx/keylogger) Basic keylogger in Go (no C deps)
+- [**88**星][11m] [JS] [mandatoryprogrammer/tarnish](https://github.com/mandatoryprogrammer/tarnish) A Chrome extension static analysis tool to help aide in security reviews.
+- [**88**星][4y] [Py] [maltelligence/maltelligence](https://github.com/maltelligence/maltelligence) a Malware/Threat Analyst Desktop
+- [**88**星][3y] [JS] [lovetingyuan/fq](https://github.com/lovetingyuan/fq) fq应用,基于nodejs和shadowsocks
+- [**88**星][8m] [Shell] [jseidl/multi-tor](https://github.com/jseidl/multi-tor) Shellscript opens multiple TOR instances
+- [**88**星][6m] [C#] [jnqpblc/sharpspray](https://github.com/jnqpblc/sharpspray) SharpSpray a simple code set to perform a password spraying attack against all users of a domain using LDAP and is compatible with Cobalt Strike.
+- [**88**星][1y] [Shell] [jbreed/apkwash](https://github.com/jbreed/apkwash) Android APK Antivirus evasion for msfvenom generated payloads.
+- [**88**星][2y] [Java] [federicodotta/handycollaborator](https://github.com/federicodotta/handycollaborator) Burp Suite plugin created for using Collaborator tool during manual testing in a comfortable way!
+- [**88**星][20d] [Py] [ernw/windows-insight](https://github.com/ernw/windows-insight) The content of this repository aims to assist efforts on analysing inner working principles, functionalities, and properties of the Microsoft Windows operating system. This repository stores relevant documentation as well as executable files needed for conducting analysis studies.
+- [**88**星][1m] [Rust] [ekse/unicorn-rs](https://github.com/ekse/unicorn-rs) Rust bindings for the unicorn CPU emulator
+- [**88**星][2y] [C++] [egebalci/cminer](https://github.com/egebalci/cminer) Cminer is a tool for enumerating the code caves in PE files.
+- [**88**星][3y] [Go] [dutchcoders/ares](https://github.com/dutchcoders/ares) Phishing toolkit for red teams and pentesters.
+- [**88**星][9m] [Py] [dirkjanm/impacket](https://github.com/dirkjanm/impacket) Impacket is a collection of Python classes for working with network protocols.
+- [**88**星][4y] [dantaler/detectionstring](https://github.com/dantaler/detectionstring) list of sql-injection and XSS strings
+- [**88**星][5y] [Py] [cubicalabs/idasynergy](https://github.com/cubicalabs/idasynergy) 集成了版本控制系统(svn)的IDA插件
+- [**88**星][3m] [Scala] [criteo/lolhttp](https://github.com/criteo/lolhttp) An HTTP Server and Client library for Scala.
+- [**88**星][6m] [Go] [coinbase/dexter](https://github.com/coinbase/dexter) Forensics acquisition framework designed to be extensible and secure
+- [**88**星][1y] [ObjC] [cmackay/google-analytics-plugin](https://github.com/cmackay/google-analytics-plugin) Cordova Google Analytics Plugin for Android & iOS
+- [**88**星][3m] [Py] [cisco-talos/ghidraaas](https://github.com/cisco-talos/ghidraaas) 通过REST API暴露Ghidra分析服务, 也是GhIDA的后端
+- [**88**星][3y] [Py] [circl/bgp-ranking](https://github.com/circl/bgp-ranking) BGP ranking is a free software to calculate the security ranking of Internet Service Provider (ASN).
+- [**88**星][1y] [chihebchebbi/internet-of-things-pentesting-framework](https://github.com/chihebchebbi/internet-of-things-pentesting-framework)
+- [**88**星][1y] [C] [chef-koch/malware-research](https://github.com/chef-koch/malware-research) Samples, research and documents about any kind of malware and misc source which should be released to the public
+- [**88**星][5y] [Py] [cheetz/brutescrape](https://github.com/cheetz/brutescrape) A web scraper for generating password files based on plain text found
+- [**88**星][3m] [JS] [chatziko/location-guard](https://github.com/chatziko/location-guard) Hide your geographic location from websites.
+- [**88**星][10m] [Py] [calidog/axeman](https://github.com/calidog/axeman) Axeman is a utility to retrieve certificates from Certificate Transparency Lists (CTLs)
+- [**88**星][5m] [Py] [balika011/selfblow](https://github.com/balika011/selfblow) CVE‑2019‑5680
+- [**88**星][14d] [Py] [appsecco/spaces-finder](https://github.com/appsecco/spaces-finder) A tool to hunt for publicly accessible DigitalOcean Spaces
+- [**88**星][1y] [Py] [andresriancho/jwt-fuzzer](https://github.com/andresriancho/jwt-fuzzer) JWT fuzzer
+- [**88**星][7m] [C++] [adalenv/cve-2019-0708-tool](https://github.com/adalenv/cve-2019-0708-tool) A social experiment
+- [**88**星][2y] [Ruby] [0x09al/cve-2017-11882-metasploit](https://github.com/0x09al/cve-2017-11882-metasploit) This is a Metasploit module which exploits CVE-2017-11882 using the POC released here :
+- [**87**星][4y] [Py] [aanarchyy/wifite-mod-pixiewps](https://github.com/aanarchyy/wifite-mod-pixiewps)
+- [**87**星][2m] [Py] [demantz/frizzer](https://github.com/demantz/frizzer) Frida-based general purpose fuzzer
+- [**87**星][3m] [Py] [ecstatic-nobel/analyst-arsenal](https://github.com/ecstatic-nobel/Analyst-Arsenal) A toolkit for Security Researchers
+- [**87**星][11m] [C++] [nccgroup/dibf](https://github.com/nccgroup/DIBF) Windows NT ioctl bruteforcer and modular fuzzer
+- [**87**星][6m] [Py] [mzfr/ctf-writeups](https://github.com/mzfr/ctf-writeups) Writeups of Capture The Flag Competitions
+- [**87**星][4m] [Py] [duo-labs/phish-collect](https://github.com/duo-labs/phish-collect) Python script to hunt phishing kits
+- [**87**星][8m] [Py] [blacknbunny/peanalyzer](https://github.com/blacknbunny/peanalyzer) Advanced Portable Executable File Analyzer And Disassembler 32 & 64 Bit
+- [**87**星][2y] [Go] [rancher/lb-controller](https://github.com/rancher/lb-controller) Load Balancer for Rancher services via ingress controllers backed up by a Load Balancer provider of choice
+- [**87**星][11m] [Py] [0xbharath/censys-enumeration](https://github.com/0xbharath/censys-enumeration) A script to extract subdomains/emails for a given domain using SSL/TLS certificate dataset on Censys
+- [**87**星][4y] [C] [yaoyumeng/adore-ng](https://github.com/yaoyumeng/adore-ng) linux rootkit adapted for 2.6 and 3.x
+- [**87**星][8y] [C] [zoloziak/winnt4](https://github.com/zoloziak/winnt4) Windows NT4 Kernel Source code
+- [**87**星][1y] [C#] [zawawawa/gatelessgatesharp](https://github.com/zawawawa/gatelessgatesharp) Gateless Gate Sharp is an user-friendly yet extremely powerful open-source multi-algorithm miner for Windows operating systems.
+- [**87**星][9m] [Java] [yunxu1/jboss-_cve-2017-12149](https://github.com/yunxu1/jboss-_cve-2017-12149) CVE-2017-12149 jboss反序列化 可回显
+- [**87**星][7d] [Py] [xfreed0m/katzkatz](https://github.com/xfreed0m/katzkatz) Python script to parse txt files containing Mimikatz output
+- [**87**星][2d] [C] [waterslidelts/waterslide](https://github.com/waterslidelts/waterslide) WaterSlide is a streaming event-at-a-time architecture for processing metadata. It is designed to take in a set of streaming events from multiple sources, process them through a set of modules ("kids"), and return meaningful outputs.
+- [**87**星][8d] [HTML] [w3c/editing](https://github.com/w3c/editing) Specs and explainers maintained by the editing task force
+- [**87**星][2y] [vegabird/xvna](https://github.com/vegabird/xvna) 带漏洞的Node App
+- [**87**星][6m] [v-p-b/avpwn](https://github.com/v-p-b/avpwn) List of real-world threats against endpoint protection software
+- [**87**星][1y] [Py] [uploadcare/pyuploadcare](https://github.com/uploadcare/pyuploadcare) Python library for uploadcare
+- [**87**星][17d] [C] [unicornteam/hackcube-special](https://github.com/unicornteam/hackcube-special)
+- [**87**星][1y] [Java] [twjitm/afhq](https://github.com/twjitm/afhq) 类似于腾讯手机管家,360安全卫士等软件系。可以进行木马扫描,网络端口扫描,支付环境扫描,漏洞检测,短信电话拦截,垃圾清理,和手机防盗,利用反射和内容提供者实现电话短信拦截,采用iptable实现网络拦截过滤
+- [**87**星][26d] [Py] [tozny/rancher-lets-encrypt](https://github.com/tozny/rancher-lets-encrypt) Automatically create and manage certificates in Rancher using Let's Encrypt webroot verification via a minimal service
+- [**87**星][2m] [JS] [sk4ddy/remediatetheflag](https://github.com/sk4ddy/remediatetheflag) remediatetheflag: 对程序员进行安全相关的培训
+- [**87**星][6y] [C] [shjalayeri/drivecrypt](https://github.com/shjalayeri/drivecrypt) DriveCrypt Dcr.sys vulnerability exploit
+- [**87**星][6m] [TeX] [rudymatela/concise-cheat-sheets](https://github.com/rudymatela/concise-cheat-sheets) Cheat Sheets for programming languages and tools
+- [**87**星][4y] [Py] [regit/pshitt](https://github.com/regit/pshitt) Passwords of SSH Intruders Transferred to Text
+- [**87**星][2y] [PS] [re4lity/schtasks-backdoor](https://github.com/re4lity/schtasks-backdoor) Powershell 权限维持后门
+- [**87**星][5y] [C++] [piscou/fuzzwin](https://github.com/piscou/fuzzwin)
+- [**87**星][4y] [PS] [netspi/powershell-modules](https://github.com/netspi/powershell-modules)
+- [**87**星][4y] [Py] [necst/aamo](https://github.com/necst/aamo) AAMO: Another Android Malware Obfuscator
+- [**87**星][1m] [nccgroup/onelogicalmyth_shell](https://github.com/nccgroup/onelogicalmyth_shell) A HTA shell to assist with breakout assessments.
+- [**87**星][10m] [C] [mrdoulestar/whatminer](https://github.com/mrdoulestar/whatminer) 整理和收集遇见的各种恶意挖矿样本以供研究和学习(欢迎小伙伴们一起维护)
+- [**87**星][4m] [C++] [misson20000/twili](https://github.com/misson20000/twili) Homebrew debug monitor for the Nintendo Switch.
+- [**87**星][28d] [JS] [misp/misp-dashboard](https://github.com/misp/misp-dashboard) A dashboard for a real-time overview of threat intelligence from MISP instances
+- [**87**星][2y] [JS] [mirkoschubert/gdpr-cli](https://github.com/mirkoschubert/gdpr-cli) A command line tool for checking your website for GDPR compliance.
+- [**87**星][1y] [Py] [lnxg33k/webhandler](https://github.com/lnxg33k/webhandler) Bash simulator to control a server using PHP system functions.
+- [**87**星][1y] [C] [lloydlabs/windows-api-hashing](https://github.com/lloydlabs/windows-api-hashing) This is a simple example and explanation of obfuscating API resolution via hashing
+- [**87**星][4y] [Py] [laginimaineb/msm8974_exploit](https://github.com/laginimaineb/msm8974_exploit) Full TrustZone exploit for MSM8974
+- [**87**星][8m] [Py] [laconicwolf/burp-extensions](https://github.com/laconicwolf/burp-extensions) A collection of scripts to extend Burp Suite
+- [**87**星][6y] [Py] [jordan-wright/python-wireless-attacks](https://github.com/jordan-wright/python-wireless-attacks) Wireless Attacks in Python (Based on Blog Series)
+- [**87**星][5y] [Py] [iphelix/ida-patcher](https://github.com/iphelix/ida-patcher) 二进制文件和内存补丁
+- [**87**星][2y] [realbearcat/fastjson-payload](https://github.com/RealBearcat/Fastjson-Payload) Fastjson 反序列化
+- [**87**星][8m] [C++] [huanghongkai/game-helper](https://github.com/huanghongkai/game-helper) 介绍入门级游戏辅助的原理,内附有2018年2月dnf辅助C++源码
+- [**87**星][20d] [Py] [hexhive/bopc](https://github.com/hexhive/bopc) Block Oriented Programming -- Compiler
+- [**87**星][10m] [Py] [hegusung/webhashcat](https://github.com/hegusung/webhashcat) Hashcat web interface
+- [**87**星][1y] [hannob/tls-what-can-go-wrong](https://github.com/hannob/tls-what-can-go-wrong) TLS可能存在的问题
+- [**87**星][2y] [C++] [google/aff4](https://github.com/google/aff4) The Advanced Forensic File Format. NOTE: This project has been split into C and Python projects and moved to
+- [**87**星][5y] [Go] [filosottile/berserk](https://github.com/filosottile/berserk) A Go implementation of the BERserk attack against Mozilla NSS ASN.1 parsing of PKCS#1 RSA signatures with e = 3. Complete of a certificate generation tool, works with CAs in the trust store.
+- [**87**星][1y] [JS] [fgsect/fexm](https://github.com/fgsect/fexm) Automated fuzzing framework
+- [**87**星][2m] [Py] [eth0izzle/cracke-dit](https://github.com/eth0izzle/cracke-dit) cracke-dit ("Cracked It") makes it easier to perform regular password audits against Active Directory environments.
+- [**87**星][1m] [F#] [enkomio/sojobo](https://github.com/enkomio/sojobo) A binary analysis framework
+- [**87**星][6d] [endermanch/malwaredatabase](https://github.com/endermanch/malwaredatabase) This repository is one of a few malware collections on the GitHub.
+- [**87**星][9m] [Java] [doyensec/burpdeveltraining](https://github.com/doyensec/burpdeveltraining) Material for the training "Developing Burp Suite Extensions – From Manual Testing to Security Automation"
+- [**87**星][1y] [PS] [deepzec/win-portfwd](https://github.com/deepzec/win-portfwd) Powershell script to setup windows port forwarding using native netsh client
+- [**87**星][2y] [C#] [cubecoders/confuserex-reborn](https://github.com/cubecoders/confuserex-reborn) An open-source, free protector for .NET applications
+- [**87**星][9m] [Go] [crabkun/switcher](https://github.com/crabkun/switcher) 一个多功能的端口转发/端口复用工具,支持转发本地或远程地址的端口,支持正则表达式转发(实现端口复用)。
+- [**87**星][3m] [PS] [clr2of8/slackextract](https://github.com/clr2of8/slackextract) A PowerShell script to download all files, messages and user profiles that a user has access to in slack.
+- [**87**星][4m] [Clojure] [clojure-goes-fast/clj-java-decompiler](https://github.com/clojure-goes-fast/clj-java-decompiler) clj-java-decompiler: 将 Clojure 反编译为 Java
+- [**87**星][3y] [Py] [boy-hack/pythonwebhack](https://github.com/boy-hack/pythonwebhack) 用python实现的web框架建立的在线渗透平台
+- [**87**星][2y] [Java] [blackarbiter/android_code_arbiter](https://github.com/blackarbiter/android_code_arbiter) 针对Android Studio的源码扫描工具
+- [**87**星][2y] [PS] [bkup/slackshell](https://github.com/bkup/slackshell) PowerShell to Slack C2
+- [**87**星][1m] [Py] [assurancemaladiesec/certstreammonitor](https://github.com/assurancemaladiesec/certstreammonitor) Monitor certificates generated for specific domain strings and associated, store data into sqlite3 database, alert you when sites come online.
+- [**87**星][1m] [Py] [alset0326/peda-arm](https://github.com/alset0326/peda-arm) GDB plugin peda for arm
+- [**87**星][2y] [Py] [alexpark07/armscgen](https://github.com/alexpark07/armscgen) ARM Shellcode Generator
+- [**87**星][4y] [Py] [airbus-seclab/bta](https://github.com/airbus-seclab/bta) Open source Active Directory security audit framework.
+- [**87**星][5y] [Py] [adafruit/freqshow](https://github.com/adafruit/freqshow) Raspberry Pi & PiTFT-based RTL-SDR frequency scanning and display tool.
+- [**86**星][6d] [Rust] [plsyssec/haybale](https://github.com/plsyssec/haybale) Symbolic execution of LLVM IR with an engine written in Rust
+- [**86**星][4m] [Py] [skelsec/minikerberos](https://github.com/skelsec/minikerberos) Kerberos manipulation library in pure Python
+- [**86**星][11m] [Py] [webbreacher/osinttools](https://github.com/webbreacher/osinttools) A collection of random OSINT scripts
+- [**86**星][1y] [Py] [bignerd95/routeros-backup-tools](https://github.com/bignerd95/routeros-backup-tools) Tools to encrypt/decrypt and pack/unpack RouterOS v6.13+ backup files
+- [**86**星][1y] [Py] [openai/neural-gpu](https://github.com/openai/neural-gpu) Code for the Neural GPU model originally described in "Neural GPUs Learn Algorithms"
+- [**86**星][3m] [C#] [shack2/struts2vulstools](https://github.com/shack2/struts2vulstools) Struts2系列漏洞检查工具
+- [**86**星][24d] [Go] [liamg/pax](https://github.com/liamg/pax)
+- [**86**星][14d] [HCL] [nccgroup/sadcloud](https://github.com/nccgroup/sadcloud) A tool for standing up (and tearing down!) purposefully insecure cloud infrastructure
+- [**86**星][4y] [JS] [nsacyber/locklevel](https://github.com/nsacyber/LOCKLEVEL) A prototype that demonstrates a method for scoring how well Windows systems have implemented some of the top 10 Information Assurance mitigation strategies. #nsacyber
+- [**86**星][9m] [Py] [hackthissite/ctf-writeups](https://github.com/HackThisSite/CTF-Writeups) Things we learned from Capture The Flag hacking competitions we participated in.
+- [**86**星][2y] [Ruby] [eurialo/vsaudit](https://github.com/eurialo/vsaudit) VOIP Security Audit Framework
+- [**86**星][2y] [JS] [polymathnetwork/polymath-token](https://github.com/PolymathNetwork/polymath-token) Ethereum contracts for the official Polymath token (POLY) and token distribution
+- [**86**星][7y] [Py] [stevenseeley/heaper](https://github.com/stevenseeley/heaper) heaper, an advanced heap analysis plugin for Immunity Debugger
+- [**86**星][3y] [Py] [vysecurity/genhta](https://github.com/vysecurity/genHTA) Generates anti-sandbox analysis HTA files without payloads
+- [**86**星][2y] [HTML] [illikainen/exploits](https://github.com/illikainen/exploits)
+- [**86**星][1y] [JS] [ettic-team/dnsbin](https://github.com/ettic-team/dnsbin) The request.bin of DNS request
+- [**86**星][7d] [HTML] [mitre-attack/attack-website](https://github.com/mitre-attack/attack-website) MITRE ATT&CK Website
+- [**86**星][4y] [Java] [zerothoughts/spring-jndi](https://github.com/zerothoughts/spring-jndi) Proof of concept exploit, showing how to do bytecode injection through untrusted deserialization with Spring Framework 4.2.4
+- [**86**星][2y] [C] [zerosum0x0/threadcontinue](https://github.com/zerosum0x0/threadcontinue) Reflective DLL injection using SetThreadContext() and NtContinue()
+- [**86**星][4y] [Py] [youmengxuefei/web_vul_scan](https://github.com/youmengxuefei/web_vul_scan) 基于爬虫的web漏洞扫描器
+- [**86**星][3y] [Py] [yehia-mamdouh/xssya](https://github.com/yehia-mamdouh/xssya) XSSYA (Cross Site Scripting Scanner & Vulnerability Confirmation)
+- [**86**星][2y] [Py] [wasiher/chrome_remote_interface_python](https://github.com/wasiher/chrome_remote_interface_python) Chrome Debugging Protocol interface for Python
+- [**86**星][4y] [Visual Basic .NET] [vozzie/uacscript](https://github.com/vozzie/uacscript) Windows 7 UAC Bypass Vulnerability in the Windows Script Host
+- [**86**星][1y] [Py] [viralmaniar/smwyg-show-me-what-you-got](https://github.com/viralmaniar/smwyg-show-me-what-you-got) This tool allows you to perform OSINT and reconnaissance on an organisation or an individual. It allows one to search 1.4 Billion clear text credentials which was dumped as part of BreachCompilation leak. This database makes finding passwords faster and easier than ever before.
+- [**86**星][3y] [Py] [ucsb-seclab/baredroid](https://github.com/ucsb-seclab/baredroid) bare-metal analysis on Android devices
+- [**86**星][2y] [Swift] [tendigi/xmrminer](https://github.com/tendigi/xmrminer) An embeddable Monero miner written in Swift.
+- [**86**星][5y] [Java] [sysdream/fino](https://github.com/sysdream/fino) Android small footprint inspection tool
+- [**86**星][4y] [Py] [sogeti-esec-lab/lkd](https://github.com/sogeti-esec-lab/lkd) Local Kernel Debugger (LKD) is a python wrapper around dbgengine.dll
+- [**86**星][1y] [santosomar/who_and_what_to_follow](https://github.com/santosomar/who_and_what_to_follow) Who and what to follow in the world of cyber security
+- [**86**星][2y] [C++] [rmitton/goaldis](https://github.com/rmitton/goaldis) Jak & Daxter GOAL disassembler
+- [**86**星][1y] [HTML] [radareorg/r2con2018](https://github.com/radareorg/r2con2018)
+- [**86**星][11m] [paralax/awesome-internet-scanning](https://github.com/paralax/awesome-internet-scanning) A curated list of awesome Internet port and host scanners, plus related components and much more, with a focus on free and open source projects.
+- [**86**星][3y] [JS] [oalabs/frida-wshook](https://github.com/oalabs/frida-wshook) Script analysis tool based on Frida.re
+- [**86**星][8m] [nongiach/awesome-cryptocurrency-security](https://github.com/nongiach/awesome-cryptocurrency-security)
+- [**86**星][5m] [C++] [nlitsme/idbutil](https://github.com/nlitsme/idbutil) 从 IDA 数据库中提取数据,支持 idb 及 i64
+- [**86**星][2m] [nightowl131/aapg](https://github.com/nightowl131/aapg) [A]ndroid [A]pplication [P]entest [G]uide
+- [**86**星][7m] [Py] [nccgroup/blesuite](https://github.com/nccgroup/blesuite) BLESuite is a Python package that provides an easier way to test Bluetooth Low Energy (BLE) device
+- [**86**星][2m] [Ruby] [nbulaj/proxy_fetcher](https://github.com/nbulaj/proxy_fetcher)
+- [**86**星][5y] [Ruby] [moosedojo/praedasploit](https://github.com/moosedojo/praedasploit)
+- [**86**星][2y] [Ruby] [mavproxyuser/p0vsredherring](https://github.com/mavproxyuser/p0vsredherring) "Luckily, there are underground 0day exploits for FTPD for path traversal." #FakeNews #DotDotWontPwn
+- [**86**星][3m] [Go] [mame82/unifyingvulnsdisclosurerepo](https://github.com/mame82/unifyingvulnsdisclosurerepo) Formerly private repository for discussion, knowledge- and code-sharing around new Unifying vulns, as announced on Twitter
+- [**86**星][1y] [C++] [malwaretech/appcontainersandbox](https://github.com/malwaretech/appcontainersandbox) An example sandbox using AppContainer (Windows 8+)
+- [**86**星][4y] [Py] [malwaremusings/unpacker](https://github.com/malwaremusings/unpacker) Automated malware unpacker
+- [**86**星][3d] [Rust] [kzen-networks/curv](https://github.com/kzen-networks/curv) Rust language general purpose elliptic curve cryptography.
+- [**86**星][4y] [PHP] [klaubert/waf-fle](https://github.com/klaubert/waf-fle) WAF-FLE, ModSecurity Console
+- [**86**星][7m] [C++] [kimci86/bkcrack](https://github.com/kimci86/bkcrack) Crack legacy zip encryption with Biham and Kocher's known plaintext attack.
+- [**86**星][7y] [Py] [iamultra/ssrfsocks](https://github.com/iamultra/ssrfsocks) Creates a SOCK proxy server that transmits data over an SSRF vulnerability
+- [**86**星][4y] [Py] [huntergregal/scansploit](https://github.com/huntergregal/scansploit) Exploit using barcodes, QRcodes, earn13, datamatrix
+- [**86**星][1y] [Java] [frpccluster/frpc-android](https://github.com/frpccluster/frpc-android) Android,安卓版frpc,一个快速反向代理,可帮助您将NAT或防火墙后面的本地服务器暴露给Internet。
+- [**86**星][3y] [C] [frangarcj/oclockvita](https://github.com/frangarcj/oclockvita) Simple Overclock Plugin for Taihen
+- [**86**星][3d] [Py] [fr0gger/vthunting](https://github.com/fr0gger/vthunting) Vthunting is a tiny script used to generate report about Virus Total hunting and send it by email, slack or telegram.
+- [**86**星][4m] [Py] [findneo/rsa-attack](https://github.com/findneo/rsa-attack) RSA加密应用常见缺陷的原理与实践
+- [**86**星][11m] [Py] [duanhongyi/gmssl](https://github.com/duanhongyi/gmssl) a python crypto for sm2/sm3/sm4
+- [**86**星][4y] [Py] [danmcinerney/fast-recon](https://github.com/danmcinerney/fast-recon) Does some google dorks against a domain
+- [**86**星][1y] [C] [cgcl-codes/vuldeepecker](https://github.com/cgcl-codes/vuldeepecker) 基于深度学习的漏洞检测系统
+- [**86**星][5y] [Py] [carmaa/nacker](https://github.com/carmaa/nacker) Nacker is a tool to circumvent 802.1x Network Access Control (NAC) on a wired LAN. Nacker will help you locate any non-802.1x configurable hosts on your subnet, and spoof their MAC address so that you appear authenticated to the switch.
+- [**86**星][1y] [C++] [c3d/elfe](https://github.com/c3d/elfe) Extensible Language for Everyday
+- [**86**星][5m] [Shell] [butteff/ubuntu-telemetry-free-privacy-secure](https://github.com/butteff/ubuntu-telemetry-free-privacy-secure) This Bash script just removes a pre-installed Telemetry, a pre-installed software and libs with some potentional or high risk. Script removes them to make your experience better and more secure. Also, the script installs an additional software for the protection. You will find more advices in Readme file about "what you can do more".
+- [**86**星][2y] [Py] [bsmali4/sicklepoc](https://github.com/bsmali4/sicklepoc)
+- [**86**星][3y] [Py] [azizaltuntas/network-analysis-tools](https://github.com/azizaltuntas/network-analysis-tools) Pcap (capture file) Analysis Toolkit(v.1)
+- [**86**星][3y] [aidanharris/free-security-ebooks-from-packtpub](https://github.com/aidanharris/free-security-ebooks-from-packtpub) Collection of free Security eBooks from Packt Publishing [Regularly Updated]
+- [**86**星][3y] [advanced-threat-research/efi-whitelist](https://github.com/advanced-threat-research/efi-whitelist) 一堆EFI 可执行文件的信息(Json格式),文件来自于供应商网站的(U)EFI固件更新镜像,信息包括Hash、GUID、名称、类型。
+- [**86**星][7m] [Shell] [1n3/prism-ap](https://github.com/1n3/prism-ap) An automated Wireless RogueAP MITM attack framework.
+- [**85**星][9m] [Visual Basic .NET] [catboy96/automator](https://github.com/catboy96/automator) ⌨ Digispark™ Rubber Ducky code editor for Windows.
+- [**85**星][28d] [PS] [adamdriscoll/snek](https://github.com/adamdriscoll/snek) PowerShell wrapper around Python for .NET to invoke Python from PowerShell
+- [**85**星][5m] [TS] [redpointgames/pkgsign](https://github.com/redpointgames/pkgsign) A CLI tool for signing and verifying npm and yarn packages.
+- [**85**星][3d] [C++] [tihmstar/ra1nsn0w](https://github.com/tihmstar/ra1nsn0w) A tethered booter for 64bit iOS devices vulnerable to checkm8
+- [**85**星][3y] [C++] [outflanknl/netshhelperbeacon](https://github.com/outflanknl/NetshHelperBeacon) Example DLL to load from Windows NetShell
+- [**85**星][10m] [C++] [fsecurelabs/viridianfuzzer](https://github.com/FSecureLABS/ViridianFuzzer) Kernel driver to fuzz Hyper-V hypercalls
+- [**85**星][1y] [Py] [lorentzenman/youzer](https://github.com/lorentzenman/youzer) Fake User Generator for Active Directory Environments
+- [**85**星][10m] [ruby] [pikatrack/pikatrack](https://gitlab.com/pikatrack/pikatrack)
+- [**85**星][4m] [C] [zouxianyu/kernelhiddenexecute](https://github.com/zouxianyu/kernelhiddenexecute) Execute kernel code with page separation
+- [**85**星][1y] [Py] [zmap/ztag](https://github.com/zmap/ztag) Tagging and annotation framework for scan data
+- [**85**星][3y] [ObjC] [zhengmin1989/macos-10.12.2-exp-via-mach_voucher](https://github.com/zhengmin1989/macos-10.12.2-exp-via-mach_voucher) Local Privilege Escalation for macOS 10.12.2 via mach_voucher and XNU port Feng Shui
+- [**85**星][2y] [Py] [zhangzhenfeng/anyscan](https://github.com/zhangzhenfeng/anyscan) AnyScan
+- [**85**星][3m] [Py] [yeggor/uefi_retool](https://github.com/yeggor/uefi_retool) 在UEFI固件和UEFI模块分析中查找专有协议的工具
+- [**85**星][1y] [Py] [wez3/msfenum](https://github.com/wez3/msfenum) 在特定目标集上自动运行多个 Metasploit auxiliary 模块
+- [**85**星][2y] [Py] [wanjunzh/ssct](https://github.com/wanjunzh/ssct) ssct:shadowsocks 包装器,用于持续绕过防火墙
+- [**85**星][2d] [C++] [wallix/redemption](https://github.com/wallix/redemption) A GPL RDP proxy
+- [**85**星][2y] [C] [vim2meta/keylogger](https://github.com/vim2meta/keylogger) A powerful C keylogger for Windows.
+- [**85**星][3y] [Py] [vector35/binaryninja-plugins](https://github.com/vector35/binaryninja-plugins) Repository to track Binary Ninja Plugins, Themes, and other related tools
+- [**85**星][7y] [Java] [thomascannon/android-sms-spoof](https://github.com/thomascannon/android-sms-spoof) PoC app which takes advantage of Android's SmsReceiverService being exported to fake an incoming SMS with no permissions.
+- [**85**星][12m] [Py] [thelsa/tp5-getshell](https://github.com/thelsa/tp5-getshell) thinkphp5 rce getshell
+- [**85**星][2y] [ObjC] [siguza/phoenixnonce](https://github.com/siguza/phoenixnonce) 64-bit nonce setter for iOS 9.3.4-9.3.5
+- [**85**星][7m] [C] [siguza/iokit-utils](https://github.com/siguza/iokit-utils) Dev tools for probing IOKit
+- [**85**星][3y] [C] [sensepost/ms16-098](https://github.com/sensepost/ms16-098) Windows 8.1 x64 Exploit for MS16-098 RNGOBJ_Integer_Overflow
+- [**85**星][4y] [HTML] [secmob/cansecwest2016](https://github.com/secmob/cansecwest2016) slide and full exploit
+- [**85**星][8m] [JS] [scravy/node-macaddress](https://github.com/scravy/node-macaddress) Get the MAC addresses (hardware addresses) of the hosts network interfaces.
+- [**85**星][2m] [Ruby] [rtfpessoa/dependency_spy](https://github.com/rtfpessoa/dependency_spy) Find known vulnerabilities in your dependencies
+- [**85**星][1y] [Shell] [rpranshu/autopwn](https://github.com/rpranshu/autopwn) A simple bash based metasploit automation tool!
+- [**85**星][2m] [C++] [romainthomas/pyjadx](https://github.com/romainthomas/pyjadx) Jadx Python Binding
+- [**85**星][2d] [Py] [rocky/python2-trepan](https://github.com/rocky/python2-trepan) A gdb-like Python 2.x Debugger in the Trepan family
+- [**85**星][6y] [Py] [rjw57/hdcp-genkey](https://github.com/rjw57/hdcp-genkey) Generate HDCP source and sink keys from the leaked master key
+- [**85**星][3y] [risksense-ops/ms17-010](https://github.com/risksense-ops/ms17-010) MS17-010 Research
+- [**85**星][5y] [AGS Script] [rapid7/embedded-tools](https://github.com/rapid7/embedded-tools)
+- [**85**星][1y] [Py] [pyn3rd/cve-2018-3191](https://github.com/pyn3rd/cve-2018-3191) CVE-2018-3191-PoC
+- [**85**星][11m] [ObjC] [pwnsdx/unsecure](https://github.com/pwnsdx/unsecure) (Released in December 2016) Bypass security alerts of Little Flocker / Little Snitch / HandsOff! / BlockBlock (same concept can be applied to other security tools) on macOS.
+- [**85**星][8y] [poerschke/uniscan](https://github.com/poerschke/uniscan) Uniscan web vulnerability scanner
+- [**85**星][5m] [Py] [pnfsoftware/jeb2-samplecode](https://github.com/pnfsoftware/jeb2-samplecode) Sample extensions for JEB Decompiler
+- [**85**星][2y] [C] [petermosmans/openssl](https://github.com/petermosmans/openssl) 'Extra featured' OpenSSL with ChaCha20 and Poly1305 support
+- [**85**星][9m] [C#] [padovah4ck/psbypassclm](https://github.com/padovah4ck/psbypassclm) Bypass for PowerShell Constrained Language Mode
+- [**85**星][2y] [Py] [oreilly-japan/black-hat-python-jp-support](https://github.com/oreilly-japan/black-hat-python-jp-support) 『サイバーセキュリティプログラミング』のサポートページ
+- [**85**星][4y] [C++] [ohjeongwook/flashhacker](https://github.com/ohjeongwook/flashhacker) Flash Instrumentation Tool
+- [**85**星][5y] [C] [nyx0/rovnix](https://github.com/nyx0/rovnix) Rovnix Bootkit
+- [**85**星][12m] [Py] [naivenom/exploiting](https://github.com/naivenom/exploiting) Exploiting challenges in Linux and Windows
+- [**85**星][2m] [JS] [mlgualtieri/css-exfil-protection](https://github.com/mlgualtieri/css-exfil-protection) Official repository for the CSS Exfil Protection browser extensions.
+- [**85**星][2d] [Shell] [mitchellkrogza/phishing.database](https://github.com/mitchellkrogza/phishing.database) Phishing Domains, urls websites and threats database. We use the PyFunceble testing tool to validate the status of all known Phishing domains and provide stats to reveal how many unique domains used for Phishing are still active.
+- [**85**星][2y] [C] [maximehip/safari-ios10.3.2-macos-10.12.4-exploit-bugs](https://github.com/maximehip/safari-ios10.3.2-macos-10.12.4-exploit-bugs)
+- [**85**星][4y] [Java] [mauro-g/snuck](https://github.com/mauro-g/snuck) Automatic XSS filter bypass
+- [**85**星][5m] [Java] [magiczer0/fastjson-rce-exploit](https://github.com/magiczer0/fastjson-rce-exploit) exploit for fastjson remote code execution vulnerability
+- [**85**星][4y] [Py] [liuhui0613/thewind](https://github.com/liuhui0613/thewind) a MITM attack tool
+- [**85**星][4y] [C] [laginimaineb/cve-2015-6639](https://github.com/laginimaineb/cve-2015-6639) QSEE Privilege Escalation Exploit using PRDiag* commands (CVE-2015-6639)
+- [**85**星][2d] [ObjC] [lacertosusrepo/open-source-tweaks](https://github.com/lacertosusrepo/open-source-tweaks) Tweaks I've left open, maybe someone can learn from/correct them. Either on my repo or Packix.
+- [**85**星][6m] [PS] [kieranwalsh/powershell](https://github.com/kieranwalsh/powershell) My PowerShell stuff
+- [**85**星][1m] [C++] [jnastarot/furikuri](https://github.com/jnastarot/furikuri) (In dev)furikuri is framework for code protection
+- [**85**星][1y] [Shell] [jakewharton/dalvik-dx](https://github.com/jakewharton/dalvik-dx) A standalone packaging of AOSP's platform/dalvik dx library.
+- [**85**星][6m] [Py] [initstring/evil-ssdp](https://github.com/initstring/evil-ssdp) Spoof SSDP replies and create fake UPnP devices to phish for credentials and NetNTLM challenge/response.
+- [**85**星][4y] [C] [gitdurandal/dbd](https://github.com/gitdurandal/dbd) Durandal's Backdoor
+- [**85**星][5d] [C++] [galoisinc/macaw](https://github.com/galoisinc/macaw) Open source binary analysis tools.
+- [**85**星][3y] [exp-sky/hitcon-2016-windows-10-x64-edge-0day-and-exploit](https://github.com/exp-sky/hitcon-2016-windows-10-x64-edge-0day-and-exploit) HitCon 2016 Windows 10 x64 edge 0day and exploit
+- [**85**星][6m] [Go] [equim-chan/h2s](https://github.com/equim-chan/h2s)
+- [**85**星][4y] [C] [electrojustin/triad-decompiler](https://github.com/electrojustin/triad-decompiler) TRiad Is A Decompiler. Triad is a tiny, free and open source, Capstone based x86 decompiler for ELF binaries.
+- [**85**星][2y] [diablohorn/yara4pentesters](https://github.com/diablohorn/yara4pentesters) rules to identify files containing juicy information like usernames, passwords etc
+- [**85**星][4m] [C++] [designer1337/aristois-legit](https://github.com/designer1337/aristois-legit) Full project files for aristois, Counter-Strike: Global Offensive cheat.
+- [**85**星][7m] [Py] [dcsync/pycobalt](https://github.com/dcsync/pycobalt) Cobalt Strike API, Python版本
+- [**85**星][1y] [Java] [cunninglogic/dumlracer](https://github.com/cunninglogic/dumlracer) Root Exploit for DJI Drones and Controllers (up to and including v01.04.0200)
+- [**85**星][2y] [C] [countercept/doublepulsar-usermode-injector](https://github.com/countercept/doublepulsar-usermode-injector) doublepulsar-usermode-injector:使用 DOUBLEPULSAR payload 用户模式的 Shellcode 向其他进程注入任意 DLL
+- [**85**星][1y] [cneill/appsec-resources](https://github.com/cneill/appsec-resources) Resources for developers and security engineers to learn the ropes of application security
+- [**85**星][2y] [Py] [cheeky4n6monkey/4n6-scripts](https://github.com/cheeky4n6monkey/4n6-scripts) Forensic Scripts
+- [**85**星][2d] [Zeek] [bro/bro](https://github.com/bro/bro) Mirror of
+- [**85**星][4y] [Py] [blackye/bkscanner](https://github.com/blackye/bkscanner) BkScanner 分布式、插件化web漏洞扫描器
+- [**85**星][7y] [C] [bagder/spindly](https://github.com/bagder/spindly) a portable C library for SPDY transport (DEAD project!)
+- [**85**星][12d] [C] [awakened1712/cve-2019-11932](https://github.com/awakened1712/cve-2019-11932) Simple POC for exploiting WhatsApp double-free bug in DDGifSlurp in decoding.c in libpl_droidsonroids_gif
+- [**85**星][6y] [C] [armenb/sharktools](https://github.com/armenb/sharktools) Tools for programmatic parsing of packet captures using Wireshark functionality
+- [**85**星][27d] [JS] [aqiongbei/buy_pig_plan](https://github.com/aqiongbei/buy_pig_plan) 电话攻击(电话轰炸、可代替短信轰炸)、留言攻击工具 | 随缘维护,佛系更新
+- [**85**星][2m] [Py] [angr/phuzzer](https://github.com/angr/phuzzer) The new phuzzing framework!
+- [**85**星][2y] [Ruby] [anbai-inc/attackfilter](https://github.com/anbai-inc/attackfilter) Logstash 日志安全攻击分析插件
+- [**85**星][7m] [Py] [aaronst/macholibre](https://github.com/aaronst/macholibre) Mach-O & Universal Binary Parser
+- [**85**星][3y] [Py] [5up3rc/nagascan](https://github.com/5up3rc/nagascan) NagaScan is a distributed passive scanner for Web application.
+- [**84**星][1m] [ObjC] [gssdromen/v2rayc](https://github.com/gssdromen/v2rayc) a GUI for v2ray on Mac
+- [**84**星][3y] [C#] [0xfireball/modphuserex](https://github.com/0xfireball/modphuserex) A .NET protector supporting .NET Core forked from the discontinued ConfuserEx
+- [**84**星][3d] [stonedreamforest/mirage](https://github.com/stonedreamforest/mirage) kernel-mode Anti-Anti-Debug plugin. based on intel vt-x && ept technology
+- [**84**星][9m] [Py] [npist/v2rayms](https://github.com/npist/v2rayms) v2ray whmcs 多用户后端
+- [**84**星][1y] [Py] [justsoos/ss-ssr-v2ray-gadget](https://github.com/justsoos/ss-ssr-v2ray-gadget) merge, deduplicate, backup, convert and online benchmark tools set for shadowsocks/shadowsocksR, v2ray. by python3
+- [**84**星][7m] [Py] [aoncyberlabs/ssh-weak-dh](https://github.com/AonCyberLabs/SSH-Weak-DH)
+- [**84**星][2m] [Shell] [devploit/put2win](https://github.com/devploit/put2win) Script to automate PUT HTTP method exploitation to get shell
+- [**84**星][3y] [C++] [zcash-hackworks/pay-to-sudoku](https://github.com/zcash-hackworks/pay-to-sudoku) Pay for the solution to a sudoku puzzle with a zero-knowledge contingent payment
+- [**84**星][1y] [security-cheatsheet/metasploit-cheat-sheet](https://github.com/security-cheatsheet/metasploit-cheat-sheet) Metasploit Cheat Sheet
+- [**84**星][4y] [Ruby] [ztgrace/pwn_lab](https://github.com/ztgrace/pwn_lab) pwn_lab:创建安全训练环境的Vagrant 脚本和 boxes
+- [**84**星][3d] [Py] [zricethezav/h1domains](https://github.com/zricethezav/h1domains) HackerOne "in scope" domains
+- [**84**星][21d] [Py] [ziconius/fudgec2](https://github.com/ziconius/fudgec2) FudgeC2 - a command and control framework designed for team collaboration and post-exploitation activities.
+- [**84**星][2y] [Java] [yandex/burp-molly-pack](https://github.com/yandex/burp-molly-pack) Security checks pack for Burp Suite
+- [**84**星][4y] [JS] [xuanhuan/ss-panel](https://github.com/xuanhuan/ss-panel) !
+- [**84**星][1m] [C] [wonderkun/ctfenv](https://github.com/wonderkun/ctfenv) 为应对CTF比赛而搭建的各种环境
+- [**84**星][1y] [JS] [tingge/web-analytics](https://github.com/tingge/web-analytics) 监测分析、异常监测、广告验证、访客唯一标识
+- [**84**星][3m] [Py] [therook/nsshell](https://github.com/therook/nsshell) A DNS connectback shell executed by strings in payloads.txt
+- [**84**星][3y] [C] [tedsluis/dump1090](https://github.com/tedsluis/dump1090) Dump1090 is a simple Mode S decoder for RTLSDR devices
+- [**84**星][3y] [Py] [smxlabs/gibbersense](https://github.com/smxlabs/gibbersense) gibbersense:尝试理解乱七八糟的东西(从乱七八糟的东西里面提取出有意义的信息)
+- [**84**星][5y] [shodan-labs/iotdb](https://github.com/shodan-labs/iotdb) Nmap scans of Internet of Things devices
+- [**84**星][2y] [Py] [sensepost/birp](https://github.com/sensepost/birp) Big Iron Recon & Pwnage
+- [**84**星][3y] [Shell] [scotthelme/lets-encrypt-smart-renew](https://github.com/scotthelme/lets-encrypt-smart-renew) Check the remaining validity period of a certificate before renewing.
+- [**84**星][4m] [Py] [safebreach-labs/bitsinject](https://github.com/safebreach-labs/bitsinject) A one-click tool to inject jobs into the BITS queue (Background Intelligent Transfer Service), allowing arbitrary program execution as the NT AUTHORITY/SYSTEM account
+- [**84**星][5y] [PHP] [rickgray/bypass-php-gd-process-to-rce](https://github.com/rickgray/bypass-php-gd-process-to-rce) Reference:
+- [**84**星][3m] [Py] [r00ts3c/ddos-rootsec](https://github.com/r00ts3c/ddos-rootsec) DDOS Archive by RootSec (Scanners, BotNets (Mirai and QBot Premium & Normal and more), Exploits, Methods, Sniffers)
+- [**84**星][2y] [C] [pannzh/hidemyass](https://github.com/pannzh/hidemyass) A post-exploit tool that carefully clean *NIX access logs
+- [**84**星][4y] [Py] [omererdem/honeything](https://github.com/omererdem/honeything) TR-069 Honeypot
+- [**84**星][30d] [Py] [nullarray/archivist](https://github.com/nullarray/archivist) A ctypes powered python keylogger.
+- [**84**星][4y] [Py] [mgoffin/malwarecookbook](https://github.com/mgoffin/malwarecookbook) Malware Analyst's Cookbook stuffs
+- [**84**星][1y] [C] [marfjeh/coinhive-block](https://github.com/marfjeh/coinhive-block) To block the malware domains of coin-hive systemwide.
+- [**84**星][4m] [Py] [kapytein/jsonp](https://github.com/kapytein/jsonp) jsonp is a Burp Extension which attempts to reveal JSONP functionality behind JSON endpoints. This could help reveal cross-site script inclusion vulnerabilities or aid in bypassing content security policies.
+- [**84**星][5m] [JS] [k4m4/dcipher](https://github.com/k4m4/dcipher) Decipher hashes using online rainbow & lookup table attack services.
+- [**84**星][1y] [Py] [jiangsir404/s7scan](https://github.com/jiangsir404/s7scan) a pentest scanner / 一个漏洞综合利用工具轮子,大佬请忽略
+- [**84**星][2y] [Py] [hi-wenr0/mlcheckwebshell](https://github.com/hi-wenr0/mlcheckwebshell)
+- [**84**星][3y] [C++] [hasherezade/persistence_demos](https://github.com/hasherezade/persistence_demos) Demos of various (also non standard) persistence methods used by malware
+- [**84**星][11d] [Py] [haotianteng/chiron](https://github.com/haotianteng/chiron) A basecaller for Oxford Nanopore Technologies' sequencers
+- [**84**星][1y] [Dockerfile] [hackerhouse-opensource/cve-2018-10933](https://github.com/hackerhouse-opensource/cve-2018-10933) cve-2018-10933 libssh authentication bypass
+- [**84**星][5m] [JS] [glamrock/cupcake](https://github.com/glamrock/cupcake) Create new pathways into Tor
+- [**84**星][2m] [Py] [fleetcaptain/turbolist3r](https://github.com/fleetcaptain/turbolist3r) Subdomain enumeration tool with analysis features for discovered domains
+- [**84**星][JS] [feeicn/papers](https://github.com/feeicn/papers) 个人博客,在企业安全、软件研发和个人思考的一些文章
+- [**84**星][4y] [Swift] [deniskr/keychainswiftapi](https://github.com/deniskr/keychainswiftapi) This Keychain Swift API library is a wrapper of iOS C Keychain Framework. It allows easily and securely storing sensitive data in secure keychain store.
+- [**84**星][7y] [Py] [dc414/upnp-exploiter](https://github.com/dc414/upnp-exploiter) A Upnp exploitation tool.
+- [**84**星][2y] [Py] [coco413/discoversubdomain](https://github.com/coco413/discoversubdomain) 前渗透信息探测工具集-子域名
+- [**84**星][4m] [C#] [cobbr/elite](https://github.com/cobbr/elite) Elite is the client-side component of the Covenant project. Covenant is a .NET command and control framework that aims to highlight the attack surface of .NET, make the use of offensive .NET tradecraft easier, and serve as a collaborative command and control platform for red teamers.
+- [**84**星][4y] [Go] [cloudflare/jgc-talks](https://github.com/cloudflare/jgc-talks) Code samples and data used in talk preparation by John Graham-Cumming
+- [**84**星][2y] [CSS] [cleverbao/webrange](https://github.com/cleverbao/webrange) 一个Web版的docker管理程序,可以用来运行各种docker漏洞环境和CTF环境。
+- [**84**星][3d] [claucece/useful-crypto-resources](https://github.com/claucece/useful-crypto-resources) A place for useful crypto-related resources plus some of my fav stuff
+- [**84**星][2y] [PHP] [bug7sec/ransomware](https://github.com/bug7sec/ransomware) Bug7sec Team - ransomware open source (web)
+- [**84**星][11m] [C++] [basketwill/sysmon_reverse](https://github.com/basketwill/sysmon_reverse)
+- [**84**星][12m] [C++] [arashpartow/proxy](https://github.com/arashpartow/proxy) C++ TCP Proxy Server
+- [**84**星][2y] [Py] [anonion0/nsec3map](https://github.com/anonion0/nsec3map) a tool to enumerate the resource records of a DNS zone using its DNSSEC NSEC or NSEC3 chain
+- [**84**星][5y] [Shell] [anexia-it/winshock-test](https://github.com/anexia-it/winshock-test) Bash script that tests if a system is Winshock (MS14-066) vulnerable
+- [**84**星][10m] [C] [aasthayadav/compsecattacklabs](https://github.com/aasthayadav/compsecattacklabs) Contains Attack labs
+- [**84**星][11m] [Py] [422926799/python](https://github.com/422926799/python) python黑客与一些脚本
+- [**84**星][3y] [Py] [3xp10it/mytoolkit](https://github.com/3xp10it/mytoolkit) 【Not maintained】sqlmap对所有目标及其所有旁站批量自动化sqli
+- [**84**星][2y] [Go] [0x09al/browser-c2](https://github.com/0x09al/browser-c2) Post Exploitation agent which uses a browser to do C2 operations.
+- [**83**星][3y] [Jupyter Notebook] [supercowpowers/workbench](https://github.com/supercowpowers/workbench) Workbench: A scalable python framework for security research and development teams.
+- [**83**星][3m] [C++] [lifting-bits/microx](https://github.com/lifting-bits/microx) Safely execute an arbitrary x86 instruction
+- [**83**星][1y] [JS] [seclab-ucr/tcp_exploit](https://github.com/seclab-ucr/tcp_exploit) Off-Path TCP Exploit: How Wireless Routers Can Jeopardize Your Secret
+- [**83**星][1y] [Py] [danmcinerney/search-google](https://github.com/danmcinerney/search-google) Scrape google search results
+- [**83**星][24d] [PS] [kmkz/powershell](https://github.com/kmkz/powershell) Some .ps1 scripts for pentesting
+- [**83**星][19d] [payloadbox/sql-injection-payload-list](https://github.com/payloadbox/sql-injection-payload-list)
+- [**83**星][22d] [six2dez/oscp-human-guide](https://github.com/six2dez/oscp-human-guide) My own OSCP guide
+- [**83**星][6m] [Shell] [zerobyte-id-bak/bashter](https://github.com/zerobyte-id-bak/Bashter) Web Crawler, Scanner, and Analyzer Framework (Shell-Script based)
+- [**83**星][1y] [Shell] [cyb0r9/androspy](https://github.com/Cyb0r9/Androspy) Androspy framework is a Backdoor Crypter & Creator with Automatic IP Poisener
+- [**83**星][4y] [Py] [n0tr00t/wvs_patcher](https://github.com/n0tr00t/WVS_Patcher) Script to run wvs in queue, and send mails to you on ending.
+- [**83**星][19d] [Py] [openpreserve/fido](https://github.com/openpreserve/fido) Format Identification for Digital Objects (FIDO) is a Python command-line tool to identify the file formats of digital objects. It is designed for simple integration into automated work-flows.
+- [**83**星][2y] [Py] [am0nsec/exploit](https://github.com/am0nsec/exploit) Collection of different exploits
+- [**83**星][2y] [C] [xobs/novena-linux](https://github.com/xobs/novena-linux) Linux kernel with Novena patches -- expect frequent rebases!
+- [**83**星][9m] [Py] [xajkep/wordlists](https://github.com/xajkep/wordlists) Infosec Wordlists
+- [**83**星][2m] [C++] [vusec/vuzzer64](https://github.com/vusec/vuzzer64) This implements a 64-bit version of vusec/vuzzer fuzzing tool.
+- [**83**星][1y] [JS] [vspandan/ifuzzer](https://github.com/vspandan/ifuzzer)
+- [**83**星][8m] [Py] [viralmaniar/peekaboo](https://github.com/viralmaniar/peekaboo) PeekABoo tool can be used during internal penetration testing when a user needs to enable Remote Desktop on the targeted machine. It uses PowerShell remoting to perform this task. Note: Remote desktop is disabled by default on all Windows operating systems.
+- [**83**星][3y] [JS] [unrealakama/nightshade](https://github.com/unrealakama/nightshade) A simple capture the flag framework.
+- [**83**星][11m] [Py] [tlkh/prowler](https://github.com/tlkh/prowler) Distributed Network Vulnerability Scanner
+- [**83**星][2y] [Py] [sogeti-esec-lab/rpcforge](https://github.com/sogeti-esec-lab/rpcforge) Windows RPC Python fuzzer
+- [**83**星][1m] [PHP] [slims/slims8_akasia](https://github.com/slims/slims8_akasia) SLiMS 8 Akasia official source code repository
+- [**83**星][16d] [Py] [sjord/jwtcrack](https://github.com/sjord/jwtcrack) Crack the shared secret of a HS256-signed JWT
+- [**83**星][3y] [C++] [scanlime/facewhisperer](https://github.com/scanlime/facewhisperer) USB host add-on for the ChipWhisperer side-channel analysis tool
+- [**83**星][1y] [Py] [s3rvac/retdec-python](https://github.com/s3rvac/retdec-python) A Python library and tools providing easy access to the retdec.com decompilation service through their REST API.
+- [**83**星][7y] [C] [realtalk/cve-2013-2094](https://github.com/realtalk/cve-2013-2094) original cve-2013-2094 exploit and a rewritten version for educational purposes
+- [**83**星][5m] [Py] [quantika14/guasap-whatsapp-foresincs-tool](https://github.com/quantika14/guasap-whatsapp-foresincs-tool) WhatsApp Forensic Tool
+- [**83**星][7d] [Java] [pwntester/dupekeyinjector](https://github.com/pwntester/dupekeyinjector) DupeKeyInjector
+- [**83**星][1y] [Jupyter Notebook] [poteman/alibaba-3rd-security-algorithm-challenge](https://github.com/poteman/alibaba-3rd-security-algorithm-challenge) 第三届阿里云安全算法挑战赛冠军代码
+- [**83**星][10m] [Py] [piranhalysis/pirogue](https://github.com/piranhalysis/pirogue) PiRogue is a small device meant to ease network interception and analysis.
+- [**83**星][11m] [Py] [phantom0301/vulcloud](https://github.com/phantom0301/vulcloud) A Simple Web-UI for Vulhub (Docker) / 便捷的漏洞镜像管理部署Web应用
+- [**83**星][3m] [Ruby] [pedrib/poc](https://github.com/pedrib/poc)
+- [**83**星][4y] [owasp/owasp-testing-guide](https://github.com/owasp/owasp-testing-guide) OWASP Testing Guide
+- [**83**星][8m] [offensive-security/kali-cloud-build](https://github.com/offensive-security/kali-cloud-build) Script to create Kali Linux Amazon Machine Images (AMIs)
+- [**83**星][3y] [JS] [oalabs/frida-extract](https://github.com/oalabs/frida-extract) Frida.re based RunPE (and MapViewOfSection) extraction tool
+- [**83**星][1y] [Py] [oalabs/findyara](https://github.com/oalabs/findyara) 使用Yara规则扫描二进制文件
+- [**83**星][1y] [Py] [nccgroup/blackboxprotobuf](https://github.com/nccgroup/blackboxprotobuf) Blackbox protobuf is a Burp Suite extension for decoding and modifying arbitrary protobuf messages without the protobuf type definition.
+- [**83**星][7m] [mr-xn/hackbar2.1.3](https://github.com/mr-xn/hackbar2.1.3) the free firefox extions of hackbar v2.1.3 ,hackbar 插件未收费的免费版本
+- [**83**星][4y] [C#] [monoxgas/trebuchet](https://github.com/monoxgas/trebuchet) MS15-076 Privilege Escalation
+- [**83**星][6y] [PS] [mmessano/powershell](https://github.com/mmessano/powershell)
+- [**83**星][1y] [C] [marcusbotacin/branchmonitoringproject](https://github.com/marcusbotacin/branchmonitoringproject) A branch-monitor-based solution for process monitoring.
+- [**83**星][6m] [Py] [localh0t/m4ngl3m3](https://github.com/localh0t/m4ngl3m3) 使用字符串列表的通用密码模式生成器
+- [**83**星][5y] [JS] [kmowery/canvas-fingerprinting](https://github.com/kmowery/canvas-fingerprinting) A framework for collecting and viewing graphical browser fingerprints.
+- [**83**星][2y] [Makefile] [kingsquare/docker-tunnel](https://github.com/kingsquare/docker-tunnel) a (simple) dockerized ssh tunnel
+- [**83**星][3m] [Py] [kcarretto/arsenal](https://github.com/kcarretto/arsenal) Extensible Red Team Framework
+- [**83**星][8m] [kai5263499/awesome-container-security](https://github.com/kai5263499/awesome-container-security) Awesome list of resources related to container security
+- [**83**星][2y] [PS] [kacperszurek/gpg_reaper](https://github.com/kacperszurek/gpg_reaper) 从gpg-agent缓存/内存中获取/窃取/恢复GPG私钥
+- [**83**星][9m] [justinsteven/advisories](https://github.com/justinsteven/advisories)
+- [**83**星][3y] [ObjC] [jonwil/unlinker](https://github.com/jonwil/unlinker) Unlinker is a tool that can rip functions out of Visual C++ compiled binaries and produce Visual C++ COFF object files
+- [**83**星][13d] [Java] [jgillam/burp-paramalyzer](https://github.com/jgillam/burp-paramalyzer) Paramalyzer - Burp extension for parameter analysis of large-scale web application penetration tests.
+- [**83**星][1y] [github-classroom-cybros/ethical-hacking](https://github.com/github-classroom-cybros/ethical-hacking) This repository contains reference material & links for people willing to learn Ethical Hacking
+- [**83**星][2y] [R] [fujitsulaboratories/comevizz](https://github.com/fujitsulaboratories/comevizz) COMEVIZZ is COde MEtrics VIsualiZation with Z-Score.
+- [**83**星][12m] [C] [friendlyarm/h3_lichee](https://github.com/friendlyarm/h3_lichee) BSP for FriendlyARM NanoPi H3
+- [**83**星][1y] [Ruby] [enjoiz/bsqlinjector](https://github.com/enjoiz/bsqlinjector) Blind SQL injection exploitation tool written in ruby.
+- [**83**星][6y] [Py] [einstein-/hexrays-python](https://github.com/einstein-/hexrays-python) Python bindings for the Hexrays Decompiler
+- [**83**星][2y] [C] [dword1511/onewire-over-uart](https://github.com/dword1511/onewire-over-uart) Access Dallas 1-Wire bus on your PC via low-cost USB to UART bridge.
+- [**83**星][6m] [C++] [djhohnstein/processreimaging](https://github.com/djhohnstein/processreimaging) Process reimaging proof of concept code
+- [**83**星][2y] [C++] [decoder-it/lonelypotato](https://github.com/decoder-it/lonelypotato) Modified version of RottenPotatoNG C++
+- [**83**星][8m] [C++] [deadash/pbb_crack](https://github.com/deadash/pbb_crack) PBB视频解密
+- [**83**星][4m] [Py] [danielplohmann/smda](https://github.com/danielplohmann/smda) SMDA is a minimalist recursive disassembler library that is optimized for accurate Control Flow Graph (CFG) recovery from memory dumps.
+- [**83**星][2m] [PS] [cyberark/skyark](https://github.com/cyberark/skyark) SkyArk helps to discover, assess and secure the most privileged entities in Azure and AWS
+- [**83**星][3y] [Py] [claudioviviani/wordbrutepress](https://github.com/claudioviviani/wordbrutepress) Wordpress Brute Force Multithreading with standard and xml-rpc login
+- [**83**星][3d] [caledoniaproject/awesome-opensource-security](https://github.com/caledoniaproject/awesome-opensource-security) A list of interesting stuffs that I have no time to test/review
+- [**83**星][5y] [Py] [bwall/ircsnapshot](https://github.com/bwall/ircsnapshot) Tool to gather information from IRC servers
+- [**83**星][4m] [C] [brainsmoke/ptrace-burrito](https://github.com/brainsmoke/ptrace-burrito) a friendly wrapper around ptrace
+- [**83**星][3y] [bones-codes/bombs](https://github.com/bones-codes/bombs) A few files for decompression bomb testing –––
+- [**83**星][3y] [C] [bluekezhou/binarywaf](https://github.com/bluekezhou/binarywaf) CTF线下赛流量记录工具
+- [**83**星][2y] [C++] [benjaminsoelberg/reflectivepeloader](https://github.com/benjaminsoelberg/reflectivepeloader) Reflective PE loader for DLL injection
+- [**83**星][7m] [Go] [assafmo/xioc](https://github.com/assafmo/xioc) Extract indicators of compromise from text, including "escaped" ones.
+- [**83**星][1y] [HTML] [amolnaik4/bodhi](https://github.com/amolnaik4/bodhi) Bodhi - Client-side Vulnerability Playground
+- [**83**星][2y] [Py] [401trg/detections](https://github.com/401trg/detections) This repository contains all public indicators identified by 401trg during the course of our investigations. It also includes relevant yara rules and ids signatures to detect these indicators.
+- [**83**星][2y] [Py] [1n3/httpoxyscan](https://github.com/1n3/httpoxyscan) HTTPoxy Exploit Scanner by 1N3 @CrowdShield
+- [**83**星][11m] [java] [JesusFreke/smali](https://bitbucket.org/jesusfreke/smali)
+- [**82**星][1y] [Dockerfile] [codesuki/ecs-nginx-proxy](https://github.com/codesuki/ecs-nginx-proxy) Reverse proxy for AWS ECS. Lets you address your docker containers by sub domain.
+- [**82**星][3d] [Py] [m4ll0k/burpsuite-secret_finder](https://github.com/m4ll0k/burpsuite-secret_finder) Burp Suite extension to discover apikeys/tokens from HTTP response.
+- [**82**星][2m] [C] [taviso/cefdebug](https://github.com/taviso/cefdebug) Minimal code to connect to a CEF debugger.
+- [**82**星][2m] [uknowsec/loginlog_windows](https://github.com/uknowsec/loginlog_windows) 读取登录过本机的登录失败或登录成功的所有计算机信息,在内网渗透中快速定位运维管理人员。
+- [**82**星][5y] [Ruby] [intrigueio/tapir](https://github.com/intrigueio/tapir) An easy-to-use and extensible framework for OSINT - REPLACED BY INTRIGUE-CORE
+- [**82**星][20d] [Py] [imtiazkarimik23/atfuzzer](https://github.com/imtiazkarimik23/atfuzzer) "Opening Pandora's Box through ATFuzzer: Dynamic Analysis of AT Interface for Android Smartphones" ACSAC 2019
+- [**82**星][11m] [JS] [zswang/jfogs](https://github.com/zswang/jfogs) JavaScript Obfuscator
+- [**82**星][3y] [C#] [saneki-discontinued/flatui](https://github.com/saneki-discontinued/FlatUI) Flat UI theme for .NET applications
+- [**82**星][2y] [C#] [zacbrown/powerkrabsetw](https://github.com/zacbrown/powerkrabsetw) PowerKrabsEtw is a PowerShell interface for doing real-time ETW tracing.
+- [**82**星][3y] [Py] [yehia-mamdouh/xssya-v-2.0](https://github.com/yehia-mamdouh/xssya-v-2.0)
+- [**82**星][5y] [Py] [xypiie/webshell](https://github.com/xypiie/webshell) WebShell is a web-based ssh shell.
+- [**82**星][4y] [C++] [wjp/idados](https://github.com/wjp/idados) DOSBox调试器插件
+- [**82**星][3y] [Go] [whyrusleeping/zmsg](https://github.com/whyrusleeping/zmsg) A small program for sending messages via zcash encrypted memo fields
+- [**82**星][3y] [Py] [wangyihang/ccupp](https://github.com/wangyihang/ccupp) 基于社会工程学的弱口令密码字典生成工具
+- [**82**星][2y] [Kotlin] [viktordegtyarev/callreclib](https://github.com/viktordegtyarev/callreclib) Call Recorder fix for Android 7 and Android 6
+- [**82**星][10m] [Shell] [trailofbits/ios-integrity-validator](https://github.com/trailofbits/ios-integrity-validator) Integrity validator for iOS devices
+- [**82**星][5y] [Py] [techbliss/frida_for_ida_pro](https://github.com/techbliss/frida_for_ida_pro) 在IDA中使用Frida, 主要用于追踪函数
+- [**82**星][2m] [Py] [takuzoo3868/penta](https://github.com/takuzoo3868/penta) Open source all-in-one CLI tool to automate pentesting.
+- [**82**星][2y] [Go] [snail007/autostart](https://github.com/snail007/autostart) autostart tools to set your application auto startup after desktop login,only for desktop version of linux , windows , mac.
+- [**82**星][1y] [Py] [silascutler/lnkparse](https://github.com/silascutler/lnkparse) Windows Shortcut file (LNK) parser
+- [**82**星][7y] [shjalayeri/sysret](https://github.com/shjalayeri/sysret) Windows Kernel Intel x64 SYSRET Vulnerability Exploit
+- [**82**星][6y] [Java] [schierlm/javapayload](https://github.com/schierlm/javapayload) JavaPayload is a collection of pure Java payloads to be used for post-exploitation from pure Java exploits or from common misconfigurations (like not password protected Tomcat manager or debugger port).
+- [**82**星][1y] [C] [rlarabee/exploits](https://github.com/rlarabee/exploits)
+- [**82**星][3y] [Vim script] [rjohnsondev/vim-compiler-go](https://github.com/rjohnsondev/vim-compiler-go) Vim compiler plugin for Go (golang)
+- [**82**星][7m] [C] [ret2p4nda/kernel-pwn](https://github.com/ret2p4nda/kernel-pwn)
+- [**82**星][4m] [Py] [ray-cp/pwn_debug](https://github.com/ray-cp/pwn_debug) Aim to help building exploitation of CTFs pwn game quickly
+- [**82**星][2y] [Go] [random-robbie/aws-scanner](https://github.com/random-robbie/aws-scanner) Scans a list of websites for Cloudfront or S3 Buckets
+- [**82**星][1y] [Kotlin] [pvasa/easycrypt](https://github.com/pvasa/easycrypt) Android cryptography library with SecureRandom patches.
+- [**82**星][10m] [Py] [plizonczyk/noiseprotocol](https://github.com/plizonczyk/noiseprotocol) Noise Protocol Framework - Python 3 implementation
+- [**82**星][4y] [Py] [pinperepette/geotweet_gui](https://github.com/pinperepette/geotweet_gui) Social engineering tool for human hacking
+- [**82**星][10m] [C++] [pelock/pelock-software-protection-and-licensing-sdk](https://github.com/pelock/pelock-software-protection-and-licensing-sdk) Software copy protection against cracking & reverse engineering with anti-cracking & anti-debugging techniques. Software license key system with time trial options.
+- [**82**星][2y] [C++] [paulsapps/msgi](https://github.com/paulsapps/msgi) Metal Gear Solid Integral PC reversing, efforts moved to
+- [**82**星][19d] [Ruby] [openzipkin/zipkin-ruby](https://github.com/openzipkin/zipkin-ruby) zipkin-tracer ruby gem
+- [**82**星][4d] [C] [nukem9/swissarmyknife](https://github.com/nukem9/swissarmyknife) x64dbg utility for linker map files, diff files, PEiD/IDA signatures, and code signature generation
+- [**82**星][2y] [C++] [nemerle/dcc](https://github.com/nemerle/dcc) This is a heavily updated version of the old DOS executable decompiler DCC
+- [**82**星][6y] [Py] [mwielgoszewski/burp-protobuf-decoder](https://github.com/mwielgoszewski/burp-protobuf-decoder) A simple Google Protobuf Decoder for Burp
+- [**82**星][5y] [Py] [maldroid/maldrolyzer](https://github.com/maldroid/maldrolyzer) Simple framework to extract "actionable" data from Android malware (C&Cs, phone numbers etc.)
+- [**82**星][2y] [Shell] [m4sc3r4n0/astroid](https://github.com/m4sc3r4n0/astroid) ASTROID v 1.2 bypass most A.V softwares
+- [**82**星][1y] [Py] [m4ll0k/wpsploit](https://github.com/m4ll0k/wpsploit) Wordpress主题/插件代码扫描
+- [**82**星][2y] [Py] [lz1y/cve-2017-8759](https://github.com/lz1y/cve-2017-8759) CVE-2017-8759
+- [**82**星][3y] [Py] [llsourcell/antivirus_demo](https://github.com/llsourcell/antivirus_demo) Antivirus Demo for Fresh Machine Learning #7
+- [**82**星][2y] [Py] [lcatro/browser_vuln_check](https://github.com/lcatro/browser_vuln_check) 利用已知的浏览器漏洞PoC 来快速检测Webview 和浏览器环境是否存在安全漏洞,只需要访问run.html 即可获取所有扫描结果,适用场景包含:APP 发布之前的内部安全测试,第三方Webview 漏洞检测等
+- [**82**星][5y] [Py] [krmaxwell/tinfoleak](https://github.com/krmaxwell/tinfoleak) Get detailed information about a Twitter user activity
+- [**82**星][6y] [k33nteam/ie9-ie11-vulnerability-advanced-exploitation](https://github.com/k33nteam/ie9-ie11-vulnerability-advanced-exploitation) Public slides and demo code of bypassing security protection in the latest Windows Internet Explorer.
+- [**82**星][1y] [Py] [juniorn1003/faitagram](https://github.com/juniorn1003/faitagram) Welp, This failed. Go find another one.
+- [**82**星][4y] [Py] [jinhang/12306_captcha](https://github.com/jinhang/12306_captcha) CNN对12306、sina、baidu的验证码破解。
+- [**82**星][4m] [jeanlouisferey/aws-securitygroup-grapher](https://github.com/jeanlouisferey/aws-securitygroup-grapher) This ansible role gets information from an AWS VPC and generate a graphical representation of security groups
+- [**82**星][4m] [Py] [indicodatasolutions/enso](https://github.com/indicodatasolutions/enso) Enso: An Open Source Library for Benchmarking Embeddings + Transfer Learning Methods
+- [**82**星][2y] [Py] [idanr1986/cuckoodroid-2.0](https://github.com/idanr1986/cuckoodroid-2.0) 自动化Android 恶意软件分析
+- [**82**星][5y] [C++] [hackedteam/scout-win](https://github.com/hackedteam/scout-win) Scout backdoor for Windows
+- [**82**星][3m] [Java] [graxcode/cafebabe](https://github.com/graxcode/cafebabe) Easy-to-use java bytecode editor - successor of JByteMod!
+- [**82**星][18d] [Go] [grantseltzer/karn](https://github.com/grantseltzer/karn) Simplifying Seccomp enforcement in containerized or non-containerized apps
+- [**82**星][1y] [C] [gossithedog/zeroday](https://github.com/gossithedog/zeroday)
+- [**82**星][1y] [HTML] [google/rekall-profiles](https://github.com/google/rekall-profiles) Public Profile Repository for Rekall Memory Forensic.
+- [**82**星][9m] [Go] [glen-mac/gogetbucket](https://github.com/glen-mac/gogetbucket) A penetration testing tool to enumerate and analyse Amazon S3 Buckets owned by a domain.
+- [**82**星][30d] [Shell] [firecracker-microvm/firecracker-demo](https://github.com/firecracker-microvm/firecracker-demo) A demo running 4000 Firecracker microVMs.
+- [**82**星][2y] [exp-sky/asiasecwest-2018-chakra-vulnerability-and-exploit-bypass-all-system-mitigation](https://github.com/exp-sky/asiasecwest-2018-chakra-vulnerability-and-exploit-bypass-all-system-mitigation) Chakra vulnerability and exploit bypass all system mitigation
+- [**82**星][12m] [Py] [erforschr/bruteforce-http-auth](https://github.com/erforschr/bruteforce-http-auth) Bruteforce HTTP Authentication
+- [**82**星][4y] [elephantos/elephant](https://github.com/elephantos/elephant) 操作系统真象还原
+- [**82**星][4y] [C] [eklitzke/ptrace-call-userspace](https://github.com/eklitzke/ptrace-call-userspace) Example of how to use the ptrace(2) system call to call a userspace method.
+- [**82**星][11m] [Py] [ecx86/tcpbin](https://github.com/ecx86/tcpbin) Very crude and poorly written HTTP(s) and SMTP bin
+- [**82**星][7y] [Ruby] [dirtyfilthy/metassh](https://github.com/dirtyfilthy/metassh) ssh session type for metasploit
+- [**82**星][2y] [Py] [crackmes/crackmes](https://github.com/crackmes/crackmes) Open and censorship resistant crackmes repository
+- [**82**星][6d] [Java] [col-e/jremapper](https://github.com/col-e/jremapper) Remapping tool for compiled java programs.
+- [**82**星][1y] [ckjbug/kali-linux-learning](https://github.com/ckjbug/kali-linux-learning)
+- [**82**星][8m] [Py] [ciscodevnet/virlutils](https://github.com/ciscodevnet/virlutils)
+- [**82**星][6y] [Py] [chrisjohnriley/random_code](https://github.com/chrisjohnriley/random_code) Random Code, POC Scripts and other things (Your Mileage May Vary)
+- [**82**星][5y] [C] [chokepoint/crypthook](https://github.com/chokepoint/crypthook) TCP/UDP symmetric encryption tunnel wrapper
+- [**82**星][2y] [Java] [calaylin/bda](https://github.com/calaylin/bda) Programmer De-anonymization from Binary Executables
+- [**82**星][6m] [Py] [brutemap-dev/brutemap](https://github.com/brutemap-dev/brutemap) Let's find someone's account
+- [**82**星][3y] [C#] [basic4/widucky](https://github.com/basic4/widucky) WiFi Enabled USB Rubber Ducky
+- [**82**星][1y] [C#] [baibaomen/baibaomen.httphijacker](https://github.com/baibaomen/baibaomen.httphijacker) 一个通过网络包嗅探攻击HTTP协议,从而对其它电脑上用户的网站登录会话进行劫持的演示程序。教程参见链接:
+- [**82**星][1y] [JS] [avian2/noscript](https://github.com/avian2/noscript) A Firefox extension for whitelist driven safe JavaScript execution.
+- [**82**星][4m] [Py] [audreyr/binaryornot](https://github.com/audreyr/binaryornot) Ultra-lightweight pure Python package to check if a file is binary or text.
+- [**82**星][5m] [Ruby] [argos83/ritm](https://github.com/argos83/ritm) Ruby In The Middle (HTTP/HTTPS interception proxy)
+- [**82**星][2y] [Py] [anssi-fr/tabi](https://github.com/anssi-fr/tabi) BGP Hijack Detection
+- [**82**星][1y] [java] [anbai-inc/cobaltstrike_hanization](https://github.com/anbai-inc/cobaltstrike_hanization) CobaltStrike 2.5中文汉化版
+- [**82**星][8d] [Go] [alphasoc/nfr](https://github.com/alphasoc/nfr) A lightweight tool to score network traffic and flag anomalies
+- [**82**星][4y] [C] [abdsec/cve-2016-0801](https://github.com/abdsec/cve-2016-0801)
+- [**82**星][10m] [Java] [7ym0n/security](https://github.com/7ym0n/security) Happy Hacker
+- [**82**星][8d] [PHP] [10up/restricted-site-access](https://github.com/10up/restricted-site-access) Limit access to visitors who are logged in or allowed by IP addresses. Includes many options for handling blocked visitors.
+- [**82**星][5m] [Py] [0xffff0800/muddyc3v1.0.1-](https://github.com/0xffff0800/muddyc3v1.0.1-) This is the MuddyWater APT C3 v1.0.1 Source
+- [**82**星][1m] [C] [0xcpu/winaltsyscallhandler](https://github.com/0xcpu/winaltsyscallhandler) Some research on AltSystemCallHandlers functionality in Windows 10 20H1 18999
+- [**81**星][2y] [JS] [chxj1992/shadowsocks-manager-docker](https://github.com/chxj1992/shadowsocks-manager-docker) 这是一个基于 shadowsocks-manager webui 插件开发的shadowsocks账号售卖网站的Docker镜像
+- [**81**星][4m] [C] [sensepost/wpa_sycophant](https://github.com/sensepost/wpa_sycophant) Evil client portion of EAP relay attack
+- [**81**星][1y] [Java] [googlecreativelab/tunnelvision](https://github.com/googlecreativelab/tunnelvision) Distort your surroundings through a collection of transformative filters
+- [**81**星][3y] [Shell] [infoslack/docker-dvwa](https://github.com/infoslack/docker-dvwa) Docker image for DVWA(Damn Vulnerable Web Application)
+- [**81**星][7m] [ObjC] [hikariobfuscator/hanabi](https://github.com/hikariobfuscator/hanabi) Apple Clang Loader
+- [**81**星][11d] [Go] [asche910/flynet](https://github.com/asche910/flynet) A powerful TCP/UDP tool, which support socks5 proxy by tcp and udp, http proxy and NAT traversal. This tool can help you bypass gfw easily
+- [**81**星][2y] [Shell] [offxec/pavelow](https://github.com/OffXec/PAVELOW) PAVELOW Exploit Toolbox is a BASH script that corresponds with your KALI distro to better help your vulnerability hunting and exploiting proccess with a few other goodies added to aid your fight.
+- [**81**星][3m] [Java] [nats-io/stan.java](https://github.com/nats-io/stan.java) NATS Streaming Java Client
+- [**81**星][4y] [Py] [android-dtf/dtf](https://github.com/android-dtf/dtf) Android Device Testing Framework ("dtf")
+- [**81**星][1y] [Py] [ctfhacker/ctf-writeups](https://github.com/ctfhacker/ctf-writeups)
+- [**81**星][4y] [Py] [zcutlip/exploit-poc](https://github.com/zcutlip/exploit-poc) Proof-of-Concept code for exploits
+- [**81**星][2y] [Py] [xyzz/rop-rpc](https://github.com/xyzz/rop-rpc)
+- [**81**星][3y] [xoreaxeaxeax/vimmmex](https://github.com/xoreaxeaxeax/vimmmex) The vim execution engine
+- [**81**星][3y] [HTML] [vah13/avdetection](https://github.com/vah13/avdetection) A simple way for detection the remote user's antivirus
+- [**81**星][1y] [Py] [undeadsec/idisagree](https://github.com/undeadsec/idisagree) Control remote computers using discord bot and python 3.
+- [**81**星][4y] [C] [tyilo/asm_repl](https://github.com/tyilo/asm_repl) A REPL for assembly
+- [**81**星][6y] [CSS] [talater/chrome-is-listening](https://github.com/talater/chrome-is-listening) Chrome Speech Recognition exploit demo
+- [**81**星][7y] [C] [strobejb/winspy](https://github.com/strobejb/winspy) WinSpy++
+- [**81**星][8y] [spiderlabs/msfrpc](https://github.com/spiderlabs/msfrpc) Perl/Python modules for interfacing with Metasploit MSGRPC
+- [**81**星][9m] [C#] [skelsec/pypykatz_agent_dn](https://github.com/skelsec/pypykatz_agent_dn) Pypykatz agent implemented in .NET
+- [**81**星][1y] [Py] [silascutler/malpipe](https://github.com/silascutler/malpipe) Malware/IOC ingestion and processing engine
+- [**81**星][2y] [Ruby] [siberas/watobo](https://github.com/siberas/watobo) watobo:自动化 web app 安全测试
+- [**81**星][4y] [Py] [shengqi158/svn_git_scanner](https://github.com/shengqi158/svn_git_scanner) 用于扫描git,svn泄露
+- [**81**星][4m] [JS] [securestate/king-phisher-templates](https://github.com/securestate/king-phisher-templates) Templates for the King Phisher open source phishing campaign toolkit.
+- [**81**星][10m] [sderosiaux/guidelines-to-create-a-strong-website](https://github.com/sderosiaux/guidelines-to-create-a-strong-website) A list of all things to consider when making a website or webapp of quality.
+- [**81**星][5m] [Py] [scwuaptx/lazyfragmentationheap](https://github.com/scwuaptx/lazyfragmentationheap) WCTF 2019 challenge
+- [**81**星][2m] [Shell] [rhaidiz/dribble](https://github.com/rhaidiz/dribble) A small project for stealing Wi-Fi passwords via browser's cache poisoning
+- [**81**星][3y] [Py] [ratty3697/hackspy-trojan-exploit](https://github.com/ratty3697/hackspy-trojan-exploit) This tool creates almost undetectabe trojan virus to exploit windows machine.
+- [**81**星][3y] [JS] [rapid7/jsobfu](https://github.com/rapid7/jsobfu) Obfuscate JavaScript (beyond repair) with Ruby
+- [**81**星][1y] [Py] [r3dxpl0it/apache-superset-remote-code-execution-poc-cve-2018-8021](https://github.com/r3dxpl0it/apache-superset-remote-code-execution-poc-cve-2018-8021) CVE-2018-8021 Proof-Of-Concept and Exploit
+- [**81**星][1y] [Py] [prezi/reddalert](https://github.com/prezi/reddalert) AWS risky security change detector based on EDDA.
+- [**81**星][19d] [ObjC] [poomsmart/idaobjctypes](https://github.com/poomsmart/idaobjctypes) A collection of types & functions definitions useful for Objective-C binaries analysis.
+- [**81**星][5y] [C] [nukem9/virtualdbghide](https://github.com/nukem9/virtualdbghide) Windows kernel mode driver to prevent detection of debuggers.
+- [**81**星][7m] [C] [nowsecure/dirtycow](https://github.com/nowsecure/dirtycow) radare2 IO plugin for Linux and Android. Modifies files owned by other users via dirtycow Copy-On-Write cache vulnerability
+- [**81**星][4m] [TS] [nowsecure/airspy](https://github.com/nowsecure/airspy) AirSpy - Frida-based tool for exploring and tracking the evolution of Apple's AirDrop protocol implementation on i/macOS, from the server's perspective. Released during BH USA 2019 Training
+- [**81**星][4m] [Py] [nccgroup/requests-racer](https://github.com/nccgroup/requests-racer) Small Python library that makes it easy to exploit race conditions in web apps with Requests.
+- [**81**星][8m] [Py] [nccgroup/argumentinjectionhammer](https://github.com/nccgroup/argumentinjectionhammer) A Burp Extension designed to identify argument injection vulnerabilities.
+- [**81**星][1m] [PHP] [nao-sec/ektotal](https://github.com/nao-sec/ektotal) 分析Drive-by Download攻击的集成工具
+- [**81**星][2y] [Go] [mtojek/aws-lambda-go-proxy](https://github.com/mtojek/aws-lambda-go-proxy)
+- [**81**星][2m] [Py] [mattcurrie/mgbdis](https://github.com/mattcurrie/mgbdis) Game Boy ROM disassembler with RGBDS compatible output
+- [**81**星][2y] [matt-knight/research](https://github.com/matt-knight/research) Matt's security publications and related materials
+- [**81**星][3y] [Py] [lukasikic/hacoder.py](https://github.com/lukasikic/hacoder.py) FUD Backdoor Generator / Remote Administration Tool
+- [**81**星][11m] [Java] [lufeirider/project](https://github.com/lufeirider/project)
+- [**81**星][7m] [Py] [leoid/matchandreplace](https://github.com/leoid/matchandreplace) Match and Replace script used to automatically generate JSON option file to BurpSuite
+- [**81**星][7m] [MATLAB] [ktekeli/audio-steganography-algorithms](https://github.com/ktekeli/audio-steganography-algorithms) A Library of Audio Steganography & Watermarking Algorithms
+- [**81**星][6d] [TeX] [kramse/security-courses](https://github.com/kramse/security-courses) various courses, presentation etc.
+- [**81**星][3d] [PS] [jborean93/packer-windoze](https://github.com/jborean93/packer-windoze) Packer templates to create Windows vagrant box images
+- [**81**星][1m] [Py] [jas502n/cve-2019-3396](https://github.com/jas502n/cve-2019-3396) Confluence 未授权 RCE (CVE-2019-3396) 漏洞
+- [**81**星][2y] [C] [hvqzao/foolavc](https://github.com/hvqzao/foolavc) foolav successor - loads DLL, executable or shellcode into memory and runs it effectively bypassing AV
+- [**81**星][3m] [Py] [huntergregal/png-idat-payload-generator](https://github.com/huntergregal/png-idat-payload-generator) Generate a PNG with a payload embedded in the IDAT chunk (Based off of previous concepts and code -- credit in README)
+- [**81**星][1m] [HTML] [freedom-wy/js-reverse](https://github.com/freedom-wy/js-reverse) JS逆向研究
+- [**81**星][9m] [Py] [fox-it/mkyara](https://github.com/fox-it/mkyara) Generating YARA rules based on binary code
+- [**81**星][2m] [Py] [fgsect/scat](https://github.com/fgsect/scat) 通过USB解析Qualcomm和Samsung基带的诊断消息,并生成包含蜂窝控制平面消息的GSMTAP数据包流
+- [**81**星][3m] [Shell] [fademind/hosts.extras](https://github.com/fademind/hosts.extras) Extra rules for
+- [**81**星][3y] [Py] [evilsocket/coffee](https://github.com/evilsocket/coffee) Smarter Coffee terminal client.
+- [**81**星][1y] [Py] [endgameinc/youarespecial](https://github.com/endgameinc/youarespecial)
+- [**81**星][2m] [PS] [ecstatic-nobel/posint](https://github.com/ecstatic-nobel/posint) Gather Open-Source Intelligence using PowerShell.
+- [**81**星][2y] [Lua] [duoergun0729/4book](https://github.com/duoergun0729/4book) 《企业安全建设入门:基于开源软件打造企业网络安全》
+- [**81**星][3y] [C] [derrekr/android_security](https://github.com/derrekr/android_security) Public Android Vulnerability Information (CVE PoCs etc)
+- [**81**星][4y] [Roff] [ddos-defense/bohatei](https://github.com/ddos-defense/bohatei) Bohatei is a first of its kind platform that enables flexible and elastic DDoS defense using SDN and NFV.
+- [**81**星][4y] [C#] [david-risney/csp-fiddler-extension](https://github.com/david-risney/csp-fiddler-extension) Content Security Policy rule collector extension for Fiddler
+- [**81**星][3y] [Py] [coffeehb/ocift](https://github.com/coffeehb/ocift) 一个半自动化命令注入漏洞Fuzz工具(One Semi-automation command injection vulnerability Fuzz tool)
+- [**81**星][6y] [C] [chokepoint/beleth](https://github.com/chokepoint/beleth) Multi-threaded SSH Password Auditor
+- [**81**星][7d] [JS] [chichou/wiggle](https://github.com/chichou/wiggle) The concepting self hosted executable binary search engine
+- [**81**星][1y] [HTML] [bruceye777/cronmon](https://github.com/bruceye777/cronmon) 定时任务执行状态监控
+- [**81**星][3m] [blockchainlabsnz/awesome-solidity](https://github.com/blockchainlabsnz/awesome-solidity) A curated list of awesome Solidity resources
+- [**81**星][1y] [asuri-team/pwn-sandbox](https://github.com/asuri-team/pwn-sandbox) A sandbox to protect your pwn challenges being pwned in CTF AWD.
+- [**81**星][11m] [Scala] [arguslab/argus-saf](https://github.com/arguslab/argus-saf) Argus static analysis framework
+- [**81**星][7m] [C] [andreybazhan/symstore](https://github.com/andreybazhan/symstore) The history of Windows Internals via symbols.
+- [**81**星][14d] [Py] [abarker/pdfcropmargins](https://github.com/abarker/pdfcropmargins) pdfCropMargins -- a program to crop the margins of PDF files
+- [**80**星][10m] [C] [mr-un1k0d3r/maliciousdllgenerator](https://github.com/mr-un1k0d3r/maliciousdllgenerator) DLL Generator for side loading attack
+- [**80**星][1y] [JS] [toyodadoubi/ssrstatus](https://github.com/toyodadoubi/ssrstatus) Shadowsocks/ShadowsocksR 账号在线监控
+- [**80**星][7m] [JS] [thekingofduck/logontracer](https://github.com/thekingofduck/logontracer) Windows系统安全登录日志分析工具logonTracer汉化修正版
+- [**80**星][7m] [PHP] [shadowsocks/shadow-shop](https://github.com/shadowsocks/shadow-shop) Building highly customizable e-commerce websites selling shadowsocks services, using Wordpress and WooCommerce
+- [**80**星][2d] [PHP] [automattic/vip-coding-standards](https://github.com/automattic/vip-coding-standards) PHP_CodeSniffer ruleset to enforce WordPress.com VIP and VIP Go coding standards
+- [**80**星][6d] [Rust] [warner/magic-wormhole.rs](https://github.com/warner/magic-wormhole.rs) NOT FUNCTIONAL YET. Slowly porting magic-wormhole to Rust. See wiki for game plan.
+- [**80**星][3y] [bastilleresearch/keysniffer](https://github.com/bastilleresearch/keysniffer) KeySniffer device discovery tools and public advisories
+- [**80**星][11m] [Go] [ouqiang/mars](https://github.com/ouqiang/mars) HTTP(S)代理, 用于抓包调试
+- [**80**星][6d] [C] [trailofbits/mishegos](https://github.com/trailofbits/mishegos) A differential fuzzer for x86 decoders
+- [**80**星][2y] [JS] [vmikhav/antipacman](https://github.com/vmikhav/AntiPacMan) HTML5 Pac-Man game with gesture recognition
+- [**80**星][4y] [Py] [helpsystems/wiwo](https://github.com/helpsystems/wiwo) wiwo is a distributed 802.11 monitoring and injecting system that was designed to be simple and scalable, in which all workers (nodes) can be managed by a Python framework.
+- [**80**星][2y] [Py] [zhkl0228/androidattacher](https://github.com/zhkl0228/androidattacher) IDA debugging plugin for android armv7 so
+- [**80**星][3y] [Py] [z00nx/reversemap](https://github.com/z00nx/reversemap) Analyse SQL injection attempts in web server logs
+- [**80**星][29d] [JS] [yosuke-furukawa/httpstat](https://github.com/yosuke-furukawa/httpstat) httpstat node implementation
+- [**80**星][3y] [C++] [wpo-foundation/win-shaper](https://github.com/wpo-foundation/win-shaper) Windows traffic-shaping packet filter
+- [**80**星][6m] [Rust] [trailofbits/molasses](https://github.com/trailofbits/molasses) A Rust implementation of the Message Layer Security group messaging protocol
+- [**80**星][1y] [Go] [tleyden/keynuker](https://github.com/tleyden/keynuker)
+- [**80**星][3m] [C++] [thewhiteh4t/flashsploit](https://github.com/thewhiteh4t/flashsploit) Exploitation Framework for ATtiny85 Based HID Attacks
+- [**80**星][4m] [Py] [theevilbit/kex](https://github.com/theevilbit/kex) python kernel exploit library
+- [**80**星][3m] [Py] [takahiroharuyama/ida_haru](https://github.com/takahiroharuyama/ida_haru) 多工具
+ - [bindiff](https://github.com/takahiroharuyama/ida_haru/blob/master/bindiff/README.org) 使用BinDiff对多个二进制文件进行对比,可多达100个
+ - [eset_crackme](https://github.com/takahiroharuyama/ida_haru/blob/master/eset_crackme/README.org) ESET CrackMe driver VM loader/processor
+ - [fn_fuzzy](https://github.com/takahiroharuyama/ida_haru/blob/master/fn_fuzzy/README.org) 快速二进制文件对比
+ - [stackstring_static](https://github.com/takahiroharuyama/ida_haru/blob/master/stackstring_static/README.org) 静态恢复栈上的字符串
+- [**80**星][2m] [C] [stef/libsphinx](https://github.com/stef/libsphinx) libsphinx: 用于密码管理的库
+- [**80**星][5m] [ObjC] [smilezxlee/zxhookdetection](https://github.com/smilezxlee/zxhookdetection) 【iOS应用安全】hook及越狱的基本防护与检测
+- [**80**星][2y] [Jupyter Notebook] [sebdraven/hack_lu_2017](https://github.com/sebdraven/hack_lu_2017) Python and Machine Learning Workshop at Hack.lu 2017
+- [**80**星][2y] [Py] [se55i0n/portscanner](https://github.com/se55i0n/portscanner) 目标tcp端口快速扫描、banner识别、cdn检测
+- [**80**星][3m] [sbousseaden/panache_sysmon](https://github.com/sbousseaden/panache_sysmon) A Sysmon Config for APTs Techniques Detection
+- [**80**星][2m] [Py] [sashs/filebytes](https://github.com/sashs/filebytes) Library to read and edit files in the following formats: Executable and Linking Format (ELF), Portable Executable (PE), MachO and OAT (Android Runtime)
+- [**80**星][2y] [Py] [rsc-dev/pbd](https://github.com/rsc-dev/pbd) Pbd is a Python module to disassemble serialized protocol buffers descriptors (
+- [**80**星][4y] [C] [riscure/rhme-2015](https://github.com/riscure/rhme-2015) RHme+ 2015 challenge
+- [**80**星][3y] [C++] [radiowar/firegoose](https://github.com/radiowar/firegoose) 中国烧鹅 FireGoose Just like USB Rubber Ducky
+- [**80**星][1y] [Py] [pyn3rd/cve-2018-2893](https://github.com/pyn3rd/cve-2018-2893) CVE-2018-2893-PoC
+- [**80**星][1y] [Py] [ptresearch/mmdetect](https://github.com/ptresearch/mmdetect) Intel ME Manufacturing Mode Detection Tools
+- [**80**星][3y] [Py] [programa-stic/security-advisories](https://github.com/programa-stic/security-advisories) A database of published security advisories reported by the Programa STIC Team at Fundación Sadosky
+- [**80**星][3m] [CSS] [pielco11/doge](https://github.com/pielco11/doge) Darknet Osint Graph Explorer
+- [**80**星][2y] [C] [oranav/i9300_emmc_toolbox](https://github.com/oranav/i9300_emmc_toolbox) Samsung Galaxy S3 GT-I9300 eMMC toolbox
+- [**80**星][4m] [Shell] [nullarray/netset](https://github.com/nullarray/netset) Operational Security utility and automator.
+- [**80**星][3m] [Py] [nlitsme/pyidbutil](https://github.com/nlitsme/pyidbutil) 读取IDB数据库
+- [**80**星][2y] [PHP] [nixawk/fuzzdb](https://github.com/nixawk/fuzzdb) Web Fuzzing Discovery and Attack Pattern Database
+- [**80**星][10m] [Go] [mkishere/sshsyrup](https://github.com/mkishere/sshsyrup) A low-to-medium interaction SSH Honeypot with features to capture terminal activity and upload to asciinema.org
+- [**80**星][3m] [Py] [menkrep1337/xsscon](https://github.com/menkrep1337/xsscon) Simple XSS Scanner tool
+- [**80**星][5m] [Py] [manulqwerty/evil-winrar-gen](https://github.com/manulqwerty/evil-winrar-gen) Generator of malicious Ace files for WinRAR < 5.70 beta 1
+- [**80**星][1y] [Go] [lzjluzijie/websocks](https://github.com/lzjluzijie/websocks) A secure proxy based on WebSocket. 一个基于 WebSocket 的代理工具
+- [**80**星][3y] [C] [lflare/picoctf_2017_writeup](https://github.com/lflare/picoctf_2017_writeup) PicoCTF 2017 Writeup
+- [**80**星][2y] [C++] [legitbs/quals-2017](https://github.com/legitbs/quals-2017)
+- [**80**星][1y] [Py] [lcatro/cve-2017-7269-echo-poc](https://github.com/lcatro/cve-2017-7269-echo-poc) CVE-2017-7269 回显PoC ,用于远程漏洞检测..
+- [**80**星][2m] [Go] [koenrh/s3enum](https://github.com/koenrh/s3enum) Fast Amazon S3 bucket enumeration tool for pentesters.
+- [**80**星][2y] [C] [klsfct/getshell](https://github.com/klsfct/getshell) 各大平台提权工具
+- [**80**星][12m] [Py] [keybase/python-triplesec](https://github.com/keybase/python-triplesec) A Python port of the triplesec library.
+- [**80**星][3y] [Py] [januzellij/hopperscripts](https://github.com/januzellij/hopperscripts) Collection of scripts I use in the Hopper disassembler
+- [**80**星][4y] [idapython/bin](https://github.com/idapython/bin) IDAPython binaries
+- [**80**星][2m] [JS] [garethflowers/tor-browser-portable](https://github.com/garethflowers/tor-browser-portable) Portable version of the Tor Browser, for Windows
+- [**80**星][4y] [C++] [fastvpseestiou/fastnetmon](https://github.com/fastvpseestiou/fastnetmon) This is old freezed version! Please use
+- [**80**星][4y] [fabiobaroni/awesome-chinese-infosec-websites](https://github.com/fabiobaroni/awesome-chinese-infosec-websites) A curated list of Chinese websites and personal blogs about ethical hacking and pentesting
+- [**80**星][3y] [C] [evil-e/sdb-explorer](https://github.com/evil-e/sdb-explorer) Tool to view and create Microsoft shim database files (SDB).
+- [**80**星][3m] [Py] [escapingbug/ancypwn](https://github.com/escapingbug/ancypwn) Script to setup pwn environment for CTF with Docker
+- [**80**星][3y] [Py] [davidkorczynski/repeconstruct](https://github.com/davidkorczynski/repeconstruct) 自动脱壳并重建二进制文件
+- [**80**星][2y] [Py] [david942j/defcon-2017-tools](https://github.com/david942j/defcon-2017-tools) DEFCON CTF 2017 Stuff of Shit by HITCON
+- [**80**星][2m] [C] [cyberdefenseinstitute/cdir](https://github.com/cyberdefenseinstitute/cdir) CDIR (Cyber Defense Institute Incident Response) Collector - live collection tool based on oss tool/library
+- [**80**星][3y] [C++] [cbayet/poolsprayer](https://github.com/cbayet/poolsprayer) Simple library to spray the Windows Kernel Pool
+- [**80**星][1y] [Py] [brandonasuncion/reverse-engineering-bluetooth-protocols](https://github.com/brandonasuncion/reverse-engineering-bluetooth-protocols) Intercepting Bluetooth device communication and simulating packet responses of an iPhone from a Raspberry Pi 3
+- [**80**星][10m] [JS] [bkth/attacking-edge-through-the-javascript-compiler](https://github.com/bkth/attacking-edge-through-the-javascript-compiler) Attacking-Edge-Through-the-JavaScript-Compiler
+- [**80**星][1y] [Py] [ax330d/functions-plus](https://github.com/ax330d/functions-plus) 解析函数名称,按命名空间分组,将分组结果以树的形式展示
+- [**80**星][2y] [Go] [asciimoo/filtron](https://github.com/asciimoo/filtron) filtron:反向HTTP代码
+- [**80**星][3y] [Py] [alyakhtar/katastrophe](https://github.com/alyakhtar/katastrophe) Command Line Tool to download torrents
+- [**80**星][1y] [C#] [advancedhacker101/c-sharp-r.a.t-server](https://github.com/advancedhacker101/c-sharp-r.a.t-server) This is a remote administration tool built with c#
+- [**80**星][2y] [Shell] [adi1090x/hackapk](https://github.com/adi1090x/hackapk) An Advanced Tool For Complete Apk-Modding In Termux ...
+- [**79**星][3y] [Go] [ring04h/s5.go](https://github.com/ring04h/s5.go) Socks5 proxy server by golang
+- [**79**星][1y] [Shell] [iaik/ios-analysis](https://github.com/iaik/ios-analysis) Automated Binary Analysis on iOS
+- [**79**星][5y] [Py] [bishopfox/anti-anti-automation](https://github.com/bishopfox/anti-anti-automation) Anti-Anti-Automation Framework
+- [**79**星][3y] [Py] [lanjelot/albatar](https://github.com/lanjelot/albatar) Albatar is a SQLi exploitation framework in Python
+- [**79**星][1m] [Py] [momika233/clamav_0day_exploit](https://github.com/momika233/clamav_0day_exploit) ClamAV_0Day_exploit
+- [**79**星][2m] [Rust] [mozilla/authenticator-rs](https://github.com/mozilla/authenticator-rs) Rust library to interact with Security Keys, used by Firefox
+- [**79**星][2y] [C] [yifanlu/uvloader](https://github.com/yifanlu/uvloader) Userland Vita Loader for loading unsigned executables on your Vita
+- [**79**星][3y] [yeyintminthuhtut/awesome-study-resources-for-kernel-hacking](https://github.com/yeyintminthuhtut/awesome-study-resources-for-kernel-hacking) Kernel Hacking study materials collection
+- [**79**星][3y] [Py] [xyntax/bingc](https://github.com/xyntax/bingc) 基于Bing搜索引擎的C段/旁站查询,多线程,支持API
+- [**79**星][3y] [PS] [winscripting/uac-bypass](https://github.com/winscripting/uac-bypass)
+- [**79**星][2y] [Py] [viralmaniar/in-spectre-meltdown](https://github.com/viralmaniar/in-spectre-meltdown) This tool allows to check speculative execution side-channel attacks that affect many modern processors and operating systems designs. CVE-2017-5754 (Meltdown) and CVE-2017-5715 (Spectre) allows unprivileged processes to steal secrets from privileged processes. These attacks present 3 different ways of attacking data protection measures on CPUs …
+- [**79**星][3y] [C++] [torps/torps](https://github.com/torps/torps) The Tor Path Simulator
+- [**79**星][3m] [Go] [tillson/git-hound](https://github.com/tillson/git-hound) GitHound pinpoints exposed API keys on GitHub using pattern matching, commit history searching, and a unique result scoring system. A batch-catching, pattern-matching, patch-attacking secret snatcher.
+- [**79**星][1y] [PS] [thom-s/docx-embeddedhtml-injection](https://github.com/thom-s/docx-embeddedhtml-injection) Word 2016 vulnerability allows injecting HTML/JS code into a docx file's embeddedHTML="" tags.
+- [**79**星][4m] [Assembly] [thecodeartist/elf-parser](https://github.com/thecodeartist/elf-parser) Identifying/Extracting various sections of an ELF file
+- [**79**星][5y] [C++] [tandasat/findpg](https://github.com/tandasat/findpg) Windbg extension to find PatchGuard pages
+- [**79**星][9m] [Go] [subfinder/goaltdns](https://github.com/subfinder/goaltdns) A permutation generation tool written in golang
+- [**79**星][3y] [C] [smealum/udsploit](https://github.com/smealum/udsploit) UDS exploit + kernel hooks for 11.3
+- [**79**星][3y] [Py] [sjhilt/gaspot](https://github.com/sjhilt/gaspot) GasPot Released at Blackhat 2015
+- [**79**星][1y] [Py] [shendo/websnort](https://github.com/shendo/websnort) Web service for scanning pcaps with snort
+- [**79**星][22d] [Go] [schollz/find3-cli-scanner](https://github.com/schollz/find3-cli-scanner) The command-line scanner that supports Bluetooth and WiFi
+- [**79**星][1y] [Py] [sawzeeyy/sanitiz3r](https://github.com/sawzeeyy/sanitiz3r) A python script that filters, checks the validity, generates clickable link(s) of subdomain(s), and reports their status
+- [**79**星][10m] [Py] [purduepaml/trojannn](https://github.com/purduepaml/trojannn) Trojan Attack on Neural Network
+- [**79**星][6m] [PS] [powershell/psdscresources](https://github.com/powershell/psdscresources)
+- [**79**星][7m] [PHP] [ostark/upper](https://github.com/ostark/upper) Integrates Edge Caches like Fastly, KeyCDN, Cloudflare and Varnish with Craft.
+- [**79**星][4m] [Batchfile] [op7ic/edr-testing-script](https://github.com/op7ic/edr-testing-script) Test the accuracy of Endpoint Detection and Response (EDR) software with simple script which executes various ATT&CK/LOLBAS/Invoke-CradleCrafter/Invoke-DOSfuscation payloads
+- [**79**星][11m] [Makefile] [onioniot/openwrt-packages](https://github.com/onioniot/openwrt-packages) Onion Packages Feed for OpenWRT
+- [**79**星][7m] [nusr/awesome-macos-command-line-zh](https://github.com/nusr/awesome-macos-command-line-zh) 用你的 macOS 终端搞事情。(Use your macOS terminal shell to do awesome things. )
+- [**79**星][3y] [C] [nsacyber/netfil](https://github.com/nsacyber/netfil) A kernel network manager with monitoring and limiting capabilities for macOS. #nsacyber
+- [**79**星][1y] [Dockerfile] [nitr4x/reverse-me](https://github.com/nitr4x/reverse-me) This repository contains a docker container dedicated to reverse engineering
+- [**79**星][2y] [C++] [nezza/sdqanalyzer](https://github.com/nezza/sdqanalyzer) A Saleae analyzer plugin for the SDQ (Apple Lightning, MagSafe, Battery) protocol.
+- [**79**星][2y] [Go] [netxfly/xsec-dns-proxy](https://github.com/netxfly/xsec-dns-proxy) xsec-dns-proxy:DNS代理服务器,可以将DNS请求代理到后端的DNS服务器中,在代理的过程中会将dns log写入到数据库中
+- [**79**星][2y] [nanqinlang-mogic/v2ray](https://github.com/nanqinlang-mogic/v2ray) template with websocket+tls+nginx of v2ray
+- [**79**星][10m] [Shell] [naltun/eyes.sh](https://github.com/naltun/eyes.sh) Let's you perform domain/IP information gathering... in BASH! Wasn't it esr who said "With enough eyeballs, all your IP info are belong to us?"
+- [**79**星][3y] [Py] [mozilla/http-observatory-cli](https://github.com/mozilla/http-observatory-cli) The command line tool for the HTTP Observatory
+- [**79**星][4y] [mi3security/su-a-cyder](https://github.com/mi3security/su-a-cyder) Home-Brewed iOS Malware PoC Generator (BlackHat ASIA 2016)
+- [**79**星][5d] [Py] [lightswitch05/hosts](https://github.com/lightswitch05/hosts) Hostfile blocklist for ads and tracking, updated regularly
+- [**79**星][10m] [Py] [laconicwolf/nmap-scan-to-csv](https://github.com/laconicwolf/nmap-scan-to-csv) Converts Nmap XML output to csv file, and other useful functions
+- [**79**星][2y] [PS] [kromerm/adflab](https://github.com/kromerm/adflab) Azure Data Factory hands-on lab, self-paced. Learn how to lift & shift SSIS packages to the Cloud with ADF. Build new ETL pipelines in ADF, transform data at scale, load Azure Data Warehouse data marts. Also walks through operationalizing ADF pipelines with scheduling and monitoring modules.
+- [**79**星][8m] [Java] [kingsabri/godofwar](https://github.com/kingsabri/godofwar) GodOfWar - Malicious Java WAR builder with built-in payloads
+- [**79**星][6y] [Py] [julienpalard/ashttp](https://github.com/julienpalard/ashttp) Shell command, that expose any other command as http. To expose top as http, try : ashttp -p8080 top ; then try http://localhost/8080 and hit F5 to refresh your top :)
+- [**79**星][2y] [Py] [imiyoo2010/teye_scanner_for_book](https://github.com/imiyoo2010/teye_scanner_for_book) 《白帽子讲Web扫描》书籍参考代码
+- [**79**星][2m] [ignitetechnologies/vulnhub-ctf-writeups](https://github.com/ignitetechnologies/vulnhub-ctf-writeups) This cheasheet is aimed at the CTF Players and Beginners to help them sort Vulnhub Labs. This list contains all the writeups available on hackingarticles.
+- [**79**星][2y] [iamhdt/ecommerce-website-security-checklist](https://github.com/iamhdt/ecommerce-website-security-checklist) List of considerations for commerce site auditing and security teams. This is summary of action points and areas that need to be built into the Techinical Specific Document, or will be checked in the Security testing phases.
+- [**79**星][7m] [Java] [i2p/i2p.i2p-bote](https://github.com/i2p/i2p.i2p-bote) I2P-Bote is a serverless, encrypted e-mail application.
+- [**79**星][3y] [Objective-C++] [hexploitable/memscan](https://github.com/hexploitable/memscan) A memory scanning tool which uses mach_vm* to either dump memory or look for a specific sequence of bytes.
+- [**79**星][1y] [Ruby] [hahwul/metasploit-autopwn](https://github.com/hahwul/metasploit-autopwn) db_autopwn plugin of metasploit
+- [**79**星][2y] [Py] [hackndo/krack-poc](https://github.com/hackndo/krack-poc) Krack POC
+- [**79**星][7m] [Py] [guedou/r2m2](https://github.com/guedou/r2m2) radare2 + miasm2 = ♥
+- [**79**星][2m] [Py] [google/giftstick](https://github.com/google/giftstick) 1-Click push forensics evidence to the cloud
+- [**79**星][3y] [glinares/hephaestus](https://github.com/glinares/hephaestus) Open Source Office Malware Generation & Polymorphic Engine for Red Teams and QA testing
+- [**79**星][7d] [Py] [githubmaidou/tools](https://github.com/githubmaidou/tools) Python渗透漏洞工具
+- [**79**星][4y] [C] [gdbinit/mach_race](https://github.com/gdbinit/mach_race) Exploit code for CVE-2016-1757
+- [**79**星][4m] [JS] [frida/frida-presentations](https://github.com/frida/frida-presentations) Public presentations given on Frida at conferences
+- [**79**星][1y] [f0rgetting/presentations](https://github.com/f0rgetting/presentations)
+- [**79**星][12m] [C#] [djhohnstein/.net-profiler-dll-hijack](https://github.com/djhohnstein/.net-profiler-dll-hijack) Implementation of the .NET Profiler DLL hijack in C#
+- [**79**星][2y] [Go] [derekchiang/mesos-bitcoin-miner](https://github.com/derekchiang/mesos-bitcoin-miner) A bitcoin mining framework on Mesos
+- [**79**星][4m] [JS] [de1ta-team/de1ctf2019](https://github.com/de1ta-team/de1ctf2019) De1CTF2019
+- [**79**星][2y] [Shell] [daradib/sidedoor](https://github.com/daradib/sidedoor) SSH connection daemon for Debian/Raspbian/Ubuntu/etc
+- [**79**星][3y] [Py] [dancezarp/tbdex](https://github.com/dancezarp/tbdex)
+- [**79**星][1y] [Py] [damian89/xssfinder](https://github.com/damian89/xssfinder) Toolset for detecting reflected xss in websites
+- [**79**星][6y] [Py] [corelan/dnshjmon](https://github.com/corelan/dnshjmon) dnshjmon is a free tool to monitor public DNS records and report hijacks
+- [**79**星][4y] [PHP] [coderpirata/xpl-search](https://github.com/coderpirata/xpl-search) Search exploits in multiple exploit databases!
+- [**79**星][1y] [C#] [certsocietegenerale/notifysecurity](https://github.com/certsocietegenerale/notifysecurity) Outlook add-in companion to report suspicious mail easily
+- [**79**星][1y] [Py] [cdhowie/netflix-no-ipv6-dns-proxy](https://github.com/cdhowie/netflix-no-ipv6-dns-proxy) Fix for Netflix blocking various IPv6 tunnels by returning no results for AAAA queries of Netflix domains
+- [**79**星][2y] [Py] [brianwrf/hackrequests](https://github.com/brianwrf/hackrequests) It is a dedicated requests lib that supports cookie, headers, get/post, etc. And it also supports rendering the response (e.g. Javascript, CSS, etc.) of GET requests by using PhantomJs enginee.
+- [**79**星][2y] [Py] [billyv4/id-entify](https://github.com/billyv4/id-entify) Search for information related to a domain: Emails - IP addresses - Domains - Information on WEB technology - Type of Firewall - NS and MX records - Nmap to IP addresses and Domains.
+- [**79**星][9m] [axiomzen/eth-random](https://github.com/axiomzen/eth-random) commit-reveal RNG method in Ethereum
+- [**79**星][2y] [C] [axi0mx/ios-kexec-utils](https://github.com/axi0mx/ios-kexec-utils) boot LLB/iBoot/iBSS/iBEC image from a jailbroken iOS kernel
+- [**79**星][3y] [Py] [anfractuosity/ultrasonicnetworking](https://github.com/anfractuosity/ultrasonicnetworking) Ultrasonic networking - Transmitting TCP/IP via Ultrasound
+- [**79**星][1y] [C] [adafruit/adafruit_blesniffer_python](https://github.com/adafruit/adafruit_blesniffer_python) Python API for Adafruit's Bluefruit LE Sniffer
+- [**79**星][6m] [Py] [abaykan/53r3n17y](https://github.com/abaykan/53r3n17y) Python based script for Information Gathering.
+- [**78**星][3m] [zhoushuai0207/ladder](https://github.com/zhoushuai0207/ladder) 梯子整理,科学上网
+- [**78**星][8m] [Py] [reswitched/loaders](https://github.com/reswitched/loaders) IDA Loaders for Switch binaries(NSO / NRO)
+- [**78**星][2m] [uknowsec/sharpdecryptpwd](https://github.com/uknowsec/sharpdecryptpwd) 对密码已保存在 Windwos 系统上的部分程序进行解析,包括:Navicat,TeamViewer,FileZilla,WinSCP,Xmangager系列产品(Xshell,Xftp)。
+- [**78**星][10m] [JS] [webbreacher/yoga](https://github.com/webbreacher/yoga) Your OSINT Graphical Analyzer
+- [**78**星][30d] [Py] [mr-un1k0d3r/redteamscripts](https://github.com/mr-un1k0d3r/redteamscripts) Repo with various Red Team scripts
+- [**78**星][9m] [Py] [elliiot/ghidra_darknight](https://github.com/elliiot/ghidra_darknight) DarkNight theme for Ghidra
+- [**78**星][2y] [Go] [oftn-oswg/zerodrop](https://github.com/oftn-oswg/zerodrop) A stealth URL toolkit optimized for bypassing censorship filters and/or dropping malware
+- [**78**星][5y] [Py] [cylance/smbtrap](https://github.com/cylance/SMBTrap) Tools developed to test the Redirect to SMB issue
+- [**78**星][5y] [C++] [helpsystems/agafi](https://github.com/helpsystems/Agafi) A gadget finder and a ROP-Chainer tool for x86 platforms
+- [**78**星][11m] [Py] [siberas/sjet](https://github.com/siberas/sjet) siberas JMX exploitation toolkit
+- [**78**星][21d] [Shell] [radareorg/radare2-pm](https://github.com/radareorg/radare2-pm) Package Manager for Radare2
+- [**78**星][3y] [C#] [virb3/dneditor](https://github.com/virb3/dneditor) A .NET assembly editor based on dnlib
+- [**78**星][8d] [Py] [unkn0wnh4ckr/hackers-tool-kit](https://github.com/unkn0wnh4ckr/hackers-tool-kit) Its a framework filled with alot of options and hacking tools you use directly in the script from brute forcing to payload making im still adding more stuff i now have another tool out called htkl-lite its hackers-tool-kit just not as big and messy to see updates check on my instagram @tuf_unkn0wn or if there are any problems message me on insta…
+- [**78**星][2y] [Py] [trolldbois/python-haystack](https://github.com/trolldbois/python-haystack) Process heap analysis framework - Windows/Linux - record type inference and forensics
+- [**78**星][6y] [Py] [t-s-a/smbspider](https://github.com/t-s-a/smbspider) SMB Spider is a lightweight python utility for searching SMB/CIFS/Samba file shares. While performing a penetration test, the need to search hundreds of hosts for sensitive password files resulted in this project.
+- [**78**星][3y] [C] [stevemk14ebr/unihook](https://github.com/stevemk14ebr/unihook) Intercept arbitrary functions at run-time, without knowing their typedefs
+- [**78**星][2y] [Py] [softsec-kaist/imf](https://github.com/softsec-kaist/imf) Inferred Model-based Fuzzer
+- [**78**星][4y] [C++] [rwhitcroft/dnschan](https://github.com/rwhitcroft/dnschan) A remote access trojan over DNS
+- [**78**星][3m] [C++] [rjhansen/nsrllookup](https://github.com/rjhansen/nsrllookup) Checks with NSRL RDS servers looking for for hash matches
+- [**78**星][1m] [Py] [regebro/pyroma](https://github.com/regebro/pyroma) Rate your Python packages package friendliness
+- [**78**星][4y] [C#] [realalexandergeorgiev/tempracer](https://github.com/realalexandergeorgiev/tempracer) A Windows priviledge escalation tool (abusing race conditions)
+- [**78**星][4y] [Py] [qtek/qradio](https://github.com/qtek/qradio) QRadio ~ Best Threat Intelligence Radio ~ Tune In!
+- [**78**星][3y] [Py] [pythonone/ms17-010](https://github.com/pythonone/ms17-010) MS17-010 exploits, payloads, and scanners
+- [**78**星][3m] [JS] [pownjs/pown-whoarethey](https://github.com/pownjs/pown-whoarethey)
+- [**78**星][2y] [Py] [pinkflawd/r2graphity](https://github.com/pinkflawd/r2graphity) Creating function call graphs based on radare2 framwork, plot fancy graphs and extract behavior indicators
+- [**78**星][2m] [Py] [pfalcon/scratchablock](https://github.com/pfalcon/scratchablock) Yet another crippled decompiler project
+- [**78**星][2y] [Py] [peterpt/fuzzbunch](https://github.com/peterpt/fuzzbunch) Shadow Brokers NSA fuzzbunch tool leak . With windows auto instalation script
+- [**78**星][1m] [Py] [palkeo/pakala](https://github.com/palkeo/pakala) Offensive vulnerability scanner for ethereum, and symbolic execution tool for the Ethereum Virtual Machine
+- [**78**星][6y] [C] [oblique/wificurse](https://github.com/oblique/wificurse) WiFi Jamming tool
+- [**78**星][2m] [Py] [miyagaw61/exgdb](https://github.com/miyagaw61/exgdb) Extension for GDB
+- [**78**星][6m] [Go] [mattevans/pwned-passwords](https://github.com/mattevans/pwned-passwords)
+- [**78**星][1y] [Py] [markbaggett/domain_stats](https://github.com/markbaggett/domain_stats)
+- [**78**星][3y] [HTML] [malqr/malqr.github.io](https://github.com/malqr/malqr.github.io) MalQR is a collection of malicious QR Codes and Barcodes you can use to test the security of your scanners.
+- [**78**星][6y] [Zeek] [liamrandall/bromalware-exercise](https://github.com/liamrandall/bromalware-exercise)
+- [**78**星][3m] [C] [kelvinhack/devicemon](https://github.com/kelvinhack/devicemon) VT-based PCI device monitor (SPI)
+- [**78**星][4y] [C] [kala13x/scap](https://github.com/kala13x/scap) Network Sniffer (Scan and Capture Incoming Packets)
+- [**78**星][1m] [Java] [jenkinsci/dependency-check-plugin](https://github.com/jenkinsci/dependency-check-plugin) Jenkins plugin for OWASP Dependency-Check. Inspects project components for known vulnerabilities (e.g. CVEs).
+- [**78**星][3y] [C++] [jeffbryner/nbdserver](https://github.com/jeffbryner/nbdserver) Network Block Device Server for windows with a DFIR/forensic focus.
+- [**78**星][3y] [JS] [jacobreynolds/ssrfdetector](https://github.com/jacobreynolds/ssrfdetector) Server-side request forgery detector
+- [**78**星][5y] [Py] [idanr1986/cuckoo](https://github.com/idanr1986/cuckoo) A Cuckoo Sandbox Extension for Android
+- [**78**星][3y] [Py] [hatriot/shellme](https://github.com/hatriot/shellme) simple shellcode generator
+- [**78**星][8m] [Py] [gelim/nmap-erpscan](https://github.com/gelim/nmap-erpscan) Nmap custom probes for better detecting SAP services
+- [**78**星][6y] [Go] [gabrielg/cve-2014-1266-poc](https://github.com/gabrielg/cve-2014-1266-poc) Apple OS X/iOS SSL flaw demonstration
+- [**78**星][7y] [C#] [g0tmi1k/vulninjector](https://github.com/g0tmi1k/vulninjector) Generates a Windows 'vulnerable' machine from ISOs
+- [**78**星][1y] [Ruby] [frohoff/ciphr](https://github.com/frohoff/ciphr) CLI crypto swiss-army knife for performing and composing encoding, decoding, encryption, decryption, hashing, and other various cryptographic operations on streams of data from the command line; mostly intended for ad hoc, infosec-related uses.
+- [**78**星][24d] [C] [etnaviv/etna_viv](https://github.com/etnaviv/etna_viv) Etnaviv is a project to build an FOSS driver for the Vivante GCxxx series of embedded GPUs - Tools and reverse engineering repository
+- [**78**星][3y] [C] [ernacktob/esp8266_wifi_raw](https://github.com/ernacktob/esp8266_wifi_raw) ESP8266 wifi packet injection and receiving experiment
+- [**78**星][2y] [C] [elfmaster/saruman](https://github.com/elfmaster/saruman) ELF anti-forensics exec, for injecting full dynamic executables into process image (With thread injection)
+- [**78**星][2y] [Shell] [demonsec666/secist_script](https://github.com/demonsec666/secist_script)
+- [**78**星][3y] [Go] [cyphar/mkonion](https://github.com/cyphar/mkonion) A simple way to create a Tor onion service for existing Docker containers.
+- [**78**星][10m] [Py] [cymmetria/honeycomb](https://github.com/cymmetria/honeycomb) An extensible honeypot framework
+- [**78**星][4m] [Py] [clirimemini/keye](https://github.com/clirimemini/keye) Keye is a reconnaissance tool that was written in Python with SQLite3 integrated. After adding a single URL, or a list of URLs, it will make a request to these URLs and try to detect changes based on their response's body length.
+- [**78**星][6y] [Py] [cea-sec/torpylle](https://github.com/cea-sec/torpylle) A Python / Scapy implementation of the OR (TOR) protocol.
+- [**78**星][6y] [Shell] [breadtk/onion_pi](https://github.com/breadtk/onion_pi) Make a Raspberry Pi into a Anonymizing Tor Proxy!
+- [**77**星][2m] [Shell] [acris/shadowsocks-asuswrt-merlin](https://github.com/acris/shadowsocks-asuswrt-merlin) Shadowsock for Asuswrt-Merlin New Gen
+- [**77**星][10m] [JS] [qious/ss-panel-server](https://github.com/qious/ss-panel-server) 基于企业微信的科学上网分享站点 - 后端
+- [**77**星][11m] [Java] [thelinuxchoice/droidtracker](https://github.com/thelinuxchoice/droidtracker) Script to generate an Android App to track location in real time
+- [**77**星][5m] [C] [virustotal/c-vtapi](https://github.com/virustotal/c-vtapi) Official implementation of the VirusTotal API in C programming language
+- [**77**星][16d] [C] [hasherezade/module_overloading](https://github.com/hasherezade/module_overloading) A more stealthy variant of "DLL hollowing"
+- [**77**星][2m] [comwrg/fuck-gfw](https://github.com/comwrg/fuck-gfw) 记录各个包管理器使用代理的方法, 因为GFW已经浪费了已经数不清的时间, FUCK GFW
+- [**77**星][1m] [C++] [foxhex0ne/hyperviper](https://github.com/foxhex0ne/hyperviper) Toolkit for Hyper-V security research
+- [**77**星][2m] [C] [iqiyi/qnsm](https://github.com/iqiyi/qnsm) QNSM is network security monitoring framework based on DPDK.
+- [**77**星][1y] [C] [contionmig/kernelmode-bypass](https://github.com/ContionMig/KernelMode-Bypass) This is a source to a bypass i made for some games, for now this should work f or VAC, BE and EAC. The only downside is that you will need to find a exploit to load the driver
+- [**77**星][3y] [C++] [fsecurelabs/cve-2016-7255](https://github.com/FSecureLABS/CVE-2016-7255) An exploit for CVE-2016-7255 on Windows 7/8/8.1/10(pre-anniversary) 64 bit
+- [**77**星][3m] [Batchfile] [phoenix1747/fake-sandbox](https://github.com/Phoenix1747/fake-sandbox)
+- [**77**星][5y] [C++] [zer0mem/minihypervisorproject](https://github.com/zer0mem/minihypervisorproject) IntelVT-X nice feature -> tool
+- [**77**星][2y] [Py] [wofeiwo/webshell-find-tools](https://github.com/wofeiwo/webshell-find-tools) 分析web访问日志以及web目录文件属性,用于根据查找可疑后门文件的相关脚本。
+- [**77**星][14d] [C++] [versprite/research](https://github.com/versprite/research) VerSprite Security Research
+- [**77**星][1m] [HTML] [vergl4s/pentesting-dump](https://github.com/vergl4s/pentesting-dump) Scripts, tools, and proof-of-concepts to aid in a penetration test.
+- [**77**星][2y] [PHP] [tuhinshubhra/shellstack](https://github.com/tuhinshubhra/shellstack) A PHP Based Tool That Helps You To Manage All Your Backdoored Websites Efficiently.
+- [**77**星][4y] [Py] [trolldbois/sslsnoop](https://github.com/trolldbois/sslsnoop) Live SSH/SSL/TLS decryption - extraction of secret keys from live process memory
+- [**77**星][3y] [C] [tinysec/iathook](https://github.com/tinysec/iathook) windows kernelmode and usermode IAT hook
+- [**77**星][4m] [Py] [thundergunexpress/badministration](https://github.com/thundergunexpress/badministration)
+- [**77**星][2y] [Py] [tezukanice/office8570](https://github.com/tezukanice/office8570) CVE20178570
+- [**77**星][27d] [Go] [tarampampam/mikrotik-hosts-parser](https://github.com/tarampampam/mikrotik-hosts-parser)
+- [**77**星][3y] [HTML] [szimeus/evalyzer](https://github.com/szimeus/evalyzer) Using WinDBG to tap into JavaScript and help with deobfuscation and browser exploit detection
+- [**77**星][4y] [PHP] [subtlescope/bash-ransomware](https://github.com/subtlescope/bash-ransomware) Simple Bash Rasomware for use in Cyber Exercises
+- [**77**星][2y] [Py] [stasinopoulos/jaidam](https://github.com/stasinopoulos/jaidam) Jaidam is an open source penetration testing tool that would take as input a list of domain names, scan them, determine if wordpress or joomla platform was used and finally check them automatically, for web vulnerabilities using two well‐known open source tools, WPScan and Joomscan.
+- [**77**星][3y] [PHP] [secwiki/webshell-2](https://github.com/secwiki/webshell-2) Webshell
+- [**77**星][3y] [Py] [securitystreak/security-scripts](https://github.com/securitystreak/security-scripts) A collection of public offensive and defensive security related scripts for InfoSec students.
+- [**77**星][1y] [Java] [schollz/find3-android-scanner](https://github.com/schollz/find3-android-scanner) An android app that scans Bluetooth and WiFi for FIND3
+- [**77**星][4m] [PHP] [rizer0/blind-bash](https://github.com/rizer0/blind-bash) Obfuscate your Bash Code
+- [**77**星][3d] [Ruby] [r00t-3xp10it/resource_files](https://github.com/r00t-3xp10it/resource_files) mosquito - Automating reconnaissance and brute force attacks
+- [**77**星][2m] [Py] [pingxcpost/f-nascan-plus](https://github.com/pingxcpost/f-nascan-plus) F-NAScan-PLUS 安服资产搜集
+- [**77**星][1y] [C#] [parsingteam/redlogin](https://github.com/parsingteam/redlogin) Red Login: SSH Brute-force Tools
+- [**77**星][1y] [Py] [paolomonti42/salt](https://github.com/paolomonti42/salt) SALT - SLUB ALlocator Tracer for the Linux kernel
+- [**77**星][6y] [Py] [owasp/ninja-pingu](https://github.com/owasp/ninja-pingu) a free open-source high performance network scanner tool for large scale analyses
+- [**77**星][7d] [C] [open-power/skiboot](https://github.com/open-power/skiboot) OPAL boot and runtime firmware for POWER
+- [**77**星][4y] [CoffeeScript] [olegberman/mitm-omegle](https://github.com/olegberman/mitm-omegle) Watch strangers talk on Omegle (man in the middle attack)
+- [**77**星][4m] [C] [oleavr/ios-inject-custom](https://github.com/oleavr/ios-inject-custom) (iOS) 使用Frida注入自定义Payload
+- [**77**星][10m] [Py] [nullarray/mimir](https://github.com/nullarray/mimir) OSINT Threat Intel Interface - CLI for HoneyDB
+- [**77**星][2y] [nhoya/pastebinmarkdownxss](https://github.com/nhoya/pastebinmarkdownxss) XSS in pastebin.com and reddit.com via unsanitized markdown output
+- [**77**星][4m] [Go] [netxfly/x-proxy](https://github.com/netxfly/x-proxy) honeypot proxy
+- [**77**星][1y] [JS] [mtjailed/jailbreakme](https://github.com/mtjailed/jailbreakme) A webbased jailbreak solution unifying existing jailbreak me solutions and new ones.
+- [**77**星][4y] [Py] [mncoppola/linux-kernel-ctf](https://github.com/mncoppola/linux-kernel-ctf) Helper scripts for hosting a Linux kernel exploitation CTF challenge
+- [**77**星][2m] [JS] [mitchmoser/sputnik](https://github.com/mitchmoser/sputnik) Open Source Intelligence Browser Extension
+- [**77**星][18d] [Go] [likexian/whois-parser-go](https://github.com/likexian/whois-parser-go) Go module for domain whois info parse
+- [**77**星][9m] [Py] [k8scop/k8s-security-dashboard](https://github.com/k8scop/k8s-security-dashboard) A security monitoring solution for Kubernetes
+- [**77**星][20d] [Jupyter Notebook] [k-vitali/malware-misc-re](https://github.com/k-vitali/malware-misc-re) Miscellaneous Malware RE
+- [**77**星][3y] [C] [jndok/pegasusx](https://github.com/jndok/pegasusx) OS X 10.11.6 LPE PoC for CVE-2016-4655 / CVE-2016-4656
+- [**77**星][3m] [HTML] [jenyraval/phishing-simulation](https://github.com/jenyraval/phishing-simulation) Phishing Simulation mainly aims to increase phishing awareness by providing an intuitive tutorial and customized assessment
+- [**77**星][2d] [C] [horsicq/nfdx64dbg](https://github.com/horsicq/nfdx64dbg) Plugin for x64dbg Linker/Compiler/Tool detector.
+- [**77**星][1y] [homjxi0e/apt](https://github.com/homjxi0e/apt) APT || Execution || Launch || APTs || ( Authors harr0ey, bohops )
+- [**77**星][5m] [ObjC] [google/gscxscanner](https://github.com/google/gscxscanner) iOS Accessibility Scanner
+- [**77**星][11m] [Py] [fs0c131y/cve-2018-20555](https://github.com/fs0c131y/cve-2018-20555) Social Network Tabs Wordpress Plugin Vulnerability - CVE-2018-20555
+- [**77**星][6d] [Shell] [f5networks/f5-aws-cloudformation](https://github.com/f5networks/f5-aws-cloudformation) CloudFormation Templates for quickly deploying BIG-IP services in Amazon Web Services EC2
+- [**77**星][4y] [HTML] [f47h3r/hackingteam_exploits](https://github.com/f47h3r/hackingteam_exploits) Initial Collection of HackingTeam Exploits
+- [**77**星][7m] [Py] [enigmabridge/certbot-external-auth](https://github.com/enigmabridge/certbot-external-auth) Certbot external DNS, HTTP, TLSSNI domain validation plugin with JSON output and scriptable hooks, with Dehydrated compatibility
+- [**77**星][1y] [Py] [ekultek/xanxss](https://github.com/ekultek/xanxss) A simple XSS finding tool
+- [**77**星][2y] [Py] [dtag-dev-sec/explo](https://github.com/dtag-dev-sec/explo) Human and machine readable web vulnerability testing format
+- [**77**星][2y] [dictionaryhouse/dirpath_list](https://github.com/dictionaryhouse/dirpath_list) Dirpath_List 目录扫描字典
+- [**77**星][2m] [Py] [danieluhricek/lisa](https://github.com/danieluhricek/lisa) Sandbox for automated Linux malware analysis.
+- [**77**星][2y] [C++] [daizhongyin/securitysdk](https://github.com/daizhongyin/securitysdk) Android安全SDK,提供基础的安全防护能力,如安全webview、IPC安全通信、应用和插件安全更新、威胁情报搜集等等
+- [**77**星][4d] [d3sre/use_case_applicability](https://github.com/d3sre/use_case_applicability) Security Monitoring Resolution Categories
+- [**77**星][6m] [Py] [cybereason/linux_plumber](https://github.com/cybereason/linux_plumber) A python implementation of a grep friendly ftrace wrapper
+- [**77**星][2m] [C#] [csmacnz/coveralls.net](https://github.com/csmacnz/coveralls.net) Coveralls uploader for .Net Code coverage
+- [**77**星][7m] [PS] [cottinghamd/hardeningauditor](https://github.com/cottinghamd/hardeningauditor) Scripts for comparing Microsoft Windows compliance with the ASD 1709 & Office 2016 Hardening Guides
+- [**77**星][2y] [ObjC] [cocoahuke/ioskextdump](https://github.com/cocoahuke/ioskextdump) Dump Kext information from iOS kernel cache. Applicable to the kernel which dump from memory
+- [**77**星][4m] [Shell] [chunkingz/linsetmv1-2](https://github.com/chunkingz/linsetmv1-2) Linset is a WPA/WPA2 phishing tool (evil twin)
+- [**77**星][2y] [PHP] [bugsafe/wereport](https://github.com/bugsafe/wereport) WeReport
+- [**77**星][2y] [Py] [blacknbunny/shellcodetoassembly](https://github.com/blacknbunny/shellcodetoassembly)
+- [**77**星][5y] [C] [bishopfox/firecat](https://github.com/bishopfox/firecat) Firecat is a penetration testing tool that allows you to punch reverse TCP tunnels out of a compromised network.
+- [**77**星][1y] [Py] [asherags/amzsear](https://github.com/asherags/amzsear) The unofficial Amazon search CLI & Python API
+- [**77**星][21d] [C] [apriorit/mhook](https://github.com/apriorit/mhook) A Windows API hooking library
+- [**77**星][3m] [JS] [anmavrid/smart-contracts](https://github.com/anmavrid/smart-contracts)
+- [**77**星][3y] [Shell] [ank1036official/git_pentesting_toolkit](https://github.com/ank1036official/git_pentesting_toolkit) Exploit pack for pentesters and ethical hackers.
+- [**77**星][4m] [C] [angelkitty/computer-virus](https://github.com/angelkitty/computer-virus)
+- [**77**星][3d] [HTML] [android-x86/android-x86.github.io](https://github.com/android-x86/android-x86.github.io) Official Website for Android-x86 Project
+- [**76**星][9m] [C] [iaik/cache_template_attacks](https://github.com/iaik/cache_template_attacks) This repository contains several tools to perform Cache Template Attacks
+- [**76**星][2y] [Py] [galkan/tools](https://github.com/galkan/tools) Tools that are related to pentest and network security
+- [**76**星][2y] [Go] [mushorg/go-dpi](https://github.com/mushorg/go-dpi) Application layer protocol identification of traffic flows
+- [**76**星][1m] [akenofu/oscp-cheat-sheet](https://github.com/akenofu/oscp-cheat-sheet) This is my OSCP cheat sheet made by combining a lot of different resources online with a little bit of tweaking. I used this cheat sheet during my exam (Fri, 13 Sep 2019) and during the labs. I can proudly say it helped me pass so I hope it can help you as well ! Good Luck and Try Harder
+- [**76**星][8y] [Py] [ts-way/gerix-wifi-cracker](https://github.com/ts-way/gerix-wifi-cracker) A graphical user interface for aircrack-ng and pyrit.
+- [**76**星][10m] [Py] [ztgrace/red_team_telemetry](https://github.com/ztgrace/red_team_telemetry)
+- [**76**星][5m] [JS] [zencashofficial/arizen](https://github.com/zencashofficial/arizen) Arizen is the API wallet for Horizen with encrypted and only locally stored files!
+- [**76**星][3y] [C#] [zcgonvh/cve-2017-7269-tool](https://github.com/zcgonvh/cve-2017-7269-tool) CVE-2017-7269 to webshell or shellcode loader
+- [**76**星][5y] [C++] [yveaux/nrf24_sniffer](https://github.com/yveaux/nrf24_sniffer) Sniffer for Nordic NRF24L01+ modules with MySensors support
+- [**76**星][4m] [Go] [yashpl/mongobuster](https://github.com/yashpl/mongobuster) Hunt Open MongoDB instances
+- [**76**星][2y] [Ruby] [xc0d3rz/metasploit-apk-embed-payload](https://github.com/xc0d3rz/metasploit-apk-embed-payload) Embed a Metasploit Payload in an Original .Apk File
+- [**76**星][5y] [PHP] [v0s/plus22](https://github.com/v0s/plus22) Tool to analyze 64-bit binaries with 32-bit Hex-Rays Decompiler
+- [**76**星][2y] [Py] [threatexpress/tinyshell](https://github.com/threatexpress/tinyshell)
+- [**76**星][8m] [Py] [the-c0d3r/admin-finder](https://github.com/the-c0d3r/admin-finder) Blazing fast admin panel finder with multi-threading
+- [**76**星][2y] [Py] [superponible/volatility-plugins](https://github.com/superponible/volatility-plugins) Plugins I've written for Volatility
+- [**76**星][7m] [Py] [sup3ria/atlantr](https://github.com/sup3ria/atlantr) Fastes Email:Pass Checker on the planet.
+- [**76**星][16d] [CSS] [sniperoj/jeopardy-dockerfiles](https://github.com/sniperoj/jeopardy-dockerfiles)
+- [**76**星][1y] [Py] [sh4rk0-666/spykeyboard](https://github.com/sh4rk0-666/spykeyboard) keylogger which sends us the data to our gmail.
+- [**76**星][10m] [sevagas/windowsdefender_asr_bypass-offensivecon2019](https://github.com/sevagas/windowsdefender_asr_bypass-offensivecon2019) Public documents related to my talk "Bypass Windows Exploit Guard ASR" at Offensive Con 2019.
+- [**76**星][5y] [ActionScript] [sethsec/crossdomain-exploitation-framework](https://github.com/sethsec/crossdomain-exploitation-framework) Everything you need to exploit overly permissive crossdomain.xml files
+- [**76**星][22d] [Go] [root4loot/rescope](https://github.com/root4loot/rescope) Rescope is a tool geared towards pentesters and bugbounty researchers, that aims to make life easier when defining scopes for Burp Suite and OWASP ZAP.
+- [**76**星][8m] [JS] [retirejs/grunt-retire](https://github.com/retirejs/grunt-retire) Grunt plugin for retire.
+- [**76**星][1y] [Shell] [re4son/wsl-kali-x](https://github.com/re4son/wsl-kali-x) Tweaks to run Kali Linux desktop panels and gui apps on Windows 10
+- [**76**星][7m] [PHP] [ph-7/obfuscator-class](https://github.com/ph-7/obfuscator-class)
+- [**76**星][4y] [oguzhantopgul/vezir-project](https://github.com/oguzhantopgul/vezir-project) Yet Another Linux Virtual Machine for Mobile Application Pentesting and Mobile Malware Analysis
+- [**76**星][2y] [Py] [nickstadb/serialbrute](https://github.com/nickstadb/serialbrute) Java serialization brute force attack tool.
+- [**76**星][3y] [nezteb/i_hate_wordpress](https://github.com/nezteb/i_hate_wordpress) I used to hate Wordpress until I had created this repo. This is me documenting how to make WordPress not suck like everyone thinks it does.
+- [**76**星][6y] [Shell] [neohapsis/suddensix](https://github.com/neohapsis/suddensix) IPV6 MITM attack tool
+- [**76**星][3y] [Py] [moosd/needle](https://github.com/moosd/needle) Android framework injection made easy
+- [**76**星][6m] [JS] [microsoft/adfswebcustomization](https://github.com/microsoft/adfswebcustomization) A repository of useful Web Customizations for Active Directory Federation Services
+- [**76**星][2y] [Py] [mgeide/poortego](https://github.com/mgeide/poortego) Open-source python project to handle the storage and linking of open-source intelligence (ala Maltego)
+- [**76**星][30d] [Crystal] [maxfierke/fincher](https://github.com/maxfierke/fincher) A steganography tool for text
+- [**76**星][2m] [Py] [leveldown-security/svd-loader-ghidra](https://github.com/leveldown-security/svd-loader-ghidra)
+- [**76**星][4y] [C++] [lcatro/sise_traning_ctf_re](https://github.com/lcatro/sise_traning_ctf_re) SNST Traning RE Project .华软网络安全小组逆向工程训练营,尝试以CTF 的形式来使大家可以动手训练快速提升自己的逆向工程水平.CTF 的训练程序又浅到深,没有使用太复杂的算法,在逆向的过程中遇到的难关都是在分析病毒和破解中遇到的实际情况,注重于实用.训练营还包含有源代码文件,训练程序和思路.希望可以帮助小伙伴们入门逆向工程这个神奇的世界..
+- [**76**星][1y] [Shell] [kolargol/openvpn](https://github.com/kolargol/openvpn) openvpn:Shell 脚本,5分钟建立个人 VPN
+- [**76**星][3y] [Py] [keithjjones/fileintel](https://github.com/keithjjones/fileintel) A modular Python application to pull intelligence about malicious files
+- [**76**星][7y] [ObjC] [jils/flashbackchecker](https://github.com/jils/flashbackchecker) Quick and easy checker for Mac Flashback malware variants
+- [**76**星][15d] [Py] [inquest/python-sandboxapi](https://github.com/inquest/python-sandboxapi) Minimal, consistent Python API for building integrations with malware sandboxes.
+- [**76**星][6m] [Java] [incredibleindishell/exploit-code-by-me](https://github.com/incredibleindishell/exploit-code-by-me) Exploit code developed/reproduced by me
+- [**76**星][4y] [hardhatdigital/rails-security-audit](https://github.com/hardhatdigital/rails-security-audit) A checklist of Rails security audit
+- [**76**星][1y] [C] [gregvish/l1tf-poc](https://github.com/gregvish/l1tf-poc) L1TF (Foreshadow) VM guest to host memory read PoC
+- [**76**星][7d] [C] [greenbone/gvmd](https://github.com/greenbone/gvmd) Greenbone Vulnerability Manager
+- [**76**星][6m] [Py] [githacktools/brutedum](https://github.com/githacktools/brutedum) BruteDum - Brute Force attacks SSH, FTP, Telnet, PostgreSQL, RDP, VNC with Hydra, Medusa and Ncrack
+- [**76**星][4y] [C] [gdbinit/gopher](https://github.com/gdbinit/gopher) A OS X crypto ransomware PoC
+- [**76**星][1m] [Py] [foospidy/web-cve-tests](https://github.com/foospidy/web-cve-tests) A simple framework for sending test payloads for known web CVEs.
+- [**76**星][12m] [foolmitah/cve-2018-14729](https://github.com/foolmitah/cve-2018-14729) Discuz backend getshell
+- [**76**星][4y] [C++] [feross/wiresheep](https://github.com/feross/wiresheep) WireSheep shows you each user on the network and all the HTTP requests they're making in a pretty News Feed, a la Facebook.
+- [**76**星][4y] [PHP] [fakhrizulkifli/defeating-php-gd-imagecreatefromgif](https://github.com/fakhrizulkifli/defeating-php-gd-imagecreatefromgif) Proof-of-concept to exploit the flaw in the PHP-GD built-in function, imagecreatefromgif()
+- [**76**星][5y] [Java] [evilsocket/nikeplus-fuelband-se-reversed](https://github.com/evilsocket/nikeplus-fuelband-se-reversed) A a proof of concept application that uses BLE api and the Nike+ FuelBand SE protocol to communicate with Nike BLE devices.
+- [**76**星][3y] [Java] [ethackdotorg/orwall](https://github.com/ethackdotorg/orwall) Put your apps behind Orbot, and block all unwanted traffic in one row.
+- [**76**星][4y] [Java] [enovella/jebscripts](https://github.com/enovella/jebscripts) A set of JEB Python/Java scripts for reverse engineering Android obfuscated code
+- [**76**星][4m] [Py] [duo-labs/apple-t2-xpc](https://github.com/duo-labs/apple-t2-xpc) Tools to explore the XPC interface of Apple's T2 chip
+- [**76**星][4y] [PHP] [dunglas/php-torcontrol](https://github.com/dunglas/php-torcontrol) PHP TorControl, a library to control TOR
+- [**76**星][1y] [Go] [drael/gonetstat](https://github.com/drael/gonetstat) Netstat implementation in Go
+- [**76**星][3m] [M4] [dennisyurichev/yurichev.com](https://github.com/dennisyurichev/yurichev.com) my website
+- [**76**星][3y] [C] [decryptoniteteam/decryptonite](https://github.com/decryptoniteteam/decryptonite) Ransomware Detection and Mitigation Software
+- [**76**星][5y] [Py] [dantangfan/ddos](https://github.com/dantangfan/ddos) ddos attact
+- [**76**星][2y] [PHP] [curlyboi/hashtopus](https://github.com/curlyboi/hashtopus) Distributed wrapper around oclHashcat
+- [**76**星][2y] [C] [brl/grlh](https://github.com/brl/grlh)
+- [**76**星][6d] [Go] [binject/binjection](https://github.com/binject/binjection) Injects additional machine instructions into various binary formats.
+- [**76**星][2y] [C] [bazad/x18-leak](https://github.com/bazad/x18-leak) CVE-2018-4185: iOS 11.2-11.2.6 kernel pointer disclosure introduced by Apple's Meltdown mitigation.
+- [**76**星][25d] [Py] [bannsec/autopwn](https://github.com/bannsec/autopwn) Automate repetitive tasks for fuzzing
+- [**76**星][6m] [TS] [auth0-blog/angular-auth0-aside](https://github.com/auth0-blog/angular-auth0-aside) Aside: Angular with Auth0 and an authenticated Node API.
+- [**76**星][2y] [Py] [anssi-fr/bootcode_parser](https://github.com/anssi-fr/bootcode_parser) A boot record parser that identifies known good signatures for MBR, VBR and IPL.
+- [**76**星][1y] [C] [alpha1ab/win2016lpe](https://github.com/alpha1ab/win2016lpe) Windows10 & Windows Server 2016 LPE Exploit (use schedsvc!SchRpcSetSecurity())
+- [**76**星][3m] [C] [ahmadmansoor/advancedscript](https://github.com/ahmadmansoor/advancedscript) Add More Features for x64dbg Script System,with some Functions which will help Plugin Coder
+- [**76**星][1m] [Py] [ab77/black.box](https://github.com/ab77/black.box) Plug-and-Play VPN router and unblocker
+- [**76**星][3y] [Py] [1an0rmus/tekdefense](https://github.com/1an0rmus/tekdefense) Open Development projects for TekDefense
+- [**75**星][3y] [Java] [guardianproject/cacheword](https://github.com/guardianproject/cacheword) a password caching and management service for Android
+- [**75**星][3m] [ignitetechnologies/web-application-cheatsheet](https://github.com/ignitetechnologies/web-application-cheatsheet) This cheatsheet is aimed at the CTF Players and Beginners to help them understand Web Application Vulnerablity with examples.
+- [**75**星][3y] [C++] [x64dbg/xedparse](https://github.com/x64dbg/xedparse) A MASM-like, single-line plaintext assembler
+- [**75**星][5y] [Shell] [shadowsocks/stackscript](https://github.com/shadowsocks/stackscript)
+- [**75**星][1y] [Py] [mame82/duckencoder.py](https://github.com/mame82/duckencoder.py) Python port of infamous duckencoder for RubberDucky
+- [**75**星][5m] [Dockerfile] [leezj9671/secdevices_docker](https://github.com/leezj9671/secdevices_docker) 自行编写的工作中使用到的安全设备Dockerfile
+- [**75**星][3m] [ivbeg/awesome-forensicstools](https://github.com/ivbeg/awesome-forensicstools) Awesome list of digital forensic tools
+- [**75**星][9m] [Py] [daeken/ssrftest](https://github.com/daeken/ssrftest) SSRF testing tool
+- [**75**星][3y] [C] [osirislab/csaw-ctf-2016-quals](https://github.com/osirislab/CSAW-CTF-2016-Quals) Repo for CSAW CTF 2016 Quals challenges
+- [**75**星][6y] [Lua] [jpalanco/nmap-scada](https://github.com/jpalanco/nmap-scada) nse scripts for scada identification
+- [**75**星][10m] [Rust] [easyctf/librectf](https://github.com/easyctf/librectf) CTF in a box. Minimal setup required. (not production-ready yet)
+- [**75**星][2y] [Assembly] [zznop/pop-nedry](https://github.com/zznop/pop-nedry) x86-64 Windows shellcode that recreates the Jurassic Park hacking scene (Ah, ah, ah... you didn't' say the magic word!)
+- [**75**星][2m] [Py] [zenix-blurryface/sneakyexe](https://github.com/zenix-blurryface/sneakyexe) Embedding a "UAC-Bypassing" function into your custom payload
+- [**75**星][3y] [ywolf/f-middlewarescan](https://github.com/ywolf/f-middlewarescan) A vulnerability detection scripts for middleware services
+- [**75**星][1y] [Py] [x0rz/tweetentropy](https://github.com/x0rz/tweetentropy) Twitter as an extra entropy source
+- [**75**星][8m] [Py] [wied03/centos-package-cron](https://github.com/wied03/centos-package-cron) A security update tool for CentOS
+- [**75**星][3y] [Py] [vvalien/win_exp](https://github.com/vvalien/win_exp)
+- [**75**星][3y] [C] [vnik5287/kernel_rop](https://github.com/vnik5287/kernel_rop)
+- [**75**星][3y] [C] [viralsecuritygroup/knoxout](https://github.com/viralsecuritygroup/knoxout) A PoC of KNOXout (CVE-2016-6584) - bypassing Samsung KNOX protections and root Samsung Galaxy S6 Android Device.
+- [**75**星][4y] [PHP] [vidar-team/hctf2015-all-problems](https://github.com/vidar-team/hctf2015-all-problems) hctf2015 all problems and writeups from authors
+- [**75**星][4m] [C++] [velocidex/c-aff4](https://github.com/velocidex/c-aff4) An AFF4 C++ implementation.
+- [**75**星][3y] [Py] [va5c0/steghide-brute-force-tool](https://github.com/va5c0/steghide-brute-force-tool) Execute a brute force attack with Steghide to file with hide information and password established
+- [**75**星][2y] [Java] [unchartedsoftware/aperture-tiles](https://github.com/unchartedsoftware/aperture-tiles) Aperture-Tiles uses familiar web-based map interactions to allow exploration of arbitrary huge data sets.
+- [**75**星][11m] [Shell] [ttffdd/xbadmanners](https://github.com/ttffdd/xbadmanners) Tool for CVE-2018-16323
+- [**75**星][2m] [Batchfile] [tresacton/passwordstealer](https://github.com/tresacton/passwordstealer) USB / CD / DVD autorun password stealer
+- [**75**星][2m] [Py] [tp7309/ttdedroid](https://github.com/tp7309/ttdedroid) 一键反编译工具One key for quickly decompile apk/aar/dex/jar, support by jadx/dex2jar/enjarify/cfr.
+- [**75**星][5y] [C++] [sherifeldeeb/inmet](https://github.com/sherifeldeeb/inmet) A multi-purpose meterpreter executable (inline, many transports, msfpayload)
+- [**75**星][6m] [Py] [shashank-in/travisleaks](https://github.com/shashank-in/travisleaks) A tool to find sensitive keys and passwords in Travis logs
+- [**75**星][10m] [Py] [secrary/ida-scripts](https://github.com/secrary/ida-scripts) 多脚本
+ - [dumpDyn](https://github.com/secrary/ida-scripts/blob/master/dumpDyn/README.md) 保存动态分配并执行的代码的相关信息:注释、名称、断点、函数等,之后此代码在不同基址执行时使保存内容依然可用
+ - [idenLib](https://github.com/secrary/ida-scripts/blob/master/idenLib/README.md) 库函数识别
+ - [IOCTL_decode](https://github.com/secrary/ida-scripts/blob/master/IOCTL_decode.py) Windows驱动的IO控制码
+ - [XORCheck](https://github.com/secrary/ida-scripts/blob/master/XORCheck.py) check xor
+- [**75**星][1m] [C] [scriptingxss/iotgoat](https://github.com/scriptingxss/iotgoat) IoTGoat is a deliberately insecure firmware based on OpenWrt.
+- [**75**星][2y] [Py] [safebreach-labs/spacebin](https://github.com/safebreach-labs/spacebin) Spacebin is a proof-of-concept malware that exfiltrates data (from No Direct Internet Access environments) via triggering AV on the endpoint and then communicating back from the AV's cloud component.
+- [**75**星][5d] [Py] [s2e/docs](https://github.com/s2e/docs) Documentation and Quick Start Guides for the S2E Symbolic Execution Platform
+- [**75**星][2y] [C] [rtlsdrblog/tempestsdr](https://github.com/rtlsdrblog/tempestsdr) Remote video eavesdropping using a software-defined radio platform
+- [**75**星][4y] [Shell] [rossmairm/pentools](https://github.com/rossmairm/pentools) This is a bundle of python and bash penetration testing tools for recon and information gathering.
+- [**75**星][1y] [ObjC] [ret2/p2o_2018](https://github.com/ret2/p2o_2018)
+- [**75**星][5y] [C++] [quangnh89/ollycapstone](https://github.com/quangnh89/ollycapstone) This is a plugin for OllyDbg 1.10 to replace the old disasm engine by Capstone disassembly/disassembler framework.
+- [**75**星][4y] [PS] [pwdrkeg/honeyport](https://github.com/pwdrkeg/honeyport) A powershell script for creating a Windows honeyport.
+- [**75**星][2y] [JS] [polaris64/web_exploit_detector](https://github.com/polaris64/web_exploit_detector) web_exploit_detector:检测 Web hosting 环境中可能的感染、恶意代码和可疑文件。Node.js 应用程序。
+- [**75**星][18d] [C] [ntraiseharderror/antimalware-research](https://github.com/ntraiseharderror/antimalware-research) Research on Anti-malware and other related security solutions
+- [**75**星][18d] [Py] [nightwatchcybersecurity/truegaze](https://github.com/nightwatchcybersecurity/truegaze) Static analysis tool for Android/iOS apps focusing on security issues outside the source code
+- [**75**星][3d] [C] [naworkcaj/bdvl](https://github.com/naworkcaj/bdvl) LD_PRELOAD Linux rootkit (x86 & ARM)
+- [**75**星][9m] [misterch0c/crimeboards](https://github.com/misterch0c/crimeboards) A list of private and public (more or less) blackhat boards
+- [**75**星][6m] [C] [milabs/khook](https://github.com/milabs/khook) Linux Kernel hooking engine (x86)
+- [**75**星][3y] [magoo/incident-response-plan](https://github.com/magoo/incident-response-plan) Boilerplate Incident Response Plan from "Starting Up Security"
+- [**75**星][30d] [Py] [m8r0wn/pymeta](https://github.com/m8r0wn/pymeta) 搜索某域名网站的文件,下载并提取元数据, 例如: 域名、用户名、软件版本号、命名约定等
+- [**75**星][4m] [AutoIt] [jschicht/logfileparser](https://github.com/jschicht/logfileparser) Parser for $LogFile on NTFS
+- [**75**星][1y] [HTML] [johnlatwc/msrc](https://github.com/johnlatwc/msrc) Scripts for interacting with MSRC portal data
+- [**75**星][11m] [JS] [j0nathanj/publications](https://github.com/j0nathanj/publications) Slides, exploits and PoCs :)
+- [**75**星][3y] [Py] [j0bin/pentest-resources](https://github.com/j0bin/pentest-resources)
+- [**75**星][3m] [ivbeg/awesome-forensicstools](https://github.com/ivbeg/awesome-forensicstools) Awesome list of digital forensic tools
+- [**75**星][11m] [Ruby] [iagox86/poracle](https://github.com/iagox86/poracle)
+- [**75**星][12m] [C++] [hzqst/fuckcertverifytimevalidity](https://github.com/hzqst/fuckcertverifytimevalidity) This tiny project prevents the signtool from verifing cert time validity and let you sign your bin with outdated cert without changing system time manually
+- [**75**星][8m] [Py] [huaisha1224/shadowsocks-client](https://github.com/huaisha1224/shadowsocks-client) The ShadowSocks client is a support multiple server port and password
+- [**75**星][1y] [C++] [hrbust86/hookmsrbysvm](https://github.com/hrbust86/hookmsrbysvm) hook msr by amd svm
+- [**75**星][14d] [Py] [highmeh/lure](https://github.com/highmeh/lure) Lure - User Recon Automation for GoPhish
+- [**75**星][6y] [Py] [hiddenillusion/ipinfo](https://github.com/hiddenillusion/ipinfo) Searches various online resources to try and get as much info about an IP/domain as possible.
+- [**75**星][3y] [PS] [harmj0y/misc-powershell](https://github.com/harmj0y/misc-powershell) Misc. PowerShell scripts
+- [**75**星][6m] [Py] [hameda2/zydra](https://github.com/hameda2/zydra)
+- [**75**星][1y] [Py] [hadojae/data](https://github.com/hadojae/data) Credential Phish Analysis and Automation
+- [**75**星][3m] [gouveaheitor/awesome-biohacking](https://github.com/gouveaheitor/awesome-biohacking)
+- [**75**星][17d] [Py] [fopina/kdbxpasswordpwned](https://github.com/fopina/kdbxpasswordpwned) Check KeePass passwords against
+- [**75**星][7y] [JS] [evilpacket/xss.io](https://github.com/evilpacket/xss.io)
+- [**75**星][8m] [edelahozuah/awesome-wifi-security](https://github.com/edelahozuah/awesome-wifi-security) A collection of awesome resources related to 802.11 security, tools and other things
+- [**75**星][4d] [Java] [dschadow/javasecurity](https://github.com/dschadow/javasecurity) Java web and command line applications demonstrating various security topics
+- [**75**星][4y] [Java] [directdefense/superserial](https://github.com/directdefense/superserial) SuperSerial - Burp Java Deserialization Vulnerability Identification
+- [**75**星][5y] [C] [dinotools/sslscan](https://github.com/dinotools/sslscan) SSLScan tests SSL/TLS enabled services to discover supported cipher suites
+- [**75**星][2y] [C] [dadas190/heavens-gate-2.0](https://github.com/dadas190/heavens-gate-2.0) Executes 64bit code from a 32bit process
+- [**75**星][3m] [Py] [coldzer0/ida-for-delphi](https://github.com/coldzer0/ida-for-delphi) 针对Delphi的IDAPython脚本,从 Event Constructor (VCL)中获取所有函数名称
+- [**75**星][26d] [C++] [clrx/clrx-mirror](https://github.com/clrx/clrx-mirror) CLRadeonExtender (GCN assembler, Radeon assembler) mirror
+- [**75**星][2y] [Go] [calidog/certstream-go](https://github.com/calidog/certstream-go) Go library for connecting to CertStream
+- [**75**星][3y] [Py] [antojoseph/diff-droid](https://github.com/antojoseph/diff-droid) 使用 Frida对手机渗透测试的若干脚本
+- [**75**星][4y] [Py] [ahhh/reverse_https_bot](https://github.com/ahhh/reverse_https_bot) A python based https remote access trojan for penetration testing
+- [**74**星][3m] [cisco-talos/snort-faq](https://github.com/cisco-talos/snort-faq) Snort FAQ
+- [**74**星][7y] [Ruby] [pentestgeek/scripts](https://github.com/pentestgeek/scripts) A collection of useful scripts for penetration testers
+- [**74**星][3y] [wtsxdev/android-security-list](https://github.com/wtsxdev/android-security-list) Collection of Android security related resources
+- [**74**星][3y] [HTML] [dxa4481/damn-vulnerable-redis-container](https://github.com/dxa4481/damn-vulnerable-redis-container) An example of obtaining RCE via Redis and CSRF
+- [**74**星][24d] [JS] [andreafioraldi/frida-js-afl-instr](https://github.com/andreafioraldi/frida-js-afl-instr) An example on how to do performant in-memory fuzzing with AFL++ and Frida
+- [**74**星][1m] [Py] [boypt/vmess2json](https://github.com/boypt/vmess2json) Scripts parse vmess:// links into v2ray config json and vice versa.
+- [**74**星][5y] [Py] [ivanlei/airodump-iv](https://github.com/ivanlei/airodump-iv) A python implementation of airodump-ng
+- [**74**星][1m] [Go] [edoverflow/csp](https://github.com/edoverflow/csp) Given a list of hosts, this small utility fetches all whitelisted domains from the hosts' CSPs.
+- [**74**星][5m] [HTML] [ph0en1x-xmu/awesome-ctf-book](https://github.com/Ph0en1x-XMU/Awesome-CTF-Book) Study CTF, study security
+- [**74**星][4m] [Py] [lazorfuzz/python-hacklib](https://github.com/lazorfuzz/python-hacklib) hacklib - pentesting, port scanning, and logging in anywhere with Python
+- [**74**星][2y] [C] [deeptechlabs/meltdown](https://github.com/deeptechlabs/meltdown) Local Exploit for Meltdown
+- [**74**星][2y] [Py] [shmilylty/cheetah-gui](https://github.com/shmilylty/cheetah-gui) Cheetah GUI
+- [**74**星][3y] [C++] [avatarone/avatar-python](https://github.com/avatarone/avatar-python) Dynamic security analysis of embedded systems’ firmwares
+- [**74**星][1y] [Py] [yoda66/androidembedit](https://github.com/yoda66/androidembedit) A quick and dirty python script to embed a Metasploit generated APK file into another APK for fun.
+- [**74**星][8m] [C] [vanhoefm/dragonslayer](https://github.com/vanhoefm/dragonslayer)
+- [**74**星][4y] [Visual Basic .NET] [twi1ight/ad-pentest-script](https://github.com/twi1ight/ad-pentest-script) Active Directory pentest scripts
+- [**74**星][1y] [tianjifou/ios-security-attack-and-prevent](https://github.com/tianjifou/ios-security-attack-and-prevent) iOS安全攻与防,详细的列出了,在iOS开发中,项目会存在的安全漏洞以及解决办法。
+- [**74**星][5y] [Py] [tandasat/winioctldecoder](https://github.com/tandasat/winioctldecoder) IDA插件,将Windows设备IO控制码解码成为DeviceType, FunctionCode, AccessType, MethodType.
+- [**74**星][5m] [Jupyter Notebook] [surajr/url-classification](https://github.com/surajr/url-classification) Machine learning to classify Malicious (Spam)/Benign URL's
+- [**74**星][3y] [Py] [spotify/gcp-firewall-enforcer](https://github.com/spotify/gcp-firewall-enforcer) A toolbox to enforce firewall rules across multiple GCP projects.
+- [**74**星][7m] [PHP] [s9mf/s9mf-php-webshell-bypass](https://github.com/s9mf/s9mf-php-webshell-bypass) 为方便WAF入库的项目 | 分享PHP免杀大马 | 菜是原罪 | 多姿势(假的就一个)
+- [**74**星][3y] [Py] [ropnop/xxetimes](https://github.com/ropnop/xxetimes) An interactive OOB XXE data exfiltration tool
+- [**74**星][1y] [Py] [pielco11/dot](https://github.com/pielco11/dot) Darknet OSINT Transform
+- [**74**星][1m] [Rust] [phayes/sidefuzz](https://github.com/phayes/sidefuzz) Fuzzer to automatically find side-channel (timing) vulnerabilities
+- [**74**星][6d] [Py] [patrowl/patrowlengines](https://github.com/patrowl/patrowlengines) PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform
+- [**74**星][3y] [Java] [panagiotisdrakatos/javaransomware](https://github.com/panagiotisdrakatos/javaransomware) Simple Ransomware Tool in Pure Java
+- [**74**星][8m] [Dockerfile] [owasp/sonarqube](https://github.com/owasp/sonarqube) OWASP SonarQube Project
+- [**74**星][11m] [Visual Basic .NET] [nyan-x-cat/lime-miner](https://github.com/nyan-x-cat/lime-miner) a simple hidden silent XMR miner.
+- [**74**星][3m] [C++] [noddos/noddos](https://github.com/noddos/noddos) noddos:Noddos 客户端,监视家庭或企业网络中的网络流量,识别 IoT 和其他设备,并将特定设备的ACL应用于已识别设备的流量。 其目标是识别并阻止来自已被黑客控制的设备的流氓流量(例如在 DDOS 攻击的流量)
+- [**74**星][3y] [JS] [nmaier/about-addons-memory](https://github.com/nmaier/about-addons-memory) Tiny prototype Firefox extension presenting the memory usage of all active add-ons
+- [**74**星][2y] [JS] [mtjailed/unjailme](https://github.com/mtjailed/unjailme) A sandbox escape based on the proof-of-concept (CVE-2018-4087) by Rani Idan (Zimperium)
+- [**74**星][3m] [PS] [mdavis332/domainpasswordspray](https://github.com/mdavis332/domainpasswordspray) DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. It will automatically generate a userlist from the domain which excludes accounts that are expired, disabled locked out, or within 1 lockout attempt.
+- [**74**星][6y] [Py] [matir/pwnableweb](https://github.com/matir/pwnableweb) PwnableWeb is a suite of web applications for use in information security training.
+- [**74**星][3y] [Go] [matiasinsaurralde/transports](https://github.com/matiasinsaurralde/transports) A HTTP proxy that aims to support different transports.
+- [**74**星][2y] [C] [makefu/dnsmap](https://github.com/makefu/dnsmap) fork of
+- [**74**星][6y] [l3m0n/xss-filter-evasion-cheat-sheet-cn](https://github.com/l3m0n/xss-filter-evasion-cheat-sheet-cn) XSS_Filter_Evasion_Cheat_Sheet 中文版
+- [**74**星][3y] [HTML] [l3m0n/wooyun-wiki](https://github.com/l3m0n/wooyun-wiki) wiki.wooyun.org的部分快照网页
+- [**74**星][2y] [C++] [kasperskylab/forensicstools](https://github.com/kasperskylab/forensicstools) Tools for DFIR
+- [**74**星][4y] [Py] [integrissecurity/carbonator](https://github.com/integrissecurity/carbonator) Integris Security Carbonator - The Burp Suite Pro extension that automates scope, spider & scan from the command line. Carbonator helps automate the vulnerability scanning of web applications. Either 1 or 100 web applications can be scanned by issuing a single command. Carbonator is now available from within Burp Suite Pro through the BApp Store.
+- [**74**星][28d] [grapheneos/platform_manifest](https://github.com/grapheneos/platform_manifest) Repo manifest for the GrapheneOS mobile privacy and security hardening project.
+- [**74**星][2y] [Py] [gento/dionaea](https://github.com/gento/dionaea) dionaea:低交互蜜罐
+- [**74**星][3y] [Py] [ganapati/crawlic](https://github.com/ganapati/crawlic) Web recon tool (find temporary files, parse robots.txt, search some folders, google dorks and search domains hosted on same server)
+- [**74**星][6y] [C++] [gamebooster/dota2-lua-engine](https://github.com/gamebooster/dota2-lua-engine) Lua Scripting Engine for Dota 2
+- [**74**星][2y] [C#] [foxglovesec/hpwn](https://github.com/foxglovesec/hpwn) HP printer security research code
+- [**74**星][11m] [C] [forte-research/untracer-afl](https://github.com/forte-research/untracer-afl) An AFL implementation with UnTracer (our coverage-guided tracer)
+- [**74**星][7m] [Makefile] [florianutz/ubuntu1604-cis](https://github.com/florianutz/ubuntu1604-cis) Ubuntu CIS Hardening Ansible Role
+- [**74**星][2y] [C++] [eyeofra/winconmon](https://github.com/eyeofra/winconmon) Windows Console Monitoring
+- [**74**星][4y] [Py] [einstein-/poodle](https://github.com/einstein-/poodle) A Proof of Concept for the POODLE vulnerability in SSLv3
+- [**74**星][2m] [Shell] [edu4rdshl/tor-router](https://github.com/edu4rdshl/tor-router) A tool that allow you to make TOR your default gateway and send all internet connections under TOR (as transparent proxy) for increase privacy/anonymity without extra unnecessary code.
+- [**74**星][1y] [Py] [dobin/ffw](https://github.com/dobin/ffw) A fuzzing framework for network servers
+- [**74**星][3m] [Lua] [dns-oarc/drool](https://github.com/dns-oarc/drool) DNS Replay Tool
+- [**74**星][5y] [Py] [dmayer/time_trial](https://github.com/dmayer/time_trial) Time Trial - A tool for performing feasibility analyses of timing attacks
+- [**74**星][4y] [Go] [dlion/guesstor](https://github.com/dlion/guesstor) Bruteforces [.onion] domains
+- [**74**星][3m] [Ruby] [devunwired/apktools](https://github.com/devunwired/apktools) Ruby library for reading/parsing APK resource data
+- [**74**星][13d] [Ruby] [david942j/heapinfo](https://github.com/david942j/heapinfo) An interactive memory info for pwning / exploiting
+- [**74**星][6m] [Py] [cve-search/via4cve](https://github.com/cve-search/via4cve) Vulnerability Information Aggregator for CVEs
+- [**74**星][8m] [Go] [coreos/torcx](https://github.com/coreos/torcx) torcx is a boot-time addon manager for immutable systems
+- [**74**星][3y] [Py] [compoterhacker/mehrai](https://github.com/compoterhacker/mehrai) docker based telnet honeypot
+- [**74**星][10d] [C] [certificate-helper/tls-inspector](https://github.com/certificate-helper/tls-inspector) Easily view and inspect X.509 certificates on your iOS device.
+- [**74**星][2y] [Py] [busindre/dumpzilla](https://github.com/busindre/dumpzilla) Extract all forensic interesting information of Firefox, Iceweasel and Seamonkey browsers
+- [**74**星][7m] [Py] [bannsec/stegoveritas](https://github.com/bannsec/stegoveritas) Yet another Stego Tool
+- [**74**星][2y] [Assembly] [azeria-labs/arm-assembly-examples](https://github.com/azeria-labs/arm-assembly-examples) Snippets from ARM assembly tutorials
+- [**74**星][2m] [Py] [anvilventures/lookinsidethebox](https://github.com/anvilventures/lookinsidethebox) Breaks the encryption and obfuscation layers that Dropbox applies to their modified Python interpreter.
+- [**74**星][2y] [HTML] [anquanquantao/pentraining](https://github.com/anquanquantao/pentraining) 一个网络安全基础知识的教程。内容比较杂,好在都是实验视频和工具提供,可以自行动手完成实验。
+- [**74**星][2y] [Batchfile] [aghorler/windows-10-hardening](https://github.com/aghorler/windows-10-hardening) An admittedly frivolous (and infrequently updated) attempt to harden Windows 10.
+- [**74**星][2y] [233boy/chinaip](https://github.com/233boy/chinaip) 中国大陆 IP 列表(已优化)
+- [**74**星][4m] [C++] [0xeb/ida-qscripts](https://github.com/0xeb/ida-qscripts) IDA“最近脚本/执行脚本”的进化版
+- [**74**星][8m] [Go] [0x9ef/golang-uacbypasser](https://github.com/0x9ef/golang-uacbypasser) UAC bypass techniques implemented and written in Go
+- [**73**星][23d] [Py] [nict-csl/exist](https://github.com/nict-csl/exist) EXIST is a web application for aggregating and analyzing cyber threat intelligence.
+- [**73**星][13d] [Py] [openscap/openscap-daemon](https://github.com/openscap/openscap-daemon) Manages continuous scans of your infrastructure
+- [**73**星][5y] [C] [cloudsec/exploit](https://github.com/cloudsec/exploit) Some kernel exploit i wrote
+- [**73**星][3y] [Py] [programa-stic/hexag00n](https://github.com/programa-stic/hexag00n) Hexag00n: A collection of reverse engineering tools for the Qualcomm Digital Signal Proccesor (QDSP6)
+- [**73**星][4y] [Py] [veil-framework/veil-catapult](https://github.com/veil-framework/veil-catapult) Veil Catapult is no longer supported
+- [**73**星][20d] [yingtongdou/graph-adversarial-learning-literature](https://github.com/yingtongdou/graph-adversarial-learning-literature) A curated list of adversarial learning papers on graph-structured data.
+- [**73**星][10m] [C#] [checkymander/sharp-smbexec](https://github.com/checkymander/Sharp-SMBExec) SMBExec C# module
+- [**73**星][3m] [Py] [acmesec/ctfcracktools-v2](https://github.com/Acmesec/CTFCrackTools-V2) China's first CTFTools framework.中国国内首个CTF工具框架,旨在帮助CTFer快速攻克难关
+- [**73**星][4y] [Shell] [ctfhacker/ctf-vagrant-64](https://github.com/ctfhacker/ctf-vagrant-64)
+- [**73**星][3y] [Py] [zhanghangorg/sqlinj-ant](https://github.com/zhanghangorg/sqlinj-ant) 伪分布式SQL注入自动扫描
+- [**73**星][2y] [HTML] [xuechiyaobai/v8_november_2017](https://github.com/xuechiyaobai/v8_november_2017)
+- [**73**星][1y] [C++] [xrobots/robotx](https://github.com/xrobots/robotx) All the things for RobotX
+- [**73**星][3y] [C] [xpn/ssh-inject](https://github.com/xpn/ssh-inject) A ptrace POC by hooking SSH to reveal provided passwords
+- [**73**星][7m] [C++] [watersalesman/aura-botnet](https://github.com/watersalesman/aura-botnet) A super portable botnet framework with a Django-based C2 server. The client is written in C++, with alternate clients written in Rust, Bash, and Powershell.
+- [**73**星][6m] [tigaxmt/hackerone-lessons](https://github.com/tigaxmt/hackerone-lessons) Transcribed video lessons of HackerOne to pdf's
+- [**73**星][2y] [Shell] [te-papa/aws-key-disabler](https://github.com/te-papa/aws-key-disabler) aws-key-disabler: 禁用超过指定日期的 AWS 访问key
+- [**73**星][2y] [Py] [sumoprojects/sumoeasyminer](https://github.com/sumoprojects/sumoeasyminer) The most easy, intuitive CPU miner for cryptonote-based cryptocurrency
+- [**73**星][2y] [Java] [spiderlabs/burplay](https://github.com/spiderlabs/burplay) Burplay is a Burp Extension allowing for replaying any number of requests using same modifications definition. Its main purpose is to aid in searching for Privilege Escalation issues.
+- [**73**星][4m] [Assembly] [siguza/aprr](https://github.com/siguza/aprr) Apple hardware secrets
+- [**73**星][24d] [C++] [sidyhe/dxx](https://github.com/sidyhe/dxx) Windows Kernel Driver with C++ runtime
+- [**73**星][3m] [C++] [shellvm/shellvm](https://github.com/shellvm/shellvm) A collection of LLVM transform and analysis passes to write shellcode in regular C
+- [**73**星][12m] [C] [securifera/servicefu](https://github.com/securifera/servicefu) Automates credential skimming from service accounts in Windows Registry
+- [**73**星][2m] [Py] [rub-syssec/grimoire](https://github.com/rub-syssec/grimoire)
+- [**73**星][3y] [C++] [rrbranco/blackhat2016](https://github.com/rrbranco/blackhat2016) Black Hat 2016 Slides, Paper and Code
+- [**73**星][5y] [C++] [rrbranco/blackhat2012](https://github.com/rrbranco/blackhat2012) Blackhat 2012 Sample Codes
+- [**73**星][9d] [JS] [ralphwetzel/theonionbox](https://github.com/ralphwetzel/theonionbox) Dashboard to monitor Tor node operations
+- [**73**星][2y] [Py] [qianniaoge/f-scrack](https://github.com/qianniaoge/f-scrack) 一款python编写的轻量级弱口令检测脚本,目前支持以下服务:FTP、MYSQL、MSSQL、MONGODB、REDIS、TELNET、ELASTICSEARCH、POSTGRESQL。
+- [**73**星][1m] [C] [puppet-meteor/mopt-afl](https://github.com/puppet-meteor/mopt-afl) MOpt-AFL provided by the paper "MOPT: Optimized Mutation Scheduling for Fuzzers"
+- [**73**星][4y] [PHP] [phith0n/b374k](https://github.com/phith0n/b374k) PHP Webshell with handy features
+- [**73**星][3y] [PHP] [nmalcolm/ipcamshell](https://github.com/nmalcolm/ipcamshell) IP Cam Shell is a command line script for testing and exploiting a wide range of IP cameras as demonstrated by Craig Heffner in "Exploiting Surveillance Cameras Like a Hollywood Hacker". See the slides here:
+- [**73**星][4y] [C] [nihilus/ida_signsrch](https://github.com/nihilus/ida_signsrch) signsrch签名匹配
+- [**73**星][10m] [Py] [msuhanov/yarp](https://github.com/msuhanov/yarp) Yet another registry parser
+- [**73**星][6y] [Shell] [mkottman/luacrypto](https://github.com/mkottman/luacrypto) Fork of LuaCrypto, which enables encryption and decryption through OpenSSL
+- [**73**星][Py] [minisafe/microscan](https://github.com/minisafe/microscan) MicroScan 基于B/S架构微扫描器
+- [**73**星][5m] [Py] [milo2012/ipv4bypass](https://github.com/milo2012/ipv4bypass) 利用ipV6绕过安全防护
+- [**73**星][4y] [Py] [marekrei/theano-tutorial](https://github.com/marekrei/theano-tutorial) Basic Theano code samples
+- [**73**星][3y] [lcatro/hacker_document](https://github.com/lcatro/hacker_document) 收集一些以前看过对于入门和进阶很有用的攻击原理文档..
+- [**73**星][2y] [C++] [koemeet/rtti-obfuscator](https://github.com/koemeet/rtti-obfuscator) Obfuscates all RTTI (Run-time type information) inside a binary
+- [**73**星][4y] [Py] [johnmaguire/cardinal](https://github.com/johnmaguire/cardinal) A Python IRC bot, designed to make adding functionality quick and simple.
+- [**73**星][1m] [HTML] [jmortega/python-pentesting](https://github.com/jmortega/python-pentesting) python-pentesting-tool
+- [**73**星][7m] [Py] [jiangsir404/pbscan](https://github.com/jiangsir404/pbscan) 基于burpsuite headless 的代理式被动扫描系统
+- [**73**星][21d] [Py] [internetarchive/warctools](https://github.com/internetarchive/warctools) Command line tools and libraries for handling and manipulating WARC files (and HTTP contents)
+- [**73**星][3y] [Shell] [inquisb/unix-privesc-check](https://github.com/inquisb/unix-privesc-check) Shell script that runs on UNIX systems (tested on Solaris 9, HPUX 11, various Linux distributions, FreeBSD 6.2). It detects misconfigurations that could allow local unprivileged user to escalate to other users (e.g. root) or to access local apps (e.g. databases). This is a collaborative rework of version 1.0
+- [**73**星][3y] [Go] [grahamedgecombe/ct-submit](https://github.com/grahamedgecombe/ct-submit) A program for submitting X.509 certificate chains to Certificate Transparency log servers.
+- [**73**星][1y] [Ruby] [fbkcs/msf-elf-in-memory-execution](https://github.com/fbkcs/msf-elf-in-memory-execution) msf-elf-in-memory-execution: Metasploit模块, 用于在内存中执行ELF文件
+- [**73**星][2y] [Ruby] [dyjakan/interpreter-bugs](https://github.com/dyjakan/interpreter-bugs) Fuzzing results for various interpreters.
+- [**73**星][9m] [C++] [doublelabyrinth/sdokeycrypt-sys-local-privilege-elevation](https://github.com/doublelabyrinth/sdokeycrypt-sys-local-privilege-elevation) CVE-2019-9729
+- [**73**星][1y] [Py] [dionach/panhunt](https://github.com/dionach/panhunt) PANhunt searches for credit card numbers (PANs) in directories.
+- [**73**星][9m] [Verilog] [denandz/lpc_sniffer_tpm](https://github.com/denandz/lpc_sniffer_tpm) A low pin count sniffer for ICEStick - targeting TPM chips
+- [**73**星][1y] [PS] [decoder-it/psportfwd](https://github.com/decoder-it/psportfwd) psportfwd: PowerShell编写的端口转发工具, 无需admin权限
+- [**73**星][2y] [HTML] [cyberheartmi9/payloadsallthethings](https://github.com/cyberheartmi9/payloadsallthethings)
+- [**73**星][5y] [C] [cooloppo/reclass](https://github.com/cooloppo/reclass) A tool for reconstructing data types based on memory - [Outdated; use ReClassEx]
+- [**73**星][3y] [Visual Basic .NET] [cn33liz/vbsmeter](https://github.com/cn33liz/vbsmeter) VBS Reversed TCP Meterpreter Stager
+- [**73**星][3y] [Py] [carlosgprado/brundlefuzz](https://github.com/carlosgprado/brundlefuzz) BrundleFuzz is a distributed fuzzer for Windows and Linux using dynamic binary instrumentation.
+- [**73**星][1y] [Java] [bit4woo/u2c](https://github.com/bit4woo/u2c) Unicode To Chinese -- U2C : A burpsuite Extender That Convert Unicode To Chinese 【Unicode编码转中文的burp插件】
+- [**73**星][1y] [Batchfile] [b4rtik/hiddenpowershelldll](https://github.com/b4rtik/hiddenpowershelldll)
+- [**73**星][7m] [Go] [audibleblink/letsproxy](https://github.com/audibleblink/letsproxy) Quickly fetch Let's Encrypt certs and serve a reverse proxy
+- [**73**星][5y] [Shell] [andrewmichaelsmith/honeypot-setup-script](https://github.com/andrewmichaelsmith/honeypot-setup-script) Honeypot (Dionaea and kippo) setup script
+- [**73**星][16d] [C++] [3gstudent/homework-of-c-language](https://github.com/3gstudent/homework-of-c-language) C/C++ code examples of my blog.
+- [**72**星][5m] [C] [zhengshoujian/darknet-yolo-segmentation](https://github.com/zhengshoujian/darknet-yolo-segmentation) This project is based on darknet to get image segmentation
+- [**72**星][9d] [Py] [golismero/openvas_lib](https://github.com/golismero/openvas_lib) OpenVAS connector for versions 6, 7, 8 and 9
+- [**72**星][1y] [C] [shellphish/afl-other-arch](https://github.com/shellphish/afl-other-arch) AFL, with scripts to support other architectures.
+- [**72**星][1y] [v2ray/discussion](https://github.com/v2ray/discussion) For general discussion over Project V development and usage.
+- [**72**星][2y] [Go] [wallix/triplestore](https://github.com/wallix/triplestore) Nifty library to manage, query and store RDF triples. Make RDF great again!
+- [**72**星][2y] [C++] [wyexe/lol_china](https://github.com/wyexe/LOL_China)
+- [**72**星][2d] [thehive-project/cortexdocs](https://github.com/TheHive-Project/CortexDocs) Documentation of Cortex
+- [**72**星][2y] [zntfdr/awesome-twitter-bots](https://github.com/zntfdr/awesome-twitter-bots) A Curated Collection of the Best Twitter Bots
+- [**72**星][3y] [C++] [zcgonvh/ms16-032](https://github.com/zcgonvh/ms16-032) MS16-032(CVE-2016-0099) for SERVICE ONLY
+- [**72**星][3y] [Go] [xsec-lab/x-waf-admin](https://github.com/xsec-lab/x-waf-admin) x-waf的web管理后台
+- [**72**星][4y] [Pascal] [xlinshan/coldroot](https://github.com/xlinshan/coldroot) Mac OS Trojan (RAT) made with love <3
+- [**72**星][7d] [Py] [xfreed0m/smtptester](https://github.com/xfreed0m/smtptester) small python3 tool to check common vulnerabilities in SMTP servers
+- [**72**星][2y] [C++] [vusec/guardion](https://github.com/vusec/guardion) Android GuardION patches to mitigate DMA-based Rowhammer attacks on ARM
+- [**72**星][3y] [vrtadmin/first](https://github.com/vrtadmin/first) 函数识别和签名恢复, 带服务器
+- [**72**星][2y] [C++] [vecna/sniffjoke](https://github.com/vecna/sniffjoke) a client-only layer of protection from the wiretap/sniff/IDS analysis
+- [**72**星][3m] [vanhauser-thc/afl-patches](https://github.com/vanhauser-thc/afl-patches) Patches to afl to fix bugs or add enhancements
+- [**72**星][27d] [Dart] [timsneath/github-tracker](https://github.com/timsneath/github-tracker) Grabs some useful information from GitHub.
+- [**72**星][3y] [C] [tillmannw/honeytrap](https://github.com/tillmannw/honeytrap) a low-interaction honeypot
+- [**72**星][3y] [Perl] [tanjiti/fingerprint](https://github.com/tanjiti/fingerprint) web应用指纹识别
+- [**72**星][2y] [ObjC] [sunweiliang/baiduyuncrack](https://github.com/sunweiliang/baiduyuncrack) iOS百度云盘 破解速度限制、去广告、去更新 无需越狱~
+- [**72**星][19d] [XSLT] [spring-cloud/spring-cloud-stream-starters](https://github.com/spring-cloud/spring-cloud-stream-starters)
+- [**72**星][2y] [Py] [skelsec/cve-2017-12542](https://github.com/skelsec/cve-2017-12542) Test and exploit for CVE-2017-12542
+- [**72**星][6m] [HTML] [securityautomation/dumpthegit](https://github.com/securityautomation/dumpthegit) DumpTheGit searches through public repositories to find sensitive information uploaded to the Github repositories.
+- [**72**星][3y] [Py] [scumsec/recon-ng-modules](https://github.com/scumsec/recon-ng-modules) Additional modules for recon-ng
+- [**72**星][3y] [Py] [roothaxor/ransom](https://github.com/roothaxor/ransom) Various codes related to Ransomware Developement
+- [**72**星][1y] [JS] [rameshaditya/ducky](https://github.com/rameshaditya/ducky) Chrome extension to overlay a (super adorable) rubber duck, as a virtual companion during rubber duck debugging.
+- [**72**星][6m] [Py] [pyobfx/pyobfx](https://github.com/pyobfx/pyobfx) Python Obfuscator & Packer
+- [**72**星][2m] [JS] [purplei2p/i2pdbrowser](https://github.com/purplei2p/i2pdbrowser) i2pd browser bundle
+- [**72**星][16d] [C++] [powerdns/weakforced](https://github.com/powerdns/weakforced) Anti-Abuse for servers at authentication time
+- [**72**星][6y] [Py] [piccimario/iphone-backup-analyzer-2](https://github.com/piccimario/iphone-backup-analyzer-2) iPBA, Qt version
+- [**72**星][9m] [C++] [niklasb/bspfuzz](https://github.com/niklasb/bspfuzz)
+- [**72**星][4y] [ObjC] [mubix/ditto](https://github.com/mubix/ditto) Binary resource copier
+- [**72**星][6y] [PS] [mattifestation/powerworm](https://github.com/mattifestation/powerworm) Analysis, detection, and removal of the "Power Worm" PowerShell-based malware
+- [**72**星][5y] [C++] [malwaretech/zombifyprocess](https://github.com/malwaretech/zombifyprocess) Inject code into a legitimate process
+- [**72**星][7y] [C] [machn1k/scalpel-2.0](https://github.com/machn1k/scalpel-2.0) Scalpel; File Carving. Configuration files are modified.
+- [**72**星][7m] [TS] [louisvillemetro/wazeccpprocessor](https://github.com/louisvillemetro/wazeccpprocessor) Waze WARP takes your CCP data feed and processes it into your cloud provider for access, analysis, and visualization. An Open Government Coalition (OGC) project.
+- [**72**星][3y] [Py] [lorexxar/bscanner](https://github.com/lorexxar/bscanner) 一直没有顺手的扫描器,那就自己写一个吧
+- [**72**星][1y] [Py] [lixmk/concierge](https://github.com/lixmk/concierge) Physical Access Control Identification and Exploitation
+- [**72**星][5y] [Py] [ksoona/attackvector](https://github.com/ksoona/attackvector) AttackVector Linux
+- [**72**星][6y] [C] [jtripper/sslnuke](https://github.com/jtripper/sslnuke) Transparent proxy that decrypts SSL traffic and prints out IRC messages.
+- [**72**星][5y] [Py] [joridos/custom-ssh-backdoor](https://github.com/joridos/custom-ssh-backdoor) Custom ssh backdoor, coded in python using Paramiko
+- [**72**星][4d] [jawz101/mobileadtrackers](https://github.com/jawz101/mobileadtrackers) Taken from DNS logs while actively using Android apps over the years. Formatted in hostfile format.
+- [**72**星][3y] [PS] [jaredhaight/invoke-metasploitpayload](https://github.com/jaredhaight/invoke-metasploitpayload) Powershell script to download and kick off Metasploit payloads. Relies on the exploit/multi/scripts/web_delivery metasploit module.
+- [**72**星][17d] [Zeek] [hosom/file-extraction](https://github.com/hosom/file-extraction) Extract files from network traffic with Bro.
+- [**72**星][2y] [C++] [hexhive/hextype](https://github.com/hexhive/hextype) HexType: Efficient Detection of Type Confusion Errors for C++
+- [**72**星][3y] [Py] [hak5darren/bashbunny-payloads](https://github.com/hak5darren/bashbunny-payloads) Payloads for the Hak5 Bash Bunny
+- [**72**星][5y] [Py] [feliam/cve-2014-4377](https://github.com/feliam/cve-2014-4377)
+- [**72**星][8m] [C] [ez-flash/omega-kernel](https://github.com/ez-flash/omega-kernel) EZ-FLASH OMEGA Kernel
+- [**72**星][4y] [Py] [exp0se/harbinger](https://github.com/exp0se/harbinger) Harbinger Threat Intelligence
+- [**72**星][2y] [Py] [embedi/meloader](https://github.com/embedi/meloader) 加载英特尔管理引擎固件
+- [**72**星][2y] [Py] [denglend/decode345](https://github.com/denglend/decode345) Honeywell 345 Mhz decoding
+- [**72**星][4y] [david415/ansible-tor](https://github.com/david415/ansible-tor) An Ansible role for using tor!
+- [**72**星][3m] [JS] [cveproject/automation-working-group](https://github.com/cveproject/automation-working-group) CVE Automation Working Group
+- [**72**星][1y] [C] [chinatiny/inlinehooklib](https://github.com/chinatiny/inlinehooklib) 同时支持用户和内核模式的Inlinehook库
+- [**72**星][9d] [Py] [cert-polska/n6](https://github.com/cert-polska/n6) Automated handling of data feeds for security teams
+- [**72**星][1y] [C#] [c4bbage/pentestscripts](https://github.com/c4bbage/pentestscripts) 白名单利用代码、渗透工具
+- [**72**星][8m] [Py] [busescanfly/rpi-hunter](https://github.com/busescanfly/rpi-hunter) Auto discover and exploit LAN raspberry pi's
+- [**72**星][5y] [Py] [binsigma/binsourcerer](https://github.com/binsigma/binsourcerer) 反汇编与源码匹配
+- [**72**星][3y] [Py] [antojoseph/droid-ff](https://github.com/antojoseph/droid-ff) Android File Fuzzing Framework
+- [**72**星][2y] [Py] [angr/simuvex](https://github.com/angr/simuvex) [DEPRECATED] A symbolic execution engine for the VEX IR
+- [**72**星][5y] [80vul/pasc2at](https://github.com/80vul/pasc2at) Php Application Source Code Audits Advanced Technology
+- [**72**星][3m] [Go] [0xrawsec/golang-evtx](https://github.com/0xrawsec/golang-evtx) a parsing library for Windows EVTX log files.
+- [**71**星][2y] [Py] [jiansiting/wpa2-krack](https://github.com/jiansiting/wpa2-krack)
+- [**71**星][4y] [Ruby] [etsy/chef-whitelist](https://github.com/etsy/chef-whitelist) Simple library to enable host based rollouts of changes
+- [**71**星][4m] [Py] [utkusen/rhodiola](https://github.com/utkusen/rhodiola) Personalized wordlist generator with NLP, by analyzing tweets. (A.K.A crunch2049)
+- [**71**星][12d] [Shell] [nahamsec/crtndstry](https://github.com/nahamsec/crtndstry) Yet another subdomain finder
+- [**71**星][5m] [Py] [k8gege/scrun](https://github.com/k8gege/scrun) BypassAV ShellCode Loader (Cobaltstrike/Metasploit)
+- [**71**星][10d] [C++] [jeefo/yapb](https://github.com/jeefo/yapb) AI opponent for Counter-Strike based on POD-Bot 2.6
+- [**71**星][27d] [C] [davidxanatos/taskexplorer](https://github.com/davidxanatos/taskexplorer) Power full Task Manager
+- [**71**星][7m] [Py] [rmanofcn/ml_malware_detect](https://github.com/RManOfCN/ML_Malware_detect) 阿里云安全恶意程序检测比赛
+- [**71**星][1m] [Jupyter Notebook] [mozilla/overscripted](https://github.com/mozilla/overscripted) Repository for the Mozilla Overscripted Data Mining Challenge
+- [**71**星][6m] [Py] [jakobrpennington/information-security](https://github.com/JakobRPennington/information-security) A place where I can create, collect and share tooling, resources and knowledge about information security.
+- [**71**星][7m] [C] [hc0d3r/alfheim](https://github.com/hc0d3r/alfheim) a linux process hacker tool
+- [**71**星][7y] [Py] [mushorg/buttinsky](https://github.com/mushorg/buttinsky) Botnet monitoring is a crucial part in threat analysis and often neglected due to the lack of proper open source tools. Our tool will provide an open source framework for automated botnet monitoring. The modular design will allow full customization of the used protocols, the monitoring clients behavior, how we log the collected information, proc…
+- [**71**星][2y] [C] [yrp604/atc-sources](https://github.com/yrp604/atc-sources) Attacking the Core associated source files
+- [**71**星][3y] [Py] [xyntax/baiduyun-brute](https://github.com/xyntax/baiduyun-brute) [已失效] 多线程百度云(私密分享)密码爆破工具 pan.baidu.com
+- [**71**星][2y] [Py] [x64dbg/mona](https://github.com/x64dbg/mona) Fork of mona.py with x64dbg support
+- [**71**星][4y] [C++] [waleedassar/antidebug](https://github.com/waleedassar/antidebug) Collection Of Anti-Debugging Tricks
+- [**71**星][6m] [PHP] [vlucas/pikirasa](https://github.com/vlucas/pikirasa) PKI public/private RSA key encryption using the OpenSSL extension
+- [**71**星][1y] [Shell] [thelinuxchoice/keydroid](https://github.com/thelinuxchoice/keydroid) Android Keylogger + Reverse Shell
+- [**71**星][3y] [Py] [tengzhangchao/microsoftspider](https://github.com/tengzhangchao/microsoftspider) 爬取微软漏洞信息,MS对应的每个版本操作系统KB号以及补丁下载地址。
+- [**71**星][4m] [Py] [utkusen/rhodiola](https://github.com/utkusen/rhodiola) Personalized wordlist generator with NLP, by analyzing tweets. (A.K.A crunch2049)
+- [**71**星][3y] [C++] [tandasat/eopmon](https://github.com/tandasat/eopmon) Elevation of privilege detector based on HyperPlatform
+- [**71**星][2y] [Py] [soinull/assimilate](https://github.com/soinull/assimilate) Assimilate is a series of scripts for using the Naïve Bayes algorithm to find potential malicious activity in HTTP headers
+- [**71**星][19d] [Py] [skelsec/msldap](https://github.com/skelsec/msldap) 从Active Directory中获取用户对象, 并将重要内容存储在一个大型电子表格中. 用于渗透期间快速识别易受攻击的用户设置
+- [**71**星][2m] [HTML] [sisoc-tokyo/real-timedetectionad_ver2](https://github.com/sisoc-tokyo/real-timedetectionad_ver2)
+- [**71**星][1y] [C] [shift-crops/escapeme](https://github.com/shift-crops/escapeme) TokyoWestens CTF 4th 2018 EscapeMe challenge
+- [**71**星][6d] [C++] [rodneyviana/netext](https://github.com/rodneyviana/netext) WinDbg extension for data mining managed heap. It also includes commands to list http request, wcf services, WIF tokens among others
+- [**71**星][16d] [Rust] [redsift/ingraind](https://github.com/redsift/ingraind) Data first monitoring agent using (e)BPF, built on RedBPF
+- [**71**星][3y] [C] [rcvalle/vmmfuzzer](https://github.com/rcvalle/vmmfuzzer) A hypervisor or virtual machine monitor (VMM) fuzzer.
+- [**71**星][3y] [C++] [razzile/liberation](https://github.com/razzile/liberation) A runtime patching library for iOS. Major rework on unfinished branch
+- [**71**星][3y] [Shell] [ppabc/cc_iptables](https://github.com/ppabc/cc_iptables) 收集处理DDOS、CC攻击各类脚本,包括NGINX日志中的CC攻击IP处理。
+- [**71**星][2y] [Shell] [opsxcq/exploit-cve-2014-6271](https://github.com/opsxcq/exploit-cve-2014-6271) Shellshock exploit + vulnerable environment
+- [**71**星][1y] [PHP] [opsxcq/docker-vulnerable-dvwa](https://github.com/opsxcq/docker-vulnerable-dvwa) Damn Vulnerable Web Application Docker container
+- [**71**星][2y] [HTML] [onplus/shadowsocks-websocket-python](https://github.com/onplus/shadowsocks-websocket-python) shadowsocks over WebSocket, support Heroku.
+- [**71**星][3y] [Py] [nccgroup/ble-replay](https://github.com/nccgroup/ble-replay) BLE-Replay is a Bluetooth Low Energy (BLE) peripheral assessment tool
+- [**71**星][2y] [Py] [n4xh4ck5/rastleak](https://github.com/n4xh4ck5/rastleak) Tool to automatic leak information using Hacking with engine searches
+- [**71**星][6y] [Py] [mrnasro/zynos-attacker](https://github.com/mrnasro/zynos-attacker) ZynOS tool for automated attack on a range of IPs, find more informations at :
+- [**71**星][3y] [C] [moyix/panda](https://github.com/moyix/panda) Deprecated repo for PANDA 1.0 – see PANDA 2.0 repository
+- [**71**星][3y] [Py] [monnappa22/hollowfind](https://github.com/monnappa22/hollowfind) Hollowfind is a Volatility plugin to detect different types of process hollowing techniques used in the wild to bypass, confuse, deflect and divert the forensic analysis techniques. The plugin detects such attacks by finding discrepancy in the VAD and PEB, it also disassembles the address of entry point to detect any redirection attempts and als…
+- [**71**星][19d] [Dockerfile] [mko-x/docker-clamav](https://github.com/mko-x/docker-clamav) Dockerized open source antivirus for use with file sharing containers, REST API or TCP.
+- [**71**星][2y] [Py] [mgeeky/exploit-development-tools](https://github.com/mgeeky/exploit-development-tools) A bunch of my exploit development helper tools, collected in one place.
+- [**71**星][3y] [Py] [mak/ekdeco](https://github.com/mak/ekdeco) Scripts for dealing with various ek's
+- [**71**星][3m] [C++] [macmade/unicorn-bios](https://github.com/macmade/unicorn-bios) Basic BIOS emulator for Unicorn Engine.
+- [**71**星][1y] [Go] [m4ll0k/aron](https://github.com/m4ll0k/aron) Aron is a GO script for finding hidden GET & POST parameters
+- [**71**星][5d] [Go] [letsencrypt/ct-woodpecker](https://github.com/letsencrypt/ct-woodpecker) A tool to monitor a CT log for operational problems
+- [**71**星][6y] [Py] [krmaxwell/dns-exfiltration](https://github.com/krmaxwell/dns-exfiltration) Exfiltrate files via DNS
+- [**71**星][1y] [kingzd/wxdemo](https://github.com/kingzd/wxdemo) 学习练手
+- [**71**星][5y] [C#] [khr0x40sh/whitelistevasion](https://github.com/khr0x40sh/whitelistevasion) Collection of scripts, binaries and the like to aid in WhiteList Evasion on a Microsoft Windows Network.
+- [**71**星][7y] [C] [kholia/rc4-40-brute-office](https://github.com/kholia/rc4-40-brute-office) Guaranteed cracking of M$ Office files using RC4 40-bit encryption
+- [**71**星][2y] [PHP] [joesmithjaffa/jenkins-shell](https://github.com/joesmithjaffa/jenkins-shell) Automating Jenkins Hacking using Shodan API
+- [**71**星][4y] [Py] [internetwache/internetwache-ctf-2016](https://github.com/internetwache/internetwache-ctf-2016) The Internetwache CTF 2016 repository
+- [**71**星][4y] [Py] [icewall/bindifffilter](https://github.com/icewall/bindifffilter) IDA Pro plugin making easier work on BinDiff results
+- [**71**星][9m] [PS] [iamrootsh3ll/anchorwatch](https://github.com/iamrootsh3ll/anchorwatch) A Rogue Device Detection Script with Email Alerts Functionality for Windows Subsystem
+- [**71**星][8y] [Py] [hellais/buckle-up](https://github.com/hellais/buckle-up) Script for running Mac OS X applications in a sandbox and a collection of seatbelt profiles
+- [**71**星][7y] [PHP] [geekchannel/webmap](https://github.com/geekchannel/webmap) NMAP via web
+- [**71**星][6y] [enigma0x3/powershell-payload-excel-delivery](https://github.com/enigma0x3/powershell-payload-excel-delivery) Uses Invoke-Shellcode to execute a payload and persist on the system.
+- [**71**星][3y] [C++] [endgameinc/maxwell](https://github.com/endgameinc/maxwell)
+- [**71**星][4y] [Py] [danmcinerney/autorelay](https://github.com/danmcinerney/autorelay) Automatically performs the SMB relay attack
+- [**71**星][2y] [Py] [d4vinci/pyloggy](https://github.com/d4vinci/pyloggy) A python keylogger that does more than any other keylogger - Key logger, Clicks logger and Screenshots
+- [**71**星][1m] [C++] [cseagle/collabreate](https://github.com/cseagle/collabreate) Hook IDA的事件通知,将事件涉及的修改内容广播到中心服务器,中心服务器转发给其他分析相同文件的用户
+- [**71**星][1y] [citybasebrooks/siac](https://github.com/citybasebrooks/siac) SIAC is an enterprise SIEM built on open-source technology.
+- [**71**星][2y] [Py] [chrispcampbell/qrocodile](https://github.com/chrispcampbell/qrocodile) A kid-friendly system for controlling Sonos with QR codes
+- [**71**星][2y] [HTML] [brandis-project/brandis](https://github.com/brandis-project/brandis) Brandis: End-to-end encryption for everyone
+- [**71**星][3y] [bmaia/cross-utils](https://github.com/bmaia/cross-utils) Cross compiling Utils (ARMEB, ARMEL, MIPS, MIPSEL)
+- [**71**星][6y] [C++] [blitzcode/ghc-stack](https://github.com/blitzcode/ghc-stack) Hacking GHC's Stack for Fun and Profit (featuring The Glorious Haskell Debugger v0.0.1 Pre-alpha)
+- [**71**星][3y] [Batchfile] [azmatt/windowsenum](https://github.com/azmatt/windowsenum) Batch file to help automate Windows enumeration for privilege escalation
+- [**71**星][3y] [JS] [attekett/surku](https://github.com/attekett/surku) Surku is a general-purpose mutation-based fuzzer.
+- [**71**星][3y] [C] [alexwebr/salsa20](https://github.com/alexwebr/salsa20) An implementation of the Salsa20 stream cipher in C99
+- [**71**星][2y] [Py] [7h3ram/flowinspect](https://github.com/7h3ram/flowinspect) A Network Inspection Tool
+- [**71**星][1y] [C++] [3gstudent/inject-dll-by-apc](https://github.com/3gstudent/inject-dll-by-apc) Asynchronous Procedure Calls
+- [**71**星][2y] [C] [0ffffffffh/api-break-for-x64dbg](https://github.com/0ffffffffh/api-break-for-x64dbg) x64dbg plugin to set breakpoints automatically to Win32/64 APIs
+- [**70**星][4y] [C#] [cn33liz/smashedpotato](https://github.com/cn33liz/smashedpotato)
+- [**70**星][11d] [Py] [ehco1996/aioshadowsocks](https://github.com/ehco1996/aioshadowsocks) 用 asyncio 重写 shadowsocks ~
+- [**70**星][8m] [Go] [mmcloughlin/cryptofuzz](https://github.com/mmcloughlin/cryptofuzz) Fuzzing Go crypto
+- [**70**星][26d] [CSS] [s0md3v/predator](https://github.com/s0md3v/predator) Anti-Automation System
+- [**70**星][3y] [zbetcheckin/ipv6](https://github.com/zbetcheckin/ipv6) Playing with IPv6 for fun and profit
+- [**70**星][6y] [Py] [q2h1cg/xss_scan](https://github.com/Q2h1Cg/xss_scan) XSS Scan
+- [**70**星][9d] [Shell] [sclorg/s2i-php-container](https://github.com/sclorg/s2i-php-container) PHP container images based on Red Hat Software Collections and intended for OpenShift and general usage, that provide a platform for building and running PHP applications. Users can choose between Red Hat Enterprise Linux, Fedora, and CentOS based images.
+- [**70**星][3y] [Py] [zxsecurity/gpsnitch](https://github.com/zxsecurity/gpsnitch) GPS Spoofer Catcher, the GPS IDS.
+- [**70**星][1m] [Py] [ziirish/burp-ui](https://github.com/ziirish/burp-ui) Burp-UI is a web-ui for burp backup written in python with Flask and jQuery/Bootstrap
+- [**70**星][7m] [Py] [zer1t0/ticket_converter](https://github.com/zer1t0/ticket_converter) A little tool to convert ccache tickets into kirbi (KRB-CRED) and vice versa based on impacket.
+- [**70**星][2y] [Java] [ysrc/obfusesmalitext](https://github.com/ysrc/obfusesmalitext) smali文件,jar包字符串混淆,支持gradle插件
+- [**70**星][2d] [Py] [x4nth055/pythoncode-tutorials](https://github.com/x4nth055/pythoncode-tutorials) The Python Code Tutorials
+- [**70**星][8m] [wufengxue/android-reverse](https://github.com/wufengxue/android-reverse) 安卓逆向工具汇总
+- [**70**星][5m] [wbierbower/awesome-physics](https://github.com/wbierbower/awesome-physics)
+- [**70**星][4m] [Py] [war-and-code/jawfish](https://github.com/war-and-code/jawfish) Tool for breaking into web applications.
+- [**70**星][11m] [Py] [viperbluff/portwitness](https://github.com/viperbluff/portwitness) Tool for checking Whether a domain or its multiple sub-domains are up and running.
+- [**70**星][5y] [Java] [veeti/disableflagsecure](https://github.com/veeti/disableflagsecure)
+- [**70**星][1y] [Go] [urld/passmgr](https://github.com/urld/passmgr) a simple, portable password manager
+- [**70**星][2m] [C++] [trailofbits/llvm-sanitizer-tutorial](https://github.com/trailofbits/llvm-sanitizer-tutorial) An LLVM sanitizer tutorial
+- [**70**星][2y] [Py] [timbo05sec/autocrack](https://github.com/timbo05sec/autocrack) Hashcat wrapper to help automate the cracking process
+- [**70**星][1y] [Shell] [thelinuxchoice/getwin](https://github.com/thelinuxchoice/getwin) FUD Win32 payload generator and listener
+- [**70**星][3m] [PS] [samratashok/race](https://github.com/samratashok/race) RACE is a PowerShell module for executing ACL attacks against Windows targets.
+- [**70**星][3y] [JS] [saelo/jscpwn](https://github.com/saelo/jscpwn) PoC exploit for CVE-2016-4622
+- [**70**星][1y] [Py] [rassec/rasscan](https://github.com/rassec/rasscan) Port service SCan
+- [**70**星][10m] [Dockerfile] [rancher/runc-cve](https://github.com/rancher/runc-cve) CVE patches for legacy runc packaged with Docker
+- [**70**星][3y] [Py] [quantumliu/antibtchack](https://github.com/quantumliu/antibtchack) 破解5.12比特币勒索软件
+- [**70**星][7y] [JS] [qburst/penq](https://github.com/qburst/penq) PenQ is an open source Linux based penetration testing browser bundle built over Mozilla Firefox. It comes pre-configured with security tools for spidering, advanced web searching, fingerprinting, anonymous browsing, web server scanning, fuzzing, report generating and more.
+- [**70**星][2y] [Py] [qazbnm456/vwgen](https://github.com/qazbnm456/vwgen) Vulnerable Web applications Generator
+- [**70**星][20d] [C] [ptrrkssn/pnscan](https://github.com/ptrrkssn/pnscan) Peter's Network Scanner
+- [**70**星][4y] [Py] [programa-stic/marvin-django](https://github.com/programa-stic/marvin-django) Marvin-django is the UI/database part of the Marvin project. Marvin is a platform for security analysis of Android apps.
+- [**70**星][4m] [Go] [nray-scanner/nray](https://github.com/nray-scanner/nray) nray distributed port scanner
+- [**70**星][8m] [Java] [novoda/dojos](https://github.com/novoda/dojos) This is where the Novoda team do all their hacking
+- [**70**星][2y] [C++] [nmulasmajic/cve-2018-8897](https://github.com/nmulasmajic/cve-2018-8897) Implements the POP/MOV SS (CVE-2018-8897) vulnerability by bugchecking the machine (local DoS).
+- [**70**星][2y] [Py] [nmalcolm/inventus](https://github.com/nmalcolm/inventus) Inventus is a spider designed to find subdomains of a specific domain by crawling it and any subdomains it discovers.
+- [**70**星][1y] [Py] [network-automation/ansible-napalm-samples](https://github.com/network-automation/ansible-napalm-samples) GitHub Repo comparing NAPALM and Ansible on Cisco NXOSv and Arista vEOS
+- [**70**星][4y] [C++] [nccgroup/windowsdaclenumproject](https://github.com/nccgroup/windowsdaclenumproject) A collection of tools to enumerate and analyse Windows DACLs
+- [**70**星][2y] [Py] [minervalabsresearch/mystique](https://github.com/minervalabsresearch/mystique) Mystique may be used to discover infection markers that can be used to vaccinate endpoints against malware. It receives as input a malicious sample and automatically generates a list of mutexes that could be used to as “vaccines” against the sample.
+- [**70**星][2m] [Py] [meejah/carml](https://github.com/meejah/carml) Command-line utility to control Tor.
+- [**70**星][2y] [Py] [malwarereversebrasil/maltran](https://github.com/malwarereversebrasil/maltran) A command line tool to download malware exercises from malware-traffic-analysis.net
+- [**70**星][1y] [Go] [maliceio/malice-av](https://github.com/maliceio/malice-av) Malice AntiVirus Plugins
+- [**70**星][3m] [m507/awae-preparation](https://github.com/m507/awae-preparation) This repository will contain all trainings and tutorials I have done/read to prepare for OSWE / AWAE.
+- [**70**星][5y] [JS] [lfzark/cookie-injecting-tools](https://github.com/lfzark/cookie-injecting-tools) A chrome extension ,cookie injecting tool includeing injecting ,editing ,adding ,removeing cookies.
+- [**70**星][4y] [C++] [laginimaineb/cve-2014-7920-7921](https://github.com/laginimaineb/cve-2014-7920-7921) Exploit code for CVE-2014-7920 and CVE-2014-7921 - code-exec in mediaserver up to Android 5.1
+- [**70**星][7m] [Py] [l4ys/ctf](https://github.com/l4ys/ctf) Some of my CTF solutions
+- [**70**星][3y] [Py] [kevsersrca/2016lykagguvenligivesizmatestleri](https://github.com/kevsersrca/2016lykagguvenligivesizmatestleri) Network Security Notes
+- [**70**星][7d] [Py] [jpcertcc/malconfscan-with-cuckoo](https://github.com/jpcertcc/malconfscan-with-cuckoo) Cuckoo Sandbox plugin for extracts configuration data of known malware
+- [**70**星][13d] [C] [jovanbulck/nemesis](https://github.com/jovanbulck/nemesis) Nemesis: Studying microarchitectural timing leaks in rudimentary CPU interrupt logic
+- [**70**星][8m] [Py] [itsmehacker/ducky-exploit](https://github.com/itsmehacker/ducky-exploit) Arduino Rubber Ducky Framework
+- [**70**星][6y] [Java] [irsdl/burpsuitejsbeautifier](https://github.com/irsdl/burpsuitejsbeautifier) Burp Suite JS Beautifier
+- [**70**星][9m] [Py] [intel/resilient-ml-research-platform](https://github.com/intel/resilient-ml-research-platform)
+- [**70**星][2y] [Java] [ikkisoft/bradamsa](https://github.com/ikkisoft/bradamsa) Burp Suite extension to generate Intruder payloads using Radamsa
+- [**70**星][8d] [Java] [i2p/i2p.android.base](https://github.com/i2p/i2p.android.base) I2P for Android
+- [**70**星][3y] [JS] [himadriganguly/sqlilabs](https://github.com/himadriganguly/sqlilabs) Lab set-up for learning SQL Injection Techniques
+- [**70**星][11m] [C] [heidsoft/devops](https://github.com/heidsoft/devops) 系统架构实践
+- [**70**星][6d] [Py] [greenbone/gvm-tools](https://github.com/greenbone/gvm-tools) Remote control your Greenbone Vulnerability Manager (GVM)
+- [**70**星][2m] [C] [getdrive/lazy-rdp](https://github.com/getdrive/lazy-rdp) Script for automatic scanning & brute-force RDP
+- [**70**星][2y] [C] [flxwu/spectre-attack-demo](https://github.com/flxwu/spectre-attack-demo) Reproducing malicious memory reading on Intel i5 and Intel Xeon using a Spectre attack
+- [**70**星][5y] [C] [fireeye/tools](https://github.com/fireeye/tools) general purpose and malware specific analysis tools
+- [**70**星][5y] [JS] [esapi/owasp-esapi-js](https://github.com/esapi/owasp-esapi-js) Automatically exported from code.google.com/p/owasp-esapi-js
+- [**70**星][2y] [Isabelle] [diekmann/iptables_semantics](https://github.com/diekmann/iptables_semantics) Verified iptables Firewall Ruleset Analysis
+- [**70**星][7d] [Py] [devopshq/artifactory](https://github.com/devopshq/artifactory) dohq-artifactory: a Python client for Artifactory
+- [**70**星][3y] [PS] [darkoperator/posh-virustotal](https://github.com/darkoperator/posh-virustotal) PowerShell Module to interact with VirusTotal
+- [**70**星][4y] [HTML] [crackinglandia/pype32](https://github.com/crackinglandia/pype32) Yet another Python library to read and write PE/PE+ files.
+- [**70**星][1y] [HTML] [cooolis/cooolis.github.io](https://github.com/cooolis/cooolis.github.io) Cooolis是一个操作系统命令技巧备忘录
+- [**70**星][3y] [Py] [coldfusion39/domi-owned](https://github.com/coldfusion39/domi-owned) domi-owned:IBM/LotusDomino 服务器漏洞利用工具
+- [**70**星][2y] [JS] [chrisyer/lightsocks-nodejs](https://github.com/chrisyer/lightsocks-nodejs) It's a simple socks5 proxy tool which based on lightsocks
+- [**70**星][6m] [Java] [c0d3p1ut0s/java-security-manager-bypass](https://github.com/c0d3p1ut0s/java-security-manager-bypass)
+- [**70**星][2y] [C] [azuregreen/arkprotect](https://github.com/azuregreen/arkprotect) An Ark tool project,run on Win7 x86/x64
+- [**70**星][3y] [Py] [antelox/fopo-php-deobfuscator](https://github.com/antelox/fopo-php-deobfuscator) A simple script to deobfuscate PHP file obfuscated with FOPO Obfuscator -
+- [**70**星][16d] [C] [anssi-fr/oradad](https://github.com/anssi-fr/oradad) Outil de récupération automatique des données de l'Active Directory / Automated tool for dumping Active Directory data
+- [**70**星][2y] [androidtamer/androidtamer](https://github.com/androidtamer/androidtamer) We Use Github Extensively and openly. So it becomes dificult to track what's what and what's where. This repository is a master repo to Help with that.
+- [**70**星][15d] [Py] [alexdetrano/4can](https://github.com/alexdetrano/4can)
+- [**70**星][1y] [C] [alex9191/kernel-dll-injector](https://github.com/alex9191/kernel-dll-injector) Kernel-Mode Driver that loads a dll into every new created process that loads kernel32.dll module
+- [**70**星][1y] [JS] [hackatnow/certstreamcatcher](https://github.com/hackatnow/certstreamcatcher) This tool is based on regex with effective standards for detecting phishing sites in real time using certstream and can also detect punycode (IDNA) attacks.
+- [**70**星][3y] [PS] [1ricardotavares/offensive-powershell](https://github.com/1ricardotavares/offensive-powershell)
+- [**70**星][6y] [Py] [0xdevalias/sparty](https://github.com/0xdevalias/sparty) Sparty - MS Sharepoint and Frontpage Auditing Tool [Unofficial]
+- [**70**星][14d] [Batchfile] [0xcoto/evilusb](https://github.com/0xcoto/evilusb) Turn an ordinary USB drive into a malicious social-engineering USB
+- [**69**星][6m] [JS] [jiang-xuan/deepinss](https://github.com/jiang-xuan/deepinss) Deep in shadowsocks.
+- [**69**星][4y] [Py] [mitmproxy/netlib](https://github.com/mitmproxy/netlib)
+- [**69**星][5m] [JS] [nccgroup/datajackproxy](https://github.com/nccgroup/datajackproxy) Datajack Proxy allows you to intercept TLS traffic in native x86 applications across platforms
+- [**69**星][4m] [0xd4d/dnspy-unity-mono](https://github.com/0xd4d/dnspy-unity-mono) Fork of Unity mono that's used to compile mono.dll with debugging support enabled
+- [**69**星][3y] [Nginx] [localtunnel/nginx](https://github.com/localtunnel/nginx) nginx container used as the localtunnel load balancer
+- [**69**星][17d] [Py] [splewis/get5-web](https://github.com/splewis/get5-web) Proof-of-concept webpanel for servers using the get5 CS:GO server plugin
+- [**69**星][2m] [opentoallctf/tips](https://github.com/opentoallctf/tips)
+- [**69**星][5y] [JS] [substack/wit](https://github.com/substack/wit) command-line wifi manager for linux
+- [**69**星][8m] [C#] [fsecurelabs/sharpcliphistory](https://github.com/FSecureLABS/SharpClipHistory) SharpClipHistory is a .NET application written in C# that can be used to read the contents of a user's clipboard history in Windows 10 starting from the 1809 Build.
+- [**69**星][9d] [Py] [bbva/patton](https://github.com/BBVA/patton) The clever vulnerability dependency finder
+- [**69**星][1y] [Py] [zsxsoft/regeorg](https://github.com/zsxsoft/regeorg) A modified reGeorg for One-line PHP Shell.
+- [**69**星][2y] [C++] [zodiacon/poolmonx](https://github.com/zodiacon/poolmonx) A GUI version of the classic PoolMon tool
+- [**69**星][2y] [Py] [zldww2011/cve-2018-0802_poc](https://github.com/zldww2011/cve-2018-0802_poc) Exploit the vulnerability to execute the calculator
+- [**69**星][4m] [Py] [zaproxy/zap-api-python](https://github.com/zaproxy/zap-api-python) OWASP ZAP Python API
+- [**69**星][7m] [Go] [ying32/rproxy](https://github.com/ying32/rproxy) 简单的反向代理用于内网穿透,支持HTTP/HTTPS转发
+- [**69**星][3y] [PS] [xillwillx/tricky.lnk](https://github.com/xillwillx/tricky.lnk) Creates a .lnk file with unicode chars that reverse the file extension and adds a .txt to the end to make it appear as a textfile. Payload is a powershell webdl and execute
+- [**69**星][4y] [Py] [x56/airpyrt-tools](https://github.com/x56/airpyrt-tools) Python module and client for the AirPort device management interface
+- [**69**星][4y] [Py] [v-p-b/pecloakcapstone](https://github.com/v-p-b/pecloakcapstone) Platform independent peCloak fork based on Capstone
+- [**69**星][7m] [Py] [thombashi/allpairspy](https://github.com/thombashi/allpairspy) A python library for test combinations generator. The generator allows one to create a set of tests using "pairwise combinations" method, reducing a number of combinations of variables into a lesser set that covers most situations.
+- [**69**星][6m] [C++] [thomasthelen/antidebugging](https://github.com/thomasthelen/antidebugging) A collection of c++ programs that demonstrate common ways to detect the presence of an attached debugger.
+- [**69**星][1y] [Py] [stixproject/openioc-to-stix](https://github.com/stixproject/openioc-to-stix) Generate STIX XML from OpenIOC XML
+- [**69**星][30d] [Ruby] [spiderlabs/cve_server](https://github.com/spiderlabs/cve_server) Simple REST-style web service for the CVE searching
+- [**69**星][2y] [Shell] [snubbegbg/install_raspi-config](https://github.com/snubbegbg/install_raspi-config) Script to install raspi-config on Raspberry Pi devices with an Linux OS that's missing it, like Kali Linux.
+- [**69**星][3y] [HTML] [skylined/bugs](https://github.com/skylined/bugs) Collection of software bugs found by SkyLined
+- [**69**星][2y] [C] [shay-gueron/aes-gcm-siv](https://github.com/shay-gueron/aes-gcm-siv) AES-GCM-SIV implementations (128 and 256 bit)
+- [**69**星][4y] [Py] [sensepost/autoresponder](https://github.com/sensepost/autoresponder) Quick python script to automatically load NTLM hashes from Responder logs and fires up Hashcat to crack them
+- [**69**星][2y] [Py] [s0lst1c3/sentrygun](https://github.com/s0lst1c3/sentrygun) Rogue AP killer
+- [**69**星][2y] [Py] [ryanohoro/csbruter](https://github.com/ryanohoro/csbruter) Cobalt Strike team server password brute force tool
+- [**69**星][1y] [Py] [romanking98/house-of-roman](https://github.com/romanking98/house-of-roman) RCE through Leakless HeapFengShui, fastbin alloc anywhere.
+- [**69**星][2y] [Py] [r0oth3x49/xpath](https://github.com/r0oth3x49/xpath) Xpath is a python based open source Sql injection tool that automates the process of detecting and exploiting error-based injection security flaws.
+- [**69**星][11m] [Py] [pure-l0g1c/instaburst](https://github.com/pure-l0g1c/instaburst) Brute force Instagram
+- [**69**星][2y] [Py] [planet-work/php-malware-scanner](https://github.com/planet-work/php-malware-scanner) PHP files analyzer for malware detection
+- [**69**星][3y] [C] [payatu/emffuzzer](https://github.com/payatu/emffuzzer) Enhanced Meta File Fuzzer based on Peach Fuzzing Framework
+- [**69**星][14d] [Py] [patois/mrspicky](https://github.com/patois/mrspicky) IDA反编译器脚本,辅助审计对于memcpy() 和memmove()函数的调用
+- [**69**星][13d] [Shell] [orjail/orjail](https://github.com/orjail/orjail) a more secure way to force programs to exclusively use tor network
+- [**69**星][10y] [C#] [oleavr/ospy](https://github.com/oleavr/ospy) Automatically exported from code.google.com/p/ospy
+- [**69**星][2y] [Py] [odensc/janus](https://github.com/odensc/janus) Python script to create an Android APK exploiting the Janus vulnerability.
+- [**69**星][2y] [Swift] [nwhacks-loki/loki](https://github.com/nwhacks-loki/loki) Proof-of-concept of emotion-targeted content delivery using machine learning and ARKit.
+- [**69**星][17d] [Py] [nmantani/fileinsight-plugins](https://github.com/nmantani/fileinsight-plugins) a decoding toolbox of McAfee FileInsight hex editor for malware analysis
+- [**69**星][7y] [C] [nektra/vtbl-ida-pro-plugin](https://github.com/nektra/vtbl-ida-pro-plugin) Identifying Virtual Table Functions using VTBL IDA Pro Plugin + Deviare Hooking Engine
+- [**69**星][4m] [PS] [nbeede/boombox](https://github.com/nbeede/boombox) Automatic deployment of Cuckoo Sandbox malware lab using Packer and Vagrant
+- [**69**星][2y] [PHP] [nairuzabulhul/roadmap](https://github.com/nairuzabulhul/roadmap) GitBook: OSCP RoadMap
+- [**69**星][1y] [Kotlin] [menjoo/android-ssl-pinning-webviews](https://github.com/menjoo/android-ssl-pinning-webviews) A simple demo app that demonstrates Certificate pinning and scheme/domain whitelisting in Android WebViews
+- [**69**星][3y] [Ruby] [melvinsh/subresolve](https://github.com/melvinsh/subresolve) Resolve and quickly portscan a list of (sub)domains.
+- [**69**星][1m] [Py] [m8r0wn/ldap_search](https://github.com/m8r0wn/ldap_search) Python3 script to perform LDAP queries and enumerate users, groups, and computers from Windows Domains. Ldap_Search can also perform brute force/password spraying to identify valid accounts via LDAP.
+- [**69**星][2y] [C++] [lynnux/windbg_hilight](https://github.com/lynnux/windbg_hilight) A windbg plugin to hilight text in Disassembly and Command windows. Support x86 and x64.
+- [**69**星][2y] [JS] [kureev/react-native-network-proxy](https://github.com/kureev/react-native-network-proxy) Network debugger (logger) for React Native apps
+- [**69**星][3y] [C] [klks/checksec](https://github.com/klks/checksec) x64dbg插件,用于检查应用程序各模块的安全设置,包括:SafeSEH、DEP、ASLR、、GS、CFG、Signature
+- [**69**星][6y] [C] [kedebug/scdetective](https://github.com/kedebug/scdetective) A kernel level anti-rootkit tool which runs on the windows platform.
+- [**69**星][3m] [PS] [jaredhaight/windowsattackanddefenselab](https://github.com/jaredhaight/windowsattackanddefenselab)
+- [**69**星][11m] [PS] [itskindred/winportpush](https://github.com/itskindred/winportpush) A simple PowerShell utility used for pivoting into internal networks via a compromised Windows host.
+- [**69**星][6m] [Py] [incredibleindishell/windows-ad-environment-related](https://github.com/incredibleindishell/windows-ad-environment-related) This Repository contains the stuff related to windows Active directory environment exploitation
+- [**69**星][6y] [C] [ichooseyou/reclass64](https://github.com/ichooseyou/reclass64) A port of DrunkenCheetah's Project to x64
+- [**69**星][4y] [Py] [hxer/vulnapp](https://github.com/hxer/vulnapp) use docker to attack web as a demo
+- [**69**星][2y] [C] [hfiref0x/stryker](https://github.com/hfiref0x/stryker) Multi-purpose proof-of-concept tool based on CPU-Z CVE-2017-15303
+- [**69**星][4y] [Py] [grazfather/blackhatpython](https://github.com/grazfather/blackhatpython) Black Hat Python Labs
+- [**69**星][1m] [Py] [google/certificate-transparency-rfcs](https://github.com/google/certificate-transparency-rfcs) Certificate Transparency RFC
+- [**69**星][11m] [C++] [fr0gger/rocprotect-v1](https://github.com/fr0gger/rocprotect-v1) Emulating Virtual Environment to stay protected against advanced malware
+- [**69**星][5y] [Py] [el3ct71k/subdomain-analyzer](https://github.com/el3ct71k/subdomain-analyzer) Subdomain Analyzer
+- [**69**星][2y] [Py] [dxwu/binderfilter](https://github.com/dxwu/binderfilter) A Linux kernel IPC firewall and logger for Android and Binder
+- [**69**星][15d] [C] [devnoname120/vitabright](https://github.com/devnoname120/vitabright) Experimental minimum brightness lowering plugin
+- [**69**星][3y] [Py] [dchrastil/ttsl](https://github.com/dchrastil/ttsl) Tool to scrape LinkedIn
+- [**69**星][8m] [Py] [chipik/sap_gw_rce_exploit](https://github.com/chipik/sap_gw_rce_exploit) SAP Gateway RCE exploits
+- [**69**星][5y] [PS] [cheetz/powertools](https://github.com/cheetz/powertools) Veil's PowerTools are a collection of PowerShell projects with a focus on offensive operations.
+- [**69**星][1m] [JS] [certtools/intelmq-manager](https://github.com/certtools/intelmq-manager) IntelMQ Manager is a graphical interface to manage configurations for IntelMQ framework.
+- [**69**星][7y] [Assembly] [brainsmoke/nyanmbr](https://github.com/brainsmoke/nyanmbr) Nyancat in the MBR
+- [**69**星][7m] [Py] [biggerwing/cve-2019-0708-poc](https://github.com/biggerwing/cve-2019-0708-poc) CVE-2019-0708 远程代码执行漏洞批量检测
+- [**69**星][5y] [Shell] [begriffs/microservice-template](https://github.com/begriffs/microservice-template) Basic architecture for running and monitoring workers
+- [**69**星][4m] [ascotbe/osmographic-brain-mapping](https://github.com/ascotbe/osmographic-brain-mapping) 渗透脑图(渗透步骤)
+- [**69**星][5y] [Py] [arvinddoraiswamy/slid](https://github.com/arvinddoraiswamy/slid) 静态链接库检测
+- [**69**星][4m] [C#] [antoniococo/runascs](https://github.com/antoniococo/runascs) RunasCs - Csharp and open version of windows builtin runas.exe
+- [**69**星][2y] [Py] [alexander-hanel/idapython6to7](https://github.com/alexander-hanel/idapython6to7)
+- [**69**星][2y] [Haskell] [adjoint-io/pedersen-commitment](https://github.com/adjoint-io/pedersen-commitment) Cryptographic Commitment Schemes
+- [**69**星][1y] [Java] [1135/equationexploit](https://github.com/1135/equationexploit) Eternalblue Doublepulsar exploit
+- [**68**星][3y] [Py] [yourtion/alfred_shadowsockscontroller](https://github.com/yourtion/alfred_shadowsockscontroller) ShadowsocksX controller for Alfred
+- [**68**星][2y] [C++] [secrary/hooking-via-instrumentationcallback](https://github.com/secrary/hooking-via-instrumentationcallback) codes for my blog post:
+- [**68**星][28d] [Py] [skelsec/kerberoast](https://github.com/skelsec/kerberoast) Kerberoast attack -pure python-
+- [**68**星][2y] [C++] [cmu-sei/biggrep](https://github.com/cmu-sei/biggrep) A scalable search index for binary files
+- [**68**星][6d] [gossip-sjtu/gossip_blog](https://github.com/gossip-sjtu/gossip_blog) 每周定期更新论文笔记分享的markdown以及图片
+- [**68**星][1y] [Py] [feeicn/webproxy](https://github.com/feeicn/webproxy) Create an HTTP / HTTPS proxy server based on MITMProxy and log all requests to the log file and parse the log for rewriting into the database.
+- [**68**星][30d] [Py] [lylemi/browser-fuzz-summarize](https://github.com/lylemi/browser-fuzz-summarize) Browser Fuzz Summarize / 浏览器模糊测试综述
+- [**68**星][4y] [Py] [0x90/wifi-scripts](https://github.com/0x90/wifi-scripts) Misc scripts and tools for WiFi
+- [**68**星][1y] [Shell] [kiyadesu/android](https://github.com/kiyadesu/Android) walk into Android security step by step
+- [**68**星][10m] [ObjC] [synacktiv-contrib/cve-2018-4193](https://github.com/Synacktiv-contrib/CVE-2018-4193) exploit for CVE-2018-4193
+- [**68**星][25d] [PS] [dsccommunity/certificatedsc](https://github.com/dsccommunity/CertificateDsc) This DSC Resource module can be used to simplify administration of certificates on a Windows Server.
+- [**68**星][3d] [C] [radareorg/radare2-regressions](https://github.com/radareorg/radare2-regressions) Regression Tests for the Radare2 Reverse Engineer's Debugger
+- [**68**星][2y] [Java] [yolosec/routerkeygenandroid](https://github.com/yolosec/routerkeygenandroid) Router Keygen generate default WPA/WEP keys for several routers.
+- [**68**星][6m] [Py] [usyd-blockchain/vandal](https://github.com/usyd-blockchain/vandal) Static program analysis framework for Ethereum smart contract bytecode.
+- [**68**星][5m] [Py] [tintinweb/ethereum-dasm](https://github.com/tintinweb/ethereum-dasm) An ethereum evm bytecode disassembler and static/dynamic analysis tool
+- [**68**星][2m] [Py] [thehappydinoa/rootos](https://github.com/thehappydinoa/rootos) macOS Root Helper
+- [**68**星][3y] [C] [stealth/plasmapulsar](https://github.com/stealth/plasmapulsar) PLASMA PULSAR
+- [**68**星][3y] [Py] [stayliv3/burpsuite-changeu](https://github.com/stayliv3/burpsuite-changeu)
+- [**68**星][26d] [Py] [spesmilo/electrum-docs](https://github.com/spesmilo/electrum-docs) Electrum
+- [**68**星][6d] [JS] [simplerisk/code](https://github.com/simplerisk/code) code:SimpleRisk 源码,企业威胁管理
+- [**68**星][1y] [Py] [shengqi158/cve-2018-2628](https://github.com/shengqi158/cve-2018-2628) CVE-2018-2628 & CVE-2018-2893
+- [**68**星][5m] [C++] [sepehrdaddev/xerxes](https://github.com/sepehrdaddev/xerxes) Xerxes dos tool enhanced
+- [**68**星][6y] [Py] [secfree/bcrpscan](https://github.com/secfree/bcrpscan) Base on crawler result web path scanner.
+- [**68**星][3y] [screetsec/wordlist-dracos](https://github.com/screetsec/wordlist-dracos) Collection My Wordlist
+- [**68**星][1y] [JS] [samhaxr/xxrf-shots](https://github.com/samhaxr/xxrf-shots) XXRF Shots - Useful for testing SSRF vulnerability
+- [**68**星][5m] [C#] [sailro/bdtunnel](https://github.com/sailro/bdtunnel) BoutDuTunnel is able to create virtual connections tunnelled in HTTP requests.
+- [**68**星][10m] [JS] [saelo/v9](https://github.com/saelo/v9) Files for the "v9" challenge of 34C3 CTF. See the greeting message in server.go for more information about the challenge
+- [**68**星][3y] [C++] [rwfpl/rewolf-gogogadget](https://github.com/rwfpl/rewolf-gogogadget) kernel exploitation helper class
+- [**68**星][1y] [HTML] [rvrsh3ll/word-doc-video-embed-exe-poc](https://github.com/rvrsh3ll/word-doc-video-embed-exe-poc)
+- [**68**星][2y] [richinseattle/evolutionarykernelfuzzing](https://github.com/richinseattle/evolutionarykernelfuzzing) Materials for the Evolutionary Kernel Fuzzing talk at Black Hat USA 2017
+- [**68**星][2y] [C] [ps4dev/ps4sdk](https://github.com/ps4dev/ps4sdk) Modular open source ps4 sdk with user and kernel space support
+- [**68**星][12m] [Py] [poorbillionaire/usn-journal-parser](https://github.com/poorbillionaire/usn-journal-parser) Python script to parse the NTFS USN Journal
+- [**68**星][1y] [PHP] [philipjohn/exploit-scanner-hashes](https://github.com/philipjohn/exploit-scanner-hashes) Hashes files for the WordPress Exploit Scanner plugin
+- [**68**星][4m] [outflanknl/presentations](https://github.com/outflanknl/presentations)
+- [**68**星][10m] [C] [ningzhenyu/nailgun](https://github.com/ningzhenyu/nailgun) Nailgun attack on ARM devices.
+- [**68**星][4m] [C] [neural75/gqrx-scanner](https://github.com/neural75/gqrx-scanner) A frequency scanner for Gqrx Software Defined Radio receiver
+- [**68**星][3m] [Py] [mrh0wl/cloudmare](https://github.com/mrh0wl/cloudmare) Cloudflare real IP tracker.
+- [**68**星][2y] [Perl] [mobrine-mob/m0b-tool](https://github.com/mobrine-mob/m0b-tool) exploit
+- [**68**星][2y] [Py] [mazenelzanaty/twlocation](https://github.com/mazenelzanaty/twlocation) Python script that gets Twitter users' tweets location
+- [**68**星][14d] [PHP] [markri/wp-sec](https://github.com/markri/wp-sec) Wp-sec is an exentsion for wp-cli which checks for Wordpress CVE security issues at wpvulndb.com
+- [**68**星][6m] [Py] [marco-lancini/docker_offensive_elk](https://github.com/marco-lancini/docker_offensive_elk) Elasticsearch for Offensive Security
+- [**68**星][3m] [C#] [malwarialabs/derbycon2019](https://github.com/malwarialabs/derbycon2019) Code & Slides For DerbyCon 2019
+- [**68**星][8m] [Py] [lunixbochs/revsync](https://github.com/lunixbochs/revsync) IDA和Binja实时同步插件
+- [**68**星][27d] [C#] [leoloobeek/csharp](https://github.com/leoloobeek/csharp) Various C# projects for offensive security
+- [**68**星][9y] [Py] [laanwj/decuda](https://github.com/laanwj/decuda) Decuda and cudasm, the CUDA binary utilities package. Low-level tools for NVidia G80 GPUs.
+- [**68**星][3y] [Py] [kkar/vbs-obfuscator-in-python](https://github.com/kkar/vbs-obfuscator-in-python) VBScript obfuscation to allow PenTesters bypass countermeasures.
+- [**68**星][1y] [Py] [kdaoudieh/bella](https://github.com/kdaoudieh/bella) Bella is a pure python post-exploitation data mining tool & remote administration tool for macOS.
+- [**68**星][2m] [Py] [jas502n/cve-2018-2628](https://github.com/jas502n/cve-2018-2628) Weblogic 反序列化漏洞(CVE-2018-2628)
+- [**68**星][2y] [C] [invictus1306/arm-episodes](https://github.com/invictus1306/arm-episodes) Arm Episodes
+- [**68**星][6y] [intrepidusgroup/rpi-atv](https://github.com/intrepidusgroup/rpi-atv) David Schuetz's Raspberry Pi/Apple TV talk at Derbycon
+- [**68**星][2y] [imp0wd3r/active-directory-pentest](https://github.com/imp0wd3r/active-directory-pentest) Windows域渗透学习笔记
+- [**68**星][2y] [Go] [ihciah/inner-shadowsocks](https://github.com/ihciah/inner-shadowsocks) Shadowsocks -> socks5 on server. (Created for providing socks5 proxy for Telegram)
+- [**68**星][6m] [Py] [idiom/pftriage](https://github.com/idiom/pftriage) Python tool and library to help analyze files during malware triage and analysis.
+- [**68**星][2y] [Py] [ianmiell/autotrace](https://github.com/ianmiell/autotrace) Runs a process, and gives you the output along with other telemetry on the process, all in one terminal window.
+- [**68**星][2d] [C] [horsicq/stringsx64dbg](https://github.com/horsicq/stringsx64dbg) Strings plugin for x64dbg
+- [**68**星][5m] [C#] [holly-hacker/dnspy.extension.holly](https://github.com/holly-hacker/dnspy.extension.holly) A dnSpy extension to aid reversing of obfuscated assemblies
+- [**68**星][3y] [C] [henkaku/vitashell](https://github.com/henkaku/vitashell) This is a fork of
+- [**68**星][2y] [hacker0x01/h1-212-ctf-solutions](https://github.com/hacker0x01/h1-212-ctf-solutions) A collection of the solutions people wrote for the H1-212 Capture The Flag event
+- [**68**星][3m] [Py] [gadiluna/safe](https://github.com/gadiluna/safe) Self-Attentive Function Embeddings for binary similarity
+- [**68**星][6m] [Py] [funilrys/pyfunceble](https://github.com/funilrys/pyfunceble) The tool to check the availability or syntax of domains, IPv4 or URL.
+- [**68**星][3m] [TS] [flathub/linux-store-frontend](https://github.com/flathub/linux-store-frontend) A web application to browse and install applications present in Flatpak repositories. Powers
+- [**68**星][2y] [Go] [fideliscyber/x509](https://github.com/fideliscyber/x509) 用X.509数字证书建立隐蔽数据交换通道 PoC
+- [**68**星][3m] [Py] [endgameinc/eqllib](https://github.com/endgameinc/eqllib)
+- [**68**星][3y] [CSS] [enddo/cjexploiter](https://github.com/enddo/cjexploiter) Drag and Drop ClickJacking exploit development assistance tool.
+- [**68**星][4y] [C] [elfmaster/kdress](https://github.com/elfmaster/kdress) Transform vmlinuz into a fully debuggable vmlinux that can be used with /proc/kcore
+- [**68**星][1y] [PHP] [dpiekacz/gixlg](https://github.com/dpiekacz/gixlg) GIXLG - Looking Glass
+- [**68**星][9m] [Ruby] [dev-sec/chef-windows-hardening](https://github.com/dev-sec/chef-windows-hardening) This chef cookbook provides windows hardening configurations for the DevSec Windows baseline profile.
+- [**68**星][2y] [Py] [dekunukem/facepunch](https://github.com/dekunukem/facepunch) Raspberry Pi based facial recognition punch clock
+- [**68**星][3y] [HTML] [davevs/dvxte](https://github.com/davevs/dvxte) Damn Vulnerable Xebia Training Environment
+- [**68**星][8m] [C] [comaeio/livecloudkd](https://github.com/comaeio/livecloudkd) Hyper-V Research is trendy now
+- [**68**星][3y] [CMake] [bastilleresearch/gr-nordic](https://github.com/bastilleresearch/gr-nordic) GNU Radio module and Wireshark dissector for the Nordic Semiconductor nRF24L Enhanced Shockburst protocol.
+- [**68**星][8m] [Shell] [baguswiratmaadi/reverie](https://github.com/baguswiratmaadi/reverie) Automated Pentest Tools Designed For Parrot Linux
+- [**68**星][4d] [Java] [auth0/auth0.android](https://github.com/auth0/auth0.android) Android toolkit for Auth0 API
+- [**68**星][3y] [C] [angelkillah/zer0m0n](https://github.com/angelkillah/zer0m0n) zer0m0n driver for cuckoo sandbox
+- [**68**星][2y] [C] [akayn/kbmon](https://github.com/akayn/kbmon) Kernel Mode, driver only, ring O, remote UDP ,windows 10, keylogger. (no data needs to be writen to disk..).
+- [**68**星][2m] [C] [aerosoul94/ida_gel](https://github.com/aerosoul94/ida_gel) A collection of IDA loaders for various game console ELF's. (PS3, PSVita, WiiU)
+- [**68**星][5y] [C++] [987432340/lcx](https://github.com/987432340/lcx) 自修改免杀lcx端口转发工具
+- [**68**星][2y] [Py] [3xp10it/xdump](https://github.com/3xp10it/xdump) Drag database with "one sentence" webshell
+- [**68**星][11m] [0xfe/hacking-stellar](https://github.com/0xfe/hacking-stellar) A hacker's guide to using the Stellar blockchain platform.
+- [**67**星][4y] [Ruby] [achillean/shodan-ruby](https://github.com/achillean/shodan-ruby) Ruby library for SHODAN
+- [**67**星][9m] [Py] [ehco1996/lazyspider](https://github.com/ehco1996/lazyspider) 爬虫的各种坑 我来填 :)
+- [**67**星][2m] [404notf0und/my-security-algorithm-architecture](https://github.com/404notf0und/my-security-algorithm-architecture) 404 Not Found的安全算法知识体系:安全、算法、安全算法(面试前必看一遍!!!)
+- [**67**星][10d] [pluwen/china-domain-whitelist](https://github.com/pluwen/china-domain-whitelist) 常用中国网站白名单,纯列表,用于 SwitchyOmega,控制不走代理的网站。
+- [**67**星][8y] [Py] [jedahan/haiku-wifi](https://github.com/jedahan/haiku-wifi) turn your wireless router's extra radios into a public billboard!
+- [**67**星][2m] [Java] [static-flow/burpsuite-team-extension](https://github.com/static-flow/burpsuite-team-extension) This Burpsuite plugin allows for multiple web app testers to share their proxy history with each other in real time. Requests that comes through your Burpsuite instance will be replicated in the history of the other testers and vice-versa!
+- [**67**星][9m] [Py] [phxbandit/scripts-and-tools](https://github.com/phxbandit/scripts-and-tools) Scripts and utilities to help your hacking needs
+- [**67**星][2y] [vysecurity/cve-2018-4878](https://github.com/vysecurity/CVE-2018-4878) Aggressor Script to launch IE driveby for CVE-2018-4878
+- [**67**星][9m] [Py] [phxbandit/scripts-and-tools](https://github.com/phxbandit/scripts-and-tools) Scripts and utilities to help your hacking needs
+- [**67**星][2m] [C] [brandonplank/rootlessjb4](https://github.com/BrandonPlank/rootlessJB4) rootlessJB that supports iOS 12.0 - 12.2 & 12.4
+- [**67**星][1y] [JS] [radareorg/radare2-webui](https://github.com/radareorg/radare2-webui) webui repository for radare2
+- [**67**星][3y] [Java] [octopus-platform/bjoern](https://github.com/octopus-platform/bjoern) Binary analysis platform based on Octopus and Radare2
+- [**67**星][2y] [shmilylty/awesome-malware-analysis](https://github.com/shmilylty/awesome-malware-analysis) A curated list of awesome malware analysis tools and resources
+- [**67**星][1y] [PHP] [xsuperbug/payloads](https://github.com/xsuperbug/payloads)
+- [**67**星][6m] [Py] [vesche/histstat](https://github.com/vesche/histstat) history for netstat
+- [**67**星][3y] [Shell] [trpt/usbdeath](https://github.com/trpt/usbdeath) anti-forensic tool that writes udev rules for known usb devices and do some things at unknown usb insertion or specific usb device removal
+- [**67**星][11m] [C++] [trailofbits/clang-cfi-showcase](https://github.com/trailofbits/clang-cfi-showcase) Sample programs that illustrate how to use control flow integrity with the clang compiler
+- [**67**星][7m] [Py] [toxydose/duckyspark](https://github.com/toxydose/duckyspark) Translator from USB-Rubber-Ducky payloads to a Digispark code.
+- [**67**星][5m] [Shell] [tasket/qubes-vpn-support](https://github.com/tasket/qubes-vpn-support) VPN configuration in Qubes OS
+- [**67**星][1y] [Py] [takeshixx/knxmap](https://github.com/takeshixx/knxmap) KNXnet/IP scanning and auditing tool for KNX home automation installations.
+- [**67**星][4y] [C#] [stphivos/rat-shell](https://github.com/stphivos/rat-shell) Windows Remote Access Trojan (RAT)
+- [**67**星][5y] [Java] [ssexxe/xxebugfind](https://github.com/ssexxe/xxebugfind) A tool for detecting XML External Entity (XXE) vulnerabilities in Java applications
+- [**67**星][2y] [Java] [sola-da/synode](https://github.com/sola-da/synode) Automatically Preventing Code Injection Attacks on Node.js
+- [**67**星][8m] [JS] [sindresorhus/debounce-fn](https://github.com/sindresorhus/debounce-fn) Debounce a function
+- [**67**星][3y] [Py] [secwiki/vulscritp](https://github.com/secwiki/vulscritp) 内网渗透脚本
+- [**67**星][1m] [Py] [s1egesystems/ghostdelivery](https://github.com/s1egesystems/ghostdelivery) .vbs script to deliver payload with persistence.
+- [**67**星][9m] [YARA] [rootkiter/binary-files](https://github.com/rootkiter/binary-files) EarthWorm/Termite 停止更新
+- [**67**星][4y] [Py] [robbyfux/ragpicker](https://github.com/robbyfux/ragpicker) Ragpicker is a Plugin based malware crawler with pre-analysis and reporting functionalities. Use this tool if you are testing antivirus products, collecting malware for another analyzer/zoo.
+- [**67**星][1m] [retme7/my-slides](https://github.com/retme7/my-slides) My slides
+- [**67**星][3y] [JS] [pythonran/pcap_tools](https://github.com/pythonran/pcap_tools) 网络流量可配置嗅探,流量包解析,漏洞规则扫描,生成报告. ....搞网络安全这块,还凑合着用吧
+- [**67**星][3d] [Ruby] [puppetlabs/puppetlabs-inifile](https://github.com/puppetlabs/puppetlabs-inifile) Resource types for managing settings in INI files
+- [**67**星][6y] [PHP] [pshep/anubis](https://github.com/pshep/anubis) Web front-end (api interface) to CGMINER
+- [**67**星][4m] [Py] [pjialin/pyproxy-async](https://github.com/pjialin/pyproxy-async) 基于 Python Asyncio + Redis 实现的代理池
+- [**67**星][1y] [C++] [oyyd/nysocks](https://github.com/oyyd/nysocks) Nysocks binds kcp and libuv to provide an aggressive tcp tunnel in nodejs.
+- [**67**星][6m] [Py] [orleven/tentacle](https://github.com/orleven/tentacle) Tentacle is a POC vulnerability verification and exploit framework. It supports free extension of exploits and uses POC scripts. It supports calls to zoomeye, fofa, shodan and other APIs to perform bulk vulnerability verification for multiple targets.
+- [**67**星][2m] [Java] [netspi/burpcollaboratordnstunnel](https://github.com/netspi/burpcollaboratordnstunnel) A DNS tunnel utilizing the Burp Collaborator
+- [**67**星][9m] [Go] [mozilla/audit-go](https://github.com/mozilla/audit-go) Linux Audit Plugin for heka written using netlink Protocol in golang and Lua
+- [**67**星][4y] [C] [microwave89/rtsectiontest](https://github.com/microwave89/rtsectiontest) An Attempt to Bypass Memory Scanners By Misusing the ntdll.dll "RT" Section.
+- [**67**星][5y] [C] [malwaretech/basichook](https://github.com/malwaretech/basichook) x86 Inline hooking engine (using trampolines)
+- [**67**星][4y] [C] [luigirizzo/netmap-libpcap](https://github.com/luigirizzo/netmap-libpcap) Automatically exported from code.google.com/p/netmap-libpcap
+- [**67**星][12m] [Py] [lucasg/idamagnum](https://github.com/lucasg/idamagnum) 在IDA中向MagnumDB发起请求, 查询枚举常量可能的值
+- [**67**星][2y] [Go] [lubyruffy/tcptunnel](https://github.com/lubyruffy/tcptunnel) 将本地内网服务器映射到公网。
+- [**67**星][2y] [C++] [leeqwind/holicpoc](https://github.com/leeqwind/holicpoc) POC and exploitation of vulnerabilities
+- [**67**星][2y] [Swift] [ktakayama/notificationcrash](https://github.com/ktakayama/notificationcrash)
+- [**67**星][18d] [C++] [jaegertracing/jaeger-client-cpp](https://github.com/jaegertracing/jaeger-client-cpp) C++ OpenTracing binding for Jaeger
+- [**67**星][1m] [YARA] [itayc0hen/apt-ecosystem](https://github.com/itayc0hen/apt-ecosystem) This repository contains the website and the tools which are part of the joint research between Check Point Research and Intezer to map the connections inside the APT Ecosystem of Russia.
+- [**67**星][2y] [ObjC] [iscanner/iscanner_ios](https://github.com/iscanner/iscanner_ios) An easy-to-use scanner app for iOS.
+- [**67**星][1y] [PHP] [irelance/jsc-decompile-mozjs-34](https://github.com/irelance/jsc-decompile-mozjs-34) A javascript bytecode decoder for mozilla spider-monkey version 34. May decompile jsc file compile by cocos-2dx
+- [**67**星][2y] [Py] [hlldz/wildpwn](https://github.com/hlldz/wildpwn) Brute forcer and shell deployer for WildFly
+- [**67**星][6m] [Ruby] [hercules-team/augeasproviders](https://github.com/hercules-team/augeasproviders) Alternative Augeas-based providers for Puppet
+- [**67**星][3y] [Py] [harmj0y/impdump](https://github.com/harmj0y/impdump) This is a simple parser for/decrypter for Impacket's esentutl.py utility. It assists with decrypting hashes and hash histories from ntds.dit databases.
+- [**67**星][8m] [Py] [grayddq/publicsecscan](https://github.com/grayddq/publicsecscan) 针对大量WEB资产进行分布式WEB安全扫描,发现web环境下常规的一些安全漏洞
+- [**67**星][5d] [Java] [gmu-swe/phosphor](https://github.com/gmu-swe/phosphor) Phosphor: Dynamic Taint Tracking for the JVM
+- [**67**星][4m] [Go] [gen0cide/laforge](https://github.com/gen0cide/laforge) Competition Infrastructure Management
+- [**67**星][5y] [C] [gabrtv/shocker](https://github.com/gabrtv/shocker) Shocker / Docker Breakout PoC
+- [**67**星][2d] [Shell] [f5networks/f5-azure-arm-templates](https://github.com/f5networks/f5-azure-arm-templates) Azure Resource Manager Templates for quickly deploying BIG-IP services in Azure
+- [**67**星][7m] [JS] [exodusintel/cve-2019-0808](https://github.com/exodusintel/cve-2019-0808) Win32k Exploit by Grant Willcox
+- [**67**星][2m] [doctorwebltd/malware-iocs](https://github.com/doctorwebltd/malware-iocs)
+- [**67**星][10m] [dkhuuthe/madlira](https://github.com/dkhuuthe/madlira) Malware detection using learning and information retrieval for Android
+- [**67**星][6m] [Py] [deptofdefense/salsa](https://github.com/deptofdefense/salsa) Salvaging Static Analysis
+- [**67**星][2y] [Py] [debasishm89/openxmolar](https://github.com/debasishm89/openxmolar) A MS OpenXML Format Fuzzing Framework
+- [**67**星][2m] [HTML] [deadlyelder/tools-for-cryptanalysis](https://github.com/deadlyelder/tools-for-cryptanalysis) A repository that aims to provide tools for cryptography and cryptanalysis
+- [**67**星][1y] [Nix] [dapphub/ds-math](https://github.com/dapphub/ds-math) Safe arithmetic
+- [**67**星][8d] [Py] [cyboxproject/python-cybox](https://github.com/cyboxproject/python-cybox) A Python library for parsing, manipulating, and generating CybOX content.
+- [**67**星][1y] [C++] [codewhitesec/unmarshalpwn](https://github.com/codewhitesec/unmarshalpwn) POC for CVE-2018-0824
+- [**67**星][4m] [C#] [codedx/codepulse](https://github.com/codedx/codepulse) Code Pulse is a real-time code coverage tool for penetration testing activities
+- [**67**星][1y] [C#] [cobbr/sharpshell](https://github.com/cobbr/sharpshell) SharpShell is a proof-of-concept offensive C# scripting engine that utilizes the Rosyln C# compiler to quickly cross-compile .NET Framework console applications or libraries.
+- [**67**星][1m] [chef-koch/projectx](https://github.com/chef-koch/projectx) DarkWeb Overview
+- [**67**星][2m] [C++] [changeofpace/mouclassinputinjection](https://github.com/changeofpace/mouclassinputinjection) MouClassInputInjection implements a kernel interface for injecting mouse input data packets into the input data stream of HID USB mouse devices.
+- [**67**星][4y] [Py] [byt3bl33d3r/beef-api](https://github.com/byt3bl33d3r/beef-api) Python library that facilitates interfacing with BeEF via it's RESTful API
+- [**67**星][3y] [JS] [bitsofinfo/stateful-process-command-proxy](https://github.com/bitsofinfo/stateful-process-command-proxy) node.js module for executing os commands against a pool of stateful child processes such as bash or powershell via stdout and stderr streams
+- [**67**星][3m] [Shell] [bgeesaman/kube-env-stealer](https://github.com/bgeesaman/kube-env-stealer) Automated GKE Kubelet Impersonation and Cluster Secret Stealer via kube-env
+- [**67**星][2y] [Py] [azizaltuntas/pymap-scanner](https://github.com/azizaltuntas/pymap-scanner)
+- [**67**星][2y] [Makefile] [adamdoupe/ctf-training](https://github.com/adamdoupe/ctf-training)
+- [**67**星][2y] [abazhaniuk/publications](https://github.com/abazhaniuk/publications) Slides, Papers, Links to CVEs and advisories
+- [**67**星][1y] [Py] [3xp10it/xwifi](https://github.com/3xp10it/xwifi) Auto crack wifi in macOS
+- [**67**星][1y] [C++] [3gstudent/use-com-objects-to-bypass-uac](https://github.com/3gstudent/use-com-objects-to-bypass-uac)
+- [**67**星][1y] [Go] [003random/getjs](https://github.com/003random/getjs) A tool to fastly get all javascript sources/files
+- [**66**星][t] [Go] [mvdan/garble](https://github.com/mvdan/garble) Obfuscate Go builds
+- [**66**星][3y] [C] [shellphish/driller-afl](https://github.com/shellphish/driller-afl) A version of AFL tailored for Driller's use in analyzing CGC binaries.
+- [**66**星][3y] [Py] [gojhonny/pentesting-scripts](https://github.com/gojhonny/pentesting-scripts) Useful pentesting scripts
+- [**66**星][3y] [jipegit/irnotes](https://github.com/jipegit/irnotes) Some IR notes
+- [**66**星][6m] [Hack] [defuse/crackstation](https://github.com/defuse/crackstation) Source code for my crackstation.net website.
+- [**66**星][5m] [splunk/ta-microsoft-sysmon](https://github.com/splunk/ta-microsoft-sysmon) TA-microsoft-sysmon
+- [**66**星][10d] [Rust] [io12/pwninit](https://github.com/io12/pwninit) pwninit - automate starting binary exploit challenges
+- [**66**星][14d] [C++] [moemod/csmoe](https://github.com/moemod/csmoe) Cross-platform Counter-Strike mod based on Xash3D (previously named CSBTE-Mobile)
+- [**66**星][3y] [JS] [ethjs/ethjs-provider-signer](https://github.com/ethjs/ethjs-provider-signer) A simple web3 standard provider that signs eth_sendTransaction payloads.
+- [**66**星][1y] [Py] [angelkitty/bilibili-smallvideo](https://github.com/angelkitty/bilibili-smallvideo)
+- [**66**星][2m] [Py] [chris-rands/emojify](https://github.com/chris-rands/emojify) Obfuscate your python script by converting it to emoji icons
+- [**66**星][12m] [HTML] [zadewg/livebox-0day](https://github.com/zadewg/livebox-0day) Arcadyan ARV7519RW22-A-L T VR9 1.2 Multiple security vulnerabilities affecting latest firmware release on ORANGE Livebox modems.
+- [**66**星][5y] [Assembly] [yifanlu/spider3dstools](https://github.com/yifanlu/spider3dstools) Tools to work with 3DS 9.x Spider exploit
+- [**66**星][10m] [Py] [yelp/parcelgen](https://github.com/yelp/parcelgen) Helpful tool to make data objects easier for Android
+- [**66**星][3y] [xnymia/suricata-signatures](https://github.com/xnymia/suricata-signatures) Suricata rules for Emerging Threats and funkyness
+- [**66**星][6m] [Ruby] [weppos/whois-parser](https://github.com/weppos/whois-parser) An intelligent — pure Ruby — WHOIS parser.
+- [**66**星][4y] [C] [wekillpeople/browser-dumpwd](https://github.com/wekillpeople/browser-dumpwd) Dump browser passwords(chrome, firefox) with sqlite3 lib.
+- [**66**星][8m] [JS] [webxscan/linux_rat](https://github.com/webxscan/linux_rat) LINUX集群控制(LINUX反弹式远控) LINUX反向链接运维 BY:QQ:879301117
+- [**66**星][8m] [Visual Basic .NET] [visualbasic6/chatter](https://github.com/visualbasic6/chatter) internet monitoring osint tool for windows
+- [**66**星][6m] [Shell] [violentlydave/mkhtaccess_red](https://github.com/violentlydave/mkhtaccess_red) Auto-generate an HTaccess for payload delivery -- automatically pulls ips/nets/etc from known sandbox companies/sources that have been seen before, and redirects them to a benign payload.
+- [**66**星][9d] [Rust] [trailofbits/siderophile](https://github.com/trailofbits/siderophile) Find the ideal fuzz targets in a Rust codebase
+- [**66**星][2y] [Shell] [thestr4ng3r/arcore-patch](https://github.com/thestr4ng3r/arcore-patch) Attempt to get ARCore Preview 2 running on unsupported devices
+- [**66**星][8y] [JS] [therook/csrf-request-builder](https://github.com/therook/csrf-request-builder)
+- [**66**星][3y] [Py] [syss-research/nrf24-playset](https://github.com/syss-research/nrf24-playset) Software tools for Nordic Semiconductor nRF24-based devices like wireless keyboards, mice, and presenters
+- [**66**星][17d] [C] [seanheelan/heaplayout](https://github.com/seanheelan/heaplayout) Source code for paper 'Automatic Heap Layout Manipulation for Exploitation'
+- [**66**星][3y] [Assembly] [scorchsecurity/systorm](https://github.com/scorchsecurity/systorm) NASM Standard Library for shellcode
+- [**66**星][2y] [Py] [sapir/sonare](https://github.com/sapir/sonare) A Qt-based disassembly viewer based on radare2
+- [**66**星][25d] [PS] [samratashok/deploy-deception](https://github.com/samratashok/deploy-deception) A PowerShell module to deploy active directory decoy objects.
+- [**66**星][2y] [Lua] [s4n7h0/nse](https://github.com/s4n7h0/nse) Some of my work on Nmap Scripts (NSE)
+- [**66**星][5y] [C++] [rwfpl/rewolf-dllpackager](https://github.com/rwfpl/rewolf-dllpackager) Simple tool to bundle windows DLLs with PE executable
+- [**66**星][1m] [Py] [remg427/misp42splunk](https://github.com/remg427/misp42splunk) A Splunk app to use MISP in background
+- [**66**星][12m] [Py] [r3vn/punk.py](https://github.com/r3vn/punk.py) unix SSH post-exploitation 1337 tool
+- [**66**星][1y] [Java] [pyn3rd/cve-2018-3252](https://github.com/pyn3rd/cve-2018-3252) CVE-2018-3252-PoC
+- [**66**星][2y] [C] [pvachon/tsl-sdr](https://github.com/pvachon/tsl-sdr) Software Defined Radio Demodulation and Decoding Tools
+- [**66**星][1y] [Py] [pure-l0g1c/hyprpulse](https://github.com/pure-l0g1c/hyprpulse) Brute force multiple accounts at once
+- [**66**星][8m] [JS] [plazmaz/mongodb-honeyproxy](https://github.com/plazmaz/mongodb-honeyproxy) A honeypot proxy for mongodb. When run, this will proxy and log all traffic to a dummy mongodb server.
+- [**66**星][3y] [oj/bsides-2017-ctf-docker](https://github.com/oj/bsides-2017-ctf-docker) BSidesCBR CTF docker compose files
+- [**66**星][3y] [C++] [nmgwddj/learn-windows-drivers](https://github.com/nmgwddj/learn-windows-drivers) Windows drivers 开发的各个基础示例,包含进程、内存、注册表、回调等管理
+- [**66**星][15d] [Ruby] [ninoseki/miteru](https://github.com/ninoseki/miteru) An experimental phishing kit detection tool
+- [**66**星][1y] [C++] [nickcano/relocbonus](https://github.com/nickcano/relocbonus) An obfuscation tool for Windows which instruments the Windows Loader into acting as an unpacking engine.
+- [**66**星][11m] [Py] [necst/crave](https://github.com/necst/crave) crave: 自动测试和探索通用AV引擎功能的框架
+- [**66**星][1y] [JS] [nccgroup/goatcasino](https://github.com/nccgroup/goatcasino) This is an intentionally vulnerable smart contract truffle deployment aimed at allowing those interested in smart contract security to exploit a wide variety of issues in a safe environment.
+- [**66**星][1y] [Go] [mmcloughlin/pearl](https://github.com/mmcloughlin/pearl) Tor relay implementation in Golang
+- [**66**星][2y] [Py] [martinoj2009/icmpexfil](https://github.com/martinoj2009/icmpexfil) Exfiltrate data with ICMP
+- [**66**星][6m] [Py] [marcobellaccini/pyaescrypt](https://github.com/marcobellaccini/pyaescrypt) A Python 3 module and script that uses AES256-CBC to encrypt/decrypt files and streams in AES Crypt file format (version 2).
+- [**66**星][2m] [C#] [maraudershell/marauder](https://github.com/maraudershell/marauder) A .NET agent for the Faction C2 Framework
+- [**66**星][10m] [HCL] [mantvydasb/red-team-infrastructure-automation](https://github.com/mantvydasb/red-team-infrastructure-automation) Disposable and resilient red team infrastructure with Terraform
+- [**66**星][2y] [Java] [lovejj1994/simplify-core](https://github.com/lovejj1994/simplify-core) Simplify 为简化重复的JAVA代码而生,基于JDK8,无其它jar包依赖,提供序列化,json parse/generator,日期处理,asm && jdkproxy 实现动态代理功能 等常见操作。
+- [**66**星][3y] [C] [librecore-org/librecore](https://github.com/librecore-org/librecore)
+- [**66**星][15d] [Java] [lianglixin/sandvxposed](https://github.com/lianglixin/sandvxposed) Xposed environment without root (OS 5.0 - 10.0)
+- [**66**星][20d] [Py] [ledgerhq/blue-loader-python](https://github.com/ledgerhq/blue-loader-python) Python Loader for Ledger Blue and Nano S
+- [**66**星][4y] [Py] [jpsenior/threataggregator](https://github.com/jpsenior/threataggregator) Aggregates security threats from a number of online sources, and outputs to Syslog CEF, Snort Signatures, Iptables rules, hosts.deny, etc.
+- [**66**星][2y] [PHP] [josecl/cool-php-captcha](https://github.com/josecl/cool-php-captcha) This is the official GitHub project from code.google.com/p/cool-php-captcha
+- [**66**星][3y] [Py] [jgamblin/badactors](https://github.com/jgamblin/badactors) Create a list of bad actors from public IP blacklist.
+- [**66**星][10m] [Java] [javabeanz/owasp-security-logging](https://github.com/javabeanz/owasp-security-logging) OWASP Security Logging library for Java
+- [**66**星][6m] [C++] [invictus1306/functrace](https://github.com/invictus1306/functrace) A function tracer
+- [**66**星][4y] [JS] [indeedops/shadowbuster](https://github.com/indeedops/shadowbuster)
+- [**66**星][7m] [C] [hc0d3r/sshd-poison](https://github.com/hc0d3r/sshd-poison) a tool to get creds of pam based sshd authentication
+- [**66**星][28d] [Assembly] [hardenedlinux/firmware-anatomy](https://github.com/hardenedlinux/firmware-anatomy) Tear the firmware apart with your bare hands;-)
+- [**66**星][2d] [Go] [google/gonids](https://github.com/google/gonids) gonids is a library to parse IDS rules, with a focus primarily on Suricata rule compatibility. There is a discussion forum available that you can join on Google Groups:
+- [**66**星][2y] [Py] [fossfreedom/coverart-browser](https://github.com/fossfreedom/coverart-browser) Browse your cover-art albums in Rhythmbox v2.96 - 3.0+
+- [**66**星][2y] [Py] [firefart/cve-2018-7600](https://github.com/firefart/cve-2018-7600) CVE-2018-7600 - Drupal 7.x RCE
+- [**66**星][4y] [JS] [etherdream/mitm-http-cache-poisoning](https://github.com/etherdream/mitm-http-cache-poisoning) HTTP Cache Poisoning Demo
+- [**66**星][4y] [PS] [dlwyatt/protecteddata](https://github.com/dlwyatt/protecteddata) PowerShell Module for securely encrypting and sharing secret data such as passwords.
+- [**66**星][8m] [C] [dimopouloselias/simpleshellcodeinjector](https://github.com/dimopouloselias/simpleshellcodeinjector) SimpleShellcodeInjector receives as an argument a shellcode in hex and executes it. It DOES NOT inject the shellcode in a third party application.
+- [**66**星][2m] [davidfowl/windbgcheatsheet](https://github.com/davidfowl/windbgcheatsheet) This is a cheat sheet for windbg
+- [**66**星][3y] [Eagle] [dangrie158/esptool](https://github.com/dangrie158/esptool)
+- [**66**星][3m] [HTML] [cytoscape/cytoscape.js-cose-bilkent](https://github.com/cytoscape/cytoscape.js-cose-bilkent) The CoSE layout for Cytoscape.js by Bilkent with enhanced compound node placement.
+- [**66**星][3y] [Py] [crange/crange](https://github.com/crange/crange) Crange is a tool to index and cross-reference C/C++ source code
+- [**66**星][5m] [Batchfile] [cornerpirate/reportcompiler](https://github.com/cornerpirate/reportcompiler) A tool for importing vulnerability scanner data and then allowing you to manipulate the risks, affected hosts, and create risk ordered output.
+- [**66**星][3y] [Py] [claudioviviani/ms17-010-m4ss-sc4nn3r](https://github.com/claudioviviani/ms17-010-m4ss-sc4nn3r) MS17-010 multithreading scanner written in python.
+- [**66**星][3y] [Py] [circl/cve-portal](https://github.com/circl/cve-portal) Common Vulnerabilities and Exposures - Portal
+- [**66**星][2y] [Py] [christophetd/firepwned](https://github.com/christophetd/firepwned)
+- [**66**星][7y] [C] [chokepoint/jynx2](https://github.com/chokepoint/jynx2) JynxKit2 is an LD_PRELOAD userland rootkit based on the original JynxKit. The backdoor has been replaced with an "accept()" system hook.
+- [**66**星][3y] [Py] [bwall/ssdc](https://github.com/bwall/ssdc) ssdeep based clustering tool
+- [**66**星][1m] [Shell] [brainfucksec/archtorify](https://github.com/brainfucksec/archtorify) Transparent proxy through Tor for Arch Linux OS
+- [**66**星][9m] [Java] [bolexliu/apptrack](https://github.com/bolexliu/apptrack) Xposed HookAPP逆向跟踪工具,跟踪Activity与Fragment启动信息等
+- [**66**星][3y] [Py] [bear/s3scan](https://github.com/bear/s3scan) scan s3 buckets for security issues
+- [**66**星][2y] [avast-tl/capstone2llvmir](https://github.com/avast-tl/capstone2llvmir) capstone2llvmir: 将Capstone 指令转化为 LLVM IR
+- [**66**星][6y] [atimorin/poc2013](https://github.com/atimorin/poc2013) Power of Community 2013 conference special release of ICS/SCADA toolkit
+- [**66**星][1m] [Shell] [ankh2054/linux-pentest](https://github.com/ankh2054/linux-pentest) Linux pentest tools
+- [**66**星][5y] [C] [akamajoris/php-extension-backdoor](https://github.com/akamajoris/php-extension-backdoor) Simple php backdoor based on extension
+- [**66**星][5y] [Py] [ajinabraham/xenotix-apk-reverser](https://github.com/ajinabraham/xenotix-apk-reverser) Xenotix APK Reverser is an OpenSource Android Application Package (APK) decompiler and disassembler powered by dex2jar, baksmali and jd-core.
+- [**66**星][4m] [Go] [0xrawsec/gene](https://github.com/0xrawsec/gene) Signature Engine for Windows Event Logs
+- [**66**星][4y] [C] [0xabu/qemu](https://github.com/0xabu/qemu) OLD qemu with Raspberry Pi 2 and Windows on ARM support. Retained for reference purposes only -- most of this has been merged upstream.
+- [**66**星][11m] [C] [0x36/cve-pocs](https://github.com/0x36/cve-pocs) This repo contains some of my vuln research findings
+- [**65**星][3y] [Ruby] [p3nt4/metasploit-modules](https://github.com/p3nt4/metasploit-modules) Collection of metasploit modules
+- [**65**星][5y] [ObjC] [project-imas/memory-security](https://github.com/project-imas/memory-security) Tools for securely clearing and validating iOS application memory
+- [**65**星][3y] [zhengmin1989/ios-10-decrypted-kernel-cache](https://github.com/zhengmin1989/ios-10-decrypted-kernel-cache) iOS 10 Decrypted Kernel Cache
+- [**65**星][4m] [C] [jtesta/rainbowcrackalack](https://github.com/jtesta/rainbowcrackalack) Rainbow table generation & lookup tools. Make Rainbow Tables Great Again!
+- [**65**星][26d] [Py] [cve-search/git-vuln-finder](https://github.com/cve-search/git-vuln-finder) Finding potential software vulnerabilities from git commit messages
+- [**65**星][1m] [Py] [nccgroup/gtfoblookup](https://github.com/nccgroup/gtfoblookup) Offline command line lookup utility for GTFOBins (
+- [**65**星][7m] [Py] [s0md3v/shiva](https://github.com/s0md3v/Shiva) Improved DOS exploit for wordpress websites (CVE-2018-6389)
+- [**65**星][8y] [C] [robclemons/arpspoof](https://github.com/robclemons/Arpspoof) Android port of Arpspoof
+- [**65**星][3y] [Py] [plantdaddy/fuzzap](https://github.com/PlantDaddy/FuzzAP) A python script for obfuscating wireless networks
+- [**65**星][2y] [C++] [jocover/openusrp](https://github.com/jocover/OpenUSRP) using LimeSDR to simulate USRP B210
+- [**65**星][4y] [Py] [nsacyber/splunk-assessment-of-mitigation-implementations](https://github.com/nsacyber/Splunk-Assessment-of-Mitigation-Implementations) Automatically scores how well Windows systems have implemented some of the top 10 Information Assurance mitigation strategies. #nsacyber
+- [**65**星][28d] [Py] [hatching/httpreplay](https://github.com/hatching/httpreplay) Replay HTTP and HTTPS requests from a PCAP based on TLS Master Secrets.
+- [**65**星][5y] [Py] [adamlaurie/hdmi-sniff](https://github.com/AdamLaurie/hdmi-sniff) sniff HDMI DDC (I2C) traffic
+- [**65**星][2y] [Java] [fsecurelabs/drozer-agent](https://github.com/FSecureLABS/drozer-agent) The Android Agent for the Mercury Security Assessment Framework.
+- [**65**星][1m] [Java] [lmax-exchange/disruptor-proxy](https://github.com/LMAX-Exchange/disruptor-proxy) Byte-code generator to create Disruptor-backed proxies
+- [**65**星][3y] [ObjC] [zhengmin1989/yalu102](https://github.com/zhengmin1989/yalu102) incomplete iOS 10.2 jailbreak for 64 bit devices by qwertyoruiopz and marcograssi
+- [**65**星][3y] [C] [zer0mem0ry/kernelreadwritememory](https://github.com/zer0mem0ry/kernelreadwritememory) Simple code to manipulate the memory of a usermode process from kernel.
+- [**65**星][6m] [Py] [yelp/osxcollector_output_filters](https://github.com/yelp/osxcollector_output_filters) Filters that process and transform the output of osxcollector
+- [**65**星][11m] [Py] [we45/dvfaas-damn-vulnerable-functions-as-a-service](https://github.com/we45/dvfaas-damn-vulnerable-functions-as-a-service) Intentionally Vulnerable Serverless Functions to understand the specifics of Serverless Security Vulnerabilities
+- [**65**星][2y] [Py] [wazehell/cve-2018-6389](https://github.com/wazehell/cve-2018-6389) CVE-2018-6389 Exploit In WordPress DoS
+- [**65**星][5m] [QML] [turanmahmudov/instagraph](https://github.com/turanmahmudov/instagraph) Unofficial Instagram Client
+- [**65**星][6y] [C++] [trevd/android_root](https://github.com/trevd/android_root) Got Root!
+- [**65**星][2y] [Py] [temesgeny/ppsx-file-generator](https://github.com/temesgeny/ppsx-file-generator) ppsx file generator for cve-2017-8570 (based on bhdresh/cve-2017-8570)
+- [**65**星][2y] [Py] [tbarabosch/quincy](https://github.com/tbarabosch/quincy) 在内存转储中检测基于主机的代码注入攻击
+- [**65**星][2y] [Py] [switchbrew/nx-hbexploit300-obf](https://github.com/switchbrew/nx-hbexploit300-obf) Homebrew exploit for 3.0.0
+- [**65**星][3y] [C++] [soarlab/maline](https://github.com/soarlab/maline) Android Malware Detection Framework
+- [**65**星][2y] [JS] [smarttang/sosrp](https://github.com/smarttang/sosrp) SOSRP Security 安全平台
+- [**65**星][3m] [JS] [sergejmueller/wpcheck](https://github.com/sergejmueller/wpcheck) Vulnerability scanner for WordPress based on Node.js
+- [**65**星][2y] [HTML] [secwiki/ipot](https://github.com/secwiki/ipot) Honeypot Research Blog 蜜罐技术研究小组
+- [**65**星][3y] [Py] [scipag/btle-sniffer](https://github.com/scipag/btle-sniffer) Passively scan for Bluetooth Low Energy devices and attempt to fingerprint them
+- [**65**星][1y] [Shell] [samhaxr/takeover-v1](https://github.com/samhaxr/takeover-v1) Takeover script extracts CNAME record of all subdomains at once. TakeOver saves researcher time and increase the chance of finding subdomain takeover vulnerability.
+- [**65**星][4m] [Rust] [rust-fuzz/targets](https://github.com/rust-fuzz/targets)
+- [**65**星][4m] [Shell] [rfxn/advanced-policy-firewall](https://github.com/rfxn/advanced-policy-firewall) advanced-policy-firewall:高级版策略防火墙
+- [**65**星][3y] [redhatproductsecurity/cve-howto](https://github.com/redhatproductsecurity/cve-howto) CVE assignment documentation
+- [**65**星][3m] [HTML] [project-prismatica/prismatica](https://github.com/project-prismatica/prismatica) Responsive Command and Control System
+- [**65**星][6m] [Java] [portswigger/command-injection-attacker](https://github.com/portswigger/command-injection-attacker) SHELLING - a comprehensive OS command injection payload generator
+- [**65**星][5m] [Py] [passivetotal/python_api](https://github.com/passivetotal/python_api) Python abstract API for PassiveTotal services in the form of libraries and command line utilities.
+- [**65**星][1y] [C#] [parsingteam/teleshadow2](https://github.com/parsingteam/teleshadow2) TeleShadow - Telegram Desktop Session Stealer (Windows)
+- [**65**星][5y] [Shell] [pansen/macos-sandbox-profiles](https://github.com/pansen/macos-sandbox-profiles) sandbox files for some applications running on osx for more security
+- [**65**星][2y] [Py] [ojasookert/cve-2017-0781](https://github.com/ojasookert/cve-2017-0781) Blueborne CVE-2017-0781 Android heap overflow vulnerability
+- [**65**星][2y] [C++] [not-wlan/driver-hijack](https://github.com/not-wlan/driver-hijack)
+- [**65**星][11m] [YARA] [nheijmans/malzoo](https://github.com/nheijmans/malzoo) Mass static malware analysis tool
+- [**65**星][12m] [Py] [naivenom/reversing-list](https://github.com/naivenom/reversing-list) Reversing list
+- [**65**星][11m] [HTML] [mtesauro/owasp-wte](https://github.com/mtesauro/owasp-wte) Home of the developement for OWASP WTE - the Web Testing Environment, a collection of pre-packaged Linux AppSec tools, apps and documentation used to create pre-configured VMs or installed ala carte in the Linux of your choice..
+- [**65**星][2d] [TSQL] [mitchellkrogza/the-big-list-of-hacked-malware-web-sites](https://github.com/mitchellkrogza/the-big-list-of-hacked-malware-web-sites) This repository contains a list of all web sites I come across that are either hacked with or purposefully hosting malware, ransomware, viruses or trojans.
+- [**65**星][7m] [Gherkin] [minishift/minishift-addons](https://github.com/minishift/minishift-addons) A repository for the community to exchange Minishift add-ons
+- [**65**星][4m] [Py] [mcdallas/cryptotools](https://github.com/mcdallas/cryptotools)
+- [**65**星][2y] [Py] [markclayton/bumpster](https://github.com/markclayton/bumpster) The Unofficial Burp Extension for DNSDumpster.com
+- [**65**星][3y] [C++] [m000/dtracker](https://github.com/m000/dtracker) DataTracker: A Pin tool for collecting high-fidelity data provenance from unmodified programs.
+- [**65**星][1y] [Py] [lukebaggett/google_socks](https://github.com/lukebaggett/google_socks) A proof of concept demonstrating the use of Google Drive for command and control.
+- [**65**星][3y] [lcamry/sqli-labs](https://github.com/lcamry/sqli-labs) sqli-labs中文使用手册,详细讲解了mysql注入的各种手段。
+- [**65**星][10d] [Go] [lair-framework/go-nmap](https://github.com/lair-framework/go-nmap) Nmap XML parsing library for Go
+- [**65**星][2y] [HTML] [jianmou/vulnctf](https://github.com/jianmou/vulnctf) MiniProject_VulnCTF | A CTF practice environment that links Dockerhub through Github
+- [**65**星][5m] [Py] [integeruser/on-pwning](https://github.com/integeruser/on-pwning) My solutions to some CTF challenges and a list of interesting resources about pwning stuff
+- [**65**星][1y] [Py] [immunit/xip](https://github.com/immunit/xip) XIP generates a list of IP addresses by applying a set of transformations used to bypass security measures e.g. blacklist filtering, WAF, etc.
+- [**65**星][2y] [Java] [realbearcat/s2-055](https://github.com/RealBearcat/S2-055) S2-055 反序列化 CVE-2017-7525
+- [**65**星][1y] [Jupyter Notebook] [hmishra2250/botnet-detection-using-machine-learning](https://github.com/hmishra2250/botnet-detection-using-machine-learning) Repository of Bachelor's Major Project on Botnet Detection
+- [**65**星][5y] [Py] [hikerell/bfuzzer](https://github.com/hikerell/bfuzzer) A Browser Fuzzer for Vulnerbilities
+- [**65**星][8m] [Dockerfile] [hangim/kcp-shadowsocks-docker](https://github.com/hangim/kcp-shadowsocks-docker) A docker image for shadowsocks server with KCPTUN support
+- [**65**星][2y] [Java] [hackthelegacy/hack400tool](https://github.com/hackthelegacy/hack400tool) hack400tool:IBM 电源系统安全处理工具
+- [**65**星][5y] [Java] [guardianproject/trustedintents](https://github.com/guardianproject/trustedintents) library for flexible trusted interactions between Android apps
+- [**65**星][4m] [Py] [greenwolf/social_attacker](https://github.com/greenwolf/social_attacker) An Open Source Multi Site Automated Social Media Phishing Framework
+- [**65**星][30d] [C] [gpg/libgcrypt](https://github.com/gpg/libgcrypt) The GNU crypto library
+- [**65**星][4y] [Py] [funoverip/mcafee-sitelist-pwd-decryption](https://github.com/funoverip/mcafee-sitelist-pwd-decryption) Password decryption tool for the McAfee SiteList.xml file
+- [**65**星][4y] [PHP] [fakhrizulkifli/defeating-php-gd-imagecreatefromjpeg](https://github.com/fakhrizulkifli/defeating-php-gd-imagecreatefromjpeg) Proof-of-concept to exploit the flaw in the PHP-GD built-in function, imagecreatefromjpeg()
+- [**65**星][5m] [JS] [exposejs/expose](https://github.com/exposejs/expose) A Dynamic Symbolic Execution (DSE) engine for JavaScript
+- [**65**星][2y] [Py] [daniestevez/free-outernet](https://github.com/daniestevez/free-outernet) Free Software Outernet receiver
+- [**65**星][3m] [Py] [d3vzer0/reternal-quickstart](https://github.com/d3vzer0/reternal-quickstart) Repo containing docker-compose files and setup scripts without having to clone the individual reternal components
+- [**65**星][3y] [PHP] [cymmetria/strutshoneypot](https://github.com/cymmetria/strutshoneypot) Struts Apache 2 based honeypot as well as a detection module for Apache 2 servers
+- [**65**星][1y] [Py] [cryptax/dextools](https://github.com/cryptax/dextools) Miscellaenous DEX (Dalvik Executable) tools
+- [**65**星][1y] [Py] [ch3k1/squidmagic](https://github.com/ch3k1/squidmagic) analyze a web-based network traffic
+- [**65**星][1y] [Py] [cerbo/aws-waf-security-automation](https://github.com/cerbo/aws-waf-security-automation) Amazon WAF Security Automation deployment (modular with Terraform)
+- [**65**星][2y] [Shell] [bluscreenofjeff/ccdc-scripts](https://github.com/bluscreenofjeff/ccdc-scripts) Scripts and resources for Red Teaming at CCDC competitions
+- [**65**星][19d] [Visual Basic .NET] [blackhacker511/blackworm](https://github.com/blackhacker511/blackworm) Black Worm Offical Repo
+- [**65**星][2m] [Py] [blackarch/sploitctl](https://github.com/blackarch/sploitctl) Fetch, install and search exploit archives from exploit sites.
+- [**65**星][1y] [Lua] [beaujeant/pwnadventure3](https://github.com/beaujeant/pwnadventure3) Resources for the Pwn Adventure 3 challenges from GITS'15 (
+- [**65**星][2y] [Lua] [bastilleresearch/cabletap](https://github.com/bastilleresearch/cabletap) CableTap public disclosure documents.
+- [**65**星][4y] [C] [basil00/pseudonode](https://github.com/basil00/pseudonode) PseudoNode - A full node emulator.
+- [**65**星][6y] [Py] [anbc/andbug](https://github.com/anbc/andbug) Android Debugging Library
+- [**65**星][19d] [Py] [agroce/tstl](https://github.com/agroce/tstl) Template Scripting Testing Language tool: automated test generation for Python
+- [**65**星][2y] [Shell] [adhdproject/buildkit](https://github.com/adhdproject/buildkit)
+- [**65**星][1y] [Go] [0xfe/lumen](https://github.com/0xfe/lumen) A commandline client for the Stellar blockchain
+- [**64**星][14d] [bkimminich/it-security-lecture](https://github.com/bkimminich/it-security-lecture) University lecture on "IT Security" as Open Educational Resources material
+- [**64**星][3y] [C++] [functionclub/memtester](https://github.com/functionclub/memtester) 检测VPS真实可分配内存的小工具,适用于检测VPS超售情况。
+- [**64**星][1y] [Py] [feeicn/exif](https://github.com/feeicn/exif) EXIF information viewer(查看照片中隐藏的各类信息)
+- [**64**星][3y] [Ruby] [danielmiessler/caparser](https://github.com/danielmiessler/caparser) A quick and dirty PCAP parser that helps you identify who your applications are sending sensitive data to without encryption.
+- [**64**星][3y] [bastilleresearch/keyjack](https://github.com/bastilleresearch/keyjack) Device discovery tools and encrypted keystroke injection advisories for Logitech, Dell, Lenovo and AmazonBasics
+- [**64**星][6y] [C++] [helpsystems/sentinel](https://github.com/helpsystems/sentinel) Sentinel is a command line tool able to protect Windows 32 bit programs against exploits targeted by attackers or viruses. It can protect your programs against 0-day attacks or publicly known bugs.
+- [**64**星][13d] [C] [enjoy-digital/pcie_screamer](https://github.com/enjoy-digital/pcie_screamer) PCIe Screamer SoC based on LiteX
+- [**64**星][8m] [Py] [nordicsemiconductor/nrf-sniffer-for-802.15.4](https://github.com/NordicSemiconductor/nRF-Sniffer-for-802.15.4) nRF-based 802.15.4 sniffer (firmware and software)
+- [**64**星][6y] [C++] [zenlulz/fasm.net](https://github.com/zenlulz/fasm.net) A managed wrapper to use FASM compiler from .NET applications.
+- [**64**星][8m] [Py] [yarox24/attack_monitor](https://github.com/yarox24/attack_monitor) Endpoint detection & Malware analysis software
+- [**64**星][3y] [Py] [xorpd/idsearch](https://github.com/xorpd/idsearch) 搜索工具
+- [**64**星][8m] [C] [xiao70/x70fsd](https://github.com/xiao70/x70fsd) Windows file system filter drivers(minifilter) to encrypt, compress, or otherwise modify file-based data require some of the most complex kernel software developed for Windows.
+- [**64**星][7y] [C++] [wisec/dominator](https://github.com/wisec/dominator)
+- [**64**星][7m] [Py] [vysecurity/att-ck_analysis](https://github.com/vysecurity/att-ck_analysis) Repository for my ATT&CK analysis research.
+- [**64**星][1y] [vagnerpilar/windbgtree](https://github.com/vagnerpilar/windbgtree) A command tree based on commands and extensions for Windows Kernel Debugging.
+- [**64**星][4m] [Visual Basic .NET] [thesph1nx/rt-101](https://github.com/thesph1nx/rt-101) VB.net Remote Administrator Tool (RAT)
+- [**64**星][12m] [Py] [th3j0kr/jtb_investigator](https://github.com/th3j0kr/jtb_investigator) A tool to speed up the process of doing the same simple IP/Domain Name lookups over and over again.
+- [**64**星][4m] [HTML] [team-su/suctf-2019](https://github.com/team-su/suctf-2019)
+- [**64**星][3y] [Fortran] [tabacof/adversarial](https://github.com/tabacof/adversarial) Exploring the Space of Adversarial Images
+- [**64**星][2y] [JS] [switchbrew/nx-hbexploit300](https://github.com/switchbrew/nx-hbexploit300) Homebrew exploit for 3.0.0
+- [**64**星][10m] [sukaralin/php_code_audit_project](https://github.com/sukaralin/php_code_audit_project) 该项目用来记录,我用来练手的PHP代码审计项目。
+- [**64**星][1y] [Haskell] [snoyberg/markdown](https://github.com/snoyberg/markdown) Convert Markdown to HTML, with XSS protection
+- [**64**星][1m] [JS] [snail007/anytunnel](https://github.com/snail007/anytunnel) 内网穿透,内网穿透代理服务器,商用内网穿透代理系统,内网穿透平台,内网穿透多用户会员系统。
+- [**64**星][8m] [Go] [smithclay/faassh](https://github.com/smithclay/faassh) simple go SSH server with reverse tunneling designed for running in cloud functions like AWS lambda
+- [**64**星][1y] [Py] [skelsec/pykerberoast](https://github.com/skelsec/pykerberoast) Implementing Kerberoast attack fully in python
+- [**64**星][8m] [JS] [sindresorhus/p-debounce](https://github.com/sindresorhus/p-debounce) Debounce promise-returning & async functions
+- [**64**星][2y] [C] [siguza/hsp4](https://github.com/siguza/hsp4) macOS kext for host_special_port(4) patch
+- [**64**星][4m] [sh1n0g1/shinobot](https://github.com/sh1n0g1/shinobot) RAT / Botnet Simulator for pentest / education
+- [**64**星][1y] [JS] [serain/netmap.js](https://github.com/serain/netmap.js) Fast browser-based network discovery module
+- [**64**星][3y] [secdr/sec-ml](https://github.com/secdr/sec-ml) 与安全相关的机器学习资料
+- [**64**星][1y] [Py] [scy-phy/minicps](https://github.com/scy-phy/minicps) MiniCPS: a framework for Cyber-Physical Systems real-time simulation, built on top of mininet
+- [**64**星][11m] [Zeek] [salesforce/bro-sysmon](https://github.com/salesforce/bro-sysmon) How to Zeek Sysmon Logs!
+- [**64**星][9m] [PS] [sadprocessor/cypherdog](https://github.com/sadprocessor/cypherdog) PoSh BloodHound Dog Whisperer
+- [**64**星][3y] [C++] [ronangaillard/logitech-mouse](https://github.com/ronangaillard/logitech-mouse) Use an arduino as a logitech wireless
+- [**64**星][5m] [PS] [rgl/windows-domain-controller-vagrant](https://github.com/rgl/windows-domain-controller-vagrant) Example Windows Domain Controller
+- [**64**星][1y] [Py] [ralphje/imagemounter](https://github.com/ralphje/imagemounter) Command line utility and Python package to ease the (un)mounting of forensic disk images
+- [**64**星][1m] [C] [qwaz/solved-hacking-problem](https://github.com/qwaz/solved-hacking-problem)
+- [**64**星][3y] [C] [quokkalight/rkduck](https://github.com/quokkalight/rkduck) Linux v4.x.x Rootkit
+- [**64**星][6y] [C] [programa-stic/ropc-llvm](https://github.com/programa-stic/ropc-llvm) ropc-llvm is a PoC of a Turing complete ROP compiler with support for a subset of LLVM IR. It is an extension of ropc.
+- [**64**星][1y] [Lua] [pr4jwal/quick-scripts](https://github.com/pr4jwal/quick-scripts) A collection of my quick and dirty scripts for vulnerability POC and detections
+- [**64**星][7m] [pinkp4nther/aws-testing-notes](https://github.com/pinkp4nther/aws-testing-notes) Notes as I learn basic AWS penetration testing
+- [**64**星][9m] [C] [phonegapx/airplay](https://github.com/phonegapx/airplay) 关于AirPlay的一些逆向研究成果。
+- [**64**星][9d] [Py] [phackt/pentest](https://github.com/phackt/pentest) Custom tools and projects about security
+- [**64**星][2m] [HTML] [patrowl/patrowldocs](https://github.com/patrowl/patrowldocs) PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform
+- [**64**星][19d] [Py] [patois/genmc](https://github.com/patois/genmc) 显示Hex-Rays 反编译器的Microcode,辅助开发Microcode插件
+- [**64**星][20d] [Py] [openitsystem/itops](https://github.com/openitsystem/itops) 基于Python + Django的AD\Exchange管理系统
+- [**64**星][5y] [PHP] [nyx0/tinba](https://github.com/nyx0/tinba) Tinba Banking Trojan
+- [**64**星][4m] [C++] [nccgroup/xendbg](https://github.com/nccgroup/xendbg) A feature-complete reference implementation of a modern Xen VMI debugger.
+- [**64**星][1y] [Py] [mwleeds/android-malware-analysis](https://github.com/mwleeds/android-malware-analysis) This project seeks to apply machine learning algorithms to Android malware classification.
+- [**64**星][1y] [C] [mthbernardes/qmkhuehuebr](https://github.com/mthbernardes/qmkhuehuebr) Trying to hack into keyboards
+- [**64**星][7m] [mitchellkrogza/fail2ban-blacklist-jail-for-repeat-offenders-with-perma-extended-banning](https://github.com/mitchellkrogza/fail2ban-blacklist-jail-for-repeat-offenders-with-perma-extended-banning) A customised jail with action and filter file for Fail2Ban. This jail is based on the recidive jail but makes use of a simple text file to enable extended and permanent bans.
+- [**64**星][3y] [Py] [milesrichardson/docker-nfqueue-scapy](https://github.com/milesrichardson/docker-nfqueue-scapy) Docker容器,使用python脚本在netfilter队列中监听数据包,并使用scapy操作数据包。
+- [**64**星][3m] [Shell] [mdrights/liveslak](https://github.com/mdrights/liveslak) 中文化的隐私加强 GNU/Linux 系统 - Forked from Alien Bob's powerful building script for Slackware Live.
+- [**64**星][11m] [Pascal] [mahdisafsafi/univdisasm](https://github.com/mahdisafsafi/univdisasm) x86 Disassembler and Analyzer
+- [**64**星][1y] [Py] [kasperskylab/vbscriptinternals](https://github.com/kasperskylab/vbscriptinternals) Scripts for disassembling VBScript p-code in the memory to aid in exploits analysis
+- [**64**星][7m] [Py] [k4yt3x/scutum](https://github.com/k4yt3x/scutum) Linux Automatic ARP (TCP / UDP / ICMP) Firewall
+- [**64**星][1y] [C] [joswr1ght/cowpatty](https://github.com/joswr1ght/cowpatty) WPA2-PSK Cracking
+- [**64**星][7m] [ObjC] [javerous/torchat-mac](https://github.com/javerous/torchat-mac) macOS native TorChat client
+- [**64**星][11m] [C++] [jacksonvd/pwnedpasswordsdll](https://github.com/jacksonvd/pwnedpasswordsdll) Open source solution to check prospective AD passwords against previously breached passwords
+- [**64**星][4m] [Py] [itskindred/redviper](https://github.com/itskindred/redviper) redViper is a proof of concept Command & Control framework that utilizes Reddit for communications.
+- [**64**星][6y] [Java] [ibrahimbalic/androidrat](https://github.com/ibrahimbalic/androidrat) Android RAT
+- [**64**星][6y] [C] [hiikezoe/android_run_root_shell](https://github.com/hiikezoe/android_run_root_shell)
+- [**64**星][2m] [Py] [hamz-a/jeb2frida](https://github.com/hamz-a/jeb2frida) Automated Frida hook generation with JEB
+- [**64**星][4y] [Py] [halit/isip](https://github.com/halit/isip) Interactive sip toolkit for packet manipulations, sniffing, man in the middle attacks, fuzzing, simulating of dos attacks.
+- [**64**星][4y] [PHP] [googleinurl/routerhunterbr](https://github.com/googleinurl/routerhunterbr) TOOL - Unauthenticated Remote DNS , Scanner ranger IP.
+- [**64**星][8y] [C] [gdbinit/pydbg64](https://github.com/gdbinit/pydbg64) PyDBG64 - OS X PyDbg with 64 bits support
+- [**64**星][11m] [Py] [fnmsd/chunkedhttpadapter](https://github.com/fnmsd/chunkedhttpadapter) 参考《利用分块传输吊打所有WAF》修改的requests的Adapter
+- [**64**星][2m] [Java] [flankerhqd/bindump4j](https://github.com/flankerhqd/bindump4j) A portable utility to locate android binder service
+- [**64**星][5y] [Py] [falcon-lnhg/mwebfp](https://github.com/falcon-lnhg/mwebfp) LNHG - Mass Web Fingerprinter
+- [**64**星][15d] [Go] [evilsocket/sum](https://github.com/evilsocket/sum) A specialized database server for linear algebra and machine learning.
+- [**64**星][3y] [Py] [evilsocket/fang](https://github.com/evilsocket/fang) A multi service threaded MD5 cracker
+- [**64**星][9m] [FreeMarker] [dvdandroid/xposedmoduletemplate](https://github.com/dvdandroid/xposedmoduletemplate) Easily create a Xposed Module with Android Studio
+- [**64**星][8m] [Go] [dsnezhkov/sshorty](https://github.com/dsnezhkov/sshorty) A progressive, customizable armored SSH tunnel implant for Linux and MacOS systems
+- [**64**星][2y] [Py] [darkquasar/wmi_persistence](https://github.com/darkquasar/wmi_persistence) WMI_Persistence:Python脚本,直接解析 OBJECTS.DATA 文件(无需访问用户WMI 名称空间)查找 WMI persistence
+- [**64**星][15d] [Py] [daniellerch/aletheia](https://github.com/daniellerch/aletheia) Image steganalysis using state-of-the-art machine learning techniques
+- [**64**星][3y] [Shell] [da667/667s_shitlist](https://github.com/da667/667s_shitlist) Hi kids, do you like cyber violence? Wanna see me destroy evil in the blink of an eyelid?
+- [**64**星][3y] [C] [coolervoid/payloadmask](https://github.com/coolervoid/payloadmask) Web Payload list editor to use techniques to try bypass web application firewall - version 0.2
+- [**64**星][7m] [Assembly] [cdisselkoen/pitchfork](https://github.com/cdisselkoen/pitchfork) Detecting Spectre vulnerabilities using symbolic execution, built on angr (github.com/angr/angr)
+- [**64**星][1y] [Java] [c0ny1/httpheadmodifer](https://github.com/c0ny1/httpheadmodifer) 一款快速修改HTTP数据包头的Burp Suite插件
+- [**64**星][7y] [C] [bskari/sqlassie](https://github.com/bskari/sqlassie) database firewall
+- [**64**星][7d] [PHP] [bediger4000/php-malware-analysis](https://github.com/bediger4000/php-malware-analysis) Deobfuscation and analysis of PHP malware captured by a WordPress honey pot
+- [**64**星][5d] [Java] [beardypig/ghidra-emotionengine](https://github.com/beardypig/ghidra-emotionengine) Ghidra Processor for the Play Station 2's Emotion Engine MIPS based CPU
+- [**64**星][5y] [Go] [arlolra/meek](https://github.com/arlolra/meek)
+- [**64**星][3m] [Java] [aress31/swurg](https://github.com/aress31/swurg) Parse OpenAPI documents into Burp Suite for automating OpenAPI-based APIs security assessments (approved by PortSwigger for inclusion in their official BApp Store).
+- [**64**星][15d] [Py] [anon-exploiter/suid3num](https://github.com/anon-exploiter/suid3num) A standalone python script which utilizes python's built-in modules to enumerate SUID binaries, separate default binaries from custom binaries, cross-match those with bins in GTFO Bin's repository & auto-exploit those, all with colors! ( ͡~ ͜ʖ ͡°)
+- [**64**星][5d] [Shell] [angr/angr-dev](https://github.com/angr/angr-dev) Some helper scripts to set up an environment for angr development.
+- [**64**星][6y] [Py] [andrew-morris/stupid_malware](https://github.com/andrew-morris/stupid_malware) Python malware for pentesters that bypasses most antivirus (signature and heuristics) and IPS using sheer stupidity
+- [**64**星][3y] [Shell] [91yun/uml](https://github.com/91yun/uml)
+- [**64**星][2y] [Go] [0c34/govwa](https://github.com/0c34/govwa)
+- [**63**星][4d] [worawit/cve-2019-0708](https://github.com/worawit/cve-2019-0708) CVE-2019-0708 (BlueKeep)
+- [**63**星][9d] [Py] [meituan-dianping/lyrebird-android](https://github.com/meituan-dianping/lyrebird-android) 本程序是一个Lyrebird的插件,用于支持获取Android设备信息。
+- [**63**星][2y] [Py] [adamlaurie/sjcam](https://github.com/adamlaurie/sjcam) A python CLI tool for controlling SJCAM WiFi Sports Cameras
+- [**63**星][4y] [C++] [zyantific/remodel](https://github.com/zyantific/remodel) Data and class remodeling library
+- [**63**星][2m] [C] [zzhouhe/pg1903](https://github.com/zzhouhe/pg1903)
+- [**63**星][1m] [Py] [misp/misp-maltego](https://github.com/misp/misp-maltego) Set of Maltego transforms to inferface with a MISP instance and explore the whole MITRE ATT&CK dataset.
+- [**63**星][23d] [C#] [firebaseextended/unity-solutions](https://github.com/FirebaseExtended/unity-solutions) Use Firebase tools to incorporate common features into your games!
+- [**63**星][1y] [C] [freescale/u-boot-fslc](https://github.com/Freescale/u-boot-fslc) U-Boot tree to host pending fixes and improvements
+- [**63**星][4m] [LLVM] [lifting-bits/fennec](https://github.com/lifting-bits/fennec) Rewriting functions in compiled binaries using McSema
+- [**63**星][9d] [Py] [crytic/etheno](https://github.com/crytic/etheno) Simplify Ethereum security analysis and testing
+- [**63**星][2m] [C] [zyantific/zyan-hook-engine](https://github.com/zyantific/zyan-hook-engine) Advanced x86/x86-64 hooking library (WIP).
+- [**63**星][1y] [Py] [zhongzhi107/raspberry-pi-tutorials](https://github.com/zhongzhi107/raspberry-pi-tutorials) 面向软件工程师的树莓派入门教程
+- [**63**星][3y] [Ruby] [zed-0xff/ctf](https://github.com/zed-0xff/ctf) some tasks/solutions from CTF challenges
+- [**63**星][4m] [C] [yuawn/hitcon-badge-2019](https://github.com/yuawn/hitcon-badge-2019) HITCON Badge for HITCON CMT 2019.
+- [**63**星][5m] [Go] [yryz/httpproxy](https://github.com/yryz/httpproxy) 一个轻量级HTTP代理,支持shadowsocks服务,方便命令行、开发环境使用。
+- [**63**星][2y] [Go] [yara-rules/yara-endpoint](https://github.com/yara-rules/yara-endpoint) Yara-Endpoint is a tool useful for incident response as well as anti-malware enpoint base on Yara signatures.
+- [**63**星][3y] [Py] [xorond/sudo-snooper](https://github.com/xorond/sudo-snooper) Python script that acts like the original sudo binary to fool users into entering their passwords
+- [**63**星][9m] [Py] [xnffdd/proxypool](https://github.com/xnffdd/proxypool) 自建免费IP代理池。
+- [**63**星][1y] [Py] [wazehell/metateta](https://github.com/wazehell/metateta) Metateta Automated Tool For Scanning And Exploiting Network Protocols Using Metasploit
+- [**63**星][7d] [tiaotiaolong/sec_interview_know_list](https://github.com/tiaotiaolong/sec_interview_know_list) 信息安全方面面试清单
+- [**63**星][1y] [tevora-threat/powerview3-aggressor](https://github.com/tevora-threat/powerview3-aggressor) Cobalt Strike Aggressor script menu for Powerview/SharpView
+- [**63**星][6m] [Py] [sysopfb/malware_decoders](https://github.com/sysopfb/malware_decoders) Static based decoders for malware samples
+- [**63**星][5y] [Py] [sqall01/zwoelf](https://github.com/sqall01/zwoelf) An ELF parsing and manipulation library for Python
+- [**63**星][2y] [Py] [sethsec/pycodeinjection](https://github.com/sethsec/pycodeinjection) Automated Python Code Injection Tool
+- [**63**星][3y] [C] [seemoo-lab/bcm-public](https://github.com/seemoo-lab/bcm-public) DEPRECATED: Monitor Mode and Firmware patching framework for the Google Nexus 5, development moved to:
+- [**63**星][1y] [C#] [rvrsh3ll/sharpfruit](https://github.com/rvrsh3ll/sharpfruit) A C# penetration testing tool to discover low-haning web fruit via web requests.
+- [**63**星][2y] [C] [plashchynski/viewssld](https://github.com/plashchynski/viewssld) viewssld is a free, open source, non-terminating SSLv2/SSLv3/TLS traffic decryption daemon for Snort, and other Network Intrusion Detection Systems (IDS).
+- [**63**星][4m] [Java] [pibigstar/parsevip](https://github.com/pibigstar/parsevip) 解析VIP资源,解析出酷狗、QQ音乐、腾讯视频、人人视频的真实地址
+- [**63**星][5y] [Py] [paulsec/spipscan](https://github.com/paulsec/spipscan) SPIP (CMS) Scanner for penetration testing purpose written in Python
+- [**63**星][2y] [Py] [paulsec/metasearch-public](https://github.com/paulsec/metasearch-public) Stop searching for sample hashes on 10 different sites.
+- [**63**星][4y] [Java] [palmerc/securewebsockets](https://github.com/palmerc/securewebsockets) Add SSL support to the Autobahn WebSocket library
+- [**63**星][5m] [PHP] [owasp/owaspwebgoatphp](https://github.com/owasp/owaspwebgoatphp) A deliberately vulnerable web application for learning web application security.
+- [**63**星][6y] [JS] [owasp/appsec-browser-bundle](https://github.com/owasp/appsec-browser-bundle) The OWASP AppSec Browser Bundle is an open source Linux based penetration testing browser bundle built over Mozilla Firefox. It comes pre-configured with security tools for spidering, advanced web searching, fingerprinting, anonymous browsing, web server scanning, fuzzing, report generating and more.
+- [**63**星][2y] [ophirharpaz/patched-minesweeper](https://github.com/ophirharpaz/patched-minesweeper) I hacked Minesweeper into putting flags on all the mined squares when starting. Yoohoo.
+- [**63**星][5y] [CSS] [opensecurityresearch/fsexploitme](https://github.com/opensecurityresearch/fsexploitme) Purposely vulnerable ActiveX Control to teach about exploitation in a browser-based environment.
+- [**63**星][5m] [Shell] [nodesocket/cryptr](https://github.com/nodesocket/cryptr) A simple shell utility for encrypting and decrypting files using OpenSSL.
+- [**63**星][5y] [C] [nihilus/idastealth](https://github.com/nihilus/idastealth)
+- [**63**星][1y] [Py] [nicksanzotta/wifisuite](https://github.com/nicksanzotta/wifisuite) Enterprise WPA Wireless Tool Suite
+- [**63**星][3y] [Lua] [netxfly/nginx_lua_security](https://github.com/netxfly/nginx_lua_security) 浅谈nginx+lua在安全中的应用
+- [**63**星][4m] [Java] [nccgroup/berserko](https://github.com/nccgroup/berserko) Burp Suite extension to perform Kerberos authentication
+- [**63**星][3y] [C] [mrrraou/waithax](https://github.com/mrrraou/waithax) An implementation of the waithax / slowhax 3DS Kernel11 exploit.
+- [**63**星][2m] [Ruby] [mephux/ruby-nessus](https://github.com/mephux/ruby-nessus) Ruby-Nessus is a ruby interface for the popular Nessus vulnerability scanner.
+- [**63**星][21d] [C] [maldiohead/cve-2019-6207](https://github.com/maldiohead/cve-2019-6207) xnu kernel heap info leak
+- [**63**星][4y] [C] [m-pays/m-cpuminer-v2](https://github.com/m-pays/m-cpuminer-v2) Latest miner (m-minerd)
+- [**63**星][3y] [JS] [luin/serialize](https://github.com/luin/serialize) Serialize an object including it's function into a JSON.
+- [**63**星][12m] [PS] [luciusbono/packer-windows10](https://github.com/luciusbono/packer-windows10) A Packer build for Windows 10
+- [**63**星][5m] [Py] [loolzec/asu](https://github.com/loolzec/asu) facebook hacking toolkit
+- [**63**星][11m] [Ruby] [livingsocial/bundler-patch](https://github.com/livingsocial/bundler-patch) Update your gems conservatively to deal with vulnerable gems or just get more current.
+- [**63**星][4y] [MATLAB] [konstantinberlin/malware-windows-audit-log-detection](https://github.com/konstantinberlin/malware-windows-audit-log-detection) Detection of malware using dynamic behavior and Windows audit logs
+- [**63**星][6m] [Py] [jvns/zine-formatter](https://github.com/jvns/zine-formatter) Small Python script for formatting zines into booklets
+- [**63**星][2y] [josephlhall/dc25-votingvillage-report](https://github.com/josephlhall/dc25-votingvillage-report) A report to synthesize findings from the Defcon 25 Voting Machine Hacking Village
+- [**63**星][9y] [C] [jonoberheide/ksymhunter](https://github.com/jonoberheide/ksymhunter) Routines for hunting down kernel symbols.
+- [**63**星][2y] [Py] [iotsec/z3sec](https://github.com/iotsec/z3sec) Penetration testing framework for ZigBee security research.
+- [**63**星][1y] [C] [ioactive/fuzzndis](https://github.com/ioactive/fuzzndis) A Fuzzer for Windows NDIS Drivers OID Handlers
+- [**63**星][1y] [C] [inndy/ctf-writeup](https://github.com/inndy/ctf-writeup) My CTF write-up collection
+- [**63**星][7y] [C++] [hurley25/sniffer](https://github.com/hurley25/sniffer) 一个跨平台的网络数据嗅探&抓包程序,基于Qt 4.x 以及 libpcap 库(Linux下)和 Winpcap库(Windows 下)。
+- [**63**星][11m] [hannob/apache-uaf](https://github.com/hannob/apache-uaf) Apache use after free bug infos / ASAN stack traces
+- [**63**星][1y] [Py] [gr4ym4ntx/attackintel](https://github.com/gr4ym4ntx/attackintel) A python script to query the MITRE ATT&CK API for tactics, techniques, mitigations, & detection methods for specific threat groups.
+- [**63**星][2y] [C] [georgeargyros/snowflake](https://github.com/georgeargyros/snowflake) Snowflake is a tool for exploiting randomness vulnerabilities by seed recovery attacks targetting the rand() and mt_rand() generators in PHP applications.
+- [**63**星][3m] [JS] [gbaptista/luminous](https://github.com/gbaptista/luminous) Identify, analyze and block code execution and event collection through JavaScript in your browser with code interception.
+- [**63**星][3y] [funkmyster/awesome-cloud-security](https://github.com/funkmyster/awesome-cloud-security) Curated list of awesome cloud security blogs, podcasts, standards, projects, and examples.
+- [**63**星][1y] [Shell] [floyd-fuh/crass](https://github.com/floyd-fuh/crass) Code Review Audit Script Scanner
+- [**63**星][2y] [Shell] [faf0/thinkpad-scripts](https://github.com/faf0/thinkpad-scripts) Scripts for fixing TrackPointers and touchpads under Ubuntu 14.04 and 16.04 or similar distributions on Lenovo ThinkPads (tested on X1 Carbon 2nd Generation and reported to work on X240)
+- [**63**星][2y] [Py] [esser420/eviltwinframework](https://github.com/esser420/eviltwinframework) A framework for pentesters that facilitates evil twin attacks as well as exploiting other wifi vulnerabilities
+- [**63**星][8m] [emadshanab/facebook-bug-bounty-writeups](https://github.com/emadshanab/facebook-bug-bounty-writeups) Facebook Bug Bounties
+- [**63**星][3m] [C] [dorneanu/ixkeylog](https://github.com/dorneanu/ixkeylog) *NIX X11 Keylogger
+- [**63**星][1y] [C] [dodola/fbhookfork](https://github.com/dodola/fbhookfork) 从 fb 的 profilo 项目里提取出来的hook 库,自己用
+- [**63**星][1y] [Py] [crescentvenus/walb](https://github.com/crescentvenus/walb) WALB is raspberry Pi and HackRF based Wireless Attack LaunchBox.
+- [**63**星][2y] [Java] [codelion/gramtest](https://github.com/codelion/gramtest) GramTest: A tool for Grammar based Test case generation
+- [**63**星][3y] [Java] [chhsiao90/nitmproxy](https://github.com/chhsiao90/nitmproxy) Proxy server based on netty
+- [**63**星][2m] [C] [carmaa/interrogate](https://github.com/carmaa/interrogate) Interrogate is a proof-of-concept tool for identification of cryptographic keys in binary material (regardless of target operating system), first and foremost for memory dump analysis and forensic usage.
+- [**63**星][5y] [Py] [c01db33f/concolica](https://github.com/c01db33f/concolica) Python concolic execution framework for program analysis
+- [**63**星][3y] [C++] [breakingmalwareresearch/eleven](https://github.com/breakingmalwareresearch/eleven) Elevation by environment variable expansion
+- [**63**星][5m] [Go] [botherder/snoopdigg](https://github.com/botherder/snoopdigg) Simple utility to ease the process of collecting evidence to find infections
+- [**63**星][1y] [Shell] [bcapptain/dockernymous](https://github.com/bcapptain/dockernymous) A script used to create a whonix like gateway/workstation environment with docker containers.
+- [**63**星][3m] [CMake] [argilo/gr-elster](https://github.com/argilo/gr-elster) A GNU Radio block that decodes packets transmitted by Elster R2S smart meters
+- [**63**星][2m] [Py] [archlinux/arch-security-tracker](https://github.com/archlinux/arch-security-tracker) Arch Linux Security Tracker
+- [**63**星][2y] [ObjC] [antoinet/valora](https://github.com/antoinet/valora) valora:利用随机源 MAC 地址和随机 SSID 生成 802.11 探测请求流,以迷惑 WiFi 追踪系统
+- [**63**星][20d] [Py] [aliasrobotics/aztarna](https://github.com/aliasrobotics/aztarna) aztarna, a footprinting tool for robots.
+- [**63**星][3m] [C] [adulau/ssldump](https://github.com/adulau/ssldump) (unofficial repository) of ssldump - + a myriad of patches (from Debian and other distributions + contribution (via PR))
+- [**63**星][2y] [C++] [abenkhadra/spedi](https://github.com/abenkhadra/spedi) Speculative disassembly, CFG recovery, and call-graph recovery from stripped binaries.
+- [**63**星][2y] [Perl] [0x90/vpn-arsenal](https://github.com/0x90/vpn-arsenal) VPN pentest tools and scripts
+- [**62**星][15d] [Go] [harleo/asnip](https://github.com/harleo/asnip) ASN target organization IP range attack surface mapping for reconnaissance, fast and lightweight
+- [**62**星][9d] [ga1ois/bluehat-2019-seattle](https://github.com/ga1ois/bluehat-2019-seattle) All the materials in BlueHat 2019 Seattle will be realeased here.
+- [**62**星][19d] [payloadbox/xxe-injection-payload-list](https://github.com/payloadbox/xxe-injection-payload-list)
+- [**62**星][29d] [Py] [draios/sysdigcloud-kubernetes](https://github.com/draios/sysdigcloud-kubernetes) Sysdig Cloud on Kubernetes
+- [**62**星][19d] [C] [taviso/dbusmap](https://github.com/taviso/dbusmap) This is a simple utility for enumerating D-Bus endpoints, an nmap for D-Bus.
+- [**62**星][9d] [C++] [intel/ad-rss-lib](https://github.com/intel/ad-rss-lib) Library implementing the Responsibility Sensitive Safety model (RSS) for Autonomous Vehicles
+- [**62**星][4y] [Py] [tuter/monmob](https://github.com/tuter/monmob)
+- [**62**星][2y] [Py] [vysecurity/maiint](https://github.com/vysecurity/MaiInt) OSINT Organization Employee Profiling Tool for MaiMai
+- [**62**星][3y] [shmilylty/sec-box](https://github.com/shmilylty/Sec-Box) information security Tools Box (信息安全工具集合)
+- [**62**星][9m] [weekend-hub/pentest-tools](https://github.com/weekEND-hub/pentest-tools) PenTest Tools
+- [**62**星][2m] [C] [0e85dc6eaf/ctf-writeups](https://github.com/0e85dc6eaf/CTF-Writeups) Writeups/solutions
+- [**62**星][1y] [Py] [avicoder/spoodle](https://github.com/avicoder/spoodle) spoodle:大规模子域名及 poodle漏洞扫描器
+- [**62**星][4m] [Py] [crytic/pyevmasm](https://github.com/crytic/pyevmasm) Ethereum Virtual Machine (EVM) disassembler and assembler
+- [**62**星][9m] [C] [zigzagsecurity/survival-guide-radare2](https://github.com/zigzagsecurity/survival-guide-radare2) Basic tutorials for reverse engineer with radare2
+- [**62**星][2y] [Shell] [yukinoshita47/pentest-tools-auto-installer](https://github.com/yukinoshita47/pentest-tools-auto-installer) Tool sederhana buat install tool-tool pentest dan forensic bagi pengguna linux yang jenis nya non-pentest OS
+- [**62**星][8y] [Java] [yifanlu/psxperia](https://github.com/yifanlu/psxperia) This tool will take a PSX image that you legally own and convert it to be playable on the Xperia Play with the emulator extracted from the packaged game "Crash Bandicoot."
+- [**62**星][5y] [Py] [xipiter/idiotic](https://github.com/xipiter/idiotic) Simple ways to 0wn simple IOT devices
+- [**62**星][2y] [C] [wlach/orangutan](https://github.com/wlach/orangutan) Simulate native events on Android-like devices
+- [**62**星][4y] [C#] [wintellect/procmondebugoutput](https://github.com/wintellect/procmondebugoutput) See your trace statements in Sysinternals Process Monitor
+- [**62**星][2y] [C] [vnik5287/kaslr_tsx_bypass](https://github.com/vnik5287/kaslr_tsx_bypass) Linux kASLR (Intel TSX/RTM) bypass static library
+- [**62**星][2y] [C++] [tyranid/zeronights2017](https://github.com/tyranid/zeronights2017) Some sample code from my Zero Nights 2017 presentation.
+- [**62**星][1y] [tyranid/windows-attacksurface-workshop](https://github.com/tyranid/windows-attacksurface-workshop) Workshop material for a Windows Attack Surface Analysis Workshop
+- [**62**星][4y] [Py] [tony1016/burplogfilter](https://github.com/tony1016/burplogfilter) A python3 program to filter Burp Suite log file.
+- [**62**星][2y] [Go] [tengzhangchao/portscan](https://github.com/tengzhangchao/portscan) 端口扫描器
+- [**62**星][8m] [PS] [swizzlez/invoke-enumsecuritytools](https://github.com/swizzlez/invoke-enumsecuritytools)
+- [**62**星][1y] [C] [shuax/locateip](https://github.com/shuax/locateip) 高效的IP数据库解析库
+- [**62**星][2y] [Lua] [scipag/httprecon-nse](https://github.com/scipag/httprecon-nse) Advanced web server fingerprinting for Nmap
+- [**62**星][1m] [HTML] [santandersecurityresearch/asvs](https://github.com/santandersecurityresearch/asvs) A simple web app that helps developers understand the ASVS requirements.
+- [**62**星][4y] [Py] [rich5/harness](https://github.com/rich5/harness) Interactive remote PowerShell Payload
+- [**62**星][5m] [Ruby] [rhtconsulting/cfme-rhconsulting-scripts](https://github.com/rhtconsulting/cfme-rhconsulting-scripts)
+- [**62**星][6m] [PS] [psconfeu/2019](https://github.com/psconfeu/2019) Code, Materials and Slides for psconf.eu 2019
+- [**62**星][4y] [Py] [poorbillionaire/windows-prefetch-parser](https://github.com/poorbillionaire/windows-prefetch-parser) Parse Windows Prefetch files: Supports XP - Windows 10 Prefetch files
+- [**62**星][2y] [PHP] [pklink/ppma](https://github.com/pklink/ppma) [INACTIVE] PHP Password Manager
+- [**62**星][5m] [Py] [pinnace/burp-jwt-fuzzhelper-extension](https://github.com/pinnace/burp-jwt-fuzzhelper-extension) burp-jwt-fuzzhelper-extension: Burp扩展, 用于Fuzzing JWT
+- [**62**星][1y] [C++] [paranoidninja/scriptdotsh-malwaredevelopment](https://github.com/paranoidninja/scriptdotsh-malwaredevelopment) This repo will contain code snippets for blogs: Malware on Steroids written by me at
+- [**62**星][2y] [Go] [openprovider/whoisd](https://github.com/openprovider/whoisd) Openprovider WHOIS server/daemon
+- [**62**星][5y] [Py] [nullhypothesis/scramblesuit](https://github.com/nullhypothesis/scramblesuit) The ScrambleSuit traffic obfuscation protocol.
+- [**62**星][2y] [C] [nccgroup/cachegrab](https://github.com/nccgroup/cachegrab) 执行和可视化针对软件的由 trace 驱动的缓存攻击(需要启用TrustZone 的 ARMv8 内核)
+- [**62**星][2m] [Go] [moldabekov/virusgotal](https://github.com/moldabekov/virusgotal)
+- [**62**星][26d] [Dockerfile] [misp/misp-docker](https://github.com/misp/misp-docker) MISP Docker (XME edition)
+- [**62**星][7m] [C] [merlijnwajer/tracy](https://github.com/merlijnwajer/tracy) tracy - a system call tracer and injector. Find us in #tracy on irc.freenode.net
+- [**62**星][7m] [C] [luoyanbei/testhookzz](https://github.com/luoyanbei/testhookzz) iOS逆向:使用HookZz框架hook游戏“我的战争”,进入上帝模式
+- [**62**星][1y] [Py] [lclevy/unarcrypto](https://github.com/lclevy/unarcrypto) unarcrypto:描述 zip、rar、7zip 使用的加密算法
+- [**62**星][2y] [Py] [lbarman/kali-tools](https://github.com/lbarman/kali-tools) Run Kali tools on all distributions. Offline search, including in package descriptions.
+- [**62**星][1y] [kutim/docker-security](https://github.com/kutim/docker-security) docker 安全基线规范
+- [**62**星][2m] [Go] [knqyf263/gost](https://github.com/knqyf263/gost) Build a local copy of Security Tracker. Notify via E-mail/Slack if there is an update.
+- [**62**星][1y] [Ruby] [kingsabri/cve-in-ruby](https://github.com/kingsabri/cve-in-ruby) Exploits written & ported to Ruby - no Metasploit
+- [**62**星][1m] [Shell] [joshuamart/autorecon](https://github.com/joshuamart/autorecon) Simple shell script for automated domain recognition with some tools
+- [**62**星][2y] [Go] [johnsonz/go-sni-detector](https://github.com/johnsonz/go-sni-detector) A go application to scan sni ip
+- [**62**星][8m] [Dockerfile] [john-lin/docker-snort](https://github.com/john-lin/docker-snort) Snort in Docker for Network Functions Virtualization (NFV)
+- [**62**星][5y] [C] [jiayy/lkm-rootkit](https://github.com/jiayy/lkm-rootkit) an lkm rootkit support x86/64,arm,mips
+- [**62**星][5y] [MATLAB] [jiaoxianjun/rtl-sdr-lte](https://github.com/jiaoxianjun/rtl-sdr-lte) Play with LTE signal (especially China TD-LTE) captured by rtl-sdr
+- [**62**星][9m] [Py] [jaksi/awslog](https://github.com/jaksi/awslog) Show the history and changes between configuration versions of AWS resources
+- [**62**星][28d] [JS] [hugsy/windbg_js_scripts](https://github.com/hugsy/windbg_js_scripts) Toy scripts for playing with WinDbg JS API
+- [**62**星][3y] [C++] [hexhive/malwash](https://github.com/hexhive/malwash)
+- [**62**星][3y] [Py] [hackinglab/mobilesf](https://github.com/hackinglab/mobilesf) HackingLab定制版Mobile Safe Framework
+- [**62**星][1y] [Py] [ha3mrx/hacking](https://github.com/ha3mrx/hacking) Ha3Mrx Pentesting and Security Hacking
+- [**62**星][1m] [Shell] [gentoo/libressl](https://github.com/gentoo/libressl) [MIRROR] LibreSSL ebuilds testing repository
+- [**62**星][7y] [C] [gdbinit/osx_boubou](https://github.com/gdbinit/osx_boubou) A PoC Mach-O infector via library injection
+- [**62**星][7m] [Kotlin] [fs0c131y/samsunglocker](https://github.com/fs0c131y/samsunglocker) Samsung ContainerAgent Vulnerability - Local DoS for Samsung smartphone
+- [**62**星][2y] [Py] [frky/scat](https://github.com/frky/scat) Dynamic analysis of binary programs to retrieve function-related information (arity, type of parameters, coupling).
+- [**62**星][7m] [C++] [fare9/anbu](https://github.com/fare9/anbu) ANBU (Automatic New Binary Unpacker) a tool for me to learn about PIN and about algorithms for generic unpacking.
+- [**62**星][7m] [C++] [explife0011/cve-2019-0803](https://github.com/explife0011/cve-2019-0803) Win32k Elevation of Privilege Poc
+- [**62**星][7m] [Py] [engmaher/baf](https://github.com/engmaher/baf) Blind Attacking Framework
+- [**62**星][1y] [C] [emptymonkey/drinkme](https://github.com/emptymonkey/drinkme) drinkme:从 stdin 读取 ShellCode 并执行。用于部署 ShellCode 之前测试
+- [**62**星][22d] [drduh/pc-engines-apu-router-guide](https://github.com/drduh/pc-engines-apu-router-guide) Guide to building a Linux or BSD router on the PC Engines APU platform
+- [**62**星][3m] [PHP] [divineomega/laravel-password-exposed-validation-rule](https://github.com/divineomega/laravel-password-exposed-validation-rule)
+- [**62**星][4m] [Shell] [developerkunal/converto](https://github.com/developerkunal/converto) Installing Kali linux on Vps Server
+- [**62**星][25d] [Py] [deepdivesec/gitmad](https://github.com/deepdivesec/gitmad) Monitor, Alert, and Discover sensitive info and data leakage on Github.
+- [**62**星][12m] [C] [darm64/xnu](https://github.com/darm64/xnu) Research into porting the XNU kernel to ARM devices.
+- [**62**星][25d] [JS] [curiousdannii/ifvms.js](https://github.com/curiousdannii/ifvms.js) The Interactive Fiction Virtual Machines Suite - in Javascript
+- [**62**星][2m] [PHP] [cosasdepuma/securitynotfound](https://github.com/cosasdepuma/securitynotfound)
+- [**62**星][13d] [C] [cn-uofbasel/ccn-lite](https://github.com/cn-uofbasel/ccn-lite) CCN-lite, a lightweight implementation of the CCNx protocol and its variations
+- [**62**星][11m] [cmatthewbrooks/r2kit](https://github.com/cmatthewbrooks/r2kit) A set of scripts for a radare-based malware code analysis workflow
+- [**62**星][6m] [Py] [catalyst256/myjunk](https://github.com/catalyst256/myjunk) Just random files I've stored here for people to get access to because wordpress doesn't like python.
+- [**62**星][2y] [Java] [calebwhiting/java-asm-obfuscator](https://github.com/calebwhiting/java-asm-obfuscator)
+- [**62**星][2y] [JS] [auth0/webtask-scripts](https://github.com/auth0/webtask-scripts)
+- [**62**星][7m] [Py] [andy10101/apksecurityanalysis](https://github.com/andy10101/apksecurityanalysis) ApkSecurityAnalysis
+- [**62**星][2y] [C++] [agustingianni/retools](https://github.com/agustingianni/retools) retools: a reverse engineering toolkit for normies
+- [**62**星][2y] [AutoIt] [9aylas/shortcut-payload-generator](https://github.com/9aylas/shortcut-payload-generator) AutoIt HackTool, Shortcuts .lnk Payloads Generator As LNK-KISSER.
+- [**62**星][9m] [Py] [3lackrush/poc-bank](https://github.com/3lackrush/poc-bank) Focus on cybersecurity | collection of PoC and Exploits
+- [**62**星][2y] [3gstudent/bitsadminexec](https://github.com/3gstudent/bitsadminexec) 利用bitsadmin 实现驻留,以及自动运行
+- [**62**星][10m] [Py] [cse-assemblyline/assemblyline](https://bitbucket.org/cse-assemblyline/assemblyline)
+- [**61**星][5y] [Py] [byt3bl33d3r/dhcpshock](https://github.com/byt3bl33d3r/dhcpshock) Spoofs a DHCP server and exploits all clients vulnerable to the 'ShellShock' bug
+- [**61**星][2y] [wtsxdev/fuzzing-resources](https://github.com/wtsxdev/fuzzing-resources) List of fuzzing resources for learning Fuzzing and initial phases of Exploit Development like root cause analysis
+- [**61**星][1y] [Py] [dafthack/rdpspray](https://github.com/dafthack/rdpspray) Tool for password spraying RDP
+- [**61**星][4y] [ObjC] [project-imas/securefoundation](https://github.com/project-imas/securefoundation) Secure components enabling application authentication, secure file storage, app level file-based keychain, and shredding for files on disk
+- [**61**星][8d] [C] [chroblert/domainweakpasswdcheck](https://github.com/chroblert/domainweakpasswdcheck) 内网安全·域账号弱口令审计
+- [**61**星][6d] [CSS] [hacker0x01/docs.hackerone.com](https://github.com/hacker0x01/docs.hackerone.com) HackerOne Platform Documentation
+- [**61**星][8m] [Ruby] [gushmazuko/winbypass](https://github.com/gushmazuko/winbypass) Windows UAC Bypass
+- [**61**星][6y] [Java] [gat3way/airpirate](https://github.com/gat3way/airpirate) Android 802.11 pentesting tool
+- [**61**星][6m] [Py] [joshvillbrandt/wireless](https://github.com/joshvillbrandt/wireless) A dead simple, cross-platform Python library to connect to wireless networks.
+- [**61**星][2m] [Jupyter Notebook] [misinfosecproject/amitt_framework](https://github.com/misinfosecproject/amitt_framework) AMITT (Adversarial Misinformation and Influence Tactics and Techniques) framework for describing disinformation incidents. AMITT is part of misinfosec - work on adapting information security practices to help track and counter misinformation - and is designed as far as possible to fit existing infosec practices and tools.
+- [**61**星][7y] [JS] [enablesecurity/webapp-exploit-payloads](https://github.com/EnableSecurity/Webapp-Exploit-Payloads) a collection of payloads for common webapps
+- [**61**星][12m] [imfht/scansql](https://github.com/imfht/ScanSql) 利用sqlmap和URL去重的爬虫写的一个大规模扫描的脚本
+- [**61**星][2y] [Shell] [m4lv0id/lare](https://github.com/m4lv0id/LARE) [L]ocal [A]uto [R]oot [E]xploiter is a simple bash script that helps you deploy local root exploits from your attacking machine when your victim machine do not have internet connectivity.
+- [**61**星][7m] [PHP] [michyamrane/wso-webshell](https://github.com/mIcHyAmRaNe/wso-webshell)
+- [**61**星][2y] [Py] [feexd/vbg](https://github.com/feexd/vbg) vbg: 使用X11转发的SSH会话远程在客户端执行指令
+- [**61**星][1y] [PS] [danmcinerney/msfbot](https://github.com/DanMcInerney/msfbot) WORK IN PROGRESS. Waits for MSF session then automatically gets domain admin
+- [**61**星][4y] [Shell] [praetorian-code/epictreasure](https://github.com/praetorian-code/epictreasure) radare, angr, pwndbg, binjitsu, ect in a box ready for pwning
+- [**61**星][1y] [C] [zhuowei/qemu](https://github.com/zhuowei/qemu) Patched version of QEMU for exploring XNU arm64 emulation.
+- [**61**星][6m] [JS] [ysocorp/koa2-ratelimit](https://github.com/ysocorp/koa2-ratelimit) Rate-limiting middleware for Koa2 ES6. Use to limit repeated requests to APIs and/or endpoints such as password reset.
+- [**61**星][29d] [Lua] [yelp/casper](https://github.com/yelp/casper) Yelp's internal caching proxy, powered by Nginx and OpenResty at its core
+- [**61**星][2y] [Py] [yassergersy/sub6](https://github.com/yassergersy/sub6) Web App Scanner
+- [**61**星][8m] [C++] [yajs/nikpeviewer](https://github.com/yajs/nikpeviewer) NikPEViewer a PE viewer source code
+- [**61**星][2y] [Perl] [xlogicx/m2elf](https://github.com/xlogicx/m2elf) Converts Machine Code to x86 (32-bit) Linux executable (auto-wrapping with ELF headers)
+- [**61**星][1y] [wjpdeveloper/my-action-github](https://github.com/wjpdeveloper/my-action-github) my-action-github
+- [**61**星][3y] [Lua] [waffles-2/sambacry](https://github.com/waffles-2/sambacry) CVE-2017-7494 - Detection Scripts
+- [**61**星][7m] [Shell] [vs4vijay/swissarmypi](https://github.com/vs4vijay/swissarmypi) A set of utility/tools to make Raspberry Pi [Zero W] into Swiss Army Knife
+- [**61**星][4y] [Py] [veil-framework/veil-ordnance](https://github.com/veil-framework/veil-ordnance) Veil-Ordnance is a tool designed to quickly generate MSF stager shellcode
+- [**61**星][8m] [Py] [treussart/probemanager](https://github.com/treussart/probemanager) Centralize Management of Intrusion Detection System like Suricata Bro Ossec ...
+- [**61**星][3y] [Py] [trailofbits/deceptiveidn](https://github.com/trailofbits/deceptiveidn) deceptiveidn: 利用计算机视觉(computer vision)自动检测 IDN 是否具有欺骗性(a deceptive reading)。(IDN: Internationalized Domain Names,国际化域名)
+- [**61**星][2y] [C] [tobaljackson/2017-sit-re-presentation](https://github.com/tobaljackson/2017-sit-re-presentation) Intro to radare2 presentation files.
+- [**61**星][2y] [PS] [tenable/posh-nessus](https://github.com/tenable/posh-nessus) PowerShell Module for automating Tenable Nessus Vulnerability Scanner.
+- [**61**星][1y] [C++] [tandasat/debuglogger](https://github.com/tandasat/debuglogger) A software driver that lets you log kernel-mode debug output into a file on Windows.
+- [**61**星][4y] [C++] [t-vk/memory-hacking-class](https://github.com/t-vk/memory-hacking-class) Easy to use class to read and modify other processes memory.
+- [**61**星][3y] [Py] [syss-research/radio-hackbox](https://github.com/syss-research/radio-hackbox) PoC tool to demonstrate vulnerabilities in wireless input devices
+- [**61**星][4y] [Py] [sysinsider/usbtracker](https://github.com/sysinsider/usbtracker) Quick & dirty coded incident response and forensics python script to track USB devices events and artifacts in a Windows OS (Vista and later).
+- [**61**星][1y] [C] [synestraa/highcall-library](https://github.com/synestraa/highcall-library) usermode standalone kernel interface
+- [**61**星][4y] [C++] [strozfriedberg/ntfs-linker](https://github.com/strozfriedberg/ntfs-linker) An NTFS journal parser
+- [**61**星][1y] [Py] [srounet/pymem](https://github.com/srounet/pymem) A python library for windows, providing the needed functions to start working on your own with memory editing.
+- [**61**星][5y] [CoffeeScript] [sroberts/hubot-vtr-scripts](https://github.com/sroberts/hubot-vtr-scripts) Scripts for making Hubot a CND Sidekick
+- [**61**星][5y] [PHP] [smaash/fuckshitup](https://github.com/smaash/fuckshitup) php-cli vulnerability scanner
+- [**61**星][4y] [C] [sha0/winvblock](https://github.com/sha0/winvblock) WinVBlock (derived from WinAoE) AoE, MEMDISK, GRUB4DOS RAM Disk, File-Backed Disk Driver
+- [**61**星][4y] [Py] [secretsquirrel/backdoor-pyc](https://github.com/secretsquirrel/backdoor-pyc) Patch pyc files with your code. Fairly lame.
+- [**61**星][3y] [Py] [samyk/awesome-vehicle-security](https://github.com/samyk/awesome-vehicle-security)
+- [**61**星][2y] [ObjC] [rickhe/rhwechat](https://github.com/rickhe/rhwechat) iOS 无需越狱逆向微信:自动抢红包
+- [**61**星][2y] [Py] [pimps/cve-2018-7600](https://github.com/pimps/cve-2018-7600) Exploit for Drupal 7 <= 7.57 CVE-2018-7600
+- [**61**星][1y] [pfalcon/awesome-linux-android-hacking](https://github.com/pfalcon/awesome-linux-android-hacking) List of hints and Q&As to get most of your Linux/Android device
+- [**61**星][4y] [HTML] [payatu/cve-2015-6086](https://github.com/payatu/cve-2015-6086) PoC for CVE-2015-6086
+- [**61**星][7y] [pakt/decv](https://github.com/pakt/decv) Decompiler for Code Virtualizer 1.3.8 (Oreans)
+- [**61**星][4y] [C++] [oowoodone/vmp_odplugin](https://github.com/oowoodone/vmp_odplugin) VMProtect OD Plugin
+- [**61**星][2y] [Py] [oalabs/pyiatrebuild](https://github.com/oalabs/pyiatrebuild) Automatically rebuild Import Address Table for dumped PE file. With python bindings!
+- [**61**星][4y] [C++] [null--/graviton](https://github.com/null--/graviton) Cross Platform Malware Development Framework
+- [**61**星][3y] [nanopool/claymore-xmr-cpu-miner](https://github.com/nanopool/claymore-xmr-cpu-miner) Claymore's CryptoNote Windows CPU Miner
+- [**61**星][3y] [Py] [n00py/post-ex](https://github.com/n00py/post-ex) Post-exploitation scripts for OS X persistence and privesc
+- [**61**星][2y] [Go] [mwgg/passera](https://github.com/mwgg/passera) [UNSUPPORTED] A small tool to turn any entered passphrase into a strong secure password, allowing you to easily use different strong passwords for different websites without storing them
+- [**61**星][2y] [HTML] [michenriksen/bucketlist](https://github.com/michenriksen/bucketlist) Amazon S3 bucket spelunking!
+- [**61**星][4y] [Py] [michael-yip/maltegovt](https://github.com/michael-yip/maltegovt) A set of Maltego transforms for VirusTotal Public API v2.0. This set has the added functionality of caching queries on a daily basis to speed up resolutions.
+- [**61**星][2y] [PS] [mattifestation/pocsubjectinterfacepackage](https://github.com/mattifestation/pocsubjectinterfacepackage) A proof-of-concept subject interface package (SIP) used to demonstrate digital signature subversion attacks.
+- [**61**星][3y] [C++] [maldevel/driver-loader](https://github.com/maldevel/driver-loader) Windows驱动加载器
+- [**61**星][3y] [Py] [lijiejie/struts2_045_scan](https://github.com/lijiejie/struts2_045_scan) Struts2-045 Scanner
+- [**61**星][9m] [Go] [lesnuages/go-execute-assembly](https://github.com/lesnuages/go-execute-assembly) Allow a Go process to dynamically load .NET assemblies
+- [**61**星][6y] [Py] [kevthehermit/yarapcap](https://github.com/kevthehermit/yarapcap) Process HTTP Pcaps With YARA
+- [**61**星][5m] [Py] [josue87/boomer](https://github.com/josue87/boomer) Framework for exploiting local vulnerabilities
+- [**61**星][4y] [JS] [joliss/js-string-escape](https://github.com/joliss/js-string-escape) Escape strings for use as JavaScript string literals
+- [**61**星][5d] [C] [jessfraz/tor](https://github.com/jessfraz/tor) Development fork of
+- [**61**星][4y] [C#] [jaredcatkinson/evilnetconnectionwmiprovider](https://github.com/jaredcatkinson/evilnetconnectionwmiprovider)
+- [**61**星][6y] [Java] [isecpartners/android-killpermandsigchecks](https://github.com/isecpartners/android-killpermandsigchecks) Bypass signature and permission checks for IPCs
+- [**61**星][1y] [im-bug/blockchain-security-list](https://github.com/im-bug/blockchain-security-list)
+- [**61**星][5y] [Py] [hamiltoniancycle/classnamedeobfuscator](https://github.com/hamiltoniancycle/classnamedeobfuscator) Simple script to parse through the .smali files produced by apktool and extract the .source annotation lines.
+- [**61**星][3m] [Py] [hacksysteam/wpadescape](https://github.com/hacksysteam/wpadescape) Sandbox escape using WinHTTP Web Proxy Auto-Discovery Service
+- [**61**星][11m] [Py] [graniet/operative-framework-hd](https://github.com/graniet/operative-framework-hd) operative framework HD is the digital investigation framework, you can interact with websites, email address, company, people, ip address, vulnerability fuzzing ... interact with basic/graphical view and export with XML, JSON, use database management...
+- [**61**星][5y] [Assembly] [gdbinit/mpress_dumper](https://github.com/gdbinit/mpress_dumper) MPRESS dumper for OS X
+- [**61**星][1y] [Assembly] [gamozolabs/falkervisor_beta](https://github.com/gamozolabs/falkervisor_beta)
+- [**61**星][6y] [C] [freewaf/waf-pe](https://github.com/freewaf/waf-pe) Open Source Web Application Firewall Protection Engine
+- [**61**星][5y] [C] [evilsocket/libpe](https://github.com/evilsocket/libpe) A C/C++ library to parse Windows portable executables written with speed and stability in mind.
+- [**61**星][7m] [Ruby] [engineyard/engineyard-serverside](https://github.com/engineyard/engineyard-serverside) This gem deploys your application on Engine Yard Cloud.
+- [**61**星][11m] [JS] [dxa4481/xssoauthpersistence](https://github.com/dxa4481/xssoauthpersistence) Maintaining account persistence via XSS and Oauth
+- [**61**星][3y] [Java] [dodola/simplesmali](https://github.com/dodola/simplesmali) 通过精简Smali语法细节来增强反编译代码阅读性,自定义了一种简单语法
+- [**61**星][2y] [Swift] [devxoul/blockchain](https://github.com/devxoul/blockchain) A blockchain simulator written in Swift
+- [**61**星][7y] [Py] [danghvu/pwp](https://github.com/danghvu/pwp) Python Web framework P0wner
+- [**61**星][2y] [PS] [curi0usjack/adimporter](https://github.com/curi0usjack/adimporter) Credit to Helge Klein -
+- [**61**星][20d] [Py] [crs-support/ftw](https://github.com/crs-support/ftw) Framework for Testing WAFs (FTW!)
+- [**61**星][3y] [Assembly] [cranklin/cranky-data-virus](https://github.com/cranklin/cranky-data-virus) Educational virus written in Assembly that infects 32-bit ELF executables on Linux using the data segment infection method
+- [**61**星][2y] [C] [convisoappsec/firefox_tunnel](https://github.com/convisoappsec/firefox_tunnel) 使用Firefox来建立远程通信隧道, 使用cookie.sqlite/html/js实现payload上传下载
+- [**61**星][10m] [Py] [cisco-sas/katnip](https://github.com/cisco-sas/katnip) Extension library for the Kitty fuzzing framework
+- [**61**星][2y] [Py] [cifasis/nosy-newt](https://github.com/cifasis/nosy-newt) Nosy Newt is a simple concolic execution tool for exploring the input space of a binary executable program based in Triton
+- [**61**星][9y] [C] [chronic-dev/bootrom-dumper](https://github.com/chronic-dev/bootrom-dumper) Utility to Dump iPhone Bootrom
+- [**61**星][5m] [Py] [christophetd/ipv6teal](https://github.com/christophetd/ipv6teal)
+- [**61**星][5m] [Py] [b-mueller/scrooge-mcetherface](https://github.com/b-mueller/scrooge-mcetherface) Attack tool that loots Ether from vulnerable smart contracts
+- [**61**星][7m] [C++] [apexlegendsuc/anti-cheat-emulator](https://github.com/apexlegendsuc/anti-cheat-emulator)
+- [**61**星][1y] [Py] [anbai-inc/cve-2018-2893](https://github.com/anbai-inc/cve-2018-2893) CVE-2018-2893
+- [**61**星][3y] [Shell] [abs0/wargames](https://github.com/abs0/wargames) Shell script to simulate the W.O.P.R. computer from WarGames (wopr)
+- [**60**星][3m] [Go] [dvyukov/go-fuzz-corpus](https://github.com/dvyukov/go-fuzz-corpus) Corpus for github.com/dvyukov/go-fuzz examples
+- [**60**星][3d] [Py] [tribler/py-ipv8](https://github.com/tribler/py-ipv8) Python implementation of the IPv8 layer
+- [**60**星][30d] [Shell] [nccgroup/asafw](https://github.com/nccgroup/asafw) Set of scripts to deal with Cisco ASA firmware [pack/unpack etc.]
+- [**60**星][4y] [shadowsocks/tun2socks-ios](https://github.com/shadowsocks/tun2socks-ios) tun2socks as a library for iOS apps
+- [**60**星][4m] [motherfuzzers/meetups](https://github.com/motherfuzzers/meetups) Materials from Fuzzing Bay Area meetups
+- [**60**星][4m] [JS] [phith0n/xray-poc-generation](https://github.com/phith0n/xray-poc-generation) 🧬 辅助生成 XRay YAML POC
+- [**60**星][1m] [HCL] [jordanpotti/offensiveclouddistribution](https://github.com/jordanpotti/offensiveclouddistribution) Leverage the ability of Terraform and AWS or GCP to distribute large security scans across numerous cloud instances.
+- [**60**星][2m] [JS] [atlasnx/web-cfw-loader](https://github.com/atlasnx/web-cfw-loader) A payload launcher made in javascript for the Nintendo Switch
+- [**60**星][2m] [Py] [landgrey/cve-2019-7609](https://github.com/landgrey/cve-2019-7609) exploit CVE-2019-7609(kibana RCE) on right way by python2 scripts
+- [**60**星][2y] [C] [samuelpowell/cx10-fnrf](https://github.com/samuelpowell/CX10-FNRF) Cheerson CX10 rate mode firmware with integrated RF
+- [**60**星][8m] [C++] [intel/satt](https://github.com/intel/satt)
+- [**60**星][2m] [C++] [imugee/pegasus](https://github.com/imugee/pegasus) reverse engineering extension plugin for windbg
+- [**60**星][3y] [Java] [censorship-no-archive/ceno1](https://github.com/censorship-no-archive/ceno1) (Deprecated PoC) Innovative censorship evading technology based on p2p distributed caching network
+- [**60**星][5m] [Py] [zznop/bnida](https://github.com/zznop/bnida) 4个脚本,在IDA和BinaryNinja间交互数据
+ - [ida_export](https://github.com/zznop/bnida/blob/master/ida/ida_export.py) 将数据从IDA中导入
+ - [ida_import](https://github.com/zznop/bnida/blob/master/ida/ida_import.py) 将数据导入到IDA
+ - [binja_export](https://github.com/zznop/bnida/blob/master/binja_export.py) 将数据从BinaryNinja中导出
+ - [binja_import](https://github.com/zznop/bnida/blob/master/binja_import.py) 将数据导入到BinaryNinja
+- [**60**星][4y] [Ruby] [zombiecraig/c0f](https://github.com/zombiecraig/c0f) CAN of Fingers (c0f) creates passive fingerprints of Make and Model over CAN bus
+- [**60**星][7d] [Py] [yingshang/banruo](https://github.com/yingshang/banruo)
+- [**60**星][7m] [Py] [ultrasecurity/telekiller](https://github.com/ultrasecurity/telekiller) A Tools Session Hijacking And Stealer Local Passcode Telegram Windows
+- [**60**星][4y] [Py] [tycx2ry/docker_api_vul](https://github.com/tycx2ry/docker_api_vul) docker 未授权访问漏洞利用脚本
+- [**60**星][8m] [JS] [try-to/electron-proxy](https://github.com/try-to/electron-proxy) 基于electron开发的内网穿透工具,支持多系统,支持任意本地端口.
+- [**60**星][2y] [Py] [tmr232/idabuddy](https://github.com/tmr232/idabuddy) 逆向滴好盆友??
+- [**60**星][2y] [tkmru/awesome-linux-rootkits](https://github.com/tkmru/awesome-linux-rootkits)
+- [**60**星][10m] [ObjC] [tihmstar/v3ntex](https://github.com/tihmstar/v3ntex) getf tfp0 on iOS 12.0 - 12.1.2
+- [**60**星][6m] [Py] [thesph1nx/spacecow](https://github.com/thesph1nx/spacecow) Windows Rootkit written in Python
+- [**60**星][6m] [PS] [texhex/biossledgehammer](https://github.com/texhex/biossledgehammer) Automated BIOS, ME, TPM firmware update and BIOS settings for HP devices
+- [**60**星][1y] [Ruby] [tallakt/modbus-cli](https://github.com/tallakt/modbus-cli) Modbus command line utility
+- [**60**星][4y] [Objective-C++] [steven-michaud/reverse-engineering-on-osx](https://github.com/steven-michaud/reverse-engineering-on-osx) Reverse Engineering on OS X
+- [**60**星][4m] [OCaml] [stephenrkell/libcrunch](https://github.com/stephenrkell/libcrunch) Runtime + instrumentation adding precise, accurate and fash(-ish) dynamic checking to C (bounds errors, type confusion, ...).
+- [**60**星][2y] [Java] [stefano-lupo/java-proxy-server](https://github.com/stefano-lupo/java-proxy-server) This is a simple HTTP/HTTPS proxy server written in Java
+- [**60**星][7m] [Ruby] [skahwah/automato](https://github.com/skahwah/automato) automato should help with automating some of the user-focused enumeration tasks during an internal penetration test.
+- [**60**星][8y] [Py] [sensepost/anapickle](https://github.com/sensepost/anapickle) Toolset for writing shellcode in Python's Pickle language and for manipulating pickles to inject shellcode.
+- [**60**星][2y] [secwiki/macos-kernel-exploits](https://github.com/secwiki/macos-kernel-exploits) macos-kernel-exploits MacOS平台提权漏洞集合
+- [**60**星][9m] [C#] [securifybv/shelllink](https://github.com/securifybv/shelllink) A .NET Class Library for processing ShellLink (LNK) files
+- [**60**星][4y] [Py] [samvartaka/malware](https://github.com/samvartaka/malware) Various malware, packer, crypter, etc. detection and analysis tools
+- [**60**星][3y] [C++] [rprichard/win32-console-docs](https://github.com/rprichard/win32-console-docs) Win32 Console Documentation -- in particular, console/standard handles and CreateProcess inheritance
+- [**60**星][17d] [JS] [rastating/xss-chef](https://github.com/rastating/xss-chef) A web application for generating custom XSS payloads
+- [**60**星][2m] [Py] [quarkslab/lldbagility](https://github.com/quarkslab/lldbagility) A tool for debugging macOS virtual machines
+- [**60**星][4y] [Py] [phith0n/xdctf2015](https://github.com/phith0n/xdctf2015) writeup about XDCTF 2015
+- [**60**星][6m] [Py] [pdkt-team/ctf](https://github.com/pdkt-team/ctf) CTF write-ups by PDKT team with English and Indonesian language
+- [**60**星][5y] [Py] [owtf/wafbypasser](https://github.com/owtf/wafbypasser)
+- [**60**星][17d] [netstalking-core/netstalking-catalogue](https://github.com/netstalking-core/netstalking-catalogue) Каталог нетсталкерских ресурсов, команд, инструментов, источников контента.
+- [**60**星][5y] [PHP] [nccgroup/webfeet](https://github.com/nccgroup/webfeet) Web Filter External Enumeration Tool (WebFEET)
+- [**60**星][11d] [Vue] [nao-sec/tknk_scanner](https://github.com/nao-sec/tknk_scanner) 基于社区的集成恶意软件识别系统
+- [**60**星][2y] [Py] [mthbernardes/whoamimailbot](https://github.com/mthbernardes/whoamimailbot)
+- [**60**星][1y] [HTML] [micyo202/yan-demo](https://github.com/micyo202/yan-demo) 本项目是基于 SpringMVC+Spring+MyBatis (SSM) 架构的高效率便捷开发框架
+- [**60**星][6d] [C] [lnslbrty/ptunnel-ng](https://github.com/lnslbrty/ptunnel-ng) Tunnel TCP connections through ICMP.
+- [**60**星][3y] [Py] [leonjza/qrxfer](https://github.com/leonjza/qrxfer) Transfer files from Air gapped machines using QR codes
+- [**60**星][5m] [C] [lazenca/kernel-exploit-tech](https://github.com/lazenca/kernel-exploit-tech) Linux Kernel exploitation Tutorial.
+- [**60**星][3y] [PS] [kevin-robertson/conveigh](https://github.com/kevin-robertson/conveigh) Conveigh is a Windows PowerShell LLMNR/NBNS spoofer detection tool
+- [**60**星][2y] [C++] [jmasterx/agui](https://github.com/jmasterx/agui) C++ GUI API Aimed at Games
+- [**60**星][5y] [Go] [jgrahamc/torhoney](https://github.com/jgrahamc/torhoney) Gets the list of TOR exit nodes and matches them with Project Honeypot data
+- [**60**星][1y] [Java] [java-deobfuscator/deobfuscator-gui](https://github.com/java-deobfuscator/deobfuscator-gui) An awesome GUI for an awesome deobfuscator
+- [**60**星][7y] [Java] [intrepidusgroup/iglogger](https://github.com/intrepidusgroup/iglogger) Class to help with adding logging function in smali output from 3rd party Android apps.
+- [**60**星][3y] [Py] [iamckn/mousejack_transmit](https://github.com/iamckn/mousejack_transmit) Wireless mouse/keyboard attack with replay/transmit poc
+- [**60**星][3y] [C] [hoshimin/enjoythering0](https://github.com/hoshimin/enjoythering0) Шаблон полнофункционального драйвера и обёртки над ядерным API
+- [**60**星][4y] [Py] [hood3drob1n/cve-2016-3714](https://github.com/hood3drob1n/cve-2016-3714) ImaegMagick Code Execution (CVE-2016-3714)
+- [**60**星][2y] [C++] [hasherezade/mypintools](https://github.com/hasherezade/mypintools) Tools to run with Intel PIN
+- [**60**星][5y] [PS] [harmj0y/cortana](https://github.com/harmj0y/cortana) This is a pack of Cortana scripts commonly used on our pentests.
+- [**60**星][8m] [Py] [grocid/ctf](https://github.com/grocid/ctf)
+- [**60**星][2y] [C] [gravity-postquantum/gravity-sphincs](https://github.com/gravity-postquantum/gravity-sphincs) Signature scheme submitted to NIST's Post-Quantum Cryptography Project
+- [**60**星][5d] [JS] [gitsquared/sherlock-js](https://github.com/gitsquared/sherlock-js) Find usernames across over 170 social networks - Fast & flexible remake of sdushantha/sherlock
+- [**60**星][2y] [Java] [geeksonsecurity/android-overlay-malware-example](https://github.com/geeksonsecurity/android-overlay-malware-example) Harmless Android malware using the overlay technique to steal user credentials.
+- [**60**星][1y] [Shell] [galeone/letsencrypt-lighttpd](https://github.com/galeone/letsencrypt-lighttpd) Renew your let's encrypt certificates monthly, using lighttpd as webserver.
+- [**60**星][3y] [Py] [fireeye/volatility-plugins](https://github.com/fireeye/volatility-plugins)
+- [**60**星][2y] [C++] [finixbit/ftrace](https://github.com/finixbit/ftrace) Simple Function calls tracer
+- [**60**星][4y] [PHP] [filetofirewall/fof](https://github.com/filetofirewall/fof) Filet-O-Firewall Vulnerability PoC
+- [**60**星][5y] [Py] [eykd/owyl](https://github.com/eykd/owyl) A python behavior tree for implementing fast and flexible AI.
+- [**60**星][10m] [exitmsconfig/engineering-box](https://github.com/exitmsconfig/engineering-box) engineering Box (简称 - engineering) 是一个集合github平台上的安全行业从业者自研开源扫描器的仓库,包括子域名枚举、数据库漏洞扫描、弱口令或信息泄漏扫描、端口扫描、指纹识别以及其他大型扫描器或模块化扫描器,同时该仓库只收录各位安全行业从业者自己编写的一般性开源扫描器,类似awvs、nmap、w3af等知名扫描工具不收录,收集全球各位同仁爱好者维护项目
+- [**60**星][1y] [Py] [esmog/nodexp](https://github.com/esmog/nodexp) NodeXP - A Server Side Javascript Injection tool capable of detecting and exploiting Node.js vulnerabilities
+- [**60**星][8m] [Shell] [ernw/static-toolbox](https://github.com/ernw/static-toolbox) A collection of statically compiled tools like Nmap and Socat.
+- [**60**星][4y] [Py] [dotcppfile/serbot](https://github.com/dotcppfile/serbot) Advanced Controller/Server/Client Reverse Shell/Bot – Windows/Linux – Python
+- [**60**星][1y] [Py] [darkw1z/ps1jacker](https://github.com/darkw1z/ps1jacker) Ps1jacker is a tool for generating COM Hijacking payload.
+- [**60**星][4m] [Py] [dai-lab/steganogan](https://github.com/dai-lab/steganogan) SteganoGAN is a tool for creating steganographic images using adversarial training.
+- [**60**星][9d] [HTML] [cudeso/tools](https://github.com/cudeso/tools) Different tools, koen.vanimpe@cudeso.be
+- [**60**星][2y] [C] [croemheld/lkm-rootkit](https://github.com/croemheld/lkm-rootkit) A LKM rootkit for most newer kernel versions.
+- [**60**星][7m] [JS] [coolervoid/nozes](https://github.com/coolervoid/nozes) Pentest cmd manager- ALpha
+- [**60**星][1y] [Py] [conix-security/btg](https://github.com/conix-security/btg) BTG's purpose is to make fast and efficient search on IOC
+- [**60**星][1y] [C++] [cisco-talos/thanatosdecryptor](https://github.com/cisco-talos/thanatosdecryptor) ThanatosDecryptor is an executable program that attempts to decrypt certain files encrypted by the Thanatos malware.
+- [**60**星][5y] [Py] [byt3bl33d3r/duckhunter](https://github.com/byt3bl33d3r/duckhunter) Converts a USB Rubber ducky script into a Kali Nethunter friendly format for the HID attack
+- [**60**星][2y] [DTrace] [brendangregg/dtrace-tools](https://github.com/brendangregg/dtrace-tools) DTrace tools for FreeBSD
+- [**60**星][2y] [breaktoprotect/cve-2017-12615](https://github.com/breaktoprotect/cve-2017-12615) POC Exploit for Apache Tomcat 7.0.x CVE-2017-12615 PUT JSP vulnerability.
+- [**60**星][5m] [Py] [brakmic/sinkholes](https://github.com/brakmic/sinkholes)
+- [**60**星][1y] [Py] [blackholesec/wifigod](https://github.com/blackholesec/wifigod) Wireless Security Testing v1.5
+- [**60**星][3y] [C] [arvanaghi/windows-dll-injector](https://github.com/arvanaghi/windows-dll-injector) A basic Windows DLL injector in C using CreateRemoteThread and LoadLibrary. Implemented for educational purposes.
+- [**60**星][1y] [Py] [arthastang/iot-home-guard](https://github.com/arthastang/iot-home-guard) A tool for malicious behavior detection in IoT devices
+- [**60**星][2y] [Py] [argp/unmask_jemalloc](https://github.com/argp/unmask_jemalloc) De Mysteriis Dom jemalloc
+- [**60**星][1y] [Py] [anssi-fr/audit-radius](https://github.com/anssi-fr/audit-radius) A RADIUS authentication server audit tool
+- [**60**星][5m] [C++] [alf45tar/pedalino](https://github.com/alf45tar/pedalino) Smart wireless MIDI foot controller for guitarists and more.
+- [**60**星][7m] [Rust] [ajmwagar/lor-axe](https://github.com/ajmwagar/lor-axe) 🪓 a multi-threaded, low-bandwidth HTTP DOS tool
+- [**60**星][1y] [HTML] [aglcaicai/kalitoolsmanual](https://github.com/aglcaicai/kalitoolsmanual) Kali Linux 工具合集中文说明书
+- [**60**星][2m] [Py] [9b/netinfo](https://github.com/9b/netinfo) Simple IP enrichment service and API wrapping PyASN and MaxMind GeoIP.
+- [**59**星][8m] [JS] [javascript-obfuscator/gulp-javascript-obfuscator](https://github.com/javascript-obfuscator/gulp-javascript-obfuscator) Gulp plugin for javascript-obfuscator package.
+- [**59**星][8m] [JS] [shadowsocks/shadowsocks-restful-api](https://github.com/shadowsocks/shadowsocks-restful-api) Secure, reliable, standard restful api for managing shadowsocks-libev
+- [**59**星][3m] [snoopysecurity/osce-prep](https://github.com/snoopysecurity/osce-prep) A list of freely available resources that can be used as a prerequisite before taking OSCE.
+- [**59**星][13d] [C++] [whid-injector/whid-31337](https://github.com/whid-injector/whid-31337) WHID Elite is a GSM-enabled Open-Source Multi-Purpose Offensive Device that allows a threat actor to remotely inject keystrokes, bypass air-gapped systems, conduct mousejacking attacks, do acoustic surveillance, RF replay attacks and much more. In practice, is THE Wet Dream of any Security Consultant out there!
+- [**59**星][8m] [nationalsecurityagency/ghidra-data](https://github.com/nationalsecurityagency/ghidra-data) Supporting Data Archives for Ghidra
+- [**59**星][3m] [C] [angr/vex](https://github.com/angr/vex) A patched version of VEX to work with PyVEX.
+- [**59**星][2d] [aquasecurity/vuln-list](https://github.com/aquasecurity/vuln-list) NVD, RedHat, Debian, Ubuntu, Alpine
+- [**59**星][4y] [JS] [auth0-blog/react-flux-debug-actions-sample](https://github.com/auth0-blog/react-flux-debug-actions-sample) This repository shows how you can use Flux actions to reproduce your user's issues in your own browser
+- [**59**星][2m] [Py] [mozilla/frost](https://github.com/mozilla/frost) Unit testing framework for test driven security of AWS configurations, and more.
+- [**59**星][3y] [Py] [fsecurelabs/peas](https://github.com/FSecureLABS/peas) PEAS is a Python 2 library and command line application for running commands on an ActiveSync server e.g. Microsoft Exchange.
+- [**59**星][1y] [C] [zhechkoz/pwin](https://github.com/zhechkoz/pwin) Security Evaluation of Dynamic Binary Instrumentation Engines
+- [**59**星][4y] [Java] [zd2100/pscout](https://github.com/zd2100/pscout)
+- [**59**星][11m] [C] [xyzz/amonet](https://github.com/xyzz/amonet) A bootrom exploit for MediaTek devices
+- [**59**星][4y] [PS] [xorrior/emailraider](https://github.com/xorrior/emailraider) Powershell MS Outlook enumeration and phishing tool
+- [**59**星][1y] [xenithlabs/rfid-workshop](https://github.com/xenithlabs/rfid-workshop)
+- [**59**星][1y] [C#] [wledfor2/playhooky](https://github.com/wledfor2/playhooky) C# Runtime Hooking Library for .NET/Mono/Unity.
+- [**59**星][2m] [Go] [wickett/lambhack](https://github.com/wickett/lambhack) A very vulnerable serverless application in AWS Lambda
+- [**59**星][8m] [Py] [viele/onionskinrenderer](https://github.com/viele/onionskinrenderer) This is an Onion Skin Renderer for Autodesk Maya
+- [**59**星][11m] [Py] [s0md3v/infinity](https://github.com/ultimatehackers/infinity) Infinity can get phone numbers from facebook accounts with some maths and shit.
+- [**59**星][4m] [Zeek] [tylabs/dovehawk](https://github.com/tylabs/dovehawk) Dovehawk is a Zeek module that automatically imports MISP indicators and reports Sightings
+- [**59**星][2y] [Lua] [tkcert/winnti-nmap-script](https://github.com/tkcert/winnti-nmap-script) Nmap Script to scan for Winnti infections
+- [**59**星][1y] [Py] [tiaotiaolong/ttlscan](https://github.com/tiaotiaolong/ttlscan) 一款简易的插件化的漏洞扫描器框架
+- [**59**星][11m] [Py] [thom-s/httphish](https://github.com/thom-s/httphish) Quickly clone a website and launch an HTTP server to phish information with httphish.py
+- [**59**星][3y] [C#] [tech-srl/esh](https://github.com/tech-srl/esh) statistical similarity of binaries (Esh)
+- [**59**星][5y] [Ruby] [tduehr/buby](https://github.com/tduehr/buby) A JRuby implementation of the BurpExtender interface for PortSwigger Burp Suite.
+- [**59**星][3y] [Shell] [tapio/nautilus-git-scripts](https://github.com/tapio/nautilus-git-scripts) Nautilus scripts for interacting with a Git repository.
+- [**59**星][4m] [sukkaw/cloudflare-block-bad-bot-ruleset](https://github.com/sukkaw/cloudflare-block-bad-bot-ruleset)
+- [**59**星][7y] [Java] [strazzere/dehoser](https://github.com/strazzere/dehoser) Unpacker for the HoseDex2Jar APK Protection which packs the original file inside the dex header
+- [**59**星][1y] [C] [sourceincite/cve-2018-8440](https://github.com/sourceincite/cve-2018-8440) CVE-2018-8440 standalone exploit
+- [**59**星][4m] [C] [sonertari/sslproxy](https://github.com/sonertari/sslproxy) Transparent SSL/TLS proxy for decrypting and diverting network traffic to other programs, such as UTM services, for deep SSL inspection
+- [**59**星][1y] [C] [skeeto/ptrace-examples](https://github.com/skeeto/ptrace-examples) Examples for Linux ptrace(2)
+- [**59**星][3y] [Py] [sirusdv/edgehttp2fuzzer](https://github.com/sirusdv/edgehttp2fuzzer) Peach Pit for HTTP/2 Targeting Microsoft Edge
+- [**59**星][2m] [PHP] [sirbrillig/phpcs-variable-analysis](https://github.com/sirbrillig/phpcs-variable-analysis) Find undefined and unused variables with the PHP Codesniffer static analysis tool.
+- [**59**星][8m] [YARA] [sfaci/masc](https://github.com/sfaci/masc) 扫描网站中的恶意软件, 以及其他一些网站维护功能
+- [**59**星][2y] [Go] [sensepost/notruler](https://github.com/sensepost/notruler) The opposite of Ruler, provides blue teams with the ability to detect Ruler usage against Exchange.
+- [**59**星][6m] [Py] [securityautomation/autosource](https://github.com/securityautomation/autosource) Automated SonarQube
+- [**59**星][1m] [s9mf/xss_test](https://github.com/s9mf/xss_test) 记录个人XSS学习
+- [**59**星][2m] [C#] [rvrsh3ll/sharpexcel4-dcom](https://github.com/rvrsh3ll/sharpexcel4-dcom) Port of Invoke-Excel4DCOM
+- [**59**星][13d] [rub-nds/johnny-you-are-fired](https://github.com/rub-nds/johnny-you-are-fired) Artifacts for the USENIX publication.
+- [**59**星][4y] [C] [robertdavidgraham/cve-2015-5477](https://github.com/robertdavidgraham/cve-2015-5477) PoC exploit for CVE-2015-5477 BIND9 TKEY assertion failure
+- [**59**星][17d] [C] [riscure/optee_fuzzer](https://github.com/riscure/optee_fuzzer) This repository contains the code for a fuzzing prototype for the OP-TEE system call interface using AFL.
+- [**59**星][3m] [Go] [rickgray/vscan-go](https://github.com/rickgray/vscan-go) golang version for nmap service and application version detection (without nmap installation)
+- [**59**星][11m] [Py] [reptilehaus/eternal-blue](https://github.com/reptilehaus/eternal-blue) REPTILEHAUS' simplified build process of Worawit Wang' (@sleepya_) version of EternalBlue.. The NSA exploit brought to you by the ShadowBrokers for exploiting MS17-010
+- [**59**星][10m] [Py] [push0ebp/allirt](https://github.com/push0ebp/allirt) Tool that converts All of libc to signatures for IDA Pro FLIRT Plugin. and utility make sig with FLAIR easily
+- [**59**星][4y] [Py] [psychomario/pyinject](https://github.com/psychomario/pyinject) A python module to help inject shellcode/DLLs into windows processes
+- [**59**星][4m] [Py] [owasp/threat-model-cookbook](https://github.com/owasp/threat-model-cookbook) This project is about creating and publishing threat model examples.
+- [**59**星][6y] [Py] [offensivepython/sniffy](https://github.com/offensivepython/sniffy) A Simple network sniffer implemented on Python 3
+- [**59**星][3m] [Shell] [nviso-be/sec599](https://github.com/nviso-be/sec599) SEC599 supporting GitHub repository
+- [**59**星][3y] [PS] [nettitude/powershell](https://github.com/nettitude/powershell)
+- [**59**星][6m] [Py] [neonprimetime/phishingkittracker](https://github.com/neonprimetime/phishingkittracker) Tracking Threat Actor Emails in Phishing Kits. CC @PhishKitTracker on twitter if you find a #threatactoremail in #phishingkit , maintained by
+- [**59**星][1y] [Go] [nebulouslabs/entropy-mnemonics](https://github.com/nebulouslabs/entropy-mnemonics) Human readable entropy.
+- [**59**星][1m] [Java] [mozilla/zest](https://github.com/mozilla/zest)
+- [**59**星][2y] [Visual Basic .NET] [mgeeky/robustpentestmacro](https://github.com/mgeeky/robustpentestmacro) This is a rich-featured Visual Basic macro code for use during Penetration Testing assignments, implementing various advanced post-exploitation techniques.
+- [**59**星][2y] [Go] [matishsiao/goinfo](https://github.com/matishsiao/goinfo) get os information use golang
+- [**59**星][3y] [C++] [markhc/windbg_to_c](https://github.com/markhc/windbg_to_c) Translates WinDbg "dt" structure dump to a C structure
+- [**59**星][5y] [C++] [malwaretech/uacelevator](https://github.com/malwaretech/uacelevator) Passive UAC elevation using dll infection
+- [**59**星][6d] [leipzig/awesome-reproducible-research](https://github.com/leipzig/awesome-reproducible-research) A curated list of reproducible research case studies, projects, tutorials, and media
+- [**59**星][5y] [ObjC] [kpwn/vpwn](https://github.com/kpwn/vpwn) xnu local privilege escalation via cve-2015-1140 IOHIDSecurePromptClient injectStringGated heap overflow | poc||gtfo
+- [**59**星][2y] [C] [koodous/androguard-yara](https://github.com/koodous/androguard-yara) Module to use Androguard with Yara
+- [**59**星][3y] [Go] [jijinggang/golocproxy](https://github.com/jijinggang/golocproxy) 轻量级超强反向代理软件,用go语言开发,通过公共可知的服务器端口代理,把局域网内任何主机的本地服务发布给局域网外的用户,可用来跨越各种防火墙。
+- [**59**星][2y] [Py] [jeremyngalloway/mod_plaintext.py](https://github.com/jeremyngalloway/mod_plaintext.py) AKA "Internet Chemotherapy"
+- [**59**星][7m] [Py] [jas502n/cve-2019-6340](https://github.com/jas502n/cve-2019-6340) Drupal8's REST RCE, SA-CORE-2019-003, CVE-2019-6340
+- [**59**星][5m] [Py] [jas502n/cve-2019-11580](https://github.com/jas502n/cve-2019-11580) CVE-2019-11580 Atlassian Crowd and Crowd Data Center RCE
+- [**59**星][2y] [Py] [isra17/nrs](https://github.com/isra17/nrs) 脱壳并分析NSIS installer打包的文件
+- [**59**星][6m] [Py] [intrinsec/comission](https://github.com/intrinsec/comission) WhiteBox CMS analysis
+- [**59**星][30d] [infosec-community/apac-conferences](https://github.com/infosec-community/apac-conferences) A community contributed consolidated list of InfoSec meetups in the Asia Pacific region.
+- [**59**星][1y] [Py] [howie6879/hproxy](https://github.com/howie6879/hproxy) hproxy - Asynchronous IP proxy pool, aims to make getting proxy as convenient as possible.(异步爬虫代理池)
+- [**59**星][5m] [Py] [hgascon/adagio](https://github.com/hgascon/adagio) Structural Analysis and Detection of Android Malware
+- [**59**星][4y] [hduffddybz/linux_websites](https://github.com/hduffddybz/linux_websites) Commonly used kernel hacking site
+- [**59**星][5y] [C] [hackedteam/soldier-win](https://github.com/hackedteam/soldier-win) RCS Soldier for Windows
+- [**59**星][1y] [Py] [gunnerstahl/jqshell](https://github.com/gunnerstahl/jqshell) A weaponized version of CVE-2018-9206
+- [**59**星][5y] [PS] [enigma0x3/outlookpersistence](https://github.com/enigma0x3/outlookpersistence)
+- [**59**星][7m] [HTML] [dustyfresh/honeypress](https://github.com/dustyfresh/honeypress) python based WordPress honeypot in a docker container
+- [**59**星][7m] [HTML] [dobin/yookiterm-slides](https://github.com/dobin/yookiterm-slides) Exploitation and Mitigation Slides
+- [**59**星][11m] [C] [depletionmode/wsipc](https://github.com/depletionmode/wsipc) Working Set Page Cache side-channel IPC PoC
+- [**59**星][8y] [JS] [davepacheco/node-heap-dump](https://github.com/davepacheco/node-heap-dump) Testing node heap dumps
+- [**59**星][2m] [Py] [dannycork/python-whois](https://github.com/dannycork/python-whois) Python module/library for retrieving WHOIS information of domains.
+- [**59**星][9y] [C++] [cr4sh/drvhide-poc](https://github.com/cr4sh/drvhide-poc) Hidden kernel mode code execution for bypassing modern anti-rootkits.
+- [**59**星][1y] [Py] [cortesi/mitmproxy](https://github.com/cortesi/mitmproxy) An interactive SSL-capable intercepting HTTP proxy for penetration testers and software developers
+- [**59**星][2y] [C] [coolervoid/ninja_shell](https://github.com/coolervoid/ninja_shell) Port Knocking technique with AES256-GCM
+- [**59**星][2y] [Java] [contrast-security-oss/contrast-ro0](https://github.com/contrast-security-oss/contrast-ro0) A tiny Java agent that blocks attacks against unsafe deserialization
+- [**59**星][2y] [C] [cisco-talos/locky](https://github.com/cisco-talos/locky)
+- [**59**星][1y] [Py] [capt-meelo/telewreck](https://github.com/capt-meelo/telewreck) A Burp extension to detect and exploit versions of Telerik Web UI vulnerable to CVE-2017-9248.
+- [**59**星][28d] [Py] [binaryanalysisplatform/bap-ida-python](https://github.com/binaryanalysisplatform/bap-ida-python) IDAPython脚本,在IDA中集成BAP
+- [**59**星][6y] [Py] [bez0r/pdns2](https://github.com/bez0r/pdns2) Passive DNS V2
+- [**59**星][2y] [Py] [attackercan/teamviewer-dumper](https://github.com/attackercan/teamviewer-dumper) teamviewer-dumper: 从内存中转储TeamViewer ID 和密码
+- [**59**星][11m] [Py] [anteater/anteater](https://github.com/anteater/anteater) Anteater - CI/CD Gate Check Framework
+- [**59**星][2y] [Py] [amoulu/tinysmaliemulator](https://github.com/amoulu/tinysmaliemulator) A very minimalist smali emulator that could be used to "decrypt" obfuscated strings
+- [**59**星][12m] [aliasrobotics/rsf](https://github.com/aliasrobotics/rsf) The Robot Security Framework (RSF), Robot Security Framework (RSF), a standardized methodology to perform security assessments in robotics.
+- [**59**星][2y] [C++] [alexhude/loadprocconfig](https://github.com/alexhude/loadprocconfig) 加载处理器配置文件
+- [**59**星][6m] [JS] [alexcn/onestack](https://github.com/alexcn/onestack) IT管理系统,实现自动化运维,整合CMDB和监控,实现自动化部署,打通开发、运维和测试的边界,实现一栈式管理。
+- [**59**星][2y] [Shell] [abhisek/pwnworks](https://github.com/abhisek/pwnworks) Exploitation challenges for CTF
+- [**58**星][5d] [Java] [daggerok/streaming-file-server](https://github.com/daggerok/streaming-file-server) full-stack java file server with no limitation for files uploads and downloads: spring-boot + Gradle Kotlin DSL, Gradle buildSrc, postgres / h2, apache fileUpload, lombok, mustache, docker, jgiven, powermock, gradle, CI, bootstrap 4, bootstrap-filelinput, webjars, maven github-release-plugin, nginx, haproxy, reverse-proxy
+- [**58**星][3y] [v2ray/planning](https://github.com/v2ray/planning) Deprecated. Please use v2ray-core for feature requests
+- [**58**星][2m] [Py] [shellphish/shellphish-afl](https://github.com/shellphish/shellphish-afl) A pip wrapper around AFL.
+- [**58**星][3y] [Shell] [r00t-3xp10it/netool-toolkit](https://github.com/r00t-3xp10it/netool-toolkit) MitM pentesting opensource toolkit (scan/sniff/exploit) -- NOT SUPORTED ANYMORE --
+- [**58**星][4y] [HTML] [kevthehermit/spearphisher](https://github.com/kevthehermit/spearphisher) A Web Application to Send and Track Spear Phishing Campaigns
+- [**58**星][1m] [JS] [medicean/as_bypass_php_disable_functions](https://github.com/medicean/as_bypass_php_disable_functions) antsword bypass PHP disable_functions
+- [**58**星][7y] [Shell] [lozzd/autonmap](https://github.com/lozzd/autonmap) Automated daily scan using Nmap and report on the differences
+- [**58**星][6m] [JS] [yzyjim/shadowsocks-back-china-pac](https://github.com/yzyjim/shadowsocks-back-china-pac) Shadowsocks翻墙回国PAC规则
+- [**58**星][3m] [C++] [vlad-tri/cve-2019-1132](https://github.com/vlad-tri/cve-2019-1132) EoP POC for CVE-2019-1132
+- [**58**星][2d] [C] [cisco/mercury](https://github.com/cisco/mercury) network fingerprinting and packet metadata capture
+- [**58**星][1y] [Shell] [cyb0r9/dvr-exploiter](https://github.com/Cyb0r9/DVR-Exploiter) DVR-Exploiter a Bash Script Program Exploit The DVR's Based on CVE-2018-9995
+- [**58**星][3y] [Py] [deadbits/intersect-2.5](https://github.com/deadbits/Intersect-2.5) Post-Exploitation Framework
+- [**58**星][2y] [Shell] [offxec/samurai](https://github.com/OffXec/Samurai) Samurai Email Discovery - SED is a email discovery framework that grabs emails via google dork, company name, or domain name.
+- [**58**星][2y] [Ruby] [hammackj/risu](https://github.com/hammackj/risu) Risu is Nessus parser, that converts the generated reports into a ActiveRecord database, this allows for easy report generation and vulnerability verification.
+- [**58**星][7m] [HTML] [leonwxqian/lucky-js-fuzz](https://github.com/leonwxqian/lucky-js-fuzz) A web page based fuzzer that generates random JS statements then fuzz in the web-browser.
+- [**58**星][8y] [Ruby] [wuntee/androidaudittools](https://github.com/wuntee/androidaudittools)
+- [**58**星][3y] [CSS] [wizardforcel/sploitfun-linux-x86-exp-tut-zh](https://github.com/wizardforcel/sploitfun-linux-x86-exp-tut-zh)
+- [**58**星][2y] [Py] [wavestone-cdt/dyode](https://github.com/wavestone-cdt/dyode) A low-cost, DIY data diode for ICS
+- [**58**星][2y] [Py] [vivami/ms17-010](https://github.com/vivami/ms17-010) MS17-010
+- [**58**星][9m] [Shell] [vay3t/hax0rpi](https://github.com/vay3t/hax0rpi) A Raspberry Pi Hacker Tools suite
+- [**58**星][2y] [JS] [vah13/win_zip_password](https://github.com/vah13/win_zip_password) Python script to hook ZIP files passwords in Windows 10
+- [**58**星][7m] [tyranid/infosec-presentations](https://github.com/tyranid/infosec-presentations) A repository of previous info-sec presentations I've presented.
+- [**58**星][5y] [C++] [tyranid/exploitdotnetdcom](https://github.com/tyranid/exploitdotnetdcom) A tool to exploit .NET DCOM for EoP and RCE. Is fixed in latest versions of the .NET.
+- [**58**星][6m] [Py] [turr0n/firebase](https://github.com/turr0n/firebase) Exploiting misconfigured firebase databases
+- [**58**星][6m] [Lua] [trisulnsm/trisul-scripts](https://github.com/trisulnsm/trisul-scripts) Ready to run scripts for network analysis
+- [**58**星][4d] [tonyphipps/siem](https://github.com/tonyphipps/siem) SIEM Tactics, Techiques, and Procedures
+- [**58**星][1y] [Py] [tarlogicsecurity/arecibo](https://github.com/tarlogicsecurity/arecibo) Arecibo: Endpoint for Out-of-Band Exfiltration (DNS & HTTP)
+- [**58**星][1y] [PHP] [slangji/wp-missed-schedule](https://github.com/slangji/wp-missed-schedule) Find only missed schedule posts, every 15 minutes, and republish correctly 10 items each session. The Original plugin (only this) no longer available on WordPress.org for explicit author request! Compatible with WP 2.1+ to 4.9+ and 5.0-beta3 (100.000+ installs 300.000+ downloads 2016-04-13) Please: do not install unauthorized malware cloned forked!
+- [**58**星][3m] [Py] [simplysecurity/simplydomain](https://github.com/simplysecurity/simplydomain) Subdomain brute force focused on speed and data serialization
+- [**58**星][1m] [she11c0der/scanners-box](https://github.com/she11c0der/scanners-box) 安全从业人员常用开源工具资料合集
+- [**58**星][3y] [Py] [sensepost/xrdp](https://github.com/sensepost/xrdp) A rudimentary remote desktop tool for the X11 protocol exploiting unauthenticated x11 sessions
+- [**58**星][4y] [C++] [rootkitsmm/win10pcap-exploit](https://github.com/rootkitsmm/win10pcap-exploit) Exploit Win10Pcap Driver to enable some Privilege in our process token ( local Privilege escalation )
+- [**58**星][2y] [C] [riscybusiness/riscypacker](https://github.com/riscybusiness/riscypacker) Process Hollowing Packer
+- [**58**星][3y] [rehints/windbg](https://github.com/rehints/windbg)
+- [**58**星][2y] [PHP] [raesene/bwapp](https://github.com/raesene/bwapp)
+- [**58**星][3d] [PS] [quake4/mindminer](https://github.com/quake4/mindminer) MindMiner - the miner manager programm with online monitoring
+- [**58**星][6y] [Java] [pwntester/xmldecoder](https://github.com/pwntester/xmldecoder) RCE Exploit PoC for XMLDecoder
+- [**58**星][1y] [Java] [psycopaths/jdart](https://github.com/psycopaths/jdart) A dynamic symbolic analysis tool for Java
+- [**58**星][7m] [JS] [pownjs/pown-proxy](https://github.com/pownjs/pown-proxy) Pown Proxy is a versatile web application security testing proxy with cool TUI features.
+- [**58**星][10m] [Java] [portswigger/replicator](https://github.com/portswigger/replicator) Burp extension to help developers replicate findings from pen tests
+- [**58**星][5y] [C] [poliva/dexinfo](https://github.com/poliva/dexinfo) A very rudimentary Android DEX file parser
+- [**58**星][6m] [Rust] [poc-consortium/scavenger](https://github.com/poc-consortium/scavenger) A fast Burstcoin miner written in Rust
+- [**58**星][2y] [Shell] [p292/nackered](https://github.com/p292/nackered) This is a bash script to bypass 802.1x NAC
+- [**58**星][2y] [C] [outflanknl/external_c2](https://github.com/outflanknl/external_c2) POC for Cobalt Strike external C2
+- [**58**星][7y] [Py] [opensecurityresearch/pentest-scripts](https://github.com/opensecurityresearch/pentest-scripts)
+- [**58**星][3y] [Py] [nopernik/fuzzbunch_wrapper](https://github.com/nopernik/fuzzbunch_wrapper) Fuzzbunch Python-Wine wrapper
+- [**58**星][2y] [C] [noloader/sha-intrinsics](https://github.com/noloader/sha-intrinsics) SHA-1, SHA-256 and SHA-512 compression functions using Intel, ARMv8 and Power8 SHA intrinsics
+- [**58**星][2y] [Java] [nightoftwelve/virtualhookex](https://github.com/nightoftwelve/virtualhookex) Android application hooking tool based on VirtualHook/VirtualApp
+- [**58**星][3y] [nidom/buff](https://github.com/nidom/buff) A proxy tool for macOS.
+- [**58**星][4y] [HTML] [nccgroup/iodide](https://github.com/nccgroup/iodide) The Cisco IOS Debugger and Integrated Disassembler Environment
+- [**58**星][1y] [C++] [my-first-pr/hacktoberfest-2018](https://github.com/my-first-pr/hacktoberfest-2018)
+- [**58**星][1y] [C] [mrgeffitas/hwfwbypass](https://github.com/mrgeffitas/hwfwbypass)
+- [**58**星][2y] [JS] [monkeym4ster/domainfuzz](https://github.com/monkeym4ster/domainfuzz) Domain name permutation engine for detecting typo squatting, phishing and corporate espionage
+- [**58**星][8m] [Assembly] [mist64/c64rom](https://github.com/mist64/c64rom) Commodore 64 BASIC and KERNAL Source
+- [**58**星][5y] [Go] [mikkolehtisalo/cvesync](https://github.com/mikkolehtisalo/cvesync) CVE feed synchronization to issue management system
+- [**58**星][3y] [ASP] [merttasci/weapons4pentester](https://github.com/merttasci/weapons4pentester)
+- [**58**星][7m] [JS] [mdslab/wstun](https://github.com/mdslab/wstun) Tunnels and reverse tunnels over WebSocket
+- [**58**星][6y] [Py] [malwarelu/tools](https://github.com/malwarelu/tools) Malware.lu tools
+- [**58**星][6y] [CoffeeScript] [lupino/shadowsocks-gui](https://github.com/lupino/shadowsocks-gui) Shadowsocks GUI client
+- [**58**星][2y] [Java] [littlerich/wechatluckymoney](https://github.com/littlerich/wechatluckymoney) 本开源项目为Xposed练手代码,可以从中深入了解使用Xposed的用法和源码逆向分析能力
+- [**58**星][3y] [PS] [killswitch-gui/persistence-survivability](https://github.com/killswitch-gui/persistence-survivability) Powershell Persistence Locator
+- [**58**星][2y] [Shell] [kevthehermit/pentest](https://github.com/kevthehermit/pentest) Just a collection of pentest stuffs
+- [**58**星][2y] [C] [jas502n/ubuntu-0day](https://github.com/jas502n/ubuntu-0day) all 4.4 ubuntu aws instances are vulnerable
+- [**58**星][5y] [C++] [ivanfratric/ropguard](https://github.com/ivanfratric/ropguard) Runtime Prevention of Return-Oriented Programming Attacks
+- [**58**星][2y] [C++] [int0/processisolator](https://github.com/int0/processisolator)
+- [**58**星][3y] [C] [infosecguerrilla/reflectivesoinjection](https://github.com/infosecguerrilla/reflectivesoinjection) Reflective SO injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process.
+- [**58**星][2y] [Py] [hasherezade/crypto_utils](https://github.com/hasherezade/crypto_utils) Set of my small utils related to cryptography, encoding, decoding etc
+- [**58**星][3y] [hackstar7/wanacry](https://github.com/hackstar7/wanacry) WannaCry Ransomware
+- [**58**星][7y] [gynophage/solarized_ida](https://github.com/gynophage/solarized_ida) Solarized黑色主题
+- [**58**星][28d] [HTML] [gwen001/actarus](https://github.com/gwen001/actarus) Actarus is a custom tool for bug bounty
+- [**58**星][17d] [C] [grehack/ctf-challs](https://github.com/grehack/ctf-challs) Here are the challenges (including sources) of the GreHack CTF.
+- [**58**星][1y] [C++] [fjh658/hexrayscodexplorer](https://github.com/fjh658/hexrayscodexplorer) Hex-Rays Decompiler plugin for better code navigation. Add support ida7.0/7.1/7.2 for macOS
+- [**58**星][2y] [Go] [evilsocket/ftrace](https://github.com/evilsocket/ftrace) Go library to trace Linux syscalls using the FTRACE kernel framework.
+- [**58**星][2y] [C++] [eternalsakura/ctf_pwn](https://github.com/eternalsakura/ctf_pwn)
+- [**58**星][7m] [C#] [eternalc0der/teleshadow3](https://github.com/eternalc0der/teleshadow3) Telegram Desktop Session Stealer
+- [**58**星][5m] [JS] [eslint/eslint-scope](https://github.com/eslint/eslint-scope) eslint-scope: ECMAScript scope analyzer
+- [**58**星][3y] [Py] [epinna/stegosip](https://github.com/epinna/stegosip) TCP tunnel over RTP/SIP
+- [**58**星][6m] [Go] [dsnet/udptunnel](https://github.com/dsnet/udptunnel) Daemon for creating a simple VPN over UDP.
+- [**58**星][10m] [Py] [dogoncouch/logdissect](https://github.com/dogoncouch/logdissect) CLI utility and Python module for analyzing log files and other data.
+- [**58**星][4y] [C] [dev-zzo/exploits-nt-privesc](https://github.com/dev-zzo/exploits-nt-privesc) Exploit collection for NT privilege escalation
+- [**58**星][4m] [JS] [detroitenglish/haveibeenpwned-zxcvbn-lambda-api](https://github.com/detroitenglish/haveibeenpwned-zxcvbn-lambda-api) Deploy your own secure API to estimate password strength and check haveibeenpwned for known matches - HTTPS by force, server not required, fire and brimstone sold separately
+- [**58**星][6m] [Shell] [d4rk007/blueghost](https://github.com/d4rk007/blueghost) A network tool designed to assist blue teams in banning attackers from linux servers.
+- [**58**星][3y] [PHP] [cspf-founder/btslab](https://github.com/cspf-founder/btslab) Vulnerable web application
+- [**58**星][4y] [C++] [codereversing/directx9hook](https://github.com/codereversing/directx9hook) Runtime DirectX9 Hooking
+- [**58**星][1y] [Py] [coalfire-research/sqlinator](https://github.com/coalfire-research/sqlinator) Automatically forward HTTP GET & POST requests to SQLMap's API to test for SQLi and XSS
+- [**58**星][9m] [Py] [cnotin/splunkwhisperer2](https://github.com/cnotin/splunkwhisperer2) Local privilege escalation, or remote code execution, through Splunk Universal Forwarder (UF) misconfigurations
+- [**58**星][5m] [Go] [cloudposse/sudosh](https://github.com/cloudposse/sudosh) Shell wrapper to run a login shell with `sudo` as the current user for the purpose of audit logging
+- [**58**星][2y] [Py] [circl/pymisp](https://github.com/circl/pymisp) Please use this repository instead:
+- [**58**星][4m] [C++] [changeofpace/mouhidinputhook](https://github.com/changeofpace/mouhidinputhook) MouHidInputHook enables users to filter, modify, and inject mouse input data packets into the input data stream of HID USB mouse devices without modifying the mouse device stacks.
+- [**58**星][14d] [C++] [cert-polska/ursadb](https://github.com/cert-polska/ursadb) Trigram database written in C++, suited for malware indexing
+- [**58**星][4y] [Py] [cc06/dns_transfer_check](https://github.com/cc06/dns_transfer_check) 一个用来批量检测网站是否存在域传送漏洞的Python脚本
+- [**58**星][5y] [Py] [bwall/extracthosts](https://github.com/bwall/extracthosts) Extracts hosts (IP/Hostnames) from files
+- [**58**星][3y] [Shell] [buginux/flexloader](https://github.com/buginux/flexloader) 使用 FLEX 调试任意第三方应用
+- [**58**星][2y] [Py] [brianwarehime/insp3ctor](https://github.com/brianwarehime/insp3ctor) AWS S3 Bucket/Object Finder
+- [**58**星][3y] [C++] [azerg/remote_dll_injector](https://github.com/azerg/remote_dll_injector) Stealth DLL injector
+- [**58**星][3y] [Batchfile] [ayra/zipbomb](https://github.com/ayra/zipbomb) About an old technology that still screws up some anti virus software
+- [**58**星][6m] [autodesk/continuous-threat-modeling](https://github.com/autodesk/continuous-threat-modeling) A Continuous Threat Modeling methodology
+- [**58**星][13d] [Java] [appsecco/vyapi](https://github.com/appsecco/vyapi) VyAPI - A cloud based vulnerable hybrid Android App
+- [**58**星][10m] [Go] [appliscale/cloud-security-audit](https://github.com/appliscale/cloud-security-audit) A command line security audit tool for Amazon Web Services
+- [**58**星][2y] [PHP] [alisummer/qqipdetector](https://github.com/alisummer/qqipdetector) 探测某个或某些QQ用户的IP。 代码非常烂,也没有注释。
+- [**58**星][3y] [Py] [adulau/malwareclassifier](https://github.com/adulau/malwareclassifier) Malware Classifier From Network Captures
+- [**58**星][3m] [Java] [aagarwal1012/image-steganography-library-android](https://github.com/aagarwal1012/image-steganography-library-android)
+- [**58**星][2y] [3gstudent/cve-2017-8464-exp](https://github.com/3gstudent/cve-2017-8464-exp) Support x86 and x64
+- [**57**星][2y] [Py] [yangzheng10/ss](https://github.com/yangzheng10/ss) 利用爬虫科学上网
+- [**57**星][1y] [Py] [vonsdite/auto_shadowsocks](https://github.com/vonsdite/auto_shadowsocks) Shadowsocks. 科学上网, 仅供学习。是免费的服务器,可能存在科学上网不稳定。
+- [**57**星][30d] [zscdumin/vpn](https://github.com/zscdumin/vpn) ShadowSocks 翻墙(收费服务器合租套餐:180元/年、50元/季度、20元/月,需要的可以联系我)
+- [**57**星][3d] [Rust] [leo-lb/wpbrute-rs](https://github.com/leo-lb/wpbrute-rs) High performance WordPress login bruteforcer with automatic concurrency for maximum amount of tries per second.
+- [**57**星][6m] [JS] [pownjs/pown-cdb](https://github.com/pownjs/pown-cdb) Automate common Chrome Debug Protocol tasks to help debug web applications from the command-line and actively monitor and intercept HTTP requests and responses.
+- [**57**星][1m] [Ruby] [trustedsec/honeybadger](https://github.com/trustedsec/honeybadger)
+- [**57**星][6m] [JS] [doctormckay/node-globaloffensive](https://github.com/doctormckay/node-globaloffensive) A Node.js module to connect to and interact with the CS:GO game coordinator. Mostly used to get item data.
+- [**57**星][1y] [C++] [m0n73/dc26_badgeemulator](https://github.com/m0n73/dc26_badgeemulator) This code was used with Arduino Nano to create the OG defcon 26 badge emulator.
+- [**57**星][3m] [Py] [gosecure/freshonions-torscraper](https://github.com/gosecure/freshonions-torscraper) Fresh Onions is an open source TOR spider / hidden service onion crawler
+- [**57**星][7d] [Py] [trailofbits/polyfile](https://github.com/trailofbits/polyfile) A utility for mapping the file formats embedded within a single file
+- [**57**星][2y] [PS] [obscuritylabs/infophish](https://github.com/obscuritylabs/InfoPhish) InfoPath Phishing Repo Resource
+- [**57**星][6m] [Py] [pyca/service-identity](https://github.com/pyca/service-identity) Service Identity Verification for Python
+- [**57**星][2y] [Py] [vysecurity/checko365](https://github.com/vysecurity/checkO365) checkO365 is a tool to check if a target domain is using O365
+- [**57**星][3y] [shmilylty/awesome-application-security](https://github.com/shmilylty/awesome-application-security) awesome application security chinese version
+- [**57**星][3y] [JS] [auth0-samples/auth0-sso-dashboard](https://github.com/auth0-samples/auth0-sso-dashboard) [DEPRECATED] App Single Sign On Dashboard using Auth0
+- [**57**星][4y] [Go] [zond/qisniff](https://github.com/zond/qisniff)
+- [**57**星][3y] [JS] [xtr4nge/fruityc2-client](https://github.com/xtr4nge/fruityc2-client) FruityC2 is a post-exploitation (and open source) framework based on the deployment of agents on compromised machines. Agents are managed from a web interface under the control of an operator.
+- [**57**星][4y] [C++] [xpn/getsystem-offline](https://github.com/xpn/getsystem-offline) Small tool to get a SYSTEM shell
+- [**57**星][2y] [JS] [windard/sm4](https://github.com/windard/sm4) SM4 by JavaScript
+- [**57**星][2m] [Py] [williballenthin/idawilli](https://github.com/williballenthin/idawilli) IDA Pro 资源、脚本和配置文件等
+ - [hint_calls](https://github.com/williballenthin/idawilli/blob/master/plugins/hint_calls/readme.md) 以Hint的形式战士函数引用的call和字符串
+ - [dynamic_hints](https://github.com/williballenthin/idawilli/blob/master/plugins/dynamic_hints/readme.md) 演示如何为动态数据提供自定义hint的示例插件
+ - [add_segment](https://github.com/williballenthin/idawilli/tree/master/scripts/add_segment) 将已存在文件的内容添加为新的segment
+ - [color](https://github.com/williballenthin/idawilli/tree/master/scripts/color) 对指令进行着色
+ - [find_ptrs](https://github.com/williballenthin/idawilli/tree/master/scripts/find_ptrs) 扫描.text区段查找可能为指针的值,并进行标记
+ - [yara_fn](https://github.com/williballenthin/idawilli/tree/master/scripts/yara_fn) 创建yara规则,匹配当前函数的basic block
+ - [idawilli](https://github.com/williballenthin/idawilli/tree/master/idawilli) a python module that contains utilities for working with the idapython scripting interface.
+ - [themes](https://github.com/williballenthin/idawilli/tree/master/themes) colors and skins
+- [**57**星][4y] [Shell] [wh1t3rh1n0/ssh-phone-home](https://github.com/wh1t3rh1n0/ssh-phone-home) Pentest dropbox setup scripts for Kali Linux
+- [**57**星][1y] [Py] [warflop/whoisleak](https://github.com/warflop/whoisleak) This tool queries the emails that registered the domain and verifies if they were leaked in some data leak.
+- [**57**星][2y] [wangyihang/awesome-web-security](https://github.com/wangyihang/awesome-web-security)
+- [**57**星][5m] [C++] [walkingcat/symdiff](https://github.com/walkingcat/symdiff) Diff tool for comparing symbols in PDB files
+- [**57**星][3y] [Java] [vulnerscom/burp-dirbuster](https://github.com/vulnerscom/burp-dirbuster) Dirbuster plugin for Burp Suite
+- [**57**星][3m] [uniking/dingding](https://github.com/uniking/dingding) 免root远程钉钉打卡,支持wifi和gps定位,仅支持android系统。本项目出于学习目的,仅用于学习玩耍,请于24小时后自行删除。xposed, crack,package,dingtalk,remote control
+- [**57**星][2y] [HTML] [trustedsec/cors-poc](https://github.com/trustedsec/cors-poc)
+- [**57**星][2y] [HTML] [troydo42/cia-hacking-tools](https://github.com/troydo42/cia-hacking-tools) WikiLeaks Vault 7 CIA Hacking Tools
+- [**57**星][5m] [C++] [troybowman/dtxmsg](https://github.com/troybowman/dtxmsg) 辅助逆向DTXConnectionServices 框架
+- [**57**星][2y] [JS] [transparencytoolkit/harvester](https://github.com/transparencytoolkit/harvester) Web crawling and document processing through a usable interface.
+- [**57**星][2y] [Py] [tcpiplab/web-app-hacking-notes](https://github.com/tcpiplab/web-app-hacking-notes) Notes I've taken while working through various web app pentesting labs.
+- [**57**星][2y] [Shell] [tanprathan/fridpa](https://github.com/tanprathan/fridpa) An automated wrapper script for patching iOS applications (IPA files) and work on non-jailbroken device
+- [**57**星][3y] [Py] [t3rry7f/badtunnel_exp](https://github.com/t3rry7f/badtunnel_exp) Usage: python badtunnel.py wpad_server_ip
+- [**57**星][2y] [Py] [superhuahua/xunfenges](https://github.com/superhuahua/xunfenges)
+- [**57**星][6y] [Java] [spiderlabs/burpnotesextension](https://github.com/spiderlabs/burpnotesextension) Burp Notes Extension is a plugin for Burp Suite that adds a Notes tab. The tool aims to better organize external files that are created during penetration testing.
+- [**57**星][5d] [JS] [silverwind/oui](https://github.com/silverwind/oui) Look up MAC addresses for their vendor in the IEEE OUI database
+- [**57**星][15d] [Rust] [shssoichiro/zxcvbn-rs](https://github.com/shssoichiro/zxcvbn-rs) Port of Dropbox's zxcvbn password strength library for Rust
+- [**57**星][2y] [Py] [s1kr10s/struts2shell](https://github.com/s1kr10s/struts2shell)
+- [**57**星][4m] [C] [rub-syssec/antifuzz](https://github.com/rub-syssec/antifuzz) Impeding Fuzzing Audits of Binary Executables
+- [**57**星][3d] [TS] [roryrjb/iplocation](https://github.com/roryrjb/iplocation) (looking for a maintainer) get IP location information using various providers
+- [**57**星][2y] [Py] [roberteldersoftware/roberteldersoftwarediff](https://github.com/roberteldersoftware/roberteldersoftwarediff)
+- [**57**星][5y] [C] [rmusser01/hyperdbg](https://github.com/rmusser01/hyperdbg) Automatically exported from code.google.com/p/hyperdbg
+- [**57**星][12m] [C] [qssec/hades-lite](https://github.com/qssec/hades-lite) Hades-lite 青松云安全开源的一个内核级 Anti-ddos 的驱动程序,轻量且高效,构建高性能代理防御,单机可抵御7Gb DDoS攻击
+- [**57**星][1y] [Py] [programa-stic/marvin-static-analyzer](https://github.com/programa-stic/marvin-static-analyzer) Marvin static analyzer is an Android application vulnerability scanner. The framework uses androguard and Static Android Analysis Framework (SAAF).
+- [**57**星][1y] [C++] [petrgeorgievsky/gtarenderhook](https://github.com/petrgeorgievsky/gtarenderhook) GTA SA rendering hook
+- [**57**星][3m] [pe3zx/mthc](https://github.com/pe3zx/mthc) All-in-one bundle of MISP, TheHive and Cortex
+- [**57**星][2d] [Py] [opsdisk/metagoofil](https://github.com/opsdisk/metagoofil) An updated version of metagoofil
+- [**57**星][2y] [C++] [openjailbreak/jailbreakme-1.0](https://github.com/openjailbreak/jailbreakme-1.0) The first publicly available userland jailbreak for iPhoneOS 1.0.2/1.1.1 by cmw and dre
+- [**57**星][9m] [Go] [openbazaar/go-onion-transport](https://github.com/openbazaar/go-onion-transport) Tor onion transport for IPFS
+- [**57**星][6m] [C#] [nyan-x-cat/limeusb-csharp](https://github.com/nyan-x-cat/limeusb-csharp) Malware USB Spread | Example C#
+- [**57**星][3y] [Py] [nonenotnull/ssrfx](https://github.com/nonenotnull/ssrfx) CVE-2014-4210+Redis未授权访问
+- [**57**星][2y] [Java] [nikolamilosevic86/owasp-seraphimdroid](https://github.com/nikolamilosevic86/owasp-seraphimdroid) OWASP Seraphimdroid is an open source project with aim to create, as a community, an open platform for education and protection of Android users against privacy and security threats.
+- [**57**星][2y] [mrash/afl-cve](https://github.com/mrash/afl-cve) A collection of vulnerabilities discovered by the AFL fuzzer (afl-fuzz)
+- [**57**星][2y] [C#] [mch2112/sharp80](https://github.com/mch2112/sharp80) TRS80 Emulator for Windows
+- [**57**星][2y] [Py] [mame82/p4wnp1_nexmon_additions](https://github.com/mame82/p4wnp1_nexmon_additions)
+- [**57**星][5m] [Py] [lion-gu/ioc-explorer](https://github.com/lion-gu/ioc-explorer) Explore Indicators of Compromise Automatically
+- [**57**星][2y] [Go] [linkedin/jaqen](https://github.com/linkedin/jaqen) Simple DNS rebinding
+- [**57**星][4d] [Py] [lief-project/tutorials](https://github.com/lief-project/tutorials) Materials for LIEF tutorials
+- [**57**星][2m] [lgg/awesome-keepass](https://github.com/lgg/awesome-keepass) Curated list of KeePass-related projects
+- [**57**星][10m] [Py] [leoid/b1tmass](https://github.com/leoid/b1tmass) Multiple Weaknesses Checking for Mass Subdomains [Deprecated]
+- [**57**星][29d] [Go] [konimarti/opc](https://github.com/konimarti/opc) OPC DA client in Golang for monitoring and analyzing process data based on Windows COM.
+- [**57**星][3y] [C] [k2/admmutate](https://github.com/k2/admmutate) Classic code from 1999+ I am fairly sure this is the first public polymorphic shellcode ever (best IMHO and others
+- [**57**星][1y] [Py] [jx-sec/jxotp](https://github.com/jx-sec/jxotp) 企业SSH登陆双因素认证系统
+- [**57**星][3y] [Shell] [justintime/docker-airsonos](https://github.com/justintime/docker-airsonos) Expose Sonos over Airplay via a Docker container
+- [**57**星][ObjC] [jrock007/tob](https://github.com/jrock007/tob) Free, open-source and ad-less Tor web browser for iOS
+- [**57**星][7m] [JS] [joevennix/lan-js](https://github.com/joevennix/lan-js) Probe LAN devices from a web browser.
+- [**57**星][25d] [Shell] [jmcerrejon/pikiss](https://github.com/jmcerrejon/pikiss) PiKISS for Raspberry Pi & ODROID-C1: A bunch of scripts with menu to make your life easier.
+- [**57**星][4y] [PHP] [jcarlosn/gzip-http-time](https://github.com/jcarlosn/gzip-http-time) PoC for getting remote HTTP Server date using gzip compressed HTTP Response
+- [**57**星][3y] [C++] [jaybosamiya/busysteg](https://github.com/jaybosamiya/busysteg)
+- [**57**星][1m] [HTML] [j3ers3/passlist](https://github.com/j3ers3/passlist)
+- [**57**星][8m] [Shell] [itskindred/pyembed](https://github.com/itskindred/pyembed) Elementary bash script that embeds malicious python code within another piece of inconspicuous python code.
+- [**57**星][1y] [PS] [invokethreatguy/csasc](https://github.com/invokethreatguy/csasc) Cobalt Strike Aggressor Script Collection
+- [**57**星][10d] [C++] [henrypp/errorlookup](https://github.com/henrypp/errorlookup) Simple tool for retrieving information about Windows errors codes.
+- [**57**星][1y] [Py] [he1m4n6a/dictbuilder](https://github.com/he1m4n6a/dictbuilder) 渗透测试中字典生成工具
+- [**57**星][3y] [C] [hbowden/nextgen](https://github.com/hbowden/nextgen) A Genetic File, Syscall and Network Fuzzer.
+- [**57**星][4m] [Go] [hashmatter/p3lib](https://github.com/hashmatter/p3lib) privacy preserving primitives and protocols (p3) for routing and messaging in P2P networks
+- [**57**星][6y] [Assembly] [hackedteam/core-win64](https://github.com/hackedteam/core-win64) RCS Agent for Windows (64bit)
+- [**57**星][2y] [gy-games/shield](https://github.com/gy-games/shield) 基于Strom的日志实时流量分析主动防御(CCFirewall)系统
+- [**57**星][3m] [Rust] [guitmz/fe2o3](https://github.com/guitmz/fe2o3) Simple prepender virus written in Rust
+- [**57**星][6m] [PS] [gnieboer/gnuradio_windows_build_scripts](https://github.com/gnieboer/gnuradio_windows_build_scripts) A series of Powershell scripts to automatically download, build from source, and install GNURadio and -all- it's dependencies as 64-bit native binaries then package as an msi using Visual Studio 2015
+- [**57**星][5m] [C#] [gigajew/powerdropper](https://github.com/gigajew/powerdropper) App that generates PowerShell dropper scripts for .NET executables
+- [**57**星][4y] [JS] [gattermeier/nodejs-virus](https://github.com/gattermeier/nodejs-virus) A Node.js Proof of Concept Virus
+- [**57**星][4y] [JS] [firebug/pixel-perfect](https://github.com/firebug/pixel-perfect)
+- [**57**星][3m] [Java] [exalab/anlinux-adfree](https://github.com/exalab/anlinux-adfree) AnLinux, Ad free version.
+- [**57**星][2y] [F#] [enkomio/anathema](https://github.com/enkomio/anathema) .NET instrumentation framework
+- [**57**星][5y] [C++] [datasoft/nova](https://github.com/datasoft/nova) Repo for the Open Source version of NOVA
+- [**57**星][3m] [C] [danielkrupinski/memject](https://github.com/danielkrupinski/memject) Simple Dll injector loading from memory. Supports PE header and entry point erasure. Written in C99.
+- [**57**星][26d] [Rust] [ctsrc/pgen](https://github.com/ctsrc/pgen) Command-line passphrase generator
+- [**57**星][3y] [JS] [cryptogenic/ps4-4.0x-code-execution-poc](https://github.com/cryptogenic/ps4-4.0x-code-execution-poc) My edit of qwertyoruiopz 4.0x exploit PoC from
+- [**57**星][7y] [Py] [cr4sh/ida-vmware-gdb](https://github.com/cr4sh/ida-vmware-gdb) 辅助Windows内核调试
+- [**57**星][2y] [JS] [coincoin7/wireless-router-vulnerability](https://github.com/coincoin7/wireless-router-vulnerability) Vulnerability and exploiting
+- [**57**星][3y] [C] [codectile/paradise](https://github.com/codectile/paradise) x86/x86-64 hooking library
+- [**57**星][16d] [Py] [cleanunicorn/karl](https://github.com/cleanunicorn/karl) Monitor smart contracts deployed on blockchain and test against vulnerabilities with Mythril
+- [**57**星][5m] [Py] [chrismaddalena/goreport](https://github.com/chrismaddalena/goreport) A Python script to collect campaign data from Gophish and generate a report
+- [**57**星][2y] [HTML] [bo0om/cve-2017-7089](https://github.com/bo0om/cve-2017-7089) Webkit uxss exploit (CVE-2017-7089)
+- [**57**星][6m] [Py] [bao7uo/dp_crypto](https://github.com/bao7uo/dp_crypto) Base64-based encryption oracle exploit for CVE-2017-9248 (Telerik UI for ASP.NET AJAX dialog handler)
+- [**57**星][5y] [Shell] [bagder/keyfreq](https://github.com/bagder/keyfreq) Logs all key presses with a timestamp
+- [**57**星][12m] [JS] [antoinevastel/fp-collect](https://github.com/antoinevastel/fp-collect) Fingerprinting script of Fingerprint-Scanner
+- [**57**星][8d] [Py] [angus-y/pyiris-backdoor](https://github.com/angus-y/pyiris-backdoor) PyIris-backdoor is a modular, stealthy and flexible remote-access-toolkit written completely in python used to command and control other systems. It is now in the beta stage, possibly perpetually. There are bugs still present in the framework, feel free to contribute or help me out with this project its still under active development >_>
+- [**57**星][2d] [C++] [aliveteam/alive_reversing](https://github.com/aliveteam/alive_reversing) Re-implementation of Abe's Exoddus
+- [**57**星][4m] [al0ne/nmap_bypass_ids](https://github.com/al0ne/nmap_bypass_ids) bypass IDS
+- [**57**星][6d] [Py] [afagarap/malware-classification](https://github.com/afagarap/malware-classification) Towards Building an Intelligent Anti-Malware System: A Deep Learning Approach using Support Vector Machine for Malware Classification
+- [**57**星][3y] [Py] [acama/ctf](https://github.com/acama/ctf) Exploits for interesting CTF challenges I have worked on
+- [**57**星][2y] [Batchfile] [absolomb/pentesting](https://github.com/absolomb/pentesting) Pentesting Cheatsheets and Guides
+- [**57**星][10m] [15pb/wechat_tools](https://github.com/15pb/wechat_tools) 微信插件,微信辅助工具
+- [**57**星][7y] [IntrepidusGroup/mallory](https://bitbucket.org/intrepidusgroup/mallory)
+- [**56**星][1m] [Shell] [125k/pwrdeauther](https://github.com/125k/pwrdeauther) This script allows you to deauth a specific SSID or an entire channel with mdk3 (MDK3 is more powerful than Aireplay)
+- [**56**星][2y] [Kotlin] [v2ray/v2rayng](https://github.com/v2ray/v2rayng) This project is currently discontinued. Please use this code with care and considering adopt it.
+- [**56**星][10m] [Py] [genymobile/copydeps](https://github.com/genymobile/copydeps) Analyze and copy library dependencies of ELF binaries
+- [**56**星][6y] [C] [pwning/plaidctf2014](https://github.com/pwning/plaidctf2014) Source for some problems from PlaidCTF 2014.
+- [**56**星][28d] [Go] [evilsocket/pwngrid](https://github.com/evilsocket/pwngrid) (⌐■_■) - API server for pwnagotchi.ai
+- [**56**星][6m] [Py] [rabbitmask/weblogicscanserver](https://github.com/rabbitmask/weblogicscanserver) 开启WeblogicScanV3.*系列,采用Server部署,支持远程Weblogic漏洞扫描
+- [**56**星][1y] [Py] [thelsa/ueditor-getshell](https://github.com/thelsa/ueditor-getshell) ueditor .net getshell
+- [**56**星][9m] [TS] [pengchujin/onesubscribe](https://github.com/pengchujin/onesubscribe) ss ssr v2ray 订阅管理 node 后端
+- [**56**星][10m] [ObjC] [geosn0w/chaos](https://github.com/geosn0w/chaos) Chaos iOS < 12.1.2 PoC by
+- [**56**星][3d] [Py] [ubernostrum/pwned-passwords-django](https://github.com/ubernostrum/pwned-passwords-django) Utilities for working with the Pwned Passwords database from Django.
+- [**56**星][4m] [Py] [giantbranch/mipsaudit](https://github.com/giantbranch/mipsaudit) IDA MIPS静态扫描脚本,汇编审计辅助脚本
+- [**56**星][1m] [Shell] [125k/pwrdeauther](https://github.com/125K/PwrDeauther) This script allows you to deauth a specific SSID or an entire channel with mdk3 (MDK3 is more powerful than Aireplay)
+- [**56**星][8m] [Py] [hatching/sflock](https://github.com/hatching/sflock) Sample staging & detonation utility to be used in combination with Cuckoo Sandbox.
+- [**56**星][6y] [PHP] [wkcaj/safecurl](https://github.com/wkcaj/safecurl) SSRF Protection Library for PHP -
+- [**56**星][8m] [Shell] [malscan/malscan](https://github.com/malscan/malscan) A fully featured malware scanner for Linux desktops and servers.
+- [**56**星][3y] [C] [zerosum0x0/shellcodedriver](https://github.com/zerosum0x0/shellcodedriver) Windows driver to execute arbitrary usermode code (essentially same vulnerability as capcom.sys)
+- [**56**星][1y] [zephrfish/xsspayloads](https://github.com/zephrfish/xsspayloads) Cross Site Scripting Payloads -- Variations
+- [**56**星][4y] [Ruby] [zenvdeluca/net_healer](https://github.com/zenvdeluca/net_healer) NET HEALER receive DDoS Attack reports from FastNetMon collectors allowing custom triggers on a per stage based actions.
+- [**56**星][4m] [Assembly] [xyzz/ghidra-mep](https://github.com/xyzz/ghidra-mep) Toshiba MeP processor module for GHIDRA
+- [**56**星][2y] [PS] [xan7r/kerberoast](https://github.com/xan7r/kerberoast)
+- [**56**星][4m] [Shell] [wuseman/wbruter](https://github.com/wuseman/wbruter) Crack your non-rooted android device pin code with 100% guarantee aslong as usb debugging has been enable. Wbruter also has support for parallel ssh brute forcing via pssh
+- [**56**星][2y] [Py] [williballenthin/python-sdb](https://github.com/williballenthin/python-sdb) Pure Python parser for Application Compatibility Shim Databases (.sdb files)
+- [**56**星][4y] [Py] [upgoingstar/hackerone_public_reports](https://github.com/upgoingstar/hackerone_public_reports) Finds all public bug reports on reported on Hackerone
+- [**56**星][11m] [Py] [unamer/pwnsandboxforctf](https://github.com/unamer/pwnsandboxforctf) Yet another sandbox for CTF challenge in AWD mode
+- [**56**星][2m] [C] [ufrisk/leechcore](https://github.com/ufrisk/leechcore) LeechCore - Physical Memory Acquisition Library & The LeechAgent Remote Memory Acquisition Agent
+- [**56**星][3y] [JS] [twz915/django-minicms](https://github.com/twz915/django-minicms) Django 开发简易的内容管理系统
+- [**56**星][2m] [Makefile] [trojan-gfw/openwrt-trojan](https://github.com/trojan-gfw/openwrt-trojan) trojan and its dependencies for OpenWrt
+- [**56**星][8y] [C] [toucan-system/pmcma](https://github.com/toucan-system/pmcma) Post Memory Corruption Memory Analyzer
+- [**56**星][1y] [Py] [torque59/garfield](https://github.com/torque59/garfield) An offensive attack framework for Distributed Layer of Modern Applications
+- [**56**星][4m] [Py] [stef/pyrsp](https://github.com/stef/pyrsp) python implementation of the GDB Remote Serial Protocol
+- [**56**星][3y] [C++] [stealth/crash](https://github.com/stealth/crash) crypted admin shell: SSH-like strong crypto remote admin shell for Linux, BSD, Android, Solaris and OSX
+- [**56**星][8m] [HTML] [sophoslabs/cve-2018-18500](https://github.com/sophoslabs/cve-2018-18500) PoC for CVE-2018-18500 - Firefox Use-After-Free
+- [**56**星][11m] [C] [smihica/pyminizip](https://github.com/smihica/pyminizip) To create a password encrypted zip file in python.
+- [**56**星][8d] [C++] [signetlabdei/lorawan](https://github.com/signetlabdei/lorawan) An ns-3 module for simulation of LoRaWAN networks.
+- [**56**星][4y] [Py] [siberas/arpwn](https://github.com/siberas/arpwn) Analysis tools and exploit sample scripts for Adobe Reader 10/11 and Acrobat Reader DC
+- [**56**星][10m] [Shell] [securityriskadvisors/talr](https://github.com/securityriskadvisors/talr) Threat Alert Logic Repository
+- [**56**星][2y] [WebAssembly] [seccon/seccon2017_online_ctf](https://github.com/seccon/seccon2017_online_ctf)
+- [**56**星][7m] [scubsrgroup/automatic-exploit-generation](https://github.com/scubsrgroup/automatic-exploit-generation) Something about AEG
+- [**56**星][7m] [OCaml] [rolfrolles/pandemicml](https://github.com/rolfrolles/pandemicml) Pandemic binary program analysis framework in OCaml (abandoned)
+- [**56**星][2d] [Py] [rocky/python-xdis](https://github.com/rocky/python-xdis) Python cross-version bytecode library and disassembler
+- [**56**星][2m] [JS] [roccomuso/alveare](https://github.com/roccomuso/alveare)
+- [**56**星][2y] [C] [rgerganov/nfqsed](https://github.com/rgerganov/nfqsed) Modify network traffic with netfilter_queue
+- [**56**星][4y] [Py] [rehints/blackhat_2015](https://github.com/rehints/blackhat_2015) Distributing the REconstruction of High-Level IR for Large Scale Malware Analysis
+- [**56**星][2y] [Py] [rafiot/kittengroomer](https://github.com/rafiot/kittengroomer) USB key cleaner
+- [**56**星][5m] [Py] [r3nt0n/bopscrk](https://github.com/r3nt0n/bopscrk) A tool to generate smart and powerful wordlists
+- [**56**星][3y] [C] [pythonmaster41/go-for-oscp](https://github.com/pythonmaster41/go-for-oscp)
+- [**56**星][5m] [Java] [pnfsoftware/jeb2-androsig](https://github.com/pnfsoftware/jeb2-androsig) Android Library Code Recognition
+- [**56**星][11m] [Py] [pirate/mesh-botnet](https://github.com/pirate/mesh-botnet)
+- [**56**星][1y] [Py] [p1kachu/talking-with-cars](https://github.com/p1kachu/talking-with-cars) CAN analysis - Use your car as a gamepad!
+- [**56**星][2y] [ouspg/fuzz-testing-beginners-guide](https://github.com/ouspg/fuzz-testing-beginners-guide) Fuzz testing: Beginner's guide
+- [**56**星][3y] [C] [opsxcq/exploit-blacknurse](https://github.com/opsxcq/exploit-blacknurse) Black Nurse DOS attack
+- [**56**星][9m] [JS] [obscuritylabs/os-cfdb](https://github.com/obscuritylabs/os-cfdb) Open Source - Common Findings DataBase (JSON & MD)
+- [**56**星][4y] [C++] [nukem9/virtualdbg](https://github.com/nukem9/virtualdbg) Test code only. Not reliable for actual use.
+- [**56**星][4m] [PHP] [nextras/secured-links](https://github.com/nextras/secured-links) CSRF protection for Nette Framework presenters' signals.
+- [**56**星][4y] [Py] [newlog/exploiting](https://github.com/newlog/exploiting) Stuff you might use when exploiting software
+- [**56**星][8d] [Java] [netflix/iep](https://github.com/netflix/iep) Insight Engineering Platform Components
+- [**56**星][28d] [Py] [netflix-skunkworks/cloudaux](https://github.com/netflix-skunkworks/cloudaux) Cloud Auxiliary is a python wrapper and orchestration module for interacting with cloud providers
+- [**56**星][1y] [Py] [neo23x0/exotron](https://github.com/neo23x0/exotron) Sandbox feature upgrade with the help of wrapped samples
+- [**56**星][3m] [Py] [nccgroup/hashcrack](https://github.com/nccgroup/hashcrack) Guesses hash types, picks some sensible dictionaries and rules for hashcat
+- [**56**星][2y] [Py] [mzeyong/cve-2017-13089](https://github.com/mzeyong/cve-2017-13089) CVE-2017-13089
+- [**56**星][2y] [myndtt/ctf-site](https://github.com/myndtt/ctf-site) 介绍一些CTF训练的站点
+- [**56**星][2y] [C] [mwpcheung/ssl-kill-switch2](https://github.com/mwpcheung/ssl-kill-switch2) Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS and OS X Apps
+- [**56**星][5y] [Py] [mvantellingen/psycopg2-ctypes](https://github.com/mvantellingen/psycopg2-ctypes) ctypes port of psycopg2 (see
+- [**56**星][1y] [C] [msftserver/ravencoin-wallet-with-miners](https://github.com/msftserver/ravencoin-wallet-with-miners) RavenCoin Wallet including CPU and GPU miners! programs are directly from Ravencoin and official miner sources
+- [**56**星][2m] [Java] [mp911de/spring-cloud-vault-config-samples](https://github.com/mp911de/spring-cloud-vault-config-samples) Examples for Spring Vault and Spring Cloud Vault Config
+- [**56**星][5y] [C] [molnarg/dead0007](https://github.com/molnarg/dead0007) Decompiler for SpiderMonkey 1.8 XDR bytecode
+- [**56**星][2y] [Shell] [moki-ics/moki](https://github.com/moki-ics/moki) Moki Distribution - ICS/SCADA Tools
+- [**56**星][8m] [Py] [mogwailabs/mjet](https://github.com/mogwailabs/mjet) MOGWAI LABS JMX exploitation toolkit
+- [**56**星][2y] [JS] [marknote/teleshellbot](https://github.com/marknote/teleshellbot) A simple Telegram Bot to run shell commands remotely
+- [**56**星][7y] [C++] [makerbot/miracle-grue](https://github.com/makerbot/miracle-grue) Workspace for new Toolpathing software.
+- [**56**星][4y] [C++] [m0n0ph1/basic-file-crypter](https://github.com/m0n0ph1/basic-file-crypter) Process Hollowing techniques as used in many file Crypters (C/C++)
+- [**56**星][3m] [C] [lucamassarelli/yarasafe](https://github.com/lucamassarelli/yarasafe) SAFE embeddings to match functions in yara
+- [**56**星][3y] [Java] [linkedin/sometime](https://github.com/linkedin/sometime) A BurpSuite plugin to detect Same Origin Method Execution vulnerabilities
+- [**56**星][1y] [latestalexey/awesome-web-hacking](https://github.com/latestalexey/awesome-web-hacking) A list of web application security
+- [**56**星][4y] [Go] [kevinmahaffey/tescat](https://github.com/kevinmahaffey/tescat) A tool to identify unique UDP payloads developed in order to audit the Tesla Model S's onboard ethernet traffic.
+- [**56**星][3d] [Py] [keeper-security/commander](https://github.com/keeper-security/commander) Keeper Commander
+- [**56**星][20d] [C++] [jspspemu/jspspemu](https://github.com/jspspemu/jspspemu) typescript psp emulator
+- [**56**星][4m] [AutoIt] [jschicht/extractusnjrnl](https://github.com/jschicht/extractusnjrnl) Tool to extract the $UsnJrnl from an NTFS volume
+- [**56**星][2y] [JS] [jpenalbae/r2-scripts](https://github.com/jpenalbae/r2-scripts) Multiple radare2 rpipe scripts
+- [**56**星][2y] [Py] [joxeankoret/maltindex](https://github.com/joxeankoret/maltindex) Mal Tindex is an Open Source tool for indexing binaries and help attributing malware campaigns
+- [**56**星][20d] [Java] [johnjohndoe/proguard](https://github.com/johnjohndoe/proguard) Java class file shrinker, optimizer, obfuscator, and preverifier
+- [**56**星][2y] [C++] [jnferguson/double-free-examples](https://github.com/jnferguson/double-free-examples) Basic examples of double free exploitation/etc functionality in glibc/jemalloc/tcmalloc
+- [**56**星][5y] [Ruby] [jekil/hostmap](https://github.com/jekil/hostmap)
+- [**56**星][1y] [C] [jduck/canhazaxs](https://github.com/jduck/canhazaxs) A tool for enumerating the access to entries in the file system of an Android device.
+- [**56**星][1y] [Py] [jas502n/cve-2018-3191](https://github.com/jas502n/cve-2018-3191) Weblogic-CVE-2018-3191远程代码命令执行漏洞
+- [**56**星][3d] [PS] [jaapbrasser/sharedscripts](https://github.com/jaapbrasser/sharedscripts) This is a collection of scripts that I have shared online
+- [**56**星][8y] [JS] [iriscouch/request_jquery](https://github.com/iriscouch/request_jquery) request (NodeJS http client) API using jQuery back-end
+- [**56**星][5y] [C] [honeynet/ghost-usb-honeypot](https://github.com/honeynet/ghost-usb-honeypot) A honeypot for malware that propagates via USB storage devices
+- [**56**星][8m] [JS] [hamz-a/frida-android-libbinder](https://github.com/hamz-a/frida-android-libbinder) PoC Frida script to view Android libbinder traffic
+- [**56**星][3y] [C] [gnaixx/anti-debug](https://github.com/gnaixx/anti-debug) Android detect debugger
+- [**56**星][6m] [TS] [geeksonsecurity/illuminatejs](https://github.com/geeksonsecurity/illuminatejs) IlluminateJs is a static JavaScript deobfuscator
+- [**56**星][5y] [Shell] [ge0rg/samsung-nx-hacks](https://github.com/ge0rg/samsung-nx-hacks) Firmware Hacks for the Linux-based Samsung NX mirrorless camera models (NX300, NX2000, ???)
+- [**56**星][9y] [Py] [gdssecurity/sqlbrute](https://github.com/gdssecurity/sqlbrute) SQLBrute is a tool for brute forcing data out of databases using blind SQL injection vulnerabilities.
+- [**56**星][23d] [JS] [gajus/global-agent](https://github.com/gajus/global-agent) Global HTTP/HTTPS proxy agent configurable using environment variables.
+- [**56**星][5y] [Py] [foreni-packages/dhcpig](https://github.com/foreni-packages/dhcpig) initiates an advanced DHCP exhaustion attack
+- [**56**星][2m] [Py] [forallsecure/bncov](https://github.com/forallsecure/bncov) Scriptable Binary Ninja plugin for coverage analysis and visualization
+- [**56**星][3y] [C++] [fireeye/unicorn-libemu-shim](https://github.com/fireeye/unicorn-libemu-shim) unicorn-libemu-shim:项目地址
+- [**56**星][3y] [Shell] [epinna/unusedpkg](https://github.com/epinna/unusedpkg) Diagnostic tool to find unused packages
+- [**56**星][4y] [Shell] [emirozer/nixarmor](https://github.com/emirozer/nixarmor) nixarmor is a linux hardening automation project
+- [**56**星][1y] [C#] [egorbo/intrinsicsplayground](https://github.com/egorbo/intrinsicsplayground) My toys to play with SSE/AVX in pure C# (.NET Core 2.1)
+- [**56**星][1m] [dwizzzle/presentations](https://github.com/dwizzzle/presentations) A repository of my presentations
+- [**56**星][2y] [Shell] [digitalocean/debian-sys-maint-roll-passwd](https://github.com/digitalocean/debian-sys-maint-roll-passwd) debian-sys-maint-roll-passwd:更新 MySQL 用户 "debian-sys-maint" 的密码
+- [**56**星][6y] [C] [devzero2000/shellcoderhandbook](https://github.com/devzero2000/shellcoderhandbook) shellcoderhandbook source code : "The Shellcoder's Handbook: Discovering and Exploiting Security Holes"
+- [**56**星][1y] [Py] [destine21/zipfileraider](https://github.com/destine21/zipfileraider) ZIP File Raider - Burp Extension for ZIP File Payload Testing
+- [**56**星][1y] [Nix] [dapphub/ds-auth](https://github.com/dapphub/ds-auth) Updatable, unobtrusive Solidity authorization pattern
+- [**56**星][2y] [danielmiessler/blackhat-arsenal-tools](https://github.com/danielmiessler/blackhat-arsenal-tools) Official Black Hat Arsenal Security Tools Repository
+- [**56**星][3y] [Py] [cuppa-joe/dsame](https://github.com/cuppa-joe/dsame) Python EAS SAME Alert Message Decoder
+- [**56**星][2m] [Assembly] [cturt/ps2-yabasic-exploit](https://github.com/cturt/ps2-yabasic-exploit) PS2 exploit for demo discs containing Yabasic that allows arbitrary code execution.
+- [**56**星][2y] [C] [coolervoid/rootstealer](https://github.com/coolervoid/rootstealer) X11 trick to inject commands on root terminal.
+- [**56**星][3y] [cn33liz/ms17-012](https://github.com/cn33liz/ms17-012) MS17-012 - COM Session Moniker EoP Exploit running within MSBuild.exe
+- [**56**星][5d] [PS] [chef-koch/windows-10-hardening](https://github.com/chef-koch/windows-10-hardening) Windows 10 hardening guide without gimmicks
+- [**56**星][29d] [C] [bytebandits/writeups](https://github.com/bytebandits/writeups) Wiki-like CTF write-ups repository by ByteBandits
+- [**56**星][2y] [Py] [bonkc/bugbountysubdomains](https://github.com/bonkc/bugbountysubdomains) Tools to gather subdomains from Bug Bounty programs
+- [**56**星][2y] [Java] [bigsizeme/burplugin-java-rce](https://github.com/bigsizeme/burplugin-java-rce) ******本软件仅限用于学习交流禁止用于任何非法行为****** 本版本支持elasticsearch java语言远程命令执行及文件上传 elasticsearchgroov语言远程命令执行及文件上传 struts2-005、struts2-009、struts2-013、struts2-016、struts2-019、struts2-020、struts2-devmode、 struts2-032、struts2-033、struts2-037、struts2-045、struts2-048、struts2-052 除struts2-053全部RCE漏洞验证并支持批量验证。 Struts2漏洞验证需要python环境并需要相关类库支持.点击python按钮初始化初始化python…
+- [**56**星][2y] [Py] [b-mueller/laser-ethereum](https://github.com/b-mueller/laser-ethereum) Symbolic virtual machine for Ethereum
+- [**56**星][5y] [C] [axoltl/hubcap](https://github.com/axoltl/hubcap) ChromeCast HubCap exploit
+- [**56**星][2y] [Py] [averagesecurityguy/ptnotes](https://github.com/averagesecurityguy/ptnotes)
+- [**56**星][7d] [Py] [angr/archinfo](https://github.com/angr/archinfo) Classes with architecture-specific information useful to other projects.
+- [**56**星][2y] [Java] [amotzte/android-mock-location-for-development](https://github.com/amotzte/android-mock-location-for-development) allows to change mock location from command line on real devices
+- [**56**星][17d] [albertzsigovits/malware-writeups](https://github.com/albertzsigovits/malware-writeups) Personal research and publication on malware families
+- [**55**星][3m] [C] [heiher/hev-socks5-tproxy](https://github.com/heiher/hev-socks5-tproxy) A simple, lightweight socks5 transparent proxy for Linux
+- [**55**星][3d] [JS] [instantwebp2p/peer-proxy](https://github.com/instantwebp2p/peer-proxy) Light on hidden web service - Expose web service from Peer
+- [**55**星][21d] [victorqribeiro/bruteforcetv](https://github.com/victorqribeiro/bruteforcetv) Let's brute force this hotel's tv.
+- [**55**星][6m] [C] [vanhoefm/dragondrain-and-time](https://github.com/vanhoefm/dragondrain-and-time)
+- [**55**星][2y] [Py] [ztgrace/pwnboard](https://github.com/ztgrace/pwnboard) CCDC Red Team PWNboard
+- [**55**星][10m] [HTML] [jpcertcc/cordova](https://github.com/jpcertcc/cordova) Vulnerability Analysis of Hybrid Applications using Apache Cordova
+- [**55**星][1y] [Py] [osirislab/csaw-ctf-2018-finals](https://github.com/osirislab/csaw-ctf-2018-finals) Repo for CSAW CTF 2018 Finals challenges
+- [**55**星][6m] [C++] [eyalz800/zpp_hypervisor](https://github.com/eyalz800/zpp_hypervisor) A very simple hypervisor for learning experience.
+- [**55**星][26d] [Kotlin] [m1dr05/istheapp](https://github.com/m1dr05/istheapp) Open-source android spyware
+- [**55**星][9m] [Vue] [pengchujin/subscribevue](https://github.com/pengchujin/subscribevue) ss ssr v2ray 订阅管理 vue前端界面
+- [**55**星][2m] [C#] [ohjeongwook/powershellrunbox](https://github.com/ohjeongwook/powershellrunbox) Dynamic PowerShell analysis framework
+- [**55**星][1m] [Go] [lc/hacks](https://github.com/lc/hacks) Repo of useful scripts
+- [**55**星][2m] [Py] [ripxorip/aerojump.nvim](https://github.com/ripxorip/aerojump.nvim) Aerojump is a fuzzy-match searcher/jumper for Neovim with the goal of quick keyboard navigation
+- [**55**星][2m] [C] [resilar/crchack](https://github.com/resilar/crchack) Reversing CRC for fun and profit
+- [**55**星][5m] [Py] [re4lity/pocorexp](https://github.com/re4lity/PoCorExp) PoC or Exp Of Vulnerability
+- [**55**星][1m] [redteamwing/pentest_wiki](https://github.com/RedTeamWing/Pentest_WiKi) 你所不知道的渗透测试
+- [**55**星][1m] [C] [secureauthcorp/sap-dissection-plug-in-for-wireshark](https://github.com/SecureAuthCorp/SAP-Dissection-plug-in-for-Wireshark) This Wireshark plugin provides dissection of SAP's NI, Diag, Enqueue, Router, Message Server, SNC and IGS protocols.
+- [**55**星][1y] [pegasuslab/pegasusteam](https://github.com/PegasusLab/PegasusTeam) PegasusTeam is a group that focuses on WLAN security and Wi-Fi Pentesting.
+- [**55**星][2d] [HTML] [canonical-web-and-design/ubuntu.com](https://github.com/canonical-web-and-design/ubuntu.com) The official website for the Ubuntu operating system
+- [**55**星][2y] [yrzx404/free-security-resources](https://github.com/yrzx404/free-security-resources) 安全总是无处不在...
+- [**55**星][2y] [C] [winbagility/winbagility](https://github.com/winbagility/winbagility) [ARCHIVED] mov rax, ${Thalium/IceBox}; jmp rax;
+- [**55**星][21d] [C] [watf-team/watf-bank](https://github.com/watf-team/watf-bank) WaTF Bank - What a Terrible Failure Mobile Banking Application for Android and iOS
+- [**55**星][1y] [Py] [wangyihang/find-php-vulnerabilities](https://github.com/wangyihang/find-php-vulnerabilities)
+- [**55**星][2y] [PS] [vletoux/ms17-010-scanner](https://github.com/vletoux/ms17-010-scanner)
+- [**55**星][1y] [JS] [ubeacsec/silverdog](https://github.com/ubeacsec/silverdog) An audio firewall for Chrome!
+- [**55**星][1y] [C#] [tyranid/windowsruntimesecuritydemos](https://github.com/tyranid/windowsruntimesecuritydemos) Demos for Presentation on Windows Runtime Security
+- [**55**星][5y] [PHP] [troyhunt/pineapplesurprise](https://github.com/troyhunt/pineapplesurprise) Pineapple Surprise! is a PHP implementation for the Wi-Fi Pineapple or "Jasager". Used in conjunction with dnsspoof it will serve a "surprise" to any clients connected to the device when they make an HTTP request.
+- [**55**星][2y] [trietptm/security-news](https://github.com/trietptm/security-news) Information Security News
+- [**55**星][4m] [Py] [trickster0/enyx](https://github.com/trickster0/enyx) Enyx SNMP IPv6 Enumeration Tool
+- [**55**星][2y] [JS] [tinysec/jsrt](https://github.com/tinysec/jsrt) javascript runtime ( JSRT ) project for windows , based on chakra
+- [**55**星][4m] [Visual Basic .NET] [thesph1nx/slickermaster-rev4](https://github.com/thesph1nx/slickermaster-rev4) NSA Hacking Tool Recreation UnitedRake
+- [**55**星][7m] [HTML] [tgeaus/weak-password](https://github.com/tgeaus/weak-password) 字典大全 dictionary
+- [**55**星][3y] [C] [synack/chaoticmarch](https://github.com/synack/chaoticmarch) A mechanism for automating input events on iOS
+- [**55**星][3y] [Py] [sowish/sqlmapapi_pi](https://github.com/sowish/sqlmapapi_pi) 利用sqlmapapi进行批量检测sql注入
+- [**55**星][8m] [Perl] [sourceperl/mbtget](https://github.com/sourceperl/mbtget) A simple modbus/TCP client write in pure Perl.
+- [**55**星][2y] [C++] [sigint9/yaragui](https://github.com/sigint9/yaragui)
+- [**55**星][2y] [Py] [shaanen/osint-combiner](https://github.com/shaanen/osint-combiner) Combining OSINT sources in Elastic Stack
+- [**55**星][2y] [TeX] [season-lab/survey-symbolic-execution](https://github.com/season-lab/survey-symbolic-execution) 对有关符号执行相关工具和技术的调查
+- [**55**星][3y] [Java] [scriptjunkie/msfgui](https://github.com/scriptjunkie/msfgui) The Metasploit GUI
+- [**55**星][2m] [Ruby] [saz/puppet-memcached](https://github.com/saz/puppet-memcached) Puppet module for memcached
+- [**55**星][2y] [C] [samlarenn/callbackdisabler](https://github.com/samlarenn/callbackdisabler) Disable Driver Callbacks
+- [**55**星][1m] [Py] [s2e/s2e-env](https://github.com/s2e/s2e-env) Your S2E project management tools
+- [**55**星][3y] [C++] [s-kanev/xiosim](https://github.com/s-kanev/xiosim) A detailed michroarchitectural x86 simulator
+- [**55**星][2y] [Java] [righettod/virtualhost-payload-generator](https://github.com/righettod/virtualhost-payload-generator) BURP extension providing a set of values for the HTTP request "Host" header for the "BURP Intruder" in order to abuse virtual host resolution.
+- [**55**星][7m] [C] [rapid7/reflectivedllinjection](https://github.com/rapid7/reflectivedllinjection) Reflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process.
+- [**55**星][10m] [ObjC] [rani-i/bluetoothdpoc](https://github.com/rani-i/bluetoothdpoc) CVE-2018-4087 PoC
+- [**55**星][4y] [Py] [pidydx/smrt](https://github.com/pidydx/smrt) Sublime Malware Research Tool
+- [**55**星][1m] [Visual Basic .NET] [outflanknl/scripts](https://github.com/outflanknl/scripts) Small scripts that make life better
+- [**55**星][3y] [Shell] [ouspg/libfuzzerfication](https://github.com/ouspg/libfuzzerfication) libfuzzerfication - fuzzing for the rest of us!
+- [**55**星][6m] [C++] [osql/osql](https://github.com/osql/osql) SQL powered operating system instrumentation, monitoring, and analytics.
+- [**55**星][5y] [Pascal] [nyx0/pony](https://github.com/nyx0/pony) Pony 2.0 Stealer
+- [**55**星][3y] [C#] [nccgroup/mnemosyne](https://github.com/nccgroup/mnemosyne) mnemosyne:通用Windows内存抓取工具
+- [**55**星][2y] [Py] [msfidelis/kill-router-](https://github.com/msfidelis/kill-router-) Ferramenta para quebrar senhas administrativas de roteadores Wireless, routers, switches e outras plataformas de gestão de serviços de rede autenticados.
+- [**55**星][1y] [mindpointgroup/ansible-vmware-provisioning](https://github.com/mindpointgroup/ansible-vmware-provisioning) Some basic Ansible content to help get more out of VMware. Developed for AnsibleFest San Francisco 2017.
+- [**55**星][6m] [C++] [mefistotelis/ida-pro-loadmap](https://github.com/mefistotelis/ida-pro-loadmap) Plugin for IDA Pro disassembler which allows loading .map files.
+- [**55**星][3y] [Py] [m4sc3r4n0/spyrat](https://github.com/m4sc3r4n0/spyrat) Python Remote Access Trojan
+- [**55**星][2y] [Shell] [lanjelot/twisted-honeypots](https://github.com/lanjelot/twisted-honeypots) SSH, FTP and Telnet honeypots based on Twisted
+- [**55**星][2y] [C] [kkamagui/shadow-box-for-arm](https://github.com/kkamagui/shadow-box-for-arm) Shadow-Box v2: 实用且全能的ARM沙箱
+- [**55**星][7y] [C++] [kakaroto/ps3ida](https://github.com/kakaroto/ps3ida) IDA scripts and plugins for PS3
+- [**55**星][2y] [jkpang/timliu-ios](https://github.com/jkpang/timliu-ios) iOS开发常用三方库、插件、知名博客等等
+- [**55**星][8m] [JS] [jes/chess-steg](https://github.com/jes/chess-steg) Steganography in chess games
+- [**55**星][2y] [C#] [jamessmith2/ethmonitoring](https://github.com/jamessmith2/ethmonitoring) Miner monitoring software with different notifications support
+- [**55**星][2y] [C++] [huoji120/av-killer](https://github.com/huoji120/av-killer) Antivirus Killer
+- [**55**星][14d] [YARA] [hestat/lw-yara](https://github.com/hestat/lw-yara) Yara Ruleset for scanning Linux servers for shells, spamming, phishing and other webserver baddies
+- [**55**星][4d] [Go] [gyyyy/footprint](https://github.com/gyyyy/footprint) 个人笔记
+- [**55**星][2d] [Py] [fox-it/bloodhound-import](https://github.com/fox-it/bloodhound-import) Python based BloodHound data importer
+- [**55**星][1y] [Py] [flo354/androick](https://github.com/flo354/androick)
+- [**55**星][2y] [C++] [feliam/klee-taint](https://github.com/feliam/klee-taint) KLEE-TAINT - Klee with taint analysis support
+- [**55**星][2y] [Py] [elevenpaths/dirtytooth-raspberrypi](https://github.com/elevenpaths/dirtytooth-raspberrypi) Exploit the hack for IOS 11.1.2 and earlier to collect leaked information.
+- [**55**星][2m] [PS] [eclypsium/screwed-drivers](https://github.com/eclypsium/screwed-drivers) a centralized source of knowledge which contains a list of drivers determined to be vulnerable as well as example code for how to use this kind of functionality.
+- [**55**星][3m] [Py] [dogoncouch/logesp](https://github.com/dogoncouch/logesp) Open Source SIEM (Security Information and Event Management system).
+- [**55**星][3y] [Shell] [docker-linux/kali-metasploit](https://github.com/docker-linux/kali-metasploit)
+- [**55**星][4d] [C] [danielkrupinski/vac-hooks](https://github.com/danielkrupinski/vac-hooks) Hook WinAPI functions used by Valve Anti-Cheat. Log calls and intercept arguments & return values. DLL written in C.
+- [**55**星][6m] [Java] [cognifide/aem-rules-for-sonarqube](https://github.com/cognifide/aem-rules-for-sonarqube) SonarQube plugin with set of rules detecting possible bugs and bad smells specific for AEM development.
+- [**55**星][5m] [Shell] [cignoraptor-ita/cignotrack](https://github.com/cignoraptor-ita/cignotrack) OSINT tool for testing privacy and social engineering vulnerability of organizations.
+- [**55**星][3y] [Py] [chadillac/mdns_recon](https://github.com/chadillac/mdns_recon) Multicast DNS and DNS service discovery daemons deployed on various systems across the Internet are misconfigured and reply to queries targeting their unicast addresses, including requests from their WAN interface. These daemons could be leveraged by attackers for sensitive information disclosure and potentially used in DDoS campaigns for reflec…
+- [**55**星][2y] [C++] [caseysmithrc/memmitm](https://github.com/caseysmithrc/memmitm) SSL In Memory Inspection - Proof Of Concept.
+- [**55**星][3y] [Java] [bsmali4/checksql](https://github.com/bsmali4/checksql)
+- [**55**星][2y] [Py] [brianloveswords/python-jws](https://github.com/brianloveswords/python-jws) python implementation of JSON Web Signatures
+- [**55**星][3y] [C] [bazad/physmem](https://github.com/bazad/physmem) Local privilege escalation through macOS 10.12.1 via CVE-2016-1825 or CVE-2016-7617.
+- [**55**星][5m] [basketwill/z0bpctools](https://github.com/basketwill/z0bpctools) 一个windows反汇编工具,界面风格防OllyDbg 利用业余开发了一款类似仿OLlyDbg界面的 IDA静态反编译工具,目前是1.0版本,功能不是很强大但是基本功能有了
+- [**55**星][4y] [Py] [az0ne/python_backdoor](https://github.com/az0ne/python_backdoor) 过360主动防御360杀毒以前99%杀软的python后门
+- [**55**星][4y] [Py] [az0ne/jboss_autoexploit](https://github.com/az0ne/jboss_autoexploit) JBoss JMXInvokerServlet JMXInvoker 0.3 - Remote Command Execution 漏洞批量检测
+- [**55**星][9m] [Py] [attackanddefencesecuritylab/ad_webscanner](https://github.com/attackanddefencesecuritylab/ad_webscanner) AD工作室精心研发漏洞安全扫描器
+- [**55**星][7y] [Py] [antitree/manitree](https://github.com/antitree/manitree) AndroidManifest.xml security auditor
+- [**55**星][5y] [C] [anestisb/melkor-android](https://github.com/anestisb/melkor-android) An Android port of the melkor ELF fuzzer
+- [**55**星][2y] [Py] [ahm3dhany/ids-evasion](https://github.com/ahm3dhany/ids-evasion) Evading Snort Intrusion Detection System.
+- [**55**星][4y] [Py] [ahhh/ntp_trojan](https://github.com/ahhh/ntp_trojan) Reverse NTP remote access trojan in python, for penetration testers
+- [**55**星][3y] [abatchy17/introduction-to-manual-backdooring](https://github.com/abatchy17/introduction-to-manual-backdooring) Executables created while writing "Introduction to Manual Backdooring".
+- [**55**星][3m] [Py] [5alt/zeroscan](https://github.com/5alt/zeroscan) ZeroScan is a tool that auto gathers subdomains and scan ports
+- [**54**星][] [Py] [dhondta/sploitkit](https://github.com/dhondta/sploitkit) Toolkit for building Metasploit-like consoles
+- [**54**星][23d] [CSS] [gh0stkey/ahrid](https://github.com/gh0stkey/ahrid) AHRID - Analysis Hacker's Real-ID Platform 黑客攻击画像分析系统
+- [**54**星][25d] [Swift] [chengluffy/shadowsocksfree](https://github.com/chengluffy/shadowsocksfree) Try Yourself.
+- [**54**星][7m] [C++] [mozillasecurity/libfuzzer-python-bridge](https://github.com/mozillasecurity/libfuzzer-python-bridge) A Python3 bridge for implementing custom libFuzzer mutators
+- [**54**星][3m] [Shell] [snail007/goproxy-heroku](https://github.com/snail007/goproxy-heroku) goproxy heroku 一键部署套装,把heroku变为免费的http(s)\socks5代理,搜索学习资料。
+- [**54**星][4y] [Py] [ryhanson/keyslack](https://github.com/ryhanson/keyslack) Slack client used to encrypt/decrypt and send/receive Keybase PGP messages through a Slack private group.
+- [**54**星][11d] [xairy/ubuntu-hardening](https://github.com/xairy/ubuntu-hardening) Random tips on how to improve security of Ubuntu Desktop
+- [**54**星][1y] [Py] [secwiki/ctf-hub](https://github.com/secwiki/ctf-hub) CTF 题目列表
+- [**54**星][3y] [Java] [giovannicolonna/msfvenom-backdoor-android](https://github.com/giovannicolonna/msfvenom-backdoor-android) Android backdoored app, improved source code of msfvenom android .apk
+- [**54**星][4y] [HTML] [konklone/cdns-to-https](https://github.com/konklone/cdns-to-https) (Retired.) Testing HTTP->HTTPS redirects for CDNs.
+- [**54**星][5d] [fatihh92/hackthebox-writeups](https://github.com/fatihh92/hackthebox-writeups)
+- [**54**星][1y] [PHP] [ahref-group/superpanel](https://github.com/ahref-group/superpanel) A new shadowsocks panel based on ThinkPHP
+- [**54**星][16d] [Py] [kkamagui/napper-for-tpm](https://github.com/kkamagui/napper-for-tpm) TPM vulnerability checking tool for CVE-2018-6622. This tool will be published at Black Hat Asia 2019 and Black Hat Europe 2019
+- [**54**星][18d] [Java] [cuyler36/ghidra-gamecube-loader](https://github.com/cuyler36/ghidra-gamecube-loader) A Nintendo GameCube binary loader for Ghidra
+- [**54**星][2m] [HTML] [aravinthpanch/rssi](https://github.com/aravinthpanch/rssi) Indoor localisation using RSSI. RSSI is received signal strength indicator in IEEE 802.11 beacon packet to announce the presence of WiFi.This tool was built to study & visualize the data collected in the experiments. This was done at Telecommunications Network Group (TKN), Berlin as part of EVARILOS.
+- [**54**星][4y] [Py] [geovation/wifispy](https://github.com/geovation/wifispy) Sniff Wifi traffic, log device addresses.
+- [**54**星][16d] [TS] [ediardo/kmdr-cli](https://github.com/ediardo/kmdr-cli) 🧠The ultimate CLI learning tool for explaining commands from your terminal
+- [**54**星][27d] [HTML] [usnistgov/acvp](https://github.com/usnistgov/acvp) Industry Working Group on Automated Cryptographic Algorithm Validation
+- [**54**星][5y] [Py] [yahooarchive/pyioce](https://github.com/YahooArchive/PyIOCe) Python IOC Editor
+- [**54**星][2m] [C#] [southpolenator/sharpdebug](https://github.com/southpolenator/SharpDebug) C# debugging automation tool
+- [**54**星][1y] [Py] [k4yt3x/defense-matrix](https://github.com/k4yt3x/defense-matrix) Express security essentials deployment for Linux Servers
+- [**54**星][2y] [Java] [graxcode/java-unpacker](https://github.com/GraxCode/java-unpacker) Extract Crypted Jar Archives
+- [**54**星][1y] [Py] [zardus/idalink](https://github.com/zardus/idalink) 使用IDA API时保证不卡界面. 在后台启动与界面脱离IDA CLI会话, 再使用RPyC连接界面
+- [**54**星][6m] [C++] [x64dbg/snowman](https://github.com/x64dbg/snowman) Snowman Decompiler for x64dbg (LOOKING FOR MAINTAINER)
+- [**54**星][2y] [PS] [whitehat-zero/powenum](https://github.com/whitehat-zero/powenum) Executes common PowerSploit Powerview functions then combines output into a spreadsheet for easy analysis.
+- [**54**星][10d] [Py] [w181496/ctf](https://github.com/w181496/ctf) My CTF writeups
+- [**54**星][15d] [Java] [vy/hrrs](https://github.com/vy/hrrs) Record, transform, and replay HTTP requests in Java EE and Spring applications.
+- [**54**星][1y] [Py] [vulnerscom/vulners-scanner](https://github.com/vulnerscom/vulners-scanner) Vulnerability scanner based on vulners.com audit API
+- [**54**星][1y] [JS] [userlandkernel/jailbreakme-unified](https://github.com/userlandkernel/jailbreakme-unified) Framework for iOS browser exploitation to kernel privileges and rootfs remount
+- [**54**星][24d] [Py] [ucsb-seclab/agrigento](https://github.com/ucsb-seclab/agrigento) Agrigento is a tool to identify privacy leaks in Android apps by performing black-box differential analysis on the network traffic.
+- [**54**星][1y] [Shell] [thelinuxchoice/tweetshell](https://github.com/thelinuxchoice/tweetshell) Multi-thread Twitter BruteForcer in Shell Script
+- [**54**星][5m] [PS] [tasox/logrm](https://github.com/tasox/logrm) LogRM is a post exploitation powershell script which it uses windows event logs to gather information about internal network
+- [**54**星][2y] [C] [tandasat/fu_hypervisor](https://github.com/tandasat/fu_hypervisor) A hypervisor hiding user-mode memory using EPT
+- [**54**星][8y] [C] [soulxu/kvmsample](https://github.com/soulxu/kvmsample) minivm based on kvm
+- [**54**星][2y] [C++] [sisoma2/shellcodeloader](https://github.com/sisoma2/shellcodeloader) Small tool to load shellcodes or PEs to analyze them
+- [**54**星][3y] [C++] [rwfpl/rewolf-msi-exploit](https://github.com/rwfpl/rewolf-msi-exploit) MSI NTIOLib/WinIO Local Privilege Escalation exploit
+- [**54**星][4y] [Py] [rodionovd/cuckoo-osx-analyzer](https://github.com/rodionovd/cuckoo-osx-analyzer) An OS X analyzer for Cuckoo Sandbox project
+- [**54**星][2y] [C++] [raymon-tian/wfpfirewall](https://github.com/raymon-tian/wfpfirewall) 基于WFP(Windows Filter Platform)的个人防火墙系统
+- [**54**星][2m] [HTML] [r3kapig/writeup](https://github.com/r3kapig/writeup) CTF challenges writeup
+- [**54**星][8m] [MATLAB] [professormahi/ctf](https://github.com/professormahi/ctf) CTF (Capture The Flag Writeups and Tools)
+- [**54**星][7d] [Ruby] [picatz/shodanz](https://github.com/picatz/shodanz)
+- [**54**星][3y] [Py] [patois/drgadget](https://github.com/patois/drgadget) 开发和分析ROP链
+- [**54**星][3y] [C] [passingtheknowledge/ganxo](https://github.com/passingtheknowledge/ganxo) An opensource API hooking framework
+- [**54**星][2y] [ObjC] [objective-see/aurevoir](https://github.com/objective-see/aurevoir) View and remove notification messages from Apple's "Notification Database"
+- [**54**星][5y] [Py] [nnewsom/webbies](https://github.com/nnewsom/webbies) Collection of tools for web recon and enumeration.
+- [**54**星][2y] [Py] [nezza/scada-stuff](https://github.com/nezza/scada-stuff) A collection of scripts & tools for reverse-engineering & hacking SCADA/ICS devices.
+- [**54**星][2m] [netstalking-core/netstalking-osint](https://github.com/netstalking-core/netstalking-osint) Коллекция материалов по OSINT для нетсталкинга
+- [**54**星][1y] [Go] [netflix-skunkworks/aws-metadata-proxy](https://github.com/netflix-skunkworks/aws-metadata-proxy) AWS Metadata Proxy for protection against SSRF
+- [**54**星][9y] [Emacs Lisp] [nelhage/reverse-android](https://github.com/nelhage/reverse-android) Reverse-engineering tools for Android applications
+- [**54**星][3y] [Rust] [nccgroup/assethook](https://github.com/nccgroup/assethook) LD_PRELOAD magic for Android's AssetManager
+- [**54**星][9m] [Shell] [mzpqnxow/embedded-toolkit](https://github.com/mzpqnxow/embedded-toolkit) Prebuilt statically linked gdbserver and gawk executables for Linux on ARMEL, MIPS/MIPSEL and more platforms for use on embedded devices, including for systems with many different ABIs (including more than 20 statically linked gdbserver executables)
+- [**54**星][10m] [muhammd/awesome-pentest](https://github.com/muhammd/awesome-pentest) Awesome Penetration Testing A collection of awesome penetration testing resources
+- [**54**星][3y] [Perl] [msimerson/sentry](https://github.com/msimerson/sentry) Bruteforce attack blocker (ssh, FTP, SMTP, and more)
+- [**54**星][3y] [Py] [mseclab/burp-pyjfuzz](https://github.com/mseclab/burp-pyjfuzz) Burp Suite plugin which implement PyJFuzz for fuzzing web application.
+- [**54**星][2y] [Java] [mirsamantajbakhsh/onionharvester](https://github.com/mirsamantajbakhsh/onionharvester) A small TOR Onion Address harvester for checking if the address is available or not.
+- [**54**星][1y] [C] [mikeryan/uberducky](https://github.com/mikeryan/uberducky) 将Ubertooth转换为通过BLE触发的无线USB橡皮鸭
+- [**54**星][3m] [mikerah/awesome-privacy-on-blockchains](https://github.com/mikerah/awesome-privacy-on-blockchains) A curated list of privacy on blockchains resources
+- [**54**星][2y] [PS] [microsoftedge/dev.microsoftedge.com-vms](https://github.com/microsoftedge/dev.microsoftedge.com-vms) Scripts used to generate the free VMs available at
+- [**54**星][1m] [Py] [matt-kempster/mips_to_c](https://github.com/matt-kempster/mips_to_c) A MIPS decompiler.
+- [**54**星][2y] [Py] [matejbasic/pythonscrapybasicsetup](https://github.com/matejbasic/pythonscrapybasicsetup) Basic setup with random user agents and IP addresses for Python Scrapy Framework.
+- [**54**星][6m] [Py] [masood-m/yalih](https://github.com/masood-m/yalih) YALIH (Yet Another Low Interaction Honeyclient) is a low Interaction Client honeypot designed to detect malicious websites through signature, anomaly and pattern matching techniques
+- [**54**星][5y] [C++] [malwaretech/fsthook](https://github.com/malwaretech/fsthook) A library for intercepting native functions by hooking KiFastSystemCall
+- [**54**星][3y] [C#] [lontivero/vinchuca](https://github.com/lontivero/vinchuca) A resilient peer-to-peer botnet agent in .NET
+- [**54**星][2y] [Shell] [letssudormrf/ssr-bbr-docker](https://github.com/letssudormrf/ssr-bbr-docker) Dockerfile for ssr+bbr_powered
+- [**54**星][12m] [Py] [klsecservices/s7scan](https://github.com/klsecservices/s7scan) The tool for enumerating Siemens S7 PLCs through TCP/IP or LLC network
+- [**54**星][6m] [C#] [klionsec/bypassav-allthings](https://github.com/klionsec/bypassav-allthings)
+- [**54**星][3m] [ObjC] [julbouln/ice40_eink_controller](https://github.com/julbouln/ice40_eink_controller) ice40 FPGA eink controller
+- [**54**星][4y] [Batchfile] [islamadel/bat2exe](https://github.com/islamadel/bat2exe) Automatically exported from code.google.com/p/bat2exe
+- [**54**星][9y] [Shell] [ioerror/crlwatch](https://github.com/ioerror/crlwatch) Collect, watch, and analyze SSL/TLS CRL data
+- [**54**星][2y] [Py] [heurs/parsentfs](https://github.com/heurs/parsentfs) Simple NTFS crawler.
+- [**54**星][6y] [Shell] [hclx/dell_power_spoofer](https://github.com/hclx/dell_power_spoofer) A MSP430 based design spoofing dell power adapter identification
+- [**54**星][7m] [Py] [hannob/superfishy](https://github.com/hannob/superfishy) Archive of software and other data involved in the Superfish / Komodia incident
+- [**54**星][5y] [Go] [hailocab/logslam](https://github.com/hailocab/logslam) A lightweight lumberjack protocol compliant logstash indexer
+- [**54**星][3m] [Py] [gray-panda/grayrepo](https://github.com/gray-panda/grayrepo) Personal repository for all ctf related stuffs
+- [**54**星][8m] [C] [gosecure/dllpasswordfilterimplant](https://github.com/gosecure/dllpasswordfilterimplant) DLL Password Filter Implant with Exfiltration Capabilities
+- [**54**星][4m] [HTML] [google/security-crawl-maze](https://github.com/google/security-crawl-maze) Security Crawl Maze is a comprehensive testbed for web security crawlers. It contains pages representing many ways in which one can link resources from a valid HTML document.
+- [**54**星][4y] [Go] [gehaxelt/ds_store](https://github.com/gehaxelt/ds_store) GO - Minimal parser for .DS_Store files
+- [**54**星][11d] [JS] [fedora-infra/asknot-ng](https://github.com/fedora-infra/asknot-ng) What can I do for $ORGANIZATION?
+- [**54**星][1y] [JS] [enovella/androidtrainings](https://github.com/enovella/androidtrainings) Mobile security trainings based on android
+- [**54**星][5m] [Py] [dr0op/bufferfly](https://github.com/dr0op/bufferfly) 攻防演习/渗透测试资产处理小工具,对攻防演习/渗透测试前的信息搜集到的大批量资产/域名进行存活检测、获取标题头、语料提取、常见web端口检测等。
+- [**54**星][1y] [cujanovic/subdomain-bruteforce-list](https://github.com/cujanovic/subdomain-bruteforce-list) subdomain bruteforce list
+- [**54**星][8y] [Py] [cranklin/python-virus](https://github.com/cranklin/python-virus) This is an educational computer virus written in Python to demonstrate how replication is done.
+- [**54**星][10m] [Py] [circl/potiron](https://github.com/circl/potiron) Potiron - Normalize, Index and Visualize Network Capture
+- [**54**星][2y] [C++] [census/windows_10_rs2_rs3_exploitation_primitives](https://github.com/census/windows_10_rs2_rs3_exploitation_primitives) Windows 10 RS2/RS3 exploitation primitives based on the OffensiveCon 2018 talk
+- [**54**星][3y] [Assembly] [casperreverser/casperreverse](https://github.com/casperreverser/casperreverse) Here's a quick rundown of how I reversed the Casper API (
+- [**54**星][2y] [PS] [byt3bl33d3r/invoke-autoit](https://github.com/byt3bl33d3r/invoke-autoit) Loads the AutoIt DLL and PowerShell assemblies into memory and executes the specified keystrokes
+- [**54**星][9m] [C] [bsidessf/ctf-2019-release](https://github.com/bsidessf/ctf-2019-release) BSidesSF CTF 2019 release
+- [**54**星][7m] [Clojure] [bronsa/tools.decompiler](https://github.com/bronsa/tools.decompiler) A decompiler for clojure, in clojure
+- [**54**星][4y] [JS] [az0ne/simple_zoomeye](https://github.com/az0ne/simple_zoomeye) 一个还正在完善的项目,采用分布式python扫描全国的HTTP服务
+- [**54**星][1y] [Self] [ayoul3/privesc](https://github.com/ayoul3/privesc) Privilege escalation tools on Mainframe
+- [**54**星][3y] [Elm] [auth0-blog/elm-with-jwt-api](https://github.com/auth0-blog/elm-with-jwt-api)
+- [**54**星][2y] [Py] [aserper/ddetect](https://github.com/aserper/ddetect) Simple DDE object detector
+- [**54**星][5y] [Java] [ajohnston9/ciscorouter](https://github.com/ajohnston9/ciscorouter) Tool for scanning Cisco router products over SSH
+- [**54**星][2y] [Java] [5up3rc/weblogic_cmd](https://github.com/5up3rc/weblogic_cmd) weblogic t3 deserialization rce
+- [**54**星][1y] [Py] [5alt/vulhint](https://github.com/5alt/vulhint) VulHint是辅助代码审计的 sublime text 3 插件
+- [**53**星][3d] [Shell] [al0ne/nginx_log_check](https://github.com/al0ne/nginx_log_check) Nginx日志安全分析脚本
+- [**53**星][6d] [Java] [sukaralin/cve-2019-2890](https://github.com/sukaralin/cve-2019-2890)
+- [**53**星][5y] [Py] [jeanphorn/common-password](https://github.com/jeanphorn/common-password) 字典生成脚本, 用python语言写成的可交互性的字典生成脚本。尤其适合社会工程学,当你收集到目标的具体信息后,你就可以通过这个脚本来智能化生成关于目标的字典。
+- [**53**星][7d] [Go] [shopify/voucher](https://github.com/shopify/voucher)
+- [**53**星][11m] [Py] [mushorg/oschameleon](https://github.com/mushorg/oschameleon) OS Fingerprint Obfuscation for modern Linux Kernels
+- [**53**星][9m] [Py] [moosedojo/spotter](https://github.com/moosedojo/spotter) Targeted Payload Execution
+- [**53**星][24d] [Shell] [threatexpress/pasties](https://github.com/threatexpress/pasties) A collection of random bits of information common to many individual penetration tests, red teams, and other assessments
+- [**53**星][30d] [Py] [0x90/wpsik](https://github.com/0x90/wpsik) WPS scan and pwn tool
+- [**53**星][3y] [PS] [elevenpaths/telefonica-wannacry-filerestorer](https://github.com/elevenpaths/telefonica-wannacry-filerestorer) Tool to restore some WannaCry files which encryption weren't finish properly
+- [**53**星][22d] [Java] [thisislibra/genesis](https://github.com/thisislibra/genesis) A framework to generate unique test cases based on code snippets to test techniques
+- [**53**星][11m] [Shell] [criteo/kerberos-docker](https://github.com/criteo/kerberos-docker) Run kerberos environment in docker containers
+- [**53**星][21d] [Py] [hamz-a/frida-android-helper](https://github.com/hamz-a/frida-android-helper) Frida Android utilities
+- [**53**星][2m] [mohitkhemchandani/oscp-complete-guide](https://github.com/mohitkhemchandani/oscp-complete-guide) How to prepare for OSCP complete guide
+- [**53**星][4d] [JS] [bazzite/nuxt-netlify](https://github.com/bazzite/nuxt-netlify) Dynamically generate _headers and _redirects files for Netlify in your Nuxt.js projects
+- [**53**星][1y] [Py] [synacktiv-contrib/modmobmap](https://github.com/Synacktiv-contrib/Modmobmap) Map 2G/3G/4G and more cellular networks in real live with a simple smart phone, pretty much like osmocomBB monitoring feature.
+- [**53**星][8m] [Py] [synacktiv-contrib/stuffz](https://github.com/Synacktiv-contrib/stuffz) Repository containing many useful scripts
+- [**53**星][3y] [Py] [ghostlulzhacks/rolljam](https://github.com/ghostlulzhacks/rolljam) rolljam
+- [**53**星][2y] [HTML] [jm33-m0/gfw_scripts](https://github.com/jm33-m0/gfw_scripts) added shadowsocks plugin for gee 4
+- [**53**星][2y] [fsecurelabs/defcon25_uac_workshop](https://github.com/FSecureLABS/defcon25_uac_workshop) UAC 0Day all day!
+- [**53**星][1m] [b-mueller/awesome-mythx-smart-contract-security-tools](https://github.com/b-mueller/awesome-mythx-smart-contract-security-tools) A curated list of resources and tools for the MythX smart contract security API
+- [**53**星][2y] [Java] [zyrikby/fsquadra](https://github.com/zyrikby/fsquadra) Fast detection of repackaged Android applications based on the comparison of resource files included into the package.
+- [**53**星][4y] [Py] [zenfish/ipmi](https://github.com/zenfish/ipmi) IPMI stuff from DARPA work
+- [**53**星][7d] [C#] [z3prover/firewallchecker](https://github.com/z3prover/firewallchecker) A self-contained firewall checker
+- [**53**星][9m] [Shell] [xalfie/nix-auditor](https://github.com/xalfie/nix-auditor) Nix Audit made easier (RHEL, CentOS)
+- [**53**星][1m] [Go] [wrfly/gus-proxy](https://github.com/wrfly/gus-proxy) "打一枪换一个地方" 一个HTTP代理
+- [**53**星][1y] [Shell] [w3c/device-memory](https://github.com/w3c/device-memory) Device Memory
+- [**53**星][9m] [PS] [vtagion/scripts](https://github.com/vtagion/scripts)
+- [**53**星][7y] [Visual Basic .NET] [vbgamer45/semi-vb-decompiler](https://github.com/vbgamer45/semi-vb-decompiler) Partial decompiler for Visual Basic. Code source of file struture infomation.
+- [**53**星][2y] [Py] [uzetta27/easyrop](https://github.com/uzetta27/easyrop) A Python tool to generate ROP chains
+- [**53**星][5y] [Java] [thuxnder/androiddevice.info](https://github.com/thuxnder/androiddevice.info) Android app collecting device information and submiting it to
+- [**53**星][12d] [Py] [taokong/group_normalization](https://github.com/taokong/group_normalization) pytorch implementation of group normalization in
+- [**53**星][1m] [Rust] [str4d/ire](https://github.com/str4d/ire) I2P router implementation in Rust
+- [**53**星][2y] [Py] [spritz-research-group/ctf-writeups](https://github.com/spritz-research-group/ctf-writeups) SPRITZ plays CTFs! Writeups by spritzers
+- [**53**星][6d] [Py] [snowflakedb/snowalert](https://github.com/snowflakedb/snowalert) Security Analytics Using The Snowflake Data Warehouse
+- [**53**星][5m] [Py] [sneakerhax/pyphisher](https://github.com/sneakerhax/pyphisher) A simple python tool for phishing
+- [**53**星][1m] [JS] [secgroup/flower](https://github.com/secgroup/flower) TCP flow analyzer with sugar for A/D CTF
+- [**53**星][4y] [C++] [scadacs/plcinject](https://github.com/scadacs/plcinject)
+- [**53**星][1m] [Py] [reorx/python-terminal-color](https://github.com/reorx/python-terminal-color) Drop-in single file library for printing color in terminal
+- [**53**星][2y] [PS] [powershell/gpregistrypolicy](https://github.com/powershell/gpregistrypolicy)
+- [**53**星][12m] [Py] [payatu/cve-2018-14442](https://github.com/payatu/cve-2018-14442) PoC for Foxit Reader CVE-2018-14442
+- [**53**星][3d] [C] [outscale/packetgraph](https://github.com/outscale/packetgraph) Packetgraph library is a collection of network bricks you can connect to form a network graph.
+- [**53**星][6m] [JS] [ollseg/ttt-ext](https://github.com/ollseg/ttt-ext) Chrome extension to aid in finding DOMXSS by simple taint analysis of string values.
+- [**53**星][8m] [Py] [nwmonster/applysig](https://github.com/nwmonster/applysig) Apply IDA FLIRT signatures for Ghidra
+- [**53**星][3y] [Shell] [nvssks/android-responder](https://github.com/nvssks/android-responder) Scripts for running Responder.py in an Android (rooted) device.
+- [**53**星][6y] [JS] [niegowski/node-daemonize2](https://github.com/niegowski/node-daemonize2) Node module for easy creation of daemons for Node 0.8.x and above
+- [**53**星][3m] [Shell] [nameles-org/nameles](https://github.com/nameles-org/nameles) Open source entropy based invalid traffic detection and pre-bid filtering.
+- [**53**星][5m] [Py] [n0fate/ichainbreaker](https://github.com/n0fate/ichainbreaker) Breaking the iCloud Keychain Artifacts
+- [**53**星][2y] [C++] [mq1n/dllthreadinjectiondetector](https://github.com/mq1n/dllthreadinjectiondetector)
+- [**53**星][2y] [Java] [modzero/modjoda](https://github.com/modzero/modjoda) Java Object Deserialization on Android
+- [**53**星][2y] [Shell] [mempodippy/snodew](https://github.com/mempodippy/snodew) PHP root (suid) reverse shell
+- [**53**星][1y] [Py] [m4ll0k/icloudbrutter](https://github.com/m4ll0k/icloudbrutter) AppleID Bruteforce
+- [**53**星][4y] [C] [lgeek/dynamorio_pin_escape](https://github.com/lgeek/dynamorio_pin_escape)
+- [**53**星][5y] [PHP] [kulisu/metasploit-pro-trial-grabber](https://github.com/kulisu/metasploit-pro-trial-grabber) This is a PHP command-line script to auto-grab the metasploit 14-DAYs pro trial key.
+- [**53**星][7y] [C] [kmcallister/alameda](https://github.com/kmcallister/alameda) Linux kernel JIT spray for SMEP / KERNEXEC bypass
+- [**53**星][4y] [Py] [juliocesarfort/netscreen-shodan-scanner](https://github.com/juliocesarfort/netscreen-shodan-scanner) A SHODAN/Censys + Paramiko scanner to check for backdoored Internet-facing Juniper ScreenOS devices
+- [**53**星][9m] [Java] [jogolden/ghidraps4loader](https://github.com/jogolden/ghidraps4loader) A Ghidra loader for PlayStation 4 binaries.
+- [**53**星][5m] [C++] [jesseemond/cheat-and-gin](https://github.com/jesseemond/cheat-and-gin) C++ cheat engine (memory scanner)
+- [**53**星][2y] [ObjC] [iabem97/securityd-racer2](https://github.com/iabem97/securityd-racer2) PoC vulnerability in securityd
+- [**53**星][3m] [Shell] [hirbodbehnam/shadowsocks-cloak-installer](https://github.com/hirbodbehnam/shadowsocks-cloak-installer) A one-key script to setup Cloak plugin with Shadowsocks on your server
+- [**53**星][11d] [C++] [hasherezade/vidi](https://github.com/hasherezade/vidi) ViDi Visual Disassembler (experimental)
+- [**53**星][5y] [C++] [hackedteam/core-win32](https://github.com/hackedteam/core-win32) RCS Agent for Windows (32bit)
+- [**53**星][2y] [Py] [h-j-13/malicious_domain_whois](https://github.com/h-j-13/malicious_domain_whois)
+- [**53**星][2y] [C#] [guardicore/azure_password_harvesting](https://github.com/guardicore/azure_password_harvesting) Plaintext Password harvesting from Azure Windows VMs
+- [**53**星][1m] [C] [gluster/gluster-block](https://github.com/gluster/gluster-block) A framework for gluster block storage
+- [**53**星][5y] [C#] [glmcdona/functionhacker](https://github.com/glmcdona/functionhacker) Maintaining an official release at
+- [**53**星][3y] [Py] [gideonn/insta-gallery-downloader](https://github.com/gideonn/insta-gallery-downloader) This is a bot to download all your instagram gallery pictures in a single folder
+- [**53**星][4y] [PHP] [gfoss/phpmyadmin_honeypot](https://github.com/gfoss/phpmyadmin_honeypot)
+- [**53**星][2y] [g-solaria/osintforpentests](https://github.com/g-solaria/osintforpentests) Slides from my ShellCon Talk, OSINT for Pen Tests, given 10/19.
+- [**53**星][2y] [Shell] [evyatarmeged/stegextract](https://github.com/evyatarmeged/stegextract) Detect hidden files and text in images
+- [**53**星][1y] [JS] [evyatarmeged/humanoid](https://github.com/evyatarmeged/humanoid) Node.js package to bypass CloudFlare's anti-bot JavaScript challenges
+- [**53**星][7y] [C++] [eschweiler/proreversing](https://github.com/eschweiler/proreversing) Open and generic Anti-Anti Reversing Framework. Works in 32 and 64 bits.
+- [**53**星][2m] [C#] [ericzimmerman/bstrings](https://github.com/ericzimmerman/bstrings) A better strings utility!
+- [**53**星][2m] [Shell] [edoverflow/smith](https://github.com/edoverflow/smith) Simple wrapper for meg that sieves through meg's output for you.
+- [**53**星][7m] [Py] [edent/renault-zoe-api](https://github.com/edent/renault-zoe-api) A basic API for getting information about your Renault Zoe Electric Vehicle.
+- [**53**星][3y] [Py] [dmuhs/pastebin-scraper](https://github.com/dmuhs/pastebin-scraper) Live-scraping pastebin to fight boredom.
+- [**53**星][2y] [Go] [diogomonica/actuary](https://github.com/diogomonica/actuary) An actuary is a business professional who analyzes the financial consequences of risk.
+- [**53**星][3y] [Shell] [dg92/node-express-postgres-redis-starter-kit](https://github.com/dg92/node-express-postgres-redis-starter-kit) This is a starter kit that help you get started with node, express, postgresql, redis. Node.js / Express / PostgreSQL / Authentication API Starter Kit
+- [**53**星][2y] [Py] [devsecops/defcon-workshop](https://github.com/devsecops/defcon-workshop)
+- [**53**星][5m] [Py] [deadbits/malware-analysis-scripts](https://github.com/deadbits/malware-analysis-scripts) Collection of scripts for different malware analysis tasks
+- [**53**星][2m] [HTML] [daxio/k8s-lemp](https://github.com/daxio/k8s-lemp) LEMP stack in a Kubernetes cluster
+- [**53**星][4y] [C++] [datachi/memdb](https://github.com/datachi/memdb) Tools to track memory accesses in applications and visualize the patterns to reveal opportunities for optimization.
+- [**53**星][12m] [Shell] [damonmohammadbagher/nativepayload_image](https://github.com/damonmohammadbagher/nativepayload_image) Transferring Backdoor Payloads with BMP Image Pixels
+- [**53**星][5m] [HTML] [d1str0/drupot](https://github.com/d1str0/drupot) Drupal Honeypot
+- [**53**星][2m] [Java] [coreyd97/stepper](https://github.com/coreyd97/stepper) A natural evolution of Burp Suite's Repeater tool
+- [**53**星][2y] [Py] [coffeehb/sstif](https://github.com/coffeehb/sstif) 一个Fuzzing服务器端模板注入漏洞的半自动化工具
+- [**53**星][4y] [C++] [cn33liz/p0shkiller](https://github.com/cn33liz/p0shkiller)
+- [**53**星][12m] [chryzsh/practical-hacking](https://github.com/chryzsh/practical-hacking) Repo for the Gitbook Practical Hacking
+- [**53**星][2y] [JS] [christophetd/docker-python-sandbox](https://github.com/christophetd/docker-python-sandbox) A Docker-powered NodeJS sandbox to execute untrusted python code.
+- [**53**星][1y] [C] [chen-charles/pedetour](https://github.com/chen-charles/pedetour) modify binary Portable Executable to hook its export functions
+- [**53**星][2y] [Py] [carnal0wnage/malicious_file_maker](https://github.com/carnal0wnage/malicious_file_maker) malicious file maker/sender to create and send malicious attachments to test your email filter/alerting
+- [**53**星][12m] [bughunterid/bughunterid](https://github.com/bughunterid/bughunterid) Para pencari bug / celah kemanan bisa bergabung.
+- [**53**星][3m] [Shell] [bishopfox/pwn-pulse](https://github.com/bishopfox/pwn-pulse) Exploit for Pulse Connect Secure SSL VPN arbitrary file read vulnerability (CVE-2019-11510)
+- [**53**星][3m] [Java] [arloor/httpproxy](https://github.com/arloor/httpproxy) a netty-based http proxy that breaks the GFW。
+- [**53**星][3y] [C++] [aixxe/chameleon](https://github.com/aixxe/chameleon) Basic skin & knife changer for Counter-Strike: Global Offensive
+- [**53**星][3y] [agahlot/rtfm](https://github.com/agahlot/rtfm) Red Team Field Manual
+- [**53**星][1y] [C#] [advancedhacker101/c-sharp-r.a.t-client](https://github.com/advancedhacker101/c-sharp-r.a.t-client) This is a c# client for the c# R.A.T server
+- [**53**星][7d] [C] [ademakov/mainmemory](https://github.com/ademakov/mainmemory) Wannabe Main Memory Database and More
+- [**53**星][2y] [Py] [0x4d31/sqhunter](https://github.com/0x4d31/sqhunter) A simple threat hunting tool based on osquery, Salt Open and Cymon API
+- [**53**星][7m] [C] [0cch/0cchext](https://github.com/0cch/0cchext) 0CCh Windbg extension
+- [**52**星][2y] [Py] [sensepost/peanuts](https://github.com/sensepost/peanuts) Peanuts is a free and open source wifi tracking tool. Based on the SensePosts Snoopy-NG project that is now closed.
+- [**52**星][1y] [Py] [nixawk/hello-python2](https://github.com/nixawk/hello-python2) Python libraries demos
+- [**52**星][5y] [Ruby] [michenriksen/hibp](https://github.com/michenriksen/hibp) A simple tool to check a bunch of email addresses against the Have I Been Pwned API.
+- [**52**星][3y] [Py] [tobefuturer/ida-swift-demangle](https://github.com/tobefuturer/ida-swift-demangle) A tool to demangle Swift function names in IDA.
+- [**52**星][2y] [Py] [yadox666/wifi_ccc](https://github.com/yadox666/wifi_ccc) Wi-Fi Covert Channel Chat demo application
+- [**52**星][7m] [Py] [shadowsocksr-live/shadowsocksr](https://github.com/shadowsocksr-live/shadowsocksr)
+- [**52**星][29d] [Py] [jas502n/solr_rce](https://github.com/jas502n/solr_rce) Apache Solr RCE via Velocity template
+- [**52**星][2y] [C++] [xfgryujk/cheatingtutorial](https://github.com/xfgryujk/cheatingtutorial) 一个游戏修改器制作教程的例程
+- [**52**星][3y] [Py] [test-pipeline/orthrus](https://github.com/test-pipeline/orthrus) A tool to manage, conduct, and assess dictionary-based fuzz testing
+- [**52**星][25d] [C] [bmegli/wifi-scan](https://github.com/bmegli/wifi-scan) A nl80211 C/C++ library for monitoring signal strength of WiFi networks
+- [**52**星][7d] [Go] [giuliocomi/backoori](https://github.com/giuliocomi/backoori) Tool aided persistence via Windows URI schemes abuse
+- [**52**星][4m] [Py] [lengjibo/dedecmscan](https://github.com/lengjibo/dedecmscan) 织梦全版本漏洞扫描
+- [**52**星][3y] [Py] [cylance/mitmcanary](https://github.com/cylance/mitmcanary) Tool/service to detect Man in the Middle attacks with Canary Requests
+- [**52**星][11m] [JS] [kruegerrobotics/lan-monitor](https://github.com/kruegerrobotics/lan-monitor) Simple website to display the LAN status based on a nmap scan
+- [**52**星][9m] [Logos] [zhaochengxiang/ioswechatfakelocation](https://github.com/zhaochengxiang/ioswechatfakelocation) A tweak that can fake location info in WeChat
+- [**52**星][5y] [Py] [x0day/multiproxies](https://github.com/x0day/multiproxies) penetration testing framework that can use socks4/socks5 proxy.
+- [**52**星][3y] [Py] [wraith-wireless/pyric](https://github.com/wraith-wireless/pyric) Python wireless library for Linux
+- [**52**星][2d] [TS] [wkovacs64/hibp](https://github.com/wkovacs64/hibp) A Promise-based API for querying the 'Have I been pwned?' service.
+- [**52**星][2y] [C#] [vmcall/mapdetection](https://github.com/vmcall/mapdetection) Detect manualmapped images remotely, without hassle
+- [**52**星][6m] [C++] [virgilsecurity/virgil-crypto](https://github.com/virgilsecurity/virgil-crypto) Virgil Crypto is a high-level cryptographic library that allows you to perform all necessary operations for secure storing and transferring data and everything required to become HIPAA and GDPR compliant. Crypto Library is written in C++, suitable for mobile and server platforms and supports bindings with: Swift, Obj-C, Java (Android), С#/.NET, …
+- [**52**星][9d] [tyrmars/websafe-steppitguide](https://github.com/tyrmars/websafe-steppitguide) Web前后端漏洞分析与防御-知识梳理
+- [**52**星][1y] [Py] [truneski/external_c2_framework](https://github.com/truneski/external_c2_framework) Python api for usage with cobalt strike's External C2 specification
+- [**52**星][1y] [C#] [them4hd1/jcs](https://github.com/them4hd1/jcs) Joomla Vulnerability Component Scanner
+- [**52**星][1y] [Py] [theevilbit/workshops](https://github.com/theevilbit/workshops)
+- [**52**星][7m] [C] [strivexjun/hidedll](https://github.com/strivexjun/hidedll) Hide DLL / Hide Module / Hide Dynamic Link Library
+- [**52**星][3y] [PHP] [shenzhenjinma/aliredenvelope](https://github.com/shenzhenjinma/aliredenvelope) 支付宝红包破解算法
+- [**52**星][3y] [C++] [sektioneins/wwcd](https://github.com/sektioneins/wwcd) Capstone支持的IDA视图
+- [**52**星][3y] [Py] [secwiki/some-poc-or-exp](https://github.com/secwiki/some-poc-or-exp) 各种漏洞poc、Exp的收集或编写
+- [**52**星][10m] [Java] [ruedigergad/clj-net-pcap](https://github.com/ruedigergad/clj-net-pcap) A wrapper/facade/whatever to enable/ease the use of jNetPcap (a libpcap based packet sniffing lib) in Clojure
+- [**52**星][2y] [rehints/blackhat_2017](https://github.com/rehints/blackhat_2017) Betraying the BIOS: Where the Guardians of the BIOS are Failing
+- [**52**星][2y] [C] [rc0r/afl-fuzz](https://github.com/rc0r/afl-fuzz) Non-official repository for lcamtuf's American Fuzzy Lop
+- [**52**星][10m] [Assembly] [pret/pokepinball](https://github.com/pret/pokepinball) disassembly of pokémon pinball
+- [**52**星][1y] [PS] [pldmgg/winadmincenterps](https://github.com/pldmgg/winadmincenterps) Copy of Windows Admin Center (
+- [**52**星][1y] [C] [phdphuc/mac-a-mal](https://github.com/phdphuc/mac-a-mal) 追踪macOS恶意软件的内核驱动, 与Cuckoo沙箱组合使用
+- [**52**星][3y] [ASP] [pentesthub/priviledgebook](https://github.com/pentesthub/priviledgebook) 提权的文档
+- [**52**星][4m] [payloadbox/open-redirect-payload-list](https://github.com/payloadbox/open-redirect-payload-list)
+- [**52**星][19d] [Py] [patois/xray](https://github.com/patois/xray) 根据正则表达式对IDA反编译输出的特定内容进行高亮显示
+- [**52**星][2m] [PS] [palantir/exploitguard](https://github.com/palantir/exploitguard) Documentation and supporting script sample for Windows Exploit Guard
+- [**52**星][2y] [Java] [owasp-ruhrpott/owasp-workshop-android-pentest](https://github.com/owasp-ruhrpott/owasp-workshop-android-pentest) Learning Penetration Testing of Android Applications
+- [**52**星][5y] [Py] [osandamalith/chromefreak](https://github.com/osandamalith/chromefreak) A Cross-Platform Forensic Framework for Google Chrome
+- [**52**星][3y] [PHP] [northwind6/webbug](https://github.com/northwind6/webbug) WebBug漏洞练习平台
+- [**52**星][1y] [Py] [nikallass/sharesearch](https://github.com/nikallass/sharesearch) Samba, NFS shares spider and grepper
+- [**52**星][2y] [Py] [neo23x0/radiocarbon](https://github.com/neo23x0/radiocarbon) Leak File Analyzer
+- [**52**星][2m] [Py] [nelenkov/android-device-check](https://github.com/nelenkov/android-device-check) Check Android device security settings
+- [**52**星][2y] [PS] [mr-un1k0d3r/base64-obfuscator](https://github.com/mr-un1k0d3r/base64-obfuscator) Simple PowerShell Base64 encoder to avoid detection of your malicious payload
+- [**52**星][4d] [Shell] [mitchellkrogza/badd-boyz-hosts](https://github.com/mitchellkrogza/badd-boyz-hosts) A hosts file for use on any operating system to block bad domains out of your servers or devices.
+- [**52**星][1y] [C] [miguelangel-nubla/videop2proxy](https://github.com/miguelangel-nubla/videop2proxy) Proxy to enable P2P only cameras to work with standard protocols.
+- [**52**星][7y] [Ruby] [medelibero/ddos-tools](https://github.com/medelibero/ddos-tools) Tools that were created to help with Distributed Denial of Service testing
+- [**52**星][11m] [Py] [matonis/yara_tools](https://github.com/matonis/yara_tools) Create an entire YARA rule via Python? Whhhhhhaatttt?
+- [**52**星][9m] [C] [marcan/lsirec](https://github.com/marcan/lsirec) LSI SAS2008/SAS2108 low-level recovery tool for Linux
+- [**52**星][3y] [PS] [m-dwyer/cryptoblocker](https://github.com/m-dwyer/cryptoblocker) A script to deploy File Server Resource Manager and associated scripts to block infected users
+- [**52**星][5m] [Py] [lorexxar/redis-rogue-server](https://github.com/lorexxar/redis-rogue-server) Redis 4.x & 5.x RCE
+- [**52**星][1y] [Py] [libraggbond/cve-2018-3191](https://github.com/libraggbond/cve-2018-3191) CVE-2018-3191 反弹shell
+- [**52**星][3y] [Roff] [ldbfpiaoran/websearch](https://github.com/ldbfpiaoran/websearch) Search engine for web assets
+- [**52**星][6y] [Py] [kevthehermit/maildb](https://github.com/kevthehermit/maildb) Python Web App to Parse and Track Email and http Pcap Files.
+- [**52**星][2y] [Py] [joker25000/dzjecter](https://github.com/joker25000/dzjecter)
+- [**52**星][5y] [C++] [jieyu/maple](https://github.com/jieyu/maple) A dynamic analysis framework for concurrent programs (x86 binaries). It is shipped with a few tools written using this framework for testing concurrent programs.
+- [**52**星][5y] [Py] [jfoote/burp-git-bridge](https://github.com/jfoote/burp-git-bridge) Store Burp data and collaborate via git
+- [**52**星][2y] [Py] [jflyup/goms17-010](https://github.com/jflyup/goms17-010) Simple program for detecting if host(s) are vulnerable to SMB exploit(MS17-010)
+- [**52**星][5y] [Py] [jeffreysasaki/backdoor](https://github.com/jeffreysasaki/backdoor) Linux backdoor implementation written in Python
+- [**52**星][1y] [JS] [jeffbryner/mozdef](https://github.com/jeffbryner/mozdef) MozDef: The Mozilla Defense Platform
+- [**52**星][2y] [Py] [inurlx/cloudkill3r](https://github.com/inurlx/cloudkill3r) CLOUDKiLL3R bypasses Cloudflare protection service via TOR Browser using crimeflare !
+- [**52**星][2m] [Py] [idapython/pyhexraysdeob](https://github.com/idapython/pyhexraysdeob) 工具 RolfRolles/HexRaysDeob 的Python版本
+- [**52**星][3y] [PHP] [httpoxy/php-fpm-httpoxy-poc](https://github.com/httpoxy/php-fpm-httpoxy-poc) A PoC for exploiting Guzzle's HTTP_PROXY untrusted read
+- [**52**星][2y] [C] [hasherezade/process_chameleon](https://github.com/hasherezade/process_chameleon) A process overwriting its own PEB to make an illusion that it has been loaded from a different path.
+- [**52**星][4y] [HTML] [hakanson/ng-owasp](https://github.com/hakanson/ng-owasp) OWASP Top 10 for AngularJS Applications
+- [**52**星][4m] [Py] [grrrdog/tacotaco](https://github.com/grrrdog/tacotaco) Some scripts for attacks on Tacacs+ protocol
+- [**52**星][6y] [C++] [georgenicolaou/heaveninjector](https://github.com/georgenicolaou/heaveninjector) Simple proof of concept code for injecting libraries on 64bit processes from a 32bit process
+- [**52**星][2y] [C] [gentilkiwi/spectre_meltdown](https://github.com/gentilkiwi/spectre_meltdown)
+- [**52**星][3y] [C] [fuzzstati0n/fuzzgoat](https://github.com/fuzzstati0n/fuzzgoat) A vulnerable C program for testing fuzzers.
+- [**52**星][4m] [Py] [fkasler/dolos_cloak](https://github.com/fkasler/dolos_cloak) Automated 802.1x Bypass
+- [**52**星][5y] [C++] [filcab/patchdiff2](https://github.com/filcab/patchdiff2) IDA binary differ. Since code.google.com/p/patchdiff2/ seemed abandoned, I did the obvious thing…
+- [**52**星][2y] [Py] [fideliscyber/indicators](https://github.com/fideliscyber/indicators) Indicators from FTAs and Blog Posts
+- [**52**星][11m] [feicong/zsxq_archives](https://github.com/feicong/zsxq_archives) 【软件安全与知识星球】精华文章列表
+- [**52**星][2m] [Py] [ezelf/f5_cookieleaks](https://github.com/ezelf/f5_cookieleaks) Decode the cookies set by balancer F5, and disclousure all pool ip
+- [**52**星][6y] [Py] [enthought/python-2.7.3](https://github.com/enthought/python-2.7.3)
+- [**52**星][10m] [Java] [empireproject/empiremobile](https://github.com/empireproject/empiremobile) Android and iOS source for the Empire mobile app
+- [**52**星][2y] [Py] [disruptops/cred_scanner](https://github.com/disruptops/cred_scanner) A simple file-based scanner to look for potential AWS access and secret keys in files
+- [**52**星][1m] [Py] [didierstevens/beta](https://github.com/didierstevens/beta) Beta versions of my software
+- [**52**星][6y] [Ruby] [depthsecurity/dahua_dvr_auth_bypass](https://github.com/depthsecurity/dahua_dvr_auth_bypass) Dahua CCTV DVR Authentication Bypass Metasploit Scanning Module
+- [**52**星][2y] [C] [dennypage/dpinger](https://github.com/dennypage/dpinger) dpinger:持续性监控网络延迟和数据包丢失
+- [**52**星][2m] [Py] [dedsecinside/awesome-scripts](https://github.com/dedsecinside/awesome-scripts) A collection of awesome scripts from developers around the globe.
+- [**52**星][8y] [Py] [crossbowerbt/gdb-python-utils](https://github.com/crossbowerbt/gdb-python-utils) A library for GDB (with python support), that adds useful functions to the standard 'gdb' library.
+- [**52**星][8d] [Py] [crond-jaist/cytrone](https://github.com/crond-jaist/cytrone) CyTrONE: Integrated Cybersecurity Training Framework
+- [**52**星][2y] [C] [cn33liz/hsevd-stackoverflowx64](https://github.com/cn33liz/hsevd-stackoverflowx64) HackSys Extreme Vulnerable Driver - Windows 10 x64 StackOverflow Exploit with SMEP Bypass
+- [**52**星][2y] [Go] [cmars/ormesh](https://github.com/cmars/ormesh) onion-routed mesh
+- [**52**星][1y] [Py] [cisco-talos/pylocky_decryptor](https://github.com/cisco-talos/pylocky_decryptor)
+- [**52**星][3y] [Lua] [christophetd/nmap-nse-info](https://github.com/christophetd/nmap-nse-info) nmap-nse-info:浏览、搜索Nmap 的 NSE 脚本
+- [**52**星][10m] [JS] [cat-team-mmc/lysec](https://github.com/cat-team-mmc/lysec) 一个基于docker的安全培训系统
+- [**52**星][8m] [Elixir] [calidog/certstream-server](https://github.com/calidog/certstream-server) Certificate Transparency Log aggregation, parsing, and streaming service written in Elixir
+- [**52**星][5y] [Py] [bwall/bamf](https://github.com/bwall/bamf) Botnet Analysis Modular Framework
+- [**52**星][2y] [JS] [blockadeio/chrome_extension](https://github.com/blockadeio/chrome_extension) Browser extension that uses intelligence to combat malicious websites by blocking them in real-time.
+- [**52**星][6m] [Py] [bkerler/oppo_decrypt](https://github.com/bkerler/oppo_decrypt) 一加手机固件解密脚本
+- [**52**星][1y] [C] [bazad/threadexec](https://github.com/bazad/threadexec) A library to execute code in the context of other processes on iOS 11.
+- [**52**星][9m] [aungthurhahein/red-team-curation-list](https://github.com/aungthurhahein/red-team-curation-list) A list to discover work of red team tooling and methodology for penetration testing and security assessment
+- [**52**星][11m] [PHP] [atmoner/nodecrypto](https://github.com/atmoner/nodecrypto) Ransomware written in NodeJs
+- [**52**星][20d] [Py] [aress31/jwtcat](https://github.com/aress31/jwtcat) JSON Web Token (JWT) cracker.
+- [**52**星][2y] [Py] [apkjet/trustlookwannacrytoolkit](https://github.com/apkjet/trustlookwannacrytoolkit) WannaCryToolkit scanner and removal toolkit
+- [**52**星][3y] [annsec/awesome-cybersecurity](https://github.com/annsec/awesome-cybersecurity) Curated list of awesome cybersecurity companies and solutions.
+- [**52**星][8y] [Py] [9b/pdfxray_public](https://github.com/9b/pdfxray_public) Public version of PDF X-RAY
+- [**52**星][4y] [Py] [5alt/lianwifi](https://github.com/5alt/lianwifi) wifi万能钥匙api
+- [**52**星][2y] [1522402210/blockchain-security-list](https://github.com/1522402210/blockchain-security-list) BlockChain-Security-List
+- [**52**星][2y] [Py] [0xd34db33f/gfyp](https://github.com/0xd34db33f/gfyp) Unification of dnstwist + SQLite + Email reporting. Set it as a cron job that runs every hour, give it a list of domains and email addresses for reporting, then watch it go find stuff.
+- [**51**星][3y] [hack-with-github/awesome-hacking-tools](https://github.com/hack-with-github/awesome-hacking-tools) A collection of various hacking and exploitation tools for hackers and pentesters.
+- [**51**星][2m] [Shell] [ullaakut/awesome-macos-setup](https://github.com/ullaakut/awesome-macos-setup) A repository with tools to automatically make any Mac awesome in a few minutes
+- [**51**星][2y] [Jupyter Notebook] [calebmadrigal/radio-hacking-scripts](https://github.com/calebmadrigal/radio-hacking-scripts) Scripts to aid in the manipulation of electromagnetic radiation (for use with gnu_radio and SDR).
+- [**51**星][9m] [Py] [fireeye/adfspoof](https://github.com/fireeye/adfspoof) forge AD FS security tokens
+- [**51**星][2y] [C] [shadowsocks/libsscrypto](https://github.com/shadowsocks/libsscrypto) Build libsscrypto.dll for shadowsocks-windows.
+- [**51**星][2y] [HTML] [jgamblin/nmapnetworkinventorycontainer](https://github.com/jgamblin/nmapnetworkinventorycontainer) A Docker Container To Continually Scan Your Network And Display Findings Cleanly.
+- [**51**星][2y] [mitmproxy/docker-releases](https://github.com/mitmproxy/docker-releases)
+- [**51**星][26d] [C++] [rek7/ddoor](https://github.com/rek7/ddoor) DDoor - cross platform backdoor using dns txt records
+- [**51**星][14d] [Py] [k8gege/k8portscan](https://github.com/k8gege/k8portscan) 跨平台大型网络端口扫描器(支持批量A段/B段/C段/IP列表(TXT)/端口列表,Banner识别比S扫描器加强版更准)
+- [**51**星][20d] [C] [ixzzving/ssr-vpn](https://github.com/ixzzving/ssr-vpn) Shadowsocks & ShadowsocksR & V2Ray & V2RayNG & VNET/酸酸乳节点及客户端
+- [**51**星][1y] [Py] [zhovner/airport-sniffer](https://github.com/zhovner/airport-sniffer) Very simple Wi-Fi sniffer and dumps parser for built-in macbook AirPort Extreme card. Only native MacOS tools used.
+- [**51**星][8m] [C#] [fsecurelabs/sharpgpo-remoteaccesspolicies](https://github.com/FSecureLABS/SharpGPO-RemoteAccessPolicies) A C# tool for enumerating remote access policies through group policy.
+- [**51**星][3y] [wh1t3p1g/struts2environment](https://github.com/wh1t3p1g/Struts2Environment) Struts2 历史版本的漏洞环境
+- [**51**星][28d] [Java] [guardianproject/tor-android](https://github.com/guardianproject/tor-android) Tor binary and library for Android
+- [**51**星][1y] [Py] [qax-a-team/redis_lua_exploit](https://github.com/QAX-A-Team/redis_lua_exploit)
+- [**51**星][4d] [Py] [lich4/personal_script](https://github.com/lich4/personal_script) 010Editor/BurpSuite/Frida/IDA等多个工具的多个脚本
+ - [010Editor](https://github.com/lich4/personal_script/tree/master/010Editor_Script) 010Editor的多个脚本
+ - [ParamChecker](https://github.com/lich4/personal_script/tree/master/BurpSuite_Script) Burp插件
+ - [Frida](https://github.com/lich4/personal_script/tree/master/Frida_script) Frida多个脚本
+ - [IDA](https://github.com/lich4/personal_script/tree/master/IDA_Script) IDA Scripts
+ - [IDA-read_unicode.py](https://github.com/lich4/personal_script/blob/master/IDA_Script/read_unicode.py) IDA插件,识别程序中的中文字符
+ - [IDA-add_xref_for_macho](https://github.com/lich4/personal_script/blob/master/IDA_Script/add_xref_for_macho.py) 辅助识别Objective-C成员函数的caller和callee
+ - [IDA-add_info_for_androidgdb](https://github.com/lich4/personal_script/blob/master/IDA_Script/add_info_for_androidgdb.py) 使用gdbserver和IDA调试Android时,读取module列表和segment
+ - [IDA-trace_instruction](https://github.com/lich4/personal_script/blob/master/IDA_Script/trace_instruction.py) 追踪指令流
+ - [IDA-detect_ollvm](https://github.com/lich4/personal_script/blob/master/IDA_Script/detect_ollvm.py) 检测OLLVM,在某些情况下修复(Android/iOS)
+ - [IDA-add_block_for_macho](https://github.com/lich4/personal_script/blob/master/IDA_Script/add_block_for_macho.py) 分析macho文件中的block结构
+- [**51**星][5m] [C#] [zodiacon/gflagsx](https://github.com/zodiacon/gflagsx) Enhanced version of the GFlags tool
+- [**51**星][4y] [Py] [znb/malware](https://github.com/znb/malware) Malware related code
+- [**51**星][2m] [C#] [zeropointsecurity/goldenticket](https://github.com/zeropointsecurity/goldenticket)
+- [**51**星][10d] [yassergersy/cazador_unr](https://github.com/yassergersy/cazador_unr) Simple Hacking tools
+- [**51**星][2m] [Py] [vrtadmin/first-plugin-ida](https://github.com/vrtadmin/first-plugin-ida) 函数识别与签名恢复工具
+- [**51**星][1y] [C++] [tomladder/winlib](https://github.com/tomladder/winlib) Windows Manipulation Library (x64, User/Kernelmode)
+- [**51**星][2y] [Go] [threatstack/deputize](https://github.com/threatstack/deputize) Manage an on-call LDAP group based on PagerDuty on-call status
+- [**51**星][14d] [Py] [thez3ro/gogsownz](https://github.com/thez3ro/gogsownz) Gogs CVEs
+- [**51**星][2y] [Py] [tgianko/deemon](https://github.com/tgianko/deemon) Deemon is a tool to detect CSRF in web applications. Deemon has been used for the paper "Deemon: Detecting CSRF with Dynamic Analysis and Property Graphs" by G. Pellegrino, M. Johns, S. Koch, M. Backes, and C. Rossow.
+- [**51**星][1y] [Py] [sysopfb/malware_scripts](https://github.com/sysopfb/malware_scripts) Various scripts for different malware families
+- [**51**星][3y] [C] [sycloversecurity/ctf](https://github.com/sycloversecurity/ctf) Syclover(三叶草安全小组)承办的ctf比赛集合
+- [**51**星][24d] [Java] [stevespringett/threatmodel-sdk](https://github.com/stevespringett/threatmodel-sdk) A Java library for parsing and programmatically using threat models
+- [**51**星][3d] [Rust] [sorz/moproxy](https://github.com/sorz/moproxy) A transparent TCP to SOCKSv5/HTTP proxy on Linux written in Rust.
+- [**51**星][8y] [C] [snare/kernelresolver](https://github.com/snare/kernelresolver) Example Mac OS X kernel extension that resolves symbols from the running kernel image
+- [**51**星][2m] [C#] [smourier/tracespy](https://github.com/smourier/tracespy) TraceSpy is a pure .NET, 100% free and open source, alternative to the very popular SysInternals DebugView tool.
+- [**51**星][2y] [Java] [shengqi158/jackson-databind-rce-poc](https://github.com/shengqi158/jackson-databind-rce-poc)
+- [**51**星][4y] [Py] [sensepost/wifi-rifle](https://github.com/sensepost/wifi-rifle) Creating a wireless rifle de-authentication gun, which utilized a yagi antenna and a Raspberry Pi.
+- [**51**星][3m] [Java] [sensepost/apostille](https://github.com/sensepost/apostille)
+- [**51**星][1m] [JS] [segmentio/metalsmith-markdown](https://github.com/segmentio/metalsmith-markdown) A Metalsmith plugin to convert markdown files.
+- [**51**星][3y] [C] [sciencemanx/ftrace](https://github.com/sciencemanx/ftrace) trace local function calls like strace and ltrace
+- [**51**星][2y] [Py] [romankh/gsm-assessment-toolkit](https://github.com/romankh/gsm-assessment-toolkit) GSM Assessment Toolkit - A security evaluation framework for GSM networks
+- [**51**星][2y] [Py] [rolfrolles/finspyvm](https://github.com/rolfrolles/finspyvm) Static unpacker for FinSpy VM
+- [**51**星][2y] [riscure/rhme-2017](https://github.com/riscure/rhme-2017) Riscure Hack Me embedded hardware CTF 2017-2018.
+- [**51**星][3y] [Py] [red-team-labs/waldo](https://github.com/red-team-labs/waldo)
+- [**51**星][2y] [Shell] [r1b/cve-2017-13089](https://github.com/r1b/cve-2017-13089) PoC for wget v1.19.1
+- [**51**星][5m] [JS] [qtgate/conet](https://github.com/qtgate/conet) Become a trustworthy ally for the Internet Freedom
+- [**51**星][3y] [HTML] [pwnsdx/ios-uri-schemes-abuse-poc](https://github.com/pwnsdx/ios-uri-schemes-abuse-poc) A set of URI schemes bugs that lead Safari to crash/freeze.
+- [**51**星][1y] [C] [pwn20wndstuff/osiris](https://github.com/pwn20wndstuff/osiris) Osiris developer jailbreak for iOS 11.0 - 11.4b3
+- [**51**星][2m] [Ruby] [puppetlabs/puppetlabs-puppetdb](https://github.com/puppetlabs/puppetlabs-puppetdb) A puppet module for installing and managing puppetdb
+- [**51**星][7d] [Perl] [pepelux/sippts](https://github.com/pepelux/sippts) Set of tools to audit SIP based VoIP Systems
+- [**51**星][1y] [Py] [pentestpartners/mykali](https://github.com/pentestpartners/mykali) Linux setup tool for Kali Linux
+- [**51**星][2y] [p292/ddeautocs](https://github.com/p292/ddeautocs) A cobaltstrike script that integrates DDEAuto Attacks
+- [**51**星][7y] [C#] [owasp/webgoat.net](https://github.com/owasp/webgoat.net) OWASP WebGoat.NET
+- [**51**星][5m] [PHP] [owasp/vulnerable-web-application](https://github.com/owasp/vulnerable-web-application) OWASP Vulnerable Web Application Project
+- [**51**星][1y] [Py] [osuseclab/sgxpectre](https://github.com/osuseclab/sgxpectre)
+- [**51**星][4y] [C] [osbock/baldwisdom](https://github.com/osbock/baldwisdom) Kevin's hacking projects code
+- [**51**星][2y] [Py] [orweis/winpcapy](https://github.com/orweis/winpcapy) A Modern Python wrapper for WinPcap
+- [**51**星][8m] [offensive-security/nethunter-utils](https://github.com/offensive-security/nethunter-utils) Kali Linux NetHunter utils package
+- [**51**星][4y] [Py] [nottinghamprisateam/pyersinia](https://github.com/nottinghamprisateam/pyersinia) Herramienta escrita en Python y utilizando la librería Scapy basada en Yersinia para la implementación de ataques de capa de enlace de datos
+- [**51**星][1y] [Java] [netspi/burpextractor](https://github.com/netspi/burpextractor) A Burp extension for generic extraction and reuse of data within HTTP requests and responses.
+- [**51**星][2y] [C] [nccgroup/ncloader](https://github.com/nccgroup/ncloader) A session-0 capable dll injection utility
+- [**51**星][1y] [Go] [mrexodia/haxxmap](https://github.com/mrexodia/haxxmap) Some simple go tools to perform a Man-in-the-middle (MITM) attack on your IMAP server in case you forgot your password.
+- [**51**星][3m] [CSS] [mobsf/capfuzz](https://github.com/mobsf/capfuzz) CapFuzz - capture, fuzz & intercept web traffic.
+- [**51**星][2y] [Py] [metalnas/loubia](https://github.com/metalnas/loubia) Python script to exploit java unserialize on t3 (Weblogic)
+- [**51**星][2y] [C#] [lordgreggreg/skype-log-viewer](https://github.com/lordgreggreg/skype-log-viewer) Download and View Skype History Without Skype
+- [**51**星][4y] [Py] [lokifer/blindelephant](https://github.com/lokifer/blindelephant) Getting BlindElephant into a working state, and updating the plugin files
+- [**51**星][7m] [C++] [lemire/testingrng](https://github.com/lemire/testingrng) Testing common random-number generators (RNG)
+- [**51**星][3y] [Py] [kovige/netscan](https://github.com/kovige/netscan) 配合reGeorg使用的内网扫描工具
+- [**51**星][6y] [C++] [jyang772/xor_crypter](https://github.com/jyang772/xor_crypter) XOR encryption, malware crypter
+- [**51**星][3y] [C] [jianqiangzhao/cve-2016-2434](https://github.com/jianqiangzhao/cve-2016-2434)
+- [**51**星][2y] [HTML] [jgamblin/nmaptable](https://github.com/jgamblin/nmaptable) nmaptable:将 Nmap 扫描结果转变为 D3.js HTML 表格
+- [**51**星][1y] [Py] [jay-johnson/train-ai-with-django-swagger-jwt](https://github.com/jay-johnson/train-ai-with-django-swagger-jwt) Train AI (Keras + Tensorflow) to defend apps with Django REST Framework + Celery + Swagger + JWT - deploys to Kubernetes and OpenShift Container Platform
+- [**51**星][1m] [intelstormteam/papers](https://github.com/intelstormteam/papers) Papers written (and released) by the Team
+- [**51**星][5y] [C++] [ikoz/androidsubstrate_hookingc_examples](https://github.com/ikoz/androidsubstrate_hookingc_examples) AndroidSubstrate_hookingC_examples
+- [**51**星][3y] [Py] [huntcve/exploit](https://github.com/huntcve/exploit)
+- [**51**星][2m] [TSQL] [horsicq/xntsv](https://github.com/horsicq/xntsv) XNTSV program for detailed viewing of system structures for Windows.
+- [**51**星][5m] [hitripod/awesome-blockchain](https://github.com/hitripod/awesome-blockchain) Curated list of blockchain, Awesome Awesomeness
+- [**51**星][2y] [Py] [hiddenillusion/nomorexor](https://github.com/hiddenillusion/nomorexor) Tool to help guess a files 256 byte XOR key by using frequency analysis
+- [**51**星][2y] [harshilpatel007/hackinglabs](https://github.com/harshilpatel007/hackinglabs) A List Of Labs For People (Students) Who Want Learn OR Practice IT Security / Hacking / Penetration Testing In Ethical Way.
+- [**51**星][1y] [hack-with-github/infosec-badges](https://github.com/hack-with-github/infosec-badges) Badges for your GitHub tool presented at InfoSec Conference
+- [**51**星][7m] [Py] [hack-hut/crabstick](https://github.com/hack-hut/crabstick) Automatic remote/local file inclusion vulnerability analysis and exploit tool
+- [**51**星][2y] [JS] [gnijuohz/awesome-developers](https://github.com/gnijuohz/awesome-developers) A list of awesome developers
+- [**51**星][5y] [Py] [fuzzynop/fiveonceinyourlife](https://github.com/fuzzynop/fiveonceinyourlife) Local osx dialog box phishing using osascript. Easier than keylogging on osx. Simply ask for the passwords you want.
+- [**51**星][3y] [JS] [firesuncn/my_ctf_challenges](https://github.com/firesuncn/my_ctf_challenges)
+- [**51**星][7y] [JS] [firegpg/firegpg](https://github.com/firegpg/firegpg) FireGPG is no longer supported. Please see the README for information on WebPG.
+- [**51**星][2y] [Java] [fergarrui/custom-bytecode-analyzer](https://github.com/fergarrui/custom-bytecode-analyzer) Java bytecode analyzer customizable via JSON rules
+- [**51**星][11m] [Py] [elevenpaths/neto](https://github.com/elevenpaths/neto) Neto | A tool to analyse browser extensions
+- [**51**星][5y] [C] [dgoulet/kjackal](https://github.com/dgoulet/kjackal) Linux Rootkit Scanner
+- [**51**星][1y] [JS] [danigargu/urlfuzz](https://github.com/danigargu/urlfuzz) Another web fuzzer written in NodeJS
+- [**51**星][30d] [Py] [d-rickyy-b/pastepwn](https://github.com/d-rickyy-b/pastepwn) Python framework to scrape Pastebin pastes and analyze them
+- [**51**星][1y] [Py] [cytopia/crawlpy](https://github.com/cytopia/crawlpy) Scrapy python crawler/spider with post/get login (handles CSRF), variable level of recursions and optionally save to disk
+- [**51**星][2y] [Py] [cseagle/ida_clemency](https://github.com/cseagle/ida_clemency) IDA cLEMENCy Tools
+ - [clemency_ldr](https://github.com/cseagle/ida_clemency/blob/master/clemency_ldr.py) IDA加载程序模块,为9位,中端,cLEMENCy可执行文件创建基本的内存布局,并处理其加载。
+ - [clemency_proc](https://github.com/cseagle/ida_clemency/blob/master/clemency_proc.py) IDA处理器模块,处理反汇编和汇编任务
+ - [clemency_dump](https://github.com/cseagle/ida_clemency/blob/master/clemency_dump.py) IDA插件,将修改后的数据库内容转储到打包的9位中端字节文件中
+ - [clemency_fix](https://github.com/cseagle/ida_clemency/blob/master/clemency_fix.py) IDA plugin to assist with fixing up poorly disassembled functions that might branch/call into regions that continue to be marked as data blocks.
+- [**51**星][3y] [Visual Basic .NET] [cn33liz/macrometer](https://github.com/cn33liz/macrometer) VBA Reversed TCP Meterpreter Stager
+- [**51**星][11m] [Py] [cisco-talos/dyndataresolver](https://github.com/cisco-talos/dyndataresolver) 动态数据解析. 在IDA中控制DyRIO执行程序的指定部分, 记录执行过程后传回数据到IDA
+ - [DDR](https://github.com/cisco-talos/dyndataresolver/blob/master/VS_project/ddr/ddr.sln) 基于DyRIO的Client
+ - [IDA插件](https://github.com/cisco-talos/dyndataresolver/tree/master/IDAplugin)
+- [**51**星][2y] [Py] [cisco-talos/dotnet_windbg](https://github.com/cisco-talos/dotnet_windbg)
+- [**51**星][7y] [Py] [chrisjohnriley/scythe](https://github.com/chrisjohnriley/scythe) scythe: account enumerator
+- [**51**星][4m] [PS] [chrisad/wiki-dictionary-creator](https://github.com/chrisad/wiki-dictionary-creator) Creates dictionaries based on Wikipedia titles
+- [**51**星][1y] [Py] [carnal0wnage/pentesty_scripts](https://github.com/carnal0wnage/pentesty_scripts) scripts for pentesting
+- [**51**星][7d] [C] [buffer/libemu](https://github.com/buffer/libemu)
+- [**51**星][1y] [PS] [bromiley/olaf](https://github.com/bromiley/olaf) Office365 Log Analysis Framework
+- [**51**星][1m] [Makefile] [blacktop/docker-ghidra](https://github.com/blacktop/docker-ghidra) Ghidra Client/Server Docker Image
+- [**51**星][3m] [Py] [bkerler/mr](https://github.com/bkerler/mr) Mobile Revelator
+- [**51**星][1y] [HTML] [beep3r/poc-exp](https://github.com/beep3r/poc-exp)
+- [**51**星][5m] [Py] [bambish/scanqli](https://github.com/bambish/scanqli) SQLi scanner to detect SQL vulns
+- [**51**星][2m] [Py] [azure-samples/python-docs-hello-world](https://github.com/azure-samples/python-docs-hello-world) A simple python application for docs
+- [**51**星][2y] [Py] [awnumar/blind-sql-bitshifting](https://github.com/awnumar/blind-sql-bitshifting) A blind SQL injection module that uses bitshfting to calculate characters.
+- [**51**星][2d] [Py] [angr/tracer](https://github.com/angr/tracer) Utilities for generating dynamic traces
+- [**51**星][11m] [C] [anestisb/radamsa-android](https://github.com/anestisb/radamsa-android) An Android port of radamsa fuzzer
+- [**51**星][1y] [HTML] [an0nud4y/blackeye](https://github.com/an0nud4y/blackeye) The ultimate phishing tool with 38 websites available!
+- [**51**星][2y] [Shell] [alephsecurity/initroot](https://github.com/alephsecurity/initroot) Motorola Untethered Jailbreak: Exploiting CVE-2016-10277 for Secure Boot and Device Locking bypass
+- [**51**星][8m] [aldelaro5/ghidra-gekko-broadway-lang](https://github.com/aldelaro5/ghidra-gekko-broadway-lang) Ghidra language definition for the Gekko and Broadway CPU variant used in the Nintendo GameCube and Nintendo Wii respectively
+- [**51**星][28d] [Py] [ahmia/ahmia-crawler](https://github.com/ahmia/ahmia-crawler) Collection of crawlers used by the ahmia search engine
+- [**51**星][6d] [Py] [afagarap/gru-svm](https://github.com/afagarap/gru-svm) [ICMLC 2018] A Neural Network Architecture Combining Gated Recurrent Unit (GRU) and Support Vector Machine (SVM) for Intrusion Detection
+- [**51**星][6y] [Py] [aeondave/tilt](https://github.com/aeondave/tilt) Terminal Ip Lookup Tool
+- [**51**星][1y] [C] [adrianyy/keinject](https://github.com/adrianyy/keinject) Kernel LdrLoadDll injector
+- [**51**星][11m] [c] [NtQuery/scyllahide](https://bitbucket.org/ntquery/scyllahide)
+- [**50**星][4y] [danielmiessler/securitytools](https://github.com/danielmiessler/securitytools) A repo for collecting and organizing security tools of various types. As new ones come out, they get added to the list.
+- [**50**星][23d] [Py] [frida/frida-tools](https://github.com/frida/frida-tools) Frida CLI tools
+- [**50**星][4y] [Py] [wapiflapi/wsym](https://github.com/wapiflapi/wsym) Adds symbols to a ELF file.
+- [**50**星][5y] [Py] [xiphosresearch/steelcon-python-injection](https://github.com/xiphosresearch/steelcon-python-injection) Python Process Injection PoC Code from my SteelCon talk in 2014
+- [**50**星][16d] [Py] [circl/douglas-quaid](https://github.com/circl/douglas-quaid) Open source software for image correlation, distance and analysis
+- [**50**星][23d] [h2hconference/2019](https://github.com/h2hconference/2019) H2HC 2019 Slides/Materials/Presentations
+- [**50**星][2m] [Shell] [mwz1tn/free-v2ray](https://github.com/mwz1tn/free-v2ray) 免费v2ray分享,V2ray安装使用教程,墙裂的购买使用教程
+- [**50**星][6m] [JS] [smallmi/omms](https://github.com/smallmi/omms) OMMS运维监控系统,功能介绍: 资产管理 应用管理 任务执行 权限管理等
+- [**50**星][6d] [TS] [tjson/tjson.js](https://github.com/tjson/tjson.js) JavaScript-compatible implementation of Tagged JSON (TJSON), written in TypeScript.
+- [**50**星][9m] [C] [lab313ru/smd_ida_tools](https://github.com/lab313ru/smd_ida_tools) Sega Genesis/MegaDrive ROM文件加载器,Z80音频驱动加载器,IDA Pro调试器
+- [**50**星][1y] [JS] [lukechilds/onionite](https://github.com/lukechilds/onionite) Explore the Tor network
+- [**50**星][10m] [Shell] [cyb0r9/network-attacker](https://github.com/Cyb0r9/network-attacker) Programmed For Penetration Testing Beginners . This Program Based on Mdk3 . "WiFi Stress Testing Beacon Flooding & Deauthentication Attack "
+- [**50**星][1y] [Py] [synacktiv-contrib/kernelcache-laundering](https://github.com/Synacktiv-contrib/kernelcache-laundering) load iOS12 kernelcaches and PAC code in IDA
+- [**50**星][2y] [C#] [zodiacon/windbgx](https://github.com/zodiacon/windbgx) An attempt to create a friendly version of WinDbg
+- [**50**星][3y] [Py] [zengqiu/study](https://github.com/zengqiu/study)
+- [**50**星][2y] [C++] [zcgonvh/cve-2017-0213](https://github.com/zcgonvh/cve-2017-0213) CVE-2017-0213 for command line
+- [**50**星][2y] [xssninja/alexa-hacker-mode](https://github.com/xssninja/alexa-hacker-mode) Node JS code for a set of Alexa voice skills designed to assist hackers and developers with common tasks
+- [**50**星][3y] [C] [williamshowalter/hdroot-bootkit-analysis](https://github.com/williamshowalter/hdroot-bootkit-analysis) Supporting Files on my analysis of the malware designated hdroot.
+- [**50**星][5m] [HTML] [whatwg/mimesniff](https://github.com/whatwg/mimesniff) MIME Sniffing Standard
+- [**50**星][1y] [Go] [weppos/dnscaa](https://github.com/weppos/dnscaa)
+- [**50**星][1y] [Py] [virtuesecurity/aws-extender-cli](https://github.com/virtuesecurity/aws-extender-cli) AWS Extender CLI is a command-line script to test S3 buckets as well as Google Storage buckets and Azure Storage containers for common misconfiguration issues using the boto/boto3 SDK library.
+- [**50**星][3y] [C] [vikasnkumar/wisecracker](https://github.com/vikasnkumar/wisecracker) Wisecracker is a high performance distributed cryptanalysis framework.
+- [**50**星][2y] [C] [vallejocc/poc-inject-data-wm_copydata](https://github.com/vallejocc/poc-inject-data-wm_copydata) A tiny PoC to inject and execute code into explorer.exe with WM_SETTEXT+WM_COPYDATA+SetThreadContext
+- [**50**星][9d] [PHP] [tsug0d/myawesomewebchallenge](https://github.com/tsug0d/myawesomewebchallenge) Collection of my capture-the-flag web challenge in any levels
+- [**50**星][3y] [Ruby] [tresacton/dspectrum](https://github.com/tresacton/dspectrum) Automated RF/SDR Signal Analysis [Reverse Engineering]
+- [**50**星][2y] [Ruby] [thezdi/derbycon2017](https://github.com/thezdi/derbycon2017) DerbyCon 2017 Presentation VMware Escapology: How to Houdini the Hypervisor
+- [**50**星][6y] [PHP] [taogogo/taocms](https://github.com/taogogo/taocms) taocms is a very very small CMS( Content Management System) ,base on php,support mysql/sqlite
+- [**50**星][8m] [ObjC] [ssyzh/weworktweak](https://github.com/ssyzh/weworktweak) 逆向破解企业微信定位,在家就能打卡了!
+- [**50**星][4y] [C++] [sri-csl/stegotorus](https://github.com/sri-csl/stegotorus) A Camouflage Proxy for the Tor Anonymity System
+- [**50**星][9y] [Perl] [spiderlabs/thicknet](https://github.com/spiderlabs/thicknet) TCP session interception and injection framework
+- [**50**星][10m] [sourcingdenis/free-online-competitive-intelligence](https://github.com/sourcingdenis/free-online-competitive-intelligence) #OSINT
+- [**50**星][1y] [JS] [soluto/webdriverio-zap-proxy](https://github.com/soluto/webdriverio-zap-proxy) Demo - how to easily build security testing for Web App, using Zap and Glue
+- [**50**星][3y] [ObjC] [skelsec/biterrant](https://github.com/skelsec/biterrant) BitErrant
+- [**50**星][2y] [Py] [sfwishes/ollvm_de_fla](https://github.com/sfwishes/ollvm_de_fla) deobfuscation ollvm's fla
+- [**50**星][9m] [Py] [scarvell/grandstream_exploits](https://github.com/scarvell/grandstream_exploits)
+- [**50**星][11d] [Go] [sandertv/gophertunnel](https://github.com/sandertv/gophertunnel) A Minecraft (Bedrock Edition) library written in Go used for creating proxies, servers, clients and tools
+- [**50**星][2y] [Py] [samuelcolvin/dnserver](https://github.com/samuelcolvin/dnserver) Simple development DNS server written in python
+- [**50**星][3y] [C] [ryanmallon/thelostvikingstools](https://github.com/ryanmallon/thelostvikingstools) Reverse Engineered Tools/Library for the DOS game The Lost Vikings
+- [**50**星][12m] [C] [realoriginal/reflective-rewrite](https://github.com/realoriginal/reflective-rewrite) Attempt to rewrite StephenFewers Reflective DLL Injection to make it a little more stealthy. Some code taken from Meterpreter & sRDI. Currently a work in progress.
+- [**50**星][4d] [Py] [pylyf/networm](https://github.com/pylyf/networm) Python network worm that spreads on the local network and gives the attacker control of these machines.
+- [**50**星][1y] [C++] [psychotropos/xhunter1_privesc](https://github.com/psychotropos/xhunter1_privesc) (Ab)using the XIGNCODE3 driver to open a handle to any process.
+- [**50**星][5m] [C] [praneethkarnena/ddos-scripts](https://github.com/praneethkarnena/ddos-scripts) This repo consists of various DDoS scripts, collected from internet. Layer-4 and Layer-7 levels can be targeted using these scripts.
+- [**50**星][1y] [JS] [platdrag/unblockablechains](https://github.com/platdrag/unblockablechains) Unblockable Chains - A POC on using blockchain as infrastructure for malware operations
+- [**50**星][3m] [Shell] [piffall/pxesetupwizard](https://github.com/piffall/pxesetupwizard) PXE Setup Wizard. Netboot Debian, Ubuntu, System Rescue CD, FreeDOS and more.
+- [**50**星][3d] [Java] [p1sec/sigfw](https://github.com/p1sec/sigfw) Open Source Signaling Firewall for SS7, Diameter filtering, antispoof and antisniff
+- [**50**星][2y] [newlog/r2_malware_unpacking_training](https://github.com/newlog/r2_malware_unpacking_training) 使用 r2 脱壳恶意代码教程
+- [**50**星][2y] [Py] [neargle/pil-rce-by-ghostbutt](https://github.com/neargle/pil-rce-by-ghostbutt) Exploiting Python PIL Module Command Execution Vulnerability
+- [**50**星][9d] [Py] [nccgroup/asadbg](https://github.com/nccgroup/asadbg) asadbg is a framework of tools to aid in automating live debugging of Cisco ASA devices
+- [**50**星][2y] [Py] [navytitanium/dnsmasterchef](https://github.com/navytitanium/dnsmasterchef) Selective DNS proxy forwarding based on DNS threat blocking providers intelligence.
+- [**50**星][3y] [Py] [n0pe-sled/apache2-mod-rewrite-setup](https://github.com/n0pe-sled/apache2-mod-rewrite-setup) Quickly Implement Mod-Rewrite in your infastructure
+- [**50**星][1m] [C++] [ms-iot/imx-iotcore](https://github.com/ms-iot/imx-iotcore) Windows 10 IoT Core BSP for NXP i.MX Processors
+- [**50**星][3y] [Py] [matthewdunwoody/block-parser](https://github.com/matthewdunwoody/block-parser) Parser for Windows PowerShell script block logs
+- [**50**星][4m] [JS] [mattcg/socks5-client](https://github.com/mattcg/socks5-client) SOCKS v5 client socket implementation in JavaScript for Node.JS.
+- [**50**星][2y] [C] [leonnewton/selfmodify](https://github.com/leonnewton/selfmodify) Dalvik字节码自篡改原理及实现
+- [**50**星][1y] [JS] [leocardoso94/push-notification-demo](https://github.com/leocardoso94/push-notification-demo) Demonstrate how to receive notifications using Firebase
+- [**50**星][8m] [klaver/sysctl](https://github.com/klaver/sysctl) Linux/BSD kernel tuning and network security hardening optimizations, improving the performance of server systems via optimized sysctl tweaks
+- [**50**星][5y] [PS] [kfosaaen/get-lapspasswords](https://github.com/kfosaaen/get-lapspasswords) Powershell function to pull the local admin passwords from LDAP, stored there by LAPS.
+- [**50**星][2y] [C++] [k0keoyo/dark_composition_case_study_integer_overflow](https://github.com/k0keoyo/dark_composition_case_study_integer_overflow)
+- [**50**星][4y] [Py] [jpyorre/intelligenthoneynet](https://github.com/jpyorre/intelligenthoneynet) The Intelligent Honey Net Project attempts to create actionable information from honeypots
+- [**50**星][2y] [JS] [jpenalbae/rarop](https://github.com/jpenalbae/rarop) Graphical ROP chain builder using radare2 and r2pipe
+- [**50**星][2y] [JS] [johnhhorton/node-nmap](https://github.com/johnhhorton/node-nmap) NPM package for interfacing with local NMAP installation
+- [**50**星][3y] [Shell] [jgamblin/curluseragent](https://github.com/jgamblin/curluseragent) Curl Script To Change User Agent
+- [**50**星][2y] [Shell] [jaybrown/dnscrypt-menu](https://github.com/jaybrown/dnscrypt-menu) Manage DNSCrypt from the macOS menu bar (BitBar plugin)
+- [**50**星][2y] [Go] [jakewins/findbtc](https://github.com/jakewins/findbtc) findbtc: 在损坏、格式化或被覆盖写入的磁盘上查找比特币钱包
+- [**50**星][2m] [Py] [importctf/instagram-hacker](https://github.com/importctf/instagram-hacker) This is an advanced script for Instagram bruteforce attacks. WARNING THIS IS A REAL TOOL!
+- [**50**星][2y] [JS] [idan5x/switcheroo](https://github.com/idan5x/switcheroo) Exploiting CVE-2016-4657 to JailBreak the Nintendo Switch
+- [**50**星][7m] [C] [hfiref0x/mpenum](https://github.com/hfiref0x/mpenum) Enumerate Windows Defender threat families and dump their names according category
+- [**50**星][5m] [Smali] [hellohudi/androidreversenotes](https://github.com/hellohudi/androidreversenotes) Android逆向笔记---从入门到入土
+- [**50**星][2y] [Py] [h2hconference/2017](https://github.com/h2hconference/2017) H2HC 2017 Slides/Materials/Presentations
+- [**50**星][2y] [Py] [h0nus/backtome](https://github.com/h0nus/backtome) Little tool made in python to create payloads for Linux, Windows and OSX with unique handler
+- [**50**星][8y] [Py] [gyim/stupidgit](https://github.com/gyim/stupidgit) A cross-platform git GUI with strong submodule support
+- [**50**星][3m] [C#] [guillac/wsmanager](https://github.com/guillac/wsmanager) Webshell Manager
+- [**50**星][2y] [PS] [gobiasinfosec/wireless_query](https://github.com/gobiasinfosec/wireless_query) Query Active Directory for Workstations and then pull their Wireless Network Passwords
+- [**50**星][1y] [JS] [fortiguard-lion/frida-scripts](https://github.com/fortiguard-lion/frida-scripts)
+- [**50**星][4y] [C++] [fishstiqz/poolinfo](https://github.com/fishstiqz/poolinfo) kernel pool windbg extension
+- [**50**星][2y] [Visual Basic .NET] [fireeye/remote_lookup](https://github.com/fireeye/remote_lookup) Resolves DLL API entrypoints for a process w/ remote query capabilities.
+- [**50**星][3m] [Haskell] [essandess/adblock2privoxy](https://github.com/essandess/adblock2privoxy) Convert adblock config files to privoxy format
+- [**50**星][2y] [JS] [ericr/sol-function-profiler](https://github.com/ericr/sol-function-profiler) Solidity Contract Function Profiler
+- [**50**星][3y] [PHP] [edent/tweeview](https://github.com/edent/tweeview) A Tree View For Tweets
+- [**50**星][3y] [C++] [drizzlerisk/ntpdoser](https://github.com/drizzlerisk/ntpdoser) NTP Doser is a NTP Amplification DoS/DDoS attack tool for penttesting
+- [**50**星][1y] [PS] [dgg-it/match-adhashes](https://github.com/dgg-it/match-adhashes) Builds a hashmap of AD NTLM hashes/usernames and iterates through a second list of hashes checking for the existence of each entry in the AD NTLM hashmap
+- [**50**星][2y] [PHP] [daudmalik06/reconcat](https://github.com/daudmalik06/reconcat) A small Php application to fetch archive url snapshots from archive.org. using it you can fetch complete list of snapshot urls of any year or complete list of all years possible. Made Specially for penetration testing purpose.
+- [**50**星][2y] [Py] [citp/thewebneverforgets](https://github.com/citp/thewebneverforgets) Public code release for The Web Never Forgets paper
+- [**50**星][3y] [Py] [cisco-talos/smi_check](https://github.com/cisco-talos/smi_check) Smart Install Client Scanner
+- [**50**星][2y] [Java] [channingbj/meerkat](https://github.com/channingbj/meerkat) meerkat 是用于服务监控以及服务降级基础组件,主要为了解决调用外部接口的时候进行成功率,响应时间,QPS指标的监控,同时在成功率下降到预设的阈值以下的时候自动切断外部接口的调用,外部接口成功率恢复后自动恢复请求
+- [**50**星][25d] [HTML] [brampat/security](https://github.com/brampat/security) Collection of links to Security stuff
+- [**50**星][2y] [bluscreenofjeff/metasploit-resource-scripts](https://github.com/bluscreenofjeff/metasploit-resource-scripts)
+- [**50**星][4y] [C++] [bishopfox/untwister](https://github.com/bishopfox/untwister) Seed recovery tool for PRNGs
+- [**50**星][3y] [Py] [ayoul3/cicspwn](https://github.com/ayoul3/cicspwn) CICSpwn is a tool to pentest a CICS Transaction servers on z/OS.
+- [**50**星][3y] [Py] [aramosf/recoversqlite](https://github.com/aramosf/recoversqlite) recover deleted information from sqlite files.
+- [**50**星][4m] [C++] [antscode/macwifi](https://github.com/antscode/macwifi) A wifi system menu extension for 68k Macs.
+- [**50**星][1y] [Py] [anssi-fr/route_leaks](https://github.com/anssi-fr/route_leaks) BGP Route Leaks Detection
+- [**50**星][7y] [C] [andy928/xpenology](https://github.com/andy928/xpenology) XPEnology Project
+- [**50**星][1y] [Py] [alexknvl/fuzzball](https://github.com/alexknvl/fuzzball) Scala fuzzer
+- [**50**星][2m] [C] [alainesp/hashsuitedroid](https://github.com/alainesp/hashsuitedroid) Hash Suite for Android
+- [**50**星][2y] [Py] [adrianherrera/virustotal](https://github.com/adrianherrera/virustotal) A simple command-line script to interact with the virustotal-api
+- [**50**星][11m] [C] [acoinfo/kidvpn](https://github.com/acoinfo/kidvpn) The world's smallest VPN server and client.
+- [**50**星][7m] [C#] [9ee1/capstone.net](https://github.com/9ee1/capstone.net) .NET Core and .NET Framework binding for the Capstone Disassembly Framework
+- [**50**星][2y] [0xhjk/caidao](https://github.com/0xhjk/caidao) 中国菜刀及其衍生版本的Webshell管理工具收集
+- [**50**星][7y] [Py] [0xd012/wifuzzit](https://github.com/0xd012/wifuzzit) a 802.11 wireless fuzzer
+- [**49**星][2y] [C] [xueeinstein/darknet-vis](https://github.com/xueeinstein/darknet-vis) Visualize YOLO feature map in prediction for easily checking your model performance
+- [**49**星][3y] [Assembly] [t00sh/assembly](https://github.com/t00sh/assembly) Collection of Linux shellcodes
+- [**49**星][7m] [Py] [secgroundzero/tetanus](https://github.com/secgroundzero/tetanus) Helper script for mangling CS payloads
+- [**49**星][4m] [Makefile] [shadowsocks/openwrt-feeds](https://github.com/shadowsocks/openwrt-feeds) OpenWrt/LEDE feeds
+- [**49**星][2y] [HTML] [qinyuhang/network-knowledge](https://github.com/qinyuhang/network-knowledge) 前端必备网络基础知识
+- [**49**星][6m] [C++] [0x00-0x00/cve-2019-0841-bypass](https://github.com/0x00-0x00/cve-2019-0841-bypass) A fully automatic CVE-2019-0841 bypass targeting all versions of Edge in Windows 10.
+- [**49**星][4m] [Py] [skelsec/responder3](https://github.com/skelsec/responder3) Responder for Python3
+- [**49**星][1m] [Dockerfile] [winterssy/ssr-docker](https://github.com/winterssy/ssr-docker) 使用Docker部署ShadowsocksR服务端
+- [**49**星][2y] [Py] [fpfeng/g2w.online](https://github.com/fpfeng/g2w.online) 域名已被DNS污染,水表已拆
+- [**49**星][2y] [C] [cnlohr/wifirxpower](https://github.com/cnlohr/wifirxpower) Linux-based WiFi RX Power Grapher
+- [**49**星][3m] [Py] [makuga01/dnsfookup](https://github.com/makuga01/dnsfookup) DNS rebinding toolkit
+- [**49**星][1m] [Java] [portswigger/stepper](https://github.com/portswigger/stepper) A natural evolution of Burp Suite's Repeater tool
+- [**49**星][29d] [PS] [s3cur3th1ssh1t/creds](https://github.com/S3cur3Th1sSh1t/Creds) Some usefull Scripts and Executables for Pentest & Forensics
+- [**49**星][2y] [Ruby] [mrbrutti/cartero](https://github.com/mrbrutti/Cartero) Mailing Phishing Framework - This Branch is UNSTABLE :: Official STABLE master branch at
+- [**49**星][1y] [Perl] [bigsen/crack-file](https://github.com/bigsen/Crack-file) Theos File
+- [**49**星][1y] [Go] [zredshift/mimemagic](https://github.com/zredshift/mimemagic) Powerful and versatile MIME sniffing package using pre-compiled glob patterns, magic number signatures, XML document namespaces, and tree magic for mounted volumes, generated from the XDG shared-mime-info database.
+- [**49**星][4y] [PS] [xme/powershell_scripts](https://github.com/xme/powershell_scripts) Miscellaneous PowerShell scripts
+- [**49**星][23d] [Shell] [xhorak/firefox-devedition-flatpak](https://github.com/xhorak/firefox-devedition-flatpak) Flatpak manifest and patches to build Firefox
+- [**49**星][11d] [JS] [whichbrowser/parser-javascript](https://github.com/whichbrowser/parser-javascript) Browser sniffing gone too far — A useragent parser library for JavaScript
+- [**49**星][1y] [Py] [undeadsec/herakeylogger](https://github.com/undeadsec/herakeylogger) Chrome Keylogger Extension | Post Exploitation Tool
+- [**49**星][4y] [C++] [uitra/injectora](https://github.com/uitra/injectora) x86/x64 manual mapping injector using the JUCE library
+- [**49**星][26d] [Py] [trailofbits/ctf-challenges](https://github.com/trailofbits/ctf-challenges) CTF Challenges
+- [**49**星][2m] [Py] [tna0y/python-random-module-cracker](https://github.com/tna0y/python-random-module-cracker) Predict python's random module generated values.
+- [**49**星][10m] [timip/osee](https://github.com/timip/osee) OSEE Preparation
+- [**49**星][2y] [Py] [thelsa/awbruter](https://github.com/thelsa/awbruter) 千倍速一句话木马密码爆破工具
+- [**49**星][2y] [java] [toufikairane/andromalware](https://github.com/tfairane/andromalware) Android Malware for educational purpose
+- [**49**星][5y] [Perl] [tanjiti/waftest](https://github.com/tanjiti/waftest) WAF测试工具
+- [**49**星][2y] [Py] [steinsgatep001/binary](https://github.com/steinsgatep001/binary) Sleep_Pwn_f1sh
+- [**49**星][5m] [Jupyter Notebook] [sroberts/jager](https://github.com/sroberts/jager) Hunting IOCs all day every day...
+- [**49**星][2y] [JS] [sola-da/redos-vulnerabilities](https://github.com/sola-da/redos-vulnerabilities) A list of ReDoS vulnerabilities in npm modules found by the Software Lab at TU Darmstadt. For each vulnerability, there is a proof-of-concept exploit, showing how the slowdown may occur. The resources in this repository are provided for research purpose only. Please read below for more details.
+- [**49**星][27d] [JS] [silverwind/default-gateway](https://github.com/silverwind/default-gateway) Get the default network gateway, cross-platform.
+- [**49**星][4y] [Py] [silentsignal/duncan](https://github.com/silentsignal/duncan) Duncan - Blind SQL injector skeleton
+- [**49**星][1y] [Swift] [sherlouk/swiftprovisioningprofile](https://github.com/sherlouk/swiftprovisioningprofile) Parse iOS mobile provisioning files into Swift models
+- [**49**星][2y] [JS] [secureskytechnology/badlibrary](https://github.com/secureskytechnology/badlibrary) vulnerable web application for training
+- [**49**星][3y] [Py] [secrary/ellascanner](https://github.com/secrary/ellascanner) Passive web scanner [This project is not maintained anymore]
+- [**49**星][8m] [Shell] [screetsec/imr0t](https://github.com/screetsec/imr0t) imR0T: Send a quick message with simple text encryption to your whatsapp contact and protect your text by encrypting and decrypting, basically in ROT13 with new multi encryption based algorithm on ASCII and Symbols Substitution
+- [**49**星][7m] [Shell] [scipag/nac_bypass](https://github.com/scipag/nac_bypass) Script collection to bypass Network Access Control (NAC, 802.1x)
+- [**49**星][9y] [C] [s7ephen/sandkit](https://github.com/s7ephen/sandkit) A Toolkit to assist with the investigation of Sandboxing software
+- [**49**星][30d] [Java] [rub-nds/tls-scanner](https://github.com/rub-nds/tls-scanner) The TLS-Scanner Module from TLS-Attacker
+- [**49**星][3y] [C++] [rolisoft/host-scanner](https://github.com/rolisoft/host-scanner) Active/passive network scanner and autonomous vulnerability assessment application.
+- [**49**星][5y] [Java] [retme7/broadanywhere_poc_by_retme_bug_17356824](https://github.com/retme7/broadanywhere_poc_by_retme_bug_17356824) a poc of Android bug 17356824
+- [**49**星][4y] [C] [relys/3ds_multi_decryptor](https://github.com/relys/3ds_multi_decryptor)
+- [**49**星][4y] [Java] [rapid7/metasploit-javapayload](https://github.com/rapid7/metasploit-javapayload) THIS REPO IS OBSOLETE. USE
+- [**49**星][2d] [C] [rahra/onioncat](https://github.com/rahra/onioncat) Official repository of OnionCat, the VPN adapter for Tor and I2P.
+- [**49**星][10m] [proofofcalc/cve-2019-6453-poc](https://github.com/proofofcalc/cve-2019-6453-poc) Proof of calc for CVE-2019-6453
+- [**49**星][2y] [Py] [prncc/steam-scraper](https://github.com/prncc/steam-scraper) A pair of spiders for scraping product data and reviews from Steam.
+- [**49**星][4m] [C] [pinkp4nther/sutekh](https://github.com/pinkp4nther/sutekh) An example rootkit that gives a userland process root permissions
+- [**49**星][2y] [C++] [osrdrivers/kmexts](https://github.com/osrdrivers/kmexts) Simple driver to register all available process, thread, image, Registry, and Object callbacks
+- [**49**星][1y] [opensourcepentest/tools](https://github.com/opensourcepentest/tools) Tools used for Penetration testing / Red Teaming
+- [**49**星][1y] [C] [niklasb/elgoog](https://github.com/niklasb/elgoog) elgoog/searchme challenge from 34C3 CTF / WCTF 2018: sources & exploit
+- [**49**星][3y] [Java] [necst/heldroid](https://github.com/necst/heldroid) Dissect Android Apps Looking for Ransomware Functionalities
+- [**49**星][6y] [CSS] [mubix/whitechapel](https://github.com/mubix/whitechapel) password cracking front end
+- [**49**星][8m] [Shell] [mthbernardes/lfi-enum](https://github.com/mthbernardes/lfi-enum) Scripts to execute enumeration via LFI
+- [**49**星][3y] [mrvaughan/defcon2016gsmdata](https://github.com/mrvaughan/defcon2016gsmdata) Just a place to dump the cdma data I collected while at Defcon 2016
+- [**49**星][2y] [Py] [mrschyte/socksmon](https://github.com/mrschyte/socksmon) socksmon:使用 BURP 或 ZAP 的 TCP 拦截代理
+- [**49**星][1y] [Perl] [mrash/fwsnort](https://github.com/mrash/fwsnort) Application Layer IDS/IPS with iptables
+- [**49**星][1y] [PS] [mmotti/mmotti-host-file](https://github.com/mmotti/mmotti-host-file) Heavily optimised, wildcard enabled host file for use with Samsung Knox Firewall.
+- [**49**星][5y] [Py] [michael-yip/threattracker](https://github.com/michael-yip/threattracker) 监控由一组自定义谷歌搜索引擎索引的IoC,并生成告警
+- [**49**星][3m] [Ruby] [mcpa-stlouis/hack-the-arch](https://github.com/mcpa-stlouis/hack-the-arch) Welcome to HackTheArch! A free open source scoring server for cyber Capture the Flag competitions!
+- [**49**星][3y] [maldevel/rootkits-list-download](https://github.com/maldevel/rootkits-list-download) A curated list of rootkits found on Github and other sites.
+- [**49**星][3y] [Ruby] [luizluca/bridge](https://github.com/luizluca/bridge) brigde is a dynamic port forwarder over HTTP (with HTTP PROXY support)
+- [**49**星][27d] [Java] [llvm-but-worse/maple-ir](https://github.com/llvm-but-worse/maple-ir) Industrial IR-based static analysis framework for Java bytecode
+- [**49**星][2y] [Py] [juga0/dhcpcanon](https://github.com/juga0/dhcpcanon) DHCP client disclosing less identifying information.
+- [**49**星][2m] [jcesarstef/ghhdb-github-hacking-database](https://github.com/jcesarstef/ghhdb-github-hacking-database) Github Hacking Database - My personal collection of Github Dorks to search for Confidential Information (Yes, it's a Github version of Google Dorks)
+- [**49**星][6y] [Py] [isecpartners/rtspfuzzer](https://github.com/isecpartners/rtspfuzzer) RTSP network protocol fuzzer
+- [**49**星][10m] [Py] [hrkfdn/deckard](https://github.com/hrkfdn/deckard) Deckard performs static and dynamic binary analysis on Android APKs to extract Xposed hooks
+- [**49**星][2y] [JS] [freddyb/html2dom](https://github.com/freddyb/html2dom) generates JavaScript source code to create Elements from a given html string
+- [**49**星][6y] [C++] [frankstain/pe-loader](https://github.com/frankstain/pe-loader) library, which help to describe or load and execute PE files.
+- [**49**星][2m] [PHP] [fastly/wordpress-plugin](https://github.com/fastly/wordpress-plugin) The Official Fastly WordPress Plugin
+- [**49**星][3y] [Java] [fabiomsr/okhttp-peer-certificate-extractor](https://github.com/fabiomsr/okhttp-peer-certificate-extractor) This tool extracts peer certificates from given certificates.
+- [**49**星][3y] [C++] [enigma0x3/messagebox](https://github.com/enigma0x3/messagebox) PoC dlls for Task Scheduler COM Hijacking
+- [**49**星][3y] [PS] [enclaveconsulting/crypto-pki](https://github.com/enclaveconsulting/crypto-pki) Scripts related to Windows cryptography and PKI.
+- [**49**星][11m] [ember-cli/rfcs](https://github.com/ember-cli/rfcs) Archive of RFCs for changes to ember-cli (for current RFC repo see
+- [**49**星][3y] [CSS] [dxa4481/whatsinmyredis](https://github.com/dxa4481/whatsinmyredis) A CSRF demonstration of stealing local Redis data, and encrypting all Redis instances on a local network
+- [**49**星][2y] [PS] [dstaulcu/ta-sigma-searches](https://github.com/dstaulcu/ta-sigma-searches) A Splunk app with saved reports derived from Sigma rules
+- [**49**星][3y] [Py] [dfirfpi/dpapilab](https://github.com/dfirfpi/dpapilab) Windows DPAPI laboratory
+- [**49**星][7m] [Ruby] [dev-sec/chef-nginx-hardening](https://github.com/dev-sec/chef-nginx-hardening) This chef cookbook provides secure nginx configurations.
+- [**49**星][6y] [Py] [debasishm89/iofuzz](https://github.com/debasishm89/iofuzz) A mutation based user mode (ring3) dumb in-memory Windows Kernel (IOCTL) Fuzzer/Logger. This script attach it self to any given process and hooks DeviceIoControl!Kernel32 API and try to log or fuzz all I/O Control code I/O Buffer pointer, I/O buffer length that process sends to any Kernel driver.
+- [**49**星][14d] [C] [danielkrupinski/vac](https://github.com/danielkrupinski/vac) Source code of Valve Anti-Cheat obtained from disassembly of compiled modules
+- [**49**星][2y] [C] [coolervoid/firefox_tunnel](https://github.com/coolervoid/firefox_tunnel) The way to use firefox to make a tunnel to remote communication, bypass any firewall
+- [**49**星][5d] [CSS] [command-tab/awesome-n64-development](https://github.com/command-tab/awesome-n64-development) A curated list of Nintendo 64 development resources including toolchains, documentation, emulators, and more
+- [**49**星][3d] [Batchfile] [chef-koch/chromium-hardening](https://github.com/chef-koch/chromium-hardening) Hardens Chrome & Chromium based Browsers
+- [**49**星][2d] [Go] [c-sto/gosecretsdump](https://github.com/c-sto/gosecretsdump)
+- [**49**星][25d] [Py] [bolunwang/backdoor](https://github.com/bolunwang/backdoor) Code implementation of the paper "Neural Cleanse: Identifying and Mitigating Backdoor Attacks in Neural Networks", at IEEE Security and Privacy 2019.
+- [**49**星][1y] [Java] [blackhacker511/blackrat](https://github.com/blackhacker511/blackrat) BlackRAT - Java Based Remote Administrator Tool
+- [**49**星][2y] [PHP] [auraphp/aura.payload](https://github.com/auraphp/aura.payload) A Domain Payload implementation.
+- [**49**星][3y] [Py] [attify/attify-zigbee-framework](https://github.com/attify/attify-zigbee-framework) GUI Framework on top of Killerbee
+- [**49**星][7d] [C++] [ahupowerdns/galmon](https://github.com/ahupowerdns/galmon) galileo open source monitoring
+- [**49**星][11m] [Py] [agustingianni/utilities](https://github.com/agustingianni/utilities) 多个IDAPython脚本
+ - [DumpFunctionBytes](https://github.com/agustingianni/utilities/blob/master/DumpFunctionBytes.py) dumps the current function (you need to position the cursor on the start of the function) as a shellcode. It does a very limited analysis of the function in order to let you know that you need to fix call sites to functions
+ - [func_references](https://github.com/agustingianni/utilities/blob/master/func_references.py) print all the function calls to a given function. This is generally used to look for calls to malloc like function
+ - [arm_frequency](https://github.com/agustingianni/utilities/blob/master/arm_frequency.py) takes as input the output of objdump on an ARM binary. It will show the ammount of times every instruction was used, sorted by the most used ones.
+ - [struct_hint](https://github.com/agustingianni/utilities/blob/master/struct_hint.py) infer what's the underlying structure used by a function. Highly heuristic. Don't trust it blindly, just try to use what it gives you and work from that.
+ - [string_finder](https://github.com/agustingianni/utilities/blob/master/string_finder.py) Utility to find all the strings inside an ill formed IDA Database
+ - [simple_jack](https://github.com/agustingianni/utilities/blob/master/simple_jack.py) Simple Jack symbol porting tool by goose
+ - [renamer](https://github.com/agustingianni/utilities/blob/master/renamer.py) Rename files in a directory to its sha1 sum plus an extension.
+ - [prolog_finder](https://github.com/agustingianni/utilities/blob/master/prolog_finder.py) Find potential ARM procedures prolog
+ - [minset](https://github.com/agustingianni/utilities/blob/master/minset.py) Tool to calculate the minimum set of files that have approximatelly the best coverage.
+ - [mark_interesting](https://github.com/agustingianni/utilities/blob/master/mark_interesting.py) Small idapython script that finds all the signed comparisions and marks them with a color.
+ - [machofinder](https://github.com/agustingianni/utilities/blob/master/machofinder.py) Hacky script to gather all the mach-o file (and fat).
+ - [find_hardref](https://github.com/agustingianni/utilities/blob/master/find_hardref.py) Script to find hardcoded references inside an IDA database.
+- [**49**星][14d] [Py] [0blio/filegps](https://github.com/0blio/filegps) A tool that help you to guess how your shell was renamed after the server-side script of the file uploader saved it
+- [**48**星][6d] [TS] [srar/socks2shadowsocks](https://github.com/srar/socks2shadowsocks) 单Socks5 转换 多Shadowsocks端口 流量统计 抓包分析 TypeScript
+- [**48**星][1y] [pbnj/infosec-interview-questions](https://github.com/pbnj/infosec-interview-questions)
+- [**48**星][5m] [Shell] [yeyintminthuhtut/lazy-redteamer-scripts](https://github.com/yeyintminthuhtut/lazy-redteamer-scripts)
+- [**48**星][4y] [Py] [g0tmi1k/boot2root-scripts](https://github.com/g0tmi1k/boot2root-scripts) Homemade scripts to-do various vulnerable challenges
+- [**48**星][14d] [Py] [intel/cve-bin-tool](https://github.com/intel/cve-bin-tool) This tool scans for a number of common, vulnerable components (openssl, libpng, libxml2, expat and a few others) to let you know if your system includes common libraries with known vulnerabilities.
+- [**48**星][3m] [Py] [hatriot/peachorchard](https://github.com/hatriot/peachorchard) Peach Fuzzer Web Frontend
+- [**48**星][3y] [JS] [cyrus-and/gproxy](https://github.com/cyrus-and/gproxy) googleusercontent.com as HTTP(S) proxy
+- [**48**星][8m] [JS] [rhinosecuritylabs/swagger-ez](https://github.com/rhinosecuritylabs/swagger-ez) A tool geared towards pentesting APIs using OpenAPI definitions.
+- [**48**星][16d] [PS] [littl3field/audix](https://github.com/littl3field/audix) Audix is a PowerShell tool to quickly configure the Windows Event Audit Policies for security monitoring
+- [**48**星][2y] [HTML] [c0nw0nk/coinhive](https://github.com/c0nw0nk/coinhive) A nice friendly simple and easly customizable GUI for coinhives javascript miner to embed onto websites so users of your site can interact with features of the miner on every single page this javascript miner is to help those who have problems with advertisements/advertising/ads popups banners mobile redirects malvertising/malware etc and provid…
+- [**48**星][11d] [Py] [pomo-mondreganto/forcad](https://github.com/pomo-mondreganto/forcad) Pure-python distributable Attack-Defence CTF platform, created to be easily set up.
+- [**48**星][3m] [Ruby] [tintoser/bluekeep-exploit](https://github.com/tintoser/bluekeep-exploit) Bluekeep(CVE 2019-0708) exploit released
+- [**48**星][3m] [C] [juniorjacob/readwrite-kernel-stable](https://github.com/juniorjacob/readwrite-kernel-stable) a more stable & secure read/write virtual memory for kernel mode drivers
+- [**48**星][4m] [bcosorg/whitepaper](https://github.com/bcosorg/whitepaper) whitepaper
+- [**48**星][2d] [C++] [trailofbits/polytracker](https://github.com/trailofbits/polytracker) An LLVM-based instrumentation tool for universal taint analysis.
+- [**48**星][2m] [JS] [luckman666/devops_kkit](https://github.com/luckman666/devops_kkit) django2.1写的自动化运维系统
+- [**48**星][4m] [HTML] [0xbird/0xbird.github.io](https://github.com/0xbird/0xbird.github.io) 欢迎关注小鸟的技术博客!(Pwn/智能硬件/AI安全/漏洞分析/威胁情报/RedTeam/移动设备/内核/虚拟机/容器安全/浏览器/CPU/安全开发/漏洞挖掘/APT/病毒分析/安全学术)
+- [**48**星][4y] [Java] [gdssecurity/gds-pmd-security-rules](https://github.com/GDSSecurity/GDS-PMD-Security-Rules) Custom security ruleset for the popular Java static analysis tool PMD.
+- [**48**星][7m] [Py] [anouarbensaad/honeypot-iot](https://github.com/anouarbensaad/honeypot-iot) This tool to simulate http server attacks in Python which logs HackerIP and all the tracing he does into a Logfile then a database.
+- [**48**星][1y] [HTML] [yahooarchive/csptester](https://github.com/YahooArchive/csptester) A quick and easy way to test CSP behavior on modern browsers
+- [**48**星][2y] [C++] [zodiacon/dllinjectionwiththreadcontext](https://github.com/zodiacon/dllinjectionwiththreadcontext) This is a sample that shows how to leverage SetThreadContext for DLL injection
+- [**48**星][19d] [Py] [zdresearch/owasp-honeypot](https://github.com/zdresearch/owasp-honeypot) OWASP Honeypot
+- [**48**星][3y] [C] [yolosec/upcgen](https://github.com/yolosec/upcgen) Proof of concept for UPC UBEE router hack - WPA2 password generator
+- [**48**星][9m] [yeti-791/apt-guide](https://github.com/yeti-791/apt-guide) APT学习指南(Advanced persistent threat learning Guide)
+- [**48**星][2y] [Py] [xl7dev/icsecurity](https://github.com/xl7dev/icsecurity) Industrial control Security Tool
+- [**48**星][1y] [html] [wzw19890321/exploits](https://github.com/wzw19890321/exploits)
+- [**48**星][9m] [C++] [vmcall/eye_mapper](https://github.com/vmcall/eye_mapper) BattlEye x64 usermode injector
+- [**48**星][2y] [JS] [vegabird/prithvi](https://github.com/vegabird/prithvi) A Report Generation Tool for Security Assessment
+- [**48**星][2m] [Py] [turnerlabs/antiope](https://github.com/turnerlabs/antiope) AWS Inventory and Compliance Framework
+- [**48**星][7m] [JS] [tuhinshubhra/wpintel](https://github.com/tuhinshubhra/wpintel) Chrome extension designed for WordPress Vulnerability Scanning and information gathering!
+- [**48**星][2y] [C++] [tonyzesto/pubgprivxcode85](https://github.com/tonyzesto/pubgprivxcode85) Player ESP 3D Box ESP Nametag ESP Lightweight Code Secure Injection Dedicated Cheat Launcher Secured Against Battleye Chicken Dinner Every Day. Win more matches than ever before with CheatAutomation’s Playerunknown’s Battlegrounds cheat! Our stripped down, ESP only cheat gives you the key features you need to take out your opponents and be eatin…
+- [**48**星][7y] [tias/android-busybox-ndk](https://github.com/tias/android-busybox-ndk) Keeping track of instructions and patches for building busybox with the android NDK
+- [**48**星][2m] [Py] [thcipriani/sshecret](https://github.com/thcipriani/sshecret) I can keep a SSHecret
+- [**48**星][6m] [Shell] [t3chnocat/oscp-ctf](https://github.com/t3chnocat/oscp-ctf) oscp-ctf is a small collection of basic Bash scripts that make life easier and save time whether you are in the OSCP labs, HackThebox or playing around with CTFs.
+- [**48**星][9m] [C++] [stoyan-shopov/troll](https://github.com/stoyan-shopov/troll) troll:ARM Cortex-M 处理器 C 语言源码调试器
+- [**48**星][4d] [C] [ssbssa/heob](https://github.com/ssbssa/heob) Detects buffer overruns and memory leaks.
+- [**48**星][5y] [C++] [sogeti-esec-lab/android-fde](https://github.com/sogeti-esec-lab/android-fde) Tools to work on Android Full Disk Encryption (FDE).
+- [**48**星][1y] [Py] [softsec-kaist/gitctf](https://github.com/softsec-kaist/gitctf) Git-based CTF
+- [**48**星][2y] [Py] [softscheck/scff](https://github.com/softscheck/scff) softScheck Cloud Fuzzing Framework
+- [**48**星][1m] [Py] [snovvcrash/fwdsh3ll](https://github.com/snovvcrash/fwdsh3ll) Forward shell generation framework
+- [**48**星][4y] [Py] [signalsec/kirlangic-ttf-fuzzer](https://github.com/signalsec/kirlangic-ttf-fuzzer) TrueType Font Fuzzer
+- [**48**星][3m] [Ruby] [salemove/jaeger-client-ruby](https://github.com/salemove/jaeger-client-ruby) OpenTracing Tracer implementation for Jaeger in Ruby
+- [**48**星][1y] [Shell] [rustybird/corridor](https://github.com/rustybird/corridor) Tor traffic whitelisting gateway
+- [**48**星][2y] [Py] [rubenespadas/dionaeafr](https://github.com/rubenespadas/dionaeafr) Dionaea Front Web
+- [**48**星][3y] [C] [rodrigoalvesvieira/soundkeylogger](https://github.com/rodrigoalvesvieira/soundkeylogger) An experimental project to demonstrate how a user keyboard input may be sniffed through the pattern analysis of the sounds emitted by the keystrokes.
+- [**48**星][3m] [C] [rek7/postshell](https://github.com/rek7/postshell) PostShell - Post Exploitation Bind/Backconnect Shell
+- [**48**星][7m] [reabout/datacon](https://github.com/reabout/datacon) datacon比赛方向三-攻击源与攻击者分析writeup
+- [**48**星][5m] [C] [r3kapig/wctf-2019](https://github.com/r3kapig/wctf-2019) WCTF 2019 Onsite(Master) Challenge
+- [**48**星][2y] [Py] [q3k/m16c-interface](https://github.com/q3k/m16c-interface) 绕过Renesas M16C 微控制器的 bootloader security,以及转储固件
+- [**48**星][1y] [C] [pymumu/jail-shell](https://github.com/pymumu/jail-shell) Jail-shell is a linux security tool mainly using chroot, namespaces technologies, limiting users to perform specific commands, and access sepcific directories.
+- [**48**星][2y] [PS] [proxb/poshprivilege](https://github.com/proxb/poshprivilege) Manage user privileges on a local machine or view applied privileges on local or remote system
+- [**48**星][1y] [pbnj/infosec-interview-questions](https://github.com/pbnj/infosec-interview-questions)
+- [**48**星][7y] [Py] [pdasilva/vtrace_scripts](https://github.com/pdasilva/vtrace_scripts)
+- [**48**星][6y] [JS] [pauljt/scanjs](https://github.com/pauljt/scanjs) Static analysis tool for javascript code based. Scanjs uses Esprima to convert sources to AST, then walks AST looking for patterns.
+- [**48**星][3y] [Shell] [osm0sis/apk-patcher](https://github.com/osm0sis/apk-patcher) Patch APKs on-the-fly from Android recovery (Proof of Concept)
+- [**48**星][5y] [C] [nyx0/kins](https://github.com/nyx0/kins) KINS Banking Trojan
+- [**48**星][2y] [Py] [nixawk/nmap_vscan](https://github.com/nixawk/nmap_vscan) nmap service and application version detection (without nmap installation)
+- [**48**星][9d] [JS] [moneroocean/xmr-node-proxy](https://github.com/moneroocean/xmr-node-proxy) Cryptonote/Forknote/Cryptonight/Light/Heavy coin proxy for nodejs-pool
+- [**48**星][5y] [Shell] [mkdesu/cables](https://github.com/mkdesu/cables) Cables Communication, secure and anonymous communication using email-like addresses.
+- [**48**星][12m] [Py] [metachar/pyhawk](https://github.com/metachar/pyhawk) Searches the directory of choice for interesting files. Such as database files and files with passwords stored on them
+- [**48**星][2y] [Shell] [menzow/sn1per-docker](https://github.com/menzow/sn1per-docker) Dockerized version of Sn1per (
+- [**48**星][7m] [JS] [mcollina/docker-loghose](https://github.com/mcollina/docker-loghose) Collect all the logs from all docker containers
+- [**48**星][2y] [HTML] [mburakergenc/malware-detection-using-machine-learning](https://github.com/mburakergenc/malware-detection-using-machine-learning) Malware detection project on Android devices using machine learning classification algorithms.
+- [**48**星][8m] [Py] [marten4n6/tinytor](https://github.com/marten4n6/tinytor) A tiny Tor client implementation (in pure python).
+- [**48**星][24d] [PHP] [marcocesarato/php-antimalware-scanner](https://github.com/marcocesarato/php-antimalware-scanner) AMWSCAN (Antimalware Scanner) is a php antimalware/antivirus scanner console script written in php for scan your project. This can work on php projects and a lot of others platform.
+- [**48**星][3y] [C] [malwarelu/malware-lu](https://github.com/malwarelu/malware-lu) Automatically exported from code.google.com/p/malware-lu
+- [**48**星][2y] [HTML] [knrdl/yamot](https://github.com/knrdl/yamot) Yet Another MOnitoring Tool
+- [**48**星][8m] [HTML] [klionsec/klionsec.github.io](https://github.com/klionsec/klionsec.github.io)
+- [**48**星][2y] [C] [kkamagui/iron-hid](https://github.com/kkamagui/iron-hid) Create Your Own Bad USB Device (Presented at HITBSecConf 2016)
+- [**48**星][4y] [Py] [k1p0d/h264_dvr_rce](https://github.com/k1p0d/h264_dvr_rce) Remote Code Execution exploit on TVT DVR
+- [**48**星][3m] [C++] [jinmo/ifred](https://github.com/jinmo/ifred) IDA command palette & more (Ctrl+Shift+P, Ctrl+P)
+- [**48**星][4y] [Shell] [jdsecurity/cryptotrooper](https://github.com/jdsecurity/cryptotrooper) The world's first Linux white-box ransomware
+- [**48**星][2m] [C] [jdmccalpin/low-overhead-timers](https://github.com/jdmccalpin/low-overhead-timers) Very low-overhead timer/counter interfaces for C on Intel 64 processors.
+- [**48**星][5m] [jas502n/cve-2019-11581](https://github.com/jas502n/cve-2019-11581) Atlassian JIRA Template injection vulnerability RCE
+- [**48**星][2y] [Java] [inode-/attackselector](https://github.com/inode-/attackselector) Burp Suite Attack Selector Plugin
+- [**48**星][3y] [PHP] [incredibleindishell/ldap-credentials-collector-backdoor-generator](https://github.com/incredibleindishell/ldap-credentials-collector-backdoor-generator) This script generate backdoor code which log username password of an user who have passed HTTP basic auth using LDAP credentials.
+- [**48**星][3y] [JS] [huangwc94/scraping-helper-chrome-extension](https://github.com/huangwc94/scraping-helper-chrome-extension) Scraping Helper will help you to find out the best html/css selector for certain elements
+- [**48**星][7m] [Jupyter Notebook] [hija/malwaredatascience](https://github.com/hija/malwaredatascience) Malware Data Science Reading Diary / Notes
+- [**48**星][12m] [C] [hfiref0x/sxsexp](https://github.com/hfiref0x/sxsexp) Expand compressed files from WinSxS folder
+- [**48**星][2y] [Jupyter Notebook] [harrisonpim/bookworm](https://github.com/harrisonpim/bookworm)
+- [**48**星][5y] [C] [hackedteam/vector-edk](https://github.com/hackedteam/vector-edk) EFI Development Kit
+- [**48**星][1y] [Py] [ha3mrx/facebook-cracker](https://github.com/ha3mrx/facebook-cracker) Facebook Cracker Version 1.0 can crack into Facebook Database 100% without Interruption By Facebook Firewall
+- [**48**星][5d] [guyanqi/awesome-privacy](https://github.com/guyanqi/awesome-privacy) Repository for collection of research papers on privacy.
+- [**48**星][3y] [Go] [filosottile/openbsd-fde-crack](https://github.com/filosottile/openbsd-fde-crack) Some code to bruteforce OpenBSD softraid encrypted drives - NOT A READY-TO-USE TOOL
+- [**48**星][8d] [Nim] [federicoceratto/nim-httpauth](https://github.com/federicoceratto/nim-httpauth) HTTP Authentication library for Nim
+- [**48**星][7m] [Py] [esecuritylab/kostebek](https://github.com/esecuritylab/kostebek)
+- [**48**星][3y] [Py] [el3ct71k/autobrowser](https://github.com/el3ct71k/autobrowser) AutoBrowser Screenshot
+- [**48**星][8m] [C++] [dishather/richprint](https://github.com/dishather/richprint) Print compiler information stored in Rich Header of PE executables.
+- [**48**星][1y] [Batchfile] [dflabs/nat](https://github.com/dflabs/nat) No-Script Automation Tool
+- [**48**星][2y] [Py] [debasishm89/iefuzz](https://github.com/debasishm89/iefuzz) A static Internet Explorer Fuzzer.
+- [**48**星][3y] [Shell] [danielmiessler/honeycrediptracker](https://github.com/danielmiessler/honeycrediptracker) Quick script to gather stats on incoming credentials and IPs for a honey listener.
+- [**48**星][2y] [Shell] [danielfree/asus-v2ray-transparent-proxy](https://github.com/danielfree/asus-v2ray-transparent-proxy) transparent proxy with v2ray, iptables, ipset 无线路由器 v2ray 透明代理
+- [**48**星][9m] [Py] [crond-jaist/cyris](https://github.com/crond-jaist/cyris) CyRIS: Cyber Range Instantiation System
+- [**48**星][7y] [C++] [cr4sh/msfontsfuzz](https://github.com/cr4sh/msfontsfuzz) OpenType font file format fuzzer for Windows
+- [**48**星][7y] [C++] [cr4sh/code-coverage-analysis-tools](https://github.com/cr4sh/code-coverage-analysis-tools) Code coverage analysis tools for the PIN Toolkit
+- [**48**星][2y] [C#] [cobbr/insecurepowershell](https://github.com/cobbr/insecurepowershell) InsecurePowerShell is PowerShell with some security features removed.
+- [**48**星][2y] [PS] [clr2of8/detect-sslmitm](https://github.com/clr2of8/detect-sslmitm) This PowerShell script will determine if your connection to external servers over HTTPS is being decrypted by an intercepting proxy such as the internet proxies commonly found in corporate environments. It does this by comparing the SSL intermediate certificate being used for your connection to the true/known SSL certificate for the server.
+- [**48**星][20d] [Py] [cleanunicorn/theo](https://github.com/cleanunicorn/theo) Ethereum recon and exploitation tool.
+- [**48**星][2y] [C++] [cherrypill/system_info](https://github.com/cherrypill/system_info) Hardware information tool for Windows
+- [**48**星][3y] [C++] [chaitin/yanshi](https://github.com/chaitin/yanshi) A regular language recognizer generater like Ragel, enhanced with features to approximate context-free grammars and substring grammars
+- [**48**星][2y] [Py] [cert-polska/malwarecage](https://github.com/cert-polska/malwarecage) Malware repository component for samples & static configuration with REST API interface
+- [**48**星][2y] [C] [can1357/safe_capcom](https://github.com/can1357/safe_capcom) Capcom wrapper with safety in mind
+- [**48**星][4y] [Py] [breakingmalware/avulnerabilitychecker](https://github.com/breakingmalware/avulnerabilitychecker) Tool to check if your computer is likely to be vulnerable to exploitable constant Read-Write-Execute (RWX) addresses (AVs vulnerability)
+- [**48**星][28d] [Shell] [bkerler/ghidra_installer](https://github.com/bkerler/ghidra_installer) Helper scripts to set up OpenJDK 11 and scale Ghidra for 4K on Ubuntu 18.04 / 18.10
+- [**48**星][2y] [Py] [bignerd95/chimay-blue](https://github.com/bignerd95/chimay-blue) Mikrotik SMB buffer overflow exploit
+- [**48**星][2y] [PHP] [backlion/webshell](https://github.com/backlion/webshell) 这是一些常用的webshell
+- [**48**星][3y] [JS] [auth0-blog/serverless-stories-lambda](https://github.com/auth0-blog/serverless-stories-lambda) Serverless app built with AWS Lambda
+- [**48**星][8m] [Py] [austin-taylor/bluewall](https://github.com/austin-taylor/bluewall) Bluewall is a firewall framework designed for offensive and defensive cyber professionals.
+- [**48**星][8m] [CSS] [appsecco/using-docker-kubernetes-for-automating-appsec-and-osint-workflows](https://github.com/appsecco/using-docker-kubernetes-for-automating-appsec-and-osint-workflows) Repository for all the workshop content delivered at nullcon X on 1st of March 2019
+- [**48**星][2y] [C++] [anubisss/szimatszatyor](https://github.com/anubisss/szimatszatyor) World of Warcraft (WoW): SzimatSzatyor is an injector sniffer written in C++
+- [**48**星][1y] [java] [anbai-inc/burpstart](https://github.com/anbai-inc/burpstart) Burp 启动加载器
+- [**48**星][6y] [C++] [amrthabet/pysrdf](https://github.com/amrthabet/pysrdf) This is the python wrapper for The Security Framework SRDF
+- [**48**星][3y] [Py] [alessandrogario/ida-function-tagger](https://github.com/alessandrogario/ida-function-tagger) 根据函数使用的导入表,对函数进行标记
+- [**48**星][3y] [Py] [agusmakmun/python-wordlist-generator](https://github.com/agusmakmun/python-wordlist-generator) Create awesome wordlist with python - demo:
+- [**48**星][7y] [C++] [1184893257/simplesniffer](https://github.com/1184893257/simplesniffer) 基于 WinPcap 的网络抓包软件,使用 MFC 做界面
+- [**47**星][9d] [jyvsectec/phr-model](https://github.com/jyvsectec/phr-model) Prepare, Hunt, and Respond - Conceptual model against cyber attack by JYVSECTEC
+- [**47**星][5y] [PHP] [cloudsec/aioshell](https://github.com/cloudsec/aioshell) A php webshell run under linux based webservers. v0.05
+- [**47**星][3y] [HTML] [jpcertcc/owaspdocuments](https://github.com/jpcertcc/owaspdocuments) Japanese translation of OWASP documents
+- [**47**星][1y] [HTML] [iaik/jstemplate](https://github.com/iaik/jstemplate) JavaScript Template Attack proof-of-concept implementation
+- [**47**星][15d] [k8gege/aggressor](https://github.com/k8gege/aggressor) Ladon NetScan for Cobalt Strike 3.x Aggressor Script
+- [**47**星][12d] [Py] [consensys/defi-score](https://github.com/consensys/defi-score) DeFi Score: An open framework for evaluating DeFi protocols
+- [**47**星][21d] [Shell] [hak5/sharkjack-payloads](https://github.com/hak5/sharkjack-payloads) The Official Hak5 Shark Jack Payload Repository
+- [**47**星][4y] [Py] [bastilleresearch/scapy-radio](https://github.com/bastilleresearch/scapy-radio) scapy-radio (from original Hg repo)
+- [**47**星][2m] [Py] [nccgroup/sshession](https://github.com/nccgroup/sshession) The SSH Multiplex Backdoor Tool
+- [**47**星][5d] [Py] [evilsocket/pwnagotchi-plugins-contrib](https://github.com/evilsocket/pwnagotchi-plugins-contrib) User contributed Pwnagotchi plugins.
+- [**47**星][6m] [Go] [dreadl0ck/ja3](https://github.com/dreadl0ck/ja3) Ja3 TLS Client Hello Hashes in Go
+- [**47**星][3d] [Go] [asutorufa/ssrmicroclient](https://github.com/asutorufa/ssrmicroclient) a shadowskcsr client with gui by golang for linux(support subscription)
+- [**47**星][1m] [payloadbox/rfi-lfi-payload-list](https://github.com/payloadbox/rfi-lfi-payload-list)
+- [**47**星][15d] [k8gege/aggressor](https://github.com/k8gege/Aggressor) Ladon NetScan for Cobalt Strike 3.x Aggressor Script
+- [**47**星][3y] [Py] [beaugunderson/wifi-heatmap](https://github.com/beaugunderson/wifi-heatmap)
+- [**47**星][7y] [Py] [paulmcmillan/kismetclient](https://github.com/paulmcmillan/kismetclient) A Python client for the Kismet server protocol
+- [**47**星][1m] [Py] [nyxgeek/ntlmscan](https://github.com/nyxgeek/ntlmscan) scan for NTLM directories
+- [**47**星][1y] [Visual Basic .NET] [vysecurity/cactustorch](https://github.com/vysecurity/CACTUSTORCH) Payload Generation for Adversary Simulations
+- [**47**星][6m] [jaxbcd/recscansec](https://github.com/jaxBCD/RecScanSec) reconnaisance - footprinting - information disclosure (0.7)
+- [**47**星][2m] [Py] [pwnlandia/shockpot](https://github.com/pwnlandia/shockpot) WebApp Honeypot for detecting Shell Shock exploit attempts
+- [**47**星][3y] [Py] [jjo-sec/idataco](https://github.com/jjo-sec/idataco) 多功能
+- [**47**星][7m] [Py] [ctf-o-matic/capture-the-flag](https://github.com/ctf-o-matic/capture-the-flag) Helper scripts to remaster Linux Live CD images for the purpose of creating ready to use security wargames with pre-installed vulnerabilities to exploit.
+- [**47**星][3y] [C] [zerosum0x0/loadlibrary-getprocaddress-replacements](https://github.com/zerosum0x0/loadlibrary-getprocaddress-replacements) LoadLibrary() and GetProcAddress() Replacement Functions
+- [**47**星][1y] [Py] [zer0yu/zeroscan](https://github.com/zer0yu/zeroscan) Multi-Thread Vulnerability Verify Framework
+- [**47**星][4y] [C] [yifanlu/3ds_injector](https://github.com/yifanlu/3ds_injector) Open source implementation of loader module with code injection support
+- [**47**星][9m] [C++] [vletoux/detectpasswordviantlminflow](https://github.com/vletoux/detectpasswordviantlminflow) Extract the password of the current user from flow (keylogger, config file, ..) Use SSPI to get a valid NTLM challenge/response and test passwords
+- [**47**星][4y] [Py] [vasco2016/shellsploit-framework](https://github.com/vasco2016/shellsploit-framework) New Generation Exploit Development Kit
+- [**47**星][2y] [Py] [vah13/sap_exploit](https://github.com/vah13/sap_exploit) Here you can get full exploit for SAP NetWeaver AS JAVA
+- [**47**星][2m] [Py] [utkonos/lst2x64dbg](https://github.com/utkonos/lst2x64dbg) Extract labels from IDA .lst or Ghidra .csv file and export x64dbg database.
+- [**47**星][1y] [Ruby] [uploadcare/uploadcare-rails](https://github.com/uploadcare/uploadcare-rails) Rails wrapper for Uploadcare
+- [**47**星][3y] [tw-ncert/ctifeeds](https://github.com/tw-ncert/ctifeeds) Cyber Threat Intelligence Feeds
+- [**47**星][4m] [Py] [trinitronx/vncpasswd.py](https://github.com/trinitronx/vncpasswd.py) A Python implementation of vncpasswd, w/decryption abilities & extra features ;-)
+- [**47**星][4y] [Py] [topshed/rpi_8x8griddraw](https://github.com/topshed/rpi_8x8griddraw) A Python Pygame application for creating 8x8 images to load onto the Astro-Pi LED matrix
+- [**47**星][5m] [Java] [tlamb96/kgb_messenger](https://github.com/tlamb96/kgb_messenger) An Android CTF practice challenge
+- [**47**星][7m] [Go] [threeaccents/botnet](https://github.com/threeaccents/botnet) A tcp botnet written in golang
+- [**47**星][4y] [threatminer/aptnotes](https://github.com/threatminer/aptnotes) Various public documents, whitepapers and articles about APT campaigns
+- [**47**星][2m] [the-blockchain-bible/readme](https://github.com/the-blockchain-bible/readme) The Blockchain Bible,a collections for blockchain tech,bitcoin,ethereum,crypto currencies,cryptography,decentralized solutions,business scenarios,hyperledger tech,meetups,区块链,数字货币,加密货币,比特币,以太坊,密码学,去中心化,超级账本
+- [**47**星][1y] [C] [tamirzb/cve-2018-9411](https://github.com/tamirzb/cve-2018-9411) Exploit code for CVE-2018-9411 for MediaCasService
+- [**47**星][11m] [Jupyter Notebook] [tamimmirza/intrusion-detection-system-using-deep-learning](https://github.com/tamimmirza/intrusion-detection-system-using-deep-learning) VGG-19 deep learning model trained using ISCX 2012 IDS Dataset
+- [**47**星][6m] [C++] [talvos/talvos](https://github.com/talvos/talvos) Talvos is a dynamic-analysis framework and debugger for Vulkan/SPIR-V programs.
+- [**47**星][16d] [C] [sunnyki/bareboot](https://github.com/sunnyki/bareboot) Bare Boot. EFI bootloader for Mac OS, Windows, Linux etc
+- [**47**星][2y] [Py] [stormshadow07/beef-over-wan](https://github.com/stormshadow07/beef-over-wan) Browser Exploitation Framework is a Open-source penetration testing tool that focuses on browser-based vulnerabilities .This Python Script does the changes Required to make hooked Linked Accessible Over WAN .So anyone can use this framework and Attack Over WAN without Port Forwarding [NGROK or any Localhost to Webhost Service Required ]
+- [**47**星][8y] [C] [stephenfewer/ollysockettrace](https://github.com/stephenfewer/ollysockettrace) OllySocketTrace is a plugin for OllyDbg to trace the socket operations being performed by a process.
+- [**47**星][1y] [C] [squalr/selfhackingapp](https://github.com/squalr/selfhackingapp) Self Assembling/Disassembling C++ App Reference Code
+- [**47**星][2m] [C] [spacial/csirt](https://github.com/spacial/csirt) CSIRT is an awesome curated list of links and resources in security and csirt daily activities.
+- [**47**星][2m] [ObjC] [smilezxlee/zxrequestblock](https://github.com/smilezxlee/zxrequestblock) 一句话实现iOS应用底层所有网络请求拦截(如ajax请求拦截),包含http-dns解决方法,有效防止DNS劫持,用于分析http,https请求,禁用/允许代理,防抓包等
+- [**47**星][1y] [Go] [slowmist/blockchain-threat-intelligence](https://github.com/slowmist/blockchain-threat-intelligence) Blockchain Threat Intelligence Sharing Platform(区块链威胁情报共享平台)
+- [**47**星][5y] [C] [simsong/afflibv3](https://github.com/simsong/afflibv3) AFF is now being maintained at
+- [**47**星][1y] [C++] [silica/sandbox](https://github.com/silica/sandbox) Application virtualization tool for Windows
+- [**47**星][4m] [Py] [sherlly/pcrt](https://github.com/sherlly/pcrt) PCRT (PNG Check & Repair Tool), a tool to help check and fix the error in a PNG image.
+- [**47**星][5m] [sekhan/nightpi](https://github.com/sekhan/nightpi) An all-in-one briefcase for pentesting, OSINT and radio exploration
+- [**47**星][5y] [Java] [securenetwork/nfcult](https://github.com/securenetwork/nfcult) NFC Ultralight Toolkit
+- [**47**星][2y] [Shell] [samoshkin/docker-letsencrypt-certgen](https://github.com/samoshkin/docker-letsencrypt-certgen) Docker image to generate, renew, revoke RSA and/or ECDSA SSL certificates from LetsEncrypt CA using certbot and acme.sh clients in automated fashion
+- [**47**星][2y] [Py] [salesforce/autotriagebot](https://github.com/salesforce/autotriagebot) AutoTriageBot automatically verifies, deduplicates, and suggests payouts for incoming HackerOne reports.
+- [**47**星][4m] [saaramar/publications](https://github.com/saaramar/publications)
+- [**47**星][2y] [Py] [riscure/drop-ida-plugin](https://github.com/riscure/drop-ida-plugin) Experimental opaque predicate detection for IDA Pro
+- [**47**星][7y] [Py] [radare/bokken](https://github.com/radare/bokken) python-gtk UI for radare2
+- [**47**星][3y] [C++] [progmboy/cansecwest2017](https://github.com/progmboy/cansecwest2017)
+- [**47**星][10m] [JS] [pownjs/pown-duct](https://github.com/pownjs/pown-duct) Essential tool for finding blind injection attacks.
+- [**47**星][7d] [Shell] [pierregode/linux-active-directory-join-script](https://github.com/pierregode/linux-active-directory-join-script) Active directory Join script for Ubuntu, Debian, CentOS, Linux Mint, Fedora, Kali and Raspbian with built in failchcheck and debugmode for Ubuntu. "The most advanced and updated AD join script on GITHUB for Linux"
+- [**47**星][4y] [Py] [ostorlab/jniostorlab](https://github.com/ostorlab/jniostorlab) JNI method enumeration in ELF files
+- [**47**星][6y] [Java] [o2platform/defcon_resting](https://github.com/o2platform/defcon_resting) Repository to hold materials for DefCon_RESTing presentation by Dinis, Abe and Alvaro
+- [**47**星][2y] [Shell] [nyxgeek/dumpsniffer](https://github.com/nyxgeek/dumpsniffer) tools for analyzing strings from password lists
+- [**47**星][5y] [Py] [neohapsis/mptcp-abuse](https://github.com/neohapsis/mptcp-abuse) A collection of tools and resources to explore MPTCP on your network. Initially released at Black Hat USA 2014.
+- [**47**星][3y] [Py] [nanshihui/android-reverse-tool](https://github.com/nanshihui/android-reverse-tool) Android reverse tool
+- [**47**星][9m] [DIGITAL Command Language] [nahsra/antisamy](https://github.com/nahsra/antisamy) a library for performing fast, configurable cleansing of HTML coming from untrusted sources
+- [**47**星][4y] [C++] [mozmark/ringleader](https://github.com/mozmark/ringleader) A tool for configuring and using MITM proxies from firefox
+- [**47**星][5y] [C] [mobileforensicsresearch/mem](https://github.com/mobileforensicsresearch/mem) Tool used for dumping memory from Android devices
+- [**47**星][1y] [Py] [miladdiaz/mikrotikexploit](https://github.com/miladdiaz/mikrotikexploit) Scan and Export RouterOS Password
+- [**47**星][2y] [mikewest/cookies-over-http-bad](https://github.com/mikewest/cookies-over-http-bad) Sending cookies over plaintext HTTP is bad. We should stop doing that.
+- [**47**星][5y] [C] [lukasikic/unix-privilege-escalation-exploits-pack](https://github.com/lukasikic/unix-privilege-escalation-exploits-pack) Exploits for getting local root on Linux, BSD, AIX, HP-UX, Solaris, RHEL, SUSE etc.
+- [**47**星][1m] [PS] [lkys37en/start-adenum](https://github.com/lkys37en/start-adenum) Tool that automates Active Directory enumeration
+- [**47**星][1y] [C++] [lianglixin/memdllloader](https://github.com/lianglixin/memdllloader) 加载内存当中的DLL文件
+- [**47**星][3m] [C] [leoetlino/botw-re-notes](https://github.com/leoetlino/botw-re-notes) Reverse engineering notes and tools for The Legend of Zelda: Breath of the Wild
+- [**47**星][5m] [Shell] [kwilczynski/packer-templates](https://github.com/kwilczynski/packer-templates) Packer templates for creating Amazon EC2 images and Vagrant boxes
+- [**47**星][10m] [Java] [jreframeworker/jreframeworker](https://github.com/jreframeworker/jreframeworker) A practical tool for bytecode manipulation and creating Managed Code Rootkits (MCRs) in the Java Runtime Environment
+- [**47**星][3y] [JS] [jonathankingston/ember-cli-sri](https://github.com/jonathankingston/ember-cli-sri) Generation of SRI hashes for ember
+- [**47**星][8m] [jeremyblackthorne/ghidra-keybindings](https://github.com/jeremyblackthorne/ghidra-keybindings)
+- [**47**星][5y] [jameshabben/sysmon-queries](https://github.com/jameshabben/sysmon-queries) Queries to parse sysmon event log file with microsoft logparser
+- [**47**星][3m] [Py] [jackeriss/keyboard_recording_trojan](https://github.com/jackeriss/keyboard_recording_trojan) 一个可以记录键盘输入并发送到指定邮箱的简单木马。
+- [**47**星][6m] [Py] [ivrodriguezca/decrypt-ios-apps-script](https://github.com/ivrodriguezca/decrypt-ios-apps-script) Python script to SSH into your jailbroken device, decrypt an iOS App and transfer it to your local machine
+- [**47**星][2y] [Py] [intrd/nozzlr](https://github.com/intrd/nozzlr) Nozzlr is a bruteforce framework, trully modular and script-friendly
+- [**47**星][7m] [Py] [initstring/lxd_root](https://github.com/initstring/lxd_root) Linux privilege escalation via LXD
+- [**47**星][11m] [C] [imbushuo/boot-shim](https://github.com/imbushuo/boot-shim) Bootstraps ARM32/ARM64 ELF payloads on Qualcomm Windows platforms
+- [**47**星][4m] [C] [ihack4falafel/osee](https://github.com/ihack4falafel/osee) Collection of things made during my preparation to take on OSEE
+- [**47**星][11m] [Java] [iflody/mybuganalyze](https://github.com/iflody/mybuganalyze) 一些漏洞分析
+- [**47**星][29d] [C] [hexhive/smotherspectre](https://github.com/hexhive/smotherspectre) Proof-of-concept code for the SMoTherSpectre exploit.
+- [**47**星][5d] [Shell] [hax4us/apkmod](https://github.com/hax4us/apkmod) Apkmod can decompile, recompile, sign APK, and bind the payload with any legit APP
+- [**47**星][20d] [C++] [hasherezade/mal_unpack](https://github.com/hasherezade/mal_unpack) Dynamic unpacker based on PE-sieve
+- [**47**星][2y] [JS] [hackvertor/visualfuzzer](https://github.com/hackvertor/visualfuzzer) A visual fuzzer written in NodeJS to find Zalgo characters
+- [**47**星][1y] [JS] [h43z/dns-rebinding-tool](https://github.com/h43z/dns-rebinding-tool) dns rebind tool with custom scripts
+- [**47**星][8y] [Py] [grant-olson/pyasm](https://github.com/grant-olson/pyasm) Dynamic inline x86 assembler for python.
+- [**47**星][3y] [Py] [gosecure/break-fast-serial](https://github.com/gosecure/break-fast-serial) A proof of concept that demonstrates asynchronous scanning for Java deserialization bugs
+- [**47**星][2y] [Py] [ggusoft/inforfinder](https://github.com/ggusoft/inforfinder) inforfinder:收集指向某个服务器(ip,域,范围,文件)的任何域的信息。能够检测到所有指向某个 IP 地址的域,并检测安装的CMS版本、PHP版本、WebServer版本、Plesk版本等。
+- [**47**星][1m] [C] [gerhart01/livecloudkd](https://github.com/gerhart01/livecloudkd) Hyper-V Research is trendy now
+- [**47**星][6y] [C] [gdbinit/gdb-ng](https://github.com/gdbinit/gdb-ng) Apple's gdb fork with some fixes and enhancements
+- [**47**星][7m] [C] [gdbinit/extractmacho](https://github.com/gdbinit/extractmacho) IDA plugin to extract Mach-O binaries located in the disassembly or data
+- [**47**星][8d] [PHP] [fortrabbit/craft-copy](https://github.com/fortrabbit/craft-copy) Deployment tools for Craft on fortrabbit
+- [**47**星][2y] [Pascal] [felipedaragon/huntpad](https://github.com/felipedaragon/huntpad) 开源的Notepad,有很多有助于渗透测试的特性
+- [**47**星][2y] [C] [fail0verflow/switch-arm-trusted-firmware](https://github.com/fail0verflow/switch-arm-trusted-firmware) ARM Trusted Firmware-A for the Switch
+- [**47**星][4d] [JS] [essandess/easylist-pac-privoxy](https://github.com/essandess/easylist-pac-privoxy) EasyList Tracker and Adblocks to Proxy Auto Configuration (PAC) File and Privoxy Actions and Filters
+- [**47**星][6d] [Py] [ercoppa/symbolic-execution-tutorial](https://github.com/ercoppa/symbolic-execution-tutorial) Tutorial on Symbolic Execution. Hands-on session is based on the angr framework.
+- [**47**星][11m] [Py] [engelsjo/raspireader](https://github.com/engelsjo/raspireader) 3D models and code for building your own fingerprint reader
+- [**47**星][2y] [Py] [embedi/amt_auth_bypass_poc](https://github.com/embedi/amt_auth_bypass_poc) CVE-2017-5689 Proof-of-Concept exploit
+- [**47**星][10m] [Go] [dsopas/rfd-checker](https://github.com/dsopas/rfd-checker) rfd-checker: 命令行工具,检测指定URL是否存在反射文件下载(Reflected File Download)问题
+- [**47**星][2y] [C] [david-reguera-garcia-dreg/enyelkm](https://github.com/david-reguera-garcia-dreg/enyelkm) LKM rootkit for Linux x86 with the 2.6 kernel. It inserts salts inside system_call and sysenter_entry.
+- [**47**星][1y] [PS] [dafthack/passphrasegen](https://github.com/dafthack/passphrasegen) A script for generating custom passphrase lists to be used for password cracking with hashcat rules
+- [**47**星][2y] [C++] [collin80/m2ret](https://github.com/collin80/m2ret) GVRET fork to Macchina M2 board
+- [**47**星][4m] [Lua] [charlemaznable/lua-resty-wechat](https://github.com/charlemaznable/lua-resty-wechat) 使用Lua编写的nginx服务器微信公众平台代理.
+- [**47**星][2m] [Rust] [brycx/checkpwn](https://github.com/brycx/checkpwn) Check Have I Been Pwned and see if it's time for you to change passwords.
+- [**47**星][1y] [Java] [bit4woo/java_deserialize_vuln_lab](https://github.com/bit4woo/java_deserialize_vuln_lab) Java 反序列化学习的实验代码 Java_deserialize_vuln_lab
+- [**47**星][1y] [Py] [behavior3/behavior3py](https://github.com/behavior3/behavior3py) Behavior3 client library for Python (Behavior Tree for Python)
+- [**47**星][5m] [PHP] [bediger4000/reverse-php-malware](https://github.com/bediger4000/reverse-php-malware) De-obfuscate and reverse engineer PHP malware
+- [**47**星][4y] [JS] [awalgarg/devtools-timing-attack](https://github.com/awalgarg/devtools-timing-attack) timing attack to check if devtools are open
+- [**47**星][1y] [Shell] [appsecconsulting/pentest-tools](https://github.com/appsecconsulting/pentest-tools) Penetration Testing Tools Developed by AppSec Consulting.
+- [**47**星][2y] [C++] [antid0tecom/aarch64_armv81extension](https://github.com/antid0tecom/aarch64_armv81extension) IDA AArch64 处理器扩展:添加对ARMv8.1 opcodes的支持
+- [**47**星][2y] [Py] [anilbaranyelken/arpag](https://github.com/anilbaranyelken/arpag) Arpag: 自动化漏洞利用脚本
+- [**47**星][1y] [Py] [alexfrancow/a-detector](https://github.com/alexfrancow/a-detector)
+- [**47**星][3y] [Py] [alessandroz/pupy](https://github.com/alessandroz/pupy) Pupy is an opensource, multi-platform (Windows, Linux, OSX, Android), multi function RAT (Remote Administration Tool) mainly written in python. It features a all-in-memory execution guideline and leaves very low footprint. Pupy can communicate using various transports, migrate into processes (reflective injection), load remote python code, pytho…
+- [**47**星][7m] [Go] [agilebits/crackme](https://github.com/agilebits/crackme)
+- [**47**星][5y] [Shell] [adafruit/adafruit-pi-externalroot-helper](https://github.com/adafruit/adafruit-pi-externalroot-helper) A shell script to configure a USB drive as root filesystem.
+- [**47**星][3y] [Py] [4w4k3/knockmail](https://github.com/4w4k3/knockmail) Verify if email exists
+- [**46**星][12d] [Go] [dsnezhkov/deepsea](https://github.com/dsnezhkov/deepsea) DeepSea Phishing Gear
+- [**46**星][6m] [Swift] [git-kevinchuang/potatso-swift5](https://github.com/git-kevinchuang/potatso-swift5) Potatso compiled with swift5 xcode 10.2.1 mojave 10.14.5
+- [**46**星][1m] [C++] [125k/esp8266_wifi_captive_portal](https://github.com/125k/esp8266_wifi_captive_portal) WiFi captive portal for NodeMCU (ESP8266 Module) with DNS spoofing. It phishes the WiFi password.
+- [**46**星][10d] [JS] [hmbsbige/text_translation](https://github.com/hmbsbige/text_translation) 简体中文翻译&&一些文本
+- [**46**星][3y] [Py] [asamy/x86-64-pe-emu](https://github.com/asamy/x86-64-pe-emu) AMD64 PE Emulator in Python.
+- [**46**星][1m] [Vue] [fireeye/gocrack-ui](https://github.com/fireeye/gocrack-ui) The User Interface for GoCrack
+- [**46**星][6m] [Py] [landgrey/classhound](https://github.com/landgrey/classhound) 利用任意文件下载漏洞自动循环下载并反编译class文件获得网站源码
+- [**46**星][2m] [Go] [rancher/remotedialer](https://github.com/rancher/remotedialer) HTTP in TCP in Websockets in HTTP in TCP, Tunnel all the things!
+- [**46**星][8y] [Perl] [gamelinux/echidna](https://github.com/gamelinux/echidna) Network Security Monitoring Framework
+- [**46**星][9m] [Py] [lorenzb/libsubmarine](https://github.com/lorenzb/libsubmarine) Implementation of a novel practical scheme for submarine commitments
+- [**46**星][2y] [leotsui/cs259d_notes_hw_cn](https://github.com/leotsui/cs259d_notes_hw_cn) 本笔记是对课程CS 259D中涉及的论文和讲义的扩展,建议阅读原始论文和讲义。
+- [**46**星][9m] [Py] [stef/wireless-radar](https://github.com/stef/wireless-radar) DF and other tools to explore a 2.4GHz environment.
+- [**46**星][4y] [securitytube/wifiscanvisualizer](https://github.com/securitytube/wifiscanvisualizer) Wi-Fi Scan Visualizer by Pentester Academy
+- [**46**星][2y] [C#] [epicrouterss/mssql-fileless-rootkit-warsqlkit](https://github.com/epicrouterss/mssql-fileless-rootkit-warsqlkit) Bildiğiniz üzere uzun zamandır MSSQL üzerine çalışmalar yapmaktayım. Bu yazımda uzun zamandır uğraştığım bir konuyu ele alacağım, MSSQL Rootkit. Bildiğiniz üzere şimdiye kadar MS-SQL için anlatılan post-exploitation işlemlerinin büyük çoğunluğu “xp_cmdshell” ve “sp_OACreate” stored procedure’lerini kullanarak anlatılır. Peki xp_cmdshell ve sp_OA…
+- [**46**星][4y] [PHP] [kurtcoke/demonhunter_exploitkit](https://github.com/kurtcoke/demonhunter_exploitkit) Source code to the Malicious Demon Hunter Exploit Kit
+- [**46**星][4m] [C#] [cristianst85/quickconnectplugin](https://github.com/cristianst85/quickconnectplugin) A KeePass plugin that allows you to connect to Windows/Linux/ESXi hosts.
+- [**46**星][2m] [C#] [ernado-x/x.web.sitemap](https://github.com/ernado-x/x.web.sitemap) Simple sitemap generator for .NET and .NET Core
+- [**46**星][2y] [hdm/2017-bsideslv-modern-recon](https://github.com/hdm/2017-BSidesLV-Modern-Recon) Materials related to the 2017 BSides Las Vegas presentation
+- [**46**星][1m] [C++] [125k/esp8266_wifi_captive_portal](https://github.com/125K/ESP8266_WiFi_Captive_Portal) WiFi captive portal for NodeMCU (ESP8266 Module) with DNS spoofing. It phishes the WiFi password.
+- [**46**星][24d] [PHP] [szepeviktor/waf4wordpress](https://github.com/szepeviktor/waf4wordpress) WAF for WordPress
+- [**46**星][2y] [C] [robotpy/robotpy-crio](https://github.com/robotpy/robotpy-crio) Obsolete. Python 3 port for cRIO for use in the FIRST Robotics Competition (FRC)
+- [**46**星][2m] [C#] [brunull/pace](https://github.com/brunull/pace) A Remote Access Tool for Windows.
+- [**46**星][3m] [Py] [koromodako/mkctf](https://github.com/koromodako/mkctf) A CTF framework to create, build, deploy and test challenges
+- [**46**星][2y] [Go] [caarlos0-graveyard/gravekeeper](https://github.com/caarlos0-graveyard/gravekeeper) Informs users that a repo is not maintained anymore.
+- [**46**星][1y] [C] [zznop/flyr](https://github.com/zznop/flyr) Block-based software vulnerability fuzzing framework
+- [**46**星][19d] [TeX] [zxgio/gdb_gef-cheatsheet](https://github.com/zxgio/gdb_gef-cheatsheet) GDB + GEF cheatsheet for reversing binaries
+- [**46**星][1m] [C] [zodiacon/regeditx](https://github.com/zodiacon/regeditx) Enhanced Registry Editor
+- [**46**星][18d] [JS] [znetstar/tor-router](https://github.com/znetstar/tor-router) A SOCKS, HTTP and DNS proxy for distributing traffic across multiple instances of Tor
+- [**46**星][3y] [C] [zhuhuibeishadiao/pfhook](https://github.com/zhuhuibeishadiao/pfhook) Page fault hook use ept (Intel Virtualization Technology)
+- [**46**星][5m] [C] [zerbea/hcxkeys](https://github.com/zerbea/hcxkeys) Small set of tools to generate plainmasterkeys (rainbowtables) and hashes for the use with latest hashcat and John the Ripper.
+- [**46**星][8m] [YARA] [xumeiquer/yara-forensics](https://github.com/xumeiquer/yara-forensics) Set of Yara rules for finding files using magics headers
+- [**46**星][3m] [Py] [xuchaoa/ctf_awd_platform](https://github.com/xuchaoa/ctf_awd_platform) CTF 攻防对抗平台
+- [**46**星][2y] [Py] [xnianq/awd-frame](https://github.com/xnianq/awd-frame) ctf awd framework
+- [**46**星][7m] [Py] [wetw0rk/exploit-development](https://github.com/wetw0rk/exploit-development) CVE-2016-10709, CVE-2017-17099, CVE-2017-18047, CVE-2019-1003000, CVE-2018-1999002
+- [**46**星][1y] [C++] [wanttobeno/win_driver_mouse_and_key](https://github.com/wanttobeno/win_driver_mouse_and_key) 驱动模拟键鼠,支持64位,附代码
+- [**46**星][12m] [Py] [viperbluff/waf_buster](https://github.com/viperbluff/waf_buster) Disrupt WAF by abusing SSL/TLS Ciphers
+- [**46**星][3y] [C++] [vdalibard/boat](https://github.com/vdalibard/boat)
+- [**46**星][4m] [Py] [v-p-b/kaspy_toolz](https://github.com/v-p-b/kaspy_toolz)
+- [**46**星][1y] [Go] [unixpickle/cve-2018-4407](https://github.com/unixpickle/cve-2018-4407) Crash macOS and iOS devices with one packet
+- [**46**星][1y] [uefitech/resources](https://github.com/uefitech/resources) One-stop shop for UEFI/BIOS specifications/utilities by UEFI.Tech community
+- [**46**星][8m] [turing-chain/honeypots-on-blockchain](https://github.com/turing-chain/honeypots-on-blockchain) This repo collects almost all the smart contract honeypots that you could find in the first three pages of Google search.
+- [**46**星][27d] [C] [trendmicro/rfquack](https://github.com/trendmicro/rfquack) RFQuack: the versatile RF-analysis tool that quacks!
+- [**46**星][1y] [Py] [towerofhanoi/ctfsubmitter](https://github.com/towerofhanoi/ctfsubmitter) A flag submitter service with distributed attackers for attack/defense CTF games.
+- [**46**星][2y] [C#] [testsecer/md5decrypt](https://github.com/testsecer/md5decrypt) MD5多接口解密工具(插件式)
+- [**46**星][2d] [Py] [te-k/analyst-scripts](https://github.com/te-k/analyst-scripts) Scripts to analyze stuff
+- [**46**星][2y] [C] [stonedreamforest/re_avkmgr](https://github.com/stonedreamforest/re_avkmgr) 逆向小红伞杀毒软件驱动——avkmgr
+- [**46**星][7y] [spiderlabs/korelogic-rules](https://github.com/spiderlabs/korelogic-rules) Updated version of the 2010 KoreLogic password cracking rules for John the Ripper
+- [**46**星][30d] [Py] [sowdust/ffff](https://github.com/sowdust/ffff) FFFF Finds Facebook Friends
+- [**46**星][2y] [silvermoonsecurity/security-misc](https://github.com/silvermoonsecurity/security-misc) # Full overview of current vulnerability, exploit , fuzz, mitigation of current major Operation System(Windows, macOS, Linux, Android,iOS and so forath) and popular applicaiton
+- [**46**星][3y] [C] [sidechannelmarvels/stark](https://github.com/sidechannelmarvels/stark) Repository of small utilities related to key recovery
+- [**46**星][7y] [C] [shjalayeri/mcedp](https://github.com/shjalayeri/mcedp) Malicious Code Execution Detection Prevention (MCEDP) High Interaction Client Honeypot
+- [**46**星][9m] [setuid0-sec/swiss_e-voting_publications](https://github.com/setuid0-sec/swiss_e-voting_publications) Our publications of the Swiss E-Voting Public Intrusion Test (PIT)
+- [**46**星][1y] [Py] [sentenza/gimp-ela](https://github.com/sentenza/gimp-ela) A JPEG Error Level Analysis forensic plugin for the GNU Image Manipulation Program (GIMP)
+- [**46**星][8m] [Py] [safebreach-labs/altfs](https://github.com/safebreach-labs/altfs) The Alternative Fileless File System
+- [**46**星][2y] [rustemsoft/skater-.net-obfuscator](https://github.com/rustemsoft/skater-.net-obfuscator) Skater .NET Obfuscator is an obfuscation tool for .NET code protection. It implements all known software protection techniques and obfuscation algorithms.
+- [**46**星][7m] [Shell] [rokasurbelis/system-security-testing](https://github.com/rokasurbelis/system-security-testing)
+- [**46**星][5y] [C] [rodionovd/task_vaccine](https://github.com/rodionovd/task_vaccine) Yet another code injection library for OS X
+- [**46**星][2y] [JS] [rnehra01/arp-validator](https://github.com/rnehra01/arp-validator) 检测ARP 投毒攻击
+- [**46**星][4y] [Assembly] [raspberrypi/rpi-sense](https://github.com/raspberrypi/rpi-sense) Sense HAT firmware and driver
+- [**46**星][1m] [randomuserid/tylium](https://github.com/randomuserid/tylium) Primary data pipelines for intrusion detection, security analytics and threat hunting
+- [**46**星][8m] [JS] [radenvodka/pentol](https://github.com/radenvodka/pentol) PENTOL - Pentester Toolkit for Fiddler2
+- [**46**星][5y] [Py] [pun1sh3r/facebot](https://github.com/pun1sh3r/facebot) A facebook profile and reconnaissance system
+- [**46**星][2d] [C] [psilupan/fray](https://github.com/psilupan/fray) Recompilable version of Super Smash Bros. Melee 1.02 based on the LibOGC project.
+- [**46**星][1y] [pimps/cve-2017-5645](https://github.com/pimps/cve-2017-5645) CVE-2017-5645 - Apache Log4j RCE due Insecure Deserialization
+- [**46**星][2y] [pentestpartners/ptp-rat](https://github.com/pentestpartners/ptp-rat) Exfiltrate data over screen interfaces
+- [**46**星][4y] [C++] [papadp/reflective-injection-detection](https://github.com/papadp/reflective-injection-detection) a program to detect reflective dll injection on a live machine
+- [**46**星][5m] [HTML] [paloaltonetworks/aws-elb-autoscaling](https://github.com/paloaltonetworks/aws-elb-autoscaling) Auto Scaling VM-Series firewalls in AWS
+- [**46**星][1y] [Shell] [pablomansanet/c0toolkit](https://github.com/pablomansanet/c0toolkit) Miscellaneous pentesting scripts for OSCP
+- [**46**星][4y] [Py] [p0cl4bs/facebrute](https://github.com/p0cl4bs/facebrute) Bruteforce to facebook accounts
+- [**46**星][2m] [Makefile] [osminogin/docker-tor-simple](https://github.com/osminogin/docker-tor-simple) Simplest minimal container for Tor anonymity software
+- [**46**星][5m] [Go] [oscp/openshift-monitoring](https://github.com/oscp/openshift-monitoring) A realtime distributed monitoring tool for OpenShift Enterprise
+- [**46**星][1y] [HTML] [octosavvi/espkey](https://github.com/octosavvi/espkey) Wiegand data logger, replay device and micro door-controller
+- [**46**星][2m] [Py] [nodiscc/srv01](https://github.com/nodiscc/srv01) [mirror] [Legacy version, rewrite in progress] Run your own network services, hosted on a server you control.
+- [**46**星][7d] [Java] [netspi/awssigner](https://github.com/netspi/awssigner) Burp Extension for AWS Signing
+- [**46**星][2y] [Py] [n4xh4ck5/n4xd0rk](https://github.com/n4xh4ck5/n4xd0rk) Listing subdomains about a main domain
+- [**46**星][3y] [PS] [n3l5/irfartpull](https://github.com/n3l5/irfartpull) PowerShell script utilized to pull several forensic artifacts from a live Win7 and WinXP system without WINRM.
+- [**46**星][11m] [Shell] [mzpqnxow/gdb-static-cross](https://github.com/mzpqnxow/gdb-static-cross) Shell scripts, sourceable "activate" scripts and instructions for building a statically linked gdb-7.12 gdbserver using cross-compile toolchains. Includes more than 20 statically linked gdbserver executables for different architectures, byte orders and ABIs
+- [**46**星][1y] [PHP] [mrsqar-ye/door404](https://github.com/mrsqar-ye/door404) Web application backdoor builder
+- [**46**星][3y] [C] [maximehip/mach_portal](https://github.com/maximehip/mach_portal) iOS 10.1.1 Kernel exploit by Project Zero
+- [**46**星][1y] [JS] [maltek/swift-frida](https://github.com/maltek/swift-frida) Frida library for interacting with Swift programs.
+- [**46**星][4m] [JS] [lwindolf/polscan](https://github.com/lwindolf/polscan) Zero-setup SSH-based scanner with extensive visualizations for Debian server inventory, policy compliance and vulnerabilities
+- [**46**星][1y] [Py] [luis-hebendanz/msf-remote-console](https://github.com/luis-hebendanz/msf-remote-console) A remote msfconsole written in Python 2.7 to connect to the msfrcpd server of metasploit. This tool gives you the ability to load modules permanently as daemon on your server like autopwn2.
+- [**46**星][7y] [ObjC] [logicalparadox/apnagent-ios](https://github.com/logicalparadox/apnagent-ios) iOS application for testing Apple Push Notification (APN) service payloads.
+- [**46**星][4y] [C] [laginimaineb/fuzz_zone](https://github.com/laginimaineb/fuzz_zone) Fuzzing utility which enables sending arbitrary SCMs to TrustZone
+- [**46**星][2y] [Go] [lafolle/flen](https://github.com/lafolle/flen) Flen provides stats on functions/methods lengths in a Golang package.
+- [**46**星][22d] [Py] [kisspeter/apifuzzer](https://github.com/kisspeter/apifuzzer) Fuzz your application using you Swagger or API Blueprint definition without coding
+- [**46**星][1y] [Java] [kaushikravikumar/realtimetaxiandroiddemo](https://github.com/kaushikravikumar/realtimetaxiandroiddemo) PubNub Demo that uses a Publish/Subscribe model to implement a realtime map functionality similar to Lyft/Uber.
+- [**46**星][3y] [C] [jyao1/stm](https://github.com/jyao1/stm)
+- [**46**星][20d] [Py] [justfoxing/ghidra_bridge](https://github.com/justfoxing/ghidra_bridge) Python 3 bridge to Ghidra's Python scripting
+- [**46**星][1y] [C] [jthuraisamy/dirt](https://github.com/jthuraisamy/dirt) Driver Initial Reconnaissance Tool
+- [**46**星][5y] [joshbegley/nsa-stories](https://github.com/joshbegley/nsa-stories) Every document published from the Snowden archive
+- [**46**星][8m] [Dockerfile] [jmg87/redteam-k8spwn](https://github.com/jmg87/redteam-k8spwn) Reverse shell container for k8s deployments
+- [**46**星][8m] [JS] [jeremyfetiveau/turbofan-exploit-for-issue-762874](https://github.com/jeremyfetiveau/turbofan-exploit-for-issue-762874) Exploit for a bug in TurboFan's typing of JSCall nodes for builtins kStringLastIndexOf and kStringIndexOf
+- [**46**星][3y] [Go] [iovisor/iovisor-ovn](https://github.com/iovisor/iovisor-ovn) IOVisor OVN integration
+- [**46**星][3y] [Go] [inszva/tap0901](https://github.com/inszva/tap0901) Go语言虚拟网卡库,可用于制作对战平台、加速器、防火墙、VPN等
+- [**46**星][7m] [Go] [ice-ice/dnstunnel](https://github.com/ice-ice/dnstunnel) dns tunnel backdoor DNS隧道后门
+- [**46**星][7m] [Py] [hucmosin/purelove](https://github.com/hucmosin/purelove) Purelove is a lightweight penetration testing framework, in order to better security testers testing holes with use.
+- [**46**星][6m] [Go] [hectane/go-acl](https://github.com/hectane/go-acl) Go library for manipulating ACLs on Windows
+- [**46**星][5y] [C++] [hackedteam/core-macos](https://github.com/hackedteam/core-macos) RCS Agent for Mac
+- [**46**星][11d] [PHP] [gsoros/gtrader](https://github.com/gsoros/gtrader) a trading strategy trainer, back-tester and bot
+- [**46**星][2y] [Py] [grierforensics/officedissector](https://github.com/grierforensics/officedissector) Static analysis tools for Microsoft Office Open XML files and documents
+- [**46**星][2y] [grayddq/hids](https://github.com/grayddq/hids) HIDS全称是Host-based Intrusion Detection System,即基于主机型入侵检测系统,HIDS运行依赖这样一个原理:一个成功的入侵者一般而言都会留下他们入侵的痕迹。本人更倾向于通过记录主机的重要信息变更来发现入侵者。 本项目由两部分组成:一部分osquery、另一部分监控脚本来补充osquery规则的不足; 本文是第一部分osquery规则部分,实现绝大部分主机信息监控。
+- [**46**星][2y] [gdssecurity/whitepapers](https://github.com/gdssecurity/whitepapers) A collection of publicly released whitepapers
+- [**46**星][4y] [C] [gdbinit/gatekeerper](https://github.com/gdbinit/gatekeerper) A kernel extension to mitigate Gatekeeper bypasses
+- [**46**星][2m] [Py] [gcmartinelli/entropy](https://github.com/gcmartinelli/entropy) Binary file entropy visualizer written in Python
+- [**46**星][6y] [Py] [funsecurity/apk_binder_script](https://github.com/funsecurity/apk_binder_script) apk binder script
+- [**46**星][6y] [Ruby] [fingertips/wad](https://github.com/fingertips/wad) WAD is a little script that speeds up test runs on Travis-CI by caching the installed bundle on S3.
+- [**46**星][5m] [C#] [ericzimmerman/prefetch](https://github.com/ericzimmerman/prefetch) Windows Prefetch parser. Supports all known versions from Windows XP to Windows 10.
+- [**46**星][2y] [Py] [erevus-cn/scan_webshell](https://github.com/erevus-cn/scan_webshell) 很简单的webshell扫描
+- [**46**星][7m] [Py] [disappeerlabs/disappeer](https://github.com/disappeerlabs/disappeer) A pure Python GUI app for GPG functionality and peer-to-peer encrypted messaging over Tor
+- [**46**星][8m] [Shell] [damonmohammadbagher/nativepayload_bssid](https://github.com/damonmohammadbagher/nativepayload_bssid) Transferring Backdoor Payload by BSSID and Wireless traffic
+- [**46**星][3m] [Py] [cve-search/pycvesearch](https://github.com/cve-search/pycvesearch) Python wrapper for the API of cve-search
+- [**46**星][5m] [Py] [cryptax/angeapk](https://github.com/cryptax/angeapk) Encrypting a PNG into an Android application
+- [**46**星][1y] [codworth/esp-host](https://github.com/codworth/esp-host) Serve payloads using the esp8266
+- [**46**星][5m] [C] [chentingz/snifferui](https://github.com/chentingz/snifferui) 基于MFC和WinPcap库开发的网络抓包和协议分析软件
+- [**46**星][7m] [Py] [capeleidokos/elf_diff](https://github.com/capeleidokos/elf_diff) A tool to compare ELF binaries
+- [**46**星][4y] [Py] [bwall/markovobfuscate](https://github.com/bwall/markovobfuscate) Python library and tools to obfuscate data based on Markov models built off shared data
+- [**46**星][4m] [bc-security/defcon27](https://github.com/bc-security/defcon27)
+- [**46**星][2y] [Assembly] [azya52/seiko](https://github.com/azya52/seiko) Seiko uc-2000 reverse engineering
+- [**46**星][5y] [Ruby] [averagesecurityguy/prometheus](https://github.com/averagesecurityguy/prometheus) Prometheus Firewall Analyzer
+- [**46**星][21d] [PS] [automatedlab/automatedlab.common](https://github.com/automatedlab/automatedlab.common) PowerShell module for daily administrative tasks and general helper functions
+- [**46**星][3y] [C#] [aleksk/lazycopy](https://github.com/aleksk/lazycopy) NTFS minifilter driver that can download file content from a remote location, when it is opened for the first time.
+- [**46**星][2y] [akhepcat/bridgeap](https://github.com/akhepcat/bridgeap) Automagically bridge any live interface to any idle interface using NATS, DHCP, and HostAP where applicable
+- [**46**星][7m] [Ruby] [activeadmin-plugins/active_admin_role](https://github.com/activeadmin-plugins/active_admin_role) Role based authorization with CanCanCan for Active Admin
+- [**46**星][1y] [Py] [aaaddress1/vtmal](https://github.com/aaaddress1/vtmal) Malware Sandbox Emulation in Python @ HITCON 2018
+- [**46**星][3y] [C++] [55-aa/cve-2016-3308](https://github.com/55-aa/cve-2016-3308) Use CVE-2016-3308 corrupt win32k desktop heap
+- [**45**星][] [blacckhathaceekr/osint_tips](https://github.com/blacckhathaceekr/osint_tips) This repository was created and developed by Ammar Amer @cry__pto Only. Updates to this repository will continue to arrive until the number of TIPS reach 1000 TIPS .Learn Ethical Hacking and penetration testing.and of course OSINT
+- [**45**星][12m] [Shell] [witee/note-shadowsocks](https://github.com/witee/note-shadowsocks) 公司网关使用 shadowsocks 搭建翻墙网络
+- [**45**星][9m] [syst3ma/awesome-baseband-research](https://github.com/syst3ma/awesome-baseband-research) A curated list of awesome baseband research resources
+- [**45**星][5d] [CSS] [evilsocket/www.pwnagotchi.ai](https://github.com/evilsocket/www.pwnagotchi.ai) (⌐■_■) - pwnagotchi.ai
+- [**45**星][5y] [Py] [f-secure/mqtt_fuzz](https://github.com/f-secure/mqtt_fuzz) A simple fuzzer for the MQTT protocol
+- [**45**星][30d] [C] [timwr/cve-2019-2215](https://github.com/timwr/cve-2019-2215)
+- [**45**星][7y] [JS] [zneak/jsx](https://github.com/zneak/jsx) A Playstation 1 emulator written in Javascript
+- [**45**星][4y] [C] [shadowsocks/iptables](https://github.com/shadowsocks/iptables) iptables is the userspace command line program used to configure the Linux 2.4.x and later packet filtering ruleset. It is targeted towards system administrators.
+- [**45**星][27d] [C++] [avast/pelib](https://github.com/avast/pelib) PE file manipulation library.
+- [**45**星][5y] [Shell] [danielmiessler/iptables](https://github.com/danielmiessler/iptables) An iptables firewall configuration template.
+- [**45**星][20d] [Shell] [soaringswine/lazyrecon_docker](https://github.com/soaringswine/lazyrecon_docker) Containerized version of my fork of Nahamsec's Lazyrecon.
+- [**45**星][10m] [Shell] [ticarpi/my-pentesting-repo](https://github.com/ticarpi/my-pentesting-repo) This is a set of tips and reminders for pentesting processes and scripts/programs. Initially for personal use, but if anyone else finds the reminders useful, then enjoy! A few links for useful tools and files. Some tools written by me.
+- [**45**星][2y] [Go] [onplus/v2ray-sitedat](https://github.com/onplus/v2ray-sitedat)
+- [**45**星][2m] [Py] [k8gege/cve-2019-0604](https://github.com/k8gege/cve-2019-0604) cve-2019-0604 SharePoint RCE exploit
+- [**45**星][4y] [Py] [nims11/hostapd.py](https://github.com/nims11/hostapd.py) Python script to make using and configuring hostapd easier
+- [**45**星][2m] [mpgn/cve-2018-17246](https://github.com/mpgn/cve-2018-17246) CVE-2018-17246 - Kibana LFI < 6.4.3 & 5.6.13
+- [**45**星][29d] [r0x4r/d4rkxss](https://github.com/r0x4r/d4rkxss) A list of useful payloads and Bypass for Web Application Security and Bug Bounty/CTF
+- [**45**星][2y] [feeicn/wsvd](https://github.com/FeeiCN/WSVD) White hat Speaks Vulnerabilities Defence《白帽子讲漏洞防御》
+- [**45**星][3m] [C] [thibault-69/rat-hodin-v2.9](https://github.com/Thibault-69/RAT-Hodin-v2.9) Remote Administration Tool for Linux
+- [**45**星][3y] [C++] [notglop/sysexec](https://github.com/NotGlop/SysExec) [Windows] Local Privilege Escalation - WebClient
+- [**45**星][3y] [Py] [eteissonniere/elidecode](https://github.com/ETeissonniere/EliDecode) The tool to decode obfuscated shellcodes using the unicorn and capstone engine
+- [**45**星][20d] [Assembly] [borjamerino/windows-one-way-stagers](https://github.com/BorjaMerino/Windows-One-Way-Stagers) Windows Stagers to circumvent restrictive network environments
+- [**45**星][3y] [Py] [threatexpress/subshell](https://github.com/threatexpress/subshell) SubShell is a python command shell used to control and execute commands through HTTP requests to a webshell. SubShell acts as the interface to the remote webshells.
+- [**45**星][3d] [Assembly] [drenn1/oracles-disasm](https://github.com/Drenn1/oracles-disasm) Disassembly of Oracle of Ages and Seasons
+- [**45**星][8y] [Py] [zynamics/msdn-plugin-ida](https://github.com/zynamics/msdn-plugin-ida) Imports MSDN documentation into IDA Pro
+- [**45**星][12m] [Py] [zev3n/shodan_so](https://github.com/zev3n/shodan_so) Search Assistant: Searching shodan via API.
+- [**45**星][3y] [C++] [vusec/dangsan](https://github.com/vusec/dangsan) dangsan:检测C/C++编写的程序是否有未释放的内存,防止悬挂指针
+- [**45**星][9d] [Py] [virtadpt/exocortex-halo](https://github.com/virtadpt/exocortex-halo) Various and sundry additional pieces of software I've written to incorporate into my exocortex.
+- [**45**星][6m] [Py] [virink/awd_auto_attack_framework](https://github.com/virink/awd_auto_attack_framework) AWD 自动化攻击框架
+- [**45**星][3y] [vduddu/deepweblinks](https://github.com/vduddu/deepweblinks) A huge dump of deep web links
+- [**45**星][4m] [HTML] [unk9vvn/andtroj](https://github.com/unk9vvn/andtroj) A tool for integrating the Metasploit payload with Android's healthy programs and bypassing antivirus
+- [**45**星][3y] [Py] [tr3jer/incextensivelist](https://github.com/tr3jer/incextensivelist) 从扫描器结果分离出的一些大公司泛解析ip列表
+- [**45**星][5y] [Py] [thomaspatzke/poodleattack](https://github.com/thomaspatzke/poodleattack) PoC implementation of the POODLE attack
+- [**45**星][4y] [C++] [tandasat/remotewritemonitor](https://github.com/tandasat/remotewritemonitor) A tool to help malware analysts tell that the sample is injecting code into other process.
+- [**45**星][4y] [Py] [stasinopoulos/ztexploit](https://github.com/stasinopoulos/ztexploit) ZTE ZXV10 H108L Router with <= V1.0.01_WIND_A01 - Remote root RCE Exploit
+- [**45**星][6m] [C] [sqdwr/hidedriver](https://github.com/sqdwr/hidedriver) 之前那份是7600的,每次编译搞得好麻烦。更新一个VS2017可以直接编译的。
+- [**45**星][11m] [Perl] [spiderlabs/modsecurity-apache](https://github.com/spiderlabs/modsecurity-apache) ModSecurity v3 Apache Connector
+- [**45**星][5y] [Py] [spiderlabs/groupenum](https://github.com/spiderlabs/groupenum)
+- [**45**星][7y] [JS] [sofish/imagexss.js](https://github.com/sofish/imagexss.js) 防止外部链接通过图片进行 XSS 攻击
+- [**45**星][7m] [ObjC] [smilezxlee/zxhookutil](https://github.com/smilezxlee/zxhookutil) 【iOS逆向】Tweak工具函数集,基于theos、monkeyDev
+- [**45**星][1m] [Py] [skoolkid/skoolkit](https://github.com/skoolkid/skoolkit) A suite of tools for creating disassemblies of ZX Spectrum games.
+- [**45**星][20d] [JS] [silverwind/tcpie](https://github.com/silverwind/tcpie) CLI tool to ping any TCP port
+- [**45**星][5m] [Shell] [shiva108/waes](https://github.com/shiva108/waes) CPH:SEC WAES: Web Auto Enum & Scanner - Auto enums website(s) and dumps files as result
+- [**45**星][7y] [C] [shenghe/pcmanager](https://github.com/shenghe/pcmanager) 金山卫士开源代码。同步于Hg源。为了方便查看和学习,同步到Github
+- [**45**星][5y] [JS] [shd101wyy/python_reverse_tcp](https://github.com/shd101wyy/python_reverse_tcp) simple reverse tcp backdoor hack
+- [**45**星][2y] [Py] [seekintoo/chimay-red](https://github.com/seekintoo/chimay-red) Mikrotik RouterOS (6.x < 6.38.5) exploit kit. Reverse engineered from the "Vault 7" WikiLeaks publication.
+- [**45**星][4y] [Py] [secwiki/scaing-backdoor](https://github.com/secwiki/scaing-backdoor) 新一代Webshell扫描工具
+- [**45**星][3y] [Shell] [rumesh986/wifianalyse](https://github.com/rumesh986/wifianalyse) simple bash script to monitor wifi signal and ping time
+- [**45**星][5m] [Ruby] [rootup/autosploit](https://github.com/rootup/autosploit) Autosploit = Automating Metasploit Modules.
+- [**45**星][4y] [C++] [rootkitsmm/ms15-061](https://github.com/rootkitsmm/ms15-061) Exploiting MS15-061 local Privilege escalation
+- [**45**星][2m] [Py] [ritvikb99/dark-fantasy-hack-tool](https://github.com/ritvikb99/dark-fantasy-hack-tool) DDOS Tool: To take down small websites with HTTP FLOOD. Port scanner: To know the open ports of a site. FTP Password Cracker: To hack file system of websites.. Banner Grabber: To get the service or software running on a port. (After knowing the software running google for its vulnerabilities.) Web Spider: For gathering web application hacking in…
+- [**45**星][3y] [C++] [reevesrs24/winmacspoofer](https://github.com/reevesrs24/winmacspoofer) Windows application for spoofing the MAC address
+- [**45**星][1y] [C++] [redogwu/windows_kernel_exploit](https://github.com/redogwu/windows_kernel_exploit) windows kernel exploit
+- [**45**星][12d] [reddelexc/hackerone-reports](https://github.com/reddelexc/hackerone-reports) Top disclosed reports from HackerOne
+- [**45**星][2y] [Ruby] [rapid7/metasploit-aggregator](https://github.com/rapid7/metasploit-aggregator) Created by Jeffrey Martin via the GitHub Connector
+- [**45**星][2d] [radareorg/cutter-plugins](https://github.com/radareorg/cutter-plugins) A curated list of Community Plugins and Scripts written for Cutter
+- [**45**星][1y] [Shell] [qiang-yu/shadowsocksvpn-openwrt](https://github.com/qiang-yu/shadowsocksvpn-openwrt) Shadowsocks-libev-full for OpenWrt
+- [**45**星][2y] [CSS] [pure-l0g1c/apex](https://github.com/pure-l0g1c/apex) Using Social Engineering To Obtain WiFi Passwords
+- [**45**星][7m] [Rust] [ps1dr3x/lachesis](https://github.com/ps1dr3x/lachesis)
+- [**45**星][2y] [Java] [portswigger/httpoxy-scanner](https://github.com/portswigger/httpoxy-scanner) A Burp Suite extension that checks for the HTTPoxy vulnerability.
+- [**45**星][10m] [Py] [platypew/digispark-duckduino](https://github.com/platypew/digispark-duckduino) Poor man's rubber ducky
+- [**45**星][9m] [JS] [phantom0301/pteye](https://github.com/phantom0301/pteye) Phantom eye——A passive business logic vulnerability auditing tool
+- [**45**星][3y] [orangetw/bug-bounty-reference](https://github.com/orangetw/bug-bounty-reference) Inspired by
+- [**45**星][6y] [Py] [obscuresec/random](https://github.com/obscuresec/random) Scripts that aren't PowerShell
+- [**45**星][2m] [nullsecuritynet/papers](https://github.com/nullsecuritynet/papers) Papers about known hacking, security, hardware, software, computer, network and other ressources.
+- [**45**星][11m] [Py] [nowsecure/r2lldb](https://github.com/nowsecure/r2lldb) radare2-lldb integration
+- [**45**星][4m] [JS] [nowsecure/frida-trace](https://github.com/nowsecure/frida-trace) Trace APIs declaratively through Frida.
+- [**45**星][3y] [C#] [nccgroup/ransomware-simulator](https://github.com/nccgroup/ransomware-simulator) NCC Group Ransomware Simulator
+- [**45**星][2y] [C++] [nccgroup/psr](https://github.com/nccgroup/psr) Pointer Sequence Reverser - enable you to see how Windows C++ application is accessing a particular data member or object.
+- [**45**星][6y] [Perl] [nccgroup/ip-reputation-snort-rule-generator](https://github.com/nccgroup/ip-reputation-snort-rule-generator) A tool to generate Snort rules based on public IP reputation data
+- [**45**星][6y] [nccgroup/frisbeelite](https://github.com/nccgroup/frisbeelite) A GUI-based USB device fuzzer
+- [**45**星][9m] [C++] [ncatlin/exilesniffer](https://github.com/ncatlin/exilesniffer) A protocol decryption and dissection tool for the game 'Path of Exile'
+- [**45**星][2y] [Py] [mthbernardes/fses](https://github.com/mthbernardes/fses) fses:从搜索引擎中爬取 url
+- [**45**星][5y] [Java] [monstersb/hijackandroidpoweroff](https://github.com/monstersb/hijackandroidpoweroff) Android hijack power off
+- [**45**星][2y] [Py] [monrocoury/admin-panel-finder](https://github.com/monrocoury/admin-panel-finder) A powerful admin login page finder in python
+- [**45**星][5m] [Py] [misp/mail_to_misp](https://github.com/misp/mail_to_misp) Connect your mail client/infrastructure to MISP in order to create events based on the information contained within mails.
+- [**45**星][5m] [PS] [miladmsft/threathunt](https://github.com/miladmsft/threathunt) ThreatHunt is a PowerShell repository that allows you to train your threat hunting skills.
+- [**45**星][1y] [Py] [maoqyhz/droidcc](https://github.com/maoqyhz/droidcc) Android malware detection using deep learning, contains android malware samples, papers, tools etc.
+- [**45**星][2y] [Go] [luc10/struts-rce-cve-2017-9805](https://github.com/luc10/struts-rce-cve-2017-9805) Apache Struts CVE 2017-9805 漏洞利用代码(Go语言)
+- [**45**星][3m] [C] [linaro-swg/optee_examples](https://github.com/linaro-swg/optee_examples) OP-TEE Sample Applications
+- [**45**星][21d] [C] [limithit/ngx_dynamic_limit_req_module](https://github.com/limithit/ngx_dynamic_limit_req_module) The ngx_dynamic_limit_req_module module is used to dynamically lock IP and release it periodically.
+- [**45**星][2y] [lcatro/think-in-security](https://github.com/lcatro/think-in-security) 从二进制到WEB ,分享我在安全路上的思考与点滴,后面会不断地更新..
+- [**45**星][1y] [Py] [l4ys/idasignsrch](https://github.com/l4ys/idasignsrch) 签名搜索
+- [**45**星][5y] [Py] [kyrus/ida-translator](https://github.com/kyrus/ida-translator) 将IDB数据库中的任意字符集转换为Unicode,然后自动调用基于网页的翻译服务(当前只有谷歌翻译)将非英文语言翻译为英文
+- [**45**星][3m] [Java] [kxcode/jndi-exploit-bypass-demo](https://github.com/kxcode/jndi-exploit-bypass-demo) Demo code for post
+- [**45**星][2y] [Py] [kukfa/bindbg](https://github.com/kukfa/bindbg) Binary Ninja插件, 将Windbg的静态/动态调试同步至Binary Ninja
+- [**45**星][3m] [C] [knnspeed/simple-uefi-bootloader](https://github.com/knnspeed/simple-uefi-bootloader) A UEFI bootloader for bare-metal x86-64 applications, including a minimal cross-platform UEFI development environment
+- [**45**星][7d] [TSQL] [kacos2000/windowstimeline](https://github.com/kacos2000/windowstimeline) SQLite query & Powershell scripts to parse the Windows 10 (v1803+) ActivitiesCache.db
+- [**45**星][4m] [Shell] [juxhindb/oob-server](https://github.com/juxhindb/oob-server) A Bind9 server for pentesters to use for Out-of-Band vulnerabilities
+- [**45**星][11m] [Py] [jevinskie/emusca](https://github.com/jevinskie/emusca) Power trace simulator using Unicorn Engine for side channel analysis attack testing
+- [**45**星][9m] [C] [jay/gethooks](https://github.com/jay/gethooks) GetHooks is a program designed for the passive detection and monitoring of hooks from a limited user account.
+- [**45**星][4y] [PS] [invoke-ir/wmievent](https://github.com/invoke-ir/wmievent) A PowerShell module to abstract the complexities of Permanent WMI Event Subscriptions
+- [**45**星][10m] [C] [ilammy/ftrace-hook](https://github.com/ilammy/ftrace-hook) Using ftrace for function hooking in Linux kernel
+- [**45**星][5y] [Java] [ikkisoft/parrotng](https://github.com/ikkisoft/parrotng) ParrotNG is a tool capable of identifying Adobe Flex applications (SWF) vulnerable to CVE-2011-2461
+- [**45**星][6y] [C++] [igororlov/trafficlight](https://github.com/igororlov/trafficlight) Detection of traffic lights and driving on red light.
+- [**45**星][28d] [Py] [hvqzao/report-ng](https://github.com/hvqzao/report-ng) Generate MS Word template-based reports with HP WebInspect / Burp Suite Pro input, own custom data and knowledge base.
+- [**45**星][2y] [Py] [hansesecure/metasploit-modules](https://github.com/hansesecure/metasploit-modules)
+- [**45**星][2y] [Ruby] [hammackj/uirusu](https://github.com/hammackj/uirusu) A rubygem for interacting with Virustotal.com's public API v2
+- [**45**星][8m] [C] [groupgets/purethermal1-firmware](https://github.com/groupgets/purethermal1-firmware) Reference firmware for PureThermal 1 FLIR Lepton Dev Kit
+- [**45**星][1y] [Dockerfile] [gradiuscypher/grids](https://github.com/gradiuscypher/grids) My network monitoring solution and tools that go along with it.
+- [**45**星][2y] [PS] [golem445/bunny_payloads](https://github.com/golem445/bunny_payloads) Bash Bunny fun!
+- [**45**星][2m] [Py] [gojek/dollhouse](https://github.com/gojek/dollhouse)
+- [**45**星][2y] [C] [geosn0w/ios-10.1.1-project-0-exploit-fork](https://github.com/geosn0w/ios-10.1.1-project-0-exploit-fork) iOS 10.1.1 Project 0 Exploit Compatible with All arm64 devices for Jailbreak Development
+- [**45**星][3y] [C] [gentilkiwi/basic_rpc](https://github.com/gentilkiwi/basic_rpc) Samples about Microsoft RPC and native API calls in Windows C
+- [**45**星][4y] [TeX] [gannimo/maldiv](https://github.com/gannimo/maldiv) Malware diversity
+- [**45**星][2y] [Py] [g4lb1t/smoothcriminal](https://github.com/g4lb1t/smoothcriminal) SmoothCriminal:利用鼠标移动速度,检测沙箱
+- [**45**星][2y] [Py] [fvrmatteo/dmnp](https://github.com/fvrmatteo/dmnp) Resources of the "Dissecting mobile native code packers. A case study." Zimperium's blogpost.
+- [**45**星][1y] [c] [f0rb1dd3n/papers](https://github.com/f0rb1dd3n/papers) Some papers and talks that I have done
+- [**45**星][3y] [Py] [evi1clay/coolpool](https://github.com/evi1clay/coolpool) 仓库已经废弃,新仓库地址
+- [**45**星][4y] [Py] [equ1nox/srop-poc](https://github.com/equ1nox/srop-poc)
+- [**45**星][2d] [Py] [entynetproject/geospy](https://github.com/entynetproject/geospy) Geolocation Spy (GeoSpy) is an OSINT analysis and research tool, which allows people to track and execute intelligent social engineering attacks in real time. It was created with the aim of teaching the world how large Internet companies could obtain confidential information such as the status of sessions of their websites or services and contro…
+- [**45**星][3y] [C] [enferex/asrepl](https://github.com/enferex/asrepl) asrepl: x86-64 assembly REPL
+- [**45**星][9m] [syst3ma/awesome-baseband-research](https://github.com/syst3ma/awesome-baseband-research) A curated list of awesome baseband research resources
+- [**45**星][4y] [C++] [diocles/apt-transport-tor](https://github.com/diocles/apt-transport-tor) Tor support for apt
+- [**45**星][6y] [Java] [devadvance/rootcloakplus](https://github.com/devadvance/rootcloakplus)
+- [**45**星][2y] [JS] [davidstutz/password-score](https://github.com/davidstutz/password-score) Password scoring library written in Javascript.
+- [**45**星][8m] [Py] [databricks/mlflow](https://github.com/databricks/mlflow) Open source platform for the machine learning lifecycle
+- [**45**星][6y] [JS] [cyberpython/wifiscanandmap](https://github.com/cyberpython/wifiscanandmap) A Linux Python application to create maps of 802.11 networks
+- [**45**星][8m] [C] [cossacklabs/hermes-core](https://github.com/cossacklabs/hermes-core) Security framework for building multi-user end-to-end encrypted data storage and sharing/processing with zero leakage risks from storage and transport infrastructure.
+- [**45**星][2y] [codemaxx/binary-exploitation](https://github.com/codemaxx/binary-exploitation) Good to know, easy to forget information about binaries and their exploitation!
+- [**45**星][4y] [Py] [cdhigh/forwarder](https://github.com/cdhigh/forwarder) 简单的HTTP请求转发服务器,配合KIndleEar翻入墙内或绕过部分网站对GAE的IP地址的封锁。灵感来自
+- [**45**星][7y] [Py] [carlosgprado/milf](https://github.com/carlosgprado/milf) IDA瑞士军刀
+ - [milf](https://github.com/carlosgprado/MILF/blob/master/milf.py) 辅助漏洞挖掘
+- [**45**星][4y] [Go] [carloop/simulator-program](https://github.com/carloop/simulator-program) Software for the CAN bus simulator on the Rasperry Pi
+- [**45**星][2y] [Go] [c-bata/systracer](https://github.com/c-bata/systracer) Linux/x86 系统调用追踪, Go语言实现
+- [**45**星][3m] [blackint3/awesome-debugging](https://github.com/blackint3/awesome-debugging) Why Debugging?(为什么要调试?)
+- [**45**星][9m] [Py] [binaryanalysisplatform/bap-tutorial](https://github.com/binaryanalysisplatform/bap-tutorial) The BAP tutorial
+- [**45**星][1m] [Py] [bbva/apicheck](https://github.com/bbva/apicheck) The DevSecOps toolset for REST APIs
+- [**45**星][1y] [C] [bazad/xpc-string-leak](https://github.com/bazad/xpc-string-leak) CVE-2018-4248: Out-of-bounds read in libxpc during string serialization.
+- [**45**星][1y] [C] [bazad/launchd-portrep](https://github.com/bazad/launchd-portrep) macOS 10.13.5 Mach端口替换漏洞, 可导致提权和SIP绕过(CVE-2018-4280)
+- [**45**星][10m] [Java] [veracode-research/actuator-testbed](https://github.com/veracode-research/actuator-testbed) A vulnerable application exposing Spring Boot Actuators
+- [**45**星][27d] [Py] [anvilventures/dawgmon](https://github.com/anvilventures/dawgmon) dawg the hallway monitor - monitor operating system changes and analyze introduced attack surface when installing software
+- [**45**星][2y] [Py] [anssi-fr/bits_parser](https://github.com/anssi-fr/bits_parser) Extract BITS jobs from QMGR queue and store them as CSV records
+- [**45**星][9m] [anhkgg/awesome-windbg-extensions](https://github.com/anhkgg/awesome-windbg-extensions) awesome windbg extensions
+- [**45**星][14d] [Py] [andreafioraldi/cve_searchsploit](https://github.com/andreafioraldi/cve_searchsploit) Search an exploit in the local exploitdb database by its CVE
+- [**45**星][1y] [C++] [alphaseclab/anti-debug](https://github.com/alphaseclab/anti-debug)
+- [**45**星][4m] [Py] [aencode/elf_analysis](https://github.com/aencode/elf_analysis) Perform Static and dynamic analysis on 32 bit ELF binary, and automate the process of stack based overflow exploitation.
+- [**45**星][2y] [Pascal] [0x48piraj/malwarex](https://github.com/0x48piraj/malwarex) Collection of killers !
+- [**45**星][1y] [Py] [04x/instagramcracker](https://github.com/04x/instagramcracker) Full Speed Instagram Cracker
+- [**45**星][2y] [001spartan/csfm](https://github.com/001spartan/csfm) Cobalt Strike Field Manual - A quick reference for Windows commands that can be accessed in a beacon console.
+- [**44**星][2y] [C++] [uxmal/nucleus](https://github.com/uxmal/nucleus) Clone of "Compiler-Agnostic Function Detection in Binaries" source code
+- [**44**星][5m] [TS] [igio90/hooah-trace](https://github.com/igio90/hooah-trace) Instructions tracing powered by frida
+- [**44**星][4y] [Py] [enablesecurity/tftptheft](https://github.com/enablesecurity/tftptheft) TFTP Theft is a tool which allows one to quickly scan/bruteforce a tftp server for files and download them instantly
+- [**44**星][5y] [ObjC] [project-imas/passcode-check](https://github.com/project-imas/passcode-check) iMAS pascode-check, set passcode config profiles and check for conformance
+- [**44**星][2y] [PHP] [nkkollaw/reserved-subdomains](https://github.com/nkkollaw/reserved-subdomains) List of subdomains that could be candidates for reservation in multitenant app/ subdomain validator for multitenant apps
+- [**44**星][2y] [Py] [twtrubiks/csrf-tutorial](https://github.com/twtrubiks/csrf-tutorial) Use Django To Introduce CSRF and Cookies , Session
+- [**44**星][30d] [appsecco/defcon-26-workshop-attacking-and-auditing-docker-containers](https://github.com/appsecco/defcon-26-workshop-attacking-and-auditing-docker-containers) DEF CON 26 Workshop - Attacking & Auditing Docker Containers Using Open Source
+- [**44**星][3y] [shmilylty/nmap-reference-guide](https://github.com/shmilylty/Nmap-Reference-Guide) Nmap Reference Guide(Nmap参考指南)
+- [**44**星][2y] [C++] [newbee119/deceptive-document](https://github.com/NewBee119/Deceptive-document) 通过在U盘中伪装正常文件,欺骗用户点击,传播木马的一个demo程序~just for fun~
+- [**44**星][3y] [JS] [bivainis/ng6-starter-sass](https://github.com/bivainis/NG6-starter-sass) An AngularJS Starter repo for Angular + ES6 + (Webpack or JSPM) by
+- [**44**星][1y] [Py] [chiefychief/dlink_shell_poc](https://github.com/ChiefyChief/dlink_shell_poc) Dlink 615/815 shell PoC
+- [**44**星][10m] [Py] [expliot_framework/expliot](https://gitlab.com/expliot_framework/expliot)
+- [**44**星][2y] [Py] [zedshaw/zadm4py](https://github.com/zedshaw/zadm4py) Zed's Awesome Debug Macros for Python
+- [**44**星][3y] [JS] [yinzhixin/scanner](https://github.com/yinzhixin/scanner) 网站漏洞扫描平台
+- [**44**星][5y] [Py] [x0day/bannerscan](https://github.com/x0day/bannerscan)
+- [**44**星][30d] [C++] [wopss/renhook](https://github.com/wopss/renhook) An open-source x86 / x86-64 hooking library for Windows.
+- [**44**星][3m] [C] [wongsyrone/transocks-wong](https://github.com/wongsyrone/transocks-wong) A redsocks-like transparent IPv4/IPv6 TCP-to-SOCKS5 redirector (for Linux only)
+- [**44**星][2y] [Py] [wizh/rop-chainer](https://github.com/wizh/rop-chainer) static program analysis tool that generates return-oriented exploits for ELF binaries
+- [**44**星][5y] [Lua] [wenjun1055/httpguard](https://github.com/wenjun1055/httpguard) prevent cc attack
+- [**44**星][3y] [Shell] [vtky/resign](https://github.com/vtky/resign) XCode Project to resign .ipa files
+- [**44**星][5y] [C] [vincentbernat/ssl-dos](https://github.com/vincentbernat/ssl-dos) Various tools related to SSL denial of service
+- [**44**星][3y] [Py] [tribalchicken/volatility-filevault2](https://github.com/tribalchicken/volatility-filevault2) Volatility plugin to extract FileVault 2 VMK's
+- [**44**星][2y] [C#] [tkyu/shadowsocks-csharp-mod](https://github.com/tkyu/shadowsocks-csharp-mod) Shadowsocks for Windows
+- [**44**星][6m] [thomasthelen/ollydbg-scripts](https://github.com/thomasthelen/ollydbg-scripts) Unpacking scripts for Ollydbg.
+- [**44**星][3y] [HTML] [theori-io/jscript9-typedarray](https://github.com/theori-io/jscript9-typedarray) Proof-of-Concept exploit for jscript9 bug (MS16-063)
+- [**44**星][6m] [Py] [tengzhangchao/pyshell](https://github.com/tengzhangchao/pyshell) python backdoor (后门程序)
+- [**44**星][2d] [stamparm/blackbook](https://github.com/stamparm/blackbook) Blackbook of malware domains
+- [**44**星][8m] [C] [sslab-gatech/perf-fuzz](https://github.com/sslab-gatech/perf-fuzz)
+- [**44**星][3m] [JS] [sinakarvandi/windbg2ida](https://github.com/sinakarvandi/windbg2ida) 在IDA中显示Windbg调试的每个步骤
+ - [Windbg脚本](https://github.com/sinakarvandi/windbg2ida/blob/master/windbg2ida.js) JavaScript
+ - [IDA脚本](https://github.com/sinakarvandi/windbg2ida/blob/master/IDAScript.py)
+- [**44**星][3y] [Shell] [shotokanzh/pa-th-zuzu](https://github.com/shotokanzh/pa-th-zuzu) Checks for PATH substitution vulnerabilities and logs the commands executed by the vulnerable executables
+- [**44**星][11m] [Py] [serain/kubelet-anon-rce](https://github.com/serain/kubelet-anon-rce) Executes commands in a container on a kubelet endpoint that allows anonymous authentication (default)
+- [**44**星][2y] [JS] [sensepost/wsproxy](https://github.com/sensepost/wsproxy) A websocket proxy
+- [**44**星][5y] [securitytube/pcap2xml](https://github.com/securitytube/pcap2xml) Convert 802.11 Packet Traces to XML and SQLITE Format
+- [**44**星][2m] [Shell] [security-onion-solutions/securityonion-saltstack](https://github.com/security-onion-solutions/securityonion-saltstack)
+- [**44**星][4y] [Py] [scy-phy/scapy-cip-enip](https://github.com/scy-phy/scapy-cip-enip) EtherNet/IP+CIP dissector for Scapy
+- [**44**星][26d] [Py] [scwuaptx/peda](https://github.com/scwuaptx/peda) PEDA - Python Exploit Development Assistance for GDB
+- [**44**星][19d] [Py] [sanix-darker/brute-force-login](https://github.com/sanix-darker/brute-force-login) Brute Force Login in a web site with Python, hack accounts on any website with a good dictionary of words
+- [**44**星][4y] [C] [samdmarshall/machodiff](https://github.com/samdmarshall/machodiff) mach-o diffing tool
+- [**44**星][5y] [C] [rpaleari/qtrace](https://github.com/rpaleari/qtrace) QTrace, a "zero knowledge" system call tracer
+- [**44**星][6y] [IDL] [riverloopsec/apimote](https://github.com/riverloopsec/apimote) ApiMote IEEE 802.15.4/ZigBee Sniffing Hardware
+- [**44**星][1y] [puuoi/ss-r-4in1](https://github.com/puuoi/ss-r-4in1) 由于秋水逸冰网站国内无法访问,所以为有需要的朋友复制发布到github
+- [**44**星][4y] [PHP] [pupi1985/marfil](https://github.com/pupi1985/marfil) Marfil is an extension of the Aircrack-ng suite, used to assess WiFi network security. It allows to split the work of performing long running dictionary attacks among many computers.
+- [**44**星][3y] [C++] [pstolarz/dumpext](https://github.com/pstolarz/dumpext) WinDbg debugger extension library providing various tools to analyse, dump and fix (restore) Microsoft Portable Executable files for both 32 (PE) and 64-bit (PE+) platforms.
+- [**44**星][10m] [Java] [portswigger/json-web-token-attacker](https://github.com/portswigger/json-web-token-attacker)
+- [**44**星][3y] [Perl] [philsmd/itunes_backup2hashcat](https://github.com/philsmd/itunes_backup2hashcat) Extract the information needed from the Manifest.plist files to convert it to hashes compatible with hashcat
+- [**44**星][1y] [C] [petabi/sniffles](https://github.com/petabi/sniffles) Packet Capture Generator for IDS and Regular Expression Evaluation
+- [**44**星][1y] [Ruby] [pentestgeek/burpcommander](https://github.com/pentestgeek/burpcommander) Ruby command-line interface to Burp Suite's REST API
+- [**44**星][3y] [HTML] [pcchou/ctf-writeups](https://github.com/pcchou/ctf-writeups) 練習解題跟練習寫 writeups 的地方(?
+- [**44**星][4m] [Java] [opencryptoproject/jcmathlib](https://github.com/opencryptoproject/jcmathlib) Implementation of mathematical operations with big numbers and elliptic curve points for smart cards with JavaCard platform.
+- [**44**星][1y] [Py] [olipratt/swagger-conformance](https://github.com/olipratt/swagger-conformance) Python based tool for testing whether your API conforms to its Swagger schema
+- [**44**星][7y] [JS] [oguzy/ovizart](https://github.com/oguzy/ovizart)
+- [**44**星][2y] [Py] [nullbites/snakeeater](https://github.com/nullbites/snakeeater) Python implementation of the reflective SO injection technique
+- [**44**星][1y] [C] [ntraiseharderror/anti-delete](https://github.com/ntraiseharderror/anti-delete) Protects deletion of files with a specified extension using a kernel-mode driver.
+- [**44**星][11m] [Lua] [nozominetworks/tricotools](https://github.com/nozominetworks/tricotools) Triconex TriStation utilities and tools
+- [**44**星][2y] [Go] [nicholasjackson/cnitch](https://github.com/nicholasjackson/cnitch) Container Snitch checks running processes under the Docker Engine and alerts if any are found to be running as root
+- [**44**星][2y] [C#] [mythicmaniac/keyboard-minigames](https://github.com/mythicmaniac/keyboard-minigames) A snake game for the corsair RGB keyboards
+- [**44**星][3y] [Shell] [mueller-ma/block-ads-via-dns](https://github.com/mueller-ma/block-ads-via-dns) Block ads and malware via local DNS server
+- [**44**星][4m] [HTML] [mrluanma/shadowsocks-websocket-python](https://github.com/mrluanma/shadowsocks-websocket-python) shadowsocks over WebSocket, support Heroku.
+- [**44**星][10m] [Py] [misp/misp-stix-converter](https://github.com/misp/misp-stix-converter) A utility repo to assist with converting between MISP and STIX formats
+- [**44**星][2y] [Py] [milo2012/nmap2nessus](https://github.com/milo2012/nmap2nessus)
+- [**44**星][7y] [Shell] [metricsgrimoire/cmetrics](https://github.com/metricsgrimoire/cmetrics) CMetrics measures size and complexity for C files
+- [**44**星][11m] [PS] [mattifestation/bcd](https://github.com/mattifestation/bcd) BCD is a module to interact with boot configuration data (BCD) either locally or remotely using the ROOT/WMI:Bcd* WMI classes. The functionality of the functions in this module mirror that of bcdedit.exe.
+- [**44**星][1m] [TSQL] [leveryd/vulndocker](https://github.com/leveryd/vulndocker) 漏洞靶场平台
+- [**44**星][3y] [PS] [lazywinadmin/winformps](https://github.com/lazywinadmin/winformps) PowerShell functions for Windows Forms controls
+- [**44**星][4m] [Py] [laincode/shodan-seeker](https://github.com/laincode/shodan-seeker) Command-line tool using Shodan API. Generates and downloads CSV results, diffing of historic scanning results, alerts and monitoring of specific ports/IPs, etc.
+- [**44**星][3y] [C] [kudelskisecurity/sgx-reencrypt](https://github.com/kudelskisecurity/sgx-reencrypt) PoC of an SGX enclave performing symmetric reencryption
+- [**44**星][2y] [Py] [kudelskisecurity/eddsa-fault-attack](https://github.com/kudelskisecurity/eddsa-fault-attack) Fault attack agaisnt EdDSA demonstrated on an Arduino Nano board, allowing for partial key recovery and fake signatures.
+- [**44**星][6m] [C] [junxzm1990/pomp](https://github.com/junxzm1990/pomp) 在 Linux 系统上开发 POMP 系统,分析崩溃后的 artifacts
+- [**44**星][5m] [C#] [jnqpblc/sharptask](https://github.com/jnqpblc/sharptask) SharpTask is a simple code set to interact with the Task Scheduler service api and is compatible with Cobalt Strike.
+- [**44**星][30d] [Java] [jenkinsci/zap-plugin](https://github.com/jenkinsci/zap-plugin) The OWASP ZAP Jenkins Plugin extends the functionality of the ZAP security tool into a CI Environment.
+- [**44**星][3y] [Py] [jbremer/pyasm2](https://github.com/jbremer/pyasm2) An easy and powerful assembler engine in python.
+- [**44**星][2y] [Ruby] [j-0-t/staekka](https://github.com/j-0-t/staekka) Stækka Metasploit - Extenting Metasploit
+- [**44**星][7d] [Rust] [ironcorelabs/recrypt-rs](https://github.com/ironcorelabs/recrypt-rs) A set of cryptographic primitives for building a multi-hop Proxy Re-encryption scheme, known as Transform Encryption.
+- [**44**星][8m] [C#] [im0qianqian/codeforceseduhacking](https://github.com/im0qianqian/codeforceseduhacking)
+- [**44**星][2y] [Py] [illusivenetworks-labs/historicprocesstree](https://github.com/illusivenetworks-labs/historicprocesstree) An Incident Response tool that visualizes historic process execution evidence (based on Event ID 4688 - Process Creation Event) in a tree view.
+- [**44**星][2y] [Py] [ikoz/jdwp-lib-injector](https://github.com/ikoz/jdwp-lib-injector)
+- [**44**星][5m] [Jupyter Notebook] [httparchive/bigquery](https://github.com/httparchive/bigquery) BigQuery import and processing pipelines
+- [**44**星][3y] [PS] [harmj0y/encryptedstore](https://github.com/harmj0y/encryptedstore) Offensive Data Storage
+- [**44**星][19d] [Perl] [hackerdom/checksystem](https://github.com/hackerdom/checksystem) Checksystem for attack-defense CTF
+- [**44**星][2y] [Py] [grayddq/pubilcassetinfo](https://github.com/grayddq/pubilcassetinfo) 以甲方安全人员的视角,尽可能收集发现企业的域名和服务器公网IP资产
+- [**44**星][8m] [Py] [githacktools/ftpbruter](https://github.com/githacktools/ftpbruter) A FTP Server brute forcing tool written in Python 3
+- [**44**星][2y] [Haskell] [giovanifss/dumb](https://github.com/giovanifss/dumb) Dumain Bruteforcer - a fast and flexible domain bruteforcer
+- [**44**星][4m] [Lua] [fsiamp/rhapis](https://github.com/fsiamp/rhapis) rhapis:网络入侵检测系统(IDS)模拟器。用户可在模拟环境中执行任意 IDS 操作
+- [**44**星][7y] [Perl] [fnord0/hurl](https://github.com/fnord0/hurl) hexadecimal & URL encoder + decoder
+- [**44**星][6m] [Py] [firmadyne/scraper](https://github.com/firmadyne/scraper) Firmware scraper
+- [**44**星][2y] [C] [fail0verflow/switch-u-boot](https://github.com/fail0verflow/switch-u-boot) "Das U-Boot" Source Tree for the Switch
+- [**44**星][2y] [Py] [erpscanteam/cve-2018-2380](https://github.com/erpscanteam/cve-2018-2380) PoC of Remote Command Execution via Log injection on SAP NetWeaver AS JAVA CRM
+- [**44**星][2d] [Py] [entynetproject/arissploit](https://github.com/entynetproject/arissploit) Arissploit Framework is a simple framework designed to master penetration testing tools. Arissploit Framework offers simple structure, basic CLI, and useful features for learning and developing penetration testing tools.
+- [**44**星][1y] [C#] [enkomio/rundotnetdll](https://github.com/enkomio/rundotnetdll) A simple utility to list all methods of a given .NET Assembly and to invoke them
+- [**44**星][1y] [Py] [ecx86/shellcode_encoder](https://github.com/ecx86/shellcode_encoder) x64 printable shellcode encoder
+- [**44**星][10m] [Go] [dsopas/h1-search](https://github.com/dsopas/h1-search) Tool that will request the public disclosures on a specific HackerOne program and show them in a localhost webserver.
+- [**44**星][7m] [Ruby] [dev-sec/ssl-baseline](https://github.com/dev-sec/ssl-baseline) DevSec SSL/TLS Baseline - InSpec Profile
+- [**44**星][2y] [Py] [depthsecurity/haveibeenharvested](https://github.com/depthsecurity/haveibeenharvested) Automated HaveIbeenPwned lookups using theharvester results
+- [**44**星][6m] [Erlang] [darkkey/erlamsa](https://github.com/darkkey/erlamsa) Erlang port of famous radamsa fuzzzer.
+- [**44**星][4y] [Py] [danse-macabre/ida-efitools](https://github.com/danse-macabre/ida-efitools) 辅助逆向ELF文件
+- [**44**星][2y] [Py] [coolervoid/vision2](https://github.com/coolervoid/vision2) Nmap's XML result parse and NVD's CPE correlation to search CVE.
+- [**44**星][6m] [Py] [contrast-security-oss/djangoat](https://github.com/contrast-security-oss/djangoat) Python and Django implementation of the OWASP RailsGoat project
+- [**44**星][1y] [C++] [coltonon/reghookex](https://github.com/coltonon/reghookex) External mid-function hooking method to retrieve register data
+- [**44**星][11m] [Scala] [ccied/ugforum-analysis](https://github.com/ccied/ugforum-analysis) Tools for Automated Analysis of Cybercriminal Markets
+- [**44**星][1y] [bugbountyresources/resources](https://github.com/bugbountyresources/resources) A Storehouse of resources related to Bug Bounty Hunting collected from different sources. Watch and Star this repo for all latest guides, tools, methodology, platforms tips, and tricks curated by us.
+- [**44**星][1y] [JS] [brangerbriz/wifi-data-safari](https://github.com/brangerbriz/wifi-data-safari) WiFi Data Safari Workshop
+- [**44**星][6m] [Py] [bitthebyte/bitblinder](https://github.com/bitthebyte/bitblinder) Burp extension helps in finding blind xss vulnerabilities
+- [**44**星][4m] [Py] [bieberg0n/bjdns](https://github.com/bieberg0n/bjdns) A dns server which can protect yourself against DNS poisoning in China. / 抗污染 带缓存的dns服务器
+- [**44**星][1m] [PS] [azure/health-data-and-ai-blueprint](https://github.com/azure/health-data-and-ai-blueprint) Azure Security and Compliance Blueprint - HIPAA/HITRUST Health Data and AI - deployment, and demo that Predicts the Length of Stay in Hospitals
+- [**44**星][2y] [PS] [attackdebris/babel-sf](https://github.com/attackdebris/babel-sf) Babel Scripting Framework
+- [**44**星][11m] [Go] [armanshan12/rkms](https://github.com/armanshan12/rkms) RKMS is a highly available key management service, built on top of AWS's KMS.
+- [**44**星][11m] [C#] [andychiare/netcore2-reverse-proxy](https://github.com/andychiare/netcore2-reverse-proxy) An example of how to implement a reverse proxy in .NET Core 2
+- [**44**星][5y] [Py] [andrew-morris/kippo_detect](https://github.com/andrew-morris/kippo_detect) Quick proof of concept to detect a Kippo SSH honeypot instance externally
+- [**44**星][1y] [Py] [ambionics/prestashop-exploits](https://github.com/ambionics/prestashop-exploits) Collection of exploits/POC for PrestaShop cookie vulnerabilities (CVE-2018-13784)
+- [**44**星][2y] [C#] [amarkulo/openpasswordfilter](https://github.com/amarkulo/openpasswordfilter) An open source custom password filter DLL and userspace service to better protect / control Active Directory domain passwords.
+- [**44**星][3y] [Py] [allyshka/vhostbrute](https://github.com/allyshka/vhostbrute) Virtual host bruteforcer
+- [**44**星][1y] [akayn/vault](https://github.com/akayn/resources) Old Code.... and a never-ending reading list.
+- [**44**星][3y] [Py] [aikinogard/5th_place_solution_facebook_check_ins](https://github.com/aikinogard/5th_place_solution_facebook_check_ins) My solution rank 5th/1212 in Facebook check ins prediction competition at Kaggle
+- [**44**星][2y] [C] [aerosoul94/dynlib](https://github.com/aerosoul94/dynlib) 辅助PS4用户模式ELF逆向
+- [**44**星][2m] [HTML] [advanced-threat-research/iocs](https://github.com/advanced-threat-research/iocs) Repository containing IOCs, CSV and MISP JSON from our blogs
+- [**44**星][6m] [HTML] [adrecon/adrecon](https://github.com/adrecon/adrecon) ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment.
+- [**44**星][9m] [JS] [adguardteam/stealthmode](https://github.com/adguardteam/stealthmode) a browser extension to stop all kinds of online trackers from receiving any information about you and your actions on the Internet
+- [**44**星][2y] [Py] [649/memfixed-mitigation-tool](https://github.com/649/memfixed-mitigation-tool) DDoS mitigation tool for sending flush or shutdown commands to vulnerable Memcached servers obtained using Shodan API
+- [**44**星][1y] [Py] [649/apache-struts-shodan-exploit](https://github.com/649/apache-struts-shodan-exploit) This tool takes advantage of CVE-2018-11776 and Shodan to perform mass exploitation of verified and vulnerable Apache Struts servers.
+- [**44**星][2y] [Py] [5alt/emu](https://github.com/5alt/emu) code emulator base on unicorn engine
+- [**44**星][1y] [PHP] [4k-developer/4k-botnet](https://github.com/4k-developer/4k-botnet) A simple and easy to use JS Botnet
+- [**44**星][2y] [PS] [3gstudent/windows-user-clone](https://github.com/3gstudent/windows-user-clone) Create a hidden account
+- [**44**星][2y] [PS] [3gstudent/dump-clear-password-after-kb2871997-installed](https://github.com/3gstudent/dump-clear-password-after-kb2871997-installed)
+- [**44**星][8m] [Py] [0x4d31/honeyku](https://github.com/0x4d31/honeyku) A Heroku-based web honeypot that can be used to create and monitor fake HTTP endpoints (i.e. honeytokens).
+- [**43**星][1y] [C++] [grcasanova/badusb](https://github.com/grcasanova/badusb) Personal implementation of the BadUSB exploit with an Atmel 8-bit AVR ATTiny85 acting as a HID keyboard
+- [**43**星][7y] [Shell] [jseidl/torblock](https://github.com/jseidl/torblock) TORBlock is a BASH script to automatically download the list of TOR exit-nodes and add them to your IPTables ruleset.
+- [**43**星][8y] [C] [hellman/shtest](https://github.com/hellman/shtest) Simple shellcode testing tool.
+- [**43**星][7m] [Py] [s0md3v/locky](https://github.com/s0md3v/locky) Locky generates "really" strong yet easy to remember passwords.
+- [**43**星][2d] [Py] [rocky/python-decompile3](https://github.com/rocky/python-decompile3) Python decompiler for 3.7+. Stripped down from uncompyle6 so we can refactor and fix up some long-standing problems
+- [**43**星][3y] [Go] [madeye/obfs4-tunnel](https://github.com/madeye/obfs4-tunnel) obfs4 tunnel
+- [**43**星][2m] [JS] [pwnlandia/mhn-splunk](https://github.com/pwnlandia/mhn-splunk) Modern Honey Network App for Splunk
+- [**43**星][2y] [Py] [warner/python-spake2](https://github.com/warner/python-spake2) pure-python implementation of the SPAKE2 Password-Authenticated Key Exchange algorithm
+- [**43**星][9m] [PS] [nsacyber/http-connectivity-tester](https://github.com/nsacyber/http-connectivity-tester) Aids in discovering HTTP and HTTPS connectivity issues. #nsacyber
+- [**43**星][2y] [C] [p0cl4bs/shellcodes](https://github.com/p0cl4bs/shellcodes)
+- [**43**星][3y] [Py] [tylerha97/findevil](https://github.com/tylerha97/findevil) Volatility plugin to find evil
+- [**43**星][10m] [Shell] [thelinuxchoice/phurious](https://github.com/thelinuxchoice/phurious) Phishing any website to delivery Windows Reverse Shell payload through DATA URI
+- [**43**星][6m] [YARA] [decalage2/balbuzard](https://github.com/decalage2/balbuzard) Balbuzard is a package of malware analysis tools in python to extract patterns of interest from suspicious files (IP addresses, domain names, known file headers, interesting strings, etc). It can also crack malware obfuscation such as XOR, ROL, etc by bruteforcing and checking for those patterns.
+- [**43**星][8m] [Py] [jmagnusson/bgtunnel](https://github.com/jmagnusson/bgtunnel) Initiate SSH tunnels in the background in python
+- [**43**星][1y] [C++] [johnsonjason/rvdbg](https://github.com/johnsonjason/RVDbg) RVDbg is a debugger/exception handler for Windows processes and has the capability to circumvent anti-debugging techniques. (Cleaner, documented code base being worked on in: core branch)
+- [**43**星][3y] [Jupyter Notebook] [rmax/scrapydo](https://github.com/rmax/scrapydo) Crochet-based blocking API for Scrapy.
+- [**43**星][4y] [JS] [praetorian-code/hashcatjs](https://github.com/praetorian-code/hashcatJS) An implementation of the hashcat rules engine in javascript
+- [**43**星][5y] [JS] [nvisium/grails-nv](https://github.com/nVisium/grails-nV) Vulnerable Grails application
+- [**43**星][2y] [Py] [secarmalabs/dns-parallel-prober](https://github.com/SecarmaLabs/dns-parallel-prober) PoC for an adaptive parallelised DNS prober
+- [**43**星][6y] [C++] [zer0mem/showmeyourgongfu](https://github.com/zer0mem/showmeyourgongfu) OpenSrc projects; common multiprojects headers store to ./Common/*category*/
+- [**43**星][2y] [C#] [zacbrown/hiddentreasure-etw-demo](https://github.com/zacbrown/hiddentreasure-etw-demo) 在内存取证中,使用 ETW(Windows事件追踪) 挖掘宝藏的新方式
+- [**43**星][5y] [Py] [yelp/mycroft](https://github.com/yelp/mycroft)
+- [**43**星][4y] [yeahwu/google-ip-range](https://github.com/yeahwu/google-ip-range) 一个超大的 Google 全球 IP 扫描范围库
+- [**43**星][3y] [Py] [xyntax/drystan](https://github.com/xyntax/drystan) Automated information gathering tool for pentest
+- [**43**星][11m] [Go] [xpn/blockchainc2](https://github.com/xpn/blockchainc2) A POC C2 server and agent to explore just if/how the Ethereum blockchain can be used for C2
+- [**43**星][4y] [Py] [xme/mime2vt](https://github.com/xme/mime2vt) Unpack MIME attachments from a file and check them against virustotal.com
+- [**43**星][2y] [xazlsec/pentest-project-lists](https://github.com/xazlsec/pentest-project-lists) 由信安之路团队成员收集整理的与渗透测试相关的 Github 项目地址,如果你由更好的项目请将项目地址发送到:myh0st@foxmail.com
+- [**43**星][7m] [YARA] [x64dbg/yarasigs](https://github.com/x64dbg/yarasigs) Various Yara signatures (possibly to be included in a release later).
+- [**43**星][2y] [Py] [williballenthin/python-ntfs](https://github.com/williballenthin/python-ntfs) Open source Python library for NTFS analysis
+- [**43**星][1m] [Rust] [whitfin/s3-meta](https://github.com/whitfin/s3-meta) Gather metadata about your S3 buckets
+- [**43**星][2y] [PHP] [whitewinterwolf/wwwolf-php-webshell](https://github.com/whitewinterwolf/wwwolf-php-webshell) WhiteWinterWolf's PHP web shell
+- [**43**星][2y] [Shell] [wh1t3rh1n0/pentest-scripts](https://github.com/wh1t3rh1n0/pentest-scripts) Miscellaneous scripts for pentesting
+- [**43**星][15d] [C] [wallarm/libdetection](https://github.com/wallarm/libdetection) Signature-free approach library to detect injection and commanding attacks
+- [**43**星][5m] [C] [w1nds/dll2shellcode](https://github.com/w1nds/dll2shellcode) dll转shellcode工具
+- [**43**星][4m] [C#] [userr00t/universalunityhooks](https://github.com/userr00t/universalunityhooks) A framework designed to hook into and modify methods in unity games via dlls
+- [**43**星][3m] [Jupyter Notebook] [urcuqui/whitehat](https://github.com/urcuqui/whitehat) Information about my experiences in ethical hacking
+- [**43**星][2y] [Py] [unkl4b/gitbackdorizer](https://github.com/unkl4b/gitbackdorizer) GitBackdorizer (bad name, I know!) Is a proof of concept from Ulisses Castro's talk - 50 ton of backdoors (
+- [**43**星][2y] [C++] [technikempire/httpfilteringengine](https://github.com/technikempire/httpfilteringengine) Transparent filtering TLS proxy.
+- [**43**星][2m] [Py] [teal33t/poopak](https://github.com/teal33t/poopak) POOPAK - TOR Hidden Service Crawler
+- [**43**星][8m] [tea-deliverers/ctf-writeups](https://github.com/tea-deliverers/ctf-writeups)
+- [**43**星][1y] [tbgsecurity/weaponize_splunk](https://github.com/tbgsecurity/weaponize_splunk) Weaponizing Splunk Presentation including Splunk Apps for penetration testing.
+- [**43**星][4y] [t3kn1cs/infosec-rss-feeds](https://github.com/t3kn1cs/infosec-rss-feeds) Information Security RSS Feeds OMPL format
+- [**43**星][8y] [Py] [supernothing/sergio-proxy](https://github.com/supernothing/sergio-proxy) Automatically exported from code.google.com/p/sergio-proxy
+- [**43**星][4y] [Py] [strazzere/idant-wanna](https://github.com/strazzere/idant-wanna) ELF header abuse
+- [**43**星][2y] [Shell] [stayliv3/embedded-device-lab](https://github.com/stayliv3/embedded-device-lab) embedded-device-lab是一个利用qemu模拟真实世界中物联网漏洞的测试环境。由于物联网架构的特殊性,调试分析漏洞通常需要使用qemu模拟执行不同架构的可执行文件。而各种搭建环境,交叉编译是一件费事费力,令人忧伤的工作。 embedded-device-lab利用docker-compose,将各种漏洞调试环境一键化。简单使用两条命令,就可以直接使用gdb或者IDA动态分析相关漏洞。
+- [**43**星][8m] [C] [souhailhammou/drivers](https://github.com/souhailhammou/drivers) Windows Drivers
+- [**43**星][6y] [Py] [sketchymoose/totalrecall](https://github.com/sketchymoose/totalrecall) Based on the Volatility framework, this script will run various plugins as well as create a timeline, or use YARA/ClamAV/VirusTotal to find badness.
+- [**43**星][15d] [C] [simonwunderlich/fft_eval](https://github.com/simonwunderlich/fft_eval) FFT evaluation
+- [**43**星][2y] [C] [shipcod3/irc-bot-hunters](https://github.com/shipcod3/irc-bot-hunters) a collection of Metasploit PoC exploits for IRC Botnets that allows RCE
+- [**43**星][4y] [Py] [sh1nu11bi/routerhunter-2.0](https://github.com/sh1nu11bi/routerhunter-2.0) Testing vulnerabilities in devices and routers connected to the Internet.
+- [**43**星][4y] [C++] [sekoialab/binaryinjectionmitigation](https://github.com/sekoialab/binaryinjectionmitigation) Two tools used during our analysis of the Microsoft binary injection mitigation implemented in Edge TH2.
+- [**43**星][2y] [Py] [secdec/xssmap](https://github.com/secdec/xssmap) Intelligent XSS detection tool that uses human techniques for looking for reflected cross-site scripting (XSS) vulnerabilities
+- [**43**星][2y] [Py] [savio-code/hexorbase](https://github.com/savio-code/hexorbase) Automatically exported from code.google.com/p/hexorbase
+- [**43**星][2y] [Py] [robertbaruch/polychip](https://github.com/robertbaruch/polychip) Python app to extract a netlist of NMOS transistors from an Inkscape diagram.
+- [**43**星][10m] [Makefile] [revng/orchestra](https://github.com/revng/orchestra) Helper repository to easily build all the rev.ng components
+- [**43**星][2y] [C] [rbaron/fitless](https://github.com/rbaron/fitless) A collection of toy firmwares for the ID115 fitness tracker
+- [**43**星][5y] [JS] [rapid7/dllhijackauditkit](https://github.com/rapid7/dllhijackauditkit) This toolkit detects applications vulnerable to DLL hijacking (released in 2010)
+- [**43**星][3y] [Py] [ramadhanamizudin/python-icap-yara](https://github.com/ramadhanamizudin/python-icap-yara) An ICAP Server with yara scanner for URL and content.
+- [**43**星][1y] [Shell] [philcryer/wpa2own](https://github.com/philcryer/wpa2own) Use hashcat to crack WPA2 PSK (Pre-Shared Key) passwords!
+- [**43**星][8y] [pentestmonkey/timing-attack-checker](https://github.com/pentestmonkey/timing-attack-checker) Tool to help identify timing attacks
+- [**43**星][3m] [Py] [partoftheworld/ghidrapy_functionstringassociate](https://github.com/partoftheworld/ghidrapy_functionstringassociate) It does the same thing as plugin FunctionStringAssociate for IDA, Now the script just works, in the future it is planned to increase the speed of work and bring it closer to the speed of the plugin.
+- [**43**星][2y] [Go] [ocmdev/rita](https://github.com/ocmdev/rita) This repo is deprecated. Please use activecm/rita instead.
+- [**43**星][7m] [C#] [nyan-x-cat/lime-downloader](https://github.com/nyan-x-cat/lime-downloader) Simple Malware Downloader
+- [**43**星][2y] [C] [noahhhryan/krackattacks-test](https://github.com/noahhhryan/krackattacks-test)
+- [**43**星][1y] [Py] [nirizr/pytest-idapro](https://github.com/nirizr/pytest-idapro) 辅助对IDAPython脚本进行单元测试
+- [**43**星][2y] [Py] [nikshepsvn/scatterfly](https://github.com/nikshepsvn/scatterfly) An attempt to improve user privacy by intelligent data obfuscation.
+- [**43**星][5y] [Shell] [netspi/heapdump-ios](https://github.com/netspi/heapdump-ios) Dump IOS application heap space from memory
+- [**43**星][2y] [Py] [neo23x0/imphash-generator](https://github.com/neo23x0/imphash-generator) PE Import Hash Generator
+- [**43**星][2y] [Py] [nccgroup/royal_apt](https://github.com/nccgroup/royal_apt) Royal APT - APT15 - Related Information from NCC Group Cyber Defense Operations Research
+- [**43**星][3m] [Java] [nalen98/ebpf-for-ghidra](https://github.com/nalen98/ebpf-for-ghidra) eBPF Processor for Ghidra
+- [**43**星][1y] [C] [n30m1nd/linux_heap_exploitation_intro_series](https://github.com/n30m1nd/linux_heap_exploitation_intro_series) Various PoCs and challenges regarding heap userland exploitation
+- [**43**星][5y] [Py] [mubix/pykek](https://github.com/mubix/pykek) Kerberos Exploitation Kit
+- [**43**星][2y] [Py] [mthbernardes/ipchecker](https://github.com/mthbernardes/ipchecker) Check if a IP is from tor or is a malicious proxy
+- [**43**星][1y] [mrowensnobody/presentation](https://github.com/mrowensnobody/presentation)
+- [**43**星][3y] [Py] [mrgeffitas/sandbox_tester](https://github.com/mrgeffitas/sandbox_tester)
+- [**43**星][2y] [Py] [mixkorshun/django-antispam](https://github.com/mixkorshun/django-antispam) Spam protection tools for django applications.
+- [**43**星][8m] [Py] [misp/misp-taxii-server](https://github.com/misp/misp-taxii-server) An OpenTAXII Configuration for MISP
+- [**43**星][3y] [Java] [miracle963/zjdroid](https://github.com/miracle963/zjdroid) 基于Xposed Framewrok的动态逆向分析模块,逆向分析者可以通过ZjDroid完成以下工作: DEX文件的内存dump 基于Dalvik关键指针的内存BackSmali,有效破解加固应用 敏感API的动态监控 指定内存区域数据dump 获取应用加载DEX信息。 获取指定DEX文件加载类信息。 dump Dalvik java堆信息。 在目标进程动态运行lua脚本。
+- [**43**星][4m] [Java] [maxieds/chameleonminilivedebugger](https://github.com/maxieds/chameleonminilivedebugger) User-friendly GUI for the Chameleon Mini. Android app that connects to the ChameleonMini via USB and displays the live NFC frame logging stats output by the device. This app is much more convenient than having a terminal connection on a large-ish laptop for reconnaissance purposes.
+- [**43**星][3y] [Batchfile] [maldiohead/idapin](https://github.com/maldiohead/idapin) plugin of ida with pin
+- [**43**星][2y] [Java] [m301/rdroid](https://github.com/m301/rdroid) [Android RAT] Remotely manage your android phone using PHP Interface
+- [**43**星][1y] [Ruby] [lucifer1993/lasercrack](https://github.com/lucifer1993/lasercrack) Lasercrack-可扩展的Ruby暴力破解框架
+- [**43**星][10m] [Go] [konstantin8105/ddos](https://github.com/konstantin8105/ddos) DDoS attack. Creating infinite http GET requests.
+- [**43**星][1m] [Py] [kavishgr/xmlrpc-bruteforcer](https://github.com/kavishgr/xmlrpc-bruteforcer) An XMLRPC brute forcer targeting Wordpress written in Python 3. In the context of xmlrpc brute forcing, its faster than Hydra and WpScan. It can brute force 1000 passwords per second.
+- [**43**星][17d] [PS] [kacos2000/win10](https://github.com/kacos2000/win10) Win 10 related research
+- [**43**星][5m] [AutoIt] [jschicht/usnjrnl2csv](https://github.com/jschicht/usnjrnl2csv) Parser for $UsnJrnl on NTFS
+- [**43**星][3y] [C#] [jacobmisirian/dbltekgoippwn](https://github.com/jacobmisirian/dbltekgoippwn) Tool to check if an IP of a DblTek GoIP is vulnerable to a challenge-response login system, send SMS messages from the system, execute remote commands botnet style, and generate responses to challenges.
+- [**43**星][2y] [JS] [issue-db/issue-db](https://github.com/issue-db/issue-db)
+- [**43**星][2y] [C++] [iricartb/buffer-overflow-vulnerability-services-tester-tool](https://github.com/iricartb/buffer-overflow-vulnerability-services-tester-tool) Ivan Ricart Borges - Program to detect the existence of remote/local stack-based buffer-overflow vulnerabilities using the standard communication protocol for each service.
+- [**43**星][1y] [JS] [intoli/slice](https://github.com/intoli/slice) A JavaScript implementation of Python's negative indexing and extended slice syntax.
+- [**43**星][5m] [Shell] [infosecn1nja/ycsm](https://github.com/infosecn1nja/ycsm) This is a quick script installation for resilient redirector using nginx reverse proxy and letsencrypt compatible with some popular Post-Ex Tools (Cobalt Strike, Empire, Metasploit, PoshC2).
+- [**43**星][8m] [Py] [ihaveamac/switchfs](https://github.com/ihaveamac/switchfs) FUSE (Filesystem in Userspace) scripts for Nintendo Switch files
+- [**43**星][1y] [Py] [hillsbird/db_security](https://github.com/hillsbird/db_security) 数据库安全审计平台
+- [**43**星][3y] [Py] [hewlettpackard/reconbf](https://github.com/hewlettpackard/reconbf) Recon system hardening scanner
+- [**43**星][2y] [Go] [heptiolabs/ironclad](https://github.com/heptiolabs/ironclad) Web Application Firewall (WAF) on Kubernetes
+- [**43**星][3y] [C] [hamza-megahed/ctfs](https://github.com/hamza-megahed/ctfs) Walkthrough some CTFs
+- [**43**星][2y] [Py] [gregversteeg/gaussianize](https://github.com/gregversteeg/gaussianize) Transforms univariate data into normally distributed data
+- [**43**星][2y] [Py] [grayddq/passiveseccheck](https://github.com/grayddq/passiveseccheck) 自动化被动扫描系统分为数据源、数据处理、漏洞验证等三个子系统,本系统属于漏洞验证部分,根据提供的数据进行分布式安全验证,确定是否包含相关严重漏洞。
+- [**43**星][4m] [Py] [giantbranch/gray-hat-python-src](https://github.com/giantbranch/gray-hat-python-src) python灰帽子--黑客与逆向工程师的Python编程之道的课本各章源码,我实验的程序等
+- [**43**星][1y] [C] [gcwnow/linux](https://github.com/gcwnow/linux) Linux kernel for GCW Zero (Ingenic JZ4770)
+- [**43**星][6y] [Py] [fygrave/honeyntp](https://github.com/fygrave/honeyntp) NTP logger/honeypot
+- [**43**星][2y] [Py] [ethvpn/code](https://github.com/ethvpn/code) The sourecode
+- [**43**星][2m] [C#] [emoose/xvdtool](https://github.com/emoose/xvdtool) A command-line tool for manipulating Xbox One XVD & XVC files.
+- [**43**星][12m] [PHP] [eboda/35c3](https://github.com/eboda/35c3) Challenges I created for 35c3
+- [**43**星][3y] [Shell] [dominikstyp/auto-reaver](https://github.com/dominikstyp/auto-reaver) Auto Reaver - multiple access point attack using Reaver
+- [**43**星][2y] [JS] [davidaq/vodo](https://github.com/davidaq/vodo) 开源HTTP抓包
+- [**43**星][1y] [Py] [cmu-sei/cyobstract](https://github.com/cmu-sei/cyobstract) A tool to extract structured cyber information from incident reports.
+- [**43**星][9m] [Py] [chriswmorris/metaforge](https://github.com/chriswmorris/metaforge) An OSINT Metadata analyzing tool that filters through tags and creates reports
+- [**43**星][1y] [Py] [christhecoolhut/easy-pickings](https://github.com/christhecoolhut/easy-pickings) Automatic function exporting and linking for fuzzing cross-architecture binaries.
+- [**43**星][1y] [Py] [chrismaddalena/fox](https://github.com/chrismaddalena/fox) A companion tool for BloodHound offering Active Directory statistics and number crunching
+- [**43**星][1y] [bulentrahimkazanci/windbg-cheat-sheet](https://github.com/bulentrahimkazanci/windbg-cheat-sheet) A practical guide to analyze memory dumps of .Net applications by using Windbg
+- [**43**星][30d] [Py] [bsdphk/pyreveng](https://github.com/bsdphk/pyreveng) Software Reverse Engineering toolkit in python
+- [**43**星][4y] [Shell] [brianwrf/roothelper](https://github.com/brianwrf/roothelper) A Bash script that downloads and unzips scripts that will aid with privilege escalation on a Linux system.
+- [**43**星][1y] [Py] [br3akp0int/gqlparser](https://github.com/br3akp0int/gqlparser) A repository for GraphQL Extension for Burp Suite
+- [**43**星][4y] [Py] [borjamerino/tlsinjector](https://github.com/borjamerino/tlsinjector) Python script to inject and run shellcodes through TLS callbacks
+- [**43**星][7y] [Py] [bonsaiviking/tarpyt](https://github.com/bonsaiviking/tarpyt) A web spider's worst nightmare.
+- [**43**星][4m] [JS] [bendrucker/hapi-require-https](https://github.com/bendrucker/hapi-require-https) hapi http -> https redirection for servers behind a reverse proxy
+- [**43**星][12m] [Py] [bayotop/sink-logger](https://github.com/bayotop/sink-logger) sink-logger: Burp扩展,无缝记录所有传递到已知JavaScript sinks的数据
+- [**43**星][2y] [C] [bartblaze/matire](https://github.com/bartblaze/matire) Malware Analysis, Threat Intelligence and Reverse Engineering: LABS
+- [**43**星][2m] [PHP] [auth0/auth0-drupal](https://github.com/auth0/auth0-drupal) Auth0 Drupal Plugin - Single Sign On, Social Login, SAML and AD/LDAP Integration, User Management
+- [**43**星][2y] [JS] [auth0-blog/aliens-go-home-part-1](https://github.com/auth0-blog/aliens-go-home-part-1) GitHub repository that accompanies the first article of the "Developing Games with React, Redux, and SVG" series.
+- [**43**星][2y] [JS] [ascendr/spectre-chrome](https://github.com/ascendr/spectre-chrome) Spectre JS PoC for Chrome
+- [**43**星][3y] [C++] [andreybazhan/dbgext](https://github.com/andreybazhan/dbgext) Debugger extension for the Debugging Tools for Windows (WinDbg, KD, CDB, NTSD).
+- [**43**星][4y] [C#] [alphadelta/dumb](https://github.com/alphadelta/dumb) A fast and advanced ransomware PoC
+- [**43**星][3m] [TSQL] [abrignoni/dfir-sql-query-repo](https://github.com/abrignoni/dfir-sql-query-repo) Collection of SQL query templates for digital forensics use by platform and application.
+- [**43**星][6y] [1an0rmus/yara](https://github.com/1an0rmus/yara) Yara rules
+- [**42**星][1m] [C#] [uknowsec/sharpcheckinfo](https://github.com/uknowsec/sharpcheckinfo) 收集目标主机信息,包括最近打开文件,系统环境变量和回收站文件等等
+- [**42**星][1y] [Go] [arnaucube/flock-botnet](https://github.com/arnaucube/flock-botnet) Twitter botnet with autonomous bots replying tweets with text generated based on probabilities in Markov chains
+- [**42**星][2m] [Lua] [dsasmblr/cheat-engine](https://github.com/dsasmblr/cheat-engine) Cheat Engine scripts, tutorials, tools, and more.
+- [**42**星][4m] [Lua] [ricterz/my-nse-scripts](https://github.com/ricterz/my-nse-scripts) My NSE Scripts
+- [**42**星][4y] [Lua] [fireeye/synfulknock](https://github.com/fireeye/synfulknock)
+- [**42**星][2y] [Py] [undeadsec/checkurl](https://github.com/undeadsec/checkurl) Detect evil urls that uses IDN Homograph Attack.
+- [**42**星][16d] [Py] [pagekite/pysocksipychain](https://github.com/pagekite/pysocksipychain) Modified socks.py which supports chained proxies
+- [**42**星][1m] [C] [wireghoul/sploit-dev](https://github.com/wireghoul/sploit-dev) Exploits and research stuffs
+- [**42**星][3y] [Go] [v2ray/experiments](https://github.com/v2ray/experiments) Repository for experimental code
+- [**42**星][10m] [TS] [javascript-obfuscator/react-native-obfuscating-transformer](https://github.com/javascript-obfuscator/react-native-obfuscating-transformer) Obfuscation for React Native bundles
+- [**42**星][2m] [C#] [k8gege/porttran](https://github.com/k8gege/porttran) PortTran (.NET端口转发工具,支持任意权限)
+- [**42**星][1y] [Perl] [t3hp0rp/hitcondockerfile](https://github.com/t3hp0rp/hitcondockerfile) Dockerfile for hitcon
+- [**42**星][1m] [mohitkhemchandani/oscp_bible](https://github.com/mohitkhemchandani/oscp_bible) This is a collection of resources, scripts, bookmarks, writeups, notes, cheatsheets that will help you in OSCP Preparation as well as for general pentesting and learning. If you feel like you can contribute in it. Please do that, I'll appreciate you.
+- [**42**星][7m] [kungfu-pro/kungfu-pro-issues](https://github.com/kungfu-pro/kungfu-pro-issues) kungfu pro 透明代理, 企业科学上网解决方案
+- [**42**星][2y] [Py] [t7hm1/pyddos](https://github.com/t7hm1/pyddos) DDOS python script
+- [**42**星][6m] [Py] [kryptoslogic/rdppot](https://github.com/kryptoslogic/rdppot) RDP honeypot
+- [**42**星][2d] [Py] [3xploit-db/pentest-tools-framework](https://github.com/3xploit-db/pentest-tools-framework) Pentest Tools Framework is a database of exploits, Scanners and tools for penetration testing. Pentest is a powerful framework includes a lot of tools for beginners. You can explore kernel vulnerabilities, network vulnerabilities
+- [**42**星][1y] [C++] [3gstudent/windows-eventlog-bypass](https://github.com/3gstudent/Windows-EventLog-Bypass) Use subProcessTag Value From TEB to identify Event Log Threads
+- [**42**星][10m] [C++] [bytecode77/slui-file-handler-hijack-privilege-escalation](https://github.com/bytecode77/slui-file-handler-hijack-privilege-escalation) 利用 slui.exe 的文件 Handler 劫持漏洞实现 UAC 绕过和本地提权
+- [**42**星][2m] [C++] [lifting-bits/klee](https://github.com/lifting-bits/klee) KLEE Symbolic Execution Engine
+- [**42**星][2y] [Py] [klsecservices/ios_mips_gdb](https://github.com/klsecservices/ios_mips_gdb) Cisco MIPS debugger
+- [**42**星][2y] [Py] [miss-d/blindy](https://github.com/miss-d/blindy) Simple script to automate brutforcing blind sql injection vulnerabilities
+- [**42**星][1m] [C] [zhangboyang/pal3patch](https://github.com/zhangboyang/pal3patch) 《仙剑奇侠传三》《仙剑奇侠传三外传·问情篇》分辨率补丁
+- [**42**星][2y] [C] [z4ziggy/zigfrid](https://github.com/z4ziggy/zigfrid) A Passive RFID fuzzer
+- [**42**星][3y] [C] [yosqueoy/ditsnap](https://github.com/yosqueoy/ditsnap) An inspection tool for Active Directory database
+- [**42**星][10m] [xisigr/paper](https://github.com/xisigr/paper) Web&Browser Security
+- [**42**星][4y] [PHP] [xibijj/awvscan](https://github.com/xibijj/awvscan) New On Live Web Vul Scan
+- [**42**星][6m] [C] [x899/ssh_brute_force](https://github.com/x899/ssh_brute_force) Crack SSH Password using Dictionary and Brute Force Method
+- [**42**星][7m] [x41sec/slides](https://github.com/x41sec/slides)
+- [**42**星][3d] [C] [wuseman/tg799vac-xtreme-17.2-mint](https://github.com/wuseman/tg799vac-xtreme-17.2-mint) My personal unique wiki for hacking the router firmware used by (Telia)TG799vac Xtream v17.2-MINT delivered from Technicolor
+- [**42**星][11m] [Perl] [wireghoul/doona](https://github.com/wireghoul/doona) Network based protocol fuzzer
+- [**42**星][7y] [C++] [vlad902/findcrypt2-with-mmx](https://github.com/vlad902/findcrypt2-with-mmx) 对findcrypt2插件的增强,支持MMX AES指令
+- [**42**星][6m] [C++] [vanhauser-thc/afl-pin](https://github.com/vanhauser-thc/afl-pin) run AFL with pintool
+- [**42**星][3y] [Py] [uber/usb2fac](https://github.com/uber/usb2fac) Enabling 2fac confirmation for newly connected USB devices
+- [**42**星][1m] [JS] [tineola/tineola](https://github.com/tineola/tineola) Blockchains. Destruction. Mayhem.
+- [**42**星][3m] [Go] [threatstack/authkeys](https://github.com/threatstack/authkeys) A tool for getting SSH keys out of LDAP
+- [**42**星][4d] [PS] [thecjw/scoop-retools](https://github.com/thecjw/scoop-retools) Scoop bucket for reverse engineering tools
+- [**42**星][2y] [Shell] [taherio/redi](https://github.com/taherio/redi) Automated script for setting up CobaltStrike redirectors (nginx reverse proxy, letsencrypt)
+- [**42**星][3y] [Py] [t0kx/exploit-cve-2015-3306](https://github.com/t0kx/exploit-cve-2015-3306) ProFTPd 1.3.5 - (mod_copy) Remote Command Execution exploit and vulnerable container
+- [**42**星][3m] [Pawn] [stypr/tmpleak](https://github.com/stypr/tmpleak) Leak off used temporary workspaces for ctf and wargames!
+- [**42**星][5y] [Java] [ssilence/scotty](https://github.com/ssilence/scotty) java proxy
+- [**42**星][6y] [Ruby] [sophsec/ffi-pcap](https://github.com/sophsec/ffi-pcap) Ruby FFI bindings for libpcap.
+- [**42**星][1m] [Py] [sh3llcod3/airscript-ng](https://github.com/sh3llcod3/airscript-ng) A python script to simplify the process of auditing wireless networks.
+- [**42**星][9m] [Py] [sendgrid/krampus](https://github.com/sendgrid/krampus) The original AWS security enforcer™
+- [**42**星][8d] [Py] [securestate/king-phisher-plugins](https://github.com/securestate/king-phisher-plugins) Plugins for the King Phisher open source phishing campaign toolkit.
+- [**42**星][2y] [Py] [se55i0n/cwebscanner](https://github.com/se55i0n/cwebscanner) 快速扫描C段web应用,获取请求状态code、server、title信息
+- [**42**星][3y] [KiCad Layout] [salmg/magspoofpi](https://github.com/salmg/magspoofpi) MagSpoof for Raspberry PI GPIO
+- [**42**星][6m] [Visual Basic .NET] [s1egesystems/ghostsquadhackers-javascript-encrypter-encoder](https://github.com/s1egesystems/ghostsquadhackers-javascript-encrypter-encoder) Encrypt/Encode your Javascript code. (Windows Scripting)
+- [**42**星][2y] [Shell] [rogdham/cve-2018-11235](https://github.com/rogdham/cve-2018-11235) PoC exploit for CVE-2018-11235 allowing RCE on git clone --recurse-submodules
+- [**42**星][8m] [PS] [robbridgeman/adimporter](https://github.com/robbridgeman/adimporter) Credit to Helge Klein -
+- [**42**星][2m] [Java] [revolver-ocelot-saa/ghidrax64dbg](https://github.com/revolver-ocelot-saa/ghidrax64dbg) Extract annoations from Ghidra into an X32/X64 dbg database
+- [**42**星][2m] [Java] [radioegor146/native-obfuscator](https://github.com/radioegor146/native-obfuscator) Java .class to .cpp converter for use with JNI
+- [**42**星][1y] [Shell] [r0hi7/tortipi](https://github.com/r0hi7/tortipi) Tor based Raspberry π hotspot
+- [**42**星][8m] [pyn3rd/cve-2019-2618](https://github.com/pyn3rd/cve-2019-2618) Weblogic Unrestricted File Upload
+- [**42**星][2y] [PHP] [paragonie/hpkp-builder](https://github.com/paragonie/hpkp-builder) Build HTTP Public-Key-Pinning headers from a JSON file (or build them programmatically)
+- [**42**星][2y] [C] [opsxcq/exploit-cve-2017-5715](https://github.com/opsxcq/exploit-cve-2017-5715) Spectre exploit
+- [**42**星][4m] [C] [operationnt414c/shellsecbat](https://github.com/operationnt414c/shellsecbat) Henkaku plugin which displays seconds and battery percent in status bar
+- [**42**星][3y] [Ruby] [openshift/openshift-extras](https://github.com/openshift/openshift-extras) Unofficial tools for use with OpenShift
+- [**42**星][5m] [JS] [oasis-open/cti-stix-visualization](https://github.com/oasis-open/cti-stix-visualization) OASIS TC Open Repository: Lightweight visualization for STIX 2.0 objects and relationships
+- [**42**星][5d] [ntdiff/headers](https://github.com/ntdiff/headers)
+- [**42**星][5y] [C] [ntddk/temu](https://github.com/ntddk/temu) TEMU: The BitBlaze Dynamic Analysis Component (with some patches).
+- [**42**星][3m] [Java] [nowsecure/cybertruckchallenge19](https://github.com/nowsecure/cybertruckchallenge19) Android security workshop material taught during the CyberTruck Challenge 2019 (Detroit USA).
+- [**42**星][2y] [C] [nixawk/awesome-windows-debug](https://github.com/nixawk/awesome-windows-debug) Debug Windows Application / Kernel
+- [**42**星][12d] [Ruby] [ninoseki/mihari](https://github.com/ninoseki/mihari) mihari is a sidekick tool for TheHive to monitor malicious hosts
+- [**42**星][4y] [C] [nikolajschlej/zeronights2015](https://github.com/nikolajschlej/zeronights2015) My UEFI security talk on ZeroNights 2015
+- [**42**星][5y] [Py] [nihilus/idasimulator](https://github.com/nihilus/idasimulator) 扩展IDA的条件断点支持,在被调试进行中使用Python代码替换复杂的执行代码
+- [**42**星][4y] [C++] [nihilus/guid-finder](https://github.com/nihilus/guid-finder) 查找GUID/UUID
+- [**42**星][2m] [Py] [nickstadb/poc](https://github.com/nickstadb/poc) Repo for proof of concept exploits and tools.
+- [**42**星][3y] [C] [nextsecurity/gozi-mbr-rootkit](https://github.com/nextsecurity/gozi-mbr-rootkit) Gozi-MBR-rootkit Bootkit Modified
+- [**42**星][1y] [Java] [narkisr/nmap4j](https://github.com/narkisr/nmap4j) A Java Nmap wrapper
+- [**42**星][4y] [Py] [nanshihui/normal_hark_lite](https://github.com/nanshihui/normal_hark_lite) 通用的POC检测框架,有足够的POC,就可以找出相应的漏洞
+- [**42**星][5y] [Py] [nanopony/apache-scalp](https://github.com/nanopony/apache-scalp) Scalp!/Anathema is a log analyzer for web server (Apache, nginx) [Python3]
+- [**42**星][1m] [munsiwoo/ctf-web-prob](https://github.com/munsiwoo/ctf-web-prob) my ctf web probs
+- [**42**星][3y] [C++] [mrexodia/idapatch](https://github.com/mrexodia/idapatch) IDA plugin to patch IDA Pro in memory.
+- [**42**星][1y] [Py] [modzero/interestingfilescanner](https://github.com/modzero/interestingfilescanner) Burp extension
+- [**42**星][2m] [Py] [mitre-attack/attack-scripts](https://github.com/mitre-attack/attack-scripts) Scripts and a (future) library to improve users' interactions with the ATT&CK content
+- [**42**星][1m] [mikalv/awesome-i2p](https://github.com/mikalv/awesome-i2p) A curated list of awesome I2P implementations, libraries, resources, projects, and shiny things. I2P is an anonymous overlay network - a network within a network. It is intended to protect communication from dragnet surveillance and monitoring by third parties such as ISPs.
+- [**42**星][1y] [C#] [micli/netcoredebugging](https://github.com/micli/netcoredebugging) A repository maintains the book of ".NET Core application debugging" sample code.
+- [**42**星][11m] [PS] [mburrough/pentestingazureapps](https://github.com/mburrough/pentestingazureapps) Script samples from the book Pentesting Azure Applications (2018, No Starch Press)
+- [**42**星][2y] [Assembly] [martinvelez/w32evol](https://github.com/martinvelez/w32evol) An obfuscation engine which obfuscates Intel x86 32-bit binary code.
+- [**42**星][3y] [C] [lxdcn/simple-vpn-demo](https://github.com/lxdcn/simple-vpn-demo) A Simple Point-to-Point tunnelling implementation in C
+- [**42**星][9m] [C++] [luciouskami/xigncode3bypass](https://github.com/luciouskami/xigncode3bypass)
+- [**42**星][2d] [JS] [loki-project/loki-messenger](https://github.com/loki-project/loki-messenger) Loki Messenger - Onion routing based messenger
+- [**42**星][5m] [C++] [lianglixin/sksocks](https://github.com/lianglixin/sksocks) SKSocks, for proxy, firewall penetration, data encryption and speeding up internet accessing.
+- [**42**星][9m] [Shell] [leitbogioro/fuck_aliyun](https://github.com/leitbogioro/fuck_aliyun)
+- [**42**星][1y] [Java] [k0r0pt/project-tauro](https://github.com/k0r0pt/project-tauro) A Router WiFi key recovery/cracking tool with a twist.
+- [**42**星][9y] [jonoberheide/stackjacking](https://github.com/jonoberheide/stackjacking) PoC code for our presentation titled "Stackjacking Your Way to grsec/PaX Bypass"
+- [**42**星][2y] [Go] [johnsonz/go-checkiptools](https://github.com/johnsonz/go-checkiptools) A go application to scan google ip.
+- [**42**星][11m] [JS] [jeremyfetiveau/pwn-just-in-time-exploit](https://github.com/jeremyfetiveau/pwn-just-in-time-exploit) Exploit for the [pwn] just-in-time challenge from google ctf 2018's finals (TurboFan bug)
+- [**42**星][4m] [Py] [jas502n/cve-2019-7238](https://github.com/jas502n/cve-2019-7238) Nexus Repository Manager 3 Remote Code Execution without authentication < 3.15.0
+- [**42**星][4m] [Py] [jaredlgillespie/proxyscrape](https://github.com/jaredlgillespie/proxyscrape) Python library for retrieving free proxies (HTTP, HTTPS, SOCKS4, SOCKS5).
+- [**42**星][2y] [C] [invictus-0x90/vulnerable_linux_driver](https://github.com/invictus-0x90/vulnerable_linux_driver) An intentionally vulnerable linux driver for research purposes/practice in kernel exploit dev
+- [**42**星][2y] [Py] [imp0wd3r/scanner](https://github.com/imp0wd3r/scanner) 端口扫描 + 敏感文件扫描 + POC批量调用框架
+- [**42**星][2y] [C] [idc/ps4-fake-405](https://github.com/idc/ps4-fake-405)
+- [**42**星][4y] [Py] [ibm-security-intelligence/data-import](https://github.com/ibm-security-intelligence/data-import)
+- [**42**星][5y] [Py] [husam212/mitmer](https://github.com/husam212/mitmer) Automated man-in-the-middle attack tool.
+- [**42**星][1y] [C] [hannob/bignum-fuzz](https://github.com/hannob/bignum-fuzz) Code to fuzz bignum libraries
+- [**42**星][3y] [Ruby] [guidovranken/rpcbomb](https://github.com/guidovranken/rpcbomb) RPCBOMB + patches
+- [**42**星][4m] [Py] [gnebbia/halive](https://github.com/gnebbia/halive) A fast http and https prober, to check which URLs are alive
+- [**42**星][4y] [C++] [flankerhqd/mediacodecoob](https://github.com/flankerhqd/mediacodecoob) Infoleak and PC control poc for CVE-2015-6620 (24445127), I'll add after conference
+- [**42**星][3y] [JS] [firebug/devtools-extension-examples](https://github.com/firebug/devtools-extension-examples) Extension examples for Firefox developer tools
+- [**42**星][1m] [Erlang] [etnt/edbg](https://github.com/etnt/edbg) edbg:基于 tty 的 Erlang 调试/追踪接口
+- [**42**星][2m] [Py] [edeca/rtfraptor](https://github.com/edeca/rtfraptor) Extract OLEv1 objects from RTF files by instrumenting Word
+- [**42**星][5y] [Py] [duo-labs/mysslstrip](https://github.com/duo-labs/mysslstrip) CVE-2015-3152 PoC
+- [**42**星][16d] [ObjC] [dineshshetty/ios-sandbox-dumper](https://github.com/dineshshetty/ios-sandbox-dumper) SandBox-Dumper makes use of multiple private libraries to provide exact locations of the application sandbox, application bundle and some other interesting information
+- [**42**星][2y] [HTML] [digitalinterruption/fridaworkshop](https://github.com/digitalinterruption/fridaworkshop) Break Apps with Frida workshop material
+- [**42**星][3m] [Py] [dhn/osee](https://github.com/dhn/osee) Collection of resources for my preparation to take the OSEE certification.
+- [**42**星][2y] [Py] [deadpix3l/pydhe](https://github.com/deadpix3l/pydhe) a fully python Diffie-Hellman Library
+- [**42**星][1y] [PHP] [davidtavarez/pinky](https://github.com/davidtavarez/pinky) pinky - The PHP mini RAT (Remote Administration Tool)
+- [**42**星][10m] [PHP] [danwin/onion-link-list](https://github.com/danwin/onion-link-list) A set of scripts to list tor hidden services
+- [**42**星][2y] [Py] [danmcinerney/smb-reverse-brute](https://github.com/danmcinerney/smb-reverse-brute) Async'ly gather unique usernames thru null SMB sessions and bruteforce them with 2 passwords
+- [**42**星][12m] [Py] [daddycocoaman/ironpentest](https://github.com/daddycocoaman/ironpentest) Collection of IronPython scripts and executables for penetration testing
+- [**42**星][9d] [C#] [cs-util-com/cscore](https://github.com/cs-util-com/cscore) cscore is a minimal-footprint library providing commonly used helpers & patterns for your C# projects. It can be used in both pure C# and Unity projects.
+- [**42**星][4y] [C++] [cr4sh/secretnet_expl](https://github.com/cr4sh/secretnet_expl) LPE exploits for Secret Net and Secret Net Studio
+- [**42**星][3d] [JS] [coston/react-obfuscate](https://github.com/coston/react-obfuscate) An intelligent React component to obfuscate any contact link!
+- [**42**星][7m] [Java] [ciscopsirt/openvulnapi](https://github.com/ciscopsirt/openvulnapi) Documentation and Tools for Cisco's PSIRT openVuln API
+- [**42**星][10m] [Batchfile] [chrisad/ads-payload](https://github.com/chrisad/ads-payload) Powershell script which will take any payload and put it in the a bat script which delivers the payload. The payload is delivered using environment variables, alternating data streams and wmic.
+- [**42**星][5y] [C] [cemeyer/msp430-emu-uctf](https://github.com/cemeyer/msp430-emu-uctf) msp430 emulator for uctf (with remote GDB debugging, reverse debugging, and optional symbolic execution)
+- [**42**星][1y] [btkrausen/aws](https://github.com/btkrausen/aws)
+- [**42**星][2y] [HCL] [bneg/redteam-automation](https://github.com/bneg/redteam-automation) Automating those tasks which can or should be automated
+- [**42**星][6m] [Ruby] [b1ack0wl/linux_mint_poc](https://github.com/b1ack0wl/linux_mint_poc)
+- [**42**星][2y] [Py] [azure/embarrassingly-parallel-image-classification](https://github.com/azure/embarrassingly-parallel-image-classification) Walkthrough demonstrating how trained DNNs (CNTK and TensorFlow) can be applied to massive image sets in ADLS using PySpark on Azure HDInsight clusters
+- [**42**星][17d] [SystemVerilog] [azonenberg/starshipraider](https://github.com/azonenberg/starshipraider) High performance embedded systems debug/reverse engineering platform
+- [**42**星][7m] [Go] [aschzero/hera](https://github.com/aschzero/hera) Automated secure tunnels for containers using Cloudflare Argo
+- [**42**星][8m] [OCaml] [anssi-fr/mabo](https://github.com/anssi-fr/mabo) MRT Parser
+- [**42**星][8m] [C++] [angorafuzzer/libdft64](https://github.com/angorafuzzer/libdft64) libdft for Intel Pin 3.x and 64 bit platform. (Dynamic taint tracking, taint analysis)
+- [**42**星][2y] [Py] [anemonelabs/unmessage](https://github.com/anemonelabs/unmessage) Privacy enhanced instant messenger
+- [**42**星][1y] [HTML] [an0nud4y/socialfish](https://github.com/an0nud4y/socialfish) Modern phishing tool with advanced functionality
+- [**42**星][2y] [Rust] [alexcrichton/socks5-rs](https://github.com/alexcrichton/socks5-rs) Implementation of a socks5 proxy server in Rust
+- [**42**星][2m] [Rust] [ajmwagar/merino](https://github.com/ajmwagar/merino)
+- [**42**星][2y] [Py] [abdesslem/ctf](https://github.com/abdesslem/ctf) Flask platform for Capture The Flag challenges
+- [**42**星][9y] [Py] [9b/malpdfobj](https://github.com/9b/malpdfobj) Builds json representation of PDF malware sample
+- [**42**星][4m] [Py] [4n4nk3/tinkerershell](https://github.com/4n4nk3/tinkerershell) A simple python reverse shell written just for fun.
+- [**42**星][29d] [1135/1135-cobaltstrike-toolkit](https://github.com/1135/1135-cobaltstrike-toolkit) about CobaltStrike
+- [**42**星][5m] [C++] [0xeb/ida-climacros](https://github.com/0xeb/ida-climacros) 在IDA命令行接口中定义和使用静态/动态的宏
+- [**42**星][2m] [Py] [0x01h/pyddoz](https://github.com/0x01h/pyddoz) PyDDoZ is a powerful, human-friendly DDoS tool using application layer (L7) attack techniques.
+- [**42**星][6m] [JS] [0katz/cve-2019-12476](https://github.com/0katz/cve-2019-12476)
+- [**41**星][7m] [C++] [trojan-gfw/trojan-qt](https://github.com/trojan-gfw/trojan-qt) GUI server and client of Trojan in Qt C++
+- [**41**星][1y] [Py] [v2ray/v2ray-shell_alpha](https://github.com/v2ray/v2ray-shell_alpha) A GUI for V2Ray-core, written in PyQt5
+- [**41**星][11m] [JS] [hacker0x01/helpful-recon-data](https://github.com/hacker0x01/helpful-recon-data) This information provides helpful information to make it easier to discover new attack surface on HackerOne.com.
+- [**41**星][2d] [Py] [simsong/dfxml](https://github.com/simsong/dfxml) Digital Forensics XML project and library
+- [**41**星][2y] [Py] [moosedojo/legion](https://github.com/moosedojo/legion) Distributed computing environment that can be used for both academic and pen testing purposes.
+- [**41**星][6y] [PHP] [spiderlabs/upnp-request-generator](https://github.com/spiderlabs/upnp-request-generator) A tool to parse UPnP descriptor XML files and generate SOAP control requests for use with Burp Suite or netcat
+- [**41**星][1y] [C] [l3m0n/my_ctf_challenges](https://github.com/l3m0n/my_ctf_challenges)
+- [**41**星][2y] [Py] [cisco-talos/covnavi](https://github.com/cisco-talos/covnavi)
+- [**41**星][7m] [OCaml] [mirage/wodan](https://github.com/mirage/wodan) A Mirage filesystem library
+- [**41**星][4m] [C#] [3gstudent/apt34-jason](https://github.com/3gstudent/apt34-jason) Use to perform Microsoft exchange account brute-force.
+- [**41**星][19d] [Shell] [shibli2700/rekon](https://github.com/shibli2700/rekon) The project contains multiple shell scripts for automating the tasks which most of the hackers struggle during their recon phase.
+- [**41**星][2m] [amimo/goron](https://github.com/amimo/goron) Yet another llvm based obfuscator
+- [**41**星][2y] [Makefile] [artem-panchenko/counter-strike-docker](https://github.com/artem-panchenko/counter-strike-docker) Docker image for Counter-Strike 1.6 server
+- [**41**星][1y] [C#] [advancedhacker101/c-sharp-proxy-server](https://github.com/advancedhacker101/c-sharp-proxy-server) A proxy server built with c# can be both normal and MITM Proxy
+- [**41**星][2m] [C] [alxbrn/gdrv-loader](https://github.com/alxbrn/gdrv-loader) Kernel driver loader using vulnerable gigabyte driver (
+- [**41**星][2y] [Py] [bcopeland/speccy](https://github.com/bcopeland/speccy) Visualization tool for ath spectral scan
+- [**41**星][2d] [Shell] [phspade/automated-scanner](https://github.com/phspade/automated-scanner) Trying to make automated recon for bug bounties
+- [**41**星][20d] [Go] [abguthrie/goquery](https://github.com/abguthrie/goquery) Provide a shell like interface by utilizing osquery's distributed API
+- [**41**星][2m] [Py] [kc0bfv/pcode-emulator](https://github.com/kc0bfv/pcode-emulator) A PCode Emulator for Ghidra.
+- [**41**星][1m] [Java] [flankerhqd/vendor-android-cves](https://github.com/flankerhqd/vendor-android-cves) Collections of my POCs for android vendor CVEs
+- [**41**星][4m] [Py] [philomathic-guy/malicious-web-content-detection-using-machine-learning](https://github.com/philomathic-guy/Malicious-Web-Content-Detection-Using-Machine-Learning) Chrome extension for detecting phishing web sites
+- [**41**星][3y] [kd1991/oxul103-jailbreak](https://github.com/KD1991/OXUL103-Jailbreak) A NEW 64-bit JAILBREAK FOR iOS 10.3,10.3.1,10.3.2,10.3.x. (Untethered).
+- [**41**星][2y] [JS] [osirislab/csaw-ctf-2017-quals](https://github.com/osirislab/CSAW-CTF-2017-Quals) Repo for CSAW CTF 2018 Quals challenges
+- [**41**星][5y] [Java] [tacixat/cfgscandroid](https://github.com/TACIXAT/CFGScanDroid) Control Flow Graph Scanning for Android
+- [**41**星][3y] [Py] [cylance/markovobfuscate](https://github.com/cylance/MarkovObfuscate) Use Markov Chains to obfuscate data as other data
+- [**41**星][5y] [cmu-18739l-s15/18739l-s15-coursedocs](https://github.com/CMU-18739L-S15/18739L-s15-coursedocs)
+- [**41**星][4m] [TS] [verifynpm/tbv](https://github.com/verifynpm/tbv) Package verification for npm
+- [**41**星][6d] [Py] [opencybersecurityalliance/stix-shifter](https://github.com/opencybersecurityalliance/stix-shifter) This project consists of an open source library allowing software to connect to data repositories using STIX Patterning, and return results as STIX Observations.
+- [**41**星][6y] [Py] [vpnguy-zz/snmpdos](https://github.com/vpnguy-zz/snmpdos) Create a DDOS attack using SNMP servers
+- [**41**星][1y] [C] [synacktiv-contrib/lightspeed](https://github.com/Synacktiv-contrib/lightspeed) PoC for the iOS 11.4.1 and MacOS 10.13 kernel vulnerability in lio_listio
+- [**41**星][8m] [Ruby] [sharpstone/heroku-bouncer](https://github.com/sharpstone/heroku-bouncer) A Heroku OAuth middleware with no other work to do
+- [**41**星][5m] [Go] [lc/cspparse](https://github.com/lc/cspparse) A tool to evaluate Content Security Policies.
+- [**41**星][1m] [Java] [flankerhqd/vendor-android-cves](https://github.com/flankerhqd/vendor-android-cves) Collections of my POCs for android vendor CVEs
+- [**41**星][11m] [Py] [zynga/hiccup](https://github.com/zynga/hiccup) [DEPRECATED] Hiccup is a framework that allows the Burp Suite (a web application security testing tool,
+- [**41**星][4m] [C] [zouxianyu/physicalmemoryrw](https://github.com/zouxianyu/physicalmemoryrw) the basic version of the ring0 physical memory read/write tool
+- [**41**星][1m] [C] [zhichao281/duilib-miniblinkbrowser](https://github.com/zhichao281/duilib-miniblinkbrowser) 用duilib做的miniblink的浏览器
+- [**41**星][5y] [C++] [zer0mem/hypervisor](https://github.com/zer0mem/hypervisor) microVM
+- [**41**星][2y] [Py] [yingshang/hack](https://github.com/yingshang/hack) crawl hackerone reports
+- [**41**星][2y] [Shell] [xtiankisutsa/twiga](https://github.com/xtiankisutsa/twiga) twiga:枚举 Android 设备,获取了解其内部部件和漏洞利用的信息
+- [**41**星][2y] [Shell] [xaqron/stunnel](https://github.com/xaqron/stunnel) Wrapping openvpn with stunnel
+- [**41**星][5m] [Py] [x64dbg/x64dbgpylib](https://github.com/x64dbg/x64dbgpylib) Port of windbglib to x64dbgpy, in an effort to support mona.py in x64dbg.
+- [**41**星][5d] [Go] [x-way/iptables-tracer](https://github.com/x-way/iptables-tracer) Insert trace-points into the running configuration to observe the path of packets through the iptables chains.
+- [**41**星][3y] [Perl] [wireghoul/lbmap](https://github.com/wireghoul/lbmap) Advanced HTTP fingerprinting PoC
+- [**41**星][1y] [C] [wanttobeno/dllprotect](https://github.com/wanttobeno/dllprotect) dll文件加解密和内存加载
+- [**41**星][1y] [Py] [v1v1/sleight](https://github.com/v1v1/sleight) Empire HTTP(S) C2 redirector setup script
+- [**41**星][1y] [C++] [userexistserror/dllloadershellcode](https://github.com/userexistserror/dllloadershellcode) Shellcode to load an appended Dll
+- [**41**星][1y] [traceflight/android-malware-datasets](https://github.com/traceflight/android-malware-datasets) Popular Android malware datasets
+- [**41**星][4m] [Lua] [theherogac/tf-card-plugin-tool](https://github.com/theherogac/tf-card-plugin-tool) TF Card Plugin Tool is an excellent tool developed with the OneLua Team interpreter that allows you to simplify the installation and management of the drivers of the SD2VITA adapter and of the official PSVITA memory in the ux0: / uma0 paths
+- [**41**星][2y] [HTML] [thehackingsage/fluxion](https://github.com/thehackingsage/fluxion) WiFi Cracking Tool (Using Evil Twin Attack) With Some Modification. (Only For Legal Purposes)
+- [**41**星][10m] [C++] [thebabush/dumb-obfuscator](https://github.com/thebabush/dumb-obfuscator) Tutorial on how to write the dumbest obfuscator I could think of.
+- [**41**星][3y] [Py] [tengzhangchao/websniff](https://github.com/tengzhangchao/websniff) 局域网http流量嗅探,并获取登陆的账号密码
+- [**41**星][4y] [Py] [techwizrd/gitkraken](https://github.com/techwizrd/gitkraken) A Git client for the GNOME Desktop.
+- [**41**星][3m] [Shell] [tasket/qubes-vm-hardening](https://github.com/tasket/qubes-vm-hardening) Fend off malware at Qubes VM startup
+- [**41**星][2y] [Py] [talos-vulndev/fuzzflow](https://github.com/talos-vulndev/fuzzflow)
+- [**41**星][1y] [Py] [spiderlabs/firework](https://github.com/spiderlabs/firework) Firework is a proof of concept tool to interact with Microsoft Workplaces creating valid files required for the provisioning process.
+- [**41**星][8m] [Shell] [sonofagl1tch/awsdetonationlab](https://github.com/sonofagl1tch/awsdetonationlab) This script is used to generate some basic detections of the aws security services
+- [**41**星][4y] [ApacheConf] [smikims/arpspoof](https://github.com/smikims/arpspoof) Performs an ARP spoofing attack using the Linux kernel's raw sockets
+- [**41**星][3y] [PS] [sikkandar-sha/sec-audit](https://github.com/sikkandar-sha/sec-audit) PowerShell Script for Windows Server Compliance / Security Configuration Audit
+- [**41**星][4y] [C] [sesuperuser/super-bootimg](https://github.com/sesuperuser/super-bootimg) Tools to edit Android boot.img. NDK buildable, to be usable in an update.zip
+- [**41**星][7m] [C] [sensepost/frida-windows-playground](https://github.com/sensepost/frida-windows-playground) A collection of Frida hooks for experimentation on Windows platforms.
+- [**41**星][2y] [C] [seemoo-lab/nexmon_debugger](https://github.com/seemoo-lab/nexmon_debugger) Debugger with hardware breakpoints and memory watchpoints for BCM4339 Wi-Fi chips
+- [**41**星][10m] [Java] [secdec/attack-surface-detector-burp](https://github.com/secdec/attack-surface-detector-burp) The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters
+- [**41**星][1y] [seadog007/noxctf-2018-psrf-as-pwn](https://github.com/seadog007/noxctf-2018-psrf-as-pwn)
+- [**41**星][3y] [Java] [scriptjunkie/kcap](https://github.com/scriptjunkie/kcap)
+- [**41**星][2y] [Py] [scrapbird/sarlacc](https://github.com/scrapbird/sarlacc) SMTP server / sinkhole for collecting spam
+- [**41**星][3y] [C++] [rootkitsmm/cve-2016-0040](https://github.com/rootkitsmm/cve-2016-0040) Exploiting CVE-2016-0040 uninitialized pointer
+- [**41**星][2y] [C#] [rappayne/webgoat.net](https://github.com/rappayne/webgoat.net) OWASP's official repository for WebGoat (ASP.NET version)
+- [**41**星][2y] [Py] [rapid7/vm-automation](https://github.com/rapid7/vm-automation) Created to simplify interactions with virtual machines
+- [**41**星][2m] [Shell] [r0bag/pentest](https://github.com/r0bag/pentest)
+- [**41**星][3y] [PS] [proxb/serverinventoryreport](https://github.com/proxb/serverinventoryreport) A set of scripts to create an inventory report using PowerShell, SQL and WPF
+- [**41**星][3y] [Py] [ph4r05/kismet-deauth-wpa2-handshake-plugin](https://github.com/ph4r05/kismet-deauth-wpa2-handshake-plugin) Python plugin for Kismet to perform deauthentication to collect WPA2 handshakes
+- [**41**星][2y] [Py] [oways/sa-core-2018-004](https://github.com/oways/sa-core-2018-004) SA-CORE-2018-004 POC #drupalgeddon3
+- [**41**星][2m] [C#] [outflanknl/net-gpppassword](https://github.com/outflanknl/net-gpppassword) .NET implementation of Get-GPPPassword. Retrieves the plaintext password and other information for accounts pushed through Group Policy Preferences.
+- [**41**星][2y] [oscarakaelvis/game-of-thrones-hacking-ctf](https://github.com/oscarakaelvis/game-of-thrones-hacking-ctf) Game of Thrones hacking CTF (Capture the flag)
+- [**41**星][2y] [JS] [opsxcq/exploit-cve-2016-6515](https://github.com/opsxcq/exploit-cve-2016-6515) OpenSSH remote DOS exploit and vulnerable container
+- [**41**星][3y] [Py] [opendns/og-miner](https://github.com/opendns/og-miner) OpenDNS Graph Miner
+- [**41**星][2y] [Py] [ntddk/virustream](https://github.com/ntddk/virustream) A script to track malware IOCs with OSINT on Twitter.
+- [**41**星][2y] [CSS] [nourabusoud/password-genie](https://github.com/nourabusoud/password-genie)
+- [**41**星][5y] [Py] [nimai/mptcp-scapy](https://github.com/nimai/mptcp-scapy) MPTCP firewall tester based on scapy
+- [**41**星][1y] [Py] [neverlovelynn/chrome_headless_xss](https://github.com/neverlovelynn/chrome_headless_xss) A plugin to check xss by using chrome_headless
+- [**41**星][2y] [ASP] [netspi/cmdsql](https://github.com/netspi/cmdsql)
+- [**41**星][11m] [C] [netmap-unipi/netmap-tutorial](https://github.com/netmap-unipi/netmap-tutorial) Netmap tutorial at SIGCOMM 2017 and AsiaBSDCon 2018
+- [**41**星][3y] [nao-sec/rigek](https://github.com/nao-sec/rigek) Analyzing Rig Exploit Kit
+- [**41**星][4y] [Py] [muodov/sqlmapchik](https://github.com/muodov/sqlmapchik) cross-platform sqlmap GUI aimed to mobile devices
+- [**41**星][2y] [Perl] [mtve/yazecminer](https://github.com/mtve/yazecminer) yet another ZEC miner
+- [**41**星][4y] [JS] [moloch--/cve-2016-1764](https://github.com/moloch--/cve-2016-1764) Extraction of iMessage Data via XSS
+- [**41**星][2y] [minisafe/microweb](https://github.com/minisafe/microweb) MicroScan 的web端,正在改bug
+- [**41**星][29d] [PHP] [mddanish/vulnerable-otp-application](https://github.com/mddanish/vulnerable-otp-application) Vulnerable OTP/2FA Application written in PHP using Google Authenticator
+- [**41**星][6y] [Shell] [masterbutcher/kali-cleaner](https://github.com/masterbutcher/kali-cleaner) Little cleaner script for Kali linux.Clean apt cache,Removing old config files,Removing old kernels,Emptying every trashes.
+- [**41**星][4m] [maecproject/malware-behaviors](https://github.com/maecproject/malware-behaviors) A taxonomy and dictionary of malware behaviors.
+- [**41**星][8m] [Py] [linuxacademy/la-aws-security_specialty](https://github.com/linuxacademy/la-aws-security_specialty) Learning Activities for the AWS Security Specialty Course
+- [**41**星][4y] [C++] [lingerhk/0net](https://github.com/lingerhk/0net) 一个简单的Windows远程控制后门
+- [**41**星][7m] [Py] [koboi137/darksplitz](https://github.com/koboi137/darksplitz) Exploit Framework
+- [**41**星][4y] [C] [kitctf/nginxpwn](https://github.com/kitctf/nginxpwn) Exploitation Training -- CVE-2013-2028: Nginx Stack Based Buffer Overflow
+- [**41**星][3y] [C] [killswitch-gui/hotload-driver](https://github.com/killswitch-gui/hotload-driver) C++
+- [**41**星][3y] [C] [kanglictf/afl-qai](https://github.com/kanglictf/afl-qai) A demo project for AFL with QEMU Augmented Instrumentation (qai)
+- [**41**星][3y] [C] [jzdziarski/mod_evasive](https://github.com/jzdziarski/mod_evasive) Apache mod_evasive module
+- [**41**星][1y] [Py] [jpcertcc/impfuzzy](https://github.com/jpcertcc/impfuzzy) Fuzzy Hash calculated from import API of PE files
+- [**41**星][2m] [Java] [jenkinsci/parameterized-scheduler-plugin](https://github.com/jenkinsci/parameterized-scheduler-plugin) A Jenkins Plugin to support setting parameters in the build schedule
+- [**41**星][3y] [Shell] [jbreed/apkinjector](https://github.com/jbreed/apkinjector) Android APK Antivirus evasion for msfvenom generated payloads to inject into another APK file for phishing attacks.
+- [**41**星][2y] [Py] [inaz2/unico](https://github.com/inaz2/unico) Unicorn PE function runner
+- [**41**星][5m] [Go] [icchy/wctf2019-gtf](https://github.com/icchy/wctf2019-gtf) WCTF2019 challenge: Gyotaku The Flag
+- [**41**星][2d] [C] [horsicq/pex64dbg](https://github.com/horsicq/pex64dbg) pe 查看
+- [**41**星][7m] [hook-s3c/cve-2019-0708-poc](https://github.com/hook-s3c/cve-2019-0708-poc) proof of concept exploit for Microsoft Windows 7 and Server 2008 RDP vulnerability
+- [**41**星][2y] [Py] [guptachetan1997/crawling-projects](https://github.com/guptachetan1997/crawling-projects) Web scraping and automation using python
+- [**41**星][2y] [Ruby] [gabamnml/hoper](https://github.com/gabamnml/hoper) Security tool to trace URL's jumps across the rel links to obtain the last URL
+- [**41**星][4m] [JS] [fsiamp/brutesec](https://github.com/fsiamp/brutesec) SHA256 and MD5 automation scripts that can be used for bruteforcing and cracking hashed data.
+- [**41**星][3m] [Swift] [frida/frida-swift](https://github.com/frida/frida-swift) Frida Swift bindings
+- [**41**星][6y] [freewaf/waf-anti-tamper](https://github.com/freewaf/waf-anti-tamper) Open Source Web Application Firewall Anti Tamper
+- [**41**星][9m] [Shell] [forte-research/forte-fuzzbench](https://github.com/forte-research/forte-fuzzbench) FoRTE-Research's fuzzing benchmarks
+- [**41**星][2y] [Java] [fooock/jshodan](https://github.com/fooock/jshodan) Powerful Shodan API client using RxJava and Retrofit
+- [**41**星][3y] [Py] [fnzv/trsh](https://github.com/fnzv/trsh) trsh:使用电报 API 与 Linux 服务器通信,Python编写。
+- [**41**星][7y] [Py] [flyr4nk/xssscaner](https://github.com/flyr4nk/xssscaner) Xss Scaner
+- [**41**星][2y] [C++] [feruxmax/meltdown](https://github.com/feruxmax/meltdown) Meltdown/Spectre experiments
+- [**41**星][3d] [C++] [equalitie/ouinet](https://github.com/equalitie/ouinet) Library to enable decentralized web requests
+- [**41**星][2y] [Go] [empty-nest/emptynest](https://github.com/empty-nest/emptynest) emptynest:基于插件的 C2 服务器框架。其目标不是取代某些强大的工具(例如 Empire、Metasploit、CobaltStrike),而是创建一个支持框架,以便为自定义 agents 快速创建小型、专用的 handlers
+- [**41**星][9m] [Java] [dxsdyhm/gwelldemo](https://github.com/dxsdyhm/gwelldemo) a demo to use P2P-Core
+- [**41**星][3y] [Py] [dnlongen/reglister](https://github.com/dnlongen/reglister) Recurse through a registry, identifying values with large data -- a registry malware hunter
+- [**41**星][3y] [Py] [devttys0/botox](https://github.com/devttys0/botox) SIGSTOPing ELF binaries since 0x7E1
+- [**41**星][7m] [Rust] [dentrax/netlyser](https://github.com/dentrax/netlyser) Lightweight, a simple yet, Presence Detection Tool written in Rust, based on nmap, built for UNIX, made with <3
+- [**41**星][2m] [Shell] [denizparlak/hayat](https://github.com/denizparlak/hayat) Google Cloud Platform ~ Auditing & Hardening Script
+- [**41**星][8m] [deep-security/aws-waf](https://github.com/deep-security/aws-waf) Deep Security's APIs make it simple to integration with a variety of AWS Services
+- [**41**星][2y] [deadbits/analyst-casefile](https://github.com/deadbits/analyst-casefile) Maltego CaseFile entities for information security investigations, malware analysis and incident response
+- [**41**星][20d] [C++] [danielkrupinski/anubis](https://github.com/danielkrupinski/anubis) Free open-source training software / cheat for Counter-Strike: Global Offensive, written in C.
+- [**41**星][3y] [Py] [crysys/membrane](https://github.com/crysys/membrane) Membrane: A Posteriori Detection of Malicious Code Loading by Memory Paging Analysis
+- [**41**星][3y] [Py] [crowdstrike/pyspresso](https://github.com/crowdstrike/pyspresso) The pyspresso package is a Python-based framework for debugging Java.
+- [**41**星][9y] [C++] [cr4sh/ptbypass-poc](https://github.com/cr4sh/ptbypass-poc) Bypassing code hooks detection in modern anti-rootkits via building faked PTE entries.
+- [**41**星][2y] [C] [cocoahuke/mackextdump](https://github.com/cocoahuke/mackextdump) mackextdump:从macOS中dump Kext信息
+- [**41**星][7m] [certcc/vulnerability-data-archive](https://github.com/certcc/vulnerability-data-archive) With the hope that someone finds the data useful, we're publishing an archive of almost all of the non-sensitive vulnerability information in our vulnerability reports database. See also
+- [**41**星][4y] [C++] [c4bbage/webrobot-v1.8.2](https://github.com/c4bbage/webrobot-v1.8.2) 网络安全检测工具WebRobot
+- [**41**星][23d] [Lua] [c0nw0nk/nginx-lua-anti-ddos](https://github.com/c0nw0nk/nginx-lua-anti-ddos) A Anti-DDoS script to protect Nginx web servers using Lua with a HTML Javascript based authentication puzzle inspired by Cloudflare I am under attack mode an Anti-DDoS authentication page protect yourself from every attack type All Layer 7 Attacks Mitigating Historic Attacks DoS DoS Implications DDoS All Brute Force Attacks Zero day exploits Soc…
+- [**41**星][5y] [Py] [bones-codes/the_colonel](https://github.com/bones-codes/the_colonel) an experimental linux kernel module (rootkit) with a keylogger and built-in IRC bot
+- [**41**星][3y] [C] [bluec0re/reversing-radare2](https://github.com/bluec0re/reversing-radare2) A reversing series with radare2
+- [**41**星][2y] [JS] [bahmutov/ban-sensitive-files](https://github.com/bahmutov/ban-sensitive-files) Checks filenames to be committed against a library of filename rules to prevent sensitive files in Git
+- [**41**星][3y] [Py] [backto17/sinahousecrawler](https://github.com/backto17/sinahousecrawler) 基于scrapy,scrapy-redis实现的一个分布式网络爬虫,爬取了新浪房产的楼盘信息及户型图片,实现了常用的爬虫功能需求.
+- [**41**星][1y] [C++] [baarsik/tauros-v2](https://github.com/baarsik/tauros-v2)
+- [**41**星][2y] [C++] [azerg/packerpe](https://github.com/azerg/packerpe) simple PE packer written in C++
+- [**41**星][3y] [C++] [avdbg/saber](https://github.com/avdbg/saber) 《macOS软件安全与逆向分析》随书的调试器代码
+- [**41**星][1y] [C] [asm/deep_spectre](https://github.com/asm/deep_spectre) Deep learning side channel privileged memory reader
+- [**41**星][5m] [Py] [arthastang/router-exploit-shovel](https://github.com/arthastang/router-exploit-shovel) Automated Application Generation for Stack Overflow Types on Wireless Routers
+- [**41**星][2y] [JS] [arno0x/reflectivednsexfiltrator](https://github.com/arno0x/reflectivednsexfiltrator) Data exfiltration using reflective DNS resolution covert channel
+- [**41**星][6m] [Perl] [anon6372098/fazscan](https://github.com/anon6372098/fazscan) | FazScan is a Perl program to do some vulnerability scanning and pentesting |
+- [**41**星][4y] [C] [android-rooting-tools/libpingpong_exploit](https://github.com/android-rooting-tools/libpingpong_exploit) CVE-2015-3636 exploit
+- [**41**星][2y] [Py] [andreafioraldi/pwntrace](https://github.com/andreafioraldi/pwntrace) Use ltrace with pwnlib.tubes.process instances, useful for heap exploitation. Pwntools rocks!
+- [**41**星][1y] [Py] [alfa-group/robust-adv-malware-detection](https://github.com/alfa-group/robust-adv-malware-detection) Code repository for the paper "Adversarial Deep Learning for Robust Detection of Binary Encoded Malware"
+- [**41**星][2y] [Java] [alepacheco/androrw](https://github.com/alepacheco/androrw) PoC Ransomware for android
+- [**41**星][1m] [Py] [agrawalsmart7/autorecon](https://github.com/agrawalsmart7/autorecon) 自动化渗透初期的一些手动工作,是我们可专注于主要目标
+- [**41**星][4y] [Py] [abdesslem/malwarehunter](https://github.com/abdesslem/malwarehunter) Static and automated/dynamic malware analysis
+- [**40**星][2y] [C++] [pgigioli/darknet_ros](https://github.com/pgigioli/darknet_ros) YOLO integration with ROS for real-time object detection
+- [**40**星][12m] [HTML] [zkeeer/shadowsocks-manager](https://github.com/zkeeer/shadowsocks-manager) shadowsocks多用户管理,可视化管理,轻量级,一键安装shadowsocks和ssadmin,控制端口流量/速度,查看端口状态,修改ss配置
+- [**40**星][5y] [Lua] [asamy/forgottenmapeditor](https://github.com/asamy/forgottenmapeditor) Map editor written in lua for Open Tibia. Written with OtClient's framework.
+- [**40**星][6y] [robertdavidgraham/hamster](https://github.com/robertdavidgraham/hamster) A proxy server for cookie sidejacking. Works with 'ferret'.
+- [**40**星][1y] [TS] [icodesign/proxy-uri](https://github.com/icodesign/proxy-uri) Helper to generate/parse Shadowsocks(R)/HTTP(S) URI
+- [**40**星][5m] [C++] [avast/yaracpp](https://github.com/avast/yaracpp) C++ wrapper for YARA.
+- [**40**星][2y] [Py] [wibiti/evedec](https://github.com/wibiti/evedec) Eve Online decrypter/decompiler
+- [**40**星][2y] [PS] [jaredhaight/powerpunch](https://github.com/jaredhaight/powerpunch) A collection of PowerScripts for Pentesting
+- [**40**星][3y] [Ruby] [gallopsled/pwntools-binutils](https://github.com/gallopsled/pwntools-binutils) Building binutils for pwntools
+- [**40**星][9d] [C#] [damonmohammadbagher/nativepayload_reverseshell](https://github.com/damonmohammadbagher/nativepayload_reverseshell) This is Simple C# Source code to Bypass almost "all" AVS, (kaspersky v19, Eset v12 v13 ,Trend-Micro v16, Comodo & Windows Defender Bypassed via this method Very Simple)
+- [**40**星][6m] [C#] [guibacellar/dnci](https://github.com/guibacellar/dnci) DNCI - Dot Net Code Injector
+- [**40**星][1y] [Shell] [nick-the-greek/aerial](https://github.com/nick-the-greek/aerial) Multi-mode wireless LAN Based on a Software Access point for Kali Linux.
+- [**40**星][5y] [Py] [flankerhqd/wifimonster](https://github.com/flankerhqd/wifimonster) Wifi sniffing and hijacking tool
+- [**40**星][1y] [Ruby] [trailofbits/rubysec](https://github.com/trailofbits/rubysec) RubySec Field Guide
+- [**40**星][2d] [thespeedx/proxy-list](https://github.com/TheSpeedX/PROXY-List) Get PROXY List that gets updated everyday
+- [**40**星][1y] [HTML] [raidandfade/hacktoberchallenges2018](https://github.com/RaidAndFade/HacktoberChallenges2018) Welcome! I need some help making my list... Learn how in the README
+- [**40**星][5y] [Java] [paloaltonetworks/installerhijackingvulnerabilityscanner](https://github.com/PaloAltoNetworks/InstallerHijackingVulnerabilityScanner)
+- [**40**星][2m] [Py] [nerrorsec/googledorker](https://github.com/nerrorsec/GoogleDorker) This is a simple tool to automate google hacking when doing web penetration testing or bug hunting.
+- [**40**星][4m] [Py] [gh0stkey/jsonandhttpp](https://github.com/gh0stkey/JSONandHTTPP) Burp Suite Plugin: Convert the json text that returns the body into HTTP request parameters.
+- [**40**星][4y] [Lua] [aoncyberlabs/nmap-scripts](https://github.com/AonCyberLabs/Nmap-Scripts)
+- [**40**星][3y] [Ruby] [fsecurelabs/honeypot_recipes](https://github.com/FSecureLABS/honeypot_recipes) A chef cookbook which can be used to quickly deploy a high interaction honeypot, using the sysdig and falco tools
+- [**40**星][2y] [JS] [auth0-blog/hapi-jwt-authentication](https://github.com/auth0-blog/hapi-jwt-authentication)
+- [**40**星][7d] [Dockerfile] [crytic/eth-security-toolbox](https://github.com/crytic/eth-security-toolbox) A Docker container preconfigured with all of the Trail of Bits Ethereum security tools.
+- [**40**星][10m] [scheme] [aki helin/radamsa](https://gitlab.com/akihe/radamsa)
+- [**40**星][3y] [C++] [zer0mem0ry/manualmap](https://github.com/zer0mem0ry/manualmap) A Simple demonstration of manual dll injector
+- [**40**星][2y] [Shell] [zephrfish/attackdeploy](https://github.com/zephrfish/attackdeploy) Scripts for Deploying new server
+- [**40**星][3y] [Lua] [z-0ne/scans2-045-nmap](https://github.com/z-0ne/scans2-045-nmap) Struts2 S2-045-Nmap NSE script
+- [**40**星][2y] [C++] [yifengyou/code-virtualization-and-automation-analysis](https://github.com/yifengyou/code-virtualization-and-automation-analysis) 代码虚拟化与自动化分析
+- [**40**星][3y] [Py] [xiphosresearch/phuzz](https://github.com/xiphosresearch/phuzz) Find exploitable PHP files by parameter fuzzing and function call tracing
+- [**40**星][3y] [Py] [xiphosresearch/dnsbrute](https://github.com/xiphosresearch/dnsbrute) DNS Sub-domain brute forcer, in Python + gevent
+- [**40**星][3y] [HTML] [xiaoyanguoke/ciahackingtools](https://github.com/xiaoyanguoke/ciahackingtools) WikiLeaks Vault 7 CIA Hacking Tools
+- [**40**星][14d] [PHP] [xchwarze/cain](https://github.com/xchwarze/cain) Password recovery tool for Microsoft Operating Systems. It allows easy recovery of various kind of passwords by sniffing the network, cracking encrypted passwords using Dictionary, Brute-Force and Cryptanalysis attacks, recording VoIP conversations, decoding scrambled passwords, recovering wireless network keys, revealing password boxes, uncover…
+- [**40**星][3y] [C++] [x64dbg/interobfu](https://github.com/x64dbg/interobfu) Intermediate x86 instruction representation for use in obfuscation/deobfuscation.
+- [**40**星][3y] [PHP] [wso-shell/wso](https://github.com/wso-shell/wso) WSO SHELL , wso shell , WSO.php , wso.php , webshell , wso-shell веб-шелл , шелл , WSO2.5 , WSO2.5.1 , WSO2.php , Shell download, C99 , r57 , bypass shell , P.A.S. (php web-shell) , PPS 4.0 , Скачать WSO Web Shell , Скачать wso.php , Скачать Web Shell
+- [**40**星][6y] [C++] [wirepair/idapinlogger](https://github.com/wirepair/idapinlogger) Logs instruction hits to a file which can be fed into IDA Pro to highlight which instructions were called.
+- [**40**星][10m] [C++] [wildbydesign/appcontainer-launcher](https://github.com/WildByDesign/AppContainer-Launcher) AppContainer and LPAC (Less Privileged AppContainer) Launcher with Capabilities
+- [**40**星][3y] [C] [wi-fi-analyzer/wifi-arsenal](https://github.com/wi-fi-analyzer/wifi-arsenal) WiFi arsenal
+- [**40**星][2y] [C#] [wearelegal/cinarat](https://github.com/wearelegal/cinarat) CinaRAT - Cina Is Not A Remote Administration Tool
+- [**40**星][5d] [Py] [wangyihang/pwnme](https://github.com/wangyihang/pwnme) 二进制渗透题目汇总
+- [**40**星][1y] [Py] [wangyihang/codiad-remote-code-execute-exploit](https://github.com/wangyihang/codiad-remote-code-execute-exploit) A simple exploit to execute system command on codiad
+- [**40**星][1y] [Shell] [waja/maldetect](https://github.com/waja/maldetect) Debian packaging of Linux Malware Detect (
+- [**40**星][9m] [HTML] [voidhack/write-ups](https://github.com/voidhack/write-ups)
+- [**40**星][2y] [Py] [villanch/g3ar](https://github.com/villanch/g3ar) 渗透测试编程工具包
+- [**40**星][4m] [JS] [vigneshsrao/cve-2019-11707](https://github.com/vigneshsrao/cve-2019-11707) Exploit code for CVE-2019-11707 on Firefox 66.0.3 running on Ubuntu
+- [**40**星][8m] [Go] [txthinking/socks5](https://github.com/txthinking/socks5) SOCKS Protocol Version 5 Library in Go
+- [**40**星][4m] [Py] [tmr232/brutal-ida](https://github.com/tmr232/brutal-ida) 在IDA 7.3中禁用Undo/Redo
+- [**40**星][8m] [C#] [thaisenpm/loader3](https://github.com/thaisenpm/loader3) A self leak of a loader I sold on Selly for easy money to open a business. I got enough, it was leaked to shit. Enjoy
+- [**40**星][3y] [HTML] [tennc/1000php](https://github.com/tennc/1000php) 1000个PHP代码审计案例(2016.7以前乌云公开漏洞)
+- [**40**星][4y] [Elixir] [tatsuya6502/recon_ex](https://github.com/tatsuya6502/recon_ex) Elixir wrapper for Recon, tools to diagnose Erlang VM safely in production
+- [**40**星][7y] [C++] [taintdroid/android_platform_dalvik](https://github.com/taintdroid/android_platform_dalvik) Mirror of git://android.git.kernel.org/platform/dalvik.git with TaintDroid additions (mirror lags official Android)
+- [**40**星][3y] [Py] [stratosphereips/stratospheretestingframework](https://github.com/stratosphereips/stratospheretestingframework) The stratosphere testing framework is mean to help in the researching and verification of the behavioral models used by the Stratoshpere IPS.
+- [**40**星][8y] [C] [stephenfewer/ollyheaptrace](https://github.com/stephenfewer/ollyheaptrace) OllyHeapTrace is a plugin for OllyDbg to trace the heap operations being performed by a process.
+- [**40**星][6y] [C++] [stealth/fernmelder](https://github.com/stealth/fernmelder) async mass DNS resolver
+- [**40**星][6y] [sinsoul/sinsoulwebremotecontrol](https://github.com/sinsoul/sinsoulwebremotecontrol) 在任何地方通过网页控制和管理自己的计算设备
+- [**40**星][6y] [Py] [shadsidd/automated-xss-finder](https://github.com/shadsidd/automated-xss-finder) Automated XSS Finder
+- [**40**星][2m] [Go] [sensepost/go-out](https://github.com/sensepost/go-out)
+- [**40**星][2y] [Py] [securifera/cve-2018-6546-exploit](https://github.com/securifera/cve-2018-6546-exploit) CVE-2018-6546-Exploit
+- [**40**星][5y] [Py] [scottjpack/shellshock_scanner](https://github.com/scottjpack/shellshock_scanner) Python Scanner for "ShellShock" (CVE-2014-6271)
+- [**40**星][2y] [HTML] [scorelab/androphsy](https://github.com/scorelab/androphsy) An Open Source Mobile Forensics Investigation Tool for Android Platform
+- [**40**星][11m] [Py] [s2e/pykvm](https://github.com/s2e/pykvm) A tiny KVM hypervisor written in Python
+- [**40**星][10m] [C] [s-macke/starflight-reverse](https://github.com/s-macke/starflight-reverse) Reversed engineered game Starflight (1986)
+- [**40**星][11m] [C++] [rr-/crc-manipulator](https://github.com/rr-/crc-manipulator) Change CRC checksums of your files.
+- [**40**星][4y] [Py] [rooklabs/milano](https://github.com/rooklabs/milano) Hacking Team Malware Detection Utility
+- [**40**星][2y] [Py] [robputt796/py-dns-over-https-proxy](https://github.com/robputt796/py-dns-over-https-proxy) Provides a simple Python based proxy for running DNS over HTTPS to Google's DNS over HTTPS service.
+- [**40**星][3y] [C++] [regehr/compiler-crashes](https://github.com/regehr/compiler-crashes) 60 artisanal compiler crashes
+- [**40**星][3y] [Lua] [r00t-3xp10it/rc-exploiter](https://github.com/r00t-3xp10it/rc-exploiter) NOT SUPORTED ANYMORE -- try resource_files repository (mosquito)
+- [**40**星][5m] [Py] [q3k/tpm2137](https://github.com/q3k/tpm2137) Hardware task for WCTF2019
+- [**40**星][7d] [Shell] [pyllyukko/harden.sh](https://github.com/pyllyukko/harden.sh) Slackware hardening script
+- [**40**星][6y] [Ruby] [pwnieexpress/metasploit-framework](https://github.com/pwnieexpress/metasploit-framework) Unofficial fork of the Rapid7 metasploit-framework, pruned for minimal size.
+- [**40**星][9m] [olafhartong/detection-sources](https://github.com/olafhartong/detection-sources)
+- [**40**星][1y] [Py] [ocadotechnology/gcp-census](https://github.com/ocadotechnology/gcp-census) GAE python based app which regularly collects information about GCP resources and stores them in BigQuery
+- [**40**星][5y] [Py] [neuman/python-carteblanche](https://github.com/neuman/python-carteblanche) Module to align code with thoughts of users and designers. Also magically handles navigation and permissions.
+- [**40**星][3y] [C] [nccgroup/triforceopenbsdfuzzer](https://github.com/nccgroup/triforceopenbsdfuzzer) System call fuzzing of OpenBSD amd64 using TriforceAFL (i.e. AFL and QEMU)
+- [**40**星][6y] [Py] [nccgroup/lapith](https://github.com/nccgroup/lapith) A simple Nessus results viewer
+- [**40**星][2y] [n3uz/elastic-x-pack-crack](https://github.com/n3uz/elastic-x-pack-crack) 破解 x-pack 授权时间限制,白金版到2050年,仅做研究用途
+- [**40**星][1m] [Py] [n3k/pentest](https://github.com/n3k/pentest) Notes/Tools for pentesting
+- [**40**星][13d] [mykings/security-study-tutorial](https://github.com/mykings/security-study-tutorial) Summary of online learning materials
+- [**40**星][2y] [Py] [mxmssh/idametrics](https://github.com/mxmssh/idametrics) 收集x86体系结构的二进制可执行文件的静态软件复杂性度量
+- [**40**星][2y] [PHP] [mrsqar-ye/wpcrack](https://github.com/mrsqar-ye/wpcrack) wordpress hash cracker .
+- [**40**星][3m] [Py] [momalab/icsref](https://github.com/momalab/icsref) A tool for reverse engineering industrial control systems binaries.
+- [**40**星][1y] [Py] [mnrkbys/vss_carver](https://github.com/mnrkbys/vss_carver) Carves and recreates VSS catalog and store from Windows disk image.
+- [**40**星][1y] [Java] [miwong/intellidroid](https://github.com/miwong/intellidroid) A targeted input generator for Android that improves the effectiveness of dynamic malware analysis.
+- [**40**星][3m] [Py] [mikeperry-tor/vanguards](https://github.com/mikeperry-tor/vanguards) Vanguards help guard you from getting vanned...
+- [**40**星][1y] [Shell] [mavrepis/shodanvulncheck](https://github.com/mavrepis/shodanvulncheck) bash script to enumerate vulnerabilities on specific year through Shodan API
+- [**40**星][5m] [Lua] [mame82/misc](https://github.com/mame82/misc)
+- [**40**星][2y] [JS] [mafintosh/ws-to-tcp](https://github.com/mafintosh/ws-to-tcp) Proxy from WebSockets to TCP
+- [**40**星][2y] [Py] [m0rtem/mailfail](https://github.com/m0rtem/mailfail) Proof of Concept - Utilize misconfigured newsletter forms to spam / deny service to an inbox
+- [**40**星][3y] [Py] [lukasikic/kodi-backdoor-generator](https://github.com/lukasikic/kodi-backdoor-generator) Kodi Reverse Shell
+- [**40**星][4y] [C] [lillypad/badger](https://github.com/lillypad/badger) A Swiss Army Knife for Windows Exploit Development.
+- [**40**星][3y] [PHP] [lcatro/xss-hunter](https://github.com/lcatro/xss-hunter) XSS hunter 收集Webview 页面上存在的反射,储存型XSS ,方便应急APP 和前端页面在发布时遇到XSS 安全问题..
+- [**40**星][1y] [Py] [lanjelot/ctfs](https://github.com/lanjelot/ctfs) notes and code on past CTFs
+- [**40**星][3y] [C] [laginimaineb/cve-2016-2431](https://github.com/laginimaineb/cve-2016-2431) Qualcomm TrustZone kernel privilege escalation
+- [**40**星][4m] [Py] [kokokuo/scraper-fourone-jobs](https://github.com/kokokuo/scraper-fourone-jobs) This is a anti-scraping cracker for extracting apply information of one of Taiwan jobs recruiting website.
+- [**40**星][11m] [C#] [kevingosse/windbg-extensions](https://github.com/kevingosse/windbg-extensions) Extensions for the new WinDbg
+- [**40**星][2y] [C++] [kelvinhack/notruth](https://github.com/kelvinhack/notruth)
+- [**40**星][2y] [Py] [karttoon/trigen](https://github.com/karttoon/trigen) Trigen is a Python script which uses different combinations of Win32 function calls in generated VBA to execute shellcode.
+- [**40**星][3m] [Py] [karttoon/binsequencer](https://github.com/karttoon/binsequencer) BinSequencer is a script designed to find a common pattern of bytes within a set of samples and generate a YARA rule from the identified pattern.
+- [**40**星][7m] [PS] [k2/scripting](https://github.com/k2/scripting) PS / Bash / Python / Other scripts For FUN!
+- [**40**星][2y] [Java] [jwnie/proxyservice](https://github.com/jwnie/proxyservice) 抓取网上公开代理,维护可供爬虫使用的IP池,区分墙内墙外、http/https/socks代理。
+- [**40**星][2m] [jsecurity101/windows-api-to-sysmon-events](https://github.com/jsecurity101/windows-api-to-sysmon-events) A repository that maps API calls to Sysmon Event ID's.
+- [**40**星][3y] [jonbruner/twitter-analysis](https://github.com/jonbruner/twitter-analysis) The original dataset for my 2013 article on Twitter's network patterns
+- [**40**星][11m] [Py] [jh00nbr/phishruffus](https://github.com/jh00nbr/phishruffus) Intelligent threat hunter and phishing servers
+- [**40**星][9m] [Shell] [jceminer/cn_cpu_miner](https://github.com/jceminer/cn_cpu_miner) Cryptonote CPU Miner
+- [**40**星][2y] [Java] [ivianuu/contributer](https://github.com/ivianuu/contributer) Inject all types like views or a conductor controllers with @ContributesAndroidInjector
+- [**40**星][8y] [JS] [iriscouch/audit_couchdb](https://github.com/iriscouch/audit_couchdb) Detect security issues, large or small, in a CouchDB server
+- [**40**星][6y] [Py] [ipopov/starttls-mitm](https://github.com/ipopov/starttls-mitm) A starttls-capable transparent man-in-the-middle proxy
+- [**40**星][1y] [C] [in7egral/taig8-ios-jailbreak-patchfinder](https://github.com/in7egral/taig8-ios-jailbreak-patchfinder) Analyzes a binary iOS kernel to determine function offsets and where to apply the canonical jailbreak patches.
+- [**40**星][3y] [Assembly] [ilovepp/firminsight](https://github.com/ilovepp/firminsight) Automatic collect firmwares from internet,decompress,find binary code,extract info,file relation and function relation
+- [**40**星][4y] [C++] [igorkorkin/hypervisorsdetection](https://github.com/igorkorkin/hypervisorsdetection) This is the first software system, which can detect a stealthy hypervisor and calculate several nested ones even under countermeasures.
+- [**40**星][3m] [Py] [icanhasfay/pypwned](https://github.com/icanhasfay/pypwned) A Python client for the HaveIBeenPwned REST API
+- [**40**星][3d] [Erlang] [homas/ioc2rpz](https://github.com/homas/ioc2rpz) ioc2rpz is a place where threat intelligence meets DNS.
+- [**40**星][4y] [hexx0r/cve-2016-0051](https://github.com/hexx0r/cve-2016-0051)
+- [**40**星][3y] [C++] [hackshields/antivirus](https://github.com/hackshields/antivirus)
+- [**40**星][3y] [Py] [h0nus/spynoteshell](https://github.com/h0nus/spynoteshell) Simple Python tool for backdooring apks files (with meterpreter or shell of Metasploit)
+- [**40**星][14d] [grapheneos/vanadium](https://github.com/grapheneos/vanadium) Privacy and security enhanced releases of Chromium for GrapheneOS. Vanadium provides the WebView and standard user-facing browser on GrapheneOS. It depends on hardening in other GrapheneOS repositories and doesn't include patches not relevant to the build targets used on GrapheneOS.
+- [**40**星][2y] [godaddy/yara-rules](https://github.com/godaddy/yara-rules) YARA rules for use with ProcFilter
+- [**40**星][21d] [JS] [github/enable-security-alerts-sample](https://github.com/github/enable-security-alerts-sample) This repository contains a sample script which can be used to enable security vulnerability alerts in all of the repositories in a given organization.
+- [**40**星][2y] [C] [gamelinux/cxtracker](https://github.com/gamelinux/cxtracker) Connection Tracker is a passive network connection tracker for profiling, history, auditing and network discovery.
+- [**40**星][1y] [Shell] [g763007297/gqresign](https://github.com/g763007297/gqresign) ipa重签名(resign),只需一个证书的p12和一个mobileprovision文件就可以实现ipa的重签名
+- [**40**星][5y] [Py] [fireeye/chopshop](https://github.com/fireeye/chopshop) Protocol Analysis/Decoder Framework
+- [**40**星][2y] [Py] [fideliscyber/yalda](https://github.com/fideliscyber/yalda) yalda:分析文件,从中提取恶意数据(例如:URL)
+- [**40**星][4y] [C] [fi01/backdoor_mmap_tools](https://github.com/fi01/backdoor_mmap_tools) Unlock security module, obtain root privilege and so on.
+- [**40**星][2y] [Pascal] [felipedaragon/plua-xe](https://github.com/felipedaragon/plua-xe) Embed Lua into Delphi, FreePascal or Lazarus projects
+- [**40**星][1y] [PHP] [farisv/cj2018-final-ctf](https://github.com/farisv/cj2018-final-ctf) Cyber Jawara 2018 Final - Attack & Defense CTF services environments based on Docker.
+- [**40**星][3y] [Py] [fabiobaroni/was](https://github.com/fabiobaroni/was) Automatic USB drive malware scanning tool for the security-minded person
+- [**40**星][6y] [JS] [evilpacket/redis-sha-crack](https://github.com/evilpacket/redis-sha-crack) node / redis sha hash cracker
+- [**40**星][5y] [evi1m0/webshell](https://github.com/evi1m0/webshell) This is a webshell open source project
+- [**40**星][2y] [c++] [embedi/meitools](https://github.com/embedi/meitools) meitools:通过 MEI 与英特尔管理引擎进行通信
+- [**40**星][3m] [Groovy] [elastic/elasticsearch-groovy](https://github.com/elastic/elasticsearch-groovy) Elasticsearch Groovy client
+- [**40**星][7m] [Visual Basic .NET] [dzzie/re_plugins](https://github.com/dzzie/re_plugins) 逆向插件收集
+ - [IDASrvr](https://github.com/dzzie/re_plugins/tree/master/IDASrvr) wm_copydata IPC 服务器,通过WM_COPYDATA机制监听远程消息, 可从其他进程中想IDA发送命令,查询数据,控制接口显示
+ - [IDA_JScript](https://github.com/dzzie/re_plugins/tree/master/IDA_JScript) 通过IDASrvr,使用JavaScript编写IDA脚本(依赖ActiveX)
+ - [IDA_JScript_w_DukDbg](https://github.com/dzzie/re_plugins/tree/master/IDA_JScript_w_DukDbg) IDA_JScript进阶版
+ - [IDASrvr2](https://github.com/dzzie/re_plugins/tree/master/IDASrvr2) IDASrvr进阶版,添加x64支持
+ - [IdaUdpBridge](https://github.com/dzzie/re_plugins/tree/master/IdaUdpBridge) this replaces the udp command socket in idavbscript which was crashy
+ - [IdaVbScript](https://github.com/dzzie/re_plugins/tree/master/IdaVbScript) ton of small tools for IDA all thrown into one interface
+ - [OllySrvr](https://github.com/dzzie/re_plugins/tree/master/OllySrvr) wm_copydata IPC server running in olly
+ - [Olly_hittrace](https://github.com/dzzie/re_plugins/tree/master/Olly_hittrace) You set breakpoints in the UI and it will then run the app automating it and logging which ones were hit.
+ - [Olly_module_bpx](https://github.com/dzzie/re_plugins/tree/master/Olly_module_bpx) allow you to set breakpoints within modules which have not yet been loaded.
+ - [Olly_vbscript](https://github.com/dzzie/re_plugins/tree/master/Olly_vbscript) vbscript automation capability for olly including working across breakpoint events.
+ - [PyIDAServer](https://github.com/dzzie/re_plugins/tree/master/PyIDAServer) 测试在IDA中运行IPC服务器
+ - [Wingraph32](https://github.com/dzzie/re_plugins/tree/master/Wingraph32) This is another experiment at a wingraph32 replacement for ida. This one has more features to hide nodes, and can also navigate IDA to the selected function when you click on it in the graph.
+ - [rabc_gui](https://github.com/dzzie/re_plugins/tree/master/flash_tools/rabc_gui) this is a GUI front end for RABCDAsm to disasm, reasm, and reinsert modified script blocks back into flash files.
+ - [swfdump_gui](https://github.com/dzzie/re_plugins/tree/master/flash_tools/swfdump_gui) when run against a target swf, it will create a decompressed version of the swf and a .txt disasm log file these files will be cached and used on subsequent loads. if you wish to start over from scratch use the tools->delete cached * options.
+ - [gleegraph](https://github.com/dzzie/re_plugins/tree/master/gleegraph) a quick Wingraph32/qwingraph replacement that has some extra features such as being able to navigate IDA to the selected nodes when they are clicked on in graph view, as well as being able to rename the selected node from the graph, or adding a prefix to all child nodes below it.
+ - [hidden_strings](https://github.com/dzzie/re_plugins/tree/master/misc_tools/hidden_strings) scans for strings being build up in char arrays at runtime to hide from traditional strings output
+ - [memdump_conglomerate](https://github.com/dzzie/re_plugins/tree/master/misc_tools/memdump_conglomerate) reads a folder full of memory dumps and puts them all into a single dll husk so they will disassemble at the proper offsets.
+ - [memdump_embedder](https://github.com/dzzie/re_plugins/tree/master/misc_tools/memdump_embedder) takes a memory dump and embeds it into a dummy dll husk so that you can disassemble it at the target base address without having to manually reset it everytime
+ - [rtf_hexconvert](https://github.com/dzzie/re_plugins/tree/master/misc_tools/rtf_hexconvert) small tool to extract hex strings from a rtf document and show them in a listview. click on listitem to see decoded data in a hexeditor pane where you can save it
+ - [uGrapher](https://github.com/dzzie/re_plugins/tree/master/uGrapher) rename real wingraph32.exe to _wingraph.exe and put this one in its place.
+ - [wininet_hooks](https://github.com/dzzie/re_plugins/tree/master/wininet_hooks) Hook以下API调用并记录关键信息:HttpOpenRequest,InternetConnect,InternetReadFile,InternetCrackUrl,HttpSendRequest
+- [**40**星][10m] [C] [dzzie/hookexplorer](https://github.com/dzzie/hookexplorer) technical tool to analyze a process trying to find various types of runtime hooks. Interface and output is geared torwards security experts. Average users wont be able to decipher its output.
+- [**40**星][5y] [Go] [dutchcoders/troje](https://github.com/dutchcoders/troje) Troje is a honeypot built around lxc containers. It will run each connection with the service within a seperate lxc container.
+- [**40**星][21d] [Py] [dhondta/rpl-attacks](https://github.com/dhondta/rpl-attacks) RPL attacks framework for simulating WSN with a malicious mote based on Contiki
+- [**40**星][1y] [Py] [debasishm89/dotnetfuzz](https://github.com/debasishm89/dotnetfuzz) A quick and dirty .NET "Deserialize_*" fuzzer based on James Forshaw's (@tiraniddo) DotNetToJScript.
+- [**40**星][8y] [C++] [dbtsai/libdai](https://github.com/dbtsai/libdai) A free and open source C++ library for Discrete Approximate Inference in graphical models
+- [**40**星][2y] [C] [david-reguera-garcia-dreg/lsrootkit](https://github.com/david-reguera-garcia-dreg/lsrootkit) Rootkit Detector for UNIX
+- [**40**星][C] [d1w0u/arp-rootkit](https://github.com/d1w0u/arp-rootkit) An open source rootkit for the Linux Kernel to develop new ways of infection/detection.
+- [**40**星][3m] [Dockerfile] [cowrie/docker-cowrie](https://github.com/cowrie/docker-cowrie) Cowrie Docker GitHub repository
+- [**40**星][3y] [PS] [colemination/poweroutlook](https://github.com/colemination/poweroutlook) Sample code from Owning MS Outlook with Powershell
+- [**40**星][9m] [Py] [christhecoolhut/rocket-shot](https://github.com/christhecoolhut/rocket-shot) Backwards program slice stitching for automatic CTF problem solving.
+- [**40**星][1y] [Py] [ccapton/brook-ok](https://github.com/ccapton/brook-ok) brook程序服务端配置程序,一键搭建brook / Shadowsocks / Socks5服务用于科学上网
+- [**40**星][8m] [C#] [azure/reverse-proxy-dotnet](https://github.com/azure/reverse-proxy-dotnet) Reverse Proxy agent
+- [**40**星][4y] [CoffeeScript] [atom/loophole](https://github.com/atom/loophole) A hack to enable use of libraries that depend on a basic form of eval in Atom with CSP enabled
+- [**40**星][2y] [Py] [aqcurate/lsb-steganography](https://github.com/aqcurate/lsb-steganography) Least-Significant-Bit tool for steganography
+- [**40**星][5y] [C++] [anwarmohamed/packetyzer](https://github.com/anwarmohamed/packetyzer) Packetyzer is a high level library for C++ designed to make easier the forging and decoding of network packets. It has the ability to decode packets of most common network protocols, capture them and send them on the wire. This capability allows construction of tools that can probe, scan or attack networks.
+- [**40**星][10m] [anudeepnd/pihole-unbound](https://github.com/anudeepnd/pihole-unbound) Guide to setup Unbound recursive DNS resolver with Pi-Hole
+- [**40**星][3y] [PHP] [ambulong/phpmyxss](https://github.com/ambulong/phpmyxss) A XSS Project
+- [**40**星][4y] [Py] [alexbredo/honeypot-camera](https://github.com/alexbredo/honeypot-camera) observation camera honeypot
+- [**40**星][2y] [Py] [agustingianni/memrepl](https://github.com/agustingianni/memrepl) Frida 插件,辅助开发内存崩溃类的漏洞
+- [**40**星][2y] [JS] [agjmills/form-scrape](https://github.com/agjmills/form-scrape) form-scrape:示例chrome 扩展,以演示将JavaScript和html注入页面的危险
+- [**40**星][1y] [Shell] [adityashrm21/raspberrypi-packet-sniffer](https://github.com/adityashrm21/raspberrypi-packet-sniffer) An HTTP and HTTPS sniffing tool created using a Raspberry Pi
+- [**40**星][7m] [Py] [aaronsoria/panalizer](https://github.com/aaronsoria/panalizer)
+- [**40**星][2y] [C#] [aaaddress1/puzzcode](https://github.com/aaaddress1/puzzcode) simple compiler based on mingw to build uncrackable windows application against analysis tools
+- [**40**星][4y] [Java] [0ang3el/hqli-playground](https://github.com/0ang3el/hqli-playground)
+- [**39**星][1y] [Py] [ysh329/darknet2caffe](https://github.com/ysh329/darknet2caffe) Convert Darknet model to Caffe's
+- [**39**星][2y] [Go] [googlecloudplatform/stackdriver-reverse-proxy](https://github.com/googlecloudplatform/stackdriver-reverse-proxy) Simple HTTP proxy to automatically traces the incoming requests
+- [**39**星][4y] [Py] [joxeankoret/tahh](https://github.com/joxeankoret/tahh) Source codes for "The Antivirus Hackers Handbook" book.
+- [**39**星][4y] [Py] [honeynet/yapdns](https://github.com/honeynet/yapdns) YAPDNS
+- [**39**星][3y] [Py] [xl7dev/sectools](https://github.com/xl7dev/sectools) Pentests tools
+- [**39**星][2m] [Py] [meituan-dianping/lyrebird-ios](https://github.com/meituan-dianping/lyrebird-ios) 本程序是Lyrebird插件,您可以在插件中快速查看已连接iOS设备的详细设备信息,截取屏幕快照,以及查看已连接设备的应用信息。
+- [**39**星][1y] [Py] [tarunkant/endpoint-finder](https://github.com/tarunkant/endpoint-finder) Finds the End-Points in JavaScript files
+- [**39**星][10m] [Go] [zmap/zannotate](https://github.com/zmap/zannotate) Utility for annotating Internet datasets with contextual metadata (e.g., origin AS, MaxMind GeoIP2, reverse DNS, and WHOIS)
+- [**39**星][1y] [Perl] [cldrn/davtest](https://github.com/cldrn/davtest) davtest (improved)- Exploits WebDAV folders
+- [**39**星][11m] [Java] [thelinuxchoice/droidcam](https://github.com/thelinuxchoice/droidcam) Script to generate an Android App to take photos from Cameras
+- [**39**星][10m] [Kotlin] [cbeuw/cloak-android](https://github.com/cbeuw/cloak-android) Android client of Cloak
+- [**39**星][2y] [Py] [liang2580/btpanel-ss](https://github.com/liang2580/btpanel-ss) 基于宝塔Linux面板的shadowsocks可视化管理插件
+- [**39**星][15d] [Verilog] [lvd2/ay-3-8910_reverse_engineered](https://github.com/lvd2/ay-3-8910_reverse_engineered) The reverse-engineered AY-3-8910 chip. Transistor-level schematics, verilog model and a testbench with tools, that can render register dump files into .flac soundtrack.
+- [**39**星][10m] [Java] [zhongxunking/ids](https://github.com/zhongxunking/ids) 高效的分布式id生成器,每个客户端实例tps可达到100万,服务端毫无压力。即使服务端宕机了,id生成依然可用。支持多数据中心,支持id加密。
+- [**39**星][5m] [Java] [scalesec/vulnado](https://github.com/scalesec/vulnado) Purposely vulnerable Java application to help lead secure coding workshops
+- [**39**星][3m] [Java] [x41sec/beanstack](https://github.com/x41sec/beanstack) X41 BeanStack - Stack Trace Fingerprinting BETA
+- [**39**星][2m] [Assembly] [pelock/simple-polymorphic-engine-spe32](https://github.com/pelock/simple-polymorphic-engine-spe32) Simple Polymorphic Engine (SPE32) is a simple polymorphic engine for encrypting code and data. It is an amateur project that can be used to demonstrate what polymorphic engines are.
+- [**39**星][6y] [Shell] [intelisecurelabs/pineapple-confs](https://github.com/InteliSecureLabs/Pineapple-Confs) TPLink Pineapple Mods
+- [**39**星][10m] [C] [fsecurelabs/3d-accelerated-exploitation](https://github.com/FSecureLABS/3d-accelerated-exploitation) 3D Accelerated Exploitation
+- [**39**星][2y] [PS] [msadministrator/pprt](https://github.com/MSAdministrator/PPRT) This module is used to report phishing URLs to their WHOIS/RDAP abuse contact information.
+- [**39**星][3y] [Visual Basic .NET] [mwsrc/betterrat](https://github.com/mwsrc/BetterRAT) Better Remote Access Trojan
+- [**39**星][10m] [Java] [tijme/similar-request-excluder](https://github.com/tijme/similar-request-excluder) A Burp Suite extension that automatically marks similar requests as 'out-of-scope'.
+- [**39**星][6d] [Dockerfile] [ironpeakservices/iron-alpine](https://github.com/ironPeakServices/iron-alpine) Hardened alpine linux baseimage for Docker.
+- [**39**星][8y] [Py] [zynamics/bincrowd-plugin-ida](https://github.com/zynamics/bincrowd-plugin-ida) BinCrowd Plugin for IDA Pro
+- [**39**星][2y] [Py] [zjx20/socks-cli](https://github.com/zjx20/socks-cli) A solution to make CLI commands use socks5 proxy.
+- [**39**星][3y] [C++] [zibility/anti-rootkits](https://github.com/zibility/anti-rootkits) 内核级ARK工具。
+- [**39**星][4y] [C] [xvilka/hacklu](https://github.com/xvilka/hacklu)
+- [**39**星][2y] [ObjC] [xpreeks/g0blin](https://github.com/xpreeks/g0blin) v0rtex + yalu102
+- [**39**星][7y] [Perl] [xme/cuckoomx](https://github.com/xme/cuckoomx) CuckooMX is a project to automate analysis of files transmitted over SMTP (using the Cuckoo sandbox)
+- [**39**星][5y] [C] [x43x61x69/codeunsign](https://github.com/x43x61x69/codeunsign) A Mach-O binary codesign remover.
+- [**39**星][6y] [Java] [wuntee/burpauthzplugin](https://github.com/wuntee/burpauthzplugin)
+- [**39**星][3y] [Py] [wraith-wireless/wraith](https://github.com/wraith-wireless/wraith) Wireless Reconnaissance And Intelligent Target Harvesting
+- [**39**星][6y] [Py] [viaforensics/android-encryption](https://github.com/viaforensics/android-encryption) Brute force and decryption of Android's Full Device Encryption
+- [**39**星][2y] [Py] [vah13/sap_vulnerabilities](https://github.com/vah13/sap_vulnerabilities) DoS PoC's for SAP products
+- [**39**星][8d] [Shell] [userlandkernel/plataoplomo](https://github.com/userlandkernel/plataoplomo) Collection of (at time of release) iOS bugs I found
+- [**39**星][2y] [C] [tum-i22/obfuscation-benchmarks](https://github.com/tum-i22/obfuscation-benchmarks) A set of programs used for benchmarking the strength of obfuscation
+- [**39**星][3y] [Py] [tomasreimers/tensorflow-graph-compression](https://github.com/tomasreimers/tensorflow-graph-compression) Compress graph files for tensorflow.
+- [**39**星][5y] [Shell] [tjluoma/bash-fix](https://github.com/tjluoma/bash-fix) Download and compile a new version of bash to replace vulnerable one
+- [**39**星][10m] [Go] [timothyye/namebeta](https://github.com/timothyye/namebeta) A command line domain query tool.
+- [**39**星][2y] [Java] [tiked/androrw](https://github.com/tiked/androrw) PoC Ransomware for android
+- [**39**星][1y] [Assembly] [therealsaumil/arm_shellcode](https://github.com/therealsaumil/arm_shellcode) Make ARM Shellcode Great Again
+- [**39**星][2y] [Py] [thecjw/ida_android_script](https://github.com/thecjw/ida_android_script) 辅助Android调试的IDAPython脚本
+- [**39**星][5y] [Py] [techbliss/adb_helper_qt_super_version](https://github.com/techbliss/adb_helper_qt_super_version) All You Need For Ida Pro And Android Debugging
+- [**39**星][4y] [Py] [takahiroharuyama/openioc_scan](https://github.com/takahiroharuyama/openioc_scan) openioc_scan Volatility Framework plugin
+- [**39**星][3y] [Shell] [superkojiman/rfishell](https://github.com/superkojiman/rfishell) Provide a shell-like interface for exploiting Remote File Inclusion vulnerabilities.
+- [**39**星][1y] [Py] [sundaysec/andspoilt](https://github.com/sundaysec/andspoilt) Run interactive android exploits in linux.
+- [**39**星][4m] [C] [stephenrkell/trap-syscalls](https://github.com/stephenrkell/trap-syscalls) Monitor, rewrite and/or otherwise trap system calls... on Linux/x86-64 only, for now.
+- [**39**星][5m] [HTML] [sophoslabs/cve-2019-0888](https://github.com/sophoslabs/cve-2019-0888) PoC for CVE-2019-0888 - Use-After-Free in Windows ActiveX Data Objects (ADO)
+- [**39**星][3y] [C#] [sneaksensed/hiddentear](https://github.com/sneaksensed/hiddentear) HiddenTear Cyan Edition - A real life ransomware coded in C#
+- [**39**星][6y] [C] [smartinm/diskcryptor](https://github.com/smartinm/diskcryptor) DiskCryptor - Open source partition encryption solution
+- [**39**星][4y] [C++] [simutrace/simutrace](https://github.com/simutrace/simutrace) Tracing framework for full system simulators
+- [**39**星][5m] [Py] [silv3rhorn/artifactextractor](https://github.com/silv3rhorn/artifactextractor) Extract common Windows artifacts from source images and VSCs
+- [**39**星][8m] [JS] [shadow-workers/shadow-workers](https://github.com/shadow-workers/shadow-workers) Shadow Workers is a free and open source C2 and proxy designed for penetration testers to help in the exploitation of XSS and malicious Service Workers (SW)
+- [**39**星][4y] [Pascal] [senjaxus/delphi_remote_access_pc](https://github.com/senjaxus/delphi_remote_access_pc) Remote access in Delphi 7 and Delphi XE5 (With sharer files, CHAT and Forms Inheritance) || Acesso Remoto em Delphi 7 e Delphi XE5 (Com Compartilhador de Arquivos, CHAT e Herança de Formulários)
+- [**39**星][9m] [Py] [secgroup/mignis](https://github.com/secgroup/mignis) Mignis is a semantic based tool for firewall configuration.
+- [**39**星][13d] [Py] [sdnewhop/grinder](https://github.com/sdnewhop/grinder)
+- [**39**星][1y] [JS] [sauldoescode/rilti.js](https://github.com/sauldoescode/rilti.js) a small opinionated future forward front-end framework
+- [**39**星][3y] [C++] [sam-b/hacksysdriverexploits](https://github.com/sam-b/hacksysdriverexploits)
+- [**39**星][9m] [Py] [sadfud/exploits](https://github.com/sadfud/exploits) Real world and CTFs exploiting web/binary POCs.
+- [**39**星][9m] [Py] [rr-/ida-images](https://github.com/rr-/ida-images) 图像预览插件,辅助查找图像解码函数(运行复杂代码,查看内存中是否存在图像)
+- [**39**星][3y] [C++] [rootkiter/reverse-engineering](https://github.com/rootkiter/reverse-engineering) 软件逆向
+- [**39**星][1y] [Batchfile] [romanzaikin/ollydbg-v1.10-with-best-plugins-and-immunity-debugger-theme-](https://github.com/romanzaikin/ollydbg-v1.10-with-best-plugins-and-immunity-debugger-theme-) Make OllyDbg v1.10 Look like Immunity Debugger & Best Plugins
+- [**39**星][3y] [ActionScript] [riusksk/flashscanner](https://github.com/riusksk/flashscanner) Flash XSS Scanner
+- [**39**星][5y] [PHP] [ridter/webshell](https://github.com/ridter/webshell) This is a webshell open source project
+- [**39**星][2y] [Py] [resultsmayvary/ctf](https://github.com/resultsmayvary/ctf) CTF Writeups
+- [**39**星][3y] [Py] [rebootuser/hashmash](https://github.com/rebootuser/hashmash) Hashmash is a tool to aid in generating hashes from user supplied values and Epochs
+- [**39**星][10m] [M4] [raspberrypi/usbbootgui](https://github.com/raspberrypi/usbbootgui) GUI for booting a Raspberry Pi device like Pi Zero or compute module as a device
+- [**39**星][12m] [ranginang67/firecrack](https://github.com/ranginang67/firecrack)
+- [**39**星][2y] [Java] [quhw/xtunnel](https://github.com/quhw/xtunnel) An useful TCP/SSL tunnel utility.
+- [**39**星][6y] [Py] [proteansec/fuzzyftp](https://github.com/proteansec/fuzzyftp) The FTP fuzzer for Sulley and Peach.
+- [**39**星][3y] [Java] [portswigger/authz](https://github.com/portswigger/authz)
+- [**39**星][2y] [C#] [phylliida/unityvoip](https://github.com/phylliida/unityvoip) [Doesn't work now sorry] Real time peer to peer voice chat in Unity, using CSCore, NSpeex, and UnityP2P
+- [**39**星][2y] [VHDL] [pedrorivera/siafpgaminer](https://github.com/pedrorivera/siafpgaminer) VHDL FPGA design of an optimized Blake2b pipeline to mine Siacoin
+- [**39**星][1y] [PS] [outflanknl/doh_c2_trigger](https://github.com/outflanknl/doh_c2_trigger) Code for blogpost:
+- [**39**星][2m] [Go] [opencoff/go-tunnel](https://github.com/opencoff/go-tunnel) TLS/SSL Tunnel - A modern STunnel replacement written in golang
+- [**39**星][4m] [TS] [oleavr/frida-agent-example](https://github.com/oleavr/frida-agent-example) Example Frida agent written in TypeScript
+- [**39**星][4m] [CSS] [oasis-open/cti-documentation](https://github.com/oasis-open/cti-documentation) OASIS TC Open Repository: GitHub Pages site for STIX, CybOX, and TAXII
+- [**39**星][5d] [Py] [ntdiff/ntdiff](https://github.com/ntdiff/ntdiff)
+- [**39**星][10m] [Py] [noobscode/kalel](https://github.com/noobscode/kalel) Kal El Network Stress Test and Penetration Testing Toolkit
+- [**39**星][1y] [Py] [netspi/spoofspotter](https://github.com/netspi/spoofspotter) A tool to catch spoofed NBNS responses.
+- [**39**星][2y] [PHP] [nao-sec/mal_getter](https://github.com/nao-sec/mal_getter) Tool for dropping malware from EK
+- [**39**星][2y] [Py] [mthbernardes/houseproxy](https://github.com/mthbernardes/houseproxy) Protect your parents from phishing
+- [**39**星][2m] [Ruby] [mrackwitz/jeroboam](https://github.com/mrackwitz/jeroboam) Check all your apps on macOS for vulnerable Sparkle updaters
+- [**39**星][11m] [Py] [mpgn/beast-poc](https://github.com/mpgn/beast-poc)
+- [**39**星][10m] [Go] [moriyoshi/devproxy](https://github.com/moriyoshi/devproxy) A swiss army knife of forward HTTP proxies
+- [**39**星][7m] [HTML] [mindflavor/tdsbridge](https://github.com/mindflavor/tdsbridge) TDS Proxy library
+- [**39**星][2y] [milkdevil/ultimateapplockerbypasslist](https://github.com/milkdevil/ultimateapplockerbypasslist)
+- [**39**星][6y] [Perl] [micahflee/trollwot](https://github.com/micahflee/trollwot) Trolling the Web of Trust
+- [**39**星][6m] [Batchfile] [meesong/nt-crucial-modules](https://github.com/meesong/nt-crucial-modules) Collect different versions of Crucial modules.
+- [**39**星][7m] [Dockerfile] [marco-lancini/docker_burp](https://github.com/marco-lancini/docker_burp) Burp Pro as a Docker Container
+- [**39**星][1m] [JS] [lydell/eslump](https://github.com/lydell/eslump) Fuzz testing JavaScript parsers and suchlike programs.
+- [**39**星][10m] [lj147/awesome-wechat](https://github.com/lj147/awesome-wechat) 技术型干货分享公众号集合,点击公众号链接即可扫描快速二维码。
+- [**39**星][3y] [Shell] [lawliet89/llvm-obfuscator](https://github.com/lawliet89/llvm-obfuscator) LLVM Obfuscator
+- [**39**星][2y] [JS] [laomu1988/koa2-proxy](https://github.com/laomu1988/koa2-proxy) 基于koa@next的代理工具,支持http和https,并且可以当做本地服务器使用
+- [**39**星][4y] [C] [laginimaineb/waroftheworlds](https://github.com/laginimaineb/waroftheworlds) QSEE Shellcode to directly hijack the "Normal World" Linux Kernel
+- [**39**星][4m] [C#] [killeroo/powerping](https://github.com/killeroo/powerping) Advanced command-line ping tool
+- [**39**星][11m] [Py] [keli/furion](https://github.com/keli/furion) Socks5 + SSL Proxy
+- [**39**星][3y] [Java] [kdkanishka/virustotal-public-api-v2.0-client](https://github.com/kdkanishka/virustotal-public-api-v2.0-client) VirusTotal public API 2.0 implementation in Java
+- [**39**星][10m] [Go] [joanbono/gurp](https://github.com/joanbono/gurp) Burp Commander written in Go
+- [**39**星][3y] [Py] [jevalenciap/iptodomain](https://github.com/jevalenciap/iptodomain) This tool extract domains from IP address based in the information saved in virustotal.
+- [**39**星][2y] [Py] [jas502n/st2-048](https://github.com/jas502n/st2-048) st2-048
+- [**39**星][2y] [PS] [jaredhaight/powershellclasslab](https://github.com/jaredhaight/powershellclasslab)
+- [**39**星][2y] [Py] [jamespayor/vector-homomorphic-encryption](https://github.com/jamespayor/vector-homomorphic-encryption) 6.857 project - implementation of scheme for encrypting integer vectors that allows addition, linear transformation, and weighted inner products.
+- [**39**星][3m] [Go] [jakejarvis/subtake](https://github.com/jakejarvis/subtake) Automatic finder for subdomains vulnerable to takeover. Written in Go, based on
+- [**39**星][10y] [izsh/ida-python-scripts](https://github.com/izsh/ida-python-scripts) IDA Python Scripts
+- [**39**星][6y] [Clojure] [isecpartners/scout](https://github.com/isecpartners/scout) AWS EC2 and S3 Security Auditing Tool
+- [**39**星][2m] [igorbrigadir/twitter-advanced-search](https://github.com/igorbrigadir/twitter-advanced-search) Advanced Search for Twitter.
+- [**39**星][2y] [HTML] [hugsy/codebro](https://github.com/hugsy/codebro) Web based code browser using clang to provide basic code analysis.
+- [**39**星][3y] [Py] [houbbit/haveibeenpwned](https://github.com/houbbit/haveibeenpwned) Python script to verify multiple email addresses for pwnage
+- [**39**星][3m] [C] [hlandau/ortega](https://github.com/hlandau/ortega) Ortega FDK
+- [**39**星][3y] [C++] [hasherezade/petya_recovery](https://github.com/hasherezade/petya_recovery) Application for cracking Red Petya key based on genetic algorithms.
+- [**39**星][4m] [hackingthings/publications](https://github.com/hackingthings/publications) All related files and slides for past talks
+- [**39**星][3y] [grrrdog/zeronights-hackquest-2016](https://github.com/grrrdog/zeronights-hackquest-2016) 2 web tasks from ZeroNights HackQuest 2016
+- [**39**星][1y] [Dockerfile] [gmdutra/docker-inurlbr](https://github.com/gmdutra/docker-inurlbr) Advanced search in search engines, enables analysis provided to exploit GET / POST capturing emails & urls, with an internal custom validation junction for each target / url found.
+- [**39**星][3m] [Py] [gh2o/rvi_capture](https://github.com/gh2o/rvi_capture) rvictl for Linux and Windows: capture packets sent/received by iOS devices
+- [**39**星][7y] [C] [gdbinit/gimmedebugah](https://github.com/gdbinit/gimmedebugah) A small utility to inject a Info.plist into binaries.
+- [**39**星][7m] [Go] [function61/holepunch-client](https://github.com/function61/holepunch-client) Totally self-contained SSH reverse tunnel written in Go
+- [**39**星][2y] [exploitagency/github-esploit](https://github.com/exploitagency/github-esploit) !!! Deprecated See ESPloitV2 !!! Original PoC(Released: Sep 11, 2016) - WiFi controlled keystroke injection Using ESP8266 and 32u4 based Arduino HID Keyboard Emulator
+- [**39**星][1y] [Dockerfile] [elejke/docker-socks5](https://github.com/elejke/docker-socks5) Docker для поднятия socks5 proxy сервера
+- [**39**星][5m] [C++] [egebalci/keylogger](https://github.com/egebalci/keylogger) Simple C++ Keylogger...
+- [**39**星][2y] [Shell] [e-f-a/v3](https://github.com/e-f-a/v3) E.F.A version 3.x.x.x
+- [**39**星][1m] [d1nfinite/sec-interview](https://github.com/d1nfinite/sec-interview) 信息安全面试题汇总
+- [**39**星][1y] [Py] [dissectmalware/malwarecmdmonitor](https://github.com/dissectmalware/malwarecmdmonitor) Shows command lines used by latest instances analyzed on Hybrid-Analysis
+- [**39**星][1y] [Py] [dissectmalware/batch_deobfuscator](https://github.com/dissectmalware/batch_deobfuscator) Deobfuscate batch scripts obfuscated using string substitution and escape character techniques.
+- [**39**星][3y] [Java] [directdefense/superserial-active](https://github.com/directdefense/superserial-active) SuperSerial-Active - Java Deserialization Vulnerability Active Identification Burp Extender
+- [**39**星][5y] [Py] [dionach/passhunt](https://github.com/dionach/passhunt) Search drives for documents containing passwords
+- [**39**星][4y] [JS] [digitalbond/canbus-utils](https://github.com/digitalbond/canbus-utils) Command line utilities for analyzing CANbus traffic
+- [**39**星][4y] [PS] [dfinke/onegetgistprovider](https://github.com/dfinke/onegetgistprovider) Gist-as-a-Package - PackageManagement PowerShell Provider to interop with Github Gists
+- [**39**星][1y] [CSS] [destructivevoice/destructivefarm](https://github.com/destructivevoice/destructivefarm) Exploit farm for attack-defense CTF competitions
+- [**39**星][5y] [C] [cyanogenmod/android_external_openssl](https://github.com/cyanogenmod/android_external_openssl) OpenSSL for Android
+- [**39**星][5y] [JS] [csh/stegosploit](https://github.com/csh/stegosploit) IMAJS meet
+- [**39**星][1y] [Py] [csecgroup/wafid](https://github.com/csecgroup/wafid) Wafid identify and fingerprint Web Application Firewall (WAF) products.
+- [**39**星][2y] [Py] [cryptokrishtopher/binancescanner](https://github.com/cryptokrishtopher/binancescanner)
+- [**39**星][5m] [Java] [coveros/zap-sonar-plugin](https://github.com/coveros/zap-sonar-plugin) Integrates OWASP Zed Attack Proxy reports into SonarQube
+- [**39**星][4y] [C++] [corelan/pin](https://github.com/corelan/pin) Collection of pin tools
+- [**39**星][3y] [C] [cn33liz/hsevd-arbitraryoverwritegdi](https://github.com/cn33liz/hsevd-arbitraryoverwritegdi) HackSys Extreme Vulnerable Driver - ArbitraryOverwrite Exploit using GDI
+- [**39**星][4m] [cmlh/maltego-haveibeenpwned](https://github.com/cmlh/maltego-haveibeenpwned) Maltego integration of
+- [**39**星][2y] [HTML] [chybeta/cve-2018-1000006-demo](https://github.com/chybeta/cve-2018-1000006-demo) The Demo for CVE-2018-1000006
+- [**39**星][1y] [chichou/10.13.5-sip-bypass](https://github.com/chichou/10.13.5-sip-bypass)
+- [**39**星][3y] [Py] [brianwrf/sambahunter](https://github.com/brianwrf/sambahunter) It is a simple script to exploit RCE for Samba (CVE-2017-7494 ).
+- [**39**星][5y] [JS] [breach/mod_strip](https://github.com/breach/mod_strip) Breach default layout / tabbing module
+- [**39**星][11m] [Go] [boy-hack/gowhatweb](https://github.com/boy-hack/gowhatweb) [学习GO] go语言写的web指纹识别 - Identify websites by go language
+- [**39**星][2y] [Py] [bonelee/dns_tunnel_dectect_with_cnn](https://github.com/bonelee/dns_tunnel_dectect_with_cnn) dns tunnel dectect with CNN
+- [**39**星][2y] [Java] [bit4woo/burp_collaborator_http_api](https://github.com/bit4woo/burp_collaborator_http_api) burp_collaborator_http_api: 基于Burp Collaborator的HTTP API
+- [**39**星][9m] [binarymist/holisticinfosec-for-webdevelopers-fascicle0](https://github.com/binarymist/holisticinfosec-for-webdevelopers-fascicle0)
+- [**39**星][2y] [C] [bi-zone/rdtsc-checkvirt-poc](https://github.com/bi-zone/rdtsc-checkvirt-poc) rdtsc-checkvirt-poc: 利用预测执行(speculative execution)检测虚拟化
+- [**39**星][9y] [OCaml] [berke/jsure](https://github.com/berke/jsure) JSure is a fast, standalone Javascript checker.
+- [**39**星][7y] [C++] [bend/rar_crack](https://github.com/bend/rar_crack) A rar password cracker using brute force attack
+- [**39**星][13d] [C] [bdutro/ibm_pw_clear](https://github.com/bdutro/ibm_pw_clear) Small EFI utility that clears the power-on and setup passwords in IBM x3550/x3650 M3 servers
+- [**39**星][2y] [Lua] [bcsecorg/ethereum_devp2p_wireshark_dissector](https://github.com/bcsecorg/ethereum_devp2p_wireshark_dissector) This is Ethereum devp2p protocol dissector plugin for wireshark.
+- [**39**星][7m] [Py] [bbva/patton-cli](https://github.com/bbva/patton-cli) The knife of the Admin & Security auditor
+- [**39**星][2y] [Go] [averagesecurityguy/searchscan](https://github.com/averagesecurityguy/searchscan) Search Nmap and Metasploit scanning scripts.
+- [**39**星][3y] [JS] [auth0-blog/nodejs-awesome-polls](https://github.com/auth0-blog/nodejs-awesome-polls)
+- [**39**星][3y] [C++] [attackercan/cpp-sql-fuzzer](https://github.com/attackercan/cpp-sql-fuzzer)
+- [**39**星][3y] [C] [arinerron/cve-2016-5195](https://github.com/arinerron/cve-2016-5195) Automated Android root via CVE-2016-5195 (dirtycow/dirtyc0w PoC)
+- [**39**星][2y] [Roff] [apxar/xlog](https://github.com/apxar/xlog) web日志扫描工具
+- [**39**星][2y] [ActionScript] [appsecco/json-flash-csrf-poc](https://github.com/appsecco/json-flash-csrf-poc) This repo contains the files required to perform a CSRF attack using Flash and HTTP 307 redirections.
+- [**39**星][2y] [Java] [aninstein/network-security-situation-awareness-system](https://github.com/aninstein/network-security-situation-awareness-system) 综合了资产检测,主机扫描,流量分析等技术,通过这些技术取得网络资产,脆弱性,威胁等指标,从而根据这些指标计算出当前网络的网络安全态势。
+- [**39**星][3y] [C] [andnxor/andnxor_dc24_badge](https://github.com/andnxor/andnxor_dc24_badge) AND!XOR DEFCON 24 Badge HW and SW
+- [**39**星][4m] [PS] [absozed/steamprivesc](https://github.com/absozed/steamprivesc) Simple tool collection for escalation to NT AUTHORITY\SYSTEM from recently disclosed Steam Client Zero Day
+- [**39**星][1y] [dcid/ossec-hids](https://bitbucket.org/dcid/ossec-hids)
+- [**38**星][2m] [Py] [kamingchan/shadowsocks-munager](https://github.com/kamingchan/shadowsocks-munager) Middleware of shadowsocks-libev and sspanel
+- [**38**星][1m] [Lua] [hackertarget/nmap-nse-scripts](https://github.com/hackertarget/nmap-nse-scripts) Nmap NSE scripts that have been customised or created
+- [**38**星][] [Rust] [verideth/dll_hook-rs](https://github.com/verideth/dll_hook-rs) Rust code to show how hooking in rust with a dll works.
+- [**38**星][3y] [HTML] [cryptogenic/ps4-playground-3.55](https://github.com/cryptogenic/ps4-playground-3.55) A 3.55 implementation of PS4 Playground (based on CTurt's 1.76 original)
+- [**38**星][5y] [Py] [internetwache/ssh-honeypot](https://github.com/internetwache/ssh-honeypot) Simple SSH Honeypot in Python
+- [**38**星][4m] [HCL] [trailofbits/algo-ng](https://github.com/trailofbits/algo-ng) Experimental version of Algo built on Terraform
+- [**38**星][3y] [wtsxdev/exploit-development](https://github.com/wtsxdev/exploit-development) Resources for learning about Exploit Development
+- [**38**星][3m] [Py] [fireeye/win10_volatility](https://github.com/fireeye/win10_volatility) An advanced memory forensics framework
+- [**38**星][3m] [C++] [aliyuchang33/hv2ray](https://github.com/aliyuchang33/hv2ray) A linux GUI tool for v2ray base on QT.
+- [**38**星][3m] [Py] [oasis-open/cti-taxii-client](https://github.com/oasis-open/cti-taxii-client) OASIS TC Open Repository: TAXII 2 Client Library Written in Python
+- [**38**星][7m] [Py] [k8gege/ciscoexploit](https://github.com/k8gege/ciscoexploit) Cisco Exploit (CVE-2019-1821 Cisco Prime Infrastructure Remote Code Execution/CVE-2019-1653/Cisco SNMP RCE/Dump Cisco RV320 Password)
+- [**38**星][18d] [Swift] [fonta1n3/fullynoded](https://github.com/fonta1n3/fullynoded) A Bitcoin Core GUI for iOS devices. Allows you to connect to and control multiple nodes via Tor
+- [**38**星][1m] [lucasnaja/useful-dev-tools](https://github.com/lucasnaja/useful-dev-tools)
+- [**38**星][3m] [JS] [iwinston/javascript-code-protection-example](https://github.com/iwinston/javascript-code-protection-example) An example of JavaScript code protection
+- [**38**星][2y] [Py] [walkerfuz/pydbgeng](https://github.com/walkerfuz/PyDbgEng) a python wrapper of debug engines on windows, linux or osx, it's only aim to auto fuzzing.
+- [**38**星][2y] [vysecurity/cobaltsplunk](https://github.com/vysecurity/CobaltSplunk) Splunk Dashboard for CobaltStrike logs
+- [**38**星][1y] [C++] [contionmig/lsass-usermode-bypass](https://github.com/ContionMig/LSASS-Usermode-Bypass) This bypass is for anti cheats like battleye and EAC. All this does is abuse lsass's handles and use them for yourself. This is quite useful as this is usermode which doesnt require you to find a way to load a driver
+- [**38**星][3y] [C++] [hluwa/smali-anti-usageseach](https://github.com/hluwa/Smali-Anti-UsageSeach) 隐藏关键方法的相关调用
+- [**38**星][2y] [Py] [pegasuslab/wifi-miner-detector](https://github.com/PegasusLab/WiFi-Miner-Detector) Detecting malicious WiFi with mining cryptocurrency.
+- [**38**星][4m] [Py] [projecthorus/wenet](https://github.com/projecthorus/wenet) Wenet ("The Swift One") - Transmit and Receive code for the Project Horus High-Speed Imagery Payload.
+- [**38**星][4y] [C] [dadas190/penetrator-wps](https://github.com/dadas190/penetrator-wps) 实时攻击多个启用了WPS的AP
+- [**38**星][5y] [C++] [livemirror/pcshare](https://github.com/LiveMirror/pcshare)
+- [**38**星][2y] [C++] [lijuno/nrf24_ble](https://github.com/lijuno/nRF24_BLE) Hacking nRF24L01+ as a low-cost BLE beacon
+- [**38**星][1y] [Py] [initstring/evil-ssdp](https://gitlab.com/initstring/evil-ssdp)
+- [**38**星][3y] [JS] [zhuzhibo0/sslcloud](https://github.com/zhuzhibo0/sslcloud)
+- [**38**星][8m] [Py] [zeroq/amun](https://github.com/zeroq/amun) Amun Honeypot
+- [**38**星][2y] [Py] [ytisf/muninn](https://github.com/ytisf/muninn) A short and small memory forensics helper.
+- [**38**星][1m] [Py] [yaleimeng/free_proxy_pool](https://github.com/yaleimeng/free_proxy_pool) 对免费代理IP网站进行爬取,收集汇总为自己的代理池。关键是验证代理的有效性、匿名性、去重复
+- [**38**星][4y] [Java] [xyntax/jboss-exp](https://github.com/xyntax/jboss-exp) java反序列化漏洞利用-JBOSS(含payload生成的java项目,漏洞利用py脚本,shodan部分目标主机搜索结果)
+- [**38**星][5y] [PHP] [xpaw/httpsys](https://github.com/xpaw/httpsys)
+- [**38**星][5y] [xionox/moz-tor-relays](https://github.com/xionox/moz-tor-relays)
+- [**38**星][6y] [C] [x43x61x69/mach-o-prettifier](https://github.com/x43x61x69/mach-o-prettifier) A Mach-O Load Command deobfuscator.
+- [**38**星][3m] [Lua] [wubonetcn/luawaf](https://github.com/wubonetcn/luawaf) A secure and privately deployable web application firewall(WAF).一个安全、可私有部署的Web应用防火墙(WAF)。
+- [**38**星][3m] [Java] [voorivex/andrill](https://github.com/voorivex/andrill) a vulnerable mobile application interacting with a back-end API
+- [**38**星][10d] [JS] [tryghost/gscan](https://github.com/tryghost/gscan) Ghost theme scanner - checks for errors and feature support
+- [**38**星][8m] [Go] [tripwire/padcheck](https://github.com/tripwire/padcheck) TLS CBC Padding Oracle Checker
+- [**38**星][28d] [Py] [trailofbits/manticore-examples](https://github.com/trailofbits/manticore-examples) Example Manticore scripts
+- [**38**星][3y] [CSS] [thundercls/x64dbg_vs_dark](https://github.com/thundercls/x64dbg_vs_dark) x64dbg stylesheet like visual studio dark theme
+- [**38**星][3y] [HTML] [thugs-rumal/rumal](https://github.com/thugs-rumal/rumal) Thug's Rumāl: a Thug's dress & weapon
+- [**38**星][8m] [Java] [thomasdarimont/spring-boot-admin-keycloak-example](https://github.com/thomasdarimont/spring-boot-admin-keycloak-example) Example for protecting Spring Boot Admin & Spring Boot Actuator endpoints with Keycloak
+- [**38**星][4y] [HTML] [tevora-threat/splunk_pentest_app](https://github.com/tevora-threat/splunk_pentest_app) splunk_pentest_app
+- [**38**星][3m] [HTML] [terjanq/flag-capture](https://github.com/terjanq/flag-capture) Solutions and write-ups from security-based competitions also known as Capture The Flag competition
+- [**38**星][3y] [team-firebugs/burp-lfi-tests](https://github.com/team-firebugs/burp-lfi-tests) Fuzzing for LFI using Burpsuite
+- [**38**星][23d] [YARA] [te-k/pe](https://github.com/te-k/pe) CLI tool to analyze PE files
+- [**38**星][2y] [C++] [tanninone/usvfs](https://github.com/tanninone/usvfs) library using api hooking to implement process-local filesystem-independent file links.
+- [**38**星][1y] [Py] [tanc7/arms-commander](https://github.com/tanc7/arms-commander) Malware Suite/Menu designed for "Speedy and No-Mistakes Penetration Testing", written in Python 2.7.13 and tested on Kali Linux 4.6 & 4.9, originally intended to only perform the Reconnaissance and Enumeration Stages (it's role is dramatically expanded now). Requires Python 2.7 + Pip + Termcolor Module. All code is entirely free to be used in yo…
+- [**38**星][4y] [C] [taichisocks/shadowsocks](https://github.com/taichisocks/shadowsocks) Lightweight shadowsocks client for iOS and Mac OSX base on shadowsocks-libev
+- [**38**星][2y] [C++] [struct/hardenedpartitionalloc](https://github.com/struct/hardenedpartitionalloc) A forked and hardened version of PartitionAlloc from Chrome's Blink engine
+- [**38**星][6d] [C] [stefanberger/libtpms](https://github.com/stefanberger/libtpms) The libtpms library provides software emulation of a Trusted Platform Module (TPM 1.2 and TPM 2.0)
+- [**38**星][3m] [spiderlabs/iocs-idps](https://github.com/spiderlabs/iocs-idps) This repository will hold PCAP IOC data related with known malware samples (owner: Bryant Smith)
+- [**38**星][3y] [C] [spender-sandbox/cuckoomon-modified](https://github.com/spender-sandbox/cuckoomon-modified) Modified edition of cuckoomon
+- [**38**星][6y] [C] [shjalayeri/pwnypot](https://github.com/shjalayeri/pwnypot) PwnyPot, High Interaction Client Honeypot
+- [**38**星][2y] [C] [shellbombs/strongod](https://github.com/shellbombs/strongod) StrongOD(anti anti-debug plugin) driver source code.
+- [**38**星][4y] [Assembly] [sh3llc0d3r1337/windows_reverse_shell_1](https://github.com/sh3llc0d3r1337/windows_reverse_shell_1) Windows Reverse Shell shellcode
+- [**38**星][3y] [C] [scubsrgroup/taint-analyse](https://github.com/scubsrgroup/taint-analyse) Windows平台下的细粒度污点分析工具
+- [**38**星][14d] [Go] [scrapinghub/crawlera-headless-proxy](https://github.com/scrapinghub/crawlera-headless-proxy) A complimentary proxy to help to use Crawlera with headless browsers
+- [**38**星][3y] [C++] [scalys7/privilege-escalation-framework](https://github.com/scalys7/privilege-escalation-framework) Privilege Escilation training project, with an emphasis on the distinction between vulnerability research & it's exposure and exploitation methods(which are CVE-independent.)
+- [**38**星][4y] [C++] [sam-b/cve-2014-4113](https://github.com/sam-b/cve-2014-4113) Trigger and exploit code for CVE-2014-4113
+- [**38**星][2y] [Py] [saelo/ida_scripts](https://github.com/saelo/ida_scripts) 多脚本
+ - [kernelcache](https://github.com/saelo/ida_scripts/blob/master/kernelcache.py) 识别并重命名iOS kernelcache函数stub。ARM64 Only
+ - [ssdt](https://github.com/saelo/ida_scripts/blob/master/ssdt.py) 解析Windows内核中的syscall表
+- [**38**星][11d] [Py] [saeeddhqan/maryam](https://github.com/saeeddhqan/maryam) Open-source Intelligence(OSINT) Framework
+- [**38**星][1y] [Shell] [rordi/docker-antivirus](https://github.com/rordi/docker-antivirus) Docker antivirus & malware scanning (antivirus as a microservice / antivirus as a container)
+- [**38**星][10m] [PS] [rootup/redteam](https://github.com/rootup/redteam) One line PS scripts that may come handy during your network assesment
+- [**38**星][2y] [Py] [roothaxor/pystat](https://github.com/roothaxor/pystat) Advanced Netstat Using Python For Windows
+- [**38**星][3y] [Py] [ring04h/wyscan](https://github.com/ring04h/wyscan) WooYun Network Scanner
+- [**38**星][2y] [HTML] [rh0dev/expdev](https://github.com/rh0dev/expdev) exploit development
+- [**38**星][7y] [Java] [ravn/jsocks](https://github.com/ravn/jsocks) Updates for
+- [**38**星][23d] [Ruby] [rapid7/rex-powershell](https://github.com/rapid7/rex-powershell) Rex library for dealing with Powershell Scripts
+- [**38**星][13d] [q1271964185/cyberspace_security_learning](https://github.com/q1271964185/cyberspace_security_learning) 在学习CTF、网络安全路上整合自己博客和一些资料,持续更新~
+- [**38**星][3y] [Py] [programa-stic/marvin-dynamic-analyzer](https://github.com/programa-stic/marvin-dynamic-analyzer) Dynamic android vulnerability scanner using OpenNebula and Android-x86 emulators.
+- [**38**星][2y] [PS] [politoinc/elk-hunting](https://github.com/politoinc/elk-hunting) Threat Hunting with ELK Workshop (InfoSecWorld 2017)
+- [**38**星][7m] [Java] [pnfsoftware/jnihelper](https://github.com/pnfsoftware/jnihelper) jeb-plugin-android-jni-helper
+- [**38**星][2y] [Py] [phishai/idn_generator](https://github.com/phishai/idn_generator) idn_generator: 生成相似的IDN域名
+- [**38**星][1m] [Lua] [hackertarget/nmap-nse-scripts](https://github.com/hackertarget/nmap-nse-scripts) Nmap NSE scripts that have been customised or created
+- [**38**星][3d] [PLpgSQL] [percona-qa/percona-qa](https://github.com/percona-qa/percona-qa) Percona QA is a suite of scripts and utilities that assists in building, continuous integration, automated testing & bug reporting for Percona Server, Percona XtraDB Cluster, Percona XtraBackup, Percona Server for MongoDB, as well as other flavors of MySQL (Oracle, Facebook MyQSL, WebScaleSQL, MariaDB) etc.
+- [**38**星][6m] [C++] [peperunas/pasticciotto](https://github.com/peperunas/pasticciotto) Polymorphic VM and PoliCTF '17 reversing challenge.
+- [**38**星][4m] [Py] [outflanknl/redfile](https://github.com/outflanknl/redfile) A flask wsgi application that serves files with intelligence, good for serving conditional RedTeam payloads
+- [**38**星][1y] [ObjC] [omerporze/brokentooth](https://github.com/omerporze/brokentooth) POC for CVE-2018-4327
+- [**38**星][2d] [olbat/nvdcve](https://github.com/olbat/nvdcve) NVD/CVE as JSON files
+- [**38**星][6y] [ObjC] [nzn/nsuserdefaults-aesencryptor](https://github.com/nzn/nsuserdefaults-aesencryptor) NSUserDefaults category with AES encrypt/decrypt keys and values.
+- [**38**星][4y] [Py] [northbit/bulletin-scraper](https://github.com/northbit/bulletin-scraper) Download all of Microsoft's security updates and symbols
+- [**38**星][4y] [Py] [nonenotnull/regeorg](https://github.com/nonenotnull/regeorg) The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.
+- [**38**星][3y] [C++] [nccgroup/pip3line](https://github.com/nccgroup/pip3line) The Swiss army knife of byte manipulation
+- [**38**星][4y] [Py] [mozilla/minion-backend](https://github.com/mozilla/minion-backend) Minion Backend
+- [**38**星][2y] [Shell] [mitchellkrogza/fail2ban.webexploits](https://github.com/mitchellkrogza/fail2ban.webexploits) This custom Fail2Ban filter and jail will deal with all scans for common Wordpress, Joomla and other Web Exploits being scanned for by automated bots and those seeking to find exploitable web sites.
+- [**38**星][2y] [Py] [mcw0/pwn-hisilicon-dvr](https://github.com/mcw0/pwn-hisilicon-dvr)
+- [**38**星][3y] [Shell] [mcous/kicad-lib](https://github.com/mcous/kicad-lib) Repository for my KiCad components and footprints
+- [**38**星][7y] [Py] [matthewdfuller/intellifuzz-xss](https://github.com/matthewdfuller/intellifuzz-xss) An adaptive, intelligent XSS fuzzer that learns how the response is reflected and carefully crafts an XSS payload to match
+- [**38**星][2m] [C#] [mashed-potatoes/usbtrojan](https://github.com/mashed-potatoes/usbtrojan) Super simple loader that spreads over removable drives (USB flash drives, portable and network drives, SD cards). Features: You can add the HWID of your PC to the whitelist and trojan will ignore it; You can add any payload (executable file); Slient work. Ideal for school, university or office.
+- [**38**星][5m] [Assembly] [marespiaut/rayman_disasm](https://github.com/marespiaut/rayman_disasm) Reverse-engineering effort for the 1995 MS-DOS game “Rayman”
+- [**38**星][7y] [Py] [mainframed/mfsniffer](https://github.com/mainframed/mfsniffer) Mainframe TN3270 unencrypted TSO session user ID and password sniffer
+- [**38**星][2y] [Assembly] [macmade/obfuscate](https://github.com/macmade/obfuscate) C/C++ machine code obfuscation.
+- [**38**星][2y] [Py] [m4n3dw0lf/sslkill](https://github.com/m4n3dw0lf/sslkill) Forced Man-In-The-Middle HTTPs-Avoiding Reverse Proxy
+- [**38**星][5m] [Py] [lukacci/cpuhunter](https://github.com/lukacci/cpuhunter)
+- [**38**星][1y] [C] [luigirizzo/netmap-ipfw](https://github.com/luigirizzo/netmap-ipfw) Automatically exported from code.google.com/p/netmap-ipfw
+- [**38**星][12m] [Py] [luh2/detectdynamicjs](https://github.com/luh2/detectdynamicjs) The DetectDynamicJS Burp Extension provides an additional passive scanner that tries to find differing content in JavaScript files and aid in finding user/session data.
+- [**38**星][10m] [C#] [luciouskami/apex-eacbypass](https://github.com/luciouskami/apex-eacbypass) APEX-EACBypass(usermode)
+- [**38**星][5m] [Py] [lorentzenman/payday](https://github.com/lorentzenman/payday) Payload generator that uses Metasploit and Veil. Takes IP address as input and calls Veil. Use msfvenom to create payloads and writes resource handler files.
+- [**38**星][1y] [Py] [lnxg33k/misc](https://github.com/lnxg33k/misc) Collection of useful scripts.
+- [**38**星][1y] [JS] [lmammino/webhook-tunnel](https://github.com/lmammino/webhook-tunnel) A little HTTP proxy suitable to create tunnels for webhook endpoints protected behind a firewall or a VPN
+- [**38**星][7m] [Py] [llt4l/iculeak.py](https://github.com/llt4l/iculeak.py) Tool to find and extract credentials from phone configuration files hosted on CUCM
+- [**38**星][1y] [Py] [linted/linuxprivchecker](https://github.com/linted/linuxprivchecker) linuxprivchecker.py -- a Linux Privilege Escalation Check Script
+- [**38**星][3y] [Py] [lifetyper/asynchttpsdns](https://github.com/lifetyper/asynchttpsdns) DNS Over Https Powered By Asyncio
+- [**38**星][2y] [Py] [lavalamp-/ws-backend-community](https://github.com/lavalamp-/ws-backend-community) Web Sight Back-end Community Edition
+- [**38**星][3y] [C++] [kurapicabs/x64_tracer](https://github.com/kurapicabs/x64_tracer) x64dbg conditional branches logger [Plugin]
+- [**38**星][3y] [PHP] [keyus/xss](https://github.com/keyus/xss) php写的个人研究测试用的 xss cookie 攻击管理平台,开源出来
+- [**38**星][3y] [Py] [kevthehermit/volatility_plugins](https://github.com/kevthehermit/volatility_plugins) Volatility Plugins
+- [**38**星][1y] [Py] [kernelmachine/haveibeenpwned](https://github.com/kernelmachine/haveibeenpwned) Python interface to Have I Been Pwned API
+- [**38**星][3y] [C++] [k2/languagebackdoors](https://github.com/k2/languagebackdoors) Compiler exploits and exploitable non-obvious source code back doors.
+- [**38**星][3d] [Rust] [jwillbold/rusty-jsyc](https://github.com/jwillbold/rusty-jsyc) JavaScript-To-Bytecode compiler written in Rust
+- [**38**星][9m] [Rust] [juxhindb/synner](https://github.com/juxhindb/synner) A TCP SYN flood client written in Rust, powered by libpnet
+- [**38**星][10m] [PHP] [jsmitty12/phpwhois](https://github.com/jsmitty12/phpwhois) phpWhois general repository
+- [**38**星][2y] [Py] [jpiechowka/jenkins-cve-2016-0792](https://github.com/jpiechowka/jenkins-cve-2016-0792) Exploit for Jenkins serialization vulnerability - CVE-2016-0792
+- [**38**星][3y] [Visual Basic .NET] [johnlatwc/macrojob](https://github.com/johnlatwc/macrojob) Proof of concept VBA code to add to Normal.dot to put restrictions on Word
+- [**38**星][4y] [Shell] [jivoi/ansible-pentest-with-tor](https://github.com/jivoi/ansible-pentest-with-tor) Use Tor for anonymous scanning with nmap
+- [**38**星][9d] [C] [jedisct1/libhydrogen](https://github.com/jedisct1/libhydrogen) A lightweight, secure, easy-to-use crypto library suitable for constrained environments.
+- [**38**星][1y] [Java] [javafxports/javafxmobile-plugin](https://github.com/javafxports/javafxmobile-plugin) A gradle plugin for building mobile applications in java.
+- [**38**星][2y] [Py] [jasondoyle/google-nest-cam-bug-disclosures](https://github.com/jasondoyle/google-nest-cam-bug-disclosures)
+- [**38**星][5y] [Py] [jakev/oat2dex-python](https://github.com/jakev/oat2dex-python) Extract DEX files from an ART ELF binary
+- [**38**星][6y] [Py] [isgroup-srl/openmagic](https://github.com/isgroup-srl/openmagic) OpenSSL TLS heartbeat read overrun (CVE-2014-0160)
+- [**38**星][4m] [Py] [initstring/lyricpass](https://github.com/initstring/lyricpass) Password wordlist generator using song lyrics for targeted bruteforce audits / attacks. Useful for penetration testing or security research.
+- [**38**星][3y] [PHP] [incredibleindishell/local-file-disclosure-sql-injection-lab](https://github.com/incredibleindishell/local-file-disclosure-sql-injection-lab) This is sample code to demonstrate how one can use SQL Injection vulnerability to download local file from server in specific condition. If you have any doubt, ping me at
+- [**38**星][3y] [Py] [hcamael/ctf-library](https://github.com/hcamael/ctf-library) 之Crypto
+- [**38**星][5y] [Py] [hackedteam/test-av2](https://github.com/hackedteam/test-av2) Automated antivirus test environment (new version)
+- [**38**星][1y] [Java] [guolei1130/global_httpdns](https://github.com/guolei1130/global_httpdns) 全局HttpDns替换方案
+- [**38**星][1y] [C#] [greycorbel/admpwd](https://github.com/greycorbel/admpwd) AdmPwd project
+- [**38**星][3y] [C] [gnoxter/mountain_goat](https://github.com/gnoxter/mountain_goat) A PoC demonstrating techniques exploiting CVE-2016-5696 Off-Path TCP Exploits: Global Rate Limit Considered Dangerous
+- [**38**星][7m] [githubixx/ansible-role-harden-linux](https://github.com/githubixx/ansible-role-harden-linux) Ansible role for hardening Linux (targeting Ubuntu 16.04/18.04 mainly)
+- [**38**星][5y] [C] [gdbinit/kextstat_aslr](https://github.com/gdbinit/kextstat_aslr) Implementation of kexstat via /dev/kmem with kernel ASLR support
+- [**38**星][10d] [JS] [frida/frida-compile](https://github.com/frida/frida-compile) Compile a Frida script comprised of one or more Node.js modules
+- [**38**星][3y] [Py] [fotisl/utimaco](https://github.com/fotisl/utimaco) Tools for reverse engineering the Utimaco Firmware
+- [**38**星][1y] [c++] [fluc-uc/emusdk](https://github.com/fluc-uc/emusdk) A simple SDK intended for people new to internal cheats. Written while I was drunk.
+- [**38**星][1y] [C++] [firelizzard18/dc26-badge](https://github.com/firelizzard18/dc26-badge) DefCon 26 Badge Hacking
+- [**38**星][4y] [Py] [fire30/ps4-2014-1303-poc](https://github.com/fire30/ps4-2014-1303-poc)
+- [**38**星][3y] [Py] [exploitx3/fuzzbunch](https://github.com/exploitx3/fuzzbunch) FUZZBUNCH - NSA security tools
+- [**38**星][2y] [Go] [evilsocket/brutemachine](https://github.com/evilsocket/brutemachine) A Go library which main purpose is giving an interface to loop over a dictionary and use those words/lines as input for some custom logic such as HTTP file bruteforcing, DNS bruteforcing, etc.
+- [**38**星][7y] [Py] [evilcry/pythonscripts](https://github.com/evilcry/pythonscripts) Collection of my Python Scripts
+- [**38**星][1y] [C] [en14c/pivirus](https://github.com/en14c/pivirus) sample linux x86_64 ELF virus
+- [**38**星][7d] [OCaml] [draperlaboratory/cbat_tools](https://github.com/draperlaboratory/cbat_tools) Program analysis tools developed at Draper on the CBAT project.
+- [**38**星][2d] [C] [dnsdb/dnsdbq](https://github.com/dnsdb/dnsdbq) DNSDB API Client, C Version
+- [**38**星][4y] [Py] [danmcinerney/autoresp](https://github.com/danmcinerney/autoresp) Runs Responder, uploads hashes for cracking, alerts when cracked
+- [**38**星][5y] [Julia] [danluu/fuzz.jl](https://github.com/danluu/fuzz.jl) World's dumbest fuzzer
+- [**38**星][3y] [Py] [cysinfo/pymal](https://github.com/cysinfo/pymal) PyMal is a python based interactive Malware Analysis Framework. It is built on the top of three pure python programes Pefile, Pydbg and Volatility.
+- [**38**星][2m] [JS] [cxueqin/falcon](https://github.com/cxueqin/falcon) 猎鹰网络安全工具,核心功能DOS测试,支持端口扫描,支持CentOS/Ubuntu/MacOS系统。技术构成:nodejs引擎、express框架、nmap工具、tfn2k dos攻击工具、mocha单元测试框架。欢迎大家使用,也欢迎大家一起开发完善。
+- [**38**星][10m] [PS] [curtbraz/invoke-neutralizeav](https://github.com/curtbraz/invoke-neutralizeav) Quick PoC I Wrote for Bypassing Next Gen AV Remotely for Pentesting
+- [**38**星][4y] [Py] [cudeso/cudeso-honeypot](https://github.com/cudeso/cudeso-honeypot) Honeypot repo
+- [**38**星][7y] [C] [commonexploits/icmpsh](https://github.com/commonexploits/icmpsh) Simple reverse ICMP shell
+- [**38**星][2y] [Java] [codewhitesec/coldfusionpwn](https://github.com/codewhitesec/coldfusionpwn) Exploitation Tool for CVE-2017-3066 targeting Adobe Coldfusion 11/12
+- [**38**星][2d] [TS] [chef-koch/ffck](https://github.com/chef-koch/ffck)
+- [**38**星][3y] [C] [changeofpace/force-page-protection](https://github.com/changeofpace/force-page-protection) This x64dbg plugin sets the page protection for memory mapped views in scenarios which cause NtProtectVirtualMemory to fail.
+- [**38**星][3m] [PHP] [cesnet/pakiti-server](https://github.com/cesnet/pakiti-server) Pakiti provides a monitoring mechanism to check the patching status of Linux systems.
+- [**38**星][3y] [certtools/intelmq-feeds-documentation](https://github.com/certtools/intelmq-feeds-documentation) Cyber Threat Intelligence Feeds
+- [**38**星][3y] [Py] [cerberussecurity/cve-2017-5689](https://github.com/cerberussecurity/cve-2017-5689)
+- [**38**星][2y] [C++] [can1357/physical_mem_controller](https://github.com/can1357/physical_mem_controller) A library to read physical memory and system-wide virtual memory.
+- [**38**星][3y] [C] [boywhp/wifi_crack_windows](https://github.com/boywhp/wifi_crack_windows) wifi crack project for windows
+- [**38**星][3y] [bluscreenofjeff/malleablec2profiles](https://github.com/bluscreenofjeff/malleablec2profiles) Malleable C2 profiles for Cobalt Strike
+- [**38**星][2y] [Py] [blazeinfosec/ssrf-ntlm](https://github.com/blazeinfosec/ssrf-ntlm) Proof of concept written in Python to show that in some situations a SSRF vulnerability can be used to steal NTLMv1/v2 hashes.
+- [**38**星][13d] [Py] [bit4woo/dnslog](https://github.com/bit4woo/dnslog) DNSLog 是一款监控 DNS 解析记录和 HTTP 访问记录的工具。
+- [**38**星][4y] [Assembly] [battelle/repsych](https://github.com/battelle/repsych) Psychological warfare in reverse engineering
+- [**38**星][1y] [Py] [ax330d/ida_pdb_loader](https://github.com/ax330d/ida_pdb_loader) IDA PDB Loader
+- [**38**星][2m] [JS] [auth0/auth0-cordova](https://github.com/auth0/auth0-cordova) Auth0 integration for Cordova apps
+- [**38**星][3y] [C++] [aurel26/ts-security-editor](https://github.com/aurel26/ts-security-editor) Terminal Service (RDP) Security Editor
+- [**38**星][4d] [PS] [asymmetric-infosec/power-response](https://github.com/asymmetric-infosec/power-response) Powering Up Incident Response with Power-Response
+- [**38**星][2y] [Visual Basic .NET] [arno0x/webdavdelivery](https://github.com/arno0x/webdavdelivery) A WebDAV PROPFIND covert channel to deliver payloads
+- [**38**星][1y] [Py] [aptnotes/tools](https://github.com/aptnotes/tools) Tools to interact with APTnotes reporting/index.
+- [**38**星][4y] [AutoIt] [ajmartel/irtriage](https://github.com/ajmartel/irtriage) Incident Response Triage - Windows Evidence Collection for Forensic Analysis
+- [**38**星][1y] [C] [adulau/dcfldd](https://github.com/adulau/dcfldd) dcfldd - enhanced version of dd for forensics and security
+- [**38**星][2y] [Java] [adrianbzg/twitter-follow-exploit](https://github.com/adrianbzg/twitter-follow-exploit) Automated Twitter mass account creation and follow using Selenium and Tor VPN
+- [**38**星][5y] [C++] [adamkramer/rapid_env](https://github.com/adamkramer/rapid_env) Rapid deployment of Windows environment (files, registry keys, mutex etc) to facilitate malware analysis
+- [**38**星][1y] [Py] [activecm/passer](https://github.com/activecm/passer) Passive service locator, a python sniffer that identifies servers, clients, names and much more
+- [**38**星][17d] [Go] [9seconds/httransform](https://github.com/9seconds/httransform) A framework to build precise and fast HTTP proxies.
+- [**38**星][2y] [Java] [5gsd/aicdm](https://github.com/5gsd/aicdm) AICDL collector services and modules
+- [**38**星][9m] [54yimeng/sia-websites](https://github.com/54yimeng/sia-websites) 这里是我在youtube等上收集的一些科学上网网站的集合,以各自的网站名命名文件夹。
+- [**38**星][1y] [C++] [3gstudent/eventlogedit-evt--general](https://github.com/3gstudent/eventlogedit-evt--general) Remove individual lines from Windows Event Viewer Log (EVT) files
+- [**38**星][3y] [Py] [0x90/upnp-arsenal](https://github.com/0x90/upnp-arsenal) UPnP hacking scripts and tools
+- [**38**星][4y] [Py] [0x90/routerz](https://github.com/0x90/routerz) Some exploits for ZeroNights 0x03
+- [**38**星][2y] [C] [0x4a47/sectalks-mel0x14-ctf](https://github.com/0x4a47/sectalks-mel0x14-ctf) Sectalks MEL0x14 CTF
+- [**37**星][1m] [Java] [xausky/shadowsocksgostplugin](https://github.com/xausky/shadowsocksgostplugin) Gost 的 Shadowsocks 安卓插件,可以直接在 Shadowsocks 安卓客户端上连接 Gost 服务器
+- [**37**星][2d] [Py] [mhaskar/octopus](https://github.com/mhaskar/octopus) Open source pre-operation C2 server based on python and powershell
+- [**37**星][5y] [PHP] [snifer/l4bsforshell](https://github.com/snifer/l4bsforshell)
+- [**37**星][2y] [PS] [hackplayers/reverseshell](https://github.com/hackplayers/reverseshell) A simple PowerShell script that we can use for easing the process of creating a reverse shell and automating Meterpreter update
+- [**37**星][2m] [C] [intel/kernelflinger](https://github.com/intel/kernelflinger) the Intel UEFI bootloader for AndroidTM/BrilloTM
+- [**37**星][8d] [Perl] [theos/logos](https://github.com/theos/logos) Preprocessor that simplifies Objective-C hooking.
+- [**37**星][3y] [rednaga/disclosures](https://github.com/rednaga/disclosures) A place for disclosing things
+- [**37**星][3y] [C] [cn33liz/easysystem](https://github.com/cn33liz/easysystem) Quick and dirty System (Power)Shell using NamedPipe impersonation.
+- [**37**星][4y] [C#] [cn33liz/sharpcat](https://github.com/cn33liz/sharpcat) SharpCat - A Simple Reversed Command Shell which can be started using InstallUtil (Bypassing AppLocker)
+- [**37**星][2y] [Shell] [pwnieexpress/pwn_pad_sources](https://github.com/pwnieexpress/pwn_pad_sources) Public source repository for the Pwn Pad platform.
+- [**37**星][8d] [Py] [vdoo-connected-trust/ghidra-pyi-generator](https://github.com/vdoo-connected-trust/ghidra-pyi-generator) Generates `.pyi` type stubs for the entire Ghidra API
+- [**37**星][1y] [C#] [codeofdark/panda-obfuscator](https://github.com/codeofdark/panda-obfuscator) PandaObfuscator an simple Obfuscator, free, OpenSource for .Net Applications
+- [**37**星][2y] [vduddu/pentestresources](https://github.com/vduddu/PentestResources) A list of resources for Pentesting from various sources
+- [**37**星][9m] [Go] [prsecurity/golang_c2](https://github.com/prsecurity/golang_c2) Boilerplate C2 written in Go for red teams
+- [**37**星][3d] [Java] [gedsh/invizible](https://github.com/gedsh/invizible) Android application for Internet privacy and security
+- [**37**星][1y] [HTML] [madhuakula/security-automation-with-ansible-2](https://github.com/madhuakula/security-automation-with-ansible-2) Ansible Playbooks for Security Automation with Ansible2 book
+- [**37**星][3m] [C#] [nyan-x-cat/uac-escaper](https://github.com/nyan-x-cat/uac-escaper) Escalation / Bypass Windows UAC
+- [**37**星][2y] [HTML] [electroniccats/samykamtools](https://github.com/ElectronicCats/SamyKamTools) Magnetic Pentesting tool for Raspberry Pi
+- [**37**星][21d] [Py] [soscleaner/soscleaner](https://github.com/soscleaner/soscleaner) A python application to clean sensitive and un-wanted data from an existing sosreport
+- [**37**星][5y] [Assembly] [muffins/rookit_playground](https://github.com/muffins/rookit_playground) Educational repository for learning about rootkits and Windows Kernel Hooks.
+- [**37**星][6m] [Java] [hsiafan/cute-proxy](https://github.com/hsiafan/cute-proxy) A Man-In-The-Middle Proxy as Fiddle and Charles, using Netty, JavaFX
+- [**37**星][24d] [Py] [robotools/defcon](https://github.com/robotools/defcon) A set of UFO based objects for use in font editing applications.
+- [**37**星][6d] [Go] [zpsean/go4api](https://github.com/zpsean/go4api) Go4Api - an API testing tool written in Go
+- [**37**星][5y] [C++] [zer0mem/kernelproject](https://github.com/zer0mem/kernelproject) Plain project for usege with github/zer0mem/common.git
+- [**37**星][9m] [C++] [ze0r/cve-2019-0808-poc](https://github.com/ze0r/cve-2019-0808-poc) cve-2019-0808-poc
+- [**37**星][3y] [C++] [yejiansnake/windows-sys-base](https://github.com/yejiansnake/windows-sys-base) windows 系统API C++封装库,包含进程间通讯,互斥,内存队列等通用功能
+- [**37**星][20d] [Py] [ydkhatri/macforensics](https://github.com/ydkhatri/macforensics) Scripts to process OSX forensic artifacts
+- [**37**星][7m] [C#] [woanware/autorunner](https://github.com/woanware/autorunner) Emulates the Sysinternals Autoruns tool, but for DFIR purposes e.g. multi user processing
+- [**37**星][3y] [PS] [wkleinhenz/powershell-botnet](https://github.com/wkleinhenz/powershell-botnet) A POC powershell botnet
+- [**37**星][1y] [Py] [weebsec/weebdns](https://github.com/weebsec/weebdns) DNS Enumeration with Asynchronicity
+- [**37**星][2y] [Py] [warner/petmail](https://github.com/warner/petmail) secure messaging, file-transfer, and directory synchronization
+- [**37**星][3y] [Py] [wal99d/slowloris](https://github.com/wal99d/slowloris) Python code demonstrating the how-to part of L7 Application DDoS Attack called SlowLoris
+- [**37**星][3y] [Py] [villanch/pr0xy](https://github.com/villanch/pr0xy) 教学用多线程扫描框架(代理扫描)
+- [**37**星][2y] [vduddu/pentestresources](https://github.com/vduddu/pentestresources) A list of resources for Pentesting from various sources
+- [**37**星][9m] [PHP] [vanvan/ipfsproxyhttp](https://github.com/vanvan/ipfsproxyhttp) a very fast proxy to redirect HTTP Query to several IPFS Public gateway HTTP server
+- [**37**星][3y] [C] [tylous/auto_eap](https://github.com/tylous/auto_eap) Automated Brute-Force Login Attacks Against EAP Networks.
+- [**37**星][3m] [C] [twistlock/runc-cve-2019-5736](https://github.com/twistlock/runc-cve-2019-5736) CVE-2019-5736 POCs
+- [**37**星][1y] [Py] [trustedsec/auto_settingcontent-ms](https://github.com/trustedsec/auto_settingcontent-ms) This is a quick POC for using the Matt Nelson (enigma0x3) technique for generating a malicious .SettingContent-ms extension type for remote code execution. This automates generating an HTA downloader and embeds it in the SettingContent-ms file for you and starts Apache.
+- [**37**星][2y] [Go] [tomsteele/pen-utils](https://github.com/tomsteele/pen-utils) Trivial unixey pentest utilities
+- [**37**星][2y] [Py] [ticosax/pseud](https://github.com/ticosax/pseud) Pythonic bi-directional RPC API built on top of ØMQ.
+- [**37**星][3y] [Py] [the-c0d3r/sqli-scanner](https://github.com/the-c0d3r/sqli-scanner) A tool to mass scan SQL Injection Vulnerable websites from a file.
+- [**37**星][2y] [tevora-threat/aggressor-powerview](https://github.com/tevora-threat/aggressor-powerview) PowerView menu for Cobalt Strike
+- [**37**星][3y] [C] [techgaun/mirai](https://github.com/techgaun/mirai) Mirai related codes and stuff
+- [**37**星][4y] [C] [tandasat/scavenger](https://github.com/tandasat/scavenger) A minifilter driver preserves all modified and deleted files.
+- [**37**星][1y] [Py] [tahz7/traffic_analyser](https://github.com/tahz7/traffic_analyser) Retrieve useful information from apache/nginx access logs to help troubleshoot traffic related problems
+- [**37**星][1y] [Shell] [syncsrc/microrenovator](https://github.com/syncsrc/microrenovator) Pre-OS microcode updater
+- [**37**星][12m] [Py] [spiderlabs/owasp-crs-documentation](https://github.com/spiderlabs/owasp-crs-documentation) Documentation for the OWASP CRS project
+- [**37**星][5y] [C] [sk4ld/gridpot](https://github.com/sk4ld/gridpot) Open source tools for realistic-behaving electric grid honeynets
+- [**37**星][2y] [PHP] [sjord/jwtdemo](https://github.com/sjord/jwtdemo) Practice hacking JWT tokens
+- [**37**星][29d] [Shell] [security-onion-solutions/securityonion-elastic](https://github.com/security-onion-solutions/securityonion-elastic) Security Onion Elastic Stack
+- [**37**星][3y] [JS] [saelo/feuerfuchs](https://github.com/saelo/feuerfuchs) Files for the "feuerfuchs" challenge of 33C3 CTF. See the greeting message in server.py for more information about the challenge
+- [**37**星][9d] [C++] [rust-fuzz/libfuzzer-sys](https://github.com/rust-fuzz/libfuzzer-sys)
+- [**37**星][10m] [Py] [raz0r/aemscan](https://github.com/raz0r/aemscan) Adobe Experience Manager Vulnerability Scanner
+- [**37**星][2y] [Py] [rahiel/firectl](https://github.com/rahiel/firectl) Control Firejail desktop integration.
+- [**37**星][2m] [Lua] [r00t-3xp10it/nmap-nse-modules](https://github.com/r00t-3xp10it/nmap-nse-modules) My collection of nmap nse modules
+- [**37**星][7y] [JS] [ptcoresec/ctf-scoreboard](https://github.com/ptcoresec/ctf-scoreboard) A scoreboard for Security CTF events
+- [**37**星][3d] [Go] [projectcalico/typha](https://github.com/projectcalico/typha) Calico's datastore fan-out daemon.
+- [**37**星][2y] [Java] [portswigger/distribute-damage](https://github.com/portswigger/distribute-damage) Evenly distributes scanner load across targets
+- [**37**星][5y] [Py] [philwantsfish/gdb_commands](https://github.com/philwantsfish/gdb_commands) GDB commands to aid exploit development
+- [**37**星][12m] [C++] [patois/nesldr](https://github.com/patois/nesldr) Nintendo Entertainment System (NES) ROM loader module for IDA Pro
+- [**37**星][3y] [C] [p0cl4bs/thanos](https://github.com/p0cl4bs/thanos) Thanos is a tool made for scan a range of IP's and get the banners of the running services. The main function is do banner grabber, but you also can use this for exploit vulnerabilities, find proxy servers, or simply check for open ports.
+- [**37**星][30d] [Java] [openzipkin/zipkin-finagle](https://github.com/openzipkin/zipkin-finagle) Integration between Finagle tracing to Zipkin transports such as http and kafka
+- [**37**星][2y] [Py] [netkiller/firewall](https://github.com/netkiller/firewall) Python Firewall Library
+- [**37**星][2y] [C#] [n0ise9914/rdpchecker](https://github.com/n0ise9914/rdpchecker) Stable and reliable multiple RDP checker written in C#
+- [**37**星][3y] [C] [mwsrc/mass-malicious-script-dump](https://github.com/mwsrc/mass-malicious-script-dump) Mass malicious script dump/Malware src dump
+- [**37**星][2y] [C++] [mstefanowich/filesignaturehijack](https://github.com/mstefanowich/filesignaturehijack) C proof-of-concept of Mattifestations paper on signature hijacking
+- [**37**星][8m] [Py] [mozillasecurity/quokka](https://github.com/mozillasecurity/quokka) Quokka is a utility to launch and monitor application for faults.
+- [**37**星][3y] [HTML] [mortenschenk/rtlcapturecontext-cfg-bypass](https://github.com/mortenschenk/rtlcapturecontext-cfg-bypass) Internet Explorer Exploit with CFG bypass for Windows 10
+- [**37**星][3y] [PHP] [mortedamos/vehicle-hacking](https://github.com/mortedamos/vehicle-hacking) Guides and scripts for vehicle cybersecurity research
+- [**37**星][2y] [C] [mlafeldt/ps2rd](https://github.com/mlafeldt/ps2rd) Collection of tools to remotely debug PS2 games
+- [**37**星][11m] [PS] [minervalabsresearch/blogposts](https://github.com/minervalabsresearch/blogposts) Code examples from recent blog posts by minerva labs.
+- [**37**星][15d] [C] [microsoft/cfu](https://github.com/microsoft/cfu) Component Firmware Update
+- [**37**星][2y] [Py] [medicean/sublimexssencode](https://github.com/medicean/sublimexssencode) Converts characters from one encoding to another using a transformation.
+- [**37**星][6d] [Shell] [maravento/blackip](https://github.com/maravento/blackip) IPs Blacklist for Ipset/Squid
+- [**37**星][2y] [mailinneberg/broadpwn](https://github.com/mailinneberg/broadpwn) Broadpwn bug (CVE-2017-9417)
+- [**37**星][5m] [Py] [m57/piescan](https://github.com/m57/piescan) A simple fast port scanner for when you cant use Nmap on a pentest.
+- [**37**星][3y] [Py] [luckygeck/ycmdcompletion](https://github.com/luckygeck/ycmdcompletion) Sublime Text 3 plugin for C++ code completion and error highlighting, based on Ycmd server
+- [**37**星][1y] [Java] [lmax-exchange/angler](https://github.com/lmax-exchange/angler) A utility for monitoring UDP message-processing
+- [**37**星][7d] [Tcl] [llir/grammar](https://github.com/llir/grammar) EBNF grammar of LLVM IR assembly.
+- [**37**星][1m] [C] [libyal/libolecf](https://github.com/libyal/libolecf) Library and tools to access the OLE 2 Compound File (OLECF) format
+- [**37**星][1y] [Py] [lasq88/deobfuscate](https://github.com/lasq88/deobfuscate) Python script to automatically deobfuscate malware code
+- [**37**星][5y] [C++] [lallousx86/graphslick](https://github.com/lallousx86/graphslick) IDA Plugin - GraphSlick
+- [**37**星][8y] [C] [korczis/upx](https://github.com/korczis/upx) UPX is a free, portable, extendable, high-performance executable packer for several executable formats. See
+- [**37**星][3y] [Py] [killswitch-gui/lterm](https://github.com/killswitch-gui/lterm) lterm is a small script built to install a bash hook for full terminal logging.
+- [**37**星][2y] [JS] [kevva/caw](https://github.com/kevva/caw) Construct HTTP/HTTPS agents for tunneling proxies
+- [**37**星][2y] [HTML] [keenrivals/bugsite-index](https://github.com/keenrivals/bugsite-index) Index of websites publishing bugs along the lines of heartbleed.com
+- [**37**星][4y] [Java] [julianschuette/condroid](https://github.com/julianschuette/condroid) Symbolic/concolic execution of Android apps
+- [**37**星][6y] [Py] [johnnykv/mnemosyne](https://github.com/johnnykv/mnemosyne) Normalizer for honeypot data.
+- [**37**星][7d] [Kotlin] [itznotabug/checkoutverifier](https://github.com/itznotabug/checkoutverifier) Verify your In-App Purchase receipts & protect your Apps from hacking, patching used by Piracy Apps like Lucky Patcher.
+- [**37**星][2y] [JS] [idc/ps4-entrypoint-405](https://github.com/idc/ps4-entrypoint-405) A fully implemented kernel exploit for the PS4 on 4.05FW
+- [**37**星][4m] [Py] [hugsy/gef-extras](https://github.com/hugsy/gef-extras) Extra goodies for GEF: Open repository for unfiltered contributions to the project.
+- [**37**星][11m] [Py] [hook-s3c/cve-2018-18852](https://github.com/hook-s3c/cve-2018-18852) CERIO RCE CVE-2018-18852, authenticated (vendor defaults) web-based RCE as root user.
+- [**37**星][4d] [C] [greenbone/gvm-libs](https://github.com/greenbone/gvm-libs) Greenbone Vulnerability Management Libraries
+- [**37**星][7y] [C] [gdbinit/crackme_nr1](https://github.com/gdbinit/crackme_nr1) fG!'s crackme #1 source code
+- [**37**星][2y] [C++] [flier/zipkin-cpp](https://github.com/flier/zipkin-cpp) Zipkin tracing library for C/C++
+- [**37**星][4y] [C++] [flankerhqd/cve-2015-6620-poc](https://github.com/flankerhqd/cve-2015-6620-poc) POC for CVE-2015-6620, AMessage unmarshal arbitrary write
+- [**37**星][6y] [Ruby] [fishermansenemy/bucket_finder](https://github.com/fishermansenemy/bucket_finder) Amazon bucket brute force tool
+- [**37**星][2y] [Py] [fallengavin/srcinfo](https://github.com/fallengavin/srcinfo) 作为白帽子,手上有很多应急响应中心接受漏洞的范围和一些网站信息,为了便于管理,自己动手写了一个信息管理的平台,感兴趣的可以自己改改,制作自己的信息库
+- [**37**星][4y] [Py] [fabio-d/honeypot](https://github.com/fabio-d/honeypot) Honeypot that emulates several protocols (incl. SSH, telnet, SMTP, HTTP, SSL and SIP)
+- [**37**星][3m] [C++] [ez8-co/emock](https://github.com/ez8-co/emock)
+- [**37**星][4y] [Py] [exploit-install/shellsploit-framework](https://github.com/exploit-install/shellsploit-framework) New Generation Exploit Development Kit
+- [**37**星][1y] [ekoparty/ekolabs](https://github.com/ekoparty/ekolabs) EKOLABS esta dedicada para investigadores independientes y para la comunidad del Software Libre. Vamos a proveer de stands completos con monitor, alimentacion de energia y acceso a internet por cable, y vos vas a traer tu maquina para mostrar tu trabajo y responder preguntas de los participantes de Ekoparty Security Conference
+- [**37**星][10m] [Java] [egguncle/xposednavigationbar](https://github.com/egguncle/xposednavigationbar) Xposed导航栏功能拓展模块
+- [**37**星][1y] [C] [egguncle/ptraceinject](https://github.com/egguncle/ptraceinject) 进程注入
+- [**37**星][2y] [edoverflow/bug-bounty-responses](https://github.com/edoverflow/bug-bounty-responses) A collection of response templates for invalid bug bounty reports.
+- [**37**星][3y] [Py] [dungtv543/dutas](https://github.com/dungtv543/dutas) Analysis PE file or Shellcode
+- [**37**星][1y] [Ruby] [dreadlocked/ssrfmap](https://github.com/dreadlocked/ssrfmap) Simple Server Side Request Forgery services enumeration tool.
+- [**37**星][2y] [PS] [dmb2168/oauthhunting](https://github.com/dmb2168/oauthhunting)
+- [**37**星][1y] [Py] [dhn/osce](https://github.com/dhn/osce) Some exploits, which I’ve created during my OSCE preparation.
+- [**37**星][1m] [Py] [desword/shellcode_tools](https://github.com/desword/shellcode_tools) Useful tools for writing shellcode
+- [**37**星][2y] [PHP] [dcid/doh-php-client](https://github.com/dcid/doh-php-client) DoH (DNS over HTTPS) PHP Client
+- [**37**星][3y] [C] [cylancevulnresearch/osx_runbin](https://github.com/cylancevulnresearch/osx_runbin)
+- [**37**星][3y] [ctftime/ctftime.org](https://github.com/ctftime/ctftime.org) meta repository for ctftime.org issues, feature-requests etc
+- [**37**星][7m] [Py] [coalfire-research/vampire](https://github.com/coalfire-research/vampire) Vampire is an aggressor script which integrates with BloodHound to mark nodes as owned.
+- [**37**星][7m] [Batchfile] [cervoise/abuse-bash-for-windows](https://github.com/cervoise/abuse-bash-for-windows) Pentest scripts for abuse Bash on Windows (Cygwin/WSL) - HackLu 2018
+- [**37**星][3y] [Java] [cert-se/megatron-java](https://github.com/cert-se/megatron-java) Megatron - A System for Abuse- and Incident Handling
+- [**37**星][2y] [C++] [cedarctic/digiquack](https://github.com/cedarctic/digiquack) A DuckyScript language to DigiSpark payload converter based on C++
+- [**37**星][6m] [C++] [carbonblack/hexraysdeob](https://github.com/carbonblack/hexraysdeob) Hex-Rays microcode API plugin for breaking an obfuscating compiler
+- [**37**星][1m] [Makefile] [c0deh4cker/pwnableharness](https://github.com/c0deh4cker/pwnableharness) Manage building and deploying exploitation challenges with ease
+- [**37**星][14d] [Py] [bytesoverbombs/virusshare-search](https://github.com/bytesoverbombs/virusshare-search) Downloads VirusShare hashes (
+- [**37**星][8m] [Py] [bx/bootloader_instrumentation_suite](https://github.com/bx/bootloader_instrumentation_suite) Bootloader 研究工具
+- [**37**星][3y] [C++] [breakingmalwareresearch/cfgexceptions](https://github.com/breakingmalwareresearch/cfgexceptions) Adding exceptions to Microsoft's Control Flow Guard (CFG)
+- [**37**星][5y] [Py] [bfosterjr/ufgraph](https://github.com/bfosterjr/ufgraph)
+- [**37**星][8y] [bes/keystorebrute](https://github.com/bes/keystorebrute) A Keystore Brute-force attacker.
+- [**37**星][1y] [Java] [augustd/burp-suite-error-message-checks](https://github.com/augustd/burp-suite-error-message-checks) Burp Suite extension to passively scan for applications revealing server error messages
+- [**37**星][5y] [C] [aloz77/hiktools](https://github.com/aloz77/hiktools) Tools for Hikvision IP cameras
+- [**37**星][1y] [C] [abiondo/afl](https://github.com/abiondo/afl) My fork of American Fuzzy Lop
+- [**37**星][4y] [Py] [73696e65/windows-exploits](https://github.com/73696e65/windows-exploits) Used for the osce exam preparation
+- [**37**星][2y] [C++] [3gstudent/shellcode-generater](https://github.com/3gstudent/shellcode-generater) No inline asm,support x86/x64
+- [**37**星][7d] [C++] [3gstudent/from-system-authority-to-medium-authority](https://github.com/3gstudent/from-system-authority-to-medium-authority) Penetration test
+- [**37**星][2y] [Py] [1337g/cve-2017-10271](https://github.com/1337g/cve-2017-10271) CVE-2017-10271 WEBLOGIC RCE (TESTED)
+- [**37**星][3y] [C] [0xbadc0de1/vmp_dbg](https://github.com/0xbadc0de1/vmp_dbg) This is a VmProtect integrated debugger, that will essentially allow you to disasm and debug vmp partially virtualized functions at the vmp bytecode level. It was made using TitanEngine for the debug engine and Qt for the gui. Do not expect much of it and feel free to report any bugs.
+- [**36**星][3y] [Go] [davidqhr/socccks](https://github.com/davidqhr/socccks) Socccks is a shadowsocks like separated socks5 proxy
+- [**36**星][3y] [Py] [vulnerscom/scripts](https://github.com/vulnerscom/scripts) Some useful scripts for penetration testing
+- [**36**星][3y] [offensive-security/kali-scripts](https://github.com/offensive-security/kali-scripts) Various Kali Scripts
+- [**36**星][3y] [Py] [averagesecurityguy/exfil](https://github.com/averagesecurityguy/exfil) Modular tool to test exfiltration techniques.
+- [**36**星][2d] [CSS] [frida/frida-website](https://github.com/frida/frida-website) Frida's website
+- [**36**星][11m] [Py] [tidesec/common_spider](https://github.com/tidesec/common_spider) 一个还算通用的爬虫脚本,可自己设定爬取的深度,可以把动态页面和外链单独分出来~
+- [**36**星][16d] [JS] [snyk/broker](https://github.com/snyk/broker) A broker system between a public service and a private service
+- [**36**星][2y] [C++] [blole/injectory](https://github.com/blole/injectory) command-line interface dll injector
+- [**36**星][11m] [Py] [pilgun/acvtool](https://github.com/pilgun/acvtool) ACVTool is a novel tool for measuring black-box code coverage of Android applications.
+- [**36**星][1m] [Java] [ayrx/jnianalyzer](https://github.com/ayrx/jnianalyzer) Analysis scripts for Ghidra to work with Android NDK libraries.
+- [**36**星][5y] [Py] [hiteshchoudhary/airvengers](https://github.com/hiteshchoudhary/airvengers) A GUI to pentest wifi Network, based on Aircrack-ng tools
+- [**36**星][8d] [C++] [chickenhook/chickenhook](https://github.com/chickenhook/chickenhook) A linux / android hooking framework
+- [**36**星][3m] [PHP] [x-o-r-r-o/php-webshells-collection](https://github.com/x-o-r-r-o/php-webshells-collection) Most Wanted Private and Public PHP Web Shells Can Be Downloaded Here. (Educational Purpose Only)
+- [**36**星][2m] [Shell] [itshaadi/torbox](https://github.com/itshaadi/torbox) Container-based Tor access point (Anonymizing Middlebox).
+- [**36**星][3y] [Py] [lightless233/pansidong](https://github.com/lightless233/Pansidong) 盘丝洞 - 自动化WEB漏洞扫描器
+- [**36**星][2y] [Ruby] [opensourcesec/malstrom](https://github.com/opensourcesec/malstrom) Cyber Intel Management
+- [**36**星][1y] [Go] [joshrendek/hnypots-agent](https://github.com/joshrendek/hnypots-agent) A SSH Server in Go that logs username/password combos
+- [**36**星][1y] [Py] [newbee119/ctf_ics_traffic](https://github.com/NewBee119/ctf_ics_traffic) 工控CTF比赛工具,各种网络数据包处理脚本
+- [**36**星][2y] [rivaill/blockchain-security-awesome](https://github.com/Rivaill/blockchain-security-awesome) A curated list of awesome things related to blockchain security
+- [**36**星][1m] [Py] [zephrfish/burpfeed](https://github.com/zephrfish/burpfeed) Hacked together script for feeding urls into Burp's Sitemap
+- [**36**星][1y] [Shell] [xhak9x/hak9tools](https://github.com/xhak9x/hak9tools) All Hak9 Tools
+- [**36**星][8d] [Shell] [wicg/ua-client-hints](https://github.com/wicg/ua-client-hints) Wouldn't it be nice if `User-Agent` was a (set of) client hints?
+- [**36**星][9m] [Visual Basic .NET] [visualbasic6/subdomain-bruteforce](https://github.com/visualbasic6/subdomain-bruteforce) a subdomain brute forcing tool for windows
+- [**36**星][15d] [C++] [verizondigital/waflz](https://github.com/verizondigital/waflz) multitenant ModSecurity compatible WAF engine from Verizon Digital Media Services
+- [**36**星][5y] [Go] [traetox/sshforshits](https://github.com/traetox/sshforshits) framework for a high interaction SSH honeypot
+- [**36**星][6y] [Py] [toperaproject/topera](https://github.com/toperaproject/topera) IPv6 analysis tool: the other side
+- [**36**星][2d] [C++] [titzanyic/clover](https://github.com/titzanyic/clover) 我的黑苹果配置列表
+- [**36**星][2y] [Zeek] [tatsui-geek/rpot](https://github.com/tatsui-geek/rpot) Real-time Packet Observation Tool
+- [**36**星][3m] [Py] [takeshixx/deen](https://github.com/takeshixx/deen) Generic data DEcoding/ENcoding application built with PyQt5.
+- [**36**星][3y] [TeX] [sympy/sympy-paper](https://github.com/sympy/sympy-paper) Repo for the paper "SymPy: symbolic computing in python"
+- [**36**星][3y] [C++] [steven-michaud/sandboxmirror](https://github.com/steven-michaud/sandboxmirror) Tool for reverse-engineering Apple's sandbox
+- [**36**星][8y] [C] [stephenfewer/ollycalltrace](https://github.com/stephenfewer/ollycalltrace) OllyCallTrace is a plugin for OllyDbg to trace the call chain of a thread.
+- [**36**星][1m] [Py] [static-flow/cloudcopy](https://github.com/static-flow/cloudcopy) This tool implements a cloud version of the Shadow Copy attack against domain controllers running in AWS using only the EC2:CreateSnapshot permission.
+- [**36**星][28d] [Py] [sinfulz/justtryharder](https://github.com/sinfulz/justtryharder) JustTryHarder, a cheat sheet which will aid you through the PWK course & the OSCP Exam.
+- [**36**星][4y] [C] [sektioneins/xpwntool-lite](https://github.com/sektioneins/xpwntool-lite) Lightweight version of xpwntool just for decrypting IMG3 firmware files
+- [**36**星][1y] [HTML] [secwiki/iot](https://github.com/secwiki/iot) IOT Research Blog 物联网安全技术研究小组
+- [**36**星][3y] [JS] [saelo/foxpwn](https://github.com/saelo/foxpwn) Exploit code for CVE-2016-9066
+- [**36**星][7m] [Py] [s0md3v/entropy](https://github.com/s0md3v/entropy) Entropy is a (prototype) WAF driven by maths.
+- [**36**星][2y] [Py] [rxwx/cve-2017-11882](https://github.com/rxwx/cve-2017-11882) Proof-of-Concept exploits for CVE-2017-11882
+- [**36**星][2y] [PS] [rvrsh3ll/pentesting-scripts](https://github.com/rvrsh3ll/pentesting-scripts) A ton of helpful tools
+- [**36**星][6m] [Py] [ruped24/tor_ip_switcher](https://github.com/ruped24/tor_ip_switcher) tor_ip_switcher is useful for making any DoS attack look like a DDoS attack. Works with toriptables2.
+- [**36**星][2y] [C++] [rolfrolles/wbdeshook](https://github.com/rolfrolles/wbdeshook) DLL-injection based solution to Brecht Wyseur's wbDES challenge (based on SysK's Phrack article)
+- [**36**星][18d] [C] [rinnegatamante/vitaquakeiii](https://github.com/rinnegatamante/vitaquakeiii) ioquake3 port for PSVITA (Currently supporting Quake III: Arena, Quake III: Team Arena, OpenArena, Urban Terror and Q3Rally)
+- [**36**星][7m] [Py] [rikonaka/katoolin4china](https://github.com/rikonaka/katoolin4china) Kali tools installer
+- [**36**星][1y] [JS] [rewanth1997/vuln-headers-extension](https://github.com/rewanth1997/vuln-headers-extension) Firefox extension which parses the headers of all the requests which are being flowing through your firefox browser to detect for vulnerabilities.
+- [**36**星][10m] [Py] [redforcesec/dumpit](https://github.com/redforcesec/dumpit) An exploit for SHAREit <= v 4.0.38
+- [**36**星][4m] [Py] [raymanfx/android-cve-checker](https://github.com/raymanfx/android-cve-checker) Python tool to check your Android kernel for missing CVE patches.
+- [**36**星][4m] [Java] [radare/ghidra-r2web](https://github.com/radare/ghidra-r2web) Ghidra plugin to start an r2 webserver to let r2 interact with it
+- [**36**星][4y] [Shell] [pwnagentsmith/ir_tool](https://github.com/pwnagentsmith/ir_tool) Script for Forensic on Linux
+- [**36**星][4m] [Shell] [plenumlab/lazyrecon](https://github.com/plenumlab/lazyrecon) This script is intended to automate your reconnaissance process in an organized fashion
+- [**36**星][3y] [Py] [phar/eyephish](https://github.com/phar/eyephish) OpenCV based IDN option generator PoC
+- [**36**星][9m] [Py] [phage-nz/malware-hunting](https://github.com/phage-nz/malware-hunting) 与 Malware Hunting 相关的脚本/信息收集
+- [**36**星][12m] [Elixir] [paulzql/shadowsocks-ex](https://github.com/paulzql/shadowsocks-ex) elixir port of shadowsocks
+- [**36**星][3y] [C++] [paulmehta/ablation](https://github.com/paulmehta/ablation) Augmenting Static Analysis Using Pintool: Ablation
+- [**36**星][5m] [Py] [paradoxis/flask-unsign](https://github.com/paradoxis/flask-unsign) Command line tool to fetch, decode, brute-force and craft session cookies of a Flask application by guessing secret keys.
+- [**36**星][4y] [Java] [onionmail/onionmail](https://github.com/onionmail/onionmail) TOR Mail encrypted server for Hidden Services
+- [**36**星][4y] [C] [ofercas/ransomware_begone](https://github.com/ofercas/ransomware_begone) ransomware_begone
+- [**36**星][3m] [C++] [notscimmy/pplib](https://github.com/notscimmy/pplib) Elevate a process to be a protected process
+- [**36**星][5m] [C#] [not-matthias/nemesis](https://github.com/not-matthias/nemesis) A customizable process dumper.
+- [**36**星][5m] [Go] [northern-lights/yara-parser](https://github.com/northern-lights/yara-parser) Tools for parsing rulesets using the exact grammar as YARA. Written in Go.
+- [**36**星][3y] [Ruby] [nopernik/msfvenom-bc-generator](https://github.com/nopernik/msfvenom-bc-generator) Metasploit msfvenom Bash Completions Generator
+- [**36**星][3y] [C] [nexusbots/umbreon-rootkit](https://github.com/nexusbots/umbreon-rootkit)
+- [**36**星][11m] [Py] [nevillegrech/madmax](https://github.com/nevillegrech/madmax) Ethereum Static Vulnerability Detector for Gas-Focussed Vulnerabilities
+- [**36**星][3y] [Ruby] [neinwechter/metasploit-framework](https://github.com/neinwechter/metasploit-framework) Metasploit Framework
+- [**36**星][9m] [C++] [nanoric/pkn](https://github.com/nanoric/pkn) core of pkn game hacking project. Including mainly for process management, memory management, and DLL injecttion. Also PE analysis, windows registry management, compile-time sting encryption, byte-code emulator, etc. Most of them can run under kernel mode.
+- [**36**星][4y] [C++] [n3k/ekoparty2015_windows_smep_bypass](https://github.com/n3k/ekoparty2015_windows_smep_bypass) Windows SMEP Bypass U=S
+- [**36**星][3y] [Py] [mthbernardes/strutszeiro](https://github.com/mthbernardes/strutszeiro) Telegram Bot to manage botnets created with struts vulnerability(CVE-2017-5638)
+- [**36**星][2y] [Py] [mr-un1k0d3r/searchipowner](https://github.com/mr-un1k0d3r/searchipowner) Search public IP owner through ARIN
+- [**36**星][3y] [Assembly] [mortenschenk/token-stealing-shellcode](https://github.com/mortenschenk/token-stealing-shellcode)
+- [**36**星][2y] [Go] [mojachieee/go-honeypot](https://github.com/mojachieee/go-honeypot) A honeypot server written in Go.
+- [**36**星][4y] [michael-yip/aptmalwarenotes](https://github.com/michael-yip/aptmalwarenotes) A repository of open source reports on different malware families used in targeted cyber intrusions ("APT").
+- [**36**星][8y] [Ruby] [miaout17/lolize](https://github.com/miaout17/lolize) Colorize your ruby output with rainbow
+- [**36**星][4y] [C] [mempodippy/cub3](https://github.com/mempodippy/cub3) Proof of concept for LD_PRELOAD malware that uses extended attributes to protect files.
+- [**36**星][3y] [C++] [manux81/canspy](https://github.com/manux81/canspy) Very simple tool for users who need to interface with a device based on CAN (CAN/CANopen/J1939/NMEA2000/DeviceNet) such as motors, sensors and many other devices.
+- [**36**星][3m] [Go] [mame82/munifying](https://github.com/mame82/munifying)
+- [**36**星][1m] [PHP] [linuxsec/indoxploit-shell](https://github.com/linuxsec/indoxploit-shell) IndoXploit Webshell V.3
+- [**36**星][5y] [Shell] [linkp2p/wps-pin](https://github.com/linkp2p/wps-pin) # This scripts is edited under the General Public License as defined by the Free software foundation. # This package is distributed in the hope that it will be useful, but without any warranty; It can be used and modified and shared but should be referenced to, it CANNOT be # sold or be used for a commercial-economical purpose. # See the detail…
+- [**36**星][1y] [Go] [leoloobeek/gogreen](https://github.com/leoloobeek/gogreen) Environmental (and http) keying for scripting languages
+- [**36**星][5y] [C++] [kkar/teamviewer-dumper-in-cpp](https://github.com/kkar/teamviewer-dumper-in-cpp) Dumps TeamViewer ID,Password and account settings from a running TeamViewer instance by enumerating child windows.
+- [**36**星][10m] [Shell] [keeganjk/kali-anonymous](https://github.com/keeganjk/kali-anonymous)
+- [**36**星][6m] [Shell] [kawaxi/kali-setup](https://github.com/kawaxi/kali-setup) Bash script to fully setup your kali system.
+- [**36**星][29d] [JS] [jrjr/paw.js](https://github.com/jrjr/paw.js) Passwordless Authentication Wallet (PAW) is key-based authentication for the web. The library helps manage identities, their associated public/private keypairs, and signing operations in the browser.
+- [**36**星][2y] [jhaddix/bug-bounty-reference](https://github.com/jhaddix/bug-bounty-reference) Inspired by
+- [**36**星][2y] [JS] [jamiebuilds/guarded-string](https://github.com/jamiebuilds/guarded-string) Prevent accidentally introducing XSS holes with the strings in your app
+- [**36**星][9m] [C] [ivanfratric/winafl](https://github.com/ivanfratric/winafl) Windows 二进制文件fuzz工具
+- [**36**星][4y] [C] [in12hacker/vt_64_ept](https://github.com/in12hacker/vt_64_ept) createfile
+- [**36**星][2y] [C++] [illusivenetworks-labs/getconsolehistoryandoutput](https://github.com/illusivenetworks-labs/getconsolehistoryandoutput) An Incident Response tool to extract console command history and screen output buffer
+- [**36**星][7d] [Lua] [igalia/snabb](https://github.com/igalia/snabb) Snabb Switch: Fast open source packet processing
+- [**36**星][29d] [hwroot/presentations](https://github.com/hwroot/presentations)
+- [**36**星][3m] [Shell] [hromie/obfs4proxy-openvpn](https://github.com/hromie/obfs4proxy-openvpn) Obfuscating OpenVPN traffic using obfs4proxy
+- [**36**星][2y] [C++] [hitanshu-dhawan/imagesteganography](https://github.com/hitanshu-dhawan/imagesteganography)
+- [**36**星][9m] [Shell] [gusbemacbe/suru-plus-dark](https://github.com/gusbemacbe/suru-plus-dark) Suru++ 25 Dark — A full dark cyberpunk, elegant, futuristic and Papirus-like third-party icons theme
+- [**36**星][5m] [C] [geosn0w/geofilza](https://github.com/geosn0w/geofilza) Filza No Jailbreak
+- [**36**星][8y] [C#] [gdssecurity/wcf-binary-soap-plug-in](https://github.com/gdssecurity/wcf-binary-soap-plug-in) This is a Burp Suite plug-in designed to encode and decode WCF Binary Soap request and response data ("Content-Type: application/soap+msbin1). There are two versions of the plug-in available (consult the README for more information).
+- [**36**星][3y] [C#] [gdssecurity/psattack](https://github.com/gdssecurity/psattack) A portable console aimed at making pentesting with PowerShell a little easier.
+- [**36**星][8y] [Py] [gdssecurity/burpee](https://github.com/gdssecurity/burpee) Python object interface to requests/responses recorded by Burp Suite
+- [**36**星][2y] [fuzzysecurity/defcon-beijing-uac](https://github.com/fuzzysecurity/defcon-beijing-uac) Slide deck for DefCon Beijing
+- [**36**星][1m] [Go] [fuzzitdev/example-go](https://github.com/fuzzitdev/example-go) Go Fuzzit Example
+- [**36**星][3y] [D] [f-secure/reflash](https://github.com/f-secure/reflash) ActionScript3 dynamic instrumentation tool
+- [**36**星][2y] [Py] [extremecoders-re/pjorion-deobfuscator](https://github.com/extremecoders-re/pjorion-deobfuscator) A deobfuscator for PjOrion, python cfg generator and more
+- [**36**星][5y] [Py] [eurecom-s3/actaeon](https://github.com/eurecom-s3/actaeon) Memory forensics of virtualization environments
+- [**36**星][23d] [C++] [erickutcher/httpdownloader](https://github.com/erickutcher/httpdownloader) HTTP(S) download manager that uses input/output completion ports (IOCP).
+- [**36**星][3y] [Py] [ec-digit-csirc/virustotal-tools](https://github.com/ec-digit-csirc/virustotal-tools)
+- [**36**星][14d] [Py] [draios/python-sdc-client](https://github.com/draios/python-sdc-client) Sysdig Monitor/Secure Python client library
+- [**36**星][21d] [Assembly] [dpt/the-great-escape](https://github.com/dpt/the-great-escape) Reverse engineering classic ZX Spectrum game "The Great Escape"
+- [**36**星][4y] [Py] [dionach/codeigniterxor](https://github.com/dionach/codeigniterxor) CodeIgniter <=2.1.4 session cookie decryption vulnerability
+- [**36**星][1m] [C++] [dankirk/regslscan](https://github.com/dankirk/regslscan) A tool for scanning registery key permissions. Find where non-admins can create symbolic links.
+- [**36**星][12m] [Py] [dahua966/web-awd-framework](https://github.com/dahua966/web-awd-framework) AWD framework for web in CTF by HuaSir
+- [**36**星][3y] [Awk] [d3sre/understanding_the_ndis_6_stack](https://github.com/d3sre/understanding_the_ndis_6_stack) Public documents about bachelor thesis "Reverse Engineering Analysis of the NDIS 6.* stack"
+- [**36**星][8m] [Py] [cyubuchen/free_proxy_website](https://github.com/cyubuchen/free_proxy_website) 获取免费socks/https/http代理的网站集合
+- [**36**星][3y] [Objective-C++] [cyhe/iossecurity-attack](https://github.com/cyhe/iossecurity-attack) APP安全(逆向攻击篇)
+- [**36**星][4y] [C#] [cweb/unicode-hax](https://github.com/cweb/unicode-hax) A library to assist in security-testing Unicode enabled applications during fuzzing, XSS, SQLi, etc.
+- [**36**星][8d] [PS] [cube0x0/security-assessment](https://github.com/cube0x0/security-assessment) Scripts to automate some part of Security/Vulnerability Assessment
+- [**36**星][5m] [PHP] [ctubio/php-proxy-keyserver](https://github.com/ctubio/php-proxy-keyserver) PHP proxy and extensible web interface forwarding standard HKP requests to a local or remote SKS OpenPGP Keyserver.
+- [**36**星][2y] [Py] [cr4sh/smram_parse](https://github.com/cr4sh/smram_parse) System Management RAM analysis tool
+- [**36**星][3y] [C++] [cn33liz/tpminituacanniversarybypass](https://github.com/cn33liz/tpminituacanniversarybypass) Bypassing User Account Control (UAC) using TpmInit.exe
+- [**36**星][2y] [PS] [clr2of8/commentator](https://github.com/clr2of8/commentator)
+- [**36**星][10d] [Java] [cliqz-oss/browser-android](https://github.com/cliqz-oss/browser-android) CLIQZ for Android
+- [**36**星][4m] [Py] [cisco-talos/re2pcap](https://github.com/cisco-talos/re2pcap)
+- [**36**星][3y] [C] [changeofpace/pe-header-dump-utilities](https://github.com/changeofpace/pe-header-dump-utilities) This x64dbg plugin adds several commands for dumping PE header information by address.
+- [**36**星][4y] [Py] [byt3bl33d3r/toby](https://github.com/byt3bl33d3r/toby) Recursively searches a directory for any file containing a specified string
+- [**36**星][2y] [Py] [brianwrf/s2-053-cve-2017-12611](https://github.com/brianwrf/s2-053-cve-2017-12611) A simple script for exploit RCE for Struts 2 S2-053(CVE-2017-12611)
+- [**36**星][3y] [C] [brad-anton/proxbrute](https://github.com/brad-anton/proxbrute) Modified proxmark3 firmware to perform brute forcing of 26-Bit ProxCards
+- [**36**星][2y] [PHP] [bogdaan/spycss](https://github.com/bogdaan/spycss) Track user interactions without JavaScript
+- [**36**星][4y] [C++] [bobotig/cracker-ng](https://github.com/bobotig/cracker-ng) ZIP cracker, CCRYPT cracker, and others to come.
+- [**36**星][2y] [JS] [blackhole1/fecm](https://github.com/blackhole1/fecm) 前端XSS防火墙及后台报警系统(front-end XSS firewall and back-end alarm system)
+- [**36**星][3y] [C] [arodland/haproxy](https://github.com/arodland/haproxy) Experiment with haproxy
+- [**36**星][1m] [JS] [anseki/gnirts](https://github.com/anseki/gnirts) Obfuscate string literals in JavaScript code.
+- [**36**星][10m] [Py] [anic/ida2pwntools](https://github.com/anic/ida2pwntools) IDA插件,远程连接pwntools启动的程序进行pwn调试
+- [**36**星][7m] [Py] [anantshri/ds_store_crawler_parser](https://github.com/anantshri/ds_store_crawler_parser) a parser + crawler for .DS_Store files exposed publically
+- [**36**星][28d] [Py] [ahmia/ahmia-site](https://github.com/ahmia/ahmia-site) Ahmia.fi - Hidden service search engine
+- [**36**星][17d] [Py] [agroce/universalmutator](https://github.com/agroce/universalmutator) Regexp based tool for mutating generic source code across numerous languages
+- [**36**星][5y] [C++] [adamkramer/jmp2it](https://github.com/adamkramer/jmp2it) Transfer EIP control to shellcode during malware analysis investigation
+- [**36**星][2y] [C] [adamgreen/mri](https://github.com/adamgreen/mri) MRI - Monitor for Remote Inspection. The gdb compatible debug monitor for Cortex-M devices.
+- [**36**星][1y] [ab1gale/phpcms-2008-cve-2018-19127](https://github.com/ab1gale/phpcms-2008-cve-2018-19127)
+- [**36**星][3y] [Py] [a7vinx/swarm](https://github.com/a7vinx/swarm) A modular distributed penetration testing tool.
+- [**36**星][4y] [7iosecurity/xss-payloads](https://github.com/7iosecurity/xss-payloads) XSS Payloads
+- [**36**星][4y] [PS] [5alt/zerorat](https://github.com/5alt/zerorat) ZeroRAT是一款windows上的一句话远控
+- [**36**星][7d] [C] [0x7ff/dimentio](https://github.com/0x7ff/dimentio) PoC tool for setting nonce without triggering KPP/KTRR/PAC. (requires tfp0)
+- [**36**星][3y] [Py] [0ang3el/unsafe-jax-rs-burp](https://github.com/0ang3el/unsafe-jax-rs-burp) Burp Suite extension for JAX-RS
+- [**35**星][2y] [unbinilium/surge](https://github.com/unbinilium/surge) Shadowsocks Encrypt Support Module for Surge APP, iOS & MacOS Configuration
+- [**35**星][7m] [tidesec/mars](https://github.com/tidesec/mars) Mars(战神)——结合Tide资产探测和指纹识别方面的技术积累,为客户提供更高效智能的安全检测和安全监测服务。
+- [**35**星][2m] [Lua] [chaitin/safeline-open-platform](https://github.com/chaitin/safeline-open-platform)
+- [**35**星][29d] [Py] [mak-/scanomaly](https://github.com/mak-/scanomaly) This is a web application fuzzer scanner - the goal was CLI flexibility and rapid prototyping
+- [**35**星][5m] [HTML] [nsacyber/bitlocker-guidance](https://github.com/nsacyber/bitlocker-guidance) Configuration guidance for implementing BitLocker. #nsacyber
+- [**35**星][4y] [Py] [lanjelot/web-hunter](https://github.com/lanjelot/web-hunter) Crawl Google and Bing to find emails, subdomains and URLs associated to a target domain
+- [**35**星][2m] [LLVM] [galoisinc/llvm-pretty-bc-parser](https://github.com/galoisinc/llvm-pretty-bc-parser) Parser for the llvm bitcode format
+- [**35**星][9m] [JS] [paulsec/shodan.io-mobile-app](https://github.com/paulsec/shodan.io-mobile-app) Official repository for the Shodan.io mobile Application
+- [**35**星][6y] [Py] [robindavid/captcha-basic-recognition](https://github.com/robindavid/captcha-basic-recognition) Python module that intent to crack basic captcha engines using OpenCV and Pytesser
+- [**35**星][1m] [PS] [vletoux/bluekeep-scanner](https://github.com/vletoux/bluekeep-scanner) BlueKeep powershell scanner (based on c# code)
+- [**35**星][2y] [Shell] [secfathy/bugzee](https://github.com/secfathy/bugzee) Simple Script to install recommended Bug Bounty Hunting Tools In Your Linux Disto
+- [**35**星][1m] [jasonniebauer/nmap-cheatsheet](https://github.com/jasonniebauer/nmap-cheatsheet) Reference guide for scanning networks with Nmap.
+- [**35**星][2d] [CSS] [fabriziofubelli/black-widow](https://github.com/fabriziofubelli/black-widow) Offensive penetration testing tool (Open Source)
+- [**35**星][15d] [Rust] [scipr-lab/poly-commit](https://github.com/scipr-lab/poly-commit) A Rust library for polynomial commitments
+- [**35**星][2y] [Shell] [re4son/pocket-kali-live-build](https://github.com/Re4son/Pocket-Kali-live-build) Debian live build for the Pocket-Kali
+- [**35**星][3y] [polarislab/aesgfic](https://github.com/PolarisLab/AESGFIC) 互联网企业安全高级指南读书笔记脑图 -
+- [**35**星][1y] [Java] [bit4woo/resign](https://github.com/bit4woo/ReSign) A burp extender that recalculate signature value automatically after you modified request parameter value.
+- [**35**星][5y] [C] [intel/kvmgt-kernel](https://github.com/intel/KVMGT-kernel)
+- [**35**星][3y] [JS] [yxhsea/xss](https://github.com/yxhsea/xss) web安全之模拟xss攻击
+- [**35**星][3y] [Shell] [rumpkernel/rumpctrl](https://github.com/rumpkernel/rumpctrl) Control and diagnostic applications for rump kernels
+- [**35**星][7y] [Java] [continuumsecurity/resty-burp](https://github.com/continuumsecurity/resty-burp) REST/JSON interface to Burp Suite
+- [**35**星][2d] [Rust] [rair-project/rair-core](https://github.com/Rair-Project/rair-core) RAIR: RAdare In Rust
+- [**35**星][2m] [Go] [62726164/netscan](https://github.com/62726164/netscan) A fast TCP port scanner
+- [**35**星][1y] [PHP] [rickmacgillis/hackfastalgos](https://github.com/rickmacgillis/hackfastalgos) A library of various fast algorithms written in Hack
+- [**35**星][2y] [Py] [hash3lizer/airpydump](https://github.com/hash3liZer/airpydump) Analyze Wireless Packets on the fly. Currently supporting three working Modes (Reader, Live, Stealth)
+- [**35**星][8y] [Py] [zynamics/ida2sql-plugin-ida](https://github.com/zynamics/ida2sql-plugin-ida)
+- [**35**星][5m] [HTML] [zhuowei/worthdoingbadly.com](https://github.com/zhuowei/worthdoingbadly.com) My blog where I make a new coding project every Thursday.
+- [**35**星][4y] [C++] [zer0mem/libc](https://github.com/zer0mem/libc) Kernel C++ driver developing library; std & boost partially supported
+- [**35**星][11m] [Go] [yvesago/shodan-cli](https://github.com/yvesago/shodan-cli) Simple golang shodan cli
+- [**35**星][2y] [yuvadm/dg-m1q](https://github.com/yuvadm/dg-m1q) DG-M1Q IP camera alternative usage
+- [**35**星][5y] [C] [yuange75/aspcode](https://github.com/yuange75/aspcode) aspcode堆溢出利用代码
+- [**35**星][1y] [Py] [yaokaiyang-assaultmaster/pythonportscanner](https://github.com/yaokaiyang-assaultmaster/pythonportscanner)
+- [**35**星][3y] [Py] [yang3yen/pysm4](https://github.com/yang3yen/pysm4) Python SM4
+- [**35**星][3y] [Py] [yanceyblog/scrapy-multi](https://github.com/yanceyblog/scrapy-multi) 实现多个爬虫共同工作的scrapy爬虫实例
+- [**35**星][2y] [C] [xerub/ibex64](https://github.com/xerub/ibex64) iBoot64 Payload Development Toolkit
+- [**35**星][14d] [Py] [x-vector/x-rsa](https://github.com/x-vector/x-rsa) Cryptography Tool | RSA Attacks
+- [**35**星][1y] [Swift] [vixentael/zka-example](https://github.com/vixentael/zka-example) Zero Knowledge Application example, iOS, notes sharing, Firebase backend
+- [**35**星][1y] [C++] [venam/browser](https://github.com/venam/browser) A Simple to use yet efficient headers only library ( wrapped over libcurl / curl wrapper ) to do browser emulation (emulate) or web interaction in C++.
+- [**35**星][1y] [ustayready/cloudburst](https://github.com/ustayready/cloudburst) CloudBurst is a red team framework for interacting with cloud providers to capture, compromise, and exfil data.
+- [**35**星][4y] [C++] [uncseclab/vmxxnr](https://github.com/uncseclab/vmxxnr) Implementation of a thin hypervisor
+- [**35**星][1y] [HTML] [umbertocicero/coinhive-monero](https://github.com/umbertocicero/coinhive-monero)
+- [**35**星][6m] [Py] [trylinux/lift](https://github.com/trylinux/lift) Low-Impact Fingerprint Tool
+- [**35**星][3y] [C] [topcss/wannacry](https://github.com/topcss/wannacry) 勒索病毒WannaCry反编译源码
+- [**35**星][2y] [Perl] [tls-check/tls-check](https://github.com/tls-check/tls-check) TLS-Check – a security/encryption scanner and framework for checking IT Security and the capability to be innovative
+- [**35**星][7m] [Py] [tidesec/tdscanner](https://github.com/tidesec/tdscanner) 自动化检测小工具,主要实现了域名枚举、链接爬取、注入检测、主机扫描、目录枚举、敏感信息检测等功能~
+- [**35**星][2y] [Java] [thecyaniteproject/exit_code_java](https://github.com/thecyaniteproject/exit_code_java) ExitCode - The Free, Open-Source, Desktop & Hacking Simulator Game.
+- [**35**星][6m] [Py] [testingpens/constole](https://github.com/testingpens/constole) Scan for and exploit Consul agents
+- [**35**星][5m] [Rust] [teovoinea/steganography](https://github.com/teovoinea/steganography) A simple steganography library written in rust
+- [**35**星][2y] [technicaldada/best-hacking-tools](https://github.com/technicaldada/best-hacking-tools) BEST HACKING TOOLS..For more tools visit our blog for Hackers
+- [**35**星][2y] [Py] [superbuker/camhell](https://github.com/superbuker/camhell) Ingenic T10 IP camera crawler
+- [**35**星][6m] [Shell] [sundowndev/covermyass](https://github.com/sundowndev/covermyass) Shell tool to cover your tracks on UNIX systems. Designed for pen testing "covering tracks" phase, before exiting the infected server. Or, permanently disable system logs for post-exploitation.
+- [**35**星][9m] [C] [sud0man/pac4mac](https://github.com/sud0man/pac4mac) Automatically exported from code.google.com/p/pac4mac
+- [**35**星][1y] [JS] [stdarg/tcp-port-used](https://github.com/stdarg/tcp-port-used) A simple Node.js module to check if a TCP port is already bound.
+- [**35**星][1y] [PS] [sqlcollaborative/invoke-sqlcmd2](https://github.com/sqlcollaborative/invoke-sqlcmd2) PowerShell module containing Invoke-SqlCmd2
+- [**35**星][9y] [Perl] [spiderlabs/ackack](https://github.com/spiderlabs/ackack) A program to monitor network traffic and detect unauthorized sessions.
+- [**35**星][2y] [Py] [webr0ck/waf_bypass_helper](https://github.com/sndvul/waf_bypass_helper) Python script for generating bypass of your attack
+- [**35**星][6m] [C] [sistr0/ps4-hen-vtx](https://github.com/sistr0/ps4-hen-vtx) A fully implemented kernel exploit for the PS4 with HEN
+- [**35**星][5y] [Py] [siberas/ida2sym](https://github.com/siberas/ida2sym) IDAScript to create Symbol file which can be loaded in WinDbg via AddSyntheticSymbol
+- [**35**星][3y] [Java] [serval-snt-uni-lu/droidra](https://github.com/serval-snt-uni-lu/droidra) Taming Reflection to Support Whole-Program Analysis of Android Apps
+- [**35**星][2y] [Shell] [seanheelan/funserialize](https://github.com/seanheelan/funserialize) Scripts and auxiliary files for fuzzing PHP's unserialize function
+- [**35**星][8y] [C] [sduverger/ld-shatner](https://github.com/sduverger/ld-shatner) ld-linux code injector
+- [**35**星][6y] [C++] [scen/ionlib](https://github.com/scen/ionlib) c++11 reverse engineering library. bootstraps common tasks in game hacking and reverse engineering
+- [**35**星][2y] [C#] [scavanger/memorymodule.net](https://github.com/scavanger/memorymodule.net) Loading a native DLL in the memory.
+- [**35**星][2y] [C] [satoshinm/pill_duck](https://github.com/satoshinm/pill_duck) Scriptable USB HID device for STM32F103 blue pill (inspired by USB Rubber Ducky) ⛺
+- [**35**星][4y] [Shell] [samyoyo/flux](https://github.com/samyoyo/flux) Flux is a [WIFI CRACKER]
+- [**35**星][1m] [Py] [roddhjav/pass-audit](https://github.com/roddhjav/pass-audit) A pass extension for auditing your password repository.
+- [**35**星][2y] [ritiek/rat-via-telegram](https://github.com/ritiek/rat-via-telegram) Removed according to regulations
+- [**35**星][5y] [C#] [redth/android.signature.tool](https://github.com/redth/android.signature.tool) Simple GUI tool for Mac and Windows to help find the SHA1 and MD5 hashes of your Android keystore's and apk's
+- [**35**星][1y] [C] [realoriginal/alpc-diaghub](https://github.com/realoriginal/alpc-diaghub) Utilizing the ALPC Flaw in combiniation with Diagnostics Hub as found in Server 2016 and Windows 10.
+- [**35**星][2y] [Py] [r0oth3x49/tor](https://github.com/r0oth3x49/tor) Tor is a python based module for using tor proxy/network services on windows, osx, linux with just one click.
+- [**35**星][2y] [PHP] [propaganistas/email-obfuscator](https://github.com/propaganistas/email-obfuscator)
+- [**35**星][1y] [C] [prodicode/arppd](https://github.com/prodicode/arppd) An ARP Poisoning Defender script
+- [**35**星][3m] [PS] [dsccommunity/xfailovercluster](https://github.com/dsccommunity/xFailOverCluster) This module contains DSC resources for deployment and configuration of Windows Server Failover Cluster.
+- [**35**星][5y] [plutochiou/shadowsocks-rss](https://github.com/plutochiou/shadowsocks-rss) shadowsocks update rss
+- [**35**星][3y] [Java] [onurkarasalihoglu/pentest-tools](https://github.com/onurkarasalihoglu/pentest-tools)
+- [**35**星][2y] [JS] [one-com/one-validation](https://github.com/one-com/one-validation) Regexp based validation collection for common internet validation tasks
+- [**35**星][8m] [offensive-security/kali-wsl-chroot](https://github.com/offensive-security/kali-wsl-chroot) Kali Linux Windows App chroot builder script
+- [**35**星][8m] [Py] [oddcoder/cutterdrcov](https://github.com/oddcoder/cutterdrcov) DynamoRIO coverage visualization for cutter
+- [**35**星][5m] [ocatak/malware_api_class](https://github.com/ocatak/malware_api_class) Malware dataset for security researchers, data scientists. Public malware dataset generated by Cuckoo Sandbox based on Windows OS API calls analysis for cyber security researchers
+- [**35**星][1y] [Go] [nucypher/goumbral](https://github.com/nucypher/goumbral) Umbral implementation in Golang
+- [**35**星][1y] [C] [ntraiseharderror/kaiser](https://github.com/ntraiseharderror/kaiser) Fileless persistence, attacks and anti-forensic capabilties.
+- [**35**星][7m] [C] [ntraiseharderror/antihook](https://github.com/ntraiseharderror/antihook) PoC designed to evade userland-hooking anti-virus.
+- [**35**星][6m] [C] [ns1/xdp-workshop](https://github.com/ns1/xdp-workshop) Velocity SJC 2019 - DDoS mitigation made easy with XDP and eBPF
+- [**35**星][3y] [C] [nnamon/practicalret2libc](https://github.com/nnamon/practicalret2libc) Practical Return to Libc in 12 Minutes Presentation + practice for CS3235 YouTeach project.
+- [**35**星][21d] [C] [nil0x42/duplicut](https://github.com/nil0x42/duplicut) Quickly remove duplicates, without changing the order, and without getting OOM on huge wordlists.
+- [**35**星][5y] [C++] [nihilus/ida_classinformer](https://github.com/nihilus/ida_classinformer) IDA ClassInformer PlugIn
+- [**35**星][6y] [PHP] [nightlionsecurity/phpstress](https://github.com/nightlionsecurity/phpstress) phpstress:对运行PHP-FPM 或 PHP-CGI 的网页服务器进行DoS/压力测试
+- [**35**星][10m] [Shell] [nicoulaj/broom](https://github.com/nicoulaj/broom) A disk cleaning utility for developers.
+- [**35**星][2y] [Py] [nhoya/mycroftai-rce](https://github.com/nhoya/mycroftai-rce) "Zero Click" Remote Code Execution in Mycroft AI vocal assistant
+- [**35**星][5y] [Py] [netxfly/eventlog-audit](https://github.com/netxfly/eventlog-audit) Windows事件日志审计系统,支持以WEB的方式审计日志
+- [**35**星][8m] [Go] [netevert/delator](https://github.com/netevert/delator) Golang-based subdomain miner leveraging certificate transparency logs
+- [**35**星][3y] [Java] [netcrusherorg/netcrusher-java](https://github.com/netcrusherorg/netcrusher-java) NetCrusher is a TCP/UDP proxy that allows to test services for failover
+- [**35**星][2y] [Py] [neargle/tips-note](https://github.com/neargle/tips-note) 做过的实验,踩过的坑
+- [**35**星][4y] [Shell] [ncsa/ossec-tools](https://github.com/ncsa/ossec-tools) Scripts and integrations for OSSEC
+- [**35**星][3y] [Py] [n1nj4sec/pymemimporter](https://github.com/n1nj4sec/pymemimporter) import pyd or execute PE all from memory using only pure python code and some shellcode tricks
+- [**35**星][4y] [C] [motazreda/malwarefragmentationtool](https://github.com/motazreda/malwarefragmentationtool) Malware Fragmentation Tool its a tool that simply fragment the PE file and it can disassemble the PE file, etc this tool very useful for people who do malware research or analysis for pe_files
+- [**35**星][5y] [Py] [miserlou/onionchat](https://github.com/miserlou/onionchat) Anonymous chat. No Javascript.
+- [**35**星][2m] [Py] [michaelstott/crlf-injection-scanner](https://github.com/michaelstott/crlf-injection-scanner) Command line tool for testing CRLF injection on list of domains.
+- [**35**星][2y] [Py] [meyer9/ethdasm](https://github.com/meyer9/ethdasm) Tool for auditing Ethereum contracts
+- [**35**星][2y] [Go] [metalnem/zinio](https://github.com/metalnem/zinio) This command line tool removes DRM from magazines in your digital Zinio library
+- [**35**星][4m] [Go] [maxlaverse/reverse-shell](https://github.com/maxlaverse/reverse-shell) A reverse-shell agent, master and rendezvous point written in Go
+- [**35**星][3y] [PS] [machosec/mystique](https://github.com/machosec/mystique) PowerShell module to play with Kerberos S4U extensions
+- [**35**星][3y] [C#] [m4ndingo/radare2gui_dotnet](https://github.com/m4ndingo/radare2gui_dotnet) Another radare2 gui for windows
+- [**35**星][1y] [JS] [lmammino/distributed-jwt-cracker](https://github.com/lmammino/distributed-jwt-cracker) An experimental distributed JWT token cracker built using Node.js and ZeroMQ
+- [**35**星][4y] [Py] [laginimaineb/unpack_bootloader_image](https://github.com/laginimaineb/unpack_bootloader_image) Small script to unpack the bootloader image format present in Nexus 5 devices
+- [**35**星][9m] [C] [l4ys/lazyklee](https://github.com/l4ys/lazyklee) Lazy python wrapper of KLEE for solving CTF challenges
+- [**35**星][3y] [Go] [kung-foo/freki](https://github.com/kung-foo/freki) Freki is a tool to manipulate packets in usermode using NFQUEUE and golang.
+- [**35**星][4m] [Py] [ktenzer/openshift-on-openstack-123](https://github.com/ktenzer/openshift-on-openstack-123) Deploy OpenShift on OpenStack
+- [**35**星][4y] [Py] [kitctf/ctfcode](https://github.com/kitctf/ctfcode) Collection of somewhat useful stuff for CTF events
+- [**35**星][2y] [JS] [kingsabri/sqlmap-tamper-api](https://github.com/kingsabri/sqlmap-tamper-api) SQLMap tamper api to accept tamper scripts from all languages
+- [**35**星][1y] [Java] [kingkaki/struts2-vulenv](https://github.com/kingkaki/struts2-vulenv) struts2 漏洞环境源代码
+- [**35**星][2y] [C] [jordan9001/superhide](https://github.com/jordan9001/superhide) Example of hooking a linux systemcall
+- [**35**星][3y] [Go] [jmpews/goscan](https://github.com/jmpews/goscan) golang的扫描框架, 支持协程池和自动调节协程个数.
+- [**35**星][1y] [Py] [jimmy-sonny/yayagen](https://github.com/jimmy-sonny/yayagen) Yet Another YARA rule Generator
+- [**35**星][3y] [JS] [jackgu1988/dsploit-scripts](https://github.com/jackgu1988/dsploit-scripts) Scripts that could be injected in MITM attacks using dSploit
+- [**35**星][22d] [PHP] [isometriks/isometriksspambundle](https://github.com/isometriks/isometriksspambundle) Symfony3 Form Spam Protection
+- [**35**星][3y] [Perl] [interference-security/kali-windows-binaries](https://github.com/interference-security/kali-windows-binaries) Windows binaries from Kali Linux :
+- [**35**星][3y] [Py] [immunio/apache-struts2-cve-2017-5638](https://github.com/immunio/apache-struts2-cve-2017-5638) Demo Application and Exploit
+- [**35**星][6y] [Py] [ilektrojohn/creepy-plugins](https://github.com/ilektrojohn/creepy-plugins) Plugins for cree.py
+- [**35**星][1y] [Java] [ikkisoft/blazer](https://github.com/ikkisoft/blazer) Burp Suite AMF Extension
+- [**35**星][4y] [Py] [iiseymour/game-of-life](https://github.com/iiseymour/game-of-life) Conway's Game Of Life
+- [**35**星][3y] [Shell] [huntergregal/malwaresandbox](https://github.com/huntergregal/malwaresandbox) A ready to deploy docker container for a fresh sandbox for on-the-fly malware analysis
+- [**35**星][3y] [Py] [huntergregal/bothunter](https://github.com/huntergregal/bothunter) Scans the internet for open FTP servers looking for common malware bot droppers and grabs them for sampling. Also provides support for uploading samples to VirusTotal
+- [**35**星][5y] [Py] [holloway/insiderer](https://github.com/holloway/insiderer) Insiderer looks inside files for metadata and hidden content
+- [**35**星][1y] [Py] [henryhaohao/slider_captcha_crack](https://github.com/henryhaohao/slider_captcha_crack)
+- [**35**星][2y] [PHP] [havysec/vulnerable-scene](https://github.com/havysec/vulnerable-scene) 一些漏洞场景的还原,基于
+- [**35**星][1y] [C++] [hatriot/bugs](https://github.com/hatriot/bugs) public bugs/proof of concepts
+- [**35**星][3y] [C] [harvie/libpurple-core-answerscripts](https://github.com/harvie/libpurple-core-answerscripts) Most-hackable Pidgin plugin! Framework for hooking scripts to respond received messages for various libpurple clients such as pidgin or finch
+- [**35**星][2y] [Py] [hanc00l/weblogic_wls_wsat_rce](https://github.com/hanc00l/weblogic_wls_wsat_rce) forked from
+- [**35**星][3y] [hacking-and-coffee/defcon-for-n00bs](https://github.com/hacking-and-coffee/defcon-for-n00bs) DEF CON for N00bs is an open guide for first time attendees to the convention.
+- [**35**星][3m] [Java] [guardicore/labs_campaigns](https://github.com/guardicore/labs_campaigns)
+- [**35**星][5m] [gsurma/password_cracker](https://github.com/gsurma/password_cracker) Char-level RNN LSTM password cracker
+- [**35**星][5y] [Py] [gry/shellshock-scanner](https://github.com/gry/shellshock-scanner) A simple Shellshock scanner in python
+- [**35**星][7y] [Py] [grugq/buggery](https://github.com/grugq/buggery) Python wrapper for DbgEng
+- [**35**星][4y] [Java] [grrrdog/acedcup](https://github.com/grrrdog/acedcup) Payload generator for Java Binary Deserialization attack with Commons FileUpload (CVE-2013-2186)
+- [**35**星][6d] [C#] [greavesy1899/mafia2toolkit](https://github.com/greavesy1899/mafia2toolkit) Open source toolkit for Mafia 2.
+- [**35**星][8d] [Perl] [gouveaheitor/security-spellbook](https://github.com/gouveaheitor/security-spellbook) My collection of custom scripts, plugins, exploits and others small things
+- [**35**星][4m] [Py] [geek-repo/c2-blockchain](https://github.com/geek-repo/c2-blockchain) This is a concept poc of command and control server implemented over blockchain
+- [**35**星][3y] [Py] [gauthamgoli/rarpasswordcracker](https://github.com/gauthamgoli/rarpasswordcracker) Bruteforces a password protected rar/zip file with specified charset.
+- [**35**星][4y] [Py] [ganapati/wpyscan](https://github.com/ganapati/wpyscan) Wordpress pentest tool (because i don't like ruby)
+- [**35**星][6y] [C#] [friedkiwi/netcrypt](https://github.com/friedkiwi/netcrypt) .NET executable packer
+- [**35**星][2y] [Go] [freach/docker-image-policy-plugin](https://github.com/freach/docker-image-policy-plugin) Docker authentication plugin to enforce a image pull policy. Whitelist Docker images allowed to be pulled.
+- [**35**星][3y] [C] [firebroo/screw_decode](https://github.com/firebroo/screw_decode) decode screw encode php file
+- [**35**星][1y] [C++] [fdiskyou/dbi](https://github.com/fdiskyou/dbi) Files for
+- [**35**星][12m] [PHP] [farisv/prestashop-cve-2018-19126](https://github.com/farisv/prestashop-cve-2018-19126) PrestaShop (1.6.x <= 1.6.1.23 or 1.7.x <= 1.7.4.4) Back Office Remote Code Execution (CVE-2018-19126)
+- [**35**星][2y] [Py] [extremecoders-re/bytecode_simplifier](https://github.com/extremecoders-re/bytecode_simplifier) A generic deobfuscator for PjOrion obfuscated python scripts
+- [**35**星][1m] [Rebol] [ericzimmerman/recmd](https://github.com/ericzimmerman/recmd) Command line access to the Registry
+- [**35**星][8m] [enovella/ida2ghidra-kb](https://github.com/enovella/ida2ghidra-kb) 在Ghidra中应用部分IDA的键盘绑定
+- [**35**星][7d] [C] [efficios/babeltrace](https://github.com/efficios/babeltrace) The Babeltrace project provides trace read and write libraries, as well as a trace converter. Plugins can be created for any trace format to allow its conversion to/from another trace format.
+- [**35**星][1y] [Py] [digidotcom/python-wpa-supplicant](https://github.com/digidotcom/python-wpa-supplicant) WPA Supplicant wrapper for Python
+- [**35**星][1y] [C] [davidbuchanan314/fusee-nano](https://github.com/davidbuchanan314/fusee-nano) A minimalist re-implementation of the Fusée Gelée exploit (
+- [**35**星][2m] [Py] [d4mianwayne/alfred](https://github.com/d4mianwayne/alfred) A friendly Toolkit for Beginner CTF players
+- [**35**星][6y] [Perl] [cyberisltd/egresser](https://github.com/cyberisltd/egresser) Client/server scripts designed to test outbound (egress) firewall rules.
+- [**35**星][7y] [C++] [csurage/rootkit](https://github.com/csurage/rootkit) Windows Malware
+- [**35**星][1m] [Go] [cretz/tor-static](https://github.com/cretz/tor-static) Helpers to build Tor statically
+- [**35**星][4y] [C++] [codereversing/wow64syscall](https://github.com/codereversing/wow64syscall) WoW64 Syscall Hooking
+- [**35**星][1m] [JS] [cloudflare/ipfs-ext](https://github.com/cloudflare/ipfs-ext) Validates IPFS resources served by Cloudflare's gateway.
+- [**35**星][4y] [C] [choller/llcov](https://github.com/choller/llcov) LLVM-based, flexible, live coverage instrumentation for C/C++ code
+- [**35**星][5y] [C] [charlesxsh/mdk3-master](https://github.com/charlesxsh/mdk3-master) Modifications to MDK3 to reboot Access Points
+- [**35**星][2y] [JS] [cgvwzq/spectre](https://github.com/cgvwzq/spectre) My minimal PoC for spectre
+- [**35**星][2m] [Py] [carlospolop/legion](https://github.com/carlospolop/legion) Automatic Enumeration Tool based in Open Source tools
+- [**35**星][11m] [brianwrf/cve-2018-11788](https://github.com/brianwrf/cve-2018-11788) Apache Karaf XXE Vulnerability (CVE-2018-11788)
+- [**35**星][1y] [Py] [bnbdr/ida-bpf-processor](https://github.com/bnbdr/ida-bpf-processor) BPF Processor for IDA Python
+- [**35**星][4y] [C#] [bnagy/crabstone](https://github.com/bnagy/crabstone) crabstone is a Ruby binding to the capstone disassembly library by Nguyen Anh Quynh
+- [**35**星][5m] [C] [bmx-routing/bmx7](https://github.com/bmx-routing/bmx7) BMX7 / SEMTOR Securely Entrusted Mesh Routing Protocol
+- [**35**星][6m] [bkth/tale-of-chakra-bugs](https://github.com/bkth/tale-of-chakra-bugs)
+- [**35**星][6m] [Py] [bkerler/dump_avb_signature](https://github.com/bkerler/dump_avb_signature) Dump Android Verified Boot Signature
+- [**35**星][2y] [Py] [b4rd4k/vproxy](https://github.com/b4rd4k/vproxy) Forward HTTP/S Traffic To Proxy Instance
+- [**35**星][9m] [Py] [att/docker-forensics](https://github.com/att/docker-forensics) Tools to assist in forensicating docker
+- [**35**星][3y] [ashchan/bitcoin-ethereum-cryptography](https://github.com/ashchan/bitcoin-ethereum-cryptography) 比特币、以太坊加密技术
+- [**35**星][3y] [arnaudsoullie/ics-default-passwords](https://github.com/arnaudsoullie/ics-default-passwords) List of default passwords for Industrial Control Systems
+- [**35**星][5y] [OCaml] [argp/bap](https://github.com/argp/bap) Binary Analysis Platform -- I will try to keep this updated with patches, fixes, etc.
+- [**35**星][11m] [CSS] [appsecco/practical-recon-levelup0x02](https://github.com/appsecco/practical-recon-levelup0x02) This repository contains all the material from the talk "Practical recon techniques for bug hunters & pentesters" given at Bugcrowd LevelUp 0x02 virtual conference
+- [**35**星][10m] [Go] [amir20/sha-miner](https://github.com/amir20/sha-miner) Simple miner for understanding how cryptocurrency mining works
+- [**35**星][9m] [Makefile] [alectrocute/unboundbl](https://github.com/alectrocute/unboundbl)
+- [**35**星][11y] [C] [alanquatermain/appencryptor](https://github.com/alanquatermain/appencryptor) A command-line tool to apply or remove Apple Binary Protection from an application.
+- [**35**星][2y] [C#] [akalankauk/keep-it-secure-file-encryption](https://github.com/akalankauk/keep-it-secure-file-encryption) Keep It Secure Private Data Encryption & Decryption Tool
+- [**35**星][2y] [Shell] [ac-mercury/mercuryiss-kali](https://github.com/ac-mercury/mercuryiss-kali) 部署KaliLinux Docker容器的Bash脚本
+- [**35**星][2y] [C++] [3gstudent/createremotethread](https://github.com/3gstudent/createremotethread) From 32-bit process to 64-bit process
+- [**35**星][2y] [Shell] [0x00pf/stan](https://github.com/0x00pf/stan) STAN is a sTAtic aNalyser
+- [**35**星][3y] [Py] [0pc0defr/wordpress-sploit-framework](https://github.com/0pc0defr/wordpress-sploit-framework) Wordpress Sploit Framework was developed for the purpose to provide a framework which creates proof of concept when discovering vulnerability in Wordpress core and Wordpress plugin.
+- [**35**星][4y] [Perl] [0ang3el/hibernate-injection-study](https://github.com/0ang3el/hibernate-injection-study) Study about HQL injection exploitation.
+- [**35**星][11m] [Py] [04x/wpscan](https://github.com/04x/wpscan) 渗透+信息收集
+- [**34**星][15d] [C] [atrosinenko/kbdysch](https://github.com/atrosinenko/kbdysch) A collection of user-space Linux kernel specific guided fuzzers based on LKL
+- [**34**星][5m] [Py] [k0fin/eternalrelayx](https://github.com/k0fin/eternalrelayx) eternalrelayx
+- [**34**星][3y] [screetsec/dracos](https://github.com/screetsec/dracos) Dracos Linux (
+- [**34**星][2y] [Py] [misterbianco/wifijammer-ng](https://github.com/misterbianco/wifijammer-ng) Dan McInerney's Wifijammer - rewritten
+- [**34**星][2m] [Py] [angr/fidget](https://github.com/angr/fidget) A tool to add simple inline patches to a binary to rearrange its stack frames, and other things!
+- [**34**星][3m] [C++] [x64dbg/titanengine](https://github.com/x64dbg/titanengine)
+- [**34**星][10m] [Kotlin] [cbeuw/goquiet-android](https://github.com/cbeuw/goquiet-android) GoQuiet plugin on android
+- [**34**星][2y] [Go] [csploit/daemon](https://github.com/csploit/daemon) the core of the cSploit project
+- [**34**星][3m] [Go] [cnlh/httpmonitor](https://github.com/cnlh/httpmonitor) http、api接口监控系统,可监控各种http请求,支持header、data设置,支持腾讯云短信和邮件警告通知。
+- [**34**星][1y] [JS] [threatexpress/portplow](https://github.com/threatexpress/portplow) PortPlow is a distributed port and system scanning & enumeration service. It enables the quick and automated enumeration of ports and services from multiple systems managed by a central console.
+- [**34**星][3y] [Py] [airbus-seclab/elfesteem](https://github.com/airbus-seclab/elfesteem) ELF/PE/Mach-O parsing library
+- [**34**星][10m] [Go] [v2ray/geoip](https://github.com/v2ray/geoip)
+- [**34**星][5y] [Py] [danmcinerney/best-channel](https://github.com/danmcinerney/best-channel) Find wifi channel with least interference
+- [**34**星][1y] [Shell] [sensepost/shinai-fi](https://github.com/sensepost/shinai-fi) Docker images for learning wifi hacking
+- [**34**星][5m] [Py] [rabbitmask/whoisweblogic](https://github.com/rabbitmask/whoisweblogic) 提供Weblogic批量模糊指纹识别
+- [**34**星][21d] [Jupyter Notebook] [vrthra/f1](https://github.com/vrthra/f1)
+- [**34**星][6m] [C++] [parkovski/wsudo](https://github.com/parkovski/wsudo) Proof of concept sudo for Windows
+- [**34**星][2m] [CSS] [koala633/hostbase](https://github.com/koala633/hostbase) A Ruby GUI based on advanced rogue AP attack
+- [**34**星][10m] [Java] [alexatiks/spring-security-jwt-csrf](https://github.com/alexatiks/spring-security-jwt-csrf) A demonstration of stateless JWT authentication with Spring Security, Spring Boot and Vue js
+- [**34**星][7m] [gfwlist/tsilwfg](https://github.com/gfwlist/tsilwfg) Reverse list for netizens overseas
+- [**34**星][7m] [Ruby] [k8gege/zimbraexploit](https://github.com/k8gege/zimbraexploit) Zimbra邮件系统漏洞 XXE/RCE/SSRF/Upload GetShell Exploit 1. (CVE-2019-9621 Zimbra<8.8.11 XXE GetShell Exploit)
+- [**34**星][6d] [Py] [technowlogy-pushpender/technowhorse](https://github.com/technowlogy-pushpender/technowhorse) TechNowHorse is a RAT (Remote Administrator Trojan) Generator for Windows/Linux systems written in Python 3.
+- [**34**星][2y] [C] [nttiton/malware](https://github.com/NTTITON/Malware)
+- [**34**星][2m] [PHP] [safflower/solveme](https://github.com/safflower/solveme) SolveMe - Jeopardy CTF Platform (for wargame)
+- [**34**星][3y] [Ruby] [cloudfoundry-attic/dea_ng](https://github.com/cloudfoundry-attic/dea_ng) Droplet Execution Agent for Cloud Foundry v2
+- [**34**星][28d] [HTML] [cveproject/cveproject.github.io](https://github.com/CVEProject/cveproject.github.io) CVE Project Documentation
+- [**34**星][7d] [C] [zfigura/semblance](https://github.com/zfigura/semblance) Disassembler for Windows executables. Supports 16-bit NE (New Executable), MZ (DOS), and PE (Portable Executable, i.e. Win32) files.
+- [**34**星][3y] [Py] [ywjt/dshield](https://github.com/ywjt/dshield)
+- [**34**星][2y] [Py] [x0rloser/ps4_wifi_bt](https://github.com/x0rloser/ps4_wifi_bt) PS4 wifi/bluetooth firmware ~~reversing~~ h4x
+- [**34**星][21d] [PS] [wortell/azsentinel](https://github.com/wortell/azsentinel) PowerShell module for Azure Sentinel
+- [**34**星][5y] [Java] [wooyundota/intentmonitor](https://github.com/wooyundota/intentmonitor) Tool based xposed can monitor the android intents
+- [**34**星][6m] [Pascal] [winkelsdorf/delphiencryptioncompendium](https://github.com/winkelsdorf/delphiencryptioncompendium) Automatically exported from code.google.com/p/delphidec
+- [**34**星][1y] [vu-aml/adlib](https://github.com/vu-aml/adlib) Game-Theoretic Adversarial Machine Learning Library
+- [**34**星][3m] [Ruby] [veeral-patel/incidents](https://github.com/veeral-patel/incidents) Collaborative, web-based case management for incident response
+- [**34**星][4y] [unicornsasfuel/sqlite_sqli_cheat_sheet](https://github.com/unicornsasfuel/sqlite_sqli_cheat_sheet) A cheat sheet for attacking SQLite via SQLi
+- [**34**星][5y] [JS] [tweekfawkes/white_lightning](https://github.com/tweekfawkes/white_lightning) Platform for Browser Exploitation
+- [**34**星][2m] [HCL] [traveloka/terraform-aws-waf-owasp-top-10-rules](https://github.com/traveloka/terraform-aws-waf-owasp-top-10-rules) A Terraform module to create AWF WAF Rules for OWASP Top 10 security risks protection.
+- [**34**星][7y] [Py] [tkisason/gcrack](https://github.com/tkisason/gcrack) password cracking with the help of google's search
+- [**34**星][3y] [Py] [thomaspatzke/burp-sessionauthtool](https://github.com/thomaspatzke/burp-sessionauthtool) Burp plugin which supports in finding privilege escalation vulnerabilities
+- [**34**星][1y] [C++] [tarlogicsecurity/eoploaddriver](https://github.com/tarlogicsecurity/eoploaddriver) Proof of concept for abusing SeLoadDriverPrivilege (Privilege Escalation in Windows)
+- [**34**星][2y] [C++] [swwwolf/obderef](https://github.com/swwwolf/obderef) Decrement Windows Kernel for fun and profit
+- [**34**星][2y] [Shell] [swisskyrepo/chocolatine](https://github.com/swisskyrepo/chocolatine) When you forget to lock your computer .. you will have to pay some "French Croissants"
+- [**34**星][6m] [PS] [swisscom/powergrr](https://github.com/swisscom/powergrr) PowerGRR is an API client library in PowerShell working on Windows, Linux and macOS for GRR automation and scripting.
+- [**34**星][6m] [sourcefrenchy/certexfil.client](https://github.com/sourcefrenchy/certexfil.client) MOVED TO
+- [**34**星][2y] [JS] [sola-da/conflictjs](https://github.com/sola-da/conflictjs) Finding and Understanding Conflicts Between JavaScript Libraries
+- [**34**星][3y] [JS] [snyk/serverless-snyk](https://github.com/snyk/serverless-snyk) Serverless plugin for securing your dependencies with Snyk
+- [**34**星][26d] [smithersec/bug-bounty-resources](https://github.com/smithersec/bug-bounty-resources) Resources I consider useful for security research of web applications
+- [**34**星][2y] [C] [smh17/bitcoin-hacking-tools](https://github.com/smh17/bitcoin-hacking-tools) The source code of main tools used in Bitcoin "non-malware-based" attacks.
+- [**34**星][2y] [Java] [shengqi158/s2-055-poc](https://github.com/shengqi158/s2-055-poc) S2-055的环境,基于rest-show-case改造
+- [**34**星][5y] [Py] [shendo/netsink](https://github.com/shendo/netsink) Network sinkhole for isolated malware analysis
+- [**34**星][3m] [C#] [sf197/telegra_csharp_c2](https://github.com/sf197/telegra_csharp_c2) Command and Control for C# Writing
+- [**34**星][4y] [C++] [secmob/cve-2016-0846](https://github.com/secmob/cve-2016-0846) arbitrary memory read/write by IMemroy OOB
+- [**34**星][2y] [secgroundzero/cs-aggressor-scripts](https://github.com/secgroundzero/cs-aggressor-scripts) Aggressor Scripts for Cobalt Strike
+- [**34**星][6m] [C++] [seancline/pyext](https://github.com/seancline/pyext) WinDbg Extensions for Python
+- [**34**星][1y] [Py] [sasdf/firstblood](https://github.com/sasdf/firstblood) Write exploit faster with up-to-date python 3
+- [**34**星][5y] [Py] [sangaline/svganimator](https://github.com/sangaline/svganimator) The application svganinmator attempts to build a single animated svg out of a sequence of distinct static svg files.
+- [**34**星][2m] [Shell] [sandrokeil/yubikey-full-disk-encryption-secure-boot-uefi](https://github.com/sandrokeil/yubikey-full-disk-encryption-secure-boot-uefi) Tutorial to create full disk encryption with YubiKey, encrypted boot partition and secure boot with UEFI
+- [**34**星][1y] [Py] [rvn0xsy/fastwhatwebsearch](https://github.com/rvn0xsy/fastwhatwebsearch) FastWhatWebSearch是一个能够支持搜索whatweb工具结果的一个微型平台。
+- [**34**星][1y] [C++] [rokups/reflectiveldr](https://github.com/rokups/reflectiveldr) Position-idependent Windows DLL loader based on ReflectiveDLL project.
+- [**34**星][4m] [C] [reversingid/crackmes-repository](https://github.com/reversingid/crackmes-repository) Initiative to collect and preserve crackmes for learning and practice in reverse engineering
+- [**34**星][7y] [reverselab/kernel-pwn-challenge](https://github.com/reverselab/kernel-pwn-challenge) Source code for building an exploitable linux kernel challenge iso.
+- [**34**星][4y] [C] [reinhardvz/wsk](https://github.com/reinhardvz/wsk) Automatically exported from code.google.com/p/wskudp
+- [**34**星][6m] [quarkslab/conf-presentations](https://github.com/quarkslab/conf-presentations)
+- [**34**星][3y] [PHP] [qilinbaoleiji/baoleiji](https://github.com/qilinbaoleiji/baoleiji) 麒麟堡垒机由资深软件开发人员发起,开发开始于2009年9月,开发主要成员共计有5个人,开发地点位于北京。系统经过现场严格的压力、性能、功能测试,使用稳定,功能齐全,系统透明登录功能可以让运维人员完全感觉不到堡垒机存在,系统模块齐全。 主要包含:堡垒机运维模块(支持RDP/SSH/SFTP/FTP/TELNET)、动态口令模块、网管监控模块、日志分析模块、3A模块等,堡垒机整体完全可以满足中型企业的整体运维及安全需要。
+- [**34**星][1y] [Py] [pure-l0g1c/spectre](https://github.com/pure-l0g1c/spectre) A simple phishing tool that can phish almost any website
+- [**34**星][1y] [PS] [ptylenda/kubernetes-for-windows](https://github.com/ptylenda/kubernetes-for-windows) Ansible playbooks and Packer templates for creating hybrid Windows/Linux Kubernetes 1.10+ cluster with experimental Flannel pod network (host-gw backend)
+- [**34**星][7y] [Ruby] [postmodern/rprogram](https://github.com/postmodern/rprogram) A library for creating wrappers around command-line programs.
+- [**34**星][3y] [Py] [politoinc/yara-scanner](https://github.com/politoinc/yara-scanner) Yara intergrated into BurpSuite
+- [**34**星][3y] [C] [plutooo/wiiu](https://github.com/plutooo/wiiu) Reversers notes on the Wii U, collected January-October 2015
+- [**34**星][2m] [Py] [peterhinch/micropython-fourier](https://github.com/peterhinch/micropython-fourier) Fast Fourier transform in MicroPython's inline ARM assembler.
+- [**34**星][3m] [C] [peterbjornx/meloader](https://github.com/peterbjornx/meloader) Linux i386 tool to load and execute ME modules.
+- [**34**星][2y] [Py] [penafieljlm/burp-tracer](https://github.com/penafieljlm/burp-tracer) burp-tracer:BurpSuite 扩展。获取当前的站点地图,提取每个请求参数,并搜索存在请求参数值的回复(responseswhere request parameter value is present)
+- [**34**星][2y] [Py] [peewpw/domainfrontdiscover](https://github.com/peewpw/domainfrontdiscover) Scripts and results for finding domain frontable CloudFront domains
+- [**34**星][2m] [C] [pearinc/fogconnect](https://github.com/pearinc/fogconnect) 提供企业级网络设备之间数据的快速,安全,可靠的P2P传输协议
+- [**34**星][4y] [C] [panyu6325/cve-2015-1805](https://github.com/panyu6325/cve-2015-1805)
+- [**34**星][3m] [C#] [ossindex/audit.net](https://github.com/ossindex/audit.net) Identify known vulnerabilities in .net nuget dependencies
+- [**34**星][5y] [osiris123/cdriver_loader](https://github.com/osiris123/cdriver_loader) Kernel mode driver loader, injecting into the windows kernel, Rootkit. Driver injections.
+- [**34**星][1y] [Py] [oros42/dns_sniffer](https://github.com/oros42/dns_sniffer) A python DNS sniffer
+- [**34**星][14d] [C++] [olegzhr/altprobe](https://github.com/olegzhr/altprobe) Alertflex IDS collector (Altprobe)
+- [**34**星][4m] [C#] [nyan-x-cat/disable-windows-defender](https://github.com/nyan-x-cat/disable-windows-defender) Changing values to bypass windows defender C#
+- [**34**星][7y] [JS] [nv/setinterval-sniffer](https://github.com/nv/setinterval-sniffer) Keep tabs on your uncleared intervals. Hunt down lags and memory leaks.
+- [**34**星][11m] [CSS] [nowsecure/r2frida-book](https://github.com/nowsecure/r2frida-book) The radare2 + frida book for Mobile Application assessment
+- [**34**星][11m] [C++] [niemand-sec/directx11hook](https://github.com/niemand-sec/directx11hook)
+- [**34**星][1y] [C++] [nickcano/reloadlibrary](https://github.com/nickcano/reloadlibrary) A quick-and-dirty anti-hook library proof of concept.
+- [**34**星][1y] [Jupyter Notebook] [nfrumkin/forecast-prometheus](https://github.com/nfrumkin/forecast-prometheus) A collection of analysis, and machine learning techniques for time series forecasting w/ Prometheus metrics
+- [**34**星][2y] [JS] [newfuture/pac](https://github.com/newfuture/pac) Proxy Auto Config generator,自动代理配置生成PAC,可配合ss小飞机使用
+- [**34**星][2y] [C] [mtjailed/purplesmoke](https://github.com/mtjailed/purplesmoke) A work-in-progress repository for breaking the security of iOS 11.2 up to 11.2.6
+- [**34**星][3y] [CSS] [monosource/radare2-explorations](https://github.com/monosource/radare2-explorations) A book on learning radare2.
+- [**34**星][21d] [Dockerfile] [misp/docker-misp](https://github.com/misp/docker-misp) Automated Docker MISP container - Malware Information Sharing Platform and Threat Sharing
+- [**34**星][3y] [Py] [mipu94/broids_unicorn](https://github.com/mipu94/broids_unicorn) simple plugin to detect shellcode on Bro IDS with Unicorn
+- [**34**星][1y] [Java] [minervalabsresearch/coffeeshot](https://github.com/minervalabsresearch/coffeeshot) CoffeeShot: Avoid Detection with Memory Injection
+- [**34**星][2y] [Py] [mhelwig/privdns](https://github.com/mhelwig/privdns) Check dns servers for reverse resolving private ips
+- [**34**星][8m] [C] [mboehme/pythia](https://github.com/mboehme/pythia) Pythia (extends AFL with Predictions)
+- [**34**星][2y] [Go] [mattiasgeniar/http-flooder](https://github.com/mattiasgeniar/http-flooder) An experiment using goroutines and channels to create a simple HTTP flooder. Mixes GET, POST, PUT, PATCH, ... to one baseline URL.
+- [**34**星][1y] [C] [mainframed/logica](https://github.com/mainframed/logica) Files compiled from the Logica breach investigation materials
+- [**34**星][4y] [Py] [madsc13ntist/idapython](https://github.com/madsc13ntist/idapython) IDAPython脚本收集(无文档)
+- [**34**星][4y] [Ruby] [lookingglass/opentpx](https://github.com/lookingglass/opentpx) Open Threat Partner eXchange
+- [**34**星][2y] [Ruby] [lolwaleet/reverseip](https://github.com/lolwaleet/reverseip) Ruby based reverse IP-lookup tool.
+- [**34**星][1y] [Py] [leonardonve/edm](https://github.com/leonardonve/edm) Encima De la Mosca HTTP proxy POC for infecting files on-the-fly and SSLstrip2
+- [**34**星][1y] [Go] [leoloobeek/keyserver](https://github.com/leoloobeek/keyserver) Easily serve HTTP and DNS keys for proper payload protection
+- [**34**星][2y] [Py] [ldionmarcil/sudo-backdoor](https://github.com/ldionmarcil/sudo-backdoor) Wraps sudo; transparently steals user's credentials and exfiltrate over DNS. For those annoying times when you get a shell/file write on a sudoers account and need to leverage their credentials.
+- [**34**星][8m] [Py] [lazenca/exploit-tech](https://github.com/lazenca/exploit-tech) Example files to experience basic exploit techniques.
+- [**34**星][1y] [kudelskisecurity/cryptochallenge18](https://github.com/kudelskisecurity/cryptochallenge18) Kudelski Security's 2018 pre-Black Hat crypto challenge
+- [**34**星][4m] [Rust] [kpcyrd/boxxy-rs](https://github.com/kpcyrd/boxxy-rs) Linkable sandbox explorer
+- [**34**星][1y] [Py] [kasperskylab/actionscript3](https://github.com/kasperskylab/actionscript3) SWF Loader、ActionScript3 Processor和 IDA 调试辅助插件
+- [**34**星][1y] [Shell] [jay-johnson/owasp-jenkins](https://github.com/jay-johnson/owasp-jenkins) Want to test your applications using the latest OWASP security toolchains and the NIST National Vulnerability Database using Jenkins, Ansible and docker?
+- [**34**星][5m] [Py] [jasonhinds13/hackable](https://github.com/jasonhinds13/hackable) A python flask app that is purposefully vulnerable to SQL injection and XSS attacks. To be used for demonstrating attacks
+- [**34**星][3y] [C] [jantonakos/threathuntingexcursions](https://github.com/jantonakos/threathuntingexcursions) Code, commands, and chatter about Threat Hunting.
+- [**34**星][1y] [C++] [ipbc-dev/bittube-miner](https://github.com/ipbc-dev/bittube-miner) BitTube Miner
+- [**34**星][4y] [Py] [interference-security/multiport](https://github.com/interference-security/multiport)
+- [**34**星][8m] [C++] [indeedminers/xmr-aeon-stak](https://github.com/indeedminers/xmr-aeon-stak) Unified All-in-one Monero, Sumokoin, Aeon and other Cryptonote miner
+- [**34**星][4y] [Java] [ilmila/springcss-cve-2014-3625](https://github.com/ilmila/springcss-cve-2014-3625) spring mvc cve-2014-3625
+- [**34**星][5m] [Java] [idl3r/ghidravmlinuxloader](https://github.com/idl3r/ghidravmlinuxloader)
+- [**34**星][2y] [JS] [honeypotio/techmap](https://github.com/honeypotio/techmap) Honeypot's Tech Map
+- [**34**星][1y] [Shell] [hestat/blazescan](https://github.com/hestat/blazescan) Blazescan is a linux webserver malware scanning and incident response tool, with built in support for cPanel servers, but will run on any linux based server.
+- [**34**星][2y] [hardenedlinux/armv7-nexus7-grsec](https://github.com/hardenedlinux/armv7-nexus7-grsec) Hardened PoC: PaX for Android
+- [**34**星][7y] [Py] [hackedteam/test-av](https://github.com/hackedteam/test-av) Automated antivirus test environment
+- [**34**星][5y] [gwerz/reverse-engineearing](https://github.com/gwerz/reverse-engineearing) 软件逆向
+- [**34**星][6y] [JS] [gtanczyk/dupocracy](https://github.com/gtanczyk/dupocracy) Defcon clone
+- [**34**星][2y] [Py] [google/amt-forensics](https://github.com/google/amt-forensics) Retrieve Intel AMT's Audit Log from a Linux machine without knowing the admin user's password.
+- [**34**星][4y] [Py] [gioyik/getexploit](https://github.com/gioyik/getexploit)
+- [**34**星][2y] [Py] [g2p/vido](https://github.com/g2p/vido) wrap commands in throwaway virtual machines — easy kernel debugging and regression testing
+- [**34**星][3y] [friedappleteam/blackhat-asia-2017](https://github.com/friedappleteam/blackhat-asia-2017) BlackHat Asia 2017 talk
+- [**34**星][11m] [Shell] [flowztul/keyexec](https://github.com/flowztul/keyexec) keyexec:Shell脚本,在使用 kexec 命令重启时,自动解锁 LUKS 设备
+- [**34**星][7m] [C++] [ez8-co/unlocker](https://github.com/ez8-co/unlocker)
+- [**34**星][2y] [Py] [eyyub/tensorflow-cyclegan](https://github.com/eyyub/tensorflow-cyclegan) Lightweight CycleGAN tensorflow implementation
+- [**34**星][2y] [Py] [ernw/dizzy-legacy](https://github.com/ernw/dizzy-legacy) Network and USB protocol fuzzing toolkit.
+- [**34**星][1y] [Py] [ernw/dizzy](https://github.com/ernw/dizzy) Network and USB protocol fuzzing toolkit.
+- [**34**星][19d] [C#] [ericzimmerman/appcompatcacheparser](https://github.com/ericzimmerman/appcompatcacheparser) AppCompatCache (shimcache) parser. Supports Windows 7 (x86 and x64), Windows 8.x, and Windows 10
+- [**34**星][3y] [Py] [emdel/ksfinder](https://github.com/emdel/ksfinder) ksfinder - Retrieve exported kernel symbols from physical memory dumps
+- [**34**星][2y] [Py] [embedi/dir8xx_poc](https://github.com/embedi/dir8xx_poc) Proof-of-Concept exploits for D-Link DIR8xx routers
+- [**34**星][6m] [Py] [efficios/barectf](https://github.com/efficios/barectf) Generator of ANSI C tracers which output CTF
+- [**34**星][4y] [Shell] [easonoutlook/rasticrac](https://github.com/easonoutlook/rasticrac) Rasticrac v3.2.5 is for Crack IPA file, like Clutch, this is a copy from appaddict.org, just for study. Now support PlugIn and Watch App.
+- [**34**星][10m] [Go] [dwin/gosecretboxpassword](https://github.com/dwin/gosecretboxpassword) A probably paranoid Golang utility library for securely hashing and encrypting passwords based on the Dropbox method. This implementation uses Blake2b, Scrypt and XSalsa20-Poly1305 (via NaCl SecretBox) to create secure password hashes that are also encrypted using a master passphrase.
+- [**34**星][2m] [Py] [duo-labs/cloudtrail-partitioner](https://github.com/duo-labs/cloudtrail-partitioner)
+- [**34**星][2y] [Visual Basic .NET] [doctorlai/vbscript_obfuscator](https://github.com/doctorlai/vbscript_obfuscator) The VBScript Obfuscator written in VBScript
+- [**34**星][3y] [Ruby] [dmchell/metasploit-framework](https://github.com/dmchell/metasploit-framework) Metasploit Framework
+- [**34**星][2m] [Py] [dmaasland/mcfridafee](https://github.com/dmaasland/mcfridafee)
+- [**34**星][5y] [Py] [dionach/headersanalyzer](https://github.com/dionach/headersanalyzer) Burp extension that checks for interesting and security headers
+- [**34**星][4y] [Java] [devadvance/rootinspector](https://github.com/devadvance/rootinspector) Advanced detection of rooting
+- [**34**星][3y] [Py] [darx0r/reef](https://github.com/darx0r/reef) 显示"由指定函数发起的"交叉应用。可以理解为函数内部引用的其他函数
+- [**34**星][2y] [CMake] [daniestevez/gr-outernet](https://github.com/daniestevez/gr-outernet) GNUradio OOT module for Outernet
+- [**34**星][2y] [Py] [d3vilbug/brutal_ssh](https://github.com/d3vilbug/brutal_ssh) SSH Login brute force, scan for vulnerable version and 0 day exploit (under development)
+- [**34**星][3y] [CSS] [cysca/cysca2015](https://github.com/cysca/cysca2015) Cyber Security Challenge Australia 2015 Files
+- [**34**星][1y] [JS] [cymmetria/ciscoasa_honeypot](https://github.com/cymmetria/ciscoasa_honeypot) A low interaction honeypot for the Cisco ASA component capable of detecting CVE-2018-0101, a DoS and remote code execution vulnerability.
+- [**34**星][4y] [Py] [curehsu/ez-wave](https://github.com/curehsu/ez-wave) Tools for Evaluating and Exploiting Z-Wave Networks using Software-Defined Radios.
+- [**34**星][7m] [Py] [claudiugeorgiu/riskindroid](https://github.com/claudiugeorgiu/riskindroid) 基于机器学习技术,对Android App进行定量风险分析
+- [**34**星][7y] [C] [chokepoint/jynxkit](https://github.com/chokepoint/jynxkit) JynxKit is an LD_PRELOAD userland rootkit for Linux systems with reverse connection SSL backdoor
+- [**34**星][2y] [C++] [chiehmin/sheepwall](https://github.com/chiehmin/sheepwall) Sniff plaintext account/password/cookie on router
+- [**34**星][3y] [Py] [cheery/spirthon](https://github.com/cheery/spirthon) Python bytecode to SPIR-V -translation.
+- [**34**星][4y] [Py] [cclgroupltd/ccl-bplist](https://github.com/cclgroupltd/ccl-bplist) Python Module for parsing Binary Property List and NSKeyedArchiver files
+- [**34**星][2y] [C#] [breenmachine/hpwn](https://github.com/breenmachine/hpwn) HP printer security research code
+- [**34**星][5y] [brad-anton/freeradius-wpe](https://github.com/brad-anton/freeradius-wpe)
+- [**34**星][1y] [C] [bartavelle/rulesfinder](https://github.com/bartavelle/rulesfinder)
+- [**34**星][5y] [C++] [avplayer/avcamera](https://github.com/avplayer/avcamera) 一款家用安全防盗监控软件,无需额外购买昂贵的CCD监控摄像头,只需普通电脑视频聊天用的CMOS摄像头即可。
+- [**34**星][3m] [Java] [availlang/avail](https://github.com/availlang/avail) The Avail programming language. Includes the virtual machine, standard library, and standard examples.
+- [**34**星][3y] [Py] [attackercan/burp-xss-sql-plugin](https://github.com/attackercan/burp-xss-sql-plugin)
+- [**34**星][1y] [Dockerfile] [asuri-team/ctf-xinetd](https://github.com/asuri-team/ctf-xinetd) A docker image to hold pwn challenges in ctf war
+- [**34**星][3m] [Py] [arbazkiraak/burpblh](https://github.com/arbazkiraak/burpblh) BurpBLH: 使用IScannerCheck发现被劫持的损坏链接. Burp插件
+- [**34**星][5m] [Shell] [ank1036official/cloudcheck](https://github.com/ank1036official/cloudcheck) Checks using a test string if a Cloudflare DNS bypass is possible using CloudFail.
+- [**34**星][2y] [Py] [anbai-inc/secrss](https://github.com/anbai-inc/secrss) RSS安全订阅 每日安全信息推送
+- [**34**星][7m] [Py] [am0nt31r0/osint-search](https://github.com/am0nt31r0/osint-search) Useful for digital forensics investigations or initial black-box pentest footprinting.
+- [**34**星][2y] [C] [alon7/bbt-multiminer](https://github.com/alon7/bbt-multiminer) Start different miners from the same script. Easy and simple to get started with mining. Originally by Bits Be Trippin'
+- [**34**星][3d] [Py] [aliasrobotics/rvd](https://github.com/aliasrobotics/rvd) Robot Vulnerability Database. An archive of robot vulnerabilities and bugs.
+- [**34**星][2y] [Py] [alexbers/exploit_farm](https://github.com/alexbers/exploit_farm) The utility for CTF hacker competition for team hacking and flag submitting
+- [**34**星][11m] [Py] [alessiovierti/blindpie](https://github.com/alessiovierti/blindpie) Automatically exploit time-based blind SQL injection vulnerabilities.
+- [**34**星][24d] [HTML] [adulau/misp-osint-collection](https://github.com/adulau/misp-osint-collection) Collection of best practices to add OSINT into MISP and/or MISP communities
+- [**34**星][5y] [C++] [adamkramer/handle_monitor](https://github.com/adamkramer/handle_monitor) Identifying and Disrupting Crypto-Ransomware (and Destructive Malware) using handle heurustics
+- [**34**星][3y] [PS] [3gstudent/ninjacopy](https://github.com/3gstudent/ninjacopy) Powershell to copy ntds.dit
+- [**34**星][3y] [PHP] [233sec/laravel-src](https://github.com/233sec/laravel-src) 基于 LARAVEL 打造的安全应急响应中心平台
+- [**33**星][1m] [Shell] [garywill/linux-router](https://github.com/garywill/linux-router) Set Linux as router in one command. Support Internet sharing, redsocks, Wifi hotspot, IPv6. Can also be used for routing VM/containers
+- [**33**星][2d] [Go] [mzz2017/v2raya](https://github.com/mzz2017/v2raya) V2RayA是一个支持全局透明代理的V2Ray Linux GUI客户端。
+- [**33**星][2y] [Go] [serverless-ss/slss](https://github.com/serverless-ss/slss)
+- [**33**星][18d] [Assembly] [86hh/poc-viruses](https://github.com/86hh/poc-viruses) POC viruses I have created to demo some ideas
+- [**33**星][2m] [C] [mak-/reverse-shell-access-kernel-module](https://github.com/mak-/reverse-shell-access-kernel-module) This is a kernel module invoked reverse shell proof of concept.
+- [**33**星][2y] [C] [uwnetworkslab/cordova-plugin-tun2socks](https://github.com/uwnetworkslab/cordova-plugin-tun2socks) Cordova plugin to enable a system-wide VPN for Android devices.
+- [**33**星][2m] [Py] [landgrey/toolsparty](https://github.com/landgrey/toolsparty) A collection of script tools for pentesting
+- [**33**星][9d] [C++] [taviso/sharapi](https://github.com/taviso/sharapi) Simpsons: Hit & Run JavaScript API
+- [**33**星][1y] [Shell] [jaredhaight/scripts](https://github.com/jaredhaight/scripts) A collection of scripts that I've written while pentesting.
+- [**33**星][1y] [Py] [skelsec/socksohttp](https://github.com/skelsec/socksohttp) Socks5 server over Websockets
+- [**33**星][2y] [HTML] [jipegit/twintelligence](https://github.com/jipegit/twintelligence) Twintelligence is a free Twitter OSINT tool
+- [**33**星][5y] [C] [gdbinit/bruteforcesysent](https://github.com/gdbinit/bruteforcesysent) Small util to discover OS X sysent via bruteforce
+- [**33**星][5d] [Py] [angr/angr-platforms](https://github.com/angr/angr-platforms) A collection of extensions to angr to handle new platforms
+- [**33**星][1y] [CSS] [osirislab/csaw-ctf-2018-quals](https://github.com/osirislab/csaw-ctf-2018-quals) Repo for CSAW CTF 2018 Quals challenges
+- [**33**星][4y] [C] [stealth/injectso](https://github.com/stealth/injectso)
+- [**33**星][8m] [Py] [hacker0x01/hacker101coursework](https://github.com/hacker0x01/hacker101coursework) Deprecated coursework from first iteration of Hacker101
+- [**33**星][1y] [seemoo-lab/wireshark-awdl](https://github.com/seemoo-lab/wireshark-awdl) Wireshark Dissector for Apple Wireless Direct Link (AWDL) and Apple's CoreCapture logging framework. Note: the AWDL dissector is part of Wireshark 3.0!
+- [**33**星][6y] [JS] [michenriksen/hackpad](https://github.com/michenriksen/hackpad) A web application hacker's toolbox. Base64 encoding/decoding, URL encoding/decoding, MD5/SHA1/SHA256/HMAC hashing, code deobfuscation, formatting, highlighting and much more.
+- [**33**星][20d] [C] [jovanbulck/0xbadc0de](https://github.com/jovanbulck/0xbadc0de) A Tale of Two Worlds: Assessing the Vulnerability of Enclave Shielding Runtimes
+- [**33**星][20d] [Py] [rhelmot/nclib](https://github.com/rhelmot/nclib) Netcat as a python library
+- [**33**星][1m] [C] [xerpi/vita-libbaremetal](https://github.com/xerpi/vita-libbaremetal) PSVita bare-metal payload library and sample
+- [**33**星][7y] [Py] [ml31415/wpscrack](https://github.com/ml31415/wpscrack) Continuation of wpscrack originally written by Stefan Viehböck
+- [**33**星][1m] [ObjC] [proteas/ios13-sandbox-profile-format](https://github.com/proteas/ios13-sandbox-profile-format) Binary Format of iOS 13 Sandbox Profile Collection
+- [**33**星][1m] [C] [xerpi/vita-libbaremetal](https://github.com/xerpi/vita-libbaremetal) PSVita bare-metal payload library and sample
+- [**33**星][2y] [Py] [newbee119/ip-location](https://github.com/NewBee119/IP-location) batch query IP location information,批量查询IP地理位置信息,解析pcap包中IP地址的地理信息
+- [**33**星][4y] [Py] [fortynorthsecurity/hasher](https://github.com/FortyNorthSecurity/Hasher) Hasher is designed to be a tool that allows you to quickly hash plaintext strings, or compare hashed values with a plaintext locally. Not meant to crack passwords, but designed for local checks.
+- [**33**星][1y] [C++] [teammolecule/toshiba-mep-idp](https://github.com/TeamMolecule/toshiba-mep-idp) IDA Pro module for Toshiba MeP processors
+- [**33**星][2y] [C] [openpreserve/scape-xcorrsound](https://github.com/openpreserve/scape-xcorrsound) Suite of tools for automated quality assurance of audio migration processes.
+- [**33**星][3m] [C++] [busyluo/netassistant](https://github.com/busyluo/NetAssistant) A UDP/TCP Assistant. 网络调试助手
+- [**33**星][16d] [JS] [googleapis/cloud-profiler-nodejs](https://github.com/googleapis/cloud-profiler-nodejs) Node.js library for Stackdriver Profiler. Continuous CPU and heap profiling to improve performance and reduce costs.
+- [**33**星][1y] [Py] [newbee119/check_ip](https://github.com/NewBee119/check_ip) check_IP is to judge whether a IP is malicious based on open threat intelligence,基于开源威胁情报AlienVault,排查IP地址及域名的恶意性
+- [**33**星][2y] [Perl] [zhou0/shadowsocks-perl](https://github.com/zhou0/shadowsocks-perl) An asynchronous, non-blocking shadowsocks client and server written in Perl.
+- [**33**星][1y] [xxwiredxx/nintendo-switch-joycon-hack](https://github.com/xxwiredxx/nintendo-switch-joycon-hack) Hardwiring a push button in a JoyCon to grant bootloader access
+- [**33**星][5y] [Py] [xurubin/aurasium](https://github.com/xurubin/aurasium) Practical security policy enforcement for Android apps via bytecode rewriting and in-place reference monitor
+- [**33**星][1m] [C] [xerpi/vita-libbaremetal](https://github.com/xerpi/vita-libbaremetal) PSVita bare-metal payload library and sample
+- [**33**星][3y] [HTML] [wolfram77web/app-peid](https://github.com/wolfram77web/app-peid) PEiD detects most common packers, cryptors and compilers for PE files.
+- [**33**星][2y] [C] [weaknetlabs/byteforce](https://github.com/weaknetlabs/byteforce) Offline Digital Forensics Tool for Binary Files
+- [**33**星][1y] [C++] [wanttobeno/x64_aob_search](https://github.com/wanttobeno/x64_aob_search) 快速内存搜索算法,商用级别
+- [**33**星][9m] [Swift] [vixentael/ios-datasec-basics](https://github.com/vixentael/ios-datasec-basics) iOS data security basics: key management, workshop for iOS Con UK
+- [**33**星][1y] [Ruby] [versioneye/versioneye-security](https://github.com/versioneye/versioneye-security) Security Crawler for VersionEye
+- [**33**星][3m] [C++] [vanhauser-thc/afl-dyninst](https://github.com/vanhauser-thc/afl-dyninst) American Fuzzy Lop + Dyninst == AFL Fuzzing blackbox binaries
+- [**33**星][27d] [CSS] [trailofbits/nyc-infosec](https://github.com/trailofbits/nyc-infosec) Mapping the NYC Infosec Community
+- [**33**星][2m] [Py] [tp7309/ttpassgen](https://github.com/tp7309/ttpassgen) flexiable and scriptable password dictionary generator which can support brute-force、combination、complex rule mode etc...
+- [**33**星][3y] [tom4t0/cobalt-strike-persistence](https://github.com/tom4t0/cobalt-strike-persistence) cobalt strike 自启动脚本
+- [**33**星][1y] [C#] [tlgyt/wibr](https://github.com/tlgyt/wibr) Wifi Bruteforce (WiBr) is a wifi cracking tool written in c#.
+- [**33**星][7m] [C++] [tlgyt/absent-loader](https://github.com/tlgyt/absent-loader) Example Loader to be used as a learning resource for people interested in how commercially available malware is made.
+- [**33**星][2y] [C++] [tienex/apfs](https://github.com/tienex/apfs) apfs: 挂载、转储和分析Apple APFS 卷和容器
+- [**33**星][1y] [C] [thisissecurity/malware](https://github.com/thisissecurity/malware)
+- [**33**星][3m] [Py] [teebytes/tnt-fuzzer](https://github.com/teebytes/tnt-fuzzer) OpenAPI 2.0 (Swagger) fuzzer written in python. Basically TnT for your API.
+- [**33**星][1m] [Shell] [taylanbildik/linux_dersleri](https://github.com/taylanbildik/linux_dersleri) Kali Linux Üzerinden İşlenen Linux Komut Satırı Dersleri Dokümantasyon Kaynağı
+- [**33**星][3y] [Shell] [superkojiman/snuff](https://github.com/superkojiman/snuff) Automate ARP poisoning, ssltrip, and ettercap.
+- [**33**星][4y] [C] [soufianetahiri/vault-8-hive](https://github.com/soufianetahiri/vault-8-hive) Hive solves a critical problem for the malware operators at the CIA.
+- [**33**星][2y] [C] [soufianetahiri/mirai-botnet](https://github.com/soufianetahiri/mirai-botnet) Mirai Botnet Client, Echo Loader and CNC source code (for the sake of knowledge)
+- [**33**星][10m] [Shell] [smileart/omg](https://github.com/smileart/omg) One More Gear set to follow DRY principle and stop doing things again and again (just a nice name for my dotfiles)
+- [**33**星][3y] [Py] [smeegesec/smeegescrape](https://github.com/smeegesec/smeegescrape) File/Web Text Scraper and Wordlist Generator
+- [**33**星][5y] [PHP] [smaash/kunai](https://github.com/smaash/kunai) pwning & info gathering via user browser
+- [**33**星][2y] [C++] [siberas/cve-2016-3309_reloaded](https://github.com/siberas/cve-2016-3309_reloaded) Exploits for the win32kfull!bFill vulnerability on Win10 x64 RS2 using Bitmap or Palette techniques
+- [**33**星][3y] [PHP] [shieldfy/waf-detector](https://github.com/shieldfy/waf-detector) small script to detect web application firewall on any website
+- [**33**星][9m] [C] [securesystemslab/periscope](https://github.com/securesystemslab/periscope)
+- [**33**星][1y] [Go] [saturnsvoid/windows-keylogger](https://github.com/saturnsvoid/windows-keylogger)
+- [**33**星][2m] [sapran/ukraine-infosec-conferences](https://github.com/sapran/ukraine-infosec-conferences) Анонси, програми та архів матеріалів українських конференцій з кібер-безпеки.
+- [**33**星][3y] [Py] [sam-b/windows_syscalls_dumper](https://github.com/sam-b/windows_syscalls_dumper) 转储Windows系统调用Call的 number/name,以json格式导出
+- [**33**星][2y] [Py] [s0cket7/torstat](https://github.com/s0cket7/torstat)
+- [**33**星][1y] [C#] [roshly/ayyhook-loader](https://github.com/roshly/ayyhook-loader) A Free Open Source Cheat Loader
+- [**33**星][2y] [Py] [rootlabs/torstat](https://github.com/rootlabs/torstat)
+- [**33**星][6m] [Shell] [robertohuertasm/apk-decompiler](https://github.com/robertohuertasm/apk-decompiler) Small Rust utility to decompile Android apks
+- [**33**星][3y] [Java] [riramar/pubkey-pin-android](https://github.com/riramar/pubkey-pin-android) Just another example for Android Public Key Pinning (based on OWASP example)
+- [**33**星][2y] [HTML] [rh0dev/shellcode2asmjs](https://github.com/rh0dev/shellcode2asmjs) Automatically generate ASM.JS JIT-Spray payloads
+- [**33**星][20d] [C] [rems-project/sail-arm](https://github.com/rems-project/sail-arm) Sail version of ARM ISA definition, currently for ARMv8.5-A
+- [**33**星][7m] [Ruby] [rapid7/metasploit_data_models](https://github.com/rapid7/metasploit_data_models) MSF database code, gemified
+- [**33**星][7m] [Py] [r35tart/redisdirscan](https://github.com/r35tart/redisdirscan) 此脚本用于测试 Rdies 未授权访问,在没权限写ssh私钥和定时任务又不知道web绝对路径的情况下,进行WEB目录探测
+- [**33**星][4y] [JS] [qazbnm456/ctf-course](https://github.com/qazbnm456/ctf-course)
+- [**33**星][6m] [Verilog] [q3k/ctf](https://github.com/q3k/ctf) Stuff from CTF contests
+- [**33**星][2y] [ptresearch/pentest-detections](https://github.com/ptresearch/pentest-detections) Repository for penetration testing tools
+- [**33**星][2m] [Py] [pr0cf5/ctf-writeups](https://github.com/pr0cf5/ctf-writeups)
+- [**33**星][6m] [Py] [portswigger/active-scan-plus-plus](https://github.com/portswigger/active-scan-plus-plus) ActiveScan++ Burp Suite Plugin
+- [**33**星][4y] [Py] [peacand/burp-pytemplate](https://github.com/peacand/burp-pytemplate) Burp extension to quickly and easily develop Python complex exploits based on Burp proxy requests.
+- [**33**星][2y] [Java] [panagiotisdrakatos/t0rlib4j](https://github.com/panagiotisdrakatos/t0rlib4j) T0rlib4j is a Java controller library for Tor
+- [**33**星][4y] [Py] [pan0pt1c0n/python-sockstress](https://github.com/pan0pt1c0n/python-sockstress) SockStress DoS (Denial of Service) exploit written in Python |
+- [**33**星][11m] [C] [p3n3troot0r/socketv2v](https://github.com/p3n3troot0r/socketv2v) Mainline Linux Kernel integration of IEEE 802.11p, IEEE 1609.{3,4}, and developmental userspace utility for using J2735 over WAVE
+- [**33**星][2y] [Py] [osssanitizer/osspolice](https://github.com/osssanitizer/osspolice) Identifying Open-Source License Violation and 1-day Security Risk at Large Scale
+- [**33**星][5y] [C++] [nyx0/alina](https://github.com/nyx0/alina) Alina Spark - Point of Sales Trojan
+- [**33**星][7y] [C] [nwhusted/auditdandroid](https://github.com/nwhusted/auditdandroid) A Fork of Auditd geared specifically for running on the Android platform. Includes system applications, AOSP patches, and kernel patches to maximize the audit experience.
+- [**33**星][5y] [Py] [novetta/delilah](https://github.com/novetta/delilah)
+- [**33**星][2y] [mzet-/ctf-writeups](https://github.com/mzet-/ctf-writeups) My writeups of various CTFs & security challenges
+- [**33**星][7y] [C] [mubix/fakenetbios](https://github.com/mubix/fakenetbios) See here:
+- [**33**星][2y] [ObjC] [mtjailed/privateapimanager](https://github.com/mtjailed/privateapimanager) A project providing usefull classes for reverse engineering iOS Private APIs on-device
+- [**33**星][2y] [C] [mtalbi/vm_escape](https://github.com/mtalbi/vm_escape) vm escape exploit
+- [**33**星][7d] [Shell] [mozillasecurity/orion](https://github.com/mozillasecurity/orion) CI/CD pipeline for building and publishing multiple
+- [**33**星][2m] [Py] [monolithworks/trueseeing](https://github.com/monolithworks/trueseeing) Non-decompiling Android vulnerability scanner (DC25 demo lab, CB17)
+- [**33**星][5m] [Go] [moldabekov/whatsipp](https://github.com/moldabekov/whatsipp)
+- [**33**星][4y] [Py] [moheshmohan/pyssltest](https://github.com/moheshmohan/pyssltest) A python multithreaded script to make use of Qualys ssllabs api to test SSL flaws
+- [**33**星][4y] [C] [mmyydd/relative-pattern](https://github.com/mmyydd/relative-pattern) Recover control flow graph from obfuscated codes
+- [**33**星][2m] [C] [milter-manager/milter-manager](https://github.com/milter-manager/milter-manager) milter manager is a free software to protect you from spam mails and virus mails effectively with milter.
+- [**33**星][2y] [C#] [mili-tan/mv2rayconfig](https://github.com/mili-tan/mv2rayconfig)
+- [**33**星][4m] [C#] [mgeeky/stracciatella](https://github.com/mgeeky/stracciatella) OpSec-safe Powershell runspace from within C# (aka SharpPick) with AMSI and Script Block Logging disabled at startup
+- [**33**星][15d] [Py] [mfthomps/resim](https://github.com/mfthomps/resim) Reverse engineering software using a full system simulator
+- [**33**星][2y] [C++] [menooker/fishhook](https://github.com/menooker/fishhook) An inline hook platform for Windows x86/x64
+- [**33**星][3m] [JS] [medicean/superterm](https://github.com/medicean/superterm) 利用 webshell 创建交互式终端(Create an interactive terminal with webshell.)
+- [**33**星][9m] [Py] [mattbierner/urban-dictionary-word-list](https://github.com/mattbierner/urban-dictionary-word-list) Script and sample dataset of all urban dictionary entry names (around 1.4 million total)
+- [**33**星][4y] [Py] [mansosec/microsoft-malware-challenge](https://github.com/mansosec/microsoft-malware-challenge)
+- [**33**星][5m] [Jupyter Notebook] [malware-revealer/malware-revealer](https://github.com/malware-revealer/malware-revealer) Spot malwares using Machine Learning techniques
+- [**33**星][7m] [C] [maldiohead/cve-2019-8540](https://github.com/maldiohead/cve-2019-8540) Kernel Stack info leak at exportObjectToClient function
+- [**33**星][5y] [Ruby] [madirish/kojoney2](https://github.com/madirish/kojoney2) Kojoney2 is a low interaction SSH honeypot written in Python. Based on Kojoney by Jose Antonio Coret
+- [**33**星][6d] [JS] [m1nl/pompa](https://github.com/m1nl/pompa) Fully-featured spear-phishing toolkit - web front-end
+- [**33**星][7y] [Py] [luca-m/lsb-toolkit](https://github.com/luca-m/lsb-toolkit) This is a small and simple toolkit that might be useful during steganalysis, it is currently composed by several general purpose command line tools.
+- [**33**星][2y] [C] [long123king/tokenext](https://github.com/long123king/tokenext) A windbg extension, extracting token related contents
+- [**33**星][3y] [C++] [kingsunc/minidump](https://github.com/kingsunc/minidump) windows软件崩溃解决方案
+- [**33**星][3y] [Ruby] [khr0x40sh/metasploit-modules](https://github.com/khr0x40sh/metasploit-modules)
+- [**33**星][16d] [Py] [kevcui/mitm-scripts](https://github.com/kevcui/mitm-scripts)
+- [**33**星][2y] [PHP] [karek314/ddos-deflate-nginx-cloudflare](https://github.com/karek314/ddos-deflate-nginx-cloudflare) This is ddos-deflate version made to mitigate Layer 7 dos/ddos attacks - made to work with nginx and optionally cloudflare
+- [**33**星][2m] [Py] [kaorz/exploits_challenges](https://github.com/kaorz/exploits_challenges) Challenges and vulnerabilities exploitation.
+- [**33**星][2y] [Py] [kandru/ts3proxy](https://github.com/kandru/ts3proxy) Teamspeak 3 Server Proxy
+- [**33**星][5y] [Py] [jonmetz/androfuzz](https://github.com/jonmetz/androfuzz) A fuzzing utility for Android that focuses on reporting and delivery portions of the fuzzing process
+- [**33**星][6y] [JS] [joeferner/node-gitgui](https://github.com/joeferner/node-gitgui) Git GUI written in node.js
+- [**33**星][2y] [Py] [jipegit/fect](https://github.com/jipegit/fect) Fast Evidence Collector Toolkit is an incident response toolkit to collect evidences on a suspicious windows computer
+- [**33**星][3y] [jianqiangzhao/mosec2016](https://github.com/jianqiangzhao/mosec2016)
+- [**33**星][2y] [Elixir] [jclem/ot_ex](https://github.com/jclem/ot_ex) OT algorithms for Elixir
+- [**33**星][3m] [Py] [jamesacampbell/python-examples](https://github.com/jamesacampbell/python-examples) Examples for some key libraries in Python that I use all the time. A way for me to remember and hopefully get others started.
+- [**33**星][12m] [ObjC] [jakeajames/reverse-engineering](https://github.com/jakeajames/reverse-engineering) nothing important
+- [**33**星][2m] [JS] [iteratec/juicy-ctf](https://github.com/iteratec/juicy-ctf) Run Capture the Flags and Security Trainings with OWASP Juice Shop
+- [**33**星][3y] [ObjC] [integrity-sa/introspy-ios](https://github.com/integrity-sa/introspy-ios) Security profiling for blackbox iOS
+- [**33**星][4m] [JS] [impakho/ciscn2019_final_web1](https://github.com/impakho/ciscn2019_final_web1) 国赛2019决赛Web1 - 滑稽云音乐
+- [**33**星][1y] [Dockerfile] [immunit/cve-2018-11759](https://github.com/immunit/cve-2018-11759) Proof of concept showing how to exploit the CVE-2018-11759
+- [**33**星][2y] [Py] [illusivenetworks-labs/webtrap](https://github.com/illusivenetworks-labs/webtrap) This project is designed to create deceptive webpages to deceive and redirect attackers away from real websites.
+- [**33**星][2y] [C] [realbearcat/cve-2017-16995](https://github.com/RealBearcat/CVE-2017-16995) Linux Kernel Version 4.14 - 4.4 (Ubuntu && Debian)
+- [**33**星][2y] [Java] [htbridge/pivaa](https://github.com/htbridge/pivaa) Created by High-Tech Bridge, the Purposefully Insecure and Vulnerable Android Application (PIVAA) replaces outdated DIVA for benchmark of mobile vulnerability scanners.
+- [**33**星][5y] [Py] [heikoheiko/pyethapp](https://github.com/heikoheiko/pyethapp)
+- [**33**星][2y] [Py] [guedou/r2scapy](https://github.com/guedou/r2scapy) a radare2 plugin that decodes packets with Scapy
+- [**33**星][3y] [PHP] [gregzem/aibolit](https://github.com/gregzem/aibolit) Free malware and virus scanner for websites and ISP
+- [**33**星][1y] [Java] [graxcode/zelixkiller](https://github.com/graxcode/zelixkiller) Deobfuscate ZKM up to version 11
+- [**33**星][2y] [Py] [ganapati/firmflaws](https://github.com/ganapati/firmflaws) Firmware analysis website + API
+- [**33**星][1y] [PS] [g4lb1t/invoke-noshell](https://github.com/g4lb1t/invoke-noshell) All the Power with no Shell
+- [**33**星][3y] [Py] [g4hsean/binauthor](https://github.com/g4hsean/binauthor) 识别未知二进制文件的作者
+- [**33**星][2y] [JS] [francodacosta/phmagick](https://github.com/francodacosta/phmagick) image manipulation with php and imagemagick
+- [**33**星][1y] [Py] [fnk0c/organon](https://github.com/fnk0c/organon) This program focuses on automating the download, installation and compilation of pentest tools from source
+- [**33**星][6m] [flyfishsec/rsgen](https://github.com/flyfishsec/rsgen) An Universal Reverse Shell Command Genrator.
+- [**33**星][3y] [Py] [fkie-cad/iva](https://github.com/fkie-cad/iva) IVA is a system to scan for known vulnerabilities in software products installed inside an organization. IVA uses CPE identifiers to search for CVEs related to a software product.
+- [**33**星][8y] [Shell] [firebitsbr/hardeningone](https://github.com/firebitsbr/hardeningone) Scripts-Scanner de hardening de SO (Linux, OpenBSD, FreeBSD, apache, PHP e outros)
+- [**33**星][9y] [Py] [evilsocket/altair](https://github.com/evilsocket/altair) A Modular Web Vulnerability Scanner
+- [**33**星][12m] [Py] [eset/volatility-browserhooks](https://github.com/eset/volatility-browserhooks) Volatility Framework plugin to detect various types of hooks as performed by banking Trojans
+- [**33**星][13d] [F#] [enkomio/misc](https://github.com/enkomio/misc) A repository with simple projects created for testing/learning purpose
+- [**33**星][3y] [Go] [egebalci/the-eye](https://github.com/egebalci/the-eye) Simple security surveillance script for linux distributions.
+- [**33**星][1m] [C++] [dspinellis/cqmetrics](https://github.com/dspinellis/cqmetrics) C Quality Metrics
+- [**33**星][1y] [Java] [dnet/burp-oauth](https://github.com/dnet/burp-oauth) OAuth plugin for Burp Suite Extender
+- [**33**星][3y] [Shell] [dlshad/openvpn-shapeshifter](https://github.com/dlshad/openvpn-shapeshifter) This script will automatically guide you to install and configure your OpenVPN server with Shapeshifter Dispatcher (obfuscation) which will allow you to bypass the DPI blockage on OpenVPN. This setup will offer the users the freedom to choose between regular OpenVPN connection or obfuscated one, they actually can use both! OpenVPN is the VPN pro…
+- [**33**星][2y] [Py] [disruptops/resource-counter](https://github.com/disruptops/resource-counter) This command line tool counts the number of resources in different categories across Amazon regions.
+- [**33**星][3m] [dfw1n/dfw1n-osint](https://github.com/dfw1n/dfw1n-osint) Australian Open Source Intelligence Gathering Resources, Australias Largest Open Source Intelligence Repository for Cyber Professionals and Ethical Hackers
+- [**33**星][4y] [C] [dennisaa/patharmor](https://github.com/dennisaa/patharmor) PathArmor context-sensitive CFI implementation
+- [**33**星][2y] [C] [demonsec666/secist_applocker](https://github.com/demonsec666/secist_applocker)
+- [**33**星][2m] [Go] [dcso/spyre](https://github.com/dcso/spyre) simple YARA-based IOC scanner
+- [**33**星][4y] [Py] [davidwittman/wpxmlrpcbrute](https://github.com/davidwittman/wpxmlrpcbrute) Brute force WordPress sites vulnerabile to XML-RPC amplification.
+- [**33**星][1y] [C#] [damonmohammadbagher/nativepayload_arp](https://github.com/damonmohammadbagher/nativepayload_arp) C# code for Transferring Backdoor Payloads by ARP Traffic and Bypassing Anti-viruses (Slow)
+- [**33**星][4y] [cz-nic/dns-fuzzing](https://github.com/cz-nic/dns-fuzzing) Repository to store unique seeds for DNS server fuzzing
+- [**33**星][3y] [Py] [cys3c/backdoorman](https://github.com/cys3c/backdoorman) BackdoorMan is a toolkit that helps you find malicious, hidden and suspicious PHP scripts and shells in a chosen destination.
+- [**33**星][3y] [Py] [cr4sh/aptiocalypsis](https://github.com/cr4sh/aptiocalypsis) Arbitrary SMM code execution exploit for AMI Aptio based firmware
+- [**33**星][2y] [C++] [cnrig/cnrig](https://github.com/cnrig/cnrig) Static CryptoNight CPU miner for Linux + automatic updates
+- [**33**星][11d] [PHP] [cms-garden/cmsscanner](https://github.com/cms-garden/cmsscanner) Detects FOSS CMS in the local filesystem
+- [**33**星][2m] [C++] [chinatiny/gameanticheat](https://github.com/chinatiny/gameanticheat) 反外挂
+- [**33**星][3y] [cert-w/hadoop-attack-library](https://github.com/cert-w/hadoop-attack-library) A collection of pentest tools and resources targeting Hadoop environments
+- [**33**星][2y] [cazala/coin-hive-proxy](https://github.com/cazala/coin-hive-proxy) Deprecated. Use CoinHive Stratum instead.
+- [**33**星][25d] [C++] [bareflank/standalone_cxx](https://github.com/bareflank/standalone_cxx) run C++ from anywhere
+- [**33**星][3y] [Shell] [b3rito/trolo](https://github.com/b3rito/trolo) trolo - an easy to use script for generating Payloads that bypasses antivirus
+- [**33**星][11m] [avery3r/re-writeups](https://github.com/avery3r/re-writeups) Writeups for my reverse engineering shanenagins
+- [**33**星][6y] [Py] [averagesecurityguy/twanalyze](https://github.com/averagesecurityguy/twanalyze) Extract useful information from a Twitter account.
+- [**33**星][2y] [C#] [arunsatyarth/oneminer](https://github.com/arunsatyarth/oneminer) 1 Click miner for Ethereum, ZCash etc on windows. Supports mixed GPUs(Nvidia & AMD)
+- [**33**星][2y] [Py] [antriv/transfer_learning_text](https://github.com/antriv/transfer_learning_text)
+- [**33**星][3y] [C++] [anssi-fr/nogaxeh](https://github.com/anssi-fr/nogaxeh) Tools for analyzing hexagon code
+- [**33**星][6m] [C#] [amitwaisel/malproxy](https://github.com/amitwaisel/malproxy) Proxy system calls over an RPC channel
+- [**33**星][2m] [Py] [akiym/pedal](https://github.com/akiym/pedal) PEDAL - Python Exploit Development Assistance for GDB Lite
+- [**33**星][2d] [adilmajid/privacy-for-the-paranoid](https://github.com/adilmajid/privacy-for-the-paranoid) A master checklist for securing your online life.
+- [**33**星][4m] [C] [aa65535/chinadns](https://github.com/aa65535/chinadns) Protect yourself against DNS poisoning in China.
+- [**33**星][2y] [Batchfile] [3gstudent/winpcap_install](https://github.com/3gstudent/winpcap_install) Auto install WinPcap on Windows(command line)
+- [**33**星][4y] [C#] [3gstudent/smallp0wnedshell](https://github.com/3gstudent/smallp0wnedshell) Small modification version of p0wnedShell
+- [**33**星][2y] [16667/metasploitable-3-ctf](https://github.com/16667/metasploitable-3-ctf) Metasploitable3 CTF Write-up
+- [**33**星][2y] [Rust] [0xcpu/bonomen](https://github.com/0xcpu/bonomen) BONOMEN - Hunt for Malware Critical Process Impersonation
+- [**32**星][3y] [archimboldimao/surgeconfig](https://github.com/archimboldimao/surgeconfig) 这是我日常使用 Surge 配置 Shadowsocks 代理翻墙的文件。
+- [**32**星][2y] [Go] [pbnj/s3-fuzzer](https://github.com/pbnj/s3-fuzzer)
+- [**32**星][] [Py] [adrianherrera/afl-mutation-chain](https://github.com/adrianherrera/afl-mutation-chain) Recover mutation chain from an AFL seed
+- [**32**星][10m] [Go] [bigtan/cow](https://github.com/bigtan/cow) Rule based proxy utility client
+- [**32**星][2y] [dxa4481/cors](https://github.com/dxa4481/cors) JSON API's Are Automatically Protected Against CSRF, And Google Almost Took It Away.
+- [**32**星][2y] [C++] [paranoidninja/botnet-blogpost](https://github.com/paranoidninja/botnet-blogpost) This repo basically contains the code that was mentioned in the blogposts that was written by me at:
+- [**32**星][2y] [sagishahar-zz/challenges](https://github.com/sagishahar-zz/challenges) Hacking challenges
+- [**32**星][4y] [C] [a0rtega/bdldr](https://github.com/a0rtega/bdldr) bdldr is an unofficial engine loader for Bitdefender ® for Linux
+- [**32**星][8m] [Shell] [ytisf/randomgoodness](https://github.com/ytisf/randomgoodness) General tools and scripts i want to make public to the world.
+- [**32**星][10m] [PHP] [thekingofduck/bypassavaddusers](https://github.com/thekingofduck/bypassavaddusers) 绕过杀毒软件添加用户
+- [**32**星][2y] [Shell] [paranoidninja/threat-hunting](https://github.com/paranoidninja/threat-hunting) This repo is dedicated to all my tricks, tweaks and modules for testing and hunting threats. This repo contains multiple directories which are in their own, different modules required for threat hunting. This repo will be updated as and when new changes are made.
+- [**32**星][4y] [Py] [wi-fi-analyzer/3viltwinattacker](https://github.com/wi-fi-analyzer/3viltwinattacker)
+- [**32**星][12m] [Py] [ekultek/tadpole](https://github.com/ekultek/tadpole) Download files out of open AWS buckets
+- [**32**星][2d] [Shell] [ibm/cloud-pak](https://github.com/ibm/cloud-pak) IBM Cloud Paks are enterprise-grade containerized software by combining container images with enterprise capabilities for deployment in production use cases with integrations for management and lifecycle operations. Features such as pre-configured deployments based on product expertise, rolling upgrades, rollbacks, security/vulnerability testing…
+- [**32**星][3y] [Go] [localtunnel/go-localtunnel](https://github.com/localtunnel/go-localtunnel) golang client library for localtunnel.me
+- [**32**星][2m] [cloudsploit/security-remediation-guides](https://github.com/cloudsploit/security-remediation-guides) Security Remediation Guides
+- [**32**星][5d] [Go] [sadicann/andor](https://github.com/sadicann/andor) Blind SQL Injection Tool with Golang
+- [**32**星][24d] [Shell] [zerobyte-id/netass2](https://github.com/zerobyte-id/netass2) Network Assessment Assistance Framework (PenTest Toolkit).
+- [**32**星][10m] [hax4us/termux-x](https://github.com/hax4us/termux-x) it is unofficial repository maintained by me
+- [**32**星][2m] [C] [kangtastic/cve-2019-2215](https://github.com/kangtastic/cve-2019-2215) Temproot for Pixel 2 and Pixel 2 XL via CVE-2019-2215
+- [**32**星][2m] [Shell] [da667/ciderpress](https://github.com/da667/ciderpress) Wordpress automation and hardening
+- [**32**星][1m] [C] [gdbinit/efi_dxe_emulator](https://github.com/gdbinit/efi_dxe_emulator) EFI DXE Emulator and Interactive Debugger
+- [**32**星][2m] [HTML] [egebalci/xss-flare](https://github.com/egebalci/xss-flare) XSS hunter on cloudflare serverless workers.
+- [**32**星][6y] [sin5678/a-protect](https://github.com/sin5678/A-Protect) A-Protect Anti Rootkit Tool
+- [**32**星][3y] [Pascal] [mwsrc/xtremerat](https://github.com/mwsrc/XtremeRAT) XtremeRAT SRC Extract
+- [**32**星][2y] [Py] [sewellding/sitepathscan](https://github.com/SewellDinG/SitePathScan) 网站路径扫描脚本
+- [**32**星][8m] [JS] [cylance/nmap-cluster](https://github.com/cylance/NMAP-Cluster) Clustering NMAP XML results to help make sense of large scan results.
+- [**32**星][4y] [C++] [helpsystems/gdiobjdump](https://github.com/helpsystems/GDIObjDump)
+- [**32**星][5y] [Py] [coalfire-research/doozer](https://github.com/Coalfire-Research/Doozer) Password cracking utility
+- [**32**星][3m] [C++] [imugee/xdv](https://github.com/imugee/xdv) XDV is disassembler or debugger that works based on the extension plugin.
+- [**32**星][3m] [Shell] [blackgeneration/uncle-spufus](https://github.com/blackgeneration/uncle-spufus) A tool that automates MAC address and hostname spoofing
+- [**32**星][4y] [Ruby] [praetorian-code/ruby_hashcat](https://github.com/praetorian-code/ruby_hashcat) Command line wrapper, Library, and Rest API for oclHashcat.
+- [**32**星][1y] [Py] [dd4rk/ctfwebscan](https://github.com/dd4rk/ctfwebscan) CTF比赛中web源码泄露扫描
+- [**32**星][2y] [CMake] [zyantific/ida-cmake](https://github.com/zyantific/ida-cmake) 使用CMake编译C++编写的IDA脚本
+- [**32**星][2y] [ObjC] [zjjno/interface-inspector-hook](https://github.com/zjjno/interface-inspector-hook) Interface Inspector破解
+- [**32**星][3m] [Java] [zerokilo/n64loaderwv](https://github.com/zerokilo/n64loaderwv) Ghidra Loader Module for N64 ROMs
+- [**32**星][8m] [C] [y123456yz/reading-and-comprehense-twemproxy0.4.1](https://github.com/y123456yz/reading-and-comprehense-twemproxy0.4.1) redis、memcached缓存代理twemproxy源码详细分析注释,带详尽中文注释及函数调用关系。(源码学习交流QQ群:568892619)
+- [**32**星][4y] [PHP] [wstart/webshell](https://github.com/wstart/webshell) This is a webshell open source project
+- [**32**星][2y] [vulnex/tintorera](https://github.com/vulnex/tintorera) Source Code Intelligence
+- [**32**星][4m] [vulnerscom/detect-rules](https://github.com/vulnerscom/detect-rules) Vulners signature-base software version detection rules
+- [**32**星][5y] [Shell] [vt-magnum-research/antimalware](https://github.com/vt-magnum-research/antimalware) Dynamic malware analysis for the Android platform
+- [**32**星][5m] [C++] [vector35/generate_assembler](https://github.com/vector35/generate_assembler) generate assemblers from disassemblers, 2018 jailbreak security summit talk
+- [**32**星][5m] [vah13/oracle-bi-bugs](https://github.com/vah13/oracle-bi-bugs)
+- [**32**星][10m] [twelvesec/bearerauthtoken](https://github.com/twelvesec/bearerauthtoken) This burpsuite extender provides a solution on testing Enterprise applications that involve security Authorization tokens into every HTTP requests.Furthermore, this solution provides a better approach to solve the problem of Burp suite automated scanning failures when Authorization tokens exist.
+- [**32**星][4y] [Py] [trustedsec/crackmapexec](https://github.com/trustedsec/crackmapexec) A swiss army knife for pentesting Windows/Active Directory environments
+- [**32**星][1y] [JS] [truework/lambda-s3-antivirus](https://github.com/truework/lambda-s3-antivirus) Lambda Function to scan incoming S3 uploads by Truework
+- [**32**星][7m] [Perl] [tripflex/cpsetup](https://github.com/tripflex/cpsetup) Intuitive bash/shell script to setup and harden/configure cPanel CentOS/RHEL server with ConfigServer Firewall, MailManage, MailQueue, Malware Detect, ClamAV, mod_cloudflare, CloudFlare RailGun, and many more applications and security tweaks
+- [**32**星][3y] [Go] [tomsteele/burpstaticscan](https://github.com/tomsteele/burpstaticscan) Use burp's JS static code analysis on code from your local system.
+- [**32**星][3y] [C] [tlgyt/dirtycowandroid](https://github.com/tlgyt/dirtycowandroid) Repo For Working on Dirty Cow Based Android Root Method
+- [**32**星][2m] [thetorproject/gettorbrowser](https://github.com/thetorproject/gettorbrowser) This is a repository to provide links for downloading Tor Browser from Github.
+- [**32**星][1y] [Ruby] [thesubtlety/shocens](https://github.com/thesubtlety/shocens) Query Shodan and Censys data for fast parsing
+- [**32**星][3y] [Py] [tengzhangchao/information](https://github.com/tengzhangchao/information) windows Server Information gathering tool (主机信息收集工具)
+- [**32**星][3y] [tdifg/payloads](https://github.com/tdifg/payloads) for burp
+- [**32**星][3m] [Py] [tangxiaofeng7/srcinformation-gathering](https://github.com/tangxiaofeng7/srcinformation-gathering) 挖掘SRC的信息收集
+- [**32**星][3y] [Py] [syss-research/dns-mitm](https://github.com/syss-research/dns-mitm) A minimal DNS service that can provide spoofed replies
+- [**32**星][3y] [C++] [swwwolf/cbtest](https://github.com/swwwolf/cbtest) Windows kernel-mode callbacks tutorial driver
+- [**32**星][2y] [C] [srakai/adun](https://github.com/srakai/adun) A way to backdoor every process
+- [**32**星][2y] [Py] [spiperac/armroper](https://github.com/spiperac/armroper) ARM rop chain gadget searcher
+- [**32**星][2y] [C] [snorez/exploits](https://github.com/snorez/exploits) practice
+- [**32**星][2m] [Shell] [snawoot/linux-secureboot-kit](https://github.com/snawoot/linux-secureboot-kit) Tool for complete hardening of Linux boot chain with UEFI Secure Boot
+- [**32**星][2y] [Elixir] [smpallen99/coherence_demo](https://github.com/smpallen99/coherence_demo) A coherence demo project
+- [**32**星][2y] [Py] [sigploiter/m3uascan](https://github.com/sigploiter/m3uascan) A Scanner for M3UA protocol to detect Sigtran supporting nodes
+- [**32**星][6m] [Py] [shouc/knicky](https://github.com/shouc/knicky) A module-based static virus generator
+- [**32**星][7y] [C] [sergiocampama/launchpad](https://github.com/sergiocampama/launchpad) Launchpad mini projects. Includes mspgcc installation instructions for Ubuntu
+- [**32**星][4y] [Py] [sekoialab/pe-tools](https://github.com/sekoialab/pe-tools) Set of python scripts to analyse PE32/PE64 binaries and to extract VB 5/6 headers and Visual Basic p-code functions.
+- [**32**星][1y] [Shell] [securityriskadvisors/redteamsiem](https://github.com/securityriskadvisors/redteamsiem) Repository of resources for configuring a Red Team SIEM using Elastic
+- [**32**星][3m] [C++] [saml1er/gta-reversed](https://github.com/saml1er/gta-reversed) Reversed code of GTA:SA executable (gta_sa.exe) 1.0 US
+- [**32**星][1y] [JS] [s03d4-164/hiryu](https://github.com/s03d4-164/hiryu) IOC Management and Visualization Tool
+- [**32**星][3y] [Py] [rurik/pe_carver](https://github.com/rurik/pe_carver) Carves EXEs from given data files, using intelligent carving based upon PE headers
+- [**32**星][2y] [Py] [rurik/java_idx_parser](https://github.com/rurik/java_idx_parser) Parses Java Cache IDX files
+- [**32**星][2y] [Py] [rudsarkar/crlf-injector](https://github.com/rudsarkar/crlf-injector) A CRLF ( Carriage Return Line Feed ) Injection attack occurs when a user manages to submit a CRLF into an application. This is most commonly done by modifying an HTTP parameter or URL.
+- [**32**星][6y] [PS] [roo7break/powershell-scripts](https://github.com/roo7break/powershell-scripts) List of PowerShell scripts conjured up for my consumption (you are welcome to use)
+- [**32**星][3m] [JS] [ronomon/mime](https://github.com/ronomon/mime) Fast, robust, standards-compliant MIME decoder. Ships with extensive tests and fuzz tests.
+- [**32**星][1y] [robocyber/shodan-dorks](https://github.com/robocyber/shodan-dorks) Dorks for shodan.io. Some basic shodan dorks collected from publicly available data.
+- [**32**星][2m] [Java] [righettod/log-requests-to-sqlite](https://github.com/righettod/log-requests-to-sqlite) BURP extension to record every HTTP request send via BURP and create an audit trail log of an assessment.
+- [**32**星][2y] [Py] [redteam-cyberark/google-domain-fronting](https://github.com/redteam-cyberark/google-domain-fronting) Domain fronting using Google app engine
+- [**32**星][4y] [PHP] [realtimeprojects/quixplorer](https://github.com/realtimeprojects/quixplorer) simply upload and download files to your webserver with a web-interface
+- [**32**星][10m] [C] [rakion99/icememe](https://github.com/rakion99/icememe) Roblox Exploit Source Code Called IceMeme with some cmds, lua c and limited lua execution with simple ui in c#
+- [**32**星][4m] [C++] [rafaelgss/hyzmall](https://github.com/rafaelgss/hyzmall)
+- [**32**星][4y] [Py] [raccoons-team/ctf](https://github.com/raccoons-team/ctf) Writeups for CTF competitions.
+- [**32**星][11m] [Py] [qwj/python-esp](https://github.com/qwj/python-esp) IPSec IKE(v1,v2) PSK VPN implemented in pure Python. (For Research Purposes Only)
+- [**32**星][3d] [Ruby] [puppetlabs/puppetlabs-java_ks](https://github.com/puppetlabs/puppetlabs-java_ks) Uses a combination of keytool and openssl to manage entries in a Java keystore
+- [**32**星][4y] [Py] [psmiraglia/ctf](https://github.com/psmiraglia/ctf) My solutions of CTFs
+- [**32**星][1y] [Py] [phdphuc/mac-a-mal-cuckoo](https://github.com/phdphuc/mac-a-mal-cuckoo) 扩展Cuckoo沙箱功能, 添加分析macOS恶意软件功能
+- [**32**星][2y] [Go] [pbnj/s3-fuzzer](https://github.com/pbnj/s3-fuzzer) A concurrent, command-line AWS S3 Fuzzer.
+- [**32**星][1y] [C] [perceptionpoint/suprotect](https://github.com/perceptionpoint/suprotect) Linux内核模块, 修改任意进程的内存保护属性
+- [**32**星][2m] [Py] [pagalaxylab/ghidra_scripts](https://github.com/pagalaxylab/ghidra_scripts) Scripts for the Ghidra.
+- [**32**星][10m] [Swift] [pabloroca/obfuscateapi](https://github.com/pabloroca/obfuscateapi) Mac OSX, Command line Swift 4 Utility for obfuscate / defuscate strings (API endpoints) in AES128 format.
+- [**32**星][10m] [Py] [oshp/headers](https://github.com/oshp/headers) An application to catch, search and analyze HTTP secure headers.
+- [**32**星][5m] [oldbonhart/osint-resources](https://github.com/oldbonhart/osint-resources) Data collected from publicly available sources to be used in an intelligence context
+- [**32**星][2m] [Py] [oalieno/ctf](https://github.com/oalieno/ctf) CTF writeups
+- [**32**星][4m] [HTML] [o0xmuhe/realworldpwn](https://github.com/o0xmuhe/realworldpwn) vulns I found or I collect
+- [**32**星][7m] [Shell] [nyxgeek/nyxgeek-rules](https://github.com/nyxgeek/nyxgeek-rules) Custom rules for Hashcat and John the Ripper
+- [**32**星][1y] [C++] [ntraiseharderror/dreadnought](https://github.com/ntraiseharderror/dreadnought) PoC for detecting and dumping code injection (built and extended on UnRunPE)
+- [**32**星][2y] [JS] [notdls/hackbar](https://github.com/notdls/hackbar) HackBar Quantum is a sidebar that assists you with web application security testing, it's aim is to help make those tedious tasks a little bit easier. This add-on is a predecessor to the original HackBar that is not compatible with Firefox Quantum.
+- [**32**星][6y] [netspi/skl](https://github.com/netspi/skl) strace keylogger PoC
+- [**32**星][3y] [Go] [mwitkow/go-http-dialer](https://github.com/mwitkow/go-http-dialer) Go net.Dialer for HTTP(S) CONNECT Tunneling.
+- [**32**星][2y] [HTML] [mthbernardes/leakmanager](https://github.com/mthbernardes/leakmanager) A tool to help you manage your leaks
+- [**32**星][2y] [Shell] [mseclab/ahe17](https://github.com/mseclab/ahe17) Android Hacking Event 2017 Write-up
+- [**32**星][9d] [Go] [mondoolabs/mondoo](https://github.com/mondoolabs/mondoo) Mondoo Cloud-Native Security & Vulnerability Risk Management
+- [**32**星][27d] [Shell] [mirchr/security-research](https://github.com/mirchr/security-research) Security Research
+- [**32**星][1y] [Py] [mimoo/rsa_pkcs1v1_5_attacks](https://github.com/mimoo/rsa_pkcs1v1_5_attacks) Implementation of Bleichenbacher, Manger and Ben-Or attacks on RSA PKCS#1 v1.5
+- [**32**星][5m] [Py] [mikemeliz/torcrawl.py](https://github.com/mikemeliz/torcrawl.py) Crawl and extract (regular or onion) webpages through TOR network
+- [**32**星][1y] [mhaggis/sysmon-splunk-app](https://github.com/mhaggis/sysmon-splunk-app) Sysmon Splunk App
+- [**32**星][2y] [Py] [mgale/dhcpsnoop](https://github.com/mgale/dhcpsnoop) DHCP Snooping app - great for finding rogue DHCP servers
+- [**32**星][3y] [C] [mehdilauters/esp8266-wifiscanmap](https://github.com/mehdilauters/esp8266-wifiscanmap)
+- [**32**星][3y] [Py] [mdegrazia/osx-quicklook-parser](https://github.com/mdegrazia/osx-quicklook-parser) Parse the Mac Quickook index.sqlite database
+- [**32**星][8m] [Py] [maxkrivich/slowloris](https://github.com/maxkrivich/slowloris) Small and simple tool for testing Slow Loris vulnerability
+- [**32**星][5y] [Java] [malerisch/burp-csj](https://github.com/malerisch/burp-csj) BurpCSJ extension for Burp Pro - Crawljax Selenium JUnit integration
+- [**32**星][1y] [lylemi/dom-vuln-db](https://github.com/lylemi/dom-vuln-db) A collection of Browser DOM Vulnerabilities with PoCs
+- [**32**星][1y] [ObjC] [lycajb/lycajb](https://github.com/lycajb/lycajb) LycaJB is a project that aims to fill the gap in iOS 11.0 - 11.3.1 jailbreaks. While this jailbreak is specifically aimed at developers it could be turned into a public stable jailbreak which includes Cydia. Right now we had to make the hard decision to remove Cydia from LycaJB as it caused our test devices to bootloop. We are working hard to ma…
+- [**32**星][5y] [Perl] [linvex/mitm-squid](https://github.com/linvex/mitm-squid) sharing some files of MITM-squid attack.
+- [**32**星][11m] [Assembly] [linuxthor/uul](https://github.com/linuxthor/uul) ELF binary that runs on several different *nix flavours. Works out which variant it's being run on and runs code specific to that.
+- [**32**星][2y] [PHP] [leebaird/assessment-manager](https://github.com/leebaird/assessment-manager) Manage all logistical information for a pentest including clients, contacts, employees, findings, projects, scoping, and vulnerabilities.
+- [**32**星][6d] [C++] [kuqadk3/ctf-and-learning](https://github.com/kuqadk3/ctf-and-learning)
+- [**32**星][2y] [Py] [krystalgamer/dec2struct](https://github.com/krystalgamer/dec2struct) 使用类定义/声明文件,在 IDA 中轻松创建虚表
+- [**32**星][2y] [knoobdev/bypass-facebook-ssl-pinning](https://github.com/knoobdev/bypass-facebook-ssl-pinning) Bypassing ssl pinning for facebook android app
+- [**32**星][3m] [Py] [kang-newbie/s-mbf](https://github.com/kang-newbie/s-mbf) Simple Multi BruteForce by KANG-NEWBIE
+- [**32**星][3y] [Shell] [jriguera/coreos-usb-creator](https://github.com/jriguera/coreos-usb-creator) Coreos live image builder with cloud-config on FAT32 to easily create POC
+- [**32**星][1y] [C] [jp-bennett/fwknop2](https://github.com/jp-bennett/fwknop2) A replacement fwknop client for android.
+- [**32**星][8y] [Py] [jonoberheide/kstructhunter](https://github.com/jonoberheide/kstructhunter) Routines for hunting down kernel structs.
+- [**32**星][3y] [Py] [jkkj93/mint-webshell-defender](https://github.com/jkkj93/mint-webshell-defender)
+- [**32**星][5y] [jgor/php-jpeg-shell](https://github.com/jgor/php-jpeg-shell) Simple PHP webshell with a JPEG header to bypass weak image verification checks
+- [**32**星][5y] [Ruby] [jduck/addjsif](https://github.com/jduck/addjsif) Metasploit Exploit Module for the Android addJavascriptInterface Issue (MITM)
+- [**32**星][6m] [C] [jcsaezal/pmctrack](https://github.com/jcsaezal/pmctrack) an OS-oriented performance monitoring tool for Linux (
+- [**32**星][10m] [Py] [james9909/practicectf](https://github.com/james9909/practicectf) Write-ups for past CTFs done during my free time
+- [**32**星][11m] [C++] [jacksonvd/pwnedpasswordsdll-api](https://github.com/jacksonvd/pwnedpasswordsdll-api) Open source solution to check prospective AD passwords against previously breached passwords
+- [**32**星][7y] [Py] [isecpartners/fuzzbox](https://github.com/isecpartners/fuzzbox) A multi-codec media fuzzing tool.
+- [**32**星][5y] [Py] [iphelix/ida-pomidor](https://github.com/iphelix/ida-pomidor) 在长时间的逆向中保存注意力和效率
+- [**32**星][6y] [C++] [igh0st/crypters](https://github.com/igh0st/crypters) Various Crypter Project
+- [**32**星][5m] [Py] [idhyt/jeb-keygen](https://github.com/idhyt/jeb-keygen) JEB install env
+- [**32**星][4y] [C++] [icestudent/ontl](https://github.com/icestudent/ontl) A set of tiny C++ RAII wrappers for NT Native/Win32 APIs including its own C++0x Standard Library (formerly STL) implementation.
+- [**32**星][2y] [Java] [realbearcat/cve-2017-12615](https://github.com/RealBearcat/CVE-2017-12615) Tomcat 远程代码执行漏洞 Exploit
+- [**32**星][4y] [Py] [holloway/docvert-python3](https://github.com/holloway/docvert-python3) Docvert for Python3: Converts Office files to DocBook and clean HTML, diagrams to SVG/PNG, etc.
+- [**32**星][3y] [Py] [harryr/maltrieve](https://github.com/harryr/maltrieve) A tool to retrieve malware directly from the source for security researchers.
+- [**32**星][9m] [C#] [graykernel/graystorm](https://github.com/graykernel/graystorm) In memory attack platform for C# Applications
+- [**32**星][3m] [C#] [globalpolicy/csarp-netcut](https://github.com/globalpolicy/csarp-netcut) An arpspoof program using Sharppcap
+- [**32**星][2y] [C] [freener/exploits](https://github.com/freener/exploits)
+- [**32**星][5y] [Java] [forprevious/attack-analysis](https://github.com/forprevious/attack-analysis) just for attack、Vulnerability,my study and research
+- [**32**星][9y] [C] [falk3n/subversive](https://github.com/falk3n/subversive) x86_64 linux rootkit using debug registers
+- [**32**星][24d] [C++] [f18m/large-pcap-analyzer](https://github.com/f18m/large-pcap-analyzer) A command-line utility program that performs some simple operations on PCAP files (Wireshark/tcpdump traces) very quickly. Allows you to manipulate very large PCAP files that cannot be easily handled with other software like Wireshark (or tshark). Supports filtering encapsulated GTPu frames. Easily extendible.
+- [**32**星][2y] [Py] [eurecom-s3/linux_screenshot_xwindows](https://github.com/eurecom-s3/linux_screenshot_xwindows) Volatility插件, 从内存dump中提取Windows截屏
+- [**32**星][7d] [edoverflow/legal-bug-bounty](https://github.com/edoverflow/legal-bug-bounty) #legalbugbounty project — creating safe harbors on bug bounty programs and vulnerability disclosure programs. Authored by Amit Elazari.
+- [**32**星][3y] [C++] [ecologylab/ecotuiodriver](https://github.com/ecologylab/ecotuiodriver) Diver to convert tuio touch events into windows touch events. Started as GSoC 2012 project.
+- [**32**星][2y] [dweinstein/dockerfile-androguard](https://github.com/dweinstein/dockerfile-androguard) docker file for use with androguard python android app analysis tool
+- [**32**星][5y] [Shell] [duoduo369/oh-my-shadowsocks](https://github.com/duoduo369/oh-my-shadowsocks) shadowsocks config on server, supervisor support
+- [**32**星][1y] [C] [dlrobertson/sylkie](https://github.com/dlrobertson/sylkie) sylkie:利用 NeighborDiscovery Protocol 实现的 IPv6 地址欺骗工具
+- [**32**星][2m] [JS] [digitalinterruption/vulnerable-xss-app](https://github.com/digitalinterruption/vulnerable-xss-app)
+- [**32**星][2y] [JS] [dg92/fractal-tree](https://github.com/dg92/fractal-tree) Fractal tree
+- [**32**星][7y] [Py] [derv82/werdy](https://github.com/derv82/werdy) A set of Python scripts for generating, parsing, sorting, and saving wordlists.
+- [**32**星][2y] [Shell] [deepwn/gitpagehijack](https://github.com/deepwn/gitpagehijack) OK now. Let's hijack github user's custom domain.
+- [**32**星][1y] [C] [deadnumbers/pegasus](https://github.com/deadnumbers/pegasus) Carbanak leaked source
+- [**32**星][2y] [HTML] [ddvkid/ng-treetable](https://github.com/ddvkid/ng-treetable) A treetable module for angular 5
+- [**32**星][1y] [TeX] [danpage/mascab](https://github.com/danpage/mascab) MASCAB: a Micro-Architectural Side-Channel Attack Bibliography
+- [**32**星][4y] [Py] [csababarta/volatility_plugins](https://github.com/csababarta/volatility_plugins) Volatility plugins created by the author
+- [**32**星][3m] [C++] [creaink/ucom](https://github.com/creaink/ucom) A simple Serial-Port/TCP/UDP debugging tool.
+- [**32**星][6y] [Py] [coldheat/quicksec](https://github.com/coldheat/quicksec) IDAPython script for quick vulnerability analysis
+- [**32**星][1m] [Py] [codingo/ransomware-json-dataset](https://github.com/codingo/ransomware-json-dataset) Compiles a json dataset using public sources that contains properties to aid in the detection and mitigation of over 1000 variants of ransomware.
+- [**32**星][11m] [TS] [xfoxfu/clover](https://github.com/xfoxfu/clover) Shadowsocks and v2ray User Interface
+- [**32**星][4d] [Py] [cloudflare/salt-cloudflare](https://github.com/cloudflare/salt-cloudflare) Cloudflare salt module allows you to manage zones on Cloudflare from salt.
+- [**32**星][2y] [Py] [citp/email_tracking](https://github.com/citp/email_tracking) Code and data release for our PETS 2018 paper: "I never signed up for this! Privacy implications of email tracking".
+- [**32**星][2y] [C#] [cfwprpht/free-ps2-pub-gen](https://github.com/cfwprpht/free-ps2-pub-gen) Automated Tool for flatz PS4- PS2 Emu PKG Technic.
+- [**32**星][3y] [Py] [certsocietegenerale/abuse_finder](https://github.com/certsocietegenerale/abuse_finder) Find abuse contacts for observables
+- [**32**星][1y] [Go] [boxproject/voucher](https://github.com/boxproject/voucher) Enterprise-grade security solution for digital assets custody, using a cryptographically secure offline network.
+- [**32**星][2m] [YARA] [blacktop/docker-yara](https://github.com/blacktop/docker-yara) docker-yara:YaraDockerfile
+- [**32**星][5m] [C++] [blackint3/none](https://github.com/blackint3/none) UNONE and KNONE is a couple of open source base library that makes it easy to develop software on Windows.
+- [**32**星][6m] [Py] [bishopfox/idontspeakssl](https://github.com/bishopfox/idontspeakssl) simple script to parse testssl.sh results
+- [**32**星][3y] [Py] [binarlyhq/binarly-query](https://github.com/binarlyhq/binarly-query) Command-line Interface for Binar.ly
+- [**32**星][2y] [applebetas/mterminal-jailed](https://github.com/applebetas/mterminal-jailed) An iOS 11 compatible fork of MTerminal using Ian Beer's tfp0 exploit
+- [**32**星][5m] [angelkitty/ida7.0](https://github.com/angelkitty/ida7.0)
+- [**32**星][1y] [Py] [andreafortuna/autotimeliner](https://github.com/andreafortuna/autotimeliner) 自动从volatile内存转储中提取取证时间线
+- [**32**星][3m] [Py] [amossys/fragscapy](https://github.com/amossys/fragscapy) Fragscapy is a command-line tool to fuzz network protocols by automating the modification of outgoing network packets. It can run multiple successive tests to determine which options can be used to evade firewalls and IDS.
+- [**32**星][1y] [C] [alex9191/kernelmodemonitor](https://github.com/alex9191/kernelmodemonitor) Kernel-Mode driver and User-Mode application communication project
+- [**32**星][3d] [Py] [adguardteam/adguardsdnsfilter](https://github.com/adguardteam/adguardsdnsfilter) AdGuard Simplified Domain names filter
+- [**32**星][5y] [JS] [acama/webkitties](https://github.com/acama/webkitties) PS Vita Webkit Exploit / Mini SDK and Testing Framework
+- [**32**星][4y] [C++] [5loyd/makecode](https://github.com/5loyd/makecode) Dll Convert to Shellcode.
+- [**32**星][11m] [Jupyter Notebook] [404notf0und/ai-for-security-testing](https://github.com/404notf0und/ai-for-security-testing) My AI security testing projects
+- [**32**星][2y] [PS] [3gstudent/office-persistence](https://github.com/3gstudent/office-persistence) Use powershell to test Office-based persistence methods
+- [**32**星][1y] [Makefile] [1bitsy/1bitsy-examples](https://github.com/1bitsy/1bitsy-examples) Example projects for the 1BitSy development boards.
+- [**32**星][5y] [Py] [0xebfe/3dsx-ida-pro-loader](https://github.com/0xebfe/3dsx-ida-pro-loader) IDA PRO Loader for 3DSX files
+- [**31**星][2m] [Go] [shikanon/socks5proxy](https://github.com/shikanon/socks5proxy) 一个简单的socks5代理转发服务(VPN)
+- [**31**星][2y] [Makefile] [xc2/shadowsocks-libev-tomato](https://github.com/xc2/shadowsocks-libev-tomato) Pre-compiled shadowsocks-libev for TomatoUSB, Tomato Shibby, Toastman and Asuswrt Merlin.
+- [**31**星][22d] [C] [questescape/exploit](https://github.com/questescape/exploit) Kernel exploits for the Oculus Quest
+- [**31**星][3m] [C#] [cmu-sei/ghosts](https://github.com/cmu-sei/ghosts) GHOSTS is a framework for highly-complex, realistic NPC orchestration
+- [**31**星][5y] [ObjC] [project-imas/encrypted_code_modules](https://github.com/project-imas/encrypted_code_modules) ECM - mitigates static attacks - allows sections of source code to be encrypted into a .dylib at build time and decrypted at run-time
+- [**31**星][1y] [rhinosecuritylabs/presentations](https://github.com/rhinosecuritylabs/presentations) A collection of slides, videos, and proof-of-concept scripts from various Rhino presentations.
+- [**31**星][2y] [bypass007/vuln](https://github.com/bypass007/vuln) Record some Vulnerabilities
+- [**31**星][2m] [C] [bkerler/opencl_brute](https://github.com/bkerler/opencl_brute) MD5,SHA1,SHA256,SHA512,HMAC,PBKDF2,SCrypt Bruteforcing tools using OpenCL (GPU, yay!) and Python
+- [**31**星][8m] [Py] [fallibleinc/retirejslib](https://github.com/fallibleinc/retirejslib) Scan for vulnerabilities in JavaScript libraries you use (Python port of retirejs)
+- [**31**星][6m] [Py] [snowming04/cipher_encryption_type_identification](https://github.com/snowming04/cipher_encryption_type_identification) 对密文的加密类型进行判断的命令行工具。
+- [**31**星][5y] [Py] [michenriksen/maltego](https://github.com/michenriksen/maltego) Custom Maltego transforms
+- [**31**星][21d] [Py] [grayddq/eburst](https://github.com/grayddq/eburst) 这个脚本主要提供对Exchange邮件服务器的账户爆破功能,集成了现有主流接口的爆破方式。
+- [**31**星][6y] [CSS] [spiderlabs/microphisher](https://github.com/spiderlabs/microphisher) µphisher spear phishing tool (reference implementation)
+- [**31**星][18d] [JS] [pirate/django-concurrency-talk](https://github.com/pirate/django-concurrency-talk) Database Integrity in Django: Safely Handling Critical Data in Distributed Systems
+- [**31**星][2m] [Shell] [thelinuxchoice/self-xss](https://github.com/thelinuxchoice/self-xss) Self-XSS attack using bit.ly to grab cookies tricking users into running malicious code
+- [**31**星][1m] [Py] [k8gege/solrexp](https://github.com/k8gege/solrexp) Apache Solr <=8.2.0 Velocity Template 0day Exploit
+- [**31**星][1m] [xuxiaodong/v2ray-for-ansible](https://github.com/xuxiaodong/v2ray-for-ansible) V2Ray for Ansible
+- [**31**星][3y] [Py] [d4vinci/wormy](https://github.com/d4vinci/wormy) some python3 functions to add spreading features to any python backdoor
+- [**31**星][2m] [Shell] [lbp0200/v2ray-vultr](https://github.com/lbp0200/v2ray-vultr) 在vultr上,在线自动部署v2ray
+- [**31**星][1y] [Shell] [wongsyrone/openwrt-v2ray](https://github.com/wongsyrone/openwrt-v2ray) v2ray package example for OpenWrt/LEDE
+- [**31**星][5d] [Py] [oasis-open/cti-taxii-server](https://github.com/oasis-open/cti-taxii-server) OASIS TC Open Repository: TAXII 2 Server Library Written in Python
+- [**31**星][10m] [kiyadesu/android-reversing-challenges](https://github.com/kiyadesu/android-reversing-challenges) there are some CTF challenges or some other things helping improving android reversing skills.
+- [**31**星][4m] [bslassey/privacy-budget](https://github.com/bslassey/privacy-budget)
+- [**31**星][1y] [Shell] [xxh3x/nethunter_universal](https://github.com/XXH3X/Nethunter_Universal) Kali Nethunter for any phone (Kerneless)
+- [**31**星][2y] [proappleos/upgrade-from-10.3.x-to-ios-11.1.2-on-any-64bit-device-with-blobs](https://github.com/ProAppleOS/Upgrade-from-10.3.x-to-iOS-11.1.2-on-any-64Bit-device-with-Blobs) How to Upgrade any 64Bit Device from 10.3.x to 11.1.2 with Blobs
+- [**31**星][2y] [C++] [mojtabatajik/sandbox-detection](https://github.com/MojtabaTajik/Sandbox-Detection) Contains some tricks to detect Sandboxes and gradually completed
+- [**31**星][2y] [JS] [ret2got/ethereum-jsonrpc-dns-rebinding](https://github.com/ret2got/Ethereum-JSONRPC-DNS-Rebinding) The PoC files for ethereum client's JSON-RPC DNS Rebinding
+- [**31**星][2y] [C] [zwclose/hidusb2](https://github.com/zwclose/hidusb2) hidusb2:Win10hidusb.sys 源代码
+- [**31**星][1y] [C#] [zodiacon/perfmonx](https://github.com/zodiacon/perfmonx) PerfMonX is an enhanced Performance Monitor tool
+- [**31**星][6y] [Ruby] [zeknox/scripts](https://github.com/zeknox/scripts) a collection of useful scripts that for penetration testers
+- [**31**星][3y] [Py] [ytisf/hemingway](https://github.com/ytisf/hemingway) hemingway is a simple and easy to use spear phishing helper.
+- [**31**星][1y] [PHP] [yaofeifly/php_code_challenge](https://github.com/yaofeifly/php_code_challenge) 总结一些php代码审计ctf练习题
+- [**31**星][10m] [Py] [xme/dockers](https://github.com/xme/dockers) Miscelaneous Dockers
+- [**31**星][5m] [Py] [withzombies/bnil-graph](https://github.com/withzombies/bnil-graph) A BinaryNinja plugin to graph a BNIL instruction tree
+- [**31**星][20d] [Py] [whitequark/binja_itanium_cxx_abi](https://github.com/whitequark/binja_itanium_cxx_abi) Binary Ninja ItaniumC++ ABI 插件. 提供了一个自定义的 demangler,能够分析解析 RTTI 和 vtables,并发现基于虚函数指针的新函数
+- [**31**星][5y] [web2hack/trac](https://github.com/web2hack/trac) 《Web前端黑客技术揭秘》勘误表
+- [**31**星][1y] [Py] [wasapi-community/data-transfer-apis](https://github.com/wasapi-community/data-transfer-apis) WASAPI data transfer APIs
+- [**31**星][3m] [SystemVerilog] [wangxuan95/ustc-rvsoc](https://github.com/wangxuan95/ustc-rvsoc) 一个用 SystemVerilog 编写的,RISC-V 架构的 CPU + SoC
+- [**31**星][1y] [unapibageek/thebicho](https://github.com/unapibageek/thebicho) Hardware backdoor for CAN bus.
+- [**31**星][3m] [PHP] [ubient/laravel-pwned-passwords](https://github.com/ubient/laravel-pwned-passwords) A Laravel validation rule to determine whether a given password is pwned (insecure)
+- [**31**星][2y] [PS] [tyranid/zer0con_2018](https://github.com/tyranid/zer0con_2018) Repository for my talk on Desktop Bridge at Zer0Con 2018.
+- [**31**星][3y] [Py] [tunnelshade/nightfury](https://github.com/tunnelshade/nightfury)
+- [**31**星][5y] [Py] [tripwire/openssl-ccs-inject-test](https://github.com/tripwire/openssl-ccs-inject-test) This script is designed for detection of vulnerable servers (CVE-2014-0224.) in a wide range of configurations. It attempts to negotiate using each affected protocol version (SSLv3, TLSv1, TLSv1.1, and TLSv1.2) advertising a comprehensive set of ciphers.
+- [**31**星][3y] [C++] [trailofbits/cfg-showcase](https://github.com/trailofbits/cfg-showcase) Sample programs that illustrate how to use Control Flow Guard, VS2015's control flow integrity implementation
+- [**31**星][1y] [Py] [thusoy/postgres-mitm](https://github.com/thusoy/postgres-mitm) Test whether your Postgres connections are vulnerable to MitM attacks
+- [**31**星][4y] [Eagle] [thedarknet/hhvkit](https://github.com/thedarknet/hhvkit) DefCon Hardware Hacking Village Learn To Solder Kit
+- [**31**星][5y] [Assembly] [th4nat0s/no_sandboxes](https://github.com/th4nat0s/no_sandboxes) Test suite for bypassing Malware sandboxes.
+- [**31**星][4y] [C] [tandasat/cs_driver](https://github.com/tandasat/cs_driver) A sample project for using Capstone from a driver in Visual Studio 2015
+- [**31**星][23d] [talltechy/infosec_it-conferences-and-certs-usa](https://github.com/talltechy/infosec_it-conferences-and-certs-usa) USA based Information Security & I.T. Conferences
+- [**31**星][8y] [C] [swatkat/arkitlib](https://github.com/swatkat/arkitlib) Windows anti-rootkit library
+- [**31**星][2y] [Py] [starnightcyber/cve-2017-11882](https://github.com/starnightcyber/cve-2017-11882) CVE-2017-11882 exploitation
+- [**31**星][3y] [Py] [staaldraad/fastfluxanalysis](https://github.com/staaldraad/fastfluxanalysis) Scripts to detect Fast-Flux and DGA using DNS query responses
+- [**31**星][1y] [Ruby] [st0rn/windows-10-exploit](https://github.com/st0rn/windows-10-exploit) Windows 10 Exploit
+- [**31**星][3y] [Java] [silentsignal/burp-collab-gw](https://github.com/silentsignal/burp-collab-gw) Simple socket-based gateway to the Burp Collaborator
+- [**31**星][2y] [shadowsocksrr/shadowsocksx-ng](https://github.com/shadowsocksrr/shadowsocksx-ng) Next Generation of ShadowsocksX
+- [**31**星][2y] [Py] [safebreach-labs/cachetalk](https://github.com/safebreach-labs/cachetalk) Proof-of-concept program that is able to read and write arbitrary bits using HTTP server-side caching
+- [**31**星][11m] [Shell] [s-o-t/telegram-3proxy-install](https://github.com/s-o-t/telegram-3proxy-install) Bash script to install socks5 proxy (3proxy) configured for telegram.
+- [**31**星][29d] [Java] [rub-nds/tls-attacker-burpextension](https://github.com/rub-nds/tls-attacker-burpextension)
+- [**31**星][2y] [C++] [rprop/cppdll](https://github.com/rprop/cppdll) CppDLL a small tool that will help you generate Cpp Header(.h) and Import Library(.lib) from Dynamic Link Library(.dll)
+- [**31**星][4m] [PS] [roflsandwich/steam-eop](https://github.com/roflsandwich/steam-eop)
+- [**31**星][1y] [Py] [righettod/owasp-cs-book](https://github.com/righettod/owasp-cs-book) Provide a utility script to build a PDF book gathering all Cheat Sheets from the project
+- [**31**星][4m] [Shell] [riftbit/docker-3proxy](https://github.com/riftbit/docker-3proxy) Smallest and Fastest Docker container for fast proxy setup based on 3proxy SOCKS5 proxy
+- [**31**星][5m] [Py] [raphaelyancey/virtual_fm_band](https://github.com/raphaelyancey/virtual_fm_band)
+- [**31**星][3y] [randommood/fallacyoffast](https://github.com/randommood/fallacyoffast) Reference materials to this talk
+- [**31**星][2y] [Go] [pyinx/zk-sniffer](https://github.com/pyinx/zk-sniffer) sniffer and parse zookeeper packet
+- [**31**星][1m] [C] [programa-stic/pyasmjit](https://github.com/programa-stic/pyasmjit) PyAsmJIT is a Python package for x86_64/ARM assembly code generation and execution.
+- [**31**星][2y] [C++] [progmboy/kernel_vul_poc](https://github.com/progmboy/kernel_vul_poc)
+- [**31**星][1y] [Py] [prevade/cloudjack](https://github.com/prevade/cloudjack) Route53/CloudFront Vulnerability Assessment Utility
+- [**31**星][3y] [Py] [pmsosa/pylogger](https://github.com/pmsosa/pylogger)
+- [**31**星][4y] [Pascal] [pigrecos/codedeobfuscator](https://github.com/pigrecos/codedeobfuscator) Code Deobfuscator
+- [**31**星][13d] [PHP] [php-fig-rectified/psr2r-sniffer](https://github.com/php-fig-rectified/psr2r-sniffer) A PSR-2-R code sniffer and code-style auto-correction-tool - including many useful additions
+- [**31**星][2y] [PHP] [phith0n/ctfdbbuilder](https://github.com/phith0n/ctfdbbuilder) a database query builder for CTFer(出题专用/开发阶段/慎用)
+- [**31**星][5y] [Shell] [patrickod/docker-tor-hidden-services](https://github.com/patrickod/docker-tor-hidden-services) A simple way of exposing any docker container as a tor hidden service
+- [**31**星][4y] [C] [patois/brahma](https://github.com/patois/brahma) Brahma - Privilege elevation exploit for Nintendo 3DS
+- [**31**星][6m] [C] [pathway27/bookr-mod-vita](https://github.com/pathway27/bookr-mod-vita) A book reader for the Vita. Still a work in progress
+- [**31**星][2y] [HTML] [p3t3rp4rk3r/my_dirty_scripts](https://github.com/p3t3rp4rk3r/my_dirty_scripts) My Dirty Scriptss ..!!!!! Pentest , OSINT , Python ,, Trainings
+- [**31**星][3y] [osandamalith/apimon](https://github.com/osandamalith/apimon) A simple API monitor for Windbg
+- [**31**星][4y] [Swift] [openscanner/xguardian](https://github.com/openscanner/xguardian) Security Scanner for OSX
+- [**31**星][11m] [C] [olehkulykov/libnhr](https://github.com/olehkulykov/libnhr) Tiny Network HTTP Request cross platform C library.
+- [**31**星][3m] [Go] [nullhypothesis/zoossh](https://github.com/nullhypothesis/zoossh) Parsing library for Tor-specific data formats.
+- [**31**星][1y] [C++] [notscimmy/libelevate](https://github.com/notscimmy/libelevate) Handle elevation DKOM against ObRegisterCallbacks
+- [**31**星][1y] [Py] [northernsec/veracracker](https://github.com/northernsec/veracracker) Veracrypt Password Cracker
+- [**31**星][3y] [Py] [nopdev/binjadock](https://github.com/nopdev/binjadock) An extendable, tabbed, dockable UI widget plugin for BinaryNinja
+- [**31**星][2y] [Rust] [nikomatsakis/cargo-incremental](https://github.com/nikomatsakis/cargo-incremental) A fuzzing tool for incremental compilation that walks git history
+- [**31**星][3y] [Go] [netxfly/docker-remote-api-exp](https://github.com/netxfly/docker-remote-api-exp) docker remote api未授权访问的利用代码
+- [**31**星][1y] [Smarty] [nerdyprojects/hostapd-wpe-extended](https://github.com/nerdyprojects/hostapd-wpe-extended) Modification and tools for using hostapd for rogue AP attacks impersonating WPA-Enterprise networks to steal user credentials
+- [**31**星][8m] [Py] [needmorecowbell/funnel](https://github.com/needmorecowbell/funnel) Funnel is a lightweight yara-based feed scraper
+- [**31**星][2y] [C#] [nccgroup/scomdecrypt](https://github.com/nccgroup/scomdecrypt) SCOMDecrypt is a tool to decrypt stored RunAs credentials from SCOM servers
+- [**31**星][6y] [C] [nbareil/net2pcap](https://github.com/nbareil/net2pcap) Net2PCAP is a simple network-to-pcap capture file for Linux. Its goal is to be as simple as possible to be used in hostile environments
+- [**31**星][1y] [Go] [naltun/eyes](https://github.com/naltun/eyes)
+- [**31**星][2y] [HTML] [mthbernardes/heimdall_webserver](https://github.com/mthbernardes/heimdall_webserver) heimdall_webserver:在 *inux 服务器上集中管理有漏洞的包(vulnerables packages)
+- [**31**星][5m] [JS] [mozfreddyb/webext-firstpartyisolation](https://github.com/mozfreddyb/webext-firstpartyisolation) Enable First Party Isolation Pref
+- [**31**星][3m] [Py] [moohax/proof-pudding](https://github.com/moohax/proof-pudding) Copy cat model for Proofpoint
+- [**31**星][9m] [mmarfil/tinfoilhat](https://github.com/mmarfil/tinfoilhat) A list of privacy-respecting alternatives to apps and services that track you around.
+- [**31**星][5y] [C] [mitrecnd/pynids](https://github.com/mitrecnd/pynids)
+- [**31**星][6d] [Py] [misp/misp-objects](https://github.com/misp/misp-objects) Definition, description and relationship types of MISP objects
+- [**31**星][2y] [Java] [mindawei/aliyun-safe-match](https://github.com/mindawei/aliyun-safe-match) Webshell和钓鱼网站检测(阿里云安全算法挑战赛 第29名)
+- [**31**星][3y] [Go] [mikegleasonjr/devproxy](https://github.com/mikegleasonjr/devproxy) A local development http proxy with hosts spoofing written in Go
+- [**31**星][2y] [C++] [mgeeky/hevd_kernel_exploit](https://github.com/mgeeky/hevd_kernel_exploit) Exploits pack for the Windows Kernel mode driver HackSysExtremeVulnerableDriver written for educational purposes.
+- [**31**星][2y] [Py] [medhini/malicious_website_detection](https://github.com/medhini/malicious_website_detection) Uses deep learning and machine learning techniques to detect and classify web pages as spam, malware and phishing
+- [**31**星][5y] [matthewrudy/fake-code4hk-app](https://github.com/matthewrudy/fake-code4hk-app) Decompiling a fake code4hk / occupy central app distributed via whatsapp
+- [**31**星][3y] [matthewdunwoody/poshspy](https://github.com/matthewdunwoody/poshspy) POSHSPY backdoor code
+- [**31**星][4m] [matrix1001/interactive-pwnning-tutorial](https://github.com/matrix1001/interactive-pwnning-tutorial)
+- [**31**星][8m] [Py] [mathboy7/ctf](https://github.com/mathboy7/ctf) Exploit for hardcore pwnable
+- [**31**星][3y] [CSS] [malwares/malwares.github.io](https://github.com/malwares/malwares.github.io) malwares src dump
+- [**31**星][5y] [Py] [madpowah/forensicpcap](https://github.com/madpowah/forensicpcap)
+- [**31**星][2y] [Py] [lxiaogirl/hack](https://github.com/lxiaogirl/hack) 渗透测试过程中使用的脚本,包括不限于针对特定程序设备的爆破脚本、利用代码,通用的脚本。
+- [**31**星][7m] [C++] [lr3800/teensy](https://github.com/lr3800/teensy) teensy示例代码
+- [**31**星][3m] [Shell] [leviathan36/ska](https://github.com/leviathan36/ska) Simple Karma Attack
+- [**31**星][4y] [Lua] [kost/nmap-nse](https://github.com/kost/nmap-nse) NMAP NSE scripts - (not all)) my contributions before merging to nmap svn
+- [**31**星][10m] [kiyadesu/android-reversing-challenges](https://github.com/kiyadesu/android-reversing-challenges) there are some CTF challenges or some other things helping improving android reversing skills.
+- [**31**星][1y] [karelorigin/xss-problems](https://github.com/karelorigin/xss-problems)
+- [**31**星][3m] [Py] [junorouse/ctf](https://github.com/junorouse/ctf)
+- [**31**星][4m] [C] [jtalowell/crackme](https://github.com/jtalowell/crackme) Source repository for my introduction to reverse engineering workshop
+- [**31**星][5y] [Py] [jofpin/fuckshell](https://github.com/jofpin/fuckshell) Simple Webshell Scanner
+- [**31**星][7m] [Java] [jehy/rutracker-free](https://github.com/jehy/rutracker-free) Android thin client for rutracker.org, using Tor to avoid block.
+- [**31**星][2y] [C] [jaybosamiya/fuzzing-numpy](https://github.com/jaybosamiya/fuzzing-numpy)
+- [**31**星][9m] [C++] [isoadam/gina_public](https://github.com/isoadam/gina_public) Prototype of hijacking Windows driver dispatch routines in unmapped discardable sections
+- [**31**星][6y] [Shell] [installation/rkhunter](https://github.com/installation/rkhunter) Rootkit Hunter install script
+- [**31**星][2y] [Py] [ihack4falafel/subrosa](https://github.com/ihack4falafel/subrosa) Basic tool to automate backdooring PE files
+- [**31**星][5y] [idkwim/frooksinatra](https://github.com/idkwim/frooksinatra) POC of sysenter x64 LSTAR MSR hook
+- [**31**星][1y] [C] [iamgublin/ndis6.30-netmonitor](https://github.com/iamgublin/ndis6.30-netmonitor) NDIS6.30 Filter Library
+- [**31**星][9d] [C] [hfiref0x/rocall](https://github.com/hfiref0x/rocall) ReactOS x86-32 syscall fuzzer
+- [**31**星][20d] [C++] [hasherezade/funky_malware_formats](https://github.com/hasherezade/funky_malware_formats) Parsers for custom malware formats ("Funky malware formats")
+- [**31**星][1y] [Java] [harryfrey/fakegumtree](https://github.com/harryfrey/fakegumtree) Investigating an Android spyware and phishing application.
+- [**31**星][5y] [Py] [hacksysteam/exploitreliabilitytestingsystem](https://github.com/hacksysteam/exploitreliabilitytestingsystem) Exploit Reliability Testing System
+- [**31**星][8y] [C] [hackedteam/driver-win64](https://github.com/hackedteam/driver-win64) Windows (64bit) agent driver
+- [**31**星][1y] [h2hconference/2018](https://github.com/h2hconference/2018) H2HC 2018 Slides/Materials/Presentations
+- [**31**星][2y] [Go] [guitmz/go-liora](https://github.com/guitmz/go-liora) Probably the first binary (PE/ELF) infector ever created in GoLang.
+- [**31**星][15d] [Ruby] [gplcc/gplcc](https://github.com/gplcc/gplcc) GPL Cooperation Commitment
+- [**31**星][6y] [C++] [glmcdona/malm](https://github.com/glmcdona/malm) MALM: Malware Monitor
+- [**31**星][5y] [Py] [glamrock/stormy](https://github.com/glamrock/stormy) Easy creation of Tor Hidden Services
+- [**31**星][5y] [Go] [fzerorubigd/go0r](https://github.com/fzerorubigd/go0r) A simple ssh honeypot in golang
+- [**31**星][2y] [C] [frederic/qemu-exynos-bootrom](https://github.com/frederic/qemu-exynos-bootrom) Emulating Exynos 4210 BootROM in QEMU
+- [**31**星][6m] [Py] [fr0gger/unprotect](https://github.com/fr0gger/unprotect) Unprotect is a python tool for parsing PE malware and extract evasion techniques.
+- [**31**星][1y] [C++] [fortiguard-lion/rpcview](https://github.com/fortiguard-lion/rpcview) RpcView is a free tool to explore and decompile Microsoft RPC interfaces
+- [**31**星][3y] [HLSL] [foonull/halomd](https://github.com/foonull/halomd) New demo version of Halo for the Mac.
+- [**31**星][7m] [Py] [fkie-cad/luckycat](https://github.com/fkie-cad/luckycat) A distributed fuzzing management framework
+- [**31**星][2y] [Py] [fist0urs/kerberom](https://github.com/fist0urs/kerberom) Kerberom is a tool aimed to retrieve ARC4-HMAC'ed encrypted Tickets Granting Service (TGS) of accounts having a Service Principal Name (SPN) within an Active Directory
+- [**31**星][2y] [Py] [ffmancera/pentesting-multitool](https://github.com/ffmancera/pentesting-multitool) Different utility scripts for pentesting and hacking.
+- [**31**星][8m] [C++] [ez8-co/xpjson](https://github.com/ez8-co/xpjson)
+- [**31**星][5m] [C++] [etsubu/nanovm](https://github.com/etsubu/nanovm) PoC lightweight x64 register based VM implementation
+- [**31**星][1y] [Shell] [edoverflow/curate](https://github.com/edoverflow/curate) A tool for fetching archived URLs (to be rewritten in Go).
+- [**31**星][9m] [JS] [ecleipteon/thalos](https://github.com/ecleipteon/thalos) Secure approach to secure file storage in untrusted environments.
+- [**31**星][2y] [Visual Basic .NET] [dzzie/myaut_contrib](https://github.com/dzzie/myaut_contrib) mod to myaut2exe decompiler
+- [**31**星][4y] [dhamuharker/xss-](https://github.com/dhamuharker/xss-) Awesome XSS Payloads
+- [**31**星][3y] [JS] [desudesutalk/f5stegojs](https://github.com/desudesutalk/f5stegojs) JPEG steganography for browser and node. F5 algo in pure javascript.
+- [**31**星][3m] [C] [defcon-russia/metasploit-payloads](https://github.com/defcon-russia/metasploit-payloads) Unified repository for different Metasploit Framework payloads
+- [**31**星][4y] [Lua] [danilabs/scripts-nse](https://github.com/danilabs/scripts-nse) Some NSE scripts to search information from routers
+- [**31**星][4y] [danielmiessler/ctfsolutiontypes](https://github.com/danielmiessler/ctfsolutiontypes) A collection of CTF solution types, i.e. not solutions to specific CTF challenges, but the general categories that those solutions fall under. Includes CTF solution categories for web, binary, network, crypto, and others. Please contribute!
+- [**31**星][1y] [JS] [d0g3-lab/i-soon_ctf_2018](https://github.com/D0g3-Lab/i-SOON_CTF_2018) 2018 第一届安洵杯 题目环境/源码/WP
+- [**31**星][6y] [Java] [cunninglogic/lgpwn](https://github.com/cunninglogic/lgpwn) LG Root Exploit
+- [**31**星][10m] [C] [ctxis/capemon](https://github.com/ctxis/capemon) CAPE monitor DLLs
+- [**31**星][4m] [cturt/gameboy_ghidrasleigh](https://github.com/cturt/gameboy_ghidrasleigh) Ghidra Processor support for Nintendo Game Boy
+- [**31**星][5m] [C] [csandker/inmemoryshellcode](https://github.com/csandker/inmemoryshellcode) A Collection of In-Memory Shellcode Execution Techniques for Windows
+- [**31**星][1y] [Shell] [cryptolok/ghostinthechaos](https://github.com/cryptolok/ghostinthechaos) Chaotic Crypto Stealth VPN for Anonymity and Untraceable Hacking Attacks with Linux and Android
+- [**31**星][3y] [Py] [cryptax/fittools](https://github.com/cryptax/fittools) Wristband research tools
+- [**31**星][1y] [Py] [cisco-talos/casc](https://github.com/cisco-talos/casc) 在IDA的反汇编和字符串窗口中, 辅助创建ClamAV NDB 和 LDB签名
+- [**31**星][5y] [C] [christianpapathanasiou/apache-rootkit](https://github.com/christianpapathanasiou/apache-rootkit) A malicious Apache module with rootkit functionality
+- [**31**星][5y] [Ruby] [chdorner/epubinfo](https://github.com/chdorner/epubinfo) Extracts metadata information from EPUB files. Supports EPUB2 and EPUB3 formats.
+- [**31**星][5m] [Py] [charliedean/psexecspray](https://github.com/charliedean/psexecspray) Spray SMB with hashes, Then psexec
+- [**31**星][2y] [Py] [bwsw/webshell](https://github.com/bwsw/webshell) Docker container which includes Shellinabox and enables SSH connections to arbitrary (not where installed) servers
+- [**31**星][1y] [Py] [bsvineethiitg/malwaregan](https://github.com/bsvineethiitg/malwaregan) Visualizing malware behavior, and proactive protection using GANs against zero-day attacks.
+- [**31**星][2y] [Go] [brimstone/rsocks](https://github.com/brimstone/rsocks) Tiny little reverse socks5 client & server
+- [**31**星][2y] [PHP] [bmitch/codor](https://github.com/bmitch/codor) Custom PHPCS sniffs to find Code Smells
+- [**31**星][2y] [Shell] [bluscreenofjeff/scripts](https://github.com/bluscreenofjeff/scripts) One-off scripts
+- [**31**星][2y] [Py] [bltsec/violent-python3](https://github.com/bltsec/violent-python3) Python 3 scripts based on lessons learned from Violent Python: A Cookbook for Hackers, Forensic Analysts, Penetration Testers and Security Engineers by TJ O'Connor.
+- [**31**星][3m] [C#] [blackvikingpro/aresskit](https://github.com/blackvikingpro/aresskit) Next Generation Remote Administration Tool (RAT)
+- [**31**星][2y] [Py] [benjamincrom/scrabble](https://github.com/benjamincrom/scrabble) Implements Scrabble. Also allows user to recover all game moves from given board and score list as well as brute-force find best move.
+- [**31**星][4y] [Py] [basilfx/kippo-extra](https://github.com/basilfx/kippo-extra) Set of extra commands for kippo, the SSH honeypot daemon
+- [**31**星][3y] [Py] [as0ler/r2clutch](https://github.com/as0ler/r2clutch) r2-based tool to decrypt iOS applications
+- [**31**星][4y] [Py] [arthaud/formatstring](https://github.com/arthaud/formatstring) Format string exploitation helper
+- [**31**星][3m] [Perl] [aron-tn/mega-bot](https://github.com/aron-tn/mega-bot) [NEW] : Mega Bot ☣ Scanner & Auto Exploiter
+- [**31**星][3m] [Py] [argilo/secplus](https://github.com/argilo/secplus) A software implementation of the Security+ system used by garage door openers
+- [**31**星][7y] [Perl] [appliedsec/forensicscanner](https://github.com/appliedsec/forensicscanner) Forensic Scanner
+- [**31**星][5m] [Py] [anilyuk/punydomaincheck](https://github.com/anilyuk/punydomaincheck) punydomaincheck:Puny域名检查
+- [**31**星][7m] [Go] [andrewwebber/kate](https://github.com/andrewwebber/kate) Because Clair needs a friend
+- [**31**星][2y] [amoghbl1/tor-browser](https://github.com/amoghbl1/tor-browser) Orfox - A Tor Browser for Android
+- [**31**星][2y] [C] [alienrobotarmy/ctunnel](https://github.com/alienrobotarmy/ctunnel) ctunnel is a proxy and VPN software for tunneling TCP and UDP connections securely
+- [**31**星][7m] [C] [alex91ar/diamorphine](https://github.com/alex91ar/diamorphine) LKM rootkit for Linux Kernels 2.6.x/3.x/4.x
+- [**31**星][1y] [KiCad Layout] [5n44p/omega-dock-new](https://github.com/5n44p/omega-dock-new) A dock for Onion omega, omega2 and omega2+. It features: Microusb for power supply, USB host, Ethernet
+- [**31**星][2y] [PS] [3gstudent/waitfor-persistence](https://github.com/3gstudent/waitfor-persistence) Use Waitfor.exe to maintain persistence
+- [**31**星][4y] [C] [211217613/c-hacking](https://github.com/211217613/c-hacking) Practice and learning in the world of C RE and exploit analysis
+- [**31**星][11m] [Py] [0xr0/hediye](https://github.com/0xr0/hediye) Hash Generator & Cracker Online Offline
+- [**31**星][1y] [Py] [003random/icu](https://github.com/003random/icu) An Extended, Modulair, Host Discovery Framework
+- [**30**星][10m] [smallstrong0/ss](https://github.com/smallstrong0/ss) I spend many ways to break the GFW,and this is my destination.
+- [**30**星][4y] [Forth] [benhoyt/third](https://github.com/benhoyt/third) Third, a small Forth compiler for 8086 DOS
+- [**30**星][11m] [Java] [bestoa/shadowsocks-vertx](https://github.com/bestoa/shadowsocks-vertx) Java port of shadowsocks with vertx.
+- [**30**星][26d] [fqshare/free-ssr-v2ray-vpn](https://github.com/fqshare/free-ssr-v2ray-vpn) ssr/酸酸乳/v2ray/shadowsocks节点/vpn/机场搬运分享
+- [**30**星][26d] [Ruby] [stelligent/aws-devsecops-workshop](https://github.com/stelligent/aws-devsecops-workshop) A continuous security pipeline demo for the AWS DevSecOps Workshop.
+- [**30**星][2y] [Py] [scwuaptx/ais3-2017](https://github.com/scwuaptx/ais3-2017) AIS3 2017 Binary Exploitation
+- [**30**星][2y] [Java] [amitshekhariitbhu/applock](https://github.com/amitshekhariitbhu/applock) Android Application for app lock
+- [**30**星][8y] [Py] [hubert3/isniff](https://github.com/hubert3/isniff) SSL man-in-the-middle tool targeting iOS devices < 4.3.5
+- [**30**星][8m] [offensive-security/kali-linux-preseed](https://github.com/offensive-security/kali-linux-preseed)
+- [**30**星][3y] [xyntax/waf-bypass](https://github.com/xyntax/waf-bypass)
+- [**30**星][29d] [C] [angr/binaries](https://github.com/angr/binaries) A repository with binaries for angr tests and examples.
+- [**30**星][5y] [Perl] [pentestmonkey/yaptest](https://github.com/pentestmonkey/yaptest) Automatically exported from code.google.com/p/yaptest
+- [**30**星][8m] [C] [pwn20wndstuff/meridianjb](https://github.com/pwn20wndstuff/meridianjb)
+- [**30**星][6m] [jiansiting/cve-2019-2725](https://github.com/jiansiting/cve-2019-2725) weblogic绕过和wls远程执行
+- [**30**星][18d] [Py] [kkevsterrr/geneva](https://github.com/kkevsterrr/geneva) client-side censorship evasion engine from the Geneva AI
+- [**30**星][2y] [C++] [hsluoyz/rmtsvc](https://github.com/hsluoyz/rmtsvc) A web-based remote desktop & control service for Windows.
+- [**30**星][4m] [starriv/docker-ss](https://github.com/starriv/docker-ss) use the docker to run shadowsocksr
+- [**30**星][6y] [Py] [acidprime/wirelessconfig](https://github.com/acidprime/wirelessconfig) A 802.1x Python wireless configuration tool with Cocoa wrappers
+- [**30**星][2y] [Py] [probr/probr-core](https://github.com/probr/probr-core) The core-component for generic WiFi tracking: remote device management, packet capturing, packet storage
+- [**30**星][29d] [Jupyter Notebook] [tikeswar/kido](https://github.com/tikeswar/kido) White hat hacking passwords using ML
+- [**30**星][7d] [ds19991999/secbox](https://github.com/ds19991999/secbox)
+- [**30**星][1m] [Go] [monereum/monereum](https://github.com/monereum/monereum) Monereum Network - A permissioned implementation of Ethereum supporting data privacy
+- [**30**星][2m] [Shell] [masssmith/smgate](https://github.com/masssmith/smgate) 用树莓派做v2ray透明翻墙网关
+- [**30**星][5y] [Py] [osirislab/catfish](https://github.com/osirislab/Catfish) Catfish is a tool used ease the process of finding ROP gadgets and creating payloads with them.
+- [**30**星][1y] [PS] [nsacyber/detect-cve-2017-15361-tpm](https://github.com/nsacyber/Detect-CVE-2017-15361-TPM) Detects Windows and Linux systems with enabled Trusted Platform Modules (TPM) vulnerable to CVE-2017-15361. #nsacyber
+- [**30**星][3y] [Py] [tacixat/xorshift128plus](https://github.com/TACIXAT/XorShift128Plus) Symbolic execution for the XorShift128+ algorithm.
+- [**30**星][4y] [C] [intel/jit-spray-poc-for-ksp](https://github.com/intel/jit-spray-poc-for-ksp)
+- [**30**星][2m] [zoranpandovski/awesome-testing-tools](https://github.com/zoranpandovski/awesome-testing-tools)
+- [**30**星][4m] [C++] [zodiacon/apisetview](https://github.com/zodiacon/apisetview) API Set Viewer
+- [**30**星][9m] [Py] [zerosteiner/advancedhttpserver](https://github.com/zerosteiner/advancedhttpserver) Standalone web server built on Python's BaseHTTPServer
+- [**30**星][2y] [C#] [zacbrown/powershellmethodauditor](https://github.com/zacbrown/powershellmethodauditor) PowerShellMethodAuditor listens to the PowerShell ETW provider and logs PowerShell method invocations.
+- [**30**星][2y] [ysrc/shelldaddy](https://github.com/ysrc/shelldaddy) 跨平台 webshell 静态扫描器
+- [**30**星][2d] [Haskell] [ymherklotz/verismith](https://github.com/ymherklotz/verismith) Verilog Fuzzer to test the major simulators and sythesisers by generating random, valid Verilog.
+- [**30**星][7m] [C++] [xrivendell/pcsgolh](https://github.com/xrivendell/pcsgolh) PCSGOLH - Pointless Counter-Strike: Global Offensive Lua Hooks. A open-source Lua API for CS:GO hacking written in modern C++
+- [**30**星][2m] [C++] [xoreos/xoreos-tools](https://github.com/xoreos/xoreos-tools) Tools to help the development of xoreos
+- [**30**星][7y] [JS] [x/twitter-brute-force](https://github.com/x/twitter-brute-force) Brute forces dictionaries for available twitter handles
+- [**30**星][1y] [Go] [wybiral/reverseproxy](https://github.com/wybiral/reverseproxy) reverseproxy: Go语言编写的加密反向代理
+- [**30**星][2y] [HTML] [vuetifyjs/simple](https://github.com/vuetifyjs/simple) The simplest possible Vue setup in a single HTML file
+- [**30**星][3y] [Shell] [vrutkovs/firefox-flatpak](https://github.com/vrutkovs/firefox-flatpak) Flatpak manifest and patches to build Firefox
+- [**30**星][2y] [C++] [vic4key/cat-driver](https://github.com/vic4key/cat-driver) CatDriver - The Kernel Mode Driver that written in C++. It is an useful driver and has the highest privilege level on the Windows platform. It can be used for Game Hacking and others.
+- [**30**星][2y] [C#] [valsov/backnet](https://github.com/valsov/backnet) Remote Administration Tool with botnet capability, Windows
+- [**30**星][1y] [travisfsmith/mitre_attack](https://github.com/travisfsmith/mitre_attack)
+- [**30**星][5m] [Go] [tomnomnom/rawhttp](https://github.com/tomnomnom/rawhttp) A Go library for making HTTP requests with complete control
+- [**30**星][2y] [C] [tigerpuma/afl_unicorn](https://github.com/tigerpuma/afl_unicorn)
+- [**30**星][8m] [C#] [thaisenpm/loader2](https://github.com/thaisenpm/loader2) Nova Hook is an open source C# cheat loader currently built for CS:GO
+- [**30**星][6m] [PHP] [teamharekaze/harekazectf2019-challenges](https://github.com/teamharekaze/harekazectf2019-challenges) Harekaze CTF 2019 challenges
+- [**30**星][3y] [Jupyter Notebook] [surajr/machine-learning-approach-for-malware-detection](https://github.com/surajr/machine-learning-approach-for-malware-detection) A Machine Learning approach for classifying a file as Malicious or Legitimate
+- [**30**星][6y] [spiderlabs/xmlmao](https://github.com/spiderlabs/xmlmao) A configurable XPath/XML injection testbed
+- [**30**星][6y] [JS] [spiderlabs/modsecurity-status](https://github.com/spiderlabs/modsecurity-status) ModSecurity status
+- [**30**星][2y] [Py] [spencerdodd/pysploit](https://github.com/spencerdodd/pysploit) Remote exploitation framework written in Python
+- [**30**星][3y] [Py] [sooshie/packerid](https://github.com/sooshie/packerid)
+- [**30**星][3y] [Ruby] [skulltech/apk-payload-injector](https://github.com/skulltech/apk-payload-injector) POC for injecting Metasploit payloads on arbitrary APKs
+- [**30**星][8m] [HTML] [skepticfx/damnvulnerable.me](https://github.com/skepticfx/damnvulnerable.me) A deliberately vulnerable modern day app with lots of DOM related bugs
+- [**30**星][3y] [C] [simoninns/smallymouse2](https://github.com/simoninns/smallymouse2) Universal USB to quadrature mouse adapter
+- [**30**星][10m] [Py] [sf197/hashboy-tool](https://github.com/sf197/hashboy-tool) a hash query tool
+- [**30**星][1y] [Py] [serpilliere/elfesteem](https://github.com/serpilliere/elfesteem) Automatically exported from code.google.com/p/elfesteem
+- [**30**星][1y] [C++] [sentinel-one/skream](https://github.com/sentinel-one/skream) SentinelOne's KeRnel Exploits Advanced Mitigations
+- [**30**星][26d] [Shell] [security-onion-solutions/securityonion-setup](https://github.com/security-onion-solutions/securityonion-setup)
+- [**30**星][9m] [Java] [secdec/attack-surface-detector-zap](https://github.com/secdec/attack-surface-detector-zap) The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters
+- [**30**星][3m] [Py] [scottmudge/debugautopatch](https://github.com/scottmudge/debugautopatch) Patching system improvement plugin for IDA.
+- [**30**星][2y] [JS] [rpgeeganage/file-less-ransomware-demo](https://github.com/rpgeeganage/file-less-ransomware-demo) Demonstrate about file-less malware approach using JavaScript
+- [**30**星][4y] [C++] [rootkitsmm/cvexx-xx](https://github.com/rootkitsmm/cvexx-xx) Windows kernel vulnerability in win32k.sys Driver
+- [**30**星][3m] [C++] [rokups/hooker](https://github.com/rokups/hooker) Minimalistic hooking library written in C
+- [**30**星][3y] [Py] [rmtew/peasauce](https://github.com/rmtew/peasauce) Peasauce Interactive Disassembler
+- [**30**星][2y] [Py] [revengecoming/demonhunter](https://github.com/revengecoming/demonhunter) Distributed Honeypot
+- [**30**星][2m] [Shell] [putsi/privatecollaborator](https://github.com/putsi/privatecollaborator) A script for installing private Burp Collaborator with free Let's Encrypt SSL-certificate
+- [**30**星][2y] [C] [psxdev/ps4sdk](https://github.com/psxdev/ps4sdk) Modular open source ps4 sdk with user and kernel space support
+- [**30**星][1y] [C++] [psmitty7373/eif](https://github.com/psmitty7373/eif) Evil Reflective DLL Injection Finder
+- [**30**星][2y] [Shell] [pnptutorials/pnp-portablehackingmachine](https://github.com/pnptutorials/pnp-portablehackingmachine) This script will convert your Raspberry Pi 3 into a portable hacking machine.
+- [**30**星][7m] [Java] [pnfsoftware/jeb2-plugin-oat](https://github.com/pnfsoftware/jeb2-plugin-oat) Android OAT Plugin for JEB
+- [**30**星][2y] [HTML] [plaperdr/fprandom](https://github.com/plaperdr/fprandom) A browser to counter advanced fingerprinting techniques
+- [**30**星][1y] [pinktangent/endpoint-testing](https://github.com/pinktangent/endpoint-testing) Repository for Endpoint Security Testing
+- [**30**星][5m] [C] [pentesteracademy/linux-rootkits-red-blue-teams](https://github.com/pentesteracademy/linux-rootkits-red-blue-teams) Linux Rootkits (4.x Kernel)
+- [**30**星][5m] [C++] [paragon-software-group/paragon_apfs_sdk_ce](https://github.com/paragon-software-group/paragon_apfs_sdk_ce) Paragon APFS SDK Free
+- [**30**星][1y] [C++] [owodelta/coilgun](https://github.com/owodelta/coilgun) Direct WinAPI calling
+- [**30**星][2y] [PHP] [opt-oss/ng-netms](https://github.com/opt-oss/ng-netms) NG-NetMS is a new end-to-end network management platform for your Linux servers, Cisco, Juniper, HP and Extreme routers, switches and firewalls.
+- [**30**星][4y] [Shell] [opentoallctf/ctf-tools](https://github.com/opentoallctf/ctf-tools) Some setup scripts for security research tools.
+- [**30**星][11m] [HCL] [opendevsecops/terraform-aws-scanner](https://github.com/opendevsecops/terraform-aws-scanner) Terraform module which provides easy to configure AWS environment for running automated security scanning solutions at scheduled intervals.
+- [**30**星][1y] [C++] [ntraiseharderror/unrunpe](https://github.com/ntraiseharderror/unrunpe) PoC for detecting and dumping process hollowing code injection
+- [**30**星][3y] [nextco/android-decompiler](https://github.com/nextco/android-decompiler) A hight quality list of tools to reverse engineering code from android.
+- [**30**星][4y] [neu5ron/malware-traffic-analysis-pcaps](https://github.com/neu5ron/malware-traffic-analysis-pcaps) malware-traffic-analysis.net PCAPs repository.
+- [**30**星][5y] [Py] [mstsec/mst](https://github.com/mstsec/mst) A Platform for Web Pentest From China
+- [**30**星][1y] [Tcl] [mohemiv/tcltools](https://github.com/mohemiv/tcltools) Сollection of TCL scripts for Cisco IOS penetration testing
+- [**30**星][2y] [C#] [modzero/mod0umleitung](https://github.com/modzero/mod0umleitung) modzero DNS Masquerading Server for Windows
+- [**30**星][7m] [Zeek] [mitre-attack/bzar](https://github.com/mitre-attack/bzar) A set of Zeek scripts to detect ATT&CK techniques.
+- [**30**星][3y] [mhaggis/app_splunk_sysmon_hunter](https://github.com/mhaggis/app_splunk_sysmon_hunter) Splunk App to assist Sysmon Threat Hunting
+- [**30**星][3y] [Py] [mhagger/diff-slider-tools](https://github.com/mhagger/diff-slider-tools) Tools for experimenting diff "slider" heuristics
+- [**30**星][6y] [Py] [meatballs1/burp_jsbeautifier](https://github.com/meatballs1/burp_jsbeautifier) js-beautifier extension for Burp Suite
+- [**30**星][4y] [markofu/hackeire](https://github.com/markofu/hackeire) Challenges, notes & other stuff from the HackEire CTF.....
+- [**30**星][12m] [C++] [malcomvetter/dnscache](https://github.com/malcomvetter/dnscache)
+- [**30**星][1y] [CSS] [m6a-uds/dvca](https://github.com/m6a-uds/dvca) Damn Vulnerable Cloud Application
+- [**30**星][3y] [Py] [loggerhead/shadowsocks](https://github.com/loggerhead/shadowsocks)
+- [**30**星][5m] [Py] [lionheart/pwnedpasswords](https://github.com/lionheart/pwnedpasswords) A Python Library and CLI for the Pwned Passwords v2 API
+- [**30**星][2y] [Py] [lanrat/spiderwho](https://github.com/lanrat/spiderwho) A very fast whois crawler
+- [**30**星][2m] [C++] [klaasnicolaas/ha_nfc_scanner](https://github.com/klaasnicolaas/ha_nfc_scanner) Scan
+- [**30**星][6m] [HTML] [kkthxbye-code/csgo_bugs](https://github.com/kkthxbye-code/csgo_bugs) Random CSGO stuff
+- [**30**星][2y] [C++] [kingron/s](https://github.com/kingron/s) The simple, fast, powerful SYN/TCP port scanner source code
+- [**30**星][5y] [C] [karottc/linux-virus](https://github.com/karottc/linux-virus) A simple virus of linux. It can get root and destory your system.(这是一个简单的linux下的病毒,它仅能得到root权限和感染文件并进行破坏)
+- [**30**星][6y] [PHP] [joostvanveen/php-security-pitfalls](https://github.com/joostvanveen/php-security-pitfalls) Code repository for Tutsplus course PHP Security Pitfalls
+- [**30**星][3y] [Shell] [jlevitsk/lazykali](https://github.com/jlevitsk/lazykali) A refresh of LazyKali which simplifies install of tools and configuration. Original author appears missing.
+- [**30**星][2y] [PHP] [jhaddix/seclists](https://github.com/jhaddix/seclists) SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.
+- [**30**星][5m] [Java] [jenly1314/baseurlmanager](https://github.com/jenly1314/baseurlmanager)
+- [**30**星][7m] [Py] [jaky5155/cve-2019-0708-exp](https://github.com/jaky5155/cve-2019-0708-exp)
+- [**30**星][3y] [Py] [itsreallynick/office-crackros](https://github.com/itsreallynick/office-crackros) Crack your macros like the math pros.
+- [**30**星][7m] [PS] [improsec/get-badpasswords](https://github.com/improsec/get-badpasswords) Get insights into the actual strength and quality of passwords in Active Directory.
+- [**30**星][3y] [Py] [immortal3/hidden-eye](https://github.com/immortal3/hidden-eye) Hide data into Picture
+- [**30**星][3d] [Py] [ickerwx/pattern](https://github.com/ickerwx/pattern) Python implementation of Metasploit's pattern_create/pattern_offset.
+- [**30**星][3y] [HTML] [h2hconference/2016](https://github.com/h2hconference/2016) H2HC 2016 Slides/Materials/Presentations
+- [**30**星][4y] [PHP] [fuzzdb-project/webshell](https://github.com/fuzzdb-project/webshell) This is a webshell open source project
+- [**30**星][2y] [Py] [fideliscyber/data_mining](https://github.com/fideliscyber/data_mining) Data Mining Virus Total for threat feed building
+- [**30**星][4y] [PHP] [ezyang/csrf-magic](https://github.com/ezyang/csrf-magic) Automatic CSRF protection for PHP applications
+- [**30**星][2y] [C++] [exorxw/kylin-llvm-obfuscator](https://github.com/exorxw/kylin-llvm-obfuscator) based on llvm 5.0.1 release with ollvm
+- [**30**星][6m] [JS] [eshengsky/noginx](https://github.com/eshengsky/noginx) High performance HTTP and reverse proxy server based on Node.js. 基于 Node.js 的高性能 HTTP 及反向代理服务器,类似nginx。
+- [**30**星][6y] [PS] [enigma0x3/powershell-c2](https://github.com/enigma0x3/powershell-c2)
+- [**30**星][3y] [Py] [endgameinc/instegogram](https://github.com/endgameinc/instegogram)
+- [**30**星][3y] [Py] [emersonelectricco/boomerang](https://github.com/emersonelectricco/boomerang) A tool designed for consistent and safe capture of off network web resources.
+- [**30**星][4y] [PHP] [echo-devim/xbackdoor](https://github.com/echo-devim/xbackdoor) A tool for the persistent XSS exploitation with a focus for mobile web browsers
+- [**30**星][11m] [Shell] [ebelties/domainwatch](https://github.com/ebelties/domainwatch) DomainWatch allows everyone to monitor domains for possible take-overs.
+- [**30**星][1y] [dwestgard/threat_hunting_tables](https://github.com/dwestgard/threat_hunting_tables) Theat hunting notes in flat file format and mapped to MITRE's ATT&CK IDs
+- [**30**星][2y] [Py] [dqi/ctf_writeup](https://github.com/dqi/ctf_writeup)
+- [**30**星][4m] [C] [dhn/exploits](https://github.com/dhn/exploits) Some personal exploits/pocs
+- [**30**星][2y] [deroko/payloadrestrictions](https://github.com/deroko/payloadrestrictions) EMET 集成到 Win10Insider 之后改名为 PayloadRestrictions,文章分析了 PayloadRestrictions.dll 的加载过程
+- [**30**星][1y] [PS] [demonsec666/security-toolkit](https://github.com/demonsec666/security-toolkit) Security-Toolkit
+- [**30**星][3y] [Py] [deadbits/shells](https://github.com/deadbits/shells) collection of useful shells for penetration tests
+- [**30**星][4y] [Py] [danilovazb/sawef](https://github.com/danilovazb/sawef) Send Attack Web Forms
+- [**30**星][3m] [C] [daft-freak/sdl-emscripten](https://github.com/daft-freak/sdl-emscripten) SDL2 emscripten port, non-upstreamed changes
+- [**30**星][4m] [Py] [dado3212/polldaddyhack](https://github.com/dado3212/polldaddyhack) Exploit PollDaddy polls
+- [**30**星][5y] [PS] [curi0usjack/activedirectory](https://github.com/curi0usjack/activedirectory) This script runs several security checks and makes modifications (with your permission) to your Active Directory domain to improve it's security posture.
+- [**30**星][4y] [comeforu2012/fq_faq](https://github.com/comeforu2012/fq_faq) 翻墙常见问题
+- [**30**星][1y] [C++] [certt/1000base](https://github.com/certt/1000base) CS:GO cheat base
+- [**30**星][4y] [Py] [carstein/burp-extensions](https://github.com/carstein/burp-extensions) Automatically exported from code.google.com/p/burp-extensions
+- [**30**星][3y] [Py] [bshastry/afl-sancov](https://github.com/bshastry/afl-sancov) AFL coverage tool using Clang SanitizerCoverage
+- [**30**星][2y] [C++] [briterator/drpdb](https://github.com/briterator/drpdb) Convert from Microsoft PDB format into a MySQL database
+- [**30**星][3y] [CSS] [botherder/flexikiller](https://github.com/botherder/flexikiller) flexikiller:移除FlexiSpy 木马(Windows/Mac)
+- [**30**星][2y] [Py] [blackmathit/2017-11882_generator](https://github.com/blackmathit/2017-11882_generator) CVE-2017-11882 File Generator PoC
+- [**30**星][2y] [biprodeep/awesome-ml-for-cybersecurity](https://github.com/biprodeep/awesome-ml-for-cybersecurity)
+- [**30**星][3y] [Py] [bannsec/pythaw](https://github.com/bannsec/pythaw) Python Application to Reverse Freezing
+- [**30**星][1y] [Py] [bandrel/ocyara](https://github.com/bandrel/ocyara) Performs OCR on image files and scans them for matches to YARA rules
+- [**30**星][9d] [Java] [azure/azure-cosmosdb-java](https://github.com/azure/azure-cosmosdb-java) Java Async SDK for SQL API of Azure Cosmos DB
+- [**30**星][19d] [C++] [ayuto/dynamichooks](https://github.com/ayuto/dynamichooks) A C++ library to create function hooks dynamically, so you can easily embed it into other programming languages..
+- [**30**星][1y] [Py] [aurainfosec/xss_payloads](https://github.com/aurainfosec/xss_payloads) XSS payloads for edge cases
+- [**30**星][2y] [Py] [aurainfosec/burp-multi-browser-highlighting](https://github.com/aurainfosec/burp-multi-browser-highlighting) Highlight Burp proxy requests made by different browsers
+- [**30**星][4m] [Shell] [armourbird/csf](https://github.com/armourbird/csf) ArmourBird CSF - Container Security Framework
+- [**30**星][2y] [Py] [andrewilyas/ens-adv-train-attack](https://github.com/andrewilyas/ens-adv-train-attack) Circumventing the defense in "Ensemble Adversarial Training: Attacks and Defenses"
+- [**30**星][11m] [PHP] [alemalakra/xwaf](https://github.com/alemalakra/xwaf) xWAF 3.0 - Free Web Application Firewall, Open-Source.
+- [**30**星][1y] [JS] [akalankauk/foxss-xss-penetration-testing-tool](https://github.com/akalankauk/foxss-xss-penetration-testing-tool) Foxss is a simple php based penetration Testing Tool.Currently it will help to find XSS vulnerability in websites.
+- [**30**星][1y] [Java] [airman604/jdbc-backdoor](https://github.com/airman604/jdbc-backdoor) A fake JDBC driver that allows OS command execution.
+- [**30**星][4y] [HTML] [a0xnirudh/webxploiter](https://github.com/a0xnirudh/webxploiter) WebXploiter - An OWASP Top 10 Security scanner !
+- [**30**星][12m] [PHP] [7hxz233/ctf](https://github.com/7hxz233/ctf) This repo stores all challenges and writeups of CTFs we have participated in
+- [**30**星][3y] [Py] [5z1punch/oracle_java_shell_client](https://github.com/5z1punch/oracle_java_shell_client) oracle 10g sys权限通过java执行命令获得一个非交互shell的客户端,通常用于正向连接
+- [**30**星][8m] [Py] [3xp10it/xupload](https://github.com/3xp10it/xupload) A tool for automatically testing whether the upload function can upload webshell
+- [**30**星][1y] [JS] [1lastbr3ath/drmine](https://github.com/1lastbr3ath/drmine) Dr. Mine is a node script written to aid automatic detection of in-browser cryptojacking.
+- [**30**星][4y] [C++] [0xddaa/pin](https://github.com/0xddaa/pin) Use Intel Pin tools to analysis binary.
+- [**30**星][4y] [0pc0defr/yararules](https://github.com/0pc0defr/yararules) Multiple rules for yara-project for detect compiler/packer/protector
+- [**29**星][11m] [C++] [pushkalkatara/darknet_ros](https://github.com/pushkalkatara/darknet_ros) Robotics Operating System Package for Yolo v3 based on darknet with optimized tracking using Kalman Filter and Optical Flow.
+- [**29**星][2y] [Py] [sevro/security-utilities](https://github.com/sevro/security-utilities) Offensive Security Certified Profesional (OSCP) course scripts, some have been generalized
+- [**29**星][6m] [Java] [portswigger/scan-check-builder](https://github.com/portswigger/scan-check-builder) Burp Bounty is a extension of Burp Suite that improve an active and passive scanner by yourself. This extension requires Burp Suite Pro.
+- [**29**星][] [Shell] [m507/kali-tx](https://github.com/m507/kali-tx) Customized Kali Linux - Ansible playbook
+- [**29**星][5d] [Py] [skybulk/bin2sc](https://github.com/skybulk/bin2sc) Binary to shellcode
+- [**29**星][2y] [Shell] [dreadl0ck/golang-libs](https://github.com/dreadl0ck/golang-libs) List of awesome golang repositories and useful resources for development
+- [**29**星][1m] [fs0c131y/conpresentations](https://github.com/fs0c131y/conpresentations) Slide decks from my conference presentations
+- [**29**星][4y] [JS] [infosec-au/phishjs](https://github.com/infosec-au/phishjs) Abusing trust boundaries to deliver effective phishing payloads
+- [**29**星][3y] [JS] [mandatoryprogrammer/pers](https://github.com/mandatoryprogrammer/pers) A passive scanning tool for finding expired domain vulnerabilities while you browse.
+- [**29**星][2m] [C] [iaik/transientfail](https://github.com/iaik/transientfail) Website and PoC collection for transient execution attacks
+- [**29**星][1y] [PS] [denandz/secretserversecretstealer](https://github.com/denandz/secretserversecretstealer) Powershell script that decrypts the data stored within a Thycotic Secret Server
+- [**29**星][2m] [C#] [uknowsec/sharpeventlog](https://github.com/uknowsec/sharpeventlog) c# 读取登录过本机的登录失败或登录成功(4624,4625)的所有计算机信息,在内网渗透中快速定位运维管理人员。
+- [**29**星][1y] [Java] [guardianproject/pluto](https://github.com/guardianproject/pluto) Pluggable Library (for) Using Traffic Obfuscation: DEPRECATED - SEE LINK FOR NEW PROJECT
+- [**29**星][7y] [PHP] [guelfoweb/wp-waf](https://github.com/guelfoweb/wp-waf) [PHP] WordPress Application Firewall
+- [**29**星][2m] [al0ne/suricata_optimize](https://github.com/al0ne/suricata_optimize) Suricata安装部署&丢包优化&性能调优&规则调整&Pfring设置
+- [**29**星][4y] [Py] [yinghuocho/ghttproxy](https://github.com/yinghuocho/ghttproxy) a gevent based HTTP/HTTPS proxy with SOCKS5 forwarding.
+- [**29**星][3y] [C] [nicehash/sgminer-gm](https://github.com/nicehash/sgminer-gm) A multi-algo GPU miner from genesismining
+- [**29**星][30d] [Py] [certtools/malware_name_mapping](https://github.com/certtools/malware_name_mapping) A mapping of used malware names to commonly known family names
+- [**29**星][6m] [TS] [igio90/frida-onload](https://github.com/igio90/frida-onload) Frida module to hook module initializations on android
+- [**29**星][3m] [Py] [osirislab/csaw-ctf-2019-quals](https://github.com/osirislab/csaw-ctf-2019-quals) Challenge Repository for CSAW CTF Quals 2019
+- [**29**星][2m] [Shell] [trojan-gfw/trojan-quickstart](https://github.com/trojan-gfw/trojan-quickstart) A simple installation script for trojan server.
+- [**29**星][1m] [Py] [lunixbochs/mpwn](https://github.com/lunixbochs/mpwn) single file ctf/exploit client library - python3, type annotated
+- [**29**星][9m] [Shell] [shadowsocks/libev](https://github.com/shadowsocks/libev) A fork of libev
+- [**29**星][4y] [PHP] [wpscanteam/vulnerablewordpress](https://github.com/wpscanteam/vulnerablewordpress)
+- [**29**星][1y] [C] [stevemk14ebr/bf4-atombot](https://github.com/stevemk14ebr/bf4-atombot) Latest version of my personal BF4 Hack
+- [**29**星][2y] [JS] [javascript-obfuscator/obfuscator-loader](https://github.com/javascript-obfuscator/obfuscator-loader) A webpack loader for obfuscating single modules using javascript-obfuscator
+- [**29**星][1y] [C++] [stealth/libusipp](https://github.com/stealth/libusipp) unix socket interface for C++ raw IP/IP6/UDP/TCP, Layer2 etc. framework
+- [**29**星][26d] [Py] [charlie-belmer/subdomain_recon](https://github.com/charlie-belmer/subdomain_recon) A subdomain reconnaissance scanner
+- [**29**星][2d] [Shell] [honwen/openwrt-dnsmasq-extra](https://github.com/honwen/openwrt-dnsmasq-extra) Anti-{Pollution, ADs}-DNS for OpenWrt/LEDE
+- [**29**星][1y] [HTML] [evilbotnet/openpimap](https://github.com/evilbotnet/openpimap) Python3 and Raspberry Pi based NetFlow Traffic Analysis leveraging Shodan's API, Twilio, GeoIP, and Folium to produce interactive maps and threat intelligence data.
+- [**29**星][4y] [PS] [ahhh/wifi_trojans](https://github.com/ahhh/wifi_trojans) A collection of wireless based bind and reverse connect shells for penetration testers to use in demonstrating persistence to a network via rouge access points.
+- [**29**星][3y] [Py] [6e726d/pywiwi](https://github.com/6e726d/pywiwi) Python Windows Wifi
+- [**29**星][9d] [Py] [muteb/hoarder](https://github.com/muteb/hoarder) This script is made to collect the most valiable artifacts for foreniscs or incident reponse investigation rather than imaging the whole har drive.
+- [**29**星][2d] [Py] [pnfsoftware/jeb-golang-analyzer](https://github.com/pnfsoftware/jeb-golang-analyzer) JEB scripts for Golang executables analysis
+- [**29**星][12m] [Vim script] [fabi1cazenave/suckless.vim](https://github.com/fabi1cazenave/suckless.vim) Tiling window management that sucks less. Inpired by wmii and i3.
+- [**29**星][8y] [sektioneins/.ipa-pie-scanner](https://github.com/sektioneins/.ipa-PIE-Scanner) Scans iPhone/iPad/iPod applications for PIE flags
+- [**29**星][6m] [JS] [websecurity-quiz/websecurity-quiz.github.io](https://github.com/websecurity-quiz/websecurity-quiz.github.io) Test your Web Security knowledge with OWASP exam questions.
+- [**29**星][11m] [xymnal/wce](https://github.com/xymnal/wce) Windows Credentials Editor v1.3beta
+- [**29**星][3y] [Py] [calebstewart/peach](https://github.com/calebstewart/peach) Simple vulnerability scanning framework
+- [**29**星][10d] [Java] [ztgreat/proxy](https://github.com/ztgreat/proxy)
+- [**29**星][4m] [Py] [zkclown/getpwd](https://github.com/zkclown/getpwd) It's a tool which generate a dictionary from a csv containing personals informations. Generate all common passwords based on perso info. (leet transformations and combinatory processing)
+- [**29**星][3y] [C] [zhuhuibeishadiao/minivtx64](https://github.com/zhuhuibeishadiao/minivtx64) Intel Virtualization Technology demo
+- [**29**星][11m] [PHP] [zendframework/zendxml](https://github.com/zendframework/zendxml) Utility library for XML usage and best practices in PHP
+- [**29**星][3y] [Java] [yolosec/ysoserial](https://github.com/yolosec/ysoserial) A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
+- [**29**星][4y] [Py] [xyntax/zzone-transfer](https://github.com/xyntax/zzone-transfer) DNS域传送漏洞探测工具。多线程,批量探测,漏洞利用,简单网页采集。(DNS zone transfer vulnerability Vulnerability detection tool, support multithreading,batch scanning and vulnerability exploitation)
+- [**29**星][3y] [Py] [x64dbg/x64dbgbinja](https://github.com/x64dbg/x64dbgbinja) Official x64dbg plugin for Binary Ninja
+- [**29**星][2y] [C] [wangyinuo/memdump](https://github.com/wangyinuo/memdump) android下的内存dump工具,可以dump so文件
+- [**29**星][2y] [virqdroid/android_malware](https://github.com/virqdroid/android_malware)
+- [**29**星][8m] [Batchfile] [vanhauser-thc/audit_scripts](https://github.com/vanhauser-thc/audit_scripts) Scripts to gather system configuration information for offline/remote auditing
+- [**29**星][1y] [Java] [v-p-b/oracle_forms](https://github.com/v-p-b/oracle_forms) Testing tools for Oracle Forms
+- [**29**星][3m] [C++] [usnistgov/nfiq2](https://github.com/usnistgov/nfiq2) Biometric fingerprint quality assessment tool
+- [**29**星][12m] [troyhunt/hibp-stickers](https://github.com/troyhunt/hibp-stickers) This is artwork that can be used to create stickers for Have I Been Pwned
+- [**29**星][2y] [Py] [tribalchicken/volatility-bitlocker](https://github.com/tribalchicken/volatility-bitlocker) Volatility plugin to extract BitLocker Full Volume Encryption Keys (FVEK)
+- [**29**星][3y] [Shell] [tjunxiang92/android-vulnerabilities](https://github.com/tjunxiang92/android-vulnerabilities) Covers Top 10 OWASP Mobile Vulnerabilities
+- [**29**星][2y] [Lua] [tinywan/openresty-project-v0.01](https://github.com/tinywan/openresty-project-v0.01)
+- [**29**星][3y] [HTML] [theori-io/jscript9-typedarray-cfg](https://github.com/theori-io/jscript9-typedarray-cfg) Proof-of-Concept exploit for jscript9 bug (MS16-063) with CFG Bypass
+- [**29**星][4y] [techbliss/yara_mailware_quick_menu_scanner](https://github.com/techbliss/yara_mailware_quick_menu_scanner) Work Fast With the pattern matching swiss knife for malware researchers.
+- [**29**星][1y] [C++] [tai7sy/be_fuck](https://github.com/tai7sy/be_fuck) BattlEye Emulator
+- [**29**星][6y] [Py] [syworks/wpa-bruteforcer](https://github.com/syworks/wpa-bruteforcer) Attacking WPA/WPA encrypted access point without client.
+- [**29**星][3y] [sycloversecurity/papers](https://github.com/sycloversecurity/papers) Syclover PPT
+- [**29**星][3y] [C++] [stormshield/beholder-win32](https://github.com/stormshield/beholder-win32) A sample on how to inject a DLL from a kernel driver
+- [**29**星][1y] [slowmist/ontology-triones-service-node-security-checklist](https://github.com/slowmist/ontology-triones-service-node-security-checklist) Ontology Triones Service Node security checklist(本体北斗共识集群安全执行指南)
+- [**29**星][3y] [PHP] [slifty/tvarchive-duplitron](https://github.com/slifty/tvarchive-duplitron)
+- [**29**星][1y] [Py] [skelsec/windows_ad_dos_poc](https://github.com/skelsec/windows_ad_dos_poc) PoC code for crashing windows active directory
+- [**29**星][11m] [Go] [shift/domain_exporter](https://github.com/shift/domain_exporter) Prometheus WHOIS domain details exporter.
+- [**29**星][3y] [PS] [sekirkity/seeclrly](https://github.com/sekirkity/seeclrly) Fileless SQL Server CLR-based Custom Stored Procedure Command Execution
+- [**29**星][3y] [C] [securifera/cowcron](https://github.com/securifera/cowcron) Cronbased Dirty Cow Exploit
+- [**29**星][3m] [Py] [sdnewhop/sdwan-harvester](https://github.com/sdnewhop/sdwan-harvester)
+- [**29**星][6m] [Assembly] [sdasgup3/binary-decompilation](https://github.com/sdasgup3/binary-decompilation) Extracting high level semantic information from binary code
+- [**29**星][3y] [Py] [scubsrgroup/lectures-a-weekly-information-security-knowledge-lecture-hall](https://github.com/scubsrgroup/lectures-a-weekly-information-security-knowledge-lecture-hall) “每周一讲,信息安全基础知识讲堂”由四川大学信息安全研究所漏洞挖掘和利用组同学共同创建,通过每组员每周一讲的形式展开,主要涉及信息安全的基础知识,包括windows安全、移动安全等,此外还对通过该平台对外发布一些小组的研究成果!通过知识讲座一方面对新同学起到引导作用,另一方面则是漏洞挖掘与利用研究组同学信息安全研究经验和知识的积累!
+- [**29**星][4y] [HTML] [schmalle/nodepot](https://github.com/schmalle/nodepot) A nodejs web application honeypot
+- [**29**星][6y] [CSS] [savon-noir/nmap-webgui](https://github.com/savon-noir/nmap-webgui) Basic gui to run and display nmap scan results. Just a POC so far.
+- [**29**星][6y] [C#] [rvazarkar/antipwny](https://github.com/rvazarkar/antipwny) A host based IDS written in C# Targetted at Metasploit
+- [**29**星][4m] [Py] [rot42/gnuk-extractor](https://github.com/rot42/gnuk-extractor) Extract PGP secret keys from Gnuk / Nitrokey Start firmwares
+- [**29**星][7m] [rockmelodies/cve-2019-0708-exploit](https://github.com/rockmelodies/cve-2019-0708-exploit) Using CVE-2019-0708 to Locally Promote Privileges in Windows 10 System
+- [**29**星][2y] [JS] [rocketshipapps/hardenedpaste](https://github.com/rocketshipapps/hardenedpaste) [Retired] Hardened Paste is a browser extension that prevents the “pastejacking” exploit.
+- [**29**星][1y] [Py] [ridter/hackredis](https://github.com/ridter/hackredis)
+- [**29**星][1y] [redteamwing/cobaltstrike_wiki](https://github.com/redteamwing/cobaltstrike_wiki) Cobalt Strike 3.12中文文档
+- [**29**星][4m] [Py] [razorpay/alohomora](https://github.com/razorpay/alohomora) alohomora is razorpay's secret distribution system
+- [**29**星][4y] [rafiot/hackedteamcerts](https://github.com/rafiot/hackedteamcerts) A bunch of certificates from the Hacking Team leak
+- [**29**星][4y] [Makefile] [radicallyopensecurity/netaidkit](https://github.com/radicallyopensecurity/netaidkit) Standalone VPN/Tor WiFi router for journalists and activists
+- [**29**星][7m] [JS] [r00tse7en/googlehackingtool](https://github.com/r00tse7en/googlehackingtool) 在线Google Hacking 小工具
+- [**29**星][11m] [Py] [parasimpaticki/sandcastle](https://github.com/parasimpaticki/sandcastle)
+- [**29**星][12m] [opensourcehelpcommunity/contributingtomyproject](https://github.com/opensourcehelpcommunity/contributingtomyproject) Writeup from maintainers, admins, contributors on how someone can get started with their project.
+- [**29**星][22d] [TS] [oclif/kaomoji](https://github.com/oclif/kaomoji) A simple example CLI that generates kaomoji (
+- [**29**星][3m] [Py] [obscuritylabs/pefixup](https://github.com/obscuritylabs/pefixup) PE File Blessing - To continue or not to continue
+- [**29**星][2y] [C++] [nuand/kalibrate-bladerf](https://github.com/nuand/kalibrate-bladerf) kalibrate-bladeRF
+- [**29**星][1y] [C++] [notscimmy/libinject](https://github.com/notscimmy/libinject) Currently supports injecting signed/unsigned DLLs in 64-bit processes
+- [**29**星][1y] [Go] [netxfly/docker_ssh_honeypot](https://github.com/netxfly/docker_ssh_honeypot) 安全开发教学 - 用Docker制作一个高交互ssh蜜罐
+- [**29**星][2y] [C++] [namreeb/wowned](https://github.com/namreeb/wowned) Authentication bypass for outdated WoW emulation authentication servers
+- [**29**星][4y] [Ruby] [nahamsec/cmsfuzz](https://github.com/nahamsec/cmsfuzz)
+- [**29**星][9m] [Py] [mzfr/lswriteups](https://github.com/mzfr/lswriteups) CLI tool to get the links of original writeups from ctftime.org
+- [**29**星][3y] [ObjC] [mtigas/iobfs](https://github.com/mtigas/iobfs) Building obfs4proxy for Tor-enabled iOS apps.
+- [**29**星][9m] [C] [mrmacete/r2-ios-kernelcache](https://github.com/mrmacete/r2-ios-kernelcache) Radare2 plugin to parse modern iOS 64-bit kernel caches
+- [**29**星][1y] [Assembly] [mrfearless/apiinfo-plugin-x86](https://github.com/mrfearless/apiinfo-plugin-x86) APIInfo Plugin (x86) - A Plugin For x64dbg
+- [**29**星][8m] [Py] [mosuan/auditdpy](https://github.com/mosuan/auditdpy) !!!不建议使用了,可以使用AuditBeat!!! Linux服务器命令监控辅助脚本,ElasticSearch + Logstash + Kibana + Redis + Auditd
+- [**29**星][2y] [C++] [mogongtech/ransomdetection](https://github.com/mogongtech/ransomdetection) 基于行为的Ransomware检测原型
+- [**29**星][4y] [C] [mncoppola/stringipc](https://github.com/mncoppola/stringipc) CSAW CTF 2015 Linux kernel exploitation challenge
+- [**29**星][2m] [C] [mitrecnd/htpy](https://github.com/mitrecnd/htpy) Python bindings to libhtp
+- [**29**星][2y] [misterch0c/solidlity-vulnerable](https://github.com/misterch0c/solidlity-vulnerable) Vulnerable smart contracts
+- [**29**星][12m] [Java] [mhatta/orchid](https://github.com/mhatta/orchid) A Tor client implementation and library written in pure Java
+- [**29**星][4m] [JS] [mephistools/diablo2-protocol](https://github.com/mephistools/diablo2-protocol) Diablo 2 network protocol
+- [**29**星][5m] [C++] [marakew/syser](https://github.com/marakew/syser) syser debugger x32/x64 ring3
+- [**29**星][16d] [Shell] [mainframed/enumeration](https://github.com/mainframed/enumeration) PoC REXX Script to Help with z/OS System enumeration via OMVS/TSO/JCL.
+- [**29**星][2y] [Go] [madnikulin50/gordp](https://github.com/madnikulin50/gordp) Rdp client on pure GoLang
+- [**29**星][2y] [Py] [luffin/cve-2017-10271](https://github.com/luffin/cve-2017-10271) CVE-2017-10271 POC
+- [**29**星][6m] [Java] [ludovicianul/geolog](https://github.com/ludovicianul/geolog) Geolocation for SSH brute force attacks
+- [**29**星][1m] [Py] [kudelskisecurity/fumblechain](https://github.com/kudelskisecurity/fumblechain) A Purposefully Vulnerable Blockchain
+- [**29**星][2y] [Py] [kerrigan29a/idapython_virtualenv](https://github.com/kerrigan29a/idapython_virtualenv) 在IDAPython中启用Virtualenv或Conda,使可以有多个虚拟环境
+- [**29**星][2y] [Ruby] [jtdowney/private_address_check](https://github.com/jtdowney/private_address_check) Ruby gem to help prevent Server Side Request Forgery
+- [**29**星][10m] [Java] [jruby/jruby-openssl](https://github.com/jruby/jruby-openssl) JRuby's OpenSSL gem
+- [**29**星][4y] [Py] [joychou93/md5-extension-attack](https://github.com/joychou93/md5-extension-attack) MD5长度扩展攻击
+- [**29**星][2y] [C] [jnastarot/native_peloader](https://github.com/jnastarot/native_peloader) PE(compressed dll) memory loader using nt api
+- [**29**星][8m] [Go] [jimyj/scanproxy](https://github.com/jimyj/scanproxy) scanproxy is auto scan IP & port,and check that is proxy if port is open...(scanproxy是一个自动扫描端口,并且检测是否是代理服务器的程序)
+- [**29**星][1y] [Shell] [jaybrown/macos-security-updates](https://github.com/jaybrown/macos-security-updates) Notifies the user of updates to macOS Security components like Gatekeeper and XProtect
+- [**29**星][5m] [Py] [jacobsoo/threathunting](https://github.com/jacobsoo/threathunting) This is just my personal compilation of APT malware from whitepaper releases, documents and malware samples from my personal research.
+- [**29**星][1y] [Py] [iweizime/dbghider](https://github.com/iweizime/dbghider) 向被调试进程隐藏IDA调试器
+- [**29**星][4m] [Py] [intezer/mop](https://github.com/intezer/mop) MoP - "Master of Puppets" - Advanced malware tracking framework
+- [**29**星][9m] [Py] [inishantgrover/shodmon](https://github.com/inishantgrover/shodmon) The Shodan monitoring tools allows you to monitor shodan listed servers basis on the filter you provided
+- [**29**星][2y] [PS] [illusivenetworks-labs/get-networkconnection](https://github.com/illusivenetworks-labs/get-networkconnection) Edited version of Lee Christensen's Get-NetworkConnection which includes timestamp for each network connection
+- [**29**星][7m] [Java] [hvqzao/burp-flow](https://github.com/hvqzao/burp-flow) Extension providing view with filtering capabilities for both complete and incomplete requests from all burp tools.
+- [**29**星][3y] [C] [hklcf/mirai](https://github.com/hklcf/mirai) Source code for the Mirai botnet - Not going anywhere anytime soon
+- [**29**星][5y] [Py] [hiddenillusion/filelookup](https://github.com/hiddenillusion/filelookup) Quick & dirty script to get info on a file from online resources (VirusTotal, Team Cymru, Shadow Server etc.)
+- [**29**星][1y] [Py] [he1m4n6a/dcweb](https://github.com/he1m4n6a/dcweb) 三方依赖库扫描系统
+- [**29**星][3m] [MATLAB] [hcab14/tdoa](https://github.com/hcab14/tdoa) Time difference of arrival (TDoA) multi-lateration
+- [**29**星][5y] [Py] [haxorthematrix/loc-nogps](https://github.com/haxorthematrix/loc-nogps)
+- [**29**星][6m] [hahwul/xss-payload-without-anything](https://github.com/hahwul/xss-payload-without-anything) XSS Payload without Anything.
+- [**29**星][8m] [Py] [ha71/pywhatcms](https://github.com/ha71/pywhatcms) Unofficial WhatCMS API package
+- [**29**星][4m] [Shell] [gushmazuko/metasploit_in_termux](https://github.com/gushmazuko/metasploit_in_termux) Install Metasploit Framework 5 in Termux
+- [**29**星][10m] [Jupyter Notebook] [gcrahay/otx_misp](https://github.com/gcrahay/otx_misp) Imports Alienvault OTX pulses to a MISP instance
+- [**29**星][2y] [Lua] [foxmole/pwnadventure3](https://github.com/foxmole/pwnadventure3) Blog series about Pwn Adventure 3
+- [**29**星][5m] [PHP] [fdciabdul/fbchecker](https://github.com/fdciabdul/fbchecker) Facebook Mass Account Checker
+- [**29**星][3m] [PHP] [eymengunay/eohoneypotbundle](https://github.com/eymengunay/eohoneypotbundle) Honeypot type for Symfony forms
+- [**29**星][2y] [Py] [sevro/security-utilities](https://github.com/sevro/security-utilities) Offensive Security Certified Profesional (OSCP) course scripts, some have been generalized
+- [**29**星][1y] [Py] [ernw/binja-ipython](https://github.com/ernw/binja-ipython) A plugin to integrate an IPython kernel into Binary Ninja.
+- [**29**星][2d] [Py] [entynetproject/proton](https://github.com/entynetproject/proton) Proton Framework is a Windows post exploitation framework similar to other penetration testing tools such as Meterpreter and Powershell Invader Framework. The major difference is that the Proton Framework does most of its operations using Windows Script Host (a.k.a. JScript/VBScript), with compatibility in the core to support a default installat…
+- [**29**星][1y] [C] [dro/uac-launchinf-poc](https://github.com/dro/uac-launchinf-poc) Windows 10 UAC bypass PoC using LaunchInfSection
+- [**29**星][2y] [Ruby] [drewlong/vbully](https://github.com/drewlong/vbully) 3.8.x - 4.2.3 ForumRunner (vBulletin) exploit Proof of Concept
+- [**29**星][5y] [Py] [donctl/sandy](https://github.com/donctl/sandy) Release of the sandy framework.
+- [**29**星][10y] [C] [dmolnar/smartfuzz](https://github.com/dmolnar/smartfuzz) Valgrind extension for whitebox fuzz testing
+- [**29**星][7y] [C] [dhuertas/des](https://github.com/dhuertas/des) DES algorithm implementation in C
+- [**29**星][2m] [defconrome/meetings-2019](https://github.com/defconrome/meetings-2019) Slides and stuffs of the meetings during the 2019
+- [**29**星][2m] [JS] [dangkyokhoang/man-in-the-middle](https://github.com/dangkyokhoang/man-in-the-middle) Modify requests, inject JavaScript and CSS into pages
+- [**29**星][4m] [Py] [daedalus/bitcoin-recover-privkey](https://github.com/daedalus/bitcoin-recover-privkey) Proof of concept of bitcoin private key recovery using weak ECDSA signatures
+- [**29**星][2y] [Shell] [cyb3r3x3r/kalilinuxnethunter-termux](https://github.com/cyb3r3x3r/kalilinuxnethunter-termux) Install Kali Linux Nethunter in termux - orginal by
+- [**29**星][5m] [Go] [cryptogenic/rebot](https://github.com/cryptogenic/rebot) A discord bot for reverse engineers and exploit developers.
+- [**29**星][7m] [Java] [cristianturetta/mad-spy](https://github.com/cristianturetta/mad-spy) We developed a malware for educational purposes. In particular, our goal is to provide a PoC of what is known as a Repacking attack, a known technique widely used by malware cybercrooks to trojanize android apps. The answer to solve this particular goal boils down in the simplicity of APK decompiling and smali code injection.
+- [**29**星][1y] [Go] [cretz/tor-dht-poc](https://github.com/cretz/tor-dht-poc) Anonymous DHT Accessible from Executable or Tor-Enabled Browser
+- [**29**星][5y] [C] [conorpp/mitm-http-proxy](https://github.com/conorpp/mitm-http-proxy) A simple, low level http/https proxy server with MiTM pranking features.
+- [**29**星][5y] [C++] [codeliker/mymig_meterpreter](https://github.com/codeliker/mymig_meterpreter) mig meterpreter stager
+- [**29**星][7m] [Shell] [chunkingz/vmr-mdk-k2-2017r-012x4](https://github.com/chunkingz/vmr-mdk-k2-2017r-012x4) VMR-MDK is a script/tool for hacking wps wireless networks
+- [**29**星][2y] [Shell] [chichou/grab.js](https://github.com/chichou/grab.js) fast TCP banner grabbing with node.js
+- [**29**星][5m] [C++] [celestialpaler/cthackframework](https://github.com/celestialpaler/cthackframework) 游戏外挂通用框架,快速构建外挂程序。
+- [**29**星][6y] [Py] [catalyst256/sniffmypackets](https://github.com/catalyst256/sniffmypackets) Canari local transforms pcap file analysis
+- [**29**星][1y] [C] [calebfenton/native-harness-target](https://github.com/calebfenton/native-harness-target) Android app for demonstrating native library harnessing
+- [**29**星][2m] [Py] [bugbounty-site/calexe](https://github.com/bugbounty-site/calexe) Calendar Exploit.
+- [**29**星][2y] [Go] [bramp/myip](https://github.com/bramp/myip) (A better) What's My IP Address web application
+- [**29**星][6d] [C] [br101/libuwifi](https://github.com/br101/libuwifi) Userspace Wifi Library
+- [**29**星][3y] [Assembly] [borjamerino/plcinjector](https://github.com/borjamerino/plcinjector) Modbus stager in assembly and some scripts to upload/download data to the holding register of a PLC
+- [**29**星][4y] [Go] [bnagy/afl-launch](https://github.com/bnagy/afl-launch) Boring tool to launch multiple afl-fuzz instances
+- [**29**星][2y] [Shell] [bgeesaman/subpath-exploit](https://github.com/bgeesaman/subpath-exploit) Writeup of CVE-2017-1002101 with sample "exploit"/escape
+- [**29**星][2y] [Java] [barro/java-afl](https://github.com/barro/java-afl) Binary rewriting approach with fork server support to fuzz Java applications with afl-fuzz.
+- [**29**星][2y] [C#] [aviavni/nativeleakdetector](https://github.com/aviavni/nativeleakdetector) Win32 memory leak detector with ETW
+- [**29**星][3y] [HTML] [auth0-blog/polymer-with-jwt-api](https://github.com/auth0-blog/polymer-with-jwt-api) Build an app using web components and Polymer with an API and JSON Web Token authentication.
+- [**29**星][6y] [atlantis2013/evasion-tools](https://github.com/atlantis2013/evasion-tools) Anti-technique Codes, Detection of Anti-technique codes
+- [**29**星][6y] [Shell] [artemdinaburg/optimizevm](https://github.com/artemdinaburg/optimizevm) Make Windows VMs Faster
+- [**29**星][3y] [JS] [arlolra/ctypes-otr](https://github.com/arlolra/ctypes-otr) js-ctypes wrapper for libotr
+- [**29**星][2y] [C] [arduinohannover/zpb30a1_firmware](https://github.com/arduinohannover/zpb30a1_firmware) Open-Source firmware for the ZPB30A1 electronic load (WIP)
+- [**29**星][4y] [C] [android-rooting-tools/libkallsyms](https://github.com/android-rooting-tools/libkallsyms) Get symbol address and name from tables for kallsyms
+- [**29**星][2m] [Go] [ammario/ipisp](https://github.com/ammario/ipisp) Query IP address network information in Go
+- [**29**星][4y] [Shell] [alexoslabs/httpsscan](https://github.com/alexoslabs/httpsscan) Shell script for testing the SSL/TLS Protocols
+- [**29**星][2y] [C] [alex9191/netdriver](https://github.com/alex9191/netdriver) kernel-mode TDI client which can send and receive HTTP requests
+- [**29**星][5m] [Py] [alberties/ghostfuscator](https://github.com/alberties/ghostfuscator) The Python Password-Protected Obfuscator
+- [**29**星][3y] [Go] [akihirosuda/aspectgo](https://github.com/akihirosuda/aspectgo) Aspect-Oriented Programming framework for Go
+- [**29**星][2m] [ahmetgurel/pentest-hints](https://github.com/ahmetgurel/pentest-hints) Tips for Penetration Testing
+- [**29**星][2y] [Py] [agustingianni/symrepl](https://github.com/agustingianni/symrepl) Symbol REPL
+- [**29**星][4m] [Go] [adonley/ethereum-brute-force](https://github.com/adonley/ethereum-brute-force) Brute force generating ethereum private keys and check them against known addresses.
+- [**29**星][2m] [C#] [3gstudent/gadgettojscript](https://github.com/3gstudent/gadgettojscript) (Small change to make it easier to test the payload and combine it with SILENTTRINITY.)A tool for generating .NET serialized gadgets that can trigger .NET assembly load/execution when deserialized using BinaryFormatter from JS/VBS based scripts.
+- [**29**星][7y] [C++] [0xdabbad00/openhips](https://github.com/0xdabbad00/openhips) OpenHIPS prevents exploitation of Windows systems
+- [**29**星][2y] [0x90/nrf24-arsenal](https://github.com/0x90/nrf24-arsenal) Hacking tools and scripts for nRF24LU1+
+- [**29**星][10m] [c++] [camp0/aiengine](https://bitbucket.org/camp0/aiengine)
+- [**28**星][2m] [Shell] [idkiro/ssmgr-install](https://github.com/idkiro/ssmgr-install) shadowsocks-manager 前端+后端+魔改BBR一键部署脚本
+- [**28**星][2y] [C] [zhou0/mysocks](https://github.com/zhou0/mysocks) The cross-platform shadowsocks client and server with minimum dependencies.
+- [**28**星][2m] [C++] [bennetthardwick/darknet.js](https://github.com/bennetthardwick/darknet.js) A NodeJS wrapper of pjreddie's darknet / yolo.
+- [**28**星][10m] [Jupyter Notebook] [danielgatis/darknetpy](https://github.com/danielgatis/darknetpy) darknetpy is a simple binding for darknet's yolo detector
+- [**28**星][2y] [Py] [portswigger/wordpress-scanner](https://github.com/portswigger/wordpress-scanner) Find known vulnerabilities in WordPress plugins and themes using Burp Suite proxy. WPScan like plugin for Burp.
+- [**28**星][2y] [C] [lincolnhard/facenet-darknet-inference](https://github.com/lincolnhard/facenet-darknet-inference) Face recognition using facenet
+- [**28**星][10d] [Shell] [yaleh/kcp-shadowsocks-server](https://github.com/yaleh/kcp-shadowsocks-server) Docker image of a server with KCP tunnel and Shadowsocks.
+- [**28**星][3y] [iqiancheng/shadowsocks-awesome](https://github.com/iqiancheng/shadowsocks-awesome) 一个实时更新的实用gfwlist清单。用于ss的PAC自动分流。
+- [**28**星][12d] [C] [tidesec/peach_fuzzing](https://github.com/tidesec/peach_fuzzing) 在学习使用peach进行模糊测试时,搜集到的一些不错的资料,以及配套的一些软件或脚本。
+- [**28**星][2m] [bishopfox/cyberdic](https://github.com/bishopfox/cyberdic) An auxiliary spellcheck dictionary that corresponds with the Bishop Fox Cybersecurity Style Guide
+- [**28**星][7y] [C] [jonathansalwan/vmndh-2k12](https://github.com/jonathansalwan/vmndh-2k12) Emulator, debugger and compiler for the NDH architecture - Emulator for CTF NDH 2k12
+- [**28**星][7m] [C++] [frida/v8](https://github.com/frida/v8) Frida depends on V8
+- [**28**星][2y] [C] [shadowsocksr-live/ssrdroid](https://github.com/shadowsocksr-live/ssrdroid) ShadowsocksR (SSR) for Android
+- [**28**星][1y] [C++] [lordnoteworthy/windows-exploitation](https://github.com/lordnoteworthy/windows-exploitation) My notes while studying Windows exploitation
+- [**28**星][11m] [HTML] [twintproject/twint-explorer](https://github.com/twintproject/twint-explorer) TWINT Graph Visualizer
+- [**28**星][4m] [Java] [dineshshetty/fridaloader](https://github.com/dineshshetty/fridaloader) A quick and dirty app to download and launch Frida on Genymotion
+- [**28**星][11m] [Shell] [angorafuzzer/fuzzingrealprogrambenchstatistics](https://github.com/angorafuzzer/fuzzingrealprogrambenchstatistics) List the real world programs evaluated in fuzzing papers.
+- [**28**星][4y] [Swift] [urinx/device-9](https://github.com/urinx/device-9) 实时监测网速,IP,内存大小,温度等设备信息并显示在通知中心的 iOS App
+- [**28**星][9y] [Py] [spiderlabs/deblaze](https://github.com/spiderlabs/deblaze) Performs method enumeration and interrogation against flash remoting end points.
+- [**28**星][1y] [Ruby] [igrigorik/em-socksify](https://github.com/igrigorik/em-socksify) Transparent proxy support for any EventMachine protocol
+- [**28**星][12m] [Py] [wyatu/pentestscripts](https://github.com/wyatu/pentestscripts) Some scripts for penetration testing
+- [**28**星][3y] [HTML] [cryptogenic/ps4console](https://github.com/cryptogenic/ps4console) A successor to PS4Playground, emulates a shell-like environment to interact with the PlayStation 4.
+- [**28**星][2m] [Rust] [timvisee/pixelpwnr](https://github.com/timvisee/pixelpwnr)
+- [**28**星][3y] [Java] [tribler/app-to-app-communicator](https://github.com/tribler/app-to-app-communicator) Create an attack-resilient network out of smartphones, no-PC-needed (proof of concept)
+- [**28**星][26d] [C] [kasif-dekel/whatsapp-rce-patched](https://github.com/kasif-dekel/whatsapp-rce-patched) cve-2019-11931
+- [**28**星][1m] [Assembly] [vxunderground/family](https://github.com/vxunderground/family) Collection of Malware source code by Language and Family.
+- [**28**星][1m] [Shell] [privacyint/appdata-environment-desktop](https://github.com/privacyint/appdata-environment-desktop) A selection of script and the manual for Privacy International's data interception environment
+- [**28**星][2m] [JS] [benoitsevens/applying-ttd-to-malware-analysis](https://github.com/benoitsevens/applying-ttd-to-malware-analysis) Resources for the workshop titled "Repacking the unpacker: Applying Time Travel Debugging to malware analysis", given at HackLu 2019
+- [**28**星][4y] [C] [scallywag/nbtscan](https://github.com/scallywag/nbtscan) NetBIOS scanning tool. Currently segfaults!
+- [**28**星][1m] [C#] [cobbr/c2bridge](https://github.com/cobbr/c2bridge) C2Bridges allow developers to create new custom communication protocols and quickly utilize them within Covenant.
+- [**28**星][2m] [Py] [x1tan/cve-2019-13025](https://github.com/x1tan/cve-2019-13025) Connect Box CH7465LG (CVE-2019-13025)
+- [**28**星][2y] [Py] [vpnguy-zz/handyheaderhacker](https://github.com/vpnguy-zz/HandyHeaderHacker) Examine HTTP response headers for common security issues
+- [**28**星][7d] [C#] [geta/404handler](https://github.com/Geta/404handler) The popular 404 handler for EPiServer, enabling better control over your 404 page in addition to allowing redirects for old urls that no longer works.
+- [**28**星][4y] [Ruby] [praetorian-code/dert](https://github.com/praetorian-code/dert) DNS Enumeration and Reconnaissance Tool
+- [**28**星][3y] [Py] [zonksec/weblogic-serialization-exploit-updated](https://github.com/zonksec/weblogic-serialization-exploit-updated) Updated the FoxGlove Security WebLogic serialization exploit.
+- [**28**星][5y] [Py] [zombiesam/wikigen](https://github.com/zombiesam/wikigen) A script to generate wordlists out of wikipedia pages. Should support most of the subdomains. Some ugly code may occur
+- [**28**星][1y] [Py] [zhanghaoyil/hawk-i](https://github.com/zhanghaoyil/hawk-i) Automatic extract anomalious Web attack Payloads with Unsupervised Machine Learning algorithms
+- [**28**星][3y] [C] [zenware/bluemaho](https://github.com/zenware/bluemaho) BlueMaho is GUI-shell (interface) for suite of tools for testing security of bluetooth devices. It is freeware, opensource, written on python, uses wxPyhon. It can be used for testing BT-devices for known vulnerabilities and major thing to do – testing to find unknown vulns. Also it can form nice statistics.
+- [**28**星][4m] [Java] [zaproxy/zap-api-java](https://github.com/zaproxy/zap-api-java) OWASP ZAP Java API
+- [**28**星][8y] [JS] [zanelackey/projects](https://github.com/zanelackey/projects)
+- [**28**星][8d] [C++] [z4yx/supervisor-mips32](https://github.com/z4yx/supervisor-mips32) 计算机组成原理课程32位监控程序
+- [**28**星][10m] [Shell] [yulewang/brook](https://github.com/yulewang/brook) Brook 端口转发 一键管理脚本修改版 增加了对动态域名的支持 基于逗比版本修改而来
+- [**28**星][1y] [C] [yifiheaven/magicwall](https://github.com/yifiheaven/magicwall)
+- [**28**星][5y] [C++] [yawning/obfsclient](https://github.com/yawning/obfsclient) A C++11 obfs2/3 Tor managed pluggable transport client
+- [**28**星][1y] [Py] [xyzz/vita-ida-physdump](https://github.com/xyzz/vita-ida-physdump) help with physical memory dump reversing
+- [**28**星][8m] [Py] [xayon/pyrcrack](https://github.com/xayon/pyrcrack) Python Aircrack-ng bindings
+- [**28**星][2y] [C] [x64dbg/slothbp](https://github.com/x64dbg/slothbp) Collaborative Breakpoint Manager for x64dbg.
+- [**28**星][2y] [C] [x64dbg/plugintemplate](https://github.com/x64dbg/plugintemplate) Plugin template for x64dbg. Releases:
+- [**28**星][12m] [Jupyter Notebook] [wlmeng11/rtl-ultrasound](https://github.com/wlmeng11/rtl-ultrasound)
+- [**28**星][1y] [JS] [webpack/source-list-map](https://github.com/webpack/source-list-map) Fast line to line SourceMap generator.
+- [**28**星][2y] [C] [wanttobeno/win64driverstudy_src](https://github.com/wanttobeno/win64driverstudy_src) WIN64驱动编程基础教程-源码 作者:胡文亮
+- [**28**星][1y] [JS] [wahengchang/nodejs-security-must-know](https://github.com/wahengchang/nodejs-security-must-know) It is a note about security on nodejs
+- [**28**星][3y] [C] [vusec/typearmor](https://github.com/vusec/typearmor) 缓解高级代码重用攻击。论文“一个艰难的决定:在二进制级别缓解高级的代码重用攻击”的具体实现。
+- [**28**星][9m] [PHP] [visualbasic6/google-drive-exploit](https://github.com/visualbasic6/google-drive-exploit) active exploit leaking full names associated with some email addresses including but not limited to gmail
+- [**28**星][5m] [JS] [virink/as_plugin_godofhacker](https://github.com/virink/as_plugin_godofhacker) 黑客神器,谁用谁知道!
+- [**28**星][2y] [JS] [versprite/engage](https://github.com/versprite/engage) Tools and Materials for the Frida Engage Blog Series
+- [**28**星][6y] [MATLAB] [vedaldi/visualindex](https://github.com/vedaldi/visualindex) A simple demo of visual object matching using VLFeat
+- [**28**星][3y] [Py] [v1cker/poc-exp](https://github.com/v1cker/poc-exp)
+- [**28**星][3y] [uber/bug-bounty-page](https://github.com/uber/bug-bounty-page) A repo to make our changes more transparent to bug bounty researchers in our program (so they can see commits, etc).
+- [**28**星][2y] [PHP] [tuupola/whereami](https://github.com/tuupola/whereami) Common PHP interface for wifi positioning services
+- [**28**星][2m] [Shell] [tradichel/awssecurityautomationframework](https://github.com/tradichel/awssecurityautomationframework) Framework for reviewing and responding to events in AWS Flow Logs using Lambda Function
+- [**28**星][3y] [Py] [tr3jer/autohookspider](https://github.com/tr3jer/autohookspider) 将自动爬虫的结果判断是否属于hooks,并不断抓取url爬啊爬。
+- [**28**星][2y] [Makefile] [torbsd/openbsd-ports](https://github.com/torbsd/openbsd-ports) OpenBSD ports under development by TDP
+- [**28**星][1y] [Shell] [themiddleblue/dnsenum](https://github.com/themiddleblue/dnsenum) Bash script for DNS Enumeration.
+- [**28**星][15d] [HTML] [theforeman/foreman_openscap](https://github.com/theforeman/foreman_openscap) Foreman plug-in for displaying OpenSCAP audit reports
+- [**28**星][5m] [C++] [thalium/idatag](https://github.com/thalium/idatag) IDA plugin to explore and browse tags
+- [**28**星][3m] [Go] [telanflow/dictgenerate](https://github.com/telanflow/dictgenerate) 使用Go语言编写的社工字典生成器(The social engineering dictionary generator written by Go)
+- [**28**星][3y] [PHP] [talhasch/php-httpstat](https://github.com/talhasch/php-httpstat) PHP implementation of
+- [**28**星][3y] [Shell] [superkojiman/scanreport](https://github.com/superkojiman/scanreport) Take output from nmap and turn it into something easily searchable and readable.
+- [**28**星][7m] [Shell] [sukkaw/zsh-proxy](https://github.com/sukkaw/zsh-proxy)
+- [**28**星][11m] [C] [sqdwr/loadimageinject](https://github.com/sqdwr/loadimageinject) LoadImage Routine Inject Dll
+- [**28**星][8d] [Py] [sophoslabs/webassembly](https://github.com/sophoslabs/webassembly) Research on WebAssembly
+- [**28**星][5m] [JS] [skateman/purr](https://github.com/skateman/purr) Smuggle TCP connections through HTTP
+- [**28**星][10m] [JS] [shanselman/daskeyboard-q-nightscout](https://github.com/shanselman/daskeyboard-q-nightscout) Hooking up the DasKeyboard Q REST API to change the key colors in response to diabetic's glucose from NightScout
+- [**28**星][3y] [Shell] [securitygeneration/honeyport](https://github.com/securitygeneration/honeyport) Bash and Python Honeyport scripts
+- [**28**星][2y] [secarmalabs/iotchecklist](https://github.com/secarmalabs/iotchecklist) Baseline IoT security checklist. Consider security as early in development as possible and reap the rewards.
+- [**28**星][2y] [Go] [sakeven/mika](https://github.com/sakeven/mika) Mika - A Secure Proxy
+- [**28**星][11m] [Shell] [rokasurbelis/system_safety_test](https://github.com/rokasurbelis/system_safety_test)
+- [**28**星][2y] [Ruby] [richardc/puppet-datacat](https://github.com/richardc/puppet-datacat) Data composition types for puppet
+- [**28**星][5y] [C] [rfdslabs/mimosa-framework](https://github.com/rfdslabs/mimosa-framework) Mimosa Framework to abuse EPC functionality on CISCO Routers.
+- [**28**星][6d] [C++] [regehr/opt-fuzz](https://github.com/regehr/opt-fuzz) llvm opt fuzzer and bounded exhaustive test generator
+- [**28**星][3y] [Shell] [rccoder/awesome-shadowsocks-qt5-installation-on-debian](https://github.com/rccoder/awesome-shadowsocks-qt5-installation-on-debian) Installation Script For shadowsocks-Qt5 on Debian
+- [**28**星][10m] [Go] [razc411/gobd](https://github.com/razc411/gobd) A Golang covert backdoor using raw sockets.
+- [**28**星][5d] [C] [rapid7/mimikatz](https://github.com/rapid7/mimikatz) A little tool to play with Windows security
+- [**28**星][1m] [Py] [qsecure-labs/overlord](https://github.com/qsecure-labs/overlord) Overlord - Red Teaming Infrastructure Automation
+- [**28**星][4y] [CSS] [qll/attacking-browser-extensions](https://github.com/qll/attacking-browser-extensions) Test Suite and exemplary extensions of the "Attacking Browser Extensions" master's thesis
+- [**28**星][5y] [C] [qianshanhai/q-shell](https://github.com/qianshanhai/q-shell) Unix remote login tool, rootkit shell tool
+- [**28**星][6y] [Java] [pwntester/springbreaker](https://github.com/pwntester/springbreaker) Exploit PoC for Spring RCE issue (CVE-2011-2894)
+- [**28**星][2y] [Py] [pwn2winctf/2017](https://github.com/pwn2winctf/2017) Pwn2Win CTF 2017
+- [**28**星][9m] [JS] [puritys/chromesecureshell](https://github.com/puritys/chromesecureshell) Hack chrome secure shell for improving usability
+- [**28**星][2y] [JS] [psych0tr1a/elscripto](https://github.com/psych0tr1a/elscripto) XSS explot kit/Blind XSS framework/BurpSuite extension
+- [**28**星][5y] [Py] [phaeilo/vol-openvpn](https://github.com/phaeilo/vol-openvpn) A Volatility plugin to extract credentials from the memory of a OpenVPN client.
+- [**28**星][4y] [Py] [paulpc/nyx](https://github.com/paulpc/nyx) Threat Intelligence distribution
+- [**28**星][6y] [Shell] [packetforger/localroot](https://github.com/packetforger/localroot) Collection of tools for privesc on Linux
+- [**28**星][9m] [JS] [owasp/blt](https://github.com/owasp/blt) OWASP BLT is a bug logging tool to report issues and get points, companies are held accountable.
+- [**28**星][6y] [C++] [oct0xor/deci3dbg](https://github.com/oct0xor/deci3dbg) Ida Pro debugger module for Playstation 3
+- [**28**星][8m] [C#] [nyan-x-cat/dropless-malware](https://github.com/nyan-x-cat/dropless-malware) Download a payload and make it run from registry without droppng.
+- [**28**星][4y] [Java] [nvisium/moneyx](https://github.com/nvisium/moneyx) MoneyX is an intentionally vulnerable JSP application used for training developers in application security concepts.
+- [**28**星][3y] [Py] [netspi/asa_tools](https://github.com/netspi/asa_tools) Verification tools for CVE-2016-1287
+- [**28**星][2y] [C++] [nervous/greenkit-rootkit](https://github.com/nervous/greenkit-rootkit) GreenKit is an userland rootkit hiding its own files and mining bitcoins on compromised computers. Do /NOT/ download or use this rootkit for malicious purposes. Use it only for your own knowledge.
+- [**28**星][2y] [Py] [ne0nd0g/guinevere](https://github.com/ne0nd0g/guinevere) Automated Security Assessment Reporting Tool
+- [**28**星][1m] [nats-io/nats-general](https://github.com/nats-io/nats-general) General NATS Information
+- [**28**星][1y] [C] [mxmssh/netafl](https://github.com/mxmssh/netafl) winAFL patch to enable network-based apps fuzzing
+- [**28**星][8m] [Py] [mvrcrypto/bitp0wn](https://github.com/mvrcrypto/bitp0wn) Algorithms to re-compute a private key, to fake signatures and some other funny things with Bitcoin.
+- [**28**星][3y] [Py] [mvondracek/wifimitm](https://github.com/mvondracek/wifimitm) Automation of MitM Attack on Wi-Fi Networks
+- [**28**星][4y] [ms3fgx/tsatool](https://github.com/ms3fgx/tsatool) 3D printed TSA keys in a pocketable "Swiss Army" style tool.
+- [**28**星][7d] [Py] [mrwn007/m3m0](https://github.com/mrwn007/m3m0) M3m0 Tool
+- [**28**星][12m] [C] [mrmacete/r2scripts](https://github.com/mrmacete/r2scripts) Collection of scripts for radare2
+- [**28**星][1y] [Py] [mprhode/malware-prediction-rnn](https://github.com/mprhode/malware-prediction-rnn) RNN implementation with Keras for machine activity data to predict malware
+- [**28**星][6d] [HTML] [misp/misp-rfc](https://github.com/misp/misp-rfc) Specifications used in the MISP project including MISP core format
+- [**28**星][6d] [Shell] [misp/misp-cloud](https://github.com/misp/misp-cloud) misp-cloud - Cloud-ready images of MISP
+- [**28**星][5y] [Java] [mindmac/xposedautomation](https://github.com/mindmac/xposedautomation) A demo to show how to install Xposed and enable Xposed based module automatically
+- [**28**星][9m] [Go] [mimoo/eureka](https://github.com/mimoo/eureka) Need to encrypt a file before sending it to someone? This is it.
+- [**28**星][1y] [Shell] [mikhbur/conformer](https://github.com/mikhbur/conformer) Password Guessing for different Web Portals
+- [**28**星][5y] [C++] [michael4338/tdi](https://github.com/michael4338/tdi) Windows Kernel Driver - Create a driver device in TDI layer of windows kernel to capture network data packets
+- [**28**星][3m] [Py] [michael-myers/macos-wpa-psk](https://github.com/michael-myers/macos-wpa-psk) PoC script showing that MacOS leaves the wireless key in NVRAM, in plaintext and accessible to anyone.
+- [**28**星][5m] [Py] [mechpen/sockdump](https://github.com/mechpen/sockdump) Dump unix domain socket traffic with bpf
+- [**28**星][2y] [Java] [martinstyk/apkanalyzer](https://github.com/martinstyk/apkanalyzer) Java tool for analyzing Android APK files
+- [**28**星][3y] [JS] [markelog/adit](https://github.com/markelog/adit) SSH tunnels – in any way you want it
+- [**28**星][4m] [Py] [lufeirider/sqlchecker](https://github.com/lufeirider/sqlchecker) 注入检测工具
+- [**28**星][5m] [PHP] [lucasfrag/kali-linux-tools-interface](https://github.com/lucasfrag/kali-linux-tools-interface) Graphical Web interface developed to facilitate the use of security information tools.
+- [**28**星][1y] [C] [lpefferkorn/ipdecap](https://github.com/lpefferkorn/ipdecap) Decapsulate traffic encapsulated within GRE, IPIP, 6in4, ESP (ipsec) protocols, can also remove IEEE 802.1Q (virtual lan) header. Works with pcap files.
+- [**28**星][2y] [C] [l-n-s/transmission-i2p](https://github.com/l-n-s/transmission-i2p) Anonymous torrent client Transmission-I2P [UNMAINTAINED]
+- [**28**星][1y] [Py] [knownsec/decrypt-ransomware](https://github.com/knownsec/decrypt-ransomware)
+- [**28**星][6y] [Py] [kholia/exetractor-clone](https://github.com/kholia/exetractor-clone) Unpacker for packed Python executables. Supports PyInstaller and py2exe. This project is not updated anymore. Use "PyInstaller Extractor" and "unpy2exe" instead.
+- [**28**星][1y] [Py] [jumbo-wjb/jpentest](https://github.com/jumbo-wjb/jpentest) Jumbo Python Penetration testing framework
+- [**28**星][5m] [PS] [johnaho/cloakify-powershell](https://github.com/johnaho/cloakify-powershell) Cloak files using text based steganography output to obsfucate what data they contain. Coded in Powershell. This is a port of TryCatchHCF's Cloakify written in python
+- [**28**星][1m] [C++] [jnastarot/enma_pe](https://github.com/jnastarot/enma_pe) Cross-platform library for parsing and building PE\PE+ formats
+- [**28**星][7y] [Ruby] [jjyg/ssh_decoder](https://github.com/jjyg/ssh_decoder)
+- [**28**星][1y] [C++] [jiazhang0/seloader](https://github.com/jiazhang0/seloader) Secure EFI Loader designed to authenticate the non-PE files
+- [**28**星][4m] [Py] [jekil/udpot](https://github.com/jekil/udpot) Simple UDP honeypot script
+- [**28**星][2y] [Swift] [jeanshuang/potatso](https://github.com/jeanshuang/potatso) 适配Xcode9.3 iOS11.3 Swift3.3编译通过。 (unmaintained) Potatso is an iOS client that implements Shadowsocks proxy with the leverage of NetworkExtension framework in iOS 9.
+- [**28**星][6y] [Py] [jayeshchauhan/skanda](https://github.com/jayeshchauhan/skanda) OWASP Skanda - SSRF Exploitation Framework
+- [**28**星][3y] [Assembly] [inndy/ctf-from-zero-to-one](https://github.com/inndy/ctf-from-zero-to-one) TDOH Conf 2016 演講相關資料
+- [**28**星][5y] [Py] [infosec-au/webappsec-toolkit](https://github.com/infosec-au/webappsec-toolkit) Web Application Security related tools. Includes backdoors, proof of concepts and tricks
+- [**28**星][2y] [Py] [ihebski/pentest-chainsaw](https://github.com/ihebski/pentest-chainsaw) Scrapes Router Passwords From
+- [**28**星][4y] [C] [icewall/forcedelete](https://github.com/icewall/forcedelete) Windows driver including couple different techniques for file removal when regular operation isn't possible.
+- [**28**星][2y] [Py] [ice3man543/malscan](https://github.com/ice3man543/malscan) A Simple PE File Heuristics Scanners
+- [**28**星][2y] [Java] [ibey0nd/nstproxy](https://github.com/ibey0nd/nstproxy) 一款存储HTTP请求入库的burpsuite插件
+- [**28**星][3m] [Shell] [hybtoy/ssrrmu](https://github.com/hybtoy/ssrrmu) ShadowsocksRR (shadowsocksr/ssr) multi-user and single-user install script
+- [**28**星][11m] [C++] [hoangprod/leospecial-veh-hook](https://github.com/hoangprod/leospecial-veh-hook) Vectored Exception Handling Hooking Class
+- [**28**星][5y] [C++] [hempnall/broyara](https://github.com/hempnall/broyara) integrating bro into yara
+- [**28**星][3y] [Py] [harryr/nanac](https://github.com/harryr/nanac) Tiny modular assembler & vm for lightweight control microcode
+- [**28**星][5y] [Py] [hannob/pgpecosystem](https://github.com/hannob/pgpecosystem) Scripts to parse and analyze pgp key server data
+- [**28**星][8y] [C] [hackedteam/driver-win32](https://github.com/hackedteam/driver-win32) Windows (32bit) agent driver
+- [**28**星][3d] [Py] [greenbone/python-gvm](https://github.com/greenbone/python-gvm) Greenbone Vulnerability Management Python Library
+- [**28**星][2y] [Py] [grayddq/passivedatasorting](https://github.com/grayddq/passivedatasorting) 自动化被动扫描系统分为数据源、数据处理、漏洞验证等三个子系统,本系统属于数据处理部分,抓取流量镜像的数据,进行分析过滤去重等操作,发送至消息队列中,等待PassiveSecCheck消费
+- [**28**星][1y] [TeX] [gossip-sjtu/k-hunt](https://github.com/gossip-sjtu/k-hunt) K-Hunt: Pinpointing Insecure Crypto Keys
+- [**28**星][2y] [Ruby] [godinezj/metasploit-framework](https://github.com/godinezj/metasploit-framework) Metasploit Framework
+- [**28**星][4y] [C] [gdbinit/teloader](https://github.com/gdbinit/teloader) A TE executable format loader for IDA
+- [**28**星][5y] [C] [gdbinit/mario](https://github.com/gdbinit/mario) The kernel component of rootpipe fix for Mavericks
+- [**28**星][5y] [C] [gdbinit/can_i_suid](https://github.com/gdbinit/can_i_suid) A TrustedBSD module to control execution of binaries with suid bit set
+- [**28**星][4m] [fuzzysecurity/bh-arsenal-2019](https://github.com/fuzzysecurity/bh-arsenal-2019) SilkETW & SilkService
+- [**28**星][3y] [Ruby] [fozavci/metasploit-framework-with-viproy](https://github.com/fozavci/metasploit-framework-with-viproy) Metasploit Framework with Viproy installed.
+- [**28**星][7m] [foryujian/yujianrdpcrack](https://github.com/foryujian/yujianrdpcrack) 御剑RDP爆破工具
+- [**28**星][3y] [Py] [floyd-fuh/burp-httpfuzzer](https://github.com/floyd-fuh/burp-httpfuzzer) Burp plugin to do random fuzzing of HTTP requests
+- [**28**星][6y] [Py] [flo354/iosforensic](https://github.com/flo354/iosforensic) iOS forensic tool
+- [**28**星][4y] [JS] [firebug/firequery](https://github.com/firebug/firequery) Firefox plugin for jQuery development
+- [**28**星][2y] [C++] [fdfalcon/typeisolationdbg](https://github.com/fdfalcon/typeisolationdbg) A little WinDbg extension to help dump the state of Win32k Type Isolation structures.
+- [**28**星][4y] [C] [erriy/data_pirate](https://github.com/erriy/data_pirate)
+- [**28**星][19d] [C#] [ericzimmerman/amcacheparser](https://github.com/ericzimmerman/amcacheparser) Parses amcache.hve files, but with a twist!
+- [**28**星][2y] [PS] [enddo/hatdbg](https://github.com/enddo/hatdbg) Minimal WIN32 Debugger in powershell
+- [**28**星][3y] [Java] [elynx/pokemon-go-xposed-mitm](https://github.com/elynx/pokemon-go-xposed-mitm) MITM attack on Pokemon Go (c) via XPosed framework
+- [**28**星][25d] [Py] [eleemosynator/writeups](https://github.com/eleemosynator/writeups) Write-ups for crackmes and CTF challenges
+- [**28**星][2y] [Shell] [earayu/fastjson_jndi_poc](https://github.com/earayu/fastjson_jndi_poc) fastjson远程命令执行漏洞,jndi方式
+- [**28**星][2y] [C++] [dshikashio/pybag](https://github.com/dshikashio/pybag) CPython module for Windbg's dbgeng plus additional wrappers.
+- [**28**星][2y] [Java] [drme/ble-rc](https://github.com/drme/ble-rc) Control RC cars from your SmartPhone
+- [**28**星][8m] [Ruby] [dreadlocked/ctf-writeups](https://github.com/dreadlocked/ctf-writeups) CTF Write-ups
+- [**28**星][9d] [Py] [dottedmag/archmage](https://github.com/dottedmag/archmage) A reader and decompiler for files in the CHM format
+- [**28**星][1y] [Py] [dienuet/crossdomain](https://github.com/dienuet/crossdomain) CORS checking
+- [**28**星][2m] [Go] [dharmaofcode/gorp](https://github.com/dharmaofcode/gorp) A modular bug hunting and web application pentesting framework written in Go
+- [**28**星][2y] [defcon-russia/shortcut_auto_bind](https://github.com/defcon-russia/shortcut_auto_bind) Windows LNK/URL shortcut auto-binding hotkey (not a bug, feature)
+- [**28**星][3y] [Py] [deadbits/arcreactor](https://github.com/deadbits/arcreactor) open-source intelligence gathering for SIEMs <3
+- [**28**星][1m] [Shell] [dcso/misp-dockerized](https://github.com/dcso/misp-dockerized)
+- [**28**星][18d] [Py] [darksecdevelopers/absorber](https://github.com/darksecdevelopers/absorber) An advance keylogger that works and also logs special keys including uppercase letters as well.
+- [**28**星][2y] [ObjC] [dannagle/packetsender-ios](https://github.com/dannagle/packetsender-ios) Packet Sender for iOS, Send/Receive UDP/TCP
+- [**28**星][4y] [C] [ctz/sgx-pwenclave](https://github.com/ctz/sgx-pwenclave) Using SGX to harden password hashing
+- [**28**星][3y] [JS] [ctxis/pac-leak-demo](https://github.com/ctxis/pac-leak-demo) PAC HTTPS leak demo from DEF CON 24 'Toxic Proxies' talk
+- [**28**星][9m] [Py] [ctxis/cbrcli](https://github.com/ctxis/cbrcli) Command line interface to Carbon Black Response
+- [**28**星][7m] [Py] [cryptolu/whitebox](https://github.com/cryptolu/whitebox) White-box Analysis and Implementation Tools
+- [**28**星][2m] [Py] [cryptax/droidlysis](https://github.com/cryptax/droidlysis) Property extractor for Android apps
+- [**28**星][3y] [Py] [crowdstrike/chopshop](https://github.com/crowdstrike/chopshop) Mitre chopshop network decoder framework
+- [**28**星][4y] [JS] [crisu83/ctf-game](https://github.com/crisu83/ctf-game) Fast-paced hot seat multiplayer game written in modern JavaScript.
+- [**28**星][7y] [C++] [cr4sh/dbgcb](https://github.com/cr4sh/dbgcb) Engine for communication with remote kernel debugger (KD, WinDbg) from drivers and applications
+- [**28**星][12m] [PS] [countercept/ppid-spoofing](https://github.com/countercept/ppid-spoofing) Scripts for performing and detecting parent PID spoofing
+- [**28**星][6y] [JS] [codenothing/argv](https://github.com/codenothing/argv) Node based command line argument parser
+- [**28**星][2m] [Java] [codehaus-plexus/plexus-archiver](https://github.com/codehaus-plexus/plexus-archiver)
+- [**28**星][3y] [C#] [cannanlly/gogotester](https://github.com/cannanlly/gogotester) 原版基础上修改bug和优化使用体验
+- [**28**星][10m] [JS] [calidog/certstream-js](https://github.com/calidog/certstream-js) Javascript library for connecting to the CertStream network.
+- [**28**星][4y] [Java] [burp-hash/burp-hash](https://github.com/burp-hash/burp-hash)
+- [**28**星][3y] [brandonprry/clamav-fuzz](https://github.com/brandonprry/clamav-fuzz) A fuzz job for ClamAV
+- [**28**星][1y] [C] [bot-man-jl/wfp-traffic-redirection-driver](https://github.com/bot-man-jl/wfp-traffic-redirection-driver) WFP Traffic Redirection Driver is used to redirect NIC traffic on network layer and framing layer, based on Windows Filtering Platform (WFP).
+- [**28**星][7m] [Py] [bnbdr/wd-rce](https://github.com/bnbdr/wd-rce) WD My Cloud PoC exploit
+- [**28**星][2y] [Java] [bit4woo/gui_burp_extender_para_encrypter](https://github.com/bit4woo/gui_burp_extender_para_encrypter) Burp_Extender_para_encrypter
+- [**28**星][4y] [PHP] [belove/avhbf](https://github.com/belove/avhbf) Advanced virtual host bruteforcer
+- [**28**星][3y] [Py] [baltimorechad/pyonionscan](https://github.com/baltimorechad/pyonionscan) Dark Web OSINT With Python and OnionScan
+- [**28**星][4m] [Py] [azmatt/anaximander](https://github.com/azmatt/anaximander) Python Code to Map Cell Towers From a Cellebrite Android Dump
+- [**28**星][3y] [Py] [ayrx/tlsenum](https://github.com/ayrx/tlsenum) A command line tool to enumerate TLS cipher-suites supported by a server
+- [**28**星][2m] [Py] [armissecurity/urgent11-detector](https://github.com/armissecurity/urgent11-detector) URGENT/11 detection tool by Armis
+- [**28**星][2m] [C] [arm-software/sbsa-acs](https://github.com/arm-software/sbsa-acs) ARM Enterprise: SBSA Architecture Compliance Suite
+- [**28**星][7m] [Py] [antoinet/obike](https://github.com/antoinet/obike) Reverse engineering of the oBike protocol communication (BLE and HTTP)
+- [**28**星][11m] [Py] [antid0tecom/ipad_accessory_research](https://github.com/antid0tecom/ipad_accessory_research) Research into Security of Apple Smart Keyboard and Apple Pencil
+- [**28**星][6y] [Ruby] [andrewsmhay/brisket](https://github.com/andrewsmhay/brisket) Brisket is a collection of frontend scripts for masscan, zmap, and nmap, in addition data manipulation scripts
+- [**28**星][1y] [C++] [allocandinit/ollvm5.0.1](https://github.com/allocandinit/ollvm5.0.1) obfuscator 基于 llvm 5.0.1 版本
+- [**28**星][2y] [JS] [allglorytothehypnotoad/nodescan](https://github.com/allglorytothehypnotoad/nodescan) scans network for hosts and open ports
+- [**28**星][1y] [Py] [alienwithin/scripts-sploits](https://github.com/alienwithin/scripts-sploits) A number of scripts POC's and problems solved as pentests move along.
+- [**28**星][1y] [JS] [alephsecurity/spectrebrowserresearch](https://github.com/alephsecurity/spectrebrowserresearch)
+- [**28**星][6m] [airbus-seclab/gustave](https://github.com/airbus-seclab/gustave)
+- [**28**星][2y] [Py] [ahmadnourallah/pysploit-framework](https://github.com/ahmadnourallah/pysploit-framework) free exploit framework written use python language version 3.3
+- [**28**星][1y] [C++] [abatchy17/hevd-exploits](https://github.com/abatchy17/hevd-exploits) Exploit code used for the HackSysExtremeVulnerableDriver.
+- [**28**星][3y] [C] [a7vinx/liinux](https://github.com/a7vinx/liinux) A linux rootkit works on kernel 4.0.X or higher
+- [**28**星][1y] [Py] [98587329/web-scan](https://github.com/98587329/web-scan) jboss,tomcat,weblogic,未授权访问扫描工具
+- [**28**星][1m] [Py] [4n4nk3/wordlister](https://github.com/4n4nk3/wordlister) A simple wordlist generator and mangler written in python.
+- [**28**星][3y] [Py] [3gstudent/fuzzbunch](https://github.com/3gstudent/fuzzbunch) NSA finest tool
+- [**28**星][1y] [Py] [0xacb/github-desktop-poc](https://github.com/0xacb/github-desktop-poc) Github Desktop RCE PoC
+- [**28**星][3y] [Py] [0x71/cuckoo-linux](https://github.com/0x71/cuckoo-linux) Linux malware analysis based on Cuckoo Sandbox.
+- [**28**星][3y] [Shell] [0utrider/malrecon](https://github.com/0utrider/malrecon) malrecon:基本的恶意代码检测和分析工具,Shell 编写
+- [**27**星][2y] [syst3ma/awesome_cisco_exploitation](https://github.com/syst3ma/awesome_cisco_exploitation) A curated list of awesome Cisco exploitation resources
+- [**27**星][11m] [Java] [adolfintel/notebot](https://github.com/adolfintel/notebot) A ripoff of Microsoft Sticky Notes
+- [**27**星][9d] [snail007/goproxy-cn](https://github.com/snail007/goproxy-cn) 高性能的http代理、https代理、socks5代理、ss代理、内网穿透、内网穿透p2p、内网穿透代理、内网穿透反向代理、内网穿透服务器、游戏盾、游戏高防、游戏代理,支持API代理认证。websocke代理、tcp代理、udp代理、socket代理、高仿服务器。支持正向代理、反向代理、透明代理、TCP内网穿透、UDP内网穿透、HTTP内网穿透、HTTPS内网穿透、https代理负载均衡、http代理负载均衡、socks5代理负载均衡、socket代理负载均衡、ss代理负载均衡、TCP/UDP端口映射、SSH中转、TLS加密传输、协议转换、防污染DNS代理,限速,限连接数。官方QQ交流群: 42805407。
+- [**27**星][2y] [Py] [spiderlabs/modsecurity-log-utilities](https://github.com/spiderlabs/modsecurity-log-utilities) Set of CLI tools to transform ModSecurity logs into a meaningful information, given a context.
+- [**27**星][10m] [radareorg/r2jp](https://github.com/radareorg/r2jp) Japanese Community of radare2
+- [**27**星][3y] [Ruby] [infobyte/cve-2016-2776](https://github.com/infobyte/cve-2016-2776) CVE-2016-2776
+- [**27**星][2y] [PS] [gimini/tartarus](https://github.com/gimini/tartarus) Fileless Ransomware Example
+- [**27**星][2y] [JS] [cyrus-and/chrome-page-graph](https://github.com/cyrus-and/chrome-page-graph) Chrome extension to generate interactive page dependency graphs
+- [**27**星][1y] [JS] [samyk/crak](https://github.com/samyk/crak) Crash Royale Attack Kit
+- [**27**星][7d] [Go] [getlantern/lampshade](https://github.com/getlantern/lampshade) Obfuscated encrypted network protocol for Lantern
+- [**27**星][4y] [Py] [averagesecurityguy/blue](https://github.com/averagesecurityguy/blue) Scripts that are suited for blue teams
+- [**27**星][1m] [tidesec/auto_pentest_tool_course](https://github.com/tidesec/auto_pentest_tool_course) 《自动化漏洞挖掘技术实践》相关资料及脚本
+- [**27**星][27d] [Shell] [security-onion-solutions/securityonion-docker](https://github.com/security-onion-solutions/securityonion-docker) Docker files for Security Onion
+- [**27**星][3y] [Py] [paranoidninja/pisociety](https://github.com/paranoidninja/pisociety) Inspired from Mr. Robot I started developing this framework which can create 3vil twins, ddos Wireless networks, bypass HSTS(partial) and many more.This project is a work in progress and will be updated and fixed regularly for any issues found.
+- [**27**星][3y] [Assembly] [fsecurelabs/avrop](https://github.com/fsecurelabs/avrop) ROP based Movfuscator VM
+- [**27**星][4y] [Ruby] [thesp0nge/wordstress](https://github.com/thesp0nge/wordstress) A security scanner for Wordpress blogging engine
+- [**27**星][7y] [hak5darren/ducky-flasher](https://github.com/hak5darren/ducky-flasher) Automatically exported from code.google.com/p/ducky-flasher
+- [**27**星][3m] [Py] [nccgroup/nobex](https://github.com/nccgroup/nobex) nOBEX allows emulating the PBAP, MAP, and HFP profiles to test vehicle infotainment systems and similar devices using these profiles
+- [**27**星][5m] [C#] [netspi/daft](https://github.com/netspi/daft) DAFT: Database Audit Framework & Toolkit
+- [**27**星][4y] [Py] [hephaest0s/creatorrc](https://github.com/hephaest0s/creatorrc) Create torrc files optimized for speed, security, or avoiding captchas
+- [**27**星][4m] [JS] [purplei2p/i2pd-tools](https://github.com/purplei2p/i2pd-tools) Some useful tools for I2P
+- [**27**星][8m] [offensive-security/kali-sly-pi](https://github.com/offensive-security/kali-sly-pi) kali-sly-pi
+- [**27**星][2y] [C#] [zaczero/sharploader](https://github.com/zaczero/sharploader)
+- [**27**星][2y] [Shell] [digivill/all-in-one-wifi-cracker](https://github.com/digivill/all-in-one-wifi-cracker) Linux All in One Wifi Cracker
+- [**27**星][4m] [PS] [glenrobinson72/tableau-powershell-scripts](https://github.com/glenrobinson72/tableau-powershell-scripts) Repository of Powershell Scripts for Tableau
+- [**27**星][1y] [Shell] [edoverflow/h1-cli](https://github.com/edoverflow/h1-cli) A CLI tool to interact with hackerone.com. This was my submission for HackerOne's Summer 2018 Hack Day.
+- [**27**星][5m] [HTML] [firewalltutor/firewalltutor.github.io](https://github.com/firewalltutor/firewalltutor.github.io) fire wall tutor 自建梯子教程 Google 翻墙 科学上网 代理工具 一键安装
+- [**27**星][4m] [Py] [mvelazc0/purplespray](https://github.com/mvelazc0/purplespray) PurpleSpray is an adversary simulation tool that executes password spray behavior under different scenarios and conditions with the purpose of generating attack telemetry in properly monitored Windows enterprise environments
+- [**27**星][1m] [vgkintsugi/ghidra-segasaturn-processor](https://github.com/vgkintsugi/ghidra-segasaturn-processor) A Ghidra processor module for the Sega Saturn (SuperH SH-2)
+- [**27**星][2y] [JS] [imshubhamsingh/farmerchain](https://github.com/imshubhamsingh/farmerchain) A collaborative and collective pool farming system with built in blockchain based self financing system to help farmers become self-reliant. | ᴘʀᴏᴏꜰ ᴏꜰ ᴄᴏɴᴄᴇᴘᴛ
+- [**27**星][4m] [Java] [usdag/cstc](https://github.com/usdag/cstc)
+- [**27**星][2y] [Py] [dixel/wifi-linux](https://github.com/dixel/wifi-linux) Simple python script to monitor access point signal strength.
+- [**27**星][5y] [Py] [bendemott/captiveportal](https://github.com/bendemott/captiveportal) A captive portal that can be used on most linux distributions.
+- [**27**星][6d] [C++] [vulcainreo/dvid](https://github.com/vulcainreo/dvid) Damn Vulnerable IoT Device
+- [**27**星][29d] [C++] [gdabah/win32k-bugs](https://github.com/gdabah/win32k-bugs) Dump of win32k POCs for bugs I've found
+- [**27**星][3m] [grapheneos/os_issue_tracker](https://github.com/grapheneos/os_issue_tracker) Issue tracker for GrapheneOS Android Open Source Project hardening work. Standalone projects like Auditor, AttestationServer and hardened_malloc have their own dedicated trackers.
+- [**27**星][5m] [C#] [axdsan/dnspy-stringsanalyzer](https://github.com/axdsan/dnspy-stringsanalyzer) Plugin for DnSpy - Analyze through assemblies and display their strings.
+- [**27**星][2m] [hrt/anticheatjs](https://github.com/hrt/anticheatjs) Javascript Anti Cheats 101
+- [**27**星][1m] [C] [usineur/sdlpop](https://github.com/usineur/SDLPoP) An open-source port of Prince of Persia, based on the disassembly of the DOS version.
+- [**27**星][5y] [C] [exploiteers/nestdfuattack](https://github.com/exploiteers/NestDFUAttack) Packages to attack the Google Nest's DFU mode.
+- [**27**星][1y] [C++] [fdiskyou/winalloctracer](https://github.com/fdiskyou/WinAllocTracer) Pintool that logs and tracks calls to RtlAllocateHeap, RtlReAllocateHeap, RtlFreeHeap, VirtualAllocEx, and VirtualFreeEx.
+- [**27**星][7y] [Java] [alessiodallapiazza/wpscan](https://github.com/alessiodallapiazza/WPScan)
+- [**27**星][1y] [Jupyter Notebook] [aicoe/prometheus-data-science](https://github.com/AICoE/prometheus-data-science) A collection of analysis, analytics, and machine learning techniques for time series forecasting w/ Prometheus metrics
+- [**27**星][10m] [JS] [1lastbr3ath/s2o](https://github.com/1lastBr3ath/S2O) Chrome extension to inspect and find domains that don't resolve or have expired
+- [**27**星][6y] [osirislab/xnippet](https://github.com/osirislab/xnippet) A little tool to execute functions without debugging an entire executable. Originally written by Gonzalo J. Carracedo (BatchDrake).
+- [**27**星][3m] [Shell] [imwally/coffeeconnect](https://github.com/imwally/coffeeconnect) Connect to Starbucks WiFi without opening a browser.
+- [**27**星][2y] [Py] [taroballzchen/shecodject](https://github.com/TaroballzChen/shecodject) shecodject is a autoscript for shellcode injection by Python3 programing
+- [**27**星][16d] [PHP] [backdoorhub/shell-backdoor-list](https://github.com/backdoorhub/shell-backdoor-list)
+- [**27**星][2y] [tatsui-geek/malware-traffic-analysis.net](https://github.com/tatsui-geek/malware-traffic-analysis.net) Download pcap files from
+- [**27**星][2y] [shmilylty/kalitools](https://github.com/shmilylty/kalitools) Kali Linux工具清单
+- [**27**星][5m] [Java] [bit4woo/burp-api-drops](https://github.com/bit4woo/burp-api-drops) burp suite API 处理http请求和响应的基本流程
+- [**27**星][1y] [JS] [zjlywjh001/phrackctf-team-docker](https://github.com/zjlywjh001/phrackctf-team-docker) Docker image for phrackCTF-Platform-Team Project.
+- [**27**星][6y] [C++] [zhaolong/libparser](https://github.com/zhaolong/libparser) 解析静态库(Lib)文件,提取出所有函数信息,组织成自定义格式文件
+- [**27**星][4y] [Java] [zerothoughts/jndipoc](https://github.com/zerothoughts/jndipoc) Proof of concept showing how java byte code can be injected through InitialContext.lookup() calls
+- [**27**星][2y] [C] [zerosum0x0/zeroload](https://github.com/zerosum0x0/zeroload)
+- [**27**星][3m] [Java] [zerokilo/xexloaderwv](https://github.com/zerokilo/xexloaderwv) Ghidra Loader Module for X360 XEX Files
+- [**27**星][5m] [Smarty] [zee-ahmed/kube-owasp-zap](https://github.com/zee-ahmed/kube-owasp-zap) Owasp Zap chart for Kubernetes
+- [**27**星][4y] [Scheme] [yifanlu/cgen](https://github.com/yifanlu/cgen) CGEN的Fork,增加了生成IDA IDP模块的支持
+- [**27**星][2y] [Py] [yehgdotnet/s3scanner](https://github.com/yehgdotnet/s3scanner) Scan for open S3 buckets and dump
+- [**27**星][2y] [C] [yara-rules/r2yara](https://github.com/yara-rules/r2yara) r2yara - Module for Yara using radare2 information
+- [**27**星][7y] [Py] [yanlinlin82/plcscan](https://github.com/yanlinlin82/plcscan) Automatically exported from code.google.com/p/plcscan
+- [**27**星][3m] [Shell] [yahuiwong/docker-ss-tproxy](https://github.com/yahuiwong/docker-ss-tproxy) ss-redir 全局透明代理 (REDIRECT + TPROXY)
+- [**27**星][9m] [Py] [xajkep/xpt](https://github.com/xajkep/xpt) XPT - XSS Polyglot Tester
+- [**27**星][12m] [PS] [wuseman/wloader](https://github.com/wuseman/wloader) Windows 10 PRO Activator - No more backdoors via loaders from China and neither you will need any crack anymore that is valid for a week or two. This is script is written for powershell/cmd. This script will also removing all bloatware from Windows 10. Edit the script after your needs.
+- [**27**星][4y] [Py] [williballenthin/python-evt](https://github.com/williballenthin/python-evt) Pure Python parser for classic Windows Event Log files (.evt)
+- [**27**星][1y] [JS] [whizkydee/type-reverse](https://github.com/whizkydee/type-reverse)
+- [**27**星][5y] [Py] [webstersprodigy/webstersprodigy](https://github.com/webstersprodigy/webstersprodigy) misc pentest tools.
+- [**27**星][3y] [Py] [w4kfu/ida_loader](https://github.com/w4kfu/ida_loader) loader module 收集
+- [**27**星][3y] [C++] [vusec/typesan](https://github.com/vusec/typesan) TypeSan checks casts in C++ code - code released for CCS 2016
+- [**27**星][8m] [Py] [vngkv123/ctf](https://github.com/vngkv123/ctf) CTF binary exploit code
+- [**27**星][3m] [C++] [vertextoedge/windowfunctiontracer](https://github.com/vertextoedge/windowfunctiontracer) Window Executable file Function tracer using Debugging API
+- [**27**星][2y] [Py] [vergecurrency/electrum-xvg-tor](https://github.com/vergecurrency/electrum-xvg-tor) XVG TOR Electrum Client for connecting to the VERGE XVG TOR Electrum Server
+- [**27**星][8m] [vah13/oraclecve](https://github.com/vah13/oraclecve) Vulnerabilities which found in Oracle products
+- [**27**星][1y] [Py] [undeadsec/goblinwordgenerator](https://github.com/undeadsec/goblinwordgenerator) Python wordlist generator
+- [**27**星][2y] [Go] [u35s/ag](https://github.com/u35s/ag) 一个用go实现的命令行下查看每个网卡详细流量的小工具
+- [**27**星][3y] [Py] [toxic-ig/sql-xss](https://github.com/toxic-ig/sql-xss) A few SQL and XSS attack tools
+- [**27**星][2y] [HTML] [torque59/aws-vulnerable-lambda](https://github.com/torque59/aws-vulnerable-lambda) An AWS Lambda vulnerable application written in flask.
+- [**27**星][3y] [C] [tinysec/runwithdll](https://github.com/tinysec/runwithdll) windows create process with a dll load first time via LdrHook
+- [**27**星][1y] [Py] [tildedennis/malware](https://github.com/tildedennis/malware)
+- [**27**星][4y] [JS] [threatstack/pigsty](https://github.com/threatstack/pigsty) Pigsty is very efficient and customizable spooler for the unified2 file format.
+- [**27**星][3y] [HTML] [thoppe/5baa61e4c9b93f3f0682250b6cf8331b7ee68fd8](https://github.com/thoppe/5baa61e4c9b93f3f0682250b6cf8331b7ee68fd8) RNN-LSTM that learns passwords from a starting list
+- [**27**星][7m] [Py] [thombashi/pingparsing](https://github.com/thombashi/pingparsing) pingparsing is a CLI-tool/Python-library parser and transmitter for ping command output.
+- [**27**星][1y] [Py] [thesecondsun/pasm](https://github.com/thesecondsun/pasm) Linux assembler/disassembler based on Rasm2
+- [**27**星][10m] [Py] [thehive-project/synapse](https://github.com/thehive-project/synapse) a Meta Alert Feeder for TheHive, a Security Incident Response Platform
+- [**27**星][1m] [PHP] [telnet22/kn0ck](https://github.com/telnet22/kn0ck) Automated Tools Pentest
+- [**27**星][2m] [Erlang] [technion/ct_advisor](https://github.com/technion/ct_advisor) A monitoring service for Certificate Transparency
+- [**27**星][3y] [Perl] [tanjiti/perl_tools](https://github.com/tanjiti/perl_tools) perl小工具
+- [**27**星][1m] [Py] [szysec/ctftest](https://github.com/szysec/ctftest)
+- [**27**星][1y] [systemli/ansible-role-hidden-service](https://github.com/systemli/ansible-role-hidden-service) Ansible role to install & maintain Tor Hidden Services
+- [**27**星][2y] [Py] [syslog777/psak](https://github.com/syslog777/psak) The Pentester's Swiss Army Knife
+- [**27**星][1y] [Py] [sweetsoftware/artemis](https://github.com/sweetsoftware/artemis) Phishing webapp generator
+- [**27**星][3y] [Py] [swackhamer/vt_notification_puller](https://github.com/swackhamer/vt_notification_puller) VirusTotal Intelligence Notification Puller
+- [**27**星][2m] [C] [surajfale/passthrough-minifilter-driver](https://github.com/surajfale/passthrough-minifilter-driver) Windows mini-filter-driver. Blocks the access to USB drives.
+- [**27**星][2y] [JS] [supersaiyansss/wechatspider](https://github.com/supersaiyansss/wechatspider) 基于中间人攻击的微信公众号爬虫 2017/9/19更新
+- [**27**星][11m] [Smali] [strazzere/emacs-smali](https://github.com/strazzere/emacs-smali) Smali/Baksmali mode for Emacs
+- [**27**星][11d] [Go] [stefansundin/ec2-metadata-filter](https://github.com/stefansundin/ec2-metadata-filter) Enhance the security of the EC2 metadata service.
+- [**27**星][2y] [Ruby] [stebbins/strigil](https://github.com/stebbins/strigil) Strigil is an OSINT tool for collecting and aggregating social media data
+- [**27**星][3y] [stayliv3/iotsec](https://github.com/stayliv3/iotsec) 收集物联网安全相关资料
+- [**27**星][1m] [Py] [spuerbread/kun](https://github.com/spuerbread/kun) 插件化漏洞扫描器
+- [**27**星][6m] [C] [souhailhammou/kernelsymbolshelper](https://github.com/souhailhammou/kernelsymbolshelper) Retrieve pointers to undocumented kernel functions and offsets to members within undocumented structures to use in your driver by using the symbol server.
+- [**27**星][8y] [Ruby] [sophsec/wordlist](https://github.com/sophsec/wordlist) A Ruby library for generating and working with wordlists.
+- [**27**星][4y] [Py] [smeegesec/burp-importer](https://github.com/smeegesec/burp-importer) Burp Suite Importer - Connect to multiple web servers while populating the sitemap.
+- [**27**星][4m] [C] [skx/pam_pwnd](https://github.com/skx/pam_pwnd) A PAM module to test passwords against previous leaks at haveibeenpwned.com
+- [**27**星][2y] [HTML] [shikarisenpai/leak-ntlm-hash-via-html](https://github.com/shikarisenpai/leak-ntlm-hash-via-html) List of HTML tags for leaking NTLM-hashes
+- [**27**星][2y] [Lua] [shengnoah/riff](https://github.com/shengnoah/riff) 一个基于lua插件的pcap监控工具。
+- [**27**星][2y] [Makefile] [shadowsocksr-rm/openwrt-shadowsocksr](https://github.com/shadowsocksr-rm/openwrt-shadowsocksr) ShadowsocksR-libev for OpenWrt/LEDE
+- [**27**星][3m] [C#] [shack2/swebscan](https://github.com/shack2/swebscan) SWebScan是一款基于C#的Web目录扫描器。
+- [**27**星][2y] [C] [sentinel-one/minhook](https://github.com/sentinel-one/minhook) The Minimalistic x86/x64 API Hooking Library for Windows
+- [**27**星][2y] [PHP] [securelayer7/csv-injection-vulnerable-php-script-](https://github.com/securelayer7/csv-injection-vulnerable-php-script-) CSV injection Vulnerable Script.
+- [**27**星][9d] [C++] [schdub/protodec](https://github.com/schdub/protodec) Protobuf decompiler
+- [**27**星][3y] [C] [salmg/audiospoof](https://github.com/salmg/audiospoof) Magnetic stripe spoofer implementing audio waves.
+- [**27**星][1y] [TS] [robinyo/ionic-angular-schematics](https://github.com/robinyo/ionic-angular-schematics) Schematics for Ionic Angular
+- [**27**星][6m] [Shell] [rithvikvibhu/nh-magisk-wifi-firmware](https://github.com/rithvikvibhu/nh-magisk-wifi-firmware) This Magisk module adds the required firmware for external wireless adapters to be used with NetHunter.
+- [**27**星][1y] [Jupyter Notebook] [rh01/raspi-driving-car](https://github.com/rh01/raspi-driving-car) Capstone Auto RC Car
+- [**27**星][4d] [retarded-skid/skidsuite-3](https://github.com/retarded-skid/skidsuite-3) A collection of java reverse engineering tools and informational links
+- [**27**星][3y] [Py] [regit/opensvp](https://github.com/regit/opensvp) Opensvp is a security tool implementing "attacks" to be able to test the resistance of firewall to protocol level attack.
+- [**27**星][2y] [re4lity/secpaper](https://github.com/re4lity/secpaper) SecurityPaper For
+- [**27**星][1y] [PHP] [rakshitshah94/wordpress-wp-vcd-malware-attack-solution](https://github.com/rakshitshah94/wordpress-wp-vcd-malware-attack-solution) Another attack on wordpress 4.8
+- [**27**星][1y] [Java] [rabrg/refactored-client](https://github.com/rabrg/refactored-client) Refactoring the obfuscated v317 of the RuneScape (RuneTek 3) client.
+- [**27**星][9m] [C#] [raandree/managedpasswordfilter](https://github.com/raandree/managedpasswordfilter) Windows Password Filter that uses managed code internally
+- [**27**星][7m] [Py] [qingxp9/cve-2019-6203-poc](https://github.com/qingxp9/cve-2019-6203-poc) PoC for CVE-2019-6203, works on < iOS 12.2, macOS < 10.14.4
+- [**27**星][1y] [Py] [psiquelabs/dot2moon](https://github.com/psiquelabs/dot2moon) Tool that checks for path traversal traces in a given web application url, plus it is capable of multi-threading, set timeout and 5-layers verification.
+- [**27**星][2m] [C++] [progmboy/win32kext](https://github.com/progmboy/win32kext) windbg plugin for win32k debugging
+- [**27**星][3y] [PS] [powershell/dscconfigurations](https://github.com/powershell/dscconfigurations)
+- [**27**星][3y] [Java] [portswigger/xss-validator](https://github.com/portswigger/xss-validator) This is a burp intruder extender that is designed for automation and validation of XSS vulnerabilities.
+- [**27**星][7m] [Py] [plaperdr/blink-docker](https://github.com/plaperdr/blink-docker) Tool to mitigate browser fingerprint tracking
+- [**27**星][3y] [Visual Basic .NET] [phreak87/espeensy-and-peensy-payload-generator-esp8266-teensy-3.5-](https://github.com/phreak87/espeensy-and-peensy-payload-generator-esp8266-teensy-3.5-) Build your own Bad USB Stick for pentesting with wifi and dip switches
+- [**27**星][5m] [PHP] [paul-axe/ctf](https://github.com/paul-axe/ctf) CTF stuff
+- [**27**星][2y] [Shell] [owtf/owtf-docker](https://github.com/owtf/owtf-docker) Docker repository for OWTF (64-bit Kali)
+- [**27**星][1m] [C] [oracle/libdtrace-ctf](https://github.com/oracle/libdtrace-ctf) libdtrace-ctf is the Compact Type Format library used by DTrace on Linux
+- [**27**星][1y] [C] [openbsm/bsmtrace](https://github.com/openbsm/bsmtrace) BSM based intrusion detection system
+- [**27**星][7m] [PS] [onelogicalmyth/invoke-gppcse](https://github.com/onelogicalmyth/invoke-gppcse) Obtains a list of GPOs based on known Client Side Extensions (CSE) that normally contain passwords
+- [**27**星][5y] [C] [olsut/kinject-x64](https://github.com/olsut/kinject-x64) Kinject - kernel dll injector, currently available in x86 version, will be updated to x64 soon.
+- [**27**星][2y] [C] [okazakinagisa/vtbaseddebuggerwin7](https://github.com/okazakinagisa/vtbaseddebuggerwin7) Simple kernelmode driver.
+- [**27**星][9m] [Go] [nullhypothesis/sybilhunter](https://github.com/nullhypothesis/sybilhunter) Hunting for Sybils and anomalies in archived Tor network data.
+- [**27**星][9m] [Py] [nullarray/amplispy](https://github.com/nullarray/amplispy) Check local or remote list of DNS servers for suitability in DNS Amplification DoS.
+- [**27**星][1y] [Py] [nucypher/sputnik](https://github.com/nucypher/sputnik) Sputnik is an assembly language and interpreter for Fully Homomorphic Encryption
+- [**27**星][2y] [Java] [ninetysec/cknife](https://github.com/ninetysec/cknife) Cknife
+- [**27**星][4y] [C++] [nihilus/ida-pro-swf](https://github.com/nihilus/ida-pro-swf) 处理SWF文件
+- [**27**星][2y] [Py] [niexinming/safe_tool](https://github.com/niexinming/safe_tool) safe_tools
+- [**27**星][3y] [Py] [nicksanzotta/smbshakedown](https://github.com/nicksanzotta/smbshakedown) A simplified SMB Email Client Attack script used for pentests.
+- [**27**星][2y] [Py] [netspi/jig](https://github.com/netspi/jig) Jira Information Gatherer
+- [**27**星][4m] [C++] [netdex/twinject](https://github.com/netdex/twinject) Automated player and hooking framework for bullet hell games from the Touhou Project
+- [**27**星][3y] [Java] [nccgroup/jmxbf](https://github.com/nccgroup/jmxbf) A brute force program to test weak accounts configured to access a JMX Registry
+- [**27**星][4y] [Py] [nbshelton/bitdump](https://github.com/nbshelton/bitdump) A tool to extract database data from a blind SQL injection vulnerability.
+- [**27**星][4m] [Py] [n4xh4ck5/v1d0m](https://github.com/n4xh4ck5/v1d0m) Enumerate subdomains through Virustotal
+- [**27**星][2y] [Shell] [n3uz/t-pot-autoinstall](https://github.com/n3uz/t-pot-autoinstall) T-POT 针对中国区替换国内加速镜像
+- [**27**星][3y] [Py] [mzweilin/ipv6-attack-detector](https://github.com/mzweilin/ipv6-attack-detector) Google Summer of Code 2012 project, supported by The Honeynet Project organization.
+- [**27**星][2y] [Py] [mrts/burp-suite-http-proxy-history-converter](https://github.com/mrts/burp-suite-http-proxy-history-converter) Python script that converts Burp Suite HTTP proxy history files to CSV or HTML
+- [**27**星][1y] [Rust] [mortendahl/rust-paillier](https://github.com/mortendahl/rust-paillier) A pure-Rust implementation of the Paillier encryption scheme
+- [**27**星][2y] [Py] [morphuslabs/distinct](https://github.com/morphuslabs/distinct) Find potential Indicators of Compromise among similar Linux servers
+- [**27**星][1y] [C++] [moccajoghurt/memwars](https://github.com/moccajoghurt/memwars)
+- [**27**星][4y] [Py] [misteriouser/nextkey](https://github.com/misteriouser/nextkey) Free KeyLogger for Kali Linux and Ubuntu
+- [**27**星][11m] [Java] [minecraftforge/fernflower](https://github.com/minecraftforge/fernflower) Unofficial mirror of FernFlower Java decompiler, Subtree split of:
+- [**27**星][4y] [TeX] [mimoo/timing_attack_ecdsa_tls](https://github.com/mimoo/timing_attack_ecdsa_tls) Timing Attack on TLS' ECDSA signature
+- [**27**星][2y] [C#] [milo2012/owadump](https://github.com/milo2012/owadump) Search Email Accounts (OWA) for Passwords, PAN numbers as well as other Keywords
+- [**27**星][15d] [C] [microsoft/wafbench](https://github.com/microsoft/wafbench) WAFBench (wb) is a tool to measure the performance of WAF(Web Application Firewall) . It's based on latest code of ab (ApacheBench), and adds support for real trace replaying, framework of testing waf (FTW), and some other features.
+- [**27**星][1m] [Py] [mhaskar/xssradare](https://github.com/mhaskar/xssradare) A Cross Site Scripting scanner using selenium webdriver
+- [**27**星][10y] [C] [mcolyer/ifuse](https://github.com/mcolyer/ifuse) No longer actively developed here, see
+- [**27**星][5m] [Go] [mcandre/stank](https://github.com/mcandre/stank) stank: analyzers for determining whether files smell like rotten POSIX shell scripts, or faintly rosy like Ruby and Python scripts
+- [**27**星][3y] [C] [matteoserva/dirtycow-arm32](https://github.com/matteoserva/dirtycow-arm32)
+- [**27**星][2y] [mahmudz/malware](https://github.com/mahmudz/malware)
+- [**27**星][4m] [Go] [magisterquis/dnsbotnet](https://github.com/magisterquis/dnsbotnet) DNS Botnet Server and Client
+- [**27**星][6m] [C++] [m-r-j-o-h-n/swh-injector](https://github.com/m-r-j-o-h-n/swh-injector) An Injector that can inject dll into game process protected by anti cheat using SetWindowsHookEx.
+- [**27**星][4y] [C++] [luorui110120/idaplugins](https://github.com/luorui110120/idaplugins) 一堆IDA插件,无文档
+- [**27**星][5y] [Go] [lucdew/goransomware](https://github.com/lucdew/goransomware) Ransomware written in Go language
+- [**27**星][5y] [JS] [lubyruffy/livemapdemo](https://github.com/lubyruffy/livemapdemo) 地图实时攻击演示
+- [**27**星][8m] [C++] [lordnoteworthy/binary-auditing-solutions](https://github.com/lordnoteworthy/binary-auditing-solutions) Solutions for Binary Auditing Package:
+- [**27**星][3m] [PS] [loadenmb/tvasion](https://github.com/loadenmb/tvasion)
+- [**27**星][4m] [C++] [lianglixin/remotecontrol-x3](https://github.com/lianglixin/remotecontrol-x3) Saurik remote control software opensource, X17 is now available.
+- [**27**星][4y] [C] [lcxl/lcxl-shadow](https://github.com/lcxl/lcxl-shadow) LCXL影子系统
+- [**27**星][8y] [PHP] [koto/squid-imposter](https://github.com/koto/squid-imposter) Phishing attack w/HTML5 offline cache framework based on Squid proxy
+- [**27**星][11m] [C#] [kostapc/putty-tunnel-manager](https://github.com/kostapc/putty-tunnel-manager) Fixes and new release. PuTTY Tunnel Manager allows you to easily open tunnels, that are defined in a PuTTY session, from the system tray. You can also move the tunnels from PuTTY to PuTTY Tunnel Manager. This allows you to use PuTTY just for SSH shell sessions (without opening tunnels), and use PuTTY Tunnel Manager just for tunneling.
+- [**27**星][2y] [Go] [kensodev/micro-auth-proxy](https://github.com/kensodev/micro-auth-proxy) Github Auth proxy designed for micro-apps with static client and an API server
+- [**27**星][7y] [Py] [kcreyts/plugxdecoder](https://github.com/kcreyts/plugxdecoder) Decodes PlugX traffic and encrypted/compressed artifacts
+- [**27**星][8m] [C++] [karaulov/warcraftiii_dll_126-127](https://github.com/karaulov/warcraftiii_dll_126-127) Improvements for Warcraft III 126a used in new DoTA (d1stats.ru). Auto unload from w3x map and load to Warcraft III !
+- [**27**星][2y] [JS] [kafuuchinoq/v2raygeokit](https://github.com/kafuuchinoq/v2raygeokit)
+- [**27**星][2y] [Ruby] [kacperszurek/pentest_teamcity](https://github.com/kacperszurek/pentest_teamcity) Pentest TeamCity using Metasploit
+- [**27**星][7m] [C++] [slyd0g/timestomper](https://github.com/slyd0g/TimeStomper) PoC that manipulates Windows file times using SetFileTime() API
+- [**27**星][2y] [Go] [jsimonetti/tlstun](https://github.com/jsimonetti/tlstun) A socks tunnel client and server using websockets over http and tls
+- [**27**星][4m] [Py] [josue87/airopy](https://github.com/josue87/airopy) Get clients and access points.
+- [**27**星][6d] [C] [johndoe31415/ratched](https://github.com/johndoe31415/ratched) Ratched is a transparent Man-in-the-Middle TLS proxy intended for penetration testing
+- [**27**星][3y] [Py] [jofpin/sack](https://github.com/jofpin/sack) Identify connection of sessions for social engineering attacks.
+- [**27**星][6m] [C++] [jnastarot/soul_eater](https://github.com/jnastarot/soul_eater) it can extract functions from .dll, .exe, .sys and it be work! :)
+- [**27**星][4y] [JS] [jgegeny/gootkit-xswkit-js](https://github.com/jgegeny/gootkit-xswkit-js)
+- [**27**星][5d] [Java] [jenkinsci/remoting-kafka-plugin](https://github.com/jenkinsci/remoting-kafka-plugin) Jenkins Remoting over Kafka
+- [**27**星][7y] [C] [izsh/exploits](https://github.com/izsh/exploits) various exploits
+- [**27**星][4m] [C] [ispras/qemu](https://github.com/ispras/qemu)
+- [**27**星][12m] [C] [intelpt/winafl-intelpt](https://github.com/intelpt/winafl-intelpt) A fork of AFL for fuzzing Windows binaries
+- [**27**星][3y] [C++] [int0/ltmdm64_poc](https://github.com/int0/ltmdm64_poc) ltmdm64_poc:利用ltmdm64.sys 的漏洞绕过 Windows 7 SP1 x64 的代码完整性检查
+- [**27**星][4m] [C] [hyrathon/pocs](https://github.com/hyrathon/pocs) Some Proof-of-Concepts of bugs I found
+- [**27**星][4y] [C] [hxp2k6/smart7ec-scan-console](https://github.com/hxp2k6/smart7ec-scan-console) 基于Linux c开发的插件式扫描器(Python/lua)
+- [**27**星][8d] [Perl] [hknutzen/netspoc](https://github.com/hknutzen/netspoc) A network security policy compiler. Netspoc is targeted at large environments with a large number of firewalls and admins. Firewall rules are derived from a single rule set. Supported are Cisco IOS, NX-OS, ASA and IPTables.
+- [**27**星][6y] [C++] [hexgolems/pint](https://github.com/hexgolems/pint) A debugger backend and LUA wrapper for PIN
+- [**27**星][2y] [Go] [heptiolabs/certstream-slack](https://github.com/heptiolabs/certstream-slack) A small daemon that watches your domains in Certificate Transparency logs and posts them into Slack
+- [**27**星][6m] [hardenedlinux/embedded-iot_profile](https://github.com/hardenedlinux/embedded-iot_profile) embedded-iot_profile
+- [**27**星][2y] [JS] [hans-strudle/coinjack](https://github.com/hans-strudle/coinjack) Extension to HiJack/control web miners (like CoinHive)
+- [**27**星][4y] [C] [hannob/selftls](https://github.com/hannob/selftls) Sample application to let OpenSSL talk to itself (for fuzzing)
+- [**27**星][7m] [CSS] [hackeryunen/django-xss-platform](https://github.com/hackeryunen/django-xss-platform)
+- [**27**星][6y] [C] [gwroblew/detectxsslib](https://github.com/gwroblew/detectxsslib)
+- [**27**星][2y] [Shell] [gustavosotnas/avd-launcher](https://github.com/gustavosotnas/avd-launcher) Front-end to Android Virtual Devices (AVDs) emulator from Google.
+- [**27**星][8y] [Py] [greysign/pysec](https://github.com/greysign/pysec) python安全编程
+- [**27**星][11m] [C++] [giantpune/mailboxbomb](https://github.com/giantpune/mailboxbomb) a program used to build the mailbox bomb exploit for the Wii system menu.
+- [**27**星][3y] [Py] [gdataadvancedanalytics/r2graphity](https://github.com/gdataadvancedanalytics/r2graphity) Creating function call graphs based on radare2 framwork, plot fancy graphs and extract behavior indicators
+- [**27**星][2y] [Py] [fsacer/nps_payload](https://github.com/fsacer/nps_payload) This script will generate payloads for basic intrusion detection avoidance. It utilizes publicly demonstrated techniques from several different sources. Written by Larry Spohn (
+- [**27**星][3y] [fouroctets/android-malware-samples](https://github.com/fouroctets/android-malware-samples) Android Malware Samples
+- [**27**星][5m] [Py] [fluxchief/binaryninja_avr](https://github.com/fluxchief/binaryninja_avr) Binaryninja AVR architecture plugin with lifting
+- [**27**星][8y] [Py] [fitblip/pydbg](https://github.com/fitblip/pydbg) A pure-python win32 debugger interface.
+- [**27**星][8m] [Py] [fireeye/vocab_scraper](https://github.com/fireeye/vocab_scraper) Vocabulary Scraper script used in FLARE's analysis of Russian-language Carbanak source code
+- [**27**星][3y] [Py] [fare9/androidswissknife](https://github.com/fare9/androidswissknife) Framework for static and dynamic analysis in Android APKs
+- [**27**星][5m] [Py] [enovella/re-scripts](https://github.com/enovella/re-scripts) IDA/Ghidra/Radare2脚本收集(无文档)
+- [**27**星][5m] [HTML] [edoverflow/security-template](https://github.com/edoverflow/security-template) A static website template for security pages.
+- [**27**星][2y] [syst3ma/awesome_cisco_exploitation](https://github.com/syst3ma/awesome_cisco_exploitation) A curated list of awesome Cisco exploitation resources
+- [**27**星][4m] [dustyfresh/dictionaries](https://github.com/dustyfresh/dictionaries) curated password lists and various other lists/dictionaries for security things
+- [**27**星][2m] [Dockerfile] [dukebarman/ghidra-builder](https://github.com/dukebarman/ghidra-builder) Docker image for building ghidra RE framework from source
+- [**27**星][3y] [Py] [duk3luk3/onion-py](https://github.com/duk3luk3/onion-py) Python wrapper for the OnionOO tor status API
+- [**27**星][3y] [C++] [dragonfive/opencv_tld](https://github.com/dragonfive/opencv_tld) TLD:tracking-learning-detection 跟踪算法
+- [**27**星][8m] [Dockerfile] [dockage/tor-privoxy](https://github.com/dockage/tor-privoxy) Docker Tor proxy (http and shell) built on Alpine Linux
+- [**27**星][4y] [C++] [dkemp/vulndev](https://github.com/dkemp/vulndev) Vulnerability research and development.
+- [**27**星][5y] [Py] [djteller/memoryanalysis](https://github.com/djteller/memoryanalysis) Automated Memory Analysis (Black Hat Arsenal 2014)
+- [**27**星][6m] [HTML] [divyanshusahu/minictf](https://github.com/divyanshusahu/minictf) A platform build in django for hosting CTF events.
+- [**27**星][10m] [C] [devdavisnunez/vhbb](https://github.com/devdavisnunez/vhbb) Browse, download, and launch Vita homebrews!
+- [**27**星][8m] [Ruby] [dev-sec/ansible-apache-hardening](https://github.com/dev-sec/ansible-apache-hardening)
+- [**27**星][2y] [C] [deroko/activationcontexthook](https://github.com/deroko/activationcontexthook) activationcontexthook:Hook 进程,强制进程加载重定向的 DLL
+- [**27**星][3y] [Py] [deralexxx/firemisp](https://github.com/deralexxx/firemisp) FireEye Alert json files to MISP Malware information sharing plattform (Alpha)
+- [**27**星][2y] [C] [daveti/usbfilter](https://github.com/daveti/usbfilter) A USB layer firewall for the Linux kernel
+- [**27**星][1y] [PS] [danmcinerney/invoke-cats](https://github.com/danmcinerney/invoke-cats) Obfuscated Invoke-Mimikatz
+- [**27**星][3y] [danielmiessler/atm](https://github.com/danielmiessler/atm) The Adaptive Security Testing Methodology (ASTM) provides context-adjusted testing methodologies based on factors such as time available to test, platform, technology stack, versions, plugins, modules, and other variables.
+- [**27**星][3y] [PureBasic] [dadido3/d3hex](https://github.com/dadido3/d3hex) The first dataflow based Hex-Editor!
+- [**27**星][3y] [Py] [d4vinci/clickjacking-tester](https://github.com/d4vinci/clickjacking-tester) A python script designed to check if the website if vulnerable of clickjacking and create a poc
+- [**27**星][4y] [PHP] [ctubio/php-proxy-stratum](https://github.com/ctubio/php-proxy-stratum) ReactPHP stratum+tcp proxy between miners and pools with database and frontend.
+- [**27**星][7y] [C++] [colagrosso/avviso](https://github.com/colagrosso/avviso) (unmaintained) Ring the red phone from your Arduino
+- [**27**星][21d] [coky-t/owasp-mstg-ja](https://github.com/coky-t/owasp-mstg-ja) draft for Japanese translation of OWASP Mobile Security Testing Guide.
+- [**27**星][2y] [Java] [coh7eiqu8thabu/slocker](https://github.com/coh7eiqu8thabu/slocker) Source code of the SLocker Android ransomware
+- [**27**星][3y] [C] [cn33liz/hsevd-stackoverflow](https://github.com/cn33liz/hsevd-stackoverflow) HackSys Extreme Vulnerable Driver - StackOverflow Exploit
+- [**27**星][3y] [C] [chuckixia/mirai-source-code](https://github.com/chuckixia/mirai-source-code) Leaked Mirai Source Code - make it vagrantized
+- [**27**星][4y] [Py] [cheetz/icmpshock](https://github.com/cheetz/icmpshock) A scanning tool for the ShellShock bash vulnerability
+- [**27**星][10d] [JS] [checkmyhttps/checkmyhttps](https://github.com/checkmyhttps/checkmyhttps) We propose a user-friendly add-on that allows you to check if your encrypted web traffic (SSL/TLS) towards secured Internet servers (HTTPS) is not intercepted (being listened to).
+- [**27**星][11m] [JS] [chainsecurity/constantinople-reentrancy](https://github.com/chainsecurity/constantinople-reentrancy) Vulnerable code example including tests for Constantinople Reentrancy
+- [**27**星][10m] [HTML] [cainiaocome/xssgun](https://github.com/cainiaocome/xssgun) xss payloads generator
+- [**27**星][6y] [Py] [c0d3sh3lf/android_forensics](https://github.com/c0d3sh3lf/android_forensics) Bypassing Android Pattern Lock
+- [**27**星][10d] [JS] [bowlingtoolkit/discord-bots-hack-code](https://github.com/bowlingtoolkit/discord-bots-hack-code) Discord Bots Hacking
+- [**27**星][1y] [Perl] [bollwarm/app-waf](https://github.com/bollwarm/app-waf) A simple waf application .用来实时探测web 非法访问,统计非法访问的ip ,web状态,访问url,来源web url。结合iptables和nginx可以实现实现实时封禁。
+- [**27**星][2y] [PHP] [blackfan/web-inf-dict](https://github.com/blackfan/web-inf-dict) List of configuration files from WEB-INF and META-INF for use in Unvalidated Forwards and JSP Include vulnerabilities.
+- [**27**星][6y] [Py] [bl4ckic3/modbus-fuzzer](https://github.com/bl4ckic3/modbus-fuzzer) Modbus Protocol Fuzzer
+- [**27**星][5m] [C] [biswa96/wslreverse](https://github.com/biswa96/wslreverse) Experiments with hidden COM interface and LxBus IPC mechanism in WSL
+- [**27**星][2y] [Go] [biezhi/goinx](https://github.com/biezhi/goinx)
+- [**27**星][12m] [bcdannyboy/research](https://github.com/bcdannyboy/research) General Research Repository - Only updated when I feel like it
+- [**27**星][5m] [badappsdevelopment/wifi-cracker](https://github.com/badappsdevelopment/wifi-cracker) Wifi Cracking
+- [**27**星][2m] [JS] [b-mueller/sabre](https://github.com/b-mueller/sabre) Security analyzer for Solidity smart contracts. Uses MythX, the premier smart contract security service.
+- [**27**星][6m] [JS] [auth0/passport-wsfed-saml2](https://github.com/auth0/passport-wsfed-saml2) passport strategy for both WS-fed and SAML2 protocol
+- [**27**星][2y] [atom0s/ceautoasm-x64dbg](https://github.com/atom0s/ceautoasm-x64dbg) An x64dbg plugin that allows users to execute Cheat Engine auto assembler scripts within x64dbg.
+- [**27**星][7m] [JS] [antville/antville](https://github.com/antville/antville) The Queen Mum of Weblog Hosting Systems – written in JavaScript since 2001.
+- [**27**星][3y] [Java] [animeshshaw/chromeforensics](https://github.com/animeshshaw/chromeforensics) A tool to perform automated forensic analysis of Chrome Browser.
+- [**27**星][4y] [C] [anarcheuz/android-pocs](https://github.com/anarcheuz/android-pocs)
+- [**27**星][2y] [JS] [anandtiwarics/datasploit](https://github.com/anandtiwarics/datasploit) A tool to perform various OSINT techniques, aggregate all the raw data, visualise it on a dashboard, and facilitate alerting and monitoring on the data.
+- [**27**星][2y] [Shell] [digivill/all-in-one-wifi-cracker](https://github.com/Digivill/All-in-One-WiFi-Cracker) Linux All in One Wifi Cracker
+- [**27**星][1y] [alonemonkey/iosrebook-issues](https://github.com/alonemonkey/iosrebook-issues) 《iOS应用逆向与安全》 勘误
+- [**27**星][1y] [C] [alex9191/zerobank-ring0-bundle](https://github.com/alex9191/zerobank-ring0-bundle) Kernel-Mode rootkit that connects to a remote server to send & recv commands
+- [**27**星][11m] [Py] [al45tair/ds_store](https://github.com/al45tair/ds_store)
+- [**27**星][1y] [Py] [ajinabraham/xenotix-xbot](https://github.com/ajinabraham/xenotix-xbot) Xenotix xBOT is a Cross Platform PoC Bot that abuse certain Google Services to implement it's C&C
+- [**27**星][1y] [Py] [ajinabraham/poc](https://github.com/ajinabraham/poc) Proof of Concepts, Exploits
+- [**27**星][8m] [Go] [ahhh/goredshell](https://github.com/ahhh/goredshell) A cross platform tool for verifying credentials and executing single commands
+- [**27**星][8y] [Py] [9b/pdfxray_lite](https://github.com/9b/pdfxray_lite) Lite version of PDF X-RAY that uses no backend
+- [**27**星][4m] [C#] [717021/pcmgr](https://github.com/717021/pcmgr) Windows 任务管理器重制版 A rebulid version for Windows task manager.
+- [**27**星][2y] [PS] [3gstudent/com-object-hijacking](https://github.com/3gstudent/com-object-hijacking) use COM Object hijacking to maintain persistence.(Hijack CAccPropServicesClass and MMDeviceEnumerator)
+- [**27**星][2y] [C] [1ce0ear/dllloaderunpacker](https://github.com/1ce0ear/dllloaderunpacker)
+- [**27**星][4y] [0xicf/scadashutdowntool](https://github.com/0xicf/scadashutdowntool)
+- [**27**星][1y] [Py] [daniel_plohmann/simplifire.idascope](https://bitbucket.org/daniel_plohmann/simplifire.idascope) 简化恶意代码分析
+- [**26**星][9m] [Rust] [felipenoris/hyper-reverse-proxy](https://github.com/felipenoris/hyper-reverse-proxy) A simple reverse proxy for use with Hyper and Tokio
+- [**26**星][1y] [C] [brucedone/darknet_demo](https://github.com/brucedone/darknet_demo) darknet yolov3 tiny train model demo
+- [**26**星][4m] [Swift] [itsjohnye/lead-ios](https://github.com/itsjohnye/lead-ios) a featherweight iOS SS proxy client with interactive UI
+- [**26**星][3y] [CSS] [cw1997/mysql-monitor](https://github.com/cw1997/mysql-monitor) MySQL服务器执行SQL记录实时监控(WEB版本)
+- [**26**星][1y] [C] [martin-ger/esp_peap_psk](https://github.com/martin-ger/esp_peap_psk) A WPA2-PEAP to WPA2-PSK converter
+- [**26**星][4y] [C] [ufrisk/shellcode64](https://github.com/ufrisk/shellcode64) A minimal tool to extract shellcode from 64-bit PE binaries.
+- [**26**星][6y] [chokepoint/crunchpwn](https://github.com/chokepoint/crunchpwn) #Pwn Linux (CrunchPwn) is a penetration testing repository/addition for CrunchBang Linux.
+- [**26**星][20d] [Java] [snail007/goproxy-android](https://github.com/snail007/goproxy-android) snail007/goproxy全能代理服务器安卓版。高性能的http代理、https代理、socks5代理、ss代理、内网穿透、内网穿透p2p、内网穿透代理、内网穿透反向代理、内网穿透服务器、游戏盾、游戏高防、游戏代理,支持API代理认证。websocke代理、tcp代理、udp代理、socket代理、高仿服务器。支持正向代理、反向代理、透明代理、TCP内网穿透、UDP内网穿透、HTTP内网穿透、HTTPS内网穿透、https代理负载均衡、http代理负载均衡、socks5代理负载均衡、socket代理负载均衡、ss代理负载均衡、TCP/UDP端口映射、SSH中转、TLS加密传输、协议转换、防污染DNS代理,限速,限连接数。
+- [**26**星][2y] [Java] [calebfenton/resequencer](https://github.com/calebfenton/resequencer) Configurable, flexible regex-based APK modification tool.
+- [**26**星][2y] [Py] [epsylon/orb](https://github.com/epsylon/orb) Orb is a massive footprinting tool.
+- [**26**星][1y] [Py] [honeynet/checkpot](https://github.com/honeynet/checkpot) Checkpot Honeypot Checker
+- [**26**星][5y] [Py] [oros42/arp_poisoning_detector](https://github.com/oros42/arp_poisoning_detector) Simple detector of ARP poisoning attack
+- [**26**星][1y] [Py] [corelan/certmon](https://github.com/corelan/certmon) Certificate Expiration Monitor script
+- [**26**星][3y] [ObjC] [nabla-c0d3/ios-reversing](https://github.com/nabla-c0d3/ios-reversing) Some iOS tools and scripts from 2014 for iOS reversing.
+- [**26**星][2m] [C] [oracle/dtrace-utils](https://github.com/oracle/dtrace-utils) DTrace-utils contains the Userspace portion of the DTrace port to Linux
+- [**26**星][3y] [Py] [juju/plugins](https://github.com/juju/plugins) Basic collection of the first few plugins for Juju
+- [**26**星][4y] [Shell] [infobyte/distro_checker](https://github.com/infobyte/distro_checker) Cross Distribution Exploit Testing
+- [**26**星][4y] [Py] [snifer/gpt](https://github.com/snifer/gpt) Gadget Pentesting Tool Scripts
+- [**26**星][10m] [Py] [neo23x0/ti-falsepositives](https://github.com/neo23x0/ti-falsepositives) A collection of typical false positive indicators
+- [**26**星][1y] [ctfd/plugins](https://github.com/ctfd/plugins) Official and Community CTFd Plugins
+- [**26**星][2y] [Java] [lamster2018/learnndk](https://github.com/lamster2018/learnndk) 学习jni及反调试策略
+- [**26**星][1y] [Ruby] [ajitsing/apktojava](https://github.com/ajitsing/apktojava) View android apk as java code in gui
+- [**26**星][2m] [PHP] [krowinski/tinyid](https://github.com/krowinski/tinyid) Shorten and obfuscate IDs
+- [**26**星][2y] [C] [tokenrove/niffy](https://github.com/tokenrove/niffy) NIF testing harness
+- [**26**星][5m] [Py] [k8gege/sshshell](https://github.com/k8gege/sshshell) sshshell/sshcmd/sshlogin/sshcrack(SSH交互式Shell/内网渗透专用非交互式Shell/SSH密码爆破)Windows & Linux
+- [**26**星][7m] [Py] [bonnetn/vba-obfuscator](https://github.com/bonnetn/vba-obfuscator) 2018 School project - PoC of malware code obfuscation in Word macros
+- [**26**星][5d] [thomasking2014/slides](https://github.com/thomasking2014/slides)
+- [**26**星][6m] [Java] [static-flow/directoryimporter](https://github.com/static-flow/directoryimporter) This is a Burpsuite plugin built to enable you to import your directory bruteforcing results into burp for easy viewing later. This is an alternative to proxying bruteforcing tools through burp to catch the results.
+- [**26**星][4y] [cure53/publications](https://github.com/cure53/publications)
+- [**26**星][5m] [Py] [elevenpaths/pesto](https://github.com/elevenpaths/pesto)
+- [**26**星][2m] [HTML] [restincode/restincode](https://github.com/restincode/restincode) A memorial site for Hackers and Infosec people who have passed
+- [**26**星][4y] [Py] [stratosphereips/stratospherewindowsips](https://github.com/stratosphereips/StratosphereWindowsIps) The Stratosphere IPS is a free software IPS that uses network behavior to detect and block malicious actions.
+- [**26**星][3y] [Assembly] [cduplooy/rootkit](https://github.com/CDuPlooy/Rootkit)
+- [**26**星][2y] [C#] [fsecurelabs/athena](https://github.com/FSecureLABS/Athena) GUI Tool to generate threat intelligence information in various formats
+- [**26**星][2y] [C++] [kernelm0de/runpe-processhollowing](https://github.com/kernelm0de/RunPE-ProcessHollowing) RunPE
+- [**26**星][2m] [itechub/sqlmap-wiki-zhcn](https://github.com/itechub/sqlmap-wiki-zhcn)
+- [**26**星][2y] [Py] [meliot/ryanair-seats](https://github.com/meliot/ryanair-seats) Tool to predict which seat you will have for free
+- [**26**星][22d] [Py] [joesecurity/jbxapi](https://github.com/joesecurity/jbxapi) Python API wrapper for the Joe Sandbox API.
+- [**26**星][1y] [C] [fsecurelabs/incognito](https://github.com/FSecureLABS/incognito) One Token To Rule Them All
+- [**26**星][3y] [Java] [yolosec/upckeygen](https://github.com/yolosec/upckeygen) UPC router default WPA2 key generator
+- [**26**星][4y] [HTML] [xyntax/campus-fakeap](https://github.com/xyntax/campus-fakeap) 针对校园网的wifi钓鱼工具
+- [**26**星][1y] [C#] [xljiulang/debugviewer](https://github.com/xljiulang/debugviewer) 用于捕获任意进程调用System.Diagnostics.Debugger.Log (level,category,message)输出的调试内容
+- [**26**星][2y] [Py] [xiphosresearch/smsisher](https://github.com/xiphosresearch/smsisher) SMS Phishing Tools
+- [**26**星][2m] [Py] [wybiral/shh](https://github.com/wybiral/shh) Create Tor hidden services in Python.
+- [**26**星][5m] [Py] [wwkenwong/ctf-writeup](https://github.com/wwkenwong/ctf-writeup)
+- [**26**星][11m] [Shell] [wuseman/tg799vac-xtream-v16.2-jade](https://github.com/wuseman/tg799vac-xtream-v16.2-jade) My personal unique wiki for hacking the router firmware used by (Telia)TG799vac Xtream Version 16.2 Jade delivered from Technicolor
+- [**26**星][1m] [JS] [wuseman/sagemcom-fast-5370e-telia](https://github.com/wuseman/sagemcom-fast-5370e-telia) This is my personal wiki for hacking the router firmware used by (Sagemcom)F@ast Version 3.43.2 delivered from Sagemcom
+- [**26**星][1m] [JS] [vulnogram/vulnogram](https://github.com/vulnogram/vulnogram) Vulnogram is a tool for creating and editing CVE information in CVE JSON format
+- [**26**星][5m] [C] [visweswaran1998/cybergod-ksgmprh](https://github.com/visweswaran1998/cybergod-ksgmprh) An open-source antivirus for windows
+- [**26**星][3y] [JS] [venables/node-where](https://github.com/venables/node-where) A very simple geolocation library in node.js
+- [**26**星][1y] [Py] [v-p-b/windowsdefendertools](https://github.com/v-p-b/windowsdefendertools) Tools for instrumenting Windows Defender's mpengine.dll
+- [**26**星][5y] [Java] [twilightgod/malwarebuster](https://github.com/twilightgod/malwarebuster) This is a Xposed module. It helps to prevent malwares to register service/receiver which were disabled in My Android Tools before.
+- [**26**星][2m] [Dockerfile] [trojan-gfw/trojan-docker](https://github.com/trojan-gfw/trojan-docker) Dockerfile for building a trojan docker image.
+- [**26**星][4y] [Py] [tjcsec/ctf-platform](https://github.com/tjcsec/ctf-platform) A platform for running CTFs
+- [**26**星][3y] [Py] [tiankonguse/themole](https://github.com/tiankonguse/themole) Mole is an automatic SQL Injection exploitation tool. clone from sourceforge
+- [**26**星][4y] [Py] [threatminer/ioc_parser](https://github.com/threatminer/ioc_parser) Tool to extract indicators of compromise from security reports in PDF format
+- [**26**星][8m] [Py] [thehappydinoa/tp-link-defaults](https://github.com/thehappydinoa/tp-link-defaults) Python script for trying default passwords for some TP-Link Hotspots
+- [**26**星][2y] [C++] [tamirzb/cve-2017-13253](https://github.com/tamirzb/cve-2017-13253) PoC code for CVE-2017-13253
+- [**26**星][3m] [Perl] [t00sh/ctf](https://github.com/t00sh/ctf) Exploits used on hacking CTF's
+- [**26**星][3y] [PHP] [symphonycms/xssfilter](https://github.com/symphonycms/xssfilter) An XSS filter for Events in Symphony CMS
+- [**26**星][5y] [C++] [strobejb/sslhook](https://github.com/strobejb/sslhook) OpenSSL hooking
+- [**26**星][2y] [C++] [strikerx3/whvpclient](https://github.com/strikerx3/whvpclient) Windows Hypervisor Platform client
+- [**26**星][13d] [Py] [strawp/random-scripts](https://github.com/strawp/random-scripts) Quick and dirty scripts that don't really belong in a larger project
+- [**26**星][1m] [Py] [starnightcyber/findsubdomains](https://github.com/starnightcyber/findsubdomains) A tool finding sub-domains for penetesters
+- [**26**星][7m] [C] [souhailhammou/panda-antivirus-lpe](https://github.com/souhailhammou/panda-antivirus-lpe) The exploit for Panda AV LPE
+- [**26**星][6m] [JS] [soprasteria/cybersecurity-dfm](https://github.com/soprasteria/cybersecurity-dfm) Data Feed Manager (news watch orchestrator to predict topic with deepdetect and store cleaned text in elasticsearch)
+- [**26**星][8m] [Py] [somerset-recon/blog](https://github.com/somerset-recon/blog) For code snippets and information
+- [**26**星][4y] [PHP] [sinfocol/vboxdie-cracker](https://github.com/sinfocol/vboxdie-cracker) VirtualBox Disk Image Encryption password cracker
+- [**26**星][9m] [Shell] [shverni/raspberry-pi-vpn-gateway](https://github.com/shverni/raspberry-pi-vpn-gateway) Raspberry Pi VPN gateway installer for Private Internet Access
+- [**26**星][8m] [Ruby] [sensu-plugins/sensu-plugins-network-checks](https://github.com/sensu-plugins/sensu-plugins-network-checks) This plugin provides native network instrumentation for monitoring and metrics collection, including: hardware, TCP response, RBLs, whois, port status, and more.
+- [**26**星][5y] [Shell] [seankaiser/automation-scripts](https://github.com/seankaiser/automation-scripts)
+- [**26**星][1y] [Py] [ryaninf/cve-2018-2893](https://github.com/ryaninf/cve-2018-2893) CVE-2018-2893 PoC
+- [**26**星][3y] [C++] [rwfpl/rewolf-pcausa-exploit](https://github.com/rwfpl/rewolf-pcausa-exploit) PCAUSA Rawether for Windows Local Privilege Escalation
+- [**26**星][7m] [Py] [rofl0r/nat-tunnel](https://github.com/rofl0r/nat-tunnel) NAT Tunnel: to effortlessly serve from behind NAT
+- [**26**星][1m] [Ruby] [risksense-ops/metasploit-framework](https://github.com/risksense-ops/metasploit-framework) Metasploit Framework
+- [**26**星][4m] [C++] [rischardv/riscv-alphanumeric-shellcoding](https://github.com/rischardv/riscv-alphanumeric-shellcoding) Alphanumeric+1 shellcoding tools for RISC-V
+- [**26**星][4m] [Go] [releasel0ck/nettracer](https://github.com/releasel0ck/nettracer) This tool is used to map out the network data flow to help penetration testers identify potentially valuable targets.
+- [**26**星][8m] [C++] [rek7/descrypt-cpu-collision-cracker](https://github.com/rek7/descrypt-cpu-collision-cracker) DEScrypt CPU Collision Cracker
+- [**26**星][4y] [ObjC] [qiuyuzhou/shadowsocks-ios](https://github.com/qiuyuzhou/shadowsocks-ios) No maintaining. Try this
+- [**26**星][3y] [Ruby] [qazbnm456/docker-war](https://github.com/qazbnm456/docker-war) Docker based Wargame Platform - To practice your CTF skills
+- [**26**星][5m] [pushinginertia/ip-blacklist](https://github.com/pushinginertia/ip-blacklist) An Apache httpd configuration file that rejects access to a server from a list of blacklisted IPs
+- [**26**星][1y] [C++] [psaneme/kung-fu-malware](https://github.com/psaneme/kung-fu-malware)
+- [**26**星][2y] [PHP] [probely/ctf-challenges](https://github.com/probely/ctf-challenges) Capture the flag challenges
+- [**26**星][11m] [C] [plutonium-dbg/plutonium-dbg](https://github.com/plutonium-dbg/plutonium-dbg) Kernel-based debugger for Linux applications
+- [**26**星][2y] [Py] [philarkwright/dga-detection](https://github.com/philarkwright/dga-detection) DGA Domain Detection using Bigram Frequency Analysis
+- [**26**星][1y] [Shell] [panjks/t-pot-autoinstall](https://github.com/panjks/t-pot-autoinstall) Autoinstall T-Pot on Ubuntu 16.04
+- [**26**星][3y] [Java] [owasp/owaspbugbounty](https://github.com/owasp/owaspbugbounty) This is a container of web applications that work with OWASP Bug Bounty for Projects
+- [**26**星][1y] [Py] [osmode/ddash](https://github.com/osmode/ddash) DDASH - Ethereum Operating System for Knowledge Creation and Sharing
+- [**26**星][4y] [Py] [open-nsm/dockoo](https://github.com/open-nsm/dockoo) Malware analysis using Docker project
+- [**26**星][10m] [JS] [onrik/django-webshell](https://github.com/onrik/django-webshell) Django application for running python code in your project's environment from django admin.
+- [**26**星][8m] [C++] [offlinej/ida-rpc](https://github.com/offlinej/ida-rpc) Discord rich presence plugin for IDA Pro 7.0
+- [**26**星][3m] [JS] [nowsecure/frida-uikit](https://github.com/nowsecure/frida-uikit) Inspect and manipulate UIKit-based GUIs through Frida.
+- [**26**星][2m] [Shell] [noob-hackers/kalimux](https://github.com/noob-hackers/kalimux) Install kali linux in termux with desktop environment from kalimux oneclick installation tool no root required
+- [**26**星][2m] [Rust] [nixpulvis/oursh](https://github.com/nixpulvis/oursh) Your comrade through the perilous world of UNIX.
+- [**26**星][7y] [C++] [neuroo/pinpy](https://github.com/neuroo/pinpy) Detours from binaries method entry/exit point to Python scripts (PIN, CPython API)
+- [**26**星][2y] [Py] [murmus/ctf](https://github.com/murmus/ctf)
+- [**26**星][9m] [HTML] [mpgn/cve-2019-9580](https://github.com/mpgn/cve-2019-9580) CVE-2019-9580 - StackStorm: exploiting CORS misconfiguration (null origin) to gain RCE
+- [**26**星][3y] [C] [monosource/radare2-explorations-binaries](https://github.com/monosource/radare2-explorations-binaries) Supplement to radare2-explorations.
+- [**26**星][11m] [Perl] [modernistik/nmap-parser](https://github.com/modernistik/nmap-parser) Parse nmap scan data with Perl (official repo)
+- [**26**星][12m] [TS] [mitre/attack-navigator](https://github.com/mitre/attack-navigator) ATT&CK导航/浏览工具. 以表格形式显示ATT&CK各种技术, 并执行某些操作. 基于Angular
+- [**26**星][4m] [Shell] [misp/misp-vagrant](https://github.com/misp/misp-vagrant) Deploy MISP Project software with Vagrant.
+- [**26**星][10m] [C++] [michmich/analogvoltmeterclock](https://github.com/michmich/analogvoltmeterclock) An Arduino based analog volt meter clock.
+- [**26**星][2y] [Py] [mgeeky/visualbasicobfuscator](https://github.com/mgeeky/visualbasicobfuscator) Visual Basic Code universal Obfuscator intended to be used during penetration testing assignments.
+- [**26**星][1y] [Py] [mdsecactivebreach/lambda-webbugs](https://github.com/mdsecactivebreach/lambda-webbugs) A proof of concept for delivering webbugs via AWS lambda
+- [**26**星][5y] [Py] [matonis/rippe](https://github.com/matonis/rippe) ripPE - section extractor and profiler for PE file analysis
+- [**26**星][2m] [Rust] [marcograss/rust-kernelcache-extractor](https://github.com/marcograss/rust-kernelcache-extractor) Extract a decrypted iOS 64-bit kernelcache
+- [**26**星][3y] [C++] [marcnewlin/mousejack-nes-controller](https://github.com/marcnewlin/mousejack-nes-controller) MouseJack NES controller firmware and build guide.
+- [**26**星][3y] [Py] [mandatoryprogrammer/xcname](https://github.com/mandatoryprogrammer/xcname) A tool for enumerating expired domains in CNAME records
+- [**26**星][3y] [lucifer1993/awesome-hacking](https://github.com/lucifer1993/awesome-hacking) awesome hacking chinese version
+- [**26**星][2m] [HTML] [locomotive-crypto/crypto_book_1st](https://github.com/locomotive-crypto/crypto_book_1st) 《深入浅出CryptoPP密码学库》随书电子文档
+- [**26**星][2y] [PHP] [lloricode/ci-capstone](https://github.com/lloricode/ci-capstone) Enrollment System with CodeIgniter
+- [**26**星][5y] [C#] [lennyleng/radioeye](https://github.com/lennyleng/radioeye) RFID Security Audit Tool
+- [**26**星][6y] [C] [kacheo/kernelrootkit](https://github.com/kacheo/kernelrootkit) Linux kernel rootkit to hide certain files and processes.
+- [**26**星][5y] [Py] [joxeankoret/mynav](https://github.com/joxeankoret/mynav) Automatically exported from code.google.com/p/mynav
+- [**26**星][2m] [Py] [joshzelonis/attack-eval-scoring](https://github.com/joshzelonis/attack-eval-scoring)
+- [**26**星][9m] [Py] [joda32/got-responded](https://github.com/joda32/got-responded) A simple tool to detect NBT-NS and LLMNR spoofing (and messing with them a bit)
+- [**26**星][2y] [Py] [jlospinoso/unfurl](https://github.com/jlospinoso/unfurl) An Entropy-Based Link Vulnerability Tool
+- [**26**星][7y] [C++] [jingpu/pintools](https://github.com/jingpu/pintools)
+- [**26**星][4y] [jgamblin/hackapie](https://github.com/jgamblin/hackapie) An Raspberry PI 2 OpenWRT Image Setup To Be A Wireless Hacking Sandbox
+- [**26**星][2y] [Shell] [jgamblin/defensive-s3-buckets](https://github.com/jgamblin/defensive-s3-buckets) Defensive S3 Bucket Squating
+- [**26**星][2y] [Shell] [jchrisfarris/aws-service-control-policies](https://github.com/jchrisfarris/aws-service-control-policies) Collection of semi-useful Service Control Policies and scripts to manage them
+- [**26**星][1y] [JS] [ioactive/bluecrawl](https://github.com/ioactive/bluecrawl) Frida (Android) Script for extracting bluetooth information
+- [**26**星][2m] [Py] [initstring/pentest-tools](https://github.com/initstring/pentest-tools) General stuff for pentesting - password cracking, phishing, automation, Kali, etc.
+- [**26**星][3y] [C++] [ilyatk/hookengine](https://github.com/ilyatk/hookengine)
+- [**26**星][1y] [Py] [ihack4falafel/slink](https://github.com/ihack4falafel/slink) Alphanumeric Shellcode (x86) Encoder
+- [**26**星][3y] [Py] [hydrabus/rhme-2016](https://github.com/hydrabus/rhme-2016) The RHme2 (Riscure Hack me 2) is a low level hardware CTF challenge that comes in the form of an Arduino Nano board. The new edition provides a completely different set of new challenges to test your skills in side channel, fault injection, cryptoanalysis and software exploitation attacks.
+- [**26**星][4y] [Shell] [hrishioa/nomohead](https://github.com/hrishioa/nomohead) Simple Bash script that announces IP Address and ngrok tunnel of Raspberry Pi at boot
+- [**26**星][2y] [R] [hrbrmstr/crafter](https://github.com/hrbrmstr/crafter) Analyze and Visualize Network Packet Capture (PCAP) Files
+- [**26**星][3y] [C++] [hpsocket/restclient-cpp](https://github.com/hpsocket/restclient-cpp) C++ winnet/winhttp api restclient
+- [**26**星][1m] [Py] [hiddenillusion/ir](https://github.com/hiddenillusion/ir) Some dfir stuff
+- [**26**星][1y] [Shell] [hestat/minerchk](https://github.com/hestat/minerchk) Bash script to Check for malicious Cryptomining
+- [**26**星][6m] [Java] [hakbot/hakbot-origin-controller](https://github.com/hakbot/hakbot-origin-controller) Vendor-Neutral Security Tool Automation Controller (over REST)
+- [**26**星][3y] [Assembly] [gyje/bios_rootkit](https://github.com/gyje/bios_rootkit) 来自Freebuf评论区,一个UEFI马.
+- [**26**星][2y] [Go] [grocid/passdesktop](https://github.com/grocid/passdesktop)
+- [**26**星][4y] [C] [gregwar/mitm](https://github.com/gregwar/mitm) Man in the middle tool
+- [**26**星][10m] [Kotlin] [gosecure/burp-ntlm-challenge-decoder](https://github.com/gosecure/burp-ntlm-challenge-decoder) Burp extension to decode NTLM SSP headers and extract domain/host information
+- [**26**星][7m] [Groovy] [gmacario/easy-jenkins](https://github.com/gmacario/easy-jenkins) Easily deploy a Jenkins CI/CD infrastructure via docker-compose
+- [**26**星][6m] [Py] [githacktools/githacktools](https://github.com/githacktools/githacktools) The best Hacking and PenTesting tools installer on the world
+- [**26**星][3m] [Py] [ghassani/mclf-ida-loader](https://github.com/ghassani/mclf-ida-loader) An IDA file loader for Mobicore trustlet and driver binaries
+- [**26**星][3m] [C++] [frida/frida-clr](https://github.com/frida/frida-clr) Frida .NET bindings
+- [**26**星][1y] [HTML] [flyrabbit/winproject](https://github.com/flyrabbit/winproject) Hook, DLLInject, PE_Tool
+- [**26**星][5y] [Py] [fireeye/pycommands](https://github.com/fireeye/pycommands) PyCommand Scripts for Immunity Debugger
+- [**26**星][4y] [Py] [fengxuangit/pyshell](https://github.com/fengxuangit/pyshell) python版菜刀 连接一句话木马
+- [**26**星][3m] [Pascal] [felipedaragon/catarinka](https://github.com/felipedaragon/catarinka) A powerful set of multi-purpose libraries for Pascal/Delphi and Lua
+- [**26**星][9m] [C] [eternityx/deadcell-oshgui](https://github.com/eternityx/deadcell-oshgui) OSHGui project files
+- [**26**星][8m] [Shell] [ericpskl/exportec2volumeimage](https://github.com/ericpskl/exportec2volumeimage) A Bash script which uses AWS CLI to create an image of an AWS EC2 volume
+- [**26**星][2y] [Py] [embedi/ble_norton_core](https://github.com/embedi/ble_norton_core) PoC exploit for CVE-2018-5234
+- [**26**星][4y] [JS] [eligrey/libxdr](https://github.com/eligrey/libxdr) A library that implements a cross-browser XDR constructor
+- [**26**星][3y] [Go] [egebalci/ticketbleed](https://github.com/egebalci/ticketbleed) This is a tool for exploiting Ticketbleed (CVE-2016-9244) vulnerability.
+- [**26**星][1y] [eclypsium/publications](https://github.com/eclypsium/publications) Slides, papers, etc
+- [**26**星][7m] [ebiquity/unified-cybersecurity-ontology](https://github.com/ebiquity/unified-cybersecurity-ontology) Unified Cybersecurity Ontology
+- [**26**星][4y] [Py] [dinotools/pysslscan](https://github.com/dinotools/pysslscan) Framework and command-line tool to scan SSL enabled services
+- [**26**星][4y] [C++] [dfct/inssidious](https://github.com/dfct/inssidious) A uniquely frustrating wireless network.
+- [**26**星][5m] [HTML] [devnetsandbox/sbx_multi_ios](https://github.com/devnetsandbox/sbx_multi_ios) Sample code, examples, and resources for use with the DevNet Multi-IOS Sandbox
+- [**26**星][1y] [Ruby] [dev-sec/chef-postgres-hardening](https://github.com/dev-sec/chef-postgres-hardening) This chef cookbook provides security configuration for PostgreSQL.
+- [**26**星][2m] [Ruby] [david942j/rbelftools](https://github.com/david942j/rbelftools) ELF parser library implemented in pure Ruby!
+- [**26**星][2y] [Py] [danmcinerney/smb-autopwn](https://github.com/danmcinerney/smb-autopwn) Discovers and exploits hosts vulnerable to MS08-067/MS17-010
+- [**26**星][2y] [C] [danghvu/nginx-1.4.0](https://github.com/danghvu/nginx-1.4.0) For the analysis of CVE-2013-2028
+- [**26**星][4y] [Py] [cyberhatcoil/acf](https://github.com/cyberhatcoil/acf) Android Connections Forensics
+- [**26**星][1y] [C++] [cyanidee/snowflake](https://github.com/cyanidee/snowflake) A simple CSGO cheat base written in mind of begginers.
+- [**26**星][2y] [C++] [cuitche/code-obfuscation](https://github.com/cuitche/code-obfuscation) 一款iOS代码混淆工具(A code obfuscation tool for iOS.)
+- [**26**星][2y] [Shell] [crackpkcs12/crackpkcs12](https://github.com/crackpkcs12/crackpkcs12) A multithreaded program to crack PKCS#12 files (p12 and pfx extensions)
+- [**26**星][3m] [Go] [cpl/cryptor](https://github.com/cpl/cryptor) Privacy, Anonymity, Freedom - P2P network
+- [**26**星][1y] [C++] [cpasjuste/scummvm](https://github.com/cpasjuste/scummvm) ScummVM main repository
+- [**26**星][12m] [C#] [cocowalla/snifter](https://github.com/cocowalla/snifter) Snifter is a raw socket IP packet capturing tool for Windows, with a tiny CPU and memory footprint
+- [**26**星][4y] [Py] [cleveridge/cleveridge-subdomain-scanner](https://github.com/cleveridge/cleveridge-subdomain-scanner) The Cleveridge Subdomain Scanner finds subdomains of a given domain.
+- [**26**星][12m] [Py] [chrisjd20/power_dump](https://github.com/chrisjd20/power_dump) powershell memory dumper
+- [**26**星][4y] [JS] [chaitin/sqlchop-http-proxy](https://github.com/chaitin/sqlchop-http-proxy) SQLChop reverse http proxy module
+- [**26**星][9m] [Py] [byt3bl33d3r/dnschef](https://github.com/byt3bl33d3r/dnschef) DNSChef - DNS proxy for Penetration Testers and Malware Analysts
+- [**26**星][1y] [brute-f0rce/ceh](https://github.com/brute-f0rce/ceh) Exam Prep for the Ec-council Certified Ethical Hacker 312-50
+- [**26**星][7y] [Py] [bozhu/rc4-python](https://github.com/bozhu/rc4-python) A python implementation of the block cipher RC4
+- [**26**星][1y] [ObjC] [boxproject/box-staff-manager](https://github.com/boxproject/box-staff-manager) Employee App is used for initialize transactions, user management, authorise flow so that enteripise digital assets can be managed by stakeholders and partners.
+- [**26**星][2m] [blackbagtech/sleuthkit-apfs](https://github.com/blackbagtech/sleuthkit-apfs) A fork of The Sleuthkit with Pooled Storage and APFS support. See
+- [**26**星][2y] [JS] [bkimminich/webappsec-nutshell](https://github.com/bkimminich/webappsec-nutshell) An ultra-compact intro (or refresher) to Web Application Security.
+- [**26**星][2y] [Py] [bipabo1l/ssrf_scan](https://github.com/bipabo1l/ssrf_scan) 多线程批量扫描ssrf漏洞
+- [**26**星][2y] [Go] [benjojo/traceroute-haiku](https://github.com/benjojo/traceroute-haiku) A thing you can traceroute and it gives you a haiku inside the trace
+- [**26**星][2y] [C] [bazad/ctl_ctloutput-leak](https://github.com/bazad/ctl_ctloutput-leak) CVE-2017-13868: Information leak of uninitialized kernel heap data in XNU.
+- [**26**星][4y] [Assembly] [battelle/sinkhole](https://github.com/battelle/sinkhole) Architectural privilege escalation on x86
+- [**26**星][5y] [Py] [bastkerg/recomp](https://github.com/bastkerg/recomp) IDA recompiler(无文档)
+- [**26**星][7y] [C++] [avalon1610/lpc](https://github.com/avalon1610/lpc) windows LPC library
+- [**26**星][4y] [atktgs/blackhat2015arsenal](https://github.com/atktgs/blackhat2015arsenal) My Quick Note of BlackHat 2015 Arsenal
+- [**26**星][3y] [astocko/json-x86-64](https://github.com/astocko/json-x86-64) x86-64 Intel instruction set in JSON format
+- [**26**星][2m] [Rust] [arosspope/cipher-crypt](https://github.com/arosspope/cipher-crypt) A cryptographic tomb of ciphers forgotten by time.
+- [**26**星][10d] [C] [armfazh/rfc7748_precomputed](https://github.com/armfazh/rfc7748_precomputed) Updated! (Dec2-2019) This is a C-language software library that provides optimized implementations of the Diffie-Hellman functions known as X25519 and X448 (RFC-7748) for 64-bit architectures.
+- [**26**星][2y] [Py] [aniketp/network-programming](https://github.com/aniketp/network-programming) Small Projects on Socket Programming, Website Scanning, Wireless & Network Security
+- [**26**星][2y] [Jupyter Notebook] [andykamath/nfl-data-hacking](https://github.com/andykamath/nfl-data-hacking) Algorithmically draft NFL players for your fantasy league!
+- [**26**星][2y] [Py] [androidtamer/frida-push](https://github.com/androidtamer/frida-push) Wrapper tool to identify the remote device and push device specific frida-server binary.
+- [**26**星][6m] [Py] [andreafioraldi/angrdbg](https://github.com/andreafioraldi/angrdbg) Abstract library to generate angr states from a debugger state
+- [**26**星][2y] [JS] [an0ny420/ps4-4.0x--4.05-code-execution-poc](https://github.com/an0ny420/ps4-4.0x--4.05-code-execution-poc) 4.05 added support
+- [**26**星][3y] [C] [alpackers/ctf-writeups](https://github.com/alpackers/ctf-writeups) CTF Writeups
+- [**26**星][5y] [Py] [alfarom/nmap](https://github.com/alfarom/nmap) python nmap tool to scan hosts and search
+for CVE details based on the nmap report.
+- [**26**星][2y] [Py] [alfa100001/-cve-2017-0785-blueborne-poc](https://github.com/alfa100001/-cve-2017-0785-blueborne-poc) CVE-2017-0785 BlueBorne PoC
+- [**26**星][3y] [JS] [alexhorn/defendjs](https://github.com/alexhorn/defendjs) A free and open source JavaScript and Node.js obfuscator.
+- [**26**星][2y] [Py] [alanshaw-github/minimips](https://github.com/alanshaw-github/minimips) Introducing the new lightweight MIPS Assembler and Disassembler, supporting syntax highlighting, code editing, file dragging and dropping, debug mode, assembly and disassembly, Molokai color matching style. Full platform support including Windows, macOS and Linux. Star now! Keep updating!
+- [**26**星][1y] [C] [aircrack-ng/openwips-ng](https://github.com/aircrack-ng/openwips-ng) OpenWIPS-ng is an open source and modular Wireless IPS (Intrusion Prevention System)
+- [**26**星][5m] [Shell] [adon90/ip2hosts](https://github.com/adon90/ip2hosts) Dirty bash script to obtain hosts given an IP address
+- [**26**星][23d] [Shell] [adnanhodzic/anon-hotspot](https://github.com/adnanhodzic/anon-hotspot) On demand Debian Linux (Tor) Hotspot setup tool
+- [**26**星][2y] [Py] [adanvillarreal/spydan](https://github.com/adanvillarreal/spydan) A web spider for shodan.io without using the Developer API.
+- [**26**星][2y] [C] [5h311-1nj3c706/local-root-exploits](https://github.com/5h311-1nj3c706/local-root-exploits) LOCAL ROOT EXPLOITS
+- [**26**星][2y] [C++] [3gstudent/hiddenntregistry](https://github.com/3gstudent/hiddenntregistry) Use NT Native Registry API to create a registry that normal user can not query.
+- [**26**星][2y] [JS] [0xsobky/regaxor](https://github.com/0xsobky/regaxor) A regular expression fuzzer.
+- [**26**星][2m] [Lua] [0x4d31/hassh-utils](https://github.com/0x4d31/hassh-utils) Nmap NSE Script and Docker image for HASSH - the SSH client/server fingerprinting method (
+- [**25**星][1y] [ObjC] [skifary/c4msis](https://github.com/skifary/c4msis) ios shadowsocks app based on NEKit
+- [**25**星][13d] [Py] [eth-sri/ilf](https://github.com/eth-sri/ilf) AI based fuzzer based on imitation learning
+- [**25**星][6y] [C++] [stealth/pam_schroedinger](https://github.com/stealth/pam_schroedinger) Uncertainty for brute forcers during login.
+- [**25**星][6m] [Py] [mozillasecurity/avalanche](https://github.com/mozillasecurity/avalanche) Avalanche is a document generator which uses context-free grammars to generate randomized outputs for fuzz-testing.
+- [**25**星][23d] [Shell] [pirate/fish-functions](https://github.com/pirate/fish-functions)
+- [**25**星][4m] [Py] [mozillasecurity/laniakea](https://github.com/mozillasecurity/laniakea) Laniakea is a utility for managing instances at various cloud providers and aids in setting up a fuzzing cluster.
+- [**25**星][3m] [Py] [jgamblin/kali-virtualbox](https://github.com/jgamblin/kali-virtualbox) A Python Script To Automatically Download, Provision and Update a Kali Linux VM in Virtualbox
+- [**25**星][4d] [Ruby] [intrigueio/intrigue-ident](https://github.com/intrigueio/intrigue-ident) Asset Fingerprinting Library
+- [**25**星][1y] [C#] [fuzzysecurity/dotnettojscript-languagemodebreakout](https://github.com/fuzzysecurity/dotnettojscript-languagemodebreakout)
+- [**25**星][3y] [wtsxdev/application-security](https://github.com/wtsxdev/application-security) Resources for learning about application security
+- [**25**星][6y] [C#] [isecpartners/peachfarmer](https://github.com/isecpartners/peachfarmer) A log collector for Peach fuzzing in the cloud
+- [**25**星][8y] [C++] [cr4sh/simpleunpacker](https://github.com/cr4sh/simpleunpacker) Simple tool for unpacking packed/protected malware executables.
+- [**25**星][8m] [C++] [hikariobfuscator/noctilucence](https://github.com/hikariobfuscator/noctilucence) Embedded Bitcode Recompiler
+- [**25**星][2y] [Py] [jpcertcc/strelok](https://github.com/jpcertcc/strelok) Application for STIX v2.0 objects management and analysis
+- [**25**星][1y] [HTML] [649/crash-ios-exploit](https://github.com/649/crash-ios-exploit) Repository dedicated to storing a multitude of iOS/macOS/OSX/watchOS crash bugs. Some samples need to be viewed as raw in order to see the Unicode. Please do not intentionally abuse these exploits.
+- [**25**星][4y] [Py] [averagesecurityguy/scapy](https://github.com/averagesecurityguy/scapy) Scapy Presentation and Code
+- [**25**星][28d] [CSS] [flatpak/flatpak.github.io](https://github.com/flatpak/flatpak.github.io) Flatpak website
+- [**25**星][3y] [gdbinit/adium-ng-preview](https://github.com/gdbinit/adium-ng-preview) Repo to dump some preview info and builds for adium-ng
+- [**25**星][6m] [Py] [pyauth/pywarp](https://github.com/pyauth/pywarp) Python WebAuthn Relying Party library
+- [**25**星][2m] [Go] [influxdata/wirey](https://github.com/influxdata/wirey) Manage local wireguard interfaces in a distributed system
+- [**25**星][8m] [offensive-security/gcc-arm-linux-gnueabihf-4.7](https://github.com/offensive-security/gcc-arm-linux-gnueabihf-4.7) gcc-arm-linux-gnueabihf-4.7/
+- [**25**星][3y] [ObjC] [kpwn/rapd2](https://github.com/kpwn/rapd2) simple radare2 rap:// server
+- [**25**星][15d] [JS] [fsecurelabs/android-keystore-audit](https://github.com/fsecurelabs/android-keystore-audit)
+- [**25**星][2m] [Go] [banzaicloud/dast-operator](https://github.com/banzaicloud/dast-operator) Dynamic Application Security Testing
+- [**25**星][8m] [offensive-security/kali-linux-docker-rolling](https://github.com/offensive-security/kali-linux-docker-rolling)
+- [**25**星][6y] [Py] [opensecurityresearch/custompassivescanner](https://github.com/opensecurityresearch/custompassivescanner) A Custom Scanner for Burp
+- [**25**星][2m] [starnightcyber/subdomains](https://github.com/starnightcyber/subdomains) 互联网公司子域名收集
+- [**25**星][2y] [C#] [zjyl1994/v2switcher](https://github.com/zjyl1994/v2switcher) 极简V2Ray配置切换器,拯救多线用户
+- [**25**星][11m] [Visual Basic .NET] [modify24x7/ultimate-advanced-apktool](https://github.com/modify24x7/ultimate-advanced-apktool) v4.1
+- [**25**星][6y] [C] [kylekirkby/python-exploit-search-tool](https://github.com/kylekirkby/python-exploit-search-tool) A search tool that searches Offensive Securitys Exploit-db and Shodans Exploit DB using their API.
+- [**25**星][9m] [Assembly] [thog/ghidra_falcon](https://github.com/thog/ghidra_falcon) Support of Nvidia Falcon processors for Ghidra (WIP)
+- [**25**星][10m] [Rust] [archer884/harsh](https://github.com/archer884/harsh) Hashids implementation in Rust
+- [**25**星][4y] [C++] [vivek-ramachandran/wi-door](https://github.com/vivek-ramachandran/wi-door) Wi-Fi Backdoors
+- [**25**星][9y] [C] [clockfort/wifi-locator](https://github.com/clockfort/wifi-locator) Determines physical location of station judging from 802.11 beacons' BSSID/Signal/Noise/Quality information.
+- [**25**星][2d] [security-prince/resources-for-application-security](https://github.com/security-prince/Resources-for-Application-Security) Some good resources for getting started with application security
+- [**25**星][3m] [JS] [lanmaster53/cef](https://github.com/lanmaster53/cef) Proof-of-concept CORS exploitation tool.
+- [**25**星][2m] [C++] [3xpl017/linpwn](https://github.com/3xpl017/linpwn) Interactive Post Exploitation Tool
+- [**25**星][2d] [security-prince/resources-for-application-security](https://github.com/security-prince/resources-for-application-security) Some good resources for getting started with application security
+- [**25**星][2m] [HTML] [trojan-tutor/trojan-tutor.github.io](https://github.com/trojan-tutor/trojan-tutor.github.io) trojan 教程 自建梯子教程 trojan教程 trojan-gfw 科学上网 代理工具 翻墙 Ubuntu Debian 小白教程 https伪装
+- [**25**星][2m] [C] [airbus-cert/pstrace](https://github.com/airbus-cert/pstrace) Trace ScriptBlock execution for powershell v2
+- [**25**星][1y] [Py] [avicoder/hackerone](https://github.com/avicoder/Hackerone) Hackerone disclosed report URL Aggregator
+- [**25**星][3y] [monsterzer0/cyber-security-guide](https://github.com/monsterzer0/Cyber-Security-Guide) The Whitepaper For Enterprise Security created by Monster Zero Team
+- [**25**星][2y] [retbandit-zz/blackhat2017](https://github.com/retbandit-zz/BlackHat2017) BlackHat Europe 2017 Slides
+- [**25**星][5y] [Py] [5ee/socialengineerdbuilder](https://github.com/5ee/SocialEngineerDBuilder) 整理社工库的工具
+- [**25**星][4m] [Py] [blacknbunny/encdecshellcode](https://github.com/blacknbunny/encdecshellcode) Shellcode Encrypter & Decrypter With XOR Cipher
+- [**25**星][2y] [Py] [loveraven42/tools](https://github.com/loveraven42/tools) 渗透所用小工具以及poc
+- [**25**星][6y] [C] [whyallyn/paythepony](https://github.com/whyallyn/paythepony) Pay the Pony is hilarityware that uses the Reflective DLL injection library to inject into a remote process, encrypt and demand a ransom for files, and inflict My Little Pony madness on a system.
+- [**25**星][4y] [C] [riswandans/litesploit](https://github.com/riswandans/litesploit) library and intepreter for penetration testing tools
+- [**25**星][3y] [zyrikby/android_permission_evolution](https://github.com/zyrikby/android_permission_evolution) Analysis of the evolution of Android permissions. This repository contains the results presented in the paper "Small Changes, Big Changes: An Updated View on the Android Permission System".
+- [**25**星][3y] [Py] [zyantific/continuum](https://github.com/zyantific/continuum) Plugin adding multi-binary project support to IDA Pro (WIP)
+- [**25**星][5y] [Py] [zhengmin1989/droidanalytics](https://github.com/zhengmin1989/droidanalytics) linux version (rewrite in Python)
+- [**25**星][17d] [Py] [yannayl/ctf-writeups](https://github.com/yannayl/ctf-writeups) Write ups of solution for CTF challenges I solved
+- [**25**星][2y] [Py] [xme/emlrender](https://github.com/xme/emlrender) EML file rendering tool
+- [**25**星][9m] [Py] [xmcp/acfan](https://github.com/xmcp/acfan) 名副其实的自动AC机
+- [**25**星][4y] [Py] [xfkxfk/pyvulhunter](https://github.com/xfkxfk/pyvulhunter) python audit tool 审计 注入 inject
+- [**25**星][2m] [Py] [xebia/mobilehacktools](https://github.com/xebia/mobilehacktools) A repository for scripting a mobile attack toolchain
+- [**25**星][5y] [wirelesscollege/securitytools](https://github.com/wirelesscollege/securitytools) android安全工具大全
+- [**25**星][2y] [C] [wiire-a/bully](https://github.com/wiire-a/bully) Brute force attack against WPS, that actually works
+- [**25**星][3y] [Java] [whyalwaysmea/mobilesafe](https://github.com/whyalwaysmea/mobilesafe) 这是一个android版的手机卫士,包含一下功能:1.手机防盗 2. 黑名单设置 3.软件管理 4.进程管理 5.流量统计 6.缓存清理 7.手机杀毒 8.来电归属地显示 9.号码归属地查询 10.程序锁
+- [**25**星][6y] [waytai/cloudsafe](https://github.com/waytai/cloudsafe) cloudsafe 云安全扫描
+- [**25**星][2y] [Py] [w00t3k/insp3ctor](https://github.com/w00t3k/insp3ctor) AWS S3 Bucket/Object Finder
+- [**25**星][3y] [C++] [vix597/vulny](https://github.com/vix597/vulny) Vulnerable Linux socket game for educational purposes
+- [**25**星][6y] [C] [varshapaidi/kernel_rootkit](https://github.com/varshapaidi/kernel_rootkit) Linux Kernel Rootkit - To hide modules and ssh service
+- [**25**星][2y] [Java] [vankyver/burp-vulners-scanner](https://github.com/vankyver/burp-vulners-scanner) Burp scanner plugin based on Vulners.com vulnerability database
+- [**25**星][4y] [v-p-b/bigiron](https://github.com/v-p-b/bigiron) Collection of materials related to IBM z/OS security
+- [**25**星][3y] [unexpectedby/awesome-pentest-tools](https://github.com/unexpectedby/awesome-pentest-tools) List of Security Archives Tools and software, generally for facilitate security & penetration research. Opening it up to everyone will facilitate a knowledge transfer. Hopefully the initial set will grow and expand.
+- [**25**星][6m] [C] [underhandedcrypto/entries](https://github.com/underhandedcrypto/entries) A browsable archive of all Underhanded Crypto Contest entries.
+- [**25**星][3m] [Py] [trailofbits/objcgraphview](https://github.com/trailofbits/objcgraphview) A graph view plugin for Binary Ninja to visualize Objective-C
+- [**25**星][3y] [Py] [toxic-ig/pythonkeylogger](https://github.com/toxic-ig/pythonkeylogger) A remote keylogger with some cool features
+- [**25**星][7y] [Py] [tosanjay/bopfunctionrecognition](https://github.com/tosanjay/bopfunctionrecognition) plugin to BinNavi tool to analyze a x86 binanry file to find buffer overflow prone functions. Such functions are important for vulnerability analysis.
+- [**25**星][4y] [Go] [tomsteele/shellsquid](https://github.com/tomsteele/shellsquid) A dynamic HTTP and DNS reverse proxy
+- [**25**星][2y] [ObjC] [tijme/reverse-engineering](https://github.com/tijme/reverse-engineering) This repository contains some of the executables that I've cracked.
+- [**25**星][3y] [Py] [threatresponse/mad-king](https://github.com/threatresponse/mad-king) Proof of Concept Zappa Based AWS Persistence and Attack Platform
+- [**25**星][2y] [PS] [thoughtfuldev/psimage-delivery](https://github.com/thoughtfuldev/psimage-delivery) Use Invoke-PSImage to deliver a payload in an Image
+- [**25**星][2y] [Py] [thekingofduck/autosploit_chs](https://github.com/thekingofduck/autosploit_chs) 渗透工具AutoSploit的汉化版
+- [**25**星][2y] [Py] [the404hacking/windows-python-rat](https://github.com/the404hacking/windows-python-rat) A New Microsoft Windows Remote Administrator Tool [RAT] with Python by Sir.4m1R.
+- [**25**星][2y] [Py] [the404hacking/websploit](https://github.com/the404hacking/websploit) Websploit is an advanced MITM framework.
+- [**25**星][12m] [C#] [technikempire/citadelcore](https://github.com/technikempire/citadelcore) Cross platform filtering HTTP/S proxy based on .NET Standard 2.0.
+- [**25**星][12m] [techbliss/ida_pro_ultimate_qt_build_guide](https://github.com/techbliss/ida_pro_ultimate_qt_build_guide) Ida Pro Ultimate Qt Build Guide
+- [**25**星][2y] [Py] [tasdikrahman/thanos](https://github.com/tasdikrahman/thanos) A dead simple demonstration of SQL injection in an SQLite database
+- [**25**星][6m] [Py] [tarcisio-marinho/rsb-framework](https://github.com/tarcisio-marinho/rsb-framework) Windows/Linux - ReverseShellBackdoor Framework
+- [**25**星][4y] [Py] [tampe125/mongodb-scraper](https://github.com/tampe125/mongodb-scraper) Scraps for publicly accessible MongoDB instances and dumps user passwords
+- [**25**星][24d] [C] [sysprogs/openocd](https://github.com/sysprogs/openocd) OpenOCD shipped with VisualGDB. Built with CMake.
+- [**25**星][2y] [LLVM] [syreal17/cardinal](https://github.com/syreal17/cardinal) Similarity Analysis to Defeat Malware Compiler Variations
+- [**25**星][2y] [C#] [symbolsource/symbolsource](https://github.com/symbolsource/symbolsource)
+- [**25**星][8y] [stefanesser/serialkdpproxy](https://github.com/stefanesser/serialkdpproxy) Improved version of David Elliott's SerialKDPProxy
+- [**25**星][8y] [Ruby] [spiderlabs/yara-ruby](https://github.com/spiderlabs/yara-ruby) Ruby bindings for the yara file analysis and classification library
+- [**25**星][1y] [Gherkin] [soluto/containers-security-project](https://github.com/soluto/containers-security-project) A place for documenting threats and mitigations related to containers orchestrators (Kubernetes, Swarm etc)
+- [**25**星][1y] [Ruby] [smiegles/certs](https://github.com/smiegles/certs) certs: 解析 X509 证书, 获取其中的(子)域名
+- [**25**星][1y] [PHP] [sipcapture/homer-api](https://github.com/sipcapture/homer-api) HOMER 5: Back-End (API)
+- [**25**星][3y] [Shell] [simonschuang/rpi-hostapd](https://github.com/simonschuang/rpi-hostapd)
+- [**25**星][2m] [Py] [sim642/whatpulse](https://github.com/sim642/whatpulse) WhatPulse reverse engineered
+- [**25**星][1y] [Py] [si9int/screenshooter](https://github.com/si9int/screenshooter) Convert your masscan/subdomain-scan results (80,443,8080) into screenshots for better analysis
+- [**25**星][10m] [C++] [shaxzy/nixware-csgo](https://github.com/shaxzy/nixware-csgo) Source code of Nixware. Cheat doesn't inject for some reason, fix it uself or just paste from it
+- [**25**星][3y] [Py] [shawarkhanethicalhacker/brutexss-1](https://github.com/shawarkhanethicalhacker/brutexss-1) BruteXSS - Cross-Site Scripting Bruteforcer
+- [**25**星][3y] [Py] [shakenetwork/mimipenguin](https://github.com/shakenetwork/mimipenguin) Mimipenguin密码抓取神器
+- [**25**星][2m] [HTML] [shahril96/online-assembler-disassembler](https://github.com/shahril96/online-assembler-disassembler) Online assembler and disassembler
+- [**25**星][2y] [shadowsocksr-rm/shadowsocksx-ng](https://github.com/shadowsocksr-rm/shadowsocksx-ng) Next Generation of ShadowsocksX
+- [**25**星][4y] [Py] [sghctoma/multipass](https://github.com/sghctoma/multipass) A small wriiteup and a PoC tool about how to use SO_REUSADDR for firewall evasion
+- [**25**星][3y] [JS] [sethsec/nodejs-ssrf-app](https://github.com/sethsec/nodejs-ssrf-app) Nodejs application intentionally vulnerable to SSRF
+- [**25**星][2y] [Py] [scanfsec/ihoneyportscan](https://github.com/scanfsec/ihoneyportscan) 轻量端口扫描器、信息泄露扫描、批量网站备份扫描
+- [**25**星][2y] [Py] [sc0tfree/netbyte](https://github.com/sc0tfree/netbyte) Netbyte is a Netcat-style tool that facilitates probing proprietary TCP and UDP services. It is lightweight, fully interactive and provides formatted output in both hexadecimal and ASCII.
+- [**25**星][5y] [Py] [sash-ko/kaggle-malware-classification](https://github.com/sash-ko/kaggle-malware-classification) Kaggle "Microsoft Malware Classification Challenge". 6th place solution
+- [**25**星][4m] [Shell] [sap/vulnerability-assessment-kb](https://github.com/sap/vulnerability-assessment-kb) This dataset contains fix commits for known vulnerabilities in open-source projects and fuels the vulnerability-assessment-tool
+- [**25**星][1y] [C] [s54mtb/loradunchy](https://github.com/s54mtb/loradunchy) Lora board with Arduino nano compatibile pinout and simple battery management
+- [**25**星][10y] [C] [ryantenney/php7](https://github.com/ryantenney/php7) Hacking the PHP compiler and standard libraries in the name of turning it into a not crappy language. (Unofficial. No warranty whatsoever.)
+- [**25**星][5y] [Go] [rverton/xssmap](https://github.com/rverton/xssmap) (DOM-)XSS fuzzer based on phantomjs and go.
+- [**25**星][3y] [C#] [rummykhan/sql-nightmare](https://github.com/rummykhan/sql-nightmare) SQL SERVER Exploitation.
+- [**25**星][1y] [Go] [rsrdesarrollo/sasshimi](https://github.com/rsrdesarrollo/sasshimi) SSH Tunnelling in "RAW mode", via STDIN/OUT without using forwarding channels
+- [**25**星][1y] [C] [renorobert/virtualbox-nat-dhcp-bugs](https://github.com/renorobert/virtualbox-nat-dhcp-bugs)
+- [**25**星][6m] [CSS] [remmina/et-electron](https://github.com/remmina/et-electron) Eagle Tunnel 的图形化客户端,一个简单的代理工具
+- [**25**星][5m] [HTML] [rafaybaloch/sop-bypass-mini-test-suite](https://github.com/rafaybaloch/sop-bypass-mini-test-suite) This test suite contains over 40 different test cases that have proven to work with different mobile browsers in my research or testing Same Origin Policy bypass issues with browsers. Due credits were given to the researchers whose Proof of concepts have been incorporated in this test suite. Please note that, this is just the beta version, the n…
+- [**25**星][3m] [C++] [quangnh89/dbgsymgrabber](https://github.com/quangnh89/dbgsymgrabber) Just another tool to download specify Symbol (.pdb) files
+- [**25**星][4m] [JS] [qabin/kb-proxy](https://github.com/qabin/kb-proxy) kb-proxy 是一个可本地部署的、提供代理功能、接口测试管理、支持在线Mock、Host环境管理的在线工具平台。
+- [**25**星][2y] [Swift] [purkylin/kingproxy](https://github.com/purkylin/kingproxy) A proxy like privoxy and antinat
+- [**25**星][3y] [PS] [proxb/pinvoke](https://github.com/proxb/pinvoke) One-off scripts that I have written involving PInvoke and PowerShell
+- [**25**星][2y] [Py] [prezi/django-zipkin](https://github.com/prezi/django-zipkin) [Unmaintained] A Django middleware and api for recording and sending messages to Zipkin
+- [**25**星][6d] [Java] [portswigger/taborator](https://github.com/portswigger/taborator) A Burp extension to show the Collaborator client in a tab
+- [**25**星][1m] [Py] [portswigger/sqli-py](https://github.com/portswigger/sqli-py) SQLiPy is a Python plugin for Burp Suite that integrates SQLMap using the SQLMap API.
+- [**25**星][3y] [Java] [pokeolaf/pokemongodecoderforburp](https://github.com/pokeolaf/pokemongodecoderforburp) A simpe decoder to decode requests/responses made by PokemonGo in burp
+- [**25**星][3y] [Go] [peoples-cloud/pc](https://github.com/peoples-cloud/pc) people's cloud: using the ideas of botnets for good
+- [**25**星][2y] [Py] [pentestbox/scripts](https://github.com/pentestbox/scripts)
+- [**25**星][12m] [Go] [parsiya/go-security](https://github.com/parsiya/go-security) My Go security projects
+- [**25**星][3d] [F#] [paralax/burningdogs](https://github.com/paralax/burningdogs) Honeypot log processor to create OTX Pulse entries
+- [**25**星][2y] [packtpublishing/digital-forensics-with-kali-linux](https://github.com/packtpublishing/digital-forensics-with-kali-linux) Digital Forensics with Kali Linux, published by Packt
+- [**25**星][2y] [Py] [owtf/ptp](https://github.com/owtf/ptp) Pentester's Tools Parser (PTP) provides an unified way to retrieve the information from all (final goal) automated pentesting tools and assign an automated ranking for each finding.
+- [**25**星][5m] [optixal/oscp-pwk-notes-public](https://github.com/optixal/oscp-pwk-notes-public)
+- [**25**星][10m] [Dockerfile] [opsxcq/docker-metasploit](https://github.com/opsxcq/docker-metasploit) Metasploit framework with steroids
+- [**25**星][1y] [Go] [opennota/hydra](https://github.com/opennota/hydra) Penetration testing tool. This repository has migrated to
+- [**25**星][1y] [omg2hei/vulnerability-env](https://github.com/omg2hei/vulnerability-env) 收集国内外开源CMS存在漏洞的各种版本
+- [**25**星][1y] [Py] [nviso-be/decompile-py2exe](https://github.com/nviso-be/decompile-py2exe) Decompile py2exe Python 3 generated EXEs
+- [**25**星][4y] [Java] [nvisium/httpillage](https://github.com/nvisium/httpillage)
+- [**25**星][1y] [Py] [numirias/firefed](https://github.com/numirias/firefed)
+- [**25**星][3y] [C] [nukem9/idaskins](https://github.com/nukem9/idaskins) *DEPRECATED* Advanced skinning plugin for IDA Pro, ported to x64dbg
+- [**25**星][2d] [JS] [npm/npm-packlist](https://github.com/npm/npm-packlist) Walk through a folder and figure out what goes in an npm package
+- [**25**星][5y] [Py] [noobiedog/dir-xcan](https://github.com/noobiedog/dir-xcan) Python version of OWASP's DirBuster Application.
+- [**25**星][8m] [Py] [nixwizard/kube-alien](https://github.com/nixwizard/kube-alien)
+- [**25**星][3y] [Rust] [nixos/security](https://github.com/nixos/security)
+- [**25**星][3y] [Py] [nairuzabulhul/keyplexer](https://github.com/nairuzabulhul/keyplexer) Capstone: Keylogger Trojan
+- [**25**星][5m] [Java] [mx-futhark/hook-any-text](https://github.com/mx-futhark/hook-any-text) The goal of this project is to provide an alternative to well established text hookers, whose features are restrained to a certain number of game engines and emulators.
+- [**25**星][1y] [Assembly] [mrfearless/apisearch-plugin-x86](https://github.com/mrfearless/apisearch-plugin-x86) APISearch Plugin (x86) - A Plugin For x64dbg
+- [**25**星][1y] [HTML] [moonagirl/ctf](https://github.com/moonagirl/ctf)
+- [**25**星][3y] [C++] [moloch--/exploit-demos](https://github.com/moloch--/exploit-demos) How to write basic memory corruption exploits on Windows
+- [**25**星][4y] [Shell] [mk-fg/dracut-crypt-sshd](https://github.com/mk-fg/dracut-crypt-sshd) dracut initramfs module to start sshd on early boot to enter encryption passphrase from across the internets
+- [**25**星][7m] [Makefile] [mintty/wsltty.appx](https://github.com/mintty/wsltty.appx)
+- [**25**星][4y] [Py] [milo2012/social-engineering-toys](https://github.com/milo2012/social-engineering-toys) Social Engineering Toys
+- [**25**星][3m] [Py] [mikaelkall/massrecon](https://github.com/mikaelkall/massrecon) This reconissance tool is specific written for OSCP engagements.
+- [**25**星][5m] [Py] [michaeldim02/hvazard](https://github.com/michaeldim02/hvazard) Remove short passwords & duplicates, change lowercase to uppercase & reverse, combine wordlists!
+- [**25**星][15d] [meitar/awesome-pentest](https://github.com/meitar/awesome-pentest)
+- [**25**星][6y] [Py] [marshyski/sshwatch](https://github.com/marshyski/sshwatch) Intrusion Prevention System (IPS) for Secure Shell (SSH)
+- [**25**星][3y] [Go] [maddevsio/telegram_bbbot](https://github.com/maddevsio/telegram_bbbot) Telegram Bug Bounty Bot
+- [**25**星][2y] [ANTLR] [luftek/limesdr-usb](https://github.com/luftek/limesdr-usb) USB 3.0 version of the LimeSDR board
+- [**25**星][3m] [Shell] [leviathan36/wifibang](https://github.com/leviathan36/wifibang) wifi attacks suite
+- [**25**星][8m] [Py] [letheanmovement/lethean-vpn](https://github.com/letheanmovement/lethean-vpn) Lethean Virtual Private Network (VPN)
+- [**25**星][4y] [Py] [legbacore/t2e_integrity_check](https://github.com/legbacore/t2e_integrity_check) Integrity checking script for Apple Thunderbolt to Ethernet adapters, to check for attacks similar to Thunderstrike 2
+- [**25**星][11m] [C] [0xdrrb/hackrf_ook](https://github.com/0xDRRB/hackrf_ook) ASK-OOK transmit tool for Great Scott Gadget HackRF
+- [**25**星][3y] [C] [leetchicken/afl](https://github.com/leetchicken/afl) Unofficial American Fuzzy Lop repo
+- [**25**星][4y] [Go] [leechristensen/tgscrack](https://github.com/leechristensen/tgscrack) Kerberos TGS_REP cracker written in Golang
+- [**25**星][2y] [C] [ktemkin-archive/atmosphere](https://github.com/ktemkin-archive/Atmosphere) Atmosphère is a work-in-progress customized firmware for the Nintendo Switch.
+- [**25**星][1y] [C++] [kriw/ropchain](https://github.com/kriw/ropchain) ROPChain generator.
+- [**25**星][3y] [Py] [kostrin/pillage](https://github.com/kostrin/pillage) Pillage is a multithreaded enumeration python script I created for the enumeration phase of penetration tests.
+- [**25**星][7y] [Perl] [kost/vulnscan-pwcrack](https://github.com/kost/vulnscan-pwcrack) Password guessers for popular vulnerability scanners and frameworks: Find the password for your favourite vulnscanners: OpenVAS, Nessus, NeXpose or Metasploit
+- [**25**星][4y] [Shell] [kisom/surfraw](https://github.com/kisom/surfraw) local changes to surfraw - local edits prior to sending updates to surfraw-devel
+- [**25**星][14d] [AutoIt] [kirlovon/devil-backdoor](https://github.com/kirlovon/devil-backdoor) Simple backdoor for public places, that uses a file system for communication. Just for fun!
+- [**25**星][3y] [Py] [kingtuna/hybrid-darknet-concept](https://github.com/kingtuna/hybrid-darknet-concept)
+- [**25**星][1m] [TS] [kennbroorg/iky](https://github.com/kennbroorg/iky) OSINT Project
+- [**25**星][1y] [Assembly] [joric/arduino-bitcoin-miner](https://github.com/joric/arduino-bitcoin-miner) Arduino Bitcoin Miner (plain C and AVR assembly versions)
+- [**25**星][5y] [C++] [jeremyfetiveau/exploits](https://github.com/jeremyfetiveau/exploits) Old exploits and code for my self-referencing PML4 technique (2014)
+- [**25**星][1m] [Java] [jenkinsci/aqua-microscanner-plugin](https://github.com/jenkinsci/aqua-microscanner-plugin) Enables scanning of docker builds in Jenkins for OS package vulnerabilities.
+- [**25**星][1y] [C#] [jeffreye/avaloniailspy](https://github.com/jeffreye/avaloniailspy) Avalonia-based .NET Decompiler (port of ILSpy)
+- [**25**星][3y] [C] [jacktang310/kerneldebugonnexus6p](https://github.com/jacktang310/kerneldebugonnexus6p)
+- [**25**星][3y] [Py] [j4r3tt/gerix-wifi-cracker-2](https://github.com/j4r3tt/gerix-wifi-cracker-2) GUI wireless 802.11 penetration tool
+- [**25**星][4m] [Py] [initroot/fransrecon](https://github.com/initroot/fransrecon) Script will enumerate domain name using horizontal enumeration, reverse lookup. Each horziontal domain will then be vertically enumerated using Sublist3r.
+- [**25**星][2m] [infosec-community/apac-meetups](https://github.com/infosec-community/apac-meetups) A community contributed consolidated list of InfoSec meetups in the Asia Pacific region.
+- [**25**星][7y] [Py] [infodox/web-exploitation-engine](https://github.com/infodox/web-exploitation-engine) Generic Command Exploitation Engine for exploiting web application command-injection bugs,.
+- [**25**星][2y] [PHP] [imagemlt/ctf_web_dockers](https://github.com/imagemlt/ctf_web_dockers) dockerfile of CTF web practices
+- [**25**星][5y] [C] [honeynet/phoneyc](https://github.com/honeynet/phoneyc)
+- [**25**星][2y] [Go] [himei29a/gichidan](https://github.com/himei29a/gichidan) Gichidan - CLI wrapper for Ichidan deep-web search engine.
+- [**25**星][4y] [C++] [herrcore/cmddesktopswitch](https://github.com/herrcore/cmddesktopswitch) CmdDesktopSwitch is a small utility that lists all windows desktops and provides the option to switch between them. This can be used to identify and watch malware that has created a hidden desktop.
+- [**25**星][8y] [JS] [hdm/axman](https://github.com/hdm/axman) AxMan ActiveX Fuzzer
+- [**25**星][2y] [C++] [hatriot/delayloadinject](https://github.com/hatriot/delayloadinject) Code injection via delay load libraries
+- [**25**星][2y] [C++] [hasherezade/petya_key](https://github.com/hasherezade/petya_key) A decoder for Petya victim keys, using the Janus' masterkey.
+- [**25**星][2m] [C] [hasherezade/flareon2019](https://github.com/hasherezade/flareon2019) Flare-On solutions
+- [**25**星][19d] [Py] [harleo/knockknock](https://github.com/harleo/knockknock) [Golang rework soon] A simple reverse whois lookup CLI which allows you to find domain names owned by an individual person or company, often used for Open Source Intelligence (OSINT) purposes.
+- [**25**星][4y] [C] [hanj4096/wukong](https://github.com/hanj4096/wukong) A LKM rootkit for Linux kernel 2.6.x, 3.x and 4.x
+- [**25**星][2y] [Py] [hackingenvivo/doxing](https://github.com/hackingenvivo/doxing) Espionaje y recopilación de Información
+- [**25**星][8y] [ObjC] [hackedteam/vector-macos-root](https://github.com/hackedteam/vector-macos-root) root installation for MacOS
+- [**25**星][2y] [Py] [guardicore/vmware_guest_auth_bypass](https://github.com/guardicore/vmware_guest_auth_bypass) Proof of concept of VMSA-2017-0012
+- [**25**星][3y] [Py] [graniet/domff](https://github.com/graniet/domff) DOMFf is a simple IDE for extract all DOM data on a website, is perfect for all penetration testers, with this you can extract all data name, value of specific form with only one line, this tool work like a debugger
+- [**25**星][1y] [gluk256/misc](https://github.com/gluk256/misc) text files, etc.
+- [**25**星][2y] [C#] [glinares/cscguard](https://github.com/glinares/cscguard) Protects and logs suspicious and malicious usage of .NET CSC.exe and Runtime C# Compilation
+- [**25**星][8m] [gitguardian/getting-started-with-the-individual-app](https://github.com/gitguardian/getting-started-with-the-individual-app) GitGuardian is at the forefront of developers' security on GitHub. API tokens, database credentials, certificates leaked on GitHub: be alerted in real-time! GitGuardian is loved by developers:
+- [**25**星][8m] [Py] [ghostlulzhacks/waybackmachine](https://github.com/ghostlulzhacks/waybackmachine)
+- [**25**星][5y] [PHP] [ghorbanzadeh/owaat](https://github.com/ghorbanzadeh/owaat) OWASP ASVS Assessment Tool
+- [**25**星][2d] [CSS] [ghacksuserjs/torzillaprint](https://github.com/ghacksuserjs/torzillaprint) Firefox & Tor Browser only, current ESR+ only, client-side only [for now], results only, fingerprint testing
+- [**25**星][8y] [Py] [gdssecurity/cloud-and-control](https://github.com/gdssecurity/cloud-and-control)
+- [**25**星][5y] [C] [gdbinit/rex_versus_the_romans](https://github.com/gdbinit/rex_versus_the_romans) Anti Hacking Team TrustedBSD module
+- [**25**星][5y] [Py] [fygrave/dnslyzer](https://github.com/fygrave/dnslyzer) DNS traffic indexer and analyzer
+- [**25**星][2y] [Java] [fupinglee/crackcaptcahlogin](https://github.com/fupinglee/crackcaptcahlogin) CrackCaptcahLogin
+- [**25**星][1y] [Tcl] [fruho/fruhoapp](https://github.com/fruho/fruhoapp) Fruho VPN Manager - Universal VPN Client |
+- [**25**星][7m] [Visual Basic .NET] [foryujian/ipintervalmerge](https://github.com/foryujian/ipintervalmerge) IP区间批量合并工具,合并重叠交集的IP范围
+- [**25**星][3m] [C] [forensicitguy/libpreloadvaccine](https://github.com/forensicitguy/libpreloadvaccine) Whitelisting LD_PRELOAD libraries using LD_AUDIT
+- [**25**星][6y] [C] [fi01/libput_user_exploit](https://github.com/fi01/libput_user_exploit) CVE-2013-6282 exploit
+- [**25**星][5m] [C++] [ffiirree/capturer](https://github.com/ffiirree/capturer) Screen shot / GIF / Screen recording
+- [**25**星][2y] [exp-db/toolpool](https://github.com/exp-db/toolpool) 安全 & 运维小工具
+- [**25**星][1y] [JS] [ethanent/sloww](https://github.com/ethanent/sloww)
+
+ Lightweight Slowloris attack CLI in Node
+
+- [**25**星][2y] [C] [embedi/tcl_shellcode](https://github.com/embedi/tcl_shellcode) A template project for creating a shellcode for the Cisco IOS in the C language
+- [**25**星][5y] [Java] [elechantelepate/bip_hack](https://github.com/elechantelepate/bip_hack) Sample app for hacking the BIP! card on the Santiago Public Transit system.
+- [**25**星][4y] [C] [ele7enxxh/mtkfbexploit](https://github.com/ele7enxxh/mtkfbexploit) mtkfb exploit for mt658x & mt6592
+- [**25**星][3y] [Ruby] [eik00d/reverse_dns_shellcode](https://github.com/eik00d/reverse_dns_shellcode) Revrese DNS payload for Metasploit: Download Exec x86 shellcode. Also DNS Handler and VBS bot (alsow working over DNS) as PoC included.
+- [**25**星][5m] [HTML] [duocircle/office365-setup-dkim-dmarc-spf](https://github.com/duocircle/office365-setup-dkim-dmarc-spf) Setup guide for Office 365 Administrators who are unable to use ATP to configure SPF, DKIM and DMARC.
+- [**25**星][2y] [Py] [dragoneeg/struts2-048](https://github.com/dragoneeg/struts2-048) CVE-2017-9791
+- [**25**星][3d] [C++] [domob1812/namecore](https://github.com/domob1812/namecore) Reimplementation of Namecoin on top of the current Bitcoin Core codebase.
+- [**25**星][6y] [C++] [dominictobias/detourxs](https://github.com/dominictobias/detourxs) A x86/64 library for detouring functions on Windows OS
+- [**25**星][2y] [JS] [dg92/graphql-nodejs-modular-kit](https://github.com/dg92/graphql-nodejs-modular-kit)
+- [**25**星][11m] [C] [defuse/yescrypt](https://github.com/defuse/yescrypt) Non-C Implementations of the yescrypt KDF.
+- [**25**星][10m] [Py] [deep-fingerprinting/df](https://github.com/deep-fingerprinting/df) The source code and dataset are used to demonstrate the DF model, and reproduce the results of the ACM CCS2018 paper
+- [**25**星][28d] [danpage/scale](https://github.com/danpage/scale) scale: Side-Channel Attack Lab
+- [**25**星][5y] [Py] [danmcinerney/nmap-parser](https://github.com/danmcinerney/nmap-parser) Parses Nmap XML files
+- [**25**星][2y] [JS] [danielstjules/toragent](https://github.com/danielstjules/toragent) HTTP(S) requests through Tor for Node
+- [**25**星][2y] [JS] [cybellum/vulnerabilities](https://github.com/cybellum/vulnerabilities) Some of the vulnerabilities that were found by Cybellum platform
+- [**25**星][1m] [Py] [cube0x8/chrome_ragamuffin](https://github.com/cube0x8/chrome_ragamuffin) Google Chrome internals analysis using Volatility
+- [**25**星][5y] [JS] [cryptographrix/hootoo_ht-tm05-hacking](https://github.com/cryptographrix/hootoo_ht-tm05-hacking) Hacking the HooToo HT-TM05
+- [**25**星][1y] [JS] [coincheckup/crypto-supplies](https://github.com/coincheckup/crypto-supplies) Cryptocurrency circulating, maximum and total supplies
+- [**25**星][4m] [PS] [codewatchorg/powersniper](https://github.com/codewatchorg/powersniper) Password spraying script and helper for creating password lists
+- [**25**星][2y] [Go] [chuan-yun/esmeralda](https://github.com/chuan-yun/esmeralda) 穿云全链路追踪监控系统日志转储、实时日志数据分析、接口数据服务。
+- [**25**星][4y] [Shell] [cert-polska/hsn2-bundle](https://github.com/cert-polska/hsn2-bundle)
+- [**25**星][6y] [cbrunsch/wmbus-sniffer-muc](https://github.com/cbrunsch/wmbus-sniffer-muc) Source code of the demonstration programs showed in the Black Hat '13 presentation "Energy fraud and orchestrated blackouts: Issues with wireless metering protocols (WM-BUS)" by Cyrill Brunschwiler
+- [**25**星][3y] [Java] [calebfenton/androidemulatordetect](https://github.com/calebfenton/androidemulatordetect) Android Emulator Detection
+- [**25**星][2y] [PHP] [bypupil/ctfhub](https://github.com/bypupil/ctfhub) Some Docker for CTF environments
+- [**25**星][1y] [C++] [buseclab/paybreak](https://github.com/buseclab/paybreak)
+- [**25**星][2m] [C++] [boegel/mica](https://github.com/boegel/mica) a Pin tool for collecting microarchitecture-independent workload characteristics
+- [**25**星][3y] [Py] [bnagy/francis](https://github.com/bnagy/francis) LLDB engine based tool to instrument OSX apps and triage crashes
+- [**25**星][5y] [Py] [bkerler/oregondecoder](https://github.com/bkerler/oregondecoder) Oregon Scientific V1/V2 Gnuradio Decoder
+- [**25**星][4y] [Shell] [binkybear/honeypi](https://github.com/binkybear/honeypi) Bash script to install Honeypot projects ona Raspbian System
+- [**25**星][4y] [C] [bfosterjr/windowsrtdev](https://github.com/bfosterjr/windowsrtdev)
+- [**25**星][6y] [Py] [batteryshark/miasma](https://github.com/batteryshark/miasma) Cross-Platform Binary OTF Patcher, Code Injector, Hacking Utility
+- [**25**星][3y] [C] [azuregreen/arktooldrv](https://github.com/azuregreen/arktooldrv) An ark tool's driver
+- [**25**星][2y] [Go] [avineshwar/slurp](https://github.com/avineshwar/slurp) S3 bucket enumerator
+- [**25**星][5y] [Py] [averagesecurityguy/crack](https://github.com/averagesecurityguy/crack) XMLRPC server for password cracking
+- [**25**星][2y] [JS] [auth0-blog/blog-passwordless-authentication](https://github.com/auth0-blog/blog-passwordless-authentication) Learn how to integrate passwordless authentication with Facebook Account Kit and Auth0 Passwordless
+- [**25**星][3y] [Py] [atiger77/xunfeng_docker](https://github.com/atiger77/xunfeng_docker) 同程巡风项目Docker镜像版
+- [**25**星][2y] [C++] [apriorit/custom-bootloader](https://github.com/apriorit/custom-bootloader) A demo tutorial for low-level and kernel developers - developing a custom Windows boot loader
+- [**25**星][1y] [Py] [ansorren/gdpatrol](https://github.com/ansorren/gdpatrol) A Lambda-powered Security Orchestration framework for AWS GuardDuty
+- [**25**星][2y] [andrew-morris/presentations](https://github.com/andrew-morris/presentations) A centralized location for all presentations I've given at various conferences
+- [**25**星][6m] [Py] [andreafioraldi/r2angrdbg](https://github.com/andreafioraldi/r2angrdbg) 在 radare2 调试器中使用 angr
+- [**25**星][3y] [Shell] [amoghbl1/orfox](https://github.com/amoghbl1/orfox) This is my repository for the orfox browser, a browser that uses tor to communicate and Firefox for Android as it's base.
+- [**25**星][29d] [Lua] [alpinelinux/alpine-secdb](https://github.com/alpinelinux/alpine-secdb) Alpine Linux security database
+- [**25**星][2y] [Shell] [alephsecurity/edlrooter](https://github.com/alephsecurity/edlrooter)
+- [**25**星][8y] [aheadley/logitech-solar-k750-linux](https://github.com/aheadley/logitech-solar-k750-linux) Userspace "driver" for the Logitech k750 Solar Keyboard. A fork of the repo from
+- [**25**星][3y] [Go] [aead/hydrogen](https://github.com/aead/hydrogen) Go implementation of libhydrogen - a lightweight, easy-to-use crypto library
+- [**25**星][2y] [Py] [absingh31/tor_spider](https://github.com/absingh31/tor_spider) Python project to crawl and scrap the lesser known deep web or one can say dark web. Just provide the onion link and get started.
+- [**25**星][5m] [aadityapurani/nodejs-red-team-cheat-sheet](https://github.com/aadityapurani/nodejs-red-team-cheat-sheet) NodeJS Red-Team Cheat Sheet
+- [**25**星][3y] [HTML] [4b5f5f4b/pocs](https://github.com/4b5f5f4b/pocs)
+- [**25**星][2y] [1337g/cve-2017-17215](https://github.com/1337g/cve-2017-17215) CVE-2017-17215 HuaWei Router RCE (NOT TESTED)
+- [**25**星][6m] [Py] [0x00string/oldays](https://github.com/0x00string/oldays) public exploits
+- [**25**星][2y] [C] [0x00-0x00/cve-2018-1000001](https://github.com/0x00-0x00/cve-2018-1000001) glibc getcwd() local privilege escalation compiled binaries
+- [**24**星][23d] [Visual Basic .NET] [zelon88/ransomware_defender](https://github.com/zelon88/ransomware_defender) A Windows Logon / Startup / Scheduled Task Script for Ransomware Detection & Early-Warning
+- [**24**星][1m] [Go] [monkeydioude/capybara](https://github.com/monkeydioude/capybara) Capybara, simple reverse-proxy (api gateway) for localhost services
+- [**24**星][t] [thehive-project/awesome](https://github.com/thehive-project/awesome) A curated list of awesome things related to TheHive & Cortex
+- [**24**星][3y] [C#] [nytrorst/hookme](https://github.com/nytrorst/hookme) Exported from
+- [**24**星][2y] [HTML] [iaik/interruptjs](https://github.com/iaik/interruptjs) Practical Keystroke Timing Attacks in Sandboxed JavaScript
+- [**24**星][2y] [C#] [reswitched/hacversionlistbot](https://github.com/reswitched/hacversionlistbot) Versionlist update tracker for the Nintendo Switch.
+- [**24**星][1y] [JS] [shack2/jvapp](https://github.com/shack2/jvapp) Java漏洞练习程序,开发工具Eclipse,运行环境Java 1.7以上版本,Tocmat7以上。
+- [**24**星][3y] [C++] [sektioneins/aarch64_cryptoextension](https://github.com/sektioneins/aarch64_cryptoextension) IDA AArch64 processor extender extension: Adding crypto extension instructions (AES/SHA1/SHA256)
+- [**24**星][2y] [Shell] [david942j/honest](https://github.com/david942j/honest) Are your installed packages _really_ the same as you saw on GitHub?
+- [**24**星][5y] [C#] [yck1509/dnexplorer](https://github.com/yck1509/dnexplorer) A simple viewer of modules using dnlib.
+- [**24**星][6y] [Py] [felixgr/pytaint](https://github.com/felixgr/pytaint)
+- [**24**星][4m] [Go] [l3m0n/vulenv](https://github.com/l3m0n/vulenv) 漏洞测试环境 - 方便写扫描器利用复现
+- [**24**星][3y] [Assembly] [rehints/bootkitsbook](https://github.com/rehints/bootkitsbook) repository with additional materials and source code
+- [**24**星][4y] [Java] [stealthcopter/steganography](https://github.com/stealthcopter/steganography) Android Steganography Library
+- [**24**星][1y] [n0tr00t/n0js](https://github.com/n0tr00t/n0js) n0js xss challenges
+- [**24**星][5y] [C] [z3apa3a/3scan](https://github.com/z3apa3a/3scan) 3Scan is fast detector for open HTTP/CONNECT/SOCKS4/SOCKS5/FTP/TELNET proxy
+- [**24**星][10m] [C++] [tasvideos/vba-rerecording](https://github.com/tasvideos/vba-rerecording) Automatically exported from code.google.com/p/vba-rerecording
+- [**24**星][28d] [C] [userlandkernel/usbusted](https://github.com/userlandkernel/usbusted) Research on Apple's USB protocols
+- [**24**星][3y] [Py] [jenkstom/python-ddns](https://github.com/jenkstom/python-ddns) A self-hosted dynamic DNS service using BIND9 and python.
+- [**24**星][9m] [Java] [openindex/remotesupporttool](https://github.com/openindex/remotesupporttool) an easy single click solution for remote maintenance
+- [**24**星][2m] [Py] [kismon/kismon](https://github.com/kismon/kismon) A GUI client for kismet
+- [**24**星][2y] [Ruby] [trailofbits/trailofphish](https://github.com/trailofbits/trailofphish) Phishing e-mail repository
+- [**24**星][27d] [cypurr-collective/cypurr-prezes](https://github.com/cypurr-collective/cypurr-prezes) presentation materials for our cryptoparties
+- [**24**星][3m] [abhinavprasad47/bugbounty-starter-notes](https://github.com/abhinavprasad47/bugbounty-starter-notes) bug bounty hunters starter notes
+- [**24**星][3y] [AutoIt] [yaseralnajjar/ida-msdn-helper](https://github.com/yaseralnajjar/IDA-MSDN-helper) IDA Pro MSDN Helper
+- [**24**星][4m] [C] [hatching/tracy](https://github.com/hatching/tracy) tracy - a system call tracer and injector. Find us in #tracy on irc.freenode.net
+- [**24**星][2y] [C++] [vmcall/token_manipulation](https://github.com/vmcall/token_manipulation) Bypass User Account Control by manipulating tokens
+- [**24**星][12m] [C++] [zsshen/yadd](https://github.com/zsshen/yadd) Yet another Android Dex bytecode Disassembler: a static Android app disassembler for fast class and method signature extraction and code structure visualization.
+- [**24**星][1y] [C] [zhuhuibeishadiao/pathmodification](https://github.com/zhuhuibeishadiao/pathmodification) Process path modification x64
+- [**24**星][4y] [Py] [zecure/shadowd_python](https://github.com/zecure/shadowd_python) A Shadow Daemon connector for Python applications
+- [**24**星][4m] [xyntax/slides](https://github.com/xyntax/slides) My public presentation slides.
+- [**24**星][2y] [C#] [xxczaki/logger](https://github.com/xxczaki/logger) ☠
+- [**24**星][4y] [xgfan/ss-relay](https://github.com/xgfan/ss-relay) shadowsocks relay docker
+- [**24**星][9m] [TS] [woza-lab/woza](https://github.com/woza-lab/woza) [Deprecated]Dump application ipa from jailbroken iOS based on frida. (Node edition)
+- [**24**星][3y] [woodspeed/pentest](https://github.com/woodspeed/pentest)
+- [**24**星][1y] [C] [wchill/defcon26_badgehacking](https://github.com/wchill/defcon26_badgehacking) Notes and things regarding hacking DEFCON 26's badge
+- [**24**星][5y] [JS] [vector35/hackinggames](https://github.com/vector35/hackinggames) Hacking Games in a Hacked Game
+- [**24**星][4m] [JS] [twilio/starter-ruby](https://github.com/twilio/starter-ruby) A starter app for Ruby developers embarking on their first Twilio quest!
+- [**24**星][1y] [Py] [tuuunya/exploit](https://github.com/tuuunya/exploit) 常用的一些Exploit,经常会更新,也欢迎各位提交新的exp给我。
+- [**24**星][3y] [Py] [topranks/ms17-010_subnet](https://github.com/topranks/ms17-010_subnet) MS17-010 Windows SMB RCE -- Full subnet scanner
+- [**24**星][6y] [Java] [thypon/androidfuzz](https://github.com/thypon/androidfuzz) JavaFuzz 4 Android
+- [**24**星][2y] [Py] [thoughtfuldev/supergirloncrypt](https://github.com/thoughtfuldev/supergirloncrypt) CryptoTrojan in Python (For educational purpose ONLY)
+- [**24**星][12m] [Py] [thom-s/shodan-cli](https://github.com/thom-s/shodan-cli) Python command line wrapper for the shodan.io API
+- [**24**星][1y] [Py] [thelsa/ecshop-getshell](https://github.com/thelsa/ecshop-getshell) ecshop rce getshell
+- [**24**星][1m] [Py] [thehairyj/scout](https://github.com/thehairyj/scout) Scout - a Contactless Active Reconnaissance Tool
+- [**24**星][2y] [Py] [thegeekht/loki.rat](https://github.com/thegeekht/loki.rat) Loki.Rat is a fork of the Ares RAT, it integrates new modules, like recording , lockscreen , and locate options. Loki.Rat is a Python Remote Access Tool.
+- [**24**星][4y] [C++] [thecybermind/ipredir](https://github.com/thecybermind/ipredir) IP redirection+NAT for Windows
+- [**24**星][7m] [Py] [tgalal/consonance](https://github.com/tgalal/consonance) WhatsApp's handshake implementation using Noise Protocol
+- [**24**星][3y] [C] [te-k/openssh-backdoor](https://github.com/te-k/openssh-backdoor) Openssh backdoor found with a ssh honeypot
+- [**24**星][4y] [C] [talos-vulndev/advisories](https://github.com/talos-vulndev/advisories)
+- [**24**星][2y] [Rust] [sushant94/rune](https://github.com/sushant94/rune) rune - radare2 based symbolic emulator
+- [**24**星][3y] [Shell] [superkojiman/dirtshell](https://github.com/superkojiman/dirtshell) dirtshell:提供类似于Shell的接口,使文件路径遍历变得简单且迅速。
+- [**24**星][2y] [Py] [subinacls/filibuster](https://github.com/subinacls/filibuster)
+- [**24**星][2y] [Shell] [styx00/apache-vulns](https://github.com/styx00/apache-vulns) Pentest Scripts for Apache Vulnerabilities
+- [**24**星][10m] [C] [stooged/apptousb-50x](https://github.com/stooged/apptousb-50x) 5.0X
+- [**24**星][1y] [JS] [stephenlb/spoken](https://github.com/stephenlb/spoken) Spoken - JavaScript Text-to-Speech and Speech-to-Text for AI Artificial Intelligence Apps
+- [**24**星][1m] [Rust] [stainless-steel/md5](https://github.com/stainless-steel/md5) MD5 hash function
+- [**24**星][9y] [Java] [spiderlabs/deface](https://github.com/spiderlabs/deface) A Java Server Faces (JSF) testing tool for decoding view state and creating view state attack vectors.
+- [**24**星][11m] [C++] [sonicrules11/barbossa](https://github.com/sonicrules11/barbossa) Macintosh MultiHack for Counter-Strike: Global Offensive
+- [**24**星][2y] [PHP] [skyzyx/bad-passwords](https://github.com/skyzyx/bad-passwords) A list of the top 10,000 most-used passwords from hacked password lists.
+- [**24**星][4m] [Go] [skeeto/pgp-poisoner](https://github.com/skeeto/pgp-poisoner) PGP key poisoner
+- [**24**星][3y] [Py] [sizzop/hevd-exploits](https://github.com/sizzop/hevd-exploits) Various exploits for the HackSys Extreme Vulnerable Driver
+- [**24**星][2y] [silvermoonsecurity/sandboxevasion](https://github.com/silvermoonsecurity/sandboxevasion) Malware sandbox evasion tricks and solution
+- [**24**星][3y] [Py] [silentsignal/activescan3plus](https://github.com/silentsignal/activescan3plus) Modified version of ActiveScan++ Burp Suite extension
+- [**24**星][5m] [Common Lisp] [shrdlu68/cl-tls](https://github.com/shrdlu68/cl-tls) An implementation of TLS and related specifications in Common Lisp
+- [**24**星][1y] [Shell] [shawnduong/pxenum](https://github.com/shawnduong/pxenum) Post eXploitation Enumeration script for Linux. Tested on Ubuntu.
+- [**24**星][2y] [Py] [sensepost/dnserver](https://github.com/sensepost/dnserver) dnserver: Python 编写的简易 DNS 服务器
+- [**24**星][2y] [HTML] [secwiki/ti](https://github.com/secwiki/ti) Threat Research Blog 威胁情报提取与溯源技术研究小组
+- [**24**星][4y] [C++] [secmob/cve-2015-6612](https://github.com/secmob/cve-2015-6612)
+- [**24**星][2y] [Java] [secdec/pen-test-automation](https://github.com/secdec/pen-test-automation) A framework for automating penetration testing using a plugin based architecture
+- [**24**星][3y] [C] [seccon/seccon2016_online_ctf](https://github.com/seccon/seccon2016_online_ctf) SECCON2016 online CTF for public
+- [**24**星][3y] [Py] [sciencemanx/ctf-tools](https://github.com/sciencemanx/ctf-tools) Attack-Defend CTF Tools
+- [**24**星][4d] [scanfsec/cve-2018-15982](https://github.com/scanfsec/cve-2018-15982) Aggressor Script to launch IE driveby for CVE-2018-15982.
+- [**24**星][5y] [ObjC] [samdmarshall/ios-internals](https://github.com/samdmarshall/ios-internals) iOS related code
+- [**24**星][1y] [Py] [rootm0s/casper](https://github.com/rootm0s/casper) 👻 Socket based RAT for Windows with evasion techniques and other features for control
+- [**24**星][4y] [C++] [rootkitsmm/winio-vidix](https://github.com/rootkitsmm/winio-vidix) Exploit WinIo - Vidix and Run Shellcode in Windows Kerne ( local Privilege escalation )
+- [**24**星][1y] [Go] [root-gg/wsp](https://github.com/root-gg/wsp) HTTP tunnel over Websocket
+- [**24**星][3y] [Go] [robinmonjo/ngx_http_l](https://github.com/robinmonjo/ngx_http_l) nginx module "mostly" developed in Go
+- [**24**星][2y] [HTML] [ring04h/cia-hacking-tools](https://github.com/ring04h/cia-hacking-tools) WikiLeaks Vault 7 CIA Hacking Tools
+- [**24**星][5y] [Py] [ricterz/simple-dns](https://github.com/ricterz/simple-dns) A simple regular-expression based DNS server
+- [**24**星][2y] [retrogamer74/firmwarev5.05_mirahen_baseinjection](https://github.com/retrogamer74/firmwarev5.05_mirahen_baseinjection) Mira HEN 5.05 PS4 Fast developed firmware just for the basic injection
+- [**24**星][3y] [Py] [restran/hacker-scripts](https://github.com/restran/hacker-scripts)
+- [**24**星][5m] [redshiftzero/awesome-threat-modeling](https://github.com/redshiftzero/awesome-threat-modeling) a curated list of useful threat modeling resources
+- [**24**星][4m] [C#] [rciworks/rci.tutorials.csgo.cheat.external](https://github.com/rciworks/rci.tutorials.csgo.cheat.external) "Counter-Strike: Global Offensive" External Cheat
+- [**24**星][7y] [C] [rapid7/vaccination](https://github.com/rapid7/vaccination)
+- [**24**星][1y] [prsecurity/neutrino](https://github.com/prsecurity/neutrino) Neutrino C2 Source Code
+- [**24**星][2y] [Py] [portswigger/burp-smart-buster](https://github.com/portswigger/burp-smart-buster) A Burp Suite content discovery plugin that add the smart into the Buster!
+- [**24**星][2y] [C++] [polycone/pe-loader](https://github.com/polycone/pe-loader) A Windows PE format file loader
+- [**24**星][3y] [polarislab/s2-045](https://github.com/polarislab/s2-045) Struts2 S2-045(CVE-2017-5638)Vulnerability environment -
+- [**24**星][12m] [plenumlab/gql-helper](https://github.com/plenumlab/gql-helper) This is a small extension to make graphql readable
+- [**24**星][1y] [JS] [peterwilli/iota-ion.lib.js](https://github.com/peterwilli/iota-ion.lib.js) IOTA ION Library - Fast data-troughput in the browser, supported by the IOTA tangle.
+- [**24**星][1m] [JS] [pertsev/web3_utilz](https://github.com/pertsev/web3_utilz) Useful snippets of js code for interacting with Smart Contracts
+- [**24**星][2y] [Py] [p4u/stratum-relay](https://github.com/p4u/stratum-relay) Stratum proxy relay for mining altcoin
+- [**24**星][3y] [Java] [owasp/owasp-proxy](https://github.com/owasp/owasp-proxy) Owasp Proxy
+- [**24**星][3y] [C] [osandamalith/shellcodes](https://github.com/osandamalith/shellcodes) My Shellcode Archive
+- [**24**星][4y] [C] [osandamalith/imageexploiter](https://github.com/osandamalith/imageexploiter) Hide JavaScript inside your GIF and BMP images
+- [**24**星][3d] [Java] [opticfusion1/mcantimalware](https://github.com/opticfusion1/mcantimalware) Anti-Malware for minecraft
+- [**24**星][2y] [Py] [operatorequals/chmod-stego](https://github.com/operatorequals/chmod-stego) A PoC on passing data through UNIX file privilege bits (RWX Triplets)
+- [**24**星][3y] [C] [opensise/cve_poc_collect](https://github.com/opensise/cve_poc_collect) 这里会收集各种类型的CVE PoC 和EXP ,仅用来学习漏洞挖掘相关技术..
+- [**24**星][2y] [Shell] [oniondecoy/installer](https://github.com/oniondecoy/installer) A platform to run private unannounced Honeypots as Tor Hidden Services (aka Onion Decoys) inside the Tor Network.
+- [**24**星][2d] [Py] [oasis-open/cti-stix-elevator](https://github.com/oasis-open/cti-stix-elevator) OASIS TC Open Repository: Convert STIX 1.2 XML to STIX 2.0 JSON
+- [**24**星][4m] [HTML] [o-o-overflow/dc2019f-super-smash-ooos](https://github.com/o-o-overflow/dc2019f-super-smash-ooos)
+- [**24**星][2y] [C] [o-o-overflow/chall-www](https://github.com/o-o-overflow/chall-www)
+- [**24**星][1y] [Py] [nullarray/shogun](https://github.com/nullarray/shogun) Shodan.io Command Line Interface
+- [**24**星][1y] [Py] [noobiedog/peanuts](https://github.com/noobiedog/peanuts) Peanuts is a free and open source wifi tracking tool. Based on the SensePosts Snoopy-NG project that is now closed.
+- [**24**星][22d] [Py] [nocomplexity/securityprivacyreferencearchitecture](https://github.com/nocomplexity/securityprivacyreferencearchitecture) Open Repository for the Open Security and Privacy Reference Architecture
+- [**24**星][1y] [C++] [nixer1337/nixware-gmod](https://github.com/nixer1337/nixware-gmod) Internal c++ gmod hack
+- [**24**星][1y] [Py] [nityanandagohain/proxy_configuration](https://github.com/nityanandagohain/proxy_configuration) System wide proxy configuration in a single script with options to add, remove proxy and restore system default proxy configuration
+- [**24**星][3y] [Py] [nccgroup/blesuite-cli](https://github.com/nccgroup/blesuite-cli) BLESuite_CLI is a command line tool to enable an easier way to test Bluetooth Low Energy (BLE) devices
+- [**24**星][2y] [Py] [nccgroup/binja_dynamics](https://github.com/nccgroup/binja_dynamics) A PyQt5 frontend to the binjatron plugin for Binary Ninja that includes highlighting features aimed at making it easier for beginners to learn about reverse engineering
+- [**24**星][2y] [Go] [mlesniak/port-scanner](https://github.com/mlesniak/port-scanner) Port scanner in Go
+- [**24**星][4m] [C] [misje/dhcpoptinj](https://github.com/misje/dhcpoptinj) DHCP option injector
+- [**24**星][5y] [C++] [michael4338/ndis](https://github.com/michael4338/ndis) Windows Kernel Driver - Create a driver device in intermediate layer of Windows kernel based on NDIS, which communicates with and connect upper layer (user mode applications) and lower layer (miniport driver/network card). Create self-defined protocols for transmitting data and control communications by simulating very simple HTTP, TCP and ARP p…
+- [**24**星][4y] [Py] [miaouplop/gwt-3d](https://github.com/miaouplop/gwt-3d) aimed at helping you during penetration testing on GWT technology
+- [**24**星][3y] [C] [mehqq/public_writeup](https://github.com/mehqq/public_writeup) My CTF writeup
+- [**24**星][3y] [Pascal] [martindrab/vrtuletree](https://github.com/martindrab/vrtuletree) VrtuleTree is a tool that displays information about driver and device objects present in the system and relations between them. Its functionality is very similar to famous DeviceTree, however, VrtuleTree emhasises on stability and support of latest Windows versions
+- [**24**星][2y] [Py] [marcusbotacin/anti.analysis](https://github.com/marcusbotacin/anti.analysis) Malware Analysis, Anti-Analysis, and Anti-Anti-Analysis
+- [**24**星][2y] [PHP] [magento-engcom/php-7.2-support](https://github.com/magento-engcom/php-7.2-support) Repository for implementing support of php-7.2 support in Magento
+- [**24**星][1y] [Py] [m4rktn/jogan](https://github.com/m4rktn/jogan) Pentest Tools & Packages Installer [Linux/Termux]
+- [**24**星][4y] [C] [ltangjian/firewall](https://github.com/ltangjian/firewall) Based on the research of Windows network architecture and the core packet filtering firewall technology, using NDIS intermediate driver, the article achieved the filter of the core layer, and completed the Windows Personal Firewall Design and Implementation.
+- [**24**星][4y] [PHP] [lt/php-cryptopals](https://github.com/lt/php-cryptopals) The Matasano crypto challenges completed using PHP
+- [**24**星][3y] [long123king/grep](https://github.com/long123king/grep) Grep-like WinDbg extension
+- [**24**星][3y] [Py] [lolwaleet/bannergrab](https://github.com/lolwaleet/bannergrab) ~ BannerGrab
+- [**24**星][1m] [Shell] [lockedbyte/ddos2track](https://github.com/lockedbyte/ddos2track) A script to avoid HTTP Floods attacks, log the attacker IP Addresses and Traffic, and Send you an email to warn that you are behind an attack.
+- [**24**星][12m] [C++] [lesmargoulins/margoulineur2000](https://github.com/lesmargoulins/margoulineur2000) NFC
+- [**24**星][8m] [Dockerfile] [knqyf263/cve-2019-6467](https://github.com/knqyf263/cve-2019-6467) CVE-2019-6467 (BIND nxdomain-redirect)
+- [**24**星][6m] [Zeek] [kinomakino/threat-intelligence-data](https://github.com/kinomakino/threat-intelligence-data) Snort_rules detection bad actors.
+- [**24**星][11m] [Py] [kennell/ftpknocker](https://github.com/kennell/ftpknocker)
+- [**24**星][6m] [Py] [keithjjones/malgazer](https://github.com/keithjjones/malgazer) A Python malware analysis library.
+- [**24**星][4y] [Py] [karblue/pppoe-hijack](https://github.com/karblue/pppoe-hijack) 伪装PPPoE服务器截取密码
+- [**24**星][9m] [C] [kaist-ina/sgx-tor](https://github.com/kaist-ina/sgx-tor) Tor anonymity network for SGX
+- [**24**星][2m] [ka0labs/ctf-writeups](https://github.com/ka0labs/ctf-writeups) CTF Writeups
+- [**24**星][2y] [C++] [k0keoyo/hevd-arbitrary-overwrite-exploit-win10-rs3](https://github.com/k0keoyo/hevd-arbitrary-overwrite-exploit-win10-rs3)
+- [**24**星][9m] [PHP] [jsondeveloper/dante-gui](https://github.com/jsondeveloper/dante-gui) Dante Server (SOCKS5 Proxy) Web Interface (Telegram ready)
+- [**24**星][2y] [Java] [joychou93/trident](https://github.com/joychou93/trident) Java通用漏洞修复安全组件
+- [**24**星][9m] [Java] [jonas-schievink/ghidraxbe](https://github.com/jonas-schievink/ghidraxbe) A Ghidra extension for loading Xbox Executables (.xbe files)
+- [**24**星][4m] [Py] [joelwking/phantom-cyber](https://github.com/joelwking/phantom-cyber) Phantom Playbook and App repository
+- [**24**星][12m] [C] [jmcph4/crackerjack](https://github.com/jmcph4/crackerjack) A collection of crackmes
+- [**24**星][1y] [PS] [jiangxianli/googlehosttool](https://github.com/jiangxianli/googlehosttool) 一键添加最新google hosts文件到本地hosts文件中,google 翻墙访问工具,适用windows、linux、mac
+- [**24**星][2y] [Shell] [jacksongl/npm-vuln-poc](https://github.com/jacksongl/npm-vuln-poc) Vulnerabilities discovered in npm repository [Berkeley PL & Security Research].
+- [**24**星][6y] [Py] [izuzak/urlreq](https://github.com/izuzak/urlreq) HTTP proxy that decodes a HTTP request defined in the URL and makes that request
+- [**24**星][3y] [PS] [invoke-ir/presentations](https://github.com/invoke-ir/presentations)
+- [**24**星][3y] [JS] [informationshallbefree/spiegel-plus-unlocker-firefox](https://github.com/informationshallbefree/spiegel-plus-unlocker-firefox) A Firefox Addon to decrypt every Spiegel Plus article without paying money.
+- [**24**星][2m] [Py] [ictu/zap-baseline](https://github.com/ictu/zap-baseline) Zap baseline scanner in Docker with authentication
+- [**24**星][2y] [Shell] [hannob/ctgrab](https://github.com/hannob/ctgrab)
+- [**24**星][6y] [C] [hacksysteam/shellcodeofdeath](https://github.com/hacksysteam/shellcodeofdeath) Shellcode Of Death
+- [**24**星][6y] [Ruby] [hackedteam/rcs-backdoor](https://github.com/hackedteam/rcs-backdoor) Backdoor implementation in Ruby (testing)
+- [**24**星][1y] [Py] [gynvael/arcanesector](https://github.com/gynvael/arcanesector) Arcane Sector game - a CTF task, or old-school (MMO)RPG - depending on the perspective. The code is of terrible quality, you have been warned!
+- [**24**星][3y] [C] [guilhermeferreira/spikepp](https://github.com/guilhermeferreira/spikepp) SPIKE is a protocol fuzzer creation kit. It provides an API that allows a user to create their own fuzzers for network based protocols using the C++ programming language. The tool defines a number of primitives that it makes available to C coders, which allows it to construct fuzzed messages called “SPIKES” that can be sent to a network service …
+- [**24**星][1y] [JS] [goliatone/arpscan](https://github.com/goliatone/arpscan) Node arp-scan wrapper
+- [**24**星][3m] [Py] [ghostofgoes/adles](https://github.com/ghostofgoes/adles) Automated Deployment of Lab Environments System (ADLES)
+- [**24**星][3y] [Py] [freedomofpress/fingerprint-securedrop](https://github.com/freedomofpress/fingerprint-securedrop) A machine learning data analysis pipeline for analyzing website fingerprinting attacks and defenses.
+- [**24**星][2y] [foundstone/expertinvestigationguides](https://github.com/foundstone/expertinvestigationguides) Expert Investigation Guides
+- [**24**星][20d] [Py] [foteinosmerg/pymerkle](https://github.com/foteinosmerg/pymerkle) Python crypto toolkit for generation and validation of Merkle-Proofs
+- [**24**星][4y] [C] [fortiguard-lion/anti-dll-hijacking](https://github.com/fortiguard-lion/anti-dll-hijacking)
+- [**24**星][3y] [Py] [forensicmatt/pancakeviewer](https://github.com/forensicmatt/pancakeviewer) A DFVFS Backed Forensic Viewer
+- [**24**星][3y] [Py] [fluproject/flunym0us](https://github.com/fluproject/flunym0us) Flunym0us is a Vulnerability Scanner for Wordpress and Moodle designed by Flu Project Team. Flunym0us has been developed in Python. Flunym0us performs dictionary attacks against Web sites. By default, Flunym0us includes a dictionary for Wordpress and other for Moodle.
+- [**24**星][3y] [Py] [felmoltor/keepnote_import_nmap](https://github.com/felmoltor/keepnote_import_nmap) Plugin for keepnote to import a XML nmap file
+- [**24**星][5d] [Shell] [fajartheggman/f-tools](https://github.com/fajartheggman/f-tools) Toolkit Hacking
+- [**24**星][4y] [exp-sky/hitcon-2015-spartan-0day-exploit](https://github.com/exp-sky/hitcon-2015-spartan-0day-exploit) HitCon 2015 spartan 0day & exploit
+- [**24**星][4y] [JS] [eviltik/evilwaf](https://github.com/eviltik/evilwaf) Web Application Firewall (WAF) Detection Tool
+- [**24**星][2y] [evilmog/hashcat-hcstat](https://github.com/evilmog/hashcat-hcstat) A collection of hashcat-hcstat files
+- [**24**星][6m] [Py] [evild3ad/isodump](https://github.com/evild3ad/isodump) isodump - ISO dump utility
+- [**24**星][7m] [JS] [ettic-team/endpointfinder](https://github.com/ettic-team/endpointfinder)
+- [**24**星][12d] [HTML] [equalitie/banjax](https://github.com/equalitie/banjax) Apache Traffic Server Plugin performing various anti-DDoS measures
+- [**24**星][6y] [C++] [epsylon3/odbgscript](https://github.com/epsylon3/odbgscript) OllyDBG Script Engine
+- [**24**星][1y] [C] [enovella/exploitrainings](https://github.com/enovella/exploitrainings) Exploitation on different architectures (x86, x64, arm, mips, avr)
+- [**24**星][5y] [C++] [edix/malwareresourcescanner](https://github.com/edix/malwareresourcescanner) Scanning and identifying XOR encrypted PE files in PE resources
+- [**24**星][2y] [Py] [dsnezhkov/octohook](https://github.com/dsnezhkov/octohook) Git Web Hook Tunnel for C2
+- [**24**星][6y] [Py] [dkovar/ircollect](https://github.com/dkovar/ircollect) ircollect
+- [**24**星][9m] [Dockerfile] [dizcza/docker-hashcat](https://github.com/dizcza/docker-hashcat) Hashcat docker for Ubuntu 18.04 OpenCL 2.1
+- [**24**星][2y] [ObjC] [dev-liyang/lytableviewwidget](https://github.com/dev-liyang/lytableviewwidget) 逆向微信-分析学习微信是如何快速构建静态TableView界面的
+- [**24**星][1m] [Py] [desword/pwn_execrise](https://github.com/desword/pwn_execrise) A collection of pwn execrise
+- [**24**星][3y] [Ruby] [deadbits/maz](https://github.com/deadbits/maz) Malware Analysis Zoo
+- [**24**星][2y] [Py] [cym13/vbs-reverse-shell](https://github.com/cym13/vbs-reverse-shell) VBS reverse shell scripts
+- [**24**星][6y] [PHP] [cyberisltd/gzipbloat](https://github.com/cyberisltd/gzipbloat) PHP framework to test User-Agents and intermediary content inspection devices for denial-of-service vulnerabilities with respect to HTTP response decompression.
+- [**24**星][1y] [C#] [countercept/dotnet-gargoyle](https://github.com/countercept/dotnet-gargoyle) A spiritual .NET equivalent to the Gargoyle memory scanning evasion technique
+- [**24**星][1y] [Py] [cosine0/amphitrite](https://github.com/cosine0/amphitrite) Symbolic debugging tool using JonathanSalwan/Triton
+- [**24**星][2y] [Groovy] [continuumsecurity/ropeytasks](https://github.com/continuumsecurity/ropeytasks) Deliberately vulnerable web application
+- [**24**星][2y] [Java] [commonsguy/autofillfollies](https://github.com/commonsguy/autofillfollies) Demonstration of security issues with Android 8.0 autofill
+- [**24**星][2y] [PS] [codingo/retrieve-windows-wifi-passwords](https://github.com/codingo/retrieve-windows-wifi-passwords) Retreives the SSID names and passwords in cleartext for each Wifi network stored on the computer running this powershell script and output to JSON.
+- [**24**星][4y] [C] [cngutierr/ersatzpassword](https://github.com/cngutierr/ersatzpassword)
+- [**24**星][1y] [CSS] [citguru/jobby](https://github.com/citguru/jobby) A Job Listing Web App using NodeJS and Indreed
+- [**24**星][10m] [chrysh/ctf_writeups](https://github.com/chrysh/ctf_writeups)
+- [**24**星][7y] [Ruby] [chrislee35/flowtag](https://github.com/chrislee35/flowtag) FlowTag visualizes pcap files for forensic analysis
+- [**24**星][3y] [C++] [chausner/1337patch](https://github.com/chausner/1337patch) Simple command-line tool to apply patches exported by x64dbg to running processes
+- [**24**星][1y] [Py] [bwesterb/pol](https://github.com/bwesterb/pol) pol /pɵl/ is a modern command line password manager with deniable encryption
+- [**24**星][5y] [Py] [burningcodes/dexconfuse](https://github.com/burningcodes/dexconfuse) 简易dex混淆器
+- [**24**星][5m] [Py] [bunseokbot/darklight](https://github.com/bunseokbot/darklight) Engine for collecting onion domains and crawling from webpage based on Tor network
+- [**24**星][3y] [Py] [bunseokbot/androtools](https://github.com/bunseokbot/androtools) Android malware static & dynamic analysis and automated action (deprecated)
+- [**24**星][2y] [Py] [brainsmoke/pub-archive](https://github.com/brainsmoke/pub-archive)
+- [**24**星][6y] [C] [brainsmoke/minemu](https://github.com/brainsmoke/minemu) Minemu is a minimal emulator for dynamic taint analysis ( this is a mirror of
+- [**24**星][1y] [bountymachine/about](https://github.com/bountymachine/about) A central place to keep track of relevant BountyMachine talks, blogs, and interesting things!
+- [**24**星][3y] [Py] [bounteous/libenom](https://github.com/bounteous/libenom)
+- [**24**星][10m] [C++] [blitz/baresifter](https://github.com/blitz/baresifter) A bare-metal x86 instruction set fuzzer a la Sandsifter
+- [**24**星][2y] [PHP] [blackfan/jpg_payload](https://github.com/blackfan/jpg_payload)
+- [**24**星][10m] [bkerler/slides_and_papers](https://github.com/bkerler/slides_and_papers) Here be dragons. Or Slides. Or Papers. Or Nothing :)
+- [**24**星][11m] [Go] [betalo-sweden/forwardingproxy](https://github.com/betalo-sweden/forwardingproxy) A HTTP/S forwarding proxy in Go
+- [**24**星][9m] [C] [begriffs/utofu](https://github.com/begriffs/utofu) Unicode Trust on First Use (TOFU)
+- [**24**星][2m] [JS] [aykutcevik/idn-safe](https://github.com/aykutcevik/idn-safe) "IDN Safe" is a browser extension which blocks internationalized domain names to prevent you from visiting probable fake sites
+- [**24**星][3y] [C] [avalon1610/alpc](https://github.com/avalon1610/alpc) Advance LPC
+- [**24**星][2y] [JS] [auth0-blog/nextjs-got](https://github.com/auth0-blog/nextjs-got) A simple nextjs application that showcases Game of Thrones Characters
+- [**24**星][1y] [Py] [aurore54f/jast](https://github.com/aurore54f/jast) Syntactic detection of malicious (obfuscated) JavaScript files
+- [**24**星][2m] [Ruby] [arkadiyt/ssrf_filter](https://github.com/arkadiyt/ssrf_filter) A ruby gem for defending against Server Side Request Forgery (SSRF) attacks
+- [**24**星][4y] [C] [arizvisa/afl-cygwin](https://github.com/arizvisa/afl-cygwin) AFL "mostly" ported to cygwin
+- [**24**星][8m] [C++] [anwi-wips/anwi](https://github.com/anwi-wips/anwi) 新型无线IDS, 基于低成本的Wi-Fi模块(ESP8266)
+- [**24**星][5y] [PS] [anweiss/dockerclientdsc](https://github.com/anweiss/dockerclientdsc)
+- [**24**星][1m] [Dockerfile] [antswordproject/antsword-labs](https://github.com/antswordproject/antsword-labs) Awesome environment for antsword tests
+- [**24**星][1m] [Py] [anssi-fr/packetweaver](https://github.com/anssi-fr/packetweaver) A Python framework for script filing and task sequencing
+- [**24**星][7y] [Java] [akdeniz/mitmsocks4j](https://github.com/akdeniz/mitmsocks4j) Man in the Middle SOCKS Proxy for JAVA
+- [**24**星][4y] [JS] [aerospaceresearch/dgsn_bigwhoop](https://github.com/aerospaceresearch/dgsn_bigwhoop) BigWhoop
+- [**24**星][1y] [C++] [adrianyy/x64-syscall](https://github.com/adrianyy/x64-syscall) x64 syscall caller in C++.
+- [**24**星][2y] [Py] [admintony/sql-injection](https://github.com/admintony/sql-injection) 解决sqlmap不能跑的注入
+- [**24**星][1m] [Perl] [abarisani/abarisani.github.io](https://github.com/abarisani/abarisani.github.io)
+- [**24**星][9m] [Py] [a-maumau/vesta](https://github.com/a-maumau/vesta) GPU state check script.
+- [**24**星][1y] [0xkiewicz/pwk-oscp](https://github.com/0xkiewicz/pwk-oscp) Empower your enumeration during OSCP
+- [**24**星][3y] [Py] [0xbc/chiasm-shell](https://github.com/0xbc/chiasm-shell) Python-based interactive assembler/disassembler CLI, powered by Keystone/Capstone.
+- [**24**星][2y] [Py] [0verl0ad/dumb0](https://github.com/0verl0ad/dumb0) A simple tool to dump users in popular forums and CMS :)
+- [**24**星][7d] [Py] [00xc/h2buster](https://github.com/00xc/h2buster) A fast, threaded, recursive, web directory brute-force scanner over HTTP/2.
+- [**23**星][2y] [jonnybanana/essential-usb-rubber-ducky-printable-cheat-sheet](https://github.com/jonnybanana/essential-usb-rubber-ducky-printable-cheat-sheet) My personal RubberDucky Cheat Sheet, in JPG, PNG and PDF
+- [**23**星][6m] [C++] [amirrezanasiri/usb-keystroke-injector](https://github.com/amirrezanasiri/usb-keystroke-injector)
+- [**23**星][8m] [Shell] [thelinuxchoice/clipboardme](https://github.com/thelinuxchoice/clipboardme) Grab target's clipboard content
+- [**23**星][8m] [C++] [hikariobfuscator/core](https://github.com/hikariobfuscator/core) Shared Obfuscation Core
+- [**23**星][2m] [Shell] [hak5/signalowl-payloads](https://github.com/hak5/signalowl-payloads) The Official Hak5 Signal Owl Payload Repository
+- [**23**星][4y] [diafygi/privacy-checklist](https://github.com/diafygi/privacy-checklist) Checklist for securing communications
+- [**23**星][6m] [Py] [nextronsystems/valhallaapi](https://github.com/nextronsystems/valhallaapi) Valhalla API Client
+- [**23**星][2y] [C#] [lockfale/dotnetavbypass-master](https://github.com/lockfale/dotnetavbypass-master) C# AV bypass jank
+- [**23**星][6y] [C#] [kjcracks/brake](https://github.com/kjcracks/brake) Remote cracking utility
+- [**23**星][8y] [C#] [sensepost/suru](https://github.com/sensepost/suru) Suru is one of the original Man In The Middle (MITM) proxies that sits between the user's browser and the web application.
+- [**23**星][6y] [Py] [fsecurelabs/jasmin](https://github.com/fsecurelabs/jasmin)
+- [**23**星][3m] [Shell] [owasp/honeypot-project](https://github.com/owasp/honeypot-project)
+- [**23**星][2y] [Py] [wi-fi-analyzer/boopsuite](https://github.com/wi-fi-analyzer/boopsuite) A Suite of Tools written in Python for wireless auditing and security testing.
+- [**23**星][3y] [hack-with-github/security-bookmarks](https://github.com/hack-with-github/security-bookmarks) Single stop for security related stuff
+- [**23**星][1y] [Py] [ekultek/checkers](https://github.com/ekultek/checkers) Determine everything you need to know to about a system
+- [**23**星][3m] [Py] [warner/magic-wormhole-transit-relay](https://github.com/warner/magic-wormhole-transit-relay) Transit Relay server for Magic-Wormhole
+- [**23**星][5m] [Py] [ntkernel/cve-2019-0708](https://github.com/ntkernel/cve-2019-0708) 收集网上CVE-2018-0708的poc和exp(目前没有找到exp)
+- [**23**星][3y] [C] [nicehash/cpuminer-opt](https://github.com/nicehash/cpuminer-opt)
+- [**23**星][3y] [Py] [d4vinci/reversehttp](https://github.com/d4vinci/reversehttp) Python backdoor that uses http post/get requests to communicate
+- [**23**星][2y] [Py] [airbus-seclab/rebus](https://github.com/airbus-seclab/rebus) REbus facilitates the coupling of existing tools that perform specific tasks, where one's output will be used as the input of others.
+- [**23**星][20d] [Py] [angr/archr](https://github.com/angr/archr) Target-centric program analysis.
+- [**23**星][4y] [Py] [andresriancho/django-moth](https://github.com/andresriancho/django-moth) A Django vulnerable Web application for testing the w3af framework
+- [**23**星][3y] [robertdavidgraham/iotpasswds](https://github.com/robertdavidgraham/iotpasswds) Recording default/backdoor passwords from IoT devices I come across
+- [**23**星][6y] [Go] [inconshreveable/shroud](https://github.com/inconshreveable/shroud) [DEPRECATED] Public hidden services
+- [**23**星][2y] [Py] [andresriancho/mongo-objectid-predict](https://github.com/andresriancho/mongo-objectid-predict) Predict Mongo ObjectIds
+- [**23**星][1y] [hikariobfuscator/swift](https://github.com/hikariobfuscator/swift) Swift Fork
+- [**23**星][3y] [JS] [uber-common/paranoid-request](https://github.com/uber-common/paranoid-request) An SSRF-preventing wrapper around Node's request module
+- [**23**星][6m] [JS] [greenwolf/eslint-security-scanner-configs](https://github.com/greenwolf/eslint-security-scanner-configs) eslintrc.js config files for running static analysis on JavaScript to identify security issues.
+- [**23**星][2y] [Ruby] [urbanadventurer/urlcrazy](https://github.com/urbanadventurer/urlcrazy) Generate and test domain typos and variations to detect and perform typo squatting, URL hijacking, phishing, and corporate espionage.
+- [**23**星][1y] [Go] [tam7t/cautious-pancake](https://github.com/tam7t/cautious-pancake) github generated the repo name for me
+- [**23**星][11d] [JS] [keenwon/koa-subdomain](https://github.com/keenwon/koa-subdomain) Simple and lightweight Koa middleware to handle multilevel and wildcard subdomains
+- [**23**星][1m] [Go] [hahwul/ras-fuzzer](https://github.com/hahwul/ras-fuzzer) RAS(RAndom Subdomain) Fuzzer
+- [**23**星][13d] [JS] [josephpei/uv2ray](https://github.com/josephpei/uv2ray) Electron V2ray Client (mostly for Linux)
+- [**23**星][3y] [Py] [ptonewreckin/blindref](https://github.com/ptonewreckin/blindref) BlindRef serves as the basis for an automated Blind-Based XXE Exploitation Framework
+- [**23**星][3m] [Py] [k8gege/phpstudydoor](https://github.com/k8gege/phpstudydoor) PhpStudy 2016 & 2018 BackDoor Exploit
+- [**23**星][3y] [Java] [nexxado/wifipasswords](https://github.com/nexxado/wifipasswords) a completely free app that shows your device saved wifi passwords.
+- [**23**星][3y] [C++] [aixxe/cstrike-basehook-linux](https://github.com/aixxe/cstrike-basehook-linux) Internal project base for Counter-Strike: Source on Linux.
+- [**23**星][1y] [JS] [andreas0607/coinhive-blocker](https://github.com/andreas0607/coinhive-blocker) Blocks unwanted cryptominers in your browser (plug-in)
+- [**23**星][5y] [C] [rpp0/peapwn](https://github.com/rpp0/peapwn) Proof-of-concept implementation of the Apple relay attack in Python
+- [**23**星][5y] [Py] [vnik5287/wpa-autopwn](https://github.com/vnik5287/wpa-autopwn) WPA/WPA2 autopwn script that parses captured handshakes and sends them to the Crackq
+- [**23**星][29d] [awsmhacks/awsmbloodhoundcustomqueries](https://github.com/awsmhacks/awsmbloodhoundcustomqueries) Collection of cyphers for bloodhound
+- [**23**星][2m] [C] [doublelabyrinth/windowssudo](https://github.com/doublelabyrinth/windowssudo) A linux-like su/sudo on Windows.
+- [**23**星][4y] [C#] [olliencc/winbinaryaudit](https://github.com/olliencc/winbinaryaudit) GSAudit at Symantec, ExeAudit at RIM, RECX Binary Assurance for Windows at Recx etc. - core library now WinBinaryAudit
+- [**23**星][2m] [rarecoil/pantagrule](https://github.com/rarecoil/pantagrule) hashcat rules generated from over 840 million compromised passwords
+- [**23**星][4d] [Py] [bing0o/python-scripts](https://github.com/bing0o/python-scripts) some scripts for penetration testing
+- [**23**星][2m] [PHP] [coenjacobs/wp-haveibeenpwned](https://github.com/coenjacobs/wp-haveibeenpwned) Checks if the password for each WordPress user account has been compromised via haveibeenpwned.com
+- [**23**星][3m] [Visual Basic .NET] [henriksb/extensionspoofer](https://github.com/henriksb/extensionspoofer) Spoof file icons and extensions in Windows
+- [**23**星][6y] [vtsingaras/qcom-mbn-ida-loader](https://github.com/vtsingaras/qcom-mbn-ida-loader) IDA loader plugin for Qualcomm Bootloader Stages
+- [**23**星][5m] [Java] [openjavacard/openjavacard-ndef](https://github.com/OpenJavaCard/openjavacard-ndef) NDEF tag implementation for JavaCard
+- [**23**星][3y] [Java] [ichukai/forwarder](https://github.com/ichukai/forwarder) 穿透内网的端口转发工具
+- [**23**星][2y] [OpenEdge ABL] [praetorian-code/ctf-writeups](https://github.com/praetorian-code/ctf-writeups) Collection of Praetorian solutions to CTF challenges
+- [**23**星][3y] [Py] [jofpin/backcookie](https://github.com/jofpin/backcookie) Small backdoor using cookie.
+- [**23**星][4y] [bannsec/angr-windows](https://github.com/bannsec/angr-Windows) Windows builds for use with angr framework
+- [**23**星][2y] [Ruby] [zidekmat/graphql_beautifier](https://github.com/zidekmat/graphql_beautifier) Burp Suite extension to help make Graphql request more readable
+- [**23**星][5y] [Assembly] [zerosum0x0/slae64](https://github.com/zerosum0x0/slae64) x64 Linux Shellcode
+- [**23**星][4y] [Py] [zedsec390/defcon23](https://github.com/zedsec390/defcon23)
+- [**23**星][3y] [Py] [zachriggle/pwndbg](https://github.com/zachriggle/pwndbg) GDB插件,辅助漏洞开发和逆向
+- [**23**星][2m] [xxpe3/clash_raspberrypi](https://github.com/xxpe3/clash_raspberrypi) Clash for ARMv6L
+- [**23**星][4m] [C++] [xpn/rpcenum](https://github.com/xpn/rpcenum) An command-line RPC method enumerator, born out of RPCView's awesomeness
+- [**23**星][5m] [Py] [xorpd/fcatalog_server](https://github.com/xorpd/fcatalog_server) Functions Catalog
+- [**23**星][2y] [PHP] [xiaoxiaoleo/xiao-webshell](https://github.com/xiaoxiaoleo/xiao-webshell) a collection of webshell
+- [**23**星][2y] [Visual Basic .NET] [xiaoxiaoleo/pentest-script](https://github.com/xiaoxiaoleo/pentest-script) Script for pentest
+- [**23**星][7y] [C++] [wyyqyl/hidemodule](https://github.com/wyyqyl/hidemodule) The dll that can hide itself and then delete itselft.
+- [**23**星][3m] [C] [ww9210/kernel4.20_bpf_lpe](https://github.com/ww9210/kernel4.20_bpf_lpe) exploit code for a bpf heap overflow vulnerability
+- [**23**星][2y] [Py] [whitel1st/gp_hijack](https://github.com/whitel1st/gp_hijack) Group Policy Hijacking
+- [**23**星][3y] [Py] [whaleshark-team/chromeheadlessinterface](https://github.com/whaleshark-team/chromeheadlessinterface)
+- [**23**星][2y] [PHP] [weaverheavy/threat-intelligence-tradecraft](https://github.com/weaverheavy/threat-intelligence-tradecraft)
+- [**23**星][2y] [C] [wanttobeno/wmifilter](https://github.com/wanttobeno/wmifilter) 驱动层拦截web访问源码
+- [**23**星][12m] [C++] [wanttobeno/screenshot](https://github.com/wanttobeno/screenshot) 仿QQ截图,C++实现的截图软件Demo
+- [**23**星][9m] [Perl] [vti/cpan-audit](https://github.com/vti/cpan-audit) Check CPAN modules for known security vulnerabilities
+- [**23**星][2y] [C++] [verideth/repen](https://github.com/verideth/repen) Simple C8 disassembler
+- [**23**星][1y] [JS] [veggiedefender/marveloptics_malware](https://github.com/veggiedefender/marveloptics_malware) Deobfuscated + reverse engineered javascript malware
+- [**23**星][3m] [C#] [vchirikov/gotodnspy](https://github.com/vchirikov/gotodnspy) GoTo dnSpy from Visual Studio 2017
+- [**23**星][3y] [Java] [vah13/burpcrlfplugin](https://github.com/vah13/burpcrlfplugin) Another plugin for CRLF vulnerability detection
+- [**23**星][6m] [Swift] [universonic/shadowsocks-macos](https://github.com/universonic/shadowsocks-macos) Shadowsocks Client for Apple macOS
+- [**23**星][3y] [Py] [tylabs/quicksand_tools](https://github.com/tylabs/quicksand_tools) API access to QuickSand.io
+- [**23**星][4m] [C] [tumi8/zmap](https://github.com/tumi8/zmap) ZMapv6: Internet Scanner with IPv6 capabilities
+- [**23**星][3y] [C#] [tum-i22/vot4cs](https://github.com/tum-i22/vot4cs) vot4cs:C#虚拟化混淆工具
+- [**23**星][3y] [C] [true-systems/om5p-ac-v2-unlocker](https://github.com/true-systems/om5p-ac-v2-unlocker) Open Mesh OM5P-AC v2 Unlocker (U-Boot 1.1.4 based)
+- [**23**星][10m] [C++] [trojancyborg/ida_jni_rename](https://github.com/trojancyborg/ida_jni_rename) IDA JNI clal rename
+- [**23**星][2y] [HTML] [tothi/ctfs](https://github.com/tothi/ctfs) some example ctf writeups
+- [**23**星][15d] [Shell] [torworld/fastrelay](https://github.com/torworld/fastrelay) Making it easier to run your own Tor Relay Node.
+- [**23**星][2y] [Py] [tomrittervg/ct-tools](https://github.com/tomrittervg/ct-tools) Random tools to perform Certificate Transparency-related stuff
+- [**23**星][2y] [Py] [tintinweb/unbox](https://github.com/tintinweb/unbox) Unbox is a convenient one-click unpack and decompiler tool that wraps existing 3rd party applications like IDA Pro, JD-Cli, Dex2Src, and others to provide a convenient archiver liker command line interfaces to unpack and decompile various types of files
+- [**23**星][2m] [Py] [theevilbit/exploits](https://github.com/theevilbit/exploits)
+- [**23**星][1y] [Py] [the404hacking/xsscan](https://github.com/the404hacking/xsscan) XsSCan | Web Application XSS Scanner | Coded By Sir.4m1R [Mr.Hidden]
+- [**23**星][2y] [Java] [techguy-bhushan/xssrequestfilters](https://github.com/techguy-bhushan/xssrequestfilters) Light weight library for Filter the Cross-site scripting in request For Spring Framwork / Spring-Boot, logic can be use for servlet based(without using spring framework) application
+- [**23**星][3y] [JS] [techgaun/xss-payloads](https://github.com/techgaun/xss-payloads) Collection of XSS Payloads from various sources
+- [**23**星][2y] [JS] [team-copper/captar](https://github.com/team-copper/captar) Augmented Reality Geolocation Capture-the-Flag Mobile Game Capstone Project
+- [**23**星][3y] [Py] [te-k/malware-classification](https://github.com/te-k/malware-classification) Data and code for malware classification using machine learning (for fun, not production)
+- [**23**星][4d] [Go] [tdh8316/investigo](https://github.com/tdh8316/investigo) The minimal Go implementation of Sherlock -
+- [**23**星][5m] [HTML] [tarafans/collections](https://github.com/tarafans/collections) A medley of PoCs and exploits
+- [**23**星][4y] [XSLT] [stixproject/stix-to-html](https://github.com/stixproject/stix-to-html) Convert STIX XML to HTML
+- [**23**星][2y] [C++] [sshsshy/zerotrace](https://github.com/sshsshy/zerotrace)
+- [**23**星][1y] [Shell] [sourcerer-io/sourcerer-blog](https://github.com/sourcerer-io/sourcerer-blog) Assets and examples for blog.sourcerer.io
+- [**23**星][2y] [Py] [somu1795/shodan_raspi](https://github.com/somu1795/shodan_raspi) Hack Raspberry Pi(s) across the world !
+- [**23**星][3y] [PS] [skons/ms17-0100](https://github.com/skons/ms17-0100) Mixing up CVE and MS like a pro
+- [**23**星][2y] [Py] [simonuvarov/expdev](https://github.com/simonuvarov/expdev)
+- [**23**星][4y] [Py] [shengqi158/weak_password_detect](https://github.com/shengqi158/weak_password_detect) 多线程探测弱密码程序
+- [**23**星][4y] [Py] [shadowsocksfork/shadowsocksfork](https://github.com/shadowsocksfork/shadowsocksfork) A fork of shadowsocks 2.8.2
+- [**23**星][7m] [Py] [seyptoo/7z-bruteforce](https://github.com/seyptoo/7z-bruteforce) This repository consists of bruteforce to a 7z file, and it can be very useful in the penetration tests
+- [**23**星][4y] [PHP] [secwiki/exp](https://github.com/secwiki/exp) 收集各种各样的exp
+- [**23**星][2m] [Shell] [samuelhbne/vpn-launchpad](https://github.com/samuelhbne/vpn-launchpad) Builds Shadowsocks VPN server on AWS EC2 with QR code support. Works on Ubuntu, OSX and Debian variants including Raspbian.
+- [**23**星][2y] [Py] [s3xy/cve-2017-10271](https://github.com/s3xy/cve-2017-10271) Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful …
+- [**23**星][4y] [JS] [rwestergren/simple-hash-xss](https://github.com/rwestergren/simple-hash-xss)
+- [**23**星][1m] [JS] [roemhildtg/spectre-canjs](https://github.com/roemhildtg/spectre-canjs) A WIP data administration component library built on the Spectre.css framework enabled with CanJS
+- [**23**星][2y] [PHP] [riyazwalikar/sql-injection-training-app](https://github.com/riyazwalikar/sql-injection-training-app) A simple PHP application that can be used to demonstrate and train participants to detect and exploit SQL Injection vulnerabilities.
+- [**23**星][3y] [Py] [remnux/distro](https://github.com/remnux/distro) This repository contains supplementary files for building and using the REMnux Linux distribution. See
+- [**23**星][1y] [Go] [releasel0ck/blind-sql-injector](https://github.com/releasel0ck/blind-sql-injector) 手工盲注辅助注入工具
+- [**23**星][2y] [C] [rednaga/keystore-shim](https://github.com/rednaga/keystore-shim) Shim to grab keystore backed data
+- [**23**星][3y] [Go] [redhat-cip/skydive](https://github.com/redhat-cip/skydive) An open source real-time network topology and protocols analyzer
+- [**23**星][4m] [Py] [radare/diaphora](https://github.com/radare/diaphora) Diaphora, a Free and Open Source program diffing tool
+- [**23**星][11m] [PHP] [r0nen/ctf](https://github.com/r0nen/ctf) CTF Writeups
+- [**23**星][2y] [ptresearch/intelme-crypto](https://github.com/ptresearch/intelme-crypto)
+- [**23**星][2y] [proteas/afl-swift](https://github.com/proteas/afl-swift) use afl to fuzz swift program
+- [**23**星][11m] [Py] [privcount/privcount](https://github.com/privcount/privcount) Privacy-preserving Tor statistics aggregation tool that implements the secret-sharing variant of the PrivEx algorithm.
+- [**23**星][2y] [Py] [pieterbork/blueborne](https://github.com/pieterbork/blueborne) Scan/Exploit Blueborne CVE-2017-0785
+- [**23**星][1y] [Py] [pielco11/t2b-framework](https://github.com/pielco11/t2b-framework) Cross-Platform Post Exploitation Toolkit
+- [**23**星][3y] [Py] [pfalcon/ida-xtensa2](https://github.com/pfalcon/ida-xtensa2) IDAPython plugin for Tensilica Xtensa (as seen in ESP8266), version 2
+- [**23**星][2m] [Py] [paloaltonetworks/autofocus-lenz](https://github.com/paloaltonetworks/autofocus-lenz) A command line utility to aid in using autofocus for IR and research
+- [**23**星][12m] [C#] [padovah4ck/redsharp](https://github.com/padovah4ck/redsharp) Penetration Test / Read Team - C# tools repository
+- [**23**星][2y] [C] [p4p1/p4p1](https://github.com/p4p1/p4p1) Reverse shell for remote administration
+- [**23**星][3m] [Py] [ozzi-/tld_scanner](https://github.com/ozzi-/tld_scanner) Scan all possible TLD's for a given domain name
+- [**23**星][1y] [Assembly] [osandamalith/pesecinfo](https://github.com/osandamalith/pesecinfo) A simple tool to view important DLL Characteristics and change DEP and ASLR
+- [**23**星][11m] [Shell] [optixal/dotfiles](https://github.com/optixal/dotfiles)
+- [**23**星][3y] [Shell] [opensecurityresearch/ciphertest](https://github.com/opensecurityresearch/ciphertest) A better SSL cipher checker using gnutls
+- [**23**星][1y] [Go] [olihough86/stinkyphish](https://github.com/olihough86/stinkyphish) Monitor Certificate Transparency Logs For Phishing Domains
+- [**23**星][11d] [Py] [nullpxl/nullctf](https://github.com/nullpxl/nullctf) A Discord bot that provides ctf tools for collaboration in Discord servers!
+- [**23**星][7y] [Ruby] [nuke99/sqlnuke](https://github.com/nuke99/sqlnuke) SQLNuke | Fast Performing MYSQL Injection load_file() Fuzzer
+- [**23**星][2y] [C] [nucypher/nucypher-pre-python](https://github.com/nucypher/nucypher-pre-python) nucypher-pre-python:Python 实现的“代理重加密(Proxy Re-Encryption)”算法
+- [**23**星][4y] [Py] [nitscan/inlinux](https://github.com/nitscan/inlinux) 内网渗透信息收集脚本
+- [**23**星][1y] [PS] [netspi/sqlc2](https://github.com/netspi/sqlc2) SQLC2 is a PowerShell script for deploying and managing a command and control system that uses SQL Server as both the control server and the agent.
+- [**23**星][6y] [Py] [nccgroup/xcavator](https://github.com/nccgroup/xcavator) A network data locater using credentials obtained during penetration tests
+- [**23**星][2y] [C++] [nccgroup/bleboy](https://github.com/nccgroup/bleboy) BLEBoy is a training tool to teach users about BLE security by providing a single BLE peripheral that can be used to experiment with each BLE pairing method and demonstrates GATT security concepts.
+- [**23**星][12m] [C] [nardholio/cve-2016-0728](https://github.com/nardholio/cve-2016-0728)
+- [**23**星][2m] [Pascal] [nannib/imm2virtual](https://github.com/nannib/imm2virtual) This is a GUI (for Windows 64 bit) for a procedure to virtualize your EWF(E01), DD (raw), AFF disk image file without converting it, directly with VirtualBox, forensically proof.
+- [**23**星][2y] [Shell] [mricon/tor-relay-bootstrap-rpi](https://github.com/mricon/tor-relay-bootstrap-rpi) Script to bootstrap a Debian server to be a set-and-forget Tor relay
+- [**23**星][8m] [PHP] [mrahmadt/smartgw](https://github.com/mrahmadt/smartgw) Domain based VPN Gateway/Proxy for all devices
+- [**23**星][3y] [HTML] [mortenschenk/bypassing_cfg_seh](https://github.com/mortenschenk/bypassing_cfg_seh) Using SEH to bypass CFG
+- [**23**星][1y] [C] [moccajoghurt/drvmap_secure](https://github.com/moccajoghurt/drvmap_secure)
+- [**23**星][19d] [C] [microsoft/modsecurity](https://github.com/microsoft/modsecurity) ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analys…
+- [**23**星][3y] [Py] [merkjinx/saddam-plus-plus](https://github.com/merkjinx/saddam-plus-plus) open source DDoS Amplification Tool with scanners.
+- [**23**星][5m] [meitar/awesome-malware](https://github.com/meitar/awesome-malware)
+- [**23**星][8d] [Shell] [meisterp/torbrowser-overlay](https://github.com/meisterp/torbrowser-overlay) Gentoo overlay for Tor Browser related ebuilds
+- [**23**星][6m] [JS] [mcibique/express-security](https://github.com/mcibique/express-security) nodejs + express security and performance boilerplate.
+- [**23**星][5m] [C++] [mbrengel/memscrimper](https://github.com/mbrengel/memscrimper) Code for the DIMVA 2018 paper: "MemScrimper: Time- and Space-Efficient Storage of Malware Sandbox Memory Dumps"
+- [**23**星][3y] [C++] [matviy/leaguereplayhook](https://github.com/matviy/leaguereplayhook) Library for interacting with the League of Legends Spectator/Replay Client
+- [**23**星][2y] [Shell] [mattcarothers/mhn-core-docker](https://github.com/mattcarothers/mhn-core-docker) Core elements of the Modern Honey Network implemented in Docker
+- [**23**星][3y] [Py] [markusteufelberger/afl-ddmin-mod](https://github.com/markusteufelberger/afl-ddmin-mod) Test case minimizer for afl-fuzz
+- [**23**星][4y] [C] [marcograss/cve-2014-4323](https://github.com/marcograss/cve-2014-4323) cve-2014-4323 poc
+- [**23**星][6m] [C] [maikel233/x-hook-for-csgo](https://github.com/maikel233/x-hook-for-csgo) Aimtux for Windows.
+- [**23**星][4y] [PHP] [lxj616/dvwa-wooyun](https://github.com/lxj616/dvwa-wooyun) It is a DVWA with some plugins based on real wooyun bug reports
+- [**23**星][1y] [C] [lucascouto/krackattack-all-zero-tk-key](https://github.com/lucascouto/krackattack-all-zero-tk-key) This code has base on a code made by Mathy Vanhoef (
+- [**23**星][1y] [C] [logicaltrust/minerva_lib](https://github.com/logicaltrust/minerva_lib) polish fuzzy lop - fuzzer for libraries/APIs/*
+- [**23**星][7y] [C] [liblit/murphy](https://github.com/liblit/murphy) language-agnostic tool that helps developers discover and isolate run-time failures in their programs by simulating difficult-to-reproduce but completely-legitimate interactions between the application and the kernel
+- [**23**星][5y] [C++] [liamkarlmitchell/signaturescanner](https://github.com/liamkarlmitchell/signaturescanner) I wanted a nicer signature scanner that worked the way I wanted. Include however you want in your own DLL project.
+- [**23**星][3m] [Go] [leoid/mysql-injection-exfiltration-optimization](https://github.com/leoid/mysql-injection-exfiltration-optimization) MySQL Injection Exfoliation Optimization
+- [**23**星][7y] [Py] [lbragues/pasteminer](https://github.com/lbragues/pasteminer) Find useful stuff in pastebin
+- [**23**星][4y] [Py] [laudarch/shellsploit](https://github.com/laudarch/shellsploit) Mutation Of Vıruses
+- [**23**星][2d] [kylebing/sslist](https://github.com/kylebing/sslist) 优化访问速度的小型 gfw (Great Fire Wall) 规则列表 gfwlist
+- [**23**星][3y] [Py] [kx499/ostip](https://github.com/kx499/ostip)
+- [**23**星][3y] [C++] [kuqadk3/winrarer-ransomware](https://github.com/kuqadk3/winrarer-ransomware)
+- [**23**星][3m] [Assembly] [mwkmwkmwk/cpuadventure](https://github.com/mwkmwkmwk/cpuadventure) CPU Adventure task from Dragon CTF 2019 teaser
+- [**23**星][4y] [JS] [kolanich/cleanunwantedupdates](https://github.com/kolanich/cleanunwantedupdates) A set of scripts to detect updates of Microsoft (TM) Windows (TM) OS which harm users' privacy and uninstall them
+- [**23**星][2y] [C] [kelvinhack/screencapattack](https://github.com/kelvinhack/screencapattack)
+- [**23**星][6y] [C] [jyang772/hideprocesshookmdl](https://github.com/jyang772/hideprocesshookmdl) A simple rootkit to hide a process
+- [**23**星][7m] [TS] [jvilk/mitmproxy-node](https://github.com/jvilk/mitmproxy-node) A bridge between Python's mitmproxy and Node.JS programs. Rewrite network requests using Node.JS!
+- [**23**星][6m] [C] [junxzm1990/afl-pt](https://github.com/junxzm1990/afl-pt)
+- [**23**星][2m] [Py] [jplesperance/redis-sniffer](https://github.com/jplesperance/redis-sniffer) A Redis event sniffer and logging utility.
+- [**23**星][7m] [Py] [jpiechowka/zip-shotgun](https://github.com/jpiechowka/zip-shotgun) Utility script to test zip file upload functionality (and possible extraction of zip files) for vulnerabilities (aka Zip Slip)
+- [**23**星][4y] [Shell] [josefkarasek/docker101](https://github.com/josefkarasek/docker101) Docker for absolute beginners. Learn how to get and run Docker containers. Created for the Brno Docker meetup group.
+- [**23**星][4m] [Py] [jonathansalwan/x-tunnel-opaque-predicates](https://github.com/jonathansalwan/x-tunnel-opaque-predicates) IDA+Triton plugin in order to extract opaque predicates using a Forward-Bounded DSE. Example with X-Tunnel.
+- [**23**星][2m] [jmscory/security-tool-chest](https://github.com/jmscory/security-tool-chest) A list of useful security and obvescation tools useful for red and blue teaming activities. A list made possible by the provided references.
+- [**23**星][4y] [PHP] [jgamblin/nmap-for-slack](https://github.com/jgamblin/nmap-for-slack) Custom slash command to do a basic nmap scan from within Slack
+- [**23**星][2y] [JS] [jamesacampbell/elector](https://github.com/jamesacampbell/elector) TOR BROWSER IN ELECTRON
+- [**23**星][3y] [Java] [jackuhan/loginhook](https://github.com/jackuhan/loginhook) xposed的hook案例
+- [**23**星][1y] [Py] [j40903272/malconv-keras](https://github.com/j40903272/malconv-keras) This is the implementation of MalConv proposed in [Malware Detection by Eating a Whole EXE](
+- [**23**星][12m] [ObjC] [rpwnage/warri0r](https://github.com/RPwnage/Warri0r) ios 12 Sandbox escape POC
+- [**23**星][10d] [PHP] [ip2location/ip2proxy-php](https://github.com/ip2location/ip2proxy-php) PHP module for IP2Proxy database lookup. It allows user to query an IP address if it was being used as open proxy, web proxy, VPN anonymizer and TOR exits.
+- [**23**星][1y] [C] [ioactive/kmdf_re](https://github.com/ioactive/kmdf_re) 辅助逆向KMDF驱动
+- [**23**星][3y] [C++] [insomnihack/teaser-2017](https://github.com/insomnihack/teaser-2017)
+- [**23**星][5y] [Ruby] [insomnihack/insomnihack-2015](https://github.com/insomnihack/insomnihack-2015) Repository for Insomni'hack finals 2015
+- [**23**星][6y] [infosecsmith/mimikatzlite](https://github.com/infosecsmith/mimikatzlite) Minimal MimiKatz One Executable... All credits to Benjamin Delpy
+- [**23**星][4y] [Py] [immunio/immunio-xss-fuzzer](https://github.com/immunio/immunio-xss-fuzzer) Immunio's XSS Fuzzer tool
+- [**23**星][10m] [Nim] [imgp3dev/drmitm](https://github.com/imgp3dev/drmitm) DrMITM is a program designed to globally log all traffic of a website.
+- [**23**星][2y] [C] [ieeeicsg/ieee_taggant_system](https://github.com/ieeeicsg/ieee_taggant_system) Taggant System developed by the Malware Working Group of ICSG (Industry Connections Security Group) under the umbrella of IEEE
+- [**23**星][1y] [Java] [realbearcat/jackson-cve-2017-17485](https://github.com/RealBearcat/Jackson-CVE-2017-17485) Jackson 反序列化
+- [**23**星][9m] [Py] [hpd0ger/supertags](https://github.com/hpd0ger/supertags) 一个Burpsuite插件,用于检测隐藏的XSS
+- [**23**星][7m] [Py] [horusteknoloji/tr-phishinglist](https://github.com/horusteknoloji/tr-phishinglist) Türkiye'ye Yönelik Zararlı Bağlantı Erişim Engelleme Listesi
+- [**23**星][3y] [Go] [hgfischer/domainerator](https://github.com/hgfischer/domainerator) Simple application written in Go that combines two wordlists and a list of TLDs to form domain names and check if they are already registered.
+- [**23**星][3y] [C] [hedgeh/sewindows](https://github.com/hedgeh/sewindows) 在Windows上建立一个开源的强制访问控制框架及SDK。使Windows平台的应用开发者,可以不用关心操作系统底层技术,只用进行简单的SDK调用或配置就可以保护自己的应用程序。
+- [**23**星][1y] [C] [hardenedbsd/secadm](https://github.com/hardenedbsd/secadm) HardenedBSD Security Administration
+- [**23**星][3y] [hani1990/phith0n-mind-map](https://github.com/hani1990/phith0n-mind-map)
+- [**23**星][3y] [C] [guidovranken/openssl-x509-vulnerabilities](https://github.com/guidovranken/openssl-x509-vulnerabilities)
+- [**23**星][2y] [PHP] [graniet/physics-command](https://github.com/graniet/physics-command) 硬件系统分析平台(例如:树莓派3B)
+- [**23**星][2d] [C++] [grammatech/gtirb-pprinter](https://github.com/grammatech/gtirb-pprinter) Pretty printer from GTIRB to assembly code
+- [**23**星][7m] [JS] [gnuhpc/kibana-multitenant-proxy](https://github.com/gnuhpc/kibana-multitenant-proxy) A proxy behind nginx while before kibana (4.x, 5.x) to provide data isolation for different users
+- [**23**星][3y] [Py] [german-namestnikov/unhidens](https://github.com/german-namestnikov/unhidens) Small DNS Recon utility, allows you to obtain some useful info about NS-servers placed behind relays, firewalls, etc.
+- [**23**星][10m] [Go] [gen0cide/hasherbasher](https://github.com/gen0cide/hasherbasher) SQL injection via bruteforced MD5 hash reflection of random strings
+- [**23**星][2y] [Jupyter Notebook] [geekonlinecode/malware-machine-learning](https://github.com/geekonlinecode/malware-machine-learning) Malware Machine Learning
+- [**23**星][4y] [Rust] [gcarq/arp-spoof](https://github.com/gcarq/arp-spoof) Minimal ARP-Spoofing tool written in Rust
+- [**23**星][1y] [ActionScript] [ga1ois/recon-2018-montreal](https://github.com/ga1ois/recon-2018-montreal)
+- [**23**星][2y] [PHP] [freak3dot/wp-smart-honeypot](https://github.com/freak3dot/wp-smart-honeypot) Wordpress plugin to reduce comment spam with a smarter honeypot.
+- [**23**星][6y] [Py] [feliam/cve-2013-2729](https://github.com/feliam/cve-2013-2729)
+- [**23**星][1y] [Py] [farisv/appledos](https://github.com/farisv/appledos) Messing Apple devices on the network with CVE-2018-4407 (heap overflow in bad packet handling)
+- [**23**星][5y] [exp-sky/hitcon-2014-ie-11-0day-windows-8.1-exploit](https://github.com/exp-sky/hitcon-2014-ie-11-0day-windows-8.1-exploit) HitCon 2014 : IE 11 0day & Windows 8.1 Exploit
+- [**23**星][1y] [C++] [ewhitehats/kovtertools](https://github.com/ewhitehats/kovtertools)
+- [**23**星][4y] [HTML] [etherpot/contract](https://github.com/etherpot/contract)
+- [**23**星][7m] [C] [enfuzz/enfuzz](https://github.com/enfuzz/enfuzz)
+- [**23**星][2y] [PS] [elevenpaths/usbhiddennetworks](https://github.com/elevenpaths/usbhiddennetworks)
+- [**23**星][4m] [Py] [elespike/burp-cph](https://github.com/elespike/burp-cph) Custom Parameter Handler extension for Burp Suite.
+- [**23**星][4m] [PS] [dpaulson45/exchangelogcollector](https://github.com/dpaulson45/exchangelogcollector) Exchange Log Collection Script
+- [**23**星][2y] [C++] [dougallj/dj_ida_plugins](https://github.com/dougallj/dj_ida_plugins) 向Hex-Rays反编译器添加VMX intrinsics
+- [**23**星][2m] [C++] [dns-oarc/dnsmeter](https://github.com/dns-oarc/dnsmeter) Tool for testing performance of nameservers
+- [**23**星][8m] [C] [djhohnstein/wlbsctrl_poc](https://github.com/djhohnstein/wlbsctrl_poc) C++ POC code for the wlbsctrl.dll hijack on IKEEXT
+- [**23**星][1y] [Java] [distrinet/xsr-framework](https://github.com/distrinet/xsr-framework) A framework for automatic testing of third-party request and cookie policy implementations
+- [**23**星][2m] [JS] [devwerks/xss-cheatsheet](https://github.com/devwerks/xss-cheatsheet) XSS Cheatsheet - A collection of XSS attack vectors
+- [**23**星][3y] [Py] [devttys0/idascript](https://github.com/devttys0/idascript) IDA的Wrapper,在命令行中自动对目标文件执行IDA脚本
+- [**23**星][1y] [Ruby] [dev-sec/chef-mysql-hardening](https://github.com/dev-sec/chef-mysql-hardening) This chef cookbook provides security configuration for mysql.
+- [**23**星][1y] [Ruby] [dev-sec/chef-apache-hardening](https://github.com/dev-sec/chef-apache-hardening)
+- [**23**星][2y] [Vue] [deturium/school-bus](https://github.com/deturium/school-bus) 浙江大学AAA战队开放 CTF 练习平台新前端
+- [**23**星][1y] [c++] [dax89/r2gui](https://github.com/dax89/r2gui) Unofficial Qt5 frontend for Radare2
+- [**23**星][3y] [C] [davidbuchanan314/cowroot](https://github.com/davidbuchanan314/cowroot) Universal Android root tool based on CVE-2016-5195. Watch this space.
+- [**23**星][3y] [C] [david-reguera-garcia-dreg/phook](https://github.com/david-reguera-garcia-dreg/phook) Full DLL Hooking, phrack 65
+- [**23**星][11m] [dariubs/awesome-proxy](https://github.com/dariubs/awesome-proxy) A collaborative list of awesome proxy servers and resources. Feel free to contribute!
+- [**23**星][1y] [C#] [damonmohammadbagher/nativepayload_ip6dns](https://github.com/damonmohammadbagher/nativepayload_ip6dns) C# code for Transferring Backdoor Payloads by IPv6 Address (AAAA) records and DNS Traffic also Bypassing Anti-viruses
+- [**23**星][1y] [Py] [damian89/commoncrawlparser](https://github.com/damian89/commoncrawlparser) Simple multi threaded tool to extract domain related data from commoncrawl.org
+- [**23**星][3y] [Py] [d4vinci/anti_killer](https://github.com/d4vinci/anti_killer) Kill Any Antivirus Using Python For Windows Users .
+- [**23**星][2m] [Py] [cyberheartmi9/cve-2017-8295](https://github.com/cyberheartmi9/cve-2017-8295)
+- [**23**星][23d] [C++] [curl/curl-fuzzer](https://github.com/curl/curl-fuzzer) Quality assurance testing for the curl project
+- [**23**星][5y] [C] [ctu-iig/802.11p-linux](https://github.com/ctu-iig/802.11p-linux) mac80211/wireless next tree
+- [**23**星][7y] [C++] [cr4sh/ida-ubigraph](https://github.com/cr4sh/ida-ubigraph) IDA Pro plug-in and tools for displaying 3D graphs of procedures using UbiGraph
+- [**23**星][7d] [Py] [costa-group/ethir](https://github.com/costa-group/ethir) A framework for high-level Analysis of Ethereum Bytecode
+- [**23**星][1m] [Py] [cornerpirate/cve-offline](https://github.com/cornerpirate/cve-offline) An easy to grep dump of the NVD database showing only; CVE-ID, CVSS Risk Score, and Summary.
+- [**23**星][6y] [commonexploits/weape](https://github.com/commonexploits/weape) Weape-Wireless-EAP-Extractor
+- [**23**星][11m] [Py] [coldshell/malware-scripts](https://github.com/coldshell/malware-scripts)
+- [**23**星][11m] [coldev/coldevprolayer](https://github.com/coldev/coldevprolayer) Protect your PHP code with obfuscation and encryption
+- [**23**星][3y] [C] [cn33liz/hsevd-arbitraryoverwrite](https://github.com/cn33liz/hsevd-arbitraryoverwrite) HackSys Extreme Vulnerable Driver - ArbitraryOverwrite Exploit
+- [**23**星][5y] [Ruby] [claudijd/bnat](https://github.com/claudijd/bnat) "Broken NAT" - A suite of tools focused on detecting and interacting with publicly available BNAT scenerios
+- [**23**星][3y] [Py] [chengable/safe_code](https://github.com/chengable/safe_code) absolute safe code
+- [**23**星][5y] [C++] [certcc/dranzer](https://github.com/certcc/dranzer) Dranzer is a tool that enables users to examine effective techniques for fuzz testing ActiveX controls
+- [**23**星][3y] [JS] [calmh/yardstick](https://github.com/calmh/yardstick) [UNMAINTAINED] Javascript code metrics
+- [**23**星][2y] [bxlcity/malware](https://github.com/bxlcity/malware)
+- [**23**星][1y] [Py] [buckhacker/subdomaintakeovertools](https://github.com/buckhacker/subdomaintakeovertools)
+- [**23**星][2y] [Py] [brunneis/scihub-downloader](https://github.com/brunneis/scihub-downloader) Sci-Hub PDF downloader through Tor Network (Docker image)
+- [**23**星][4y] [brucecio9999/cryptowire-advanced-autoit-ransomware-project](https://github.com/brucecio9999/cryptowire-advanced-autoit-ransomware-project) This is a advanced ransomware example made in AutoIt
+- [**23**星][6m] [Jupyter Notebook] [briansrebrenik/final_project](https://github.com/briansrebrenik/final_project) Using Twitter Ego Network Analysis to Detect Sources of Fake News
+- [**23**星][3m] [Py] [bitthebyte/domainker](https://github.com/bitthebyte/domainker) BugBounty Tool
+- [**23**星][5y] [C++] [behzad-a/dytan](https://github.com/behzad-a/dytan) Dytan Taint Analysis Framework on Linux 64-bit
+- [**23**星][2y] [C++] [balika011/belf](https://github.com/balika011/belf) Balika011's PlayStation 4 ELF loader for IDA Pro 7.0/7.1
+- [**23**星][7m] [TeX] [b-g-goodell/research-lab](https://github.com/b-g-goodell/research-lab) A general repo for Monero Research Lab work in progress and completed work
+- [**23**星][4y] [Py] [az0ne/autoexp_plc](https://github.com/az0ne/autoexp_plc) omron工控设备漏洞批量验证
+- [**23**星][2y] [JS] [auth0-blog/rottentomatoes-clone](https://github.com/auth0-blog/rottentomatoes-clone)
+- [**23**星][2y] [Py] [aur3lius-dev/spydir](https://github.com/aur3lius-dev/spydir) BurpSuite extension to assist with Automated Forced Browsing/Endpoint Enumeration
+- [**23**星][3y] [C] [armedpot/honeytrap](https://github.com/armedpot/honeytrap) Last download from git://git.carnivore.it/honeytrap.git of Honytrap by Tillmann Werner
+- [**23**星][2m] [C] [arizvisa/ndk](https://github.com/arizvisa/ndk) A local copy of Alex Ionescu's seemingly abandoned native-nt-toolkit project containing knowledge inherited from the ReactOS project.
+- [**23**星][2y] [C++] [apriorit/svchostdemo](https://github.com/apriorit/svchostdemo) Demo service that runs in svchost.exe
+- [**23**星][3y] [ObjC] [apestalk/debugwindow](https://github.com/apestalk/debugwindow) 一个在真机上测试时方便查看输出日志的小工具。(A debug tool which helps you view the console logs on the device when you test you APP.)
+- [**23**星][7m] [Py] [antisomnus/sniffer](https://github.com/antisomnus/sniffer) Simple sniffer using scapy and PyQt5 on Windows 10
+- [**23**星][12m] [Py] [anotherik/rogueap-detector](https://github.com/anotherik/rogueap-detector) Rogue Access Point Detector
+- [**23**星][6m] [Py] [anhkgg/get52pojietools](https://github.com/anhkgg/get52pojietools) 一个批量下载52pojie爱盘中资源的小脚本。
+- [**23**星][5m] [Py] [alexander-hanel/hansel](https://github.com/alexander-hanel/hansel) IDA搜索插件
+- [**23**星][13d] [Py] [aff4/pyaff4](https://github.com/aff4/pyaff4) The Python implementation of the AFF4 standard.
+- [**23**星][2y] [abhishekkr/eden_guide_to_hacking](https://github.com/abhishekkr/eden_guide_to_hacking) its quick to read, broadway guide to HACKING ~ for anyone to have grasp of important concepts and skills which makes up the knowledge base of a hacker
+- [**23**星][3y] [C] [93aef0ce4dd141ece6f5/packer](https://github.com/93aef0ce4dd141ece6f5/packer) PoC executable packer using resources
+- [**23**星][3y] [PHP] [3xp10it/xwebshell](https://github.com/3xp10it/xwebshell) 免杀webshell
+- [**23**星][1y] [JS] [0xsobky/xssbuster](https://github.com/0xsobky/xssbuster) XSSB is a proactive DOM sanitizer, defending against client-side injection attacks!
+- [**23**星][2y] [Py] [0x024/ms](https://github.com/0x024/ms) 我的monitor system--智能家庭监控系统
+- [**22**星][2y] [C#] [xadamxk/usb-rubber-ducky-app](https://github.com/xadamxk/usb-rubber-ducky-app)
+- [**22**星][2d] [TS] [cedx/reverse-proxy.js](https://github.com/cedx/reverse-proxy.js) Personal reverse proxy server supporting WebSockets.
+- [**22**星][] [Py] [wisepythagoras/website-fingerprinting](https://github.com/wisepythagoras/website-fingerprinting) Deanonymizing Tor or VPN users with website fingerprinting and machine learning.
+- [**22**星][6d] [Go] [hahwul/websocket-connection-smuggler](https://github.com/hahwul/websocket-connection-smuggler) websocket-connection-smuggler
+- [**22**星][29d] [Java] [snail007/goproxy-ss-plugin-android](https://github.com/snail007/goproxy-ss-plugin-android) goproxy安卓全局代理,ss goproxy安卓插件, goproxy :
+- [**22**星][21d] [Py] [k8gege/pyladon](https://github.com/k8gege/pyladon) Ladon NetScan For Python (PortScan/OnlinePC/VulScan/Struts2/Weblogic/Exploit/GetShell/MS17010)
+- [**22**星][4y] [Py] [epsylon/anontwi](https://github.com/epsylon/anontwi) Anontwi is a tool for OAuth2 applications (such as: GNUSocial, Twitter) that provides different layers of encryption, privacy methods and proxy features.
+- [**22**星][2y] [C] [nsacyber/driver-collider](https://github.com/nsacyber/driver-collider) Blocks drivers from loading by using a name collision technique. #nsacyber
+- [**22**星][4y] [C] [shadowsocks/openssl-android](https://github.com/shadowsocks/openssl-android) A fork of OpenSSL for shadowsocks-android
+- [**22**星][9m] [CSS] [ytisf/apate](https://github.com/ytisf/apate) Your Friendly Neighbourhood Honeypot Maker and Manager
+- [**22**星][3y] [Py] [dxa4481/mimikittenz4linux](https://github.com/dxa4481/mimikittenz4linux) Steals cleartext passwords from webservices, by reading the memory of browsers
+- [**22**星][2y] [Py] [d35m0nd142/joomla-components-exploits-auto-updating-scanner](https://github.com/d35m0nd142/joomla-components-exploits-auto-updating-scanner) Auto Updater Joomla Components and Exploits Scanner
+- [**22**星][2m] [JS] [xyntax/xctf-2019-tfboys](https://github.com/xyntax/xctf-2019-tfboys) source code of XCTF 2019 Final web task "tfboys"
+- [**22**星][2y] [Go] [nachowski/warpwallet_cracker](https://github.com/nachowski/warpwallet_cracker) A brute-force cracker in Go for the WarpWallet Challenge 2
+- [**22**星][10d] [learnteachcode/code-coffee-compendium](https://github.com/learnteachcode/code-coffee-compendium) curated resource compendium, maintained by the Baldwin Park code & coffee study group
+- [**22**星][1m] [Py] [5h4d0wb0y/socialbrute](https://github.com/5h4d0wb0y/socialbrute) It attempts to crack social networks using a brute force dictionary attack.
+- [**22**星][29d] [Py] [torpyorg/torpy](https://github.com/torpyorg/torpy) Pure python Tor client implementation of the Tor protocol
+- [**22**星][5d] [Ruby] [mitre-cyber-academy/ctf-scoreboard](https://github.com/mitre-cyber-academy/ctf-scoreboard) Repository for the MITRE Capture the Flag scoreboard.
+- [**22**星][6m] [Batchfile] [dylanbai8/c2ray](https://github.com/dylanbai8/c2ray) C2ray 一款windows下的极简 V2ray 客户端
+- [**22**星][1m] [Go] [tismayil/rsdl](https://github.com/tismayil/rsdl) Subdomain Scan With Ping Method.
+- [**22**星][3m] [C] [adde88/hostapd-mana-openwrt](https://github.com/adde88/hostapd-mana-openwrt) hostapd-mana - build-files, and installation-files for OpenWRT
+- [**22**星][5y] [C] [andyvand/atherosromkit](https://github.com/andyvand/atherosromkit) Atheros ROM modding and recovery kit
+- [**22**星][7y] [brycethomas/liber80211](https://github.com/brycethomas/liber80211) 802.11 monitor mode for Android without root.
+- [**22**星][1m] [lbherrera/writeups](https://github.com/lbherrera/writeups)
+- [**22**星][2m] [Dockerfile] [kizzx2/docker-openvpn-client-socks](https://github.com/kizzx2/docker-openvpn-client-socks) Expose an OpenVPN tunnel as a SOCKS proxy
+- [**22**星][9m] [Py] [geekscrapy/bingraph](https://github.com/geekscrapy/bingraph) Simple tool to graph files for quick analysis
+- [**22**星][3m] [Go] [geek1011/easy-novnc](https://github.com/geek1011/easy-novnc) Run a noVNC instance, web UI, and multi-host proxy with a single binary.
+- [**22**星][3m] [Py] [circl/forensic-tools](https://github.com/circl/forensic-tools) CIRCL system forensic tools or a jumble of tools to support forensic
+- [**22**星][2m] [Py] [adriangranados/wifiexplorer-sensor](https://github.com/adriangranados/wifiexplorer-sensor) Enables remote scanning in WiFi Explorer Pro
+- [**22**星][6m] [JS] [rndinfosecguy/vulture](https://github.com/rndinfosecguy/vulture) WhatsApp Online Tracker
+- [**22**星][3y] [JS] [yuiitsu/unproxy](https://github.com/yuiitsu/unproxy) chrome代理扩展
+- [**22**星][14d] [Py] [penetrate2hack/itwsv](https://github.com/penetrate2hack/itwsv) ITWSV- Integrated Tool for Web Security Vulnerability
+- [**22**星][3m] [C++] [legendl3n/smarthooker](https://github.com/legendl3n/smarthooker) The smartest hooking library.
+- [**22**星][1m] [C#] [lowleveldesign/concerto](https://github.com/lowleveldesign/concerto) A simple tool to create TLS certificates for development purposes.
+- [**22**星][3d] [Shell] [mzfr/hackthebox-writeups](https://github.com/mzfr/HackTheBox-writeups) Writeups for all the HTB machines I have done
+- [**22**星][2m] [PHP] [marcocesarato/php-aio-security](https://github.com/marcocesarato/PHP-AIO-Security) The objective of this class is offer an automatic system of protection for developers's projects and simplify some security operations as the check of CSRF or XSS all in a simple class. Infact you could just call the main method to have better security yet without too much complicated operations.
+- [**22**星][3y] [C] [jianpingzju/hypro](https://github.com/jianpingzju/Hypro) VMI on BitVisor to detect hidden rootkits.
+- [**22**星][3m] [Py] [avast/retdec-regression-tests-framework](https://github.com/avast/retdec-regression-tests-framework) A framework for writing and running regression tests for RetDec and related tools.
+- [**22**星][4y] [TS] [auth0-blog/ionic2-auth](https://github.com/auth0-blog/ionic2-auth)
+- [**22**星][2y] [PHP] [vysecurity/basicauth](https://github.com/vysecurity/basicAuth) Basic Auth Phish page
+- [**22**星][1y] [Go] [zxsecurity/glugger](https://github.com/zxsecurity/glugger) The fastest (and least featureful) DNS bruteforcer in the South
+- [**22**星][2y] [Py] [zigzag2050/mzphp2-deobfuscator](https://github.com/zigzag2050/mzphp2-deobfuscator) A de-obfuscate tool for code generated by mzphp2. 用于解混淆mzphp2加密的php文件的工具。
+- [**22**星][8m] [C++] [zhutoulala/vulnscan](https://github.com/zhutoulala/vulnscan) A static binary vulnerability scanner
+- [**22**星][2y] [C#] [zerokilo/directedgraphswv](https://github.com/zerokilo/directedgraphswv) Directed Graph Editor and Library, also XEX decompiler 3
+- [**22**星][6y] [Py] [zachhuff386/dashcam](https://github.com/zachhuff386/dashcam) Raspberry Pi/BeagleBone Black dashcam
+- [**22**星][2y] [Assembly] [yifengyou/x86-assembly-language-from-real-mode-to-protection-mode](https://github.com/yifengyou/x86-assembly-language-from-real-mode-to-protection-mode) x86汇编语言 从实模式到保护模式
+- [**22**星][4y] [Visual Basic .NET] [wpatoolkit/cap-converter](https://github.com/wpatoolkit/cap-converter) A small GUI tool for converting between cap and hccap files.
+- [**22**星][1y] [HTML] [websecurify/acme-no-login-ng](https://github.com/websecurify/acme-no-login-ng) Demonstrates a login bypass attack against a sample MongoDB/NodeJS/AngularJS application
+- [**22**星][1y] [Py] [webbreacher/emailwhois](https://github.com/webbreacher/emailwhois) Look up an email domain (@example.com), using Python, across all known domains.
+- [**22**星][3m] [wangray/windbg-for-gdb-users](https://github.com/wangray/windbg-for-gdb-users) "Pwntools does not support Windows. Use a real OS ;)" — Zach Riggle, 2015
+- [**22**星][5m] [Dockerfile] [vmayoral/basic_robot_cybersecurity](https://github.com/vmayoral/basic_robot_cybersecurity) An introductory series of cybersecurity for robots with a somewhat comprehensive step-by-step tutorials.
+- [**22**星][4y] [C] [uvbs/vmpdbg2](https://github.com/uvbs/vmpdbg2)
+- [**22**星][1y] [Py] [tyranid/canape](https://github.com/tyranid/canape) canape:网络测试工具,专为测试二进制协议(也可用于测试其他任意协议),内置标准网络代理,可使用户捕获和修改服务器的流量
+- [**22**星][4y] [PHP] [tux-00/network_miner](https://github.com/tux-00/network_miner) Network Miner generates a network map by sending SNMP requests (LLDP/CDP/EDP).
+- [**22**星][3y] [Py] [tromey/gdb-helpers](https://github.com/tromey/gdb-helpers) GDB helper scripts
+- [**22**星][5y] [C#] [tophertimzen/shellcodetester](https://github.com/tophertimzen/shellcodetester) GUI Application in C# to run and disassemble shellcode
+- [**22**星][3y] [Py] [thedr1ver/wipster](https://github.com/thedr1ver/wipster) Web Interface Portal & Security Threat Engine for REMnux
+- [**22**星][1y] [CSS] [textileio/dapp-template](https://github.com/textileio/dapp-template) a basic template to build simple ipfs-based browser dapps
+- [**22**星][1y] [C#] [technikempire/windivertsharp](https://github.com/technikempire/windivertsharp) A minimal .NET binding over WinDivert
+- [**22**星][5y] [Py] [techbliss/scylladumper](https://github.com/techbliss/scylladumper) Ida Plugin to Use the Awsome Scylla plugin
+- [**22**星][1m] [HTML] [tc39/proposal-intl-list-format](https://github.com/tc39/proposal-intl-list-format) `Intl.ListFormat` specification [draft]
+- [**22**星][3y] [C++] [tandasat/cve-2014-0816](https://github.com/tandasat/cve-2014-0816) CVE-2014-0816
+- [**22**星][7y] [Java] [tak31337/medusa-gui](https://github.com/tak31337/medusa-gui) A graphical user interface for the medusa brute forcing utility.
+- [**22**星][4y] [C] [t2mune/nield](https://github.com/t2mune/nield) nield:通过 netlinksocket 接收来自内核的通知,生成与接口、neighbor cache(ARP,NDP)、IP地址(IPv4/IPv6)、路由、FIB规则和流量控制有关的日志
+- [**22**星][3y] [Py] [t0kx/exploit-cve-2016-9920](https://github.com/t0kx/exploit-cve-2016-9920) Roundcube 1.0.0 <= 1.2.2 Remote Code Execution exploit and vulnerable container
+- [**22**星][1y] [PHP] [svelizdonoso/asyrv](https://github.com/svelizdonoso/asyrv) ASYRV es una aplicación escrita en PHP/MySQL, con Servicios Web mal desarrollados(SOAP/REST/XML), esperando ayudar a los entusiastas de la seguridad informática a comprender esta tecnología tan utilizada hoy en día por las Organizaciones.
+- [**22**星][2y] [C] [superironbob/pdbwriter](https://github.com/superironbob/pdbwriter) A small tool to produce a dummy pdb for an executable with symbols at addresses from a file
+- [**22**星][4y] [sunkehappy/ios-reverse-engineering-tools-backup](https://github.com/sunkehappy/ios-reverse-engineering-tools-backup) Some guys find the old lsof could not be downloaded. But I have it and I want to share it.
+- [**22**星][5m] [Py] [steved3/kit_hunter](https://github.com/steved3/kit_hunter) A basic phishing kit scanner for dedicated and semi-dedicated hosting
+- [**22**星][3y] [C#] [stephenhaunts/safepad](https://github.com/stephenhaunts/safepad) SafePad : Encrypted Text Editor. This text editor uses very strong encryption to let you protect your secrets. Great for storing passwords, credit card details or any else that you want to keep safe.
+- [**22**星][1m] [Py] [stamparm/dnslog](https://github.com/stamparm/dnslog) Minimalistic DNS logging tool
+- [**22**星][12m] [Py] [st2labs/sipi](https://github.com/st2labs/sipi) Simple IP Information Tools for Reputation Data Analysis
+- [**22**星][29d] [Java] [spring-cloud/spring-cloud-scheduler](https://github.com/spring-cloud/spring-cloud-scheduler)
+- [**22**星][1y] [JS] [sipcapture/homer-ui](https://github.com/sipcapture/homer-ui) HOMER 5: Front-End (UI)
+- [**22**星][5y] [Py] [siliconblade/volatility](https://github.com/siliconblade/volatility) volatility
+- [**22**星][2y] [Java] [silentsignal/burp-uuid](https://github.com/silentsignal/burp-uuid) UUID issues for Burp Suite
+- [**22**星][7m] [Java] [silentsignal/burp-requests](https://github.com/silentsignal/burp-requests) Copy as requests plugin for Burp Suite
+- [**22**星][3y] [C++] [sensepost/misc-windows-hacking](https://github.com/sensepost/misc-windows-hacking) Miscellaneous projects related to attacking Windows.
+- [**22**星][1y] [Py] [sebastienbr/volatility](https://github.com/sebastienbr/volatility) Utilities for the memory forensics framework
+- [**22**星][9d] [C#] [scenegate/yarhl](https://github.com/scenegate/yarhl) Yet Another ROM Hacking Library
+- [**22**星][2y] [Py] [saulty4ish/fuzzsafedog](https://github.com/saulty4ish/fuzzsafedog) 安全狗sql注入绕过
+- [**22**星][3y] [C] [sagi/android_pocs](https://github.com/sagi/android_pocs) Android Vulnerability Reports and POCs.
+- [**22**星][5d] [CSS] [saferwall/saferwall](https://github.com/saferwall/saferwall) A hackable malware sandbox for the 21st Century
+- [**22**星][1y] [Py] [russianotter/networking](https://github.com/russianotter/networking) All My Main Networking Programs
+- [**22**星][11m] [C++] [rolfrolles/miscellaneous](https://github.com/rolfrolles/miscellaneous) Small programs and scripts that do not require their own repositories
+- [**22**星][6y] [C++] [robotastic/smartnet-scanner](https://github.com/robotastic/smartnet-scanner) GNURadio based scanner for SmartNet II Digital radio systems.
+- [**22**星][1y] [Py] [reivhax/chimay-red-tiny](https://github.com/reivhax/chimay-red-tiny) This is a minified exploit for mikrotik routers. It does not require any aditional modules to run.
+- [**22**星][2y] [C] [rednixon/stegdetect](https://github.com/rednixon/stegdetect) Stegdetect is an automated tool for detecting steganographic content in images.
+- [**22**星][2m] [Py] [rceninja/re-scripts](https://github.com/rceninja/re-scripts)
+ - [Hyperv-Scripts](https://github.com/rceninja/re-scripts/tree/master/scripts/Hyperv-Scripts)
+ - [IA32-MSR-Decoder](https://github.com/rceninja/re-scripts/tree/master/scripts/IA32-MSR-Decoder) 查找并解码所有的MSR码
+ - [IA32-VMX-Helper](https://github.com/rceninja/re-scripts/tree/master/scripts/IA32-VMX-Helper) 查找并解码所有的MSR/VMCS码
+- [**22**星][2m] [Py] [random-robbie/bugbountydork](https://github.com/random-robbie/bugbountydork) Bug Bounty Dork
+- [**22**星][7y] [Ruby] [raesene/owasp_web_app_testing_cheatsheet_converter](https://github.com/raesene/owasp_web_app_testing_cheatsheet_converter) OWASP Web Application Testing Cheat Sheet converted to tool formats
+- [**22**星][4m] [Dockerfile] [raesene/dockerized-security-tools](https://github.com/raesene/dockerized-security-tools) Dockerfiles for security tools
+- [**22**星][2m] [C] [radare/libdemangle](https://github.com/radare/libdemangle) A simple library focusing on demangling symbols for different programing languages
+- [**22**星][2m] [Py] [quikko/buquikker](https://github.com/quikko/buquikker) Supports multi threading for the bucketeer script
+- [**22**星][11m] [Py] [puresec/lambda-proxy](https://github.com/puresec/lambda-proxy) Lambda-Proxy creates an HTTP proxy listening on localhost port 8082. When it receives an HTTP POST request with a very specific structure , it will parse the request, extract the relevant data required for the test, and will invoke your AWS Lambda function using the AWS SDK client.invoke() method. It was created for testing AWS Lambda functions …
+- [**22**星][3y] [PHP] [powerscript/getdatareport](https://github.com/powerscript/getdatareport) Get information client with getdatareport (Plugin)
+- [**22**星][2m] [JS] [polyverse/envisen](https://github.com/polyverse/envisen) ROP gadget finder and analysis in pure Javascript
+- [**22**星][3y] [HTML] [pdjstone/cloudpets-web-bluetooth](https://github.com/pdjstone/cloudpets-web-bluetooth) Demo of CloudPets toy functionality using Web Bluetooth
+- [**22**星][8m] [Shell] [payloadsecurity/vxcommunity](https://github.com/payloadsecurity/vxcommunity) This repository contains free Hybrid Analysis contributions to the IT-Security community
+- [**22**星][1y] [C] [paul-tew/lifer](https://github.com/paul-tew/lifer) Windows link file forensic examiner
+- [**22**星][3y] [C++] [patois/idaplugins](https://github.com/patois/idaplugins) Random IDA scripts, plugins, example code (some of it may be old and not working anymore)
+- [**22**星][29d] [owasp/owasp-swag](https://github.com/owasp/owasp-swag) Swag for the OWASP projects and chapters
+- [**22**星][3y] [Assembly] [osandamalith/anti-debug](https://github.com/osandamalith/anti-debug) Some of the Anti-Debugging Tricks
+- [**22**星][3y] [Py] [op7ic/shadowbroker-smb-scanner](https://github.com/op7ic/shadowbroker-smb-scanner) shadowbroker SMB exploit scanner. Scans for ETERNALSYNERGY ETERNALBLUE ETERNALROMANCE ETHERNALCHAMPION
+- [**22**星][4y] [Py] [onethawt/idapyscripts](https://github.com/onethawt/idapyscripts) IDAPython脚本
+ - [DataXrefCounter ](https://github.com/onethawt/idapyscripts/blob/master/dataxrefcounter.py) 枚举指定区段的所有交叉引用,计算使用频率
+- [**22**星][2d] [Py] [oasis-open/cti-stix-validator](https://github.com/oasis-open/cti-stix-validator) OASIS TC Open Repository: Validator for STIX 2.0 JSON normative requirements and best practices
+- [**22**星][1y] [Py] [nirizr/idasix](https://github.com/nirizr/idasix) IDAPython兼容库。创建平滑的IDA开发流程,使相同代码可应用于多个IDA/IDAPython版本
+- [**22**星][5y] [Py] [nihilus/idascope](https://github.com/nihilus/idascope) 辅助恶意代码逆向(Bitbucket上的代码较新)
+- [**22**星][1y] [Py] [nicksanzotta/linkscrape](https://github.com/nicksanzotta/linkscrape) A LinkedIn user/company enumeration tool.
+- [**22**星][5y] [munmap/linux-kernel-bugs-db](https://github.com/munmap/linux-kernel-bugs-db)
+- [**22**星][6y] [Py] [mothran/tlslite](https://github.com/mothran/tlslite) TLS Library in python
+- [**22**星][4y] [Py] [monnappa22/linux_mem_diff_tool](https://github.com/monnappa22/linux_mem_diff_tool) Script to perform Linux Memory Diff Analysis Using Volatility
+- [**22**星][7y] [Py] [milo2012/burpsql](https://github.com/milo2012/burpsql) Automating SQL injection using Burp Proxy Logs and SQLMap
+- [**22**星][5d] [PHP] [middlewares/payload](https://github.com/middlewares/payload) PSR-15 middleware to parse the body of the request with support for json, csv and url-encode
+- [**22**星][3y] [Swift] [melvinsh/burptoggle](https://github.com/melvinsh/burptoggle) Status bar application for OS X to toggle the state of the system HTTP/HTTPS proxy.
+- [**22**星][1y] [C++] [meetpatty/basiliskii-vita](https://github.com/meetpatty/basiliskii-vita)
+- [**22**星][5m] [HTML] [mdn/pab](https://github.com/mdn/pab) MDN Web Docs Product Advisory Board
+- [**22**星][2y] [Py] [mdegrazia/onionpeeler](https://github.com/mdegrazia/onionpeeler) Python script to batch query the Tor Relays and Bridges
+- [**22**星][4y] [Ruby] [martinvigo/metasploit-framework](https://github.com/martinvigo/metasploit-framework) Metasploit Framework
+- [**22**星][1y] [Py] [marcovaldong/isgan](https://github.com/marcovaldong/isgan) Implementation of "Invisible Steganography via Generative Adversarial Networks" (
+- [**22**星][1y] [C#] [malcomvetter/antidebug](https://github.com/malcomvetter/antidebug) PoC: Prevent a debugger from attaching to managed .NET processes via a watcher process code pattern.
+- [**22**星][2d] [Dockerfile] [mablanco/docker-osmedeus](https://github.com/mablanco/docker-osmedeus) Docker image for Osmedeus, a fully automated offensive security tool for reconnaissance and vulnerability scanning
+- [**22**星][30d] [Py] [lylemi/saker](https://github.com/lylemi/saker) Flexible Penetrate Testing Auxiliary Suite
+- [**22**星][1y] [Py] [lorenzb/submarine_sends](https://github.com/lorenzb/submarine_sends) A proof-of-concept implementation of Submarine Sends for Ethereum
+- [**22**星][2y] [C] [lorecioni/imagesplicingdetection](https://github.com/lorecioni/imagesplicingdetection) Illuminant inconsistencies for image splicing detection in forensics
+- [**22**星][2m] [Py] [lockgit/py](https://github.com/lockgit/py) rsa,base64,ac,kmp,svm,knn,mitm,hash table...
+- [**22**星][2y] [liucan01/cve-list-pro](https://github.com/liucan01/cve-list-pro)
+- [**22**星][2y] [Py] [letusfsck/poc-exploit-mirror](https://github.com/letusfsck/poc-exploit-mirror) Archive Mirror for recently republished PoC/Exploit code
+- [**22**星][2y] [Py] [leonardonve/dns2proxy_hsts](https://github.com/leonardonve/dns2proxy_hsts) DNS2Proxy offensive proxy version for HSTS
+- [**22**星][1y] [Py] [leoid/encoder](https://github.com/leoid/encoder) Alphanumeric Encoder
+- [**22**星][4y] [C#] [leechristensen/offensivepowershelltasking](https://github.com/leechristensen/offensivepowershelltasking) Run multiple PowerShell scripts concurrently in different app domains!
+- [**22**星][2y] [TS] [lavalamp-/ws-frontend-community](https://github.com/lavalamp-/ws-frontend-community) Web Sight Front-end Community Edition
+- [**22**星][1y] [Shell] [lamableu/morfeus_gui](https://github.com/lamableu/morfeus_gui) control your moRFeus device from your Linux-computer or Raspberry Pi
+- [**22**星][1y] [Go] [lakevilladom/goskylar](https://github.com/lakevilladom/goskylar) 基于Golang开发的企业级外网端口资产扫描
+- [**22**星][2y] [lac-japan/owasp-mobile-top-10-2016](https://github.com/lac-japan/owasp-mobile-top-10-2016) OWASP Mobile Top 10 2016 日本語訳
+- [**22**星][8m] [Py] [laanwj/dwarf_to_c](https://github.com/laanwj/dwarf_to_c) Tool to recover C headers (types, function signatures) from DWARF debug data
+- [**22**星][3y] [Py] [kutio/liblll](https://github.com/kutio/liblll) python library to manage and reduce lattices
+- [**22**星][6m] [Shell] [kitsun3sec/pentest-cheat-sheets](https://github.com/kitsun3sec/pentest-cheat-sheets) A collection of snippets of codes and commands to make your life easier!
+- [**22**星][4y] [Scala] [katjahahn/jwscan](https://github.com/katjahahn/jwscan) Scanner for Jar to EXE wrapper like Launch4j, Exe4j, JSmooth, Jar2Exe
+- [**22**星][4y] [PHP] [k1p0d/zeus_reports_len](https://github.com/k1p0d/zeus_reports_len) Remote timing attack exploit against most Zeus/Zbot variants including Citadel, Ice9, Zeus 2.3, KINS/ZeusVM etc..
+- [**22**星][2y] [Perl] [jusafing/pnaf](https://github.com/jusafing/pnaf) Passive Network Audit Framework
+- [**22**星][3y] [C] [josephjkong/designing-bsd-rootkits](https://github.com/josephjkong/designing-bsd-rootkits) Code from the book "Designing BSD Rootkits: An Introduction to Kernel Hacking"
+- [**22**星][3y] [Shell] [johntroony/luks-ops](https://github.com/johntroony/luks-ops) A bash script to automate the most basic usage of LUKS volumes in Linux VPS
+- [**22**星][1y] [Py] [jiangsir404/xss-sql-fuzz](https://github.com/jiangsir404/xss-sql-fuzz) burpsuite 插件对GP所有参数(过滤特殊参数)一键自动添加xss sql payload 进行fuzz
+- [**22**星][5m] [Py] [jhermann/dependency-check-py](https://github.com/jhermann/dependency-check-py)
+- [**22**星][4y] [Go] [jgrahamc/torexit](https://github.com/jgrahamc/torexit) Small program to read lists of Tor exit nodes and draw picture showing when they join/leave list
+- [**22**星][6y] [C++] [jbremer/pyn](https://github.com/jbremer/pyn) Awesome Python bindings for Pintool
+- [**22**星][1y] [Shell] [jas502n/st2-046-poc](https://github.com/jas502n/st2-046-poc) st2-046-poc CVE-2017-5638
+- [**22**星][5y] [C++] [jandre/brosquery](https://github.com/jandre/brosquery) module for osquery to load Bro logs into tables
+- [**22**星][6m] [JS] [inverseintegral/ctf_writeups](https://github.com/inverseintegral/ctf_writeups)
+- [**22**星][2y] [Py] [invasi0nz/lo0sr](https://github.com/invasi0nz/lo0sr) Lo0sR is a simple python Keylogger with many functions.
+- [**22**星][2y] [Go] [integrii/wormhole](https://github.com/integrii/wormhole)
+- [**22**星][17d] [Py] [ins1gn1a/netntlm-hashcat](https://github.com/ins1gn1a/netntlm-hashcat) Converts John The Ripper/Cain format hashes (singular, or in bulk) to HashCat compatible hash format.
+- [**22**星][4y] [Py] [infectedpacket/vxvault](https://github.com/infectedpacket/vxvault) Malware management program and tools
+- [**22**星][3y] [C] [iaik/prefetch](https://github.com/iaik/prefetch) This repository contains several tools to perform Prefetch Side-Channel Attacks
+- [**22**星][3y] [C] [iagox86/ctfworkshop-2017](https://github.com/iagox86/ctfworkshop-2017)
+- [**22**星][11m] [Py] [hypnoze57/fshell](https://github.com/hypnoze57/fshell) My python3 implementation of a Forward Shell
+- [**22**星][11m] [Py] [howmp/comfinder](https://github.com/howmp/comfinder) 查找标记COM组件中的函数
+- [**22**星][2y] [Py] [hongfeioo/userdevicetracker](https://github.com/hongfeioo/userdevicetracker) 快速定位一个IP或MAC在你的网络中的位置,是网络工程师提高工作效率的利器,也可以为CMDB提供基础网络数据。
+- [**22**星][3y] [Py] [hoainam1989/training-application-security](https://github.com/hoainam1989/training-application-security) This repository for training application security.
+- [**22**星][12m] [C] [hfiref0x/bsodscreen](https://github.com/hfiref0x/bsodscreen) BSOD Screensaver
+- [**22**星][3y] [C] [hexhive/epoxy](https://github.com/hexhive/epoxy) Root Repo for the EPOXY tool that applies Privilege Overlays on bare-metal systems
+- [**22**星][2y] [C] [herwonowr/catchme](https://github.com/herwonowr/catchme) CatchME - WiFi Fun Box "Having Fun with ESP8266"
+- [**22**星][1y] [C] [hackerwarehouse/hw-dc26-badge](https://github.com/hackerwarehouse/hw-dc26-badge) Hacker Warehouse electronic badge that was made for DEF CON 26
+- [**22**星][2y] [C] [h3xx/jphs](https://github.com/h3xx/jphs) jphide & seek steganography tools
+- [**22**星][3y] [Py] [guelfoweb/fbid](https://github.com/guelfoweb/fbid) Show info about the author by facebook photo url
+- [**22**星][4m] [Java] [guardianproject/jtorctl](https://github.com/guardianproject/jtorctl) deprecated fork of Java Tor Control Library
+- [**22**星][3y] [JS] [gregkcarson/googleappscriptse](https://github.com/gregkcarson/googleappscriptse) Social Engineering Abusing Google App Scripts
+- [**22**星][2y] [C++] [grcasanova/supervirus](https://github.com/grcasanova/supervirus) Project aimed at creating a malware able to evolve and adapt to the various host machines through metamorphic modifications, spontaneous mutations, code imitation and DNA programming to enable/disable functionalities
+- [**22**星][2y] [PHP] [gr33ntii/malware-collection](https://github.com/gr33ntii/malware-collection)
+- [**22**星][1y] [Go] [ginuerzh/gosocks5](https://github.com/ginuerzh/gosocks5) golang and SOCKS5
+- [**22**星][8m] [BitBake] [ghsec/bbprofiles](https://github.com/ghsec/bbprofiles) Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that improve an active and passive scanner by yourself. This extension requires Burp Suite Pro.
+- [**22**星][4y] [ObjC] [gdssecurity/osx-continuity-dialer-poc](https://github.com/gdssecurity/osx-continuity-dialer-poc)
+- [**22**星][8y] [Java] [frohoff/jdeserialize](https://github.com/frohoff/jdeserialize) From
+- [**22**星][3y] [Py] [freenas/middleware](https://github.com/freenas/middleware) New FreeNAS 10 Middleware
+- [**22**星][4d] [Py] [fmagin/angr-cli](https://github.com/fmagin/angr-cli) Repo for various angr ipython features to give it more of a cli feeling
+- [**22**星][3y] [Py] [firmadyne/extractor](https://github.com/firmadyne/extractor) Kernel and filesystem extractor
+- [**22**星][6y] [Shell] [find-evil/msf-install-script-os-x-lion-mountain-lion](https://github.com/find-evil/msf-install-script-os-x-lion-mountain-lion) Script to automate installation of Metasploit Framework on OS X Lion & Mountain Lion
+- [**22**星][2y] [JS] [feedhenry/mobile-security](https://github.com/feedhenry/mobile-security) FeedHenry Mobile Security
+- [**22**星][1m] [JS] [fcavallarin/htcrawl](https://github.com/fcavallarin/htcrawl) Htcrawl is nodejs module for the recursive crawling of single page applications (SPA) using javascript
+- [**22**星][1y] [HTML] [fastly/waf_testbed](https://github.com/fastly/waf_testbed) Chef Cookbook which provisions apache+mod_security+owasp-crs
+- [**22**星][9m] [C++] [fare9/pba_analysis_tools](https://github.com/fare9/pba_analysis_tools) My own versions from the programs of the book "Practical Binary Analysis"
+- [**22**星][9m] [Py] [f0re1gners/ejudge](https://github.com/f0re1gners/ejudge) EOJ 评测核心 沙箱接口
+- [**22**星][7m] [f-secure/elevation-of-privacy](https://github.com/f-secure/elevation-of-privacy) Privacy Cards for Software Developers
+- [**22**星][7m] [Java] [ettic-team/endpointfinder-burp](https://github.com/ettic-team/endpointfinder-burp)
+- [**22**星][3y] [Java] [ernw/burpsuite-extensions](https://github.com/ernw/burpsuite-extensions) A collection of Burp Suite extensions
+- [**22**星][6m] [JS] [entropystring/javascript](https://github.com/entropystring/javascript) EntropyString for JavaScript
+- [**22**星][5d] [Py] [endgameinc/malware_evasion_competition](https://github.com/endgameinc/malware_evasion_competition)
+- [**22**星][3y] [PHP] [emanuil/php-reaper](https://github.com/emanuil/php-reaper) PHP tool to scan ADOdb code for SQL Injections
+- [**22**星][2m] [Py] [ekiojp/dfex](https://github.com/ekiojp/dfex) DNS File EXfiltration
+- [**22**星][3y] [Py] [ehabhussein/ollydbg-binary-execution-visualizer](https://github.com/ehabhussein/ollydbg-binary-execution-visualizer) reverse engineering, visual binary analysis
+- [**22**星][2y] [C++] [dragonquesthero/kernel-force-delete](https://github.com/dragonquesthero/kernel-force-delete) force delete runing .exe application file.or delete any locked file
+- [**22**星][1y] [Py] [digiampietro/adbtools2](https://github.com/digiampietro/adbtools2) Tools for hacking ADB Epicentro routers, including firmware modification and VOIP password recovery.
+- [**22**星][1y] [Ruby] [defcon-russia/metasploit-framework](https://github.com/defcon-russia/metasploit-framework) Metasploit Framework
+- [**22**星][3y] [PS] [davehardy20/invoke-winrmattack](https://github.com/davehardy20/invoke-winrmattack) PowerShell cmdlet to push PowerShell attack modules to a remote system via PSRemoting and if required enable WinRM remotely.
+- [**22**星][2y] [Py] [dariosharp/szpy](https://github.com/dariosharp/szpy) Z3 Symbolic Execution python
+- [**22**星][4y] [Shell] [d3f4ultt/princesofpaypal](https://github.com/d3f4ultt/princesofpaypal) A security write-up about the Paypal API & data leakage
+- [**22**星][3y] [C++] [d35m0nd142/kadabra](https://github.com/d35m0nd142/kadabra) [DEPRECATED] Kadabra is my automatic LFI Exploiter and Scanner, written in C++ and a couple extern module in Python.
+- [**22**星][3y] [Py] [cujanovic/cve-2016-8610-poc](https://github.com/cujanovic/cve-2016-8610-poc) CVE-2016-8610 (SSL Death Alert) PoC
+- [**22**星][3y] [Scala] [criteo/vizsql](https://github.com/criteo/vizsql) Scala and SQL happy together.
+- [**22**星][22d] [Scala] [criteo/slab](https://github.com/criteo/slab) An extensible Scala framework for creating monitoring dashboards.
+- [**22**星][6m] [Py] [conmarap/website-fingerprinting](https://github.com/conmarap/website-fingerprinting) Deanonymizing Tor or VPN users with website fingerprinting and machine learning.
+- [**22**星][11m] [Shell] [cogset/shadowsocks](https://github.com/cogset/shadowsocks) Shadowsocks in Docker
+- [**22**星][2y] [C#] [cobbr/insecurepowershellhost](https://github.com/cobbr/insecurepowershellhost) InsecurePowerShellHost is a .NET Core host process for InsecurePowerShell, a version of PowerShell Core v6.0.0 with key security features removed.
+- [**22**星][5y] [C] [citypw/suterusu](https://github.com/citypw/suterusu) An LKM rootkit targeting Linux 2.6/3.x on x86(_64), and ARM
+- [**22**星][3y] [C] [cert-polska/nymaim-tools](https://github.com/cert-polska/nymaim-tools)
+- [**22**星][2y] [C] [celesteblue-dev/ps4-pkg2usb](https://github.com/celesteblue-dev/ps4-pkg2usb) PS4 payload (based on Vortex’s dumper) to dump and run fake PKGs on USB.
+- [**22**星][3y] [Java] [cblichmann/idajava](https://github.com/cblichmann/idajava) Java integration for Hex-Rays IDA Pro
+- [**22**星][5y] [C++] [casualx/libex](https://github.com/casualx/libex) C++ Helper Library for myself
+- [**22**星][10m] [XSLT] [capt-meelo/massmap](https://github.com/capt-meelo/massmap) Combined port scanning w/ Masscan's speed & Nmap's scanning features.
+- [**22**星][4y] [Py] [camoufl4g3/sqli-payload-fuzz3r](https://github.com/camoufl4g3/sqli-payload-fuzz3r)
+- [**22**星][3y] [C++] [bronzeme/ssdt_hook_x64](https://github.com/bronzeme/ssdt_hook_x64)
+- [**22**星][6y] [C#] [brandonprry/vulnerable_xxe](https://github.com/brandonprry/vulnerable_xxe) A C# web handler that is vulnerable to XXE with PoC. This is to serve as an example of what vulnerable C# code looks like.
+- [**22**星][3m] [CSS] [braindead-sec/rogue-captive](https://github.com/braindead-sec/rogue-captive) Rogue Captive Portal for Raspberry Pi
+- [**22**星][11m] [C#] [borjamerino/dns-polygraph](https://github.com/borjamerino/dns-polygraph) Tool designed to study the answers of your DNS resolver and make easier the identification of techniques such as DNS Hijacking/Poisoning
+- [**22**星][1y] [Py] [blazeinfosec/cve-2017-10366_peoplesoft](https://github.com/blazeinfosec/cve-2017-10366_peoplesoft) CVE-2017-10366: Oracle PeopleSoft 8.54, 8.55, 8.56 Java deserialization exploit
+- [**22**星][2y] [C] [billy-ellis/arm-gadget-finder](https://github.com/billy-ellis/arm-gadget-finder) Work-in-progress open source ROP gadget finder for 32-bit ARM binaries
+- [**22**星][1y] [Py] [beatsbears/pkl](https://github.com/beatsbears/pkl) A simple Python Keylogger for macOS
+- [**22**星][2y] [HTML] [beardog108/snow10](https://github.com/beardog108/snow10) Use whitespace and unicode chars for steganography
+- [**22**星][4m] [C++] [bb107/winsudo](https://github.com/bb107/winsudo) Execute commands as local system.
+- [**22**星][2y] [Py] [battelle/reductio](https://github.com/battelle/reductio) An exploration of code homeomorphism
+- [**22**星][1y] [asuri-team/dproxy](https://github.com/asuri-team/dproxy) Massive Distributed Dynamic Proxy
+- [**22**星][1y] [C#] [arkhist/hacklinks](https://github.com/arkhist/hacklinks) Hacklinks is an open source online game about hacking.
+- [**22**星][2y] [Py] [argilo/nrsc-5](https://github.com/argilo/nrsc-5) Prototype implementation of HD Radio (NRSC-5). Superseded by
+- [**22**星][3y] [C++] [apriorit/simple-antirootkit-sst-unhooker](https://github.com/apriorit/simple-antirootkit-sst-unhooker) This is a demo project to illustrate the way to verify and restore original SST in case of some malware hooks
+- [**22**星][3y] [Py] [ansible/ansible-blog-examples](https://github.com/ansible/ansible-blog-examples) Example playbooks from posts on the Ansible blog (
+- [**22**星][19d] [Rust] [aloxaf/rbkcrack](https://github.com/aloxaf/rbkcrack) Crack legacy zip encryption with Biham and Kocher's known plaintext attack. 使用明文攻击破解加密的 zip 文件
+- [**22**星][3y] [Py] [almco/panorama](https://github.com/almco/panorama) Fast incident overview
+- [**22**星][1y] [ObjC] [alexmx/insider](https://github.com/alexmx/insider) Insider sets a backdoor into your app for testing tools like Appium, Calabash, Frank, etc.
+- [**22**星][2y] [Shell] [aflgo/oss-fuzz](https://github.com/aflgo/oss-fuzz) OSS-Fuzz - integrated with AFLGo for Patch Testing
+- [**22**星][2y] [Py] [abatchy17/rop-emporium](https://github.com/abatchy17/rop-emporium) Solutions for ROP Emporium challenges (
+- [**22**星][6y] [Java] [aatxe/openmaple](https://github.com/aatxe/openmaple) A fast MapleStory emulator aiming to bring openness back to the private server community.
+- [**22**星][3y] [5z1punch/my_php_kernel_handbook_for_pwn](https://github.com/5z1punch/my_php_kernel_handbook_for_pwn) 这一切的开始,都要从我爷爷在悬崖下捡到一本白帽子讲web安全说起
+- [**22**星][2y] [Py] [0xsearches/sandcastle](https://github.com/0xsearches/sandcastle)
+- [**22**星][3y] [PHP] [0x584a/fuzzxssphp](https://github.com/0x584a/fuzzxssphp) PHP版本的反射型xss扫描,支持GET,POST
+- [**22**星][4y] [LaNMaSteR53/honeybadger](https://bitbucket.org/lanmaster53/honeybadger)
+- [**21**星][2y] [Py] [sorz/ssmanager](https://github.com/sorz/ssmanager) A python module managing large amount of running Shadowsocks server instances.
+- [**21**星][1y] [Dockerfile] [alibo/goquiet-shadowsocks-docker](https://github.com/alibo/goquiet-shadowsocks-docker) A Docker image for Shadowsocks over GoQuiet
+- [**21**星][6m] [Py] [coallaoh/whitenblackbox](https://github.com/coallaoh/whitenblackbox) Towards Reverse-Engineering Black-Box Neural Networks, ICLR'18
+- [**21**星][] [Py] [technowlogy-pushpender/technowlogger](https://github.com/technowlogy-pushpender/technowlogger) TechNowLogger is Windows/Linux Keylogger Generator which sends key-logs via email with other juicy target info
+- [**21**星][1y] [Py] [ins1gn1a/pwdlyser-cli](https://github.com/ins1gn1a/pwdlyser-cli) Python-based CLI Password Analyser (Reporting Tool)
+- [**21**星][2y] [JS] [shangxinbo/cardinal](https://github.com/shangxinbo/cardinal) A socks and http proxy by nodejs for you to over GWF
+- [**21**星][1y] [Java] [wrbug/charles-crack](https://github.com/wrbug/charles-crack) charles破解
+- [**21**星][6y] [Py] [ganapati/spaf](https://github.com/ganapati/spaf) Static Php Analysis and Fuzzer
+- [**21**星][4y] [Py] [jofpin/compaxss](https://github.com/jofpin/compaxss) Bypass XSS Reflected Cross-site scripting
+- [**21**星][5y] [C++] [sweetsoftware/ftpkeylogger](https://github.com/sweetsoftware/ftpkeylogger) Simple keylogger for Windows with HTML output and FTP upload.
+- [**21**星][4y] [Py] [juliocesarfort/webshotter](https://github.com/juliocesarfort/webshotter) A multi-threaded Python tool to generate screenshot of websites
+- [**21**星][2y] [0x90/firmware-arsenal](https://github.com/0x90/firmware-arsenal) Tools and scripts for firmware reverse engeneering
+- [**21**星][3y] [Py] [mthbernardes/demoniware](https://github.com/mthbernardes/demoniware) Telegram BotNet
+- [**21**星][8y] [Java] [spiderlabs/cerealbox](https://github.com/spiderlabs/cerealbox) Arduino-based network monitor
+- [**21**星][3y] [Py] [f-secure/headless-scanner-driver](https://github.com/f-secure/headless-scanner-driver) A Burp Suite extension that starts scanning on requests it sees, and dumps results on standard output
+- [**21**星][19d] [CSS] [mitre/mitre.github.io](https://github.com/mitre/mitre.github.io) Open Source software from The MITRE Corporation
+- [**21**星][2y] [C] [reswitched/rcm-modchips](https://github.com/reswitched/rcm-modchips) Collection of "modchip" designs for launching payloads via the Tegra RCM bug (CVE-2018-6242)
+- [**21**星][2y] [C#] [functionclub/localproxy](https://github.com/functionclub/localproxy) 一键更改系统本地IE代理的小工具
+- [**21**星][1y] [C++] [awnumar/nixbot](https://github.com/awnumar/nixbot) Lightweight TCP botnet coded in C++
+- [**21**星][1y] [JS] [shadowsocks/shadowsocks-hub-api](https://github.com/shadowsocks/shadowsocks-hub-api) A set of open and standard restful APIs for managing shadowsocks users, servers, nodes, products, accounts, and traffic.
+- [**21**星][24d] [bkth/optimize_rce_chakra](https://github.com/bkth/optimize_rce_chakra) keynote I gave at GreHack 2019
+- [**21**星][30d] [Shell] [gwolf3/visshous](https://github.com/gwolf3/visshous)
+- [**21**星][1y] [Java] [netindev/allatori-v3.0](https://github.com/netindev/allatori-v3.0) Allatori v3.0 source code.
+- [**21**星][30d] [Py] [verabe/veriman](https://github.com/verabe/veriman) Analysis tool for Solidity smart contracts. Prototype.
+- [**21**星][1y] [unexpectedby/sqli-dork-repository](https://github.com/unexpectedby/sqli-dork-repository) Dorks Hacking Database for educational proposal
+- [**21**星][3d] [CSS] [cacti/documentation](https://github.com/cacti/documentation) Documentation for Cacti, Spine, RRDProxy and more
+- [**21**星][7y] [Shell] [tjetzinger/cloudcrackinstaller](https://github.com/tjetzinger/cloudcrackinstaller) A script to install Crunch, Pyrit and Cowpatty on a running Amazon EC2 Cluster GPU Instance to crack WPA and WPA2 keys.
+- [**21**星][3y] [Py] [initbrain/python-wi-fi-positioning-system](https://github.com/initbrain/python-wi-fi-positioning-system) Python Wi-Fi Positioning System - Wi-Fi geolocation script using the Google Geolocation API
+- [**21**星][3m] [yeahhub/kali-linux-ebooks](https://github.com/yeahhub/kali-linux-ebooks) Top 20 Kali Linux Related E-books (Free Download)
+- [**21**星][4m] [PS] [nyan-x-cat/malwareshell](https://github.com/nyan-x-cat/malwareshell) Create a powershell malware loader to run C#.cs code on runtime
+- [**21**星][13d] [TS] [paulmillr/noble-ed25519](https://github.com/paulmillr/noble-ed25519) Noble ed25519. High-security, easily auditable, 0-dep, 1-file pubkey, scalarmult & EDDSA
+- [**21**星][28d] [Py] [hash3lizer/wifijammer](https://github.com/hash3lizer/wifijammer) Wireless Jammer to Disconnect Nearby Access-Points and Stations.
+- [**21**星][17d] [Py] [z3pp/zfuzz](https://github.com/z3pp/zfuzz) Simple python web fuzzer
+- [**21**星][4y] [Ruby] [vallejocc/hacking-busybox-control](https://github.com/vallejocc/Hacking-Busybox-Control) Some metasploit scripts to help to control busybox based embedded devices
+- [**21**星][3y] [C] [newbee119/iot_bot](https://github.com/NewBee119/IoT_bot) A sample IoT bot origin from Mirai
+- [**21**星][3y] [Py] [cylance/idpanel](https://github.com/cylance/IDPanel) Identify botnet panels with Ensembled Decision Trees
+- [**21**星][1y] [JS] [mindpointgroup/stig-cli](https://github.com/MindPointGroup/stig-cli) A CLI for perusing DISA STIG content Mac, Linux, and Windows Compatible
+- [**21**星][4y] [Rust] [auth0-blog/rust-api-example](https://github.com/auth0-blog/rust-api-example) Example of a RESTful API in Rust
+- [**21**星][2y] [Py] [chiefychief/router_pwner](https://github.com/ChiefyChief/router_pwner) Dynamically id routers and attempt to compromise
+- [**21**星][5y] [C++] [r-lyeh-archived/moon9](https://github.com/r-lyeh-archived/moon9) a game framework. warning: wip, dev, unstable, radiation hazard, defcon 3
+- [**21**星][1m] [Py] [csirtgadgets/csirtg-smrt-v1](https://github.com/csirtgadgets/csirtg-smrt-v1) the fastest way to consume threat intelligence.
+- [**21**星][15d] [Shell] [cryptomator/cryptomator-mac](https://github.com/cryptomator/cryptomator-mac) Cryptomator .dmg image for Mac
+- [**21**星][5y] [C] [zliu-fd/windivertproxy](https://github.com/zliu-fd/windivertproxy) Proxy any program via WinDivert to a specific server
+- [**21**星][3y] [Java] [zhaozepeng/safewebview](https://github.com/zhaozepeng/safewebview) 修复 4.2 之下 JS 漏洞的 WebView
+- [**21**星][1y] [zecopro/wpa-passwords](https://github.com/zecopro/wpa-passwords) the best and small passwords lists to crack handshake wpa-wpa2
+- [**21**星][9y] [C] [zapotek/cdpsnarf](https://github.com/zapotek/cdpsnarf) CDPSnarf is a network sniffer exclusively written to extract information from CDP (Cisco Discovery Protocol) packets.
+- [**21**星][3y] [Py] [xorpd/fcatalog_client](https://github.com/xorpd/fcatalog_client) fcatalog idapython client
+- [**21**星][2y] [Vue] [xinali/penework](https://github.com/xinali/penework) Penetration Test Framwork
+- [**21**星][4y] [C++] [xbased/xhook](https://github.com/xbased/xhook) Hook Windows API. supports Win7/8/10 x86 and x64 platform.
+- [**21**星][2y] [xazlsec/ctf-project-lists](https://github.com/xazlsec/ctf-project-lists) 由信安之路团队成员收集整理的与 CTF 相关的 Github 项目地址,如果你由更好的项目请将项目地址发送到:myh0st@foxmail.com
+- [**21**星][9m] [PS] [wurstcommander/win10appremove](https://github.com/wurstcommander/win10appremove) A Powershell-Script for removing / debloating Windows 10 apps. Mandatory apps which can't be uninstalled via start menu will be removed too.
+- [**21**星][2y] [Shell] [wolfvan/some-samples](https://github.com/wolfvan/some-samples) Malware captured with honeypots
+- [**21**星][3y] [CSS] [wizardforcel/kali-linux-cookbook-zh](https://github.com/wizardforcel/kali-linux-cookbook-zh)
+- [**21**星][5y] [Py] [windbgscripts/pykd](https://github.com/windbgscripts/pykd) This contains Helpful PYKD (Python Extension for Windbg) scripts
+- [**21**星][4y] [C] [warcraft23/virus-and-windows-api-programing](https://github.com/warcraft23/virus-and-windows-api-programing) 中科大13级计算机病毒分析与WindowsAPI编程 授课老师:郭大侠
+- [**21**星][1y] [Py] [v-p-b/similarninja](https://github.com/v-p-b/similarninja) similarninja: Binary Ninja插件, 用于二进制文件的控制流程图(CFG)匹配
+- [**21**星][9d] [Py] [unstabl3/recce](https://github.com/unstabl3/recce) Domain availbility checker
+- [**21**星][2y] [Py] [unamer/ctfhelper](https://github.com/unamer/ctfhelper) A simple Burp extension for scanning stuffs in CTF
+- [**21**星][1y] [Py] [ucnt/aws-s3-bruteforce](https://github.com/ucnt/aws-s3-bruteforce) (DEPRECATED) Amazon AWS S3 Bucket Name Bruteforce
+- [**21**星][1y] [Go] [txn2/n2proxy](https://github.com/txn2/n2proxy) Contraband filtering reverse proxy for plain http and SSL.
+- [**21**星][1y] [CSS] [tuhinshubhra/uboat-panel](https://github.com/tuhinshubhra/uboat-panel) Panel for the HTTP botnet UBoat -
+- [**21**星][2y] [troydo42/awesome-pen-test](https://github.com/troydo42/awesome-pen-test) Experiment with penetration testing Guides and Tools for WordPress, iOS, MacOS, Wifi and Car
+- [**21**星][3y] [Py] [threatstream/symhash](https://github.com/threatstream/symhash)
+- [**21**星][2y] [C#] [thomdixon/saltwatertaffy](https://github.com/thomdixon/saltwatertaffy) An nmap wrapper library for .NET
+- [**21**星][3y] [Py] [thomaskeck/pyshellcode](https://github.com/thomaskeck/pyshellcode) Execute ShellCode / "Inline-Assembler" in Python
+- [**21**星][1y] [Py] [the-c0d3r/pynmap](https://github.com/the-c0d3r/pynmap) A serious attempt to implement multi-threading to nmap module, which would result in faster scanning speed. I know that one can write NSE scripts for multi-threaded scanning with it, but I wanted to try it on python.
+- [**21**星][1m] [Py] [teamseri0us/pocs](https://github.com/teamseri0us/pocs)
+- [**21**星][6y] [Py] [syworks/wifi-harvester](https://github.com/syworks/wifi-harvester) For collecting probed SSID name by wireless devices, Access point detail and connected clients.
+- [**21**星][1y] [Py] [syno3/babymux](https://github.com/syno3/babymux) pentesting tool for noob hackers.Runs on linux and termux
+- [**21**星][2y] [Py] [swisskyrepo/whid_toolkit](https://github.com/swisskyrepo/whid_toolkit) Simple script for the WHID injector - a rubberducky wifi
+- [**21**星][2d] [HTML] [sushi2k/owasp-mstg](https://github.com/sushi2k/owasp-mstg) The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security testing and reverse engineering.
+- [**21**星][5y] [stolas/windbg-darktheme](https://github.com/stolas/windbg-darktheme) A dark theme for WinDBG.
+- [**21**星][26d] [Shell] [stevemcgrath/docker-nessus_scanner](https://github.com/stevemcgrath/docker-nessus_scanner) Nessus Scanner Docker Image
+- [**21**星][29d] [status-im/awesome-secure-messaging](https://github.com/status-im/awesome-secure-messaging) A curated collection of links for secure messaging.
+- [**21**星][4m] [C] [sslab-gatech/fuzzification](https://github.com/sslab-gatech/fuzzification) We hinder fuzzing
+- [**21**星][10y] [C++] [sporst/ida-pro-plugins](https://github.com/sporst/ida-pro-plugins) Collection of IDA Pro plugins I wrote over the years
+- [**21**星][2y] [Py] [spec-sec/securechat](https://github.com/spec-sec/securechat) Encrypted chat server and client written in Python
+- [**21**星][1y] [spchal/hacklu2018](https://github.com/spchal/hacklu2018) Telco training
+- [**21**星][2d] [sophoslabs/iocs](https://github.com/sophoslabs/iocs) Sophos-originated indicators-of-compromise from published reports
+- [**21**星][1y] [Rust] [smirnovvad/rbuster](https://github.com/smirnovvad/rbuster) yet another dirbuster
+- [**21**星][2y] [Py] [sirpsycho/firecall](https://github.com/sirpsycho/firecall) firecall: 直接向Cisco ASA防火墙发送命令, 无需登录防火墙后再做修改
+- [**21**星][10d] [Batchfile] [simplevulnerabilitymanager/svm](https://github.com/simplevulnerabilitymanager/svm) Program to perform vulnerability analysis and automatically generate a report
+- [**21**星][5y] [shieldfy/awesome-pentest](https://github.com/shieldfy/awesome-pentest) A collection of awesome penetration testing resources, tools and other shiny things
+- [**21**星][1y] [sharsi1/sublazerwlst](https://github.com/sharsi1/sublazerwlst) Bundle of wordlists for brute-forcing subdomains (World + RUSSIA based).
+- [**21**星][3y] [Go] [shakenetwork/onionscan](https://github.com/shakenetwork/onionscan) OnionScan暗网爬虫是一个免费的开源工具,用于调查黑网。 OnionScan is a free and open source tool for investigating the Dark Web
+- [**21**星][3y] [C#] [shadowsocks-plus/shadowsocks-plus-win](https://github.com/shadowsocks-plus/shadowsocks-plus-win) An installer for SSPlus local proxy on Windows
+- [**21**星][10m] [Shell] [sensepost/common-substr](https://github.com/sensepost/common-substr) Simple awk script to extract the most common substrings from an input text. Built for password cracking.
+- [**21**星][3y] [HTML] [secwiki/wooyun_articles](https://github.com/secwiki/wooyun_articles) drops.wooyun.org 乌云Drops文章备份
+- [**21**星][4y] [PHP] [secwiki/webshell](https://github.com/secwiki/webshell) This is a webshell open source project
+- [**21**星][5y] [ActionScript] [securityobscurity/cve-2015-0313](https://github.com/securityobscurity/cve-2015-0313)
+- [**21**星][1m] [Dockerfile] [secbone/docker-ss-libev](https://github.com/secbone/docker-ss-libev) A mini docker image of Shadowsocks-libev only 15M in size
+- [**21**星][5m] [Shell] [sec0ps/va-pt](https://github.com/sec0ps/va-pt) VAPT is a Vulnerability Assessment and Penetration Testing toolkit. It merges the most common tools from Kali and SamuraiWTF into one platform and places them onto an Ubuntu or Raspbian platform.
+- [**21**星][15d] [Py] [saucer-man/penetration-script](https://github.com/saucer-man/penetration-script) 渗透测试脚本
+- [**21**星][1y] [C++] [sanketkarpe/anwi](https://github.com/sanketkarpe/anwi) ANWI - All New Wireless IDS
+- [**21**星][4y] [Py] [sam-b/z3-stuff](https://github.com/sam-b/z3-stuff) z3 scripts and ctf challenge solutions.
+- [**21**星][10m] [Py] [sadeghhayeri/lol-hacking](https://github.com/sadeghhayeri/lol-hacking) My Hacking Activities!
+- [**21**星][1m] [Shell] [rustybird/qubes-split-browser](https://github.com/rustybird/qubes-split-browser) Tor Browser in a Qubes DisposableVM, with persistent bookmarks and login credentials
+- [**21**星][11m] [Smarty] [ropnop/pentest_charts](https://github.com/ropnop/pentest_charts) Some helpful Helm Charts for pentesters
+- [**21**星][7m] [rootup/phdays9](https://github.com/rootup/phdays9) My fuzzing workshop from PHDays9
+- [**21**星][3y] [Py] [roo7break/serialator](https://github.com/roo7break/serialator) Python script to exploit CVE-2015-4852.
+- [**21**星][2y] [C++] [riscybusiness/jadoube](https://github.com/riscybusiness/jadoube)
+- [**21**星][9m] [HTML] [ridter/cs_custom_404](https://github.com/ridter/cs_custom_404) Cobalt strike custom 404 page
+- [**21**星][5d] [PS] [rgl/visual-studio-community-vagrant](https://github.com/rgl/visual-studio-community-vagrant) Vagrant Environment for Visual Studio Community
+- [**21**星][1y] [C] [rfalke/decompiler-subjects](https://github.com/rfalke/decompiler-subjects) Tests cases for binary decompilers
+- [**21**星][5y] [Java] [retme7/launchanywhere_poc_by_retme_bug_7699048](https://github.com/retme7/launchanywhere_poc_by_retme_bug_7699048) source code & PoC file of launchAnyWhere problem
+- [**21**星][3y] [Py] [reflare/afl-monitor](https://github.com/reflare/afl-monitor) A monitoring script for AFL
+- [**21**星][3y] [Go] [rdkr/oniongen-go](https://github.com/rdkr/oniongen-go)
+- [**21**星][13d] [Java] [rcenvironment/rce](https://github.com/rcenvironment/rce) Distributed, workflow-driven integration environment
+- [**21**星][2y] [Ruby] [rapid7/msfrpc-client](https://github.com/rapid7/msfrpc-client) Rapid7 Metasploit API client library written in Ruby
+- [**21**星][11m] [Java] [ramshazar/orangetsai-springboot-actuator-poc](https://github.com/ramshazar/orangetsai-springboot-actuator-poc)
+- [**21**星][3y] [PS] [raikia/get-reconinfo](https://github.com/raikia/get-reconinfo) A powershell script that prints a lot of IP and connection info to the screen
+- [**21**星][6m] [r3mlab/datajournalism-resources](https://github.com/r3mlab/datajournalism-resources) A compilation of links to datajournalism & OSINT tools, guides and resources I find useful to keep at hand.
+- [**21**星][2m] [Py] [pyke369/exabgp-helpers](https://github.com/pyke369/exabgp-helpers) ExaBGP helpers scripts
+- [**21**星][3m] [Ruby] [pwelch/virustotal_api](https://github.com/pwelch/virustotal_api) Ruby Gem for VirusTotal API
+- [**21**星][10m] [Py] [pure-l0g1c/keylogger](https://github.com/pure-l0g1c/keylogger) A simple keylogger that uses Gmail as a C&C
+- [**21**星][2y] [Py] [pure-l0g1c/aircrack](https://github.com/pure-l0g1c/aircrack) Automatic Wifi Cracker. Uses Airodump, Aircrack, Aireplay
+- [**21**星][4y] [Shell] [psrcek/kali-mitm-evil-twin](https://github.com/psrcek/kali-mitm-evil-twin) A script that creates a wifi hotspot on kali linux that can view usernames and passwords of ssl logins.
+- [**21**星][1m] [Java] [portswigger/json-web-tokens](https://github.com/portswigger/json-web-tokens) JWT Support for Burp
+- [**21**星][3m] [Java] [portswigger/freddy-deserialization-bug-finder](https://github.com/portswigger/freddy-deserialization-bug-finder)
+- [**21**星][2m] [Py] [pirobot/pi_trees](https://github.com/pirobot/pi_trees) A Python/ROS library for implementing Behavior Trees
+- [**21**星][4y] [Py] [peterfillmore/rfidiot](https://github.com/peterfillmore/rfidiot) python RFID / NFC library & tools
+- [**21**星][5y] [C] [pastcompute/lca2015-radare2-tutorial](https://github.com/pastcompute/lca2015-radare2-tutorial) Examples and demos for my LCA2015 radare2 tutorial
+- [**21**星][2m] [Py] [ouroboros/juusankoubou](https://github.com/ouroboros/juusankoubou) 「十三工房」
+- [**21**星][3y] [Visual Basic .NET] [osandamalith/vbshellcode](https://github.com/osandamalith/vbshellcode) Making shellcode UD -
+- [**21**星][3y] [Py] [odedlaz/uberlogs](https://github.com/odedlaz/uberlogs) make logging fun again
+- [**21**星][5y] [C] [nyx0/dll-inj3cti0n](https://github.com/nyx0/dll-inj3cti0n) Another dll injection tool.
+- [**21**星][2y] [C] [nviso-be/nexus_5_bootloader_unpacker](https://github.com/nviso-be/nexus_5_bootloader_unpacker) A bootloader imgdata unpacker for Nexus 4, 5 and 7 smartphones as well as imgdata tool for Nexus 5.
+- [**21**星][3m] [Py] [nlitsme/idascripts](https://github.com/nlitsme/idascripts) 枚举多种类型数据:Texts/NonFuncs/...
+ - [enumerators](https://github.com/nlitsme/idascripts/blob/master/enumerators.py) Enumeration utilities for idapython
+- [**21**星][8m] [Py] [nguyenkhong/cracknetdrive3](https://github.com/nguyenkhong/cracknetdrive3)
+- [**21**星][3y] [Py] [neurobin/letsacme](https://github.com/neurobin/letsacme) A tiny script to issue and renew TLS/SSL certificate from Let's Encrypt
+- [**21**星][3y] [Go] [netxfly/xsec-ssh-firewall](https://github.com/netxfly/xsec-ssh-firewall) 一个简易的ssh密码防暴力破解程序
+- [**21**星][4y] [Py] [neo23x0/prisma](https://github.com/neo23x0/prisma) Command Line STDOUT Colorer
+- [**21**星][2y] [HTML] [neargle/secnewsbak](https://github.com/neargle/secnewsbak) 备份SecNews失效的Drops.Wooyun文章
+- [**21**星][2y] [Java] [mtxiaowangzi/java-ee-vulnweb](https://github.com/mtxiaowangzi/java-ee-vulnweb) 用于演示Java Web项目中,漏洞的成因及修复方案,可用于黑盒测试和白盒测试,部分修复方案可用于生产环境。
+- [**21**星][2y] [Py] [mstxq17/dbleakscan](https://github.com/mstxq17/dbleakscan) this scanner try to scan some dbbak or ctf #源码泄露
+- [**21**星][3y] [C++] [morpav/zceq_solver](https://github.com/morpav/zceq_solver) CPU solver for Zcash's variant of Equihash problem
+- [**21**星][1y] [C#] [mojtabatajik/besafe](https://github.com/mojtabatajik/besafe) BeSafe is robust threat analyzer which help to protect your desktop environment and know what's happening around you
+- [**21**星][3y] [Py] [misp/misp-workbench](https://github.com/misp/misp-workbench) MISP Workbench
+- [**21**星][5y] [JS] [mikolalysenko/lpf-ctf](https://github.com/mikolalysenko/lpf-ctf) Multiplayer capture the flag demo
+- [**21**星][6y] [Go] [mikkolehtisalo/gssapi-proxy](https://github.com/mikkolehtisalo/gssapi-proxy) GSSAPI/Kerberos proxy
+- [**21**星][2y] [C] [microwave89/drvtricks](https://github.com/microwave89/drvtricks) drvtriks kernel driver for Windows 7 SP1 and 8.1 x64, that tricks around in your system.
+- [**21**星][2y] [C++] [microsoft/firewalleventmonitor](https://github.com/microsoft/firewalleventmonitor) Listens for Firewall rule match events generated by Microsoft Hyper-V Virtual Filter Protocol (VFP) extension.
+- [**21**星][2y] [Py] [mdsecresearch/thriftdecoder](https://github.com/mdsecresearch/thriftdecoder) Apache Thrift Decoder
+- [**21**星][10m] [PHP] [mariusbalcytis/gentle-force](https://github.com/mariusbalcytis/gentle-force) Brute-force, error and request rate limiting
+- [**21**星][3m] [Py] [marcolivierbouch/dirbpy](https://github.com/marcolivierbouch/dirbpy) This is the new version of dirb in python
+- [**21**星][5m] [Py] [manhnho/shellsum](https://github.com/manhnho/shellsum) A defense tool - detect web shells in local directories via md5sum
+- [**21**星][3y] [C++] [malwares/malware](https://github.com/malwares/malware) Malware Samples. Uploaded to GitHub for those want to analyse the code.
+- [**21**星][5y] [C++] [lynnux/holyshit](https://github.com/lynnux/holyshit) ollydbg plugin, the goal is to make life easier. The project is DEAD!
+- [**21**星][5y] [JS] [longtian/cache_attack_in_javascript](https://github.com/longtian/cache_attack_in_javascript) Perform cache attack using javascript
+- [**21**星][2y] [Shell] [linuxlite/spectre-meltdown-checker-automated](https://github.com/linuxlite/spectre-meltdown-checker-automated) An Automated Spectre Meltdown downloader and checker
+- [**21**星][2y] [Py] [kudelskisecurity/check_all_apks](https://github.com/kudelskisecurity/check_all_apks) Check All APK's -- scripts for checking your phone for malware
+- [**21**星][2y] [Py] [kslgroup/threadmap](https://github.com/kslgroup/threadmap) threadmap plugin for Volatility Foundation
+- [**21**星][2y] [Py] [krrr/wstan](https://github.com/krrr/wstan) Tunneling TCP in WebSocket (ssh -D alternative)
+- [**21**星][5y] [Java] [khai-tran/burpjdser](https://github.com/khai-tran/burpjdser)
+- [**21**星][3y] [C++] [k0keoyo/cve-2015-2546-exploit](https://github.com/k0keoyo/cve-2015-2546-exploit)
+- [**21**星][2y] [Py] [jzadeh/aktaion2](https://github.com/jzadeh/aktaion2) Python implementation of the Aktaion project
+- [**21**星][7m] [Py] [joda32/certcrunchy](https://github.com/joda32/certcrunchy) Just a silly recon tool that uses data from SSL Certificates to find potential host names
+- [**21**星][9y] [Shell] [jfernandez/ddos-deflate](https://github.com/jfernandez/ddos-deflate) custom DDoS Deflate clone
+- [**21**星][2y] [C] [jerome-ps/jn516xsniffer](https://github.com/jerome-ps/jn516xsniffer) Transform a Xiaomi Zigbee gadget into a Zigbee sniffer.
+- [**21**星][3y] [Groovy] [jenkinsci-cert/security-218](https://github.com/jenkinsci-cert/security-218)
+- [**21**星][2y] [jasklabs/blackhat2017](https://github.com/jasklabs/blackhat2017) Data sets and examples for Jask Labs Blackhat 2017 Handout: Top 10 Machine Learning Cyber Security Use Cases
+- [**21**星][3m] [C] [jackullrich/trunpe](https://github.com/jackullrich/trunpe) A modified RunPE (process hollowing) technique avoiding the usage of SetThreadContext by appending a TLS section which calls the original entrypoint.
+- [**21**星][2y] [ivmachiavelli/osint_opendata](https://github.com/ivmachiavelli/osint_opendata) A collection of Open Data for the data freaks out there.
+- [**21**星][1y] [Py] [ins1gn1a/pwdlyser](https://github.com/ins1gn1a/pwdlyser) pwdlyser:密码分析工具,Python编写
+- [**21**星][6y] [Py] [ikoniaris/kippo-malware](https://github.com/ikoniaris/kippo-malware) Download all malicious files from a Kippo SSH honeypot database
+- [**21**星][2y] [Ruby] [realbearcat/cve-2018-1297](https://github.com/RealBearcat/CVE-2018-1297) Apache Jmeter RMI 反序列化
+- [**21**星][4y] [C++] [holmesian/gh0st-light](https://github.com/holmesian/gh0st-light) 精简之后的老东西
+- [**21**星][5m] [Py] [hash3lizer/subrake](https://github.com/hash3lizer/subrake) A powerful Subdomain Scanner & Validator for Reconnaissance.
+- [**21**星][2y] [Py] [harris21/afot](https://github.com/harris21/afot) Automation Forensics Tool for Windows
+- [**21**星][3y] [C] [hackerdom/phdctf-2017](https://github.com/hackerdom/phdctf-2017) PHDays Online CTF 2017. Developed with ♥ by Hackerdom team
+- [**21**星][6y] [C] [hackedteam/vector-silent](https://github.com/hackedteam/vector-silent) Silent installer
+- [**21**星][3y] [Py] [hack-all-the-things/charsetinspect](https://github.com/hack-all-the-things/charsetinspect) A script that inspects multi-byte character sets looking for characters with specific user-defined properties
+- [**21**星][2y] [PHP] [gwen001/vhost-brute](https://github.com/gwen001/vhost-brute) A PHP tool to brute force vhost configured on a server.
+- [**21**星][12m] [C++] [gtoad/android_anti_debug](https://github.com/gtoad/android_anti_debug) An example of android anti-debug.
+- [**21**星][2y] [Go] [gnolizuh/quictun](https://github.com/gnolizuh/quictun) The simplest tunnel service based on QUIC.
+- [**21**星][2m] [Py] [gh0x0st/buffer_overflow](https://github.com/gh0x0st/buffer_overflow) Just another OSCP prep guide into buffer overflows using Python
+- [**21**星][3m] [gh0st-404/zs-personal-infiltration-syste](https://github.com/gh0st-404/zs-personal-infiltration-syste) 泽少个人渗透系统 Zs Personal Infiltration Syste
+- [**21**星][3y] [PS] [fuzzysecurity/capstonekeystone-powershell](https://github.com/fuzzysecurity/capstonekeystone-powershell) PowerShell Module Bindings for Capstone/Keystone
+- [**21**星][2y] [Shell] [funilrys/funceble](https://github.com/funilrys/funceble) [ARCHIVED] Please report to
+- [**21**星][2m] [Py] [flarn2006/bhstools](https://github.com/flarn2006/bhstools) Tools for interacting with Brinks BHS-3000 and BHS-4000 / IntelliBus, custom firmware for BHS-4000
+- [**21**星][1y] [Py] [fjh658/hexrayspytools](https://github.com/fjh658/hexrayspytools) Ida Pro plugin
+- [**21**星][4y] [fabiobaroni/awesome-pentest](https://github.com/fabiobaroni/awesome-pentest) A collection of awesome penetration testing resources, tools and other shiny things
+- [**21**星][1m] [Shell] [fabaff/fsl-test-bench](https://github.com/fabaff/fsl-test-bench) FSL Test bench - Ansible playbook repository to setup a save environment for security auditing and testing. It can be used for teaching security testing methodologies, testing tools, learning, and playing.
+- [**21**星][6d] [Py] [f5networks/f5-google-gdm-templates](https://github.com/f5networks/f5-google-gdm-templates) Google Deployment Templates for quickly deploying BIG-IP services in Google Cloud Platform
+- [**21**星][10m] [Go] [extremecoders-re/go-dispatch-proxy](https://github.com/extremecoders-re/go-dispatch-proxy) SOCKS5 load balancing proxy developed in Go, combines multiple internet connections
+- [**21**星][18d] [Java] [ericsson/ecaudit](https://github.com/ericsson/ecaudit) Ericsson Audit plug-in for Apache Cassandra
+- [**21**星][3y] [Jupyter Notebook] [equalitie/bothound](https://github.com/equalitie/bothound) Automatic attack detector and botnet classifier
+- [**21**星][4m] [C#] [empier/memoryeditor](https://github.com/empier/memoryeditor) [C#]Main.exe < - > [C_DLL] < - > [C_KERNEL] = Memory_Editor via Kernel
+- [**21**星][1y] [C++] [edwig/sslsocket](https://github.com/edwig/sslsocket) Two sided secure/insecure socket that can do SSL/TLS connections without the need for OpenSSL libraries. It uses the standard WinCrypt modules
+- [**21**星][2y] [edoverflow/security-policy-specification-standard](https://github.com/edoverflow/security-policy-specification-standard) This document proposes a way of standardising the structure, language, and grammar used in security policies.
+- [**21**星][7m] [Py] [duchengyao/hkdvr_login](https://github.com/duchengyao/hkdvr_login) 批量扫描海康威视视频监控并尝试登录的脚本
+- [**21**星][7y] [C] [dsmatter/brootus](https://github.com/dsmatter/brootus) An educational Linux Kernel Rootkit
+- [**21**星][1y] [C] [droberson/icmp-backdoor](https://github.com/droberson/icmp-backdoor) Backdoor that listens for specially crafted ICMP packets and spawns reverse shells.
+- [**21**星][7m] [Py] [drbeni/malquarium](https://github.com/drbeni/malquarium) Malquarium - Modern Malware Repository
+- [**21**星][3m] [digitaldisarray/osint-tools](https://github.com/digitaldisarray/osint-tools)
+- [**21**星][3y] [Py] [digitalbond/ctf-challenges](https://github.com/digitalbond/ctf-challenges) Challenges from past S4 (SCADA Security Scientific Symposium) Capture-the-Flag contests.
+- [**21**星][2m] [TS] [dialogs/electron-ssl-pinning](https://github.com/dialogs/electron-ssl-pinning) Prevents MITM in Electron applications
+- [**21**星][1m] [Perl] [dheiland-r7/snmp](https://github.com/dheiland-r7/snmp) SNMP data gather scripts
+- [**21**星][10m] [dfir-it/supreme-backdoor-factory](https://github.com/dfir-it/supreme-backdoor-factory) This repository contains additional files mentioned in the blog post
+- [**21**星][2d] [C++] [deeponion/deeponion](https://github.com/deeponion/deeponion) Official Source Repo for DeepOnion - Anonymous Cryptocurrency on TOR (based on the latest codebase from litecoin/bitcoin)
+- [**21**星][4y] [Py] [decalage2/oledump-contrib](https://github.com/decalage2/oledump-contrib) The oledump-contrib repository contains plugins and enhancements for the oledump tool published by Didier Stevens.
+- [**21**星][1y] [Smali] [dan7800/vulnerableandroidapporacle](https://github.com/dan7800/vulnerableandroidapporacle)
+- [**21**星][4m] [C] [cyclaero/void-zones-tools](https://github.com/cyclaero/void-zones-tools) Prepare a list of void zones that can be readily feed into Unbound on FreeBSD
+- [**21**星][5y] [C++] [cr4sh/prl_guest_to_host](https://github.com/cr4sh/prl_guest_to_host) Guest to host VM escape exploit for Parallels Desktop
+- [**21**星][1y] [HTML] [consensys/evm-analyzer-benchmark-suite](https://github.com/consensys/evm-analyzer-benchmark-suite) A benchmark suite for evaluating the precision of EVM code analysis tools.
+- [**21**星][1y] [C] [codereba/netmon](https://github.com/codereba/netmon) network filter driver that control network send speed, based on windows tdi framework.
+- [**21**星][1y] [PHP] [codeclimate/codeclimate-phpcodesniffer](https://github.com/codeclimate/codeclimate-phpcodesniffer) Code Climate Engine for PHP Code Sniffer
+- [**21**星][2y] [Java] [codahale/grpc-proxy](https://github.com/codahale/grpc-proxy) A gRPC service which proxies requests to an HTTP server.
+- [**21**星][8m] [Java] [codahale/aes-gcm-siv](https://github.com/codahale/aes-gcm-siv) A Java implementation of AES-GCM-SIV (RFC 8452).
+- [**21**星][2y] [C] [circl/pcapdj](https://github.com/circl/pcapdj) pcapdj - dispatch pcap files
+- [**21**星][7m] [Py] [christhecoolhut/instruction-stomp](https://github.com/christhecoolhut/instruction-stomp) Cross-architecture instruction counting for CTF solving
+- [**21**星][21d] [JS] [chef-koch/bypass-adblockers](https://github.com/chef-koch/bypass-adblockers) Malvertising campaign that successfully bypasses ad blockers to deliver their malicious payload
+- [**21**星][6y] [Py] [carlpulley/volatility](https://github.com/carlpulley/volatility) A collection of Volatility Framework plugins.
+- [**21**星][10y] [C] [bringhurst/xnufuzz](https://github.com/bringhurst/xnufuzz) An XNU kernel fuzz tool
+- [**21**星][5y] [Py] [brenns10/pywall](https://github.com/brenns10/pywall) Python firewall.
+- [**21**星][4m] [Py] [botherder/snoopdroid](https://github.com/botherder/snoopdroid) Extract packages from an Android device
+- [**21**星][4d] [beerisgood/windows10_hardening](https://github.com/beerisgood/windows10_hardening) My Windows 10 x64 security hardening guide
+- [**21**星][6m] [Py] [beched/abi-decompiler](https://github.com/beched/abi-decompiler) Ethereum (EVM) smart contracts reverse engineering helper utility
+- [**21**星][9m] [Ruby] [audibleblink/doubletap](https://github.com/audibleblink/doubletap) Password spraying on sites that require 2+ page loads and dynamic nonces
+- [**21**星][5m] [JS] [assafmo/istorexit](https://github.com/assafmo/istorexit) Check if an IP is a Tor exit node
+- [**21**星][3y] [C++] [arpitn30/nipper-ng](https://github.com/arpitn30/nipper-ng) Automatically exported from code.google.com/p/nipper-ng
+- [**21**星][3y] [Visual Basic .NET] [appsecco/winmanipulate](https://github.com/appsecco/winmanipulate) A simple tool to manipulate window objects in Windows
+- [**21**星][6m] [PHP] [appsecco/sqlinjection-training-app](https://github.com/appsecco/sqlinjection-training-app) A simple PHP application to learn SQL Injection detection and exploitation techniques.
+- [**21**星][10d] [Shell] [apache-labor/labor](https://github.com/apache-labor/labor)
+- [**21**星][3y] [CSS] [aozhimin/ios-reverse-engineering-presentation](https://github.com/aozhimin/ios-reverse-engineering-presentation) iOS Reverse Engineering Presentation
+- [**21**星][3y] [aozhimin/ios-monitor-resources](https://github.com/aozhimin/ios-monitor-resources) 对各厂商的 iOS SDK 性能监控方案的整理和收集后的资源
+- [**21**星][10m] [Java] [ankokuty/hakoniwabadstore](https://github.com/ankokuty/hakoniwabadstore) 箱庭BadStore
+- [**21**星][2m] [Shell] [angela-d/autohosts](https://github.com/angela-d/autohosts) Automate hosts file updates on Linux and MacOS. Block Firefox telemetry, Google snooping and web trackers at the root.
+- [**21**星][4y] [C#] [alphadelta/png-mask](https://github.com/alphadelta/png-mask) PNG Steganography Software
+- [**21**星][2y] [Java] [alcarl/nfcproxy](https://github.com/alcarl/nfcproxy) 用两个安卓手机的nfc功能截取iso14443交互数据 fork by
+- [**21**星][2y] [C] [al-homedawy/injector](https://github.com/al-homedawy/injector) A Windows driver used to facilitate DLL injection
+- [**21**星][4y] [C#] [adamcaudill/curvelock](https://github.com/adamcaudill/curvelock) Experimental File & Message Encryption for Windows
+- [**21**星][3m] [acutronicrobotics/mara_threat_model](https://github.com/acutronicrobotics/mara_threat_model) Threat Model analysis for MARA modular robot
+- [**21**星][2m] [Py] [7dog7/masscan_to_nmap](https://github.com/7dog7/masscan_to_nmap) 基于masscan和nmap的快速端口扫描和指纹识别工具,优化版本(获取标题,页面长度,过滤防火墙)
+- [**21**星][3y] [55-aa/cve-2015-0057](https://github.com/55-aa/cve-2015-0057) 翻译文章,CVE-2015-0057漏洞在32位和64位系统上的利用。Exploiting the win32k!xxxEnableWndSBArrows use-after-free (CVE 2015-0057) bug on both 32-bit and 64-bit(Aaron Adams of NCC )
+- [**21**星][7y] [C] [0xroot/whitesnow](https://github.com/0xroot/whitesnow) An experimental rootkit for Android
+- [**21**星][1y] [Py] [0x09al/my-exploits](https://github.com/0x09al/my-exploits) My public exploit collection.
+- [**20**星][6d] [Py] [quark-engine/quark-engine](https://github.com/quark-engine/quark-engine)
+- [**20**星][2d] [Py] [beardog108/onionr](https://github.com/beardog108/onionr) Private Decentralized Communication Network
+- [**20**星][6m] [Go] [contextualist/proxlet](https://github.com/contextualist/proxlet) a POC, naïve implemetation of serverless reverse proxy for any website
+- [**20**星][30d] [Java] [naveenrudra/rttm](https://github.com/naveenrudra/rttm) Real Time Threat Monitoring Tool
+- [**20**星][2y] [HTML] [pwn20wndstuff/pwn20wndstuff.github.io](https://github.com/pwn20wndstuff/pwn20wndstuff.github.io)
+- [**20**星][1y] [Py] [tostapunk/pc-control-telegram-bot](https://github.com/tostapunk/pc-control-telegram-bot) Control your PC directly from Telegram!
+- [**20**星][1m] [scriptingxss/owasp-fstm](https://github.com/scriptingxss/owasp-fstm) The Firmware Security Testing Methodology (FSTM) is composed of nine stages tailored to enable security researchers, software developers, consultants, hobbyists, and Information Security professionals with conducting firmware security assessments.
+- [**20**星][4m] [C] [netik/dc27_badge](https://github.com/netik/dc27_badge) Defcon 27 "DaBomb!" badge.
+- [**20**星][11d] [Py] [natescarlet/gfwlist.acl](https://github.com/natescarlet/gfwlist.acl)
+- [**20**星][5m] [HTML] [0xkira/pwn-dash-docset](https://github.com/0xkira/pwn-dash-docset) latest x86_64 assembly language and pwntools dash docset
+- [**20**星][2m] [Java] [alpheratzteam/obfuscator](https://github.com/alpheratzteam/obfuscator) Java Obfuscator
+- [**20**星][2m] [Py] [mephi42/ida-kallsyms](https://github.com/mephi42/ida-kallsyms) (No Doc)
+- [**20**星][1m] [foxhex0ne/slides](https://github.com/foxhex0ne/slides) Will try to put here slides from now on when I give a talk
+- [**20**星][1y] [Py] [hyuunnn/ida_python_scripts](https://github.com/hyuunnn/ida_python_scripts) ida python scripts
+- [**20**星][11m] [Go] [nogoegst/onionize](https://github.com/nogoegst/onionize) create an onion site from a directory, file, zip or an HTTP(S) site
+- [**20**星][3m] [Java] [aress31/flarequench](https://github.com/aress31/flarequench) Burp Suite plugin that adds additional checks to the passive scanner to reveal the origin IP(s) of Cloudflare-protected web applications.
+- [**20**星][3y] [Py] [inndy/formatstring-exploit](https://github.com/inndy/formatstring-exploit) Dead simple format string exploit payload generator
+- [**20**星][1y] [Py] [sniperoj/attack-defense-platform](https://github.com/sniperoj/attack-defense-platform) A framework that help to create CTF Attack with Defense competition quickly
+- [**20**星][2d] [Java] [daimler/sechub](https://github.com/daimler/sechub) SecHub - one central and easy way to use different security tools with one API/Client
+- [**20**星][7m] [HTML] [casework/case](https://github.com/casework/CASE) Cyber-investigation Analysis Standard Expression (CASE) Ontology
+- [**20**星][3y] [ulexec/windowsmalwaresourcecode](https://github.com/ulexec/WindowsMalwareSourceCode) Collection of Source Code of Various Malware Targeting the Windows Platform
+- [**20**星][3y] [unexpectedby/automated-malware-analysis-list](https://github.com/unexpectedBy/Automated-Malware-Analysis-List) My personal Automated Malware Analysis Sandboxes and Services
+- [**20**星][2y] [C#] [boogie-org/symbooglix](https://github.com/boogie-org/symbooglix) Symbolic Execution Engine for Boogie
+- [**20**星][5y] [C++] [utsa-cyber/sceadan](https://github.com/UTSA-cyber/sceadan) Systematic Classification Engine for Advanced Data ANalysis
+- [**20**星][3y] [Lua] [takeshixx/nmap-scripts](https://github.com/takeshixx/nmap-scripts) A collection of Nmap NSE scripts.
+- [**20**星][3y] [C] [aoncyberlabs/mbedtls-fuzz](https://github.com/AonCyberLabs/mbedtls-fuzz)
+- [**20**星][3y] [Go] [thanasisk/go-ssh-cracker](https://github.com/thanasisk/go-ssh-cracker) A simple ssh private key password recovery tool written in Go
+- [**20**星][11m] [Py] [fsecurelabs/captcha_cracking](https://github.com/FSecureLABS/captcha_cracking) Helper scripts and tutorial for cracking text-based CAPTCHAs
+- [**20**星][8m] [aws-samples/aws-redshift-spectrum-poc](https://github.com/aws-samples/aws-redshift-spectrum-poc) Cloudformation and SQL scripts used to replicate a POC environment from the "Data Lake to Data Warehouse: Enhancing Customer 360 with Amazon Redshift Spectrum" post
+- [**20**星][5m] [Py] [zznop/binjago](https://github.com/zznop/binjago) Binary Ninja plugin for ROP gadget calculation
+- [**20**星][3y] [Py] [ztrix/idascript](https://github.com/ztrix/idascript) Full functional idascript with stdin/stdout handled
+- [**20**星][2y] [C#] [zoebear/radia](https://github.com/zoebear/radia) 创建一个用于可视化代码的交互式、沉浸式环境,辅助二进制文件逆向
+- [**20**星][2y] [ObjC] [zjjno/cornerstonehook](https://github.com/zjjno/cornerstonehook) Cornerstone破解
+- [**20**星][1y] [C] [zhuhuibeishadiao/drivermaper](https://github.com/zhuhuibeishadiao/drivermaper) map driver to memory
+- [**20**星][9m] [C++] [zhongyang219/simplenotepad](https://github.com/zhongyang219/simplenotepad) 这是一个可以代替Windows记事本的软件,除了包含记事本原有的功能外,还有编码格式转换、十六进制查看编辑、文件二进制比较、编码批量转换的功能。
+- [**20**星][1y] [Py] [zhl2008/ctf-framework](https://github.com/zhl2008/ctf-framework) Hence
+- [**20**星][3m] [C#] [zerokilo/pdbdumpwv](https://github.com/zerokilo/pdbdumpwv) PDB Dumping Tool
+- [**20**星][3y] [C++] [yujokang/epex](https://github.com/yujokang/epex) Tool for detecting error handling bugs
+- [**20**星][3y] [CSS] [youngyangyang04/nosqlinjectionattackdemo](https://github.com/youngyangyang04/nosqlinjectionattackdemo) NoSQLInjectionAttackDemo is website demo for test NoSQL Injection. There are two website demos in this project and all databases are mongoDB
+- [**20**星][1y] [Lua] [yoshifan/ram-watch-cheat-engine](https://github.com/yoshifan/ram-watch-cheat-engine) Lua script framework for RAM watch displays using Cheat Engine, with a focus on Dolphin emulator.
+- [**20**星][1y] [xiaoqx/pocs](https://github.com/xiaoqx/pocs) pocs of tested targets
+- [**20**星][3y] [CSS] [xeushack/fake-login-page](https://github.com/xeushack/fake-login-page) A fake login page for use in a phishing attack
+- [**20**星][8m] [x-f1v3/cve-2019-3396](https://github.com/x-f1v3/cve-2019-3396) Confluence Widget Connector path traversal (CVE-2019-3396)
+- [**20**星][21d] [watterott/candiy-shield](https://github.com/watterott/candiy-shield) CAN-Bus Shield for Arduino based on Microchip MCP2515 or MCP2517FD CAN Controller
+- [**20**星][6m] [PHP] [w181496/fuckfastcgi](https://github.com/w181496/fuckfastcgi) [Tool] Forge PHP FastCGI protocol to RCE with strict disable_functions
+- [**20**星][1y] [Py] [vortexau/mooscan](https://github.com/vortexau/mooscan) A scanner for Moodle LMS
+- [**20**星][3d] [Go] [virustotal/vt-go](https://github.com/virustotal/vt-go) The official Go client library for VirusTotal API
+- [**20**星][2y] [JS] [vagabondan/ric-nomp](https://github.com/vagabondan/ric-nomp) SEGWIT, Dash 12.1 generation transaction format support and many bugfixes from almost all forks at github were implemented here on 2017-10-04. You can create Issues but code contribution is much more preferable.
+- [**20**星][2y] [Py] [undefinedd/extract0r-](https://github.com/undefinedd/extract0r-)
+- [**20**星][1y] [C#] [ukncsc/mail-check](https://github.com/ukncsc/mail-check)
+- [**20**星][3y] [JS] [tunnelshade/pocuito](https://github.com/tunnelshade/pocuito) A tiny chrome extension to record and replay your web application proof-of-concepts.
+- [**20**星][10m] [Makefile] [tum-i22/munch](https://github.com/tum-i22/munch) Greybox fuzzer for optimizing function coverage and finding low-level vulnerabilities in C programs
+- [**20**星][3y] [PS] [trullj/sticky-keys-scanner](https://github.com/trullj/sticky-keys-scanner) A PowerShell function that scans for the existence of a Sticky Keys backdoor.
+- [**20**星][3y] [Java] [topolik/ois-dos](https://github.com/topolik/ois-dos) Java Deserialization
+- [**20**星][3y] [Py] [toolsprods/sniffvpn](https://github.com/toolsprods/sniffvpn) Traffic monitor for your VPN
+- [**20**星][5y] [C] [tongzeyu/hooksysenter](https://github.com/tongzeyu/hooksysenter) hook sysenter,重载内核,下硬件断点到debugport,防止debugport清零
+- [**20**星][1y] [Py] [thisissecurity/sinkhole](https://github.com/thisissecurity/sinkhole) Miscellanous scripts used for malware analysis
+- [**20**星][1m] [Go] [theredspy15/multi-go](https://github.com/theredspy15/multi-go) A multi-tool made in Go, and aimed at security experts to make life a little more convenient
+- [**20**星][8m] [C++] [terencechow/pwnedpasswords](https://github.com/terencechow/pwnedpasswords) PwnedPasswords as a Service
+- [**20**星][2y] [Py] [techbliss/x64dbg_script_editor](https://github.com/techbliss/x64dbg_script_editor) x64dbg Script editor v2.0
+- [**20**星][3m] [Rust] [tafia/hyper-proxy](https://github.com/tafia/hyper-proxy) A proxy connector for Hyper-based crates
+- [**20**星][5y] [C++] [sweetsoftware/simplebackdoor](https://github.com/sweetsoftware/simplebackdoor) Remote Windows shell
+- [**20**星][4y] [PHP] [stypr/ctf](https://github.com/stypr/ctf) Web-based CTF challenge writeups (2011~2015).
+- [**20**星][6y] [Ruby] [staaldraad/metasploit](https://github.com/staaldraad/metasploit) Metasploit things, modules, plugins, exploits
+- [**20**星][6m] [Py] [sslmate/ct-honeybee](https://github.com/sslmate/ct-honeybee) Lightweight program that pollinates STHs between Certificate Transparency logs and auditors
+- [**20**星][11m] [Py] [spacepatcher/firehol-ip-aggregator](https://github.com/spacepatcher/firehol-ip-aggregator) Application for keeping feeds from FireHOL
+- [**20**星][5y] [snifer/l4bsforandroid](https://github.com/snifer/l4bsforandroid) Repositorio de APK para Hacking y Seguridad
+- [**20**星][10m] [slowmist/awesome-blockchain-bug-bounty](https://github.com/slowmist/awesome-blockchain-bug-bounty) A comprehensive curated list of available Blockchain Bug Bounty Programs.
+- [**20**星][4m] [Java] [skocur/image-cipher](https://github.com/skocur/image-cipher) Steganography software for encrypting text into image that uses modified version of LSB (Least Significant Bit) algorithm.
+- [**20**星][4m] [JS] [skepticfx/subquest](https://github.com/skepticfx/subquest) Fast, Elegant subdomain scanner using nodejs
+- [**20**星][4y] [Py] [sinkmanu/cookiescanner](https://github.com/sinkmanu/cookiescanner) Tool for check the cookie flag in multiple sites
+- [**20**星][1y] [Erlang] [silentsignal/sslproxy](https://github.com/silentsignal/sslproxy) Generic HTTPS proxy for logging non-HTTP traffic
+- [**20**星][4y] [Py] [shwetankarora/gsm-packets-analysis-framework](https://github.com/shwetankarora/gsm-packets-analysis-framework)
+- [**20**星][8y] [Ruby] [sensepost/squeeza](https://github.com/sensepost/squeeza) SQL Injection without the pain of syringes.
+- [**20**星][3m] [Py] [sensepost/punch-q](https://github.com/sensepost/punch-q)
+- [**20**星][3y] [Py] [securitymb/burp-exceptions](https://github.com/securitymb/burp-exceptions) Simple trick to increase readability of exceptions raised by Burp extensions written in Python
+- [**20**星][1y] [Py] [securityinnovation/ofxpostern](https://github.com/securityinnovation/ofxpostern) Vulnerability scanner for OFX servers
+- [**20**星][9m] [C++] [secrary/findloop](https://github.com/secrary/findloop) 使用DyRIO查找执行次数过多的代码块
+- [**20**星][2y] [sampi/create-react-app-hack](https://github.com/sampi/create-react-app-hack) Hacking create-react-app to work with Preact & LESS without ejecting
+- [**20**星][7y] [MATLAB] [samhooke/steganography](https://github.com/samhooke/steganography) Image & video steganography in Matlab
+- [**20**星][3y] [Py] [saelo/33c3ctf-repl](https://github.com/saelo/33c3ctf-repl) Code and exploit for the "read-eval-pwn loop" challenge of 33C3 CTF
+- [**20**星][10m] [Java] [rub-nds/joseph](https://github.com/rub-nds/joseph)
+- [**20**星][1m] [Shell] [rtrouton/create_macos_recovery](https://github.com/rtrouton/create_macos_recovery) Tool for repairing the Recovery volume (APFS) or partition (HFS+) on Macs running macOS 10.13.x or later.
+- [**20**星][2y] [JS] [rohitjoshi9023/brutal-wordlist-generator](https://github.com/rohitjoshi9023/brutal-wordlist-generator) Brutal Wordlist Generator is a java based Application software used to generate the wordlist with best of UX interface
+- [**20**星][4m] [C++] [revspbird/hightlight](https://github.com/revspbird/hightlight) 反编译窗口中代码块和括号高亮
+- [**20**星][6m] [C#] [reclassnet/reclass.net-frostbiteplugin](https://github.com/reclassnet/reclass.net-frostbiteplugin) A ReClass.NET plugin which displays type infos of Frostbite classes and adds the WeakPtr node.
+- [**20**星][2y] [JS] [rd17/detor](https://github.com/rd17/detor)
+- [**20**星][2y] [PS] [rasta-mouse/invoke-loginprompt](https://github.com/rasta-mouse/invoke-loginprompt) Invokes a Windows Security Login Prompt and outputs the clear text password.
+- [**20**星][4m] [Py] [rapid7/metasploit-baseline-builder](https://github.com/rapid7/metasploit-baseline-builder) Created by Jeffrey Martin via the GitHub Connector
+- [**20**星][1y] [ranchoice/44con2018](https://github.com/ranchoice/44con2018) Slides of 44Con 2018
+- [**20**星][3y] [C++] [progmboy/vul_analyze_doc](https://github.com/progmboy/vul_analyze_doc)
+- [**20**星][2y] [Java] [pnfsoftware/pleaserop](https://github.com/pnfsoftware/pleaserop) Architecture-agnostic ROP gadget finder using JEB's IR
+- [**20**星][7m] [Rust] [plus-postech/soma](https://github.com/plus-postech/soma) Cross-platform CTF problem container manager
+- [**20**星][2m] [PHP] [pluginkollektiv/antivirus](https://github.com/pluginkollektiv/antivirus) Useful plugin that will scan your theme templates for malicious injections. Automatically. Every day. For more blog security.
+- [**20**星][2m] [Assembly] [pinkp4nther/shellcodes](https://github.com/pinkp4nther/shellcodes) I'll post my custom shellcode I make here!
+- [**20**星][2y] [C] [pinkp4nther/pinkit](https://github.com/pinkp4nther/pinkit) A quick LKM rootkit that executes a reverse TCP netcat shell with root privileges.
+- [**20**星][3y] [HTML] [pentestbox/pentest-box-tools](https://github.com/pentestbox/pentest-box-tools) PentestBox Tools Website
+- [**20**星][3y] [C++] [patois/ndsldr](https://github.com/patois/ndsldr) Nintendo DS ROM loader module for IDA Pro
+- [**20**星][2y] [C] [opsxcq/exploit-cve-2016-7434](https://github.com/opsxcq/exploit-cve-2016-7434) NTPD remote DOS exploit and vulnerable container
+- [**20**星][3y] [PS] [oldb00t/aggressorscripts](https://github.com/oldb00t/aggressorscripts) Cobaltstrike Aggressor Scripts
+- [**20**星][2y] [C#] [olanderofc/officebrute](https://github.com/olanderofc/officebrute) OfficeBrute - brute force protected word documents
+- [**20**星][1y] [Batchfile] [olafhartong/ta-sysmon-deploy](https://github.com/olafhartong/ta-sysmon-deploy) Deploy and maintain Symon through the Splunk Deployment Sever
+- [**20**星][1y] [c] [odzhan/propagate](https://github.com/odzhan/propagate) PROPagate code injection technique example
+- [**20**星][8m] [C#] [nyan-x-cat/lime-loader](https://github.com/nyan-x-cat/lime-loader) Download a .NET payload and run it on memory
+- [**20**星][2y] [Shell] [nullarray/sysenum](https://github.com/nullarray/sysenum) Simple Bash script to retrieve basic system information.
+- [**20**星][2y] [Py] [nullarray/pyparser-cve](https://github.com/nullarray/pyparser-cve) Multi source CVE/exploit parser.
+- [**20**星][26d] [C++] [nonlinear-chaos-order-etc/i2pchat](https://github.com/nonlinear-chaos-order-etc/i2pchat)
+- [**20**星][2y] [C++] [nkga/self-updater](https://github.com/nkga/self-updater) Framework for secure self-updating software, written in C++/Win32.
+- [**20**星][2y] [C] [nkga/cheat-driver](https://github.com/nkga/cheat-driver) Kernel mode driver for reading/writing process memory. C/Win32.
+- [**20**星][3y] [Py] [njsmith/machomachomangler](https://github.com/njsmith/machomachomangler) Tools for mangling Mach-O and PE binaries
+- [**20**星][6y] [Shell] [netspi/binrev](https://github.com/netspi/binrev)
+- [**20**星][2y] [C] [neargle/cve-2018-6574-poc](https://github.com/neargle/cve-2018-6574-poc) CVE-2018-6574 POC : golang 'go get' remote command execution during source code build
+- [**20**星][1y] [Py] [ne0nd0g/adpasswordhealth](https://github.com/ne0nd0g/adpasswordhealth) A tool to evaluate the password health of Active Directory accounts.
+- [**20**星][3y] [nd13/penetration-testing-and-hacking](https://github.com/nd13/penetration-testing-and-hacking) Collection of tips, tools and tutorials around infosec
+- [**20**星][3y] [Py] [ncatlin/lockwatcher](https://github.com/ncatlin/lockwatcher) Anti-forensic monitor program: watches for signs of tampering and purges keys/shuts everything down.
+- [**20**星][2y] [C] [nbulischeck/debugfs-backdoor](https://github.com/nbulischeck/debugfs-backdoor) PoC code using debugfs to store files in memory and execute them
+- [**20**星][1y] [Py] [n0tty/random-hacking-scripts](https://github.com/n0tty/random-hacking-scripts) A collection of scripts made duing my personal research
+- [**20**星][24d] [C++] [mullvad/libwfp](https://github.com/mullvad/libwfp) C++ library for interacting with the Windows Filtering Platform (WFP)
+- [**20**星][7m] [C] [mtth-bfft/ntsec](https://github.com/mtth-bfft/ntsec) Standalone tool to explore the security model of Windows and its NT kernel. Use it to introspect privilege assignments and access right assignments, enumerate attack surfaces from the point of view of a sandboxed process, etc.
+- [**20**星][2y] [C++] [mrexodia/ceautoattach](https://github.com/mrexodia/ceautoattach) Tool to automatically make Cheat Engine attach to a process via the command line.
+- [**20**星][7y] [JS] [mozilla/mortar-layouts](https://github.com/mozilla/mortar-layouts) A small library for constructing app UIs with backbone.js.
+- [**20**星][2y] [XSLT] [mozilla-services/shavar-plugin-blocklist](https://github.com/mozilla-services/shavar-plugin-blocklist)
+- [**20**星][3y] [PS] [mortenschenk/babuska-dolls](https://github.com/mortenschenk/babuska-dolls)
+- [**20**星][7d] [Py] [mntn0x/poc](https://github.com/mntn0x/poc) 一些漏洞检测/利用脚本
+- [**20**星][5y] [Py] [mk-fg/nflog-zmq-pcap-pipe](https://github.com/mk-fg/nflog-zmq-pcap-pipe) Tool to collect nflog and pipe it to a pcap stream/file over network (0mq) for real-time (or close to) analysis
+- [**20**星][9m] [misp/misp-compliance](https://github.com/misp/misp-compliance) Legal, procedural and policies document templates for operating MISP and information sharing communities
+- [**20**星][5y] [Py] [milo2012/pentest_automation](https://github.com/milo2012/pentest_automation)
+- [**20**星][9d] [HTML] [mfthomps/labtainers](https://github.com/mfthomps/labtainers) Labtainers: A Docker-based cyber lab framework
+- [**20**星][4y] [Shell] [merces/scripts](https://github.com/merces/scripts) cuz life is scriptable...
+- [**20**星][2y] [ActionScript] [mdsecactivebreach/cve-2018-4878](https://github.com/mdsecactivebreach/cve-2018-4878)
+- [**20**星][2y] [PS] [mdsecactivebreach/angrypuppy](https://github.com/mdsecactivebreach/angrypuppy) Bloodhound Attack Path Automation in CobaltStrike
+- [**20**星][2y] [mayter/sec-charts](https://github.com/mayter/sec-charts) 更新了更多的思维导图。
+- [**20**星][1y] [Ruby] [martinvigo/ransombile](https://github.com/martinvigo/ransombile) Ransombile is a tool that can be used in different scenarios to compromise someone’s digital life when having physical access to a locked mobile device
+- [**20**星][7m] [Py] [manhnho/brutality](https://github.com/manhnho/brutality) A fuzzer for any GET entries
+- [**20**星][9m] [Py] [makinacorpus/spynner](https://github.com/makinacorpus/spynner) Programmatic web browsing module with AJAX support for Python
+- [**20**星][7m] [C#] [lowleveldesign/diagnostics-tools](https://github.com/lowleveldesign/diagnostics-tools)
+- [**20**星][3m] [C] [lnslbrty/potd](https://github.com/lnslbrty/potd) A high scalable low to medium interactive SSH/TCP honeypot using Linux Namespaces, capabilities, seccomp, cgroups designed for OpenWrt and IoT devices.
+- [**20**星][2y] [PS] [linuz/powerhungry](https://github.com/linuz/powerhungry) Experimental PowerShell tools for Penetration Testing / Red Teaming
+- [**20**星][2y] [JS] [lersh/potatostream](https://github.com/lersh/potatostream) Shadowsocks like Proxy,Written by nodejs
+- [**20**星][1y] [Shell] [kyonli/asuswrt-v2ray](https://github.com/kyonli/asuswrt-v2ray) Transparent proxy based on V2Ray
+- [**20**星][2y] [Go] [kudelskisecurity/go-manger-attack](https://github.com/kudelskisecurity/go-manger-attack) This is a toy implementation in Go of Manger's chosen-ciphertext attack on RSA-OAEP
+- [**20**星][2y] [Py] [kudelskisecurity/cryptochallenge17](https://github.com/kudelskisecurity/cryptochallenge17) Kudelski Security's 2017 crypto challenge
+- [**20**星][3y] [Ruby] [kingsabri/burp_suite_extension_ruby](https://github.com/kingsabri/burp_suite_extension_ruby) BurpSuite Extension Ruby Template to speed up building a Burp Extension using Ruby
+- [**20**星][7y] [Py] [kevthehermit/yaramail](https://github.com/kevthehermit/yaramail) Yara Scanner For IMAP Feeds and saved Streams
+- [**20**星][6m] [TeX] [kevateam/ctf-attack-defense](https://github.com/kevateam/ctf-attack-defense) Attack-defense platform
+- [**20**星][2y] [Py] [kelwin/peda](https://github.com/kelwin/peda) PEDA - Python Exploit Development Assistance for GDB
+- [**20**星][5y] [kdpryor/linuxvolprofiles](https://github.com/kdpryor/linuxvolprofiles) Volatility Linux Profiles
+- [**20**星][3m] [Ruby] [karneades/defensomania](https://github.com/karneades/defensomania) Defensomania is a card game for security monitoring and incident response teams.
+- [**20**星][9y] [Diff] [jrmuizel/kemufuzzer](https://github.com/jrmuizel/kemufuzzer) Automatically exported from code.google.com/p/kemufuzzer
+- [**20**星][3m] [C++] [jovibor/libpe](https://github.com/jovibor/libpe) Library for tinkering with PE/PE+ binaries.
+- [**20**星][3y] [C] [joswr1ght/asleap](https://github.com/joswr1ght/asleap) Asleap - Cisco LEAP and Generic MS-CHAPv2 Dictionary Attack
+- [**20**星][9m] [Py] [jordisk/thehive2sigma](https://github.com/jordisk/thehive2sigma) Python script to automatically create sigma rules from The hive observables
+- [**20**星][5y] [JS] [jonstewart/sifter](https://github.com/jonstewart/sifter) Indexed search and clustering tool for digital forensics
+- [**20**星][4y] [C] [jonathanseals/ios-kexec-utils](https://github.com/jonathanseals/ios-kexec-utils) I'm taking a break, I swear
+- [**20**星][3y] [johnnydep/cobaltstrike](https://github.com/johnnydep/cobaltstrike) cobalt strike stuff I have gathered from around github
+- [**20**星][6m] [C++] [jnastarot/shibari](https://github.com/jnastarot/shibari) Library for linking multiple PE\PE + files to one
+- [**20**星][1y] [Py] [jimmyastle/atomic-parser](https://github.com/jimmyastle/atomic-parser) Python parser for Red Canary's Atomic Red Team Yamls
+- [**20**星][2y] [Py] [jidar/smith](https://github.com/jidar/smith) A client/server style agent meant for testing connectivity to and from a machine on a network.
+- [**20**星][2y] [Py] [jiayunhan/opanalyzer](https://github.com/jiayunhan/opanalyzer) The unofficial release of the tool we used in the EuroS&P 2017 paper: Open Doors for Bob and Mallory: Open Port Usage in Android Apps and Security Implications.
+- [**20**星][7y] [Py] [jeffbryner/kinectasploitv2](https://github.com/jeffbryner/kinectasploitv2) kinectasploitv2
+- [**20**星][2y] [C] [izuolan/pshell](https://github.com/izuolan/pshell) ICMP/IP tunnel manager for Linux.
+- [**20**星][1y] [ivan1ee/regasm_installutil_applockerbypass](https://github.com/ivan1ee/regasm_installutil_applockerbypass) AppLocker Bypass With Regasm/InstallUtil
+- [**20**星][1y] [Java] [it-gorillaz/lnk2pwn](https://github.com/it-gorillaz/lnk2pwn) Malicious Shortcut(.lnk) Generator
+- [**20**星][9m] [Makefile] [icing/h2fuzz](https://github.com/icing/h2fuzz) everyone can fuzz h2
+- [**20**星][4y] [C] [iagox86/dnsmasq-fuzzing](https://github.com/iagox86/dnsmasq-fuzzing)
+- [**20**星][8y] [hybrisdisaster/asphashdos](https://github.com/hybrisdisaster/asphashdos) ASP.NET HashDoS PoC Payload
+- [**20**星][1y] [Py] [hyuunnn/ida_python_scripts](https://github.com/hyuunnn/ida_python_scripts) IDAPython脚本
+ - [IDA_comment](https://github.com/hyuunnn/ida_python_scripts/blob/master/IDA_comment.py)
+ - [ida_function_rename](https://github.com/hyuunnn/ida_python_scripts/blob/master/ida_function_rename.py)
+ - [variable_finder](https://github.com/hyuunnn/ida_python_scripts/blob/master/variable_finder.py)
+ - [assembler_disassembler](https://github.com/hyuunnn/ida_python_scripts/blob/master/assembler_disassembler.py)
+ - [api_visualization](https://github.com/hyuunnn/ida_python_scripts/tree/master/api_visualization)
+ - [Decoder](https://github.com/hyuunnn/ida_python_scripts/tree/master/Decoder) Multiple malware decoders
+- [**20**星][2y] [Py] [hrushikeshk/enum.py](https://github.com/hrushikeshk/enum.py) A tool to enumerate network services
+- [**20**星][2y] [Py] [hexabin/apkstat](https://github.com/hexabin/apkstat) Automated Information Retrieval From APKs For Initial Analysis
+- [**20**星][4m] [Ruby] [heroku/omniauth-heroku](https://github.com/heroku/omniauth-heroku) OmniAuth strategy for Heroku
+- [**20**星][5y] [AutoIt] [habohitron/habohitron](https://github.com/habohitron/habohitron)
+- [**20**星][5m] [Py] [guedou/flashre](https://github.com/guedou/flashre) tools to reverse the Toshiba FlashAir SD cards
+- [**20**星][8m] [graylog2/graylog-guide-snort](https://github.com/graylog2/graylog-guide-snort) How to send structured Snort IDS alert logs into Graylog
+- [**20**星][2y] [C] [gravity-postquantum/prune-horst](https://github.com/gravity-postquantum/prune-horst) Signature scheme submitted to NIST's Post-Quantum Cryptography Project
+- [**20**星][2y] [Jupyter Notebook] [grananqvist/machine-learning-web-application-firewall-and-dataset](https://github.com/grananqvist/machine-learning-web-application-firewall-and-dataset)
+- [**20**星][1y] [Py] [gosecure/gophish-cli](https://github.com/gosecure/gophish-cli) Gophish Python cli to perform huge phishing campaigns
+- [**20**星][5m] [Py] [gilks/enumerid](https://github.com/gilks/enumerid) Enumerate RIDs using pure Python
+- [**20**星][9m] [Rust] [gamozolabs/slime_tree](https://github.com/gamozolabs/slime_tree) Worst Android kernel fuzzer
+- [**20**星][2y] [C++] [ez8-co/ezpp](https://github.com/ez8-co/ezpp)
+- [**20**星][16d] [extremecoders-re/re-list](https://github.com/extremecoders-re/re-list) A list of open source reverse engineering tools with a focus on binary analysis
+- [**20**星][3y] [C] [exploit-install/thefatrat](https://github.com/exploit-install/thefatrat) An easy tool to generate backdoor with msfvenom (a part from metasploit framework). This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software protection
+- [**20**星][2y] [Py] [euniceylee/waves](https://github.com/euniceylee/waves) raspberry pi project that visualizes sound waves
+- [**20**星][2y] [Py] [erpscanteam/cve-2018-2636](https://github.com/erpscanteam/cve-2018-2636) ERPScan Public POC for CVE-2018-2636
+- [**20**星][11m] [WebAssembly] [eosessentials/eos-proxy-token](https://github.com/eosessentials/eos-proxy-token) Proxy token to allow mitigating EOSIO Ram exploit
+- [**20**星][14d] [Ruby] [envato/unwrappr](https://github.com/envato/unwrappr)
+- [**20**星][9m] [Py] [enigmatos/fuzzlon](https://github.com/enigmatos/fuzzlon) 802.15.4 Fuzzer
+- [**20**星][4m] [C] [en14c/erebus](https://github.com/en14c/erebus) Poc for ELF64 runtime infection via GOT poisoning technique by elfmaster
+- [**20**星][2y] [Py] [embedi/dji-ws-tools](https://github.com/embedi/dji-ws-tools) DJI Assistant 2 web socket server exploitation tools
+- [**20**星][1y] [Py] [ekultek/strutter](https://github.com/ekultek/strutter) Proof of Concept for CVE-2018-11776
+- [**20**星][1m] [edwardqiu/awesome-infosec](https://github.com/edwardqiu/awesome-infosec) A curated list of awesome infosec blog posts, courses, books and more!
+- [**20**星][3y] [TeX] [edelahozuah/awesome-tls-security](https://github.com/edelahozuah/awesome-tls-security) A collection of (not-so, yet) awesome resources related to TLS, PKI and related stuff
+- [**20**星][10m] [eddietcc/cvenotes](https://github.com/eddietcc/cvenotes)
+- [**20**星][1y] [C] [downwithup/cve-2018-16712](https://github.com/downwithup/cve-2018-16712) PoC Code for CVE-2018-16712 (exploit by MmMapIoSpace)
+- [**20**星][3y] [C++] [dinamsky/malware-botnets](https://github.com/dinamsky/malware-botnets)
+- [**20**星][5y] [Py] [digitalbond/ibal](https://github.com/digitalbond/ibal) 辅助Bootrom分析
+- [**20**星][9m] [Java] [delicioushorse/writeups](https://github.com/delicioushorse/writeups)
+- [**20**星][2y] [deepwn/dn2.io](https://github.com/deepwn/dn2.io) [ Domain Name to I/O ] Development DNS & Security Data Transportation & Pentesting with SCA and Steganography.
+- [**20**星][5m] [Py] [dearbytes/opensource-endpoint-monitoring](https://github.com/dearbytes/opensource-endpoint-monitoring) This repository contains all the config files and scripts used for our Open Source Endpoint monitoring project.
+- [**20**星][7y] [Ruby] [darkoperator/nessus-bridge-for-metasploit](https://github.com/darkoperator/nessus-bridge-for-metasploit) nessus plugin for metasploit to connect to a nessus server
+- [**20**星][3y] [Py] [danilabs/rexploit](https://github.com/danilabs/rexploit) RExploit (Router Exploitation) is a tool that search exploits for any router SOHO. It is written on Python and QT.
+- [**20**星][1y] [Py] [danielhenrymantilla/shellcode-factory](https://github.com/danielhenrymantilla/shellcode-factory) Tool to create and test shellcodes from custom assembly sources (with some encoding options)
+- [**20**星][2y] [PS] [danielbohannon/devsec-defense](https://github.com/danielbohannon/devsec-defense) Accompanying PowerShell Modules for DevSec Defense Presentation
+- [**20**星][3y] [C#] [damonmohammadbagher/fakefilemaker](https://github.com/damonmohammadbagher/fakefilemaker) Social Engineering: Simple way to make a fake file for Backdoors
+- [**20**星][6y] [Py] [d4rkcat/stackflow](https://github.com/d4rkcat/stackflow) Universal stack-based buffer overfow exploitation tool
+- [**20**星][1y] [C++] [d00rt/hijacked_lokibot_version](https://github.com/d00rt/hijacked_lokibot_version)
+- [**20**星][2y] [Py] [czardoz/hornet](https://github.com/czardoz/hornet) SSH Multipot
+- [**20**星][10m] [HTML] [cymmetria/honeycomb_plugins](https://github.com/cymmetria/honeycomb_plugins) The plugin repository for Honeycomb, the honeypot framework by Cymmetria
+- [**20**星][3y] [Py] [cyberclues/rtf_exploit_extractor](https://github.com/cyberclues/rtf_exploit_extractor) Script to extract malicious payload and decoy document from CVE-2015-1641 exploit documents
+- [**20**星][3y] [JS] [ctf-thanos/ctf-writeups](https://github.com/ctf-thanos/ctf-writeups) A writeup summary for CTF problems.
+- [**20**星][7m] [Java] [cryptomator/siv-mode](https://github.com/cryptomator/siv-mode) RFC 5297 SIV mode of operation in Java
+- [**20**星][11m] [HTML] [cryptolok/epmg](https://github.com/cryptolok/epmg) EPMG:跨平台、最安全、“不存储密码(storageless)”的密码管理器
+- [**20**星][3d] [Java] [cronn-de/ssh-proxy](https://github.com/cronn-de/ssh-proxy) Pure Java implementation for SSH port tunneling that understands ProxyJump and ProxyCommand
+- [**20**星][6m] [Shell] [corb3nik/pwnbox](https://github.com/corb3nik/pwnbox) A VM for RE and Pwn
+- [**20**星][2y] [JS] [codedotjs/twifo-cli](https://github.com/codedotjs/twifo-cli)
+- [**20**星][16d] [HTML] [cloudfoundry-incubator/haproxy-boshrelease](https://github.com/cloudfoundry-incubator/haproxy-boshrelease) A BOSH release for haproxy (based on cf-release's haproxy job)
+- [**20**星][6m] [Batchfile] [cldrn/insecureprogrammingdb](https://github.com/cldrn/insecureprogrammingdb) Insecure programming functions database
+- [**20**星][2y] [Py] [chrisjd20/cve-2017-9805.py](https://github.com/chrisjd20/cve-2017-9805.py) Better Exploit Code For CVE 2017 9805 apache struts
+- [**20**星][1y] [Py] [cbrnrd/netsploit](https://github.com/cbrnrd/netsploit)
+- [**20**星][5y] [Py] [catalyst256/watcher](https://github.com/catalyst256/watcher) Maltego with a twist of wireless
+- [**20**星][3y] [Go] [c1982/ripego](https://github.com/c1982/ripego) IP Whois Golang Package
+- [**20**星][2m] [Py] [brianlam38/sec-cheatsheets](https://github.com/brianlam38/sec-cheatsheets) Cheatsheets on security vulnerabilities and exploits.
+- [**20**星][3y] [C] [bnagy/osx-afl-llvm](https://github.com/bnagy/osx-afl-llvm) Barely working LLVM mode for AFL on OSX
+- [**20**星][11m] [C] [blacchat/rkorova](https://github.com/blacchat/rkorova) ld_preload userland rootkit
+- [**20**星][2y] [C] [bisoon/ps4-api-server](https://github.com/bisoon/ps4-api-server) PS4API server to handle client request for read/write to game memory
+- [**20**星][1m] [Go] [binject/shellcode](https://github.com/binject/shellcode) Shellcode library as a Go package
+- [**20**星][5m] [C++] [arsunt/tr2main](https://github.com/arsunt/tr2main) Tomb Raider II Injector Dynamic Library
+- [**20**星][3y] [Py] [arinkverma/google-foobar](https://github.com/arinkverma/google-foobar) Read about google foobar at HackerNews
+- [**20**星][20d] [Smali] [aress31/sci](https://github.com/aress31/sci) Framework designed to automate the process of assembly code injection (trojanising) within Android applications.
+- [**20**星][2y] [Py] [arbazkiraak/hackbot](https://github.com/arbazkiraak/hackbot) Telegram Bot (Initial Development)
+- [**20**星][3y] [C++] [apriorit/antirootkit-anti-splicer](https://github.com/apriorit/antirootkit-anti-splicer) The project is a demo solution for one of the anti-rootkit techniques aimed on overcoming splicers
+- [**20**星][6y] [C++] [antirootkit/bdarkit](https://github.com/antirootkit/bdarkit) just an lite AntiRootkit for interesting
+- [**20**星][5y] [C] [android-rooting-tools/libmsm_vfe_read_exploit](https://github.com/android-rooting-tools/libmsm_vfe_read_exploit) CVE-2014-4321 exploit
+- [**20**星][3y] [C++] [andrewgaspar/km-stl](https://github.com/andrewgaspar/km-stl) A drop-in replacement for the C++ STL for kernel mode Windows drivers. The goal is to have implementations for things like the standard algorithms that don't require memory allocations or exceptions, and for implementations of type traits and other compile-time related headers. Full implementation of the STL is a non-goal.
+- [**20**星][7y] [PHP] [amitnaik/php-backdoor](https://github.com/amitnaik/php-backdoor) This is php backdoor hack to access directory, access to mysql, access to execute shell command
+- [**20**星][1m] [JS] [alcideio/pipeline](https://github.com/alcideio/pipeline) Alcide Kubernetes Advisor ... Cluster Hygiene & Security Scanner - Pipeline Integration
+- [**20**星][3y] [C] [a232319779/phantom-3-standard](https://github.com/a232319779/phantom-3-standard) Used hackrf one to sniffer nrf24l0 and so on wireless packet.Application in PHANTOM 3 STANDARD RC signal sniffer.
+- [**20**星][3y] [Py] [73696e65/ctf-notes](https://github.com/73696e65/ctf-notes)
+- [**20**星][2y] [Py] [649/netscraped-exploit](https://github.com/649/netscraped-exploit) Framework for obtaining all the credentials stored in vulnerable Netwave IP cameras. Can be used to break into IP cameras, use for research only.
+- [**20**星][2y] [HTML] [649/chrome-sandbox-exploit](https://github.com/649/chrome-sandbox-exploit) [Patched] Sandbox escape Chrome exploit. Allows the execution of local binaries, read/write functions and exfiltration of Chrome OAuth tokens to remote server. More info:
+- [**20**星][4y] [Py] [0x90/wifuzz](https://github.com/0x90/wifuzz) Automatically exported from code.google.com/p/wifuzz
+- [**20**星][3y] [Go] [0x4445565a/portanoia](https://github.com/0x4445565a/portanoia) A tool that sets a honeypot port and runs a command against every IP that connects to it.
+- [**20**星][7d] [Py] [0x25/useful](https://github.com/0x25/useful) useful pentest note
\ No newline at end of file
diff --git a/history/sec_tools_all_20191212140607_full_en.md b/history/sec_tools_all_20191212140607_full_en.md
new file mode 100644
index 0000000..2e8e370
--- /dev/null
+++ b/history/sec_tools_all_20191212140607_full_en.md
@@ -0,0 +1,18046 @@
+# PS
+- [中文版本](https://github.com/alphaSeclab/sec-tool-list/blob/master/Readme.md)
+- Because Github can not show all lines, this page only show the first 1000 tools sorted by star count. [Read Full Version Here](https://github.com/alphaSeclab/sec-tool-list/blob/master/Readme_full_en.md)
+- My Other Repo:
+ - [Reverse Engineering Resources](https://github.com/alphaSeclab/awesome-ida)
+ - [Cyber Security Resources](https://github.com/alphaSeclab/awesome-cyber-security)
+ - [Malware Analysis Reports](https://github.com/alphaSeclab/malware-analysis-reports)
+ - [Vul Analysis Reports](https://github.com/alphaSeclab/vul-analysis)
+
+# Tool List
+- [**45523**Star][11d] [C#] [shadowsocks/shadowsocks-windows](https://github.com/shadowsocks/shadowsocks-windows) If you want to keep a secret, you must also hide it from yourself.
+- [**34554**Star][16d] [C++] [x64dbg/x64dbg](https://github.com/x64dbg/x64dbg) An open-source x64/x32 debugger for windows.
+- [**33926**Star][10d] [Py] [minimaxir/big-list-of-naughty-strings](https://github.com/minimaxir/big-list-of-naughty-strings) The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.
+- [**32844**Star][2m] [hack-with-github/awesome-hacking](https://github.com/hack-with-github/awesome-hacking) A collection of various awesome lists for hackers, pentesters and security researchers
+- [**32022**Star][4y] [Py] [shadowsocks/shadowsocks](https://github.com/shadowsocks/shadowsocks)
+- [**30689**Star][14d] [Go] [fatedier/frp](https://github.com/fatedier/frp) A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.
+- [**27836**Star][2d] [Kotlin] [shadowsocks/shadowsocks-android](https://github.com/shadowsocks/shadowsocks-android) A shadowsocks client for Android
+- [**25977**Star][2d] [Py] [certbot/certbot](https://github.com/certbot/certbot) Certbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any other CA that uses the ACME protocol.
+- [**25643**Star][28d] [Swift] [shadowsocks/shadowsocksx-ng](https://github.com/shadowsocks/shadowsocksx-ng) Next Generation of ShadowsocksX
+- [**25330**Star][3d] [Go] [v2ray/v2ray-core](https://github.com/v2ray/v2ray-core) A platform for building proxies to bypass network restrictions.
+- [**24826**Star][2d] [xitu/gold-miner](https://github.com/xitu/gold-miner)
+- [**24727**Star][5d] [trimstray/the-book-of-secret-knowledge](https://github.com/trimstray/the-book-of-secret-knowledge) A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.
+- [**22556**Star][14d] [Shell] [mathiasbynens/dotfiles](https://github.com/mathiasbynens/dotfiles)
+- [**21874**Star][9d] [PHP] [danielmiessler/seclists](https://github.com/danielmiessler/seclists) SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
+- [**21778**Star][12d] [Go] [filosottile/mkcert](https://github.com/filosottile/mkcert) A simple zero-config tool to make locally trusted development certificates with any names you'd like.
+- [**20680**Star][5d] [Java] [skylot/jadx](https://github.com/skylot/jadx) Dex to Java decompiler
+- [**20159**Star][5d] [Shell] [streisandeffect/streisand](https://github.com/StreisandEffect/streisand) Streisand sets up a new server running your choice of WireGuard, OpenConnect, OpenSSH, OpenVPN, Shadowsocks, sslh, Stunnel, or a Tor bridge. It also generates custom instructions for all of these services. At the end of the run you are given an HTML file with instructions that can be shared with friends, family members, and fellow activists.
+- [**19692**Star][2m] [Jupyter Notebook] [camdavidsonpilon/probabilistic-programming-and-bayesian-methods-for-hackers](https://github.com/camdavidsonpilon/probabilistic-programming-and-bayesian-methods-for-hackers) aka "Bayesian Methods for Hackers": An introduction to Bayesian methods + probabilistic programming with a computation/understanding-first, mathematics-second point of view. All in pure Python ;)
+- [**19212**Star][1y] [alvin9999/new-pac](https://github.com/alvin9999/new-pac) 科学/自由上网,免费ss/ssr/v2ray/goflyway账号,搭建教程
+- [**19076**Star][2d] [Ruby] [rapid7/metasploit-framework](https://github.com/rapid7/metasploit-framework) Metasploit Framework
+- [**18676**Star][3y] [fallibleinc/security-guide-for-developers](https://github.com/fallibleinc/security-guide-for-developers) Security Guide for Developers (实用性开发人员安全须知)
+- [**18476**Star][2d] [Java] [nationalsecurityagency/ghidra](https://github.com/nationalsecurityagency/ghidra) Ghidra is a software reverse engineering (SRE) framework
+- [**18390**Star][3d] [Java] [alibaba/arthas](https://github.com/alibaba/arthas) Alibaba Java Diagnostic Tool Arthas
+- [**17641**Star][4y] [Go] [inconshreveable/ngrok](https://github.com/inconshreveable/ngrok) Introspected tunnels to localhost
+- [**17069**Star][6d] [Py] [mitmproxy/mitmproxy](https://github.com/mitmproxy/mitmproxy) An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
+- [**16769**Star][2d] [C#] [powershell/powershell](https://github.com/powershell/powershell) PowerShell for every system!
+- [**15824**Star][2d] [Py] [sqlmapproject/sqlmap](https://github.com/sqlmapproject/sqlmap) Automatic SQL injection and database takeover tool
+- [**15731**Star][9m] [micropoor/micro8](https://github.com/micropoor/micro8) Gitbook
+- [**15718**Star][3d] [C] [curl/curl](https://github.com/curl/curl) A command line tool and library for transferring data with URL syntax, supporting HTTP, HTTPS, FTP, FTPS, GOPHER, TFTP, SCP, SFTP, SMB, TELNET, DICT, LDAP, LDAPS, FILE, IMAP, SMTP, POP3, RTSP and RTMP. libcurl offers a myriad of powerful features
+- [**15363**Star][21d] [Py] [drduh/macos-security-and-privacy-guide](https://github.com/drduh/macOS-Security-and-Privacy-Guide) Guide to securing and improving privacy on macOS
+- [**14744**Star][1m] [gfwlist/gfwlist](https://github.com/gfwlist/gfwlist) gfwlist
+- [**14518**Star][7d] [Java] [tencent/tinker](https://github.com/tencent/tinker) Tinker is a hot-fix solution library for Android, it supports dex, library and resources update without reinstall apk.
+- [**13736**Star][9m] [JS] [bannedbook/fanqiang](https://github.com/bannedbook/fanqiang) 翻墙-科学上网
+- [**13548**Star][28d] [Py] [corentinj/real-time-voice-cloning](https://github.com/corentinj/real-time-voice-cloning) Clone a voice in 5 seconds to generate arbitrary speech in real-time
+- [**13241**Star][19d] [Go] [jesseduffield/lazydocker](https://github.com/jesseduffield/lazydocker) The lazier way to manage everything docker
+- [**12966**Star][12d] [Py] [cool-rr/pysnooper](https://github.com/cool-rr/pysnooper) Never use print for debugging again
+- [**12742**Star][3d] [Vue] [liyasthomas/postwoman](https://github.com/liyasthomas/postwoman)
+- [**12693**Star][8d] [C] [shadowsocks/shadowsocks-libev](https://github.com/shadowsocks/shadowsocks-libev) libev port of shadowsocks
+- [**12544**Star][9d] [C#] [0xd4d/dnspy](https://github.com/0xd4d/dnspy) .NET debugger and assembly editor
+- [**12325**Star][2m] [Ruby] [diaspora/diaspora](https://github.com/diaspora/diaspora) A privacy-aware, distributed, open source social network.
+- [**12241**Star][5d] [Java] [signalapp/signal-android](https://github.com/signalapp/Signal-Android) A private messenger for Android.
+- [**11977**Star][1m] [Go] [buger/goreplay](https://github.com/buger/goreplay) capturing and replaying live HTTP traffic into a test environment in order to continuously test your system with real data. It can be used to increase confidence in code deployments, configuration changes and infrastructure changes.
+- [**11890**Star][6d] [C] [openssl/openssl](https://github.com/openssl/openssl) TLS/SSL and crypto library
+- [**11530**Star][2d] [C] [radareorg/radare2](https://github.com/radareorg/radare2) unix-like reverse engineering framework and commandline tools
+- [**11418**Star][3m] [C] [robertdavidgraham/masscan](https://github.com/robertdavidgraham/masscan) TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.
+- [**11404**Star][2d] [getlantern/download](https://github.com/getlantern/download) Lantern官方版本下载 蓝灯 翻墙 科学上网 外网 加速器 梯子 路由
+- [**11342**Star][1m] [facert/awesome-spider](https://github.com/facert/awesome-spider) 爬虫集合
+- [**11278**Star][2d] [Java] [oracle/graal](https://github.com/oracle/graal) Run Programs Faster Anywhere
+- [**11200**Star][5d] [Py] [swisskyrepo/payloadsallthethings](https://github.com/swisskyrepo/payloadsallthethings) A list of useful payloads and bypass for Web Application Security and Pentest/CTF
+- [**11143**Star][2m] [Jupyter Notebook] [selfteaching/the-craft-of-selfteaching](https://github.com/selfteaching/the-craft-of-selfteaching) One has no future if one couldn't teach themself.
+- [**11110**Star][5d] [Py] [owasp/cheatsheetseries](https://github.com/owasp/cheatsheetseries) The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
+- [**11016**Star][2y] [ObjC] [bang590/jspatch](https://github.com/bang590/jspatch) JSPatch bridge Objective-C and Javascript using the Objective-C runtime. You can call any Objective-C class and method in JavaScript by just including a small engine. JSPatch is generally used to hotfix iOS App.
+- [**10925**Star][2d] [ObjC] [flipboard/flex](https://github.com/flipboard/flex) An in-app debugging and exploration tool for iOS
+- [**10907**Star][2m] [CSS] [hacker0x01/hacker101](https://github.com/hacker0x01/hacker101) Hacker101
+- [**10830**Star][15d] [enaqx/awesome-pentest](https://github.com/enaqx/awesome-pentest) A collection of awesome penetration testing resources, tools and other shiny things
+- [**10780**Star][2y] [CoffeeScript] [dropbox/zxcvbn](https://github.com/dropbox/zxcvbn) Low-Budget Password Strength Estimation
+- [**10757**Star][19d] [Java] [konloch/bytecode-viewer](https://github.com/konloch/bytecode-viewer) A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)
+- [**10318**Star][5d] [ruanyf/weekly](https://github.com/ruanyf/weekly) 科技爱好者周刊,每周五发布
+- [**10226**Star][3d] [Go] [goharbor/harbor](https://github.com/goharbor/harbor) An open source trusted cloud native registry project that stores, signs, and scans content.
+- [**9830**Star][8m] [imthenachoman/how-to-secure-a-linux-server](https://github.com/imthenachoman/how-to-secure-a-linux-server) An evolving how-to guide for securing a Linux server.
+- [**9613**Star][4d] [Py] [sherlock-project/sherlock](https://github.com/sherlock-project/sherlock) Find Usernames Across Social Networks
+- [**9389**Star][3d] [Go] [cnlh/nps](https://github.com/cnlh/nps) 一款轻量级、功能强大的内网穿透代理服务器。支持tcp、udp流量转发,支持内网http代理、内网socks5代理,同时支持snappy压缩、站点保护、加密传输、多路复用、header修改等。支持web图形化管理,集成多用户模式。
+- [**9358**Star][6d] [Ruby] [postalhq/postal](https://github.com/postalhq/postal) complete and fully featured mail server for use by websites & web servers
+- [**9266**Star][3m] [JS] [localtunnel/localtunnel](https://github.com/localtunnel/localtunnel) expose yourself
+- [**9229**Star][12d] [Java] [ibotpeaches/apktool](https://github.com/ibotpeaches/apktool) A tool for reverse engineering Android apk files
+- [**9185**Star][2d] [C#] [icsharpcode/ilspy](https://github.com/icsharpcode/ilspy) .NET Decompiler
+- [**9148**Star][29d] [JS] [valve/fingerprintjs2](https://github.com/valve/fingerprintjs2) Modern & flexible browser fingerprinting library
+- [**9069**Star][11d] [PS] [lukesampson/scoop](https://github.com/lukesampson/scoop) A command-line installer for Windows.
+- [**9015**Star][2m] [vitalysim/awesome-hacking-resources](https://github.com/vitalysim/awesome-hacking-resources) A collection of hacking / penetration testing resources to make you better!
+- [**8854**Star][6m] [Go] [rkt/rkt](https://github.com/rkt/rkt) rkt is a pod-native container engine for Linux. It is composable, secure, and built on standards.
+- [**8739**Star][17d] [C] [gentilkiwi/mimikatz](https://github.com/gentilkiwi/mimikatz) A little tool to play with Windows security
+- [**8646**Star][28d] [Java] [android-hacker/virtualxposed](https://github.com/android-hacker/virtualxposed) A simple app to use Xposed without root, unlock the bootloader or modify system image, etc.
+- [**8525**Star][1m] [microsoft/wsl](https://github.com/microsoft/WSL) Issues found on WSL
+- [**8443**Star][7m] [Shell] [233boy/v2ray](https://github.com/233boy/v2ray) 最好用的 V2Ray 一键安装脚本 & 管理脚本
+- [**8424**Star][2d] [Py] [wifiphisher/wifiphisher](https://github.com/wifiphisher/wifiphisher) 流氓AP框架, 用于RedTeam和Wi-Fi安全测试
+- [**8420**Star][2y] [brannondorsey/wifi-cracking](https://github.com/brannondorsey/wifi-cracking) Crack WPA/WPA2 Wi-Fi Routers with Airodump-ng and Aircrack-ng/Hashcat
+- [**8044**Star][9d] [trimstray/the-practical-linux-hardening-guide](https://github.com/trimstray/the-practical-linux-hardening-guide) This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).
+- [**8002**Star][2m] [Py] [facebook/chisel](https://github.com/facebook/chisel) Chisel is a collection of LLDB commands to assist debugging iOS apps.
+- [**7986**Star][1m] [Py] [mailpile/mailpile](https://github.com/mailpile/mailpile) A free & open modern, fast email client with user-friendly encryption and privacy features
+- [**7965**Star][3y] [Go] [cyfdecyf/cow](https://github.com/cyfdecyf/cow) HTTP proxy written in Go. COW can automatically identify blocked sites and use parent proxies to access.
+- [**7945**Star][4y] [ObjC] [shadowsocks/shadowsocks-ios](https://github.com/shadowsocks/shadowsocks-ios) Removed according to regulations.
+- [**7840**Star][6d] [C++] [shiqiyu/libfacedetection](https://github.com/shiqiyu/libfacedetection) An open source library for face detection in images. The face detection speed can reach 1500FPS.
+- [**7731**Star][3d] [JS] [gchq/cyberchef](https://github.com/gchq/cyberchef) The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis
+- [**7712**Star][2d] [Go] [git-lfs/git-lfs](https://github.com/git-lfs/git-lfs) Git extension for versioning large files
+- [**7670**Star][24d] [Java] [java-decompiler/jd-gui](https://github.com/java-decompiler/jd-gui) A standalone Java Decompiler GUI
+- [**7524**Star][29d] [Py] [threat9/routersploit](https://github.com/threat9/routersploit) Exploitation Framework for Embedded Devices
+- [**7474**Star][9d] [Go] [snail007/goproxy](https://github.com/snail007/goproxy) Proxy是高性能全功能的http代理、https代理、socks5代理、内网穿透、内网穿透p2p、内网穿透代理、内网穿透反向代理、内网穿透服务器、Websocket代理、TCP代理、UDP代理、DNS代理、DNS加密代理,代理API认证,全能跨平台代理服务器。
+- [**7412**Star][1m] [C++] [shadowsocks/shadowsocks-qt5](https://github.com/shadowsocks/shadowsocks-qt5) A cross-platform shadowsocks GUI client
+- [**7397**Star][1m] [Py] [s0md3v/xsstrike](https://github.com/s0md3v/XSStrike) Most advanced XSS scanner.
+- [**7246**Star][19d] [Java] [lionsoul2014/ip2region](https://github.com/lionsoul2014/ip2region) Ip2region is a offline IP location library with accuracy rate of 99.9% and 0.0x millseconds searching performance. DB file is less then 5Mb with all ip address stored. binding for Java,PHP,C,Python,Nodejs,Golang,C#,lua. Binary,B-tree,Memory searching algorithm
+- [**7186**Star][7m] [Shell] [teddysun/shadowsocks_install](https://github.com/teddysun/shadowsocks_install) Auto Install Shadowsocks Server for CentOS/Debian/Ubuntu
+- [**7017**Star][16d] [Go] [future-architect/vuls](https://github.com/future-architect/vuls) Agent-less vulnerability scanner for Linux, FreeBSD, Container Image, Running Container, WordPress, Programming language libraries, Network devices
+- [**6989**Star][5d] [C] [hashcat/hashcat](https://github.com/hashcat/hashcat) World's fastest and most advanced password recovery utility
+- [**6984**Star][2d] [Go] [nats-io/nats-server](https://github.com/nats-io/nats-server) High-Performance server for NATS, the cloud native messaging system.
+- [**6984**Star][2m] [JS] [cs01/gdbgui](https://github.com/cs01/gdbgui) Browser-based frontend to gdb (gnu debugger). Add breakpoints, view the stack, visualize data structures, and more in C, C++, Go, Rust, and Fortran. Run gdbgui from the terminal and a new tab will open in your browser.
+- [**6957**Star][11d] [greatfire/wiki](https://github.com/greatfire/wiki) 自由浏览
+- [**6949**Star][3m] [Java] [pxb1988/dex2jar](https://github.com/pxb1988/dex2jar) Tools to work with android .dex and java .class files
+- [**6869**Star][2m] [Go] [sqshq/sampler](https://github.com/sqshq/sampler) A tool for shell commands execution, visualization and alerting. Configured with a simple YAML file.
+- [**6812**Star][19d] [Shell] [awslabs/git-secrets](https://github.com/awslabs/git-secrets) Prevents you from committing secrets and credentials into git repositories
+- [**6732**Star][9m] [Java] [amitshekhariitbhu/android-debug-database](https://github.com/amitshekhariitbhu/android-debug-database) A library for debugging android databases and shared preferences - Make Debugging Great Again
+- [**6683**Star][3d] [Java] [zaproxy/zaproxy](https://github.com/zaproxy/zaproxy) The OWASP ZAP core project
+- [**6682**Star][3y] [C++] [alibaba/andfix](https://github.com/alibaba/andfix) AndFix is a library that offer hot-fix for Android App.
+- [**6668**Star][12d] [C++] [keepassxreboot/keepassxc](https://github.com/keepassxreboot/keepassxc) KeePassXC is a cross-platform community-driven port of the Windows application “Keepass Password Safe”.
+- [**6595**Star][3d] [Py] [networkx/networkx](https://github.com/networkx/networkx) Official NetworkX source code repository.
+- [**6555**Star][6m] [Go] [shadowsocks/shadowsocks-go](https://github.com/shadowsocks/shadowsocks-go) go port of shadowsocks (Deprecated)
+- [**6518**Star][1m] [Py] [h2y/shadowrocket-adblock-rules](https://github.com/h2y/shadowrocket-adblock-rules) 提供多款 Shadowrocket 规则,带广告过滤功能。用于 iOS 未越狱设备选择性地自动翻墙。
+- [**6462**Star][5d] [Shell] [cisofy/lynis](https://github.com/cisofy/lynis) Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
+- [**6451**Star][17d] [Go] [bettercap/bettercap](https://github.com/bettercap/bettercap) The Swiss Army knife for 802.11, BLE and Ethernet networks reconnaissance and MITM attacks.
+- [**6448**Star][9m] [HTML] [open-power-workgroup/hospital](https://github.com/open-power-workgroup/hospital) OpenPower工作组收集汇总的医院开放数据
+- [**6310**Star][29d] [Py] [seatgeek/fuzzywuzzy](https://github.com/seatgeek/fuzzywuzzy) Fuzzy String Matching in Python
+- [**6197**Star][2m] [ObjC] [johnno1962/injectionforxcode](https://github.com/johnno1962/injectionforxcode) Runtime Code Injection for Objective-C & Swift
+- [**6194**Star][3y] [PS] [powershellmafia/powersploit](https://github.com/PowerShellMafia/PowerSploit) PowerSploit - A PowerShell Post-Exploitation Framework
+- [**6192**Star][2m] [Py] [yandex/gixy](https://github.com/yandex/gixy) Nginx configuration static analyzer
+- [**6187**Star][6m] [rmerl/asuswrt-merlin](https://github.com/rmerl/asuswrt-merlin) Enhanced version of Asus's router firmware (Asuswrt) (legacy code base)
+- [**6146**Star][2d] [JS] [avwo/whistle](https://github.com/avwo/whistle) HTTP, HTTP2, HTTPS, Websocket debugging proxy
+- [**6137**Star][1y] [Hack] [facebook/fbctf](https://github.com/facebook/fbctf) Platform to host Capture the Flag competitions
+- [**6128**Star][9m] [Py] [schollz/howmanypeoplearearound](https://github.com/schollz/howmanypeoplearearound) Count the number of people around you
+- [**6092**Star][15d] [Go] [usefathom/fathom](https://github.com/usefathom/fathom) Fathom Lite. Simple, privacy-focused website analytics. Built with Golang & Preact.
+- [**6074**Star][16d] [Go] [quay/clair](https://github.com/quay/clair) Vulnerability Static Analysis for Containers
+- [**6074**Star][16d] [Go] [quay/clair](https://github.com/quay/clair) Vulnerability Static Analysis for Containers
+- [**6073**Star][5m] [Java] [qihoo360/replugin](https://github.com/qihoo360/replugin) RePlugin - A flexible, stable, easy-to-use Android Plug-in Framework
+- [**6070**Star][2y] [C] [jgamblin/mirai-source-code](https://github.com/jgamblin/mirai-source-code) Leaked Mirai Source Code for Research/IoC Development Purposes
+- [**6021**Star][3d] [Py] [cyrus-and/gdb-dashboard](https://github.com/cyrus-and/gdb-dashboard) Modular visual interface for GDB in Python
+- [**6017**Star][7d] [berzerk0/probable-wordlists](https://github.com/berzerk0/probable-wordlists) Version 2 is live! Wordlists sorted by probability originally created for password generation and testing - make sure your passwords aren't popular!
+- [**5972**Star][2m] [Java] [google/android-classyshark](https://github.com/google/android-classyshark) Analyze any Android/Java based app or game
+- [**5968**Star][2d] [Py] [gallopsled/pwntools](https://github.com/gallopsled/pwntools) CTF framework and exploit development library
+- [**5942**Star][6m] [JS] [haotian-wang/google-access-helper](https://github.com/haotian-wang/google-access-helper) 谷歌访问助手破解版
+- [**5888**Star][2d] [Py] [asciimoo/searx](https://github.com/asciimoo/searx) searx:网络元数据搜索引擎。汇总70 多个搜索引擎的搜素结果,避免用户被追踪或者被分析。可与 Tor 结合使用
+- [**5879**Star][2d] [C++] [radareorg/cutter](https://github.com/radareorg/cutter) Reverse Engineering Platform powered by radare2
+- [**5871**Star][2m] [Gnuplot] [nasa-jpl/open-source-rover](https://github.com/nasa-jpl/open-source-rover) A build-it-yourself, 6-wheel rover based on the rovers on Mars!
+- [**5815**Star][7m] [JS] [sindresorhus/fkill-cli](https://github.com/sindresorhus/fkill-cli) Fabulously kill processes. Cross-platform.
+- [**5773**Star][1y] [qinyuhang/shadowsocksx-ng-r](https://github.com/qinyuhang/shadowsocksx-ng-r) Next Generation of ShadowsocksX
+- [**5766**Star][3m] [ObjC] [square/ponydebugger](https://github.com/square/ponydebugger) Remote network and data debugging for your native iOS app using Chrome Developer Tools
+- [**5762**Star][2m] [C] [spacehuhn/esp8266_deauther](https://github.com/spacehuhn/esp8266_deauther) Cheap WiFi hacks
+- [**5742**Star][2y] [Py] [newsapps/beeswithmachineguns](https://github.com/newsapps/beeswithmachineguns) A utility for arming (creating) many bees (micro EC2 instances) to attack (load test) targets (web applications).
+- [**5740**Star][8m] [C] [xoreaxeaxeax/movfuscator](https://github.com/xoreaxeaxeax/movfuscator) The single instruction C compiler
+- [**5694**Star][9d] [JS] [swagger-api/swagger-editor](https://github.com/swagger-api/swagger-editor) Swagger Editor
+- [**5693**Star][2d] [Go] [casbin/casbin](https://github.com/casbin/casbin) An authorization library that supports access control models like ACL, RBAC, ABAC in Golang
+- [**5626**Star][1m] [C] [rofl0r/proxychains-ng](https://github.com/rofl0r/proxychains-ng) proxychains ng (new generation) - a preloader which hooks calls to sockets in dynamically linked programs and redirects it through one or more socks/http proxies. continuation of the unmaintained proxychains project. the sf.net page is currently not updated, use releases from github release page instead.
+- [**5593**Star][10d] [Ruby] [presidentbeef/brakeman](https://github.com/presidentbeef/brakeman) A static analysis security vulnerability scanner for Ruby on Rails applications
+- [**5565**Star][29d] [Roff] [max2max/freess](https://github.com/max2max/freess) 免费ss账号 免费shadowsocks账号 免费v2ray账号 (长期更新)
+- [**5540**Star][20d] [rshipp/awesome-malware-analysis](https://github.com/rshipp/awesome-malware-analysis) A curated list of awesome malware analysis tools and resources.
+- [**5476**Star][8m] [carpedm20/awesome-hacking](https://github.com/carpedm20/awesome-hacking) A curated list of awesome Hacking tutorials, tools and resources
+- [**5417**Star][2m] [Py] [axi0mx/ipwndfu](https://github.com/axi0mx/ipwndfu) open-source jailbreaking tool for many iOS devices
+- [**5413**Star][2y] [Rust] [autumnai/leaf](https://github.com/autumnai/leaf) Open Machine Intelligence Framework for Hackers. (GPU/CPU)
+- [**5371**Star][5m] [C] [pwn20wndstuff/undecimus](https://github.com/pwn20wndstuff/undecimus) unc0ver jailbreak for iOS 11.0 - 12.4
+- [**5371**Star][2d] [Py] [mlflow/mlflow](https://github.com/mlflow/mlflow) Open source platform for the machine learning lifecycle
+- [**5324**Star][4d] [Go] [zricethezav/gitleaks](https://github.com/zricethezav/gitleaks) Audit git repos for secrets
+- [**5205**Star][7m] [Py] [usarmyresearchlab/dshell](https://github.com/usarmyresearchlab/dshell) Dshell is a network forensic analysis framework.
+- [**5196**Star][3m] [Py] [ytisf/thezoo](https://github.com/ytisf/thezoo) A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.
+- [**5192**Star][1m] [Py] [refirmlabs/binwalk](https://github.com/ReFirmLabs/binwalk) a fast, easy to use tool for analyzing, reverse engineering, and extracting firmware images.
+ - [IDA插件](https://github.com/ReFirmLabs/binwalk/tree/master/src/scripts)
+ - [binwalk](https://github.com/ReFirmLabs/binwalk/tree/master/src/binwalk)
+- [**5167**Star][20d] [Shell] [vulhub/vulhub](https://github.com/vulhub/vulhub) Pre-Built Vulnerable Environments Based on Docker-Compose
+- [**5167**Star][1y] [JS] [samyk/poisontap](https://github.com/samyk/poisontap) Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.
+- [**5148**Star][6d] [PHP] [tennc/webshell](https://github.com/tennc/webshell) This is a webshell open source project
+- [**5123**Star][21d] [C++] [avast/retdec](https://github.com/avast/retdec) RetDec is a retargetable machine-code decompiler based on LLVM.
+- [**5118**Star][15d] [ObjC] [macpass/macpass](https://github.com/MacPass/MacPass) A native OS X KeePass client
+- [**5118**Star][4m] [Py] [n1nj4sec/pupy](https://github.com/n1nj4sec/pupy) Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) remote administration and post-exploitation tool mainly written in python
+- [**5089**Star][2d] [Go] [dnscrypt/dnscrypt-proxy](https://github.com/DNSCrypt/dnscrypt-proxy) dnscrypt-proxy 2 - A flexible DNS proxy, with support for encrypted DNS protocols.
+- [**5082**Star][2m] [sbilly/awesome-security](https://github.com/sbilly/awesome-security) A collection of awesome software, libraries, documents, books, resources and cools stuffs about security.
+- [**5065**Star][2m] [Shell] [stackexchange/blackbox](https://github.com/stackexchange/blackbox) Safely store secrets in Git/Mercurial/Subversion
+- [**5059**Star][1m] [Java] [meituan-dianping/walle](https://github.com/meituan-dianping/walle) Android Signature V2 Scheme签名下的新一代渠道包打包神器
+- [**5054**Star][4y] [Py] [shadowsocksr-backup/shadowsocksr](https://github.com/shadowsocksr-backup/shadowsocksr) Python port of ShadowsocksR
+- [**5042**Star][2d] [HTML] [owasp/owasp-mstg](https://github.com/owasp/owasp-mstg) The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security development, testing and reverse engineering.
+- [**5037**Star][4m] [PS] [empireproject/empire](https://github.com/EmpireProject/Empire) 后渗透框架. Windows客户端用PowerShell, Linux/OSX用Python. 之前PowerShell Empire和Python EmPyre的组合
+- [**5021**Star][2d] [Py] [mobsf/mobile-security-framework-mobsf](https://github.com/MobSF/Mobile-Security-Framework-MobSF) Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
+- [**5005**Star][2d] [C++] [coatisoftware/sourcetrail](https://github.com/coatisoftware/sourcetrail) Sourcetrail - free and open-source interactive source explorer
+- [**4996**Star][2d] [ASP] [hq450/fancyss](https://github.com/hq450/fancyss) fancyss is a project providing tools to across the GFW on asuswrt/merlin based router.
+- [**4996**Star][6d] [Go] [inlets/inlets](https://github.com/inlets/inlets) Expose your local endpoints to the Internet
+- [**4994**Star][1m] [Py] [snare/voltron](https://github.com/snare/voltron) A hacky debugger UI for hackers
+- [**4953**Star][22d] [Py] [trustedsec/social-engineer-toolkit](https://github.com/trustedsec/social-engineer-toolkit) The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.
+- [**4920**Star][2d] [TS] [jigsaw-code/outline-client](https://github.com/jigsaw-code/outline-client) Outline clients, developed by Jigsaw. The Outline clients use the popular Shadowsocks protocol, and lean on the Cordova and Electron frameworks to support Windows, Android / ChromeOS, Linux, iOS and macOS.
+- [**4913**Star][1y] [Go] [yinghuocho/firefly-proxy](https://github.com/yinghuocho/firefly-proxy) A proxy software to help circumventing the Great Firewall.
+- [**4909**Star][2d] [Shell] [denisidoro/navi](https://github.com/denisidoro/navi) An interactive cheatsheet tool for the command-line
+- [**4897**Star][11m] [Go] [bitly/oauth2_proxy](https://github.com/bitly/oauth2_proxy) A reverse proxy that provides authentication with Google, Github or other provider
+- [**4883**Star][2m] [Rust] [sharkdp/hexyl](https://github.com/sharkdp/hexyl) A command-line hex viewer
+- [**4881**Star][5d] [Java] [guardianproject/haven](https://github.com/guardianproject/haven) Haven is for people who need a way to protect their personal spaces and possessions without compromising their own privacy, through an Android app and on-device sensors
+- [**4869**Star][2d] [Swift] [yanue/v2rayu](https://github.com/yanue/v2rayu) V2rayU,基于v2ray核心的mac版客户端,用于科学上网,使用swift编写,支持vmess,shadowsocks,socks5等服务协议,支持订阅, 支持二维码,剪贴板导入,手动配置,二维码分享等
+- [**4867**Star][10d] [Py] [alessandroz/lazagne](https://github.com/alessandroz/lazagne) Credentials recovery project
+- [**4847**Star][3d] [Go] [gcla/termshark](https://github.com/gcla/termshark) A terminal UI for tshark, inspired by Wireshark
+- [**4841**Star][2d] [C] [offensive-security/exploitdb](https://github.com/offensive-security/exploitdb) The official Exploit Database repository
+- [**4803**Star][8m] [Py] [10se1ucgo/disablewintracking](https://github.com/10se1ucgo/disablewintracking) Uses some known methods that attempt to minimize tracking in Windows 10
+- [**4782**Star][2d] [C] [google/oss-fuzz](https://github.com/google/oss-fuzz) OSS-Fuzz - continuous fuzzing of open source software.
+- [**4761**Star][2d] [C++] [facebook/redex](https://github.com/facebook/redex) A bytecode optimizer for Android apps
+- [**4724**Star][2d] [C++] [paddlepaddle/paddle-lite](https://github.com/PaddlePaddle/Paddle-Lite) Multi-platform high performance deep learning inference engine (『飞桨』多平台高性能深度学习预测引擎)
+- [**4691**Star][9d] [Py] [manisso/fsociety](https://github.com/manisso/fsociety) fsociety Hacking Tools Pack – A Penetration Testing Framework
+- [**4639**Star][3d] [Py] [secdev/scapy](https://github.com/secdev/scapy) Scapy: the Python-based interactive packet manipulation program & library. Supports Python 2 & Python 3.
+- [**4638**Star][18d] [C] [google/ios-webkit-debug-proxy](https://github.com/google/ios-webkit-debug-proxy) A DevTools proxy (Chrome Remote Debugging Protocol) for iOS devices (Safari Remote Web Inspector).
+- [**4637**Star][6m] [powershell/win32-openssh](https://github.com/powershell/win32-openssh) Win32 port of OpenSSH
+- [**4633**Star][2d] [JS] [beefproject/beef](https://github.com/beefproject/beef) The Browser Exploitation Framework Project
+- [**4615**Star][12d] [Go] [ginuerzh/gost](https://github.com/ginuerzh/gost) GO Simple Tunnel - a simple tunnel written in golang
+- [**4589**Star][11m] [Py] [ecthros/uncaptcha2](https://github.com/ecthros/uncaptcha2) defeating the latest version of ReCaptcha with 91% accuracy
+- [**4583**Star][1y] [C] [upx/upx](https://github.com/upx/upx) UPX - the Ultimate Packer for eXecutables
+- [**4575**Star][4d] [C++] [mozilla/rr](https://github.com/mozilla/rr) Record and Replay Framework
+- [**4543**Star][4d] [Ruby] [wpscanteam/wpscan](https://github.com/wpscanteam/wpscan) WPScan is a free, for non-commercial use, black box WordPress Vulnerability Scanner written for security professionals and blog maintainers to test the security of their WordPress websites.
+- [**4529**Star][6d] [C] [jedisct1/dsvpn](https://github.com/jedisct1/dsvpn) A Dead Simple VPN.
+- [**4498**Star][6d] [TS] [apis-guru/graphql-voyager](https://github.com/apis-guru/graphql-voyager)
+- [**4459**Star][8d] [Py] [jopohl/urh](https://github.com/jopohl/urh) Universal Radio Hacker: investigate wireless protocols like a boss
+- [**4458**Star][1y] [Go] [wallix/awless](https://github.com/wallix/awless) A Mighty CLI for AWS
+- [**4449**Star][3d] [Go] [dragonflyoss/dragonfly](https://github.com/dragonflyoss/Dragonfly) Dragonfly is an intelligent P2P based image and file distribution system.
+- [**4446**Star][2d] [Makefile] [frida/frida](https://github.com/frida/frida) Clone this repo to build Frida
+- [**4443**Star][24d] [Py] [jofpin/trape](https://github.com/jofpin/trape) People tracker on the Internet: OSINT analysis and research tool by Jose Pino
+- [**4411**Star][2m] [Shell] [zardus/ctf-tools](https://github.com/zardus/ctf-tools) Some setup scripts for security research tools.
+- [**4359**Star][6d] [Swift] [signalapp/signal-ios](https://github.com/signalapp/Signal-iOS) A private messenger for iOS.
+- [**4346**Star][1m] [JS] [cure53/dompurify](https://github.com/cure53/dompurify) a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
+- [**4344**Star][12m] [Py] [lennylxx/ipv6-hosts](https://github.com/lennylxx/ipv6-hosts) Fork of
+- [**4313**Star][5m] [Py] [diafygi/acme-tiny](https://github.com/diafygi/acme-tiny) A tiny script to issue and renew TLS certs from Let's Encrypt
+- [**4283**Star][7d] [Py] [tensorflow/cleverhans](https://github.com/tensorflow/cleverhans) An adversarial example library for constructing attacks, building defenses, and benchmarking both
+- [**4280**Star][1m] [Shell] [ashishb/android-security-awesome](https://github.com/ashishb/android-security-awesome) A collection of android security related resources
+- [**4261**Star][5d] [Rust] [timvisee/ffsend](https://github.com/timvisee/ffsend) Easily and securely share files from the command line
+- [**4258**Star][11m] [JS] [butterproject/butter-desktop](https://github.com/butterproject/butter-desktop) All the free parts of Popcorn Time
+- [**4244**Star][2y] [imeiji/shadowsocks_install](https://github.com/imeiji/shadowsocks_install) Auto install shadowsocks server,thanks 秋水逸冰
+- [**4241**Star][4m] [Py] [dxa4481/trufflehog](https://github.com/dxa4481/trufflehog) Searches through git repositories for high entropy strings and secrets, digging deep into commit history
+- [**4215**Star][7m] [ObjC] [alonemonkey/monkeydev](https://github.com/alonemonkey/monkeydev) CaptainHook Tweak、Logos Tweak and Command-line Tool、Patch iOS Apps, Without Jailbreak.
+- [**4211**Star][9d] [Go] [gophish/gophish](https://github.com/gophish/gophish) Open-Source Phishing Toolkit
+- [**4205**Star][11d] [qazbnm456/awesome-web-security](https://github.com/qazbnm456/awesome-web-security) Curated list of Web Security materials and resources
+- [**4204**Star][1y] [Go] [michenriksen/gitrob](https://github.com/michenriksen/gitrob) Reconnaissance tool for GitHub organizations
+- [**4202**Star][2m] [Py] [evilsocket/opensnitch](https://github.com/evilsocket/opensnitch) a GNU/Linux port of the Little Snitch application firewall
+- [**4198**Star][2d] [Py] [openmined/pysyft](https://github.com/openmined/pysyft) A library for encrypted, privacy preserving machine learning
+- [**4190**Star][13d] [we5ter/scanners-box](https://github.com/we5ter/scanners-box) A powerful hacker toolkit collected more than 10 categories of open source scanners from Github - 安全行业从业者自研开源扫描器合辑
+- [**4171**Star][2y] [forter/security-101-for-saas-startups](https://github.com/forter/security-101-for-saas-startups) security tips for startups
+- [**4149**Star][12m] [JS] [kdzwinel/betwixt](https://github.com/kdzwinel/betwixt) Betwixt will help you analyze web traffic outside the browser using familiar Chrome DevTools interface.
+- [**4131**Star][5d] [Java] [spring-projects/spring-security](https://github.com/spring-projects/spring-security) Spring Security
+- [**4120**Star][5m] [Py] [spiderclub/haipproxy](https://github.com/spiderclub/haipproxy)
+- [**4120**Star][2m] [Py] [aboul3la/sublist3r](https://github.com/aboul3la/sublist3r) Fast subdomains enumeration tool for penetration testers
+- [**4096**Star][2y] [Py] [xoreaxeaxeax/sandsifter](https://github.com/xoreaxeaxeax/sandsifter) sandsifter:x86 处理器 Fuzzer,查找 Intel 的隐藏指令和 CPU bug
+- [**4092**Star][9m] [wtsxdev/reverse-engineering](https://github.com/wtsxdev/reverse-engineering) List of awesome reverse engineering resources
+- [**4046**Star][1m] [JS] [sigalor/whatsapp-web-reveng](https://github.com/sigalor/whatsapp-web-reveng) Reverse engineering WhatsApp Web.
+- [**4045**Star][2m] [Java] [jesusfreke/smali](https://github.com/jesusfreke/smali) smali/baksmali
+- [**4044**Star][2d] [Py] [google/clusterfuzz](https://github.com/google/clusterfuzz) Scalable fuzzing infrastructure.
+- [**4022**Star][22d] [drduh/yubikey-guide](https://github.com/drduh/yubikey-guide) Guide to using YubiKey for GPG and SSH
+- [**4021**Star][3m] [JS] [cuckoosandbox/cuckoo](https://github.com/cuckoosandbox/cuckoo) Cuckoo Sandbox is an automated dynamic malware analysis system
+- [**4000**Star][1y] [JS] [travist/jsencrypt](https://github.com/travist/jsencrypt) A Javascript library to perform OpenSSL RSA Encryption, Decryption, and Key Generation.
+- [**3967**Star][3m] [Py] [nullarray/autosploit](https://github.com/nullarray/autosploit) Automated Mass Exploiter
+- [**3961**Star][5d] [Go] [dexidp/dex](https://github.com/dexidp/dex) OpenID Connect Identity (OIDC) and OAuth 2.0 Provider with Pluggable Connectors
+- [**3953**Star][2m] [JS] [apsdehal/awesome-ctf](https://github.com/apsdehal/awesome-ctf) A curated list of CTF frameworks, libraries, resources and softwares
+- [**3953**Star][2m] [JS] [apsdehal/awesome-ctf](https://github.com/apsdehal/awesome-ctf) A curated list of CTF frameworks, libraries, resources and softwares
+- [**3937**Star][3d] [Py] [angr/angr](https://github.com/angr/angr) A powerful and user-friendly binary analysis platform!
+- [**3935**Star][4m] [PHP] [paragonie/awesome-appsec](https://github.com/paragonie/awesome-appsec) A curated list of resources for learning about application security
+- [**3933**Star][8m] [Go] [eranyanay/1m-go-websockets](https://github.com/eranyanay/1m-go-websockets) handling 1M websockets connections in Go
+- [**3923**Star][1m] [C] [aquynh/capstone](https://github.com/aquynh/capstone) Capstone disassembly/disassembler framework: Core (Arm, Arm64, BPF, EVM, M68K, M680X, MOS65xx, Mips, PPC, RISCV, Sparc, SystemZ, TMS320C64x, Web Assembly, X86, X86_64, XCore) + bindings.
+- [**3920**Star][2y] [C#] [shadowsocksr-backup/shadowsocksr-csharp](https://github.com/shadowsocksr-backup/shadowsocksr-csharp)
+- [**3915**Star][16d] [Rust] [svenstaro/genact](https://github.com/svenstaro/genact) a nonsense activity generator
+- [**3893**Star][2d] [C++] [baldurk/renderdoc](https://github.com/baldurk/renderdoc) RenderDoc is a stand-alone graphics debugging tool.
+- [**3878**Star][2m] [PHP] [fuzzdb-project/fuzzdb](https://github.com/fuzzdb-project/fuzzdb) Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
+- [**3869**Star][2d] [Py] [secureauthcorp/impacket](https://github.com/SecureAuthCorp/impacket) Impacket is a collection of Python classes for working with network protocols.
+- [**3848**Star][7d] [JS] [shadowsocks/shadowsocks-manager](https://github.com/shadowsocks/shadowsocks-manager) A shadowsocks manager tool for multi user and traffic control.
+- [**3845**Star][2d] [hq450/fancyss_history_package](https://github.com/hq450/fancyss_history_package) 科学上网插件的离线安装包储存在这里
+- [**3838**Star][2m] [ObjC] [sveinbjornt/sloth](https://github.com/sveinbjornt/sloth) Mac app that shows all open files, directories and sockets in use by all running processes. Nice GUI for lsof.
+- [**3831**Star][4y] [iosre/iosappreverseengineering](https://github.com/iosre/iosappreverseengineering) The world’s 1st book of very detailed iOS App reverse engineering skills :)
+- [**3813**Star][1m] [jivoi/awesome-osint](https://github.com/jivoi/awesome-osint) A curated list of amazingly awesome open source intelligence tools and resources
+- [**3799**Star][5y] [shadowsocksr-backup/shadowsocks-rss](https://github.com/shadowsocksr-backup/shadowsocks-rss) ShadowsocksR update rss, SSR organization
+- [**3767**Star][10m] [Py] [longld/peda](https://github.com/longld/peda) Python Exploit Development Assistance for GDB
+- [**3763**Star][2m] [Py] [paralax/awesome-honeypots](https://github.com/paralax/awesome-honeypots) an awesome list of honeypot resources
+- [**3755**Star][2m] [PHP] [ethicalhack3r/dvwa](https://github.com/ethicalhack3r/DVWA) Damn Vulnerable Web Application (DVWA)
+- [**3752**Star][2m] [Go] [microsoft/ethr](https://github.com/microsoft/ethr) Ethr is a Network Performance Measurement Tool for TCP, UDP & HTTP.
+- [**3736**Star][8d] [Go] [hashicorp/consul-template](https://github.com/hashicorp/consul-template) Template rendering, notifier, and supervisor for
+- [**3733**Star][2m] [C] [iaik/meltdown](https://github.com/iaik/meltdown) This repository contains several applications, demonstrating the Meltdown bug.
+- [**3730**Star][4m] [Py] [malwaredllc/byob](https://github.com/malwaredllc/byob) BYOB (Build Your Own Botnet)
+- [**3719**Star][6d] [jjqqkk/chromium](https://github.com/jjqqkk/chromium) Chromium browser with SSL VPN. Use this browser to unblock websites.
+- [**3713**Star][2d] [C] [atmosphere-nx/atmosphere](https://github.com/atmosphere-nx/atmosphere) Atmosphère is a work-in-progress customized firmware for the Nintendo Switch.
+- [**3684**Star][2y] [JS] [samyk/evercookie](https://github.com/samyk/evercookie) Produces persistent, respawning "super" cookies in a browser, abusing over a dozen techniques. Its goal is to identify users after they've removed standard cookies and other privacy data such as Flash cookies (LSOs), HTML5 storage, SilverLight storage, and others.
+- [**3682**Star][10d] [HTML] [hamukazu/lets-get-arrested](https://github.com/hamukazu/lets-get-arrested) This project is intended to protest against the police in Japan
+- [**3670**Star][2d] [JS] [lesspass/lesspass](https://github.com/lesspass/lesspass)
+- [**3668**Star][8d] [C#] [0xd4d/de4dot](https://github.com/0xd4d/de4dot) .NET deobfuscator and unpacker.
+- [**3667**Star][1y] [Py] [misterch0c/shadowbroker](https://github.com/misterch0c/shadowbroker) The Shadow Brokers "Lost In Translation" leak
+- [**3666**Star][5m] [C] [secwiki/windows-kernel-exploits](https://github.com/secwiki/windows-kernel-exploits) windows-kernel-exploits Windows平台提权漏洞集合
+- [**3663**Star][4m] [C] [facebook/fishhook](https://github.com/facebook/fishhook) A library that enables dynamically rebinding symbols in Mach-O binaries running on iOS.
+- [**3652**Star][4d] [acl4ssr/acl4ssr](https://github.com/acl4ssr/acl4ssr) SSR 去广告ACL规则/SS完整GFWList规则,Telegram频道订阅地址
+- [**3647**Star][2y] [Py] [qiyeboy/ipproxypool](https://github.com/qiyeboy/ipproxypool) IPProxyPool代理池项目,提供代理ip
+- [**3622**Star][6d] [TS] [javascript-obfuscator/javascript-obfuscator](https://github.com/javascript-obfuscator/javascript-obfuscator) A powerful obfuscator for JavaScript and Node.js
+- [**3621**Star][7d] [HTML] [consensys/smart-contract-best-practices](https://github.com/consensys/smart-contract-best-practices) A guide to smart contract security best practices
+- [**3619**Star][5y] [C#] [brandonlw/psychson](https://github.com/brandonlw/Psychson) Phison 2251-03 (2303) Custom Firmware & Existing Firmware Patches (BadUSB)
+- [**3611**Star][2m] [Java] [ffay/lanproxy](https://github.com/ffay/lanproxy) lanproxy是一个将局域网个人电脑、服务器代理到公网的内网穿透工具,支持tcp流量转发,可支持任何tcp上层协议(访问内网网站、本地支付接口调试、ssh访问、远程桌面...)。目前市面上提供类似服务的有花生壳、TeamView、GoToMyCloud等等,但要使用第三方的公网服务器就必须为第三方付费,并且这些服务都有各种各样的限制,此外,由于数据包会流经第三方,因此对数据安全也是一大隐患。技术交流QQ群 946273429
+- [**3604**Star][8d] [PS] [bloodhoundad/bloodhound](https://github.com/BloodHoundAD/BloodHound) a single page Javascript web application, uses graph theory to reveal the hidden and often unintended relationships within an Active Directory environment.
+- [**3598**Star][26d] [C++] [anbox/anbox](https://github.com/anbox/anbox) a container-based approach to boot a full Android system on a regular GNU/Linux system
+- [**3597**Star][1y] [C#] [nummer/destroy-windows-10-spying](https://github.com/nummer/destroy-windows-10-spying) Destroy Windows Spying tool
+- [**3595**Star][3y] [Perl] [x0rz/eqgrp](https://github.com/x0rz/eqgrp) Decrypted content of eqgrp-auction-file.tar.xz
+- [**3583**Star][3d] [Shell] [drwetter/testssl.sh](https://github.com/drwetter/testssl.sh) Testing TLS/SSL encryption anywhere on any port
+- [**3580**Star][5d] [C] [nmap/nmap](https://github.com/nmap/nmap) Nmap - the Network Mapper. Github mirror of official SVN repository.
+- [**3562**Star][5d] [Pascal] [cheat-engine/cheat-engine](https://github.com/cheat-engine/cheat-engine) Cheat Engine. A development environment focused on modding
+- [**3542**Star][6y] [R] [johnmyleswhite/ml_for_hackers](https://github.com/johnmyleswhite/ml_for_hackers) Code accompanying the book "Machine Learning for Hackers"
+- [**3540**Star][6d] [blacckhathaceekr/pentesting-bible](https://github.com/blacckhathaceekr/pentesting-bible) links reaches 10000 links & 10000 pdf files .Learn Ethical Hacking and penetration testing .hundreds of ethical hacking & penetration testing & red team & cyber security & computer science resources.
+- [**3538**Star][4m] [Shell] [chengr28/revokechinacerts](https://github.com/chengr28/revokechinacerts) Revoke Chinese certificates.
+- [**3533**Star][14d] [C] [tencent/tencentos-tiny](https://github.com/tencent/tencentos-tiny) 腾讯物联网终端操作系统
+- [**3514**Star][3y] [C] [hak5darren/usb-rubber-ducky](https://github.com/hak5darren/usb-rubber-ducky)
+- [**3510**Star][2d] [JS] [aol/moloch](https://github.com/aol/moloch) large scale, full packet capturing, indexing, and database system.
+- [**3501**Star][8m] [Go] [fanpei91/torsniff](https://github.com/fanpei91/torsniff) torsniff - a sniffer that sniffs torrents from BitTorrent network
+- [**3501**Star][8m] [Go] [fanpei91/torsniff](https://github.com/fanpei91/torsniff) a sniffer that sniffs torrents from BitTorrent network
+- [**3493**Star][9m] [C] [rpisec/mbe](https://github.com/rpisec/mbe) Course materials for Modern Binary Exploitation by RPISEC
+- [**3485**Star][5m] [PHP] [hanc00l/wooyun_public](https://github.com/hanc00l/wooyun_public) This repo is archived. Thanks for wooyun! 乌云公开漏洞、知识库爬虫和搜索 crawl and search for wooyun.org public bug(vulnerability) and drops
+- [**3481**Star][8d] [C] [cyan4973/xxhash](https://github.com/cyan4973/xxhash) Extremely fast non-cryptographic hash algorithm
+- [**3471**Star][2m] [C++] [trojan-gfw/trojan](https://github.com/trojan-gfw/trojan) An unidentifiable mechanism that helps you bypass GFW.
+- [**3442**Star][9d] [C] [shellphish/how2heap](https://github.com/shellphish/how2heap) A repository for learning various heap exploitation techniques.
+- [**3442**Star][8d] [Java] [meituan-dianping/robust](https://github.com/meituan-dianping/robust) Robust is an Android HotFix solution with high compatibility and high stability. Robust can fix bugs immediately without a reboot.
+- [**3441**Star][15d] [Perl] [sullo/nikto](https://github.com/sullo/nikto) Nikto web server scanner
+- [**3419**Star][9d] [C] [mikebrady/shairport-sync](https://github.com/mikebrady/shairport-sync) AirPlay audio player. Shairport Sync adds multi-room capability with Audio Synchronisation
+- [**3412**Star][27d] [icodesign/potatso](https://github.com/icodesign/Potatso) Potatso is an iOS client that implements different proxies with the leverage of NetworkExtension framework in iOS 10+.
+- [**3410**Star][5m] [Go] [jpillora/chisel](https://github.com/jpillora/chisel) A fast TCP tunnel over HTTP
+- [**3408**Star][24d] [PS] [samratashok/nishang](https://github.com/samratashok/nishang) Offensive PowerShell for red team, penetration testing and offensive security.
+- [**3397**Star][2y] [shadowsocksrr/shadowsocks-rss](https://github.com/shadowsocksrr/shadowsocks-rss) ShadowsocksR update rss, SSR organization
+- [**3344**Star][2d] [jivoi/awesome-ml-for-cybersecurity](https://github.com/jivoi/awesome-ml-for-cybersecurity) Awesome Machine Learning for Cyber Security
+- [**3343**Star][6d] [C] [screetsec/thefatrat](https://github.com/screetsec/thefatrat) Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV softw…
+- [**3340**Star][5m] [C++] [wangyu-/udp2raw-tunnel](https://github.com/wangyu-/udp2raw-tunnel) A Tunnel which Turns UDP Traffic into Encrypted UDP/FakeTCP/ICMP Traffic by using Raw Socket,helps you Bypass UDP FireWalls(or Unstable UDP Environment)
+- [**3334**Star][10d] [Smarty] [anankke/sspanel-uim](https://github.com/anankke/sspanel-uim) Across the Great Wall we can reach every corner in the world
+- [**3331**Star][15d] [Py] [google/grr](https://github.com/google/grr) remote live forensics for incident response
+- [**3330**Star][2d] [Py] [stamparm/maltrail](https://github.com/stamparm/maltrail) Malicious traffic detection system
+- [**3319**Star][2y] [scanate/ethlist](https://github.com/scanate/ethlist) The Comprehensive Ethereum Reading List
+- [**3303**Star][22d] [C] [vanhauser-thc/thc-hydra](https://github.com/vanhauser-thc/thc-hydra) hydra
+- [**3301**Star][2m] [Swift] [yagiz/bagel](https://github.com/yagiz/bagel) a little native network debugging tool for iOS
+- [**3298**Star][9d] [C++] [fireice-uk/xmr-stak](https://github.com/fireice-uk/xmr-stak) Free Monero RandomX Miner and unified CryptoNight miner
+- [**3285**Star][7d] [C] [microsoft/windows-driver-samples](https://github.com/microsoft/windows-driver-samples) This repo contains driver samples prepared for use with Microsoft Visual Studio and the Windows Driver Kit (WDK). It contains both Universal Windows Driver and desktop-only driver samples.
+- [**3278**Star][6d] [C] [virustotal/yara](https://github.com/virustotal/yara) The pattern matching swiss knife
+- [**3276**Star][3m] [C] [nbs-system/naxsi](https://github.com/nbs-system/naxsi) NAXSI is an open-source, high performance, low rules maintenance WAF for NGINX
+- [**3263**Star][10d] [Java] [oldmanpushcart/greys-anatomy](https://github.com/oldmanpushcart/greys-anatomy) Java诊断工具
+- [**3262**Star][2m] [Py] [volatilityfoundation/volatility](https://github.com/volatilityfoundation/volatility) An advanced memory forensics framework
+- [**3260**Star][8d] [Shell] [toniblyx/my-arsenal-of-aws-security-tools](https://github.com/toniblyx/my-arsenal-of-aws-security-tools) List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.
+- [**3260**Star][5y] [C++] [google/lmctfy](https://github.com/google/lmctfy) lmctfy is the open source version of Google’s container stack, which provides Linux application containers.
+- [**3259**Star][7m] [JS] [sindresorhus/speed-test](https://github.com/sindresorhus/speed-test) Test your internet connection speed and ping using speedtest.net from the CLI
+- [**3255**Star][4d] [ObjC] [objective-see/lulu](https://github.com/objective-see/lulu) LuLu is the free macOS firewall
+- [**3247**Star][29d] [JS] [koenkk/zigbee2mqtt](https://github.com/koenkk/zigbee2mqtt) Zigbee
+- [**3242**Star][16d] [Py] [laramies/theharvester](https://github.com/laramies/theharvester) E-mails, subdomains and names Harvester - OSINT
+- [**3238**Star][2d] [TS] [jigsaw-code/outline-server](https://github.com/jigsaw-code/outline-server) Outline Manager, developed by Jigsaw. The Outline Manager application creates and manages Outline servers, powered by Shadowsocks. It uses the Electron framework to offer support for Windows, macOS and Linux.
+- [**3236**Star][5m] [Go] [meshbird/meshbird](https://github.com/meshbird/meshbird) cloud-native multi-region multi-cloud decentralized private networking
+- [**3234**Star][2y] [CSS] [jbtronics/crookedstylesheets](https://github.com/jbtronics/crookedstylesheets) Webpage tracking only using CSS (and no JS)
+- [**3233**Star][9d] [Go] [mozilla/sops](https://github.com/mozilla/sops) Simple and flexible tool for managing secrets
+- [**3228**Star][2d] [C] [betaflight/betaflight](https://github.com/betaflight/betaflight) Open Source Flight Controller Firmware
+- [**3223**Star][2m] [Shell] [gfw-breaker/ssr-accounts](https://github.com/gfw-breaker/ssr-accounts) 一键部署Shadowsocks服务;免费Shadowsocks账号分享;免费SS账号分享; 翻墙;无界,自由门,SquirrelVPN
+- [**3222**Star][6d] [C] [tmate-io/tmate](https://github.com/tmate-io/tmate) Instant Terminal Sharing
+- [**3222**Star][6d] [Go] [dvyukov/go-fuzz](https://github.com/dvyukov/go-fuzz) Randomized testing for Go
+- [**3221**Star][4y] [C] [shadowsocks/chinadns](https://github.com/shadowsocks/chinadns) Protect yourself against DNS poisoning in China.
+- [**3213**Star][1m] [TS] [google/incremental-dom](https://github.com/google/incremental-dom) An in-place DOM diffing library
+- [**3210**Star][7m] [HTML] [leizongmin/js-xss](https://github.com/leizongmin/js-xss) Sanitize untrusted HTML (to prevent XSS) with a configuration specified by a Whitelist
+- [**3209**Star][5m] [ObjC] [naituw/ipapatch](https://github.com/naituw/ipapatch) Patch iOS Apps, The Easy Way, Without Jailbreak.
+- [**3208**Star][4m] [C] [yarrick/iodine](https://github.com/yarrick/iodine) Official git repo for iodine dns tunnel
+- [**3205**Star][15d] [Py] [maurosoria/dirsearch](https://github.com/maurosoria/dirsearch) Web path scanner
+- [**3202**Star][10d] [Rich Text Format] [the-art-of-hacking/h4cker](https://github.com/The-Art-of-Hacking/h4cker) 资源收集:hacking、渗透、数字取证、事件响应、漏洞研究、漏洞开发、逆向
+- [**3187**Star][1y] [Py] [kootenpv/whereami](https://github.com/kootenpv/whereami) Uses WiFi signals and machine learning (sklearn's RandomForest) to predict where you are.
+- [**3187**Star][6m] [hslatman/awesome-threat-intelligence](https://github.com/hslatman/awesome-threat-intelligence) A curated list of Awesome Threat Intelligence resources
+- [**3186**Star][1m] [C++] [spiderlabs/modsecurity](https://github.com/spiderlabs/modsecurity) ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analys…
+- [**3180**Star][27d] [C] [magnumripper/johntheripper](https://github.com/magnumripper/johntheripper) This is the official repo for John the Ripper, "Jumbo" version. The "bleeding-jumbo" branch is based on 1.9.0-Jumbo-1 which was released on May 14, 2019. An import of the "core" version of john this jumbo was based on (or newer) is found in the "master" branch (CVS:
+- [**3169**Star][1m] [C] [valdikss/goodbyedpi](https://github.com/valdikss/goodbyedpi) GoodbyeDPI—Passive Deep Packet Inspection blocker and Active DPI circumvention utility (for Windows)
+- [**3162**Star][1y] [Shell] [toyodadoubi/doubi](https://github.com/toyodadoubi/doubi) 一个逗比写的各种逗比脚本~
+- [**3159**Star][3d] [JS] [minbrowser/min](https://github.com/minbrowser/min) A fast, minimal browser that protects your privacy
+- [**3140**Star][6d] [C] [meetecho/janus-gateway](https://github.com/meetecho/janus-gateway) Janus WebRTC Server
+- [**3137**Star][2y] [shadowsocksr-backup/shadowsocksr-android](https://github.com/shadowsocksr-backup/shadowsocksr-android) A ShadowsocksR client for Android
+- [**3134**Star][2d] [C++] [px4/firmware](https://github.com/px4/firmware) PX4 Autopilot Software
+- [**3125**Star][3d] [Shell] [1n3/sn1per](https://github.com/1n3/sn1per) Automated pentest framework for offensive security experts
+- [**3123**Star][30d] [meirwah/awesome-incident-response](https://github.com/meirwah/awesome-incident-response) A curated list of tools for incident response
+- [**3123**Star][2m] [PS] [fireeye/commando-vm](https://github.com/fireeye/commando-vm) Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@fireeye.com
+- [**3122**Star][5d] [Go] [uber/kraken](https://github.com/uber/kraken) P2P Docker registry capable of distributing TBs of data in seconds
+- [**3121**Star][30d] [CSS] [readthedocs/sphinx_rtd_theme](https://github.com/readthedocs/sphinx_rtd_theme) Sphinx theme for readthedocs.org
+- [**3121**Star][8d] [JS] [duo-labs/cloudmapper](https://github.com/duo-labs/cloudmapper) CloudMapper helps you analyze your Amazon Web Services (AWS) environments.
+- [**3118**Star][3d] [Shell] [speed47/spectre-meltdown-checker](https://github.com/speed47/spectre-meltdown-checker) Spectre, Meltdown, Foreshadow, Fallout, RIDL, ZombieLoad vulnerability/mitigation checker for Linux & BSD
+- [**3113**Star][2d] [C] [qemu/qemu](https://github.com/qemu/qemu) Official QEMU mirror. Please see
+- [**3107**Star][2m] [Py] [byt3bl33d3r/crackmapexec](https://github.com/byt3bl33d3r/crackmapexec) A swiss army knife for pentesting networks
+- [**3106**Star][7d] [Java] [deathmarine/luyten](https://github.com/deathmarine/luyten) An Open Source Java Decompiler Gui for Procyon
+- [**3105**Star][10d] [Shell] [softwaredownload/openwrt-fanqiang](https://github.com/softwaredownload/openwrt-fanqiang) 最好的路由器翻墙、科学上网教程—OpenWrt—shadowsocks
+- [**3088**Star][9d] [Shell] [trimstray/htrace.sh](https://github.com/trimstray/htrace.sh) My simple Swiss Army knife for http/https troubleshooting and profiling.
+- [**3087**Star][3d] [Py] [tribler/tribler](https://github.com/tribler/tribler) Privacy enhanced BitTorrent client with P2P content discovery
+- [**3085**Star][11d] [Go] [tencent/bk-cmdb](https://github.com/tencent/bk-cmdb) 蓝鲸智云配置平台(BlueKing CMDB)
+- [**3084**Star][22d] [C] [unicorn-engine/unicorn](https://github.com/unicorn-engine/unicorn) Unicorn CPU emulator framework (ARM, AArch64, M68K, Mips, Sparc, X86)
+- [**3080**Star][3m] [C] [zmap/zmap](https://github.com/zmap/zmap) ZMap is a fast single packet network scanner designed for Internet-wide network surveys.
+- [**3076**Star][7m] [Go] [michenriksen/aquatone](https://github.com/michenriksen/aquatone) A Tool for Domain Flyovers
+- [**3071**Star][9m] [JS] [jipegit/osxauditor](https://github.com/jipegit/osxauditor) OS X Auditor is a free Mac OS X computer forensics tool
+- [**3065**Star][1m] [Java] [calebfenton/simplify](https://github.com/calebfenton/simplify) Generic Android Deobfuscator
+- [**3063**Star][1y] [Swift] [zhuhaow/spechtlite](https://github.com/zhuhaow/spechtlite) A rule-based proxy for macOS
+- [**3052**Star][2m] [JS] [valve/fingerprintjs](https://github.com/valve/fingerprintjs) Anonymous browser fingerprint
+- [**3049**Star][4m] [C++] [google/robotstxt](https://github.com/google/robotstxt) The repository contains Google's robots.txt parser and matcher as a C++ library (compliant to C++11).
+- [**3043**Star][3m] [Py] [spiderlabs/responder](https://github.com/spiderlabs/responder) a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.
+- [**3029**Star][2m] [Go] [gwuhaolin/lightsocks](https://github.com/gwuhaolin/lightsocks) lightweight network obfuscate proxy, based on socks5, to replace shadowsocks
+- [**3027**Star][9m] [C] [secwiki/linux-kernel-exploits](https://github.com/secwiki/linux-kernel-exploits) linux-kernel-exploits Linux平台提权漏洞集合
+- [**3001**Star][1y] [PHP] [owner888/phpspider](https://github.com/owner888/phpspider) 《我用爬虫一天时间“偷了”知乎一百万用户,只为证明PHP是世界上最好的语言 》所使用的程序
+- [**2991**Star][2d] [JS] [ntop/ntopng](https://github.com/ntop/ntopng) Web-based Traffic and Security Network Traffic Monitoring
+- [**2986**Star][7d] [Py] [guardicore/monkey](https://github.com/guardicore/monkey) Infection Monkey - An automated pentest tool
+- [**2969**Star][29d] [Go] [cookiey/yearning](https://github.com/cookiey/yearning) A most popular sql audit platform for mysql
+- [**2968**Star][2d] [ObjC] [google/santa](https://github.com/google/santa) A binary whitelisting/blacklisting system for macOS
+- [**2955**Star][4d] [Py] [twintproject/twint](https://github.com/twintproject/twint) An advanced Twitter scraping & OSINT tool written in Python that doesn't use Twitter's API, allowing you to scrape a user's followers, following, Tweets and more while evading most API limitations.
+- [**2955**Star][11d] [Go] [dominikh/go-tools](https://github.com/dominikh/go-tools) Staticcheck – a collection of static analysis tools for working with Go code
+- [**2949**Star][8d] [JS] [webgoat/webgoat](https://github.com/webgoat/webgoat) A deliberately insecure Web Application
+- [**2948**Star][2m] [Dockerfile] [thinkdevelop/free-ss-ssr](https://github.com/thinkdevelop/free-ss-ssr) SS账号、SSR账号、V2Ray账号
+- [**2947**Star][1m] [Py] [andresriancho/w3af](https://github.com/andresriancho/w3af) web application attack and audit framework, the open source web vulnerability scanner.
+- [**2945**Star][2y] [phith0n/mind-map](https://github.com/phith0n/mind-map) 各种安全相关思维导图整理收集
+- [**2942**Star][21d] [Py] [cowrie/cowrie](https://github.com/cowrie/cowrie) Cowrie SSH/Telnet Honeypot
+- [**2936**Star][1y] [Py] [danmcinerney/wifijammer](https://github.com/danmcinerney/wifijammer) Continuously jam all wifi clients/routers
+- [**2933**Star][2d] [Zeek] [zeek/zeek](https://github.com/zeek/zeek) Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.
+- [**2932**Star][11m] [Shell] [91yun/serverspeeder](https://github.com/91yun/serverspeeder) 锐速破解版
+- [**2920**Star][23d] [Go] [securego/gosec](https://github.com/securego/gosec) Golang security checker
+- [**2916**Star][2d] [JS] [evilsocket/pwnagotchi](https://github.com/evilsocket/pwnagotchi) Deep Reinforcement Learning instrumenting bettercap for WiFi pwning.
+- [**2915**Star][12d] [C] [libfuse/sshfs](https://github.com/libfuse/sshfs) A network filesystem client to connect to SSH servers
+- [**2909**Star][2d] [Py] [trustedsec/ptf](https://github.com/trustedsec/ptf) a way for modular support for up-to-date tools.
+- [**2901**Star][1y] [Py] [byt3bl33d3r/mitmf](https://github.com/byt3bl33d3r/mitmf) Framework for Man-In-The-Middle attacks
+- [**2897**Star][3d] [secfigo/awesome-fuzzing](https://github.com/secfigo/awesome-fuzzing) A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Development like root cause analysis.
+- [**2883**Star][7m] [C] [p-h-c/phc-winner-argon2](https://github.com/p-h-c/phc-winner-argon2) The password hash Argon2, winner of PHC
+- [**2877**Star][4y] [ObjC] [maciekish/iresign](https://github.com/maciekish/iresign) iReSign allows iDevice app bundles (.ipa) files to be signed or resigned with a digital certificate from Apple for distribution. This tool is aimed at enterprises users, for enterprise deployment, when the person signing the app is different than the person(s) developing it.
+- [**2858**Star][2d] [C] [lxc/lxc](https://github.com/lxc/lxc) LXC - Linux Containers
+- [**2850**Star][2d] [HTML] [ctf-wiki/ctf-wiki](https://github.com/ctf-wiki/ctf-wiki) CTF Wiki Online. Come and join us, we need you!
+- [**2850**Star][4d] [Go] [99designs/aws-vault](https://github.com/99designs/aws-vault) A vault for securely storing and accessing AWS credentials in development environments
+- [**2845**Star][2d] [ObjC] [facebook/idb](https://github.com/facebook/idb) idb is a flexible command line interface for automating iOS simulators and devices
+- [**2842**Star][5m] [Py] [instantbox/instantbox](https://github.com/instantbox/instantbox) Get a clean, ready-to-go Linux box in seconds.
+- [**2840**Star][23d] [C] [ossec/ossec-hids](https://github.com/ossec/ossec-hids) Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.
+- [**2840**Star][2m] [infosecn1nja/red-teaming-toolkit](https://github.com/infosecn1nja/red-teaming-toolkit) A collection of open source and commercial tools that aid in red team operations.
+- [**2839**Star][8m] [C++] [wangyu-/udpspeeder](https://github.com/wangyu-/udpspeeder) A Tunnel which Improves your Network Quality on a High-latency Lossy Link by using Forward Error Correction,for All Traffics(TCP/UDP/ICMP)
+- [**2837**Star][17d] [Py] [espressif/esptool](https://github.com/espressif/esptool) ESP8266 and ESP32 serial bootloader utility
+- [**2834**Star][8m] [Shell] [goreliu/wsl-terminal](https://github.com/goreliu/wsl-terminal) Terminal emulator for Windows Subsystem for Linux (WSL)
+- [**2829**Star][4m] [C] [juliocesarfort/public-pentesting-reports](https://github.com/juliocesarfort/public-pentesting-reports) Curated list of public penetration test reports released by several consulting firms and academic security groups
+- [**2829**Star][1m] [Assembly] [cirosantilli/x86-bare-metal-examples](https://github.com/cirosantilli/x86-bare-metal-examples) Dozens of minimal operating systems to learn x86 system programming. Tested on Ubuntu 17.10 host in QEMU 2.10 and real hardware. Userland cheat at:
+- [**2823**Star][2y] [CSS] [maxchehab/css-keylogging](https://github.com/maxchehab/css-keylogging) Chrome extension and Express server that exploits keylogging abilities of CSS.
+- [**2820**Star][7d] [C] [tmk/tmk_keyboard](https://github.com/tmk/tmk_keyboard) Keyboard firmwares for Atmel AVR and Cortex-M
+- [**2814**Star][8m] [C#] [quasar/quasarrat](https://github.com/quasar/quasarrat) Remote Administration Tool for Windows
+- [**2814**Star][5d] [Py] [jrohy/multi-v2ray](https://github.com/jrohy/multi-v2ray) v2ray easy delpoy & manage tool, support multiple user & protocol manage
+- [**2808**Star][2m] [paulsec/awesome-sec-talks](https://github.com/paulsec/awesome-sec-talks) A collected list of awesome security talks
+- [**2803**Star][9m] [Py] [plasma-disassembler/plasma](https://github.com/plasma-disassembler/plasma) Plasma is an interactive disassembler for x86/ARM/MIPS. It can generates indented pseudo-code with colored syntax.
+- [**2798**Star][19d] [Py] [androguard/androguard](https://github.com/androguard/androguard) Reverse engineering, Malware and goodware analysis of Android applications ... and more (ninja !)
+- [**2793**Star][6d] [C] [klange/toaruos](https://github.com/klange/toaruos) A completely-from-scratch hobby operating system: bootloader, kernel, drivers, C library, and userspace including a composited graphical UI, dynamic linker, syntax-highlighting text editor, network stack, etc.
+- [**2793**Star][2m] [Go] [kgretzky/evilginx2](https://github.com/kgretzky/evilginx2) Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication
+- [**2791**Star][7d] [C++] [xmrig/xmrig](https://github.com/xmrig/xmrig) xmrig: 门罗币挖矿代码 CPU 版
+- [**2789**Star][4y] [Lua] [loveshell/ngx_lua_waf](https://github.com/loveshell/ngx_lua_waf) ngx_lua_waf是一个基于lua-nginx-module(openresty)的web应用防火墙
+- [**2783**Star][30d] [Makefile] [shadowsocks/openwrt-shadowsocks](https://github.com/shadowsocks/openwrt-shadowsocks) Shadowsocks-libev for OpenWrt/LEDE
+- [**2782**Star][2y] [C] [seclab-ucr/intang](https://github.com/seclab-ucr/intang) research project for circumventing the "TCP reset attack" from the Great Firewall of China (GFW) by disrupting/desynchronizing the TCP Control Block (TCB) on the censorship devices.
+- [**2777**Star][9d] [C++] [qtox/qtox](https://github.com/qtox/qtox) qTox is a chat, voice, video, and file transfer IM client using the encrypted peer-to-peer Tox protocol.
+- [**2769**Star][4d] [C] [processhacker/processhacker](https://github.com/processhacker/processhacker) A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware.
+- [**2766**Star][1m] [JS] [trufflesuite/ganache-cli](https://github.com/trufflesuite/ganache-cli) Fast Ethereum RPC client for testing and development
+- [**2756**Star][2m] [secwiki/sec-chart](https://github.com/secwiki/sec-chart) 安全思维导图集合
+- [**2742**Star][5d] [TS] [webhintio/hint](https://github.com/webhintio/hint)
+- [**2742**Star][24d] [Makefile] [theos/theos](https://github.com/theos/theos) A cross-platform suite of tools for building and deploying software for iOS and other platforms.
+- [**2741**Star][8m] [Py] [p0cl4bs/wifi-pumpkin](https://github.com/P0cL4bs/WiFi-Pumpkin) Framework for Rogue Wi-Fi Access Point Attack
+- [**2739**Star][23d] [JS] [s0md3v/awesomexss](https://github.com/s0md3v/AwesomeXSS) Awesome XSS stuff
+- [**2737**Star][1y] [C] [vanhoefm/krackattacks-scripts](https://github.com/vanhoefm/krackattacks-scripts) test if clients or access points (APs) are affected by the KRACK attack against WPA2
+- [**2735**Star][18d] [JS] [cyu/rack-cors](https://github.com/cyu/rack-cors) Rack Middleware for handling Cross-Origin Resource Sharing (CORS), which makes cross-origin AJAX possible.
+- [**2730**Star][3y] [Py] [hephaest0s/usbkill](https://github.com/hephaest0s/usbkill) an anti-forensic kill-switch that waits for a change on your USB ports and then immediately shuts down your computer.
+- [**2717**Star][2d] [PS] [redcanaryco/atomic-red-team](https://github.com/redcanaryco/atomic-red-team) Small and highly portable detection tests based on MITRE's ATT&CK.
+- [**2713**Star][1m] [C] [taviso/loadlibrary](https://github.com/taviso/loadlibrary) Porting Windows Dynamic Link Libraries to Linux
+- [**2703**Star][3y] [Eagle] [samyk/magspoof](https://github.com/samyk/magspoof) A portable device that can spoof/emulate any magnetic stripe, credit card or hotel card "wirelessly", even on standard magstripe (non-NFC/RFID) readers. It can disable Chip&PIN and predict AMEX card numbers with 100% accuracy.
+- [**2701**Star][3d] [Go] [aquasecurity/trivy](https://github.com/aquasecurity/trivy) A Simple and Comprehensive Vulnerability Scanner for Containers, Suitable for CI
+- [**2698**Star][7d] [ObjC] [dantheman827/ios-app-signer](https://github.com/dantheman827/ios-app-signer) This is an app for OS X that can (re)sign apps and bundle them into ipa files that are ready to be installed on an iOS device.
+- [**2690**Star][1m] [ObjC] [kjcracks/clutch](https://github.com/kjcracks/clutch) Fast iOS executable dumper
+- [**2682**Star][22d] [Go] [google/syzkaller](https://github.com/google/syzkaller) syzkaller is an unsupervised coverage-guided kernel fuzzer
+- [**2681**Star][1y] [Py] [mame82/p4wnp1](https://github.com/mame82/p4wnp1) P4wnP1 is a highly customizable USB attack platform, based on a low cost Raspberry Pi Zero or Raspberry Pi Zero W.
+- [**2674**Star][3m] [Py] [drivendata/cookiecutter-data-science](https://github.com/drivendata/cookiecutter-data-science) A logical, reasonably standardized, but flexible project structure for doing and sharing data science work.
+- [**2662**Star][2m] [rmusser01/infosec_reference](https://github.com/rmusser01/infosec_reference) An Information Security Reference That Doesn't Suck
+- [**2654**Star][17d] [JS] [bkimminich/juice-shop](https://github.com/bkimminich/juice-shop) OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
+- [**2652**Star][3m] [Java] [frohoff/ysoserial](https://github.com/frohoff/ysoserial) A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
+- [**2645**Star][2m] [xairy/linux-kernel-exploitation](https://github.com/xairy/linux-kernel-exploitation) A bunch of links related to Linux kernel exploitation
+- [**2645**Star][1y] [HTML] [chybeta/web-security-learning](https://github.com/chybeta/web-security-learning) Web-Security-Learning
+- [**2641**Star][1y] [C] [ckolivas/cgminer](https://github.com/ckolivas/cgminer) ASIC and FPGA miner in c for bitcoin
+- [**2640**Star][2d] [Go] [slackhq/nebula](https://github.com/slackhq/nebula) A scalable overlay networking tool with a focus on performance, simplicity and security
+- [**2637**Star][4m] [Java] [teevity/ice](https://github.com/teevity/ice) AWS Usage Tool
+- [**2625**Star][8m] [leandromoreira/linux-network-performance-parameters](https://github.com/leandromoreira/linux-network-performance-parameters) Learn where some of the network sysctl variables fit into the Linux/Kernel network flow
+- [**2615**Star][2m] [Swift] [zhuhaow/nekit](https://github.com/zhuhaow/nekit) A toolkit for Network Extension Framework
+- [**2612**Star][4d] [JS] [popcorn-official/popcorn-desktop](https://github.com/popcorn-official/popcorn-desktop) Popcorn Time is a multi-platform, free software BitTorrent client that includes an integrated media player. Desktop ( Windows / Mac / Linux ) a Butter-Project Fork
+- [**2607**Star][3y] [Ruby] [arachni/arachni](https://github.com/arachni/arachni) Web Application Security Scanner Framework
+- [**2603**Star][23d] [JS] [knownsec/kcon](https://github.com/knownsec/kcon) KCon is a famous Hacker Con powered by Knownsec Team.
+- [**2601**Star][1m] [pditommaso/awesome-pipeline](https://github.com/pditommaso/awesome-pipeline) A curated list of awesome pipeline toolkits inspired by Awesome Sysadmin
+- [**2596**Star][21d] [C++] [fanout/pushpin](https://github.com/fanout/pushpin) Reverse proxy for realtime web services
+- [**2581**Star][3d] [Go] [adguardteam/adguardhome](https://github.com/adguardteam/adguardhome) Network-wide ads & trackers blocking DNS server
+- [**2581**Star][1m] [Shell] [medicean/vulapps](https://github.com/medicean/vulapps) 快速搭建各种漏洞环境(Various vulnerability environment)
+- [**2575**Star][2m] [C] [huntergregal/mimipenguin](https://github.com/huntergregal/mimipenguin) dump 当前Linux用户的登录密码
+- [**2574**Star][8y] [C] [id-software/quake](https://github.com/id-software/quake) Quake GPL Source Release
+- [**2568**Star][1m] [C] [esnet/iperf](https://github.com/esnet/iperf) A TCP, UDP, and SCTP network bandwidth measurement tool
+- [**2566**Star][2d] [C++] [danmar/cppcheck](https://github.com/danmar/cppcheck) static analysis of C/C++ code
+- [**2565**Star][5m] [Java] [google/binnavi](https://github.com/google/binnavi) a binary analysis IDE that allows to inspect, navigate, edit and annotate control flow graphs and call graphs of disassembled code.
+- [**2562**Star][3m] [Py] [greenwolf/social_mapper](https://github.com/Greenwolf/social_mapper) 对多个社交网站的用户Profile图片进行大规模的人脸识别
+- [**2553**Star][2y] [evilsocket/bettercap](https://github.com/evilsocket/bettercap) DEPRECATED, bettercap developement moved here:
+- [**2551**Star][9d] [Py] [cloudflare/flan](https://github.com/cloudflare/flan) A pretty sweet vulnerability scanner
+- [**2549**Star][6m] [C] [geohot/qira](https://github.com/geohot/qira) QEMU Interactive Runtime Analyser
+- [**2543**Star][19d] [Py] [hugsy/gef](https://github.com/hugsy/gef) GDB Enhanced Features for exploit devs & reversers
+- [**2542**Star][23d] [Go] [drk1wi/modlishka](https://github.com/drk1wi/modlishka) Modlishka. Reverse Proxy.
+- [**2533**Star][8m] [offensive-security/kali-nethunter](https://github.com/offensive-security/kali-nethunter) The Kali NetHunter Project
+- [**2533**Star][2y] [Py] [google/nogotofail](https://github.com/google/nogotofail) An on-path blackbox network traffic security testing tool
+- [**2526**Star][2d] [Shell] [teddysun/across](https://github.com/teddysun/across) This is a shell script for configure and start WireGuard VPN server
+- [**2525**Star][3y] [HTML] [dirtycow/dirtycow.github.io](https://github.com/dirtycow/dirtycow.github.io) Dirty COW
+- [**2522**Star][26d] [C] [yrutschle/sslh](https://github.com/yrutschle/sslh) Applicative Protocol Multiplexer (e.g. share SSH and HTTPS on the same port)
+- [**2516**Star][3m] [kbandla/aptnotes](https://github.com/kbandla/aptnotes) Various public documents, whitepapers and articles about APT campaigns
+- [**2508**Star][5m] [Go] [oj/gobuster](https://github.com/oj/gobuster) Directory/File, DNS and VHost busting tool written in Go
+- [**2507**Star][2m] [Java] [jboss-javassist/javassist](https://github.com/jboss-javassist/javassist) Java bytecode engineering toolkit
+- [**2507**Star][3y] [C] [dhavalkapil/icmptunnel](https://github.com/dhavalkapil/icmptunnel) Transparently tunnel your IP traffic through ICMP echo and reply packets.
+- [**2503**Star][7m] [C++] [chengr28/pcap_dnsproxy](https://github.com/chengr28/pcap_dnsproxy) Pcap_DNSProxy, a local DNS server based on packet capturing
+- [**2501**Star][28d] [Py] [ysrc/xunfeng](https://github.com/ysrc/xunfeng) 巡风是一款适用于企业内网的漏洞快速应急,巡航扫描系统。
+- [**2498**Star][6m] [taichi-framework/taichi](https://github.com/taichi-framework/taichi) A framework to use Xposed module with or without Root/Unlock bootloader, supportting Android 5.0 ~ 10.0
+- [**2497**Star][6d] [onlurking/awesome-infosec](https://github.com/onlurking/awesome-infosec) A curated list of awesome infosec courses and training resources.
+- [**2488**Star][5y] [PHP] [audi-1/sqli-labs](https://github.com/audi-1/sqli-labs) SQLI labs to test error based, Blind boolean based, Time based.
+- [**2480**Star][2y] [Py] [feross/spoofmac](https://github.com/feross/spoofmac) Spoof your MAC address
+- [**2476**Star][11m] [JS] [weixin/miaow](https://github.com/weixin/Miaow) A set of plugins for Sketch include drawing links & marks, UI Kit & Color sync, font & text replacing.
+- [**2476**Star][4m] [Go] [ne0nd0g/merlin](https://github.com/ne0nd0g/merlin) Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.
+- [**2469**Star][6d] [JS] [vitaly-t/pg-promise](https://github.com/vitaly-t/pg-promise) PostgreSQL interface for Node.js
+- [**2466**Star][30d] [Py] [smicallef/spiderfoot](https://github.com/smicallef/spiderfoot) SpiderFoot, the most complete OSINT collection and reconnaissance tool.
+- [**2464**Star][3m] [C] [martin-ger/esp_wifi_repeater](https://github.com/martin-ger/esp_wifi_repeater) A full functional WiFi Repeater (correctly: a WiFi NAT Router)
+- [**2461**Star][11m] [C#] [yck1509/confuserex](https://github.com/yck1509/confuserex) An open-source, free protector for .NET applications
+- [**2461**Star][26d] [C++] [pavel-odintsov/fastnetmon](https://github.com/pavel-odintsov/fastnetmon) very fast DDoS analyzer with sflow/netflow/mirror support
+- [**2454**Star][21d] [Shell] [rebootuser/linenum](https://github.com/rebootuser/linenum) Scripted Local Linux Enumeration & Privilege Escalation Checks
+- [**2451**Star][3y] [Py] [google/enjarify](https://github.com/google/enjarify) a tool for translating Dalvik bytecode to equivalent Java bytecode.
+- [**2444**Star][2d] [PHP] [misp/misp](https://github.com/misp/misp) MISP (core software) - Open Source Threat Intelligence and Sharing Platform (formely known as Malware Information Sharing Platform)
+- [**2429**Star][1m] [Py] [0xinfection/awesome-waf](https://github.com/0xinfection/awesome-waf)
+- [**2423**Star][2d] [Py] [pwndbg/pwndbg](https://github.com/pwndbg/pwndbg) Exploit Development and Reverse Engineering with GDB Made Easy
+- [**2420**Star][1m] [TSQL] [rapid7/metasploitable3](https://github.com/rapid7/metasploitable3) Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities.
+- [**2417**Star][26d] [Py] [infobyte/faraday](https://github.com/infobyte/faraday) Collaborative Penetration Test and Vulnerability Management Platform
+- [**2416**Star][3y] [Py] [arthepsy/ssh-audit](https://github.com/arthepsy/ssh-audit) SSH server auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)
+- [**2411**Star][26d] [Py] [xmendez/wfuzz](https://github.com/xmendez/wfuzz) Web application fuzzer
+- [**2410**Star][8m] [Py] [lionsec/katoolin](https://github.com/lionsec/katoolin) Automatically install all Kali linux tools
+- [**2407**Star][3y] [rpisec/malware](https://github.com/rpisec/malware) Course materials for Malware Analysis by RPISEC
+- [**2404**Star][20d] [Java] [m66b/netguard](https://github.com/m66b/netguard) A simple way to block access to the internet per app
+- [**2395**Star][3y] [OCaml] [facebookarchive/pfff](https://github.com/facebookarchive/pfff) Tools for code analysis, visualizations, or style-preserving source transformation.
+- [**2392**Star][1m] [Go] [xtaci/kcp-go](https://github.com/xtaci/kcp-go) A Crypto-Secure, Production-Grade Reliable-UDP Library for golang with FEC
+- [**2389**Star][8d] [C] [wireshark/wireshark](https://github.com/wireshark/wireshark) Read-only mirror of Wireshark's Git repository. GitHub won't let us disable pull requests. ☞ THEY WILL BE IGNORED HERE ☜ Please upload them at
+- [**2386**Star][2y] [Py] [secretsquirrel/the-backdoor-factory](https://github.com/secretsquirrel/the-backdoor-factory) Patch PE, ELF, Mach-O binaries with shellcode (NOT Supported)
+- [**2384**Star][2d] [Go] [owasp/amass](https://github.com/owasp/amass) In-depth Attack Surface Mapping and Asset Discovery
+- [**2381**Star][11m] [C] [haad/proxychains](https://github.com/haad/proxychains) a tool that forces any TCP connection made by any given application to follow through proxy like TOR or any other SOCKS4, SOCKS5 or HTTP(S) proxy. Supported auth-types: "user/pass" for SOCKS4/5, "basic" for HTTP.
+- [**2376**Star][2d] [Java] [mock-server/mockserver](https://github.com/mock-server/mockserver) MockServer enables easy mocking of any system you integrate with via HTTP or HTTPS with clients written in Java, JavaScript and Ruby. MockServer also includes a proxy that introspects all proxied traffic including encrypted SSL traffic and supports Port Forwarding, Web Proxying (i.e. HTTP proxy), HTTPS Tunneling Proxying (using HTTP CONNECT) and…
+- [**2376**Star][1y] [Py] [danmcinerney/lans.py](https://github.com/danmcinerney/lans.py) Inject code and spy on wifi users
+- [**2369**Star][7d] [security-onion-solutions/security-onion](https://github.com/security-onion-solutions/security-onion) Linux distro for intrusion detection, enterprise security monitoring, and log management
+- [**2369**Star][2m] [TeX] [crypto101/book](https://github.com/crypto101/book) Crypto 101, the introductory book on cryptography.
+- [**2366**Star][4m] [Go] [mlabouardy/komiser](https://github.com/mlabouardy/komiser)
+- [**2364**Star][2m] [Py] [ab77/netflix-proxy](https://github.com/ab77/netflix-proxy) Smart DNS proxy to watch Netflix
+- [**2362**Star][1m] [Lua] [snabbco/snabb](https://github.com/snabbco/snabb) Simple and fast packet networking
+- [**2357**Star][2d] [C] [domoticz/domoticz](https://github.com/domoticz/domoticz) monitor and configure various devices like: Lights, Switches, various sensors/meters like Temperature, Rain, Wind, UV, Electra, Gas, Water and much more
+- [**2352**Star][1m] [Py] [ctfd/ctfd](https://github.com/CTFd/CTFd) CTFs as you need them
+- [**2349**Star][11m] [hack-with-github/free-security-ebooks](https://github.com/hack-with-github/free-security-ebooks) Free Security and Hacking eBooks
+- [**2342**Star][3m] [Go] [vuvuzela/vuvuzela](https://github.com/vuvuzela/vuvuzela) Private messaging system that hides metadata
+- [**2340**Star][6y] [C] [stefanesser/dumpdecrypted](https://github.com/stefanesser/dumpdecrypted) Dumps decrypted mach-o files from encrypted iPhone applications from memory to disk. This tool is necessary for security researchers to be able to look under the hood of encryption.
+- [**2340**Star][1m] [C] [hfiref0x/uacme](https://github.com/hfiref0x/uacme) Defeating Windows User Account Control
+- [**2337**Star][1m] [JS] [pa11y/pa11y](https://github.com/pa11y/pa11y) Pa11y is your automated accessibility testing pal
+- [**2335**Star][3d] [C] [tsl0922/ttyd](https://github.com/tsl0922/ttyd) Share your terminal over the web
+- [**2323**Star][3d] [C#] [netchx/netch](https://github.com/netchx/netch) Game accelerator. Support Socks5, Shadowsocks, ShadowsocksR, V2Ray protocol. UDP NAT FullCone
+- [**2321**Star][11m] [yeyintminthuhtut/awesome-red-teaming](https://github.com/yeyintminthuhtut/awesome-red-teaming) List of Awesome Red Teaming Resources
+- [**2318**Star][5y] [C] [abrasive/shairport](https://github.com/abrasive/shairport) Airtunes emulator! Shairport is no longer maintained.
+- [**2304**Star][1y] [Java] [csploit/android](https://github.com/csploit/android) cSploit - The most complete and advanced IT security professional toolkit on Android.
+- [**2301**Star][15d] [HTML] [tikam02/devops-guide](https://github.com/tikam02/devops-guide) DevOps Guide from basic to advanced with Interview Questions and Notes
+- [**2295**Star][3y] [Py] [lmacken/pyrasite](https://github.com/lmacken/pyrasite) Inject code into running Python processes
+- [**2287**Star][2y] [Py] [rootphantomer/blasting_dictionary](https://github.com/rootphantomer/blasting_dictionary) 爆破字典
+- [**2284**Star][1m] [C] [moby/hyperkit](https://github.com/moby/hyperkit) A toolkit for embedding hypervisor capabilities in your application
+- [**2283**Star][5m] [Py] [guohongze/adminset](https://github.com/guohongze/adminset) 自动化运维平台:CMDB、CD、DevOps、资产管理、任务编排、持续交付、系统监控、运维管理、配置管理
+- [**2282**Star][3y] [Py] [therook/subbrute](https://github.com/therook/subbrute) A DNS meta-query spider that enumerates DNS records, and subdomains.
+- [**2281**Star][3m] [JS] [retirejs/retire.js](https://github.com/retirejs/retire.js) scanner detecting the use of JavaScript libraries with known vulnerabilities
+- [**2276**Star][24d] [JS] [talkingdata/inmap](https://github.com/talkingdata/inmap) 大数据地理可视化
+- [**2274**Star][1m] [Shell] [v1s1t0r1sh3r3/airgeddon](https://github.com/v1s1t0r1sh3r3/airgeddon) This is a multi-use bash script for Linux systems to audit wireless networks.
+- [**2270**Star][1m] [C] [aurorawright/luma3ds](https://github.com/aurorawright/luma3ds) Noob-proof (N)3DS "Custom Firmware"
+- [**2255**Star][3m] [Py] [novnc/websockify](https://github.com/novnc/websockify) Websockify is a WebSocket to TCP proxy/bridge. This allows a browser to connect to any application/server/service. Implementations in Python, C, Node.js and Ruby.
+- [**2252**Star][18d] [dumb-password-rules/dumb-password-rules](https://github.com/dumb-password-rules/dumb-password-rules) Shaming sites with dumb password rules.
+- [**2252**Star][1m] [Shell] [eliaskotlyar/xiaomi-dafang-hacks](https://github.com/eliaskotlyar/xiaomi-dafang-hacks)
+- [**2248**Star][12d] [PS] [k8gege/k8tools](https://github.com/k8gege/k8tools) K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)
+- [**2245**Star][2y] [Go] [mehrdadrad/mylg](https://github.com/mehrdadrad/mylg) Network Diagnostic Tool
+- [**2226**Star][5y] [Go] [filosottile/heartbleed](https://github.com/filosottile/heartbleed) A checker (site and tool) for CVE-2014-0160
+- [**2217**Star][1y] [JS] [cure53/h5sc](https://github.com/cure53/h5sc) HTML5 Security Cheatsheet - A collection of HTML5 related XSS attack vectors
+- [**2215**Star][6y] [C++] [codebutler/firesheep](https://github.com/codebutler/firesheep) A Firefox extension that demonstrates HTTP session hijacking attacks.
+- [**2213**Star][2d] [Go] [aquasecurity/kube-bench](https://github.com/aquasecurity/kube-bench) Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark
+- [**2211**Star][1m] [C] [texane/stlink](https://github.com/texane/stlink) stm32 discovery line linux programmer
+- [**2211**Star][6d] [Go] [google/mtail](https://github.com/google/mtail) extract whitebox monitoring data from application logs for collection in a timeseries database
+- [**2209**Star][22d] [Rust] [cloudflare/boringtun](https://github.com/cloudflare/boringtun) an implementation of the WireGuard® protocol designed for portability and speed.
+- [**2192**Star][23d] [C++] [google/bloaty](https://github.com/google/bloaty) Bloaty McBloatface: a size profiler for binaries
+- [**2189**Star][1m] [sobolevn/awesome-cryptography](https://github.com/sobolevn/awesome-cryptography) A curated list of cryptography resources and links.
+- [**2187**Star][7d] [getlantern/lantern-binaries](https://github.com/getlantern/lantern-binaries) Lantern installers binary downloads.
+- [**2186**Star][1y] [Py] [datasploit/datasploit](https://github.com/DataSploit/datasploit) 对指定目标执行多种侦查技术:企业、人、电话号码、比特币地址等
+- [**2184**Star][3y] [enddo/awesome-windows-exploitation](https://github.com/enddo/awesome-windows-exploitation) A curated list of awesome Windows Exploitation resources, and shiny things. Inspired by awesom
+- [**2183**Star][2d] [C] [armmbed/mbedtls](https://github.com/armmbed/mbedtls) An open source, portable, easy to use, readable and flexible SSL library
+- [**2179**Star][1m] [JS] [secgroundzero/warberry](https://github.com/secgroundzero/warberry) WarBerryPi - Tactical Exploitation
+- [**2173**Star][1y] [JS] [iam4x/pokemongo-webspoof](https://github.com/iam4x/pokemongo-webspoof)
+- [**2163**Star][2m] [Go] [mmatczuk/go-http-tunnel](https://github.com/mmatczuk/go-http-tunnel) Fast and secure tunnels over HTTP/2
+- [**2162**Star][1y] [C++] [maestron/botnets](https://github.com/maestron/botnets) This is a collection of #botnet source codes, unorganized. For EDUCATIONAL PURPOSES ONLY
+- [**2159**Star][1m] [Py] [commixproject/commix](https://github.com/commixproject/commix) Automated All-in-One OS command injection and exploitation tool.
+- [**2158**Star][9m] [exakat/php-static-analysis-tools](https://github.com/exakat/php-static-analysis-tools) A reviewed list of useful PHP static analysis tools
+- [**2158**Star][1m] [C] [conorpp/u2f-zero](https://github.com/conorpp/u2f-zero) U2F USB token optimized for physical security, affordability, and style
+- [**2158**Star][2m] [PHP] [antonioribeiro/tracker](https://github.com/antonioribeiro/tracker) Tracker gathers a lot of information from your requests to identify and store
+- [**2153**Star][6y] [Ruby] [plamoni/siriproxy](https://github.com/plamoni/siriproxy) A (tampering) proxy server for Apple's Siri
+- [**2149**Star][8d] [Java] [google/wycheproof](https://github.com/google/wycheproof) Project Wycheproof tests crypto libraries against known attacks.
+- [**2138**Star][2m] [Py] [trustedsec/unicorn](https://github.com/trustedsec/unicorn) Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.
+- [**2132**Star][1m] [Py] [jonathansalwan/ropgadget](https://github.com/jonathansalwan/ropgadget) This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC and MIPS architectures.
+- [**2127**Star][18d] [Assembly] [pret/pokered](https://github.com/pret/pokered) disassembly of Pokémon Red/Blue
+- [**2122**Star][2y] [Py] [rub-nds/pret](https://github.com/rub-nds/pret) Printer Exploitation Toolkit - The tool that made dumpster diving obsolete.
+- [**2118**Star][4d] [goq/telegram-list](https://github.com/goq/telegram-list) List of telegram groups, channels & bots // Список интересных групп, каналов и ботов телеграма // Список чатов для программистов
+- [**2117**Star][1m] [Py] [elceef/dnstwist](https://github.com/elceef/dnstwist) Domain name permutation engine for detecting typo squatting, phishing and corporate espionage
+- [**2116**Star][7m] [Py] [calebmadrigal/trackerjacker](https://github.com/calebmadrigal/trackerjacker) Like nmap for mapping wifi networks you're not connected to, plus device tracking
+- [**2115**Star][2d] [Py] [fortynorthsecurity/eyewitness](https://github.com/FortyNorthSecurity/EyeWitness) EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.
+- [**2114**Star][7y] [C++] [lloyd/node-memwatch](https://github.com/lloyd/node-memwatch) A NodeJS library to keep an eye on your memory usage, and discover and isolate leaks.
+- [**2107**Star][4y] [C] [hashcat/hashcat-legacy](https://github.com/hashcat/hashcat-legacy) Advanced CPU-based password recovery utility
+- [**2105**Star][8m] [Py] [linkedin/qark](https://github.com/linkedin/qark) Tool to look for several security related Android application vulnerabilities
+- [**2103**Star][3m] [yeahhub/hacking-security-ebooks](https://github.com/yeahhub/hacking-security-ebooks) Top 100 Hacking & Security E-Books (Free Download)
+- [**2103**Star][23d] [infoslack/awesome-web-hacking](https://github.com/infoslack/awesome-web-hacking) A list of web application security
+- [**2095**Star][2d] [C] [wireguard/wireguard](https://github.com/wireguard/wireguard) fast, modern, secure kernel VPN tunnel
+- [**2093**Star][22d] [Ruby] [urbanadventurer/whatweb](https://github.com/urbanadventurer/whatweb) Next generation web scanner
+- [**2084**Star][5d] [C] [flatpak/flatpak](https://github.com/flatpak/flatpak) Linux application sandboxing and distribution framework
+- [**2078**Star][1m] [Go] [theupdateframework/notary](https://github.com/theupdateframework/notary) Notary is a project that allows anyone to have trust over arbitrary collections of data
+- [**2071**Star][15d] [Shell] [wulabing/v2ray_ws-tls_bash_onekey](https://github.com/wulabing/v2ray_ws-tls_bash_onekey) V2Ray Nginx+vmess+ws+tls/ http2 over tls 一键安装脚本
+- [**2066**Star][9m] [jermic/android-crack-tool](https://github.com/jermic/android-crack-tool)
+- [**2058**Star][4m] [Py] [whaleshark-team/cobra](https://github.com/WhaleShark-Team/cobra) Source Code Security Audit (源代码安全审计)
+- [**2057**Star][1y] [bluscreenofjeff/red-team-infrastructure-wiki](https://github.com/bluscreenofjeff/red-team-infrastructure-wiki) Wiki to collect Red Team infrastructure hardening resources
+- [**2054**Star][7d] [swiftonsecurity/sysmon-config](https://github.com/swiftonsecurity/sysmon-config) Sysmon configuration file template with default high-quality event tracing
+- [**2051**Star][2m] [tanprathan/mobileapp-pentest-cheatsheet](https://github.com/tanprathan/mobileapp-pentest-cheatsheet) The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.
+- [**2048**Star][6m] [Go] [maxmcd/webtty](https://github.com/maxmcd/webtty) Share a terminal session over WebRTC
+- [**2047**Star][1m] [edoverflow/bugbounty-cheatsheet](https://github.com/edoverflow/bugbounty-cheatsheet) A list of interesting payloads, tips and tricks for bug bounty hunters.
+- [**2045**Star][2m] [C++] [lordnoteworthy/al-khaser](https://github.com/lordnoteworthy/al-khaser) Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.
+- [**2045**Star][8m] [Shell] [foospidy/payloads](https://github.com/foospidy/payloads) Git All the Payloads! A collection of web attack payloads.
+- [**2043**Star][12d] [Py] [nabla-c0d3/sslyze](https://github.com/nabla-c0d3/sslyze) Fast and powerful SSL/TLS server scanning library.
+- [**2042**Star][2y] [Py] [derv82/wifite](https://github.com/derv82/wifite) an automated wireless attack tool.
+- [**2039**Star][5d] [C++] [openthread/openthread](https://github.com/openthread/openthread) OpenThread released by Google is an open-source implementation of the Thread networking protocol
+- [**2033**Star][2d] [ObjC] [ios-control/ios-deploy](https://github.com/ios-control/ios-deploy) Install and debug iPhone apps from the command line, without using Xcode
+- [**2033**Star][2d] [Py] [sensepost/objection](https://github.com/sensepost/objection) runtimemobile exploration
+- [**2029**Star][3d] [Go] [goodrain/rainbond](https://github.com/goodrain/rainbond) Enterprise application cloud operating system(企业应用云操作系统)
+- [**2025**Star][5y] [CoffeeScript] [shadowsocks/shadowsocks-gui](https://github.com/shadowsocks/shadowsocks-gui) Shadowsocks GUI client
+- [**2024**Star][2d] [C++] [darthton/blackbone](https://github.com/darthton/blackbone) Windows memory hacking library
+- [**2017**Star][3y] [Swift] [urinx/iosapphook](https://github.com/urinx/iosapphook) 专注于非越狱环境下iOS应用逆向研究,从dylib注入,应用重签名到App Hook
+- [**2016**Star][23d] [Java] [genymobile/gnirehtet](https://github.com/genymobile/gnirehtet) Gnirehtet provides reverse tethering for Android
+- [**2016**Star][9m] [C] [dekunukem/nintendo_switch_reverse_engineering](https://github.com/dekunukem/nintendo_switch_reverse_engineering) A look at inner workings of Joycon and Nintendo Switch
+- [**2014**Star][1y] [C] [xoreaxeaxeax/rosenbridge](https://github.com/xoreaxeaxeax/rosenbridge) Hardware backdoors in some x86 CPUs
+- [**2014**Star][5d] [Java] [jeremylong/dependencycheck](https://github.com/jeremylong/dependencycheck) OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
+- [**2005**Star][4y] [C] [probablycorey/wax](https://github.com/probablycorey/wax) Wax is now being maintained by alibaba
+- [**2003**Star][2m] [Go] [skynetservices/skydns](https://github.com/skynetservices/skydns) DNS service discovery for etcd
+- [**2000**Star][1m] [qazbnm456/awesome-cve-poc](https://github.com/qazbnm456/awesome-cve-poc) A curated list of CVE PoCs.
+- [**1996**Star][29d] [Java] [elderdrivers/edxposed](https://github.com/elderdrivers/edxposed) Elder driver Xposed Framework.
+- [**1994**Star][7m] [Py] [fsecurelabs/drozer](https://github.com/FSecureLABS/drozer) The Leading Security Assessment Framework for Android.
+- [**1994**Star][3m] [infosecn1nja/ad-attack-defense](https://github.com/infosecn1nja/ad-attack-defense) Attack and defend active directory using modern post exploitation adversary tradecraft activity
+- [**1994**Star][27d] [Swift] [github/softu2f](https://github.com/github/softu2f) Software U2F authenticator for macOS
+- [**1992**Star][5d] [C#] [mathewsachin/captura](https://github.com/mathewsachin/captura) Capture Screen, Audio, Cursor, Mouse Clicks and Keystrokes
+- [**1990**Star][8d] [HTML] [gtfobins/gtfobins.github.io](https://github.com/gtfobins/gtfobins.github.io) Curated list of Unix binaries that can be exploited to bypass system security restrictions
+- [**1989**Star][4y] [Go] [yahoo/gryffin](https://github.com/yahoo/gryffin) Gryffin is a large scale web security scanning platform.
+- [**1989**Star][2m] [C++] [asmjit/asmjit](https://github.com/asmjit/asmjit) Complete x86/x64 JIT and AOT Assembler for C++
+- [**1987**Star][2y] [dloss/python-pentest-tools](https://github.com/dloss/python-pentest-tools) Python tools for penetration testers
+- [**1977**Star][5d] [Go] [projectdiscovery/subfinder](https://github.com/projectdiscovery/subfinder) Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.
+- [**1977**Star][5d] [Go] [projectdiscovery/subfinder](https://github.com/projectdiscovery/subfinder) 使用Passive Sources, Search Engines, Pastebins, Internet Archives等查找子域名
+- [**1972**Star][1m] [Py] [momosecurity/aswan](https://github.com/momosecurity/aswan) 陌陌风控系统静态规则引擎,零基础简易便捷的配置多种复杂规则,实时高效管控用户异常行为。
+- [**1971**Star][5d] [Py] [j3ssie/osmedeus](https://github.com/j3ssie/osmedeus) Fully automated offensive security framework for reconnaissance and vulnerability scanning
+- [**1966**Star][11d] [Go] [ullaakut/cameradar](https://github.com/Ullaakut/cameradar) Cameradar hacks its way into RTSP videosurveillance cameras
+- [**1966**Star][9m] [JS] [weichiachang/stacks-cli](https://github.com/weichiachang/stacks-cli) Check website stack from the terminal
+- [**1966**Star][1y] [BitBake] [1n3/intruderpayloads](https://github.com/1n3/intruderpayloads) A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.
+- [**1955**Star][7d] [Perl] [spiderlabs/owasp-modsecurity-crs](https://github.com/spiderlabs/owasp-modsecurity-crs) OWASP ModSecurity Core Rule Set (CRS) Project (Official Repository)
+- [**1953**Star][2y] [obfuscator-llvm/obfuscator](https://github.com/obfuscator-llvm/obfuscator) Obfuscator-LLVM
+- [**1952**Star][1y] [Go] [hyperhq/hyperd](https://github.com/hyperhq/hyperd) HyperContainer Daemon
+- [**1951**Star][8d] [Py] [cea-sec/miasm](https://github.com/cea-sec/miasm) Reverse engineering framework in Python
+- [**1947**Star][29d] [Py] [nixawk/pentest-wiki](https://github.com/nixawk/pentest-wiki) PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.
+- [**1945**Star][5d] [C] [microsoft/procdump-for-linux](https://github.com/microsoft/procdump-for-linux) A Linux version of the ProcDump Sysinternals tool
+- [**1942**Star][3y] [C#] [lazocoder/windows-hacks](https://github.com/lazocoder/windows-hacks) Creative and unusual things that can be done with the Windows API.
+- [**1938**Star][4m] [C] [meituan-dianping/logan](https://github.com/meituan-dianping/logan) Logan is a lightweight case logging system based on mobile platform.
+- [**1938**Star][7d] [Go] [zalando/skipper](https://github.com/zalando/skipper) An HTTP router and reverse proxy for service composition, including use cases like Kubernetes Ingress
+- [**1935**Star][19d] [Go] [mpolden/echoip](https://github.com/mpolden/echoip) IP address lookup service
+- [**1933**Star][5m] [C] [darkk/redsocks](https://github.com/darkk/redsocks) transparent TCP-to-proxy redirector
+- [**1923**Star][3y] [Py] [aoncyberlabs/windows-exploit-suggester](https://github.com/AonCyberLabs/Windows-Exploit-Suggester) This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules available for the missing bulletins.
+- [**1920**Star][4y] [Py] [ziggear/shadowsocks](https://github.com/ziggear/shadowsocks) backup of
+- [**1920**Star][2d] [C++] [powerdns/pdns](https://github.com/powerdns/pdns) PowerDNS
+- [**1920**Star][9d] [CSS] [cyb3rward0g/helk](https://github.com/cyb3rward0g/helk) The Hunting ELK
+- [**1918**Star][3m] [toolswatch/blackhat-arsenal-tools](https://github.com/toolswatch/blackhat-arsenal-tools) Official Black Hat Arsenal Security Tools Repository
+- [**1917**Star][2d] [C] [ntop/ndpi](https://github.com/ntop/ndpi) Open Source Deep Packet Inspection Software Toolkit
+- [**1915**Star][18d] [Py] [lanjelot/patator](https://github.com/lanjelot/patator) Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.
+- [**1914**Star][7d] [Go] [solo-io/gloo](https://github.com/solo-io/gloo) An Envoy-Powered API Gateway
+- [**1914**Star][2d] [chaitin/xray](https://github.com/chaitin/xray) xray 安全评估工具 | 使用之前务必先阅读文档
+- [**1903**Star][3m] [Go] [minishift/minishift](https://github.com/minishift/minishift) Run OpenShift 3.x locally
+- [**1901**Star][9d] [C] [chipsec/chipsec](https://github.com/chipsec/chipsec) Platform Security Assessment Framework
+- [**1900**Star][1y] [Py] [derv82/wifite2](https://github.com/derv82/wifite2) Rewrite of the popular wireless network auditor, "wifite"
+- [**1898**Star][3d] [C++] [mhammond/pywin32](https://github.com/mhammond/pywin32) Python for Windows (pywin32) Extensions
+- [**1896**Star][7d] [Shell] [toniblyx/prowler](https://github.com/toniblyx/prowler) AWS Security Best Practices Assessment, Auditing, Hardening and Forensics Readiness Tool. It follows guidelines of the CIS Amazon Web Services Foundations Benchmark and DOZENS of additional checks including GDPR and HIPAA (+100). Official CIS for AWS guide:
+- [**1893**Star][6d] [Py] [mozilla/mozdef](https://github.com/mozilla/mozdef) Mozilla Enterprise Defense Platform
+- [**1893**Star][6m] [Java] [fuzion24/justtrustme](https://github.com/fuzion24/justtrustme) An xposed module that disables SSL certificate checking for the purposes of auditing an app with cert pinning
+- [**1886**Star][4m] [C] [shadowsocks/simple-obfs](https://github.com/shadowsocks/simple-obfs) A simple obfuscating tool (Deprecated)
+- [**1884**Star][1y] [Py] [aploium/zmirror](https://github.com/aploium/zmirror) The next-gen reverse proxy for full site mirroring
+- [**1880**Star][4m] [Py] [python-security/pyt](https://github.com/python-security/pyt) A Static Analysis Tool for Detecting Security Vulnerabilities in Python Web Applications
+- [**1878**Star][16d] [YARA] [yara-rules/rules](https://github.com/yara-rules/rules) Repository of yara rules
+- [**1878**Star][5y] [C++] [tum-vision/lsd_slam](https://github.com/tum-vision/lsd_slam) LSD-SLAM
+- [**1878**Star][2m] [Py] [pycqa/bandit](https://github.com/pycqa/bandit) find common security issues in Python code.
+- [**1877**Star][2d] [C] [merbanan/rtl_433](https://github.com/merbanan/rtl_433) Program to decode traffic from Devices that are broadcasting on 433.9 MHz like temperature sensors
+- [**1876**Star][9d] [olivierlaflamme/cheatsheet-god](https://github.com/olivierlaflamme/cheatsheet-god) Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet
+- [**1876**Star][27d] [hmaverickadams/beginner-network-pentesting](https://github.com/hmaverickadams/beginner-network-pentesting) Notes for Beginner Network Pentesting Course
+- [**1873**Star][12d] [Py] [aquasecurity/kube-hunter](https://github.com/aquasecurity/kube-hunter) Hunt for security weaknesses in Kubernetes clusters
+- [**1870**Star][5d] [C#] [hmbsbige/shadowsocksr-windows](https://github.com/hmbsbige/shadowsocksr-windows) 【自用】Bug-Oriented Programming
+- [**1869**Star][6d] [Java] [adoptopenjdk/jitwatch](https://github.com/adoptopenjdk/jitwatch) Log analyser / visualiser for Java HotSpot JIT compiler. Inspect inlining decisions, hot methods, bytecode, and assembly. View results in the JavaFX user interface.
+- [**1865**Star][6d] [C++] [acidanthera/lilu](https://github.com/acidanthera/Lilu) Arbitrary kext and process patching on macOS
+- [**1865**Star][10m] [PHP] [bartblaze/php-backdoors](https://github.com/bartblaze/php-backdoors) A collection of PHP backdoors. For educational or testing purposes only.
+- [**1864**Star][23d] [C] [tinyproxy/tinyproxy](https://github.com/tinyproxy/tinyproxy) a light-weight HTTP/HTTPS proxy daemon for POSIX operating systems
+- [**1862**Star][4y] [ObjC] [xcodeghostsource/xcodeghost](https://github.com/xcodeghostsource/xcodeghost) "XcodeGhost" Source
+- [**1860**Star][9d] [Lua] [vulnerscom/nmap-vulners](https://github.com/vulnerscom/nmap-vulners) NSE script based on Vulners.com API
+- [**1857**Star][5m] [bypass007/emergency-response-notes](https://github.com/bypass007/emergency-response-notes) 应急响应实战笔记,一个安全工程师的自我修养。
+- [**1855**Star][2m] [Py] [pwnlandia/mhn](https://github.com/pwnlandia/mhn) Modern Honey Network
+- [**1854**Star][5d] [TS] [snyk/snyk](https://github.com/snyk/snyk) CLI and build-time tool to find & fix known vulnerabilities in open-source dependencies
+- [**1854**Star][11m] [C++] [googlecreativelab/open-nsynth-super](https://github.com/googlecreativelab/open-nsynth-super) Open NSynth Super is an experimental physical interface for the NSynth algorithm
+- [**1853**Star][2d] [Py] [bregman-arie/devops-interview-questions](https://github.com/bregman-arie/devops-interview-questions) Linux, Jenkins, AWS, SRE, Prometheus, Docker, Python, Ansible, Git, Kubernetes, Terraform, OpenStack, SQL, NoSQL, Azure, GCP, DNS, Elastic
+- [**1853**Star][4m] [Shell] [arismelachroinos/lscript](https://github.com/arismelachroinos/lscript) The LAZY script will make your life easier, and of course faster.
+- [**1852**Star][3d] [C] [github/glb-director](https://github.com/github/glb-director) GitHub Load Balancer Director and supporting tooling.
+- [**1851**Star][1y] [Java] [jindrapetrik/jpexs-decompiler](https://github.com/jindrapetrik/jpexs-decompiler) JPEXS Free Flash Decompiler
+- [**1848**Star][6m] [Assembly] [pooler/cpuminer](https://github.com/pooler/cpuminer) cpuminer:莱特币和比特币的多线程 CPU 矿机
+- [**1847**Star][8m] [Py] [netflix-skunkworks/stethoscope](https://github.com/Netflix-Skunkworks/stethoscope) Personalized, user-focused recommendations for employee information security.
+- [**1842**Star][1m] [Jupyter Notebook] [hunters-forge/threathunter-playbook](https://github.com/hunters-forge/ThreatHunter-Playbook) A Threat hunter's playbook to aid the development of techniques and hypothesis for hunting campaigns.
+- [**1842**Star][1y] [Java] [yeriomin/yalpstore](https://github.com/yeriomin/yalpstore) Download apks from Google Play Store
+- [**1842**Star][2d] [C++] [pytorch/glow](https://github.com/pytorch/glow) Compiler for Neural Network hardware accelerators
+- [**1841**Star][2m] [C] [retroplasma/earth-reverse-engineering](https://github.com/retroplasma/earth-reverse-engineering) Reversing Google's 3D satellite mode
+- [**1839**Star][3y] [Java] [chora10/cknife](https://github.com/chora10/cknife) Cknife
+- [**1838**Star][1y] [Py] [jinnlynn/genpac](https://github.com/jinnlynn/genpac) PAC/Dnsmasq/Wingy file Generator, working with gfwlist, support custom rules.
+- [**1830**Star][2m] [Go] [influxdata/kapacitor](https://github.com/influxdata/kapacitor) Open source framework for processing, monitoring, and alerting on time series data
+- [**1828**Star][3m] [JS] [coreybutler/node-windows](https://github.com/coreybutler/node-windows) Windows support for Node.JS scripts (daemons, eventlog, UAC, etc).
+- [**1828**Star][1y] [CSS] [ctfs/write-ups-2015](https://github.com/ctfs/write-ups-2015) Wiki-like CTF write-ups repository, maintained by the community. 2015
+- [**1824**Star][5d] [Py] [trailofbits/manticore](https://github.com/trailofbits/manticore) Symbolic execution tool
+- [**1819**Star][6d] [C] [mgba-emu/mgba](https://github.com/mgba-emu/mgba) mGBA Game Boy Advance Emulator
+- [**1818**Star][2m] [djadmin/awesome-bug-bounty](https://github.com/djadmin/awesome-bug-bounty) A comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.
+- [**1815**Star][5m] [Py] [veil-framework/veil](https://github.com/veil-framework/veil) generate metasploit payloads that bypass common anti-virus solutions
+- [**1814**Star][6m] [C++] [iagox86/dnscat2](https://github.com/iagox86/dnscat2) create an encrypted command-and-control (C&C) channel over the DNS protocol, which is an effective tunnel out of almost every network.
+- [**1804**Star][10d] [Go] [gdamore/tcell](https://github.com/gdamore/tcell) Tcell is an alternate terminal package, similar in some ways to termbox, but better in others.
+- [**1801**Star][12m] [Go] [intelsdi-x/snap](https://github.com/intelsdi-x/snap) an open telemetry framework designed to simplify the collection, processing and publishing of system data through a single API.
+- [**1800**Star][3y] [ObjC] [kpwn/yalu102](https://github.com/kpwn/yalu102) incomplete iOS 10.2 jailbreak for 64 bit devices by qwertyoruiopz and marcograssi
+- [**1795**Star][7m] [Py] [lijiejie/subdomainsbrute](https://github.com/lijiejie/subdomainsbrute) A fast sub domain brute tool for pentesters
+- [**1790**Star][12m] [Py] [ctfs/write-ups-2017](https://github.com/ctfs/write-ups-2017) Wiki-like CTF write-ups repository, maintained by the community. 2017
+- [**1785**Star][1y] [aozhimin/ios-monitor-platform](https://github.com/aozhimin/ios-monitor-platform)
+- [**1784**Star][16d] [Shell] [pirate/wireguard-docs](https://github.com/pirate/wireguard-docs)
+- [**1781**Star][15d] [Shell] [leebaird/discover](https://github.com/leebaird/discover) Custom bash scripts used to automate various penetration testing tasks including recon, scanning, parsing, and creating malicious payloads and listeners with Metasploit.
+- [**1779**Star][4y] [caesar0301/awesome-pcaptools](https://github.com/caesar0301/awesome-pcaptools) A collection of tools developed by other researchers in the Computer Science area to process network traces. All the right reserved for the original authors.
+- [**1778**Star][15d] [C++] [apitrace/apitrace](https://github.com/apitrace/apitrace) Tools for tracing OpenGL, Direct3D, and other graphics APIs
+- [**1777**Star][7m] [C++] [wrbug/dumpdex](https://github.com/wrbug/dumpdex) Android unpack
+- [**1777**Star][7d] [PHP] [ezyang/htmlpurifier](https://github.com/ezyang/htmlpurifier) Standards compliant HTML filter written in PHP
+- [**1777**Star][5d] [Go] [convox/rack](https://github.com/convox/rack) Private PaaS built on native AWS services for maximum privacy and minimum upkeep
+- [**1774**Star][3y] [ObjC] [tapwork/heapinspector-for-ios](https://github.com/tapwork/heapinspector-for-ios) Find memory issues & leaks in your iOS app without instruments
+- [**1774**Star][3m] [Py] [epinna/weevely3](https://github.com/epinna/weevely3) Weaponized web shell
+- [**1772**Star][2y] [JS] [cazala/coin-hive](https://github.com/cazala/coin-hive) CoinHive cryptocurrency miner for node.js
+- [**1770**Star][3y] [ObjC] [alibaba/wax](https://github.com/alibaba/wax) Wax is a framework that lets you write native iPhone apps in Lua.
+- [**1761**Star][6d] [C] [google/wuffs](https://github.com/google/wuffs) Wrangling Untrusted File Formats Safely
+- [**1761**Star][2y] [CSS] [b374k/b374k](https://github.com/b374k/b374k) PHP Webshell with handy features
+- [**1760**Star][3y] [Go] [elastic/logstash-forwarder](https://github.com/elastic/logstash-forwarder) An experiment to cut logs in preparation for processing elsewhere. Replaced by Filebeat:
+- [**1758**Star][12m] [JS] [puppeteer/examples](https://github.com/puppeteer/examples) Use case-driven examples for using Puppeteer and headless chrome
+- [**1756**Star][10d] [17mon/china_ip_list](https://github.com/17mon/china_ip_list)
+- [**1754**Star][2m] [onethawt/idaplugins-list](https://github.com/onethawt/idaplugins-list) A list of IDA Plugins
+- [**1747**Star][2d] [PHP] [wordpress/wordpress-coding-standards](https://github.com/wordpress/wordpress-coding-standards) PHP_CodeSniffer rules (sniffs) to enforce WordPress coding conventions
+- [**1745**Star][1y] [PS] [fuzzysecurity/powershell-suite](https://github.com/fuzzysecurity/powershell-suite) My musings with PowerShell
+- [**1744**Star][1y] [coreb1t/awesome-pentest-cheat-sheets](https://github.com/coreb1t/awesome-pentest-cheat-sheets) Collection of the cheat sheets useful for pentesting
+- [**1742**Star][3m] [tunz/js-vuln-db](https://github.com/tunz/js-vuln-db) A collection of JavaScript engine CVEs with PoCs
+- [**1739**Star][21d] [ngalongc/bug-bounty-reference](https://github.com/ngalongc/bug-bounty-reference) Inspired by
+- [**1738**Star][2y] [Go] [vzex/dog-tunnel](https://github.com/vzex/dog-tunnel) p2p tunnel,(udp mode work with kcp,
+- [**1735**Star][2m] [PHP] [orangetw/my-ctf-web-challenges](https://github.com/orangetw/my-ctf-web-challenges) Collection of CTF Web challenges I made
+- [**1731**Star][1m] [PS] [fireeye/flare-vm](https://github.com/fireeye/flare-vm) FireEye Labs Advanced Reverse Engineering
+- [**1730**Star][3y] [Go] [s-rah/onionscan](https://github.com/s-rah/onionscan) OnionScan is a free and open source tool for investigating the Dark Web.
+- [**1730**Star][6m] [Smali] [ahmyth/ahmyth-android-rat](https://github.com/ahmyth/ahmyth-android-rat) Android Remote Administration Tool
+- [**1723**Star][14d] [selierlin/share-ssr-v2ray](https://github.com/selierlin/share-ssr-v2ray)
+- [**1719**Star][4d] [C] [google/honggfuzz](https://github.com/google/honggfuzz) Security oriented fuzzer with powerful analysis options. Supports evolutionary, feedback-driven fuzzing based on code coverage (software- and hardware-based)
+- [**1718**Star][9m] [Py] [constverum/proxybroker](https://github.com/constverum/proxybroker) Proxy [Finder | Checker | Server]. HTTP(S) & SOCKS
+- [**1717**Star][4m] [Py] [lgandx/responder](https://github.com/lgandx/responder) Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.
+- [**1714**Star][5d] [Ruby] [cliffe/secgen](https://github.com/cliffe/secgen) Create randomly insecure VMs
+- [**1710**Star][1m] [Go] [eth0izzle/shhgit](https://github.com/eth0izzle/shhgit) Find GitHub secrets in real time
+- [**1709**Star][3m] [Py] [anorov/cloudflare-scrape](https://github.com/anorov/cloudflare-scrape) A Python module to bypass Cloudflare's anti-bot page.
+- [**1709**Star][1y] [Java] [ac-pm/inspeckage](https://github.com/ac-pm/inspeckage) Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)
+- [**1707**Star][3d] [TSQL] [brentozarultd/sql-server-first-responder-kit](https://github.com/brentozarultd/sql-server-first-responder-kit) sp_Blitz, sp_BlitzCache, sp_BlitzFirst, sp_BlitzIndex, and other SQL Server scripts for health checks and performance tuning.
+- [**1706**Star][16d] [Go] [hashicorp/memberlist](https://github.com/hashicorp/memberlist) Golang package for gossip based membership and failure detection
+- [**1700**Star][8m] [Py] [guelfoweb/knock](https://github.com/guelfoweb/knock) Knock Subdomain Scan
+- [**1697**Star][9m] [CSS] [bagder/http2-explained](https://github.com/bagder/http2-explained) A detailed document explaining and documenting HTTP/2, the successor to the widely popular HTTP/1.1 protocol
+- [**1696**Star][3m] [PHP] [xtr4nge/fruitywifi](https://github.com/xtr4nge/fruitywifi) FruityWiFi is a wireless network auditing tool. The application can be installed in any Debian based system (Jessie) adding the extra packages. Tested in Debian, Kali Linux, Kali Linux ARM (Raspberry Pi), Raspbian (Raspberry Pi), Pwnpi (Raspberry Pi), Bugtraq, NetHunter.
+- [**1696**Star][1y] [Swift] [haxpor/potatso](https://github.com/haxpor/potatso) Potatso is an iOS client that implements Shadowsocks proxy with the leverage of NetworkExtension framework. ***This project is unmaintained, try taking a look at this fork
+- [**1695**Star][6m] [Py] [yelp/osxcollector](https://github.com/yelp/osxcollector) A forensic evidence collection & analysis toolkit for OS X
+- [**1695**Star][3y] [CoffeeScript] [okturtles/dnschain](https://github.com/okturtles/dnschain) A blockchain-based DNS + HTTP server that fixes HTTPS security, and more!
+- [**1689**Star][5m] [C] [networkprotocol/netcode.io](https://github.com/networkprotocol/netcode.io) A protocol for secure client/server connections over UDP
+- [**1687**Star][5m] [JS] [expressjs/csurf](https://github.com/expressjs/csurf) CSRF token middleware
+- [**1687**Star][15d] [HTML] [chromium/badssl.com](https://github.com/chromium/badssl.com)
+- [**1686**Star][8m] [Makefile] [raspberrypi/noobs](https://github.com/raspberrypi/noobs) NOOBS (New Out Of Box Software) - An easy Operating System install manager for the Raspberry Pi
+- [**1685**Star][4m] [R] [briatte/awesome-network-analysis](https://github.com/briatte/awesome-network-analysis) A curated list of awesome network analysis resources.
+- [**1683**Star][1y] [owasp/devguide](https://github.com/owasp/devguide) The OWASP Guide
+- [**1682**Star][3m] [Py] [rootm0s/winpwnage](https://github.com/rootm0s/winpwnage) UAC bypass, Elevate, Persistence and Execution methods
+- [**1677**Star][30d] [Swift] [pmusolino/wormholy](https://github.com/pmusolino/wormholy) iOS network debugging, like a wizard 🧙♂️
+- [**1674**Star][2d] [C++] [microsoft/detours](https://github.com/microsoft/detours) Detours is a software package for monitoring and instrumenting API calls on Windows. It is distributed in source code form.
+- [**1671**Star][7m] [C++] [yegord/snowman](https://github.com/yegord/snowman) a native code to C/C++ decompiler, supporting x86, AMD64, and ARM architectures
+ - [IDA插件](https://github.com/yegord/snowman/tree/master/src/ida-plugin)
+ - [snowman](https://github.com/yegord/snowman/tree/master/src/snowman) QT界面
+ - [nocode](https://github.com/yegord/snowman/tree/master/src/nocode) 命令行工具
+ - [nc](https://github.com/yegord/snowman/tree/master/src/nc) 核心代码,可作为库使用
+- [**1668**Star][2m] [NSIS] [angryip/ipscan](https://github.com/angryip/ipscan) Angry IP Scanner - fast and friendly network scanner
+- [**1666**Star][2d] [Java] [apache/geode](https://github.com/apache/geode) Apache Geode
+- [**1663**Star][4y] [Java] [dodola/hotfix](https://github.com/dodola/hotfix) 安卓App热补丁动态修复框架
+- [**1661**Star][6m] [C] [easyhook/easyhook](https://github.com/easyhook/easyhook) The reinvention of Windows API Hooking
+- [**1661**Star][2d] [Py] [cea-sec/ivre](https://github.com/cea-sec/ivre) Network recon framework.
+- [**1659**Star][10d] [roave/securityadvisories](https://github.com/roave/securityadvisories) ensures that your application doesn't have installed dependencies with known security vulnerabilities
+- [**1656**Star][6d] [JS] [tylerbrock/mongo-hacker](https://github.com/tylerbrock/mongo-hacker) MongoDB Shell Enhancements for Hackers
+- [**1655**Star][3m] [Py] [boppreh/keyboard](https://github.com/boppreh/keyboard) Hook and simulate global keyboard events on Windows and Linux.
+- [**1654**Star][2d] [JS] [ghacksuserjs/ghacks-user.js](https://github.com/ghacksuserjs/ghacks-user.js) An ongoing comprehensive user.js template for configuring and hardening Firefox privacy, security and anti-fingerprinting
+- [**1652**Star][2y] [Shell] [juude/droidreverse](https://github.com/juude/droidreverse) reverse engineering tools for android
+- [**1652**Star][7m] [dsasmblr/game-hacking](https://github.com/dsasmblr/game-hacking) Tutorials, tools, and more as related to reverse engineering video games.
+- [**1651**Star][10m] [JS] [evilcos/xssor2](https://github.com/evilcos/xssor2) XSS'OR - Hack with JavaScript.
+- [**1650**Star][1m] [Py] [ehco1996/django-sspanel](https://github.com/ehco1996/django-sspanel) 用diango开发的全新的shadowsocks网络面板
+- [**1650**Star][7d] [HTML] [clong/detectionlab](https://github.com/clong/detectionlab) Vagrant & Packer scripts to build a lab environment complete with security tooling and logging best practices
+- [**1649**Star][1y] [Py] [evyatarmeged/raccoon](https://github.com/evyatarmeged/raccoon) A high performance offensive security tool for reconnaissance and vulnerability scanning
+- [**1648**Star][2d] [C#] [jbevain/cecil](https://github.com/jbevain/cecil) Cecil is a library to inspect, modify and create .NET programs and libraries.
+- [**1645**Star][3y] [JS] [camwiegert/baffle](https://github.com/camwiegert/baffle) A tiny javascript library for obfuscating and revealing text in DOM elements.
+- [**1643**Star][9m] [tylerha97/awesome-reversing](https://github.com/tylerha97/awesome-reversing) A curated list of awesome reversing resources
+- [**1643**Star][11m] [Java] [fesh0r/fernflower](https://github.com/fesh0r/fernflower) Unofficial mirror of FernFlower Java decompiler (All pulls should be submitted upstream)
+- [**1638**Star][4y] [Py] [ctfs/write-ups-2014](https://github.com/ctfs/write-ups-2014) Wiki-like CTF write-ups repository, maintained by the community. 2014
+- [**1638**Star][11m] [C] [dlundquist/sniproxy](https://github.com/dlundquist/sniproxy) Proxies incoming HTTP and TLS connections based on the hostname contained in the initial request of the TCP session.
+- [**1638**Star][4y] [Py] [ctfs/write-ups-2014](https://github.com/ctfs/write-ups-2014) Wiki-like CTF write-ups repository, maintained by the community. 2014
+- [**1636**Star][4m] [Java] [jaredrummler/androidprocesses](https://github.com/jaredrummler/androidprocesses) DEPRECATED
+- [**1634**Star][14d] [Go] [awnumar/memguard](https://github.com/awnumar/memguard) Secure software enclave for storage of sensitive information in memory.
+- [**1631**Star][6m] [Objective-C++] [tencent/oomdetector](https://github.com/tencent/oomdetector) OOMDetector is a memory monitoring component for iOS which provides you with OOM monitoring, memory allocation monitoring, memory leak detection and other functions.
+- [**1630**Star][6d] [JS] [efforg/privacybadger](https://github.com/efforg/privacybadger) Privacy Badger is a browser extension that automatically learns to block invisible trackers.
+- [**1630**Star][29d] [PHP] [c0ny1/upload-labs](https://github.com/c0ny1/upload-labs) 一个帮你总结所有类型的上传漏洞的靶场
+- [**1629**Star][5d] [sarojaba/awesome-devblog](https://github.com/sarojaba/awesome-devblog) 어썸데브블로그. 국내 개발 블로그 모음(only 실명으로).
+- [**1624**Star][2y] [jhaddix/tbhm](https://github.com/jhaddix/tbhm) The Bug Hunters Methodology
+- [**1624**Star][4m] [CSS] [functionclub/v2ray.fun](https://github.com/functionclub/v2ray.fun) 正在开发的全新 V2ray.Fun
+- [**1621**Star][2m] [Shell] [internetwache/gittools](https://github.com/internetwache/gittools) find websites with their .git repository available to the public
+- [**1618**Star][28d] [Java] [tiann/epic](https://github.com/tiann/epic) Dynamic java method AOP hook for Android(continution of Dexposed on ART), Supporting 4.0~10.0
+- [**1615**Star][2y] [JS] [addyosmani/a11y](https://github.com/addyosmani/a11y) Accessibility audit tooling for the web (beta)
+- [**1614**Star][2m] [Go] [ysrc/yulong-hids](https://github.com/ysrc/yulong-hids) 一款由 YSRC 开源的主机入侵检测系统
+- [**1614**Star][7m] [Go] [sipt/shuttle](https://github.com/sipt/shuttle) A web proxy in Golang with amazing features.
+- [**1612**Star][3y] [Makefile] [drizzlerisk/drizzledumper](https://github.com/drizzlerisk/drizzledumper) a memory-search-based Android unpack tool.
+- [**1608**Star][9m] [JS] [localtunnel/server](https://github.com/localtunnel/server) server for localtunnel.me
+- [**1608**Star][10m] [C] [nmikhailov/validity90](https://github.com/nmikhailov/validity90) Reverse engineering of Validity/Synaptics 138a:0090, 138a:0094, 138a:0097, 06cb:0081, 06cb:009a fingerprint readers protocol
+- [**1606**Star][2d] [C++] [lief-project/lief](https://github.com/lief-project/lief) Library to Instrument Executable Formats
+- [**1602**Star][6m] [Py] [w1109790800/penetration](https://github.com/w1109790800/penetration) 渗透 超全面的渗透资料
+- [**1601**Star][1y] [Py] [nccgroup/scout2](https://github.com/nccgroup/Scout2) Security auditing tool for AWS environments
+- [**1601**Star][5m] [Py] [mozilla/cipherscan](https://github.com/mozilla/cipherscan) A very simple way to find out which SSL ciphersuites are supported by a target.
+- [**1600**Star][5d] [Go] [bitnami-labs/sealed-secrets](https://github.com/bitnami-labs/sealed-secrets) A Kubernetes controller and tool for one-way encrypted Secrets
+- [**1599**Star][2y] [JS] [keraf/nocoin](https://github.com/keraf/nocoin) No Coin is a tiny browser extension aiming to block coin miners such as Coinhive.
+- [**1598**Star][15d] [Java] [spotbugs/spotbugs](https://github.com/spotbugs/spotbugs) SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.
+- [**1597**Star][3m] [Py] [knownsec/pocsuite](https://github.com/knownsec/pocsuite) This project has stopped to maintenance, please to
+- [**1591**Star][28d] [C] [ntop/n2n](https://github.com/ntop/n2n) Peer-to-peer VPN
+- [**1591**Star][24d] [ivrodriguezca/re-ios-apps](https://github.com/ivrodriguezca/re-ios-apps) A completely free, open source and online course about Reverse Engineering iOS Applications.
+- [**1584**Star][6m] [Ruby] [brunofacca/zen-rails-security-checklist](https://github.com/brunofacca/zen-rails-security-checklist) Checklist of security precautions for Ruby on Rails applications.
+- [**1583**Star][4y] [l3m0n/pentest_study](https://github.com/l3m0n/pentest_study) 从零开始内网渗透学习
+- [**1582**Star][1m] [ObjC] [ealeksandrov/provisionql](https://github.com/ealeksandrov/provisionql) Quick Look plugin for apps and provisioning profile files
+- [**1581**Star][1y] [C] [qihoo360/phptrace](https://github.com/qihoo360/phptrace) A tracing and troubleshooting tool for PHP scripts.
+- [**1570**Star][2m] [C] [firmianay/ctf-all-in-one](https://github.com/firmianay/ctf-all-in-one) CTF竞赛入门指南
+- [**1569**Star][2y] [C] [samyk/pwnat](https://github.com/samyk/pwnat) The only tool and technique to punch holes through firewalls/NATs where both clients and server can be behind separate NATs without any 3rd party involvement. Pwnat uses a newly developed technique, exploiting a property of NAT translation tables, with no 3rd party, port forwarding, DMZ, router administrative requirements, STUN/TURN/UPnP/ICE, or…
+- [**1569**Star][29d] [Py] [opendevops-cn/opendevops](https://github.com/opendevops-cn/opendevops) CODO是一款为用户提供企业多混合云、一站式DevOps、自动化运维、完全开源的云管理平台、自动化运维平台
+- [**1566**Star][14d] [C] [codahale/bcrypt-ruby](https://github.com/codahale/bcrypt-ruby) Ruby binding for the OpenBSD bcrypt() password hashing algorithm, allowing you to easily store a secure hash of your users' passwords.
+- [**1565**Star][17d] [Go] [sofastack/sofa-mosn](https://github.com/sofastack/sofa-mosn) MOSN is a modular observable smart network which can be used in service mesh deployed as a data plane sidecar.
+- [**1562**Star][19d] [C] [p-gen/smenu](https://github.com/p-gen/smenu) Terminal utility that reads words from standard input or from a file and creates an interactive selection window just below the cursor. The selected word(s) are sent to standard output for further processing.
+- [**1562**Star][14d] [Py] [k4m4/kickthemout](https://github.com/k4m4/kickthemout) kick devices out of your network and enjoy all the bandwidth for yourself.
+- [**1561**Star][16d] [Java] [gchq/gaffer](https://github.com/gchq/Gaffer) A large-scale entity and relation database supporting aggregation of properties
+- [**1560**Star][1y] [Py] [unkl4b/gitminer](https://github.com/unkl4b/gitminer) Tool for advanced mining for content on Github
+- [**1560**Star][6d] [Go] [caffix/amass](https://github.com/caffix/amass) In-depth Attack Surface Mapping and Asset Discovery
+- [**1557**Star][8m] [Py] [m4ll0k/wascan](https://github.com/m4ll0k/WAScan) WAScan - Web Application Scanner
+- [**1556**Star][15d] [Go] [eolinker/goku-api-gateway](https://github.com/eolinker/goku-api-gateway) A Powerful HTTP API Gateway in pure golang!Goku API Gateway (中文名:悟空 API 网关)是一个基于 Golang开发的微服务网关,能够实现高性能 HTTP API 转发、服务编排、多租户管理、API 访问权限控制等目的,拥有强大的自定义插件系统可以自行扩展,并且提供友好的图形化配置界面,能够快速帮助企业进行 API 服务治理、提高 API 服务的稳定性和安全性。
+- [**1555**Star][1m] [Shell] [mzet-/linux-exploit-suggester](https://github.com/mzet-/linux-exploit-suggester) Linux privilege escalation auditing tool
+- [**1549**Star][7d] [PHP] [mewebstudio/captcha](https://github.com/mewebstudio/captcha) Captcha for Laravel 5 & 6
+- [**1549**Star][1m] [Py] [joxeankoret/diaphora](https://github.com/joxeankoret/diaphora) program diffing
+- [**1548**Star][1y] [C] [ctfs/write-ups-2016](https://github.com/ctfs/write-ups-2016) Wiki-like CTF write-ups repository, maintained by the community. 2016
+- [**1544**Star][15d] [C] [raspberrypi/userland](https://github.com/raspberrypi/userland) Source code for ARM side libraries for interfacing to Raspberry Pi GPU.
+- [**1544**Star][6y] [Py] [google/pyringe](https://github.com/google/pyringe) Debugger capable of attaching to and injecting code into python processes.
+- [**1543**Star][2d] [Go] [juju/juju](https://github.com/juju/juju) Simple, secure devops tooling built to manage today's complex applications wherever you run your software.
+- [**1541**Star][2y] [Py] [awolfly9/ipproxytool](https://github.com/awolfly9/ipproxytool) python ip proxy tool scrapy crawl. 抓取大量免费代理 ip,提取有效 ip 使用
+- [**1540**Star][2y] [C++] [hteso/iaito](https://github.com/hteso/iaito) A Qt and C++ GUI for radare2 reverse engineering framework
+- [**1539**Star][2y] [C] [ezlippi/webbench](https://github.com/ezlippi/webbench) Webbench是Radim Kolar在1997年写的一个在linux下使用的非常简单的网站压测工具。它使用fork()模拟多个客户端同时访问我们设定的URL,测试网站在压力下工作的性能,最多可以模拟3万个并发连接去测试网站的负载能力。官网地址:
+- [**1537**Star][9d] [Py] [lifting-bits/mcsema](https://github.com/lifting-bits/mcsema) Framework for lifting x86, amd64, and aarch64 program binaries to LLVM bitcode
+ - [IDA7插件](https://github.com/lifting-bits/mcsema/tree/master/tools/mcsema_disass/ida7) 用于反汇编二进制文件并生成控制流程图
+ - [IDA插件](https://github.com/lifting-bits/mcsema/tree/master/tools/mcsema_disass/ida) 用于反汇编二进制文件并生成控制流程图
+ - [Binja插件](https://github.com/lifting-bits/mcsema/tree/master/tools/mcsema_disass/binja) 用于反汇编二进制文件并生成控制流程图
+ - [mcsema](https://github.com/lifting-bits/mcsema/tree/master/mcsema)
+- [**1536**Star][4d] [Java] [ukanth/afwall](https://github.com/ukanth/afwall) AFWall+ (Android Firewall +) - iptables based firewall for Android
+- [**1533**Star][13d] [emijrp/awesome-awesome](https://github.com/emijrp/awesome-awesome) A curated list of awesome curated lists of many topics.
+- [**1532**Star][3y] [Py] [x0rz/eqgrp_lost_in_translation](https://github.com/x0rz/eqgrp_lost_in_translation) Decrypted content of odd.tar.xz.gpg, swift.tar.xz.gpg and windows.tar.xz.gpg
+- [**1526**Star][2d] [C++] [nmap/npcap](https://github.com/nmap/npcap) Nmap Project's packet sniffing library for Windows, based on WinPcap/Libpcap improved with NDIS 6 and LWF.
+- [**1522**Star][1y] [HTML] [qiwihui/hiwifi-ss](https://github.com/qiwihui/hiwifi-ss) 极路由+ss配置
+- [**1521**Star][4m] [TS] [spring-guides/tut-spring-security-and-angular-js](https://github.com/spring-guides/tut-spring-security-and-angular-js) Spring Security and Angular:: A tutorial on how to use Spring Security with a single page application with various backend architectures, ranging from a simple single server to an API gateway with OAuth2 authentication.
+- [**1521**Star][3d] [C] [jiangwenyuan/nuster](https://github.com/jiangwenyuan/nuster) A high performance HTTP proxy cache server and RESTful NoSQL cache server based on HAProxy
+- [**1519**Star][10m] [PS] [joefitzgerald/packer-windows](https://github.com/joefitzgerald/packer-windows) Windows templates that can be used to create boxes for Vagrant using Packer
+- [**1518**Star][9m] [Py] [google/rekall](https://github.com/google/rekall) Rekall Memory Forensic Framework
+- [**1517**Star][8d] [Py] [zerosum0x0/koadic](https://github.com/zerosum0x0/koadic) Koadic C3 COM Command & Control - JScript RAT
+- [**1516**Star][5m] [snowming04/the-hacker-playbook-3-translation](https://github.com/snowming04/the-hacker-playbook-3-translation) 对 The Hacker Playbook 3 的翻译。
+- [**1514**Star][3y] [Py] [sensepost/regeorg](https://github.com/sensepost/regeorg) The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.
+- [**1510**Star][1y] [dripcap/dripcap](https://github.com/dripcap/dripcap)
+- [**1508**Star][2m] [Shell] [haugene/docker-transmission-openvpn](https://github.com/haugene/docker-transmission-openvpn) Docker container running Transmission torrent client with WebUI over an OpenVPN tunnel
+- [**1505**Star][2y] [Py] [eldraco/domain_analyzer](https://github.com/eldraco/domain_analyzer) Analyze the security of any domain by finding all the information possible. Made in python.
+- [**1504**Star][27d] [Py] [hannob/snallygaster](https://github.com/hannob/snallygaster) Tool to scan for secret files on HTTP servers
+- [**1499**Star][5d] [YARA] [cybermonitor/apt_cybercriminal_campagin_collections](https://github.com/cybermonitor/apt_cybercriminal_campagin_collections) APT & CyberCriminal Campaign Collection
+- [**1497**Star][4m] [Py] [epinna/tplmap](https://github.com/epinna/tplmap) Server-Side Template Injection and Code Injection Detection and Exploitation Tool
+- [**1489**Star][5d] [Py] [ahupp/python-magic](https://github.com/ahupp/python-magic) A python wrapper for libmagic
+- [**1486**Star][2y] [Kotlin] [gh0u1l5/wechatmagician](https://github.com/gh0u1l5/wechatmagician) WechatMagician is a Xposed module written in Kotlin, that allows you to completely control your Wechat.
+- [**1485**Star][7m] [C++] [wangyu-/tinyfecvpn](https://github.com/wangyu-/tinyfecvpn) A VPN Designed for Lossy Links, with Build-in Forward Error Correction(FEC) Support. Improves your Network Quality on a High-latency Lossy Link.
+- [**1482**Star][7d] [Py] [bitsadmin/wesng](https://github.com/bitsadmin/wesng) Windows Exploit Suggester - Next Generation
+- [**1481**Star][2d] [C] [sleuthkit/sleuthkit](https://github.com/sleuthkit/sleuthkit) The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.
+- [**1480**Star][1y] [C++] [f1xpl/openauto](https://github.com/f1xpl/openauto) AndroidAuto headunit emulator
+- [**1479**Star][3d] [C] [ctcaer/hekate](https://github.com/ctcaer/hekate) Nintendo Switch Bootloader - CTCaer mod
+- [**1478**Star][8d] [C] [iqiyi/xhook](https://github.com/iqiyi/xhook) a PLT (Procedure Linkage Table) hook library for Android native ELF
+- [**1477**Star][2d] [Shell] [blackarch/blackarch](https://github.com/blackarch/blackarch) BlackArch Linux is an Arch Linux-based distribution for penetration testers and security researchers.
+- [**1476**Star][2m] [C++] [jmpews/hookzz](https://github.com/jmpews/hookzz) a hook framework for arm/arm64/ios/android, and [dev] branch is being refactored.
+- [**1471**Star][27d] [minimaxir/hacker-news-undocumented](https://github.com/minimaxir/hacker-news-undocumented) Some of the hidden norms about Hacker News not otherwise covered in the Guidelines and the FAQ.
+- [**1470**Star][3y] [Py] [veil-framework/veil-evasion](https://github.com/Veil-Framework/Veil-Evasion) a tool designed to generate metasploit payloads that bypass common anti-virus solutions.
+- [**1470**Star][2d] [Go] [google/keytransparency](https://github.com/google/keytransparency) A transparent and secure way to look up public keys.
+- [**1469**Star][6y] [C] [alibaba/lvs](https://github.com/alibaba/lvs) A distribution of Linux Virtual Server with some advanced features. It introduces a new packet forwarding method - FULLNAT other than NAT/Tunneling/DirectRouting, and defense mechanism against synflooding attack - SYNPROXY.
+- [**1466**Star][29d] [Go] [neex/phuip-fpizdam](https://github.com/neex/phuip-fpizdam) Exploit for CVE-2019-11043
+- [**1464**Star][6m] [Py] [oros42/imsi-catcher](https://github.com/oros42/imsi-catcher) This program show you IMSI numbers of cellphones around you.
+- [**1463**Star][7d] [C] [ufrisk/pcileech](https://github.com/ufrisk/pcileech) Direct Memory Access (DMA) Attack Software
+- [**1462**Star][9d] [edoverflow/can-i-take-over-xyz](https://github.com/edoverflow/can-i-take-over-xyz) "Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.
+- [**1459**Star][3d] [Py] [enablesecurity/wafw00f](https://github.com/enablesecurity/wafw00f) identify and fingerprint Web Application Firewall (WAF) products protecting a website.
+- [**1458**Star][1y] [C++] [acaudwell/logstalgia](https://github.com/acaudwell/logstalgia) a visualization tool that replays or streams web server access logs as a retro arcade game simulation.
+- [**1455**Star][1y] [Py] [d4vinci/cr3dov3r](https://github.com/d4vinci/cr3dov3r) Know the dangers of credential reuse attacks.
+- [**1453**Star][13d] [C++] [srslte/srslte](https://github.com/srslte/srslte) Open source SDR LTE software suite from Software Radio Systems (SRS)
+- [**1451**Star][2d] [Py] [rocky/python-uncompyle6](https://github.com/rocky/python-uncompyle6) A cross-version Python bytecode decompiler
+- [**1447**Star][3y] [tiancode/learn-hacking](https://github.com/tiancode/learn-hacking) 开始学习Kali Linux 各种破解教程 渗透测试 逆向工程 HackThisSite挑战问题解答
+- [**1447**Star][3y] [tiancode/learn-hacking](https://github.com/tiancode/learn-hacking) 开始学习Kali Linux 各种破解教程 渗透测试 逆向工程 HackThisSite挑战问题解答
+- [**1447**Star][2m] [Py] [neo23x0/loki](https://github.com/neo23x0/loki) Loki - Simple IOC and Incident Response Scanner
+- [**1446**Star][5d] [C] [tianocore/edk2](https://github.com/tianocore/edk2) A modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications
+- [**1446**Star][20d] [Go] [skydive-project/skydive](https://github.com/skydive-project/skydive) An open source real-time network topology and protocols analyzer
+- [**1446**Star][14d] [C++] [microsoft/seal](https://github.com/microsoft/seal) Microsoft SEAL is an easy-to-use and powerful homomorphic encryption library.
+- [**1445**Star][3m] [C++] [vaibhavpandeyvpz/apkstudio](https://github.com/vaibhavpandeyvpz/apkstudio) Open-source, cross platform Qt based IDE for reverse-engineering Android application packages.
+- [**1437**Star][5d] [Go] [google/gapid](https://github.com/google/gapid) Graphics API Debugger
+- [**1436**Star][20d] [Kotlin] [cypherpunkarmory/userland](https://github.com/cypherpunkarmory/userland) The easiest way to run a Linux distribution or application on Android
+- [**1433**Star][11m] [C] [tpruvot/ccminer](https://github.com/tpruvot/ccminer) CUDA Open Source miner project, for most nvidia cards
+- [**1433**Star][1y] [TS] [pedronauck/reworm](https://github.com/pedronauck/reworm)
+- [**1432**Star][6m] [C++] [x64dbg/scyllahide](https://github.com/x64dbg/scyllahide) Advanced usermode anti-anti-debugger
+- [**1432**Star][2m] [C] [feralinteractive/gamemode](https://github.com/feralinteractive/gamemode) Optimise Linux system performance on demand
+- [**1429**Star][5y] [C++] [gdbinit/machoview](https://github.com/gdbinit/machoview) MachOView fork
+- [**1427**Star][9d] [ObjC] [nabla-c0d3/ssl-kill-switch2](https://github.com/nabla-c0d3/ssl-kill-switch2) Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS and OS X Apps
+- [**1426**Star][20d] [C++] [plasma-umass/coz](https://github.com/plasma-umass/coz) Finding Code that Counts with Causal Profiling
+- [**1426**Star][4y] [C++] [aappleby/smhasher](https://github.com/aappleby/smhasher) Automatically exported from code.google.com/p/smhasher
+- [**1425**Star][3m] [Go] [google/stenographer](https://github.com/google/stenographer) Stenographer is a packet capture solution which aims to quickly spool all packets to disk, then provide simple, fast access to subsets of those packets. Discussion/announcements at stenographer@googlegroups.com
+- [**1424**Star][8y] [Py] [moxie0/sslstrip](https://github.com/moxie0/sslstrip) A tool for exploiting Moxie Marlinspike's SSL "stripping" attack.
+- [**1424**Star][11m] [Java] [aslody/legend](https://github.com/aslody/legend) A framework for hook java methods.
+- [**1423**Star][14d] [Go] [google/google-ctf](https://github.com/google/google-ctf) Google CTF
+- [**1422**Star][3y] [Py] [nathanlopez/stitch](https://github.com/nathanlopez/stitch) Python Remote Administration Tool (RAT)
+- [**1422**Star][3y] [mandatoryprogrammer/northkoreadnsleak](https://github.com/mandatoryprogrammer/northkoreadnsleak) Snapshot of North Korea's DNS data taken from zone transfers.
+- [**1419**Star][1m] [Py] [xdavidhu/mitmap](https://github.com/xdavidhu/mitmap)
+- [**1419**Star][3y] [C] [antirez/dump1090](https://github.com/antirez/dump1090) Dump1090 is a simple Mode S decoder for RTLSDR devices
+- [**1418**Star][5m] [PHP] [s4n7h0/xvwa](https://github.com/s4n7h0/xvwa) XVWA is a badly coded web application written in PHP/MySQL that helps security enthusiasts to learn application security.
+- [**1417**Star][4m] [yadox666/the-hackers-hardware-toolkit](https://github.com/yadox666/the-hackers-hardware-toolkit) The best hacker's gadgets for Red Team pentesters and security researchers.
+- [**1417**Star][4d] [Rust] [shadowsocks/shadowsocks-rust](https://github.com/shadowsocks/shadowsocks-rust) A Rust port of shadowsocks
+- [**1417**Star][1m] [Go] [barnybug/cli53](https://github.com/barnybug/cli53) Command line tool for Amazon Route 53
+- [**1415**Star][7d] [C] [z3apa3a/3proxy](https://github.com/z3apa3a/3proxy) 3proxy - tiny free proxy server
+- [**1414**Star][8d] [C] [ettercap/ettercap](https://github.com/ettercap/ettercap) Ettercap Project
+- [**1413**Star][24d] [XSLT] [lolbas-project/lolbas](https://github.com/lolbas-project/lolbas) Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
+- [**1413**Star][24d] [Java] [chrisk44/hijacker](https://github.com/chrisk44/hijacker) Aircrack, Airodump, Aireplay, MDK3 and Reaver GUI Application for Android
+- [**1412**Star][9d] [C] [namhyung/uftrace](https://github.com/namhyung/uftrace) Function (graph) tracer for user-space
+- [**1412**Star][5m] [gitguardian/apisecuritybestpractices](https://github.com/gitguardian/apisecuritybestpractices) Resources to help you keep secrets (API keys, database credentials, certificates, ...) out of source code and remediate the issue in case of a leaked API key. Made available by GitGuardian.
+- [**1411**Star][7d] [C++] [eteran/edb-debugger](https://github.com/eteran/edb-debugger) edb is a cross platform AArch32/x86/x86-64 debugger.
+- [**1411**Star][3d] [Go] [cosmos72/gomacro](https://github.com/cosmos72/gomacro) Interactive Go interpreter and debugger with REPL, Eval, generics and Lisp-like macros
+- [**1410**Star][3m] [Go] [hellogcc/100-gdb-tips](https://github.com/hellogcc/100-gdb-tips) A collection of gdb tips. 100 maybe just mean many here.
+- [**1408**Star][3m] [HTML] [owasp/top10](https://github.com/owasp/top10) Official OWASP Top 10 Document Repository
+- [**1407**Star][4d] [C++] [google/nsjail](https://github.com/google/nsjail) A light-weight process isolation tool, making use of Linux namespaces and seccomp-bpf syscall filters (with help of the kafel bpf language)
+- [**1405**Star][1y] [HTML] [gwuhaolin/blog](https://github.com/gwuhaolin/blog) 浩麟的技术博客
+- [**1405**Star][1y] [C++] [dotnet/llilc](https://github.com/dotnet/llilc) This repo contains LLILC, an LLVM based compiler for .NET Core. It includes a set of cross-platform .NET code generation tools that enables compilation of MSIL byte code to LLVM supported platforms.
+- [**1404**Star][7d] [Java] [chinashiyu/gfw.press](https://github.com/chinashiyu/gfw.press) GFW.Press新一代军用级高强度加密抗干扰网络数据高速传输软件
+- [**1403**Star][2d] [Go] [crazy-max/windowsspyblocker](https://github.com/crazy-max/windowsspyblocker)
+- [**1401**Star][9m] [JS] [anttiviljami/browser-autofill-phishing](https://github.com/anttiviljami/browser-autofill-phishing) A simple demo of phishing by abusing the browser autofill feature
+- [**1399**Star][16d] [Swift] [johnno1962/injectioniii](https://github.com/johnno1962/injectioniii) Re-write of Injection for Xcode in (mostly) Swift4
+- [**1397**Star][1y] [Go] [filosottile/whosthere](https://github.com/filosottile/whosthere) A ssh server that knows who you are
+- [**1396**Star][3y] [PS] [putterpanda/mimikittenz](https://github.com/putterpanda/mimikittenz) A post-exploitation powershell tool for extracting juicy info from memory.
+- [**1395**Star][27d] [C] [quiet/org.quietmodem.quiet](https://github.com/quiet/org.quietmodem.quiet) Quiet for Android - TCP over sound
+- [**1393**Star][4d] [atarity/deploy-your-own-saas](https://github.com/atarity/deploy-your-own-saas) List of "only yours" cloud services for everyday needs
+- [**1393**Star][9d] [Py] [ekultek/whatwaf](https://github.com/ekultek/whatwaf) Detect and bypass web application firewalls and protection systems
+- [**1392**Star][16d] [C++] [jonathansalwan/triton](https://github.com/jonathansalwan/triton) Triton is a Dynamic Binary Analysis (DBA) framework. It provides internal components like a Dynamic Symbolic Execution (DSE) engine, a dynamic taint engine, AST representations of the x86, x86-64 and AArch64 Instructions Set Architecture (ISA), SMT simplification passes, an SMT solver interface and, the last but not least, Python bindings.
+- [**1388**Star][4y] [PHP] [johntroony/php-webshells](https://github.com/johntroony/php-webshells) Common php webshells. Do not host the file(s) on your server!
+- [**1387**Star][11m] [Py] [eth0izzle/bucket-stream](https://github.com/eth0izzle/bucket-stream) Find interesting Amazon S3 Buckets by watching certificate transparency logs.
+- [**1386**Star][2y] [JS] [sqren/fb-sleep-stats](https://github.com/sqren/fb-sleep-stats) Use Facebook to track your friends’ sleeping habits
+- [**1384**Star][5d] [JS] [ix64/unlock-music](https://github.com/ix64/unlock-music) Unlock encrypted music file in browser. 在浏览器中解锁加密的音乐文件。
+- [**1381**Star][6m] [Py] [almandin/fuxploider](https://github.com/almandin/fuxploider) File upload vulnerability scanner and exploitation tool.
+- [**1380**Star][15d] [C] [dynamorio/drmemory](https://github.com/dynamorio/drmemory) Memory Debugger for Windows, Linux, Mac, and Android
+- [**1380**Star][13d] [Shell] [drduh/pwd.sh](https://github.com/drduh/pwd.sh) GPG symmetric password manager
+- [**1378**Star][13d] [OCaml] [mirage/mirage](https://github.com/mirage/mirage) MirageOS is a library operating system that constructs unikernels
+- [**1378**Star][2d] [JS] [lockfale/osint-framework](https://github.com/lockfale/osint-framework) OSINT Framework
+- [**1375**Star][15d] [Go] [unrolled/secure](https://github.com/unrolled/secure) HTTP middleware for Go that facilitates some quick security wins.
+- [**1375**Star][11m] [JS] [intika/librefox](https://github.com/intika/librefox) Firefox with privacy enhancements
+- [**1374**Star][4y] [C++] [valvesoftware/vogl](https://github.com/valvesoftware/vogl) OpenGL capture / playback debugger.
+- [**1373**Star][5m] [Py] [s0md3v/striker](https://github.com/s0md3v/Striker) Striker is an offensive information and vulnerability scanner.
+- [**1373**Star][9m] [PS] [danielbohannon/invoke-obfuscation](https://github.com/danielbohannon/invoke-obfuscation) PowerShell Obfuscator
+- [**1371**Star][1m] [C] [zyantific/zydis](https://github.com/zyantific/zydis) Fast and lightweight x86/x86-64 disassembler library
+- [**1365**Star][9d] [Go] [cortesi/modd](https://github.com/cortesi/modd) A flexible developer tool that runs processes and responds to filesystem changes
+- [**1363**Star][2m] [Py] [fireeye/flare-floss](https://github.com/fireeye/flare-floss) Automatically extract obfuscated strings from malware.
+ - [floss](https://github.com/fireeye/flare-floss/tree/master/floss)
+ - [IDA插件](https://github.com/fireeye/flare-floss/blob/master/scripts/idaplugin.py)
+- [**1363**Star][3y] [C++] [aslody/turbodex](https://github.com/aslody/turbodex) fast load dex in memory.
+- [**1362**Star][1m] [grrrdog/java-deserialization-cheat-sheet](https://github.com/grrrdog/java-deserialization-cheat-sheet) The cheat sheet about Java Deserialization vulnerabilities
+- [**1361**Star][7m] [Py] [vulnerscom/getsploit](https://github.com/vulnerscom/getsploit) Command line utility for searching and downloading exploits
+- [**1361**Star][6m] [C++] [phpv8/v8js](https://github.com/phpv8/v8js) V8 Javascript Engine for PHP — This PHP extension embeds the Google V8 Javascript Engine
+- [**1359**Star][2m] [C] [googleprojectzero/winafl](https://github.com/googleprojectzero/winafl) A fork of AFL for fuzzing Windows binaries
+- [**1355**Star][10m] [HTML] [thelinuxchoice/blackeye](https://github.com/thelinuxchoice/blackeye) The most complete Phishing Tool, with 32 templates +1 customizable
+- [**1354**Star][2d] [Py] [mitre/caldera](https://github.com/mitre/caldera) Automated Adversary Emulation
+- [**1352**Star][3y] [Py] [joaomatosf/jexboss](https://github.com/joaomatosf/jexboss) Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool
+- [**1351**Star][3m] [C++] [raspberrypi/tools](https://github.com/raspberrypi/tools)
+- [**1350**Star][4m] [C] [taviso/ctftool](https://github.com/taviso/ctftool) Interactive CTF Exploration Tool
+- [**1349**Star][3y] [Py] [ddevault/evilpass](https://github.com/ddevault/evilpass) Slightly evil password strength checker
+- [**1349**Star][19d] [C++] [rikkaapps/riru](https://github.com/rikkaapps/riru) Inject zygote process by replace libmemtrack
+- [**1349**Star][5m] [Py] [lijiejie/githack](https://github.com/lijiejie/githack) A `.git` folder disclosure exploit
+- [**1348**Star][10m] [rebeyond/behinder](https://github.com/rebeyond/behinder) “冰蝎”动态二进制加密网站管理客户端
+- [**1347**Star][11m] [Rust] [das-labor/panopticon](https://github.com/das-labor/panopticon) A libre cross-platform disassembler.
+- [**1346**Star][2y] [HTML] [daxeel/blockshell](https://github.com/daxeel/blockshell) A command line utility for learning Blockchain technical concepts likechaining, mining, proof of work etc.
+- [**1345**Star][25d] [C] [x64dbg/x64dbgpy](https://github.com/x64dbg/x64dbgpy) Automating x64dbg using Python, Snapshots:
+- [**1345**Star][12d] [Go] [securitywithoutborders/hardentools](https://github.com/securitywithoutborders/hardentools) Hardentools is a utility that disables a number of risky Windows features.
+- [**1344**Star][23d] [Go] [microcosm-cc/bluemonday](https://github.com/microcosm-cc/bluemonday) a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS
+- [**1343**Star][23d] [Py] [s0md3v/arjun](https://github.com/s0md3v/Arjun) HTTP parameter discovery suite.
+- [**1342**Star][12m] [C] [luke-jr/bfgminer](https://github.com/luke-jr/bfgminer) Modular ASIC/FPGA miner written in C, featuring overclocking, monitoring, fan speed control and remote interface capabilities.
+- [**1342**Star][2m] [Go] [davrodpin/mole](https://github.com/davrodpin/mole) cli app to create ssh tunnels
+- [**1342**Star][1y] [Py] [carmaa/inception](https://github.com/carmaa/inception) a physical memory manipulation and hacking tool exploiting PCI-based DMA. The tool can attack over FireWire, Thunderbolt, ExpressCard, PC Card and any other PCI/PCIe interfaces.
+- [**1341**Star][3m] [Py] [maratyszcza/peachpy](https://github.com/maratyszcza/peachpy) x86-64 assembler embedded in Python
+- [**1341**Star][1y] [XSLT] [api0cradle/lolbas](https://github.com/api0cradle/lolbas) Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
+- [**1340**Star][1y] [kirikira/vtemplate](https://github.com/kirikira/vtemplate) v2ray的模板们
+- [**1340**Star][7m] [Py] [feeicn/gsil](https://github.com/feeicn/gsil) GitHub Sensitive Information Leakage
+- [**1339**Star][6y] [Perl] [intelisecurelabs/linux_exploit_suggester](https://github.com/InteliSecureLabs/Linux_Exploit_Suggester) Linux Exploit Suggester; based on operating system release number
+- [**1338**Star][1m] [CSS] [undeadsec/socialfish](https://github.com/undeadsec/socialfish) Educational Phishing Tool & Information Collector
+- [**1337**Star][1y] [C] [madeye/proxydroid](https://github.com/madeye/proxydroid) Global Proxy for Android
+- [**1336**Star][3m] [HTML] [thehive-project/thehive](https://github.com/thehive-project/thehive) a Scalable, Open Source and Free Security Incident Response Platform
+- [**1335**Star][2m] [C++] [mfontanini/libtins](https://github.com/mfontanini/libtins) High-level, multiplatform C++ network packet sniffing and crafting library.
+- [**1334**Star][4y] [mengskysama/shadowsocks](https://github.com/mengskysama/shadowsocks) A fast tunnel proxy that helps you bypass firewalls
+- [**1333**Star][1y] [C] [gamelinux/passivedns](https://github.com/gamelinux/passivedns) A network sniffer that logs all DNS server replies for use in a passive DNS setup
+- [**1328**Star][2d] [C++] [purplei2p/i2pd](https://github.com/purplei2p/i2pd) a full-featured C++ implementation of I2P client
+- [**1328**Star][1y] [Py] [marten4n6/evilosx](https://github.com/marten4n6/evilosx) An evil RAT (Remote Administration Tool) for macOS / OS X.
+- [**1328**Star][2y] [CoffeeScript] [atmos/camo](https://github.com/atmos/camo) all about making insecure assets look secure
+- [**1327**Star][7m] [Go] [ssllabs/ssllabs-scan](https://github.com/ssllabs/ssllabs-scan) A command-line reference-implementation client for SSL Labs APIs, designed for automated and/or bulk testing.
+- [**1327**Star][3d] [C] [intel/haxm](https://github.com/intel/haxm) cross-platform hardware-assisted virtualization engine (hypervisor), widely used as an accelerator for Android Emulator and QEMU
+- [**1327**Star][10m] [C#] [cenmrev/v2rayw](https://github.com/cenmrev/v2rayw) GUI for v2ray-core on Windows
+- [**1325**Star][21d] [C] [dtag-dev-sec/tpotce](https://github.com/dtag-dev-sec/tpotce) 创建多蜜罐平台T-Pot ISO 镜像
+- [**1324**Star][1y] [C++] [rehints/hexrayscodexplorer](https://github.com/rehints/hexrayscodexplorer) Hex-Rays Decompiler plugin for better code navigation
+
+ View Details
+
+
+ - 自动类型重建
+ - 虚表识别/导航(反编译窗口)
+ - C-tree可视化与导出
+ - 对象浏览
+
+
+
+- [**1323**Star][2d] [Go] [xiaoming2028/freenet](https://github.com/xiaoming2028/freenet) 科学上网/梯子/自由上网/翻墙 SS/SSR/V2Ray/Brook 搭建教程
+- [**1323**Star][2m] [jaredthecoder/awesome-vehicle-security](https://github.com/jaredthecoder/awesome-vehicle-security)
+- [**1322**Star][3d] [C] [oisf/suricata](https://github.com/OISF/suricata) a network IDS, IPS and NSM engine
+- [**1319**Star][2y] [Py] [worawit/ms17-010](https://github.com/worawit/ms17-010) MS17-010
+- [**1317**Star][1y] [mortenoir1/virtualbox_e1000_0day](https://github.com/mortenoir1/virtualbox_e1000_0day) VirtualBox E1000 Guest-to-Host Escape
+- [**1316**Star][3m] [PS] [peewpw/invoke-psimage](https://github.com/peewpw/invoke-psimage) Encodes a PowerShell script in the pixels of a PNG file and generates a oneliner to execute
+- [**1314**Star][10m] [C] [fancycode/memorymodule](https://github.com/fancycode/memorymodule) Library to load a DLL from memory.
+- [**1311**Star][1m] [C++] [shadowsocks/libqtshadowsocks](https://github.com/shadowsocks/libqtshadowsocks) A lightweight and ultra-fast shadowsocks library written in C++14 with Qt framework
+- [**1309**Star][12m] [Py] [xyntax/poc-t](https://github.com/xyntax/poc-t) remote vulnerability PoC/EXP framework
+- [**1309**Star][3m] [Lua] [scipag/vulscan](https://github.com/scipag/vulscan) Advanced vulnerability scanning with Nmap NSE
+- [**1307**Star][19d] [Py] [consensys/mythril](https://github.com/ConsenSys/mythril) Security analysis tool for EVM bytecode. Supports smart contracts built for Ethereum, Quorum, Vechain, Roostock, Tron and other EVM-compatible blockchains.
+- [**1307**Star][27d] [C] [boywhp/fcn](https://github.com/boywhp/fcn) free connect your private network from anywhere
+- [**1304**Star][17d] [nikitavoloboev/privacy-respecting](https://github.com/nikitavoloboev/privacy-respecting) Curated List of Privacy Respecting Services and Software
+- [**1304**Star][7d] [C] [cisco-talos/pyrebox](https://github.com/cisco-talos/pyrebox) Python scriptable Reverse Engineering Sandbox, a Virtual Machine instrumentation and inspection framework based on QEMU
+- [**1303**Star][4m] [C++] [klee/klee](https://github.com/klee/klee) KLEE Symbolic Execution Engine
+- [**1300**Star][1y] [Shell] [dana-at-cp/backdoor-apk](https://github.com/dana-at-cp/backdoor-apk) backdoor-apk is a shell script that simplifies the process of adding a backdoor to any Android APK file. Users of this shell script should have working knowledge of Linux, Bash, Metasploit, Apktool, the Android SDK, smali, etc. This shell script is provided as-is without warranty of any kind and is intended for educational purposes only.
+- [**1299**Star][6d] [Go] [hacklcx/hfish](https://github.com/hacklcx/hfish) Extend the enterprise security test open source honeypot system , Record hacker attacks. 扩展企业安全测试主动诱导型开源蜜罐框架系统,记录黑客攻击手段
+- [**1298**Star][1y] [Go] [evilsocket/xray](https://github.com/evilsocket/xray) XRay is a tool for recon, mapping and OSINT gathering from public networks.
+- [**1293**Star][4y] [C++] [microsoft/microsoft-pdb](https://github.com/microsoft/microsoft-pdb) Information from Microsoft about the PDB format. We'll try to keep this up to date. Just trying to help the CLANG/LLVM community get onto Windows.
+- [**1293**Star][5m] [JS] [feross/spoof](https://github.com/feross/spoof) Easily spoof your MAC address in macOS, Windows, & Linux!
+- [**1293**Star][29d] [Java] [android-hacker/exposed](https://github.com/android-hacker/exposed) A library to use Xposed without root or recovery(or modify system image etc..).
+- [**1291**Star][6d] [C] [traviscross/mtr](https://github.com/traviscross/mtr) Official repository for mtr, a network diagnostic tool
+- [**1291**Star][2y] [Go] [malfunkt/hyperfox](https://github.com/malfunkt/hyperfox) HTTP/HTTPs MITM proxy and traffic recorder with on-the-fly TLS cert generation.
+- [**1289**Star][2m] [Py] [virtualabs/btlejack](https://github.com/virtualabs/btlejack) Bluetooth Low Energy Swiss-army knife
+- [**1289**Star][21d] [JS] [icymind/vrouter](https://github.com/icymind/vrouter) 一个基于 VirtualBox 和 openwrt 构建的项目, 旨在实现 macOS / Windows 平台的透明代理.
+- [**1285**Star][12d] [PHP] [friendsofphp/security-advisories](https://github.com/friendsofphp/security-advisories) A database of PHP security advisories
+- [**1283**Star][9m] [michalmalik/linux-re-101](https://github.com/michalmalik/linux-re-101) A collection of resources for linux reverse engineering
+- [**1283**Star][2m] [Py] [codingo/reconnoitre](https://github.com/codingo/reconnoitre) A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.
+- [**1279**Star][2m] [C] [seemoo-lab/nexmon](https://github.com/seemoo-lab/nexmon) The C-based Firmware Patching Framework for Broadcom/Cypress WiFi Chips that enables Monitor Mode, Frame Injection and much more
+- [**1279**Star][9m] [Go] [perlin-network/noise](https://github.com/perlin-network/noise) A decentralized P2P networking stack written in Go.
+- [**1279**Star][4y] [Py] [elvanderb/tcp-32764](https://github.com/elvanderb/tcp-32764) some codes and notes about the backdoor listening on TCP-32764 in linksys WAG200G.
+- [**1278**Star][26d] [Py] [viper-framework/viper](https://github.com/viper-framework/viper) Binary analysis and management framework
+- [**1277**Star][4d] [Shell] [firehol/blocklist-ipsets](https://github.com/firehol/blocklist-ipsets) ipsets dynamically updated with firehol's update-ipsets.sh script
+- [**1277**Star][8d] [Py] [pyauth/pyotp](https://github.com/pyauth/pyotp) Python One-Time Password Library
+- [**1277**Star][4d] [Shell] [firehol/blocklist-ipsets](https://github.com/firehol/blocklist-ipsets) ipsets dynamically updated with firehol's update-ipsets.sh script
+- [**1277**Star][29d] [Go] [dreadl0ck/netcap](https://github.com/dreadl0ck/netcap) A framework for secure and scalable network traffic analysis -
+- [**1277**Star][1m] [Py] [bethgelab/foolbox](https://github.com/bethgelab/foolbox) Python toolbox to create adversarial examples that fool neural networks in PyTorch, TensorFlow, Keras, …
+- [**1273**Star][1y] [PS] [dafthack/mailsniper](https://github.com/dafthack/mailsniper) a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.
+- [**1271**Star][1y] [JS] [sakurity/securelogin](https://github.com/sakurity/securelogin) a decentralized authentication protocol for websites and apps
+- [**1271**Star][2m] [Py] [ganapati/rsactftool](https://github.com/ganapati/rsactftool) RSA attack tool (mainly for ctf) - retreive private key from weak public key and/or uncipher data
+- [**1270**Star][3m] [Py] [alessandroz/beroot](https://github.com/alessandroz/beroot) Privilege Escalation Project - Windows / Linux / Mac
+- [**1269**Star][3m] [Java] [googlearchive/android-runtimepermissions](https://github.com/googlearchive/android-RuntimePermissions) This sample has been deprecated/archived. Check this repo for related samples:
+- [**1269**Star][3m] [Go] [solo-io/squash](https://github.com/solo-io/squash) The debugger for microservices
+- [**1269**Star][1y] [Py] [ethereum/pyethapp](https://github.com/ethereum/pyethapp)
+- [**1267**Star][7m] [PHP] [ganlvtech/down_52pojie_cn](https://github.com/ganlvtech/down_52pojie_cn) A single page file explorer that can be hosted on static website. 吾爱破解论坛 爱盘
+- [**1267**Star][2d] [C] [aircrack-ng/aircrack-ng](https://github.com/aircrack-ng/aircrack-ng) WiFi security auditing tools suite
+- [**1263**Star][4d] [JS] [forwardemail/free-email-forwarding](https://github.com/forwardemail/free-email-forwarding)
+- [**1261**Star][11m] [Py] [unapibageek/ctfr](https://github.com/unapibageek/ctfr) Abusing Certificate Transparency logs for getting HTTPS websites subdomains.
+- [**1260**Star][12m] [PHP] [you2php/delete](https://github.com/you2php/delete) (迫于压力,本项目停止维护,请尽快fork代码。1月1日之后删除项目)[免翻墙工具]A free and open-source youtube video proxy script [Written in PHP]
+- [**1256**Star][1m] [PS] [hak5/bashbunny-payloads](https://github.com/hak5/bashbunny-payloads) The Official Bash Bunny Payload Repository
+- [**1255**Star][2y] [JS] [samyk/skyjack](https://github.com/samyk/skyjack) A drone engineered to autonomously seek out, hack, and wirelessly take full control over any other Parrot or 3DR drones within wireless or flying distance, creating an army of zombie drones under your control.
+- [**1253**Star][4d] [JS] [archerysec/archerysec](https://github.com/archerysec/archerysec) Centralize Vulnerability Assessment and Management for DevSecOps Team
+- [**1253**Star][4m] [JS] [bubenshchykov/ngrok](https://github.com/bubenshchykov/ngrok) Expose your localhost to the web. Node wrapper for ngrok.
+- [**1251**Star][3d] [Shell] [mitchellkrogza/nginx-ultimate-bad-bot-blocker](https://github.com/mitchellkrogza/nginx-ultimate-bad-bot-blocker) Nginx Block Bad Bots, Spam Referrer Blocker, Vulnerability Scanners, User-Agents, Malware, Adware, Ransomware, Malicious Sites, with anti-DDOS, Wordpress Theme Detector Blocking and Fail2Ban Jail for Repeat Offenders
+- [**1250**Star][2y] [Py] [vaguileradiaz/tinfoleak](https://github.com/vaguileradiaz/tinfoleak) The most complete open-source tool for Twitter intelligence analysis
+- [**1247**Star][1m] [Vue] [chaitin/passionfruit](https://github.com/chaitin/passionfruit) [WIP] Crappy iOS app analyzer
+- [**1244**Star][3m] [michalmalik/osx-re-101](https://github.com/michalmalik/osx-re-101) A collection of resources for OSX/iOS reverse engineering.
+- [**1244**Star][2y] [ObjC] [krausefx/detect.location](https://github.com/krausefx/detect.location) An easy way to access the user's iOS location data without actually having access
+- [**1243**Star][3m] [Shell] [rootsongjc/kubernetes-vagrant-centos-cluster](https://github.com/rootsongjc/kubernetes-vagrant-centos-cluster) Setting up a distributed Kubernetes cluster along with Istio service mesh locally with Vagrant and VirtualBox, only PoC or Demo use.
+- [**1243**Star][10m] [C] [a0rtega/pafish](https://github.com/a0rtega/pafish) Pafish is a demonstration tool that employs several techniques to detect sandboxes and analysis environments in the same way as malware families do.
+- [**1242**Star][9d] [Py] [thekingofduck/fuzzdicts](https://github.com/thekingofduck/fuzzdicts) Web Pentesting Fuzz 字典,一个就够了。
+- [**1241**Star][4y] [firesuncn/bluelotus_xssreceiver](https://github.com/firesuncn/bluelotus_xssreceiver) XSS平台 CTF工具 Web安全工具
+- [**1241**Star][1y] [Ruby] [eliotsykes/rails-security-checklist](https://github.com/eliotsykes/rails-security-checklist)
+- [**1240**Star][2m] [Go] [google/martian](https://github.com/google/martian) Martian is a library for building custom HTTP/S proxies
+- [**1238**Star][1y] [Kotlin] [gh0u1l5/wechatspellbook](https://github.com/gh0u1l5/wechatspellbook) 使用Kotlin编写的开源微信插件框架,底层需要 Xposed 或 VirtualXposed 等Hooking框架的支持,而顶层可以轻松对接Java、Kotlin、Scala等JVM系语言。让程序员能够在几分钟内编写出简单的微信插件,随意揉捏微信的内部逻辑。
+- [**1233**Star][3y] [Py] [desaster/kippo](https://github.com/desaster/kippo) Kippo - SSH Honeypot
+- [**1230**Star][8m] [Py] [flipkart-incubator/astra](https://github.com/flipkart-incubator/astra) Automated Security Testing For REST API's
+- [**1229**Star][5m] [chalker/notes](https://github.com/chalker/notes) Some public notes
+- [**1228**Star][3y] [C] [tsudakageyu/minhook](https://github.com/tsudakageyu/minhook) The Minimalistic x86/x64 API Hooking Library for Windows
+- [**1228**Star][3d] [C++] [nasa-sw-vnv/ikos](https://github.com/nasa-sw-vnv/ikos) Static analyzer for C/C++ based on the theory of Abstract Interpretation.
+- [**1227**Star][6d] [C] [datatheorem/trustkit](https://github.com/datatheorem/trustkit) Easy SSL pinning validation and reporting for iOS, macOS, tvOS and watchOS.
+- [**1227**Star][1y] [Py] [danmcinerney/net-creds](https://github.com/danmcinerney/net-creds) Sniffs sensitive data from interface or pcap
+- [**1225**Star][28d] [Java] [find-sec-bugs/find-sec-bugs](https://github.com/find-sec-bugs/find-sec-bugs) The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)
+- [**1224**Star][3y] [CoffeeScript] [shadowsocks/shadowsocks-nodejs](https://github.com/shadowsocks/shadowsocks-nodejs)
+- [**1223**Star][28d] [Go] [jsha/minica](https://github.com/jsha/minica) minica is a small, simple CA intended for use in situations where the CA operator also operates each host where a certificate will be used.
+- [**1222**Star][5y] [cure53/xsschallengewiki](https://github.com/cure53/XSSChallengeWiki) Welcome to the XSS Challenge Wiki!
+- [**1222**Star][4m] [Py] [owtf/owtf](https://github.com/owtf/owtf) a project focused on penetration testing efficiency and alignment of security tests to security standards like the OWASP Testing Guide (v3 and v4), the OWASP Top 10, PTES and NIST so that pentesters will have more time to
+- [**1222**Star][5y] [cure53/xsschallengewiki](https://github.com/cure53/xsschallengewiki) Welcome to the XSS Challenge Wiki!
+- [**1221**Star][5d] [Py] [harismuneer/ultimate-facebook-scraper](https://github.com/harismuneer/ultimate-facebook-scraper)
+- [**1221**Star][13d] [Py] [google/timesketch](https://github.com/google/timesketch) Collaborative forensic timeline analysis
+- [**1221**Star][1y] [Go] [cloudflare/redoctober](https://github.com/cloudflare/redoctober) Go server for two-man rule style file encryption and decryption.
+- [**1220**Star][1y] [C#] [cn33liz/p0wnedshell](https://github.com/cn33liz/p0wnedshell) PowerShell Runspace Post Exploitation Toolkit
+- [**1215**Star][6d] [C] [dynamorio/dynamorio](https://github.com/dynamorio/dynamorio) Dynamic Instrumentation Tool Platform
+- [**1213**Star][10d] [JS] [jpcertcc/logontracer](https://github.com/jpcertcc/logontracer) Investigate malicious Windows logon by visualizing and analyzing Windows event log
+- [**1209**Star][1m] [Py] [codingo/nosqlmap](https://github.com/codingo/NoSQLMap) Automated NoSQL database enumeration and web application exploitation tool.
+- [**1208**Star][6d] [ObjC] [onionbrowser/onionbrowser](https://github.com/onionbrowser/onionbrowser) An open-source, privacy-enhancing web browser for iOS, utilizing the Tor anonymity network
+- [**1207**Star][7m] [riusksk/secbook](https://github.com/riusksk/secbook) 信息安全从业者书单推荐
+- [**1206**Star][7d] [Java] [linkedin/dexmaker](https://github.com/linkedin/dexmaker) A utility for doing compile or runtime code generation targeting Android's Dalvik VM
+- [**1206**Star][3m] [Java] [javiersantos/piracychecker](https://github.com/javiersantos/piracychecker) An Android library that prevents your app from being pirated / cracked using Google Play Licensing (LVL), APK signature protection and more. API 14+ required.
+- [**1206**Star][3m] [JS] [davidbau/seedrandom](https://github.com/davidbau/seedrandom) seeded random number generator for Javascript
+- [**1205**Star][4d] [YARA] [horsicq/detect-it-easy](https://github.com/horsicq/detect-it-easy) Program for determining types of files for Windows, Linux and MacOS.
+- [**1204**Star][5d] [dweinstein/awesome-frida](https://github.com/dweinstein/awesome-frida) A curated list of Frida resources
+- [**1202**Star][1y] [felixgr/secure-ios-app-dev](https://github.com/felixgr/secure-ios-app-dev) Collection of the most common vulnerabilities found in iOS applications
+- [**1202**Star][3m] [C] [droe/sslsplit](https://github.com/droe/sslsplit) Transparent SSL/TLS interception
+- [**1201**Star][2y] [C] [saminiir/level-ip](https://github.com/saminiir/level-ip) a Linux userspace TCP/IP stack, implemented with TUN/TAP devices.
+- [**1201**Star][3m] [C] [dgiese/dustcloud](https://github.com/dgiese/dustcloud) Xiaomi Smart Home Device Reverse Engineering and Hacking
+- [**1201**Star][23d] [Py] [achillean/shodan-python](https://github.com/achillean/shodan-python) The official Python library for Shodan
+- [**1200**Star][11m] [JS] [mame82/p4wnp1_aloa](https://github.com/mame82/p4wnp1_aloa) turns a Rapsberry Pi Zero W into a flexible, low-cost platform for pentesting, red teaming and physical engagements ... or into "A Little Offensive Appliance".
+- [**1198**Star][1y] [Go] [rancher/convoy](https://github.com/rancher/convoy) A Docker volume plugin, managing persistent container volumes.
+- [**1198**Star][8m] [joe-shenouda/awesome-cyber-skills](https://github.com/joe-shenouda/awesome-cyber-skills) A curated list of hacking environments where you can train your cyber skills legally and safely
+- [**1198**Star][20d] [Py] [cve-search/cve-search](https://github.com/cve-search/cve-search) perform local searches for known vulnerabilities
+- [**1197**Star][9m] [C] [f0rb1dd3n/reptile](https://github.com/f0rb1dd3n/reptile) LKM Linux rootkit
+- [**1192**Star][1m] [Go] [smallstep/certificates](https://github.com/smallstep/certificates) An online certificate authority and related tools for secure automated certificate management, so you can use TLS everywhere.
+- [**1192**Star][7y] [Py] [mothran/mongol](https://github.com/mothran/mongol) A simple python tool to pinpoint the IP addresses of machines working for the Great Firewall of China.
+- [**1192**Star][6y] [gdbinit/gdbinit](https://github.com/gdbinit/gdbinit) Gdbinit for OS X, iOS and others - x86, x86_64 and ARM
+- [**1191**Star][3m] [Py] [jtesta/ssh-mitm](https://github.com/jtesta/ssh-mitm) SSH man-in-the-middle tool
+- [**1189**Star][3y] [Roff] [matiasinsaurralde/facebook-tunnel](https://github.com/matiasinsaurralde/facebook-tunnel) Tunneling Internet traffic over Facebook chat.
+- [**1189**Star][10m] [C] [blechschmidt/massdns](https://github.com/blechschmidt/massdns) A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)
+- [**1189**Star][25d] [Shell] [anudeepnd/whitelist](https://github.com/anudeepnd/whitelist) A simple tool to add commonly white listed domains to your Pi-Hole setup.
+- [**1188**Star][2m] [jadagates/shadowsocksbio](https://github.com/jadagates/shadowsocksbio) 记录一下SS的前世今生,以及一个简单的教程总结
+- [**1187**Star][6d] [Py] [lyft/cartography](https://github.com/lyft/cartography) Cartography is a Python tool that consolidates infrastructure assets and the relationships between them in an intuitive graph view powered by a Neo4j database.
+- [**1186**Star][3d] [C] [luigirizzo/netmap](https://github.com/luigirizzo/netmap) an framework for very fast packet I/O from userspace
+- [**1185**Star][2y] [C] [mubix/post-exploitation](https://github.com/mubix/post-exploitation) Post Exploitation Collection
+- [**1181**Star][8d] [C] [the-tcpdump-group/tcpdump](https://github.com/the-tcpdump-group/tcpdump) the TCPdump network dissector
+- [**1179**Star][2y] [Java] [weexteam/hackernews-app-powered-by-apache-weex](https://github.com/weexteam/hackernews-App-powered-by-Apache-Weex) A mobile app for Hacker News, which is powered by Weex and Vue.
+- [**1178**Star][4m] [C] [ambrop72/badvpn](https://github.com/ambrop72/badvpn) NCD scripting language, tun2socks proxifier, P2P VPN
+- [**1177**Star][7m] [ssrarchive/shadowsocks-rss](https://github.com/ssrarchive/shadowsocks-rss) Shadowsocksr project backup
+- [**1175**Star][5y] [Py] [hackappcom/ibrute](https://github.com/hackappcom/ibrute) AppleID bruteforce p0c
+- [**1174**Star][28d] [Py] [cujanovic/ssrf-testing](https://github.com/cujanovic/ssrf-testing) SSRF (Server Side Request Forgery) testing resources
+- [**1173**Star][3m] [Go] [shadowsocks/v2ray-plugin](https://github.com/shadowsocks/v2ray-plugin) A SIP003 plugin based on v2ray
+- [**1171**Star][6d] [JS] [lirantal/is-website-vulnerable](https://github.com/lirantal/is-website-vulnerable) finds publicly known security vulnerabilities in a website's frontend JavaScript libraries
+- [**1168**Star][22d] [Go] [genuinetools/reg](https://github.com/genuinetools/reg) Docker registry v2 command line client and repo listing generator with security checks.
+- [**1166**Star][1m] [Go] [shawn1m/overture](https://github.com/shawn1m/overture) A customized DNS forwarder written in Go
+- [**1165**Star][26d] [JS] [alonemonkey/frida-ios-dump](https://github.com/alonemonkey/frida-ios-dump) pull decrypted ipa from jailbreak device
+- [**1164**Star][17d] [Py] [programa-stic/barf-project](https://github.com/programa-stic/barf-project) A multiplatform open source Binary Analysis and Reverse engineering Framework
+- [**1164**Star][4y] [Ruby] [cryptosphere/cryptosphere](https://github.com/cryptosphere/cryptosphere) Encrypted peer-to-peer web application platform for decentralized, privacy-preserving applications
+- [**1162**Star][4m] [C] [skeeto/endlessh](https://github.com/skeeto/endlessh) SSH tarpit that slowly sends an endless banner
+- [**1162**Star][15d] [Go] [pusher/oauth2_proxy](https://github.com/pusher/oauth2_proxy) A reverse proxy that provides authentication with Google, Github or other providers.
+- [**1162**Star][1m] [TS] [mgechev/ngrev](https://github.com/mgechev/ngrev) Tool for reverse engineering of Angular applications
+- [**1159**Star][6y] [PHP] [lucb1e/cookielesscookies](https://github.com/lucb1e/cookielesscookies) Demo of tracking using etags instead of cookies (or localstorage or anything else)
+- [**1158**Star][22d] [m4ll0k/awesome-hacking-tools](https://github.com/m4ll0k/awesome-hacking-tools) Awesome Hacking Tools
+- [**1156**Star][7d] [Py] [p4-team/ctf](https://github.com/p4-team/ctf) Ctf solutions from p4 team
+- [**1155**Star][3m] [Go] [mozilla/mig](https://github.com/mozilla/mig) Distributed & real time digital forensics at the speed of the cloud
+- [**1151**Star][8m] [Py] [mebus/cupp](https://github.com/mebus/cupp) Common User Passwords Profiler (CUPP)
+- [**1150**Star][1y] [HTML] [nsacyber/windows-secure-host-baseline](https://github.com/nsacyber/Windows-Secure-Host-Baseline) Configuration guidance for implementing the Windows 10 and Windows Server 2016 DoD Secure Host Baseline settings. #nsacyber
+- [**1147**Star][1m] [Jupyter Notebook] [ibm/adversarial-robustness-toolbox](https://github.com/ibm/adversarial-robustness-toolbox) Python library for adversarial machine learning, attacks and defences for neural networks, logistic regression, decision trees, SVM, gradient boosted trees, Gaussian processes and more with multiple framework support
+- [**1145**Star][22d] [Py] [13o-bbr-bbq/machine_learning_security](https://github.com/13o-bbr-bbq/machine_learning_security) Source code about machine learning and security.
+ - [Security_and_MachineLearning](https://github.com/13o-bbr-bbq/machine_learning_security/tree/master/Security_and_MachineLearning) The elementary training course of Machine learning for security engineer.
+
+ - [Vulnerabilities_of_ML](https://github.com/13o-bbr-bbq/machine_learning_security/blob/master/Vulnerabilities_of_ML/) Summary of Machine Learning vulnerability.
+
+ - [Analytics](https://github.com/13o-bbr-bbq/machine_learning_security/tree/master/Analytics) Analyzing packet capture data using k-means.
+
+ - [CNN_test](https://github.com/13o-bbr-bbq/machine_learning_security/tree/master/CNN_test) Generate adversarial example against CNN.
+
+ - [DeepExploit](https://github.com/13o-bbr-bbq/machine_learning_security/tree/master/DeepExploit) Fully automatic penetration test tool using Machine Learning.
+
+ - [Generator](https://github.com/13o-bbr-bbq/machine_learning_security/tree/master/Generator) Fully automatically generate numerous injection codes for web application assessment using Genetic Algorithm and Generative Adversarial Networks.
+
+ - [Recommender](https://github.com/13o-bbr-bbq/machine_learning_security/tree/master/Recommender) Recommend optimal injection code for detecting web app vulnerabilities.
+
+ - [Saivs](https://github.com/13o-bbr-bbq/machine_learning_security/tree/master/Saivs) an artificial intelligence to find vulnerabilities in Web applications.
+- [**1144**Star][3y] [PS] [powershellempire/powertools](https://github.com/powershellempire/powertools) a collection of PowerShell projects with a focus on offensive operations.
+ - [PewPewPew](https://github.com/powershellempire/powertools/tree/master/PewPewPew) scripts that utilize a common pattern to host a script on a PowerShell webserver, invoke the IEX download cradle to download/execute the target code and post the results back to the server, and then post-process any results.
+ - [PowerBreach](https://github.com/powershellempire/powertools/tree/master/PowerBreach) a backdoor toolkit that aims to provide the user a wide variety of methods to backdoor a system.
+ - [PowerPick](https://github.com/powershellempire/powertools/tree/master/PowerPick) allowing the execution of Powershell functionality without the use of Powershell.exe
+- [**1143**Star][2d] [C] [nethack/nethack](https://github.com/nethack/nethack) Official NetHack Git Repository
+- [**1143**Star][4m] [C++] [cgdb/cgdb](https://github.com/cgdb/cgdb) Console front-end to the GNU debugger
+- [**1142**Star][7m] [hikariobfuscator/hikari](https://github.com/HikariObfuscator/Hikari) LLVM Obfuscator
+- [**1140**Star][5d] [w00t3k/awesome-cellular-hacking](https://github.com/w00t3k/awesome-cellular-hacking) Awesome-Cellular-Hacking
+- [**1140**Star][2m] [HTML] [cure53/httpleaks](https://github.com/cure53/httpleaks) HTTPLeaks - All possible ways, a website can leak HTTP requests
+- [**1139**Star][12d] [C] [xroche/httrack](https://github.com/xroche/httrack) download a World Wide website from the Internet to a local directory, building recursively all directories, getting html, images, and other files from the server to your computer.
+- [**1139**Star][4m] [Py] [rhinosecuritylabs/pacu](https://github.com/rhinosecuritylabs/pacu) The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.
+- [**1139**Star][21d] [Batchfile] [ckjbug/hacking](https://github.com/ckjbug/hacking)
+- [**1139**Star][11m] [Py] [certsocietegenerale/fir](https://github.com/certsocietegenerale/fir) Fast Incident Response
+- [**1138**Star][2d] [C] [shadowsocksr-live/shadowsocksr-native](https://github.com/shadowsocksr-live/shadowsocksr-native) 从容翻越党国敏感日 ShadowsocksR (SSR) native implementation for all platforms, GFW terminator
+- [**1138**Star][2y] [Py] [hackathonhackers/personal-sites](https://github.com/hackathonhackers/personal-sites) List of Hackathon Hackers' personal sites.
+- [**1138**Star][5d] [Py] [darkoperator/dnsrecon](https://github.com/darkoperator/dnsrecon) DNS Enumeration Script
+- [**1135**Star][6m] [nebgnahz/awesome-iot-hacks](https://github.com/nebgnahz/awesome-iot-hacks) A Collection of Hacks in IoT Space so that we can address them (hopefully).
+- [**1134**Star][4m] [Vue] [0xbug/hawkeye](https://github.com/0xbug/hawkeye) GitHub 泄露监控系统(GitHub Sensitive Information Leakage Monitor Spider)
+- [**1132**Star][2y] [C++] [x64dbg/gleebug](https://github.com/x64dbg/gleebug) Debugging Framework for Windows.
+- [**1132**Star][2y] [Py] [out0fmemory/goagent-always-available](https://github.com/out0fmemory/goagent-always-available) 一直可用的GoAgent,会定时扫描可用的google gae ip,提供可自动化获取ip运行的版本
+- [**1131**Star][5m] [Py] [qyriad/fusee-launcher](https://github.com/Qyriad/fusee-launcher) work-in-progress launcher for one of the Tegra X1 bootROM exploits
+- [**1130**Star][8m] [majikarp/awesome-programming-books](https://github.com/majikarp/awesome-programming-books)
+- [**1130**Star][2d] [C++] [crosire/reshade](https://github.com/crosire/reshade) A generic post-processing injector for games and video software.
+- [**1129**Star][22d] [HTML] [securitytxt/security-txt](https://github.com/securitytxt/security-txt) A proposed standard that allows websites to define security policies.
+- [**1128**Star][8m] [C++] [cppcon/cppcon2018](https://github.com/cppcon/cppcon2018) Slides and other materials from CppCon 2018
+- [**1127**Star][3m] [Go] [mmcloughlin/avo](https://github.com/mmcloughlin/avo) Generate x86 Assembly with Go
+- [**1125**Star][3m] [Py] [openai/neural-mmo](https://github.com/openai/neural-mmo) Code for the paper "Neural MMO: A Massively Multiagent Game Environment for Training and Evaluating Intelligent Agents"
+- [**1123**Star][7d] [C#] [nicehash/nicehashminer](https://github.com/nicehash/NiceHashMiner) NiceHash Miner
+- [**1122**Star][13d] [Java] [huangyz0918/androidwm](https://github.com/huangyz0918/androidwm) An android image watermark library that supports invisible digital watermarks (steganography).
+- [**1120**Star][3m] [Py] [thoughtfuldev/eagleeye](https://github.com/thoughtfuldev/eagleeye) Stalk your Friends. Find their Instagram, FB and Twitter Profiles using Image Recognition and Reverse Image Search.
+- [**1120**Star][2m] [bo0om/fuzz.txt](https://github.com/bo0om/fuzz.txt) Potentially dangerous files
+- [**1118**Star][10m] [Py] [openrce/sulley](https://github.com/openrce/sulley) A pure-python fully automated and unattended fuzzing framework.
+- [**1117**Star][1y] [paulsec/awesome-windows-domain-hardening](https://github.com/PaulSec/awesome-windows-domain-hardening) A curated list of awesome Security Hardening techniques for Windows.
+- [**1117**Star][3d] [C] [blacksphere/blackmagic](https://github.com/blacksphere/blackmagic) In application debugger for ARM Cortex microcontrollers.
+- [**1116**Star][6d] [PS] [microsoftdocs/virtualization-documentation](https://github.com/MicrosoftDocs/Virtualization-Documentation) Place to store our documentation, code samples, etc for public consumption.
+- [**1115**Star][1y] [ObjC] [yulingtianxia/fishchat](https://github.com/yulingtianxia/fishchat) Hook WeChat.app on non-jailbroken devices.
+- [**1115**Star][10m] [evilsocket/bleah](https://github.com/evilsocket/bleah) This repository is DEPRECATED, please use bettercap as this tool has been ported to its BLE modules.
+- [**1115**Star][1y] [aoh/radamsa](https://github.com/aoh/radamsa) a general-purpose fuzzer
+- [**1114**Star][3d] [Py] [hhyo/archery](https://github.com/hhyo/archery) SQL 审核查询平台
+- [**1113**Star][5m] [Java] [manbanggroup/phantom](https://github.com/manbanggroup/phantom) 唯一零 Hook 稳定占坑类 Android 热更新插件化方案
+- [**1113**Star][20d] [C++] [keystone-engine/keystone](https://github.com/keystone-engine/keystone) Keystone assembler framework: Core (Arm, Arm64, Hexagon, Mips, PowerPC, Sparc, SystemZ & X86) + bindings
+- [**1113**Star][2m] [Py] [john-kurkowski/tldextract](https://github.com/john-kurkowski/tldextract) Accurately separate the TLD from the registered domain and subdomains of a URL, using the Public Suffix List.
+- [**1110**Star][3y] [Shell] [fritz-smh/yi-hack](https://github.com/fritz-smh/yi-hack) Xiaomi Yi Ants camera hack
+- [**1110**Star][3y] [ObjC] [dyci/dyci-main](https://github.com/dyci/dyci-main) Dynamic Code Injection Tool for Objective-C
+- [**1110**Star][8m] [Py] [0x00-0x00/shellpop](https://github.com/0x00-0x00/shellpop) Pop shells like a master.
+- [**1109**Star][1y] [Py] [wibiti/uncompyle2](https://github.com/wibiti/uncompyle2) Python 2.7 decompiler
+- [**1108**Star][2d] [C++] [facebookincubator/oomd](https://github.com/facebookincubator/oomd) A userspace out-of-memory killer
+- [**1108**Star][1y] [Py] [byt3bl33d3r/gcat](https://github.com/byt3bl33d3r/gcat) A PoC backdoor that uses Gmail as a C&C server
+- [**1105**Star][5m] [zbetcheckin/security_list](https://github.com/zbetcheckin/security_list) Great security list for fun and profit
+- [**1103**Star][10d] [C] [solokeys/solo](https://github.com/solokeys/solo) open security key supporting FIDO2 & U2F over USB + NFC
+- [**1103**Star][23d] [slowmist/knowledge-base](https://github.com/slowmist/knowledge-base) Knowledge Base 慢雾安全团队知识库
+- [**1103**Star][1y] [ObjC] [neoneggplant/eggshell](https://github.com/neoneggplant/eggshell) iOS/macOS/Linux Remote Administration Tool
+- [**1103**Star][7d] [C++] [google/sandboxed-api](https://github.com/google/sandboxed-api) Sandboxed API automatically generates sandboxes for C/C++ libraries
+- [**1102**Star][1y] [Py] [bugcrowd/hunt](https://github.com/bugcrowd/HUNT) Burp和ZAP的扩展收集
+- [**1100**Star][13d] [Py] [gerbenjavado/linkfinder](https://github.com/gerbenjavado/linkfinder) A python script that finds endpoints in JavaScript files
+- [**1100**Star][5m] [Py] [coffeehb/some-poc-or-exp](https://github.com/coffeehb/some-poc-or-exp) 各种漏洞poc、Exp的收集或编写
+- [**1099**Star][19d] [Go] [sensepost/ruler](https://github.com/sensepost/ruler) A tool to abuse Exchange services
+- [**1097**Star][2y] [Py] [ring04h/wydomain](https://github.com/ring04h/wydomain) to discover subdomains of your target domain
+- [**1097**Star][7d] [OCaml] [binaryanalysisplatform/bap](https://github.com/binaryanalysisplatform/bap) Binary Analysis Platform
+- [**1097**Star][9m] [C] [baoleiji/qilinbaoleiji](https://github.com/baoleiji/qilinbaoleiji) 堡垒机-麒麟堡垒机,集堡垒机、SSLVPN-堡垒机内置、动态口令-堡垒机内置、应用审计-堡垒机内置、数据库审计-堡垒机内置、CA证书-堡垒机内置-堡垒机内置、云桌面-堡垒机内置、密码自动修改为一体的堡垒机系统
+- [**1096**Star][2m] [PHP] [tuhinshubhra/red_hawk](https://github.com/tuhinshubhra/red_hawk) All in one tool for Information Gathering, Vulnerability Scanning and Crawling. A must have tool for all penetration testers
+- [**1096**Star][1y] [PS] [rasta-mouse/sherlock](https://github.com/rasta-mouse/sherlock) PowerShell script to quickly find missing software patches for local privilege escalation vulnerabilities.
+- [**1095**Star][8m] [Ruby] [lionsec/xerosploit](https://github.com/lionsec/xerosploit) Efficient and advanced man in the middle framework
+- [**1092**Star][10m] [Py] [secforce/sparta](https://github.com/secforce/sparta) Network Infrastructure Penetration Testing Tool
+- [**1091**Star][3m] [JS] [leng-yue/lengyue-vcode](https://github.com/leng-yue/lengyue-vcode) 各种滑动验证码识别 [腾讯云] [易盾] [Vaptcha] [Geetest] [极验] 各种网站破解
+- [**1090**Star][15d] [C] [containers/bubblewrap](https://github.com/containers/bubblewrap) Unprivileged sandboxing tool
+- [**1090**Star][1m] [snoopysecurity/awesome-burp-extensions](https://github.com/snoopysecurity/awesome-burp-extensions) A curated list of amazingly awesome Burp Extensions
+- [**1090**Star][24d] [Verilog] [cliffordwolf/picorv32](https://github.com/cliffordwolf/picorv32) PicoRV32 - A Size-Optimized RISC-V CPU
+- [**1088**Star][28d] [Go] [looterz/grimd](https://github.com/looterz/grimd) Fast dns proxy that can run anywhere, built to black-hole internet advertisements and malware servers.
+- [**1087**Star][10d] [C++] [cxbx-reloaded/cxbx-reloaded](https://github.com/cxbx-reloaded/cxbx-reloaded) Xbox (Original) Emulator
+- [**1086**Star][6y] [C] [stephenfewer/reflectivedllinjection](https://github.com/stephenfewer/reflectivedllinjection) Reflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process.
+- [**1084**Star][2m] [Go] [nadoo/glider](https://github.com/nadoo/glider) a forward proxy with multiple protocols support, and also a dns forwarding server with ipset management features(like dnsmasq).
+- [**1083**Star][3m] [Py] [landgrey/pydictor](https://github.com/landgrey/pydictor) A powerful and useful hacker dictionary builder for a brute-force attack
+- [**1082**Star][8m] [Go] [sevlyar/go-daemon](https://github.com/sevlyar/go-daemon) A library for writing system daemons in golang.
+- [**1080**Star][2m] [PHP] [nbs-system/php-malware-finder](https://github.com/nbs-system/php-malware-finder) Detect potentially malicious PHP files
+- [**1078**Star][2d] [PHP] [automattic/jetpack](https://github.com/automattic/jetpack) Increase your traffic, view your stats, speed up your site, and protect yourself from hackers with Jetpack.
+- [**1077**Star][3m] [Py] [storyyeller/krakatau](https://github.com/storyyeller/krakatau) Java decompiler, assembler, and disassembler
+- [**1076**Star][2m] [Py] [stampery/mongoaudit](https://github.com/stampery/mongoaudit)
+- [**1075**Star][3d] [Py] [offensive-security/exploitdb-bin-sploits](https://github.com/offensive-security/exploitdb-bin-sploits) Exploit Database binary exploits located in the /sploits directory
+- [**1073**Star][3m] [C] [tpruvot/cpuminer-multi](https://github.com/tpruvot/cpuminer-multi) crypto cpuminer (linux + windows)
+- [**1073**Star][1m] [guardrailsio/awesome-golang-security](https://github.com/guardrailsio/awesome-golang-security) Awesome Golang Security resources
+- [**1072**Star][1m] [C++] [whitequark/unfork](https://github.com/whitequark/unfork) unfork(2) is the inverse of fork(2). sort of.
+- [**1072**Star][2y] [C++] [fireice-uk/xmr-stak-cpu](https://github.com/fireice-uk/xmr-stak-cpu) Monero CPU miner
+- [**1071**Star][3d] [Py] [googleprojectzero/domato](https://github.com/googleprojectzero/domato) DOM fuzzer
+- [**1071**Star][6m] [C] [tcurdt/iproxy](https://github.com/tcurdt/iproxy) Let's you connect your laptop to the iPhone to surf the web.
+- [**1071**Star][5m] [Py] [nccgroup/winpayloads](https://github.com/nccgroup/winpayloads) Undetectable Windows Payload Generation
+- [**1071**Star][7m] [Py] [lucifer1993/struts-scan](https://github.com/lucifer1993/struts-scan) struts2漏洞全版本检测和利用工具
+- [**1070**Star][3y] [C] [citusdata/pg_shard](https://github.com/citusdata/pg_shard) ATTENTION: pg_shard is superseded by Citus, its more powerful replacement
+- [**1068**Star][5y] [Py] [observerss/textfilter](https://github.com/observerss/textfilter) 敏感词过滤的几种实现+某1w词敏感词库
+- [**1065**Star][3m] [C] [zerosum0x0/cve-2019-0708](https://github.com/zerosum0x0/cve-2019-0708) Scanner PoC for CVE-2019-0708 RDP RCE vuln
+- [**1065**Star][7m] [PS] [nytrorst/netripper](https://github.com/nytrorst/netripper) Smart traffic sniffing for penetration testers
+- [**1063**Star][2y] [wtsxdev/machine-learning-for-cyber-security](https://github.com/wtsxdev/machine-learning-for-cyber-security) Curated list of tools and resources related to the use of machine learning for cyber security
+- [**1062**Star][27d] [C] [quiet/quiet](https://github.com/quiet/quiet) Transmit data with sound. Includes binaries for soundcards and .wav files.
+- [**1061**Star][3m] [Py] [infosec-au/altdns](https://github.com/infosec-au/altdns) Generates permutations, alterations and mutations of subdomains and then resolves them
+- [**1060**Star][2d] [Py] [forseti-security/forseti-security](https://github.com/forseti-security/forseti-security) A community-driven collection of open source tools to improve the security of your Google Cloud Platform environments
+- [**1057**Star][3y] [Perl] [samyk/usbdriveby](https://github.com/samyk/usbdriveby) USBdriveby exploits the trust of USB devices by emulating an HID keyboard and mouse, installing a cross-platform firewall-evading backdoor, and rerouting DNS within seconds of plugging it in.
+- [**1056**Star][9d] [Py] [yelp/detect-secrets](https://github.com/yelp/detect-secrets) An enterprise friendly way of detecting and preventing secrets in code.
+- [**1056**Star][9d] [Kotlin] [ingokegel/jclasslib](https://github.com/ingokegel/jclasslib) jclasslib bytecode viewer is a tool that visualizes all aspects of compiled Java class files and the contained bytecode.
+- [**1056**Star][5d] [Rust] [fgribreau/mailchecker](https://github.com/fgribreau/mailchecker) Cross-language email validation
+- [**1054**Star][9d] [C++] [simsong/tcpflow](https://github.com/simsong/tcpflow) TCP/IP packet demultiplexer. Download from:
+- [**1052**Star][7m] [C] [cr-marcstevens/sha1collisiondetection](https://github.com/cr-marcstevens/sha1collisiondetection) Library and command line tool to detect SHA-1 collision in a file
+- [**1052**Star][2m] [Boo] [byt3bl33d3r/silenttrinity](https://github.com/byt3bl33d3r/silenttrinity) An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR
+- [**1051**Star][9d] [C++] [wavm/wavm](https://github.com/WAVM/WAVM) WebAssembly Virtual Machine
+- [**1051**Star][27d] [Py] [sundowndev/phoneinfoga](https://github.com/sundowndev/phoneinfoga) Advanced information gathering & OSINT tool for phone numbers
+- [**1050**Star][3d] [Rust] [zboxfs/zbox](https://github.com/zboxfs/zbox) Zero-details, privacy-focused in-app file system.
+- [**1049**Star][14d] [Py] [yzddmr6/webshell-venom](https://github.com/yzddmr6/webshell-venom) 免杀webshell无限生成工具(利用随机异或无限免杀D盾)
+- [**1048**Star][15d] [Py] [fireeye/flare-ida](https://github.com/fireeye/flare-ida) Multiple IDA plugins and IDAPython scripts
+ - [StackStrings](https://github.com/fireeye/flare-ida/blob/master/plugins/stackstrings_plugin.py) recovery of manually constructed strings described [here](http://www.fireeye.com/blog/threat-research/2014/08/flare-ida-pro-script-series-automatic-recovery-of-constructed-strings-in-malware.html)
+ - [Struct Typer](https://github.com/fireeye/flare-ida/blob/master/plugins/struct_typer_plugin.py) implements the struct typing described [here](https://www.mandiant.com/blog/applying-function-types-structure-fields-ida/)
+ - [ApplyCalleeType](https://github.com/fireeye/flare-ida/blob/master/python/flare/apply_callee_type.py) specify or choose a function type for indirect calls as described [here](https://www.fireeye.com/blog/threat-research/2015/04/flare_ida_pro_script.html)
+ - [argtracker](https://github.com/fireeye/flare-ida/blob/master/python/flare/argtracker.py) identify static arguments to functions used within a program
+ - [idb2pat](https://github.com/fireeye/flare-ida/blob/master/python/flare/idb2pat.py) generate function patterns from an existing IDB database that can then be turned into FLIRT signatures to help identify similar functions in new files. [more info](https://www.fireeye.com/blog/threat-research/2015/01/flare_ida_pro_script.html)
+ - [objc2_analyzer](https://github.com/fireeye/flare-ida/blob/master/python/flare/objc2_analyzer.py) creates cross-references between selector references and their implementations as defined in the Objective-C runtime related sections of the target Mach-O executable
+ - [MSDN Annotations](https://github.com/fireeye/flare-ida/tree/master/python/flare/IDB_MSDN_Annotator) adds MSDN information from a XML file to the IDB database. [more info](https://www.fireeye.com/blog/threat-research/2014/09/flare-ida-pro-script-series-msdn-annotations-ida-pro-for-malware-analysis.html)
+ - [ironstrings](https://github.com/fireeye/flare-ida/tree/master/python/flare/ironstrings) uses code emulation to recover constructed strings (stackstrings) from malware
+ - [Shellcode Hashes](https://github.com/fireeye/flare-ida/tree/master/shellcode_hashes) create the database for hash search described in [here](https://www.mandiant.com/blog/precalculated-string-hashes-reverse-engineering-shellcode/)
+- [**1046**Star][20d] [denji/awesome-http-benchmark](https://github.com/denji/awesome-http-benchmark) HTTP(S) benchmark tools, testing/debugging, & restAPI (RESTful)
+- [**1045**Star][5m] [Py] [woj-ciech/kamerka](https://github.com/woj-ciech/kamerka) Build interactive map of cameras from Shodan
+- [**1044**Star][9m] [Shell] [firehol/firehol](https://github.com/firehol/firehol) A firewall for humans...
+- [**1041**Star][2m] [C] [trailofbits/ctf](https://github.com/trailofbits/ctf) CTF Field Guide
+- [**1041**Star][3m] [Py] [h4ckforjob/dirmap](https://github.com/h4ckforjob/dirmap) An advanced web directory & file scanning tool that will be more powerful than DirBuster, Dirsearch, cansina, and Yu Jian.一个高级web目录、文件扫描工具,功能将会强于DirBuster、Dirsearch、cansina、御剑。
+- [**1040**Star][8m] [Py] [lucifer1993/angelsword](https://github.com/lucifer1993/angelsword) Python3编写的CMS漏洞检测框架
+- [**1040**Star][4m] [PS] [kevin-robertson/inveigh](https://github.com/kevin-robertson/inveigh) Windows PowerShell ADIDNS/LLMNR/mDNS/NBNS spoofer/man-in-the-middle tool
+- [**1040**Star][2m] [JS] [freetubeapp/freetube](https://github.com/freetubeapp/freetube) An Open Source YouTube app for privacy
+- [**1040**Star][1m] [Py] [ezaquarii/vpn-at-home](https://github.com/ezaquarii/vpn-at-home) 1-click, self-hosted deployment of OpenVPN with DNS ad blocking sinkhole
+- [**1039**Star][1y] [Batchfile] [nextronsystems/aptsimulator](https://github.com/NextronSystems/APTSimulator) A toolset to make a system look as if it was the victim of an APT attack
+- [**1038**Star][1m] [C] [t6x/reaver-wps-fork-t6x](https://github.com/t6x/reaver-wps-fork-t6x) a brute force attack against Wifi Protected Setup (WPS) registrar PINs in order to recover WPA/WPA2 passphrases
+- [**1038**Star][7m] [nanopool/claymore-dual-miner](https://github.com/nanopool/claymore-dual-miner) Claymore's Dual Ethereum+Decred_Siacoin_Lbry AMD+NVIDIA GPU Miner
+- [**1037**Star][2m] [C] [xairy/kernel-exploits](https://github.com/xairy/kernel-exploits) My proof-of-concept exploits for the Linux kernel
+- [**1037**Star][7m] [HTML] [sindresorhus/devtools-detect](https://github.com/sindresorhus/devtools-detect) Detect if DevTools is open and its orientation
+- [**1036**Star][15d] [HTML] [defectdojo/django-defectdojo](https://github.com/defectdojo/django-defectdojo) DefectDojo is an open-source application vulnerability correlation and security orchestration tool.
+- [**1036**Star][5y] [C] [crmulliner/adbi](https://github.com/crmulliner/adbi) Android Dynamic Binary Instrumentation Toolkit
+- [**1032**Star][3y] [C++] [zyq8709/dexhunter](https://github.com/zyq8709/dexhunter) General Automatic Unpacking Tool for Android Dex Files
+- [**1032**Star][1y] [PS] [danmcinerney/icebreaker](https://github.com/danmcinerney/icebreaker) Gets plaintext Active Directory credentials if you're on the internal network but outside the AD environment
+- [**1029**Star][20d] [Py] [nccgroup/scoutsuite](https://github.com/nccgroup/scoutsuite) Multi-Cloud Security Auditing Tool
+- [**1029**Star][2y] [PS] [nccgroup/redsnarf](https://github.com/nccgroup/redsnarf) a pen-testing / red-teaming tool retrieving hashes and credentials from Windows workstations, servers and domain controllers using OpSec Safe Techniques
+- [**1029**Star][5m] [C] [govolution/avet](https://github.com/govolution/avet) AntiVirus Evasion Tool
+- [**1029**Star][29d] [denji/nginx-tuning](https://github.com/denji/nginx-tuning) NGINX tuning for best performance
+- [**1028**Star][18d] [Py] [ct-open-source/tuya-convert](https://github.com/ct-open-source/tuya-convert) A collection of scripts to flash Tuya IoT devices to alternative firmwares
+- [**1025**Star][6m] [stephenturner/oneliners](https://github.com/stephenturner/oneliners) Useful bash one-liners for bioinformatics.
+- [**1025**Star][2y] [ObjC] [zhengmin1989/ios_ice_and_fire](https://github.com/zhengmin1989/ios_ice_and_fire) iOS冰与火之歌
+- [**1024**Star][12m] [Go] [twitchyliquid64/subnet](https://github.com/twitchyliquid64/subnet) Simple, auditable & elegant VPN, built with TLS mutual authentication and TUN.
+- [**1024**Star][1y] [naetw/ctf-pwn-tips](https://github.com/naetw/ctf-pwn-tips) Here record some tips about pwn. Something is obsoleted and won't be updated. Sorry about that.
+- [**1021**Star][3m] [Py] [byt3bl33d3r/deathstar](https://github.com/byt3bl33d3r/deathstar) Automate getting Domain Admin using Empire
+- [**1019**Star][27d] [Shell] [trimstray/sandmap](https://github.com/trimstray/sandmap) Nmap on steroids. Simple CLI with the ability to run pure Nmap engine, 31 modules with 459 scan profiles.
+- [**1018**Star][1m] [C] [s0lst1c3/eaphammer](https://github.com/s0lst1c3/eaphammer) Targeted evil twin attacks against WPA2-Enterprise networks. Indirect wireless pivots using hostile portal attacks.
+- [**1018**Star][9m] [Go] [maliceio/malice](https://github.com/maliceio/malice) VirusTotal Wanna Be - Now with 100% more Hipster
+- [**1014**Star][3m] [HTML] [owasp/nodegoat](https://github.com/owasp/nodegoat) 学习OWASP安全威胁Top10如何应用到Web App的,以及如何处理
+- [**1014**Star][2y] [JS] [umpox/zero-width-detection](https://github.com/umpox/zero-width-detection) Invisibly inserting usernames into text with Zero-Width Characters
+- [**1014**Star][11d] [Py] [securestate/king-phisher](https://github.com/securestate/king-phisher) Phishing Campaign Toolkit
+- [**1014**Star][5m] [C++] [everdox/infinityhook](https://github.com/everdox/infinityhook) Hook system calls, context switches, page faults and more.
+- [**1014**Star][1y] [Py] [d4vinci/dr0p1t-framework](https://github.com/d4vinci/dr0p1t-framework) create an advanced stealthy dropper that bypass most AVs and have a lot of tricks
+- [**1014**Star][3y] [C++] [aguinet/wannakey](https://github.com/aguinet/wannakey) Wannacry in-memory key recovery
+- [**1011**Star][8d] [Rich Text Format] [decalage2/oletools](https://github.com/decalage2/oletools) oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.
+- [**1009**Star][1y] [C] [ionescu007/simplevisor](https://github.com/ionescu007/simplevisor) a simple, portable, Intel VT-x hypervisor with two specific goals: using the least amount of assembly code (10 lines), and having the smallest amount of VMX-related code to support dynamic hyperjacking and unhyperjacking (that is, virtualizing the host state from within the host). It works on Windows and UEFI.
+- [**1008**Star][24d] [Swift] [rockbruno/swiftshield](https://github.com/rockbruno/swiftshield) wift/OBJ-C Obfuscator
+- [**1008**Star][5d] [JS] [monzo/response](https://github.com/monzo/response) Monzo's real-time incident response and reporting tool
+- [**1008**Star][1y] [JS] [0xsobky/hackvault](https://github.com/0xsobky/hackvault) A container repository for my public web hacks!
+- [**1007**Star][1m] [Go] [justinas/nosurf](https://github.com/justinas/nosurf) CSRF protection middleware for Go.
+- [**1004**Star][1y] [Py] [entropy1337/infernal-twin](https://github.com/entropy1337/infernal-twin) wireless hacking - This is automated wireless hacking tool
+- [**1002**Star][24d] [C] [hacksysteam/hacksysextremevulnerabledriver](https://github.com/hacksysteam/hacksysextremevulnerabledriver) HackSys Extreme Vulnerable Windows Driver
+- [**1002**Star][1m] [C] [google/fuzzer-test-suite](https://github.com/google/fuzzer-test-suite) Set of tests for fuzzing engines
+- [**1001**Star][7m] [sundowndev/hacker-roadmap](https://github.com/sundowndev/hacker-roadmap)
+- [**1001**Star][9m] [onethawt/reverseengineering-reading-list](https://github.com/onethawt/reverseengineering-reading-list) A list of Reverse Engineering articles, books, and papers
+- [**1000**Star][11m] [Batchfile] [sagishahar-zz/lpeworkshop](https://github.com/sagishahar-zz/lpeworkshop) Windows / Linux Local Privilege Escalation Workshop
+- [**1000**Star][5m] [adolfintel/windows10-privacy](https://github.com/adolfintel/windows10-privacy) Windows 10 Privacy Guide
+- [**999**Star][28d] [C] [bt3gl/pentesting-toolkit](https://github.com/bt3gl/Pentesting-Toolkit) Tools for pentesting, CTFs & wargames.
+- [**999**Star][2m] [ObjC] [lmirosevic/gbdeviceinfo](https://github.com/lmirosevic/gbdeviceinfo) Detects the hardware, software and display of the current iOS or Mac OS X device at runtime.
+- [**999**Star][8m] [Go] [adtac/autovpn](https://github.com/adtac/autovpn) THIS PROJECT IS UNMAINTAINED.
+- [**998**Star][5m] [Ruby] [mdp/rotp](https://github.com/mdp/rotp) Ruby One Time Password library
+- [**998**Star][12m] [C#] [kenvix/usbcopyer](https://github.com/kenvix/usbcopyer) 插上U盘自动按需复制文件
+- [**998**Star][2y] [Py] [danmcinerney/xsscrapy](https://github.com/danmcinerney/xsscrapy) XSS spider - 66/66 wavsep XSS detected
+- [**997**Star][12m] [PHP] [secwiki/cms-hunter](https://github.com/secwiki/cms-hunter) CMS漏洞测试用例集合
+- [**996**Star][1m] [Py] [x0rz/phishing_catcher](https://github.com/x0rz/phishing_catcher) Phishing catcher using Certstream
+- [**995**Star][9m] [Go] [gencebay/httplive](https://github.com/gencebay/httplive) HTTP Request & Response Service, Mock HTTP
+- [**992**Star][4m] [C] [gsliepen/tinc](https://github.com/gsliepen/tinc) a VPN daemon
+- [**990**Star][1y] [Py] [tylous/sniffair](https://github.com/tylous/sniffair) A framework for wireless pentesting.
+- [**988**Star][3d] [C#] [k8gege/ladon](https://github.com/k8gege/ladon) 大型内网渗透扫描器&Cobalt Strike,包含信息收集/端口扫描/服务识别/网络资产/密码爆破/漏洞检测/漏洞利用。漏洞检测含MS17010、Weblogic、ActiveMQ、Tomcat等,密码口令爆破含(Mysql、Oracle、MSSQL)、FTP、SSH(Linux)、VNC、Windows(IPC、WMI、SMB)等,可高度自定义插件支持.NET程序集、DLL(C#/Delphi/VC)、PowerShell等语言编写的插件,支持通过配置INI批量调用任意外部程序或命令,EXP生成器一键生成Web漏洞POC,可快速扩展扫描或利用能力。支持Cobalt Strike插件化直接内存加载Ladon扫描快速拓展内网横向移动
+- [**988**Star][3y] [JS] [yahooarchive/xss-filters](https://github.com/YahooArchive/xss-filters) Secure XSS Filters.
+- [**988**Star][4m] [Go] [nosequeldeebee/blockchain-tutorial](https://github.com/nosequeldeebee/blockchain-tutorial) Write and publish your own blockchain in less than 200 lines of Go
+- [**987**Star][10m] [Py] [xiphosresearch/exploits](https://github.com/xiphosresearch/exploits) Miscellaneous exploit code
+- [**987**Star][3d] [Py] [jekil/awesome-hacking](https://github.com/jekil/awesome-hacking) Awesome hacking is an awesome collection of hacking tools.
+- [**986**Star][1m] [C] [wiire-a/pixiewps](https://github.com/wiire-a/pixiewps) An offline Wi-Fi Protected Setup brute-force utility
+- [**986**Star][1y] [HTML] [sensepost/mana](https://github.com/sensepost/mana) *DEPRECATED* mana toolkit for wifi rogue AP attacks and MitM
+- [**986**Star][3m] [Py] [ekultek/bluekeep](https://github.com/ekultek/bluekeep) Proof of concept for CVE-2019-0708
+- [**981**Star][1y] [Py] [fsecurelabs/needle](https://github.com/FSecureLABS/needle) The iOS Security Testing Framework
+- [**980**Star][1m] [C] [zardus/preeny](https://github.com/zardus/preeny) Some helpful preload libraries for pwning stuff.
+- [**980**Star][2m] [Py] [syss-research/seth](https://github.com/syss-research/seth) Perform a MitM attack and extract clear text credentials from RDP connections
+- [**979**Star][1m] [hoshsadiq/adblock-nocoin-list](https://github.com/hoshsadiq/adblock-nocoin-list) Block lists to prevent JavaScript miners
+- [**978**Star][23d] [JS] [lukechilds/reverse-shell](https://github.com/lukechilds/reverse-shell) Reverse Shell as a Service
+- [**978**Star][12d] [Py] [kiminewt/pyshark](https://github.com/kiminewt/pyshark) Python wrapper for tshark, allowing python packet parsing using wireshark dissectors
+- [**978**Star][2m] [Jupyter Notebook] [hyperparticle/one-pixel-attack-keras](https://github.com/hyperparticle/one-pixel-attack-keras) Keras implementation of "One pixel attack for fooling deep neural networks" using differential evolution on Cifar10 and ImageNet
+- [**978**Star][3y] [Py] [dowsnature/dowsdns](https://github.com/dowsnature/dowsdns) 快速翻跃中国防火墙
+- [**978**Star][26d] [Jupyter Notebook] [aarshayj/analytics_vidhya](https://github.com/aarshayj/analytics_vidhya) Codes related to activities on AV including articles, hackathons and discussions.
+- [**976**Star][7m] [0x4d31/awesome-threat-detection](https://github.com/0x4d31/awesome-threat-detection) A curated list of awesome threat detection and hunting resources
+- [**975**Star][3y] [Py] [synack/knockknock](https://github.com/synack/knockknock) displays persistent items (scripts, commands, binaries, etc.), that are set to execute automatically on OS X
+- [**975**Star][2y] [Py] [moosedojo/apt2](https://github.com/moosedojo/apt2) automated penetration toolkit
+- [**974**Star][24d] [Rust] [sozu-proxy/sozu](https://github.com/sozu-proxy/sozu) Sōzu HTTP reverse proxy, configurable at runtime, fast and safe, built in Rust. It is awesome! Ping us on gitter to know more
+- [**973**Star][2m] [Py] [ondyari/faceforensics](https://github.com/ondyari/faceforensics) Github of the FaceForensics dataset
+- [**973**Star][1m] [HTML] [n0tr00t/sreg](https://github.com/n0tr00t/sreg) 可对使用者通过输入email、phone、username的返回用户注册的所有互联网护照信息。
+- [**973**Star][7m] [Py] [m57/dnsteal](https://github.com/m57/dnsteal) DNS Exfiltration tool for stealthily sending files over DNS requests.
+- [**973**Star][12m] [Java] [huolizhuminh/networkpacketcapture](https://github.com/huolizhuminh/networkpacketcapture) It is used to capture network packet via Android VPN.
+- [**972**Star][6d] [C++] [herumi/xbyak](https://github.com/herumi/xbyak) a JIT assembler for x86(IA-32)/x64(AMD64, x86-64) MMX/SSE/SSE2/SSE3/SSSE3/SSE4/FPU/AVX/AVX2/AVX-512 by C++ header
+- [**971**Star][29d] [Py] [x64dbg/docs](https://github.com/x64dbg/docs) x64dbg Documentation
+- [**971**Star][27d] [Go] [vishvananda/netlink](https://github.com/vishvananda/netlink) Simple netlink library for go.
+- [**971**Star][3m] [ctfs/resources](https://github.com/ctfs/resources) A general collection of information, tools, and tips regarding CTFs and similar security competitions
+- [**969**Star][4m] [Assembly] [corkami/pocs](https://github.com/corkami/pocs) Proof of Concepts (PE, PDF...)
+- [**968**Star][5m] [C] [rbsec/sslscan](https://github.com/rbsec/sslscan) sslscan tests SSL/TLS enabled services to discover supported cipher suites
+- [**968**Star][2m] [C] [olimex/olinuxino](https://github.com/olimex/olinuxino) OLINUXINO is Open Source / Open Hardware, low cost from EUR 24 Linux Industrial grade Single Board Computer capable to operate -25+85C
+- [**967**Star][8m] [Py] [selwin/python-user-agents](https://github.com/selwin/python-user-agents) A Python library that provides an easy way to identify devices like mobile phones, tablets and their capabilities by parsing (browser) user agent strings.
+- [**967**Star][4m] [Go] [dominicbreuker/pspy](https://github.com/dominicbreuker/pspy) a command line tool designed to snoop on processes without need for root permissions
+- [**966**Star][3y] [C] [cybellum/doubleagent](https://github.com/cybellum/doubleagent) Zero-Day Code Injection and Persistence Technique
+- [**966**Star][3y] [Java] [androidvts/android-vts](https://github.com/androidvts/android-vts) Android Vulnerability Test Suite - In the spirit of open data collection, and with the help of the community, let's take a pulse on the state of Android security. NowSecure presents an on-device app to test for recent device vulnerabilities.
+- [**965**Star][5d] [C++] [dvorka/mindforger](https://github.com/dvorka/mindforger) Thinking notebook and Markdown IDE.
+- [**965**Star][1m] [C#] [cobbr/covenant](https://github.com/cobbr/covenant) Covenant is a collaborative .NET C2 framework for red teamers.
+- [**964**Star][7m] [PHP] [jenssegers/optimus](https://github.com/jenssegers/optimus) id transformation With this library, you can transform your internal id's to obfuscated integers based on Knuth's integer has和
+- [**962**Star][4m] [Py] [0xinfection/tidos-framework](https://github.com/0xInfection/TIDoS-Framework) The Offensive Manual Web Application Penetration Testing Framework.
+- [**962**Star][3d] [bromite/bromite](https://github.com/bromite/bromite) Bromite is Chromium plus ad blocking and privacy enhancements; take back your browser!
+- [**962**Star][3y] [Py] [abatchy17/windowsexploits](https://github.com/abatchy17/windowsexploits) Windows exploits, mostly precompiled. Not being updated. Check
+- [**961**Star][4y] [pillarjs/understanding-csrf](https://github.com/pillarjs/understanding-csrf) What are CSRF tokens and how do they work?
+- [**961**Star][1m] [PS] [netspi/powerupsql](https://github.com/netspi/powerupsql) A PowerShell Toolkit for Attacking SQL Server
+- [**961**Star][3y] [Go] [jaksi/sshesame](https://github.com/jaksi/sshesame) A fake SSH server that lets everyone in and logs their activity
+- [**957**Star][2m] [JS] [pillarjs/cookies](https://github.com/pillarjs/cookies) Signed and unsigned cookies based on Keygrip
+- [**956**Star][2d] [Py] [shmilylty/oneforall](https://github.com/shmilylty/oneforall) subdomain collect
+- [**956**Star][27d] [Py] [fireeye/flare-fakenet-ng](https://github.com/fireeye/flare-fakenet-ng) Next Generation Dynamic Network Analysis Tool
+- [**955**Star][7d] [C++] [hasherezade/pe-sieve](https://github.com/hasherezade/pe-sieve) Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).
+- [**953**Star][4m] [Py] [hatriot/zarp](https://github.com/hatriot/zarp) a network attack tool centered around the exploitation of local networks
+- [**952**Star][12d] [HTML] [sprov065/v2-ui](https://github.com/sprov065/v2-ui) 支持多协议多用户的 v2ray 面板,Support multi-protocol multi-user v2ray panel
+- [**952**Star][1y] [JS] [fabienvauchelles/scrapoxy](https://github.com/fabienvauchelles/scrapoxy) Scrapoxy hides your scraper behind a cloud. It starts a pool of proxies to send your requests. Now, you can crawl without thinking about blacklisting!
+- [**951**Star][8d] [Py] [mozilla/openwpm](https://github.com/mozilla/OpenWPM) A web privacy measurement framework
+- [**951**Star][2y] [C] [fdiskyou/injectallthethings](https://github.com/fdiskyou/injectallthethings) Seven different DLL injection techniques in one single project.
+- [**950**Star][2y] [Py] [trycatchhcf/cloakify](https://github.com/trycatchhcf/cloakify) CloakifyFactory - Data Exfiltration & Infiltration In Plain Sight; Convert any filetype into list of everyday strings, using Text-Based Steganography; Evade DLP/MLS Devices, Defeat Data Whitelisting Controls, Social Engineering of Analysts, Evade AV Detection
+- [**948**Star][2y] [Py] [arnaucube/coffeeminer](https://github.com/arnaucube/coffeeMiner) collaborative (mitm) cryptocurrency mining pool in wifi networks
+- [**947**Star][6m] [C] [dhavalkapil/heap-exploitation](https://github.com/dhavalkapil/heap-exploitation) This book on heap exploitation is a guide to understanding the internals of glibc's heap and various attacks possible on the heap structure.
+- [**947**Star][8d] [HTML] [darksecdevelopers/hiddeneye](https://github.com/darksecdevelopers/hiddeneye) Modern Phishing Tool With Advanced Functionality And Multiple Tunnelling Services [ Android-Support-Available ]
+- [**946**Star][9d] [Py] [sashs/ropper](https://github.com/sashs/ropper) Display information about files in different file formats and find gadgets to build rop chains for different architectures (x86/x86_64, ARM/ARM64, MIPS, PowerPC, SPARC64). For disassembly ropper uses the awesome Capstone Framework.
+- [**946**Star][4d] [Go] [ffuf/ffuf](https://github.com/ffuf/ffuf) Fast web fuzzer written in Go
+- [**946**Star][2m] [C] [basil00/divert](https://github.com/basil00/divert) Windows Packet Divert
+- [**944**Star][2m] [C++] [cisco-talos/clamav-devel](https://github.com/Cisco-Talos/clamav-devel) ClamAV Development - FAQ is here:
+- [**944**Star][2y] [C#] [invoke-ir/powerforensics](https://github.com/invoke-ir/powerforensics) PowerForensics provides an all in one platform for live disk forensic analysis
+- [**944**Star][4m] [Py] [intelxed/xed](https://github.com/intelxed/xed) x86 encoder decoder
+- [**943**Star][13d] [Py] [theupdateframework/tuf](https://github.com/theupdateframework/tuf) A framework for securing software update systems
+- [**942**Star][2y] [HTML] [chybeta/software-security-learning](https://github.com/chybeta/software-security-learning) Software-Security-Learning
+- [**941**Star][3m] [zhaoweih/shadowsocks-tutorial](https://github.com/zhaoweih/shadowsocks-tutorial)
+- [**940**Star][5y] [Py] [mothran/bunny](https://github.com/mothran/bunny) Bunny is a wireless. meshing, darknet that uses 802.11 to hide its communications
+- [**940**Star][10m] [Shell] [1n3/findsploit](https://github.com/1n3/findsploit) Find exploits in local and online databases instantly
+- [**939**Star][1y] [JS] [netflix-skunkworks/sleepy-puppy](https://github.com/Netflix-Skunkworks/sleepy-puppy) Sleepy Puppy XSS Payload Management Framework
+- [**939**Star][12m] [Py] [gaasedelen/lighthouse](https://github.com/gaasedelen/lighthouse) Code Coverage Explorer for IDA Pro & Binary Ninja
+ - [coverage-frida](https://github.com/gaasedelen/lighthouse/blob/master/coverage/frida/README.md) 使用Frida收集信息
+ - [coverage-pin](https://github.com/gaasedelen/lighthouse/blob/master/coverage/pin/README.md) 使用Pin收集覆盖信息
+ - [插件](https://github.com/gaasedelen/lighthouse/blob/master/plugin/lighthouse_plugin.py) 支持IDA和BinNinja
+- [**939**Star][3y] [Py] [countercept/doublepulsar-detection-script](https://github.com/countercept/doublepulsar-detection-script) A python2 script for sweeping a network to find windows systems compromised with the DOUBLEPULSAR implant.
+- [**939**Star][3m] [Py] [christophetd/cloudflair](https://github.com/christophetd/cloudflair) a tool to find origin servers of websites protected by CloudFlare who are publicly exposed and don't restrict network access to the CloudFlare IP ranges as they should
+- [**939**Star][4m] [bugcrowd/bugcrowd_university](https://github.com/bugcrowd/bugcrowd_university) Open source education content for the researcher community
+- [**938**Star][9m] [wtsxdev/penetration-testing](https://github.com/wtsxdev/penetration-testing) List of awesome penetration testing resources, tools and other shiny things
+- [**938**Star][17d] [Py] [knownsec/pocsuite3](https://github.com/knownsec/pocsuite3) remote vulnerability testing framework developed by the Knownsec 404 Team.
+- [**938**Star][2y] [Perl] [infobyte/evilgrade](https://github.com/infobyte/evilgrade) a modular framework that allows the user to take advantage of poor upgrade implementations by injecting fake updates
+- [**936**Star][2y] [deepspaceharbor/awesome-ai-security](https://github.com/DeepSpaceHarbor/Awesome-AI-Security)
+- [**936**Star][2y] [C++] [securesocketfunneling/ssf](https://github.com/securesocketfunneling/ssf) Secure Socket Funneling - Network tool and toolkit - TCP and UDP port forwarding, SOCKS proxy, remote shell, standalone and cross platform
+- [**935**Star][1y] [Java] [google/firing-range](https://github.com/google/firing-range) a test bed for web application security scanners, providing synthetic, wide coverage for an array of vulnerabilities.
+- [**935**Star][2m] [Py] [d4vinci/one-lin3r](https://github.com/d4vinci/one-lin3r) Gives you one-liners that aids in penetration testing operations, privilege escalation and more
+- [**934**Star][13d] [Ruby] [david942j/one_gadget](https://github.com/david942j/one_gadget) The best tool for finding one gadget RCE in libc.so.6
+- [**933**Star][2y] [Py] [tomchop/malcom](https://github.com/tomchop/malcom) Malcom - Malware Communications Analyzer
+- [**931**Star][30d] [Py] [nullsecuritynet/tools](https://github.com/nullsecuritynet/tools) Security and Hacking Tools, Exploits, Proof of Concepts, Shellcodes, Scripts.
+- [**930**Star][5m] [threathuntingproject/threathunting](https://github.com/threathuntingproject/threathunting) An informational repo about hunting for adversaries in your IT environment.
+- [**930**Star][7d] [C++] [kde/heaptrack](https://github.com/kde/heaptrack) A heap memory profiler for Linux
+- [**930**Star][6d] [OCaml] [airbus-seclab/bincat](https://github.com/airbus-seclab/bincat) a static Binary Code Analysis Toolkit, designed to help reverse engineers, directly from IDA or using Python for automation.
+- [**929**Star][7m] [Py] [osirislab/hack-night](https://github.com/osirislab/Hack-Night) a sobering introduction to offensive security
+- [**928**Star][3y] [C] [tyilo/insert_dylib](https://github.com/tyilo/insert_dylib) Command line utility for inserting a dylib load command into a Mach-O binary
+- [**928**Star][9m] [C] [microsoft/windows-driver-frameworks](https://github.com/microsoft/windows-driver-frameworks) a set of libraries that make it simple to write high-quality device drivers.
+- [**927**Star][2y] [C++] [genoil/cpp-ethereum](https://github.com/genoil/cpp-ethereum) [Warning: Repo inactive] Ethereum GPU miner with OpenCL, CUDA and stratum support
+- [**927**Star][1y] [Py] [m4n3dw0lf/pythem](https://github.com/m4n3dw0lf/pythem) pentest framework
+- [**927**Star][4m] [Py] [airbnb/binaryalert](https://github.com/airbnb/binaryalert) Serverless, Real-time & Retroactive Malware Detection.
+- [**926**Star][3y] [Eagle] [samyk/keysweeper](https://github.com/samyk/keysweeper) KeySweeper is a stealthy Arduino-based device, camouflaged as a functioning USB wall charger, that wirelessly and passively sniffs, decrypts, logs and reports back (over GSM) all keystrokes from any Microsoft wireless keyboard in the vicinity.
+- [**925**Star][8m] [JS] [song-li/cross_browser](https://github.com/song-li/cross_browser) cross_browser_fingerprinting
+- [**924**Star][5m] [PHP] [tidesec/wdscanner](https://github.com/tidesec/wdscanner) WDScanner平台目前实现了如下功能:分布式web漏洞扫描、客户管理、漏洞定期扫描、子域名枚举、端口扫描、网站爬虫、暗链检测、坏链检测、网站指纹搜集、专项漏洞检测、代理搜集及部署等功能。
+- [**924**Star][1y] [C++] [miek/inspectrum](https://github.com/miek/inspectrum) analysing captured signals, primarily from software-defined radio receivers.
+- [**924**Star][3d] [Py] [eliben/pyelftools](https://github.com/eliben/pyelftools) Parsing ELF and DWARF in Python
+- [**923**Star][3m] [Ruby] [weppos/whois](https://github.com/weppos/whois) An intelligent — pure Ruby — WHOIS client and parser.
+- [**923**Star][2m] [Py] [tuhinshubhra/cmseek](https://github.com/tuhinshubhra/cmseek) CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and over 170 other CMSs
+- [**923**Star][3m] [Py] [sa7mon/s3scanner](https://github.com/sa7mon/s3scanner) Scan for open AWS S3 buckets and dump the contents
+- [**922**Star][1y] [Shell] [ywb94/openwrt-ssr](https://github.com/ywb94/openwrt-ssr) ShadowsocksR-libev for OpenWrt
+- [**922**Star][2y] [C#] [jaredhaight/psattack](https://github.com/jaredhaight/psattack) A portable console aimed at making pentesting with PowerShell a little easier.
+- [**921**Star][2d] [Go] [grafeas/grafeas](https://github.com/grafeas/grafeas) Artifact Metadata API
+- [**921**Star][2y] [JS] [diracdeltas/sniffly](https://github.com/diracdeltas/sniffly) Sniffing browser history using HSTS
+- [**919**Star][2y] [HTML] [snorby/snorby](https://github.com/snorby/snorby) Ruby On Rails Application For Network Security Monitoring
+- [**918**Star][2d] [C#] [googleprojectzero/sandbox-attacksurface-analysis-tools](https://github.com/googleprojectzero/sandbox-attacksurface-analysis-tools) Set of tools to analyze and attack Windows sandboxes.
+- [**918**Star][1m] [Go] [opensec-cn/kunpeng](https://github.com/opensec-cn/kunpeng) POC Framework
+- [**918**Star][6m] [PS] [api0cradle/ultimateapplockerbypasslist](https://github.com/api0cradle/ultimateapplockerbypasslist) The goal of this repository is to document the most common techniques to bypass AppLocker.
+- [**917**Star][1m] [tom0li/collection-document](https://github.com/tom0li/collection-document) Collection of quality safety articles
+- [**917**Star][6m] [JS] [reswitched/pegaswitch](https://github.com/reswitched/pegaswitch) PegaSwitch is an exploit toolkit for the Nintendo Switch
+- [**916**Star][7y] [designativedave/androrat](https://github.com/designativedave/androrat) Remote Administration Tool for Android devices
+- [**914**Star][8m] [C] [0x90/wifi-arsenal](https://github.com/0x90/wifi-arsenal) WiFi arsenal
+- [**913**Star][23d] [Go] [square/ghostunnel](https://github.com/square/ghostunnel) A simple SSL/TLS proxy with mutual authentication for securing non-TLS services
+- [**912**Star][8m] [ObjC] [tobefuturer/restore-symbol](https://github.com/tobefuturer/restore-symbol) A reverse engineering tool to restore stripped symbol table for iOS app.
+- [**912**Star][2m] [TeX] [ethereum/yellowpaper](https://github.com/ethereum/yellowpaper) The "Yellow Paper": Ethereum's formal specification
+- [**912**Star][7d] [C#] [elevenpaths/foca](https://github.com/elevenpaths/foca) Tool to find metadata and hidden information in the documents.
+- [**912**Star][3y] [Rust] [dagenix/rust-crypto](https://github.com/dagenix/rust-crypto) A (mostly) pure-Rust implementation of various cryptographic algorithms.
+- [**912**Star][7m] [cn0xroot/rfsec-toolkit](https://github.com/cn0xroot/rfsec-toolkit) RFSec-ToolKit is a collection of Radio Frequency Communication Protocol Hacktools.无线通信协议相关的工具集,可借助SDR硬件+相关工具对无线通信进行研究。Collect with ♥ by HackSmith
+- [**910**Star][8m] [HTML] [thelinuxchoice/shellphish](https://github.com/thelinuxchoice/shellphish) Phishing Tool for 18 social media: Instagram, Facebook, Snapchat, Github, Twitter, Yahoo, Protonmail, Spotify, Netflix, Linkedin, Wordpress, Origin, Steam, Microsoft, InstaFollowers, Gitlab, Pinterest
+- [**910**Star][9m] [Shell] [ivanilves/xiringuito](https://github.com/ivanilves/xiringuito) SSH-based "VPN for poors"
+- [**910**Star][8d] [C] [arm-software/arm-trusted-firmware](https://github.com/arm-software/arm-trusted-firmware) a reference implementation of secure world software for Arm A-Profile architectures (Armv8-A and Armv7-A), including an Exception Level 3 (EL3) Secure Monitor.
+- [**909**Star][2y] [Py] [sweetsoftware/ares](https://github.com/sweetsoftware/ares) Python botnet and backdoor
+- [**909**Star][7y] [Java] [sonyxperiadev/apkanalyser](https://github.com/sonyxperiadev/apkanalyser)
+- [**909**Star][1y] [Swift] [skreweverything/swift-keylogger](https://github.com/skreweverything/swift-keylogger) Keylogger for mac written in Swift using HID
+- [**908**Star][5y] [Py] [pwnieexpress/raspberry_pwn](https://github.com/pwnieexpress/raspberry_pwn) A Raspberry Pi pentesting suite by Pwnie Express
+- [**907**Star][7y] [C] [jbangert/trapcc](https://github.com/jbangert/trapcc) Computing with traps
+- [**906**Star][7m] [C++] [dfhack/dfhack](https://github.com/DFHack/dfhack) Memory hacking library for Dwarf Fortress and a set of tools that use it
+- [**906**Star][3y] [Java] [summitt/burp-non-http-extension](https://github.com/summitt/burp-non-http-extension) Non-HTTP Protocol Extension (NoPE) Proxy and DNS for Burp Suite.
+- [**906**Star][19d] [Py] [mschwager/fierce](https://github.com/mschwager/fierce) A DNS reconnaissance tool for locating non-contiguous IP space.
+- [**906**Star][5m] [Py] [m0rtem/cloudfail](https://github.com/m0rtem/cloudfail) Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network
+- [**905**Star][2d] [C++] [seladb/pcapplusplus](https://github.com/seladb/pcapplusplus) PcapPlusPlus is a multiplatform C++ library for capturing, parsing and crafting of network packets. It is designed to be efficient, powerful and easy to use. It provides C++ wrappers for the most popular packet processing engines such as libpcap, WinPcap, DPDK and PF_RING.
+- [**904**Star][3m] [ObjC] [ptoomey3/keychain-dumper](https://github.com/ptoomey3/keychain-dumper) A tool to check which keychain items are available to an attacker once an iOS device has been jailbroken
+- [**904**Star][1y] [Go] [huacnlee/flora-kit](https://github.com/huacnlee/flora-kit) 基于 shadowsocks-go 做的完善实现,完全兼容 Surge 的配置文件
+- [**903**Star][6y] [C] [visgean/zeus](https://github.com/visgean/zeus) NOT MY CODE! Zeus trojan horse - leaked in 2011, I am not the author. I have created this repository to make the access for study as easy as possible.
+- [**903**Star][6d] [C] [cossacklabs/themis](https://github.com/cossacklabs/themis) Easy to use cryptographic framework for data protection: secure messaging with forward secrecy and secure data storage. Has unified APIs across 12 platforms.
+- [**902**Star][28d] [Go] [mehrdadrad/radvpn](https://github.com/mehrdadrad/radvpn) Decentralized VPN
+- [**901**Star][8d] [Py] [hasecuritysolutions/vulnwhisperer](https://github.com/HASecuritySolutions/VulnWhisperer) Create actionable data from your Vulnerability Scans
+- [**901**Star][1y] [Py] [nixawk/labs](https://github.com/nixawk/labs) Vulnerability Labs for security analysis
+- [**897**Star][5y] [Java] [wszf/androrat](https://github.com/wszf/androrat) Remote Administration Tool for Android
+- [**897**Star][13d] [Shell] [dominicbreuker/stego-toolkit](https://github.com/dominicbreuker/stego-toolkit) Collection of steganography tools - helps with CTF challenges
+- [**896**Star][1m] [Py] [woj-ciech/leaklooker](https://github.com/woj-ciech/leaklooker) Find open databases - Powered by Binaryedge.io
+- [**896**Star][10m] [C++] [secrary/injectproc](https://github.com/secrary/injectproc) Process Injection Techniques [This project is not maintained anymore]
+- [**896**Star][14d] [C++] [adafruit/adafruit_ssd1306](https://github.com/adafruit/adafruit_ssd1306) Arduino library for SSD1306 monochrome 128x64 and 128x32 OLEDs
+- [**894**Star][2y] [Ruby] [whitewidowscanner/whitewidow](https://github.com/whitewidowscanner/whitewidow) SQL Vulnerability Scanner
+- [**894**Star][3m] [Py] [trustedsec/hate_crack](https://github.com/trustedsec/hate_crack) A tool for automating cracking methodologies through Hashcat from the TrustedSec team.
+- [**893**Star][11m] [JS] [levskaya/jslinux-deobfuscated](https://github.com/levskaya/jslinux-deobfuscated) An old version of Mr. Bellard's JSLinux rewritten to be human readable, hand deobfuscated and annotated.
+- [**891**Star][4m] [derpopo/uabe](https://github.com/derpopo/uabe) Unity Assets Bundle Extractor
+- [**890**Star][30d] [Go] [smallstep/cli](https://github.com/smallstep/cli) 🧰 A zero trust swiss army knife for working with X509, OAuth, JWT, OATH OTP, etc.
+- [**889**Star][9d] [Py] [swisskyrepo/ssrfmap](https://github.com/swisskyrepo/ssrfmap) Automatic SSRF fuzzer and exploitation tool
+- [**888**Star][11d] [C] [buserror/simavr](https://github.com/buserror/simavr) simavr is a lean, mean and hackable AVR simulator for linux & OSX
+- [**887**Star][12m] [Py] [rev3rsesecurity/webmap](https://github.com/rev3rsesecurity/webmap) Nmap Web Dashboard and Reporting
+- [**887**Star][2y] [Perl] [p0pr0ck5/lua-resty-waf](https://github.com/p0pr0ck5/lua-resty-waf) High-performance WAF built on the OpenResty stack
+- [**886**Star][2y] [PS] [windowsexploits/exploits](https://github.com/windowsexploits/exploits) Windows Exploits
+- [**886**Star][9d] [Py] [ajinabraham/nodejsscan](https://github.com/ajinabraham/nodejsscan) NodeJsScan is a static security code scanner for Node.js applications.
+- [**885**Star][4m] [C] [theofficialflow/h-encore](https://github.com/theofficialflow/h-encore) Fully chained kernel exploit for the PS Vita on firmwares 3.65-3.68
+- [**885**Star][5m] [JS] [dpnishant/appmon](https://github.com/dpnishant/appmon) an automated framework for monitoring and tampering system API calls of native macOS, iOS and android apps. It is based on Frida.
+- [**884**Star][2y] [Py] [nsacyber/gosecure](https://github.com/nsacyber/goSecure) An easy to use and portable Virtual Private Network (VPN) system built with Linux and a Raspberry Pi. #nsacyber
+- [**884**Star][27d] [C++] [whid-injector/whid](https://github.com/whid-injector/whid) WiFi HID Injector - An USB Rubberducky / BadUSB On Steroids.
+- [**882**Star][4m] [Kotlin] [eycorsican/kitsunebi-android](https://github.com/eycorsican/kitsunebi-android) A fully-featured V2Ray client for Android.
+- [**879**Star][5d] [Py] [derekselander/lldb](https://github.com/derekselander/lldb) A collection of LLDB aliases/regexes and Python scripts to aid in your debugging sessions
+- [**879**Star][7d] [C] [apple/cups](https://github.com/apple/cups) a standards-based, open source printing system
+- [**878**Star][3d] [JS] [opencti-platform/opencti](https://github.com/opencti-platform/opencti) Open Cyber Threat Intelligence Platform
+- [**878**Star][3y] [bastilleresearch/mousejack](https://github.com/bastilleresearch/mousejack) MouseJack device discovery and research tools
+- [**878**Star][21d] [aptnotes/data](https://github.com/aptnotes/data) APTnotes data
+- [**877**Star][1m] [HTML] [hookmaster/frida-all-in-one](https://github.com/hookmaster/frida-all-in-one) 《FRIDA操作手册》by
+- [**877**Star][2m] [C] [504ensicslabs/lime](https://github.com/504ensicslabs/lime) LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices, such as those powered by Android. The tool supports acquiring memory either to the file system of the device or over the network. LiME is unique in that it is the first tool that allows full memory captures f…
+- [**876**Star][2d] [C] [u-boot/u-boot](https://github.com/u-boot/u-boot) "Das U-Boot" Source Tree
+- [**876**Star][4m] [CSS] [outflanknl/redelk](https://github.com/outflanknl/redelk) tracking and alarming about Blue Team activities as well as better usability in long term operations.
+- [**875**Star][10m] [C++] [wisk/medusa](https://github.com/wisk/medusa) An open source interactive disassembler
+- [**875**Star][2m] [Ruby] [w181496/web-ctf-cheatsheet](https://github.com/w181496/web-ctf-cheatsheet) Web CTF CheatSheet
+- [**875**Star][2y] [Py] [marcwebbie/passpie](https://github.com/marcwebbie/passpie) Command-line password manager
+- [**875**Star][7m] [Py] [erocarrera/pefile](https://github.com/erocarrera/pefile) pefile is a Python module to read and work with PE (Portable Executable) files
+- [**874**Star][3m] [Py] [w-digital-scanner/w9scan](https://github.com/w-digital-scanner/w9scan) Plug-in type web vulnerability scanner
+- [**874**Star][8m] [Py] [redacted/xkcd-password-generator](https://github.com/redacted/xkcd-password-generator) Generate secure multiword passwords/passphrases, inspired by XKCD
+- [**872**Star][1m] [C] [cisco/joy](https://github.com/cisco/joy) 捕获和分析网络流数据和intraflow数据,用于网络研究、取证和安全监视
+- [**871**Star][2y] [C] [paboldin/meltdown-exploit](https://github.com/paboldin/meltdown-exploit) Meltdown exploit
+- [**871**Star][3m] [escapingbug/awesome-browser-exploit](https://github.com/escapingbug/awesome-browser-exploit) awesome list of browser exploitation tutorials
+- [**870**Star][1m] [C] [zhaojh329/rtty](https://github.com/zhaojh329/rtty) Access your device's terminal from anywhere via the web.
+- [**870**Star][20d] [Go] [itchyny/bed](https://github.com/itchyny/bed) Binary editor written in Go
+- [**870**Star][1m] [Py] [al0ne/vxscan](https://github.com/al0ne/vxscan) python3写的综合扫描工具,主要用来存活验证,敏感文件探测(目录扫描/js泄露接口/html注释泄露),WAF/CDN识别,端口扫描,指纹/服务识别,操作系统识别,POC扫描,SQL注入,绕过CDN,查询旁站等功能,主要用来甲方自测或乙方授权测试,请勿用来搞破坏。
+- [**870**Star][6m] [Go] [40t/go-sniffer](https://github.com/40t/go-sniffer)
+- [**867**Star][2y] [C] [aircrack-ng/aircrack-ng-archive](https://github.com/aircrack-ng/aircrack-ng-archive) Pre-migration repository. New repository ➙
+- [**867**Star][3m] [Java] [googlearchive/android-bluetoothlegatt](https://github.com/googlearchive/android-BluetoothLeGatt) Migrated:
+- [**867**Star][8m] [C++] [google/security-research-pocs](https://github.com/google/security-research-pocs) Proof-of-concept codes created as part of security research done by Google Security Team.
+- [**867**Star][4m] [Go] [fireeye/gocrack](https://github.com/fireeye/gocrack) a management frontend for password cracking tools written in Go
+- [**866**Star][10m] [Shell] [esc0rtd3w/wifi-hacker](https://github.com/esc0rtd3w/wifi-hacker) Shell Script For Attacking Wireless Connections Using Built-In Kali Tools. Supports All Securities (WEP, WPS, WPA, WPA2)
+- [**865**Star][10m] [Visual Basic .NET] [mdsecactivebreach/sharpshooter](https://github.com/mdsecactivebreach/sharpshooter) Payload Generation Framework
+- [**865**Star][2y] [C++] [illera88/ponce](https://github.com/illera88/ponce) Symbolic Execution just one-click away!
+- [**865**Star][8d] [PHP] [ambionics/phpggc](https://github.com/ambionics/phpggc) PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.
+- [**863**Star][9d] [Batchfile] [mr-xn/burpsuite-collections](https://github.com/mr-xn/burpsuite-collections) BurpSuite收集:包括不限于 Burp 文章、破解版、插件(非BApp Store)、汉化等相关教程,欢迎添砖加瓦---burpsuite-pro burpsuite-extender burpsuite cracked-version hackbar hacktools fuzzing fuzz-testing burp-plugin burp-extensions bapp-store brute-force-attacks brute-force-passwords waf sqlmap jar
+- [**863**Star][15d] [Java] [lamster2018/easyprotector](https://github.com/lamster2018/easyprotector) a simple way to check root/virtual app/emulator/xposed framework/tracer/debugger.
+- [**862**Star][3d] [explife0011/awesome-windows-kernel-security-development](https://github.com/explife0011/awesome-windows-kernel-security-development) windows kernel security development
+- [**861**Star][10d] [Py] [jimmy201602/webterminal](https://github.com/jimmy201602/webterminal) ssh rdp vnc telnet sftp bastion/jump web putty xshell terminal jumpserver audit realtime monitor rz/sz 堡垒机 云桌面 linux devops sftp websocket file management rz/sz 自动化运维 审计 录像 文件管理 sftp上传 实时监控 录像回放 网页版rz/sz上传下载 django
+- [**860**Star][2m] [jonascz/how-to-prevent-scraping](https://github.com/jonascz/how-to-prevent-scraping) The ultimate guide on preventing Website Scraping
+- [**860**Star][7m] [Py] [s0md3v/recondog](https://github.com/s0md3v/ReconDog) Reconnaissance Swiss Army Knife
+- [**858**Star][10m] [Shell] [shadowsocks/luci-app-shadowsocks](https://github.com/shadowsocks/luci-app-shadowsocks) OpenWrt/LEDE LuCI for Shadowsocks-libev
+- [**858**Star][18d] [Py] [ticarpi/jwt_tool](https://github.com/ticarpi/jwt_tool) a toolkit for validating, forging and cracking JWTs (JSON Web Tokens).
+- [**858**Star][2m] [ignitetechnologies/privilege-escalation](https://github.com/ignitetechnologies/privilege-escalation) This cheasheet is aimed at the CTF Players and Beginners to help them understand the fundamentals of Privilege Escalation with examples.
+- [**858**Star][1y] [Ruby] [enjoiz/xxeinjector](https://github.com/enjoiz/xxeinjector) Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.
+- [**857**Star][4d] [JS] [mellow-io/mellow](https://github.com/mellow-io/mellow) Mellow is a rule-based global transparent proxy client for Windows, macOS and Linux.
+- [**857**Star][2d] [Py] [circl/ail-framework](https://github.com/circl/ail-framework) AIL framework - Analysis Information Leak framework
+- [**856**Star][4m] [Py] [lijiejie/bbscan](https://github.com/lijiejie/bbscan) A vulnerability scanner focus on scanning large number of targets in short time with a minimal set of rules.
+- [**855**Star][2y] [CoffeeScript] [onplus/shadowsocks-heroku](https://github.com/onplus/shadowsocks-heroku) 一键部署 Free Shadowsocks-Heroku
+- [**855**Star][3d] [C++] [google/uiforetw](https://github.com/google/uiforetw) User interface for recording and managing ETW traces
+- [**854**Star][10m] [Shell] [thelinuxchoice/userrecon](https://github.com/thelinuxchoice/userrecon) Find usernames across over 75 social networks
+- [**854**Star][3m] [Py] [649/memcrashed-ddos-exploit](https://github.com/649/memcrashed-ddos-exploit) DDoS attack tool for sending forged UDP packets to vulnerable Memcached servers obtained using Shodan API
+- [**853**Star][2y] [PS] [curi0usjack/luckystrike](https://github.com/curi0usJack/luckystrike) A PowerShell based utility for the creation of malicious Office macro documents.
+- [**853**Star][2m] [JS] [vksrc/github-monitor](https://github.com/vksrc/github-monitor) Github Sensitive Information Leakage Monitor(Github信息泄漏监控系统)
+- [**853**Star][2m] [Go] [ukhomeoffice/repo-security-scanner](https://github.com/ukhomeoffice/repo-security-scanner) CLI tool that finds secrets accidentally committed to a git repo, eg passwords, private keys
+- [**853**Star][7m] [Go] [misecurity/x-patrol](https://github.com/misecurity/x-patrol) github泄露扫描系统
+- [**852**Star][2d] [C++] [henrypp/simplewall](https://github.com/henrypp/simplewall) Simple tool to configure Windows Filtering Platform (WFP) which can configure network activity on your computer.
+- [**852**Star][3y] [C++] [0vercl0k/rp](https://github.com/0vercl0k/rp) rp++ is a full-cpp written tool that aims to find ROP sequences in PE/Elf/Mach-O x86/x64 binaries. It is open-source and has been tested on several OS: Debian / Windows 8.1 / Mac OSX Lion (10.7.3). Moreover, it is x64 compatible and supports Intel syntax. Standalone executables can also be directly downloaded.
+- [**851**Star][1m] [Go] [sahilm/fuzzy](https://github.com/sahilm/fuzzy) Go library that provides fuzzy string matching optimized for filenames and code symbols in the style of Sublime Text, VSCode, IntelliJ IDEA et al.
+- [**851**Star][13d] [Py] [nil0x42/phpsploit](https://github.com/nil0x42/phpsploit) Stealth post-exploitation framework
+- [**851**Star][3y] [Py] [hubert3/isniff-gps](https://github.com/hubert3/isniff-gps) Passive sniffing tool for capturing and visualising WiFi location data disclosed by iOS devices
+- [**851**Star][7d] [JS] [cloudsploit/scans](https://github.com/cloudsploit/scans) Cloud security configuration checks
+- [**850**Star][1m] [C] [spacehuhn/wifi_ducky](https://github.com/spacehuhn/wifi_ducky) Upload, save and run keystroke injection payloads with an ESP8266 + ATMEGA32U4
+- [**849**Star][3d] [C] [zerbea/hcxtools](https://github.com/zerbea/hcxtools) Portable solution for capturing wlan traffic and conversion to hashcat formats (recommended by hashcat) and to John the Ripper formats. hcx: h = hash, c = capture, convert and calculate candidates, x = different hashtypes
+- [**849**Star][29d] [Roff] [slimm609/checksec.sh](https://github.com/slimm609/checksec.sh) a bash script to check the properties of executables (like PIE, RELRO, PaX, Canaries, ASLR, Fortify Source).
+- [**849**Star][5d] [Py] [lylemi/learn-web-hacking](https://github.com/lylemi/learn-web-hacking) Study Notes For Web Hacking
+- [**848**Star][12m] [PHP] [walkor/shadowsocks-php](https://github.com/walkor/shadowsocks-php) A php port of shadowsocks based on workerman. A socks5 proxy written in PHP.
+- [**847**Star][4y] [utkusen/hidden-tear](https://github.com/utkusen/hidden-tear) an open source ransomware honeypot
+- [**847**Star][2y] [Py] [nccgroup/demiguise](https://github.com/nccgroup/demiguise) HTA encryption tool for RedTeams
+- [**847**Star][3m] [Py] [anorov/pysocks](https://github.com/anorov/pysocks) A SOCKS proxy client and wrapper for Python.
+- [**846**Star][2d] [Shell] [firmadyne/firmadyne](https://github.com/firmadyne/firmadyne) Platform for emulation and dynamic analysis of Linux-based firmware
+- [**846**Star][3y] [C] [examplecode/mproxy](https://github.com/examplecode/mproxy) c 语言实现的一个最小的http代理,支持翻墙
+- [**845**Star][1y] [Py] [kgretzky/evilginx](https://github.com/kgretzky/evilginx) man-in-the-middle attack framework used for phishing credentials and session cookies of any web service
+- [**844**Star][3m] [Py] [x90skysn3k/brutespray](https://github.com/x90skysn3k/brutespray) Brute-Forcing from Nmap output - Automatically attempts default creds on found services.
+- [**844**Star][8m] [JS] [serpicoproject/serpico](https://github.com/serpicoproject/serpico) a penetration testing report generation and collaboration tool
+- [**844**Star][3d] [C++] [openzwave/open-zwave](https://github.com/openzwave/open-zwave) a C++ library to control Z-Wave Networks via a USB Z-Wave Controller.
+- [**844**Star][3d] [YARA] [neo23x0/signature-base](https://github.com/neo23x0/signature-base) Signature base for my scanner tools
+- [**843**Star][6m] [C] [brendan-rius/c-jwt-cracker](https://github.com/brendan-rius/c-jwt-cracker) JWT brute force cracker written in C
+- [**842**Star][3y] [Shell] [hellofwy/ss-bash](https://github.com/hellofwy/ss-bash) Shadowsocks流量管理脚本
+- [**842**Star][3y] [C] [gurnec/hashcheck](https://github.com/gurnec/hashcheck) HashCheck Shell Extension for Windows with added SHA2, SHA3, and multithreading; originally from code.kliu.org
+- [**842**Star][5d] [C] [emsec/chameleonmini](https://github.com/emsec/chameleonmini) The ChameleonMini is a versatile contactless smartcard emulator compliant to NFC. The ChameleonMini was developed by
+- [**841**Star][9d] [trimstray/iptables-essentials](https://github.com/trimstray/iptables-essentials) Common Firewall Rules and Commands.
+- [**841**Star][3y] [Py] [ring04h/weakfilescan](https://github.com/ring04h/weakfilescan) 动态多线程敏感信息泄露检测工具
+- [**840**Star][2m] [Go] [henson/proxypool](https://github.com/henson/proxypool) Golang实现的IP代理池
+- [**840**Star][5m] [Java] [dragonite-network/dragonite-java](https://github.com/dragonite-network/dragonite-java) A reliable application level data transport protocol based on UDP, highly optimized for lossy & unstable networks. (Java version)
+- [**840**Star][28d] [C#] [borntoberoot/networkmanager](https://github.com/borntoberoot/networkmanager) A powerful tool for managing networks and troubleshoot network problems!
+- [**839**Star][15d] [Py] [jordanpotti/awsbucketdump](https://github.com/jordanpotti/awsbucketdump) Security Tool to Look For Interesting Files in S3 Buckets
+- [**838**Star][1m] [C] [facebook/transform360](https://github.com/facebook/transform360) Transform360 is an equirectangular to cubemap transform for 360 video.
+- [**838**Star][1y] [HTML] [ustayready/credsniper](https://github.com/ustayready/credsniper) CredSniper is a phishing framework written with the Python micro-framework Flask and Jinja2 templating which supports capturing 2FA tokens.
+- [**837**Star][27d] [PHP] [raikia/fiercephish](https://github.com/Raikia/FiercePhish) FiercePhish is a full-fledged phishing framework to manage all phishing engagements. It allows you to track separate phishing campaigns, schedule sending of emails, and much more.
+- [**837**Star][5y] [Py] [pentestmonkey/windows-privesc-check](https://github.com/pentestmonkey/windows-privesc-check) Standalone Executable to Check for Simple Privilege Escalation Vectors on Windows Systems
+- [**837**Star][3m] [JS] [creditease-sec/insight](https://github.com/creditease-sec/insight) 洞察-宜信集应用系统资产管理、漏洞全生命周期管理、安全知识库管理三位一体的平台。
+- [**836**Star][2d] [Java] [sleuthkit/autopsy](https://github.com/sleuthkit/autopsy) Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by law enforcement, military, and corporate examiners to investigate what happened on a computer. You can even use it to recover photos from your camera's memory card.
+- [**836**Star][7m] [Shell] [niklasb/libc-database](https://github.com/niklasb/libc-database) Build a database of libc offsets to simplify exploitation
+- [**836**Star][1y] [Shell] [kpwn/iosre](https://github.com/kpwn/iosre) iOS Reverse Engineering
+- [**833**Star][14d] [v33ru/iotsecurity101](https://github.com/v33ru/iotsecurity101) From IoT Pentesting to IoT Security
+- [**833**Star][7m] [ObjC] [sevenbits/mac-linux-usb-loader](https://github.com/sevenbits/mac-linux-usb-loader) Boot Linux on your Mac, easily
+- [**832**Star][5d] [Haskell] [galoisinc/cryptol](https://github.com/galoisinc/cryptol) The Language of Cryptography
+- [**832**Star][1m] [cugu/awesome-forensics](https://github.com/cugu/awesome-forensics) A curated list of awesome forensic analysis tools and resources
+- [**831**Star][17d] [C#] [pwntester/ysoserial.net](https://github.com/pwntester/ysoserial.net) Deserialization payload generator for a variety of .NET formatters
+- [**831**Star][5m] [Py] [ma1co/sony-pmca-re](https://github.com/ma1co/sony-pmca-re) Reverse engineering Sony PlayMemories Camera Apps
+- [**830**Star][2d] [C++] [tasvideos/bizhawk](https://github.com/tasvideos/bizhawk) BizHawk is a multi-system emulator written in C#. BizHawk provides nice features for casual gamers such as full screen, and joypad support in addition to full rerecording and debugging tools for all system cores.
+- [**830**Star][24d] [redhuntlabs/redhunt-os](https://github.com/redhuntlabs/redhunt-os) Virtual Machine for Adversary Emulation and Threat Hunting
+- [**830**Star][9m] [Py] [ietf-wg-acme/acme](https://github.com/ietf-wg-acme/acme) A protocol for automating certificate issuance
+- [**829**Star][5y] [halfkiss/zjdroid](https://github.com/halfkiss/zjdroid) Android app dynamic reverse tool based on Xposed framework.
+- [**828**Star][4y] [etsy/midas](https://github.com/etsy/midas) Mac Intrusion Detection Analysis System
+- [**827**Star][7m] [Go] [tiagorlampert/chaos](https://github.com/tiagorlampert/chaos) a PoC that allow generate payloads and control remote operating system
+- [**827**Star][11m] [sandboxescaper/randomrepo](https://github.com/sandboxescaper/randomrepo) Repo for random stuff
+- [**826**Star][7m] [Batchfile] [kkkgo/kms_vl_all](https://github.com/kkkgo/kms_vl_all)
+- [**826**Star][9d] [JS] [cypress-io/cypress-example-recipes](https://github.com/cypress-io/cypress-example-recipes) Various recipes for testing common scenarios with Cypress
+- [**825**Star][2y] [PHP] [zhufaner/shadowsocks-manage-system](https://github.com/zhufaner/shadowsocks-manage-system) 科学上网管理系统
+- [**825**Star][21d] [PHP] [symfony/security-csrf](https://github.com/symfony/security-csrf) a class CsrfTokenManager for generating and validating CSRF tokens
+- [**825**Star][29d] [Py] [salesforce/ja3](https://github.com/salesforce/ja3) a standard for creating SSL client fingerprints in an easy to produce and shareable way.
+- [**825**Star][2m] [C++] [redasmorg/redasm](https://github.com/redasmorg/redasm) The OpenSource Disassembler
+- [**824**Star][3d] [GLSL] [khronosgroup/spirv-cross](https://github.com/khronosgroup/spirv-cross) a practical tool and library for performing reflection on SPIR-V and disassembling SPIR-V back to high level languages.
+- [**824**Star][5m] [Shell] [danielmiessler/robotsdisallowed](https://github.com/danielmiessler/robotsdisallowed) A curated list of the most common and most interesting robots.txt disallowed directories.
+- [**824**Star][4y] [PS] [clymb3r/powershell](https://github.com/clymb3r/powershell) Useful PowerShell scripts
+- [**823**Star][1m] [Py] [corelan/mona](https://github.com/corelan/mona) Corelan Repository for mona.py
+- [**823**Star][2y] [PS] [besimorhino/powercat](https://github.com/besimorhino/powercat) netshell features all in version 2 powershell
+- [**822**Star][24d] [Shell] [zfl9/ss-tproxy](https://github.com/zfl9/ss-tproxy) SS/SSR/V2Ray/Socks5 透明代理 for Linux
+- [**822**Star][2d] [Py] [kerlomz/captcha_trainer](https://github.com/kerlomz/captcha_trainer) This project is based on CNN5/ResNet+BLSTM/LSTM/GRU/SRU/BSRU+CTC to realize verification code identification. This project is only for training the model.
+- [**821**Star][6y] [Py] [ilektrojohn/creepy](https://github.com/ilektrojohn/creepy) A geolocation OSINT tool. Offers geolocation information gathering through social networking platforms.
+- [**821**Star][9d] [Py] [yampelo/beagle](https://github.com/yampelo/beagle) Beagle is an incident response and digital forensics tool which transforms security logs and data into graphs.
+- [**821**Star][8d] [Elixir] [nccgroup/sobelow](https://github.com/nccgroup/sobelow) Security-focused static analysis for the Phoenix Framework
+- [**821**Star][2d] [cveproject/cvelist](https://github.com/cveproject/cvelist) Pilot program for CVE submission through GitHub
+- [**820**Star][24d] [C] [emmericp/ixy](https://github.com/emmericp/ixy) Simple userspace packet processing for educational purposes
+- [**819**Star][1m] [Java] [stealthcopter/androidnetworktools](https://github.com/stealthcopter/androidnetworktools) Set of useful android network tools
+- [**819**Star][2m] [Py] [jeffzh3ng/fuxi](https://github.com/jeffzh3ng/fuxi) Penetration Testing Platform
+- [**819**Star][2m] [AutoIt] [bioruebe/uniextract2](https://github.com/bioruebe/uniextract2) Universal Extractor 2 is an unofficial updated and extended version of the original UniExtract by Jared Breland. It brings several hundred changes including community-wanted ones such as a batch mode, auto-updater and scan-only-functionality.
+- [**818**Star][6m] [numirias/security](https://github.com/numirias/security) Some of my security stuff and vulnerabilities. Nothing advanced. More to come.
+- [**817**Star][2m] [Shell] [shr3ddersec/shr3dkit](https://github.com/shr3ddersec/shr3dkit) Red Team Tool Kit
+- [**816**Star][29d] [C] [rust-fuzz/afl.rs](https://github.com/rust-fuzz/afl.rs)
+- [**814**Star][2y] [Py] [pirate/security-growler](https://github.com/pirate/security-growler)
+- [**814**Star][3m] [feeicn/security-ppt](https://github.com/feeicn/security-ppt) 大安全各领域各公司各会议分享的PPT
+- [**814**Star][5d] [C] [dynup/kpatch](https://github.com/dynup/kpatch) live kernel patching
+- [**813**Star][2y] [Ruby] [elevenpaths/eternalblue-doublepulsar-metasploit](https://github.com/elevenpaths/eternalblue-doublepulsar-metasploit) Module of Metasploit to exploit the vulnerability Eternalblue-Doublepulsar.
+- [**812**Star][15d] [JS] [sindresorhus/is-online](https://github.com/sindresorhus/is-online) Check if the internet connection is up
+- [**811**Star][1y] [Py] [utkusen/leviathan](https://github.com/utkusen/leviathan) wide range mass audit toolkit
+- [**811**Star][1y] [Py] [utkusen/leviathan](https://github.com/utkusen/leviathan) wide range mass audit toolkit
+- [**811**Star][2y] [C] [timwr/cve-2016-5195](https://github.com/timwr/cve-2016-5195) CVE-2016-5195 (dirtycow/dirtyc0w) proof of concept for Android
+- [**811**Star][5y] [ObjC] [isecpartners/ios-ssl-kill-switch](https://github.com/isecpartners/ios-ssl-kill-switch) Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS Apps
+- [**811**Star][7y] [C] [inquisb/icmpsh](https://github.com/inquisb/icmpsh) Simple reverse ICMP shell
+- [**810**Star][8m] [Py] [nccgroup/featherduster](https://github.com/nccgroup/featherduster) An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction
+- [**809**Star][1y] [C++] [tencent/tscancode](https://github.com/tencent/tscancode) A static code analyzer for C++, C#, Lua
+- [**808**Star][2y] [C#] [nicehash/nicehashminer-archived](https://github.com/nicehash/nicehashminer-archived) NiceHash easy to use CPU&GPU Miner
+- [**808**Star][3m] [C] [strazzere/android-unpacker](https://github.com/strazzere/android-unpacker) Android Unpacker presented at Defcon 22: Android Hacker Protection Level 0
+- [**806**Star][1m] [Swift] [googleprojectzero/fuzzilli](https://github.com/googleprojectzero/fuzzilli) A JavaScript Engine Fuzzer
+- [**806**Star][3y] [Py] [fuzzbunch/fuzzbunch](https://github.com/fuzzbunch/fuzzbunch) NSA finest tool
+- [**806**Star][2y] [Ruby] [dmayer/idb](https://github.com/dmayer/idb) simplify some common tasks for iOS pentesting and research
+- [**805**Star][17d] [Ruby] [rastating/wordpress-exploit-framework](https://github.com/rastating/wordpress-exploit-framework) A Ruby framework designed to aid in the penetration testing of WordPress systems.
+- [**805**Star][5m] [C++] [ptrkrysik/gr-gsm](https://github.com/ptrkrysik/gr-gsm) Gnuradio blocks and tools for receiving GSM transmissions
+- [**804**Star][2y] [Swift] [zhuhaow/specht](https://github.com/zhuhaow/specht) A rule-based proxy app built with Network Extension for macOS
+- [**804**Star][3y] [shmilylty/awesome-hacking](https://github.com/shmilylty/awesome-hacking) awesome hacking chinese version
+- [**804**Star][6d] [Py] [jivoi/pentest](https://github.com/jivoi/pentest) pentest
+- [**803**Star][2m] [Py] [acmesec/ctfcracktools](https://github.com/Acmesec/CTFCrackTools) China's first CTFTools framework
+- [**803**Star][3y] [te-k/flexidie](https://github.com/te-k/flexidie) Source code and binaries of FlexiSpy from the Flexidie dump
+- [**803**Star][2y] [Go] [schollz/find-lf](https://github.com/schollz/find-lf) Track the location of every Wi-Fi device (
+- [**802**Star][3m] [Py] [techgaun/github-dorks](https://github.com/techgaun/github-dorks) Collection of github dorks and helper tool to automate the process of checking dorks
+- [**802**Star][3m] [Py] [secforce/tunna](https://github.com/secforce/tunna) Tunna is a set of tools which will wrap and tunnel any TCP communication over HTTP. It can be used to bypass network restrictions in fully firewalled environments.
+- [**802**Star][2m] [Py] [hellman/xortool](https://github.com/hellman/xortool) A tool to analyze multi-byte xor cipher
+- [**802**Star][1m] [Shell] [andreyvit/create-dmg](https://github.com/andreyvit/create-dmg) A shell script to build fancy DMGs
+- [**801**Star][2y] [vysecurity/redtips](https://github.com/vysecurity/RedTips) Red Team Tips as posted by
+- [**801**Star][3y] [C#] [netflix/fido](https://github.com/netflix/fido) an orchestration layer used to automate the incident response process by evaluating, assessing and responding to malware
+- [**801**Star][2d] [Py] [ericsson/codechecker](https://github.com/ericsson/codechecker) CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy
+- [**800**Star][28d] [Rust] [edu4rdshl/findomain](https://github.com/edu4rdshl/findomain) The fastest and cross-platform subdomain enumerator, don't waste your time.
+- [**800**Star][6d] [C++] [aslody/whale](https://github.com/aslody/whale) Hook Framework for Android/IOS/Linux/MacOS
+- [**799**Star][6y] [Pascal] [prof7bit/torchat](https://github.com/prof7bit/torchat) Decentralized anonymous instant messenger on top of Tor Hidden Services
+- [**799**Star][1y] [ObjC] [igrsoft/kismac2](https://github.com/igrsoft/kismac2) KisMAC is a free, open source wireless stumbling and security tool for Mac OS X.
+- [**799**Star][3m] [Py] [awslabs/aws-config-rules](https://github.com/awslabs/aws-config-rules) [Node, Python, Java] Repository of sample Custom Rules for AWS Config.
+- [**798**Star][3d] [Py] [complianceascode/content](https://github.com/ComplianceAsCode/content) Security compliance content in SCAP, Bash, Ansible, and other formats
+- [**798**Star][8d] [proxymanapp/proxyman](https://github.com/proxymanapp/proxyman) Modern and Delightful HTTP Debugging Proxy for macOS, iOS and Android
+- [**798**Star][11m] [Py] [mak-/parameth](https://github.com/mak-/parameth) brute discover GET and POST parameters
+- [**797**Star][3y] [Go] [ryhanson/phishery](https://github.com/ryhanson/phishery) An SSL Enabled Basic Auth Credential Harvester with a Word Document Template URL Injector
+- [**797**Star][3y] [Go] [codahale/sneaker](https://github.com/codahale/sneaker) A tool for securely storing secrets on S3 using Amazon KMS.
+- [**795**Star][7m] [Py] [phaethon/kamene](https://github.com/phaethon/kamene) Network packet and pcap file crafting/sniffing/manipulation/visualization security tool. Originally forked from scapy in 2015 and providing python3 compatibility since then.
+- [**795**Star][22d] [Py] [yeti-platform/yeti](https://github.com/yeti-platform/yeti) Your Everyday Threat Intelligence
+- [**794**Star][2m] [sh4hin/androl4b](https://github.com/sh4hin/androl4b) A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis
+- [**793**Star][3y] [Py] [empireproject/empyre](https://github.com/empireproject/empyre) A post-exploitation OS X/Linux agent written in Python 2.7
+- [**791**Star][4m] [Py] [srinivas11789/pcapxray](https://github.com/srinivas11789/pcapxray) A Network Forensics Tool
+- [**790**Star][2y] [Go] [evilsocket/dnssearch](https://github.com/evilsocket/dnssearch) A subdomain enumeration tool.
+- [**790**Star][3y] [C++] [bwall/hashpump](https://github.com/bwall/hashpump) A tool to exploit the hash length extension attack in various hashing algorithms
+- [**789**Star][10m] [C#] [terminals-origin/terminals](https://github.com/terminals-origin/terminals) Terminals is a secure, multi tab terminal services/remote desktop client. It uses Terminal Services ActiveX Client (mstscax.dll). The project started from the need of controlling multiple connections simultaneously. It is a complete replacement for the mstsc.exe (Terminal Services) client. This is official source moved from Codeplex.
+- [**789**Star][2d] [C] [fwupd/fwupd](https://github.com/fwupd/fwupd) A simple daemon to allow session software to update firmware
+- [**788**Star][3d] [Java] [zstackio/zstack](https://github.com/zstackio/zstack) ZStack - the open-source IaaS software
+- [**787**Star][1m] [CSS] [smartping/smartping](https://github.com/smartping/smartping) 综合性网络质量(PING)检测工具,支持正/反向PING绘图、互PING拓扑绘图与报警、全国PING延迟地图与在线检测工具等功能
+- [**787**Star][2y] [Shell] [screetsec/dracnmap](https://github.com/screetsec/dracnmap) Dracnmap is an open source program which is using to exploit the network and gathering information with nmap help. Nmap command comes with lots of options that can make the utility more robust and difficult to follow for new users. Hence Dracnmap is designed to perform fast scaning with the utilizing script engine of nmap and nmap can perform va…
+- [**787**Star][2m] [Py] [numba/llvmlite](https://github.com/numba/llvmlite) A lightweight LLVM python binding for writing JIT compilers
+- [**787**Star][1m] [microsoft/msrc-security-research](https://github.com/microsoft/msrc-security-research) Security Research from the Microsoft Security Response Center (MSRC)
+- [**786**Star][2m] [Go] [dreddsa5dies/gohacktools](https://github.com/dreddsa5dies/gohacktools) Hacker tools on Go (Golang)
+- [**785**Star][2m] [C] [netsniff-ng/netsniff-ng](https://github.com/netsniff-ng/netsniff-ng) A Swiss army knife for your daily Linux network plumbing.
+- [**785**Star][12d] [Go] [rebuy-de/aws-nuke](https://github.com/rebuy-de/aws-nuke) Nuke a whole AWS account and delete all its resources.
+- [**785**Star][2y] [C] [jklmnn/imagejs](https://github.com/jklmnn/imagejs) Small tool to package javascript into a valid image file.
+- [**784**Star][4y] [Assembly] [xoreaxeaxeax/sinkhole](https://github.com/xoreaxeaxeax/sinkhole) Architectural privilege escalation on x86
+- [**784**Star][5m] [TSQL] [threathunterx/nebula](https://github.com/threathunterx/nebula) "星云"业务风控系统,主工程
+- [**784**Star][8m] [Go] [parsiya/hacking-with-go](https://github.com/parsiya/hacking-with-go) Golang for Security Professionals
+- [**784**Star][7m] [Java] [blankeer/mdwechat](https://github.com/blankeer/mdwechat) 一个能让微信 Material Design 化的 Xposed 模块
+- [**784**Star][2m] [Py] [bishopfox/gitgot](https://github.com/bishopfox/gitgot) Semi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets.
+- [**784**Star][3y] [Go] [armon/go-socks5](https://github.com/armon/go-socks5) SOCKS5 server in Golang
+- [**782**Star][11m] [v2-dev/awesome-social-engineering](https://github.com/v2-dev/awesome-social-engineering) A curated list of awesome social engineering resources.
+- [**782**Star][3y] [Go] [summitroute/osxlockdown](https://github.com/summitroute/osxlockdown) [No longer maintained] Apple OS X tool to audit for, and remediate, security configuration settings.
+- [**782**Star][29d] [Ruby] [net-ssh/net-ssh](https://github.com/net-ssh/net-ssh) Pure Ruby implementation of an SSH (protocol 2) client
+- [**782**Star][1y] [PS] [kevin-robertson/invoke-thehash](https://github.com/kevin-robertson/invoke-thehash) PowerShell functions for performing pass the hash WMI and SMB tasks
+- [**780**Star][2m] [C] [nixos/patchelf](https://github.com/nixos/patchelf) A small utility to modify the dynamic linker and RPATH of ELF executables
+- [**780**Star][4y] [C++] [denandz/keefarce](https://github.com/denandz/keefarce) Extracts passwords from a KeePass 2.x database, directly from memory.
+- [**779**Star][2y] [Py] [secretsquirrel/bdfproxy](https://github.com/secretsquirrel/bdfproxy) Patch Binaries via MITM: BackdoorFactory + mitmProxy. (NOT SUPPORTED)
+- [**779**Star][1m] [Py] [konradit/gopro-py-api](https://github.com/konradit/gopro-py-api) Unofficial GoPro API Library for Python - connect to GoPro via WiFi.
+- [**777**Star][7d] [Go] [kolide/fleet](https://github.com/kolide/fleet) A flexible control server for osquery fleets
+- [**777**Star][1m] [Py] [kevthehermit/ratdecoders](https://github.com/kevthehermit/ratdecoders) Python Decoders for Common Remote Access Trojans
+- [**777**Star][8d] [C#] [justcoding121/titanium-web-proxy](https://github.com/justcoding121/titanium-web-proxy) A cross-platform asynchronous HTTP(S) proxy server in C#.
+- [**777**Star][2m] [Py] [gosecure/malboxes](https://github.com/gosecure/malboxes) Builds malware analysis Windows VMs so that you don't have to.
+- [**777**Star][2y] [C++] [dor1s/libfuzzer-workshop](https://github.com/dor1s/libfuzzer-workshop) Repository for materials of "Modern fuzzing of C/C++ Projects" workshop.
+- [**777**Star][15d] [Go] [bishopfox/sliver](https://github.com/bishopfox/sliver) a general purpose cross-platform implant framework that supports C2 over Mutual-TLS, HTTP(S), and DNS
+- [**777**Star][14d] [Shell] [aqzt/kjyw](https://github.com/aqzt/kjyw) 快捷运维,代号kjyw,项目基于shell、python,运维脚本工具库,收集各类运维常用工具脚本,实现快速安装nginx、mysql、php、redis、nagios、运维经常使用的脚本等等...
+- [**776**Star][2y] [Py] [marvis/pytorch-caffe-darknet-convert](https://github.com/marvis/pytorch-caffe-darknet-convert) convert between pytorch, caffe prototxt/weights and darknet cfg/weights
+- [**776**Star][1y] [C++] [polysync/oscc](https://github.com/polysync/oscc) Open Source Car Control
+- [**776**Star][2m] [C++] [nodejs/llnode](https://github.com/nodejs/llnode) An lldb plugin for Node.js and V8, which enables inspection of JavaScript states for insights into Node.js processes and their core dumps.
+- [**775**Star][12m] [HTML] [sense-of-security/adrecon](https://github.com/sense-of-security/adrecon) gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment.
+- [**775**Star][2y] [Py] [dagrz/aws_pwn](https://github.com/dagrz/aws_pwn) A collection of AWS penetration testing junk
+- [**774**Star][2y] [TS] [uwnetworkslab/uproxy-p2p](https://github.com/uwnetworkslab/uproxy-p2p) Internet without borders
+- [**774**Star][4y] [amq/firefox-debloat](https://github.com/amq/firefox-debloat) Stop Firefox leaking data about you
+- [**773**Star][2y] [Py] [viralmaniar/passhunt](https://github.com/viralmaniar/passhunt) Passhunt is a simple tool for searching of default credentials for network devices, web applications and more. Search through 523 vendors and their 2084 default passwords.
+- [**772**Star][8d] [payloadbox/xss-payload-list](https://github.com/payloadbox/xss-payload-list) Cross Site Scripting ( XSS ) Vulnerability Payload List
+- [**772**Star][10d] [Go] [liamg/tfsec](https://github.com/liamg/tfsec)
+- [**771**Star][4y] [C++] [google/rowhammer-test](https://github.com/google/rowhammer-test) Test DRAM for bit flips caused by the rowhammer problem
+- [**769**Star][2y] [HTML] [wi-fi-analyzer/fluxion](https://github.com/wi-fi-analyzer/fluxion) Offical repo for fluxion
+- [**769**Star][2d] [C++] [shekyan/slowhttptest](https://github.com/shekyan/slowhttptest) Application Layer DoS attack simulator
+- [**769**Star][2m] [HTML] [rewardone/oscprepo](https://github.com/rewardone/oscprepo) A list of commands, scripts, resources, and more that I have gathered and attempted to consolidate for use as OSCP (and more) study material. Commands in 'Usefulcommands' Keepnote. Bookmarks and reading material in 'BookmarkList' Keepnote. Reconscan in scripts folder.
+- [**769**Star][2d] [Py] [jtpereyda/boofuzz](https://github.com/jtpereyda/boofuzz) A fork and successor of the Sulley Fuzzing Framework
+- [**769**Star][4d] [C#] [damianh/proxykit](https://github.com/damianh/proxykit) A toolkit to create code-first HTTP reverse proxies on ASP.NET Core
+- [**768**Star][5y] [Py] [shadowsocks/chinadns-python](https://github.com/shadowsocks/chinadns-python) Protect yourself against DNS poisoning in China.
+- [**768**Star][1m] [Py] [vesche/scanless](https://github.com/vesche/scanless) online port scan scraper
+- [**768**Star][2d] [Java] [tmobile/pacbot](https://github.com/tmobile/pacbot) PacBot (Policy as Code Bot)
+- [**767**Star][2m] [daviddias/awesome-hacking-locations](https://github.com/daviddias/awesome-hacking-locations)
+- [**767**Star][3d] [JS] [brianlovin/security-checklist](https://github.com/brianlovin/security-checklist) A checklist for staying safe on the internet
+- [**766**Star][7d] [C++] [snort3/snort3](https://github.com/snort3/snort3) Snort++
+- [**765**Star][5y] [C#] [azzvx/gogotester](https://github.com/azzvx/gogotester)
+- [**765**Star][1y] [pfarb/awesome-crypto-papers](https://github.com/pfarb/awesome-crypto-papers) A curated list of cryptography papers, articles, tutorials and howtos.
+- [**765**Star][15d] [axtmueller/windows-kernel-explorer](https://github.com/axtmueller/windows-kernel-explorer) A free but powerful Windows kernel research tool.
+- [**764**Star][7m] [Py] [gkbrk/slowloris](https://github.com/gkbrk/slowloris) an HTTP Denial of Service attack that affects threaded servers
+- [**764**Star][2m] [Py] [ashutosh1206/crypton](https://github.com/ashutosh1206/crypton) Library consisting of explanation and implementation of all the existing attacks on various Encryption Systems, Digital Signatures, Authentication methods along with example challenges from CTFs
+- [**763**Star][1y] [Java] [mbechler/marshalsec](https://github.com/mbechler/marshalsec) Java Unmarshaller Security - Turning your data into code execution
+- [**763**Star][10m] [Py] [hlldz/spookflare](https://github.com/hlldz/spookflare) Loader, dropper generator with multiple features for bypassing client-side and network-side countermeasures.
+- [**762**Star][7y] [grugq/portal](https://github.com/grugq/portal) Personal Onion Router To Assure Liberty
+- [**762**Star][11m] [C++] [comaeio/porosity](https://github.com/comaeio/porosity) *UNMAINTAINED* Decompiler and Security Analysis tool for Blockchain-based Ethereum Smart-Contracts
+- [**761**Star][20d] [Py] [mubix/shellshocker-pocs](https://github.com/mubix/shellshocker-pocs) Collection of Proof of Concepts and Potential Targets for #ShellShocker
+- [**761**Star][3m] [jakejarvis/awesome-shodan-queries](https://github.com/jakejarvis/awesome-shodan-queries)
+- [**760**Star][4m] [Py] [s0md3v/hash-buster](https://github.com/s0md3v/Hash-Buster) Crack hashes in seconds.
+- [**760**Star][8m] [Py] [misterbianco/boopsuite](https://github.com/MisterBianco/BoopSuite) 无线审计与安全测试
+- [**760**Star][22d] [Go] [thoughtworks/talisman](https://github.com/thoughtworks/talisman) By hooking into the pre-push hook provided by Git, Talisman validates the outgoing changeset for things that look suspicious - such as authorization tokens and private keys.
+- [**760**Star][1m] [Py] [snovvcrash/usbrip](https://github.com/snovvcrash/usbrip) Simple CLI forensics tool for tracking USB device artifacts (history of USB events) on GNU/Linux
+- [**760**Star][5m] [Py] [lgandx/pcredz](https://github.com/lgandx/pcredz) This tool extracts Credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, SMTP, FTP, IMAP, etc from a pcap file or from a live interface.
+- [**760**Star][4m] [Go] [haccer/subjack](https://github.com/haccer/subjack) Subdomain Takeover tool written in Go
+- [**759**Star][3y] [masatokinugawa/filterbypass](https://github.com/masatokinugawa/filterbypass) Browser's XSS Filter Bypass Cheat Sheet
+- [**756**Star][1m] [Py] [nekmo/dirhunt](https://github.com/nekmo/dirhunt) Find web directories without bruteforce
+- [**756**Star][1y] [Py] [greatsct/greatsct](https://github.com/greatsct/greatsct) generate metasploit payloads that bypass common anti-virus solutions and application whitelisting solutions.
+- [**755**Star][3y] [Py] [eastee/rebreakcaptcha](https://github.com/eastee/rebreakcaptcha) A logic vulnerability, dubbed ReBreakCaptcha, which lets you easily bypass Google's ReCaptcha v2 anywhere on the web
+- [**755**Star][2d] [Go] [banzaicloud/bank-vaults](https://github.com/banzaicloud/bank-vaults) A Vault swiss-army knife: a K8s operator, Go client with automatic token renewal, automatic configuration, multiple unseal options and more. A CLI tool to init, unseal and configure Vault (auth methods, secret engines). Direct secret injection into Pods.
+- [**754**Star][6d] [Ruby] [rubysec/ruby-advisory-db](https://github.com/rubysec/ruby-advisory-db) A database of vulnerable Ruby Gems
+- [**753**Star][4m] [Py] [threatexpress/domainhunter](https://github.com/threatexpress/domainhunter) Checks expired domains for categorization/reputation and Archive.org history to determine good candidates for phishing and C2 domain names
+- [**753**Star][2y] [Py] [redballoonshenanigans/monitordarkly](https://github.com/redballoonshenanigans/monitordarkly) Poc, Presentation of Monitor OSD Exploitation, and shenanigans of high quality.
+- [**753**Star][4m] [Shell] [nahamsec/lazyrecon](https://github.com/nahamsec/lazyrecon) automate your reconnaissance process in an organized fashion
+- [**753**Star][19d] [Py] [korcankaraokcu/pince](https://github.com/korcankaraokcu/pince) A reverse engineering tool that'll supply the place of Cheat Engine for linux
+- [**752**Star][5d] [C] [wolfssl/wolfssl](https://github.com/wolfssl/wolfssl) wolfSSL (formerly CyaSSL) is a small, fast, portable implementation of TLS/SSL for embedded devices to the cloud. wolfSSL supports up to TLS 1.3!
+- [**752**Star][10m] [PS] [davehull/kansa](https://github.com/davehull/kansa) A Powershell incident response framework
+- [**751**Star][2d] [Py] [rajkumrdusad/tool-x](https://github.com/rajkumrdusad/tool-x) Tool-X is a kali linux hacking Tool installer. Tool-X developed for termux and other android terminals. using Tool-X you can install almost 370+ hacking tools in termux app and other linux based distributions.
+- [**751**Star][23d] [Java] [owasp/securityshepherd](https://github.com/owasp/securityshepherd) Web and mobile application security training platform
+- [**749**Star][15d] [HTML] [tennc/fuzzdb](https://github.com/tennc/fuzzdb) 一个fuzzdb扩展库
+- [**749**Star][2y] [PHP] [sektioneins/pcc](https://github.com/sektioneins/pcc) PHP Secure Configuration Checker
+- [**748**Star][2y] [Go] [pforemski/dingo](https://github.com/pforemski/dingo) A DNS client in Go that supports Google DNS over HTTPS
+- [**748**Star][2y] [Py] [d35m0nd142/lfisuite](https://github.com/d35m0nd142/lfisuite) Totally Automatic LFI Exploiter (+ Reverse Shell) and Scanner
+- [**748**Star][2m] [Py] [buffer/thug](https://github.com/buffer/thug) Python low-interaction honeyclient
+- [**747**Star][11m] [Py] [infobyte/spoilerwall](https://github.com/infobyte/spoilerwall) Spoilerwall introduces a brand new concept in the field of network hardening. Avoid being scanned by spoiling movies on all your ports!
+- [**747**Star][4y] [fabiobaroni/awesome-exploit-development](https://github.com/fabiobaroni/awesome-exploit-development) A curated list of resources (books, tutorials, courses, tools and vulnerable applications) for learning about Exploit Development
+- [**747**Star][6m] [Go] [cbeuw/goquiet](https://github.com/cbeuw/goquiet) A Shadowsocks obfuscation plugin utilising domain fronting to evade deep packet inspection
+- [**747**Star][4m] [aleenzz/cobalt_strike_wiki](https://github.com/aleenzz/cobalt_strike_wiki) Cobalt Strike系列
+- [**746**Star][3y] [PHP] [googleinurl/scanner-inurlbr](https://github.com/googleinurl/scanner-inurlbr) Advanced search in search engines, enables analysis provided to exploit GET / POST capturing emails & urls, with an internal custom validation junction for each target / url found.
+- [**745**Star][1y] [Py] [oddcod3/phantom-evasion](https://github.com/oddcod3/phantom-evasion) Python AV evasion tool capable to generate FUD executable even with the most common 32 bit metasploit payload(exe/elf/dmg/apk)
+- [**744**Star][5y] [C++] [zerovm/zerovm](https://github.com/zerovm/zerovm) Open-source lightweight virtualization platform
+- [**744**Star][1y] [Perl] [moham3driahi/th3inspector](https://github.com/moham3driahi/th3inspector) All in one tool for Information Gathering
+- [**744**Star][8d] [Go] [activecm/rita](https://github.com/activecm/rita) Real Intelligence Threat Analytics
+- [**743**Star][5m] [C] [neurobin/shc](https://github.com/neurobin/shc) Shell script compiler
+- [**743**Star][27d] [HTML] [m4cs/babysploit](https://github.com/m4cs/babysploit) a penetration testing toolkit aimed at making it easy to learn how to use bigger, more complicated frameworks like Metasploit
+- [**743**Star][11d] [Py] [jendrikseipp/vulture](https://github.com/jendrikseipp/vulture) Find dead Python code
+- [**742**Star][1m] [Py] [khast3x/h8mail](https://github.com/khast3x/h8mail) Password Breach Hunting and Email OSINT tool, locally or using premium services. Supports chasing down related email
+- [**741**Star][9d] [trimstray/linux-hardening-checklist](https://github.com/trimstray/linux-hardening-checklist) Simple checklist to help you deploying the most important areas of the GNU/Linux production systems - work in progress.
+- [**741**Star][4y] [ObjC] [kjcracks/yololib](https://github.com/kjcracks/yololib) dylib injector for mach-o binaries
+- [**741**Star][3y] [C] [gentilkiwi/wanakiwi](https://github.com/gentilkiwi/wanakiwi) Automated wanadecrypt with key recovery if lucky
+- [**741**Star][3d] [C++] [csmith-project/creduce](https://github.com/csmith-project/creduce) C-Reduce, a C program reducer
+- [**740**Star][1m] [C] [yrp604/rappel](https://github.com/yrp604/rappel) A linux-based assembly REPL for x86, amd64, armv7, and armv8
+- [**740**Star][6m] [Go] [talkingdata/owl](https://github.com/talkingdata/owl) distributed monitoring system
+- [**740**Star][1y] [C#] [eladshamir/internal-monologue](https://github.com/eladshamir/internal-monologue) Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS
+- [**739**Star][22d] [Py] [ricterz/genpass](https://github.com/ricterz/genpass) 中国特色的弱口令生成器
+- [**739**Star][2y] [Swift] [novatecconsulting/facerecognition-in-arkit](https://github.com/novatecconsulting/facerecognition-in-arkit) Detects faces using the Vision-API and runs the extracted face through a CoreML-model to identiy the specific persons.
+- [**739**Star][5m] [PS] [hausec/adape-script](https://github.com/hausec/adape-script) Active Directory Assessment and Privilege Escalation Script
+- [**738**Star][1y] [Py] [uber-common/metta](https://github.com/uber-common/metta) An information security preparedness tool to do adversarial simulation.
+- [**738**Star][2y] [Py] [toolswatch/vfeed](https://github.com/toolswatch/vfeed) The Correlated CVE Vulnerability And Threat Intelligence Database API
+- [**738**Star][15d] [Jupyter Notebook] [bukosabino/ta](https://github.com/bukosabino/ta) Technical Analysis Library using Pandas (Python)
+- [**737**Star][3y] [HTML] [xyntax/1000php](https://github.com/xyntax/1000php) 1000个PHP代码审计案例(2016.7以前乌云公开漏洞)
+- [**737**Star][5d] [C] [rapid7/metasploit-payloads](https://github.com/rapid7/metasploit-payloads) Unified repository for different Metasploit Framework payloads
+- [**736**Star][6m] [C] [unamer/vmware_escape](https://github.com/unamer/vmware_escape) VMware Escape Exploit before VMware WorkStation 12.5.5
+- [**736**Star][6m] [Py] [devttys0/ida](https://github.com/devttys0/ida) Collection of IDA Python plugins/scripts/modules.
+
+
+ - [wpsearch](https://github.com/devttys0/ida/blob/master/scripts/wpsearch.py) Searches for immediate values commonly founds in MIPS WPS checksum implementations.
+ - [md5hash](https://github.com/devttys0/ida/tree/master/modules/md5hash) A sample implementation of MD5 in pure Python
+ - [alleycat](https://github.com/devttys0/ida/tree/master/plugins/alleycat) Finds paths to a given code block inside a function; Finds paths between two or more functions; Generates interactive call graphs
+ - [codatify](https://github.com/devttys0/ida/tree/master/plugins/codatify) Defines ASCII-strings/functions/code that IDA's auto analysis missed; Converts all undefined bytes in the data segment into DWORDs
+ - [fluorescence](https://github.com/devttys0/ida/tree/master/plugins/fluorescence) Un/highlights function call instructions
+ - [leafblower](https://github.com/devttys0/ida/tree/master/plugins/leafblower) Assists in identifying standard POSIX functions in MIPS/ARM code.
+ - [localxrefs](https://github.com/devttys0/ida/tree/master/plugins/localxrefs) Finds references to any selected text from within the current function
+ - [mipslocalvars](https://github.com/devttys0/ida/tree/master/plugins/mipslocalvars) Names stack variables used by the compiler for storing registers on the stack, simplifying stack data analysis (MIPS only)
+ - [mipsrop](https://github.com/devttys0/ida/tree/master/plugins/mipsrop) Allows you to search for suitable ROP gadgets in MIPS executable code; Built-in methods to search for common ROP gadgets
+ - [rizzo](https://github.com/devttys0/ida/tree/master/plugins/rizzo) Identifies and re-names functions between two or more IDBs
+- [**735**Star][7m] [sandboxescaper/polarbearrepo](https://github.com/sandboxescaper/polarbearrepo)
+- [**735**Star][6d] [C++] [google/shaderc](https://github.com/google/shaderc) A collection of tools, libraries, and tests for Vulkan shader compilation.
+- [**735**Star][10d] [Shell] [dokku/dokku-letsencrypt](https://github.com/dokku/dokku-letsencrypt) BETA: Automatic Let's Encrypt TLS Certificate installation for dokku
+- [**735**Star][1y] [Py] [averagesecurityguy/scripts](https://github.com/averagesecurityguy/scripts) Scripts I use during pentest engagements.
+- [**734**Star][3d] [TS] [casbin/node-casbin](https://github.com/casbin/node-casbin) An authorization library that supports access control models like ACL, RBAC, ABAC in Node.js
+- [**733**Star][2y] [Java] [gcssloop/encrypt](https://github.com/gcssloop/encrypt) [暂停维护]Android 加密解密工具包。
+- [**732**Star][3m] [C] [rdesktop/rdesktop](https://github.com/rdesktop/rdesktop) rdesktop is an open source UNIX client for connecting to Windows Remote Desktop Services, capably of natively speaking Remote Desktop Protocol (RDP) in order to present the user's Windows desktop. rdesktop is known to work with Windows server version ranging from NT 4 terminal server to Windows 2012 R2.
+- [**732**Star][27d] [HTML] [pagerduty/incident-response-docs](https://github.com/pagerduty/incident-response-docs) PagerDuty's Incident Response Documentation.
+- [**731**Star][2y] [JS] [xl7dev/burpsuite](https://github.com/xl7dev/burpsuite) BurpSuite using the document and some extensions
+- [**731**Star][9m] [Py] [mr-un1k0d3r/dkmc](https://github.com/mr-un1k0d3r/dkmc) DKMC - Dont kill my cat - Malicious payload evasion tool
+- [**731**Star][29d] [C] [iaik/zombieload](https://github.com/iaik/zombieload) Proof-of-concept for the ZombieLoad attack
+- [**731**Star][4m] [Lua] [cldrn/nmap-nse-scripts](https://github.com/cldrn/nmap-nse-scripts) My collection of nmap NSE scripts
+- [**731**Star][2y] [Py] [alex/letsencrypt-aws](https://github.com/alex/letsencrypt-aws)
+- [**730**Star][2m] [JS] [mandatoryprogrammer/xsshunter](https://github.com/mandatoryprogrammer/xsshunter) The XSS Hunter service - a portable version of XSSHunter.com
+- [**730**Star][3y] [C++] [ionescu007/lxss](https://github.com/ionescu007/lxss) Fun with the Windows Subsystem for Linux (WSL/LXSS)
+- [**729**Star][3d] [C] [pmem/pmdk](https://github.com/pmem/pmdk) Persistent Memory Development Kit
+- [**729**Star][1y] [Ruby] [chaps-io/access-granted](https://github.com/chaps-io/access-granted) Multi-role and whitelist based authorization gem for Rails (and not only Rails!)
+- [**728**Star][6m] [Py] [ztgrace/changeme](https://github.com/ztgrace/changeme) A default credential scanner.
+- [**727**Star][1y] [Py] [the-robot/sqliv](https://github.com/the-robot/sqliv) massive SQL injection vulnerability scanner
+- [**727**Star][10m] [PS] [l0ss/grouper](https://github.com/l0ss/grouper) A PowerShell script for helping to find vulnerable settings in AD Group Policy. (deprecated, use Grouper2 instead!)
+- [**726**Star][1m] [C++] [stealth/sshttp](https://github.com/stealth/sshttp) SSH/HTTP(S) multiplexer. Run a webserver and a sshd on the same port w/o changes.
+- [**726**Star][2m] [C] [jedisct1/minisign](https://github.com/jedisct1/minisign) A dead simple tool to sign files and verify digital signatures.
+- [**726**Star][5d] [Py] [anchore/anchore-engine](https://github.com/anchore/anchore-engine) A service that analyzes docker images and applies user-defined acceptance policies to allow automated container image validation and certification
+- [**725**Star][1y] [Py] [rfunix/pompem](https://github.com/rfunix/pompem) Find exploit tool
+- [**725**Star][3d] [Py] [globaleaks/globaleaks](https://github.com/globaleaks/globaleaks) The Open-Source Whistleblowing Software
+- [**725**Star][6m] [Assembly] [cirosantilli/x86-assembly-cheat](https://github.com/cirosantilli/x86-assembly-cheat) the bulk of the x86 instruction examples with assertions.
+- [**725**Star][2d] [Py] [abhinavsingh/proxy.py](https://github.com/abhinavsingh/proxy.py) ⚡⚡⚡Fast, Lightweight, Pluggable, TLS interception capable proxy server focused on Network monitoring, controls & Application development, testing, debugging
+- [**724**Star][10d] [Perl] [gouveaheitor/nipe](https://github.com/GouveaHeitor/nipe) Nipe is a script to make Tor Network your default gateway.
+- [**724**Star][3m] [Java] [isafeblue/trackray](https://github.com/isafeblue/trackray) 溯光 (TrackRay) 3 beta⚡渗透测试框架(资产扫描|指纹识别|暴力破解|网页爬虫|端口扫描|漏洞扫描|代码审计|AWVS|NMAP|Metasploit|SQLMap)
+- [**724**Star][6m] [Go] [anshumanbh/git-all-secrets](https://github.com/anshumanbh/git-all-secrets) A tool to capture all the git secrets by leveraging multiple open source git searching tools
+- [**723**Star][8d] [C] [strace/strace](https://github.com/strace/strace) strace is a diagnostic, debugging and instructional userspace utility for Linux
+- [**723**Star][8m] [C] [mempodippy/vlany](https://github.com/mempodippy/vlany) Linux LD_PRELOAD rootkit (x86 and x86_64 architectures)
+- [**722**Star][2m] [Py] [shawndevans/smbmap](https://github.com/shawndevans/smbmap) SMBMap is a handy SMB enumeration tool
+- [**722**Star][1y] [Py] [keystone-engine/keypatch](https://github.com/keystone-engine/keypatch) Multi-architecture assembler for IDA Pro. Powered by Keystone Engine.
+- [**722**Star][1m] [C++] [facebook/threatexchange](https://github.com/facebook/threatexchange) Share threat information with vetted partners
+- [**722**Star][3m] [Py] [cloudflare/bpftools](https://github.com/cloudflare/bpftools) BPF Tools - packet analyst toolkit
+- [**721**Star][3d] [CSS] [w-digital-scanner/w12scan](https://github.com/w-digital-scanner/w12scan) a network asset discovery engine that can automatically aggregate related assets for analysis and use
+- [**721**Star][2m] [JS] [kohgylw/kiftd](https://github.com/kohgylw/kiftd) sky driver & cloud driver open source server application : kiftd . welcome to the home page:
+- [**721**Star][1m] [Py] [diyan/pywinrm](https://github.com/diyan/pywinrm) Python library for Windows Remote Management (WinRM)
+- [**720**Star][6m] [Py] [zyantific/idaskins](https://github.com/zyantific/idaskins) Plugin providing advanced skinning support for IDA Pro utilizing Qt stylesheets, similar to CSS.
+- [**720**Star][10m] [C] [ztane/python-levenshtein](https://github.com/ztane/python-levenshtein) The Levenshtein Python C extension module contains functions for fast computation of Levenshtein distance and string similarity
+- [**719**Star][7d] [Py] [skelsec/pypykatz](https://github.com/skelsec/pypykatz) Mimikatz implementation in pure Python
+- [**719**Star][7m] [C] [meyerd/n2n](https://github.com/meyerd/n2n) A development branch of the n2n p2p vpn software
+- [**718**Star][1y] [Shell] [c0ny1/vulstudy](https://github.com/c0ny1/vulstudy) 使用docker快速搭建各大漏洞学习平台,目前可以一键搭建12个平台。
+- [**717**Star][1y] [JS] [melonproject/oyente](https://github.com/melonproject/oyente) An Analysis Tool for Smart Contracts
+- [**716**Star][8d] [voorivex/pentest-guide](https://github.com/voorivex/pentest-guide) Penetration tests guide based on OWASP including test cases, resources and examples.
+- [**716**Star][2y] [Py] [madeye/sssniff](https://github.com/madeye/sssniff) sssniff:ShadowSocks流量嗅探
+- [**715**Star][1m] [streaak/keyhacks](https://github.com/streaak/keyhacks) Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.
+- [**715**Star][2y] [kristate/krackinfo](https://github.com/kristate/krackinfo) Vendor Response Matrix for KRACK WPA2 (Key Reinstallation Attack)
+- [**715**Star][10d] [Py] [f-secure/see](https://github.com/f-secure/see) a framework for building test automation in secured Environments
+- [**715**Star][2m] [Java] [col-e/recaf](https://github.com/col-e/recaf) A modern Java bytecode editor
+- [**714**Star][2m] [HTML] [j00ru/windows-syscalls](https://github.com/j00ru/windows-syscalls) Windows System Call Tables (NT/2000/XP/2003/Vista/2008/7/2012/8/10)
+- [**714**Star][11m] [PHP] [defuse/password-hashing](https://github.com/defuse/password-hashing) Password hashing code.
+- [**714**Star][1y] [Java] [d3vilbug/hackbar](https://github.com/d3vilbug/hackbar) HackBar plugin for Burpsuite
+- [**713**Star][4m] [Py] [rhinosecuritylabs/security-research](https://github.com/rhinosecuritylabs/security-research) Exploits written by the Rhino Security Labs team
+- [**713**Star][3d] [Py] [idapython/src](https://github.com/idapython/src) IDAPython project for Hex-Ray's IDA Pro
+- [**713**Star][5m] [Py] [adamlaurie/rfidiot](https://github.com/adamlaurie/rfidiot) python RFID / NFC library & tools
+- [**712**Star][1y] [C#] [p3nt4/powershdll](https://github.com/p3nt4/powershdll) Run PowerShell with rundll32. Bypass software restrictions.
+- [**712**Star][9d] [C] [openvisualcloud/svt-av1](https://github.com/openvisualcloud/svt-av1) Welcome to the GitHub repo for the SVT-AV1! Help us grow the community by subscribing to our SVT-AV1 mailing list!
+- [**712**Star][3y] [JS] [mozilla/node-client-sessions](https://github.com/mozilla/node-client-sessions) secure sessions stored in cookies
+- [**712**Star][2d] [Go] [gruntwork-io/cloud-nuke](https://github.com/gruntwork-io/cloud-nuke) A tool for cleaning up your cloud accounts by nuking (deleting) all resources within it
+- [**712**Star][3d] [C] [aircrack-ng/rtl8812au](https://github.com/aircrack-ng/rtl8812au) RTL8812AU/21AU and RTL8814AU driver with monitor mode and frame injection
+- [**711**Star][4d] [C++] [tandasat/hyperplatform](https://github.com/tandasat/hyperplatform) Intel VT-x based hypervisor aiming to provide a thin VM-exit filtering platform on Windows.
+- [**711**Star][1y] [snifer/security-cheatsheets](https://github.com/snifer/security-cheatsheets) A collection of cheatsheets for various infosec tools and topics.
+- [**711**Star][3y] [C++] [nicehash/nheqminer](https://github.com/nicehash/nheqminer) Equihash miner for NiceHash
+- [**710**Star][2y] [Java] [rover12421/shakaapktool](https://github.com/rover12421/shakaapktool) ShakaApktool
+- [**709**Star][2y] [HTML] [rapid7/hackazon](https://github.com/rapid7/hackazon) A modern vulnerable web app
+- [**709**Star][2m] [C] [nuand/bladerf](https://github.com/nuand/bladerf) bladeRF USB 3.0 Superspeed Software Defined Radio Source Code
+- [**709**Star][2y] [Py] [google/ssl_logger](https://github.com/google/ssl_logger) Decrypts and logs a process's SSL traffic.
+- [**709**Star][4m] [bit4woo/python_sec](https://github.com/bit4woo/python_sec) python安全和代码审计相关资料收集 resource collection of python security and code review
+- [**708**Star][2d] [ly0n/awesome-robotic-tooling](https://github.com/ly0n/awesome-robotic-tooling) Robotic resources and tools for professional robotic development with ROS in C++ and Python.
+- [**708**Star][19d] [Scala] [linkedin/photon-ml](https://github.com/linkedin/photon-ml) A scalable machine learning library on Apache Spark
+- [**708**Star][2y] [Go] [sidkshatriya/dontbug](https://github.com/sidkshatriya/dontbug) Dontbug is a reverse debugger for PHP
+- [**708**Star][7m] [Py] [giacomolaw/keylogger](https://github.com/giacomolaw/keylogger) A simple keylogger for Windows, Linux and Mac
+- [**707**Star][5d] [Go] [pomerium/pomerium](https://github.com/pomerium/pomerium) Pomerium is an identity-aware access proxy.
+- [**707**Star][3m] [Py] [sevagas/macro_pack](https://github.com/sevagas/macro_pack) automatize obfuscation and generation of Office documents, VB scripts, shortcuts, and other formats for pentest, demo, and social engineering assessments. The goal of macro_pack is to simplify exploitation, antimalware bypass, and automatize the process from malicious macro and script generation to fin…
+- [**707**Star][11m] [HTML] [juansacco/exploitpack](https://github.com/juansacco/exploitpack) Exploit Pack -The next generation exploit framework
+- [**707**Star][5m] [JS] [crits/crits](https://github.com/crits/crits) Collaborative Research Into Threats
+- [**706**Star][27d] [PHP] [ssl/ezxss](https://github.com/ssl/ezxss) ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.
+- [**705**Star][3y] [PS] [gimini/powermemory](https://github.com/gimini/powermemory) Exploit the credentials present in files and memory
+- [**705**Star][4y] [Py] [androbugs/androbugs_framework](https://github.com/androbugs/androbugs_framework) AndroBugs Framework is an efficient Android vulnerability scanner that helps developers or hackers find potential security vulnerabilities in Android applications. No need to install on Windows.
+- [**704**Star][5d] [hackplayers/hackthebox-writeups](https://github.com/hackplayers/hackthebox-writeups) Writeups for HacktheBox 'boot2root' machines
+- [**704**Star][2y] [PS] [samratashok/kautilya](https://github.com/samratashok/kautilya) a toolkit which provides various payloads for a Human Interface Device which may help in breaking in a computer during penetration tests.
+- [**704**Star][9d] [Py] [mushorg/conpot](https://github.com/mushorg/conpot) ICS/SCADA honeypot
+- [**703**Star][1y] [Jupyter Notebook] [anishathalye/obfuscated-gradients](https://github.com/anishathalye/obfuscated-gradients) Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples
+- [**702**Star][4m] [C++] [darthton/xenos](https://github.com/darthton/xenos) Windows dll injector
+- [**701**Star][5y] [C] [malcolmrobb/dump1090](https://github.com/malcolmrobb/dump1090) Dump1090 is a simple Mode S decoder for RTLSDR devices
+- [**701**Star][1m] [C++] [cmu-sei/pharos](https://github.com/cmu-sei/pharos) Automated static analysis tools for binary programs
+- [**700**Star][2y] [yichengchen/shadowsocksx-r](https://github.com/yichengchen/shadowsocksx-r) Next Generation of ShadowsocksX
+- [**700**Star][15d] [C#] [multipoolminer/multipoolminer](https://github.com/multipoolminer/multipoolminer) Monitors crypto mining pools in real-time in order to find the most profitable for your machine. Controls any miner that is available via command line.
+- [**699**Star][8d] [C#] [mganss/htmlsanitizer](https://github.com/mganss/htmlsanitizer) Cleans HTML to avoid XSS attacks
+- [**699**Star][10d] [Ruby] [intrigueio/intrigue-core](https://github.com/intrigueio/intrigue-core) Discover Your Attack Surface
+- [**699**Star][4y] [Py] [gunnery/gunnery](https://github.com/gunnery/gunnery) Remote task execution tool
+- [**699**Star][1y] [Py] [bugscanteam/dnslog](https://github.com/bugscanteam/dnslog) 监控 DNS 解析记录和 HTTP 访问记录的工具。
+- [**698**Star][22d] [C] [scanmem/scanmem](https://github.com/scanmem/scanmem) memory scanner for Linux
+- [**698**Star][2m] [Py] [mjg59/python-broadlink](https://github.com/mjg59/python-broadlink) Python module for controlling Broadlink RM2/3 (Pro) remote controls, A1 sensor platforms and SP2/3 smartplugs
+- [**697**Star][8m] [C] [hfiref0x/tdl](https://github.com/hfiref0x/tdl) Driver loader for bypassing Windows x64 Driver Signature Enforcement
+- [**697**Star][4m] [CSS] [ajinabraham/cmsscan](https://github.com/ajinabraham/cmsscan) Scan Wordpress, Drupal, Joomla, vBulletin websites for Security issues
+- [**696**Star][2m] [C#] [harleyqu1nn/aggressorscripts](https://github.com/harleyqu1nn/aggressorscripts) Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources
+- [**695**Star][3m] [uknowsec/active-directory-pentest-notes](https://github.com/uknowsec/active-directory-pentest-notes) 个人域渗透学习笔记
+- [**695**Star][5m] [C++] [stealth/opmsg](https://github.com/stealth/opmsg) opmsg message encryption
+- [**695**Star][2y] [Py] [sensepost/det](https://github.com/sensepost/det) a proof of concept to perform Data Exfiltration using either single or multiple channel(s) at the same time.
+- [**693**Star][1m] [YARA] [rednaga/apkid](https://github.com/rednaga/apkid) Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android
+- [**693**Star][3m] [netflix/security-bulletins](https://github.com/netflix/security-bulletins) Security Bulletins that relate to Netflix Open Source
+- [**693**Star][2m] [Go] [dliv3/venom](https://github.com/dliv3/venom) Venom - A Multi-hop Proxy for Penetration Testers
+- [**692**Star][3y] [Ruby] [phatworx/devise_security_extension](https://github.com/phatworx/devise_security_extension) An enterprise security extension for devise, trying to meet industrial standard security demands for web applications.
+- [**692**Star][3d] [HTML] [owasp/asvs](https://github.com/owasp/asvs) Application Security Verification Standard
+- [**691**Star][15d] [C] [shadow/shadow](https://github.com/shadow/shadow) shadow:独特的离散事件(discrete-event)网络仿真器/模拟器,可以通过模拟互联网拓扑运行真正的应用程序,如 Tor 和 Bitcoin
+- [**691**Star][5m] [C++] [google/certificate-transparency](https://github.com/google/certificate-transparency) Auditing for TLS certificates.
+- [**691**Star][2m] [C++] [bareflank/hypervisor](https://github.com/bareflank/hypervisor) lightweight hypervisor SDK written in C++ with support for Windows, Linux and UEFI
+- [**690**Star][8m] [JS] [zyfworks/steam-key](https://github.com/zyfworks/steam-key) Online activation tool for Steam.
+- [**690**Star][5y] [C] [vmt/udis86](https://github.com/vmt/udis86) Disassembler Library for x86 and x86-64
+- [**690**Star][2d] [C] [powershell/openssh-portable](https://github.com/powershell/openssh-portable) Portable OpenSSH, all Win32-OpenSSH releases and wiki are managed at
+- [**690**Star][7m] [Py] [mr-un1k0d3r/powerlessshell](https://github.com/mr-un1k0d3r/powerlessshell) rely on MSBuild.exe to remotely execute PowerShell scripts and commands without spawning powershell.exe.
+- [**689**Star][28d] [Java] [wrbug/developerhelper](https://github.com/wrbug/developerhelper) 帮助开发人员快速开发的工具
+- [**688**Star][6m] [Py] [mobier/shadowsocksr-speed](https://github.com/mobier/shadowsocksr-speed) SSR 批量测试节点有效带宽
+- [**688**Star][7y] [Ruby] [juuso/bozocrack](https://github.com/juuso/bozocrack) A silly & effective MD5 cracker in Ruby
+- [**688**Star][13d] [Py] [grayddq/gscan](https://github.com/grayddq/gscan) 本程序旨在为安全应急响应人员对Linux主机排查时提供便利,实现主机侧Checklist的自动全面化检测,根据检测结果自动数据聚合,进行黑客攻击路径溯源。
+- [**688**Star][2m] [C#] [cobbr/sharpsploit](https://github.com/cobbr/sharpsploit) SharpSploit is a .NET post-exploitation library written in C#
+- [**687**Star][2d] [Java] [peergos/peergos](https://github.com/peergos/peergos) A decentralised, secure file storage and social network
+- [**687**Star][8m] [Py] [kiorky/spynner](https://github.com/kiorky/spynner) Programmatic web browsing module with AJAX support for Python
+- [**687**Star][2y] [C] [1n3/privesc](https://github.com/1n3/privesc) A collection of Windows, Linux and MySQL privilege escalation scripts and exploits.
+- [**687**Star][8m] [Shell] [1n3/brutex](https://github.com/1n3/brutex) Automatically brute force all services running on a target.
+- [**686**Star][23d] [OCaml] [moby/vpnkit](https://github.com/moby/vpnkit) A toolkit for embedding VPN capabilities in your application
+- [**686**Star][10m] [Py] [merrychap/shellen](https://github.com/merrychap/shellen) an interactive shellcoding environment.
+- [**686**Star][5m] [leezj9671/pentest_interview](https://github.com/leezj9671/pentest_interview) pentest interview experience
+- [**685**Star][1y] [C] [saelo/pwn2own2018](https://github.com/saelo/pwn2own2018) Pwn2Own 2018 Safari+macOS 漏洞利用链
+- [**685**Star][1m] [Py] [iceyhexman/onlinetools](https://github.com/iceyhexman/onlinetools) 在线cms识别|信息泄露|工控|系统|物联网安全|cms漏洞扫描|nmap端口扫描|子域名获取|待续..
+- [**683**Star][12m] [HTML] [zhengmin1989/myarticles](https://github.com/zhengmin1989/myarticles) 蒸米的文章(iOS冰与火之歌系列,一步一步学ROP系列,安卓动态调试七种武器系列等)
+- [**683**Star][5y] [C] [antirez/hping](https://github.com/antirez/hping) send custom TCP/IP packets and to display target replies like ping do with ICMP replies
+- [**683**Star][2m] [JS] [animir/node-rate-limiter-flexible](https://github.com/animir/node-rate-limiter-flexible) Node.js rate limit requests by key with atomic increments. Protection from DDoS and Brute-Force attacks in process Memory, Redis, MongoDb, Memcached, MySQL, PostgreSQL, Cluster or PM
+- [**681**Star][11m] [ObjC] [unixpickle/jamwifi](https://github.com/unixpickle/jamwifi) A GUI, easy to use WiFi network jammer for Mac OS X
+- [**681**Star][19d] [Py] [rurik/noriben](https://github.com/rurik/noriben) Portable, Simple, Malware Analysis Sandbox
+- [**680**Star][6m] [Py] [paranoidninja/carboncopy](https://github.com/paranoidninja/carboncopy) A tool which creates a spoofed certificate of any online website and signs an Executable for AV Evasion. Works for both Windows and Linux
+- [**680**Star][9m] [Shell] [dmarmor/epichrome](https://github.com/dmarmor/epichrome) An application (Epichrome.app) and Chrome extension (Epichrome Helper) to create and use Chrome-based SSBs on Mac OSX.
+- [**680**Star][2m] [andrewjkerr/security-cheatsheets](https://github.com/andrewjkerr/security-cheatsheets)
+- [**679**Star][2m] [Swift] [yenom/bitcoinkit](https://github.com/yenom/BitcoinKit) Bitcoin protocol toolkit for Swift
+- [**679**Star][1y] [PS] [arvanaghi/sessiongopher](https://github.com/Arvanaghi/SessionGopher) a PowerShell tool that uses WMI to extract saved session information for remote access tools such as WinSCP, PuTTY, SuperPuTTY, FileZilla, and Microsoft Remote Desktop. It can be run remotely or locally.
+- [**678**Star][2d] [Java] [ron190/jsql-injection](https://github.com/ron190/jsql-injection) a Java application for automatic SQL database injection.
+- [**678**Star][2m] [Go] [pquerna/otp](https://github.com/pquerna/otp) One Time Password utilities Go
+- [**678**Star][2d] [Kotlin] [mygod/vpnhotspot](https://github.com/mygod/vpnhotspot) Share your VPN connection over hotspot or repeater! (root required)
+- [**678**Star][2y] [Py] [kkevsterrr/backdoorme](https://github.com/kkevsterrr/backdoorme) powerful auto-backdooring utility
+- [**678**Star][3d] [Py] [kevthehermit/pastehunter](https://github.com/kevthehermit/pastehunter) Scanning pastebin with yara rules
+- [**677**Star][29d] [ptresearch/attackdetection](https://github.com/ptresearch/attackdetection) searches for new vulnerabilities and 0-days, reproduces it and creates PoC exploits to understand how these security flaws work and how related attacks can be detected on the network layer
+- [**677**Star][1m] [Go] [google/gofuzz](https://github.com/google/gofuzz) Fuzz testing for go.
+- [**677**Star][13d] [XSLT] [adon90/pentest_compilation](https://github.com/adon90/pentest_compilation) Compilation of commands, tips and scripts that helped me throughout Vulnhub, Hackthebox, OSCP and real scenarios
+- [**676**Star][10d] [C] [zerbea/hcxdumptool](https://github.com/zerbea/hcxdumptool) Small tool to capture packets from wlan devices.
+- [**676**Star][5m] [C#] [outflanknl/evilclippy](https://github.com/outflanknl/evilclippy) A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows.
+- [**675**Star][5d] [C] [google/boringssl](https://github.com/google/boringssl) Mirror of BoringSSL
+- [**674**Star][7m] [Java] [pagalaxylab/yahfa](https://github.com/PAGalaxyLab/YAHFA) Yet Another Hook Framework for ART
+- [**674**Star][3y] [PHP] [xl7dev/webshell](https://github.com/xl7dev/webshell) Webshell && Backdoor Collection
+- [**674**Star][3y] [Batchfile] [ufologist/onekey-decompile-apk](https://github.com/ufologist/onekey-decompile-apk) 一步到位反编译apk工具(onekey decompile apk)
+- [**674**Star][1y] [Py] [endgameinc/rta](https://github.com/endgameinc/rta) a framework of scripts designed to allow blue teams to test their detection capabilities against malicious tradecraft, modeled after MITRE ATT&CK.
+- [**674**Star][1y] [C] [billy-ellis/exploit-challenges](https://github.com/billy-ellis/exploit-challenges) A collection of vulnerable ARM binaries for practicing exploit development
+- [**673**Star][2y] [Py] [trycatchhcf/dumpsterfire](https://github.com/trycatchhcf/dumpsterfire) A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event s…
+- [**673**Star][8m] [offensive-security/kali-arm-build-scripts](https://github.com/offensive-security/kali-arm-build-scripts) Kali Linux ARM build scripts
+- [**673**Star][7m] [PHP] [ircmaxell/php-compiler](https://github.com/ircmaxell/php-compiler) A compiler. For PHP
+- [**673**Star][7m] [Go] [honeytrap/honeytrap](https://github.com/honeytrap/honeytrap) Advanced Honeypot framework.
+- [**672**Star][4m] [Py] [v3n0m-scanner/v3n0m-scanner](https://github.com/v3n0m-scanner/v3n0m-scanner) Popular Pentesting scanner in Python3.6 for SQLi/XSS/LFI/RFI and other Vulns
+- [**672**Star][22d] [C#] [obfuscar/obfuscar](https://github.com/obfuscar/obfuscar) Open source obfuscation tool for .NET assemblies
+- [**672**Star][2m] [Ruby] [mozilla/ssh_scan](https://github.com/mozilla/ssh_scan) A prototype SSH configuration and policy scanner (Blog:
+- [**672**Star][7d] [Py] [blackorbird/apt_report](https://github.com/blackorbird/apt_report) Interesting apt report collection and some special ioc express
+- [**671**Star][10m] [JS] [theori-io/pwnjs](https://github.com/theori-io/pwnjs) A Javascript library for browser exploitation
+- [**671**Star][5m] [bloodzer0/ossa](https://github.com/bloodzer0/ossa) Open-Source Security Architecture | 开源安全架构
+- [**670**Star][4y] [praetorian-code/hob0rules](https://github.com/praetorian-code/Hob0Rules) Password cracking rules for Hashcat based on statistics and industry patterns
+- [**670**Star][4d] [C#] [uxmal/reko](https://github.com/uxmal/reko) Reko is a binary decompiler.
+- [**670**Star][6y] [C] [robertdavidgraham/heartleech](https://github.com/robertdavidgraham/heartleech) Demonstrates the "heartbleed" problem using full OpenSSL stack
+- [**670**Star][3y] [Py] [n1nj4sec/memorpy](https://github.com/n1nj4sec/memorpy) Python library using ctypes to search/edit windows / linux / macOS / SunOS programs memory
+- [**669**Star][11d] [Shell] [wslutilities/wslu](https://github.com/wslutilities/wslu) A collection of utilities for Windows 10 Linux Subsystems
+- [**668**Star][8d] [C++] [leggedrobotics/darknet_ros](https://github.com/leggedrobotics/darknet_ros) YOLO ROS: Real-Time Object Detection for ROS
+- [**668**Star][23d] [HCL] [rhinosecuritylabs/cloudgoat](https://github.com/rhinosecuritylabs/cloudgoat) CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool
+- [**667**Star][10m] [C++] [zrax/pycdc](https://github.com/zrax/pycdc) C++ python bytecode disassembler and decompiler
+- [**667**Star][2y] [Py] [lijiejie/htpwdscan](https://github.com/lijiejie/htpwdscan) A python HTTP weak pass scanner
+- [**667**Star][11d] [Py] [kbandla/dpkt](https://github.com/kbandla/dpkt) fast, simple packet creation / parsing, with definitions for the basic TCP/IP protocols
+- [**667**Star][3m] [C#] [ghostpack/rubeus](https://github.com/ghostpack/rubeus) a C# toolset for raw Kerberos interaction and abuses.
+- [**667**Star][1y] [dsasmblr/hacking-online-games](https://github.com/dsasmblr/hacking-online-games) A curated list of tutorials/resources for hacking online games.
+- [**667**Star][1m] [doridori/android-security-reference](https://github.com/doridori/android-security-reference) A W.I.P Android Security Ref
+- [**667**Star][17d] [Py] [anouarbensaad/vulnx](https://github.com/anouarbensaad/vulnx) An Intelligent Bot Auto Shell Injector that detect vulnerabilities in multiple types of CMS
+- [**666**Star][8m] [Py] [m4ll0k/wpseku](https://github.com/m4ll0k/wpseku) WPSeku - Wordpress Security Scanner
+- [**665**Star][6m] [C] [robertdavidgraham/rdpscan](https://github.com/robertdavidgraham/rdpscan) A quick scanner for the CVE-2019-0708 "BlueKeep" vulnerability.
+- [**665**Star][2y] [Py] [jhaddix/domain](https://github.com/jhaddix/domain) Setup script for Regon-ng
+- [**665**Star][7y] [Java] [honeynet/apkinspector](https://github.com/honeynet/apkinspector) APKinspector is a powerful GUI tool for analysts to analyze the Android applications.
+- [**665**Star][23d] [C] [google/afl](https://github.com/google/afl) american fuzzy lop - a security-oriented fuzzer
+- [**664**Star][8d] [Py] [jazzband/django-axes](https://github.com/jazzband/django-axes) Keep track of failed login attempts in Django-powered sites.
+- [**664**Star][7d] [Py] [gwen001/pentest-tools](https://github.com/gwen001/pentest-tools) My collection of custom tools I use in my daily.
+- [**664**Star][6m] [Py] [droope/droopescan](https://github.com/droope/droopescan) A plugin-based scanner that aids security researchers in identifying issues with several CMSs, mainly Drupal & Silverstripe.
+- [**663**Star][11m] [C#] [wwillv/godofhacker](https://github.com/wwillv/godofhacker) 黑客神器
+- [**663**Star][2y] [shadowsocksr-backup/shadowsocksx-ng](https://github.com/shadowsocksr-backup/shadowsocksx-ng) Next Generation of ShadowsocksX
+- [**663**Star][6m] [C++] [gossip-sjtu/armariris](https://github.com/gossip-sjtu/armariris) 孤挺花(Armariris) -- 由上海交通大学密码与计算机安全实验室维护的LLVM混淆框架
+- [**663**Star][28d] [Java] [google/conscrypt](https://github.com/google/conscrypt) Conscrypt is a Java Security Provider that implements parts of the Java Cryptography Extension and Java Secure Socket Extension.
+- [**663**Star][5m] [Py] [aploium/shootback](https://github.com/aploium/shootback) a reverse TCP tunnel let you access target behind NAT or firewall
+- [**663**Star][1y] [Go] [0x09al/raven](https://github.com/0x09al/raven) raven is a Linkedin information gathering tool that can be used by pentesters to gather information about an organization employees using Linkedin.
+- [**662**Star][9m] [C] [samdenty/wi-pwn](https://github.com/samdenty/Wi-PWN) performs deauth attacks on cheap Arduino boards
+- [**662**Star][4d] [JS] [sadeghhayeri/greentunnel](https://github.com/sadeghhayeri/greentunnel) Green Tunnel is an anti-censorship utility designed to bypass DPI system that are put in place by various ISPs to block access to certain websites.
+- [**662**Star][6m] [Py] [golismero/golismero](https://github.com/golismero/golismero) an open source framework for security testing. It's currently geared towards web security, but it can easily be expanded to other kinds of scans.
+- [**661**Star][2y] [Py] [ysrc/gourdscanv2](https://github.com/ysrc/gourdscanv2) 被动式漏洞扫描系统
+- [**660**Star][3y] [Ruby] [igrigorik/em-proxy](https://github.com/igrigorik/em-proxy) EventMachine Proxy DSL for writing high-performance transparent / intercepting proxies in Ruby
+- [**660**Star][1y] [Py] [deepzec/bad-pdf](https://github.com/deepzec/bad-pdf) create malicious PDF file to steal NTLM(NTLMv1/NTLMv2) Hashes from windows machines
+- [**660**Star][1y] [chybeta/code-audit-challenges](https://github.com/chybeta/code-audit-challenges) Code-Audit-Challenges
+- [**660**Star][1m] [Kotlin] [chuckerteam/chucker](https://github.com/chuckerteam/chucker) simplifies the inspection of HTTP(S) requests/responses, and Throwables fired by your Android App
+- [**659**Star][24d] [redhuntlabs/awesome-asset-discovery](https://github.com/redhuntlabs/awesome-asset-discovery) List of Awesome Asset Discovery Resources
+- [**659**Star][2y] [Py] [galkan/crowbar](https://github.com/galkan/crowbar) brute forcing tool that can be used during penetration tests. It is developed to support protocols that are not currently supported by thc-hydra and other popular brute forcing tools.
+- [**658**Star][2y] [Py] [travisfsmith/sweetsecurity](https://github.com/travisfsmith/sweetsecurity) Network Security Monitoring on Raspberry Pi type devices
+- [**658**Star][8m] [Shell] [rfxn/linux-malware-detect](https://github.com/rfxn/linux-malware-detect) Linux Malware Detection (LMD)
+- [**658**Star][8d] [Py] [igogo-x86/hexrayspytools](https://github.com/igogo-x86/hexrayspytools) assists in the creation of classes/structures and detection of virtual tables
+- [**658**Star][6m] [TeX] [bettercrypto/applied-crypto-hardening](https://github.com/bettercrypto/applied-crypto-hardening) Best Current Practices regarding secure online communication and configuration of services using cryptography.
+- [**657**Star][2m] [Py] [tib3rius/autorecon](https://github.com/tib3rius/autorecon) AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.
+- [**657**Star][5m] [Perl] [jondonas/linux-exploit-suggester-2](https://github.com/jondonas/linux-exploit-suggester-2) Next-Generation Linux Kernel Exploit Suggester
+- [**657**Star][1y] [Rust] [endgameinc/xori](https://github.com/endgameinc/xori) Xori is an automation-ready disassembly and static analysis library for PE32, 32+ and shellcode
+- [**656**Star][2d] [the-akira/computer-science-resources](https://github.com/the-akira/Computer-Science-Resources) A list of resources in different fields of Computer Science (multiple languages)
+- [**656**Star][9m] [Java] [vulnerscom/burp-vulners-scanner](https://github.com/vulnerscom/burp-vulners-scanner) Vulnerability scanner based on vulners.com search API
+- [**656**Star][2d] [Py] [quentinhardy/odat](https://github.com/quentinhardy/odat) Oracle Database Attacking Tool
+- [**655**Star][9m] [Jupyter Notebook] [supercowpowers/data_hacking](https://github.com/SuperCowPowers/data_hacking) Data Hacking Project
+- [**655**Star][6m] [Go] [yawning/obfs4](https://github.com/yawning/obfs4) The obfourscator (Courtesy mirror)
+- [**655**Star][6m] [Perl] [moham3driahi/xattacker](https://github.com/moham3driahi/xattacker) X Attacker Tool ☣ Website Vulnerability Scanner & Auto Exploiter
+- [**654**Star][6m] [Py] [rabbitmask/weblogicscan](https://github.com/rabbitmask/weblogicscan) Weblogic一键漏洞检测工具,V1.3
+- [**654**Star][2m] [Py] [hisxo/gitgraber](https://github.com/hisxo/gitgraber) monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe...
+- [**654**Star][18d] [Shell] [diego-treitos/linux-smart-enumeration](https://github.com/diego-treitos/linux-smart-enumeration) Linux enumeration tool for pentesting and CTFs with verbosity levels
+- [**653**Star][8m] [C] [wifidog/wifidog-gateway](https://github.com/wifidog/wifidog-gateway) Repository for the wifidog-gateway captive portal designed for embedded systems
+- [**653**Star][4y] [Py] [praetorian-code/pentestly](https://github.com/praetorian-code/pentestly) Python and Powershell internal penetration testing framework
+- [**653**Star][2y] [C] [fail0verflow/shofel2](https://github.com/fail0verflow/shofel2) Tegra X1 bootrom exploit
+- [**653**Star][20d] [Java] [dineshshetty/android-insecurebankv2](https://github.com/dineshshetty/android-insecurebankv2) Vulnerable Android application for developers and security enthusiasts to learn about Android insecurities
+- [**652**Star][3y] [C] [rentzsch/mach_inject](https://github.com/rentzsch/mach_inject) interprocess code injection for Mac OS X
+- [**651**Star][10m] [Roff] [palantir/windows-event-forwarding](https://github.com/palantir/windows-event-forwarding) A repository for using windows event forwarding for incident detection and response
+- [**651**Star][1y] [Py] [knownsec/rd_checklist](https://github.com/knownsec/rd_checklist) 知道创宇研发技能表
+- [**650**Star][4m] [C#] [shack2/snetcracker](https://github.com/shack2/snetcracker) 超级弱口令检查工具是一款Windows平台的弱口令审计工具,支持批量多线程检查,可快速发现弱密码、弱口令账号,密码支持和用户名结合进行检查,大大提高成功率,支持自定义服务端口和字典。
+- [**650**Star][2y] [C++] [nathancastle/bootshellcredentialprovider](https://github.com/nathancastle/bootshellcredentialprovider) Windows 10 Credential Provider intended to simplify the process of logging directly into alternative shells to Windows Explorer.
+- [**649**Star][1m] [Shell] [toutyrater/v2ray-guide](https://github.com/toutyrater/v2ray-guide)
+- [**649**Star][6m] [PHP] [l3m0n/bypass_disable_functions_shell](https://github.com/l3m0n/bypass_disable_functions_shell) Bypass Disable Functions Shell
+- [**649**Star][2y] [C] [eugnis/spectre-attack](https://github.com/eugnis/spectre-attack) Example of using revealed "Spectre" exploit (CVE-2017-5753 and CVE-2017-5715)
+- [**649**Star][15d] [YARA] [eset/malware-ioc](https://github.com/eset/malware-ioc) Indicators of Compromises (IOC) of our various investigations
+- [**648**Star][3y] [ObjC] [isecpartners/introspy-ios](https://github.com/isecpartners/introspy-ios) Security profiling for blackbox iOS
+- [**647**Star][1y] [Py] [simplysecurity/simplyemail](https://github.com/SimplySecurity/SimplyEmail) Email recon made fast and easy, with a framework to build on
+- [**647**Star][9m] [ObjC] [chenxiancai/stcobfuscator](https://github.com/chenxiancai/stcobfuscator) iOS全局自动化 代码混淆 工具!支持cocoapod组件代码一并 混淆,完美避开hardcode方法、静态库方法和系统库方法!
+- [**646**Star][3y] [Java] [facebookarchive/proguard](https://github.com/facebookarchive/proguard) A fork of ProGuard.
+- [**645**Star][5y] [Shell] [hannob/bashcheck](https://github.com/hannob/bashcheck) test script for shellshocker and related vulnerabilities
+- [**645**Star][1y] [Java] [faizann24/wifi-bruteforcer-fsecurify](https://github.com/faizann24/wifi-bruteforcer-fsecurify) Android application to brute force WiFi passwords without requiring a rooted device.
+- [**644**Star][5m] [C++] [eliboa/tegrarcmgui](https://github.com/eliboa/tegrarcmgui) C++ GUI for TegraRcmSmash (Fusée Gelée exploit for Nintendo Switch)
+- [**644**Star][5m] [JS] [draios/sysdig-inspect](https://github.com/draios/sysdig-inspect) A powerful opensource interface for container troubleshooting and security investigation
+- [**643**Star][3m] [Py] [gquere/pwn_jenkins](https://github.com/gquere/pwn_jenkins) Notes about attacking Jenkins servers
+- [**643**Star][2y] [C] [coolstar/electra](https://github.com/coolstar/electra) Electra iOS 11.0 - 11.1.2 jailbreak toolkit based on async_awake
+- [**642**Star][22d] [C++] [thingpulse/esp8266-weather-station](https://github.com/ThingPulse/esp8266-weather-station) New version of the ESP8266 Weather Station
+- [**642**Star][4y] [Py] [paulsec/twittor](https://github.com/paulsec/twittor) A fully featured backdoor that uses Twitter as a C&C server
+- [**642**Star][5m] [PHP] [mattiasgeniar/php-exploit-scripts](https://github.com/mattiasgeniar/php-exploit-scripts) A collection of PHP exploit scripts, found when investigating hacked servers. These are stored for educational purposes and to test fuzzers and vulnerability scanners. Feel free to contribute.
+- [**642**Star][10m] [Dockerfile] [aquasecurity/microscanner](https://github.com/aquasecurity/microscanner) Scan your container images for package vulnerabilities with Aqua Security
+- [**641**Star][5m] [Py] [pyupio/safety](https://github.com/pyupio/safety) Safety checks your installed dependencies for known security vulnerabilities
+- [**641**Star][2y] [harmj0y/cheatsheets](https://github.com/harmj0y/cheatsheets) Cheat sheets for various projects.
+- [**641**Star][1y] [Go] [ga0/netgraph](https://github.com/ga0/netgraph) A cross platform http sniffer with a web UI
+- [**640**Star][2y] [Shell] [kitten/setup-simple-ipsec-l2tp-vpn](https://github.com/kitten/setup-simple-ipsec-l2tp-vpn) Setup a simple IPSec/L2TP VPN Server for Ubuntu and Debian
+- [**640**Star][3m] [C++] [stevemk14ebr/polyhook](https://github.com/stevemk14ebr/polyhook) x86/x64 C++ Hooking Library
+- [**640**Star][3d] [Java] [ganyao114/sandhook](https://github.com/ganyao114/sandhook) Android ART Hook/Native Inline Hook/Single Instruction Hook - support 4.4 - 10.0 32/64 bit - Xposed API Compat
+- [**639**Star][3d] [Go] [ullaakut/gorsair](https://github.com/ullaakut/gorsair) Gorsair hacks its way into remote docker containers that expose their APIs
+- [**639**Star][7d] [Py] [thewhiteh4t/seeker](https://github.com/thewhiteh4t/seeker) Accurately Locate Smartphones using Social Engineering
+- [**639**Star][1y] [Py] [lmco/laikaboss](https://github.com/lmco/laikaboss) Laika BOSS: Object Scanning System
+- [**639**Star][8m] [Py] [klen/pylama](https://github.com/klen/pylama) Code audit tool for python.
+- [**639**Star][23d] [C] [kernelslacker/trinity](https://github.com/kernelslacker/trinity) Linux system call fuzzer
+- [**639**Star][8m] [cryptogenic/exploit-writeups](https://github.com/cryptogenic/exploit-writeups) A collection where my current and future writeups for exploits/CTF will go
+- [**638**Star][11m] [HTML] [bl4de/security_whitepapers](https://github.com/bl4de/security_whitepapers) Collection of misc IT Security related whitepapers, presentations, slides - hacking, bug bounty, web application security, XSS, CSRF, SQLi
+- [**637**Star][1y] [Py] [floodsung/learningtocompare_fsl](https://github.com/floodsung/LearningToCompare_FSL) PyTorch code for CVPR 2018 paper: Learning to Compare: Relation Network for Few-Shot Learning (Few-Shot Learning part)
+- [**637**Star][5m] [smgorelik/windows-rce-exploits](https://github.com/smgorelik/windows-rce-exploits) The exploit samples database is a repository for **RCE** (remote code execution) exploits and Proof-of-Concepts for **WINDOWS**, the samples are uploaded for education purposes for red and blue teams.
+- [**637**Star][4m] [Jupyter Notebook] [parrt/lolviz](https://github.com/parrt/lolviz) A simple Python data-structure visualization tool for lists of lists, lists, dictionaries; primarily for use in Jupyter notebooks / presentations
+- [**637**Star][26d] [Ruby] [markets/invisible_captcha](https://github.com/markets/invisible_captcha) Simple and flexible spam protection solution for Rails applications.
+
+- [**637**Star][2y] [PHP] [duoergun0729/1book](https://github.com/duoergun0729/1book) 《Web安全之机器学习入门》
+- [**636**Star][2y] [C] [qihoo360/mysql-sniffer](https://github.com/qihoo360/mysql-sniffer) mysql-sniffer is a network traffic analyzer tool for mysql, it is developed by Qihoo DBA and infrastructure team
+- [**636**Star][3y] [PS] [hlldz/invoke-phant0m](https://github.com/hlldz/invoke-phant0m) Windows Event Log Killer
+- [**636**Star][1y] [JS] [alcuadrado/hieroglyphy](https://github.com/alcuadrado/hieroglyphy) Transform any javascript code to an equivalent sequence of ()[]{}!+ characters that runs in the browser!
+- [**635**Star][2m] [C++] [apple/swift-lldb](https://github.com/apple/swift-lldb) This is the version of LLDB that supports the Swift programming language & REPL.
+- [**635**Star][15d] [webdigi/aws-vpn-server-setup](https://github.com/webdigi/aws-vpn-server-setup) Setup your own private, secure, free* VPN on the Amazon AWS Cloud in 10 minutes. CloudFormation
+- [**635**Star][1y] [Swift] [phynet/ios-url-schemes](https://github.com/phynet/ios-url-schemes) a github solution from my gist of iOS list for urls schemes
+- [**635**Star][6d] [C++] [nodejs/node-addon-api](https://github.com/nodejs/node-addon-api) Module for using N-API from C++
+- [**635**Star][2y] [Py] [mschwager/dhcpwn](https://github.com/mschwager/dhcpwn) testing DHCP IP exhaustion attacks, sniff local DHCP traffic
+- [**635**Star][11d] [Py] [igio90/dwarf](https://github.com/igio90/dwarf) Full featured multi arch/os debugger built on top of PyQt5 and frida
+- [**635**Star][10m] [Py] [dirkjanm/privexchange](https://github.com/dirkjanm/privexchange) Exchange your privileges for Domain Admin privs by abusing Exchange
+- [**634**Star][4y] [PHP] [emposha/php-shell-detector](https://github.com/emposha/php-shell-detector) Web Shell Detector – is a php script that helps you find and identify php/cgi(perl)/asp/aspx shells. Web Shell Detector has a “web shells” signature database that helps to identify “web shell” up to 99%.
+- [**633**Star][6m] [C] [travisgoodspeed/md380tools](https://github.com/travisgoodspeed/md380tools) Python tools and patched firmware for the TYT-MD380
+- [**633**Star][6m] [Py] [binarydefense/artillery](https://github.com/binarydefense/artillery) The Artillery Project is an open-source blue team tool designed to protect Linux and Windows operating systems through multiple methods.
+- [**632**Star][9m] [webbreacher/offensiveinterview](https://github.com/webbreacher/offensiveinterview) Interview questions to screen offensive (red team/pentest) candidates
+- [**631**Star][4y] [CoffeeScript] [shadowsocks/shadowsocks-chromeapp](https://github.com/shadowsocks/shadowsocks-chromeapp) Chrome client for shadowsocks
+- [**631**Star][10m] [Py] [mehulj94/braindamage](https://github.com/mehulj94/braindamage) Remote administration tool which uses Telegram as a C&C server
+- [**630**Star][5m] [Go] [zmap/zgrab](https://github.com/zmap/zgrab) A Banner Grabber, in Go
+- [**629**Star][8m] [Shell] [g0tmi1k/msfpc](https://github.com/g0tmi1k/msfpc) MSFvenom Payload Creator (MSFPC)
+- [**629**Star][2y] [C] [client9/libinjection](https://github.com/client9/libinjection) SQL / SQLI tokenizer parser analyzer
+- [**629**Star][5m] [ankane/secure_rails](https://github.com/ankane/secure_rails) Rails security best practices
+- [**629**Star][4m] [3gstudent/pentest-and-development-tips](https://github.com/3gstudent/pentest-and-development-tips) A collection of pentest and development tips
+- [**628**Star][2d] [PS] [olafhartong/sysmon-modular](https://github.com/olafhartong/sysmon-modular) A repository of sysmon configuration modules
+- [**628**Star][2y] [C++] [codilime/veles](https://github.com/codilime/veles) Binary data analysis and visualization tool
+- [**627**Star][7m] [yeyintminthuhtut/awesome-advanced-windows-exploitation-references](https://github.com/yeyintminthuhtut/Awesome-Advanced-Windows-Exploitation-References) List of Awesome Advanced Windows Exploitation References
+- [**626**Star][1y] [C] [nfc-tools/mfoc](https://github.com/nfc-tools/mfoc) Mifare Classic Offline Cracker
+- [**626**Star][4y] [jeanphorn/wordlist](https://github.com/jeanphorn/wordlist) Collection of some common wordlists such as RDP password, user name list, ssh password wordlist for brute force. IP Cameras Default Passwords.
+- [**625**Star][2y] [C] [shadowsocksr-backup/shadowsocksr-libev](https://github.com/shadowsocksr-backup/shadowsocksr-libev) libev port of ShadowsocksR
+- [**625**Star][11m] [C++] [ohpe/juicy-potato](https://github.com/ohpe/juicy-potato) A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM.
+- [**625**Star][3y] [C] [chokepoint/azazel](https://github.com/chokepoint/azazel) Azazel is a userland rootkit based off of the original LD_PRELOAD technique from Jynx rootkit. It is more robust and has additional features, and focuses heavily around anti-debugging and anti-detection.
+- [**625**Star][2m] [Py] [alichtman/stronghold](https://github.com/alichtman/stronghold) Easily configure macOS security settings from the terminal.
+- [**624**Star][4y] [JS] [n0wa11/gfw_whitelist](https://github.com/n0wa11/gfw_whitelist) A Pac File of the Whitelisted Websites for the Great Firewall of China (GFW)
+- [**624**Star][2d] [arkadiyt/bounty-targets-data](https://github.com/arkadiyt/bounty-targets-data) This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/etc) that are eligible for reports
+- [**623**Star][2y] [C] [tgraf/bmon](https://github.com/tgraf/bmon) bandwidth monitor and rate estimator
+- [**623**Star][3m] [C] [gdabah/distorm](https://github.com/gdabah/distorm) Powerful Disassembler Library For x86/AMD64
+- [**622**Star][9d] [Py] [virt-manager/virt-manager](https://github.com/virt-manager/virt-manager) Desktop tool for managing virtual machines via libvirt
+- [**622**Star][6m] [Java] [sigploiter/sigploit](https://github.com/sigploiter/sigploit) Telecom Signaling Exploitation Framework - SS7, GTP, Diameter & SIP
+- [**622**Star][3m] [PHP] [hongrisec/php-audit-labs](https://github.com/hongrisec/php-audit-labs) 一个关于PHP的代码审计项目
+- [**621**Star][2y] [turbo/openftp4](https://github.com/turbo/openftp4) A list of all FTP servers in IPv4 that allow anonymous logins.
+- [**621**Star][3m] [Py] [3xp10it/xwaf](https://github.com/3xp10it/xwaf) Automatic bypass (brute force) waf
+- [**621**Star][5m] [Py] [deibit/cansina](https://github.com/deibit/cansina) Web Content Discovery Tool
+- [**621**Star][2y] [Py] [0xbug/sqliscanner](https://github.com/0xbug/sqliscanner) Automatic SQL injection with Charles and sqlmap api
+- [**620**Star][9m] [Py] [epsylon/ufonet](https://github.com/epsylon/ufonet) a toolkit designed to launch DDoS and DoS attacks.
+- [**620**Star][5m] [JS] [derhuerst/tcp-over-websockets](https://github.com/derhuerst/tcp-over-websockets) Tunnel TCP through WebSockets.
+- [**619**Star][5y] [PHP] [pr0x13/idict](https://github.com/pr0x13/idict) iCloud Apple iD BruteForcer
+- [**619**Star][10m] [PS] [mattifestation/powershellarsenal](https://github.com/mattifestation/powershellarsenal) A PowerShell Module Dedicated to Reverse Engineering
+- [**619**Star][4y] [Go] [leo-stone/hack-petya](https://github.com/leo-stone/hack-petya) search key to restore petya encrypted mft
+- [**618**Star][4m] [bypass007/safety-project-collection](https://github.com/bypass007/safety-project-collection) 收集一些比较优秀的开源安全项目,以帮助甲方安全从业人员构建企业安全能力。
+- [**617**Star][1y] [Lua] [unixhot/waf](https://github.com/unixhot/waf) 使用Nginx+Lua实现的WAF(版本v1.0)
+- [**617**Star][12d] [C] [thewover/donut](https://github.com/thewover/donut) Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters
+- [**617**Star][1y] [Go] [lunixbochs/usercorn](https://github.com/lunixbochs/usercorn) dynamic binary analysis via platform emulation
+- [**616**Star][3d] [HTML] [v2ray/manual](https://github.com/v2ray/manual) Source code for
+- [**616**Star][1y] [Shell] [wireghoul/htshells](https://github.com/wireghoul/htshells) Self contained web shells and other attacks via .htaccess files.
+- [**616**Star][3m] [C] [matheus-garbelini/esp32_esp8266_attacks](https://github.com/matheus-garbelini/esp32_esp8266_attacks) Proof of Concept of ESP32/8266 Wi-Fi vulnerabilties (CVE-2019-12586, CVE-2019-12587, CVE-2019-12588)
+- [**616**Star][21d] [Go] [evilsocket/arc](https://github.com/evilsocket/arc) A manager for your secrets.
+- [**615**Star][4m] [Lua] [jx-sec/jxwaf](https://github.com/jx-sec/jxwaf) JXWAF(锦衣盾)是一款基于openresty(nginx+lua)开发的web应用防火墙
+- [**615**Star][1y] [jiangsir404/audit-learning](https://github.com/jiangsir404/audit-learning) 记录自己对《代码审计》的理解和总结,对危险函数的深入分析以及在p牛的博客和代码审计圈的收获
+- [**614**Star][3y] [ObjC] [macmade/keychaincracker](https://github.com/macmade/keychaincracker) macOS keychain cracking tool
+- [**614**Star][6y] [Assembly] [adriancable/8086tiny](https://github.com/adriancable/8086tiny) Official repository for 8086tiny: a tiny PC emulator/virtual machine
+- [**614**Star][1y] [Py] [adamcaudill/equationgroupleak](https://github.com/adamcaudill/equationgroupleak) Archive of leaked Equation Group materials
+- [**613**Star][1m] [C++] [acidanthera/virtualsmc](https://github.com/acidanthera/virtualsmc) SMC emulator layer
+- [**613**Star][2m] [Py] [sourcelair/ceryx](https://github.com/sourcelair/ceryx) Dynamic reverse proxy based on NGINX OpenResty with an API
+- [**613**Star][1y] [langyanduan/reborn](https://github.com/langyanduan/reborn) The missing proxy for macOS
+- [**613**Star][2y] [Py] [fanhuaandluomu/geetest_break](https://github.com/fanhuaandluomu/geetest_break) 极验验证码破解-源码+手册
+- [**612**Star][10m] [Py] [zdresearch/owasp-nettacker](https://github.com/zdresearch/OWASP-Nettacker) Automated Penetration Testing Framework
+- [**612**Star][1y] [Ruby] [thesp0nge/dawnscanner](https://github.com/thesp0nge/dawnscanner) Dawn is a static analysis security scanner for ruby written web applications. It supports Sinatra, Padrino and Ruby on Rails frameworks.
+- [**612**Star][27d] [C] [quiet/quiet-lwip](https://github.com/quiet/quiet-lwip) create TCP and UDP connections over an audio channel
+- [**612**Star][3m] [Py] [netflix/repokid](https://github.com/netflix/repokid) AWS Least Privilege for Distributed, High-Velocity Deployment
+- [**612**Star][6m] [Py] [eliasgranderubio/dagda](https://github.com/eliasgranderubio/dagda) a tool to perform static analysis of known vulnerabilities, trojans, viruses, malware & other malicious threats in docker images/containers and to monitor the docker daemon and running docker containers for detecting anomalous activities
+- [**612**Star][3m] [Go] [eldadru/ksniff](https://github.com/eldadru/ksniff) Kubectl plugin to ease sniffing on kubernetes pods using tcpdump and wireshark
+- [**612**Star][3m] [Shell] [ashishb/osx-and-ios-security-awesome](https://github.com/ashishb/osx-and-ios-security-awesome) OSX and iOS related security tools
+- [**612**Star][9m] [Py] [al-azif/ps4-exploit-host](https://github.com/al-azif/ps4-exploit-host) Easy PS4 Exploit Hosting
+- [**611**Star][4y] [Batchfile] [windowslies/blockwindows](https://github.com/windowslies/blockwindows) Stop Windows 10 Nagging and Spying. Works with Win7-10
+- [**611**Star][4m] [Py] [faizann24/xsspy](https://github.com/faizann24/xsspy) Web Application XSS Scanner
+- [**611**Star][8m] [denji/golang-tls](https://github.com/denji/golang-tls) Simple Golang HTTPS/TLS Examples
+- [**608**Star][7m] [JS] [vincentcox/stacoan](https://github.com/vincentcox/stacoan) StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications.
+- [**607**Star][24d] [PS] [farag2/windows-10-setup-script](https://github.com/farag2/windows-10-setup-script) Script to setup Windows 10 1903/1909
+- [**607**Star][3m] [Py] [matlink/gplaycli](https://github.com/matlink/gplaycli) Google Play Downloader via Command line
+- [**607**Star][8m] [Shell] [cokebar/gfwlist2dnsmasq](https://github.com/cokebar/gfwlist2dnsmasq) A shell script which convert gfwlist into dnsmasq rules. Python version:
+- [**607**Star][1y] [C#] [bonesoul/coiniumserv](https://github.com/bonesoul/coiniumserv) Next-gen crypto currency mining pool software
+- [**606**Star][2y] [PS] [peewpw/invoke-wcmdump](https://github.com/peewpw/invoke-wcmdump) PowerShell Script to Dump Windows Credentials from the Credential Manager
+- [**606**Star][7m] [aleenzz/mysql_sql_bypass_wiki](https://github.com/aleenzz/mysql_sql_bypass_wiki) mysql注入,bypass的一些心得
+- [**606**Star][9m] [C#] [0xbadjuju/tokenvator](https://github.com/0xbadjuju/tokenvator) A tool to elevate privilege with Windows Tokens
+- [**605**Star][15d] [404notf0und/ai-for-security-learning](https://github.com/404notf0und/ai-for-security-learning) 安全场景、基于AI的安全算法和安全数据分析学习资料整理
+- [**605**Star][3m] [Py] [0xgalz/virtuailor](https://github.com/0xgalz/virtuailor) IDAPython tool for C++ vtables reconstruction
+
+ View Details
+
+
+ ## 静态部分:
+ - 检测非直接调用
+ - 利用条件断点, Hook非直接调用的值赋值过程
+
+ ## 动态 部分
+ - 创建虚表结构
+ - 重命名函数和虚表地址
+ - 给反汇编非直接调用添加结构偏移
+ - 给非直接调用到虚表之间添加交叉引用
+
+ ## 使用
+ - File -> Script File -> Main.py(设置断点) -> IDA调试器执行
+
+
+
+- [**604**Star][2m] [Swift] [gradients/gradients](https://github.com/Gradients/Gradients) A curated collection of 180 splendid gradients made in swift
+- [**604**Star][10d] [Shell] [securityftw/cs-suite](https://github.com/securityftw/cs-suite) Cloud Security Suite - One stop tool for auditing the security posture of AWS/GCP/Azure infrastructure.
+- [**603**Star][1y] [C] [scottybauer/android_kernel_cve_pocs](https://github.com/scottybauer/android_kernel_cve_pocs) A list of my CVE's with POCs
+- [**602**Star][28d] [Max] [maktm/flirtdb](https://github.com/Maktm/FLIRTDB) A community driven collection of IDA FLIRT signature files
+- [**602**Star][19d] [Py] [webrecorder/pywb](https://github.com/webrecorder/pywb) Core Python Web Archiving Toolkit for replay and recording of web archives
+- [**602**Star][6m] [C] [pelya/android-keyboard-gadget](https://github.com/pelya/android-keyboard-gadget) Convert your Android device into USB keyboard/mouse, control your PC from your Android device remotely, including BIOS/bootloader.
+- [**602**Star][7y] [Py] [m0mchil/poclbm](https://github.com/m0mchil/poclbm) poclbm:比特币挖掘
+- [**602**Star][2y] [Py] [bhdresh/cve-2017-0199](https://github.com/bhdresh/cve-2017-0199) Exploit toolkit CVE-2017-0199 - v4.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft Office RCE. It could generate a malicious RTF/PPSX file and deliver metasploit / meterpreter / other payload to victim without any complex configuration.
+- [**601**Star][3y] [Py] [omriher/captipper](https://github.com/omriher/captipper) Malicious HTTP traffic explorer
+- [**601**Star][2d] [C#] [microsoft/clrmd](https://github.com/microsoft/clrmd) Microsoft.Diagnostics.Runtime is a set of APIs for introspecting processes and dumps.
+- [**601**Star][2y] [HTML] [jiji262/wooyun_articles](https://github.com/jiji262/wooyun_articles) drops.wooyun.org 乌云Drops文章备份
+- [**601**Star][4y] [Py] [hatriot/clusterd](https://github.com/hatriot/clusterd) application server attack toolkit
+- [**601**Star][9m] [Java] [c0ny1/chunked-coding-converter](https://github.com/c0ny1/chunked-coding-converter) Burp suite 分块传输辅助插件
+- [**600**Star][30d] [C++] [mdhiggins/esp8266-http-ir-blaster](https://github.com/mdhiggins/esp8266-http-ir-blaster) ESP8266 Compatible IR Blaster that accepts HTTP commands for use with services like Amazon Echo
+- [**599**Star][3d] [Py] [witten/borgmatic](https://github.com/witten/borgmatic) Simple, configuration-driven backup software for servers and workstations
+- [**599**Star][2y] [Py] [secretsquirrel/sigthief](https://github.com/secretsquirrel/sigthief) Stealing Signatures and Making One Invalid Signature at a Time
+- [**599**Star][5d] [ntkernel/lantern](https://github.com/ntkernel/lantern) V2Ray配置文件,蓝灯(Lantern)破解,手机版+win版
+- [**598**Star][1y] [PS] [fortynorthsecurity/wmimplant](https://github.com/FortyNorthSecurity/WMImplant) This is a PowerShell based tool that is designed to act like a RAT. Its interface is that of a shell where any command that is supported is translated into a WMI-equivalent for use on a network/remote machine. WMImplant is WMI based.
+- [**598**Star][1y] [Shell] [pires/kubernetes-vagrant-coreos-cluster](https://github.com/pires/kubernetes-vagrant-coreos-cluster) Kubernetes cluster (for testing purposes) made easy with Vagrant and CoreOS.
+- [**597**Star][18d] [Py] [nongiach/arm_now](https://github.com/nongiach/arm_now) a qemu powered tool that allows instant setup of virtual machines on arm cpu, mips, powerpc, nios2, x86 and more, for reverse, exploit, fuzzing and programming purpose.
+- [**597**Star][1m] [Py] [hslatman/awesome-industrial-control-system-security](https://github.com/hslatman/awesome-industrial-control-system-security) A curated list of resources related to Industrial Control System (ICS) security.
+- [**597**Star][6m] [C] [hashcat/hashcat-utils](https://github.com/hashcat/hashcat-utils) Small utilities that are useful in advanced password cracking
+- [**597**Star][3d] [YARA] [didierstevens/didierstevenssuite](https://github.com/didierstevens/didierstevenssuite) No Documentation
+- [**597**Star][12d] [Go] [antoniomika/sish](https://github.com/antoniomika/sish) An open source serveo/ngrok alternative. HTTP(S)/WS(S)/TCP Tunnels to localhost using only SSH.
+- [**596**Star][1m] [siguza/ios-resources](https://github.com/siguza/ios-resources) Useful resources for iOS hacking
+- [**596**Star][2m] [PS] [ramblingcookiemonster/powershell](https://github.com/ramblingcookiemonster/powershell) Various PowerShell functions and scripts
+- [**596**Star][5d] [azure/aks](https://github.com/azure/aks) Azure Kubernetes Service
+- [**595**Star][4y] [Makefile] [zhengmin1989/thesevenweapons](https://github.com/zhengmin1989/thesevenweapons) 安卓动态调试七种武器
+- [**595**Star][16d] [C] [openvpn/openvpn-gui](https://github.com/openvpn/openvpn-gui) OpenVPN GUI is a graphical frontend for OpenVPN running on Windows XP / Vista / 7 / 8. It creates an icon in the notification area from which you can control OpenVPN to start/stop your VPN tunnels, view the log and do other useful things.
+- [**595**Star][5m] [fabrimagic72/malware-samples](https://github.com/fabrimagic72/malware-samples) A collection of malware samples caught by several honeypots i manage
+- [**595**Star][7d] [Go] [cloudflare/cloudflared](https://github.com/cloudflare/cloudflared) Argo Tunnel client
+- [**595**Star][1y] [Py] [brannondorsey/passgan](https://github.com/brannondorsey/passgan) A Deep Learning Approach for Password Guessing (
+- [**594**Star][23d] [Py] [glasgowembedded/glasgow](https://github.com/GlasgowEmbedded/glasgow) Scots Army Knife for electronics
+- [**594**Star][3m] [Py] [thewhiteh4t/pwnedornot](https://github.com/thewhiteh4t/pwnedornot) OSINT Tool for Finding Passwords of Compromised Email Addresses
+- [**594**Star][6m] [Py] [dmpayton/django-admin-honeypot](https://github.com/dmpayton/django-admin-honeypot)
+- [**594**Star][3y] [C++] [breakingmalwareresearch/atom-bombing](https://github.com/breakingmalwareresearch/atom-bombing) Brand New Code Injection for Windows
+- [**593**Star][18d] [PHP] [zhuifengshaonianhanlu/pikachu](https://github.com/zhuifengshaonianhanlu/pikachu) 一个好玩的Web安全-漏洞测试平台
+- [**593**Star][8d] [Py] [trustedsec/trevorc2](https://github.com/trustedsec/trevorc2) a legitimate website (browsable) that tunnels client/server communications for covert command execution.
+- [**593**Star][6d] [C] [mrexodia/titanhide](https://github.com/mrexodia/titanhide) a driver intended to hide debuggers from certain processes
+- [**592**Star][2m] [Py] [pwning/public-writeup](https://github.com/pwning/public-writeup) CTF write-ups by Plaid Parliament of Pwning
+- [**592**Star][1m] [HTML] [owasp/railsgoat](https://github.com/owasp/railsgoat) A vulnerable version of Rails that follows the OWASP Top 10
+- [**592**Star][2y] [Go] [nim4/dbshield](https://github.com/nim4/dbshield) Database firewall written in Go
+- [**591**Star][2y] [Py] [sc0tfree/mentalist](https://github.com/sc0tfree/mentalist) a graphical tool for custom wordlist generation. It utilizes common human paradigms for constructing passwords and can output the full wordlist as well as rules compatible with Hashcat and John the Ripper.
+- [**591**Star][3m] [Go] [moul/sshportal](https://github.com/moul/sshportal) Transparent SSH bastion
+- [**590**Star][2y] [Go] [timest/goscan](https://github.com/timest/goscan) goscan is a simple and efficient IPv4 network scanner that discovers all active devices on local subnet.
+- [**590**Star][11m] [pandazheng/ioshackstudy](https://github.com/pandazheng/ioshackstudy) IOS安全学习资料汇总
+- [**590**Star][2y] [Py] [eldraco/salamandra](https://github.com/eldraco/salamandra) Salamandra is a tool to find spy microphones that use radio freq to transmit. It uses SDR.
+- [**590**Star][7y] [Py] [dabeaz/bitey](https://github.com/dabeaz/bitey) Import LLVM bitcode directly into Python and use it as an extension module.
+- [**590**Star][6m] [Ruby] [bit4woo/summit_ppt](https://github.com/bit4woo/summit_ppt) 各种安全大会PPT PDF
+- [**589**Star][3m] [Py] [pahaz/sshtunnel](https://github.com/pahaz/sshtunnel) SSH tunnels to remote server.
+- [**589**Star][1y] [brunty/awesome-checker-services](https://github.com/brunty/awesome-checker-services) List of links to the various checkers out there on the web for sites, domains, security etc
+- [**589**Star][1m] [Py] [1n3/blackwidow](https://github.com/1n3/blackwidow) A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.
+- [**588**Star][28d] [Go] [nytimes/gziphandler](https://github.com/nytimes/gziphandler) Go middleware to gzip HTTP responses
+- [**587**Star][13d] [C++] [lhy0403/qv2ray](https://github.com/lhy0403/qv2ray) v2ray linux Windows macOS GUI, 使用 Qt & c++, 支持 vmess ss socks,支持 vmess:// 扫描二维码,路由编辑,附带 Windows/Plasma 工具栏
+- [**587**Star][3y] [Perl 6] [rapid7/iotseeker](https://github.com/rapid7/iotseeker) scan a network for specific types of IoT devices to detect if they are using the default, factory set credentials.
+- [**587**Star][3y] [hack-with-github/windows](https://github.com/hack-with-github/windows) Awesome tools to exploit Windows !
+- [**587**Star][3y] [C] [cr4sh/thinkpwn](https://github.com/cr4sh/thinkpwn) Lenovo ThinkPad System Management Mode arbitrary code execution 0day exploit
+- [**586**Star][12d] [lirantal/awesome-nodejs-security](https://github.com/lirantal/awesome-nodejs-security) Awesome Node.js Security resources
+- [**586**Star][2y] [Swift] [krisyu/swift14macosapps](https://github.com/krisyu/swift14macosapps) approaching macOS development using swift with 14 mini projects.
+- [**585**Star][2m] [Py] [thinkst/opencanary](https://github.com/thinkst/opencanary) Modular and decentralised honeypot
+- [**585**Star][8m] [Java] [olacabs/jackhammer](https://github.com/olacabs/jackhammer) One Security vulnerability assessment/management tool to solve all the security team problems.
+- [**585**Star][21d] [C++] [henrypp/memreduct](https://github.com/henrypp/memreduct) Lightweight real-time memory management application to monitor and clean system memory on your computer.
+- [**585**Star][4y] [certsocietegenerale/irm](https://github.com/certsocietegenerale/irm) Incident Response Methodologies
+- [**584**Star][8m] [Py] [woj-ciech/danger-zone](https://github.com/woj-ciech/danger-zone) Correlate data between domains, IPs and email addresses, present it as a graph and store everything into Elasticsearch and JSON files.
+- [**584**Star][9m] [C++] [secrary/makin](https://github.com/secrary/makin) reveal anti-debugging and anti-VM tricks
+- [**584**Star][1m] [PS] [monoxgas/srdi](https://github.com/monoxgas/srdi) Shellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode
+- [**584**Star][2y] [Java] [findbugsproject/findbugs](https://github.com/findbugsproject/findbugs) a program which uses static analysis to look for bugs in Java code
+- [**584**Star][11d] [Ruby] [dev-sec/ansible-ssh-hardening](https://github.com/dev-sec/ansible-ssh-hardening) This Ansible role provides numerous security-related ssh configurations, providing all-round base protection.
+- [**583**Star][2d] [Py] [vivisect/vivisect](https://github.com/vivisect/vivisect)
+- [**583**Star][3y] [C] [ktap/ktap](https://github.com/ktap/ktap) a new scripting dynamic tracing tool for Linux
+- [**583**Star][5m] [d30sa1/rootkits-list-download](https://github.com/d30sa1/rootkits-list-download) the list of all rootkits found so far on github and other sites.
+- [**582**Star][8d] [Py] [facebookincubator/weasel](https://github.com/facebookincubator/weasel) DNS covert channel implant for Red Teams.
+- [**582**Star][1y] [Py] [softscheck/tplink-smartplug](https://github.com/softscheck/tplink-smartplug) TP-Link WiFi SmartPlug Client and Wireshark Dissector
+- [**582**Star][7m] [Py] [ekultek/zeus-scanner](https://github.com/ekultek/zeus-scanner) Advanced reconnaissance utility
+- [**582**Star][2m] [Go] [dimitarpetrov/stegify](https://github.com/dimitarpetrov/stegify) Go tool for LSB steganography, capable of hiding any file within an image.
+- [**581**Star][1y] [Py] [spencerdodd/kernelpop](https://github.com/spencerdodd/kernelpop) kernel privilege escalation enumeration and exploitation framework
+- [**581**Star][2m] [C++] [secrary/andromeda](https://github.com/secrary/andromeda) Andromeda - Interactive Reverse Engineering Tool for Android Applications
+- [**581**Star][9m] [Py] [romanz/amodem](https://github.com/romanz/amodem) transmit a file between 2 computers, using a simple headset, allowing true air-gapped communication (via a speaker and a microphone), or an audio cable (for higher transmission speed)
+- [**581**Star][3y] [Py] [mlsecproject/combine](https://github.com/mlsecproject/combine) Tool to gather Threat Intelligence indicators from publicly available sources
+- [**581**Star][24d] [Ruby] [hackplayers/evil-winrm](https://github.com/hackplayers/evil-winrm) The ultimate WinRM shell for hacking/pentesting
+- [**581**Star][1y] [JS] [cryptogenic/ps4-5.05-kernel-exploit](https://github.com/cryptogenic/ps4-5.05-kernel-exploit) A fully implemented kernel exploit for the PS4 on 5.05FW
+- [**581**Star][3d] [clarketm/proxy-list](https://github.com/clarketm/proxy-list) A list of free, public, forward proxy servers. UPDATED DAILY!
+- [**580**Star][2m] [C] [pyca/bcrypt](https://github.com/pyca/bcrypt) Modern(-ish) password hashing for your software and your servers
+- [**580**Star][2y] [PHP] [pentestgeek/phishing-frenzy](https://github.com/pentestgeek/phishing-frenzy) Ruby on Rails Phishing Framework
+- [**580**Star][6m] [nshalabi/sysmontools](https://github.com/nshalabi/sysmontools) Utilities for Sysmon
+- [**580**Star][7m] [Py] [googlecloudplatform/flask-talisman](https://github.com/googlecloudplatform/flask-talisman) HTTP security headers for Flask
+- [**580**Star][2y] [Py] [ant4g0nist/lisa.py](https://github.com/ant4g0nist/lisa.py) -An Exploit Dev Swiss Army Knife.
+- [**579**Star][1y] [CSS] [functionclub/ssr-bash-python](https://github.com/functionclub/ssr-bash-python) 一个SSR多用户控制脚本
+- [**579**Star][1y] [Go] [manifoldco/torus-cli](https://github.com/manifoldco/torus-cli) A secure, shared workspace for secrets
+- [**579**Star][1m] [C] [getdnsapi/stubby](https://github.com/getdnsapi/stubby) Stubby is the name given to a mode of using getdns which enables it to act as a local DNS Privacy stub resolver (using DNS-over-TLS).
+- [**579**Star][1y] [Java] [federicodotta/brida](https://github.com/federicodotta/brida) The new bridge between Burp Suite and Frida!
+- [**579**Star][4y] [80vul/phpcodz](https://github.com/80vul/phpcodz) Php Codz Hacking
+- [**578**Star][1y] [C#] [tyranid/dotnettojscript](https://github.com/tyranid/dotnettojscript) A tool to create a JScript file which loads a .NET v2 assembly from memory.
+- [**578**Star][6m] [Py] [timthony/self_drive](https://github.com/timthony/self_drive) 基于树莓派的自动驾驶小车,利用树莓派和tensorflow实现小车在赛道的自动驾驶。(Self-driving car based on raspberry pi(tensorflow))
+- [**578**Star][3y] [Pascal] [t-d-k/librecrypt](https://github.com/t-d-k/librecrypt) Transparent on-the-fly disk encryption for Windows. LUKS compatible.
+- [**578**Star][10m] [mtivadar/windows10_ntfs_crash_dos](https://github.com/mtivadar/windows10_ntfs_crash_dos) PoC for a NTFS crash that I discovered, in various Windows versions
+- [**577**Star][1y] [C++] [qbdi/qbdi](https://github.com/QBDI/QBDI) A Dynamic Binary Instrumentation framework based on LLVM.
+- [**577**Star][12m] [HTML] [r00t-3xp10it/morpheus](https://github.com/r00t-3xp10it/morpheus) Morpheus - Automating Ettercap TCP/IP (MITM-hijacking Tool)
+- [**576**Star][24d] [PS] [threatexpress/red-team-scripts](https://github.com/threatexpress/red-team-scripts) A collection of Red Team focused tools, scripts, and notes
+- [**576**Star][3d] [Go] [mysteriumnetwork/node](https://github.com/mysteriumnetwork/node) Mysterium Node - VPN server and client for Mysterium Network
+- [**576**Star][3m] [Py] [jonluca/anubis](https://github.com/jonluca/anubis) Subdomain enumeration and information gathering tool
+- [**576**Star][2y] [Py] [dutchgraa/crackcoin](https://github.com/dutchgraa/crackcoin) Very basic blockchain-free cryptocurrency PoC in Python
+- [**575**Star][18d] [Go] [yggdrasil-network/yggdrasil-go](https://github.com/yggdrasil-network/yggdrasil-go) An experiment in scalable routing as an encrypted IPv6 overlay network
+- [**575**Star][2m] [Go] [shopify/kubeaudit](https://github.com/shopify/kubeaudit) kubeaudit helps you audit your Kubernetes clusters against common security controls
+- [**575**Star][2y] [JS] [shadowsocks-plus/shadowsocks-plus](https://github.com/shadowsocks-plus/shadowsocks-plus)
+- [**575**Star][9m] [Py] [fox-it/mitm6](https://github.com/fox-it/mitm6) exploits the default configuration of Windows to take over the default DNS server
+- [**574**Star][1m] [Py] [nekmo/amazon-dash](https://github.com/nekmo/amazon-dash) Hack your Amazon Dash to run what you want.
+- [**574**Star][6m] [PHP] [s3inlc/hashtopolis](https://github.com/s3inlc/hashtopolis) A Hashcat wrapper for distributed hashcracking
+- [**574**Star][5m] [Py] [nidem/kerberoast](https://github.com/nidem/kerberoast) a series of tools for attacking MS Kerberos implementations
+- [**574**Star][4m] [Py] [neo23x0/yargen](https://github.com/neo23x0/yargen) yarGen is a generator for YARA rules
+- [**574**Star][3y] [C] [iagox86/hash_extender](https://github.com/iagox86/hash_extender)
+- [**574**Star][4y] [C#] [elevenpaths/evilfoca](https://github.com/elevenpaths/evilfoca) Tool to analyze and test security in IPv4 and IPv6 data networks
+- [**574**Star][14d] [Perl] [bollwarm/sectoolset](https://github.com/bollwarm/sectoolset) The security tool(project) Set from github
+- [**573**Star][2y] [C++] [zneak/fcd](https://github.com/zneak/fcd) An optimizing decompiler
+- [**573**Star][4y] [C++] [microsoft/iediagnosticsadapter](https://github.com/microsoft/iediagnosticsadapter) IE Diagnostics Adapter is a standalone exe that enables tools to debug and diagnose IE11 using the Chrome remote debug protocol.
+- [**573**Star][3y] [C] [jgarzik/cpuminer](https://github.com/jgarzik/cpuminer) CPU miner for bitcoin
+- [**573**Star][3m] [Perl] [alisamtechnology/atscan](https://github.com/alisamtechnology/atscan) Advanced dork Search & Mass Exploit Scanner
+- [**572**Star][27d] [Py] [0kee-team/watchad](https://github.com/0kee-team/watchad) AD Security Intrusion Detection System
+- [**572**Star][2y] [Py] [nnamon/linux-exploitation-course](https://github.com/nnamon/linux-exploitation-course) A Course on Intermediate Level Linux Exploitation
+- [**572**Star][2y] [hack-with-github/awesome-security-gists](https://github.com/hack-with-github/awesome-security-gists) A collection of various GitHub gists for hackers, pentesters and security researchers
+- [**572**Star][2m] [HTML] [gwillem/magento-malware-scanner](https://github.com/gwillem/magento-malware-scanner) Scanner, signatures and the largest collection of Magento malware
+- [**572**Star][16d] [Java] [alexzaitsev/apk-dependency-graph](https://github.com/alexzaitsev/apk-dependency-graph) Android class dependency visualizer. This tool helps to visualize the current state of the project.
+- [**571**Star][10d] [Py] [nsacyber/walkoff](https://github.com/nsacyber/WALKOFF) A flexible, easy to use, automation framework allowing users to integrate their capabilities and devices to cut through the repetitive, tedious tasks slowing them down. #nsacyber
+- [**571**Star][11m] [Py] [ddevault/pass-rotate](https://github.com/ddevault/pass-rotate) A tool and library for rotating your password on online services
+- [**571**Star][4y] [Go] [fzipp/gocyclo](https://github.com/fzipp/gocyclo) Calculate cyclomatic complexities of functions in Go source code.
+- [**571**Star][3y] [HTML] [bitdust/wamacry](https://github.com/bitdust/wamacry) a fake WannaCry
+- [**570**Star][2m] [Py] [tarunkant/gopherus](https://github.com/tarunkant/gopherus) This tool generates gopher link for exploiting SSRF and gaining RCE in various servers
+- [**570**Star][23d] [C] [jhallen/joes-sandbox](https://github.com/jhallen/joes-sandbox)
+- [**570**Star][18d] [Py] [graphenex/graphenex](https://github.com/graphenex/graphenex) Automated System Hardening Framework
+- [**570**Star][2y] [PS] [411hall/jaws](https://github.com/411hall/jaws) JAWS - Just Another Windows (Enum) Script
+- [**569**Star][7m] [ObjC] [rpetrich/captainhook](https://github.com/rpetrich/captainhook) Common hooking/monkey patching headers for Objective-C on Mac OS X and iPhone OS. MIT licensed
+- [**569**Star][4y] [Py] [musalbas/heartbleed-masstest](https://github.com/musalbas/heartbleed-masstest) Multi-threaded tool for scanning many hosts for CVE-2014-0160.
+- [**569**Star][12d] [Java] [guardianproject/netcipher](https://github.com/guardianproject/netcipher) a library for Android that provides multiple means to improve network security in mobile applications
+- [**569**Star][5m] [Py] [codingo/vhostscan](https://github.com/codingo/vhostscan) A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.
+- [**568**Star][1y] [Solidity] [crytic/not-so-smart-contracts](https://github.com/crytic/not-so-smart-contracts) examples of common Ethereum smart contract vulnerabilities, including code from real smart contracts.
+- [**568**Star][5m] [C++] [sgan81/apfs-fuse](https://github.com/sgan81/apfs-fuse) FUSE driver for APFS (Apple File System)
+- [**568**Star][11m] [Py] [genetic-malware/ebowla](https://github.com/genetic-malware/ebowla) Framework for Making Environmental Keyed Payloads (NO LONGER SUPPORTED)
+- [**568**Star][2d] [HTML] [fate0/proxylist](https://github.com/fate0/proxylist) proxylist, generate by fate0/getproxy project in every 15 minute
+- [**568**Star][1y] [C] [externalist/exploit_playground](https://github.com/externalist/exploit_playground) Analysis of public exploits or my 1day exploits
+- [**567**Star][2y] [Visual Basic .NET] [mdsecactivebreach/cactustorch](https://github.com/mdsecactivebreach/cactustorch) Payload Generation for Adversary Simulations
+- [**567**Star][2y] [C] [matthijskooijman/arduino-lmic](https://github.com/matthijskooijman/arduino-lmic) LoraWAN-in-C library, adapted to run under the Arduino environment
+- [**567**Star][3m] [C++] [lowpowerlab/rfm69](https://github.com/lowpowerlab/rfm69) RFM69 library for RFM69W, RFM69HW, RFM69CW, RFM69HCW (semtech SX1231, SX1231H)
+- [**566**Star][11m] [JS] [raineorshine/solgraph](https://github.com/raineorshine/solgraph) Visualize Solidity control flow for smart contract security analysis.
+- [**566**Star][10m] [C] [justinsteven/dostackbufferoverflowgood](https://github.com/justinsteven/dostackbufferoverflowgood) The Presentation and Tutorial for Cross-Site Scripters Who Can't Stack Buffer Overflow Good and Want to Do Other Stuff Good Too
+- [**565**Star][3y] [HTML] [salesforce/vulnreport](https://github.com/salesforce/vulnreport) pentesting management and automation platform by Salesforce Product Security
+- [**565**Star][21d] [ObjC] [hdb-li/lldebugtool](https://github.com/hdb-li/lldebugtool) LLDebugTool is a debugging tool for developers and testers that can help you analyze and manipulate data in non-xcode situations.
+- [**565**Star][6m] [C#] [fremag/memoscope.net](https://github.com/fremag/memoscope.net) Dump and analyze .Net applications memory ( a gui for WinDbg and ClrMd )
+- [**565**Star][3y] [Py] [edwardz246003/iis_exploit](https://github.com/edwardz246003/iis_exploit) Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header beginning with "If: Port Knocking
+- [**510**Star][9d] [C++] [miki151/keeperrl](https://github.com/miki151/keeperrl) Source code of KeeperRL
+- [**509**Star][2y] [Py] [robindavid/lsb-steganography](https://github.com/robindavid/lsb-steganography) Python program to steganography files into images using the Least Significant Bit.
+- [**509**Star][3y] [Py] [reyammer/shellnoob](https://github.com/reyammer/shellnoob) A shellcode writing toolkit
+- [**509**Star][5m] [C] [nurupo/rootkit](https://github.com/nurupo/rootkit) Linux rootkit for Ubuntu 16.04 and 10.04 (Linux Kernels 4.4.0 and 2.6.32), both i386 and amd64
+- [**509**Star][12m] [Go] [mthbernardes/gtrs](https://github.com/mthbernardes/gtrs) uses Google Translator as a proxy to send arbitrary commands to an infected machine
+- [**508**Star][3m] [C++] [xmrig/xmrig-nvidia](https://github.com/xmrig/xmrig-nvidia) xmrig-nvidia: 门罗币挖矿代码 N卡版本
+- [**508**Star][2y] [Py] [sjvasquez/web-traffic-forecasting](https://github.com/sjvasquez/web-traffic-forecasting) Kaggle | Web Traffic Forecasting
+- [**508**Star][2y] [C] [samyk/opensesame](https://github.com/samyk/opensesame) OpenSesame attacks wireless garages and can open most fixed-code garages and gates in seconds using a Mattel toy
+- [**508**Star][1m] [Py] [platomav/meanalyzer](https://github.com/platomav/meanalyzer) Intel Engine Firmware Analysis Tool
+- [**508**Star][2m] [Groovy] [bryansharp/hibeaver](https://github.com/bryansharp/hibeaver) a gradle plugin for java byte code manipulation and AOP design by modifying project byte code during build of the package, or modifying byte code within Jar independently.
+- [**507**Star][11m] [Py] [idarlingteam/idarling](https://github.com/IDArlingTeam/IDArling) a collaborative reverse engineering plugin for IDA Pro and Hex-Rays
+- [**507**Star][5d] [Py] [mozillasecurity/funfuzz](https://github.com/mozillasecurity/funfuzz) A collection of fuzzers in a harness for testing the SpiderMonkey JavaScript engine.
+- [**507**Star][7d] [Py] [certtools/intelmq](https://github.com/certtools/intelmq) IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
+- [**506**Star][5m] [Py] [rabbitstack/fibratus](https://github.com/rabbitstack/fibratus) Tool for exploration and tracing of the Windows kernel
+- [**506**Star][4m] [PHP] [nettitude/xss_payloads](https://github.com/nettitude/xss_payloads) Exploitation for XSS
+- [**506**Star][7m] [C] [iovisor/ply](https://github.com/iovisor/ply) Dynamic Tracing in Linux
+- [**506**Star][5m] [PHP] [delight-im/php-auth](https://github.com/delight-im/php-auth) Authentication for PHP. Simple, lightweight and secure.
+- [**505**Star][5d] [Py] [theresafewconors/sooty](https://github.com/theresafewconors/sooty) The SOC Analysts all-in-one CLI tool to automate and speed up workflow.
+- [**505**Star][8m] [JS] [mindedsecurity/jstillery](https://github.com/mindedsecurity/jstillery) Advanced JavaScript Deobfuscation via Partial Evaluation
+- [**505**Star][4m] [Java] [happylishang/cacheemulatorchecker](https://github.com/happylishang/cacheemulatorchecker) Android模拟器检测,检测Android模拟器 ,获取相对真实的IMEI AndroidId 序列号 MAC地址等,作为DeviceID,应对防刷需求等
+- [**504**Star][2d] [C] [greenbone/openvas](https://github.com/greenbone/openvas) Open Vulnerability Assessment Scanner
+- [**504**Star][3y] [OCaml] [trustinsoft/tis-interpreter](https://github.com/trustinsoft/tis-interpreter) detects subtle bugs in C programs that may not have eye-visible effects when executing the same programs compiled in the traditional way.
+- [**504**Star][3m] [Go] [timothyye/godns](https://github.com/timothyye/godns) A dynamic DNS client tool, supports AliDNS, Cloudflare, Google Domains, DNSPod, HE.net & DuckDNS, written in Go.
+- [**504**Star][3m] [mutability/dump1090](https://github.com/mutability/dump1090) Dump1090 is a simple Mode S decoder for RTLSDR devices
+- [**503**Star][2y] [Java] [nsacyber/grassmarlin](https://github.com/nsacyber/GRASSMARLIN) Provides situational awareness of Industrial Control Systems (ICS) and Supervisory Control and Data Acquisition (SCADA) networks in support of network security assessments. #nsacyber
+- [**503**Star][12m] [C] [google/ktsan](https://github.com/google/ktsan) a fast data race detector for the Linux kernel
+- [**502**Star][2y] [C++] [andrivet/advobfuscator](https://github.com/andrivet/advobfuscator) Obfuscation library based on C++11/14 and metaprogramming
+- [**502**Star][2y] [JS] [kevva/wifi-password](https://github.com/kevva/wifi-password) Get current wifi password
+- [**502**Star][3m] [Go] [cyberark/summon](https://github.com/cyberark/summon) CLI that provides on-demand secrets access for common DevOps tools
+- [**502**Star][1m] [Py] [storyyeller/enjarify](https://github.com/storyyeller/enjarify) 将Dalvik字节码转为对应的Java字节码(google Fork版)
+- [**502**Star][9m] [C#] [lowleveldesign/wtrace](https://github.com/lowleveldesign/wtrace) Command line tracing tool for Windows, based on ETW.
+- [**502**Star][7m] [Py] [lijiejie/ds_store_exp](https://github.com/lijiejie/ds_store_exp) A .DS_Store file disclosure exploit. It parses .DS_Store file and downloads files recursively.
+- [**502**Star][2y] [Py] [chybeta/cmspoc](https://github.com/chybeta/cmspoc) A CMS Exploit Framework
+- [**502**Star][2m] [Py] [byt3bl33d3r/sprayingtoolkit](https://github.com/byt3bl33d3r/sprayingtoolkit) Scripts to make password spraying attacks against Lync/S4B & OWA a lot quicker, less painful and more efficient
+- [**501**Star][7d] [JS] [shadowsocks/shadowsocks-org](https://github.com/shadowsocks/shadowsocks-org)
+- [**501**Star][20d] [owasp/wstg](https://github.com/owasp/wstg) The OWASP Web Security Testing Guide includes a "best practice" penetration testing framework which users can implement in their own organizations and a "low level" penetration testing guide that describes techniques for testing most common web application and web service security issues.
+- [**501**Star][20d] [owasp/wstg](https://github.com/OWASP/wstg) The OWASP Web Security Testing Guide includes a "best practice" penetration testing framework which users can implement in their own organizations and a "low level" penetration testing guide that describes techniques for testing most common web application and web service security issues.
+- [**501**Star][22d] [Go] [genuinetools/amicontained](https://github.com/genuinetools/amicontained) Container introspection tool. Find out what container runtime is being used as well as features available.
+- [**500**Star][25d] [PS] [stefanscherer/packer-windows](https://github.com/stefanscherer/packer-windows) Windows Templates for Packer: Win10, Server 2016, 1709, 1803, 1809, 2019, 1903, Insider with Docker
+- [**500**Star][20d] [JS] [sindresorhus/public-ip](https://github.com/sindresorhus/public-ip) Get your public IP address - very fast!
+- [**500**Star][9m] [C] [nowsecure/fsmon](https://github.com/nowsecure/fsmon) monitor filesystem on iOS / OS X / Android / FirefoxOS / Linux
+- [**500**Star][3y] [C] [gaffe23/linux-inject](https://github.com/gaffe23/linux-inject) Tool for injecting a shared object into a Linux process
+- [**499**Star][2m] [JS] [acmesec/pocbox](https://github.com/Acmesec/PoCBox) 赏金猎人的脆弱性测试辅助平台
+- [**499**Star][3y] [C] [huawei/huawei_liteos_kernel](https://github.com/huawei/huawei_liteos_kernel)
+- [**499**Star][8d] [Swift] [google/science-journal-ios](https://github.com/google/science-journal-ios) Use the sensors in your mobile devices to perform science experiments. Science doesn’t just happen in the classroom or lab—tools like Science Journal let you see how the world works with just your phone.
+- [**499**Star][7y] [Java] [chainsdd/superuser](https://github.com/chainsdd/superuser) Android superuser permissions app (from Zinx)
+- [**499**Star][3m] [Py] [awslabs/aws-security-benchmark](https://github.com/awslabs/aws-security-benchmark) Open source demos, concept and guidance related to the AWS CIS Foundation framework.
+- [**498**Star][17d] [xrkk/awesome-ida](https://github.com/xrkk/awesome-ida) moved to:
+- [**498**Star][8m] [Py] [tp4a/teleport](https://github.com/tp4a/teleport) Teleport是一款简单易用的堡垒机系统。
+- [**498**Star][4y] [Assembly] [xoreaxeaxeax/repsych](https://github.com/xoreaxeaxeax/repsych) Psychological warfare in reverse engineering
+- [**498**Star][4y] [Py] [vector35/deprecated-binaryninja-python](https://github.com/vector35/deprecated-binaryninja-python) Deprecated Binary Ninja prototype written in Python
+- [**498**Star][9m] [C++] [kirschju/demovfuscator](https://github.com/kirschju/demovfuscator) A work-in-progress deobfuscator for movfuscated binaries
+- [**498**Star][2m] [govolution/betterdefaultpasslist](https://github.com/govolution/betterdefaultpasslist)
+- [**498**Star][7y] [C] [ghughes/fruitstrap](https://github.com/ghughes/fruitstrap) Install and debug iPhone apps from the command line, without using Xcode
+- [**498**Star][8m] [ernw/hardening](https://github.com/ernw/hardening) Repository of Hardening Guides
+- [**498**Star][2y] [PS] [danielbohannon/invoke-cradlecrafter](https://github.com/danielbohannon/invoke-cradlecrafter) PowerShell Remote Download Cradle Generator & Obfuscator
+- [**498**Star][3y] [C] [android-rooting-tools/android_run_root_shell](https://github.com/android-rooting-tools/android_run_root_shell)
+- [**497**Star][8m] [Shell] [stamusnetworks/selks](https://github.com/stamusnetworks/selks) A Suricata based IDS/IPS distro
+- [**497**Star][2y] [C++] [rbei-etas/busmaster](https://github.com/rbei-etas/busmaster) simulate, analyze and test data bus systems such as CAN.
+- [**497**Star][6m] [Visual Basic .NET] [nyan-x-cat/lime-rat](https://github.com/nyan-x-cat/lime-rat) LimeRAT | Simple, yet powerful remote administration tool for Windows (RAT)
+- [**497**Star][29d] [netbiosx/checklists](https://github.com/netbiosx/checklists) Pentesting checklists for various engagements
+- [**497**Star][2m] [C] [m0nad/diamorphine](https://github.com/m0nad/diamorphine) LKM rootkit for Linux Kernels 2.6.x/3.x/4.x (x86 and x86_64)
+- [**497**Star][7m] [ASP] [landgrey/webshell-detect-bypass](https://github.com/landgrey/webshell-detect-bypass) 绕过专业工具检测的Webshell研究文章和免杀的Webshell
+- [**496**Star][24d] [C#] [akiver/csgo-demos-manager](https://github.com/akiver/csgo-demos-manager)
+- [**496**Star][2m] [xairy/vmware-exploitation](https://github.com/xairy/vmware-exploitation) A bunch of links related to VMware escape exploits
+- [**496**Star][2y] [C] [triaquae/crazyeye](https://github.com/triaquae/crazyeye) OpenSource IT Automation Software
+- [**496**Star][2y] [JS] [rptec/squid-pac](https://github.com/rptec/squid-pac) 利用国外VPS搭建多协议代理服务,squid PAC代理服务器,25端口翻墙 ....墙已加高,https网站已失效,普通站点仍可代理..建议使用ssr替代
+- [**496**Star][24d] [C] [r0hi7/binexp](https://github.com/r0hi7/binexp) Linux Binary Exploitation
+- [**496**Star][1y] [PLpgSQL] [nologic/idaref](https://github.com/nologic/idaref) IDA Pro Instruction Reference Plugin
+- [**496**Star][1y] [XSLT] [honze-net/nmap-bootstrap-xsl](https://github.com/honze-net/nmap-bootstrap-xsl) A Nmap XSL implementation with Bootstrap.
+- [**496**Star][5d] [C] [anestisb/vdexextractor](https://github.com/anestisb/vdexextractor) Tool to decompile & extract Android Dex bytecode from Vdex files
+- [**495**Star][9m] [manoelt/50m_ctf_writeup](https://github.com/manoelt/50m_ctf_writeup) $50 Million CTF from Hackerone - Writeup
+- [**495**Star][7m] [Py] [initstring/dirty_sock](https://github.com/initstring/dirty_sock) Linux privilege escalation exploit via snapd (CVE-2019-7304)
+- [**495**Star][1y] [Py] [c0ny1/upload-fuzz-dic-builder](https://github.com/c0ny1/upload-fuzz-dic-builder) 上传漏洞fuzz字典生成脚本
+- [**494**Star][2y] [tengzhangchao/sec-box](https://github.com/tengzhangchao/sec-box) information security Tools Box (信息安全工具以及资源集合)
+- [**494**Star][2m] [PHP] [nzedb/nzedb](https://github.com/nzedb/nzedb) automatically scans usenet, similar to the way web spiders scan the internet
+- [**494**Star][2y] [Go] [evilsocket/sg1](https://github.com/evilsocket/sg1) A wanna be swiss army knife for data encryption, exfiltration and covert communication.
+- [**494**Star][5d] [Go] [cossacklabs/acra](https://github.com/cossacklabs/acra) Database security suite. Database proxy with field-level encryption, search through encrypted data, SQL injections prevention, intrusion detection, honeypots. Supports client-side and proxy-side ("transparent") encryption. SQL, NoSQL.
+- [**493**Star][4m] [PHP] [susers/writeups](https://github.com/susers/writeups) 国内各大CTF赛题及writeup整理
+- [**493**Star][2m] [Perl 6] [rezasp/joomscan](https://github.com/rezasp/joomscan) OWASP Joomla Vulnerability Scanner Project
+- [**493**Star][5y] [Py] [offensivepython/nscan](https://github.com/offensivepython/nscan) a fast Network scanner optimized for internet-wide scanning purposes and inspired by Masscan and Zmap.
+- [**493**Star][1m] [C] [hasherezade/demos](https://github.com/hasherezade/demos) Demos of various injection techniques found in malware
+- [**492**Star][2y] [sergey-pronin/awesome-vulnerability-research](https://github.com/sergey-pronin/Awesome-Vulnerability-Research)
+- [**492**Star][7m] [Py] [danigargu/heap-viewer](https://github.com/danigargu/heap-viewer) An IDA Pro plugin to examine the glibc heap, focused on exploit development
+- [**491**Star][9d] [nahamsec/resources-for-beginner-bug-bounty-hunters](https://github.com/nahamsec/resources-for-beginner-bug-bounty-hunters) A list of resources for those interested in getting started in bug bounties
+- [**491**Star][11m] [C] [yangyangwithgnu/bypass_disablefunc_via_ld_preload](https://github.com/yangyangwithgnu/bypass_disablefunc_via_ld_preload) bypass disable_functions via LD_PRELOA (no need /usr/sbin/sendmail)
+- [**491**Star][15d] [Py] [wetw0rk/sickle](https://github.com/wetw0rk/sickle) Payload development tool
+- [**491**Star][20d] [Py] [scottbez1/splitflap](https://github.com/scottbez1/splitflap) DIY split-flap display
+- [**491**Star][2y] [PS] [powershellmafia/cimsweep](https://github.com/powershellmafia/cimsweep) CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.
+- [**491**Star][4m] [Py] [maddiestone/idapythonembeddedtoolkit](https://github.com/maddiestone/idapythonembeddedtoolkit) a set of script to automate many of the steps associated with statically analyzing, or reverse engineering, the firmware of embedded devices in IDA Pro.
+- [**491**Star][14d] [JS] [iddoeldor/frida-snippets](https://github.com/iddoeldor/frida-snippets) Hand-crafted Frida examples
+- [**490**Star][16d] [Py] [typeerror/domained](https://github.com/TypeError/domained) Multi Tool Subdomain Enumeration
+- [**490**Star][2y] [C++] [turbo/kpti-poc-collection](https://github.com/turbo/kpti-poc-collection) Meltdown/Spectre PoC src collection.
+- [**490**Star][27d] [Shell] [trimstray/multitor](https://github.com/trimstray/multitor) Shell脚本, 创建多个Tor实例, 并使用HAProxy实现负载均衡
+- [**490**Star][2m] [Ruby] [kaich/codeobscure](https://github.com/kaich/codeobscure) code obscure for object-c project. 方便强大的OC工程代码自动混淆工具
+- [**489**Star][6y] [C] [bitly/simplehttp](https://github.com/bitly/simplehttp) a family of libraries and daemons for building scalable web infrastructure
+- [**489**Star][3m] [Py] [yanxiu0614/subdomain3](https://github.com/yanxiu0614/subdomain3) A new generation of tool for discovering subdomains( ip , cdn and so on)
+- [**489**Star][26d] [C] [tihmstar/tsschecker](https://github.com/tihmstar/tsschecker) a powerfull tool to check tss signing status of various devices and firmwares
+- [**489**Star][3y] [PS] [secabstraction/powercat](https://github.com/secabstraction/powercat) A PowerShell TCP/IP swiss army knife that works with Netcat & Ncat
+- [**489**Star][1y] [C] [mikeryan/crackle](https://github.com/mikeryan/crackle) Crack and decrypt BLE encryption
+- [**489**Star][1y] [Shell] [leonteale/pentestpackage](https://github.com/leonteale/pentestpackage) a package of Pentest scripts I have made or commonly use
+- [**489**Star][15d] [C] [jiayy/android_vuln_poc-exp](https://github.com/jiayy/android_vuln_poc-exp) This project contains pocs and exploits for vulneribilities I found (mostly)
+- [**489**Star][10m] [Py] [insecurityofthings/jackit](https://github.com/insecurityofthings/jackit) Exploit Code for Mousejack
+- [**489**Star][2y] [b-mueller/android_app_security_checklist](https://github.com/b-mueller/android_app_security_checklist) Android App Security Checklist
+- [**489**Star][10d] [Go] [arminc/clair-scanner](https://github.com/arminc/clair-scanner) Docker containers vulnerability scan
+- [**489**Star][4d] [Py] [alexhude/uemu](https://github.com/alexhude/uemu) Tiny cute emulator plugin for IDA based on unicorn.
+- [**488**Star][2d] [Py] [trailofbits/deepstate](https://github.com/trailofbits/deepstate) A unit test-like interface for fuzzing and symbolic execution
+- [**488**Star][5y] [Py] [infodox/python-pty-shells](https://github.com/infodox/python-pty-shells) Python PTY backdoors - full PTY or nothing!
+- [**488**Star][2m] [Go] [gen2brain/cam2ip](https://github.com/gen2brain/cam2ip) Turn any webcam into an IP camera
+- [**488**Star][1y] [PS] [dafthack/domainpasswordspray](https://github.com/dafthack/domainpasswordspray) DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!
+- [**488**Star][1y] [Py] [attify/firmware-analysis-toolkit](https://github.com/attify/firmware-analysis-toolkit) Toolkit to emulate firmware and analyse it for security vulnerabilities
+- [**487**Star][10m] [Ruby] [sidaf/homebrew-pentest](https://github.com/sidaf/homebrew-pentest) a Tap containing some Homebrew formulas consisting of penetration testing related tools.
+- [**487**Star][7d] [Go] [psiphon-labs/psiphon-tunnel-core](https://github.com/psiphon-labs/psiphon-tunnel-core) Psiphon client and server components implemented in Go. These components provides core tunnel functionality, handling all aspects of evading blocking and relaying traffic through Psiphon.
+- [**487**Star][1y] [C] [nfc-tools/mfcuk](https://github.com/nfc-tools/mfcuk) MiFare Classic Universal toolKit (MFCUK)
+- [**487**Star][4y] [JS] [mandatoryprogrammer/sonar.js](https://github.com/mandatoryprogrammer/sonar.js) 通过 WebRTC IP 枚举,结合 WebSockets 和外部资源指纹,来识别内网主机的漏洞并发动攻击的框架
+- [**487**Star][18d] [Rust] [kpcyrd/sn0int](https://github.com/kpcyrd/sn0int) Semi-automatic OSINT framework and package manager
+- [**487**Star][13d] [Py] [ctxis/cape](https://github.com/ctxis/cape) Malware Configuration And Payload Extraction
+- [**487**Star][6m] [PHP] [cfreal/exploits](https://github.com/cfreal/exploits) Some of my exploits.
+- [**486**Star][5m] [PHP] [wonderkun/ctf_web](https://github.com/wonderkun/ctf_web) a project aim to collect CTF web practices .
+- [**486**Star][1y] [Py] [shawarkhanethicalhacker/brutexss](https://github.com/shawarkhanethicalhacker/brutexss) BruteXSS - Cross-Site Scripting Bruteforcer
+- [**486**Star][2y] [Py] [khalilbijjou/wafninja](https://github.com/khalilbijjou/wafninja) WAFNinja is a tool which contains two functions to attack Web Application Firewalls.
+- [**486**Star][11m] [Go] [evanmiller/hecate](https://github.com/evanmiller/hecate) The Hex Editor From Hell
+- [**485**Star][2m] [Py] [fcavallarin/htcap](https://github.com/fcavallarin/htcap) htcap is a web application scanner able to crawl single page application (SPA) recursively by intercepting ajax calls and DOM changes.
+- [**485**Star][10m] [C] [theofficialflow/nonpdrm](https://github.com/theofficialflow/nonpdrm) A plugin that allows you to bypass DRM protection on any PS Vita content
+- [**485**Star][1m] [radareorg/awesome-radare2](https://github.com/radareorg/awesome-radare2) A curated list of awesome projects, articles and the other materials powered by Radare2
+- [**485**Star][10d] [C] [projectacrn/acrn-hypervisor](https://github.com/projectacrn/acrn-hypervisor) Project ACRN hypervisor
+- [**485**Star][1y] [lmy375/awesome-vmp](https://github.com/lmy375/awesome-vmp) VM analysis materials
+- [**485**Star][1m] [hugetiny/awesome-vpn](https://github.com/hugetiny/awesome-vpn) A curated list of awesome free VPNs and proxies.免费的代理,科学上网,翻墙,梯子大集合
+- [**484**Star][2y] [Py] [zdresearch/owasp-zsc](https://github.com/zdresearch/OWASP-ZSC) Shellcode/Obfuscate Code Generator
+- [**484**Star][2y] [Py] [xyuanmu/xx-mini](https://github.com/xyuanmu/xx-mini) XX-Net 精简版
+- [**484**Star][8d] [Py] [netflix-skunkworks/diffy](https://github.com/netflix-skunkworks/diffy) Diffy is a triage tool used during cloud-centric security incidents, to help digital forensics and incident response (DFIR) teams quickly identify suspicious hosts on which to focus their response.
+- [**484**Star][2m] [Go] [gorilla/csrf](https://github.com/gorilla/csrf) provides CSRF prevention middleware for Go web applications & services
+- [**483**Star][15d] [C++] [ce-programming/cemu](https://github.com/CE-Programming/CEmu) Third-party TI-84 Plus CE / TI-83 Premium CE emulator, focused on developer features
+- [**483**Star][3y] [Py] [erevus-cn/pocscan](https://github.com/erevus-cn/pocscan) Will to be a niubility scan-framework
+- [**483**Star][1y] [JS] [emilbayes/secure-password](https://github.com/emilbayes/secure-password) Making Password storage safer for all
+- [**483**Star][2y] [Py] [armissecurity/blueborne](https://github.com/armissecurity/blueborne) PoC scripts demonstrating the BlueBorne vulnerabilities
+- [**482**Star][28d] [PHP] [zhuzhichao/ip-location-zh](https://github.com/zhuzhichao/ip-location-zh) 获取 IP 地址的真实地理位置
+- [**482**Star][9m] [Py] [r35tart/rw_password](https://github.com/r35tart/rw_password) 此项目用来提取收集以往泄露的密码中符合条件的强弱密码
+- [**482**Star][3m] [C] [microsoft/symcrypt](https://github.com/microsoft/symcrypt) Cryptographic library
+- [**482**Star][7d] [Py] [iti/ics-security-tools](https://github.com/iti/ics-security-tools) Tools, tips, tricks, and more for exploring ICS Security.
+- [**482**Star][2y] [PS] [gofetchad/gofetch](https://github.com/gofetchad/gofetch) automatically exercise an attack plan generated by the BloodHound application.
+- [**482**Star][11m] [Shell] [craigz28/firmwalker](https://github.com/craigz28/firmwalker) A simple bash script for searching the extracted or mounted firmware file system.
+- [**482**Star][1y] [Java] [continuumsecurity/bdd-security](https://github.com/continuumsecurity/bdd-security) a security testing framework that uses Behaviour Driven Development concepts to create self-verifying security specifications.
+- [**481**Star][1m] [Py] [yassineaboukir/sublert](https://github.com/yassineaboukir/sublert) Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific organizations and issued TLS/SSL certificate.
+- [**481**Star][2y] [C] [realjtg/meltdown](https://github.com/realjtg/meltdown) Meltdown PoC for reading passwords from Google Chrome.
+- [**481**Star][8m] [C] [nongiach/sudo_inject](https://github.com/nongiach/sudo_inject) [Linux] Two Privilege Escalation techniques abusing sudo token
+- [**481**Star][4m] [C] [limpkin/mooltipass](https://github.com/limpkin/mooltipass) Github repository dedicated to the mooltipass project
+- [**480**Star][2m] [Java] [tornaco/x-apm](https://github.com/tornaco/x-apm) 应用管理 Xposed
+- [**480**Star][3y] [Py] [lgandx/poc](https://github.com/lgandx/poc) Various PoCs
+- [**480**Star][2d] [Java] [joychou93/java-sec-code](https://github.com/joychou93/java-sec-code) Java Web Common Vulnerabilities and Security Code.
+- [**480**Star][1y] [Swift] [icepa/icepa](https://github.com/icepa/icepa) iOS system-wide VPN based Tor client
+- [**480**Star][2m] [C#] [chmorgan/sharppcap](https://github.com/chmorgan/sharppcap) Official repository - Fully managed, cross platform (Windows, Mac, Linux) .NET library for capturing packets
+- [**480**Star][4d] [Batchfile] [chef-koch/regtweaks](https://github.com/chef-koch/regtweaks) Windows Registry Tweaks (Win 7 - Win 10)
+- [**479**Star][3y] [JS] [vincentchanx/shadowsocks-over-websocket](https://github.com/vincentchanx/shadowsocks-over-websocket) 免费使用 Heroku 部署 shadowsocks
+- [**479**Star][8m] [Java] [chengdedeng/waf](https://github.com/chengdedeng/waf)
+- [**479**Star][2y] [Objective-C++] [bishopfox/bfinject](https://github.com/bishopfox/bfinject) Dylib injection for iOS 11.0 - 11.1.2 with LiberiOS and Electra jailbreaks
+- [**479**Star][3m] [Py] [bashfuscator/bashfuscator](https://github.com/bashfuscator/bashfuscator) A fully configurable and extendable Bash obfuscation framework. This tool is intended to help both red team and blue team.
+- [**479**Star][1m] [Py] [aoii103/darknet_chinesetrading](https://github.com/aoii103/darknet_chinesetrading) Darknet Chinese Market Trading Crawl and Monitor
+- [**478**Star][2m] [C++] [opengenus/quark](https://github.com/opengenus/quark) Stay happy while offline | World's first offline search engine.
+- [**478**Star][8m] [Dockerfile] [mikesplain/openvas-docker](https://github.com/mikesplain/openvas-docker) A Docker container for Openvas
+- [**478**Star][1y] [JS] [koto/xsschef](https://github.com/koto/xsschef) Chrome extension Exploitation Framework
+- [**477**Star][1y] [C++] [tandasat/ddimon](https://github.com/tandasat/ddimon) Monitoring and controlling kernel API calls with stealth hook using EPT
+- [**477**Star][2y] [Py] [pjlantz/droidbox](https://github.com/pjlantz/droidbox) Dynamic analysis of Android apps
+- [**477**Star][5m] [JS] [ehrishirajsharma/swiftnessx](https://github.com/ehrishirajsharma/swiftnessx) A cross-platform note-taking & target-tracking app for penetration testers.
+- [**476**Star][1y] [Go] [yinqiwen/gsnova](https://github.com/yinqiwen/gsnova) Private proxy solution & network troubleshooting tool.
+- [**476**Star][4m] [Py] [xillwillx/skiptracer](https://github.com/xillwillx/skiptracer) OSINT python webscaping framework
+- [**476**Star][1m] [xiangpasama/jdsrc-small-classroom](https://github.com/xiangpasama/jdsrc-small-classroom) 京东SRC小课堂系列文章
+- [**476**Star][1m] [Java] [wagiro/burpbounty](https://github.com/wagiro/burpbounty) Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through a very intuitive graphical interface.
+- [**476**Star][3y] [Lua] [viruscamp/luadec](https://github.com/viruscamp/luadec) Lua Decompiler for lua 5.1 , 5.2 and 5.3
+- [**476**Star][1y] [ksluckow/awesome-symbolic-execution](https://github.com/ksluckow/awesome-symbolic-execution) A curated list of awesome symbolic execution resources including essential research papers, lectures, videos, and tools.
+- [**475**Star][5d] [Py] [hunters-forge/mordor](https://github.com/hunters-forge/mordor) Re-play Adversarial Techniques
+- [**475**Star][6y] [Ruby] [zed-0xff/zsteg](https://github.com/zed-0xff/zsteg) detect stegano-hidden data in PNG & BMP
+- [**475**Star][2y] [C#] [tlaster/yourav](https://github.com/tlaster/yourav) 宇宙级最轻量杀毒软件
+- [**475**Star][2y] [Ruby] [ring0lab/catphish](https://github.com/ring0lab/catphish) 用于网络钓鱼及企业间谍活动。Ruby编写
+- [**475**Star][1y] [C] [nanshihui/scan-t](https://github.com/nanshihui/scan-t) a new crawler based on python with more function including Network fingerprint search
+- [**475**Star][2y] [C++] [jessek/hashdeep](https://github.com/jessek/hashdeep) md5deep, a set of cross-platform tools to compute hashes, or message digests, for any number of files while optionally recursively digging through the directory structure
+- [**474**Star][3y] [CoffeeScript] [rastapasta/pokemon-go-mitm](https://github.com/rastapasta/pokemon-go-mitm)
+- [**474**Star][3m] [Shell] [staz0t/hashcatch](https://github.com/staz0t/hashcatch) Capture handshakes of nearby WiFi networks automatically
+- [**474**Star][3y] [Py] [4w4k3/beelogger](https://github.com/4w4k3/beelogger) Generate Gmail Emailing Keyloggers to Windows.
+- [**473**Star][2m] [C#] [rasta-mouse/watson](https://github.com/rasta-mouse/watson) Enumerate missing KBs and suggest exploits for useful Privilege Escalation vulnerabilities
+- [**473**Star][1m] [JS] [lyxhh/lxhtoolhttpdecrypt](https://github.com/lyxhh/lxhtoolhttpdecrypt) Simple Android/iOS protocol analysis and utilization tool
+- [**473**Star][2y] [Ruby] [0xsauby/yasuo](https://github.com/0xsauby/yasuo) ruby 脚本,扫描网络中存在漏洞的第三方 web app
+- [**472**Star][9d] [C] [tklengyel/drakvuf](https://github.com/tklengyel/drakvuf) DRAKVUF Black-box Binary Analysis
+- [**472**Star][26d] [pixelcyber/thor](https://github.com/pixelcyber/thor) HTTP Sniffer/Capture on iOS for Network Debug & Inspect.
+- [**472**Star][8m] [Java] [alpha1e0/pentestdb](https://github.com/alpha1e0/pentestdb) web pentest database
+- [**471**Star][12m] [itrump/ssfree](https://github.com/itrump/ssfree) provide shadowsocks free tutorial and free account
+- [**471**Star][1m] [TS] [mitre-attack/attack-navigator](https://github.com/mitre-attack/attack-navigator) Web app that provides basic navigation and annotation of ATT&CK matrices
+- [**471**Star][6m] [palantir/osquery-configuration](https://github.com/palantir/osquery-configuration) 使用 osquery 做事件检测和响应
+- [**471**Star][3m] [Py] [olafhartong/threathunting](https://github.com/olafhartong/threathunting) A Splunk app mapped to MITRE ATT&CK to guide your threat hunts
+- [**471**Star][9m] [Py] [aker-gateway/aker](https://github.com/aker-gateway/aker) SSH bastion/jump host/jumpserver
+- [**470**Star][11m] [Py] [wapiflapi/villoc](https://github.com/wapiflapi/villoc) Visualization of heap operations.
+- [**470**Star][8m] [C++] [glmcdona/process-dump](https://github.com/glmcdona/process-dump) Windows tool for dumping malware PE files from memory back to disk for analysis.
+- [**470**Star][5d] [JS] [codemanki/cloudscraper](https://github.com/codemanki/cloudscraper) Node.js library to bypass cloudflare's anti-ddos page
+- [**470**Star][1m] [Py] [bit4woo/teemo](https://github.com/bit4woo/teemo) A Domain Name & Email Address Collection Tool
+- [**469**Star][9d] [Py] [fportantier/habu](https://github.com/fportantier/habu) Hacking Toolkit
+- [**469**Star][5m] [Solidity] [provable-things/ethereum-api](https://github.com/provable-things/ethereum-api) Provable API for Ethereum smart contracts
+- [**469**Star][2m] [Go] [square/certigo](https://github.com/square/certigo) A utility to examine and validate certificates in a variety of formats
+- [**469**Star][2m] [Py] [netzob/netzob](https://github.com/netzob/netzob) Protocol Reverse Engineering, Modeling and Fuzzing
+- [**469**Star][3y] [C] [lucyoa/kernel-exploits](https://github.com/lucyoa/kernel-exploits)
+- [**469**Star][11m] [PHP] [l3m0n/pentest_tools](https://github.com/l3m0n/pentest_tools) collection of pentest tools
+- [**469**Star][2d] [C] [jayddee/cpuminer-opt](https://github.com/jayddee/cpuminer-opt) Optimized multi algo CPU miner
+- [**469**Star][1y] [hack-with-github/powerful-plugins](https://github.com/hack-with-github/powerful-plugins) Powerful plugins and add-ons for hackers
+- [**469**Star][3y] [Shell] [g0tmi1k/os-scripts](https://github.com/g0tmi1k/os-scripts) Personal Collection of Operating Systems Scripts
+- [**469**Star][8m] [C++] [everettjf/machoexplorer](https://github.com/everettjf/machoexplorer) [WIP] Explore MachO File on macOS and Windows
+- [**469**Star][4y] [Ruby] [crossref/pdfextract](https://github.com/crossref/pdfextract) MOVED TO
+- [**469**Star][7d] [Go] [arvanaghi/checkplease](https://github.com/arvanaghi/checkplease) Sandbox evasion modules written in PowerShell, Python, Go, Ruby, C, C#, Perl, and Rust.
+- [**469**Star][4d] [Py] [aidaho12/haproxy-wi](https://github.com/aidaho12/haproxy-wi) Web interface for managing Haproxy servers
+- [**469**Star][2y] [adi0x90/attifyos](https://github.com/adi0x90/attifyos) IoT 安全评估/渗透测试工具包
+- [**468**Star][10d] [C] [skeeto/enchive](https://github.com/skeeto/enchive) Encrypted personal archives
+- [**468**Star][2y] [Smali] [sensepost/kwetza](https://github.com/sensepost/kwetza) Python 脚本,将 Meterpreter payload 注入 Andorid App
+- [**468**Star][9d] [Py] [fportantier/habu](https://github.com/fportantier/habu) Hacking Toolkit to teach (and learn) some concepts about Python and Network Hacking.
+- [**468**Star][4y] [JS] [philbooth/complexity-report](https://github.com/philbooth/complexity-report) [UNMAINTAINED] Software complexity analysis for JavaScript projects
+- [**468**Star][2d] [C] [libreswan/libreswan](https://github.com/libreswan/libreswan) an Internet Key Exchange (IKE) implementation for Linux.
+- [**468**Star][2y] [C] [leurak/memz](https://github.com/leurak/memz) A trojan made for Danooct1's User Made Malware Series.
+- [**468**Star][7y] [Shell] [kosborn/p2p-adb](https://github.com/kosborn/p2p-adb) Phone to Phone Android Debug Bridge - A project for "debugging" phones... from other phones.
+- [**468**Star][4y] [Py] [dxa4481/wpa2-halfhandshake-crack](https://github.com/dxa4481/wpa2-halfhandshake-crack) This is a POC to show it is possible to capture enough of a handshake with a user from a fake AP to crack a WPA2 network without knowing the passphrase of the actual AP.
+- [**468**Star][2m] [Py] [coleifer/micawber](https://github.com/coleifer/micawber) a small library for extracting rich content from urls
+- [**467**Star][4y] [Py] [einstein-/decompiler](https://github.com/EiNSTeiN-/decompiler) A decompiler with multiple backend support, written in Python. Works with IDA and Capstone.
+- [**467**Star][3m] [Java] [strazzere/anti-emulator](https://github.com/strazzere/anti-emulator) Android Anti-Emulator
+- [**467**Star][1y] [C] [laruence/taint](https://github.com/laruence/taint) Taint is a PHP extension, used for detecting XSS codes
+- [**467**Star][5y] [Perl] [jbittel/httpry](https://github.com/jbittel/httpry) HTTP logging and information retrieval tool
+- [**466**Star][3m] [miscreant/meta](https://github.com/miscreant/meta) 具备错误使用抗性的(Misuse-resistant )对称加密库,支持 AES-SIV (RFC5297) 和 CHAIN/STREAM
+- [**466**Star][21d] [Py] [k8gege/k8cscan](https://github.com/k8gege/k8cscan) K8Cscan大型内网渗透自定义插件化扫描神器,包含信息收集、网络资产、漏洞扫描、密码爆破、漏洞利用,程序采用多线程批量扫描大型内网多个IP段C段主机,目前插件包含: C段旁注扫描、子域名扫描、Ftp密码爆破、Mysql密码爆破、Oracle密码爆破、MSSQL密码爆破、Windows/Linux系统密码爆破、存活主机扫描、端口扫描、Web信息探测、操作系统版本探测、Cisco思科设备扫描等,支持调用任意外部程序或脚本,支持Cobalt Strike联动
+- [**466**Star][3m] [PS] [evotecit/pswinreporting](https://github.com/evotecit/pswinreporting) This PowerShell Module has multiple functionalities, but one of the signature features of this module is the ability to parse Security logs on Domain Controllers providing easy to use access to AD Events.
+- [**466**Star][6d] [C] [bootleg/ret-sync](https://github.com/bootleg/ret-sync) a set of plugins that help to synchronize a debugging session (WinDbg/GDB/LLDB/OllyDbg/OllyDbg2/x64dbg) with IDA/Ghidra disassemblers
+ - [GDB插件](https://github.com/bootleg/ret-sync/tree/master/ext_gdb)
+ - [Ghidra插件](https://github.com/bootleg/ret-sync/tree/master/ext_ghidra)
+ - [IDA插件](https://github.com/bootleg/ret-sync/tree/master/ext_ida)
+ - [LLDB](https://github.com/bootleg/ret-sync/tree/master/ext_lldb)
+ - [OD](https://github.com/bootleg/ret-sync/tree/master/ext_olly1)
+ - [OD2](https://github.com/bootleg/ret-sync/tree/master/ext_olly2)
+ - [WinDgb](https://github.com/bootleg/ret-sync/tree/master/ext_windbg/sync)
+ - [x64dbg](https://github.com/bootleg/ret-sync/tree/master/ext_x64dbg)
+- [**466**Star][26d] [C#] [akaion/bleak](https://github.com/akaion/bleak) A Windows native DLL injection library that supports several methods of injection.
+- [**465**Star][3y] [Py] [trustedsec/meterssh](https://github.com/trustedsec/meterssh) MeterSSH is a way to take shellcode, inject it into memory then tunnel whatever port you want to over SSH to mask any type of communications as a normal SSH connection. The way it works is by injecting shellcode into memory, then wrapping a port spawned (meterpeter in this case) by the shellcode over SSH back to the attackers machine. Then conne…
+- [**465**Star][1y] [Py] [ptresearch/unme11](https://github.com/ptresearch/unme11) Intel ME 11.x Firmware Images Unpacker
+- [**465**Star][1m] [LLVM] [jonathansalwan/tigress_protection](https://github.com/jonathansalwan/tigress_protection) Playing with the Tigress binary protection. Break some of its protections and solve some of its challenges. Automatic deobfuscation using symbolic execution, taint analysis and LLVM.
+- [**465**Star][1m] [Go] [gen0cide/gscript](https://github.com/gen0cide/gscript) framework to rapidly implement custom droppers for all three major operating systems
+- [**464**Star][26d] [JS] [siujoeng-lau/workers-proxy](https://github.com/siujoeng-lau/workers-proxy) Lightweight reverse proxy implemented with Cloudflare Workers.
+- [**464**Star][4m] [Py] [viralmaniar/powershell-rat](https://github.com/viralmaniar/powershell-rat) Python based backdoor that uses Gmail to exfiltrate data through attachment. This RAT will help during red team engagements to backdoor any Windows machines. It tracks the user activity using screen capture and sends it to an attacker as an e-mail attachment.
+- [**464**Star][1m] [Py] [stamparm/dsvw](https://github.com/stamparm/dsvw) Damn Small Vulnerable Web
+- [**464**Star][2y] [C] [shinyquagsire23/switch-fightstick](https://github.com/shinyquagsire23/switch-fightstick) Proof-of-Concept LUFA Project for the Nintendo Switch. Pretends to be a HORI Pokken Pad which only prints Splatoon 2 Posts
+- [**464**Star][8m] [Java] [owasp/owasp-webscarab](https://github.com/owasp/owasp-webscarab) OWASP WebScarab
+- [**464**Star][9d] [C] [irontec/sngrep](https://github.com/irontec/sngrep) Ncurses SIP Messages flow viewer
+- [**464**Star][2y] [Py] [firstlookmedia/pdf-redact-tools](https://github.com/firstlookmedia/pdf-redact-tools) a set of tools to help with securely redacting and stripping metadata from documents before publishing
+- [**464**Star][6y] [Py] [bramcohen/dissidentx](https://github.com/bramcohen/dissidentx) Bram's steganographic framework
+- [**463**Star][3y] [remath/literature_review](https://github.com/remath/literature_review) Survey of program analysis research with a focus on machine code
+- [**463**Star][5y] [pyrotek3/powershell-ad-recon](https://github.com/pyrotek3/powershell-ad-recon) PowerShell Scripts I find useful
+- [**463**Star][8d] [C++] [mikesart/gpuvis](https://github.com/mikesart/gpuvis) GPU Trace Visualizer
+- [**463**Star][6y] [C] [martona/mhook](https://github.com/martona/mhook) A Windows API hooking library
+- [**463**Star][2y] [Py] [coalfire-research/java-deserialization-exploits](https://github.com/coalfire-research/java-deserialization-exploits) A collection of curated Java Deserialization Exploits
+- [**463**Star][2y] [C++] [aimtuxofficial/aimtux](https://github.com/aimtuxofficial/aimtux) A large Linux csgo cheat/hack
+- [**462**Star][3m] [C++] [fsecurelabs/c3](https://github.com/FSecureLABS/C3) A framework for rapid prototyping of custom C2 channels, while still providing integration with existing offensive toolkits.
+- [**462**Star][17d] [Rust] [rust-fuzz/cargo-fuzz](https://github.com/rust-fuzz/cargo-fuzz) Command line helpers for fuzzing
+- [**462**Star][7m] [C#] [microsoft/dbgshell](https://github.com/microsoft/dbgshell) A PowerShell front-end for the Windows debugger engine.
+- [**462**Star][10d] [Java] [lennartkoopmann/nzyme](https://github.com/lennartkoopmann/nzyme) Nzyme collects 802.11 management frames directly from the air and sends them to a Graylog (Open Source log management) setup for WiFi IDS, monitoring, and incident response. It only needs a JVM and a WiFi adapter that supports monitor mode.
+- [**462**Star][24d] [C] [jkornev/hidden](https://github.com/jkornev/hidden) Windows driver with usermode interface which can hide objects of file-system and registry, protect processes and etc
+- [**462**Star][7m] [Shell] [jgmdev/ddos-deflate](https://github.com/jgmdev/ddos-deflate) Fork of DDoS Deflate with fixes, improvements and new features.
+- [**462**Star][2y] [Go] [egebalci/hercules](https://github.com/egebalci/hercules) HERCULES is a special payload generator that can bypass antivirus softwares.
+- [**462**Star][2y] [Py] [dchrastil/scrapedin](https://github.com/dchrastil/scrapedin) A tool to scrape LinkedIn without API restrictions for data reconnaissance
+- [**461**Star][1y] [Py] [mehulj94/radium](https://github.com/mehulj94/Radium) Python keylogger with multiple features.
+- [**461**Star][6m] [Shell] [vincentcox/bypass-firewalls-by-dns-history](https://github.com/vincentcox/bypass-firewalls-by-dns-history) Firewall bypass script based on DNS history records. This script will search for DNS A history records and check if the server replies for that domain. Handy for bugbounty hunters.
+- [**461**Star][8m] [Py] [ustayready/fireprox](https://github.com/ustayready/fireprox) AWS API Gateway management tool for creating on the fly HTTP pass-through proxies for unique IP rotation
+- [**461**Star][5m] [C] [phoenhex/files](https://github.com/phoenhex/files) Repository for exploits/POCs/presentation of the phoenhex team
+- [**461**Star][15d] [gradiuscypher/infosec_getting_started](https://github.com/gradiuscypher/infosec_getting_started) A collection of resources/documentation/links/etc to help people learn about Infosec and break into the field.
+- [**461**Star][4m] [C++] [emoon/prodbg](https://github.com/emoon/prodbg) Debugging the way it's meant to be done
+- [**461**Star][16d] [Java] [dsheirer/sdrtrunk](https://github.com/dsheirer/sdrtrunk) A cross-platform java application for decoding, monitoring, recording and streaming trunked mobile and related radio protocols using Software Defined Radios (SDR). Website:
+- [**461**Star][2y] [Py] [0xdeadbeefjerky/office-dde-payloads](https://github.com/0xdeadbeefjerky/office-dde-payloads) Collection of scripts and templates to generate Office documents embedded with the DDE, macro-less command execution technique.
+- [**460**Star][2y] [Kotlin] [v2ray-android/actinium](https://github.com/v2ray-android/actinium) A 3rd party V2Ray client for Android
+- [**460**Star][18d] [Py] [shellphish/rex](https://github.com/shellphish/rex) Shellphish's automated exploitation engine, originally created for the Cyber Grand Challenge.
+- [**460**Star][2m] [Py] [savio-code/fern-wifi-cracker](https://github.com/savio-code/fern-wifi-cracker) Automatically exported from code.google.com/p/fern-wifi-cracker
+- [**460**Star][10m] [Go] [netxfly/x-crack](https://github.com/netxfly/x-crack) Weak password scanner, Support: FTP/SSH/SNMP/MSSQL/MYSQL/PostGreSQL/REDIS/ElasticSearch/MONGODB
+- [**460**Star][4m] [C++] [comaeio/opcde](https://github.com/comaeio/opcde) OPCDE Cybersecurity Conference Materials
+- [**460**Star][9m] [C] [cofyc/dnscrypt-wrapper](https://github.com/cofyc/dnscrypt-wrapper) This is dnscrypt wrapper (server-side dnscrypt proxy), which helps to add dnscrypt support to any name resolver.
+- [**459**Star][29d] [Shell] [wireghoul/graudit](https://github.com/wireghoul/graudit) a simple script and signature sets that allows you to find potential security flaws in source code using the GNU utility grep
+- [**459**Star][6m] [Py] [threezh1/jsfinder](https://github.com/threezh1/jsfinder) JSFinder is a tool for quickly extracting URLs and subdomains from JS files on a website.
+- [**459**Star][1y] [C] [ntruchsess/arduino_uip](https://github.com/ntruchsess/arduino_uip) A plugin-replacement of the stock Arduino Ethernet library for ENC28J60 shields and breakout boards. Full support for persistent (streaming) TCP-connections and UDP (Client and Server each), ARP, ICMP, DHCP and DNS. Build around Adam Dunkels uIP Stack. Further developed version can be found on
+- [**459**Star][1y] [HTML] [metnew/uxss-db](https://github.com/metnew/uxss-db)
+- [**459**Star][1y] [Cycript] [codermjlee/mjcript](https://github.com/codermjlee/mjcript) 【越狱-逆向】基于Cycript实现的一些实用函数
+- [**459**Star][9m] [Py] [christhecoolhut/zeratool](https://github.com/christhecoolhut/zeratool) Automatic Exploit Generation (AEG) and remote flag capture for exploitable CTF problems
+- [**458**Star][4m] [mel0day/redteam-bcs](https://github.com/mel0day/redteam-bcs) BCS(北京网络安全大会)2019 红队行动会议重点内容
+- [**458**Star][3y] [valvesoftware/csgo-osx-linux](https://github.com/ValveSoftware/csgo-osx-linux) Counter-Strike: Global Offensive
+- [**458**Star][8m] [C] [sandeepmistry/arduino-nrf5](https://github.com/sandeepmistry/arduino-nrf5) Arduino Core for Nordic Semiconductor nRF5 based boards
+- [**458**Star][3m] [PHP] [nette/latte](https://github.com/nette/latte) ☕ Latte: the intuitive and fast template engine for those who want the most secure PHP sites.
+- [**458**Star][4y] [JS] [ghostwords/chameleon](https://github.com/ghostwords/chameleon) Browser fingerprinting protection for everybody.
+- [**458**Star][2d] [C] [exim/exim](https://github.com/exim/exim) Exim Mail Transport Agent - source, testsuite and documentation
+- [**457**Star][3y] [Py] [vpnguy-zz/ntpdos](https://github.com/vpnguy-zz/ntpdos) Create a DDOS attack using NTP servers
+- [**457**Star][3m] [Py] [blacknbunny/cve-2018-10933](https://github.com/blacknbunny/CVE-2018-10933) Spawn to shell without any credentials by using CVE-2018-10933 (LibSSH)
+- [**457**Star][1m] [C#] [tyranid/oleviewdotnet](https://github.com/tyranid/oleviewdotnet) A .net OLE/COM viewer and inspector to merge functionality of OleView and Test Container
+- [**457**Star][4m] [C] [jarun/keysniffer](https://github.com/jarun/keysniffer)
+- [**457**Star][6m] [PHP] [flozz/p0wny-shell](https://github.com/flozz/p0wny-shell) Single-file PHP shell
+- [**456**Star][26d] [PHP] [pk-fr/yakpro-po](https://github.com/pk-fr/yakpro-po) YAK Pro - Php Obfuscator
+- [**456**Star][3y] [C] [haka-security/haka](https://github.com/haka-security/haka) a collection of tools that allows capturing TCP/IP packets and filtering them based on Lua policy files.
+- [**456**Star][2m] [Py] [globaleaks/tor2web](https://github.com/globaleaks/tor2web) Tor2web is an HTTP proxy software that enables access to Tor Hidden Services by mean of common web browsers
+- [**455**Star][2y] [Py] [yukinoshita47/yuki-chan-the-auto-pentest](https://github.com/yukinoshita47/yuki-chan-the-auto-pentest) an Automated Penetration Testing tool this tool will auditing all standard security test method for you.
+- [**455**Star][2y] [Jupyter Notebook] [saurabhmathur96/clickbait-detector](https://github.com/saurabhmathur96/clickbait-detector) Detects clickbait headlines using deep learning.
+- [**455**Star][7d] [Py] [rabobank-cdc/dettect](https://github.com/rabobank-cdc/dettect) Detect Tactics, Techniques & Combat Threats
+- [**455**Star][8d] [PS] [mr-un1k0d3r/redteampowershellscripts](https://github.com/mr-un1k0d3r/redteampowershellscripts) Various PowerShell scripts that may be useful during red team exercise
+- [**455**Star][11m] [Py] [mandatoryprogrammer/tldr](https://github.com/mandatoryprogrammer/tldr) TLDR (TLD Records) is a continually updated DNS archive of zone transfer attempts again all existing TLD nameservers as well as the root servers.
+- [**455**Star][2y] [Py] [idanr1986/cuckoo-droid](https://github.com/idanr1986/cuckoo-droid) Automated Android Malware Analysis with Cuckoo Sandbox.
+- [**455**Star][6m] [Py] [dr0op/weblogicscan](https://github.com/dr0op/weblogicscan) 增强版WeblogicScan、检测结果更精确、插件化、添加CVE-2019-2618,CVE-2019-2729检测,Python3支持
+- [**454**Star][3m] [JS] [sindresorhus/get-port](https://github.com/sindresorhus/get-port) Get an available port
+- [**454**Star][4y] [C] [lucasjones/cpuminer-multi](https://github.com/lucasjones/cpuminer-multi) Multi-algo CPUMiner & Reference Cryptonote Miner (JSON-RPC 2.0)
+- [**454**Star][2y] [Py] [embedi/cve-2017-11882](https://github.com/embedi/cve-2017-11882) Proof-of-Concept exploits for CVE-2017-11882
+- [**453**Star][1y] [Go] [ncsa/ssh-auditor](https://github.com/ncsa/ssh-auditor) The best way to scan for weak ssh passwords on your network
+- [**453**Star][1y] [CSS] [fmstrat/diy-ipmi](https://github.com/fmstrat/diy-ipmi) A DIY IPMI / IP KVM system utilizing the Raspberry Pi
+- [**453**Star][2y] [C] [cr4sh/openreil](https://github.com/cr4sh/openreil) Open source library that implements translator and tools for REIL (Reverse Engineering Intermediate Language)
+- [**453**Star][7d] [Py] [census-instrumentation/opencensus-python](https://github.com/census-instrumentation/opencensus-python) A stats collection and distributed tracing framework
+- [**453**Star][9m] [C++] [ahupowerdns/hello-dns](https://github.com/ahupowerdns/hello-dns) Hello and welcome to DNS!
+- [**452**Star][3m] [PS] [rvrsh3ll/misc-powershell-scripts](https://github.com/rvrsh3ll/misc-powershell-scripts) Random Tools
+- [**452**Star][7m] [Py] [n1xbyte/cve-2019-0708](https://github.com/n1xbyte/cve-2019-0708) dump
+- [**452**Star][10m] [C] [martinmarinov/tempestsdr](https://github.com/martinmarinov/tempestsdr) Remote video eavesdropping using a software-defined radio platform
+- [**452**Star][4y] [clowwindy/shadowsocks-libev](https://github.com/clowwindy/shadowsocks-libev)
+- [**452**Star][1y] [bfuzzy/auditd-attack](https://github.com/bfuzzy/auditd-attack) A Linux Auditd rule set mapped to MITRE's Attack Framework
+- [**451**Star][5d] [SystemVerilog] [lowrisc/opentitan](https://github.com/lowrisc/opentitan) Open source silicon root of trust
+- [**451**Star][17d] [Py] [controlscanmdr/cyphon](https://github.com/controlscanmdr/cyphon) Open source incident management and response platform.
+- [**451**Star][2m] [Java] [windysha/xpatch](https://github.com/windysha/xpatch) 免Root实现app加载Xposed插件工具。This is a tool to repackage apk file, then the apk can load any xposed modules installed in the device. It is another way to hook an app without root device.
+- [**451**Star][3y] [C++] [vusec/drammer](https://github.com/vusec/drammer) Native binary for testing Android phones for the Rowhammer bug
+- [**451**Star][2y] [PS] [spiderlabs/portia](https://github.com/spiderlabs/portia) Portia aims to automate a number of techniques commonly performed on internal network penetration tests after a low privileged account has been compromised.
+- [**451**Star][8m] [C++] [rek7/mxtract](https://github.com/rek7/mxtract) an opensource linux based tool that analyzes and dumps memory.
+- [**451**Star][8d] [meitar/awesome-cybersecurity-blueteam](https://github.com/meitar/awesome-cybersecurity-blueteam)
+- [**451**Star][7d] [PHP] [akaunting/firewall](https://github.com/akaunting/firewall) Web Application Firewall (WAF) package for Laravel
+- [**450**Star][2m] [Py] [scwuaptx/pwngdb](https://github.com/scwuaptx/pwngdb) gdb for pwn
+- [**450**Star][8y] [Perl] [aoncyberlabs/padbuster](https://github.com/AonCyberLabs/PadBuster) Automated script for performing Padding Oracle attacks
+- [**450**Star][2m] [Py] [super-l/superl-url](https://github.com/super-l/superl-url) 根据关键词,对搜索引擎内容检索结果的网址内容进行采集的一款轻量级软程序。 程序主要运用于安全渗透测试项目,以及批量评估各类CMS系统0DAY的影响程度,同时也是批量采集自己获取感兴趣的网站的一个小程序~~ 可自动从搜索引擎采集相关网站的真实地址与标题等信息,可保存为文件,自动去除重复URL。同时,也可以自定义忽略多条域名等。
+- [**450**Star][4m] [Py] [s0md3v/goop](https://github.com/s0md3v/goop) Google Search Scraper
+- [**450**Star][4m] [C++] [omerya/invisi-shell](https://github.com/omerya/invisi-shell) Hide your Powershell script in plain sight. Bypass all Powershell security features
+- [**450**Star][3y] [C] [nccgroup/triforceafl](https://github.com/nccgroup/triforceafl) AFL/QEMU fuzzing with full-system emulation.
+- [**450**Star][3m] [m1ghtym0/browser-pwn](https://github.com/m1ghtym0/browser-pwn) An updated collection of resources targeting browser-exploitation.
+- [**450**Star][4y] [Py] [alienvault-labs/alienvaultlabs](https://github.com/alienvault-labs/alienvaultlabs) Alienvault Labs Projects Random Stuff
+- [**449**Star][11m] [Kotlin] [shadowsocks/kcptun-android](https://github.com/shadowsocks/kcptun-android) kcptun for Android.
+- [**449**Star][2d] [PS] [mantvydasb/redteam-tactics-and-techniques](https://github.com/mantvydasb/RedTeam-Tactics-and-Techniques) Red Teaming Tactics and Techniques
+- [**449**Star][3m] [Go] [stripe/safesql](https://github.com/stripe/safesql) Static analysis tool for Golang that protects against SQL injections
+- [**449**Star][5m] [PHP] [kasperskylab/klara](https://github.com/kasperskylab/klara) Kaspersky's GReAT KLara
+- [**449**Star][6m] [JS] [coalfire-research/npk](https://github.com/coalfire-research/npk) A mostly-serverless distributed hash cracking platform
+- [**448**Star][14d] [Py] [s0md3v/corsy](https://github.com/s0md3v/corsy) CORS Misconfiguration Scanner
+- [**448**Star][10d] [C++] [ondrejbudai/hidviz](https://github.com/ondrejbudai/hidviz) in-depth analysis of USB HID devices communication
+- [**448**Star][2m] [Shell] [l-n-s/wireguard-install](https://github.com/l-n-s/wireguard-install) WireGuard VPN server installer
+- [**448**Star][8m] [YARA] [ghidraninja/ghidra_scripts](https://github.com/ghidraninja/ghidra_scripts) Scripts for the Ghidra software reverse engineering suite.
+ - [binwalk](https://github.com/ghidraninja/ghidra_scripts/blob/master/binwalk.py) Runs binwalk on the current program and bookmarks the findings
+ - [yara](https://github.com/ghidraninja/ghidra_scripts/blob/master/yara.py) Automatically find crypto constants in the loaded program - allows to very quickly identify crypto code.
+ - [swift_demangler](https://github.com/ghidraninja/ghidra_scripts/blob/master/swift_demangler.py) Automatically demangle swift function names
+ - [golang_renamer](https://github.com/ghidraninja/ghidra_scripts/blob/master/golang_renamer.py) Restores function names from a stripped Go binary
+- [**447**Star][3d] [Py] [sidechannelmarvels/deadpool](https://github.com/sidechannelmarvels/deadpool) Repository of various public white-box cryptographic implementations and their practical attacks.
+- [**447**Star][5m] [PS] [sans-blue-team/deepbluecli](https://github.com/sans-blue-team/deepbluecli) a PowerShell Module for Threat Hunting via Windows Event Logs
+- [**447**Star][11m] [C++] [ntquery/scylla](https://github.com/ntquery/scylla) Imports Reconstructor
+- [**447**Star][7m] [HTML] [ctf-wiki/ctf-challenges](https://github.com/ctf-wiki/ctf-challenges)
+- [**447**Star][3m] [C] [cloudflare/cloudflare-blog](https://github.com/cloudflare/cloudflare-blog) Cloudflare Blog code samples
+- [**447**Star][5m] [Py] [cchio/deep-pwning](https://github.com/cchio/deep-pwning) Metasploit for machine learning.
+- [**447**Star][3y] [aptive/penetration-testing-tools](https://github.com/aptive/penetration-testing-tools) make a single repository for all the commonly used penetration testing tools, typically tools that don't exist within Kali or other penetration testing distros.
+- [**447**Star][4m] [C++] [alexhude/friend](https://github.com/alexhude/friend) Flexible Register/Instruction Extender aNd Documentation
+- [**446**Star][6y] [Go] [titanous/heartbleeder](https://github.com/titanous/heartbleeder) OpenSSL CVE-2014-0160 Heartbleed vulnerability test
+- [**446**Star][1y] [JS] [simonepri/upash](https://github.com/simonepri/upash) allow you to have a clean and easy-to-use API to use any password hashing algorithm seamlessly in your application.
+- [**446**Star][14d] [Py] [nsonaniya2010/subdomainizer](https://github.com/nsonaniya2010/subdomainizer) A tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github.
+- [**446**Star][5d] [C++] [khronosgroup/spirv-tools](https://github.com/khronosgroup/spirv-tools) provides an API and commands for processing SPIR-V module
+- [**446**Star][2y] [POV-Ray SDL] [hzqst/syscall-monitor](https://github.com/hzqst/syscall-monitor) a system monitor program (like Sysinternal's Process Monitor) using Intel VT-X/EPT for Windows7+
+- [**445**Star][6m] [C] [riverloopsec/killerbee](https://github.com/riverloopsec/killerbee) IEEE 802.15.4/ZigBee Security Research Toolkit
+- [**444**Star][5d] [Shell] [r00t-3xp10it/fakeimageexploiter](https://github.com/r00t-3xp10it/fakeimageexploiter) Use a Fake image.jpg to exploit targets (hide known file extensions)
+- [**444**Star][6d] [C#] [malwareinfosec/ekfiddle](https://github.com/malwareinfosec/ekfiddle) A framework based on the Fiddler web debugger to study Exploit Kits, malvertising and malicious traffic in general.
+- [**444**Star][1y] [Rust] [ierror/ssh-permit-a38](https://github.com/ierror/ssh-permit-a38) Central management and deployment for SSH keys
+- [**444**Star][2y] [ObjC] [aburgh/disk-arbitrator](https://github.com/aburgh/disk-arbitrator) A Mac OS X forensic utility which manages file system mounting in support of forensic procedures.
+- [**443**Star][6m] [Go] [solo-io/sqoop](https://github.com/solo-io/sqoop) The GraphQL Engine powered by Gloo
+- [**443**Star][8y] [Py] [openrce/paimei](https://github.com/openrce/paimei) A reverse engineering framework written in Python.
+- [**443**Star][7m] [jnusimba/miscsecnotes](https://github.com/jnusimba/miscsecnotes) some learning notes about Web/Cloud/Docker Security、 Penetration Test、 Security Building
+- [**443**Star][11m] [Batchfile] [ion-storm/sysmon-config](https://github.com/ion-storm/sysmon-config) Advanced Sysmon configuration, Installer & Auto Updater with high-quality event tracing
+- [**443**Star][1m] [Py] [gameye98/lazymux](https://github.com/gameye98/lazymux) termux tool installer
+- [**443**Star][3y] [Py] [brianwrf/hackutils](https://github.com/brianwrf/hackutils) a hack tool kit for pentest and web security research, which is based on BeautifulSoup bs4 module
+- [**443**Star][6m] [Py] [albinowax/activescanplusplus](https://github.com/albinowax/activescanplusplus) ActiveScan++ Burp Suite Plugin
+- [**442**Star][6m] [C#] [sdrapkin/securitydriven.inferno](https://github.com/sdrapkin/securitydriven.inferno)
+- [**442**Star][2m] [Go] [retroplasma/flyover-reverse-engineering](https://github.com/retroplasma/flyover-reverse-engineering) Reversing Apple's 3D satellite mode
+- [**442**Star][1y] [Py] [jfoote/exploitable](https://github.com/jfoote/exploitable) The 'exploitable' GDB plugin. I don't work at CERT anymore, but here is the original homepage:
+- [**442**Star][3y] [Py] [jekyc/wig](https://github.com/jekyc/wig) a web application information gathering tool, which can identify numerous Content Management Systems and other administrative applications.
+- [**442**Star][1y] [Go] [ice3man543/subover](https://github.com/ice3man543/subover) A Powerful Subdomain Takeover Tool
+- [**441**Star][6m] [C++] [ajkhoury/reclassex](https://github.com/ajkhoury/ReClassEx) ReClassEx
+- [**441**Star][1y] [C] [ryancdotorg/brainflayer](https://github.com/ryancdotorg/brainflayer) A proof-of-concept cracker for cryptocurrency brainwallets and other low entropy key alogrithms.
+- [**441**Star][3y] [Py] [ring04h/wyproxy](https://github.com/ring04h/wyproxy) proxying and recording HTTP/HTTPs/Socks5 proxy flow, save to MYSQL database.
+- [**441**Star][1m] [Go] [cbeuw/cloak](https://github.com/cbeuw/cloak) A universal pluggable transport utilising TLS domain fronting to evade deep packet inspection and active probing from state-level adversaries
+- [**441**Star][6d] [Jupyter Notebook] [borealisai/advertorch](https://github.com/borealisai/advertorch) A Toolbox for Adversarial Robustness Research
+- [**440**Star][4y] [C#] [keepwn/altman](https://github.com/keepwn/altman) the cross platform webshell tool in .NET
+- [**440**Star][2y] [JS] [brannondorsey/whonow](https://github.com/brannondorsey/whonow) A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)
+- [**439**Star][3m] [C++] [pstavirs/ostinato](https://github.com/pstavirs/ostinato) Packet/Traffic Generator and Analyzer
+- [**439**Star][1m] [Py] [polymorf/findcrypt-yara](https://github.com/polymorf/findcrypt-yara) IDA pro plugin to find crypto constants (and more)
+- [**439**Star][4y] [Java] [payatu/diva-android](https://github.com/payatu/diva-android) DIVA Android - Damn Insecure and vulnerable App for Android
+- [**439**Star][4y] [Py] [nimia/public_drown_scanner](https://github.com/nimia/public_drown_scanner)
+- [**439**Star][2y] [magoo/redteam-plan](https://github.com/magoo/redteam-plan) Issues to consider when planning a red team exercise.
+- [**439**Star][3y] [CSS] [graniet/chromebackdoor](https://github.com/graniet/chromebackdoor) a PoC of pentest tool, use a MITB technique for generate a windows executable ".exe" after launch run a malicious extension or script on most popular browsers, and send all DOM datas on command and control.
+- [**439**Star][12d] [Py] [google/vulncode-db](https://github.com/google/vulncode-db) a database for vulnerabilities and their corresponding source code if available
+- [**439**Star][2d] [C] [facebook/openbmc](https://github.com/facebook/openbmc) OpenBMC is an open software framework to build a complete Linux image for a Board Management Controller (BMC).
+- [**439**Star][1y] [JS] [digitalsecurity/btlejuice](https://github.com/digitalsecurity/btlejuice) BtleJuice Bluetooth Smart (LE) Man-in-the-Middle framework
+- [**439**Star][1m] [Py] [brendan-w/python-obd](https://github.com/brendan-w/python-obd) OBD-II serial module for reading engine data
+- [**438**Star][2d] [C++] [stevemk14ebr/polyhook_2_0](https://github.com/stevemk14ebr/polyhook_2_0) C++17, x86/x64 Hooking Libary v2.0
+- [**438**Star][8m] [PS] [nsacyber/event-forwarding-guidance](https://github.com/nsacyber/Event-Forwarding-Guidance) Configuration guidance for implementing collection of security relevant Windows Event Log events by using Windows Event Forwarding. #nsacyber
+- [**438**Star][9d] [mitre/cti](https://github.com/mitre/cti) Cyber Threat Intelligence Repository expressed in STIX 2.0
+- [**438**Star][4y] [Py] [laramies/metagoofil](https://github.com/laramies/metagoofil) a tool for extracting metadata of public documents (pdf,doc,xls,ppt,etc) availables in the target websites
+- [**438**Star][24d] [Py] [j00ru/ctf-tasks](https://github.com/j00ru/ctf-tasks) An archive of low-level CTF challenges developed over the years
+- [**437**Star][5m] [Java] [graxcode/jbytemod-beta](https://github.com/graxcode/jbytemod-beta) Java bytecode editor
+- [**437**Star][2y] [PHP] [arrexel/phpbash](https://github.com/arrexel/phpbash) A semi-interactive PHP shell compressed into a single file.
+- [**436**Star][1m] [TSQL] [404notf0und/security-data-analysis-and-visualization](https://github.com/404notf0und/security-data-analysis-and-visualization) 2018-2020青年安全圈-活跃技术博主/博客
+- [**436**Star][3d] [TS] [fuzzitdev/jsfuzz](https://github.com/fuzzitdev/jsfuzz) coverage guided fuzz testing for javascript
+- [**436**Star][2y] [Py] [undeadsec/evilurl](https://github.com/undeadsec/evilurl) Generate unicode evil domains for IDN Homograph Attack and detect them.
+- [**436**Star][2y] [Vim script] [tmhedberg/simpylfold](https://github.com/tmhedberg/simpylfold) No-BS Python code folding for Vim
+- [**436**Star][2m] [Py] [romanzaikin/burpextension-whatsapp-decryption-checkpoint](https://github.com/romanzaikin/burpextension-whatsapp-decryption-checkpoint) This tool was created during our research at Checkpoint Software Technologies on Whatsapp Protocol (This repository will be updated after BlackHat 2019)
+- [**436**Star][6d] [Py] [ionelmc/python-hunter](https://github.com/ionelmc/python-hunter) Hunter is a flexible code tracing toolkit.
+- [**436**Star][4y] [Py] [foxglovesec/javaunserializeexploits](https://github.com/foxglovesec/javaunserializeexploits)
+- [**436**Star][4m] [Go] [ethereumproject/go-ethereum](https://github.com/ethereumproject/go-ethereum) Go language implementation of the original/classic design of the Ethereum protocol
+- [**436**Star][2y] [PS] [danielbohannon/revoke-obfuscation](https://github.com/danielbohannon/revoke-obfuscation) PowerShell Obfuscation Detection Framework
+- [**436**Star][4m] [ctftraining/ctftraining](https://github.com/ctftraining/ctftraining) CTF Training 经典赛题复现环境
+- [**436**Star][2d] [JS] [ayms/node-tor](https://github.com/ayms/node-tor) Javascript implementation of the Tor (or Tor like) anonymizer project (The Onion Router)
+- [**436**Star][2m] [Py] [admintony/prepare-for-awd](https://github.com/admintony/prepare-for-awd) AWD攻防赛脚本集合
+- [**436**Star][1y] [Py] [0x4d31/honeylambda](https://github.com/0x4d31/honeylambda) honeyλ - a simple, serverless application designed to create and monitor fake HTTP endpoints (i.e. URL honeytokens) automatically, on top of AWS Lambda and Amazon API Gateway
+- [**435**Star][11m] [Py] [neohapsis/bbqsql](https://github.com/neohapsis/bbqsql) SQL Injection Exploitation Tool
+- [**435**Star][3y] [C] [mncoppola/suterusu](https://github.com/mncoppola/suterusu) An LKM rootkit targeting Linux 2.6/3.x on x86(_64), and ARM
+- [**434**Star][4m] [Py] [ridter/redis-rce](https://github.com/ridter/redis-rce) Redis 4.x/5.x RCE
+- [**434**Star][4m] [Go] [coyim/coyim](https://github.com/coyim/coyim) a safe and secure chat client
+- [**434**Star][8m] [Go] [client9/ipcat](https://github.com/client9/ipcat) Categorization of IP Addresses
+- [**433**Star][3y] [Py] [secureworks/dcept](https://github.com/secureworks/dcept) A tool for deploying and detecting use of Active Directory honeytokens
+- [**433**Star][8y] [C++] [moxie0/sslsniff](https://github.com/moxie0/sslsniff) A tool for automated MITM attacks on SSL connections.
+- [**432**Star][8m] [Py] [aws-samples/aws-waf-sample](https://github.com/aws-samples/aws-waf-sample) This repository contains example scripts and sets of rules for the AWS WAF service. Please be aware that the applicability of these examples to specific workloads may vary.
+- [**432**Star][7m] [Ruby] [tidesec/fuzzscanner](https://github.com/tidesec/fuzzscanner) 一个主要用于信息搜集的工具集,主要是用于对网站子域名、开放端口、端口指纹、c段地址、敏感目录等信息进行批量搜集。
+- [**432**Star][7y] [C] [juuso/keychaindump](https://github.com/juuso/keychaindump) A proof-of-concept tool for reading OS X keychain passwords
+- [**432**Star][12m] [Shell] [jactor-sue/deepin-apps-installation](https://github.com/jactor-sue/deepin-apps-installation) 本仓库介绍如何在基于Ubuntu的系统上安装Deepin移植的软件
+- [**432**Star][2m] [Go] [gorilla/securecookie](https://github.com/gorilla/securecookie) Package gorilla/securecookie encodes and decodes authenticated and optionally encrypted cookie values for Go web applications.
+- [**432**Star][2m] [Ruby] [aderyabin/sniffer](https://github.com/aderyabin/sniffer) Log and Analyze Outgoing HTTP Requests
+- [**431**Star][1y] [HTML] [dnfwah/dnfwah](https://github.com/DNFWAH/DNFWAH) It's an ezine: DO NOT FUCK WITH A HACKER
+- [**431**Star][2m] [Py] [pan-unit42/public_tools](https://github.com/pan-unit42/public_tools)
+- [**431**Star][9m] [Go] [amyangxyz/assassingo](https://github.com/amyangxyz/assassingo) An extensible and concurrency pentest framework in Go, also with WebGUI
+- [**431**Star][4y] [C] [alonho/pytrace](https://github.com/alonho/pytrace) pytrace is a fast python tracer. it records function calls, arguments and return values. can be used for debugging and profiling.
+- [**430**Star][2d] [Py] [w-digital-scanner/w13scan](https://github.com/w-digital-scanner/w13scan) Passive Security Scanner (被动式安全扫描器)
+- [**430**Star][26d] [C] [guardianproject/orbot](https://github.com/guardianproject/orbot) The Github home of Orbot: Tor on Android (Also available on gitlab!)
+- [**430**Star][2m] [Py] [superhedgy/attacksurfacemapper](https://github.com/superhedgy/attacksurfacemapper) AttackSurfaceMapper is a tool that aims to automate the reconnaissance process.
+- [**430**Star][2y] [C] [siguza/iohideous](https://github.com/siguza/iohideous) IOHIDFamily 0day
+- [**430**Star][4y] [JS] [mozilla/scanjs](https://github.com/mozilla/scanjs) Static analysis tool for javascript code.
+- [**430**Star][7m] [Pascal] [mojtabatajik/robber](https://github.com/mojtabatajik/robber) Robber is open source tool for finding executables prone to DLL hijacking
+- [**430**Star][1y] [meitar/awesome-lockpicking](https://github.com/meitar/awesome-lockpicking) A curated list of awesome guides, tools, and other resources relating to the security and compromise of locks, safes, and keys.
+- [**430**Star][2y] [Py] [lightbulb-framework/lightbulb-framework](https://github.com/lightbulb-framework/lightbulb-framework) Tools for auditing WAFS
+- [**430**Star][2y] [ObjC] [keith/hopper-swift-demangle](https://github.com/keith/hopper-swift-demangle) A Hopper plugin for demangle Swift symbols
+- [**430**Star][4m] [Py] [crocs-muni/roca](https://github.com/crocs-muni/roca) ROCA: Infineon RSA key vulnerability
+- [**430**Star][11m] [captainarash/the_holy_book_of_x86](https://github.com/captainarash/the_holy_book_of_x86) A simple guide to x86 architecture, assembly, memory management, paging, segmentation, SMM, BIOS....
+- [**430**Star][28d] [C#] [0xd4d/iced](https://github.com/0xd4d/iced) x86/x64 disassembler, instruction decoder & encoder
+- [**429**Star][1m] [Java] [aosp-mirror/platform_dalvik](https://github.com/aosp-mirror/platform_dalvik)
+- [**429**Star][28d] [Py] [stamparm/fetch-some-proxies](https://github.com/stamparm/fetch-some-proxies) Simple Python script for fetching "some" (usable) proxies
+- [**428**Star][1m] [C] [sciresm/hactool](https://github.com/sciresm/hactool) hactool is a tool to view information about, decrypt, and extract common file formats for the Nintendo Switch, especially Nintendo Content Archives.
+- [**428**Star][3d] [C++] [ridiculousfish/libdivide](https://github.com/ridiculousfish/libdivide) Official git repository for libdivide: optimized integer division
+- [**428**Star][3m] [Py] [payatu/tiredful-api](https://github.com/payatu/tiredful-api) An intentionally designed broken web application based on REST API.
+- [**428**Star][2m] [Py] [obsidianforensics/hindsight](https://github.com/obsidianforensics/hindsight) Internet history forensics for Google Chrome/Chromium
+- [**428**Star][2y] [ObjC] [jackrex/fakewechatloc](https://github.com/jackrex/fakewechatloc) 手把手教你制作一款iOS越狱App
+- [**428**Star][2y] [Py] [evilsocket/smali_emulator](https://github.com/evilsocket/smali_emulator) This software will emulate a smali source file generated by apktool.
+- [**428**Star][2y] [JS] [bradoyler/xmr-miner](https://github.com/bradoyler/xmr-miner) Web-based Cryptocurrency miner, built with Vue.js
+- [**428**Star][10m] [Py] [appsecco/bugcrowd-levelup-subdomain-enumeration](https://github.com/appsecco/bugcrowd-levelup-subdomain-enumeration) This repository contains all the material from the talk "Esoteric sub-domain enumeration techniques" given at Bugcrowd LevelUp 2017 virtual conference
+- [**427**Star][3m] [Perl] [wireghoul/dotdotpwn](https://github.com/wireghoul/dotdotpwn) DotDotPwn - The Directory Traversal Fuzzer
+- [**427**Star][1y] [C] [novicelive/research-rootkit](https://github.com/novicelive/research-rootkit) LibZeroEvil & the Research Rootkit project.
+- [**427**Star][8d] [TeX] [corkami/docs](https://github.com/corkami/docs) documentations, slides decks...
+- [**426**Star][2m] [Py] [nullhypothesis/exitmap](https://github.com/nullhypothesis/exitmap) A fast and modular scanner for Tor exit relays.
+- [**426**Star][1y] [Py] [endgameinc/gym-malware](https://github.com/endgameinc/gym-malware) a malware manipulation environment for OpenAI's gym
+- [**425**Star][4y] [HTML] [praetorian-code/dvrf](https://github.com/praetorian-code/DVRF) The Damn Vulnerable Router Firmware Project
+- [**425**Star][2y] [rsmudge/malleable-c2-profiles](https://github.com/rsmudge/malleable-c2-profiles) Malleable C2 is a domain specific language to redefine indicators in Beacon's communication. This repository is a collection of Malleable C2 profiles that you may use. These profiles work with Cobalt Strike 3.x.
+- [**425**Star][11m] [Py] [lordamit/brightness](https://github.com/lordamit/brightness) Brightness Controller
+- [**424**Star][7y] [C] [spinkham/skipfish](https://github.com/spinkham/skipfish) Web application security scanner created by lcamtuf for google - Unofficial Mirror
+- [**424**Star][3m] [PS] [p3nt4/invoke-socksproxy](https://github.com/p3nt4/invoke-socksproxy) Socks proxy server using powershell. Supports local and reverse connections for pivoting.
+- [**424**Star][3d] [Go] [openshift/odo](https://github.com/openshift/odo) OpenShift Do - Fast, iterative OpenShift development
+- [**424**Star][9d] [C] [newaetech/chipwhisperer](https://github.com/newaetech/chipwhisperer) thecomplete open-source toolchain for side-channel power analysis and glitchingattacks
+- [**424**Star][3m] [JS] [lolimay/shadowsocks-deepin](https://github.com/lolimay/shadowsocks-deepin)
+- [**424**Star][3m] [Py] [jotygill/openpyn-nordvpn](https://github.com/jotygill/openpyn-nordvpn) Easily connect to and switch between, OpenVPN servers hosted by NordVPN on Linux (+patch leakes)
+- [**424**Star][4y] [C++] [jonathansalwan/pintools](https://github.com/jonathansalwan/pintools) Pintool example and PoC for dynamic binary analysis
+- [**424**Star][5m] [iovisor/bpf-docs](https://github.com/iovisor/bpf-docs) Presentations and docs
+- [**424**Star][2d] [Shell] [energizedprotection/block](https://github.com/energizedprotection/block) Let's make an annoyance free, better open internet, altogether!
+- [**424**Star][7d] [Java] [dependencytrack/dependency-track](https://github.com/dependencytrack/dependency-track) Dependency-Track is an intelligent Supply Chain Component Analysis platform that allows organizations to identify and reduce risk from the use of third-party and open source components.
+- [**423**Star][1y] [PHP] [ysrc/webshell-sample](https://github.com/ysrc/webshell-sample) 收集自网络各处的 webshell 样本,用于测试 webshell 扫描器检测率。
+- [**423**Star][3d] [xuanhun/hackingresource](https://github.com/xuanhun/hackingresource) “玄魂工作室--安全圈” 知识星球内资源汇总
+- [**423**Star][1y] [ring04h/papers](https://github.com/ring04h/papers) my security summit papers
+- [**423**Star][4m] [re4lity/hacking-with-golang](https://github.com/re4lity/hacking-with-golang) Golang安全资源合集
+- [**423**Star][3y] [Makefile] [mindmac/androideagleeye](https://github.com/mindmac/androideagleeye) An Xposed and adbi based module which is capable of hooking both Java and Native methods targeting Android OS.
+- [**423**Star][10m] [C] [hardenedlinux/linux-exploit-development-tutorial](https://github.com/hardenedlinux/linux-exploit-development-tutorial) a series tutorial for linux exploit development to newbie.
+- [**423**Star][4m] [Shell] [ashishb/android-malware](https://github.com/ashishb/android-malware) Collection of android malware samples
+- [**423**Star][30d] [Awk] [alecmuffett/eotk](https://github.com/alecmuffett/eotk) Enterprise Onion Toolkit
+- [**422**Star][2y] [fwgs/cs16-client](https://github.com/fwgs/cs16-client) Counter-Strike 1.6 rewritten client.dll. Without VGUI, ParticleMan and ecology friendy.
+- [**422**Star][1y] [Py] [shmilylty/cheetah](https://github.com/shmilylty/cheetah) a very fast brute force webshell password tool
+- [**422**Star][4m] [Go] [yl2chen/cidranger](https://github.com/yl2chen/cidranger) Fast IP to CIDR lookup in Golang
+- [**422**Star][2y] [Lua] [xsec-lab/x-waf](https://github.com/xsec-lab/x-waf) 适用于中小企业的云waf
+- [**422**Star][10m] [Py] [d4vinci/cuteit](https://github.com/d4vinci/cuteit) IP obfuscator made to make a malicious ip a bit cuter
+- [**421**Star][19d] [C] [mcgill-dmas/kam1n0-community](https://github.com/McGill-DMaS/Kam1n0-Community) a scalable assembly management and analysis platform
+ - [IDA插件](https://github.com/McGill-DMaS/Kam1n0-Community/tree/master2.x/kam1n0-clients/ida-plugin)
+ - [kam1n0](https://github.com/McGill-DMaS/Kam1n0-Community/tree/master2.x/kam1n0)
+- [**421**Star][3y] [riusksk/vul_war](https://github.com/riusksk/vul_war) 《漏洞战争:软件漏洞分析精要》配套资料
+- [**421**Star][11m] [Lua] [w3h/icsmaster](https://github.com/w3h/icsmaster) ICS/SCADA Security Resource
+- [**421**Star][2y] [C++] [unamer/cve-2018-8120](https://github.com/unamer/cve-2018-8120) CVE-2018-8120 Windows LPE exploit
+- [**421**Star][1y] [Py] [thehackingsage/hacktronian](https://github.com/thehackingsage/hacktronian) All in One Hacking Tool for Linux & Android
+- [**421**Star][2y] [Go] [subgraph/oz](https://github.com/subgraph/oz) a sandboxing system targeting everyday workstation applications
+- [**421**Star][3y] [Py] [mengskysama/shadowsocks-rm](https://github.com/mengskysama/shadowsocks-rm) A fast tunnel proxy that helps you bypass firewalls
+- [**421**Star][2m] [Rust] [kpcyrd/sniffglue](https://github.com/kpcyrd/sniffglue) Secure multithreaded packet sniffer
+- [**421**Star][1y] [JS] [ciscocsirt/gosint](https://github.com/ciscocsirt/gosint) collecting, processing, and exporting high quality indicators of compromise (IOCs).
+- [**420**Star][5m] [Java] [bit4woo/recaptcha](https://github.com/bit4woo/recaptcha) reCAPTCHA = REcognize CAPTCHA: A Burp Suite Extender that recognize CAPTCHA and use for intruder payload 自动识别图形验证码并用于burp intruder爆破模块的插件
+- [**420**Star][3m] [Shell] [jsamr/bootiso](https://github.com/jsamr/bootiso) A bash script to securely create a bootable USB device from one ISO file. Just curl it, chmod it and go!
+- [**420**Star][3m] [jack-liang/kalitools](https://github.com/jack-liang/kalitools) Kali Linux工具清单
+- [**420**Star][2m] [C] [desowin/usbpcap](https://github.com/desowin/usbpcap) USB packet capture for Windows
+- [**419**Star][4y] [Shell] [imagetragick/pocs](https://github.com/imagetragick/pocs) Proof of Concepts for CVE-2016–3714
+- [**419**Star][1y] [Py] [ekultek/pybelt](https://github.com/ekultek/pybelt) The hackers tool belt
+- [**419**Star][16d] [Perl] [chinarulezzz/pixload](https://github.com/chinarulezzz/pixload) Image Payload Creating/Injecting tools
+- [**419**Star][4y] [ObjC] [asido/systemmonitor](https://github.com/asido/systemmonitor) iOS application providing you all information about your device - hardware, operating system, processor, memory, GPU, network interface, storage and battery, including OpenGL powered visual representation in real time.
+- [**419**Star][5m] [C] [anssi-fr/ad-control-paths](https://github.com/anssi-fr/ad-control-paths) Active Directory Control Paths auditing and graphing tools
+- [**418**Star][2y] [opentechfund/secure-email](https://github.com/opentechfund/secure-email) Overview of projects working on next-generation secure email.
+- [**418**Star][11m] [Shell] [nilotpalbiswas/auto-root-exploit](https://github.com/nilotpalbiswas/auto-root-exploit) Auto Root Exploit Tool
+- [**418**Star][3m] [Py] [misterch0c/malsploitbase](https://github.com/misterch0c/malsploitbase) Malware exploits
+- [**418**Star][1y] [Go] [kragniz/tor-controller](https://github.com/kragniz/tor-controller) Run Tor onion services on Kubernetes
+- [**418**Star][11m] [C] [jpr5/ngrep](https://github.com/jpr5/ngrep) ngrep is like GNU grep applied to the network layer. It's a PCAP-based tool that allows you to specify an extended regular or hexadecimal expression to match against data payloads of packets. It understands many kinds of protocols, including IPv4/6, TCP, UDP, ICMPv4/6, IGMP and Raw, across a wide variety of interface types, and understands BPF f…
+- [**418**Star][3m] [Py] [honeynet/droidbot](https://github.com/honeynet/droidbot) A lightweight test input generator for Android. Similar to Monkey, but with more intelligence and cool features!
+- [**418**Star][10d] [dropsofzut/awesome-security-weixin-official-accounts](https://github.com/dropsofzut/awesome-security-weixin-official-accounts) 网络安全类公众号推荐,欢迎大家推荐
+- [**418**Star][3y] [Py] [chishaxie/blindwatermark](https://github.com/chishaxie/blindwatermark) 盲水印 by python
+- [**418**Star][7m] [7kbstorm/7kbscan-webpathbrute](https://github.com/7kbstorm/7kbscan-webpathbrute) Web Path Brute Discovery
+- [**417**Star][1m] [Kotlin] [hmbsbige/shadowsocksr-android](https://github.com/hmbsbige/shadowsocksr-android) A ShadowsocksR client for Android, written in Kotlin.
+- [**417**Star][1y] [Py] [veekxt/v2ray-template](https://github.com/veekxt/v2ray-template) v2ray 模板,v2ray 配置生成工具
+- [**417**Star][2m] [C] [openresty/luajit2](https://github.com/openresty/luajit2) OpenResty's Branch of LuaJIT 2
+- [**417**Star][5m] [C] [mykter/afl-training](https://github.com/mykter/afl-training) Exercises to learn how to fuzz with American Fuzzy Lop
+- [**417**Star][7d] [C++] [simonkagstrom/kcov](https://github.com/simonkagstrom/kcov) Code coverage tool for compiled programs, Python and Bash which uses debugging information to collect and report data without special compilation options
+- [**417**Star][11m] [ObjC] [mxabc/devdatatool](https://github.com/mxabc/devdatatool) 编码转换、摘要(hash)、加解密(MD5、SHA、SHA3、SM3、HMAC、DES、3DES、AES、SM4)
+- [**417**Star][14d] [PHP] [mm0r1/exploits](https://github.com/mm0r1/exploits) Pwn stuff.
+- [**417**Star][3y] [C++] [malwares/botnet](https://github.com/malwares/botnet) Botnet
+- [**417**Star][2d] [C] [deeponion/deeponion-legacy](https://github.com/deeponion/deeponion-legacy) Official Source Repo for DeepOnion - Anonymous Cryptocurrency on TOR Network (legacy)
+- [**417**Star][1y] [JS] [chokcoco/httphijack](https://github.com/chokcoco/httphijack) 使用Javascript实现前端防御http劫持及防御XSS攻击,并且对可疑攻击进行上报
+- [**417**Star][8m] [Py] [awslabs/aws-waf-security-automations](https://github.com/awslabs/aws-waf-security-automations) This solution automatically deploys a single web access control list (web ACL) with a set of AWS WAF rules designed to filter common web-based attacks.
+- [**416**Star][3m] [Rust] [exodusvpn/exodus](https://github.com/ExodusVPN/exodus) network proxy and tunnel (VPN)
+- [**416**Star][3y] [Py] [x3omdax/penbox](https://github.com/x3omdax/penbox) A Penetration Testing Framework - The Tool With All The Tools
+- [**416**Star][10m] [Py] [powerscript/katanaframework](https://github.com/powerscript/katanaframework) a framework written in python for making penetration testing, based on a simple and comprehensive structure for anyone to use, modify and share
+- [**416**Star][6d] [C] [frida/frida-python](https://github.com/frida/frida-python) Frida Python bindings
+- [**416**Star][2y] [JS] [evilcos/xssor](https://github.com/evilcos/xssor) XSSOR:方便XSS与CSRF的工具,
+- [**415**Star][1y] [zhengmin1989/greatiosjailbreakmaterial](https://github.com/zhengmin1989/greatiosjailbreakmaterial) Great iOS Jailbreak Material! - I read hundreds of papers and PPTs. Only list the most useful materials here!
+- [**415**Star][8m] [Shell] [sroberts/awesome-iocs](https://github.com/sroberts/awesome-iocs) A collection of sources of indicators of compromise.
+- [**415**Star][5m] [preos-security/awesome-firmware-security](https://github.com/preos-security/awesome-firmware-security) Awesome Firmware Security & Other Helpful Documents
+- [**415**Star][3m] [C] [odzhan/injection](https://github.com/odzhan/injection) Windows process injection methods
+- [**415**Star][3d] [C] [libvmi/libvmi](https://github.com/libvmi/libvmi) The official home of the LibVMI project is at
+- [**415**Star][2d] [Py] [graalvm/graalpython](https://github.com/graalvm/graalpython) A Python 3 implementation built on GraalVM
+- [**415**Star][2d] [Py] [forensicartifacts/artifacts](https://github.com/forensicartifacts/artifacts) Digital Forensics Artifact Repository
+- [**415**Star][3y] [Py] [ciscocsirt/malspider](https://github.com/ciscocsirt/malspider) Malspider is a web spidering framework that detects characteristics of web compromises.
+- [**414**Star][10m] [Py] [autocracy/python-ipy](https://github.com/autocracy/python-ipy) IPy are a Python class and tools for handling of IPv4 and IPv6 addresses and networks. It is similar to Net::IP Perl module.
+- [**414**Star][11d] [hunters-forge/ossem](https://github.com/hunters-forge/OSSEM) Open Source Security Events Metadata (OSSEM)
+- [**414**Star][3m] [Scala] [thehive-project/cortex](https://github.com/TheHive-Project/Cortex) a Powerful Observable Analysis and Active Response Engine
+- [**414**Star][5d] [Shell] [thesecondsun/bashark](https://github.com/thesecondsun/bashark) Bash post exploitation toolkit
+- [**414**Star][23d] [Py] [sibson/redbeat](https://github.com/sibson/redbeat) RedBeat is a Celery Beat Scheduler that stores the scheduled tasks and runtime metadata in Redis.
+- [**414**Star][5d] [C] [samba-team/samba](https://github.com/samba-team/samba) he standard Windows interoperability suite of programs for Linux and Unix
+- [**414**Star][2y] [Py] [ridter/cve-2017-11882](https://github.com/ridter/cve-2017-11882) CVE-2017-11882 from
+- [**414**Star][3y] [pgaijin66/xss-payloads](https://github.com/pgaijin66/xss-payloads) List of advanced XSS payloads
+- [**414**Star][5m] [Java] [nccgroup/freddy](https://github.com/nccgroup/freddy) Automatically identify deserialisation issues in Java and .NET applications by using active and passive scans
+- [**414**Star][2y] [Py] [kvasirsecurity/kvasir](https://github.com/kvasirsecurity/kvasir) Penetration Test Data Management
+- [**414**Star][23d] [C#] [jbe2277/waf](https://github.com/jbe2277/waf) Win Application Framework (WAF) is a lightweight Framework that helps you to create well structured XAML Applications.
+- [**414**Star][5d] [Py] [dashingsoft/pyarmor](https://github.com/dashingsoft/pyarmor) A tool used to obfuscate python scripts, bind obfuscated scripts to fixed machine or expire obfuscated scripts.
+- [**414**Star][4d] [Py] [chef-koch/nsablocklist](https://github.com/chef-koch/nsablocklist) HOSTS file and research project to block all known NSA / GCHQ / C.I.A. / F.B.I. spying server
+- [**414**Star][10m] [Py] [autocracy/python-ipy](https://github.com/autocracy/python-ipy) IPy are a Python class and tools for handling of IPv4 and IPv6 addresses and networks. It is similar to Net::IP Perl module.
+- [**413**Star][25d] [Py] [epsylon/xsser](https://github.com/epsylon/xsser) Cross Site "Scripter" (aka XSSer) is an automatic -framework- to detect, exploit and report XSS vulnerabilities in web-based applications.
+- [**413**Star][3m] [C++] [avast/retdec-idaplugin](https://github.com/avast/retdec-idaplugin) RetDec plugin for IDA
+- [**413**Star][1y] [PHP] [wupco/weblogger](https://github.com/wupco/weblogger) 针对ctf线下赛流量抓取(php)、真实环境流量抓取分析的工具
+- [**413**Star][29d] [C++] [tenable/routeros](https://github.com/tenable/routeros) various tools and exploits developed while performing security research on MikroTik's RouterOS.
+- [**413**Star][5m] [Py] [stanislav-web/opendoor](https://github.com/stanislav-web/opendoor) OWASP WEB Directory Scanner
+- [**413**Star][3y] [prife/virtualappdoc](https://github.com/prife/virtualappdoc)
+- [**413**Star][4y] [Py] [ngalongc/autolocalprivilegeescalation](https://github.com/ngalongc/autolocalprivilegeescalation) An automated script that download potential exploit for linux kernel from exploitdb, and compile them automatically
+- [**413**Star][4y] [Java] [lukefalsina/grab-n-run](https://github.com/lukefalsina/grab-n-run) Grab’n Run, a simple and effective Java Library for Android projects to secure dynamic code loading.
+- [**413**Star][2y] [Py] [kromtech/s3-inspector](https://github.com/kromtech/s3-inspector) Tool to check AWS S3 bucket permissions
+- [**413**Star][5y] [Java] [jeremyh/jbcrypt](https://github.com/jeremyh/jbcrypt) A Java implementation of OpenBSD's Blowfish password hashing code
+- [**413**Star][2y] [C] [henkaku/henkaku](https://github.com/henkaku/henkaku) Homebrew enabler for PS Vita
+- [**413**Star][4y] [C++] [demi6od/smashing_the_browser](https://github.com/demi6od/smashing_the_browser) Smashing The Browser: From Vulnerability Discovery To Exploit
+- [**413**Star][9d] [C] [aarond10/https_dns_proxy](https://github.com/aarond10/https_dns_proxy) A lightweight DNS-over-HTTPS proxy.
+- [**412**Star][11m] [TS] [polymer/prpl-server](https://github.com/Polymer/prpl-server) An HTTP server for Node designed to serve PRPL apps in production.
+- [**412**Star][2y] [vasanthk/web-security-basics](https://github.com/vasanthk/web-security-basics) Web security concepts
+- [**412**Star][4m] [C] [hfiref0x/vboxhardenedloader](https://github.com/hfiref0x/vboxhardenedloader) VirtualBox VM detection mitigation loader
+- [**412**Star][2d] [Java] [batfish/batfish](https://github.com/batfish/batfish) Batfish is a network configuration analysis tool that can find bugs and guarantee the correctness of (planned or current) network configurations. It enables network engineers to rapidly and safely evolve their network, without fear of outages or security breaches.
+- [**412**Star][2y] [Py] [51x/whp](https://github.com/51x/whp) Micro$oft Windows Hacking Pack
+- [**411**Star][5m] [Ruby] [praetorian-code/purple-team-attack-automation](https://github.com/praetorian-code/purple-team-attack-automation) Praetorian's public release of our Metasploit automation of MITRE ATT&CK™ TTPs
+- [**411**Star][7y] [Java] [wg/scrypt](https://github.com/wg/scrypt) Java implementation of scrypt
+- [**411**Star][25d] [Py] [osnr/horrifying-pdf-experiments](https://github.com/osnr/horrifying-pdf-experiments)
+- [**411**Star][2y] [Py] [operatorequals/covertutils](https://github.com/operatorequals/covertutils) A framework for Backdoor development!
+- [**411**Star][4m] [ObjC] [lavabit/libdime](https://github.com/lavabit/libdime) The DIME resolver library and command line utilities.
+- [**411**Star][23d] [C++] [hoshimin/kernel-bridge](https://github.com/hoshimin/kernel-bridge) Windows kernel hacking framework, driver template, hypervisor and API written on C++
+- [**411**Star][3m] [Pascal] [felipedaragon/sandcat](https://github.com/felipedaragon/sandcat) An open-source, pentest and developer-oriented web browser, using the power of Lua
+- [**411**Star][9d] [Py] [corkami/collisions](https://github.com/corkami/collisions) Hash collisions and their exploitations
+- [**411**Star][3y] [C] [0x27/linux.mirai](https://github.com/0x27/linux.mirai) Leaked Linux.Mirai Source Code for Research/IoC Development Purposes
+- [**410**Star][9m] [Assembly] [mewmew/dissection](https://github.com/mewmew/dissection) The dissection of a simple "hello world" ELF binary.
+- [**410**Star][11m] [C] [titansec/openwaf](https://github.com/titansec/openwaf) Web security protection system based on openresty
+- [**410**Star][25d] [Go] [gcla/gowid](https://github.com/gcla/gowid) Compositional widgets for terminal user interfaces, written in Go, inspired by urwid.
+- [**410**Star][6m] [Py] [dnsviz/dnsviz](https://github.com/dnsviz/dnsviz) s a tool suite for analysis and visualization of Domain Name System (DNS) behavior, including its security extensions (DNSSEC)
+- [**410**Star][4m] [Shell] [d4rk007/redghost](https://github.com/d4rk007/redghost) Linux post exploitation framework written in bash designed to assist red teams in persistence, reconnaissance, privilege escalation and leaving no trace.
+- [**410**Star][3m] [C++] [cobaltfusion/debugviewpp](https://github.com/cobaltfusion/debugviewpp) DebugView++, collects, views, filters your application logs, and highlights information that is important to you!
+- [**410**Star][2y] [Py] [cloudburst/libheap](https://github.com/cloudburst/libheap) python library to examine ptmalloc (the glibc userland heap implementation)
+- [**409**Star][28d] [husnainfareed/awesome-ethical-hacking-resources](https://github.com/husnainfareed/Awesome-Ethical-Hacking-Resources)
+- [**409**Star][9m] [Py] [linklayer/pyvit](https://github.com/linklayer/pyvit) toolkit for interfacing with cars from Python. It aims to implement common hardware interfaces and protocols used in the automotive systems
+- [**409**Star][3m] [Py] [windsooon/cherry](https://github.com/Windsooon/cherry) text classification - no machine learning knowledge needed
+- [**409**Star][2y] [zyfworks/ssr-backup](https://github.com/zyfworks/ssr-backup) ShadowsocksR backups
+- [**409**Star][4d] [Py] [ytisf/pyexfil](https://github.com/ytisf/pyexfil) A Python Package for Data Exfiltration
+- [**409**Star][2y] [Py] [ojasookert/cve-2017-0785](https://github.com/ojasookert/cve-2017-0785) Blueborne CVE-2017-0785 Android information leak vulnerability
+- [**409**Star][2y] [Py] [nahamsec/jsparser](https://github.com/nahamsec/jsparser) using Tornado and JSBeautifier to parse relative URLs from JavaScript files
+- [**409**Star][5m] [Py] [itayc0hen/a-journey-into-radare2](https://github.com/itayc0hen/a-journey-into-radare2) A series of tutorials about radare2 framework from
+- [**409**Star][2m] [CSS] [angea/pocorgtfo](https://github.com/angea/pocorgtfo) a "PoC or GTFO" mirror with extra article index, direct links and clean PDFs.
+- [**408**Star][5d] [JS] [0vercl0k/cve-2019-11708](https://github.com/0vercl0k/cve-2019-11708) Full exploit chain (CVE-2019-11708 & CVE-2019-9810) against Firefox on Windows 64-bit.
+- [**408**Star][2y] [Py] [xapax/oscp](https://github.com/xapax/oscp)
+- [**408**Star][3y] [C] [robertyim/shadowsocksx](https://github.com/RobertYim/ShadowsocksX) Fork of shadowsocks-iOS
+- [**408**Star][7d] [C] [ufrisk/memprocfs](https://github.com/ufrisk/memprocfs) The Memory Process File System
+- [**408**Star][29d] [C++] [souhardya/uboat](https://github.com/souhardya/uboat) HTTP Botnet Project
+- [**408**Star][2y] [Py] [rub-syssec/kafl](https://github.com/rub-syssec/kafl) Code for the USENIX 2017 paper: kAFL: Hardware-Assisted Feedback Fuzzing for OS Kernels
+- [**408**Star][2y] [C++] [lyle-nel/siga](https://github.com/lyle-nel/siga) Population based metaheuristic for password cracking. Siga(Simple genetic algorithm)
+- [**408**Star][2y] [Java] [fourbrother/kstools](https://github.com/fourbrother/kstools) Android中自动爆破签名工具
+- [**408**Star][2y] [C] [devshane/zork](https://github.com/devshane/zork) The DUNGEON (Zork I) source
+- [**408**Star][8d] [Go] [cloudfoundry/gorouter](https://github.com/cloudfoundry/gorouter) CF Router
+- [**407**Star][1y] [C] [ww9210/linux_kernel_exploits](https://github.com/ww9210/linux_kernel_exploits) Repo for FUZE project. I will also publish some Linux kernel LPE exploits for various real world kernel vulnerabilities here. the samples are uploaded for education purposes for red and blue teams.
+- [**407**Star][15d] [Java] [spring-cloud/spring-cloud-security](https://github.com/spring-cloud/spring-cloud-security) Security concerns for distributed applications implemented in Spring
+- [**407**Star][3m] [PS] [officedev/o365-investigationtooling](https://github.com/officedev/o365-investigationtooling)
+- [**407**Star][7m] [Java] [nccgroup/burpsuitehttpsmuggler](https://github.com/nccgroup/burpsuitehttpsmuggler) A Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniques
+- [**407**Star][3y] [PHP] [naneau/php-obfuscator](https://github.com/naneau/php-obfuscator) A parsing PHP obfuscator
+- [**407**Star][8m] [Py] [mitrecnd/chopshop](https://github.com/mitrecnd/chopshop) Protocol Analysis/Decoder Framework
+- [**407**Star][8m] [kai5263499/osx-security-awesome](https://github.com/kai5263499/osx-security-awesome) A collection of OSX and iOS security resources
+- [**407**Star][18d] [Py] [bl4de/security-tools](https://github.com/bl4de/security-tools) Collection of small security tools created mostly in Python. CTFs, pentests and so on
+- [**407**Star][1m] [Ruby] [arkadiyt/aws_public_ips](https://github.com/arkadiyt/aws_public_ips) Fetch all public IP addresses tied to your AWS account. Works with IPv4/IPv6, Classic/VPC networking, and across all AWS services
+- [**406**Star][24d] [PHP] [spatie/ssl-certificate](https://github.com/spatie/ssl-certificate) A class to validate SSL certificates
+- [**406**Star][17d] [Py] [jiangxufeng/v2rayl](https://github.com/jiangxufeng/v2rayl) v2ray linux GUI客户端,支持订阅、vemss、ss等协议,自动更新订阅、检查版本更新
+- [**406**Star][1m] [C++] [wbenny/hvpp](https://github.com/wbenny/hvpp) hvpp is a lightweight Intel x64/VT-x hypervisor written in C++ focused primarily on virtualization of already running operating system
+- [**406**Star][1y] [Java] [testwhat/smaliex](https://github.com/testwhat/smaliex) A wrapper to get de-optimized dex from odex/oat/vdex.
+- [**406**Star][9d] [Rust] [m4b/goblin](https://github.com/m4b/goblin) An impish, cross-platform binary parsing crate, written in Rust
+- [**406**Star][1y] [Py] [fossfreedom/indicator-sysmonitor](https://github.com/fossfreedom/indicator-sysmonitor) Ubuntu application indicator to show various system parameters
+- [**406**Star][3y] [Py] [breenmachine/httpscreenshot](https://github.com/breenmachine/httpscreenshot)
+- [**405**Star][1m] [Py] [lanmaster53/recon-ng](https://github.com/lanmaster53/recon-ng) Open Source Intelligence gathering tool aimed at reducing the time spent harvesting information from open sources.
+- [**405**Star][29d] [Shell] [s0md3v/diggy](https://github.com/s0md3v/Diggy) Extract endpoints from apk files.
+- [**405**Star][3d] [Py] [crytic/slither](https://github.com/crytic/slither) Static Analyzer for Solidity
+- [**405**Star][3y] [Py] [xitu/macos-security-and-privacy-guide](https://github.com/xitu/macos-security-and-privacy-guide) A practical guide to securing macOS.
+- [**405**Star][1y] [C++] [vah13/extracttvpasswords](https://github.com/vah13/extracttvpasswords) tool to extract passwords from TeamViewer memory using Frida
+- [**405**Star][3m] [C#] [shack2/supersqlinjectionv1](https://github.com/shack2/supersqlinjectionv1) 超级SQL注入工具(SSQLInjection)是一款基于HTTP协议自组包的SQL注入工具,采用C#开发,直接操作TCP会话来进行HTTP交互,支持出现在HTTP协议任意位置的SQL注入,支持各种类型的SQL注入,支持HTTPS模式注入;支持以盲注、错误显示、Union注入等方式来获取数据;支持Access/MySQL/SQLServer/Oracle/PostgreSQL/DB2/SQLite/Informix等数据库;支持手动灵活的进行SQL注入绕过,可自定义进行字符替换等绕过注入防护。本工具为渗透测试人员、信息安全工程师等掌握SQL注入技能的人员设计,需要使用人员对SQL注入有一定了解。
+- [**405**Star][5y] [Py] [paloaltonetworks/wirelurkerdetector](https://github.com/paloaltonetworks/wirelurkerdetector) Script for detecting the WireLurker malware family
+- [**405**Star][5y] [ObjC] [mp0w/ios-headers](https://github.com/mp0w/ios-headers) iOS 5.0/5.1/6.0/6.1/7.0/7.1/8.0/8.1 Headers of All Frameworks (private and not) + SpringBoard
+- [**405**Star][1y] [C] [coalfire-research/ios-11.1.2-15b202-jailbreak](https://github.com/coalfire-research/ios-11.1.2-15b202-jailbreak) iOS 11.1.2 (15B202) Jailbreak
+- [**404**Star][3m] [C] [thundercls/xanalyzer](https://github.com/thundercls/xanalyzer) xAnalyzer plugin for x64dbg
+- [**404**Star][5y] [Ruby] [svent/jsdetox](https://github.com/svent/jsdetox) A Javascript malware analysis tool
+- [**404**Star][3y] [C++] [iaik/rowhammerjs](https://github.com/iaik/rowhammerjs) A Remote Software-Induced Fault Attack in JavaScript
+- [**404**Star][17d] [Java] [google/closure-templates](https://github.com/google/closure-templates) A client- and server-side templating system that helps you dynamically build reusable HTML and UI elements
+- [**404**Star][1y] [Go] [chaitin/cloudwalker](https://github.com/chaitin/cloudwalker) CloudWalker Platform
+- [**404**Star][2y] [JS] [cagataycali/xss-listener](https://github.com/cagataycali/xss-listener)
+- [**404**Star][2y] [Makefile] [bettermanbao/openwrt-shadowsocksr-libev-full](https://github.com/bettermanbao/openwrt-shadowsocksr-libev-full) ShadowsocksR-libev-full for OpenWrt
+- [**403**Star][2y] [Ruby] [fuzzapi/fuzzapi](https://github.com/Fuzzapi/fuzzapi) Fuzzapi is a tool used for REST API pentesting and uses API_Fuzzer gem
+- [**403**Star][5y] [vk496/linset](https://github.com/vk496/linset) Evil Twin Attack Bash script
+- [**403**Star][2y] [C++] [rootm0s/injectors](https://github.com/rootm0s/injectors)
+- [**403**Star][23d] [Py] [nsmfoo/antivmdetection](https://github.com/nsmfoo/antivmdetection) Script to create templates to use with VirtualBox to make vm detection harder
+- [**403**Star][9d] [JS] [handshake-org/hsd](https://github.com/handshake-org/hsd) Handshake Daemon & Full Node
+- [**403**Star][9m] [C] [darthton/hyperbone](https://github.com/darthton/hyperbone) Minimalistic VT-x hypervisor with hooks
+- [**403**Star][2y] [PS] [danielbohannon/invoke-dosfuscation](https://github.com/danielbohannon/invoke-dosfuscation) Cmd.exe Command Obfuscation Generator & Detection Test Harness
+- [**403**Star][10m] [Py] [christruncer/pentestscripts](https://github.com/christruncer/pentestscripts) Scripts that are useful for me on pen tests
+- [**403**Star][3y] [CSS] [710leo/zvuldrill](https://github.com/710leo/zvuldrill) Web漏洞演练平台
+- [**402**Star][2m] [C] [liudf0716/xkcptun](https://github.com/liudf0716/xkcptun) xkcptun is kcp tunnel for OpenWRT&LEDE, implemented in c language
+- [**402**Star][3y] [C#] [zenlulz/memorysharp](https://github.com/zenlulz/memorysharp) A C# based memory editing library targeting Windows applications, offering various functions to extract and inject data and codes into remote processes to allow interoperability.
+- [**402**Star][5y] [Py] [syworks/waidps](https://github.com/syworks/waidps) Wireless Auditing, Intrusion Detection & Prevention System
+- [**402**Star][3y] [C++] [rwfpl/rewolf-wow64ext](https://github.com/rwfpl/rewolf-wow64ext) Helper library for x86 programs that runs under WOW64 layer on x64 versions of Microsoft Windows operating systems.
+- [**402**Star][4m] [Java] [megatronking/netbare](https://github.com/megatronking/netbare) Net packets capture & injection library designed for Android
+- [**402**Star][2y] [C] [fuzion24/androidkernelexploitationplayground](https://github.com/fuzion24/androidkernelexploitationplayground)
+- [**402**Star][10m] [Go] [evilsocket/shellz](https://github.com/evilsocket/shellz) shellz is a small utility to track and control your ssh, telnet, web and custom shells and tunnels.
+- [**402**Star][4y] [Py] [1an0rmus/tekdefense-automater](https://github.com/1an0rmus/tekdefense-automater) Automater - IP URL and MD5 OSINT Analysis
+- [**401**Star][22d] [HTML] [w3c/webappsec](https://github.com/w3c/webappsec) Web Application Security Working Group repo
+- [**401**Star][4y] [Py] [sleventyeleven/linuxprivchecker](https://github.com/sleventyeleven/linuxprivchecker) a Linux Privilege Escalation Check Script
+- [**401**Star][21d] [ObjC] [sap/macos-enterprise-privileges](https://github.com/sap/macos-enterprise-privileges) For Mac users in an Enterprise environment this app ensures secure environment and yet gives the User control over administration of their machine by elevating their level of access to Administrator privilege on macOS X. Users can set the time frame using Preferences to perform specific tasks such as install or remove an application.
+- [**401**Star][6y] [Java] [isecpartners/introspy-android](https://github.com/isecpartners/introspy-android) Security profiling for blackbox Android
+- [**401**Star][3d] [JS] [aztecprotocol/aztec](https://github.com/aztecprotocol/aztec) Public repository for the AZTEC protocol
+- [**400**Star][1m] [Py] [fbngrm/matroschka](https://github.com/fbngrm/Matroschka) Python steganography tool to hide images or text in images
+- [**400**Star][5d] [Java] [spring-cloud/spring-cloud-gcp](https://github.com/spring-cloud/spring-cloud-gcp) Integration for Google Cloud Platform APIs with Spring
+- [**400**Star][11m] [skyblueeternal/thinkphp-rce-poc-collection](https://github.com/skyblueeternal/thinkphp-rce-poc-collection) thinkphp v5.x 远程代码执行漏洞-POC集合
+- [**400**Star][1y] [Py] [jpaulmora/pyrit](https://github.com/jpaulmora/pyrit) The famous WPA precomputed cracker, Migrated from Google.
+- [**400**Star][12m] [Py] [dstmath/frida-unpack](https://github.com/dstmath/frida-unpack) unpack script based on frida
+- [**399**Star][6d] [C++] [lifting-bits/remill](https://github.com/lifting-bits/remill) Library for lifting of x86, amd64, and aarch64 machine code to LLVM bitcode
+- [**399**Star][2y] [Java] [pqpo/inputmethodholder](https://github.com/pqpo/inputmethodholder) A keyboard listener for Android which by hooking the InputMethodManager. 通过hook监听系统键盘显示
+- [**399**Star][2y] [Py] [ezelf/cve-2018-9995_dvr_credentials](https://github.com/ezelf/cve-2018-9995_dvr_credentials) (CVE-2018-9995) Get DVR Credentials
+- [**399**Star][11m] [JS] [eviltik/evilscan](https://github.com/eviltik/evilscan) NodeJS Simple Network Scanner
+- [**399**Star][4d] [Go] [dan-v/rattlesnakeos-stack](https://github.com/dan-v/rattlesnakeos-stack) Build your own privacy and security focused Android OS in the cloud on a continuous basis with OTA updates.
+- [**399**Star][5m] [Py] [cea-sec/sibyl](https://github.com/cea-sec/sibyl) A Miasm2 based function divination.
+- [**399**Star][3y] [Java] [ac-pm/sslunpinning_xposed](https://github.com/ac-pm/sslunpinning_xposed) Android Xposed Module to bypass SSL certificate validation (Certificate Pinning).
+- [**399**Star][2y] [JS] [0xdea/frida-scripts](https://github.com/0xdea/frida-scripts) A collection of my Frida.re instrumentation scripts to facilitate reverse engineering of mobile apps.
+- [**398**Star][3y] [Py] [sekoialab/fastir_collector](https://github.com/sekoialab/fastir_collector) collects different artefacts on live Windows and records the results in csv or json files. With the analyses of these artefacts, an early compromission can be detected.
+- [**398**Star][3y] [C] [kablaa/ctf-workshop](https://github.com/kablaa/ctf-workshop) Challenges for Binary Exploitation Workshop
+- [**398**Star][1y] [Py] [grayddq/publicmonitors](https://github.com/grayddq/publicmonitors) 对公网IP列表进行端口服务扫描,发现周期内的端口服务变化情况和弱口令安全风险
+- [**398**Star][4d] [C] [freifunk-gluon/gluon](https://github.com/freifunk-gluon/gluon) a modular framework for creating OpenWrt-based firmwares for wireless mesh nodes
+- [**398**Star][4m] [PHP] [floedesigntechnologies/phpcs-security-audit](https://github.com/floedesigntechnologies/phpcs-security-audit) phpcs-security-audit is a set of PHP_CodeSniffer rules that finds vulnerabilities and weaknesses related to security in PHP code
+- [**398**Star][3m] [Go] [cloudflare/mitmengine](https://github.com/cloudflare/mitmengine) A MITM (monster-in-the-middle) detection tool. Used to build MALCOLM:
+- [**397**Star][2m] [Py] [x899/chrome_password_grabber](https://github.com/x899/chrome_password_grabber) Get unencrypted 'Saved Password' from Google Chrome
+- [**397**Star][2m] [HTML] [thinkst/canarytokens](https://github.com/thinkst/canarytokens) Canarytokens helps track activity and actions on your network.
+- [**397**Star][3y] [Scala] [philwantsfish/shard](https://github.com/philwantsfish/shard) A command line tool to detect shared passwords
+- [**397**Star][3m] [ph055a/osint-collection](https://github.com/ph055a/osint-collection) Maintained collection of OSINT related resources. (All Free & Actionable)
+- [**397**Star][3m] [Py] [mushorg/glastopf](https://github.com/mushorg/glastopf) Web Application Honeypot
+- [**397**Star][3m] [Py] [duo-labs/cloudtracker](https://github.com/duo-labs/cloudtracker) CloudTracker helps you find over-privileged IAM users and roles by comparing CloudTrail logs with current IAM policies.
+- [**396**Star][14d] [Java] [spring-cloud/spring-cloud-aws](https://github.com/spring-cloud/spring-cloud-aws) Integration for Amazon Web Services APIs with Spring
+- [**396**Star][2y] [Py] [se55i0n/dbscanner](https://github.com/se55i0n/dbscanner) 自动扫描内网常见sql、no-sql数据库脚本(mysql、mssql、oracle、postgresql、redis、mongodb、memcached、elasticsearch),包含未授权访问及常规弱口令检测
+- [**396**Star][2y] [Java] [routerkeygen/routerkeygenandroid](https://github.com/routerkeygen/routerkeygenandroid) Router Keygen generate default WPA/WEP keys for several routers.
+- [**396**Star][1y] [Go] [riobard/go-shadowsocks2](https://github.com/riobard/go-shadowsocks2) Experimental Shadowsocks in Go. Stable fork at
+- [**396**Star][3d] [Py] [moloch--/rootthebox](https://github.com/moloch--/rootthebox) A Game of Hackers (CTF Scoreboard & Game Manager)
+- [**396**Star][6y] [Py] [milo2012/osintstalker](https://github.com/milo2012/osintstalker) osintstalker
+- [**396**Star][1m] [Logos] [limneos/classdump-dyld](https://github.com/limneos/classdump-dyld) Class-dump any Mach-o file without extracting it from dyld_shared_cache
+- [**396**Star][3y] [Py] [ioactive/jdwp-shellifier](https://github.com/ioactive/jdwp-shellifier) be used by pentesters against active JDWP service, in order to gain Remote Code Execution.
+- [**396**Star][7m] [HTML] [gexos/hacking-tools-repository](https://github.com/gexos/hacking-tools-repository) A list of security/hacking tools that have been collected from the internet. Suggestions are welcomed.
+- [**396**Star][2y] [C] [fireyfly/pixd](https://github.com/fireyfly/pixd) visualizing binary data using a colour palette
+- [**396**Star][10m] [Ruby] [dreadlocked/drupalgeddon2](https://github.com/dreadlocked/drupalgeddon2) Exploit for Drupal v7.x + v8.x (Drupalgeddon 2 / CVE-2018-7600 / SA-CORE-2018-002)
+- [**396**Star][2y] [PS] [cryps1s/darksurgeon](https://github.com/cryps1s/darksurgeon) DARKSURGEON is a Windows packer project to empower incident response, digital forensics, malware analysis, and network defense.
+- [**396**Star][4m] [ansjdnakjdnajkd/ios](https://github.com/ansjdnakjdnajkd/ios) Most usable tools for iOS penetration testing
+- [**395**Star][2y] [C++] [hatriot/token-priv](https://github.com/hatriot/token-priv) Token Privilege Research
+- [**395**Star][2d] [Go] [graniet/operative-framework](https://github.com/graniet/operative-framework) operative framework is a OSINT investigation framework, you can interact with multiple targets, execute multiple modules, create links with target, export rapport to PDF file, add note to target or results, interact with RESTFul API, write your own modules.
+- [**395**Star][2y] [JS] [derjanb/hamiyoca](https://github.com/derjanb/hamiyoca) Hash me if you can - A Bitcoin miner that supports pure Javscript, WebWorker and WebGL mining.
+- [**395**Star][4y] [PHP] [breakthenet/hackme-sql-injection-challenges](https://github.com/breakthenet/hackme-sql-injection-challenges) Pen test your "friend's" online MMORPG game - specific focus, sql injection opportunities
+- [**394**Star][11d] [Makefile] [kuoruan/openwrt-v2ray](https://github.com/kuoruan/openwrt-v2ray) V2Ray for OpenWrt
+- [**394**Star][6d] [Py] [eerkunt/terraform-compliance](https://github.com/eerkunt/terraform-compliance) a lightweight, security focused, BDD test framework against terraform.
+- [**394**Star][1y] [sweis/crypto-might-not-suck](https://github.com/sweis/crypto-might-not-suck) List of crypto projects that might not suck
+- [**394**Star][4y] [C++] [sektioneins/suidguard](https://github.com/sektioneins/suidguard) SUIDGuard - a TrustedBSD Kernel Extension that adds mitigations to protect SUID/SGID processes a bit more
+- [**394**Star][11m] [Swift] [ibm/mac-ibm-enrollment-app](https://github.com/ibm/mac-ibm-enrollment-app) The Mac@IBM enrollment app makes setting up macOS with Jamf Pro more intuitive for users and easier for IT. The application offers IT admins the ability to gather additional information about their users during setup, allows users to customize their enrollment by selecting apps or bundles of apps to install during setup, and provides users with …
+- [**394**Star][1y] [hillbrad/u2freviews](https://github.com/hillbrad/u2freviews) Reviews of U2F devices
+- [**394**Star][1y] [Py] [cr4shcod3/pureblood](https://github.com/cr4shcod3/pureblood) A Penetration Testing Framework created for Hackers / Pentester / Bug Hunter
+- [**393**Star][11m] [Py] [mitre/multiscanner](https://github.com/mitre/multiscanner) Modular file scanning/analysis framework
+- [**393**Star][1y] [Go] [tomnomnom/waybackurls](https://github.com/tomnomnom/waybackurls) Fetch all the URLs that the Wayback Machine knows about for a domain
+- [**393**Star][1y] [Shell] [killswitch-gui/cobaltstrike-toolkit](https://github.com/killswitch-gui/cobaltstrike-toolkit) Some useful scripts for CobaltStrike
+- [**393**Star][1m] [YARA] [guelfoweb/peframe](https://github.com/guelfoweb/peframe) PEframe is a open source tool to perform static analysis on Portable Executable malware and malicious MS Office documents.
+- [**393**Star][2y] [Java] [federicodotta/java-deserialization-scanner](https://github.com/federicodotta/java-deserialization-scanner) All-in-one plugin for Burp Suite for the detection and the exploitation of Java deserialization vulnerabilities
+- [**393**Star][2y] [Py] [fate0/pychrome](https://github.com/fate0/pychrome) A Python Package for the Google Chrome Dev Protocol [threading base]
+- [**393**Star][12m] [Py] [essandess/isp-data-pollution](https://github.com/essandess/isp-data-pollution) ISP Data Pollution to Protect Private Browsing History with Obfuscation
+- [**393**Star][1m] [Py] [clr2of8/dpat](https://github.com/clr2of8/dpat) Domain Password Audit Tool for Pentesters
+- [**393**Star][2y] [JS] [chpmrc/zero-width-chrome-extension](https://github.com/chpmrc/zero-width-chrome-extension) Replace scary zero-width characters with funny emojis
+- [**392**Star][4y] [Py] [zhengmin1989/rop_step_by_step](https://github.com/zhengmin1989/rop_step_by_step) 一步一步学ROP
+- [**392**Star][7m] [Py] [jm33-m0/mec](https://github.com/jm33-m0/mec) for concurrent exploiting
+- [**392**Star][12m] [C++] [googleprojectzero/functionsimsearch](https://github.com/googleprojectzero/functionsimsearch) Some C++ example code to demonstrate how to perform code similarity searches using SimHashing.
+- [**392**Star][1y] [C#] [squalr/squalr](https://github.com/squalr/squalr) performant Memory Editing software that allows users to create and share cheats in their windows desktop games
+- [**392**Star][7m] [Py] [savon-noir/python-libnmap](https://github.com/savon-noir/python-libnmap) libnmap is a python library to run nmap scans, parse and diff scan results. It supports python 2.6 up to 3.4. It's wonderful.
+- [**392**Star][7m] [Py] [repoog/gitprey](https://github.com/repoog/gitprey) Searching sensitive files and contents in GitHub associated to company name or other key words
+- [**392**Star][1m] [Py] [nginxinc/nginx-ldap-auth](https://github.com/nginxinc/nginx-ldap-auth) Example of LDAP authentication using ngx_http_auth_request_module
+- [**392**Star][3d] [Scala] [lihaoyi/utest](https://github.com/lihaoyi/utest) A simple testing framework for Scala
+- [**392**Star][3y] [C#] [harmj0y/keethief](https://github.com/harmj0y/keethief) extraction of KeePass 2.X key material from memory, as well as the backdooring and enumeration of the KeePass trigger system.
+
+
+- [**392**Star][12d] [PS] [d0nkeys/redteam](https://github.com/d0nkeys/redteam) Red Team Scripts
+- [**392**Star][12m] [C++] [cseagle/sk3wldbg](https://github.com/cseagle/sk3wldbg) Debugger plugin for IDA Pro backed by the Unicorn Engine
+- [**392**Star][1y] [Py] [chrismaddalena/odin](https://github.com/chrismaddalena/odin) Automated network asset, email, and social media profile discovery and cataloguing.
+- [**391**Star][9m] [Py] [williballenthin/python-evtx](https://github.com/williballenthin/python-evtx) Pure Python parser for recent Windows Event Log files (.evtx)
+- [**391**Star][2y] [r0ysue/osg-translationteam](https://github.com/r0ysue/osg-translationteam) 看雪iOS安全小组的翻译团队作品集合,如有勘误,欢迎斧正!
+- [**391**Star][10m] [Go] [mozilla/masche](https://github.com/mozilla/masche) MIG Memory Forensic library
+- [**391**Star][1y] [Go] [mauri870/ransomware](https://github.com/mauri870/ransomware) A POC Windows crypto-ransomware (Academic)
+- [**391**Star][3y] [JS] [mandatoryprogrammer/judasdns](https://github.com/mandatoryprogrammer/judasdns) Nameserver DNS poisoning attacks made easy
+- [**391**Star][7d] [C] [hasherezade/hollows_hunter](https://github.com/hasherezade/hollows_hunter) Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
+- [**391**Star][2y] [Py] [conorpp/btproxy](https://github.com/conorpp/btproxy) Man in the Middle analysis tool for Bluetooth.
+- [**391**Star][6m] [JS] [capacitorset/box-js](https://github.com/capacitorset/box-js) A tool for studying JavaScript malware.
+- [**391**Star][2m] [Py] [bitbrute/evillimiter](https://github.com/bitbrute/evillimiter) Tool that limits bandwidth of devices on the same network without access.
+- [**390**Star][28d] [ym2011/securitymanagement](https://github.com/ym2011/securitymanagement) share with you some knowledge for Information Security Management,ISO27001,Information Security Class Protect ,SDLC,etc.
+- [**390**Star][29d] [Shell] [yadominjinta/atilo](https://github.com/yadominjinta/atilo) Linux installer for termux
+- [**390**Star][2y] [Shell] [und3rf10w/kali-anonsurf](https://github.com/und3rf10w/kali-anonsurf) A port of ParrotSec's stealth and anonsurf modules to Kali Linux
+- [**390**Star][14d] [Shell] [th3xace/sudo_killer](https://github.com/th3xace/sudo_killer) A tool to identify and exploit sudo rules' misconfigurations and vulnerabilities within sudo
+- [**390**Star][2y] [C++] [swwwolf/wdbgark](https://github.com/swwwolf/wdbgark) WinDBG Anti-RootKit Extension
+- [**390**Star][3y] [stamparm/eternalrocks](https://github.com/stamparm/eternalrocks) EternalRocks worm
+- [**390**Star][6y] [C++] [p0sixspwn/p0sixspwn](https://github.com/p0sixspwn/p0sixspwn) Released in accordance with GPL licensing.
+- [**390**Star][1y] [C] [laurelai/decompile-dump](https://github.com/laurelai/decompile-dump) Partial stuxnet source decompiled with hexrays, if anyone has better decompile tools feel free to contribute better versions.
+- [**389**Star][9m] [Shell] [microsoft/linux-vm-tools](https://github.com/microsoft/linux-vm-tools) Hyper-V Linux Guest VM Enhancements
+- [**389**Star][10m] [Py] [rustyshackleford221/oscp-prep](https://github.com/rustyshackleford221/oscp-prep) A comprehensive guide/material for anyone looking to get into infosec or take the OSCP exam
+- [**389**Star][26d] [Py] [paulgclark/waveconverter](https://github.com/paulgclark/waveconverter) An Open Source tool for RF reverse engineering.
+- [**389**Star][12m] [Shell] [mthbernardes/sshlooter](https://github.com/mthbernardes/sshlooter) Script to steal passwords from ssh.
+- [**389**Star][2m] [milabs/awesome-linux-rootkits](https://github.com/milabs/awesome-linux-rootkits) awesome-linux-rootkits
+- [**389**Star][1y] [JS] [linushenze/webkit-regex-exploit](https://github.com/linushenze/webkit-regex-exploit)
+- [**389**Star][4y] [ObjC] [kpwn/tpwn](https://github.com/kpwn/tpwn) xnu local privilege escalation via cve-2015-???? & cve-2015-???? for 10.10.5, 0day at the time | poc or gtfo
+- [**389**Star][23d] [JS] [joeferner/node-http-mitm-proxy](https://github.com/joeferner/node-http-mitm-proxy) HTTP Man In The Middle (MITM) Proxy
+- [**389**Star][16d] [Py] [idaholab/malcolm](https://github.com/idaholab/malcolm) Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files) and Zeek logs.
+- [**389**Star][6m] [C++] [hasherezade/dll_to_exe](https://github.com/hasherezade/dll_to_exe) Converts a DLL into EXE
+- [**389**Star][3y] [Py] [gstarnberger/uncompyle](https://github.com/gstarnberger/uncompyle) Python decompiler
+- [**389**Star][25d] [C] [coolervoid/0d1n](https://github.com/coolervoid/0d1n) Web security tool to make fuzzing at HTTP/S, Beta
+- [**389**Star][2d] [C#] [collinbarrett/filterlists](https://github.com/collinbarrett/filterlists) independent, comprehensive directory of filter and host lists for advertisements, trackers, malware, and annoyances.
+- [**389**Star][16d] [Py] [bdcht/amoco](https://github.com/bdcht/amoco) yet another tool for analysing binaries
+- [**389**Star][3m] [Go] [alphasoc/flightsim](https://github.com/alphasoc/flightsim) A utility to generate malicious network traffic and evaluate controls
+- [**388**Star][2y] [PS] [shellntel/scripts](https://github.com/shellntel/scripts) A collection of scripts from the security professionals at www.shellntel.com.
+- [**388**Star][2y] [Perl] [rapid7/metasploit-vulnerability-emulator](https://github.com/rapid7/metasploit-vulnerability-emulator) Created by Jin Qian via the GitHub Connector
+- [**388**Star][2y] [Py] [mricon/rev-proxy-grapher](https://github.com/mricon/rev-proxy-grapher) Reverse proxy grapher
+- [**388**Star][3y] [Py] [mandatoryprogrammer/cloudflare_enum](https://github.com/mandatoryprogrammer/cloudflare_enum) Cloudflare DNS Enumeration Tool for Pentesters
+- [**387**Star][3m] [PS] [cyberark/aclight](https://github.com/cyberark/ACLight) A script for advanced discovery of Privileged Accounts - includes Shadow Admins
+- [**387**Star][1m] [tobiasbueschel/awesome-pokemon](https://github.com/tobiasbueschel/awesome-pokemon) A curated list of awesome Pokémon & Pokémon GO resources, tools and more.
+- [**387**Star][1m] [Java] [tiagorlampert/saint](https://github.com/tiagorlampert/saint) a Spyware Generator for Windows systems written in Java
+- [**387**Star][1m] [Py] [riotgames/cloud-inquisitor](https://github.com/riotgames/cloud-inquisitor) Enforce ownership and data security within AWS
+- [**387**Star][3y] [Py] [funkandwagnalls/ranger](https://github.com/funkandwagnalls/ranger) A tool for security professionals to access and interact with remote Microsoft Windows based systems.
+- [**387**Star][2y] [Py] [frizb/vanquish](https://github.com/frizb/vanquish) Vanquish is Kali Linux based Enumeration Orchestrator. Vanquish leverages the opensource enumeration tools on Kali to perform multiple active information gathering phases.
+- [**387**Star][4m] [Ruby] [elastic/puppet-elasticsearch](https://github.com/elastic/puppet-elasticsearch) Elasticsearch Puppet module
+- [**387**Star][13d] [Ruby] [digininja/cewl](https://github.com/digininja/cewl) CeWL is a Custom Word List Generator
+- [**387**Star][3m] [JS] [710leo/urlooker](https://github.com/710leo/urlooker) 企业级url监控
+- [**387**Star][3y] [Py] [36hours/idaemu](https://github.com/36hours/idaemu) an IDA Pro Plugin use for emulating code in IDA Pro.
+- [**386**Star][3y] [ObjC] [kpwn/yalu](https://github.com/kpwn/yalu) incomplete ios 8.4.1 jailbreak by Kim Jong Cracks (8.4.1 codesign & sandbox bypass w/ LPE to root & untether)
+- [**386**Star][2y] [Java] [irsdl/iis-shortname-scanner](https://github.com/irsdl/iis-shortname-scanner) latest version of scanners for IIS short filename (8.3) disclosure vulnerability
+- [**386**Star][12m] [Assembly] [hasherezade/pe_to_shellcode](https://github.com/hasherezade/pe_to_shellcode) Converts PE into a shellcode
+- [**386**Star][7m] [Py] [google/upvote](https://github.com/google/upvote) A multi-platform binary whitelisting solution
+- [**386**Star][15d] [HTML] [blabla1337/skf-flask](https://github.com/blabla1337/skf-flask) Security Knowledge Framework (SKF) Python Flask / Angular project
+- [**386**Star][5m] [C#] [bitsadmin/nopowershell](https://github.com/bitsadmin/nopowershell) PowerShell rebuilt in C# for Red Teaming purposes
+- [**385**Star][11d] [Haskell] [crytic/echidna](https://github.com/crytic/echidna) Ethereum fuzz testing framework
+- [**385**Star][5m] [Py] [ynvb/die](https://github.com/ynvb/die) an IDA python plugin designed to enrich IDA`s static analysis with dynamic data
+- [**385**Star][9d] [Py] [maqp/tfc](https://github.com/maqp/tfc) Tinfoil Chat - Onion-routed, endpoint secure messaging system
+- [**385**Star][2y] [m0l1ce/wooyunallbugs](https://github.com/m0l1ce/wooyunallbugs) wooyun_all_bugs
+- [**385**Star][1y] [Ruby] [aphyr/tund](https://github.com/aphyr/tund) SSH reverse tunnel daemon
+- [**384**Star][8m] [C] [zerosum0x0/smbdoor](https://github.com/zerosum0x0/smbdoor) Windows kernel backdoor via registering a malicious SMB handler
+- [**384**Star][7m] [tidesec/tide](https://github.com/tidesec/tide) 目前实现了网络空间资产探测、指纹检索、漏洞检测、漏洞全生命周期管理、poc定向检测、暗链检测、挂马监测、敏感字检测、DNS监测、网站可用性监测、漏洞库管理、安全预警等等~
+- [**384**Star][1y] [C++] [stanfordpl/x64asm](https://github.com/stanfordpl/x64asm) x86-64 assembler library
+- [**384**Star][4y] [PHP] [spiderlabs/mcir](https://github.com/spiderlabs/mcir) The Magical Code Injection Rainbow! MCIR is a framework for building configurable vulnerability testbeds. MCIR is also a collection of configurable vulnerability testbeds.
+- [**384**Star][2y] [Assembly] [sgayou/kindle-5.6.5-jailbreak](https://github.com/sgayou/kindle-5.6.5-jailbreak) Kindle 5.6.5 exploitation tools.
+- [**384**Star][3y] [Py] [sensepost/dns-shell](https://github.com/sensepost/dns-shell) DNS-Shell is an interactive Shell over DNS channel
+- [**384**Star][1m] [C#] [microsoft/binskim](https://github.com/microsoft/binskim) A binary static analysis tool that provides security and correctness results for Windows Portable Executable and *nix ELF binary formats
+- [**384**Star][2m] [C++] [llvm-mirror/lldb](https://github.com/llvm-mirror/lldb) Mirror of official lldb git repository located at
+- [**384**Star][9m] [Ruby] [hatbashbr/hatcloud](https://github.com/hatbashbr/hatcloud) discontinued
+- [**384**Star][2y] [C++] [equalitie/np1sec](https://github.com/equalitie/np1sec) A library for off-the-record (deniable authenticated forward secure confidential) multiparty messaging
+- [**383**Star][6d] [Makefile] [crifan/scientific_network_summary](https://github.com/crifan/scientific_network_summary) 总结关于科学上网的概念方法及工具
+- [**383**Star][3y] [Ruby] [stephenfewer/grinder](https://github.com/stephenfewer/grinder) Grinder is a system to automate the fuzzing of web browsers and the management of a large number of crashes.
+- [**383**Star][25d] [C++] [simsong/bulk_extractor](https://github.com/simsong/bulk_extractor) bulk_extractor
+- [**383**Star][1y] [JS] [securing/gattacker](https://github.com/securing/gattacker) A Node.js package for BLE (Bluetooth Low Energy) security assessment using Man-in-the-Middle and other attacks
+- [**383**Star][2m] [Py] [ptresearch/inteltxe-poc](https://github.com/ptresearch/inteltxe-poc) Intel Management Engine JTAG Proof of Concept
+- [**383**Star][3m] [PHP] [msurguy/honeypot](https://github.com/msurguy/honeypot) a simple and effective way to defer some of the spam bots that come to your site
+- [**383**Star][1y] [HTML] [maestron/reverse-engineering-tutorials](https://github.com/maestron/reverse-engineering-tutorials) Reverse Engineering Tutorials
+- [**383**Star][1y] [Java] [davidbuchanan314/nxloader](https://github.com/davidbuchanan314/nxloader) My first Android app: Launch Fusée Gelée payloads from stock Android (CVE-2018-6242)
+- [**382**Star][22d] [PHP] [terrylinooo/shieldon](https://github.com/terrylinooo/shieldon) Web Application Firewall (WAF) for PHP.
+- [**382**Star][30d] [Py] [stamparm/dsss](https://github.com/stamparm/dsss) Damn Small SQLi Scanner
+- [**382**Star][2m] [Py] [sab0tag3d/siet](https://github.com/sab0tag3d/siet) Smart Install Exploitation Tool
+- [**382**Star][3m] [Py] [p1r06u3/opencanary_web](https://github.com/p1r06u3/opencanary_web) The web management platform of honeypot
+- [**382**Star][2y] [Java] [nickstadb/barmie](https://github.com/nickstadb/barmie) enumerating and attacking Java RMI (Remote Method Invocation) services.
+- [**382**Star][2m] [Shell] [kabachook/k8s-security](https://github.com/kabachook/k8s-security) Kubernetes security notes and best practices
+- [**382**Star][2y] [Py] [fireeye/reelphish](https://github.com/fireeye/reelphish)
+- [**382**Star][1y] [Py] [ex0dus-0x/brut3k1t](https://github.com/ex0dus-0x/brut3k1t) security-oriented bruteforce framework
+- [**382**Star][1m] [Go] [cretz/bine](https://github.com/cretz/bine) Go library for accessing and embedding Tor clients and servers
+- [**381**Star][28d] [C++] [0x09al/rdpthief](https://github.com/0x09al/rdpthief) Extracting Clear Text Passwords from mstsc.exe using API Hooking.
+- [**381**Star][2m] [thejambo/awesome-testing](https://github.com/thejambo/awesome-testing) A curated list of testing resources
+- [**381**Star][4y] [Py] [sensepost/snoopy-ng](https://github.com/sensepost/snoopy-ng) modular digital terrestrial tracking framework
+- [**381**Star][28d] [JS] [nccgroup/tracy](https://github.com/nccgroup/tracy) A tool designed to assist with finding all sinks and sources of a web application and display these results in a digestible manner.
+- [**381**Star][2m] [Jupyter Notebook] [microsoft/windowsdefenderatp-hunting-queries](https://github.com/microsoft/windowsdefenderatp-hunting-queries) Sample queries for Advanced hunting in Microsoft Defender ATP
+- [**381**Star][1y] [C] [markus-go/bonesi](https://github.com/markus-go/bonesi) BoNeSi - the DDoS Botnet Simulator
+- [**381**Star][5y] [JS] [le4f/pcap-analyzer](https://github.com/le4f/pcap-analyzer) online pcap forensic
+- [**381**Star][7m] [Py] [hurricanelabs/machinae](https://github.com/hurricanelabs/machinae) Machinae Security Intelligence Collector
+- [**381**Star][10m] [Py] [hahwul/a2sv](https://github.com/hahwul/a2sv) Auto Scanning to SSL Vulnerability
+- [**381**Star][1y] [JS] [empireproject/empire-gui](https://github.com/empireproject/empire-gui) a graphical interface to the Empire post-exploitation Framework
+- [**381**Star][2m] [dsopas/assessment-mindset](https://github.com/dsopas/assessment-mindset) Security Mindmap that could be useful for the infosec community when doing pentest, bug bounty or red-team assessments.
+- [**381**Star][4y] [Py] [deresz/funcap](https://github.com/deresz/funcap) IDA Pro script to add some useful runtime info to static analysis
+- [**381**Star][11m] [C] [coolstar/electra1131](https://github.com/coolstar/electra1131) Electra for iOS 11.0 - 11.3.1
+- [**381**Star][1m] [C#] [bloodhoundad/sharphound](https://github.com/bloodhoundad/sharphound) C# Rewrite of the BloodHound Ingestor
+- [**381**Star][4m] [C++] [bastibl/gr-ieee802-11](https://github.com/bastibl/gr-ieee802-11) IEEE 802.11 a/g/p Transceiver
+- [**380**Star][12d] [TS] [shroudedcode/apk-mitm](https://github.com/shroudedcode/apk-mitm)
+- [**380**Star][2y] [C] [sandeepmistry/arduino-bleperipheral](https://github.com/sandeepmistry/arduino-bleperipheral) An Arduino library for creating custom BLE peripherals with Nordic Semiconductor's nRF8001 or nR51822.
+- [**380**Star][10m] [C] [robertfisk/usg](https://github.com/robertfisk/usg) The USG is Good, not Bad
+- [**380**Star][3y] [JS] [risingstack/protect](https://github.com/risingstack/protect) Proactively protect your Node.js web services
+- [**380**Star][2d] [Ruby] [puppetlabs/puppetlabs-mysql](https://github.com/puppetlabs/puppetlabs-mysql) MySQL Puppet Module / Manifests + Types & Providers
+- [**380**Star][7d] [C++] [msoos/cryptominisat](https://github.com/msoos/cryptominisat) An advanced SAT solver
+- [**380**Star][3y] [C] [micrictor/stuxnet](https://github.com/micrictor/stuxnet) Open-source decompile of Stuxnet/myRTUs
+- [**380**Star][4m] [Py] [foospidy/honeypy](https://github.com/foospidy/honeypy) A low to medium interaction honeypot.
+- [**380**Star][3m] [Jupyter Notebook] [endgameinc/ember](https://github.com/endgameinc/ember) a collection of features from PE files that serve as a benchmark dataset for researchers.
+- [**379**Star][5y] [Py] [mfrister/pushproxy](https://github.com/mfrister/pushproxy) A man-in-the-middle proxy for iOS and OS X device push connections
+- [**379**Star][3y] [slyth11907/cheatsheets](https://github.com/slyth11907/cheatsheets) Helped during my OSCP lab days.
+- [**379**Star][1y] [Py] [rhinosecuritylabs/sleuthql](https://github.com/rhinosecuritylabs/sleuthql) Python3 Burp History parsing tool to discover potential SQL injection points. To be used in tandem with SQLmap.
+- [**379**Star][1y] [CSS] [nowsecure/secure-mobile-development](https://github.com/nowsecure/secure-mobile-development) A Collection of Secure Mobile Development Best Practices
+- [**379**Star][3m] [Rust] [microsoft/lain](https://github.com/microsoft/lain) A fuzzer framework built in Rust
+- [**379**Star][7m] [jnusimba/androidsecnotes](https://github.com/jnusimba/androidsecnotes) some learning notes about Android Security
+- [**379**Star][7d] [C++] [google/binexport](https://github.com/google/binexport) Export disassemblies into Protocol Buffers and to BinNavi databases
+- [**379**Star][2y] [ObjC] [codermjlee/mjapptools](https://github.com/codermjlee/mjapptools) 【越狱-逆向】处理iOS APP信息的命令行工具
+- [**378**Star][7m] [unprovable/pentesthardware](https://github.com/unprovable/pentesthardware) Kinda useful notes collated together publicly
+- [**378**Star][2y] [Shell] [screetsec/microsploit](https://github.com/screetsec/microsploit) Fast and easy create backdoor office exploitation using module metasploit packet , Microsoft Office , Open Office , Macro attack , Buffer Overflow
+- [**378**Star][2y] [TeX] [mimoo/rsa-and-lll-attacks](https://github.com/mimoo/rsa-and-lll-attacks) attacking RSA via lattice reductions (LLL)
+- [**378**Star][9m] [Py] [k4m4/onioff](https://github.com/k4m4/onioff) inspecting Deep Web URLs (or onions).
+- [**378**Star][4m] [C] [hackgnar/ble_ctf](https://github.com/hackgnar/ble_ctf) A Bluetooth low energy capture the flag
+- [**378**Star][1m] [C] [furrtek/portapack-havoc](https://github.com/furrtek/portapack-havoc) Custom firmware for the HackRF SDR + PortaPack H1 addon
+- [**378**Star][13d] [Ruby] [david942j/seccomp-tools](https://github.com/david942j/seccomp-tools) Provide powerful tools for seccomp analysis. targeted to (but not limited to) analyze seccomp sandbox in CTF pwn challenges
+- [**378**Star][1y] [PHP] [bo0om/php_imap_open_exploit](https://github.com/bo0om/php_imap_open_exploit) Bypassing disabled exec functions in PHP (c) CRLF
+- [**378**Star][1m] [Py] [0x4d31/fatt](https://github.com/0x4d31/fatt) FATT /fingerprintAllTheThings - a pyshark based script for extracting network metadata and fingerprints from pcap files and live network traffic
+- [**377**Star][2y] [PS] [gfoss/psrecon](https://github.com/gfoss/psrecon) gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted data, hashes PowerShell and various system properties, and sends the data off to the security team
+- [**377**Star][27d] [Py] [fox-it/bloodhound.py](https://github.com/fox-it/bloodhound.py) a Python based ingestor for BloodHound, based on Impacket.
+- [**377**Star][1y] [ansible/ansible-lockdown](https://github.com/ansible/ansible-lockdown) Ansible playbook roles for security
+- [**376**Star][6m] [Ruby] [mdp/gibberish](https://github.com/mdp/gibberish) Simple Ruby encryption module
+- [**376**Star][8m] [C] [ridter/pentest](https://github.com/ridter/pentest) tools
+- [**376**Star][27d] [Py] [random-robbie/my-shodan-scripts](https://github.com/random-robbie/my-shodan-scripts) Collection of Scripts for shodan searching stuff.
+- [**376**Star][1m] [HTML] [howsecureismypassword/hsimp](https://github.com/howsecureismypassword/hsimp) How Secure is My Password for your own website
+- [**376**Star][4y] [C#] [goliate/hidden-tear](https://github.com/goliate/hidden-tear) ransomware open-sources
+- [**376**Star][16d] [Ruby] [dradis/dradis-ce](https://github.com/dradis/dradis-ce) Colllaboration and reporting for IT Security teams
+- [**376**Star][2m] [Py] [dinotools/dionaea](https://github.com/dinotools/dionaea) Home of the dionaea honeypot
+- [**376**Star][5y] [C++] [clymb3r/kdexploitme](https://github.com/clymb3r/kdexploitme) A kernel driver to practice writing exploits against, as well as some example exploits using public techniques.
+- [**376**Star][2y] [Py] [0x4d31/burpa](https://github.com/0x4d31/burpa) Burp-Automator: A Burp Suite Automation Tool with Slack Integration. It can be used with Jenkins and Selenium to automate Dynamic Application Security Testing (DAST).
+- [**375**Star][10m] [Py] [wyatu/cve-2018-20250](https://github.com/wyatu/cve-2018-20250) exp for
+- [**375**Star][3y] [C] [sensepost/usabuse](https://github.com/sensepost/usabuse) Universal Serial aBUSe is a project to demonstrate the risks of hardware bypasses of software security by Rogan Dawes at SensePost.
+- [**375**Star][7m] [Py] [secrary/ssma](https://github.com/secrary/ssma) SSMA - Simple Static Malware Analyzer [This project is not maintained anymore]
+- [**375**Star][1y] [Py] [rhynorater/cve-2018-15473-exploit](https://github.com/rhynorater/cve-2018-15473-exploit) Exploit written in Python for CVE-2018-15473 with threading and export formats
+- [**375**Star][3y] [Go] [q3k/crowbar](https://github.com/q3k/crowbar) Tunnel TCP over a plain HTTP session (warning: mediocre Go code)
+- [**375**Star][2m] [Java] [nccgroup/autorepeater](https://github.com/nccgroup/autorepeater) Automated HTTP Request Repeating With Burp Suite
+- [**375**Star][2m] [Py] [maldevel/emailharvester](https://github.com/maldevel/emailharvester) Email addresses harvester
+- [**375**Star][1y] [C++] [liveoverflow/pwnadventure3](https://github.com/liveoverflow/pwnadventure3) PwnAdventure3 Server
+- [**375**Star][5y] [C] [jvns/kernel-module-fun](https://github.com/jvns/kernel-module-fun) Some fun things you can do with kernel modules (all "bad ideas")
+- [**375**Star][6y] [C] [heardrwt/revealloader](https://github.com/heardrwt/revealloader) Reveal Loader dynamically loads libReveal.dylib (Reveal.app support) into iOS apps on jailbroken devices.
+- [**375**Star][3y] [C++] [evilsocket/arminject](https://github.com/evilsocket/arminject) An application to dynamically inject a shared object into a running process on ARM architectures.
+- [**375**Star][2y] [aozhimin/ios-debug-hacks](https://github.com/aozhimin/ios-debug-hacks)
+- [**375**Star][2y] [Py] [1111joe1111/ida_ea](https://github.com/1111joe1111/ida_ea) A set of exploitation/reversing aids for IDA
+- [**374**Star][4m] [Py] [xuanhun/pythonhackingbook1](https://github.com/xuanhun/pythonhackingbook1) Python黑客编程之极速入门
+- [**374**Star][21d] [C++] [tihmstar/futurerestore](https://github.com/tihmstar/futurerestore) A hacked up idevicerestore wrapper, which allows specifying SEP and Baseband for restoring
+- [**374**Star][21d] [Py] [skavngr/rapidscan](https://github.com/skavngr/rapidscan) | The Multi-Tool Web Vulnerability Scanner.
+- [**374**Star][3m] [Shell] [screetsec/vegile](https://github.com/screetsec/vegile) This tool will setting up your backdoor/rootkits when backdoor already setup it will be hidden your spesisifc process,unlimited your session in metasploit and transparent. Even when it killed, it will re-run again. There always be a procces which while run another process,So we can assume that this procces is unstopable like a Ghost in The Shell
+- [**374**Star][8m] [opencybertranslationproject/linux-basics-for-hackers](https://github.com/opencybertranslationproject/linux-basics-for-hackers) 书籍《Linux Basics for Hackers》2019版中文翻译版
+- [**374**Star][14d] [Py] [fkie-cad/fact_core](https://github.com/fkie-cad/fact_core) Firmware Analysis and Comparison Tool
+- [**374**Star][2m] [C++] [crypto2011/idr](https://github.com/crypto2011/idr) Interactive Delphi Reconstructor
+- [**373**Star][6m] [Py] [vysecurity/domlink](https://github.com/vysecurity/DomLink) A tool to link a domain with registered organisation names and emails, to other domains.
+- [**373**Star][10m] [c] [cryptsetup/cryptsetup](https://gitlab.com/cryptsetup/cryptsetup)
+- [**373**Star][21d] [zer0yu/cybersecurityrss](https://github.com/zer0yu/cybersecurityrss) RSS: 优秀的个人情报来源
+- [**373**Star][5m] [xtiankisutsa/awesome-mobile-ctf](https://github.com/xtiankisutsa/awesome-mobile-ctf) This is a curated list of mobile based CTFs, write-ups and vulnerable apps. Most of them are android based due to the popularity of the platform.
+- [**373**Star][2y] [PS] [xorrior/remoterecon](https://github.com/xorrior/remoterecon) Remote Recon and Collection
+- [**373**Star][8d] [JS] [nowsecure/r2frida](https://github.com/nowsecure/r2frida) Radare2 and Frida better together.
+- [**373**Star][5d] [C++] [microsoft/llvm-mctoll](https://github.com/microsoft/llvm-mctoll) statically (AOT) translates (or raises) binaries to LLVM IR
+- [**372**Star][2y] [Elixir] [robinmonjo/coincoin](https://github.com/robinmonjo/coincoin) Blockchain based cryptocurrency proof-of-concept in Elixir. Feedback welcome
+- [**372**Star][1y] [Shell] [ptb/mac-setup](https://github.com/ptb/mac-setup)
+- [**372**Star][2m] [Py] [pielco11/fav-up](https://github.com/pielco11/fav-up) IP lookup from favicon using Shodan
+- [**372**Star][2d] [C++] [netis/packet-agent](https://github.com/netis/packet-agent) A toolset for network packet capture, forwarding and analysis via GRE/Cloud.
+- [**372**Star][26d] [JS] [nccgroup/singularity](https://github.com/nccgroup/singularity) A DNS rebinding attack framework.
+- [**372**Star][3d] [C++] [namecoin/namecoin-core](https://github.com/namecoin/namecoin-core) Reimplementation of Namecoin on top of the current Bitcoin Core codebase.
+- [**372**Star][3y] [C++] [m00nrise/processhider](https://github.com/m00nrise/processhider) Post-exploitation tool for hiding processes from monitoring applications
+- [**372**Star][2m] [AngelScript] [inquest/malware-samples](https://github.com/inquest/malware-samples) A collection of malware samples and relevant dissection information, most probably referenced from
+- [**372**Star][10d] [hkbakke/bash-insulter](https://github.com/hkbakke/bash-insulter) Insults the user when typing wrong command
+- [**372**Star][3y] [georgiaw/smartphone-pentest-framework](https://github.com/georgiaw/smartphone-pentest-framework) Repository for the Smartphone Pentest Framework (SPF)
+- [**372**Star][2m] [Py] [dedsecinside/torbot](https://github.com/dedsecinside/torbot) Dark Web OSINT Tool
+- [**372**Star][1y] [Go] [cardigann/cardigann](https://github.com/cardigann/cardigann) A proxy server for adding new indexers to Sonarr, SickRage and other media managers
+- [**371**Star][21d] [cisco-talos/clamav-faq](https://github.com/cisco-talos/clamav-faq) ClamAV FAQ
+- [**371**Star][3y] [PHP] [nikicat/web-malware-collection](https://github.com/nikicat/web-malware-collection) Clone of svn repository of
+- [**371**Star][6m] [Rust] [gamozolabs/orange_slice](https://github.com/gamozolabs/orange_slice) A research kernel and hypervisor attempting to get fully deterministic emulation with minimum performance cost
+- [**371**Star][2y] [C] [cr4sh/windowsregistryrootkit](https://github.com/cr4sh/windowsregistryrootkit) Kernel rootkit, that lives inside the Windows registry values data
+- [**371**Star][3y] [Py] [androidhooker/hooker](https://github.com/androidhooker/hooker) Hooker is an opensource project for dynamic analyses of Android applications. This project provides various tools and applications that can be use to automaticaly intercept and modify any API calls made by a targeted application.
+- [**371**Star][4y] [JS] [allfro/burpkit](https://github.com/allfro/burpkit) Next-gen BurpSuite penetration testing tool
+- [**370**Star][2m] [Dockerfile] [onplus/v2hero](https://github.com/onplus/v2hero) All Free . Deploy V2Ray to Heroku . v2ray学习参考
+- [**370**Star][7m] [Py] [s0md3v/cloak](https://github.com/s0md3v/Cloak) Cloak can backdoor any python script with some tricks.
+- [**370**Star][2m] [Py] [tmr232/sark](https://github.com/tmr232/sark) IDAPython Made Easy
+- [**370**Star][7m] [Py] [tidesec/tidefinger](https://github.com/tidesec/tidefinger) Fingerprinting tool.
+- [**370**Star][4y] [Py] [rrenaud/gibberish-detector](https://github.com/rrenaud/gibberish-detector) A small program to detect gibberish using a Markov Chain
+- [**370**Star][3m] [renwax23/xss-payloads](https://github.com/renwax23/xss-payloads) List of XSS Vectors/Payloads
+- [**370**Star][2m] [Py] [lyft/metadataproxy](https://github.com/lyft/metadataproxy) A proxy for AWS's metadata service that gives out scoped IAM credentials from STS
+- [**370**Star][2y] [C++] [breenmachine/rottenpotatong](https://github.com/breenmachine/rottenpotatong) New version of RottenPotato as a C++ DLL and standalone C++ binary - no need for meterpreter or other tools.
+- [**370**Star][17d] [PHP] [blackarch/webshells](https://github.com/blackarch/webshells) Various webshells. We accept pull requests for additions to this collection.
+- [**370**Star][1y] [C++] [alonemonkey/iosrebook](https://github.com/alonemonkey/iosrebook) 《iOS应用逆向与安全》随书源码
+- [**369**Star][5y] [Go] [vishvananda/wormhole](https://github.com/vishvananda/wormhole) A smart proxy to connect docker containers.
+- [**369**Star][22d] [Py] [pdbpp/pdbpp](https://github.com/pdbpp/pdbpp) pdb++, a drop-in replacement for pdb (the Python debugger)
+- [**369**Star][3m] [C++] [werkamsus/lilith](https://github.com/werkamsus/lilith) Lilith, The Open Source C++ Remote Administration Tool (RAT)
+- [**369**Star][9d] [Shell] [trimstray/otseca](https://github.com/trimstray/otseca) security auditing tool to search and dump system configuration. It allows you to generate reports in HTML or RAW-HTML formats.
+- [**369**Star][9m] [Py] [sibears/idagolanghelper](https://github.com/sibears/idagolanghelper) Set of IDA Pro scripts for parsing GoLang types information stored in compiled binary
+- [**369**Star][4m] [Py] [p1sec/qcsuper](https://github.com/p1sec/qcsuper) QCSuper is a tool communicating with Qualcomm-based phones and modems, allowing to capture raw 2G/3G/4G radio frames, among other things.
+- [**369**Star][7y] [Py] [moxie0/knockknock](https://github.com/moxie0/knockknock) A simple, secure, and stealthy port knocking implementation that does not use libpcap or bind to a socket interface.
+- [**369**Star][5m] [C] [hzqst/vmwarehardenedloader](https://github.com/hzqst/vmwarehardenedloader) Vmware Hardened VM detection mitigation loader (anti anti-vm)
+- [**369**Star][1m] [Py] [emtunc/slackpirate](https://github.com/emtunc/slackpirate) Slack Enumeration and Extraction Tool - extract sensitive information from a Slack Workspace
+- [**368**Star][2y] [Java] [zc-zh-001/shadowsocks-share](https://github.com/zc-zh-001/shadowsocks-share) 示例站点
+- [**368**Star][3m] [lcatro/source-and-fuzzing](https://github.com/lcatro/Source-and-Fuzzing) 一些阅读源码和Fuzzing 的经验,涵盖黑盒与白盒测试..
+- [**368**Star][1y] [C] [battelle/afl-unicorn](https://github.com/Battelle/afl-unicorn) afl-unicorn lets you fuzz any piece of binary that can be emulated by Unicorn Engine.
+- [**368**Star][8d] [Ruby] [winrb/winrm](https://github.com/winrb/winrm) Ruby library for Windows Remote Management
+- [**368**Star][7y] [C++] [opensecurityresearch/dllinjector](https://github.com/opensecurityresearch/dllinjector) dll injection tool that implements various methods
+- [**368**Star][2y] [Py] [lightos/credmap](https://github.com/lightos/credmap) The Credential Mapper
+- [**368**Star][3y] [C++] [jlospinoso/gargoyle](https://github.com/jlospinoso/gargoyle) A memory scanning evasion technique
+- [**368**Star][2y] [jaybosamiya/security-notes](https://github.com/jaybosamiya/security-notes)
+- [**368**Star][2y] [Shell] [functionclub/yankeebbr](https://github.com/functionclub/yankeebbr) 来自Loc大佬Yankee魔改的BBR的Debian一键安装包
+- [**368**Star][6m] [Swift] [evermeer/passportscanner](https://github.com/evermeer/passportscanner) Scan the MRZ code of a passport and extract the firstname, lastname, passport number, nationality, date of birth, expiration date and personal numer.
+- [**368**Star][11m] [Py] [crypt0s/fakedns](https://github.com/crypt0s/fakedns) A regular-expression based python MITM DNS server with support for DNS Rebinding attacks
+- [**367**Star][3y] [Java] [ssun125/lanmitm](https://github.com/ssun125/lanmitm) Android中间人攻击测试工具
+- [**367**Star][5d] [Py] [realgam3/pymultitor](https://github.com/realgam3/pymultitor) pymultitor:Python 多线程 Tor 脚本
+- [**367**Star][1m] [Py] [micahflee/torbrowser-launcher](https://github.com/micahflee/torbrowser-launcher) Securely and easily download, verify, install, and launch Tor Browser in Linux
+- [**367**Star][2m] [Py] [l4ys/lazyida](https://github.com/l4ys/lazyida) Make your IDA Lazy!
+
+ View Details
+
+
+ ### 功能
+ - 快速移除函数返回类型
+ - 数据格式(format)快速转换
+ - 扫描字符串格式化漏洞
+ - 双击跳转vtable函数
+ - 快捷键: w/c/v
+
+
+
+- [**367**Star][8m] [PS] [ferreirasc/oscp](https://github.com/ferreirasc/oscp) oscp study
+- [**367**Star][2y] [feicong/sec_skills](https://github.com/feicong/sec_skills) 软件安全工程师技能表
+- [**367**Star][11m] [Py] [enablesecurity/sipvicious](https://github.com/enablesecurity/sipvicious) SIPVicious suite is a set of security tools that can be used to audit SIP based VoIP systems.
+- [**367**Star][4m] [Ruby] [digininja/pipal](https://github.com/digininja/pipal) Pipal, THE password analyser
+- [**367**Star][2y] [Py] [cclabsinc/rfcrack](https://github.com/cclabsinc/rfcrack) A Software Defined Radio Attack Tool
+- [**367**Star][10y] [C] [brl/obfuscated-openssh](https://github.com/brl/obfuscated-openssh)
+- [**367**Star][2y] [JS] [brannondorsey/dns-rebind-toolkit](https://github.com/brannondorsey/dns-rebind-toolkit) A front-end JavaScript toolkit for creating DNS rebinding attacks.
+- [**367**Star][11m] [Py] [awslabs/aws-security-automation](https://github.com/awslabs/aws-security-automation) Collection of scripts and resources for DevSecOps and Automated Incident Response Security
+- [**367**Star][2y] [Py] [ajinabraham/owasp-xenotix-xss-exploit-framework](https://github.com/ajinabraham/owasp-xenotix-xss-exploit-framework) OWASP Xenotix XSS Exploit Framework is an advanced Cross Site Scripting (XSS) vulnerability detection and exploitation framework.
+- [**366**Star][2y] [Py] [vysecurity/morphhta](https://github.com/vysecurity/morphHTA) morphHTA - Morphing Cobalt Strike's evil.HTA
+- [**366**Star][5d] [Java] [zaproxy/zap-extensions](https://github.com/zaproxy/zap-extensions) OWASP ZAP Add-ons
+- [**366**Star][4y] [Py] [ywolf/f-nascan](https://github.com/ywolf/f-nascan) Scanning a network asset information script
+- [**366**Star][2y] [wtsxdev/malware-analysis](https://github.com/wtsxdev/malware-analysis) List of awesome malware analysis tools and resources
+- [**366**Star][1y] [PS] [netspi/pesecurity](https://github.com/netspi/pesecurity) PowerShell module to check if a Windows binary (EXE/DLL) has been compiled with ASLR, DEP, SafeSEH, StrongNaming, and Authenticode.
+- [**366**Star][3m] [Py] [neo23x0/munin](https://github.com/neo23x0/munin) Online hash checker for Virustotal and other services
+- [**366**Star][2m] [PS] [gdedrouas/exchange-ad-privesc](https://github.com/gdedrouas/exchange-ad-privesc) Exchange privilege escalations to Active Directory
+- [**366**Star][2y] [PHP] [attackercan/regexp-security-cheatsheet](https://github.com/attackercan/regexp-security-cheatsheet)
+- [**365**Star][3m] [Py] [pageauc/pi-timolo](https://github.com/pageauc/pi-timolo) Raspberry PI-TIMOLO ( PI-TImelapse, MOtion, LOwLight ) uses RPI picamera and python for Remote Headless Security Monitoring & Auto Sync files with rclone remote storage services. Auto Twilight Transitions and Low Light Camera Settings. This project is featured on Awesome List
+- [**365**Star][29d] [Shell] [matthewpierson/1033-ota-downgrader](https://github.com/matthewpierson/1033-ota-downgrader) First ever tool to downgrade ANY iPhone 5s, ANY iPad Air and (almost any) iPad Mini 2 to 10.3.3 with OTA blobs + checkm8!
+- [**365**Star][1y] [hannob/vulns](https://github.com/hannob/vulns) Named vulnerabilities and their practical impact
+- [**365**Star][2m] [Elm] [elm-community/elm-test](https://github.com/elm-community/elm-test) moved to elm-explorations/test
+- [**365**Star][23d] [chenerlich/fcl](https://github.com/chenerlich/fcl) FCL (Fileless Command Lines) - Known command lines of fileless malicious executions
+- [**365**Star][2y] [TS] [cazala/coin-hive-stratum](https://github.com/cazala/coin-hive-stratum) use CoinHive's JavaScript miner on any stratum pool
+- [**365**Star][7m] [Py] [carnal0wnage/weirdaal](https://github.com/carnal0wnage/weirdaal) WeirdAAL (AWS Attack Library)
+- [**365**Star][5y] [C] [arialdomartini/morris-worm](https://github.com/arialdomartini/morris-worm) The original Morris Worm source code
+- [**364**Star][9m] [C++] [tripwire/tripwire-open-source](https://github.com/tripwire/tripwire-open-source) Open Source Tripwire®
+- [**364**Star][1y] [C++] [szechyjs/dsd](https://github.com/szechyjs/dsd) Digital Speech Decoder
+- [**364**Star][2y] [C] [k0keoyo/kdriver-fuzzer](https://github.com/k0keoyo/kdriver-fuzzer)
+- [**364**Star][10m] [Go] [frichetten/cve-2019-5736-poc](https://github.com/frichetten/cve-2019-5736-poc) PoC for CVE-2019-5736
+- [**363**Star][2y] [ObjC] [wzqcongcong/macsubstrate](https://github.com/wzqcongcong/macsubstrate) Substrate for macOS
+- [**363**Star][1y] [Shell] [writeups/ios](https://github.com/writeups/ios) Here you can find write ups for iOS Vulnerabilities that have been released.
+- [**363**Star][10m] [C++] [thosakwe/t2b](https://github.com/thosakwe/t2b) A wicked-powerful text macro language for building binary files.
+- [**363**Star][1m] [C++] [steven-michaud/hookcase](https://github.com/steven-michaud/hookcase) Tool for reverse engineering macOS/OS X
+- [**363**Star][8d] [Go] [sslmate/certspotter](https://github.com/sslmate/certspotter) Certificate Transparency Log Monitor
+- [**363**Star][14d] [C#] [security-code-scan/security-code-scan](https://github.com/security-code-scan/security-code-scan) Vulnerability Patterns Detector for C# and VB.NET
+- [**363**Star][2y] [Py] [rc0r/afl-utils](https://github.com/rc0r/afl-utils) Utilities for automated crash sample processing/analysis, easy afl-fuzz job management and corpus optimization
+- [**363**Star][2y] [petoolse/petools](https://github.com/petoolse/petools) PE Tools - Portable executable (PE) manipulation toolkit
+- [**363**Star][5y] [PHP] [onesourcecat/phpvulhunter](https://github.com/onesourcecat/phpvulhunter) A tool that can scan php vulnerabilities automatically using static analysis methods
+- [**363**Star][2y] [Shell] [m4sc3r4n0/evil-droid](https://github.com/m4sc3r4n0/evil-droid) a framework that create & generate & embed apk payload to penetrate android platforms
+- [**363**Star][5d] [C++] [istio/proxy](https://github.com/istio/proxy) The Istio proxy components.
+- [**363**Star][2y] [Erlang] [ernw/ss7maper](https://github.com/ernw/ss7maper) SS7 MAP (pen-)testing toolkit.
+- [**363**Star][1y] [Go] [alexkohler/prealloc](https://github.com/alexkohler/prealloc) prealloc is a Go static analysis tool to find slice declarations that could potentially be preallocated.
+- [**363**Star][11m] [Py] [ajinabraham/xenotix-python-keylogger](https://github.com/ajinabraham/xenotix-python-keylogger) Xenotix Python Keylogger for Windows.
+- [**362**Star][4d] [CSS] [d2-projects/folder-explorer](https://github.com/d2-projects/folder-explorer) 分析文件目录,统计数据并以树形结构和图表的形式展示结果,也可以导出多种格式留存 | Analyse your folders and display the results in tree and statistical charts. If necessary, this software can help you export multiple file formats
+- [**362**Star][10m] [Py] [secynic/ipwhois](https://github.com/secynic/ipwhois) Retrieve and parse whois data for IPv4 and IPv6 addresses
+- [**362**Star][2y] [Py] [roglew/pappy-proxy](https://github.com/roglew/pappy-proxy) An intercepting proxy for web application testing
+- [**362**Star][2m] [C] [rgov/thunderbolt3unblocker](https://github.com/rgov/thunderbolt3unblocker) Enable unsupported Thunderbolt 3 peripherals on macOS
+- [**362**Star][3y] [C] [gbrindisi/malware](https://github.com/gbrindisi/malware) malware source codes
+- [**362**Star][9m] [fr0gger/awesome-ida-x64-olly-plugin](https://github.com/fr0gger/awesome-ida-x64-olly-plugin) Awesome IDA, x64DBG & OllyDBG plugin
+- [**362**Star][5m] [Makefile] [crifan/android_app_security_crack](https://github.com/crifan/android_app_security_crack) 安卓应用的安全和破解
+- [**362**Star][2y] [bluscreenofjeff/aggressorscripts](https://github.com/bluscreenofjeff/aggressorscripts) Aggressor scripts for use with Cobalt Strike 3.0+
+- [**361**Star][4y] [Go] [inconshreveable/srvdir](https://github.com/inconshreveable/srvdir) Expose any folder as an HTTPS fileserver
+- [**361**Star][3y] [C] [fsecurelabs/kernelfuzzer](https://github.com/FSecureLABS/KernelFuzzer) Cross Platform Kernel Fuzzer Framework
+- [**361**Star][21d] [Py] [tenable/poc](https://github.com/tenable/poc) Proof of Concepts
+- [**361**Star][9y] [C] [psgroove/psgroove](https://github.com/psgroove/psgroove) PSGroove
+- [**361**Star][2m] [Java] [patrickfav/uber-apk-signer](https://github.com/patrickfav/uber-apk-signer) A cli tool that helps signing and zip aligning single or multiple Android application packages (APKs) with either debug or provided release certificates. It supports v1, v2 and v3 Android signing scheme has an embedded debug keystore and auto verifies after signing.
+- [**360**Star][4m] [Py] [visipedia/inat_comp](https://github.com/visipedia/inat_comp) iNaturalist competition details
+- [**360**Star][3y] [C] [rafael-santiago/pig](https://github.com/rafael-santiago/pig) A Linux packet crafting tool.
+- [**360**Star][7m] [Py] [orangetw/awesome-jenkins-rce-2019](https://github.com/orangetw/awesome-jenkins-rce-2019) There is no pre-auth RCE in Jenkins since May 2017, but this is the one!
+- [**360**Star][1m] [Go] [optiopay/klar](https://github.com/optiopay/klar) Integration of Clair and Docker Registry
+- [**360**Star][4y] [mozilla/minion](https://github.com/mozilla/minion) a security testing framework built by Mozilla to bridge the gap between developers and security testers.
+- [**360**Star][10d] [Py] [davidtavarez/pwndb](https://github.com/davidtavarez/pwndb) Search for leaked credentials
+- [**360**Star][14d] [Py] [checkpointsw/karta](https://github.com/checkpointsw/karta) source code assisted fast binary matching plugin for IDA
+- [**360**Star][2m] [Py] [a0rtega/metame](https://github.com/a0rtega/metame) metame is a metamorphic code engine for arbitrary executables
+- [**359**Star][3y] [C] [xiaoweime/wprotect](https://github.com/xiaoweime/wprotect) uses code-virtualization technic to protect binary from being reverse-engineered or unwanted modified.
+- [**359**Star][4m] [C++] [wbenny/pdbex](https://github.com/wbenny/pdbex) pdbex is a utility for reconstructing structures and unions from the PDB into compilable C headers
+- [**359**Star][2y] [udpsec/awesome-vpn](https://github.com/udpsec/awesome-vpn) 科学上网的有趣项目集锦,欢迎大家pr自己喜欢的项目到这里。
+- [**359**Star][4y] [HTML] [mubix/post-exploitation-wiki](https://github.com/mubix/post-exploitation-wiki) Post Exploitation Wiki
+- [**359**Star][1m] [C#] [andrew-schofield/keepass2-haveibeenpwned](https://github.com/andrew-schofield/keepass2-haveibeenpwned) Simple Have I Been Pwned checker for KeePass
+- [**358**Star][4y] [Py] [bugscanteam/hackhttp](https://github.com/bugscanteam/hackhttp) Hackhttp is an HTTP library, written in Python.
+- [**358**Star][4m] [C++] [googleprojectzero/brokentype](https://github.com/googleprojectzero/BrokenType) TrueType and OpenType font fuzzing toolset
+- [**358**Star][4m] [C] [the-cracker-technology/andrax-mobile-pentest](https://github.com/the-cracker-technology/andrax-mobile-pentest) ANDRAX The first and unique Penetration Testing platform for Android smartphones
+- [**358**Star][6m] [C#] [technitiumsoftware/dnsserver](https://github.com/technitiumsoftware/dnsserver) Technitium DNS Server
+- [**358**Star][3d] [Java] [spring-cloud/spring-cloud-commons](https://github.com/spring-cloud/spring-cloud-commons) Common classes used in different Spring Cloud implementations
+- [**358**Star][3y] [Py] [sangaline/advanced-web-scraping-tutorial](https://github.com/sangaline/advanced-web-scraping-tutorial) The Zipru scraper developed in the Advanced Web Scraping Tutorial.
+- [**358**Star][5y] [C] [crmulliner/ddi](https://github.com/crmulliner/ddi) Dynamic Dalvik Instrumentation Toolkit
+- [**358**Star][2y] [C++] [can1357/cve-2018-8897](https://github.com/can1357/cve-2018-8897) Arbitrary code execution with kernel privileges using CVE-2018-8897.
+- [**358**Star][4y] [Py] [ahhh/reverse_dns_shell](https://github.com/ahhh/reverse_dns_shell) A python reverse shell that uses DNS as the c2 channel
+- [**357**Star][23d] [JS] [saucxs/watermark-dom](https://github.com/saucxs/watermark-dom) watermark.js是网站的水印组件,降低数据泄密风险。1、版本,2、水印插件-使用,3、水印插件-testTool(测试工具),4、内置方法,5、支持各种属性配置使用,等等。欢迎访问:
+- [**357**Star][3y] [Py] [spender-sandbox/cuckoo-modified](https://github.com/spender-sandbox/cuckoo-modified) Modified edition of cuckoo
+- [**357**Star][6d] [C#] [sonarsource/sonar-dotnet](https://github.com/sonarsource/sonar-dotnet) static code analyser for C# and VB.NET languages used as an extension for the SonarQube and SonarCloud platforms.
+- [**357**Star][11d] [C] [rfk/pyenchant](https://github.com/rfk/pyenchant) spellchecking library for python
+- [**357**Star][23d] [ObjC] [prateek147/dvia](https://github.com/prateek147/dvia) Damn Vulnerable iOS App (DVIA) is an iOS application that is damn vulnerable. Its main goal is to provide a platform to mobile security enthusiasts/professionals or students to test their iOS penetration testing skills in a legal environment. This application covers all the common vulnerabilities found in iOS applications (following OWASP top 10…
+- [**357**Star][14d] [Kotlin] [portswigger/turbo-intruder](https://github.com/portswigger/turbo-intruder) Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results.
+- [**357**Star][2y] [JS] [kamikat/tttfi](https://github.com/kamikat/tttfi) Middleware for IFTTT.
+- [**357**Star][2m] [Java] [hubspot/jinjava](https://github.com/hubspot/jinjava) Jinja template engine for Java
+- [**357**Star][3y] [C++] [gamehackingbook/gamehackingcode](https://github.com/gamehackingbook/gamehackingcode) Code for the book 《Game Hacking: Developing Autonomous Bots for Online Games.》
+- [**357**Star][9d] [fkromer/awesome-ros2](https://github.com/fkromer/awesome-ros2) The Robot Operating System Version 2.0 is awesome!
+- [**357**Star][7m] [PHP] [fate0/prvd](https://github.com/fate0/prvd) PHP Runtime Vulnerability Detection
+- [**357**Star][2m] [Py] [denyhosts/denyhosts](https://github.com/denyhosts/denyhosts) Automated host blocking from SSH brute force attacks
+- [**357**Star][5m] [Java] [bit4woo/domain_hunter](https://github.com/bit4woo/domain_hunter) A Burp Suite Extender that try to find sub-domain, similar-domain and related-domain of an organization, not only a domain! 利用burp收集整个企业、组织的域名(不仅仅是单个主域名)的插件
+- [**357**Star][4m] [Py] [a3sal0n/cyberthreathunting](https://github.com/a3sal0n/cyberthreathunting) A collection of resources for Threat Hunters
+- [**356**Star][4y] [Py] [mitmproxy/pathod](https://github.com/mitmproxy/pathod)
+- [**356**Star][4y] [Py] [aoncyberlabs/evilabigail](https://github.com/AonCyberLabs/EvilAbigail) Automated Linux evil maid attack
+- [**356**Star][5m] [Py] [xtiankisutsa/mara_framework](https://github.com/xtiankisutsa/mara_framework) MARA is a Mobile Application Reverse engineering and Analysis Framework. It is a toolkit that puts together commonly used mobile application reverse engineering and analysis tools to assist in testing mobile applications against the OWASP mobile security threats.
+- [**356**Star][8m] [C] [vulnreproduction/linuxflaw](https://github.com/vulnreproduction/linuxflaw) This repo records all the vulnerabilities of linux software I have reproduced in my local workspace
+- [**356**Star][2y] [Py] [ustayready/credking](https://github.com/ustayready/credking) Password spraying using AWS Lambda for IP rotation
+- [**356**Star][5m] [C++] [trendmicro/tlsh](https://github.com/trendmicro/tlsh) a fuzzy matching library
+- [**356**Star][8d] [C] [rhdunn/espeak](https://github.com/rhdunn/espeak) eSpeak NG is an open source speech synthesizer that supports 101 languages and accents.
+- [**356**Star][2y] [Makefile] [opensecurityresearch/hostapd-wpe](https://github.com/opensecurityresearch/hostapd-wpe) Modified hostapd to facilitate AP impersonation attacks
+- [**356**Star][6m] [Go] [lukechampine/jsteg](https://github.com/lukechampine/jsteg) JPEG steganography
+- [**356**Star][2m] [Py] [hell0w0rld0/github-hunter](https://github.com/hell0w0rld0/github-hunter) This tool is for sensitive information searching on Github - The Fast Version here:
+- [**356**Star][1y] [C] [emptymonkey/revsh](https://github.com/emptymonkey/revsh) A reverse shell with terminal support, data tunneling, and advanced pivoting capabilities.
+- [**356**Star][5y] [Py] [ebranca/owasp-pysec](https://github.com/ebranca/owasp-pysec) OWASP Python Security Project
+- [**356**Star][2m] [Py] [chenjj/corscanner](https://github.com/chenjj/corscanner) Fast CORS misconfiguration vulnerabilities scanner
+- [**355**Star][17d] [Shell] [dnscrypt/dnscrypt-server-docker](https://github.com/dnscrypt/dnscrypt-server-docker) A Docker image for a non-censoring, non-logging, DNSSEC-capable, DNSCrypt-enabled DNS resolver
+- [**355**Star][17d] [Java] [wycm/selenium-geetest-crack](https://github.com/wycm/selenium-geetest-crack) selenium破解滑动验证码
+- [**355**Star][2y] [Py] [scalingexcellence/scrapybook](https://github.com/scalingexcellence/scrapybook) Scrapy Book Code
+- [**355**Star][1m] [C++] [openvpn/openvpn3](https://github.com/openvpn/openvpn3) OpenVPN 3 is a C++ class library that implements the functionality of an OpenVPN client, and is protocol-compatible with the OpenVPN 2.x branch.
+- [**355**Star][3y] [Py] [gallopsled/pwntools-write-ups](https://github.com/gallopsled/pwntools-write-ups) A colleciton of CTF write-ups all using pwntools
+- [**355**Star][3y] [JS] [antimalware/manul](https://github.com/antimalware/manul) Antimalware tool for websites
+- [**355**Star][2m] [C#] [3f/dllexport](https://github.com/3f/dllexport) .NET DllExport
+- [**354**Star][4m] [C] [intel/libipt](https://github.com/intel/libipt) libipt - an Intel(R) Processor Trace decoder library
+- [**354**Star][7m] [PHP] [s0md3v/nano](https://github.com/s0md3v/nano) a family of PHP web shells which are code golfed for stealth.
+- [**354**Star][2m] [JS] [fsecurelabs/dref](https://github.com/FSecureLABS/dref) DNS Rebinding Exploitation Framework
+- [**354**Star][3y] [virajkulkarni14/webdevelopersecuritychecklist](https://github.com/virajkulkarni14/webdevelopersecuritychecklist) A checklist of important security issues you should consider when creating a web application.
+- [**354**Star][3m] [snyk/zip-slip-vulnerability](https://github.com/snyk/zip-slip-vulnerability) Zip Slip Vulnerability (Arbitrary file write through archive extraction)
+- [**354**Star][8y] [Py] [openrce/pydbg](https://github.com/openrce/pydbg) A pure-python win32 debugger interface.
+- [**354**Star][2m] [C] [nccgroup/phantap](https://github.com/nccgroup/phantap) Phantom Tap (PhanTap) - an ‘invisible’ network tap aimed at red teams
+- [**354**Star][8d] [Py] [lockgit/hacking](https://github.com/lockgit/hacking) hacking is a kind of spirit !
+- [**354**Star][2y] [Shell] [koenbuyens/kalirouter](https://github.com/koenbuyens/kalirouter) intercepting kali router
+- [**354**Star][1y] [Py] [i3visio/osrframework](https://github.com/i3visio/osrframework) providing API and tools to perform more accurate online researches.
+- [**354**Star][2d] [C#] [digitalruby/ipban](https://github.com/digitalruby/ipban) Monitors failed logins and bad behavior and bans ip addresses on Windows and Linux. Highly configurable, lean and powerful.
+- [**354**Star][3y] [C] [adtac/fssb](https://github.com/adtac/fssb) A filesystem sandbox for Linux using syscall intercepts.
+- [**353**Star][16d] [Go] [quay/jwtproxy](https://github.com/quay/jwtproxy) An HTTP-Proxy that adds AuthN through JWTs
+- [**353**Star][13d] [TeX] [vlsergey/infosec](https://github.com/vlsergey/infosec) Учебное пособие по защите информации кафедры радиотехники и систем управления МФТИ
+- [**353**Star][2d] [Java] [portswigger/http-request-smuggler](https://github.com/PortSwigger/http-request-smuggler) an extension for Burp Suite designed to help you launch HTTP Request Smuggling attack
+- [**353**Star][2d] [Shell] [ukncsc/lme](https://github.com/ukncsc/lme) Logging Made Easy
+- [**353**Star][5m] [Py] [hasherezade/malware_analysis](https://github.com/hasherezade/malware_analysis) Various snippets created during malware analysis
+- [**353**Star][15d] [Py] [gosecure/pyrdp](https://github.com/gosecure/pyrdp) RDP man-in-the-middle (mitm) and library for Python 3 with the ability to watch connections live or after the fact
+- [**353**Star][2y] [C++] [glsl-debugger/glsl-debugger](https://github.com/glsl-debugger/glsl-debugger) GLSL source level debugger.
+- [**353**Star][1m] [Ruby] [dev-sec/chef-os-hardening](https://github.com/dev-sec/chef-os-hardening) This chef cookbook provides numerous security-related configurations, providing all-round base protection.
+- [**353**Star][7d] [Py] [depthsecurity/armory](https://github.com/depthsecurity/armory) Armory is a tool meant to take in a lot of external and discovery data from a lot of tools, add it to a database and correlate all of related information.
+- [**353**Star][16d] [Go] [quay/jwtproxy](https://github.com/quay/jwtproxy) An HTTP-Proxy that adds AuthN through JWTs
+- [**352**Star][2m] [C] [tboox/vm86](https://github.com/tboox/vm86) a very simple and lightweight x86 virtual machine
+- [**352**Star][2y] [C++] [zerosum0x0/winrepl](https://github.com/zerosum0x0/winrepl) x86 and x64 assembly "read-eval-print loop" shell for Windows
+- [**352**Star][5m] [Makefile] [xdite/internet-security](https://github.com/xdite/internet-security) 互联网资安风控实战
+- [**352**Star][2d] [wenzel/awesome-virtualization](https://github.com/wenzel/awesome-virtualization) Collection of resources about Virtualization
+- [**352**Star][3y] [ObjC] [naituw/hackingfacebook](https://github.com/naituw/hackingfacebook) Kill Facebook for iOS's SSL Pinning
+- [**352**Star][3m] [Shell] [maldevel/pentestkit](https://github.com/maldevel/pentestkit) Useful tools and scripts used during Penetration Tests.
+- [**352**Star][3d] [C#] [leaguesandbox/gameserver](https://github.com/leaguesandbox/gameserver) League Sandbox's Game Server
+- [**352**Star][4y] [fireeye/iocs](https://github.com/fireeye/iocs) FireEye Publicly Shared Indicators of Compromise (IOCs)
+- [**351**Star][2m] [Shell] [vitalysim/totalrecon](https://github.com/vitalysim/totalrecon) TotalRecon installs all the recon tools you need
+- [**351**Star][10d] [hackerschoice/thc-tesla-powerwall2-hack](https://github.com/hackerschoice/thc-tesla-powerwall2-hack) TESLA PowerWall 2 Security Shenanigans
+- [**351**Star][2m] [C#] [vletoux/pingcastle](https://github.com/vletoux/pingcastle) Get Active Directory Security at 80% in 20% of the time
+- [**351**Star][6m] [Java] [syvaidya/openstego](https://github.com/syvaidya/openstego) OpenStego is a steganography application that provides two functionalities: a) Data Hiding: It can hide any data within a cover file (e.g. images). b) Watermarking: Watermarking files (e.g. images) with an invisible signature. It can be used to detect unauthorized file copying.
+- [**351**Star][1m] [C++] [sslab-gatech/qsym](https://github.com/sslab-gatech/qsym) A Practical Concolic Execution Engine Tailored for Hybrid Fuzzing
+- [**351**Star][6y] [C] [rentzsch/mach_override](https://github.com/rentzsch/mach_override) runtime function overriding for Mac OS X
+- [**351**Star][2y] [TeX] [plailect/keyshuffling](https://github.com/plailect/keyshuffling) Keyshuffling Attack for Persistent Early Code Execution in the Nintendo 3DS Secure Bootchain
+- [**351**Star][8m] [C] [p0cl4bs/kadimus](https://github.com/p0cl4bs/kadimus) Kadimus is a tool to check sites to lfi vulnerability , and also exploit it...
+- [**351**Star][5m] [b3nac/android-reports-and-resources](https://github.com/b3nac/android-reports-and-resources) A big list of Android Hackerone disclosed reports and other resources.
+- [**351**Star][12m] [Py] [aancw/belati](https://github.com/aancw/belati) The Traditional Swiss Army Knife for OSINT
+- [**350**Star][7m] [C] [turing-technician/fasthook](https://github.com/turing-technician/fasthook) Android ART Hook
+- [**350**Star][1m] [Go] [tomnomnom/httprobe](https://github.com/tomnomnom/httprobe) Take a list of domains and probe for working HTTP and HTTPS servers
+- [**350**Star][2y] [notsosecure/password_cracking_rules](https://github.com/notsosecure/password_cracking_rules) One rule to crack all passwords. or atleast we hope so.
+- [**350**Star][2y] [Py] [mazen160/struts-pwn](https://github.com/mazen160/struts-pwn) An exploit for Apache Struts CVE-2017-5638
+- [**350**Star][2y] [Shell] [mazen160/firefox-security-toolkit](https://github.com/mazen160/firefox-security-toolkit) A tool that transforms Firefox browsers into a penetration testing suite
+- [**350**Star][2d] [Ruby] [jjyg/metasm](https://github.com/jjyg/metasm) This is the main repository for metasm, a free assembler / disassembler / compiler written in ruby
+- [**350**Star][7m] [Py] [iphelix/pack](https://github.com/iphelix/pack) PACK (Password Analysis and Cracking Kit)
+- [**350**Star][11d] [Shell] [fanyueciyuan/eazy-for-ss](https://github.com/fanyueciyuan/eazy-for-ss) A Bypassgfw Collection
+- [**350**Star][1m] [Py] [devrandom/gitian-builder](https://github.com/devrandom/gitian-builder) Build packages in a secure deterministic fashion inside a VM
+- [**349**Star][2m] [JS] [whitequark/ipaddr.js](https://github.com/whitequark/ipaddr.js) IP address manipulation library in JavaScript
+- [**349**Star][2d] [C] [vanhauser-thc/aflplusplus](https://github.com/vanhauser-thc/aflplusplus) afl 2.56b with community patches
+- [**349**Star][4m] [Py] [tatanus/spf](https://github.com/tatanus/spf) SpeedPhishing Framework
+- [**349**Star][5m] [Py] [swisskyrepo/wordpresscan](https://github.com/swisskyrepo/wordpresscan) WPScan rewritten in Python + some WPSeku ideas
+- [**349**Star][20d] [C] [liji32/sameboy](https://github.com/liji32/sameboy) Game Boy and Game Boy Color emulator written in C
+- [**349**Star][7m] [Haskell] [jpmorganchase/constellation](https://github.com/jpmorganchase/constellation) Peer-to-peer encrypted message exchange
+- [**349**Star][2m] [C] [jedisct1/swift-sodium](https://github.com/jedisct1/swift-sodium) Safe and easy to use crypto for iOS and macOS
+- [**349**Star][3m] [Brainfuck] [hexhive/printbf](https://github.com/hexhive/printbf) Brainfuck interpreter inside printf
+- [**349**Star][21d] [TeX] [haifengl/bigdata](https://github.com/haifengl/bigdata) Introduction to Big Data
+- [**349**Star][6m] [Shell] [hackplayers/4nonimizer](https://github.com/hackplayers/4nonimizer) A bash script for anonymizing the public IP used to browsing Internet, managing the connection to TOR network and to different VPNs providers (OpenVPN)
+- [**349**Star][5d] [Py] [alecmuffett/real-world-onion-sites](https://github.com/alecmuffett/real-world-onion-sites) This is a list of substantial, commercial-or-social-good mainstream websites which provide onion services.
+- [**348**Star][2m] [Java] [droidefense/engine](https://github.com/droidefense/engine) Droidefense: Advance Android Malware Analysis Framework
+- [**348**Star][1m] [C] [seccomp/libseccomp](https://github.com/seccomp/libseccomp) an easy to use, platform independent, interface to the Linux Kernel's syscall filtering mechanism
+- [**348**Star][1y] [PS] [rootclay/powershell-attack-guide](https://github.com/rootclay/powershell-attack-guide) Powershell Attack Guide
+- [**348**Star][2y] [Py] [maldevel/gdog](https://github.com/maldevel/gdog) A fully featured Windows backdoor that uses Gmail as a C&C server
+- [**348**Star][2y] [PS] [fuzzysecurity/pskernel-primitives](https://github.com/fuzzysecurity/pskernel-primitives) Exploit primitives for PowerShell
+- [**348**Star][2m] [Java] [esapi/esapi-java-legacy](https://github.com/esapi/esapi-java-legacy) ESAPI (The OWASP Enterprise Security API) is a free, open source, web application security control library that makes it easier for programmers to write lower-risk applications.
+- [**348**Star][3y] [C] [cr4sh/smmbackdoor](https://github.com/cr4sh/smmbackdoor) System Management Mode backdoor for UEFI
+- [**347**Star][2m] [Shell] [orlikoski/skadi](https://github.com/orlikoski/Skadi) collection, processing and advanced analysis of forensic artifacts and images.
+- [**347**Star][10m] [C] [wapiflapi/exrs](https://github.com/wapiflapi/exrs) Exercises for learning Reverse Engineering and Exploitation.
+- [**347**Star][4y] [Java] [rsmudge/cortana-scripts](https://github.com/rsmudge/cortana-scripts) A collection of Cortana scripts that you may use with Armitage and Cobalt Strike 2.x. Cortana Scripts are not compatible with Cobalt Strike 3.x. Cobalt Strike 3.x uses a variant of Cortana called Aggressor Script.
+- [**347**Star][1y] [Py] [quickbreach/smbetray](https://github.com/quickbreach/smbetray) SMB MiTM tool with a focus on attacking clients through file content swapping, lnk swapping, as well as compromising any data passed over the wire in cleartext.
+- [**347**Star][2y] [Py] [nopernik/sshpry](https://github.com/nopernik/sshpry) Seamlessly spy on SSH session like it is your tty
+- [**347**Star][2y] [Ruby] [jobertabma/virtual-host-discovery](https://github.com/jobertabma/virtual-host-discovery) A script to enumerate virtual hosts on a server.
+- [**347**Star][5y] [C] [inquisb/shellcodeexec](https://github.com/inquisb/shellcodeexec) Script to execute in memory a sequence of opcodes
+- [**347**Star][6m] [C] [earthquake/chw00t](https://github.com/earthquake/chw00t) Unices chroot breaking tool
+- [**347**Star][2y] [dostoevskylabs/dostoevsky-pentest-notes](https://github.com/dostoevskylabs/dostoevsky-pentest-notes) Notes for taking the OSCP in 2097. Read in book form on GitBook
+- [**347**Star][4d] [Shell] [archstrike/archstrike](https://github.com/archstrike/archstrike) An Arch Linux repository for security professionals and enthusiasts. Done the Arch Way and optimized for i686, x86_64, ARMv6, ARMv7 and ARMv8.
+- [**346**Star][1m] [Py] [ym2011/pest](https://github.com/ym2011/PEST) Here is some simple and useful scripts for penetration.
+- [**346**Star][3m] [C#] [rasta-mouse/tikitorch](https://github.com/rasta-mouse/tikitorch) Process Injection
+- [**346**Star][12d] [hongrisec/web-security-attack](https://github.com/hongrisec/web-security-attack) Web安全相关内容
+- [**346**Star][25d] [C#] [fuzzysecurity/sharp-suite](https://github.com/fuzzysecurity/sharp-suite) My musings with C#
+- [**346**Star][2y] [enzet/symbolic-execution](https://github.com/enzet/symbolic-execution) History of symbolic execution (as well as SAT/SMT solving, fuzzing, and taint data tracking)
+- [**346**Star][11m] [Py] [darkspiritz/darkspiritz](https://github.com/darkspiritz/darkspiritz) A penetration testing framework for Linux, MacOS, and Windows systems.
+- [**346**Star][1y] [C] [bretley/how2exploit_binary](https://github.com/bretley/how2exploit_binary) An in depth tutorial on how to do binary exploitation
+- [**345**Star][2y] [Go] [propervillain/moistpetal](https://github.com/propervillain/moistpetal) Open source offensive security platform for red team, by red team.
+- [**345**Star][4m] [Java] [google/graphicsfuzz](https://github.com/google/graphicsfuzz) A testing framework for automatically finding and simplifying bugs in graphics shader compilers.
+- [**345**Star][1y] [C] [codermjlee/mjcodeobfuscation](https://github.com/codermjlee/mjcodeobfuscation) 一个用于代码混淆和字符串加密的Mac小Demo
+- [**345**Star][3y] [Py] [animeshshaw/hash-algorithm-identifier](https://github.com/animeshshaw/hash-algorithm-identifier) A python tool to identify different Hash Function Algorithms
+- [**344**Star][8d] [Perl] [keydet89/regripper2.8](https://github.com/keydet89/regripper2.8) extracting/parsing information (keys, values, data) from the Registry and presenting it for analysis.
+- [**344**Star][7y] [benvium/libimobiledevice-macosx](https://github.com/benvium/libimobiledevice-macosx) Binary distribution of the libimobiledevice library for Mac OS X
+- [**344**Star][5m] [Py] [adrianvollmer/powerhub](https://github.com/adrianvollmer/powerhub) A post exploitation tool based on a web application, focusing on bypassing endpoint protection and application whitelisting
+- [**343**Star][1y] [valvesoftware/source-1-games](https://github.com/valvesoftware/source-1-games) Source 1 based games such as TF2 and Counter-Strike: Source
+- [**343**Star][2m] [Ruby] [sunitparekh/data-anonymization](https://github.com/sunitparekh/data-anonymization) helps you build anonymized production data dumps which you can use for performance testing, security testing, debugging and development.
+- [**343**Star][1y] [Py] [theopolis/uefi-firmware-parser](https://github.com/theopolis/uefi-firmware-parser) Parse BIOS/Intel ME/UEFI firmware related structures: Volumes, FileSystems, Files, etc
+- [**343**Star][6d] [C++] [nativescript/android-runtime](https://github.com/nativescript/android-runtime) Android runtime for NativeScript (based on V8)
+- [**343**Star][2y] [leelikar/deepweb](https://github.com/leelikar/deepweb) 暗网网址大全TOR
+- [**343**Star][2y] [hannob/meltdownspectre-patches](https://github.com/hannob/meltdownspectre-patches) Summary of the patch status for Meltdown / Spectre
+- [**343**Star][2y] [Py] [eplox/tcp-starvation](https://github.com/eplox/tcp-starvation) TCP-Starvation vulnerability
+- [**343**Star][2y] [C++] [ele7enxxh/poc-exp](https://github.com/ele7enxxh/poc-exp) poc or exp of android vulnerability
+- [**343**Star][12m] [Assembly] [egebalci/amber](https://github.com/egebalci/amber) a reflective PE packer for bypassing security products and mitigations
+- [**343**Star][12m] [Ruby] [calebfenton/dex-oracle](https://github.com/calebfenton/dex-oracle) A pattern based Dalvik deobfuscator which uses limited execution to improve semantic analysis
+- [**343**Star][2y] [Shell] [brannondorsey/mitm-router](https://github.com/brannondorsey/mitm-router) mitm-router:将任何一台Linux 计算机转变成公开的 Wi-Fi 网络,并且默认Man-in-the-middle 所有 http 流量
+- [**342**Star][1y] [Py] [varbaek/xsser](https://github.com/varbaek/xsser) From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017 + Extras
+- [**342**Star][9d] [C++] [thezdi/poc](https://github.com/thezdi/poc) Proofs-of-concept
+- [**342**Star][2m] [C#] [steamdatabase/valveresourceformat](https://github.com/steamdatabase/valveresourceformat) Valve's Source 2 resource file format (also known as Stupid Valve Format) parser and decompiler.
+- [**342**Star][8m] [Py] [skorov/ridrelay](https://github.com/skorov/ridrelay) Enumerate usernames on a domain where you have no creds by using SMB Relay with low priv.
+- [**342**Star][4d] [Shell] [r00t-3xp10it/backdoorppt](https://github.com/r00t-3xp10it/backdoorppt) transform your payload.exe into one fake word doc (.ppt)
+- [**342**Star][5y] [Py] [neohapsis/neopi](https://github.com/neohapsis/neopi) a Python script that uses a variety of statistical methods to detect obfuscated and encrypted content within text/script files
+- [**342**Star][4y] [Shell] [marshyski/quick-secure](https://github.com/marshyski/quick-secure) Quickly secure UNIX/Linux systems
+- [**342**Star][24d] [Augeas] [hercules-team/augeas](https://github.com/hercules-team/augeas) A configuration editing tool and API
+- [**342**Star][18d] [Py] [fgeek/pyfiscan](https://github.com/fgeek/pyfiscan) Free web-application vulnerability and version scanner
+- [**341**Star][1y] [Shell] [dylanbai8/onekey_caddy_php7_sqlite3](https://github.com/dylanbai8/onekey_caddy_php7_sqlite3) 小内存 VPS 一键搭建 Caddy+PHP7+Sqlite3 环境 (支持VPS最小内存64M),一键翻墙 caddy+web(php+sqlite3)+v2ray+bbr。
+- [**341**Star][2y] [C++] [usb-tools/usbproxy-legacy](https://github.com/usb-tools/USBProxy-legacy) A proxy for USB devices, libUSB and gadgetFS - this project is unmaintained, try here:
+- [**341**Star][6m] [C] [zeex/subhook](https://github.com/zeex/subhook) Simple hooking library for C/C++ (x86 only, 32/64-bit, no dependencies)
+- [**341**Star][10m] [yarnpkg/rfcs](https://github.com/yarnpkg/rfcs) RFCs for changes to Yarn
+- [**341**Star][2m] [Go] [wweir/sower](https://github.com/wweir/sower) Sower is a cross-platform intelligent transparent proxy solution.
+- [**341**Star][2y] [Py] [sslab-gatech/drk](https://github.com/sslab-gatech/drk) breaks kernel address space layout randomization (KASLR) by exploiting TLB and decoded i-cache side channel.
+- [**341**Star][2y] [Py] [sarfata/voodooprivacy](https://github.com/sarfata/voodooprivacy) Roll your own VPN server on Amazon EC2 and battle-ready firewall for OS X
+- [**341**Star][8m] [Java] [portswigger/param-miner](https://github.com/portswigger/param-miner) identifies hidden, unlinked parameters. It's particularly useful for finding web cache poisoning vulnerabilities
+- [**341**Star][4m] [Java] [portswigger/backslash-powered-scanner](https://github.com/portswigger/backslash-powered-scanner) Finds unknown classes of injection vulnerabilities
+- [**341**Star][1m] [Shell] [nullarray/roothelper](https://github.com/nullarray/roothelper) A Bash script that downloads and unzips scripts that will aid with privilege escalation on a Linux system.
+- [**341**Star][9m] [Py] [iphelix/dnschef](https://github.com/iphelix/dnschef) DNSChef - DNS proxy for Penetration Testers and Malware Analysts
+- [**341**Star][2y] [C] [hfiref0x/dsefix](https://github.com/hfiref0x/dsefix) Windows x64 Driver Signature Enforcement Overrider
+- [**341**Star][3y] [Py] [fengxuangit/fox-scan](https://github.com/fengxuangit/fox-scan) Fox-scan is a initiative and passive SQL Injection vulnerable Test tools.
+- [**341**Star][5d] [Py] [darryllane/bluto](https://github.com/darryllane/bluto) DNS Recon | Brute Forcer | DNS Zone Transfer | DNS Wild Card Checks | DNS Wild Card Brute Forcer | Email Enumeration | Staff Enumeration | Compromised Account Checking
+- [**341**Star][26d] [D] [cybershadow/rabcdasm](https://github.com/cybershadow/rabcdasm) Robust ABC (ActionScript Bytecode) [Dis-]Assembler
+- [**341**Star][2y] [Py] [c0ny1/xxe-lab](https://github.com/c0ny1/xxe-lab) 一个包含php,java,python,C#等各种语言版本的XXE漏洞Demo
+- [**340**Star][1m] [veracode-research/solr-injection](https://github.com/veracode-research/solr-injection) Apache Solr Injection Research
+- [**340**Star][3m] [C] [thorkill/eresi](https://github.com/thorkill/eresi) The ERESI Reverse Engineering Software Interface
+- [**340**Star][5m] [C] [theofficialflow/trinity](https://github.com/theofficialflow/trinity) Trinity Exploit - Emulator Escape
+- [**340**Star][6m] [teoseller/osquery-attck](https://github.com/teoseller/osquery-attck) Mapping the MITRE ATT&CK Matrix with Osquery
+- [**340**Star][4m] [Py] [stamusnetworks/scirius](https://github.com/stamusnetworks/scirius) Scirius is a web application for Suricata ruleset management.
+- [**340**Star][2m] [softwareunderground/awesome-open-geoscience](https://github.com/softwareunderground/awesome-open-geoscience) Curated from repositories that make our lives as geoscientists, hackers and data wranglers easier or just more awesome
+- [**340**Star][2y] [slowmist/eos-bp-nodes-security-checklist](https://github.com/slowmist/eos-bp-nodes-security-checklist) EOS bp nodes security checklist
+- [**340**Star][2y] [Py] [securityinnovation/authmatrix](https://github.com/securityinnovation/authmatrix) AuthMatrix is a Burp Suite extension that provides a simple way to test authorization in web applications and web services.
+- [**340**Star][2y] [Go] [rapidloop/vlan-nats](https://github.com/rapidloop/vlan-nats) Virtual LAN over NATS
+- [**340**Star][2d] [Py] [qwj/python-proxy](https://github.com/qwj/python-proxy) HTTP/Socks4/Socks5/Shadowsocks/ShadowsocksR/SSH/Redirect/Pf TCP/UDP asynchronous tunnel proxy implemented in Python 3 asyncio.
+- [**340**Star][2d] [Py] [qilingframework/qiling](https://github.com/qilingframework/qiling) Qiling Advanced Binary Emulation framework
+- [**340**Star][2y] [Py] [pathetiq/burpsmartbuster](https://github.com/pathetiq/burpsmartbuster) A Burp Suite content discovery plugin that add the smart into the Buster!
+- [**340**Star][1m] [Py] [leitbogioro/ssr.go](https://github.com/leitbogioro/ssr.go) A new shadowsocksR config manager
+- [**340**Star][2m] [JS] [dns-oarc/packetq](https://github.com/dns-oarc/packetq) A tool that provides a basic SQL-frontend to PCAP-files
+- [**340**Star][2y] [Py] [bugscanteam/githack](https://github.com/bugscanteam/githack) .git 泄漏利用工具,可还原历史版本
+- [**340**Star][11m] [C] [blendin/3snake](https://github.com/blendin/3snake) reads memory from sshd and sudo system calls that handle password based authentication
+- [**340**Star][1m] [veracode-research/solr-injection](https://github.com/veracode-research/solr-injection) Apache Solr Injection Research
+- [**340**Star][2m] [Ruby] [anaynayak/aws-security-viz](https://github.com/anaynayak/aws-security-viz) Visualize your aws security groups.
+- [**339**Star][1y] [C++] [qax-a-team/eventcleaner](https://github.com/QAX-A-Team/EventCleaner) A tool mainly to erase specified records from Windows event logs, with additional functionalities.
+- [**339**Star][5y] [JS] [yndi/darkjpeg](https://github.com/yndi/darkjpeg) JPEG steganography web service
+- [**339**Star][2m] [C] [trailofbits/cb-multios](https://github.com/trailofbits/cb-multios) DARPA Challenges Sets for Linux, Windows, and macOS
+- [**339**Star][1y] [Py] [tophanttechnology/osprey](https://github.com/tophanttechnology/osprey) vul detect framework
+- [**339**Star][1y] [Java] [rub-nds/ws-attacker](https://github.com/rub-nds/ws-attacker) a modular framework for web services penetration testing.
+- [**339**Star][11m] [Py] [joxeankoret/nightmare](https://github.com/joxeankoret/nightmare) A distributed fuzzing testing suite with web administration
+- [**339**Star][11m] [JS] [gabemarshall/brosec](https://github.com/gabemarshall/brosec) Brosec - An interactive reference tool to help security professionals utilize useful payloads and commands.
+- [**339**Star][10d] [Py] [1120362990/vulnerability-list](https://github.com/1120362990/vulnerability-list) 在渗透测试中快速检测常见中间件、组件的高危漏洞。
+- [**338**Star][2d] [Go] [v2ray/domain-list-community](https://github.com/v2ray/domain-list-community) Community managed domain list
+- [**338**Star][28d] [Shell] [umputun/nginx-le](https://github.com/umputun/nginx-le) Nginx with automatic let's encrypt (docker image)
+- [**338**Star][1y] [Ruby] [srcclr/commit-watcher](https://github.com/srcclr/commit-watcher) Find interesting and potentially hazardous commits in git projects
+- [**338**Star][2y] [Py] [pepitoh/vbad](https://github.com/pepitoh/vbad) VBA Obfuscation Tools combined with an MS office document generator
+- [**338**Star][2m] [PHP] [opsxcq/exploit-cve-2016-10033](https://github.com/opsxcq/exploit-cve-2016-10033) PHPMailer < 5.2.18 Remote Code Execution exploit and vulnerable container
+- [**338**Star][2y] [C] [natebrune/silk-guardian](https://github.com/natebrune/silk-guardian) << Silk Guardian >> is an anti-forensic kill-switch that waits for a change on your usb ports and then wipes your ram, deletes precious files, and turns off your computer.
+- [**338**Star][4y] [PS] [kevin-robertson/tater](https://github.com/kevin-robertson/tater) Tater is a PowerShell implementation of the Hot Potato Windows Privilege Escalation exploit from
+- [**338**Star][5m] [Py] [initstring/passphrase-wordlist](https://github.com/initstring/passphrase-wordlist) Passphrase wordlist and hashcat rules for offline cracking of long, complex passwords
+- [**338**Star][7m] [C] [git-hulk/tcpkit](https://github.com/git-hulk/tcpkit) A tool analyzes tcp packets with Lua
+- [**338**Star][3d] [Ruby] [cyberark/conjur](https://github.com/cyberark/conjur) CyberArk Conjur automatically secures secrets used by privileged users and machine identities
+- [**338**Star][3y] [C#] [ben0xa/nps](https://github.com/ben0xa/nps) Not PowerShell
+- [**338**Star][3m] [Py] [alexmojaki/snoop](https://github.com/alexmojaki/snoop) A powerful set of Python debugging tools, based on PySnooper
+- [**337**Star][4m] [C] [merces/pev](https://github.com/merces/pev) The PE file analysis toolkit
+- [**337**Star][2y] [C] [mbevand/silentarmy](https://github.com/mbevand/silentarmy) Zcash miner optimized for AMD & Nvidia GPUs
+- [**337**Star][4d] [C] [lemire/code-used-on-daniel-lemire-s-blog](https://github.com/lemire/code-used-on-daniel-lemire-s-blog) This is a repository for the code posted on my blog
+- [**337**Star][8m] [Py] [dirkjanm/ldapdomaindump](https://github.com/dirkjanm/ldapdomaindump) Active Directory information dumper via LDAP
+- [**336**Star][6d] [Java] [sap/vulnerability-assessment-tool](https://github.com/sap/vulnerability-assessment-tool) Analyses your Java and Python applications for open-source dependencies with known vulnerabilities, using both static analysis and testing to determine code context and usage for greater accuracy.
+- [**336**Star][6y] [C] [orangetw/tsh](https://github.com/orangetw/tsh) Tiny SHell is an open-source UNIX backdoor.
+- [**336**Star][6m] [Py] [fbkcs/thunderdns](https://github.com/fbkcs/thunderdns) This tool can forward TCP traffic over DNS protocol. Non-compile clients + socks5 support.
+- [**336**Star][3m] [Java] [denimgroup/threadfix](https://github.com/denimgroup/threadfix) a software vulnerability management platform. This GitHub site is far out of date. Please go to
+- [**336**Star][4y] [HTML] [cxxr/lostpass](https://github.com/cxxr/lostpass) Pixel-perfect LastPass phishing
+- [**336**Star][3y] [Shell] [0xm3r/cgpwn](https://github.com/0xm3r/cgpwn) A lightweight VM for hardware hacking, RE (fuzzing, symEx, exploiting etc) and wargaming tasks
+- [**335**Star][29d] [stardustsky/saidict](https://github.com/stardustsky/saidict) 弱口令,敏感目录,敏感文件等渗透测试常用攻击字典
+- [**335**Star][4m] [Py] [chris408/ct-exposer](https://github.com/chris408/ct-exposer) An OSINT tool that discovers sub-domains by searching Certificate Transparency logs
+- [**335**Star][3d] [Py] [artisan-roaster-scope/artisan](https://github.com/artisan-roaster-scope/artisan) helps coffee roasters record, analyze, and control roast profiles
+- [**335**Star][2y] [PS] [arno0x/powershellscripts](https://github.com/arno0x/powershellscripts) Collection of PowerShell scripts
+- [**334**Star][3m] [Py] [romanz/trezor-agent](https://github.com/romanz/trezor-agent) Hardware-based SSH/PGP agent
+- [**334**Star][2m] [Py] [raikia/uhoh365](https://github.com/raikia/uhoh365) A script that can see if an email address is valid in Office365 (user/email enumeration). This does not perform any login attempts, is unthrottled, and is incredibly useful for social engineering assessments to find which emails exist and which don't.
+- [**334**Star][3y] [Py] [nccgroup/abptts](https://github.com/nccgroup/abptts) TCP tunneling over HTTP/HTTPS for web application servers
+- [**334**Star][3d] [JS] [meituan-dianping/lyrebird](https://github.com/meituan-dianping/lyrebird) 基于拦截以及模拟HTTP/HTTPS网络请求的面向移动应用的插件化测试工作台
+- [**334**Star][2d] [Shell] [loyess/shell](https://github.com/loyess/shell) Shadowsocks-libev with plugins one-click installation. For example: v2ray-plugin, kcptun, simple-obfs, goquiet, cloak...
+- [**334**Star][2y] [C#] [foxglovesec/rottenpotato](https://github.com/foxglovesec/rottenpotato) RottenPotato local privilege escalation from service account to SYSTEM
+- [**333**Star][9d] [TeX] [radareorg/radare2book](https://github.com/radareorg/radare2book) Radare2 official book
+- [**333**Star][2y] [HTML] [superkieran/wooyundrops](https://github.com/superkieran/wooyundrops) Wooyun知识库,乌云知识库,
+- [**333**Star][1y] [C++] [rv8-io/rv8](https://github.com/rv8-io/rv8) RISC-V simulator for x86-64
+- [**333**Star][8m] [Py] [rek7/fireelf](https://github.com/rek7/fireelf) Fileless Linux Malware Framework
+- [**333**Star][4m] [Py] [rbsec/dnscan](https://github.com/rbsec/dnscan) a python wordlist-based DNS subdomain scanner.
+- [**333**Star][7m] [Dockerfile] [mykings/docker-vulnerability-environment](https://github.com/mykings/docker-vulnerability-environment) Use the docker to build a vulnerability environment
+- [**333**Star][9m] [JS] [mhzed/wstunnel](https://github.com/mhzed/wstunnel) tunnel over websocket
+- [**333**Star][6d] [PS] [mgeeky/penetration-testing-tools](https://github.com/mgeeky/penetration-testing-tools) A collection of my Penetration Testing scripts, tools, cheatsheets collected over years, used during real-world assignments or collected from various good quality sources.
+- [**333**Star][12m] [Py] [mdsecactivebreach/linkedint](https://github.com/mdsecactivebreach/linkedint) A LinkedIn scraper for reconnaissance during adversary simulation
+- [**333**Star][8d] [C] [mattiwatti/efiguard](https://github.com/mattiwatti/efiguard) Disable PatchGuard and DSE at boot time
+- [**333**Star][3y] [Py] [jandre/safe-commit-hook](https://github.com/jandre/safe-commit-hook) pre-commit hook for Git that checks for suspicious files.
+- [**332**Star][1y] [Py] [leapsecurity/inspy](https://github.com/leapsecurity/InSpy) A python based LinkedIn enumeration tool
+- [**332**Star][11d] [Go] [unixpickle/gobfuscate](https://github.com/unixpickle/gobfuscate) Obfuscate Go binaries and packages
+- [**332**Star][2d] [Coq] [symbiflow/prjxray](https://github.com/symbiflow/prjxray) Documenting the Xilinx 7-series bit-stream format.
+- [**332**Star][8m] [Py] [romanvm/python-web-pdb](https://github.com/romanvm/python-web-pdb) Web-based remote UI for Python's PDB debugger
+- [**332**Star][1y] [Ruby] [packetfu/packetfu](https://github.com/packetfu/packetfu) a mid-level packet manipulation library for Ruby
+- [**332**Star][7m] [offensive-security/kali-linux-recipes](https://github.com/offensive-security/kali-linux-recipes) Kali Linux Recipes
+- [**332**Star][12m] [Py] [joxeankoret/pigaios](https://github.com/joxeankoret/pigaios) A tool for matching and diffing source codes directly against binaries.
+- [**332**Star][5y] [Py] [graydon/bors](https://github.com/graydon/bors) Integration robot for buildbot and github
+- [**332**Star][6d] [Java] [datatheorem/trustkit-android](https://github.com/datatheorem/trustkit-android) Easy SSL pinning validation and reporting for Android.
+- [**332**Star][3y] [Logos] [bishopfox/ispy](https://github.com/bishopfox/ispy) A reverse engineering framework for iOS
+- [**332**Star][11m] [c] [tildeslash/monit](https://bitbucket.org/tildeslash/monit)
+- [**331**Star][7m] [Py] [s0md3v/jshell](https://github.com/s0md3v/JShell) JShell - Get a JavaScript shell with XSS.
+- [**331**Star][7m] [C] [wbenny/injdrv](https://github.com/wbenny/injdrv) proof-of-concept Windows Driver for injecting DLL into user-mode processes using APC
+- [**331**Star][6y] [JS] [toolness/security-adventure](https://github.com/toolness/security-adventure) Go on an educational Web security adventure!
+- [**331**Star][5m] [Go] [sysdream/hershell](https://github.com/sysdream/hershell) a simple TCP reverse shell written in Go.
+- [**331**Star][1y] [snyk/vulnerabilitydb](https://github.com/snyk/vulnerabilitydb) Snyk's public vulnerability database
+- [**331**Star][2y] [Py] [sgayou/medfusion-4000-research](https://github.com/sgayou/medfusion-4000-research) Medfusion 4000 security research & a MQX RCE.
+- [**331**Star][1m] [C] [pwarren/rtl-entropy](https://github.com/pwarren/rtl-entropy) An entropy generator using SDR peripherals, including rtl-sdr and BladeRF
+- [**331**Star][9m] [C] [olimex/diy-laptop](https://github.com/olimex/diy-laptop) Do It Yourself Open Source Hardware and Software Modular Hacker's Friendly Laptop
+- [**331**Star][1m] [Java] [nationalsecurityagency/timely](https://github.com/nationalsecurityagency/timely) Accumulo backed time series database
+- [**331**Star][1y] [Py] [flipkart-incubator/rta](https://github.com/flipkart-incubator/rta) Red team Arsenal - An intelligent scanner to detect security vulnerabilities in company's layer 7 assets.
+- [**331**Star][7y] [Java] [brutall/brut.apktool](https://github.com/brutall/brut.apktool) A tool for reverse engineering Android apk files
+- [**331**Star][29d] [Jupyter Notebook] [beeva/beeva-best-practices](https://github.com/beeva/beeva-best-practices) Best Practices and Style Guides in BEEVA
+- [**330**Star][3y] [C++] [xilun/cbwin](https://github.com/xilun/cbwin) Launch Windows programs from "Bash on Ubuntu on Windows" (WSL)
+- [**330**Star][1y] [Py] [vmware/liota](https://github.com/vmware/liota)
+- [**330**Star][2d] [C] [spurious/sdl-mirror](https://github.com/spurious/sdl-mirror) An unofficial, automated SDL2 and SDL1.2 HG mirror.
+- [**330**Star][4m] [C++] [safebreach-labs/pinjectra](https://github.com/safebreach-labs/pinjectra) Pinjectra is a C/C++ OOP-like library that implements Process Injection techniques (with focus on Windows 10 64-bit)
+- [**330**Star][7m] [Java] [jaegertracing/jaeger-kubernetes](https://github.com/jaegertracing/jaeger-kubernetes) Support for deploying Jaeger into Kubernetes
+- [**330**Star][10m] [C#] [ghostpack/sharpdump](https://github.com/ghostpack/sharpdump) SharpDump is a C# port of PowerSploit's Out-Minidump.ps1 functionality.
+- [**330**Star][1m] [Py] [daniestevez/gr-satellites](https://github.com/daniestevez/gr-satellites) GNU Radio decoders for several Amateur satellites
+- [**330**Star][2y] [Py] [cyberheartmi9/cve-2017-12617](https://github.com/cyberheartmi9/cve-2017-12617) Apache Tomcat < 9.0.1 (Beta) / < 8.5.23 / < 8.0.47 / < 7.0.8 - JSP Upload Bypass / Remote Code Execution
+- [**330**Star][4m] [Go] [capsule8/capsule8](https://github.com/capsule8/capsule8) cloud-native behavioral security monitoring
+- [**330**Star][5y] [Py] [byt3bl33d3r/pth-toolkit](https://github.com/byt3bl33d3r/pth-toolkit) Modified version of the passing-the-hash tool collection made to work straight out of the box
+- [**330**Star][15d] [JS] [auth0/repo-supervisor](https://github.com/auth0/repo-supervisor) Scan your code for security misconfiguration, search for passwords and secrets.
+- [**329**Star][3y] [Java] [seven456/safewebview](https://github.com/seven456/safewebview) Android Safe WebView、解决WebView的Js对象注入漏洞、支持网页将JS函数(function)传到Java层,方便回调;
+- [**329**Star][1y] [C++] [polidea/siriusobfuscator](https://github.com/polidea/siriusobfuscator) a tool for performing source-to-source obfuscation of Swift projects
+- [**329**Star][3m] [Py] [pfalcon/scratchabit](https://github.com/pfalcon/scratchabit) Easily retargetable and hackable interactive disassembler with IDAPython-compatible plugin API
+- [**329**Star][4y] [C#] [koczkatamas/cve-2016-0051](https://github.com/koczkatamas/cve-2016-0051) EoP (Win7) & BSoD (Win10) PoC for CVE-2016-0051 (MS-016)
+- [**329**Star][5m] [Py] [knipknap/exscript](https://github.com/knipknap/exscript) A Python module making Telnet and SSH easy
+- [**329**Star][3y] [Visual Basic .NET] [khr0x40sh/macroshop](https://github.com/khr0x40sh/macroshop) Collection of scripts to aid in delivering payloads via Office Macros. Most are python. See
+- [**329**Star][10m] [Py] [justicerage/freedomfighting](https://github.com/justicerage/freedomfighting) A collection of scripts which may come in handy during your freedom fighting activities.
+- [**329**Star][5d] [Java] [jaegertracing/jaeger-client-java](https://github.com/jaegertracing/jaeger-client-java) Jaeger Bindings for Java OpenTracing API
+- [**329**Star][2m] [CSS] [guyoung/captfencoder](https://github.com/guyoung/captfencoder) CaptfEncoder是一款跨平台网络安全工具套件,提供网络安全相关编码转换、古典密码、密码学、特殊编码等工具,并聚合各类在线工具。
+- [**329**Star][2d] [Java] [bit4woo/knife](https://github.com/bit4woo/knife) A burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅
+- [**329**Star][1y] [Shell] [1n3/goohak](https://github.com/1n3/goohak) Automatically Launch Google Hacking Queries Against A Target Domain
+- [**328**Star][7m] [TS] [plasma-umass/bleak](https://github.com/plasma-umass/bleak) BLeak: Automatically Debugging Memory Leaks in Web Applications
+- [**328**Star][2d] [stamparm/ipsum](https://github.com/stamparm/ipsum) Daily feed of bad IPs (with blacklist hit scores)
+- [**328**Star][1y] [JS] [shmakov/honeypot](https://github.com/shmakov/honeypot) Low interaction honeypot that displays real time attacks
+- [**328**Star][3y] [Pascal] [malwares/remote-access-trojan](https://github.com/malwares/remote-access-trojan) Windows Remote-Access-Trojan
+- [**328**Star][2y] [C#] [liberxue/wechatyunchart](https://github.com/liberxue/wechatyunchart) 微信多开多账号机器人 云客服系统 微商营销 系统web协议一键登录 非公众号微信机器人微信群管家 微信自动回复 微信定时发送消息 微信多账号登录 微信网页版本协议多开 一键登录 红包数量提醒 微信用户识别男女签名备注地理位置等,群发 自动发消息 定时发消息 群消息监控 机器人回复 ,定时回复,超时回复 聊天记录保存,聊天记录查看
+- [**328**Star][3y] [Py] [faizann24/fwaf-machine-learning-driven-web-application-firewall](https://github.com/faizann24/fwaf-machine-learning-driven-web-application-firewall) Machine learning driven web application firewall to detect malicious queries with high accuracy.
+- [**328**Star][12d] [Py] [efforg/starttls-everywhere](https://github.com/efforg/starttls-everywhere) A system for ensuring & authenticating STARTTLS encryption between mail servers
+- [**328**Star][11m] [C] [e-ago/bitcracker](https://github.com/e-ago/bitcracker) BitCracker is the first open source password cracking tool for memory units encrypted with BitLocker
+- [**328**Star][3m] [Py] [defaultnamehere/cookie_crimes](https://github.com/defaultnamehere/cookie_crimes) Read local Chrome cookies without root or decrypting
+- [**328**Star][4m] [C] [csete/gpredict](https://github.com/csete/gpredict) a real time satellite tracking and orbit prediction program
+for the Linux desktop
+- [**328**Star][1m] [TS] [algolia/hn-search](https://github.com/algolia/hn-search) Hacker News Search
+- [**327**Star][16d] [Py] [datadriventests/ddt](https://github.com/datadriventests/ddt) Data-Driven Tests for Python Unittest
+- [**327**Star][3m] [Shell] [vanhoefm/modwifi](https://github.com/vanhoefm/modwifi)
+- [**327**Star][15d] [Java] [spring-cloud/spring-cloud-openfeign](https://github.com/spring-cloud/spring-cloud-openfeign) Support for using OpenFeign in Spring Cloud apps
+- [**327**Star][1m] [C] [royhills/arp-scan](https://github.com/royhills/arp-scan) The ARP Scanner
+- [**327**Star][3y] [JS] [qgy18/pangolin](https://github.com/qgy18/pangolin) A light weight http tunnels to localhost.
+- [**327**Star][4y] [JS] [pwnsdx/randomdns](https://github.com/pwnsdx/randomdns) improve the security, privacy and anonymity of DNSCrypt
+- [**327**Star][6m] [Go] [nhoya/gosint](https://github.com/nhoya/gosint) OSINT Swiss Army Knife
+- [**327**Star][30d] [Py] [m8r0wn/nullinux](https://github.com/m8r0wn/nullinux) Internal penetration testing tool for Linux that can be used to enumerate OS information, domain information, shares, directories, and users through SMB.
+- [**327**Star][2m] [PS] [joelgmsec/autordpwn](https://github.com/joelgmsec/autordpwn) The Shadow Attack Framework
+- [**327**Star][9d] [Py] [fireeye/stringsifter](https://github.com/fireeye/stringsifter) A machine learning tool that automatically ranks strings based on their relevance for malware analysis.
+- [**327**Star][3y] [Ruby] [antisnatchor/phishlulz](https://github.com/antisnatchor/phishlulz)
+- [**326**Star][22d] [Go] [square/sharkey](https://github.com/square/sharkey) Sharkey is a service for managing certificates for use by OpenSSH
+- [**326**Star][10m] [Py] [samhaxr/hackbox](https://github.com/samhaxr/hackbox) HackBox is the combination of awesome techniques. [1] - Xss [2] - Exploits [3] - Subdomain scanner [4] - Whois Lookup [5] - SSRF Injection [6] - Nmap Auto banner [7] - Js Url parser [8] - Web Headers [9] - Listener [10] - Current Network Stats [11] - CORS Misconfig [12] - AWS S3 Misconfig
+- [**326**Star][9m] [pxlpnk/awesome-ruby-security](https://github.com/pxlpnk/awesome-ruby-security) Awesome Ruby Security resources
+- [**326**Star][2d] [Batchfile] [mitchellkrogza/ultimate.hosts.blacklist](https://github.com/mitchellkrogza/ultimate.hosts.blacklist) The Ultimate Unified Hosts file for protecting your network, computer, smartphones and Wi-Fi devices against millions of bad web sites. Protect your children and family from gaining access to bad web sites and protect your devices and pc from being infected with Malware or Ransomware.
+- [**326**Star][2y] [Java] [mar-v-in/arthook](https://github.com/mar-v-in/arthook) Library for hooking on ART
+- [**326**Star][3m] [Shell] [extremeshok/clamav-unofficial-sigs](https://github.com/extremeshok/clamav-unofficial-sigs) ClamAV Unofficial Signatures Updater maintained by eXtremeSHOK.com
+- [**326**Star][6y] [C] [diegocr/netcat](https://github.com/diegocr/netcat) NetCat for Windows
+- [**326**Star][4m] [C++] [cedarctic/digispark-scripts](https://github.com/cedarctic/digispark-scripts) USB Rubber Ducky type scripts written for the DigiSpark.
+- [**326**Star][2y] [Py] [baldassarrefe/deep-koalarization](https://github.com/baldassarrefe/deep-koalarization) Keras/Tensorflow implementation of our paper Grayscale Image Colorization using deep CNN and Inception-ResNet-v2 (
+- [**325**Star][27d] [C++] [secure-software-engineering/phasar](https://github.com/secure-software-engineering/phasar) A LLVM-based static analysis framework.
+- [**325**Star][2m] [C] [xelerance/xl2tpd](https://github.com/xelerance/xl2tpd) an implementation of the Layer 2 Tunnelling Protocol (RFC 2661)
+- [**325**Star][3m] [Py] [vulmon/vulmap](https://github.com/vulmon/vulmap) Vulmap Online Local Vulnerability Scanners Project
+- [**325**Star][3d] [PHP] [scheb/two-factor-bundle](https://github.com/scheb/two-factor-bundle) Two-factor authentication for Symfony applications
+- [**325**Star][5m] [Go] [saturnsvoid/gobot2](https://github.com/saturnsvoid/gobot2) Second Version of The GoBot Botnet, But more advanced.
+- [**325**Star][3y] [Shell] [nsakey/nsa-rules](https://github.com/nsakey/nsa-rules) Password cracking rules and masks for hashcat that I generated from cracked passwords.
+- [**325**Star][3y] [mikesiko/practicalmalwareanalysis-labs](https://github.com/mikesiko/practicalmalwareanalysis-labs) Binaries for the book Practical Malware Analysis
+- [**325**Star][2y] [TeX] [ivyl/rootkit](https://github.com/ivyl/rootkit) Sample Rootkit for Linux
+- [**325**Star][6d] [Py] [initstring/linkedin2username](https://github.com/initstring/linkedin2username) Generate username lists for companies on LinkedIn
+- [**324**Star][1y] [Java] [ysrc/liudao](https://github.com/ysrc/liudao) “六道”实时业务风控系统
+- [**324**Star][11m] [Py] [secwiki/office-exploits](https://github.com/secwiki/office-exploits) office-exploits Office漏洞集合
+- [**324**Star][2y] [Rust] [pravic/winapi-kmd-rs](https://github.com/pravic/winapi-kmd-rs) Windows Kernel-Mode Drivers written in Rust
+- [**324**Star][1y] [JS] [nccgroup/wssip](https://github.com/nccgroup/wssip) Application for capturing, modifying and sending custom WebSocket data from client to server and vice versa.
+- [**324**Star][8m] [Py] [jasonstrimpel/volatility-trading](https://github.com/jasonstrimpel/volatility-trading) A complete set of volatility estimators based on Euan Sinclair's Volatility Trading
+- [**324**Star][5y] [C] [ioerror/tlsdate](https://github.com/ioerror/tlsdate) secure parasitic rdate replacement
+- [**324**Star][5m] [JS] [hr/crypter](https://github.com/hr/crypter) An innovative, convenient and secure cross-platform encryption app
+- [**324**Star][11m] [Py] [alessandroz/lazagneforensic](https://github.com/alessandroz/lazagneforensic) Windows passwords decryption from dump files
+- [**323**Star][9d] [PS] [fortynorthsecurity/egress-assess](https://github.com/FortyNorthSecurity/Egress-Assess) Egress-Assess is a tool used to test egress data detection capabilities
+- [**323**Star][29d] [Shell] [zmarch/orc](https://github.com/zmarch/orc) Orc is a post-exploitation framework for Linux written in Bash
+- [**323**Star][3y] [C] [vusec/revanc](https://github.com/vusec/revanc) Reverse Engineering Page Table Caches in Your Processor
+- [**323**Star][10m] [QMake] [ncatlin/rgat](https://github.com/ncatlin/rgat) 指令追踪可视化, 辅助建立目标行为和代码之间的连接.
+- [**323**Star][3y] [Py] [ius/rsatool](https://github.com/ius/rsatool) rsatool can be used to calculate RSA and RSA-CRT parameters
+- [**323**Star][21d] [Py] [atc-project/atomic-threat-coverage](https://github.com/atc-project/atomic-threat-coverage) Actionable analytics designed to combat threats based on MITRE's ATT&CK.
+- [**322**Star][3d] [HTML] [tanjiti/sec_profile](https://github.com/tanjiti/sec_profile) 爬取secwiki和xuanwu.github.io/sec.today,分析安全信息站点、安全趋势、提取安全工作者账号(twitter,weixin,github等)
+- [**322**Star][1y] [C] [smartdone/dexdump](https://github.com/smartdone/dexdump) 快速脱一代壳的xposed插件
+- [**322**Star][2m] [ObjC] [auth0/simplekeychain](https://github.com/auth0/simplekeychain) A Keychain helper for iOS to make it very simple to store/obtain values from iOS Keychain
+- [**322**Star][1y] [C++] [alicanakyol/sems](https://github.com/alicanakyol/sems) Virtualbox, VirtualMachine, Cuckoo, Anubis, ThreatExpert, Sandboxie, QEMU, Analysis Tools Detection Tools
+- [**321**Star][4y] [Py] [ztrix/zio](https://github.com/ztrix/zio) easy-to-use io library for pwning development, supporting an unified interface for local process pwning and TCP socket io
+- [**321**Star][7m] [C#] [yalcinyolalan/wssat](https://github.com/yalcinyolalan/wssat) web service security scanning tool which provides a dynamic environment to add, update or delete vulnerabilities by just editing its configuration files
+- [**321**Star][4y] [Perl] [truongkma/ctf-tools](https://github.com/truongkma/ctf-tools) tổng hợp tool ctf
+- [**321**Star][1m] [Go] [tomnomnom/assetfinder](https://github.com/tomnomnom/assetfinder) Find domains and subdomains related to a given domain
+- [**321**Star][2y] [PHP] [tanjiti/webshellsample](https://github.com/tanjiti/webshellsample) webshell sample for WebShell Log Analysis
+- [**321**Star][2y] [Kotlin] [ollide/intellij-java2smali](https://github.com/ollide/intellij-java2smali) A plugin for IntelliJ IDEA & Android Studio to easily compile Java & Kotlin files to smali.
+- [**321**Star][3m] [PS] [kmkz/pentesting](https://github.com/kmkz/pentesting) Tricks for penetration testing
+- [**321**Star][8d] [C] [google/safeside](https://github.com/google/safeside) Understand and mitigate software-observable side-channels
+- [**321**Star][24d] [C] [dyninst/dyninst](https://github.com/dyninst/dyninst) Tools for binary instrumentation, analysis, and modification.
+- [**320**Star][22d] [Py] [mr-un1k0d3r/scshell](https://github.com/mr-un1k0d3r/scshell) Fileless lateral movement tool that relies on ChangeServiceConfigA to run command
+- [**320**Star][3m] [Solidity] [provable-things/ethereum-examples](https://github.com/provable-things/ethereum-examples) Code examples showing how to use the Provable API on Ethereum
+- [**320**Star][9m] [JS] [zyszys/awesome-captcha](https://github.com/zyszys/awesome-captcha)
+- [**320**Star][2d] [Py] [vector35/binaryninja-api](https://github.com/vector35/binaryninja-api) Public API, examples, documentation and issues for Binary Ninja
+- [**320**Star][2m] [Py] [owasp/owasp-vwad](https://github.com/owasp/owasp-vwad) The OWASP Vulnerable Web Applications Directory Project (VWAD) is a comprehensive and well maintained registry of all known vulnerable web applications currently available.
+- [**320**Star][12m] [cryin/paper](https://github.com/cryin/paper) Web Security Technology & Vulnerability Analysis Whitepapers
+- [**320**Star][2m] [HTML] [coinbase/salus](https://github.com/coinbase/salus) Security scanner coordinator
+- [**319**Star][3m] [xsleaks/xsleaks](https://github.com/xsleaks/xsleaks) A collection of browser-based side channel attack vectors.
+- [**319**Star][27d] [Go] [wangyihang/platypus](https://github.com/wangyihang/platypus) A modern multiple reverse shell sessions/clients manager via terminal written in go
+- [**319**Star][7d] [C#] [tmoonlight/nsmartproxy](https://github.com/tmoonlight/nsmartproxy) NSmartProxy是一款开源免费的内网穿透工具。采用.NET CORE的全异步模式打造。(NSmartProxy is an open source reverse proxy tool that creates a secure tunnel from a public endpoint to a locally service.)
+- [**319**Star][27d] [C++] [silverf0x/rpcview](https://github.com/silverf0x/rpcview) RpcView is a free tool to explore and decompile Microsoft RPC interfaces
+- [**319**Star][1y] [Py] [securing/dumpsterdiver](https://github.com/securing/dumpsterdiver) Tool to search secrets in various filetypes.
+- [**319**Star][4m] [HTML] [intezer/linux-explorer](https://github.com/intezer/linux-explorer) Easy-to-use live forensics toolbox for Linux endpoints
+- [**319**Star][1m] [C] [hfiref0x/syscalltables](https://github.com/hfiref0x/syscalltables) Windows NT x64 Syscall tables
+- [**319**Star][2y] [ObjC] [doadam/ziva](https://github.com/doadam/ziva) An iOS kernel exploit designated to work on all iOS devices <= 10.3.1
+- [**319**Star][13d] [cryptax/confsec](https://github.com/cryptax/confsec) Security, hacking conferences (list)
+- [**319**Star][24d] [Py] [census/shadow](https://github.com/census/shadow) jemalloc heap exploitation framework
+- [**319**Star][2m] [Py] [admintony/svnexploit](https://github.com/admintony/svnexploit) SvnExploit支持SVN源代码泄露全版本Dump源码
+- [**319**Star][9m] [Py] [a2u/cve-2018-7600](https://github.com/a2u/cve-2018-7600)
+- [**318**Star][20d] [trustedsec/physical-docs](https://github.com/trustedsec/physical-docs) This is a collection of legal wording and documentation used for physical security assessments. The goal is to hopefully allow this as a template for other companies to use and to protect themselves when conducting physical security assessments.
+- [**318**Star][1y] [Ruby] [carletonstuberg/browser-backdoor](https://github.com/CarletonStuberg/browser-backdoor) BrowserBackdoor is an Electron Application with a JavaScript WebSocket Backdoor and a Ruby Command-Line Listener
+- [**318**Star][3d] [Java] [wiglenet/wigle-wifi-wardriving](https://github.com/wiglenet/wigle-wifi-wardriving) Nethugging client for Android, from wigle.net
+- [**318**Star][1y] [C#] [spiderlabs/dohc2](https://github.com/spiderlabs/dohc2) DoHC2 allows the ExternalC2 library from Ryan Hanson (
+- [**318**Star][3m] [C] [rehints/publications](https://github.com/rehints/publications) Conference slides and White-papers
+- [**318**Star][3y] [Py] [j91321/rext](https://github.com/j91321/rext) Router EXploitation Toolkit - small toolkit for easy creation and usage of various python scripts that work with embedded devices.
+- [**318**Star][18d] [C] [frida/frida-core](https://github.com/frida/frida-core) Frida core library intended for static linking into bindings
+- [**318**Star][2y] [C] [fireeye/rvmi](https://github.com/fireeye/rvmi) A New Paradigm For Full System Analysis
+- [**318**Star][12m] [crazywa1ker/darthsidious-chinese](https://github.com/crazywa1ker/darthsidious-chinese) DarthSidious 中文版
+- [**318**Star][10m] [Py] [cisco-sas/kitty](https://github.com/cisco-sas/kitty) Fuzzing framework written in python
+- [**318**Star][7d] [JS] [chichou/bagbak](https://github.com/ChiChou/bagbak) Yet another frida based iOS dumpdecrypted, works on iOS 13 with checkra1n and supports decrypting app extensions
+- [**318**Star][2y] [C++] [bastilleresearch/gr-lora](https://github.com/bastilleresearch/gr-lora) GNU Radio OOT module implementing the LoRa PHY, based on
+- [**317**Star][2y] [ysrc/f-scrack](https://github.com/ysrc/f-scrack) F-Scrack is a single file bruteforcer supports multi-protocol
+- [**317**Star][6m] [Py] [williballenthin/python-idb](https://github.com/williballenthin/python-idb) a library for accessing the contents of IDA Pro databases
+- [**317**Star][4m] [JS] [vngkv123/asiagaming](https://github.com/vngkv123/asiagaming) Chrome, Safari Exploitation
+- [**317**Star][5y] [shadowsocksr-rm/shadowsocks-rss](https://github.com/shadowsocksr-rm/shadowsocks-rss) ShadowsocksR update rss, SSR organization
+- [**317**Star][3y] [C] [sdhand/x11fs](https://github.com/sdhand/x11fs) A tool for manipulating X windows
+- [**317**Star][4m] [push0ebp/sig-database](https://github.com/push0ebp/sig-database) IDA FLIRT Signature Database
+- [**317**Star][13d] [JS] [privacypass/challenge-bypass-extension](https://github.com/privacypass/challenge-bypass-extension) the Privacy Pass extension implements the Privacy Pass protocol for providing a private authentication mechanism during web browsing.
+- [**317**Star][3y] [C++] [pipesocks/pipesocks](https://github.com/pipesocks/pipesocks) A pipe-like SOCKS5 tunnel system.
+- [**317**Star][7d] [C] [phaag/nfdump](https://github.com/phaag/nfdump) Netflow processing tools
+- [**317**Star][1m] [Visual Basic .NET] [nccgroup/vcg](https://github.com/nccgroup/vcg) Code security scanning tool.
+- [**317**Star][2y] [marcan/speculation-bugs](https://github.com/marcan/speculation-bugs) Docs and resources on CPU Speculative Execution bugs
+- [**317**Star][1y] [C++] [m0n0ph1/process-hollowing](https://github.com/m0n0ph1/process-hollowing) Great explanation of Process Hollowing (a Technique often used in Malware)
+- [**317**Star][5y] [C++] [frida/cryptoshark](https://github.com/frida/cryptoshark) Self-optimizing cross-platform code tracer based on dynamic recompilation
+- [**317**Star][2m] [HTML] [eugenekolo/sec-tools](https://github.com/eugenekolo/sec-tools) A set of security related tools
+- [**317**Star][3y] [C] [chobits/tapip](https://github.com/chobits/tapip) user-mode TCP/IP stack based on linux tap device
+- [**316**Star][6d] [PHP] [anonaddy/anonaddy](https://github.com/anonaddy/anonaddy) Anonymous email forwarding
+- [**316**Star][5d] [Java] [spongepowered/mixin](https://github.com/spongepowered/mixin) Mixin is a trait/mixin and bytecode weaving framework for Java using ASM
+- [**316**Star][3y] [C] [scumjr/dirtycow-vdso](https://github.com/scumjr/dirtycow-vdso) PoC for Dirty COW (CVE-2016-5195)
+- [**316**Star][2m] [C] [ohjeongwook/darungrim](https://github.com/ohjeongwook/darungrim) A patch analysis tool
+ - [IDA插件](https://github.com/ohjeongwook/darungrim/tree/master/Src/IDAPlugin)
+ - [DGEngine](https://github.com/ohjeongwook/darungrim/tree/master/Src/DGEngine)
+- [**316**Star][7y] [Py] [moxie0/chapcrack](https://github.com/moxie0/chapcrack) A tool for parsing and decrypting MS-CHAPv2 network handshakes
+- [**316**Star][3d] [C++] [knxd/knxd](https://github.com/knxd/knxd) a very common building automation protocol which runs on dedicated 9600-baud wire as well as IP multicast
+- [**316**Star][1y] [PHP] [grt1st/wooyun_search](https://github.com/grt1st/wooyun_search) 乌云公开漏洞、知识库搜索 search from wooyun.org
+- [**316**Star][2y] [Py] [ethventures/cryptotracker](https://github.com/ethventures/cryptotracker) A complete open source system for tracking and visualizing cryptocurrency price movements on leading exchanges
+- [**316**Star][8m] [HTML] [ethereum/ethereum-org](https://github.com/ethereum/ethereum-org) [ARCHIVED] Ethereum Foundation website from 2016-2019
+- [**316**Star][24d] [C] [ascii-boxes/boxes](https://github.com/ascii-boxes/boxes) Command line ASCII boxes unlimited!
+- [**315**Star][11d] [trimstray/technical-whitepapers](https://github.com/trimstray/technical-whitepapers) Collection of IT whitepapers, presentations, pdfs; hacking, web app security, db, reverse engineering and more; EN/PL.
+- [**315**Star][2y] [Py] [tnich/honssh](https://github.com/tnich/honssh) log all SSH communications between a client and server.
+- [**315**Star][1y] [C] [tharina/blackhoodie-2018-workshop](https://github.com/tharina/blackhoodie-2018-workshop) Slides and challenges for my binary exploitation workshop at BlackHoodie 2018.
+- [**315**Star][5y] [C] [seastorm/puttyrider](https://github.com/seastorm/puttyrider) Hijack Putty sessions in order to sniff conversation and inject Linux commands.
+- [**315**Star][8m] [Py] [n0fate/chainbreaker](https://github.com/n0fate/chainbreaker) Mac OS X Keychain Forensic Tool
+- [**315**Star][26d] [Py] [circl/lookyloo](https://github.com/circl/lookyloo) Lookyloo is a web interface allowing to scrape a website and then displays a tree of domains calling each other.
+- [**314**Star][1y] [Go] [benjojo/bgp-battleships](https://github.com/benjojo/bgp-battleships) Play battleships using BGP
+- [**314**Star][6m] [waylau/vpngate-mirrors](https://github.com/waylau/vpngate-mirrors) Here are the newset VPN Gate web site’s mirrors .With the VPN Gate, you can get through your government's firewall to browse restricted websites.提供最新的访问 VPN Gate 镜像网站,通过使用 VPN 自由访问互联网(翻墙)!
+- [**314**Star][5d] [C++] [trailofbits/pe-parse](https://github.com/trailofbits/pe-parse) Principled, lightweight C/C++ PE parser
+- [**314**Star][3y] [PHP] [snoopysecurity/dvws](https://github.com/snoopysecurity/dvws) Damn Vulnerable Web Services is an insecure web application with multiple vulnerable web service components that can be used to learn real world web service vulnerabilities.
+- [**314**Star][3y] [Py] [saelo/armpwn](https://github.com/saelo/armpwn) Repository to train/learn memory corruption on the ARM platform.
+- [**314**Star][7d] [C++] [psi-rockin/dobiestation](https://github.com/psi-rockin/dobiestation) A dog-themed PS2 emulator
+- [**314**Star][2y] [PHP] [offensive-security/masscan-web-ui](https://github.com/offensive-security/masscan-web-ui) MASSCAN Web UI
+- [**314**Star][5m] [Py] [mvrozanti/rat-via-telegram](https://github.com/mvrozanti/rat-via-telegram) Windows Remote Administration Tool via Telegram
+- [**314**Star][12m] [Gherkin] [middleman/middleman-blog](https://github.com/middleman/middleman-blog) Blog Engine Extension
+- [**314**Star][4y] [C] [jvinet/knock](https://github.com/jvinet/knock) A port-knocking daemon
+- [**314**Star][8m] [JS] [jivesearch/jivesearch](https://github.com/jivesearch/jivesearch) A search engine that doesn't track you.
+- [**314**Star][4m] [Py] [hash3lizer/wifibroot](https://github.com/hash3lizer/wifibroot) A WiFi Pentest Cracking tool for WPA/WPA2 (Handshake, PMKID, Cracking, EAPOL, Deauthentication)
+- [**314**Star][2y] [PS] [dafthack/powermeta](https://github.com/dafthack/powermeta) PowerMeta searches for publicly available files hosted on various websites for a particular domain by using specially crafted Google, and Bing searches. It then allows for the download of those files from the target domain. After retrieving the files, the metadata associated with them can be analyzed by PowerMeta. Some interesting things commonl…
+- [**314**Star][1m] [Shell] [brainfucksec/kalitorify](https://github.com/brainfucksec/kalitorify) Transparent proxy through Tor for Kali Linux OS
+- [**314**Star][5m] [Shell] [1n3/reverseapk](https://github.com/1n3/reverseapk) Quickly analyze and reverse engineer Android packages
+- [**313**Star][2y] [Py] [sebdah/scrapy-mongodb](https://github.com/sebdah/scrapy-mongodb) MongoDB pipeline for Scrapy. This module supports both MongoDB in standalone setups and replica sets. scrapy-mongodb will insert the items to MongoDB as soon as your spider finds data to extract.
+- [**313**Star][2d] [Py] [google/turbinia](https://github.com/google/turbinia) Automation and Scaling of Digital Forensics Tools
+- [**313**Star][5d] [Java] [erudika/para](https://github.com/erudika/para) Open source back-end server for web, mobile and IoT. The backend for busy developers. (self-hosted or hosted)
+- [**313**Star][10m] [PS] [cyb3rward0g/invoke-attackapi](https://github.com/cyb3rward0g/invoke-attackapi) A PowerShell script to interact with the MITRE ATT&CK Framework via its own API
+- [**313**Star][3y] [Py] [chinoogawa/fbht](https://github.com/chinoogawa/fbht) Facebook Hacking Tool
+- [**313**Star][10d] [Shell] [al0ne/linuxcheck](https://github.com/al0ne/linuxcheck) linux信息收集/应急响应/常见后门检测脚本
+- [**312**Star][3m] [Shell] [zw963/asuswrt-merlin-transparent-proxy](https://github.com/zw963/asuswrt-merlin-transparent-proxy) transparent proxy base on ss, v2ray, ipset, iptables, chinadns on asuswrt merlin.
+- [**312**Star][5m] [Java] [shengqi158/fastjson-remote-code-execute-poc](https://github.com/shengqi158/fastjson-remote-code-execute-poc) fastjson remote code execute poc
+- [**312**Star][7m] [C] [pmem/syscall_intercept](https://github.com/pmem/syscall_intercept) The system call intercepting library
+- [**312**Star][3m] [Ruby] [owasp/glue](https://github.com/owasp/glue) Application Security Automation
+- [**312**Star][2y] [Py] [nneonneo/sha1collider](https://github.com/nneonneo/sha1collider) Build two PDFs that have different content but identical SHA1 sums.
+- [**312**Star][21d] [YARA] [needmorecowbell/hamburglar](https://github.com/needmorecowbell/hamburglar) collect useful information from urls, directories, and files
+- [**312**Star][23d] [C#] [malware-dev/mdk-se](https://github.com/malware-dev/mdk-se) Malware's Development Kit for SE
+- [**312**Star][3d] [Java] [leibnitz27/cfr](https://github.com/leibnitz27/cfr) This is the public repository for the CFR Java decompiler
+- [**312**Star][4m] [HTML] [koutto/jok3r](https://github.com/koutto/jok3r) a Python3 CLI application which is aimed at helping penetration testers for network infrastructure and web black-box security tests.
+- [**312**Star][3y] [C++] [fdiskyou/hunter](https://github.com/fdiskyou/hunter) (l)user hunter using WinAPI calls only
+- [**312**Star][3m] [Py] [dpwe/audfprint](https://github.com/dpwe/audfprint) Landmark-based audio fingerprinting
+- [**312**Star][5m] [Py] [cisco-talos/mutiny-fuzzer](https://github.com/cisco-talos/mutiny-fuzzer)
+- [**312**Star][4m] [TeX] [chronaeon/beigepaper](https://github.com/chronaeon/beigepaper) Rewrite of the Yellowpaper in non-Yellowpaper syntax.
+- [**312**Star][1y] [Py] [christophetd/censys-subdomain-finder](https://github.com/christophetd/censys-subdomain-finder) ⚡ Perform subdomain enumeration using the certificate transparency logs from Censys.
+- [**312**Star][2y] [C] [caseyscarborough/keylogger](https://github.com/caseyscarborough/keylogger) A no-frills keylogger for Mac OS X.
+- [**312**Star][2y] [burntmybagel/oscp-prep](https://github.com/burntmybagel/oscp-prep) A list of the resources I use as I get ready for the exam
+- [**312**Star][3y] [Py] [blankwall/macheap](https://github.com/blankwall/macheap) OS X malloc introspection tool
+- [**311**Star][6y] [Py] [shadowsocks/shadowdns](https://github.com/shadowsocks/shadowdns) A DNS forwarder using Shadowsocks as the server
+- [**311**Star][3m] [PHP] [elfsundae/laravel-hashid](https://github.com/elfsundae/laravel-hashid) Obfuscate your data by generating reversible, non-sequential, URL-safe identifiers.
+- [**311**Star][5y] [C] [jenssegers/rtl8188-hostapd](https://github.com/jenssegers/rtl8188-hostapd) hostapd for Realtek RTL8188
+- [**311**Star][11d] [HTML] [vanhauser-thc/thc-archive](https://github.com/vanhauser-thc/thc-archive) All releases of the security research group (a.k.a. hackers) The Hacker's Choice
+- [**311**Star][1y] [Py] [twelvesec/gasmask](https://github.com/twelvesec/gasmask) Information gathering tool - OSINT
+- [**311**Star][8m] [C] [tomac/yersinia](https://github.com/tomac/yersinia) A framework for layer 2 attacks
+- [**311**Star][1y] [Py] [stormshadow07/hacktheworld](https://github.com/stormshadow07/hacktheworld) An Python Script For Generating Payloads that Bypasses All Antivirus so far .
+- [**311**Star][1y] [Py] [sharadkumar97/osint-spy](https://github.com/sharadkumar97/osint-spy) Performs OSINT scan on email/domain/ip_address/organization using OSINT-SPY. It can be used by Data Miners, Infosec Researchers, Penetration Testers and cyber crime investigator in order to find deep information about their target. If you want to ask something please feel free to reach out to me at sharad@osint-spy.com
+- [**311**Star][8m] [Py] [screetsec/brutesploit](https://github.com/screetsec/brutesploit) BruteSploit is a collection of method for automated Generate, Bruteforce and Manipulation wordlist with interactive shell. That can be used during a penetration test to enumerate and maybe can be used in CTF for manipulation,combine,transform and permutation some words or file text :p
+- [**311**Star][2y] [Py] [munki/createosxinstallpkg](https://github.com/munki/createosxinstallpkg) Tools for packaging OS X installers
+- [**311**Star][2y] [Shell] [milesrichardson/docker-onion-nmap](https://github.com/milesrichardson/docker-onion-nmap) Scan .onion hidden services with nmap using Tor, proxychains and dnsmasq in a minimal alpine Docker container.
+- [**311**Star][6y] [TeX] [alobbs/macchanger](https://github.com/alobbs/macchanger) makes the maniputation of MAC addresses of network interfaces easier.
+- [**310**Star][3y] [Shell] [screetsec/lalin](https://github.com/screetsec/lalin) this script automatically install any package for pentest with uptodate tools , and lazy command for run the tools like lazynmap , install another and update to new #actually for lazy people hahaha #and Lalin is remake the lazykali with fixed bugs , added new features and uptodate tools . It's compatible with the latest release of Kali (Rolling)
+- [**310**Star][4m] [Py] [salesforce/hassh](https://github.com/salesforce/hassh) HASSH is a network fingerprinting standard which can be used to identify specific Client and Server SSH implementations. The fingerprints can be easily stored, searched and shared in the form of a small MD5 fingerprint.
+- [**310**Star][3y] [OCaml] [microsoft/slayer](https://github.com/microsoft/slayer) SLAyer is an automatic formal verification tool that uses separation logic to verify memory safety of C programs.
+- [**310**Star][3m] [PS] [kevin-robertson/powermad](https://github.com/kevin-robertson/powermad) PowerShell MachineAccountQuota and DNS exploit tools
+- [**310**Star][2y] [Py] [ioactive/xdiff](https://github.com/ioactive/xdiff) Extended Differential Fuzzing Framework
+- [**310**Star][2y] [C++] [exploitagency/esploitv2](https://github.com/exploitagency/esploitv2) WiFi Keystroke Injection Tool designed for an Atmega 32u4/ESP8266 Paired via Serial (Cactus WHID Firmware). Also features Serial, HTTP, and PASV FTP exfiltration methods and an integrated Credential Harvester Phishing tool called ESPortal.
+- [**310**Star][5y] [C++] [dedis/dissent](https://github.com/dedis/dissent) Provably Anonymous Overlay
+- [**310**Star][11m] [Ruby] [darkoperator/metasploit-plugins](https://github.com/darkoperator/metasploit-plugins) Plugins for Metasploit Framework
+- [**310**Star][3m] [Py] [circl/circlean](https://github.com/circl/circlean) USB key cleaner
+- [**310**Star][1y] [1522402210/2018-blackhat-tools-list](https://github.com/1522402210/2018-blackhat-tools-list) 2018 BlackHat Tools List
+- [**309**Star][7m] [ring04h/pentest](https://github.com/ring04h/pentest) pentest stuff
+- [**309**Star][2y] [Shell] [kennyn510/wpa2-wordlists](https://github.com/kennyn510/wpa2-wordlists) A collection of wordlists dictionaries for password cracking
+- [**309**Star][8m] [Py] [wangyihang/webshell-sniper](https://github.com/wangyihang/webshell-sniper) A webshell manager via terminal
+- [**309**Star][1y] [Py] [tintinweb/scapy-ssl_tls](https://github.com/tintinweb/scapy-ssl_tls) SSL/TLS layers for scapy the interactive packet manipulation tool
+- [**309**Star][3y] [scadastrangelove/scadapass](https://github.com/scadastrangelove/scadapass) SCADA StrangeLove Default/Hardcoded Passwords List
+- [**309**Star][4y] [Py] [packetloop/packetpig](https://github.com/packetloop/packetpig) Open Source Big Data Security Analytics
+- [**309**Star][7m] [HTML] [nccgroup/crosssitecontenthijacking](https://github.com/nccgroup/crosssitecontenthijacking) Content hijacking proof-of-concept using Flash, PDF and Silverlight
+- [**309**Star][21d] [PHP] [nakiami/mellivora](https://github.com/nakiami/mellivora) Mellivora is a CTF engine written in PHP
+- [**309**Star][1m] [C] [lordnoteworthy/cpu-internals](https://github.com/lordnoteworthy/cpu-internals) Intel / AMD CPU Internals
+- [**309**Star][1y] [PHP] [helloxz/ipinfo](https://github.com/helloxz/ipinfo) 整合多接口的IP查询工具。
+- [**309**Star][1y] [Java] [ebryx/aes-killer](https://github.com/ebryx/aes-killer) Burp plugin to decrypt AES Encrypted traffic of mobile apps on the fly
+- [**309**Star][2y] [Py] [armbues/ioc_parser](https://github.com/armbues/ioc_parser) Tool to extract indicators of compromise from security reports in PDF format
+- [**308**Star][14d] [Py] [ym2011/poc-exp](https://github.com/ym2011/poc-exp) Collecting and writing PoC or EXP for vulnerabilities on some application
+- [**308**Star][4y] [Py] [stripe/topmodel](https://github.com/stripe/topmodel) Standard evaluations for binary classifiers so you don't have to
+- [**308**Star][3d] [Nim] [status-im/nimbus](https://github.com/status-im/nimbus) an Ethereum 1.0 & 2.0 Client for Resource-Restricted Devices
+- [**308**Star][1y] [Java] [s4n7h0/halcyon](https://github.com/s4n7h0/halcyon) First IDE for Nmap Script (NSE) Development.
+- [**308**Star][1y] [C++] [nevermoe/unity_metadata_loader](https://github.com/nevermoe/unity_metadata_loader) load strings and method/class names in global-metadata.dat to IDA
+- [**308**Star][2y] [C++] [kirillkovalenko/nssm](https://github.com/kirillkovalenko/nssm) Non-Sucking Service Manager
+- [**308**Star][4m] [PS] [enigma0x3/misc-powershell-stuff](https://github.com/enigma0x3/misc-powershell-stuff) random powershell goodness
+- [**308**Star][25d] [C#] [ch0pin/aviator](https://github.com/ch0pin/aviator) Antivirus evasion project
+- [**308**Star][21d] [PS] [canix1/adaclscanner](https://github.com/canix1/adaclscanner) Repo for ADACLScan.ps1 - Your number one script for ACL's in Active Directory
+- [**308**Star][3y] [Py] [bishopfox/spoofcheck](https://github.com/bishopfox/spoofcheck) Simple script that checks a domain for email protections
+- [**308**Star][4y] [Py] [arecker/bennedetto](https://github.com/arecker/bennedetto) the turn-based budget
+- [**308**Star][5m] [Py] [algo7/bluekeep_cve-2019-0708_poc_to_exploit](https://github.com/algo7/bluekeep_cve-2019-0708_poc_to_exploit) Porting BlueKeep PoC from
+- [**307**Star][5m] [C] [sixstars/ctf](https://github.com/sixstars/ctf) A writeup summary for CTF competitions, problems.
+- [**307**Star][10d] [Swift] [securing/iossecuritysuite](https://github.com/securing/iossecuritysuite) iOS platform security & anti-tampering Swift library
+- [**307**Star][9m] [ObjC] [qhd/anymethodlog](https://github.com/qhd/anymethodlog) Log any method call of object in Objective-C
+- [**307**Star][3y] [Ruby] [michenriksen/birdwatcher](https://github.com/michenriksen/birdwatcher) Data analysis and OSINT framework for Twitter
+- [**307**Star][5m] [Batchfile] [frizb/windows-privilege-escalation](https://github.com/frizb/windows-privilege-escalation) Windows Privilege Escalation Techniques and Scripts
+- [**306**Star][2d] [dnscrypt/dnscrypt-resolvers](https://github.com/dnscrypt/dnscrypt-resolvers) Lists of public DNSCrypt-enabled DNS resolvers
+- [**306**Star][2y] [Go] [q2h1cg/dnsbrute](https://github.com/Q2h1Cg/dnsbrute) a fast domain brute tool
+- [**306**Star][5m] [Py] [travitch/whole-program-llvm](https://github.com/travitch/whole-program-llvm) A wrapper script to build whole-program LLVM bitcode files
+- [**306**Star][2y] [C] [tomwimmenhove/subarufobrob](https://github.com/tomwimmenhove/subarufobrob) Hijack a Subaru's key fob and steal all the things
+- [**306**Star][2y] [Py] [timsutton/python-macadmin-tools](https://github.com/timsutton/python-macadmin-tools) List of open-source Python-based Mac sysadmin tools
+- [**306**Star][2y] [Py] [p1kachu/v0lt](https://github.com/p1kachu/v0lt) Security CTF Toolkit (Not maintained anymore)
+- [**306**Star][11d] [C#] [nyan-x-cat/asyncrat-c-sharp](https://github.com/nyan-x-cat/asyncrat-c-sharp) Open-Source Remote Administration Tool For Windows C# (RAT)
+- [**306**Star][2y] [C] [nationalsecurityagency/dcp](https://github.com/nationalsecurityagency/dcp) Digest, stat, and copy files from one location to another in the same read pass
+- [**306**Star][3m] [Ruby] [m0nad/hellraiser](https://github.com/m0nad/hellraiser) Vulnerability Scanner
+- [**306**Star][20d] [C] [jhuisi/charm](https://github.com/jhuisi/charm) A Framework for Rapidly Prototyping Cryptosystems
+- [**306**Star][5y] [C++] [draperlaboratory/fracture](https://github.com/draperlaboratory/fracture) an architecture-independent decompiler to LLVM IR
+- [**306**Star][1m] [PS] [darkoperator/posh-secmod](https://github.com/darkoperator/posh-secmod) PowerShell Module with Security cmdlets for security work
+- [**306**Star][2m] [Py] [coalfire-research/slackor](https://github.com/coalfire-research/slackor) A Golang implant that uses Slack as a command and control server
+- [**306**Star][6d] [Py] [baderj/domain_generation_algorithms](https://github.com/baderj/domain_generation_algorithms) Some results of my DGA reversing efforts
+- [**305**Star][2y] [PHP] [walkor/workerman-statistics](https://github.com/walkor/workerman-statistics) 一个分布式统计监控系统 包含PHP客户端 、服务端
+- [**305**Star][1y] [C#] [vmcall/loadlibrayy](https://github.com/vmcall/loadlibrayy) x64 manualmapper with kernel elevation and thread hijacking capabilities
+- [**305**Star][2y] [Py] [wisedoge/proxypool](https://github.com/wisedoge/proxypool) 跨语言IP代理池,Python实现。
+- [**305**Star][2d] [Java] [widdix/aws-s3-virusscan](https://github.com/widdix/aws-s3-virusscan) Free Antivirus for S3 Buckets
+- [**305**Star][5m] [Batchfile] [lmc999/auto-add-routes](https://github.com/lmc999/auto-add-routes) China Route for VPN
+- [**305**Star][1m] [CSS] [justinmeiners/lc3-vm](https://github.com/justinmeiners/lc3-vm) Write your own virtual machine for the LC-3 computer!
+- [**305**Star][2y] [Java] [joaomatosf/javadeserh2hc](https://github.com/joaomatosf/javadeserh2hc) Sample codes written for the Hackers to Hackers Conference magazine 2017 (H2HC).
+- [**305**Star][14d] [bigsinger/androididchanger](https://github.com/bigsinger/androididchanger) Xposed Module for Changing Android Device Info
+- [**305**Star][11m] [Py] [basucert/winboxpoc](https://github.com/basucert/winboxpoc) Proof of Concept of Winbox Critical Vulnerability (CVE-2018-14847)
+- [**305**Star][2y] [JS] [arno0x/dnsexfiltrator](https://github.com/arno0x/dnsexfiltrator) Data exfiltration over DNS request covert channel
+- [**304**Star][2y] [Shell] [sirzdy/shadowsocks](https://github.com/sirzdy/shadowsocks) 与 ShadowSocks 有关的教程、文件等
+- [**304**Star][1y] [Py] [fsecurelabs/win_driver_plugin](https://github.com/FSecureLABS/win_driver_plugin) A tool to help when dealing with Windows IOCTL codes or reversing Windows drivers.
+- [**304**Star][2m] [Py] [hatching/vmcloak](https://github.com/hatching/vmcloak) Automated Virtual Machine Generation and Cloaking for Cuckoo Sandbox.
+- [**304**Star][2y] [Shell] [ugukkylbklaom/vultr-ss-firewall](https://github.com/ugukkylbklaom/vultr-ss-firewall) 一整套网络加速方案(SS),速度,安全,便捷 面面俱到,操作简单,适合非IT专业人士
+- [**304**Star][10m] [PHP] [steverobbins/magescan](https://github.com/steverobbins/magescan) Scan a Magento site for information
+- [**304**Star][8m] [Ruby] [secgen/secgen](https://github.com/secgen/secgen) Generate vulnerable virtual machines on the fly (current team development is taking place in the cliffe/SecGen fork)
+- [**304**Star][3y] [Shell] [safebreach-labs/pwndsh](https://github.com/safebreach-labs/pwndsh) Post-exploitation framework (and an interactive shell) developed in Bash shell scripting
+- [**304**Star][3y] [C] [raspberrypi/maynard](https://github.com/raspberrypi/maynard) Desktop environment for Wayland
+- [**304**Star][12m] [Py] [r3vn/badkarma](https://github.com/r3vn/badkarma) network reconnaissance toolkit
+- [**304**Star][7m] [Py] [nccgroup/cyber-defence](https://github.com/nccgroup/cyber-defence) Information released publicly by NCC Group's Cyber Defence team
+- [**304**Star][1m] [C] [nagyd/sdlpop](https://github.com/nagyd/sdlpop) An open-source port of Prince of Persia, based on the disassembly of the DOS version.
+- [**304**Star][2y] [C++] [m0n0ph1/malware-1](https://github.com/m0n0ph1/malware-1) Malware source code samples leaked online uploaded to GitHub for those who want to analyze the code.
+- [**304**Star][2y] [JS] [kristian-lange/net-glimpse](https://github.com/kristian-lange/net-glimpse) 1) Real-time visualization of network traffic (Ethernet and Internet), and 2) Streaming of header data from your network interfaces via WebSockets
+- [**304**Star][4m] [JS] [hynekpetrak/malware-jail](https://github.com/hynekpetrak/malware-jail) Sandbox for semi-automatic Javascript malware analysis, deobfuscation and payload extraction. Written for Node.js
+- [**304**Star][21d] [JS] [ethereum/devp2p](https://github.com/ethereum/devp2p) Ethereum peer-to-peer networking specifications
+- [**304**Star][4y] [Py] [clusterhq/powerstrip](https://github.com/clusterhq/powerstrip) A tool for prototyping Docker extensions
+- [**303**Star][9m] [JS] [ning1022/sqlinjectionwiki](https://github.com/ning1022/SQLInjectionWiki) 一个专注于聚合和记录各种SQL注入方法的wiki
+- [**303**Star][2y] [Py] [spritz-research-group/skype-type](https://github.com/spritz-research-group/skype-type) Don't Skype & Type! Keyboard acoustic eavesdropping tool.
+- [**303**Star][1m] [Py] [salls/angrop](https://github.com/salls/angrop) a rop gadget finder and chain builder
+- [**303**Star][1m] [Py] [rhinosecuritylabs/cves](https://github.com/rhinosecuritylabs/cves) A collection of proof-of-concept exploit scripts written by the team at Rhino Security Labs for various CVEs.
+- [**303**Star][3y] [Perl] [julienbedard/browsersploit](https://github.com/julienbedard/browsersploit) BrowserExploit is an advanced browser exploit pack for doing internal and external pentesting, helping gaining access to internal computers.
+- [**303**Star][3m] [Ruby] [fozavci/viproy-voipkit](https://github.com/fozavci/viproy-voipkit) Pen-Test Kit for Metasploit Framework
+- [**303**Star][14d] [C#] [dynatrace/superdump](https://github.com/dynatrace/superdump) A service for automated crash-dump analysis
+- [**303**Star][21d] [Py] [christhecoolhut/firmware_slap](https://github.com/christhecoolhut/firmware_slap) Discovering vulnerabilities in firmware through concolic analysis and function clustering.
+- [**303**Star][2m] [Py] [3ndg4me/autoblue-ms17-010](https://github.com/3ndg4me/autoblue-ms17-010) This is just an semi-automated fully working, no-bs, non-metasploit version of the public exploit code for MS17-010
+- [**302**Star][3m] [Py] [xinsss/conf-for-surge-shadowrocket](https://github.com/xinsss/conf-for-surge-shadowrocket) Surge Shadowrocket conf
+- [**302**Star][4m] [Py] [zhaoweiho/securitymanageframwork](https://github.com/zhaoweiho/securitymanageframwork) Security Manage Framwork is a security management platform for enterprise intranet, which includes asset management, vulnerability management, account management, knowledge base management, security scanning automation function modules, and can be used for internal security management. This platform is designed to help Party A with fewer securit…
+- [**302**Star][1m] [Py] [xdavidhu/langhost](https://github.com/xdavidhu/langhost) A LAN dropbox chatbot controllable via Telegram
+- [**302**Star][1m] [Shell] [vitaly-kamluk/bitscout](https://github.com/vitaly-kamluk/bitscout) Remote forensics meta tool
+- [**302**Star][10m] [Shell] [swoodford/aws](https://github.com/swoodford/aws) A collection of bash shell scripts for automating various tasks with Amazon Web Services using the AWS CLI and jq.
+- [**302**Star][1y] [Dockerfile] [ston3o/docker-hacklab](https://github.com/ston3o/docker-hacklab) My personal hacklab, create your own.
+- [**302**Star][2m] [JS] [robbendebiene/gesturefy](https://github.com/robbendebiene/gesturefy) Navigate, operate and browse faster with mouse gestures! A customizable Firefox mouse gesture add-on with a variety of different commands.
+- [**302**Star][4y] [Py] [lekensteyn/pacemaker](https://github.com/lekensteyn/pacemaker) Heartbleed (CVE-2014-0160) client exploit
+- [**302**Star][3y] [C++] [kgretzky/obfusion](https://github.com/kgretzky/obfusion) C++ X86 Code Obfuscation Library
+- [**302**Star][1y] [Shell] [jas502n/st2-057](https://github.com/jas502n/st2-057) St2-057 Poc Example
+- [**302**Star][7m] [Java] [ilmila/j2eescan](https://github.com/ilmila/j2eescan) J2EEScan is a plugin for Burp Suite Proxy. The goal of this plugin is to improve the test coverage during web application penetration tests on J2EE applications.
+- [**302**Star][11m] [Assembly] [guitmz/virii](https://github.com/guitmz/virii) Collection of ancient computer virus source codes
+- [**302**Star][6y] [Py] [astrand/pyobfuscate](https://github.com/astrand/pyobfuscate) a source code obfuscator
+- [**301**Star][13d] [C#] [zodiacon/procmonx](https://github.com/zodiacon/procmonx) Extended Process Monitor-like tool based on Event Tracing for Windows
+- [**301**Star][6d] [Py] [vmware/tern](https://github.com/vmware/tern) Open Source compliance for containers
+- [**301**Star][1y] [Py] [two06/inception](https://github.com/two06/inception) Provides In-memory compilation and reflective loading of C# apps for AV evasion.
+- [**301**Star][30d] [Py] [stamparm/dsxs](https://github.com/stamparm/dsxs) Damn Small XSS Scanner
+- [**301**Star][4m] [Py] [rootviii/proxy_requests](https://github.com/rootviii/proxy_requests) a class that uses scraped proxies to make an http GET/POST request (Python requests)
+- [**301**Star][3y] [Py] [ring04h/wyportmap](https://github.com/ring04h/wyportmap) 目标端口扫描+系统服务指纹识别
+- [**301**Star][16d] [Py] [qubesos/qubes-secpack](https://github.com/qubesos/qubes-secpack) Qubes Security Pack
+- [**301**Star][2m] [no-github/dork-admin](https://github.com/no-github/dork-admin) 盘点近年来的数据泄露、供应链污染事件
+- [**301**Star][2m] [Go] [fairwindsops/rbac-lookup](https://github.com/fairwindsops/rbac-lookup) Easily find roles and cluster roles attached to any user, service account, or group name in your Kubernetes cluster
+- [**301**Star][2m] [JS] [bettercap/caplets](https://github.com/bettercap/caplets) bettercap scripts (caplets) and proxy modules.
+- [**301**Star][13d] [PHP] [bepsvpt/secure-headers](https://github.com/bepsvpt/secure-headers) PHP Secure Headers
+- [**301**Star][2m] [Py] [austin-taylor/flare](https://github.com/austin-taylor/flare) An analytical framework for network traffic and behavioral analytics
+- [**301**Star][2m] [C] [9176324/shark](https://github.com/9176324/shark) Turn off PatchGuard in real time for win7 (7600) ~ win10 (18950).
+- [**300**Star][11m] [Py] [mr-un1k0d3r/catmyphish](https://github.com/Mr-Un1k0d3r/CatMyPhish) Search for categorized domain
+- [**300**Star][5m] [Py] [wangyihang/githacker](https://github.com/wangyihang/githacker) a multiple threads tool to detect whether a site has git source leaks, and has the ability to download the site source to the local
+- [**300**Star][9d] [Py] [skylined/bugid](https://github.com/skylined/bugid) Detect, analyze and uniquely identify crashes in Windows applications
+- [**300**Star][9m] [C] [raspberrypi/quake3](https://github.com/raspberrypi/quake3) provide a baseline Quake 3 which may be used
+for further development
+- [**300**Star][3y] [Java] [nvisium/xssvalidator](https://github.com/nvisium/xssvalidator) This is a burp intruder extender that is designed for automation and validation of XSS vulnerabilities.
+- [**300**Star][1y] [C] [nektra/deviare2](https://github.com/nektra/deviare2) Deviare API Hook
+- [**300**Star][2m] [Shell] [mitchellkrogza/apache-ultimate-bad-bot-blocker](https://github.com/mitchellkrogza/apache-ultimate-bad-bot-blocker) Apache Block Bad Bots, (Referer) Spam Referrer Blocker, Vulnerability Scanners, Malware, Adware, Ransomware, Malicious Sites, Wordpress Theme Detectors and Fail2Ban Jail for Repeat Offenders
+- [**300**Star][7m] [Py] [0xacb/viewgen](https://github.com/0xacb/viewgen) viewgen is a ViewState tool capable of generating both signed and encrypted payloads with leaked validation keys
+- [**299**Star][2m] [C] [vusec/vuzzer](https://github.com/vusec/vuzzer) depends heavily on a modeified version of DataTracker, which in turn depends on LibDFT pintool.
+- [**299**Star][26d] [C] [tarsnap/scrypt](https://github.com/tarsnap/scrypt) The scrypt key derivation function was originally developed for use in the Tarsnap online backup system and is designed to be far more secure against hardware brute-force attacks than alternative functions such as PBKDF2 or bcrypt.
+- [**299**Star][3m] [JS] [smartdone/frida-scripts](https://github.com/smartdone/frida-scripts) frida scripts
+- [**299**Star][9m] [C++] [secrary/idenlib](https://github.com/secrary/idenlib) Library Function Identification [prototype project - signatures might change in future releases]
+- [**299**Star][2m] [C#] [ossindex/devaudit](https://github.com/ossindex/devaudit) Open-source, cross-platform, multi-purpose security auditing tool
+- [**299**Star][11m] [Py] [mseclab/pyjfuzz](https://github.com/mseclab/pyjfuzz) PyJFuzz - Python JSON Fuzzer
+- [**299**Star][3y] [C] [miohtama/python-levenshtein](https://github.com/miohtama/python-levenshtein) The Levenshtein Python C extension module contains functions for fast computation of Levenshtein distance and string similarity
+- [**299**Star][2y] [Py] [hellman/libformatstr](https://github.com/hellman/libformatstr) Simplify format string exploitation.
+- [**299**Star][5y] [Perl] [fwaeytens/dnsenum](https://github.com/fwaeytens/dnsenum) dnsenum is a perl script that enumerates DNS information
+- [**299**Star][7m] [C++] [cyphunk/jtagenum](https://github.com/cyphunk/jtagenum) Given an Arduino compatible microcontroller or Raspberry PI (experimental), JTAGenum scans pins[] for basic JTAG functionality and can be used to enumerate the Instruction Register for undocumented instructions. Props to JTAG scanner and Arduinull which came before JTAGenum and forwhich much of the code and logic is based on. Feel free to branch…
+- [**299**Star][4m] [Py] [cyberark/kubiscan](https://github.com/cyberark/kubiscan) A tool to scan Kubernetes cluster for risky permissions
+- [**299**Star][1y] [Py] [bhdresh/cve-2017-8759](https://github.com/bhdresh/cve-2017-8759) Exploit toolkit CVE-2017-8759 - v1.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft .NET Framework RCE. It could generate a malicious RTF file and deliver metasploit / meterpreter / other payload to victim without any complex configuration.
+- [**299**Star][2m] [Py] [alexandreborges/malwoverview](https://github.com/alexandreborges/malwoverview) Malwoverview.py is a first response tool to perform an initial and quick triage in a directory containing malware samples, specific malware sample, suspect URL and domains. Additionally, it allows to download and send samples to main online sandboxes.
+- [**299**Star][5m] [0xradi/owasp-web-checklist](https://github.com/0xradi/owasp-web-checklist) OWASP Web Application Security Testing Checklist
+- [**299**Star][2y] [Shell] [0x90/kali-scripts](https://github.com/0x90/kali-scripts) Some usefull scripts for KaliLinux
+- [**298**Star][4y] [Py] [zer0h/httpscan](https://github.com/zer0h/httpscan) 一个爬虫式的网段Web主机发现小工具 # A HTTP Service detector with a crawler from IP/CIDR
+- [**298**Star][1y] [Java] [vmware/burp-rest-api](https://github.com/vmware/burp-rest-api) REST/JSON API to the Burp Suite security tool.
+- [**298**Star][2y] [C++] [rootm0s/protectors](https://github.com/rootm0s/protectors)
+- [**298**Star][1y] [PS] [onelogicalmyth/zeroday-powershell](https://github.com/onelogicalmyth/zeroday-powershell) A PowerShell example of the Windows zero day priv esc
+- [**298**Star][2y] [krausefx/steal.password](https://github.com/krausefx/steal.password) Easily get the user's Apple ID password, just by asking
+- [**298**Star][2y] [C] [igrr/esptool-ck](https://github.com/igrr/esptool-ck) ESP8266 build/flash helper tool by Christian Klippel
+- [**298**Star][4y] [Py] [emposha/shell-detector](https://github.com/emposha/shell-detector) Shell Detector – is a application that helps you find and identify php/cgi(perl)/asp/aspx shells. Shell Detector has a “web shells” signature database that helps to identify “web shell” up to 99%.
+- [**298**Star][3m] [Py] [cisco-talos/ghida](https://github.com/cisco-talos/ghida) an IDA Pro plugin that integrates the Ghidra decompiler in IDA.
+- [**298**Star][2m] [Py] [christhecoolhut/pinctf](https://github.com/christhecoolhut/pinctf) Using Intel's PIN tool to solve CTF problems
+- [**298**Star][2m] [Py] [bishopfox/eyeballer](https://github.com/bishopfox/eyeballer) Convolutional neural network for analyzing pentest screenshots
+- [**298**Star][2m] [HTML] [balsn/ctf_writeup](https://github.com/balsn/ctf_writeup) CTF writeups from Balsn
+- [**298**Star][6y] [Py] [andresriancho/nimbostratus](https://github.com/andresriancho/nimbostratus) Tools for fingerprinting and exploiting Amazon cloud infrastructures
+- [**297**Star][2y] [C] [pwning/docs](https://github.com/pwning/docs) Tips, Tricks, and Suggestions for Running a CTF
+- [**297**Star][9d] [JS] [w3c/webappsec-trusted-types](https://github.com/w3c/webappsec-trusted-types) A browser API to prevent DOM-Based Cross Site Scripting in modern web applications.
+- [**297**Star][12m] [Shell] [yw9381/burp_suite_doc_zh_cn](https://github.com/yw9381/burp_suite_doc_zh_cn) 这是基于Burp Suite官方文档翻译而来的中文版文档
+- [**297**Star][2y] [Py] [trustedsec/nps_payload](https://github.com/trustedsec/nps_payload) This script will generate payloads for basic intrusion detection avoidance. It utilizes publicly demonstrated techniques from several different sources. Written by Larry Spohn (
+- [**297**Star][2d] [C++] [squalr/squally](https://github.com/squalr/squally) 2D Platformer Game for Teaching Game Hacking - C++/cocos2d-x
+- [**297**Star][4d] [Java] [shred/acme4j](https://github.com/shred/acme4j) a protocol that a certificate authority (CA) and an applicant can use to automate the process of verification and certificate issuance
+- [**297**Star][4y] [samyk/proxygambit](https://github.com/samyk/proxygambit) Anonymize and fracture network traffic/Internet access over a point-to-point wireless link or through TCP->GSM->wifi tunnel (advanced resurrection of ProxyHam)
+- [**297**Star][18d] [Go] [ropnop/kerbrute](https://github.com/ropnop/kerbrute) A tool to perform Kerberos pre-auth bruteforcing
+- [**297**Star][4y] [Py] [orf/cyborg](https://github.com/orf/cyborg) Python web scraping framework
+- [**297**Star][7d] [Py] [mozillasecurity/dharma](https://github.com/mozillasecurity/dharma) Generation-based, context-free grammar fuzzer.
+- [**297**Star][3y] [Go] [janeczku/rancher-letsencrypt](https://github.com/janeczku/rancher-letsencrypt) A Rancher service that obtains free SSL/TLS certificates from the Let's Encrypt CA, adds them to Rancher's certificate store and manages renewal and propagation of updated certificates to load balancer
+- [**297**Star][2y] [PHP] [interference-security/empire-web](https://github.com/interference-security/empire-web) PowerShell Empire Web Interface
+- [**297**Star][2m] [C#] [fireeye/sharpersist](https://github.com/fireeye/sharpersist) Windows persistence toolkit
+- [**297**Star][9m] [C] [basil00/reqrypt](https://github.com/basil00/reqrypt) A censorship circumvention tool
+- [**297**Star][2y] [Py] [allyshka/rogue-mysql-server](https://github.com/allyshka/rogue-mysql-server) MySQL fake server for read files of connected clients
+- [**296**Star][8m] [C++] [wangyu-/udp2raw-multiplatform](https://github.com/wangyu-/udp2raw-multiplatform) multi-platform(cross-platform) version of udp2raw-tunnel, which supports Windows/Mac/BSD natively
+- [**296**Star][2d] [ugvf2009/miles](https://github.com/ugvf2009/miles) 二爷翻墙,专注翻墙30年,但没有掌握核心科技^_^
+- [**296**Star][2y] [C++] [sensepost/rattler](https://github.com/sensepost/rattler) Automated DLL Enumerator
+- [**296**Star][3m] [Py] [saghul/aiodns](https://github.com/saghul/aiodns) Simple DNS resolver for asyncio
+- [**296**Star][4m] [C++] [rolfrolles/hexraysdeob](https://github.com/rolfrolles/hexraysdeob) Hex-Rays microcode API plugin for breaking an obfuscating compiler
+- [**296**Star][2d] [C++] [hasherezade/bearparser](https://github.com/hasherezade/bearparser) Portable Executable parsing library (from PE-bear)
+- [**296**Star][7d] [Py] [govanguard/legion](https://github.com/govanguard/legion) Legion is an open source, easy-to-use, super-extensible and semi-automated network penetration testing tool that aids in discovery, reconnaissance and exploitation of information systems.
+- [**296**Star][7m] [Py] [edent/bmw-i-remote](https://github.com/edent/bmw-i-remote) A reverse engineered interface for the BMW i3 Electric Car
+- [**296**Star][2y] [Shell] [checkpointsw/android_unpacker](https://github.com/checkpointsw/android_unpacker) A (hopefully) generic unpacker for packed Android apps.
+- [**296**Star][5m] [PLpgSQL] [amachanic/sp_whoisactive](https://github.com/amachanic/sp_whoisactive) sp_whoisactive
+- [**295**Star][4d] [JS] [aws-samples/aws-serverless-security-workshop](https://github.com/aws-samples/aws-serverless-security-workshop) In this workshop, you will learn techniques to secure a serverless application built with AWS Lambda, Amazon API Gateway and RDS Aurora. We will cover AWS services and features you can leverage to improve the security of a serverless applications in 5 domains: identity & access management, code, data, infrastructure, logging & monitoring.
+- [**295**Star][6m] [Java] [teamwalrus/walrus](https://github.com/TeamWalrus/Walrus) An Android app that lets you use your access control card cloning devices in the field.
+- [**295**Star][4m] [Shell] [anti-ddos/anti-ddos](https://github.com/anti-ddos/Anti-DDOS)
+- [**295**Star][1y] [JS] [xxxily/fiddler-plus](https://github.com/xxxily/fiddler-plus) 自定义的Fiddler规则,多环境切换、解决跨域开发、快速调试线上代码必备|高效调试分析利器
+- [**295**Star][2y] [swiftonsecurity/swiftfilter](https://github.com/swiftonsecurity/swiftfilter) Exchange Transport rules to detect and enable response to phishing
+- [**295**Star][1y] [Shell] [sevagas/swap_digger](https://github.com/sevagas/swap_digger) swap_digger is a tool used to automate Linux swap analysis during post-exploitation or forensics. It automates swap extraction and searches for Linux user credentials, web forms credentials, web forms emails, http basic authentication, Wifi SSID and keys, etc.
+- [**295**Star][3y] [C] [s2e/s2e-old](https://github.com/s2e/s2e-old) This is the archived S2E 1.0 repo. We do not maintain it anymore.
+- [**295**Star][7m] [Py] [s0md3v/zen](https://github.com/s0md3v/zen) Find emails of Github users
+- [**295**Star][5m] [C#] [raikia/credninja](https://github.com/raikia/credninja) A multithreaded tool designed to identify if credentials are valid, invalid, or local admin valid credentials within a network at-scale via SMB, plus now with a user hunter
+- [**295**Star][2y] [PS] [outflanknl/invoke-adlabdeployer](https://github.com/outflanknl/invoke-adlabdeployer) Automated deployment of Windows and Active Directory test lab networks. Useful for red and blue teams.
+- [**295**Star][4d] [C++] [hasherezade/libpeconv](https://github.com/hasherezade/libpeconv) A library to load, manipulate, dump PE files. See also:
+- [**295**Star][1y] [C#] [ghostpack/sharpup](https://github.com/ghostpack/sharpup) SharpUp is a C# port of various PowerUp functionality.
+- [**295**Star][3d] [Shell] [fdiskyou/zines](https://github.com/fdiskyou/zines) Mirror of my favourite hacking Zines for the lulz, nostalgy, and reference
+- [**295**Star][1m] [JS] [doyensec/electronegativity](https://github.com/doyensec/electronegativity) Electronegativity is a tool to identify misconfigurations and security anti-patterns in Electron applications.
+- [**295**Star][3m] [Java] [amaembo/huntbugs](https://github.com/amaembo/huntbugs) Java bytecode static analyzer
+- [**294**Star][3d] [C] [ebwi11/agentsmith-hids](https://github.com/EBWi11/AgentSmith-HIDS) Low performance loss and by LKM technology HIDS tool, from E_Bwill.
+- [**294**Star][1y] [Py] [anasaboureada/penetration-testing-study-notes](https://github.com/AnasAboureada/Penetration-Testing-Study-Notes) Penetration Testing notes, resources and scripts
+- [**294**Star][6y] [Py] [xiaomi-sa/smartdns](https://github.com/xiaomi-sa/smartdns) 基于Twisted实现的智能dns系统
+- [**294**Star][2y] [Py] [ricmoo/pyaes](https://github.com/ricmoo/pyaes) Pure-Python implementation of AES block-cipher and common modes of operation.
+- [**294**Star][9m] [C] [rhboot/shim](https://github.com/rhboot/shim) a trivial EFI application that, when run, attempts to open and execute another application
+- [**294**Star][1m] [Lua] [pentesteracademy/patoolkit](https://github.com/pentesteracademy/patoolkit) a collection of traffic analysis plugins to extend the functionality of Wireshark from a micro-analysis tool and protocol dissector to the macro analyzer and threat hunter.
+- [**294**Star][3y] [Py] [n1nj4sec/pr0cks](https://github.com/n1nj4sec/pr0cks) python script setting up a transparent proxy to forward all TCP and DNS traffic through a SOCKS / SOCKS5 or HTTP(CONNECT) proxy using iptables -j REDIRECT target
+- [**294**Star][2m] [Go] [mdsecactivebreach/o365-attack-toolkit](https://github.com/mdsecactivebreach/o365-attack-toolkit) A toolkit to attack Office365
+- [**294**Star][7m] [HTML] [maaaaz/androwarn](https://github.com/maaaaz/androwarn) Yet another static code analyzer for malicious Android applications
+- [**294**Star][3y] [lucyoa/ctf-wiki](https://github.com/lucyoa/ctf-wiki) Hacking techniques useful during CTFs
+- [**294**Star][7m] [Shell] [eschultze/urlextractor](https://github.com/eschultze/urlextractor) Information gathering & website reconnaissance |
+- [**294**Star][10m] [Shell] [ctf-wiki/ctf-tools](https://github.com/ctf-wiki/ctf-tools) CTF 工具集合
+- [**294**Star][1y] [Shell] [cryptolok/ghostinthenet](https://github.com/cryptolok/ghostinthenet) Ultimate Network Stealther that makes Linux a Ghost In The Net and protects from MITM/DOS/scan
+- [**294**Star][8m] [Py] [boy-hack/w8fuckcdn](https://github.com/boy-hack/w8fuckcdn) Get website IP address by scanning the entire net
+- [**294**Star][1y] [CSS] [appsecco/dvna](https://github.com/appsecco/dvna) Damn Vulnerable NodeJS Application
+- [**294**Star][12d] [TS] [acekyd/made-in-nigeria](https://github.com/acekyd/made-in-nigeria) It is rumored that Nigerians only know how to consume tools and not create them. Here is a curation of awesome tools built by Nigerians that can be used by anybody and from anywhere in the world.
+- [**294**Star][2y] [C] [aanarchyy/bully](https://github.com/aanarchyy/bully) a new implementation of the WPS brute force attack
+- [**293**Star][4m] [C] [shadowsocks/simple-obfs-android](https://github.com/shadowsocks/simple-obfs-android) A simple obfuscating tool for Android
+- [**293**Star][8m] [vysecurity/domainfrontinglists](https://github.com/vysecurity/DomainFrontingLists) A list of Domain Frontable Domains by CDN
+- [**293**Star][14d] [C++] [xmrig/xmrig-proxy](https://github.com/xmrig/xmrig-proxy) Monero (XMR) Stratum protocol proxy
+- [**293**Star][7m] [Py] [vulscanteam/vulscan](https://github.com/vulscanteam/vulscan) vulscan 扫描系统:最新的poc&exp漏洞扫描,redis未授权、敏感文件、java反序列化、tomcat命令执行及各种未授权扫描等...
+- [**293**Star][4y] [trustedsec/artillery](https://github.com/trustedsec/artillery) The Artillery Project is an open-source blue team tool designed to protect Linux and Windows operating systems through multiple methods.
+- [**293**Star][6m] [YARA] [supportintelligence/icewater](https://github.com/supportintelligence/icewater) 16,432 Free Yara rules created by
+- [**293**Star][1m] [Py] [strazzere/golang_loader_assist](https://github.com/strazzere/golang_loader_assist) Making GO reversing easier in IDA Pro
+- [**293**Star][6m] [C] [skx/simple.vm](https://github.com/skx/simple.vm) Simple virtual machine which inteprets bytecode.
+- [**293**Star][10m] [HTML] [s1gh/ctf-literature](https://github.com/s1gh/ctf-literature) Collection of free books, papers and articles related to CTF challenges.
+- [**293**Star][10d] [qubesos/qubes-issues](https://github.com/qubesos/qubes-issues) The Qubes OS Project issue tracker
+- [**293**Star][5m] [C] [pulkin/esp8266-injection-example](https://github.com/pulkin/esp8266-injection-example) Example project to demonstrate packet injection / sniffer capabilities of ESP8266 IC.
+- [**293**Star][2y] [C++] [minhaskamal/trojancockroach](https://github.com/minhaskamal/trojancockroach) A Stealthy Trojan Spyware (keylogger-spyware-malware-worm-spy-virus-fud-undetectable-computer-windows-pc-c-c++)
+- [**293**Star][2m] [C] [mboehme/aflfast](https://github.com/mboehme/aflfast) AFLFast (extends AFL with Power Schedules)
+- [**293**Star][2m] [Scala] [jmcardon/tsec](https://github.com/jmcardon/tsec) Type-safe general-cryptography library -
+- [**293**Star][15d] [Visual Basic .NET] [itm4n/vba-runpe](https://github.com/itm4n/vba-runpe) A VBA implementation of the RunPE technique or how to bypass application whitelisting.
+- [**293**Star][3y] [invoke-ir/forensicposters](https://github.com/invoke-ir/forensicposters)
+- [**293**Star][8m] [C] [gianlucaborello/libprocesshider](https://github.com/gianlucaborello/libprocesshider) Hide a process under Linux using the ld preloader (
+- [**292**Star][1m] [Py] [lucifer1993/tpscan](https://github.com/lucifer1993/tpscan) 一键ThinkPHP漏洞检测
+- [**292**Star][5y] [C++] [smartdec/smartdec](https://github.com/smartdec/smartdec) SmartDec decompiler
+ - [IDA插件](https://github.com/smartdec/smartdec/tree/master/src/ida-plugin)
+ - [nocode](https://github.com/smartdec/smartdec/tree/master/src/nocode) 命令行反编译器
+ - [smartdec](https://github.com/smartdec/smartdec/tree/master/src/smartdec) 带GUI界面的反编译器
+ - [nc](https://github.com/smartdec/smartdec/tree/master/src/nc) 反编译器的核心代码
+- [**292**Star][8y] [ObjC] [nst/spyphone](https://github.com/nst/spyphone) This project shows the kind of data a rogue iPhone application can collect.
+- [**292**Star][4y] [Py] [northbit/metaphor](https://github.com/northbit/metaphor) Stagefright with ASLR bypass
+- [**292**Star][2d] [Zeek] [mitre-attack/car](https://github.com/mitre-attack/car) Cyber Analytics Repository
+- [**292**Star][11m] [JS] [jeija/bluefluff](https://github.com/jeija/bluefluff) Reverse Engineering Furby Connect's Bluetooth Protocol and Update Format
+- [**292**Star][16d] [Java] [ganyao114/sandvxposed](https://github.com/ganyao114/sandvxposed) Xposed environment without root (OS 5.0 - 10.0)
+- [**292**Star][2m] [Py] [fplyth0ner-combie/bug-project-framework](https://github.com/fplyth0ner-combie/bug-project-framework) 漏洞利用框架模块分享仓库
+- [**292**Star][1y] [findneo/newbie-security-list](https://github.com/findneo/newbie-security-list) 网络安全学习资料,欢迎补充
+- [**292**Star][3d] [Java] [adjust/android_sdk](https://github.com/adjust/android_sdk) This is the Android SDK of Adjust
+- [**291**Star][11m] [Shell] [cyb0r9/socialbox](https://github.com/Cyb0r9/SocialBox) SocialBox is a Bruteforce Attack Framework [ Facebook , Gmail , Instagram ,Twitter ] , Coded By Belahsan Ouerghi
+- [**291**Star][5m] [enkomio/taipan](https://github.com/enkomio/Taipan) Web application vulnerability scanner
+- [**291**Star][2m] [Py] [vulnerscom/api](https://github.com/vulnerscom/api) Python 2/3 library for the Vulners Database
+- [**291**Star][3y] [Py] [ustwo/mastermind](https://github.com/ustwo/mastermind) Man in the middle testing
+- [**291**Star][10d] [C++] [tevador/randomx](https://github.com/tevador/randomx) Proof of work algorithm based on random code execution
+- [**291**Star][2y] [Py] [orangetw/tiny-url-fuzzer](https://github.com/orangetw/tiny-url-fuzzer) A tiny and cute URL fuzzer
+- [**291**Star][4m] [C#] [mvelazc0/defcon27_csharp_workshop](https://github.com/mvelazc0/defcon27_csharp_workshop) Writing custom backdoor payloads with C# - Defcon 27
+- [**291**Star][2y] [Java] [kingsollyu/appenv](https://github.com/kingsollyu/appenv) 应用变量
+- [**291**Star][6m] [C] [kholia/dedrop](https://github.com/kholia/dedrop) Looking inside the (Drop) box. Security Analysis of Dropbox. Updated WOOT '13 paper and other goodies.
+- [**291**Star][3y] [Py] [kevthehermit/volutility](https://github.com/kevthehermit/volutility) Web App for Volatility framework
+- [**291**Star][2y] [JS] [ffay/proxygateway](https://github.com/ffay/proxygateway) Proxy Gateway基于openresty(nginx lua module)开发,可以作为接口网关(api gateway)使用,整合业务模块接口,微服务治理聚合,通过web配置界面,能够轻松进行代理配置管理,支持负载均衡,服务器状态检测等
+- [**291**Star][1y] [C] [fail0verflow/ps4-kexec](https://github.com/fail0verflow/ps4-kexec) Implementation of the kexec system call for PS4
+- [**291**Star][10m] [C] [a1ext/labeless](https://github.com/a1ext/labeless) Seamless synchronization of labels, function names, comments and global variables (w/wo demangling); Dynamic dumping of debugged process memory regions
+ - [IDA插件](https://github.com/a1ext/labeless/tree/master/labeless_ida)
+ - [OD](https://github.com/a1ext/labeless/tree/master/labeless_olly)
+ - [OD2](https://github.com/a1ext/labeless/tree/master/labeless_olly2)
+ - [x64dbg](https://github.com/a1ext/labeless/tree/master/labeless_x64dbg)
+- [**290**Star][1y] [Py] [gallopsled/pwntools-tutorial](https://github.com/gallopsled/pwntools-tutorial) Tutorials for getting started with Pwntools
+- [**290**Star][3y] [Py] [cokebar/gfwlist2dnsmasq_python](https://github.com/cokebar/gfwlist2dnsmasq_python) Just another python script to auto-generate dnsmasq ipset rules using gfwlist. Shell script version:
+- [**290**Star][3m] [C++] [xmrig/xmrig-amd](https://github.com/xmrig/xmrig-amd) xmrig-amd: 门罗币挖矿代码 A卡版本
+- [**290**Star][5m] [marcinguy/cve-2019-2107](https://github.com/marcinguy/cve-2019-2107) CVE-2019-2107
+- [**290**Star][4m] [C#] [l0ss/grouper2](https://github.com/l0ss/grouper2) Find vulnerabilities in AD Group Policy
+- [**290**Star][10m] [Py] [immunit/drupwn](https://github.com/immunit/drupwn) Drupal enumeration & exploitation tool
+- [**290**Star][1y] [Py] [flipkart-incubator/watchdog](https://github.com/flipkart-incubator/watchdog) A Comprehensive Security Scanning and a Vulnerability Management Tool.
+- [**290**Star][2y] [HTML] [dxa4481/cssinjection](https://github.com/dxa4481/cssinjection) Stealing CSRF tokens with CSS injection (without iFrames)
+- [**290**Star][1m] [Go] [decomp/decomp](https://github.com/decomp/decomp) Components of a decompilation pipeline.
+- [**290**Star][4y] [Perl] [bishopfox/theos-jailed](https://github.com/bishopfox/theos-jailed) A version of Theos/CydiaSubstrate for non-jailbroken iOS devices
+- [**290**Star][2m] [Py] [a1ext/auto_re](https://github.com/a1ext/auto_re) IDA PRO auto-renaming plugin with tagging support
+- [**289**Star][15d] [Roff] [ysurac/openmptcprouter](https://github.com/ysurac/openmptcprouter) OpenMPTCProuter is an open source solution to aggregate multiple internet connections using Multipath TCP (MPTCP) on OpenWrt
+- [**289**Star][6m] [JS] [joshuaferrara/node-csgo](https://github.com/joshuaferrara/node-csgo) A node-steam plugin for Counter-Strike: Global Offensive.
+- [**289**Star][3y] [PS] [fortynorthsecurity/wmiops](https://github.com/FortyNorthSecurity/WMIOps) This repo is for WMIOps, a powershell script which uses WMI for various purposes across a network.
+- [**289**Star][4d] [PHP] [voku/anti-xss](https://github.com/voku/anti-xss)
+- [**289**Star][7m] [Py] [ropnop/windapsearch](https://github.com/ropnop/windapsearch) Python script to enumerate users, groups and computers from a Windows domain through LDAP queries
+- [**289**Star][2m] [JS] [pownjs/pown-recon](https://github.com/pownjs/pown-recon) A powerful target reconnaissance framework powered by graph theory.
+- [**289**Star][5m] [Py] [opsdisk/pagodo](https://github.com/opsdisk/pagodo) pagodo (Passive Google Dork) - Automate Google Hacking Database scraping
+- [**289**Star][3m] [JS] [kspearrin/ff-password-exporter](https://github.com/kspearrin/ff-password-exporter) Easily export your passwords from Firefox.
+- [**289**Star][2y] [Py] [kootenpv/gittyleaks](https://github.com/kootenpv/gittyleaks) Discover where your sensitive data has been leaked.
+- [**289**Star][2y] [Py] [gbrindisi/xsssniper](https://github.com/gbrindisi/xsssniper) An automatic XSS discovery tool
+- [**289**Star][2y] [C] [creaktive/tsh](https://github.com/creaktive/tsh) Tiny SHell - An open-source UNIX backdoor
+- [**289**Star][4d] [Shell] [adferrand/docker-letsencrypt-dns](https://github.com/adferrand/docker-letsencrypt-dns) Docker with Certbot + Lexicon to provide Let's Encrypt SSL certificates validated by DNS challenges
+- [**288**Star][1y] [Py] [zhl2008/awd-platform](https://github.com/zhl2008/awd-platform) a project to set up your awd environment(web challenges only) quickly
+- [**288**Star][7m] [Py] [williballenthin/python-registry](https://github.com/williballenthin/python-registry) Read access to Windows Registry files.
+- [**288**Star][2y] [Py] [websploit/websploit](https://github.com/websploit/websploit) websploit is an advanced MITM framework
+- [**288**Star][4d] [C] [troglobit/nemesis](https://github.com/troglobit/nemesis) A command-line network packet crafting and injection utility
+- [**288**Star][2d] [Py] [sosreport/sos](https://github.com/sosreport/sos) A unified tool for collecting system logs and other debug information
+- [**288**Star][5m] [C++] [rampagex/firmware-mod-kit](https://github.com/rampagex/firmware-mod-kit) Automatically exported from code.google.com/p/firmware-mod-kit
+- [**288**Star][10d] [PHP] [phpmussel/phpmussel](https://github.com/phpmussel/phpmussel) PHP-based anti-virus anti-trojan anti-malware solution.
+- [**288**Star][7m] [JS] [ma3k4h3d/papers](https://github.com/ma3k4h3d/papers) Some papers about cyber security
+- [**288**Star][12m] [Java] [indywidualny/faceslim](https://github.com/indywidualny/faceslim) Web App for Facebook. Lightweight, ad-free, chat support and modern look.
+- [**288**Star][3y] [Py] [dhilipsiva/webapp-checklist](https://github.com/dhilipsiva/webapp-checklist) Technical details that a programmer of a web application should consider before making the site public.
+- [**288**Star][3y] [C++] [develbranch/tinyantivirus](https://github.com/develbranch/tinyantivirus) TinyAntivirus is an open source antivirus engine designed for detecting polymorphic virus and disinfecting it.
+- [**288**Star][3m] [Py] [covertcodes/multitun](https://github.com/covertcodes/multitun) Tunnel arbitrary traffic through an innocuous WebSocket. Clients can 'see' each other, resulting in a stealth WebSocket VPN.
+- [**288**Star][10m] [C++] [anhkgg/superdllhijack](https://github.com/anhkgg/superdllhijack) SuperDllHijack:A general DLL hijack technology, don't need to manually export the same function interface of the DLL, so easy! 一种通用Dll劫持技术,不再需要手工导出Dll的函数接口了
+- [**287**Star][6m] [Shell] [greenwolf/spray](https://github.com/Greenwolf/Spray) A Password Spraying tool for Active Directory Credentials by Jacob Wilkin(Greenwolf)
+- [**287**Star][1y] [Py] [klsecservices/rpivot](https://github.com/klsecservices/rpivot) socks4 reverse proxy for penetration testing
+- [**287**Star][8m] [C] [tangsilian/android-vuln](https://github.com/tangsilian/android-vuln) 安卓内核提权漏洞分析
+- [**287**Star][2m] [Py] [utiso/dorkbot](https://github.com/utiso/dorkbot) Command-line tool to scan Google search results for vulnerabilities
+- [**287**Star][2m] [Shell] [tehw0lf/airbash](https://github.com/tehw0lf/airbash) A POSIX-compliant, fully automated WPA PSK handshake capture script aimed at penetration testing
+- [**287**Star][10m] [C] [samhocevar/zzuf](https://github.com/samhocevar/zzuf)
+- [**287**Star][1y] [C++] [paranoidninja/pandoras-box](https://github.com/paranoidninja/pandoras-box) custom scripts for Penetration Testing and Red Team Assessments.
+- [**287**Star][23d] [HTML] [mozillasecurity/fuzzdata](https://github.com/mozillasecurity/fuzzdata) Fuzzing resources for feeding various fuzzers with input.
+- [**287**Star][9d] [C#] [matterpreter/offensivecsharp](https://github.com/matterpreter/offensivecsharp) Collection of Offensive C# Tooling
+- [**287**Star][1y] [Py] [manwhoami/mmetokendecrypt](https://github.com/manwhoami/mmetokendecrypt) Decrypts and extracts iCloud and MMe authorization tokens on Apple macOS / OS X. No user authentication needed. 🏅🌩
+- [**287**Star][4m] [Py] [lufeirider/cve-2019-2725](https://github.com/lufeirider/cve-2019-2725) CVE-2019-2725 命令回显
+- [**287**Star][2y] [C++] [godaddy/procfilter](https://github.com/godaddy/procfilter) A YARA-integrated process denial framework for Windows
+- [**287**Star][11m] [C++] [gamozolabs/applepie](https://github.com/gamozolabs/applepie) A hypervisor for fuzzing built with WHVP and Bochs
+- [**287**Star][12m] [C] [dgoulet/torsocks](https://github.com/dgoulet/torsocks) Library to torify application - NOTE: upstream has been moved to
+- [**287**Star][6m] [Shell] [0ki/mikrotik-tools](https://github.com/0ki/mikrotik-tools) Tools for Mikrotik devices - universal jailbreak tool
+- [**286**Star][1y] [C] [str8outtaheap/heapwn](https://github.com/str8outtaheap/heapwn) Linux Heap Exploitation Practice
+- [**286**Star][21d] [Go] [zmap/zgrab2](https://github.com/zmap/zgrab2) Go Application Layer Scanner
+- [**286**Star][1m] [Py] [xdavidhu/portspider](https://github.com/xdavidhu/portspider) A lightning fast multithreaded network scanner framework with modules.
+- [**286**Star][1y] [Java] [webgoat/webgoat-legacy](https://github.com/webgoat/webgoat-legacy) Legacy WebGoat 6.0 - Deliberately insecure JavaEE application
+- [**286**Star][4d] [Lua] [theherogac/autoplugin](https://github.com/theherogac/autoplugin) Autoplugin for PSVITA
+- [**286**Star][7m] [C++] [mattiwatti/pplkiller](https://github.com/mattiwatti/pplkiller) Protected Processes Light Killer
+- [**286**Star][2y] [ivmachiavelli/osint_team_links](https://github.com/ivmachiavelli/osint_team_links) Links for the OSINT Team
+- [**286**Star][3m] [Py] [feliam/pysymemu](https://github.com/feliam/pysymemu) An intel 64 symbolic emulator
+- [**286**Star][7m] [Py] [cesar-rodriguez/terrascan](https://github.com/cesar-rodriguez/terrascan) Collection of security and best practice test for static code analysis of terraform templates
+- [**286**Star][5y] [Py] [aaronportnoy/toolbag](https://github.com/aaronportnoy/toolbag) The IDA Toolbag is a plugin providing supplemental functionality to Hex-Rays IDA Pro disassembler.
+- [**285**Star][7m] [C] [thingpulse/esp8266-weather-station-color](https://github.com/ThingPulse/esp8266-weather-station-color) ESP8266 Weather Station in Color using ILI9341 TFT 240x320 display
+- [**285**Star][10m] [wallarm/awesome-nginx-security](https://github.com/wallarm/awesome-nginx-security)
+- [**285**Star][22d] [Shell] [petit-miner/blueberry-pi](https://github.com/petit-miner/blueberry-pi) Blueberry PI
+- [**285**Star][10m] [ntruopensourceproject/ntru-crypto](https://github.com/ntruopensourceproject/ntru-crypto) Open Source NTRU Public Key Cryptography and Reference Code
+- [**285**Star][3y] [Py] [nanshihui/poccollect](https://github.com/nanshihui/poccollect) a plenty of poc based on python
+- [**285**Star][5m] [JS] [mike-goodwin/owasp-threat-dragon](https://github.com/mike-goodwin/owasp-threat-dragon) An open source, online threat modelling tool from OWASP
+- [**285**Star][3y] [Go] [longxboy/lunnel](https://github.com/longxboy/lunnel) fast reverse-proxy
+- [**285**Star][4y] [C++] [kennytm/miscellaneous](https://github.com/kennytm/miscellaneous) This repository contains stuff which would be helpful for jailbroken iOS development.
+- [**285**Star][1y] [Py] [fox-it/aclpwn.py](https://github.com/fox-it/aclpwn.py) Active Directory ACL exploitation with BloodHound
+- [**285**Star][2y] [evilsocket/bettercap-proxy-modules](https://github.com/evilsocket/bettercap-proxy-modules) This repository contains some bettercap transparent proxy example modules.
+- [**285**Star][2y] [Py] [eik00d/cantoolz](https://github.com/eik00d/cantoolz) CANToolz - framework for black-box CAN network analysis
+- [**285**Star][2y] [C] [devio/walruss](https://github.com/devio/walruss) PC-Wahl 10 Hacking Tools
+- [**285**Star][1y] [Py] [code-scan/dzscan](https://github.com/code-scan/dzscan) Dzscan
+- [**285**Star][2y] [Java] [cnfree/eclipse-class-decompiler](https://github.com/cnfree/eclipse-class-decompiler) Eclipse Class Decompiler integrates JD, Jad, FernFlower, CFR, Procyon seamlessly with Eclipse and allows Java developers to debug class files without source code directly
+- [**285**Star][3m] [Py] [apache/incubator-spot](https://github.com/apache/incubator-spot) Mirror of Apache Spot
+- [**284**Star][1m] [JS] [agoric/ses](https://github.com/agoric/ses) SES (Secure EcmaScript) is a secure runtime for running third-party code safely
+- [**284**Star][2m] [Py] [yzddmr6/webcrack](https://github.com/yzddmr6/webcrack) 网站后台弱口令/万能密码批量检测工具
+- [**284**Star][3y] [C] [unix-thrust/beurk](https://github.com/unix-thrust/beurk) BEURK Experimental Unix RootKit
+- [**284**Star][9d] [Py] [target/strelka](https://github.com/target/strelka) Real-time, container-based file scanning at enterprise scale
+- [**284**Star][12m] [Py] [mrash/afl-cov](https://github.com/mrash/afl-cov) Produce code coverage results with gcov from afl-fuzz test cases
+- [**284**Star][1m] [Py] [lorexxar/cobra-w](https://github.com/lorexxar/cobra-w) Cobra-W -> Cobra-White 白盒源代码审计工具-白帽子版
+- [**284**Star][2y] [Swift] [krausefx/watch.user](https://github.com/krausefx/watch.user) Every iOS app you ever gave permission to use your camera can record you any time it runs - without notice
+- [**284**Star][12m] [Py] [justicerage/ffm](https://github.com/justicerage/ffm) Freedom Fighting Mode: open source hacking harness
+- [**284**Star][2y] [Shell] [jobertabma/recon.sh](https://github.com/jobertabma/recon.sh) A toolset to track and organize output of reconnaissance tools
+- [**284**Star][1y] [Shell] [ha71/namechk](https://github.com/ha71/namechk) Osint tool based on namechk.com for checking usernames on more than 100 websites, forums and social networks.
+- [**284**Star][4y] [C] [firnsy/barnyard2](https://github.com/firnsy/barnyard2) Barnyard2 is a dedicated spooler for Snort's unified2 binary output format.
+- [**284**Star][5d] [Go] [cruise-automation/fwanalyzer](https://github.com/cruise-automation/fwanalyzer) a tool to analyze filesystem images for security
+- [**284**Star][6m] [Go] [anshumanbh/tko-subs](https://github.com/anshumanbh/tko-subs) A tool that can help detect and takeover subdomains with dead DNS records
+- [**284**Star][6m] [Py] [airbus-seclab/cpu_rec](https://github.com/airbus-seclab/cpu_rec) Recognize cpu instructions in an arbitrary binary file
+- [**283**Star][3m] [C++] [yuanyuanxiang/simpleremoter](https://github.com/yuanyuanxiang/simpleremoter) 基于gh0st的远程控制器:实现了终端管理、进程管理、窗口管理、远程桌面、文件管理、语音管理、视频管理、服务管理、注册表管理等功能,优化全部代码及整理排版,修复内存泄漏缺陷,程序运行稳定。此项目初版见:
+- [**283**Star][9d] [C] [tomb5/tomb5](https://github.com/tomb5/tomb5) Chronicles Disassembly translated to C source code.
+- [**283**Star][4m] [tanprathan/owasp-testing-checklist](https://github.com/tanprathan/owasp-testing-checklist) OWASP based Web Application Security Testing Checklist is an Excel based checklist which helps you to track the status of completed and pending test cases.
+- [**283**Star][5m] [Go] [suyashkumar/ssl-proxy](https://github.com/suyashkumar/ssl-proxy)
+- [**283**Star][1y] [Rust] [superandroidanalyzer/super](https://github.com/superandroidanalyzer/super) Secure, Unified, Powerful and Extensible Rust Android Analyzer
+- [**283**Star][2y] [Java] [simbiose/encryption](https://github.com/simbiose/encryption) Encryption is a simple way to encrypt and decrypt strings on Android and Java project.
+- [**283**Star][4m] [Py] [shenril/sitadel](https://github.com/shenril/sitadel) Web Application Security Scanner
+- [**283**Star][7d] [Py] [punch-cyber/stoq](https://github.com/punch-cyber/stoq) simplify the mundane and repetitive tasks an analyst is required to do
+- [**283**Star][1y] [Py] [mazen160/struts-pwn_cve-2018-11776](https://github.com/mazen160/struts-pwn_cve-2018-11776) An exploit for Apache Struts CVE-2018-11776
+- [**283**Star][3y] [C] [matt-wu/aes](https://github.com/matt-wu/aes) Understanding AES & Rijndael
+- [**283**Star][7m] [Java] [katjahahn/portex](https://github.com/katjahahn/portex) Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness
+- [**283**Star][9m] [C] [jiaoxianjun/btle](https://github.com/jiaoxianjun/btle) Bluetooth Low Energy (BLE) packet sniffer and generator for both standard and non standard (raw bit).
+- [**283**Star][2y] [C++] [google/syzygy](https://github.com/google/syzygy) a suite of tools for the instrumentation of COFF object files and PE binaries
+- [**283**Star][1y] [Java] [elkokc/reflector](https://github.com/elkokc/reflector) Burp plugin able to find reflected XSS on page in real-time while browsing on site
+- [**283**Star][3y] [HTML] [buddhalabs/packetstorm-exploits](https://github.com/buddhalabs/packetstorm-exploits) Collection of publicly available exploits from Packetstorm
+- [**282**Star][3y] [Go] [geohot/lolrecaptcha](https://github.com/geohot/lolrecaptcha) We try to break the recaptcha for the Merry Christmas for all!
+- [**282**Star][2y] [Py] [0xislamtaha/python-rootkit](https://github.com/0xIslamTaha/Python-Rootkit) Python Remote Administration Tool (RAT) to gain meterpreter session
+- [**282**Star][9m] [C#] [nsacyber/windows-event-log-messages](https://github.com/nsacyber/Windows-Event-Log-Messages) Retrieves the definitions of Windows Event Log messages embedded in Windows binaries and provides them in discoverable formats. #nsacyber
+- [**282**Star][1y] [HTML] [googleprojectzero/p0tools](https://github.com/googleprojectzero/p0tools) Project Zero Docs and Tools
+- [**282**Star][3d] [Py] [qiskit/qiskit-aqua](https://github.com/Qiskit/qiskit-aqua) Aqua provides a library and tools to build applications for noisy quantum computers.
+- [**282**Star][3m] [Py] [thekingofduck/easyxsspayload](https://github.com/thekingofduck/easyxsspayload) XssPayload List . Usage:
+- [**282**Star][2y] [Py] [ssooking/ctfdefense](https://github.com/ssooking/ctfdefense) Some tools for CTF off line
+- [**282**Star][5m] [Perl] [shirkdog/pulledpork](https://github.com/shirkdog/pulledpork) Pulled Pork for Snort and Suricata rule management (from Google code)
+- [**282**Star][8m] [Py] [phage-nz/ph0neutria](https://github.com/phage-nz/ph0neutria) ph0neutria is a malware zoo builder that sources samples straight from the wild. Everything is stored in Viper for ease of access and manageability.
+- [**282**Star][5d] [PS] [nullbind/powershellery](https://github.com/nullbind/powershellery) This repo contains Powershell scripts used for general hackery.
+- [**282**Star][3y] [C] [leaflabs/libmaple](https://github.com/leaflabs/libmaple) [INACTIVE] C and C++ library for STM32 ARM Cortex-M3 development boards.
+- [**282**Star][3m] [Py] [joxeankoret/pyew](https://github.com/joxeankoret/pyew) Official repository for Pyew.
+- [**282**Star][2m] [Java] [exalab/anlinux-app](https://github.com/exalab/anlinux-app) AnLinux allow you to run Linux on Android without root access.
+- [**282**Star][22d] [drduh/debian-privacy-server-guide](https://github.com/drduh/debian-privacy-server-guide) Guide to using a remote Debian server for security and privacy services
+- [**282**Star][1y] [Ruby] [danmcinerney/pentest-machine](https://github.com/danmcinerney/pentest-machine) Automates some pentest jobs via nmap xml file
+- [**282**Star][1y] [JS] [chrisallenlane/novahot](https://github.com/chrisallenlane/novahot) A webshell framework for penetration testers.
+- [**282**Star][2y] [Py] [bit4woo/passmaker](https://github.com/bit4woo/passmaker) 可以自定义规则的密码字典生成器,支持图形界面 A password-generator that base on the rules that you specified
+- [**282**Star][2m] [C] [ayeks/sgx-hardware](https://github.com/ayeks/sgx-hardware) This is a list of hardware which is supports Intel SGX - Software Guard Extensions.
+- [**281**Star][3y] [C++] [googleprojectzero/symboliclink-testing-tools](https://github.com/googleprojectzero/symboliclink-testing-tools) a small suite of tools to test various symbolic link types of Windows
+- [**281**Star][1y] [CSS] [w-digital-scanner/w11scan](https://github.com/w-digital-scanner/w11scan) 分布式WEB指纹识别平台 Distributed WEB fingerprint identification platform
+- [**281**Star][9y] [Py] [ptoomey3/evilarc](https://github.com/ptoomey3/evilarc) Create tar/zip archives that can exploit directory traversal vulnerabilities
+- [**281**Star][1y] [Py] [novicelive/bintut](https://github.com/novicelive/bintut) Teach you a binary exploitation for great good.
+- [**281**Star][3m] [PHP] [nico3333fr/csp-useful](https://github.com/nico3333fr/csp-useful) Collection of scripts, thoughts about CSP (Content Security Policy)
+- [**281**Star][4y] [Py] [monnappa22/limon](https://github.com/monnappa22/limon) Limon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators of Linux malware. It allows one to inspect Linux malware before execution, during execution, and after execution (post-mortem analysis) by performing static, dynamic and memory analysis using open s…
+- [**281**Star][8m] [Py] [micropyramid/forex-python](https://github.com/micropyramid/forex-python) Foreign exchange rates, Bitcoin price index and currency conversion using ratesapi.io
+- [**281**Star][4y] [Py] [mandatoryprogrammer/xssless](https://github.com/mandatoryprogrammer/xssless) An automated XSS payload generator written in python.
+- [**281**Star][10m] [maaaaz/impacket-examples-windows](https://github.com/maaaaz/impacket-examples-windows) The great impacket example scripts compiled for Windows
+- [**281**Star][1m] [Py] [cwerling/psptool](https://github.com/cwerling/psptool) Display, extract, and manipulate PSP firmware inside UEFI images
+- [**281**Star][9m] [Py] [chenjiandongx/async-proxy-pool](https://github.com/chenjiandongx/async-proxy-pool)
+- [**281**Star][6m] [Shell] [chaifeng/ufw-docker](https://github.com/chaifeng/ufw-docker) To fix the Docker and UFW security flaw without disabling iptables
+- [**281**Star][1m] [C] [aflsmart/aflsmart](https://github.com/aflsmart/aflsmart) Smart Greybox Fuzzing (
+- [**280**Star][2y] [Go] [unixpickle/kahoot-hack](https://github.com/unixpickle/kahoot-hack) Reverse engineering kahoot.it
+- [**280**Star][1m] [Py] [0xinfection/xsrfprobe](https://github.com/0xInfection/XSRFProbe) The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
+- [**280**Star][27d] [Shell] [trimstray/mkchain](https://github.com/trimstray/mkchain) Open source tool to help you build a valid SSL certificate chain.
+- [**280**Star][2y] [Py] [xoreaxeaxeax/reductio](https://github.com/xoreaxeaxeax/reductio) An exploration of code homeomorphism
+- [**280**Star][8d] [Py] [tomato42/tlsfuzzer](https://github.com/tomato42/tlsfuzzer) SSL and TLS protocol test suite and fuzzer
+- [**280**Star][2y] [C++] [sam-b/windows_kernel_address_leaks](https://github.com/sam-b/windows_kernel_address_leaks) Examples of leaking Kernel Mode information from User Mode on Windows
+- [**280**Star][3m] [Py] [hacktoolspack/hack-tools](https://github.com/hacktoolspack/hack-tools) hack tools
+- [**280**Star][4y] [Py] [fuzzing/mffa](https://github.com/fuzzing/mffa) Media Fuzzing Framework for Android
+- [**280**Star][27d] [Py] [fireeye/flare-emu](https://github.com/fireeye/flare-emu) marries a supported binary analysis framework, such as IDA Pro or Radare2, with Unicorn’s emulation framework to provide the user with an easy to use and flexible interface for scripting emulation tasks
+- [**280**Star][26d] [Py] [facebook/fbkutils](https://github.com/facebook/fbkutils) A variety of utilities built and maintained by Facebook's Linux Kernel Team that we wish to share with the community.
+- [**280**Star][12d] [Py] [ekultek/whatbreach](https://github.com/ekultek/whatbreach) OSINT tool to find breached emails, databases, pastes, and relevant information
+- [**280**Star][1m] [C++] [changeofpace/viviennevmm](https://github.com/changeofpace/viviennevmm) VivienneVMM is a stealthy debugging framework implemented via an Intel VT-x hypervisor.
+- [**280**Star][3y] [C] [andreafabrizi/prism](https://github.com/andreafabrizi/prism) PRISM is an user space stealth reverse shell backdoor, written in pure C.
+- [**280**Star][7m] [aleenzz/mssql_sql_bypass_wiki](https://github.com/aleenzz/mssql_sql_bypass_wiki) MSSQL注入提权,bypass的一些总结
+- [**280**Star][1m] [Py] [0xinfection/xsrfprobe](https://github.com/0xinfection/xsrfprobe) The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
+- [**280**Star][2m] [C] [0xdea/exploits](https://github.com/0xdea/exploits) A handy collection of my public exploits, all in one place.
+- [**279**Star][2m] [Py] [bennington-distributed-systems-2017/darkdarkgo](https://github.com/bennington-distributed-systems-2017/darkdarkgo) Modeled Google and Bing to build a distributed search engine for the dark web
+- [**279**Star][1y] [Py] [rassec/pentester-fully-automatic-scanner](https://github.com/rassec/pentester-fully-automatic-scanner) DNS Subdomain● Brute force ● Web Spider ● Nmap Scan ● etc
+- [**279**Star][1y] [Py] [rassec/pentester-fully-automatic-scanner](https://github.com/RASSec/pentestER-Fully-automatic-scanner) DNS Subdomain● Brute force ● Web Spider ● Nmap Scan ● etc
+- [**279**Star][3d] [Shell] [wuseman/emagnet](https://github.com/wuseman/emagnet) Emagnet is a tool for find leaked databases with 97.1% accurate to grab mail + password together from pastebin leaks. Support for brute forcing spotify accounts, instagram accounts, ssh servers, microsoft rdp clients and gmail accounts
+- [**279**Star][2y] [C++] [rovo89/android_art](https://github.com/rovo89/android_art) Android ART with modifications for the Xposed framework.
+- [**279**Star][6m] [Py] [ridter/exchange2domain](https://github.com/ridter/exchange2domain) CVE-2018-8581
+- [**279**Star][3y] [Py] [pmsosa/duckhunt](https://github.com/pmsosa/duckhunt) Prevent RubberDucky (or other keystroke injection) attacks
+- [**279**Star][2m] [Py] [pbiernat/ripr](https://github.com/pbiernat/ripr) Package Binary Code as a Python class using Binary Ninja and Unicorn Engine
+- [**279**Star][8m] [Py] [nightbringer21/fridump](https://github.com/nightbringer21/fridump) A universal memory dumper using Frida
+- [**279**Star][6m] [Py] [mthbernardes/rsg](https://github.com/mthbernardes/rsg) generate various ways to do a reverse shell
+- [**279**Star][5y] [ApacheConf] [micahflee/fixubuntu](https://github.com/micahflee/fixubuntu) This is the code that powers https://fixubuntu.com/.
+- [**279**Star][3y] [Py] [maldevel/ipgeolocation](https://github.com/maldevel/ipgeolocation) Retrieve IP Geolocation information
+- [**279**Star][5y] [JS] [fix-macosx/fix-macosx](https://github.com/fix-macosx/fix-macosx) This is the code that powers https://fix-macosx.com/.
+- [**279**Star][3y] [C] [firefart/dirtycow](https://github.com/firefart/dirtycow)
+- [**279**Star][2m] [C#] [fireeye/silketw](https://github.com/fireeye/silketw) flexible C# wrappers for ETW
+- [**279**Star][1y] [C++] [fireeye/flare-wmi](https://github.com/fireeye/flare-wmi) various documentation and code projects that describe the Windows Management Instrumentation (WMI) technology
+- [**279**Star][23d] [C] [droberson/ssh-honeypot](https://github.com/droberson/ssh-honeypot) Fake sshd that logs ip addresses, usernames, and passwords.
+- [**279**Star][2m] [Java] [appium/sign](https://github.com/appium/sign) Sign.jar automatically signs an apk with the Android test certificate.
+- [**279**Star][1y] [C] [abeluck/stegdetect](https://github.com/abeluck/stegdetect) UNMAINTAINED. USE AT OWN RISK. Stegdetect is an automated tool for detecting steganographic content in images.
+- [**279**Star][2d] [a2u/free-proxy-list](https://github.com/a2u/free-proxy-list)
+- [**278**Star][2d] [PS] [microsoftdocs/windows-driver-docs](https://github.com/MicrosoftDocs/windows-driver-docs) The official Windows Driver Kit documentation sources
+- [**278**Star][1y] [Py] [fsecurelabs/wepwnise](https://github.com/FSecureLABS/wePWNise) WePWNise generates architecture independent VBA code to be used in Office documents or templates and automates bypassing application control and exploit mitigation software.
+- [**278**Star][3y] [JS] [wuchangming/https-mitm-proxy-handbook](https://github.com/wuchangming/https-mitm-proxy-handbook) 基于Node.js的HTTPS MITM(中间人)代理的原理和实现
+- [**278**Star][11d] [Java] [optimatika/ojalgo](https://github.com/optimatika/ojalgo) Java code that has to do with mathematics, linear algebra and optimisation.
+- [**278**Star][2m] [Py] [mcw0/poc](https://github.com/mcw0/poc) Issues has been disabled for these PoC's, as they are simply PoC, Public Domain and unsupported.
+- [**278**Star][2y] [Py] [iniqua/plecost](https://github.com/iniqua/plecost) Wordpress finger printer Tool
+- [**278**Star][18d] [Py] [hnfull/intensio-obfuscator](https://github.com/hnfull/intensio-obfuscator) Obfuscate a python code 2.x and 3.x
+- [**278**Star][15d] [Py] [franccesco/getaltname](https://github.com/franccesco/getaltname) Extract subdomains from SSL certificates in HTTPS sites.
+- [**278**Star][2y] [JS] [dpnishant/raptor](https://github.com/dpnishant/raptor) Web-based Source Code Vulnerability Scanner
+- [**278**Star][12d] [C++] [crosire/d3d8to9](https://github.com/crosire/d3d8to9) A D3D8 pseudo-driver which converts API calls and bytecode shaders to equivalent D3D9 ones.
+- [**278**Star][10d] [HTML] [bl4de/ctf](https://github.com/bl4de/ctf) CTF (Capture The Flag) writeups, code snippets, notes, scripts
+- [**277**Star][3m] [Java] [ztosec/secscan-authcheck](https://github.com/ztosec/secscan-authcheck) 越权检测工具
+- [**277**Star][12m] [Py] [wyatu/cve-2018-8581](https://github.com/wyatu/cve-2018-8581) CVE-2018-8581 | Microsoft Exchange Server Elevation of Privilege Vulnerability
+- [**277**Star][2y] [Assembly] [tinysec/windows-syscall-table](https://github.com/tinysec/windows-syscall-table) windows syscall table from xp ~ 10 rs4
+- [**277**Star][1m] [Py] [sneakerhax/runbooks](https://github.com/sneakerhax/runbooks) Command references, posts, and resources for different topics
+- [**277**Star][7m] [C] [rieck/malheur](https://github.com/rieck/malheur) A Tool for Automatic Analysis of Malware Behavior
+- [**277**Star][6m] [Perl] [rezasp/vbscan](https://github.com/rezasp/vbscan) OWASP VBScan is a Black Box vBulletin Vulnerability Scanner
+- [**277**Star][15d] [C] [o-gs/dji-firmware-tools](https://github.com/o-gs/dji-firmware-tools) Tools for handling firmwares of DJI products, with focus on quadcopters.
+- [**277**Star][2m] [C] [lfittl/libpg_query](https://github.com/lfittl/libpg_query) C library for accessing the PostgreSQL parser outside of the server environment
+- [**277**Star][12m] [C++] [jmmartinez/easy-just-in-time](https://github.com/jmmartinez/easy-just-in-time) LLVM Optimization to extract a function, embedded in its intermediate representation in the binary, and execute it using the LLVM Just-In-Time compiler.
+- [**277**Star][15d] [Py] [hugsy/defcon_27_windbg_workshop](https://github.com/hugsy/defcon_27_windbg_workshop) DEFCON 27 workshop - Modern Debugging with WinDbg Preview
+- [**277**Star][14d] [disclose/disclose](https://github.com/disclose/disclose) Driving safety, simplicity, and standardization in vulnerability disclosure.
+- [**277**Star][20d] [Java] [c0ny1/fastjsonexploit](https://github.com/c0ny1/fastjsonexploit) Fastjson vulnerability quickly exploits the framework(fastjson漏洞快速利用框架)
+- [**276**Star][11d] [C] [jedisct1/pure-ftpd](https://github.com/jedisct1/pure-ftpd) Pure FTP server
+- [**276**Star][1m] [C] [grapheneos/hardened_malloc](https://github.com/GrapheneOS/hardened_malloc) Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability / integration over time.
+- [**276**Star][5y] [C++] [tsiv/ccminer-cryptonight](https://github.com/tsiv/ccminer-cryptonight)
+- [**276**Star][2y] [C] [taviso/rbndr](https://github.com/taviso/rbndr) Simple DNS Rebinding Service
+- [**276**Star][1m] [Go] [rmikehodges/hidensneak](https://github.com/rmikehodges/hidensneak) assists in managing attack infrastructure for penetration testers by providing an interface to rapidly deploy, manage, and take down various cloud services
+- [**276**Star][2d] [Java] [nationalsecurityagency/datawave](https://github.com/nationalsecurityagency/datawave) DataWave is an ingest/query framework that leverages Apache Accumulo to provide fast, secure data access.
+- [**276**Star][11d] [Py] [liuchangfreeman/c--compiler](https://github.com/liuchangfreeman/c--compiler) C--compiler which implements LL(1)\LR(0)\SLR\LR(1) and semantic analysis and MIPS generate
+- [**276**Star][3m] [Py] [jpcertcc/aa-tools](https://github.com/jpcertcc/aa-tools) Multiple RE plugins and scripts
+ - [apt17scan.py](https://github.com/jpcertcc/aa-tools/blob/master/apt17scan.py) Volatility plugin for detecting APT17 related malware and extracting its config
+ - [emdivi_postdata_decoder](https://github.com/jpcertcc/aa-tools/blob/master/emdivi_postdata_decoder.py) Python script for decoding Emdivi's post data
+ - [emdivi_string_decryptor](https://github.com/jpcertcc/aa-tools/blob/master/emdivi_string_decryptor.py) IDAPython script for decrypting strings inside Emdivi
+ - [citadel_decryptor](https://github.com/jpcertcc/aa-tools/tree/master/citadel_decryptor) Data decryption tool for Citadel
+ - [adwind_string_decoder](https://github.com/jpcertcc/aa-tools/blob/master/adwind_string_decoder.py) Python script for decoding strings inside Adwind
+ - [redleavesscan](https://github.com/jpcertcc/aa-tools/blob/master/redleavesscan.py) Volatility plugin for detecting RedLeaves and extracting its config
+ - [datper_splunk](https://github.com/jpcertcc/aa-tools/blob/master/datper_splunk.py) Python script for detects Datper communication and adds result field to Splunk index
+ - [datper_elk](https://github.com/jpcertcc/aa-tools/blob/master/datper_elk.py) Python script for detects Datper communication and adds result field to Elasticsearch index
+ - [tscookie_decode](https://github.com/jpcertcc/aa-tools/blob/master/tscookie_decode.py) Python script for decrypting and parsing TSCookie configure data
+ - [wellmess_cookie_decode](https://github.com/jpcertcc/aa-tools/blob/master/wellmess_cookie_decode.py) Python script for decoding WellMess's cookie data (support Python2)
+ - [cobaltstrikescan](https://github.com/jpcertcc/aa-tools/blob/master/cobaltstrikescan.py) Volatility plugin for detecting Cobalt Strike Beacon and extracting its config
+ - [tscookie_data_decode](https://github.com/jpcertcc/aa-tools/blob/master/tscookie_data_decode.py) Python script for decrypting and parsing TSCookie configure data
+- [**276**Star][4y] [XSLT] [ironbee/ironbee](https://github.com/ironbee/ironbee) Universal web application security sensor intended for real-time monitoring and defense.
+- [**276**Star][12m] [Py] [hongrisec/ctf-training](https://github.com/hongrisec/ctf-training) 收集各大比赛的题目和Writeup
+- [**276**Star][1y] [Java] [ewilded/shelling](https://github.com/ewilded/shelling) SHELLING - a comprehensive OS command injection payload generator
+- [**276**Star][2y] [Py] [dirtyfilthy/freshonions-torscraper](https://github.com/dirtyfilthy/freshonions-torscraper) Fresh Onions is an open source TOR spider / hidden service onion crawler hosted at zlal32teyptf4tvi.onion
+- [**276**Star][12d] [C#] [dahall/vanara](https://github.com/dahall/vanara) A set of .NET libraries for Windows implementing PInvoke calls to many native Windows APIs with supporting wrappers.
+- [**276**Star][3m] [Shell] [cryptolok/aslray](https://github.com/cryptolok/aslray) Linux ELF x32/x64 ASLR DEP/NX bypass exploit with stack-spraying
+- [**276**Star][2y] [Py] [anssi-fr/polichombr](https://github.com/anssi-fr/polichombr) Collaborative malware analysis framework
+- [**276**Star][4m] [Py] [18f/domain-scan](https://github.com/18f/domain-scan) A lightweight pipeline, locally or in Lambda, for scanning things like HTTPS, third party service use, and web accessibility.
+- [**275**Star][10d] [TS] [javascript-obfuscator/webpack-obfuscator](https://github.com/javascript-obfuscator/webpack-obfuscator) javascript-obfuscator plugin for Webpack
+- [**275**Star][3m] [Vue] [zerx0r/kage](https://github.com/Zerx0r/Kage) Kage is Graphical User Interface for Metasploit Meterpreter and Session Handler
+- [**275**Star][7m] [Shell] [venshine/decompile-apk](https://github.com/venshine/decompile-apk) auto decompile function for produce Java source code and resources from Android Apk files that displayed on GUI.
+- [**275**Star][3m] [C] [sensepost/hostapd-mana](https://github.com/sensepost/hostapd-mana) SensePost's modified hostapd for wifi attacks.
+- [**275**Star][7d] [Go] [openzipkin/zipkin-go](https://github.com/openzipkin/zipkin-go) Zipkin tracer library for go
+- [**275**Star][5m] [geerlingguy/ansible-role-security](https://github.com/geerlingguy/ansible-role-security) Ansible Role - Security
+- [**275**Star][3y] [Java] [fourbrother/icodetools](https://github.com/fourbrother/icodetools) Android中动态自动插入代码到apk中工具
+- [**275**Star][1y] [Java] [florent37/android-nosql](https://github.com/florent37/android-nosql) Lightweight, simple structured NoSQL database for Android
+- [**275**Star][2y] [Java] [commonsguy/cwac-security](https://github.com/commonsguy/cwac-security) CWAC-Security: Helping You Help Your Users Defend Their Data
+- [**274**Star][6m] [Py] [k8gege/cve-2019-0708](https://github.com/k8gege/cve-2019-0708) 3389远程桌面代码执行漏洞CVE-2019-0708批量检测工具(Rdpscan Bluekeep Check)
+- [**274**Star][8d] [C] [br101/horst](https://github.com/br101/horst) “horst” - lightweight IEEE802.11 wireless LAN analyzer with a text interface
+- [**274**Star][3y] [Py] [ptr32void/ostrica](https://github.com/ptr32void/ostrica)
+- [**274**Star][1y] [PHP] [psecio/parse](https://github.com/psecio/parse) Parse: A Static Security Scanner
+- [**274**Star][3d] [Perl] [owasp/o-saft](https://github.com/owasp/o-saft) O-Saft - OWASP SSL advanced forensic tool
+- [**274**Star][22d] [Go] [muraenateam/muraena](https://github.com/muraenateam/muraena) Muraena is an almost-transparent reverse proxy aimed at automating phishing and post-phishing activities.
+- [**274**Star][2y] [Java] [mateuszk87/badintent](https://github.com/mateuszk87/badintent) Intercept, modify, repeat and attack Android's Binder transactions using Burp Suite
+- [**274**Star][29d] [Go] [kubernetes-sigs/application](https://github.com/kubernetes-sigs/application) Application metadata descriptor CRD
+- [**274**Star][12m] [C] [jmk-foofus/medusa](https://github.com/jmk-foofus/medusa) Medusa is a speedy, parallel, and modular, login brute-forcer.
+- [**274**Star][3y] [C] [iaik/cjag](https://github.com/iaik/cjag) CJAG is an open-source implementation of our cache-based jamming agreement.
+- [**274**Star][1y] [C++] [dekimir/ramfuzz](https://github.com/dekimir/ramfuzz) Combining Unit Tests, Fuzzing, and AI
+- [**274**Star][21d] [C] [beckus/qemu_stm32](https://github.com/beckus/qemu_stm32) QEMU with an STM32 microcontroller implementation
+- [**274**Star][7m] [C++] [aekras1a/updated-carbanak-source-with-plugins](https://github.com/aekras1a/updated-carbanak-source-with-plugins)
+- [**274**Star][3d] [Py] [abhi-r3v0/adhrit](https://github.com/abhi-r3v0/adhrit) Android Security Suite for APK reversing, in-depth reconnaissance and static bytecode analysis based on Ghera benchmarks.
+- [**273**Star][8m] [C] [rofl0r/microsocks](https://github.com/rofl0r/microsocks) tiny, portable SOCKS5 server with very moderate resource usage
+- [**273**Star][4m] [Py] [mariovilas/winappdbg](https://github.com/mariovilas/winappdbg) WinAppDbg Debugger
+- [**273**Star][2y] [Go] [kisesy/gscan_quic](https://github.com/kisesy/gscan_quic) Google Quic 扫描工具
+- [**273**Star][2y] [C++] [isometric/bucketcompressiontrick](https://github.com/isometric/bucketcompressiontrick) Cool trick to store 4 5-bit values in one 16-bit value.
+- [**272**Star][2m] [C++] [windytan/redsea](https://github.com/windytan/redsea) A lightweight RDS to JSON decoder
+- [**272**Star][16d] [C++] [steve-m/kalibrate-rtl](https://github.com/steve-m/kalibrate-rtl) fork of
+- [**272**Star][4y] [C] [robertdavidgraham/pemcrack](https://github.com/robertdavidgraham/pemcrack) Cracks SSL PEM files that hold encrypted private keys. Brute forces or dictionary cracks. This code is extraordinarily slow, DON'T JUDGE ME!!!
+- [**272**Star][3m] [Py] [pysmt/pysmt](https://github.com/pysmt/pysmt) A library for SMT formulae manipulation and solving
+- [**272**Star][3d] [PS] [nettitude/poshc2](https://github.com/nettitude/PoshC2) Python Server for PoshC2
+- [**272**Star][3d] [PS] [nettitude/poshc2](https://github.com/nettitude/poshc2) Python Server for PoshC2
+- [**272**Star][8m] [Py] [mozillasecurity/peach](https://github.com/mozillasecurity/peach) Peach is a fuzzing framework which uses a DSL for building fuzzers and an observer based architecture to execute and monitor them.
+- [**272**Star][3y] [Py] [joxeankoret/multiav](https://github.com/joxeankoret/multiav) MultiAV scanner with Python and JSON API. Disclaimer: I don't maintain it any more.
+- [**272**Star][1y] [Shell] [jgamblin/carhackingtools](https://github.com/jgamblin/carhackingtools) Install and Configure Common Car Hacking Tools.
+- [**272**Star][4m] [Py] [invernizzi/scapy-http](https://github.com/invernizzi/scapy-http) Support for HTTP in Scapy
+- [**272**Star][8d] [Py] [ghostop14/sparrow-wifi](https://github.com/ghostop14/sparrow-wifi) Next-Gen GUI-based WiFi and Bluetooth Analyzer for Linux
+- [**272**Star][2y] [C++] [gellin/teamviewer_permissions_hook_v1](https://github.com/gellin/teamviewer_permissions_hook_v1) A proof of concept injectable C++ dll, that uses naked inline hooking and direct memory modification to change your TeamViewer permissions.
+- [**272**Star][1y] [Py] [gbafana25/esp8266_honeypot](https://github.com/gbafana25/esp8266_honeypot) THE ESP8266 HONEYPOT: A PROJECT TO TRAP SCRIPT KIDDIES EVERYWHRE!!
+- [**272**Star][2y] [Java] [crowhawk/magictoe](https://github.com/crowhawk/magictoe) 基于webmagic + springboot + mybatis的Java爬虫,使用Echarts进行数据可视化分析,提供了从爬虫获取数据到数据持久化、数据可视化分析以及构建简单的代理池等一整套解决方案模板。
+- [**271**Star][2y] [C] [bishopfox/bfdecrypt](https://github.com/bishopfox/bfdecrypt) Utility to decrypt App Store apps on jailbroken iOS 11.x
+- [**271**Star][7m] [Py] [s0md3v/breacher](https://github.com/s0md3v/Breacher) An advanced multithreaded admin panel finder written in python.
+- [**271**Star][2d] [Py] [shaypal5/cachier](https://github.com/shaypal5/cachier) Persistent, stale-free, local and cross-machine caching for Python functions.
+- [**271**Star][7m] [s0md3v/mypapers](https://github.com/s0md3v/mypapers) Repository for hosting my research papers
+- [**271**Star][2y] [Java] [reoky/android-crackme-challenge](https://github.com/reoky/android-crackme-challenge) A collection of reverse engineering challenges for learning about the Android operating system and mobile security.
+- [**271**Star][3y] [Py] [quandyfactory/dicttoxml](https://github.com/quandyfactory/dicttoxml) Simple library to convert a Python dictionary or other native data type into a valid XML string.
+- [**271**Star][23d] [Swift] [prateek147/dvia-v2](https://github.com/prateek147/dvia-v2) Damn Vulnerable iOS App (DVIA) is an iOS application that is damn vulnerable. Its main goal is to provide a platform to mobile security enthusiasts/professionals or students to test their iOS penetration testing skills in a legal environment. This project is developed and maintained by @prateekg147. The vulnerabilities and solutions covered in t…
+- [**271**Star][10m] [Py] [pisupply/papirus](https://github.com/pisupply/papirus) Resources for PaPiRus ePaper eInk displays
+- [**271**Star][8m] [offensive-security/nethunter-lrt](https://github.com/offensive-security/nethunter-lrt) The Nethunter Linux Root Toolkit is a collection of bash scripts which install Nethunter onto a supported device.
+- [**271**Star][10m] [Vala] [naxuroqa/venom](https://github.com/naxuroqa/venom) a modern Tox client for the GNU/Linux desktop
+- [**271**Star][17d] [C#] [mkaring/confuserex](https://github.com/mkaring/confuserex) An open-source, free protector for .NET applications
+- [**271**Star][3y] [Py] [lgandx/responder-windows](https://github.com/lgandx/responder-windows) Responder Windows Version Beta
+- [**271**Star][3y] [jinyu121/surgerule](https://github.com/jinyu121/surgerule) Deprecate since 2016
+- [**271**Star][3y] [Py] [inaz2/roputils](https://github.com/inaz2/roputils) A Return-oriented Programming toolkit
+- [**271**Star][2m] [JS] [hynekpetrak/javascript-malware-collection](https://github.com/hynekpetrak/javascript-malware-collection) Collection of almost 40.000 javascript malware samples
+- [**271**Star][2y] [Py] [hadi999/nxcrypt](https://github.com/hadi999/nxcrypt) NXcrypt - 'python backdoor' framework
+- [**271**Star][5y] [Scala] [fix-macosx/net-monitor](https://github.com/fix-macosx/net-monitor) Toolkit for auditing "phone home" behavior on Mac OS X Yosemite.
+- [**271**Star][3y] [C] [cisco-talos/mbrfilter](https://github.com/cisco-talos/mbrfilter) Cisco Talos MBR Filter Driver
+- [**271**Star][2y] [C] [can1357/theperfectinjector](https://github.com/can1357/theperfectinjector) Literally, the perfect injector.
+- [**271**Star][2y] [JS] [bugbountyforum/xss-radar](https://github.com/bugbountyforum/xss-radar)
+- [**270**Star][3m] [mattnotmax/cyberchef-recipes](https://github.com/mattnotmax/cyberchef-recipes) A list of cyber-chef recipes
+- [**270**Star][2d] [HTML] [vernesong/openclash](https://github.com/vernesong/openclash) A Clash Client For OpenWrt
+- [**270**Star][4y] [C++] [cisco-talos/moflow](https://github.com/Cisco-Talos/moflow) Release Branches for MoFlow
+- [**270**Star][1y] [Shell] [zephrfish/dockerattack](https://github.com/zephrfish/dockerattack) Various Tools and Docker Images
+- [**270**Star][3m] [ObjC] [veorq/siphash](https://github.com/veorq/siphash) High-speed pseudorandom function (reference code)
+- [**270**Star][12m] [Shell] [thelinuxchoice/instainsane](https://github.com/thelinuxchoice/instainsane) Multi-threaded Instagram Brute Forcer (100 attemps at once)
+- [**270**Star][1y] [JS] [ropnop/serverless_toolkit](https://github.com/ropnop/serverless_toolkit) A collection of useful Serverless functions I use when pentesting
+- [**270**Star][6y] [C] [robertdavidgraham/isowall](https://github.com/robertdavidgraham/isowall) This is a mini-firewall that completely isolates a target device from the local network.
+- [**270**Star][6d] [JS] [protofire/solhint](https://github.com/protofire/solhint) Security and Style Guide validations.
+- [**270**Star][16d] [PHP] [pan-unit42/iocs](https://github.com/pan-unit42/iocs) Indicators from Unit 42 Public Reports
+- [**270**Star][1m] [Py] [nccgroup/pmapper](https://github.com/nccgroup/pmapper) A tool for quickly evaluating IAM permissions in AWS.
+- [**270**Star][6m] [Java] [nationalsecurityagency/lemongrenade](https://github.com/nationalsecurityagency/lemongrenade) Data-driven automation platform
+- [**270**Star][5y] [leonardonve/sslstrip2](https://github.com/leonardonve/sslstrip2) SSLStrip version to defeat HSTS
+- [**270**Star][3y] [C] [laginimaineb/extractkeymaster](https://github.com/laginimaineb/extractkeymaster) Exploit that extracts Qualcomm's KeyMaster keys using CVE-2015-6639 and CVE-2016-2431
+- [**270**Star][5y] [C] [conradev/dumpdecrypted](https://github.com/conradev/dumpdecrypted) Dumps decrypted mach-o files from encrypted iPhone applications from memory to disk. This tool is necessary for security researchers to be able to look under the hood of encryption.
+- [**270**Star][11m] [Py] [appsecco/the-art-of-subdomain-enumeration](https://github.com/appsecco/the-art-of-subdomain-enumeration) This repository contains all the supplement material for the book "The art of sub-domain enumeration"
+- [**269**Star][10m] [Shell] [thelinuxchoice/instashell](https://github.com/thelinuxchoice/instashell) Multi-threaded Instagram Brute Forcer without password limit
+- [**269**Star][18d] [Dockerfile] [pengchujin/v2raydocker](https://github.com/pengchujin/v2raydocker) 一键v2ray ws + tls 方便就完事了
+- [**269**Star][4d] [Py] [abhisharma404/vault](https://github.com/abhisharma404/vault) swiss army knife for hackers
+- [**269**Star][7d] [Py] [xfreed0m/rdpassspray](https://github.com/xfreed0m/rdpassspray) Python3 tool to perform password spraying using RDP
+- [**269**Star][2y] [Py] [toyakula/luna](https://github.com/toyakula/luna) luna webscanner
+- [**269**Star][2y] [sam-b/windows_kernel_resources](https://github.com/sam-b/windows_kernel_resources) Papers, blogposts, tutorials etc for learning about Windows kernel exploitation, internals and (r|b)ootkits
+- [**269**Star][3y] [ptresearch/me-disablement](https://github.com/ptresearch/me-disablement)
+- [**269**Star][9d] [Rust] [nccgroup/dirble](https://github.com/nccgroup/dirble) Fast directory scanning and scraping tool
+- [**269**Star][3m] [mattnotmax/cyberchef-recipes](https://github.com/mattnotmax/cyberchef-recipes) A list of cyber-chef recipes
+- [**269**Star][2y] [Py] [lunarca/simpleemailspoofer](https://github.com/lunarca/simpleemailspoofer) A simple Python CLI to spoof emails.
+- [**269**Star][4m] [PHP] [lawrenceamer/0xsp-mongoose](https://github.com/lawrenceamer/0xsp-mongoose) Privilege Escalation Enumeration Toolkit (64/32 ) , fast , intelligent enumeration with Web API integration . Mastering Your Own Finding
+- [**269**Star][2y] [Py] [eth0izzle/needl](https://github.com/eth0izzle/needl) Take back your privacy. Lose yourself in the haystack.
+- [**269**Star][7m] [Go] [cloudfoundry/java-buildpack-memory-calculator](https://github.com/cloudfoundry/java-buildpack-memory-calculator) Cloud Foundry JVM Memory Calculator
+- [**269**Star][1y] [Shell] [abedalqaderswedan1/aswcrypter](https://github.com/abedalqaderswedan1/aswcrypter) An Bash&Python Script For Generating Payloads that Bypasses All Antivirus so far [FUD]
+- [**269**Star][11m] [Py] [LaNMaSteR53/recon-ng](https://bitbucket.org/lanmaster53/recon-ng)
+- [**268**Star][6m] [Shell] [yangchuansheng/love-gfw](https://github.com/yangchuansheng/love-gfw)
+- [**268**Star][3y] [HTML] [xem/minix86](https://github.com/xem/minix86) x86 (MS-DOS) documentation, disassembler and emulator - WIP
+- [**268**Star][10m] [C++] [wbenny/mini-tor](https://github.com/wbenny/mini-tor) proof-of-concept implementation of tor protocol using Microsoft CNG/CryptoAPI
+- [**268**Star][1y] [Go] [tomsteele/blacksheepwall](https://github.com/tomsteele/blacksheepwall) blacksheepwall is a hostname reconnaissance tool
+- [**268**Star][22d] [Py] [peikexin9/deepxplore](https://github.com/peikexin9/deepxplore) DeepXplore code release
+- [**268**Star][6d] [JS] [nodejs/security-wg](https://github.com/nodejs/security-wg) Node.js Security Working Group
+- [**268**Star][3y] [Java] [matthiaskaiser/jmet](https://github.com/matthiaskaiser/jmet) Java Message Exploitation Tool
+- [**268**Star][4y] [C] [leechristensen/unmanagedpowershell](https://github.com/leechristensen/unmanagedpowershell) Executes PowerShell from an unmanaged process
+- [**268**Star][8d] [Py] [ledger-donjon/lascar](https://github.com/ledger-donjon/lascar) Ledger's Advanced Side-Channel Analysis Repository
+- [**268**Star][6m] [Py] [juhakivekas/multidiff](https://github.com/juhakivekas/multidiff) Binary data diffing for multiple objects or streams of data
+- [**268**Star][4y] [Py] [jboone/tpms](https://github.com/jboone/tpms) Tire Pressure Monitoring System decoding tools.
+- [**268**Star][6d] [Java] [jackofmosttrades/gadgetinspector](https://github.com/jackofmosttrades/gadgetinspector) A byte code analyzer for finding deserialization gadget chains in Java applications
+- [**268**Star][11m] [Py] [ionelmc/python-manhole](https://github.com/ionelmc/python-manhole) Debugging manhole for python applications.
+- [**268**Star][3y] [insidetrust/statistically-likely-usernames](https://github.com/insidetrust/statistically-likely-usernames) Wordlists for creating statistically likely username lists for use in password attacks and security testing
+- [**268**Star][3y] [Py] [ghirensics/ghiro](https://github.com/ghirensics/ghiro) Automated image forensics tool
+- [**268**Star][19d] [Py] [eset/ipyida](https://github.com/eset/ipyida) IPython console integration for IDA Pro
+- [**268**Star][4d] [Py] [den1al/jsshell](https://github.com/den1al/jsshell) An interactive multi-user web JS shell
+- [**268**Star][1y] [Py] [c0rel0ader/east](https://github.com/c0rel0ader/east) Exploits and Security Tools Framework 2.0.1
+- [**267**Star][2m] [Java] [w296488320/nullproguard](https://github.com/w296488320/nullproguard) 空白混淆 源码
+- [**267**Star][3m] [Java] [vida-nyu/ache](https://github.com/vida-nyu/ache) ACHE is a web crawler for domain-specific search.
+- [**267**Star][1y] [Py] [ucsb-seclab/bootstomp](https://github.com/ucsb-seclab/bootstomp) a bootloader vulnerability finder
+- [**267**Star][4y] [C] [samsung/adbi](https://github.com/samsung/adbi) Android Dynamic Binary Instrumentation tool for tracing Android native layer
+- [**267**Star][1m] [Py] [quitten/autorize](https://github.com/quitten/autorize) Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application security people work and allow them perform an automatic authorization tests
+- [**267**Star][2y] [Py] [hegusung/avsignseek](https://github.com/hegusung/avsignseek) Tool written in python3 to determine where the AV signature is located in a binary/payload
+- [**267**Star][1m] [Py] [google/grr-doc](https://github.com/google/grr-doc) Documentation for the GRR Rapid Reponse framework
+- [**267**Star][2y] [C] [cameronswinoga/yabfc](https://github.com/cameronswinoga/yabfc) Yet Another Brainfuck Compiler; No dependencies and from the ground up
+- [**267**Star][4y] [C] [blankwall/macdbg](https://github.com/blankwall/macdbg) Simple easy to use C and python debugging framework for OSX
+- [**266**Star][4d] [zodiacon/alltools](https://github.com/zodiacon/alltools) All reasonably stable tools
+- [**266**Star][3y] [waylau/free-vpn](https://github.com/waylau/free-vpn) We Provide Newset Free VPN Service. PC, mobile phones and network appliances, no software installation. With the VPN Service,you can get through your government's firewall to browse restricted websites.提供最新的免费的 VPN 服务,通过使用 VPN 自由访问互联网(翻墙)!无论是PC端,移动端都无需安装客户端。
+- [**266**Star][2y] [Shell] [superkojiman/pwnbox](https://github.com/superkojiman/pwnbox) Docker container with tools for binary reverse engineering and exploitation.
+- [**266**Star][3y] [Java] [subgraph/vega](https://github.com/subgraph/vega) Subgraph Vega
+- [**266**Star][3y] [Java] [rsmudge/armitage](https://github.com/rsmudge/armitage) a graphical cyber attack management tool for Metasploit that
+visualizes your targets, recommends exploits, and exposes the advanced
+capabilities of the framework.
+- [**266**Star][2y] [paloaltonetworks/minemeld](https://github.com/paloaltonetworks/minemeld) Main MineMeld documentation repo
+- [**266**Star][5m] [C] [outflanknl/dumpert](https://github.com/outflanknl/dumpert) LSASS memory dumper using direct system calls and API unhooking.
+- [**266**Star][1y] [l1k/osxparanoia](https://github.com/l1k/osxparanoia) Preventing OS X from phoning home to Cupertino
+- [**266**Star][3m] [Py] [kupferlauncher/kupfer](https://github.com/kupferlauncher/kupfer) kupfer, smart, quick launcher. `master' is kupfer's release branch.
+- [**266**Star][2y] [TeX] [hjl-tools/x86-psabi](https://github.com/hjl-tools/x86-psabi) x86 psABI download
+- [**266**Star][11m] [Py] [hakril/pythonforwindows](https://github.com/hakril/pythonforwindows) A codebase aimed to make interaction with Windows and native execution easier
+- [**266**Star][21d] [JS] [d3/d3-interpolate](https://github.com/d3/d3-interpolate) Interpolate numbers, colors, strings, arrays, objects, whatever!
+- [**266**Star][9m] [Dockerfile] [cryptax/androidre](https://github.com/cryptax/androidre) Reverse engineering Android
+- [**266**Star][3y] [Visual Basic .NET] [cn33liz/starfighters](https://github.com/cn33liz/starfighters) A JavaScript and VBScript Based Empire Launcher, which runs within their own embedded PowerShell Host.
+- [**266**Star][2y] [beahunt3r/windows-hunting](https://github.com/beahunt3r/windows-hunting) aid windows threat hunters to look for some common artifacts during their day to day operations
+- [**266**Star][4m] [C] [bcoles/kernel-exploits](https://github.com/bcoles/kernel-exploits) Various kernel exploits
+- [**265**Star][2d] [Py] [nucypher/nucypher](https://github.com/nucypher/nucypher) A decentralized network offering accessible, intuitive, and extensible cryptographic runtimes and interfaces for secrets management and dynamic access control.
+- [**265**Star][3m] [JS] [hawkeyesec/scanner-cli](https://github.com/hawkeyesec/scanner-cli) A project security/vulnerability/risk scanning tool
+- [**265**Star][12m] [Py] [trycatchhcf/packetwhisper](https://github.com/trycatchhcf/packetwhisper) Stealthily exfiltrate data and defeat attribution using DNS queries and text-based steganography. Avoid the problems associated with typical DNS exfiltration methods. Transfer data between systems without the communicating devices directly connecting to each other or to a common endpoint. No need to control a DNS Name Server.
+- [**265**Star][2y] [PHP] [sqlmapproject/testenv](https://github.com/sqlmapproject/testenv) A collection of web pages vulnerable to SQL injection flaws
+- [**265**Star][3y] [Go] [pwaller/goupx](https://github.com/pwaller/goupx) Fix golang compiled binaries on x86_64 so that they can be packed with UPX
+- [**265**Star][2m] [Assembly] [pret/pokeyellow](https://github.com/pret/pokeyellow) Disassembly of Pokemon Yellow
+- [**265**Star][1y] [JS] [portswigger/hackability](https://github.com/portswigger/hackability) Probe a rendering engine for vulnerabilities and other features
+- [**265**Star][2y] [PS] [invoke-ir/ace](https://github.com/invoke-ir/ace) Automated, Collection, and Enrichment Platform
+- [**265**Star][2m] [C#] [hackplayers/salsa-tools](https://github.com/hackplayers/salsa-tools) Salsa Tools - ShellReverse TCP/UDP/ICMP/DNS/SSL/BINDTCP/Shellcode/SILENTTRINITY and AV bypass, AMSI patched
+- [**265**Star][4m] [Py] [fwkz/riposte](https://github.com/fwkz/riposte) Python package for wrapping applications inside a tailored interactive shell
+- [**265**Star][7d] [Py] [exodus-privacy/exodus](https://github.com/exodus-privacy/exodus) Platform to audit trackers used by Android application
+- [**265**Star][3d] [Py] [earthquake/xfltreat](https://github.com/earthquake/xfltreat) XFLTReaT tunnelling framework
+- [**265**Star][4y] [C++] [breakingmalware/powerloaderex](https://github.com/breakingmalware/powerloaderex) Advanced Code Injection Technique for x32 / x64
+- [**265**Star][7d] [Py] [armmbed/mbed-cli](https://github.com/armmbed/mbed-cli) Arm Mbed Command Line Interface
+- [**265**Star][2y] [Py] [antojoseph/frida-android-hooks](https://github.com/antojoseph/frida-android-hooks) Lets you hook Method Calls in Frida ( Android )
+- [**265**Star][7d] [Go] [adguardteam/dnsproxy](https://github.com/adguardteam/dnsproxy) Simple DNS proxy with DoH, DoT, and DNSCrypt support
+- [**264**Star][1m] [Makefile] [pop-os/iso](https://github.com/pop-os/iso) ools necessary for building Pop!_OS ISOs.
+- [**264**Star][2m] [C++] [theevilbit/injection](https://github.com/theevilbit/injection) various process injection technique
+- [**264**Star][4m] [Go] [skx/tunneller](https://github.com/skx/tunneller) Allow internal services, running on localhost, to be accessed over the internet..
+- [**264**Star][4y] [Py] [rpp0/aggr-inject](https://github.com/rpp0/aggr-inject) Remote frame injection PoC by exploiting a standard compliant A-MPDU aggregation vulnerability in 802.11n networks.
+- [**264**Star][3y] [C++] [professor-plum/reflective-driver-loader](https://github.com/professor-plum/reflective-driver-loader) injection technique base off Reflective DLL injection
+- [**264**Star][6y] [C] [pakt/ropc](https://github.com/pakt/ropc) A Turing complete ROP compiler
+- [**264**Star][3y] [Py] [mame82/duck2spark](https://github.com/mame82/duck2spark) Converter for raw RubberDucky payloads to Digispark Arduino IDE Sketch source.
+- [**264**Star][3m] [Go] [lightningnetwork/lightning-onion](https://github.com/lightningnetwork/lightning-onion) Onion Routed Micropayments for the Lightning Network
+- [**264**Star][21d] [Py] [hubblestack/hubble](https://github.com/hubblestack/hubble) Hubble is a modular, open-source security compliance framework. The project provides on-demand profile-based auditing, real-time security event notifications, alerting, and reporting. HubbleStack is a free and open source project made possible by Adobe.
+- [**264**Star][3d] [C] [eua/wxhexeditor](https://github.com/eua/wxhexeditor) wxHexEditor official GIT repo
+- [**264**Star][3y] [Java] [codewatchorg/bypasswaf](https://github.com/codewatchorg/bypasswaf) Add headers to all Burp requests to bypass some WAF products
+- [**264**Star][8d] [Py] [azure/azure-storage-python](https://github.com/azure/azure-storage-python) Microsoft Azure Storage Library for Python
+- [**264**Star][3y] [C++] [antire-book/dont_panic](https://github.com/antire-book/dont_panic) Linux bind shell with anti-reverse engineering techniques
+- [**263**Star][2y] [dloss/binary-parsing](https://github.com/dloss/binary-parsing) A list of generic tools for parsing binary data structures, such as file formats, network protocols or bitstreams
+- [**263**Star][8m] [Shell] [thelinuxchoice/saycheese](https://github.com/thelinuxchoice/saycheese) Grab target's webcam shots by link
+- [**263**Star][8m] [Java] [adonespitogo/adobot](https://github.com/adonespitogo/adobot) Open-source android spyware
+- [**263**Star][8d] [C++] [souffle-lang/souffle](https://github.com/souffle-lang/souffle) Soufflé is a variant of Datalog for tool designers crafting analyses in Horn clauses. Soufflé synthesizes a native parallel C++ program from a logic specification.
+- [**263**Star][7m] [Py] [pe3zx/huawei-block-list](https://github.com/pe3zx/huawei-block-list) Captured DNS requests from Huawei P30 Pro to a block list
+- [**263**Star][2y] [Py] [lightos/panoptic](https://github.com/lightos/panoptic) Panoptic is an open source penetration testing tool that automates the process of search and retrieval of content for common log and config files through path traversal vulnerabilities.
+- [**263**Star][5m] [CSS] [l4wio/ctf-challenges-by-me](https://github.com/l4wio/ctf-challenges-by-me) Pwnable|Web Security|Cryptography CTF-style challenges
+- [**263**Star][4d] [C++] [fransbouma/injectablegenericcamerasystem](https://github.com/fransbouma/injectablegenericcamerasystem) This is a generic camera system to be used as the base for cameras for taking screenshots within games. The main purpose of the system is to hijack the in-game 3D camera by overwriting values in its camera structure with our own values so we can control where the camera is located, it's pitch/yaw/roll values, its FoV and the camera's look vector.
+- [**263**Star][9d] [Py] [firstlookmedia/gpgsync](https://github.com/firstlookmedia/gpgsync) let users always have up-to-date OpenPGP public keys for other members of their organization.
+- [**263**Star][2y] [Py] [enddo/smod](https://github.com/enddo/smod) a modular framework with every kind of diagnostic and offensive feature you could need in order to pentest modbus protocol
+- [**263**Star][2y] [Py] [dkovar/analyzemft](https://github.com/dkovar/analyzemft) fully parse the MFT file from an NTFS filesystem and present the results as accurately as possible in multiple format
+- [**263**Star][5m] [C++] [d35ha/callobfuscator](https://github.com/d35ha/callobfuscator) Obfuscate specific windows apis with different apis
+- [**262**Star][8m] [offensive-security/nethunter-app](https://github.com/offensive-security/nethunter-app) NetHunter android application
+- [**262**Star][4y] [Py] [cisco-talos/ropmemu](https://github.com/Cisco-Talos/ROPMEMU) ROPMEMU is a framework to analyze, dissect and decompile complex code-reuse attacks.
+- [**262**Star][2m] [Go] [zmap/zdns](https://github.com/zmap/zdns) Fast CLI DNS Lookup Tool
+- [**262**Star][2y] [HTML] [wisec/domxsswiki](https://github.com/wisec/domxsswiki) Automatically exported from code.google.com/p/domxsswiki
+- [**262**Star][7y] [Py] [stripe-ctf/stripe-ctf-2.0](https://github.com/stripe-ctf/stripe-ctf-2.0) Capture the Flag: Web Edition
+- [**262**Star][3m] [HTML] [sp1d3r/swf_json_csrf](https://github.com/sp1d3r/swf_json_csrf) simplify the SWF-based JSON CSRF exploitation
+- [**262**Star][2m] [Go] [sensepost/godoh](https://github.com/sensepost/godoh) A DNS-over-HTTPS Command & Control Proof of Concept
+- [**262**Star][4m] [C] [portcullislabs/linikatz](https://github.com/portcullislabs/linikatz) attack AD on UNIX
+- [**262**Star][8m] [Py] [needmorecowbell/sniff-paste](https://github.com/needmorecowbell/sniff-paste) Pastebin OSINT Harvester
+- [**262**Star][1y] [PHP] [mrsqar-ye/badmod](https://github.com/mrsqar-ye/badmod) CMS auto detect and exploit.
+- [**262**Star][2y] [Java] [maxcamillo/android-keystore-password-recover](https://github.com/maxcamillo/android-keystore-password-recover) Automatically exported from code.google.com/p/android-keystore-password-recover
+- [**262**Star][7m] [Shell] [lieanu/libcsearcher](https://github.com/lieanu/libcsearcher) glibc offset search for ctf.
+- [**262**Star][1y] [PS] [fox-it/invoke-aclpwn](https://github.com/fox-it/invoke-aclpwn)
+- [**262**Star][1y] [Ruby] [evait-security/envizon](https://github.com/evait-security/envizon) network visualization tool with focus on red / blue team requirements
+- [**262**Star][6m] [Batchfile] [diogo-fernan/ir-rescue](https://github.com/diogo-fernan/ir-rescue) A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.
+- [**262**Star][1y] [C++] [chadski/sharpneedle](https://github.com/chadski/sharpneedle) Inject C# code into a running process
+- [**262**Star][11m] [Py] [ant4g0nist/susanoo](https://github.com/ant4g0nist/susanoo) A REST API security testing framework.
+- [**262**Star][1m] [C#] [airvpn/eddie](https://github.com/airvpn/eddie) OpenVPN UI
+- [**261**Star][7y] [C++] [sin5678/gh0st](https://github.com/sin5678/gh0st) a open source remote administrator tool
+- [**261**Star][2y] [Py] [zhangchenchen/proxyspider](https://github.com/zhangchenchen/proxyspider) 代理IP 采集程序
+- [**261**Star][1m] [Py] [xdavidhu/probesniffer](https://github.com/xdavidhu/probesniffer)
+- [**261**Star][1y] [JS] [roccomuso/netcat](https://github.com/roccomuso/netcat) Netcat client and server modules written in pure Javascript for Node.j
+- [**261**Star][7y] [C] [quarkslab/quarkspwdump](https://github.com/quarkslab/quarkspwdump) Dump various types of Windows credentials without injecting in any process.
+- [**261**Star][3m] [ObjC] [preemptive/ppios-rename](https://github.com/preemptive/ppios-rename) Symbol obfuscator for iOS apps
+- [**261**Star][1y] [C] [pornin/cttk](https://github.com/pornin/cttk) Constant-Time Toolkit
+- [**261**Star][1y] [Dockerfile] [pgorczak/srslte-docker-emulated](https://github.com/pgorczak/srslte-docker-emulated) Minimal end-to-end LTE. Dockerized and emulated radio over shared memory.
+- [**261**Star][3y] [Py] [pablocelayes/rsa-wiener-attack](https://github.com/pablocelayes/rsa-wiener-attack) A Python implementation of the Wiener attack on RSA public-key encryption scheme.
+- [**261**Star][3m] [Py] [no0be/dnslivery](https://github.com/no0be/dnslivery) Easy files and payloads delivery over DNS
+- [**261**Star][7d] [C++] [niemand-sec/anticheat-testing-framework](https://github.com/niemand-sec/anticheat-testing-framework) Framework to test any Anti-Cheat
+- [**261**Star][5y] [C] [mysql/mysql-proxy](https://github.com/mysql/mysql-proxy) MySQL Proxy is a simple program that sits between your client and MySQL server(s) and that can monitor, analyze or transform their communication. Its flexibility allows for a wide variety of uses, including load balancing, failover, query analysis, query filtering and modification, and many more.
+- [**261**Star][9m] [C] [landhb/hideprocess](https://github.com/landhb/hideprocess) A basic Direct Kernel Object Manipulation rootkit that removes a process from the EPROCESS list, hiding it from the Task Manager
+- [**261**Star][3y] [jmpews/pwn2exploit](https://github.com/jmpews/pwn2exploit) all mine papers, pwn & exploit
+- [**261**Star][7m] [JS] [jesusprubio/strong-node](https://github.com/jesusprubio/strong-node)
+- [**261**Star][1m] [Py] [felixweyne/imaginaryc2](https://github.com/felixweyne/imaginaryc2) Imaginary C2 is a python tool which aims to help in the behavioral (network) analysis of malware. Imaginary C2 hosts a HTTP server which captures HTTP requests towards selectively chosen domains/IPs. Additionally, the tool aims to make it easy to replay captured Command-and-Control responses/served payloads.
+- [**261**Star][1y] [C++] [ewhitehats/invisiblepersistence](https://github.com/ewhitehats/invisiblepersistence) Persisting in the Windows registry "invisibly"
+- [**261**Star][3y] [Py] [ecthros/pina-colada](https://github.com/ecthros/pina-colada) A powerful and extensible wireless drop box
+- [**261**Star][3y] [Py] [dorneanu/smalisca](https://github.com/dorneanu/smalisca) Static Code Analysis for Smali files
+- [**261**Star][6d] [Go] [carbonblack/binee](https://github.com/carbonblack/binee) binary emulation environment
+- [**261**Star][3m] [Py] [amimo/dcc](https://github.com/amimo/dcc) DCC (Dex-to-C Compiler) is method-based aot compiler that can translate DEX code to C code.
+- [**260**Star][2y] [C#] [v2ray/v2rayn](https://github.com/v2ray/v2rayn) A Windows GUI client for V2Ray.
+- [**260**Star][11m] [Py] [hysnsec/devsecops-studio](https://github.com/hysnsec/DevSecOps-Studio) DevSecOps Distribution - Virtual Environment to learn DevSecOps
+- [**260**Star][3m] [Py] [m4ll0k/konan](https://github.com/m4ll0k/Konan) Konan - Advanced Web Application Dir Scanner
+- [**260**Star][4m] [payloadbox/command-injection-payload-list](https://github.com/payloadbox/command-injection-payload-list)
+- [**260**Star][2d] [Go] [wanchain/go-wanchain](https://github.com/wanchain/go-wanchain) Wanchain Client Source Code
+- [**260**Star][7m] [Py] [quitten/doser.py](https://github.com/quitten/doser.py) DoS tool for HTTP requests (inspired by hulk but has more functionalities)
+- [**260**Star][11m] [C] [nbulischeck/tyton](https://github.com/nbulischeck/tyton) Kernel-Mode Rootkit Hunter
+- [**260**Star][3d] [Java] [mr-xn/penetration_testing_poc](https://github.com/mr-xn/penetration_testing_poc) About penetration-testing python-script poc html-poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce
+- [**260**Star][6m] [Py] [andsens/bootstrap-vz](https://github.com/andsens/bootstrap-vz) Bootstrap Debian images for virtualized environments
+- [**260**Star][1y] [C++] [alpha1ab/cve-2018-8120](https://github.com/alpha1ab/cve-2018-8120) CVE-2018-8120 Exploit for Win2003 Win2008 WinXP Win7
+- [**259**Star][7m] [Py] [s0md3v/sqlmate](https://github.com/s0md3v/sqlmate) A friend of SQLmap which will do what you always expected from SQLmap.
+- [**259**Star][1y] [Py] [wipi-hunter/pidense](https://github.com/wipi-hunter/pidense) Monitor illegal wireless network activities.
+- [**259**Star][28d] [Ruby] [rapid7/recog](https://github.com/rapid7/recog) Pattern recognition for hosts, services, and content
+- [**259**Star][3d] [Ruby] [puppetlabs/puppetlabs-firewall](https://github.com/puppetlabs/puppetlabs-firewall) Puppet Firewall Module
+- [**259**Star][4y] [Py] [netxfly/passive_scan](https://github.com/netxfly/passive_scan) 基于http代理的web漏洞扫描器的实现
+- [**259**Star][6m] [Py] [mbro95/portablecellnetwork](https://github.com/mbro95/portablecellnetwork) Utilize a Raspberry Pi and a Nuand BladeRF to generate your own portable local cell network
+- [**259**Star][4y] [Ruby] [lubyruffy/fofa](https://github.com/lubyruffy/fofa) fofa website
+- [**259**Star][4m] [Py] [giantbranch/python-hacker-code](https://github.com/giantbranch/python-hacker-code) 《python黑帽子:黑客与渗透测试编程之道》代码及实验文件,字典等
+- [**259**Star][8m] [Elixir] [elixiumnetwork/elixium_core](https://github.com/elixiumnetwork/elixium_core) A privacy-preserving decentralized application network
+- [**259**Star][2y] [Py] [cryptolok/morphaes](https://github.com/cryptolok/morphaes) IDPS & SandBox & AntiVirus STEALTH KILLER. MorphAES is the world's first polymorphic shellcode engine, with metamorphic properties and capability to bypass sandboxes, which makes it undetectable for an IDPS, it's cross-platform as well and library-independent.
+- [**259**Star][2y] [Py] [countercept/python-exe-unpacker](https://github.com/countercept/python-exe-unpacker) A helper script for unpacking and decompiling EXEs compiled from python code.
+- [**258**Star][7y] [eugeneching/ida-consonance](https://github.com/eugeneching/ida-consonance) Consonance, a dark color theme for IDA.
+- [**258**Star][1y] [Py] [pycqa/mccabe](https://github.com/pycqa/mccabe) McCabe complexity checker for Python
+- [**258**Star][2y] [Go] [netxfly/xsec-ip-database](https://github.com/netxfly/xsec-ip-database) Malicious ip database
+- [**258**Star][7y] [Java] [isecpartners/android-ssl-bypass](https://github.com/isecpartners/android-ssl-bypass) Black box tool to bypass SSL verification on Android, even when pinning is used.
+- [**258**Star][2m] [PHP] [incredibleindishell/ssrf_vulnerable_lab](https://github.com/incredibleindishell/ssrf_vulnerable_lab) This Lab contain the sample codes which are vulnerable to Server-Side Request Forgery attack
+- [**258**Star][3y] [Perl] [fuzyll/defcon-vm](https://github.com/fuzyll/defcon-vm) Files from my DEFCON CTF VM.
+- [**258**Star][29d] [Py] [diogo-fernan/malsub](https://github.com/diogo-fernan/malsub) A Python RESTful API framework for online malware analysis and threat intelligence services.
+- [**258**Star][1y] [C++] [dga-mi-ssi/yaco](https://github.com/dga-mi-ssi/yaco) a Hex-Rays IDA plugin enabling collaborative reverse-engineering on IDA databases for multiple users
+- [**258**Star][1m] [Py] [cedricbonhomme/stegano](https://github.com/cedricbonhomme/stegano) Stegano is a pure Python steganography module.
+- [**258**Star][3y] [C#] [brandonprry/gray_hat_csharp_code](https://github.com/brandonprry/gray_hat_csharp_code) This repository contains full code examples from the book Gray Hat C#
+- [**258**Star][3d] [Smali] [bin4ry/deejayeye-modder](https://github.com/bin4ry/deejayeye-modder)
+- [**258**Star][2m] [C] [basil00/torwall](https://github.com/basil00/torwall) Tallow - Transparent Tor for Windows
+- [**258**Star][30d] [anyeduke/enterprise-security-skill](https://github.com/anyeduke/enterprise-security-skill) 用于记录企业安全规划,建设,运营,攻防的相关资源
+- [**258**Star][2d] [HTML] [ansible/community](https://github.com/ansible/community) This repository is for management of all Ansible community related initiatives.
+- [**257**Star][21d] [C] [radareorg/r2dec-js](https://github.com/radareorg/r2dec-js) radare2 plugin - converts asm to pseudo-C code.
+- [**257**Star][2m] [C#] [orlikoski/cylr](https://github.com/orlikoski/CyLR) CyLR - Live Response Collection Tool
+- [**257**Star][3m] [Rust] [radareorg/radeco](https://github.com/radareorg/radeco) radare2-based decompiler and symbol executor
+- [**257**Star][2y] [Go] [zboya/gomitmproxy](https://github.com/zboya/gomitmproxy) gomitmproxy是想用golang语言实现[mitmproxy],实现http(s)代理
+- [**257**Star][21d] [C] [radareorg/r2dec-js](https://github.com/radareorg/r2dec-js) radare2 plugin - converts asm to pseudo-C code.
+- [**257**Star][2y] [voulnet/cve-2017-8759-exploit-sample](https://github.com/voulnet/cve-2017-8759-exploit-sample) Running CVE-2017-8759 exploit sample.
+- [**257**Star][2y] [Py] [thetwitchy/xxer](https://github.com/thetwitchy/xxer) A blind XXE injection callback handler. Uses HTTP and FTP to extract information. Originally written in Ruby by ONsec-Lab.
+- [**257**Star][2m] [Go] [sachaos/tcpterm](https://github.com/sachaos/tcpterm) tcpterm is a packet visualizer in TUI.
+- [**257**Star][20d] [rustsec/advisory-db](https://github.com/rustsec/advisory-db) Security advisory database for Rust crates published through crates.io
+- [**257**Star][4m] [Py] [rrwick/basecalling-comparison](https://github.com/rrwick/basecalling-comparison) A comparison of different Oxford Nanopore basecallers
+- [**257**Star][3y] [Py] [rolisoft/reconscan](https://github.com/rolisoft/reconscan) Network reconnaissance and vulnerability assessment tools.
+- [**257**Star][3y] [Py] [rockymeza/wifi](https://github.com/rockymeza/wifi) [unmaintained] WiFi tools for linux
+- [**257**Star][18d] [C++] [rob--/memoryjs](https://github.com/rob--/memoryjs) Read and write process memory in NodeJS (finally!)
+- [**257**Star][2m] [C++] [poweradminllc/paexec](https://github.com/poweradminllc/paexec) Remote execution, like PsExec
+- [**257**Star][5y] [Py] [pbartek/pyobd-pi](https://github.com/pbartek/pyobd-pi) Fixes to pyobd for Raspberry Pi / BeagleBone Black
+- [**257**Star][10m] [C] [p0f/p0f](https://github.com/p0f/p0f) p0f unofficial git repo
+- [**257**Star][2y] [Java] [l-jinbin/apksignaturekiller](https://github.com/l-jinbin/apksignaturekiller) 一键破解APK签名校验
+- [**257**Star][12m] [Shell] [karek314/macos-home-call-drop](https://github.com/karek314/macos-home-call-drop) Simple shell script to fix macOS privacy issues and remove mostly useless macOS calls to cupertino
+- [**257**Star][3y] [PHP] [hackademic/hackademic](https://github.com/hackademic/hackademic) the main hackademic code repository
+- [**257**Star][14d] [Py] [guimaizi/get_domain](https://github.com/guimaizi/get_domain) domain collect and monitor
+- [**257**Star][29d] [Py] [frint0/email-enum](https://github.com/frint0/email-enum) Email-Enum searches mainstream websites and tells you if an email is registered! #DEPRECATED
+- [**257**Star][3y] [Java] [flankerhqd/jaadas](https://github.com/flankerhqd/jaadas) Joint Advanced Defect assEsment for android applications
+- [**257**Star][1y] [Java] [danicuestasuarez/nmapgui](https://github.com/danicuestasuarez/nmapgui) Advanced Graphical User Interface for NMap
+- [**257**Star][2y] [Py] [chrizator/netattack2](https://github.com/chrizator/netattack2) An advanced network scan and attack script based on GUI. 2nd version of no-GUI netattack.
+- [**257**Star][1y] [Py] [berzerk0/bewgor](https://github.com/berzerk0/bewgor) Bull's Eye Wordlist Generator - Does your password rely on predictable patterns of accessible info?
+- [**256**Star][10m] [Py] [crytic/ethersplay](https://github.com/crytic/ethersplay) EVM dissassembler
+- [**256**Star][7m] [Py] [xairy/easy-linux-pwn](https://github.com/xairy/easy-linux-pwn) A set of Linux binary exploitation tasks for beginners on various architectures
+- [**256**Star][2y] [Py] [unamer/cve-2017-11882](https://github.com/unamer/cve-2017-11882) CVE-2017-11882 Exploit accepts over 17k bytes long command/code in maximum.
+- [**256**Star][3y] [Py] [thomastjdev/wmd](https://github.com/thomastjdev/wmd) Python framework for IT security tools
+- [**256**Star][2y] [TS] [srar/memcachedos](https://github.com/srar/memcachedos) Memcache 反射DDOS攻击脚本经供学习参考使用
+- [**256**Star][4y] [Py] [smaash/snitch](https://github.com/smaash/snitch) information gathering via dorks
+- [**256**Star][5m] [C] [rub-syssec/omen](https://github.com/rub-syssec/omen) Ordered Markov ENumerator - Password Guesser
+- [**256**Star][2d] [Java] [ripe-ncc/whois](https://github.com/ripe-ncc/whois) RIPE Database whois code repository
+- [**256**Star][3m] [Py] [rhinosecuritylabs/iprotate_burp_extension](https://github.com/rhinosecuritylabs/iprotate_burp_extension) Extension for Burp Suite which uses AWS API Gateway to rotate your IP on every request.
+- [**256**Star][10m] [C++] [ramadhanamizudin/malware](https://github.com/ramadhanamizudin/malware) Malware Samples. Uploaded to GitHub for those want to analyse the code. Code mostly from:
+- [**256**Star][7d] [Py] [minio/minio-py](https://github.com/minio/minio-py) MinIO Client SDK for Python
+- [**256**Star][1y] [Py] [m4ll0k/galileo](https://github.com/m4ll0k/galileo) Galileo - Web Application Audit Framework
+- [**256**Star][9m] [Go] [erbbysam/dnsgrep](https://github.com/erbbysam/dnsgrep) Quickly Search Large DNS Datasets
+- [**256**Star][3m] [Py] [clemfromspace/scrapy-selenium](https://github.com/clemfromspace/scrapy-selenium) Scrapy middleware to handle javascript pages using selenium
+- [**256**Star][2y] [Ruby] [bcoles/ssrf_proxy](https://github.com/bcoles/ssrf_proxy) SSRF Proxy facilitates tunneling HTTP communications through servers vulnerable to Server-Side Request Forgery.
+- [**256**Star][2m] [C] [a2nkf/macos-kernel-exploit](https://github.com/a2nkf/macos-kernel-exploit) macOS Kernel Exploit for CVE-2019-8781. Credit for the bug goes to
+- [**255**Star][6m] [nsacyber/hardware-and-firmware-security-guidance](https://github.com/nsacyber/Hardware-and-Firmware-Security-Guidance) Guidance for the Spectre, Meltdown, Speculative Store Bypass, Rogue System Register Read, Lazy FP State Restore, Bounds Check Bypass Store, TLBleed, and L1TF/Foreshadow vulnerabilities as well as general hardware and firmware security guidance. #nsacyber
+- [**255**Star][3m] [Py] [lorentzenman/sheepl](https://github.com/lorentzenman/sheepl) Creating realistic user behaviour for supporting tradecraft development within lab environments
+- [**255**Star][5m] [zhaoweiho/web-sec-interview](https://github.com/zhaoweiho/web-sec-interview) Information Security (Web Security/Penetration Testing Direction) Interview Questions/Solutions 信息安全(Web安全/渗透测试方向)面试题/解题思路
+- [**255**Star][3y] [C] [w-shackleton/android-netspoof](https://github.com/w-shackleton/android-netspoof) Network Spoofer
+- [**255**Star][1y] [Py] [stephenmcd/hot-redis](https://github.com/stephenmcd/hot-redis) Rich Python data types for Redis
+- [**255**Star][16d] [Java] [spring-cloud/spring-cloud-task](https://github.com/spring-cloud/spring-cloud-task) Short lived microservices with Spring Batch
+- [**255**Star][4y] [C] [roxas75/rxtools](https://github.com/roxas75/rxtools) rxTools
+- [**255**Star][3m] [Py] [qunarcorp/open_dnsdb](https://github.com/qunarcorp/open_dnsdb) OpenDnsdb 是去哪儿网OPS团队开源的基于Python语言的DNS管理系统
+- [**255**Star][3m] [HTML] [pagerduty/security-training](https://github.com/pagerduty/security-training) Public version of PagerDuty's employee security training courses.
+- [**255**Star][5y] [Vim script] [ngmy/vim-rubocop](https://github.com/ngmy/vim-rubocop) The Vim RuboCop plugin runs RuboCop and displays the results in Vim
+- [**255**Star][1y] [Shell] [m4ll0k/autonse](https://github.com/m4ll0k/autonse) Massive NSE (Nmap Scripting Engine) AutoSploit and AutoScanner
+- [**255**Star][3y] [Py] [lijiejie/iis_shortname_scanner](https://github.com/lijiejie/iis_shortname_scanner) an IIS shortname Scanner
+- [**255**Star][3m] [Jupyter Notebook] [jmartinezheras/2018-machinelearning-lectures-esa](https://github.com/jmartinezheras/2018-machinelearning-lectures-esa) Machine Learning Lectures at the European Space Agency (ESA) in 2018
+- [**255**Star][2m] [Shell] [cytoscape/cytoscape](https://github.com/cytoscape/cytoscape) an open source platform for network analysis and visualization
+- [**255**Star][3y] [Py] [airsage/petrel](https://github.com/airsage/petrel) Tools for writing, submitting, debugging, and monitoring Storm topologies in pure Python
+- [**254**Star][2y] [PS] [p3nt4/invoke-piper](https://github.com/p3nt4/Invoke-Piper) Forward local or remote tcp ports through SMB pipes.
+- [**254**Star][2y] [PS] [xorrior/randomps-scripts](https://github.com/xorrior/randomps-scripts) PowerShell Scripts focused on Post-Exploitation Capabilities
+- [**254**Star][1y] [Py] [wenfengshi/ddos-dos-tools](https://github.com/wenfengshi/ddos-dos-tools) some sort of ddos-tools
+- [**254**Star][4m] [Racket] [tyrchen/racket-book](https://github.com/tyrchen/racket-book) My racket study documentation
+- [**254**Star][7y] [Java] [sporst/swfretools](https://github.com/sporst/swfretools) SWF file reverse engineering tools
+- [**254**Star][3m] [Shell] [projectzeroindia/cve-2019-11510](https://github.com/projectzeroindia/cve-2019-11510) Exploit for Arbitrary File Read on Pulse Secure SSL VPN (CVE-2019-11510)
+- [**254**Star][5m] [Go] [lesnuages/hershell](https://github.com/lesnuages/hershell) Multiplatform reverse shell generator
+- [**254**Star][7m] [Go] [lavalamp-/ipv666](https://github.com/lavalamp-/ipv666) Golang IPv6 address enumeration
+- [**254**Star][1y] [PHP] [interference-security/dvws](https://github.com/interference-security/dvws) OWSAP Damn Vulnerable Web Sockets (DVWS) is a vulnerable web application which works on web sockets for client-server communication.
+- [**254**Star][22d] [Py] [google/docker-explorer](https://github.com/google/docker-explorer) A tool to help forensicate offline docker acquisitions
+- [**254**Star][3y] [Haskell] [galoisinc/haskell-tor](https://github.com/galoisinc/haskell-tor) A Haskell implementation of the Tor protocol.
+- [**254**Star][3m] [PHP] [dotboris/vuejs-serverside-template-xss](https://github.com/dotboris/vuejs-serverside-template-xss) Demo of a Vue.js app that mixes both clientside templates and serverside templates leading to an XSS vulnerability
+- [**254**Star][2y] [Py] [1n3/wordpress-xmlrpc-brute-force-exploit](https://github.com/1n3/wordpress-xmlrpc-brute-force-exploit) Wordpress XMLRPC System Multicall Brute Force Exploit (0day) by 1N3 @ CrowdShield
+- [**253**Star][2m] [Go] [ihciah/rabbit-tcp](https://github.com/ihciah/rabbit-tcp) A multi-connection TCP forwarder/accelerator
+- [**253**Star][9d] [PS] [bc-security/empire](https://github.com/bc-security/empire) Empire is a PowerShell and Python post-exploitation agent.
+- [**253**Star][3m] [C] [seemoo-lab/owl](https://github.com/seemoo-lab/owl) An open Apple Wireless Direct Link (AWDL) implementation written in C
+- [**253**Star][16d] [thelsa/cs-checklist](https://github.com/thelsa/cs-checklist) PC客户端(C-S架构)渗透测试checklist / Client side(C-S) penestration checklist
+- [**253**Star][1m] [TS] [tensorflow/tfjs-tsne](https://github.com/tensorflow/tfjs-tsne) a improved tSNE implementation that runs in the browser.
+- [**253**Star][3y] [Py] [rickey-g/fancybear](https://github.com/rickey-g/fancybear) Fancy Bear Source Code
+- [**253**Star][5d] [C] [proftpd/proftpd](https://github.com/proftpd/proftpd) a highly configurable FTP daemon for Unix and Unix-like operating systems
+- [**253**Star][28d] [C] [pbhogan/scrypt](https://github.com/pbhogan/scrypt) A Ruby gem with native C extension for the scrypt password hashing algorithm.
+- [**253**Star][12m] [Java] [owasp/owasp-java-encoder](https://github.com/owasp/owasp-java-encoder) The OWASP Java Encoder is a Java 1.5+ simple-to-use drop-in high-performance encoder class with no dependencies and little baggage. This project will help Java web developers defend against Cross Site Scripting!
+- [**253**Star][16d] [C] [icing/mod_md](https://github.com/icing/mod_md) Let's Encrypt (ACME) support for Apache httpd
+- [**253**Star][5d] [Py] [duo-labs/dlint](https://github.com/duo-labs/dlint) Dlint is a tool for encouraging best coding practices and helping ensure we're writing secure Python code.
+- [**253**Star][4y] [Py] [danmcinerney/fakeap](https://github.com/danmcinerney/fakeap) Create fake AP in Kali with 1 command
+- [**253**Star][21d] [Py] [cloudflare/python-cloudflare](https://github.com/cloudflare/python-cloudflare) Python wrapper for the Cloudflare Client API v4
+- [**253**Star][1y] [C] [benjamin-42/trident](https://github.com/benjamin-42/trident)
+- [**253**Star][2m] [Py] [b16f00t/whapa](https://github.com/b16f00t/whapa) WhatsApp Parser Toolset v1.14
+- [**253**Star][3d] [Jupyter Notebook] [aws-samples/aws-security-workshops](https://github.com/aws-samples/aws-security-workshops) A collection of the latest AWS Security workshops
+- [**252**Star][6m] [Shell] [ctfhacker/epictreasure](https://github.com/ctfhacker/EpicTreasure) Batteries included CTF VM
+- [**252**Star][1y] [C++] [comaeio/swishdbgext](https://github.com/comaeio/SwishDbgExt) Incident Response & Digital Forensics Debugging Extension
+- [**252**Star][4y] [Shell] [nccgroup/vlan-hopping---frogger](https://github.com/nccgroup/vlan-hopping---frogger) Simple VLAN enumeration and hopping script.
+- [**252**Star][1y] [C] [v-e-o/poc](https://github.com/v-e-o/poc) PoC of CVE/Exploit
+- [**252**Star][4m] [Py] [thewhiteh4t/finalrecon](https://github.com/thewhiteh4t/finalrecon) OSINT Tool for All-In-One Web Reconnaissance
+- [**252**Star][4d] [ObjC] [strongbox-password-safe/strongbox](https://github.com/strongbox-password-safe/strongbox) A KeePass/Password Safe Client for iOS and OS X
+- [**252**Star][2d] [Vue] [nluedtke/linux_kernel_cves](https://github.com/nluedtke/linux_kernel_cves) Tracking CVEs for the linux Kernel
+- [**252**Star][6m] [HTML] [mikewest/http-state-tokens](https://github.com/mikewest/http-state-tokens) Incrementally better HTTP state management.
+- [**252**Star][1y] [PS] [mdsecresearch/lyncsniper](https://github.com/mdsecresearch/lyncsniper) a tool for penetration testing Lync and Skype for Business deployments hosted either on premise or in Office 365.
+- [**252**Star][10m] [jeffzh3ng/insectsawake](https://github.com/jeffzh3ng/insectsawake) Network Vulnerability Scanner
+- [**252**Star][5m] [Py] [jcesarstef/dotdotslash](https://github.com/jcesarstef/dotdotslash) Search for Directory Traversal Vulnerabilities
+- [**252**Star][7m] [Py] [itskindred/procspy](https://github.com/itskindred/procspy) Python tool that monitors and logs user-run commands on a Linux system for either offensive or defensive purposes..
+- [**252**Star][9m] [Visual Basic .NET] [houjingyi233/office-exploit-case-study](https://github.com/houjingyi233/office-exploit-case-study)
+- [**252**Star][2y] [C] [hfiref0x/cve-2015-1701](https://github.com/hfiref0x/cve-2015-1701) Win32k LPE vulnerability used in APT attack
+- [**252**Star][2y] [Py] [deadpix3l/cryptsky](https://github.com/deadpix3l/cryptsky) A simple, fully python ransomware PoC
+- [**252**Star][9m] [C] [chef-koch/android-vulnerabilities-overview](https://github.com/chef-koch/android-vulnerabilities-overview) An small overview of known Android vulnerabilities
+- [**252**Star][5y] [Py] [allfro/sploitego](https://github.com/allfro/sploitego) a local pen-test transform package that uses the Canari Framework for local transform execution in Maltego.
+- [**251**Star][6m] [isafeblue/mind-map](https://github.com/isafeblue/mind-map) 超详细的渗透测试思维导图
+- [**251**Star][3m] [Shell] [sprov065/sprov-ui](https://github.com/sprov065/sprov-ui) 一个支持多协议多用户的v2ray Web面板
+- [**251**Star][5m] [Shell] [thesecondsun/revssl](https://github.com/thesecondsun/revssl) A simple script that automates generation of OpenSSL reverse shells
+- [**251**Star][30d] [Py] [rvrsh3ll/findfrontabledomains](https://github.com/rvrsh3ll/findfrontabledomains) Search for potential frontable domains
+- [**251**Star][5m] [Py] [redteamoperations/pivotsuite](https://github.com/redteamoperations/pivotsuite) Network Pivoting Toolkit
+- [**251**Star][1m] [Py] [platomav/mcextractor](https://github.com/platomav/mcextractor) Intel, AMD, VIA & Freescale Microcode Extraction Tool
+- [**251**Star][2y] [Java] [panhongwei/tracereader](https://github.com/panhongwei/tracereader) android小工具,通过读取trace文件,回溯整个整个程序执行调用树。
+- [**251**Star][5m] [Java] [nfcgate/nfcgate](https://github.com/nfcgate/nfcgate) An NFC relay application for Android
+- [**251**Star][13d] [Swift] [netyouli/whc_scan](https://github.com/netyouli/whc_scan) 高效强大扫描分析iOS和Android项目里没有使用的类Mac开源工具,清理项目垃圾类,让项目结构干净清爽,升级维护得心应手. Efficient and powerful scanning analysis iOS and Android project no classes used in Mac open source tools, cleaning rubbish class project, make project structure clean and relaxed, upgrade maintenance
+- [**251**Star][1y] [Py] [kootenpv/sky](https://github.com/kootenpv/sky) a web scraping framework
+- [**251**Star][4m] [C#] [kevin-robertson/inveighzero](https://github.com/kevin-robertson/inveighzero) Windows C# LLMNR/mDNS/NBNS/DNS spoofer/man-in-the-middle tool
+- [**251**Star][6d] [Py] [jaegertracing/jaeger-client-python](https://github.com/jaegertracing/jaeger-client-python) Jaeger Bindings for Python OpenTracing API
+- [**251**Star][2y] [ObjC] [feicong/macbook](https://github.com/feicong/macbook) 《macOS软件安全与逆向分析》随书源码
+- [**251**Star][2m] [Py] [cvandeplas/pystemon](https://github.com/cvandeplas/pystemon) Monitoring tool for PasteBin-alike sites written in Python. Inspired by pastemon
+- [**251**Star][1y] [C#] [brianhama/de4dot](https://github.com/brianhama/de4dot) .NET deobfuscator and unpacker.
+- [**250**Star][15d] [neo23x0/auditd](https://github.com/neo23x0/auditd) Best Practice Auditd Configuration
+- [**250**Star][3y] [Py] [prahladyeri/hotspotd](https://github.com/prahladyeri/hotspotd) Simple daemon to create a wifi hotspot on Linux
+- [**250**Star][11m] [crytic/awesome-ethereum-security](https://github.com/crytic/awesome-ethereum-security) A curated list of awesome Ethereum security references
+- [**250**Star][4y] [Py] [wooyun/tangscan](https://github.com/wooyun/tangscan) TangScan
+- [**250**Star][4y] [Py] [whitepacket/zib-trojan](https://github.com/whitepacket/zib-trojan) The Open Tor Botnet (ZIB); Python-based forever-FUD IRC Trojan
+- [**250**Star][10m] [Py] [wh0ale/src-experience](https://github.com/wh0ale/src-experience) 工欲善其事,必先利其器
+- [**250**Star][4y] [PHP] [phpwhois/phpwhois](https://github.com/phpwhois/phpwhois) phpWhois general repository
+- [**250**Star][6d] [TS] [ninoseki/mitaka](https://github.com/ninoseki/mitaka) A browser extension for OSINT search
+- [**250**Star][20d] [C] [nccgroup/sniffle](https://github.com/nccgroup/sniffle) A sniffer for Bluetooth 5 and 4.x LE
+- [**250**Star][2y] [PS] [killswitch-gui/pentesting-scripts](https://github.com/killswitch-gui/pentesting-scripts) A ton of helpful tools
+- [**250**Star][1y] [Py] [igio90/frick](https://github.com/igio90/frick) aka the first debugger built on top of frida
+- [**250**Star][3y] [C] [guanchao/appprotect](https://github.com/guanchao/appprotect) 整理一些app常见的加固方法,包括java层、native层和资源文件加固等
+- [**250**Star][4m] [Py] [fsgmhoward/shadowsocks-py-mu](https://github.com/fsgmhoward/shadowsocks-py-mu) A fast tunnel proxy server for multiple users
+- [**250**Star][2y] [Py] [dbgx/lldb.nvim](https://github.com/dbgx/lldb.nvim) Debugger integration with a focus on ease-of-use.
+- [**250**Star][3y] [Py] [census/choronzon](https://github.com/census/choronzon) An evolutionary knowledge-based fuzzer
+- [**250**Star][1y] [Py] [avramit/instahack](https://github.com/avramit/instahack) Instagram bruteforce tool
+- [**250**Star][3y] [Py] [asweigart/codebreaker](https://github.com/asweigart/codebreaker) "Hacking Secret Ciphers with Python" programs
+- [**249**Star][15d] [Py] [zephrfish/googd0rker](https://github.com/zephrfish/googd0rker) GoogD0rker is a tool for firing off google dorks against a target domain, it is purely for OSINT against a specific target domain. READ the readme before messaging or tweeting me.
+- [**249**Star][16d] [Java] [xuxueli/xxl-excel](https://github.com/xuxueli/xxl-excel) A flexible tool for translating Java objects and Excel documents.(Java对象和Excel转换工具XXL-EXCEL)
+- [**249**Star][6d] [C] [tpm2-software/tpm2-tools](https://github.com/tpm2-software/tpm2-tools) The source repository for the TPM (Trusted Platform Module) 2 tools
+- [**249**Star][25d] [Py] [tipam/pi3d](https://github.com/tipam/pi3d) Simple, yet powerful, 3D Python graphics library for beginners and school children running on the Raspberry Pi.
+- [**249**Star][7y] [rentzsch/mach_star](https://github.com/rentzsch/mach_star) code injection and function overriding for Mac OS X
+- [**249**Star][2m] [owasp/api-security](https://github.com/owasp/api-security) OWASP API Security Project
+- [**249**Star][3y] [Py] [livz/cloacked-pixel](https://github.com/livz/cloacked-pixel) LSB steganography and detection
+- [**249**Star][2y] [Mask] [lcatro/fuzzing-imagemagick](https://github.com/lcatro/fuzzing-imagemagick) OpenSource My ImageMagick Fuzzer ..
+- [**249**Star][3y] [JS] [jesusprubio/bluebox-ng](https://github.com/jesusprubio/bluebox-ng) Pentesting framework using Node.js powers, focused in VoIP.
+- [**249**Star][8m] [C] [jakeajames/rootlessjb](https://github.com/jakeajames/rootlessjb)
+- [**249**Star][2y] [Py] [intezer/docker-ida](https://github.com/intezer/docker-ida) Run IDA Pro disassembler in Docker containers for automating, scaling and distributing the use of IDAPython scripts.
+- [**249**Star][2d] [C] [gpg/gnupg](https://github.com/gpg/gnupg) The GNU Privacy Guard
+- [**249**Star][2y] [Java] [godlikewangjun/dexknife-wj](https://github.com/godlikewangjun/dexknife-wj) apk加固插件 带签名校验、dex加密、资源混淆
+- [**249**Star][6d] [HTML] [gfw-breaker/open-proxy](https://github.com/gfw-breaker/open-proxy) 一键部署被墙网站反向代理; 免翻墙访问被禁网站
+- [**249**Star][8m] [Py] [dirkjanm/adidnsdump](https://github.com/dirkjanm/adidnsdump) Active Directory Integrated DNS dumping by any authenticated user
+- [**249**Star][2y] [Py] [0x4d31/salt-scanner](https://github.com/0x4d31/salt-scanner) Linux vulnerability scanner based on Salt Open and Vulners audit API, with Slack notifications and JIRA integration
+- [**248**Star][1m] [Rust] [falconre/falcon](https://github.com/falconre/falcon) Formal Binary Analysis Framework in Rust
+- [**248**Star][1y] [batchfile] [zerodot1/coinblockerlists](https://github.com/zerodot1/coinblockerlists) Simple lists that can help prevent cryptomining in the browser or other applications.
+- [**248**Star][1m] [PS] [sdcampbell/internal-pentest-playbook](https://github.com/sdcampbell/internal-pentest-playbook) Internal Network Penetration Test Playbook
+- [**248**Star][2y] [Py] [rxwx/cve-2018-0802](https://github.com/rxwx/cve-2018-0802) PoC Exploit for CVE-2018-0802 (and optionally CVE-2017-11882)
+- [**248**Star][1m] [Py] [quantopian/qdb](https://github.com/quantopian/qdb) Quantopian Remote Debugger for Python
+- [**248**Star][2y] [Java] [portswigger/collaborator-everywhere](https://github.com/portswigger/collaborator-everywhere) A Burp Suite Pro extension which augments your proxy traffic by injecting non-invasive headers designed to reveal backend systems by causing pingbacks to Burp Collaborator
+- [**248**Star][2y] [C++] [minhaskamal/stupidkeylogger](https://github.com/minhaskamal/stupidkeylogger) A Terrific Keystroke Recorder (keylogger-key-logger-spyware-spy-trojan-simple-virus-for-windows-10-7-xp-smart-c-c++-cpp-code)
+- [**248**Star][5y] [Ruby] [hakirisec/hakiri_toolbelt](https://github.com/hakirisec/hakiri_toolbelt) Secure Ruby apps with Hakiri
+- [**248**Star][2y] [C] [dosomder/iovyroot](https://github.com/dosomder/iovyroot) CVE-2015-1805 root tool
+- [**247**Star][1y] [Py] [warflop/cloudbunny](https://github.com/warflop/cloudbunny) CloudBunny is a tool to capture the real IP of the server that uses a WAF as a proxy or protection. In this tool we used three search engines to search domain information: Shodan, Censys and Zoomeye.
+- [**247**Star][5m] [C++] [tonychen56/hackertools](https://github.com/tonychen56/hackertools) 使用MFC编写的病毒技术合集
+- [**247**Star][2y] [Py] [spaze/oprah-proxy](https://github.com/spaze/oprah-proxy) Generate credentials for Opera's "browser VPN"
+- [**247**Star][3m] [Shell] [solomonsklash/chomp-scan](https://github.com/solomonsklash/chomp-scan) A scripted pipeline of tools to streamline the bug bounty/penetration test reconnaissance phase, so you can focus on chomping bugs.
+- [**247**Star][4y] [Py] [n0tr00t/beebeeto-framework](https://github.com/n0tr00t/beebeeto-framework) Beebeeto FrameWork
+- [**247**Star][1y] [Perl] [mrash/psad](https://github.com/mrash/psad) Intrusion Detection and Log Analysis with iptables
+- [**247**Star][22d] [C] [mame82/logitacker](https://github.com/mame82/logitacker) Enumerate and test Logitech wireless input devices for vulnerabilities with a nRF52840 radio dongle.
+- [**247**Star][5m] [JS] [lewisardern/bxss](https://github.com/lewisardern/bxss) bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.
+- [**247**Star][2y] [PS] [leoloobeek/lapstoolkit](https://github.com/leoloobeek/lapstoolkit) Tool to audit and attack LAPS environments
+- [**247**Star][1y] [Py] [hsury/geetest3-crack](https://github.com/hsury/geetest3-crack)
+- [**247**Star][4m] [C] [gbps/gbhv](https://github.com/gbps/gbhv) Simple x86-64 VT-x Hypervisor with EPT Hooking
+- [**247**Star][2y] [Shell] [freelancepentester/ddos-script](https://github.com/freelancepentester/ddos-script) All things to do after installing Kali Linux and Add more awesome hacking tools to your Kali Linux system
+- [**247**Star][1m] [Java] [fanhua1994/dzfilter](https://github.com/fanhua1994/dzfilter) 【停止维护】使用DFA算法实现的内容安全,反垃圾,智能鉴黄,敏感词过滤,不良信息检测,文本校验,敏感词检测,包括关键词提取,过滤html标签等。
+- [**247**Star][2y] [Go] [dzonerzy/gowapt](https://github.com/dzonerzy/gowapt) Go Web Application Penetration Test
+- [**247**Star][3m] [Py] [corrad1nho/qomui](https://github.com/corrad1nho/qomui) Qomui (Qt OpenVPN Management UI)
+- [**246**Star][1y] [Py] [boppreh/mouse](https://github.com/boppreh/mouse) Hook and simulate global mouse events in pure Python
+- [**246**Star][1y] [Shell] [dylanbai8/v2ray_h2-tls_website_onekey](https://github.com/dylanbai8/v2ray_h2-tls_website_onekey) V2RAY 基于 CADDY 的 VMESS+H2+TLS+Website(Use Host)+Rinetd BBR 一键安装脚本
+- [**246**Star][10d] [Shell] [bkuhlmann/mac_os-config](https://github.com/bkuhlmann/mac_os-config) Shell scripts for customized macOS machine setup and configuration.
+- [**246**Star][17d] [Py] [susmithkrishnan/torghost](https://github.com/SusmithKrishnan/torghost) Tor anonimizer
+- [**246**Star][6d] [Java] [nats-io/nats.java](https://github.com/nats-io/nats.java) Java client for NATS
+- [**246**Star][3y] [Py] [tcstool/fireaway](https://github.com/tcstool/fireaway) Next Generation Firewall Audit and Bypass Tool
+- [**246**Star][20d] [C++] [s0uthwest/futurerestore](https://github.com/s0uthwest/futurerestore) iOS upgrade and downgrade tool utilizing SHSH blobs
+- [**246**Star][1y] [Py] [rub-syssec/microcode](https://github.com/rub-syssec/microcode) Microcode Updates for the USENIX 2017 paper: Reverse Engineering x86 Processor Microcode
+- [**246**Star][2y] [Py] [maian-tool/maian](https://github.com/maian-tool/maian) automatic tool for finding trace vulnerabilities in Ethereum smart contracts
+- [**246**Star][3y] [C] [jamesbarlow/icmptunnel](https://github.com/jamesbarlow/icmptunnel) Tunnel IP over ICMP.
+- [**246**Star][4y] [Py] [jackgitgz/cnblogsspider](https://github.com/jackgitgz/cnblogsspider) 用scrapy采集cnblogs列表页爬虫
+- [**246**Star][2m] [Py] [gildasio/h2t](https://github.com/gildasio/h2t) h2t (HTTP Hardening Tool) scans a website and suggests security headers to apply
+- [**246**Star][2y] [Py] [gdelugre/ida-arm-system-highlight](https://github.com/gdelugre/ida-arm-system-highlight) IDA script for highlighting and decoding ARM system instructions
+- [**246**Star][4m] [Py] [bontchev/pcodedmp](https://github.com/bontchev/pcodedmp) A VBA p-code disassembler
+- [**246**Star][4y] [C] [begeekmyfriend/cuckoofilter](https://github.com/begeekmyfriend/cuckoofilter) Substitute for bloom filter.
+- [**246**Star][4m] [C] [ampotos/dynstruct](https://github.com/ampotos/dynstruct) Reverse engineering tool for automatic structure recovering and memory use analysis based on DynamoRIO and Capstone
+- [**245**Star][7y] [Ruby] [urbanesec/zackattack](https://github.com/urbanesec/ZackAttack) Unveiled at DEF CON 20, NTLM Relaying to ALL THE THINGS!
+- [**245**Star][2y] [ludiosarchive/unfixed-security-bugs](https://github.com/ludiosarchive/unfixed-security-bugs) A list of publicly known but unfixed security bugs
+- [**245**Star][9d] [C++] [strazzere/android-scripts](https://github.com/strazzere/android-scripts) Collection of Android reverse engineering scripts
+- [**245**Star][2y] [C#] [sparkfunx/skimmer_scanner](https://github.com/sparkfunx/skimmer_scanner) A mobile app for detecting bluetooth gas pump credit card skimmers
+- [**245**Star][5m] [Shell] [peterpt/eternal_scanner](https://github.com/peterpt/eternal_scanner) An internet scanner for exploit CVE-2017-0144 (Eternal Blue) & CVE-2017-0145 (Eternal Romance)
+- [**245**Star][3y] [Java] [neophob/pixelcontroller](https://github.com/neophob/pixelcontroller) (LED) Matrix Control Software, supports various Hardware, Keywords: LED Matrix, OSC, Realtime, VJ, Arduino, Teensy, RPI
+- [**245**Star][4m] [PS] [nccgroup/azucar](https://github.com/nccgroup/azucar) Security auditing tool for Azure environments
+- [**245**Star][3m] [Py] [inquest/threatingestor](https://github.com/inquest/threatingestor) Extract and aggregate threat intelligence.
+- [**245**Star][16d] [C++] [evpo/encryptpad](https://github.com/evpo/encryptpad) Minimalist secure text editor and binary encryptor that implements RFC 4880 Open PGP format: symmetrically encrypted, compressed and integrity protected. The editor can protect files with passwords, key files or both.
+- [**245**Star][7m] [ethicalhack3r/wordpress_plugin_security_testing_cheat_sheet](https://github.com/ethicalhack3r/wordpress_plugin_security_testing_cheat_sheet) WordPress Plugin Security Testing Cheat Sheet
+- [**245**Star][2y] [PHP] [enygma/expose](https://github.com/enygma/expose) An Intrusion Detection System library loosely based on PHP IDS
+- [**245**Star][2y] [JS] [cryptogenic/ps4-4.55-kernel-exploit](https://github.com/cryptogenic/ps4-4.55-kernel-exploit) A fully implemented kernel exploit for the PS4 on 4.55FW
+- [**245**Star][12m] [Py] [crowdstrike/forensics](https://github.com/crowdstrike/forensics) Scripts and code referenced in CrowdStrike blog posts
+- [**245**Star][20d] [Java] [c0ny1/jsencrypter](https://github.com/c0ny1/jsencrypter) 一个用于加密传输爆破的Burp Suite插件
+- [**244**Star][2y] [C] [zer0mem0ry/kernelbhop](https://github.com/zer0mem0ry/kernelbhop) Cheat that uses a driver instead WinAPI for Reading / Writing memory.
+- [**244**Star][2y] [Py] [xyuanmu/checkiptools](https://github.com/xyuanmu/checkiptools) CheckIPTools 扫描谷歌IP以及实用IP转换小工具
+- [**244**Star][11d] [Py] [voulnet/barq](https://github.com/voulnet/barq) The AWS Cloud Post Exploitation framework!
+- [**244**Star][8m] [C++] [ucsb-seclab/difuze](https://github.com/ucsb-seclab/difuze) Fuzzer for Linux Kernel Drivers
+- [**244**Star][4m] [Java] [righettod/poc-graphql](https://github.com/righettod/poc-graphql) Research on GraphQL from an AppSec point of view.
+- [**244**Star][1m] [platomav/cpumicrocodes](https://github.com/platomav/cpumicrocodes) Intel, AMD, VIA & Freescale CPU Microcode Repositories
+- [**244**Star][2y] [Shell] [pentester-io/commonspeak](https://github.com/pentester-io/commonspeak) Content discovery wordlists generated using BigQuery
+- [**244**Star][2y] [Py] [neohapsis/creddump7](https://github.com/neohapsis/creddump7)
+- [**244**Star][3y] [misterch0c/awesome-hacking](https://github.com/misterch0c/awesome-hacking) A collection of various awesome lists for hackers, pentesters and security researchers
+- [**244**Star][2m] [C++] [microsoft/krabsetw](https://github.com/microsoft/krabsetw) KrabsETW provides a modern C++ wrapper and a .NET wrapper around the low-level ETW trace consumption functions.
+- [**244**Star][4y] [Py] [metac0rtex/githarvester](https://github.com/metac0rtex/githarvester) harvesting information from GitHub
+- [**244**Star][3m] [C] [leebrotherston/tls-fingerprinting](https://github.com/leebrotherston/tls-fingerprinting) TLS Fingerprinting
+- [**244**Star][2y] [Py] [jakespringer/angr_ctf](https://github.com/jakespringer/angr_ctf)
+- [**244**Star][4m] [Py] [initroot/burpjslinkfinder](https://github.com/initroot/burpjslinkfinder) Burp Extension for a passive scanning JS files for endpoint links.
+- [**244**Star][2y] [hsis007/useful_websites_for_pentester](https://github.com/hsis007/useful_websites_for_pentester) This repository is to make life of the pentester easy as it is a collection of the websites that can be used by pentesters for day to day studies and to remain updated.
+- [**244**Star][5y] [C++] [gametutorials/tutorials](https://github.com/gametutorials/tutorials) This holds the tutorials for GameTutorials.com
+- [**244**Star][2y] [C] [espressif/esp32-nesemu](https://github.com/espressif/esp32-nesemu) Proof-of-concept NES emulator for the ESP32
+- [**244**Star][3y] [Py] [donnchac/onionbalance](https://github.com/donnchac/onionbalance) OnionBalance provides load-balancing and redundancy for Tor hidden services
+- [**244**Star][8d] [Py] [cisco-config-analysis-tool/ccat](https://github.com/cisco-config-analysis-tool/ccat) Cisco Config Analysis Tool
+- [**244**Star][2y] [HTML] [arno0x/embedinhtml](https://github.com/arno0x/embedinhtml) Embed and hide any file in an HTML file
+- [**244**Star][9m] [Py] [antoniococo/sharpyshell](https://github.com/antoniococo/sharpyshell) SharPyShell - tiny and obfuscated ASP.NET webshell for C# web applications
+- [**244**Star][1y] [C#] [0xbadjuju/wheresmyimplant](https://github.com/0xbadjuju/wheresmyimplant) A Bring Your Own Land Toolkit that Doubles as a WMI Provider
+- [**244**Star][8m] [0x4d31/awesome-oscp](https://github.com/0x4d31/awesome-oscp) A curated list of awesome OSCP resources
+- [**243**Star][23d] [Py] [0xeb-bp/bluekeep](https://github.com/0xeb-bp/bluekeep) Public work for CVE-2019-0708
+- [**243**Star][13d] [Py] [orlikoski/cdqr](https://github.com/orlikoski/CDQR) The Cold Disk Quick Response (CDQR) tool is a fast and easy to use forensic artifact parsing tool that works on disk images, mounted drives and extracted artifacts from Windows, Linux, MacOS, and Android devices
+- [**243**Star][3m] [Py] [usb-tools/facedancer](https://github.com/usb-tools/Facedancer) modern FaceDancer core for multiple devices-- including GreatFET
+- [**243**Star][2d] [CSS] [steamdatabase/gametracking-dota2](https://github.com/steamdatabase/gametracking-dota2)
+- [**243**Star][3y] [Py] [sensepost/autodane](https://github.com/sensepost/autodane) Auto Domain Admin and Network Exploitation.
+- [**243**Star][4y] [Py] [rockerflower/shadowsocks](https://github.com/rockerflower/shadowsocks)
+- [**243**Star][4m] [C++] [nektra/deviare-inproc](https://github.com/nektra/deviare-inproc) Deviare In Process Instrumentation Engine
+- [**243**Star][2y] [Py] [mindpointgroup/cloudfrunt](https://github.com/mindpointgroup/cloudfrunt) A tool for identifying misconfigured CloudFront domains
+- [**243**Star][3m] [Shell] [leviathan36/kaboom](https://github.com/leviathan36/kaboom) An automated pentest tool
+- [**243**Star][3y] [C] [hyln9/vikiroot](https://github.com/hyln9/vikiroot) CVE-2016-5195 (Dirty COW) PoC for Android 6.0.1 Marshmallow
+- [**243**Star][2y] [C++] [fireice-uk/xmr-stak-nvidia](https://github.com/fireice-uk/xmr-stak-nvidia) Monero NVIDIA miner
+- [**243**Star][3m] [JS] [antswordproject/ant](https://github.com/antswordproject/ant) 实时上线的 XSS 盲打平台
+- [**242**Star][4y] [C++] [piker-alpha/macosxbootloader](https://github.com/piker-alpha/macosxbootloader) Pike's bootloader
+- [**242**Star][6d] [Go] [grafeas/kritis](https://github.com/grafeas/kritis) Deploy-time Policy Enforcer for Kubernetes applications
+- [**242**Star][9m] [C] [pegasuslab/ghosttunnel](https://github.com/PegasusLab/GhostTunnel) GhostTunnel is a covert backdoor transmission method that can be used in an isolated environment.
+- [**242**Star][4m] [C] [pagalaxylab/unifuzzer](https://github.com/PAGalaxyLab/uniFuzzer) A fuzzing tool for closed-source binaries based on Unicorn and LibFuzzer
+- [**242**Star][10m] [C++] [revng/revng](https://github.com/revng/revng) the core repository of the rev.ng project (mirror)
+- [**242**Star][12m] [xcsh/unity-game-hacking](https://github.com/xcsh/unity-game-hacking) A guide for hacking unity games
+- [**242**Star][3y] [PHP] [tdifg/webshell](https://github.com/tdifg/webshell) WebShell Collect
+- [**242**Star][7m] [Lua] [rvn0xsy/nse_vuln](https://github.com/rvn0xsy/nse_vuln) Nmap扫描、漏洞利用脚本
+- [**242**Star][2y] [Py] [nirvik/iwant](https://github.com/nirvik/iwant) Commandline tool for searching and downloading files in LAN network, without any central server
+- [**242**Star][1y] [Go] [netspi/goddi](https://github.com/netspi/goddi) goddi (go dump domain info) dumps Active Directory domain information
+- [**242**Star][2y] [Py] [minhnhat93/tf-sndcgan](https://github.com/minhnhat93/tf-sndcgan) Tensorflow Implementation of the paper "Spectral Normalization for Generative Adversarial Networks" (ICML 2017 workshop)
+- [**242**Star][4y] [C++] [meeloo/xspray](https://github.com/meeloo/xspray) A front end for lldb on OS X for Mac and iOS targets, with a twist
+- [**242**Star][9m] [Py] [mazen160/bfac](https://github.com/mazen160/bfac) An automated tool that checks for backup artifacts that may disclose the web-application's source code.
+- [**242**Star][2m] [C] [llvm-mirror/compiler-rt](https://github.com/llvm-mirror/compiler-rt) Mirror of official compiler-rt git repository located at
+- [**242**Star][8m] [Py] [lionsec/wifresti](https://github.com/lionsec/wifresti) Find your wireless network password in Windows , Linux and Mac OS
+- [**242**Star][2y] [C#] [jephthai/openpasswordfilter](https://github.com/jephthai/openpasswordfilter) An open source custom password filter DLL and userspace service to better protect / control Active Directory domain passwords.
+- [**242**Star][2y] [Shell] [h0nus/roguesploit](https://github.com/h0nus/roguesploit) Powerfull Wi-Fi trap!
+- [**242**Star][28d] [cujanovic/open-redirect-payloads](https://github.com/cujanovic/open-redirect-payloads) Open Redirect Payloads
+- [**242**Star][1m] [croqaz/awesome-decentralized](https://github.com/croqaz/awesome-decentralized)
+- [**242**Star][2m] [Java] [c0ny1/passive-scan-client](https://github.com/c0ny1/passive-scan-client) Burp被动扫描流量转发插件
+- [**242**Star][3m] [Py] [atexio/mercure](https://github.com/atexio/mercure) for security managers who want to train their colleague to phishing.
+- [**241**Star][9d] [Rust] [hippolot/anevicon](https://github.com/Hippolot/anevicon)
+- [**241**Star][6y] [Py] [zigoo0/webpwn3r](https://github.com/zigoo0/webpwn3r) WebPwn3r - Web Applications Security Scanner.
+- [**241**Star][6m] [JS] [we11cheng/wcshadowrocket](https://github.com/we11cheng/wcshadowrocket) iOS Shadowrocket(砸壳重签,仅供参考,添加节点存在问题)。另一个fq项目potatso源码参见:
+- [**241**Star][7m] [C++] [smaffer/vgax](https://github.com/smaffer/vgax) VGA library for Arduino UNO
+- [**241**Star][1y] [Java] [shiltemann/ctf-writeups-public](https://github.com/shiltemann/ctf-writeups-public) Writeups for infosec Capture the Flag events by team Galaxians
+- [**241**Star][3m] [JS] [owasp/dvsa](https://github.com/owasp/dvsa) a Damn Vulnerable Serverless Application
+- [**241**Star][8m] [Py] [openstack/syntribos](https://github.com/openstack/syntribos) Python API security testing tool from OpenStack Security Group
+- [**241**Star][2y] [Py] [leonardonve/dns2proxy](https://github.com/leonardonve/dns2proxy) Offensive DNS server
+- [**241**Star][1y] [kinimiwar/penetration-testing](https://github.com/kinimiwar/penetration-testing) List of awesome penetration testing resources, tools and other shiny things
+- [**241**Star][1y] [Py] [hgascon/pulsar](https://github.com/hgascon/pulsar) Protocol Learning and Stateful Fuzzing
+- [**241**Star][5m] [C] [compsec-snu/razzer](https://github.com/compsec-snu/razzer) A Kernel fuzzer focusing on race bugs
+- [**241**Star][3y] [C] [astsam/rtl8812au](https://github.com/astsam/rtl8812au) RTL8812AU/21AU and RTL8814AU driver with monitor mode and frame injection
+- [**241**Star][10m] [psiphon/psiphon-circumvention-system](https://bitbucket.org/psiphon/psiphon-circumvention-system)
+- [**240**Star][3m] [JS] [mattcg/socks5-http-client](https://github.com/mattcg/socks5-http-client) SOCKS v5 HTTP client implementation in JavaScript for Node.js.
+- [**240**Star][5m] [crytic/evm-opcodes](https://github.com/crytic/evm-opcodes) Ethereum opcodes and instruction reference
+- [**240**Star][1y] [C++] [woxihuannisja/bangcle](https://github.com/woxihuannisja/bangcle) The second generation Android Hardening Protection
+- [**240**Star][2y] [ObjC] [sticktron/g0blin](https://github.com/sticktron/g0blin) a work-in-progress jailbreak for iOS 10.3.x (A7-A9)
+- [**240**Star][3y] [JS] [samsung/jalangi2](https://github.com/samsung/jalangi2) Dynamic analysis framework for JavaScript
+- [**240**Star][1y] [Ruby] [rastating/joomlavs](https://github.com/rastating/joomlavs) A black box, Ruby powered, Joomla vulnerability scanner
+- [**240**Star][6m] [Java] [petercunha/jenkins-rce](https://github.com/petercunha/jenkins-rce)
+- [**240**Star][3y] [Py] [pcbje/gransk](https://github.com/pcbje/gransk) Document processing for investigations
+- [**240**Star][5d] [JS] [myetherwallet/ethereum-lists](https://github.com/myetherwallet/ethereum-lists) A repository for maintaining lists of things like malicious URLs, fake token addresses, and so forth. We love lists.
+- [**240**Star][8m] [C++] [mstfknn/malware-sample-library](https://github.com/mstfknn/malware-sample-library) Malware sample library.
+- [**240**Star][21d] [Py] [mez0cc/ms17-010-python](https://github.com/mez0cc/ms17-010-python) MS17-010: Python and Meterpreter
+- [**240**Star][12d] [Py] [mandatoryprogrammer/trusttrees](https://github.com/mandatoryprogrammer/trusttrees) a script to recursively follow all the possible delegation paths for a target domain and graph the relationships between various nameservers along the way.
+- [**240**Star][2y] [C] [limneos/mobileminer](https://github.com/limneos/mobileminer) CPU Miner for ARM64 iOS Devices
+- [**240**Star][2m] [Java] [kwart/jd-cmd](https://github.com/kwart/jd-cmd) Command line Java Decompiler
+- [**240**Star][2y] [C] [jas502n/0day-security-software-vulnerability-analysis-technology](https://github.com/jas502n/0day-security-software-vulnerability-analysis-technology) 0day安全_软件漏洞分析技术
+- [**240**Star][3y] [Py] [intrepidusgroup/mallory](https://github.com/intrepidusgroup/mallory) Mallory - MiTM TCP and UDP Proxy
+- [**240**Star][3y] [Shell] [g0tmi1k/debian-ssh](https://github.com/g0tmi1k/debian-ssh) Debian OpenSSL Predictable PRNG (CVE-2008-0166)
+- [**240**Star][9m] [JS] [exodusintel/cve-2019-5786](https://github.com/exodusintel/cve-2019-5786) FileReader Exploit
+- [**240**Star][4d] [Shell] [essandess/macos-fortress](https://github.com/essandess/macos-fortress) Firewall and Privatizing Proxy for Trackers, Attackers, Malware, Adware, and Spammers with Anti-Virus On-Demand and On-Access Scanning (PF, squid, privoxy, hphosts, dshield, emergingthreats, hostsfile, PAC file, clamav)
+- [**240**Star][2y] [PS] [dafthack/hostrecon](https://github.com/dafthack/hostrecon) This function runs a number of checks on a system to help provide situational awareness to a penetration tester during the reconnaissance phase. It gathers information about the local system, users, and domain information. It does not use any 'net', 'ipconfig', 'whoami', 'netstat', or other system commands to help avoid detection.
+- [**240**Star][6y] [C++] [clinicallyinane/shellcode_launcher](https://github.com/clinicallyinane/shellcode_launcher) Shellcode launcher utility
+- [**240**Star][2m] [Py] [a3sal0n/falcongate](https://github.com/a3sal0n/falcongate) A smart gateway to stop hackers and Malware attacks
+- [**239**Star][1y] [C++] [zhuhaow/libnekit](https://github.com/zhuhaow/libnekit) Efficient and Flexible Network Utility Library
+- [**239**Star][7m] [Py] [beeware/bugjar](https://github.com/beeware/bugjar) A interactive graphical debugger for Python code.
+- [**239**Star][2y] [Py] [xhujoy/pysc2-agents](https://github.com/xhujoy/pysc2-agents) This is a simple implementation of DeepMind's PySC2 RL agents.
+- [**239**Star][2y] [PS] [und3rf10w/aggressor-scripts](https://github.com/und3rf10w/aggressor-scripts) Aggressor scripts I've made for Cobalt Strike
+- [**239**Star][2m] [Py] [sc1341/instagramosint](https://github.com/sc1341/instagramosint) An Instagram Open Source Intelligence Tool
+- [**239**Star][1m] [PHP] [psecio/versionscan](https://github.com/psecio/versionscan) A PHP version scanner for reporting possible vulnerabilities
+- [**239**Star][2y] [Py] [panagiks/rspet](https://github.com/panagiks/rspet) RSPET (Reverse Shell and Post Exploitation Tool) is a Python based reverse shell equipped with functionalities that assist in a post exploitation scenario.
+- [**239**Star][2y] [Py] [nettitude/prowl](https://github.com/nettitude/prowl) an email harvesting tool that scrapes Yahoo for Linkedin profiles associated to the users search terms and identifies job titles
+- [**239**Star][5d] [Makefile] [kframework/evm-semantics](https://github.com/kframework/evm-semantics) K Semantics of the Ethereum Virtual Machine (EVM)
+- [**239**Star][5m] [C++] [facebook/ds2](https://github.com/facebook/ds2) Debug server for lldb.
+- [**239**Star][10m] [Py] [epickrram/grav](https://github.com/epickrram/grav) Performance visualisation tools
+- [**239**Star][3y] [Go] [egebalci/egesploit](https://github.com/egebalci/egesploit) EGESPLOIT is a golang library for malware development
+- [**239**Star][10m] [PHP] [delight-im/php-privacypolicy](https://github.com/delight-im/php-privacypolicy) Programmatically composable privacy policies for humans and machines
+- [**239**Star][2y] [Py] [battelle/sandsifter](https://github.com/battelle/sandsifter) The x86 processor fuzzer
+- [**239**Star][13d] [Py] [avatartwo/avatar2](https://github.com/avatartwo/avatar2) Python core of avatar²
+- [**238**Star][3m] [Go] [jpillora/ipfilter](https://github.com/jpillora/ipfilter) A package for IP Filtering in Go (golang)
+- [**238**Star][2y] [C] [zerosum0x0/defcon-25-workshop](https://github.com/zerosum0x0/defcon-25-workshop) Windows Post-Exploitation / Malware Forward Engineering DEF CON 25 Workshop
+- [**238**Star][2y] [Py] [preempt/credssp](https://github.com/preempt/credssp) A code demonstrating CVE-2018-0886
+- [**238**Star][8d] [pe3zx/my-infosec-awesome](https://github.com/pe3zx/my-infosec-awesome) My curated list of awesome links, resources and tools on infosec related topics
+- [**238**Star][2m] [Java] [nickstadb/serializationdumper](https://github.com/nickstadb/serializationdumper) A tool to dump Java serialization streams in a more human readable form.
+- [**238**Star][1y] [Py] [matthewclarkmay/geoip-attack-map](https://github.com/matthewclarkmay/geoip-attack-map) Cyber security geoip attack map that follows syslog and parses IPs/port numbers to visualize attackers in real time.
+- [**238**Star][4y] [C] [jethrogb/uefireverse](https://github.com/jethrogb/uefireverse) Tools to help with Reverse Engineering UEFI-based firmware
+- [**238**Star][5y] [C] [jduck/asus-cmd](https://github.com/jduck/asus-cmd) ASUS Router infosvr UDP Broadcast root Command Execution
+- [**238**Star][4y] [HTML] [ikarienator/phantomjs_hide_and_seek](https://github.com/ikarienator/phantomjs_hide_and_seek) Some ideas around spoofing and detecting user agents.
+- [**238**Star][8d] [JS] [frenchyeti/dexcalibur](https://github.com/frenchyeti/dexcalibur) Dynamic binary instrumentation tool designed for Android application and powered by Frida. It disassembles dex, analyzes it statically, generates hooks, discovers reflected methods, stores intercepted data and does new things from it. Its aim is to be an all-in-one Android reverse engineering platform.
+- [**238**Star][2m] [Java] [ata4/bspsrc](https://github.com/ata4/bspsrc) A Source engine map decompiler
+- [**238**Star][9d] [Py] [a13xp0p0v/kconfig-hardened-check](https://github.com/a13xp0p0v/kconfig-hardened-check) A script for checking the hardening options in the Linux kernel config
+- [**237**Star][7d] [Py] [tencent/qt4a](https://github.com/tencent/qt4a) QTA driver for Android app
+- [**237**Star][22d] [Py] [pyhackertarget/hackertarget](https://github.com/pyhackertarget/hackertarget) attack surface discovery and identification of security vulnerabilities
+- [**237**Star][3y] [Py] [trustedsec/tap](https://github.com/trustedsec/tap) The TrustedSec Attack Platform is a reliable method for droppers on an infrastructure in order to ensure established connections to an organization.
+- [**237**Star][1m] [Py] [timlib/webxray](https://github.com/timlib/webxray) webxray is a tool for analyzing third-party content on webpages and identifying the companies which collect user data.
+- [**237**Star][2m] [Java] [samlraider/samlraider](https://github.com/samlraider/samlraider) SAML2 Burp Extension
+- [**237**Star][21d] [pomerium/awesome-zero-trust](https://github.com/pomerium/awesome-zero-trust) A curated collection of awesome resources for the zero-trust security model.
+- [**237**Star][2y] [Ruby] [nahamsec/hostilesubbruteforcer](https://github.com/nahamsec/hostilesubbruteforcer)
+- [**237**Star][4m] [PS] [microsoft/aaronlocker](https://github.com/microsoft/aaronlocker) Robust and practical application whitelisting for Windows
+- [**237**Star][9d] [Py] [inforion/idapython-cheatsheet](https://github.com/inforion/idapython-cheatsheet) Scripts and cheatsheets for IDAPython
+- [**237**Star][9m] [harmoc/ctftools](https://github.com/harmoc/ctftools) Personal CTF Toolkit
+- [**237**Star][2d] [JS] [hackademix/noscript](https://github.com/hackademix/noscript) The popular NoScript Security Suite browser extension.
+- [**237**Star][10m] [C] [geosn0w/osirisjailbreak12](https://github.com/geosn0w/osirisjailbreak12) iOS 12.0 -> 12.1.2 Incomplete Osiris Jailbreak with CVE-2019-6225 by GeoSn0w (FCE365)
+- [**237**Star][3y] [Py] [ftramer/steal-ml](https://github.com/ftramer/steal-ml) Model extraction attacks on Machine-Learning-as-a-Service platforms.
+- [**237**Star][2y] [C] [ele7enxxh/android-afl](https://github.com/ele7enxxh/android-afl) Fuzzing Android program with american fuzzy lop (AFL)
+- [**237**Star][28d] [Rust] [danleh/wasabi](https://github.com/danleh/wasabi) A dynamic analysis framework for WebAssembly programs.
+- [**237**Star][3y] [C++] [damellis/cellphone2](https://github.com/damellis/cellphone2) Second iteration of the DIY cellphone (based on the Arduino GSM shield).
+- [**237**Star][8m] [Py] [daenerys-sre/source](https://github.com/daenerys-sre/source) A framework for interoperability between IDA and Ghidra
+- [**237**Star][3m] [cujanovic/markdown-xss-payloads](https://github.com/cujanovic/markdown-xss-payloads) XSS payloads for exploiting Markdown syntax
+- [**237**Star][6m] [Py] [cuckoosandbox/community](https://github.com/cuckoosandbox/community) Repository of modules and signatures contributed by the community
+- [**237**Star][4m] [JS] [consensys/surya](https://github.com/consensys/surya) A set of utilities for exploring Solidity contracts
+- [**237**Star][28d] [JS] [bet4it/hyperpwn](https://github.com/bet4it/hyperpwn) A hyper plugin to provide a flexible GDB GUI with the help of GEF, pwndbg or peda
+- [**237**Star][2y] [Py] [arno0x/wsc2](https://github.com/arno0x/wsc2) A WebSocket C2 Tool
+- [**236**Star][2y] [Go] [zyfworks/anothersteamcommunityfix](https://github.com/zyfworks/anothersteamcommunityfix) 通过修改hosts转发HTTP请求的方式临时性修复SteamCommunity在中国大陆无法访问的小工具
+- [**236**Star][11m] [C] [r3x/how2kernel](https://github.com/r3x/how2kernel) This Repository aims at giving a basic idea about Kernel Exploitation.
+- [**236**Star][3m] [Py] [cylance/cybot](https://github.com/cylance/CyBot) Open Source Threat Intelligence Chat Bot
+- [**236**Star][3m] [Py] [brad-sp/cuckoo-modified](https://github.com/brad-sp/cuckoo-modified) Modified edition of cuckoo
+- [**236**Star][5d] [w0lfschild/macos_headers](https://github.com/w0lfschild/macos_headers) a class dump of most Apple Applications and Frameworks on macOS
+- [**236**Star][7m] [C++] [strivexjun/xantidebug](https://github.com/strivexjun/xantidebug) VMProtect 3.x Anti-debug Method Improved
+- [**236**Star][4y] [C] [softethervpn/win10pcap](https://github.com/softethervpn/win10pcap) WinPcap for Windows 10 (NDIS 6.x driver model)
+- [**236**Star][2y] [C++] [pellegre/libcrafter](https://github.com/pellegre/libcrafter) A high level C++ network packet sniffing and crafting library.
+- [**236**Star][3d] [HCL] [nozaq/terraform-aws-secure-baseline](https://github.com/nozaq/terraform-aws-secure-baseline) Terraform module to set up your AWS account with the secure baseline configuration based on CIS Amazon Web Services Foundations.
+- [**236**Star][2y] [Py] [nccgroup/shocker](https://github.com/nccgroup/shocker) A tool to find and exploit servers vulnerable to Shellshock
+- [**236**Star][2m] [JS] [martinzhou2015/srcms](https://github.com/martinzhou2015/srcms) SRCMS企业应急响应与缺陷管理系统
+- [**236**Star][24d] [C] [kubo/plthook](https://github.com/kubo/plthook) Hook function calls by replacing PLT(Procedure Linkage Table) entries.
+- [**236**Star][11m] [Go] [fardog/secureoperator](https://github.com/fardog/secureoperator) A DNS-protocol proxy for DNS-over-HTTPS providers, such as Google and Cloudflare
+- [**236**Star][11m] [duoergun0729/2book](https://github.com/duoergun0729/2book) 《Web安全之深度学习实战》
+- [**236**Star][5y] [C] [conix-security/zer0m0n](https://github.com/conix-security/zer0m0n) zer0m0n driver for cuckoo sandbox
+- [**235**Star][27d] [C] [cmu-sei/scale](https://github.com/cmu-sei/scale) SCALe (Source Code Analysis Lab) is a static analysis aggregator/correlator which enables a source code analyst to combine static analysis results from multiple tools into one interface, and also provides mappings for diagnostics from the tools to the SEI CERT Secure Coding standards.
+- [**235**Star][3m] [Swift] [shadowsocksr-live/ishadowsocksr](https://github.com/shadowsocksr-live/ishadowsocksr) ShadowsocksR for iOS, come from
+- [**235**Star][4m] [C#] [fsecurelabs/sharpgpoabuse](https://github.com/FSecureLABS/SharpGPOAbuse) take advantage of a user's edit rights on a Group Policy Object (GPO) in order to compromise the objects that are controlled by that GPO.
+- [**235**Star][1y] [Py] [3summer/ctf-rsa-tool](https://github.com/3summer/CTF-RSA-tool) a little tool help CTFer solve RSA problem
+- [**235**Star][6y] [Py] [xen0ph0n/yaragenerator](https://github.com/xen0ph0n/yaragenerator) quick, simple, and effective yara rule creation to isolate malware families and other malicious objects of interest
+- [**235**Star][3y] [Py] [withdk/badusb2-mitm-poc](https://github.com/withdk/badusb2-mitm-poc) BadUSB 2.0 USB-HID MiTM POC
+- [**235**Star][1m] [C] [wbenny/ia32-doc](https://github.com/wbenny/ia32-doc) IA32-doc is a project which aims to put as many definitions from the Intel Manual into machine-processable format as possible
+- [**235**Star][1m] [C#] [tyranid/exploitremotingservice](https://github.com/tyranid/exploitremotingservice) A tool to exploit .NET Remoting Services
+- [**235**Star][1y] [Java] [nccgroup/burpsuiteloggerplusplus](https://github.com/nccgroup/burpsuiteloggerplusplus) Burp Suite Logger++: Log activities of all the tools in Burp Suite
+- [**235**Star][4y] [Py] [mwielgoszewski/python-paddingoracle](https://github.com/mwielgoszewski/python-paddingoracle) A portable, padding oracle exploit API
+- [**235**Star][1y] [JS] [holyvier/prototype-pollution-nsec18](https://github.com/holyvier/prototype-pollution-nsec18) Content released at NorthSec 2018 for my talk on prototype pollution
+- [**235**Star][8m] [Go] [gocaio/goca](https://github.com/gocaio/goca) Goca Scanner
+- [**235**Star][2y] [Py] [evait-security/weeman](https://github.com/evait-security/weeman) HTTP server for phishing in python
+- [**235**Star][1m] [HTML] [edoverflow/bugbountyguide](https://github.com/edoverflow/bugbountyguide) Bug Bounty Guide is a launchpad for bug bounty programs and bug bounty hunters.
+- [**235**Star][10m] [Py] [cryin/javaid](https://github.com/cryin/javaid) java source code static code analysis and danger function identify prog
+- [**235**Star][9m] [Py] [codeinthehole/purl](https://github.com/codeinthehole/purl) A simple, immutable URL class with a clean API for interrogation and manipulation.
+- [**235**Star][9m] [Py] [airbus-seclab/ilo4_toolbox](https://github.com/airbus-seclab/ilo4_toolbox) Toolbox for HPE iLO4 & iLO5 analysis
+- [**235**Star][10m] [JS] [adamyordan/cve-2019-1003000-jenkins-rce-poc](https://github.com/adamyordan/cve-2019-1003000-jenkins-rce-poc) Jenkins RCE Proof-of-Concept: SECURITY-1266 / CVE-2019-1003000 (Script Security), CVE-2019-1003001 (Pipeline: Groovy), CVE-2019-1003002 (Pipeline: Declarative)
+- [**234**Star][5m] [Shell] [hak5/packetsquirrel-payloads](https://github.com/hak5/packetsquirrel-payloads) The Official Packet Squirrel Payload Repository
+- [**234**Star][10d] [C#] [xenocoderce/neo-confuserex](https://github.com/xenocoderce/neo-confuserex) Updated ConfuserEX, an open-source, free obfuscator for .NET applications
+- [**234**Star][2y] [TS] [weichx/cerialize](https://github.com/weichx/cerialize) Easy serialization through ES7/Typescript annotations
+- [**234**Star][11m] [C] [reisyukaku/reinand](https://github.com/reisyukaku/reinand) Minimalist 3DS custom firmware.
+- [**234**Star][4y] [Py] [pyana/pyana](https://github.com/pyana/pyana) Analyzing the Windows shellcode
+- [**234**Star][21d] [Julia] [jrevels/cassette.jl](https://github.com/jrevels/cassette.jl) Overdub Your Julia Code
+- [**234**Star][4y] [PS] [invoke-ir/uproot](https://github.com/invoke-ir/uproot) Currently not updated for WMIEvent module...
+- [**234**Star][1y] [Ruby] [hahwul/droid-hunter](https://github.com/hahwul/droid-hunter) (deprecated) Android application vulnerability analysis and Android pentest tool
+- [**234**Star][2m] [C] [grant-h/qu1ckr00t](https://github.com/grant-h/qu1ckr00t) A PoC application demonstrating the power of an Android kernel arbitrary R/W.
+- [**234**Star][2d] [Ruby] [fabric8io/fluent-plugin-kubernetes_metadata_filter](https://github.com/fabric8io/fluent-plugin-kubernetes_metadata_filter) Enrich your fluentd events with Kubernetes metadata
+- [**234**Star][1y] [Java] [difcareer/sqlmap4burp](https://github.com/difcareer/sqlmap4burp) sqlmap embed in burpsuite
+- [**234**Star][1m] [C] [didi/kemon](https://github.com/didi/kemon) An Open-Source Pre and Post Callback-Based Framework for macOS Kernel Monitoring.
+- [**234**Star][7m] [JS] [cliqz-oss/local-sheriff](https://github.com/cliqz-oss/local-sheriff) Think of Local sheriff as a recon tool in your browser (WebExtension). While you normally browse the internet, Local Sheriff works in the background to empower you in identifying what data points (PII) are being shared / leaked to which all third-parties.
+- [**234**Star][6y] [Py] [adastra-thw/pyhacks](https://github.com/adastra-thw/pyhacks) Python Scripts for Hacking .
+- [**233**Star][2y] [wizardforcel/web-hacking-101-zh](https://github.com/wizardforcel/web-hacking-101-zh)
+- [**233**Star][2y] [Py] [robotattackorg/robot-detect](https://github.com/robotattackorg/robot-detect) Detection script for the ROBOT vulnerability
+- [**233**Star][7m] [Py] [patois/dsync](https://github.com/patois/dsync) IDAPython plugin that synchronizes disassembler and decompiler views
+- [**233**Star][2y] [palantir/alerting-detection-strategy-framework](https://github.com/palantir/alerting-detection-strategy-framework) A framework for developing alerting and detection strategies for incident response.
+- [**233**Star][10m] [Py] [nethunteros/punter](https://github.com/nethunteros/punter) Hunt domain names using DNSDumpster, WHOIS, Reverse WHOIS, Shodan, Crimeflare
+- [**233**Star][6m] [Py] [maaaaz/nmaptocsv](https://github.com/maaaaz/nmaptocsv) A simple python script to convert Nmap output to CSV
+- [**233**Star][2y] [C] [larsbrinkhoff/httptunnel](https://github.com/larsbrinkhoff/httptunnel) Bidirectional data stream tunnelled in HTTP requests.
+- [**233**Star][2y] [JS] [google/password-alert](https://github.com/google/password-alert) A Chrome Extension to help protect against phishing attacks.
+- [**233**Star][2m] [Py] [gilligan/vim-lldb](https://github.com/gilligan/vim-lldb) lldb debugger integration plugin for vim
+- [**233**Star][4d] [Common Lisp] [cffi/cffi](https://github.com/cffi/cffi) The Common Foreign Function Interface
+- [**233**Star][28d] [Go] [apuigsech/seekret](https://github.com/apuigsech/seekret) Go library and command line to seek for secrets on various sources.
+- [**232**Star][2m] [C] [yifengyou/the-design-and-implementation-of-a-64-bit-os](https://github.com/yifengyou/The-design-and-implementation-of-a-64-bit-os) 《一个64位操作系统的设计与实现》读书笔记&随书源码
+- [**232**Star][2m] [Ruby] [zt2/sqli-hunter](https://github.com/zt2/sqli-hunter) SQLi-Hunter is a simple HTTP proxy server and a SQLMAP API wrapper that makes digging SQLi easy.
+- [**232**Star][5y] [C] [sztupy/luadec51](https://github.com/sztupy/luadec51) Lua Decompiler for Lua version 5.1
+- [**232**Star][5y] [PHP] [smaash/quasibot](https://github.com/smaash/quasibot) complex webshell manager, quasi-http botnet.
+- [**232**Star][2m] [C++] [richkmeli/richkware](https://github.com/richkmeli/richkware) Framework for building Windows malware, written in C++
+- [**232**Star][9m] [Go] [masterzen/winrm](https://github.com/masterzen/winrm) Command-line tool and library for Windows remote command execution in Go
+- [**232**Star][4y] [C] [markjandrews/wrk-v1.2](https://github.com/markjandrews/wrk-v1.2) Windows Research Kernel
+- [**232**Star][16d] [C#] [icsharpcode/avaloniailspy](https://github.com/icsharpcode/avaloniailspy) Avalonia-based .NET Decompiler (port of ILSpy)
+- [**232**Star][2m] [Propeller Spin] [grandideastudio/jtagulator](https://github.com/grandideastudio/jtagulator) Assisted discovery of on-chip debug interfaces
+- [**232**Star][2y] [C++] [fireeye/simplifygraph](https://github.com/fireeye/simplifygraph) IDA Pro plugin to assist with complex graphs
+- [**232**Star][4y] [JS] [firebug/firebug.next](https://github.com/firebug/firebug.next) Next Firebug generation built on top of native Firefox developer tools
+- [**232**Star][9d] [Java] [dexpatcher/dexpatcher-tool](https://github.com/dexpatcher/dexpatcher-tool) Android Dalvik bytecode patcher.
+- [**232**Star][4m] [C] [devnoname120/vhbb](https://github.com/devnoname120/vhbb) Browse, download, and launch Vita homebrews!
+- [**232**Star][2y] [d33tah/call-for-wpa3](https://github.com/d33tah/call-for-wpa3) Call for WPA3 - what's wrong with WPA2 security and how to fix it
+- [**232**Star][6m] [cr0hn/nosqlinjection_wordlists](https://github.com/cr0hn/nosqlinjection_wordlists) This repository contains payload to test NoSQL Injections
+- [**232**Star][3y] [C] [canbus-triple/canbus-triple](https://github.com/canbus-triple/canbus-triple) CANBus Triple – The car hacking platform
+- [**232**Star][3m] [Py] [boy-hack/airbug](https://github.com/boy-hack/airbug) Airbug(空气洞),收集漏洞poc用于安全产品
+- [**231**Star][10m] [HTML] [nicehash/excavator](https://github.com/nicehash/excavator) NiceHash's proprietary low-level CUDA miner
+- [**231**Star][1m] [HTML] [badd1e/disclosures](https://github.com/badd1e/disclosures) Zero-day and N-day security vulnerability notes, analysis, and proof-of-concepts
+- [**231**Star][6d] [HTML] [dependency-check/dependency-check-sonar-plugin](https://github.com/dependency-check/dependency-check-sonar-plugin) Integrates Dependency-Check reports into SonarQube
+- [**231**Star][1y] [Jupyter Notebook] [wesleyraptor/streamingphish](https://github.com/wesleyraptor/streamingphish) Python-based utility that uses supervised machine learning to detect phishing domains from the Certificate Transparency log network.
+- [**231**Star][2y] [Py] [utds3lab/multiverse](https://github.com/utds3lab/multiverse) A static binary rewriter that does not use heuristics
+- [**231**Star][3y] [C#] [thrdev/socks5](https://github.com/thrdev/socks5) A full-fledged high-performance socks5 proxy server written in C#. Plugin support included.
+- [**231**Star][4m] [Java] [thisislibra/androidprojectcreator](https://github.com/thisislibra/androidprojectcreator) Convert an APK to an Android Studio Project using multiple open-source decompilers
+- [**231**Star][2y] [C++] [silentbreaksec/throwback](https://github.com/silentbreaksec/throwback) HTTP/S Beaconing Implant
+- [**231**Star][4y] [Shell] [nccgroup/metasploitavevasion](https://github.com/nccgroup/metasploitavevasion) Metasploit AV Evasion Tool
+- [**231**Star][3y] [HTML] [mongodb-labs/disasm](https://github.com/mongodb-labs/disasm) Interactive Disassembler GUI - This Repository is NOT a supported MongoDB product
+- [**231**Star][2y] [Shell] [linuz/sticky-keys-slayer](https://github.com/linuz/sticky-keys-slayer) Scans for accessibility tools backdoors via RDP
+- [**231**Star][2y] [Jupyter Notebook] [james91b/ida_ipython](https://github.com/james91b/ida_ipython) An IDA Pro Plugin for embedding an IPython Kernel
+- [**231**Star][1y] [C++] [ionescu007/simpleator](https://github.com/ionescu007/simpleator) Simpleator ("Simple-ator") is an innovative Windows-centric x64 user-mode application emulator that leverages several new features that were added in Windows 10 Spring Update (1803), also called "Redstone 4", with additional improvements that were made in Windows 10 October Update (1809), aka "Redstone 5".
+- [**231**Star][2y] [C] [hardenedlinux/grsecurity-101-tutorials](https://github.com/hardenedlinux/grsecurity-101-tutorials) 增强 Linux 内核安全的内核补丁集
+- [**231**Star][7m] [Shell] [fransr/bountyplz](https://github.com/fransr/bountyplz) Automated security reporting from markdown templates (HackerOne and Bugcrowd are currently the platforms supported)
+- [**231**Star][3m] [Py] [evilmog/ntlmv1-multi](https://github.com/evilmog/ntlmv1-multi) NTLMv1 Multitool
+- [**231**Star][2d] [euphrat1ca/security_w1k1](https://github.com/euphrat1ca/security_w1k1) collect
+- [**231**Star][2y] [C] [battelle/movfuscator](https://github.com/battelle/movfuscator) The single instruction C compiler
+- [**230**Star][10m] [C++] [googleprojectzero/bochspwn-reloaded](https://github.com/googleprojectzero/bochspwn-reloaded) A Bochs-based instrumentation performing kernel memory taint tracking to detect disclosure of uninitialized memory to ring 3
+- [**230**Star][2d] [C] [shchmue/lockpick_rcm](https://github.com/shchmue/lockpick_rcm) Nintendo Switch encryption key derivation bare metal RCM payload
+- [**230**Star][5y] [Shell] [s3jensen/iret](https://github.com/s3jensen/iret)
+- [**230**Star][7d] [PS] [rsmudge/elevatekit](https://github.com/rsmudge/elevatekit) The Elevate Kit demonstrates how to use third-party privilege escalation attacks with Cobalt Strike's Beacon payload.
+- [**230**Star][5m] [HTML] [rootup/bfuzz](https://github.com/rootup/bfuzz) Fuzzing Browsers
+- [**230**Star][3y] [C] [omriiluz/nrf24-btle-decoder](https://github.com/omriiluz/nrf24-btle-decoder) Sniff and decode NRF24L01+ and Bluetooth Low Energy using RTL-SDR
+- [**230**Star][2y] [C++] [nickcano/xenoscan](https://github.com/nickcano/xenoscan) Open source memory scanner written in C++
+- [**230**Star][2m] [PS] [miriamxyra/eventlist](https://github.com/miriamxyra/eventlist) help improving your Audit capabilities and to help to build your Security Operation Center.
+- [**230**Star][3y] [Visual Basic .NET] [malwares/crypter](https://github.com/malwares/crypter) Windows Crypter
+- [**230**Star][8m] [C] [ctz/cifra](https://github.com/ctz/cifra) A collection of cryptographic primitives targeted at embedded use.
+- [**230**Star][2m] [Java] [commonsguy/cwac-netsecurity](https://github.com/commonsguy/cwac-netsecurity) CWAC-NetSecurity: Simplifying Secure Internet Access
+- [**230**Star][3y] [Perl] [brendangregg/heatmap](https://github.com/brendangregg/heatmap) Heat map generation tools
+- [**230**Star][4m] [Py] [beaengine/beaengine](https://github.com/beaengine/beaengine) BeaEngine disasm project
+- [**230**Star][1y] [Py] [audibleblink/doxycannon](https://github.com/audibleblink/doxycannon) A poorman's proxycannon and botnet, using docker, ovpn files, and a dante socks5 proxy
+- [**229**Star][1y] [C] [iceonsun/rsock](https://github.com/iceonsun/rsock) The best companion of kcptun
+- [**229**Star][1y] [Java] [xxxyanchenxxx/virtualappex](https://github.com/xxxyanchenxxx/virtualappex) VirtualApp 9.0适配
+- [**229**Star][4m] [JS] [varchashva/letsmapyournetwork](https://github.com/varchashva/letsmapyournetwork) Lets Map Your Network enables you to visualise your physical network in form of graph with zero manual error
+- [**229**Star][7m] [ObjC] [uliwitness/ulikit](https://github.com/uliwitness/ulikit) Miscellaneous open-sourced MacOS Cocoa code by yours truly.
+- [**229**Star][6y] [squonk42/tl-wr703n](https://github.com/squonk42/tl-wr703n) Reverse Engineering work on the TP-LINK TL-WR703N 150M 802.11n Wi-Fi Router
+- [**229**Star][9m] [C++] [microsoft/windbg-samples](https://github.com/microsoft/windbg-samples) Sample extensions, scripts, and API uses for WinDbg.
+- [**229**Star][2y] [Batchfile] [mdsecactivebreach/rdpinception](https://github.com/mdsecactivebreach/rdpinception) A proof of concept for the RDP Inception Attack
+- [**229**Star][5y] [keesj/gomo](https://github.com/keesj/gomo) Wiki pages about Android internals
+- [**229**Star][4m] [C++] [justasmasiulis/lazy_importer](https://github.com/justasmasiulis/lazy_importer) library for importing functions from dlls in a hidden, reverse engineer unfriendly way
+- [**229**Star][2d] [OCaml] [fstarlang/kremlin](https://github.com/fstarlang/kremlin) KreMLin is a tool for extracting low-level F* programs to readable C code
+- [**229**Star][2m] [C] [elfmaster/libelfmaster](https://github.com/elfmaster/libelfmaster) Secure ELF parsing/loading library for forensics reconstruction of malware, and robust reverse engineering tools
+- [**229**Star][4y] [Py] [danmcinerney/elite-proxy-finder](https://github.com/danmcinerney/elite-proxy-finder) Finds public elite anonymity proxies and concurrently tests them
+- [**229**Star][4y] [JS] [brainshave/ancient-oak](https://github.com/brainshave/ancient-oak) Immutable data trees in JavaScript.
+- [**229**Star][1y] [Shell] [aplura/tango](https://github.com/aplura/tango) Honeypot Intelligence with Splunk
+- [**229**Star][1y] [Py] [amiller/honeybadgerbft](https://github.com/amiller/honeybadgerbft) The Honey Badger of BFT Protocols
+- [**229**Star][2y] [CoffeeScript] [521xueweihan/shadowsocks-heroku](https://github.com/521xueweihan/shadowsocks-heroku) 本项目已删除
+- [**228**Star][5m] [aleenzz/php_bug_wiki](https://github.com/aleenzz/php_bug_wiki) 代码审计相关的一些知识
+- [**228**Star][3y] [C] [klsecservices/invoke-vnc](https://github.com/klsecservices/Invoke-Vnc) executes a VNC agent in-memory and initiates a reverse connection, or binds to a specified port.
+- [**228**Star][1y] [C++] [wwwg/wasmdec](https://github.com/wwwg/wasmdec) WebAssembly to C decompiler
+- [**228**Star][3m] [Py] [whitel1st/docem](https://github.com/whitel1st/docem) Uility to embed XXE and XSS payloads in docx,odt,pptx,etc (OXML_XEE on steroids)
+- [**228**Star][1m] [Py] [webbreacher/whatsmyname](https://github.com/webbreacher/whatsmyname) This repository has the unified data required to perform user enumeration on various websites. Content is in a JSON file and can easily be used in other projects.
+- [**228**Star][28d] [C] [vusec/ridl](https://github.com/vusec/ridl) RIDL test suite and exploits
+- [**228**Star][4y] [Py] [trustedsec/spraywmi](https://github.com/trustedsec/spraywmi) SprayWMI is an easy way to get mass shells on systems that support WMI. Much more effective than PSEXEC as it does not leave remnants on a system.
+- [**228**Star][4m] [C] [tishion/mmloader](https://github.com/tishion/mmloader) A library for loading dll module bypassing windows PE loader from memory (x86/x64)
+- [**228**Star][11m] [C] [stephenbradshaw/vulnserver](https://github.com/stephenbradshaw/vulnserver) Vulnerable server used for learning software exploitation
+- [**228**Star][2m] [C++] [soarqin/finalhe](https://github.com/soarqin/finalhe) Final h-encore, a tool to push h-encore exploit for PS VITA/PS TV automatically
+- [**228**Star][3y] [C++] [secrary/infectpe](https://github.com/secrary/infectpe) Inject custom code into PE file [This project is not maintained anymore]
+- [**228**Star][6d] [HTML] [patrowl/patrowlmanager](https://github.com/patrowl/patrowlmanager) PatrOwl - Open Source, Smart and Scalable Security Operations Orchestration Platform
+- [**228**Star][2y] [C] [opsxcq/exploit-cve-2017-7494](https://github.com/opsxcq/exploit-cve-2017-7494) SambaCry exploit and vulnerable container (CVE-2017-7494)
+- [**228**Star][4y] [C] [maijin/workshop2015](https://github.com/maijin/workshop2015)
+- [**228**Star][1y] [Py] [leapsecurity/libssh-scanner](https://github.com/leapsecurity/libssh-scanner) Script to identify hosts vulnerable to CVE-2018-10933
+- [**228**Star][2m] [Py] [johnnykv/heralding](https://github.com/johnnykv/heralding) Credentials catching honeypot
+- [**228**Star][9m] [Py] [ivanvza/arpy](https://github.com/ivanvza/arpy) Mac OSX ARP spoof (MiTM) tool that can also plug into Gource
+- [**228**Star][2y] [Java] [ikkisoft/serialkiller](https://github.com/ikkisoft/serialkiller) Look-Ahead Java Deserialization Library
+- [**228**Star][9m] [Py] [honeynet/beeswarm](https://github.com/honeynet/beeswarm) Honeypot deployment made easy
+- [**228**Star][2d] [C] [frida/frida-gum](https://github.com/frida/frida-gum) Low-level code instrumentation library used by frida-core
+- [**228**Star][2y] [Py] [fortunec00kie/bug-monitor](https://github.com/fortunec00kie/bug-monitor) Seebug、structs、cve漏洞实时监控推送系统
+- [**228**Star][1y] [C#] [djhohnstein/sharpweb](https://github.com/djhohnstein/sharpweb) .NET 2.0 CLR project to retrieve saved browser credentials from Google Chrome, Mozilla Firefox and Microsoft Internet Explorer/Edge.
+- [**228**Star][3d] [Java] [constellation-app/constellation](https://github.com/constellation-app/constellation) A graph-focused data visualisation and interactive analysis application.
+- [**228**Star][26d] [Go] [cloudflare/xdpcap](https://github.com/cloudflare/xdpcap) tcpdump like XDP packet capture
+- [**228**Star][2m] [Py] [anon-exploiter/sitebroker](https://github.com/anon-exploiter/sitebroker) A cross-platform python based utility for information gathering and penetration testing automation!
+- [**228**Star][2y] [PHP] [adamdoupe/wackopicko](https://github.com/adamdoupe/wackopicko) WackoPicko is a vulnerable web application used to test web application vulnerability scanners.
+- [**227**Star][3y] [PS] [xyntax/badusb-code](https://github.com/xyntax/badusb-code) 收集badusb的一些利用方式及代码
+- [**227**Star][7m] [C] [wkz/ply](https://github.com/wkz/ply) Light-weight Dynamic Tracer for Linux
+- [**227**Star][3y] [Swift] [trailofbits/secureenclavecrypto](https://github.com/trailofbits/secureenclavecrypto) Demonstration library for using the Secure Enclave on iOS
+- [**227**Star][1y] [C#] [tevora-threat/sharpview](https://github.com/tevora-threat/sharpview) C# implementation of harmj0y's PowerView
+- [**227**Star][2y] [C#] [t3ntman/social-engineering-payloads](https://github.com/t3ntman/social-engineering-payloads) Collection of social engineering payloads
+- [**227**Star][9m] [Go] [stevenaldinger/decker](https://github.com/stevenaldinger/decker) Declarative penetration testing orchestration framework
+- [**227**Star][3y] [Py] [scrapy-plugins/scrapy-jsonrpc](https://github.com/scrapy-plugins/scrapy-jsonrpc) Scrapy extension to control spiders using JSON-RPC
+- [**227**Star][2y] [Py] [requests/requests-ntlm](https://github.com/requests/requests-ntlm) NTLM authentication support for Requests.
+- [**227**Star][7m] [Shell] [r00t-3xp10it/meterpreter_paranoid_mode-ssl](https://github.com/r00t-3xp10it/meterpreter_paranoid_mode-ssl) Meterpreter Paranoid Mode - SSL/TLS connections
+- [**227**Star][7m] [Py] [paradoxis/stegcracker](https://github.com/paradoxis/stegcracker) Steganography brute-force utility to uncover hidden data inside files
+- [**227**Star][9d] [Py] [mzfr/gtfo](https://github.com/mzfr/gtfo) Search gtfobins and lolbas files from your terminal
+- [**227**Star][2y] [Py] [mazen160/struts-pwn_cve-2017-9805](https://github.com/mazen160/struts-pwn_cve-2017-9805) An exploit for Apache Struts CVE-2017-9805
+- [**227**Star][2m] [C] [leecher1337/ntvdmx64](https://github.com/leecher1337/ntvdmx64) Run Microsoft Windows NTVDM (DOS) on 64bit Editions
+- [**227**Star][2d] [C] [ipsn/go-libtor](https://github.com/ipsn/go-libtor) Self-contained Tor from Go
+- [**227**Star][3m] [C++] [dreamstalker/rehlds](https://github.com/dreamstalker/rehlds) Reverse-engineered HLDS
+- [**227**Star][3m] [C] [dongdongshe/neuzz](https://github.com/dongdongshe/neuzz) neural network assisted fuzzer
+- [**227**Star][3y] [Perl] [davidpepper/fierce-domain-scanner](https://github.com/davidpepper/fierce-domain-scanner) Fierce.pl Domain Scanner
+- [**227**Star][10m] [Py] [calidog/certstream-python](https://github.com/calidog/certstream-python) Python library for connecting to CertStream
+- [**227**Star][2y] [Py] [automatingosint/osint_public](https://github.com/automatingosint/osint_public)
+- [**227**Star][4y] [Py] [allfro/pymetasploit](https://github.com/allfro/pymetasploit) A full-fledged msfrpc library for Metasploit framework.
+- [**226**Star][1y] [lanjelot/kb](https://github.com/lanjelot/kb) Respositoy of all my notes on infosec I have been building up over the years
+- [**226**Star][3y] [Py] [praetorian-code/pyshell](https://github.com/praetorian-code/pyshell) PyShell makes interacting with web-based command injection less painful, emulating the feel of an interactive shell as much as possible.
+- [**226**Star][8m] [PHP] [wmjonssen/centcount-analytics](https://github.com/wmjonssen/centcount-analytics) An open-source web analytics software. Developed by PHP + MySQL + Redis, Can be easily deployed on your own server, 100% data ownership.
+- [**226**Star][2m] [Py] [volatilityfoundation/profiles](https://github.com/volatilityfoundation/profiles) Volatility profiles for Linux and Mac OS X
+- [**226**Star][3y] [Py] [uber/focuson](https://github.com/uber/focuson) A tool to surface security issues in python code
+- [**226**Star][4y] [Py] [trevp/tlslite](https://github.com/trevp/tlslite) TLS Library in python
+- [**226**Star][7d] [TS] [qtgate/qtgate-desktop-client](https://github.com/qtgate/qtgate-desktop-client) Become a trustworthy ally for the Internet Freedom
+- [**226**Star][1y] [Go] [opennota/check](https://github.com/opennota/check) A set of utilities for checking Go sources. This repository has migrated to
+- [**226**Star][1y] [Go] [netxfly/sec_check](https://github.com/netxfly/sec_check) Cross platform security detection tool
+- [**226**Star][1y] [Py] [marekrei/sequence-labeler](https://github.com/marekrei/sequence-labeler) Neural network sequence labeling model
+- [**226**Star][4y] [Py] [hood3drob1n/jsrat-py](https://github.com/hood3drob1n/jsrat-py) This is my implementation of JSRat.ps1 in Python so you can now run the attack server from any OS instead of being limited to a Windows OS with Powershell enabled.
+- [**226**Star][6m] [Rust] [gamozolabs/mesos](https://github.com/gamozolabs/mesos) Binary coverage tool without binary modification for Windows
+- [**226**Star][8d] [Py] [elevenpaths/homepwn](https://github.com/elevenpaths/homepwn) HomePwn - Swiss Army Knife for Pentesting of IoT Devices
+- [**226**Star][4m] [Py] [duo-labs/isthislegit](https://github.com/duo-labs/isthislegit) Dashboard to collect, analyze, and respond to reported phishing emails.
+- [**226**Star][1m] [cpuu/awesome-fuzzing](https://github.com/cpuu/awesome-fuzzing) A curated list of awesome Fuzzing(or Fuzz Testing) for software security
+- [**226**Star][2m] [Go] [brompwnie/botb](https://github.com/brompwnie/botb) A container analysis and exploitation tool for pentesters and engineers.
+- [**226**Star][6m] [Py] [blark/aiodnsbrute](https://github.com/blark/aiodnsbrute) Python 3.5+ DNS asynchronous brute force utility
+- [**226**Star][2y] [Py] [alibaba/iossecaudit](https://github.com/alibaba/iossecaudit) iOS Security Audit Toolit - A semi-automatic tool for iOS App security audit and iOS reverse engineering
+- [**225**Star][1y] [dustyfresh/php-vulnerability-audit-cheatsheet](https://github.com/dustyfresh/php-vulnerability-audit-cheatsheet) This will assist you in the finding of potentially vulnerable PHP code. Each type of grep command is categorized in the type of vulnerabilities you generally find with that function.
+- [**225**Star][5y] [Ruby] [pwnwiki/q](https://github.com/pwnwiki/q) Exploit Pack for Metasploit - Collection of modules gathered across time and internets
+- [**225**Star][13d] [JS] [txthinking/blackwhite](https://github.com/txthinking/blackwhite) Domain, CIDR, IP black/white list, PAC generator
+- [**225**Star][1y] [C++] [ucsb-seclab/dr_checker](https://github.com/ucsb-seclab/dr_checker) A Soundy Vulnerability Detection Tool for Linux Kernel Drivers
+- [**225**Star][1m] [C] [snar/bgpq3](https://github.com/snar/bgpq3) bgp filtering automation tool
+- [**225**Star][1m] [Py] [sethsec/celerystalk](https://github.com/sethsec/celerystalk) An asynchronous enumeration & vulnerability scanner. Run all the tools on all the hosts.
+- [**225**Star][7d] [o-mg/demonseed](https://github.com/o-mg/demonseed) minimal malicious USB cabl
+- [**225**Star][5y] [Py] [nccgroup/umap](https://github.com/nccgroup/umap) The USB host security assessment tool
+- [**225**Star][5y] [Py] [nanyomy/dht-woodworm](https://github.com/nanyomy/dht-woodworm) this python repo is used to get the info_hash from DHT network, enjoy it
+- [**225**Star][5y] [ObjC] [limneos/weak_classdump](https://github.com/limneos/weak_classdump) Cycript real-time classdump . An alternative for encrypted binaries
+- [**225**Star][4m] [JS] [jtmelton/appsensor](https://github.com/jtmelton/appsensor) A toolkit for building self-defending applications through real-time event detection and response
+- [**225**Star][2m] [Py] [jackeriss/email_my_pc](https://github.com/jackeriss/email_my_pc) 远程监控电脑,也许一切只需要一封邮件。
+- [**225**Star][2y] [fuzzysecurity/defcon25](https://github.com/fuzzysecurity/defcon25) UAC 0day, all day!
+- [**225**Star][3m] [Py] [eth0izzle/the-endorser](https://github.com/eth0izzle/the-endorser) An OSINT tool that allows you to draw out relationships between people on LinkedIn via endorsements/skills.
+- [**225**Star][2m] [Py] [crowdstrike/automactc](https://github.com/crowdstrike/automactc) Automated Mac Forensic Triage Collector
+- [**225**Star][3y] [chaitin/sqlchop](https://github.com/chaitin/sqlchop) [DEPRECATED]A novel SQL injection detection engine built on top of SQL tokenizing and syntax analysis.
+- [**224**Star][8m] [Py] [sethmlarson/virtualbox-python](https://github.com/sethmlarson/virtualbox-python) Complete implementation of VirtualBox's COM API with a Pythonic interface.
+- [**224**Star][4y] [Java] [nowsecure/android-forensics](https://github.com/nowsecure/android-forensics) Open source Android Forensics app and framework
+- [**224**Star][14d] [GLSL] [westpointltd/tls_prober](https://github.com/westpointltd/tls_prober) A tool to fingerprint SSL/TLS servers
+- [**224**Star][4m] [C] [semmle/securityexploits](https://github.com/semmle/securityexploits) PoC exploits from the Semmle Security Research team
+- [**224**Star][2y] [Py] [rub-syssec/syntia](https://github.com/rub-syssec/syntia) Program synthesis based deobfuscation framework for the USENIX 2017 paper "Syntia: Synthesizing the Semantics of Obfuscated Code"
+- [**224**Star][5m] [Py] [rub-nds/corstest](https://github.com/rub-nds/corstest) A simple CORS misconfiguration scanner
+- [**224**Star][4y] [PHP] [ripsscanner/rips](https://github.com/ripsscanner/rips) RIPS - A static source code analyser for vulnerabilities in PHP scripts
+- [**224**Star][6m] [ANTLR] [myriadrf/limesdr-usb](https://github.com/myriadrf/limesdr-usb) USB 3.0 version of the LimeSDR board
+- [**224**Star][1m] [C] [libyal/libfvde](https://github.com/libyal/libfvde) Library and tools to access FileVault Drive Encryption (FVDE) encrypted volumes
+- [**224**Star][6d] [Py] [kmyk/online-judge-tools](https://github.com/kmyk/online-judge-tools) Tools for online judge services. Downloading sample cases, Testing/Submitting your code, and various utilities.
+- [**224**Star][9d] [Py] [jamesturk/django-honeypot](https://github.com/jamesturk/django-honeypot)
+- [**224**Star][1y] [Shell] [edoverflow/megplus](https://github.com/edoverflow/megplus) Automated reconnaissance wrapper — TomNomNom's meg on steroids. [DEPRECATED]
+- [**224**Star][2d] [Py] [cyberreboot/poseidon](https://github.com/cyberreboot/poseidon) Poseidon is a python-based application that leverages software defined networks (SDN) to acquire and then feed network traffic to a number of machine learning techniques. The machine learning algorithms classify and predict both the type of device and if the device is acting normally or abnormally.
+- [**224**Star][1y] [PHP] [cuckoosandbox/monitor](https://github.com/cuckoosandbox/monitor) The new Cuckoo Monitor.
+- [**224**Star][1y] [Shell] [ctfs/write-ups-2018](https://github.com/ctfs/write-ups-2018) Wiki-like CTF write-ups repository, maintained by the community. 2018
+- [**224**Star][3y] [Py] [az0ne/github_nuggests](https://github.com/az0ne/github_nuggests) 自动爬取Github上文件敏感信息泄露,抓取邮箱密码并自动登录邮箱验证,支持126,qq,sina,163邮箱
+- [**224**Star][3y] [PHP] [aszone/avenger-sh](https://github.com/aszone/avenger-sh) Project for finding vunerabilities in mass.
+- [**224**Star][2y] [Py] [9b/chirp](https://github.com/9b/chirp) Interface to manage and centralize Google Alert information
+- [**224**Star][7m] [Java] [0xalexei/infiltrate2019](https://github.com/0xalexei/infiltrate2019) INFILTRATE 2019 Demo Materials
+- [**223**Star][26d] [C++] [boomerangdecompiler/boomerang](https://github.com/BoomerangDecompiler/boomerang) Boomerang Decompiler - Fighting the code-rot :)
+- [**223**Star][3m] [Java] [virb3/trustmealready](https://github.com/virb3/trustmealready) Disable SSL verification and pinning on Android, system-wide
+- [**223**Star][2y] [Go] [vedhavyas/zwfp](https://github.com/vedhavyas/zwfp) Zero-Width fingerprinting
+- [**223**Star][1m] [Dockerfile] [thinkst/canarytokens-docker](https://github.com/thinkst/canarytokens-docker) Docker configuration to quickly setup your own Canarytokens.
+- [**223**Star][4y] [Ruby] [strazzere/apkfuscator](https://github.com/strazzere/apkfuscator) A generic DEX file obfuscator and munger
+- [**223**Star][27d] [Py] [secureworks/dalton](https://github.com/secureworks/dalton) Suricata and Snort IDS rule and pcap testing system
+- [**223**Star][2m] [Shell] [screetsec/sudomy](https://github.com/screetsec/sudomy) Sudomy is a subdomain enumeration tool, created using a bash script, to analyze domains and collect subdomains in fast and comprehensive way . Report output in HTML or CSV format
+- [**223**Star][6m] [Py] [ruped24/toriptables2](https://github.com/ruped24/toriptables2) Tor Iptables script is an anonymizer that sets up iptables and tor to route all services and traffic including DNS through the Tor network.
+- [**223**Star][5m] [JS] [pavanw3b/sh00t](https://github.com/pavanw3b/sh00t) Security Testing is not as simple as right click > Scan. It's messy, a tough game. What if you had missed to test just that one thing and had to regret later? Sh00t is a highly customizable, intelligent platform that understands the life of bug hunters and emphasizes on manual security testing.
+- [**223**Star][10m] [C] [muquit/mailsend](https://github.com/muquit/mailsend) A program to send mail via SMTP from command line
+- [**223**Star][2y] [Max] [maroueneboubakri/lscan](https://github.com/maroueneboubakri/lscan) lscan is a library identification tool on statically linked/stripped binaries
+- [**223**Star][1y] [Java] [ewilded/psychopath](https://github.com/ewilded/psychopath) psychoPATH - an advanced path traversal tool. Features: evasive techniques, dynamic web root list generation, output encoding, site map-searching payload generator, LFI mode, nix & windows support, single byte generator, payload export.
+- [**223**Star][10m] [C#] [equifox/ksdumper](https://github.com/equifox/ksdumper) Dumping processes using the power of kernel space !
+- [**223**Star][3y] [Py] [dxa4481/snapper](https://github.com/dxa4481/snapper) A security tool for grabbing screenshots of many web hosts
+- [**223**Star][11m] [Perl] [daniel-nichter/hackmysql.com](https://github.com/daniel-nichter/hackmysql.com) Deprecated tools from HackMySQL.com
+- [**223**Star][6m] [JS] [cr0hn/vulnerable-node](https://github.com/cr0hn/vulnerable-node) A very vulnerable web site written in NodeJS with the purpose of have a project with identified vulnerabilities to test the quality of security analyzers tools tools
+- [**223**Star][2m] [Go] [caddyserver/forwardproxy](https://github.com/caddyserver/forwardproxy) Forward proxy plugin for the Caddy web server
+- [**223**Star][2m] [Py] [brent-stone/can_reverse_engineering](https://github.com/brent-stone/can_reverse_engineering) Automated Payload Reverse Engineering Pipeline for the Controller Area Network (CAN) protocol
+- [**223**Star][6y] [Shell] [brav0hax/easy-creds](https://github.com/brav0hax/easy-creds) leverages tools for stealing credentials during a pen test
+- [**223**Star][2y] [Py] [beetlechunks/redsails](https://github.com/beetlechunks/redsails) RedSails is a Python based post-exploitation project aimed at bypassing host based security monitoring and logging. DerbyCon 2017 Talk:
+- [**222**Star][3y] [Java] [guardianproject/lildebi](https://github.com/guardianproject/lildebi) UNMAINTAINED please adopt! we can no longer maintain this
+- [**222**Star][1y] [C++] [wnagzihxa1n/browsersecurity](https://github.com/wnagzihxa1n/browsersecurity) 我在学习浏览器安全过程中整理的漏洞分析笔记与相关的学习资料
+- [**222**Star][13d] [PHP] [wapmorgan/phpcodefixer](https://github.com/wapmorgan/phpcodefixer) Analyzer of PHP code to search issues with deprecated functionality in newer interpreter versions.
+- [**222**Star][2d] [vixentael/my-talks](https://github.com/vixentael/my-talks) List of my talks and workshops: security engineering, applied cryptography, secure software development
+- [**222**Star][1y] [Py] [tkcert/mail-security-tester](https://github.com/tkcert/mail-security-tester) A testing framework for mail security and filtering solutions.
+- [**222**Star][2y] [Ruby] [sophsec/ruby-nmap](https://github.com/sophsec/ruby-nmap) A Rubyful interface to the Nmap exploration tool and security / port scanner.
+- [**222**Star][13d] [HTML] [sectalks/sectalks](https://github.com/sectalks/sectalks) CTFs, solutions and presentations
+- [**222**Star][3m] [Py] [rivermont/spidy](https://github.com/rivermont/spidy) The simple, easy to use command line web crawler.
+- [**222**Star][12m] [C++] [rexdf/commandtrayhost](https://github.com/rexdf/commandtrayhost) A command line program monitor systray for Windows
+- [**222**Star][2y] [C] [lgeek/spec_poc_arm](https://github.com/lgeek/spec_poc_arm) Dump privileged ARM system registers from usermode using variant 3a of Meltdown
+- [**222**Star][4y] [lavalamp-/password-lists](https://github.com/lavalamp-/password-lists) Password lists for use in penetration testing situations, broken up by TLD.
+- [**222**Star][7m] [Py] [kingkaki/weblogic-scan](https://github.com/kingkaki/weblogic-scan) weblogic 漏洞扫描工具
+- [**222**Star][2y] [JS] [jameshabben/evolve](https://github.com/jameshabben/evolve) Web interface for the Volatility Memory Forensics Framework
+- [**222**Star][2y] [C++] [intelpt/windowsintelpt](https://github.com/intelpt/windowsintelpt) This driver implements the Intel Processor Trace functionality in Intel Skylake architecture for Microsoft Windows
+- [**222**Star][2y] [C] [iaik/armageddon](https://github.com/iaik/armageddon) This repository contains tools to perform modern cache attacks on ARM.
+- [**222**Star][3m] [Py] [caringcaribou/caringcaribou](https://github.com/caringcaribou/caringcaribou) A friendly car security exploration tool for the CAN bus
+- [**222**Star][4m] [PS] [byt3bl33d3r/offensivedlr](https://github.com/byt3bl33d3r/offensivedlr) Toolbox containing research notes & PoC code for weaponizing .NET's DLR
+- [**222**Star][3y] [axi0mx/alloc8](https://github.com/axi0mx/alloc8) Write-up for alloc8 untethered bootrom exploit for iPhone 3GS
+- [**221**Star][2d] [C] [googleprojectzero/ktrw](https://github.com/googleprojectzero/ktrw) An iOS kernel debugger based on a KTRR bypass for A11 iPhones that works with LLDB.
+- [**221**Star][10m] [Java] [uprootlabs/gngr](https://github.com/uprootlabs/gngr) a cross-platform browser focussed on privacy.
+- [**221**Star][29d] [PS] [tonyphipps/meerkat](https://github.com/tonyphipps/meerkat) A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.
+- [**221**Star][1y] [C] [openorbis/mira-project](https://github.com/openorbis/mira-project) The Homebrew Platform
+- [**221**Star][2y] [Py] [ofek/privy](https://github.com/ofek/privy) An easy, fast lib to correctly password-protect your data
+- [**221**Star][3d] [Py] [mushorg/snare](https://github.com/mushorg/snare) Super Next generation Advanced Reactive honEypot
+- [**221**Star][6m] [Py] [malwarecantfly/vba2graph](https://github.com/malwarecantfly/vba2graph) Generate call graphs from VBA code, for easier analysis of malicious documents.
+- [**221**Star][1y] [C] [hashcat/princeprocessor](https://github.com/hashcat/princeprocessor) Standalone password candidate generator using the PRINCE algorithm
+- [**221**Star][2y] [C++] [ha7ilm/qtcsdr](https://github.com/ha7ilm/qtcsdr) It turns your Raspberry Pi 2 and RTL-SDR into an amateur radio transceiver! (Released under BSD license.)
+- [**221**Star][2y] [Perl] [csirtgadgets/massive-octo-spice](https://github.com/csirtgadgets/massive-octo-spice) DEPRECATED - USE v3 (bearded-avenger)
+- [**221**Star][3m] [Go] [cloudflare/tls-tris](https://github.com/cloudflare/tls-tris) crypto/tls, now with 100% more 1.3. THE API IS NOT STABLE AND DOCUMENTATION IS NOT GUARANTEED.
+- [**221**Star][11m] [Py] [chris408/known_hosts-hashcat](https://github.com/chris408/known_hosts-hashcat) A guide and tool for cracking ssh known_hosts files with hashcat
+- [**221**Star][3y] [Smarty] [analytically/haproxy-ddos](https://github.com/analytically/haproxy-ddos) DDOS and attack resilient HAProxy configuration. To be used behind CloudFlare.
+- [**221**Star][3y] [1u4nx/exploit-exercises-nebula](https://github.com/1u4nx/exploit-exercises-nebula) Exploit-Exercises Nebula全攻略——Linux平台下的漏洞分析入门
+- [**220**Star][7m] [Shell] [t0xst/linux](https://github.com/t0xst/linux) linux安全检查
+- [**220**Star][26d] [Py] [volatilityfoundation/community](https://github.com/volatilityfoundation/community) Volatility plugins developed and maintained by the community
+- [**220**Star][5m] [Shell] [vedetta-com/vedetta](https://github.com/vedetta-com/vedetta) OpenBSD Router Boilerplate
+- [**220**Star][8m] [Go] [valyala/goloris](https://github.com/valyala/goloris) Slowloris for nginx DoS. Written in go
+- [**220**Star][2y] [sh4hin/mobileapp-pentest-cheatsheet](https://github.com/sh4hin/mobileapp-pentest-cheatsheet) The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.
+- [**220**Star][3y] [Standard ML] [rootkovska/codehash.db](https://github.com/rootkovska/codehash.db) A public database for software and firmware hashes
+- [**220**Star][4y] [C] [rapid7/meterpreter](https://github.com/rapid7/meterpreter) THIS REPO IS OBSOLETE. USE
+- [**220**Star][11m] [PHP] [paragonie/anti-csrf](https://github.com/paragonie/anti-csrf) Full-Featured Anti-CSRF Library
+- [**220**Star][8m] [opennetworkingfoundation/delta](https://github.com/opennetworkingfoundation/delta) PROJECT DELTA: SDN SECURITY EVALUATION FRAMEWORK
+- [**220**Star][1y] [Go] [maksadbek/tcpovericmp](https://github.com/maksadbek/tcpovericmp) TCP implementation over ICMP protocol to bypass firewalls
+- [**220**Star][8m] [letoram/senseye](https://github.com/letoram/senseye) Dynamic Visual Debugging / Reverse Engineering Toolsuite
+- [**220**Star][2y] [Py] [kbdancer/tplinkkey](https://github.com/kbdancer/tplinkkey) 根据TPLINK系列路由器存在的漏洞批量扫描获取wifi密码
+- [**220**Star][4y] [PS] [jseidl/babadook](https://github.com/jseidl/babadook) Connection-less Powershell Persistent and Resilient Backdoor
+- [**220**Star][2m] [Py] [initstring/uptux](https://github.com/initstring/uptux) Linux privilege escalation checks (systemd, dbus, socket fun, etc)
+- [**220**Star][12m] [C] [gkdr/lurch](https://github.com/gkdr/lurch) XEP-0384: OMEMO Encryption for libpurple.
+- [**220**Star][2y] [Py] [feicong/jni_helper](https://github.com/feicong/jni_helper) Android SO automatic injection
+- [**220**Star][1y] [C#] [easy66/monohooker](https://github.com/easy66/monohooker) hook C# method at runtime without modify dll file (such as UnityEditor.dll)
+- [**220**Star][2y] [C++] [bee13oy/av_kernel_vulns](https://github.com/bee13oy/av_kernel_vulns) Pocs for Antivirus Software‘s Kernel Vulnerabilities
+- [**220**Star][2y] [Py] [artkond/cisco-snmp-rce](https://github.com/artkond/cisco-snmp-rce) Cisco IOS SNMP RCE PoC
+- [**219**Star][2y] [itrump/shadowsocksrss](https://github.com/itrump/shadowsocksrss) shadowsocksR backup, windows / android / mac downloads, source code backup
+- [**219**Star][4m] [security-checklist/php-security-check-list](https://github.com/security-checklist/php-security-check-list) PHP Security Check List [ EN ]
+- [**219**Star][16d] [Py] [wazuh/wazuh-ruleset](https://github.com/wazuh/wazuh-ruleset) ruleset is used to detect attacks, intrusions, software misuse, configuration problems, application errors, malware, rootkits, system anomalies or security policy violations.
+- [**219**Star][2y] [Py] [vlall/darksearch](https://github.com/vlall/darksearch) query cached onion sites, irc chatrooms, various pdfs, game chats, blackhat forums etc
+- [**219**Star][8m] [Py] [skewwg/vulscan](https://github.com/skewwg/vulscan) 漏洞扫描:st2、tomcat、未授权访问等等
+- [**219**Star][8d] [sab0tag3d/mitm-cheatsheet](https://github.com/sab0tag3d/mitm-cheatsheet) All MITM attacks in one place.
+- [**219**Star][5m] [ObjC] [rickyzhang82/tethering](https://github.com/rickyzhang82/tethering) Proxy and DNS Server on iOS
+- [**219**Star][2y] [Shell] [r00t-3xp10it/trojanizer](https://github.com/r00t-3xp10it/trojanizer) Trojanize your payload - WinRAR (SFX) automatization - under Linux distros
+- [**219**Star][12m] [Shell] [nviso-be/magisktrustusercerts](https://github.com/nviso-be/magisktrustusercerts) A Magisk module that automatically adds user certificates to the system root CA store
+- [**219**Star][2y] [Ruby] [nahamsec/lazys3](https://github.com/nahamsec/lazys3)
+- [**219**Star][2y] [Go] [gamexg/proxyclient](https://github.com/gamexg/proxyclient) golang 代理库,和net一致的API。支持 socks4、socks4a、socks5、http、https 等代理协议。
+- [**219**Star][2m] [C] [david942j/ctf-writeups](https://github.com/david942j/ctf-writeups) Collection of scripts and writeups
+- [**219**Star][8m] [Py] [coalfire-research/deathmetal](https://github.com/coalfire-research/deathmetal) Red team & penetration testing tools to exploit the capabilities of Intel AMT
+- [**219**Star][7m] [bhdresh/dejavu](https://github.com/bhdresh/dejavu) deception framework which can be used to deploy decoys across the infrastructure
+- [**219**Star][1y] [basilfx/tradfri-hacking](https://github.com/basilfx/tradfri-hacking) Hacking the IKEA TRÅDFRI light bulbs and accessories.
+- [**218**Star][1m] [PHP] [zigoo0/jsonbee](https://github.com/zigoo0/jsonbee) A ready to use JSONP endpoints/payloads to help bypass content security policy (CSP) of different websites.
+- [**218**Star][8m] [JS] [zhuyingda/veneno](https://github.com/zhuyingda/veneno) 用Node.js编写的Web安全测试框架
+- [**218**Star][3y] [C] [sslab-gatech/opensgx](https://github.com/sslab-gatech/opensgx) An open platform for Intel SGX Environments & Prerequisites
+- [**218**Star][1y] [PHP] [softius/php-cross-domain-proxy](https://github.com/softius/php-cross-domain-proxy) PHP Proxy for Cross Domain Requests
+- [**218**Star][1y] [JS] [roccomuso/kickthemout](https://github.com/roccomuso/kickthemout) Kick devices off your network by performing an ARP Spoof attack with Node.js.
+- [**218**Star][1y] [Py] [nccgroup/driverbuddy](https://github.com/nccgroup/driverbuddy) IDA Python script to assist with the reverse engineering of Windows kernel drivers.
+- [**218**Star][6m] [Py] [mgeeky/tomcatwardeployer](https://github.com/mgeeky/tomcatwardeployer) Apache Tomcat auto WAR deployment & pwning penetration testing tool.
+- [**218**Star][1y] [Py] [mazen160/server-status_pwn](https://github.com/mazen160/server-status_pwn) A script that monitors and extracts requested URLs and clients connected to the service by exploiting publicly accessible Apache server-status instances.
+- [**218**Star][11m] [AppleScript] [lifepillar/csvkeychain](https://github.com/lifepillar/csvkeychain) Import/export between Apple Keychain.app and plain CSV file.
+- [**218**Star][9m] [jesusprubio/awesome-nodejs-pentest](https://github.com/jesusprubio/awesome-nodejs-pentest)
+- [**218**Star][8m] [ivan1ee/net-deserialize](https://github.com/ivan1ee/net-deserialize) 总结了十篇.Net反序列化文章,持续更新
+- [**218**Star][10m] [C] [feexd/pocs](https://github.com/feexd/pocs)
+- [**218**Star][2m] [C++] [d3v1l401/findcrypt-ghidra](https://github.com/d3v1l401/findcrypt-ghidra) IDA Pro's FindCrypt ported to Ghidra, with an updated and customizable signature database
+- [**218**Star][2y] [cure53/browser-sec-whitepaper](https://github.com/cure53/browser-sec-whitepaper) Cure53 Browser Security White Paper
+- [**218**Star][2y] [Py] [chromium/web-page-replay](https://github.com/chromium/web-page-replay) Record live Web pages and use them for local performance testing!
+- [**218**Star][3m] [Shell] [blacktop/docker-cuckoo](https://github.com/blacktop/docker-cuckoo) Cuckoo Sandbox Dockerfile
+- [**217**Star][10m] [JS] [jopyth/mmm-remote-control](https://github.com/jopyth/mmm-remote-control) Magic Mirror Module to shutdown or configure your mirror
+- [**217**Star][10m] [Py] [mckinsey666/vocabs](https://github.com/Mckinsey666/vocabs) A lightweight online dictionary integration to the command line
+- [**217**Star][2y] [C++] [spacehuhn/arduinopcap](https://github.com/spacehuhn/arduinopcap) A library for creating and sending .pcap files for Wireshark and other programms.
+- [**217**Star][1y] [Py] [sensepost/spartan](https://github.com/sensepost/spartan) Frontpage and Sharepoint fingerprinting and attack tool.
+- [**217**Star][3y] [Py] [rajeshmajumdar/brutexss](https://github.com/rajeshmajumdar/brutexss) BruteXSS is a tool written in python simply to find XSS vulnerabilities in web application. This tool was originally developed by Shawar Khan in CLI. I just redesigned it and made it GUI for more convienience.
+- [**217**Star][3d] [C++] [p4lang/p4c](https://github.com/p4lang/p4c) P4_16 prototype compiler
+- [**217**Star][27d] [Py] [nteseyes/pylane](https://github.com/nteseyes/pylane) An python vm injector with debug tools, based on gdb.
+- [**217**Star][2y] [Py] [maxwellkoh/2fassassin](https://github.com/maxwellkoh/2fassassin) Bypass Two-Factor-Authentication
+- [**217**Star][2d] [C] [libyal/libesedb](https://github.com/libyal/libesedb) Library and tools to access the Extensible Storage Engine (ESE) Database File (EDB) format.
+- [**217**Star][9m] [Go] [justmao945/mallory](https://github.com/justmao945/mallory) HTTP/HTTPS proxy over SSH
+- [**217**Star][9m] [Go] [joncooperworks/judas](https://github.com/joncooperworks/judas) a phishing proxy
+- [**217**Star][4m] [Py] [isaacdelly/plutus](https://github.com/isaacdelly/plutus) An automated bitcoin wallet collider that brute forces random wallet addresses
+- [**217**Star][4m] [Py] [iojw/socialscan](https://github.com/iojw/socialscan) Check email address and username availability on online platforms with 100% accuracy
+- [**217**Star][1y] [Py] [dionach/cmsmap](https://github.com/dionach/cmsmap) CMSmap is a python open source CMS scanner that automates the process of detecting security flaws of the most popular CMSs.
+- [**217**Star][16d] [Puppet] [dev-sec/puppet-os-hardening](https://github.com/dev-sec/puppet-os-hardening) This puppet module provides numerous security-related configurations, providing all-round base protection.
+- [**217**Star][2y] [PS] [arno0x/dbc2](https://github.com/arno0x/dbc2) DBC2 (DropboxC2) is a modular post-exploitation tool, composed of an agent running on the victim's machine, a controler, running on any machine, powershell modules, and Dropbox servers as a means of communication.
+- [**216**Star][3y] [Java] [zhengmin1989/wechatsportcheat](https://github.com/zhengmin1989/wechatsportcheat) 手把手教你当微信运动第一名 – 利用Android Hook进行微信运动作弊
+- [**216**Star][23d] [JS] [strangerealintel/cyberthreatintel](https://github.com/strangerealintel/cyberthreatintel) Analysis of malware and Cyber Threat Intel of APT and cybercriminals groups
+- [**216**Star][6y] [Shell] [silverfoxx/pwnstar](https://github.com/silverfoxx/pwnstar) PwnSTAR (Pwn SofT-Ap scRipt) - for all your fake-AP needs!
+- [**216**Star][10m] [puresec/awesome-serverless-security](https://github.com/puresec/awesome-serverless-security) A curated list of awesome serverless security resources such as (e)books, articles, whitepapers, blogs and research papers.
+- [**216**Star][1y] [PS] [lukebaggett/dnscat2-powershell](https://github.com/lukebaggett/dnscat2-powershell) A Powershell client for dnscat2, an encrypted DNS command and control tool.
+- [**216**Star][2m] [Py] [icsec/airpwn-ng](https://github.com/icsec/airpwn-ng) force the target's browser to do what we want
+- [**216**Star][5m] [guardrailsio/awesome-dotnet-security](https://github.com/guardrailsio/awesome-dotnet-security) Awesome .NET Security Resources
+- [**216**Star][6d] [JS] [giper45/dockersecurityplayground](https://github.com/giper45/dockersecurityplayground) A Microservices-based framework for the study of Network Security and Penetration Test techniques
+- [**216**Star][1y] [foobarto/redteam-notebook](https://github.com/foobarto/redteam-notebook) Collection of commands, tips and tricks and references I found useful during preparation for OSCP exam.
+- [**216**Star][3y] [Py] [darryllane/bluto-old](https://github.com/darryllane/bluto-old) Recon, Subdomain Bruting, Zone Transfers
+- [**216**Star][2y] [Py] [003random/003recon](https://github.com/003random/003recon) Some tools to automate recon - 003random
+- [**215**Star][25d] [JS] [saul/demofile](https://github.com/saul/demofile) Node.js library for parsing Counter-Strike: Global Offensive demo files
+- [**215**Star][3m] [Py] [shodansploit/shodansploit](https://github.com/shodansploit/shodansploit)
+- [**215**Star][3m] [C++] [lifting-bits/grr](https://github.com/lifting-bits/grr) High-throughput fuzzer and emulator of DECREE binaries
+- [**215**Star][1y] [C] [meliot/filewatcher](https://github.com/meliot/filewatcher) A simple auditing utility for macOS
+- [**215**Star][2m] [C] [xyzz/gamecard-microsd](https://github.com/xyzz/gamecard-microsd) microSD adapter for PlayStation Vita
+- [**215**Star][1y] [PHP] [wofeiwo/webcgi-exploits](https://github.com/wofeiwo/webcgi-exploits) Multi-language web CGI interfaces exploits.
+- [**215**Star][2y] [Py] [thiber-org/userline](https://github.com/thiber-org/userline) Query and report user logons relations from MS Windows Security Events
+- [**215**Star][9m] [C] [sleinen/samplicator](https://github.com/sleinen/samplicator) Send copies of (UDP) datagrams to multiple receivers, with optional sampling and spoofing
+- [**215**Star][11m] [C#] [rainwayapp/warden](https://github.com/rainwayapp/warden) Warden.NET is an easy to use process management library for keeping track of processes on Windows.
+- [**215**Star][7d] [Py] [rackerlabs/scantron](https://github.com/rackerlabs/scantron) A distributed nmap / masscan scanning framework
+- [**215**Star][5y] [Py] [qgriffith/openeats](https://github.com/qgriffith/openeats) Recipe Management Site created in Django
+- [**215**Star][1y] [Go] [orderbynull/lottip](https://github.com/orderbynull/lottip) Simple MySQL proxy for query logging with web GUI
+- [**215**Star][3y] [Py] [mkorman90/volatilitybot](https://github.com/mkorman90/volatilitybot) An automated memory analyzer for malware samples and memory dumps
+- [**215**Star][2y] [Py] [mailinneberg/blueborne](https://github.com/mailinneberg/blueborne) Purpose only! The dangers of Bluetooth implementations: Unveiling zero day vulnerabilities and security flaws in modern Bluetooth stacks.
+- [**215**Star][6y] [Perl] [llaera/slowloris.pl](https://github.com/llaera/slowloris.pl) A new DOS Perl Programm
+- [**215**Star][2y] [Py] [lennonchin/code-confuse-plugin](https://github.com/lennonchin/code-confuse-plugin) A plugin to confuse codes in iOS Platform.
+- [**215**Star][1m] [Py] [khast3x/redcloud](https://github.com/khast3x/redcloud) Comfy & powerful Red Team Infrastructure deployement using Docker
+- [**215**Star][1m] [Py] [inquest/python-iocextract](https://github.com/inquest/python-iocextract) Defanged Indicator of Compromise (IOC) Extractor.
+- [**215**Star][2m] [C] [hyc/fcrackzip](https://github.com/hyc/fcrackzip) A braindead program for cracking encrypted ZIP archives. Forked from
+- [**215**Star][6m] [Py] [gmr/queries](https://github.com/gmr/queries) PostgreSQL database access simplified
+- [**215**Star][2y] [Py] [famavott/osint-scraper](https://github.com/famavott/osint-scraper) Social Recon
+- [**215**Star][3m] [PHP] [cyrus-and/fracker](https://github.com/cyrus-and/fracker) PHP function tracker
+- [**215**Star][5y] [Py] [bonsaiviking/nfspy](https://github.com/bonsaiviking/nfspy) ID-spoofing NFS client
+- [**214**Star][2y] [C#] [azure99/shadowsocksrcsm](https://github.com/azure99/shadowsocksrcsm) SSRC#魔改版,修复原版链接并进行人性化修改
+- [**214**Star][1y] [Py] [threatresponse/aws_ir](https://github.com/threatresponse/aws_ir) Python installable command line utiltity for mitigation of host and key compromises.
+- [**214**Star][11m] [Shell] [proxycannon/proxycannon-ng](https://github.com/proxycannon/proxycannon-ng) A private botnet using multiple cloud environments for pentesters and red teamers. - Built by the community during a hackathon at the WWHF 2018 security conference
+- [**214**Star][9m] [PS] [outflanknl/excel4-dcom](https://github.com/outflanknl/excel4-dcom) PowerShell and Cobalt Strike scripts for lateral movement using Excel 4.0 / XLM macros via DCOM (direct shellcode injection in Excel.exe)
+- [**214**Star][6d] [C] [open-mpi/hwloc](https://github.com/open-mpi/hwloc) Hardware locality (hwloc)
+- [**214**Star][4y] [Py] [mitsuhiko/python-regex-scanner](https://github.com/mitsuhiko/python-regex-scanner) Demo of how to use the underlying SRE engine to build a regex scanner
+- [**214**Star][9d] [Go] [jasonish/evebox](https://github.com/jasonish/evebox) Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search
+- [**214**Star][2d] [Py] [hyperspy/hyperspy](https://github.com/hyperspy/hyperspy) Multidimensional data analysis
+- [**214**Star][4y] [C] [fuzzysecurity/unix-privesc](https://github.com/fuzzysecurity/unix-privesc) Local UNIX PrivEsc Aggregation
+- [**214**Star][6m] [C#] [erfg12/memory.dll](https://github.com/erfg12/memory.dll) C# Hacking library for making PC game trainers.
+- [**214**Star][2m] [C] [dns-oarc/dnscap](https://github.com/dns-oarc/dnscap) Network capture utility designed specifically for DNS traffic
+- [**214**Star][6d] [Shell] [controlplaneio/kubesec](https://github.com/controlplaneio/kubesec) Security risk analysis for Kubernetes resources
+- [**213**Star][7m] [Py] [xhak9x/fbi](https://github.com/xhak9x/fbi) Facebook Information
+- [**213**Star][3y] [C++] [xdnice/pcshare](https://github.com/xdnice/pcshare) PCShare是一款强大的远程控制软件,可以监视目标机器屏幕、注册表、文件系统等。
+- [**213**Star][2y] [Py] [wwong99/pentest-notes](https://github.com/wwong99/pentest-notes)
+- [**213**Star][2y] [Py] [trustedsec/egressbuster](https://github.com/trustedsec/egressbuster) Egressbuster is a method to check egress filtering and identify if ports are allowed. If they are, you can automatically spawn a shell.
+- [**213**Star][1m] [C] [trailofbits/krf](https://github.com/trailofbits/krf) A kernelspace syscall interceptor and randomized faulter
+- [**213**Star][9m] [Py] [teag1e/burpcollector](https://github.com/teag1e/burpcollector) 通过BurpSuite来构建自己的爆破字典,可以通过字典爆破来发现隐藏资产。
+- [**213**Star][2m] [Java] [tdunning/log-synth](https://github.com/tdunning/log-synth) Generates more or less realistic log data for testing simple aggregation queries.
+- [**213**Star][5m] [Py] [spiderlabs/hosthunter](https://github.com/spiderlabs/hosthunter) HostHunter a recon tool for discovering hostnames using OSINT techniques.
+- [**213**Star][2y] [C#] [shanek2/invtero.net](https://github.com/shanek2/invtero.net) A high speed (Gbps) Forensics, Memory integrity & assurance. Includes offensive & defensive memory capabilities. Find/Extract processes, hypervisors (including nested) in memory dumps using microarchitechture independent Virtual Machiene Introspection techniques
+- [**213**Star][5m] [Py] [quoscient/octopus](https://github.com/quoscient/octopus) Security Analysis tool for WebAssembly module and Blockchain Smart Contracts (BTC/ETH/NEO/EOS)
+- [**213**Star][5m] [Py] [pynetwork/pypcap](https://github.com/pynetwork/pypcap) python libpcap module, forked from code.google.com/p/pypcap, now actively maintained
+- [**213**Star][1y] [Kotlin] [paphonb/androidp-ify](https://github.com/paphonb/androidp-ify) [Xposed] Use features introduced in Android P on your O+ Device!
+- [**213**Star][2y] [C++] [nu1lctf/n1ctf-2018](https://github.com/nu1lctf/n1ctf-2018) Official repository containing files related to N1CTF 2018.
+- [**213**Star][5m] [C] [n0b0dycn/redis-rogue-server](https://github.com/n0b0dycn/redis-rogue-server) Redis(<=5.0.5) RCE
+- [**213**Star][4y] [HTML] [musalbas/address-spoofing-poc](https://github.com/musalbas/address-spoofing-poc) Chrome address spoofing vulnerability proof-of-concept for HTTPS. (Original by David Leo.)
+- [**213**Star][1y] [Py] [kurobeats/fimap](https://github.com/kurobeats/fimap) fimap is a little python tool which can find, prepare, audit, exploit and even google automatically for local and remote file inclusion bugs in webapps.
+- [**213**Star][3m] [Py] [jordanpotti/cloudscraper](https://github.com/jordanpotti/cloudscraper) Tool to enumerate targets in search of cloud resources. S3 Buckets, Azure Blobs, Digital Ocean Storage Space.
+- [**213**Star][2y] [C++] [jamesp6000/wsprrypi](https://github.com/jamesp6000/wsprrypi) Raspberry Pi WSPR transmitter using NTP based frequency calibration
+- [**213**Star][1m] [Go] [improbable-eng/kedge](https://github.com/improbable-eng/kedge) kEdge - Kubernetes Edge Proxy for gRPC and HTTP Microservices
+- [**213**Star][1y] [Py] [feicong/lua_re](https://github.com/feicong/lua_re) reverse engineering for lua(lua/luac/luajit/lua_dec/lua_loader/lua_proc)
+- [**213**Star][1y] [Py] [evict/poc_cve-2018-1002105](https://github.com/evict/poc_cve-2018-1002105) PoC for CVE-2018-1002105.
+- [**213**Star][2y] [Py] [euphrat1ca/fuzzdb-collect](https://github.com/euphrat1ca/fuzzdb-collect) 网络上安全资源的搜集
+- [**213**Star][3y] [C#] [dxflatline/flatpipes](https://github.com/dxflatline/flatpipes) A TCP proxy over named pipes. Originally created for maintaining a meterpreter session over 445 for less network alarms.
+- [**213**Star][4y] [Py] [ctfs/write-ups-2013](https://github.com/ctfs/write-ups-2013) Wiki-like CTF write-ups repository, maintained by the community. 2013
+- [**213**Star][4y] [PLpgSQL] [cseagle/freedom](https://github.com/cseagle/freedom) capstone based disassembler for extracting to binnavi
+- [**213**Star][5m] [Shell] [cryptolok/crykex](https://github.com/cryptolok/crykex) Linux Memory Cryptographic Keys Extractor
+- [**213**Star][5m] [Py] [coffeehb/tools](https://github.com/coffeehb/tools) 一些实用的python脚本
+- [**213**Star][2y] [C++] [bromiumlabs/packerattacker](https://github.com/bromiumlabs/packerattacker) C++ application that uses memory and code hooks to detect packers
+- [**213**Star][8m] [Py] [atlas0fd00m/rfcat](https://github.com/atlas0fd00m/rfcat) swiss-army knife of ISM band radio
+- [**212**Star][2y] [hackathonhackers/groups](https://github.com/hackathonhackers/groups) A listing of all the subgroups of Hackathon Hackers
+- [**212**Star][3m] [C++] [atxsinn3r/vulncases](https://github.com/atxsinn3r/VulnCases) Oh it's just a bunch of vulns for references.
+- [**212**Star][1y] [C] [suvllian/process-inject](https://github.com/suvllian/process-inject) 在Windows环境下的进程注入方法:远程线程注入、创建进程挂起注入、反射注入、APCInject、SetWindowHookEX注入
+- [**212**Star][2d] [Py] [sofianehamlaoui/lockdoor-framework](https://github.com/sofianehamlaoui/lockdoor-framework)
+- [**212**Star][3d] [Ruby] [puppetlabs/puppetlabs-postgresql](https://github.com/puppetlabs/puppetlabs-postgresql) Puppet module for managing PostgreSQL
+- [**212**Star][16d] [Py] [nyxgeek/lyncsmash](https://github.com/nyxgeek/lyncsmash) locate and attack Lync/Skype for Business
+- [**212**Star][4m] [Shell] [neo23x0/fenrir](https://github.com/neo23x0/fenrir) Simple Bash IOC Scanner
+- [**212**Star][2m] [Julia] [juliaci/benchmarktools.jl](https://github.com/juliaci/benchmarktools.jl) A benchmarking framework for the Julia language
+- [**212**Star][2y] [Shell] [johnnyxmas/scancannon](https://github.com/johnnyxmas/scancannon) Combines the speed of masscan with the reliability and detailed enumeration of nmap
+- [**212**Star][2y] [Shell] [jakewmeyer/geo](https://github.com/jakewmeyer/geo) A Bash utility for easy wan, lan, router, dns, mac address, and geolocation output,
+- [**212**Star][4m] [Py] [infosecn1nja/maliciousmacromsbuild](https://github.com/infosecn1nja/maliciousmacromsbuild) Generates Malicious Macro and Execute Powershell or Shellcode via MSBuild Application Whitelisting Bypass.
+- [**212**Star][2m] [Py] [eset/malware-research](https://github.com/eset/malware-research) Code written as part of our various malware investigations
+- [**212**Star][2y] [PS] [cobbr/psamsi](https://github.com/cobbr/psamsi) PSAmsi is a tool for auditing and defeating AMSI signatures.
+- [**211**Star][7m] [HTML] [facebook/delegatedrecoveryspecification](https://github.com/facebook/DelegatedRecoverySpecification) Allows an application to delegate the capability to recover an account to an account controlled by the same user or entity at a third party service provider.
+- [**211**Star][3y] [Py] [newbee119/telnet-scanner](https://github.com/NewBee119/telnet-scanner) telnet服务密码撞库
+- [**211**Star][3m] [Shell] [xu-jian/vps](https://github.com/xu-jian/vps) 个人笔记汇总
+- [**211**Star][1m] [C++] [trailofbits/winchecksec](https://github.com/trailofbits/winchecksec) Checksec, but for Windows: static detection of executable's opt-in security mitigations
+- [**211**Star][3d] [C++] [thalium/icebox](https://github.com/thalium/icebox) Virtual Machine Introspection, Tracing & Debugging
+- [**211**Star][7m] [C] [owasp/igoat](https://github.com/owasp/igoat) OWASP iGoat - A Learning Tool for iOS App Pentesting and Security by Swaroop Yermalkar
+- [**211**Star][9m] [Py] [nullarray/dorknet](https://github.com/nullarray/dorknet) Selenium powered Python script to automate searching for vulnerable web apps.
+- [**211**Star][1y] [Py] [mateuszk87/pcapviz](https://github.com/mateuszk87/pcapviz) Visualize network topologies and collect graph statistics based on pcap files
+- [**211**Star][1y] [C#] [leechristensen/spoolsample](https://github.com/leechristensen/spoolsample) PoC tool to coerce Windows hosts authenticate to other machines via the MS-RPRN RPC interface. This is possible via other protocols as well.
+- [**211**Star][10m] [jeansgit/redteam](https://github.com/jeansgit/redteam) RedTeam资料收集整理
+- [**211**Star][7m] [Py] [jas502n/cnvd-c-2019-48814](https://github.com/jas502n/cnvd-c-2019-48814) WebLogic wls9-async反序列化远程命令执行漏洞
+- [**211**Star][1m] [Py] [inquest/omnibus](https://github.com/inquest/omnibus) The OSINT Omnibus (beta release)
+- [**211**Star][9m] [Py] [gosecure/php7-opcache-override](https://github.com/gosecure/php7-opcache-override) Security-related PHP7 OPcache abuse tools and demo
+- [**211**Star][4m] [Ruby] [bdmac/strong_password](https://github.com/bdmac/strong_password) Entropy-based password strength checking for Ruby and Rails.
+- [**211**Star][2y] [Py] [arno0x/ntlmrelaytoews](https://github.com/arno0x/ntlmrelaytoews) ntlm relay attack to Exchange Web Services
+- [**211**Star][20d] [Shell] [aress31/wirespy](https://github.com/aress31/wirespy) Framework designed to automate various wireless networks attacks (the project was presented on Pentester Academy TV's toolbox in 2017).
+- [**210**Star][1y] [Py] [elmundio87/terraform_validate](https://github.com/elmundio87/terraform_validate) Assists in the enforcement of user-defined standards in Terraform
+- [**210**Star][9m] [Go] [cloudflare/cloudflare-ingress-controller](https://github.com/cloudflare/cloudflare-ingress-controller) A Kubernetes ingress controller for Cloudflare's Argo Tunnels
+- [**210**Star][1m] [Shell] [zfl9/gfwlist2privoxy](https://github.com/zfl9/gfwlist2privoxy) 将 gfwlist.txt(Adblock Plus 规则)转换为 privoxy.action
+- [**210**Star][1y] [C++] [tandasat/pgresarch](https://github.com/tandasat/pgresarch) PatchGuard Research
+- [**210**Star][4m] [PHP] [rizer0/log-killer](https://github.com/rizer0/log-killer) Clear all your logs in [linux/windows] servers
+- [**210**Star][11m] [Go] [ooclab/otunnel](https://github.com/ooclab/otunnel) peer-to-peer tunnel tool
+- [**210**Star][5m] [Py] [nucypher/nufhe](https://github.com/nucypher/nufhe) NuCypher fully homomorphic encryption (NuFHE) library implemented in Python
+- [**210**Star][12m] [Java] [neo23x0/fnord](https://github.com/neo23x0/fnord) Pattern Extractor for Obfuscated Code
+- [**210**Star][3m] [C++] [mapbox/jni.hpp](https://github.com/mapbox/jni.hpp) A modern, type-safe, header-only, C++14 wrapper for JNI
+- [**210**Star][2y] [Py] [kamorin/dhcpig](https://github.com/kamorin/dhcpig) DHCP exhaustion script written in python using scapy network library
+- [**210**Star][16d] [Java] [jikesrvm/jikesrvm](https://github.com/jikesrvm/jikesrvm) Jikes RVM (Research Virtual Machine)
+- [**210**Star][7y] [haohaolee/shadowsocks-openwrt](https://github.com/haohaolee/shadowsocks-openwrt) A package of shadowsocks for OpenWrt
+- [**210**Star][4m] [C++] [eternityx/deadcell-csgo](https://github.com/eternityx/deadcell-csgo) Full source to the CS:GO cheat
+- [**210**Star][4m] [Java] [dschanoeh/kayak](https://github.com/dschanoeh/kayak) Kayak is a CAN bus analysis tool based on SocketCAN
+- [**210**Star][8m] [JS] [dirtbags/pcapdb](https://github.com/dirtbags/pcapdb) A Distributed, Search-Optimized Full Packet Capture System
+- [**210**Star][6m] [Py] [dirkjanm/krbrelayx](https://github.com/dirkjanm/krbrelayx) Kerberos unconstrained delegation abuse toolkit
+- [**210**Star][1y] [Py] [danmcinerney/msf-autoshell](https://github.com/danmcinerney/msf-autoshell) Feed the tool a .nessus file and it will automatically get you MSF shell
+- [**209**Star][6d] [Py] [f0cker/crackq](https://github.com/f0cker/crackq) CrackQ: A Python Hashcat cracking queue system
+- [**209**Star][2y] [PHP] [defuse/crackstation-hashdb](https://github.com/defuse/crackstation-hashdb) CrackStation.net's Lookup Table Implementation.
+- [**209**Star][2y] [C] [fsecurelabs/osxfuzz](https://github.com/FSecureLABS/OSXFuzz) macOS Kernel Fuzzer
+- [**209**Star][7m] [C++] [googleprojectzero/bochspwn](https://github.com/googleprojectzero/bochspwn) A Bochs-based instrumentation project designed to log kernel memory references, to identify "double fetches" and other OS vulnerabilities
+- [**209**Star][3y] [Shell] [ztgrace/sticky_keys_hunter](https://github.com/ztgrace/sticky_keys_hunter) A script to test an RDP host for sticky keys and utilman backdoor.
+- [**209**Star][3y] [Java] [subgraph/orchid](https://github.com/subgraph/orchid)
+- [**209**Star][2y] [C] [silvermoonsecurity/passivefuzzframeworkosx](https://github.com/silvermoonsecurity/passivefuzzframeworkosx) This framework is for fuzzing OSX kernel vulnerability based on passive inline hook mechanism in kernel mode.
+- [**209**Star][17d] [sigp/solidity-security-blog](https://github.com/sigp/solidity-security-blog) Comprehensive list of known attack vectors and common anti-patterns
+- [**209**Star][2m] [Py] [si9int/cc.py](https://github.com/si9int/cc.py) Extracting URLs of a specific target based on the results of "commoncrawl.org"
+- [**209**Star][2y] [JS] [shutterstock/lil-brother](https://github.com/shutterstock/lil-brother) Track clicks and other client-side events on web pages
+- [**209**Star][1m] [shogunlab/awesome-hyper-v-exploitation](https://github.com/shogunlab/awesome-hyper-v-exploitation) A curated list of Hyper-V exploitation resources, fuzzing and vulnerability research.
+- [**209**Star][3y] [C++] [shinnok/johnny](https://github.com/shinnok/johnny) The GUI frontend to the John the Ripper password cracker
+- [**209**Star][7m] [PHP] [samdark/yii2-webshell](https://github.com/samdark/yii2-webshell) Web shell allows to run yii console commands using a browser
+- [**209**Star][1y] [MATLAB] [lts4/deepfool](https://github.com/lts4/deepfool) A simple and accurate method to fool deep neural networks
+- [**209**Star][29d] [Py] [leancloud/satori](https://github.com/leancloud/satori) LeanCloud 维护的监控系统
+- [**209**Star][2y] [k0keoyo/some-kernel-fuzzing-paper](https://github.com/k0keoyo/some-kernel-fuzzing-paper) Some kernel fuzzing paper about windows and linux
+- [**209**Star][5m] [C] [hunter-ht-2018/ptfuzzer](https://github.com/hunter-ht-2018/ptfuzzer) Improving AFL by using Intel PT to collect branch information
+- [**209**Star][2m] [Java] [h3xstream/http-script-generator](https://github.com/h3xstream/http-script-generator) ZAP/Burp plugin that generate script to reproduce a specific HTTP request (Intended for fuzzing or scripted attacks)
+- [**209**Star][8m] [Py] [djm/python-scrapyd-api](https://github.com/djm/python-scrapyd-api) A Python wrapper for working with Scrapyd's API.
+- [**209**Star][3d] [decalage2/awesome-security-hardening](https://github.com/decalage2/awesome-security-hardening) A collection of awesome security hardening guides, tools and other resources
+- [**209**Star][2y] [Py] [danigargu/explodingcan](https://github.com/danigargu/explodingcan) An implementation of NSA's ExplodingCan exploit in Python
+- [**209**Star][7m] [C] [coolervoid/raptor_waf](https://github.com/coolervoid/raptor_waf) Raptor - WAF - Web application firewall using DFA [ Current version ] - Beta
+- [**209**Star][4m] [HTML] [ajinabraham/droid-application-fuzz-framework](https://github.com/ajinabraham/droid-application-fuzz-framework) Android application fuzzing framework with fuzzers and crash monitor.
+- [**209**Star][2m] [adguardteam/adguardforwindows](https://github.com/adguardteam/adguardforwindows) AdGuard for Windows open bug tracker
+- [**208**Star][2m] [Shell] [hak5/lanturtle-modules](https://github.com/hak5/lanturtle-modules) The Official LAN Turtle Module Repository
+- [**208**Star][1m] [Py] [seahoh/gotox](https://github.com/seahoh/gotox) 本地自动代理,修改自 goagent。
+- [**208**Star][2y] [Py] [pirate-crew/iptv](https://github.com/pirate-crew/iptv) Search and perform brute force attacks on illegal IPTV Servers
+- [**208**Star][6m] [PHP] [momosecurity/rhizobia_p](https://github.com/momosecurity/rhizobia_p) PHP安全SDK及编码规范
+- [**208**Star][6m] [Perl] [modzero/mod0burpuploadscanner](https://github.com/modzero/mod0burpuploadscanner) HTTP file upload scanner for Burp Proxy
+- [**208**Star][2m] [C] [joyent/mdb_v8](https://github.com/joyent/mdb_v8) postmortem debugging for Node.js and other V8-based programs
+- [**208**Star][5m] [PS] [harmj0y/damp](https://github.com/harmj0y/damp) The Discretionary ACL Modification Project: Persistence Through Host-based Security Descriptor Modification
+- [**208**Star][2y] [emilyanncr/windows-post-exploitation](https://github.com/emilyanncr/windows-post-exploitation) Windows post-exploitation tools, resources, techniques and commands to use during post-exploitation phase of penetration test. Contributions are appreciated. Enjoy!
+- [**208**Star][2y] [Py] [bluscreenofjeff/malleable-c2-randomizer](https://github.com/bluscreenofjeff/malleable-c2-randomizer) A script to randomize Cobalt Strike Malleable C2 profiles and reduce the chances of flagging signature-based detection controls
+- [**208**Star][8m] [Py] [blueboxgroup/ursula](https://github.com/blueboxgroup/ursula) Ansible playbooks for operating OpenStack - Powering Blue Box Cloud.
+- [**208**Star][3y] [Py] [agoragames/kairos](https://github.com/agoragames/kairos) Python module for time series data in Redis and Mongo
+- [**207**Star][2m] [Py] [edboffical/bsp](https://github.com/edboffical/bsp) shadowsocks多用户、流量、限时管理接口
+- [**207**Star][9d] [Py] [byt3bl33d3r/witnessme](https://github.com/byt3bl33d3r/witnessme) Web Inventory tool, takes screenshots of webpages using Pyppeteer (headless Chrome/Chromium) and provides some extra bells & whistles to make life easier.
+- [**207**Star][2y] [Go] [sun8911879/shadowsocksr](https://github.com/sun8911879/shadowsocksr) ShadowsocksR(SSR) for Go library
+- [**207**Star][1m] [Ruby] [v2ray/homebrew-v2ray](https://github.com/v2ray/homebrew-v2ray) The homebrew tap for v2ray-core.
+- [**207**Star][2y] [C#] [them4hd1/vayne-rat](https://github.com/them4hd1/vayne-rat) An Advanced C# .NET Rat, It’s Stable and Contains Many Features.
+- [**207**Star][5y] [C] [sorbo/tcpcrypt](https://github.com/sorbo/tcpcrypt) a protocol that attempts to encrypt (almost) all of your network traffic
+- [**207**Star][2y] [Go] [netxfly/xsec-proxy-scanner](https://github.com/netxfly/xsec-proxy-scanner) proxy canner
+- [**207**Star][2y] [JS] [konklone/shaaaaaaaaaaaaa](https://github.com/konklone/shaaaaaaaaaaaaa) Check if a website has weak SHA-1 TLS certificates.
+- [**207**Star][2m] [Py] [jwilk/python-afl](https://github.com/jwilk/python-afl) American Fuzzy Lop fork server and instrumentation for pure-Python code
+- [**207**Star][7m] [Py] [invictus1306/beebug](https://github.com/invictus1306/beebug) A tool for checking exploitability
+- [**207**Star][1y] [C] [crozone/spectrepoc](https://github.com/crozone/spectrepoc) Proof of concept code for the Spectre CPU exploit.
+- [**207**Star][4d] [TS] [bevry/getmac](https://github.com/bevry/getmac) Get the mac address of the current machine you are on via Node.js
+- [**207**Star][4y] [C++] [altf4/untwister](https://github.com/altf4/untwister) Seed recovery tool for PRNGs
+- [**207**Star][8m] [1hack0/facebook-bug-bounty-write-ups](https://github.com/1hack0/facebook-bug-bounty-write-ups) Hunting Bugs for Fun and Profit
+- [**206**Star][3y] [Go] [yinghuocho/gotun2socks](https://github.com/yinghuocho/gotun2socks) A Golang implementation of tun2socks
+- [**206**Star][15d] [Java] [owasp/mstg-hacking-playground](https://github.com/OWASP/MSTG-Hacking-Playground) 不安全的iOS/Android App集合
+- [**206**Star][2y] [C] [yifanlu/taihen](https://github.com/yifanlu/taihen) CFW framework for PS Vita
+- [**206**Star][2y] [Java] [udark/underdark-android](https://github.com/udark/underdark-android) Bluetooth peer-to-peer mesh networking for Android
+- [**206**Star][23d] [Py] [stamparm/identywaf](https://github.com/stamparm/identywaf) Blind WAF identification tool
+- [**206**Star][2y] [C] [royhills/ike-scan](https://github.com/royhills/ike-scan) The IKE Scanner
+- [**206**Star][8m] [C++] [rogue-kdc/cve-2019-0841](https://github.com/rogue-kdc/cve-2019-0841) PoC code for CVE-2019-0841 Privilege Escalation vulnerability
+- [**206**Star][1y] [Py] [orf/xcat](https://github.com/orf/xcat) Automate XPath injection attacks to retrieve documents
+- [**206**Star][4y] [PS] [mattifestation/wmi_backdoor](https://github.com/mattifestation/wmi_backdoor) A PoC WMI backdoor presented at Black Hat 2015
+- [**206**Star][1y] [Py] [malicialab/avclass](https://github.com/malicialab/avclass) AVClass malware labeling tool
+- [**206**Star][20d] [Go] [kotakanbe/go-cve-dictionary](https://github.com/kotakanbe/go-cve-dictionary) Build a local copy of CVE (NVD and Japanese JVN). Server mode for easy querying.
+- [**206**Star][9y] [JS] [jwhitehorn/jsminer](https://github.com/jwhitehorn/jsminer) A Javascript Bitcoin miner
+- [**206**Star][1y] [faizann24/resources-for-learning-hacking](https://github.com/faizann24/resources-for-learning-hacking) All the resources I could find for learning Ethical Hacking and penetration testing.
+- [**206**Star][7d] [C] [derrekr/fastboot3ds](https://github.com/derrekr/fastboot3ds) A homebrew bootloader for the Nintendo 3DS that is similar to android's fastboot.
+- [**206**Star][3y] [Py] [countercept/doublepulsar-c2-traffic-decryptor](https://github.com/countercept/doublepulsar-c2-traffic-decryptor) A python2 script for processing a PCAP file to decrypt C2 traffic sent to DOUBLEPULSAR implant
+- [**206**Star][5y] [C] [cbuchner1/ccminer](https://github.com/cbuchner1/ccminer) Christian Buchner's & Christian H.'s CUDA miner project
+- [**206**Star][2y] [0x4d31/deception-as-detection](https://github.com/0x4d31/deception-as-detection) Deception based detection techniques mapped to the MITRE’s ATT&CK framework
+- [**205**Star][3m] [JS] [yzddmr6/as_webshell_venom](https://github.com/yzddmr6/as_webshell_venom) 免杀webshell无限生成工具蚁剑版
+- [**205**Star][27d] [C++] [apt69/comahawk](https://github.com/apt69/comahawk) Privilege Escalation: Weaponizing CVE-2019-1405 and CVE-2019-1322
+- [**205**Star][2y] [C#] [shinlor/v2rays](https://github.com/shinlor/v2rays) 一个V2Ray的Windows客户端
+- [**205**Star][2y] [toleda/wireless_half-mini](https://github.com/toleda/wireless_half-mini) macOS Airport Half Mini (WiFi and Bluetooth)
+- [**205**Star][9m] [C] [paradoxis/php-backdoor](https://github.com/Paradoxis/PHP-Backdoor) Your interpreter isn’t safe anymore — The PHP module backdoor
+- [**205**Star][14d] [D] [dlang-community/d-scanner](https://github.com/dlang-community/D-Scanner) Swiss-army knife for D source code
+- [**205**Star][3y] [Go] [praetorian-code/trudy](https://github.com/praetorian-code/trudy) A transparent proxy that can modify and drop traffic for arbitrary TCP connections.
+- [**205**Star][3m] [Py] [openstack/hacking](https://github.com/openstack/hacking) OpenStack Hacking Style Checks
+- [**205**Star][15d] [vschiavoni/sgx-papers](https://github.com/vschiavoni/sgx-papers) A list of system papers using/about Intel SGX
+- [**205**Star][5m] [YARA] [th3hurrican3/pepper](https://github.com/th3hurrican3/pepper) An open source script to perform malware static analysis on Portable Executable
+- [**205**Star][6y] [Lua] [spiderlabs/nmap-tools](https://github.com/spiderlabs/nmap-tools) SpiderLabs shared Nmap Tools
+- [**205**Star][5y] [C] [snare/ida-efiutils](https://github.com/snare/ida-efiutils) Some scripts for IDA Pro to assist with reverse engineering EFI binaries
+- [**205**Star][1y] [Go] [raz-varren/xsshell](https://github.com/raz-varren/xsshell) XSS反向Shell框架
+- [**205**Star][4y] [Shell] [rand0m1ze/ezsploit](https://github.com/rand0m1ze/ezsploit) Linux bash script automation for metasploit
+- [**205**Star][16d] [Py] [patois/idacyber](https://github.com/patois/idacyber) Data Visualization Plugin for IDA Pro
+- [**205**Star][2y] [OCaml] [montyly/gueb](https://github.com/montyly/gueb) Static analyzer detecting Use-After-Free on binary
+- [**205**Star][16d] [Py] [m4ll0k/smbrute](https://github.com/m4ll0k/smbrute) SMB Protocol Bruteforce
+- [**205**Star][2m] [Shell] [keepwannabe/remot3d](https://github.com/keepwannabe/remot3d) is a simple tool created for large pentesters as well as just for the pleasure of defacers to control server by backdoors
+- [**205**Star][1y] [JS] [jpcertcc/sysmonsearch](https://github.com/jpcertcc/sysmonsearch) Investigate suspicious activity by visualizing Sysmon's event log
+- [**205**Star][2m] [C] [jasonwhite/ducible](https://github.com/jasonwhite/ducible) A tool to make Windows builds reproducible.
+- [**205**Star][10m] [C] [hzqst/unicorn_pe](https://github.com/hzqst/unicorn_pe) Unicorn PE is an unicorn based instrumentation project designed to emulate code execution for windows PE files.
+- [**205**Star][11m] [C#] [enkomio/shed](https://github.com/enkomio/shed) .NET runtime inspector
+- [**205**Star][2m] [Py] [elevenpaths/ibombshell](https://github.com/elevenpaths/ibombshell) Tool to deploy a post-exploitation prompt at any time
+- [**205**Star][1y] [Go] [akagi201/cryptotrader](https://github.com/akagi201/cryptotrader) A cryptocurrency trader for all famous exchanges
+- [**204**Star][9d] [Py] [mzfr/rsh](https://github.com/mzfr/rsh) generate reverse shell from CLI for linux and Windows.
+- [**204**Star][2y] [JS] [xmcp/gofw](https://github.com/xmcp/gofw) Chrome 扩展:麻麻再也不用担心 Google API 抽风了
+- [**204**Star][4y] [Py] [aoncyberlabs/xxe-recursive-download](https://github.com/AonCyberLabs/xxe-recursive-download)
+- [**204**Star][1y] [HTML] [xsscx/commodity-injection-signatures](https://github.com/xsscx/commodity-injection-signatures) Commodity Injection Signatures, Malicious Inputs, XSS, HTTP Header Injection, XXE, RCE, Javascript, XSLT
+- [**204**Star][2y] [C++] [rfidtool/esp-rfid-tool](https://github.com/rfidtool/esp-rfid-tool) A tool for logging data/testing devices with a Wiegand Interface. Can be used to create a portable RFID reader or installed directly into an existing installation. Provides access to a web based interface using WiFi in AP or Client mode. Will work with nearly all devices that contain a standard 5V Wiegand interface. Primary target group is 26-37…
+- [**204**Star][6d] [Java] [owasp/benchmark](https://github.com/owasp/benchmark) OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web app written in Java, it supports analysis by Static (SAST), Dynamic (DAST), and Runtime (IAST) tools that support Java. The idea is that since it is fully runnable and all the vulnerabilities are actually expl…
+- [**204**Star][5d] [C] [niluje/kindletool](https://github.com/niluje/kindletool) A tool for creating & extracting Kindle updates and more
+- [**204**Star][10y] [C] [nextgens/tor](https://github.com/nextgens/tor) Tor is free software and an open network that helps you defend against a form of network surveillance that threatens personal freedom and privacy, confidential business activities and relationships, and state security known as traffic analysis.
+- [**204**Star][1m] [TS] [helmetjs/csp](https://github.com/helmetjs/csp) Content Security Policy middleware
+- [**204**Star][6y] [CoffeeScript] [fw42/honeymap](https://github.com/fw42/honeymap) Real-time websocket stream of GPS events on a fancy SVG world map
+- [**204**Star][1y] [Py] [fireeye/idawasm](https://github.com/fireeye/idawasm) IDA Pro loader and processor modules for WebAssembly
+- [**204**Star][2y] [Java] [facebookresearch/asynchronousratchetingtree](https://github.com/facebookresearch/asynchronousratchetingtree) On Ends-to-Ends Encryption: Asynchronous Group Messaging with Strong Security Guarantees
+- [**204**Star][2y] [evnm/research-in-production](https://github.com/evnm/research-in-production) A collection of research papers categorized by real-world systems that enact them
+- [**204**Star][1y] [C#] [damonmohammadbagher/nativepayload_dns](https://github.com/damonmohammadbagher/nativepayload_dns) C# code for Transferring Backdoor Payloads by DNS Traffic and Bypassing Anti-viruses
+- [**204**Star][4m] [HCL] [byt3bl33d3r/red-baron](https://github.com/byt3bl33d3r/red-baron) Automate creating resilient, disposable, secure and agile infrastructure for Red Teams
+- [**204**Star][30d] [C#] [b4rtik/redpeanut](https://github.com/b4rtik/redpeanut) RedPeanut is a small RAT developed in .Net Core 2 and its agent in .Net 3.5 / 4.0.
+- [**204**Star][1y] [C++] [azonenberg/openfpga](https://github.com/azonenberg/openfpga) Open FPGA tools
+- [**204**Star][4m] [Shell] [anshumanbh/brutesubs](https://github.com/anshumanbh/brutesubs) An automation framework for running multiple open sourced subdomain bruteforcing tools (in parallel) using your own wordlists via Docker Compose
+- [**204**Star][6y] [C#] [0xd4d/antinet](https://github.com/0xd4d/antinet) .NET anti-managed debugger and anti-profiler code
+- [**203**Star][7m] [JS] [wingleung/save-page-state](https://github.com/wingleung/save-page-state) A chrome extension to save the state of a page for further analysis
+- [**203**Star][2y] [Py] [rootlabs/smap](https://github.com/suraj-root/smap) Handy tool for shellcode analysis
+- [**203**Star][1y] [C#] [spiderlabs/sharpcompile](https://github.com/spiderlabs/sharpcompile) SharpCompile is an aggressor script for Cobalt Strike which allows you to compile and execute C# in realtime. This is a more slick approach than manually compiling an .NET assembly and loading it into Cobalt Strike. The project aims to make it easier to move away from adhoc PowerShell execution instead creating a temporary assembly and executing…
+- [**203**Star][7m] [JS] [sixstars/starctf2019](https://github.com/sixstars/starctf2019) official source code of *CTF2019
+- [**203**Star][1y] [Py] [shaohua0116/group-normalization-tensorflow](https://github.com/shaohua0116/group-normalization-tensorflow) A TensorFlow implementation of Group Normalization on the task of image classification
+- [**203**Star][2m] [Py] [rpisec/llvm-deobfuscator](https://github.com/rpisec/llvm-deobfuscator)
+- [**203**Star][2y] [C] [peperunas/injectopi](https://github.com/peperunas/injectopi) A set of tutorials about code injection for Windows.
+- [**203**Star][1y] [Py] [omergunal/pot](https://github.com/omergunal/pot) Phishing on Twitter
+- [**203**Star][3y] [C] [google/kasan](https://github.com/google/kasan) KernelAddressSanitizer, a fast memory error detector for the Linux kernel
+- [**203**Star][3y] [C] [deadbits/insecureprogramming](https://github.com/deadbits/insecureprogramming) mirror of gera's insecure programming examples |
+- [**202**Star][4m] [jiansiting/kali-windows](https://github.com/jiansiting/kali-windows) Kali Windows
+- [**202**Star][2y] [Py] [newbee119/ti_collector](https://github.com/NewBee119/Ti_Collector) 本项目致力于收集网上公开来源的威胁情报,主要关注信誉类威胁情报(如IP/域名等),以及事件类威胁情报。
+- [**202**Star][2m] [Ruby] [vonahisec/leprechaun](https://github.com/vonahisec/leprechaun) This tool is used to map out the network data flow to help penetration testers identify potentially valuable targets.
+- [**202**Star][3m] [C++] [mc-imperial/jfs](https://github.com/mc-imperial/jfs) an experimental constraint solverdesigned to investigate using coverage guided fuzzing as an incomplete strategyfor solving boolean, BitVector, and floating-point constraints.
+- [**202**Star][2m] [PS] [wiredpulse/posh-r2](https://github.com/wiredpulse/posh-r2) PowerShell - Rapid Response... For the incident responder in you!
+- [**202**Star][2y] [weilaihui/ss-net](https://github.com/weilaihui/ss-net) 共享shadowsocks主机
+- [**202**Star][2y] [Py] [tkmru/nao](https://github.com/tkmru/nao) Simple No-meaning Assembly Omitter for IDA Pro (CURRENTLY UNDER DEVELOPMENT)
+- [**202**Star][1y] [PS] [sud0woodo/dcomrade](https://github.com/sud0woodo/dcomrade) Powershell script for enumerating vulnerable DCOM Applications
+- [**202**Star][6d] [stuhirst/awssecurity](https://github.com/stuhirst/awssecurity) for AWS Security material
+- [**202**Star][2m] [C++] [oisf/libhtp](https://github.com/oisf/libhtp) LibHTP is a security-aware parser for the HTTP protocol and the related bits and pieces.
+- [**202**Star][3y] [Py] [mseclab/nathan](https://github.com/mseclab/nathan) Android Emulator for mobile security testing
+- [**202**Star][4y] [Py] [m57/ardt](https://github.com/m57/ardt) Akamai Reflective DDoS Tool - Attack the origin host behind the Akamai Edge hosts and DDoS protection offered by Akamai services.
+- [**202**Star][1y] [Erlang] [kudelskisecurity/scannerl](https://github.com/kudelskisecurity/scannerl) scannerl:模块化、分布式指纹识别引擎,在单个主机运行即可扫描数千目标,也可轻松的部署到多台主机
+- [**202**Star][3y] [C++] [k2/ehtrace](https://github.com/k2/ehtrace) ATrace is a tool for tracing execution of binaries on Windows.
+- [**202**Star][1y] [C] [gtoad/android_inline_hook](https://github.com/gtoad/android_inline_hook) Build an so file to automatically do the android_native_hook work. Supports thumb-2/arm32 and ARM64 ! With this, tools like Xposed can do android native hook.
+- [**202**Star][7m] [Py] [greekn/rce-bug](https://github.com/greekn/rce-bug) 新漏洞感知项目 主要帮助大家 记录一些重大漏洞 漏洞方面的细节
+- [**202**Star][6y] [Py] [gifts/rogue-mysql-server](https://github.com/gifts/rogue-mysql-server) Rogue MySql Server
+- [**202**Star][1y] [Shell] [fics/atcmd](https://github.com/fics/atcmd) Android AT command scripts and firmware extraction
+- [**202**Star][8m] [Py] [f5networks/f5-common-python](https://github.com/f5networks/f5-common-python) Python SDK for configuration and monitoring of F5® BIG-IP® devices via the iControl® REST API.
+- [**202**Star][2y] [Py] [euske/pyrexecd](https://github.com/euske/pyrexecd) Standalone SSH server for Windows
+- [**202**Star][3y] [Py] [endgameinc/dga_predict](https://github.com/endgameinc/dga_predict) Predicting Domain Generation Algorithms using LSTMs
+- [**202**Star][7m] [C] [doublelabyrinth/how-does-navicat-encrypt-password](https://github.com/doublelabyrinth/how-does-navicat-encrypt-password) This repository tells you how Navicat encrypts database password.
+- [**202**Star][14d] [Py] [doomedraven/virustotalapi](https://github.com/doomedraven/virustotalapi) VirusTotal Full api
+- [**202**Star][5m] [TeX] [decrypto-org/rupture](https://github.com/decrypto-org/rupture) A framework for BREACH and other compression-based crypto attacks
+- [**202**Star][2y] [Java] [cgutman/adblib](https://github.com/cgutman/adblib) A Java library implementation of the ADB network protocol
+- [**202**Star][3d] [Py] [angr/cle](https://github.com/angr/cle) CLE Loads Everything (at least, many binary formats!)
+- [**201**Star][20d] [C++] [can1357/byepg](https://github.com/can1357/byepg) Defeating Patchguard universally for Windows 8, Windows 8.1 and all versions of Windows 10 regardless of HVCI
+- [**201**Star][4m] [Py] [yelp/threat_intel](https://github.com/yelp/threat_intel) Threat Intelligence APIs
+- [**201**Star][2d] [Shell] [x1mdev/reconpi](https://github.com/x1mdev/reconpi) ReconPi - A lightweight recon tool that performs extensive scanning with the latest tools.
+- [**201**Star][4m] [Py] [thesph1nx/absolutezero](https://github.com/thesph1nx/absolutezero) Python APT Backdoor 1.0.0.1
+- [**201**Star][7m] [Java] [rolfrolles/ghidrapal](https://github.com/rolfrolles/ghidrapal) Ghidra Program Analysis Library(No Doc)
+- [**201**Star][11m] [Py] [medbenali/cyberscan](https://github.com/medbenali/cyberscan) Network's Forensics ToolKit
+- [**201**Star][1y] [JS] [lmammino/jwt-cracker](https://github.com/lmammino/jwt-cracker) jwt-cracker:HS256JWT 令牌暴力破解工具,只对弱密码有效
+- [**201**Star][2m] [C++] [kalymos/psnee](https://github.com/kalymos/psnee) PsNee, an open source stealth modchip for the Sony Playstation 1
+- [**201**Star][2y] [Py] [joker25000/devploit](https://github.com/joker25000/devploit)
+- [**201**Star][23d] [Rust] [jedisct1/rust-doh](https://github.com/jedisct1/rust-doh) A fast and secure DoH (DNS-over-HTTP) server proxy written in Rust.
+- [**201**Star][11m] [Py] [infamoussyn/rogue](https://github.com/infamoussyn/rogue) An extensible toolkit providing penetration testers an easy-to-use platform to deploy Access Points during penetration testing and red team engagements.
+- [**201**Star][2y] [SourcePawn] [fnmsd/awvs_script_decode](https://github.com/fnmsd/awvs_script_decode) 解密好的AWVS10.5 data/script/目录下的脚本
+- [**201**Star][6m] [C#] [bedthegod/confuserex-mod-by-bed](https://github.com/bedthegod/confuserex-mod-by-bed) Beds Protector | Best free obfuscation out right now
+- [**201**Star][6m] [Py] [ares-x/awd-predator-framework](https://github.com/ares-x/awd-predator-framework) AWD攻防赛webshell批量利用框架
+- [**201**Star][3m] [Ruby] [appfolio/gemsurance](https://github.com/appfolio/gemsurance) Gem vulnerability checker using rubysec/ruby-advisory-db
+- [**200**Star][26d] [Jupyter Notebook] [hunters-forge/attack-python-client](https://github.com/hunters-forge/ATTACK-Python-Client) Python Script to access ATT&CK content available in STIX via a public TAXII server
+- [**200**Star][3y] [Py] [tuuunya/webdirscan](https://github.com/TuuuNya/webdirscan) 跨平台的web目录扫描工具
+- [**200**Star][1y] [newbee119/threat-intelligence](https://github.com/NewBee119/threat-intelligence) 收集的一些国外能提供提供威胁情报的公司,涵盖网络安全、工控安全、终端安全、移动安全等领域
+- [**200**Star][3y] [tuuunya/fuzz_dict](https://github.com/TuuuNya/fuzz_dict) 常用的一些fuzz及爆破字典,欢迎大神继续提供新的字典及分类。
+- [**200**Star][1y] [Py] [sec-bit/awesome-buggy-erc20-tokens](https://github.com/sec-bit/awesome-buggy-erc20-tokens) A Collection of Vulnerabilities in ERC20 Smart Contracts With Tokens Affected
+- [**200**Star][5m] [C++] [rainers/cv2pdb](https://github.com/rainers/cv2pdb) converter of DMD CodeView/DWARF debug information to PDB files
+- [**200**Star][7m] [PS] [powershell/operation-validation-framework](https://github.com/powershell/operation-validation-framework) executing validation of the operation of a system
+- [**200**Star][10m] [HTML] [mxmssh/drltrace](https://github.com/mxmssh/drltrace) Drltrace is a library calls tracer for Windows and Linux applications.
+- [**200**Star][2y] [Py] [linw1995/lightsocks-python](https://github.com/linw1995/lightsocks-python)
+- [**200**Star][4m] [C] [jas502n/cve-2019-13272](https://github.com/jas502n/cve-2019-13272) Linux 4.10 < 5.1.17 PTRACE_TRACEME local root
+- [**200**Star][6m] [Py] [hellogoldsnakeman/masnmapscan-v1.0](https://github.com/hellogoldsnakeman/masnmapscan-v1.0) 一款端口扫描器。整合了masscan和nmap两款扫描器,masscan扫描端口,nmap扫描端口对应服务,二者结合起来实现了又快又好地扫描。并且加入了防火墙的功能
+- [**200**Star][1y] [C] [hashcat/kwprocessor](https://github.com/hashcat/kwprocessor) Advanced keyboard-walk generator with configureable basechars, keymap and routes
+- [**200**Star][2y] [Py] [dragen1860/learningtocompare-pytorch](https://github.com/dragen1860/learningtocompare-pytorch) Pytorch Implementation for CVPR2018 Paper: Learning to Compare: Relation Network for Few-Shot Learning
+- [**200**Star][5m] [Py] [doyensec/graph-ql](https://github.com/doyensec/graph-ql) GraphQL Security Research Material
+- [**200**Star][6m] [Py] [dowjones/hammer](https://github.com/dowjones/hammer) Dow Jones Hammer : Protect the cloud with the power of the cloud(AWS)
+- [**200**Star][2y] [C] [david-reguera-garcia-dreg/anticuckoo](https://github.com/david-reguera-garcia-dreg/anticuckoo) A tool to detect and crash Cuckoo Sandbox
+- [**200**Star][3y] [C] [crowdstrike/tortilla](https://github.com/crowdstrike/tortilla) solution for Windows that transparently routes all TCP and DNS traffic through Tor
+- [**200**Star][3y] [C] [cnlohr/espthernet](https://github.com/cnlohr/espthernet) ESP8266 10-Base-T Ethernet Driver
+- [**200**Star][1y] [C] [bazad/blanket](https://github.com/bazad/blanket) CVE-2018-4280: Mach port replacement vulnerability in launchd on iOS 11.2.6 leading to sandbox escape, privilege escalation, and codesigning bypass.
+- [**200**Star][12d] [anudeepnd/blacklist](https://github.com/anudeepnd/blacklist) Curated and well-maintained host file to block ads, tracking, cryptomining and more! Updated regularly.
+- [**199**Star][10m] [Py] [kevthehermit/ducktoolkit](https://github.com/kevthehermit/ducktoolkit) Encoding Tools for Rubber Ducky
+- [**199**Star][2m] [Py] [tylous/vibe](https://github.com/tylous/vibe) A framework for stealthy domain reconnaissance
+- [**199**Star][3y] [Assembly] [vector35/pwnadventurez](https://github.com/vector35/pwnadventurez) NES zombie survival game made to be hacked
+- [**199**Star][2m] [C] [uninett/mod_auth_mellon](https://github.com/uninett/mod_auth_mellon) An Apache module with a simple SAML 2.0 service provider
+- [**199**Star][2y] [ObjC] [tihmstar/doubleh3lix](https://github.com/tihmstar/doubleh3lix) Jailbreak for iOS 10.x 64bit devices without KTRR
+- [**199**Star][1y] [ObjC] [sunweiliang/neteasemusiccrack](https://github.com/sunweiliang/neteasemusiccrack) iOS网易云音乐 免VIP下载、去广告、去更新 无需越狱...
+- [**199**Star][2m] [C++] [secrary/drsemu](https://github.com/secrary/drsemu) 根据动态行为检测恶意代码并进行分类
+- [**199**Star][3y] [PHP] [redteamsecuritytraining/plugbot-plug](https://github.com/redteamsecuritytraining/PlugBot-Plug) The "bot" component of the PlugBot project
+- [**199**Star][1y] [C++] [quarkslab/binmap](https://github.com/quarkslab/binmap) system scanner
+- [**199**Star][12m] [iamcryptoki/snowden-archive](https://github.com/iamcryptoki/snowden-archive)
+- [**199**Star][2y] [iaik/kaiser](https://github.com/iaik/kaiser) Kernel Address Isolation to have Side-channels Efficiently Removed
+- [**199**Star][2y] [Go] [ezekg/git-hound](https://github.com/ezekg/git-hound) Git plugin that prevents sensitive data from being committed.
+- [**199**Star][2y] [Java] [ernw/androtickler](https://github.com/ernw/androtickler) Penetration testing and auditing toolkit for Android apps.
+- [**199**Star][1y] [Dockerfile] [eadom/ctf_xinetd](https://github.com/eadom/ctf_xinetd) A docker repository for deploying pwnable challenges in CTF
+- [**199**Star][3y] [C] [dismantl/linux-injector](https://github.com/dismantl/linux-injector) Utility for injecting executable code into a running process on x86/x64 Linux
+- [**199**Star][4y] [JS] [cturt/ps4-playground](https://github.com/cturt/ps4-playground) A set of PS4 experiments using the WebKit exploit
+- [**199**Star][3y] [Py] [climate-mirror/datasets](https://github.com/climate-mirror/datasets) For tracking data mirroring progress
+- [**198**Star][4m] [Py] [googleprojectzero/ios-messaging-tools](https://github.com/googleprojectzero/ios-messaging-tools) several tools Project Zero uses to test iPhone messaging
+- [**198**Star][2y] [Py] [alienvault-otx/apiv2](https://github.com/AlienVault-OTX/ApiV2) quickly identify related infrastructure and malware
+- [**198**Star][2m] [Py] [thehive-project/thehivedocs](https://github.com/TheHive-Project/TheHiveDocs) Documentation of TheHive
+- [**198**Star][1y] [Py] [wipi-hunter/pikarma](https://github.com/WiPi-Hunter/PiKarma) Detects wireless network attacks performed by KARMA module
+- [**198**Star][8d] [Swift] [auth0/lock.swift](https://github.com/auth0/Lock.swift) A Swift & iOS framework to authenticate using Auth0 and with a Native Look & Feel
+- [**198**Star][5y] [rutkai/pentest-bookmarks](https://github.com/rutkai/pentest-bookmarks) A collection of penetration testing related sites
+- [**198**Star][7m] [C] [zombiecraig/icsim](https://github.com/zombiecraig/icsim) Instrument Cluster Simulator
+- [**198**Star][9d] [Java] [spring-cloud-samples/spring-cloud-contract-samples](https://github.com/spring-cloud-samples/spring-cloud-contract-samples) Samples for Spring Cloud Contract project
+- [**198**Star][2y] [proteas/native-lldb-for-ios](https://github.com/proteas/native-lldb-for-ios) native LLDB(v3.8) for iOS
+- [**198**Star][8m] [Py] [nccgroup/g-scout](https://github.com/nccgroup/g-scout) Google Cloud Platform Security Tool
+- [**198**Star][5m] [PS] [mkellerman/invoke-commandas](https://github.com/mkellerman/invoke-commandas) Invoke Command As System/Interactive/GMSA/User on Local/Remote machine & returns PSObjects.
+- [**198**Star][1y] [Py] [mike01/pypacker](https://github.com/mike01/pypacker) packet manipulation lib for Python
+- [**198**Star][2m] [Py] [meejah/txtorcon](https://github.com/meejah/txtorcon) Twisted-based asynchronous Tor control protocol implementation. Includes unit-tests, examples, state-tracking code and configuration abstraction.
+- [**198**Star][2y] [Go] [magoo/authtables](https://github.com/magoo/authtables) AuthTables is a microservice that helps detect "Account Take Over" caused by simple credential theft. If bad actors are stealing your users passwords, AuthTables may be useful.
+- [**198**Star][2y] [C] [lsds/spectre-attack-sgx](https://github.com/lsds/spectre-attack-sgx) Spectre attack against SGX enclave
+- [**198**Star][2y] [C#] [jaredhaight/psattackbuildtool](https://github.com/jaredhaight/psattackbuildtool) A tool for building PS>Attack, an offensive PowerShell console that makes it easy for pentesters to use PowerShell.
+- [**198**Star][3y] [Py] [isofew/sssniff](https://github.com/isofew/sssniff) ShadowSocks(SS) traffic sniffer
+- [**198**Star][6m] [Py] [google/in-silico-labeling](https://github.com/google/in-silico-labeling) Code for In silico labeling: Predicting fluorescent labels in unlabeled images
+- [**198**Star][5m] [C#] [ghostpack/sharpdpapi](https://github.com/ghostpack/sharpdpapi) SharpDPAPI is a C# port of some Mimikatz DPAPI functionality.
+- [**198**Star][3y] [Py] [faizann24/using-machine-learning-to-detect-malicious-urls](https://github.com/faizann24/using-machine-learning-to-detect-malicious-urls) Machine Learning and Security | Using machine learning to detect malicious URLs
+- [**198**Star][4y] [Py] [f8left/decllvm](https://github.com/f8left/decllvm) IDA plugin for OLLVM analysis
+- [**198**Star][2d] [C] [beave/sagan](https://github.com/beave/sagan) Sagan uses a 'Snort like' engine and rules to analyze logs (syslog/event log/snmptrap/netflow/etc)
+- [**198**Star][5m] [Py] [athre0z/wasm](https://github.com/athre0z/wasm) WebAssembly decoder & disassembler library
+- [**197**Star][4m] [Kotlin] [shadowsocks/v2ray-plugin-android](https://github.com/shadowsocks/v2ray-plugin-android) A SIP003 V2ray plugin on Android
+- [**197**Star][2y] [ObjC] [siguza/v0rtex](https://github.com/siguza/v0rtex) IOSurface exploit
+- [**197**Star][6d] [C#] [secana/penet](https://github.com/secana/penet) Portable Executable (PE) library written in .Net
+- [**197**Star][7y] [C++] [scanlime/arduino-lelo-remote](https://github.com/scanlime/arduino-lelo-remote) Arduino library for remote-control Lelo vibrators
+- [**197**Star][1y] [Py] [s1kr10s/apache-struts-v3](https://github.com/s1kr10s/apache-struts-v3)
+- [**197**Star][4y] [Java] [pwntester/serialkillerbypassgadgetcollection](https://github.com/pwntester/serialkillerbypassgadgetcollection) Collection of bypass gadgets to extend and wrap ysoserial payloads
+- [**197**Star][2y] [Go] [minio/concert](https://github.com/minio/concert) Concert is a console based certificate generation tool for letsencrypt.org.
+- [**197**Star][3m] [infosecn1nja/awesome-mitre-attack](https://github.com/infosecn1nja/awesome-mitre-attack) A curated list of awesome resources related to Mitre ATT&CK™ Framework
+- [**197**Star][2y] [C] [domblack/php-scrypt](https://github.com/domblack/php-scrypt) A PHP wrapper fo the scrypt hashing algorithm
+- [**197**Star][2y] [Py] [detuxsandbox/detux](https://github.com/detuxsandbox/detux) The Multiplatform Linux Sandbox
+- [**197**Star][4m] [cryptoseb/cryptopaper](https://github.com/cryptoseb/cryptopaper) Privacy, Security, and Anonymity For Every Internet User.
+- [**197**Star][2m] [Py] [cisco-talos/decept](https://github.com/cisco-talos/decept) Decept Network Protocol Proxy
+- [**197**Star][2d] [OCaml] [bitblaze-fuzzball/fuzzball](https://github.com/bitblaze-fuzzball/fuzzball) Vine-based Binary Symbolic Execution
+- [**197**Star][20d] [F#] [b2r2-org/b2r2](https://github.com/b2r2-org/b2r2) B2R2 is a collection of useful algorithms, functions, and tools for binary analysis.
+- [**197**Star][5d] [Py] [angr/angr-management](https://github.com/angr/angr-management) A GUI for angr. Being developed *very* slowly.
+- [**197**Star][2y] [ObjC] [alonemonkey/dumpdecrypted](https://github.com/alonemonkey/dumpdecrypted) Dumps decrypted mach-o files from encrypted applications、framework or app extensions.
+- [**196**Star][2m] [ignitetechnologies/hackthebox-ctf-writeups](https://github.com/ignitetechnologies/hackthebox-ctf-writeups) This cheasheet is aimed at the CTF Players and Beginners to help them sort Hack The Box Labs on the basis of Operating System and Difficulty.
+- [**196**Star][12d] [JS] [ret2got/disasm.pro](https://github.com/ret2got/disasm.pro) A realtime assembler/disassembler (formerly known as disasm.ninja)
+- [**196**Star][5m] [C#] [zodiacon/drivermon](https://github.com/zodiacon/drivermon) Monitor activity of any driver
+- [**196**Star][2y] [Py] [yvesalexandre/bandicoot](https://github.com/yvesalexandre/bandicoot) an open-source python toolbox to analyze mobile phone metadata
+- [**196**Star][2y] [Py] [sqlab/symgdb](https://github.com/sqlab/symgdb) symbolic execution plugin for gdb
+- [**196**Star][3y] [Ruby] [spiderlabs/malware-analysis](https://github.com/spiderlabs/malware-analysis) A repository of tools and scripts related to malware analysis
+- [**196**Star][25d] [Py] [seemoo-lab/internalblue](https://github.com/seemoo-lab/internalblue) Bluetooth experimentation framework for Broadcom and Cypress chips.
+- [**196**Star][2y] [C] [saaramar/execve_exploit](https://github.com/saaramar/execve_exploit) Hardcore corruption of my execve() vulnerability in WSL
+- [**196**Star][10m] [JS] [rook2pawn/node-ddos](https://github.com/rook2pawn/node-ddos) Stop denial of service attacks, configurable allowable burst rate.
+- [**196**Star][3y] [C] [robertdavidgraham/telnetlogger](https://github.com/robertdavidgraham/telnetlogger) Simulates enough of a Telnet connection in order to log failed login attempts.
+- [**196**Star][1y] [Py] [pstirparo/mac4n6](https://github.com/pstirparo/mac4n6) Collection of forensics artifacs location for Mac OS X and iOS
+- [**196**Star][8m] [JS] [pillarjs/csrf](https://github.com/pillarjs/csrf) Logic behind CSRF token creation and verification.
+- [**196**Star][3d] [C] [denandz/fuzzotron](https://github.com/denandz/fuzzotron) A TCP/UDP based network daemon fuzzer
+- [**196**Star][3y] [Ruby] [crowecybersecurity/ps1encode](https://github.com/crowecybersecurity/ps1encode) Script used to generate and encode a PowerShell based Metasploit payloads.
+- [**196**Star][2y] [Java] [abstractj/kalium](https://github.com/abstractj/kalium) Java binding to the Networking and Cryptography (NaCl) library with the awesomeness of libsodium
+- [**195**Star][3y] [Py] [falseen/shadowsocks-pyqt](https://github.com/falseen/shadowsocks-pyqt) 一个用PyQt5实现的shadowsocks 客户端, 可以在 windows、linux、OSX 等平台上运行
+- [**195**Star][8d] [C++] [spacehuhn/wifiduck](https://github.com/spacehuhn/wifiduck) Wireless keystroke injection attack platform
+- [**195**Star][2m] [Py] [yingcong/facelet_bank](https://github.com/yingcong/facelet_bank) Facelet-Bank for Fast Portrait Manipulation (pytorch)
+- [**195**Star][25d] [Lua] [ocsaf/freevulnsearch](https://github.com/ocsaf/freevulnsearch) Free and open NMAP NSE script to query vulnerabilities via the cve-search.org API.
+- [**195**Star][1y] [Java] [nocheatplus/nocheatplus](https://github.com/nocheatplus/nocheatplus) Anti cheating plugin for Minecraft (Bukkit/Spigot).
+- [**195**Star][9m] [Py] [mpgn/cve-2019-0192](https://github.com/mpgn/cve-2019-0192) RCE on Apache Solr using deserialization of untrusted data via jmx.serviceUrl
+- [**195**Star][3y] [mechaphish/mecha-docs](https://github.com/mechaphish/mecha-docs) Documentation for the Mechanical Phish.
+- [**195**Star][1y] [Batchfile] [knightmare2600/shadowbrokers](https://github.com/knightmare2600/shadowbrokers) Guides, Tools, Tips and such for working with the Shadow Brokers dumps
+- [**195**Star][9m] [hannoch/scaner](https://github.com/hannoch/scaner) scanner collection
+- [**195**Star][4m] [Ruby] [delvelabs/vane](https://github.com/delvelabs/vane) A GPL fork of the popular wordpress vulnerability scanner WPScan
+- [**195**Star][2y] [Py] [cheetz/sslscrape](https://github.com/cheetz/sslscrape) SSLScrape | A scanning tool for scaping hostnames from SSL certificates.
+- [**195**Star][1y] [C++] [cararasu/holodec](https://github.com/cararasu/holodec) Decompiler for x86 and x86-64 ELF binaries
+- [**195**Star][4m] [Py] [boy-hack/hack-requests](https://github.com/boy-hack/hack-requests) 给黑客们使用的http底层网络库
+- [**195**Star][3m] [Groovy] [alvarosanchez/grails-spring-security-rest](https://github.com/alvarosanchez/grails-spring-security-rest) Grails plugin to implement token-based, RESTful authentication using Spring Security
+- [**195**Star][23d] [C] [aircrack-ng/mdk4](https://github.com/aircrack-ng/mdk4) a proof-of-concept tool to exploit common IEEE 802.11 protocol weaknesses.
+- [**195**Star][3m] [04x/icg-autoexploiterbot](https://github.com/04x/icg-autoexploiterbot) Wordpress
+- [**194**Star][2m] [Java] [trojan-gfw/igniter](https://github.com/trojan-gfw/igniter) A trojan client for Android (UNDER CONSTRUCTION).
+- [**194**Star][11m] [Py] [hackatnow/djangohunter](https://github.com/hackatnow/djangohunter) Tool designed to help identify incorrectly configured Django applications that are exposing sensitive information.
+- [**194**Star][7y] [Java] [nvisium-jack-mannino/owasp-goatdroid-project](https://github.com/nvisium-jack-mannino/OWASP-GoatDroid-Project) *This project is no longer maintained* OWASP GoatDroid is a fully functional and self-contained training environment for educating developers and testers on Android security. GoatDroid requires minimal dependencies and is ideal for both Android beginners as well as more advanced users. The project currently includes two applications: FourGoats, …
+- [**194**Star][1y] [Rust] [genet-app/genet](https://github.com/genet-app/genet) 网络分析工具, 界面版, 跨平台
+- [**194**Star][9m] [zardus/wargame-nexus](https://github.com/zardus/wargame-nexus) An sorted and updated list of security wargame sites.
+- [**194**Star][3y] [Py] [xairy/mipt-ctf](https://github.com/xairy/mipt-ctf) A small course on CTF (wargames) for beginners [in Russian]
+- [**194**Star][1y] [C++] [unapibageek/cbm](https://github.com/unapibageek/cbm) Car Backdoor Maker
+- [**194**Star][10y] [Ruby] [sfeley/candy](https://github.com/sfeley/candy) Transparent persistence for MongoDB
+- [**194**Star][2m] [PS] [sadprocessor/somestuff](https://github.com/sadprocessor/somestuff) Some PowerShell Stuff
+- [**194**Star][8m] [Py] [ropnop/impacket_static_binaries](https://github.com/ropnop/impacket_static_binaries) Standalone binaries for Linux/Windows of Impacket's examples
+- [**194**Star][5m] [C++] [panda-re/lava](https://github.com/panda-re/lava) 大规模自动化漏洞Addition工具
+- [**194**Star][5y] [C#] [nccgroup/upnp-pentest-toolkit](https://github.com/nccgroup/upnp-pentest-toolkit) UPnP Pentest Toolkit for Windows
+- [**194**Star][3y] [JS] [mhils/honeyproxy](https://github.com/mhils/honeyproxy) This project is now part of
+- [**194**Star][8m] [Py] [lingerhk/hacking_script](https://github.com/lingerhk/hacking_script) 开发或收集的一些网络安全方面的脚本、小工具
+- [**194**Star][3d] [Java] [ldtteam/minecolonies](https://github.com/ldtteam/minecolonies) Minecolonies minecraft mod
+- [**194**Star][3m] [jdonsec/allthingsssrf](https://github.com/jdonsec/allthingsssrf) This is a collection of writeups, cheatsheets, videos, books related to SSRF in one single location
+- [**194**Star][2y] [Py] [f3d0x0/gpon](https://github.com/f3d0x0/gpon) Exploit for Remote Code Execution on GPON home routers (CVE-2018-10562) written in Python. Initially disclosed by VPNMentor (
+- [**194**Star][11m] [Visual Basic .NET] [dragokas/hijackthis](https://github.com/dragokas/hijackthis) A free utility that finds malware, adware and other security threats
+- [**194**Star][5m] [Go] [cuishark/cuishark](https://github.com/cuishark/cuishark) A protocol analyzer like a wireshark on CUI. cuishark is using libwireshark to analyze packets.
+- [**194**Star][11m] [JS] [comotion/vsf](https://github.com/comotion/vsf) Varnish Security Firewall
+- [**194**Star][11m] [Py] [hackatnow/djangohunter](https://github.com/hackatnow/djangohunter) Tool designed to help identify incorrectly configured Django applications that are exposing sensitive information.
+- [**193**Star][6m] [Shell] [suniceman/ss-fly](https://github.com/suniceman/ss-fly) 一键脚本搭建ss/ssr并开启bbr内核加速(Ubuntu/CentOS/Debian)
+- [**193**Star][2y] [PS] [vysecurity/angrypuppy](https://github.com/vysecurity/ANGRYPUPPY) Bloodhound Attack Path Automation in CobaltStrike
+- [**193**Star][1m] [ObjC] [ripperhe/debugo](https://github.com/ripperhe/Debugo)
+- [**193**Star][2y] [Py] [abdulrah33m/cl0nemast3r](https://github.com/Abdulrah33m/Cl0neMast3r) Git all your favorite tools in one click
+- [**193**Star][11m] [JS] [zer4tul/hacker-howto](https://github.com/zer4tul/hacker-howto) 本文原文由知名Hacker Eric S. Raymond 所撰写,教你如何成为一名黑客。
+- [**193**Star][3m] [C++] [xortroll/emuiibo](https://github.com/xortroll/emuiibo) Virtual amiibo (amiibo emulation) system for Nintendo Switch
+- [**193**Star][3y] [Go] [vesche/lonely-shell](https://github.com/vesche/lonely-shell) poc https reverse shell
+- [**193**Star][9m] [Batchfile] [tai7sy/fuckcdn](https://github.com/tai7sy/fuckcdn) CDN真实IP扫描,易语言开发
+- [**193**Star][11m] [Py] [scanlime/coastermelt](https://github.com/scanlime/coastermelt) An effort to make open source firmware for burning anything other than Blu-Ray data onto plastic discs with a BD-R drive.
+- [**193**Star][1m] [Shell] [roddhjav/pass-tomb](https://github.com/roddhjav/pass-tomb) A pass extension that helps you to keep the whole tree of password encrypted inside a tomb.
+- [**193**Star][3d] [CSS] [owasp/samm](https://github.com/owasp/samm)
+- [**193**Star][4m] [C] [nowsecure/frida-cycript](https://github.com/nowsecure/frida-cycript) Cycript fork powered by Frida.
+- [**193**Star][6m] [C++] [linushenze/keysteal](https://github.com/linushenze/keysteal) A macOS <= 10.14.3 Keychain exploit
+- [**193**Star][1m] [Py] [joxeankoret/cosa-nostra](https://github.com/joxeankoret/cosa-nostra) Cosa Nostra, a FOSS graph based malware clusterization toolkit.
+- [**193**Star][2m] [C#] [jakobbotsch/fuzzlyn](https://github.com/jakobbotsch/fuzzlyn) Fuzzer for the .NET toolchains, developed as a project for the 2018 Language-Based Security course at Aarhus University.
+- [**193**Star][2m] [C++] [googleprojectzero/street-party](https://github.com/googleprojectzero/street-party) Street Party is a suite of tools that allows the RTP streams of video conferencing implementations to be viewed and modified.
+- [**193**Star][1y] [Py] [frizb/bypassing-web-application-firewalls](https://github.com/frizb/bypassing-web-application-firewalls) A series of python scripts for generating weird character combinations for bypassing web application firewalls (WAF) and XSS blockers
+- [**193**Star][2y] [Py] [francisck/danderspritz_docs](https://github.com/francisck/danderspritz_docs) The goal of this project is to examine, reverse, and document the different modules available in the Equation Group's DanderSpritz post-exploitation framework leaked by the ShadowBrokers
+- [**193**Star][8m] [Py] [fastly/ftw](https://github.com/fastly/ftw) ftw:WAF 测试框架
+- [**193**Star][1y] [C] [ehsahil/recon-my-way](https://github.com/ehsahil/recon-my-way) This repository created for personal use and added tools from my latest blog post.
+- [**193**Star][9d] [JS] [dvandal/cryptonote-nodejs-pool](https://github.com/dvandal/cryptonote-nodejs-pool) Mining pool for all CryptoNote based coins using Cryptonight, Cryptonight Light and Cryptonight Heavy algorithms
+- [**193**Star][3m] [Java] [derekbabb/cybersecurity](https://github.com/derekbabb/cybersecurity) A curriculum for a high school cyber security course.
+- [**193**Star][6y] [C] [datasoft/honeyd](https://github.com/datasoft/honeyd) virtual honeypots
+- [**193**Star][3y] [C#] [codeshark-dev/nofuserex](https://github.com/codeshark-dev/nofuserex) Free deobfuscator for ConfuserEx.
+- [**193**Star][4y] [Clojure] [clojurewerkz/meltdown](https://github.com/clojurewerkz/meltdown) Clojure interface to Reactor, an event-driven programming and stream processing toolkit for the JVM
+- [**193**Star][21d] [C] [cathugger/mkp224o](https://github.com/cathugger/mkp224o) vanity address generator for tor onion v3 (ed25519) hidden services
+- [**193**Star][5m] [C++] [boyan-milanov/ropgenerator](https://github.com/boyan-milanov/ropgenerator) ROPGenerator is a tool that helps you building ROP exploits by finding and chaining gadgets together
+- [**193**Star][2m] [Py] [auth0/auth0-python](https://github.com/auth0/auth0-python) All information regarding using Auth0 with Python
+- [**192**Star][23d] [Go] [cruise-automation/k-rail](https://github.com/cruise-automation/k-rail) Kubernetes security tool for policy enforcement
+- [**192**Star][4y] [Py] [isecpartners/libtech-auditing-cheatsheet](https://github.com/isecpartners/libtech-auditing-cheatsheet)
+- [**192**Star][3y] [Ruby] [zed-0xff/pedump](https://github.com/zed-0xff/pedump) dump windows PE files using ruby
+- [**192**Star][2m] [Py] [unipacker/unipacker](https://github.com/unipacker/unipacker) Automatic and platform-independent unpacker for Windows binaries based on emulation
+- [**192**Star][6y] [Py] [smeegesec/hashtag](https://github.com/smeegesec/hashtag) Password Hash Identification
+- [**192**Star][4y] [C++] [mubix/netview](https://github.com/mubix/netview) Netview enumerates systems using WinAPI calls
+- [**192**Star][2y] [Java] [mesosphere/cassandra-mesos-deprecated](https://github.com/mesosphere/cassandra-mesos-deprecated) [DEPRECATED] This project is deprecated. It will be archived on December 1, 2017.
+- [**192**Star][1y] [Py] [malwaredllc/bamf](https://github.com/malwaredllc/bamf) BAMF (Backdoor Access Machine Farmer)
+- [**192**Star][5m] [Go] [lc/secretz](https://github.com/lc/secretz) secretz, minimizing the large attack surface of Travis CI
+- [**192**Star][1m] [Py] [lazza/recuperabit](https://github.com/lazza/recuperabit) A tool for forensic file system reconstruction.
+- [**192**Star][11m] [C] [ionescu007/winipt](https://github.com/ionescu007/winipt) The Windows Library for Intel Process Trace (WinIPT) is a project that leverages the new Intel Processor Trace functionality exposed by Windows 10 Redstone 5 (1809), through a set of libraries and a command-line tool.
+- [**192**Star][8d] [Go] [google/certificate-transparency-go](https://github.com/google/certificate-transparency-go) Auditing for TLS certificates, Go code.
+- [**192**Star][1m] [furrtek/dmg-cpu-inside](https://github.com/furrtek/dmg-cpu-inside) Reverse-engineered schematics for DMG-CPU-B
+- [**192**Star][1y] [Py] [foospidy/dbdat](https://github.com/foospidy/dbdat) performs numerous checks on a database to evaluate security.
+- [**192**Star][3m] [Py] [dionach/phemail](https://github.com/dionach/phemail) PhEmail is a python open source phishing email tool that automates the process of sending phishing emails as part of a social engineering test
+- [**192**Star][2y] [Assembly] [cybereason/siofra](https://github.com/cybereason/siofra) a tool designed to identify and exploit DLL hijacking vulnerabilities in Windows programs
+- [**192**Star][5y] [ActionScript] [cure53/flashbang](https://github.com/cure53/flashbang) Project "Flashbang" - An open-source Flash-security helper
+- [**192**Star][2y] [C++] [caledoniaproject/xlcloudclient](https://github.com/caledoniaproject/xlcloudclient) 迅雷离线Linux客户端,多种漏洞利用 ;-P 大家慢慢挖掘吧 哈哈 觉得好就点下 Star / Fork 吧
+- [**192**Star][2y] [Py] [brucetg/pentest-tools](https://github.com/brucetg/pentest-tools) 内网渗透工具
+- [**192**Star][2y] [C] [bindecy/hugedirtycowpoc](https://github.com/bindecy/hugedirtycowpoc) A POC for the Huge Dirty Cow vulnerability (CVE-2017-1000405)
+- [**192**Star][12m] [Py] [0xr0/shellver](https://github.com/0xr0/shellver) Reverse Shell Cheat Sheet TooL
+- [**191**Star][2m] [Java] [tongxiji/shadowsocks-java](https://github.com/tongxiji/shadowsocks-java) shadowsocks server base on netty4 , tcp & udp full support,
+- [**191**Star][3y] [Go] [koding/tunnel](https://github.com/koding/tunnel) Tunnel proxy package in Go
+- [**191**Star][2y] [Java] [p3gleg/pwnback](https://github.com/P3GLEG/PwnBack) Burp Extender plugin that generates a sitemap of a website using Wayback Machine
+- [**191**Star][1y] [HTML] [yaseng/iot-security-wiki](https://github.com/yaseng/iot-security-wiki) IOT security wiki
+- [**191**Star][3y] [Py] [xyntax/dirbrute](https://github.com/xyntax/dirbrute) 多线程WEB目录爆破工具 [Multi-thread WEB directory blasting tool(with dics inside) ]
+- [**191**Star][2y] [Py] [viralmaniar/wifi-dumper](https://github.com/viralmaniar/wifi-dumper) This is an open source tool to dump the wifi profiles and cleartext passwords of the connected access points on the Windows machine. This tool will help you in a Wifi penetration testing. Furthermore, it is useful while performing red team or an internal infrastructure engagements.
+- [**191**Star][3m] [Shell] [unbinilium/twist](https://github.com/unbinilium/twist) A light script for you to setup shadowsocks-libev server with high-speed connections and newest powerful features
+- [**191**Star][7m] [Py] [tintinweb/pub](https://github.com/tintinweb/pub) Vulnerability Notes, PoC Exploits and Write-Ups for security issues disclosed by tintinweb
+- [**191**Star][20d] [Py] [skyscanner/lambdaguard](https://github.com/skyscanner/lambdaguard) AWS Serverless Security
+- [**191**Star][2m] [JS] [sindresorhus/internal-ip](https://github.com/sindresorhus/internal-ip) Get your internal IP address
+- [**191**Star][4m] [Py] [sham00n/buster](https://github.com/sham00n/buster) An advanced tool for email reconnaissance
+- [**191**Star][4m] [ObjC] [riusksk/secconarchive](https://github.com/riusksk/secconarchive) Security Conference Archive
+- [**191**Star][2m] [Py] [projectante/dnsgen](https://github.com/projectante/dnsgen) Generates combination of domain names from the provided input.
+- [**191**Star][6m] [pochubs/pochubs](https://github.com/pochubs/pochubs) PocHubs是为了整合网上知名开源框架的漏洞详细和POC
+- [**191**Star][2m] [onesecure/shadowagentnotes](https://github.com/onesecure/shadowagentnotes)
+- [**191**Star][2m] [Py] [niklasrosenstein/pydoc-markdown](https://github.com/niklasrosenstein/pydoc-markdown) Create Python API documentation in Markdown format.
+- [**191**Star][3m] [Py] [jrspruitt/ubi_reader](https://github.com/jrspruitt/ubi_reader) Collection of Python scripts for reading information about and extracting data from UBI and UBIFS images.
+- [**191**Star][4y] [C++] [isecpartners/jailbreak](https://github.com/isecpartners/jailbreak) Jailbreak
+- [**191**Star][2y] [PS] [gimini/mimidbg](https://github.com/gimini/mimidbg) PowerShell oneliner to retrieve wdigest passwords from the memory
+- [**191**Star][26d] [Py] [ghostmanager/ghostwriter](https://github.com/ghostmanager/ghostwriter) The SpecterOps project management and reporting engine
+- [**191**Star][7m] [Shell] [gaenserich/hostsblock](https://github.com/gaenserich/hostsblock) an ad- and malware-blocking script for Linux
+- [**191**Star][4y] [HTML] [faber03/androidmalwareevaluatingtools](https://github.com/faber03/androidmalwareevaluatingtools) Evaluation tools for malware Android
+- [**191**Star][7d] [Go] [esrrhs/pingtunnel](https://github.com/esrrhs/pingtunnel) a tool that advertises tcp/udp/sock5 traffic as icmp traffic for forwarding.流量转发工具.
+- [**191**Star][11m] [Py] [emersonelectricco/fsf](https://github.com/emersonelectricco/fsf) File Scanning Framework
+- [**191**Star][13d] [Shell] [drduh/purse](https://github.com/drduh/purse) GPG asymmetric (YubiKey) password manager
+- [**191**Star][7m] [C] [andikleen/simple-pt](https://github.com/andikleen/simple-pt) Simple Intel CPU processor tracing on Linux
+- [**191**Star][1y] [Py] [ak1t4/open-redirect-scanner](https://github.com/ak1t4/open-redirect-scanner) open-redirect-scanner:open redirect subdomains scanner
+- [**191**Star][12m] [JS] [78778443/permeate](https://github.com/78778443/permeate) 一个用于渗透透测试演练的WEB系统,用于提升寻找网站能力,也可以用于web安全教学
+- [**190**Star][17d] [Py] [skelsec/jackdaw](https://github.com/skelsec/jackdaw) gather gather gather
+- [**190**Star][12m] [Py] [zerokeeper/webeye](https://github.com/zerokeeper/webeye) 快速简单地识别WEB服务器类型、CMS类型、WAF类型、WHOIS信息、以及语言框架的小脚本
+- [**190**Star][9d] [JS] [xiaokanghub/frida-android-unpack](https://github.com/xiaokanghub/frida-android-unpack) this unpack script for Android O and Android P
+- [**190**Star][3y] [C++] [wapiflapi/veles](https://github.com/wapiflapi/veles) Visual reverse engineering tool.
+- [**190**Star][1y] [PHP] [smarttang/w3a_soc](https://github.com/smarttang/w3a_soc) Web日志审计与网络监控集合一身的平台
+- [**190**Star][2m] [JS] [quarkslab/irma](https://github.com/quarkslab/irma) IRMA is an asynchronous & customizable analysis system for suspicious files.
+- [**190**Star][2m] [Ruby] [philnash/pwned](https://github.com/philnash/pwned) An easy, Ruby way to use the Pwned Passwords API.
+- [**190**Star][8m] [JS] [or3stis/apparatus](https://github.com/or3stis/apparatus) A graphical security analysis tool for IoT networks
+- [**190**Star][2m] [noorqureshi/kali-linux-cheatsheet](https://github.com/noorqureshi/kali-linux-cheatsheet) Kali Linux Cheat Sheet for Penetration Testers
+- [**190**Star][2y] [C] [nongiach/cve](https://github.com/nongiach/cve)
+- [**190**Star][1y] [Py] [nettitude/scrounger](https://github.com/nettitude/scrounger) Mobile application testing toolkit
+- [**190**Star][2y] [Py] [neex/gifoeb](https://github.com/neex/gifoeb) exploit for ImageMagick's uninitialized memory disclosure in gif coder
+- [**190**Star][2y] [Py] [mxdg/passbytcp](https://github.com/mxdg/passbytcp) 内网 tcp 穿透
+- [**190**Star][3m] [Py] [milo2012/metasploithelper](https://github.com/milo2012/metasploithelper) metasploitHelper
+- [**190**Star][3m] [Shell] [lateralblast/lunar](https://github.com/lateralblast/lunar) A UNIX security auditing tool based on several security frameworks
+- [**190**Star][4y] [JS] [isecpartners/introspy-analyzer](https://github.com/isecpartners/introspy-analyzer) a set of iOS and Android tools designed to help understand what an iOS or Android application is doing at runtime and assist in the identification of potential security issues.
+- [**190**Star][12m] [Go] [gravitational/cve-2018-1002105](https://github.com/gravitational/cve-2018-1002105) Test utility for cve-2018-1002105
+- [**190**Star][7m] [Py] [g0tmi1k/exe2hex](https://github.com/g0tmi1k/exe2hex) encodes an executable binary file into ASCII text format
+- [**190**Star][7m] [Py] [corelan/windbglib](https://github.com/corelan/windbglib) Public repository for windbglib, a wrapper around pykd.pyd (for Windbg), used by mona.py
+- [**190**Star][2y] [JS] [chichou/etacsufbo](https://github.com/chichou/etacsufbo) 基于 AST 变换的简易 Javascript 反混淆辅助工具
+- [**190**Star][4y] [C++] [aslody/elfhook](https://github.com/aslody/elfhook) modify PLT to hook api, supported android 5\6.
+- [**190**Star][6y] [Py] [andrewf/pcap2har](https://github.com/andrewf/pcap2har) A convertor from .pcap network capture files to HTTP Archive files.
+- [**190**Star][9m] [Go] [0x4d31/honeybits](https://github.com/0x4d31/honeybits) A PoC tool designed to enhance the effectiveness of your traps by spreading breadcrumbs & honeytokens across your systems to lure the attacker toward your honeypots
+- [**189**Star][2y] [Kotlin] [borisf/classyshark-bytecode-viewer](https://github.com/borisf/classyshark-bytecode-viewer) Browse your Java/Kotlin compiled code
+- [**189**Star][2d] [Py] [duo-labs/parliament](https://github.com/duo-labs/parliament) AWS IAM linting library
+- [**189**Star][9m] [JS] [noahziheng/ssr-helper](https://github.com/noahziheng/ssr-helper) A CLI helper of ShadowsocksR Python
+- [**189**Star][2y] [C] [sud01oo/processinjection](https://github.com/sud01oo/ProcessInjection) Some ways to inject a DLL into a alive process
+- [**189**Star][2y] [Py] [sheldoncoupeheure/autosqli](https://github.com/sheldoncoupeheure/AutoSQLi) An automatic SQL Injection tool which takes advantage of ~DorkNet~ Googler, Ddgr, WhatWaf and sqlmap.
+- [**189**Star][5d] [Py] [ydkhatri/mac_apt](https://github.com/ydkhatri/mac_apt) macOS Artifact Parsing Tool
+- [**189**Star][2y] [Go] [woj-ciech/osint](https://github.com/woj-ciech/osint)
+- [**189**Star][8d] [Py] [webfp/tor-browser-selenium](https://github.com/webfp/tor-browser-selenium) Tor Browser automation with Selenium.
+- [**189**Star][2y] [Py] [sherjilozair/dqn](https://github.com/sherjilozair/dqn) Basic DQN implementation
+- [**189**Star][5y] [C++] [rwfpl/rewolf-x86-virtualizer](https://github.com/rwfpl/rewolf-x86-virtualizer) Simple VM based x86 PE (portable exectuable) protector.
+- [**189**Star][1y] [Java] [rebeyond/memshell](https://github.com/rebeyond/memshell) a webshell resides in the memory of java web server
+- [**189**Star][1m] [Py] [phype/telnet-iot-honeypot](https://github.com/phype/telnet-iot-honeypot) Python telnet honeypot for catching botnet binaries
+- [**189**Star][13d] [Py] [mozillasecurity/grizzly](https://github.com/mozillasecurity/grizzly) A cross-platform browser fuzzing framework
+- [**189**Star][8m] [Py] [m4ll0k/takeover](https://github.com/m4ll0k/takeover) 子域名漏洞扫描器
+- [**189**Star][3y] [HTML] [liveoverflow/lo_nintendoswitch](https://github.com/liveoverflow/lo_nintendoswitch) Some of my PoC stuff for the Nintendo Switch
+- [**189**Star][9m] [C++] [kelvinhack/khypervisor](https://github.com/kelvinhack/khypervisor) kHypervisor is a lightweight bluepill-like nested VMM for Windows, it provides and emulating a basic function of Intel VT-x
+- [**189**Star][4y] [Py] [jduck/cve-2015-1538-1](https://github.com/jduck/cve-2015-1538-1) An exploit for CVE-2015-1538-1 - Google Stagefright ‘stsc’ MP4 Atom Integer Overflow Remote Code Execution
+- [**189**Star][7y] [C++] [hzphreak/vminjector](https://github.com/hzphreak/vminjector) DLL Injection tool to unlock guest VMs
+- [**189**Star][1y] [Go] [floyernick/fleep-go](https://github.com/floyernick/fleep-go) 根据文件的"magic number"判定文件的格式, Go语言编写
+- [**189**Star][6d] [OCaml] [fkie-cad/cwe_checker](https://github.com/fkie-cad/cwe_checker) cwe_checker finds vulnerable patterns in binary executables
+- [**189**Star][2y] [PS] [cybereason/invoke-wmilm](https://github.com/cybereason/invoke-wmilm) a PoC script for various methods to acheive authenticated remote code execution via WMI
+- [**189**Star][1m] [Shell] [controlplaneio/netassert](https://github.com/controlplaneio/netassert) Network security testing for DevSecOps workflows
+- [**189**Star][3y] [Shell] [b3rito/yodo](https://github.com/b3rito/yodo) Local Privilege Escalation
+- [**189**Star][5m] [PHP] [automattic/camptix](https://github.com/automattic/camptix) an easy to use and flexible event ticketing plugin created
+- [**189**Star][2m] [ObjC] [alexxy/netdiscover](https://github.com/alexxy/netdiscover) a network address discovering tool
+- [**189**Star][2m] [Py] [alainiamburg/sniffrom](https://github.com/alainiamburg/sniffrom) A tool for passive data capture and reconnaissance of serial flash chips. It is used in conjunction with a Saleae logic analyzer to reconstruct flash memory contents and extract contextual information about device operations.
+- [**188**Star][1y] [Py] [thesecondsun/shellab](https://github.com/thesecondsun/shellab) Linux and Windows shellcode enrichment utility
+- [**188**Star][2m] [Py] [scwuaptx/ctf](https://github.com/scwuaptx/ctf) Some CTF write up
+- [**188**Star][4y] [Java] [ripe-ncc/hadoop-pcap](https://github.com/ripe-ncc/hadoop-pcap) Hadoop library to read packet capture (PCAP) files
+- [**188**Star][4m] [C] [reswitched/libtransistor](https://github.com/reswitched/libtransistor) Open source toolchain for Switch development
+- [**188**Star][4y] [Py] [paulsec/hqlmap](https://github.com/paulsec/hqlmap) (Deprecated) HQLmap, Automatic tool to exploit HQL injections
+- [**188**Star][25d] [Py] [osquery/osquery-python](https://github.com/osquery/osquery-python) Python bindings for osquery's Thrift API
+- [**188**Star][2y] [Perl] [moham3driahi/xbruteforcer](https://github.com/moham3driahi/xbruteforcer) X Brute Forcer Tool
+- [**188**Star][4m] [Py] [milo2012/cve-2018-13379](https://github.com/milo2012/cve-2018-13379) CVE-2018-13379
+- [**188**Star][2m] [Py] [matrix1001/welpwn](https://github.com/matrix1001/welpwn) make pwnning an art, freeing you from dozens of meaningless jobs
+- [**188**Star][1y] [Py] [malwarereversebrasil/malwaresearch](https://github.com/malwarereversebrasil/malwaresearch) A command line tool to find malwares on http://openmalware.org
+- [**188**Star][4y] [krmaxwell/coding-entertainment](https://github.com/krmaxwell/coding-entertainment) Puzzles, challenges, games, CTFs, and other entertainment via coding
+- [**188**Star][1m] [Rust] [kpcyrd/badtouch](https://github.com/kpcyrd/badtouch) 可编程的网络验证破解的库, Rust编写
+- [**188**Star][6y] [Java] [jsontest/jsontest](https://github.com/jsontest/jsontest) JSON Testing Service - JSONTest.com
+- [**188**Star][2m] [Shell] [jagerzhang/cckiller](https://github.com/jagerzhang/cckiller) Linux轻量级CC攻击防御工具脚本
+- [**188**Star][3m] [Py] [internetarchive/warcprox](https://github.com/internetarchive/warcprox) WARC writing MITM HTTP/S proxy
+- [**188**Star][3y] [C] [hashcat/maskprocessor](https://github.com/hashcat/maskprocessor) High-Performance word generator with a per-position configureable charset
+- [**188**Star][2m] [PHP] [gallopyd/domain-tool](https://github.com/gallopyd/domain-tool) 微信域名拦截检测、QQ域名拦截检测、域名Whois查询:
+- [**188**Star][10m] [Haskell] [cifasis/quickfuzz](https://github.com/cifasis/quickfuzz) An experimental grammar fuzzer in Haskell using QuickCheck
+- [**188**Star][2y] [C++] [ahxr/ghost](https://github.com/ahxr/ghost) a light RAT that gives the server/attacker full remote access to the user's command-line interprete
+- [**187**Star][2m] [ObjC] [shadowsocksr-live/ssrmac](https://github.com/shadowsocksr-live/ssrmac) ShadowsocksR (SSR) client for macOS
+- [**187**Star][16d] [PHP] [0blio/caesar](https://github.com/0blio/Caesar) An HTTP based RAT (Remote Administration Tool) that allows you to remotely control devices from your browser
+- [**187**Star][3m] [Py] [swisskyrepo/damnwebscanner](https://github.com/swisskyrepo/damnwebscanner) Another web vulnerabilities scanner, this extension works on Chrome and Opera
+- [**187**Star][3m] [slowmist/papers](https://github.com/slowmist/papers) SlowMist Vulnerability Research Advisories
+- [**187**Star][17d] [Py] [rastating/shiva](https://github.com/rastating/shiva) An Ansible playbook to provision a host for penetration testing and CTF challenges
+- [**187**Star][6m] [PS] [phink-team/cobaltstrike-ms17-010](https://github.com/phink-team/cobaltstrike-ms17-010) cobaltstrike ms17-010 module and some other
+- [**187**Star][5y] [Ruby] [m4rco-/dorothy2](https://github.com/m4rco-/dorothy2) A malware/botnet analysis framework written in Ruby.
+- [**187**Star][2y] [C] [laanwj/etna_viv](https://github.com/laanwj/etna_viv) Etnaviv is a project to build a FOSS driver for the Vivante GCxxx series of embedded GPUs - laanwj's personal fork - upstream is
+- [**187**Star][2y] [Py] [kokjo/universalrop](https://github.com/kokjo/universalrop) universalrop:使用unicorn 和 z3 生成 ROP 链
+- [**187**Star][14d] [Shell] [kalilinuxtricksyt/easysploit](https://github.com/kalilinuxtricksyt/easysploit) EasySploit - Metasploit automation (EASIER and FASTER than EVER)
+- [**187**Star][2y] [Visual Basic .NET] [joesecurity/pafishmacro](https://github.com/joesecurity/pafishmacro) Pafish Macro is a Macro enabled Office Document to detect malware analysis systems and sandboxes. It uses evasion & detection techniques implemented by malicious documents.
+- [**187**Star][1y] [Py] [he1m4n6a/findwebshell](https://github.com/he1m4n6a/findwebshell) findWebshell是一款基于python开发的webshell检测工具。
+- [**187**Star][9m] [C#] [goldshtn/minidumper](https://github.com/goldshtn/minidumper) Write minidumps of .NET processes with full memory, only CLR heaps, or no memory at all
+- [**187**Star][13d] [Ruby] [erwanlr/fingerprinter](https://github.com/erwanlr/fingerprinter) CMS/LMS/Library etc Versions Fingerprinter
+- [**187**Star][3y] [Py] [droope/pwlist](https://github.com/droope/pwlist) Password lists obtained from strangers attempting to log in to my server.
+- [**187**Star][3y] [Py] [drizzlerisk/tunpacker](https://github.com/drizzlerisk/tunpacker) TUnpacker是一款Android脱壳工具
+- [**187**Star][2m] [Py] [danigargu/dereferencing](https://github.com/danigargu/dereferencing) IDA Pro plugin that implements more user-friendly register and stack views
+- [**187**Star][7m] [JS] [antoinevastel/fpscanner](https://github.com/antoinevastel/fpscanner)
+- [**187**Star][5d] [C] [aflgo/aflgo](https://github.com/aflgo/aflgo) Directed Greybox Fuzzing with AFL
+- [**186**Star][1y] [bo0om/waf-bypass-cheat-sheet](https://github.com/bo0om/waf-bypass-cheat-sheet) Another way to bypass WAF Cheat Sheet (draft)
+- [**186**Star][3y] [C] [tunz/afl-fuzz-js](https://github.com/tunz/afl-fuzz-js) afl-fuzz for javascript
+- [**186**Star][1y] [Py] [ha3mrx/ddos-attack](https://github.com/ha3mrx/ddos-attack) DDos-Attack Is A Python script online Attack
+- [**186**Star][4m] [Py] [ex0dus-0x/doxbox](https://github.com/ex0dus-0x/doxbox) web-based OSINT and reconaissance toolkit
+- [**186**Star][3y] [Lua] [automayt/ics-pcap](https://github.com/automayt/ics-pcap) A collection of ICS/SCADA PCAPs
+- [**186**Star][3y] [Py] [xyntax/filesensor](https://github.com/xyntax/filesensor) 基于爬虫的动态敏感文件探测工具
+- [**186**Star][1y] [wooyundota/droiddrops](https://github.com/wooyundota/droiddrops) 梳理下自己之前写过的文章
+- [**186**Star][3y] [Shell] [wismna/hackpi](https://github.com/wismna/hackpi) Hacking tool inside a Raspberry Pi zero
+- [**186**Star][1m] [Shell] [tomdev/teh_s3_bucketeers](https://github.com/tomdev/teh_s3_bucketeers) S3 bucket 搜索引擎
+- [**186**Star][3y] [PS] [sekirkity/browsergather](https://github.com/sekirkity/browsergather) Fileless web browser information extraction
+- [**186**Star][6y] [C] [saelo/cve-2014-0038](https://github.com/saelo/cve-2014-0038) Linux local root exploit for CVE-2014-0038
+- [**186**Star][5y] [Py] [rpp0/scapy-fakeap](https://github.com/rpp0/scapy-fakeap) Fake wireless Access Point (AP) implementation using Python and Scapy, intended for convenient testing of 802.11 protocols and implementations.
+- [**186**Star][24d] [C] [rfc1036/whois](https://github.com/rfc1036/whois) Intelligent WHOIS client
+- [**186**Star][8m] [offensive-security/cryptsetup-nuke-keys](https://github.com/offensive-security/cryptsetup-nuke-keys) A patch for cryptsetup which adds the option to nuke all keyslots given a certain passphrase.
+- [**186**Star][4y] [Java] [netspi/weblogicpassworddecryptor](https://github.com/netspi/weblogicpassworddecryptor) PowerShell script and Java code to decrypt WebLogic passwords
+- [**186**Star][6m] [ObjC] [nakiostudio/twitterx](https://github.com/nakiostudio/twitterx) Keeping Twitter for macOS alive with code injection
+- [**186**Star][3y] [Ruby] [miketierney/artii](https://github.com/miketierney/artii) A small gem to generate ASCII art from text fed in to it
+- [**186**Star][2d] [Rust] [insanitybit/grapl](https://github.com/insanitybit/grapl) Graph platform for Detection and Response
+- [**186**Star][8m] [PS] [hansesecure/credgrap_ie_edge](https://github.com/hansesecure/credgrap_ie_edge) Extract stored credentials from Internet Explorer and Edge
+- [**186**Star][1y] [Py] [d4vinci/pastejacker](https://github.com/d4vinci/pastejacker) Hacking systems with the automation of PasteJacking attacks.
+- [**185**Star][3y] [Nginx] [awslabs/ecs-nginx-reverse-proxy](https://github.com/awslabs/ecs-nginx-reverse-proxy) Reference architecture for deploying Nginx on ECS, both as a basic static resource server, and as a reverse proxy in front of a dynamic application server.
+- [**185**Star][3y] [Py] [f-secure/mittn](https://github.com/f-secure/mittn) Mittn: Security test tool runner for test automation in CI
+- [**185**Star][8m] [Rust] [nebgnahz/cv-rs](https://github.com/nebgnahz/cv-rs) Rust wrapper for OpenCV (manual at this point)
+- [**185**Star][4m] [C++] [chrisps/hexext](https://github.com/chrisps/Hexext) a plugin to improve the output of the hexrays decompiler through microcode manipulation.
+- [**185**Star][1y] [yellowbyte/analysis-of-anti-analysis](https://github.com/yellowbyte/analysis-of-anti-analysis) writings on anti-reverse engineering
+- [**185**Star][7y] [CoffeeScript] [shadowsocks/shadowsocks-dotcloud](https://github.com/shadowsocks/shadowsocks-dotcloud) a port of shadowsocks via websockets protocol, able to tunnel through HTTP proxy
+- [**185**Star][2y] [Py] [savio-code/ghost-phisher](https://github.com/savio-code/ghost-phisher) 带 GUI的钓鱼工具
+- [**185**Star][3y] [pwnsdx/badcode](https://github.com/pwnsdx/badcode) (Discontinued) BadCode is a signature database for static source code scanner that identify bad security practices.
+- [**185**Star][2y] [Py] [ninijay/pycurity](https://github.com/ninijay/pycurity) Python Security Scripts
+- [**185**Star][5y] [C++] [nihilus/scyllahide](https://github.com/nihilus/scyllahide) an x64/x86 usermode Anti-Anti-Debug library
+- [**185**Star][6y] [mynameismeerkat/pyretic](https://github.com/mynameismeerkat/pyretic) pyREtic is an extensible framework for in-memory Python bytecode reverse engineering
+- [**185**Star][1y] [Py] [mr-un1k0d3r/unibyav](https://github.com/mr-un1k0d3r/unibyav)
+- [**185**Star][6m] [Py] [lijiejie/idea_exploit](https://github.com/lijiejie/idea_exploit) Gather sensitive information from (.idea) folder for pentesters
+- [**185**Star][1y] [Py] [hexhive/t-fuzz](https://github.com/hexhive/t-fuzz)
+- [**185**Star][12m] [PS] [felixweyne/processspawncontrol](https://github.com/felixweyne/processspawncontrol) a Powershell tool which aims to help in the behavioral (process) analysis of malware. PsC suspends newly launched processes, and gives the analyst the option to either keep the process suspended, or to resume it.
+- [**185**Star][3y] [Go] [eahydra/socks](https://github.com/eahydra/socks) socks -- a proxy server.
+- [**185**Star][6y] [Py] [danmcinerney/dnsspoof](https://github.com/danmcinerney/dnsspoof) DNS spoofer. Drops DNS responses from the router and replaces it with the spoofed DNS response
+- [**185**Star][2d] [Py] [certcc/certfuzz](https://github.com/certcc/certfuzz) This project contains the source code for the CERT Basic Fuzzing Framework (BFF) and the CERT Failure Observation Engine (FOE).
+- [**185**Star][7m] [Java] [bypass007/nessus_to_report](https://github.com/bypass007/nessus_to_report) Nessus中文报告自动化脚本
+- [**185**Star][3y] [Py] [andy10101/apkdetecter](https://github.com/andy10101/apkdetecter) Android Apk查壳工具及源代码
+- [**185**Star][3y] [ObjC] [alonemonkey/macreverse](https://github.com/alonemonkey/macreverse) MacReverse Tools and Demo
+- [**184**Star][8m] [offensive-security/nethunter-devices](https://github.com/offensive-security/nethunter-devices) NetHunter Devices
+- [**184**Star][1y] [PHP] [yaofeifly/vub_env](https://github.com/yaofeifly/vub_env) 跟踪真实漏洞相关靶场环境搭建
+- [**184**Star][2y] [PS] [xtr4nge/fruityc2](https://github.com/xtr4nge/fruityc2) FruityC2 is a post-exploitation (and open source) framework based on the deployment of agents on compromised machines. Agents are managed from a web interface under the control of an operator.
+- [**184**Star][3m] [Py] [stixproject/python-stix](https://github.com/stixproject/python-stix) A Python library for parsing, manipulating, and generating STIX content.
+- [**184**Star][5m] [JS] [s0md3v/quark](https://github.com/s0md3v/quark) Quark is a data visualization framework.
+- [**184**Star][24d] [Py] [rhinosecuritylabs/ccat](https://github.com/rhinosecuritylabs/ccat) Cloud Container Attack Tool (CCAT) is a tool for testing security of container environments.
+- [**184**Star][3y] [CSS] [r00tkillah/horsepill](https://github.com/r00tkillah/horsepill) a PoC of a ramdisk based containerizing root kit
+- [**184**Star][2m] [Py] [pure-l0g1c/loki](https://github.com/pure-l0g1c/loki) Remote Access Tool/Botnet
+- [**184**Star][2m] [Py] [naategh/pyck](https://github.com/naategh/pyck) A collection of useful Python hacking scripts for beginners
+- [**184**Star][2y] [C++] [killvxk/disablewin10patchguardpoc](https://github.com/killvxk/disablewin10patchguardpoc) pseudo-code to show how to disable patchguard with win10
+- [**184**Star][3y] [Shell] [jivoi/openssh-backdoor-kit](https://github.com/jivoi/openssh-backdoor-kit)
+- [**184**Star][2d] [Go] [getlantern/lantern](https://github.com/getlantern/lantern) Lantern官方版本下载 蓝灯 翻墙 科学上网 外网 加速器 梯子 路由 lantern censorship-circumvention censorship gfw vpn accelerator
+- [**184**Star][1y] [C++] [fuwaneko/node-protobuf](https://github.com/fuwaneko/node-protobuf) Google Protocol Buffers wrapper for Node.js [UNMAINTAINED]
+- [**184**Star][3d] [enovella/tee-reversing](https://github.com/enovella/tee-reversing) A curated list of public TEE resources for learning how to reverse-engineer and achieve trusted code execution on ARM devices
+- [**184**Star][3y] [Pascal] [bowlofstew/rootkit.com](https://github.com/bowlofstew/rootkit.com) Mirror of users section of rootkit.com
+- [**184**Star][20d] [C++] [blackint3/openark](https://github.com/blackint3/openark) OpenArk is a open source anti-rookit(ARK) tool on Windows.
+- [**184**Star][2d] [Go] [asciimoo/morty](https://github.com/asciimoo/morty) morty:去除恶意HTML标签和属性,去除外部资源引用以防止第三方信息泄露
+- [**183**Star][3d] [C#] [carlospolop/privilege-escalation-awesome-scripts-suite](https://github.com/carlospolop/privilege-escalation-awesome-scripts-suite) PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
+- [**183**Star][1y] [Perl] [portswigger/upload-scanner](https://github.com/portswigger/upload-scanner) HTTP file upload scanner for Burp Proxy
+- [**183**Star][10d] [Lua] [kuoruan/luci-app-v2ray](https://github.com/kuoruan/luci-app-v2ray) LuCI support for V2Ray
+- [**183**Star][2m] [Py] [angr/pyvex](https://github.com/angr/pyvex) Python bindings for Valgrind's VEX IR.
+- [**183**Star][4y] [Py] [xen0ph0n/virustotal_api_tool](https://github.com/xen0ph0n/virustotal_api_tool) A Tool To Leverage Virus Total's Private API Key
+- [**183**Star][26d] [C] [wizardmac/readstat](https://github.com/wizardmac/readstat) Command-line tool (+ C library) for converting SAS, Stata, and SPSS files
+- [**183**Star][2y] [Py] [wavestone-cdt/hadoop-attack-library](https://github.com/wavestone-cdt/hadoop-attack-library) A collection of pentest tools and resources targeting Hadoop environments
+- [**183**Star][2m] [Ruby] [tresacton/dspectrumgui](https://github.com/tresacton/dspectrumgui) The goal of this app is to make it trivial to demodulate most basic RF transmission, and provide a digital worksheet for your reverse engineering efforts.
+- [**183**Star][2y] [Smali] [sslab-gatech/avpass](https://github.com/sslab-gatech/avpass) Tool for leaking and bypassing Android malware detection system
+- [**183**Star][1y] [C++] [sidechannelmarvels/tracer](https://github.com/sidechannelmarvels/tracer) Set of Dynamic Binary Instrumentation and visualization tools for execution traces.
+- [**183**Star][2m] [Java] [sensepost/mallet](https://github.com/sensepost/mallet) Mallet is an intercepting proxy for arbitrary protocols
+- [**183**Star][10m] [sapphirex00/threat-hunting](https://github.com/sapphirex00/threat-hunting) Personal compilation of APT malware from whitepaper releases, documents and own research
+- [**183**Star][5m] [Py] [s0md3v/orbit](https://github.com/s0md3v/orbit) Blockchain Transactions Investigation Tool
+- [**183**Star][4y] [rmusser01/cheatsheets](https://github.com/rmusser01/cheatsheets) Penetration Testing/Security Cheatsheets
+- [**183**Star][3m] [radareorg/r2con](https://github.com/radareorg/r2con) Radare Congress Stuff
+- [**183**Star][10m] [Py] [r4stl1n/ssh-brute-forcer](https://github.com/r4stl1n/ssh-brute-forcer) A Simple Multi-Threaded SSH Brute Forcer
+- [**183**Star][2y] [Py] [plazmaz/lnkup](https://github.com/plazmaz/lnkup) Generates malicious LNK file payloads for data exfiltration
+- [**183**Star][2y] [Go] [petercunha/goat](https://github.com/petercunha/goat) a trojan created in Go, using Twitter as a the C&C server
+- [**183**Star][2y] [Py] [paulsec/api-dnsdumpster.com](https://github.com/paulsec/api-dnsdumpster.com) (Unofficial) Python API for
+- [**183**Star][3d] [Py] [mzfr/liffy](https://github.com/mzfr/liffy) Local file inclusion exploitation tool
+- [**183**Star][3y] [Py] [misterch0c/firminator_backend](https://github.com/misterch0c/firminator_backend) The first open source vulnerability scanner for firmwares
+- [**183**Star][2y] [Py] [joxeankoret/cve-2017-7494](https://github.com/joxeankoret/cve-2017-7494) Remote root exploit for the SAMBA CVE-2017-7494 vulnerability
+- [**183**Star][2y] [C#] [ioncodes/dnpatch](https://github.com/ioncodes/dnpatch) .NET Patcher library using dnlib
+- [**183**Star][9d] [CSS] [hongkonggong/tldr-digital-security](https://github.com/hongkonggong/tldr-digital-security) TLDR Digital Safety Checklist
+- [**183**Star][3y] [Py] [hatbashbr/shodanhat](https://github.com/hatbashbr/shodanhat) search for hosts info with shodan
+- [**183**Star][30d] [feeicn/securityinterviewquestions](https://github.com/feeicn/securityinterviewquestions) 网络信息安全从业者面试指南(持续补充各公司招聘题目和侧重点)
+- [**183**Star][5m] [XSLT] [ernw/nmap-parse-output](https://github.com/ernw/nmap-parse-output) Converts/manipulates/extracts data from a Nmap scan output.
+- [**183**Star][11m] [Py] [crowecybersecurity/ad-ldap-enum](https://github.com/crowecybersecurity/ad-ldap-enum) An LDAP based Active Directory user and group enumeration tool
+- [**183**Star][3d] [C#] [carlospolop/privilege-escalation-awesome-scripts-suite](https://github.com/carlospolop/privilege-escalation-awesome-scripts-suite) PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
+- [**183**Star][4y] [Py] [breenmachine/dnsftp](https://github.com/breenmachine/dnsftp) Client/Server scripts to transfer files over DNS. Client scripts are small and only use native tools on the host OS.
+- [**183**Star][2y] [C#] [bhdresh/lazykatz](https://github.com/bhdresh/lazykatz) Lazykatz is an automation developed to extract credentials from remote targets protected with AV and/or application whitelisting software.
+- [**183**Star][6m] [Py] [3xp10it/xcdn](https://github.com/3xp10it/xcdn) Try to find out the real ip behind cdn
+- [**182**Star][7d] [Py] [aas-n/spraykatz](https://github.com/aas-n/spraykatz) A tool to spray love around the world.
+- [**182**Star][3y] [CSS] [kali-docs-cn/kali-linux-cookbook-zh](https://github.com/kali-docs-cn/kali-linux-cookbook-zh)
+- [**182**Star][4y] [C++] [zecure/shadowd](https://github.com/zecure/shadowd) The Shadow Daemon web application firewall server
+- [**182**Star][10m] [Py] [welchbj/bscan](https://github.com/welchbj/bscan) an asynchronous target enumeration tool
+- [**182**Star][2m] [Py] [vector35/community-plugins](https://github.com/vector35/community-plugins) Repository for community provided Binary Ninja plugins
+- [**182**Star][6m] [Java] [spring-io/nohttp](https://github.com/spring-io/nohttp) A project for ensuring that https is used
+- [**182**Star][7m] [Py] [s0md3v/bolt](https://github.com/s0md3v/bolt) CSRF Scanner
+- [**182**Star][2m] [C++] [rumpkernel/rumprun-packages](https://github.com/rumpkernel/rumprun-packages) Ready-made packages of software for running on the Rumprun unikernel
+- [**182**Star][1y] [Rust] [rabbitstack/rabbitc](https://github.com/rabbitstack/rabbitc) Micro container runtime
+- [**182**Star][7m] [C] [owasp/igoat-swift](https://github.com/owasp/igoat-swift) OWASP iGoat (Swift) - A Damn Vulnerable Swift Application for iOS
+- [**182**Star][2m] [noraj/oscp-exam-report-template-markdown](https://github.com/noraj/oscp-exam-report-template-markdown) OSCP Exam Report Template in Markdown
+- [**182**Star][16d] [Py] [natlas/natlas](https://github.com/natlas/natlas) Scaling Network Scanning. Changes prior to 1.0 may cause difficult to avoid backwards incompatibilities. You've been warned.
+- [**182**Star][7d] [Go] [milo2012/pathbrute](https://github.com/milo2012/pathbrute) 服务器目录/文件爆破工具
+- [**182**Star][6m] [Py] [metachar/mercury](https://github.com/metachar/mercury) Mercury is a hacking tool used to collect information and use the information to further hurt the target
+- [**182**Star][5y] [knoy/icloudhacker](https://github.com/knoy/icloudhacker) Arduino code to brute force Macbook's 4-digit iCloud PINs
+- [**182**Star][7d] [Py] [jpcertcc/malconfscan](https://github.com/jpcertcc/malconfscan) Volatility plugin for extracts configuration data of known malware
+- [**182**Star][5m] [C++] [jackullrich/shellcodestdio](https://github.com/jackullrich/shellcodestdio) An extensible framework for easily writing compiler optimized position independent x86 / x64 shellcode for windows platforms.
+- [**182**Star][3m] [Py] [j3ssie/iposint](https://github.com/j3ssie/iposint)
+- [**182**Star][5y] [C] [gdbinit/onyx-the-black-cat](https://github.com/gdbinit/onyx-the-black-cat) Kernel extension to disable anti-debug tricks and other useful XNU "features"
+- [**182**Star][3y] [Py] [cldrn/rainmap-lite](https://github.com/cldrn/rainmap-lite) Web界面,从浏览器中启动Nmap扫描. 界面是响应式, 可在手机/平板/PC浏览器中使用
+- [**182**Star][4y] [Pascal] [chiggins/malware_sources](https://github.com/chiggins/malware_sources) I found all of these samples on MalwareTech through Twitter somewhere
+- [**182**Star][1y] [Dockerfile] [cboin/re_lab](https://github.com/cboin/re_lab) 包含一些逆向工具的Docker容器
+- [**182**Star][2m] [Py] [carlashley/tccprofile](https://github.com/carlashley/tccprofile) Creates a TCC profile for new Privacy Payloads in macOS Mojave
+- [**182**Star][11m] [Py] [boy-hack/gwhatweb](https://github.com/boy-hack/gwhatweb) 网站CMS识别
+- [**182**Star][5y] [Py] [bishopfox/rickmote](https://github.com/bishopfox/rickmote) The Rickmote Controller: Hijack TVs using Google Chromecast
+- [**182**Star][2y] [PS] [absolomb/windowsenum](https://github.com/absolomb/windowsenum) A Powershell Privilege Escalation Enumeration Script.
+- [**182**Star][5m] [Py] [abdulgaphy/r3con1z3r](https://github.com/abdulgaphy/r3con1z3r) R3con1z3r is a lightweight Web information gathering tool with an intuitive features written in python. it provides a powerful environment in which open source intelligence (OSINT) web-based footprinting can be conducted quickly and thoroughly.
+- [**182**Star][10m] [Py] [0x27/ciscorv320dump](https://github.com/0x27/ciscorv320dump) CVE-2019-1652 /CVE-2019-1653 Exploits For Dumping Cisco RV320 Configurations & Debugging Data AND Remote Root Exploit!
+- [**182**Star][4y] [Py] [0vercl0k/z3-playground](https://github.com/0vercl0k/z3-playground) A repository to store Z3-python scripts you can use as examples, reminders, whatever.
+- [**181**Star][8m] [shadowsocks/papers](https://github.com/shadowsocks/papers) List of papers related to shadowsocks
+- [**181**Star][2y] [Py] [0x09al/wordsteal](https://github.com/0x09AL/WordSteal) This script will create a POC that will steal NTML hashes from a remote computer. Do not use this for illegal purposes.The author does not keep responsibility for any illegal action you do.
+- [**181**Star][16d] [TS] [tensult/cloud-reports](https://github.com/tensult/cloud-reports) Scans your AWS cloud resources and generates reports. Check out free hosted version:
+- [**181**Star][1m] [Go] [staaldraad/xxeserv](https://github.com/staaldraad/xxeserv) A mini webserver with FTP support for XXE payloads
+- [**181**Star][2y] [spacehuhn/arduinoarpspoof](https://github.com/spacehuhn/arduinoarpspoof) Kicks out everyone in your LAN via with an enc28j60 ethernet controller and Arduino.
+- [**181**Star][1m] [Py] [so87/oscp-pwk](https://github.com/so87/oscp-pwk) This is my cheatsheet and scripts developed while taking the Offensive Security Penetration Testing with Kali Linux course.
+- [**181**Star][2y] [C#] [ryhanson/externalc2](https://github.com/ryhanson/externalc2) A library for integrating communication channels with the Cobalt Strike External C2 server
+- [**181**Star][10m] [Py] [riramar/hsecscan](https://github.com/riramar/hsecscan) A security scanner for HTTP response headers.
+- [**181**Star][8m] [lucifer1993/cmsprint](https://github.com/lucifer1993/cmsprint) CMS和中间件指纹库
+- [**181**Star][3y] [C] [kriswebdev/android_aircrack](https://github.com/kriswebdev/android_aircrack) Aircrack-ng command-line for Android. Binaries & source.
+- [**181**Star][6m] [Py] [keithjjones/hostintel](https://github.com/keithjjones/hostintel) A modular Python application to collect intelligence for malicious hosts.
+- [**181**Star][5y] [jasonqng/chinese-keywords](https://github.com/jasonqng/chinese-keywords) Collected sensitive Chinese keywords from various sources; for censorship testing and searching for sensitive content
+- [**181**Star][4y] [C++] [jacob-baines/elfparser](https://github.com/jacob-baines/elfparser) Cross Platform ELF analysis
+- [**181**Star][2m] [Go] [hehnope/slurp](https://github.com/hehnope/slurp) Evaluate the security of S3 buckets
+- [**181**Star][8d] [Py] [fireeye/pwnauth](https://github.com/fireeye/pwnauth)
+- [**181**Star][2m] [Py] [eth-sri/debin](https://github.com/eth-sri/debin) Machine Learning to Deobfuscate Binaries
+- [**181**Star][2m] [Py] [delvelabs/tachyon](https://github.com/delvelabs/tachyon) Fast http dead file finder.
+- [**181**Star][5y] [C++] [darkwallet/darkleaks](https://github.com/darkwallet/darkleaks) Decentralised Information Black Market
+- [**181**Star][3y] [Py] [ctxis/wsuspect-proxy](https://github.com/ctxis/wsuspect-proxy) WSUSpect Proxy - a tool for MITM'ing insecure WSUS connections
+- [**181**Star][2y] [PS] [cobbr/obfuscatedempire](https://github.com/cobbr/obfuscatedempire) ObfuscatedEmpire is a fork of Empire with Invoke-Obfuscation integrated directly into it's functionality.
+- [**181**Star][3y] [Py] [anantshri/svn-extractor](https://github.com/anantshri/svn-extractor) simple script to extract all web resources by means of .SVN folder exposed over network.
+- [**181**Star][3y] [Py] [4w4k3/repy2exe](https://github.com/4w4k3/repy2exe) A Reverse Engineering Tool for py2exe applications.
+- [**180**Star][9d] [Py] [absozed/dockerpwn.py](https://github.com/absozed/dockerpwn.py) Python automation of Docker.sock abuse
+- [**180**Star][7m] [Go] [knownsec/gsm](https://github.com/knownsec/gsm) 使用树莓派配合硬件来进行短信转发
+- [**180**Star][12m] [C++] [zsshen/probedroid](https://github.com/zsshen/probedroid) A SDK for the creation of analysis tools without obtaining app source code in order to profile runtime performance, examine code coverage, and track high-risk behaviors of a given app on Android 5.0 and above.
+- [**180**Star][7m] [Java] [yubico/ykneo-openpgp](https://github.com/yubico/ykneo-openpgp) OpenPGP applet for the YubiKey NEO
+- [**180**Star][27d] [Py] [the-useless-one/pywerview](https://github.com/the-useless-one/pywerview) A (partial) Python rewriting of PowerSploit's PowerView
+- [**180**Star][2y] [Py] [tenrec-builders/pi-scan](https://github.com/tenrec-builders/pi-scan) Pi Scan is a simple, robust capture appliance for book scanners. It runs on a Raspberry Pi 2.
+- [**180**Star][5d] [Py] [tarcisio-marinho/gonnacry](https://github.com/tarcisio-marinho/gonnacry) A Linux Ransomware
+- [**180**Star][3m] [Py] [spiderlabs/ikeforce](https://github.com/spiderlabs/ikeforce)
+- [**180**Star][2y] [Py] [solusipse/spectrology](https://github.com/solusipse/spectrology) Images to audio files with corresponding spectrograms encoder.
+- [**180**Star][3m] [C#] [rasta-mouse/amsiscanbufferbypass](https://github.com/rasta-mouse/amsiscanbufferbypass) Circumvent AMSI by patching AmsiScanBuffer
+- [**180**Star][5m] [PS] [phillips321/adaudit](https://github.com/phillips321/adaudit) 自动域名审计
+- [**180**Star][22d] [JS] [nowsecure/node-applesign](https://github.com/nowsecure/node-applesign) NodeJS module and commandline utility for re-signing iOS applications (IPA files).
+- [**180**Star][2y] [Py] [nopernik/sshpry2.0](https://github.com/nopernik/sshpry2.0) SSHPry v2 - Spy & Control os SSH Connected client's TTY
+- [**180**Star][4d] [Py] [misp/misp-galaxy](https://github.com/misp/misp-galaxy) Clusters and elements to attach to MISP events or attributes (like threat actors)
+- [**180**Star][8m] [C#] [marx-yu/wopihost](https://github.com/marx-yu/wopihost) Office Online Server Wopi Host implement, No need Cobalt. Support DOCX, XLSX, PPTX online editing.
+- [**180**Star][2y] [PHP] [lcatro/php-webshell-bypass-waf](https://github.com/lcatro/php-webshell-bypass-waf) 分享PHP WebShell 绕过WAF 的一些经验 Share some experience about PHP WebShell bypass WAF and Anti-AV
+- [**180**Star][1m] [Py] [joxeankoret/idamagicstrings](https://github.com/joxeankoret/idamagicstrings) An IDA Python script to extract information from string constants.
+- [**180**Star][2y] [Py] [jeffxue/web-log-parser](https://github.com/jeffxue/web-log-parser) web日志分析工具
+- [**180**Star][2y] [Shell] [ha71/whatcms](https://github.com/ha71/whatcms) CMS Detection and Exploit Kit based on Whatcms.org API
+- [**180**Star][4y] [JS] [gamexg/shadowsocks_admin](https://github.com/gamexg/shadowsocks_admin) 一个 shadowsocks 服务器多账号管理系统,后端使用 shadowsocks-go 。支持多节点、流量限制等功能。
+- [**180**Star][1y] [Py] [fnk0c/cangibrina](https://github.com/fnk0c/cangibrina) A fast and powerfull dashboard (admin) finder
+- [**180**Star][6d] [PHP] [divineomega/password_exposed](https://github.com/divineomega/password_exposed)
+- [**179**Star][4y] [Py] [offlinemark/poet](https://github.com/offlinemark/poet) Post-exploitation tool
+- [**179**Star][12m] [Shell] [thelinuxchoice/locator](https://github.com/thelinuxchoice/locator) Geolocator, Ip Tracker, Device Info by URL (Serveo and Ngrok)
+- [**179**Star][6m] [Py] [fox-it/cve-2019-1040-scanner](https://github.com/fox-it/cve-2019-1040-scanner)
+- [**179**Star][4y] [Py] [offlinemark/poet](https://github.com/offlinemark/poet) Post-exploitation tool
+- [**179**Star][4m] [TeX] [hackl/tikz-network](https://github.com/hackl/tikz-network) A tool to visualize complex networks in LaTeX
+- [**179**Star][22d] [Py] [yelp/py_zipkin](https://github.com/yelp/py_zipkin) Provides utilities to facilitate the usage of Zipkin in Python
+- [**179**Star][3y] [Py] [videns/vulners-scanner](https://github.com/videns/vulners-scanner) Vulnerability scanner based on vulners.com audit API
+- [**179**Star][5m] [C] [therealsaumil/static-arm-bins](https://github.com/therealsaumil/static-arm-bins) 静态编译的arm二进制文件, 用于调试和运行时分析
+- [**179**Star][9m] [Py] [spamscope/spamscope](https://github.com/spamscope/spamscope) Fast Advanced Spam Analysis Tool
+- [**179**Star][12d] [Shell] [silverpoision/rock-on](https://github.com/silverpoision/rock-on) Rock-On is a all in one Recon tool that will just get a single entry of the Domain name and do all of the work alone.
+- [**179**Star][2d] [Py] [rndinfosecguy/scavenger](https://github.com/rndinfosecguy/scavenger) Crawler (Bot) searching for credential leaks on different paste sites.
+- [**179**Star][3y] [Py] [redteamsecurity/autonessus](https://github.com/redteamsecurity/autonessus) This script communicates with the Nessus API in an attempt to help with automating scans. Depending on the flag issued with the script, you can list all scans, list all policies, start, stop, pause, and resume a scan.
+- [**179**Star][1m] [Py] [nolze/msoffcrypto-tool](https://github.com/nolze/msoffcrypto-tool) Python tool and library for decrypting MS Office files with passwords or other keys
+- [**179**Star][4y] [Shell] [nccgroup/cisco-snmp-enumeration](https://github.com/nccgroup/cisco-snmp-enumeration) Automated Cisco SNMP Enumeration, Brute Force, Configuration Download and Password Cracking
+- [**179**Star][4y] [Py] [offlinemark/poet](https://github.com/offlinemark/poet) Post-exploitation tool
+- [**179**Star][13d] [Py] [meliht/mr.sip](https://github.com/meliht/mr.sip) SIP-Based Audit and Attack Tool
+- [**179**Star][2y] [Shell] [malaohu/ssr-with-net-speeder](https://github.com/malaohu/ssr-with-net-speeder) Shadowsocksr with net speeder
+- [**179**Star][7m] [kaonashi-passwords/kaonashi](https://github.com/kaonashi-passwords/kaonashi) Wordlist, rules and masks from Kaonashi project (RootedCON 2019)
+- [**179**Star][4y] [ObjC] [iosre/hippocamphairsalon](https://github.com/iosre/hippocamphairsalon) A simple universal memory editor (game trainer) on OSX/iOS
+- [**179**Star][4m] [Py] [hanul93/kicomav](https://github.com/hanul93/kicomav) KicomAV is an open source (GPL v2) antivirus engine designed for detecting malware and disinfecting it.
+- [**179**Star][2m] [C++] [google/libprotobuf-mutator](https://github.com/google/libprotobuf-mutator) Library for structured fuzzing with protobuffers
+- [**179**Star][6y] [C] [devttys0/littleblackbox](https://github.com/devttys0/littleblackbox) Database of private SSL/SSH keys for embedded devices
+- [**179**Star][4m] [Py] [blackarch/wordlistctl](https://github.com/blackarch/wordlistctl) Fetch, install and search wordlist archives from websites and torrent peers.
+- [**179**Star][7m] [C++] [arsenalrecon/arsenal-image-mounter](https://github.com/arsenalrecon/arsenal-image-mounter) Arsenal Image Mounter mounts the contents of disk images as complete disks in Microsoft Windows.
+- [**179**Star][3m] [Py] [anssi-fr/secuml](https://github.com/anssi-fr/secuml) Machine Learning for Computer Security
+- [**179**Star][11m] [Py] [acceis/leakscraper](https://github.com/acceis/leakscraper) LeakScraper is an efficient set of tools to process and visualize huge text files containing credentials. Theses tools are designed to help penetration testers and redteamers doing OSINT by gathering credentials belonging to their target.
+- [**179**Star][20d] [JS] [0vercl0k/cve-2019-9810](https://github.com/0vercl0k/cve-2019-9810) Exploit for CVE-2019-9810 Firefox on Windows 64-bit.
+- [**178**Star][11m] [zekesnider/nintendoswitchrestapi](https://github.com/zekesnider/nintendoswitchrestapi) Reverse engineered REST API used in the Nintendo Switch app for iOS. Includes documentation on Splatoon 2's API.
+- [**178**Star][4y] [ObjC] [x43x61x69/otx](https://github.com/x43x61x69/otx) The Mach-O disassembler. Now 64bit and Xcode 6 compatible.
+- [**178**Star][3m] [C] [soxrok2212/pskracker](https://github.com/soxrok2212/pskracker) An all-in-one WPA/WPS toolkit
+- [**178**Star][1y] [PS] [samratashok/admodule](https://github.com/samratashok/admodule) Microsoft signed ActiveDirectory PowerShell module
+- [**178**Star][2y] [C] [phoenixos/kernel](https://github.com/phoenixos/kernel) PhoenixOS Kernel Open Source Code
+- [**178**Star][8m] [pandazheng/threat-intelligence-analyst](https://github.com/pandazheng/threat-intelligence-analyst) 威胁情报,恶意样本分析,开源Malware代码收集
+- [**178**Star][2y] [Swift] [nvisium/swift.nv](https://github.com/nvisium/swift.nv) Security Training Tool that demonstrates common mobile application vulnerabilities using Swift in iOS
+- [**178**Star][6m] [C] [neurodroid/cryptonite](https://github.com/neurodroid/cryptonite) EncFS and TrueCrypt on Android
+- [**178**Star][2y] [Py] [netflix-skunkworks/repulsive-grizzly](https://github.com/netflix-skunkworks/repulsive-grizzly) Application Layer DoS Testing Framework
+- [**178**Star][2y] [Py] [maldevel/canisrufus](https://github.com/maldevel/canisrufus) canisrufus:Python 编写的后门,使用 Github 做 C&C
+- [**178**Star][3m] [lengjibo/att-ck-cn](https://github.com/lengjibo/att-ck-cn) ATT&CK实操
+- [**178**Star][1y] [Py] [iagcl/watchmen](https://github.com/iagcl/watchmen) (Not maintained anymore) Watchmen - AWS account compliance using centrally managed Config Rules
+- [**178**Star][6m] [Py] [hasherezade/ida_ifl](https://github.com/hasherezade/ida_ifl) IFL - Interactive Functions List (plugin for IDA Pro)
+- [**178**Star][3y] [Ruby] [espreto/wpsploit](https://github.com/espreto/wpsploit) WPSploit - Exploiting Wordpress With Metasploit
+- [**178**Star][4m] [JS] [authcov/authcov](https://github.com/authcov/authcov) Web app authorization coverage scanning
+- [**178**Star][2y] [aozhimin/mosec-2017](https://github.com/aozhimin/mosec-2017) 盘古团队和 POC 主办的移动安全技术峰会
+- [**178**Star][2y] [C++] [0x09al/dns-persist](https://github.com/0x09al/dns-persist) DNS-Persist is a post-exploitation agent which uses DNS for command and control.
+- [**177**Star][4m] [C++] [samyk/combobreaker](https://github.com/samyk/combobreaker) Motorized, portable, 3D printed, Arduino-based combination lock cracker
+- [**177**Star][11m] [Go] [fnzv/net-shield](https://github.com/fnzv/net-Shield) An Easy and Simple Anti-DDoS solution for VPS,Dedicated Servers and IoT devices - Beta
+- [**177**Star][2y] [Py] [woj-ciech/daily-dose-of-malware](https://github.com/woj-ciech/daily-dose-of-malware) Script lets you gather malicious software and c&c servers from open source platforms like Malshare, Malcode, Google, Cymon - vxvault, cybercrime tracker and c2 for Pony.
+- [**177**Star][6m] [Py] [trailofbits/binjascripts](https://github.com/trailofbits/binjascripts) Scripts for Binary Ninja
+- [**177**Star][6y] [Py] [syworks/wireless-ids](https://github.com/syworks/wireless-ids) Ability to detect suspicious activity such as (WEP/WPA/WPS) attack by sniffing the air for wireless packets.
+- [**177**Star][3m] [JS] [sindresorhus/is-reachable](https://github.com/sindresorhus/is-reachable) Check if servers are reachable
+- [**177**Star][2y] [rapid7/sonar](https://github.com/rapid7/sonar) Project Sonar
+- [**177**Star][1y] [random-robbie/bugbounty-scans](https://github.com/random-robbie/bugbounty-scans) aquatone results for sites with bug bountys
+- [**177**Star][2y] [C] [mcarpenter/afl](https://github.com/mcarpenter/afl) DEPRECATED. Will be removed 09/2019. Please see
+- [**177**Star][1y] [Py] [johnlatwc/pypowershellxray](https://github.com/johnlatwc/pypowershellxray) Python script to decode common encoded PowerShell scripts
+- [**177**Star][5m] [Shell] [ginjachris/pentmenu](https://github.com/ginjachris/pentmenu) A bash script for recon and DOS attacks
+- [**177**Star][8m] [eoftedal/writings](https://github.com/eoftedal/writings) blog posts
+- [**177**Star][12d] [Py] [dictation-toolbox/aenea](https://github.com/dictation-toolbox/aenea) Client-server library for using voice macros from Dragon NaturallySpeaking and Dragonfly on remote/non-windows hosts.
+- [**177**Star][7m] [PS] [decoder-it/psgetsystem](https://github.com/decoder-it/psgetsystem) getsystem via parent process using ps1 & embeded c#
+- [**177**Star][15d] [Py] [critical-start/pastebin_scraper](https://github.com/critical-start/pastebin_scraper) monitor pastebin for interesting information
+- [**177**Star][3m] [C] [cloudflare/mmproxy](https://github.com/cloudflare/mmproxy) mmproxy, the magical PROXY protocol gateway
+- [**176**Star][7m] [JS] [openwisp/netjsongraph.js](https://github.com/openwisp/netjsongraph.js) NetJSON NetworkGraph visualizer based on d3.js
+- [**176**Star][3d] [HTML] [zaproxy/zap-core-help](https://github.com/zaproxy/zap-core-help) The help files for the OWASP ZAP core
+- [**176**Star][1y] [C++] [ysrc/antivirtualapp](https://github.com/ysrc/antivirtualapp) 检测当前app是否运行在VirtualApp虚拟机中
+- [**176**Star][28d] [Py] [yassineaboukir/asnlookup](https://github.com/yassineaboukir/asnlookup) Leverage ASN to look up IP addresses (IPv4 & IPv6) owned by a specific organization for reconnaissance purposes, then run port scanning on it.
+- [**176**Star][13d] [Py] [thekingofduck/filemonitor](https://github.com/thekingofduck/filemonitor) 文件变化实时监控工具(代码审计/黑盒/白盒审计辅助工具)
+- [**176**Star][2m] [rust-fuzz/trophy-case](https://github.com/rust-fuzz/trophy-case)
+- [**176**Star][3y] [C] [riscure/rhme-2016](https://github.com/riscure/rhme-2016) Rhme2 challenge (2016)
+- [**176**Star][19d] [Py] [mschwager/gitem](https://github.com/mschwager/gitem) A Github organization reconnaissance tool.
+- [**176**Star][2m] [Py] [mrschyte/nmap-converter](https://github.com/mrschyte/nmap-converter) Python script for converting nmap reports into XLS
+- [**176**Star][3m] [Py] [martinvigo/email2phonenumber](https://github.com/martinvigo/email2phonenumber) A OSINT tool to obtain a target's phone number just by having his email address
+- [**176**Star][4y] [Go] [jrozner/sonar](https://github.com/jrozner/sonar) Self contained cross platform DNS recon tool
+- [**176**Star][1y] [C#] [jaredhaight/sharpattack](https://github.com/jaredhaight/sharpattack) A simple wrapper for C# tools
+- [**176**Star][2y] [Shell] [ioactive/repossessed](https://github.com/ioactive/repossessed) A project designed to parse public source code repositories and find various types of vulnerabilities.
+- [**176**Star][3y] [hexorg/cheatenginetables](https://github.com/hexorg/cheatenginetables) Repository of tables for CheatEngine
+- [**176**Star][6y] [C] [gat3way/hashkill](https://github.com/gat3way/hashkill) hashkill password recovery tool
+- [**176**Star][4y] [Shell] [floyd-fuh/tiny-mitm-proxy](https://github.com/floyd-fuh/tiny-mitm-proxy) Probably one of the smallest SSL MITM proxies you can make
+- [**176**Star][11m] [C] [fate0/xmark](https://github.com/fate0/xmark) A PHP7 extension that can hook most functions/classes and parts of opcodes
+- [**176**Star][4y] [Py] [csababarta/ntdsxtract](https://github.com/csababarta/ntdsxtract) Active Directory forensic framework
+- [**176**Star][4y] [PHP] [chuckfw/owaspbwa](https://github.com/chuckfw/owaspbwa) OWASP Broken Web Applications Project
+- [**176**Star][2y] [Shell] [bitvijays/pentest-scripts](https://github.com/bitvijays/pentest-scripts) 渗透用脚本
+- [**176**Star][4y] [C#] [alphadelta/secure-desktop](https://github.com/alphadelta/secure-desktop) Anti-keylogger/anti-rat application for Windows
+- [**176**Star][11m] [Java] [aalhuz/navex](https://github.com/aalhuz/navex) is an exploit generation framework for web applications.
+- [**175**Star][2y] [C++] [fireice-uk/xmr-stak-amd](https://github.com/fireice-uk/xmr-stak-amd) Monero AMD miner
+- [**175**Star][16d] [Java] [0kee-team/javaprobe](https://github.com/0kee-team/javaprobe) A Java runtime information-gathering tool which uses the Java Attach API for information acquisition
+- [**175**Star][2y] [PS] [fsecurelabs/azurite](https://github.com/FSecureLABS/Azurite) Enumeration and reconnaissance activities in the Microsoft Azure Cloud.
+- [**175**Star][1m] [C] [radareorg/radare2-extras](https://github.com/radareorg/radare2-extras) Source graveyard and random candy for radare2
+- [**175**Star][3y] [Shell] [praetorian-code/mitm-vm](https://github.com/praetorian-code/mitm-vm) An easy-to-deploy virtual machine that can provide flexible man-in-the-middle capabilities.
+- [**175**Star][4m] [Py] [techbliss/python_editor](https://github.com/techbliss/python_editor) Better CodeEditor for Ida Pro.
+- [**175**Star][1y] [sysml/lightvm](https://github.com/sysml/lightvm) a virtualization solution based on Xen that is optimized to offer fast boot-times regardless of the number of active VMs
+- [**175**Star][2y] [sie504/struts-s2-xxx](https://github.com/sie504/struts-s2-xxx) 整理收集Struts2漏洞环境
+- [**175**Star][4y] [Py] [secforce/snmp-brute](https://github.com/secforce/snmp-brute) Fast SNMP brute force, enumeration, CISCO config downloader and password cracking script.
+- [**175**Star][5y] [JS] [samyk/quickjack](https://github.com/samyk/quickjack) Quickjack is a point-and-click tool for intuitively producing advanced clickjacking and frame slicing attacks.
+- [**175**Star][2y] [Perl] [portcullislabs/enum4linux](https://github.com/portcullislabs/enum4linux) enum4Linux is a Linux alternative to enum.exe for enumerating data from Windows and Samba hosts.
+- [**175**Star][9m] [PHP] [paragonie/password_lock](https://github.com/paragonie/password_lock) Wraps Bcrypt-SHA2 in Authenticated Encryption
+- [**175**Star][3y] [Go] [nats-io/nats-top](https://github.com/nats-io/nats-top) A top-like tool for monitoring NATS servers.
+- [**175**Star][2y] [Java] [ms0x0/dayu](https://github.com/ms0x0/dayu) 一款开源指纹识别工具。
+- [**175**Star][2y] [Py] [jasonish/py-idstools](https://github.com/jasonish/py-idstools) idstools: Snort and Suricata Rule and Event Utilities in Python (Including a Rule Update Tool)
+- [**175**Star][2m] [C#] [jaegertracing/jaeger-client-csharp](https://github.com/jaegertracing/jaeger-client-csharp) C# client (tracer) for Jaeger
+- [**175**Star][9m] [guardrailsio/awesome-java-security](https://github.com/guardrailsio/awesome-java-security) Awesome Java Security Resources
+- [**175**Star][7y] [Py] [gdssecurity/gwt-penetration-testing-toolset](https://github.com/gdssecurity/gwt-penetration-testing-toolset) A set of tools made to assist in penetration testing GWT applications. Additional details about these tools can be found on my OWASP Appsec DC slides available here:
+- [**175**Star][3y] [C#] [gangzhuo/kcptun-gui-windows](https://github.com/gangzhuo/kcptun-gui-windows) GUI for kcptun (
+- [**175**Star][3m] [C#] [dionach/ntdsaudit](https://github.com/dionach/ntdsaudit) An Active Directory audit utility
+- [**175**Star][9m] [HTML] [cryptogenic/ps4-6.20-webkit-code-execution-exploit](https://github.com/cryptogenic/ps4-6.20-webkit-code-execution-exploit) A WebKit exploit using CVE-2018-4441 to obtain RCE on PS4 6.20.
+- [**175**Star][4y] [Ruby] [brav0hax/smbexec](https://github.com/brav0hax/smbexec) A rapid psexec style attack with samba tools
+- [**175**Star][1y] [Shell] [brannondorsey/sniff-probes](https://github.com/brannondorsey/sniff-probes) Plug-and-play bash script for sniffing 802.11 probes requests
+- [**175**Star][5m] [C] [acama/xrop](https://github.com/acama/xrop) Tool to generate ROP gadgets for ARM, AARCH64, x86, MIPS, PPC, RISCV, SH4 and SPARC
+- [**175**Star][1y] [Py] [0xbug/biu-framework](https://github.com/0xbug/biu-framework) Security Scan Framework For Enterprise Intranet Based Services
+- [**174**Star][2d] [Go] [jaeles-project/jaeles](https://github.com/jaeles-project/jaeles) The Swiss Army knife for automated Web Application Testing
+- [**174**Star][7m] [Py] [osirislab/ctf-solutions](https://github.com/osirislab/CTF-Solutions) Solutions to a variety of Capture The Flag challenges from different competitions.
+- [**174**Star][11m] [PS] [qax-a-team/cobaltstrike-toolset](https://github.com/QAX-A-Team/CobaltStrike-Toolset) Aggressor Script, Kits, Malleable C2 Profiles, External C2 and so on
+- [**174**Star][1y] [PHP] [securitypaper/mail_fishing](https://github.com/SecurityPaper/mail_fishing) 甲方安全工程师必备,内部钓鱼系统
+- [**174**Star][2y] [Py] [virtuesecurity/aws-extender](https://github.com/virtuesecurity/aws-extender) AWS Extender (Cloud Storage Tester) is a Burp plugin to assess permissions of cloud storage containers on AWS, Google Cloud and Azure.
+- [**174**Star][4m] [Py] [tweksteen/jenkins-decrypt](https://github.com/tweksteen/jenkins-decrypt) Credentials dumper for Jenkins
+- [**174**Star][6m] [HTML] [trishmapow/rf-jam-replay](https://github.com/trishmapow/rf-jam-replay) Jam and replay attack on vehicle keyless entry systems.
+- [**174**Star][2m] [C++] [threeme3/wsprrypi](https://github.com/threeme3/wsprrypi) Bareback LF/MF/HF/VHF WSPR transmitter using a Raspberry Pi
+- [**174**Star][5y] [Py] [smarnach/pyexiftool](https://github.com/smarnach/pyexiftool) a Python library to communicate with an instance of Phil Harvey's excellent ExifTool command-line application.
+- [**174**Star][4y] [Py] [shadowsocks-backup/shadowsocks](https://github.com/shadowsocks-backup/shadowsocks)
+- [**174**Star][3y] [Java] [secure-software-engineering/droidbench](https://github.com/secure-software-engineering/droidbench) A micro-benchmark suite to assess the stability of taint-analysis tools for Android
+- [**174**Star][6d] [HTML] [openvizsla/ov_ftdi](https://github.com/openvizsla/ov_ftdi) FT2232H-based USB sniffer
+- [**174**Star][2m] [Py] [markbaggett/srum-dump](https://github.com/markbaggett/srum-dump) A forensics tool to convert the data in the Windows srum (System Resource Usage Monitor) database to an xlsx spreadsheet.
+- [**174**Star][6m] [Go] [liamg/furious](https://github.com/liamg/furious) Golang IP/port scanner with SYN (stealth) scanning and device manufacturer identification
+- [**174**Star][1y] [Dockerfile] [kozmic/laravel-poc-cve-2018-15133](https://github.com/kozmic/laravel-poc-cve-2018-15133) PoC for CVE-2018-15133 (Laravel unserialize vulnerability)
+- [**174**Star][1y] [JS] [knownsec/wam](https://github.com/knownsec/wam) Web App Monitor
+- [**174**Star][1y] [Go] [ice3man543/hawkeye](https://github.com/ice3man543/hawkeye) Hawkeye filesystem analysis tool
+- [**174**Star][4y] [C] [hvqzao/foolav](https://github.com/hvqzao/foolav) Pentest tool for antivirus evasion and running arbitrary payload on target Wintel host
+- [**174**Star][3m] [fkie-cad/awesome-embedded-and-iot-security](https://github.com/fkie-cad/awesome-embedded-and-iot-security) A curated list of awesome embedded and IoT security resources.
+- [**174**Star][2y] [Java] [fengyouchao/sockslib](https://github.com/fengyouchao/sockslib) A Java library of SOCKS5 protocol including client and server
+- [**174**Star][2y] [Py] [duo-labs/idapython](https://github.com/duo-labs/idapython) a few Python modules developed for use with IDA Pro from the researchers at Duo Labs.
+ - [cortex_m_firmware](https://github.com/duo-labs/idapython/blob/master/cortex_m_firmware.py) grooms an IDA Pro database containing firmware from an ARM Cortex M microcontroller.
+ - [amnesia](https://github.com/duo-labs/idapython/blob/master/amnesia.py) an IDAPython module designed to use byte level heuristics to find ARM thumb instructions in undefined bytes in an IDA Pro database
+ - [REobjc](https://github.com/duo-labs/idapython/blob/master/reobjc.py) an IDAPython module designed to make proper cross references between calling functions and called functions in Objective-C methods
+- [**174**Star][2m] [Py] [comthings/pandwarf](https://github.com/comthings/pandwarf) RF analysis tool with a sub-1 GHz wireless transceiver controlled by a smartphone or
+- [**174**Star][1m] [Py] [codewatchorg/sqlipy](https://github.com/codewatchorg/sqlipy) sqlipy: Burp Suite 插件, 使用 SQLMap API 集成SQLMap
+- [**174**Star][1m] [Java] [calebfenton/apkfile](https://github.com/calebfenton/apkfile) Android app analysis and feature extraction library
+- [**174**Star][29d] [azure/azure-storage-java](https://github.com/azure/azure-storage-java) Microsoft Azure Storage Library for Java
+- [**174**Star][4m] [Py] [antonin-deniau/cave_miner](https://github.com/antonin-deniau/cave_miner) Search for code cave in all binaries
+- [**174**Star][1m] [PHP] [78778443/xssplatform](https://github.com/78778443/xssplatform) 一个经典的XSS渗透管理平台
+- [**174**Star][2y] [PS] [3gstudent/list-rdp-connections-history](https://github.com/3gstudent/list-rdp-connections-history) Use powershell to list the RDP Connections History of logged-in users or all users
+- [**173**Star][8m] [dgiese/dustcloud-documentation](https://github.com/dgiese/dustcloud-documentation) Xiaomi Smart Home Device Reverse Engineering and Hacking - Documentation Repo
+- [**173**Star][4m] [PHP] [opensec-cn/chip](https://github.com/opensec-cn/chip) a simple tool to detect potential security threat in php code
+- [**173**Star][16d] [microsvuln/awesome-afl](https://github.com/microsvuln/awesome-afl) A curated list of different AFL forks and AFL inspired fuzzers with detailed equivalent academic papers with AFL-fuzzing tutorials
+- [**173**Star][1m] [Py] [fsecurelabs/jandroid](https://github.com/fsecurelabs/jandroid)
+- [**173**Star][1m] [Go] [gavinguan24/ahri](https://github.com/gavinguan24/ahri) Ahri is an intranet sharing tool. Like VPN
+- [**173**Star][6d] [Py] [alienvault-otx/otx-python-sdk](https://github.com/AlienVault-OTX/OTX-Python-SDK) The Python SDK for AlienVault OTX
+- [**173**Star][1y] [Py] [apt55/google_explorer](https://github.com/APT55/google_explorer) Mass exploitation tool in python
+- [**173**Star][2m] [C#] [zodiacon/kernelexplorer](https://github.com/zodiacon/kernelexplorer)
+- [**173**Star][3m] [JS] [zjonsson/node-unzipper](https://github.com/zjonsson/node-unzipper) node.js cross-platform unzip using streams
+- [**173**Star][7y] [Py] [trivio/common_crawl_index](https://github.com/trivio/common_crawl_index) billions of pages randomly crawled from the internet
+- [**173**Star][1m] [C] [rokups/virtual-reality](https://github.com/rokups/virtual-reality) Stealthy backdoor for Windows operating systems
+- [**173**Star][6m] [Java] [ota4j-team/opentest4j](https://github.com/ota4j-team/opentest4j) Open Test Alliance for the JVM
+- [**173**Star][4y] [Py] [osandamalith/lfifreak](https://github.com/osandamalith/lfifreak) A unique automated LFi Exploiter with Bind/Reverse Shells
+- [**173**Star][4m] [Dockerfile] [obscuritylabs/rai](https://github.com/obscuritylabs/rai) Rapid Attack Infrastructure (RAI)
+- [**173**Star][14d] [C] [netoptimizer/network-testing](https://github.com/netoptimizer/network-testing) Network Testing Tools for testing the Linux network stack
+- [**173**Star][2y] [Py] [nccgroup/aws-recipes](https://github.com/nccgroup/aws-recipes) A number of Recipes for AWS
+- [**173**Star][7d] [C] [microsoft/pqcrypto-sidh](https://github.com/microsoft/pqcrypto-sidh) SIDH Library is a fast and portable software library that implements state-of-the-art supersingular isogeny cryptographic schemes. The chosen parameters aim to provide security against attackers running a large-scale quantum computer, and security against classical algorithms.
+- [**173**Star][1y] [ObjC] [macmade/filevaultcracker](https://github.com/macmade/filevaultcracker) macOS FileVault cracking tool
+- [**173**Star][5d] [C] [lttng/lttng-tools](https://github.com/lttng/lttng-tools) The lttng-tools project provides a session daemon (lttng-sessiond) that acts as a tracing registry, the "lttng" command line for tracing control, a lttng-ctl library for tracing control and a lttng-relayd for network streaming.
+- [**173**Star][6m] [Py] [lmco/dart](https://github.com/lmco/dart) DART is a test documentation tool created by the Lockheed Martin Red Team to document and report on penetration tests, especially in isolated network environments.
+- [**173**Star][7m] [C#] [krzys-h/undertalemodtool](https://github.com/krzys-h/undertalemodtool) The most complete tool for modding, decompiling and unpacking Undertale (and other Game Maker: Studio games!)
+- [**173**Star][11m] [C++] [jonatan1024/clrinject](https://github.com/jonatan1024/clrinject) 将 C#EXE 或 DLL 程序集注入任意CLR 运行时或者其他进程的 AppDomain
+- [**173**Star][3m] [JS] [infusion/node-dhcp](https://github.com/infusion/node-dhcp) A DHCP server and client written in pure JavaScript
+- [**173**Star][3y] [PS] [infocyte/pshunt](https://github.com/infocyte/pshunt) Powershell Threat Hunting Module
+- [**173**Star][1y] [C#] [ikende/beetle.dt](https://github.com/ikende/beetle.dt) 分布式压力测试工具
+- [**173**Star][7y] [Py] [grutz/h3c-pt-tools](https://github.com/grutz/h3c-pt-tools) Huawei/H3C/HP Penetration Testing Tools
+- [**173**Star][2y] [C] [geosn0w/reverse-engineering-tutorials](https://github.com/geosn0w/reverse-engineering-tutorials) Some Reverse Engineering Tutorials for Beginners
+- [**173**Star][2m] [Shell] [duy13/vddos-protection](https://github.com/duy13/vddos-protection) Welcome to vDDoS, a HTTP(S) DDoS Protection Reverse Proxy. Thank you for using!
+- [**173**Star][4m] [dhaval17/awsome-security-write-ups-and-pocs](https://github.com/dhaval17/awsome-security-write-ups-and-pocs) Awesome Writeups and POCs
+- [**173**Star][4y] [Py] [dc3l1ne/blasting_dictionary](https://github.com/dc3l1ne/blasting_dictionary) 爆破字典
+- [**173**Star][3m] [cptgibbon/house-of-corrosion](https://github.com/cptgibbon/house-of-corrosion) A description of the "House of Corrosion" GLIBC heap exploitation technique.
+- [**173**Star][3y] [Py] [comsecuris/shannonre](https://github.com/comsecuris/shannonre) Helpful scripts for various tasks performed during reverse engineering the Shannon Baseband with the goal to exploit the Samsung Galaxy S6
+- [**173**Star][2y] [Py] [cldrn/macphish](https://github.com/cldrn/macphish) macphish:Office 宏 Payload 生成器(Mac 版)
+- [**173**Star][2m] [Py] [busescanfly/pretty](https://github.com/busescanfly/pretty) "PRinter Exploitation Toolkit" LAN automation tool
+- [**173**Star][2y] [CSS] [bhdresh/socialengineeringpayloads](https://github.com/bhdresh/socialengineeringpayloads) This is a collection of social engineering tricks and payloads being used for credential theft and spear phishing attacks.
+- [**172**Star][24d] [OCaml] [mirage/alcotest](https://github.com/mirage/alcotest) A lightweight and colourful test framework
+- [**172**Star][10d] [Py] [fireeye/fidl](https://github.com/fireeye/fidl) A sane API for IDA Pro's decompiler. Useful for malware RE and vulnerability research
+- [**172**Star][2y] [C++] [zerocoin/libzerocoin](https://github.com/zerocoin/libzerocoin) Zerocoin: C++ lib for anonymous extension to bitcoin
+- [**172**Star][2y] [C] [xerub/extra_recipe](https://github.com/xerub/extra_recipe) extra_recipe:Exception-orientedexploitation
+- [**172**Star][2y] [PS] [ubeeri/invoke-usersimulator](https://github.com/ubeeri/invoke-usersimulator) Simulates common user behaviour on local and remote Windows hosts.
+- [**172**Star][2y] [Py] [tr3jer/dnsautorebinding](https://github.com/tr3jer/dnsautorebinding) ssrf、ssrfIntranetFuzz、dnsRebinding、recordEncode、dnsPoisoning、Support ipv4/ipv6
+- [**172**Star][3y] [Py] [tonybeltramelli/deep-spying](https://github.com/tonybeltramelli/deep-spying) Spying using Smartwatch and Deep Learning
+- [**172**Star][6m] [C++] [strivexjun/driverinjectdll](https://github.com/strivexjun/driverinjectdll) Using Driver Global Injection dll, it can hide DLL modules
+- [**172**Star][4d] [C++] [samyk/frisky](https://github.com/samyk/frisky) Instruments to assist in binary application reversing and augmentation, geared towards walled gardens like iOS and macOS
+- [**172**Star][2y] [Py] [omergunal/hackerbot](https://github.com/omergunal/hackerbot) chatbot 和 hacking 工具的结合版
+- [**172**Star][1y] [Py] [niloofarkheirkhah/nili](https://github.com/niloofarkheirkhah/nili) nili:网络扫描工具,中间人,协议逆向工程和 Fuzzing
+- [**172**Star][11m] [Py] [metachar/hatch](https://github.com/metachar/hatch) Hatch is a brute force tool that is used to brute force most websites
+- [**172**Star][1m] [ASP] [lowleveldesign/debug-recipes](https://github.com/lowleveldesign/debug-recipes) My notes collected while debugging various .NET and Windows problems.
+- [**172**Star][6d] [Shell] [lavabit/robox](https://github.com/lavabit/robox) The tools needed to robotically create/configure/provision a large number of operating systems, for a variety of hypervisors, using packer.
+- [**172**Star][3y] [C] [henkaku/offline-installer](https://github.com/henkaku/offline-installer)
+- [**172**Star][2m] [JS] [hapijs/crumb](https://github.com/hapijs/crumb) CSRF crumb generation and validation for hapi
+- [**172**Star][4y] [JS] [fnando/password_strength](https://github.com/fnando/password_strength) Check password strength against several rules. Includes ActiveRecord/ActiveModel support.
+- [**172**Star][2m] [Py] [fgsect/unicorefuzz](https://github.com/fgsect/unicorefuzz) Fuzzing the Kernel Using AFL-Unicorn
+- [**172**Star][1y] [JS] [brannondorsey/host-validation](https://github.com/brannondorsey/host-validation) Express.js middleware for "Host" and "Referer" header validation to protect against DNS rebinding attacks.
+- [**172**Star][3y] [Py] [4w4k3/insanity-framework](https://github.com/4w4k3/insanity-framework) Generate Payloads and Control Remote Machines. [Discontinued]
+- [**171**Star][1m] [Py] [out0fmemory/qqwry.dat](https://github.com/out0fmemory/qqwry.dat) 自动更新的纯真ip库,每天自动更新
+- [**171**Star][2y] [vysecurity/cve-2017-8759](https://github.com/vysecurity/CVE-2017-8759) CVE-2017-8759 - A vulnerability in the SOAP WDSL parser.
+- [**171**Star][7m] [C] [ciyze/windows-rootkits](https://github.com/ciyze/Windows-Rootkits)
+- [**171**Star][6m] [C] [noracodes/crackmes](https://github.com/NoraCodes/crackmes) Some CrackMe codes for Linux x86/x86_64
+- [**171**Star][10m] [winmin/awesome-vm-exploit](https://github.com/winmin/awesome-vm-exploit) share some useful archives about vm and qemu escape exploit.
+- [**171**Star][10m] [Shell] [trustedsec/hardcidr](https://github.com/trustedsec/hardcidr) hardCIDR is a Linux Bash script, but also functions under macOS. Your mileage may vary on other distros. The script with no specified options will query ARIN and a pool of BGP route servers. The route server is selected at random at runtime.
+- [**171**Star][6m] [JS] [sindresorhus/ipify](https://github.com/sindresorhus/ipify) Get your public IP address
+- [**171**Star][2y] [Ruby] [section9labs/cartero](https://github.com/section9labs/cartero) Cartero - Social Engineering Framework
+- [**171**Star][2m] [C#] [samueltulach/virustotaluploader](https://github.com/samueltulach/virustotaluploader) C# Open-Source Winforms application for uploading files to VirusTotal
+- [**171**Star][3y] [PHP] [rpisec/hackthevote](https://github.com/rpisec/hackthevote) Handouts, setup scripts, sources, and solutions for challenges from Hack The Vote
+- [**171**Star][2m] [Java] [rohanpadhye/jqf](https://github.com/rohanpadhye/jqf) JQF + Zest: Coverage-guided semantic fuzzing for Java.
+- [**171**Star][10m] [C] [q3k/cve-2019-5736-poc](https://github.com/q3k/cve-2019-5736-poc) Unweaponized Proof of Concept for CVE-2019-5736 (Docker escape)
+- [**171**Star][4y] [JS] [philbooth/escomplex](https://github.com/philbooth/escomplex) Software complexity analysis of JavaScript-family abstract syntax trees
+- [**171**Star][3y] [C++] [phat3/pindemonium](https://github.com/phat3/pindemonium) A pintool in order to unpack malware
+- [**171**Star][1y] [ObjC] [objective-see/donotdisturb](https://github.com/objective-see/donotdisturb) Detect Evil Maid Attacks
+- [**171**Star][5m] [C#] [nettitude/sharpsocks](https://github.com/nettitude/sharpsocks) Tunnellable HTTP/HTTPS socks4a proxy written in C# and deployable via PowerShell
+- [**171**Star][10m] [Shell] [lcashdol/exploits](https://github.com/lcashdol/exploits) Exploits for various CVEs
+- [**171**Star][3y] [kayrus/kubelet-exploit](https://github.com/kayrus/kubelet-exploit)
+- [**171**Star][11m] [Java] [joychou93/webshell](https://github.com/joychou93/webshell) 入侵分析时发现的Webshell后门
+- [**171**Star][6m] [C++] [hoangprod/andrewspecial](https://github.com/hoangprod/andrewspecial) AndrewSpecial, dumping lsass' memory stealthily and bypassing "Cilence" since 2019.
+- [**171**Star][2d] [C] [heimdal/heimdal](https://github.com/heimdal/heimdal) a Kerberos 5 implementation
+- [**171**Star][4y] [Shell] [halpomeranz/lmg](https://github.com/halpomeranz/lmg) Script for automating Linux memory capture and analysis
+- [**171**Star][1m] [Py] [gleeda/memtriage](https://github.com/gleeda/memtriage) Allows you to quickly query a Windows machine for RAM artifacts
+- [**171**Star][12m] [C#] [fullmetalcache/powerline](https://github.com/fullmetalcache/powerline)
+- [**171**Star][9m] [C++] [ecx86/classinformer-ida7](https://github.com/ecx86/classinformer-ida7) ClassInformer backported for IDA Pro 7.0
+- [**171**Star][2m] [Ruby] [devise-security/devise-security](https://github.com/devise-security/devise-security) A security extension for devise, meeting industrial standard security demands for web applications.
+- [**171**Star][1m] [C] [curl/doh](https://github.com/curl/doh) stand-alone application for DoH (DNS-over-HTTPS) name resolves and lookups
+- [**171**Star][7m] [Py] [bilelmoussaoui/authenticator](https://github.com/bilelmoussaoui/authenticator) 2FA code generator for GNOME
+- [**171**Star][2y] [C++] [bayshorenetworks/yextend](https://github.com/bayshorenetworks/yextend) Yara integrated software to handle archive file data.
+- [**171**Star][2y] [Go] [arwmq9b6/dnsproxy](https://github.com/arwmq9b6/dnsproxy) 防 DNS 缓存污染,兼顾查询质量与速度
+- [**171**Star][12m] [Py] [andreafioraldi/idangr](https://github.com/andreafioraldi/idangr) Use angr in the IDA Pro debugger generating a state from the current debug session
+- [**171**Star][3y] [Py] [4shadoww/hakkuframework](https://github.com/4shadoww/hakkuframework) Hakku Framework penetration testing
+- [**170**Star][2y] [Go] [out0fmemory/goproxy-always-available](https://github.com/out0fmemory/goproxy-always-available) fork from goproxy Becaust it closed!! 1632版本自动扫描可用ip
+- [**170**Star][3m] [Rust] [phra/rustbuster](https://github.com/phra/rustbuster) A Comprehensive Web Fuzzer and Content Discovery Tool
+- [**170**Star][1y] [Py] [vergl4s/instarecon](https://github.com/vergl4s/instarecon) Automated digital reconnaissance
+- [**170**Star][8m] [HTML] [tylert/pocorgtfo](https://github.com/tylert/pocorgtfo) International Journal of Proof-of-Concept or Get The F*** Out (PoC||GTFO or PoC or GTFO)
+- [**170**Star][15d] [Py] [skyscanner/cfripper](https://github.com/skyscanner/cfripper) Lambda function to "rip apart" a CloudFormation template and check it for security compliance.
+- [**170**Star][2y] [Py] [securingsam/krackdetector](https://github.com/securingsam/krackdetector) a Python script to detect possible KRACK attacks against client devices on your network
+- [**170**Star][1y] [PHP] [robocoder/rips-scanner](https://github.com/robocoder/rips-scanner) RIPS - A static source code analyser for vulnerabilities in PHP scripts
+- [**170**Star][1y] [ramen0x3f/aggressorscripts](https://github.com/ramen0x3f/aggressorscripts)
+- [**170**Star][3y] [HTML] [purpleteam/snarf](https://github.com/purpleteam/snarf) Snarf man-in-the-middle / relay suite
+- [**170**Star][6y] [Py] [paulsec/csrft](https://github.com/paulsec/csrft) A lightweight CSRF Toolkit for easy Proof of concept
+- [**170**Star][2y] [Py] [omri9741/cve-2017-7494](https://github.com/omri9741/cve-2017-7494) Samba 漏洞(CVE-2017-7494)PoC
+- [**170**Star][6d] [Py] [misp/pymisp](https://github.com/misp/pymisp) Python library using the MISP Rest API
+- [**170**Star][1y] [PS] [mattifestation/pssysmontools](https://github.com/mattifestation/pssysmontools) Sysmon Tools for PowerShell
+- [**170**Star][1y] [PS] [mattifestation/pic_bindshell](https://github.com/mattifestation/pic_bindshell) Position Independent Windows Shellcode Written in C
+- [**170**Star][3y] [Py] [luyishisi/nyspider](https://github.com/luyishisi/nyspider) 各种爬虫---大众点评,安居客,58,人人贷,拍拍贷, IT桔子,拉勾网,豆瓣,搜房网,ASO100,气象数据,猫眼电影,链家,PM25.in...
+- [**170**Star][6m] [C] [0xkira/qemu-vm-escape](https://github.com/0xKira/qemu-vm-escape) an exploit for CVE-2019-6778
+- [**170**Star][10m] [HTML] [jensvoid/lorg](https://github.com/jensvoid/lorg) Apache Logfile Security Analyzer
+- [**170**Star][1m] [Shell] [edoverflow/contact.sh](https://github.com/edoverflow/contact.sh) An OSINT tool to find contacts in order to report security vulnerabilities.
+- [**170**Star][1y] [C#] [eaglexiang/eagle.tunnel.dotnet.core](https://github.com/eaglexiang/eagle.tunnel.dotnet.core) 稳定易用的代理工具
+- [**170**Star][3y] [C] [cyrus-and/mysql-unsha1](https://github.com/cyrus-and/mysql-unsha1) 无需明文密码,认证MySQL服务器
+- [**170**Star][2y] [PHP] [cryin/assetsview](https://github.com/cryin/assetsview) Assets View资产发现、网络拓扑管理系统
+- [**170**Star][3y] [C++] [cr4sh/fwexpl](https://github.com/cr4sh/fwexpl) PC firmware exploitation tool and library
+- [**170**Star][14d] [JS] [cert-polska/mquery](https://github.com/cert-polska/mquery) YARA malware query accelerator (web frontend)
+- [**170**Star][2m] [C] [beehive-lab/mambo](https://github.com/beehive-lab/mambo) ARM运行时二进制文件修改工具,低耗版。
+- [**170**Star][2y] [Py] [awhitehatter/mailoney](https://github.com/awhitehatter/mailoney) An SMTP Honeypot
+- [**170**Star][2m] [CSS] [7dog7/bottleneckosmosis](https://github.com/7dog7/bottleneckosmosis) 瓶颈渗透,web渗透,red红队,fuzz param,注释,js字典,ctf
+- [**169**Star][3d] [Py] [hpfeeds/hpfeeds](https://github.com/hpfeeds/hpfeeds) Honeynet Project generic authenticated datafeed protocol
+- [**169**Star][2m] [JS] [wuchangming/node-mitmproxy](https://github.com/wuchangming/node-mitmproxy) node-mitmproxy is an extensible man-in-the-middle(MITM) proxy server for HTTP/HTTPS base on Node.js.
+- [**169**Star][2y] [Py] [undeadsec/debinject](https://github.com/undeadsec/debinject) Inject malicious code into *.debs
+- [**169**Star][4m] [Py] [racepwn/racepwn](https://github.com/racepwn/racepwn) a librace library and a racepwn utility that are designed to test a race condition attack through protocols that use a TCP connection
+- [**169**Star][1m] [PS] [olafhartong/attackdatamap](https://github.com/olafhartong/attackdatamap) A datasource assessment on an event level to show potential coverage or the MITRE ATT&CK framework
+- [**169**Star][6m] [C] [octomagon/davegrohl](https://github.com/octomagon/davegrohl) A Password Cracker for macOS
+- [**169**Star][7m] [Shell] [munki/bootstrappr](https://github.com/munki/bootstrappr) A bare-bones tool to install a set of packages on a target volume.
+- [**169**Star][8m] [Go] [mimah/gomet](https://github.com/mimah/gomet) Multi-platform agent written in Golang. TCP forwarding, socks5, tunneling, pivoting, shell, download, exec
+- [**169**Star][16d] [Py] [in-toto/in-toto](https://github.com/in-toto/in-toto) in-toto is a framework to protect supply chain integrity.
+- [**169**Star][2y] [Py] [googulator/teslacrack](https://github.com/googulator/teslacrack) Decryptor for the TeslaCrypt malware
+- [**169**Star][5y] [Puppet] [garethr/pentesting-playground](https://github.com/garethr/pentesting-playground) Code for installing various security minded tools onto Vagrant powered virtual machines
+- [**169**Star][2y] [Ruby] [fuzzapi/api-fuzzer](https://github.com/fuzzapi/api-fuzzer) API Fuzzer which allows to fuzz request attributes using common pentesting techniques and lists vulnerabilities
+- [**169**Star][3y] [cn33liz/msbuildshell](https://github.com/cn33liz/msbuildshell) MSBuildShell, a Powershell Host running within MSBuild.exe
+- [**169**Star][11m] [C] [carolemieux/afl-rb](https://github.com/carolemieux/afl-rb) AFL Fuzz 工具的修改版,针对 Rare Branches
+- [**169**Star][1y] [C] [autopear/ipainstaller](https://github.com/autopear/ipainstaller) Install IPA from command line
+- [**169**Star][2y] [Py] [3gstudent/worse-pdf](https://github.com/3gstudent/worse-pdf) Turn a normal PDF file into malicious.Use to steal Net-NTLM Hashes from windows machines.
+- [**168**Star][3d] [C++] [radareorg/r2ghidra-dec](https://github.com/radareorg/r2ghidra-dec) Deep ghidra decompiler integration for radare2
+- [**168**Star][6m] [Py] [zerosteiner/mayhem](https://github.com/zerosteiner/mayhem) Runtime Process Manipulation
+- [**168**Star][2y] [C#] [x41sec/browser-security-whitepaper-2017](https://github.com/x41sec/browser-security-whitepaper-2017) X41 Browser Security White Paper - Tools and PoCs
+- [**168**Star][9m] [Clojure] [weavejester/crypto-password](https://github.com/weavejester/crypto-password) Library for securely hashing passwords
+- [**168**Star][1y] [Shell] [tokyoneon/armor](https://github.com/tokyoneon/armor) Armor is a simple Bash script designed to create encrypted macOS payloads capable of evading antivirus scanners.
+- [**168**Star][4m] [C++] [strivexjun/aheadlib-x86-x64](https://github.com/strivexjun/aheadlib-x86-x64) hijack dll Source Code Generator. support x86/x64
+- [**168**Star][2y] [spacehuhn/wifi_keylogger](https://github.com/spacehuhn/wifi_keylogger) DIY Arduino Wi-Fi Keylogger (Proof of Concept)
+- [**168**Star][4y] [C] [silver13/h8mini-acro](https://github.com/silver13/h8mini-acro) acro firmware for eachine H8 mini
+- [**168**Star][7m] [JS] [sentinel-official/sentinel](https://github.com/sentinel-official/sentinel) Sentinel is an interoperable secure network layer offering the Sentinel Service Chain exclusively for distributed & decentralized native services like - dVPN, Sentrix (dChat and dVoIP) and more.
+- [**168**Star][5m] [PHP] [scr34m/php-malware-scanner](https://github.com/scr34m/php-malware-scanner) Scans PHP files for malwares and known threats
+- [**168**Star][11m] [Py] [ridter/cve-2018-15982_exp](https://github.com/ridter/cve-2018-15982_exp) exp of CVE-2018-15982
+- [**168**Star][3d] [C++] [radareorg/r2ghidra-dec](https://github.com/radareorg/r2ghidra-dec) Deep ghidra decompiler integration for radare2
+- [**168**Star][2m] [JS] [puresec/serverless-puresec-cli](https://github.com/puresec/serverless-puresec-cli) Serverless plugin for least privileges.
+- [**168**Star][4y] [Shell] [pr0x13/ibrutr](https://github.com/pr0x13/ibrutr) iCloud Bruteforce PoC - with MultiCurl
+- [**168**Star][2m] [C#] [n0dec/malwless](https://github.com/n0dec/malwless) Test Blue Team detections without running any attack.
+- [**168**Star][11m] [Py] [mnkgrover08-zz/whatsapp_automation](https://github.com/mnkgrover08-zz/whatsapp_automation) Whatsapp Automation is a collection of APIs that interact with WhatsApp messenger running in an Android emulator, allowing developers to build projects that automate sending and receiving messages, adding new contacts and broadcasting messages multiple contacts.
+- [**168**Star][2y] [Py] [mdsecactivebreach/chameleon](https://github.com/mdsecactivebreach/chameleon) A tool for evading Proxy categorisation
+- [**168**Star][4d] [Java] [mcdcorp/opentest](https://github.com/mcdcorp/opentest) Open source test automation tool for web applications, mobile apps and APIs
+- [**168**Star][1y] [Java] [k-tamura/easybuggy](https://github.com/k-tamura/easybuggy) Too buggy web application
+- [**168**Star][2y] [PS] [javelinnetworks/honeypotbuster](https://github.com/javelinnetworks/honeypotbuster)
+- [**168**Star][6y] [Py] [infodox/python-dll-injection](https://github.com/infodox/python-dll-injection) Python toolkit for injecting DLL files into running processes on Windows
+- [**168**Star][5m] [C++] [immunant/selfrando](https://github.com/immunant/selfrando) Function order shuffling to defend against ROP and other types of code reuse
+- [**168**Star][2y] [HTML] [ihebski/angryfuzzer](https://github.com/ihebski/angryfuzzer) Tools for information gathering
+- [**168**Star][3m] [Py] [gnebbia/pdlist](https://github.com/gnebbia/pdlist) A passive subdomain finder
+- [**168**Star][4y] [Go] [filosottile/cve-2016-2107](https://github.com/filosottile/cve-2016-2107) Simple test for the May 2016 OpenSSL padding oracle (CVE-2016-2107)
+- [**168**Star][6y] [JS] [evilcos/xssprobe](https://github.com/evilcos/xssprobe) xss probe to steal page info: browser, ua, lang, referer, location, toplocation, cookie, domain, title, screen, flash, etc.
+- [**168**Star][4y] [Py] [dynetics/malfunction](https://github.com/dynetics/malfunction) Malware Analysis Tool using Function Level Fuzzy Hashing
+- [**168**Star][26d] [chbrian/awesome-adversarial-examples-dl](https://github.com/chbrian/awesome-adversarial-examples-dl) A curated list of awesome resources for adversarial examples in deep learning
+- [**168**Star][6m] [PHP] [blackhole1/webrtcxss](https://github.com/blackhole1/webrtcxss) 利用XSS入侵内网(Use XSS automation Invade intranet)
+- [**168**Star][2m] [TSQL] [baidu-security/app-env-docker](https://github.com/baidu-security/app-env-docker) 基于 Docker 的真实应用测试环境
+- [**168**Star][11m] [Java] [anbai-inc/javaweb-codereview](https://github.com/anbai-inc/javaweb-codereview) 演示java代码审计的示例程序
+- [**168**Star][3y] [Shell] [0x90/wps-scripts](https://github.com/0x90/wps-scripts) WPS hacking scripts
+- [**167**Star][3y] [JS] [norma-inc/atear](https://github.com/norma-inc/atear) Wireless Hacking, WiFi Security, Vulnerability Analyzer, Pentestration
+- [**167**Star][4y] [Py] [praetorian-code/gladius](https://github.com/praetorian-code/gladius) Automated Responder/secretsdump.py cracking
+- [**167**Star][8y] [Py] [zynamics/objc-helper-plugin-ida](https://github.com/zynamics/objc-helper-plugin-ida) Simplifies working with Objective-C binaries in IDA Pro
+- [**167**Star][4y] [C] [vlad902/hacking-team-windows-kernel-lpe](https://github.com/vlad902/hacking-team-windows-kernel-lpe) Previously-0day exploit from the Hacking Team leak, written by Eugene Ching/Qavar.
+- [**167**Star][1y] [Py] [tintinweb/ida-batch_decompile](https://github.com/tintinweb/ida-batch_decompile) IDA Batch Decompile plugin and script for Hex-Ray's IDA Pro that adds the ability to batch decompile multiple files and their imports with additional annotations (xref, stack var size) to the pseudocode .c file
+- [**167**Star][1y] [sumas/oscp-cheatsheet-god](https://github.com/sumas/oscp-cheatsheet-god)
+- [**167**Star][28d] [ObjC] [subito-it/sbtuitesttunnel](https://github.com/subito-it/sbtuitesttunnel) Enable network mocks and more in UI Tests
+- [**167**Star][1y] [Py] [spiderlabs/scavenger](https://github.com/spiderlabs/scavenger) is a multi-threaded post-exploitation scanning tool for scavenging systems, finding most frequently used files and folders as well as "interesting" files containing sensitive information.
+- [**167**Star][2y] [Py] [smokeleeteveryday/ctf_writeups](https://github.com/smokeleeteveryday/ctf_writeups) CTF Writeups
+- [**167**Star][5y] [JS] [skycrab/leakscan](https://github.com/skycrab/leakscan) 在线漏洞扫描
+- [**167**Star][8d] [JS] [sereneblue/chameleon](https://github.com/sereneblue/chameleon) A WebExtension port of Random Agent Spoofer
+- [**167**Star][1y] [Swift] [rlovelett/langserver-swift](https://github.com/rlovelett/langserver-swift) A Swift implementation of the open Language Server Protocol.
+- [**167**Star][5d] [Java] [pwittchen/reactivewifi](https://github.com/pwittchen/reactivewifi) Android library listening available WiFi Access Points and related information with RxJava Observables
+- [**167**Star][6d] [C] [odzhan/shellcode](https://github.com/odzhan/shellcode) Shellcodes for Windows/Linux/BSD running on x86, AMD64, ARM, ARM64
+- [**167**Star][2y] [Py] [northernsec/cve-scan](https://github.com/northernsec/cve-scan) Scan systems with NMap and parse the output to a list of CVE's, CWE's and DPE's
+- [**167**Star][5y] [CSS] [nknetobserver/nknetobserver.github.io](https://github.com/nknetobserver/nknetobserver.github.io) Scans of North Korean IP Space
+- [**167**Star][2y] [C++] [mortenschenk/bhusa2017](https://github.com/mortenschenk/bhusa2017) Content from presentation at BHUSA 2017
+- [**167**Star][2d] [C++] [mipt-ilab/mipt-mips](https://github.com/mipt-ilab/mipt-mips) Cycle-accurate pre-silicon simulator of RISC-V and MIPS CPUs
+- [**167**Star][2y] [Rust] [loggerhead/shadowsocks-rust](https://github.com/loggerhead/shadowsocks-rust) Oh my implementation of Shadowsocks in Rust
+- [**167**Star][3y] [C] [hugsy/proxenet](https://github.com/hugsy/proxenet) The ONLY hacker friendly proxy for webapp pentests.
+- [**167**Star][4m] [Py] [googlecloudplatform/psq](https://github.com/googlecloudplatform/psq) Cloud Pub/Sub Task Queue for Python
+- [**167**Star][8m] [Py] [githacktools/billcipher](https://github.com/githacktools/billcipher) Information Gathering tool for a Website or IP address
+- [**167**Star][1y] [Java] [ge0rg/memorizingtrustmanager](https://github.com/ge0rg/memorizingtrustmanager) A "plugin" for Android Java to allow asking the user about SSL certificates
+- [**167**Star][28d] [JS] [eggjs/egg-security](https://github.com/eggjs/egg-security) Security plugin for egg, force performance too.
+- [**167**Star][8m] [PS] [dviros/credsleaker](https://github.com/dviros/credsleaker) Credsleaker allows an attacker to craft a highly convincing credentials prompt using Windows Security, validate it against the DC and in turn leak it via an HTTP request.
+- [**167**Star][4m] [C] [droe/xnumon](https://github.com/droe/xnumon) monitor macOS for malicious activity
+- [**167**Star][1y] [HTML] [c4o/chinesedarkwebcrawler](https://github.com/c4o/chinesedarkwebcrawler) 中文暗网爬虫
+- [**167**Star][17d] [Py] [botherder/targetedthreats](https://github.com/botherder/targetedthreats) Collection of IOCs related to targeting of civil society
+- [**167**Star][2m] [JS] [bencoder/js13k-2019](https://github.com/bencoder/js13k-2019) xx142-b2.exe. An entry for js13kgames 2019
+- [**167**Star][1y] [Py] [belane/linux-soft-exploit-suggester](https://github.com/belane/linux-soft-exploit-suggester) linux-soft-exploit-suggester:通过 exploit database 搜索 Linux 系统中有漏洞的软件
+- [**167**Star][1y] [Py] [bazad/ida_kernelcache](https://github.com/bazad/ida_kernelcache) An IDA Toolkit for analyzing iOS kernelcaches
+- [**166**Star][5y] [PHP] [pentestmonkey/php-reverse-shell](https://github.com/pentestmonkey/php-reverse-shell)
+- [**166**Star][4y] [C] [zeek/packet-bricks](https://github.com/zeek/packet-bricks) A netmap-based packet layer for distributing and filtering traffic.
+- [**166**Star][16d] [C] [progmem/switch-fightstick](https://github.com/progmem/switch-fightstick) Proof-of-Concept LUFA Project for the Nintendo Switch. Uses reverse-engineering of the Pokken Tournament Pro Pad for the Wii U and Switch System v3.0.0
+- [**166**Star][1y] [Py] [wipi-hunter/pisavar](https://github.com/WiPi-Hunter/PiSavar) Detects PineAP module and starts deauthentication attack
+- [**166**Star][9d] [Shell] [offensive-security/exploitdb-papers](https://github.com/offensive-security/exploitdb-papers) exploit-database-papers
+- [**166**Star][10m] [Py] [tijme/angularjs-csti-scanner](https://github.com/tijme/angularjs-csti-scanner) Automated client-side template injection (sandbox escape/bypass) detection for AngularJS.
+- [**166**Star][23d] [Py] [securestate/termineter](https://github.com/securestate/termineter) Smart Meter Security Testing Framework
+- [**166**Star][7y] [PHP] [secrule/falcon](https://github.com/secrule/falcon) Falcon是一款基于inotify-tools 开发的Web服务器文件监控平台 能够实时监控Web目录文件变化(新增,修改,删除),判断文件内容是否包含恶意代码,自动隔离常见Webshell,保证Web目录文件安全
+- [**166**Star][3m] [Vala] [ricotz/plank](https://github.com/ricotz/plank) the simplest dock on the planet
+- [**166**Star][3m] [PS] [r3mrum/psdecode](https://github.com/r3mrum/psdecode) PowerShell script for deobfuscating encoded PowerShell scripts
+- [**166**Star][7m] [proteas/unstripped-ios-kernels](https://github.com/proteas/unstripped-ios-kernels) Unstripped iOS Kernels
+- [**166**Star][2y] [Py] [priyankgada/python-for-hackers](https://github.com/priyankgada/python-for-hackers) Python for Hackers - Youtube Tutorials - Priyank Gada
+- [**166**Star][2y] [PS] [peewpw/invoke-bsod](https://github.com/peewpw/invoke-bsod) For when you want a computer to be done - without admin!
+- [**166**Star][10m] [Py] [mpgn/poodle-poc](https://github.com/mpgn/poodle-poc)
+- [**166**Star][2y] [Py] [monrocoury/forensic-tools](https://github.com/monrocoury/forensic-tools) A collection of tools for forensic analysis
+- [**166**Star][1y] [Py] [milo2012/pentest_scripts](https://github.com/milo2012/pentest_scripts)
+- [**166**Star][1y] [Py] [hanc00l/weblogic_unserialize_exploit](https://github.com/hanc00l/weblogic_unserialize_exploit) java unserialize vul for weblogic exploit
+- [**166**Star][2y] [Java] [cryptocubik/browserprint](https://github.com/cryptocubik/browserprint) An open-source browser fingerprinting suite.
+- [**166**Star][3y] [Haskell] [corsis/portfusion](https://github.com/corsis/portfusion) Haskell-powered cross-platform transport-layer distributed reverse / forward proxy & tunneling solution – currently available for all TCP protocols (RDP, VNC, HTTP(S), SSH, ...).
+- [**166**Star][2y] [C++] [bigric3/cve-2018-8120](https://github.com/bigric3/cve-2018-8120)
+- [**166**Star][3y] [Shell] [backlion/hack-for-tools](https://github.com/backlion/hack-for-tools) 常用的黑客神器
+- [**166**Star][1y] [Py] [azizaltuntas/camelishing](https://github.com/azizaltuntas/camelishing) Social Engineering Tool
+- [**166**Star][2m] [Shell] [1n3/massbleed](https://github.com/1n3/massbleed) MassBleed SSL Vulnerability Scanner
+- [**165**Star][2y] [C++] [spacehuhn/packetmonitor32](https://github.com/spacehuhn/packetmonitor32) ESP32 Packet Monitor + SD card!
+- [**165**Star][7y] [Perl] [yuri-gushin/roboo](https://github.com/yuri-gushin/roboo) uses advanced non-interactive HTTP challenge/response mechanisms to detect and subsequently mitigate HTTP robots
+- [**165**Star][5y] [Perl] [xme/hoover](https://github.com/xme/hoover) Wireless Probe Requests Sniffer
+- [**165**Star][2m] [C++] [westerndigitalcorporation/swerv-iss](https://github.com/westerndigitalcorporation/swerv-iss) Western Digital’s Open Source RISC-V SweRV Instruction Set Simulator
+- [**165**Star][3y] [Py] [sowish/lnscan](https://github.com/sowish/lnscan) 详细的内部网络信息扫描器
+- [**165**Star][3m] [Scheme] [siraben/zkeme80](https://github.com/siraben/zkeme80) An assembler and operating system for the TI-84+ written in Scheme, Forth and Z80 assembly.
+- [**165**Star][7m] [Ruby] [r00t-3xp10it/msf-auxiliarys](https://github.com/r00t-3xp10it/msf-auxiliarys) My collection of metasploit auxiliary post-modules
+- [**165**Star][5y] [Roff] [opendns/security_ninjas_appsec_training](https://github.com/opendns/security_ninjas_appsec_training) OpenDNS application security training program
+- [**165**Star][2y] [Shell] [moexin/easy-v2ray](https://github.com/moexin/easy-v2ray) 简单的V2ray一键配置包,小白也能简单上手。
+- [**165**Star][1y] [C] [jioundai/bluedroid](https://github.com/jioundai/bluedroid) PoCs of Vulnerabilities on Bluedroid
+- [**165**Star][4m] [JS] [grempe/diceware](https://github.com/grempe/diceware) A tool for generating strong Diceware passwords, with entropy and crack time estimates.
+- [**165**Star][2y] [C++] [google/pawn](https://github.com/google/pawn) 从基于 Intel 的工作站和笔记本电脑中提取 BIOS 固件
+- [**165**Star][3y] [Standard ML] [gamelinux/prads](https://github.com/gamelinux/prads) Passive Real-time Asset Detection System
+- [**165**Star][2m] [C] [fullmetal5/bluebomb](https://github.com/fullmetal5/bluebomb) A Bluetooth exploit for the Nintendo Wii.
+- [**165**Star][2y] [C] [cyassl/cyassl](https://github.com/cyassl/cyassl) Please use wolfSSL now instead:
+- [**165**Star][9m] [C++] [creepsky/creepminer](https://github.com/creepsky/creepminer) Burstcoin C++ CPU and GPU Miner
+- [**165**Star][4m] [C++] [creddefense/creddefense](https://github.com/creddefense/creddefense) Credential and Red Teaming Defense for Windows Environments
+- [**165**Star][2m] [Py] [chtd/psycopg2cffi](https://github.com/chtd/psycopg2cffi) Port to cffi with some speed improvements
+- [**165**Star][1y] [Py] [certcc/keyfinder](https://github.com/certcc/keyfinder) A tool for finding and analyzing private (and public) key files, including support for Android APK files.
+- [**165**Star][3d] [Py] [adamcaudill/yawast](https://github.com/adamcaudill/yawast) YAWAST ...where a pentest starts. Security Toolkit for Web-based Applications
+- [**164**Star][2m] [Java] [lilifengcode/burpsuite-plugins-usage](https://github.com/lilifengcode/burpsuite-plugins-usage) Burpsuite-Plugins-Usage
+- [**164**Star][13d] [Rust] [hippolot/finshir](https://github.com/Hippolot/finshir)
+- [**164**Star][9m] [thehackingsage/hackdroid](https://github.com/thehackingsage/hackdroid) Penetration Testing Apps for Android
+- [**164**Star][3m] [Swift] [ryasnoy/applocker](https://github.com/ryasnoy/applocker) AppLocker - simple lock screen for iOS Application ( Swift 4+, iOS 9.0+) Touch ID / Face ID
+- [**164**Star][2d] [Py] [paloaltonetworks/ansible-pan](https://github.com/paloaltonetworks/ansible-pan) Ansible modules for Palo Alto Networks NGFWs
+- [**164**Star][3y] [JS] [nvisium/django.nv](https://github.com/nvisium/django.nv) Vulnerable Django Application
+- [**164**Star][2y] [JS] [nospaceships/node-net-ping](https://github.com/nospaceships/node-net-ping) Ping and trace route to many hosts at once.
+- [**164**Star][8d] [C#] [mr-un1k0d3r/redteamcsharpscripts](https://github.com/mr-un1k0d3r/redteamcsharpscripts) C# Script used for Red Team
+- [**164**Star][11m] [Py] [mosuan/filescan](https://github.com/mosuan/filescan) 敏感文件扫描 / 二次判断降低误报率 / 扫描内容规则化 / 多目录扫描
+- [**164**Star][3m] [mdrights/digital-rights](https://github.com/mdrights/digital-rights) Promote digital rights in China
+- [**164**Star][2y] [Py] [manisso/crips](https://github.com/manisso/crips) IP Tools To quickly get information about IP Address's, Web Pages and DNS records.
+- [**164**Star][3y] [C] [jedisct1/blacknurse](https://github.com/jedisct1/blacknurse) BlackNurse attack PoC
+- [**164**Star][4y] [C] [jdbirdwell/afl](https://github.com/jdbirdwell/afl) american fuzzy lop for network fuzzing (unofficial) -- official afl site is
+- [**164**Star][3y] [C#] [jamesjlinden/unity-decompiled](https://github.com/jamesjlinden/unity-decompiled)
+- [**164**Star][11m] [Py] [ghostmanager/domaincheck](https://github.com/ghostmanager/domaincheck) DomainCheck is designed to assist operators with monitoring changes related to their domain names. This includes negative changes in categorization, VirusTotal detections, and appearances on malware blacklists. DomainCheck currently works only with NameCheap.
+- [**164**Star][2y] [Py] [fs0c131y/aadhaarsearchengine](https://github.com/fs0c131y/aadhaarsearchengine) Find Aadhaar cards thanks to Google
+- [**164**Star][2m] [C] [elementsproject/secp256k1-zkp](https://github.com/elementsproject/secp256k1-zkp) Experimental fork of libsecp256k1 with support for pedersen commitments and range proofs.
+- [**164**Star][1y] [Py] [c0ny1/pwcracker](https://github.com/c0ny1/pwcracker) 一款插件化的密码爆破框架
+- [**164**Star][3y] [Shell] [brandonprry/wicked_cool_shell_scripts_2e](https://github.com/brandonprry/wicked_cool_shell_scripts_2e) Full shell scripts for the second edition of Wicked Cool Shell Scripts
+- [**164**Star][2y] [PS] [ankh2054/windows-pentest](https://github.com/ankh2054/windows-pentest) Windows Pentest Scripts
+- [**164**Star][6m] [PS] [alsidofficial/wsuspendu](https://github.com/alsidofficial/wsuspendu) Implement WSUSpendu attack
+- [**163**Star][2y] [sniperoj/attack-defense-framework](https://github.com/SniperOJ/Attack-Defense-Framework)
+- [**163**Star][5y] [Py] [q2h1cg/cms-exploit-framework](https://github.com/Q2h1Cg/CMS-Exploit-Framework) CMS Exploit Framework
+- [**163**Star][26d] [PS] [dsccommunity/activedirectorydsc](https://github.com/dsccommunity/ActiveDirectoryDsc) contains DSC resources for deployment and configuration of Active Directory.
+- [**163**Star][6m] [C] [bytecode77/r77-rootkit](https://github.com/bytecode77/r77-rootkit) Ring 3 Rootkit DLL
+- [**163**Star][2y] [HTML] [threatexpress/metatwin](https://github.com/threatexpress/metatwin) The project is designed as a file resource cloner. Metadata, including digital signature, is extracted from one file and injected into another.
+- [**163**Star][1y] [Py] [walkerfuz/morph](https://github.com/walkerfuz/morph) An open source fuzzing framework for fun.
+- [**163**Star][6m] [Py] [wafpassproject/wafpass](https://github.com/wafpassproject/wafpass) wafpass:利用所有Payload 的绕过技巧分析参数,旨在为安全解决方案(例如WAF)确定基准。
+- [**163**Star][4y] [C] [uptimejp/sql_firewall](https://github.com/uptimejp/sql_firewall) SQL Firewall Extension for PostgreSQL
+- [**163**Star][3y] [C] [teran-mckinney/raru](https://github.com/teran-mckinney/raru) raru: run as random user
+- [**163**Star][21d] [Py] [swisskyrepo/graphqlmap](https://github.com/swisskyrepo/graphqlmap) GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes.
+- [**163**Star][3y] [Py] [sourcekris/rsactftool](https://github.com/sourcekris/rsactftool) RSA CTF Tool - Tool to attack RSA public keys and ciphertexts in common ways
+- [**163**Star][3y] [C] [scslab/tcpcrypt](https://github.com/scslab/tcpcrypt) Fast TCP encryption
+- [**163**Star][2y] [Py] [rxwx/cve-2017-8570](https://github.com/rxwx/cve-2017-8570) Proof of Concept exploit for CVE-2017-8570
+- [**163**Star][4m] [Py] [pinterest/thrift-tools](https://github.com/pinterest/thrift-tools) thrift-tools is a library and a set of tools to introspect Apache Thrift traffic.
+- [**163**Star][2y] [C] [oalabs/blobrunner](https://github.com/oalabs/blobrunner) Quickly debug shellcode extracted during malware analysis
+- [**163**Star][3y] [Makefile] [kost/nmap-android](https://github.com/kost/nmap-android) Nmap on Android - Makefile/diff/scripts to build it with Android NDK
+- [**163**Star][12d] [C++] [jrfonseca/drmingw](https://github.com/jrfonseca/drmingw) Postmortem debugging tools for MinGW.
+- [**163**Star][8m] [hd421/monitoring-systems-cheat-sheet](https://github.com/hd421/monitoring-systems-cheat-sheet) A cheat sheet for pentesters and researchers about vulnerabilities in well-known monitoring systems.
+- [**163**Star][2y] [Shell] [functionclub/fail2ban](https://github.com/functionclub/fail2ban) 最简单的防止SSH暴力破解的脚本
+- [**163**Star][3m] [JS] [friedrith/node-wifi](https://github.com/friedrith/node-wifi)
+- [**163**Star][10m] [C] [davidgfnet/wireshark-whatsapp](https://github.com/davidgfnet/wireshark-whatsapp) Whatsapp dissector plugin for wireshark
+- [**163**Star][2y] [PS] [cyberark/riskyspn](https://github.com/cyberark/riskyspn) Detect and abuse risky SPNs
+- [**163**Star][1y] [Py] [boy-hack/poc-t](https://github.com/boy-hack/poc-t) 基于poc-t 并在此基础上增加批量功能!
+- [**163**Star][2m] [C++] [bastibl/gr-ieee802-15-4](https://github.com/bastibl/gr-ieee802-15-4) IEEE 802.15.4 ZigBee Transceiver
+- [**163**Star][4m] [Py] [alpha1e0/kiwi](https://github.com/alpha1e0/kiwi) kiwi:安全源码审计工具
+- [**162**Star][18d] [Groovy] [jeremylong/dependency-check-gradle](https://github.com/jeremylong/dependency-check-gradle) The dependency-check gradle plugin allows projects to monitor dependent libraries for known, published vulnerabilities.
+- [**162**Star][2y] [Py] [hackatnow/shodanwave](https://github.com/hackatnow/shodanwave) Shodanwave is a tool for exploring and obtaining information from Netwave IP Camera.
+- [**162**Star][3y] [Py] [chenjiandongx/github-spider](https://github.com/chenjiandongx/Github-spider) Github 仓库及用户分析爬虫
+- [**162**Star][4y] [Py] [osirislab/fentanyl](https://github.com/osirislab/Fentanyl) an IDAPython script that makes patching significantly easier
+- [**162**Star][2m] [Py] [x64dbg/x64dbgida](https://github.com/x64dbg/x64dbgida) Official x64dbg plugin for IDA Pro.
+- [**162**Star][3y] [Py] [wh1t3rh1n0/air-hammer](https://github.com/wh1t3rh1n0/air-hammer) A WPA Enterprise horizontal brute-force attack tool
+- [**162**Star][2m] [Shell] [securityriskadvisors/vectr](https://github.com/securityriskadvisors/vectr) VECTR is a tool that facilitates tracking of your red and blue team testing activities to measure detection and prevention capabilities across different attack scenarios
+- [**162**Star][1y] [Py] [saltstack/salt-contrib](https://github.com/saltstack/salt-contrib) Salt Module Contributions
+- [**162**Star][8m] [Py] [sa7mon/miniprint](https://github.com/sa7mon/miniprint) A medium interaction printer honeypot
+- [**162**Star][1m] [Py] [opentimestamps/opentimestamps-client](https://github.com/opentimestamps/opentimestamps-client) Command-line tool to create and validate timestamp proofs with the OpenTimestamps protocol
+- [**162**Star][27d] [Py] [neo23x0/yaranalyzer](https://github.com/neo23x0/yaranalyzer) Yara Rule Analyzer and Statistics
+- [**162**Star][2m] [Py] [mykings/python-masscan](https://github.com/mykings/python-masscan) python-masscan is a python library which helps in using masscan port scanner.
+- [**162**Star][6y] [XSLT] [ironbee/waf-research](https://github.com/ironbee/waf-research) WAF Research
+- [**162**Star][10m] [Scala] [input-output-hk/mantis](https://github.com/input-output-hk/mantis) A Scala based client for Ethereum Classic.
+- [**162**Star][5y] [PS] [harmj0y/powerup](https://github.com/harmj0y/powerup) This version of PowerUp is now unsupported. See
+- [**162**Star][6y] [C] [gdbinit/readmem](https://github.com/gdbinit/readmem) A small OS X/iOS userland util to dump processes memory
+- [**162**Star][2y] [C] [gabrielrcouto/reaver-wps](https://github.com/gabrielrcouto/reaver-wps) Brute force attack against Wifi Protected Setup
+- [**162**Star][2y] [C++] [encounter/futurerestore](https://github.com/encounter/futurerestore) (unmaintained) iOS upgrade and downgrade tool utilizing SHSH blobs (unofficial fork supporting iOS 11 and newer devices)
+- [**162**Star][1m] [Visual Basic .NET] [dzzie/sysanalyzer](https://github.com/dzzie/sysanalyzer) Automated malcode analysis system - read more ->
+- [**162**Star][4m] [C] [dyne/dnscrypt-proxy](https://github.com/dyne/dnscrypt-proxy) DNSCrypt-Proxy repository, frankly maintained for what it does (no new features planned)
+- [**162**Star][7m] [Py] [dyboy2017/wtf_scan](https://github.com/dyboy2017/wtf_scan) 一款WEB端的在线敏感资产扫描器,扫描网站中的指纹、漏洞及相关敏感信息,针对已经识别的CMS指纹,进行二次0day扫描利用,一键GetShell也不是不可能!!!
+- [**162**Star][2y] [Shell] [danilabs/tools-tbhm](https://github.com/danilabs/tools-tbhm) Tools of "The Bug Hunters Methodology V2 by
+- [**162**Star][7m] [Py] [d4stiny/dell-support-assist-rce-poc](https://github.com/d4stiny/dell-support-assist-rce-poc)
+- [**162**Star][5m] [Py] [cvandeplas/elk-forensics](https://github.com/cvandeplas/elk-forensics) ELK configuration files for Forensic Analysts and Incident Handlers (unmaintained)
+- [**162**Star][2m] [JS] [ant4g0nist/vegvisir](https://github.com/ant4g0nist/vegvisir) 基于浏览器的LLDB 调试器
+- [**162**Star][5m] [C++] [a5-/gamerfood_csgo](https://github.com/a5-/gamerfood_csgo) Fully featured CSGO cheat by Team Gamerfood
+- [**162**Star][2y] [Py] [hackatnow/shodanwave](https://github.com/hackatnow/shodanwave) Shodanwave is a tool for exploring and obtaining information from Netwave IP Camera.
+- [**161**Star][1y] [Java] [iqiyi/dexsplitter](https://github.com/iqiyi/dexsplitter) Analyze contribution rate of each module to the apk size
+- [**161**Star][24d] [C#] [hmbsbige/nattypetester](https://github.com/hmbsbige/nattypetester) 测试当前网络的NAT类型(STUN)
+- [**161**Star][4y] [Py] [appknox/afe](https://github.com/appknox/AFE) Android Framework for Exploitation, is a framework for exploiting android based devices
+- [**161**Star][2y] [Py] [tulpar/tulpar](https://github.com/tulpar/tulpar) Tulpar - Web Vulnerability Scanner
+- [**161**Star][2m] [Py] [lc/theftfuzzer](https://github.com/lc/theftfuzzer) TheftFuzzer is a tool that fuzzes Cross-Origin Resource Sharing implementations for common misconfigurations.
+- [**161**Star][8m] [C++] [momo5502/cod-exploits](https://github.com/momo5502/cod-exploits)
+- [**161**Star][6m] [Py] [yassineaboukir/cve-2018-0296](https://github.com/yassineaboukir/cve-2018-0296) Script to test for Cisco ASA path traversal vulnerability (CVE-2018-0296) and extract system information.
+- [**161**Star][11m] [HTML] [yaph/domxssscanner](https://github.com/yaph/domxssscanner) DOMXSS Scanner is an online tool to scan source code for DOM based XSS vulnerabilities
+- [**161**Star][7m] [C#] [xorrior/random-csharptools](https://github.com/xorrior/random-csharptools) Collection of CSharp Assemblies focused on Post-Exploitation Capabilities
+- [**161**Star][2m] [Py] [wish-i-was/femida](https://github.com/wish-i-was/femida) Automated blind-xss search for Burp Suite
+- [**161**Star][1y] [Py] [veorq/blueflower](https://github.com/veorq/blueflower) a grep -r for secrets
+- [**161**Star][1m] [Py] [staticafi/symbiotic](https://github.com/staticafi/symbiotic) Symbiotic is a tool for finding bugs in computer programs based on instrumentation, program slicing and KLEE
+- [**161**Star][2y] [secwiki/hack-movie](https://github.com/secwiki/hack-movie) 黑客相关的电视剧/电影/纪录片
+- [**161**Star][15d] [Py] [regala/burp-scope-monitor](https://github.com/regala/burp-scope-monitor) Burp Suite Extension to monitor new scope
+- [**161**Star][6m] [C] [rapid7/mettle](https://github.com/rapid7/mettle) This is an implementation of a native-code Meterpreter, designed for portability, embeddability, and low resource utilization.
+- [**161**Star][2y] [Py] [rajeshmajumdar/ploitkit](https://github.com/rajeshmajumdar/ploitkit) The Hacker's ToolBox
+- [**161**Star][8y] [C] [poelzi/openchronos](https://github.com/poelzi/openchronos) Open Source Firmware for the TI EZ430-Chronos Watch
+- [**161**Star][3y] [Py] [pentesteres/delorean](https://github.com/pentesteres/delorean) NTP Main-in-the-Middle tool
+- [**161**Star][3y] [Go] [openwhitebox/aes](https://github.com/openwhitebox/aes) Implementations of white-box AES constructions and their cryptanalyses.
+- [**161**Star][2y] [netbiosx/default-credentials](https://github.com/netbiosx/default-credentials) Default usernames and passwords for various systems (VoIP,IPMI,Oracle).
+- [**161**Star][1y] [msuhanov/regf](https://github.com/msuhanov/regf) Windows registry file format specification
+- [**161**Star][3y] [miserlou/mackenzie](https://github.com/miserlou/mackenzie) AWS Lambda Infection Toolkit // Persistent Lambda Malware PoC
+- [**161**Star][1y] [jnusimba/linuxsecnotes](https://github.com/jnusimba/linuxsecnotes) some learning notes about Linux Security
+- [**161**Star][5m] [C] [jakeajames/jelbreklib](https://github.com/jakeajames/jelbreklib) Give me tfp0, I give you jelbrek
+- [**161**Star][3y] [Py] [hkm/whoishere.py](https://github.com/hkm/whoishere.py) WIFI Client Detection - Identify people by assigning a name to a device performing a wireless probe request.
+- [**161**Star][3y] [Shell] [hiroshimanrise/anonym8](https://github.com/hiroshimanrise/anonym8) Sets Transparent proxy tunnel through Tor, I2P, Privoxy, Polipo and modify DNS; Include Anonymizing Relay Monitor (arm), macchanger and wipe (Cleans ram/cache & swap-space) features, ID spoofing has never been so easy.
+- [**161**Star][3m] [Java] [eth-sri/securify](https://github.com/eth-sri/securify) Security Scanner for Ethereum Smart Contracts
+- [**161**Star][8m] [C] [eniac/faas](https://github.com/eniac/faas) Factoring as a Service
+- [**161**Star][2y] [Go] [elithrar/simple-scrypt](https://github.com/elithrar/simple-scrypt) A convenience library for generating, comparing and inspecting password hashes using the scrypt KDF in Go
+- [**161**Star][4d] [C++] [devinacker/bsnes-plus](https://github.com/devinacker/bsnes-plus) debug-oriented fork of bsnes
+- [**161**Star][8m] [HTML] [decal/werdlists](https://github.com/decal/werdlists)
+- [**161**Star][27d] [Py] [davedoesdev/python-jwt](https://github.com/davedoesdev/python-jwt) Python module for generating and verifying JSON Web Tokens
+- [**161**Star][3y] [Py] [ctfs/write-ups-tools](https://github.com/ctfs/write-ups-tools) A collection of tools used to maintain and create CTF write-up folders
+- [**161**Star][5d] [Py] [citizenlab/test-lists](https://github.com/citizenlab/test-lists) URL testing lists intended for discovering website censorship
+- [**161**Star][3m] [Py] [blacktop/virustotal-api](https://github.com/blacktop/virustotal-api) Virus Total Public/Private/Intel API
+- [**161**Star][3y] [Py] [artkond/cisco-rce](https://github.com/artkond/cisco-rce) CVE-2017-3881 Cisco Catalyst Remote Code Execution PoC
+- [**161**Star][21d] [C] [altramayor/gatekeeper](https://github.com/altramayor/gatekeeper) First open source DDoS protection system
+- [**161**Star][2y] [Py] [aim4r/voldiff](https://github.com/aim4r/voldiff) Malware Memory Footprint Analysis based on Volatility
+- [**161**Star][5d] [Shell] [0xmachos/mosl](https://github.com/0xmachos/mosl) Bash script to audit and fix macOS Catalina (10.15.x) security settings
+- [**161**Star][6m] [0xbug/biu](https://github.com/0xbug/biu) 网络资产发现、漏洞扫描
+- [**160**Star][24d] [JS] [paperseller/chn-iplist](https://github.com/paperseller/chn-iplist) Chnroutes rules for routers、Shadowrocket、Quantumult、Kitsunebi、acl、BifrostV、v2rayNG、clash、pac、v2ray config file.
+- [**160**Star][10m] [C] [iaik/sgxrop](https://github.com/IAIK/sgxrop) The code to the SGX-ROP paper
+- [**160**Star][2y] [C] [ninjaprawn/async_wake-fun](https://github.com/ninjaprawn/async_wake-fun) iOS/MacOS 11 内核双释放漏洞 exp
+- [**160**Star][3y] [C] [yifanlu/psvimgtools](https://github.com/yifanlu/psvimgtools) Decrypt Vita CMA backups
+- [**160**Star][19d] [AGS Script] [tinyfpga/tinyfpga-bootloader](https://github.com/tinyfpga/tinyfpga-bootloader) An open source USB bootloader for FPGAs
+- [**160**Star][2y] [Java] [the404hacking/androrat](https://github.com/the404hacking/androrat) AndroRAT | Remote Administrator Tool for Android OS Hacking
+- [**160**Star][1y] [splunk/botsv1](https://github.com/splunk/botsv1) A sample security dataset and CTF platform
+- [**160**Star][4y] [PHP] [spiderlabs/cryptomg](https://github.com/spiderlabs/cryptomg) CryptOMG is a configurable CTF style test bed that highlights common flaws in cryptographic implementations.
+- [**160**Star][3y] [C++] [sakshamsharma/http-over-protocol](https://github.com/sakshamsharma/http-over-protocol) HOP: A proxy server to enable arbitrary protocols behind an HTTP proxy
+- [**160**Star][3m] [JS] [mrgeffitas/ironsquirrel](https://github.com/mrgeffitas/ironsquirrel) Encrypted exploit delivery for the masses
+- [**160**Star][3y] [Py] [moha99sa/evilap_defender](https://github.com/moha99sa/evilap_defender) Protect your Wireless Network from Evil Access Points!
+- [**160**Star][2y] [Py] [matiasb/unpy2exe](https://github.com/matiasb/unpy2exe) Extract .pyc files from executables created with py2exe
+- [**160**Star][2m] [JS] [lelinhtinh/de4js](https://github.com/lelinhtinh/de4js) JavaScript Deobfuscator and Unpacker
+- [**160**Star][3y] [Ruby] [kost/dockscan](https://github.com/kost/dockscan) dockscan:docker安全漏洞扫描和审计工具。
+- [**160**Star][8m] [klionsec/redteammanual](https://github.com/klionsec/redteammanual)
+- [**160**Star][2y] [Py] [juancarlospaco/css-html-js-minify](https://github.com/juancarlospaco/css-html-js-minify) StandAlone Async cross-platform Minifier for the Web.
+- [**160**Star][3m] [C#] [hunniccyber/sharpsniper](https://github.com/hunniccyber/sharpsniper) Find specific users in active directory via their username and logon IP address
+- [**160**Star][2m] [C++] [gregwar/fatcat](https://github.com/gregwar/fatcat) FAT filesystems explore, extract, repair, and forensic tool
+- [**160**Star][1y] [HTML] [exploitprotocol/mobile-security-wiki](https://github.com/exploitprotocol/mobile-security-wiki)
+- [**160**Star][15d] [Shell] [dshield-isc/dshield](https://github.com/dshield-isc/dshield) DShield Raspberry Pi Sensor
+- [**160**Star][2y] [C] [dhavalkapil/libdheap](https://github.com/dhavalkapil/libdheap) A shared (dynamic) library that can be transparently injected into different processes to detect memory corruption in glibc heap
+- [**160**Star][3m] [Py] [d0c-s4vage/gramfuzz](https://github.com/d0c-s4vage/gramfuzz) gramfuzz is a grammar-based fuzzer that lets one define complex grammars to generate text and binary data formats.
+- [**160**Star][18d] [JS] [bkimminich/juice-shop-ctf](https://github.com/bkimminich/juice-shop-ctf) Juice Shop CTF 环境配置工具
+- [**160**Star][3y] [Py] [504ensicslabs/damm](https://github.com/504ensicslabs/damm) Differential Analysis of Malware in Memory
+- [**159**Star][3d] [HTML] [v2ray/v2ray.github.io](https://github.com/v2ray/v2ray.github.io) V2Ray Portal
+- [**159**Star][7m] [PS] [nickrod518/powershell-scripts](https://github.com/nickrod518/powershell-scripts) PowerShell scripts ranging from SCCM, MSO, AD, and other corporate enterprise uses... to sending cat facts to coworkers.
+- [**159**Star][7m] [C] [zhuhuibeishadiao/newhidedriverex](https://github.com/zhuhuibeishadiao/newhidedriverex) Hide Driver By MiProcessLoaderEntry
+- [**159**Star][4m] [whoisflynn/oscp-exam-report-template](https://github.com/whoisflynn/oscp-exam-report-template) Modified template for the OSCP Exam and Labs. Used during my passing attempt
+- [**159**Star][1m] [F#] [softsec-kaist/codealchemist](https://github.com/softsec-kaist/codealchemist) Semantics-aware Code Generation for Finding JS engine Vulnerabilities
+- [**159**Star][2m] [smilezxlee/crackediosapps](https://github.com/smilezxlee/crackediosapps) iOS端破解版App集合,包含破解版QQ、破解版抖音、破解版百度网盘、破解版麻花、钉钉打卡助手、破解版墨墨背单词、破解版网易云音乐、破解版芒果TV
+- [**159**Star][9m] [Py] [sch3m4/androidpatternlock](https://github.com/sch3m4/androidpatternlock) A little Python tool to crack the Pattern Lock on Android devices
+- [**159**Star][4y] [Py] [plaguescanner/plaguescanner](https://github.com/plaguescanner/plaguescanner) Open source multiple AV scanner framework
+- [**159**Star][2y] [C] [phhusson/super-bootimg](https://github.com/phhusson/super-bootimg) Tools to edit Android boot.img. NDK buildable, to be usable in an update.zip
+- [**159**Star][3y] [Py] [nneonneo/eqgrp-free-file](https://github.com/nneonneo/eqgrp-free-file) Free sampling of files from the purported Equation Group hack.
+- [**159**Star][2m] [Py] [nforest/droidimg](https://github.com/nforest/droidimg) Android/Linux vmlinux loader
+- [**159**Star][5y] [Py] [netspi/sshkey-grab](https://github.com/netspi/sshkey-grab) Grab ssh keys from ssh-agent
+- [**159**Star][5m] [Java] [netspi/javaserialkiller](https://github.com/netspi/javaserialkiller) Burp extension to perform Java Deserialization Attacks
+- [**159**Star][26d] [C++] [mxmssh/manul](https://github.com/mxmssh/manul) Manul is a coverage-guided parallel fuzzer for open-source and blackbox binaries on Windows, Linux and MacOS
+- [**159**Star][1y] [malwarearchaeology/attack](https://github.com/malwarearchaeology/attack) MITRE ATT&CK Windows Logging Cheat Sheets
+- [**159**Star][3m] [Go] [lukasikic/subzy](https://github.com/lukasikic/subzy) Subdomain takeover vulnerability checker
+- [**159**Star][1y] [JS] [logicalhacking/dvhma](https://github.com/logicalhacking/dvhma) Damn Vulnerable Hybrid Mobile App (DVHMA) is an hybrid mobile app (for Android) that intentionally contains vulnerabilities.
+- [**159**Star][5m] [JS] [k4m4/dcipher-cli](https://github.com/k4m4/dcipher-cli) Crack hashes using online rainbow & lookup table attack services, right from your terminal
+- [**159**Star][2y] [C++] [hussein-aitlahcen/blackhole](https://github.com/hussein-aitlahcen/blackhole) C# RAT (Remote Administration Tool)
+- [**159**Star][17d] [Java] [gantman/jail-monkey](https://github.com/gantman/jail-monkey) A React Native library for identifying if a phone is rooted or mocking locations
+- [**159**Star][2y] [TS] [cupslab/password_meter](https://github.com/cupslab/password_meter) 数据驱动的密码测量仪表,可对密码进行强度和可用性检测
+- [**159**Star][10m] [Py] [censys/censys-python](https://github.com/censys/censys-python) Python Library for Censys
+- [**159**Star][11m] [Go] [botherder/kraken](https://github.com/botherder/kraken) Cross-platform Yara scanner written in Go
+- [**158**Star][20d] [Java] [fuzzitdev/javafuzz](https://github.com/fuzzitdev/javafuzz) coverage guided fuzz testing for java
+- [**158**Star][1m] [Py] [travisfoley/dfirtriage](https://github.com/travisfoley/dfirtriage) Digital forensic acquisition tool for Windows based incident response.
+- [**158**Star][1y] [Go] [remeh/sizedwaitgroup](https://github.com/remeh/sizedwaitgroup) SizedWaitGroup has the same role and close to the same API as the Golang sync.WaitGroup but it adds a limit on the amount of goroutines started concurrently.
+- [**158**Star][6y] [Ruby] [resque/resque-loner](https://github.com/resque/resque-loner) Support for unique jobs in Resque: Only one job with the same payload per queue.
+- [**158**Star][4y] [Go] [vyrus001/go-mimikatz](https://github.com/vyrus001/go-mimikatz) A wrapper around a pre-compiled version of the Mimikatz executable for the purpose of anti-virus evasion.
+- [**158**Star][4y] [Shell] [theresalu/rspiducky](https://github.com/theresalu/rspiducky)
+- [**158**Star][8m] [C] [tboox/itrace](https://github.com/tboox/itrace) Trace objc method call for ios and mac
+- [**158**Star][2y] [HTML] [secmob/pwnfest2016](https://github.com/secmob/pwnfest2016) full exploit of pwnfest2016, slide and full text of syscan2017
+- [**158**Star][5m] [samanl33t/awesome-mainframe-hacking](https://github.com/samanl33t/awesome-mainframe-hacking)
+- [**158**Star][15d] [Batchfile] [pyn3rd/cve-2019-0232](https://github.com/pyn3rd/cve-2019-0232) Apache Tomcat Remote Code Execution on Windows
+- [**158**Star][2y] [Py] [phishai/phish-ai-api](https://github.com/phishai/phish-ai-api) phish.ai 公开和私有的API接口, Python编写
+- [**158**Star][9m] [Shell] [nullarray/intrec-pack](https://github.com/nullarray/intrec-pack) Intelligence and Reconnaissance Package/Bundle installer.
+- [**158**Star][1y] [Py] [musicmancorley/briarids](https://github.com/musicmancorley/briarids) An All-In-One home intrusion detection system (IDS) solution for the Raspberry PI.
+- [**158**Star][2y] [Py] [kuburan/txtool](https://github.com/kuburan/txtool) an easy pentesting tool.
+- [**158**Star][1y] [joychou93/sks](https://github.com/joychou93/sks) Security Knowledge Structure(安全知识汇总)
+- [**158**Star][2m] [C#] [jlospinoso/beamgun](https://github.com/jlospinoso/beamgun) A rogue-USB-device defeat program for Windows.
+- [**158**Star][2y] [Py] [jeffball55/rop_compiler](https://github.com/jeffball55/rop_compiler) An open source, multi-architecture ROP compiler written in python
+- [**158**Star][2y] [javierolmedo/shodan-filters](https://github.com/javierolmedo/shodan-filters) A list of shodan filters
+- [**158**Star][9d] [Py] [itsmehacker/darkscrape](https://github.com/itsmehacker/darkscrape) OSINT Tool For Scraping Dark Websites
+- [**158**Star][3m] [C++] [ion28/bluespawn](https://github.com/ion28/bluespawn) Windows-based Active Defense and EDR tool to empower Blue Teams
+- [**158**Star][1y] [Py] [hadiasghari/pyasn](https://github.com/hadiasghari/pyasn) Python IP address to Autonomous System Number lookup module. (Supports fast local lookups, and historical lookups using archived BGP dumps.)
+- [**158**Star][3y] [Java] [googlecloudplatform/endpoints-codelab-android](https://github.com/googlecloudplatform/endpoints-codelab-android) endpoints-codelab-android
+- [**158**Star][7d] [LLVM] [galoisinc/reopt](https://github.com/galoisinc/reopt) A tool for analyzing x86-64 binaries.
+- [**158**Star][5y] [C] [fuzion24/androidobfuscation-ndk](https://github.com/fuzion24/androidobfuscation-ndk) Example of obfuscating an Android NDK project using O-LLVM
+- [**158**Star][1y] [C++] [doublelabyrinth/010editor-keygen](https://github.com/doublelabyrinth/010editor-keygen) A keygen for 010Editor
+- [**158**Star][4y] [Py] [crown-prince/python_poc](https://github.com/crown-prince/python_poc) 一款python编写的Web安全检测PoC&&EXP框架
+- [**158**Star][2m] [Py] [c0rvax/project-black](https://github.com/c0rvax/project-black) Pentest/BugBounty progress control with scanning modules
+- [**158**Star][4y] [Py] [blazeinfosec/bt2](https://github.com/blazeinfosec/bt2) 电报后门,使用电报做C&C 服务器
+- [**158**Star][1y] [Py] [bayotop/off-by-slash](https://github.com/bayotop/off-by-slash) off-by-slash: Bupr扩展, 检测利用Nginx错误配置导致的重名遍历(alias traversal)
+- [**158**Star][1m] [C#] [andrewlock/netescapades.aspnetcore.securityheaders](https://github.com/andrewlock/netescapades.aspnetcore.securityheaders) Small package to allow adding security headers to ASP.NET Core websites
+- [**158**Star][2y] [Py] [alephsecurity/abootool](https://github.com/alephsecurity/abootool) abootool:基于静态知识(从bootloader 镜像中提取的字符串)动态 fuzz 隐藏的 fastboot OEM 指令
+- [**157**Star][16d] [C++] [lifting-bits/rellic](https://github.com/lifting-bits/rellic) Rellic produces goto-free C output from LLVM bitcode
+- [**157**Star][6m] [Py] [ecstatic-nobel/osweep](https://github.com/ecstatic-nobel/OSweep) Don't Just Search OSINT. Sweep It.
+- [**157**Star][1y] [Py] [ultrasecurity/webkiller](https://github.com/ultrasecurity/webkiller) 多功能渗透测试辅助脚本
+- [**157**Star][7m] [JS] [tidesec/proxy_pool](https://github.com/tidesec/proxy_pool) Proxy_Pool(代理资源池),一个小巧的代理ip抓取+评估+存储+展示的一体化的工具,包括了web展示和接口。
+- [**157**Star][3y] [Py] [theevilbit/exploit_generator](https://github.com/theevilbit/exploit_generator) Automated Exploit generation with WinDBG
+- [**157**Star][2y] [swannman/ircapabilities](https://github.com/swannman/ircapabilities) Incident Response Hierarchy of Needs
+- [**157**Star][2y] [C] [spajed/processrefund](https://github.com/spajed/processrefund) An attempt at Process Doppelgänging
+- [**157**Star][3m] [PS] [shiva108/ctf-notes](https://github.com/shiva108/ctf-notes) Everything needed for doing CTFs
+- [**157**Star][5m] [Rust] [rust-fuzz/honggfuzz-rs](https://github.com/rust-fuzz/honggfuzz-rs) Fuzz your Rust code with Google-developed Honggfuzz !
+- [**157**Star][4y] [C#] [radiowar/nfcgui](https://github.com/radiowar/nfcgui) GUI tool for NFC protocol analysis
+- [**157**Star][1y] [C++] [openats/openats](https://github.com/openats/openats) 天线追踪系统
+- [**157**Star][2m] [C++] [nitrokey/nitrokey-app](https://github.com/nitrokey/nitrokey-app) Nitrokey's Application (Win, Linux, Mac)
+- [**157**Star][6m] [mrmugiwara/ctf-tools](https://github.com/mrmugiwara/ctf-tools) Useful CTF Tools
+- [**157**Star][2y] [C] [lctf/lctf2017](https://github.com/lctf/lctf2017) Source code, writeups and exps in LCTF2017.
+- [**157**Star][6m] [C] [kkamagui/shadow-box-for-x86](https://github.com/kkamagui/shadow-box-for-x86) Lightweight and Practical Kernel Protector for x86 (Presented at BlackHat Asia 2017/2018, beVX 2018 and HITBSecConf 2017)
+- [**157**Star][8y] [C++] [kavika13/remcom](https://github.com/kavika13/remcom) Remote Command Executor: A OSS replacement for PsExec and RunAs - or Telnet without having to install a server. Take your pick :)
+- [**157**Star][3y] [HTML] [jonnyhightower/neet](https://github.com/jonnyhightower/neet) Neet - Network Enumeration and Exploitation Tool
+- [**157**Star][2y] [Py] [joker25000/optiva-framework](https://github.com/joker25000/optiva-framework) Optiva-Framework
+- [**157**Star][2y] [Py] [galkan/flashlight](https://github.com/galkan/flashlight) Pentesters spend too much time during information gathering phase. Flashlight (Fener) provides services to scan network/ports and gather information rapidly on target networks. So Flashlight should be the choice to automate discovery step during a penetration test. In this article, usage of Flashligh application will be explained.
+- [**157**Star][4m] [C++] [fritzone/obfy](https://github.com/fritzone/obfy) A tiny C++ obfuscation framework
+- [**157**Star][3y] [Py] [facert/github_search](https://github.com/facert/github_search) 根据 keywords 搜索 github 上面的 repos, 并通过 web 展示
+- [**157**Star][9y] [C] [comex/star](https://github.com/comex/star) the code behind the second incarnation of jailbreakme.com
+- [**157**Star][15d] [Py] [angr/heaphopper](https://github.com/angr/heaphopper) HeapHopper is a bounded model checking framework for Heap-implementations
+- [**157**Star][3y] [Py] [4w4k3/umbrella](https://github.com/4w4k3/umbrella) 用于渗透的File Dropper
+- [**156**Star][24d] [SourcePawn] [splewis/csgo-practice-mode](https://github.com/splewis/csgo-practice-mode) CS:GO Sourcemod plugin for private team/individual practice servers
+- [**156**Star][3y] [Go] [wille/cry](https://github.com/wille/cry) Cross platform PoC ransomware written in Go
+- [**156**Star][3y] [C++] [zer0mem0ry/runpe](https://github.com/zer0mem0ry/runpe) Code that allows running another windows PE in the same address space as the host process.
+- [**156**Star][3y] [Ruby] [waterlink/rack-reverse-proxy](https://github.com/waterlink/rack-reverse-proxy) A Reverse Proxy for Rack
+- [**156**Star][2m] [SystemVerilog] [ufrisk/pcileech-fpga](https://github.com/ufrisk/pcileech-fpga) FPGA 模块,可与 PCILeech DMA(Direct Memory Access )攻击软件组合使用
+- [**156**Star][2y] [Py] [tintinweb/striptls](https://github.com/tintinweb/striptls) proxy poc implementation of STARTTLS stripping attacks
+- [**156**Star][11m] [C] [soldierx/libhijack](https://github.com/soldierx/libhijack) Runtime Process Infection Made Easy
+- [**156**Star][2y] [C++] [rossja/tinynuke](https://github.com/rossja/tinynuke) zeus-style banking trojan
+- [**156**Star][3m] [Py] [rhinosecuritylabs/cloud-security-research](https://github.com/rhinosecuritylabs/cloud-security-research) Cloud-related research releases from the Rhino Security Labs team.
+- [**156**Star][2y] [PS] [psconfeu/2018](https://github.com/psconfeu/2018) PowerShell Conference Europe 2018 Slides and Demo Scripts
+- [**156**Star][1y] [YARA] [mikesxrs/open-source-yara-rules](https://github.com/mikesxrs/open-source-yara-rules) YARA Rules I come across on the internet
+- [**156**Star][2y] [C++] [mharjac/bad_ducky](https://github.com/mharjac/bad_ducky) Rubber Ducky compatible clone based on CJMCU BadUSB HW.
+- [**156**Star][6m] [Shell] [maldevel/blue-team](https://github.com/maldevel/blue-team) Blue Team Scripts
+- [**156**Star][1y] [Py] [madengr/ham2mon](https://github.com/madengr/ham2mon) GNU Radio based SDR scanner for narrow band FM demodulation
+- [**156**Star][2y] [Go] [ls0f/gortcp](https://github.com/ls0f/gortcp) 内网穿透、远程文件上传下载、命令执行
+- [**156**Star][1y] [Java] [lightless233/java-unserialization-study](https://github.com/lightless233/java-unserialization-study) QAQ Just study unserialize vulnerabilities in Java :)
+- [**156**Star][9y] [Py] [jonty/idiocy](https://github.com/jonty/idiocy) Idiocy is a warning shot to people browsing the internet insecurely.
+- [**156**Star][2m] [JS] [interference-security/frida-scripts](https://github.com/interference-security/frida-scripts) Frida Scripts
+- [**156**Star][18d] [C] [hfiref0x/ntcall64](https://github.com/hfiref0x/ntcall64) Windows NT x64 syscall fuzzer
+- [**156**Star][1m] [JS] [henices/chrome-proxy-helper](https://github.com/henices/chrome-proxy-helper) Chrome PROXY extension, set proxy for Chrome browser
+- [**156**Star][1y] [TS] [handsomeone/scout](https://github.com/handsomeone/scout) 可能是东半球最灵活的 URL 监控系统
+- [**156**Star][23d] [Py] [gprmax/gprmax](https://github.com/gprmax/gprmax) gprMax is open source software that simulates electromagnetic wave propagation using the Finite-Difference Time-Domain (FDTD) method for numerical modelling of Ground Penetrating Radar (GPR)
+- [**156**Star][3y] [C++] [gbonacini/cve-2016-5195](https://github.com/gbonacini/cve-2016-5195) A CVE-2016-5195 exploit example.
+- [**156**Star][1y] [Py] [fireeye/geologonalyzer](https://github.com/fireeye/geologonalyzer) GeoLogonalyzer is a utility to analyze remote access logs for anomalies such as travel feasibility and data center sources.
+- [**156**Star][3y] [Py] [fire30/ps4-3.55-code-execution-poc](https://github.com/fire30/ps4-3.55-code-execution-poc)
+- [**156**Star][8m] [dsignr/disallowed-usernames](https://github.com/dsignr/disallowed-usernames) An open source database of disallowed usernames for software projects to prevent phishing and impersonation.
+- [**156**Star][2d] [C#] [djkaty/il2cppinspector](https://github.com/djkaty/il2cppinspector) The easy way to extract types and metadata from Unity IL2CPP binaries
+- [**156**Star][9m] [dckc/awesome-ocap](https://github.com/dckc/awesome-ocap) Awesome Object Capabilities andCapability-based Security
+- [**156**Star][8m] [Visual Basic .NET] [christophetd/spoofing-office-macro](https://github.com/christophetd/spoofing-office-macro) a VBA macro spawning a process with a spoofed parent and command line.
+- [**156**Star][6m] [ObjC] [chichou/sploits](https://github.com/chichou/sploits) CVE-2018-4310
+- [**156**Star][4m] [Py] [certcc/trommel](https://github.com/certcc/trommel) Sift Through Embedded Device Files to Identify Potential Vulnerable Indicators
+- [**156**Star][2m] [Go] [c-sto/recursebuster](https://github.com/c-sto/recursebuster) rapid content discovery tool for recursively querying webservers, handy in pentesting and web application assessments
+- [**156**Star][4y] [Py] [borjamerino/pazuzu](https://github.com/borjamerino/pazuzu) Reflective DLL to run binaries from memory
+- [**156**Star][2y] [PHP] [bo0om/cve-2017-5124](https://github.com/bo0om/cve-2017-5124) Chrome < 62 uxss exploit (CVE-2017-5124)
+- [**156**Star][2y] [C] [armadito/armadito-av](https://github.com/armadito/armadito-av) Armadito antivirus main repository
+- [**156**Star][1y] [C#] [anthemtotheego/sharpcradle](https://github.com/anthemtotheego/sharpcradle)
+- [**156**Star][13d] [Scala] [albuch/sbt-dependency-check](https://github.com/albuch/sbt-dependency-check) SBT Plugin for OWASP DependencyCheck. Monitor your dependencies and report if there are any publicly known vulnerabilities (e.g. CVEs).
+- [**155**Star][2m] [Go] [ihciah/go-shadowsocks-magic](https://github.com/ihciah/go-shadowsocks-magic) A shadowsocks implementation in golang with Multi-connection Acceleration
+- [**155**Star][11m] [feeicn/vulture](https://github.com/feeicn/vulture) 分布式近实时全覆盖资产和漏洞扫描器
+- [**155**Star][3m] [C] [ajkhoury/uefi-bootkit](https://github.com/ajkhoury/UEFI-Bootkit) A small bootkit which does not rely on x64 assembly.
+- [**155**Star][2y] [Py] [crytic/ida-evm](https://github.com/crytic/ida-evm) IDA Processor Module for the Ethereum Virtual Machine (EVM)
+- [**155**Star][3y] [Py] [z0noxz/powerstager](https://github.com/z0noxz/powerstager) powerstager:创建可执行文件,用于下载PowerShell Payload,将其加载到内存,并使用混淆的EC方法运行
+- [**155**Star][3y] [C] [x0rz/ssh-honeypot](https://github.com/x0rz/ssh-honeypot) Fake sshd that logs ip addresses, usernames, and passwords.
+- [**155**Star][4m] [Shell] [weaveworks/tcptracer-bpf](https://github.com/weaveworks/tcptracer-bpf) eBPF program using kprobes to trace TCP events without run-time compilation dependencies
+- [**155**Star][8m] [Shell] [viralmaniar/i-see-you](https://github.com/viralmaniar/i-see-you) ISeeYou is a Bash and Javascript tool to find the exact location of the users during social engineering or phishing engagements. Using exact location coordinates an attacker can perform preliminary reconnaissance which will help them in performing further targeted attacks.
+- [**155**Star][1y] [Py] [sublimelinter/sublimelinter-shellcheck](https://github.com/sublimelinter/sublimelinter-shellcheck) This linter plugin for SublimeLinter provides an interface to shellcheck.
+- [**155**Star][10d] [Java] [spring-cloud/spring-cloud-vault](https://github.com/spring-cloud/spring-cloud-vault) Configuration Integration with HashiCorp Vault
+- [**155**Star][4m] [Assembly] [smealum/butthax](https://github.com/smealum/butthax) lovense hush buttplug exploit chain
+- [**155**Star][8m] [Common Lisp] [oblivia-simplex/roper](https://github.com/oblivia-simplex/roper) Return Oriented Programme Evolution with ROPER
+- [**155**Star][2m] [Py] [nucypher/pyumbral](https://github.com/nucypher/pyumbral) NuCypher's reference implementation of Umbral (threshold proxy re-encryption) using OpenSSL and Cryptography.io
+- [**155**Star][4y] [Py] [n0tr00t/beehive](https://github.com/n0tr00t/beehive) Beehive is an open-source vulnerability detection framework based on Beebeeto-framework. Security researcher can use it to find vulnerability, exploits, subsequent attacks, etc.
+- [**155**Star][4m] [mac4n6/presentations](https://github.com/mac4n6/presentations) Presentation Archives for my macOS and iOS Related Research
+- [**155**Star][27d] [Java] [itzsomebody/radon](https://github.com/itzsomebody/radon) A crappy Java bytecode obfuscator (meaning: not for production use)
+- [**155**Star][10m] [Ruby] [hatlord/snmpwn](https://github.com/hatlord/snmpwn) An SNMPv3 User Enumerator and Attack tool
+- [**155**Star][7y] [evilcos/xss.swf](https://github.com/evilcos/xss.swf) a tiny tool for swf hacking, just browse it:)
+- [**155**Star][3y] [JS] [escomplex/complexity-report](https://github.com/escomplex/complexity-report) **UNMAINTAINED** Software complexity analysis for JavaScript projects
+- [**155**Star][11m] [Py] [epsylon/cintruder](https://github.com/epsylon/cintruder) Captcha Intruder (CIntruder) is an automatic pentesting tool to bypass captchas.
+- [**155**Star][6y] [C] [defuse/sockstress](https://github.com/defuse/sockstress) Sockstress (TCP DoS) implementation.
+- [**155**Star][2y] [Ruby] [chrislee35/passivedns-client](https://github.com/chrislee35/passivedns-client) passivedns-client provides a library and a query tool for querying several passive DNS providers
+- [**155**Star][5y] [C] [arisada/midgetpack](https://github.com/arisada/midgetpack) midgetpack is a multiplatform secure ELF packer
+- [**155**Star][11d] [Py] [antichown/subdomain-takeover](https://github.com/antichown/subdomain-takeover) Subdomain Takeover Scanner | Subdomain Takeover Tool | by 0x94
+- [**155**Star][2m] [C] [airbus-seclab/crashos](https://github.com/airbus-seclab/crashos) crashos:一个极简的操作系统,通过创建畸形的系统配置,导致 hypervisor 崩溃,从而辅助 hypervisor 漏洞研究
+- [**154**Star][4d] [Py] [zeddyu/http-smuggling-lab](https://github.com/zeddyu/http-smuggling-lab) Use HTTP Smuggling Lab to learn HTTP Smuggling.
+- [**154**Star][3y] [Visual Basic .NET] [mwsrc/plasmarat](https://github.com/mwsrc/PlasmaRAT) Remote Access Trojan(RAT), Miner, DDoS
+- [**154**Star][7m] [C#] [wohlstand/destroy-windows-10-spying](https://github.com/wohlstand/destroy-windows-10-spying) Destroy Windows Spying tool
+- [**154**Star][10m] [Py] [vulnerscom/zabbix-threat-control](https://github.com/vulnerscom/zabbix-threat-control) Zabbix vulnerability assessment plugin
+- [**154**Star][6d] [Go] [ullaakut/nmap](https://github.com/ullaakut/nmap) Idiomatic nmap library for go developers
+- [**154**Star][4m] [threatexpress/malleable-c2](https://github.com/threatexpress/malleable-c2) Cobalt Strike Malleable C2 Design and Reference Guide
+- [**154**Star][3y] [C] [stonedreamforest/naiheqiao](https://github.com/stonedreamforest/naiheqiao) open-source x86/x64 usermode anti-anti-debug plugin
+- [**154**Star][11m] [C] [sjvermeu/cvechecker](https://github.com/sjvermeu/cvechecker) Command-line utility to scan the system and report on potential vulnerabilities, based on public CVE data
+- [**154**Star][2y] [Py] [secretsquirrel/fido](https://github.com/secretsquirrel/fido) Teaching old shellcode new tricks
+- [**154**Star][2y] [C] [scen/osxinj](https://github.com/scen/osxinj) osx dylib injection
+- [**154**Star][3m] [Java] [rednaga/axmlprinter](https://github.com/rednaga/axmlprinter) Library for parsing and printing compiled Android manifest files
+- [**154**Star][2m] [Java] [reddr/libscout](https://github.com/reddr/libscout) Third-party library detector for Java/Android apps
+- [**154**Star][13d] [Shell] [realtho/partyloud](https://github.com/realtho/partyloud) A simple tool to generate fake web browsing and mitigate tracking
+- [**154**Star][5m] [Py] [ragibson/steganography](https://github.com/ragibson/steganography) Least Significant Bit Steganography for bitmap images (.bmp and .png), WAV sound files, and byte sequences. Simple LSB Steganalysis (LSB extraction) for bitmap images.
+- [**154**Star][5d] [Pascal] [passbyyou888/zserver4d](https://github.com/passbyyou888/zserver4d) ZServer4D 是一套从商业项目剥离而出的云服务器中间件,可以承载百万级的分布式负载服务,并且支持IoT及内网穿透
+- [**154**Star][2y] [PHP] [paralax/lfi-labs](https://github.com/paralax/lfi-labs) small set of PHP scripts to practice exploiting LFI, RFI and CMD injection vulns
+- [**154**Star][2m] [Rust] [net-reflow/reflow](https://github.com/net-reflow/reflow) Content-routable socks5 proxy switcher for your entire LAN.
+- [**154**Star][2y] [Py] [moyix/creddump](https://github.com/moyix/creddump) Automatically exported from code.google.com/p/creddump
+- [**154**Star][6d] [Go] [mimoo/disco](https://github.com/mimoo/disco) a protocol to encrypt communications and a cryptographic library based on Disco
+- [**154**Star][4y] [Py] [kbandla/immunitydebugger](https://github.com/kbandla/immunitydebugger) ImmunityDebugger
+- [**154**Star][4m] [AutoIt] [jschicht/rawcopy](https://github.com/jschicht/rawcopy) copy files off NTFS volumes by using low level disk reading method
+- [**154**Star][10m] [Shell] [joukewitteveen/netctl](https://github.com/joukewitteveen/netctl) Profile based systemd network management
+- [**154**Star][27d] [Go] [jollheef/out-of-tree](https://github.com/jollheef/out-of-tree) out-of-tree kernel {module, exploit} development tool
+- [**154**Star][2d] [Py] [nccgroup/keimpx](https://github.com/nccgroup/keimpx) Check for valid credentials across a network over SMB
+- [**154**Star][2y] [C] [ifding/radare2-tutorial](https://github.com/ifding/radare2-tutorial) Reverse Engineering using Radare2
+- [**154**Star][29d] [hl2guide/all-in-one-customized-adblock-list](https://github.com/hl2guide/all-in-one-customized-adblock-list) An all-in-one adblock list that thoroughly blocks trackers, popup ads, ads, unwanted cookies, fake news, cookie warning messages, unwanted comment sections, crypto-coin mining, YouTube clutter, Twitter guff and social network hassles. Development is halted at version 2.8.
+- [**154**Star][9m] [C++] [changeofpace/self-remapping-code](https://github.com/changeofpace/self-remapping-code) This program remaps its image to prevent the page protection of pages contained in the image from being modified via NtProtectVirtualMemory.
+- [**154**Star][7m] [C#] [anthemtotheego/sharpexec](https://github.com/anthemtotheego/sharpexec) an offensive security C# tool designed to aid with lateral movement
+- [**154**Star][2y] [Ruby] [0x09al/cve-2018-8174-msf](https://github.com/0x09al/cve-2018-8174-msf) CVE-2018-8174 - VBScript memory corruption exploit.
+- [**153**Star][4y] [Go] [inconshreveable/go-tunnel](https://github.com/inconshreveable/go-tunnel) [DEPRECATED] Tunnel to localhost as a library
+- [**153**Star][11m] [CSS] [kali-docs-cn/kali-linux-web-pentest-cookbook-zh](https://github.com/kali-docs-cn/kali-linux-web-pentest-cookbook-zh)
+- [**153**Star][2y] [Java] [zjlywjh001/phrackctf-platform-team](https://github.com/zjlywjh001/phrackctf-platform-team) CTF platfrom(Team Version) developed by Jarvis from Phrack Team. 做一个功能最全的CTF平台。
+- [**153**Star][3m] [HTML] [zer0yu/berserker](https://github.com/zer0yu/berserker) A list of useful payloads for Web Application Security and Pentest/CTF
+- [**153**Star][3y] [ysrc/androidobfusedictionary](https://github.com/ysrc/androidobfusedictionary) Android ProGuard变态混淆字典
+- [**153**Star][1y] [voidfyoo/cve-2018-3191](https://github.com/voidfyoo/cve-2018-3191) CVE-2018-3191 payload generator
+- [**153**Star][8m] [valdikss/super-uefiinsecureboot-disk](https://github.com/valdikss/super-uefiinsecureboot-disk) Super UEFIinSecureBoot Disk: Boot any OS or .efi file without disabling UEFI Secure Boot
+- [**153**Star][3y] [Ruby] [urbanadventurer/username-anarchy](https://github.com/urbanadventurer/username-anarchy) Username tools for penetration testing
+- [**153**Star][3m] [Py] [trustedsec/ridenum](https://github.com/trustedsec/ridenum) Rid_enum is a null session RID cycle attack for brute forcing domain controllers.
+- [**153**Star][2y] [ASP] [testsecer/webshell](https://github.com/testsecer/webshell) 这是一个WebShell收集项目
+- [**153**Star][4y] [Py] [samyoyo/weeman](https://github.com/samyoyo/weeman) HTTP Server for phishing in Python
+- [**153**Star][3d] [Py] [renatahodovan/fuzzinator](https://github.com/renatahodovan/fuzzinator) Fuzzinator Random Testing Framework
+- [**153**Star][10m] [Ruby] [palkan/n_plus_one_control](https://github.com/palkan/n_plus_one_control) RSpec and Minitest matchers to prevent N+1 queries problem
+- [**153**Star][2y] [HTML] [mpirnat/lets-be-bad-guys](https://github.com/mpirnat/lets-be-bad-guys) A deliberately-vulnerable website and exercises for teaching about the OWASP Top 10
+- [**153**Star][8m] [Py] [k0retux/fuddly](https://github.com/k0retux/fuddly) Fuzzing/数据操纵(Data Manipulation)框架
+- [**153**Star][2y] [JS] [cazala/react-coin-hive](https://github.com/cazala/react-coin-hive) Mine cryptocurrency while your users haven't engaged with your content lately
+- [**153**Star][2y] [Py] [atlassian/localstack](https://github.com/atlassian/localstack)
+- [**153**Star][12m] [Go] [adguardteam/adguarddns](https://github.com/adguardteam/adguarddns) Public DNS resolver that protects you from ad trackers
+- [**153**Star][5m] [Shell] [0xmitsurugi/gimmecredz](https://github.com/0xmitsurugi/gimmecredz) You're a #pentester and you totally pwn that linux box, congrats! Now what? You can launch gimmecredz.sh which will try to extract all passwords from known locations.
+- [**153**Star][3y] [Makefile] [0x36/vpnpivot](https://github.com/0x36/vpnpivot) Explore the network using VPNPivot tool
+- [**152**Star][7m] [Py] [vysecurity/linkedint](https://github.com/vysecurity/linkedint) LinkedIn Recon Tool
+- [**152**Star][12d] [C#] [vivami/sauroneye](https://github.com/vivami/sauroneye) Search tool to find specific files containing specific words, i.e. files containing passwords..
+- [**152**Star][2y] [Py] [0xbing/wukong-agent](https://github.com/0xbing/wukong-agent) Web scan foundation framework
+- [**152**Star][1y] [Py] [vanpersiexp/expcamera](https://github.com/vanpersiexp/expcamera) Exploit Netwave and GoAhead IP Camera
+- [**152**Star][6d] [Py] [thehive-project/cortex-analyzers](https://github.com/thehive-project/cortex-analyzers) Cortex Analyzers Repository
+- [**152**Star][4y] [thecreeper/privacyfox](https://github.com/thecreeper/privacyfox) PrivacyFox tweaks various preferences in Firefox in order to enhance the privacy of users; it will also try to enforce these changes to maintain your privacy online.
+- [**152**Star][6m] [PS] [stealthbits/poshkatz](https://github.com/stealthbits/poshkatz) PowerShell module for Mimikatz
+- [**152**Star][2y] [JS] [snooze6/fios](https://github.com/snooze6/fios) small proof of concept gui for auditing iOS applications based on objection
+- [**152**Star][7d] [Py] [shirosaidev/sharesniffer](https://github.com/shirosaidev/sharesniffer) 远程文件系统自动嗅探、挂载和爬取
+- [**152**Star][2m] [Py] [richiercyrus/venator](https://github.com/richiercyrus/venator) Venator is a python tool used to gather data for proactive detection of malicious activity on macOS devices.
+- [**152**Star][4d] [C] [pkroma/processhacker](https://github.com/pkroma/processhacker) A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware—mirror of
+- [**152**Star][5y] [C++] [mothran/aflpin](https://github.com/mothran/aflpin) aflpin enables afl to fuzz blackbox binaries using a pin tool to trace execution branches.
+- [**152**Star][2y] [Py] [laie/worldsfirstsha2vulnerability](https://github.com/laie/worldsfirstsha2vulnerability) Sha256 vulnerability for full rounds. Circular hash attack.
+- [**152**Star][3y] [C] [ixty/xarch_shellcode](https://github.com/ixty/xarch_shellcode) Cross Architecture Shellcode in C
+- [**152**Star][7y] [Py] [intrepidusgroup/imdmtools](https://github.com/intrepidusgroup/imdmtools) Intrepidus Group's iOS MDM tools
+- [**152**Star][6m] [Objective-C++] [gaoshilei/mmplugin](https://github.com/gaoshilei/mmplugin) 微信自动抢红包、修改运动步数、朋友圈小视频转发等功能(无需越狱),附微信重签名教程
+- [**152**Star][2y] [Java] [floyd-fuh/jks-private-key-cracker-hashcat](https://github.com/floyd-fuh/jks-private-key-cracker-hashcat) Nail in the JKS coffin - Cracking passwords of private key entries in a JKS file
+- [**152**Star][8y] [dotfighter/torshammer](https://github.com/dotfighter/torshammer) Tor's hammer. Slow post DDOS tool written in python.
+- [**152**Star][7y] [C] [dannvix/keylogger-osx](https://github.com/dannvix/keylogger-osx) Very simple keylogger for self-quantifying on Mac OS X
+- [**152**Star][3m] [Shell] [countercept/snake](https://github.com/countercept/snake) snake - a malware storage zoo
+- [**152**Star][2d] [Shell] [bitnami/bitnami-docker-nginx](https://github.com/bitnami/bitnami-docker-nginx) Bitnami nginx Docker Image
+- [**152**Star][1m] [C] [angr/patcherex](https://github.com/angr/patcherex) Shellphish's automated patching engine, originally created for the Cyber Grand Challenge.
+- [**151**Star][1y] [Java] [zhangjiupeng/agentx](https://github.com/zhangjiupeng/agentx) Shadowsocks升级版,支持协议伪装和流量压缩,易于扩展,可统计流量
+- [**151**Star][3y] [PS] [nsacyber/pass-the-hash-guidance](https://github.com/nsacyber/pass-the-hash-guidance) Configuration guidance for implementing Pass-the-Hash mitigations. #nsacyber
+- [**151**Star][23d] [C] [tiiffi/mcrcon](https://github.com/tiiffi/mcrcon) Rcon client for Minecraft
+- [**151**Star][1m] [C] [processhacker/plugins-extra](https://github.com/processhacker/plugins-extra) These are highly unstable, buggy, incomplete plugins that are not included with Process Hacker by default.
+- [**151**Star][3y] [zbetcheckin/pdf_analysis](https://github.com/zbetcheckin/pdf_analysis) Several PDF analysis reassembled with additional tips and tools
+- [**151**Star][2y] [Rust] [trailofbits/flying-sandbox-monster](https://github.com/trailofbits/flying-sandbox-monster) sandboxes the Malware Protection engine in an AppContainer on Windows, written in Rust.
+- [**151**Star][1y] [Py] [souhardya/zerodoor](https://github.com/souhardya/zerodoor) A script written lazily for generating cross-platform backdoors on the go :)
+- [**151**Star][2y] [CSS] [saadeghi/browser-hack-sass-mixins](https://github.com/saadeghi/browser-hack-sass-mixins) Browser hack sass mixin - Apply your SCSS to a specific browser - CSS hacks for: IE, Chrome, Firefox, Edge, Opera
+- [**151**Star][2d] [HTML] [retest/recheck-web](https://github.com/retest/recheck-web) recheck for web apps – change comparison tool with local Golden Masters, Git-like ignore syntax and "Unbreakable Selenium" tests.
+- [**151**Star][2y] [Py] [reswitched/cagetheunicorn](https://github.com/reswitched/cagetheunicorn) Debugging/emulating environment for Switch code
+- [**151**Star][2y] [Java] [psiinon/bodgeit](https://github.com/psiinon/bodgeit) The BodgeIt Store is a vulnerable web application which is currently aimed at people who are new to pen testing.
+- [**151**Star][5m] [Assembly] [peterferrie/win-exec-calc-shellcode](https://github.com/peterferrie/win-exec-calc-shellcode) A small, null-free Windows shellcode that executes calc.exe (x86/x64, all OS/SPs)
+- [**151**Star][6y] [onx/cih](https://github.com/onx/cih) The source code of the CIH virus
+- [**151**Star][2y] [CSS] [m6a-uds/ssrf-lab](https://github.com/m6a-uds/ssrf-lab) Lab for exploring SSRF vulnerabilities
+- [**151**Star][8d] [C] [libimobiledevice/libirecovery](https://github.com/libimobiledevice/libirecovery) Library and utility to talk to iBoot/iBSS via USB on Mac OS X, Windows, and Linux
+- [**151**Star][2m] [Java] [leadroyal/fastjson-blacklist](https://github.com/leadroyal/fastjson-blacklist)
+- [**151**Star][2y] [C++] [l3cr0f/dccwbypassuac](https://github.com/l3cr0f/dccwbypassuac) Windows 8.1 and 10 UAC bypass abusing WinSxS in "dccw.exe".
+- [**151**Star][5m] [Py] [kacperszurek/burp_wp](https://github.com/kacperszurek/burp_wp) Find known vulnerabilities in WordPress plugins and themes using Burp Suite proxy. WPScan like plugin for Burp.
+- [**151**Star][2y] [Py] [k4m4/dymerge](https://github.com/k4m4/dymerge) takes given wordlists and merges them into one dynamic dictionary that can then be used as ammunition for a successful dictionary based (or bruteforce) attack.
+- [**151**Star][30d] [Py] [jymcheong/autottp](https://github.com/jymcheong/autottp) Automated Tactics Techniques & Procedures
+- [**151**Star][3y] [PS] [johnnydep/owa-toolkit](https://github.com/johnnydep/owa-toolkit) Powershell module to assist in attacking Exchange/Outlook Web Access
+- [**151**Star][1y] [Py] [jiangsir404/php-code-audit](https://github.com/jiangsir404/php-code-audit) php code audit for cms vulnerabilities / 代码审计,对一些大型cms漏洞的复现研究,更新源码和漏洞exp
+- [**151**Star][29d] [jeremymain/gpuprofiler](https://github.com/jeremymain/gpuprofiler) Understand your application and workflow resource requirements
+- [**151**Star][2m] [Py] [iamblackhacker/facebook-bruteforce](https://github.com/iamblackhacker/facebook-bruteforce) Bruteforce attack on Facebook account using python script
+- [**151**Star][5y] [Shell] [hellman/fixenv](https://github.com/hellman/fixenv) Fix stack addresses (when no ASLR) with and without debugging
+- [**151**Star][3m] [C] [hasherezade/process_doppelganging](https://github.com/hasherezade/process_doppelganging) 进程注入技术 Process Doppelganging 的实现代码
+- [**151**Star][8m] [Py] [githacktools/leaked](https://github.com/githacktools/leaked) Leaked? 2.1 - A Checking tool for Hash codes, Passwords and Emails leaked
+- [**151**Star][1y] [css] [eun/ctf.tf](https://github.com/eun/ctf.tf) A database of collected CTFs and their solutions.
+- [**151**Star][3y] [Shell] [buguroo/cuckooautoinstall](https://github.com/buguroo/cuckooautoinstall) Auto Installer Script for Cuckoo Sandbox
+- [**151**Star][2y] [JS] [alexzzz9/ps4-5.01-webkit-exploit-poc](https://github.com/alexzzz9/ps4-5.01-webkit-exploit-poc) PS4 5.01 WebKit Exploit PoC
+- [**150**Star][13d] [C] [ray-cp/vm-escape](https://github.com/ray-cp/vm-escape) some interesting vm-escape game
+- [**150**Star][1m] [Py] [tintinweb/ecdsa-private-key-recovery](https://github.com/tintinweb/ecdsa-private-key-recovery) A simple library to recover the private key of ECDSA and DSA signatures sharing the same nonce k and therefore having identical signature parameter r
+- [**150**Star][3m] [Py] [stuhli/dfirtrack](https://github.com/stuhli/dfirtrack) 数字取证, 与事件响应追踪. 基于Django
+- [**150**Star][9y] [Shell] [spiderlabs/jboss-autopwn](https://github.com/spiderlabs/jboss-autopwn) A JBoss script for obtaining remote shell access
+- [**150**Star][1y] [Py] [shawarkhanethicalhacker/d-tect](https://github.com/shawarkhanethicalhacker/d-tect) D-TECT - Pentesting the Modern Web
+- [**150**Star][2y] [Py] [sensepost/userenum](https://github.com/sensepost/userenum) Domain user enumeration tool
+- [**150**Star][3y] [C++] [scateu/kalibrate-hackrf](https://github.com/scateu/kalibrate-hackrf) kalibrate for hackrf
+- [**150**Star][12d] [Py] [rogerhu/gdb-heap](https://github.com/rogerhu/gdb-heap) Heap Analyzer for Python
+- [**150**Star][5y] [Py] [rep/dionaea](https://github.com/rep/dionaea) dionaea low interaction honeypot (forked from dionaea.carnivore.it)
+- [**150**Star][2y] [Py] [orppra/ropa](https://github.com/orppra/ropa) ROP 链创建工具, 带界面, 基于 Ropper
+- [**150**Star][5m] [Py] [moyix/pdbparse](https://github.com/moyix/pdbparse) Python code to parse Microsoft PDB files
+- [**150**Star][1y] [C] [matthiaskramm/swftools](https://github.com/matthiaskramm/swftools) Utilities for editing and generating Adobe Flash (SWF) files.
+- [**150**Star][2y] [Py] [malwaretech/trickbot-toolkit](https://github.com/malwaretech/trickbot-toolkit) A collection of tools for dealing with TrickBot
+- [**150**Star][2y] [Go] [kudelskisecurity/cdf](https://github.com/kudelskisecurity/cdf) automatically test the correctness and security of cryptographic software
+- [**150**Star][1y] [Shell] [hiruna/wifi-txpower-unlocker](https://github.com/hiruna/wifi-txpower-unlocker) bash 脚本, 从 Central Regulatory Domain Agent 和 Wireles Regulatory Database 获取源, 生成修改版的 regulatory.bin 并 patch 内核, 以解锁 WiFi TX power
+- [**150**Star][6y] [Py] [hiddenillusion/analyzepe](https://github.com/hiddenillusion/analyzepe) Wraps around various tools and provides some additional checks/information to produce a centralized report of a PE file.
+- [**150**Star][16d] [Py] [gdbinit/lldbinit](https://github.com/gdbinit/lldbinit) A gdbinit clone for LLDB
+- [**150**Star][2y] [Py] [ga-ryo/idafuzzy](https://github.com/ga-ryo/idafuzzy) Fuzzy search tool for IDA Pro.
+- [**150**Star][7m] [Py] [fox-it/adconnectdump](https://github.com/fox-it/adconnectdump) Dump Azure AD Connect credentials for Azure AD and Active Directory
+- [**150**Star][3y] [Py] [enginebai/pymedium](https://github.com/enginebai/pymedium) Unofficial Medium Python Flask API and SDK
+- [**150**Star][2y] [dragonquesthero/awesome-windows-security-development](https://github.com/dragonquesthero/awesome-windows-security-development) awesome-windows-security-development
+- [**150**Star][1y] [C#] [codewhitesec/lethalhta](https://github.com/codewhitesec/lethalhta) Lateral Movement technique using DCOM and HTA
+- [**150**Star][2y] [Py] [cls1991/ng](https://github.com/cls1991/ng) 获取未连接的 Wifi 的密码
+- [**150**Star][1y] [Py] [ax330d/hrdev](https://github.com/ax330d/hrdev) Hex-Rays Decompiler Enhanced View
+- [**150**Star][3y] [Py] [alschwalm/foresight](https://github.com/alschwalm/foresight) A tool for predicting the output of random number generators
+- [**150**Star][2y] [C] [alexdenisov/bitcode_retriever](https://github.com/alexdenisov/bitcode_retriever) Retrieves Bitcode from Mach-O binaries
+- [**150**Star][2y] [Py] [aipengjie/sensitivefilescan](https://github.com/aipengjie/sensitivefilescan)
+- [**149**Star][1y] [C++] [ajkhoury/sigmaker-x64](https://github.com/ajkhoury/SigMaker-x64) IDA Pro 7.0 compatible SigMaker plugin
+- [**149**Star][11m] [Go] [znly/strobfus](https://github.com/znly/strobfus) String obfuscation
+- [**149**Star][1m] [C] [wmkhoo/taintgrind](https://github.com/wmkhoo/taintgrind) A taint-tracking plugin for the Valgrind memory checking tool
+- [**149**Star][11m] [Py] [wangshub/hmpa-pi](https://github.com/wangshub/hmpa-pi) 在树莓派上,利用 Wireshark 扫描附近网络 WiFi 设备,并对扫描结果通过邮件或者微信进行推送
+- [**149**Star][4y] [trietptm/sql-injection-payloads](https://github.com/trietptm/sql-injection-payloads) SQL Injection Payloads for Burp Suite, OWASP Zed Attack Proxy,...
+- [**149**Star][1y] [C] [theofficialflow/update365](https://github.com/theofficialflow/update365) Custom Firmware 3.65 HENkaku Ensō Updater for PS Vita
+- [**149**Star][17d] [Py] [swehner/foos](https://github.com/swehner/foos) Instant replay system for foosball table
+- [**149**Star][8m] [Py] [safebreach-labs/sireprat](https://github.com/safebreach-labs/sireprat) Remote Command Execution as SYSTEM on Windows IoT Core
+- [**149**Star][2m] [JS] [rwjblue/ember-cli-content-security-policy](https://github.com/rwjblue/ember-cli-content-security-policy) use Content Security Policy (CSP) in your project
+- [**149**Star][20d] [HTML] [neal1991/gshark](https://github.com/neal1991/gshark) Scan for sensitive information easily and effectively.
+- [**149**Star][1m] [Py] [nccgroup/idahunt](https://github.com/nccgroup/idahunt) a framework to analyze binaries with IDA Pro and hunt for things in IDA Pro
+- [**149**Star][3y] [Java] [mwielgoszewski/jython-burp-api](https://github.com/mwielgoszewski/jython-burp-api) Develop Burp extensions in Jython
+- [**149**Star][1y] [PS] [mattifestation/psreflect](https://github.com/mattifestation/psreflect) Easily define in-memory enums, structs, and Win32 functions in PowerShell
+- [**149**Star][6y] [C++] [kaiserfarrell/malware](https://github.com/kaiserfarrell/malware) virus collection source code
+- [**149**Star][9d] [C] [jovanbulck/sgx-step](https://github.com/jovanbulck/sgx-step) A practical attack framework for precise enclave execution control
+- [**149**Star][2m] [Ruby] [jekyll/github-metadata](https://github.com/jekyll/github-metadata) Jekyll plugin to propagate the `site.github` namespace and set default values for use with GitHub Pages.
+- [**149**Star][4y] [C++] [hiwincn/htran](https://github.com/hiwincn/htran) HTran is a connection bouncer, a kind of proxy server. A “listener” program is hacked stealthily onto an unsuspecting host anywhere on the Internet. When it receives signals from the actual target system, it redirects it to the hacker’s server.
+- [**149**Star][7m] [Py] [ethereum/evmlab](https://github.com/ethereum/evmlab) Utilities for interacting with the Ethereum virtual machine
+- [**149**Star][2m] [Py] [eth-sri/diffai](https://github.com/eth-sri/diffai) 用于保护神经网络抵御攻击的库
+- [**149**Star][2y] [JS] [djadmin/passw0rd](https://github.com/djadmin/passw0rd)
+- [**149**Star][2y] [Shell] [dhavalkapil/luaver](https://github.com/dhavalkapil/luaver) Lua Version Manager - Managing and switching between different versions of Lua, LuaJIT and Luarocks made easy
+- [**149**Star][5y] [Py] [devttys0/wps](https://github.com/devttys0/wps) WPS related utilities
+- [**149**Star][3y] [Jupyter Notebook] [dchad/malware-detection](https://github.com/dchad/malware-detection) Malware Detection and Classification Using Machine Learning
+- [**149**Star][1y] [chryzsh/awesome-windows-security](https://github.com/chryzsh/awesome-windows-security) List of Awesome Windows Security Resources
+- [**149**Star][20d] [JS] [certsocietegenerale/swordphish-awareness](https://github.com/certsocietegenerale/swordphish-awareness) Swordphish Phishing Awareness Tool
+- [**149**Star][1y] [brucetg/app_security](https://github.com/brucetg/app_security)
+- [**149**Star][4y] [Py] [arxsys/dff](https://github.com/arxsys/dff) DFF (Digital Forensics Framework) is a Forensics Framework coming with command line and graphical interfaces. DFF can be used to investigate hard drives and volatile memory and create reports about user and system activities.
+- [**149**Star][1y] [PS] [airbus-seclab/powersap](https://github.com/airbus-seclab/powersap) powersap:PowershellSAP 评估工具。所有公开且流行/有效的工具的PowerShell 重制版,例如 Bizploit、Metasploitauxiliary 模块、网络收集的 Python 脚本。
+- [**149**Star][8m] [C] [adrianyy/eacreversing](https://github.com/adrianyy/eacreversing) Reversing EasyAntiCheat.
+- [**149**Star][11m] [Py] [649/crashcast-exploit](https://github.com/649/crashcast-exploit) This tool allows you mass play any YouTube video, terminate apps and rename Chromecast device(s) obtained from Shodan.io
+- [**149**Star][3y] [Java] [1998lixin/wechat-database](https://github.com/1998lixin/wechat-database) 破解微信数据库 获取想要的数据
+- [**148**Star][12m] [Java] [wnagzihxa1n/ctf-mobile](https://github.com/wnagzihxa1n/CTF-Mobile) CTF Solutions by me
+- [**148**Star][2m] [C] [cntools/cnping](https://github.com/cntools/cnping) Minimal Graphical IPV4 Ping Tool
+- [**148**Star][5d] [Py] [tuhinshubhra/extanalysis](https://github.com/tuhinshubhra/extanalysis) Browser Extension Analysis Framework - Scan, Analyse Chrome and firefox extensions for vulnerabilities and intels
+- [**148**Star][3m] [Py] [trailofbits/protofuzz](https://github.com/trailofbits/protofuzz) Google Protocol Buffers message generator
+- [**148**Star][9m] [C] [trailofbits/onesixtyone](https://github.com/trailofbits/onesixtyone) Fast SNMP Scanner
+- [**148**Star][6m] [Py] [thekingofduck/burpfakeip](https://github.com/thekingofduck/burpfakeip) 一个用于伪造ip地址进行爆破的Burp Suite插件
+- [**148**Star][3m] [Py] [secdec/adapt](https://github.com/secdec/adapt) WebApp自动化渗透测试工具
+- [**148**Star][1y] [Py] [raminfp/linux_exploit_development](https://github.com/raminfp/linux_exploit_development) Linux Exploit Development Techniques
+- [**148**Star][6m] [Shell] [petermosmans/security-scripts](https://github.com/petermosmans/security-scripts) A collection of security related Python and Bash shell scripts. Analyze hosts on generic security vulnerabilities. Wrapper around popular tools like nmap (portscanner), nikto (webscanner) and testssl.sh (SSL/TLS scanner)
+- [**148**Star][2y] [owenliang/php-fpm-code-analysis](https://github.com/owenliang/php-fpm-code-analysis) php-fpm源码分析
+- [**148**Star][2y] [C] [ortegaalfredo/kscope](https://github.com/ortegaalfredo/kscope) Small tool to visualize small differences on syscall timing
+- [**148**Star][1y] [PS] [nexxai/cryptoblocker](https://github.com/nexxai/cryptoblocker) A script to deploy File Server Resource Manager and associated scripts to block infected users
+- [**148**Star][5y] [Py] [mveytsman/dilettante](https://github.com/mveytsman/dilettante) Maven central doesn't do SSL when serving you JARs. Dilettante is a MiTM proxy for exploiting that.
+- [**148**Star][9m] [mpgn/cve-2019-5418](https://github.com/mpgn/cve-2019-5418) CVE-2019-5418 - File Content Disclosure on Ruby on Rails
+- [**148**Star][19d] [C] [microchiptech/cryptoauthlib](https://github.com/microchiptech/cryptoauthlib) Library for interacting with the Crypto Authentication secure elements
+- [**148**Star][5m] [PHP] [mebjas/csrf-protector-php](https://github.com/mebjas/csrf-protector-php) CSRF Protector library: standalone library for CSRF mitigation
+- [**148**Star][3y] [HTML] [luxiaok/dnsmasqweb](https://github.com/luxiaok/dnsmasqweb) 基于DNSmasq的DNS解析、以及DHCP地址分配系统
+- [**148**Star][24d] [leonjza/awesome-nmap-grep](https://github.com/leonjza/awesome-nmap-grep) Awesome Nmap Grep
+- [**148**Star][10d] [Py] [ivandokov/phockup](https://github.com/ivandokov/phockup) Media sorting tool to organize photos and videos from your camera in folders by year, month and day.
+- [**148**Star][1y] [Py] [hugsy/binja-retdec](https://github.com/hugsy/binja-retdec) Binary Ninja plugin to decompile binaries using RetDec API
+- [**148**Star][9m] [C++] [googleprojectzero/comparecoverage](https://github.com/googleprojectzero/comparecoverage) Clang instrumentation module for tracing variable and buffer comparisons in C/C++ and saving the coverage data to .sancov files
+- [**148**Star][3y] [C] [felixwilhelm/mario_baslr](https://github.com/felixwilhelm/mario_baslr) PoC for breaking hypervisor ASLR using branch target buffer collisions
+- [**148**Star][5y] [C++] [f-secure/sulo](https://github.com/f-secure/sulo) Dynamic instrumentation tool for Adobe Flash Player built on Intel Pin
+- [**148**Star][2y] [C] [elfmaster/skeksi_virus](https://github.com/elfmaster/skeksi_virus) Devestating and awesome Linux X86_64 ELF Virus
+- [**148**Star][28d] [C++] [dekuan/vwfirewall](https://github.com/dekuan/vwfirewall) 微盾®VirtualWall®防火墙整套源代码
+- [**148**Star][11m] [Ruby] [darkoperator/meterpreter-scripts](https://github.com/darkoperator/meterpreter-scripts) Meterpreter Scripts that I'm working on
+- [**148**Star][9m] [C] [darkabode/zerokit](https://github.com/darkabode/zerokit) Zerokit/GAPZ rootkit (non buildable and only for researching)
+- [**148**Star][12m] [C] [caesar0301/http-sniffer](https://github.com/caesar0301/http-sniffer) A multi-threading tool to sniff TCP flow statistics and embedded HTTP headers from PCAP file. Each TCP flow carrying HTTP is exported to text file in json format.
+- [**148**Star][11m] [Py] [bhavsec/reconspider](https://github.com/bhavsec/reconspider)
+- [**148**Star][1y] [Py] [anselal/antminer-monitor](https://github.com/anselal/antminer-monitor) Cryptocurrency mining hardware monitor using a simple web interface
+- [**148**Star][1y] [Py] [0xalexei/windowsdefendertools](https://github.com/0xalexei/windowsdefendertools) Tools for instrumenting Windows Defender's mpengine.dll
+- [**147**Star][10m] [Shell] [v2ray/dist](https://github.com/v2ray/dist) Mirror of V2Ray core releases
+- [**147**Star][8d] [HTML] [izar/pytm](https://github.com/izar/pytm) A Pythonic framework for threat modeling
+- [**147**Star][10m] [Py] [zhovner/mfdread](https://github.com/zhovner/mfdread) Mifare 1k/4k dumps parser in human readable format
+- [**147**Star][4y] [C] [valdikss/openvpn-fix-dns-leak-plugin](https://github.com/valdikss/openvpn-fix-dns-leak-plugin) OpenVPN plugin to fix Windows DNS Leaks
+- [**147**Star][2y] [Py] [valardragon/ctf-crypto](https://github.com/valardragon/ctf-crypto) Contains tools for solving RSA and other crypto problems in CTFs.
+- [**147**Star][1y] [C++] [tandasat/memorymon](https://github.com/tandasat/memorymon) Detecting execution of kernel memory where is not backed by any image file
+- [**147**Star][3y] [C] [sysprogs/virtualkd](https://github.com/sysprogs/virtualkd)
+- [**147**Star][5y] [C] [strazzere/android-lkms](https://github.com/strazzere/android-lkms) Android Loadable Kernel Modules - mostly used for reversing and debugging on controlled systems/emulators
+- [**147**Star][2y] [Py] [stfpeak/ctf](https://github.com/stfpeak/ctf) some experience in CTFs
+- [**147**Star][6m] [shramos/awesome-cybersecurity-datasets](https://github.com/shramos/awesome-cybersecurity-datasets) A curated list of amazingly awesome Cybersecurity datasets
+- [**147**Star][3y] [Py] [risksense-ops/cve-2016-6366](https://github.com/risksense-ops/cve-2016-6366) Public repository for improvements to the EXTRABACON exploit
+- [**147**Star][2y] [C] [r-a-w/torproxy](https://github.com/r-a-w/torproxy) TorProxy is a tool which uses netfilter hooks in the linux kernel to route all network traffic through the Tor network
+- [**147**Star][3y] [Py] [mpgn/padding-oracle-attack](https://github.com/mpgn/padding-oracle-attack) An exploit for the Padding Oracle Attack
+- [**147**Star][2y] [PS] [milo2012/portia](https://github.com/milo2012/portia) portia:自动化内网渗透测试工具
+- [**147**Star][2y] [Py] [mandiant/ioc_writer](https://github.com/mandiant/ioc_writer)
+- [**147**Star][2y] [Shell] [madmantm/ubuntu-pentest-tools](https://github.com/madmantm/ubuntu-pentest-tools) Script to install security tools, on ubuntu, i follow each new releases.
+- [**147**Star][1y] [C++] [justasmasiulis/nt_wrapper](https://github.com/justasmasiulis/nt_wrapper) A wrapper library around native windows sytem APIs
+- [**147**Star][3d] [Shell] [hardenedlinux/debian-gnu-linux-profiles](https://github.com/hardenedlinux/debian-gnu-linux-profiles) Debian GNU/Linux based Services Profiles
+- [**147**Star][1y] [JS] [gabemarshall/microctfs](https://github.com/gabemarshall/microctfs) Small CTF challenges running on Docker
+- [**147**Star][2m] [Py] [frint0/mass-pwn-vbulletin](https://github.com/frint0/mass-pwn-vbulletin) Identify vulnerable (RCE) vBulletin 5.0.0 - 5.5.4 instances using Shodan (CVE-2019-16759)
+- [**147**Star][3y] [C#] [endgameinc/py2exedecompiler](https://github.com/endgameinc/py2exedecompiler) Decompiles Exe created by Py2Exe using uncompyle6 for both python 2 and 3.
+- [**147**Star][18d] [C++] [emsec/hal](https://github.com/emsec/hal) HAL – The Hardware Analyzer
+- [**147**Star][3y] [Py] [drizzlerisk/bunpacker](https://github.com/drizzlerisk/bunpacker) BUnpacker是一款Android脱壳工具
+- [**147**Star][2m] [Ruby] [dev-sec/ansible-nginx-hardening](https://github.com/dev-sec/ansible-nginx-hardening) This Ansible role provides secure nginx configurations.
+- [**147**Star][1m] [C] [cyrus-and/zizzania](https://github.com/cyrus-and/zizzania) Automated DeAuth attack
+- [**147**Star][2m] [C#] [cyberark/zbang](https://github.com/cyberark/zbang) zBang is a risk assessment tool that detects potential privileged account threats
+- [**147**Star][11m] [C#] [cobbr/sharpgen](https://github.com/cobbr/sharpgen) SharpGen is a .NET Core console application that utilizes the Rosyln C# compiler to quickly cross-compile .NET Framework console applications or libraries.
+- [**147**Star][6m] [C++] [checkpointsw/invizzzible](https://github.com/checkpointsw/invizzzible) InviZzzible is a tool for assessment of your virtual environments in an easy and reliable way. It contains the most recent and up to date detection and evasion techniques as well as fixes for them.
+- [**147**Star][22d] [Py] [bugcrowd/vulnerability-rating-taxonomy](https://github.com/bugcrowd/vulnerability-rating-taxonomy) Bugcrowd’s baseline priority ratings for common security vulnerabilities
+- [**147**Star][3y] [Py] [biosbits/bits](https://github.com/biosbits/bits) BIOS Implementation Test Suite
+- [**147**Star][11m] [Shell] [aturl/awesome-anti-gfw](https://github.com/aturl/awesome-anti-gfw) 突破网络审查和封锁的开源工具清单。
+- [**147**Star][7m] [C] [0x00pf/0x00sec_code](https://github.com/0x00pf/0x00sec_code) Code for my 0x00sec.org posts
+- [**146**Star][8d] [C] [immunityinc/libptrace](https://github.com/immunityinc/libptrace) An event driven multi-core process debugging, tracing, and manipulation framework.
+- [**146**Star][3m] [hmaverickadams/tcm-security-sample-pentest-report](https://github.com/hmaverickadams/tcm-security-sample-pentest-report) Sample pentest report provided by TCM Security
+- [**146**Star][5m] [C++] [darthton/polychaos](https://github.com/darthton/polychaos) PE permutation library
+- [**146**Star][22d] [PHP] [dunglas/dunglasangularcsrfbundle](https://github.com/dunglas/dunglasangularcsrfbundle) Automatic CSRF protection for JavaScript apps using a Symfony API
+- [**146**Star][5m] [C#] [mr-un1k0d3r/maliciousclickoncegenerator](https://github.com/Mr-Un1k0d3r/MaliciousClickOnceGenerator) Quick Malicious ClickOnceGenerator for Red Team
+- [**146**Star][2y] [Py] [vduddu/malware](https://github.com/vduddu/malware) Rootkits | Backdoors | Sniffers | Virus | Ransomware | Steganography | Cryptography | Shellcodes | Webshells | Keylogger | Botnets | Worms | Other Network Tools
+- [**146**Star][2y] [Py] [undeadsec/enigma](https://github.com/undeadsec/enigma) Multiplatform payload dropper
+- [**146**Star][1y] [ObjC] [tihmstar/jelbrektime](https://github.com/tihmstar/jelbrektime) An developer jailbreak for Apple watch S3 watchOS 4.1
+- [**146**Star][3m] [Ruby] [seattlerb/ruby2ruby](https://github.com/seattlerb/ruby2ruby) a means of generating pure ruby code easily from RubyParser compatible
+- [**146**Star][1y] [JS] [saelo/cve-2018-4233](https://github.com/saelo/cve-2018-4233) Exploit for CVE-2018-4233, a WebKit JIT optimization bug used during Pwn2Own 2018
+- [**146**Star][11m] [Py] [ritiek/scribd-downloader](https://github.com/ritiek/scribd-downloader) A scribd-downloader that just works
+- [**146**Star][5y] [HTML] [pwnwiki/kaliwiki](https://github.com/pwnwiki/kaliwiki) Unofficial Kali Documentation Project
+- [**146**Star][6m] [olafhartong/sysmon-cheatsheet](https://github.com/olafhartong/sysmon-cheatsheet) All sysmon event types and their fields explained
+- [**146**Star][4m] [Java] [netsoss/headless-burp](https://github.com/netsoss/headless-burp) Automate security tests using Burp Suite.
+- [**146**Star][3y] [C] [nccgroup/triforcelinuxsyscallfuzzer](https://github.com/nccgroup/triforcelinuxsyscallfuzzer) A linux system call fuzzer using TriforceAFL
+- [**146**Star][6d] [misterch0c/what_is_this_c2](https://github.com/misterch0c/what_is_this_c2) For all these times you're asking yourself "what is this panel again?"
+- [**146**Star][2y] [Py] [mhelwig/apk-anal](https://github.com/mhelwig/apk-anal) Android APK analyzer based on radare2 and others.
+- [**146**Star][11d] [C] [mate-desktop/caja](https://github.com/mate-desktop/caja) Caja, the file manager for the MATE desktop
+- [**146**Star][2y] [Go] [magisterquis/sshhipot](https://github.com/magisterquis/sshhipot) High-interaction MitM SSH honeypot
+- [**146**Star][9m] [Java] [lanchon/haystack](https://github.com/lanchon/haystack) Signature Spoofing Patcher for Android
+- [**146**Star][4m] [HTML] [l4bf0x/phishingpretexts](https://github.com/l4bf0x/phishingpretexts) A library of pretexts to use on offensive phishing engagements.
+- [**146**Star][11m] [Shell] [kevlar1818/is_my_password_pwned](https://github.com/kevlar1818/is_my_password_pwned) How often does your password appear in the Pwned Passwords database? Uses the k-anonymity API.
+- [**146**Star][1y] [Py] [jekil/hardentheworld](https://github.com/jekil/hardentheworld) Harden the world is a community driven project to develop hardening guidelines and checklists for common software and devices.
+- [**146**Star][24d] [Perl] [henshin/filebuster](https://github.com/henshin/filebuster) An extremely fast and flexible web fuzzer
+- [**146**Star][3m] [PostScript] [guardianproject/orfox](https://github.com/guardianproject/orfox) UPDATE: Orfox is being replaced by Tor Browser for Android. All future work and comments will be handled by Tor Project.
+- [**146**Star][3y] [C] [gentilkiwi/wanadecrypt](https://github.com/gentilkiwi/wanadecrypt) A decryptor for Wanacry (you need the private key!)
+- [**146**Star][27d] [Py] [futuresharks/rpi-security](https://github.com/futuresharks/rpi-security) A security system written in python to run on a Raspberry Pi with motion detection and mobile notifications
+- [**146**Star][4m] [Py] [fireeye/pywintrace](https://github.com/fireeye/pywintrace) Python 编写的 ETW(Event Tracing for Windows) Wrapper
+- [**146**Star][3m] [C] [fgont/ipv6toolkit](https://github.com/fgont/ipv6toolkit) SI6 Networks' IPv6 Toolkit
+- [**146**Star][2d] [Shell] [entynetproject/ehtools](https://github.com/entynetproject/ehtools) Wi-Fi tools keep getting more and more accessible to beginners, and the Ehtools Framework is a framework of serious penetration tools that can be explored easily from within it. This powerful and simple tool can be used for everything from installing new add-ons to grabbing a WPA handshake in a matter of seconds. Plus, it's easy to install, set …
+- [**146**Star][1m] [Ruby] [dev-sec/ssh-baseline](https://github.com/dev-sec/ssh-baseline) DevSec SSH Baseline - InSpec Profile
+- [**146**Star][2m] [Py] [decoxviii/karma](https://github.com/decoxviii/karma) Find leaked emails with your passwords
+- [**146**Star][4y] [Lua] [davidm/lua-inspect](https://github.com/davidm/lua-inspect) Lua code analysis, with plugins for HTML and SciTE
+- [**146**Star][1m] [Py] [chrispetrou/hrshell](https://github.com/chrispetrou/hrshell) HRShell is an HTTPS/HTTP reverse shell built with flask. It is an advanced C2 server with many features & capabilities.
+- [**146**Star][5y] [C++] [blankwall/python_pin](https://github.com/blankwall/python_pin)
+- [**146**Star][18d] [Py] [bash-c/pwn_repo](https://github.com/bash-c/pwn_repo) To store some CTF_pwn_bins and exploits for self-practice
+- [**146**Star][2y] [Py] [appsecco/vulnerable-apps](https://github.com/appsecco/vulnerable-apps)
+- [**146**Star][1y] [Py] [andresriancho/race-condition-exploit](https://github.com/andresriancho/race-condition-exploit) Tool to help with the exploitation of web application race conditions
+- [**146**Star][2m] [C++] [alschwalm/dwarfexport](https://github.com/alschwalm/dwarfexport) Export dwarf debug information from IDA Pro
+- [**145**Star][4m] [Py] [reb311ion/rebel-framework](https://github.com/reb311ion/rebel-framework) Advanced and easy to use penetration testing framework
+- [**145**Star][3y] [C] [sciencemanx/dress](https://github.com/sciencemanx/dress) add symbols back into a stripped ELF binary (~strip)
+- [**145**Star][2y] [C] [yepher/razberry](https://github.com/yepher/razberry) Notes About ZWave and RazBerry
+- [**145**Star][20d] [Py] [wenzel/pyvmidbg](https://github.com/wenzel/pyvmidbg) LibVMI-based debug server, implemented in Python. Building a guest aware, stealth and agentless full-system debugger
+- [**145**Star][3y] [PHP] [webshellpub/awsome-webshell](https://github.com/webshellpub/awsome-webshell) webshell样本大合集。收集各种webshell用于webshell分析与发现。——
+- [**145**Star][5m] [ObjC] [ursachec/cpaproxy](https://github.com/ursachec/cpaproxy) A thin Objective-C wrapper around Tor.
+- [**145**Star][3m] [CSS] [rubyfu/rubyfu](https://github.com/rubyfu/rubyfu) Rubyfu, where Ruby goes evil!
+- [**145**Star][2m] [Py] [ripe-atlas-community/ripe-atlas-community-contrib](https://github.com/ripe-atlas-community/ripe-atlas-community-contrib) Repository for links towards tools written during hackathons, and a collection of contributions by the community of the RIPE Atlas visualizations, tools for analysing measurements data and other scripts
+- [**145**Star][10m] [Dockerfile] [remnux/docker](https://github.com/remnux/docker) This repository contains Dockerfiles for building Docker images of popular malware analysis tools. See
+- [**145**Star][3y] [C] [pustladi/windows-2000](https://github.com/pustladi/windows-2000) Microsoft Windows 2000 Professional — (Source Codes)
+- [**145**Star][1y] [ObjC] [psychotea/meridianjb](https://github.com/psychotea/meridianjb) An iOS 10.x Jailbreak for all 64-bit devices.
+- [**145**Star][1y] [Shell] [projectatomic/container-storage-setup](https://github.com/projectatomic/container-storage-setup) Service to set up storage for Docker and other container systems
+- [**145**Star][4y] [JS] [nowsecure/owasp-password-strength-test](https://github.com/nowsecure/owasp-password-strength-test) OWASP Password Strength Test for Node.js
+- [**145**Star][4y] [R] [mlsecproject/tiq-test](https://github.com/mlsecproject/tiq-test) Threat Intelligence Quotient Test - Dataviz and Statistical Analysis of TI feeds
+- [**145**Star][7d] [JS] [mike-works/web-security-fundamentals](https://github.com/mike-works/web-security-fundamentals)
+- [**145**Star][1m] [C#] [mihaifm/hibpofflinecheck](https://github.com/mihaifm/hibpofflinecheck) Keepass plugin that performs offline and online checks against HaveIBeenPwned passwords
+- [**145**Star][1y] [Py] [marty90/pychromedevtools](https://github.com/marty90/pychromedevtools) PyChromeDevTools is a python module that allows one to interact with Google Chrome using Chrome DevTools Protocol within a Python script.
+- [**145**Star][6m] [Py] [macr0phag3/githubmonitor](https://github.com/macr0phag3/githubmonitor) 根据关键字与 hosts 生成的关键词,利用 github 提供的 api,监控 git 泄漏。
+- [**145**Star][4y] [C++] [lcatro/network_backdoor_scanner](https://github.com/lcatro/network_backdoor_scanner) This is a backdoor about discover network device ,and it can hidden reverse connecting the hacker's server with encrypt commuication 后渗透后门程序,适合在已经攻陷的内网中做下一步的网络信息扫描..
+- [**145**Star][9m] [Py] [kacperszurek/exploits](https://github.com/kacperszurek/exploits) exploits
+- [**145**Star][5m] [AutoIt] [igromanru/dark-souls-iii-cheat-engine-guide](https://github.com/igromanru/dark-souls-iii-cheat-engine-guide) Latest CE table and guide for Dark Souls 3
+- [**145**Star][3y] [Py] [elcodigok/wphardening](https://github.com/elcodigok/wphardening) Wordpress 安全加固工具
+- [**145**Star][5m] [Py] [echowei/deeptraffic](https://github.com/echowei/deeptraffic) Deep Learning models for network traffic classification
+- [**145**Star][25d] [C++] [cybermaggedon/cyberprobe](https://github.com/cybermaggedon/cyberprobe) Capturing, analysing and responding to cyber attacks
+- [**145**Star][2y] [Ruby] [conradirwin/dotgpg](https://github.com/conradirwin/dotgpg) A secure and easy-to-use store for your production secrets
+- [**145**Star][1y] [Go] [brimstone/go-shellcode](https://github.com/brimstone/go-shellcode) Load shellcode into a new process
+- [**145**Star][11m] [Py] [airbuscyber/grap](https://github.com/airbuscyber/grap) define and match graph patterns within binaries
+- [**144**Star][5y] [Py] [ring04h/thorns](https://github.com/ring04h/thorns) thorns_project 分布式异步队列系统
+- [**144**Star][3y] [ObjC] [project-imas/security-check](https://github.com/project-imas/security-check) Application level, attached debug detect and jailbreak checking
+- [**144**Star][3y] [Ruby] [yahooarchive/rtrace](https://github.com/yahooarchive/rtrace) Rtrace is an x86/x86_64 native code debugger written in Ruby with zero dependencies
+- [**144**Star][4y] [ObjC] [etsy/bughunt-ios](https://github.com/etsy/bughunt-ios)
+- [**144**Star][1y] [Py] [viralmaniar/remote-desktop-caching-](https://github.com/viralmaniar/remote-desktop-caching-) This tool allows one to recover old RDP (mstsc) session information in the form of broken PNG files. These PNG files allows Red Team member to extract juicy information such as LAPS passwords or any sensitive information on the screen. Blue Team member can reconstruct PNG files to see what an attacker did on a compromised host. It is extremely u…
+- [**144**Star][4y] [C] [ud2/advisories](https://github.com/ud2/advisories) Security advisories
+- [**144**Star][4m] [Java] [shack2/javaserializetools](https://github.com/shack2/javaserializetools) Java反序列化漏洞利用工具V1.0 Java反序列化相关漏洞的检查工具,采用JDK 1.8+NetBeans8.2开发,软件运行必须安装JDK 1.8或者以上版本。 支持:weblogic xml反序列化漏洞 CVE-2017-10271/CNVD-C-2019-48814/CVE-2019-2725检查。
+- [**144**Star][20d] [Shell] [securecodebox/securecodebox](https://github.com/securecodebox/securecodebox) SecureCodeBox - continuous secure delivery out of the box
+- [**144**Star][10d] [Go] [rverton/webanalyze](https://github.com/rverton/webanalyze) Port of Wappalyzer (uncovers technologies used on websites) in Go to automate scanning.
+- [**144**Star][7y] [C] [rsmudge/metasploit-loader](https://github.com/rsmudge/metasploit-loader) A client compatible with Metasploit's staging protocol
+- [**144**Star][5y] [PHP] [pentestgeek/phishing-frenzy-templates](https://github.com/pentestgeek/phishing-frenzy-templates) Phishing Scenarios Used for Phishing Frenzy
+- [**144**Star][7y] [Shell] [offensive-security/hid-backdoor-peensy](https://github.com/offensive-security/hid-backdoor-peensy) Reliable Teensy Penetration Testing Payload
+- [**144**Star][4m] [Py] [nccgroup/umap2](https://github.com/nccgroup/umap2) Umap2 is the second revision of NCC Group's python based USB host security assessment tool.
+- [**144**Star][4m] [Py] [nccgroup/fuzzowski](https://github.com/nccgroup/fuzzowski) the Network Protocol Fuzzer that we will want to use.
+- [**144**Star][6m] [Py] [nashcontrol/bounty-monitor](https://github.com/nashcontrol/bounty-monitor) Leverage certificate transparency live feed to monitor for newly issued subdomain certificates (last 90 days, configurable), for domains participating in bug bounty programs.
+- [**144**Star][2y] [Shell] [n0pe-sled/postfix-server-setup](https://github.com/n0pe-sled/postfix-server-setup)
+- [**144**Star][2y] [Py] [mdsecactivebreach/powerdns](https://github.com/mdsecactivebreach/powerdns) Powershell DNS Delivery
+- [**144**Star][3y] [HTML] [landley/aboriginal](https://github.com/landley/aboriginal) provides virtual Linux images you can boot under QEMU, within which you can compile and test any software you like.
+- [**144**Star][4y] [Java] [kantega/notsoserial](https://github.com/kantega/notsoserial) Java Agent which mitigates deserialisation attacks by making certain classes unserializable
+- [**144**Star][1y] [C] [geosn0w/osiris-jailbreak](https://github.com/geosn0w/osiris-jailbreak) An incomplete iOS 11.2 -> iOS 11.3.1 Jailbreak
+- [**144**Star][3d] [fdiskyou/threat-intel](https://github.com/fdiskyou/threat-intel) Archive of publicly available threat INTel reports (mostly APT Reports but not limited to).
+- [**144**Star][2y] [Shell] [depoon/iosdylibinjectiondemo](https://github.com/depoon/iosdylibinjectiondemo) Using this Repository to demo how to inject dynamic libraries into cracked ipa files for jailed iOS devices
+- [**144**Star][2y] [Py] [davidpany/wmi_forensics](https://github.com/davidpany/wmi_forensics)
+- [**144**Star][14d] [PHP] [danwin/hosting](https://github.com/danwin/hosting) This is a setup for a TOR based shared hosting server
+- [**144**Star][2y] [chan9390/awesome-mitm](https://github.com/chan9390/awesome-mitm) Curated List of MitM frameworks on GitHub
+- [**144**Star][15d] [Py] [andresriancho/enumerate-iam](https://github.com/andresriancho/enumerate-iam) Enumerate the permissions associated with AWS credential set
+- [**143**Star][4m] [Py] [daeken/httprebind](https://github.com/daeken/httprebind) Automatic tool for DNS rebinding-based SSRF attacks
+- [**143**Star][30d] [Shell] [sclorg/s2i-python-container](https://github.com/sclorg/s2i-python-container) Python container images based on Red Hat Software Collections and intended for OpenShift and general usage, that provide a platform for building and running Python applications. Users can choose between Red Hat Enterprise Linux, Fedora, and CentOS based images.
+- [**143**Star][12d] [security-cheatsheet/reverse-shell-cheatsheet](https://github.com/security-cheatsheet/reverse-shell-cheatsheet)
+- [**143**Star][1y] [Py] [checkymander/imessagesbackdoor](https://github.com/checkymander/iMessagesBackdoor) A script to help set up an event handler in order to install a persistent backdoor that can be activated by sending a message.
+- [**143**Star][7m] [C++] [zombiecraig/udsim](https://github.com/zombiecraig/udsim) a graphical simulator that can emulate different modules in a vehicle and respond to UDS request.
+- [**143**Star][7m] [Py] [vinayakumarr/network-intrusion-detection](https://github.com/vinayakumarr/network-intrusion-detection) Network Intrusion Detection KDDCup '99', NSL-KDD and UNSW-NB15
+- [**143**Star][2y] [JS] [theori-io/zer0con2018_bpak](https://github.com/theori-io/zer0con2018_bpak) 为Google Chrome创建1-dayExploit(Zer0Con)
+- [**143**Star][3y] [CSS] [sensepost/jack](https://github.com/sensepost/jack) Drag and Drop ClickJacking PoC development assistance tool.
+- [**143**Star][3y] [HTML] [secmob/badkernel](https://github.com/secmob/badkernel) Full exploit of CVE-2016-6754(BadKernel) and slide of SyScan360 2016
+- [**143**Star][2y] [C] [salls/kernel-exploits](https://github.com/salls/kernel-exploits) Some kernel exploits
+- [**143**Star][2y] [C] [rodionovd/liblorgnette](https://github.com/rodionovd/liblorgnette) Interprocess dlsym() for OS X & iOS
+- [**143**Star][3y] [Assembly] [ricardojrdez/anti-analysis-tricks](https://github.com/ricardojrdez/anti-analysis-tricks) Bunch of techniques potentially used by malware to detect analysis environments
+- [**143**Star][2m] [C++] [raspberrypi/piserver](https://github.com/raspberrypi/piserver) Raspberry Pi Server wizard to serve Raspbian to network booting Pis
+- [**143**Star][5m] [Java] [quentinhardy/jndiat](https://github.com/quentinhardy/jndiat) 渗透工具, 通过T3协议攻击Weblogic服务器
+- [**143**Star][3m] [Py] [nuid/nebulousad](https://github.com/nuid/nebulousad) NebulousAD automated credential auditing tool.
+- [**143**Star][2d] [C] [ntpsec/ntpsec](https://github.com/ntpsec/ntpsec) The Network Time Protocol suite, refactored GitHub is a mirror of
+- [**143**Star][8m] [ASP] [misterch0c/apt34](https://github.com/misterch0c/apt34) APT34/OILRIG leak
+- [**143**Star][8d] [C] [libyal/libpff](https://github.com/libyal/libpff) Library and tools to access the Personal Folder File (PFF) and the Offline Folder File (OFF) format
+- [**143**Star][2m] [C] [grimm-co/killerbeez](https://github.com/grimm-co/killerbeez) A distributed fuzzer which aims to pull in the best technologies, make them play nicely together, and run on multiple O/Ses.
+- [**143**Star][10m] [Shell] [essandess/macos-openvpn-server](https://github.com/essandess/macos-openvpn-server) macOS OpenVPN Server and Client Configuration (OpenVPN, Tunnelblick, PF)
+- [**143**Star][8m] [Py] [dvopsway/datasploit](https://github.com/dvopsway/datasploit) A tool to perform various OSINT techniques, aggregate all the raw data, visualise it on a dashboard, and facilitate alerting and monitoring on the data.
+- [**143**Star][3y] [Py] [codexgigassys/codex-backend](https://github.com/codexgigassys/codex-backend) Codex Gigas malware DNA profiling search engine discovers malware patterns and characteristics assisting individuals who are attracted in malware hunting.
+- [**143**Star][8d] [Rust] [brycx/orion](https://github.com/brycx/orion) Easy and usable rust crypto
+- [**143**Star][3y] [Py] [blackye/lalascan](https://github.com/blackye/lalascan) 自主开发的分布式web漏洞扫描框架,集合webkit爬虫,Subdomain子域名发现,sqli、反射xss、Domxss等owasp top10漏洞扫描和边界资产发现能力。同时为通用CMS POC扫描提供了插件扩展平台
+- [**143**Star][1m] [bin2415/fuzzing_paper](https://github.com/bin2415/fuzzing_paper) puzzing related paper
+- [**143**Star][4y] [JS] [ben174/hsts-cookie](https://github.com/ben174/hsts-cookie) Creates a HSTS Supercookie to fingerprint a browser
+- [**143**Star][1y] [Shell] [adi90x/rancher-active-proxy](https://github.com/adi90x/rancher-active-proxy) All in one active reverse proxy for Rancher !
+- [**143**Star][1y] [Py] [aatlasis/chiron](https://github.com/aatlasis/chiron) An IPv6 Security Assessment framework with advanced IPv6 Extension Headers manipulation capabilities.
+- [**142**Star][11m] [C++] [virustotal/qt-virustotal-uploader](https://github.com/virustotal/qt-virustotal-uploader) VirusTotal Uploader written in C++ using QT framework
+- [**142**Star][4y] [JS] [urinx/browspy](https://github.com/urinx/browspy) 浏览器用户全部信息收集js
+- [**142**Star][1m] [Py] [mubix/osx-wificleaner](https://github.com/mubix/osx-wificleaner) Cleans out "open" wireless connections from OSX machine
+- [**142**Star][4y] [C] [valdikss/p0f-mtu](https://github.com/valdikss/p0f-mtu) p0f with patches to save MTU value and export it via API (for VPN detection)
+- [**142**Star][2m] [Py] [usableprivacy/upribox](https://github.com/usableprivacy/upribox) Usable Privacy Box
+- [**142**Star][1y] [Go] [target/portauthority](https://github.com/target/portauthority) API that leverages Clair to scan Docker Registries and Kubernetes Clusters for vulnerabilities
+- [**142**Star][3y] [PS] [sw4mpf0x/powerlurk](https://github.com/sw4mpf0x/powerlurk) Malicious WMI Events using PowerShell
+- [**142**Star][3y] [Java] [secarmalabs/psychopath](https://github.com/secarmalabs/psychopath) psychoPATH - hunting file uploads & LFI in the dark. This tool is a customisable payload generator designed for blindly detecting LFI & web file upload implementations allowing to write files into the webroot (aka document root). The "blind" aspect is the key here and is inherent to dynamic testing usually conducted with no access to the source …
+- [**142**Star][3y] [Py] [safebreach-labs/pacdoor](https://github.com/safebreach-labs/pacdoor) Proof-of-concept JavaScript malware implemented as a Proxy Auto-Configuration (PAC) File
+- [**142**Star][2y] [Py] [ridter/rtf_11882_0802](https://github.com/ridter/rtf_11882_0802) PoC for CVE-2018-0802 And CVE-2017-11882
+- [**142**Star][10m] [Java] [rani-i/mi365locker](https://github.com/rani-i/mi365locker) Xiaomi Mi365 Scooter locker
+- [**142**Star][1y] [Py] [packtpublishing/mastering-machine-learning-for-penetration-testing](https://github.com/packtpublishing/mastering-machine-learning-for-penetration-testing) Mastering Machine Learning for Penetration Testing, published by Packt
+- [**142**Star][2y] [Java] [nickstadb/deserlab](https://github.com/nickstadb/deserlab) Java deserialization exploitation lab.
+- [**142**Star][3y] [Shell] [nccgroup/chuckle](https://github.com/nccgroup/chuckle) An automated SMB relay exploitation script.
+- [**142**Star][2y] [Ruby] [michenriksen/searchpass](https://github.com/michenriksen/searchpass) searchpass:离线搜索网络设备、Web应用程序等的默认凭据
+- [**142**Star][3y] [C] [mdsecresearch/publications](https://github.com/mdsecresearch/publications) A list of published research documents
+- [**142**Star][2m] [C] [mak-/mak_it-linux-rootkit](https://github.com/mak-/mak_it-linux-rootkit) This is a linux rootkit using many of the techniques described on
+- [**142**Star][3y] [PHP] [laurent22/so-sql-injections](https://github.com/laurent22/so-sql-injections) SQL injection vulnerabilities in Stack Overflow PHP questions
+- [**142**Star][11m] [Go] [justinazoff/bro-pdns](https://github.com/justinazoff/bro-pdns) Passive DNS collection using Bro
+- [**142**Star][2y] [Py] [julieeen/kleefl](https://github.com/julieeen/kleefl) kleefl:结合了符号执行的Fuzzer,针对普通 C/C++ 应用程序
+- [**142**Star][1m] [PS] [jaredcatkinson/psreflect-functions](https://github.com/jaredcatkinson/psreflect-functions) Module to provide PowerShell functions that abstract Win32 API functions
+- [**142**Star][2y] [PHP] [drego85/ddos-php-script](https://github.com/drego85/ddos-php-script) Script to perform a DoS or DDoS UDP Flood by PHP
+- [**142**Star][1y] [C] [dots-tb/lolicon](https://github.com/dots-tb/lolicon) Small vita shell ran from kernel that allows for actual overclocking
+- [**142**Star][9m] [Py] [dlcowen/fseventsparser](https://github.com/dlcowen/fseventsparser) Parser for OSX/iOS FSEvents Logs
+- [**142**Star][3m] [C] [covertcodes/freqwatch](https://github.com/covertcodes/freqwatch) Keep track of the airwaves with RTL-SDR; snoop and capture everything into a DB
+- [**142**Star][3m] [Pascal] [coldzer0/cmulator](https://github.com/coldzer0/cmulator) Cmulator is ( x86 - x64 ) Scriptable Reverse Engineering Sandbox Emulator for shellcode and PE binaries . Based on Unicorn & Zydis Engine & javascript
+- [**142**Star][5m] [Py] [codingo/minesweeper](https://github.com/codingo/minesweeper) A Burpsuite plugin (BApp) to aid in the detection of scripts being loaded from over 23000 malicious cryptocurrency mining domains (cryptojacking).
+- [**142**Star][3y] [C] [clearlinux/cve-check-tool](https://github.com/clearlinux/cve-check-tool) Original Automated CVE Checking Tool
+- [**142**Star][8m] [Py] [bloodhoundad/bloodhound-tools](https://github.com/bloodhoundad/bloodhound-tools) Miscellaneous tools for BloodHound
+- [**142**Star][26d] [Ruby] [bitzesty/devise_zxcvbn](https://github.com/bitzesty/devise_zxcvbn) Devise plugin to reject weak passwords using zxcvbn
+- [**142**Star][2y] [Py] [balidani/tinyctf-platform](https://github.com/balidani/tinyctf-platform) Yet another CTF platform
+- [**142**Star][10d] [Py] [argp/iboot64helper](https://github.com/argp/iboot64helper) IDAPython loader to help with AArch64 iBoot, iBEC, and SecureROM reverse engineering
+- [**141**Star][7d] [Py] [volatilityfoundation/volatility3](https://github.com/volatilityfoundation/volatility3) Volatility 3.0 development
+- [**141**Star][3y] [kejane/securityrss](https://github.com/kejane/SecurityRSS) 网络安全相关的RSS订阅列表
+- [**141**Star][5y] [PHP] [veerupandey/penetration-testing-toolkit](https://github.com/veerupandey/penetration-testing-toolkit) A web interface to automate Scanning, Generating metasploit payload, Network Testing,Exploring CMS,Information Gathering and much more
+- [**141**Star][2y] [C] [tyranid/windows-logical-eop-workshop](https://github.com/tyranid/windows-logical-eop-workshop) source code for my Windows Logical Privilege Escalation workshop examples
+- [**141**Star][9m] [C] [trailofbits/osquery-extensions](https://github.com/trailofbits/osquery-extensions) osquery extensions by Trail of Bits
+- [**141**Star][3y] [C] [thispc/psiphon](https://github.com/thispc/psiphon) A multi-functional version of a popular network circumvention tool
+- [**141**Star][11m] [Py] [t4d/phishingkithunter](https://github.com/t4d/phishingkithunter) Find phishing kits which use your brand/organization's files and image.
+- [**141**Star][1m] [Java] [superblaubeere27/obfuscator](https://github.com/superblaubeere27/obfuscator) A java obfuscator (GUI)
+- [**141**Star][2y] [Py] [snare/binjatron](https://github.com/snare/binjatron) Binary Ninja plugin for Voltron integration
+- [**141**Star][4m] [Go] [skx/simple-vpn](https://github.com/skx/simple-vpn) A simple VPN allowing mesh-like communication between nodes, over websockets
+- [**141**Star][2y] [Py] [secureworks/flowsynth](https://github.com/secureworks/flowsynth) a network packet capture compiler
+- [**141**Star][2y] [Py] [sarah314/spypi](https://github.com/sarah314/spypi) An (un-)ethical hacking-station based on Raspberry Pi and Python
+- [**141**Star][5y] [Java] [retme7/cve-2014-7911_poc](https://github.com/retme7/cve-2014-7911_poc) Local root exploit for Nexus5 Android 4.4.4(KTU84P)
+- [**141**Star][25d] [PHP] [openzipkin/zipkin-php](https://github.com/openzipkin/zipkin-php) official PHP Tracer implementation for Zipkin
+- [**141**Star][8m] [ObjC] [objective-see/reikey](https://github.com/objective-see/reikey) Malware and other applications may install persistent keyboard "event taps" to intercept your keystrokes. ReiKey can scan, detect, and monitor for such taps!
+- [**141**Star][6m] [C++] [oatpp/oatpp-examples](https://github.com/oatpp/oatpp-examples) List of example projects of how to use oat++ framework
+- [**141**Star][2y] [Py] [nviso-be/binsnitch](https://github.com/nviso-be/binsnitch) Detect silent (unwanted) changes to files on your system
+- [**141**Star][2y] [Ruby] [nccgroup/binproxy](https://github.com/nccgroup/binproxy) BinProxy is a proxy for arbitrary TCP connections. You can define custom message formats using the BinData gem.
+- [**141**Star][4m] [Shell] [mbahadou/postenum](https://github.com/mbahadou/postenum) Postenum is a clean, nice and easy tool for basic/advanced privilege escalation techniques. Postenum tool is intended to be executed locally on a Linux box.
+- [**141**Star][1y] [landgrey/upload-labs-writeup](https://github.com/landgrey/upload-labs-writeup) upload-labs writeup
+- [**141**Star][3y] [Py] [kgretzky/python-x86-obfuscator](https://github.com/kgretzky/python-x86-obfuscator) This is a **WIP** tool that performs shellcode obfuscation in x86 instruction set.
+- [**141**Star][4m] [Py] [karmenzind/fp-server](https://github.com/karmenzind/fp-server) Free proxy server, continuously crawling and providing proxies, based on Tornado and Scrapy. 免费代理服务器,基于Tornado和Scrapy,在本地搭建属于自己的代理池
+- [**141**Star][1m] [Java] [joshjdevl/libsodium-jni](https://github.com/joshjdevl/libsodium-jni) (Android) Networking and Cryptography Library (NaCL) JNI binding. JNI is utilized for fastest access to native code. Accessible either in Android or Java application. Uses SWIG to generate Java JNI bindings. SWIG definitions are extensible to other languages.
+- [**141**Star][3y] [C] [jongates/jon](https://github.com/jongates/jon) jon 是一款LINUX系统攻防工具箱,包含扫描,入侵,痕迹清理,木马,网站测试等各种黑客工具。Jon is a toolbox of Linux, including scanning, intrusion, trace cleaning, Trojan horse, website testing and other hacker tools.
+- [**141**Star][6m] [Py] [integrity-sa/burpcollaborator-docker](https://github.com/integrity-sa/burpcollaborator-docker) This repository includes a set of scripts to install a Burp Collaborator Server in a docker environment, using a LetsEncrypt wildcard certificate. The objective is to simplify as much as possible the process of setting up and maintaining the server.
+- [**141**Star][3m] [PHP] [incredibleindishell/cors-vulnerable-lab](https://github.com/incredibleindishell/cors-vulnerable-lab) Sample vulnerable code and its exploit code
+- [**141**Star][2y] [C++] [honorarybot/pulsedbg](https://github.com/honorarybot/pulsedbg) Hypervisor-based debugger
+- [**141**Star][2y] [C++] [hjc4869/uacbypass](https://github.com/hjc4869/uacbypass) A demo to bypass windows 10 default UAC configuration using IFileOperation and dll hijacking
+- [**141**Star][2y] [Py] [gumblex/ptproxy](https://github.com/gumblex/ptproxy) Turn any pluggable transport for Tor into an obfuscating TCP tunnel.
+- [**141**Star][3m] [CoffeeScript] [furqansoftware/node-whois](https://github.com/furqansoftware/node-whois) A simple WHOIS client for NodeJS
+- [**141**Star][7m] [C] [coolervoid/hiddenwall](https://github.com/coolervoid/hiddenwall) Tool to generate a Linux kernel module for custom rules with Netfilter hooking. (block ports, Hidden mode, rootkit functions etc)
+- [**141**Star][1y] [Py] [bruce30262/twindbg](https://github.com/bruce30262/twindbg) PEDA-like debugger UI for WinDbg
+- [**141**Star][1y] [Py] [brain-research/tensorfuzz](https://github.com/brain-research/tensorfuzz) A library for performing coverage guided fuzzing of neural networks
+- [**141**Star][16d] [Py] [blueudp/deep-explorer](https://github.com/blueudp/deep-explorer) Deep Explorer is a tool developed in python which purpose is the search of hidden services in tor network, using Ahmia Browser and crawling the links obtained
+- [**141**Star][4y] [Py] [blackye/jenkins](https://github.com/blackye/jenkins) Jenkins漏洞探测、用户抓取爆破
+- [**140**Star][1m] [uknowsec/sharptoolsaggressor](https://github.com/uknowsec/sharptoolsaggressor) 内网渗透中常用的c#程序整合成cs脚本,直接内存加载。持续更新~
+- [**140**Star][14d] [JS] [dfirkuiper/kuiper](https://github.com/dfirkuiper/kuiper) a digital investigation platform that provides a capabilities for the investigation team and individuals to parse, search, visualize collected evidences (evidences could be collected by fast traige script like Hoarder)
+- [**140**Star][2y] [Py] [we5ter/gsdf](https://github.com/We5ter/GSDF) 基于谷歌SSL透明证书的子域名查询工具
+- [**140**Star][1m] [Shell] [cloudfoundry-incubator/docker-boshrelease](https://github.com/cloudfoundry-incubator/docker-boshrelease) Docker BOSH Release
+- [**140**Star][1y] [Java] [tomsteele/burpbuddy](https://github.com/tomsteele/burpbuddy) burpbuddy exposes Burp Suites's extender API over the network through various mediums, with the goal of enabling development in any language without the restrictions of the JVM
+- [**140**Star][3y] [ObjC] [zhengmin1989/os-x-10.11.6-exp-via-pegasus](https://github.com/zhengmin1989/os-x-10.11.6-exp-via-pegasus) Local privilege escalation for OS X 10.11.6 via PEGASUS
+- [**140**Star][27d] [Py] [wmliang/pe-afl](https://github.com/wmliang/pe-afl)
+- [**140**Star][3y] [Py] [vvalien/sharpmeter](https://github.com/vvalien/sharpmeter) A Simple Way To Make Meterpreter Reverse Payloads
+- [**140**Star][2y] [C++] [talos-vulndev/afl-dyninst](https://github.com/talos-vulndev/afl-dyninst) American Fuzzy Lop + Dyninst == AFL Fuzzing blackbox binaries
+- [**140**Star][2y] [Shell] [systematicat/hack-captive-portals](https://github.com/systematicat/hack-captive-portals) Hack any Captive portal using MAC-spoofing technique
+- [**140**Star][2y] [Py] [sumanj/frankencert](https://github.com/sumanj/frankencert) Adversarial Testing of Certificate Validation in SSL/TLS Implementations
+- [**140**Star][4y] [Py] [shengqi158/pyvulhunter](https://github.com/shengqi158/pyvulhunter) python audit tool 审计 注入 inject
+- [**140**Star][2m] [Py] [scrapinghub/python-scrapinghub](https://github.com/scrapinghub/python-scrapinghub) A client interface for Scrapinghub's API
+- [**140**Star][5y] [Shell] [s7ephen/osx-sandbox--seatbelt--profiles](https://github.com/s7ephen/osx-sandbox--seatbelt--profiles) A repository for configuration profiles for OSX's Seatbelt Application Sandbox
+- [**140**Star][5m] [Py] [ridter/cve-2019-1040](https://github.com/ridter/cve-2019-1040) CVE-2019-1040 with Exchange
+- [**140**Star][3m] [Py] [pybind/python_example](https://github.com/pybind/python_example) Example pybind11 module built with a Python-based build system
+- [**140**Star][10m] [Py] [payloadsecurity/vxapi](https://github.com/payloadsecurity/vxapi) A generic interface and CLI for all endpoints of the Falcon Sandbox API
+- [**140**Star][2y] [Py] [nullarray/cypher](https://github.com/nullarray/cypher) Pythonic ransomware proof of concept.
+- [**140**Star][4y] [C++] [nihilus/hexrays_tools](https://github.com/nihilus/hexrays_tools) Assist in creation of new structure definitions / virtual calls detection
+- [**140**Star][2d] [C#] [microsoft/windowsprotocoltestsuites](https://github.com/microsoft/windowsprotocoltestsuites) Windows Protocol Test Suites provide interoperability testing against an implementation of the Windows open specifications.
+- [**140**Star][2m] [C#] [med0x2e/gadgettojscript](https://github.com/med0x2e/gadgettojscript) A tool for generating .NET serialized gadgets that can trigger .NET assembly load/execution when deserialized using BinaryFormatter from JS/VBS/VBA based scripts.
+- [**140**Star][2y] [Java] [lorenzoongithub/nudge4j](https://github.com/lorenzoongithub/nudge4j) Get inside your JVM
+- [**140**Star][1y] [laxa/hackingtools](https://github.com/laxa/hackingtools) Exhaustive list of hacking tools
+- [**140**Star][6y] [Tcl] [koto/mosquito](https://github.com/koto/mosquito) XSS exploitation tool - access victims through HTTP proxy
+- [**140**Star][7y] [C] [johnath/beep](https://github.com/johnath/beep) beep is a command line tool for linux that beeps the PC speaker
+- [**140**Star][2y] [C] [ixty/mandibule](https://github.com/ixty/mandibule) 向远程进程注入ELF文件
+- [**140**Star][4y] [HTML] [hexgolems/schem](https://github.com/hexgolems/schem) A debugger frontend
+- [**140**Star][2y] [guanchao/androidchecklist](https://github.com/guanchao/androidchecklist) Android应用审计checklist整理
+- [**140**Star][7m] [Visual Basic .NET] [dzzie/pdfstreamdumper](https://github.com/dzzie/pdfstreamdumper) research tool for the analysis of malicious pdf documents. make sure to run the installer first to get all of the 3rd party dlls installed correctly.
+- [**140**Star][4y] [Py] [dzonerzy/acunetix_0day](https://github.com/dzonerzy/acunetix_0day) Acunetix 0day RCE
+- [**140**Star][3y] [C] [dismantl/improvedreflectivedllinjection](https://github.com/dismantl/improvedreflectivedllinjection) An improvement of the original reflective DLL injection technique by Stephen Fewer of Harmony Security
+- [**140**Star][2m] [C++] [dfir-orc/dfir-orc](https://github.com/dfir-orc/dfir-orc) Forensics artefact collection tool for systems running Microsoft Windows
+- [**140**Star][1y] [Py] [codypierce/hackers-grep](https://github.com/codypierce/hackers-grep) hackers-grep is a utility to search for strings in PE executables including imports, exports, and debug symbols
+- [**140**Star][3y] [C#] [cn33liz/cscriptshell](https://github.com/cn33liz/cscriptshell) CScriptShell, a Powershell Host running within cscript.exe
+- [**140**Star][2y] [PHP] [bugku/bwvs](https://github.com/bugku/bwvs) Web漏洞渗透测试靶场
+- [**140**Star][3y] [JS] [atiger77/dionaea](https://github.com/atiger77/dionaea) 基于Docker的蜜罐系统
+- [**139**Star][3y] [Py] [n1nj4sec/mimipy](https://github.com/n1nj4sec/mimipy) port of mimipenguin.sh in python with some additional protection features
+- [**139**Star][8d] [C#] [0xd4d/jitdasm](https://github.com/0xd4d/jitdasm) Disassemble jitted .NET methods
+- [**139**Star][7d] [Rust] [bytecodealliance/wasmparser](https://github.com/bytecodealliance/wasmparser) A simple event-driven library for parsing WebAssembly binary files
+- [**139**Star][2m] [crytic/blockchain-security-contacts](https://github.com/crytic/blockchain-security-contacts) Directory of security contacts for blockchain companies
+- [**139**Star][2d] [Java] [zaproxy/zap-hud](https://github.com/zaproxy/zap-hud) 看ZAP如何解决安全工具的UX特别难用的问题
+- [**139**Star][4m] [Py] [wangyihang/sourceleakhacker](https://github.com/wangyihang/sourceleakhacker) a muilt-thread web source leak detector
+- [**139**Star][1y] [Py] [und3rf10w/external_c2_framework](https://github.com/und3rf10w/external_c2_framework) Python api for usage with cobalt strike's External C2 specification
+- [**139**Star][4d] [C] [twogood/unshield](https://github.com/twogood/unshield) Tool and library to extract CAB files from InstallShield installers
+- [**139**Star][3m] [Py] [technicaldada/hackerpro](https://github.com/technicaldada/hackerpro) All in One Hacking Tool for Linux & Android (Termux). Hackers are welcome in our blog
+- [**139**Star][2y] [spoock1024/web-security](https://github.com/spoock1024/web-security) Web安全中比较好的文章
+- [**139**Star][4y] [Py] [spiderlabs/cribdrag](https://github.com/spiderlabs/cribdrag) cribdrag - an interactive crib dragging tool for cryptanalysis on ciphertext generated with reused or predictable stream cipher keys
+- [**139**Star][3y] [Py] [skochinsky/me-tools](https://github.com/skochinsky/me-tools) Tools for working with Intel ME
+- [**139**Star][2d] [Py] [santatic/web2attack](https://github.com/santatic/web2attack) Web hacking framework with tools, exploits by python
+- [**139**Star][2y] [C] [saleemrashid/ledger-mcu-backdoor](https://github.com/saleemrashid/ledger-mcu-backdoor) Proof of concept for Ledger MCU exploit
+- [**139**Star][1m] [Py] [rhinosecuritylabs/gcpbucketbrute](https://github.com/rhinosecuritylabs/gcpbucketbrute) A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated.
+- [**139**Star][5d] [recolic/awesome-hust](https://github.com/recolic/awesome-hust) HUST experiments, reports, and useful tools.
+- [**139**Star][1m] [HTML] [proabiral/inception](https://github.com/proabiral/inception) A highly configurable tool to check for whatever you like against any number of hosts.
+- [**139**Star][2m] [Verilog] [osresearch/spispy](https://github.com/osresearch/spispy) An open source SPI flash emulator and monitor
+- [**139**Star][2m] [nathanchance/android-kernel-clang](https://github.com/nathanchance/android-kernel-clang) Information on compiling Android kernels with Clang
+- [**139**Star][9m] [Py] [mtivadar/qiew](https://github.com/mtivadar/qiew) Home of Qiew - Reverse engineering tool
+- [**139**Star][4m] [Py] [mgeeky/expdevbadchars](https://github.com/mgeeky/expdevbadchars) Bad Characters highlighter for exploit development purposes supporting multiple input formats while comparing.
+- [**139**Star][4y] [Py] [lauixdata/wechat_hack](https://github.com/lauixdata/wechat_hack) 微信黑客攻击平台 - 已经废弃
+- [**139**Star][2y] [l3m0n/linux_information](https://github.com/l3m0n/linux_information) 自动化收集linux信息
+- [**139**Star][17d] [Jupyter Notebook] [kelu124/echomods](https://github.com/kelu124/echomods) Open source ultrasound processing modules and building blocks
+- [**139**Star][2m] [C#] [juunas11/aspnetcore-security-headers](https://github.com/juunas11/aspnetcore-security-headers) Middleware for adding security headers to an ASP.NET Core application.
+- [**139**Star][6m] [Py] [jaxbcd/zeebsploit](https://github.com/jaxbcd/zeebsploit) web scanner - exploitation - information gathering
+- [**139**Star][7m] [Py] [iphelix/ida-sploiter](https://github.com/iphelix/ida-sploiter) a plugin for Hex-Ray's IDA Pro disassembler designed to enhance IDA's capabilities as an exploit development and vulnerability research tool.
+- [**139**Star][11m] [C++] [guidovranken/libfuzzer-gv](https://github.com/guidovranken/libfuzzer-gv) 加强版 libFuzzer:超快速Fuzzing 的新技巧
+- [**139**Star][24d] [C] [glv2/bruteforce-luks](https://github.com/glv2/bruteforce-luks) Try to find the password of a LUKS encrypted volume.
+- [**139**Star][2y] [C] [gkaindl/meltdown-poc](https://github.com/gkaindl/meltdown-poc) A quick PoC to try out the "meltdown" timing attack.
+- [**139**Star][11m] [C++] [finixbit/elf-parser](https://github.com/finixbit/elf-parser) Lightweight elf binary parser with no external dependencies - Sections, Symbols, Relocations, Segments
+- [**139**Star][2y] [C] [eterna1/puszek-rootkit](https://github.com/eterna1/puszek-rootkit) linux rootkit
+- [**139**Star][10m] [PS] [empireproject/psinject](https://github.com/empireproject/psinject) Inject PowerShell into any process
+- [**139**Star][2m] [Py] [cboesecurity/password_pwncheck](https://github.com/cboesecurity/password_pwncheck) Kerberos / Windows AD / Linux PAM password change check against breached lists (HIBP), and other rules
+- [**139**Star][1y] [Py] [c0r3dump3d/osueta](https://github.com/c0r3dump3d/osueta) A simple Python script to exploit the OpenSSH User Enumeration Timing Attack.
+- [**139**Star][5y] [PHP] [btoplak/joomla-anti-malware-scan-script--jamss-](https://github.com/btoplak/joomla-anti-malware-scan-script--jamss-) a Joomla! and WordPress Security script that automatically scans the Joomla! or Wordpress files for some patterns and "fingerprints" of malware, trojans or other injections into PHP code
+- [**139**Star][11m] [Py] [bignerd95/winboxexploit](https://github.com/bignerd95/winboxexploit) Proof of Concept of Winbox Critical Vulnerability
+- [**139**Star][2m] [Scala] [azure/azure-cosmosdb-spark](https://github.com/azure/azure-cosmosdb-spark) Apache Spark Connector for Azure Cosmos DB
+- [**139**Star][6y] [Ruby] [aidanns/vagrant-reload](https://github.com/aidanns/vagrant-reload) A plugin that allows you to reload a Vagrant plugin as a provisioning step.
+- [**138**Star][3m] [ckjbug/xmind-learning](https://github.com/ckjbug/xmind-learning) 各种安全相关思维导图整理收集
+- [**138**Star][7m] [JS] [wzdnzd/shadowsocksx-ng-r](https://github.com/wzdnzd/shadowsocksx-ng-r) Shadowsocks Client for MacOS
+- [**138**Star][2d] [C++] [tenzir/vast](https://github.com/tenzir/vast) a scalable foundation for a security operations center (SOC): a rich data model for security data, high-throughput ingestion of telemetry, low-latency search, and flexible export in various formats.
+- [**138**Star][1m] [Py] [darkarp/chromepass](https://github.com/darkarp/chromepass) Chromepass - Hacking Chrome Saved Passwords
+- [**138**Star][8m] [Shell] [wazehell/pe-linux](https://github.com/wazehell/pe-linux) Linux Privilege Escalation Tool By WazeHell
+- [**138**Star][7m] [Shell] [vcheckzen/familycloudspeederinshell](https://github.com/vcheckzen/familycloudspeederinshell) [ 天翼家庭云/天翼云盘提速 Shell 版 ] A Shell Implementation of FamilyCloudSpeeder, ESurfing
+- [**138**Star][1y] [Py] [ultimatelabs/zoom](https://github.com/ultimatelabs/zoom) Automatic & lightning fast wordpress vulnerability scanner
+- [**138**Star][1y] [C++] [tromp/equihash](https://github.com/tromp/equihash) multi-parameter Equihash proof-of-work multi-threaded C solvers
+- [**138**Star][3m] [Py] [threatexpress/cs2modrewrite](https://github.com/threatexpress/cs2modrewrite) Convert Cobalt Strike profiles to modrewrite scripts
+- [**138**Star][9m] [C++] [thefox/keylogger](https://github.com/thefox/keylogger) Keylogger for Windows.
+- [**138**Star][12m] [C] [tharina/35c3ctf](https://github.com/tharina/35c3ctf) 35C3 Junior CTF pwnables
+- [**138**Star][8y] [JS] [substack/node-password-reset](https://github.com/substack/node-password-reset) middleware for password reset emails
+- [**138**Star][1m] [Shell] [shellhub/shellhub](https://github.com/shellhub/shellhub) shell script hub
+- [**138**Star][7y] [C] [quarkslab/dreamboot](https://github.com/quarkslab/dreamboot) UEFI bootkit
+- [**138**Star][7m] [C++] [macmade/dyld_cache_extract](https://github.com/macmade/dyld_cache_extract) A macOS utility to extract dynamic libraries from the dyld_shared_cache of macOS and iOS.
+- [**138**Star][2y] [Py] [jrbancel/chromagnon](https://github.com/jrbancel/chromagnon) Chrome/Chromium Forensic Tool : Parses History, Visited Links, Downloaded Files and Cache
+- [**138**Star][2y] [ObjC] [jiangbolee/changelocation](https://github.com/jiangbolee/changelocation) 改变自己的定位地址(免越狱打卡)
+- [**138**Star][7m] [C] [jgm/lunamark](https://github.com/jgm/lunamark) Lua library for conversion between markup formats
+- [**138**Star][6y] [Py] [jezdez/django-discover-runner](https://github.com/jezdez/django-discover-runner) A Django test runner based on unittest2's test discovery.
+- [**138**Star][4m] [Go] [greenboxal/dns-heaven](https://github.com/greenboxal/dns-heaven) 通过/etc/resolv.conf 启用本地 DNS stack 来修复(愚蠢的) macOS DNS stack
+- [**138**Star][2y] [Py] [google/tcp_killer](https://github.com/google/tcp_killer) 关闭 Linux或 MacOS 的 Tcp 端口
+- [**138**Star][6m] [C] [glv2/bruteforce-wallet](https://github.com/glv2/bruteforce-wallet) Try to find the password of an encrypted Peercoin (or Bitcoin, Litecoin, etc...) wallet file.
+- [**138**Star][10m] [Py] [gawen/virustotal](https://github.com/gawen/virustotal)
+- [**138**Star][8m] [JS] [exodusintel/chromium-941743](https://github.com/exodusintel/chromium-941743) Chrome v8 1Day Exploit by István Kurucsai
+- [**138**Star][4m] [CSS] [epfl-vlsc/memoro](https://github.com/epfl-vlsc/memoro) 堆详情查探器, 可查看进程分配堆的位置和时间, 以及进程如何使用堆内存
+- [**138**Star][2m] [C] [dgiardini/rtl-ais](https://github.com/dgiardini/rtl-ais) A simple AIS tuner and generic dual-frequency FM demodulator
+- [**138**Star][2m] [C] [dekunukem/kbord](https://github.com/dekunukem/kbord) Scriptable mechanical keypad with OLED display and RGB backlight.
+- [**138**Star][2y] [Py] [cyberark/shimit](https://github.com/cyberark/shimit) A tool that implements the Golden SAML attack
+- [**138**Star][16d] [Go] [cloudflare/cfssl_trust](https://github.com/cloudflare/cfssl_trust) CFSSL's CA trust store repository
+- [**138**Star][6m] [Perl] [caledoniaproject/jenkins-cli-exploit](https://github.com/caledoniaproject/jenkins-cli-exploit) Jenkins CommonCollections Exploit
+- [**138**Star][24d] [C] [antelle/argon2-browser](https://github.com/antelle/argon2-browser) Argon2 library compiled for browser runtime
+- [**138**Star][9m] [Py] [ale5000-git/tingle](https://github.com/ale5000-git/tingle) Android patcher
+- [**137**Star][4y] [Py] [pentestmonkey/pysecdump](https://github.com/pentestmonkey/pysecdump) Python-based tool to dump security information from Windows systems
+- [**137**Star][9m] [Go] [snail007/shadowtunnel](https://github.com/snail007/shadowtunnel) secure tunnel which help you protecting your tcp traffic between your machine and your service on remote.
+- [**137**Star][1m] [JS] [fcavallarin/domdig](https://github.com/fcavallarin/domdig) DOM XSS scanner for Single Page Applications
+- [**137**Star][11m] [Shell] [tacticthreat/penetrationtesting-notes](https://github.com/tacticthreat/PenetrationTesting-Notes) Penetration Testing Notes and Playbook (PTP)
+- [**137**Star][8m] [Py] [mdudek-ics/trisis-triton-hatman](https://github.com/MDudek-ICS/TRISIS-TRITON-HATMAN) Repository containting original and decompiled files of TRISIS/TRITON/HATMAN malware
+- [**137**Star][18d] [Shell] [reb311ion/tornado](https://github.com/reb311ion/tornado) All in one MITM tool .
+- [**137**Star][4y] [C] [xairy/kaslr-bypass-via-prefetch](https://github.com/xairy/kaslr-bypass-via-prefetch) A proof-of-concept KASLR bypass for the Linux kernel via timing prefetch (dilettante implementation, better read the original paper:
+- [**137**Star][5y] [ObjC] [tyranid/ie11sandboxescapes](https://github.com/tyranid/ie11sandboxescapes) Some example source code for fixed IE11 sandbox escapes.
+- [**137**Star][2y] [Java] [tinylcy/classanalyzer](https://github.com/tinylcy/classanalyzer) A Java Class File Disassembler
+- [**137**Star][8y] [stefanesser/ida-ios-toolkit](https://github.com/stefanesser/ida-ios-toolkit) Collection of idapython scripts for dealing with the iOS kernelcache
+- [**137**Star][4y] [PS] [secabstraction/wmisploit](https://github.com/secabstraction/wmisploit) a small set of PowerShell scripts that leverage the WMI service, for post-exploitation use
+- [**137**Star][1y] [Py] [quentinhardy/scriptsandexploits](https://github.com/quentinhardy/scriptsandexploits) Some scripts and exploits
+- [**137**Star][4y] [Py] [puniaze/portdog](https://github.com/puniaze/portdog) network anomaly detector aimed to detect port scanning techniques
+- [**137**Star][2m] [HTML] [nusenu/ansible-relayor](https://github.com/nusenu/ansible-relayor) An Ansible Role for Tor Relay Operators
+- [**137**Star][9m] [Py] [nh2/strace-pipes-presentation](https://github.com/nh2/strace-pipes-presentation) 利用strace+管道/socket进行调试
+- [**137**Star][1y] [Java] [netspi/wsdler](https://github.com/netspi/wsdler) WSDL Parser extension for Burp
+- [**137**Star][3y] [Py] [misterch0c/twitterbftd](https://github.com/misterch0c/twitterbftd) Twitter Back From The Dead looks in a user tweets history for domain names that are available for registration
+- [**137**Star][26d] [PS] [lazywinadmin/adsips](https://github.com/lazywinadmin/adsips) PowerShell module to interact with Active Directory using ADSI and the System.DirectoryServices namespace (.NET Framework)
+- [**137**Star][3y] [C] [koutto/ioctlbf](https://github.com/koutto/ioctlbf) Windows Kernel Drivers fuzzer
+- [**137**Star][10m] [Py] [johndekroon/serializekiller](https://github.com/johndekroon/serializekiller) Mass scanner for the Java serialize bug
+- [**137**Star][2m] [ignitetechnologies/ctf-difficulty](https://github.com/ignitetechnologies/ctf-difficulty) This cheasheet is aimed at the CTF Players and Beginners to help them sort the CTF Challenges on the basis of Difficulties.
+- [**137**Star][2m] [ObjC] [icepa/tor.framework](https://github.com/icepa/tor.framework) Tor framework for the iCepa project
+- [**137**Star][2y] [Java] [helios-decompiler/standalone-app](https://github.com/helios-decompiler/standalone-app) All-in-one Java reverse engineering tool
+- [**137**Star][7m] [C] [hc0d3r/mysql-magic](https://github.com/hc0d3r/mysql-magic) dump mysql client password from memory
+- [**137**Star][2y] [greymd/cve-2017-1000117](https://github.com/greymd/cve-2017-1000117) Check Git's vulnerability CVE-2017-1000117
+- [**137**Star][9d] [C++] [grammatech/ddisasm](https://github.com/grammatech/ddisasm) A fast and accurate disassembler
+- [**137**Star][2y] [Py] [gradiusx/hevd-python-solutions](https://github.com/gradiusx/hevd-python-solutions) Python solutions for the HackSysTeam Extreme Vulnerable Driver
+- [**137**Star][2y] [Java] [gnaixx/hidex-hack](https://github.com/gnaixx/hidex-hack) anti reverse by hack dex file
+- [**137**Star][7m] [Py] [giovanifss/gitmails](https://github.com/giovanifss/gitmails) An information gathering tool to collect git commit emails in version control host services
+- [**137**Star][3y] [C] [ebursztein/malusb](https://github.com/ebursztein/malusb) Malicious USB
+- [**137**Star][17d] [Ruby] [dev-sec/chef-ssh-hardening](https://github.com/dev-sec/chef-ssh-hardening) This chef cookbook provides secure ssh-client and ssh-server configurations.
+- [**137**Star][3y] [C] [cr4sh/peibackdoor](https://github.com/cr4sh/peibackdoor) PEI stage backdoor for UEFI compatible firmware
+- [**137**Star][5y] [Py] [byt3bl33d3r/sslstrip2](https://github.com/byt3bl33d3r/sslstrip2) A mirror of the original SSLstrip+ code by Leonardo Nve
+- [**137**Star][3y] [JS] [as0ler/frida-scripts](https://github.com/as0ler/frida-scripts) Repository including some useful frida script for iOS Reversing
+- [**137**Star][2y] [Py] [anhkgg/pyrat](https://github.com/anhkgg/pyrat) PyRat,a rat by python xmlrpc
+- [**137**Star][5m] [C] [akayn/demos](https://github.com/akayn/demos) Windows Kernel Exploitation. Static & dynamic analysis, exploits & vuln research. Mitigations bypass's, genric bug-class's.
+- [**137**Star][1y] [PLpgSQL] [1eez/103976](https://github.com/1eez/103976) 103976个英语单词库(sql版,csv版,Excel版)包含英文单词,中文翻译,单词的词性及多种词义,执行SQL语句就可以生成表,支持SQL Server,MySQL等多种数据库
+- [**136**Star][9d] [Scala] [shiftleftsecurity/joern](https://github.com/shiftleftsecurity/joern) Open-source code analysis platform for C/C++ based on code property graphs
+- [**136**Star][2y] [Py] [vysecurity/ipfuscator](https://github.com/vysecurity/IPFuscator) IPFuscator - A tool to automatically generate alternative IP representations
+- [**136**Star][14d] [PS] [lazywinadmin/monitor-adgroupmembership](https://github.com/lazywinadmin/Monitor-ADGroupMembership) PowerShell script to monitor Active Directory groups and send an email when someone is changing the membership
+- [**136**Star][6y] [Py] [osirislab/ctf-challenges](https://github.com/osirislab/CTF-Challenges) A repository of challenges from various CTF competitions.
+- [**136**Star][2y] [PS] [gpoguy/getvulnerablegpo](https://github.com/gpoguy/getvulnerablegpo) PowerShell script to find 'vulnerable' security-related GPOs that should be hardended
+- [**136**Star][1y] [nsacyber/unfetter](https://github.com/nsacyber/unfetter) Identifies defensive gaps in security posture by leveraging Mitre's ATT&CK framework. #nsacyber
+- [**136**Star][2m] [JS] [jesusprubio/shodan-client](https://github.com/jesusprubio/shodan-client)
+- [**136**Star][6y] [C++] [zer0fl4g/nanomite](https://github.com/zer0fl4g/nanomite) Graphical Debugger for x64 and x86 on Windows
+- [**136**Star][8m] [Py] [yt1g3r/cve-2019-3396_exp](https://github.com/yt1g3r/cve-2019-3396_exp) CVE-2019-3396 confluence SSTI RCE
+- [**136**Star][3y] [Java] [ysrc/anti-emulator](https://github.com/ysrc/anti-emulator) 基于文件特征的Android模拟器检测
+- [**136**Star][1y] [C] [xvortex/ps4-hen-vtx](https://github.com/xvortex/ps4-hen-vtx) A fully implemented kernel exploit for the PS4 with HEN
+- [**136**Star][12m] [JS] [thx/magix-inspector](https://github.com/thx/magix-inspector) magix项目调试分析工具
+- [**136**Star][4m] [Jupyter Notebook] [threathuntingproject/hunter](https://github.com/threathuntingproject/hunter) A threat hunting / data analysis environment based on Python, Pandas, PySpark and Jupyter Notebook.
+- [**136**Star][7y] [C] [t57root/pwnginx](https://github.com/t57root/pwnginx) Pwn nginx - a nginx backdoor provides shell access, socks5 tunneling, http password sniffing.
+- [**136**Star][28d] [Py] [swisskyrepo/vulny-code-static-analysis](https://github.com/swisskyrepo/vulny-code-static-analysis) Basic script to detect vulnerabilities into a PHP source code using statical analysis, based on regex
+- [**136**Star][4y] [scfwse/blockchinasoftware](https://github.com/scfwse/blockchinasoftware) 国产安全软件免疫补丁
+- [**136**Star][4m] [C] [rmmh/abbrase](https://github.com/rmmh/abbrase) password generation based on abbreviating phrases made with markov chains
+- [**136**Star][1y] [Py] [nirizr/rematch](https://github.com/nirizr/rematch) REmatch, a complete binary diffing framework that is free and strives to be open source and community driven.
+- [**136**Star][6y] [Py] [nightnord/ljd](https://github.com/nightnord/ljd) LuaJIT raw-bytecode decompiler
+- [**136**Star][3d] [Py] [misp/misp-modules](https://github.com/misp/misp-modules) Modules for expansion services, import and export in MISP
+- [**136**Star][1y] [HTML] [maestron/hacking-tutorials](https://github.com/maestron/hacking-tutorials) hacking-tutorials
+- [**136**Star][3m] [Go] [leviathan1995/fari-proxy](https://github.com/leviathan1995/fari-proxy) To freedom
+- [**136**Star][4m] [PS] [leechristensen/random](https://github.com/leechristensen/random) Assorted scripts and one off things
+- [**136**Star][3y] [kurobeats/pentest-bookmarks](https://github.com/kurobeats/pentest-bookmarks) Open Penetration Testing Bookmarks Collection
+- [**136**Star][2m] [C] [kubo/funchook](https://github.com/kubo/funchook) Funchook - an API Hook Library
+- [**136**Star][3y] [ObjC] [kpwn/935csbypass](https://github.com/kpwn/935csbypass) codesign bypass (get out of rop without JIT)
+- [**136**Star][2y] [Shell] [junbaor/shell_script](https://github.com/junbaor/shell_script) 一键安装 shadowsocks,支持 chacha20-ietf-poly1305 加密方式
+- [**136**Star][7m] [Py] [itskindred/moddetective](https://github.com/itskindred/moddetective) modDetective is a small Python tool that chronologizes files based on modification time in order to investigate recent system activity.
+- [**136**Star][3y] [Py] [hasameli/foghorn](https://github.com/hasameli/foghorn) The foghorn project is a DNS proxy intended to reduce user exposure to phishing and other malicious items that can be interdicted by DNS greylisting
+- [**136**Star][2d] [JS] [h3xstream/burp-retire-js](https://github.com/h3xstream/burp-retire-js) Burp/ZAP/Maven extension that integrate Retire.js repository to find vulnerable Javascript libraries.
+- [**136**Star][7y] [Py] [gdssecurity/wifitap](https://github.com/gdssecurity/wifitap) wifitap updated for BT5r3
+- [**136**Star][2y] [Py] [duoergun0729/3book](https://github.com/duoergun0729/3book) 《Web安全之强化学习与GAN》
+- [**136**Star][3y] [Java] [dodola/deepinvirtualapp](https://github.com/dodola/deepinvirtualapp) VirtualApp的技术文档和各个技术点拆解demo
+- [**136**Star][4m] [Py] [derekhe/proxypool](https://github.com/derekhe/proxypool) 高质量免费代理池——每日1w+代理资源滚动更新
+- [**136**Star][2y] [Py] [ctxis/canape](https://github.com/ctxis/canape) CANAPE Network Testing Tool
+- [**136**Star][8d] [C#] [chrisnas/debuggingextensions](https://github.com/chrisnas/debuggingextensions) Host of debugging-related extensions such as post-mortem tools or WinDBG extensions
+- [**136**Star][3y] [C] [chris-johnston/binarykeyboard](https://github.com/chris-johnston/binarykeyboard) A keyboard with two buttons that types in binary.
+- [**136**Star][1m] [TS] [chame1eon/jnitrace](https://github.com/chame1eon/jnitrace) A Frida based tool that traces usage of the JNI API in Android apps.
+- [**136**Star][4m] [JS] [chabou/hyper-pane](https://github.com/chabou/hyper-pane) Extension for Hyper.app to enhance pane navigation.
+- [**136**Star][2y] [Rust] [bryant/argon2rs](https://github.com/bryant/argon2rs) The pure-Rust password hashing library running on Argon2.
+- [**136**Star][2m] [Py] [bo0om/parampampam](https://github.com/bo0om/parampampam) brute discover GET and POST parameters.
+- [**136**Star][4y] [Go] [bearded-web/bearded](https://github.com/bearded-web/bearded)
+- [**136**Star][7d] [Py] [arizvisa/ida-minsc](https://github.com/arizvisa/ida-minsc) a plugin for IDA Pro that assists a user with scripting the IDAPython plugin that is bundled with the disassembler.
+- [**136**Star][14d] [PS] [antoniococo/conptyshell](https://github.com/antoniococo/conptyshell) ConPtyShell - Fully Interactive Reverse Shell for Windows
+- [**136**Star][1y] [C] [alex3434/wmi-static-spoofer](https://github.com/alex3434/wmi-static-spoofer) Spoofing the Windows 10 HDD/diskdrive serialnumber from kernel without hooking
+- [**136**Star][2y] [Go] [aiportal/wechat-proxy](https://github.com/aiportal/wechat-proxy) 微信代理服务
+- [**135**Star][13d] [JS] [snyk/goof](https://github.com/snyk/goof) Super vulnerable todo list application
+- [**135**Star][11m] [PS] [vysecurity/aggressor-vysec](https://github.com/vysecurity/Aggressor-VYSEC) CobaltStrike Aggressor Scripts
+- [**135**Star][12m] [Shell] [onmyway133/swiftsnippets](https://github.com/onmyway133/SwiftSnippets) A collection of Swift snippets to be used in Xcode
+- [**135**Star][1y] [Py] [crytic/rattle](https://github.com/crytic/rattle) evm binary static analysis
+- [**135**Star][13d] [Haskell] [jackmiranda/herms](https://github.com/JackMiranda/herms) a Haskell-based Recipe Manager (yes, food recipes) for the command line
+- [**135**Star][2y] [JS] [usscltd/dorks](https://github.com/usscltd/dorks) google hack database automation tool
+- [**135**Star][2y] [thec00n/smart-contract-honeypots](https://github.com/thec00n/smart-contract-honeypots) a collection of smart contract honeypots.
+- [**135**Star][3y] [Ruby] [tagomoris/fluent-plugin-secure-forward](https://github.com/tagomoris/fluent-plugin-secure-forward) input/output plugin to forward fluentd messages over SSL with authentication.
+- [**135**Star][3y] [Py] [sviehb/jefferson](https://github.com/sviehb/jefferson) JFFS2 filesystem extraction tool
+- [**135**Star][6y] [Java] [sectooladdict/wavsep](https://github.com/sectooladdict/wavsep) The Web Application Vulnerability Scanner Evaluation Project
+- [**135**Star][2y] [C#] [poshsec/poshsecframework](https://github.com/poshsec/poshsecframework) A framework for PowerShell and PoshSec scripts for network management, security, and maintenance.
+- [**135**Star][8d] [pomerium/awesome-security-audits](https://github.com/pomerium/awesome-security-audits) A collection of public security audits.
+- [**135**Star][2y] [Shell] [peterjaric/archaeologit](https://github.com/peterjaric/archaeologit) 扫描GitHub repo的历史, 按指定模式查找敏感信息, 例如用户名密码
+- [**135**Star][4y] [osandamalith/exe2image](https://github.com/osandamalith/exe2image) A simple utility to convert EXE files to JPEG images and vice versa.
+- [**135**Star][5d] [Py] [oasis-open/cti-python-stix2](https://github.com/oasis-open/cti-python-stix2) OASIS TC Open Repository: Python APIs for STIX 2
+- [**135**Star][7y] [Ruby] [mubix/vt-notify](https://github.com/mubix/vt-notify) Get email notification when Virus Total has a copy of your binary.
+- [**135**Star][30d] [Py] [m8r0wn/subscraper](https://github.com/m8r0wn/subscraper) External pentest and bug bounty tool to perform subdomain enumeration through various techniques. SubScraper will provide information such as HTTP & DNS lookups to aid in potential next steps.
+- [**135**Star][8m] [PS] [logrhythm-labs/pie](https://github.com/logrhythm-labs/pie) Phishing Intelligence Engine
+- [**135**Star][3y] [PS] [latkin/1poshword](https://github.com/latkin/1poshword) PowerShell client for 1Password
+- [**135**Star][1y] [Go] [lanrat/certgraph](https://github.com/lanrat/certgraph) 抓取 SSL 证书并创建有向图, 图中每个域都是一个节点, 域的证书的替代名称作为节点的边
+- [**135**Star][3y] [Py] [laginimaineb/android_fde_bruteforce](https://github.com/laginimaineb/android_fde_bruteforce) Scripts to bruteforce Android's Full Disk Encryption off the device
+- [**135**Star][2y] [Rust] [kpcyrd/rshijack](https://github.com/kpcyrd/rshijack) TCP连接劫持
+- [**135**Star][3y] [C] [keenerd/rtl-sdr-misc](https://github.com/keenerd/rtl-sdr-misc) A bucket of various work-in-progress rtl-sdr ideas.
+- [**135**Star][7m] [Shell] [itskindred/jalesc](https://github.com/itskindred/jalesc) Just Another Linux Enumeration Script: A Bash script for locally enumerating a compromised Linux box
+- [**135**Star][3y] [C++] [ioactive/i-know-where-your-page-lives](https://github.com/ioactive/i-know-where-your-page-lives) I Know Where Your Page Lives: Derandomizing the latest Windows 10 Kernel - ZeroNights 2016
+- [**135**Star][11m] [C++] [herumi/msoffice](https://github.com/herumi/msoffice) A tool/lib to encrypt/decrypt Microsoft Office Document
+- [**135**Star][7m] [C] [dzzie/scdbg](https://github.com/dzzie/scdbg) note: current build is VS_LIBEMU project. This cross platform gcc build is for Linux users but is no longer updated. modification of the libemu sctest project to add basic debugger capabilities and more output useful for manual RE. The newer version will run under WINE
+- [**135**Star][5m] [PHP] [designsecurity/progpilot](https://github.com/designsecurity/progpilot) A static analysis tool for security
+- [**135**Star][22d] [C] [davidbuchanan314/tardis](https://github.com/davidbuchanan314/tardis) Trace And Rewrite Delays In Syscalls: Hooking time-related Linux syscalls to warp a process's perspective of time, using ptrace.
+- [**135**Star][3y] [C] [cryptosphere/sysrandom](https://github.com/cryptosphere/sysrandom) Secure random number generation for Ruby using system RNG facilities
+- [**135**Star][8d] [Py] [certcc/tapioca](https://github.com/certcc/tapioca) CERT Tapioca for MITM network analysis
+- [**135**Star][7m] [Py] [cbhue/pyfuscation](https://github.com/cbhue/pyfuscation) Obfuscate powershell scripts by replacing Function names, Variables and Parameters.
+- [**135**Star][2m] [Py] [arch4ngel/eavesarp](https://github.com/arch4ngel/eavesarp) Analyze ARP requests to identify intercommunicating hosts and stale network address configurations (SNACs)
+- [**135**Star][2m] [Go] [0xrawsec/whids](https://github.com/0xrawsec/whids) Open Source Endpoint Detection System for Windows
+- [**134**Star][6d] [Py] [dhondta/dronesploit](https://github.com/dhondta/dronesploit) Drone pentesting framework console
+- [**134**Star][24d] [Go] [getlantern/http-proxy](https://github.com/getlantern/http-proxy) HTTP Proxy with TLS support
+- [**134**Star][2d] [Shell] [adroitadorkhan/energizedprotection](https://github.com/AdroitAdorKhan/EnergizedProtection) A merged collection of hosts from reputable sources. #StayEnergized!
+- [**134**Star][4y] [Ruby] [dradis/dradis-legacy](https://github.com/dradis/dradis-legacy) This is a LEGACY repo head to
+- [**134**Star][10m] [C] [yadutaf/tracepkt](https://github.com/yadutaf/tracepkt) 跟踪 Linux 系统 PING 数据包跨网络接口和命名空间的路线,支持 IPv4 及 IPv6
+- [**134**Star][2m] [Py] [wudimahua/firewall](https://github.com/wudimahua/firewall) 美国国家安全局NSA下属方程式黑客组织(Equation Group)被The Shadow Brokers(影子经纪人)hack出来的并免费分享的源码
+- [**134**Star][9d] [C++] [thiagoralves/openplc_v3](https://github.com/thiagoralves/openplc_v3) OpenPLC Runtime version 3
+- [**134**Star][5m] [tarraschk/richelieu](https://github.com/tarraschk/richelieu) List of the most common French passwords
+- [**134**Star][1y] [Py] [soledad208/cve-2018-10933](https://github.com/soledad208/cve-2018-10933) CVE-2018-10933 very simple POC
+- [**134**Star][2y] [C] [silentsignal/sheep-wolf](https://github.com/silentsignal/sheep-wolf) 现实中早已有MD5 碰撞攻击的实例,然而一些安全软件依然已 MD5 标识恶意样本。此工具用于检测安全工具内部是否使用 MD5 标识样本
+- [**134**Star][3m] [Py] [seomoz/reppy](https://github.com/seomoz/reppy) Modern robots.txt Parser for Python
+- [**134**Star][10m] [PS] [securemode/invoke-apex](https://github.com/securemode/invoke-apex) A PowerShell-based toolkit and framework consisting of a collection of techniques and tradecraft for use in red team, post-exploitation, adversary simulation, or other offensive security tasks.
+- [**134**Star][11m] [Py] [scrapinghub/scrapy-training](https://github.com/scrapinghub/scrapy-training) Scrapy Training companion code
+- [**134**Star][3m] [Py] [revng/llvmcpy](https://github.com/revng/llvmcpy) Python bindings for LLVM auto-generated from the LLVM-C API
+- [**134**Star][2y] [Py] [random-robbie/jira-scan](https://github.com/random-robbie/jira-scan) CVE-2017-9506 - SSRF
+- [**134**Star][2y] [Py] [pjlantz/hale](https://github.com/pjlantz/hale) Botnet command & control monitor
+- [**134**Star][20d] [C++] [pichi-router/pichi](https://github.com/pichi-router/pichi) Flexible Rule-Based Proxy
+- [**134**Star][5y] [PHP] [phith0n/xsshtml](https://github.com/phith0n/xsshtml) php富文本过滤类,XSS Filter
+- [**134**Star][4m] [C++] [phildo/expandpass](https://github.com/phildo/expandpass) Implements a simple nested grammar for expanding passwords
+- [**134**Star][3y] [Shell] [pasahitz/zirikatu](https://github.com/pasahitz/zirikatu) Fud Payload generator script
+- [**134**Star][5d] [Go] [palantir/policy-bot](https://github.com/palantir/policy-bot) A GitHub App that enforces approval policies on pull requests
+- [**134**Star][3d] [C] [openmpt/openmpt](https://github.com/openmpt/openmpt) Official read-only git mirror of the OpenMPT and libopenmpt subversion repository at
+- [**134**Star][3d] [Py] [omegak2/pypoe](https://github.com/omegak2/pypoe) Collection of Python Tools for Path of Exile
+- [**134**Star][2y] [ObjC] [objective-see/sniffmk](https://github.com/objective-see/sniffmk) sniff mouse and keyboard events
+- [**134**Star][1m] [C] [nomorefood/putty-cac](https://github.com/nomorefood/putty-cac) Windows Secure Shell Client With Support For Smart Cards & Certificates
+- [**134**Star][1y] [C++] [nitram2342/degate](https://github.com/nitram2342/degate) Open source software for chip reverse engineering.
+- [**134**Star][3d] [Py] [netevert/pockint](https://github.com/netevert/pockint) A portable OSINT Swiss Army Knife for DFIR/OSINT professionals
+- [**134**Star][5m] [Shell] [nccgroup/bkscan](https://github.com/nccgroup/bkscan) BlueKeep scanner supporting NLA
+- [**134**Star][6m] [Go] [mylxsw/remote-tail](https://github.com/mylxsw/remote-tail) RemoteTail用于同步监控多台服务器日志文件变更,一句话说就是多主机的远程tail。
+- [**134**Star][2y] [Py] [mohamednourtn/terminator](https://github.com/mohamednourtn/terminator) Terminator metasploit payload generator
+- [**134**Star][2y] [mafutian/software](https://github.com/mafutian/software) 破解版工具/软件
+- [**134**Star][8m] [PS] [klionsec/decryption-tool](https://github.com/klionsec/decryption-tool)
+- [**134**Star][3y] [Swift] [kidneyband/potatso-ios](https://github.com/kidneyband/potatso-ios) Potatso is an iOS client that implements Shadowsocks proxy with the leverage of NetworkExtension framework in iOS 9.
+- [**134**Star][9m] [Py] [jzadeh/aktaion](https://github.com/jzadeh/aktaion) Open Source ML tool and data samples for Exploit and Phishing Research
+- [**134**Star][3m] [PHP] [jorijn/laravel-security-checker](https://github.com/jorijn/laravel-security-checker) Added Laravel functionality to SensioLabs Security Checker. Adds a command to check for, and optionally emails you, vulnerabilities when they affect you.
+- [**134**Star][1y] [Makefile] [jonathansalwan/binary-samples](https://github.com/jonathansalwan/binary-samples) Samples of binary with different formats and architectures. A test suite for your binary analysis tools.
+- [**134**Star][3m] [C] [guillem96/argon-nx](https://github.com/guillem96/argon-nx) an immutable payload which is injected to your Nintendo Switch via Fusee Gelee exploit.
+- [**134**Star][5y] [C] [goldshtn/windbg-extensions](https://github.com/goldshtn/windbg-extensions) Various extensions for WinDbg
+- [**134**Star][1y] [ellerbrock/docker-security-images](https://github.com/ellerbrock/docker-security-images)
+- [**134**Star][1y] [Py] [dionach/reposcanner](https://github.com/dionach/reposcanner) Python script to scan Git repos for interesting strings
+- [**134**Star][1y] [Swift] [danleechina/mixplaintext](https://github.com/danleechina/mixplaintext) 可对 Xcode 项目工程所有的 objective-c 文件内包含的明文进行加密混淆,提高逆向分析难度。
+- [**134**Star][4y] [Shell] [commonexploits/port-scan-automation](https://github.com/commonexploits/port-scan-automation) Automate NMAP Scans and Generate Custom Nessus Policies Automatically
+- [**134**Star][3m] [YARA] [citizenlab/malware-indicators](https://github.com/citizenlab/malware-indicators) Citizen Lab Malware Reports
+- [**134**Star][3y] [Py] [blacktop/malice](https://github.com/blacktop/malice) VirusTotal Wanna Be
+- [**134**Star][2y] [Py] [binarydefense/auto-ossec](https://github.com/binarydefense/auto-ossec) automatically provision OSSEC agents for both Linux and Windows
+- [**134**Star][5y] [Py] [ashdnazg/pyreshark](https://github.com/ashdnazg/pyreshark) A Wireshark plugin providing a simple interface for writing dissectors in Python.
+- [**134**Star][4m] [PS] [anssi-fr/adtimeline](https://github.com/anssi-fr/adtimeline) PowerShell script creating a timeline of Active Directory changes with replication metadata
+- [**134**Star][3y] [akibsayyed/safeseven](https://github.com/akibsayyed/safeseven) SS7 Assessment Tool
+- [**134**Star][2y] [HTML] [4b5f5f4b/exploits](https://github.com/4b5f5f4b/exploits)
+- [**134**Star][1m] [0xhelloworld/public](https://github.com/0xhelloworld/public) stuff i'm willing to share with the world lol
+- [**133**Star][4y] [C++] [qihoo360/artdumper](https://github.com/qihoo360/artdumper) 从oat文件中dump出来dex的工具
+- [**133**Star][2m] [Kotlin] [gosecure/dtd-finder](https://github.com/gosecure/dtd-finder) List DTDs and generate XXE payloads using those local DTDs.
+- [**133**Star][29d] [Batchfile] [pr0cf5/kernel-exploit-practice](https://github.com/pr0cf5/kernel-exploit-practice) repository for kernel exploit practice
+- [**133**Star][2d] [Py] [baidu-security/openrasp-iast](https://github.com/baidu-security/openrasp-iast) IAST 灰盒扫描工具
+- [**133**Star][1y] [Py] [zxlie/website-ssl.sh](https://github.com/zxlie/website-ssl.sh) 低门槛跨入Https大门!网站ssl证书自动生成工具(http到https的转变),燥起来吧!
+- [**133**Star][1y] [Py] [youngyangyang04/nosqlattack](https://github.com/youngyangyang04/nosqlattack) NoSQLAttack is an open source Python tool to automate exploit MongoDB server IP on Internet and disclose the database data by MongoDB default configuration weaknesses and injection attacks.
+- [**133**Star][5y] [Java] [wanchouchou/apkprotect](https://github.com/wanchouchou/apkprotect) 通付盾第一代安全加固方案
+- [**133**Star][1y] [Py] [threatresponse/margaritashotgun](https://github.com/threatresponse/margaritashotgun) Remote Memory Acquisition Tool
+- [**133**Star][7m] [shipcod3/mysapadventures](https://github.com/shipcod3/mysapadventures) A quick methodology on testing / hacking SAP Applications for n00bz and bug bounty hunters
+- [**133**Star][2y] [sashs/arm_exploitation](https://github.com/sashs/arm_exploitation) Exploitation on ARM-based Systems (Troopers18)
+- [**133**Star][2y] [C] [potmdehex/multipath_kfree](https://github.com/potmdehex/multipath_kfree) low effort jb
+- [**133**Star][9m] [Shell] [nullarray/mida-multitool](https://github.com/nullarray/mida-multitool) Bash script purposed for system enumeration, vulnerability identification and privilege escalation.
+- [**133**Star][2y] [C++] [nezha-dt/nezha](https://github.com/nezha-dt/nezha) nezha:高效的domain-independent differential fuzzer
+- [**133**Star][3m] [Py] [nccgroup/thetick](https://github.com/nccgroup/thetick) A simple embedded Linux backdoor.
+- [**133**Star][2d] [Py] [manifoldai/docker-cookiecutter-data-science](https://github.com/manifoldai/docker-cookiecutter-data-science) A fork of the cookiecutter-data-science leveraging Docker for local development.
+- [**133**Star][7m] [C++] [luis-hebendanz/0pack](https://github.com/luis-hebendanz/0pack) A novel technique to hide code from debuggers
+- [**133**Star][3y] [PHP] [ksanchezcld/hacking_cheat_sheet](https://github.com/ksanchezcld/hacking_cheat_sheet) All my Hacking|Pentesting Notes
+- [**133**Star][9m] [PHP] [k4mpr3t/b4tm4n](https://github.com/k4mpr3t/b4tm4n) Php webshell
+- [**133**Star][4y] [C] [jvoisin/pangu](https://github.com/jvoisin/pangu) Toolkit to detect/crash/attack GNU debugging-related tools
+- [**133**Star][4m] [Py] [hannob/optionsbleed](https://github.com/hannob/optionsbleed) a proof of concept code to test for the Optionsbleed bug in Apache httpd (CVE-2017-9798)
+- [**133**Star][23d] [Ruby] [hahwul/xspear](https://github.com/hahwul/xspear) Powerfull XSS Scanning and Parameter analysis tool&gem
+- [**133**Star][1y] [CSS] [gbrindisi/wordpot](https://github.com/gbrindisi/wordpot) A Wordpress Honeypot
+- [**133**Star][3y] [C++] [felixwilhelm/xenpwn](https://github.com/felixwilhelm/xenpwn) Xenpwn is a toolkit for memory access tracing using hardware-assisted virtualization
+- [**133**Star][1y] [Shell] [europa502/sharp](https://github.com/europa502/sharp) An anti-ARP-spoofing application software that use active and passive scanning methods to detect and remove any ARP-spoofer from the network.
+- [**133**Star][15d] [C] [drahnr/oregano](https://github.com/drahnr/oregano) Schematic capture and circuit simulator
+- [**133**Star][10m] [C#] [davidfowl/multiprotocolaspnetcore](https://github.com/davidfowl/multiprotocolaspnetcore) Multi-protocol Server with ASP.NET Core and Kestrel
+- [**133**Star][1y] [PS] [darkoperator/posh-sysmon](https://github.com/darkoperator/posh-sysmon) PowerShell module for creating and managing Sysinternals Sysmon config files.
+- [**133**Star][1m] [Py] [csirtgadgets/bearded-avenger](https://github.com/csirtgadgets/bearded-avenger) CIF v3 -- the fastest way to consume threat intelligence
+- [**133**Star][9m] [JS] [crowdstrike/falcon-orchestrator](https://github.com/crowdstrike/falcon-orchestrator) CrowdStrike Falcon Orchestrator provides automated workflow and response capabilities
+- [**133**Star][3y] [C++] [chenenyu/androidsecurity](https://github.com/chenenyu/androidsecurity) Android安全实践
+- [**133**Star][1y] [Py] [carlosgprado/jarvis](https://github.com/carlosgprado/jarvis) "Just Another ReVersIng Suite" or whatever other bullshit you can think of
+ - [IDA插件](https://github.com/carlosgprado/jarvis/tree/master/IDAPlugin)
+ - [PinTracer](https://github.com/carlosgprado/jarvis/tree/master/PinTracer)
+- [**133**Star][4y] [C] [bwall/pemcracker](https://github.com/bwall/pemcracker) Tool to crack encrypted PEM files
+- [**133**Star][2y] [Py] [bharshbarger/autosint](https://github.com/bharshbarger/autosint) Tool to automate common OSINT tasks
+- [**133**Star][11m] [Ruby] [bahaabdelwahed/killshot](https://github.com/bahaabdelwahed/killshot) A Penetration Testing Framework, Information gathering tool & Website Vulnerability Scanner
+- [**133**Star][8y] [Perl] [anestisb/webacoo](https://github.com/anestisb/webacoo) Web Backdoor Cookie Script-Kit
+- [**133**Star][3m] [Py] [1n3/exploits](https://github.com/1n3/exploits) Exploits by 1N3 @CrowdShield
+- [**132**Star][2m] [Shell] [starttoaster/docker-traefik](https://github.com/starttoaster/docker-traefik) Script to setup Traefik reverse-proxy in Docker with Compose
+- [**132**Star][2y] [Py] [chenjiandongx/soksaccounts](https://github.com/chenjiandongx/soksaccounts) Shadowsocks 账号爬虫
+- [**132**Star][2m] [C#] [lithnet/ad-password-protection](https://github.com/lithnet/ad-password-protection) Active Directory password filter featuring breached password checking and custom complexity rules
+- [**132**Star][4m] [PHP] [zsxsoft/my-ctf-challenges](https://github.com/zsxsoft/my-ctf-challenges) My CTF Challenges
+- [**132**Star][4y] [JS] [walkdoer/life-time-tracker](https://github.com/walkdoer/Life-Time-Tracker) 个人时间跟踪,可视化个人活动数据,管理个人生活,利用过去来指导未来,基于柳比歇夫的统计方法
+- [**132**Star][12m] [Dockerfile] [theonemule/docker-waf](https://github.com/theonemule/docker-waf) An NGINX and ModSecurity based Web Application Firewall for Docker
+- [**132**Star][1y] [Py] [thehive-project/hippocampe](https://github.com/thehive-project/hippocampe) Threat Feed Aggregation, Made Easy
+- [**132**Star][4m] [Py] [tensorflow/tensorboard-plugin-example](https://github.com/tensorflow/tensorboard-plugin-example)
+- [**132**Star][5y] [C] [smealum/ninjhax](https://github.com/smealum/ninjhax) 3ds homebrew-enabling exploit for 4.0-9.2
+- [**132**Star][2y] [sky8964/home](https://github.com/sky8964/home) 【墙外到墙内搬运工】郭文贵 推特党 兲朝浮世绘 小民之心 辛灏年 曹长青 袁红冰 旗袍 袁腾飞 翻墙 科学上网 | 搬运工 自由 民主 法治 宪政 人权 平等 视频 音频 文字版 在线 播放 下载 民运 维权 王岐山 孟建柱 孙力军 傅振华 江棉恒 江泽民 习近平 温家宝 王芳 董卿 杨澜 周小平 吴征 唐柏桥 e租宝 泛亚 共产党 赵家 盜国贼 内幕 黑暗 灾难 专政 上访 游行 暴乱 欺骗 谎言 腐败 通奸 权贵 马航 老兵 活摘 启蒙 墙外 墙内 防火墙 防火长城 功夫网 党文化 民阵 爆料 九评 杨建利 郭宝胜 昭明 反共 法轮功 自媒体 Youtube 油管 推特 Twitter 网盘 传播 关注 五毛 自干五 特务 红二代 红三代 官二代 土共 共匪
+- [**132**Star][3d] [Py] [rvn0xsy/cooolis-ms](https://github.com/rvn0xsy/cooolis-ms) Cooolis-ms is a server that supports the Metasploit Framework RPC. It is used to work with the Shellcode and PE loader. To some extent, it bypasses the static killing of anti-virus software, and allows the Cooolis-ms server to communicate with the Metasploit server. Separation.
+- [**132**Star][10m] [C] [regehr/ub-canaries](https://github.com/regehr/ub-canaries) collection of C/C++ programs that try to get compilers to exploit undefined behavior
+- [**132**Star][2m] [Py] [rastrea2r/rastrea2r](https://github.com/rastrea2r/rastrea2r) Collecting & Hunting for IOCs with gusto and style
+- [**132**Star][2y] [Py] [pwning/defcon25-public](https://github.com/pwning/defcon25-public) Publicly released tools/plugins from PPP for DEFCON 25 CTF Finals
+- [**132**Star][6m] [CMake] [pothosware/pothossdr](https://github.com/pothosware/pothossdr) Pothos SDR windows development environment
+- [**132**Star][10d] [Lua] [nnposter/nndefaccts](https://github.com/nnposter/nndefaccts) nnposter's alternate fingerprint dataset for Nmap script http-default-accounts
+- [**132**Star][22d] [PS] [netspi/powershell](https://github.com/netspi/powershell) NetSPI PowerShell Scripts
+- [**132**Star][7m] [Py] [mitrecnd/whodat](https://github.com/mitrecnd/whodat) Pivotable Reverse WhoIs / PDNS Fusion with Registrant Tracking & Alerting plus API for automated queries (JSON/CSV/TXT)
+- [**132**Star][4y] [Py] [korelogicsecurity/mastiff](https://github.com/korelogicsecurity/mastiff) Malware static analysis framework
+- [**132**Star][5d] [C] [jnider/delinker](https://github.com/jnider/delinker) Unlinks a binary executable to get back a set of .o object files for further transformation and re-linking.
+- [**132**Star][1m] [jlopp/physical-bitcoin-attacks](https://github.com/jlopp/physical-bitcoin-attacks) A list of known attacks against Bitcoin / crypto asset owning entities that occurred in meatspace.
+- [**132**Star][8m] [Py] [jas502n/cve-2019-2618](https://github.com/jas502n/cve-2019-2618) Weblogic Upload Vuln(Need username password)-CVE-2019-2618
+- [**132**Star][2m] [Py] [ivan1ee/struts2-057-exp](https://github.com/ivan1ee/struts2-057-exp) s2-057 最新漏洞分析和EXP脚本
+- [**132**Star][8m] [C] [hfiref0x/wdextract](https://github.com/hfiref0x/wdextract) Extract Windows Defender database from vdm files and unpack it
+- [**132**Star][21d] [Go] [fanpei91/gap-proxy](https://github.com/fanpei91/gap-proxy) gap-proxy 是一个加速网络的 SOCKS5 安全代理工具。
+- [**132**Star][6y] [esxgx/easy-ecc](https://github.com/esxgx/easy-ecc) Simple and secure ECC and ECDSA
+- [**132**Star][3y] [Batchfile] [eliteandroidapps/whatsapp-key-db-extractor](https://github.com/eliteandroidapps/whatsapp-key-db-extractor) Allows WhatsApp users to extract their cipher key and databases on non-rooted Android devices.
+- [**132**Star][2m] [Py] [defense-cyber-crime-center/dc3-mwcp](https://github.com/defense-cyber-crime-center/dc3-mwcp)
+- [**132**Star][5m] [PS] [cyberark/ketshash](https://github.com/cyberark/ketshash) 基于事件查看器日志,检测可疑的特权 NTLM 连接, 尤其是 Pass-The-Hash 攻击
+- [**132**Star][4y] [HTML] [code-scan/brodomain](https://github.com/code-scan/brodomain) 兄弟域名查询
+- [**132**Star][11d] [Shell] [cfn-modules/docs](https://github.com/cfn-modules/docs) Rapid CloudFormation: Modular, production ready, open source.
+- [**132**Star][2m] [Py] [batuhaniskr/twitter-intelligence](https://github.com/batuhaniskr/twitter-intelligence) Twitter Intelligence OSINT project performs tracking and analysis of the Twitter
+- [**132**Star][16d] [C] [arsv/minibase](https://github.com/arsv/minibase) small static userspace tools for Linux
+- [**132**Star][3y] [aqzt/sso](https://github.com/aqzt/sso) 项目主要是汇集整理服务器安全运维规范,包括运维工程师必须遵守的规范、服务器运维中注意事项、故障避免手段等文档,帮助运维工程师避免服务器安全和运维故障,方便运维工程师学习成长。
+- [**132**Star][4d] [Java] [apache/commons-compress](https://github.com/apache/commons-compress) Mirror of Apache Commons Compress
+- [**132**Star][4y] [Py] [andrewmohawk/rfcathelpers](https://github.com/andrewmohawk/rfcathelpers) Helper scripts for RfCat devices
+- [**132**Star][2y] [Visual Basic .NET] [alibawazeeer/rat-njrat-0.7d-modded-source-code](https://github.com/alibawazeeer/rat-njrat-0.7d-modded-source-code) NJR
+- [**131**Star][1y] [PS] [nsacyber/applocker-guidance](https://github.com/nsacyber/applocker-guidance) Configuration guidance for implementing application whitelisting with AppLocker. #nsacyber
+- [**131**Star][3y] [Py] [hanc00l/wifitest](https://github.com/hanc00l/wifitest) 一个简单的wifi弱口令暴破的python脚本,可自动实时破解,不需要使用aircrack-ng抓包
+- [**131**Star][4y] [okturtles/blockchainid](https://github.com/okturtles/blockchainid) Decentralized alternative to Facebook Login and OpenID
+- [**131**Star][2y] [Shell] [coldhakca/tor-relay-bootstrap](https://github.com/coldhakca/tor-relay-bootstrap) Script to bootstrap a Debian server to be a set-and-forget Tor relay
+- [**131**Star][2y] [JS] [oyyd/encryptsocks](https://github.com/oyyd/encryptsocks) Encrypt your socks transmission.
+- [**131**Star][2y] [C#] [m0xiaoxi/ctftools](https://github.com/m0xiaoxi/CTFtools) 本项目主要搜集一些关于信息安全攻防相关的知识与工具,便于个人的渗透工作。
+- [**131**Star][4y] [Py] [ricterz/websocket-injection](https://github.com/ricterz/websocket-injection) WebSocket 中转注入工具
+- [**131**Star][2y] [C] [airbus-seclab/ramooflax](https://github.com/airbus-seclab/ramooflax) a bare metal (type 1) VMM (hypervisor) with a python remote control API
+- [**131**Star][2y] [C++] [vmcall/latebros](https://github.com/vmcall/latebros) x64 usermode rootkit
+- [**131**Star][5m] [Py] [zeropwn/spyse.py](https://github.com/zeropwn/spyse.py) Python API wrapper and command-line client for the tools hosted on spyse.com.
+- [**131**Star][2m] [TS] [xyfir/ptorx](https://github.com/xyfir/ptorx)
+- [**131**Star][1y] [wpscanteam/wpscan-v3](https://github.com/wpscanteam/wpscan-v3) THIS REPOSITORY HAS BEEN MOVED TO
+- [**131**Star][6y] [ActionScript] [wordpress/secure-swfupload](https://github.com/wordpress/secure-swfupload) A fork of the long-abandoned SWFUpload project, maintained by WordPress and others to ensure that a secure version of SWFUpload exists. Report security vulnerabilities to swfupload-security@wordpress.org.
+- [**131**Star][26d] [Py] [wangyihang/exploit-framework](https://github.com/wangyihang/exploit-framework)
+- [**131**Star][1y] [PHP] [tools2/zend-decoder](https://github.com/tools2/zend-decoder) 还原ZendGuard处理后的php代码
+- [**131**Star][3y] [HTML] [theori-io/chakra-2016-11](https://github.com/theori-io/chakra-2016-11) Proof-of-Concept exploit for Edge bugs (CVE-2016-7200 & CVE-2016-7201)
+- [**131**Star][3y] [PS] [tevora-threat/eternal_blue_powershell](https://github.com/tevora-threat/eternal_blue_powershell) Port of eternal blue exploits to powershell
+- [**131**Star][10m] [Rust] [shnatsel/libdiffuzz](https://github.com/shnatsel/libdiffuzz) Custom memory allocator that helps discover reads from uninitialized memory
+- [**131**Star][3y] [Py] [schumilo/vusbf](https://github.com/schumilo/vusbf)
+- [**131**Star][7y] [C] [saurik/mempodroid](https://github.com/saurik/mempodroid)
+- [**131**Star][3y] [Py] [safebreach-labs/pyekaboo](https://github.com/safebreach-labs/pyekaboo) Proof-of-concept program that is able to to hijack/hook/proxy Python module(s) thanks to $PYTHONPATH variable
+- [**131**Star][2y] [Ruby] [rapid7/nexpose-client](https://github.com/rapid7/nexpose-client) DEPRECATED: Rapid7 Nexpose API client library written in Ruby
+- [**131**Star][5m] [JS] [owasp/passfault](https://github.com/owasp/passfault) OWASP Passfault evaluates passwords and enforces password policy in a completely different way.
+- [**131**Star][1y] [Py] [nopernik/mpdns](https://github.com/nopernik/mpdns) Multi-Purpose DNS Server
+- [**131**Star][1y] [Py] [mschwager/0wned](https://github.com/mschwager/0wned) Code execution via Python package installation.
+- [**131**Star][2d] [JS] [mozilla/fxa](https://github.com/mozilla/fxa) Monorepo for Firefox Accounts
+- [**131**Star][5y] [Java] [mogwaisec/mjet](https://github.com/mogwaisec/mjet) Mogwai Java Management Extensions (JMX) Exploitation Toolkit
+- [**131**Star][2y] [C#] [m0xiaoxi/ctftools](https://github.com/m0xiaoxi/ctftools) 本项目主要搜集一些关于信息安全攻防相关的知识与工具,便于个人的渗透工作。
+- [**131**Star][2y] [MATLAB] [lts4/universal](https://github.com/lts4/universal) Universal adversarial perturbations
+- [**131**Star][2y] [Py] [jlospinoso/memcachedump](https://github.com/jlospinoso/memcachedump) Use your Shodan API Key to dump all the contents of exposed memcached servers.
+- [**131**Star][2y] [Shell] [jgamblin/quickinstall](https://github.com/jgamblin/quickinstall) A Shell Script To Take Care Of Ubuntu Basics
+- [**131**Star][3y] [C] [jcadduono/android_external_dirtycow](https://github.com/jcadduono/android_external_dirtycow) CVE-2016-5195 (dirtycow/dirtyc0w) - recowvery fork
+- [**131**Star][9m] [JS] [htfy96/v2ray-config-gen](https://github.com/htfy96/v2ray-config-gen) V2Ray Configuration generator
+- [**131**Star][4m] [C] [hoshimin/hooklib](https://github.com/hoshimin/hooklib) The functions interception library written on pure C and NativeAPI with UserMode and KernelMode support
+- [**131**Star][4y] [C] [hiteshd/android-rootkit](https://github.com/hiteshd/android-rootkit) A rootkit for Android. Based on "Android platform based linux kernel rootkit" from Phrack Issue 68
+- [**131**Star][6y] [Py] [hiddenillusion/analyzepdf](https://github.com/hiddenillusion/analyzepdf) Tool to help analyze PDF files
+- [**131**Star][1m] [Java] [games647/fastlogin](https://github.com/games647/fastlogin) Checks if a minecraft player has a valid paid account. If so, they can skip offline authentication automatically. (premium auto login)
+- [**131**Star][6y] [Java] [fuzion24/androidziparbitrage](https://github.com/fuzion24/androidziparbitrage) Exploit for Android Zip bugs: 8219321, 9695860, and 9950697
+- [**131**Star][7m] [Go] [empijei/wapty](https://github.com/empijei/wapty) Go语言编写的Burp的替代品。(已不再维护)
+- [**131**Star][3m] [PHP] [edsonmedina/php_testability](https://github.com/edsonmedina/php_testability) Analyses and reports testability issues of a php codebase
+- [**131**Star][7m] [Java] [comsecuris/gdbghidra](https://github.com/comsecuris/gdbghidra) a visual bridge between a GDB session and GHIDRA
+- [**131**Star][1y] [Py] [cisco-talos/bass](https://github.com/cisco-talos/bass) a framework designed to automatically generate antivirus signatures from samples belonging to previously generated malware clusters
+- [**131**Star][2y] [Py] [chrisrimondi/vulntoes](https://github.com/chrisrimondi/vulntoes) Vulnerability Data in ES
+- [**131**Star][2m] [C] [celesteblue-dev/psvita-re-tools](https://github.com/celesteblue-dev/psvita-re-tools) A bundle of RE tools for analyzing and modding PSVita OS
+- [**131**Star][2d] [Shell] [binhex/arch-rtorrentvpn](https://github.com/binhex/arch-rtorrentvpn) Docker build script for Arch Linux base with ruTorrent, rTorrent, Flood, Privoxy and OpenVPN
+- [**131**Star][6d] [Shell] [beta-tester/rpi-pxe-server](https://github.com/beta-tester/rpi-pxe-server) setup a Raspberry Pi as an PXE-Server
+- [**131**Star][1m] [Go] [arnaucube/go-snark](https://github.com/arnaucube/go-snark) zkSNARK library implementation in Go
+- [**131**Star][2y] [PHP] [anssi-fr/ad-permissions](https://github.com/anssi-fr/ad-permissions) Active Directory permissions (ACL/ACE) auditing tools
+- [**131**Star][1y] [C++] [3gstudent/eventlogedit-evtx--evolution](https://github.com/3gstudent/eventlogedit-evtx--evolution) Remove individual lines from Windows XML Event Log (EVTX) files
+- [**131**Star][1y] [Py] [0x09al/dropboxc2c](https://github.com/0x09al/dropboxc2c) DropboxC2C is a post-exploitation agent which uses Dropbox Infrastructure for command and control operations.
+- [**130**Star][2y] [Py] [zcutlip/bowcaster](https://github.com/zcutlip/bowcaster) Exploit Development Framework
+- [**130**Star][1y] [PS] [xor-function/fathomless](https://github.com/xor-function/fathomless) A collection of post-exploitation tools for network red teaming. (Migrating to Fathomless Project)
+- [**130**Star][2y] [C#] [xiaoxiaoleo/windows_pentest_tools](https://github.com/xiaoxiaoleo/windows_pentest_tools) My pentest tools used two years ago. Part1
+- [**130**Star][6m] [Py] [wfzsec/awd_attack_framework](https://github.com/wfzsec/awd_attack_framework) awd攻防常用脚本+不死马+crontab+防御方法
+- [**130**Star][1y] [Py] [wangyihang/reverse-shell-manager](https://github.com/wangyihang/reverse-shell-manager)
+- [**130**Star][4m] [theofficialflow/h-encore-2](https://github.com/theofficialflow/h-encore-2) Fully chained kernel exploit for the PS Vita on firmwares 3.65-3.72
+- [**130**Star][9m] [Shell] [tenable/router_badusb](https://github.com/tenable/router_badusb) BadUSB in Routers
+- [**130**Star][2m] [Py] [shieldersec/webtech](https://github.com/shieldersec/webtech) Identify technologies used on websites.
+- [**130**Star][2y] [Py] [ropnop/windows_sshagent_extract](https://github.com/ropnop/windows_sshagent_extract) PoC code to extract private keys from Windows 10's built in ssh-agent service
+- [**130**Star][9m] [C++] [quarkslab/arybo](https://github.com/quarkslab/arybo) Manipulation, canonicalization and identification of mixed boolean-arithmetic symbolic expressions
+- [**130**Star][7m] [TS] [phiresky/nmap-log-parse](https://github.com/phiresky/nmap-log-parse) Logs which devices are in your local network and draws graphs
+- [**130**Star][23d] [Shell] [oktasecuritylabs/passprotect-js](https://github.com/oktasecuritylabs/passprotect-js) A simple JavaScript library to help you protect your users' passwords
+- [**130**Star][3y] [Java] [mwsrc/betterandrorat](https://github.com/mwsrc/betterandrorat) Android Remote Access Trojan
+- [**130**Star][9m] [HTML] [minhaskamal/cuteviruscollection](https://github.com/minhaskamal/cuteviruscollection) A Collection of Cute But Deadly Viruses (small-unharmful-annoying-harmless-funny-malware-virus-worm-windows-xp-7-10)
+- [**130**Star][3m] [Go] [malfunkt/arpfox](https://github.com/malfunkt/arpfox) An arpspoof alternative (written in Go) that injects spoofed ARP packets into a LAN
+- [**130**Star][1m] [Py] [log2timeline/dfvfs](https://github.com/log2timeline/dfvfs) Digital Forensics Virtual File System (dfVFS)
+- [**130**Star][8m] [Py] [landgrey/abuse-ssl-bypass-waf](https://github.com/landgrey/abuse-ssl-bypass-waf) Bypassing WAF by abusing SSL/TLS Ciphers
+- [**130**Star][7m] [Py] [kd8bny/limeaide](https://github.com/kd8bny/limeaide) A python application designed to remotely dump RAM of a Linux client and create a volatility profile for later analysis on your local host.
+- [**130**Star][9d] [inquest/yara-rules](https://github.com/inquest/yara-rules) A collection of YARA rules we wish to share with the world, most probably referenced from
+- [**130**Star][3y] [Py] [infosec-au/enumxff](https://github.com/infosec-au/enumxff) Enumerating IPs in X-Forwarded-Headers to bypass 403 restrictions
+- [**130**Star][2y] [PHP] [incredibleindishell/sqlite-lab](https://github.com/incredibleindishell/sqlite-lab) This code is vulnerable to SQL Injection and having SQLite database. For SQLite database, SQL Injection payloads are different so it is for fun. Just enjoy it \m/
+- [**130**Star][4y] [Lua] [glennzw/shodan-hq-nse](https://github.com/glennzw/shodan-hq-nse) Shodan HQ nmap plugin - passively scan targets
+- [**130**Star][7m] [gaerae/awesome-algorithms-education](https://github.com/gaerae/awesome-algorithms-education) A curated list to learning and practicing about algorithm.
+- [**130**Star][2m] [Py] [decoxviii/userrecon-py](https://github.com/decoxviii/userrecon-py) Username recognition on various websites.
+- [**130**Star][2y] [Py] [comsecuris/ida_strcluster](https://github.com/comsecuris/ida_strcluster) extending IDA's string navigation capabilities
+- [**130**Star][1y] [Py] [blacknbunny/mcreator](https://github.com/blacknbunny/mcreator) 反向Shell生成器, 自带AV绕过技术
+- [**130**Star][2m] [Py] [benjeems/packetstrider](https://github.com/benjeems/packetstrider) A network packet forensics tool for SSH
+- [**130**Star][3m] [Py] [apperian/ios-checkipa](https://github.com/apperian/ios-checkipa) Scans an IPA file and parses its Info.plist and embedded.mobileprovision files. Performs checks of expected key/value relationships and displays the results.
+- [**130**Star][2y] [Py] [andrewaeva/dga](https://github.com/andrewaeva/dga) The repository that contains the algorithms for generating domain names, dictionaries of malicious domain names. Developed to research the possibility of applying machine learning and neural networks to detect and classify malicious domains.
+- [**130**Star][30d] [PHP] [ahref-group/ss-panel-smarty-edition](https://github.com/ahref-group/ss-panel-smarty-edition) Forked from
+- [**130**Star][2m] [Py] [3xpl017/netpwn](https://github.com/3xpl017/netpwn) Tool made to automate tasks of pentesting.
+- [**129**Star][2m] [C++] [michalmonday/supremeduck](https://github.com/michalmonday/supremeduck) Wireless "Rubber ducky" controlled by smartphone.
+- [**129**Star][3y] [Swift] [magic-akari/wannacry](https://github.com/magic-akari/wannacry)
+- [**129**Star][3m] [Py] [kootenpv/access_points](https://github.com/kootenpv/access_points) Scan your WiFi and get access point information and signal quality
+- [**129**Star][2y] [Py] [nccgroup/susanrtti](https://github.com/nccgroup/SusanRTTI) Another RTTI Parsing IDA plugin
+- [**129**Star][2d] [TS] [wkovacs64/pwned](https://github.com/wkovacs64/pwned) A command-line tool for querying the 'Have I been pwned?' service.
+- [**129**Star][10m] [Shell] [weaknetlabs/penetration-testing-grimoire](https://github.com/weaknetlabs/penetration-testing-grimoire) Custom Tools and Notes from my own Penetration Testing Experience
+- [**129**Star][2y] [C#] [v2ray/v2ray-panel-master](https://github.com/v2ray/v2ray-panel-master) Deprecated
+- [**129**Star][1y] [C#] [ustayready/casperstager](https://github.com/ustayready/casperstager) PoC for persisting .NET payloads in Windows Notification Facility (WNF) state names using low-level Windows Kernel API calls.
+- [**129**Star][7m] [Py] [tarlogicsecurity/chankro](https://github.com/tarlogicsecurity/chankro) Herramienta para evadir disable_functions y open_basedir
+- [**129**Star][2d] [Py] [swimlane/pyattck](https://github.com/swimlane/pyattck) A Python Module to interact with the Mitre ATT&CK Framework
+- [**129**Star][2m] [Py] [svenito/exploit-pattern](https://github.com/svenito/exploit-pattern) generate and search pattern string for exploit development
+- [**129**Star][6y] [Go] [stripe-ctf/octopus](https://github.com/stripe-ctf/octopus) Many-armed network simulator
+- [**129**Star][2y] [C] [smeso/mtpwn](https://github.com/smeso/mtpwn) PoC exploit for arbitrary file read/write in locked Samsung Android device via MTP (SVE-2017-10086)
+- [**129**Star][6d] [JS] [smartcontractsecurity/swc-registry](https://github.com/smartcontractsecurity/swc-registry) Smart Contract Weakness Classification and Test Cases
+- [**129**Star][4y] [C++] [slauc91/anticheat](https://github.com/slauc91/anticheat) RootKit & Cheat Scanner - Windows
+- [**129**Star][4y] [HTML] [skylined/localnetworkscanner](https://github.com/skylined/localnetworkscanner) PoC Javascript that scans your local network when you open a webpage
+- [**129**Star][1y] [C] [siguza/cl0ver](https://github.com/siguza/cl0ver) tfp0 for iOS 9.0-9.3.4
+- [**129**Star][7m] [C++] [schnocker/noeye](https://github.com/schnocker/noeye) An usermode BE Rootkit Bypass
+- [**129**Star][7m] [JS] [pownjs/pown](https://github.com/pownjs/pown) Pown.js is a security testing an exploitation toolkit built on top of Node.js and NPM.
+- [**129**Star][7m] [OCaml] [plum-umd/redexer](https://github.com/plum-umd/redexer) The Redexer binary instrumentation framework for Dalvik bytecode
+- [**129**Star][2y] [Go] [netxfly/xsec-traffic](https://github.com/netxfly/xsec-traffic) 恶意流量分析程序
+- [**129**Star][4m] [HTML] [mxk/win10-secure-baseline-gpo](https://github.com/mxk/win10-secure-baseline-gpo) Windows 10 and Server 2016 Secure Baseline Group Policy
+- [**129**Star][7m] [Shell] [munki/installr](https://github.com/munki/installr) A tool designed for use in Recovery boot to do a "fresh" install of macOS and additional packages.
+- [**129**Star][2y] [mandatoryprogrammer/russiadnsleak](https://github.com/mandatoryprogrammer/russiadnsleak) Summary and archives of leaked Russian TLD DNS data
+- [**129**Star][3y] [PHP] [malwares/exploitkit](https://github.com/malwares/exploitkit) Exploitkit
+- [**129**Star][1y] [Shell] [jsitech/relayer](https://github.com/jsitech/relayer) SMB Relay Attack Script
+- [**129**Star][4y] [Go] [jordan-wright/elastichoney](https://github.com/jordan-wright/elastichoney) A Simple Elasticsearch Honeypot
+- [**129**Star][3m] [Py] [j3ssie/metabigor](https://github.com/j3ssie/metabigor) Command line Search Engines Framework but without API key
+- [**129**Star][1m] [Py] [initstring/cloud_enum](https://github.com/initstring/cloud_enum) Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.
+- [**129**Star][2y] [PHP] [hcamael/ctf_repo](https://github.com/hcamael/ctf_repo)
+- [**129**Star][11d] [C++] [hasherezade/iat_patcher](https://github.com/hasherezade/iat_patcher) Persistent IAT hooking application - based on bearparser
+- [**129**Star][7m] [C++] [gossip-sjtu/tripledoggy](https://github.com/gossip-sjtu/tripledoggy) 基于clang static analyzer的源码漏洞检测插件
+- [**129**Star][21d] [gajos112/oscp](https://github.com/gajos112/oscp) Materials for OSCP exam
+- [**129**Star][3y] [Py] [friedappleteam/frapl](https://github.com/friedappleteam/frapl) a reverse engineering framework created to simplify dynamic instrumentation with Frida
+ - [IDA插件](https://github.com/FriedAppleTeam/FRAPL/tree/master/Framework/FridaLink)
+ - [Frida脚本](https://github.com/FriedAppleTeam/FRAPL/tree/master/Framework/FRAPL)
+- [**129**Star][4y] [Py] [elceef/bitlocker](https://github.com/elceef/bitlocker) Volatility Framework plugin for extracting BitLocker FVEK (Full Volume Encryption Key)
+- [**129**Star][1y] [Py] [ekultek/dagon](https://github.com/ekultek/dagon) Dagon:哈希破解和操纵系统,可以爆破多种哈希类型,创建爆破字典,自动哈希算法验证,从 Unicode 到 ASCII 的随机salt 生成等。
+- [**129**Star][2y] [Py] [dviros/rat-via-telegram](https://github.com/dviros/rat-via-telegram) Windows Remote Post Breach Tool via Telegram
+- [**129**Star][6m] [Py] [cr0hn/enteletaor](https://github.com/cr0hn/enteletaor) Message Queue & Broker Injection tool
+- [**129**Star][2y] [Py] [comsecuris/gdbida](https://github.com/comsecuris/gdbida) a visual bridge between a GDB session and IDA Pro's disassembler
+ - [IDA插件](https://github.com/comsecuris/gdbida/blob/master/ida_gdb_bridge.py)
+ - [GDB脚本](https://github.com/comsecuris/gdbida/blob/master/gdb_ida_bridge_client.py)
+- [**129**Star][2y] [HTML] [chybeta/waf-bypass](https://github.com/chybeta/waf-bypass) WAF Bypass Cheatsheet
+- [**129**Star][2y] [Ruby] [benlaurie/objecthash](https://github.com/benlaurie/objecthash) A way to cryptographically hash objects (in the JSON-ish sense) that works cross-language. And, therefore, cross-encoding.
+- [**129**Star][4y] [Go] [benjojo/dos_ssh](https://github.com/benjojo/dos_ssh) Use BIOS ram hacks to make a SSH server out of any INT 10 13h app (MS-DOS is one of those)
+- [**129**Star][6m] [C] [abhishekkr/n00brat](https://github.com/abhishekkr/n00brat) Remote Administration Toolkit (or Trojan) for POSiX (Linux/Unix) system working as a Web Service
+- [**128**Star][4y] [Py] [snare/idiot](https://github.com/snare/idiot) Your best is an idiot
+- [**128**Star][4y] [C] [stefanesser/opensource_taig](https://github.com/stefanesser/opensource_taig) Lets create an open source version of the latest TaiG jailbreak.
+- [**128**Star][20d] [Rust] [gamozolabs/fzero_fuzzer](https://github.com/gamozolabs/fzero_fuzzer) A fast Rust-based safe and thead-friendly grammar-based fuzz generator
+- [**128**Star][2m] [C] [jollheef/lpe](https://github.com/jollheef/lpe) collection of verified Linux kernel exploits
+- [**128**Star][2y] [Py] [unfetter-discover/unfetter-analytic](https://github.com/unfetter-discover/unfetter-analytic) a framework for collecting events (process creation, network connections, Window Event Logs, etc.) from a client machine (Windows 7) and performing CAR analytics to detect potential adversary activity
+- [**128**Star][9m] [Vim script] [logico-ar/typewriter](https://github.com/logico-ar/typewriter) An iA Writer inspired color scheme. It has support for vim, vim airline, vim lightline, tmux and urxvt/xterm.
+- [**128**Star][2y] [Shell] [newbee119/ssh-scanner](https://github.com/NewBee119/ssh-scanner) ssh password guessing,ssh登录密码破解
+- [**128**Star][6d] [Py] [you0708/ida](https://github.com/you0708/ida) A Python implementation of FindCrypt plugin.
+ - [IDA主题](https://github.com/you0708/ida/tree/master/theme)
+ - [findcrypt](https://github.com/you0708/ida/tree/master/idapython_tools/findcrypt) IDA FindCrypt/FindCrypt2 插件的Python版本
+- [**128**Star][2y] [Java] [yandex/burp-molly-scanner](https://github.com/yandex/burp-molly-scanner) Turn your Burp suite into headless active web application vulnerability scanner
+- [**128**Star][6y] [Py] [valdikss/billgates-botnet-tracker](https://github.com/valdikss/billgates-botnet-tracker) Some tools to monitor BillGates CnC servers
+- [**128**Star][6m] [Py] [tuuunya/webpocket](https://github.com/tuuunya/webpocket) Exploit management framework
+- [**128**Star][1m] [Py] [stratosphereips/stratospherelinuxips](https://github.com/stratosphereips/stratospherelinuxips) an intrusion prevention system that is based on behavioral detections and machine learning algorithms
+- [**128**Star][3m] [Py] [shellster/ldapper](https://github.com/shellster/ldapper) AD LDAP Command Line Searching that doesn't suck.
+- [**128**Star][1y] [C++] [s3team/vmhunt](https://github.com/s3team/vmhunt) Extraction and Simplification of Virtualized Binary Code
+- [**128**Star][4y] [PHP] [ramadhanamizudin/wordpress-scanner](https://github.com/ramadhanamizudin/wordpress-scanner) Wordpress Vulnerability Scanner
+- [**128**Star][24d] [PHP] [propaganistas/laravel-fakeid](https://github.com/propaganistas/laravel-fakeid) Automatic model ID obfuscation in routes for Laravel 5
+- [**128**Star][4m] [Py] [paulsec/det](https://github.com/paulsec/det) (extensible) Data Exfiltration Toolkit (DET)
+- [**128**Star][2m] [Java] [openzipkin/brave-webmvc-example](https://github.com/openzipkin/brave-webmvc-example) See how much time Spring services spend on an http request. — Edit
+- [**128**Star][5y] [Shell] [mrschyte/dockerpot](https://github.com/mrschyte/dockerpot) A docker based honeypot.
+- [**128**Star][1y] [TeX] [maxking/linux-vulnerabilities-10-years](https://github.com/maxking/linux-vulnerabilities-10-years) My MS thesis on survey of a decade fo Linux Kernel CVEs, their categories and various mitigations that exist.
+- [**128**Star][30d] [Py] [m8r0wn/enumdb](https://github.com/m8r0wn/enumdb) MySQL/MSSQL 爆破和后渗透工具, 搜索数据库并提取敏感信息
+- [**128**Star][1y] [C++] [m0n0ph1/iat-hooking-revisited](https://github.com/m0n0ph1/iat-hooking-revisited) Import address table (IAT) hooking is a well documented technique for intercepting calls to imported functions.
+- [**128**Star][2y] [Shell] [lavalamp-/ws-docker-community](https://github.com/lavalamp-/ws-docker-community) Web Sight Docker Deployment
+- [**128**Star][19d] [TS] [justinpealing/html-query-plan](https://github.com/justinpealing/html-query-plan) Display SQL Server Execution Plans in HTML
+- [**128**Star][2m] [C++] [itm4n/usodllloader](https://github.com/itm4n/usodllloader) Windows - Weaponizing privileged file writes with the Update Session Orchestrator service
+- [**128**Star][2y] [C] [gsmk/hexagon](https://github.com/gsmk/hexagon) IDA processor module for the hexagon (QDSP6) processor
+- [**128**Star][8m] [Ruby] [firefart/wordpresspingbackportscanner](https://github.com/firefart/wordpresspingbackportscanner) WordpressPingbackPortScanner
+- [**128**Star][1y] [Py] [deepzec/grok-backdoor](https://github.com/deepzec/grok-backdoor) Simple python backdoor with Ngrok tunnel support
+- [**128**Star][3y] [HTML] [danladi/httppwnly](https://github.com/danladi/httppwnly) "Repeater" style XSS post-exploitation tool for mass browser control. Primarily a PoC to show why HttpOnly flag isn't a complete protection against session hijacking via XSS
+- [**128**Star][3m] [Py] [claudiugeorgiu/obfuscapk](https://github.com/claudiugeorgiu/obfuscapk) A black-box obfuscation tool for Android apps
+- [**128**Star][12d] [Py] [bullseye0/shodan-eye](https://github.com/bullseye0/shodan-eye) Shodan Eye This tool collects all the information about all devices directly connected to the internet using the specified keywords that you enter. Author: Jolanda de Koff
+- [**128**Star][1y] [C#] [anthemtotheego/sharpsploitconsole](https://github.com/anthemtotheego/sharpsploitconsole)
+- [**128**Star][4y] [Py] [andrewhilts/snifflab](https://github.com/andrewhilts/snifflab) Scripts to create your own MITM'ing, packet sniffing WiFi access point
+- [**128**Star][3y] [C] [adamcaudill/ccsrch](https://github.com/adamcaudill/ccsrch) Cross-platform credit card (PAN) search tool for security assessments
+- [**127**Star][10m] [whid-injector/awesome-go-offensive-tools](https://github.com/whid-injector/awesome-go-offensive-tools) List of Awesome Offensive Tools written in GO
+- [**127**Star][5d] [PHP] [curtbraz/phishing-api](https://github.com/curtbraz/phishing-api) Comprehensive Web Based Phishing Suite of Tools for Rapid Deployment and Real-Time Alerting!
+- [**127**Star][2m] [C#] [fireeye/duedlligence](https://github.com/fireeye/duedlligence) Shellcode runner for all application whitelisting bypasses
+- [**127**Star][20d] [Py] [secureauthcorp/pysap](https://github.com/SecureAuthCorp/pysap) pysap is an open source Python library that provides modules for crafting and sending packets using SAP's NI, Diag, Enqueue, Router, Message Server, SNC, IGS and RFC protocols.
+- [**127**Star][14d] [PHP] [breach-tw/breach.tw](https://github.com/breach-tw/breach.tw) A service that can track data breaches like "Have I Been Pwned", but it is specific for Taiwan.
+- [**127**Star][1y] [HTML] [xhak9x/socialphish](https://github.com/xhak9x/socialphish) The most complete Phishing Tool, with 32 templates +1 customizable
+- [**127**Star][2m] [Py] [v3aqb/fwlite](https://github.com/v3aqb/fwlite) A anti-censorship HTTP proxy with builtin shadowsocks support.
+- [**127**Star][2m] [Go] [ullaakut/camerattack](https://github.com/ullaakut/camerattack) An attack tool designed to remotely disable CCTV camera streams (like in spy movies)
+- [**127**Star][1y] [Py] [spotify/gcp-audit](https://github.com/spotify/gcp-audit) A tool for auditing security properties of GCP projects.
+- [**127**Star][3y] [CSS] [shellntel/vcr](https://github.com/shellntel/vcr) Vulnerability Compliance Report Tool used to parse Nessus files into html reports created by SynerComm, Inc.
+- [**127**Star][2m] [Rust] [rust-ammonia/ammonia](https://github.com/rust-ammonia/ammonia) Repair and secure untrusted HTML
+- [**127**Star][2y] [Py] [rootlabs/nwatch](https://github.com/rootlabs/nwatch) a handy tool for host discovery, portscanning and operating system fingerprinting.
+- [**127**Star][1y] [Py] [qiyeboy/baseproxy](https://github.com/qiyeboy/baseproxy) Asynchronous HTTP/HTTPS proxy that intercepts and modifies messages(异步http/https代理,可拦截修改报文)
+- [**127**Star][5m] [Shell] [pssss/security-baseline](https://github.com/pssss/security-baseline) Linux/Windows 安全加固脚本
+- [**127**Star][5m] [Go] [mushorg/glutton](https://github.com/mushorg/glutton) Generic Low Interaction Honeypot
+- [**127**Star][12m] [C++] [mq1n/nomercy](https://github.com/mq1n/nomercy) Open source anti cheat
+- [**127**Star][2y] [Go] [massung/chip-8](https://github.com/massung/chip-8) Assembler and Emulator in Go
+- [**127**Star][22d] [C] [libyal/libewf](https://github.com/libyal/libewf) Libewf is a library to access the Expert Witness Compression Format (EWF)
+- [**127**Star][9m] [leezj9671/offensiveinterview](https://github.com/leezj9671/offensiveinterview) 翻译国外的
+- [**127**Star][7m] [Go] [l3m0n/whatweb](https://github.com/l3m0n/whatweb) 更快速的进行Web应用指纹识别
+- [**127**Star][1y] [Py] [kaniini/antissh](https://github.com/kaniini/antissh) An IRC bot which monitors for compromised embedded devices being used as proxies.
+- [**127**Star][4y] [C] [jndok/stfusip](https://github.com/jndok/stfusip) System Integrity Protection (SIP) bypass for OSX 10.11.1 - 10.11.2 - 10.11.3
+- [**127**Star][6y] [Py] [ikotler/hackersh](https://github.com/ikotler/hackersh) A free and open source command-line shell and scripting language designed especially for security testing
+- [**127**Star][2m] [grrrdog/weird_proxies](https://github.com/grrrdog/weird_proxies) Reverse proxies cheatsheet
+- [**127**Star][2y] [C++] [gitmirar/meltdown-poc](https://github.com/gitmirar/meltdown-poc) A PoC implementation of the meltdown attack described in
+- [**127**Star][1y] [C] [gamozolabs/falkervisor_grilled_cheese](https://github.com/gamozolabs/falkervisor_grilled_cheese)
+- [**127**Star][5y] [Py] [fox-it/cryptophp](https://github.com/fox-it/cryptophp) CryptoPHP Indicators of Compromise
+- [**127**Star][2y] [Py] [fireeye/flare-dbg](https://github.com/fireeye/flare-dbg) to aid malware reverse engineers in rapidly developing debugger scripts.
+- [**127**Star][4y] [C] [fi01/cve-2015-3636](https://github.com/fi01/cve-2015-3636) PoC code for 32 bit Android OS
+- [**127**Star][7m] [enovella/r2frida-wiki](https://github.com/enovella/r2frida-wiki) This repo aims at providing practical examples on how to use r2frida
+- [**127**Star][3m] [JS] [electrode-io/electrode-csrf-jwt](https://github.com/electrode-io/electrode-csrf-jwt) Stateless Cross-Site Request Forgery (CSRF) protection with JWT
+- [**127**Star][3y] [C] [davidbuchanan314/pwn-mbr](https://github.com/davidbuchanan314/pwn-mbr) A simple MBR hijack demonstration
+- [**127**Star][2d] [Py] [darkarnium/secpub](https://github.com/darkarnium/secpub) Published security vulnerabilities and associated information.
+- [**127**Star][3m] [Rust] [d0nutptr/sic](https://github.com/d0nutptr/sic) A tool to perform Sequential Import Chaining
+- [**127**Star][2m] [Py] [cyb0r9/ispy](https://github.com/cyb0r9/ispy) ispy V1.0 - Eternalblue(ms17-010)/Bluekeep(CVE-2019-0708) Scanner and exploit ( Metasploit automation )
+- [**127**Star][6y] [C++] [crowdstrike/crowddetox](https://github.com/crowdstrike/crowddetox) CrowdStrike CrowdDetox Plugin for Hex-Rays,automatically removes junk code and variables from Hex-Rays function decompilation
+- [**127**Star][20d] [C] [cisco-talos/file2pcap](https://github.com/cisco-talos/file2pcap) make various types of packet captures containing the content of any file that you specify
+- [**127**Star][3y] [Java] [chora10/fuzzdomain](https://github.com/chora10/fuzzdomain) FuzzDomain
+- [**127**Star][4y] [C++] [chago/advmp](https://github.com/chago/advmp) 大自然的搬运工-Android虚拟机保护Demo
+- [**127**Star][4y] [Py] [caijiji/vulscritp](https://github.com/caijiji/vulscritp) 内网渗透脚本
+- [**127**Star][1y] [Java] [bmax121/budhook](https://github.com/bmax121/budhook) An Android hook framework written like Xposed,based on YAHFA.
+- [**127**Star][5m] [Shell] [bet4it/build-an-efficient-pwn-environment](https://github.com/bet4it/build-an-efficient-pwn-environment) How to build an efficient pwn development environment in 2019
+- [**127**Star][3d] [Java] [baidu-security/openrasp-testcases](https://github.com/baidu-security/openrasp-testcases) OpenRASP 漏洞测试环境
+- [**127**Star][4m] [HTML] [b-mueller/smashing-smart-contracts](https://github.com/b-mueller/smashing-smart-contracts) (HITBSecConf 2018)smashing smart contracts
+- [**127**Star][5y] [Py] [0xpoly/centry](https://github.com/0xpoly/centry) Panic button for protection against cold boot attacks
+- [**127**Star][2y] [Py] [0ang3el/easycsrf](https://github.com/0ang3el/easycsrf)
+- [**126**Star][4y] [Py] [sektioneins/sandbox_toolkit](https://github.com/sektioneins/sandbox_toolkit) Toolkit for binary iOS / OS X sandbox profiles
+- [**126**Star][4y] [Assembly] [osirislab/shellcode](https://github.com/osirislab/Shellcode) a repository of Shellcode written by students in NYU-Polytechnic's ISIS lab.
+- [**126**Star][2y] [Py] [opensourcesec/forager](https://github.com/opensourcesec/Forager) Multithreaded threat Intelligence gathering built with Python3
+- [**126**Star][5y] [CSS] [merces/aleph](https://github.com/merces/aleph) An Open Source Malware Analysis Pipeline System
+- [**126**Star][1y] [C++] [urshadow/stringobfuscator](https://github.com/urshadow/stringobfuscator) Compile-time string obfuscation (C++14)
+- [**126**Star][8m] [C] [treehacks/botnet-hackpack](https://github.com/treehacks/botnet-hackpack) Build a basic Command & Control botnet in C
+- [**126**Star][10m] [C#] [terribledev/hardhat](https://github.com/terribledev/hardhat) Help secure .net core apps with various HTTP headers (such as CSP's)
+- [**126**Star][3y] [Shell] [takeshixx/redstar-tools](https://github.com/takeshixx/redstar-tools) Tools for Red Star OS (붉은별)
+- [**126**Star][10y] [C] [spotify/linux](https://github.com/spotify/linux) Spotify's Linux kernel for Debian-based systems
+- [**126**Star][2y] [Py] [sparksharly/sharly](https://github.com/sparksharly/sharly) 基于HMM的web异常参数检测
+- [**126**Star][4m] [JS] [sowdust/searchbook](https://github.com/sowdust/searchbook) A Firefox extension for executing some Graph-like searches against Facebook.
+- [**126**Star][30d] [CSS] [redhatofficial/redhatofficial.github.io](https://github.com/redhatofficial/redhatofficial.github.io) The official Red Hat project page.
+- [**126**Star][1y] [Py] [pyn3rd/cve-2018-3245](https://github.com/pyn3rd/cve-2018-3245) CVE-2018-3245-PoC
+- [**126**Star][2y] [Py] [pybind/cmake_example](https://github.com/pybind/cmake_example) Example pybind11 module built with a CMake-based build system
+- [**126**Star][2m] [PS] [nccgroup/accomplice](https://github.com/nccgroup/accomplice) Tools for discovery and abuse of COM hijacks
+- [**126**Star][3m] [Py] [mvelazc0/oriana](https://github.com/mvelazc0/oriana) Oriana is a threat hunting tool that leverages a subset of Windows events to build relationships, calculate totals and run analytics. The results are presented in a Web layer to help defenders identify outliers and suspicious behavior on corporate environments.
+- [**126**Star][7m] [Go] [mritd/idgen](https://github.com/mritd/idgen) 一个使用 golang 编写的大陆身份证生成器
+- [**126**Star][4m] [C++] [marcosd4h/memhunter](https://github.com/marcosd4h/memhunter) Live hunting of code injection techniques
+- [**126**Star][12d] [Shell] [maravento/blackweb](https://github.com/maravento/blackweb) Domains Blacklist for Squid
+- [**126**Star][4y] [PHP] [lietdai/doom](https://github.com/lietdai/doom) DOOM是在thorn上实现的分布式任务分发的ip端口漏洞扫描器
+- [**126**Star][3m] [Roff] [kirtar22/litmus_test](https://github.com/kirtar22/litmus_test) Detecting ATT&CK techniques & tactics for Linux
+- [**126**Star][4y] [Py] [jakecooper/oneplustwobot](https://github.com/jakecooper/oneplustwobot) A series of exploits used to jump the OnePlus reservation queue.
+- [**126**Star][2y] [C] [hfiref0x/zeroaccess](https://github.com/hfiref0x/zeroaccess) ZeroAccess v3 toolkit
+- [**126**Star][2y] [C] [hardenedlinux/offensive_poc](https://github.com/hardenedlinux/offensive_poc) Writing PoC for fun and educate people take security seriously;-)
+- [**126**Star][2m] [Py] [google/ctfscoreboard](https://github.com/google/ctfscoreboard) Scoreboard for Capture The Flag competitions.
+- [**126**Star][7m] [Py] [ex0dus-0x/dedsploit](https://github.com/ex0dus-0x/dedsploit) Network protocol auditing framework
+- [**126**Star][2m] [PHP] [dragonbe/hibp](https://github.com/dragonbe/hibp) A composer package to verify if a password was previously used in a breach using Have I Been Pwned API.
+- [**126**Star][2m] [Py] [doyler/securitytools](https://github.com/doyler/securitytools) A single repository for any security tools, scripts, documentation, etc. that I add
+- [**126**Star][19d] [C++] [detexploit/detexploit](https://github.com/detexploit/detexploit) OSS Vulnerability Scanner for Windows Platform
+- [**126**Star][5m] [Py] [davidjacobson/safetext](https://github.com/davidjacobson/safetext) Script to remove homoglyphs and zero-width characters to allow for safe distribution of documents from anonymous sources.
+- [**126**Star][1y] [JS] [danielstjules/blankshield](https://github.com/danielstjules/blankshield) Prevent reverse tabnabbing phishing attacks caused by _blank
+- [**126**Star][3y] [C] [ctxis/rdp-replay](https://github.com/ctxis/rdp-replay) Replay RDP traffic from PCAP
+- [**126**Star][1y] [Py] [cisco-talos/fnc-1](https://github.com/cisco-talos/fnc-1) Fake News Challenge
+- [**126**Star][6y] [Lua] [bobsayshilol/luajit-decomp](https://github.com/bobsayshilol/luajit-decomp) LuaJIT decompiler
+- [**126**Star][6y] [atimorin/scada-tools](https://github.com/atimorin/scada-tools)
+- [**125**Star][9d] [Py] [d0g3-lab/h1ve](https://github.com/d0g3-lab/h1ve) An Easy / Quick / Cheap Integrated Platform
+- [**125**Star][2y] [C] [firmianay/life-long-learner](https://github.com/firmianay/life-long-learner) Personal Notes About Everything.
+- [**125**Star][17d] [xrkk/awesome-cyber-security](https://github.com/xrkk/awesome-cyber-security) [Moved to:
+- [**125**Star][19d] [JS] [maxmeng93/get-free-ss](https://github.com/maxmeng93/get-free-ss) 【停止维护】Node爬虫学习:自动爬取网络上公开的免费 SS\SSR 账号密码,并替换掉软件中旧的账号。
+- [**125**Star][4y] [JS] [wisdom/regex-dos](https://github.com/Wisdom/RegEx-DoS)
+- [**125**Star][30d] [Py] [yuxiaokui/intranet-penetration](https://github.com/yuxiaokui/intranet-penetration) 内网渗透必备工具。
+- [**125**Star][2y] [vidar-team/hctf2017](https://github.com/vidar-team/hctf2017)
+- [**125**Star][9m] [Py] [stamparm/hontel](https://github.com/stamparm/hontel) Telnet Honeypot
+- [**125**Star][12m] [Py] [sabri-zaki/easy_hack](https://github.com/sabri-zaki/easy_hack) Hack the World using Termux
+- [**125**Star][7y] [pwnwiki/webappdefaultsdb](https://github.com/pwnwiki/webappdefaultsdb) A DB of known Web Application Admin URLS, Username/Password Combos and Exploits
+- [**125**Star][1m] [C] [projecthorus/radiosonde_auto_rx](https://github.com/projecthorus/radiosonde_auto_rx) Automatically Track Radiosonde Launches using RTLSDR
+- [**125**Star][20d] [Py] [picoctf/picoctf](https://github.com/picoctf/picoctf) The platform used to run picoCTF. A great framework to host any CTF.
+- [**125**Star][2d] [Perl] [philsmd/7z2hashcat](https://github.com/philsmd/7z2hashcat) extract information from password-protected .7z archives (and .sfx files) such that you can crack these "hashes" with hashcat
+- [**125**Star][1m] [osm0sis/android-busybox-ndk](https://github.com/osm0sis/android-busybox-ndk) Keeping track of instructions and patches for building busybox with the Android NDK
+- [**125**Star][9d] [C++] [omenscan/achoir](https://github.com/omenscan/achoir) Windows Live Artifacts Acquisition Script
+- [**125**Star][18d] [Go] [ns3777k/go-shodan](https://github.com/ns3777k/go-shodan) Shodan API client
+- [**125**Star][1m] [C++] [monoxgas/flyingafalseflag](https://github.com/monoxgas/flyingafalseflag) Slides and Code for the BHUSA 2019 talk: Flying a False Flag
+- [**125**Star][4m] [PS] [mikefrobbins/powershell](https://github.com/mikefrobbins/powershell) PowerShell scripts and functions
+- [**125**Star][4y] [Py] [leastauthority/ethereum-analyses](https://github.com/leastauthority/ethereum-analyses)
+- [**125**Star][1y] [C] [lctf/lctf2018](https://github.com/lctf/lctf2018) Source code, writeups and exps in LCTF2018.
+- [**125**Star][9d] [C#] [jitbit/aspnetsaml](https://github.com/jitbit/aspnetsaml) Very simple SAML 2.0 consumer module for ASP.NET/C#
+- [**125**Star][6m] [Py] [jinmo/ctfs](https://github.com/jinmo/ctfs) ctf exploit codes or writeups
+- [**125**Star][2y] [Perl] [infoslack/sec-tools](https://github.com/infoslack/sec-tools) Docker images for infosec tools
+- [**125**Star][3y] [JS] [infosec-au/little-doctor](https://github.com/infosec-au/little-doctor) a JavaScript worm that can exfiltrate files, microphone, webcam, and other data
+- [**125**Star][3y] [PHP] [ikoniaris/kippo-graph](https://github.com/ikoniaris/kippo-graph) Visualize statistics from a Kippo SSH honeypot
+- [**125**Star][2y] [C++] [gpoulios/ropinjector](https://github.com/gpoulios/ropinjector) Patching ROP-encoded shellcodes into PEs
+- [**125**Star][5m] [Py] [fireeye/flare-qdb](https://github.com/fireeye/flare-qdb) Command-line and Python debugger for instrumenting and modifying native software behavior on Windows and Linux.
+- [**125**Star][4d] [JS] [feross/cs253.stanford.edu](https://github.com/feross/cs253.stanford.edu) CS 253 Web Security course at Stanford University
+- [**125**Star][3m] [Shell] [exalab/anlinux-resources](https://github.com/exalab/anlinux-resources) Image and Script for LinuxOnAndroid App
+- [**125**Star][1y] [C] [emptymonkey/mimic](https://github.com/emptymonkey/mimic) Hide processes as a normal user in Linux.
+- [**125**Star][2m] [Py] [deroko/lldbinit](https://github.com/deroko/lldbinit) Similar implementation of .gdbinit from fG
+- [**125**Star][7m] [Perl] [davisjam/vuln-regex-detector](https://github.com/davisjam/vuln-regex-detector) Detect vulnerable regexes in your project. REDOS, catastrophic backtracking.
+- [**125**Star][8m] [Py] [danigargu/syms2elf](https://github.com/danigargu/syms2elf) A plugin for Hex-Ray's IDA Pro and radare2 to export the symbols recognized to the ELF symbol table
+- [**125**Star][3y] [Py] [codypierce/pyemu](https://github.com/codypierce/pyemu) x86 Emulator in Python
+- [**125**Star][8m] [Py] [chg-hou/enmicromsg.db-password-cracker](https://github.com/chg-hou/enmicromsg.db-password-cracker) Crack the password of EnMicroMsg.db with brute-force attack.
+- [**125**Star][10m] [Shell] [capt-meelo/lazyrecon](https://github.com/capt-meelo/lazyrecon) An automated approach to performing recon for bug bounty hunting and penetration testing.
+- [**125**Star][4y] [Py] [bwall/bamfdetect](https://github.com/bwall/bamfdetect) Identifies and extracts information from bots and other malware
+- [**125**Star][2y] [PS] [borntoberoot/powershell_ipv4networkscanner](https://github.com/borntoberoot/powershell_ipv4networkscanner) Powerful asynchronus IPv4 Network Scanner for PowerShell
+- [**124**Star][14d] [Py] [aquasecurity/tracee](https://github.com/aquasecurity/tracee) [EXPERIMENTAL] Container tracing using eBPF
+- [**124**Star][2m] [PHP] [binarymaster/3wifi](https://github.com/binarymaster/3wifi) 3WiFi Wireless Database
+- [**124**Star][5d] [JS] [lirantal/lockfile-lint](https://github.com/lirantal/lockfile-lint) Lint an npm or yarn lockfile to analyze and detect security issues
+- [**124**Star][3y] [JS] [bakerface/wireless-tools](https://github.com/bakerface/wireless-tools) Wireless tools for Node.js
+- [**124**Star][8d] [JS] [radareorg/radare2-r2pipe](https://github.com/radareorg/radare2-r2pipe) Access radare2 via pipe from any programming language!
+- [**124**Star][5m] [C++] [xorrior/raven](https://github.com/xorrior/raven) CobaltStrike External C2 for Websockets
+- [**124**Star][3y] [JS] [vtky/swizzler2](https://github.com/vtky/swizzler2) Swizzler2 - Hacking iOS applications
+- [**124**Star][5y] [Py] [urule99/jsunpack-n](https://github.com/urule99/jsunpack-n) Automatically exported from code.google.com/p/jsunpack-n
+- [**124**Star][1y] [Shell] [thelinuxchoice/facebash](https://github.com/thelinuxchoice/facebash) Facebook Brute Forcer in shellscript using TOR
+- [**124**Star][6m] [Py] [thekingofduck/mysqlmonitor](https://github.com/thekingofduck/mysqlmonitor) MySQL实时监控工具(代码审计/黑盒/白盒审计辅助工具)
+- [**124**Star][17d] [Py] [t4d/stalkphish](https://github.com/t4d/stalkphish) StalkPhish - The Phishing kits stalker, harvesting phishing kits for investigations.
+- [**124**Star][7y] [Py] [sysdream/pysqli](https://github.com/sysdream/pysqli) Python SQL injection framework
+- [**124**Star][2m] [HTML] [sundaysec/android-exploits](https://github.com/sundaysec/android-exploits) A collection of android Exploits and Hacks
+- [**124**Star][7m] [C++] [saaramar/deterministic_lfh](https://github.com/saaramar/deterministic_lfh) Have fun with the LowFragmentationHeap
+- [**124**Star][4y] [Shell] [reider-roque/linpostexp](https://github.com/reider-roque/linpostexp) Linux post exploitation enumeration and exploit checking tools
+- [**124**Star][3m] [Py] [platomav/biosutilities](https://github.com/platomav/biosutilities) Various BIOS Utilities for Modding/Research
+- [**124**Star][2m] [C#] [nyan-x-cat/lime-crypter](https://github.com/nyan-x-cat/lime-crypter) Simple obfuscation tool
+- [**124**Star][3m] [C] [matrixssl/matrixssl](https://github.com/matrixssl/matrixssl) Lightweight Embedded SSL/TLS Implementation for IoT Devices
+- [**124**Star][1y] [Py] [leezj9671/socialdb_vue_flask](https://github.com/leezj9671/socialdb_vue_flask) 一个小型的较为简陋的社工库查询系统,使用Vue.js+Flask+MongoDB.可用52g, 本人不提供任何社工库资源. A tiny social engineering database system, including backend and frontend.
+- [**124**Star][4m] [Py] [lakiw/pcfg_cracker](https://github.com/lakiw/pcfg_cracker) Probabilistic Context Free Grammar (PCFG) password guess generator
+- [**124**Star][4m] [Py] [igio90/uddbg](https://github.com/igio90/uddbg) A gdb like debugger that provide a runtime env to unicorn emulator and additionals features!
+- [**124**Star][3m] [Py] [highmeh/pentest_scripts](https://github.com/highmeh/pentest_scripts) penetration testing scripts
+- [**124**Star][1m] [C++] [grammatech/gtirb](https://github.com/grammatech/gtirb) Intermediate Representation for Binary analysis and transformation
+- [**124**Star][1y] [Shell] [dtag-dev-sec/t-pot-autoinstall](https://github.com/dtag-dev-sec/t-pot-autoinstall) Deprecated - Please use T-Pot Universal Installer
+- [**124**Star][4y] [Py] [davidoren/cuckoosploit](https://github.com/davidoren/cuckoosploit) An environment for comprehensive, automated analysis of web-based exploits, based on Cuckoo sandbox.
+- [**124**Star][1y] [C#] [codecracker-tools/megadumper](https://github.com/codecracker-tools/megadumper) Dump native and .NET assemblies
+- [**124**Star][4d] [chef-koch/online-privacy-test-resource-list](https://github.com/chef-koch/online-privacy-test-resource-list) Privacy Online Test and Resource Compendium (POTARC) 🕵🏻
+- [**124**Star][1y] [Py] [c0mmand3ropsec/cve-2017-10271](https://github.com/c0mmand3ropsec/cve-2017-10271) WebLogic Exploit
+- [**124**Star][2y] [Java] [brompwnie/uitkyk](https://github.com/brompwnie/uitkyk) Android Frida库, 用于分析App查找恶意行为
+- [**124**Star][11m] [Shell] [antonlindstrom/passpwn](https://github.com/antonlindstrom/passpwn) 检查Unix密码管理器(pass)中的密码是否发生过泄露
+- [**124**Star][3y] [JS] [antojoseph/diff-gui](https://github.com/antojoseph/diff-gui) GUI for Frida -Scripts
+- [**124**Star][2y] [Py] [alonemonkey/antiantidebug](https://github.com/alonemonkey/antiantidebug) tweak、 lldb python for anti anti debug
+- [**124**Star][2y] [HTML] [alienwithin/owasp-mth3l3m3nt-framework](https://github.com/alienwithin/owasp-mth3l3m3nt-framework) 辅助渗透测试与漏洞利用
+- [**124**Star][23d] [C++] [adamyaxley/obfuscate](https://github.com/adamyaxley/obfuscate) Guaranteed compile-time string literal obfuscation header-only library for C++14
+- [**123**Star][4d] [Julia] [alertot/detectem](https://github.com/alertot/detectem) detect software and its version on websites.
+- [**123**Star][2m] [Go] [yahoo/yfuzz](https://github.com/yahoo/yfuzz) 利用 Kubernetes 实现分布式 fuzzing
+- [**123**Star][11m] [C] [wenzel/r2vmi](https://github.com/wenzel/r2vmi) Hypervisor-Level Debugger based on Radare2 / LibVMI, using VMI IO and debug plugins
+- [**123**Star][5m] [Py] [veerendra2/wifi-deauth-attack](https://github.com/veerendra2/wifi-deauth-attack) An automated script for deauthentication attack
+- [**123**Star][4y] [Py] [ucsb-seclab/leakless](https://github.com/ucsb-seclab/leakless) Function redirection via ELF tricks.
+- [**123**Star][7y] [steamedfish/gfwiplist](https://github.com/steamedfish/gfwiplist) 可用于翻墙路由表的墙外IP列表
+- [**123**Star][3m] [Go] [stalkr/dns-reverse-proxy](https://github.com/stalkr/dns-reverse-proxy) DNS Reverse Proxy
+- [**123**Star][4m] [PHP] [spidermate/b-xssrf](https://github.com/spidermate/b-xssrf) Toolkit to detect and keep track on Blind XSS, XXE & SSRF
+- [**123**Star][4m] [Py] [skyplabs/probequest](https://github.com/skyplabs/probequest) Toolkit for Playing with Wi-Fi Probe Requests
+- [**123**Star][3m] [secure-data-analysis-data-sharing/data-analysis](https://github.com/secure-data-analysis-data-sharing/data-analysis) 资料分享
+- [**123**Star][3y] [JS] [salesforce/secure-filters](https://github.com/salesforce/secure-filters) Anti-XSS Security Filters for EJS and More
+- [**123**Star][2y] [Py] [riverloopsec/tumblerf](https://github.com/riverloopsec/tumblerf) a unified fuzzing framework for low-level RF and HW protocol/PHY/MAC analysis
+- [**123**Star][5y] [Py] [ring04h/dirfuzz](https://github.com/ring04h/dirfuzz) 多线程网站目录穷举扫描
+- [**123**Star][6m] [PHP] [radenvodka/svscanner](https://github.com/radenvodka/svscanner) SVScanner - Scanner Vulnerability And MaSsive Exploit.
+- [**123**Star][2m] [Py] [radare/radare2ida](https://github.com/radare/radare2ida) Tools, documentation and scripts to move projects from IDA to R2 and viceversa
+- [**123**Star][26d] [PS] [dsccommunity/xwebadministration](https://github.com/dsccommunity/xWebAdministration) This module contains DSC resources for deployment and configuration of web servers and components around those.
+- [**123**Star][4y] [Py] [pentestmonkey/gateway-finder](https://github.com/pentestmonkey/gateway-finder) Tool to identify routers on the local LAN and paths to the Internet
+- [**123**Star][1y] [Gherkin] [owasp-cloud-security/owasp-cloud-security](https://github.com/owasp-cloud-security/owasp-cloud-security) OWASP Cloud Security - Enabling conversations through threat and control stories
+- [**123**Star][3y] [JS] [openmarshall/shortcutss](https://github.com/openmarshall/shortcutss) This is a Mac Shadowsocks client equipped with global shortcuts to switch proxy mode !
+- [**123**Star][3y] [PS] [onelogicalmyth/automated-ad-setup](https://github.com/onelogicalmyth/automated-ad-setup) A PowerShell script that aims to have a fully configured domain built in under 10 minutes, but also apply security configuration and hardening.
+- [**123**Star][7m] [PS] [nyxgeek/o365recon](https://github.com/nyxgeek/o365recon) o365recon:PowerShell脚本,使用单个 cred 来转储完整的 o365 用户列表,组列表和组成员
+- [**123**Star][11m] [Py] [niklasb/3dpwn](https://github.com/niklasb/3dpwn) VirtualBox 3D exploits & PoCs
+- [**123**Star][2y] [Shell] [niclet/xiaomi_hack](https://github.com/niclet/xiaomi_hack) Xiaomi common hack for cameras (Mijia 360)
+- [**123**Star][2m] [C++] [nettitude/simplepeloader](https://github.com/nettitude/simplepeloader) In-Memory PE Loader
+- [**123**Star][2y] [Shell] [nccgroup/lazydroid](https://github.com/nccgroup/lazydroid) bash script to facilitate some aspects of an Android application assessment
+- [**123**Star][4y] [Py] [moloch--/csp-bypass](https://github.com/moloch--/csp-bypass) A Burp Plugin for Detecting Weaknesses in Content Security Policies
+- [**123**Star][3y] [malwares/dangerouszone](https://github.com/malwares/dangerouszone) Dangerous Malwares
+- [**123**Star][11m] [Pascal] [mahdisafsafi/debugengine](https://github.com/mahdisafsafi/debugengine) Delphi debug framework
+- [**123**Star][7y] [Ruby] [livingsocial/keyspace](https://github.com/livingsocial/keyspace) Capability-based secure key management and credential storage
+- [**123**Star][4m] [k0rz3n/googlehacking-page](https://github.com/k0rz3n/googlehacking-page) This is a summary of my study and use of Google hacking. I hope I can share it with you. If you like, please give me a star or fork it, thank you.
+- [**123**Star][1y] [JS] [jonaslejon/tor-fingerprint](https://github.com/jonaslejon/tor-fingerprint) Tor Browser and Tails version fingerprint PoC
+- [**123**Star][5m] [HTML] [jlleitschuh/zoom_vulnerability_poc](https://github.com/jlleitschuh/zoom_vulnerability_poc)
+- [**123**Star][7m] [Py] [jerrychan807/wspih](https://github.com/jerrychan807/wspih) Website Sensitive Personal Information Hunter 网站个人敏感信息文件扫描器
+- [**123**Star][5y] [jacobsoo/androidslides](https://github.com/jacobsoo/androidslides)
+- [**123**Star][1y] [PS] [itm4n/ikeext-privesc](https://github.com/itm4n/ikeext-privesc) Windows IKEEXT DLL Hijacking Exploit Tool
+- [**123**Star][3y] [Py] [inguma/bokken](https://github.com/inguma/bokken) Dear user: This is a git mirror of our Mercurial repository in
+- [**123**Star][1y] [PHP] [gwen001/s3-buckets-finder](https://github.com/gwen001/s3-buckets-finder) Find aws s3 buckets and extract datas.
+- [**123**Star][1m] [Java] [graylog2/graylog-plugin-threatintel](https://github.com/graylog2/graylog-plugin-threatintel) Graylog Processing Pipeline functions to enrich log messages with IoC information from threat intelligence databases
+- [**123**Star][1m] [Go] [fuzzitdev/fuzzit](https://github.com/fuzzitdev/fuzzit) CLI to integrate continuous fuzzing with Fuzzit
+- [**123**Star][8y] [evilcos/python-webshell](https://github.com/evilcos/python-webshell) webshell writen in python
+- [**123**Star][4y] [Py] [equalitie/learn2ban](https://github.com/equalitie/learn2ban) Open source machine learning DDOS detection tool
+- [**123**Star][6y] [PHP] [disk0nn3ct/cookiecatcher](https://github.com/disk0nn3ct/cookiecatcher) assist in the exploitation of XSS (Cross Site Scripting) vulnerabilities within web applications to steal user session IDs
+- [**123**Star][2y] [C] [coolervoid/mosca](https://github.com/coolervoid/mosca) Manual search tool to find bugs like a grep unix command - Beta
+- [**123**Star][5y] [Shell] [chrisfosterelli/dockerrootplease](https://github.com/chrisfosterelli/dockerrootplease) Gives you root on the hostOS, if you're a member of the 'docker' group.
+- [**123**Star][3y] [C++] [cheetahsec/avmdbg](https://github.com/cheetahsec/avmdbg) a lightweight debugger for android virtual machine.
+- [**123**Star][2y] [Py] [blazeinfosec/pcrappyfuzzer](https://github.com/blazeinfosec/pcrappyfuzzer) pcrappyfuzzer:Scapy+ radamsa 的简单组合,从 pcap 文件中提取数据,执行快速 Fuzz
+- [**123**Star][8m] [C++] [binspector/binspector](https://github.com/binspector/binspector) A binary format analysis tool
+- [**123**Star][19d] [JS] [0vercl0k/windbg-scripts](https://github.com/0vercl0k/windbg-scripts) A bunch of JavaScript extensions for WinDbg.
+- [**122**Star][4y] [C] [trustedsec/pivoter](https://github.com/trustedsec/pivoter) Pivoter is a proxy tool for pentesters to have easier lateral movement.
+- [**122**Star][11m] [Shell] [wulabing/ssr-manyuser_glzjin_shell](https://github.com/wulabing/ssr-manyuser_glzjin_shell) sspanel v3 魔改版 后端一键安装配置管理脚本
+- [**122**Star][8m] [C++] [hmbsbige/getcndomainsandipv4](https://github.com/hmbsbige/getcndomainsandipv4) 获取国内 IP 和域名,生成路由表和 PAC 文件
+- [**122**Star][1m] [Py] [fuzzitdev/pythonfuzz](https://github.com/fuzzitdev/pythonfuzz) coverage guided fuzz testing for python
+- [**122**Star][3y] [C] [nsacyber/control-flow-integrity](https://github.com/nsacyber/Control-Flow-Integrity) A proposed hardware-based method for stopping known memory corruption exploitation techniques. #nsacyber
+- [**122**Star][2m] [Ruby] [chef/knife-openstack](https://github.com/chef/knife-openstack) Chef knife plug-in for OpenStack
+- [**122**Star][4y] [C++] [lifting-bits/codereason](https://github.com/lifting-bits/codereason) Semantic Binary Code Analysis Framework
+- [**122**Star][2y] [Java] [zjlywjh001/phrackctf-platform-personal](https://github.com/zjlywjh001/phrackctf-platform-personal) CTF platfrom developed by Jarvis from Phrack Team. 做一个功能最全的CTF平台。
+- [**122**Star][2y] [C#] [zerosum0x0/runshellcode](https://github.com/zerosum0x0/runshellcode) .NET GUI program that runs shellcode
+- [**122**Star][5y] [C++] [zachriggle/ida-splode](https://github.com/zachriggle/ida-splode) Augmenting Static Reverse Engineering with Dynamic Analysis and Instrumentation
+ - [IDA插件](https://github.com/zachriggle/ida-splode/tree/master/py)
+ - [PinTool](https://github.com/zachriggle/ida-splode/tree/master/src)
+- [**122**Star][1y] [C#] [xenocoderce/noisette-obfuscator](https://github.com/xenocoderce/noisette-obfuscator) An Obfuscator for .NET assembly
+- [**122**Star][2y] [Py] [wossl33/wossl](https://github.com/wossl33/wossl) OpenSSL对称算法、哈希校验、非对称算法、证书管理、SSL安全
+- [**122**Star][6y] [tombkeeper/shellcode_template_in_c](https://github.com/tombkeeper/shellcode_template_in_c)
+- [**122**Star][3y] [PS] [silverhack/voyeur](https://github.com/silverhack/voyeur) VOYEUR's main purpose is to generate a fast (and pretty) Active Directory report. The tool is developed entirely in PowerShell (a powerful scripting language) without dependencies (just .Net Framework 3.5 and Ofiice Excel if you want an useful and pretty report). The generated report is a perfect starting point for well-established forensic, inc…
+- [**122**Star][4y] [Py] [raffaele-forte/climber](https://github.com/raffaele-forte/climber) Check UNIX/Linux systems for privilege escalation
+- [**122**Star][2m] [Py] [netflix-skunkworks/policyuniverse](https://github.com/netflix-skunkworks/policyuniverse) Parse and Process AWS IAM Policies, Statements, ARNs, and wildcards.
+- [**122**Star][3y] [Ruby] [melvinsh/vcsmap](https://github.com/melvinsh/vcsmap) vcsmap is a plugin-based tool to scan public version control systems for sensitive information.
+- [**122**Star][2m] [Py] [mdiazcl/fuzzbunch-debian](https://github.com/mdiazcl/fuzzbunch-debian) Fuzzbunch deployment for Debian - Intructions: Readme.md
+- [**122**Star][1y] [PS] [mattifestation/bhusa2018_sysmon](https://github.com/mattifestation/bhusa2018_sysmon) All materials from our Black Hat 2018 "Subverting Sysmon" talk
+- [**122**Star][3y] [C] [l0n3c0d3r/ceed](https://github.com/l0n3c0d3r/ceed) A tiny x86 compiler with ELF and PE target
+- [**122**Star][2y] [PHP] [jamalc0m/wphunter](https://github.com/jamalc0m/wphunter) WPHunter A Wordpress Vulnerability Scanner
+- [**122**Star][3y] [C++] [ivildeed/vmw_vmx_overloader](https://github.com/ivildeed/vmw_vmx_overloader) Loading unsigned code into kernel in Windows 10 (64) with help of VMware Workstation Pro/Player design flaw
+- [**122**Star][2y] [Java] [isstac/kelinci](https://github.com/isstac/kelinci) AFL-based fuzzing for Java
+- [**122**Star][4y] [irsl/adb-backup-apk-injection](https://github.com/irsl/adb-backup-apk-injection) Android ADB backup APK Injection POC
+- [**122**Star][3y] [Py] [grazfather/practicalmalwarelabs](https://github.com/grazfather/practicalmalwarelabs) Keep track of the labs from the book "Practical Malware Analysis"
+- [**122**Star][4m] [C++] [f4exb/dsdcc](https://github.com/f4exb/dsdcc) Digital Speech Decoder (DSD) rewritten as a C++ library
+- [**122**Star][2y] [Java] [ezequielpereira/gae-rce](https://github.com/ezequielpereira/gae-rce) Google App Engine - Remote Code Execution bug ($36k bug bounty)
+- [**122**Star][2y] [Go] [egebalci/arcanus](https://github.com/egebalci/arcanus) ARCANUS is a customized payload generator/handler.
+- [**122**Star][4m] [C] [dschanoeh/socketcand](https://github.com/dschanoeh/socketcand) A deprecated fork of socketcand. Please got to linux-can for the latest version.
+- [**122**Star][4y] [PHP] [dermotblair/webvulscan](https://github.com/dermotblair/webvulscan) Web Application Vulnerability Scanner.
+- [**122**Star][11m] [PHP] [damianofalcioni/ip-biter](https://github.com/damianofalcioni/ip-biter) The Hacker-friendly E-Mail (but not only) Tracking Framework
+- [**122**Star][3y] [JS] [cn33liz/jsmeter](https://github.com/cn33liz/jsmeter) JavaScript Reversed TCP Meterpreter Stager
+- [**122**Star][3m] [HTML] [chromium/trickuri](https://github.com/chromium/trickuri) to allow testing of applications' display of URLs.
+- [**122**Star][2m] [Py] [chrispetrou/fdsploit](https://github.com/chrispetrou/fdsploit) File Inclusion & Directory Traversal fuzzing, enumeration & exploitation tool.
+- [**122**Star][12m] [Py] [axt/angr-utils](https://github.com/axt/angr-utils) Handy utilities for the angr binary analysis framework, most notably CFG visualization
+- [**122**Star][2y] [Py] [alephsecurity/firehorse](https://github.com/alephsecurity/firehorse) 漏洞开发与利用之: 在紧急加载模式(EDM,Emergency Download Mode)下刷机时使用的固件包(高通)
+- [**122**Star][28d] [Java] [al3xtjames/ghidra-firmware-utils](https://github.com/al3xtjames/ghidra-firmware-utils) Ghidra utilities for analyzing PC firmware
+- [**122**Star][2y] [Batchfile] [3gstudent/clr-injection](https://github.com/3gstudent/clr-injection) Use CLR to inject all the .NET apps
+- [**122**Star][2y] [CSS] [0xbug/orangescan](https://github.com/0xbug/orangescan) 在线子域名信息收集工具
+- [**121**Star][8m] [C] [xhuvom/darknetfaceid](https://github.com/xhuvom/darknetfaceid) A YOLO darknet implementation of facial recognition from automatic annotation of facial images.
+- [**121**Star][8d] [ukncsc/zero-trust-architecture](https://github.com/ukncsc/zero-trust-architecture) Principles to help you design and deploy a zero trust architecture
+- [**121**Star][4y] [C] [cuckoosandbox/cuckoomon](https://github.com/cuckoosandbox/cuckoomon) DEPRECATED - replaced with "monitor"
+- [**121**Star][2m] [Py] [yelp/amira](https://github.com/yelp/amira) Automated Malware Incident Response & Analysis
+- [**121**Star][2y] [we5ter/awesome-platforms](https://github.com/we5ter/awesome-platforms) A curated list of awesome security platforms,including CTF/Security Response Center/Bug Tracker and so on.
+- [**121**Star][11d] [HTML] [trendmicro/securecodingdojo](https://github.com/trendmicro/securecodingdojo) a platform for delivering secure coding training
+- [**121**Star][7m] [Py] [tidesec/web_pwd_common_crack](https://github.com/tidesec/web_pwd_common_crack) 通用web弱口令破解脚本,旨在批量检测那些没有验证码的管理后台,可用于刷分~
+- [**121**Star][2m] [Go] [teknogeek/ssrf-sheriff](https://github.com/teknogeek/ssrf-sheriff) A simple SSRF-testing sheriff written in Go
+- [**121**Star][2y] [C] [sqlmapproject/udfhack](https://github.com/sqlmapproject/udfhack) Database takeover user-defined functions for MySQL and PostgreSQL
+- [**121**Star][2y] [C#] [schnocker/hleaker](https://github.com/schnocker/hleaker) An usermode alternative for DuplicateHandle.
+- [**121**Star][4y] [sandysekharan/ctf-tool](https://github.com/sandysekharan/ctf-tool) A curated list of Capture The Flag (CTF) frameworks, libraries, resources and softwares.
+- [**121**Star][15d] [PS] [rgl/windows-2016-vagrant](https://github.com/rgl/windows-2016-vagrant) Windows 2012R2/10/2016/2019 Base Vagrant Box (
+- [**121**Star][6d] [Py] [renatahodovan/grammarinator](https://github.com/renatahodovan/grammarinator) ANTLR v4 grammar-based test generator
+- [**121**Star][24d] [Py] [redhuntlabs/burpsuite-asset_discover](https://github.com/redhuntlabs/burpsuite-asset_discover) Burp Suite extension to discover assets from HTTP response.
+- [**121**Star][3m] [Py] [redaelli/imago-forensics](https://github.com/redaelli/imago-forensics) Imago is a python tool that extract digital evidences from images.
+- [**121**Star][1m] [C++] [rebzzel/kiero](https://github.com/rebzzel/kiero) Universal graphical hook for a D3D9-D3D12, OpenGL and Vulcan based games.
+- [**121**Star][3y] [Java] [rastapasta/pokemon-go-xposed](https://github.com/rastapasta/pokemon-go-xposed)
+- [**121**Star][11m] [Shell] [qinghuas/ss-panel-and-ss-py-mu](https://github.com/qinghuas/ss-panel-and-ss-py-mu) SS Panel V3 前端/节点端安装脚本,及相关附属工具管理
+- [**121**Star][11d] [PS] [dsccommunity/xpsdesiredstateconfiguration](https://github.com/dsccommunity/xPSDesiredStateConfiguration)
+- [**121**Star][1y] [Py] [powdahound/redis-collectd-plugin](https://github.com/powdahound/redis-collectd-plugin) A Redis plugin for collectd.
+- [**121**Star][10d] [C++] [phackt/stager.dll](https://github.com/phackt/stager.dll) Code from this article:
+- [**121**Star][3m] [XSLT] [pcapng/pcapng](https://github.com/pcapng/pcapng) PCAP next generation file format specification
+- [**121**Star][7m] [Py] [owasp/serverless-goat](https://github.com/owasp/serverless-goat) a serverless application demonstrating common serverless security flaws
+- [**121**Star][1y] [nagwww/s3-leaks](https://github.com/nagwww/s3-leaks) List of S3 Hacks
+- [**121**Star][3d] [HTML] [mozillasecurity/fuzzmanager](https://github.com/mozillasecurity/fuzzmanager) A fuzzing management tools collection
+- [**121**Star][1m] [JS] [mazen160/xless](https://github.com/mazen160/xless) The Serverless Blind XSS App
+- [**121**Star][3y] [malwares/webshell](https://github.com/malwares/webshell) WebShell Dump
+- [**121**Star][28d] [maddiestone/conpresentations](https://github.com/maddiestone/conpresentations) Slide decks from my conference presentations
+- [**121**Star][4y] [PS] [maaaaz/crackmapexecwin](https://github.com/maaaaz/crackmapexecwin) The great CrackMapExec tool compiled for Windows
+- [**121**Star][3y] [HTML] [louchaooo/kali-tools-zh](https://github.com/louchaooo/kali-tools-zh)
+- [**121**Star][7y] [Py] [liato/android-market-api-py](https://github.com/liato/android-market-api-py) A Python port of the java Android Market API.
+- [**121**Star][6m] [AutoIt] [jschicht/mft2csv](https://github.com/jschicht/mft2csv) Extract $MFT record info and log it to a csv file.
+- [**121**Star][1y] [Shell] [joanbono/snorter](https://github.com/joanbono/snorter) Snort + Barnyard2 + Pulledpork → The easy way!
+- [**121**Star][6y] [Py] [infodox/exploits](https://github.com/infodox/exploits) Some exploits and exploit development stuff.
+- [**121**Star][4y] [Scala] [guillaumebort/scasm](https://github.com/guillaumebort/scasm) A a dynamic x86_64 assembler in Scala — Code for the live coding session @ Devoxx france 2016
+- [**121**Star][3y] [PS] [fuzzysecurity/hacksysteam-pskernelpwn](https://github.com/fuzzysecurity/hacksysteam-pskernelpwn) Accompanying blog posts on using PowerShell to exploit the @HackSysTeam Extreme Vulnerable Driver (HEVD).
+- [**121**Star][2y] [Shell] [feicong/ida_for_mac_green](https://github.com/feicong/ida_for_mac_green) IDAPro for macOS
+- [**121**Star][14d] [Go] [facebookincubator/nvdtools](https://github.com/facebookincubator/nvdtools) A set of tools to work with the feeds (vulnerabilities, CPE dictionary etc.) distributed by National Vulnerability Database (NVD)
+- [**121**Star][2y] [Ruby] [ehloonion/onionmx](https://github.com/ehloonion/onionmx) Onion delivery, so delicious
+- [**121**Star][10m] [Perl] [dave-theunsub/clamtk](https://github.com/dave-theunsub/clamtk) An easy to use, light-weight, on-demand virus scanner for Linux systems
+- [**121**Star][1m] [cujanovic/content-bruteforcing-wordlist](https://github.com/cujanovic/content-bruteforcing-wordlist) Wordlist for content(directory) bruteforce discovering with Burp or dirsearch
+- [**121**Star][2m] [Py] [ctxis/beemka](https://github.com/ctxis/beemka) Basic Electron Exploitation
+- [**121**Star][3y] [cloudsec/research](https://github.com/cloudsec/research) the core papers i researched about kernel security.
+- [**121**Star][4y] [Batchfile] [brianwrf/winsystemhelper](https://github.com/brianwrf/winsystemhelper) A tool that checks and downloads scripts that will aid with privilege escalation on a Windows system.
+- [**121**Star][1y] [C] [bob-beck/libtls](https://github.com/bob-beck/libtls) libtls tutorial, exercises, test CA and exercise solutions
+- [**121**Star][1y] [Java] [b3dk7/stegexpose](https://github.com/b3dk7/stegexpose) A steganalysis tool for detecting LSB steganography in images
+- [**121**Star][7m] [C] [aczid/crypto1_bs](https://github.com/aczid/crypto1_bs) Bitsliced Crypto-1 brute-forcer
+- [**121**Star][1y] [PHP] [a0xnirudh/kurukshetra](https://github.com/a0xnirudh/kurukshetra) A framework for teaching secure coding by means of interactive problem solving.
+- [**121**Star][4y] [Shell] [91yun/vpn](https://github.com/91yun/vpn) vpn一键安装包
+- [**121**Star][3d] [C++] [0vercl0k/blazefox](https://github.com/0vercl0k/blazefox) Blazefox exploits for Windows 10 RS5 64-bit.
+- [**120**Star][2y] [Go] [zxsecurity/steamer](https://github.com/zxsecurity/steamer) 导入、搜索和管理公开泄露的数据
+- [**120**Star][3y] [Assembly] [yaseng/pentest](https://github.com/yaseng/pentest) some pentest scripts & tools by yaseng@uauc.net
+- [**120**Star][4y] [Ruby] [yangbh/hammer](https://github.com/yangbh/hammer) A web vulnerability scanner framework
+- [**120**Star][3y] [Shell] [xmikos/cryptboot](https://github.com/xmikos/cryptboot) Encrypted boot partition manager with UEFI Secure Boot support
+- [**120**Star][2y] [JS] [wofeiwo/website-analyzer](https://github.com/wofeiwo/website-analyzer) Analyze and display the Web technology of current page.
+- [**120**Star][1y] [Py] [wavestone-cdt/wavecrack](https://github.com/wavestone-cdt/wavecrack) 多用户之间共享Hastcat cracking box 的 Web 界面
+- [**120**Star][2y] [Jupyter Notebook] [teamhg-memex/deep-deep](https://github.com/teamhg-memex/deep-deep) Adaptive crawler which uses Reinforcement Learning methods
+- [**120**Star][2y] [Py] [szcf-weiya/sinaspider](https://github.com/szcf-weiya/sinaspider) 动态IP解决新浪的反爬虫机制,快速抓取内容。
+- [**120**Star][4y] [Py] [synack/dylibhijack](https://github.com/synack/dylibhijack) python utilities related to dylib hijacking on OS X
+- [**120**Star][5m] [Py] [rabbitmask/weblogicscanlot](https://github.com/rabbitmask/weblogicscanlot) WeblogicScanLot系列,Weblogic漏洞批量检测工具,V2.2
+- [**120**Star][3y] [Java] [pwntester/jre8u20_rce_gadget](https://github.com/pwntester/jre8u20_rce_gadget) JRE8u20_RCE_Gadget
+- [**120**Star][2y] [Swift] [nsexceptional/runtime](https://github.com/nsexceptional/runtime) An Objective-C simulator written in Swift.
+- [**120**Star][6y] [Lua] [nixuehan/belial](https://github.com/nixuehan/belial) 基于nginx lua module 的一个 waf .
+- [**120**Star][8y] [Py] [mostawesomedude/construct](https://github.com/mostawesomedude/construct) Python binary parsing library
+- [**120**Star][1y] [Py] [mitre/cascade-server](https://github.com/mitre/cascade-server) a research project at MITRE which seeks to automate much of the investigative work a “blue-team” team would perform to determine the scope and maliciousness of suspicious behavior on a network using host data
+- [**120**Star][1y] [Py] [mikesiegel/ews-crack](https://github.com/mikesiegel/ews-crack) 利用 EWS 绕过 Office365 2FA/MDM
+- [**120**Star][2y] [C] [marsyy/littl_tools](https://github.com/marsyy/littl_tools)
+- [**120**Star][2y] [Swift] [lxdcn/nepackettunnelvpndemo](https://github.com/lxdcn/nepackettunnelvpndemo) iOS VPN client implementation demo based on iOS9 NetworkExtension NETunnelProvider APIs
+- [**120**Star][18d] [Java] [kyhsgeekcode/android-disassembler](https://github.com/kyhsgeekcode/android-disassembler) Disassemble ANY files including .so (NDK, JNI), Windows PE(EXE, DLL, SYS, etc), linux binaries, libraries, and any other files such as pictures, audios, etc(for fun)files on Android. Capstone-based disassembler application on android. 안드로이드 NDK 공유 라이브러리, Windows 바이너리, etc,... 리버싱 앱
+- [**120**Star][5m] [Rust] [kanishkarj/snoopy](https://github.com/kanishkarj/snoopy) A highly configurable multi-threaded packet sniffer and parser build in rust-lang.
+- [**120**Star][5y] [jyny/pasc2at](https://github.com/jyny/pasc2at) 高级PHP应用程序漏洞审核技术 by 80vul
+- [**120**Star][2y] [C] [jimstudt/ook-decoder](https://github.com/jimstudt/ook-decoder) Ook-decoder reads On-Off Keying radio data commonly used in the 433MHz ISM bands using a software defined radio (SDR).
+- [**120**Star][11m] [Shell] [itskindred/portpush](https://github.com/itskindred/portpush) A small Bash utility used for pivoting into internal networks upon compromising a public-facing host.
+- [**120**Star][2m] [HTML] [intel/generic-sensor-demos](https://github.com/intel/generic-sensor-demos) applications that demonstrate how to use the Generic Sensor API.
+- [**120**Star][5m] [C++] [hasherezade/tiny_tracer](https://github.com/hasherezade/tiny_tracer) A Pin Tool for tracing API calls etc
+- [**120**Star][12m] [Py] [grunny/zap-cli](https://github.com/grunny/zap-cli) A simple tool for interacting with OWASP ZAP from the commandline.
+- [**120**Star][3y] [C] [glacierw/mba](https://github.com/glacierw/mba) Malware Behavior Analyzer
+- [**120**Star][3y] [gasche/popl2016-papers](https://github.com/gasche/popl2016-papers) Links to publicly available preprints for the POPL'16 conference
+- [**120**Star][3y] [Py] [exp-db/ai-driven-waf](https://github.com/exp-db/ai-driven-waf) Artificial intelligence-driven Web Firewall
+- [**120**Star][2y] [JS] [duo-labs/phinn](https://github.com/duo-labs/phinn) phinn:生成脱机 Chrome 扩展,使用 bespoke convolutional 神经网络来检测网络钓鱼攻击
+- [**120**Star][8m] [C] [dimopouloselias/alpc-mmc-uac-bypass](https://github.com/dimopouloselias/alpc-mmc-uac-bypass) UAC Bypass with mmc via alpc
+- [**120**Star][1y] [C] [cylancevulnresearch/reflectivedllrefresher](https://github.com/cylancevulnresearch/reflectivedllrefresher) Universal Unhooking
+- [**120**Star][1y] [Go] [cllunsford/aws-signing-proxy](https://github.com/cllunsford/aws-signing-proxy) Golang http proxy to transparently sign requests to AWS endpoints
+- [**120**Star][3m] [C] [changeofpace/overwatch-dump-fix](https://github.com/changeofpace/overwatch-dump-fix) x64dbg plugin which removes anti-dumping and obfuscation techniques from the popular FPS game Overwatch.
+- [**120**Star][7m] [Py] [c0ny1/workscripts](https://github.com/c0ny1/workscripts) 信息安全工程师工作常用脚本
+- [**120**Star][9m] [byt3bl33d3r/ansibleplaybooks](https://github.com/byt3bl33d3r/ansibleplaybooks) A collection of Ansible Playbooks that configure Kali to use Fish & install a number of tools
+- [**120**Star][4y] [Py] [breenmachine/javaunserializeexploits](https://github.com/breenmachine/javaunserializeexploits)
+- [**120**Star][5y] [C++] [breakingmalware/selfie](https://github.com/breakingmalware/selfie) A Tool to Unpack Self-Modifying Code using DynamoRIO
+- [**120**Star][3m] [Py] [ashleysommer/sanic-cors](https://github.com/ashleysommer/sanic-cors) A Sanic extension for handling Cross Origin Resource Sharing (CORS), making cross-origin AJAX possible. Based on flask-cors by Cory Dolphin.
+- [**120**Star][5y] [Go] [appnician/pastor](https://github.com/appnician/pastor) Pastor stores all your passwords without storing them anywhere.
+- [**119**Star][1y] [PHP] [walkor/php-socks5](https://github.com/walkor/php-socks5) socks5 proxy written in PHP based on workerman.
+- [**119**Star][3m] [neo23x0/vti-dorks](https://github.com/neo23x0/vti-dorks) Awesome VirusTotal Intelligence Search Queries
+- [**119**Star][1y] [Shell] [cyb0r9/winspy](https://github.com/Cyb0r9/winspy) WinSpy a Windows reverse shell Backdoor creator with an Automatic IP Poisener
+- [**119**Star][1y] [imfht/educn-sqlscan](https://github.com/imfht/educn-sqlScan) 对全国edu域名以及其二级域名进行的一次Sql注入,预计花费时间为三天,结束时候将提交至漏洞平台
+- [**119**Star][2y] [Py] [klsecservices/bat-armor](https://github.com/klsecservices/bat-armor) Encode powershell payload into bat files
+- [**119**Star][5y] [C++] [zyantific/retypedef](https://github.com/zyantific/retypedef) Name substitution plugin for IDA Pro
+- [**119**Star][6m] [xiangbab/web-hack](https://github.com/xiangbab/web-hack) 一份网络安全入门的资料。
+- [**119**Star][1y] [Py] [winheapexplorer/winheap-explorer](https://github.com/winheapexplorer/winheap-explorer) heap-based bugs detection in x86 machine code for Windows applications.
+- [**119**Star][1y] [Py] [williballenthin/indxparse](https://github.com/williballenthin/indxparse) Tool suite for inspecting NTFS artifacts.
+- [**119**Star][9m] [Shell] [vishnudxb/automated-pentest](https://github.com/vishnudxb/automated-pentest) Minimal docker container of Parrot OS for running an automated scan & pentest report.
+- [**119**Star][1y] [Py] [vanhoefm/blackhat17-pocs](https://github.com/vanhoefm/blackhat17-pocs) Proof of concepts of attacks against Wi-Fi implementations
+- [**119**Star][2y] [Py] [teamhg-memex/aquarium](https://github.com/teamhg-memex/aquarium) Splash + HAProxy + Docker Compose
+- [**119**Star][6y] [Py] [stephenbrannon/iocextractor](https://github.com/stephenbrannon/iocextractor) IOC (Indicator of Compromise) Extractor: a program to help extract IOCs from text files.
+- [**119**Star][1m] [C++] [stealth/lophttpd](https://github.com/stealth/lophttpd) lots of performance (or lots of porn, if you prefer) httpd: Easy, chrooted, fast and simple to use HTTP server for static content. Runs on Linux, BSD, Android and OSX/Darwin. It's free but if you like it, consider donating to the EFF:
+- [**119**Star][5m] [C] [ryanries/passfiltex](https://github.com/ryanries/passfiltex) PassFiltEx. An Active Directory Password Filter.
+- [**119**Star][4y] [Py] [packz/ropeme](https://github.com/packz/ropeme) ROPME is a set of python scripts to generate ROP gadgets and payload.
+- [**119**Star][10m] [PS] [p0w3rsh3ll/autoruns](https://github.com/p0w3rsh3ll/autoruns)
+- [**119**Star][3y] [Py] [neuroo/grabber](https://github.com/neuroo/grabber) [DON'T USE ME] plain ol' web apps scanner
+- [**119**Star][3y] [Visual Basic .NET] [mwsrc/njrat](https://github.com/mwsrc/njrat) njRAT SRC Extract
+- [**119**Star][2y] [C] [mniip/spectre-meltdown-poc](https://github.com/mniip/spectre-meltdown-poc) spectre meltdown poc
+- [**119**Star][10d] [Py] [misp/misp-taxonomies](https://github.com/misp/misp-taxonomies) Taxonomies used in MISP taxonomy system and can be used by other information sharing tool.
+- [**119**Star][2y] [mawenjian/china-cdn-domain-whitelist](https://github.com/mawenjian/china-cdn-domain-whitelist) 中国CDN服务提供商域名白名单(China CDN Service Providers' Domain Whitelist)
+- [**119**Star][9m] [Py] [jzadeh/chiron-elk](https://github.com/jzadeh/chiron-elk) Chiron Home Based ML Intrusion Detection System
+- [**119**Star][2y] [CoffeeScript] [joyqi/socket-pipe](https://github.com/joyqi/socket-pipe) forward your socket from one address to anoter without any configs
+- [**119**Star][2d] [C++] [intel/opencl-intercept-layer](https://github.com/intel/opencl-intercept-layer) Intercept Layer for Debugging and Analyzing OpenCL Applications
+- [**119**Star][2m] [C] [hydrabus/hydrafw](https://github.com/hydrabus/hydrafw) HydraFW official firmware for HydraBus/HydraNFC for researcher, hackers, students, embedded software developers or anyone interested in debugging/hacking/developing/penetration testing
+- [**119**Star][21d] [Dockerfile] [harvard-itsecurity/docker-misp](https://github.com/harvard-itsecurity/docker-misp) Automated Docker MISP container - Malware Information Sharing Platform and Threat Sharing
+- [**119**Star][11m] [Py] [ghostmanager/shepherd](https://github.com/ghostmanager/shepherd) A Django application to help red team operators manage a library of domain names
+- [**119**Star][10d] [JS] [fuzzysecurity/fermion](https://github.com/fuzzysecurity/fermion) Fermion, an electron wrapper for Frida & Monaco.
+- [**119**Star][1m] [JS] [fergarrui/ethereum-security](https://github.com/fergarrui/ethereum-security) Security issues in Ethereum demonstrated in mocha tests. The fix is also demonstrated
+- [**119**Star][4y] [Py] [fengxuangit/dede_exp_collect](https://github.com/fengxuangit/dede_exp_collect) collection dedecms exp use pocsuite framework 收集织梦的一些漏洞,并用pocsuite框架写出利用程序。打造一键日dede
+- [**119**Star][1y] [Py] [erdiaker/torrequest](https://github.com/erdiaker/torrequest) Simple Python interface for HTTP(s) requests over Tor
+- [**119**Star][2y] [C++] [earthquake/universaldvc](https://github.com/earthquake/universaldvc) Universal Dynamic Virtual Channel connector for Remote Desktop Services
+- [**119**Star][4d] [Shell] [cihanmehmet/sub.sh](https://github.com/cihanmehmet/sub.sh) Online Subdomain Detect Script
+- [**119**Star][2y] [alecmuffett/the-onion-diaries](https://github.com/alecmuffett/the-onion-diaries) Blog-type notes about building Onion sites
+- [**119**Star][4m] [C#] [akaion/jupiter](https://github.com/akaion/jupiter) A Windows virtual memory editing library with support for pattern scanning.
+- [**119**Star][1m] [Shell] [a-dma/yubitouch](https://github.com/a-dma/yubitouch) Bash script for setting or clearing touch requirements for # cryptographic operations the OpenPGP application on a YubiKey 4
+- [**118**Star][12m] [C] [saelo/35c3ctf](https://github.com/saelo/35c3ctf) Source code and exploits for some 35c3ctf challenges.
+- [**118**Star][3m] [C++] [googleprojectzero/drsancov](https://github.com/googleprojectzero/drsancov) DynamoRIO plugin to get ASAN and SanitizerCoverage compatible output for closed-source executables
+- [**118**Star][1y] [JS] [shadowsocks/shadowsocks-hub](https://github.com/shadowsocks/shadowsocks-hub) A web app managing shadowsocks users, servers, nodes, products, accounts, and traffic. Suitable for internal use by companies, organizations, and friends.
+- [**118**Star][30d] [Py] [jgilhutton/pyxiewps](https://github.com/jgilhutton/PyxieWPS) Pyxiewps is a wireless attack tool to retrieve the WPS pin in seconds.
+- [**118**Star][1y] [Py] [wipi-hunter/pifinger](https://github.com/WiPi-Hunter/PiFinger) determine whether the network we are connected for is opened by Wifi- Pineapple
+- [**118**Star][2y] [Py] [yt1g3r/cve-2018-8174_exp](https://github.com/yt1g3r/cve-2018-8174_exp) CVE-2018-8174_python
+- [**118**Star][3y] [C] [timwr/cve-2014-3153](https://github.com/timwr/cve-2014-3153) CVE-2014-3153 aka towelroot
+- [**118**Star][1y] [lua] [tanjiti/icstools](https://github.com/tanjiti/icstools) ics security tools
+- [**118**Star][9m] [Py] [skelsec/pypykatz_server](https://github.com/skelsec/pypykatz_server) the server part of a server-agent model credential acquiring tool based on pypykatz
+- [**118**Star][2y] [Shell] [shipcod3/mazda_getinfo](https://github.com/shipcod3/mazda_getinfo) A PoC that the USB port is an attack surface for a Mazda car's infotainment system and how Mazda hacks are made
+- [**118**Star][9m] [Java] [securityfirst/umbrella_android](https://github.com/securityfirst/umbrella_android) Digital and Physical Security Advice App
+- [**118**Star][11m] [CSS] [rootkiter/earthworm](https://github.com/rootkiter/earthworm) Tool for tunnel
+- [**118**Star][1y] [Py] [ridter/mailget](https://github.com/ridter/mailget) 通过脉脉用户猜测企业邮箱
+- [**118**Star][5d] [PHP] [radenvodka/recsech](https://github.com/radenvodka/recsech) Recsech is a tool for doing Footprinting and Reconnaissance on the target web. Recsech collects information such as DNS Information, Sub Domains, HoneySpot Detected, Subdomain takeovers, Reconnaissance On Github and much more you can see in Features in tools .
+- [**118**Star][6y] [Py] [meatballs1/burp-extensions](https://github.com/meatballs1/burp-extensions) Burp Suite Extensions
+- [**118**Star][2y] [Py] [malus-security/sandblaster](https://github.com/malus-security/sandblaster) Reversing the Apple sandbox
+- [**118**Star][30d] [Py] [m8r0wn/crosslinked](https://github.com/m8r0wn/crosslinked) LinkedIn enumeration tool to extract valid employee names from an organization through search engine scraping. Names can be formatted in a defined naming convention for further security testing.
+- [**118**Star][1y] [Java] [liqinew/myutils](https://github.com/liqinew/myutils) 包含全方位的工具的工具项目
+- [**118**Star][5m] [Shell] [hardenedlinux/stig-4-debian](https://github.com/hardenedlinux/stig-4-debian) Security Technical Implementation Guide for Debian
+- [**118**Star][3y] [Py] [hackstoic/eqgrp-free-file](https://github.com/hackstoic/eqgrp-free-file) Free sampling of files from the purported Equation Group hack.
+- [**118**Star][26d] [Go] [furduhlutur/yar](https://github.com/furduhlutur/yar) Yar is a tool for plunderin' organizations, users and/or repositories.
+- [**118**Star][2y] [C] [endgameinc/clrguard](https://github.com/endgameinc/clrguard) a proof of concept project to explore instrumenting the Common Language Runtime (CLR) for security purposes.
+- [**118**Star][1m] [HTML] [edoverflow/proof-of-concepts](https://github.com/edoverflow/proof-of-concepts) A little collection of fun and creative proof of concepts to demonstrate the potential impact of a security vulnerability.
+- [**118**Star][6d] [Py] [domainaware/parsedmarc](https://github.com/domainaware/parsedmarc) 解析DMARC报告的Python脚本, 含cli
+- [**118**Star][3m] [PS] [danmcinerney/pymetasploit3](https://github.com/danmcinerney/pymetasploit3) Automation library for Metasploit
+- [**118**Star][5y] [Shell] [d4rkcat/handshaker](https://github.com/d4rkcat/handshaker) Detect, capture, crack WPA/2 handshakes, WEP Keys and geotag with Android GPS
+- [**118**Star][8y] [C] [cr4sh/ioctlfuzzer](https://github.com/cr4sh/ioctlfuzzer) Automatically exported from code.google.com/p/ioctlfuzzer
+- [**118**Star][1m] [Py] [containers/udica](https://github.com/containers/udica) This repository contains a tool for generating SELinux security profiles for containers
+- [**118**Star][1y] [Py] [amossys/memitm](https://github.com/amossys/memitm) Tool to make in memory man in the middle
+- [**117**Star][13d] [Py] [meliot/shcheck](https://github.com/meliot/shcheck) check security headers on a target website
+- [**117**Star][2y] [Py] [willphillipscvdemo/raspberry-pi-camera-motion-detection.](https://github.com/willphillipscvdemo/raspberry-pi-camera-motion-detection.) Using Python code with a Raspberry-Pi, PIR motion and a Picamera, you can create a device which will email you a snapshot image when someone enters your room.
+- [**117**Star][1y] [C#] [vulnerator/vulnerator](https://github.com/vulnerator/vulnerator) The official distribution of the vulnerability parsing utility.
+- [**117**Star][3y] [Py] [violentshell/rollmac](https://github.com/violentshell/rollmac) Automated WiFi limit evasion
+- [**117**Star][4y] [Lua] [ulissescastro/linux-native-backdoors](https://github.com/ulissescastro/linux-native-backdoors) Repository holding all alternatives of *nix backdoors.
+- [**117**Star][4y] [Go] [tutumcloud/ngrok](https://github.com/tutumcloud/ngrok) Introspected tunnels to localhost
+- [**117**Star][9m] [Java] [turing-technician/virtualfasthook](https://github.com/turing-technician/virtualfasthook) Android application hooking tool based on FastHook + VirtualApp
+- [**117**Star][3m] [PS] [thom-s/netsec-ps-scripts](https://github.com/thom-s/netsec-ps-scripts) Collection of PowerShell network security scripts for system administrators.
+- [**117**Star][2y] [ObjC] [theori-io/zer0con2018_singi](https://github.com/theori-io/zer0con2018_singi)
+- [**117**Star][2y] [C++] [sysml/clickos](https://github.com/sysml/clickos) The Click modular router: fast modular packet processing and analysis
+- [**117**Star][5y] [C] [squiffy/masochist](https://github.com/squiffy/masochist) XNU Rootkit Framework
+- [**117**Star][5m] [Java] [spoofzu/deepviolet](https://github.com/spoofzu/deepviolet) Tool for introspection of SSL\TLS sessions
+- [**117**Star][5y] [C] [shellntel/backdoors](https://github.com/shellntel/backdoors)
+- [**117**Star][17d] [Py] [saucer-man/saucerframe](https://github.com/saucer-man/saucerframe) python3批量poc检测工具
+- [**117**Star][8m] [C] [rednaga/native-shim](https://github.com/rednaga/native-shim) A "shim" for loading native jni files for Android active debugging
+- [**117**Star][3y] [Java] [rafaeltoledo/android-security](https://github.com/rafaeltoledo/android-security) An app showcase of some techniques to improve Android app security
+- [**117**Star][9d] [Py] [perfectblue/ctf-writeups](https://github.com/perfectblue/ctf-writeups) Perfect Blue's CTF Writeups
+- [**117**Star][11m] [Shell] [patpadgett/corkscrew](https://github.com/patpadgett/corkscrew) Corkscrew is a tool for tunneling SSH through HTTP proxies.
+- [**117**Star][3y] [Py] [nitr4x/whichcdn](https://github.com/nitr4x/whichcdn) WhichCDN allows to detect if a given website is protected by a Content Delivery Network
+- [**117**Star][3y] [Py] [nccgroup/hodor](https://github.com/nccgroup/hodor) Hodor! Fuzzer..
+- [**117**Star][2y] [PS] [javelinnetworks/ir-tools](https://github.com/javelinnetworks/ir-tools) forensics of domain based attacks on an infected host
+- [**117**Star][2m] [Py] [hugsy/stuff](https://github.com/hugsy/stuff) Misc tools for reversing, exploit and pentest
+- [**117**Star][3y] [Py] [honeynet/cuckooml](https://github.com/honeynet/cuckooml) Machine Learning for Cuckoo Sandbox
+- [**117**Star][5y] [JS] [hadynz/xss-keylogger](https://github.com/hadynz/xss-keylogger) A keystroke logger to exploit XSS vulnerabilities in a site - for my personal Educational purposes only
+- [**117**Star][13d] [Py] [gridsync/gridsync](https://github.com/gridsync/gridsync) Synchronize local directories with Tahoe-LAFS storage grids
+- [**117**Star][5y] [Py] [gdssecurity/jetleak-testing-script](https://github.com/gdssecurity/jetleak-testing-script) Script to test if a server is vulnerable to the JetLeak vulnerability
+- [**117**Star][2y] [Py] [functionclub/uping](https://github.com/functionclub/uping) 一个24小时监测VPS延迟的工具
+- [**117**Star][2y] [Py] [ecapuano/web-traffic-generator](https://github.com/ecapuano/web-traffic-generator) A quick and dirty HTTP/S "organic" traffic generator.
+- [**117**Star][4y] [Shell] [dholm/dotgdb](https://github.com/dholm/dotgdb) GDB scripts to add support for low level debugging and reverse engineering
+- [**117**Star][3y] [PHP] [dhayalanb/windows-php-reverse-shell](https://github.com/dhayalanb/windows-php-reverse-shell) Simple php reverse shell implemented using binary .
+- [**117**Star][7m] [Py] [danmcinerney/device-pharmer](https://github.com/danmcinerney/device-pharmer) Opens 1K+ IPs or Shodan search results and attempts to login
+- [**117**Star][5d] [Go] [cyberark/secretless-broker](https://github.com/cyberark/secretless-broker) Secure your apps by making them Secretless
+- [**117**Star][4y] [Py] [cvvt/dumpdex](https://github.com/cvvt/dumpdex) IDA python script to dynamically dump DEX in memory
+- [**117**Star][2y] [Ruby] [bsidessf/ctf-2017-release](https://github.com/bsidessf/ctf-2017-release) Our released code for BSidesSF CTF 2017
+- [**117**Star][1y] [Py] [bo0om/safiler](https://github.com/bo0om/safiler) Safari local file reader
+- [**117**Star][4m] [Py] [bastibl/gr-keyfob](https://github.com/bastibl/gr-keyfob) Transceiver for Hella wireless car key fobs.
+- [**117**Star][2m] [Java] [auth0/lock.android](https://github.com/auth0/lock.android) Android Library to authenticate using Auth0 and with a Native Look & Feel
+- [**117**Star][1m] [Java] [aramrami/owasp-csrfguard](https://github.com/aramrami/owasp-csrfguard) OWASP CSRFGuard 3.1.0
+- [**117**Star][1y] [Go] [aprosvetova/xiaomi-kettle](https://github.com/aprosvetova/xiaomi-kettle) Xiaomi Kettle BLE protocol reverse-engineered
+- [**117**Star][10m] [C] [adrianyy/rw_socket_driver](https://github.com/adrianyy/rw_socket_driver) Driver that uses network sockets to communicate with client and read/ write protected process memory.
+- [**117**Star][2y] [C++] [0xphoenix/mazewalker](https://github.com/0xphoenix/mazewalker) Toolkit for enriching and speeding up static malware analysis
+ - [mazeui](https://github.com/0xphoenix/mazewalker/blob/master/MazeUI/mazeui.py) 在IDA中显示界面
+ - [PyScripts](https://github.com/0xPhoeniX/MazeWalker/tree/master/MazeTracer/PyScripts) Python脚本,处理收集到的数据
+ - [PinClient](https://github.com/0xPhoeniX/MazeWalker/tree/master/MazeTracer/src)
+- [**116**Star][1y] [C++] [lincolnhard/openpose-darknet](https://github.com/lincolnhard/openpose-darknet) Openpose implementation using darknet
+- [**116**Star][3y] [PHP] [ircmaxell/stauros](https://github.com/ircmaxell/stauros) A fast XSS sanitization library for PHP
+- [**116**Star][3y] [Shell] [cisco-talos/vboxhardening](https://github.com/cisco-talos/vboxhardening)
+- [**116**Star][23d] [Kotlin] [babylonhealth/certificate-transparency-android](https://github.com/babylonhealth/certificate-transparency-android) Certificate transparency for Android and Java
+- [**116**Star][8m] [C++] [ze0r/cve-2018-8639-exp](https://github.com/ze0r/cve-2018-8639-exp)
+- [**116**Star][3y] [Py] [y1ng1996/f-scrack](https://github.com/y1ng1996/f-scrack)
+- [**116**Star][1y] [Py] [xerub/idastuff](https://github.com/xerub/idastuff) IDA Pro/Hexrays plugins, mainly targeted at ARM processors
+- [**116**Star][1y] [Py] [victims/victims-cve-db](https://github.com/victims/victims-cve-db) CVE database store
+- [**116**Star][10m] [C] [tylabs/quicksand_lite](https://github.com/tylabs/quicksand_lite) quicksand_lite:命令行工具,扫描 Office 文档 stream
+- [**116**Star][27d] [PHP] [tide-emergency/yingji](https://github.com/tide-emergency/yingji) 应急相关内容积累
+- [**116**Star][7m] [C] [tarlogicsecurity/tickey](https://github.com/tarlogicsecurity/tickey) Tool to extract Kerberos tickets from Linux kernel keys.
+- [**116**Star][2y] [C#] [tandasat/dotnethooking](https://github.com/tandasat/dotnethooking) Sample use cases of the .NET native code hooking technique
+- [**116**Star][1y] [Go] [t94j0/airmaster](https://github.com/t94j0/airmaster) Use ExpiredDomains.net and BlueCoat to find useful domains for red team.
+- [**116**Star][2y] [C++] [skylined/edgedbg](https://github.com/skylined/edgedbg) A simple command line exe to start and debug the Microsoft Edge browser.
+- [**116**Star][3m] [Shell] [shubhampathak/autosetup](https://github.com/shubhampathak/autosetup) Auto setup is a bash script compatible with Debian based distributions to install and setup necessary programs.
+- [**116**Star][3y] [Py] [shiva-spampot/shiva](https://github.com/shiva-spampot/shiva) Spam Honeypot with Intelligent Virtual Analyzer
+- [**116**Star][5m] [Py] [servian/aws-auto-remediate](https://github.com/servian/aws-auto-remediate) Open source application to instantly remediate common security issues through the use of AWS Config
+- [**116**Star][7y] [C] [secmobi/amatutor](https://github.com/secmobi/amatutor) Android恶意代码分析教程
+- [**116**Star][4m] [PS] [roflsandwich/chrome-password-dumper](https://github.com/roflsandwich/chrome-password-dumper)
+- [**116**Star][1y] [C] [nospaceships/raw-socket-sniffer](https://github.com/nospaceships/raw-socket-sniffer) Packet capture on Windows without a kernel driver
+- [**116**Star][11d] [Java] [nccgroup/decoder-improved](https://github.com/nccgroup/decoder-improved) Improved decoder for Burp Suite
+- [**116**Star][6m] [Shell] [moreseclab/ddg_malware_clean_tool](https://github.com/moreseclab/ddg_malware_clean_tool) Watchdogs 、kthrotlds 挖矿蠕虫清理脚本。
+- [**116**Star][12m] [C++] [melonwxd/elfhooker](https://github.com/melonwxd/elfhooker) 兼容Android 32位和64位。基于EFL文件格式Hook的demo,hook了SurfaceFlinger进程的eglSwapBuffers函数,替换为new_eglSwapBuffers
+- [**116**Star][1m] [Py] [markmckinnon/autopsy-plugins](https://github.com/markmckinnon/autopsy-plugins) Autopsy Python Plugins
+- [**116**Star][4y] [Py] [mandatoryprogrammer/xsshunter_client](https://github.com/mandatoryprogrammer/xsshunter_client) Correlated injection proxy tool for XSS Hunter
+- [**116**Star][9m] [C#] [linhlhq/cve-2019-0604](https://github.com/linhlhq/cve-2019-0604) CVE-2019-0604
+- [**116**Star][1y] [Py] [landgrey/cve-2018-2894](https://github.com/landgrey/cve-2018-2894) CVE-2018-2894 WebLogic Unrestricted File Upload Lead To RCE Check Script
+- [**116**Star][17d] [C#] [joelverhagen/torsharp](https://github.com/joelverhagen/torsharp) Use Tor for your C# HTTP clients. Tor + Privoxy =
+- [**116**Star][1y] [Py] [jin10086/ico-spider](https://github.com/jin10086/ico-spider) download ICO source code from etherscan
+- [**116**Star][2y] [C++] [iaik/drama](https://github.com/iaik/drama) This repository contains examples of DRAMA reverse-engineering and side-channel attacks
+- [**116**Star][1y] [Py] [graniet/inspector](https://github.com/graniet/inspector) The Inspector tool is a privilege escalation helper (PoC), easy to deployed on web server, this tool can list process running with root, check kernel version, check history file, get possible exploit ...
+- [**116**Star][1m] [govanguard/list-pentest-tools](https://github.com/govanguard/list-pentest-tools) A curated list of network penetration testing tools.
+- [**116**Star][3y] [C] [gdabah/distormx](https://github.com/gdabah/distormx) The ultimate hooking library
+- [**116**Star][2y] [Go] [evilsocket/dirsearch](https://github.com/evilsocket/dirsearch) A Go implementation of dirsearch.
+- [**116**Star][2y] [Java] [dannagle/packetsender-android](https://github.com/dannagle/packetsender-android) Packet Sender for Android, Send/Receive UDP/TCP
+- [**116**Star][11m] [C] [d00rt/emotet_research](https://github.com/d00rt/emotet_research) documentation about the packer of Emotet and its unpacker.
+- [**116**Star][4y] [C++] [critters/twang](https://github.com/critters/twang) Arduino-based 1D dungeon crawler
+- [**116**Star][5d] [C] [cr4sh/s6_pcie_microblaze](https://github.com/cr4sh/s6_pcie_microblaze) PCI Express DIY hacking toolkit for Xilinx SP605
+- [**116**Star][2y] [Py] [coffeehb/struts2_check](https://github.com/coffeehb/struts2_check) 一个用于识别目标网站是否采用Struts2框架开发的工具demo
+- [**116**Star][9y] [C] [chaoslawful/tcc](https://github.com/chaoslawful/tcc) track of Tiny C Compiler
+- [**116**Star][8y] [PHP] [cdhowie/bitcoin-mining-proxy](https://github.com/cdhowie/bitcoin-mining-proxy) Multi-pool, multi-worker proxy for Bitcoin miners, supporting long polling and pool failover
+- [**116**Star][6y] [caomulaodao/xss-filter-evasion-cheat-sheet-cn](https://github.com/caomulaodao/xss-filter-evasion-cheat-sheet-cn) XSS_Filter_Evasion_Cheat_Sheet 中文版
+- [**116**Star][1y] [JS] [brannondorsey/distributed-password-cracking](https://github.com/brannondorsey/distributed-password-cracking) Borrow CPU cycles from visitor's web browsers to crack MD5 password hashes
+- [**116**Star][17d] [C++] [b4rtik/metasploit-execute-assembly](https://github.com/b4rtik/metasploit-execute-assembly) Custom Metasploit post module to executing a .NET Assembly from Meterpreter session
+- [**116**Star][9m] [Py] [ambionics/magento-exploits](https://github.com/ambionics/magento-exploits) Exploits for Magento 2.3.0 and lower
+- [**116**Star][14d] [CMake] [abhi-r3v0/evabs](https://github.com/abhi-r3v0/evabs) An open source Android application that is intentionally vulnerable so as to act as a learning platform for Android application security beginners.
+- [**115**Star][4y] [C++] [cisco-talos/tesladecrypt](https://github.com/Cisco-Talos/TeslaDecrypt) Decryption Tool
+- [**115**Star][1y] [Py] [vallejocc/reverse-engineering-arsenal](https://github.com/vallejocc/Reverse-Engineering-Arsenal) Useful Scripts for helping in reverse engeenering
+ - [WinDbg](https://github.com/vallejocc/Reverse-Engineering-Arsenal/blob/master/WinDbg) WinDBG script collection
+ - [IDA-set_symbols_for_addresses](https://github.com/vallejocc/Reverse-Engineering-Arsenal/blob/master/IDA/set_symbols_for_addresses.py) asks you for a file containing pairs address - symbol. It walks all segments searching for DWORDs matching the addresses of the given file of pairs address - symbols, and it will name the variable containing the address with the symbol name
+ - [IDA-stack_strings_deobfuscator_1](https://github.com/vallejocc/Reverse-Engineering-Arsenal/blob/master/IDA/stack_strings_deobfuscator_1.py) Some malware families construct strings into the stack
+ - [RevealPE](https://github.com/vallejocc/Reverse-Engineering-Arsenal/tree/master/Standalone/RevealPE)
+- [**115**Star][3y] [C++] [yanncam/exe2powershell](https://github.com/yanncam/exe2powershell) exe2powershell - exe2bat reborn for modern Windows
+- [**115**Star][8m] [Py] [woj-ciech/pepe](https://github.com/woj-ciech/pepe) Collect information about email addresses from Pastebin
+- [**115**Star][1y] [Shell] [wknapik/vpnfailsafe](https://github.com/wknapik/vpnfailsafe) IP leak prevention for OpenVPN
+- [**115**Star][2y] [Py] [williballenthin/process-forest](https://github.com/williballenthin/process-forest) Reconstruct process trees from event logs
+- [**115**Star][12m] [HTML] [wifiphisher/extra-phishing-pages](https://github.com/wifiphisher/extra-phishing-pages) Community-built scenarios for Wifiphisher
+- [**115**Star][11m] [Py] [webbreacher/tilde_enum](https://github.com/webbreacher/tilde_enum) Takes a URL and checks the system for the tilde enum vuln and then find the files.
+- [**115**Star][1y] [Py] [verctor/cs_xor64](https://github.com/verctor/cs_xor64) cobaltstrike xor64.bin补完计划
+- [**115**Star][2y] [C] [valentinbreiz/ps4-linux-loader](https://github.com/valentinbreiz/ps4-linux-loader) A simple payload that let you run Linux on your 4.05 / 4.55 / 5.01 / 5.05 PS4
+- [**115**Star][19d] [Shell] [therealsaumil/armx](https://github.com/therealsaumil/armx) ARM-X Firmware Emulation Framework
+- [**115**Star][1y] [Shell] [theflakes/ultimate-forensics-vm](https://github.com/theflakes/ultimate-forensics-vm) Evolving directions on building the best Open Source Forensics VM
+- [**115**Star][8m] [AppleScript] [rtrouton/payload-free-package-creator](https://github.com/rtrouton/payload-free-package-creator)
+- [**115**Star][2y] [Py] [penafieljlm/inquisitor](https://github.com/penafieljlm/inquisitor) Opinionated organisation-centric OSINT footprinting inspired from recon-ng and Maltego
+- [**115**Star][3y] [Java] [njfox/java-deserialization-exploit](https://github.com/njfox/java-deserialization-exploit)
+- [**115**Star][5m] [Py] [n4nu/reversing-challenges-list](https://github.com/n4nu/reversing-challenges-list) CTF Reversing Challenges List
+- [**115**Star][5d] [C#] [metalnem/sharpfuzz](https://github.com/metalnem/sharpfuzz) AFL-based fuzz testing for .NET
+- [**115**Star][3y] [Java] [mbechler/serianalyzer](https://github.com/mbechler/serianalyzer) A static byte code analyzer for Java deserialization gadget research
+- [**115**Star][2y] [Ruby] [m4sc3r4n0/avoidz](https://github.com/m4sc3r4n0/avoidz) Avoidz tool to bypass most A.V softwares
+- [**115**Star][11m] [Py] [lucifer1993/alb](https://github.com/lucifer1993/alb) 攻击日志分析工具
+- [**115**Star][3y] [C++] [lcatro/vuln_javascript](https://github.com/lcatro/vuln_javascript) 模拟一个存在漏洞的JavaScript 运行环境,用来学习浏览器漏洞原理和练习如何编写Shellcode (a JavaScript Execute Envirment which study browser vuln and how to write Shellcode ) ..
+- [**115**Star][6d] [Py] [kmkz/exploit](https://github.com/kmkz/exploit) Exploits and advisories
+- [**115**Star][1y] [Py] [khast3x/offensive-dockerfiles](https://github.com/khast3x/offensive-dockerfiles) Offensive tools as Dockerfiles. Lightweight & Ready to go
+- [**115**Star][1m] [Py] [jpdias/botnet-lab](https://github.com/jpdias/botnet-lab) An IRC based tool for testing the capabilities of a botnet.
+- [**115**Star][2y] [Py] [jko/nsearch](https://github.com/jko/nsearch) minimal script to help find script into the nse database
+- [**115**Star][6y] [C#] [jerryhoff/webgoat.net](https://github.com/jerryhoff/webgoat.net) OWASP WebGoat.NET
+- [**115**Star][3m] [PS] [jcqsteven/ghosttunnel](https://github.com/jcqsteven/ghosttunnel) 基于360提出的Ghost Tunnel攻击复现
+- [**115**Star][1y] [C] [jas502n/cve-2018-17182](https://github.com/jas502n/cve-2018-17182) Linux 内核VMA-UAF 提权漏洞(CVE-2018-17182),0day
+- [**115**Star][1y] [Py] [jamesjgoodwin/wreckuests](https://github.com/jamesjgoodwin/wreckuests) Wreckuests — yet another one hard-hitting tool to run DDoS atacks with HTTP-flood
+- [**115**Star][9y] [C] [ice799/ltrace](https://github.com/ice799/ltrace) ltrace intercepts and records dynamic library calls which are called by an executed process and the signals received by that process. It can also intercept and print the system calls executed by the program.
+- [**115**Star][2y] [C] [harsaroopdhillon/spectreexploit](https://github.com/harsaroopdhillon/spectreexploit) SpectreExploit POC
+- [**115**Star][5y] [Py] [h01/proxyscanner](https://github.com/h01/proxyscanner) python HTTP代理扫描
+- [**115**Star][8m] [C] [govolution/avepoc](https://github.com/govolution/avepoc) avepoc:一些免杀的 poc
+- [**115**Star][2y] [gfwlist/tinylist](https://github.com/gfwlist/tinylist) Tiny version of gfwlist, focusing on common websites ONLY
+- [**115**Star][12m] [PS] [fox-it/invoke-credentialphisher](https://github.com/fox-it/invoke-credentialphisher)
+- [**115**Star][4y] [JS] [demi6od/chromefuzzer](https://github.com/demi6od/chromefuzzer) fuzz
+- [**115**Star][2y] [Py] [cantoolz/cantoolz](https://github.com/cantoolz/cantoolz) CANToolz - Black-box CAN network analysis framework
+- [**115**Star][3y] [C] [c0d3z3r0/sudo-cve-2017-1000367](https://github.com/c0d3z3r0/sudo-cve-2017-1000367)
+- [**115**Star][3y] [Batchfile] [bartblaze/disable-intel-amt](https://github.com/bartblaze/disable-intel-amt) Tool to disable Intel AMT on Windows
+- [**115**Star][4m] [Java] [andprox/andprox](https://github.com/andprox/andprox) Native Android Proxmark3 client (no root required)
+- [**115**Star][1m] [JS] [acmbvp/hacktoberfest](https://github.com/acmbvp/hacktoberfest) Make your first PR! ~ A beginner friendly repository made specifically for open source beginners. Add your profile, a blog or any program under any language (it can be anything from a hello-world program to a complex data structure algorithm) or update the existing one. Just make sure to add the file under the correct directory. Happy hacking!
+- [**115**Star][3m] [Py] [360netlab/dga](https://github.com/360netlab/dga) Suspicious DGA from PDNS and Sandbox.
+- [**114**Star][8y] [C++] [moxie0/tortunnel](https://github.com/moxie0/tortunnel) A partial Onion Proxy implementation that's designed to build single-hop circuits through Tor exit nodes
+- [**114**Star][1y] [Shell] [fox-it/linux-luks-tpm-boot](https://github.com/fox-it/linux-luks-tpm-boot) A guide for setting up LUKS boot with a key from TPM in Linux
+- [**114**Star][5m] [PHP] [m0xiaoxi/ctf_web_docker](https://github.com/m0xiaoxi/ctf_web_docker) dockers for CTF_Web.
+- [**114**Star][4d] [Py] [realsanjay/domainrecon](https://github.com/realsanjay/DomainRecon) Based on URL and Organization Name, collect the IP Ranges, subdomains using various tools like Amass, subfinder, etc.. And check for uphost and Run Masscan to grap CNAME entries, take the screenshot of all the found subdomains using WebScreeShot and more...
+- [**114**Star][2y] [JS] [fsecurelabs/cve-2018-4121](https://github.com/FSecureLABS/CVE-2018-4121) macOS 10.13.3 (17D47) Safari Wasm Exploit
+- [**114**Star][10m] [Ruby] [hdm/inetdata](https://github.com/hdm/inetdata) Internet data acquisition
+- [**114**Star][11m] [C] [zombiecraig/uds-server](https://github.com/zombiecraig/uds-server) CAN UDS Simulator and Fuzzer
+- [**114**Star][8d] [C] [zmrbak/pcwechathook](https://github.com/zmrbak/pcwechathook) 云课堂《2019 PC微信 探秘》示例代码
+- [**114**Star][6d] [Rust] [zcash/librustzcash](https://github.com/zcash/librustzcash) Rust-language assets for Zcash
+- [**114**Star][2y] [C] [xiphosresearch/netelf](https://github.com/xiphosresearch/netelf) Run executables from memory, over the network, on Windows, Linux, OpenVMS... routers... spaceships... toasters etc.
+- [**114**Star][2y] [wpvsyou/mprop](https://github.com/wpvsyou/mprop) 修改Android prop脚本工具
+- [**114**Star][2y] [C++] [waryas/eupmaccess](https://github.com/waryas/eupmaccess) This DKOM exploit enables any app in usermode to access physical memory directly
+- [**114**Star][6m] [C#] [tyranid/canape.core](https://github.com/tyranid/canape.core) A network proxy library written in C# for .NET Core based on CANAPE
+- [**114**Star][6y] [CSS] [syphon1c/threatelligence](https://github.com/syphon1c/threatelligence) Threatelligence is a simple cyber threat intelligence feed collector, using Elasticsearch, Kibana and Python to automatically collect intelligence from custom or public sources. Automatically updates feeds and tries to further enhance data for dashboards.
+- [**114**Star][16d] [Java] [stringcare/androidlibrary](https://github.com/stringcare/androidlibrary) Android library to reveal or obfuscate strings and assets at runtime
+- [**114**Star][6y] [spiderlabs/sqlol](https://github.com/spiderlabs/sqlol) A configurable SQL injection test-bed
+- [**114**Star][2y] [Ruby] [skahwah/wordsmith](https://github.com/skahwah/wordsmith) The aim of Wordsmith is to assist with creating tailored wordlists. This is mostly based on geolocation.
+- [**114**Star][11m] [Py] [saaramar/35c3_modern_windows_userspace_exploitation](https://github.com/saaramar/35c3_modern_windows_userspace_exploitation)
+- [**114**Star][3y] [C] [rosgos/mirai-source-code](https://github.com/rosgos/mirai-source-code)
+- [**114**Star][4y] [Perl] [reider-roque/pentest-tools](https://github.com/reider-roque/pentest-tools) Penetration testing scripts
+- [**114**Star][4y] [Ruby] [patio11/wrightverification](https://github.com/patio11/wrightverification) (Failed) verification of the signature posted by Craig Wright on May 2, 2016
+- [**114**Star][3y] [Java] [nil1666/auditdroid](https://github.com/nil1666/auditdroid) AduitDroid
+- [**114**Star][15d] [C#] [mr-un1k0d3r/minidump](https://github.com/mr-un1k0d3r/minidump) alternative to procdump
+- [**114**Star][6d] [Shell] [misp/misp-book](https://github.com/misp/misp-book) User guide of MISP
+- [**114**Star][5m] [Py] [marcoramilli/malwaretrainingsets](https://github.com/marcoramilli/malwaretrainingsets) Free Malware Training Datasets for Machine Learning
+- [**114**Star][1y] [C#] [malcomvetter/managedinjection](https://github.com/malcomvetter/managedinjection) A proof of concept for dynamically loading .net assemblies at runtime with only a minimal convention pre-knowledge
+- [**114**Star][3y] [C#] [leurak/trollrat](https://github.com/leurak/trollrat) A remote trolling software mainly intended for Tech Support Scammers.
+- [**114**Star][4y] [C] [kpwn/nullguard](https://github.com/kpwn/nullguard) kext kills all 32bit binaries lacking __PAGEZERO (required for exploitation of kernel NULL derefs)
+- [**114**Star][2y] [JS] [jaimehgb/raiwebwallet](https://github.com/jaimehgb/raiwebwallet) Raiblocks raiwallet.com wallet source code
+- [**114**Star][3m] [Go] [eaglexiang/eagle.tunnel.go](https://github.com/eaglexiang/eagle.tunnel.go) 稳定的代理工具,比.NET版本更轻量和易用
+- [**114**Star][7m] [PS] [dviros/excalibur](https://github.com/dviros/excalibur) Excalibur is an Eternalblue exploit payload based "Powershell" for the Bashbunny project.
+- [**114**Star][2y] [Py] [dragon2fly/vpngate-with-proxy](https://github.com/dragon2fly/vpngate-with-proxy) vpn gate client for linux, be able to connect to open vpn server through proxy
+- [**114**Star][6y] [Py] [digital4rensics/malformity](https://github.com/digital4rensics/malformity) Malformity is a Maltego project based on the Canari framework for malicious binary and infrastructure research.
+- [**114**Star][2m] [Shell] [darkerego/mips-binaries](https://github.com/darkerego/mips-binaries) Various binaries for the mips architecture.
+- [**114**Star][4y] [Py] [danmcinerney/wifi-monitor](https://github.com/danmcinerney/wifi-monitor) Prints the IPs on your local network that're sending the most packets
+- [**114**Star][2d] [Shell] [concourse/git-resource](https://github.com/concourse/git-resource) tracks commits in a branch of a Git repository
+- [**114**Star][4m] [JS] [baronpan/sysmonhunter](https://github.com/baronpan/sysmonhunter) An easy ATT&CK-based Sysmon hunting tool, showing in Blackhat USA 2019 Arsenal
+- [**114**Star][4y] [Shell] [anbud/droidducky](https://github.com/anbud/droidducky) SImple duckyscript interpreter in Bash.
+- [**114**Star][2y] [Ruby] [airbus-seclab/warbirdvm](https://github.com/airbus-seclab/warbirdvm) An analysis of the Warbird virtual-machine protection for the CI!g_pStore
+- [**114**Star][1y] [Py] [abhinavbom/threat-intelligence-hunter](https://github.com/abhinavbom/threat-intelligence-hunter) TIH is an intelligence tool that helps you in searching for IOCs across multiple openly available security feeds and some well known APIs. The idea behind the tool is to facilitate searching and storing of frequently added IOCs for creating your own local database of indicators.
+- [**114**Star][9m] [C] [a13xp0p0v/kernel-hack-drill](https://github.com/a13xp0p0v/kernel-hack-drill) Linux kernel exploitation experiments
+- [**113**Star][7m] [Py] [decalage2/olefile](https://github.com/decalage2/olefile) olefile is a Python package to parse, read and write Microsoft OLE2 files (also called Structured Storage, Compound File Binary Format or Compound Document File Format), such as Microsoft Office 97-2003 documents, vbaProject.bin in MS Office 2007+ files, Image Composer and FlashPix files, Outlook messages, StickyNotes, several Microscopy file fo…
+- [**113**Star][3y] [wtsxdev/vehicle-security](https://github.com/wtsxdev/vehicle-security) List of resources for learning about vehicle security and car hacking
+- [**113**Star][2m] [C#] [infosecn1nja/sharpdoor](https://github.com/infosecn1nja/sharpdoor) SharpDoor is alternative RDPWrap written in C# to allowed multiple RDP (Remote Desktop) sessions by patching termsrv.dll file.
+- [**113**Star][9d] [portswigger/xss-cheatsheet-data](https://github.com/portswigger/xss-cheatsheet-data) This repository contains all the XSS cheatsheet data to allow contributions from the community.
+- [**113**Star][5y] [Py] [nccgroup/zulu](https://github.com/nccgroup/zulu) The Zulu fuzzer
+- [**113**Star][3y] [Objective-C++] [yonsm/ipafine](https://github.com/yonsm/ipafine) iOS IPA package refine and resign
+- [**113**Star][4y] [C] [wireshark/winpcap](https://github.com/wireshark/winpcap) The WinPcap packet capture library. Pull requests will be ignored. Please upload changes to
+- [**113**Star][4m] [we5ter/flerken](https://github.com/we5ter/flerken) A Solution For Cross-Platform Obfuscated Commands Detection
+- [**113**Star][1y] [Py] [securityclippy/elasticintel](https://github.com/securityclippy/elasticintel) Serverless, low cost, threat intel aggregation for enterprise or personal use, backed by ElasticSearch.
+- [**113**Star][1y] [C++] [scgywx/fooking](https://github.com/scgywx/fooking) distributed gateway server(php game server, tcp server, websocket server)
+- [**113**Star][1y] [Shell] [peterpt/eternal_check](https://github.com/peterpt/eternal_check) 检查指定IP是否有某些SMB漏洞, 比如永恒之蓝. 基于nmap
+- [**113**Star][23d] [Py] [p4-team/crypto-commons](https://github.com/p4-team/crypto-commons) Small python module for common CTF crypto functions
+- [**113**Star][1m] [C#] [oj/clr-meterpreter](https://github.com/oj/clr-meterpreter) The full story of the CLR implementation of Meterpreter
+- [**113**Star][10m] [HTML] [mpgn/byp-sop](https://github.com/mpgn/byp-sop) 🏴☠️ Bypass Same Origin Policy with DNS-rebinding to retrieve local server files 🏴☠️
+- [**113**Star][2y] [JS] [landgrey/dnstricker](https://github.com/landgrey/dnstricker) A simple dns resolver of dns-record and web-record log server for pentesting
+- [**113**Star][7m] [C] [jakkarth/icmptx](https://github.com/jakkarth/icmptx) IP-over-ICMP tunnel
+- [**113**Star][5m] [Java] [guardianproject/iocipher](https://github.com/guardianproject/iocipher) make non-root mountable encrypted disk shares
+- [**113**Star][3y] [PS] [fuzzysecurity/defcon24](https://github.com/fuzzysecurity/defcon24) DefCon24
+- [**113**Star][10m] [Py] [fupinglee/mypython](https://github.com/fupinglee/mypython) 一些常用的Python脚本
+- [**113**Star][7m] [fabionoth/awesome-cyber-security](https://github.com/fabionoth/awesome-cyber-security) A collection of awesome software, libraries, documents, books, resources and cools stuffs about security.
+- [**113**Star][3y] [Py] [exodusintel/disclosures](https://github.com/exodusintel/disclosures) all of Exodus Intelligence's disclosure material
+- [**113**Star][4y] [Java] [evilsocket/pdusms](https://github.com/evilsocket/pdusms) PoC app for raw pdu manipulation on Android.
+- [**113**Star][6y] [edthamm/lootbooty](https://github.com/edthamm/lootbooty) WIreless Hacking Tools
+- [**113**Star][7m] [Visual Basic .NET] [dzzie/comraider](https://github.com/dzzie/comraider) ActiveX Fuzzing tool with GUI, object browser, system scanner, and distributed auditing capabilities
+- [**113**Star][6m] [Py] [drego85/joomlascan](https://github.com/drego85/joomlascan) A free software to find the components installed in Joomla CMS, built out of the ashes of Joomscan.
+- [**113**Star][8m] [C++] [dragonquesthero/pubg-pak-hacker](https://github.com/dragonquesthero/pubg-pak-hacker) use windows kernel deriver hidden file and itself to Bypass BE
+- [**113**Star][11d] [Shell] [diladele/websafety](https://github.com/diladele/websafety) Simple and powerful web filter for HTTP and HTTPS traffic
+- [**113**Star][5y] [Shell] [denny0223/scrabble](https://github.com/denny0223/scrabble) Simple tool to recover .git folder from remote server
+- [**113**Star][5m] [C#] [decoder-it/powershellveryless](https://github.com/decoder-it/powershellveryless) Constrained Language Mode + AMSI bypass all in one
+- [**113**Star][4y] [C++] [chengchengcc/ark-tools](https://github.com/chengchengcc/ark-tools) Windows Ark tools and demo
+- [**113**Star][2m] [bugcrowd/disclosure-policy](https://github.com/bugcrowd/disclosure-policy) Open Source Vulnerability Disclosure Framework. Maintained by Bugcrowd.
+- [**113**Star][3y] [Py] [bjmayor/hacker](https://github.com/bjmayor/hacker) python绝技:运用python成为顶级黑客 这本书的源码
+- [**112**Star][6m] [PS] [nsacyber/nsacyber.github.io](https://github.com/nsacyber/nsacyber.github.io) NSA Cybersecurity. Formerly known as NSA Information Assurance and the Information Assurance Directorate
+- [**112**Star][6m] [v2rayv3/v2ray-sspanel-v3-mod_uim-plugin](https://github.com/v2rayv3/v2ray-sspanel-v3-mod_uim-plugin)
+- [**112**Star][1m] [Py] [prodigysml/dr.-watson](https://github.com/prodigysml/dr.-watson) Dr. Watson is a simple Burp Suite extension that helps find assets, keys, subdomains, IP addresses, and other useful information! It's your very own discovery side kick, the Dr. Watson to your Sherlock!
+- [**112**Star][2m] [C++] [outflanknl/recon-ad](https://github.com/outflanknl/recon-ad) Recon-AD, an AD recon tool based on ADSI and reflective DLL’s
+- [**112**Star][9m] [HTML] [xuechiyaobai/cve-2017-7092-poc](https://github.com/xuechiyaobai/CVE-2017-7092-PoC) This is the Pwn2Own 2017 Safari backup vul's exploit.
+- [**112**Star][2y] [Py] [simplysecurity/simplytemplate](https://github.com/SimplySecurity/SimplyTemplate) Phishing Template Generation Made Easy
+- [**112**Star][2y] [Py] [fsecurelabs/drozer-modules](https://github.com/FSecureLABS/drozer-modules) leading security testing framework for Android.
+- [**112**Star][8m] [PHP] [xplico/xplico](https://github.com/xplico/xplico) Open Source Network Forensic Analysis Tool (NFAT)
+- [**112**Star][3m] [C++] [x64dbg/scripts](https://github.com/x64dbg/scripts) A collection of x64dbg scripts. Feel free to submit a pull request to add your script.
+- [**112**Star][9m] [Py] [williballenthin/evtxtract](https://github.com/williballenthin/evtxtract) EVTXtract recovers and reconstructs fragments of EVTX log files from raw binary data, including unallocated space and memory images.
+- [**112**Star][1y] [C] [vusec/hammertime](https://github.com/vusec/hammertime) a software suite for testing, profiling and simulating the Rowhammer DRAM defect, built on top of the RAMSES address translation library.
+- [**112**Star][8m] [Py] [tkisason/unhash](https://github.com/tkisason/unhash) unhash is a set of tools designed to enable better password auditing
+- [**112**Star][6m] [Vue] [tevora-threat/dragnet](https://github.com/tevora-threat/dragnet) Your Social Engineering Sidekick
+- [**112**Star][7y] [Py] [sroberts/malwarehouse](https://github.com/sroberts/malwarehouse) A warehouse for your malware
+- [**112**Star][2y] [Py] [sithis993/crypter](https://github.com/sithis993/crypter) Crypter - Python-based builder and ransomware compiled to Windows executable using PyInstaller
+- [**112**Star][6m] [Py] [ruped24/killchain](https://github.com/ruped24/killchain) A unified console to perform the "kill chain" stages of attacks.
+- [**112**Star][11m] [C] [rup0rt/pcapfix](https://github.com/rup0rt/pcapfix) repair corrupted pcap files
+- [**112**Star][1y] [ridter/cs_chinese_support](https://github.com/ridter/cs_chinese_support) Cobalt strike 修改支持回显中文。
+- [**112**Star][10m] [Py] [plazmaz/sublist3r](https://github.com/plazmaz/sublist3r) Fast subdomains enumeration tool for penetration testers
+- [**112**Star][2y] [Shell] [pimps/wsuxploit](https://github.com/pimps/wsuxploit) wsuxploit:MiTM 漏洞利用脚本,用于将“假冒”更新注入到非 SSL WSUS 流量中
+- [**112**Star][2y] [Py] [orange-cyberdefense/fenrir-ocd](https://github.com/orange-cyberdefense/fenrir-ocd)
+- [**112**Star][11m] [C] [opsxcq/docker-tor-hiddenservice-nginx](https://github.com/opsxcq/docker-tor-hiddenservice-nginx) Easily setup a hidden service inside the Tor network
+- [**112**Star][5y] [opendns/public-domain-lists](https://github.com/opendns/public-domain-lists) OpenDNS public domain lists of domain names for training/testing classifiers
+- [**112**Star][6m] [C++] [nospaceships/node-raw-socket](https://github.com/nospaceships/node-raw-socket) Raw sockets for Node.js.
+- [**112**Star][3y] [netbiosx/pentest-bookmarks](https://github.com/netbiosx/pentest-bookmarks) Database of websites for penetration testing
+- [**112**Star][3y] [Py] [mthbernardes/artlas](https://github.com/mthbernardes/artlas) Apache Real Time Logs Analyzer System
+- [**112**Star][6y] [C] [mncoppola/rpef](https://github.com/mncoppola/rpef) Abstracts and expedites the process of backdooring stock firmware images for consumer/SOHO routers
+- [**112**Star][6d] [Java] [mkopylec/charon-spring-boot-starter](https://github.com/mkopylec/charon-spring-boot-starter) Reverse proxy implementation in form of a Spring Boot starter.
+- [**112**Star][5y] [C] [mirror/reactos](https://github.com/mirror/reactos) svn://svn.reactos.org/reactos/trunk
+- [**112**Star][8m] [marcosvalle/awesome-windows-red-team](https://github.com/marcosvalle/awesome-windows-red-team) A curated list of awesome Windows frameworks, libraries, software and resources for Red Teams
+- [**112**Star][4y] [Java] [ledgerhq/ledger-javacard](https://github.com/ledgerhq/ledger-javacard) Ledger Unplugged - Java Card implementation of Ledger Bitcoin Hardware Wallet
+- [**112**Star][29d] [Py] [hivesolutions/netius](https://github.com/hivesolutions/netius) Readable, simple and fast asynchronous non-blocking network apps
+- [**112**Star][12m] [JS] [google/csp-evaluator](https://github.com/google/csp-evaluator) check if a Content Security Policy (CSP) serves as a strong mitigation against cross-site scripting attacks
+- [**112**Star][11m] [Py] [ghost123gg/wep](https://github.com/ghost123gg/wep) A generator to weaponize Macro payloads that can evade EMET and utilises native VB migration.
+- [**112**Star][1y] [funnykun/nessusreportinchinese](https://github.com/funnykun/nessusreportinchinese) 半自动化将 Nessus 英文报告(csv格式)生成中文 excel ,中文漏洞库已有700多条常见漏洞,后续再进一步加上新漏洞自动翻译,实现全自动化
+- [**112**Star][4y] [Py] [ddcc/microparse](https://github.com/ddcc/microparse) Microcode parser for AMD, Intel, and VIA processors
+- [**112**Star][3y] [C++] [brock7/xdbg](https://github.com/brock7/xdbg) Open-source user-mode Anti-Anti-Debug plugin for x64dbg & cheatengine.
+- [**112**Star][1y] [Py] [blueudp/dorkme](https://github.com/blueudp/dorkme) [WORKING IN V2, WITH PROXIES, CUSTOM USER AGENT... TO MUCH BETTER!]DorkMe is a tool designed with the purpose of making easier the searching of vulnerabilities with Google Dorks, such as SQL Injection vulnerabilities.
+- [**112**Star][7m] [C++] [arno0x/tcprelayinjecter](https://github.com/arno0x/tcprelayinjecter) Tool for injecting a "TCP Relay" managed assembly into unmanaged processes
+- [**112**Star][4y] [Py] [androidsecuritytools/lobotomy](https://github.com/androidsecuritytools/lobotomy) Android Security Toolkit
+- [**112**Star][6m] [Py] [andreafioraldi/angrgdb](https://github.com/andreafioraldi/angrgdb) Use angr inside GDB. Create an angr state from the current debugger state.
+- [**112**Star][1y] [Py] [alienvault-otx/yabin](https://github.com/alienvault-otx/yabin) A Yara rule generator for finding related samples and hunting
+- [**112**Star][4y] [C++] [agwa/titus](https://github.com/agwa/titus) Totally Isolated TLS Unwrapping Server
+- [**112**Star][5y] [C++] [adamkramer/dll_hijack_detect](https://github.com/adamkramer/dll_hijack_detect) Detects DLL hijacking in running processes on Windows systems
+- [**112**Star][2y] [Py] [0x27/gitpass](https://github.com/0x27/gitpass) Open Source Your Password (Mismanagement)!
+- [**111**Star][12d] [Java] [tidesec/decrypt_weblogic_password](https://github.com/tidesec/decrypt_weblogic_password) 搜集了市面上绝大部分weblogic解密方式,整理了7种解密weblogic的方法及响应工具。
+- [**111**Star][6y] [Ruby] [spiderlabs/beef_injection_framework](https://github.com/spiderlabs/beef_injection_framework) Inject beef hooks into HTTP traffic and track hooked systems from cmdline
+- [**111**Star][10d] [CSS] [woj-ciech/kamerka-gui](https://github.com/woj-ciech/kamerka-gui) Ultimate Internet of Things/Industrial Control Systems reconnaissance tool.
+- [**111**Star][4y] [C] [nsacyber/maplesyrup](https://github.com/nsacyber/Maplesyrup) Assesses CPU security of embedded devices. #nsacyber
+- [**111**Star][7m] [Py] [w-digital-scanner/w12scan-client](https://github.com/w-digital-scanner/w12scan-client) 网络资产搜索发现引擎,w12scan 扫描端程序
+- [**111**Star][4m] [C] [zyw-200/firmafl](https://github.com/zyw-200/firmafl) FIRM-AFL is the first high-throughput greybox fuzzer for IoT firmware.
+- [**111**Star][6m] [Py] [webarx-security/wpbullet](https://github.com/webarx-security/wpbullet) A static code analysis for WordPress (and PHP)
+- [**111**Star][3y] [PS] [vletoux/ntlminjector](https://github.com/vletoux/ntlminjector) In case you didn't now how to restore the user password after a password reset (get the previous hash with DCSync)
+- [**111**Star][2y] [Py] [tothi/pwn-hisilicon-dvr](https://github.com/tothi/pwn-hisilicon-dvr)
+- [**111**Star][1y] [Py] [seifreed/malware-scripts](https://github.com/seifreed/malware-scripts) Useful scripts related with malware
+- [**111**Star][5m] [Py] [sagehack/cloud-buster](https://github.com/sagehack/cloud-buster) A Cloudflare resolver that works
+- [**111**Star][17d] [Clojure] [rm-hull/lein-nvd](https://github.com/rm-hull/lein-nvd) National Vulnerability Database dependency-checker plugin for Leiningen
+- [**111**Star][2y] [Perl] [raikia/smbcrunch](https://github.com/raikia/smbcrunch) 3 tools that work together to simplify reconaissance of Windows File Shares
+- [**111**Star][7m] [C++] [praetorian-code/vulcan](https://github.com/praetorian-code/vulcan) a tool to make it easy and fast to test various forms of injection
+- [**111**Star][2y] [C] [openjailbreak/evasi0n6](https://github.com/openjailbreak/evasi0n6) Evasi0n6 Jailbreak by Evad3rs for iOS 6.0-6.1.2
+- [**111**Star][12m] [PHP] [ollyxar/php-malware-detector](https://github.com/ollyxar/php-malware-detector) PHP malware detector
+- [**111**Star][2m] [Py] [nu1lctf/n1ctf-2019](https://github.com/nu1lctf/n1ctf-2019)
+- [**111**Star][11m] [Shell] [mi-al/wifi-autopwner](https://github.com/mi-al/wifi-autopwner) script to automate searching and auditing Wi-Fi networks with weak security
+- [**111**Star][5m] [Shell] [merces/bashacks](https://github.com/merces/bashacks) Set of functions to increase productivity while hacking with Bash
+- [**111**Star][4y] [C] [mariovilas/shellcode_tools](https://github.com/mariovilas/shellcode_tools) Miscellaneous tools written in Python, mostly centered around shellcodes.
+- [**111**Star][2y] [Go] [lloydlabs/elf-strings](https://github.com/lloydlabs/elf-strings) read an ELF binary's string sections within a given binary. This is meant to be much like the strings UNIX utility, however is purpose built for ELF binaries.
+- [**111**Star][7m] [Shell] [leviathan36/trigmap](https://github.com/leviathan36/trigmap) A wrapper for Nmap to automate penetration testing
+- [**111**Star][2y] [Py] [lcatro/php_source_audit_tools](https://github.com/lcatro/php_source_audit_tools) PHP 白盒分析工具,结合AST 和数据流跟踪分析代码,达到自动化白盒审计功能
+- [**111**Star][3y] [Py] [kudelskisecurity/sgxfun](https://github.com/kudelskisecurity/sgxfun) SGX command-line tools and paper
+- [**111**Star][3m] [Java] [kakawait/cas-security-spring-boot-starter](https://github.com/kakawait/cas-security-spring-boot-starter) Spring boot starter for Apereo CAS client fully integrated with Spring security
+- [**111**Star][11m] [C] [ionescu007/hdk](https://github.com/ionescu007/hdk) (unofficial) Hyper-V® Development Kit
+- [**111**Star][6y] [CSS] [httphacker/gethead](https://github.com/httphacker/gethead) HTTP Header Analysis Vulnerability Tool
+- [**111**Star][1y] [Py] [hook-s3c/cve-2018-11776-python-poc](https://github.com/hook-s3c/cve-2018-11776-python-poc) Working Python test and PoC for CVE-2018-11776, includes Docker lab
+- [**111**Star][2y] [Py] [hook-s3c/blueborne-scanner](https://github.com/hook-s3c/blueborne-scanner) Bluetooth scanner for local devices that may be vulnerable to Blueborne exploit
+- [**111**Star][25d] [C#] [gaprogman/owaspheaders.core](https://github.com/gaprogman/owaspheaders.core) A .NET Core middleware for injecting the Owasp recommended HTTP Headers for increased security
+- [**111**Star][16d] [Py] [flyingcircusio/vulnix](https://github.com/flyingcircusio/vulnix) Vulnerability (CVE) scanner for Nix/NixOS.
+- [**111**Star][1y] [Java] [despector/despector](https://github.com/despector/despector) Java / Kotlin Decompiler and AST Library
+- [**111**Star][1y] [C#] [damonmohammadbagher/meterpreter_payload_detection](https://github.com/damonmohammadbagher/meterpreter_payload_detection) Meterpreter_Payload_Detection.exe tool for detecting Meterpreter in memory like IPS-IDS and Forensics tool
+- [**111**Star][3y] [Py] [cornell-brg/pydgin](https://github.com/cornell-brg/pydgin) A (Py)thon (D)SL for (G)enerating (In)struction set simulators.
+- [**111**Star][3y] [Py] [codepr/creak](https://github.com/codepr/creak) Poison, reset, spoof, redirect MITM script
+- [**111**Star][2m] [checkmarx/js-scp](https://github.com/checkmarx/js-scp) JavaScript Secure Coding Practices guide
+- [**111**Star][2y] [Py] [cfsworks/wavebird-reversing](https://github.com/cfsworks/wavebird-reversing) Reverse-engineering the WaveBird protocol for the betterment of mankind
+- [**111**Star][2y] [Py] [cert-w/certitude](https://github.com/cert-w/certitude) The Seeker of IOC
+- [**111**Star][2y] [carloop/simulator](https://github.com/carloop/simulator) CAN bus simulator on the Rasperry Pi
+- [**111**Star][8d] [Py] [brieflyx/ctf-pwns](https://github.com/brieflyx/ctf-pwns) Some pwn challenges selected for training and education.
+- [**111**Star][2m] [Py] [bishopfox/zigdiggity](https://github.com/bishopfox/zigdiggity) A ZigBee hacking toolkit by Bishop Fox
+- [**111**Star][1y] [JS] [austintgriffith/bouncer-proxy](https://github.com/austintgriffith/bouncer-proxy) 👮🏻
+- [**111**Star][7m] [PS] [audibleblink/gorsh](https://github.com/audibleblink/gorsh) A Golang Reverse Shell w/ a Tmux-driven psuedo-C2 Interface
+- [**111**Star][3y] [PS] [arno0x/dnsdelivery](https://github.com/arno0x/dnsdelivery) DNSDelivery provides delivery and in memory execution of shellcode or .Net assembly using DNS requests delivery channel.
+- [**111**Star][2y] [Shell] [adrelanos/vpn-firewall](https://github.com/adrelanos/vpn-firewall) Leak Protection (Fail Safe Mechanism) for (Open)VPN
+- [**110**Star][1m] [C] [hasherezade/chimera_pe](https://github.com/hasherezade/chimera_pe) ChimeraPE (a PE injector type - alternative to: RunPE, ReflectiveLoader, etc) - a template for manual loading of EXE, loading imports payload-side
+- [**110**Star][3m] [suricata-rules/suricata-rules](https://github.com/suricata-rules/suricata-rules) Suricata IDS rules
+- [**110**Star][3m] [C++] [barakat/cve-2019-16098](https://github.com/barakat/cve-2019-16098) Local privilege escalation PoC exploit for CVE-2019-16098
+- [**110**Star][1m] [Py] [yuawn/ctf](https://github.com/yuawn/CTF) CTF write-ups and some wargame sites write-ups.
+- [**110**Star][2y] [optixal/cehv10-notes](https://github.com/Optixal/CEHv10-Notes)
+- [**110**Star][8d] [Py] [bit4woo/code2sec.com](https://github.com/bit4woo/code2sec.com) xmind\code\articles for my personal blog 个人博客上的资源备份存储,也是个人分享的汇总
+- [**110**Star][2y] [Smali] [xxxyanchenxxx/sigkill](https://github.com/xxxyanchenxxx/sigkill) 一键绕过App签名验证
+- [**110**Star][2y] [Java] [x-ai/burpunlimitedre](https://github.com/x-ai/burpunlimitedre) This project !replace! BurpUnlimited of depend (BurpSutie version 1.7.27). It is NOT intended to replace them!
+- [**110**Star][2y] [JS] [voidsec/webrtc-leak](https://github.com/voidsec/webrtc-leak) Check if your VPN leaks your IP address via the WebRTC technology
+- [**110**Star][1y] [Py] [unixfreak0037/officeparser](https://github.com/unixfreak0037/officeparser) Extract embedded files and macros from office documents.
+- [**110**Star][5m] [Go] [sudosammy/knary](https://github.com/sudosammy/knary) A simple HTTP(S) and DNS Canary bot with Slack/Discord/MS Teams & Pushover support
+- [**110**Star][9m] [C] [strivexjun/memorymodulepp](https://github.com/strivexjun/memorymodulepp) Library to load a DLL from memory
+- [**110**Star][2m] [C] [sipcapture/captagent](https://github.com/sipcapture/captagent) 100% Open-Source Packet Capture Agent for HEP
+- [**110**Star][2d] [Go] [sero-cash/go-sero](https://github.com/sero-cash/go-sero) The Total Solution for Blockchain with Privacy Protecting
+- [**110**Star][5y] [Ruby] [sensepost/heartbleed-poc](https://github.com/sensepost/heartbleed-poc) Test for SSL heartbeat vulnerability (CVE-2014-0160)
+- [**110**Star][10d] [C] [scribery/tlog](https://github.com/scribery/tlog) Terminal I/O logger
+- [**110**Star][3y] [Py] [samgranger/eqgrp](https://github.com/samgranger/eqgrp) Mirror
+- [**110**Star][2y] [ObjC] [rozbo/ios-pubgm-hack](https://github.com/rozbo/ios-pubgm-hack) iOS吃鸡辅助
+- [**110**Star][8m] [rose-compiler/rose-develop](https://github.com/rose-compiler/rose-develop) The latest development version of rose. It may not pass all regression tests.
+- [**110**Star][17d] [PS] [dsccommunity/networkingdsc](https://github.com/dsccommunity/NetworkingDsc)
+- [**110**Star][3y] [JS] [nccgroup/typofinder](https://github.com/nccgroup/typofinder) A finder of domain typos showing country of IP address
+- [**110**Star][1y] [Shell] [mattymcfatty/honeypi](https://github.com/mattymcfatty/honeypi)
+- [**110**Star][1y] [C#] [malcomvetter/csexec](https://github.com/malcomvetter/csexec) An implementation of PSExec in C#
+- [**110**Star][8m] [C] [jwbensley/etherate](https://github.com/jwbensley/etherate) Linux CLI Ethernet and MPLS Testing Tool
+- [**110**Star][2m] [PS] [jrentenaar/office-365-extractor](https://github.com/jrentenaar/office-365-extractor) The Office 365 Extractor is a tool that allows for complete and reliable extraction of the Unified Audit Log (UAL)
+- [**110**Star][7y] [Py] [jgeralnik/pytroj](https://github.com/jgeralnik/pytroj) A tool for infected .pyc files with arbitrary code that spreads out to infect all other .pyc files
+- [**110**Star][1m] [C] [hasherezade/chimera_pe](https://github.com/hasherezade/chimera_pe) ChimeraPE (a PE injector type - alternative to: RunPE, ReflectiveLoader, etc) - a template for manual loading of EXE, loading imports payload-side
+- [**110**Star][3m] [Py] [h0nus/qrgen](https://github.com/h0nus/qrgen) Simple script for generating Malformed QRCodes.
+- [**110**Star][3y] [JS] [fransr/template-generator](https://github.com/fransr/template-generator) A simple variable based template editor using handlebarjs+strapdownjs. The idea is to use variables in markdown based files to easily replace the variables with content. Data is saved temporarily in local storage. PHP is only needed to generate the list of files in the dropdown of templates.
+- [**110**Star][2y] [Py] [fox-it/danderspritz-evtx](https://github.com/fox-it/danderspritz-evtx) Parse evtx files and detect use of the DanderSpritz eventlogedit module
+- [**110**Star][3y] [HTML] [dxa4481/xssjacking](https://github.com/dxa4481/xssjacking) Abusing Self-XSS and Clickjacking to trigger XSS
+- [**110**Star][3m] [Java] [dogangcr/vulnerable-sso](https://github.com/dogangcr/vulnerable-sso) vulnerable single sign on
+- [**110**Star][2y] [C++] [codewatchorg/sidestep](https://github.com/codewatchorg/sidestep) Yet another AV evasion tool
+- [**110**Star][8m] [Py] [chaitanyaharitash/kimi](https://github.com/chaitanyaharitash/kimi) Script to generate malicious debian packages (debain trojans).
+- [**110**Star][7y] [C++] [abhisek/pe-loader-sample](https://github.com/abhisek/pe-loader-sample) Proof of concept implementation of in-memory PE Loader based on ReflectiveDLLInjection Technique
+- [**110**Star][4y] [Py] [1n3/xsstracer](https://github.com/1n3/xsstracer) A small python script to check for Cross-Site Tracing (XST)
+- [**109**Star][3d] [C] [wifiphisher/roguehostapd](https://github.com/wifiphisher/roguehostapd) Hostapd fork including Wi-Fi attacks and providing Python bindings with ctypes.
+- [**109**Star][21d] [SourcePawn] [shavitush/bhoptimer](https://github.com/shavitush/bhoptimer) A bunnyhop timer plugin for Counter-Strike: Source, Counter-Strike: Global Offensive and Team Fortress 2.
+- [**109**Star][4m] [PHP] [vvmelody/ctf-web-challenges](https://github.com/vvmelody/ctf-web-challenges)
+- [**109**Star][1y] [Py] [meizjm3i/ctf-challenge](https://github.com/meizjm3i/CTF-Challenge) CTF题目收集
+- [**109**Star][9m] [Shell] [xvass/vscan](https://github.com/xvass/vscan) vulnerability scanner tool using nmap and nse scripts
+- [**109**Star][8m] [C] [wbenny/ksocket](https://github.com/wbenny/ksocket) KSOCKET provides a very basic example how to make a network connections in the Windows Driver by using WSK
+- [**109**Star][2y] [C++] [vegard/prog-fuzz](https://github.com/vegard/prog-fuzz) Compiler/source code fuzzing tool using AFL instrumentation
+- [**109**Star][1y] [C] [twelvesec/passcat](https://github.com/twelvesec/passcat) Passwords Recovery Tool
+- [**109**Star][3y] [HTML] [theori-io/cve-2016-0189](https://github.com/theori-io/cve-2016-0189) Proof-of-Concept exploit for CVE-2016-0189 (VBScript Memory Corruption in IE11)
+- [**109**Star][7m] [C] [siguza/imobax](https://github.com/siguza/imobax) iOS Mobile Backup Extractor
+- [**109**Star][2y] [C] [securestate/syringe](https://github.com/securestate/syringe) A General Purpose DLL & Code Injection Utility
+- [**109**Star][29d] [Ruby] [rapid7/metasploit-omnibus](https://github.com/rapid7/metasploit-omnibus) Packaging metasploit-framework with omnibus
+- [**109**Star][4m] [Shell] [qax-a-team/weblogicenvironment](https://github.com/qax-a-team/weblogicenvironment) Weblogic环境搭建工具
+- [**109**Star][2y] [PS] [proxb/powershell_scripts](https://github.com/proxb/powershell_scripts) Miscellaneous scripts for things that I have done; more scripts will arrive as I get time to update this repo.
+- [**109**Star][2y] [C] [pbatard/bootimg-tools](https://github.com/pbatard/bootimg-tools) Android boot.img creation and extraction tools [NOTE: This project is NO LONGER maintained]
+- [**109**Star][2y] [TeX] [p4t12ick/ypsilon](https://github.com/p4t12ick/ypsilon) Automated Use Case Testing
+- [**109**Star][5m] [C++] [niklasb/hack2win-chrome](https://github.com/niklasb/hack2win-chrome) This is collaborative work of Ned Williamson and Niklas Baumstark
+- [**109**Star][8m] [Py] [needmorecowbell/giggity](https://github.com/needmorecowbell/giggity) Wraps github api for openly available information about an organization, user, or repo
+- [**109**Star][5m] [Roff] [nb-star/security-operation](https://github.com/nb-star/security-operation) 安全运维技巧整理
+- [**109**Star][3y] [Py] [moosedojo/mybff](https://github.com/moosedojo/mybff) myBFF - a Brute Force Framework
+- [**109**Star][10m] [HTML] [m4cs/blackeye-python](https://github.com/m4cs/blackeye-python) BlackEye Phishing Kit in Python w Serveo Subdomain Creation | Educational Purposes Only
+- [**109**Star][4y] [Ruby] [lubyruffy/wyquery](https://github.com/lubyruffy/wyquery) Wooyun查询系统
+- [**109**Star][8m] [linking12/tesla](https://github.com/linking12/tesla) Tesla is a gateway service that provides dynamic routing,waf,support spring cloud,gRPC,DUBBO and more.
+- [**109**Star][1y] [C++] [joxeankoret/membugtool](https://github.com/joxeankoret/membugtool) A DBI tool to discover heap memory related bugs
+- [**109**Star][1y] [PHP] [joecampo/random-user-agent](https://github.com/joecampo/random-user-agent) Generate real random user-agents
+- [**109**Star][3y] [Py] [jmortega/osint_tools_security_auditing](https://github.com/jmortega/osint_tools_security_auditing) osint_tools_security_auditing
+- [**109**Star][1y] [Shell] [jgamblin/blackhat-macos-config](https://github.com/jgamblin/blackhat-macos-config) Configure Your Macbook For Blackhat
+- [**109**Star][2y] [C] [gvb84/pbscan](https://github.com/gvb84/pbscan) Faster and more efficient stateless SYN scanner and banner grabber due to userland TCP/IP stack usage.
+- [**109**Star][1y] [Pascal] [greatis/anti-webminer](https://github.com/greatis/anti-webminer) Anti-WebMiner protects your PC against web cryptocurrency miners (JS scripts like Coinhive executed in the browser) by modifying Windows hosts file
+- [**109**Star][2y] [C#] [goldshtn/etrace](https://github.com/goldshtn/etrace) Command-line tool for ETW tracing on files and real-time events
+- [**109**Star][5y] [fjvva/ecu-tool](https://github.com/fjvva/ecu-tool) Tool to communicate with vehicle ECUs based on Arduino
+- [**109**Star][3m] [JS] [elkentaro/kismetmobiledashboard](https://github.com/elkentaro/kismetmobiledashboard) Mobile UI for kismet
+- [**109**Star][11m] [Py] [ekultek/graffiti](https://github.com/ekultek/graffiti) A tool to generate obfuscated one liners to aid in penetration testing
+- [**109**Star][6m] [JS] [detroitenglish/pw-pwnage-cfworker](https://github.com/detroitenglish/pw-pwnage-cfworker) Deploy a Cloudflare Worker to sanely score users' new passwords with zxcvbn AND check for matches against haveibeenpwned's 7.8+ billion breached accounts
+- [**109**Star][2m] [C] [david-reguera-garcia-dreg/dbgchild](https://github.com/david-reguera-garcia-dreg/dbgchild) Debug Child Process Tool (auto attach)
+- [**109**Star][5m] [C++] [danielcardeenas/audiostego](https://github.com/danielcardeenas/audiostego) Audio file steganography. Hides files or text inside audio files and retrieve them automatically
+- [**109**Star][12m] [JS] [cloudtracer/paskto](https://github.com/cloudtracer/paskto) Paskto - Passive Web Scanner
+- [**109**Star][5y] [Py] [behindthefirewalls/parsero](https://github.com/behindthefirewalls/parsero) Parsero | Robots.txt audit tool
+- [**109**Star][10m] [Py] [b3-v3r/hunner](https://github.com/b3-v3r/hunner) Hacking framework
+- [**109**Star][2y] [C] [b-mueller/frida-detection-demo](https://github.com/b-mueller/frida-detection-demo) Some examples for detecting frida on Android
+- [**109**Star][6m] [Py] [anssi-fr/bmc-tools](https://github.com/anssi-fr/bmc-tools) RDP Bitmap Cache parser
+- [**109**Star][3m] [Py] [altjx/ipwn](https://github.com/altjx/ipwn)
+- [**108**Star][5m] [Go] [v2ray/ext](https://github.com/v2ray/ext) Utilities to support Project V
+- [**108**Star][7m] [C#] [virb3/de4dot-cex](https://github.com/virb3/de4dot-cex) de4dot deobfuscator with full support for vanilla ConfuserEx
+- [**108**Star][1y] [C] [fsecurelabs/xrulez](https://github.com/FSecureLABS/XRulez) A command line tool for creating malicious outlook rules
+- [**108**Star][3y] [vidar-team/hctf2016](https://github.com/vidar-team/HCTF2016) HCTF 2016 CHALLENGES
+- [**108**Star][15d] [3had0w/fuzzing-dicts](https://github.com/3had0w/Fuzzing-Dicts) Web Security Dictionary
+- [**108**Star][11m] [Py] [w3h/isf](https://github.com/w3h/isf) ISF(Industrial Security Exploitation Framework) is a exploitation framework based on Python.
+- [**108**Star][3y] [Py] [souhardya/warchild](https://github.com/souhardya/warchild) War Child denial of service testing suite
+- [**108**Star][13d] [PHP] [sniperoj/attack-defense-challenges](https://github.com/sniperoj/attack-defense-challenges) Challenges of CTF Attack with Defense mode
+- [**108**Star][3y] [JS] [sensepost/wadi](https://github.com/sensepost/wadi) Wadi Fuzzing Harness
+- [**108**Star][8m] [Py] [rootbsd/fridump3](https://github.com/rootbsd/fridump3) A universal memory dumper using Frida for Python 3
+- [**108**Star][1m] [C] [rohanpadhye/fuzzfactory](https://github.com/rohanpadhye/fuzzfactory) Domain-Specific Fuzzing with Waypoints
+- [**108**Star][3m] [JS] [rapid7/awsaml](https://github.com/rapid7/awsaml) Awsaml is an application for providing automatically rotated temporary AWS credentials.
+- [**108**Star][3y] [projectretroscope/retroscope](https://github.com/projectretroscope/retroscope) Public release of the RetroScope Android memory forensics framework
+- [**108**Star][2m] [Assembly] [platypew/picoctf-2018-writeup](https://github.com/platypew/picoctf-2018-writeup) Writeup for picoCTF 2018
+- [**108**Star][10m] [Py] [mpgn/cve-2019-7238](https://github.com/mpgn/cve-2019-7238) 🐱💻 Poc of CVE-2019-7238 - Nexus Repository Manager 3 Remote Code Execution 🐱💻
+- [**108**Star][6m] [Py] [matiskay/html-similarity](https://github.com/matiskay/html-similarity) Compare html similarity using structural and style metrics
+- [**108**Star][5m] [C++] [mactec0/kernelmode-manual-mapping-through-iat](https://github.com/mactec0/kernelmode-manual-mapping-through-iat) Manual mapping without creating any threads, with rw only access
+- [**108**Star][10m] [Py] [m4cs/darkspiritz](https://github.com/m4cs/darkspiritz)
+- [**108**Star][3d] [C] [libyal/libbde](https://github.com/libyal/libbde) Library and tools to access the BitLocker Drive Encryption (BDE) encrypted volumes
+- [**108**Star][4m] [Shell] [immmx/ubnt-mips-shadowsocks-libev](https://github.com/immmx/ubnt-mips-shadowsocks-libev) Cross complie shadowsocks for UBNT devices based on mipsel or mips64
+- [**108**Star][2y] [Py] [hansesecure/exploitdev](https://github.com/hansesecure/exploitdev)
+- [**108**Star][2y] [geosn0w/myriam](https://github.com/geosn0w/myriam) A vulnerable iOS App with Security Challenges for the Security Researcher inside you.
+- [**108**Star][6d] [C++] [frida/frida-node](https://github.com/frida/frida-node) Frida Node.js bindings
+- [**108**Star][18d] [Pascal] [fenix01/cheatengine-library](https://github.com/fenix01/cheatengine-library) Cheat Engine Library is based on CheatEngine a debugger and coding environment particularly aimed at games, but can also be used for other purposes like debugging applications and used in schools for teaching how computers work
+- [**108**Star][7m] [C++] [ez8-co/yapi](https://github.com/ez8-co/yapi) fusion injector that reduce differences between x64, wow64 and x86 processes
+- [**108**Star][7m] [Py] [evilsocket/ergo-pe-av](https://github.com/evilsocket/ergo-pe-av) 🧠 🦠 An artificial neural network and API to detect Windows malware, based on Ergo and LIEF.
+- [**108**Star][3y] [C] [emptymonkey/shelljack](https://github.com/emptymonkey/shelljack) A keystroke / terminal logger for Linux.
+- [**108**Star][4m] [Haxe] [empirectf/empirectf](https://github.com/empirectf/empirectf) EmpireCTF – write-ups, videos, capture the flag, cybersecurity
+- [**108**Star][2y] [Vim script] [chr4/sslsecure.vim](https://github.com/chr4/sslsecure.vim) Highlight insecure SSL configuration in Vim (works for all OpenSSL/ LibreSSL cipher strings, independent of the filetype)
+- [**108**Star][7m] [binject/awesome-go-security](https://github.com/binject/awesome-go-security) A dedicated place for cool golang security projects
+- [**107**Star][17d] [paralax/awesome-cybersecurity-internships](https://github.com/paralax/awesome-cybersecurity-internships) a list of cybersecurity internships
+- [**107**Star][2d] [internetwache/ct_subdomains](https://github.com/internetwache/ct_subdomains) An hourly updated list of subdomains gathered from certificate transparency logs
+- [**107**Star][6m] [PS] [dafthack/check-localadminhash](https://github.com/dafthack/check-localadminhash) Check-LocalAdminHash is a PowerShell tool that attempts to authenticate to multiple hosts over either WMI or SMB using a password hash to determine if the provided credential is a local administrator. It's useful if you obtain a password hash for a user and want to see where they are local admin on a network. It is essentially a Frankenstein of …
+- [**107**Star][19d] [firmianay/security-paper](https://github.com/firmianay/security-paper) (与本人兴趣强相关的)各种安全or计算机资料收集
+- [**107**Star][14d] [Shell] [g666gle/basequery](https://github.com/g666gle/basequery) BaseQuery is a way to organize public combo-lists and data breaches in a way that you can easily search through everything
+- [**107**Star][4m] [Py] [xzkzdx/weixin-spider](https://github.com/xzkzdx/weixin-spider) 微信公众号爬虫,公众号历史文章,文章评论,文章阅读及在看数据,可视化web页面,可部署于Windows服务器。基于Python3之flask/mysql/redis/mitmproxy/pywin32等实现,高效微信爬虫,微信公众号爬虫,历史文章,文章评论,数据更新。
+- [**107**Star][6y] [ObjC] [colemancda/wi-fi-crack](https://github.com/colemancda/wi-fi-crack) OS X GUI for Aircrack-NG
+- [**107**Star][1m] [ObjC] [zydeco/aah](https://github.com/zydeco/aah) arm64 architecture handler
+- [**107**Star][2y] [Shell] [xillwillx/cactustorch_ddeauto](https://github.com/xillwillx/cactustorch_ddeauto) OFFICE DDEAUTO Payload Generation script
+- [**107**Star][1y] [PHP] [walkor/php-http-proxy](https://github.com/walkor/php-http-proxy) HTTP proxy written in PHP based on workerman.
+- [**107**Star][6m] [Swift] [tuluobo/leiter](https://github.com/tuluobo/leiter) 一个基于 NEKit 的网络 Proxy App。
+- [**107**Star][3y] [C++] [timeweb/ddosdetector](https://github.com/timeweb/ddosdetector) A flexible tool for analyzing network traffic and automation of the process of protection against DDoS attacks.
+- [**107**Star][11m] [C++] [sidechannelmarvels/daredevil](https://github.com/sidechannelmarvels/daredevil) A tool to perform (higher-order) correlation power analysis attacks (CPA).
+- [**107**Star][5m] [JS] [ryanmarcus/dirty-json](https://github.com/ryanmarcus/dirty-json) A parser for invalid JSON
+- [**107**Star][9m] [Emacs Lisp] [rubocop-hq/rubocop-emacs](https://github.com/rubocop-hq/rubocop-emacs) An Emacs interface for RuboCop
+- [**107**Star][8m] [Shell] [rpranshu/eternalview](https://github.com/rpranshu/eternalview) EternalView is an all in one basic information gathering and vulnerability assessment tool
+- [**107**Star][6m] [PS] [r4wd3r/rid-hijacking](https://github.com/r4wd3r/rid-hijacking) Windows RID Hijacking persistence technique
+- [**107**Star][2y] [Ruby] [porterhau5/bloodhound-owned](https://github.com/porterhau5/bloodhound-owned) A collection of files for adding and leveraging custom properties in BloodHound.
+- [**107**Star][1y] [pgarba/switchidaproloader](https://github.com/pgarba/switchidaproloader) Loader for IDA Pro to support the Nintendo Switch NRO binaries
+- [**107**Star][2m] [JS] [p3nt4/nuages](https://github.com/p3nt4/nuages) A modular C2 framework
+- [**107**Star][1y] [PS] [p3nt4/invoke-tmpdavfs](https://github.com/p3nt4/invoke-tmpdavfs) Memory Backed Powershell WebDav Server
+- [**107**Star][3y] [C#] [p0cl4bs/hanzoinjection](https://github.com/p0cl4bs/hanzoinjection) injecting arbitrary codes in memory to bypass common antivirus solutions
+- [**107**Star][2y] [Py] [orsinium/django-bruteforce-protection](https://github.com/orsinium/django-bruteforce-protection) Bruteforce protection for Django projects based on Redis. Simple, powerful, extendable.
+- [**107**Star][1y] [JS] [offdev/zwsp-steg-js](https://github.com/offdev/zwsp-steg-js) 零宽度空间隐写术, 将隐藏的消息编码/解码为不可打印/可读的字符
+- [**107**Star][19d] [Py] [nasa/pvslib](https://github.com/nasa/pvslib) NASA PVS Library of Formal Developments
+- [**107**Star][8m] [C] [mudongliang/linuxflaw](https://github.com/mudongliang/linuxflaw) This repo records all the vulnerabilities of linux software I have reproduced in my local workspace
+- [**107**Star][5y] [Py] [mspreitz/adel](https://github.com/mspreitz/adel) dumps all important SQLite Databases from a connected Android smartphone to the local disk and analyzes these files in a forensically accurate workflow
+- [**107**Star][4y] [Py] [mozilla/garmr](https://github.com/mozilla/garmr) inspect the responses from websites for basic security requirements.
+- [**107**Star][4y] [Py] [mit-ll/ll-fuzzer](https://github.com/mit-ll/ll-fuzzer) An automated NFC fuzzing framework for Android devices.
+- [**107**Star][28d] [Py] [misp/misp-warninglists](https://github.com/misp/misp-warninglists) Warning lists to inform users of MISP about potential false-positives or other information in indicators
+- [**107**Star][4y] [Py] [mdegrazia/sqlite-deleted-records-parser](https://github.com/mdegrazia/sqlite-deleted-records-parser) recover deleted entries in an SQLite database and places the output into either a TSV file or text file (-r)
+- [**107**Star][3m] [C#] [matterpreter/shhmon](https://github.com/matterpreter/shhmon) Neutering Sysmon via driver unload
+- [**107**Star][5y] [C] [malwaretech/tinyxpb](https://github.com/malwaretech/tinyxpb) Windows XP 32-Bit Bootkit
+- [**107**Star][1y] [Py] [lizhongnian/btpanel-ss](https://github.com/lizhongnian/btpanel-ss) 基于宝塔Linux面板的shadowsocks可视化管理插件,本人博客,欢迎大家指导
+- [**107**Star][3d] [JS] [liyangready/mini-proxy](https://github.com/liyangready/mini-proxy) A very mini transparent proxy for http/https by NodeJS.Just like squid. 基于nodejs的迷你易用的proxy
+- [**107**Star][3y] [liuchenx/surgeconfig](https://github.com/liuchenx/surgeconfig) surge app shadowsocks config
+- [**107**Star][7m] [Py] [leoid/cve-2019-0708](https://github.com/leoid/cve-2019-0708) Only Hitting PoC [Tested on Windows Server 2008 r2]
+- [**107**Star][10d] [lattera/articles](https://github.com/lattera/articles) Various articles I've written
+- [**107**Star][11m] [Py] [koush/efi-x99](https://github.com/koush/efi-x99) Hackintosh Guide: Gigabyte X99P-SLI, Intel 6950X, Nvidia Titan Xp
+- [**107**Star][2y] [Go] [jthomas/serverless-pwned-passwords](https://github.com/jthomas/serverless-pwned-passwords) serverless-pwned-passwords:提供了1个API,用于从各种数据泄漏的巨大密码库中检查潜在密码
+- [**107**Star][3y] [ios-reverse-engineering-dev/swift-apps-reverse-engineering](https://github.com/ios-reverse-engineering-dev/swift-apps-reverse-engineering) Swift Apps Reverse Engineering reading book
+- [**107**Star][5y] [C] [ioactive/melkor_elf_fuzzer](https://github.com/ioactive/melkor_elf_fuzzer) Melkor is a very intuitive and easy-to-use ELF file format fuzzer to find functional and security bugs in ELF parsers.
+- [**107**Star][2y] [Java] [realbearcat/oracle-weblogic-cve-2017-10271](https://github.com/RealBearcat/Oracle-WebLogic-CVE-2017-10271) WebLogic Wls-wsat XMLDecoder 反序列化
+- [**107**Star][11m] [hongrisec/ai-machine-learning-security](https://github.com/hongrisec/ai-machine-learning-security) 一个关于人工智能渗透测试分析系列
+- [**107**Star][2y] [C] [holbertonschool/hack-the-virtual-memory](https://github.com/holbertonschool/hack-the-virtual-memory) This is a series of small articles / tutorials based around virtual memory. The goal is to learn some CS basics, but in a different and more practical way.
+- [**107**Star][1m] [Py] [ethereum/eth-tester](https://github.com/ethereum/eth-tester) Tool suite for testing ethereum applications.
+- [**107**Star][1y] [Py] [egaus/maliciousmacrobot](https://github.com/egaus/maliciousmacrobot) Malicious Macro Bot Project
+- [**107**Star][2y] [JS] [eboda/34c3ctf](https://github.com/eboda/34c3ctf) Challenge Sources & Exploits for the 34C3 CTF
+- [**107**Star][6m] [C#] [dannythesloth/vanillarat](https://github.com/dannythesloth/vanillarat) VanillaRat is an advanced remote administration tool completely coded in C# for Windows.
+- [**107**Star][4d] [Py] [danielplohmann/apiscout](https://github.com/danielplohmann/apiscout) simplifying Windows API import recovery on arbitrary memory dumps
+- [**107**Star][16d] [HTML] [cj123/canijailbreak.com](https://github.com/cj123/canijailbreak.com) a website which tells you whether you can jailbreak your iOS device.
+- [**107**Star][7m] [Java] [c0d3p1ut0s/cve-2019-12086-jackson-databind-file-read](https://github.com/c0d3p1ut0s/cve-2019-12086-jackson-databind-file-read)
+- [**107**Star][2d] [PHP] [blackhacker511/blacknet](https://github.com/blackhacker511/blacknet) Free Advanced Windows BotNET with Secure PHP Panel
+- [**107**Star][4m] [Py] [atlas0fd00m/cancat](https://github.com/atlas0fd00m/cancat) swiss army knife of Controller Area Networks (CAN) often used in cars and building automation, etc...
+- [**107**Star][4d] [Shell] [anandkumar11u/oscp-60days](https://github.com/anandkumar11u/oscp-60days) OSCP All Tools are Here ...!! ***
+- [**106**Star][11m] [Swift] [lettleprince/qladder](https://github.com/lettleprince/qladder) QLadder is a project for iOS client. It uses shadowsocks as server-side.
+- [**106**Star][11d] [Py] [vulhub/metadockers](https://github.com/vulhub/metadockers) Responsible for visualization the vulhub and docker
+- [**106**Star][18d] [Java] [astrelsky/ghidra-cpp-class-analyzer](https://github.com/astrelsky/ghidra-cpp-class-analyzer) Ghidra C++ Class and Run Time Type Information Analyzer
+- [**106**Star][2y] [Py] [cylance/introductiontomachinelearningforsecuritypros](https://github.com/cylance/IntroductionToMachineLearningForSecurityPros) Example code for our book Introduction to Artificial Intelligence for Security Professionals
+- [**106**Star][3y] [Py] [opensourcesec/cirtkit](https://github.com/opensourcesec/CIRTKit) Tools for the Computer Incident Response Team
+- [**106**Star][2y] [C++] [zerosum0x0/puppetstrings](https://github.com/zerosum0x0/puppetstrings) Hitch a free ride to Ring 0 on Windows
+- [**106**Star][4y] [C] [xobs/fernly](https://github.com/xobs/fernly) a simple operating system designed for use in the reverse engineering of the Fernvale CPU
+- [**106**Star][2y] [Py] [xme/toolbox](https://github.com/xme/toolbox) Miscelaneous useful scripts for my day to day projects
+- [**106**Star][9m] [webbreacher/orcs](https://github.com/webbreacher/orcs) OSINT Resource Classification System
+- [**106**Star][6y] [Py] [uber/py-find-injection](https://github.com/uber/py-find-injection) Look for SQL injection attacks in python source code
+- [**106**Star][17d] [Py] [testerting/hacker101-ctf](https://github.com/testerting/hacker101-ctf) Hacker101 CTF Writeup
+- [**106**Star][3m] [C++] [tandasat/simplesvmhook](https://github.com/tandasat/simplesvmhook) SimpleSvmHook is a research purpose hypervisor for Windows on AMD processors.
+- [**106**Star][2y] [Py] [sparksharly/dl_for_xss](https://github.com/sparksharly/dl_for_xss) Deep learnning for detection with xss
+- [**106**Star][2y] [Py] [shogunlab/shuriken](https://github.com/shogunlab/shuriken) Cross-Site Scripting (XSS) command line tool for testing lists of XSS payloads on web apps.
+- [**106**Star][28d] [Java] [sable/heros](https://github.com/sable/heros) IFDS/IDE Solver for Soot
+- [**106**Star][4y] [C] [rootkitsmm/win32k-fuzzer](https://github.com/rootkitsmm/win32k-fuzzer) Fuzz and Detect "Use After Free" vulnerability in win32k.sys ( Heap based )
+- [**106**Star][2m] [PHP] [realender/dwpa](https://github.com/realender/dwpa) Distributed WPA PSK auditor
+- [**106**Star][12d] [Py] [pavelrevak/pystlink](https://github.com/pavelrevak/pystlink) Python tool for flashing and debugging STM32 devices using ST-LINK/V2
+- [**106**Star][2m] [Py] [neatmonster/amie](https://github.com/neatmonster/amie) A Minimalist Instruction Extender for the ARM architecture and IDA Pro
+- [**106**Star][4y] [Go] [mattbostock/go-ldpreload-backdoor](https://github.com/mattbostock/go-ldpreload-backdoor) LD_PRELOAD libc hooking using Go
+- [**106**Star][4y] [Py] [mapleray/proxy_pool](https://github.com/mapleray/proxy_pool) python 代理池
+- [**106**Star][3y] [Py] [lingerhk/fshell](https://github.com/lingerhk/fshell) 基于机器学习的分布式webshell检测系统
+- [**106**Star][4y] [C] [kohsuke/com4j](https://github.com/kohsuke/com4j) Type-safe Java/COM binding
+- [**106**Star][6y] [Java] [isecpartners/android-opendebug](https://github.com/isecpartners/android-opendebug) Make any application debuggable
+- [**106**Star][2m] [Py] [ickerwx/tcpproxy](https://github.com/ickerwx/tcpproxy) Intercepting TCP proxy to modify raw TCP streams using modules on incoming or outgoing traffic
+- [**106**Star][16d] [Py] [hanc00l/some_pocsuite](https://github.com/hanc00l/some_pocsuite) 用于漏洞排查的pocsuite3验证POC代码
+- [**106**Star][2y] [Py] [guedou/jupyter-radare2](https://github.com/guedou/jupyter-radare2) Just a simple radare2 Jupyter kernel
+- [**106**Star][5m] [Py] [graph-x/davscan](https://github.com/graph-x/davscan) Fingerprints servers, finds exploits, scans WebDAV. May or may not also make coffee.
+- [**106**Star][2m] [Perl] [gottburgm/exploits](https://github.com/gottburgm/exploits) Containing Self Made Perl Reproducers / PoC Codes
+- [**106**Star][12m] [JS] [fpass/fpass](https://github.com/fpass/fpass) 类似于 LastPass的密码管理工具
+- [**106**Star][1m] [Py] [flosell/trailscraper](https://github.com/flosell/trailscraper) A command-line tool to get valuable information out of AWS CloudTrail
+- [**106**Star][4y] [Perl] [fastvpseestiou/antidoto](https://github.com/fastvpseestiou/antidoto) Linux antimalware and antirootkit tool
+- [**106**Star][2y] [Py] [falseen/pysocket](https://github.com/falseen/pysocket) 通过monkey patch动态修改 socket 的项目。在不修改源码的情况下给 socket 增加一些诸如限制客户端数量、前置代理之类的功能。让我们将 Monkey Patch 进行到底吧!
+- [**106**Star][3y] [Py] [fail0verflow/radeon-tools](https://github.com/fail0verflow/radeon-tools) Radeon reverse engineering tools
+- [**106**Star][2m] [Ruby] [dev-sec/ansible-mysql-hardening](https://github.com/dev-sec/ansible-mysql-hardening) This Ansible role provides security configuration for MySQL.
+- [**106**Star][3m] [C++] [comaeio/hibr2bin](https://github.com/comaeio/hibr2bin) Comae Hibernation File Decompressor
+- [**106**Star][2y] [Java] [caledoniaproject/cve-2018-1270](https://github.com/caledoniaproject/cve-2018-1270) Spring messaging STOMP protocol RCE
+- [**106**Star][3y] [JS] [boy-hack/webshellmanager](https://github.com/boy-hack/webshellmanager) w8ay 一句话WEB端管理工具
+- [**106**Star][4m] [Go] [bnagy/gapstone](https://github.com/bnagy/gapstone) gapstone is a Go binding for the capstone disassembly library
+- [**106**Star][3y] [PS] [ben0xa/powershelldefense](https://github.com/ben0xa/powershelldefense) Some PowerShell Defensive Scripts
+- [**106**Star][2y] [Shell] [b3rito/yotter](https://github.com/b3rito/yotter) Bash 脚本, 执行侦察,然后使用 dirb 发现可能导致信息泄露的目录
+- [**106**Star][3y] [JS] [attekett/nodefuzz](https://github.com/attekett/nodefuzz)
+- [**106**Star][2y] [Py] [anbai-inc/cve-2018-4878](https://github.com/anbai-inc/cve-2018-4878) CVE-2018-4878 样本
+- [**106**Star][2m] [ajvb/awesome-tor](https://github.com/ajvb/awesome-tor) A list of awesome Tor related projects, articles, papers, etc
+- [**106**Star][8m] [Py] [ajinabraham/webappsec](https://github.com/ajinabraham/webappsec) Web Application Security
+- [**106**Star][3y] [Py] [aeondave/doork](https://github.com/aeondave/doork) Passive Vulnerability Auditor
+- [**106**Star][1y] [Py] [aboutsecurity/rastrea2r](https://github.com/aboutsecurity/rastrea2r) Collecting & Hunting for IOCs with gusto and style
+- [**106**Star][6m] [CSS] [0xitx/ida_nightfall](https://github.com/0xitx/ida_nightfall) A dark color theme for IDA Pro
+- [**105**Star][3y] [Py] [hanc00l/captcha-python-test](https://github.com/hanc00l/captcha-python-test) 学习验证码识别的相关技术,包括opencv、tesseract、机器学习算法(kNN和SVM)等,将原作者的算法改为python
+- [**105**Star][10m] [Py] [ehco1996/shadowsocksr-deprecated](https://github.com/ehco1996/shadowsocksr-deprecated) ssr mod version for django-sspanel
+- [**105**Star][1m] [Py] [0ang3el/websocket-smuggle](https://github.com/0ang3el/websocket-smuggle) Issues with WebSocket reverse proxying allowing to smuggle HTTP requests
+- [**105**Star][1m] [C++] [josh0xa/threadboat](https://github.com/josh0xA/ThreadBoat) Program uses Thread Execution Hijacking to Inject Native Shellcode into a Standard Win32 Application
+- [**105**Star][4m] [w-digital-scanner/w10scan](https://github.com/w-digital-scanner/w10scan) 全自动搜索互联网漏洞
+- [**105**Star][2m] [Py] [vstinner/python-ptrace](https://github.com/vstinner/python-ptrace) a debugger using ptrace (Linux, BSD and Darwin system call to trace processes) written in Python
+- [**105**Star][1y] [JS] [phishai/phish-protect](https://github.com/phishai/phish-protect) 警报并可能阻止IDN/Unicode域名的网站
+- [**105**Star][5y] [C] [yurushao/droid_injectso](https://github.com/yurushao/droid_injectso) A shared libraries injection tool.
+- [**105**Star][14d] [Go] [virustotal/vt-cli](https://github.com/virustotal/vt-cli) VirusTotal Command Line Interface
+- [**105**Star][2y] [Py] [tkcert/testssl.sh-webfrontend](https://github.com/tkcert/testssl.sh-webfrontend) Web Frontend for testssl.sh
+- [**105**Star][23d] [C++] [thomasdullien/heap_history_viewer](https://github.com/thomasdullien/heap_history_viewer) A program to draw rectangles from heap traces.
+- [**105**Star][3y] [Py] [tengzhangchao/struts2_045-poc](https://github.com/tengzhangchao/struts2_045-poc) Struts2-045 POC
+- [**105**Star][20d] [Py] [t0thkr1s/revshellgen](https://github.com/t0thkr1s/revshellgen) Reverse shell generator written in Python.
+- [**105**Star][16d] [Shell] [spf-tools/spf-tools](https://github.com/spf-tools/spf-tools) Shell scripts for taming the SPF (Sender Policy Framework) records in order to fight 10-maximum-DNS-look-ups limit.
+- [**105**Star][3m] [soffensive/windowsblindread](https://github.com/soffensive/windowsblindread) A list of files / paths to probe when arbitrary files can be read on a Microsoft Windows operating system
+- [**105**Star][1y] [Py] [shizzz477/msploitego](https://github.com/shizzz477/msploitego) 将Metasploit数据库导入到数据挖掘工具Maltego并进行分析的框架
+- [**105**Star][6y] [Py] [secretsquirrel/recomposer](https://github.com/secretsquirrel/recomposer) Randomly changes Win32/64 PE Files for 'safer' uploading to malware and sandbox sites.
+- [**105**Star][4y] [C++] [secmob/pocforcve-2015-1528](https://github.com/secmob/pocforcve-2015-1528) I'll submit the poc after blackhat
+- [**105**Star][3y] [Py] [saferman/cupper](https://github.com/saferman/cupper) 社工密码生成器
+- [**105**Star][10m] [PHP] [rub-nds/metadata-attacker](https://github.com/rub-nds/metadata-attacker) A tool to generate media files with malicious metadata
+- [**105**Star][6m] [Py] [roglew/guppy-proxy](https://github.com/roglew/guppy-proxy) 用于WebApp安全测试的拦截代理(intercepting proxy)
+- [**105**Star][4y] [Java] [rednaga/dexhook](https://github.com/rednaga/dexhook) DexHook is a xposed module for capturing dynamically loaded dex files.
+- [**105**Star][1y] [Py] [redlectroid/overthruster](https://github.com/redlectroid/overthruster) HID attack payload generator for Arduinos
+- [**105**Star][9m] [C++] [quarkslab/android-restriction-bypass](https://github.com/quarkslab/android-restriction-bypass) PoC to bypass Android restrictions
+- [**105**Star][3y] [Py] [picoctf/picoctf-platform-2](https://github.com/picoctf/picoctf-platform-2) A genericized version of picoCTF 2014 that can be easily adapted to host CTF or programming competitions.
+- [**105**Star][3y] [Py] [phith0n/python-xss-filter](https://github.com/phith0n/python-xss-filter) Based on native Python module HTMLParser purifier of HTML, To Clear all javascript in html
+- [**105**Star][11d] [ObjC] [objective-see/processmonitor](https://github.com/objective-see/processmonitor) Process Monitor Library (based on Apple's new Endpoint Security Framework)
+- [**105**Star][2y] [Shell] [niclet/yi-hack-v2](https://github.com/niclet/yi-hack-v2) Xiaomi Yi Ants Camera 2 hack
+- [**105**Star][3m] [Ruby] [naxg/cve_2019_0708_bluekeep_rce](https://github.com/naxg/cve_2019_0708_bluekeep_rce) bluekeep exploit
+- [**105**Star][2y] [Py] [mozilla/django-session-csrf](https://github.com/mozilla/django-session-csrf) CSRF protection for Django without cookies.
+- [**105**Star][1y] [TeX] [monero-project/research-lab](https://github.com/monero-project/research-lab) A general repo for Monero Research Lab work in progress and completed work
+- [**105**Star][1y] [mitre/brawl-public-game-001](https://github.com/mitre/brawl-public-game-001) Data from a BRAWL Automated Adversary Emulation Exercise
+- [**105**Star][3y] [Java] [mindmac/intentfuzzer](https://github.com/mindmac/intentfuzzer) A Tool to fuzz Intent on Android
+- [**105**Star][2y] [Go] [mhmdiaa/second-order](https://github.com/mhmdiaa/second-order) 爬取web app, 收集 URL, 扫描second-order 子域名接管
+- [**105**Star][1y] [HTML] [lz1y/cve-2018-8420](https://github.com/lz1y/cve-2018-8420) 原PoC甚至符号都打错了!太不走心了!
+- [**105**Star][14d] [leomaurodesenv/game-datasets](https://github.com/leomaurodesenv/game-datasets)
+- [**105**Star][6m] [PS] [leeberg/bluehive](https://github.com/leeberg/bluehive) PowerShell based Active Directory Honey User Account Management with Universal Dashboards
+- [**105**Star][2y] [Py] [kkirsche/cve-2017-10271](https://github.com/kkirsche/cve-2017-10271) Oracle WebLogic WLS-WSAT Remote Code Execution Exploit (CVE-2017-10271)
+- [**105**Star][7y] [intrepidusgroup/trustme](https://github.com/intrepidusgroup/trustme) Disable certificate trust checks on iOS devices.
+- [**105**Star][2y] [Java] [ggrandes/bouncer](https://github.com/ggrandes/bouncer) Bouncer is a network TCP port redirector/forward proxy (like rinetd) with extra features like Reverse tunneling (like ssh -R), SSL tunneling (like stunnel), connection Failover, LoadBalancing and Clustering. In pure Java (BIO)
+- [**105**Star][2y] [C] [formyown/alesense-antivirus](https://github.com/formyown/alesense-antivirus) 一款拥有完整交互界面与驱动级拦截能力的开源杀毒软件
+- [**105**Star][5y] [Py] [fooying/3102](https://github.com/fooying/3102) A domain/ip fuzzing tool for vulnerability mining
+- [**105**Star][4m] [Py] [ex16x41/oscp-prep](https://github.com/ex16x41/oscp-prep) my oscp prep collection
+- [**105**Star][2y] [Py] [danigargu/idatropy](https://github.com/danigargu/idatropy) a plugin for Hex-Ray's IDA Pro designed to generate charts of entropy and histograms using the power of idapython and matplotlib.
+- [**105**Star][2y] [Ruby] [chrisallenlane/watchtower](https://github.com/chrisallenlane/watchtower) Watchtower is a Static Code Analysis tool designed to assist security auditors who are tasked with performing manual code reviews. It is platform- and language-agnostic.
+- [**105**Star][1m] [Java] [c0ny1/sqlmap4burp-plus-plus](https://github.com/c0ny1/sqlmap4burp-plus-plus) sqlmap4burp++是一款兼容Windows,mac,linux多个系统平台的Burp与sqlmap联动插件
+- [**105**Star][1y] [Py] [binarydefense/goatrider](https://github.com/binarydefense/goatrider) GoatRider is a simple tool that will dynamically pull down Artillery Threat Intelligence Feeds, TOR, AlienVaults OTX, and the Alexa top 1 million websites and do a comparison to a hostname file or IP file.
+- [**105**Star][3m] [Py] [armijnhemel/binaryanalysis-ng](https://github.com/armijnhemel/binaryanalysis-ng) Binary Analysis Next Generation (BANG)
+- [**105**Star][1y] [Py] [5alt/ultrarelay](https://github.com/5alt/ultrarelay) poison and relay NTLM credentials
+- [**105**Star][3y] [Py] [3gstudent/smbtouch-scanner](https://github.com/3gstudent/smbtouch-scanner) Automatically scan the inner network to detect whether they are vulnerable.
+- [**105**Star][3m] [Py] [0xdezzy/cve-2019-11539](https://github.com/0xdezzy/cve-2019-11539) Exploit for the Post-Auth RCE vulnerability in Pulse Secure Connect
+- [**104**Star][2y] [Ruby] [axsuul/rails-reverse-proxy](https://github.com/axsuul/rails-reverse-proxy) A reverse proxy for Ruby on Rails
+- [**104**Star][5m] [Py] [kibodwapon/axis-1.4-rce-poc](https://github.com/kibodwapon/axis-1.4-rce-poc) Axis <=1.4 远程命令执行(RCE) POC
+- [**104**Star][10m] [Py] [thelinuxchoice/pyrat](https://github.com/thelinuxchoice/pyrat) Windows Remote Administration Tool (RAT)
+- [**104**Star][3d] [Go] [inlets/inletsctl](https://github.com/inlets/inletsctl) Fast HTTP (L7) and TCP (L4) tunnels written in Go
+- [**104**Star][11m] [Java] [varunon9/remote-control-pc](https://github.com/varunon9/remote-control-pc) Control Laptop using Android. Remote control PC consists of android as well as desktop app written in Java to control laptop using phone.
+- [**104**Star][7m] [C++] [ajayrandhawa/keylogger](https://github.com/ajayrandhawa/Keylogger) Blackcat Keylogger is 100% invisible keylogger not only for users, but also undetectable by antivirus software. Blackcat keylogger Monitors all keystokes, Mouse clicks. It has a seperate process which continues capture system screenshot and send to ftp server in given time.
+- [**104**Star][2y] [HTML] [ziplokk1/incapsula-cracker-py3](https://github.com/ziplokk1/incapsula-cracker-py3) Python3 compatible way to bypass sites guarded with Incapsula
+- [**104**Star][2y] [C#] [tyranid/deviceguardbypasses](https://github.com/tyranid/deviceguardbypasses) A repository of some of my Windows 10 Device Guard Bypasses
+- [**104**Star][3y] [JS] [trustedsec/ships](https://github.com/trustedsec/ships) The Shared Host Integrated Password System (SHIPS) is a solution to provide unique and rotated local super user or administrator passwords for environments where it is not possible or not appropriate to disable these local accounts. Clients may be configured to rotate passwords automatically. Stored passwords can be retrieved by desktop support …
+- [**104**Star][4y] [C++] [trailofbits/appjaillauncher](https://github.com/trailofbits/appjaillauncher) CTF Challenge Framework for Windows 8 and above
+- [**104**Star][20d] [Go] [stefanoj3/dirstalk](https://github.com/stefanoj3/dirstalk) a multi threaded application designed to brute force paths on web servers.
+- [**104**Star][5y] [C] [sploitfun/lsploits](https://github.com/sploitfun/lsploits) Linux Exploits
+- [**104**Star][1y] [Py] [sidechannelmarvels/jeangrey](https://github.com/sidechannelmarvels/jeangrey) A tool to perform differential fault analysis attacks (DFA).
+- [**104**Star][2y] [Java] [secureskytechnology/study-struts2-s2-054_055-jackson-cve-2017-7525_cve-2017-15095](https://github.com/secureskytechnology/study-struts2-s2-054_055-jackson-cve-2017-7525_cve-2017-15095) Struts2の脆弱性S2-045, S2-055 および Jackson の脆弱性 CVE-2017-7525, CVE-2017-15095 の調査報告
+- [**104**Star][3y] [C++] [secmob/mosec2016](https://github.com/secmob/mosec2016) The slides and exploit of mosec2016
+- [**104**Star][6y] [santoku/santoku-linux](https://github.com/santoku/santoku-linux) Linux Distro for Mobile Security, Malware Analysis, and Forensics
+- [**104**Star][11m] [Py] [re4son/kali-pi](https://github.com/re4son/kali-pi) Sticky Fingers Kali Pi
+- [**104**Star][7m] [C#] [r-smith/splice-admin](https://github.com/r-smith/splice-admin) A remote Windows administration tool. You know you want it.
+- [**104**Star][12m] [Py] [ohmyadd/wetland](https://github.com/ohmyadd/wetland) A high interaction SSH honeypot
+- [**104**Star][1y] [C++] [nmulasmajic/syscall_exploit_cve-2018-8897](https://github.com/nmulasmajic/syscall_exploit_cve-2018-8897) Implements the POP/MOV SS (CVE-2018-8897) vulnerability by leveraging SYSCALL to perform a local privilege escalation (LPE).
+- [**104**Star][4y] [Go] [netxfly/transparent-proxy-scanner](https://github.com/netxfly/transparent-proxy-scanner) 基于vpn和透明代理的web漏洞扫描器的实现思路及demo
+- [**104**Star][17d] [Go] [netevert/dnsmorph](https://github.com/netevert/dnsmorph) 域名排列(permutation)引擎, Go编写
+- [**104**Star][2y] [C#] [nccgroup/outlookleaktest](https://github.com/nccgroup/outlookleaktest) The Outlook HTML Leak Test Project
+- [**104**Star][12m] [Perl] [mustlive/davoset](https://github.com/mustlive/davoset) DDoS attacks via other sites execution tool (DAVOSET) - it is command line tool for conducting DDoS attacks on the sites via Abuse of Functionality and XML External Entities vulnerabilities at other sites.
+- [**104**Star][2y] [C++] [mlghuskie/nobastian](https://github.com/mlghuskie/nobastian) NoBastian - Universal Ring3 IPC based BattlEye/EAC/FaceIt/ESEA/MRAC bypass
+- [**104**Star][2y] [Py] [mehdilauters/wifiscanmap](https://github.com/mehdilauters/wifiscanmap) an other wifi mapping tool
+- [**104**Star][24d] [Java] [mebigfatguy/fb-contrib](https://github.com/mebigfatguy/fb-contrib) a FindBugs/SpotBugs plugin for doing static code analysis for java code bases
+- [**104**Star][30d] [Py] [m8r0wn/activereign](https://github.com/m8r0wn/activereign) A Network Enumeration and Attack Toolset
+- [**104**Star][2m] [Shell] [luyg24/it_security](https://github.com/luyg24/it_security) 业内信息安全标准
+- [**104**Star][3m] [PHP] [langleyfoxall/laravel-nist-password-rules](https://github.com/langleyfoxall/laravel-nist-password-rules)
+- [**104**Star][2y] [Shell] [joarleymoraes/net_guard](https://github.com/joarleymoraes/net_guard) 命令行工具, 利用 ARP 协议检测网络中的未知设备
+- [**104**Star][3y] [Go] [jessfraz/tupperwarewithspears](https://github.com/jessfraz/tupperwarewithspears) Distributed load testing with containers, Apache benchmark, with OpenVSwitch for networking.
+- [**104**Star][2d] [C] [isc-projects/bind9](https://github.com/isc-projects/bind9) a complete, highly portable implementation of the DNS (Domain Name System) protocol.
+- [**104**Star][2y] [Kotlin] [heimashi/debug_view_kotlin](https://github.com/heimashi/debug_view_kotlin) 用kotlin实现的Android浮层调试控制台,实时的显示内存、FPS、文字log、app启动时间、Activity启动时间
+- [**104**Star][1y] [C++] [ga0/pyprotect](https://github.com/ga0/pyprotect) A lightweight python code protector, makes your python project harder to reverse engineer
+- [**104**Star][3m] [Ruby] [dryruby/tor.rb](https://github.com/dryruby/tor.rb) Tor.rb is a Ruby library for interacting with the Tor anonymity network.
+- [**104**Star][3y] [Java] [cvvt/apptroy](https://github.com/cvvt/apptroy) An Online Analysis System for Packed Android Malware
+- [**104**Star][4y] [Shell] [cornerpirate/socat-shell](https://github.com/cornerpirate/socat-shell) Socat can be used to establish a reverse shell with bash tab completion and full shell functionality
+- [**104**Star][3y] [C++] [cn33liz/tpminituacbypass](https://github.com/cn33liz/tpminituacbypass) Bypassing User Account Control (UAC) using TpmInit.exe
+- [**104**Star][14d] [C] [checkpointsw/scout](https://github.com/checkpointsw/scout) Instruction based research debugger
+- [**104**Star][3y] [Py] [c0demap/codemap](https://github.com/c0demap/codemap) a binary analysis tool for "run-trace visualization" provided as IDA plugin.
+ - [IDA插件](https://github.com/c0demap/codemap/blob/master/idapythonrc.py)
+ - [Web服务器](https://github.com/c0demap/codemap/tree/master/codemap/server)
+- [**104**Star][5y] [Py] [botherder/vxcage](https://github.com/botherder/vxcage) REST API based malware repository (abandoned)
+- [**104**Star][2y] [Py] [blindfuzzy/lhf](https://github.com/blindfuzzy/lhf) A modular recon tool for pentesting
+- [**104**Star][15d] [Swift] [auth0/auth0.swift](https://github.com/auth0/auth0.swift) Swift toolkit for Auth0 API
+- [**104**Star][4y] [ActionScript] [adobe/avmplus](https://github.com/adobe/avmplus) Source code for the Actionscript virtual machine
+- [**103**Star][4d] [Py] [sachinkamath/ntlmrecon](https://github.com/sachinkamath/ntlmrecon) A fast and flexible NTLM reconnaissance tool
+- [**103**Star][3y] [wtsxdev/list-of-web-application-security](https://github.com/wtsxdev/list-of-web-application-security) List of web application security
+- [**103**Star][3y] [Py] [landgrey/taoman](https://github.com/landgrey/taoman) 快速收集
+- [**103**Star][2m] [Shell] [greycatz/cloudunflare](https://github.com/greycatz/cloudunflare) Reconnaissance Real IP address for Cloudflare Bypass
+- [**103**Star][2y] [Brainfuck] [tegmen/regex-brainfuck-interpreter](https://github.com/Tegmen/RegEx-Brainfuck-Interpreter) A Brainfuck interpreter in RegEx only (using Find/Replace)
+- [**103**Star][1y] [ObjC] [kealdishx/icmethoddigger](https://github.com/kealdishx/ICMethodDigger) An easy way to print almost methods including private methods (supported arm64 architecture devices).
+- [**103**Star][2m] [Py] [paulc/dnslib](https://github.com/paulc/dnslib) A Python library to encode/decode DNS wire-format packets
+- [**103**Star][23d] [JS] [wilddeer/sniffer](https://github.com/wilddeer/sniffer) browser/engine/os/device detection tool
+- [**103**Star][2y] [Py] [wetw0rk/malicious-wordpress-plugin](https://github.com/wetw0rk/malicious-wordpress-plugin) malicious-wordpress-plugin:生成带反向 Shell 的 wordpress 插件
+- [**103**Star][9d] [Py] [virb3/apk-utilities](https://github.com/virb3/apk-utilities) Tools and scripts to manipulate Android APKs
+- [**103**Star][4m] [Go] [twistlock/cloud-discovery](https://github.com/twistlock/cloud-discovery) Cloud Discovery provides a point in time enumeration of all the cloud native platform services
+- [**103**Star][4y] [Py] [tripwire/tardis](https://github.com/tripwire/tardis) Threat Analysis, Reconnaissance, and Data Intelligence System
+- [**103**Star][1y] [JS] [thecjw/frida-android-scripts](https://github.com/thecjw/frida-android-scripts) Some frida scripts
+- [**103**Star][1y] [Go] [sroberts/cacador](https://github.com/sroberts/cacador) 从文本块中提取常见的IoC
+- [**103**Star][8m] [Py] [sibears/hrast](https://github.com/sibears/hrast) PoC of modifying HexRays AST
+- [**103**Star][3y] [Py] [samratashok/continuousintrusion](https://github.com/samratashok/continuousintrusion) Material related to my talks at various conferences on using Continuous Integration tools (Jenkins, Teamcity, Go, Hudson, CruiseControl) for penetration testing
+- [**103**Star][3m] [rub-nds/tls-padding-oracles](https://github.com/rub-nds/tls-padding-oracles) New TLS Padding Oracles
+- [**103**Star][1y] [Java] [quarantyne/quarantyne](https://github.com/quarantyne/quarantyne) Modern Web Firewall: stop account takeovers, weak passwords, cloud IPs, DoS attacks, disposable emails
+- [**103**Star][6y] [Py] [pwnieexpress/pwn_plug_sources](https://github.com/pwnieexpress/pwn_plug_sources) Public source repository for the Pwn Plug platform.
+- [**103**Star][1y] [Py] [preos-security/fwaudit](https://github.com/preos-security/fwaudit) Platform Firmware Auditing Tool
+- [**103**Star][2m] [PS] [powershell/windowscompatibility](https://github.com/powershell/windowscompatibility) Module that allows Windows PowerShell Modules to be used from PSCore6
+- [**103**Star][6m] [C++] [not-wlan/drvmap](https://github.com/not-wlan/drvmap) driver mapper / capcom wrapper
+- [**103**Star][3y] [Py] [noplay/scrapy-mongodb](https://github.com/noplay/scrapy-mongodb) Mongodb support for scrapy
+- [**103**Star][23d] [C++] [m2team/privexec](https://github.com/m2team/privexec) Run the program with the specified permission level (C++17 required)
+- [**103**Star][4y] [C] [m0n0ph1/win64-rovnix-vbr-bootkit](https://github.com/m0n0ph1/win64-rovnix-vbr-bootkit) Win64/Rovnix - Volume Boot Record Bootkit
+- [**103**Star][3m] [Py] [lucasg/findrpc](https://github.com/lucasg/findrpc) Ida script to extract RPC interface from binaries
+- [**103**Star][7m] [C] [joel16/psv-vsh-menu](https://github.com/joel16/psv-vsh-menu) A VSH menu tai-hen plugin for the PS VITA.
+- [**103**Star][11m] [JS] [jasonsheh/sitescan](https://github.com/jasonsheh/sitescan) A tool help get the basic information of one site
+- [**103**Star][6y] [C] [infodox/tsh-sctp](https://github.com/infodox/tsh-sctp) An open-source UNIX backdoor
+- [**103**Star][1m] [Py] [infertux/zeyple](https://github.com/infertux/zeyple) Postfix filter/hook to automatically encrypt outgoing emails with PGP/GPG
+- [**103**Star][10m] [Py] [iluxonchik/blackhat-python-book](https://github.com/iluxonchik/blackhat-python-book) Code from Blackhat Python book
+- [**103**Star][2y] [C++] [iceb0y/windows-container](https://github.com/iceb0y/windows-container) A lightweight sandbox for Windows application
+- [**103**Star][7m] [PS] [homjxi0e/poweravails](https://github.com/homjxi0e/poweravails) PowerAvails Powershell .NET Operating system
+- [**103**Star][2y] [C++] [hasherezade/snippets](https://github.com/hasherezade/snippets) Various code snippets and small PoCs, to be used for tests or as ready-made skeletons.
+- [**103**Star][1y] [PS] [harmj0y/asreproast](https://github.com/harmj0y/asreproast) Project that retrieves crackable hashes from KRB5 AS-REP responses for users without kerberoast preauthentication enabled.
+- [**103**Star][3y] [C] [greensea/mptunnel](https://github.com/greensea/mptunnel) MPUDP Tunnel (User space MultiPath UDP)
+- [**103**Star][2y] [gossithedog/threathunting](https://github.com/gossithedog/threathunting) Tools for hunting for threats.
+- [**103**Star][2y] [Java] [gosecure/csp-auditor](https://github.com/gosecure/csp-auditor) Burp and ZAP plugin to analyse Content-Security-Policy headers or generate template CSP configuration from crawling a Website
+- [**103**Star][2m] [C++] [google/vxsig](https://github.com/google/vxsig) Automatically generate AV byte signatures from sets of similar binaries.
+- [**103**Star][2y] [glinares/officemalware](https://github.com/glinares/officemalware)
+- [**103**Star][2y] [Py] [gelim/censys](https://github.com/gelim/censys) Python code to query the Censys public scan database.
+- [**103**Star][6y] [C] [gdbinit/hydra](https://github.com/gdbinit/hydra) A kernel extension and userland daemon to patch applications
+- [**103**Star][12m] [fuchsia-mirror/garnet](https://github.com/fuchsia-mirror/garnet)
+- [**103**Star][6m] [Py] [fireeye/flashmingo](https://github.com/fireeye/flashmingo) Automatic analysis of SWF files based on some heuristics. Extensible via plugins.
+- [**103**Star][4d] [F#] [enkomio/sacara](https://github.com/enkomio/sacara) A stack based intermediate language aimed at software protection by running in a software VM
+- [**103**Star][1y] [Swift] [ehrishirajsharma/swiftness](https://github.com/ehrishirajsharma/swiftness) A note-taking macOS app for penetration-testers.
+- [**103**Star][1y] [C++] [cbayet/exploit-cve-2017-6008](https://github.com/cbayet/exploit-cve-2017-6008) Exploits for CVE-2017-6008, a kernel pool buffer overflow leading to privilege escalation.
+- [**103**Star][2d] [Py] [b1eed/vulrec](https://github.com/b1eed/vulrec) 漏洞复现记录
+- [**103**Star][4y] [Py] [allyshka/pwngitmanager](https://github.com/allyshka/pwngitmanager) Git manager for pentesters
+- [**103**Star][7m] [Py] [alexmyg/andropytool](https://github.com/alexmyg/andropytool) A framework for automated extraction of static and dynamic features from Android applications
+- [**103**Star][2y] [Py] [1111joe1111/tuts](https://github.com/1111joe1111/tuts) Reverse engineering tutorials
+- [**102**Star][8m] [l3m0n/webfuzzattack](https://github.com/l3m0n/webfuzzattack) web模糊测试 - 将漏洞可能性放大
+- [**102**Star][12m] [searking/ggfwzs_in_hack](https://github.com/searking/ggfwzs_in_hack) hack VIP for chrome-extension 谷歌访问助手
+- [**102**Star][2y] [raikia/recon-ng-api-key-creation](https://github.com/raikia/recon-ng-api-key-creation) One of the biggest annoyances of using Recon-ng is getting everything set up to use it. So here I’ll outline the different API keys it can use and where to get them yourself.
+- [**102**Star][2m] [Py] [mazen160/jwt-pwn](https://github.com/mazen160/jwt-pwn) Security Testing Scripts for JWT
+- [**102**Star][1y] [Py] [zwq0320/malicious_dynamic_behavior_detection_by_cnn](https://github.com/zwq0320/malicious_dynamic_behavior_detection_by_cnn) 使用CNN进行样本恶意动态行为检测
+- [**102**Star][3y] [Go] [zaf/sipshock](https://github.com/zaf/sipshock) A scanner for SIP proxies vulnerable to Shellshock
+- [**102**Star][11m] [C] [x41sec/x41-smartcard-fuzzing](https://github.com/x41sec/x41-smartcard-fuzzing) X41 Smartcard Fuzzer
+- [**102**Star][2y] [Py] [wstart/db_baseline](https://github.com/wstart/db_baseline) 数据库基线检查工具
+- [**102**Star][2y] [Py] [wolph/python-statsd](https://github.com/wolph/python-statsd) Python Client for the Etsy NodeJS Statsd Server
+- [**102**Star][6m] [Py] [vmavromatis/absolutely-proprietary](https://github.com/vmavromatis/absolutely-proprietary) Proprietary package detector for arch-based distros. Compares your installed packages against Parabola's package blacklist and then prints your Stallman Freedom Index (free/total).
+- [**102**Star][3y] [Py] [violentshell/rover](https://github.com/violentshell/rover) Proof of Concept code for CVE-2016-5696
+- [**102**Star][3y] [veramine/detections](https://github.com/veramine/detections)
+- [**102**Star][1m] [Kotlin] [uber/crumb](https://github.com/uber/crumb) An annotation processor for breadcrumbing metadata across compilation boundaries.
+- [**102**Star][3m] [Go] [tbiehn/curryfinger](https://github.com/tbiehn/curryfinger) CURRYFINGER - SNI & Host header spoofing utility.
+- [**102**Star][2y] [C++] [sensepost/gdi-palettes-exp](https://github.com/sensepost/gdi-palettes-exp) 滥用 GDI 对象来揭示内核漏洞利用
+- [**102**Star][2y] [Go] [sakeven/httpproxy](https://github.com/sakeven/httpproxy) 基于 Go 开发,支持 http/1.1 以上版本的 HTTP(S) 代理。(Why not try out Mika?)
+- [**102**Star][1y] [JS] [rassec/a_scan_framework](https://github.com/rassec/a_scan_framework) Network Security Vulnerability Manage
+- [**102**Star][19d] [Py] [patois/idapyhelper](https://github.com/patois/idapyhelper) IDAPyHelper is a script for the Interactive Disassembler that helps writing IDAPython scripts and plugins.
+- [**102**Star][3m] [C#] [padovah4ck/cve-2019-1253](https://github.com/padovah4ck/cve-2019-1253) Poc for CVE-2019-1253
+- [**102**Star][3y] [Py] [n0fate/volafox](https://github.com/n0fate/volafox) Mac OS X Memory Analysis Toolkit
+- [**102**Star][11m] [Py] [mbevilacqua/appcompatprocessor](https://github.com/mbevilacqua/appcompatprocessor) "Evolving AppCompat/AmCache data analysis beyond grep"
+- [**102**Star][4m] [Py] [matrix1001/heapinspect](https://github.com/matrix1001/heapinspect)
+- [**102**Star][24d] [C] [madeye/tcp_china](https://github.com/madeye/tcp_china) TCP China congestion control algorithm
+- [**102**Star][3y] [Java] [liuyufei/sslkiller](https://github.com/liuyufei/sslkiller) SSLKiller is used for killing SSL verification functions on Android client side. With SSLKiller, You can intercept app's HTTPS communication packages between the client and server.
+- [**102**Star][8m] [PS] [leeberg/bluecommand](https://github.com/leeberg/bluecommand) Dashboarding and Tooling front-end for PowerShell Empire using PowerShell Universal Dashboard
+- [**102**Star][6m] [Py] [kibodwapon/noeye](https://github.com/kibodwapon/noeye) A blind mode exploit framework (a dns server and a web app) that like wvs's AcuMonitor Service or burpsuite's collabrator or cloudeye
+- [**102**Star][1m] [Go] [jmpsec/osctrl](https://github.com/jmpsec/osctrl) Fast and efficient osquery management
+- [**102**Star][3y] [JS] [jkingsman/bishop](https://github.com/jkingsman/bishop) Hunt for vulnerable websites as you browse.
+- [**102**Star][6m] [Py] [janniskirschner/horn3t](https://github.com/janniskirschner/horn3t) Powerful Visual Subdomain Enumeration at the Click of a Mouse
+- [**102**Star][6d] [PHP] [io-developer/php-whois](https://github.com/io-developer/php-whois) PHP WHOIS provides parsed and raw whois lookup of domains and ASN routes. PHP 5.4+ and 7+ compatible
+- [**102**Star][1m] [Py] [huuck/adbhoney](https://github.com/huuck/adbhoney) Low interaction honeypot designed for Android Debug Bridge over TCP/IP
+- [**102**Star][2y] [C] [hc0d3r/sudohulk](https://github.com/hc0d3r/sudohulk) 使用ptraceHook系统调用execve, 监控并修改sudo命令的参数
+- [**102**Star][2y] [C] [google/pg_page_verification](https://github.com/google/pg_page_verification) verify checksums on PostgreSQL data pages without having to load each page into shared buffer cache
+- [**102**Star][3y] [feicong/android-app-sec](https://github.com/feicong/android-app-sec) ISC 2016安全训练营-安卓app逆向与安全防护 ppt
+- [**102**Star][1y] [edoverflow/bugbountywiki](https://github.com/edoverflow/bugbountywiki) The Bug Bounty Wiki
+- [**102**Star][1m] [TS] [eddyverbruggen/nativescript-fingerprint-auth](https://github.com/eddyverbruggen/nativescript-fingerprint-auth)
+- [**102**Star][1y] [Java] [duo-labs/xray](https://github.com/duo-labs/xray) X-Ray allows you to scan your Android device for security vulnerabilities that put your device at risk.
+- [**102**Star][10m] [C++] [decred/gominer](https://github.com/decred/gominer) Go (golang) based GPU miner for Decred.
+- [**102**Star][1y] [cujanovic/crlf-injection-payloads](https://github.com/cujanovic/crlf-injection-payloads) Payloads for CRLF Injection
+- [**102**Star][7d] [Py] [buffer/pylibemu](https://github.com/buffer/pylibemu) A Libemu Cython wrapper
+- [**102**Star][3y] [C++] [azuregreen/injectcollection](https://github.com/azuregreen/injectcollection) A collection of injection via vc++ in ring3
+- [**102**Star][6d] [PS] [awsmhacks/crackmapextreme](https://github.com/awsmhacks/crackmapextreme) For all your network pentesting needs
+- [**102**Star][1y] [Py] [apg-intel/ipv6tools](https://github.com/apg-intel/ipv6tools) IPv6Tools is a robust modular framework that enables the ability to visually audit an IPv6 enabled network.
+- [**102**Star][5m] [Py] [anx1ang/poc_pentest](https://github.com/anx1ang/poc_pentest)
+- [**102**Star][5y] [Py] [ajinabraham/static-dom-xss-scanner](https://github.com/ajinabraham/static-dom-xss-scanner) Static DOM XSS Scanner is a Static Analysis tool written in python that will iterate through all the JavaScript and HTML files under the given directory and will list out all the possible sources and sinks that may cause DOM XSS. At the end of the scan, the tool will generate an HTML report.
+- [**102**Star][6m] [HTML] [ahmia/search](https://github.com/ahmia/search) Ahmia - Search Engine for onion services.
+- [**101**Star][8m] [Shell] [hmaverickadams/breach-parse](https://github.com/hmaverickadams/breach-parse) A tool for parsing breached passwords
+- [**101**Star][1m] [C#] [n1xbyte/donutcs](https://github.com/n1xbyte/donutcs) dem sharp donuts
+- [**101**Star][7d] [Ruby] [arkadiyt/bounty-targets](https://github.com/arkadiyt/bounty-targets) This project crawls bug bounty platform scopes (like Hackerone/Bugcrowd/etc) hourly and dumps them into the bounty-targets-data repo
+- [**101**Star][9m] [polarislab/secpaper](https://github.com/PolarisLab/SecPaper) SecurityPaper For
+- [**101**Star][4m] [Py] [6e726d/wig](https://github.com/6e726d/wig) Tools for 802.11 information gathering.
+- [**101**Star][2y] [Py] [znuh/re-dected](https://github.com/znuh/re-dected) tools for playing with DECT
+- [**101**Star][3m] [xx0hcd/malleable-c2-profiles](https://github.com/xx0hcd/malleable-c2-profiles) Cobalt Strike - Malleable C2 Profiles. A collection of profiles used in different projects using Cobalt Strike
+- [**101**Star][17d] [HTML] [w3c/webappsec-csp](https://github.com/w3c/webappsec-csp) WebAppSec Content Security Policy
+- [**101**Star][4y] [utkusen/eda2](https://github.com/utkusen/eda2) a more complex ransomware honeypot
+- [**101**Star][2y] [Java] [spiderlabs/airachnid-burp-extension](https://github.com/spiderlabs/airachnid-burp-extension) A Burp Extension to test applications for vulnerability to the Web Cache Deception attack
+- [**101**Star][6m] [Py] [skysider/vulnpoc](https://github.com/skysider/vulnpoc) Vulnerability Verification Environment based on Docker
+- [**101**Star][4y] [Ruby] [sam-b/hashdata](https://github.com/sam-b/hashdata) A command line Hash Identifying tool.
+- [**101**Star][8m] [Rust] [rub-syssec/nautilus](https://github.com/rub-syssec/nautilus) a grammar based feedback fuzzer
+- [**101**Star][2m] [Py] [raw-packet/raw-packet](https://github.com/raw-packet/raw-packet) Raw-packet Project
+- [**101**Star][9m] [polarislab/secpaper](https://github.com/polarislab/secpaper) SecurityPaper For
+- [**101**Star][5d] [Dockerfile] [peterdavehello/tor-socks-proxy](https://github.com/peterdavehello/tor-socks-proxy) Setup Tor SOCKS5 proxy server with a < 10MB
+- [**101**Star][2m] [C] [onotelli/justniffer](https://github.com/onotelli/justniffer) Justniffer Just A Network TCP Packet Sniffer .Justniffer is a network protocol analyzer that captures network traffic and produces logs in a customized way, can emulate Apache web server log files, track response times and extract all "intercepted" files from the HTTP traffic
+- [**101**Star][2m] [Java] [netspi/burp-extensions](https://github.com/netspi/burp-extensions) Central Repo for Burp extensions
+- [**101**Star][2y] [C++] [nccgroup/tpmgenie](https://github.com/nccgroup/tpmgenie) TPM Genie is an I2C bus interposer for discrete Trusted Platform Modules
+- [**101**Star][3y] [Py] [n00py/norknork](https://github.com/n00py/norknork) Powershell Empire Persistence finder
+- [**101**Star][1y] [Java] [mystech7/burp-hunter](https://github.com/mystech7/burp-hunter) XSS Hunter Burp Plugin
+- [**101**Star][1y] [Py] [mr-un1k0d3r/windows-signedbinary](https://github.com/mr-un1k0d3r/windows-signedbinary) Generate Windows Signed Binary With a Different Hash
+- [**101**Star][2m] [Py] [mkorman90/regipy](https://github.com/mkorman90/regipy) Regipy is an os independent python library for parsing offline registry hives
+- [**101**Star][1y] [Go] [milo2012/cve-2018-0296](https://github.com/milo2012/cve-2018-0296) Test CVE-2018-0296 and extract usernames
+- [**101**Star][2y] [C++] [mfontanini/dot11decrypt](https://github.com/mfontanini/dot11decrypt) An 802.11 WEP/WPA2 on-the-fly decrypter.
+- [**101**Star][3y] [mattifestation/deviceguardbypassmitigationrules](https://github.com/mattifestation/deviceguardbypassmitigationrules) A reference Device Guard code integrity policy consisting of FilePublisher deny rules for published Device Guard configuration bypasses
+- [**101**Star][1y] [Py] [macr0phag3/sniffer](https://github.com/macr0phag3/sniffer) A Sniffer for Open-WLAN
+- [**101**Star][11m] [C] [kirillwow/ids_bypass](https://github.com/kirillwow/ids_bypass) 入侵检测系统(IDS)绕过PoC
+- [**101**Star][4y] [Ruby] [joernchen/xxeserve](https://github.com/joernchen/xxeserve) XXE Out of Band Server.
+- [**101**Star][2m] [ihebski/a-red-teamer-diaries](https://github.com/ihebski/a-red-teamer-diaries) RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.
+- [**101**Star][1y] [Py] [google/closure-linter](https://github.com/google/closure-linter) Automatically exported from code.google.com/p/closure-linter
+- [**101**Star][3m] [C++] [giovannidicanio/winreg](https://github.com/giovannidicanio/winreg) Convenient high-level C++ wrapper around the Windows Registry API
+- [**101**Star][4y] [PS] [enigma0x3/invoke-loginprompt](https://github.com/enigma0x3/invoke-loginprompt) Invokes a Windows Security Login Prompt and outputs the clear text password.
+- [**101**Star][2y] [Objective-C++] [electrajailbreak/cydia](https://github.com/electrajailbreak/cydia) Cydia modified for iOS 11/Electra
+- [**101**Star][8y] [C] [djrbliss/libplayground](https://github.com/djrbliss/libplayground) A simple framework for developing Linux kernel heap exploit techniques
+- [**101**Star][2y] [PS] [darkoperator/defcon25_ps_workshop](https://github.com/darkoperator/defcon25_ps_workshop) Materials of Workshop presented at DEFCON 25
+- [**101**Star][3m] [C#] [damonmohammadbagher/nativepayload_reverse_tcp](https://github.com/damonmohammadbagher/nativepayload_reverse_tcp) Meterpreter Encrypted Payload by C#
+- [**101**Star][8d] [C++] [cyclops-community/ctf](https://github.com/cyclops-community/ctf) Cyclops Tensor Framework: parallel arithmetic on multidimensional arrays
+- [**101**Star][1y] [Java] [cornerpirate/java-stager](https://github.com/cornerpirate/java-stager) A PoC Java Stager which can download, compile, and execute a Java file in memory.
+- [**101**Star][5y] [C++] [clymb3r/misc-windows-hacking](https://github.com/clymb3r/misc-windows-hacking) Miscellaneous projects related to attacking Windows.
+- [**101**Star][2y] [Java] [clr2of8/gathercontacts](https://github.com/clr2of8/gathercontacts) A Burp Suite Extension to pull Employee Names from Google and Bing LinkedIn Search Results
+- [**101**Star][1y] [C#] [chrismaddalena/sharpcloud](https://github.com/chrismaddalena/sharpcloud) Simple C# for checking for the existence of credential files related to AWS, Microsoft Azure, and Google Compute.
+- [**101**Star][2y] [Py] [ceh-tn/the-axer](https://github.com/ceh-tn/the-axer) replace the manual procedure of creating your payloads with msfvenom , making it easier and a lot quicker
+- [**101**Star][1y] [JS] [blackhole1/autofindxssandcsrf](https://github.com/blackhole1/autofindxssandcsrf) 自动化检测页面是否存在XSS和CSRF漏洞的浏览器插件(A plugin for browser that checks automatically whether a page haves XSS and CSRF vulnerabilities)
+- [**101**Star][2y] [C] [benjibobs/async_wake](https://github.com/benjibobs/async_wake) iOS 11.1.2 kernel exploit and PoC local kernel debugger by
+- [**101**Star][2y] [C] [akayn/postexploits](https://github.com/akayn/postexploits) post exploitation: Keyloggers, UacByPass etc..
+- [**101**Star][20d] [Py] [adulau/cve-search](https://github.com/adulau/cve-search) cve-search is a tool to import CVE (Common Vulnerabilities and Exposures) and CPE (Common Platform Enumeration) into a MongoDB to facilitate search and processing of CVEs.
+- [**101**Star][3m] [Java] [0ffffffffh/dragondance](https://github.com/0ffffffffh/dragondance) Binary code coverage visualizer plugin for Ghidra
+ - [Ghidra插件](https://github.com/0ffffffffh/dragondance/blob/master/README.md)
+ - [coverage-pin](https://github.com/0ffffffffh/dragondance/blob/master/coveragetools/README.md) 使用Pin收集信息
+- [**100**Star][6m] [C] [siguza/iometa](https://github.com/siguza/iometa) Just another IOKit class dumper
+- [**100**Star][9d] [Makefile] [honwen/openwrt-shadowsocksr](https://github.com/honwen/openwrt-shadowsocksr) ShadowsocksR-libev for OpenWrt/LEDE
+- [**100**Star][2d] [JS] [paradiseduo/shadowsocksx-ng-r8](https://github.com/paradiseduo/shadowsocksx-ng-r8) ShadowsocksX-NG-R for MacOS
+- [**100**Star][14d] [Shell] [snail007/proxy_admin_free](https://github.com/snail007/proxy_admin_free) A powerful web console of snail007/goproxy .
+- [**100**Star][3y] [C] [sciencemanx/ctf_import](https://github.com/sciencemanx/ctf_import) Run basic functions from stripped binaries cross platform
+- [**100**Star][4y] [woolabs/reverseng](https://github.com/woolabs/reverseng) 《Reverse Engineering for Beginners》翻译
+- [**100**Star][3y] [Py] [williballenthin/shellbags](https://github.com/williballenthin/shellbags) Cross-platform, open-source shellbag parser
+- [**100**Star][9m] [Shell] [vishnudxb/docker-blackeye](https://github.com/vishnudxb/docker-blackeye) Docker container for creating the phishing sites using Blackeye
+- [**100**Star][3y] [Py] [tbgsecurity/splunk_shells](https://github.com/tbgsecurity/splunk_shells) Weaponizing Splunk with reverse and bind shells.
+- [**100**Star][2y] [Py] [syss-research/outis](https://github.com/syss-research/outis) outis is a custom Remote Administration Tool (RAT) or something like that. It was build to support various transport methods (like DNS) and platforms (like Powershell).
+- [**100**Star][10m] [Go] [subutai-io/p2p](https://github.com/subutai-io/p2p) P2P Cloud project allows users to build their private networks.
+- [**100**Star][5m] [Py] [spring-epfl/lightnion](https://github.com/spring-epfl/lightnion) A light version of Tor portable to the browser
+- [**100**Star][2y] [C] [shellster/dcsyncmonitor](https://github.com/shellster/dcsyncmonitor) Monitors for DCSYNC and DCSHADOW attacks and create custom Windows Events for these events.
+- [**100**Star][1y] [Py] [securestate/eapeak](https://github.com/securestate/eapeak) Analysis Suite For EAP Enabled Wireless Networks
+- [**100**Star][1y] [sapran/dontclickshit](https://github.com/sapran/dontclickshit) Як не стати кібер-жертвою
+- [**100**Star][3y] [CSS] [nonce-disrespect/nonce-disrespect](https://github.com/nonce-disrespect/nonce-disrespect) Nonce-Disrespecting Adversaries: Practical Forgery Attacks on GCM in TLS
+- [**100**Star][3m] [C] [nese-team/ourchallenges](https://github.com/nese-team/ourchallenges) writeups for our challenges
+- [**100**Star][3y] [Py] [ncouture/mockssh](https://github.com/ncouture/mockssh) Mock an SSH server and define all commands it supports (Python, Twisted)
+- [**100**Star][2m] [Py] [nccgroup/gitpwnd](https://github.com/nccgroup/gitpwnd) gitpwnd:网络渗透测试工具,可使攻击者向被攻击机器发送命令,并使用 git repo 作为 C&C 传输层接收结果
+- [**100**Star][2m] [momika233/joomla-3.4.6-rce](https://github.com/momika233/joomla-3.4.6-rce) Joomla 3.4.6 – Remote Code Execution
+- [**100**Star][5y] [JS] [malwarelu/malwasm](https://github.com/malwarelu/malwasm) Offline debugger for malware's reverse engineering
+- [**100**Star][12m] [Py] [krintoxi/noobsec-toolkit](https://github.com/krintoxi/noobsec-toolkit) NoobSecToolkit is a Python Based Tool kit that brings together powerful security and anonymity tools and scripts with predefined security configurations and modifications. Making it very simple for students and the inexperienced to get started with offensive security!
+- [**100**Star][5d] [Java] [jpmorganchase/tessera](https://github.com/jpmorganchase/tessera) Enterprise Implementation of Quorum's transaction manager
+- [**100**Star][4y] [Py] [jonathansalwan/abf](https://github.com/jonathansalwan/abf) Abstract Binary Format Manipulation - ELF, PE and Mach-O format
+- [**100**Star][1m] [jonaschn/awesome-he](https://github.com/jonaschn/awesome-he)
+- [**100**Star][3y] [C] [jndok/iokit-dumper-arm64](https://github.com/jndok/iokit-dumper-arm64) tool for statically reconstructing the IOKit classes hierarchy from iOS kernelcache dumps
+- [**100**Star][4y] [C] [ionescu007/hookingnirvana](https://github.com/ionescu007/hookingnirvana) Recon 2015 Presentation from Alex Ionescu
+- [**100**Star][2y] [Py] [g0rx/cve-2018-7600-drupal-rce](https://github.com/g0rx/cve-2018-7600-drupal-rce) CVE-2018-7600 Drupal RCE
+- [**100**Star][2y] [C++] [fvantienen/dji_rev](https://github.com/fvantienen/dji_rev) DJI Reverse engineering
+- [**100**Star][8m] [fox-it/cobaltstrike-extraneous-space](https://github.com/fox-it/cobaltstrike-extraneous-space) Historical list of {Cobalt Strike,NanoHTTPD} servers
+- [**100**Star][4y] [Py] [eset/vba-dynamic-hook](https://github.com/eset/vba-dynamic-hook) dynamically analyzes VBA macros inside Office documents by hooking function calls
+- [**100**Star][2m] [Py] [elevenpaths/uac-a-mola](https://github.com/elevenpaths/uac-a-mola)
+- [**100**Star][3m] [Py] [cs01/pygdbmi](https://github.com/cs01/pygdbmi) A library to parse gdb mi output, as well as control gdb subprocesses
+- [**100**Star][4y] [Py] [cr4sh/uefi_boot_script_expl](https://github.com/cr4sh/uefi_boot_script_expl) CHIPSEC module that exploits UEFI boot script table vulnerability
+- [**100**Star][2y] [C] [comsecuris/luaqemu](https://github.com/comsecuris/luaqemu) QEMU-based framework exposing several of QEMU-internal APIs to a LuaJIT core injected into QEMU itself. Among other things, this allows fast prototyping of target systems without any native code and minimal effort in Lua.
+- [**100**Star][1y] [C] [cnlohr/fx3fun](https://github.com/cnlohr/fx3fun) Charles's playground for the Cypress FX3
+- [**100**Star][5y] [Py] [blasty/moneyshot](https://github.com/blasty/moneyshot) A collection of python scripts to aid you in the final steps of binary exploitation or during the construction of buffers.
+- [**100**Star][2y] [JS] [avlidienbrunn/bountydash](https://github.com/avlidienbrunn/bountydash) 从所有BugBounty平台收集你获取的奖励信息, 生成进度和漏洞类型信息图表等
+- [**100**Star][2y] [C++] [artsabintsev/ethminer-for-macos](https://github.com/artsabintsev/ethminer-for-macos) Ethereum GPU Miner for macOS.
+- [**100**Star][1m] [Py] [angr/claripy](https://github.com/angr/claripy) An abstraction layer for constraint solvers.
+- [**100**Star][8m] [ObjC] [anders/pwgen](https://github.com/anders/pwgen) password generator for OS X
+- [**100**Star][4y] [Py] [alexplaskett/qnxsecurity](https://github.com/alexplaskett/qnxsecurity) QNX and BB10 Security Tools
+- [**100**Star][2y] [Py] [acceis/crypto_identifier](https://github.com/acceis/crypto_identifier) Crypto tool for pentest and ctf : try to uncipher data using multiple algorithms and block chaining modes. Usefull for a quick check on unknown cipher text and key dictionnary
+- [**100**Star][11m] [1hack0/bug-bounty-101](https://github.com/1hack0/bug-bounty-101) Happy Hunting
+- [**99**Star][2m] [Shell] [nfc-tools/milazycracker](https://github.com/nfc-tools/milazycracker) Mifare Classic Plus - Hardnested Attack Implementation for SCL3711 LibNFC USB reader
+- [**99**Star][10d] [JS] [javascript-obfuscator/javascript-obfuscator-ui](https://github.com/javascript-obfuscator/javascript-obfuscator-ui) A web UI to the JavaScript Obfuscator node.js package.
+- [**99**Star][10m] [winterssy/miui-purify](https://github.com/winterssy/miui-purify) 个人兴趣项目存档,使用 apktool 魔改 MIUI ROM,去除 MIUI 系统新增的广告。
+- [**99**Star][14d] [Py] [devploit/xorpass](https://github.com/devploit/xorpass) Encoder to bypass WAF filters using XOR operations
+- [**99**Star][2d] [TSQL] [cisagov/cset](https://github.com/cisagov/cset) Cybersecurity Evaluation Tool
+- [**99**Star][17d] [PS] [dsccommunity/computermanagementdsc](https://github.com/dsccommunity/ComputerManagementDsc)
+- [**99**Star][4m] [houjingyi233/cpu-vulnerability-collections](https://github.com/houjingyi233/CPU-vulnerability-collections)
+- [**99**Star][2y] [Shell] [aoncyberlabs/cexigua](https://github.com/AonCyberLabs/Cexigua) Linux based inter-process code injection without ptrace(2)
+- [**99**Star][1m] [PHP] [gwillem/magevulndb](https://github.com/gwillem/magevulndb) Central repository for third party Magento extensions with known security issues.
+- [**99**Star][22d] [Py] [rapid7/le](https://github.com/rapid7/le) A command line utility for a convenient access to Logentries logging infrastructure.
+- [**99**Star][2y] [antid0tecom/ios-kerneldocs](https://github.com/Antid0teCom/ios-kerneldocs) Various files helping to better understand the iOS / WatchOS / tvOS kernels
+- [**99**Star][2y] [C++] [atxsinn3r/amsiscanner](https://github.com/atxsinn3r/amsiscanner) A C/C++ implementation of Microsoft's Antimalware Scan Interface
+- [**99**Star][9m] [C#] [zodiacon/peexplorer](https://github.com/zodiacon/peexplorer) Portable Executable Explorer
+- [**99**Star][3y] [Py] [ym2011/scanbackdoor](https://github.com/ym2011/scanbackdoor) Webshell扫描工具,通过各种规则和算法实现服务器脚本后门查杀
+- [**99**Star][2y] [C] [xerpi/ds4vita](https://github.com/xerpi/ds4vita)
+- [**99**Star][1y] [Py] [wonderqs/blade](https://github.com/wonderqs/blade) A webshell connection tool with customized WAF bypass payloads
+- [**99**Star][27d] [Shell] [trimstray/massh-enum](https://github.com/trimstray/massh-enum) OpenSSH 2.3 up to 7.4 Mass Username Enumeration (CVE-2018-15473).
+- [**99**Star][14d] [C++] [trailofbits/sienna-locomotive](https://github.com/trailofbits/sienna-locomotive) A user-friendly fuzzing and crash triage tool for Windows
+- [**99**Star][1y] [Py] [thehappydinoa/iosrestrictionbruteforce](https://github.com/thehappydinoa/iosrestrictionbruteforce) Crack iOS Restriction Passcodes with Python
+- [**99**Star][2y] [PS] [testingpens/malwarepersistencescripts](https://github.com/testingpens/malwarepersistencescripts) A collection of scripts I've written to help red and blue teams with malware persistence techniques.
+- [**99**Star][9y] [C] [tecknicaltom/dsniff](https://github.com/tecknicaltom/dsniff) dsniff is a collection of tools for network auditing and penetration testing.
+- [**99**Star][12m] [target/webbreaker](https://github.com/target/webbreaker) 自动并集中管理DAST,将其作为 DevOps pipeline 的一部分。(DAST:Dynamic Application Security Test,动态应用程序安全测试)
+- [**99**Star][3y] [C++] [tandasat/exploitcapcom](https://github.com/tandasat/exploitcapcom) This is a standalone exploit for a vulnerable feature in Capcom.sys
+- [**99**Star][2y] [Py] [sonickun/ctf-crypto-writeups](https://github.com/sonickun/ctf-crypto-writeups)
+- [**99**Star][6m] [Py] [smythtech/sdnpwn](https://github.com/smythtech/sdnpwn) SDN 渗透测试工具包。(SDN:Software-Defined Networks,软件定义网络)
+- [**99**Star][4y] [Py] [racwn/wp-file-analyser](https://github.com/racwn/wp-file-analyser) Find modified, missing and extra files in a WordPress directory
+- [**99**Star][3y] [Java] [pwntester/s2-046-poc](https://github.com/pwntester/s2-046-poc) S2-046-PoC
+- [**99**Star][2y] [Py] [pure-l0g1c/pulse](https://github.com/pure-l0g1c/pulse) Brute Force For Facebook,Instagram & Twitter
+- [**99**Star][6m] [Shell] [parrotsec/anonsurf](https://github.com/parrotsec/anonsurf) parrot anonymous mode
+- [**99**Star][28d] [C++] [oxagast/ansvif](https://github.com/oxagast/ansvif) A Not So Very Intelligent Fuzzer: An advanced fuzzing framework designed to find vulnerabilities in C/C++ code.
+- [**99**Star][1y] [PS] [nettitude/invoke-powerthief](https://github.com/nettitude/invoke-powerthief) The PowerThIEf, an Internet Explorer Post Exploitation library
+- [**99**Star][2y] [Py] [mr-un1k0d3r/sct-obfuscator](https://github.com/mr-un1k0d3r/sct-obfuscator) Cobalt Strike SCT payload obfuscator
+- [**99**Star][2d] [TeX] [misp/misp-training](https://github.com/misp/misp-training) MISP trainings, threat intel and information sharing training materials with source code
+- [**99**Star][2m] [Py] [m4cs/traxss](https://github.com/m4cs/traxss) traxss | Automated XSS Vulnerability Scanner Currently In Development
+- [**99**Star][3y] [lorexxar/feigong](https://github.com/lorexxar/feigong) Feigong,针对各种情况自由变化的mysql注入脚本,In view of the different things freely change the mysql injection script
+- [**99**Star][2y] [CSS] [lmy375/pinvmp](https://github.com/lmy375/pinvmp) 虚拟化代码辅助分析工具
+- [**99**Star][30d] [Py] [lambdaconcept/minerva](https://github.com/lambdaconcept/minerva) A 32-bit RISC-V soft processor
+- [**99**Star][2m] [Shell] [johanlike/djy-oneplus6-or-oneplus6t-nethunter-andrax-kernel](https://github.com/johanlike/djy-oneplus6-or-oneplus6t-nethunter-andrax-kernel) DJY Nethunter And Andrax Kernel Oneplus6-Oneplus6T
+- [**99**Star][3y] [Java] [jkinder/jakstab](https://github.com/jkinder/jakstab) The Jakstab static analysis platform for binaries
+- [**99**Star][3m] [Py] [intezer/memorypatchdetector](https://github.com/intezer/memorypatchdetector) Detects code differentials between executables in disk and the corresponding processes/modules in memory
+- [**99**Star][2m] [C] [iaik/flush_flush](https://github.com/iaik/flush_flush) This repository contains examples of Flush+Flush cache attacks
+- [**99**Star][11m] [hasherezade/pe-bear-releases](https://github.com/hasherezade/pe-bear-releases) PE-bear (builds only)
+- [**99**Star][1y] [Java] [ganyao114/va_doc](https://github.com/ganyao114/va_doc) VirtualApp 代码注释
+- [**99**Star][5y] [Java] [finn-no/xss-html-filter](https://github.com/finn-no/xss-html-filter) Open Sourced HTML filtering utility for Java. Used to parse user-submitted input and sanitize it against potential cross site scripting attacks, malicious html, or simply badly formed html.
+- [**99**Star][1y] [Py] [darx0r/stingray](https://github.com/darx0r/stingray) IDAPython plugin for finding function strings recursively
+- [**99**Star][3y] [C#] [cyberpoint/ruxcon2016etw](https://github.com/cyberpoint/ruxcon2016etw) Ruxcon2016 POC Code
+- [**99**Star][3y] [C] [codelion/pathgrind](https://github.com/codelion/pathgrind) Path based Dynamic Analysis
+- [**99**Star][4m] [Py] [circl/url-abuse](https://github.com/circl/url-abuse) A Versatile Software for URL review, analysis and black-list reporting
+- [**99**Star][3y] [Py] [bontchev/wlscrape](https://github.com/bontchev/wlscrape) A tool for scrapping the possible malware from the Wikileaks AKP leak
+- [**99**Star][4y] [JS] [bishopfox/cve-2016-1764](https://github.com/bishopfox/cve-2016-1764) Recovery of Plaintext iMessage Data Without Breaking Crypto
+- [**99**Star][8d] [Scala] [bigdatagenomics/mango](https://github.com/bigdatagenomics/mango) A scalable genome browser. Apache 2 licensed.
+- [**99**Star][9m] [Py] [attactics/nmapgrapher](https://github.com/attactics/nmapgrapher) A tool to generate graph and other output from NMAP XML files
+- [**99**Star][1y] [C#] [atredispartners/cve-2018-0952-systemcollector](https://github.com/atredispartners/cve-2018-0952-systemcollector) PoC for Privilege Escalation in Windows 10 Diagnostics Hub Standard Collector Service
+- [**98**Star][4y] [C] [aquynh/unidos](https://github.com/aquynh/unidos) MSDOS emulator built on top of Unicorn engine
+- [**98**Star][7d] [Shell] [seajaysec/cypheroth](https://github.com/seajaysec/cypheroth) Automated, extensible toolset that runs cypher queries against Bloodhound's Neo4j backend and saves output to spreadsheets.
+- [**98**Star][3m] [C++] [marcosd4h/sysmonx](https://github.com/marcosd4h/sysmonx) An Augmented Drop-In Replacement of Sysmon
+- [**98**Star][23d] [chryzsh/awesome-bloodhound](https://github.com/chryzsh/awesome-bloodhound) A curated list of awesome BloodhoundAD resources
+- [**98**Star][1m] [C] [radareorg/radare2-bindings](https://github.com/radareorg/radare2-bindings) Bindings of the r2 api for Valabind and friends
+- [**98**Star][8m] [Py] [zsdlove/apkvulcheck](https://github.com/zsdlove/apkvulcheck) This is a tool to help androidcoder to check the flaws in their projects.
+- [**98**Star][2y] [Py] [trendmicro/defplorex](https://github.com/trendmicro/defplorex) 一种用于大规模电子犯罪取证的机器学习工具包
+- [**98**Star][9m] [Go] [superfly/wormhole](https://github.com/superfly/wormhole) Fly.io secure tunnel
+- [**98**Star][4y] [Java] [summitt/burp-ysoserial](https://github.com/summitt/burp-ysoserial) YSOSERIAL Integration with burp suite
+- [**98**Star][3y] [singe/wifi-frequency-hacker](https://github.com/singe/wifi-frequency-hacker) A modified frequency regulatory domain configuration that doesn't limit you.
+- [**98**Star][2m] [Ruby] [simp/simp-core](https://github.com/simp/simp-core) The base SIMP build repository
+- [**98**Star][4y] [PHP] [silentbreaksec/throwbacklp](https://github.com/silentbreaksec/throwbacklp) Listening Post for Throwback Implant
+- [**98**Star][2y] [Java] [securityriskadvisors/cmd.jsp](https://github.com/securityriskadvisors/cmd.jsp) A super small jsp webshell with file upload capabilities.
+- [**98**Star][6y] [C++] [sdhash/sdhash](https://github.com/sdhash/sdhash) allows two arbitrary blobs of data to be compared for similarity based on common strings of binary data
+- [**98**Star][1y] [Py] [scottgarner/beetbox](https://github.com/scottgarner/beetbox) Python code that powers the BeetBox.
+- [**98**Star][1m] [Py] [sandialabs/dr_robot](https://github.com/sandialabs/dr_robot) This tool can be used to enumerate the subdomains associated with a company by aggregating the results of multiple OSINT (Open Source Intelligence) tools.
+- [**98**Star][11m] [Batchfile] [sagishahar/lpeworkshop](https://github.com/sagishahar/lpeworkshop) Windows/Linux本地提权工作室
+- [**98**Star][3m] [Py] [phith0n/realworldctf](https://github.com/phith0n/realworldctf) My Real World CTF challenges
+- [**98**Star][5y] [Py] [onesourcecat/scan-framework](https://github.com/onesourcecat/scan-framework) A framework used for Vulnerability scanning
+- [**98**Star][10m] [C] [nowrep/vita-shellbat](https://github.com/nowrep/vita-shellbat) taiHEN plugin that shows battery percent in statusbar
+- [**98**Star][4m] [Py] [mushorg/tanner](https://github.com/mushorg/tanner) He who flays the hide
+- [**98**Star][4m] [C++] [mixaill/fakepdb](https://github.com/mixaill/fakepdb) 通过IDA数据库生成PDB文件
+- [**98**Star][4m] [Py] [milo2012/cve-2018-13382](https://github.com/milo2012/cve-2018-13382) CVE-2018-13382
+- [**98**Star][2y] [C] [micropython/micropython-unicorn](https://github.com/micropython/micropython-unicorn) 基于 Unicorn 模拟器的虚拟微控制器(virtual microcontroller),以及针对此虚拟微控制器的 MicroPython。
+- [**98**Star][3y] [Py] [merculite/ble-security](https://github.com/merculite/ble-security) Hacking Bluetooth Low Energy Locks
+- [**98**Star][6y] [Py] [matonis/page_brute](https://github.com/matonis/page_brute) a digital forensic tool purposed to analyze and categorize individual paged memory frames from Windows Page Files by appying YARA-based signatures to fix-sized blocks of pagefile.sys
+- [**98**Star][3y] [Py] [matiasb/demiurge](https://github.com/matiasb/demiurge) PyQuery-based scraping micro-framework.
+- [**98**Star][1m] [Go] [ls0f/cracker](https://github.com/ls0f/cracker) tunnel over http[s]
+- [**98**Star][2y] [Py] [leesoh/yams](https://github.com/leesoh/yams) A collection of Ansible roles for automating infosec builds.
+- [**98**Star][2y] [ktecv2000/how-to-play-ctf](https://github.com/ktecv2000/how-to-play-ctf) CTF入門建議
+- [**98**Star][15d] [Shell] [konstruktoid/ansible-role-hardening](https://github.com/konstruktoid/ansible-role-hardening) Ansible role to apply a security baseline. Systemd edition.
+- [**98**Star][8m] [Swift] [kofktu/sniffer](https://github.com/kofktu/sniffer) Networking activity logger for Swift
+- [**98**Star][2y] [Py] [kitctf/writeups](https://github.com/kitctf/writeups) CTF writeups
+- [**98**Star][1y] [C] [jakeajames/multi_path](https://github.com/jakeajames/multi_path) multi_path with root and sandbox escape
+- [**98**Star][2y] [Java] [irsl/jackson-rce-via-spel](https://github.com/irsl/jackson-rce-via-spel) An example project that exploits the default typing issue in Jackson-databind via Spring application contexts and expressions
+- [**98**Star][3y] [ObjC] [insidegui/darkmode](https://github.com/insidegui/darkmode) Enable "real dark mode" on OS X / macOS
+- [**98**Star][3m] [Py] [guyingbo/shadowproxy](https://github.com/guyingbo/shadowproxy) A proxy server that implements Socks5/Shadowsocks/Redirect/HTTP (tcp) and Shadowsocks/TProxy/Tunnel (udp) protocols.
+- [**98**Star][1y] [Ruby] [green-m/green-hat-suite](https://github.com/green-m/green-hat-suite) Green-hat-suite is a tool to generate meterpreter/shell which could evade antivirus.
+- [**98**Star][2y] [Py] [google/legilimency](https://github.com/google/legilimency) A Memory Research Platform for iOS
+- [**98**Star][3y] [Shell] [gebl/dirtycow-docker-vdso](https://github.com/gebl/dirtycow-docker-vdso)
+- [**98**Star][5m] [Py] [fmk0/scripts](https://github.com/fmk0/scripts)
+- [**98**Star][3y] [flothrone/bootguard](https://github.com/flothrone/bootguard)
+- [**98**Star][2y] [C++] [cojocar/bin2llvm](https://github.com/cojocar/bin2llvm) A binary to LLVM translator
+- [**98**Star][3y] [PS] [chango77747/adenumerator](https://github.com/chango77747/adenumerator) Active Directory enumeration from non-domain system.
+- [**98**Star][2m] [byt3bl33d3r/slides](https://github.com/byt3bl33d3r/slides) Slides from various talks that I've given over the years
+- [**98**Star][2y] [Py] [blackye/webdirdig](https://github.com/blackye/webdirdig) web敏感目录、信息泄漏批量扫描脚本,结合爬虫、目录深度遍历。
+- [**98**Star][4m] [Pascal] [artlav/meteor_decoder](https://github.com/artlav/meteor_decoder) A portable decoder for METEOR M weather satellite LRPT signal
+- [**98**Star][4y] [Java] [andrewmichaelsmith/bluepot](https://github.com/andrewmichaelsmith/bluepot) Bluetooth Honeypot
+- [**98**Star][1y] [Go] [0x09al/go-deliver](https://github.com/0x09al/go-deliver) Go-deliver is a payload delivery tool coded in Go.
+- [**97**Star][1y] [Go] [bechurch/reverse-proxy-demo](https://github.com/bechurch/reverse-proxy-demo)
+- [**97**Star][1y] [Py] [tonyseek/rsocks](https://github.com/tonyseek/rsocks) A SOCKS 4/5 reverse proxy server
+- [**97**Star][2d] [Py] [securisec/chepy](https://github.com/securisec/chepy) Chepy is a python lib/cli equivalent of the awesome CyberChef tool.
+- [**97**Star][1y] [PS] [hackplayers/empire-mod-hackplayers](https://github.com/hackplayers/empire-mod-hackplayers) PowerShell Empire mod to post-exploit the World!
+- [**97**Star][11m] [R] [stephenturner/annotables](https://github.com/stephenturner/annotables) R data package for annotating/converting Gene IDs
+- [**97**Star][3m] [C] [virtualabs/radiobit](https://github.com/virtualabs/radiobit) Micro:Bit Radio framework
+- [**97**Star][3m] [xyntax/security-conference-archive](https://github.com/xyntax/security-conference-archive) Collection of Security Conference Slides/Papers
+- [**97**Star][1m] [PHP] [cybercog/laravel-optimus](https://github.com/cybercog/laravel-optimus) Transform your internal id's to obfuscated integers based on Knuth's integer hash.
+- [**97**Star][28d] [C++] [4d61726b/virtualkd-redux](https://github.com/4d61726b/virtualkd-redux) VirtualKD-Redux - A revival and modernization of VirtualKD
+- [**97**Star][1m] [Py] [xct/ropstar](https://github.com/xct/ropstar) Automatic exploit generation for simple linux pwn challenges.
+- [**97**Star][20d] [Py] [pagalaxylab/vxhunter](https://github.com/PAGalaxyLab/vxhunter) A ToolSet for VxWorks Based Embedded Device Analyses.
+ - [R2](https://github.com/PAGalaxyLab/vxhunter/blob/master/firmware_tools/vxhunter_r2_py2.py)
+ - [IDA插件](https://github.com/PAGalaxyLab/vxhunter/blob/master/firmware_tools/vxhunter_ida.py)
+ - [Ghidra插件](https://github.com/PAGalaxyLab/vxhunter/tree/master/firmware_tools/ghidra)
+- [**97**Star][2y] [CSS] [owasp/owasp-summit-2017](https://github.com/OWASP/owasp-summit-2017) Content for OWASP Summit 2017 site
+- [**97**Star][4y] [Java] [zencodex/hack-android](https://github.com/zencodex/hack-android) Collection tools for hack android, java
+- [**97**Star][3y] [Ruby] [zcgonvh/cve-2017-7269](https://github.com/zcgonvh/cve-2017-7269) cve-2017-7269:修订版msf模块
+- [**97**Star][4m] [Py] [woanware/usbdeviceforensics](https://github.com/woanware/usbdeviceforensics) Python script for extracting USB information from Windows registry hives
+- [**97**Star][3m] [C] [vmonaco/kloak](https://github.com/vmonaco/kloak) Keystroke-level online anonymization kernel: obfuscates typing behavior at the device level.
+- [**97**Star][2y] [Go] [subgraph/fw-daemon](https://github.com/subgraph/fw-daemon) Subgraph Application Firewall
+- [**97**Star][10m] [Shell] [sskaje/6in4](https://github.com/sskaje/6in4) IPv6-in-IPv4 Tunnel Server
+- [**97**Star][8m] [Shell] [shadowhatesyou/pipetap.sh](https://github.com/shadowhatesyou/pipetap.sh) This script invokes tcpdump over ssh piping to STDOUT, allowing remote use of wireshark
+- [**97**Star][5m] [C] [s0lst1c3/silentbridge](https://github.com/s0lst1c3/silentbridge) Silentbridge is a toolkit for bypassing 802.1x-2010 and 802.1x-2004.
+- [**97**Star][6y] [Py] [roglew/wifikill](https://github.com/roglew/wifikill) A python program to kick people off of wifi
+- [**97**Star][4y] [Py] [ridter/myjsrat](https://github.com/ridter/myjsrat) This is JSRat.ps1 in Python
+- [**97**Star][2y] [PS] [rhinosecuritylabs/aggressor-scripts](https://github.com/rhinosecuritylabs/aggressor-scripts) Aggregation of Cobalt Strike's aggressor scripts.
+- [**97**Star][9m] [Go] [renatoathaydes/go-hash](https://github.com/renatoathaydes/go-hash) Small utility to store secret information like passwords.
+- [**97**Star][12d] [Shell] [qubesos/qubes-antievilmaid](https://github.com/qubesos/qubes-antievilmaid) an implementation of a TPM-based dynamic (Intel TXT) trusted
+boot for dracut/initramfs-based OSes (Fedora, Qubes, etc.) with a primary goal
+to prevent Evil Maid attacks.
+- [**97**Star][4y] [C++] [quarkslab/qb-sync](https://github.com/quarkslab/qb-sync) add some helpful glue between IDA Pro and Windbg
+ - [GDB插件](https://github.com/quarkslab/qb-sync/tree/master/ext_gdb)
+ - [IDA插件](https://github.com/quarkslab/qb-sync/tree/master/ext_ida)
+ - [LLDB](https://github.com/quarkslab/qb-sync/tree/master/ext_lldb)
+ - [OD2](https://github.com/quarkslab/qb-sync/tree/master/ext_olly2)
+ - [WinDbg](https://github.com/quarkslab/qb-sync/tree/master/ext_windbg/sync)
+ - [x64dbg](https://github.com/quarkslab/qb-sync/tree/master/ext_x64dbg)
+- [**97**Star][2y] [Java] [piasy/fridaandroidtracer](https://github.com/piasy/fridaandroidtracer) A runnable jar that generate Javascript hook script to hook Android classes.
+- [**97**Star][7m] [PS] [p3nt4/magiccopy](https://github.com/p3nt4/magiccopy) Powershell script to exfiltrate large files quickly and securely
+- [**97**Star][1y] [Go] [netxfly/crack_ssh](https://github.com/netxfly/crack_ssh) go写的协程版的ssh\redis\mongodb弱口令破解工具
+- [**97**Star][2y] [Go] [mxi4oyu/dockerxscan](https://github.com/mxi4oyu/dockerxscan) DockerXScan——Docker镜像漏洞扫描器
+- [**97**Star][1y] [Py] [mitshell/libmich](https://github.com/mitshell/libmich) Easy developpement of formats [de]coding for network protocols (IP, mobile...) and files
+- [**97**Star][2y] [Swift] [liruqi/mume-ios](https://github.com/liruqi/mume-ios) an iOS client that implements custom proxies with the leverage of Network Extension framework introduced by Apple since iOS 9
+- [**97**Star][30d] [C] [libyal/libevtx](https://github.com/libyal/libevtx) Library and tools to access the Windows XML Event Log (EVTX) format
+- [**97**Star][1y] [C++] [jeremywildsmith/x86devirt](https://github.com/jeremywildsmith/x86devirt) A project that aims to automatically devirtualize code that has been virtualized using x86virt
+- [**97**Star][5m] [Py] [itsmehacker/cardpwn](https://github.com/itsmehacker/cardpwn) OSINT Tool to find Breached Credit Cards Information
+- [**97**Star][1y] [C#] [holly-hacker/eazfixer](https://github.com/holly-hacker/eazfixer) A deobfuscation tool for Eazfuscator.
+- [**97**Star][3y] [C] [georgenicolaou/w64owow64](https://github.com/georgenicolaou/w64owow64) Library that allows you to run 64bit code on a Wow64 32bit process
+- [**97**Star][3y] [Py] [fdiskyou/kcshell](https://github.com/fdiskyou/kcshell) 交互式汇编/反汇编 Shell,Python3编写,基于Keystone/Capstone
+- [**97**Star][23d] [C++] [fdiskyou/iris](https://github.com/fdiskyou/iris) WinDbg extension to display Windows process mitigations
+- [**97**Star][2y] [Py] [dakotanelson/sneaky-creeper](https://github.com/dakotanelson/sneaky-creeper) Get your APT on using social media as a tool for data exfiltration.
+- [**97**Star][3y] [Py] [cx9527/strongdb](https://github.com/cx9527/strongdb) gdb plugin for android debugging
+- [**97**Star][2y] [HTML] [chrisallenlane/drek](https://github.com/chrisallenlane/drek) drek:静态代码分析工具,用于执行以安全性为主的代码审计
+- [**97**Star][6m] [Java] [an0nymous0/mybatisplugin-crack-javassist](https://github.com/an0nymous0/mybatisplugin-crack-javassist) Javassist实现的破解IDEA MybatisPlugin修改字节码工具,仅供学习用途。
+- [**97**Star][12m] [Assembly] [86hh/dreamloader](https://github.com/86hh/dreamloader) Simple 32/64-bit PEs loader.
+- [**97**Star][5y] [C++] [0vercl0k/ollydbg2-python](https://github.com/0vercl0k/ollydbg2-python) Scripting OllyDBG2 using Python is now possible!
+- [**96**Star][2m] [C++] [xiangweizeng/darknet2ncnn](https://github.com/xiangweizeng/darknet2ncnn) Darknet2ncnn converts the darknet model to the ncnn model
+- [**96**Star][5d] [Ruby] [bl4de/dictionaries](https://github.com/bl4de/dictionaries) Misc dictionaries for directory/file enumeration, username enumeration, password dictionary/bruteforce attacks
+- [**96**Star][2m] [404notf0und/always-learning](https://github.com/404notf0und/always-learning) 404 Not Found的知识库:计算机基础、前端技术、编程技术、底层研究、安全技术、安全研究、人工智能、企业安全建设、安全发展、综合素质
+- [**96**Star][2y] [JS] [paulsec/shodan-firefox-addon](https://github.com/paulsec/shodan-firefox-addon) Shodan Firefox Add-on
+- [**96**Star][3m] [Java] [guardianproject/pixelknot](https://github.com/guardianproject/pixelknot) Image stego app using the F5 algorithm
+- [**96**Star][19d] [Py] [fboldewin/com-code-helper](https://github.com/fboldewin/com-code-helper) Two IDAPython Scripts help you to reconstruct Microsoft COM (Component Object Model) Code
+- [**96**Star][1m] [C#] [tyranid/windowsrpcclients](https://github.com/tyranid/windowsrpcclients) This respository is a collection of C# class libraries which implement RPC clients for various versions of the Windows Operating System from 7 to Windows 10.
+- [**96**Star][16d] [Py] [b17zr/ntlm_challenger](https://github.com/b17zr/ntlm_challenger) Parse NTLM over HTTP challenge messages
+- [**96**Star][1m] [smi1esec/web-security-note](https://github.com/Smi1eSEC/Web-Security-Note) Record some common Web security sites
+- [**96**Star][11m] [Py] [presto412/captcha-cracker](https://github.com/Presto412/Captcha-Cracker) Cracks the Captcha at VIT University's Academics Portal
+- [**96**Star][25d] [Py] [nkargas/gen2-uhf-rfid-reader](https://github.com/nkargas/Gen2-UHF-RFID-Reader) Gen2 UHF RFID reader with USRP and GNU Radio. Tested with USRPN200 and GNU Radio v3.7.4
+- [**96**Star][4y] [PS] [nsacyber/certificate-authority-situational-awareness](https://github.com/nsacyber/Certificate-Authority-Situational-Awareness) Identifies unexpected and prohibited certificate authority certificates on Windows systems. #nsacyber
+- [**96**Star][1y] [Shell] [xme/misp-docker](https://github.com/xme/misp-docker) Docker container for MISP
+- [**96**Star][2y] [Py] [unix-ninja/shellfire](https://github.com/unix-ninja/shellfire) Exploitation shell for exploiting LFI, RFI, and command injection vulnerabilities
+- [**96**Star][3y] [Py] [torque59/nosqlpot](https://github.com/torque59/nosqlpot) The NoSQL Honeypot Framework
+- [**96**Star][2y] [Java] [tengzhangchao/pycmd](https://github.com/tengzhangchao/pycmd) python+php+jsp WebShell(一句话木马)
+- [**96**Star][5y] [sooshie/security-data-analysis](https://github.com/sooshie/security-data-analysis) A series of labs that will help users apply various data science techniques to security related data.
+- [**96**Star][3y] [HTML] [skiptomyliu/solutions-bwapp](https://github.com/skiptomyliu/solutions-bwapp) In progress rough solutions to bWAPP / bee-box
+- [**96**Star][3y] [secmobi/slides](https://github.com/secmobi/slides) My presentations in some recent security conferences
+- [**96**Star][3y] [C] [s4n7h0/practical-reverse-engineering-using-radare2](https://github.com/s4n7h0/practical-reverse-engineering-using-radare2) Training Materials of Practical Reverse Engineering using Radare2
+- [**96**Star][2y] [Py] [robindavid/idasec](https://github.com/robindavid/idasec) IDA plugin for reverse-engineering and dynamic interactions with the Binsec platform
+- [**96**Star][1y] [Py] [njcx/pocsuite_poc_collect](https://github.com/njcx/pocsuite_poc_collect) collection poc use pocsuite framework
+- [**96**Star][2y] [Lua] [niallmcl/deep-android-malware-detection](https://github.com/niallmcl/deep-android-malware-detection) Code for Deep Android Malware Detection paper
+- [**96**Star][3y] [Py] [neuroo/equip](https://github.com/neuroo/equip) Python bytecode instrumentation library
+- [**96**Star][1y] [Py] [mrmtwoj/0day-mikrotik](https://github.com/mrmtwoj/0day-mikrotik)
+- [**96**Star][4m] [HTML] [momenbasel/keyfinder](https://github.com/momenbasel/keyfinder) Keyfinder
+- [**96**Star][7m] [Py] [michyamrane/okadminfinder3](https://github.com/michyamrane/okadminfinder3) [ Admin panel finder / Admin Login Page Finder ] ¢σ∂є∂ ву
+- [**96**Star][3y] [Py] [magicming200/tomcat-weak-password-scanner](https://github.com/magicming200/tomcat-weak-password-scanner) 醉考拉tomcat后台弱口令扫描器,命令行版+图形界面版。
+- [**96**Star][3y] [C++] [luctalpe/wmimon](https://github.com/luctalpe/wmimon) Tool to monitor WMI activity on Windows
+- [**96**Star][23d] [Py] [leeon123/cc-attack](https://github.com/leeon123/cc-attack) Using Socks4/5 proxy to make a multithread Http-flood/Https-flood (cc) attack.
+- [**96**Star][5y] [Py] [le4f/dnsmaper](https://github.com/le4f/dnsmaper) 子域名枚举与地图标记
+- [**96**Star][7y] [Py] [k3170makan/goodork](https://github.com/k3170makan/goodork) Command line go0gle dorking tool
+- [**96**Star][2y] [Py] [jjf012/passivescanner](https://github.com/jjf012/passivescanner) a passive scanner based on Mitmproxy and Arachni
+- [**96**Star][2y] [Java] [jgillam/burp-co2](https://github.com/jgillam/burp-co2) A collection of enhancements for Portswigger's popular Burp Suite web penetration testing tool.
+- [**96**Star][7y] [Py] [jeffbryner/pyioc](https://github.com/jeffbryner/pyioc) Python tools for IOC (Indicator of Compromise) handling
+- [**96**Star][3m] [Pascal] [hongludianxue/bailu-sed-tool](https://github.com/hongludianxue/bailu-sed-tool) 白鹿社工字典生成器,灵活与易用兼顾。
+- [**96**Star][2y] [Py] [he1m4n6a/btscan](https://github.com/he1m4n6a/btscan) 批量漏洞扫描框架
+- [**96**Star][17d] [Ruby] [hahwul/mad-metasploit](https://github.com/hahwul/mad-metasploit) Metasploit custom modules, plugins, resource script and.. awesome metasploit collection
+- [**96**Star][1m] [JS] [google/service-worker-detector](https://github.com/google/service-worker-detector) This extension detects if a website registers a Service Worker.
+- [**96**Star][7d] [C++] [glmcdona/strings2](https://github.com/glmcdona/strings2) extracting strings from binary data
+- [**96**Star][2m] [geeksonsecurity/vuln-web-apps](https://github.com/geeksonsecurity/vuln-web-apps) A curated list of vulnerable web applications.
+- [**96**Star][6m] [Shell] [gavinlyonsrepo/cylon](https://github.com/gavinlyonsrepo/cylon) Updates, maintenance, backups and system checks in a TUI menu driven bash shell script for an Arch based Linux distro
+- [**96**Star][20d] [Py] [felamos/weirdhta](https://github.com/felamos/weirdhta) A python tool to create obfuscated HTA script.
+- [**96**Star][1y] [Pascal] [fdiskyou/www.rootkit.com](https://github.com/fdiskyou/www.rootkit.com)
+- [**96**Star][6y] [C] [enzolovesbacon/inficere](https://github.com/enzolovesbacon/inficere) Mac OS X rootkit - for learning purposes
+- [**96**Star][2d] [dxxzst/free-proxy-list](https://github.com/dxxzst/free-proxy-list) Free proxy list 免费的代理IP,定时更新,优先更新:
+- [**96**Star][1y] [JS] [desudesutalk/desudesutalk](https://github.com/desudesutalk/desudesutalk) Steganography for imageboards
+- [**96**Star][7m] [Swift] [depoon/networkinterceptor](https://github.com/depoon/networkinterceptor) iOS URLRequest interception framework
+- [**96**Star][1y] [Py] [danmcinerney/msf-autopwn](https://github.com/danmcinerney/msf-autopwn) Autoexploitation of some of the most common vulnerabilities in wild
+- [**96**Star][3y] [Py] [chaitin/pro](https://github.com/chaitin/pro) A crappy tool used in our private PS4 jailbreak
+- [**96**Star][2y] [C] [cetfor/antidbg](https://github.com/cetfor/antidbg) A bunch of Windows anti-debugging tricks.
+- [**96**Star][3y] [C#] [bitbeans/streamcryptor](https://github.com/bitbeans/streamcryptor) Stream encryption & decryption with libsodium and protobuf
+- [**96**Star][3m] [Java] [bastienjalbert/topguw](https://github.com/bastienjalbert/topguw) A software to make easier some cracking GSM steps (known plaintext attack vector)
+- [**96**Star][8m] [Shell] [baguswiratmaadi/catnip](https://github.com/baguswiratmaadi/catnip) Cat-Nip Automated Basic Pentest Tool - Designed For Kali Linux
+- [**96**Star][2y] [JS] [anttikurittu/kirjuri](https://github.com/anttikurittu/kirjuri) Kirjuri is a web application for managing cases and physical forensic evidence items.
+- [**96**Star][13d] [Py] [airbus-cert/regrippy](https://github.com/airbus-cert/regrippy) a framework for reading and extracting useful forensics data from Windows registry hives
+- [**96**Star][7y] [0day1day/mwcrawler](https://github.com/0day1day/mwcrawler) Python Malware Crawler for Zoos and Repositories
+- [**95**Star][25d] [C] [ssd-secure-disclosure/advisories](https://github.com/ssd-secure-disclosure/advisories) SSD Secure Disclosure Advisories
+- [**95**Star][2m] [ashemery/linuxforensics](https://github.com/ashemery/LinuxForensics) Everything related to Linux Forensics
+- [**95**Star][9m] [C] [sagaantheepic/sagaan-anticheat-v2.0](https://github.com/ContionMig/ContionMig-AntiCheat) Anti Cheat i made in my free time. Credits to everyone who helped are in the files and some are in the code. I will definitely improve this Anti Cheat along the way, now its just beta. Enjoy.
+- [**95**Star][1y] [sectool/redteam-hardware-toolkit](https://github.com/sectool/redteam-hardware-toolkit)
+- [**95**Star][1y] [Shell] [cyb0r9/quasar](https://github.com/Cyb0r9/quasar) An Information Gathering Framework For Lazy Penetration Testers
+- [**95**Star][11m] [Java] [open-keychain/openpgp-api](https://github.com/open-keychain/openpgp-api) OpenPGP API library
+- [**95**Star][2m] [Py] [ubuntu-mate/mate-dock-applet](https://github.com/ubuntu-mate/mate-dock-applet) application dock for the MATE panel
+- [**95**Star][6d] [JS] [frida/frida-java-bridge](https://github.com/frida/frida-java-bridge) Java runtime interop from Frida
+- [**95**Star][2y] [ObjC] [xslim/mobiledevicemanager](https://github.com/xslim/mobiledevicemanager) Manage iOS devices through iTunes lib
+- [**95**Star][3y] [Py] [v1cker/src_edu](https://github.com/v1cker/src_edu) 为各位出色的渗透工程师提供攻击目标。
+- [**95**Star][3y] [Py] [tehsyntx/loffice](https://github.com/tehsyntx/loffice) Lazy Office Analyzer
+- [**95**Star][1m] [Py] [songguoxiong/wenshu_utils](https://github.com/songguoxiong/wenshu_utils) 裁判文书网 参数加解密工具库 for Python and Java
+- [**95**Star][2y] [Pascal] [senjaxus/allakore_remote](https://github.com/senjaxus/allakore_remote) AllaKore Remote is Open Source Remote Access software written in Delphi Seattle.
+- [**95**Star][2y] [Py] [safebreach-labs/mkmalwarefrom](https://github.com/safebreach-labs/mkmalwarefrom) Proof-of-concept two-stage dropper generator that uses bits from external sources
+- [**95**Star][3y] [Shell] [ppabc/security_check](https://github.com/ppabc/security_check) LINUX安全检查脚本,支持centos5,centos6,ubuntu
+- [**95**Star][1y] [Java] [pengzhile/atlassian-agent](https://github.com/pengzhile/atlassian-agent) Atlassian's productions crack.
+- [**95**Star][2y] [Java] [oliverklee/pixy](https://github.com/oliverklee/pixy) Pixy is a scanner static code analysis tools that scans PHP applications for security vulnerabilities.
+- [**95**Star][3y] [Py] [nowsecure/samsung-ime-rce-poc](https://github.com/nowsecure/samsung-ime-rce-poc) Samsung Remote Code Execution as System User
+- [**95**Star][5y] [Py] [nihilus/ida-idc-scripts](https://github.com/nihilus/ida-idc-scripts) Varoius IDC-scripts I've collected during the years.
+- [**95**Star][1y] [Py] [n4xh4ck5/cmssc4n](https://github.com/n4xh4ck5/cmssc4n) Tool to identify if a domain is a CMS such as Wordpress, Moodle, Joomla, Drupal or Prestashop
+- [**95**Star][1m] [JS] [microsoftedge/jsdbg](https://github.com/microsoftedge/jsdbg) Debugging extensions for Microsoft Edge and other Chromium-based browsers
+- [**95**Star][3m] [Py] [matrix07ksa/brute_force](https://github.com/matrix07ksa/brute_force) Brute_Force_Attack Gmail Hotmail Twitter Facebook Netflix
+- [**95**Star][1y] [Py] [martinvigo/voicemailautomator](https://github.com/martinvigo/voicemailautomator) A tool that serves as a Proof of Concept for the research I presented at DEF CON 26, "Compromising online accounts by cracking voicemail systems"
+- [**95**Star][5y] [C++] [malwaretech/fakembr](https://github.com/malwaretech/fakembr) TDL4 style rootkit to spoof read/write requests to master boot record
+- [**95**Star][2y] [CSS] [malaohu/arukas-api](https://github.com/malaohu/arukas-api) Arukas API 自动获取IP和端口,SSR服务器订阅,Arukas 监测启动
+- [**95**Star][3m] [Py] [lonely-night/fastjson_gadgets_scanner](https://github.com/lonely-night/fastjson_gadgets_scanner)
+- [**95**Star][2y] [Py] [localh0t/wildpwn](https://github.com/localh0t/wildpwn) unix wildcard attacks
+- [**95**Star][2m] [Py] [jssimporter/jssimporter](https://github.com/jssimporter/jssimporter) Upload packages made with AutoPkg to your Jamf Pro server with customizable policies.
+- [**95**Star][4y] [Shell] [jlrodriguezf/whatspwn](https://github.com/jlrodriguezf/whatspwn) Linux tool used to extract sensitive data, inject backdoor or drop remote shells on android devices.
+- [**95**Star][3y] [PHP] [jas502n/fuzz-wooyun-org](https://github.com/jas502n/fuzz-wooyun-org) WooYun Fuzz 库
+- [**95**Star][2y] [Py] [jas502n/2018-qwb-ctf](https://github.com/jas502n/2018-qwb-ctf) 2018强网杯CTF___题目整理
+- [**95**Star][7y] [C#] [ilikenwf/darkagent](https://github.com/ilikenwf/darkagent) DarkAgent Remote Administration Tool RAT by DragonHunter
+- [**95**Star][2y] [guardianproject/tor-browser](https://github.com/guardianproject/tor-browser) UPDATE: Orfox is being replaced by Tor Browser for Android. All future work and comments will be handled by Tor Project.
+- [**95**Star][2y] [Py] [gaasedelen/prefix](https://github.com/gaasedelen/prefix) Function Prefixing for IDA Pro
+- [**95**Star][1y] [HTML] [frizb/sourcecodesniffer](https://github.com/frizb/sourcecodesniffer) The Source Code Sniffer is a poor man’s static code analysis tool (SCA) that leverages regular expressions. Designed to highlight high risk functions (Injection, LFI/RFI, file uploads etc) across multiple languages (ASP, Java, CSharp, PHP, Perl, Python, JavaScript, HTML etc) in a highly configurable manner.
+- [**95**Star][7y] [JS] [feross/fullscreen-api-attack](https://github.com/feross/fullscreen-api-attack) Demo of phishing attack on the native HTML5 full screen API.
+- [**95**Star][5y] [Py] [eugeniodelfa/smali-cfgs](https://github.com/eugeniodelfa/smali-cfgs) Smali Control Flow Graph's
+- [**95**Star][10m] [PS] [equk/windows](https://github.com/equk/windows) tweaks for Windows
+- [**95**Star][4y] [PS] [enigma0x3/invoke-altdsbackdoor](https://github.com/enigma0x3/invoke-altdsbackdoor)
+- [**95**Star][2m] [C++] [dzzie/vs_libemu](https://github.com/dzzie/vs_libemu) Visual Studio 2008 port of the libemu library that includes scdbg.exe, a modification of the sctest project, that includes more hooks, interactive debugging, reporting features, and ability to work with file format exploit shellcode.
+- [**95**Star][9y] [Py] [dugsong/pypcap](https://github.com/dugsong/pypcap) Automatically exported from code.google.com/p/pypcap
+- [**95**Star][9m] [C#] [djhohnstein/eventlogparser](https://github.com/djhohnstein/eventlogparser) Parse PowerShell and Security event logs for sensitive information.
+- [**95**Star][8m] [Go] [covenantsql/cookiescanner](https://github.com/covenantsql/cookiescanner) Cookie Scanner for GDPR compliance
+- [**95**Star][2m] [PHP] [commixproject/commix-testbed](https://github.com/commixproject/commix-testbed) A collection of web pages, vulnerable to command injection flaws.
+- [**95**Star][12m] [bughunterid/hackeronedb](https://github.com/bughunterid/hackeronedb) The unofficial HackerOne disclosure Timeline
+- [**95**Star][2y] [Py] [blackploit/hash-identifier](https://github.com/blackploit/hash-identifier) Software to identify the different types of hashes used to encrypt data and especially passwords
+- [**95**Star][2y] [PS] [australiancybersecuritycentre/windows_event_logging](https://github.com/australiancybersecuritycentre/windows_event_logging) Windows Event Forwarding subscriptions, configuration files and scripts that assist with implementing ACSC's protect publication, Technical Guidance for Windows Event Logging.
+- [**94**Star][4m] [JS] [beepisla/csgo-crash-exploit](https://github.com/beepisla/csgo-crash-exploit) Allows you to crash any Windows user
+- [**94**Star][2y] [Shell] [functionclub/localecn](https://github.com/functionclub/localecn) 更改Linux服务器终端显示语言为中文的脚本
+- [**94**Star][3y] [HTML] [sewellding/lfiboomctf](https://github.com/SewellDinG/LFIboomCTF) 本地文件包含漏洞&&PHP利用协议&&实践源码
+- [**94**Star][4m] [C] [adamlaurie/chronic](https://github.com/AdamLaurie/ChronIC) A wearable Sub-GHz RF hacking tool
+- [**94**Star][2y] [Py] [radareorg/r2con2017](https://github.com/radareorg/r2con2017) r2con 2017 September 6-9
+- [**94**Star][2y] [C++] [waryas/umpmlib](https://github.com/waryas/umpmlib) A library to manipulate physical memory from usermode.
+- [**94**Star][3d] [JS] [w00dl3cs/exploit_playground](https://github.com/w00dl3cs/exploit_playground)
+- [**94**Star][8m] [PS] [vletoux/smbscanner](https://github.com/vletoux/smbscanner) Smb Scanner from PingCastle
+- [**94**Star][4m] [Py] [thewhiteh4t/killcast](https://github.com/thewhiteh4t/killcast) Manipulate Chromecast Devices in your Network
+- [**94**Star][6y] [C++] [stealth/fraud-bridge](https://github.com/stealth/fraud-bridge) ICMP and DNS tunneling via IPv4 and IPv6
+- [**94**Star][1m] [JS] [securityrat/securityrat](https://github.com/securityrat/securityrat) OWASP SecurityRAT (version 1.x) - Tool for handling security requirements in development
+- [**94**Star][1m] [Py] [raikia/kali-setup](https://github.com/raikia/kali-setup) Script for Kali that adds a bunch of tools and customizes it to be much better
+- [**94**Star][2y] [ObjC] [r0ysue/osg-teams](https://github.com/r0ysue/osg-teams) 希望大家在合作中学习姿势、提升技术、交流感情。比赛第二,友谊第一。
+- [**94**Star][2m] [Py] [pyudev/pyudev](https://github.com/pyudev/pyudev) Python bindings to libudev (with support for PyQt4, PySide, pygobject and wx)
+- [**94**Star][7y] [Shell] [nccgroup/port-scan-automation](https://github.com/nccgroup/port-scan-automation) Automate NMAP Scans and Generate Custom Nessus Policies Automatically
+- [**94**Star][7m] [Py] [mr-un1k0d3r/shellcoding](https://github.com/mr-un1k0d3r/shellcoding) Shellcoding utilities
+- [**94**Star][1y] [Shell] [mindpointgroup/rhel6-stig](https://github.com/mindpointgroup/rhel6-stig) Ansible role for Red Hat 6 DISA STIG
+- [**94**Star][5m] [CSS] [mike-goodwin/owasp-threat-dragon-desktop](https://github.com/mike-goodwin/owasp-threat-dragon-desktop) An installable desktop variant of OWASP Threat Dragon
+- [**94**Star][12m] [Batchfile] [mdsecactivebreach/sharppack](https://github.com/mdsecactivebreach/sharppack) insider threat assessments that lets you defeat application whitelisting to execute arbitrary DotNet and PowerShell tools.
+- [**94**Star][2y] [Py] [lorenzog/dns-parallel-prober](https://github.com/lorenzog/dns-parallel-prober) PoC for an adaptive parallelised DNS prober
+- [**94**Star][6y] [lgrangeia/cupid](https://github.com/lgrangeia/cupid) Patch for hostapd and wpa_supplicant to attempt to exploit heartbleed on EAP-PEAP/TLS/TTLS connections
+- [**94**Star][5m] [Py] [lanmaster53/honeybadger](https://github.com/lanmaster53/honeybadger) a framework for targeted geolocation
+- [**94**Star][9m] [C] [jcs/login_duress](https://github.com/jcs/login_duress) A BSD authentication module for duress passwords
+- [**94**Star][2y] [Py] [invictus1306/workshop-bsidesmunich2018](https://github.com/invictus1306/workshop-bsidesmunich2018) ARM shellcode and exploit development - BSidesMunich 2018
+- [**94**Star][2y] [Batchfile] [huntresslabs/evading-autoruns](https://github.com/huntresslabs/evading-autoruns) 几种用于逃避常见的驻留枚举工具的技术(Evading Autoruns,Derbycon 2017)
+- [**94**Star][8m] [C++] [hlldz/apc-ppid](https://github.com/hlldz/apc-ppid) Adds a user-mode asynchronous procedure call (APC) object to the APC queue of the specified thread and spoof the Parent Process.
+- [**94**Star][2y] [C++] [hasherezade/pe_recovery_tools](https://github.com/hasherezade/pe_recovery_tools) Helper tools for recovering dumped PE files
+- [**94**Star][3y] [PS] [fuzzysecurity/capcom-rootkit](https://github.com/fuzzysecurity/capcom-rootkit) Capcom Rootkit POC
+- [**94**Star][8y] [Py] [firefart/hashcollision-dos-poc](https://github.com/firefart/hashcollision-dos-poc) Proof of Concept for the PHP and JAVA Hashcollision Denial of service attack
+- [**94**Star][6m] [Java] [felberj/gotools](https://github.com/felberj/gotools) Plugin for Ghidra to assist reversing Golang binaries
+- [**94**Star][7m] [Visual Basic .NET] [dzzie/idacompare](https://github.com/dzzie/idacompare) a plugin for IDA which is designed to help you line up functions across two separate disassemblies
+- [**94**Star][3y] [Py] [donnchac/ubuntu-apport-exploitation](https://github.com/donnchac/ubuntu-apport-exploitation) This project contains a PoC and exploit generator for a code execution bug in Ubuntu's Apport crash reporter
+- [**94**Star][2y] [Java] [dexpatcher/dex2jar](https://github.com/dexpatcher/dex2jar) Unofficial dex2jar updated for Android 8
+- [**94**Star][2m] [PS] [dbheise/vm_setup](https://github.com/dbheise/vm_setup) A collection of scripts to initialize a windows VM to run all the malwares!
+- [**94**Star][11m] [Java] [cspf-founder/javavulnerablelab](https://github.com/cspf-founder/javavulnerablelab) Vulnerable Java based Web Application
+- [**94**Star][6y] [Py] [crowdstrike/crowdfms](https://github.com/crowdstrike/crowdfms) CrowdStrike Feed Management System
+- [**94**Star][3d] [Scala] [criteo/cuttle](https://github.com/criteo/cuttle) An embedded job scheduler.
+- [**94**Star][4y] [C++] [cossacklabs/0fc](https://github.com/cossacklabs/0fc) Anonymous web chat server, built on top of Themis/WebThemis
+- [**94**Star][3y] [JS] [compewter/copycat](https://github.com/compewter/copycat) Universal MITM web server
+- [**94**Star][7d] [Go] [colettecontreras/v2ray-ssrpanel-plugin](https://github.com/colettecontreras/v2ray-ssrpanel-plugin) A buildin V2ray plugin for SSRPanel to sync users from database to v2ray, to log traffics/system info
+- [**94**Star][2y] [Shell] [chorankates/h4ck](https://github.com/chorankates/h4ck) a collection of writeups and tools related to ~embedded device ~hacking
+- [**94**Star][4m] [JS] [beepisla/csgo-crash-exploit](https://github.com/BeepIsla/csgo-crash-exploit) Allows you to crash any Windows user
+- [**94**Star][5y] [Py] [atarantini/wpbf](https://github.com/atarantini/wpbf) Remotely test password strength of WordPress bloging software
+- [**94**Star][3y] [C] [arno0x/diverttcpconn](https://github.com/arno0x/diverttcpconn) A TCP packet diverter for Windows platform
+- [**94**Star][3y] [appsecco/defcon24-infra-monitoring-workshop](https://github.com/appsecco/defcon24-infra-monitoring-workshop) Defcon24 Workshop Contents : Ninja Level Infrastructure Monitoring
+- [**94**Star][1m] [Assembly] [alanvivona/pwnshop](https://github.com/alanvivona/pwnshop) Exploit Development and Reverse Engineering topics
+- [**94**Star][7d] [Py] [0xprateek/stardox](https://github.com/0xprateek/stardox) Github stargazers information gathering tool
+- [**93**Star][10d] [Py] [gmdutra/cryptondie](https://github.com/gmdutra/cryptondie) PoC - cryptonDie is a ransomware developed for study purposes.
+- [**93**Star][3m] [Py] [in3tinct/see-surf](https://github.com/in3tinct/see-surf) Python based scanner to find potential SSRF parameters
+- [**93**Star][9d] [JS] [cn-panda/javacodeaudit](https://github.com/cn-panda/javacodeaudit) Learn java code auditing from scratch 一个Java 代码审计入门的小项目
+- [**93**Star][2d] [PS] [gtworek/psbits](https://github.com/gtworek/psbits) Simple (mainly PowerShell) solutions allowing you to dig a bit deeper than usual.
+- [**93**Star][2y] [C] [duraki/virtualcar](https://github.com/duraki/virtualcar) A virtual car. Because you wouldn't download a car, would you?
+- [**93**Star][10d] [Py] [gmdutra/cryptondie](https://github.com/gmdutra/cryptondie) PoC - cryptonDie is a ransomware developed for study purposes.
+- [**93**Star][11m] [C++] [ze0r/cve-2018-8453-exp](https://github.com/ze0r/cve-2018-8453-exp) cve-2018-8453 exp
+- [**93**Star][2y] [C] [zcgonvh/ntdsdumpex](https://github.com/zcgonvh/ntdsdumpex) NTDS.dit offline dumper with non-elevated
+- [**93**Star][4y] [Py] [zachriggle/peda](https://github.com/zachriggle/peda) PEDA - Python Exploit Development Assistance for GDB
+- [**93**Star][3y] [Py] [wiredcraft/dopy](https://github.com/wiredcraft/dopy) Digital Ocean Python
+- [**93**Star][2m] [C] [weirdnox/emacs-gdb](https://github.com/weirdnox/emacs-gdb) GDB graphical interface for GNU Emacs
+- [**93**Star][5m] [Shell] [vincentbernat/eudyptula-boot](https://github.com/vincentbernat/eudyptula-boot) Boot a Linux kernel in a VM without a dedicated root filesystem.
+- [**93**Star][10m] [Py] [tijme/not-your-average-web-crawler](https://github.com/tijme/not-your-average-web-crawler) A web crawler (for bug hunting) that gathers more than you can imagine.
+- [**93**Star][5y] [Py] [thuxnder/dalvik-obfuscator](https://github.com/thuxnder/dalvik-obfuscator) a set of tools/scripts to obfuscate and manipulate dex files
+- [**93**Star][4m] [Py] [themadinventor/ida-xtensa](https://github.com/themadinventor/ida-xtensa) IDAPython plugin for Tensilica Xtensa (as seen in ESP8266)
+- [**93**Star][2y] [C#] [them4hd1/pencrawler](https://github.com/them4hd1/pencrawler) An Advanced Web Crawler and DirBuster
+- [**93**Star][5m] [Py] [teemu-l/execution-trace-viewer](https://github.com/teemu-l/execution-trace-viewer) Tool for viewing and analyzing execution traces
+- [**93**Star][2y] [Java] [tdy218/ysoserial-cve-2018-2628](https://github.com/tdy218/ysoserial-cve-2018-2628) Some codes for bypassing Oracle WebLogic CVE-2018-2628 patch
+- [**93**Star][1y] [C#] [stufus/reconerator](https://github.com/stufus/reconerator) C# Targeted Attack Reconnissance Tools
+- [**93**Star][12m] [C] [stintel/vallumd](https://github.com/stintel/vallumd) Centralize or distribute IPset blacklists
+- [**93**Star][3y] [Py] [stamparm/tsusen](https://github.com/stamparm/tsusen) Network traffic sensor
+- [**93**Star][2d] [Go] [sonatype-nexus-community/nancy](https://github.com/sonatype-nexus-community/nancy) A tool to check for vulnerabilities in your Golang dependencies, powered by Sonatype OSS Index
+- [**93**Star][5m] [F#] [softsec-kaist/eclipser](https://github.com/softsec-kaist/eclipser) Grey-box Concolic Testing on Binary Code
+- [**93**Star][1y] [Java] [sirmordred/angelaroot](https://github.com/sirmordred/angelaroot) An app which escalates root privilege on device and installs SuperSU through newly vulnerability "angela root" without unlocking bootloader
+- [**93**Star][25d] [PHP] [shirosaidev/diskover-web](https://github.com/shirosaidev/diskover-web) Web file manager, disk space usage, storage search engine and file system analytics for diskover
+- [**93**Star][4y] [C] [scumjr/the-sea-watcher](https://github.com/scumjr/the-sea-watcher) Implementation of the SMM rootkit "The Watcher"
+- [**93**Star][2y] [PS] [sadprocessor/empiredog](https://github.com/sadprocessor/empiredog) A collection of PowerShell Modules for BloodHound/Empire Orchestration
+- [**93**Star][4y] [JS] [ro31337/hacktunnel](https://github.com/ro31337/hacktunnel) HackTunnel is web-based peer-to-peer chat software for anonymous and encrypted communication written with Go language
+- [**93**Star][1m] [C#] [retirenet/dotnet-retire](https://github.com/retirenet/dotnet-retire) Open source vulnerability scanner for .NET Core projects
+- [**93**Star][1y] [Jupyter Notebook] [positivetechnologies/seq2seq-web-attack-detection](https://github.com/positivetechnologies/seq2seq-web-attack-detection) The implementation of the Seq2Seq model for web attack detection. The Seq2Seq model is usually used in Neural Machine Translation. The main goal of this project is to demonstrate the relevance of the NLP approach for web security.
+- [**93**Star][7y] [C] [planetbeing/ios-jailbreak-patchfinder](https://github.com/planetbeing/ios-jailbreak-patchfinder) Analyzes a binary iOS kernel to determine function offsets and where to apply the canonical jailbreak patches.
+- [**93**Star][4y] [C] [osandamalith/ipobfuscator](https://github.com/osandamalith/ipobfuscator) A simple tool to convert the IP to a DWORD IP
+- [**93**Star][7y] [Ruby] [openwiresec/metasploit](https://github.com/openwiresec/metasploit)
+- [**93**Star][6m] [C#] [octokit/octokit.graphql.net](https://github.com/octokit/octokit.graphql.net) A GitHub GraphQL client library for .NET
+- [**93**Star][11m] [HTML] [nytrorst/xssfuzzer](https://github.com/nytrorst/xssfuzzer) XSS Fuzzer is a tool which generates XSS payloads based on user-defined vectors and fuzzing lists.
+- [**93**Star][10m] [JS] [n0tan3rd/squidwarc](https://github.com/n0tan3rd/squidwarc) Squidwarc is a high fidelity, user scriptable, archival crawler that uses Chrome or Chromium with or without a head
+- [**93**Star][2y] [Swift] [ming1016/smck](https://github.com/ming1016/smck) 用 Swift 编写的工程代码静态分析命令行工具 smck
+- [**93**Star][3y] [Go] [mauri870/powershell-reverse-http](https://github.com/mauri870/powershell-reverse-http)
+- [**93**Star][7y] [C] [m0nad/dns-discovery](https://github.com/m0nad/dns-discovery) DNS-Discovery is a multithreaded subdomain bruteforcer.
+- [**93**Star][11d] [Go] [lu4p/torat](https://github.com/lu4p/torat) ToRat is a Remote Administation tool written in Go using Tor as a transport mechanism and RPC for communication
+- [**93**Star][3y] [Py] [leonjza/ooktools](https://github.com/leonjza/ooktools) help with the reverse engineering of on-off keying data sources
+- [**93**Star][2y] [C++] [kentonv/dvorak-qwerty](https://github.com/kentonv/dvorak-qwerty) "Dvorak-Qwerty ⌘" (DQ) keyboard layout for Windows and Unix/Linux/X
+- [**93**Star][1y] [Py] [integrity-sa/droidstatx](https://github.com/integrity-sa/droidstatx) Python tool that generates an Xmind map with all the information gathered and any evidence of possible vulnerabilities identified via static analysis. The map itself is an Android Application Pentesting Methodology component, which assists Pentesters to cover all important areas during an assessment.
+- [**93**Star][2y] [C] [hdm/juniper-cve-2015-7755](https://github.com/hdm/juniper-cve-2015-7755) Notes, binaries, and related information from analysis of the CVE-2015-7755 & CVE-2015-7756 issues within Juniper ScreenOS
+- [**93**Star][3m] [Go] [grepplabs/kafka-proxy](https://github.com/grepplabs/kafka-proxy) Proxy connections to Kafka cluster. Connect through SOCKS Proxy, HTTP Proxy or to cluster running in Kubernetes.
+- [**93**Star][2y] [C++] [femto-dev/femto](https://github.com/femto-dev/femto) Sequence Indexing and Search
+- [**93**Star][11m] [C] [elfmaster/dsym_obfuscate](https://github.com/elfmaster/dsym_obfuscate) Obfuscates dynamic symbol table
+- [**93**Star][7d] [Shell] [dylanaraps/bin](https://github.com/dylanaraps/bin)
+- [**93**Star][5y] [Py] [debasishm89/hack_audio_captcha](https://github.com/debasishm89/hack_audio_captcha) Collection of Scripts written to Solve/Crack Audio reCapcha Challenges
+- [**93**Star][2y] [Py] [debasishm89/burpy](https://github.com/debasishm89/burpy) Portable and flexible web application security assessment tool.It parses Burp Suite log and performs various tests depending on the module provided and finally generate a HTML report.
+- [**93**Star][3y] [Py] [cymmetria/mtpot](https://github.com/cymmetria/mtpot) Open Source Telnet Honeypot
+- [**93**Star][15d] [Shell] [clion007/dnsmasq](https://github.com/clion007/dnsmasq) 全自动dnsmasq及hosts科学上网,防DNS劫持及全面广告屏蔽脚本
+- [**93**Star][5y] [Shell] [ckuethe/usbarmory](https://github.com/ckuethe/usbarmory) Scripts, learnings, sample configurations, and random whining
+- [**93**Star][3y] [Vim script] [citizenlab/malware-signatures](https://github.com/citizenlab/malware-signatures) Yara rules for malware families seen as part of targeted threats project
+- [**93**Star][2y] [Ruby] [carnal0wnage/metasploit-code](https://github.com/carnal0wnage/metasploit-code) Metasploit modules that didn't make it into trunk for some reason or the other
+- [**93**Star][2y] [Py] [blackthorne/codetective](https://github.com/blackthorne/codetective) a tool to determine the crypto/encoding algorithm used according to traces from its representation
+- [**93**Star][1y] [Shell] [arthastang/iot-implant-toolkit](https://github.com/arthastang/iot-implant-toolkit) Toolkit for implant attack of IoT devices
+- [**93**Star][2y] [Py] [arno0x/webdavc2](https://github.com/arno0x/webdavc2) A WebDAV PROPFIND C2 tool
+- [**93**Star][6m] [Py] [abaykan/crawlbox](https://github.com/abaykan/crawlbox) Web目录爆破脚本
+- [**92**Star][27d] [Py] [plazmaz/leaky-repo](https://github.com/plazmaz/leaky-repo) Benchmarking repo for secrets scanning
+- [**92**Star][2m] [Py] [gxfxyz/unblockchn](https://github.com/gxfxyz/unblockchn) Unblock CHN - Shadowsocks 回国解锁代理分流配置工具 (路由器 & Surge) - Unblock Youku 衍生工具
+- [**92**Star][2m] [Py] [furniel/apk-changer](https://github.com/furniel/apk-changer) Command line program for modifying apk files
+- [**92**Star][2m] [Py] [hyuunnn/hyara](https://github.com/hyuunnn/hyara) Yara rule making tool (IDA Pro & Binary Ninja Plugin)
+- [**92**Star][7m] [PS] [mgreen27/invoke-liveresponse](https://github.com/mgreen27/Invoke-LiveResponse) Invoke-LiveResponse
+- [**92**Star][2y] [Shell] [offxec/thedoc](https://github.com/OffXec/TheDoc) TheDoc is a simple but very useful SQLMAP automator with built in admin finder, hash cracker(using hashca) and more!
+- [**92**Star][2d] [Go] [zonedb/zonedb](https://github.com/zonedb/zonedb) Public Zone Database
+- [**92**Star][3y] [HTML] [xinali/wooyun](https://github.com/xinali/wooyun) wooyun public information backup
+- [**92**Star][2y] [JS] [tinysec/vulnerability](https://github.com/tinysec/vulnerability) vulnerability:作者收集的Windows内核漏洞。
+- [**92**Star][4y] [HTML] [thezdi/abusing-silent-mitigations](https://github.com/thezdi/abusing-silent-mitigations) Understanding weaknesses within Internet Explorer's Isolated Heap and MemoryProtection
+- [**92**Star][3y] [PS] [thepaulbenoit/winpirate](https://github.com/thepaulbenoit/winpirate) Automated sticky keys hack. Post exploitation it grabs browser passwords, history, and network passwords
+- [**92**Star][12m] [Shell] [thelinuxchoice/brutecms](https://github.com/thelinuxchoice/brutecms) Multi-threaded CMS BruteForcer to WordPress, Joomla, Drupal, OpenCart
+- [**92**Star][1y] [Go] [tarlogicsecurity/sasshimi](https://github.com/tarlogicsecurity/sasshimi) SSH Tunnelling in "RAW mode", via STDIN/OUT without using forwarding channels
+- [**92**Star][1y] [C++] [tandasat/guardmon](https://github.com/tandasat/guardmon) Hypervisor based tool for monitoring system register accesses.
+- [**92**Star][11m] [Py] [stratosphereips/manati](https://github.com/stratosphereips/manati) A web-based tool to assist the work of the intuitive threat analysts.
+- [**92**Star][2y] [C] [stonedreamforest/re_sysdiag](https://github.com/stonedreamforest/re_sysdiag) 逆向火绒安全软件驱动——sysdiag
+- [**92**Star][3y] [HTML] [stixproject/stix-viz](https://github.com/stixproject/stix-viz) STIX Visualization Tool
+- [**92**Star][3y] [C++] [shmuelyr/captainhook](https://github.com/shmuelyr/captainhook) CaptainHook is perfect x86/x64 hook environment
+- [**92**Star][7m] [C++] [sharepub/checkvm-sandbox](https://github.com/sharepub/checkvm-sandbox) source code
+- [**92**Star][3y] [PS] [secvulture/dvta](https://github.com/secvulture/dvta) Damn Vulnerable Thick Client App
+- [**92**Star][1y] [reconjson/reconjson](https://github.com/reconjson/reconjson) ReconJSON is a project dedicated to creating a flexible and consistent JSON format across popular recon tools.
+- [**92**Star][7d] [Go] [privacypass/challenge-bypass-server](https://github.com/privacypass/challenge-bypass-server) a TCP server that is compatible with the Privacy Pass browser extension
+- [**92**Star][2y] [Go] [phillipmartin/gopassivedns](https://github.com/phillipmartin/gopassivedns) Network-based DNS logging in Go
+- [**92**Star][9m] [pagalaxylab/vulinfo](https://github.com/pagalaxylab/vulinfo) These are the vulnerabilities discovered by Galaxy Lab.
+- [**92**Star][9d] [JS] [oznu/dns-zone-blacklist](https://github.com/oznu/dns-zone-blacklist) This project generates dnsmasq, bind and unbound zone files to be used in DNS based AD Blockers.
+- [**92**Star][3y] [Hack] [oracle/kernel-fuzzing](https://github.com/oracle/kernel-fuzzing) Fuzzers for the Linux kernel
+- [**92**Star][5y] [JS] [nihgwu/nevermore](https://github.com/nihgwu/nevermore) a shadowsocks client powered by node-webkit
+- [**92**Star][5y] [Py] [neo23x0/dllrunner](https://github.com/neo23x0/dllrunner) Smart DLL execution for malware analysis in sandbox systems
+- [**92**Star][8d] [Java] [mvetsch/jwt4b](https://github.com/mvetsch/jwt4b) JWT Support for Burp
+- [**92**Star][8y] [Ruby] [mubix/not-in-pentesting-class](https://github.com/mubix/not-in-pentesting-class) The Dirty Secrets They Didn't Teach You In Pentesting Class
+- [**92**Star][12m] [C] [mthbernardes/sshlooterc](https://github.com/mthbernardes/sshlooterc) It's the C version of
+- [**92**Star][1y] [C] [mrschyte/pentestkoala](https://github.com/mrschyte/pentestkoala) pentestkoala:修改版dropbear SSH 服务器
+- [**92**Star][4y] [PS] [matthastings/dscompromised](https://github.com/matthastings/dscompromised) managing and infecting systems via Windows Desired State Configuration (DSC)
+- [**92**Star][24d] [Py] [log2timeline/dftimewolf](https://github.com/log2timeline/dftimewolf) A framework for orchestrating forensic collection, processing and data export
+- [**92**Star][6m] [Py] [localh0t/backfuzz](https://github.com/localh0t/backfuzz) protocol fuzzing toolkit
+- [**92**Star][18d] [Go] [likexian/whois-go](https://github.com/likexian/whois-go) Go module for domain and ip whois info query
+- [**92**Star][2y] [Py] [lcatro/webshell-detect-by-machine-learning](https://github.com/lcatro/webshell-detect-by-machine-learning) Use AI to identify WebShell
+- [**92**Star][4y] [C] [kr105-zz/ps4-dlclose](https://github.com/kr105-zz/ps4-dlclose) Fully implemented dlclose exploit for PS4 fw 1.76 with included linux loader
+- [**92**Star][4m] [knownsec/ethereum-smart-contracts-security-checklist](https://github.com/knownsec/ethereum-smart-contracts-security-checklist) Ethereum Smart Contracts Security CheckList From Knownsec 404 Team
+- [**92**Star][5y] [C++] [k33nteam/cc-shellcoding](https://github.com/k33nteam/cc-shellcoding)
+- [**92**Star][1y] [Shell] [jedisct1/bitbar-dnscrypt-proxy-switcher](https://github.com/jedisct1/bitbar-dnscrypt-proxy-switcher) BitBar plugin to control dnscrypt-proxy usage
+- [**92**Star][2m] [Py] [hyuunnn/hyara](https://github.com/hyuunnn/Hyara) IDA Plugin that provides convenience when writing yararule.
+ - [IDA插件](https://github.com/hy00un/hyara/tree/master/IDA%20Plugin)
+ - [BinaryNinja插件](https://github.com/hy00un/hyara/tree/master/BinaryNinja%20Plugin)
+- [**92**Star][2y] [Shell] [henryho2006/rpiproxy](https://github.com/henryho2006/rpiproxy) Make a Raspberry PI as a proxy route, work with shadowsocks server, provide clean dns/proxy service
+- [**92**Star][8m] [Roff] [gynvael/stream-en](https://github.com/gynvael/stream-en) Sourcecode created during my Livestream (English)
+- [**92**Star][2y] [grrrdog/tls-redirection](https://github.com/grrrdog/tls-redirection) raise awareness of a little-known group of attacks, TLS redirection / Virtual Host Confusion, and to bring all the information related to this topic together.
+- [**92**Star][4y] [Py] [groundworkstech/pybfd](https://github.com/groundworkstech/pybfd) A Python interface to the GNU Binary File Descriptor (BFD) library.
+- [**92**Star][2y] [C++] [gdbinit/efiswissknife](https://github.com/gdbinit/efiswissknife) An IDA plugin to improve (U)EFI reversing
+- [**92**Star][3y] [Py] [fengyouchao/webzmap](https://github.com/fengyouchao/webzmap) 通过web方式管理运行zmap扫描任务, 并提供 RESTful API 方便第三方程序调用控制zmap任务
+- [**92**Star][5y] [JS] [etherdream/https_hijack_demo](https://github.com/etherdream/https_hijack_demo) HTTPS Frontend Hijack
+- [**92**Star][2y] [C] [christian-roggia/open-myrtus](https://github.com/christian-roggia/open-myrtus) RCEed version of computer malware / rootkit MyRTUs / Stuxnet.
+- [**92**Star][8d] [Py] [chadsr/nordvpn-networkmanager](https://github.com/chadsr/nordvpn-networkmanager) A CLI tool for automating the importing, securing and usage of NordVPN (and in the future, more) OpenVPN servers through NetworkManager.
+- [**92**Star][2y] [PS] [borntoberoot/powershell_ipv4portscanner](https://github.com/borntoberoot/powershell_ipv4portscanner) Powerful asynchronus IPv4 Port Scanner for PowerShell
+- [**92**Star][10m] [Py] [b1n4ry4rms/redteam-pentest-cheatsheets](https://github.com/b1n4ry4rms/redteam-pentest-cheatsheets) Red Teaming :: Penetration Testing :: Offensive Security :: OSCP :: OSCE :: CheatSheets :: Tools :: etc...
+- [**92**Star][1y] [TS] [auth0-blog/mean-rsvp-auth0](https://github.com/auth0-blog/mean-rsvp-auth0) MEAN stack application with Auth0 (see sample deployed at
+- [**92**Star][11m] [Shell] [antitree/private-tor-network](https://github.com/antitree/private-tor-network) Run an isolated instance of a tor network in Docker containers
+- [**92**Star][1y] [Py] [andresriancho/websocket-fuzzer](https://github.com/andresriancho/websocket-fuzzer) HTML5 WebSocket message fuzzer
+- [**92**Star][2y] [PS] [alsidofficial/uncoverdcshadow](https://github.com/alsidofficial/uncoverdcshadow) A PowerShell utility to dynamically uncover a DCShadow attack
+- [**92**Star][4m] [Py] [aedoo/allscanner](https://github.com/aedoo/allscanner) 数据库和其他服务的弱端口的弱口令检测以及未授权访问的集成检测工具。 Weak password blasting of weak ports and integrated detection tools for unauthorized access.
+- [**92**Star][1m] [C#] [3xpl01tc0d3r/processinjection](https://github.com/3xpl01tc0d3r/processinjection) The program is designed to demonstrate various process injection techniques
+- [**91**Star][8m] [JS] [vksrc/captcha_orz](https://github.com/vksrc/captcha_orz) 验证码识别
+- [**91**Star][2m] [C] [zfl9/chinadns-ng](https://github.com/zfl9/chinadns-ng) chinadns next generation, refactoring with epoll and ipset
+- [**91**Star][3d] [Py] [lockedbyte/cryptovenom](https://github.com/lockedbyte/cryptovenom) Cryptovenom: The Cryptography Swiss Army Knife
+- [**91**Star][8m] [Py] [lc/230-oob](https://github.com/lc/230-OOB) An Out-of-Band XXE server for retrieving file contents over FTP.
+- [**91**Star][1y] [Py] [fsecurelabs/z3_and_angr_binary_analysis_workshop](https://github.com/FSecureLABS/z3_and_angr_binary_analysis_workshop) Code and exercises for a workshop on z3 and angr
+- [**91**Star][3m] [CSS] [woj-ciech/socialpath](https://github.com/woj-ciech/socialpath) Track users across social media platforms
+- [**91**Star][5y] [C] [wi-fi-analyzer/mdk3-master](https://github.com/wi-fi-analyzer/mdk3-master)
+- [**91**Star][2y] [C] [wangyihang/apache-http-server-module-backdoor](https://github.com/wangyihang/apache-http-server-module-backdoor)
+- [**91**Star][1y] [Py] [wagiro/pintool](https://github.com/wagiro/pintool) This tool can be useful for solving some reversing challenges in CTFs events.
+- [**91**Star][2y] [PS] [stefanscherer/adfs2](https://github.com/stefanscherer/adfs2) Multi Vagrant environment with Active Directory
+- [**91**Star][2y] [C] [secwiki/android-kernel-exploits](https://github.com/secwiki/android-kernel-exploits) android kernel exploits漏洞集合
+- [**91**Star][2y] [PS] [russelltomkins/active-directory](https://github.com/russelltomkins/active-directory) Collection of scripts for Querying and Managing Active Directory and Domain Controllers
+- [**91**Star][2y] [Py] [pry0cc/proxydock](https://github.com/pry0cc/proxydock) ProxyDock is a Dockerfile and Bash script that converts your OpenVPN files into local proxies.
+- [**91**Star][4y] [Py] [pdjstone/wsuspect-proxy](https://github.com/pdjstone/wsuspect-proxy) Python tool to inject fake updates into unencrypted WSUS traffic
+- [**91**Star][10m] [Py] [p3pperp0tts/leaks_parser](https://github.com/p3pperp0tts/leaks_parser) Parser for data dumps Collection #1 / Collection #2-5
+- [**91**Star][3y] [Py] [n3tc4t/instabrute](https://github.com/n3tc4t/instabrute) Instagram password bruteforcer
+- [**91**Star][11m] [Py] [n00py/hwacha](https://github.com/n00py/hwacha) Deploy payloads to *Nix systems en masse
+- [**91**Star][2m] [C#] [mihazupan/httptosocks5proxy](https://github.com/mihazupan/httptosocks5proxy) C# Http to Socks5 proxy implementation
+- [**91**Star][5m] [Shell] [louwrentius/ppss](https://github.com/louwrentius/ppss) Parallel Processing Shell Script
+- [**91**Star][3m] [Rust] [loiclec/fuzzcheck-rs](https://github.com/loiclec/fuzzcheck-rs) Structure-aware, in-process, coverage-guided, evolutionary fuzzing engine for Rust functions.
+- [**91**Star][2y] [C++] [liulilittle/paperairplane](https://github.com/liulilittle/paperairplane) 一个类似于Proxifier的SOCKS5代理工具
+- [**91**Star][4y] [Py] [knownsec/vxpwn](https://github.com/knownsec/vxpwn) VxWorks漏洞挖掘相关
+- [**91**Star][9m] [Py] [johntroony/blisqy](https://github.com/johntroony/blisqy) Version 0.2 - Exploit Time-based blind-SQL injection in HTTP-Headers (MySQL/MariaDB).
+- [**91**Star][4m] [C#] [jbe2277/dotnetpad](https://github.com/jbe2277/dotnetpad) The Waf DotNetPad is a simple and fast code editor that makes fun to program with C# or Visual Basic.
+- [**91**Star][4y] [Py] [hvqzao/liffy](https://github.com/hvqzao/liffy) Local File Inclusion Exploitation Tool (mirror)
+- [**91**Star][11m] [Ruby] [hdm/metasploit-framework](https://github.com/hdm/metasploit-framework) Metasploit Framework
+- [**91**Star][3y] [C] [hacksysteam/exploitation](https://github.com/hacksysteam/exploitation) Windows Software Exploitation
+- [**91**Star][1y] [Go] [google/minions](https://github.com/google/minions) Distributed filesystem scanner
+- [**91**Star][4m] [Shell] [giantbranch/pwn-env-init](https://github.com/giantbranch/pwn-env-init) CTF PWN 做题环境一键搭建脚本
+- [**91**Star][1y] [Py] [getsecnow/instagram-py](https://github.com/getsecnow/instagram-py) Simple Instagram brute force script written in python
+- [**91**Star][3y] [C++] [gdelugre/shell-factory](https://github.com/gdelugre/shell-factory) C++-based shellcode builder
+- [**91**Star][6m] [Py] [fortynorthsecurity/aggressorassessor](https://github.com/fortynorthsecurity/aggressorassessor) Aggressor scripts for phases of a pen test or red team assessment
+- [**91**Star][2y] [C++] [epam/nfstrace](https://github.com/epam/nfstrace) Network file system monitor and analyzer
+- [**91**Star][9y] [C] [dugsong/libdnet](https://github.com/dugsong/libdnet) a simplified, portable interface to several low-level
+networking routines
+- [**91**Star][4m] [C++] [djformby/grfics](https://github.com/djformby/grfics) Graphical Realism Framework for Industrial Control Simulations
+- [**91**Star][1y] [Py] [arbazkiraak/certasset](https://github.com/arbazkiraak/certasset) Takes ip range, Scan all open SSL Certs, Grab Cnames
+- [**91**Star][3m] [Py] [abusesa/abusehelper](https://github.com/abusesa/abusehelper) A framework for receiving and redistributing abuse feeds
+- [**91**Star][7m] [C] [abelcheung/rifiuti2](https://github.com/abelcheung/rifiuti2) Windows Recycle Bin analyser
+- [**91**Star][2y] [Java] [5gsd/aimsicdl](https://github.com/5gsd/aimsicdl) AIMSICD Lite (Android IMSI-Catcher Detector) - reloaded!
+- [**91**Star][2y] [C] [3gstudent/inject-dll-by-process-doppelganging](https://github.com/3gstudent/inject-dll-by-process-doppelganging) Process Doppelgänging
+- [**91**Star][1y] [001spartan/aggressor_scripts](https://github.com/001spartan/aggressor_scripts) A collection of useful scripts for Cobalt Strike
+- [**90**Star][11m] [Py] [hackatnow/stretcher](https://github.com/hackatnow/stretcher) Tool designed to help identify open Elasticsearch servers that are exposing sensitive information
+- [**90**Star][15d] [Ruby] [shopify/browser_sniffer](https://github.com/shopify/browser_sniffer) Properly detect what browser you are dealing with
+- [**90**Star][12m] [PS] [besimorhino/pause-process](https://github.com/besimorhino/pause-process) PowerShell script which allows pausing\unpausing Win32/64 exes
+- [**90**Star][4m] [Py] [google/python_portpicker](https://github.com/google/python_portpicker) A module to find available network ports for testing.
+- [**90**Star][9m] [C] [caesar0301/pkt2flow](https://github.com/caesar0301/pkt2flow) A simple utility to classify packets into flows. It's so simple that only one task is aimed to finish. For Deep Packet Inspection or flow classification, it's so common to analyze the feature of one specific flow. I have make the attempt to use made-ready tools like tcpflows, tcpslice, tcpsplit, but all these tools try to either decrease the tra…
+- [**90**Star][8m] [JS] [adonespitogo/adobot-io](https://github.com/adonespitogo/adobot-io) Android Spyware Server
+- [**90**Star][2y] [Py] [hackatnow/cromos](https://github.com/hackatnow/cromos) Cromos is a tool for downloading legitimate extensions of the Chrome Web Store and inject codes in the background of the application.
+- [**90**Star][1m] [Go] [ne1llee/v2ray2clash](https://github.com/ne1llee/v2ray2clash) V2ray、SSR subscribe convert to Clash、QuantumultX
+- [**90**Star][2m] [Py] [radareorg/r2con2019](https://github.com/radareorg/r2con2019) slides and materials
+- [**90**Star][2y] [JS] [watson/monster-drift](https://github.com/watson/monster-drift) a radio controlled car with Node.js and HackRF.
+- [**90**Star][1y] [C] [vv1ld/ps4hen](https://github.com/vv1ld/ps4hen) PS4 Homebrew ENabler based on Flatz writeup and using IDC's codebase
+- [**90**Star][7m] [C] [vmcall/ayyxam](https://github.com/vmcall/ayyxam) Bypass for The Digital Exam Monitor developed by the Danish Ministry of Education (Den Digitale Prøvevagt) and ExamCookie
+- [**90**Star][5m] [Py] [tomchop/volatility-autoruns](https://github.com/tomchop/volatility-autoruns) Autoruns plugin for the Volatility framework
+- [**90**Star][7m] [Rust] [tbrand/dystopia](https://github.com/tbrand/dystopia) Anonymity on the Internet by Transparent way.
+- [**90**Star][3y] [swiftonsecurity/phishingregex](https://github.com/swiftonsecurity/phishingregex) Backup of my phishing regular expression testing bench
+- [**90**Star][2y] [HTML] [struct/research](https://github.com/struct/research) A repo for various research
+- [**90**Star][8y] [Java] [securitycompass/androidlabs](https://github.com/securitycompass/androidlabs) Android security labs
+- [**90**Star][3y] [C++] [screetsec/pateensy](https://github.com/screetsec/pateensy) Payload for teensy like a rubber ducky but the syntax is different. this Human interfaes device ( HID attacks ). Penetration With Teensy
+- [**90**Star][5d] [Py] [samsung/cotopaxi](https://github.com/samsung/cotopaxi) Set of tools for security testing of Internet of Things devices using specific network IoT protocols
+- [**90**Star][1y] [C++] [rub-syssec/marx](https://github.com/rub-syssec/marx) Uncovering Class Hierarchies in C++ Programs
+ - [IDA导出](https://github.com/rub-syssec/marx/blob/master/ida_export/export.py)
+ - [IDA导入插件](https://github.com/rub-syssec/marx/tree/master/ida_import)
+ - [core](https://github.com/rub-syssec/marx/tree/master/src)
+- [**90**Star][4y] [C] [rchiossi/dexterity](https://github.com/rchiossi/dexterity) Dex manipulation library
+- [**90**Star][1y] [PS] [rasta-mouse/aggressor-script](https://github.com/rasta-mouse/aggressor-script) Collection of Aggressor Scripts for Cobalt Strike
+- [**90**Star][7m] [Rust] [ragnaroek/mithril](https://github.com/ragnaroek/mithril) Pure Rust Monero Miner
+- [**90**Star][5y] [ObjC] [project-imas/app-password](https://github.com/project-imas/app-password) Custom iOS user authentication mechanism (password with security questions for self reset)
+- [**90**Star][14d] [C] [plusvic/yara](https://github.com/plusvic/yara) The pattern matching swiss knife
+- [**90**Star][9m] [pandazheng/securitysite](https://github.com/pandazheng/securitysite) 收集了一些安全公司的博客
+- [**90**Star][1y] [Shell] [ossiozac/raspberry-pi-zero-rubber-ducky-duckberry-pi](https://github.com/ossiozac/raspberry-pi-zero-rubber-ducky-duckberry-pi) A £10 Rubber Ducky USB HID! A USB device which emulates a keyboard and automates key entry.
+- [**90**Star][2m] [Py] [operatorequals/httpimport](https://github.com/operatorequals/httpimport) Module for remote in-memory Python package/module loading through HTTP/S
+- [**90**Star][2y] [PS] [netbiosx/digital-signature-hijack](https://github.com/netbiosx/digital-signature-hijack) Binaries, PowerShell scripts and information about Digital Signature Hijacking.
+- [**90**Star][2y] [nccgroup/cve-2017-8759](https://github.com/nccgroup/cve-2017-8759) NCC Group's analysis and exploitation of CVE-2017-8759 along with further refinements
+- [**90**Star][8m] [JS] [mozillasecurity/octo](https://github.com/mozillasecurity/octo) A fuzzing library in JavaScript.
+- [**90**Star][1m] [Java] [mnemonic-no/act-platform](https://github.com/mnemonic-no/act-platform) Open platform for collection and exchange of threat intelligence information
+- [**90**Star][3y] [Java] [mingyuan-xia/patdroid](https://github.com/mingyuan-xia/patdroid) A Program Analysis Toolkit for Android
+- [**90**Star][3m] [Py] [malshare/malshare-toolkit](https://github.com/malshare/malshare-toolkit) Set of tools for interacting with Malshare
+- [**90**Star][2y] [jollheef/libreoffice-remote-arbitrary-file-disclosure](https://github.com/jollheef/libreoffice-remote-arbitrary-file-disclosure) Proof of concept of LibreOffice remote arbitrary file disclosure vulnerability
+- [**90**Star][5m] [HTML] [jbman223/earlyap](https://github.com/jbman223/earlyap) Proxy specifically available for AP scores to enable simple early access to your scores without any storing of your College Board account details or dealing with untrustable proxies.
+- [**90**Star][2y] [Ruby] [isecpartners/tlspretense](https://github.com/isecpartners/tlspretense) A test framework for testing SSL/TLS client certificate validation.
+- [**90**Star][6y] [C++] [igh0st/gh0st3.6_src](https://github.com/igh0st/gh0st3.6_src)
+- [**90**Star][2y] [C] [hfiref0x/vmde](https://github.com/hfiref0x/vmde) Source from VMDE paper, adapted to 2015
+- [**90**Star][2y] [Ruby] [hanshaze/ms17-010-eternalblue-winxp-win10](https://github.com/hanshaze/ms17-010-eternalblue-winxp-win10) EternalBlue Metasploit Port to various Windows Versions from Windows XP SP2 up to Windows 10 Pro
+- [**90**Star][3d] [C] [guidovranken/cryptofuzz](https://github.com/guidovranken/cryptofuzz)
+- [**90**Star][1y] [C] [grimm-co/notquite0dayfriday](https://github.com/grimm-co/notquite0dayfriday) This is a repo which documents real bugs in real software to illustrate trends, learn how to prevent or find them more quickly.
+- [**90**Star][1m] [Py] [giantbranch/pwn_deploy_chroot](https://github.com/giantbranch/pwn_deploy_chroot) 可以方便地部署一个或者多个pwn题到一个docker容器中(使用chroot,并可以设置是否使用我自己写的catflag程序替换默认的/bin/sh程序,以增加安全性)
+- [**90**Star][3m] [Py] [gast04/r4ge](https://github.com/gast04/r4ge) Symbolic Execution Tool in r2
+- [**90**Star][7m] [C] [fireeye/flare-kscldr](https://github.com/fireeye/flare-kscldr) 内核中加载Shellcode: 实例、方法与工具
+- [**90**Star][2m] [Ruby] [ffleming/timing_attack](https://github.com/ffleming/timing_attack) timing_attack:对 Webapp 执行 timing 攻击
+- [**90**Star][1y] [Py] [elttam/advisories](https://github.com/elttam/advisories)
+- [**90**Star][3y] [PS] [darkoperator/powershell_scripts](https://github.com/darkoperator/powershell_scripts) Powershell Scripts
+- [**90**Star][7d] [JS] [consensys/truffle-security](https://github.com/consensys/truffle-security) MythX smart contract security verification plugin for Truffle Framework
+- [**90**Star][3y] [Py] [chrizator/netattack](https://github.com/chrizator/netattack) A simple python script to scan and attack wireless networks.
+- [**90**Star][3y] [Py] [callmefeifei/svnhack](https://github.com/callmefeifei/svnhack) 一个Svn信息泄露辅助工具,可以使用这个脚本列取网站目录,读取源码文件以及下载整站代码。
+- [**90**Star][2m] [Ruby] [auth0/ruby-auth0](https://github.com/auth0/ruby-auth0) Ruby toolkit for Auth0 API
+- [**90**Star][7m] [aprilahijriyan/w3brute](https://github.com/aprilahijriyan/w3brute) Automatic Web Application Brute Force Attack Tool
+- [**90**Star][1m] [Py] [akamai-threat-research/mqtt-pwn](https://github.com/akamai-threat-research/mqtt-pwn) MQTT-PWN intends to be a one-stop-shop for IoT Broker penetration-testing and security assessment operations.
+- [**90**Star][3m] [Java] [adubbz/ghidra-switch-loader](https://github.com/adubbz/ghidra-switch-loader) Nintendo Switch loader for Ghidra
+- [**90**Star][4y] [JS] [adafruit/adafruit-io-node](https://github.com/adafruit/adafruit-io-node) A Node.js Adafruit IO Node.js Client, Local Server, & io.adafruit.com TLS Tunnel.
+- [**90**Star][11m] [Py] [hackatnow/stretcher](https://github.com/hackatnow/stretcher) Tool designed to help identify open Elasticsearch servers that are exposing sensitive information
+- [**90**Star][2y] [Py] [hackatnow/cromos](https://github.com/hackatnow/cromos) Cromos is a tool for downloading legitimate extensions of the Chrome Web Store and inject codes in the background of the application.
+- [**90**Star][9m] [Py] [0x27/ssh_keyscanner](https://github.com/0x27/ssh_keyscanner) ssh public host key scanner using shodan
+- [**89**Star][5m] [Py] [lgandx/ccrawldns](https://github.com/lgandx/ccrawldns) This small utility retrieves from the CommonCrawl data set unique subdomains for a given domain name.
+- [**89**Star][7m] [Shell] [honwen/luci-app-shadowsocksr](https://github.com/honwen/luci-app-shadowsocksr) OpenWrt/LEDE LuCI for ShadowsocksR-libev
+- [**89**Star][3d] [Rust] [amaurymartiny/check-if-email-exists](https://github.com/amaurymartiny/check-if-email-exists) Check if an email address exists without sending any email.
+- [**89**Star][7m] [Py] [lopseg/jsdir](https://github.com/Lopseg/Jsdir) Jsdir is a Burp Suite extension that extracts hidden paths from js files and beautifies it for further reading.
+- [**89**Star][1y] [C] [zerosteiner/reflective-polymorphism](https://github.com/zeroSteiner/reflective-polymorphism) Reflective Polymorphism
+- [**89**Star][3m] [Py] [securisec/r2wiki](https://github.com/securisec/r2wiki) Radare 2 wiki
+- [**89**Star][5m] [Java] [llvm-but-worse/java-disassembler](https://github.com/LLVM-but-worse/java-disassembler) The Java Disassembler
+- [**89**Star][10m] [C++] [zhunki/superion](https://github.com/zhunki/superion) Superion is a fuzzer which extends the famous AFL to support structured inputs such as JavaScript and XML.
+- [**89**Star][2y] [ObjC] [wooyundota/dumpdex](https://github.com/wooyundota/dumpdex) Android Unpack tool based on Cydia
+- [**89**Star][1y] [Py] [willbengtson/trailblazer-aws](https://github.com/willbengtson/trailblazer-aws) Blazing CloudTrail since 2018
+- [**89**Star][1y] [PS] [vletoux/spoolerscanner](https://github.com/vletoux/spoolerscanner) Check if MS-RPRN is remotely available with powershell/c#
+- [**89**Star][4m] [Py] [tomchop/unxor](https://github.com/tomchop/unxor) unXOR will search a XORed file and try to guess the key using known-plaintext attacks.
+- [**89**Star][9d] [Py] [tomato42/tlslite-ng](https://github.com/tomato42/tlslite-ng) New home of the TLS implementation in pure python
+- [**89**Star][2y] [HTML] [tigzy/malware-repo](https://github.com/tigzy/malware-repo) Malware Repository Framework
+- [**89**Star][3m] [Py] [thomaspatzke/wase](https://github.com/thomaspatzke/wase) The Web Audit Search Engine - Index and Search HTTP Requests and Responses in Web Application Audits with ElasticSearch
+- [**89**Star][1y] [Shell] [thelinuxchoice/infog](https://github.com/thelinuxchoice/infog) Information Gathering Tool
+- [**89**Star][1y] [Py] [thehive-project/thehive4py](https://github.com/thehive-project/thehive4py) Python API Client for TheHive
+- [**89**Star][4y] [C#] [smartbooks/smartspider](https://github.com/smartbooks/smartspider) 网络信息智能采集系统,是一款基于http协议的Web信息采集软件,应用于网站信息采集,信息安全监控等领域。
+- [**89**Star][2m] [C++] [sinakarvandi/process-magics](https://github.com/sinakarvandi/process-magics) This is a collection of interesting codes about Windows Process creation.
+- [**89**Star][2m] [C] [sfan5/fi6s](https://github.com/sfan5/fi6s) IPV6扫描器
+- [**89**Star][5m] [C] [session-replay-tools/intercept](https://github.com/session-replay-tools/intercept) An auxiliary tool for tcpcopy and tcpburn
+- [**89**Star][2y] [C#] [schillings/swordphish](https://github.com/schillings/swordphish) Schillings SwordPhish empowers organisations and engages its employees to establish the key component of any cyber security strategy: the Human Firewall.
+- [**89**Star][2y] [HTML] [sam-b/windbg-plugins](https://github.com/sam-b/windbg-plugins) Any useful windbg plugins I've written.
+- [**89**Star][4m] [Go] [richardlehane/siegfried](https://github.com/richardlehane/siegfried) signature-based file format identification
+- [**89**Star][5y] [C] [retme7/cve-2014-4322_poc](https://github.com/retme7/cve-2014-4322_poc) Gain privileges:system -> root,as a part of
+- [**89**Star][1y] [PS] [realoriginal/reflectivepotato](https://github.com/realoriginal/reflectivepotato) MSFRottenPotato built as a Reflective DLL.
+- [**89**Star][6m] [Py] [patois/hrdevhelper](https://github.com/patois/hrdevhelper) HexRays decompiler plugin that visualizes the ctree of decompiled functions.
+- [**89**Star][3y] [JS] [particle-iot/spark-protocol](https://github.com/particle-iot/spark-protocol) Node.JS module for hosting direct encrypted CoAP socket connections
+- [**89**Star][24d] [C#] [notsosecure/blacklist3r](https://github.com/notsosecure/blacklist3r) project-blacklist3r
+- [**89**Star][5m] [C++] [niklasb/sploits](https://github.com/niklasb/sploits)
+- [**89**Star][8y] [C] [neuroo/runtime-tracer](https://github.com/neuroo/runtime-tracer) Dynamic tracing for binary applications (using PIN), IDA plugin to visualize and interact with the traces
+ - [PinTool](https://github.com/neuroo/runtime-tracer/tree/master/tracer)
+ - [IDA插件](https://github.com/neuroo/runtime-tracer/tree/master/ida-pin)
+- [**89**Star][2y] [nanopool/claymore-xmr-miner](https://github.com/nanopool/claymore-xmr-miner) Claymore's CryptoNote GPU Miner
+- [**89**Star][5y] [JS] [laktak/vanilla-chrome](https://github.com/laktak/vanilla-chrome) Vanilla Cookie Manager is a Whitelist Manager that helps protect your privacy. Automatically removes unwanted cookies.
+- [**89**Star][2m] [Java] [julietkilo/canbabel](https://github.com/julietkilo/canbabel) Translator for several Controller Area Network (CAN) description formats
+- [**89**Star][3y] [ObjC] [jamie72/ipapatch](https://github.com/jamie72/ipapatch) Patch iOS Apps, The Easy Way, Without Jailbreak.
+- [**89**Star][5y] [Py] [ifghou/wapiti](https://github.com/ifghou/wapiti) A web-application vulnerability scanner
+- [**89**Star][4y] [Py] [houqp/shell.py](https://github.com/houqp/shell.py) shell power for python
+- [**89**Star][8m] [Shell] [hannob/tlshelpers](https://github.com/hannob/tlshelpers) A collection of shell scripts that help handling X.509 certificate and TLS issues
+- [**89**Star][2y] [PHP] [graniet/gshark-framework](https://github.com/graniet/gshark-framework) gshark-framework:执行web post exploitation,可与多个 Web 后门交互,并执行自定义脚本
+- [**89**Star][2y] [PS] [gimini/noah](https://github.com/gimini/noah) an agentless open source Incident Response framework based on PowerShell
+- [**89**Star][10d] [JS] [ehmicky/test-each](https://github.com/ehmicky/test-each)
+- [**89**Star][2y] [C#] [dsnezhkov/typhoon](https://github.com/dsnezhkov/typhoon) recon under the radar
+- [**89**Star][7m] [Java] [docbleach/docbleach](https://github.com/docbleach/docbleach)
+- [**89**Star][3y] [Java] [dobin/burpsentinel](https://github.com/dobin/burpsentinel) GUI Burp Plugin to ease discovering of security holes in web applications
+- [**89**Star][2y] [Py] [dionysio/haveibeenpwned_lastpass](https://github.com/dionysio/haveibeenpwned_lastpass) Check if your lastpass passwords have been pwned by someone
+- [**89**Star][5m] [Ruby] [digininja/rsmangler](https://github.com/digininja/rsmangler) RSMangler will take a wordlist and perform various manipulations on it similar to those done by John the Ripper with a few extras.
+- [**89**Star][6m] [Go] [devanshbatham/gorecon](https://github.com/devanshbatham/gorecon) Gorecon is a All in one Reconnaissance Tool , a.k.a swiss knife for Reconnaissance , A tool that every pentester/bughunter might wanna consider into their arsenal
+- [**89**Star][1y] [Py] [dc3l1ne/weblogic-weakpassword-scnner](https://github.com/dc3l1ne/weblogic-weakpassword-scnner)
+- [**89**Star][2y] [PS] [danielbohannon/out-fincodedcommand](https://github.com/danielbohannon/out-fincodedcommand) POC Highlighting Obfuscation Techniques used by FIN threat actors based on cmd.exe's replace functionality and cmd.exe/powershell.exe's stdin command invocation capabilities
+- [**89**Star][4y] [Py] [cognosec/secbee](https://github.com/cognosec/secbee) a ZigBee security testing tool developed
+- [**89**Star][2y] [C] [codecat/clawsearch](https://github.com/codecat/clawsearch) A memory scanner plugin for x64dbg, inspired by Cheat Engine.
+- [**89**Star][7d] [C] [capstone-rust/capstone-rs](https://github.com/capstone-rust/capstone-rs) high-level Capstone system bindings for Rust
+- [**89**Star][6d] [bkimminich/pwning-juice-shop](https://github.com/bkimminich/pwning-juice-shop) GitBook markdown content for the eBook "Pwning OWASP Juice Shop"
+- [**89**Star][4y] [Py] [bindog/toymalwareclassification](https://github.com/bindog/toymalwareclassification) Kaggle微软恶意代码分类
+- [**89**Star][2y] [ObjC] [bahome/batouchid](https://github.com/bahome/batouchid) git 最全面的支付宝 指纹解锁 和 手势解锁 封装以及逻辑处理!
+- [**89**Star][6y] [C++] [amrthabet/winsrdf](https://github.com/amrthabet/winsrdf) Security Research and Development Framework
+- [**89**Star][4m] [adguardteam/adguardformac](https://github.com/adguardteam/adguardformac) Open bug tracker for Mac version of AdGuard
+- [**89**Star][2y] [HTML] [0xcl/clang-cfi-bypass-techniques](https://github.com/0xcl/clang-cfi-bypass-techniques) 三种利用漏洞绕过Clang Control Flow Integrity (CFI)的技巧(应用于Chromium时)
+- [**89**Star][11m] [Py] [0x00-0x00/fakepip](https://github.com/0x00-0x00/fakepip) Pip install exploit package
+- [**88**Star][2y] [Go] [dawei101/tongsheclient.shadowsocks-go-ui](https://github.com/dawei101/tongsheclient.shadowsocks-go-ui) shadowsocks client for all desktop platform(mac osx/windows/linux) with golang
+- [**88**Star][3y] [Swift] [kjcracks/swift-dump](https://github.com/kjcracks/swift-dump) Generate readable Swift code from binaries
+- [**88**Star][3m] [C++] [leoloobeek/comproxy](https://github.com/leoloobeek/comproxy) PoC for proxying COM objects when hijacking
+- [**88**Star][2y] [Py] [icchy/tracecorn](https://github.com/icchy/tracecorn) Windows API tracer for malware (oldname: unitracer)
+- [**88**Star][1y] [TeX] [zxgio/r2-cheatsheet](https://github.com/zxgio/r2-cheatsheet) Radare2 cheat-sheet
+- [**88**Star][3y] [C++] [zibility/remote](https://github.com/zibility/remote) 参考Gh0st源码,实现的一款PC远程协助软件,拥有远程Shell、文件管理、桌面管理、消息发送等功能。
+- [**88**Star][2m] [PHP] [zendframework/zend-crypt](https://github.com/zendframework/zend-crypt) Cryptographic component from Zend Framework
+- [**88**Star][10m] [Py] [woj-ciech/kupa3](https://github.com/woj-ciech/kupa3) Tracking the trackers. Draw connections between scripts and domains on website.
+- [**88**Star][5m] [C] [vulhub/redis-rogue-getshell](https://github.com/vulhub/redis-rogue-getshell) 利用redis 4.x/5.x master/slave 模式getshell
+- [**88**Star][3d] [C] [vigem/hidguardian](https://github.com/vigem/hidguardian) Windows kernel-mode driver for controlling access to various input devices.
+- [**88**Star][9d] [CSS] [uvasrg/evademl](https://github.com/uvasrg/evademl) An evolutionary framework for evading machine learning-based malware classifiers.
+- [**88**Star][3y] [C] [ufrisk/kaslrfinder](https://github.com/ufrisk/kaslrfinder) Kernel Address Space Layout Randomization (KASLR) Recovery Software
+- [**88**Star][5m] [tuupola/branca-spec](https://github.com/tuupola/branca-spec) Authenticated and encrypted API tokens using modern crypto
+- [**88**Star][1m] [Py] [tum-i22/macke](https://github.com/tum-i22/macke) Modular And Compositional analysis with KLEE Engine
+- [**88**Star][13d] [Ruby] [travis-ci/packer-templates](https://github.com/travis-ci/packer-templates) Templates for Packer!
+- [**88**Star][1y] [Py] [tearsecurity/firstorder](https://github.com/tearsecurity/firstorder) A traffic analyzer to evade Empire's communication from Anomaly-Based IDS
+- [**88**Star][2y] [PS] [suriyaakudoisc/keylogger](https://github.com/suriyaakudoisc/keylogger)
+- [**88**Star][3y] [C] [stealth/troubleshooter](https://github.com/stealth/troubleshooter) setroubleshootd xSports
+- [**88**Star][3m] [Go] [smiegles/mass3](https://github.com/smiegles/mass3) 使用DNS和一堆DNS解析器, 快速枚举预定义的AWS S3 bucket
+- [**88**Star][1y] [Java] [silentsignal/burp-image-size](https://github.com/silentsignal/burp-image-size) Image size issues plugin for Burp Suite
+- [**88**Star][1y] [Py] [sigploiter/gtscan](https://github.com/sigploiter/gtscan) The Nmap Scanner for Telco
+- [**88**Star][2m] [Py] [si9int/acamar](https://github.com/si9int/acamar) A Python3 based single-file subdomain enumerator
+- [**88**Star][2y] [Py] [se55i0n/awvs_nessus_scanner_api](https://github.com/se55i0n/awvs_nessus_scanner_api) 扫描器Awvs 11和Nessus 7 Api利用脚本
+- [**88**Star][14d] [sdnewhop/sdwannewhope](https://github.com/sdnewhop/sdwannewhope) 通过分析不同的SD-WAN解决方案, 回答SD-WAN安全性方面的问题(SD-WAN: 软件定义的广域网)
+- [**88**Star][2m] [Scala] [scala/jardiff](https://github.com/scala/jardiff) A tool for comparing JAR files, including Scala pickled signatures and method code
+- [**88**Star][10m] [PHP] [sanix-darker/antiddos-system](https://github.com/sanix-darker/antiddos-system)
+- [**88**Star][5m] [Py] [rub-syssec/password-guessing-framework](https://github.com/rub-syssec/password-guessing-framework) A Framework for Comparing Password Guessing Strategies
+- [**88**Star][6m] [Java] [rub-nds/burpssoextension](https://github.com/rub-nds/burpssoextension) An extension for BurpSuite that highlights SSO messages in Burp's proxy window..
+- [**88**Star][2m] [Scala] [rsertelon/android-keystore-recovery](https://github.com/rsertelon/android-keystore-recovery) A tool to recover your lost Android keystore password
+- [**88**Star][2y] [Py] [rk700/attackrsa](https://github.com/rk700/attackrsa) An all-in-one tool including many common attacks against RSA problems in CTF.
+- [**88**Star][1y] [C] [renorobert/virtualbox-cve-2018-2844](https://github.com/renorobert/virtualbox-cve-2018-2844)
+- [**88**Star][2y] [PS] [realparisi/wmi_monitor](https://github.com/realparisi/wmi_monitor) Log newly created WMI consumers and processes to the Windows Application event log
+- [**88**Star][5m] [Py] [rassec/yandi-scanner](https://github.com/rassec/yandi-scanner) Network Security Vulnerability Scanner
+- [**88**Star][3m] [JS] [ossindex/auditjs](https://github.com/ossindex/auditjs) Audits an NPM package.json file to identify known vulnerabilities.
+- [**88**Star][7m] [Go] [nearform/gammaray](https://github.com/nearform/gammaray) Node.js vulnerability scanner
+- [**88**Star][4y] [Py] [mothran/unicorn-decoder](https://github.com/mothran/unicorn-decoder) Simple shellcode decoder using unicorn-engine
+- [**88**Star][2y] [Py] [mind0xp/frida-python-binding](https://github.com/mind0xp/frida-python-binding) Easy to use Frida python binding script
+- [**88**Star][10m] [Go] [marinx/keylogger](https://github.com/marinx/keylogger) Basic keylogger in Go (no C deps)
+- [**88**Star][11m] [JS] [mandatoryprogrammer/tarnish](https://github.com/mandatoryprogrammer/tarnish) A Chrome extension static analysis tool to help aide in security reviews.
+- [**88**Star][4y] [Py] [maltelligence/maltelligence](https://github.com/maltelligence/maltelligence) a Malware/Threat Analyst Desktop
+- [**88**Star][3y] [JS] [lovetingyuan/fq](https://github.com/lovetingyuan/fq) fq应用,基于nodejs和shadowsocks
+- [**88**Star][8m] [Shell] [jseidl/multi-tor](https://github.com/jseidl/multi-tor) Shellscript opens multiple TOR instances
+- [**88**Star][6m] [C#] [jnqpblc/sharpspray](https://github.com/jnqpblc/sharpspray) SharpSpray a simple code set to perform a password spraying attack against all users of a domain using LDAP and is compatible with Cobalt Strike.
+- [**88**Star][1y] [Shell] [jbreed/apkwash](https://github.com/jbreed/apkwash) Android APK Antivirus evasion for msfvenom generated payloads.
+- [**88**Star][2y] [Java] [federicodotta/handycollaborator](https://github.com/federicodotta/handycollaborator) Burp Suite plugin created for using Collaborator tool during manual testing in a comfortable way!
+- [**88**Star][20d] [Py] [ernw/windows-insight](https://github.com/ernw/windows-insight) The content of this repository aims to assist efforts on analysing inner working principles, functionalities, and properties of the Microsoft Windows operating system. This repository stores relevant documentation as well as executable files needed for conducting analysis studies.
+- [**88**Star][1m] [Rust] [ekse/unicorn-rs](https://github.com/ekse/unicorn-rs) Rust bindings for the unicorn CPU emulator
+- [**88**Star][2y] [C++] [egebalci/cminer](https://github.com/egebalci/cminer) Cminer is a tool for enumerating the code caves in PE files.
+- [**88**Star][3y] [Go] [dutchcoders/ares](https://github.com/dutchcoders/ares) Phishing toolkit for red teams and pentesters.
+- [**88**Star][9m] [Py] [dirkjanm/impacket](https://github.com/dirkjanm/impacket) Impacket is a collection of Python classes for working with network protocols.
+- [**88**Star][4y] [dantaler/detectionstring](https://github.com/dantaler/detectionstring) list of sql-injection and XSS strings
+- [**88**Star][5y] [Py] [cubicalabs/idasynergy](https://github.com/cubicalabs/idasynergy) IDA Plugin with svn integerted
+- [**88**Star][3m] [Scala] [criteo/lolhttp](https://github.com/criteo/lolhttp) An HTTP Server and Client library for Scala.
+- [**88**Star][6m] [Go] [coinbase/dexter](https://github.com/coinbase/dexter) Forensics acquisition framework designed to be extensible and secure
+- [**88**Star][1y] [ObjC] [cmackay/google-analytics-plugin](https://github.com/cmackay/google-analytics-plugin) Cordova Google Analytics Plugin for Android & iOS
+- [**88**Star][3m] [Py] [cisco-talos/ghidraaas](https://github.com/cisco-talos/ghidraaas) a simple web server that exposes Ghidra analysis through REST APIs
+- [**88**Star][3y] [Py] [circl/bgp-ranking](https://github.com/circl/bgp-ranking) BGP ranking is a free software to calculate the security ranking of Internet Service Provider (ASN).
+- [**88**Star][1y] [chihebchebbi/internet-of-things-pentesting-framework](https://github.com/chihebchebbi/internet-of-things-pentesting-framework)
+- [**88**Star][1y] [C] [chef-koch/malware-research](https://github.com/chef-koch/malware-research) Samples, research and documents about any kind of malware and misc source which should be released to the public
+- [**88**Star][5y] [Py] [cheetz/brutescrape](https://github.com/cheetz/brutescrape) A web scraper for generating password files based on plain text found
+- [**88**Star][3m] [JS] [chatziko/location-guard](https://github.com/chatziko/location-guard) Hide your geographic location from websites.
+- [**88**Star][10m] [Py] [calidog/axeman](https://github.com/calidog/axeman) Axeman is a utility to retrieve certificates from Certificate Transparency Lists (CTLs)
+- [**88**Star][5m] [Py] [balika011/selfblow](https://github.com/balika011/selfblow) CVE‑2019‑5680
+- [**88**Star][14d] [Py] [appsecco/spaces-finder](https://github.com/appsecco/spaces-finder) A tool to hunt for publicly accessible DigitalOcean Spaces
+- [**88**Star][1y] [Py] [andresriancho/jwt-fuzzer](https://github.com/andresriancho/jwt-fuzzer) JWT fuzzer
+- [**88**Star][7m] [C++] [adalenv/cve-2019-0708-tool](https://github.com/adalenv/cve-2019-0708-tool) A social experiment
+- [**88**Star][2y] [Ruby] [0x09al/cve-2017-11882-metasploit](https://github.com/0x09al/cve-2017-11882-metasploit) This is a Metasploit module which exploits CVE-2017-11882 using the POC released here :
+- [**87**Star][4y] [Py] [aanarchyy/wifite-mod-pixiewps](https://github.com/aanarchyy/wifite-mod-pixiewps)
+- [**87**Star][2m] [Py] [demantz/frizzer](https://github.com/demantz/frizzer) Frida-based general purpose fuzzer
+- [**87**Star][3m] [Py] [ecstatic-nobel/analyst-arsenal](https://github.com/ecstatic-nobel/Analyst-Arsenal) A toolkit for Security Researchers
+- [**87**Star][11m] [C++] [nccgroup/dibf](https://github.com/nccgroup/DIBF) Windows NT ioctl bruteforcer and modular fuzzer
+- [**87**Star][6m] [Py] [mzfr/ctf-writeups](https://github.com/mzfr/ctf-writeups) Writeups of Capture The Flag Competitions
+- [**87**Star][4m] [Py] [duo-labs/phish-collect](https://github.com/duo-labs/phish-collect) Python script to hunt phishing kits
+- [**87**Star][8m] [Py] [blacknbunny/peanalyzer](https://github.com/blacknbunny/peanalyzer) Advanced Portable Executable File Analyzer And Disassembler 32 & 64 Bit
+- [**87**Star][2y] [Go] [rancher/lb-controller](https://github.com/rancher/lb-controller) Load Balancer for Rancher services via ingress controllers backed up by a Load Balancer provider of choice
+- [**87**Star][11m] [Py] [0xbharath/censys-enumeration](https://github.com/0xbharath/censys-enumeration) A script to extract subdomains/emails for a given domain using SSL/TLS certificate dataset on Censys
+- [**87**Star][4y] [C] [yaoyumeng/adore-ng](https://github.com/yaoyumeng/adore-ng) linux rootkit adapted for 2.6 and 3.x
+- [**87**Star][8y] [C] [zoloziak/winnt4](https://github.com/zoloziak/winnt4) Windows NT4 Kernel Source code
+- [**87**Star][1y] [C#] [zawawawa/gatelessgatesharp](https://github.com/zawawawa/gatelessgatesharp) Gateless Gate Sharp is an user-friendly yet extremely powerful open-source multi-algorithm miner for Windows operating systems.
+- [**87**Star][9m] [Java] [yunxu1/jboss-_cve-2017-12149](https://github.com/yunxu1/jboss-_cve-2017-12149) CVE-2017-12149 jboss反序列化 可回显
+- [**87**Star][7d] [Py] [xfreed0m/katzkatz](https://github.com/xfreed0m/katzkatz) Python script to parse txt files containing Mimikatz output
+- [**87**Star][2d] [C] [waterslidelts/waterslide](https://github.com/waterslidelts/waterslide) WaterSlide is a streaming event-at-a-time architecture for processing metadata. It is designed to take in a set of streaming events from multiple sources, process them through a set of modules ("kids"), and return meaningful outputs.
+- [**87**Star][8d] [HTML] [w3c/editing](https://github.com/w3c/editing) Specs and explainers maintained by the editing task force
+- [**87**Star][2y] [vegabird/xvna](https://github.com/vegabird/xvna) 带漏洞的Node App
+- [**87**Star][6m] [v-p-b/avpwn](https://github.com/v-p-b/avpwn) List of real-world threats against endpoint protection software
+- [**87**Star][1y] [Py] [uploadcare/pyuploadcare](https://github.com/uploadcare/pyuploadcare) Python library for uploadcare
+- [**87**Star][17d] [C] [unicornteam/hackcube-special](https://github.com/unicornteam/hackcube-special)
+- [**87**Star][1y] [Java] [twjitm/afhq](https://github.com/twjitm/afhq) 类似于腾讯手机管家,360安全卫士等软件系。可以进行木马扫描,网络端口扫描,支付环境扫描,漏洞检测,短信电话拦截,垃圾清理,和手机防盗,利用反射和内容提供者实现电话短信拦截,采用iptable实现网络拦截过滤
+- [**87**Star][26d] [Py] [tozny/rancher-lets-encrypt](https://github.com/tozny/rancher-lets-encrypt) Automatically create and manage certificates in Rancher using Let's Encrypt webroot verification via a minimal service
+- [**87**Star][2m] [JS] [sk4ddy/remediatetheflag](https://github.com/sk4ddy/remediatetheflag) remediatetheflag: 对程序员进行安全相关的培训
+- [**87**Star][6y] [C] [shjalayeri/drivecrypt](https://github.com/shjalayeri/drivecrypt) DriveCrypt Dcr.sys vulnerability exploit
+- [**87**Star][6m] [TeX] [rudymatela/concise-cheat-sheets](https://github.com/rudymatela/concise-cheat-sheets) Cheat Sheets for programming languages and tools
+- [**87**Star][4y] [Py] [regit/pshitt](https://github.com/regit/pshitt) Passwords of SSH Intruders Transferred to Text
+- [**87**Star][2y] [PS] [re4lity/schtasks-backdoor](https://github.com/re4lity/schtasks-backdoor) Powershell 权限维持后门
+- [**87**Star][5y] [C++] [piscou/fuzzwin](https://github.com/piscou/fuzzwin)
+- [**87**Star][4y] [PS] [netspi/powershell-modules](https://github.com/netspi/powershell-modules)
+- [**87**Star][4y] [Py] [necst/aamo](https://github.com/necst/aamo) AAMO: Another Android Malware Obfuscator
+- [**87**Star][1m] [nccgroup/onelogicalmyth_shell](https://github.com/nccgroup/onelogicalmyth_shell) A HTA shell to assist with breakout assessments.
+- [**87**Star][10m] [C] [mrdoulestar/whatminer](https://github.com/mrdoulestar/whatminer) 整理和收集遇见的各种恶意挖矿样本以供研究和学习(欢迎小伙伴们一起维护)
+- [**87**Star][4m] [C++] [misson20000/twili](https://github.com/misson20000/twili) Homebrew debug monitor for the Nintendo Switch.
+- [**87**Star][28d] [JS] [misp/misp-dashboard](https://github.com/misp/misp-dashboard) A dashboard for a real-time overview of threat intelligence from MISP instances
+- [**87**Star][2y] [JS] [mirkoschubert/gdpr-cli](https://github.com/mirkoschubert/gdpr-cli) A command line tool for checking your website for GDPR compliance.
+- [**87**Star][1y] [Py] [lnxg33k/webhandler](https://github.com/lnxg33k/webhandler) Bash simulator to control a server using PHP system functions.
+- [**87**Star][1y] [C] [lloydlabs/windows-api-hashing](https://github.com/lloydlabs/windows-api-hashing) This is a simple example and explanation of obfuscating API resolution via hashing
+- [**87**Star][4y] [Py] [laginimaineb/msm8974_exploit](https://github.com/laginimaineb/msm8974_exploit) Full TrustZone exploit for MSM8974
+- [**87**Star][8m] [Py] [laconicwolf/burp-extensions](https://github.com/laconicwolf/burp-extensions) A collection of scripts to extend Burp Suite
+- [**87**Star][6y] [Py] [jordan-wright/python-wireless-attacks](https://github.com/jordan-wright/python-wireless-attacks) Wireless Attacks in Python (Based on Blog Series)
+- [**87**Star][5y] [Py] [iphelix/ida-patcher](https://github.com/iphelix/ida-patcher) a plugin for Hex-Ray's IDA Pro disassembler designed to enhance IDA's ability to patch binary files and memory.
+- [**87**Star][2y] [realbearcat/fastjson-payload](https://github.com/RealBearcat/Fastjson-Payload) Fastjson 反序列化
+- [**87**Star][8m] [C++] [huanghongkai/game-helper](https://github.com/huanghongkai/game-helper) 介绍入门级游戏辅助的原理,内附有2018年2月dnf辅助C++源码
+- [**87**Star][20d] [Py] [hexhive/bopc](https://github.com/hexhive/bopc) Block Oriented Programming -- Compiler
+- [**87**Star][10m] [Py] [hegusung/webhashcat](https://github.com/hegusung/webhashcat) Hashcat web interface
+- [**87**Star][1y] [hannob/tls-what-can-go-wrong](https://github.com/hannob/tls-what-can-go-wrong) TLS可能存在的问题
+- [**87**Star][2y] [C++] [google/aff4](https://github.com/google/aff4) The Advanced Forensic File Format. NOTE: This project has been split into C and Python projects and moved to
+- [**87**Star][5y] [Go] [filosottile/berserk](https://github.com/filosottile/berserk) A Go implementation of the BERserk attack against Mozilla NSS ASN.1 parsing of PKCS#1 RSA signatures with e = 3. Complete of a certificate generation tool, works with CAs in the trust store.
+- [**87**Star][1y] [JS] [fgsect/fexm](https://github.com/fgsect/fexm) Automated fuzzing framework
+- [**87**Star][2m] [Py] [eth0izzle/cracke-dit](https://github.com/eth0izzle/cracke-dit) cracke-dit ("Cracked It") makes it easier to perform regular password audits against Active Directory environments.
+- [**87**Star][1m] [F#] [enkomio/sojobo](https://github.com/enkomio/sojobo) A binary analysis framework
+- [**87**Star][6d] [endermanch/malwaredatabase](https://github.com/endermanch/malwaredatabase) This repository is one of a few malware collections on the GitHub.
+- [**87**Star][9m] [Java] [doyensec/burpdeveltraining](https://github.com/doyensec/burpdeveltraining) Material for the training "Developing Burp Suite Extensions – From Manual Testing to Security Automation"
+- [**87**Star][1y] [PS] [deepzec/win-portfwd](https://github.com/deepzec/win-portfwd) Powershell script to setup windows port forwarding using native netsh client
+- [**87**Star][2y] [C#] [cubecoders/confuserex-reborn](https://github.com/cubecoders/confuserex-reborn) An open-source, free protector for .NET applications
+- [**87**Star][9m] [Go] [crabkun/switcher](https://github.com/crabkun/switcher) 一个多功能的端口转发/端口复用工具,支持转发本地或远程地址的端口,支持正则表达式转发(实现端口复用)。
+- [**87**Star][3m] [PS] [clr2of8/slackextract](https://github.com/clr2of8/slackextract) A PowerShell script to download all files, messages and user profiles that a user has access to in slack.
+- [**87**Star][4m] [Clojure] [clojure-goes-fast/clj-java-decompiler](https://github.com/clojure-goes-fast/clj-java-decompiler) clj-java-decompiler: 将 Clojure 反编译为 Java
+- [**87**Star][3y] [Py] [boy-hack/pythonwebhack](https://github.com/boy-hack/pythonwebhack) 用python实现的web框架建立的在线渗透平台
+- [**87**Star][2y] [Java] [blackarbiter/android_code_arbiter](https://github.com/blackarbiter/android_code_arbiter) 针对Android Studio的源码扫描工具
+- [**87**Star][2y] [PS] [bkup/slackshell](https://github.com/bkup/slackshell) PowerShell to Slack C2
+- [**87**Star][1m] [Py] [assurancemaladiesec/certstreammonitor](https://github.com/assurancemaladiesec/certstreammonitor) Monitor certificates generated for specific domain strings and associated, store data into sqlite3 database, alert you when sites come online.
+- [**87**Star][1m] [Py] [alset0326/peda-arm](https://github.com/alset0326/peda-arm) GDB plugin peda for arm
+- [**87**Star][2y] [Py] [alexpark07/armscgen](https://github.com/alexpark07/armscgen) ARM Shellcode Generator
+- [**87**Star][4y] [Py] [airbus-seclab/bta](https://github.com/airbus-seclab/bta) Open source Active Directory security audit framework.
+- [**87**Star][5y] [Py] [adafruit/freqshow](https://github.com/adafruit/freqshow) Raspberry Pi & PiTFT-based RTL-SDR frequency scanning and display tool.
+- [**86**Star][6d] [Rust] [plsyssec/haybale](https://github.com/plsyssec/haybale) Symbolic execution of LLVM IR with an engine written in Rust
+- [**86**Star][4m] [Py] [skelsec/minikerberos](https://github.com/skelsec/minikerberos) Kerberos manipulation library in pure Python
+- [**86**Star][11m] [Py] [webbreacher/osinttools](https://github.com/webbreacher/osinttools) A collection of random OSINT scripts
+- [**86**Star][1y] [Py] [bignerd95/routeros-backup-tools](https://github.com/bignerd95/routeros-backup-tools) Tools to encrypt/decrypt and pack/unpack RouterOS v6.13+ backup files
+- [**86**Star][1y] [Py] [openai/neural-gpu](https://github.com/openai/neural-gpu) Code for the Neural GPU model originally described in "Neural GPUs Learn Algorithms"
+- [**86**Star][3m] [C#] [shack2/struts2vulstools](https://github.com/shack2/struts2vulstools) Struts2系列漏洞检查工具
+- [**86**Star][24d] [Go] [liamg/pax](https://github.com/liamg/pax)
+- [**86**Star][14d] [HCL] [nccgroup/sadcloud](https://github.com/nccgroup/sadcloud) A tool for standing up (and tearing down!) purposefully insecure cloud infrastructure
+- [**86**Star][4y] [JS] [nsacyber/locklevel](https://github.com/nsacyber/LOCKLEVEL) A prototype that demonstrates a method for scoring how well Windows systems have implemented some of the top 10 Information Assurance mitigation strategies. #nsacyber
+- [**86**Star][9m] [Py] [hackthissite/ctf-writeups](https://github.com/HackThisSite/CTF-Writeups) Things we learned from Capture The Flag hacking competitions we participated in.
+- [**86**Star][2y] [Ruby] [eurialo/vsaudit](https://github.com/eurialo/vsaudit) VOIP Security Audit Framework
+- [**86**Star][2y] [JS] [polymathnetwork/polymath-token](https://github.com/PolymathNetwork/polymath-token) Ethereum contracts for the official Polymath token (POLY) and token distribution
+- [**86**Star][7y] [Py] [stevenseeley/heaper](https://github.com/stevenseeley/heaper) heaper, an advanced heap analysis plugin for Immunity Debugger
+- [**86**Star][3y] [Py] [vysecurity/genhta](https://github.com/vysecurity/genHTA) Generates anti-sandbox analysis HTA files without payloads
+- [**86**Star][2y] [HTML] [illikainen/exploits](https://github.com/illikainen/exploits)
+- [**86**Star][1y] [JS] [ettic-team/dnsbin](https://github.com/ettic-team/dnsbin) The request.bin of DNS request
+- [**86**Star][7d] [HTML] [mitre-attack/attack-website](https://github.com/mitre-attack/attack-website) MITRE ATT&CK Website
+- [**86**Star][4y] [Java] [zerothoughts/spring-jndi](https://github.com/zerothoughts/spring-jndi) Proof of concept exploit, showing how to do bytecode injection through untrusted deserialization with Spring Framework 4.2.4
+- [**86**Star][2y] [C] [zerosum0x0/threadcontinue](https://github.com/zerosum0x0/threadcontinue) Reflective DLL injection using SetThreadContext() and NtContinue()
+- [**86**Star][4y] [Py] [youmengxuefei/web_vul_scan](https://github.com/youmengxuefei/web_vul_scan) 基于爬虫的web漏洞扫描器
+- [**86**Star][3y] [Py] [yehia-mamdouh/xssya](https://github.com/yehia-mamdouh/xssya) XSSYA (Cross Site Scripting Scanner & Vulnerability Confirmation)
+- [**86**Star][2y] [Py] [wasiher/chrome_remote_interface_python](https://github.com/wasiher/chrome_remote_interface_python) Chrome Debugging Protocol interface for Python
+- [**86**Star][4y] [Visual Basic .NET] [vozzie/uacscript](https://github.com/vozzie/uacscript) Windows 7 UAC Bypass Vulnerability in the Windows Script Host
+- [**86**Star][1y] [Py] [viralmaniar/smwyg-show-me-what-you-got](https://github.com/viralmaniar/smwyg-show-me-what-you-got) This tool allows you to perform OSINT and reconnaissance on an organisation or an individual. It allows one to search 1.4 Billion clear text credentials which was dumped as part of BreachCompilation leak. This database makes finding passwords faster and easier than ever before.
+- [**86**Star][3y] [Py] [ucsb-seclab/baredroid](https://github.com/ucsb-seclab/baredroid) bare-metal analysis on Android devices
+- [**86**Star][2y] [Swift] [tendigi/xmrminer](https://github.com/tendigi/xmrminer) An embeddable Monero miner written in Swift.
+- [**86**Star][5y] [Java] [sysdream/fino](https://github.com/sysdream/fino) Android small footprint inspection tool
+- [**86**Star][4y] [Py] [sogeti-esec-lab/lkd](https://github.com/sogeti-esec-lab/lkd) Local Kernel Debugger (LKD) is a python wrapper around dbgengine.dll
+- [**86**Star][1y] [santosomar/who_and_what_to_follow](https://github.com/santosomar/who_and_what_to_follow) Who and what to follow in the world of cyber security
+- [**86**Star][2y] [C++] [rmitton/goaldis](https://github.com/rmitton/goaldis) Jak & Daxter GOAL disassembler
+- [**86**Star][1y] [HTML] [radareorg/r2con2018](https://github.com/radareorg/r2con2018)
+- [**86**Star][11m] [paralax/awesome-internet-scanning](https://github.com/paralax/awesome-internet-scanning) A curated list of awesome Internet port and host scanners, plus related components and much more, with a focus on free and open source projects.
+- [**86**Star][3y] [JS] [oalabs/frida-wshook](https://github.com/oalabs/frida-wshook) Script analysis tool based on Frida.re
+- [**86**Star][8m] [nongiach/awesome-cryptocurrency-security](https://github.com/nongiach/awesome-cryptocurrency-security)
+- [**86**Star][5m] [C++] [nlitsme/idbutil](https://github.com/nlitsme/idbutil) extracting information from IDA databases
+- [**86**Star][2m] [nightowl131/aapg](https://github.com/nightowl131/aapg) [A]ndroid [A]pplication [P]entest [G]uide
+- [**86**Star][7m] [Py] [nccgroup/blesuite](https://github.com/nccgroup/blesuite) BLESuite is a Python package that provides an easier way to test Bluetooth Low Energy (BLE) device
+- [**86**Star][2m] [Ruby] [nbulaj/proxy_fetcher](https://github.com/nbulaj/proxy_fetcher)
+- [**86**Star][5y] [Ruby] [moosedojo/praedasploit](https://github.com/moosedojo/praedasploit)
+- [**86**Star][2y] [Ruby] [mavproxyuser/p0vsredherring](https://github.com/mavproxyuser/p0vsredherring) "Luckily, there are underground 0day exploits for FTPD for path traversal." #FakeNews #DotDotWontPwn
+- [**86**Star][3m] [Go] [mame82/unifyingvulnsdisclosurerepo](https://github.com/mame82/unifyingvulnsdisclosurerepo) Formerly private repository for discussion, knowledge- and code-sharing around new Unifying vulns, as announced on Twitter
+- [**86**Star][1y] [C++] [malwaretech/appcontainersandbox](https://github.com/malwaretech/appcontainersandbox) An example sandbox using AppContainer (Windows 8+)
+- [**86**Star][4y] [Py] [malwaremusings/unpacker](https://github.com/malwaremusings/unpacker) Automated malware unpacker
+- [**86**Star][3d] [Rust] [kzen-networks/curv](https://github.com/kzen-networks/curv) Rust language general purpose elliptic curve cryptography.
+- [**86**Star][4y] [PHP] [klaubert/waf-fle](https://github.com/klaubert/waf-fle) WAF-FLE, ModSecurity Console
+- [**86**Star][7m] [C++] [kimci86/bkcrack](https://github.com/kimci86/bkcrack) Crack legacy zip encryption with Biham and Kocher's known plaintext attack.
+- [**86**Star][7y] [Py] [iamultra/ssrfsocks](https://github.com/iamultra/ssrfsocks) Creates a SOCK proxy server that transmits data over an SSRF vulnerability
+- [**86**Star][4y] [Py] [huntergregal/scansploit](https://github.com/huntergregal/scansploit) Exploit using barcodes, QRcodes, earn13, datamatrix
+- [**86**Star][1y] [Java] [frpccluster/frpc-android](https://github.com/frpccluster/frpc-android) Android,安卓版frpc,一个快速反向代理,可帮助您将NAT或防火墙后面的本地服务器暴露给Internet。
+- [**86**Star][3y] [C] [frangarcj/oclockvita](https://github.com/frangarcj/oclockvita) Simple Overclock Plugin for Taihen
+- [**86**Star][3d] [Py] [fr0gger/vthunting](https://github.com/fr0gger/vthunting) Vthunting is a tiny script used to generate report about Virus Total hunting and send it by email, slack or telegram.
+- [**86**Star][4m] [Py] [findneo/rsa-attack](https://github.com/findneo/rsa-attack) RSA加密应用常见缺陷的原理与实践
+- [**86**Star][11m] [Py] [duanhongyi/gmssl](https://github.com/duanhongyi/gmssl) a python crypto for sm2/sm3/sm4
+- [**86**Star][4y] [Py] [danmcinerney/fast-recon](https://github.com/danmcinerney/fast-recon) Does some google dorks against a domain
+- [**86**Star][1y] [C] [cgcl-codes/vuldeepecker](https://github.com/cgcl-codes/vuldeepecker) A Deep Learning-Based System for Vulnerability Detection
+- [**86**Star][5y] [Py] [carmaa/nacker](https://github.com/carmaa/nacker) Nacker is a tool to circumvent 802.1x Network Access Control (NAC) on a wired LAN. Nacker will help you locate any non-802.1x configurable hosts on your subnet, and spoof their MAC address so that you appear authenticated to the switch.
+- [**86**Star][1y] [C++] [c3d/elfe](https://github.com/c3d/elfe) Extensible Language for Everyday
+- [**86**Star][5m] [Shell] [butteff/ubuntu-telemetry-free-privacy-secure](https://github.com/butteff/ubuntu-telemetry-free-privacy-secure) This Bash script just removes a pre-installed Telemetry, a pre-installed software and libs with some potentional or high risk. Script removes them to make your experience better and more secure. Also, the script installs an additional software for the protection. You will find more advices in Readme file about "what you can do more".
+- [**86**Star][2y] [Py] [bsmali4/sicklepoc](https://github.com/bsmali4/sicklepoc)
+- [**86**Star][3y] [Py] [azizaltuntas/network-analysis-tools](https://github.com/azizaltuntas/network-analysis-tools) Pcap (capture file) Analysis Toolkit(v.1)
+- [**86**Star][3y] [aidanharris/free-security-ebooks-from-packtpub](https://github.com/aidanharris/free-security-ebooks-from-packtpub) Collection of free Security eBooks from Packt Publishing [Regularly Updated]
+- [**86**Star][3y] [advanced-threat-research/efi-whitelist](https://github.com/advanced-threat-research/efi-whitelist) information about known EFI executable binaries extracted from (U)EFI firmware update images gathered from platform vendors' web-sites.
+- [**86**Star][7m] [Shell] [1n3/prism-ap](https://github.com/1n3/prism-ap) An automated Wireless RogueAP MITM attack framework.
+- [**85**Star][9m] [Visual Basic .NET] [catboy96/automator](https://github.com/catboy96/automator) ⌨ Digispark™ Rubber Ducky code editor for Windows.
+- [**85**Star][28d] [PS] [adamdriscoll/snek](https://github.com/adamdriscoll/snek) PowerShell wrapper around Python for .NET to invoke Python from PowerShell
+- [**85**Star][5m] [TS] [redpointgames/pkgsign](https://github.com/redpointgames/pkgsign) A CLI tool for signing and verifying npm and yarn packages.
+- [**85**Star][3d] [C++] [tihmstar/ra1nsn0w](https://github.com/tihmstar/ra1nsn0w) A tethered booter for 64bit iOS devices vulnerable to checkm8
+- [**85**Star][3y] [C++] [outflanknl/netshhelperbeacon](https://github.com/outflanknl/NetshHelperBeacon) Example DLL to load from Windows NetShell
+- [**85**Star][10m] [C++] [fsecurelabs/viridianfuzzer](https://github.com/FSecureLABS/ViridianFuzzer) Kernel driver to fuzz Hyper-V hypercalls
+- [**85**Star][1y] [Py] [lorentzenman/youzer](https://github.com/lorentzenman/youzer) Fake User Generator for Active Directory Environments
+- [**85**Star][10m] [ruby] [pikatrack/pikatrack](https://gitlab.com/pikatrack/pikatrack)
+- [**85**Star][4m] [C] [zouxianyu/kernelhiddenexecute](https://github.com/zouxianyu/kernelhiddenexecute) Execute kernel code with page separation
+- [**85**Star][1y] [Py] [zmap/ztag](https://github.com/zmap/ztag) Tagging and annotation framework for scan data
+- [**85**Star][3y] [ObjC] [zhengmin1989/macos-10.12.2-exp-via-mach_voucher](https://github.com/zhengmin1989/macos-10.12.2-exp-via-mach_voucher) Local Privilege Escalation for macOS 10.12.2 via mach_voucher and XNU port Feng Shui
+- [**85**Star][2y] [Py] [zhangzhenfeng/anyscan](https://github.com/zhangzhenfeng/anyscan) AnyScan
+- [**85**Star][3m] [Py] [yeggor/uefi_retool](https://github.com/yeggor/uefi_retool) finding proprietary protocols in UEFI firmware and UEFI modules analysing
+- [**85**Star][1y] [Py] [wez3/msfenum](https://github.com/wez3/msfenum) 在特定目标集上自动运行多个 Metasploit auxiliary 模块
+- [**85**Star][2y] [Py] [wanjunzh/ssct](https://github.com/wanjunzh/ssct) ssct:shadowsocks 包装器,用于持续绕过防火墙
+- [**85**Star][2d] [C++] [wallix/redemption](https://github.com/wallix/redemption) A GPL RDP proxy
+- [**85**Star][2y] [C] [vim2meta/keylogger](https://github.com/vim2meta/keylogger) A powerful C keylogger for Windows.
+- [**85**Star][3y] [Py] [vector35/binaryninja-plugins](https://github.com/vector35/binaryninja-plugins) Repository to track Binary Ninja Plugins, Themes, and other related tools
+- [**85**Star][7y] [Java] [thomascannon/android-sms-spoof](https://github.com/thomascannon/android-sms-spoof) PoC app which takes advantage of Android's SmsReceiverService being exported to fake an incoming SMS with no permissions.
+- [**85**Star][12m] [Py] [thelsa/tp5-getshell](https://github.com/thelsa/tp5-getshell) thinkphp5 rce getshell
+- [**85**Star][2y] [ObjC] [siguza/phoenixnonce](https://github.com/siguza/phoenixnonce) 64-bit nonce setter for iOS 9.3.4-9.3.5
+- [**85**Star][7m] [C] [siguza/iokit-utils](https://github.com/siguza/iokit-utils) Dev tools for probing IOKit
+- [**85**Star][3y] [C] [sensepost/ms16-098](https://github.com/sensepost/ms16-098) Windows 8.1 x64 Exploit for MS16-098 RNGOBJ_Integer_Overflow
+- [**85**Star][4y] [HTML] [secmob/cansecwest2016](https://github.com/secmob/cansecwest2016) slide and full exploit
+- [**85**Star][8m] [JS] [scravy/node-macaddress](https://github.com/scravy/node-macaddress) Get the MAC addresses (hardware addresses) of the hosts network interfaces.
+- [**85**Star][2m] [Ruby] [rtfpessoa/dependency_spy](https://github.com/rtfpessoa/dependency_spy) Find known vulnerabilities in your dependencies
+- [**85**Star][1y] [Shell] [rpranshu/autopwn](https://github.com/rpranshu/autopwn) A simple bash based metasploit automation tool!
+- [**85**Star][2m] [C++] [romainthomas/pyjadx](https://github.com/romainthomas/pyjadx) Jadx Python Binding
+- [**85**Star][2d] [Py] [rocky/python2-trepan](https://github.com/rocky/python2-trepan) A gdb-like Python 2.x Debugger in the Trepan family
+- [**85**Star][6y] [Py] [rjw57/hdcp-genkey](https://github.com/rjw57/hdcp-genkey) Generate HDCP source and sink keys from the leaked master key
+- [**85**Star][3y] [risksense-ops/ms17-010](https://github.com/risksense-ops/ms17-010) MS17-010 Research
+- [**85**Star][5y] [AGS Script] [rapid7/embedded-tools](https://github.com/rapid7/embedded-tools)
+- [**85**Star][1y] [Py] [pyn3rd/cve-2018-3191](https://github.com/pyn3rd/cve-2018-3191) CVE-2018-3191-PoC
+- [**85**Star][11m] [ObjC] [pwnsdx/unsecure](https://github.com/pwnsdx/unsecure) (Released in December 2016) Bypass security alerts of Little Flocker / Little Snitch / HandsOff! / BlockBlock (same concept can be applied to other security tools) on macOS.
+- [**85**Star][8y] [poerschke/uniscan](https://github.com/poerschke/uniscan) Uniscan web vulnerability scanner
+- [**85**Star][5m] [Py] [pnfsoftware/jeb2-samplecode](https://github.com/pnfsoftware/jeb2-samplecode) Sample extensions for JEB Decompiler
+- [**85**Star][2y] [C] [petermosmans/openssl](https://github.com/petermosmans/openssl) 'Extra featured' OpenSSL with ChaCha20 and Poly1305 support
+- [**85**Star][9m] [C#] [padovah4ck/psbypassclm](https://github.com/padovah4ck/psbypassclm) Bypass for PowerShell Constrained Language Mode
+- [**85**Star][2y] [Py] [oreilly-japan/black-hat-python-jp-support](https://github.com/oreilly-japan/black-hat-python-jp-support) 『サイバーセキュリティプログラミング』のサポートページ
+- [**85**Star][4y] [C++] [ohjeongwook/flashhacker](https://github.com/ohjeongwook/flashhacker) Flash Instrumentation Tool
+- [**85**Star][5y] [C] [nyx0/rovnix](https://github.com/nyx0/rovnix) Rovnix Bootkit
+- [**85**Star][12m] [Py] [naivenom/exploiting](https://github.com/naivenom/exploiting) Exploiting challenges in Linux and Windows
+- [**85**Star][2m] [JS] [mlgualtieri/css-exfil-protection](https://github.com/mlgualtieri/css-exfil-protection) Official repository for the CSS Exfil Protection browser extensions.
+- [**85**Star][2d] [Shell] [mitchellkrogza/phishing.database](https://github.com/mitchellkrogza/phishing.database) Phishing Domains, urls websites and threats database. We use the PyFunceble testing tool to validate the status of all known Phishing domains and provide stats to reveal how many unique domains used for Phishing are still active.
+- [**85**Star][2y] [C] [maximehip/safari-ios10.3.2-macos-10.12.4-exploit-bugs](https://github.com/maximehip/safari-ios10.3.2-macos-10.12.4-exploit-bugs)
+- [**85**Star][4y] [Java] [mauro-g/snuck](https://github.com/mauro-g/snuck) Automatic XSS filter bypass
+- [**85**Star][5m] [Java] [magiczer0/fastjson-rce-exploit](https://github.com/magiczer0/fastjson-rce-exploit) exploit for fastjson remote code execution vulnerability
+- [**85**Star][4y] [Py] [liuhui0613/thewind](https://github.com/liuhui0613/thewind) a MITM attack tool
+- [**85**Star][4y] [C] [laginimaineb/cve-2015-6639](https://github.com/laginimaineb/cve-2015-6639) QSEE Privilege Escalation Exploit using PRDiag* commands (CVE-2015-6639)
+- [**85**Star][2d] [ObjC] [lacertosusrepo/open-source-tweaks](https://github.com/lacertosusrepo/open-source-tweaks) Tweaks I've left open, maybe someone can learn from/correct them. Either on my repo or Packix.
+- [**85**Star][6m] [PS] [kieranwalsh/powershell](https://github.com/kieranwalsh/powershell) My PowerShell stuff
+- [**85**Star][1m] [C++] [jnastarot/furikuri](https://github.com/jnastarot/furikuri) (In dev)furikuri is framework for code protection
+- [**85**Star][1y] [Shell] [jakewharton/dalvik-dx](https://github.com/jakewharton/dalvik-dx) A standalone packaging of AOSP's platform/dalvik dx library.
+- [**85**Star][6m] [Py] [initstring/evil-ssdp](https://github.com/initstring/evil-ssdp) Spoof SSDP replies and create fake UPnP devices to phish for credentials and NetNTLM challenge/response.
+- [**85**Star][4y] [C] [gitdurandal/dbd](https://github.com/gitdurandal/dbd) Durandal's Backdoor
+- [**85**Star][5d] [C++] [galoisinc/macaw](https://github.com/galoisinc/macaw) Open source binary analysis tools.
+- [**85**Star][3y] [exp-sky/hitcon-2016-windows-10-x64-edge-0day-and-exploit](https://github.com/exp-sky/hitcon-2016-windows-10-x64-edge-0day-and-exploit) HitCon 2016 Windows 10 x64 edge 0day and exploit
+- [**85**Star][6m] [Go] [equim-chan/h2s](https://github.com/equim-chan/h2s)
+- [**85**Star][4y] [C] [electrojustin/triad-decompiler](https://github.com/electrojustin/triad-decompiler) TRiad Is A Decompiler. Triad is a tiny, free and open source, Capstone based x86 decompiler for ELF binaries.
+- [**85**Star][2y] [diablohorn/yara4pentesters](https://github.com/diablohorn/yara4pentesters) rules to identify files containing juicy information like usernames, passwords etc
+- [**85**Star][4m] [C++] [designer1337/aristois-legit](https://github.com/designer1337/aristois-legit) Full project files for aristois, Counter-Strike: Global Offensive cheat.
+- [**85**Star][7m] [Py] [dcsync/pycobalt](https://github.com/dcsync/pycobalt) Cobalt Strike API, Python版本
+- [**85**Star][1y] [Java] [cunninglogic/dumlracer](https://github.com/cunninglogic/dumlracer) Root Exploit for DJI Drones and Controllers (up to and including v01.04.0200)
+- [**85**Star][2y] [C] [countercept/doublepulsar-usermode-injector](https://github.com/countercept/doublepulsar-usermode-injector) doublepulsar-usermode-injector:使用 DOUBLEPULSAR payload 用户模式的 Shellcode 向其他进程注入任意 DLL
+- [**85**Star][1y] [cneill/appsec-resources](https://github.com/cneill/appsec-resources) Resources for developers and security engineers to learn the ropes of application security
+- [**85**Star][2y] [Py] [cheeky4n6monkey/4n6-scripts](https://github.com/cheeky4n6monkey/4n6-scripts) Forensic Scripts
+- [**85**Star][2d] [Zeek] [bro/bro](https://github.com/bro/bro) Mirror of
+- [**85**Star][4y] [Py] [blackye/bkscanner](https://github.com/blackye/bkscanner) BkScanner 分布式、插件化web漏洞扫描器
+- [**85**Star][7y] [C] [bagder/spindly](https://github.com/bagder/spindly) a portable C library for SPDY transport (DEAD project!)
+- [**85**Star][12d] [C] [awakened1712/cve-2019-11932](https://github.com/awakened1712/cve-2019-11932) Simple POC for exploiting WhatsApp double-free bug in DDGifSlurp in decoding.c in libpl_droidsonroids_gif
+- [**85**Star][6y] [C] [armenb/sharktools](https://github.com/armenb/sharktools) Tools for programmatic parsing of packet captures using Wireshark functionality
+- [**85**Star][27d] [JS] [aqiongbei/buy_pig_plan](https://github.com/aqiongbei/buy_pig_plan) 电话攻击(电话轰炸、可代替短信轰炸)、留言攻击工具 | 随缘维护,佛系更新
+- [**85**Star][2m] [Py] [angr/phuzzer](https://github.com/angr/phuzzer) The new phuzzing framework!
+- [**85**Star][2y] [Ruby] [anbai-inc/attackfilter](https://github.com/anbai-inc/attackfilter) Logstash 日志安全攻击分析插件
+- [**85**Star][7m] [Py] [aaronst/macholibre](https://github.com/aaronst/macholibre) Mach-O & Universal Binary Parser
+- [**85**Star][3y] [Py] [5up3rc/nagascan](https://github.com/5up3rc/nagascan) NagaScan is a distributed passive scanner for Web application.
+- [**84**Star][1m] [ObjC] [gssdromen/v2rayc](https://github.com/gssdromen/v2rayc) a GUI for v2ray on Mac
+- [**84**Star][3y] [C#] [0xfireball/modphuserex](https://github.com/0xfireball/modphuserex) A .NET protector supporting .NET Core forked from the discontinued ConfuserEx
+- [**84**Star][3d] [stonedreamforest/mirage](https://github.com/stonedreamforest/mirage) kernel-mode Anti-Anti-Debug plugin. based on intel vt-x && ept technology
+- [**84**Star][9m] [Py] [npist/v2rayms](https://github.com/npist/v2rayms) v2ray whmcs 多用户后端
+- [**84**Star][1y] [Py] [justsoos/ss-ssr-v2ray-gadget](https://github.com/justsoos/ss-ssr-v2ray-gadget) merge, deduplicate, backup, convert and online benchmark tools set for shadowsocks/shadowsocksR, v2ray. by python3
+- [**84**Star][7m] [Py] [aoncyberlabs/ssh-weak-dh](https://github.com/AonCyberLabs/SSH-Weak-DH)
+- [**84**Star][2m] [Shell] [devploit/put2win](https://github.com/devploit/put2win) Script to automate PUT HTTP method exploitation to get shell
+- [**84**Star][3y] [C++] [zcash-hackworks/pay-to-sudoku](https://github.com/zcash-hackworks/pay-to-sudoku) Pay for the solution to a sudoku puzzle with a zero-knowledge contingent payment
+- [**84**Star][1y] [security-cheatsheet/metasploit-cheat-sheet](https://github.com/security-cheatsheet/metasploit-cheat-sheet) Metasploit Cheat Sheet
+- [**84**Star][4y] [Ruby] [ztgrace/pwn_lab](https://github.com/ztgrace/pwn_lab) pwn_lab:创建安全训练环境的Vagrant 脚本和 boxes
+- [**84**Star][3d] [Py] [zricethezav/h1domains](https://github.com/zricethezav/h1domains) HackerOne "in scope" domains
+- [**84**Star][21d] [Py] [ziconius/fudgec2](https://github.com/ziconius/fudgec2) FudgeC2 - a command and control framework designed for team collaboration and post-exploitation activities.
+- [**84**Star][2y] [Java] [yandex/burp-molly-pack](https://github.com/yandex/burp-molly-pack) Security checks pack for Burp Suite
+- [**84**Star][4y] [JS] [xuanhuan/ss-panel](https://github.com/xuanhuan/ss-panel) !
+- [**84**Star][1m] [C] [wonderkun/ctfenv](https://github.com/wonderkun/ctfenv) 为应对CTF比赛而搭建的各种环境
+- [**84**Star][1y] [JS] [tingge/web-analytics](https://github.com/tingge/web-analytics) 监测分析、异常监测、广告验证、访客唯一标识
+- [**84**Star][3m] [Py] [therook/nsshell](https://github.com/therook/nsshell) A DNS connectback shell executed by strings in payloads.txt
+- [**84**Star][3y] [C] [tedsluis/dump1090](https://github.com/tedsluis/dump1090) Dump1090 is a simple Mode S decoder for RTLSDR devices
+- [**84**Star][3y] [Py] [smxlabs/gibbersense](https://github.com/smxlabs/gibbersense) gibbersense:尝试理解乱七八糟的东西(从乱七八糟的东西里面提取出有意义的信息)
+- [**84**Star][5y] [shodan-labs/iotdb](https://github.com/shodan-labs/iotdb) Nmap scans of Internet of Things devices
+- [**84**Star][2y] [Py] [sensepost/birp](https://github.com/sensepost/birp) Big Iron Recon & Pwnage
+- [**84**Star][3y] [Shell] [scotthelme/lets-encrypt-smart-renew](https://github.com/scotthelme/lets-encrypt-smart-renew) Check the remaining validity period of a certificate before renewing.
+- [**84**Star][4m] [Py] [safebreach-labs/bitsinject](https://github.com/safebreach-labs/bitsinject) A one-click tool to inject jobs into the BITS queue (Background Intelligent Transfer Service), allowing arbitrary program execution as the NT AUTHORITY/SYSTEM account
+- [**84**Star][5y] [PHP] [rickgray/bypass-php-gd-process-to-rce](https://github.com/rickgray/bypass-php-gd-process-to-rce) Reference:
+- [**84**Star][3m] [Py] [r00ts3c/ddos-rootsec](https://github.com/r00ts3c/ddos-rootsec) DDOS Archive by RootSec (Scanners, BotNets (Mirai and QBot Premium & Normal and more), Exploits, Methods, Sniffers)
+- [**84**Star][2y] [C] [pannzh/hidemyass](https://github.com/pannzh/hidemyass) A post-exploit tool that carefully clean *NIX access logs
+- [**84**Star][4y] [Py] [omererdem/honeything](https://github.com/omererdem/honeything) TR-069 Honeypot
+- [**84**Star][30d] [Py] [nullarray/archivist](https://github.com/nullarray/archivist) A ctypes powered python keylogger.
+- [**84**Star][4y] [Py] [mgoffin/malwarecookbook](https://github.com/mgoffin/malwarecookbook) Malware Analyst's Cookbook stuffs
+- [**84**Star][1y] [C] [marfjeh/coinhive-block](https://github.com/marfjeh/coinhive-block) To block the malware domains of coin-hive systemwide.
+- [**84**Star][4m] [Py] [kapytein/jsonp](https://github.com/kapytein/jsonp) jsonp is a Burp Extension which attempts to reveal JSONP functionality behind JSON endpoints. This could help reveal cross-site script inclusion vulnerabilities or aid in bypassing content security policies.
+- [**84**Star][5m] [JS] [k4m4/dcipher](https://github.com/k4m4/dcipher) Decipher hashes using online rainbow & lookup table attack services.
+- [**84**Star][1y] [Py] [jiangsir404/s7scan](https://github.com/jiangsir404/s7scan) a pentest scanner / 一个漏洞综合利用工具轮子,大佬请忽略
+- [**84**Star][2y] [Py] [hi-wenr0/mlcheckwebshell](https://github.com/hi-wenr0/mlcheckwebshell)
+- [**84**Star][3y] [C++] [hasherezade/persistence_demos](https://github.com/hasherezade/persistence_demos) Demos of various (also non standard) persistence methods used by malware
+- [**84**Star][11d] [Py] [haotianteng/chiron](https://github.com/haotianteng/chiron) A basecaller for Oxford Nanopore Technologies' sequencers
+- [**84**Star][1y] [Dockerfile] [hackerhouse-opensource/cve-2018-10933](https://github.com/hackerhouse-opensource/cve-2018-10933) cve-2018-10933 libssh authentication bypass
+- [**84**Star][5m] [JS] [glamrock/cupcake](https://github.com/glamrock/cupcake) Create new pathways into Tor
+- [**84**Star][2m] [Py] [fleetcaptain/turbolist3r](https://github.com/fleetcaptain/turbolist3r) Subdomain enumeration tool with analysis features for discovered domains
+- [**84**Star][JS] [feeicn/papers](https://github.com/feeicn/papers) 个人博客,在企业安全、软件研发和个人思考的一些文章
+- [**84**Star][4y] [Swift] [deniskr/keychainswiftapi](https://github.com/deniskr/keychainswiftapi) This Keychain Swift API library is a wrapper of iOS C Keychain Framework. It allows easily and securely storing sensitive data in secure keychain store.
+- [**84**Star][7y] [Py] [dc414/upnp-exploiter](https://github.com/dc414/upnp-exploiter) A Upnp exploitation tool.
+- [**84**Star][2y] [Py] [coco413/discoversubdomain](https://github.com/coco413/discoversubdomain) 前渗透信息探测工具集-子域名
+- [**84**Star][4m] [C#] [cobbr/elite](https://github.com/cobbr/elite) Elite is the client-side component of the Covenant project. Covenant is a .NET command and control framework that aims to highlight the attack surface of .NET, make the use of offensive .NET tradecraft easier, and serve as a collaborative command and control platform for red teamers.
+- [**84**Star][4y] [Go] [cloudflare/jgc-talks](https://github.com/cloudflare/jgc-talks) Code samples and data used in talk preparation by John Graham-Cumming
+- [**84**Star][2y] [CSS] [cleverbao/webrange](https://github.com/cleverbao/webrange) 一个Web版的docker管理程序,可以用来运行各种docker漏洞环境和CTF环境。
+- [**84**Star][3d] [claucece/useful-crypto-resources](https://github.com/claucece/useful-crypto-resources) A place for useful crypto-related resources plus some of my fav stuff
+- [**84**Star][2y] [PHP] [bug7sec/ransomware](https://github.com/bug7sec/ransomware) Bug7sec Team - ransomware open source (web)
+- [**84**Star][11m] [C++] [basketwill/sysmon_reverse](https://github.com/basketwill/sysmon_reverse)
+- [**84**Star][12m] [C++] [arashpartow/proxy](https://github.com/arashpartow/proxy) C++ TCP Proxy Server
+- [**84**Star][2y] [Py] [anonion0/nsec3map](https://github.com/anonion0/nsec3map) a tool to enumerate the resource records of a DNS zone using its DNSSEC NSEC or NSEC3 chain
+- [**84**Star][5y] [Shell] [anexia-it/winshock-test](https://github.com/anexia-it/winshock-test) Bash script that tests if a system is Winshock (MS14-066) vulnerable
+- [**84**Star][10m] [C] [aasthayadav/compsecattacklabs](https://github.com/aasthayadav/compsecattacklabs) Contains Attack labs
+- [**84**Star][11m] [Py] [422926799/python](https://github.com/422926799/python) python黑客与一些脚本
+- [**84**Star][3y] [Py] [3xp10it/mytoolkit](https://github.com/3xp10it/mytoolkit) 【Not maintained】sqlmap对所有目标及其所有旁站批量自动化sqli
+- [**84**Star][2y] [Go] [0x09al/browser-c2](https://github.com/0x09al/browser-c2) Post Exploitation agent which uses a browser to do C2 operations.
+- [**83**Star][3y] [Jupyter Notebook] [supercowpowers/workbench](https://github.com/supercowpowers/workbench) Workbench: A scalable python framework for security research and development teams.
+- [**83**Star][3m] [C++] [lifting-bits/microx](https://github.com/lifting-bits/microx) Safely execute an arbitrary x86 instruction
+- [**83**Star][1y] [JS] [seclab-ucr/tcp_exploit](https://github.com/seclab-ucr/tcp_exploit) Off-Path TCP Exploit: How Wireless Routers Can Jeopardize Your Secret
+- [**83**Star][1y] [Py] [danmcinerney/search-google](https://github.com/danmcinerney/search-google) Scrape google search results
+- [**83**Star][24d] [PS] [kmkz/powershell](https://github.com/kmkz/powershell) Some .ps1 scripts for pentesting
+- [**83**Star][19d] [payloadbox/sql-injection-payload-list](https://github.com/payloadbox/sql-injection-payload-list)
+- [**83**Star][22d] [six2dez/oscp-human-guide](https://github.com/six2dez/oscp-human-guide) My own OSCP guide
+- [**83**Star][6m] [Shell] [zerobyte-id-bak/bashter](https://github.com/zerobyte-id-bak/Bashter) Web Crawler, Scanner, and Analyzer Framework (Shell-Script based)
+- [**83**Star][1y] [Shell] [cyb0r9/androspy](https://github.com/Cyb0r9/Androspy) Androspy framework is a Backdoor Crypter & Creator with Automatic IP Poisener
+- [**83**Star][4y] [Py] [n0tr00t/wvs_patcher](https://github.com/n0tr00t/WVS_Patcher) Script to run wvs in queue, and send mails to you on ending.
+- [**83**Star][19d] [Py] [openpreserve/fido](https://github.com/openpreserve/fido) Format Identification for Digital Objects (FIDO) is a Python command-line tool to identify the file formats of digital objects. It is designed for simple integration into automated work-flows.
+- [**83**Star][2y] [Py] [am0nsec/exploit](https://github.com/am0nsec/exploit) Collection of different exploits
+- [**83**Star][2y] [C] [xobs/novena-linux](https://github.com/xobs/novena-linux) Linux kernel with Novena patches -- expect frequent rebases!
+- [**83**Star][9m] [Py] [xajkep/wordlists](https://github.com/xajkep/wordlists) Infosec Wordlists
+- [**83**Star][2m] [C++] [vusec/vuzzer64](https://github.com/vusec/vuzzer64) This implements a 64-bit version of vusec/vuzzer fuzzing tool.
+- [**83**Star][1y] [JS] [vspandan/ifuzzer](https://github.com/vspandan/ifuzzer)
+- [**83**Star][8m] [Py] [viralmaniar/peekaboo](https://github.com/viralmaniar/peekaboo) PeekABoo tool can be used during internal penetration testing when a user needs to enable Remote Desktop on the targeted machine. It uses PowerShell remoting to perform this task. Note: Remote desktop is disabled by default on all Windows operating systems.
+- [**83**Star][3y] [JS] [unrealakama/nightshade](https://github.com/unrealakama/nightshade) A simple capture the flag framework.
+- [**83**Star][11m] [Py] [tlkh/prowler](https://github.com/tlkh/prowler) Distributed Network Vulnerability Scanner
+- [**83**Star][2y] [Py] [sogeti-esec-lab/rpcforge](https://github.com/sogeti-esec-lab/rpcforge) Windows RPC Python fuzzer
+- [**83**Star][1m] [PHP] [slims/slims8_akasia](https://github.com/slims/slims8_akasia) SLiMS 8 Akasia official source code repository
+- [**83**Star][16d] [Py] [sjord/jwtcrack](https://github.com/sjord/jwtcrack) Crack the shared secret of a HS256-signed JWT
+- [**83**Star][3y] [C++] [scanlime/facewhisperer](https://github.com/scanlime/facewhisperer) USB host add-on for the ChipWhisperer side-channel analysis tool
+- [**83**Star][1y] [Py] [s3rvac/retdec-python](https://github.com/s3rvac/retdec-python) A Python library and tools providing easy access to the retdec.com decompilation service through their REST API.
+- [**83**Star][7y] [C] [realtalk/cve-2013-2094](https://github.com/realtalk/cve-2013-2094) original cve-2013-2094 exploit and a rewritten version for educational purposes
+- [**83**Star][5m] [Py] [quantika14/guasap-whatsapp-foresincs-tool](https://github.com/quantika14/guasap-whatsapp-foresincs-tool) WhatsApp Forensic Tool
+- [**83**Star][7d] [Java] [pwntester/dupekeyinjector](https://github.com/pwntester/dupekeyinjector) DupeKeyInjector
+- [**83**Star][1y] [Jupyter Notebook] [poteman/alibaba-3rd-security-algorithm-challenge](https://github.com/poteman/alibaba-3rd-security-algorithm-challenge) 第三届阿里云安全算法挑战赛冠军代码
+- [**83**Star][10m] [Py] [piranhalysis/pirogue](https://github.com/piranhalysis/pirogue) PiRogue is a small device meant to ease network interception and analysis.
+- [**83**Star][11m] [Py] [phantom0301/vulcloud](https://github.com/phantom0301/vulcloud) A Simple Web-UI for Vulhub (Docker) / 便捷的漏洞镜像管理部署Web应用
+- [**83**Star][3m] [Ruby] [pedrib/poc](https://github.com/pedrib/poc)
+- [**83**Star][4y] [owasp/owasp-testing-guide](https://github.com/owasp/owasp-testing-guide) OWASP Testing Guide
+- [**83**Star][8m] [offensive-security/kali-cloud-build](https://github.com/offensive-security/kali-cloud-build) Script to create Kali Linux Amazon Machine Images (AMIs)
+- [**83**Star][3y] [JS] [oalabs/frida-extract](https://github.com/oalabs/frida-extract) Frida.re based RunPE (and MapViewOfSection) extraction tool
+- [**83**Star][1y] [Py] [oalabs/findyara](https://github.com/oalabs/findyara) IDA python plugin to scan your binary with yara rules
+- [**83**Star][1y] [Py] [nccgroup/blackboxprotobuf](https://github.com/nccgroup/blackboxprotobuf) Blackbox protobuf is a Burp Suite extension for decoding and modifying arbitrary protobuf messages without the protobuf type definition.
+- [**83**Star][7m] [mr-xn/hackbar2.1.3](https://github.com/mr-xn/hackbar2.1.3) the free firefox extions of hackbar v2.1.3 ,hackbar 插件未收费的免费版本
+- [**83**Star][4y] [C#] [monoxgas/trebuchet](https://github.com/monoxgas/trebuchet) MS15-076 Privilege Escalation
+- [**83**Star][6y] [PS] [mmessano/powershell](https://github.com/mmessano/powershell)
+- [**83**Star][1y] [C] [marcusbotacin/branchmonitoringproject](https://github.com/marcusbotacin/branchmonitoringproject) A branch-monitor-based solution for process monitoring.
+- [**83**Star][6m] [Py] [localh0t/m4ngl3m3](https://github.com/localh0t/m4ngl3m3) 使用字符串列表的通用密码模式生成器
+- [**83**Star][5y] [JS] [kmowery/canvas-fingerprinting](https://github.com/kmowery/canvas-fingerprinting) A framework for collecting and viewing graphical browser fingerprints.
+- [**83**Star][2y] [Makefile] [kingsquare/docker-tunnel](https://github.com/kingsquare/docker-tunnel) a (simple) dockerized ssh tunnel
+- [**83**Star][3m] [Py] [kcarretto/arsenal](https://github.com/kcarretto/arsenal) Extensible Red Team Framework
+- [**83**Star][8m] [kai5263499/awesome-container-security](https://github.com/kai5263499/awesome-container-security) Awesome list of resources related to container security
+- [**83**Star][2y] [PS] [kacperszurek/gpg_reaper](https://github.com/kacperszurek/gpg_reaper) 从gpg-agent缓存/内存中获取/窃取/恢复GPG私钥
+- [**83**Star][9m] [justinsteven/advisories](https://github.com/justinsteven/advisories)
+- [**83**Star][3y] [ObjC] [jonwil/unlinker](https://github.com/jonwil/unlinker) Unlinker is a tool that can rip functions out of Visual C++ compiled binaries and produce Visual C++ COFF object files
+- [**83**Star][13d] [Java] [jgillam/burp-paramalyzer](https://github.com/jgillam/burp-paramalyzer) Paramalyzer - Burp extension for parameter analysis of large-scale web application penetration tests.
+- [**83**Star][1y] [github-classroom-cybros/ethical-hacking](https://github.com/github-classroom-cybros/ethical-hacking) This repository contains reference material & links for people willing to learn Ethical Hacking
+- [**83**Star][2y] [R] [fujitsulaboratories/comevizz](https://github.com/fujitsulaboratories/comevizz) COMEVIZZ is COde MEtrics VIsualiZation with Z-Score.
+- [**83**Star][12m] [C] [friendlyarm/h3_lichee](https://github.com/friendlyarm/h3_lichee) BSP for FriendlyARM NanoPi H3
+- [**83**Star][1y] [Ruby] [enjoiz/bsqlinjector](https://github.com/enjoiz/bsqlinjector) Blind SQL injection exploitation tool written in ruby.
+- [**83**Star][6y] [Py] [einstein-/hexrays-python](https://github.com/einstein-/hexrays-python) Python bindings for the Hexrays Decompiler
+- [**83**Star][2y] [C] [dword1511/onewire-over-uart](https://github.com/dword1511/onewire-over-uart) Access Dallas 1-Wire bus on your PC via low-cost USB to UART bridge.
+- [**83**Star][6m] [C++] [djhohnstein/processreimaging](https://github.com/djhohnstein/processreimaging) Process reimaging proof of concept code
+- [**83**Star][2y] [C++] [decoder-it/lonelypotato](https://github.com/decoder-it/lonelypotato) Modified version of RottenPotatoNG C++
+- [**83**Star][8m] [C++] [deadash/pbb_crack](https://github.com/deadash/pbb_crack) PBB视频解密
+- [**83**Star][4m] [Py] [danielplohmann/smda](https://github.com/danielplohmann/smda) SMDA is a minimalist recursive disassembler library that is optimized for accurate Control Flow Graph (CFG) recovery from memory dumps.
+- [**83**Star][2m] [PS] [cyberark/skyark](https://github.com/cyberark/skyark) SkyArk helps to discover, assess and secure the most privileged entities in Azure and AWS
+- [**83**Star][3y] [Py] [claudioviviani/wordbrutepress](https://github.com/claudioviviani/wordbrutepress) Wordpress Brute Force Multithreading with standard and xml-rpc login
+- [**83**Star][3d] [caledoniaproject/awesome-opensource-security](https://github.com/caledoniaproject/awesome-opensource-security) A list of interesting stuffs that I have no time to test/review
+- [**83**Star][5y] [Py] [bwall/ircsnapshot](https://github.com/bwall/ircsnapshot) Tool to gather information from IRC servers
+- [**83**Star][4m] [C] [brainsmoke/ptrace-burrito](https://github.com/brainsmoke/ptrace-burrito) a friendly wrapper around ptrace
+- [**83**Star][3y] [bones-codes/bombs](https://github.com/bones-codes/bombs) A few files for decompression bomb testing –––
+- [**83**Star][3y] [C] [bluekezhou/binarywaf](https://github.com/bluekezhou/binarywaf) CTF线下赛流量记录工具
+- [**83**Star][2y] [C++] [benjaminsoelberg/reflectivepeloader](https://github.com/benjaminsoelberg/reflectivepeloader) Reflective PE loader for DLL injection
+- [**83**Star][7m] [Go] [assafmo/xioc](https://github.com/assafmo/xioc) Extract indicators of compromise from text, including "escaped" ones.
+- [**83**Star][1y] [HTML] [amolnaik4/bodhi](https://github.com/amolnaik4/bodhi) Bodhi - Client-side Vulnerability Playground
+- [**83**Star][2y] [Py] [401trg/detections](https://github.com/401trg/detections) This repository contains all public indicators identified by 401trg during the course of our investigations. It also includes relevant yara rules and ids signatures to detect these indicators.
+- [**83**Star][2y] [Py] [1n3/httpoxyscan](https://github.com/1n3/httpoxyscan) HTTPoxy Exploit Scanner by 1N3 @CrowdShield
+- [**83**Star][11m] [java] [JesusFreke/smali](https://bitbucket.org/jesusfreke/smali)
+- [**82**Star][1y] [Dockerfile] [codesuki/ecs-nginx-proxy](https://github.com/codesuki/ecs-nginx-proxy) Reverse proxy for AWS ECS. Lets you address your docker containers by sub domain.
+- [**82**Star][3d] [Py] [m4ll0k/burpsuite-secret_finder](https://github.com/m4ll0k/burpsuite-secret_finder) Burp Suite extension to discover apikeys/tokens from HTTP response.
+- [**82**Star][2m] [C] [taviso/cefdebug](https://github.com/taviso/cefdebug) Minimal code to connect to a CEF debugger.
+- [**82**Star][2m] [uknowsec/loginlog_windows](https://github.com/uknowsec/loginlog_windows) 读取登录过本机的登录失败或登录成功的所有计算机信息,在内网渗透中快速定位运维管理人员。
+- [**82**Star][5y] [Ruby] [intrigueio/tapir](https://github.com/intrigueio/tapir) An easy-to-use and extensible framework for OSINT - REPLACED BY INTRIGUE-CORE
+- [**82**Star][20d] [Py] [imtiazkarimik23/atfuzzer](https://github.com/imtiazkarimik23/atfuzzer) "Opening Pandora's Box through ATFuzzer: Dynamic Analysis of AT Interface for Android Smartphones" ACSAC 2019
+- [**82**Star][11m] [JS] [zswang/jfogs](https://github.com/zswang/jfogs) JavaScript Obfuscator
+- [**82**Star][3y] [C#] [saneki-discontinued/flatui](https://github.com/saneki-discontinued/FlatUI) Flat UI theme for .NET applications
+- [**82**Star][2y] [C#] [zacbrown/powerkrabsetw](https://github.com/zacbrown/powerkrabsetw) PowerKrabsEtw is a PowerShell interface for doing real-time ETW tracing.
+- [**82**Star][3y] [Py] [yehia-mamdouh/xssya-v-2.0](https://github.com/yehia-mamdouh/xssya-v-2.0)
+- [**82**Star][5y] [Py] [xypiie/webshell](https://github.com/xypiie/webshell) WebShell is a web-based ssh shell.
+- [**82**Star][4y] [C++] [wjp/idados](https://github.com/wjp/idados) Eric Fry's IDA/DOSBox debugger plugin
+- [**82**Star][3y] [Go] [whyrusleeping/zmsg](https://github.com/whyrusleeping/zmsg) A small program for sending messages via zcash encrypted memo fields
+- [**82**Star][3y] [Py] [wangyihang/ccupp](https://github.com/wangyihang/ccupp) 基于社会工程学的弱口令密码字典生成工具
+- [**82**Star][2y] [Kotlin] [viktordegtyarev/callreclib](https://github.com/viktordegtyarev/callreclib) Call Recorder fix for Android 7 and Android 6
+- [**82**Star][10m] [Shell] [trailofbits/ios-integrity-validator](https://github.com/trailofbits/ios-integrity-validator) Integrity validator for iOS devices
+- [**82**Star][5y] [Py] [techbliss/frida_for_ida_pro](https://github.com/techbliss/frida_for_ida_pro) plugin for ida pro thar uses the Frida api
+- [**82**Star][2m] [Py] [takuzoo3868/penta](https://github.com/takuzoo3868/penta) Open source all-in-one CLI tool to automate pentesting.
+- [**82**Star][2y] [Go] [snail007/autostart](https://github.com/snail007/autostart) autostart tools to set your application auto startup after desktop login,only for desktop version of linux , windows , mac.
+- [**82**Star][1y] [Py] [silascutler/lnkparse](https://github.com/silascutler/lnkparse) Windows Shortcut file (LNK) parser
+- [**82**Star][7y] [shjalayeri/sysret](https://github.com/shjalayeri/sysret) Windows Kernel Intel x64 SYSRET Vulnerability Exploit
+- [**82**Star][6y] [Java] [schierlm/javapayload](https://github.com/schierlm/javapayload) JavaPayload is a collection of pure Java payloads to be used for post-exploitation from pure Java exploits or from common misconfigurations (like not password protected Tomcat manager or debugger port).
+- [**82**Star][1y] [C] [rlarabee/exploits](https://github.com/rlarabee/exploits)
+- [**82**Star][3y] [Vim script] [rjohnsondev/vim-compiler-go](https://github.com/rjohnsondev/vim-compiler-go) Vim compiler plugin for Go (golang)
+- [**82**Star][7m] [C] [ret2p4nda/kernel-pwn](https://github.com/ret2p4nda/kernel-pwn)
+- [**82**Star][4m] [Py] [ray-cp/pwn_debug](https://github.com/ray-cp/pwn_debug) Aim to help building exploitation of CTFs pwn game quickly
+- [**82**Star][2y] [Go] [random-robbie/aws-scanner](https://github.com/random-robbie/aws-scanner) Scans a list of websites for Cloudfront or S3 Buckets
+- [**82**Star][1y] [Kotlin] [pvasa/easycrypt](https://github.com/pvasa/easycrypt) Android cryptography library with SecureRandom patches.
+- [**82**Star][10m] [Py] [plizonczyk/noiseprotocol](https://github.com/plizonczyk/noiseprotocol) Noise Protocol Framework - Python 3 implementation
+- [**82**Star][4y] [Py] [pinperepette/geotweet_gui](https://github.com/pinperepette/geotweet_gui) Social engineering tool for human hacking
+- [**82**Star][10m] [C++] [pelock/pelock-software-protection-and-licensing-sdk](https://github.com/pelock/pelock-software-protection-and-licensing-sdk) Software copy protection against cracking & reverse engineering with anti-cracking & anti-debugging techniques. Software license key system with time trial options.
+- [**82**Star][2y] [C++] [paulsapps/msgi](https://github.com/paulsapps/msgi) Metal Gear Solid Integral PC reversing, efforts moved to
+- [**82**Star][19d] [Ruby] [openzipkin/zipkin-ruby](https://github.com/openzipkin/zipkin-ruby) zipkin-tracer ruby gem
+- [**82**Star][4d] [C] [nukem9/swissarmyknife](https://github.com/nukem9/swissarmyknife) x64dbg utility for linker map files, diff files, PEiD/IDA signatures, and code signature generation
+- [**82**Star][2y] [C++] [nemerle/dcc](https://github.com/nemerle/dcc) This is a heavily updated version of the old DOS executable decompiler DCC
+- [**82**Star][6y] [Py] [mwielgoszewski/burp-protobuf-decoder](https://github.com/mwielgoszewski/burp-protobuf-decoder) A simple Google Protobuf Decoder for Burp
+- [**82**Star][5y] [Py] [maldroid/maldrolyzer](https://github.com/maldroid/maldrolyzer) Simple framework to extract "actionable" data from Android malware (C&Cs, phone numbers etc.)
+- [**82**Star][2y] [Shell] [m4sc3r4n0/astroid](https://github.com/m4sc3r4n0/astroid) ASTROID v 1.2 bypass most A.V softwares
+- [**82**Star][1y] [Py] [m4ll0k/wpsploit](https://github.com/m4ll0k/wpsploit) Wordpress主题/插件代码扫描
+- [**82**Star][2y] [Py] [lz1y/cve-2017-8759](https://github.com/lz1y/cve-2017-8759) CVE-2017-8759
+- [**82**Star][3y] [Py] [llsourcell/antivirus_demo](https://github.com/llsourcell/antivirus_demo) Antivirus Demo for Fresh Machine Learning #7
+- [**82**Star][2y] [Py] [lcatro/browser_vuln_check](https://github.com/lcatro/browser_vuln_check) 利用已知的浏览器漏洞PoC 来快速检测Webview 和浏览器环境是否存在安全漏洞,只需要访问run.html 即可获取所有扫描结果,适用场景包含:APP 发布之前的内部安全测试,第三方Webview 漏洞检测等
+- [**82**Star][5y] [Py] [krmaxwell/tinfoleak](https://github.com/krmaxwell/tinfoleak) Get detailed information about a Twitter user activity
+- [**82**Star][6y] [k33nteam/ie9-ie11-vulnerability-advanced-exploitation](https://github.com/k33nteam/ie9-ie11-vulnerability-advanced-exploitation) Public slides and demo code of bypassing security protection in the latest Windows Internet Explorer.
+- [**82**Star][1y] [Py] [juniorn1003/faitagram](https://github.com/juniorn1003/faitagram) Welp, This failed. Go find another one.
+- [**82**Star][4y] [Py] [jinhang/12306_captcha](https://github.com/jinhang/12306_captcha) CNN对12306、sina、baidu的验证码破解。
+- [**82**Star][4m] [jeanlouisferey/aws-securitygroup-grapher](https://github.com/jeanlouisferey/aws-securitygroup-grapher) This ansible role gets information from an AWS VPC and generate a graphical representation of security groups
+- [**82**Star][4m] [Py] [indicodatasolutions/enso](https://github.com/indicodatasolutions/enso) Enso: An Open Source Library for Benchmarking Embeddings + Transfer Learning Methods
+- [**82**Star][2y] [Py] [idanr1986/cuckoodroid-2.0](https://github.com/idanr1986/cuckoodroid-2.0) Automated Android Malware Analysis with Cuckoo Sandbox.
+- [**82**Star][5y] [C++] [hackedteam/scout-win](https://github.com/hackedteam/scout-win) Scout backdoor for Windows
+- [**82**Star][3m] [Java] [graxcode/cafebabe](https://github.com/graxcode/cafebabe) Easy-to-use java bytecode editor - successor of JByteMod!
+- [**82**Star][18d] [Go] [grantseltzer/karn](https://github.com/grantseltzer/karn) Simplifying Seccomp enforcement in containerized or non-containerized apps
+- [**82**Star][1y] [C] [gossithedog/zeroday](https://github.com/gossithedog/zeroday)
+- [**82**Star][1y] [HTML] [google/rekall-profiles](https://github.com/google/rekall-profiles) Public Profile Repository for Rekall Memory Forensic.
+- [**82**Star][9m] [Go] [glen-mac/gogetbucket](https://github.com/glen-mac/gogetbucket) A penetration testing tool to enumerate and analyse Amazon S3 Buckets owned by a domain.
+- [**82**Star][30d] [Shell] [firecracker-microvm/firecracker-demo](https://github.com/firecracker-microvm/firecracker-demo) A demo running 4000 Firecracker microVMs.
+- [**82**Star][2y] [exp-sky/asiasecwest-2018-chakra-vulnerability-and-exploit-bypass-all-system-mitigation](https://github.com/exp-sky/asiasecwest-2018-chakra-vulnerability-and-exploit-bypass-all-system-mitigation) Chakra vulnerability and exploit bypass all system mitigation
+- [**82**Star][12m] [Py] [erforschr/bruteforce-http-auth](https://github.com/erforschr/bruteforce-http-auth) Bruteforce HTTP Authentication
+- [**82**Star][4y] [elephantos/elephant](https://github.com/elephantos/elephant) 操作系统真象还原
+- [**82**Star][4y] [C] [eklitzke/ptrace-call-userspace](https://github.com/eklitzke/ptrace-call-userspace) Example of how to use the ptrace(2) system call to call a userspace method.
+- [**82**Star][11m] [Py] [ecx86/tcpbin](https://github.com/ecx86/tcpbin) Very crude and poorly written HTTP(s) and SMTP bin
+- [**82**Star][7y] [Ruby] [dirtyfilthy/metassh](https://github.com/dirtyfilthy/metassh) ssh session type for metasploit
+- [**82**Star][2y] [Py] [crackmes/crackmes](https://github.com/crackmes/crackmes) Open and censorship resistant crackmes repository
+- [**82**Star][6d] [Java] [col-e/jremapper](https://github.com/col-e/jremapper) Remapping tool for compiled java programs.
+- [**82**Star][1y] [ckjbug/kali-linux-learning](https://github.com/ckjbug/kali-linux-learning)
+- [**82**Star][8m] [Py] [ciscodevnet/virlutils](https://github.com/ciscodevnet/virlutils)
+- [**82**Star][6y] [Py] [chrisjohnriley/random_code](https://github.com/chrisjohnriley/random_code) Random Code, POC Scripts and other things (Your Mileage May Vary)
+- [**82**Star][5y] [C] [chokepoint/crypthook](https://github.com/chokepoint/crypthook) TCP/UDP symmetric encryption tunnel wrapper
+- [**82**Star][2y] [Java] [calaylin/bda](https://github.com/calaylin/bda) Programmer De-anonymization from Binary Executables
+- [**82**Star][6m] [Py] [brutemap-dev/brutemap](https://github.com/brutemap-dev/brutemap) Let's find someone's account
+- [**82**Star][3y] [C#] [basic4/widucky](https://github.com/basic4/widucky) WiFi Enabled USB Rubber Ducky
+- [**82**Star][1y] [C#] [baibaomen/baibaomen.httphijacker](https://github.com/baibaomen/baibaomen.httphijacker) 一个通过网络包嗅探攻击HTTP协议,从而对其它电脑上用户的网站登录会话进行劫持的演示程序。教程参见链接:
+- [**82**Star][1y] [JS] [avian2/noscript](https://github.com/avian2/noscript) A Firefox extension for whitelist driven safe JavaScript execution.
+- [**82**Star][4m] [Py] [audreyr/binaryornot](https://github.com/audreyr/binaryornot) Ultra-lightweight pure Python package to check if a file is binary or text.
+- [**82**Star][5m] [Ruby] [argos83/ritm](https://github.com/argos83/ritm) Ruby In The Middle (HTTP/HTTPS interception proxy)
+- [**82**Star][2y] [Py] [anssi-fr/tabi](https://github.com/anssi-fr/tabi) BGP Hijack Detection
+- [**82**Star][1y] [java] [anbai-inc/cobaltstrike_hanization](https://github.com/anbai-inc/cobaltstrike_hanization) CobaltStrike 2.5中文汉化版
+- [**82**Star][8d] [Go] [alphasoc/nfr](https://github.com/alphasoc/nfr) A lightweight tool to score network traffic and flag anomalies
+- [**82**Star][4y] [C] [abdsec/cve-2016-0801](https://github.com/abdsec/cve-2016-0801)
+- [**82**Star][10m] [Java] [7ym0n/security](https://github.com/7ym0n/security) Happy Hacker
+- [**82**Star][8d] [PHP] [10up/restricted-site-access](https://github.com/10up/restricted-site-access) Limit access to visitors who are logged in or allowed by IP addresses. Includes many options for handling blocked visitors.
+- [**82**Star][5m] [Py] [0xffff0800/muddyc3v1.0.1-](https://github.com/0xffff0800/muddyc3v1.0.1-) This is the MuddyWater APT C3 v1.0.1 Source
+- [**82**Star][1m] [C] [0xcpu/winaltsyscallhandler](https://github.com/0xcpu/winaltsyscallhandler) Some research on AltSystemCallHandlers functionality in Windows 10 20H1 18999
+- [**81**Star][2y] [JS] [chxj1992/shadowsocks-manager-docker](https://github.com/chxj1992/shadowsocks-manager-docker) 这是一个基于 shadowsocks-manager webui 插件开发的shadowsocks账号售卖网站的Docker镜像
+- [**81**Star][4m] [C] [sensepost/wpa_sycophant](https://github.com/sensepost/wpa_sycophant) Evil client portion of EAP relay attack
+- [**81**Star][1y] [Java] [googlecreativelab/tunnelvision](https://github.com/googlecreativelab/tunnelvision) Distort your surroundings through a collection of transformative filters
+- [**81**Star][3y] [Shell] [infoslack/docker-dvwa](https://github.com/infoslack/docker-dvwa) Docker image for DVWA(Damn Vulnerable Web Application)
+- [**81**Star][7m] [ObjC] [hikariobfuscator/hanabi](https://github.com/hikariobfuscator/hanabi) Apple Clang Loader
+- [**81**Star][11d] [Go] [asche910/flynet](https://github.com/asche910/flynet) A powerful TCP/UDP tool, which support socks5 proxy by tcp and udp, http proxy and NAT traversal. This tool can help you bypass gfw easily
+- [**81**Star][2y] [Shell] [offxec/pavelow](https://github.com/OffXec/PAVELOW) PAVELOW Exploit Toolbox is a BASH script that corresponds with your KALI distro to better help your vulnerability hunting and exploiting proccess with a few other goodies added to aid your fight.
+- [**81**Star][3m] [Java] [nats-io/stan.java](https://github.com/nats-io/stan.java) NATS Streaming Java Client
+- [**81**Star][4y] [Py] [android-dtf/dtf](https://github.com/android-dtf/dtf) Android Device Testing Framework ("dtf")
+- [**81**Star][1y] [Py] [ctfhacker/ctf-writeups](https://github.com/ctfhacker/ctf-writeups)
+- [**81**Star][4y] [Py] [zcutlip/exploit-poc](https://github.com/zcutlip/exploit-poc) Proof-of-Concept code for exploits
+- [**81**Star][2y] [Py] [xyzz/rop-rpc](https://github.com/xyzz/rop-rpc)
+- [**81**Star][3y] [xoreaxeaxeax/vimmmex](https://github.com/xoreaxeaxeax/vimmmex) The vim execution engine
+- [**81**Star][3y] [HTML] [vah13/avdetection](https://github.com/vah13/avdetection) A simple way for detection the remote user's antivirus
+- [**81**Star][1y] [Py] [undeadsec/idisagree](https://github.com/undeadsec/idisagree) Control remote computers using discord bot and python 3.
+- [**81**Star][4y] [C] [tyilo/asm_repl](https://github.com/tyilo/asm_repl) A REPL for assembly
+- [**81**Star][6y] [CSS] [talater/chrome-is-listening](https://github.com/talater/chrome-is-listening) Chrome Speech Recognition exploit demo
+- [**81**Star][7y] [C] [strobejb/winspy](https://github.com/strobejb/winspy) WinSpy++
+- [**81**Star][8y] [spiderlabs/msfrpc](https://github.com/spiderlabs/msfrpc) Perl/Python modules for interfacing with Metasploit MSGRPC
+- [**81**Star][9m] [C#] [skelsec/pypykatz_agent_dn](https://github.com/skelsec/pypykatz_agent_dn) Pypykatz agent implemented in .NET
+- [**81**Star][1y] [Py] [silascutler/malpipe](https://github.com/silascutler/malpipe) Malware/IOC ingestion and processing engine
+- [**81**Star][2y] [Ruby] [siberas/watobo](https://github.com/siberas/watobo) watobo:自动化 web app 安全测试
+- [**81**Star][4y] [Py] [shengqi158/svn_git_scanner](https://github.com/shengqi158/svn_git_scanner) 用于扫描git,svn泄露
+- [**81**Star][4m] [JS] [securestate/king-phisher-templates](https://github.com/securestate/king-phisher-templates) Templates for the King Phisher open source phishing campaign toolkit.
+- [**81**Star][10m] [sderosiaux/guidelines-to-create-a-strong-website](https://github.com/sderosiaux/guidelines-to-create-a-strong-website) A list of all things to consider when making a website or webapp of quality.
+- [**81**Star][5m] [Py] [scwuaptx/lazyfragmentationheap](https://github.com/scwuaptx/lazyfragmentationheap) WCTF 2019 challenge
+- [**81**Star][2m] [Shell] [rhaidiz/dribble](https://github.com/rhaidiz/dribble) A small project for stealing Wi-Fi passwords via browser's cache poisoning
+- [**81**Star][3y] [Py] [ratty3697/hackspy-trojan-exploit](https://github.com/ratty3697/hackspy-trojan-exploit) This tool creates almost undetectabe trojan virus to exploit windows machine.
+- [**81**Star][3y] [JS] [rapid7/jsobfu](https://github.com/rapid7/jsobfu) Obfuscate JavaScript (beyond repair) with Ruby
+- [**81**Star][1y] [Py] [r3dxpl0it/apache-superset-remote-code-execution-poc-cve-2018-8021](https://github.com/r3dxpl0it/apache-superset-remote-code-execution-poc-cve-2018-8021) CVE-2018-8021 Proof-Of-Concept and Exploit
+- [**81**Star][1y] [Py] [prezi/reddalert](https://github.com/prezi/reddalert) AWS risky security change detector based on EDDA.
+- [**81**Star][19d] [ObjC] [poomsmart/idaobjctypes](https://github.com/poomsmart/idaobjctypes) A collection of types & functions definitions useful for Objective-C binaries analysis.
+- [**81**Star][5y] [C] [nukem9/virtualdbghide](https://github.com/nukem9/virtualdbghide) Windows kernel mode driver to prevent detection of debuggers.
+- [**81**Star][7m] [C] [nowsecure/dirtycow](https://github.com/nowsecure/dirtycow) radare2 IO plugin for Linux and Android. Modifies files owned by other users via dirtycow Copy-On-Write cache vulnerability
+- [**81**Star][4m] [TS] [nowsecure/airspy](https://github.com/nowsecure/airspy) AirSpy - Frida-based tool for exploring and tracking the evolution of Apple's AirDrop protocol implementation on i/macOS, from the server's perspective. Released during BH USA 2019 Training
+- [**81**Star][4m] [Py] [nccgroup/requests-racer](https://github.com/nccgroup/requests-racer) Small Python library that makes it easy to exploit race conditions in web apps with Requests.
+- [**81**Star][8m] [Py] [nccgroup/argumentinjectionhammer](https://github.com/nccgroup/argumentinjectionhammer) A Burp Extension designed to identify argument injection vulnerabilities.
+- [**81**Star][1m] [PHP] [nao-sec/ektotal](https://github.com/nao-sec/ektotal) 分析Drive-by Download攻击的集成工具
+- [**81**Star][2y] [Go] [mtojek/aws-lambda-go-proxy](https://github.com/mtojek/aws-lambda-go-proxy)
+- [**81**Star][2m] [Py] [mattcurrie/mgbdis](https://github.com/mattcurrie/mgbdis) Game Boy ROM disassembler with RGBDS compatible output
+- [**81**Star][2y] [matt-knight/research](https://github.com/matt-knight/research) Matt's security publications and related materials
+- [**81**Star][3y] [Py] [lukasikic/hacoder.py](https://github.com/lukasikic/hacoder.py) FUD Backdoor Generator / Remote Administration Tool
+- [**81**Star][11m] [Java] [lufeirider/project](https://github.com/lufeirider/project)
+- [**81**Star][7m] [Py] [leoid/matchandreplace](https://github.com/leoid/matchandreplace) Match and Replace script used to automatically generate JSON option file to BurpSuite
+- [**81**Star][7m] [MATLAB] [ktekeli/audio-steganography-algorithms](https://github.com/ktekeli/audio-steganography-algorithms) A Library of Audio Steganography & Watermarking Algorithms
+- [**81**Star][6d] [TeX] [kramse/security-courses](https://github.com/kramse/security-courses) various courses, presentation etc.
+- [**81**Star][3d] [PS] [jborean93/packer-windoze](https://github.com/jborean93/packer-windoze) Packer templates to create Windows vagrant box images
+- [**81**Star][1m] [Py] [jas502n/cve-2019-3396](https://github.com/jas502n/cve-2019-3396) Confluence 未授权 RCE (CVE-2019-3396) 漏洞
+- [**81**Star][2y] [C] [hvqzao/foolavc](https://github.com/hvqzao/foolavc) foolav successor - loads DLL, executable or shellcode into memory and runs it effectively bypassing AV
+- [**81**Star][3m] [Py] [huntergregal/png-idat-payload-generator](https://github.com/huntergregal/png-idat-payload-generator) Generate a PNG with a payload embedded in the IDAT chunk (Based off of previous concepts and code -- credit in README)
+- [**81**Star][1m] [HTML] [freedom-wy/js-reverse](https://github.com/freedom-wy/js-reverse) JS逆向研究
+- [**81**Star][9m] [Py] [fox-it/mkyara](https://github.com/fox-it/mkyara) Generating YARA rules based on binary code
+- [**81**Star][2m] [Py] [fgsect/scat](https://github.com/fgsect/scat) 通过USB解析Qualcomm和Samsung基带的诊断消息,并生成包含蜂窝控制平面消息的GSMTAP数据包流
+- [**81**Star][3m] [Shell] [fademind/hosts.extras](https://github.com/fademind/hosts.extras) Extra rules for
+- [**81**Star][3y] [Py] [evilsocket/coffee](https://github.com/evilsocket/coffee) Smarter Coffee terminal client.
+- [**81**Star][1y] [Py] [endgameinc/youarespecial](https://github.com/endgameinc/youarespecial)
+- [**81**Star][2m] [PS] [ecstatic-nobel/posint](https://github.com/ecstatic-nobel/posint) Gather Open-Source Intelligence using PowerShell.
+- [**81**Star][2y] [Lua] [duoergun0729/4book](https://github.com/duoergun0729/4book) 《企业安全建设入门:基于开源软件打造企业网络安全》
+- [**81**Star][3y] [C] [derrekr/android_security](https://github.com/derrekr/android_security) Public Android Vulnerability Information (CVE PoCs etc)
+- [**81**Star][4y] [Roff] [ddos-defense/bohatei](https://github.com/ddos-defense/bohatei) Bohatei is a first of its kind platform that enables flexible and elastic DDoS defense using SDN and NFV.
+- [**81**Star][4y] [C#] [david-risney/csp-fiddler-extension](https://github.com/david-risney/csp-fiddler-extension) Content Security Policy rule collector extension for Fiddler
+- [**81**Star][3y] [Py] [coffeehb/ocift](https://github.com/coffeehb/ocift) 一个半自动化命令注入漏洞Fuzz工具(One Semi-automation command injection vulnerability Fuzz tool)
+- [**81**Star][6y] [C] [chokepoint/beleth](https://github.com/chokepoint/beleth) Multi-threaded SSH Password Auditor
+- [**81**Star][7d] [JS] [chichou/wiggle](https://github.com/chichou/wiggle) The concepting self hosted executable binary search engine
+- [**81**Star][1y] [HTML] [bruceye777/cronmon](https://github.com/bruceye777/cronmon) 定时任务执行状态监控
+- [**81**Star][3m] [blockchainlabsnz/awesome-solidity](https://github.com/blockchainlabsnz/awesome-solidity) A curated list of awesome Solidity resources
+- [**81**Star][1y] [asuri-team/pwn-sandbox](https://github.com/asuri-team/pwn-sandbox) A sandbox to protect your pwn challenges being pwned in CTF AWD.
+- [**81**Star][11m] [Scala] [arguslab/argus-saf](https://github.com/arguslab/argus-saf) Argus static analysis framework
+- [**81**Star][7m] [C] [andreybazhan/symstore](https://github.com/andreybazhan/symstore) The history of Windows Internals via symbols.
+- [**81**Star][14d] [Py] [abarker/pdfcropmargins](https://github.com/abarker/pdfcropmargins) pdfCropMargins -- a program to crop the margins of PDF files
+- [**80**Star][10m] [C] [mr-un1k0d3r/maliciousdllgenerator](https://github.com/mr-un1k0d3r/maliciousdllgenerator) DLL Generator for side loading attack
+- [**80**Star][1y] [JS] [toyodadoubi/ssrstatus](https://github.com/toyodadoubi/ssrstatus) Shadowsocks/ShadowsocksR 账号在线监控
+- [**80**Star][7m] [JS] [thekingofduck/logontracer](https://github.com/thekingofduck/logontracer) Windows系统安全登录日志分析工具logonTracer汉化修正版
+- [**80**Star][7m] [PHP] [shadowsocks/shadow-shop](https://github.com/shadowsocks/shadow-shop) Building highly customizable e-commerce websites selling shadowsocks services, using Wordpress and WooCommerce
+- [**80**Star][2d] [PHP] [automattic/vip-coding-standards](https://github.com/automattic/vip-coding-standards) PHP_CodeSniffer ruleset to enforce WordPress.com VIP and VIP Go coding standards
+- [**80**Star][6d] [Rust] [warner/magic-wormhole.rs](https://github.com/warner/magic-wormhole.rs) NOT FUNCTIONAL YET. Slowly porting magic-wormhole to Rust. See wiki for game plan.
+- [**80**Star][3y] [bastilleresearch/keysniffer](https://github.com/bastilleresearch/keysniffer) KeySniffer device discovery tools and public advisories
+- [**80**Star][11m] [Go] [ouqiang/mars](https://github.com/ouqiang/mars) HTTP(S)代理, 用于抓包调试
+- [**80**Star][6d] [C] [trailofbits/mishegos](https://github.com/trailofbits/mishegos) A differential fuzzer for x86 decoders
+- [**80**Star][2y] [JS] [vmikhav/antipacman](https://github.com/vmikhav/AntiPacMan) HTML5 Pac-Man game with gesture recognition
+- [**80**Star][4y] [Py] [helpsystems/wiwo](https://github.com/helpsystems/wiwo) wiwo is a distributed 802.11 monitoring and injecting system that was designed to be simple and scalable, in which all workers (nodes) can be managed by a Python framework.
+- [**80**Star][2y] [Py] [zhkl0228/androidattacher](https://github.com/zhkl0228/androidattacher) IDA debugging plugin for android armv7 so
+- [**80**Star][3y] [Py] [z00nx/reversemap](https://github.com/z00nx/reversemap) Analyse SQL injection attempts in web server logs
+- [**80**Star][29d] [JS] [yosuke-furukawa/httpstat](https://github.com/yosuke-furukawa/httpstat) httpstat node implementation
+- [**80**Star][3y] [C++] [wpo-foundation/win-shaper](https://github.com/wpo-foundation/win-shaper) Windows traffic-shaping packet filter
+- [**80**Star][6m] [Rust] [trailofbits/molasses](https://github.com/trailofbits/molasses) A Rust implementation of the Message Layer Security group messaging protocol
+- [**80**Star][1y] [Go] [tleyden/keynuker](https://github.com/tleyden/keynuker)
+- [**80**Star][3m] [C++] [thewhiteh4t/flashsploit](https://github.com/thewhiteh4t/flashsploit) Exploitation Framework for ATtiny85 Based HID Attacks
+- [**80**Star][4m] [Py] [theevilbit/kex](https://github.com/theevilbit/kex) python kernel exploit library
+- [**80**Star][3m] [Py] [takahiroharuyama/ida_haru](https://github.com/takahiroharuyama/ida_haru) scripts for IDA Pro
+ - [bindiff](https://github.com/takahiroharuyama/ida_haru/blob/master/bindiff/README.org) BinDiff wrapper script for multiple binary diffing
+ - [eset_crackme](https://github.com/takahiroharuyama/ida_haru/blob/master/eset_crackme/README.org) IDA Pro loader/processor modules for ESET CrackMe driver VM
+ - [fn_fuzzy](https://github.com/takahiroharuyama/ida_haru/blob/master/fn_fuzzy/README.org) IDAPython script for fast multiple binary diffing triage
+ - [stackstring_static](https://github.com/takahiroharuyama/ida_haru/blob/master/stackstring_static/README.org) IDAPython script statically-recovering strings constructed in stack
+- [**80**Star][2m] [C] [stef/libsphinx](https://github.com/stef/libsphinx) libsphinx: 用于密码管理的库
+- [**80**Star][5m] [ObjC] [smilezxlee/zxhookdetection](https://github.com/smilezxlee/zxhookdetection) 【iOS应用安全】hook及越狱的基本防护与检测
+- [**80**Star][2y] [Jupyter Notebook] [sebdraven/hack_lu_2017](https://github.com/sebdraven/hack_lu_2017) Python and Machine Learning Workshop at Hack.lu 2017
+- [**80**Star][2y] [Py] [se55i0n/portscanner](https://github.com/se55i0n/portscanner) 目标tcp端口快速扫描、banner识别、cdn检测
+- [**80**Star][3m] [sbousseaden/panache_sysmon](https://github.com/sbousseaden/panache_sysmon) A Sysmon Config for APTs Techniques Detection
+- [**80**Star][2m] [Py] [sashs/filebytes](https://github.com/sashs/filebytes) Library to read and edit files in the following formats: Executable and Linking Format (ELF), Portable Executable (PE), MachO and OAT (Android Runtime)
+- [**80**Star][2y] [Py] [rsc-dev/pbd](https://github.com/rsc-dev/pbd) Pbd is a Python module to disassemble serialized protocol buffers descriptors (
+- [**80**Star][4y] [C] [riscure/rhme-2015](https://github.com/riscure/rhme-2015) RHme+ 2015 challenge
+- [**80**Star][3y] [C++] [radiowar/firegoose](https://github.com/radiowar/firegoose) 中国烧鹅 FireGoose Just like USB Rubber Ducky
+- [**80**Star][1y] [Py] [pyn3rd/cve-2018-2893](https://github.com/pyn3rd/cve-2018-2893) CVE-2018-2893-PoC
+- [**80**Star][1y] [Py] [ptresearch/mmdetect](https://github.com/ptresearch/mmdetect) Intel ME Manufacturing Mode Detection Tools
+- [**80**Star][3y] [Py] [programa-stic/security-advisories](https://github.com/programa-stic/security-advisories) A database of published security advisories reported by the Programa STIC Team at Fundación Sadosky
+- [**80**Star][3m] [CSS] [pielco11/doge](https://github.com/pielco11/doge) Darknet Osint Graph Explorer
+- [**80**Star][2y] [C] [oranav/i9300_emmc_toolbox](https://github.com/oranav/i9300_emmc_toolbox) Samsung Galaxy S3 GT-I9300 eMMC toolbox
+- [**80**Star][4m] [Shell] [nullarray/netset](https://github.com/nullarray/netset) Operational Security utility and automator.
+- [**80**Star][3m] [Py] [nlitsme/pyidbutil](https://github.com/nlitsme/pyidbutil) extracting information from IDA databases
+- [**80**Star][2y] [PHP] [nixawk/fuzzdb](https://github.com/nixawk/fuzzdb) Web Fuzzing Discovery and Attack Pattern Database
+- [**80**Star][10m] [Go] [mkishere/sshsyrup](https://github.com/mkishere/sshsyrup) A low-to-medium interaction SSH Honeypot with features to capture terminal activity and upload to asciinema.org
+- [**80**Star][3m] [Py] [menkrep1337/xsscon](https://github.com/menkrep1337/xsscon) Simple XSS Scanner tool
+- [**80**Star][5m] [Py] [manulqwerty/evil-winrar-gen](https://github.com/manulqwerty/evil-winrar-gen) Generator of malicious Ace files for WinRAR < 5.70 beta 1
+- [**80**Star][1y] [Go] [lzjluzijie/websocks](https://github.com/lzjluzijie/websocks) A secure proxy based on WebSocket. 一个基于 WebSocket 的代理工具
+- [**80**Star][3y] [C] [lflare/picoctf_2017_writeup](https://github.com/lflare/picoctf_2017_writeup) PicoCTF 2017 Writeup
+- [**80**Star][2y] [C++] [legitbs/quals-2017](https://github.com/legitbs/quals-2017)
+- [**80**Star][1y] [Py] [lcatro/cve-2017-7269-echo-poc](https://github.com/lcatro/cve-2017-7269-echo-poc) CVE-2017-7269 回显PoC ,用于远程漏洞检测..
+- [**80**Star][2m] [Go] [koenrh/s3enum](https://github.com/koenrh/s3enum) Fast Amazon S3 bucket enumeration tool for pentesters.
+- [**80**Star][2y] [C] [klsfct/getshell](https://github.com/klsfct/getshell) 各大平台提权工具
+- [**80**Star][12m] [Py] [keybase/python-triplesec](https://github.com/keybase/python-triplesec) A Python port of the triplesec library.
+- [**80**Star][3y] [Py] [januzellij/hopperscripts](https://github.com/januzellij/hopperscripts) Collection of scripts I use in the Hopper disassembler
+- [**80**Star][4y] [idapython/bin](https://github.com/idapython/bin) IDAPython binaries
+- [**80**Star][2m] [JS] [garethflowers/tor-browser-portable](https://github.com/garethflowers/tor-browser-portable) Portable version of the Tor Browser, for Windows
+- [**80**Star][4y] [C++] [fastvpseestiou/fastnetmon](https://github.com/fastvpseestiou/fastnetmon) This is old freezed version! Please use
+- [**80**Star][4y] [fabiobaroni/awesome-chinese-infosec-websites](https://github.com/fabiobaroni/awesome-chinese-infosec-websites) A curated list of Chinese websites and personal blogs about ethical hacking and pentesting
+- [**80**Star][3y] [C] [evil-e/sdb-explorer](https://github.com/evil-e/sdb-explorer) Tool to view and create Microsoft shim database files (SDB).
+- [**80**Star][3m] [Py] [escapingbug/ancypwn](https://github.com/escapingbug/ancypwn) Script to setup pwn environment for CTF with Docker
+- [**80**Star][3y] [Py] [davidkorczynski/repeconstruct](https://github.com/davidkorczynski/repeconstruct) automatically unpacking binaries and rebuild the binaries in a manner well-suited for further analysis, specially focused on further manual analysis in IDA pro.
+- [**80**Star][2y] [Py] [david942j/defcon-2017-tools](https://github.com/david942j/defcon-2017-tools) DEFCON CTF 2017 Stuff of Shit by HITCON
+- [**80**Star][2m] [C] [cyberdefenseinstitute/cdir](https://github.com/cyberdefenseinstitute/cdir) CDIR (Cyber Defense Institute Incident Response) Collector - live collection tool based on oss tool/library
+- [**80**Star][3y] [C++] [cbayet/poolsprayer](https://github.com/cbayet/poolsprayer) Simple library to spray the Windows Kernel Pool
+- [**80**Star][1y] [Py] [brandonasuncion/reverse-engineering-bluetooth-protocols](https://github.com/brandonasuncion/reverse-engineering-bluetooth-protocols) Intercepting Bluetooth device communication and simulating packet responses of an iPhone from a Raspberry Pi 3
+- [**80**Star][10m] [JS] [bkth/attacking-edge-through-the-javascript-compiler](https://github.com/bkth/attacking-edge-through-the-javascript-compiler) Attacking-Edge-Through-the-JavaScript-Compiler
+- [**80**Star][1y] [Py] [ax330d/functions-plus](https://github.com/ax330d/functions-plus) IDA Pro plugin to show functions in a tree view
+- [**80**Star][2y] [Go] [asciimoo/filtron](https://github.com/asciimoo/filtron) filtron:反向HTTP代码
+- [**80**Star][3y] [Py] [alyakhtar/katastrophe](https://github.com/alyakhtar/katastrophe) Command Line Tool to download torrents
+- [**80**Star][1y] [C#] [advancedhacker101/c-sharp-r.a.t-server](https://github.com/advancedhacker101/c-sharp-r.a.t-server) This is a remote administration tool built with c#
+- [**80**Star][2y] [Shell] [adi1090x/hackapk](https://github.com/adi1090x/hackapk) An Advanced Tool For Complete Apk-Modding In Termux ...
+- [**79**Star][3y] [Go] [ring04h/s5.go](https://github.com/ring04h/s5.go) Socks5 proxy server by golang
+- [**79**Star][1y] [Shell] [iaik/ios-analysis](https://github.com/iaik/ios-analysis) Automated Binary Analysis on iOS
+- [**79**Star][5y] [Py] [bishopfox/anti-anti-automation](https://github.com/bishopfox/anti-anti-automation) Anti-Anti-Automation Framework
+- [**79**Star][3y] [Py] [lanjelot/albatar](https://github.com/lanjelot/albatar) Albatar is a SQLi exploitation framework in Python
+- [**79**Star][1m] [Py] [momika233/clamav_0day_exploit](https://github.com/momika233/clamav_0day_exploit) ClamAV_0Day_exploit
+- [**79**Star][2m] [Rust] [mozilla/authenticator-rs](https://github.com/mozilla/authenticator-rs) Rust library to interact with Security Keys, used by Firefox
+- [**79**Star][2y] [C] [yifanlu/uvloader](https://github.com/yifanlu/uvloader) Userland Vita Loader for loading unsigned executables on your Vita
+- [**79**Star][3y] [yeyintminthuhtut/awesome-study-resources-for-kernel-hacking](https://github.com/yeyintminthuhtut/awesome-study-resources-for-kernel-hacking) Kernel Hacking study materials collection
+- [**79**Star][3y] [Py] [xyntax/bingc](https://github.com/xyntax/bingc) 基于Bing搜索引擎的C段/旁站查询,多线程,支持API
+- [**79**Star][3y] [PS] [winscripting/uac-bypass](https://github.com/winscripting/uac-bypass)
+- [**79**Star][2y] [Py] [viralmaniar/in-spectre-meltdown](https://github.com/viralmaniar/in-spectre-meltdown) This tool allows to check speculative execution side-channel attacks that affect many modern processors and operating systems designs. CVE-2017-5754 (Meltdown) and CVE-2017-5715 (Spectre) allows unprivileged processes to steal secrets from privileged processes. These attacks present 3 different ways of attacking data protection measures on CPUs …
+- [**79**Star][3y] [C++] [torps/torps](https://github.com/torps/torps) The Tor Path Simulator
+- [**79**Star][3m] [Go] [tillson/git-hound](https://github.com/tillson/git-hound) GitHound pinpoints exposed API keys on GitHub using pattern matching, commit history searching, and a unique result scoring system. A batch-catching, pattern-matching, patch-attacking secret snatcher.
+- [**79**Star][1y] [PS] [thom-s/docx-embeddedhtml-injection](https://github.com/thom-s/docx-embeddedhtml-injection) Word 2016 vulnerability allows injecting HTML/JS code into a docx file's embeddedHTML="" tags.
+- [**79**Star][4m] [Assembly] [thecodeartist/elf-parser](https://github.com/thecodeartist/elf-parser) Identifying/Extracting various sections of an ELF file
+- [**79**Star][5y] [C++] [tandasat/findpg](https://github.com/tandasat/findpg) Windbg extension to find PatchGuard pages
+- [**79**Star][9m] [Go] [subfinder/goaltdns](https://github.com/subfinder/goaltdns) A permutation generation tool written in golang
+- [**79**Star][3y] [C] [smealum/udsploit](https://github.com/smealum/udsploit) UDS exploit + kernel hooks for 11.3
+- [**79**Star][3y] [Py] [sjhilt/gaspot](https://github.com/sjhilt/gaspot) GasPot Released at Blackhat 2015
+- [**79**Star][1y] [Py] [shendo/websnort](https://github.com/shendo/websnort) Web service for scanning pcaps with snort
+- [**79**Star][22d] [Go] [schollz/find3-cli-scanner](https://github.com/schollz/find3-cli-scanner) The command-line scanner that supports Bluetooth and WiFi
+- [**79**Star][1y] [Py] [sawzeeyy/sanitiz3r](https://github.com/sawzeeyy/sanitiz3r) A python script that filters, checks the validity, generates clickable link(s) of subdomain(s), and reports their status
+- [**79**Star][10m] [Py] [purduepaml/trojannn](https://github.com/purduepaml/trojannn) Trojan Attack on Neural Network
+- [**79**Star][6m] [PS] [powershell/psdscresources](https://github.com/powershell/psdscresources)
+- [**79**Star][7m] [PHP] [ostark/upper](https://github.com/ostark/upper) Integrates Edge Caches like Fastly, KeyCDN, Cloudflare and Varnish with Craft.
+- [**79**Star][4m] [Batchfile] [op7ic/edr-testing-script](https://github.com/op7ic/edr-testing-script) Test the accuracy of Endpoint Detection and Response (EDR) software with simple script which executes various ATT&CK/LOLBAS/Invoke-CradleCrafter/Invoke-DOSfuscation payloads
+- [**79**Star][11m] [Makefile] [onioniot/openwrt-packages](https://github.com/onioniot/openwrt-packages) Onion Packages Feed for OpenWRT
+- [**79**Star][7m] [nusr/awesome-macos-command-line-zh](https://github.com/nusr/awesome-macos-command-line-zh) 用你的 macOS 终端搞事情。(Use your macOS terminal shell to do awesome things. )
+- [**79**Star][3y] [C] [nsacyber/netfil](https://github.com/nsacyber/netfil) A kernel network manager with monitoring and limiting capabilities for macOS. #nsacyber
+- [**79**Star][1y] [Dockerfile] [nitr4x/reverse-me](https://github.com/nitr4x/reverse-me) This repository contains a docker container dedicated to reverse engineering
+- [**79**Star][2y] [C++] [nezza/sdqanalyzer](https://github.com/nezza/sdqanalyzer) A Saleae analyzer plugin for the SDQ (Apple Lightning, MagSafe, Battery) protocol.
+- [**79**Star][2y] [Go] [netxfly/xsec-dns-proxy](https://github.com/netxfly/xsec-dns-proxy) xsec-dns-proxy:DNS代理服务器,可以将DNS请求代理到后端的DNS服务器中,在代理的过程中会将dns log写入到数据库中
+- [**79**Star][2y] [nanqinlang-mogic/v2ray](https://github.com/nanqinlang-mogic/v2ray) template with websocket+tls+nginx of v2ray
+- [**79**Star][10m] [Shell] [naltun/eyes.sh](https://github.com/naltun/eyes.sh) Let's you perform domain/IP information gathering... in BASH! Wasn't it esr who said "With enough eyeballs, all your IP info are belong to us?"
+- [**79**Star][3y] [Py] [mozilla/http-observatory-cli](https://github.com/mozilla/http-observatory-cli) The command line tool for the HTTP Observatory
+- [**79**Star][4y] [mi3security/su-a-cyder](https://github.com/mi3security/su-a-cyder) Home-Brewed iOS Malware PoC Generator (BlackHat ASIA 2016)
+- [**79**Star][5d] [Py] [lightswitch05/hosts](https://github.com/lightswitch05/hosts) Hostfile blocklist for ads and tracking, updated regularly
+- [**79**Star][10m] [Py] [laconicwolf/nmap-scan-to-csv](https://github.com/laconicwolf/nmap-scan-to-csv) Converts Nmap XML output to csv file, and other useful functions
+- [**79**Star][2y] [PS] [kromerm/adflab](https://github.com/kromerm/adflab) Azure Data Factory hands-on lab, self-paced. Learn how to lift & shift SSIS packages to the Cloud with ADF. Build new ETL pipelines in ADF, transform data at scale, load Azure Data Warehouse data marts. Also walks through operationalizing ADF pipelines with scheduling and monitoring modules.
+- [**79**Star][8m] [Java] [kingsabri/godofwar](https://github.com/kingsabri/godofwar) GodOfWar - Malicious Java WAR builder with built-in payloads
+- [**79**Star][6y] [Py] [julienpalard/ashttp](https://github.com/julienpalard/ashttp) Shell command, that expose any other command as http. To expose top as http, try : ashttp -p8080 top ; then try http://localhost/8080 and hit F5 to refresh your top :)
+- [**79**Star][2y] [Py] [imiyoo2010/teye_scanner_for_book](https://github.com/imiyoo2010/teye_scanner_for_book) 《白帽子讲Web扫描》书籍参考代码
+- [**79**Star][2m] [ignitetechnologies/vulnhub-ctf-writeups](https://github.com/ignitetechnologies/vulnhub-ctf-writeups) This cheasheet is aimed at the CTF Players and Beginners to help them sort Vulnhub Labs. This list contains all the writeups available on hackingarticles.
+- [**79**Star][2y] [iamhdt/ecommerce-website-security-checklist](https://github.com/iamhdt/ecommerce-website-security-checklist) List of considerations for commerce site auditing and security teams. This is summary of action points and areas that need to be built into the Techinical Specific Document, or will be checked in the Security testing phases.
+- [**79**Star][7m] [Java] [i2p/i2p.i2p-bote](https://github.com/i2p/i2p.i2p-bote) I2P-Bote is a serverless, encrypted e-mail application.
+- [**79**Star][3y] [Objective-C++] [hexploitable/memscan](https://github.com/hexploitable/memscan) A memory scanning tool which uses mach_vm* to either dump memory or look for a specific sequence of bytes.
+- [**79**Star][1y] [Ruby] [hahwul/metasploit-autopwn](https://github.com/hahwul/metasploit-autopwn) db_autopwn plugin of metasploit
+- [**79**Star][2y] [Py] [hackndo/krack-poc](https://github.com/hackndo/krack-poc) Krack POC
+- [**79**Star][7m] [Py] [guedou/r2m2](https://github.com/guedou/r2m2) radare2 + miasm2 = ♥
+- [**79**Star][2m] [Py] [google/giftstick](https://github.com/google/giftstick) 1-Click push forensics evidence to the cloud
+- [**79**Star][3y] [glinares/hephaestus](https://github.com/glinares/hephaestus) Open Source Office Malware Generation & Polymorphic Engine for Red Teams and QA testing
+- [**79**Star][7d] [Py] [githubmaidou/tools](https://github.com/githubmaidou/tools) Python渗透漏洞工具
+- [**79**Star][4y] [C] [gdbinit/mach_race](https://github.com/gdbinit/mach_race) Exploit code for CVE-2016-1757
+- [**79**Star][4m] [JS] [frida/frida-presentations](https://github.com/frida/frida-presentations) Public presentations given on Frida at conferences
+- [**79**Star][1y] [f0rgetting/presentations](https://github.com/f0rgetting/presentations)
+- [**79**Star][12m] [C#] [djhohnstein/.net-profiler-dll-hijack](https://github.com/djhohnstein/.net-profiler-dll-hijack) Implementation of the .NET Profiler DLL hijack in C#
+- [**79**Star][2y] [Go] [derekchiang/mesos-bitcoin-miner](https://github.com/derekchiang/mesos-bitcoin-miner) A bitcoin mining framework on Mesos
+- [**79**Star][4m] [JS] [de1ta-team/de1ctf2019](https://github.com/de1ta-team/de1ctf2019) De1CTF2019
+- [**79**Star][2y] [Shell] [daradib/sidedoor](https://github.com/daradib/sidedoor) SSH connection daemon for Debian/Raspbian/Ubuntu/etc
+- [**79**Star][3y] [Py] [dancezarp/tbdex](https://github.com/dancezarp/tbdex)
+- [**79**Star][1y] [Py] [damian89/xssfinder](https://github.com/damian89/xssfinder) Toolset for detecting reflected xss in websites
+- [**79**Star][6y] [Py] [corelan/dnshjmon](https://github.com/corelan/dnshjmon) dnshjmon is a free tool to monitor public DNS records and report hijacks
+- [**79**Star][4y] [PHP] [coderpirata/xpl-search](https://github.com/coderpirata/xpl-search) Search exploits in multiple exploit databases!
+- [**79**Star][1y] [C#] [certsocietegenerale/notifysecurity](https://github.com/certsocietegenerale/notifysecurity) Outlook add-in companion to report suspicious mail easily
+- [**79**Star][1y] [Py] [cdhowie/netflix-no-ipv6-dns-proxy](https://github.com/cdhowie/netflix-no-ipv6-dns-proxy) Fix for Netflix blocking various IPv6 tunnels by returning no results for AAAA queries of Netflix domains
+- [**79**Star][2y] [Py] [brianwrf/hackrequests](https://github.com/brianwrf/hackrequests) It is a dedicated requests lib that supports cookie, headers, get/post, etc. And it also supports rendering the response (e.g. Javascript, CSS, etc.) of GET requests by using PhantomJs enginee.
+- [**79**Star][2y] [Py] [billyv4/id-entify](https://github.com/billyv4/id-entify) Search for information related to a domain: Emails - IP addresses - Domains - Information on WEB technology - Type of Firewall - NS and MX records - Nmap to IP addresses and Domains.
+- [**79**Star][9m] [axiomzen/eth-random](https://github.com/axiomzen/eth-random) commit-reveal RNG method in Ethereum
+- [**79**Star][2y] [C] [axi0mx/ios-kexec-utils](https://github.com/axi0mx/ios-kexec-utils) boot LLB/iBoot/iBSS/iBEC image from a jailbroken iOS kernel
+- [**79**Star][3y] [Py] [anfractuosity/ultrasonicnetworking](https://github.com/anfractuosity/ultrasonicnetworking) Ultrasonic networking - Transmitting TCP/IP via Ultrasound
+- [**79**Star][1y] [C] [adafruit/adafruit_blesniffer_python](https://github.com/adafruit/adafruit_blesniffer_python) Python API for Adafruit's Bluefruit LE Sniffer
+- [**79**Star][6m] [Py] [abaykan/53r3n17y](https://github.com/abaykan/53r3n17y) Python based script for Information Gathering.
+- [**78**Star][3m] [zhoushuai0207/ladder](https://github.com/zhoushuai0207/ladder) 梯子整理,科学上网
+- [**78**Star][8m] [Py] [reswitched/loaders](https://github.com/reswitched/loaders) IDA Loaders for Switch binaries(NSO / NRO)
+- [**78**Star][2m] [uknowsec/sharpdecryptpwd](https://github.com/uknowsec/sharpdecryptpwd) 对密码已保存在 Windwos 系统上的部分程序进行解析,包括:Navicat,TeamViewer,FileZilla,WinSCP,Xmangager系列产品(Xshell,Xftp)。
+- [**78**Star][10m] [JS] [webbreacher/yoga](https://github.com/webbreacher/yoga) Your OSINT Graphical Analyzer
+- [**78**Star][30d] [Py] [mr-un1k0d3r/redteamscripts](https://github.com/mr-un1k0d3r/redteamscripts) Repo with various Red Team scripts
+- [**78**Star][9m] [Py] [elliiot/ghidra_darknight](https://github.com/elliiot/ghidra_darknight) DarkNight theme for Ghidra
+- [**78**Star][2y] [Go] [oftn-oswg/zerodrop](https://github.com/oftn-oswg/zerodrop) A stealth URL toolkit optimized for bypassing censorship filters and/or dropping malware
+- [**78**Star][5y] [Py] [cylance/smbtrap](https://github.com/cylance/SMBTrap) Tools developed to test the Redirect to SMB issue
+- [**78**Star][5y] [C++] [helpsystems/agafi](https://github.com/helpsystems/Agafi) A gadget finder and a ROP-Chainer tool for x86 platforms
+- [**78**Star][11m] [Py] [siberas/sjet](https://github.com/siberas/sjet) siberas JMX exploitation toolkit
+- [**78**Star][21d] [Shell] [radareorg/radare2-pm](https://github.com/radareorg/radare2-pm) Package Manager for Radare2
+- [**78**Star][3y] [C#] [virb3/dneditor](https://github.com/virb3/dneditor) A .NET assembly editor based on dnlib
+- [**78**Star][8d] [Py] [unkn0wnh4ckr/hackers-tool-kit](https://github.com/unkn0wnh4ckr/hackers-tool-kit) Its a framework filled with alot of options and hacking tools you use directly in the script from brute forcing to payload making im still adding more stuff i now have another tool out called htkl-lite its hackers-tool-kit just not as big and messy to see updates check on my instagram @tuf_unkn0wn or if there are any problems message me on insta…
+- [**78**Star][2y] [Py] [trolldbois/python-haystack](https://github.com/trolldbois/python-haystack) Process heap analysis framework - Windows/Linux - record type inference and forensics
+- [**78**Star][6y] [Py] [t-s-a/smbspider](https://github.com/t-s-a/smbspider) SMB Spider is a lightweight python utility for searching SMB/CIFS/Samba file shares. While performing a penetration test, the need to search hundreds of hosts for sensitive password files resulted in this project.
+- [**78**Star][3y] [C] [stevemk14ebr/unihook](https://github.com/stevemk14ebr/unihook) Intercept arbitrary functions at run-time, without knowing their typedefs
+- [**78**Star][2y] [Py] [softsec-kaist/imf](https://github.com/softsec-kaist/imf) Inferred Model-based Fuzzer
+- [**78**Star][4y] [C++] [rwhitcroft/dnschan](https://github.com/rwhitcroft/dnschan) A remote access trojan over DNS
+- [**78**Star][3m] [C++] [rjhansen/nsrllookup](https://github.com/rjhansen/nsrllookup) Checks with NSRL RDS servers looking for for hash matches
+- [**78**Star][1m] [Py] [regebro/pyroma](https://github.com/regebro/pyroma) Rate your Python packages package friendliness
+- [**78**Star][4y] [C#] [realalexandergeorgiev/tempracer](https://github.com/realalexandergeorgiev/tempracer) A Windows priviledge escalation tool (abusing race conditions)
+- [**78**Star][4y] [Py] [qtek/qradio](https://github.com/qtek/qradio) QRadio ~ Best Threat Intelligence Radio ~ Tune In!
+- [**78**Star][3y] [Py] [pythonone/ms17-010](https://github.com/pythonone/ms17-010) MS17-010 exploits, payloads, and scanners
+- [**78**Star][3m] [JS] [pownjs/pown-whoarethey](https://github.com/pownjs/pown-whoarethey)
+- [**78**Star][2y] [Py] [pinkflawd/r2graphity](https://github.com/pinkflawd/r2graphity) Creating function call graphs based on radare2 framwork, plot fancy graphs and extract behavior indicators
+- [**78**Star][2m] [Py] [pfalcon/scratchablock](https://github.com/pfalcon/scratchablock) Yet another crippled decompiler project
+- [**78**Star][2y] [Py] [peterpt/fuzzbunch](https://github.com/peterpt/fuzzbunch) Shadow Brokers NSA fuzzbunch tool leak . With windows auto instalation script
+- [**78**Star][1m] [Py] [palkeo/pakala](https://github.com/palkeo/pakala) Offensive vulnerability scanner for ethereum, and symbolic execution tool for the Ethereum Virtual Machine
+- [**78**Star][6y] [C] [oblique/wificurse](https://github.com/oblique/wificurse) WiFi Jamming tool
+- [**78**Star][2m] [Py] [miyagaw61/exgdb](https://github.com/miyagaw61/exgdb) Extension for GDB
+- [**78**Star][6m] [Go] [mattevans/pwned-passwords](https://github.com/mattevans/pwned-passwords)
+- [**78**Star][1y] [Py] [markbaggett/domain_stats](https://github.com/markbaggett/domain_stats)
+- [**78**Star][3y] [HTML] [malqr/malqr.github.io](https://github.com/malqr/malqr.github.io) MalQR is a collection of malicious QR Codes and Barcodes you can use to test the security of your scanners.
+- [**78**Star][6y] [Zeek] [liamrandall/bromalware-exercise](https://github.com/liamrandall/bromalware-exercise)
+- [**78**Star][3m] [C] [kelvinhack/devicemon](https://github.com/kelvinhack/devicemon) VT-based PCI device monitor (SPI)
+- [**78**Star][4y] [C] [kala13x/scap](https://github.com/kala13x/scap) Network Sniffer (Scan and Capture Incoming Packets)
+- [**78**Star][1m] [Java] [jenkinsci/dependency-check-plugin](https://github.com/jenkinsci/dependency-check-plugin) Jenkins plugin for OWASP Dependency-Check. Inspects project components for known vulnerabilities (e.g. CVEs).
+- [**78**Star][3y] [C++] [jeffbryner/nbdserver](https://github.com/jeffbryner/nbdserver) Network Block Device Server for windows with a DFIR/forensic focus.
+- [**78**Star][3y] [JS] [jacobreynolds/ssrfdetector](https://github.com/jacobreynolds/ssrfdetector) Server-side request forgery detector
+- [**78**Star][5y] [Py] [idanr1986/cuckoo](https://github.com/idanr1986/cuckoo) A Cuckoo Sandbox Extension for Android
+- [**78**Star][3y] [Py] [hatriot/shellme](https://github.com/hatriot/shellme) simple shellcode generator
+- [**78**Star][8m] [Py] [gelim/nmap-erpscan](https://github.com/gelim/nmap-erpscan) Nmap custom probes for better detecting SAP services
+- [**78**Star][6y] [Go] [gabrielg/cve-2014-1266-poc](https://github.com/gabrielg/cve-2014-1266-poc) Apple OS X/iOS SSL flaw demonstration
+- [**78**Star][7y] [C#] [g0tmi1k/vulninjector](https://github.com/g0tmi1k/vulninjector) Generates a Windows 'vulnerable' machine from ISOs
+- [**78**Star][1y] [Ruby] [frohoff/ciphr](https://github.com/frohoff/ciphr) CLI crypto swiss-army knife for performing and composing encoding, decoding, encryption, decryption, hashing, and other various cryptographic operations on streams of data from the command line; mostly intended for ad hoc, infosec-related uses.
+- [**78**Star][24d] [C] [etnaviv/etna_viv](https://github.com/etnaviv/etna_viv) Etnaviv is a project to build an FOSS driver for the Vivante GCxxx series of embedded GPUs - Tools and reverse engineering repository
+- [**78**Star][3y] [C] [ernacktob/esp8266_wifi_raw](https://github.com/ernacktob/esp8266_wifi_raw) ESP8266 wifi packet injection and receiving experiment
+- [**78**Star][2y] [C] [elfmaster/saruman](https://github.com/elfmaster/saruman) ELF anti-forensics exec, for injecting full dynamic executables into process image (With thread injection)
+- [**78**Star][2y] [Shell] [demonsec666/secist_script](https://github.com/demonsec666/secist_script)
+- [**78**Star][3y] [Go] [cyphar/mkonion](https://github.com/cyphar/mkonion) A simple way to create a Tor onion service for existing Docker containers.
+- [**78**Star][10m] [Py] [cymmetria/honeycomb](https://github.com/cymmetria/honeycomb) An extensible honeypot framework
+- [**78**Star][4m] [Py] [clirimemini/keye](https://github.com/clirimemini/keye) Keye is a reconnaissance tool that was written in Python with SQLite3 integrated. After adding a single URL, or a list of URLs, it will make a request to these URLs and try to detect changes based on their response's body length.
+- [**78**Star][6y] [Py] [cea-sec/torpylle](https://github.com/cea-sec/torpylle) A Python / Scapy implementation of the OR (TOR) protocol.
+- [**78**Star][6y] [Shell] [breadtk/onion_pi](https://github.com/breadtk/onion_pi) Make a Raspberry Pi into a Anonymizing Tor Proxy!
+- [**77**Star][2m] [Shell] [acris/shadowsocks-asuswrt-merlin](https://github.com/acris/shadowsocks-asuswrt-merlin) Shadowsock for Asuswrt-Merlin New Gen
+- [**77**Star][10m] [JS] [qious/ss-panel-server](https://github.com/qious/ss-panel-server) 基于企业微信的科学上网分享站点 - 后端
+- [**77**Star][11m] [Java] [thelinuxchoice/droidtracker](https://github.com/thelinuxchoice/droidtracker) Script to generate an Android App to track location in real time
+- [**77**Star][5m] [C] [virustotal/c-vtapi](https://github.com/virustotal/c-vtapi) Official implementation of the VirusTotal API in C programming language
+- [**77**Star][16d] [C] [hasherezade/module_overloading](https://github.com/hasherezade/module_overloading) A more stealthy variant of "DLL hollowing"
+- [**77**Star][2m] [comwrg/fuck-gfw](https://github.com/comwrg/fuck-gfw) 记录各个包管理器使用代理的方法, 因为GFW已经浪费了已经数不清的时间, FUCK GFW
+- [**77**Star][1m] [C++] [foxhex0ne/hyperviper](https://github.com/foxhex0ne/hyperviper) Toolkit for Hyper-V security research
+- [**77**Star][2m] [C] [iqiyi/qnsm](https://github.com/iqiyi/qnsm) QNSM is network security monitoring framework based on DPDK.
+- [**77**Star][1y] [C] [contionmig/kernelmode-bypass](https://github.com/ContionMig/KernelMode-Bypass) This is a source to a bypass i made for some games, for now this should work f or VAC, BE and EAC. The only downside is that you will need to find a exploit to load the driver
+- [**77**Star][3y] [C++] [fsecurelabs/cve-2016-7255](https://github.com/FSecureLABS/CVE-2016-7255) An exploit for CVE-2016-7255 on Windows 7/8/8.1/10(pre-anniversary) 64 bit
+- [**77**Star][3m] [Batchfile] [phoenix1747/fake-sandbox](https://github.com/Phoenix1747/fake-sandbox)
+- [**77**Star][5y] [C++] [zer0mem/minihypervisorproject](https://github.com/zer0mem/minihypervisorproject) IntelVT-X nice feature -> tool
+- [**77**Star][2y] [Py] [wofeiwo/webshell-find-tools](https://github.com/wofeiwo/webshell-find-tools) 分析web访问日志以及web目录文件属性,用于根据查找可疑后门文件的相关脚本。
+- [**77**Star][14d] [C++] [versprite/research](https://github.com/versprite/research) VerSprite Security Research
+- [**77**Star][1m] [HTML] [vergl4s/pentesting-dump](https://github.com/vergl4s/pentesting-dump) Scripts, tools, and proof-of-concepts to aid in a penetration test.
+- [**77**Star][2y] [PHP] [tuhinshubhra/shellstack](https://github.com/tuhinshubhra/shellstack) A PHP Based Tool That Helps You To Manage All Your Backdoored Websites Efficiently.
+- [**77**Star][4y] [Py] [trolldbois/sslsnoop](https://github.com/trolldbois/sslsnoop) Live SSH/SSL/TLS decryption - extraction of secret keys from live process memory
+- [**77**Star][3y] [C] [tinysec/iathook](https://github.com/tinysec/iathook) windows kernelmode and usermode IAT hook
+- [**77**Star][4m] [Py] [thundergunexpress/badministration](https://github.com/thundergunexpress/badministration)
+- [**77**Star][2y] [Py] [tezukanice/office8570](https://github.com/tezukanice/office8570) CVE20178570
+- [**77**Star][27d] [Go] [tarampampam/mikrotik-hosts-parser](https://github.com/tarampampam/mikrotik-hosts-parser)
+- [**77**Star][3y] [HTML] [szimeus/evalyzer](https://github.com/szimeus/evalyzer) Using WinDBG to tap into JavaScript and help with deobfuscation and browser exploit detection
+- [**77**Star][4y] [PHP] [subtlescope/bash-ransomware](https://github.com/subtlescope/bash-ransomware) Simple Bash Rasomware for use in Cyber Exercises
+- [**77**Star][2y] [Py] [stasinopoulos/jaidam](https://github.com/stasinopoulos/jaidam) Jaidam is an open source penetration testing tool that would take as input a list of domain names, scan them, determine if wordpress or joomla platform was used and finally check them automatically, for web vulnerabilities using two well‐known open source tools, WPScan and Joomscan.
+- [**77**Star][3y] [PHP] [secwiki/webshell-2](https://github.com/secwiki/webshell-2) Webshell
+- [**77**Star][3y] [Py] [securitystreak/security-scripts](https://github.com/securitystreak/security-scripts) A collection of public offensive and defensive security related scripts for InfoSec students.
+- [**77**Star][1y] [Java] [schollz/find3-android-scanner](https://github.com/schollz/find3-android-scanner) An android app that scans Bluetooth and WiFi for FIND3
+- [**77**Star][4m] [PHP] [rizer0/blind-bash](https://github.com/rizer0/blind-bash) Obfuscate your Bash Code
+- [**77**Star][3d] [Ruby] [r00t-3xp10it/resource_files](https://github.com/r00t-3xp10it/resource_files) mosquito - Automating reconnaissance and brute force attacks
+- [**77**Star][2m] [Py] [pingxcpost/f-nascan-plus](https://github.com/pingxcpost/f-nascan-plus) F-NAScan-PLUS 安服资产搜集
+- [**77**Star][1y] [C#] [parsingteam/redlogin](https://github.com/parsingteam/redlogin) Red Login: SSH Brute-force Tools
+- [**77**Star][1y] [Py] [paolomonti42/salt](https://github.com/paolomonti42/salt) SALT - SLUB ALlocator Tracer for the Linux kernel
+- [**77**Star][6y] [Py] [owasp/ninja-pingu](https://github.com/owasp/ninja-pingu) a free open-source high performance network scanner tool for large scale analyses
+- [**77**Star][7d] [C] [open-power/skiboot](https://github.com/open-power/skiboot) OPAL boot and runtime firmware for POWER
+- [**77**Star][4y] [CoffeeScript] [olegberman/mitm-omegle](https://github.com/olegberman/mitm-omegle) Watch strangers talk on Omegle (man in the middle attack)
+- [**77**Star][4m] [C] [oleavr/ios-inject-custom](https://github.com/oleavr/ios-inject-custom) Example showing how to use Frida for standalone injection of a custom payload
+- [**77**Star][10m] [Py] [nullarray/mimir](https://github.com/nullarray/mimir) OSINT Threat Intel Interface - CLI for HoneyDB
+- [**77**Star][2y] [nhoya/pastebinmarkdownxss](https://github.com/nhoya/pastebinmarkdownxss) XSS in pastebin.com and reddit.com via unsanitized markdown output
+- [**77**Star][4m] [Go] [netxfly/x-proxy](https://github.com/netxfly/x-proxy) honeypot proxy
+- [**77**Star][1y] [JS] [mtjailed/jailbreakme](https://github.com/mtjailed/jailbreakme) A webbased jailbreak solution unifying existing jailbreak me solutions and new ones.
+- [**77**Star][4y] [Py] [mncoppola/linux-kernel-ctf](https://github.com/mncoppola/linux-kernel-ctf) Helper scripts for hosting a Linux kernel exploitation CTF challenge
+- [**77**Star][2m] [JS] [mitchmoser/sputnik](https://github.com/mitchmoser/sputnik) Open Source Intelligence Browser Extension
+- [**77**Star][18d] [Go] [likexian/whois-parser-go](https://github.com/likexian/whois-parser-go) Go module for domain whois info parse
+- [**77**Star][9m] [Py] [k8scop/k8s-security-dashboard](https://github.com/k8scop/k8s-security-dashboard) A security monitoring solution for Kubernetes
+- [**77**Star][20d] [Jupyter Notebook] [k-vitali/malware-misc-re](https://github.com/k-vitali/malware-misc-re) Miscellaneous Malware RE
+- [**77**Star][3y] [C] [jndok/pegasusx](https://github.com/jndok/pegasusx) OS X 10.11.6 LPE PoC for CVE-2016-4655 / CVE-2016-4656
+- [**77**Star][3m] [HTML] [jenyraval/phishing-simulation](https://github.com/jenyraval/phishing-simulation) Phishing Simulation mainly aims to increase phishing awareness by providing an intuitive tutorial and customized assessment
+- [**77**Star][2d] [C] [horsicq/nfdx64dbg](https://github.com/horsicq/nfdx64dbg) Plugin for x64dbg Linker/Compiler/Tool detector.
+- [**77**Star][1y] [homjxi0e/apt](https://github.com/homjxi0e/apt) APT || Execution || Launch || APTs || ( Authors harr0ey, bohops )
+- [**77**Star][5m] [ObjC] [google/gscxscanner](https://github.com/google/gscxscanner) iOS Accessibility Scanner
+- [**77**Star][11m] [Py] [fs0c131y/cve-2018-20555](https://github.com/fs0c131y/cve-2018-20555) Social Network Tabs Wordpress Plugin Vulnerability - CVE-2018-20555
+- [**77**Star][6d] [Shell] [f5networks/f5-aws-cloudformation](https://github.com/f5networks/f5-aws-cloudformation) CloudFormation Templates for quickly deploying BIG-IP services in Amazon Web Services EC2
+- [**77**Star][4y] [HTML] [f47h3r/hackingteam_exploits](https://github.com/f47h3r/hackingteam_exploits) Initial Collection of HackingTeam Exploits
+- [**77**Star][7m] [Py] [enigmabridge/certbot-external-auth](https://github.com/enigmabridge/certbot-external-auth) Certbot external DNS, HTTP, TLSSNI domain validation plugin with JSON output and scriptable hooks, with Dehydrated compatibility
+- [**77**Star][1y] [Py] [ekultek/xanxss](https://github.com/ekultek/xanxss) A simple XSS finding tool
+- [**77**Star][2y] [Py] [dtag-dev-sec/explo](https://github.com/dtag-dev-sec/explo) Human and machine readable web vulnerability testing format
+- [**77**Star][2y] [dictionaryhouse/dirpath_list](https://github.com/dictionaryhouse/dirpath_list) Dirpath_List 目录扫描字典
+- [**77**Star][2m] [Py] [danieluhricek/lisa](https://github.com/danieluhricek/lisa) Sandbox for automated Linux malware analysis.
+- [**77**Star][2y] [C++] [daizhongyin/securitysdk](https://github.com/daizhongyin/securitysdk) Android安全SDK,提供基础的安全防护能力,如安全webview、IPC安全通信、应用和插件安全更新、威胁情报搜集等等
+- [**77**Star][4d] [d3sre/use_case_applicability](https://github.com/d3sre/use_case_applicability) Security Monitoring Resolution Categories
+- [**77**Star][6m] [Py] [cybereason/linux_plumber](https://github.com/cybereason/linux_plumber) A python implementation of a grep friendly ftrace wrapper
+- [**77**Star][2m] [C#] [csmacnz/coveralls.net](https://github.com/csmacnz/coveralls.net) Coveralls uploader for .Net Code coverage
+- [**77**Star][7m] [PS] [cottinghamd/hardeningauditor](https://github.com/cottinghamd/hardeningauditor) Scripts for comparing Microsoft Windows compliance with the ASD 1709 & Office 2016 Hardening Guides
+- [**77**Star][2y] [ObjC] [cocoahuke/ioskextdump](https://github.com/cocoahuke/ioskextdump) Dump Kext information from iOS kernel cache. Applicable to the kernel which dump from memory
+- [**77**Star][4m] [Shell] [chunkingz/linsetmv1-2](https://github.com/chunkingz/linsetmv1-2) Linset is a WPA/WPA2 phishing tool (evil twin)
+- [**77**Star][2y] [PHP] [bugsafe/wereport](https://github.com/bugsafe/wereport) WeReport
+- [**77**Star][2y] [Py] [blacknbunny/shellcodetoassembly](https://github.com/blacknbunny/shellcodetoassembly)
+- [**77**Star][5y] [C] [bishopfox/firecat](https://github.com/bishopfox/firecat) Firecat is a penetration testing tool that allows you to punch reverse TCP tunnels out of a compromised network.
+- [**77**Star][1y] [Py] [asherags/amzsear](https://github.com/asherags/amzsear) The unofficial Amazon search CLI & Python API
+- [**77**Star][21d] [C] [apriorit/mhook](https://github.com/apriorit/mhook) A Windows API hooking library
+- [**77**Star][3m] [JS] [anmavrid/smart-contracts](https://github.com/anmavrid/smart-contracts)
+- [**77**Star][3y] [Shell] [ank1036official/git_pentesting_toolkit](https://github.com/ank1036official/git_pentesting_toolkit) Exploit pack for pentesters and ethical hackers.
+- [**77**Star][4m] [C] [angelkitty/computer-virus](https://github.com/angelkitty/computer-virus)
+- [**77**Star][3d] [HTML] [android-x86/android-x86.github.io](https://github.com/android-x86/android-x86.github.io) Official Website for Android-x86 Project
+- [**76**Star][9m] [C] [iaik/cache_template_attacks](https://github.com/iaik/cache_template_attacks) This repository contains several tools to perform Cache Template Attacks
+- [**76**Star][2y] [Py] [galkan/tools](https://github.com/galkan/tools) Tools that are related to pentest and network security
+- [**76**Star][2y] [Go] [mushorg/go-dpi](https://github.com/mushorg/go-dpi) Application layer protocol identification of traffic flows
+- [**76**Star][1m] [akenofu/oscp-cheat-sheet](https://github.com/akenofu/oscp-cheat-sheet) This is my OSCP cheat sheet made by combining a lot of different resources online with a little bit of tweaking. I used this cheat sheet during my exam (Fri, 13 Sep 2019) and during the labs. I can proudly say it helped me pass so I hope it can help you as well ! Good Luck and Try Harder
+- [**76**Star][8y] [Py] [ts-way/gerix-wifi-cracker](https://github.com/ts-way/gerix-wifi-cracker) A graphical user interface for aircrack-ng and pyrit.
+- [**76**Star][10m] [Py] [ztgrace/red_team_telemetry](https://github.com/ztgrace/red_team_telemetry)
+- [**76**Star][5m] [JS] [zencashofficial/arizen](https://github.com/zencashofficial/arizen) Arizen is the API wallet for Horizen with encrypted and only locally stored files!
+- [**76**Star][3y] [C#] [zcgonvh/cve-2017-7269-tool](https://github.com/zcgonvh/cve-2017-7269-tool) CVE-2017-7269 to webshell or shellcode loader
+- [**76**Star][5y] [C++] [yveaux/nrf24_sniffer](https://github.com/yveaux/nrf24_sniffer) Sniffer for Nordic NRF24L01+ modules with MySensors support
+- [**76**Star][4m] [Go] [yashpl/mongobuster](https://github.com/yashpl/mongobuster) Hunt Open MongoDB instances
+- [**76**Star][2y] [Ruby] [xc0d3rz/metasploit-apk-embed-payload](https://github.com/xc0d3rz/metasploit-apk-embed-payload) Embed a Metasploit Payload in an Original .Apk File
+- [**76**Star][5y] [PHP] [v0s/plus22](https://github.com/v0s/plus22) Tool to analyze 64-bit binaries with 32-bit Hex-Rays Decompiler
+- [**76**Star][2y] [Py] [threatexpress/tinyshell](https://github.com/threatexpress/tinyshell)
+- [**76**Star][8m] [Py] [the-c0d3r/admin-finder](https://github.com/the-c0d3r/admin-finder) Blazing fast admin panel finder with multi-threading
+- [**76**Star][2y] [Py] [superponible/volatility-plugins](https://github.com/superponible/volatility-plugins) Plugins I've written for Volatility
+- [**76**Star][7m] [Py] [sup3ria/atlantr](https://github.com/sup3ria/atlantr) Fastes Email:Pass Checker on the planet.
+- [**76**Star][16d] [CSS] [sniperoj/jeopardy-dockerfiles](https://github.com/sniperoj/jeopardy-dockerfiles)
+- [**76**Star][1y] [Py] [sh4rk0-666/spykeyboard](https://github.com/sh4rk0-666/spykeyboard) keylogger which sends us the data to our gmail.
+- [**76**Star][10m] [sevagas/windowsdefender_asr_bypass-offensivecon2019](https://github.com/sevagas/windowsdefender_asr_bypass-offensivecon2019) Public documents related to my talk "Bypass Windows Exploit Guard ASR" at Offensive Con 2019.
+- [**76**Star][5y] [ActionScript] [sethsec/crossdomain-exploitation-framework](https://github.com/sethsec/crossdomain-exploitation-framework) Everything you need to exploit overly permissive crossdomain.xml files
+- [**76**Star][22d] [Go] [root4loot/rescope](https://github.com/root4loot/rescope) Rescope is a tool geared towards pentesters and bugbounty researchers, that aims to make life easier when defining scopes for Burp Suite and OWASP ZAP.
+- [**76**Star][8m] [JS] [retirejs/grunt-retire](https://github.com/retirejs/grunt-retire) Grunt plugin for retire.
+- [**76**Star][1y] [Shell] [re4son/wsl-kali-x](https://github.com/re4son/wsl-kali-x) Tweaks to run Kali Linux desktop panels and gui apps on Windows 10
+- [**76**Star][7m] [PHP] [ph-7/obfuscator-class](https://github.com/ph-7/obfuscator-class)
+- [**76**Star][4y] [oguzhantopgul/vezir-project](https://github.com/oguzhantopgul/vezir-project) Yet Another Linux Virtual Machine for Mobile Application Pentesting and Mobile Malware Analysis
+- [**76**Star][2y] [Py] [nickstadb/serialbrute](https://github.com/nickstadb/serialbrute) Java serialization brute force attack tool.
+- [**76**Star][3y] [nezteb/i_hate_wordpress](https://github.com/nezteb/i_hate_wordpress) I used to hate Wordpress until I had created this repo. This is me documenting how to make WordPress not suck like everyone thinks it does.
+- [**76**Star][6y] [Shell] [neohapsis/suddensix](https://github.com/neohapsis/suddensix) IPV6 MITM attack tool
+- [**76**Star][3y] [Py] [moosd/needle](https://github.com/moosd/needle) Android framework injection made easy
+- [**76**Star][6m] [JS] [microsoft/adfswebcustomization](https://github.com/microsoft/adfswebcustomization) A repository of useful Web Customizations for Active Directory Federation Services
+- [**76**Star][2y] [Py] [mgeide/poortego](https://github.com/mgeide/poortego) Open-source python project to handle the storage and linking of open-source intelligence (ala Maltego)
+- [**76**Star][30d] [Crystal] [maxfierke/fincher](https://github.com/maxfierke/fincher) A steganography tool for text
+- [**76**Star][2m] [Py] [leveldown-security/svd-loader-ghidra](https://github.com/leveldown-security/svd-loader-ghidra)
+- [**76**Star][4y] [C++] [lcatro/sise_traning_ctf_re](https://github.com/lcatro/sise_traning_ctf_re) SNST Traning RE Project .华软网络安全小组逆向工程训练营,尝试以CTF 的形式来使大家可以动手训练快速提升自己的逆向工程水平.CTF 的训练程序又浅到深,没有使用太复杂的算法,在逆向的过程中遇到的难关都是在分析病毒和破解中遇到的实际情况,注重于实用.训练营还包含有源代码文件,训练程序和思路.希望可以帮助小伙伴们入门逆向工程这个神奇的世界..
+- [**76**Star][1y] [Shell] [kolargol/openvpn](https://github.com/kolargol/openvpn) openvpn:Shell 脚本,5分钟建立个人 VPN
+- [**76**Star][3y] [Py] [keithjjones/fileintel](https://github.com/keithjjones/fileintel) A modular Python application to pull intelligence about malicious files
+- [**76**Star][7y] [ObjC] [jils/flashbackchecker](https://github.com/jils/flashbackchecker) Quick and easy checker for Mac Flashback malware variants
+- [**76**Star][15d] [Py] [inquest/python-sandboxapi](https://github.com/inquest/python-sandboxapi) Minimal, consistent Python API for building integrations with malware sandboxes.
+- [**76**Star][6m] [Java] [incredibleindishell/exploit-code-by-me](https://github.com/incredibleindishell/exploit-code-by-me) Exploit code developed/reproduced by me
+- [**76**Star][4y] [hardhatdigital/rails-security-audit](https://github.com/hardhatdigital/rails-security-audit) A checklist of Rails security audit
+- [**76**Star][1y] [C] [gregvish/l1tf-poc](https://github.com/gregvish/l1tf-poc) L1TF (Foreshadow) VM guest to host memory read PoC
+- [**76**Star][7d] [C] [greenbone/gvmd](https://github.com/greenbone/gvmd) Greenbone Vulnerability Manager
+- [**76**Star][6m] [Py] [githacktools/brutedum](https://github.com/githacktools/brutedum) BruteDum - Brute Force attacks SSH, FTP, Telnet, PostgreSQL, RDP, VNC with Hydra, Medusa and Ncrack
+- [**76**Star][4y] [C] [gdbinit/gopher](https://github.com/gdbinit/gopher) A OS X crypto ransomware PoC
+- [**76**Star][1m] [Py] [foospidy/web-cve-tests](https://github.com/foospidy/web-cve-tests) A simple framework for sending test payloads for known web CVEs.
+- [**76**Star][12m] [foolmitah/cve-2018-14729](https://github.com/foolmitah/cve-2018-14729) Discuz backend getshell
+- [**76**Star][4y] [C++] [feross/wiresheep](https://github.com/feross/wiresheep) WireSheep shows you each user on the network and all the HTTP requests they're making in a pretty News Feed, a la Facebook.
+- [**76**Star][4y] [PHP] [fakhrizulkifli/defeating-php-gd-imagecreatefromgif](https://github.com/fakhrizulkifli/defeating-php-gd-imagecreatefromgif) Proof-of-concept to exploit the flaw in the PHP-GD built-in function, imagecreatefromgif()
+- [**76**Star][5y] [Java] [evilsocket/nikeplus-fuelband-se-reversed](https://github.com/evilsocket/nikeplus-fuelband-se-reversed) A a proof of concept application that uses BLE api and the Nike+ FuelBand SE protocol to communicate with Nike BLE devices.
+- [**76**Star][3y] [Java] [ethackdotorg/orwall](https://github.com/ethackdotorg/orwall) Put your apps behind Orbot, and block all unwanted traffic in one row.
+- [**76**Star][4y] [Java] [enovella/jebscripts](https://github.com/enovella/jebscripts) A set of JEB Python/Java scripts for reverse engineering Android obfuscated code
+- [**76**Star][4m] [Py] [duo-labs/apple-t2-xpc](https://github.com/duo-labs/apple-t2-xpc) Tools to explore the XPC interface of Apple's T2 chip
+- [**76**Star][4y] [PHP] [dunglas/php-torcontrol](https://github.com/dunglas/php-torcontrol) PHP TorControl, a library to control TOR
+- [**76**Star][1y] [Go] [drael/gonetstat](https://github.com/drael/gonetstat) Netstat implementation in Go
+- [**76**Star][3m] [M4] [dennisyurichev/yurichev.com](https://github.com/dennisyurichev/yurichev.com) my website
+- [**76**Star][3y] [C] [decryptoniteteam/decryptonite](https://github.com/decryptoniteteam/decryptonite) Ransomware Detection and Mitigation Software
+- [**76**Star][5y] [Py] [dantangfan/ddos](https://github.com/dantangfan/ddos) ddos attact
+- [**76**Star][2y] [PHP] [curlyboi/hashtopus](https://github.com/curlyboi/hashtopus) Distributed wrapper around oclHashcat
+- [**76**Star][2y] [C] [brl/grlh](https://github.com/brl/grlh)
+- [**76**Star][6d] [Go] [binject/binjection](https://github.com/binject/binjection) Injects additional machine instructions into various binary formats.
+- [**76**Star][2y] [C] [bazad/x18-leak](https://github.com/bazad/x18-leak) CVE-2018-4185: iOS 11.2-11.2.6 kernel pointer disclosure introduced by Apple's Meltdown mitigation.
+- [**76**Star][25d] [Py] [bannsec/autopwn](https://github.com/bannsec/autopwn) Automate repetitive tasks for fuzzing
+- [**76**Star][6m] [TS] [auth0-blog/angular-auth0-aside](https://github.com/auth0-blog/angular-auth0-aside) Aside: Angular with Auth0 and an authenticated Node API.
+- [**76**Star][2y] [Py] [anssi-fr/bootcode_parser](https://github.com/anssi-fr/bootcode_parser) A boot record parser that identifies known good signatures for MBR, VBR and IPL.
+- [**76**Star][1y] [C] [alpha1ab/win2016lpe](https://github.com/alpha1ab/win2016lpe) Windows10 & Windows Server 2016 LPE Exploit (use schedsvc!SchRpcSetSecurity())
+- [**76**Star][3m] [C] [ahmadmansoor/advancedscript](https://github.com/ahmadmansoor/advancedscript) Add More Features for x64dbg Script System,with some Functions which will help Plugin Coder
+- [**76**Star][1m] [Py] [ab77/black.box](https://github.com/ab77/black.box) Plug-and-Play VPN router and unblocker
+- [**76**Star][3y] [Py] [1an0rmus/tekdefense](https://github.com/1an0rmus/tekdefense) Open Development projects for TekDefense
+- [**75**Star][3y] [Java] [guardianproject/cacheword](https://github.com/guardianproject/cacheword) a password caching and management service for Android
+- [**75**Star][3m] [ignitetechnologies/web-application-cheatsheet](https://github.com/ignitetechnologies/web-application-cheatsheet) This cheatsheet is aimed at the CTF Players and Beginners to help them understand Web Application Vulnerablity with examples.
+- [**75**Star][3y] [C++] [x64dbg/xedparse](https://github.com/x64dbg/xedparse) A MASM-like, single-line plaintext assembler
+- [**75**Star][5y] [Shell] [shadowsocks/stackscript](https://github.com/shadowsocks/stackscript)
+- [**75**Star][1y] [Py] [mame82/duckencoder.py](https://github.com/mame82/duckencoder.py) Python port of infamous duckencoder for RubberDucky
+- [**75**Star][5m] [Dockerfile] [leezj9671/secdevices_docker](https://github.com/leezj9671/secdevices_docker) 自行编写的工作中使用到的安全设备Dockerfile
+- [**75**Star][3m] [ivbeg/awesome-forensicstools](https://github.com/ivbeg/awesome-forensicstools) Awesome list of digital forensic tools
+- [**75**Star][9m] [Py] [daeken/ssrftest](https://github.com/daeken/ssrftest) SSRF testing tool
+- [**75**Star][3y] [C] [osirislab/csaw-ctf-2016-quals](https://github.com/osirislab/CSAW-CTF-2016-Quals) Repo for CSAW CTF 2016 Quals challenges
+- [**75**Star][6y] [Lua] [jpalanco/nmap-scada](https://github.com/jpalanco/nmap-scada) nse scripts for scada identification
+- [**75**Star][10m] [Rust] [easyctf/librectf](https://github.com/easyctf/librectf) CTF in a box. Minimal setup required. (not production-ready yet)
+- [**75**Star][2y] [Assembly] [zznop/pop-nedry](https://github.com/zznop/pop-nedry) x86-64 Windows shellcode that recreates the Jurassic Park hacking scene (Ah, ah, ah... you didn't' say the magic word!)
+- [**75**Star][2m] [Py] [zenix-blurryface/sneakyexe](https://github.com/zenix-blurryface/sneakyexe) Embedding a "UAC-Bypassing" function into your custom payload
+- [**75**Star][3y] [ywolf/f-middlewarescan](https://github.com/ywolf/f-middlewarescan) A vulnerability detection scripts for middleware services
+- [**75**Star][1y] [Py] [x0rz/tweetentropy](https://github.com/x0rz/tweetentropy) Twitter as an extra entropy source
+- [**75**Star][8m] [Py] [wied03/centos-package-cron](https://github.com/wied03/centos-package-cron) A security update tool for CentOS
+- [**75**Star][3y] [Py] [vvalien/win_exp](https://github.com/vvalien/win_exp)
+- [**75**Star][3y] [C] [vnik5287/kernel_rop](https://github.com/vnik5287/kernel_rop)
+- [**75**Star][3y] [C] [viralsecuritygroup/knoxout](https://github.com/viralsecuritygroup/knoxout) A PoC of KNOXout (CVE-2016-6584) - bypassing Samsung KNOX protections and root Samsung Galaxy S6 Android Device.
+- [**75**Star][4y] [PHP] [vidar-team/hctf2015-all-problems](https://github.com/vidar-team/hctf2015-all-problems) hctf2015 all problems and writeups from authors
+- [**75**Star][4m] [C++] [velocidex/c-aff4](https://github.com/velocidex/c-aff4) An AFF4 C++ implementation.
+- [**75**Star][3y] [Py] [va5c0/steghide-brute-force-tool](https://github.com/va5c0/steghide-brute-force-tool) Execute a brute force attack with Steghide to file with hide information and password established
+- [**75**Star][2y] [Java] [unchartedsoftware/aperture-tiles](https://github.com/unchartedsoftware/aperture-tiles) Aperture-Tiles uses familiar web-based map interactions to allow exploration of arbitrary huge data sets.
+- [**75**Star][11m] [Shell] [ttffdd/xbadmanners](https://github.com/ttffdd/xbadmanners) Tool for CVE-2018-16323
+- [**75**Star][2m] [Batchfile] [tresacton/passwordstealer](https://github.com/tresacton/passwordstealer) USB / CD / DVD autorun password stealer
+- [**75**Star][2m] [Py] [tp7309/ttdedroid](https://github.com/tp7309/ttdedroid) 一键反编译工具One key for quickly decompile apk/aar/dex/jar, support by jadx/dex2jar/enjarify/cfr.
+- [**75**Star][5y] [C++] [sherifeldeeb/inmet](https://github.com/sherifeldeeb/inmet) A multi-purpose meterpreter executable (inline, many transports, msfpayload)
+- [**75**Star][6m] [Py] [shashank-in/travisleaks](https://github.com/shashank-in/travisleaks) A tool to find sensitive keys and passwords in Travis logs
+- [**75**Star][10m] [Py] [secrary/ida-scripts](https://github.com/secrary/ida-scripts) IDAPro scripts/plugins
+ - [dumpDyn](https://github.com/secrary/ida-scripts/blob/master/dumpDyn/README.md) IDAPython plugin(script) which saves comments, names, breakpoints, functions from one execution to another.
+ - [idenLib](https://github.com/secrary/ida-scripts/blob/master/idenLib/README.md) Library Function Identification
+ - [IOCTL_decode](https://github.com/secrary/ida-scripts/blob/master/IOCTL_decode.py) Windows Device IO Control Code
+ - [XORCheck](https://github.com/secrary/ida-scripts/blob/master/XORCheck.py) check xor
+- [**75**Star][1m] [C] [scriptingxss/iotgoat](https://github.com/scriptingxss/iotgoat) IoTGoat is a deliberately insecure firmware based on OpenWrt.
+- [**75**Star][2y] [Py] [safebreach-labs/spacebin](https://github.com/safebreach-labs/spacebin) Spacebin is a proof-of-concept malware that exfiltrates data (from No Direct Internet Access environments) via triggering AV on the endpoint and then communicating back from the AV's cloud component.
+- [**75**Star][5d] [Py] [s2e/docs](https://github.com/s2e/docs) Documentation and Quick Start Guides for the S2E Symbolic Execution Platform
+- [**75**Star][2y] [C] [rtlsdrblog/tempestsdr](https://github.com/rtlsdrblog/tempestsdr) Remote video eavesdropping using a software-defined radio platform
+- [**75**Star][4y] [Shell] [rossmairm/pentools](https://github.com/rossmairm/pentools) This is a bundle of python and bash penetration testing tools for recon and information gathering.
+- [**75**Star][1y] [ObjC] [ret2/p2o_2018](https://github.com/ret2/p2o_2018)
+- [**75**Star][5y] [C++] [quangnh89/ollycapstone](https://github.com/quangnh89/ollycapstone) This is a plugin for OllyDbg 1.10 to replace the old disasm engine by Capstone disassembly/disassembler framework.
+- [**75**Star][4y] [PS] [pwdrkeg/honeyport](https://github.com/pwdrkeg/honeyport) A powershell script for creating a Windows honeyport.
+- [**75**Star][2y] [JS] [polaris64/web_exploit_detector](https://github.com/polaris64/web_exploit_detector) web_exploit_detector:检测 Web hosting 环境中可能的感染、恶意代码和可疑文件。Node.js 应用程序。
+- [**75**Star][18d] [C] [ntraiseharderror/antimalware-research](https://github.com/ntraiseharderror/antimalware-research) Research on Anti-malware and other related security solutions
+- [**75**Star][18d] [Py] [nightwatchcybersecurity/truegaze](https://github.com/nightwatchcybersecurity/truegaze) Static analysis tool for Android/iOS apps focusing on security issues outside the source code
+- [**75**Star][3d] [C] [naworkcaj/bdvl](https://github.com/naworkcaj/bdvl) LD_PRELOAD Linux rootkit (x86 & ARM)
+- [**75**Star][9m] [misterch0c/crimeboards](https://github.com/misterch0c/crimeboards) A list of private and public (more or less) blackhat boards
+- [**75**Star][6m] [C] [milabs/khook](https://github.com/milabs/khook) Linux Kernel hooking engine (x86)
+- [**75**Star][3y] [magoo/incident-response-plan](https://github.com/magoo/incident-response-plan) Boilerplate Incident Response Plan from "Starting Up Security"
+- [**75**Star][30d] [Py] [m8r0wn/pymeta](https://github.com/m8r0wn/pymeta) 搜索某域名网站的文件,下载并提取元数据, 例如: 域名、用户名、软件版本号、命名约定等
+- [**75**Star][4m] [AutoIt] [jschicht/logfileparser](https://github.com/jschicht/logfileparser) Parser for $LogFile on NTFS
+- [**75**Star][1y] [HTML] [johnlatwc/msrc](https://github.com/johnlatwc/msrc) Scripts for interacting with MSRC portal data
+- [**75**Star][11m] [JS] [j0nathanj/publications](https://github.com/j0nathanj/publications) Slides, exploits and PoCs :)
+- [**75**Star][3y] [Py] [j0bin/pentest-resources](https://github.com/j0bin/pentest-resources)
+- [**75**Star][3m] [ivbeg/awesome-forensicstools](https://github.com/ivbeg/awesome-forensicstools) Awesome list of digital forensic tools
+- [**75**Star][11m] [Ruby] [iagox86/poracle](https://github.com/iagox86/poracle)
+- [**75**Star][12m] [C++] [hzqst/fuckcertverifytimevalidity](https://github.com/hzqst/fuckcertverifytimevalidity) This tiny project prevents the signtool from verifing cert time validity and let you sign your bin with outdated cert without changing system time manually
+- [**75**Star][8m] [Py] [huaisha1224/shadowsocks-client](https://github.com/huaisha1224/shadowsocks-client) The ShadowSocks client is a support multiple server port and password
+- [**75**Star][1y] [C++] [hrbust86/hookmsrbysvm](https://github.com/hrbust86/hookmsrbysvm) hook msr by amd svm
+- [**75**Star][14d] [Py] [highmeh/lure](https://github.com/highmeh/lure) Lure - User Recon Automation for GoPhish
+- [**75**Star][6y] [Py] [hiddenillusion/ipinfo](https://github.com/hiddenillusion/ipinfo) Searches various online resources to try and get as much info about an IP/domain as possible.
+- [**75**Star][3y] [PS] [harmj0y/misc-powershell](https://github.com/harmj0y/misc-powershell) Misc. PowerShell scripts
+- [**75**Star][6m] [Py] [hameda2/zydra](https://github.com/hameda2/zydra)
+- [**75**Star][1y] [Py] [hadojae/data](https://github.com/hadojae/data) Credential Phish Analysis and Automation
+- [**75**Star][3m] [gouveaheitor/awesome-biohacking](https://github.com/gouveaheitor/awesome-biohacking)
+- [**75**Star][17d] [Py] [fopina/kdbxpasswordpwned](https://github.com/fopina/kdbxpasswordpwned) Check KeePass passwords against
+- [**75**Star][7y] [JS] [evilpacket/xss.io](https://github.com/evilpacket/xss.io)
+- [**75**Star][8m] [edelahozuah/awesome-wifi-security](https://github.com/edelahozuah/awesome-wifi-security) A collection of awesome resources related to 802.11 security, tools and other things
+- [**75**Star][4d] [Java] [dschadow/javasecurity](https://github.com/dschadow/javasecurity) Java web and command line applications demonstrating various security topics
+- [**75**Star][4y] [Java] [directdefense/superserial](https://github.com/directdefense/superserial) SuperSerial - Burp Java Deserialization Vulnerability Identification
+- [**75**Star][5y] [C] [dinotools/sslscan](https://github.com/dinotools/sslscan) SSLScan tests SSL/TLS enabled services to discover supported cipher suites
+- [**75**Star][2y] [C] [dadas190/heavens-gate-2.0](https://github.com/dadas190/heavens-gate-2.0) Executes 64bit code from a 32bit process
+- [**75**Star][3m] [Py] [coldzer0/ida-for-delphi](https://github.com/coldzer0/ida-for-delphi) IDA Python Script to Get All function names from Event Constructor (VCL)
+- [**75**Star][26d] [C++] [clrx/clrx-mirror](https://github.com/clrx/clrx-mirror) CLRadeonExtender (GCN assembler, Radeon assembler) mirror
+- [**75**Star][2y] [Go] [calidog/certstream-go](https://github.com/calidog/certstream-go) Go library for connecting to CertStream
+- [**75**Star][3y] [Py] [antojoseph/diff-droid](https://github.com/antojoseph/diff-droid) Various Scripts for Mobile Pen-testing with Frida
+- [**75**Star][4y] [Py] [ahhh/reverse_https_bot](https://github.com/ahhh/reverse_https_bot) A python based https remote access trojan for penetration testing
+- [**74**Star][3m] [cisco-talos/snort-faq](https://github.com/cisco-talos/snort-faq) Snort FAQ
+- [**74**Star][7y] [Ruby] [pentestgeek/scripts](https://github.com/pentestgeek/scripts) A collection of useful scripts for penetration testers
+- [**74**Star][3y] [wtsxdev/android-security-list](https://github.com/wtsxdev/android-security-list) Collection of Android security related resources
+- [**74**Star][3y] [HTML] [dxa4481/damn-vulnerable-redis-container](https://github.com/dxa4481/damn-vulnerable-redis-container) An example of obtaining RCE via Redis and CSRF
+- [**74**Star][24d] [JS] [andreafioraldi/frida-js-afl-instr](https://github.com/andreafioraldi/frida-js-afl-instr) An example on how to do performant in-memory fuzzing with AFL++ and Frida
+- [**74**Star][1m] [Py] [boypt/vmess2json](https://github.com/boypt/vmess2json) Scripts parse vmess:// links into v2ray config json and vice versa.
+- [**74**Star][5y] [Py] [ivanlei/airodump-iv](https://github.com/ivanlei/airodump-iv) A python implementation of airodump-ng
+- [**74**Star][1m] [Go] [edoverflow/csp](https://github.com/edoverflow/csp) Given a list of hosts, this small utility fetches all whitelisted domains from the hosts' CSPs.
+- [**74**Star][5m] [HTML] [ph0en1x-xmu/awesome-ctf-book](https://github.com/Ph0en1x-XMU/Awesome-CTF-Book) Study CTF, study security
+- [**74**Star][4m] [Py] [lazorfuzz/python-hacklib](https://github.com/lazorfuzz/python-hacklib) hacklib - pentesting, port scanning, and logging in anywhere with Python
+- [**74**Star][2y] [C] [deeptechlabs/meltdown](https://github.com/deeptechlabs/meltdown) Local Exploit for Meltdown
+- [**74**Star][2y] [Py] [shmilylty/cheetah-gui](https://github.com/shmilylty/cheetah-gui) Cheetah GUI
+- [**74**Star][3y] [C++] [avatarone/avatar-python](https://github.com/avatarone/avatar-python) Dynamic security analysis of embedded systems’ firmwares
+- [**74**Star][1y] [Py] [yoda66/androidembedit](https://github.com/yoda66/androidembedit) A quick and dirty python script to embed a Metasploit generated APK file into another APK for fun.
+- [**74**Star][8m] [C] [vanhoefm/dragonslayer](https://github.com/vanhoefm/dragonslayer)
+- [**74**Star][4y] [Visual Basic .NET] [twi1ight/ad-pentest-script](https://github.com/twi1ight/ad-pentest-script) Active Directory pentest scripts
+- [**74**Star][1y] [tianjifou/ios-security-attack-and-prevent](https://github.com/tianjifou/ios-security-attack-and-prevent) iOS安全攻与防,详细的列出了,在iOS开发中,项目会存在的安全漏洞以及解决办法。
+- [**74**Star][5y] [Py] [tandasat/winioctldecoder](https://github.com/tandasat/winioctldecoder) IDA Plugin which decodes Windows Device I/O control code into DeviceType, FunctionCode, AccessType and MethodType.
+- [**74**Star][5m] [Jupyter Notebook] [surajr/url-classification](https://github.com/surajr/url-classification) Machine learning to classify Malicious (Spam)/Benign URL's
+- [**74**Star][3y] [Py] [spotify/gcp-firewall-enforcer](https://github.com/spotify/gcp-firewall-enforcer) A toolbox to enforce firewall rules across multiple GCP projects.
+- [**74**Star][7m] [PHP] [s9mf/s9mf-php-webshell-bypass](https://github.com/s9mf/s9mf-php-webshell-bypass) 为方便WAF入库的项目 | 分享PHP免杀大马 | 菜是原罪 | 多姿势(假的就一个)
+- [**74**Star][3y] [Py] [ropnop/xxetimes](https://github.com/ropnop/xxetimes) An interactive OOB XXE data exfiltration tool
+- [**74**Star][1y] [Py] [pielco11/dot](https://github.com/pielco11/dot) Darknet OSINT Transform
+- [**74**Star][1m] [Rust] [phayes/sidefuzz](https://github.com/phayes/sidefuzz) Fuzzer to automatically find side-channel (timing) vulnerabilities
+- [**74**Star][6d] [Py] [patrowl/patrowlengines](https://github.com/patrowl/patrowlengines) PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform
+- [**74**Star][3y] [Java] [panagiotisdrakatos/javaransomware](https://github.com/panagiotisdrakatos/javaransomware) Simple Ransomware Tool in Pure Java
+- [**74**Star][8m] [Dockerfile] [owasp/sonarqube](https://github.com/owasp/sonarqube) OWASP SonarQube Project
+- [**74**Star][11m] [Visual Basic .NET] [nyan-x-cat/lime-miner](https://github.com/nyan-x-cat/lime-miner) a simple hidden silent XMR miner.
+- [**74**Star][3m] [C++] [noddos/noddos](https://github.com/noddos/noddos) noddos:Noddos 客户端,监视家庭或企业网络中的网络流量,识别 IoT 和其他设备,并将特定设备的ACL应用于已识别设备的流量。 其目标是识别并阻止来自已被黑客控制的设备的流氓流量(例如在 DDOS 攻击的流量)
+- [**74**Star][3y] [JS] [nmaier/about-addons-memory](https://github.com/nmaier/about-addons-memory) Tiny prototype Firefox extension presenting the memory usage of all active add-ons
+- [**74**Star][2y] [JS] [mtjailed/unjailme](https://github.com/mtjailed/unjailme) A sandbox escape based on the proof-of-concept (CVE-2018-4087) by Rani Idan (Zimperium)
+- [**74**Star][3m] [PS] [mdavis332/domainpasswordspray](https://github.com/mdavis332/domainpasswordspray) DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. It will automatically generate a userlist from the domain which excludes accounts that are expired, disabled locked out, or within 1 lockout attempt.
+- [**74**Star][6y] [Py] [matir/pwnableweb](https://github.com/matir/pwnableweb) PwnableWeb is a suite of web applications for use in information security training.
+- [**74**Star][3y] [Go] [matiasinsaurralde/transports](https://github.com/matiasinsaurralde/transports) A HTTP proxy that aims to support different transports.
+- [**74**Star][2y] [C] [makefu/dnsmap](https://github.com/makefu/dnsmap) fork of
+- [**74**Star][6y] [l3m0n/xss-filter-evasion-cheat-sheet-cn](https://github.com/l3m0n/xss-filter-evasion-cheat-sheet-cn) XSS_Filter_Evasion_Cheat_Sheet 中文版
+- [**74**Star][3y] [HTML] [l3m0n/wooyun-wiki](https://github.com/l3m0n/wooyun-wiki) wiki.wooyun.org的部分快照网页
+- [**74**Star][2y] [C++] [kasperskylab/forensicstools](https://github.com/kasperskylab/forensicstools) Tools for DFIR
+- [**74**Star][4y] [Py] [integrissecurity/carbonator](https://github.com/integrissecurity/carbonator) Integris Security Carbonator - The Burp Suite Pro extension that automates scope, spider & scan from the command line. Carbonator helps automate the vulnerability scanning of web applications. Either 1 or 100 web applications can be scanned by issuing a single command. Carbonator is now available from within Burp Suite Pro through the BApp Store.
+- [**74**Star][28d] [grapheneos/platform_manifest](https://github.com/grapheneos/platform_manifest) Repo manifest for the GrapheneOS mobile privacy and security hardening project.
+- [**74**Star][2y] [Py] [gento/dionaea](https://github.com/gento/dionaea) dionaea:低交互蜜罐
+- [**74**Star][3y] [Py] [ganapati/crawlic](https://github.com/ganapati/crawlic) Web recon tool (find temporary files, parse robots.txt, search some folders, google dorks and search domains hosted on same server)
+- [**74**Star][6y] [C++] [gamebooster/dota2-lua-engine](https://github.com/gamebooster/dota2-lua-engine) Lua Scripting Engine for Dota 2
+- [**74**Star][2y] [C#] [foxglovesec/hpwn](https://github.com/foxglovesec/hpwn) HP printer security research code
+- [**74**Star][11m] [C] [forte-research/untracer-afl](https://github.com/forte-research/untracer-afl) An AFL implementation with UnTracer (our coverage-guided tracer)
+- [**74**Star][7m] [Makefile] [florianutz/ubuntu1604-cis](https://github.com/florianutz/ubuntu1604-cis) Ubuntu CIS Hardening Ansible Role
+- [**74**Star][2y] [C++] [eyeofra/winconmon](https://github.com/eyeofra/winconmon) Windows Console Monitoring
+- [**74**Star][4y] [Py] [einstein-/poodle](https://github.com/einstein-/poodle) A Proof of Concept for the POODLE vulnerability in SSLv3
+- [**74**Star][2m] [Shell] [edu4rdshl/tor-router](https://github.com/edu4rdshl/tor-router) A tool that allow you to make TOR your default gateway and send all internet connections under TOR (as transparent proxy) for increase privacy/anonymity without extra unnecessary code.
+- [**74**Star][1y] [Py] [dobin/ffw](https://github.com/dobin/ffw) A fuzzing framework for network servers
+- [**74**Star][3m] [Lua] [dns-oarc/drool](https://github.com/dns-oarc/drool) DNS Replay Tool
+- [**74**Star][5y] [Py] [dmayer/time_trial](https://github.com/dmayer/time_trial) Time Trial - A tool for performing feasibility analyses of timing attacks
+- [**74**Star][4y] [Go] [dlion/guesstor](https://github.com/dlion/guesstor) Bruteforces [.onion] domains
+- [**74**Star][3m] [Ruby] [devunwired/apktools](https://github.com/devunwired/apktools) Ruby library for reading/parsing APK resource data
+- [**74**Star][13d] [Ruby] [david942j/heapinfo](https://github.com/david942j/heapinfo) An interactive memory info for pwning / exploiting
+- [**74**Star][6m] [Py] [cve-search/via4cve](https://github.com/cve-search/via4cve) Vulnerability Information Aggregator for CVEs
+- [**74**Star][8m] [Go] [coreos/torcx](https://github.com/coreos/torcx) torcx is a boot-time addon manager for immutable systems
+- [**74**Star][3y] [Py] [compoterhacker/mehrai](https://github.com/compoterhacker/mehrai) docker based telnet honeypot
+- [**74**Star][10d] [C] [certificate-helper/tls-inspector](https://github.com/certificate-helper/tls-inspector) Easily view and inspect X.509 certificates on your iOS device.
+- [**74**Star][2y] [Py] [busindre/dumpzilla](https://github.com/busindre/dumpzilla) Extract all forensic interesting information of Firefox, Iceweasel and Seamonkey browsers
+- [**74**Star][7m] [Py] [bannsec/stegoveritas](https://github.com/bannsec/stegoveritas) Yet another Stego Tool
+- [**74**Star][2y] [Assembly] [azeria-labs/arm-assembly-examples](https://github.com/azeria-labs/arm-assembly-examples) Snippets from ARM assembly tutorials
+- [**74**Star][2m] [Py] [anvilventures/lookinsidethebox](https://github.com/anvilventures/lookinsidethebox) Breaks the encryption and obfuscation layers that Dropbox applies to their modified Python interpreter.
+- [**74**Star][2y] [HTML] [anquanquantao/pentraining](https://github.com/anquanquantao/pentraining) 一个网络安全基础知识的教程。内容比较杂,好在都是实验视频和工具提供,可以自行动手完成实验。
+- [**74**Star][2y] [Batchfile] [aghorler/windows-10-hardening](https://github.com/aghorler/windows-10-hardening) An admittedly frivolous (and infrequently updated) attempt to harden Windows 10.
+- [**74**Star][2y] [233boy/chinaip](https://github.com/233boy/chinaip) 中国大陆 IP 列表(已优化)
+- [**74**Star][4m] [C++] [0xeb/ida-qscripts](https://github.com/0xeb/ida-qscripts) An IDA plugin to increase productivity when developing scripts for IDA
+- [**74**Star][8m] [Go] [0x9ef/golang-uacbypasser](https://github.com/0x9ef/golang-uacbypasser) UAC bypass techniques implemented and written in Go
+- [**73**Star][23d] [Py] [nict-csl/exist](https://github.com/nict-csl/exist) EXIST is a web application for aggregating and analyzing cyber threat intelligence.
+- [**73**Star][13d] [Py] [openscap/openscap-daemon](https://github.com/openscap/openscap-daemon) Manages continuous scans of your infrastructure
+- [**73**Star][5y] [C] [cloudsec/exploit](https://github.com/cloudsec/exploit) Some kernel exploit i wrote
+- [**73**Star][3y] [Py] [programa-stic/hexag00n](https://github.com/programa-stic/hexag00n) Hexag00n: A collection of reverse engineering tools for the Qualcomm Digital Signal Proccesor (QDSP6)
+- [**73**Star][4y] [Py] [veil-framework/veil-catapult](https://github.com/veil-framework/veil-catapult) Veil Catapult is no longer supported
+- [**73**Star][20d] [yingtongdou/graph-adversarial-learning-literature](https://github.com/yingtongdou/graph-adversarial-learning-literature) A curated list of adversarial learning papers on graph-structured data.
+- [**73**Star][10m] [C#] [checkymander/sharp-smbexec](https://github.com/checkymander/Sharp-SMBExec) SMBExec C# module
+- [**73**Star][3m] [Py] [acmesec/ctfcracktools-v2](https://github.com/Acmesec/CTFCrackTools-V2) China's first CTFTools framework.中国国内首个CTF工具框架,旨在帮助CTFer快速攻克难关
+- [**73**Star][4y] [Shell] [ctfhacker/ctf-vagrant-64](https://github.com/ctfhacker/ctf-vagrant-64)
+- [**73**Star][3y] [Py] [zhanghangorg/sqlinj-ant](https://github.com/zhanghangorg/sqlinj-ant) 伪分布式SQL注入自动扫描
+- [**73**Star][2y] [HTML] [xuechiyaobai/v8_november_2017](https://github.com/xuechiyaobai/v8_november_2017)
+- [**73**Star][1y] [C++] [xrobots/robotx](https://github.com/xrobots/robotx) All the things for RobotX
+- [**73**Star][3y] [C] [xpn/ssh-inject](https://github.com/xpn/ssh-inject) A ptrace POC by hooking SSH to reveal provided passwords
+- [**73**Star][7m] [C++] [watersalesman/aura-botnet](https://github.com/watersalesman/aura-botnet) A super portable botnet framework with a Django-based C2 server. The client is written in C++, with alternate clients written in Rust, Bash, and Powershell.
+- [**73**Star][6m] [tigaxmt/hackerone-lessons](https://github.com/tigaxmt/hackerone-lessons) Transcribed video lessons of HackerOne to pdf's
+- [**73**Star][2y] [Shell] [te-papa/aws-key-disabler](https://github.com/te-papa/aws-key-disabler) aws-key-disabler: 禁用超过指定日期的 AWS 访问key
+- [**73**Star][2y] [Py] [sumoprojects/sumoeasyminer](https://github.com/sumoprojects/sumoeasyminer) The most easy, intuitive CPU miner for cryptonote-based cryptocurrency
+- [**73**Star][2y] [Java] [spiderlabs/burplay](https://github.com/spiderlabs/burplay) Burplay is a Burp Extension allowing for replaying any number of requests using same modifications definition. Its main purpose is to aid in searching for Privilege Escalation issues.
+- [**73**Star][4m] [Assembly] [siguza/aprr](https://github.com/siguza/aprr) Apple hardware secrets
+- [**73**Star][24d] [C++] [sidyhe/dxx](https://github.com/sidyhe/dxx) Windows Kernel Driver with C++ runtime
+- [**73**Star][3m] [C++] [shellvm/shellvm](https://github.com/shellvm/shellvm) A collection of LLVM transform and analysis passes to write shellcode in regular C
+- [**73**Star][12m] [C] [securifera/servicefu](https://github.com/securifera/servicefu) Automates credential skimming from service accounts in Windows Registry
+- [**73**Star][2m] [Py] [rub-syssec/grimoire](https://github.com/rub-syssec/grimoire)
+- [**73**Star][3y] [C++] [rrbranco/blackhat2016](https://github.com/rrbranco/blackhat2016) Black Hat 2016 Slides, Paper and Code
+- [**73**Star][5y] [C++] [rrbranco/blackhat2012](https://github.com/rrbranco/blackhat2012) Blackhat 2012 Sample Codes
+- [**73**Star][9d] [JS] [ralphwetzel/theonionbox](https://github.com/ralphwetzel/theonionbox) Dashboard to monitor Tor node operations
+- [**73**Star][2y] [Py] [qianniaoge/f-scrack](https://github.com/qianniaoge/f-scrack) 一款python编写的轻量级弱口令检测脚本,目前支持以下服务:FTP、MYSQL、MSSQL、MONGODB、REDIS、TELNET、ELASTICSEARCH、POSTGRESQL。
+- [**73**Star][1m] [C] [puppet-meteor/mopt-afl](https://github.com/puppet-meteor/mopt-afl) MOpt-AFL provided by the paper "MOPT: Optimized Mutation Scheduling for Fuzzers"
+- [**73**Star][4y] [PHP] [phith0n/b374k](https://github.com/phith0n/b374k) PHP Webshell with handy features
+- [**73**Star][3y] [PHP] [nmalcolm/ipcamshell](https://github.com/nmalcolm/ipcamshell) IP Cam Shell is a command line script for testing and exploiting a wide range of IP cameras as demonstrated by Craig Heffner in "Exploiting Surveillance Cameras Like a Hollywood Hacker". See the slides here:
+- [**73**Star][4y] [C] [nihilus/ida_signsrch](https://github.com/nihilus/ida_signsrch) IDA Pro plug-in conversion of Luigi Auriemma's signsrch signature matching tool.
+- [**73**Star][10m] [Py] [msuhanov/yarp](https://github.com/msuhanov/yarp) Yet another registry parser
+- [**73**Star][6y] [Shell] [mkottman/luacrypto](https://github.com/mkottman/luacrypto) Fork of LuaCrypto, which enables encryption and decryption through OpenSSL
+- [**73**Star][Py] [minisafe/microscan](https://github.com/minisafe/microscan) MicroScan 基于B/S架构微扫描器
+- [**73**Star][5m] [Py] [milo2012/ipv4bypass](https://github.com/milo2012/ipv4bypass) 利用ipV6绕过安全防护
+- [**73**Star][4y] [Py] [marekrei/theano-tutorial](https://github.com/marekrei/theano-tutorial) Basic Theano code samples
+- [**73**Star][3y] [lcatro/hacker_document](https://github.com/lcatro/hacker_document) 收集一些以前看过对于入门和进阶很有用的攻击原理文档..
+- [**73**Star][2y] [C++] [koemeet/rtti-obfuscator](https://github.com/koemeet/rtti-obfuscator) Obfuscates all RTTI (Run-time type information) inside a binary
+- [**73**Star][4y] [Py] [johnmaguire/cardinal](https://github.com/johnmaguire/cardinal) A Python IRC bot, designed to make adding functionality quick and simple.
+- [**73**Star][1m] [HTML] [jmortega/python-pentesting](https://github.com/jmortega/python-pentesting) python-pentesting-tool
+- [**73**Star][7m] [Py] [jiangsir404/pbscan](https://github.com/jiangsir404/pbscan) 基于burpsuite headless 的代理式被动扫描系统
+- [**73**Star][21d] [Py] [internetarchive/warctools](https://github.com/internetarchive/warctools) Command line tools and libraries for handling and manipulating WARC files (and HTTP contents)
+- [**73**Star][3y] [Shell] [inquisb/unix-privesc-check](https://github.com/inquisb/unix-privesc-check) Shell script that runs on UNIX systems (tested on Solaris 9, HPUX 11, various Linux distributions, FreeBSD 6.2). It detects misconfigurations that could allow local unprivileged user to escalate to other users (e.g. root) or to access local apps (e.g. databases). This is a collaborative rework of version 1.0
+- [**73**Star][3y] [Go] [grahamedgecombe/ct-submit](https://github.com/grahamedgecombe/ct-submit) A program for submitting X.509 certificate chains to Certificate Transparency log servers.
+- [**73**Star][1y] [Ruby] [fbkcs/msf-elf-in-memory-execution](https://github.com/fbkcs/msf-elf-in-memory-execution) msf-elf-in-memory-execution: Metasploit模块, 用于在内存中执行ELF文件
+- [**73**Star][2y] [Ruby] [dyjakan/interpreter-bugs](https://github.com/dyjakan/interpreter-bugs) Fuzzing results for various interpreters.
+- [**73**Star][9m] [C++] [doublelabyrinth/sdokeycrypt-sys-local-privilege-elevation](https://github.com/doublelabyrinth/sdokeycrypt-sys-local-privilege-elevation) CVE-2019-9729
+- [**73**Star][1y] [Py] [dionach/panhunt](https://github.com/dionach/panhunt) PANhunt searches for credit card numbers (PANs) in directories.
+- [**73**Star][9m] [Verilog] [denandz/lpc_sniffer_tpm](https://github.com/denandz/lpc_sniffer_tpm) A low pin count sniffer for ICEStick - targeting TPM chips
+- [**73**Star][1y] [PS] [decoder-it/psportfwd](https://github.com/decoder-it/psportfwd) psportfwd: PowerShell编写的端口转发工具, 无需admin权限
+- [**73**Star][2y] [HTML] [cyberheartmi9/payloadsallthethings](https://github.com/cyberheartmi9/payloadsallthethings)
+- [**73**Star][5y] [C] [cooloppo/reclass](https://github.com/cooloppo/reclass) A tool for reconstructing data types based on memory - [Outdated; use ReClassEx]
+- [**73**Star][3y] [Visual Basic .NET] [cn33liz/vbsmeter](https://github.com/cn33liz/vbsmeter) VBS Reversed TCP Meterpreter Stager
+- [**73**Star][3y] [Py] [carlosgprado/brundlefuzz](https://github.com/carlosgprado/brundlefuzz) BrundleFuzz is a distributed fuzzer for Windows and Linux using dynamic binary instrumentation.
+- [**73**Star][1y] [Java] [bit4woo/u2c](https://github.com/bit4woo/u2c) Unicode To Chinese -- U2C : A burpsuite Extender That Convert Unicode To Chinese 【Unicode编码转中文的burp插件】
+- [**73**Star][1y] [Batchfile] [b4rtik/hiddenpowershelldll](https://github.com/b4rtik/hiddenpowershelldll)
+- [**73**Star][7m] [Go] [audibleblink/letsproxy](https://github.com/audibleblink/letsproxy) Quickly fetch Let's Encrypt certs and serve a reverse proxy
+- [**73**Star][5y] [Shell] [andrewmichaelsmith/honeypot-setup-script](https://github.com/andrewmichaelsmith/honeypot-setup-script) Honeypot (Dionaea and kippo) setup script
+- [**73**Star][16d] [C++] [3gstudent/homework-of-c-language](https://github.com/3gstudent/homework-of-c-language) C/C++ code examples of my blog.
+- [**72**Star][5m] [C] [zhengshoujian/darknet-yolo-segmentation](https://github.com/zhengshoujian/darknet-yolo-segmentation) This project is based on darknet to get image segmentation
+- [**72**Star][9d] [Py] [golismero/openvas_lib](https://github.com/golismero/openvas_lib) OpenVAS connector for versions 6, 7, 8 and 9
+- [**72**Star][1y] [C] [shellphish/afl-other-arch](https://github.com/shellphish/afl-other-arch) AFL, with scripts to support other architectures.
+- [**72**Star][1y] [v2ray/discussion](https://github.com/v2ray/discussion) For general discussion over Project V development and usage.
+- [**72**Star][2y] [Go] [wallix/triplestore](https://github.com/wallix/triplestore) Nifty library to manage, query and store RDF triples. Make RDF great again!
+- [**72**Star][2y] [C++] [wyexe/lol_china](https://github.com/wyexe/LOL_China)
+- [**72**Star][2d] [thehive-project/cortexdocs](https://github.com/TheHive-Project/CortexDocs) Documentation of Cortex
+- [**72**Star][2y] [zntfdr/awesome-twitter-bots](https://github.com/zntfdr/awesome-twitter-bots) A Curated Collection of the Best Twitter Bots
+- [**72**Star][3y] [C++] [zcgonvh/ms16-032](https://github.com/zcgonvh/ms16-032) MS16-032(CVE-2016-0099) for SERVICE ONLY
+- [**72**Star][3y] [Go] [xsec-lab/x-waf-admin](https://github.com/xsec-lab/x-waf-admin) x-waf的web管理后台
+- [**72**Star][4y] [Pascal] [xlinshan/coldroot](https://github.com/xlinshan/coldroot) Mac OS Trojan (RAT) made with love <3
+- [**72**Star][7d] [Py] [xfreed0m/smtptester](https://github.com/xfreed0m/smtptester) small python3 tool to check common vulnerabilities in SMTP servers
+- [**72**Star][2y] [C++] [vusec/guardion](https://github.com/vusec/guardion) Android GuardION patches to mitigate DMA-based Rowhammer attacks on ARM
+- [**72**Star][3y] [vrtadmin/first](https://github.com/vrtadmin/first) Function Identification and Recovery Signature Tool
+- [**72**Star][2y] [C++] [vecna/sniffjoke](https://github.com/vecna/sniffjoke) a client-only layer of protection from the wiretap/sniff/IDS analysis
+- [**72**Star][3m] [vanhauser-thc/afl-patches](https://github.com/vanhauser-thc/afl-patches) Patches to afl to fix bugs or add enhancements
+- [**72**Star][27d] [Dart] [timsneath/github-tracker](https://github.com/timsneath/github-tracker) Grabs some useful information from GitHub.
+- [**72**Star][3y] [C] [tillmannw/honeytrap](https://github.com/tillmannw/honeytrap) a low-interaction honeypot
+- [**72**Star][3y] [Perl] [tanjiti/fingerprint](https://github.com/tanjiti/fingerprint) web应用指纹识别
+- [**72**Star][2y] [ObjC] [sunweiliang/baiduyuncrack](https://github.com/sunweiliang/baiduyuncrack) iOS百度云盘 破解速度限制、去广告、去更新 无需越狱~
+- [**72**Star][19d] [XSLT] [spring-cloud/spring-cloud-stream-starters](https://github.com/spring-cloud/spring-cloud-stream-starters)
+- [**72**Star][2y] [Py] [skelsec/cve-2017-12542](https://github.com/skelsec/cve-2017-12542) Test and exploit for CVE-2017-12542
+- [**72**Star][6m] [HTML] [securityautomation/dumpthegit](https://github.com/securityautomation/dumpthegit) DumpTheGit searches through public repositories to find sensitive information uploaded to the Github repositories.
+- [**72**Star][3y] [Py] [scumsec/recon-ng-modules](https://github.com/scumsec/recon-ng-modules) Additional modules for recon-ng
+- [**72**Star][3y] [Py] [roothaxor/ransom](https://github.com/roothaxor/ransom) Various codes related to Ransomware Developement
+- [**72**Star][1y] [JS] [rameshaditya/ducky](https://github.com/rameshaditya/ducky) Chrome extension to overlay a (super adorable) rubber duck, as a virtual companion during rubber duck debugging.
+- [**72**Star][6m] [Py] [pyobfx/pyobfx](https://github.com/pyobfx/pyobfx) Python Obfuscator & Packer
+- [**72**Star][2m] [JS] [purplei2p/i2pdbrowser](https://github.com/purplei2p/i2pdbrowser) i2pd browser bundle
+- [**72**Star][16d] [C++] [powerdns/weakforced](https://github.com/powerdns/weakforced) Anti-Abuse for servers at authentication time
+- [**72**Star][6y] [Py] [piccimario/iphone-backup-analyzer-2](https://github.com/piccimario/iphone-backup-analyzer-2) iPBA, Qt version
+- [**72**Star][9m] [C++] [niklasb/bspfuzz](https://github.com/niklasb/bspfuzz)
+- [**72**Star][4y] [ObjC] [mubix/ditto](https://github.com/mubix/ditto) Binary resource copier
+- [**72**Star][6y] [PS] [mattifestation/powerworm](https://github.com/mattifestation/powerworm) Analysis, detection, and removal of the "Power Worm" PowerShell-based malware
+- [**72**Star][5y] [C++] [malwaretech/zombifyprocess](https://github.com/malwaretech/zombifyprocess) Inject code into a legitimate process
+- [**72**Star][7y] [C] [machn1k/scalpel-2.0](https://github.com/machn1k/scalpel-2.0) Scalpel; File Carving. Configuration files are modified.
+- [**72**Star][7m] [TS] [louisvillemetro/wazeccpprocessor](https://github.com/louisvillemetro/wazeccpprocessor) Waze WARP takes your CCP data feed and processes it into your cloud provider for access, analysis, and visualization. An Open Government Coalition (OGC) project.
+- [**72**Star][3y] [Py] [lorexxar/bscanner](https://github.com/lorexxar/bscanner) 一直没有顺手的扫描器,那就自己写一个吧
+- [**72**Star][1y] [Py] [lixmk/concierge](https://github.com/lixmk/concierge) Physical Access Control Identification and Exploitation
+- [**72**Star][5y] [Py] [ksoona/attackvector](https://github.com/ksoona/attackvector) AttackVector Linux
+- [**72**Star][6y] [C] [jtripper/sslnuke](https://github.com/jtripper/sslnuke) Transparent proxy that decrypts SSL traffic and prints out IRC messages.
+- [**72**Star][5y] [Py] [joridos/custom-ssh-backdoor](https://github.com/joridos/custom-ssh-backdoor) Custom ssh backdoor, coded in python using Paramiko
+- [**72**Star][4d] [jawz101/mobileadtrackers](https://github.com/jawz101/mobileadtrackers) Taken from DNS logs while actively using Android apps over the years. Formatted in hostfile format.
+- [**72**Star][3y] [PS] [jaredhaight/invoke-metasploitpayload](https://github.com/jaredhaight/invoke-metasploitpayload) Powershell script to download and kick off Metasploit payloads. Relies on the exploit/multi/scripts/web_delivery metasploit module.
+- [**72**Star][17d] [Zeek] [hosom/file-extraction](https://github.com/hosom/file-extraction) Extract files from network traffic with Bro.
+- [**72**Star][2y] [C++] [hexhive/hextype](https://github.com/hexhive/hextype) HexType: Efficient Detection of Type Confusion Errors for C++
+- [**72**Star][3y] [Py] [hak5darren/bashbunny-payloads](https://github.com/hak5darren/bashbunny-payloads) Payloads for the Hak5 Bash Bunny
+- [**72**Star][5y] [Py] [feliam/cve-2014-4377](https://github.com/feliam/cve-2014-4377)
+- [**72**Star][8m] [C] [ez-flash/omega-kernel](https://github.com/ez-flash/omega-kernel) EZ-FLASH OMEGA Kernel
+- [**72**Star][4y] [Py] [exp0se/harbinger](https://github.com/exp0se/harbinger) Harbinger Threat Intelligence
+- [**72**Star][2y] [Py] [embedi/meloader](https://github.com/embedi/meloader) Intel Management Engine firmware loader plugin for IDA
+- [**72**Star][2y] [Py] [denglend/decode345](https://github.com/denglend/decode345) Honeywell 345 Mhz decoding
+- [**72**Star][4y] [david415/ansible-tor](https://github.com/david415/ansible-tor) An Ansible role for using tor!
+- [**72**Star][3m] [JS] [cveproject/automation-working-group](https://github.com/cveproject/automation-working-group) CVE Automation Working Group
+- [**72**Star][1y] [C] [chinatiny/inlinehooklib](https://github.com/chinatiny/inlinehooklib) 同时支持用户和内核模式的Inlinehook库
+- [**72**Star][9d] [Py] [cert-polska/n6](https://github.com/cert-polska/n6) Automated handling of data feeds for security teams
+- [**72**Star][1y] [C#] [c4bbage/pentestscripts](https://github.com/c4bbage/pentestscripts) 白名单利用代码、渗透工具
+- [**72**Star][8m] [Py] [busescanfly/rpi-hunter](https://github.com/busescanfly/rpi-hunter) Auto discover and exploit LAN raspberry pi's
+- [**72**Star][5y] [Py] [binsigma/binsourcerer](https://github.com/binsigma/binsourcerer) Assembly to Source Code Matching Framework for IDA Pro.
+- [**72**Star][3y] [Py] [antojoseph/droid-ff](https://github.com/antojoseph/droid-ff) Android File Fuzzing Framework
+- [**72**Star][2y] [Py] [angr/simuvex](https://github.com/angr/simuvex) [DEPRECATED] A symbolic execution engine for the VEX IR
+- [**72**Star][5y] [80vul/pasc2at](https://github.com/80vul/pasc2at) Php Application Source Code Audits Advanced Technology
+- [**72**Star][3m] [Go] [0xrawsec/golang-evtx](https://github.com/0xrawsec/golang-evtx) a parsing library for Windows EVTX log files.
+- [**71**Star][2y] [Py] [jiansiting/wpa2-krack](https://github.com/jiansiting/wpa2-krack)
+- [**71**Star][4y] [Ruby] [etsy/chef-whitelist](https://github.com/etsy/chef-whitelist) Simple library to enable host based rollouts of changes
+- [**71**Star][4m] [Py] [utkusen/rhodiola](https://github.com/utkusen/rhodiola) Personalized wordlist generator with NLP, by analyzing tweets. (A.K.A crunch2049)
+- [**71**Star][12d] [Shell] [nahamsec/crtndstry](https://github.com/nahamsec/crtndstry) Yet another subdomain finder
+- [**71**Star][5m] [Py] [k8gege/scrun](https://github.com/k8gege/scrun) BypassAV ShellCode Loader (Cobaltstrike/Metasploit)
+- [**71**Star][10d] [C++] [jeefo/yapb](https://github.com/jeefo/yapb) AI opponent for Counter-Strike based on POD-Bot 2.6
+- [**71**Star][27d] [C] [davidxanatos/taskexplorer](https://github.com/davidxanatos/taskexplorer) Power full Task Manager
+- [**71**Star][7m] [Py] [rmanofcn/ml_malware_detect](https://github.com/RManOfCN/ML_Malware_detect) 阿里云安全恶意程序检测比赛
+- [**71**Star][1m] [Jupyter Notebook] [mozilla/overscripted](https://github.com/mozilla/overscripted) Repository for the Mozilla Overscripted Data Mining Challenge
+- [**71**Star][6m] [Py] [jakobrpennington/information-security](https://github.com/JakobRPennington/information-security) A place where I can create, collect and share tooling, resources and knowledge about information security.
+- [**71**Star][7m] [C] [hc0d3r/alfheim](https://github.com/hc0d3r/alfheim) a linux process hacker tool
+- [**71**Star][7y] [Py] [mushorg/buttinsky](https://github.com/mushorg/buttinsky) Botnet monitoring is a crucial part in threat analysis and often neglected due to the lack of proper open source tools. Our tool will provide an open source framework for automated botnet monitoring. The modular design will allow full customization of the used protocols, the monitoring clients behavior, how we log the collected information, proc…
+- [**71**Star][2y] [C] [yrp604/atc-sources](https://github.com/yrp604/atc-sources) Attacking the Core associated source files
+- [**71**Star][3y] [Py] [xyntax/baiduyun-brute](https://github.com/xyntax/baiduyun-brute) [已失效] 多线程百度云(私密分享)密码爆破工具 pan.baidu.com
+- [**71**Star][2y] [Py] [x64dbg/mona](https://github.com/x64dbg/mona) Fork of mona.py with x64dbg support
+- [**71**Star][4y] [C++] [waleedassar/antidebug](https://github.com/waleedassar/antidebug) Collection Of Anti-Debugging Tricks
+- [**71**Star][6m] [PHP] [vlucas/pikirasa](https://github.com/vlucas/pikirasa) PKI public/private RSA key encryption using the OpenSSL extension
+- [**71**Star][1y] [Shell] [thelinuxchoice/keydroid](https://github.com/thelinuxchoice/keydroid) Android Keylogger + Reverse Shell
+- [**71**Star][3y] [Py] [tengzhangchao/microsoftspider](https://github.com/tengzhangchao/microsoftspider) 爬取微软漏洞信息,MS对应的每个版本操作系统KB号以及补丁下载地址。
+- [**71**Star][4m] [Py] [utkusen/rhodiola](https://github.com/utkusen/rhodiola) Personalized wordlist generator with NLP, by analyzing tweets. (A.K.A crunch2049)
+- [**71**Star][3y] [C++] [tandasat/eopmon](https://github.com/tandasat/eopmon) Elevation of privilege detector based on HyperPlatform
+- [**71**Star][2y] [Py] [soinull/assimilate](https://github.com/soinull/assimilate) Assimilate is a series of scripts for using the Naïve Bayes algorithm to find potential malicious activity in HTTP headers
+- [**71**Star][19d] [Py] [skelsec/msldap](https://github.com/skelsec/msldap) 从Active Directory中获取用户对象, 并将重要内容存储在一个大型电子表格中. 用于渗透期间快速识别易受攻击的用户设置
+- [**71**Star][2m] [HTML] [sisoc-tokyo/real-timedetectionad_ver2](https://github.com/sisoc-tokyo/real-timedetectionad_ver2)
+- [**71**Star][1y] [C] [shift-crops/escapeme](https://github.com/shift-crops/escapeme) TokyoWestens CTF 4th 2018 EscapeMe challenge
+- [**71**Star][6d] [C++] [rodneyviana/netext](https://github.com/rodneyviana/netext) WinDbg extension for data mining managed heap. It also includes commands to list http request, wcf services, WIF tokens among others
+- [**71**Star][16d] [Rust] [redsift/ingraind](https://github.com/redsift/ingraind) Data first monitoring agent using (e)BPF, built on RedBPF
+- [**71**Star][3y] [C] [rcvalle/vmmfuzzer](https://github.com/rcvalle/vmmfuzzer) A hypervisor or virtual machine monitor (VMM) fuzzer.
+- [**71**Star][3y] [C++] [razzile/liberation](https://github.com/razzile/liberation) A runtime patching library for iOS. Major rework on unfinished branch
+- [**71**Star][3y] [Shell] [ppabc/cc_iptables](https://github.com/ppabc/cc_iptables) 收集处理DDOS、CC攻击各类脚本,包括NGINX日志中的CC攻击IP处理。
+- [**71**Star][2y] [Shell] [opsxcq/exploit-cve-2014-6271](https://github.com/opsxcq/exploit-cve-2014-6271) Shellshock exploit + vulnerable environment
+- [**71**Star][1y] [PHP] [opsxcq/docker-vulnerable-dvwa](https://github.com/opsxcq/docker-vulnerable-dvwa) Damn Vulnerable Web Application Docker container
+- [**71**Star][2y] [HTML] [onplus/shadowsocks-websocket-python](https://github.com/onplus/shadowsocks-websocket-python) shadowsocks over WebSocket, support Heroku.
+- [**71**Star][3y] [Py] [nccgroup/ble-replay](https://github.com/nccgroup/ble-replay) BLE-Replay is a Bluetooth Low Energy (BLE) peripheral assessment tool
+- [**71**Star][2y] [Py] [n4xh4ck5/rastleak](https://github.com/n4xh4ck5/rastleak) Tool to automatic leak information using Hacking with engine searches
+- [**71**Star][6y] [Py] [mrnasro/zynos-attacker](https://github.com/mrnasro/zynos-attacker) ZynOS tool for automated attack on a range of IPs, find more informations at :
+- [**71**Star][3y] [C] [moyix/panda](https://github.com/moyix/panda) Deprecated repo for PANDA 1.0 – see PANDA 2.0 repository
+- [**71**Star][3y] [Py] [monnappa22/hollowfind](https://github.com/monnappa22/hollowfind) Hollowfind is a Volatility plugin to detect different types of process hollowing techniques used in the wild to bypass, confuse, deflect and divert the forensic analysis techniques. The plugin detects such attacks by finding discrepancy in the VAD and PEB, it also disassembles the address of entry point to detect any redirection attempts and als…
+- [**71**Star][19d] [Dockerfile] [mko-x/docker-clamav](https://github.com/mko-x/docker-clamav) Dockerized open source antivirus for use with file sharing containers, REST API or TCP.
+- [**71**Star][2y] [Py] [mgeeky/exploit-development-tools](https://github.com/mgeeky/exploit-development-tools) A bunch of my exploit development helper tools, collected in one place.
+- [**71**Star][3y] [Py] [mak/ekdeco](https://github.com/mak/ekdeco) Scripts for dealing with various ek's
+- [**71**Star][3m] [C++] [macmade/unicorn-bios](https://github.com/macmade/unicorn-bios) Basic BIOS emulator for Unicorn Engine.
+- [**71**Star][1y] [Go] [m4ll0k/aron](https://github.com/m4ll0k/aron) Aron is a GO script for finding hidden GET & POST parameters
+- [**71**Star][5d] [Go] [letsencrypt/ct-woodpecker](https://github.com/letsencrypt/ct-woodpecker) A tool to monitor a CT log for operational problems
+- [**71**Star][6y] [Py] [krmaxwell/dns-exfiltration](https://github.com/krmaxwell/dns-exfiltration) Exfiltrate files via DNS
+- [**71**Star][1y] [kingzd/wxdemo](https://github.com/kingzd/wxdemo) 学习练手
+- [**71**Star][5y] [C#] [khr0x40sh/whitelistevasion](https://github.com/khr0x40sh/whitelistevasion) Collection of scripts, binaries and the like to aid in WhiteList Evasion on a Microsoft Windows Network.
+- [**71**Star][7y] [C] [kholia/rc4-40-brute-office](https://github.com/kholia/rc4-40-brute-office) Guaranteed cracking of M$ Office files using RC4 40-bit encryption
+- [**71**Star][2y] [PHP] [joesmithjaffa/jenkins-shell](https://github.com/joesmithjaffa/jenkins-shell) Automating Jenkins Hacking using Shodan API
+- [**71**Star][4y] [Py] [internetwache/internetwache-ctf-2016](https://github.com/internetwache/internetwache-ctf-2016) The Internetwache CTF 2016 repository
+- [**71**Star][4y] [Py] [icewall/bindifffilter](https://github.com/icewall/bindifffilter) IDA Pro plugin making easier work on BinDiff results
+- [**71**Star][9m] [PS] [iamrootsh3ll/anchorwatch](https://github.com/iamrootsh3ll/anchorwatch) A Rogue Device Detection Script with Email Alerts Functionality for Windows Subsystem
+- [**71**Star][8y] [Py] [hellais/buckle-up](https://github.com/hellais/buckle-up) Script for running Mac OS X applications in a sandbox and a collection of seatbelt profiles
+- [**71**Star][7y] [PHP] [geekchannel/webmap](https://github.com/geekchannel/webmap) NMAP via web
+- [**71**Star][6y] [enigma0x3/powershell-payload-excel-delivery](https://github.com/enigma0x3/powershell-payload-excel-delivery) Uses Invoke-Shellcode to execute a payload and persist on the system.
+- [**71**Star][3y] [C++] [endgameinc/maxwell](https://github.com/endgameinc/maxwell)
+- [**71**Star][4y] [Py] [danmcinerney/autorelay](https://github.com/danmcinerney/autorelay) Automatically performs the SMB relay attack
+- [**71**Star][2y] [Py] [d4vinci/pyloggy](https://github.com/d4vinci/pyloggy) A python keylogger that does more than any other keylogger - Key logger, Clicks logger and Screenshots
+- [**71**Star][1m] [C++] [cseagle/collabreate](https://github.com/cseagle/collabreate) IDA Pro Collaboration/Synchronization Plugin
+- [**71**Star][1y] [citybasebrooks/siac](https://github.com/citybasebrooks/siac) SIAC is an enterprise SIEM built on open-source technology.
+- [**71**Star][2y] [Py] [chrispcampbell/qrocodile](https://github.com/chrispcampbell/qrocodile) A kid-friendly system for controlling Sonos with QR codes
+- [**71**Star][2y] [HTML] [brandis-project/brandis](https://github.com/brandis-project/brandis) Brandis: End-to-end encryption for everyone
+- [**71**Star][3y] [bmaia/cross-utils](https://github.com/bmaia/cross-utils) Cross compiling Utils (ARMEB, ARMEL, MIPS, MIPSEL)
+- [**71**Star][6y] [C++] [blitzcode/ghc-stack](https://github.com/blitzcode/ghc-stack) Hacking GHC's Stack for Fun and Profit (featuring The Glorious Haskell Debugger v0.0.1 Pre-alpha)
+- [**71**Star][3y] [Batchfile] [azmatt/windowsenum](https://github.com/azmatt/windowsenum) Batch file to help automate Windows enumeration for privilege escalation
+- [**71**Star][3y] [JS] [attekett/surku](https://github.com/attekett/surku) Surku is a general-purpose mutation-based fuzzer.
+- [**71**Star][3y] [C] [alexwebr/salsa20](https://github.com/alexwebr/salsa20) An implementation of the Salsa20 stream cipher in C99
+- [**71**Star][2y] [Py] [7h3ram/flowinspect](https://github.com/7h3ram/flowinspect) A Network Inspection Tool
+- [**71**Star][1y] [C++] [3gstudent/inject-dll-by-apc](https://github.com/3gstudent/inject-dll-by-apc) Asynchronous Procedure Calls
+- [**71**Star][2y] [C] [0ffffffffh/api-break-for-x64dbg](https://github.com/0ffffffffh/api-break-for-x64dbg) x64dbg plugin to set breakpoints automatically to Win32/64 APIs
+- [**70**Star][4y] [C#] [cn33liz/smashedpotato](https://github.com/cn33liz/smashedpotato)
+- [**70**Star][11d] [Py] [ehco1996/aioshadowsocks](https://github.com/ehco1996/aioshadowsocks) 用 asyncio 重写 shadowsocks ~
+- [**70**Star][8m] [Go] [mmcloughlin/cryptofuzz](https://github.com/mmcloughlin/cryptofuzz) Fuzzing Go crypto
+- [**70**Star][26d] [CSS] [s0md3v/predator](https://github.com/s0md3v/predator) Anti-Automation System
+- [**70**Star][3y] [zbetcheckin/ipv6](https://github.com/zbetcheckin/ipv6) Playing with IPv6 for fun and profit
+- [**70**Star][6y] [Py] [q2h1cg/xss_scan](https://github.com/Q2h1Cg/xss_scan) XSS Scan
+- [**70**Star][9d] [Shell] [sclorg/s2i-php-container](https://github.com/sclorg/s2i-php-container) PHP container images based on Red Hat Software Collections and intended for OpenShift and general usage, that provide a platform for building and running PHP applications. Users can choose between Red Hat Enterprise Linux, Fedora, and CentOS based images.
+- [**70**Star][3y] [Py] [zxsecurity/gpsnitch](https://github.com/zxsecurity/gpsnitch) GPS Spoofer Catcher, the GPS IDS.
+- [**70**Star][1m] [Py] [ziirish/burp-ui](https://github.com/ziirish/burp-ui) Burp-UI is a web-ui for burp backup written in python with Flask and jQuery/Bootstrap
+- [**70**Star][7m] [Py] [zer1t0/ticket_converter](https://github.com/zer1t0/ticket_converter) A little tool to convert ccache tickets into kirbi (KRB-CRED) and vice versa based on impacket.
+- [**70**Star][2y] [Java] [ysrc/obfusesmalitext](https://github.com/ysrc/obfusesmalitext) smali文件,jar包字符串混淆,支持gradle插件
+- [**70**Star][2d] [Py] [x4nth055/pythoncode-tutorials](https://github.com/x4nth055/pythoncode-tutorials) The Python Code Tutorials
+- [**70**Star][8m] [wufengxue/android-reverse](https://github.com/wufengxue/android-reverse) 安卓逆向工具汇总
+- [**70**Star][5m] [wbierbower/awesome-physics](https://github.com/wbierbower/awesome-physics)
+- [**70**Star][4m] [Py] [war-and-code/jawfish](https://github.com/war-and-code/jawfish) Tool for breaking into web applications.
+- [**70**Star][11m] [Py] [viperbluff/portwitness](https://github.com/viperbluff/portwitness) Tool for checking Whether a domain or its multiple sub-domains are up and running.
+- [**70**Star][5y] [Java] [veeti/disableflagsecure](https://github.com/veeti/disableflagsecure)
+- [**70**Star][1y] [Go] [urld/passmgr](https://github.com/urld/passmgr) a simple, portable password manager
+- [**70**Star][2m] [C++] [trailofbits/llvm-sanitizer-tutorial](https://github.com/trailofbits/llvm-sanitizer-tutorial) An LLVM sanitizer tutorial
+- [**70**Star][2y] [Py] [timbo05sec/autocrack](https://github.com/timbo05sec/autocrack) Hashcat wrapper to help automate the cracking process
+- [**70**Star][1y] [Shell] [thelinuxchoice/getwin](https://github.com/thelinuxchoice/getwin) FUD Win32 payload generator and listener
+- [**70**Star][3m] [PS] [samratashok/race](https://github.com/samratashok/race) RACE is a PowerShell module for executing ACL attacks against Windows targets.
+- [**70**Star][3y] [JS] [saelo/jscpwn](https://github.com/saelo/jscpwn) PoC exploit for CVE-2016-4622
+- [**70**Star][1y] [Py] [rassec/rasscan](https://github.com/rassec/rasscan) Port service SCan
+- [**70**Star][10m] [Dockerfile] [rancher/runc-cve](https://github.com/rancher/runc-cve) CVE patches for legacy runc packaged with Docker
+- [**70**Star][3y] [Py] [quantumliu/antibtchack](https://github.com/quantumliu/antibtchack) 破解5.12比特币勒索软件
+- [**70**Star][7y] [JS] [qburst/penq](https://github.com/qburst/penq) PenQ is an open source Linux based penetration testing browser bundle built over Mozilla Firefox. It comes pre-configured with security tools for spidering, advanced web searching, fingerprinting, anonymous browsing, web server scanning, fuzzing, report generating and more.
+- [**70**Star][2y] [Py] [qazbnm456/vwgen](https://github.com/qazbnm456/vwgen) Vulnerable Web applications Generator
+- [**70**Star][20d] [C] [ptrrkssn/pnscan](https://github.com/ptrrkssn/pnscan) Peter's Network Scanner
+- [**70**Star][4y] [Py] [programa-stic/marvin-django](https://github.com/programa-stic/marvin-django) Marvin-django is the UI/database part of the Marvin project. Marvin is a platform for security analysis of Android apps.
+- [**70**Star][4m] [Go] [nray-scanner/nray](https://github.com/nray-scanner/nray) nray distributed port scanner
+- [**70**Star][8m] [Java] [novoda/dojos](https://github.com/novoda/dojos) This is where the Novoda team do all their hacking
+- [**70**Star][2y] [C++] [nmulasmajic/cve-2018-8897](https://github.com/nmulasmajic/cve-2018-8897) Implements the POP/MOV SS (CVE-2018-8897) vulnerability by bugchecking the machine (local DoS).
+- [**70**Star][2y] [Py] [nmalcolm/inventus](https://github.com/nmalcolm/inventus) Inventus is a spider designed to find subdomains of a specific domain by crawling it and any subdomains it discovers.
+- [**70**Star][1y] [Py] [network-automation/ansible-napalm-samples](https://github.com/network-automation/ansible-napalm-samples) GitHub Repo comparing NAPALM and Ansible on Cisco NXOSv and Arista vEOS
+- [**70**Star][4y] [C++] [nccgroup/windowsdaclenumproject](https://github.com/nccgroup/windowsdaclenumproject) A collection of tools to enumerate and analyse Windows DACLs
+- [**70**Star][2y] [Py] [minervalabsresearch/mystique](https://github.com/minervalabsresearch/mystique) Mystique may be used to discover infection markers that can be used to vaccinate endpoints against malware. It receives as input a malicious sample and automatically generates a list of mutexes that could be used to as “vaccines” against the sample.
+- [**70**Star][2m] [Py] [meejah/carml](https://github.com/meejah/carml) Command-line utility to control Tor.
+- [**70**Star][2y] [Py] [malwarereversebrasil/maltran](https://github.com/malwarereversebrasil/maltran) A command line tool to download malware exercises from malware-traffic-analysis.net
+- [**70**Star][1y] [Go] [maliceio/malice-av](https://github.com/maliceio/malice-av) Malice AntiVirus Plugins
+- [**70**Star][3m] [m507/awae-preparation](https://github.com/m507/awae-preparation) This repository will contain all trainings and tutorials I have done/read to prepare for OSWE / AWAE.
+- [**70**Star][5y] [JS] [lfzark/cookie-injecting-tools](https://github.com/lfzark/cookie-injecting-tools) A chrome extension ,cookie injecting tool includeing injecting ,editing ,adding ,removeing cookies.
+- [**70**Star][4y] [C++] [laginimaineb/cve-2014-7920-7921](https://github.com/laginimaineb/cve-2014-7920-7921) Exploit code for CVE-2014-7920 and CVE-2014-7921 - code-exec in mediaserver up to Android 5.1
+- [**70**Star][7m] [Py] [l4ys/ctf](https://github.com/l4ys/ctf) Some of my CTF solutions
+- [**70**Star][3y] [Py] [kevsersrca/2016lykagguvenligivesizmatestleri](https://github.com/kevsersrca/2016lykagguvenligivesizmatestleri) Network Security Notes
+- [**70**Star][7d] [Py] [jpcertcc/malconfscan-with-cuckoo](https://github.com/jpcertcc/malconfscan-with-cuckoo) Cuckoo Sandbox plugin for extracts configuration data of known malware
+- [**70**Star][13d] [C] [jovanbulck/nemesis](https://github.com/jovanbulck/nemesis) Nemesis: Studying microarchitectural timing leaks in rudimentary CPU interrupt logic
+- [**70**Star][8m] [Py] [itsmehacker/ducky-exploit](https://github.com/itsmehacker/ducky-exploit) Arduino Rubber Ducky Framework
+- [**70**Star][6y] [Java] [irsdl/burpsuitejsbeautifier](https://github.com/irsdl/burpsuitejsbeautifier) Burp Suite JS Beautifier
+- [**70**Star][9m] [Py] [intel/resilient-ml-research-platform](https://github.com/intel/resilient-ml-research-platform)
+- [**70**Star][2y] [Java] [ikkisoft/bradamsa](https://github.com/ikkisoft/bradamsa) Burp Suite extension to generate Intruder payloads using Radamsa
+- [**70**Star][8d] [Java] [i2p/i2p.android.base](https://github.com/i2p/i2p.android.base) I2P for Android
+- [**70**Star][3y] [JS] [himadriganguly/sqlilabs](https://github.com/himadriganguly/sqlilabs) Lab set-up for learning SQL Injection Techniques
+- [**70**Star][11m] [C] [heidsoft/devops](https://github.com/heidsoft/devops) 系统架构实践
+- [**70**Star][6d] [Py] [greenbone/gvm-tools](https://github.com/greenbone/gvm-tools) Remote control your Greenbone Vulnerability Manager (GVM)
+- [**70**Star][2m] [C] [getdrive/lazy-rdp](https://github.com/getdrive/lazy-rdp) Script for automatic scanning & brute-force RDP
+- [**70**Star][2y] [C] [flxwu/spectre-attack-demo](https://github.com/flxwu/spectre-attack-demo) Reproducing malicious memory reading on Intel i5 and Intel Xeon using a Spectre attack
+- [**70**Star][5y] [C] [fireeye/tools](https://github.com/fireeye/tools) general purpose and malware specific analysis tools
+- [**70**Star][5y] [JS] [esapi/owasp-esapi-js](https://github.com/esapi/owasp-esapi-js) Automatically exported from code.google.com/p/owasp-esapi-js
+- [**70**Star][2y] [Isabelle] [diekmann/iptables_semantics](https://github.com/diekmann/iptables_semantics) Verified iptables Firewall Ruleset Analysis
+- [**70**Star][7d] [Py] [devopshq/artifactory](https://github.com/devopshq/artifactory) dohq-artifactory: a Python client for Artifactory
+- [**70**Star][3y] [PS] [darkoperator/posh-virustotal](https://github.com/darkoperator/posh-virustotal) PowerShell Module to interact with VirusTotal
+- [**70**Star][4y] [HTML] [crackinglandia/pype32](https://github.com/crackinglandia/pype32) Yet another Python library to read and write PE/PE+ files.
+- [**70**Star][1y] [HTML] [cooolis/cooolis.github.io](https://github.com/cooolis/cooolis.github.io) Cooolis是一个操作系统命令技巧备忘录
+- [**70**Star][3y] [Py] [coldfusion39/domi-owned](https://github.com/coldfusion39/domi-owned) domi-owned:IBM/LotusDomino 服务器漏洞利用工具
+- [**70**Star][2y] [JS] [chrisyer/lightsocks-nodejs](https://github.com/chrisyer/lightsocks-nodejs) It's a simple socks5 proxy tool which based on lightsocks
+- [**70**Star][6m] [Java] [c0d3p1ut0s/java-security-manager-bypass](https://github.com/c0d3p1ut0s/java-security-manager-bypass)
+- [**70**Star][2y] [C] [azuregreen/arkprotect](https://github.com/azuregreen/arkprotect) An Ark tool project,run on Win7 x86/x64
+- [**70**Star][3y] [Py] [antelox/fopo-php-deobfuscator](https://github.com/antelox/fopo-php-deobfuscator) A simple script to deobfuscate PHP file obfuscated with FOPO Obfuscator -
+- [**70**Star][16d] [C] [anssi-fr/oradad](https://github.com/anssi-fr/oradad) Outil de récupération automatique des données de l'Active Directory / Automated tool for dumping Active Directory data
+- [**70**Star][2y] [androidtamer/androidtamer](https://github.com/androidtamer/androidtamer) We Use Github Extensively and openly. So it becomes dificult to track what's what and what's where. This repository is a master repo to Help with that.
+- [**70**Star][15d] [Py] [alexdetrano/4can](https://github.com/alexdetrano/4can)
+- [**70**Star][1y] [C] [alex9191/kernel-dll-injector](https://github.com/alex9191/kernel-dll-injector) Kernel-Mode Driver that loads a dll into every new created process that loads kernel32.dll module
+- [**70**Star][1y] [JS] [hackatnow/certstreamcatcher](https://github.com/hackatnow/certstreamcatcher) This tool is based on regex with effective standards for detecting phishing sites in real time using certstream and can also detect punycode (IDNA) attacks.
+- [**70**Star][3y] [PS] [1ricardotavares/offensive-powershell](https://github.com/1ricardotavares/offensive-powershell)
+- [**70**Star][6y] [Py] [0xdevalias/sparty](https://github.com/0xdevalias/sparty) Sparty - MS Sharepoint and Frontpage Auditing Tool [Unofficial]
+- [**70**Star][14d] [Batchfile] [0xcoto/evilusb](https://github.com/0xcoto/evilusb) Turn an ordinary USB drive into a malicious social-engineering USB
+- [**69**Star][6m] [JS] [jiang-xuan/deepinss](https://github.com/jiang-xuan/deepinss) Deep in shadowsocks.
+- [**69**Star][4y] [Py] [mitmproxy/netlib](https://github.com/mitmproxy/netlib)
+- [**69**Star][5m] [JS] [nccgroup/datajackproxy](https://github.com/nccgroup/datajackproxy) Datajack Proxy allows you to intercept TLS traffic in native x86 applications across platforms
+- [**69**Star][4m] [0xd4d/dnspy-unity-mono](https://github.com/0xd4d/dnspy-unity-mono) Fork of Unity mono that's used to compile mono.dll with debugging support enabled
+- [**69**Star][3y] [Nginx] [localtunnel/nginx](https://github.com/localtunnel/nginx) nginx container used as the localtunnel load balancer
+- [**69**Star][17d] [Py] [splewis/get5-web](https://github.com/splewis/get5-web) Proof-of-concept webpanel for servers using the get5 CS:GO server plugin
+- [**69**Star][2m] [opentoallctf/tips](https://github.com/opentoallctf/tips)
+- [**69**Star][5y] [JS] [substack/wit](https://github.com/substack/wit) command-line wifi manager for linux
+- [**69**Star][8m] [C#] [fsecurelabs/sharpcliphistory](https://github.com/FSecureLABS/SharpClipHistory) SharpClipHistory is a .NET application written in C# that can be used to read the contents of a user's clipboard history in Windows 10 starting from the 1809 Build.
+- [**69**Star][9d] [Py] [bbva/patton](https://github.com/BBVA/patton) The clever vulnerability dependency finder
+- [**69**Star][1y] [Py] [zsxsoft/regeorg](https://github.com/zsxsoft/regeorg) A modified reGeorg for One-line PHP Shell.
+- [**69**Star][2y] [C++] [zodiacon/poolmonx](https://github.com/zodiacon/poolmonx) A GUI version of the classic PoolMon tool
+- [**69**Star][2y] [Py] [zldww2011/cve-2018-0802_poc](https://github.com/zldww2011/cve-2018-0802_poc) Exploit the vulnerability to execute the calculator
+- [**69**Star][4m] [Py] [zaproxy/zap-api-python](https://github.com/zaproxy/zap-api-python) OWASP ZAP Python API
+- [**69**Star][7m] [Go] [ying32/rproxy](https://github.com/ying32/rproxy) 简单的反向代理用于内网穿透,支持HTTP/HTTPS转发
+- [**69**Star][3y] [PS] [xillwillx/tricky.lnk](https://github.com/xillwillx/tricky.lnk) Creates a .lnk file with unicode chars that reverse the file extension and adds a .txt to the end to make it appear as a textfile. Payload is a powershell webdl and execute
+- [**69**Star][4y] [Py] [x56/airpyrt-tools](https://github.com/x56/airpyrt-tools) Python module and client for the AirPort device management interface
+- [**69**Star][4y] [Py] [v-p-b/pecloakcapstone](https://github.com/v-p-b/pecloakcapstone) Platform independent peCloak fork based on Capstone
+- [**69**Star][7m] [Py] [thombashi/allpairspy](https://github.com/thombashi/allpairspy) A python library for test combinations generator. The generator allows one to create a set of tests using "pairwise combinations" method, reducing a number of combinations of variables into a lesser set that covers most situations.
+- [**69**Star][6m] [C++] [thomasthelen/antidebugging](https://github.com/thomasthelen/antidebugging) A collection of c++ programs that demonstrate common ways to detect the presence of an attached debugger.
+- [**69**Star][1y] [Py] [stixproject/openioc-to-stix](https://github.com/stixproject/openioc-to-stix) Generate STIX XML from OpenIOC XML
+- [**69**Star][30d] [Ruby] [spiderlabs/cve_server](https://github.com/spiderlabs/cve_server) Simple REST-style web service for the CVE searching
+- [**69**Star][2y] [Shell] [snubbegbg/install_raspi-config](https://github.com/snubbegbg/install_raspi-config) Script to install raspi-config on Raspberry Pi devices with an Linux OS that's missing it, like Kali Linux.
+- [**69**Star][3y] [HTML] [skylined/bugs](https://github.com/skylined/bugs) Collection of software bugs found by SkyLined
+- [**69**Star][2y] [C] [shay-gueron/aes-gcm-siv](https://github.com/shay-gueron/aes-gcm-siv) AES-GCM-SIV implementations (128 and 256 bit)
+- [**69**Star][4y] [Py] [sensepost/autoresponder](https://github.com/sensepost/autoresponder) Quick python script to automatically load NTLM hashes from Responder logs and fires up Hashcat to crack them
+- [**69**Star][2y] [Py] [s0lst1c3/sentrygun](https://github.com/s0lst1c3/sentrygun) Rogue AP killer
+- [**69**Star][2y] [Py] [ryanohoro/csbruter](https://github.com/ryanohoro/csbruter) Cobalt Strike team server password brute force tool
+- [**69**Star][1y] [Py] [romanking98/house-of-roman](https://github.com/romanking98/house-of-roman) RCE through Leakless HeapFengShui, fastbin alloc anywhere.
+- [**69**Star][2y] [Py] [r0oth3x49/xpath](https://github.com/r0oth3x49/xpath) Xpath is a python based open source Sql injection tool that automates the process of detecting and exploiting error-based injection security flaws.
+- [**69**Star][11m] [Py] [pure-l0g1c/instaburst](https://github.com/pure-l0g1c/instaburst) Brute force Instagram
+- [**69**Star][2y] [Py] [planet-work/php-malware-scanner](https://github.com/planet-work/php-malware-scanner) PHP files analyzer for malware detection
+- [**69**Star][3y] [C] [payatu/emffuzzer](https://github.com/payatu/emffuzzer) Enhanced Meta File Fuzzer based on Peach Fuzzing Framework
+- [**69**Star][14d] [Py] [patois/mrspicky](https://github.com/patois/mrspicky) An IDAPython decompiler script that helps auditing calls to the memcpy() and memmove() functions.
+- [**69**Star][13d] [Shell] [orjail/orjail](https://github.com/orjail/orjail) a more secure way to force programs to exclusively use tor network
+- [**69**Star][10y] [C#] [oleavr/ospy](https://github.com/oleavr/ospy) Automatically exported from code.google.com/p/ospy
+- [**69**Star][2y] [Py] [odensc/janus](https://github.com/odensc/janus) Python script to create an Android APK exploiting the Janus vulnerability.
+- [**69**Star][2y] [Swift] [nwhacks-loki/loki](https://github.com/nwhacks-loki/loki) Proof-of-concept of emotion-targeted content delivery using machine learning and ARKit.
+- [**69**Star][17d] [Py] [nmantani/fileinsight-plugins](https://github.com/nmantani/fileinsight-plugins) a decoding toolbox of McAfee FileInsight hex editor for malware analysis
+- [**69**Star][7y] [C] [nektra/vtbl-ida-pro-plugin](https://github.com/nektra/vtbl-ida-pro-plugin) Identifying Virtual Table Functions using VTBL IDA Pro Plugin + Deviare Hooking Engine
+- [**69**Star][4m] [PS] [nbeede/boombox](https://github.com/nbeede/boombox) Automatic deployment of Cuckoo Sandbox malware lab using Packer and Vagrant
+- [**69**Star][2y] [PHP] [nairuzabulhul/roadmap](https://github.com/nairuzabulhul/roadmap) GitBook: OSCP RoadMap
+- [**69**Star][1y] [Kotlin] [menjoo/android-ssl-pinning-webviews](https://github.com/menjoo/android-ssl-pinning-webviews) A simple demo app that demonstrates Certificate pinning and scheme/domain whitelisting in Android WebViews
+- [**69**Star][3y] [Ruby] [melvinsh/subresolve](https://github.com/melvinsh/subresolve) Resolve and quickly portscan a list of (sub)domains.
+- [**69**Star][1m] [Py] [m8r0wn/ldap_search](https://github.com/m8r0wn/ldap_search) Python3 script to perform LDAP queries and enumerate users, groups, and computers from Windows Domains. Ldap_Search can also perform brute force/password spraying to identify valid accounts via LDAP.
+- [**69**Star][2y] [C++] [lynnux/windbg_hilight](https://github.com/lynnux/windbg_hilight) A windbg plugin to hilight text in Disassembly and Command windows. Support x86 and x64.
+- [**69**Star][2y] [JS] [kureev/react-native-network-proxy](https://github.com/kureev/react-native-network-proxy) Network debugger (logger) for React Native apps
+- [**69**Star][3y] [C] [klks/checksec](https://github.com/klks/checksec) x64dbg插件,用于检查应用程序各模块的安全设置,包括:SafeSEH、DEP、ASLR、、GS、CFG、Signature
+- [**69**Star][6y] [C] [kedebug/scdetective](https://github.com/kedebug/scdetective) A kernel level anti-rootkit tool which runs on the windows platform.
+- [**69**Star][3m] [PS] [jaredhaight/windowsattackanddefenselab](https://github.com/jaredhaight/windowsattackanddefenselab)
+- [**69**Star][11m] [PS] [itskindred/winportpush](https://github.com/itskindred/winportpush) A simple PowerShell utility used for pivoting into internal networks via a compromised Windows host.
+- [**69**Star][6m] [Py] [incredibleindishell/windows-ad-environment-related](https://github.com/incredibleindishell/windows-ad-environment-related) This Repository contains the stuff related to windows Active directory environment exploitation
+- [**69**Star][6y] [C] [ichooseyou/reclass64](https://github.com/ichooseyou/reclass64) A port of DrunkenCheetah's Project to x64
+- [**69**Star][4y] [Py] [hxer/vulnapp](https://github.com/hxer/vulnapp) use docker to attack web as a demo
+- [**69**Star][2y] [C] [hfiref0x/stryker](https://github.com/hfiref0x/stryker) Multi-purpose proof-of-concept tool based on CPU-Z CVE-2017-15303
+- [**69**Star][4y] [Py] [grazfather/blackhatpython](https://github.com/grazfather/blackhatpython) Black Hat Python Labs
+- [**69**Star][1m] [Py] [google/certificate-transparency-rfcs](https://github.com/google/certificate-transparency-rfcs) Certificate Transparency RFC
+- [**69**Star][11m] [C++] [fr0gger/rocprotect-v1](https://github.com/fr0gger/rocprotect-v1) Emulating Virtual Environment to stay protected against advanced malware
+- [**69**Star][5y] [Py] [el3ct71k/subdomain-analyzer](https://github.com/el3ct71k/subdomain-analyzer) Subdomain Analyzer
+- [**69**Star][2y] [Py] [dxwu/binderfilter](https://github.com/dxwu/binderfilter) A Linux kernel IPC firewall and logger for Android and Binder
+- [**69**Star][15d] [C] [devnoname120/vitabright](https://github.com/devnoname120/vitabright) Experimental minimum brightness lowering plugin
+- [**69**Star][3y] [Py] [dchrastil/ttsl](https://github.com/dchrastil/ttsl) Tool to scrape LinkedIn
+- [**69**Star][8m] [Py] [chipik/sap_gw_rce_exploit](https://github.com/chipik/sap_gw_rce_exploit) SAP Gateway RCE exploits
+- [**69**Star][5y] [PS] [cheetz/powertools](https://github.com/cheetz/powertools) Veil's PowerTools are a collection of PowerShell projects with a focus on offensive operations.
+- [**69**Star][1m] [JS] [certtools/intelmq-manager](https://github.com/certtools/intelmq-manager) IntelMQ Manager is a graphical interface to manage configurations for IntelMQ framework.
+- [**69**Star][7y] [Assembly] [brainsmoke/nyanmbr](https://github.com/brainsmoke/nyanmbr) Nyancat in the MBR
+- [**69**Star][7m] [Py] [biggerwing/cve-2019-0708-poc](https://github.com/biggerwing/cve-2019-0708-poc) CVE-2019-0708 远程代码执行漏洞批量检测
+- [**69**Star][5y] [Shell] [begriffs/microservice-template](https://github.com/begriffs/microservice-template) Basic architecture for running and monitoring workers
+- [**69**Star][4m] [ascotbe/osmographic-brain-mapping](https://github.com/ascotbe/osmographic-brain-mapping) 渗透脑图(渗透步骤)
+- [**69**Star][5y] [Py] [arvinddoraiswamy/slid](https://github.com/arvinddoraiswamy/slid) detect static lib
+- [**69**Star][4m] [C#] [antoniococo/runascs](https://github.com/antoniococo/runascs) RunasCs - Csharp and open version of windows builtin runas.exe
+- [**69**Star][2y] [Py] [alexander-hanel/idapython6to7](https://github.com/alexander-hanel/idapython6to7)
+- [**69**Star][2y] [Haskell] [adjoint-io/pedersen-commitment](https://github.com/adjoint-io/pedersen-commitment) Cryptographic Commitment Schemes
+- [**69**Star][1y] [Java] [1135/equationexploit](https://github.com/1135/equationexploit) Eternalblue Doublepulsar exploit
+- [**68**Star][3y] [Py] [yourtion/alfred_shadowsockscontroller](https://github.com/yourtion/alfred_shadowsockscontroller) ShadowsocksX controller for Alfred
+- [**68**Star][2y] [C++] [secrary/hooking-via-instrumentationcallback](https://github.com/secrary/hooking-via-instrumentationcallback) codes for my blog post:
+- [**68**Star][28d] [Py] [skelsec/kerberoast](https://github.com/skelsec/kerberoast) Kerberoast attack -pure python-
+- [**68**Star][2y] [C++] [cmu-sei/biggrep](https://github.com/cmu-sei/biggrep) A scalable search index for binary files
+- [**68**Star][6d] [gossip-sjtu/gossip_blog](https://github.com/gossip-sjtu/gossip_blog) 每周定期更新论文笔记分享的markdown以及图片
+- [**68**Star][1y] [Py] [feeicn/webproxy](https://github.com/feeicn/webproxy) Create an HTTP / HTTPS proxy server based on MITMProxy and log all requests to the log file and parse the log for rewriting into the database.
+- [**68**Star][30d] [Py] [lylemi/browser-fuzz-summarize](https://github.com/lylemi/browser-fuzz-summarize) Browser Fuzz Summarize / 浏览器模糊测试综述
+- [**68**Star][4y] [Py] [0x90/wifi-scripts](https://github.com/0x90/wifi-scripts) Misc scripts and tools for WiFi
+- [**68**Star][1y] [Shell] [kiyadesu/android](https://github.com/kiyadesu/Android) walk into Android security step by step
+- [**68**Star][10m] [ObjC] [synacktiv-contrib/cve-2018-4193](https://github.com/Synacktiv-contrib/CVE-2018-4193) exploit for CVE-2018-4193
+- [**68**Star][25d] [PS] [dsccommunity/certificatedsc](https://github.com/dsccommunity/CertificateDsc) This DSC Resource module can be used to simplify administration of certificates on a Windows Server.
+- [**68**Star][3d] [C] [radareorg/radare2-regressions](https://github.com/radareorg/radare2-regressions) Regression Tests for the Radare2 Reverse Engineer's Debugger
+- [**68**Star][2y] [Java] [yolosec/routerkeygenandroid](https://github.com/yolosec/routerkeygenandroid) Router Keygen generate default WPA/WEP keys for several routers.
+- [**68**Star][6m] [Py] [usyd-blockchain/vandal](https://github.com/usyd-blockchain/vandal) Static program analysis framework for Ethereum smart contract bytecode.
+- [**68**Star][5m] [Py] [tintinweb/ethereum-dasm](https://github.com/tintinweb/ethereum-dasm) An ethereum evm bytecode disassembler and static/dynamic analysis tool
+- [**68**Star][2m] [Py] [thehappydinoa/rootos](https://github.com/thehappydinoa/rootos) macOS Root Helper
+- [**68**Star][3y] [C] [stealth/plasmapulsar](https://github.com/stealth/plasmapulsar) PLASMA PULSAR
+- [**68**Star][3y] [Py] [stayliv3/burpsuite-changeu](https://github.com/stayliv3/burpsuite-changeu)
+- [**68**Star][26d] [Py] [spesmilo/electrum-docs](https://github.com/spesmilo/electrum-docs) Electrum
+- [**68**Star][6d] [JS] [simplerisk/code](https://github.com/simplerisk/code) code:SimpleRisk 源码,企业威胁管理
+- [**68**Star][1y] [Py] [shengqi158/cve-2018-2628](https://github.com/shengqi158/cve-2018-2628) CVE-2018-2628 & CVE-2018-2893
+- [**68**Star][5m] [C++] [sepehrdaddev/xerxes](https://github.com/sepehrdaddev/xerxes) Xerxes dos tool enhanced
+- [**68**Star][6y] [Py] [secfree/bcrpscan](https://github.com/secfree/bcrpscan) Base on crawler result web path scanner.
+- [**68**Star][3y] [screetsec/wordlist-dracos](https://github.com/screetsec/wordlist-dracos) Collection My Wordlist
+- [**68**Star][1y] [JS] [samhaxr/xxrf-shots](https://github.com/samhaxr/xxrf-shots) XXRF Shots - Useful for testing SSRF vulnerability
+- [**68**Star][5m] [C#] [sailro/bdtunnel](https://github.com/sailro/bdtunnel) BoutDuTunnel is able to create virtual connections tunnelled in HTTP requests.
+- [**68**Star][10m] [JS] [saelo/v9](https://github.com/saelo/v9) Files for the "v9" challenge of 34C3 CTF. See the greeting message in server.go for more information about the challenge
+- [**68**Star][3y] [C++] [rwfpl/rewolf-gogogadget](https://github.com/rwfpl/rewolf-gogogadget) kernel exploitation helper class
+- [**68**Star][1y] [HTML] [rvrsh3ll/word-doc-video-embed-exe-poc](https://github.com/rvrsh3ll/word-doc-video-embed-exe-poc)
+- [**68**Star][2y] [richinseattle/evolutionarykernelfuzzing](https://github.com/richinseattle/evolutionarykernelfuzzing) Materials for the Evolutionary Kernel Fuzzing talk at Black Hat USA 2017
+- [**68**Star][2y] [C] [ps4dev/ps4sdk](https://github.com/ps4dev/ps4sdk) Modular open source ps4 sdk with user and kernel space support
+- [**68**Star][12m] [Py] [poorbillionaire/usn-journal-parser](https://github.com/poorbillionaire/usn-journal-parser) Python script to parse the NTFS USN Journal
+- [**68**Star][1y] [PHP] [philipjohn/exploit-scanner-hashes](https://github.com/philipjohn/exploit-scanner-hashes) Hashes files for the WordPress Exploit Scanner plugin
+- [**68**Star][4m] [outflanknl/presentations](https://github.com/outflanknl/presentations)
+- [**68**Star][10m] [C] [ningzhenyu/nailgun](https://github.com/ningzhenyu/nailgun) Nailgun attack on ARM devices.
+- [**68**Star][4m] [C] [neural75/gqrx-scanner](https://github.com/neural75/gqrx-scanner) A frequency scanner for Gqrx Software Defined Radio receiver
+- [**68**Star][3m] [Py] [mrh0wl/cloudmare](https://github.com/mrh0wl/cloudmare) Cloudflare real IP tracker.
+- [**68**Star][2y] [Perl] [mobrine-mob/m0b-tool](https://github.com/mobrine-mob/m0b-tool) exploit
+- [**68**Star][2y] [Py] [mazenelzanaty/twlocation](https://github.com/mazenelzanaty/twlocation) Python script that gets Twitter users' tweets location
+- [**68**Star][14d] [PHP] [markri/wp-sec](https://github.com/markri/wp-sec) Wp-sec is an exentsion for wp-cli which checks for Wordpress CVE security issues at wpvulndb.com
+- [**68**Star][6m] [Py] [marco-lancini/docker_offensive_elk](https://github.com/marco-lancini/docker_offensive_elk) Elasticsearch for Offensive Security
+- [**68**Star][3m] [C#] [malwarialabs/derbycon2019](https://github.com/malwarialabs/derbycon2019) Code & Slides For DerbyCon 2019
+- [**68**Star][8m] [Py] [lunixbochs/revsync](https://github.com/lunixbochs/revsync) realtime cross-tool collaborative reverse engineering
+- [**68**Star][27d] [C#] [leoloobeek/csharp](https://github.com/leoloobeek/csharp) Various C# projects for offensive security
+- [**68**Star][9y] [Py] [laanwj/decuda](https://github.com/laanwj/decuda) Decuda and cudasm, the CUDA binary utilities package. Low-level tools for NVidia G80 GPUs.
+- [**68**Star][3y] [Py] [kkar/vbs-obfuscator-in-python](https://github.com/kkar/vbs-obfuscator-in-python) VBScript obfuscation to allow PenTesters bypass countermeasures.
+- [**68**Star][1y] [Py] [kdaoudieh/bella](https://github.com/kdaoudieh/bella) Bella is a pure python post-exploitation data mining tool & remote administration tool for macOS.
+- [**68**Star][2m] [Py] [jas502n/cve-2018-2628](https://github.com/jas502n/cve-2018-2628) Weblogic 反序列化漏洞(CVE-2018-2628)
+- [**68**Star][2y] [C] [invictus1306/arm-episodes](https://github.com/invictus1306/arm-episodes) Arm Episodes
+- [**68**Star][6y] [intrepidusgroup/rpi-atv](https://github.com/intrepidusgroup/rpi-atv) David Schuetz's Raspberry Pi/Apple TV talk at Derbycon
+- [**68**Star][2y] [imp0wd3r/active-directory-pentest](https://github.com/imp0wd3r/active-directory-pentest) Windows域渗透学习笔记
+- [**68**Star][2y] [Go] [ihciah/inner-shadowsocks](https://github.com/ihciah/inner-shadowsocks) Shadowsocks -> socks5 on server. (Created for providing socks5 proxy for Telegram)
+- [**68**Star][6m] [Py] [idiom/pftriage](https://github.com/idiom/pftriage) Python tool and library to help analyze files during malware triage and analysis.
+- [**68**Star][2y] [Py] [ianmiell/autotrace](https://github.com/ianmiell/autotrace) Runs a process, and gives you the output along with other telemetry on the process, all in one terminal window.
+- [**68**Star][2d] [C] [horsicq/stringsx64dbg](https://github.com/horsicq/stringsx64dbg) Strings plugin for x64dbg
+- [**68**Star][5m] [C#] [holly-hacker/dnspy.extension.holly](https://github.com/holly-hacker/dnspy.extension.holly) A dnSpy extension to aid reversing of obfuscated assemblies
+- [**68**Star][3y] [C] [henkaku/vitashell](https://github.com/henkaku/vitashell) This is a fork of
+- [**68**Star][2y] [hacker0x01/h1-212-ctf-solutions](https://github.com/hacker0x01/h1-212-ctf-solutions) A collection of the solutions people wrote for the H1-212 Capture The Flag event
+- [**68**Star][3m] [Py] [gadiluna/safe](https://github.com/gadiluna/safe) Self-Attentive Function Embeddings for binary similarity
+- [**68**Star][6m] [Py] [funilrys/pyfunceble](https://github.com/funilrys/pyfunceble) The tool to check the availability or syntax of domains, IPv4 or URL.
+- [**68**Star][3m] [TS] [flathub/linux-store-frontend](https://github.com/flathub/linux-store-frontend) A web application to browse and install applications present in Flatpak repositories. Powers
+- [**68**Star][2y] [Go] [fideliscyber/x509](https://github.com/fideliscyber/x509) 用X.509数字证书建立隐蔽数据交换通道 PoC
+- [**68**Star][3m] [Py] [endgameinc/eqllib](https://github.com/endgameinc/eqllib)
+- [**68**Star][3y] [CSS] [enddo/cjexploiter](https://github.com/enddo/cjexploiter) Drag and Drop ClickJacking exploit development assistance tool.
+- [**68**Star][4y] [C] [elfmaster/kdress](https://github.com/elfmaster/kdress) Transform vmlinuz into a fully debuggable vmlinux that can be used with /proc/kcore
+- [**68**Star][1y] [PHP] [dpiekacz/gixlg](https://github.com/dpiekacz/gixlg) GIXLG - Looking Glass
+- [**68**Star][9m] [Ruby] [dev-sec/chef-windows-hardening](https://github.com/dev-sec/chef-windows-hardening) This chef cookbook provides windows hardening configurations for the DevSec Windows baseline profile.
+- [**68**Star][2y] [Py] [dekunukem/facepunch](https://github.com/dekunukem/facepunch) Raspberry Pi based facial recognition punch clock
+- [**68**Star][3y] [HTML] [davevs/dvxte](https://github.com/davevs/dvxte) Damn Vulnerable Xebia Training Environment
+- [**68**Star][8m] [C] [comaeio/livecloudkd](https://github.com/comaeio/livecloudkd) Hyper-V Research is trendy now
+- [**68**Star][3y] [CMake] [bastilleresearch/gr-nordic](https://github.com/bastilleresearch/gr-nordic) GNU Radio module and Wireshark dissector for the Nordic Semiconductor nRF24L Enhanced Shockburst protocol.
+- [**68**Star][8m] [Shell] [baguswiratmaadi/reverie](https://github.com/baguswiratmaadi/reverie) Automated Pentest Tools Designed For Parrot Linux
+- [**68**Star][4d] [Java] [auth0/auth0.android](https://github.com/auth0/auth0.android) Android toolkit for Auth0 API
+- [**68**Star][3y] [C] [angelkillah/zer0m0n](https://github.com/angelkillah/zer0m0n) zer0m0n driver for cuckoo sandbox
+- [**68**Star][2y] [C] [akayn/kbmon](https://github.com/akayn/kbmon) Kernel Mode, driver only, ring O, remote UDP ,windows 10, keylogger. (no data needs to be writen to disk..).
+- [**68**Star][2m] [C] [aerosoul94/ida_gel](https://github.com/aerosoul94/ida_gel) A collection of IDA loaders for various game console ELF's. (PS3, PSVita, WiiU)
+- [**68**Star][5y] [C++] [987432340/lcx](https://github.com/987432340/lcx) 自修改免杀lcx端口转发工具
+- [**68**Star][2y] [Py] [3xp10it/xdump](https://github.com/3xp10it/xdump) Drag database with "one sentence" webshell
+- [**68**Star][11m] [0xfe/hacking-stellar](https://github.com/0xfe/hacking-stellar) A hacker's guide to using the Stellar blockchain platform.
+- [**67**Star][4y] [Ruby] [achillean/shodan-ruby](https://github.com/achillean/shodan-ruby) Ruby library for SHODAN
+- [**67**Star][9m] [Py] [ehco1996/lazyspider](https://github.com/ehco1996/lazyspider) 爬虫的各种坑 我来填 :)
+- [**67**Star][2m] [404notf0und/my-security-algorithm-architecture](https://github.com/404notf0und/my-security-algorithm-architecture) 404 Not Found的安全算法知识体系:安全、算法、安全算法(面试前必看一遍!!!)
+- [**67**Star][10d] [pluwen/china-domain-whitelist](https://github.com/pluwen/china-domain-whitelist) 常用中国网站白名单,纯列表,用于 SwitchyOmega,控制不走代理的网站。
+- [**67**Star][8y] [Py] [jedahan/haiku-wifi](https://github.com/jedahan/haiku-wifi) turn your wireless router's extra radios into a public billboard!
+- [**67**Star][2m] [Java] [static-flow/burpsuite-team-extension](https://github.com/static-flow/burpsuite-team-extension) This Burpsuite plugin allows for multiple web app testers to share their proxy history with each other in real time. Requests that comes through your Burpsuite instance will be replicated in the history of the other testers and vice-versa!
+- [**67**Star][9m] [Py] [phxbandit/scripts-and-tools](https://github.com/phxbandit/scripts-and-tools) Scripts and utilities to help your hacking needs
+- [**67**Star][2y] [vysecurity/cve-2018-4878](https://github.com/vysecurity/CVE-2018-4878) Aggressor Script to launch IE driveby for CVE-2018-4878
+- [**67**Star][9m] [Py] [phxbandit/scripts-and-tools](https://github.com/phxbandit/scripts-and-tools) Scripts and utilities to help your hacking needs
+- [**67**Star][2m] [C] [brandonplank/rootlessjb4](https://github.com/BrandonPlank/rootlessJB4) rootlessJB that supports iOS 12.0 - 12.2 & 12.4
+- [**67**Star][1y] [JS] [radareorg/radare2-webui](https://github.com/radareorg/radare2-webui) webui repository for radare2
+- [**67**Star][3y] [Java] [octopus-platform/bjoern](https://github.com/octopus-platform/bjoern) Binary analysis platform based on Octopus and Radare2
+- [**67**Star][2y] [shmilylty/awesome-malware-analysis](https://github.com/shmilylty/awesome-malware-analysis) A curated list of awesome malware analysis tools and resources
+- [**67**Star][1y] [PHP] [xsuperbug/payloads](https://github.com/xsuperbug/payloads)
+- [**67**Star][6m] [Py] [vesche/histstat](https://github.com/vesche/histstat) history for netstat
+- [**67**Star][3y] [Shell] [trpt/usbdeath](https://github.com/trpt/usbdeath) anti-forensic tool that writes udev rules for known usb devices and do some things at unknown usb insertion or specific usb device removal
+- [**67**Star][11m] [C++] [trailofbits/clang-cfi-showcase](https://github.com/trailofbits/clang-cfi-showcase) Sample programs that illustrate how to use control flow integrity with the clang compiler
+- [**67**Star][7m] [Py] [toxydose/duckyspark](https://github.com/toxydose/duckyspark) Translator from USB-Rubber-Ducky payloads to a Digispark code.
+- [**67**Star][5m] [Shell] [tasket/qubes-vpn-support](https://github.com/tasket/qubes-vpn-support) VPN configuration in Qubes OS
+- [**67**Star][1y] [Py] [takeshixx/knxmap](https://github.com/takeshixx/knxmap) KNXnet/IP scanning and auditing tool for KNX home automation installations.
+- [**67**Star][4y] [C#] [stphivos/rat-shell](https://github.com/stphivos/rat-shell) Windows Remote Access Trojan (RAT)
+- [**67**Star][5y] [Java] [ssexxe/xxebugfind](https://github.com/ssexxe/xxebugfind) A tool for detecting XML External Entity (XXE) vulnerabilities in Java applications
+- [**67**Star][2y] [Java] [sola-da/synode](https://github.com/sola-da/synode) Automatically Preventing Code Injection Attacks on Node.js
+- [**67**Star][8m] [JS] [sindresorhus/debounce-fn](https://github.com/sindresorhus/debounce-fn) Debounce a function
+- [**67**Star][3y] [Py] [secwiki/vulscritp](https://github.com/secwiki/vulscritp) 内网渗透脚本
+- [**67**Star][1m] [Py] [s1egesystems/ghostdelivery](https://github.com/s1egesystems/ghostdelivery) .vbs script to deliver payload with persistence.
+- [**67**Star][9m] [YARA] [rootkiter/binary-files](https://github.com/rootkiter/binary-files) EarthWorm/Termite 停止更新
+- [**67**Star][4y] [Py] [robbyfux/ragpicker](https://github.com/robbyfux/ragpicker) Ragpicker is a Plugin based malware crawler with pre-analysis and reporting functionalities. Use this tool if you are testing antivirus products, collecting malware for another analyzer/zoo.
+- [**67**Star][1m] [retme7/my-slides](https://github.com/retme7/my-slides) My slides
+- [**67**Star][3y] [JS] [pythonran/pcap_tools](https://github.com/pythonran/pcap_tools) 网络流量可配置嗅探,流量包解析,漏洞规则扫描,生成报告. ....搞网络安全这块,还凑合着用吧
+- [**67**Star][3d] [Ruby] [puppetlabs/puppetlabs-inifile](https://github.com/puppetlabs/puppetlabs-inifile) Resource types for managing settings in INI files
+- [**67**Star][6y] [PHP] [pshep/anubis](https://github.com/pshep/anubis) Web front-end (api interface) to CGMINER
+- [**67**Star][4m] [Py] [pjialin/pyproxy-async](https://github.com/pjialin/pyproxy-async) 基于 Python Asyncio + Redis 实现的代理池
+- [**67**Star][1y] [C++] [oyyd/nysocks](https://github.com/oyyd/nysocks) Nysocks binds kcp and libuv to provide an aggressive tcp tunnel in nodejs.
+- [**67**Star][6m] [Py] [orleven/tentacle](https://github.com/orleven/tentacle) Tentacle is a POC vulnerability verification and exploit framework. It supports free extension of exploits and uses POC scripts. It supports calls to zoomeye, fofa, shodan and other APIs to perform bulk vulnerability verification for multiple targets.
+- [**67**Star][2m] [Java] [netspi/burpcollaboratordnstunnel](https://github.com/netspi/burpcollaboratordnstunnel) A DNS tunnel utilizing the Burp Collaborator
+- [**67**Star][9m] [Go] [mozilla/audit-go](https://github.com/mozilla/audit-go) Linux Audit Plugin for heka written using netlink Protocol in golang and Lua
+- [**67**Star][4y] [C] [microwave89/rtsectiontest](https://github.com/microwave89/rtsectiontest) An Attempt to Bypass Memory Scanners By Misusing the ntdll.dll "RT" Section.
+- [**67**Star][5y] [C] [malwaretech/basichook](https://github.com/malwaretech/basichook) x86 Inline hooking engine (using trampolines)
+- [**67**Star][4y] [C] [luigirizzo/netmap-libpcap](https://github.com/luigirizzo/netmap-libpcap) Automatically exported from code.google.com/p/netmap-libpcap
+- [**67**Star][12m] [Py] [lucasg/idamagnum](https://github.com/lucasg/idamagnum) a plugin for integrating MagnumDB requests within IDA
+- [**67**Star][2y] [Go] [lubyruffy/tcptunnel](https://github.com/lubyruffy/tcptunnel) 将本地内网服务器映射到公网。
+- [**67**Star][2y] [C++] [leeqwind/holicpoc](https://github.com/leeqwind/holicpoc) POC and exploitation of vulnerabilities
+- [**67**Star][2y] [Swift] [ktakayama/notificationcrash](https://github.com/ktakayama/notificationcrash)
+- [**67**Star][18d] [C++] [jaegertracing/jaeger-client-cpp](https://github.com/jaegertracing/jaeger-client-cpp) C++ OpenTracing binding for Jaeger
+- [**67**Star][1m] [YARA] [itayc0hen/apt-ecosystem](https://github.com/itayc0hen/apt-ecosystem) This repository contains the website and the tools which are part of the joint research between Check Point Research and Intezer to map the connections inside the APT Ecosystem of Russia.
+- [**67**Star][2y] [ObjC] [iscanner/iscanner_ios](https://github.com/iscanner/iscanner_ios) An easy-to-use scanner app for iOS.
+- [**67**Star][1y] [PHP] [irelance/jsc-decompile-mozjs-34](https://github.com/irelance/jsc-decompile-mozjs-34) A javascript bytecode decoder for mozilla spider-monkey version 34. May decompile jsc file compile by cocos-2dx
+- [**67**Star][2y] [Py] [hlldz/wildpwn](https://github.com/hlldz/wildpwn) Brute forcer and shell deployer for WildFly
+- [**67**Star][6m] [Ruby] [hercules-team/augeasproviders](https://github.com/hercules-team/augeasproviders) Alternative Augeas-based providers for Puppet
+- [**67**Star][3y] [Py] [harmj0y/impdump](https://github.com/harmj0y/impdump) This is a simple parser for/decrypter for Impacket's esentutl.py utility. It assists with decrypting hashes and hash histories from ntds.dit databases.
+- [**67**Star][8m] [Py] [grayddq/publicsecscan](https://github.com/grayddq/publicsecscan) 针对大量WEB资产进行分布式WEB安全扫描,发现web环境下常规的一些安全漏洞
+- [**67**Star][5d] [Java] [gmu-swe/phosphor](https://github.com/gmu-swe/phosphor) Phosphor: Dynamic Taint Tracking for the JVM
+- [**67**Star][4m] [Go] [gen0cide/laforge](https://github.com/gen0cide/laforge) Competition Infrastructure Management
+- [**67**Star][5y] [C] [gabrtv/shocker](https://github.com/gabrtv/shocker) Shocker / Docker Breakout PoC
+- [**67**Star][2d] [Shell] [f5networks/f5-azure-arm-templates](https://github.com/f5networks/f5-azure-arm-templates) Azure Resource Manager Templates for quickly deploying BIG-IP services in Azure
+- [**67**Star][7m] [JS] [exodusintel/cve-2019-0808](https://github.com/exodusintel/cve-2019-0808) Win32k Exploit by Grant Willcox
+- [**67**Star][2m] [doctorwebltd/malware-iocs](https://github.com/doctorwebltd/malware-iocs)
+- [**67**Star][10m] [dkhuuthe/madlira](https://github.com/dkhuuthe/madlira) Malware detection using learning and information retrieval for Android
+- [**67**Star][6m] [Py] [deptofdefense/salsa](https://github.com/deptofdefense/salsa) Salvaging Static Analysis
+- [**67**Star][2y] [Py] [debasishm89/openxmolar](https://github.com/debasishm89/openxmolar) A MS OpenXML Format Fuzzing Framework
+- [**67**Star][2m] [HTML] [deadlyelder/tools-for-cryptanalysis](https://github.com/deadlyelder/tools-for-cryptanalysis) A repository that aims to provide tools for cryptography and cryptanalysis
+- [**67**Star][1y] [Nix] [dapphub/ds-math](https://github.com/dapphub/ds-math) Safe arithmetic
+- [**67**Star][8d] [Py] [cyboxproject/python-cybox](https://github.com/cyboxproject/python-cybox) A Python library for parsing, manipulating, and generating CybOX content.
+- [**67**Star][1y] [C++] [codewhitesec/unmarshalpwn](https://github.com/codewhitesec/unmarshalpwn) POC for CVE-2018-0824
+- [**67**Star][4m] [C#] [codedx/codepulse](https://github.com/codedx/codepulse) Code Pulse is a real-time code coverage tool for penetration testing activities
+- [**67**Star][1y] [C#] [cobbr/sharpshell](https://github.com/cobbr/sharpshell) SharpShell is a proof-of-concept offensive C# scripting engine that utilizes the Rosyln C# compiler to quickly cross-compile .NET Framework console applications or libraries.
+- [**67**Star][1m] [chef-koch/projectx](https://github.com/chef-koch/projectx) DarkWeb Overview
+- [**67**Star][2m] [C++] [changeofpace/mouclassinputinjection](https://github.com/changeofpace/mouclassinputinjection) MouClassInputInjection implements a kernel interface for injecting mouse input data packets into the input data stream of HID USB mouse devices.
+- [**67**Star][4y] [Py] [byt3bl33d3r/beef-api](https://github.com/byt3bl33d3r/beef-api) Python library that facilitates interfacing with BeEF via it's RESTful API
+- [**67**Star][3y] [JS] [bitsofinfo/stateful-process-command-proxy](https://github.com/bitsofinfo/stateful-process-command-proxy) node.js module for executing os commands against a pool of stateful child processes such as bash or powershell via stdout and stderr streams
+- [**67**Star][3m] [Shell] [bgeesaman/kube-env-stealer](https://github.com/bgeesaman/kube-env-stealer) Automated GKE Kubelet Impersonation and Cluster Secret Stealer via kube-env
+- [**67**Star][2y] [Py] [azizaltuntas/pymap-scanner](https://github.com/azizaltuntas/pymap-scanner)
+- [**67**Star][2y] [Makefile] [adamdoupe/ctf-training](https://github.com/adamdoupe/ctf-training)
+- [**67**Star][2y] [abazhaniuk/publications](https://github.com/abazhaniuk/publications) Slides, Papers, Links to CVEs and advisories
+- [**67**Star][1y] [Py] [3xp10it/xwifi](https://github.com/3xp10it/xwifi) Auto crack wifi in macOS
+- [**67**Star][1y] [C++] [3gstudent/use-com-objects-to-bypass-uac](https://github.com/3gstudent/use-com-objects-to-bypass-uac)
+- [**67**Star][1y] [Go] [003random/getjs](https://github.com/003random/getjs) A tool to fastly get all javascript sources/files
+- [**66**Star][t] [Go] [mvdan/garble](https://github.com/mvdan/garble) Obfuscate Go builds
+- [**66**Star][3y] [C] [shellphish/driller-afl](https://github.com/shellphish/driller-afl) A version of AFL tailored for Driller's use in analyzing CGC binaries.
+- [**66**Star][3y] [Py] [gojhonny/pentesting-scripts](https://github.com/gojhonny/pentesting-scripts) Useful pentesting scripts
+- [**66**Star][3y] [jipegit/irnotes](https://github.com/jipegit/irnotes) Some IR notes
+- [**66**Star][6m] [Hack] [defuse/crackstation](https://github.com/defuse/crackstation) Source code for my crackstation.net website.
+- [**66**Star][5m] [splunk/ta-microsoft-sysmon](https://github.com/splunk/ta-microsoft-sysmon) TA-microsoft-sysmon
+- [**66**Star][10d] [Rust] [io12/pwninit](https://github.com/io12/pwninit) pwninit - automate starting binary exploit challenges
+- [**66**Star][14d] [C++] [moemod/csmoe](https://github.com/moemod/csmoe) Cross-platform Counter-Strike mod based on Xash3D (previously named CSBTE-Mobile)
+- [**66**Star][3y] [JS] [ethjs/ethjs-provider-signer](https://github.com/ethjs/ethjs-provider-signer) A simple web3 standard provider that signs eth_sendTransaction payloads.
+- [**66**Star][1y] [Py] [angelkitty/bilibili-smallvideo](https://github.com/angelkitty/bilibili-smallvideo)
+- [**66**Star][2m] [Py] [chris-rands/emojify](https://github.com/chris-rands/emojify) Obfuscate your python script by converting it to emoji icons
+- [**66**Star][12m] [HTML] [zadewg/livebox-0day](https://github.com/zadewg/livebox-0day) Arcadyan ARV7519RW22-A-L T VR9 1.2 Multiple security vulnerabilities affecting latest firmware release on ORANGE Livebox modems.
+- [**66**Star][5y] [Assembly] [yifanlu/spider3dstools](https://github.com/yifanlu/spider3dstools) Tools to work with 3DS 9.x Spider exploit
+- [**66**Star][10m] [Py] [yelp/parcelgen](https://github.com/yelp/parcelgen) Helpful tool to make data objects easier for Android
+- [**66**Star][3y] [xnymia/suricata-signatures](https://github.com/xnymia/suricata-signatures) Suricata rules for Emerging Threats and funkyness
+- [**66**Star][6m] [Ruby] [weppos/whois-parser](https://github.com/weppos/whois-parser) An intelligent — pure Ruby — WHOIS parser.
+- [**66**Star][4y] [C] [wekillpeople/browser-dumpwd](https://github.com/wekillpeople/browser-dumpwd) Dump browser passwords(chrome, firefox) with sqlite3 lib.
+- [**66**Star][8m] [JS] [webxscan/linux_rat](https://github.com/webxscan/linux_rat) LINUX集群控制(LINUX反弹式远控) LINUX反向链接运维 BY:QQ:879301117
+- [**66**Star][8m] [Visual Basic .NET] [visualbasic6/chatter](https://github.com/visualbasic6/chatter) internet monitoring osint tool for windows
+- [**66**Star][6m] [Shell] [violentlydave/mkhtaccess_red](https://github.com/violentlydave/mkhtaccess_red) Auto-generate an HTaccess for payload delivery -- automatically pulls ips/nets/etc from known sandbox companies/sources that have been seen before, and redirects them to a benign payload.
+- [**66**Star][9d] [Rust] [trailofbits/siderophile](https://github.com/trailofbits/siderophile) Find the ideal fuzz targets in a Rust codebase
+- [**66**Star][2y] [Shell] [thestr4ng3r/arcore-patch](https://github.com/thestr4ng3r/arcore-patch) Attempt to get ARCore Preview 2 running on unsupported devices
+- [**66**Star][8y] [JS] [therook/csrf-request-builder](https://github.com/therook/csrf-request-builder)
+- [**66**Star][3y] [Py] [syss-research/nrf24-playset](https://github.com/syss-research/nrf24-playset) Software tools for Nordic Semiconductor nRF24-based devices like wireless keyboards, mice, and presenters
+- [**66**Star][17d] [C] [seanheelan/heaplayout](https://github.com/seanheelan/heaplayout) Source code for paper 'Automatic Heap Layout Manipulation for Exploitation'
+- [**66**Star][3y] [Assembly] [scorchsecurity/systorm](https://github.com/scorchsecurity/systorm) NASM Standard Library for shellcode
+- [**66**Star][2y] [Py] [sapir/sonare](https://github.com/sapir/sonare) A Qt-based disassembly viewer based on radare2
+- [**66**Star][25d] [PS] [samratashok/deploy-deception](https://github.com/samratashok/deploy-deception) A PowerShell module to deploy active directory decoy objects.
+- [**66**Star][2y] [Lua] [s4n7h0/nse](https://github.com/s4n7h0/nse) Some of my work on Nmap Scripts (NSE)
+- [**66**Star][5y] [C++] [rwfpl/rewolf-dllpackager](https://github.com/rwfpl/rewolf-dllpackager) Simple tool to bundle windows DLLs with PE executable
+- [**66**Star][1m] [Py] [remg427/misp42splunk](https://github.com/remg427/misp42splunk) A Splunk app to use MISP in background
+- [**66**Star][12m] [Py] [r3vn/punk.py](https://github.com/r3vn/punk.py) unix SSH post-exploitation 1337 tool
+- [**66**Star][1y] [Java] [pyn3rd/cve-2018-3252](https://github.com/pyn3rd/cve-2018-3252) CVE-2018-3252-PoC
+- [**66**Star][2y] [C] [pvachon/tsl-sdr](https://github.com/pvachon/tsl-sdr) Software Defined Radio Demodulation and Decoding Tools
+- [**66**Star][1y] [Py] [pure-l0g1c/hyprpulse](https://github.com/pure-l0g1c/hyprpulse) Brute force multiple accounts at once
+- [**66**Star][8m] [JS] [plazmaz/mongodb-honeyproxy](https://github.com/plazmaz/mongodb-honeyproxy) A honeypot proxy for mongodb. When run, this will proxy and log all traffic to a dummy mongodb server.
+- [**66**Star][3y] [oj/bsides-2017-ctf-docker](https://github.com/oj/bsides-2017-ctf-docker) BSidesCBR CTF docker compose files
+- [**66**Star][3y] [C++] [nmgwddj/learn-windows-drivers](https://github.com/nmgwddj/learn-windows-drivers) Windows drivers 开发的各个基础示例,包含进程、内存、注册表、回调等管理
+- [**66**Star][15d] [Ruby] [ninoseki/miteru](https://github.com/ninoseki/miteru) An experimental phishing kit detection tool
+- [**66**Star][1y] [C++] [nickcano/relocbonus](https://github.com/nickcano/relocbonus) An obfuscation tool for Windows which instruments the Windows Loader into acting as an unpacking engine.
+- [**66**Star][11m] [Py] [necst/crave](https://github.com/necst/crave) crave: 自动测试和探索通用AV引擎功能的框架
+- [**66**Star][1y] [JS] [nccgroup/goatcasino](https://github.com/nccgroup/goatcasino) This is an intentionally vulnerable smart contract truffle deployment aimed at allowing those interested in smart contract security to exploit a wide variety of issues in a safe environment.
+- [**66**Star][1y] [Go] [mmcloughlin/pearl](https://github.com/mmcloughlin/pearl) Tor relay implementation in Golang
+- [**66**Star][2y] [Py] [martinoj2009/icmpexfil](https://github.com/martinoj2009/icmpexfil) Exfiltrate data with ICMP
+- [**66**Star][6m] [Py] [marcobellaccini/pyaescrypt](https://github.com/marcobellaccini/pyaescrypt) A Python 3 module and script that uses AES256-CBC to encrypt/decrypt files and streams in AES Crypt file format (version 2).
+- [**66**Star][2m] [C#] [maraudershell/marauder](https://github.com/maraudershell/marauder) A .NET agent for the Faction C2 Framework
+- [**66**Star][10m] [HCL] [mantvydasb/red-team-infrastructure-automation](https://github.com/mantvydasb/red-team-infrastructure-automation) Disposable and resilient red team infrastructure with Terraform
+- [**66**Star][2y] [Java] [lovejj1994/simplify-core](https://github.com/lovejj1994/simplify-core) Simplify 为简化重复的JAVA代码而生,基于JDK8,无其它jar包依赖,提供序列化,json parse/generator,日期处理,asm && jdkproxy 实现动态代理功能 等常见操作。
+- [**66**Star][3y] [C] [librecore-org/librecore](https://github.com/librecore-org/librecore)
+- [**66**Star][15d] [Java] [lianglixin/sandvxposed](https://github.com/lianglixin/sandvxposed) Xposed environment without root (OS 5.0 - 10.0)
+- [**66**Star][20d] [Py] [ledgerhq/blue-loader-python](https://github.com/ledgerhq/blue-loader-python) Python Loader for Ledger Blue and Nano S
+- [**66**Star][4y] [Py] [jpsenior/threataggregator](https://github.com/jpsenior/threataggregator) Aggregates security threats from a number of online sources, and outputs to Syslog CEF, Snort Signatures, Iptables rules, hosts.deny, etc.
+- [**66**Star][2y] [PHP] [josecl/cool-php-captcha](https://github.com/josecl/cool-php-captcha) This is the official GitHub project from code.google.com/p/cool-php-captcha
+- [**66**Star][3y] [Py] [jgamblin/badactors](https://github.com/jgamblin/badactors) Create a list of bad actors from public IP blacklist.
+- [**66**Star][10m] [Java] [javabeanz/owasp-security-logging](https://github.com/javabeanz/owasp-security-logging) OWASP Security Logging library for Java
+- [**66**Star][6m] [C++] [invictus1306/functrace](https://github.com/invictus1306/functrace) A function tracer
+- [**66**Star][4y] [JS] [indeedops/shadowbuster](https://github.com/indeedops/shadowbuster)
+- [**66**Star][7m] [C] [hc0d3r/sshd-poison](https://github.com/hc0d3r/sshd-poison) a tool to get creds of pam based sshd authentication
+- [**66**Star][28d] [Assembly] [hardenedlinux/firmware-anatomy](https://github.com/hardenedlinux/firmware-anatomy) Tear the firmware apart with your bare hands;-)
+- [**66**Star][2d] [Go] [google/gonids](https://github.com/google/gonids) gonids is a library to parse IDS rules, with a focus primarily on Suricata rule compatibility. There is a discussion forum available that you can join on Google Groups:
+- [**66**Star][2y] [Py] [fossfreedom/coverart-browser](https://github.com/fossfreedom/coverart-browser) Browse your cover-art albums in Rhythmbox v2.96 - 3.0+
+- [**66**Star][2y] [Py] [firefart/cve-2018-7600](https://github.com/firefart/cve-2018-7600) CVE-2018-7600 - Drupal 7.x RCE
+- [**66**Star][4y] [JS] [etherdream/mitm-http-cache-poisoning](https://github.com/etherdream/mitm-http-cache-poisoning) HTTP Cache Poisoning Demo
+- [**66**Star][4y] [PS] [dlwyatt/protecteddata](https://github.com/dlwyatt/protecteddata) PowerShell Module for securely encrypting and sharing secret data such as passwords.
+- [**66**Star][8m] [C] [dimopouloselias/simpleshellcodeinjector](https://github.com/dimopouloselias/simpleshellcodeinjector) SimpleShellcodeInjector receives as an argument a shellcode in hex and executes it. It DOES NOT inject the shellcode in a third party application.
+- [**66**Star][2m] [davidfowl/windbgcheatsheet](https://github.com/davidfowl/windbgcheatsheet) This is a cheat sheet for windbg
+- [**66**Star][3y] [Eagle] [dangrie158/esptool](https://github.com/dangrie158/esptool)
+- [**66**Star][3m] [HTML] [cytoscape/cytoscape.js-cose-bilkent](https://github.com/cytoscape/cytoscape.js-cose-bilkent) The CoSE layout for Cytoscape.js by Bilkent with enhanced compound node placement.
+- [**66**Star][3y] [Py] [crange/crange](https://github.com/crange/crange) Crange is a tool to index and cross-reference C/C++ source code
+- [**66**Star][5m] [Batchfile] [cornerpirate/reportcompiler](https://github.com/cornerpirate/reportcompiler) A tool for importing vulnerability scanner data and then allowing you to manipulate the risks, affected hosts, and create risk ordered output.
+- [**66**Star][3y] [Py] [claudioviviani/ms17-010-m4ss-sc4nn3r](https://github.com/claudioviviani/ms17-010-m4ss-sc4nn3r) MS17-010 multithreading scanner written in python.
+- [**66**Star][3y] [Py] [circl/cve-portal](https://github.com/circl/cve-portal) Common Vulnerabilities and Exposures - Portal
+- [**66**Star][2y] [Py] [christophetd/firepwned](https://github.com/christophetd/firepwned)
+- [**66**Star][7y] [C] [chokepoint/jynx2](https://github.com/chokepoint/jynx2) JynxKit2 is an LD_PRELOAD userland rootkit based on the original JynxKit. The backdoor has been replaced with an "accept()" system hook.
+- [**66**Star][3y] [Py] [bwall/ssdc](https://github.com/bwall/ssdc) ssdeep based clustering tool
+- [**66**Star][1m] [Shell] [brainfucksec/archtorify](https://github.com/brainfucksec/archtorify) Transparent proxy through Tor for Arch Linux OS
+- [**66**Star][9m] [Java] [bolexliu/apptrack](https://github.com/bolexliu/apptrack) Xposed HookAPP逆向跟踪工具,跟踪Activity与Fragment启动信息等
+- [**66**Star][3y] [Py] [bear/s3scan](https://github.com/bear/s3scan) scan s3 buckets for security issues
+- [**66**Star][2y] [avast-tl/capstone2llvmir](https://github.com/avast-tl/capstone2llvmir) capstone2llvmir: 将Capstone 指令转化为 LLVM IR
+- [**66**Star][6y] [atimorin/poc2013](https://github.com/atimorin/poc2013) Power of Community 2013 conference special release of ICS/SCADA toolkit
+- [**66**Star][1m] [Shell] [ankh2054/linux-pentest](https://github.com/ankh2054/linux-pentest) Linux pentest tools
+- [**66**Star][5y] [C] [akamajoris/php-extension-backdoor](https://github.com/akamajoris/php-extension-backdoor) Simple php backdoor based on extension
+- [**66**Star][5y] [Py] [ajinabraham/xenotix-apk-reverser](https://github.com/ajinabraham/xenotix-apk-reverser) Xenotix APK Reverser is an OpenSource Android Application Package (APK) decompiler and disassembler powered by dex2jar, baksmali and jd-core.
+- [**66**Star][4m] [Go] [0xrawsec/gene](https://github.com/0xrawsec/gene) Signature Engine for Windows Event Logs
+- [**66**Star][4y] [C] [0xabu/qemu](https://github.com/0xabu/qemu) OLD qemu with Raspberry Pi 2 and Windows on ARM support. Retained for reference purposes only -- most of this has been merged upstream.
+- [**66**Star][11m] [C] [0x36/cve-pocs](https://github.com/0x36/cve-pocs) This repo contains some of my vuln research findings
+- [**65**Star][3y] [Ruby] [p3nt4/metasploit-modules](https://github.com/p3nt4/metasploit-modules) Collection of metasploit modules
+- [**65**Star][5y] [ObjC] [project-imas/memory-security](https://github.com/project-imas/memory-security) Tools for securely clearing and validating iOS application memory
+- [**65**Star][3y] [zhengmin1989/ios-10-decrypted-kernel-cache](https://github.com/zhengmin1989/ios-10-decrypted-kernel-cache) iOS 10 Decrypted Kernel Cache
+- [**65**Star][4m] [C] [jtesta/rainbowcrackalack](https://github.com/jtesta/rainbowcrackalack) Rainbow table generation & lookup tools. Make Rainbow Tables Great Again!
+- [**65**Star][26d] [Py] [cve-search/git-vuln-finder](https://github.com/cve-search/git-vuln-finder) Finding potential software vulnerabilities from git commit messages
+- [**65**Star][1m] [Py] [nccgroup/gtfoblookup](https://github.com/nccgroup/gtfoblookup) Offline command line lookup utility for GTFOBins (
+- [**65**Star][7m] [Py] [s0md3v/shiva](https://github.com/s0md3v/Shiva) Improved DOS exploit for wordpress websites (CVE-2018-6389)
+- [**65**Star][8y] [C] [robclemons/arpspoof](https://github.com/robclemons/Arpspoof) Android port of Arpspoof
+- [**65**Star][3y] [Py] [plantdaddy/fuzzap](https://github.com/PlantDaddy/FuzzAP) A python script for obfuscating wireless networks
+- [**65**Star][2y] [C++] [jocover/openusrp](https://github.com/jocover/OpenUSRP) using LimeSDR to simulate USRP B210
+- [**65**Star][4y] [Py] [nsacyber/splunk-assessment-of-mitigation-implementations](https://github.com/nsacyber/Splunk-Assessment-of-Mitigation-Implementations) Automatically scores how well Windows systems have implemented some of the top 10 Information Assurance mitigation strategies. #nsacyber
+- [**65**Star][28d] [Py] [hatching/httpreplay](https://github.com/hatching/httpreplay) Replay HTTP and HTTPS requests from a PCAP based on TLS Master Secrets.
+- [**65**Star][5y] [Py] [adamlaurie/hdmi-sniff](https://github.com/AdamLaurie/hdmi-sniff) sniff HDMI DDC (I2C) traffic
+- [**65**Star][2y] [Java] [fsecurelabs/drozer-agent](https://github.com/FSecureLABS/drozer-agent) The Android Agent for the Mercury Security Assessment Framework.
+- [**65**Star][1m] [Java] [lmax-exchange/disruptor-proxy](https://github.com/LMAX-Exchange/disruptor-proxy) Byte-code generator to create Disruptor-backed proxies
+- [**65**Star][3y] [ObjC] [zhengmin1989/yalu102](https://github.com/zhengmin1989/yalu102) incomplete iOS 10.2 jailbreak for 64 bit devices by qwertyoruiopz and marcograssi
+- [**65**Star][3y] [C] [zer0mem0ry/kernelreadwritememory](https://github.com/zer0mem0ry/kernelreadwritememory) Simple code to manipulate the memory of a usermode process from kernel.
+- [**65**Star][6m] [Py] [yelp/osxcollector_output_filters](https://github.com/yelp/osxcollector_output_filters) Filters that process and transform the output of osxcollector
+- [**65**Star][11m] [Py] [we45/dvfaas-damn-vulnerable-functions-as-a-service](https://github.com/we45/dvfaas-damn-vulnerable-functions-as-a-service) Intentionally Vulnerable Serverless Functions to understand the specifics of Serverless Security Vulnerabilities
+- [**65**Star][2y] [Py] [wazehell/cve-2018-6389](https://github.com/wazehell/cve-2018-6389) CVE-2018-6389 Exploit In WordPress DoS
+- [**65**Star][5m] [QML] [turanmahmudov/instagraph](https://github.com/turanmahmudov/instagraph) Unofficial Instagram Client
+- [**65**Star][6y] [C++] [trevd/android_root](https://github.com/trevd/android_root) Got Root!
+- [**65**Star][2y] [Py] [temesgeny/ppsx-file-generator](https://github.com/temesgeny/ppsx-file-generator) ppsx file generator for cve-2017-8570 (based on bhdresh/cve-2017-8570)
+- [**65**Star][2y] [Py] [tbarabosch/quincy](https://github.com/tbarabosch/quincy) 在内存转储中检测基于主机的代码注入攻击
+- [**65**Star][2y] [Py] [switchbrew/nx-hbexploit300-obf](https://github.com/switchbrew/nx-hbexploit300-obf) Homebrew exploit for 3.0.0
+- [**65**Star][3y] [C++] [soarlab/maline](https://github.com/soarlab/maline) Android Malware Detection Framework
+- [**65**Star][2y] [JS] [smarttang/sosrp](https://github.com/smarttang/sosrp) SOSRP Security 安全平台
+- [**65**Star][3m] [JS] [sergejmueller/wpcheck](https://github.com/sergejmueller/wpcheck) Vulnerability scanner for WordPress based on Node.js
+- [**65**Star][2y] [HTML] [secwiki/ipot](https://github.com/secwiki/ipot) Honeypot Research Blog 蜜罐技术研究小组
+- [**65**Star][3y] [Py] [scipag/btle-sniffer](https://github.com/scipag/btle-sniffer) Passively scan for Bluetooth Low Energy devices and attempt to fingerprint them
+- [**65**Star][1y] [Shell] [samhaxr/takeover-v1](https://github.com/samhaxr/takeover-v1) Takeover script extracts CNAME record of all subdomains at once. TakeOver saves researcher time and increase the chance of finding subdomain takeover vulnerability.
+- [**65**Star][4m] [Rust] [rust-fuzz/targets](https://github.com/rust-fuzz/targets)
+- [**65**Star][4m] [Shell] [rfxn/advanced-policy-firewall](https://github.com/rfxn/advanced-policy-firewall) advanced-policy-firewall:高级版策略防火墙
+- [**65**Star][3y] [redhatproductsecurity/cve-howto](https://github.com/redhatproductsecurity/cve-howto) CVE assignment documentation
+- [**65**Star][3m] [HTML] [project-prismatica/prismatica](https://github.com/project-prismatica/prismatica) Responsive Command and Control System
+- [**65**Star][6m] [Java] [portswigger/command-injection-attacker](https://github.com/portswigger/command-injection-attacker) SHELLING - a comprehensive OS command injection payload generator
+- [**65**Star][5m] [Py] [passivetotal/python_api](https://github.com/passivetotal/python_api) Python abstract API for PassiveTotal services in the form of libraries and command line utilities.
+- [**65**Star][1y] [C#] [parsingteam/teleshadow2](https://github.com/parsingteam/teleshadow2) TeleShadow - Telegram Desktop Session Stealer (Windows)
+- [**65**Star][5y] [Shell] [pansen/macos-sandbox-profiles](https://github.com/pansen/macos-sandbox-profiles) sandbox files for some applications running on osx for more security
+- [**65**Star][2y] [Py] [ojasookert/cve-2017-0781](https://github.com/ojasookert/cve-2017-0781) Blueborne CVE-2017-0781 Android heap overflow vulnerability
+- [**65**Star][2y] [C++] [not-wlan/driver-hijack](https://github.com/not-wlan/driver-hijack)
+- [**65**Star][11m] [YARA] [nheijmans/malzoo](https://github.com/nheijmans/malzoo) Mass static malware analysis tool
+- [**65**Star][12m] [Py] [naivenom/reversing-list](https://github.com/naivenom/reversing-list) Reversing list
+- [**65**Star][11m] [HTML] [mtesauro/owasp-wte](https://github.com/mtesauro/owasp-wte) Home of the developement for OWASP WTE - the Web Testing Environment, a collection of pre-packaged Linux AppSec tools, apps and documentation used to create pre-configured VMs or installed ala carte in the Linux of your choice..
+- [**65**Star][2d] [TSQL] [mitchellkrogza/the-big-list-of-hacked-malware-web-sites](https://github.com/mitchellkrogza/the-big-list-of-hacked-malware-web-sites) This repository contains a list of all web sites I come across that are either hacked with or purposefully hosting malware, ransomware, viruses or trojans.
+- [**65**Star][7m] [Gherkin] [minishift/minishift-addons](https://github.com/minishift/minishift-addons) A repository for the community to exchange Minishift add-ons
+- [**65**Star][4m] [Py] [mcdallas/cryptotools](https://github.com/mcdallas/cryptotools)
+- [**65**Star][2y] [Py] [markclayton/bumpster](https://github.com/markclayton/bumpster) The Unofficial Burp Extension for DNSDumpster.com
+- [**65**Star][3y] [C++] [m000/dtracker](https://github.com/m000/dtracker) DataTracker: A Pin tool for collecting high-fidelity data provenance from unmodified programs.
+- [**65**Star][1y] [Py] [lukebaggett/google_socks](https://github.com/lukebaggett/google_socks) A proof of concept demonstrating the use of Google Drive for command and control.
+- [**65**Star][3y] [lcamry/sqli-labs](https://github.com/lcamry/sqli-labs) sqli-labs中文使用手册,详细讲解了mysql注入的各种手段。
+- [**65**Star][10d] [Go] [lair-framework/go-nmap](https://github.com/lair-framework/go-nmap) Nmap XML parsing library for Go
+- [**65**Star][2y] [HTML] [jianmou/vulnctf](https://github.com/jianmou/vulnctf) MiniProject_VulnCTF | A CTF practice environment that links Dockerhub through Github
+- [**65**Star][5m] [Py] [integeruser/on-pwning](https://github.com/integeruser/on-pwning) My solutions to some CTF challenges and a list of interesting resources about pwning stuff
+- [**65**Star][1y] [Py] [immunit/xip](https://github.com/immunit/xip) XIP generates a list of IP addresses by applying a set of transformations used to bypass security measures e.g. blacklist filtering, WAF, etc.
+- [**65**Star][2y] [Java] [realbearcat/s2-055](https://github.com/RealBearcat/S2-055) S2-055 反序列化 CVE-2017-7525
+- [**65**Star][1y] [Jupyter Notebook] [hmishra2250/botnet-detection-using-machine-learning](https://github.com/hmishra2250/botnet-detection-using-machine-learning) Repository of Bachelor's Major Project on Botnet Detection
+- [**65**Star][5y] [Py] [hikerell/bfuzzer](https://github.com/hikerell/bfuzzer) A Browser Fuzzer for Vulnerbilities
+- [**65**Star][8m] [Dockerfile] [hangim/kcp-shadowsocks-docker](https://github.com/hangim/kcp-shadowsocks-docker) A docker image for shadowsocks server with KCPTUN support
+- [**65**Star][2y] [Java] [hackthelegacy/hack400tool](https://github.com/hackthelegacy/hack400tool) hack400tool:IBM 电源系统安全处理工具
+- [**65**Star][5y] [Java] [guardianproject/trustedintents](https://github.com/guardianproject/trustedintents) library for flexible trusted interactions between Android apps
+- [**65**Star][4m] [Py] [greenwolf/social_attacker](https://github.com/greenwolf/social_attacker) An Open Source Multi Site Automated Social Media Phishing Framework
+- [**65**Star][30d] [C] [gpg/libgcrypt](https://github.com/gpg/libgcrypt) The GNU crypto library
+- [**65**Star][4y] [Py] [funoverip/mcafee-sitelist-pwd-decryption](https://github.com/funoverip/mcafee-sitelist-pwd-decryption) Password decryption tool for the McAfee SiteList.xml file
+- [**65**Star][4y] [PHP] [fakhrizulkifli/defeating-php-gd-imagecreatefromjpeg](https://github.com/fakhrizulkifli/defeating-php-gd-imagecreatefromjpeg) Proof-of-concept to exploit the flaw in the PHP-GD built-in function, imagecreatefromjpeg()
+- [**65**Star][5m] [JS] [exposejs/expose](https://github.com/exposejs/expose) A Dynamic Symbolic Execution (DSE) engine for JavaScript
+- [**65**Star][2y] [Py] [daniestevez/free-outernet](https://github.com/daniestevez/free-outernet) Free Software Outernet receiver
+- [**65**Star][3m] [Py] [d3vzer0/reternal-quickstart](https://github.com/d3vzer0/reternal-quickstart) Repo containing docker-compose files and setup scripts without having to clone the individual reternal components
+- [**65**Star][3y] [PHP] [cymmetria/strutshoneypot](https://github.com/cymmetria/strutshoneypot) Struts Apache 2 based honeypot as well as a detection module for Apache 2 servers
+- [**65**Star][1y] [Py] [cryptax/dextools](https://github.com/cryptax/dextools) Miscellaenous DEX (Dalvik Executable) tools
+- [**65**Star][1y] [Py] [ch3k1/squidmagic](https://github.com/ch3k1/squidmagic) analyze a web-based network traffic
+- [**65**Star][1y] [Py] [cerbo/aws-waf-security-automation](https://github.com/cerbo/aws-waf-security-automation) Amazon WAF Security Automation deployment (modular with Terraform)
+- [**65**Star][2y] [Shell] [bluscreenofjeff/ccdc-scripts](https://github.com/bluscreenofjeff/ccdc-scripts) Scripts and resources for Red Teaming at CCDC competitions
+- [**65**Star][19d] [Visual Basic .NET] [blackhacker511/blackworm](https://github.com/blackhacker511/blackworm) Black Worm Offical Repo
+- [**65**Star][2m] [Py] [blackarch/sploitctl](https://github.com/blackarch/sploitctl) Fetch, install and search exploit archives from exploit sites.
+- [**65**Star][1y] [Lua] [beaujeant/pwnadventure3](https://github.com/beaujeant/pwnadventure3) Resources for the Pwn Adventure 3 challenges from GITS'15 (
+- [**65**Star][2y] [Lua] [bastilleresearch/cabletap](https://github.com/bastilleresearch/cabletap) CableTap public disclosure documents.
+- [**65**Star][4y] [C] [basil00/pseudonode](https://github.com/basil00/pseudonode) PseudoNode - A full node emulator.
+- [**65**Star][6y] [Py] [anbc/andbug](https://github.com/anbc/andbug) Android Debugging Library
+- [**65**Star][19d] [Py] [agroce/tstl](https://github.com/agroce/tstl) Template Scripting Testing Language tool: automated test generation for Python
+- [**65**Star][2y] [Shell] [adhdproject/buildkit](https://github.com/adhdproject/buildkit)
+- [**65**Star][1y] [Go] [0xfe/lumen](https://github.com/0xfe/lumen) A commandline client for the Stellar blockchain
+- [**64**Star][14d] [bkimminich/it-security-lecture](https://github.com/bkimminich/it-security-lecture) University lecture on "IT Security" as Open Educational Resources material
+- [**64**Star][3y] [C++] [functionclub/memtester](https://github.com/functionclub/memtester) 检测VPS真实可分配内存的小工具,适用于检测VPS超售情况。
+- [**64**Star][1y] [Py] [feeicn/exif](https://github.com/feeicn/exif) EXIF information viewer(查看照片中隐藏的各类信息)
+- [**64**Star][3y] [Ruby] [danielmiessler/caparser](https://github.com/danielmiessler/caparser) A quick and dirty PCAP parser that helps you identify who your applications are sending sensitive data to without encryption.
+- [**64**Star][3y] [bastilleresearch/keyjack](https://github.com/bastilleresearch/keyjack) Device discovery tools and encrypted keystroke injection advisories for Logitech, Dell, Lenovo and AmazonBasics
+- [**64**Star][6y] [C++] [helpsystems/sentinel](https://github.com/helpsystems/sentinel) Sentinel is a command line tool able to protect Windows 32 bit programs against exploits targeted by attackers or viruses. It can protect your programs against 0-day attacks or publicly known bugs.
+- [**64**Star][13d] [C] [enjoy-digital/pcie_screamer](https://github.com/enjoy-digital/pcie_screamer) PCIe Screamer SoC based on LiteX
+- [**64**Star][8m] [Py] [nordicsemiconductor/nrf-sniffer-for-802.15.4](https://github.com/NordicSemiconductor/nRF-Sniffer-for-802.15.4) nRF-based 802.15.4 sniffer (firmware and software)
+- [**64**Star][6y] [C++] [zenlulz/fasm.net](https://github.com/zenlulz/fasm.net) A managed wrapper to use FASM compiler from .NET applications.
+- [**64**Star][8m] [Py] [yarox24/attack_monitor](https://github.com/yarox24/attack_monitor) Endpoint detection & Malware analysis software
+- [**64**Star][3y] [Py] [xorpd/idsearch](https://github.com/xorpd/idsearch) A search tool for IDA
+- [**64**Star][8m] [C] [xiao70/x70fsd](https://github.com/xiao70/x70fsd) Windows file system filter drivers(minifilter) to encrypt, compress, or otherwise modify file-based data require some of the most complex kernel software developed for Windows.
+- [**64**Star][7y] [C++] [wisec/dominator](https://github.com/wisec/dominator)
+- [**64**Star][7m] [Py] [vysecurity/att-ck_analysis](https://github.com/vysecurity/att-ck_analysis) Repository for my ATT&CK analysis research.
+- [**64**Star][1y] [vagnerpilar/windbgtree](https://github.com/vagnerpilar/windbgtree) A command tree based on commands and extensions for Windows Kernel Debugging.
+- [**64**Star][4m] [Visual Basic .NET] [thesph1nx/rt-101](https://github.com/thesph1nx/rt-101) VB.net Remote Administrator Tool (RAT)
+- [**64**Star][12m] [Py] [th3j0kr/jtb_investigator](https://github.com/th3j0kr/jtb_investigator) A tool to speed up the process of doing the same simple IP/Domain Name lookups over and over again.
+- [**64**Star][4m] [HTML] [team-su/suctf-2019](https://github.com/team-su/suctf-2019)
+- [**64**Star][3y] [Fortran] [tabacof/adversarial](https://github.com/tabacof/adversarial) Exploring the Space of Adversarial Images
+- [**64**Star][2y] [JS] [switchbrew/nx-hbexploit300](https://github.com/switchbrew/nx-hbexploit300) Homebrew exploit for 3.0.0
+- [**64**Star][10m] [sukaralin/php_code_audit_project](https://github.com/sukaralin/php_code_audit_project) 该项目用来记录,我用来练手的PHP代码审计项目。
+- [**64**Star][1y] [Haskell] [snoyberg/markdown](https://github.com/snoyberg/markdown) Convert Markdown to HTML, with XSS protection
+- [**64**Star][1m] [JS] [snail007/anytunnel](https://github.com/snail007/anytunnel) 内网穿透,内网穿透代理服务器,商用内网穿透代理系统,内网穿透平台,内网穿透多用户会员系统。
+- [**64**Star][8m] [Go] [smithclay/faassh](https://github.com/smithclay/faassh) simple go SSH server with reverse tunneling designed for running in cloud functions like AWS lambda
+- [**64**Star][1y] [Py] [skelsec/pykerberoast](https://github.com/skelsec/pykerberoast) Implementing Kerberoast attack fully in python
+- [**64**Star][8m] [JS] [sindresorhus/p-debounce](https://github.com/sindresorhus/p-debounce) Debounce promise-returning & async functions
+- [**64**Star][2y] [C] [siguza/hsp4](https://github.com/siguza/hsp4) macOS kext for host_special_port(4) patch
+- [**64**Star][4m] [sh1n0g1/shinobot](https://github.com/sh1n0g1/shinobot) RAT / Botnet Simulator for pentest / education
+- [**64**Star][1y] [JS] [serain/netmap.js](https://github.com/serain/netmap.js) Fast browser-based network discovery module
+- [**64**Star][3y] [secdr/sec-ml](https://github.com/secdr/sec-ml) security machine learning
+- [**64**Star][1y] [Py] [scy-phy/minicps](https://github.com/scy-phy/minicps) MiniCPS: a framework for Cyber-Physical Systems real-time simulation, built on top of mininet
+- [**64**Star][11m] [Zeek] [salesforce/bro-sysmon](https://github.com/salesforce/bro-sysmon) How to Zeek Sysmon Logs!
+- [**64**Star][9m] [PS] [sadprocessor/cypherdog](https://github.com/sadprocessor/cypherdog) PoSh BloodHound Dog Whisperer
+- [**64**Star][3y] [C++] [ronangaillard/logitech-mouse](https://github.com/ronangaillard/logitech-mouse) Use an arduino as a logitech wireless
+- [**64**Star][5m] [PS] [rgl/windows-domain-controller-vagrant](https://github.com/rgl/windows-domain-controller-vagrant) Example Windows Domain Controller
+- [**64**Star][1y] [Py] [ralphje/imagemounter](https://github.com/ralphje/imagemounter) Command line utility and Python package to ease the (un)mounting of forensic disk images
+- [**64**Star][1m] [C] [qwaz/solved-hacking-problem](https://github.com/qwaz/solved-hacking-problem)
+- [**64**Star][3y] [C] [quokkalight/rkduck](https://github.com/quokkalight/rkduck) Linux v4.x.x Rootkit
+- [**64**Star][6y] [C] [programa-stic/ropc-llvm](https://github.com/programa-stic/ropc-llvm) ropc-llvm is a PoC of a Turing complete ROP compiler with support for a subset of LLVM IR. It is an extension of ropc.
+- [**64**Star][1y] [Lua] [pr4jwal/quick-scripts](https://github.com/pr4jwal/quick-scripts) A collection of my quick and dirty scripts for vulnerability POC and detections
+- [**64**Star][7m] [pinkp4nther/aws-testing-notes](https://github.com/pinkp4nther/aws-testing-notes) Notes as I learn basic AWS penetration testing
+- [**64**Star][9m] [C] [phonegapx/airplay](https://github.com/phonegapx/airplay) 关于AirPlay的一些逆向研究成果。
+- [**64**Star][9d] [Py] [phackt/pentest](https://github.com/phackt/pentest) Custom tools and projects about security
+- [**64**Star][2m] [HTML] [patrowl/patrowldocs](https://github.com/patrowl/patrowldocs) PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform
+- [**64**Star][19d] [Py] [patois/genmc](https://github.com/patois/genmc) Display Hex-Rays Microcode
+- [**64**Star][20d] [Py] [openitsystem/itops](https://github.com/openitsystem/itops) 基于Python + Django的AD\Exchange管理系统
+- [**64**Star][5y] [PHP] [nyx0/tinba](https://github.com/nyx0/tinba) Tinba Banking Trojan
+- [**64**Star][4m] [C++] [nccgroup/xendbg](https://github.com/nccgroup/xendbg) A feature-complete reference implementation of a modern Xen VMI debugger.
+- [**64**Star][1y] [Py] [mwleeds/android-malware-analysis](https://github.com/mwleeds/android-malware-analysis) This project seeks to apply machine learning algorithms to Android malware classification.
+- [**64**Star][1y] [C] [mthbernardes/qmkhuehuebr](https://github.com/mthbernardes/qmkhuehuebr) Trying to hack into keyboards
+- [**64**Star][7m] [mitchellkrogza/fail2ban-blacklist-jail-for-repeat-offenders-with-perma-extended-banning](https://github.com/mitchellkrogza/fail2ban-blacklist-jail-for-repeat-offenders-with-perma-extended-banning) A customised jail with action and filter file for Fail2Ban. This jail is based on the recidive jail but makes use of a simple text file to enable extended and permanent bans.
+- [**64**Star][3y] [Py] [milesrichardson/docker-nfqueue-scapy](https://github.com/milesrichardson/docker-nfqueue-scapy) Docker容器,使用python脚本在netfilter队列中监听数据包,并使用scapy操作数据包。
+- [**64**Star][3m] [Shell] [mdrights/liveslak](https://github.com/mdrights/liveslak) 中文化的隐私加强 GNU/Linux 系统 - Forked from Alien Bob's powerful building script for Slackware Live.
+- [**64**Star][11m] [Pascal] [mahdisafsafi/univdisasm](https://github.com/mahdisafsafi/univdisasm) x86 Disassembler and Analyzer
+- [**64**Star][1y] [Py] [kasperskylab/vbscriptinternals](https://github.com/kasperskylab/vbscriptinternals) Scripts for disassembling VBScript p-code in the memory to aid in exploits analysis
+- [**64**Star][7m] [Py] [k4yt3x/scutum](https://github.com/k4yt3x/scutum) Linux Automatic ARP (TCP / UDP / ICMP) Firewall
+- [**64**Star][1y] [C] [joswr1ght/cowpatty](https://github.com/joswr1ght/cowpatty) WPA2-PSK Cracking
+- [**64**Star][7m] [ObjC] [javerous/torchat-mac](https://github.com/javerous/torchat-mac) macOS native TorChat client
+- [**64**Star][11m] [C++] [jacksonvd/pwnedpasswordsdll](https://github.com/jacksonvd/pwnedpasswordsdll) Open source solution to check prospective AD passwords against previously breached passwords
+- [**64**Star][4m] [Py] [itskindred/redviper](https://github.com/itskindred/redviper) redViper is a proof of concept Command & Control framework that utilizes Reddit for communications.
+- [**64**Star][6y] [Java] [ibrahimbalic/androidrat](https://github.com/ibrahimbalic/androidrat) Android RAT
+- [**64**Star][6y] [C] [hiikezoe/android_run_root_shell](https://github.com/hiikezoe/android_run_root_shell)
+- [**64**Star][2m] [Py] [hamz-a/jeb2frida](https://github.com/hamz-a/jeb2frida) Automated Frida hook generation with JEB
+- [**64**Star][4y] [Py] [halit/isip](https://github.com/halit/isip) Interactive sip toolkit for packet manipulations, sniffing, man in the middle attacks, fuzzing, simulating of dos attacks.
+- [**64**Star][4y] [PHP] [googleinurl/routerhunterbr](https://github.com/googleinurl/routerhunterbr) TOOL - Unauthenticated Remote DNS , Scanner ranger IP.
+- [**64**Star][8y] [C] [gdbinit/pydbg64](https://github.com/gdbinit/pydbg64) PyDBG64 - OS X PyDbg with 64 bits support
+- [**64**Star][11m] [Py] [fnmsd/chunkedhttpadapter](https://github.com/fnmsd/chunkedhttpadapter) 参考《利用分块传输吊打所有WAF》修改的requests的Adapter
+- [**64**Star][2m] [Java] [flankerhqd/bindump4j](https://github.com/flankerhqd/bindump4j) A portable utility to locate android binder service
+- [**64**Star][5y] [Py] [falcon-lnhg/mwebfp](https://github.com/falcon-lnhg/mwebfp) LNHG - Mass Web Fingerprinter
+- [**64**Star][15d] [Go] [evilsocket/sum](https://github.com/evilsocket/sum) A specialized database server for linear algebra and machine learning.
+- [**64**Star][3y] [Py] [evilsocket/fang](https://github.com/evilsocket/fang) A multi service threaded MD5 cracker
+- [**64**Star][9m] [FreeMarker] [dvdandroid/xposedmoduletemplate](https://github.com/dvdandroid/xposedmoduletemplate) Easily create a Xposed Module with Android Studio
+- [**64**Star][8m] [Go] [dsnezhkov/sshorty](https://github.com/dsnezhkov/sshorty) A progressive, customizable armored SSH tunnel implant for Linux and MacOS systems
+- [**64**Star][2y] [Py] [darkquasar/wmi_persistence](https://github.com/darkquasar/wmi_persistence) WMI_Persistence:Python脚本,直接解析 OBJECTS.DATA 文件(无需访问用户WMI 名称空间)查找 WMI persistence
+- [**64**Star][15d] [Py] [daniellerch/aletheia](https://github.com/daniellerch/aletheia) Image steganalysis using state-of-the-art machine learning techniques
+- [**64**Star][3y] [Shell] [da667/667s_shitlist](https://github.com/da667/667s_shitlist) Hi kids, do you like cyber violence? Wanna see me destroy evil in the blink of an eyelid?
+- [**64**Star][3y] [C] [coolervoid/payloadmask](https://github.com/coolervoid/payloadmask) Web Payload list editor to use techniques to try bypass web application firewall - version 0.2
+- [**64**Star][7m] [Assembly] [cdisselkoen/pitchfork](https://github.com/cdisselkoen/pitchfork) Detecting Spectre vulnerabilities using symbolic execution, built on angr (github.com/angr/angr)
+- [**64**Star][1y] [Java] [c0ny1/httpheadmodifer](https://github.com/c0ny1/httpheadmodifer) 一款快速修改HTTP数据包头的Burp Suite插件
+- [**64**Star][7y] [C] [bskari/sqlassie](https://github.com/bskari/sqlassie) database firewall
+- [**64**Star][7d] [PHP] [bediger4000/php-malware-analysis](https://github.com/bediger4000/php-malware-analysis) Deobfuscation and analysis of PHP malware captured by a WordPress honey pot
+- [**64**Star][5d] [Java] [beardypig/ghidra-emotionengine](https://github.com/beardypig/ghidra-emotionengine) Ghidra Processor for the Play Station 2's Emotion Engine MIPS based CPU
+- [**64**Star][5y] [Go] [arlolra/meek](https://github.com/arlolra/meek)
+- [**64**Star][3m] [Java] [aress31/swurg](https://github.com/aress31/swurg) Parse OpenAPI documents into Burp Suite for automating OpenAPI-based APIs security assessments (approved by PortSwigger for inclusion in their official BApp Store).
+- [**64**Star][15d] [Py] [anon-exploiter/suid3num](https://github.com/anon-exploiter/suid3num) A standalone python script which utilizes python's built-in modules to enumerate SUID binaries, separate default binaries from custom binaries, cross-match those with bins in GTFO Bin's repository & auto-exploit those, all with colors! ( ͡~ ͜ʖ ͡°)
+- [**64**Star][5d] [Shell] [angr/angr-dev](https://github.com/angr/angr-dev) Some helper scripts to set up an environment for angr development.
+- [**64**Star][6y] [Py] [andrew-morris/stupid_malware](https://github.com/andrew-morris/stupid_malware) Python malware for pentesters that bypasses most antivirus (signature and heuristics) and IPS using sheer stupidity
+- [**64**Star][3y] [Shell] [91yun/uml](https://github.com/91yun/uml)
+- [**64**Star][2y] [Go] [0c34/govwa](https://github.com/0c34/govwa)
+- [**63**Star][4d] [worawit/cve-2019-0708](https://github.com/worawit/cve-2019-0708) CVE-2019-0708 (BlueKeep)
+- [**63**Star][9d] [Py] [meituan-dianping/lyrebird-android](https://github.com/meituan-dianping/lyrebird-android) 本程序是一个Lyrebird的插件,用于支持获取Android设备信息。
+- [**63**Star][2y] [Py] [adamlaurie/sjcam](https://github.com/adamlaurie/sjcam) A python CLI tool for controlling SJCAM WiFi Sports Cameras
+- [**63**Star][4y] [C++] [zyantific/remodel](https://github.com/zyantific/remodel) Data and class remodeling library
+- [**63**Star][2m] [C] [zzhouhe/pg1903](https://github.com/zzhouhe/pg1903)
+- [**63**Star][1m] [Py] [misp/misp-maltego](https://github.com/misp/misp-maltego) Set of Maltego transforms to inferface with a MISP instance and explore the whole MITRE ATT&CK dataset.
+- [**63**Star][23d] [C#] [firebaseextended/unity-solutions](https://github.com/FirebaseExtended/unity-solutions) Use Firebase tools to incorporate common features into your games!
+- [**63**Star][1y] [C] [freescale/u-boot-fslc](https://github.com/Freescale/u-boot-fslc) U-Boot tree to host pending fixes and improvements
+- [**63**Star][4m] [LLVM] [lifting-bits/fennec](https://github.com/lifting-bits/fennec) Rewriting functions in compiled binaries using McSema
+- [**63**Star][9d] [Py] [crytic/etheno](https://github.com/crytic/etheno) Simplify Ethereum security analysis and testing
+- [**63**Star][2m] [C] [zyantific/zyan-hook-engine](https://github.com/zyantific/zyan-hook-engine) Advanced x86/x86-64 hooking library (WIP).
+- [**63**Star][1y] [Py] [zhongzhi107/raspberry-pi-tutorials](https://github.com/zhongzhi107/raspberry-pi-tutorials) 面向软件工程师的树莓派入门教程
+- [**63**Star][3y] [Ruby] [zed-0xff/ctf](https://github.com/zed-0xff/ctf) some tasks/solutions from CTF challenges
+- [**63**Star][4m] [C] [yuawn/hitcon-badge-2019](https://github.com/yuawn/hitcon-badge-2019) HITCON Badge for HITCON CMT 2019.
+- [**63**Star][5m] [Go] [yryz/httpproxy](https://github.com/yryz/httpproxy) 一个轻量级HTTP代理,支持shadowsocks服务,方便命令行、开发环境使用。
+- [**63**Star][2y] [Go] [yara-rules/yara-endpoint](https://github.com/yara-rules/yara-endpoint) Yara-Endpoint is a tool useful for incident response as well as anti-malware enpoint base on Yara signatures.
+- [**63**Star][3y] [Py] [xorond/sudo-snooper](https://github.com/xorond/sudo-snooper) Python script that acts like the original sudo binary to fool users into entering their passwords
+- [**63**Star][9m] [Py] [xnffdd/proxypool](https://github.com/xnffdd/proxypool) 自建免费IP代理池。
+- [**63**Star][1y] [Py] [wazehell/metateta](https://github.com/wazehell/metateta) Metateta Automated Tool For Scanning And Exploiting Network Protocols Using Metasploit
+- [**63**Star][7d] [tiaotiaolong/sec_interview_know_list](https://github.com/tiaotiaolong/sec_interview_know_list) 信息安全方面面试清单
+- [**63**Star][1y] [tevora-threat/powerview3-aggressor](https://github.com/tevora-threat/powerview3-aggressor) Cobalt Strike Aggressor script menu for Powerview/SharpView
+- [**63**Star][6m] [Py] [sysopfb/malware_decoders](https://github.com/sysopfb/malware_decoders) Static based decoders for malware samples
+- [**63**Star][5y] [Py] [sqall01/zwoelf](https://github.com/sqall01/zwoelf) An ELF parsing and manipulation library for Python
+- [**63**Star][2y] [Py] [sethsec/pycodeinjection](https://github.com/sethsec/pycodeinjection) Automated Python Code Injection Tool
+- [**63**Star][3y] [C] [seemoo-lab/bcm-public](https://github.com/seemoo-lab/bcm-public) DEPRECATED: Monitor Mode and Firmware patching framework for the Google Nexus 5, development moved to:
+- [**63**Star][1y] [C#] [rvrsh3ll/sharpfruit](https://github.com/rvrsh3ll/sharpfruit) A C# penetration testing tool to discover low-haning web fruit via web requests.
+- [**63**Star][2y] [C] [plashchynski/viewssld](https://github.com/plashchynski/viewssld) viewssld is a free, open source, non-terminating SSLv2/SSLv3/TLS traffic decryption daemon for Snort, and other Network Intrusion Detection Systems (IDS).
+- [**63**Star][4m] [Java] [pibigstar/parsevip](https://github.com/pibigstar/parsevip) 解析VIP资源,解析出酷狗、QQ音乐、腾讯视频、人人视频的真实地址
+- [**63**Star][5y] [Py] [paulsec/spipscan](https://github.com/paulsec/spipscan) SPIP (CMS) Scanner for penetration testing purpose written in Python
+- [**63**Star][2y] [Py] [paulsec/metasearch-public](https://github.com/paulsec/metasearch-public) Stop searching for sample hashes on 10 different sites.
+- [**63**Star][4y] [Java] [palmerc/securewebsockets](https://github.com/palmerc/securewebsockets) Add SSL support to the Autobahn WebSocket library
+- [**63**Star][5m] [PHP] [owasp/owaspwebgoatphp](https://github.com/owasp/owaspwebgoatphp) A deliberately vulnerable web application for learning web application security.
+- [**63**Star][6y] [JS] [owasp/appsec-browser-bundle](https://github.com/owasp/appsec-browser-bundle) The OWASP AppSec Browser Bundle is an open source Linux based penetration testing browser bundle built over Mozilla Firefox. It comes pre-configured with security tools for spidering, advanced web searching, fingerprinting, anonymous browsing, web server scanning, fuzzing, report generating and more.
+- [**63**Star][2y] [ophirharpaz/patched-minesweeper](https://github.com/ophirharpaz/patched-minesweeper) I hacked Minesweeper into putting flags on all the mined squares when starting. Yoohoo.
+- [**63**Star][5y] [CSS] [opensecurityresearch/fsexploitme](https://github.com/opensecurityresearch/fsexploitme) Purposely vulnerable ActiveX Control to teach about exploitation in a browser-based environment.
+- [**63**Star][5m] [Shell] [nodesocket/cryptr](https://github.com/nodesocket/cryptr) A simple shell utility for encrypting and decrypting files using OpenSSL.
+- [**63**Star][5y] [C] [nihilus/idastealth](https://github.com/nihilus/idastealth)
+- [**63**Star][1y] [Py] [nicksanzotta/wifisuite](https://github.com/nicksanzotta/wifisuite) Enterprise WPA Wireless Tool Suite
+- [**63**Star][3y] [Lua] [netxfly/nginx_lua_security](https://github.com/netxfly/nginx_lua_security) 浅谈nginx+lua在安全中的应用
+- [**63**Star][4m] [Java] [nccgroup/berserko](https://github.com/nccgroup/berserko) Burp Suite extension to perform Kerberos authentication
+- [**63**Star][3y] [C] [mrrraou/waithax](https://github.com/mrrraou/waithax) An implementation of the waithax / slowhax 3DS Kernel11 exploit.
+- [**63**Star][2m] [Ruby] [mephux/ruby-nessus](https://github.com/mephux/ruby-nessus) Ruby-Nessus is a ruby interface for the popular Nessus vulnerability scanner.
+- [**63**Star][21d] [C] [maldiohead/cve-2019-6207](https://github.com/maldiohead/cve-2019-6207) xnu kernel heap info leak
+- [**63**Star][4y] [C] [m-pays/m-cpuminer-v2](https://github.com/m-pays/m-cpuminer-v2) Latest miner (m-minerd)
+- [**63**Star][3y] [JS] [luin/serialize](https://github.com/luin/serialize) Serialize an object including it's function into a JSON.
+- [**63**Star][12m] [PS] [luciusbono/packer-windows10](https://github.com/luciusbono/packer-windows10) A Packer build for Windows 10
+- [**63**Star][5m] [Py] [loolzec/asu](https://github.com/loolzec/asu) facebook hacking toolkit
+- [**63**Star][11m] [Ruby] [livingsocial/bundler-patch](https://github.com/livingsocial/bundler-patch) Update your gems conservatively to deal with vulnerable gems or just get more current.
+- [**63**Star][4y] [MATLAB] [konstantinberlin/malware-windows-audit-log-detection](https://github.com/konstantinberlin/malware-windows-audit-log-detection) Detection of malware using dynamic behavior and Windows audit logs
+- [**63**Star][6m] [Py] [jvns/zine-formatter](https://github.com/jvns/zine-formatter) Small Python script for formatting zines into booklets
+- [**63**Star][2y] [josephlhall/dc25-votingvillage-report](https://github.com/josephlhall/dc25-votingvillage-report) A report to synthesize findings from the Defcon 25 Voting Machine Hacking Village
+- [**63**Star][9y] [C] [jonoberheide/ksymhunter](https://github.com/jonoberheide/ksymhunter) Routines for hunting down kernel symbols.
+- [**63**Star][2y] [Py] [iotsec/z3sec](https://github.com/iotsec/z3sec) Penetration testing framework for ZigBee security research.
+- [**63**Star][1y] [C] [ioactive/fuzzndis](https://github.com/ioactive/fuzzndis) A Fuzzer for Windows NDIS Drivers OID Handlers
+- [**63**Star][1y] [C] [inndy/ctf-writeup](https://github.com/inndy/ctf-writeup) My CTF write-up collection
+- [**63**Star][7y] [C++] [hurley25/sniffer](https://github.com/hurley25/sniffer) 一个跨平台的网络数据嗅探&抓包程序,基于Qt 4.x 以及 libpcap 库(Linux下)和 Winpcap库(Windows 下)。
+- [**63**Star][11m] [hannob/apache-uaf](https://github.com/hannob/apache-uaf) Apache use after free bug infos / ASAN stack traces
+- [**63**Star][1y] [Py] [gr4ym4ntx/attackintel](https://github.com/gr4ym4ntx/attackintel) A python script to query the MITRE ATT&CK API for tactics, techniques, mitigations, & detection methods for specific threat groups.
+- [**63**Star][2y] [C] [georgeargyros/snowflake](https://github.com/georgeargyros/snowflake) Snowflake is a tool for exploiting randomness vulnerabilities by seed recovery attacks targetting the rand() and mt_rand() generators in PHP applications.
+- [**63**Star][3m] [JS] [gbaptista/luminous](https://github.com/gbaptista/luminous) Identify, analyze and block code execution and event collection through JavaScript in your browser with code interception.
+- [**63**Star][3y] [funkmyster/awesome-cloud-security](https://github.com/funkmyster/awesome-cloud-security) Curated list of awesome cloud security blogs, podcasts, standards, projects, and examples.
+- [**63**Star][1y] [Shell] [floyd-fuh/crass](https://github.com/floyd-fuh/crass) Code Review Audit Script Scanner
+- [**63**Star][2y] [Shell] [faf0/thinkpad-scripts](https://github.com/faf0/thinkpad-scripts) Scripts for fixing TrackPointers and touchpads under Ubuntu 14.04 and 16.04 or similar distributions on Lenovo ThinkPads (tested on X1 Carbon 2nd Generation and reported to work on X240)
+- [**63**Star][2y] [Py] [esser420/eviltwinframework](https://github.com/esser420/eviltwinframework) A framework for pentesters that facilitates evil twin attacks as well as exploiting other wifi vulnerabilities
+- [**63**Star][8m] [emadshanab/facebook-bug-bounty-writeups](https://github.com/emadshanab/facebook-bug-bounty-writeups) Facebook Bug Bounties
+- [**63**Star][3m] [C] [dorneanu/ixkeylog](https://github.com/dorneanu/ixkeylog) *NIX X11 Keylogger
+- [**63**Star][1y] [C] [dodola/fbhookfork](https://github.com/dodola/fbhookfork) 从 fb 的 profilo 项目里提取出来的hook 库,自己用
+- [**63**Star][1y] [Py] [crescentvenus/walb](https://github.com/crescentvenus/walb) WALB is raspberry Pi and HackRF based Wireless Attack LaunchBox.
+- [**63**Star][2y] [Java] [codelion/gramtest](https://github.com/codelion/gramtest) GramTest: A tool for Grammar based Test case generation
+- [**63**Star][3y] [Java] [chhsiao90/nitmproxy](https://github.com/chhsiao90/nitmproxy) Proxy server based on netty
+- [**63**Star][2m] [C] [carmaa/interrogate](https://github.com/carmaa/interrogate) Interrogate is a proof-of-concept tool for identification of cryptographic keys in binary material (regardless of target operating system), first and foremost for memory dump analysis and forensic usage.
+- [**63**Star][5y] [Py] [c01db33f/concolica](https://github.com/c01db33f/concolica) Python concolic execution framework for program analysis
+- [**63**Star][3y] [C++] [breakingmalwareresearch/eleven](https://github.com/breakingmalwareresearch/eleven) Elevation by environment variable expansion
+- [**63**Star][5m] [Go] [botherder/snoopdigg](https://github.com/botherder/snoopdigg) Simple utility to ease the process of collecting evidence to find infections
+- [**63**Star][1y] [Shell] [bcapptain/dockernymous](https://github.com/bcapptain/dockernymous) A script used to create a whonix like gateway/workstation environment with docker containers.
+- [**63**Star][3m] [CMake] [argilo/gr-elster](https://github.com/argilo/gr-elster) A GNU Radio block that decodes packets transmitted by Elster R2S smart meters
+- [**63**Star][2m] [Py] [archlinux/arch-security-tracker](https://github.com/archlinux/arch-security-tracker) Arch Linux Security Tracker
+- [**63**Star][2y] [ObjC] [antoinet/valora](https://github.com/antoinet/valora) valora:利用随机源 MAC 地址和随机 SSID 生成 802.11 探测请求流,以迷惑 WiFi 追踪系统
+- [**63**Star][20d] [Py] [aliasrobotics/aztarna](https://github.com/aliasrobotics/aztarna) aztarna, a footprinting tool for robots.
+- [**63**Star][3m] [C] [adulau/ssldump](https://github.com/adulau/ssldump) (unofficial repository) of ssldump - + a myriad of patches (from Debian and other distributions + contribution (via PR))
+- [**63**Star][2y] [C++] [abenkhadra/spedi](https://github.com/abenkhadra/spedi) Speculative disassembly, CFG recovery, and call-graph recovery from stripped binaries.
+- [**63**Star][2y] [Perl] [0x90/vpn-arsenal](https://github.com/0x90/vpn-arsenal) VPN pentest tools and scripts
+- [**62**Star][15d] [Go] [harleo/asnip](https://github.com/harleo/asnip) ASN target organization IP range attack surface mapping for reconnaissance, fast and lightweight
+- [**62**Star][9d] [ga1ois/bluehat-2019-seattle](https://github.com/ga1ois/bluehat-2019-seattle) All the materials in BlueHat 2019 Seattle will be realeased here.
+- [**62**Star][19d] [payloadbox/xxe-injection-payload-list](https://github.com/payloadbox/xxe-injection-payload-list)
+- [**62**Star][29d] [Py] [draios/sysdigcloud-kubernetes](https://github.com/draios/sysdigcloud-kubernetes) Sysdig Cloud on Kubernetes
+- [**62**Star][19d] [C] [taviso/dbusmap](https://github.com/taviso/dbusmap) This is a simple utility for enumerating D-Bus endpoints, an nmap for D-Bus.
+- [**62**Star][9d] [C++] [intel/ad-rss-lib](https://github.com/intel/ad-rss-lib) Library implementing the Responsibility Sensitive Safety model (RSS) for Autonomous Vehicles
+- [**62**Star][4y] [Py] [tuter/monmob](https://github.com/tuter/monmob)
+- [**62**Star][2y] [Py] [vysecurity/maiint](https://github.com/vysecurity/MaiInt) OSINT Organization Employee Profiling Tool for MaiMai
+- [**62**Star][3y] [shmilylty/sec-box](https://github.com/shmilylty/Sec-Box) information security Tools Box (信息安全工具集合)
+- [**62**Star][9m] [weekend-hub/pentest-tools](https://github.com/weekEND-hub/pentest-tools) PenTest Tools
+- [**62**Star][2m] [C] [0e85dc6eaf/ctf-writeups](https://github.com/0e85dc6eaf/CTF-Writeups) Writeups/solutions
+- [**62**Star][1y] [Py] [avicoder/spoodle](https://github.com/avicoder/spoodle) spoodle:大规模子域名及 poodle漏洞扫描器
+- [**62**Star][4m] [Py] [crytic/pyevmasm](https://github.com/crytic/pyevmasm) Ethereum Virtual Machine (EVM) disassembler and assembler
+- [**62**Star][9m] [C] [zigzagsecurity/survival-guide-radare2](https://github.com/zigzagsecurity/survival-guide-radare2) Basic tutorials for reverse engineer with radare2
+- [**62**Star][2y] [Shell] [yukinoshita47/pentest-tools-auto-installer](https://github.com/yukinoshita47/pentest-tools-auto-installer) Tool sederhana buat install tool-tool pentest dan forensic bagi pengguna linux yang jenis nya non-pentest OS
+- [**62**Star][8y] [Java] [yifanlu/psxperia](https://github.com/yifanlu/psxperia) This tool will take a PSX image that you legally own and convert it to be playable on the Xperia Play with the emulator extracted from the packaged game "Crash Bandicoot."
+- [**62**Star][5y] [Py] [xipiter/idiotic](https://github.com/xipiter/idiotic) Simple ways to 0wn simple IOT devices
+- [**62**Star][2y] [C] [wlach/orangutan](https://github.com/wlach/orangutan) Simulate native events on Android-like devices
+- [**62**Star][4y] [C#] [wintellect/procmondebugoutput](https://github.com/wintellect/procmondebugoutput) See your trace statements in Sysinternals Process Monitor
+- [**62**Star][2y] [C] [vnik5287/kaslr_tsx_bypass](https://github.com/vnik5287/kaslr_tsx_bypass) Linux kASLR (Intel TSX/RTM) bypass static library
+- [**62**Star][2y] [C++] [tyranid/zeronights2017](https://github.com/tyranid/zeronights2017) Some sample code from my Zero Nights 2017 presentation.
+- [**62**Star][1y] [tyranid/windows-attacksurface-workshop](https://github.com/tyranid/windows-attacksurface-workshop) Workshop material for a Windows Attack Surface Analysis Workshop
+- [**62**Star][4y] [Py] [tony1016/burplogfilter](https://github.com/tony1016/burplogfilter) A python3 program to filter Burp Suite log file.
+- [**62**Star][2y] [Go] [tengzhangchao/portscan](https://github.com/tengzhangchao/portscan) 端口扫描器
+- [**62**Star][8m] [PS] [swizzlez/invoke-enumsecuritytools](https://github.com/swizzlez/invoke-enumsecuritytools)
+- [**62**Star][1y] [C] [shuax/locateip](https://github.com/shuax/locateip) 高效的IP数据库解析库
+- [**62**Star][2y] [Lua] [scipag/httprecon-nse](https://github.com/scipag/httprecon-nse) Advanced web server fingerprinting for Nmap
+- [**62**Star][1m] [HTML] [santandersecurityresearch/asvs](https://github.com/santandersecurityresearch/asvs) A simple web app that helps developers understand the ASVS requirements.
+- [**62**Star][4y] [Py] [rich5/harness](https://github.com/rich5/harness) Interactive remote PowerShell Payload
+- [**62**Star][5m] [Ruby] [rhtconsulting/cfme-rhconsulting-scripts](https://github.com/rhtconsulting/cfme-rhconsulting-scripts)
+- [**62**Star][6m] [PS] [psconfeu/2019](https://github.com/psconfeu/2019) Code, Materials and Slides for psconf.eu 2019
+- [**62**Star][4y] [Py] [poorbillionaire/windows-prefetch-parser](https://github.com/poorbillionaire/windows-prefetch-parser) Parse Windows Prefetch files: Supports XP - Windows 10 Prefetch files
+- [**62**Star][2y] [PHP] [pklink/ppma](https://github.com/pklink/ppma) [INACTIVE] PHP Password Manager
+- [**62**Star][5m] [Py] [pinnace/burp-jwt-fuzzhelper-extension](https://github.com/pinnace/burp-jwt-fuzzhelper-extension) burp-jwt-fuzzhelper-extension: Burp扩展, 用于Fuzzing JWT
+- [**62**Star][1y] [C++] [paranoidninja/scriptdotsh-malwaredevelopment](https://github.com/paranoidninja/scriptdotsh-malwaredevelopment) This repo will contain code snippets for blogs: Malware on Steroids written by me at
+- [**62**Star][2y] [Go] [openprovider/whoisd](https://github.com/openprovider/whoisd) Openprovider WHOIS server/daemon
+- [**62**Star][5y] [Py] [nullhypothesis/scramblesuit](https://github.com/nullhypothesis/scramblesuit) The ScrambleSuit traffic obfuscation protocol.
+- [**62**Star][2y] [C] [nccgroup/cachegrab](https://github.com/nccgroup/cachegrab) 执行和可视化针对软件的由 trace 驱动的缓存攻击(需要启用TrustZone 的 ARMv8 内核)
+- [**62**Star][2m] [Go] [moldabekov/virusgotal](https://github.com/moldabekov/virusgotal)
+- [**62**Star][26d] [Dockerfile] [misp/misp-docker](https://github.com/misp/misp-docker) MISP Docker (XME edition)
+- [**62**Star][7m] [C] [merlijnwajer/tracy](https://github.com/merlijnwajer/tracy) tracy - a system call tracer and injector. Find us in #tracy on irc.freenode.net
+- [**62**Star][7m] [C] [luoyanbei/testhookzz](https://github.com/luoyanbei/testhookzz) iOS逆向:使用HookZz框架hook游戏“我的战争”,进入上帝模式
+- [**62**Star][1y] [Py] [lclevy/unarcrypto](https://github.com/lclevy/unarcrypto) unarcrypto:描述 zip、rar、7zip 使用的加密算法
+- [**62**Star][2y] [Py] [lbarman/kali-tools](https://github.com/lbarman/kali-tools) Run Kali tools on all distributions. Offline search, including in package descriptions.
+- [**62**Star][1y] [kutim/docker-security](https://github.com/kutim/docker-security) docker 安全基线规范
+- [**62**Star][2m] [Go] [knqyf263/gost](https://github.com/knqyf263/gost) Build a local copy of Security Tracker. Notify via E-mail/Slack if there is an update.
+- [**62**Star][1y] [Ruby] [kingsabri/cve-in-ruby](https://github.com/kingsabri/cve-in-ruby) Exploits written & ported to Ruby - no Metasploit
+- [**62**Star][1m] [Shell] [joshuamart/autorecon](https://github.com/joshuamart/autorecon) Simple shell script for automated domain recognition with some tools
+- [**62**Star][2y] [Go] [johnsonz/go-sni-detector](https://github.com/johnsonz/go-sni-detector) A go application to scan sni ip
+- [**62**Star][8m] [Dockerfile] [john-lin/docker-snort](https://github.com/john-lin/docker-snort) Snort in Docker for Network Functions Virtualization (NFV)
+- [**62**Star][5y] [C] [jiayy/lkm-rootkit](https://github.com/jiayy/lkm-rootkit) an lkm rootkit support x86/64,arm,mips
+- [**62**Star][5y] [MATLAB] [jiaoxianjun/rtl-sdr-lte](https://github.com/jiaoxianjun/rtl-sdr-lte) Play with LTE signal (especially China TD-LTE) captured by rtl-sdr
+- [**62**Star][9m] [Py] [jaksi/awslog](https://github.com/jaksi/awslog) Show the history and changes between configuration versions of AWS resources
+- [**62**Star][28d] [JS] [hugsy/windbg_js_scripts](https://github.com/hugsy/windbg_js_scripts) Toy scripts for playing with WinDbg JS API
+- [**62**Star][3y] [C++] [hexhive/malwash](https://github.com/hexhive/malwash)
+- [**62**Star][3y] [Py] [hackinglab/mobilesf](https://github.com/hackinglab/mobilesf) HackingLab定制版Mobile Safe Framework
+- [**62**Star][1y] [Py] [ha3mrx/hacking](https://github.com/ha3mrx/hacking) Ha3Mrx Pentesting and Security Hacking
+- [**62**Star][1m] [Shell] [gentoo/libressl](https://github.com/gentoo/libressl) [MIRROR] LibreSSL ebuilds testing repository
+- [**62**Star][7y] [C] [gdbinit/osx_boubou](https://github.com/gdbinit/osx_boubou) A PoC Mach-O infector via library injection
+- [**62**Star][7m] [Kotlin] [fs0c131y/samsunglocker](https://github.com/fs0c131y/samsunglocker) Samsung ContainerAgent Vulnerability - Local DoS for Samsung smartphone
+- [**62**Star][2y] [Py] [frky/scat](https://github.com/frky/scat) Dynamic analysis of binary programs to retrieve function-related information (arity, type of parameters, coupling).
+- [**62**Star][7m] [C++] [fare9/anbu](https://github.com/fare9/anbu) ANBU (Automatic New Binary Unpacker) a tool for me to learn about PIN and about algorithms for generic unpacking.
+- [**62**Star][7m] [C++] [explife0011/cve-2019-0803](https://github.com/explife0011/cve-2019-0803) Win32k Elevation of Privilege Poc
+- [**62**Star][7m] [Py] [engmaher/baf](https://github.com/engmaher/baf) Blind Attacking Framework
+- [**62**Star][1y] [C] [emptymonkey/drinkme](https://github.com/emptymonkey/drinkme) drinkme:从 stdin 读取 ShellCode 并执行。用于部署 ShellCode 之前测试
+- [**62**Star][22d] [drduh/pc-engines-apu-router-guide](https://github.com/drduh/pc-engines-apu-router-guide) Guide to building a Linux or BSD router on the PC Engines APU platform
+- [**62**Star][3m] [PHP] [divineomega/laravel-password-exposed-validation-rule](https://github.com/divineomega/laravel-password-exposed-validation-rule)
+- [**62**Star][4m] [Shell] [developerkunal/converto](https://github.com/developerkunal/converto) Installing Kali linux on Vps Server
+- [**62**Star][25d] [Py] [deepdivesec/gitmad](https://github.com/deepdivesec/gitmad) Monitor, Alert, and Discover sensitive info and data leakage on Github.
+- [**62**Star][12m] [C] [darm64/xnu](https://github.com/darm64/xnu) Research into porting the XNU kernel to ARM devices.
+- [**62**Star][25d] [JS] [curiousdannii/ifvms.js](https://github.com/curiousdannii/ifvms.js) The Interactive Fiction Virtual Machines Suite - in Javascript
+- [**62**Star][2m] [PHP] [cosasdepuma/securitynotfound](https://github.com/cosasdepuma/securitynotfound)
+- [**62**Star][13d] [C] [cn-uofbasel/ccn-lite](https://github.com/cn-uofbasel/ccn-lite) CCN-lite, a lightweight implementation of the CCNx protocol and its variations
+- [**62**Star][11m] [cmatthewbrooks/r2kit](https://github.com/cmatthewbrooks/r2kit) A set of scripts for a radare-based malware code analysis workflow
+- [**62**Star][6m] [Py] [catalyst256/myjunk](https://github.com/catalyst256/myjunk) Just random files I've stored here for people to get access to because wordpress doesn't like python.
+- [**62**Star][2y] [Java] [calebwhiting/java-asm-obfuscator](https://github.com/calebwhiting/java-asm-obfuscator)
+- [**62**Star][2y] [JS] [auth0/webtask-scripts](https://github.com/auth0/webtask-scripts)
+- [**62**Star][7m] [Py] [andy10101/apksecurityanalysis](https://github.com/andy10101/apksecurityanalysis) ApkSecurityAnalysis
+- [**62**Star][2y] [C++] [agustingianni/retools](https://github.com/agustingianni/retools) retools: a reverse engineering toolkit for normies
+- [**62**Star][2y] [AutoIt] [9aylas/shortcut-payload-generator](https://github.com/9aylas/shortcut-payload-generator) AutoIt HackTool, Shortcuts .lnk Payloads Generator As LNK-KISSER.
+- [**62**Star][9m] [Py] [3lackrush/poc-bank](https://github.com/3lackrush/poc-bank) Focus on cybersecurity | collection of PoC and Exploits
+- [**62**Star][2y] [3gstudent/bitsadminexec](https://github.com/3gstudent/bitsadminexec) 利用bitsadmin 实现驻留,以及自动运行
+- [**62**Star][10m] [Py] [cse-assemblyline/assemblyline](https://bitbucket.org/cse-assemblyline/assemblyline)
+- [**61**Star][5y] [Py] [byt3bl33d3r/dhcpshock](https://github.com/byt3bl33d3r/dhcpshock) Spoofs a DHCP server and exploits all clients vulnerable to the 'ShellShock' bug
+- [**61**Star][2y] [wtsxdev/fuzzing-resources](https://github.com/wtsxdev/fuzzing-resources) List of fuzzing resources for learning Fuzzing and initial phases of Exploit Development like root cause analysis
+- [**61**Star][1y] [Py] [dafthack/rdpspray](https://github.com/dafthack/rdpspray) Tool for password spraying RDP
+- [**61**Star][4y] [ObjC] [project-imas/securefoundation](https://github.com/project-imas/securefoundation) Secure components enabling application authentication, secure file storage, app level file-based keychain, and shredding for files on disk
+- [**61**Star][8d] [C] [chroblert/domainweakpasswdcheck](https://github.com/chroblert/domainweakpasswdcheck) 内网安全·域账号弱口令审计
+- [**61**Star][6d] [CSS] [hacker0x01/docs.hackerone.com](https://github.com/hacker0x01/docs.hackerone.com) HackerOne Platform Documentation
+- [**61**Star][8m] [Ruby] [gushmazuko/winbypass](https://github.com/gushmazuko/winbypass) Windows UAC Bypass
+- [**61**Star][6y] [Java] [gat3way/airpirate](https://github.com/gat3way/airpirate) Android 802.11 pentesting tool
+- [**61**Star][6m] [Py] [joshvillbrandt/wireless](https://github.com/joshvillbrandt/wireless) A dead simple, cross-platform Python library to connect to wireless networks.
+- [**61**Star][2m] [Jupyter Notebook] [misinfosecproject/amitt_framework](https://github.com/misinfosecproject/amitt_framework) AMITT (Adversarial Misinformation and Influence Tactics and Techniques) framework for describing disinformation incidents. AMITT is part of misinfosec - work on adapting information security practices to help track and counter misinformation - and is designed as far as possible to fit existing infosec practices and tools.
+- [**61**Star][7y] [JS] [enablesecurity/webapp-exploit-payloads](https://github.com/EnableSecurity/Webapp-Exploit-Payloads) a collection of payloads for common webapps
+- [**61**Star][12m] [imfht/scansql](https://github.com/imfht/ScanSql) 利用sqlmap和URL去重的爬虫写的一个大规模扫描的脚本
+- [**61**Star][2y] [Shell] [m4lv0id/lare](https://github.com/m4lv0id/LARE) [L]ocal [A]uto [R]oot [E]xploiter is a simple bash script that helps you deploy local root exploits from your attacking machine when your victim machine do not have internet connectivity.
+- [**61**Star][7m] [PHP] [michyamrane/wso-webshell](https://github.com/mIcHyAmRaNe/wso-webshell)
+- [**61**Star][2y] [Py] [feexd/vbg](https://github.com/feexd/vbg) vbg: 使用X11转发的SSH会话远程在客户端执行指令
+- [**61**Star][1y] [PS] [danmcinerney/msfbot](https://github.com/DanMcInerney/msfbot) WORK IN PROGRESS. Waits for MSF session then automatically gets domain admin
+- [**61**Star][4y] [Shell] [praetorian-code/epictreasure](https://github.com/praetorian-code/epictreasure) radare, angr, pwndbg, binjitsu, ect in a box ready for pwning
+- [**61**Star][1y] [C] [zhuowei/qemu](https://github.com/zhuowei/qemu) Patched version of QEMU for exploring XNU arm64 emulation.
+- [**61**Star][6m] [JS] [ysocorp/koa2-ratelimit](https://github.com/ysocorp/koa2-ratelimit) Rate-limiting middleware for Koa2 ES6. Use to limit repeated requests to APIs and/or endpoints such as password reset.
+- [**61**Star][29d] [Lua] [yelp/casper](https://github.com/yelp/casper) Yelp's internal caching proxy, powered by Nginx and OpenResty at its core
+- [**61**Star][2y] [Py] [yassergersy/sub6](https://github.com/yassergersy/sub6) Web App Scanner
+- [**61**Star][8m] [C++] [yajs/nikpeviewer](https://github.com/yajs/nikpeviewer) NikPEViewer a PE viewer source code
+- [**61**Star][2y] [Perl] [xlogicx/m2elf](https://github.com/xlogicx/m2elf) Converts Machine Code to x86 (32-bit) Linux executable (auto-wrapping with ELF headers)
+- [**61**Star][1y] [wjpdeveloper/my-action-github](https://github.com/wjpdeveloper/my-action-github) my-action-github
+- [**61**Star][3y] [Lua] [waffles-2/sambacry](https://github.com/waffles-2/sambacry) CVE-2017-7494 - Detection Scripts
+- [**61**Star][7m] [Shell] [vs4vijay/swissarmypi](https://github.com/vs4vijay/swissarmypi) A set of utility/tools to make Raspberry Pi [Zero W] into Swiss Army Knife
+- [**61**Star][4y] [Py] [veil-framework/veil-ordnance](https://github.com/veil-framework/veil-ordnance) Veil-Ordnance is a tool designed to quickly generate MSF stager shellcode
+- [**61**Star][8m] [Py] [treussart/probemanager](https://github.com/treussart/probemanager) Centralize Management of Intrusion Detection System like Suricata Bro Ossec ...
+- [**61**Star][3y] [Py] [trailofbits/deceptiveidn](https://github.com/trailofbits/deceptiveidn) deceptiveidn: 利用计算机视觉(computer vision)自动检测 IDN 是否具有欺骗性(a deceptive reading)。(IDN: Internationalized Domain Names,国际化域名)
+- [**61**Star][2y] [C] [tobaljackson/2017-sit-re-presentation](https://github.com/tobaljackson/2017-sit-re-presentation) Intro to radare2 presentation files.
+- [**61**Star][2y] [PS] [tenable/posh-nessus](https://github.com/tenable/posh-nessus) PowerShell Module for automating Tenable Nessus Vulnerability Scanner.
+- [**61**Star][1y] [C++] [tandasat/debuglogger](https://github.com/tandasat/debuglogger) A software driver that lets you log kernel-mode debug output into a file on Windows.
+- [**61**Star][4y] [C++] [t-vk/memory-hacking-class](https://github.com/t-vk/memory-hacking-class) Easy to use class to read and modify other processes memory.
+- [**61**Star][3y] [Py] [syss-research/radio-hackbox](https://github.com/syss-research/radio-hackbox) PoC tool to demonstrate vulnerabilities in wireless input devices
+- [**61**Star][4y] [Py] [sysinsider/usbtracker](https://github.com/sysinsider/usbtracker) Quick & dirty coded incident response and forensics python script to track USB devices events and artifacts in a Windows OS (Vista and later).
+- [**61**Star][1y] [C] [synestraa/highcall-library](https://github.com/synestraa/highcall-library) usermode standalone kernel interface
+- [**61**Star][4y] [C++] [strozfriedberg/ntfs-linker](https://github.com/strozfriedberg/ntfs-linker) An NTFS journal parser
+- [**61**Star][1y] [Py] [srounet/pymem](https://github.com/srounet/pymem) A python library for windows, providing the needed functions to start working on your own with memory editing.
+- [**61**Star][5y] [CoffeeScript] [sroberts/hubot-vtr-scripts](https://github.com/sroberts/hubot-vtr-scripts) Scripts for making Hubot a CND Sidekick
+- [**61**Star][5y] [PHP] [smaash/fuckshitup](https://github.com/smaash/fuckshitup) php-cli vulnerability scanner
+- [**61**Star][4y] [C] [sha0/winvblock](https://github.com/sha0/winvblock) WinVBlock (derived from WinAoE) AoE, MEMDISK, GRUB4DOS RAM Disk, File-Backed Disk Driver
+- [**61**Star][4y] [Py] [secretsquirrel/backdoor-pyc](https://github.com/secretsquirrel/backdoor-pyc) Patch pyc files with your code. Fairly lame.
+- [**61**Star][3y] [Py] [samyk/awesome-vehicle-security](https://github.com/samyk/awesome-vehicle-security)
+- [**61**Star][2y] [ObjC] [rickhe/rhwechat](https://github.com/rickhe/rhwechat) iOS 无需越狱逆向微信:自动抢红包
+- [**61**Star][2y] [Py] [pimps/cve-2018-7600](https://github.com/pimps/cve-2018-7600) Exploit for Drupal 7 <= 7.57 CVE-2018-7600
+- [**61**Star][1y] [pfalcon/awesome-linux-android-hacking](https://github.com/pfalcon/awesome-linux-android-hacking) List of hints and Q&As to get most of your Linux/Android device
+- [**61**Star][4y] [HTML] [payatu/cve-2015-6086](https://github.com/payatu/cve-2015-6086) PoC for CVE-2015-6086
+- [**61**Star][7y] [pakt/decv](https://github.com/pakt/decv) Decompiler for Code Virtualizer 1.3.8 (Oreans)
+- [**61**Star][4y] [C++] [oowoodone/vmp_odplugin](https://github.com/oowoodone/vmp_odplugin) VMProtect OD Plugin
+- [**61**Star][2y] [Py] [oalabs/pyiatrebuild](https://github.com/oalabs/pyiatrebuild) Automatically rebuild Import Address Table for dumped PE file. With python bindings!
+- [**61**Star][4y] [C++] [null--/graviton](https://github.com/null--/graviton) Cross Platform Malware Development Framework
+- [**61**Star][3y] [nanopool/claymore-xmr-cpu-miner](https://github.com/nanopool/claymore-xmr-cpu-miner) Claymore's CryptoNote Windows CPU Miner
+- [**61**Star][3y] [Py] [n00py/post-ex](https://github.com/n00py/post-ex) Post-exploitation scripts for OS X persistence and privesc
+- [**61**Star][2y] [Go] [mwgg/passera](https://github.com/mwgg/passera) [UNSUPPORTED] A small tool to turn any entered passphrase into a strong secure password, allowing you to easily use different strong passwords for different websites without storing them
+- [**61**Star][2y] [HTML] [michenriksen/bucketlist](https://github.com/michenriksen/bucketlist) Amazon S3 bucket spelunking!
+- [**61**Star][4y] [Py] [michael-yip/maltegovt](https://github.com/michael-yip/maltegovt) A set of Maltego transforms for VirusTotal Public API v2.0. This set has the added functionality of caching queries on a daily basis to speed up resolutions.
+- [**61**Star][2y] [PS] [mattifestation/pocsubjectinterfacepackage](https://github.com/mattifestation/pocsubjectinterfacepackage) A proof-of-concept subject interface package (SIP) used to demonstrate digital signature subversion attacks.
+- [**61**Star][3y] [C++] [maldevel/driver-loader](https://github.com/maldevel/driver-loader) Windows驱动加载器
+- [**61**Star][3y] [Py] [lijiejie/struts2_045_scan](https://github.com/lijiejie/struts2_045_scan) Struts2-045 Scanner
+- [**61**Star][9m] [Go] [lesnuages/go-execute-assembly](https://github.com/lesnuages/go-execute-assembly) Allow a Go process to dynamically load .NET assemblies
+- [**61**Star][6y] [Py] [kevthehermit/yarapcap](https://github.com/kevthehermit/yarapcap) Process HTTP Pcaps With YARA
+- [**61**Star][5m] [Py] [josue87/boomer](https://github.com/josue87/boomer) Framework for exploiting local vulnerabilities
+- [**61**Star][4y] [JS] [joliss/js-string-escape](https://github.com/joliss/js-string-escape) Escape strings for use as JavaScript string literals
+- [**61**Star][5d] [C] [jessfraz/tor](https://github.com/jessfraz/tor) Development fork of
+- [**61**Star][4y] [C#] [jaredcatkinson/evilnetconnectionwmiprovider](https://github.com/jaredcatkinson/evilnetconnectionwmiprovider)
+- [**61**Star][6y] [Java] [isecpartners/android-killpermandsigchecks](https://github.com/isecpartners/android-killpermandsigchecks) Bypass signature and permission checks for IPCs
+- [**61**Star][1y] [im-bug/blockchain-security-list](https://github.com/im-bug/blockchain-security-list)
+- [**61**Star][5y] [Py] [hamiltoniancycle/classnamedeobfuscator](https://github.com/hamiltoniancycle/classnamedeobfuscator) Simple script to parse through the .smali files produced by apktool and extract the .source annotation lines.
+- [**61**Star][3m] [Py] [hacksysteam/wpadescape](https://github.com/hacksysteam/wpadescape) Sandbox escape using WinHTTP Web Proxy Auto-Discovery Service
+- [**61**Star][11m] [Py] [graniet/operative-framework-hd](https://github.com/graniet/operative-framework-hd) operative framework HD is the digital investigation framework, you can interact with websites, email address, company, people, ip address, vulnerability fuzzing ... interact with basic/graphical view and export with XML, JSON, use database management...
+- [**61**Star][5y] [Assembly] [gdbinit/mpress_dumper](https://github.com/gdbinit/mpress_dumper) MPRESS dumper for OS X
+- [**61**Star][1y] [Assembly] [gamozolabs/falkervisor_beta](https://github.com/gamozolabs/falkervisor_beta)
+- [**61**Star][6y] [C] [freewaf/waf-pe](https://github.com/freewaf/waf-pe) Open Source Web Application Firewall Protection Engine
+- [**61**Star][5y] [C] [evilsocket/libpe](https://github.com/evilsocket/libpe) A C/C++ library to parse Windows portable executables written with speed and stability in mind.
+- [**61**Star][7m] [Ruby] [engineyard/engineyard-serverside](https://github.com/engineyard/engineyard-serverside) This gem deploys your application on Engine Yard Cloud.
+- [**61**Star][11m] [JS] [dxa4481/xssoauthpersistence](https://github.com/dxa4481/xssoauthpersistence) Maintaining account persistence via XSS and Oauth
+- [**61**Star][3y] [Java] [dodola/simplesmali](https://github.com/dodola/simplesmali) 通过精简Smali语法细节来增强反编译代码阅读性,自定义了一种简单语法
+- [**61**Star][2y] [Swift] [devxoul/blockchain](https://github.com/devxoul/blockchain) A blockchain simulator written in Swift
+- [**61**Star][7y] [Py] [danghvu/pwp](https://github.com/danghvu/pwp) Python Web framework P0wner
+- [**61**Star][2y] [PS] [curi0usjack/adimporter](https://github.com/curi0usjack/adimporter) Credit to Helge Klein -
+- [**61**Star][20d] [Py] [crs-support/ftw](https://github.com/crs-support/ftw) Framework for Testing WAFs (FTW!)
+- [**61**Star][3y] [Assembly] [cranklin/cranky-data-virus](https://github.com/cranklin/cranky-data-virus) Educational virus written in Assembly that infects 32-bit ELF executables on Linux using the data segment infection method
+- [**61**Star][2y] [C] [convisoappsec/firefox_tunnel](https://github.com/convisoappsec/firefox_tunnel) 使用Firefox来建立远程通信隧道, 使用cookie.sqlite/html/js实现payload上传下载
+- [**61**Star][10m] [Py] [cisco-sas/katnip](https://github.com/cisco-sas/katnip) Extension library for the Kitty fuzzing framework
+- [**61**Star][2y] [Py] [cifasis/nosy-newt](https://github.com/cifasis/nosy-newt) Nosy Newt is a simple concolic execution tool for exploring the input space of a binary executable program based in Triton
+- [**61**Star][9y] [C] [chronic-dev/bootrom-dumper](https://github.com/chronic-dev/bootrom-dumper) Utility to Dump iPhone Bootrom
+- [**61**Star][5m] [Py] [christophetd/ipv6teal](https://github.com/christophetd/ipv6teal)
+- [**61**Star][5m] [Py] [b-mueller/scrooge-mcetherface](https://github.com/b-mueller/scrooge-mcetherface) Attack tool that loots Ether from vulnerable smart contracts
+- [**61**Star][7m] [C++] [apexlegendsuc/anti-cheat-emulator](https://github.com/apexlegendsuc/anti-cheat-emulator)
+- [**61**Star][1y] [Py] [anbai-inc/cve-2018-2893](https://github.com/anbai-inc/cve-2018-2893) CVE-2018-2893
+- [**61**Star][3y] [Shell] [abs0/wargames](https://github.com/abs0/wargames) Shell script to simulate the W.O.P.R. computer from WarGames (wopr)
+- [**60**Star][3m] [Go] [dvyukov/go-fuzz-corpus](https://github.com/dvyukov/go-fuzz-corpus) Corpus for github.com/dvyukov/go-fuzz examples
+- [**60**Star][3d] [Py] [tribler/py-ipv8](https://github.com/tribler/py-ipv8) Python implementation of the IPv8 layer
+- [**60**Star][30d] [Shell] [nccgroup/asafw](https://github.com/nccgroup/asafw) Set of scripts to deal with Cisco ASA firmware [pack/unpack etc.]
+- [**60**Star][4y] [shadowsocks/tun2socks-ios](https://github.com/shadowsocks/tun2socks-ios) tun2socks as a library for iOS apps
+- [**60**Star][4m] [motherfuzzers/meetups](https://github.com/motherfuzzers/meetups) Materials from Fuzzing Bay Area meetups
+- [**60**Star][4m] [JS] [phith0n/xray-poc-generation](https://github.com/phith0n/xray-poc-generation) 🧬 辅助生成 XRay YAML POC
+- [**60**Star][1m] [HCL] [jordanpotti/offensiveclouddistribution](https://github.com/jordanpotti/offensiveclouddistribution) Leverage the ability of Terraform and AWS or GCP to distribute large security scans across numerous cloud instances.
+- [**60**Star][2m] [JS] [atlasnx/web-cfw-loader](https://github.com/atlasnx/web-cfw-loader) A payload launcher made in javascript for the Nintendo Switch
+- [**60**Star][2m] [Py] [landgrey/cve-2019-7609](https://github.com/landgrey/cve-2019-7609) exploit CVE-2019-7609(kibana RCE) on right way by python2 scripts
+- [**60**Star][2y] [C] [samuelpowell/cx10-fnrf](https://github.com/samuelpowell/CX10-FNRF) Cheerson CX10 rate mode firmware with integrated RF
+- [**60**Star][8m] [C++] [intel/satt](https://github.com/intel/satt)
+- [**60**Star][2m] [C++] [imugee/pegasus](https://github.com/imugee/pegasus) reverse engineering extension plugin for windbg
+- [**60**Star][3y] [Java] [censorship-no-archive/ceno1](https://github.com/censorship-no-archive/ceno1) (Deprecated PoC) Innovative censorship evading technology based on p2p distributed caching network
+- [**60**Star][5m] [Py] [zznop/bnida](https://github.com/zznop/bnida) Suite of plugins that provide the ability to transfer analysis data between Binary Ninja and IDA
+ - [ida_export](https://github.com/zznop/bnida/blob/master/ida/ida_export.py) 将数据从IDA中导入
+ - [ida_import](https://github.com/zznop/bnida/blob/master/ida/ida_import.py) 将数据导入到IDA
+ - [binja_export](https://github.com/zznop/bnida/blob/master/binja_export.py) 将数据从BinaryNinja中导出
+ - [binja_import](https://github.com/zznop/bnida/blob/master/binja_import.py) 将数据导入到BinaryNinja
+- [**60**Star][4y] [Ruby] [zombiecraig/c0f](https://github.com/zombiecraig/c0f) CAN of Fingers (c0f) creates passive fingerprints of Make and Model over CAN bus
+- [**60**Star][7d] [Py] [yingshang/banruo](https://github.com/yingshang/banruo)
+- [**60**Star][7m] [Py] [ultrasecurity/telekiller](https://github.com/ultrasecurity/telekiller) A Tools Session Hijacking And Stealer Local Passcode Telegram Windows
+- [**60**Star][4y] [Py] [tycx2ry/docker_api_vul](https://github.com/tycx2ry/docker_api_vul) docker 未授权访问漏洞利用脚本
+- [**60**Star][8m] [JS] [try-to/electron-proxy](https://github.com/try-to/electron-proxy) 基于electron开发的内网穿透工具,支持多系统,支持任意本地端口.
+- [**60**Star][2y] [Py] [tmr232/idabuddy](https://github.com/tmr232/idabuddy) a reverse-engineer's best friend. Designed to be everything Clippy the Office Assistant was, and more!
+- [**60**Star][2y] [tkmru/awesome-linux-rootkits](https://github.com/tkmru/awesome-linux-rootkits)
+- [**60**Star][10m] [ObjC] [tihmstar/v3ntex](https://github.com/tihmstar/v3ntex) getf tfp0 on iOS 12.0 - 12.1.2
+- [**60**Star][6m] [Py] [thesph1nx/spacecow](https://github.com/thesph1nx/spacecow) Windows Rootkit written in Python
+- [**60**Star][6m] [PS] [texhex/biossledgehammer](https://github.com/texhex/biossledgehammer) Automated BIOS, ME, TPM firmware update and BIOS settings for HP devices
+- [**60**Star][1y] [Ruby] [tallakt/modbus-cli](https://github.com/tallakt/modbus-cli) Modbus command line utility
+- [**60**Star][4y] [Objective-C++] [steven-michaud/reverse-engineering-on-osx](https://github.com/steven-michaud/reverse-engineering-on-osx) Reverse Engineering on OS X
+- [**60**Star][4m] [OCaml] [stephenrkell/libcrunch](https://github.com/stephenrkell/libcrunch) Runtime + instrumentation adding precise, accurate and fash(-ish) dynamic checking to C (bounds errors, type confusion, ...).
+- [**60**Star][2y] [Java] [stefano-lupo/java-proxy-server](https://github.com/stefano-lupo/java-proxy-server) This is a simple HTTP/HTTPS proxy server written in Java
+- [**60**Star][7m] [Ruby] [skahwah/automato](https://github.com/skahwah/automato) automato should help with automating some of the user-focused enumeration tasks during an internal penetration test.
+- [**60**Star][8y] [Py] [sensepost/anapickle](https://github.com/sensepost/anapickle) Toolset for writing shellcode in Python's Pickle language and for manipulating pickles to inject shellcode.
+- [**60**Star][2y] [secwiki/macos-kernel-exploits](https://github.com/secwiki/macos-kernel-exploits) macos-kernel-exploits MacOS平台提权漏洞集合
+- [**60**Star][9m] [C#] [securifybv/shelllink](https://github.com/securifybv/shelllink) A .NET Class Library for processing ShellLink (LNK) files
+- [**60**Star][4y] [Py] [samvartaka/malware](https://github.com/samvartaka/malware) Various malware, packer, crypter, etc. detection and analysis tools
+- [**60**Star][3y] [C++] [rprichard/win32-console-docs](https://github.com/rprichard/win32-console-docs) Win32 Console Documentation -- in particular, console/standard handles and CreateProcess inheritance
+- [**60**Star][17d] [JS] [rastating/xss-chef](https://github.com/rastating/xss-chef) A web application for generating custom XSS payloads
+- [**60**Star][2m] [Py] [quarkslab/lldbagility](https://github.com/quarkslab/lldbagility) A tool for debugging macOS virtual machines
+- [**60**Star][4y] [Py] [phith0n/xdctf2015](https://github.com/phith0n/xdctf2015) writeup about XDCTF 2015
+- [**60**Star][6m] [Py] [pdkt-team/ctf](https://github.com/pdkt-team/ctf) CTF write-ups by PDKT team with English and Indonesian language
+- [**60**Star][5y] [Py] [owtf/wafbypasser](https://github.com/owtf/wafbypasser)
+- [**60**Star][17d] [netstalking-core/netstalking-catalogue](https://github.com/netstalking-core/netstalking-catalogue) Каталог нетсталкерских ресурсов, команд, инструментов, источников контента.
+- [**60**Star][5y] [PHP] [nccgroup/webfeet](https://github.com/nccgroup/webfeet) Web Filter External Enumeration Tool (WebFEET)
+- [**60**Star][11d] [Vue] [nao-sec/tknk_scanner](https://github.com/nao-sec/tknk_scanner) 基于社区的集成恶意软件识别系统
+- [**60**Star][2y] [Py] [mthbernardes/whoamimailbot](https://github.com/mthbernardes/whoamimailbot)
+- [**60**Star][1y] [HTML] [micyo202/yan-demo](https://github.com/micyo202/yan-demo) 本项目是基于 SpringMVC+Spring+MyBatis (SSM) 架构的高效率便捷开发框架
+- [**60**Star][6d] [C] [lnslbrty/ptunnel-ng](https://github.com/lnslbrty/ptunnel-ng) Tunnel TCP connections through ICMP.
+- [**60**Star][3y] [Py] [leonjza/qrxfer](https://github.com/leonjza/qrxfer) Transfer files from Air gapped machines using QR codes
+- [**60**Star][5m] [C] [lazenca/kernel-exploit-tech](https://github.com/lazenca/kernel-exploit-tech) Linux Kernel exploitation Tutorial.
+- [**60**Star][3y] [PS] [kevin-robertson/conveigh](https://github.com/kevin-robertson/conveigh) Conveigh is a Windows PowerShell LLMNR/NBNS spoofer detection tool
+- [**60**Star][2y] [C++] [jmasterx/agui](https://github.com/jmasterx/agui) C++ GUI API Aimed at Games
+- [**60**Star][5y] [Go] [jgrahamc/torhoney](https://github.com/jgrahamc/torhoney) Gets the list of TOR exit nodes and matches them with Project Honeypot data
+- [**60**Star][1y] [Java] [java-deobfuscator/deobfuscator-gui](https://github.com/java-deobfuscator/deobfuscator-gui) An awesome GUI for an awesome deobfuscator
+- [**60**Star][7y] [Java] [intrepidusgroup/iglogger](https://github.com/intrepidusgroup/iglogger) Class to help with adding logging function in smali output from 3rd party Android apps.
+- [**60**Star][3y] [Py] [iamckn/mousejack_transmit](https://github.com/iamckn/mousejack_transmit) Wireless mouse/keyboard attack with replay/transmit poc
+- [**60**Star][3y] [C] [hoshimin/enjoythering0](https://github.com/hoshimin/enjoythering0) Шаблон полнофункционального драйвера и обёртки над ядерным API
+- [**60**Star][4y] [Py] [hood3drob1n/cve-2016-3714](https://github.com/hood3drob1n/cve-2016-3714) ImaegMagick Code Execution (CVE-2016-3714)
+- [**60**Star][2y] [C++] [hasherezade/mypintools](https://github.com/hasherezade/mypintools) Tools to run with Intel PIN
+- [**60**Star][5y] [PS] [harmj0y/cortana](https://github.com/harmj0y/cortana) This is a pack of Cortana scripts commonly used on our pentests.
+- [**60**Star][8m] [Py] [grocid/ctf](https://github.com/grocid/ctf)
+- [**60**Star][2y] [C] [gravity-postquantum/gravity-sphincs](https://github.com/gravity-postquantum/gravity-sphincs) Signature scheme submitted to NIST's Post-Quantum Cryptography Project
+- [**60**Star][5d] [JS] [gitsquared/sherlock-js](https://github.com/gitsquared/sherlock-js) Find usernames across over 170 social networks - Fast & flexible remake of sdushantha/sherlock
+- [**60**Star][2y] [Java] [geeksonsecurity/android-overlay-malware-example](https://github.com/geeksonsecurity/android-overlay-malware-example) Harmless Android malware using the overlay technique to steal user credentials.
+- [**60**Star][1y] [Shell] [galeone/letsencrypt-lighttpd](https://github.com/galeone/letsencrypt-lighttpd) Renew your let's encrypt certificates monthly, using lighttpd as webserver.
+- [**60**Star][3y] [Py] [fireeye/volatility-plugins](https://github.com/fireeye/volatility-plugins)
+- [**60**Star][2y] [C++] [finixbit/ftrace](https://github.com/finixbit/ftrace) Simple Function calls tracer
+- [**60**Star][4y] [PHP] [filetofirewall/fof](https://github.com/filetofirewall/fof) Filet-O-Firewall Vulnerability PoC
+- [**60**Star][5y] [Py] [eykd/owyl](https://github.com/eykd/owyl) A python behavior tree for implementing fast and flexible AI.
+- [**60**Star][10m] [exitmsconfig/engineering-box](https://github.com/exitmsconfig/engineering-box) engineering Box (简称 - engineering) 是一个集合github平台上的安全行业从业者自研开源扫描器的仓库,包括子域名枚举、数据库漏洞扫描、弱口令或信息泄漏扫描、端口扫描、指纹识别以及其他大型扫描器或模块化扫描器,同时该仓库只收录各位安全行业从业者自己编写的一般性开源扫描器,类似awvs、nmap、w3af等知名扫描工具不收录,收集全球各位同仁爱好者维护项目
+- [**60**Star][1y] [Py] [esmog/nodexp](https://github.com/esmog/nodexp) NodeXP - A Server Side Javascript Injection tool capable of detecting and exploiting Node.js vulnerabilities
+- [**60**Star][8m] [Shell] [ernw/static-toolbox](https://github.com/ernw/static-toolbox) A collection of statically compiled tools like Nmap and Socat.
+- [**60**Star][4y] [Py] [dotcppfile/serbot](https://github.com/dotcppfile/serbot) Advanced Controller/Server/Client Reverse Shell/Bot – Windows/Linux – Python
+- [**60**Star][1y] [Py] [darkw1z/ps1jacker](https://github.com/darkw1z/ps1jacker) Ps1jacker is a tool for generating COM Hijacking payload.
+- [**60**Star][4m] [Py] [dai-lab/steganogan](https://github.com/dai-lab/steganogan) SteganoGAN is a tool for creating steganographic images using adversarial training.
+- [**60**Star][9d] [HTML] [cudeso/tools](https://github.com/cudeso/tools) Different tools, koen.vanimpe@cudeso.be
+- [**60**Star][2y] [C] [croemheld/lkm-rootkit](https://github.com/croemheld/lkm-rootkit) A LKM rootkit for most newer kernel versions.
+- [**60**Star][7m] [JS] [coolervoid/nozes](https://github.com/coolervoid/nozes) Pentest cmd manager- ALpha
+- [**60**Star][1y] [Py] [conix-security/btg](https://github.com/conix-security/btg) BTG's purpose is to make fast and efficient search on IOC
+- [**60**Star][1y] [C++] [cisco-talos/thanatosdecryptor](https://github.com/cisco-talos/thanatosdecryptor) ThanatosDecryptor is an executable program that attempts to decrypt certain files encrypted by the Thanatos malware.
+- [**60**Star][5y] [Py] [byt3bl33d3r/duckhunter](https://github.com/byt3bl33d3r/duckhunter) Converts a USB Rubber ducky script into a Kali Nethunter friendly format for the HID attack
+- [**60**Star][2y] [DTrace] [brendangregg/dtrace-tools](https://github.com/brendangregg/dtrace-tools) DTrace tools for FreeBSD
+- [**60**Star][2y] [breaktoprotect/cve-2017-12615](https://github.com/breaktoprotect/cve-2017-12615) POC Exploit for Apache Tomcat 7.0.x CVE-2017-12615 PUT JSP vulnerability.
+- [**60**Star][5m] [Py] [brakmic/sinkholes](https://github.com/brakmic/sinkholes)
+- [**60**Star][1y] [Py] [blackholesec/wifigod](https://github.com/blackholesec/wifigod) Wireless Security Testing v1.5
+- [**60**Star][3y] [C] [arvanaghi/windows-dll-injector](https://github.com/arvanaghi/windows-dll-injector) A basic Windows DLL injector in C using CreateRemoteThread and LoadLibrary. Implemented for educational purposes.
+- [**60**Star][1y] [Py] [arthastang/iot-home-guard](https://github.com/arthastang/iot-home-guard) A tool for malicious behavior detection in IoT devices
+- [**60**Star][2y] [Py] [argp/unmask_jemalloc](https://github.com/argp/unmask_jemalloc) De Mysteriis Dom jemalloc
+- [**60**Star][1y] [Py] [anssi-fr/audit-radius](https://github.com/anssi-fr/audit-radius) A RADIUS authentication server audit tool
+- [**60**Star][5m] [C++] [alf45tar/pedalino](https://github.com/alf45tar/pedalino) Smart wireless MIDI foot controller for guitarists and more.
+- [**60**Star][7m] [Rust] [ajmwagar/lor-axe](https://github.com/ajmwagar/lor-axe) 🪓 a multi-threaded, low-bandwidth HTTP DOS tool
+- [**60**Star][1y] [HTML] [aglcaicai/kalitoolsmanual](https://github.com/aglcaicai/kalitoolsmanual) Kali Linux 工具合集中文说明书
+- [**60**Star][2m] [Py] [9b/netinfo](https://github.com/9b/netinfo) Simple IP enrichment service and API wrapping PyASN and MaxMind GeoIP.
+- [**59**Star][8m] [JS] [javascript-obfuscator/gulp-javascript-obfuscator](https://github.com/javascript-obfuscator/gulp-javascript-obfuscator) Gulp plugin for javascript-obfuscator package.
+- [**59**Star][8m] [JS] [shadowsocks/shadowsocks-restful-api](https://github.com/shadowsocks/shadowsocks-restful-api) Secure, reliable, standard restful api for managing shadowsocks-libev
+- [**59**Star][3m] [snoopysecurity/osce-prep](https://github.com/snoopysecurity/osce-prep) A list of freely available resources that can be used as a prerequisite before taking OSCE.
+- [**59**Star][13d] [C++] [whid-injector/whid-31337](https://github.com/whid-injector/whid-31337) WHID Elite is a GSM-enabled Open-Source Multi-Purpose Offensive Device that allows a threat actor to remotely inject keystrokes, bypass air-gapped systems, conduct mousejacking attacks, do acoustic surveillance, RF replay attacks and much more. In practice, is THE Wet Dream of any Security Consultant out there!
+- [**59**Star][8m] [nationalsecurityagency/ghidra-data](https://github.com/nationalsecurityagency/ghidra-data) Supporting Data Archives for Ghidra
+- [**59**Star][3m] [C] [angr/vex](https://github.com/angr/vex) A patched version of VEX to work with PyVEX.
+- [**59**Star][2d] [aquasecurity/vuln-list](https://github.com/aquasecurity/vuln-list) NVD, RedHat, Debian, Ubuntu, Alpine
+- [**59**Star][4y] [JS] [auth0-blog/react-flux-debug-actions-sample](https://github.com/auth0-blog/react-flux-debug-actions-sample) This repository shows how you can use Flux actions to reproduce your user's issues in your own browser
+- [**59**Star][2m] [Py] [mozilla/frost](https://github.com/mozilla/frost) Unit testing framework for test driven security of AWS configurations, and more.
+- [**59**Star][3y] [Py] [fsecurelabs/peas](https://github.com/FSecureLABS/peas) PEAS is a Python 2 library and command line application for running commands on an ActiveSync server e.g. Microsoft Exchange.
+- [**59**Star][1y] [C] [zhechkoz/pwin](https://github.com/zhechkoz/pwin) Security Evaluation of Dynamic Binary Instrumentation Engines
+- [**59**Star][4y] [Java] [zd2100/pscout](https://github.com/zd2100/pscout)
+- [**59**Star][11m] [C] [xyzz/amonet](https://github.com/xyzz/amonet) A bootrom exploit for MediaTek devices
+- [**59**Star][4y] [PS] [xorrior/emailraider](https://github.com/xorrior/emailraider) Powershell MS Outlook enumeration and phishing tool
+- [**59**Star][1y] [xenithlabs/rfid-workshop](https://github.com/xenithlabs/rfid-workshop)
+- [**59**Star][1y] [C#] [wledfor2/playhooky](https://github.com/wledfor2/playhooky) C# Runtime Hooking Library for .NET/Mono/Unity.
+- [**59**Star][2m] [Go] [wickett/lambhack](https://github.com/wickett/lambhack) A very vulnerable serverless application in AWS Lambda
+- [**59**Star][8m] [Py] [viele/onionskinrenderer](https://github.com/viele/onionskinrenderer) This is an Onion Skin Renderer for Autodesk Maya
+- [**59**Star][11m] [Py] [s0md3v/infinity](https://github.com/ultimatehackers/infinity) Infinity can get phone numbers from facebook accounts with some maths and shit.
+- [**59**Star][4m] [Zeek] [tylabs/dovehawk](https://github.com/tylabs/dovehawk) Dovehawk is a Zeek module that automatically imports MISP indicators and reports Sightings
+- [**59**Star][2y] [Lua] [tkcert/winnti-nmap-script](https://github.com/tkcert/winnti-nmap-script) Nmap Script to scan for Winnti infections
+- [**59**Star][1y] [Py] [tiaotiaolong/ttlscan](https://github.com/tiaotiaolong/ttlscan) 一款简易的插件化的漏洞扫描器框架
+- [**59**Star][11m] [Py] [thom-s/httphish](https://github.com/thom-s/httphish) Quickly clone a website and launch an HTTP server to phish information with httphish.py
+- [**59**Star][3y] [C#] [tech-srl/esh](https://github.com/tech-srl/esh) statistical similarity of binaries (Esh)
+- [**59**Star][5y] [Ruby] [tduehr/buby](https://github.com/tduehr/buby) A JRuby implementation of the BurpExtender interface for PortSwigger Burp Suite.
+- [**59**Star][3y] [Shell] [tapio/nautilus-git-scripts](https://github.com/tapio/nautilus-git-scripts) Nautilus scripts for interacting with a Git repository.
+- [**59**Star][4m] [sukkaw/cloudflare-block-bad-bot-ruleset](https://github.com/sukkaw/cloudflare-block-bad-bot-ruleset)
+- [**59**Star][7y] [Java] [strazzere/dehoser](https://github.com/strazzere/dehoser) Unpacker for the HoseDex2Jar APK Protection which packs the original file inside the dex header
+- [**59**Star][1y] [C] [sourceincite/cve-2018-8440](https://github.com/sourceincite/cve-2018-8440) CVE-2018-8440 standalone exploit
+- [**59**Star][4m] [C] [sonertari/sslproxy](https://github.com/sonertari/sslproxy) Transparent SSL/TLS proxy for decrypting and diverting network traffic to other programs, such as UTM services, for deep SSL inspection
+- [**59**Star][1y] [C] [skeeto/ptrace-examples](https://github.com/skeeto/ptrace-examples) Examples for Linux ptrace(2)
+- [**59**Star][3y] [Py] [sirusdv/edgehttp2fuzzer](https://github.com/sirusdv/edgehttp2fuzzer) Peach Pit for HTTP/2 Targeting Microsoft Edge
+- [**59**Star][2m] [PHP] [sirbrillig/phpcs-variable-analysis](https://github.com/sirbrillig/phpcs-variable-analysis) Find undefined and unused variables with the PHP Codesniffer static analysis tool.
+- [**59**Star][8m] [YARA] [sfaci/masc](https://github.com/sfaci/masc) 扫描网站中的恶意软件, 以及其他一些网站维护功能
+- [**59**Star][2y] [Go] [sensepost/notruler](https://github.com/sensepost/notruler) The opposite of Ruler, provides blue teams with the ability to detect Ruler usage against Exchange.
+- [**59**Star][6m] [Py] [securityautomation/autosource](https://github.com/securityautomation/autosource) Automated SonarQube
+- [**59**Star][1m] [s9mf/xss_test](https://github.com/s9mf/xss_test) 记录个人XSS学习
+- [**59**Star][2m] [C#] [rvrsh3ll/sharpexcel4-dcom](https://github.com/rvrsh3ll/sharpexcel4-dcom) Port of Invoke-Excel4DCOM
+- [**59**Star][13d] [rub-nds/johnny-you-are-fired](https://github.com/rub-nds/johnny-you-are-fired) Artifacts for the USENIX publication.
+- [**59**Star][4y] [C] [robertdavidgraham/cve-2015-5477](https://github.com/robertdavidgraham/cve-2015-5477) PoC exploit for CVE-2015-5477 BIND9 TKEY assertion failure
+- [**59**Star][17d] [C] [riscure/optee_fuzzer](https://github.com/riscure/optee_fuzzer) This repository contains the code for a fuzzing prototype for the OP-TEE system call interface using AFL.
+- [**59**Star][3m] [Go] [rickgray/vscan-go](https://github.com/rickgray/vscan-go) golang version for nmap service and application version detection (without nmap installation)
+- [**59**Star][11m] [Py] [reptilehaus/eternal-blue](https://github.com/reptilehaus/eternal-blue) REPTILEHAUS' simplified build process of Worawit Wang' (@sleepya_) version of EternalBlue.. The NSA exploit brought to you by the ShadowBrokers for exploiting MS17-010
+- [**59**Star][10m] [Py] [push0ebp/allirt](https://github.com/push0ebp/allirt) Tool that converts All of libc to signatures for IDA Pro FLIRT Plugin. and utility make sig with FLAIR easily
+- [**59**Star][4y] [Py] [psychomario/pyinject](https://github.com/psychomario/pyinject) A python module to help inject shellcode/DLLs into windows processes
+- [**59**Star][4m] [Py] [owasp/threat-model-cookbook](https://github.com/owasp/threat-model-cookbook) This project is about creating and publishing threat model examples.
+- [**59**Star][6y] [Py] [offensivepython/sniffy](https://github.com/offensivepython/sniffy) A Simple network sniffer implemented on Python 3
+- [**59**Star][3m] [Shell] [nviso-be/sec599](https://github.com/nviso-be/sec599) SEC599 supporting GitHub repository
+- [**59**Star][3y] [PS] [nettitude/powershell](https://github.com/nettitude/powershell)
+- [**59**Star][6m] [Py] [neonprimetime/phishingkittracker](https://github.com/neonprimetime/phishingkittracker) Tracking Threat Actor Emails in Phishing Kits. CC @PhishKitTracker on twitter if you find a #threatactoremail in #phishingkit , maintained by
+- [**59**Star][1y] [Go] [nebulouslabs/entropy-mnemonics](https://github.com/nebulouslabs/entropy-mnemonics) Human readable entropy.
+- [**59**Star][1m] [Java] [mozilla/zest](https://github.com/mozilla/zest)
+- [**59**Star][2y] [Visual Basic .NET] [mgeeky/robustpentestmacro](https://github.com/mgeeky/robustpentestmacro) This is a rich-featured Visual Basic macro code for use during Penetration Testing assignments, implementing various advanced post-exploitation techniques.
+- [**59**Star][2y] [Go] [matishsiao/goinfo](https://github.com/matishsiao/goinfo) get os information use golang
+- [**59**Star][3y] [C++] [markhc/windbg_to_c](https://github.com/markhc/windbg_to_c) Translates WinDbg "dt" structure dump to a C structure
+- [**59**Star][5y] [C++] [malwaretech/uacelevator](https://github.com/malwaretech/uacelevator) Passive UAC elevation using dll infection
+- [**59**Star][6d] [leipzig/awesome-reproducible-research](https://github.com/leipzig/awesome-reproducible-research) A curated list of reproducible research case studies, projects, tutorials, and media
+- [**59**Star][5y] [ObjC] [kpwn/vpwn](https://github.com/kpwn/vpwn) xnu local privilege escalation via cve-2015-1140 IOHIDSecurePromptClient injectStringGated heap overflow | poc||gtfo
+- [**59**Star][2y] [C] [koodous/androguard-yara](https://github.com/koodous/androguard-yara) Module to use Androguard with Yara
+- [**59**Star][3y] [Go] [jijinggang/golocproxy](https://github.com/jijinggang/golocproxy) 轻量级超强反向代理软件,用go语言开发,通过公共可知的服务器端口代理,把局域网内任何主机的本地服务发布给局域网外的用户,可用来跨越各种防火墙。
+- [**59**Star][2y] [Py] [jeremyngalloway/mod_plaintext.py](https://github.com/jeremyngalloway/mod_plaintext.py) AKA "Internet Chemotherapy"
+- [**59**Star][7m] [Py] [jas502n/cve-2019-6340](https://github.com/jas502n/cve-2019-6340) Drupal8's REST RCE, SA-CORE-2019-003, CVE-2019-6340
+- [**59**Star][5m] [Py] [jas502n/cve-2019-11580](https://github.com/jas502n/cve-2019-11580) CVE-2019-11580 Atlassian Crowd and Crowd Data Center RCE
+- [**59**Star][2y] [Py] [isra17/nrs](https://github.com/isra17/nrs) NSIS Reversing Suite with IDA Plugins
+- [**59**Star][6m] [Py] [intrinsec/comission](https://github.com/intrinsec/comission) WhiteBox CMS analysis
+- [**59**Star][30d] [infosec-community/apac-conferences](https://github.com/infosec-community/apac-conferences) A community contributed consolidated list of InfoSec meetups in the Asia Pacific region.
+- [**59**Star][1y] [Py] [howie6879/hproxy](https://github.com/howie6879/hproxy) hproxy - Asynchronous IP proxy pool, aims to make getting proxy as convenient as possible.(异步爬虫代理池)
+- [**59**Star][5m] [Py] [hgascon/adagio](https://github.com/hgascon/adagio) Structural Analysis and Detection of Android Malware
+- [**59**Star][4y] [hduffddybz/linux_websites](https://github.com/hduffddybz/linux_websites) Commonly used kernel hacking site
+- [**59**Star][5y] [C] [hackedteam/soldier-win](https://github.com/hackedteam/soldier-win) RCS Soldier for Windows
+- [**59**Star][1y] [Py] [gunnerstahl/jqshell](https://github.com/gunnerstahl/jqshell) A weaponized version of CVE-2018-9206
+- [**59**Star][5y] [PS] [enigma0x3/outlookpersistence](https://github.com/enigma0x3/outlookpersistence)
+- [**59**Star][7m] [HTML] [dustyfresh/honeypress](https://github.com/dustyfresh/honeypress) python based WordPress honeypot in a docker container
+- [**59**Star][7m] [HTML] [dobin/yookiterm-slides](https://github.com/dobin/yookiterm-slides) Exploitation and Mitigation Slides
+- [**59**Star][11m] [C] [depletionmode/wsipc](https://github.com/depletionmode/wsipc) Working Set Page Cache side-channel IPC PoC
+- [**59**Star][8y] [JS] [davepacheco/node-heap-dump](https://github.com/davepacheco/node-heap-dump) Testing node heap dumps
+- [**59**Star][2m] [Py] [dannycork/python-whois](https://github.com/dannycork/python-whois) Python module/library for retrieving WHOIS information of domains.
+- [**59**Star][9y] [C++] [cr4sh/drvhide-poc](https://github.com/cr4sh/drvhide-poc) Hidden kernel mode code execution for bypassing modern anti-rootkits.
+- [**59**Star][1y] [Py] [cortesi/mitmproxy](https://github.com/cortesi/mitmproxy) An interactive SSL-capable intercepting HTTP proxy for penetration testers and software developers
+- [**59**Star][2y] [C] [coolervoid/ninja_shell](https://github.com/coolervoid/ninja_shell) Port Knocking technique with AES256-GCM
+- [**59**Star][2y] [Java] [contrast-security-oss/contrast-ro0](https://github.com/contrast-security-oss/contrast-ro0) A tiny Java agent that blocks attacks against unsafe deserialization
+- [**59**Star][2y] [C] [cisco-talos/locky](https://github.com/cisco-talos/locky)
+- [**59**Star][1y] [Py] [capt-meelo/telewreck](https://github.com/capt-meelo/telewreck) A Burp extension to detect and exploit versions of Telerik Web UI vulnerable to CVE-2017-9248.
+- [**59**Star][28d] [Py] [binaryanalysisplatform/bap-ida-python](https://github.com/binaryanalysisplatform/bap-ida-python) interoperatibility between BAP and IDA Pro
+- [**59**Star][6y] [Py] [bez0r/pdns2](https://github.com/bez0r/pdns2) Passive DNS V2
+- [**59**Star][2y] [Py] [attackercan/teamviewer-dumper](https://github.com/attackercan/teamviewer-dumper) teamviewer-dumper: 从内存中转储TeamViewer ID 和密码
+- [**59**Star][11m] [Py] [anteater/anteater](https://github.com/anteater/anteater) Anteater - CI/CD Gate Check Framework
+- [**59**Star][2y] [Py] [amoulu/tinysmaliemulator](https://github.com/amoulu/tinysmaliemulator) A very minimalist smali emulator that could be used to "decrypt" obfuscated strings
+- [**59**Star][12m] [aliasrobotics/rsf](https://github.com/aliasrobotics/rsf) The Robot Security Framework (RSF), Robot Security Framework (RSF), a standardized methodology to perform security assessments in robotics.
+- [**59**Star][2y] [C++] [alexhude/loadprocconfig](https://github.com/alexhude/loadprocconfig) IDA Plugin to load processor configuration files.
+- [**59**Star][6m] [JS] [alexcn/onestack](https://github.com/alexcn/onestack) IT管理系统,实现自动化运维,整合CMDB和监控,实现自动化部署,打通开发、运维和测试的边界,实现一栈式管理。
+- [**59**Star][2y] [Shell] [abhisek/pwnworks](https://github.com/abhisek/pwnworks) Exploitation challenges for CTF
+- [**58**Star][5d] [Java] [daggerok/streaming-file-server](https://github.com/daggerok/streaming-file-server) full-stack java file server with no limitation for files uploads and downloads: spring-boot + Gradle Kotlin DSL, Gradle buildSrc, postgres / h2, apache fileUpload, lombok, mustache, docker, jgiven, powermock, gradle, CI, bootstrap 4, bootstrap-filelinput, webjars, maven github-release-plugin, nginx, haproxy, reverse-proxy
+- [**58**Star][3y] [v2ray/planning](https://github.com/v2ray/planning) Deprecated. Please use v2ray-core for feature requests
+- [**58**Star][2m] [Py] [shellphish/shellphish-afl](https://github.com/shellphish/shellphish-afl) A pip wrapper around AFL.
+- [**58**Star][3y] [Shell] [r00t-3xp10it/netool-toolkit](https://github.com/r00t-3xp10it/netool-toolkit) MitM pentesting opensource toolkit (scan/sniff/exploit) -- NOT SUPORTED ANYMORE --
+- [**58**Star][4y] [HTML] [kevthehermit/spearphisher](https://github.com/kevthehermit/spearphisher) A Web Application to Send and Track Spear Phishing Campaigns
+- [**58**Star][1m] [JS] [medicean/as_bypass_php_disable_functions](https://github.com/medicean/as_bypass_php_disable_functions) antsword bypass PHP disable_functions
+- [**58**Star][7y] [Shell] [lozzd/autonmap](https://github.com/lozzd/autonmap) Automated daily scan using Nmap and report on the differences
+- [**58**Star][6m] [JS] [yzyjim/shadowsocks-back-china-pac](https://github.com/yzyjim/shadowsocks-back-china-pac) Shadowsocks翻墙回国PAC规则
+- [**58**Star][3m] [C++] [vlad-tri/cve-2019-1132](https://github.com/vlad-tri/cve-2019-1132) EoP POC for CVE-2019-1132
+- [**58**Star][2d] [C] [cisco/mercury](https://github.com/cisco/mercury) network fingerprinting and packet metadata capture
+- [**58**Star][1y] [Shell] [cyb0r9/dvr-exploiter](https://github.com/Cyb0r9/DVR-Exploiter) DVR-Exploiter a Bash Script Program Exploit The DVR's Based on CVE-2018-9995
+- [**58**Star][3y] [Py] [deadbits/intersect-2.5](https://github.com/deadbits/Intersect-2.5) Post-Exploitation Framework
+- [**58**Star][2y] [Shell] [offxec/samurai](https://github.com/OffXec/Samurai) Samurai Email Discovery - SED is a email discovery framework that grabs emails via google dork, company name, or domain name.
+- [**58**Star][2y] [Ruby] [hammackj/risu](https://github.com/hammackj/risu) Risu is Nessus parser, that converts the generated reports into a ActiveRecord database, this allows for easy report generation and vulnerability verification.
+- [**58**Star][7m] [HTML] [leonwxqian/lucky-js-fuzz](https://github.com/leonwxqian/lucky-js-fuzz) A web page based fuzzer that generates random JS statements then fuzz in the web-browser.
+- [**58**Star][8y] [Ruby] [wuntee/androidaudittools](https://github.com/wuntee/androidaudittools)
+- [**58**Star][3y] [CSS] [wizardforcel/sploitfun-linux-x86-exp-tut-zh](https://github.com/wizardforcel/sploitfun-linux-x86-exp-tut-zh)
+- [**58**Star][2y] [Py] [wavestone-cdt/dyode](https://github.com/wavestone-cdt/dyode) A low-cost, DIY data diode for ICS
+- [**58**Star][2y] [Py] [vivami/ms17-010](https://github.com/vivami/ms17-010) MS17-010
+- [**58**Star][9m] [Shell] [vay3t/hax0rpi](https://github.com/vay3t/hax0rpi) A Raspberry Pi Hacker Tools suite
+- [**58**Star][2y] [JS] [vah13/win_zip_password](https://github.com/vah13/win_zip_password) Python script to hook ZIP files passwords in Windows 10
+- [**58**Star][7m] [tyranid/infosec-presentations](https://github.com/tyranid/infosec-presentations) A repository of previous info-sec presentations I've presented.
+- [**58**Star][5y] [C++] [tyranid/exploitdotnetdcom](https://github.com/tyranid/exploitdotnetdcom) A tool to exploit .NET DCOM for EoP and RCE. Is fixed in latest versions of the .NET.
+- [**58**Star][6m] [Py] [turr0n/firebase](https://github.com/turr0n/firebase) Exploiting misconfigured firebase databases
+- [**58**Star][6m] [Lua] [trisulnsm/trisul-scripts](https://github.com/trisulnsm/trisul-scripts) Ready to run scripts for network analysis
+- [**58**Star][4d] [tonyphipps/siem](https://github.com/tonyphipps/siem) SIEM Tactics, Techiques, and Procedures
+- [**58**Star][1y] [Py] [tarlogicsecurity/arecibo](https://github.com/tarlogicsecurity/arecibo) Arecibo: Endpoint for Out-of-Band Exfiltration (DNS & HTTP)
+- [**58**Star][1y] [PHP] [slangji/wp-missed-schedule](https://github.com/slangji/wp-missed-schedule) Find only missed schedule posts, every 15 minutes, and republish correctly 10 items each session. The Original plugin (only this) no longer available on WordPress.org for explicit author request! Compatible with WP 2.1+ to 4.9+ and 5.0-beta3 (100.000+ installs 300.000+ downloads 2016-04-13) Please: do not install unauthorized malware cloned forked!
+- [**58**Star][3m] [Py] [simplysecurity/simplydomain](https://github.com/simplysecurity/simplydomain) Subdomain brute force focused on speed and data serialization
+- [**58**Star][1m] [she11c0der/scanners-box](https://github.com/she11c0der/scanners-box) 安全从业人员常用开源工具资料合集
+- [**58**Star][3y] [Py] [sensepost/xrdp](https://github.com/sensepost/xrdp) A rudimentary remote desktop tool for the X11 protocol exploiting unauthenticated x11 sessions
+- [**58**Star][4y] [C++] [rootkitsmm/win10pcap-exploit](https://github.com/rootkitsmm/win10pcap-exploit) Exploit Win10Pcap Driver to enable some Privilege in our process token ( local Privilege escalation )
+- [**58**Star][2y] [C] [riscybusiness/riscypacker](https://github.com/riscybusiness/riscypacker) Process Hollowing Packer
+- [**58**Star][3y] [rehints/windbg](https://github.com/rehints/windbg)
+- [**58**Star][2y] [PHP] [raesene/bwapp](https://github.com/raesene/bwapp)
+- [**58**Star][3d] [PS] [quake4/mindminer](https://github.com/quake4/mindminer) MindMiner - the miner manager programm with online monitoring
+- [**58**Star][6y] [Java] [pwntester/xmldecoder](https://github.com/pwntester/xmldecoder) RCE Exploit PoC for XMLDecoder
+- [**58**Star][1y] [Java] [psycopaths/jdart](https://github.com/psycopaths/jdart) A dynamic symbolic analysis tool for Java
+- [**58**Star][7m] [JS] [pownjs/pown-proxy](https://github.com/pownjs/pown-proxy) Pown Proxy is a versatile web application security testing proxy with cool TUI features.
+- [**58**Star][10m] [Java] [portswigger/replicator](https://github.com/portswigger/replicator) Burp extension to help developers replicate findings from pen tests
+- [**58**Star][5y] [C] [poliva/dexinfo](https://github.com/poliva/dexinfo) A very rudimentary Android DEX file parser
+- [**58**Star][6m] [Rust] [poc-consortium/scavenger](https://github.com/poc-consortium/scavenger) A fast Burstcoin miner written in Rust
+- [**58**Star][2y] [Shell] [p292/nackered](https://github.com/p292/nackered) This is a bash script to bypass 802.1x NAC
+- [**58**Star][2y] [C] [outflanknl/external_c2](https://github.com/outflanknl/external_c2) POC for Cobalt Strike external C2
+- [**58**Star][7y] [Py] [opensecurityresearch/pentest-scripts](https://github.com/opensecurityresearch/pentest-scripts)
+- [**58**Star][3y] [Py] [nopernik/fuzzbunch_wrapper](https://github.com/nopernik/fuzzbunch_wrapper) Fuzzbunch Python-Wine wrapper
+- [**58**Star][2y] [C] [noloader/sha-intrinsics](https://github.com/noloader/sha-intrinsics) SHA-1, SHA-256 and SHA-512 compression functions using Intel, ARMv8 and Power8 SHA intrinsics
+- [**58**Star][2y] [Java] [nightoftwelve/virtualhookex](https://github.com/nightoftwelve/virtualhookex) Android application hooking tool based on VirtualHook/VirtualApp
+- [**58**Star][3y] [nidom/buff](https://github.com/nidom/buff) A proxy tool for macOS.
+- [**58**Star][4y] [HTML] [nccgroup/iodide](https://github.com/nccgroup/iodide) The Cisco IOS Debugger and Integrated Disassembler Environment
+- [**58**Star][1y] [C++] [my-first-pr/hacktoberfest-2018](https://github.com/my-first-pr/hacktoberfest-2018)
+- [**58**Star][1y] [C] [mrgeffitas/hwfwbypass](https://github.com/mrgeffitas/hwfwbypass)
+- [**58**Star][2y] [JS] [monkeym4ster/domainfuzz](https://github.com/monkeym4ster/domainfuzz) Domain name permutation engine for detecting typo squatting, phishing and corporate espionage
+- [**58**Star][8m] [Assembly] [mist64/c64rom](https://github.com/mist64/c64rom) Commodore 64 BASIC and KERNAL Source
+- [**58**Star][5y] [Go] [mikkolehtisalo/cvesync](https://github.com/mikkolehtisalo/cvesync) CVE feed synchronization to issue management system
+- [**58**Star][3y] [ASP] [merttasci/weapons4pentester](https://github.com/merttasci/weapons4pentester)
+- [**58**Star][7m] [JS] [mdslab/wstun](https://github.com/mdslab/wstun) Tunnels and reverse tunnels over WebSocket
+- [**58**Star][6y] [Py] [malwarelu/tools](https://github.com/malwarelu/tools) Malware.lu tools
+- [**58**Star][6y] [CoffeeScript] [lupino/shadowsocks-gui](https://github.com/lupino/shadowsocks-gui) Shadowsocks GUI client
+- [**58**Star][2y] [Java] [littlerich/wechatluckymoney](https://github.com/littlerich/wechatluckymoney) 本开源项目为Xposed练手代码,可以从中深入了解使用Xposed的用法和源码逆向分析能力
+- [**58**Star][3y] [PS] [killswitch-gui/persistence-survivability](https://github.com/killswitch-gui/persistence-survivability) Powershell Persistence Locator
+- [**58**Star][2y] [Shell] [kevthehermit/pentest](https://github.com/kevthehermit/pentest) Just a collection of pentest stuffs
+- [**58**Star][2y] [C] [jas502n/ubuntu-0day](https://github.com/jas502n/ubuntu-0day) all 4.4 ubuntu aws instances are vulnerable
+- [**58**Star][5y] [C++] [ivanfratric/ropguard](https://github.com/ivanfratric/ropguard) Runtime Prevention of Return-Oriented Programming Attacks
+- [**58**Star][2y] [C++] [int0/processisolator](https://github.com/int0/processisolator)
+- [**58**Star][3y] [C] [infosecguerrilla/reflectivesoinjection](https://github.com/infosecguerrilla/reflectivesoinjection) Reflective SO injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process.
+- [**58**Star][2y] [Py] [hasherezade/crypto_utils](https://github.com/hasherezade/crypto_utils) Set of my small utils related to cryptography, encoding, decoding etc
+- [**58**Star][3y] [hackstar7/wanacry](https://github.com/hackstar7/wanacry) WannaCry Ransomware
+- [**58**Star][7y] [gynophage/solarized_ida](https://github.com/gynophage/solarized_ida) "Solarized Dark" color scheme for IDA Pro.
+- [**58**Star][28d] [HTML] [gwen001/actarus](https://github.com/gwen001/actarus) Actarus is a custom tool for bug bounty
+- [**58**Star][17d] [C] [grehack/ctf-challs](https://github.com/grehack/ctf-challs) Here are the challenges (including sources) of the GreHack CTF.
+- [**58**Star][1y] [C++] [fjh658/hexrayscodexplorer](https://github.com/fjh658/hexrayscodexplorer) Hex-Rays Decompiler plugin for better code navigation. Add support ida7.0/7.1/7.2 for macOS
+- [**58**Star][2y] [Go] [evilsocket/ftrace](https://github.com/evilsocket/ftrace) Go library to trace Linux syscalls using the FTRACE kernel framework.
+- [**58**Star][2y] [C++] [eternalsakura/ctf_pwn](https://github.com/eternalsakura/ctf_pwn)
+- [**58**Star][7m] [C#] [eternalc0der/teleshadow3](https://github.com/eternalc0der/teleshadow3) Telegram Desktop Session Stealer
+- [**58**Star][5m] [JS] [eslint/eslint-scope](https://github.com/eslint/eslint-scope) eslint-scope: ECMAScript scope analyzer
+- [**58**Star][3y] [Py] [epinna/stegosip](https://github.com/epinna/stegosip) TCP tunnel over RTP/SIP
+- [**58**Star][6m] [Go] [dsnet/udptunnel](https://github.com/dsnet/udptunnel) Daemon for creating a simple VPN over UDP.
+- [**58**Star][10m] [Py] [dogoncouch/logdissect](https://github.com/dogoncouch/logdissect) CLI utility and Python module for analyzing log files and other data.
+- [**58**Star][4y] [C] [dev-zzo/exploits-nt-privesc](https://github.com/dev-zzo/exploits-nt-privesc) Exploit collection for NT privilege escalation
+- [**58**Star][4m] [JS] [detroitenglish/haveibeenpwned-zxcvbn-lambda-api](https://github.com/detroitenglish/haveibeenpwned-zxcvbn-lambda-api) Deploy your own secure API to estimate password strength and check haveibeenpwned for known matches - HTTPS by force, server not required, fire and brimstone sold separately
+- [**58**Star][6m] [Shell] [d4rk007/blueghost](https://github.com/d4rk007/blueghost) A network tool designed to assist blue teams in banning attackers from linux servers.
+- [**58**Star][3y] [PHP] [cspf-founder/btslab](https://github.com/cspf-founder/btslab) Vulnerable web application
+- [**58**Star][4y] [C++] [codereversing/directx9hook](https://github.com/codereversing/directx9hook) Runtime DirectX9 Hooking
+- [**58**Star][1y] [Py] [coalfire-research/sqlinator](https://github.com/coalfire-research/sqlinator) Automatically forward HTTP GET & POST requests to SQLMap's API to test for SQLi and XSS
+- [**58**Star][9m] [Py] [cnotin/splunkwhisperer2](https://github.com/cnotin/splunkwhisperer2) Local privilege escalation, or remote code execution, through Splunk Universal Forwarder (UF) misconfigurations
+- [**58**Star][5m] [Go] [cloudposse/sudosh](https://github.com/cloudposse/sudosh) Shell wrapper to run a login shell with `sudo` as the current user for the purpose of audit logging
+- [**58**Star][2y] [Py] [circl/pymisp](https://github.com/circl/pymisp) Please use this repository instead:
+- [**58**Star][4m] [C++] [changeofpace/mouhidinputhook](https://github.com/changeofpace/mouhidinputhook) MouHidInputHook enables users to filter, modify, and inject mouse input data packets into the input data stream of HID USB mouse devices without modifying the mouse device stacks.
+- [**58**Star][14d] [C++] [cert-polska/ursadb](https://github.com/cert-polska/ursadb) Trigram database written in C++, suited for malware indexing
+- [**58**Star][4y] [Py] [cc06/dns_transfer_check](https://github.com/cc06/dns_transfer_check) 一个用来批量检测网站是否存在域传送漏洞的Python脚本
+- [**58**Star][5y] [Py] [bwall/extracthosts](https://github.com/bwall/extracthosts) Extracts hosts (IP/Hostnames) from files
+- [**58**Star][3y] [Shell] [buginux/flexloader](https://github.com/buginux/flexloader) 使用 FLEX 调试任意第三方应用
+- [**58**Star][2y] [Py] [brianwarehime/insp3ctor](https://github.com/brianwarehime/insp3ctor) AWS S3 Bucket/Object Finder
+- [**58**Star][3y] [C++] [azerg/remote_dll_injector](https://github.com/azerg/remote_dll_injector) Stealth DLL injector
+- [**58**Star][3y] [Batchfile] [ayra/zipbomb](https://github.com/ayra/zipbomb) About an old technology that still screws up some anti virus software
+- [**58**Star][6m] [autodesk/continuous-threat-modeling](https://github.com/autodesk/continuous-threat-modeling) A Continuous Threat Modeling methodology
+- [**58**Star][13d] [Java] [appsecco/vyapi](https://github.com/appsecco/vyapi) VyAPI - A cloud based vulnerable hybrid Android App
+- [**58**Star][10m] [Go] [appliscale/cloud-security-audit](https://github.com/appliscale/cloud-security-audit) A command line security audit tool for Amazon Web Services
+- [**58**Star][2y] [PHP] [alisummer/qqipdetector](https://github.com/alisummer/qqipdetector) 探测某个或某些QQ用户的IP。 代码非常烂,也没有注释。
+- [**58**Star][3y] [Py] [adulau/malwareclassifier](https://github.com/adulau/malwareclassifier) Malware Classifier From Network Captures
+- [**58**Star][3m] [Java] [aagarwal1012/image-steganography-library-android](https://github.com/aagarwal1012/image-steganography-library-android)
+- [**58**Star][2y] [3gstudent/cve-2017-8464-exp](https://github.com/3gstudent/cve-2017-8464-exp) Support x86 and x64
+- [**57**Star][2y] [Py] [yangzheng10/ss](https://github.com/yangzheng10/ss) 利用爬虫科学上网
+- [**57**Star][1y] [Py] [vonsdite/auto_shadowsocks](https://github.com/vonsdite/auto_shadowsocks) Shadowsocks. 科学上网, 仅供学习。是免费的服务器,可能存在科学上网不稳定。
+- [**57**Star][30d] [zscdumin/vpn](https://github.com/zscdumin/vpn) ShadowSocks 翻墙(收费服务器合租套餐:180元/年、50元/季度、20元/月,需要的可以联系我)
+- [**57**Star][3d] [Rust] [leo-lb/wpbrute-rs](https://github.com/leo-lb/wpbrute-rs) High performance WordPress login bruteforcer with automatic concurrency for maximum amount of tries per second.
+- [**57**Star][6m] [JS] [pownjs/pown-cdb](https://github.com/pownjs/pown-cdb) Automate common Chrome Debug Protocol tasks to help debug web applications from the command-line and actively monitor and intercept HTTP requests and responses.
+- [**57**Star][1m] [Ruby] [trustedsec/honeybadger](https://github.com/trustedsec/honeybadger)
+- [**57**Star][6m] [JS] [doctormckay/node-globaloffensive](https://github.com/doctormckay/node-globaloffensive) A Node.js module to connect to and interact with the CS:GO game coordinator. Mostly used to get item data.
+- [**57**Star][1y] [C++] [m0n73/dc26_badgeemulator](https://github.com/m0n73/dc26_badgeemulator) This code was used with Arduino Nano to create the OG defcon 26 badge emulator.
+- [**57**Star][3m] [Py] [gosecure/freshonions-torscraper](https://github.com/gosecure/freshonions-torscraper) Fresh Onions is an open source TOR spider / hidden service onion crawler
+- [**57**Star][7d] [Py] [trailofbits/polyfile](https://github.com/trailofbits/polyfile) A utility for mapping the file formats embedded within a single file
+- [**57**Star][2y] [PS] [obscuritylabs/infophish](https://github.com/obscuritylabs/InfoPhish) InfoPath Phishing Repo Resource
+- [**57**Star][6m] [Py] [pyca/service-identity](https://github.com/pyca/service-identity) Service Identity Verification for Python
+- [**57**Star][2y] [Py] [vysecurity/checko365](https://github.com/vysecurity/checkO365) checkO365 is a tool to check if a target domain is using O365
+- [**57**Star][3y] [shmilylty/awesome-application-security](https://github.com/shmilylty/awesome-application-security) awesome application security chinese version
+- [**57**Star][3y] [JS] [auth0-samples/auth0-sso-dashboard](https://github.com/auth0-samples/auth0-sso-dashboard) [DEPRECATED] App Single Sign On Dashboard using Auth0
+- [**57**Star][4y] [Go] [zond/qisniff](https://github.com/zond/qisniff)
+- [**57**Star][3y] [JS] [xtr4nge/fruityc2-client](https://github.com/xtr4nge/fruityc2-client) FruityC2 is a post-exploitation (and open source) framework based on the deployment of agents on compromised machines. Agents are managed from a web interface under the control of an operator.
+- [**57**Star][4y] [C++] [xpn/getsystem-offline](https://github.com/xpn/getsystem-offline) Small tool to get a SYSTEM shell
+- [**57**Star][2y] [JS] [windard/sm4](https://github.com/windard/sm4) SM4 by JavaScript
+- [**57**Star][2m] [Py] [williballenthin/idawilli](https://github.com/williballenthin/idawilli) IDA Pro resources, scripts, and configurations
+ - [hint_calls](https://github.com/williballenthin/idawilli/blob/master/plugins/hint_calls/readme.md) IDA plugin to display the calls and strings referenced by a function as hints.
+ - [dynamic_hints](https://github.com/williballenthin/idawilli/blob/master/plugins/dynamic_hints/readme.md) an example plugin that demonstrates how to provide custom hints with dynamic data.
+ - [add_segment](https://github.com/williballenthin/idawilli/tree/master/scripts/add_segment) IDAPython plugin that adds the contents of a file as a new segment in an existing idb
+ - [color](https://github.com/williballenthin/idawilli/tree/master/scripts/color) IDAPython script that colors instructions
+ - [find_ptrs](https://github.com/williballenthin/idawilli/tree/master/scripts/find_ptrs) IDAPython script that scans through the .text section for values that could be pointers (32-bit).
+ - [yara_fn](https://github.com/williballenthin/idawilli/tree/master/scripts/yara_fn) IDAPython script that generates a YARA rule to match against the basic blocks of the current function
+ - [idawilli](https://github.com/williballenthin/idawilli/tree/master/idawilli) a python module that contains utilities for working with the idapython scripting interface.
+ - [themes](https://github.com/williballenthin/idawilli/tree/master/themes) colors and skins
+- [**57**Star][4y] [Shell] [wh1t3rh1n0/ssh-phone-home](https://github.com/wh1t3rh1n0/ssh-phone-home) Pentest dropbox setup scripts for Kali Linux
+- [**57**Star][1y] [Py] [warflop/whoisleak](https://github.com/warflop/whoisleak) This tool queries the emails that registered the domain and verifies if they were leaked in some data leak.
+- [**57**Star][2y] [wangyihang/awesome-web-security](https://github.com/wangyihang/awesome-web-security)
+- [**57**Star][5m] [C++] [walkingcat/symdiff](https://github.com/walkingcat/symdiff) Diff tool for comparing symbols in PDB files
+- [**57**Star][3y] [Java] [vulnerscom/burp-dirbuster](https://github.com/vulnerscom/burp-dirbuster) Dirbuster plugin for Burp Suite
+- [**57**Star][3m] [uniking/dingding](https://github.com/uniking/dingding) 免root远程钉钉打卡,支持wifi和gps定位,仅支持android系统。本项目出于学习目的,仅用于学习玩耍,请于24小时后自行删除。xposed, crack,package,dingtalk,remote control
+- [**57**Star][2y] [HTML] [trustedsec/cors-poc](https://github.com/trustedsec/cors-poc)
+- [**57**Star][2y] [HTML] [troydo42/cia-hacking-tools](https://github.com/troydo42/cia-hacking-tools) WikiLeaks Vault 7 CIA Hacking Tools
+- [**57**Star][5m] [C++] [troybowman/dtxmsg](https://github.com/troybowman/dtxmsg) an IDA plugin that helped me reverse-engineer the DTXConnectionServices framework.
+- [**57**Star][2y] [JS] [transparencytoolkit/harvester](https://github.com/transparencytoolkit/harvester) Web crawling and document processing through a usable interface.
+- [**57**Star][2y] [Py] [tcpiplab/web-app-hacking-notes](https://github.com/tcpiplab/web-app-hacking-notes) Notes I've taken while working through various web app pentesting labs.
+- [**57**Star][2y] [Shell] [tanprathan/fridpa](https://github.com/tanprathan/fridpa) An automated wrapper script for patching iOS applications (IPA files) and work on non-jailbroken device
+- [**57**Star][3y] [Py] [t3rry7f/badtunnel_exp](https://github.com/t3rry7f/badtunnel_exp) Usage: python badtunnel.py wpad_server_ip
+- [**57**Star][2y] [Py] [superhuahua/xunfenges](https://github.com/superhuahua/xunfenges)
+- [**57**Star][6y] [Java] [spiderlabs/burpnotesextension](https://github.com/spiderlabs/burpnotesextension) Burp Notes Extension is a plugin for Burp Suite that adds a Notes tab. The tool aims to better organize external files that are created during penetration testing.
+- [**57**Star][5d] [JS] [silverwind/oui](https://github.com/silverwind/oui) Look up MAC addresses for their vendor in the IEEE OUI database
+- [**57**Star][15d] [Rust] [shssoichiro/zxcvbn-rs](https://github.com/shssoichiro/zxcvbn-rs) Port of Dropbox's zxcvbn password strength library for Rust
+- [**57**Star][2y] [Py] [s1kr10s/struts2shell](https://github.com/s1kr10s/struts2shell)
+- [**57**Star][4m] [C] [rub-syssec/antifuzz](https://github.com/rub-syssec/antifuzz) Impeding Fuzzing Audits of Binary Executables
+- [**57**Star][3d] [TS] [roryrjb/iplocation](https://github.com/roryrjb/iplocation) (looking for a maintainer) get IP location information using various providers
+- [**57**Star][2y] [Py] [roberteldersoftware/roberteldersoftwarediff](https://github.com/roberteldersoftware/roberteldersoftwarediff)
+- [**57**Star][5y] [C] [rmusser01/hyperdbg](https://github.com/rmusser01/hyperdbg) Automatically exported from code.google.com/p/hyperdbg
+- [**57**Star][12m] [C] [qssec/hades-lite](https://github.com/qssec/hades-lite) Hades-lite 青松云安全开源的一个内核级 Anti-ddos 的驱动程序,轻量且高效,构建高性能代理防御,单机可抵御7Gb DDoS攻击
+- [**57**Star][1y] [Py] [programa-stic/marvin-static-analyzer](https://github.com/programa-stic/marvin-static-analyzer) Marvin static analyzer is an Android application vulnerability scanner. The framework uses androguard and Static Android Analysis Framework (SAAF).
+- [**57**Star][1y] [C++] [petrgeorgievsky/gtarenderhook](https://github.com/petrgeorgievsky/gtarenderhook) GTA SA rendering hook
+- [**57**Star][3m] [pe3zx/mthc](https://github.com/pe3zx/mthc) All-in-one bundle of MISP, TheHive and Cortex
+- [**57**Star][2d] [Py] [opsdisk/metagoofil](https://github.com/opsdisk/metagoofil) An updated version of metagoofil
+- [**57**Star][2y] [C++] [openjailbreak/jailbreakme-1.0](https://github.com/openjailbreak/jailbreakme-1.0) The first publicly available userland jailbreak for iPhoneOS 1.0.2/1.1.1 by cmw and dre
+- [**57**Star][9m] [Go] [openbazaar/go-onion-transport](https://github.com/openbazaar/go-onion-transport) Tor onion transport for IPFS
+- [**57**Star][6m] [C#] [nyan-x-cat/limeusb-csharp](https://github.com/nyan-x-cat/limeusb-csharp) Malware USB Spread | Example C#
+- [**57**Star][3y] [Py] [nonenotnull/ssrfx](https://github.com/nonenotnull/ssrfx) CVE-2014-4210+Redis未授权访问
+- [**57**Star][2y] [Java] [nikolamilosevic86/owasp-seraphimdroid](https://github.com/nikolamilosevic86/owasp-seraphimdroid) OWASP Seraphimdroid is an open source project with aim to create, as a community, an open platform for education and protection of Android users against privacy and security threats.
+- [**57**Star][2y] [mrash/afl-cve](https://github.com/mrash/afl-cve) A collection of vulnerabilities discovered by the AFL fuzzer (afl-fuzz)
+- [**57**Star][2y] [C#] [mch2112/sharp80](https://github.com/mch2112/sharp80) TRS80 Emulator for Windows
+- [**57**Star][2y] [Py] [mame82/p4wnp1_nexmon_additions](https://github.com/mame82/p4wnp1_nexmon_additions)
+- [**57**Star][5m] [Py] [lion-gu/ioc-explorer](https://github.com/lion-gu/ioc-explorer) Explore Indicators of Compromise Automatically
+- [**57**Star][2y] [Go] [linkedin/jaqen](https://github.com/linkedin/jaqen) Simple DNS rebinding
+- [**57**Star][4d] [Py] [lief-project/tutorials](https://github.com/lief-project/tutorials) Materials for LIEF tutorials
+- [**57**Star][2m] [lgg/awesome-keepass](https://github.com/lgg/awesome-keepass) Curated list of KeePass-related projects
+- [**57**Star][10m] [Py] [leoid/b1tmass](https://github.com/leoid/b1tmass) Multiple Weaknesses Checking for Mass Subdomains [Deprecated]
+- [**57**Star][29d] [Go] [konimarti/opc](https://github.com/konimarti/opc) OPC DA client in Golang for monitoring and analyzing process data based on Windows COM.
+- [**57**Star][3y] [C] [k2/admmutate](https://github.com/k2/admmutate) Classic code from 1999+ I am fairly sure this is the first public polymorphic shellcode ever (best IMHO and others
+- [**57**Star][1y] [Py] [jx-sec/jxotp](https://github.com/jx-sec/jxotp) 企业SSH登陆双因素认证系统
+- [**57**Star][3y] [Shell] [justintime/docker-airsonos](https://github.com/justintime/docker-airsonos) Expose Sonos over Airplay via a Docker container
+- [**57**Star][ObjC] [jrock007/tob](https://github.com/jrock007/tob) Free, open-source and ad-less Tor web browser for iOS
+- [**57**Star][7m] [JS] [joevennix/lan-js](https://github.com/joevennix/lan-js) Probe LAN devices from a web browser.
+- [**57**Star][25d] [Shell] [jmcerrejon/pikiss](https://github.com/jmcerrejon/pikiss) PiKISS for Raspberry Pi & ODROID-C1: A bunch of scripts with menu to make your life easier.
+- [**57**Star][4y] [PHP] [jcarlosn/gzip-http-time](https://github.com/jcarlosn/gzip-http-time) PoC for getting remote HTTP Server date using gzip compressed HTTP Response
+- [**57**Star][3y] [C++] [jaybosamiya/busysteg](https://github.com/jaybosamiya/busysteg)
+- [**57**Star][1m] [HTML] [j3ers3/passlist](https://github.com/j3ers3/passlist)
+- [**57**Star][8m] [Shell] [itskindred/pyembed](https://github.com/itskindred/pyembed) Elementary bash script that embeds malicious python code within another piece of inconspicuous python code.
+- [**57**Star][1y] [PS] [invokethreatguy/csasc](https://github.com/invokethreatguy/csasc) Cobalt Strike Aggressor Script Collection
+- [**57**Star][10d] [C++] [henrypp/errorlookup](https://github.com/henrypp/errorlookup) Simple tool for retrieving information about Windows errors codes.
+- [**57**Star][1y] [Py] [he1m4n6a/dictbuilder](https://github.com/he1m4n6a/dictbuilder) 渗透测试中字典生成工具
+- [**57**Star][3y] [C] [hbowden/nextgen](https://github.com/hbowden/nextgen) A Genetic File, Syscall and Network Fuzzer.
+- [**57**Star][4m] [Go] [hashmatter/p3lib](https://github.com/hashmatter/p3lib) privacy preserving primitives and protocols (p3) for routing and messaging in P2P networks
+- [**57**Star][6y] [Assembly] [hackedteam/core-win64](https://github.com/hackedteam/core-win64) RCS Agent for Windows (64bit)
+- [**57**Star][2y] [gy-games/shield](https://github.com/gy-games/shield) 基于Strom的日志实时流量分析主动防御(CCFirewall)系统
+- [**57**Star][3m] [Rust] [guitmz/fe2o3](https://github.com/guitmz/fe2o3) Simple prepender virus written in Rust
+- [**57**Star][6m] [PS] [gnieboer/gnuradio_windows_build_scripts](https://github.com/gnieboer/gnuradio_windows_build_scripts) A series of Powershell scripts to automatically download, build from source, and install GNURadio and -all- it's dependencies as 64-bit native binaries then package as an msi using Visual Studio 2015
+- [**57**Star][5m] [C#] [gigajew/powerdropper](https://github.com/gigajew/powerdropper) App that generates PowerShell dropper scripts for .NET executables
+- [**57**Star][4y] [JS] [gattermeier/nodejs-virus](https://github.com/gattermeier/nodejs-virus) A Node.js Proof of Concept Virus
+- [**57**Star][4y] [JS] [firebug/pixel-perfect](https://github.com/firebug/pixel-perfect)
+- [**57**Star][3m] [Java] [exalab/anlinux-adfree](https://github.com/exalab/anlinux-adfree) AnLinux, Ad free version.
+- [**57**Star][2y] [F#] [enkomio/anathema](https://github.com/enkomio/anathema) .NET instrumentation framework
+- [**57**Star][5y] [C++] [datasoft/nova](https://github.com/datasoft/nova) Repo for the Open Source version of NOVA
+- [**57**Star][3m] [C] [danielkrupinski/memject](https://github.com/danielkrupinski/memject) Simple Dll injector loading from memory. Supports PE header and entry point erasure. Written in C99.
+- [**57**Star][26d] [Rust] [ctsrc/pgen](https://github.com/ctsrc/pgen) Command-line passphrase generator
+- [**57**Star][3y] [JS] [cryptogenic/ps4-4.0x-code-execution-poc](https://github.com/cryptogenic/ps4-4.0x-code-execution-poc) My edit of qwertyoruiopz 4.0x exploit PoC from
+- [**57**Star][7y] [Py] [cr4sh/ida-vmware-gdb](https://github.com/cr4sh/ida-vmware-gdb) Helper script for Windows kernel debugging with IDA Pro on VMware + GDB stub
+- [**57**Star][2y] [JS] [coincoin7/wireless-router-vulnerability](https://github.com/coincoin7/wireless-router-vulnerability) Vulnerability and exploiting
+- [**57**Star][3y] [C] [codectile/paradise](https://github.com/codectile/paradise) x86/x86-64 hooking library
+- [**57**Star][16d] [Py] [cleanunicorn/karl](https://github.com/cleanunicorn/karl) Monitor smart contracts deployed on blockchain and test against vulnerabilities with Mythril
+- [**57**Star][5m] [Py] [chrismaddalena/goreport](https://github.com/chrismaddalena/goreport) A Python script to collect campaign data from Gophish and generate a report
+- [**57**Star][2y] [HTML] [bo0om/cve-2017-7089](https://github.com/bo0om/cve-2017-7089) Webkit uxss exploit (CVE-2017-7089)
+- [**57**Star][6m] [Py] [bao7uo/dp_crypto](https://github.com/bao7uo/dp_crypto) Base64-based encryption oracle exploit for CVE-2017-9248 (Telerik UI for ASP.NET AJAX dialog handler)
+- [**57**Star][5y] [Shell] [bagder/keyfreq](https://github.com/bagder/keyfreq) Logs all key presses with a timestamp
+- [**57**Star][12m] [JS] [antoinevastel/fp-collect](https://github.com/antoinevastel/fp-collect) Fingerprinting script of Fingerprint-Scanner
+- [**57**Star][8d] [Py] [angus-y/pyiris-backdoor](https://github.com/angus-y/pyiris-backdoor) PyIris-backdoor is a modular, stealthy and flexible remote-access-toolkit written completely in python used to command and control other systems. It is now in the beta stage, possibly perpetually. There are bugs still present in the framework, feel free to contribute or help me out with this project its still under active development >_>
+- [**57**Star][2d] [C++] [aliveteam/alive_reversing](https://github.com/aliveteam/alive_reversing) Re-implementation of Abe's Exoddus
+- [**57**Star][4m] [al0ne/nmap_bypass_ids](https://github.com/al0ne/nmap_bypass_ids) bypass IDS
+- [**57**Star][6d] [Py] [afagarap/malware-classification](https://github.com/afagarap/malware-classification) Towards Building an Intelligent Anti-Malware System: A Deep Learning Approach using Support Vector Machine for Malware Classification
+- [**57**Star][3y] [Py] [acama/ctf](https://github.com/acama/ctf) Exploits for interesting CTF challenges I have worked on
+- [**57**Star][2y] [Batchfile] [absolomb/pentesting](https://github.com/absolomb/pentesting) Pentesting Cheatsheets and Guides
+- [**57**Star][10m] [15pb/wechat_tools](https://github.com/15pb/wechat_tools) 微信插件,微信辅助工具
+- [**57**Star][7y] [IntrepidusGroup/mallory](https://bitbucket.org/intrepidusgroup/mallory)
+- [**56**Star][1m] [Shell] [125k/pwrdeauther](https://github.com/125k/pwrdeauther) This script allows you to deauth a specific SSID or an entire channel with mdk3 (MDK3 is more powerful than Aireplay)
+- [**56**Star][2y] [Kotlin] [v2ray/v2rayng](https://github.com/v2ray/v2rayng) This project is currently discontinued. Please use this code with care and considering adopt it.
+- [**56**Star][10m] [Py] [genymobile/copydeps](https://github.com/genymobile/copydeps) Analyze and copy library dependencies of ELF binaries
+- [**56**Star][6y] [C] [pwning/plaidctf2014](https://github.com/pwning/plaidctf2014) Source for some problems from PlaidCTF 2014.
+- [**56**Star][28d] [Go] [evilsocket/pwngrid](https://github.com/evilsocket/pwngrid) (⌐■_■) - API server for pwnagotchi.ai
+- [**56**Star][6m] [Py] [rabbitmask/weblogicscanserver](https://github.com/rabbitmask/weblogicscanserver) 开启WeblogicScanV3.*系列,采用Server部署,支持远程Weblogic漏洞扫描
+- [**56**Star][1y] [Py] [thelsa/ueditor-getshell](https://github.com/thelsa/ueditor-getshell) ueditor .net getshell
+- [**56**Star][9m] [TS] [pengchujin/onesubscribe](https://github.com/pengchujin/onesubscribe) ss ssr v2ray 订阅管理 node 后端
+- [**56**Star][10m] [ObjC] [geosn0w/chaos](https://github.com/geosn0w/chaos) Chaos iOS < 12.1.2 PoC by
+- [**56**Star][3d] [Py] [ubernostrum/pwned-passwords-django](https://github.com/ubernostrum/pwned-passwords-django) Utilities for working with the Pwned Passwords database from Django.
+- [**56**Star][4m] [Py] [giantbranch/mipsaudit](https://github.com/giantbranch/mipsaudit) IDA script to assist in MIPS static scan
+- [**56**Star][1m] [Shell] [125k/pwrdeauther](https://github.com/125K/PwrDeauther) This script allows you to deauth a specific SSID or an entire channel with mdk3 (MDK3 is more powerful than Aireplay)
+- [**56**Star][8m] [Py] [hatching/sflock](https://github.com/hatching/sflock) Sample staging & detonation utility to be used in combination with Cuckoo Sandbox.
+- [**56**Star][6y] [PHP] [wkcaj/safecurl](https://github.com/wkcaj/safecurl) SSRF Protection Library for PHP -
+- [**56**Star][8m] [Shell] [malscan/malscan](https://github.com/malscan/malscan) A fully featured malware scanner for Linux desktops and servers.
+- [**56**Star][3y] [C] [zerosum0x0/shellcodedriver](https://github.com/zerosum0x0/shellcodedriver) Windows driver to execute arbitrary usermode code (essentially same vulnerability as capcom.sys)
+- [**56**Star][1y] [zephrfish/xsspayloads](https://github.com/zephrfish/xsspayloads) Cross Site Scripting Payloads -- Variations
+- [**56**Star][4y] [Ruby] [zenvdeluca/net_healer](https://github.com/zenvdeluca/net_healer) NET HEALER receive DDoS Attack reports from FastNetMon collectors allowing custom triggers on a per stage based actions.
+- [**56**Star][4m] [Assembly] [xyzz/ghidra-mep](https://github.com/xyzz/ghidra-mep) Toshiba MeP processor module for GHIDRA
+- [**56**Star][2y] [PS] [xan7r/kerberoast](https://github.com/xan7r/kerberoast)
+- [**56**Star][4m] [Shell] [wuseman/wbruter](https://github.com/wuseman/wbruter) Crack your non-rooted android device pin code with 100% guarantee aslong as usb debugging has been enable. Wbruter also has support for parallel ssh brute forcing via pssh
+- [**56**Star][2y] [Py] [williballenthin/python-sdb](https://github.com/williballenthin/python-sdb) Pure Python parser for Application Compatibility Shim Databases (.sdb files)
+- [**56**Star][4y] [Py] [upgoingstar/hackerone_public_reports](https://github.com/upgoingstar/hackerone_public_reports) Finds all public bug reports on reported on Hackerone
+- [**56**Star][11m] [Py] [unamer/pwnsandboxforctf](https://github.com/unamer/pwnsandboxforctf) Yet another sandbox for CTF challenge in AWD mode
+- [**56**Star][2m] [C] [ufrisk/leechcore](https://github.com/ufrisk/leechcore) LeechCore - Physical Memory Acquisition Library & The LeechAgent Remote Memory Acquisition Agent
+- [**56**Star][3y] [JS] [twz915/django-minicms](https://github.com/twz915/django-minicms) Django 开发简易的内容管理系统
+- [**56**Star][2m] [Makefile] [trojan-gfw/openwrt-trojan](https://github.com/trojan-gfw/openwrt-trojan) trojan and its dependencies for OpenWrt
+- [**56**Star][8y] [C] [toucan-system/pmcma](https://github.com/toucan-system/pmcma) Post Memory Corruption Memory Analyzer
+- [**56**Star][1y] [Py] [torque59/garfield](https://github.com/torque59/garfield) An offensive attack framework for Distributed Layer of Modern Applications
+- [**56**Star][4m] [Py] [stef/pyrsp](https://github.com/stef/pyrsp) python implementation of the GDB Remote Serial Protocol
+- [**56**Star][3y] [C++] [stealth/crash](https://github.com/stealth/crash) crypted admin shell: SSH-like strong crypto remote admin shell for Linux, BSD, Android, Solaris and OSX
+- [**56**Star][8m] [HTML] [sophoslabs/cve-2018-18500](https://github.com/sophoslabs/cve-2018-18500) PoC for CVE-2018-18500 - Firefox Use-After-Free
+- [**56**Star][11m] [C] [smihica/pyminizip](https://github.com/smihica/pyminizip) To create a password encrypted zip file in python.
+- [**56**Star][8d] [C++] [signetlabdei/lorawan](https://github.com/signetlabdei/lorawan) An ns-3 module for simulation of LoRaWAN networks.
+- [**56**Star][4y] [Py] [siberas/arpwn](https://github.com/siberas/arpwn) Analysis tools and exploit sample scripts for Adobe Reader 10/11 and Acrobat Reader DC
+- [**56**Star][10m] [Shell] [securityriskadvisors/talr](https://github.com/securityriskadvisors/talr) Threat Alert Logic Repository
+- [**56**Star][2y] [WebAssembly] [seccon/seccon2017_online_ctf](https://github.com/seccon/seccon2017_online_ctf)
+- [**56**Star][7m] [scubsrgroup/automatic-exploit-generation](https://github.com/scubsrgroup/automatic-exploit-generation) Something about AEG
+- [**56**Star][7m] [OCaml] [rolfrolles/pandemicml](https://github.com/rolfrolles/pandemicml) Pandemic binary program analysis framework in OCaml (abandoned)
+- [**56**Star][2d] [Py] [rocky/python-xdis](https://github.com/rocky/python-xdis) Python cross-version bytecode library and disassembler
+- [**56**Star][2m] [JS] [roccomuso/alveare](https://github.com/roccomuso/alveare)
+- [**56**Star][2y] [C] [rgerganov/nfqsed](https://github.com/rgerganov/nfqsed) Modify network traffic with netfilter_queue
+- [**56**Star][4y] [Py] [rehints/blackhat_2015](https://github.com/rehints/blackhat_2015) Distributing the REconstruction of High-Level IR for Large Scale Malware Analysis
+- [**56**Star][2y] [Py] [rafiot/kittengroomer](https://github.com/rafiot/kittengroomer) USB key cleaner
+- [**56**Star][5m] [Py] [r3nt0n/bopscrk](https://github.com/r3nt0n/bopscrk) A tool to generate smart and powerful wordlists
+- [**56**Star][3y] [C] [pythonmaster41/go-for-oscp](https://github.com/pythonmaster41/go-for-oscp)
+- [**56**Star][5m] [Java] [pnfsoftware/jeb2-androsig](https://github.com/pnfsoftware/jeb2-androsig) Android Library Code Recognition
+- [**56**Star][11m] [Py] [pirate/mesh-botnet](https://github.com/pirate/mesh-botnet)
+- [**56**Star][1y] [Py] [p1kachu/talking-with-cars](https://github.com/p1kachu/talking-with-cars) CAN analysis - Use your car as a gamepad!
+- [**56**Star][2y] [ouspg/fuzz-testing-beginners-guide](https://github.com/ouspg/fuzz-testing-beginners-guide) Fuzz testing: Beginner's guide
+- [**56**Star][3y] [C] [opsxcq/exploit-blacknurse](https://github.com/opsxcq/exploit-blacknurse) Black Nurse DOS attack
+- [**56**Star][9m] [JS] [obscuritylabs/os-cfdb](https://github.com/obscuritylabs/os-cfdb) Open Source - Common Findings DataBase (JSON & MD)
+- [**56**Star][4y] [C++] [nukem9/virtualdbg](https://github.com/nukem9/virtualdbg) Test code only. Not reliable for actual use.
+- [**56**Star][4m] [PHP] [nextras/secured-links](https://github.com/nextras/secured-links) CSRF protection for Nette Framework presenters' signals.
+- [**56**Star][4y] [Py] [newlog/exploiting](https://github.com/newlog/exploiting) Stuff you might use when exploiting software
+- [**56**Star][8d] [Java] [netflix/iep](https://github.com/netflix/iep) Insight Engineering Platform Components
+- [**56**Star][28d] [Py] [netflix-skunkworks/cloudaux](https://github.com/netflix-skunkworks/cloudaux) Cloud Auxiliary is a python wrapper and orchestration module for interacting with cloud providers
+- [**56**Star][1y] [Py] [neo23x0/exotron](https://github.com/neo23x0/exotron) Sandbox feature upgrade with the help of wrapped samples
+- [**56**Star][3m] [Py] [nccgroup/hashcrack](https://github.com/nccgroup/hashcrack) Guesses hash types, picks some sensible dictionaries and rules for hashcat
+- [**56**Star][2y] [Py] [mzeyong/cve-2017-13089](https://github.com/mzeyong/cve-2017-13089) CVE-2017-13089
+- [**56**Star][2y] [myndtt/ctf-site](https://github.com/myndtt/ctf-site) 介绍一些CTF训练的站点
+- [**56**Star][2y] [C] [mwpcheung/ssl-kill-switch2](https://github.com/mwpcheung/ssl-kill-switch2) Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS and OS X Apps
+- [**56**Star][5y] [Py] [mvantellingen/psycopg2-ctypes](https://github.com/mvantellingen/psycopg2-ctypes) ctypes port of psycopg2 (see
+- [**56**Star][1y] [C] [msftserver/ravencoin-wallet-with-miners](https://github.com/msftserver/ravencoin-wallet-with-miners) RavenCoin Wallet including CPU and GPU miners! programs are directly from Ravencoin and official miner sources
+- [**56**Star][2m] [Java] [mp911de/spring-cloud-vault-config-samples](https://github.com/mp911de/spring-cloud-vault-config-samples) Examples for Spring Vault and Spring Cloud Vault Config
+- [**56**Star][5y] [C] [molnarg/dead0007](https://github.com/molnarg/dead0007) Decompiler for SpiderMonkey 1.8 XDR bytecode
+- [**56**Star][2y] [Shell] [moki-ics/moki](https://github.com/moki-ics/moki) Moki Distribution - ICS/SCADA Tools
+- [**56**Star][8m] [Py] [mogwailabs/mjet](https://github.com/mogwailabs/mjet) MOGWAI LABS JMX exploitation toolkit
+- [**56**Star][2y] [JS] [marknote/teleshellbot](https://github.com/marknote/teleshellbot) A simple Telegram Bot to run shell commands remotely
+- [**56**Star][7y] [C++] [makerbot/miracle-grue](https://github.com/makerbot/miracle-grue) Workspace for new Toolpathing software.
+- [**56**Star][4y] [C++] [m0n0ph1/basic-file-crypter](https://github.com/m0n0ph1/basic-file-crypter) Process Hollowing techniques as used in many file Crypters (C/C++)
+- [**56**Star][3m] [C] [lucamassarelli/yarasafe](https://github.com/lucamassarelli/yarasafe) SAFE embeddings to match functions in yara
+- [**56**Star][3y] [Java] [linkedin/sometime](https://github.com/linkedin/sometime) A BurpSuite plugin to detect Same Origin Method Execution vulnerabilities
+- [**56**Star][1y] [latestalexey/awesome-web-hacking](https://github.com/latestalexey/awesome-web-hacking) A list of web application security
+- [**56**Star][4y] [Go] [kevinmahaffey/tescat](https://github.com/kevinmahaffey/tescat) A tool to identify unique UDP payloads developed in order to audit the Tesla Model S's onboard ethernet traffic.
+- [**56**Star][3d] [Py] [keeper-security/commander](https://github.com/keeper-security/commander) Keeper Commander
+- [**56**Star][20d] [C++] [jspspemu/jspspemu](https://github.com/jspspemu/jspspemu) typescript psp emulator
+- [**56**Star][4m] [AutoIt] [jschicht/extractusnjrnl](https://github.com/jschicht/extractusnjrnl) Tool to extract the $UsnJrnl from an NTFS volume
+- [**56**Star][2y] [JS] [jpenalbae/r2-scripts](https://github.com/jpenalbae/r2-scripts) Multiple radare2 rpipe scripts
+- [**56**Star][2y] [Py] [joxeankoret/maltindex](https://github.com/joxeankoret/maltindex) Mal Tindex is an Open Source tool for indexing binaries and help attributing malware campaigns
+- [**56**Star][20d] [Java] [johnjohndoe/proguard](https://github.com/johnjohndoe/proguard) Java class file shrinker, optimizer, obfuscator, and preverifier
+- [**56**Star][2y] [C++] [jnferguson/double-free-examples](https://github.com/jnferguson/double-free-examples) Basic examples of double free exploitation/etc functionality in glibc/jemalloc/tcmalloc
+- [**56**Star][5y] [Ruby] [jekil/hostmap](https://github.com/jekil/hostmap)
+- [**56**Star][1y] [C] [jduck/canhazaxs](https://github.com/jduck/canhazaxs) A tool for enumerating the access to entries in the file system of an Android device.
+- [**56**Star][1y] [Py] [jas502n/cve-2018-3191](https://github.com/jas502n/cve-2018-3191) Weblogic-CVE-2018-3191远程代码命令执行漏洞
+- [**56**Star][3d] [PS] [jaapbrasser/sharedscripts](https://github.com/jaapbrasser/sharedscripts) This is a collection of scripts that I have shared online
+- [**56**Star][8y] [JS] [iriscouch/request_jquery](https://github.com/iriscouch/request_jquery) request (NodeJS http client) API using jQuery back-end
+- [**56**Star][5y] [C] [honeynet/ghost-usb-honeypot](https://github.com/honeynet/ghost-usb-honeypot) A honeypot for malware that propagates via USB storage devices
+- [**56**Star][8m] [JS] [hamz-a/frida-android-libbinder](https://github.com/hamz-a/frida-android-libbinder) PoC Frida script to view Android libbinder traffic
+- [**56**Star][3y] [C] [gnaixx/anti-debug](https://github.com/gnaixx/anti-debug) Android detect debugger
+- [**56**Star][6m] [TS] [geeksonsecurity/illuminatejs](https://github.com/geeksonsecurity/illuminatejs) IlluminateJs is a static JavaScript deobfuscator
+- [**56**Star][5y] [Shell] [ge0rg/samsung-nx-hacks](https://github.com/ge0rg/samsung-nx-hacks) Firmware Hacks for the Linux-based Samsung NX mirrorless camera models (NX300, NX2000, ???)
+- [**56**Star][9y] [Py] [gdssecurity/sqlbrute](https://github.com/gdssecurity/sqlbrute) SQLBrute is a tool for brute forcing data out of databases using blind SQL injection vulnerabilities.
+- [**56**Star][23d] [JS] [gajus/global-agent](https://github.com/gajus/global-agent) Global HTTP/HTTPS proxy agent configurable using environment variables.
+- [**56**Star][5y] [Py] [foreni-packages/dhcpig](https://github.com/foreni-packages/dhcpig) initiates an advanced DHCP exhaustion attack
+- [**56**Star][2m] [Py] [forallsecure/bncov](https://github.com/forallsecure/bncov) Scriptable Binary Ninja plugin for coverage analysis and visualization
+- [**56**Star][3y] [C++] [fireeye/unicorn-libemu-shim](https://github.com/fireeye/unicorn-libemu-shim) unicorn-libemu-shim:项目地址
+- [**56**Star][3y] [Shell] [epinna/unusedpkg](https://github.com/epinna/unusedpkg) Diagnostic tool to find unused packages
+- [**56**Star][4y] [Shell] [emirozer/nixarmor](https://github.com/emirozer/nixarmor) nixarmor is a linux hardening automation project
+- [**56**Star][1y] [C#] [egorbo/intrinsicsplayground](https://github.com/egorbo/intrinsicsplayground) My toys to play with SSE/AVX in pure C# (.NET Core 2.1)
+- [**56**Star][1m] [dwizzzle/presentations](https://github.com/dwizzzle/presentations) A repository of my presentations
+- [**56**Star][2y] [Shell] [digitalocean/debian-sys-maint-roll-passwd](https://github.com/digitalocean/debian-sys-maint-roll-passwd) debian-sys-maint-roll-passwd:更新 MySQL 用户 "debian-sys-maint" 的密码
+- [**56**Star][6y] [C] [devzero2000/shellcoderhandbook](https://github.com/devzero2000/shellcoderhandbook) shellcoderhandbook source code : "The Shellcoder's Handbook: Discovering and Exploiting Security Holes"
+- [**56**Star][1y] [Py] [destine21/zipfileraider](https://github.com/destine21/zipfileraider) ZIP File Raider - Burp Extension for ZIP File Payload Testing
+- [**56**Star][1y] [Nix] [dapphub/ds-auth](https://github.com/dapphub/ds-auth) Updatable, unobtrusive Solidity authorization pattern
+- [**56**Star][2y] [danielmiessler/blackhat-arsenal-tools](https://github.com/danielmiessler/blackhat-arsenal-tools) Official Black Hat Arsenal Security Tools Repository
+- [**56**Star][3y] [Py] [cuppa-joe/dsame](https://github.com/cuppa-joe/dsame) Python EAS SAME Alert Message Decoder
+- [**56**Star][2m] [Assembly] [cturt/ps2-yabasic-exploit](https://github.com/cturt/ps2-yabasic-exploit) PS2 exploit for demo discs containing Yabasic that allows arbitrary code execution.
+- [**56**Star][2y] [C] [coolervoid/rootstealer](https://github.com/coolervoid/rootstealer) X11 trick to inject commands on root terminal.
+- [**56**Star][3y] [cn33liz/ms17-012](https://github.com/cn33liz/ms17-012) MS17-012 - COM Session Moniker EoP Exploit running within MSBuild.exe
+- [**56**Star][5d] [PS] [chef-koch/windows-10-hardening](https://github.com/chef-koch/windows-10-hardening) Windows 10 hardening guide without gimmicks
+- [**56**Star][29d] [C] [bytebandits/writeups](https://github.com/bytebandits/writeups) Wiki-like CTF write-ups repository by ByteBandits
+- [**56**Star][2y] [Py] [bonkc/bugbountysubdomains](https://github.com/bonkc/bugbountysubdomains) Tools to gather subdomains from Bug Bounty programs
+- [**56**Star][2y] [Java] [bigsizeme/burplugin-java-rce](https://github.com/bigsizeme/burplugin-java-rce) ******本软件仅限用于学习交流禁止用于任何非法行为****** 本版本支持elasticsearch java语言远程命令执行及文件上传 elasticsearchgroov语言远程命令执行及文件上传 struts2-005、struts2-009、struts2-013、struts2-016、struts2-019、struts2-020、struts2-devmode、 struts2-032、struts2-033、struts2-037、struts2-045、struts2-048、struts2-052 除struts2-053全部RCE漏洞验证并支持批量验证。 Struts2漏洞验证需要python环境并需要相关类库支持.点击python按钮初始化初始化python…
+- [**56**Star][2y] [Py] [b-mueller/laser-ethereum](https://github.com/b-mueller/laser-ethereum) Symbolic virtual machine for Ethereum
+- [**56**Star][5y] [C] [axoltl/hubcap](https://github.com/axoltl/hubcap) ChromeCast HubCap exploit
+- [**56**Star][2y] [Py] [averagesecurityguy/ptnotes](https://github.com/averagesecurityguy/ptnotes)
+- [**56**Star][7d] [Py] [angr/archinfo](https://github.com/angr/archinfo) Classes with architecture-specific information useful to other projects.
+- [**56**Star][2y] [Java] [amotzte/android-mock-location-for-development](https://github.com/amotzte/android-mock-location-for-development) allows to change mock location from command line on real devices
+- [**56**Star][17d] [albertzsigovits/malware-writeups](https://github.com/albertzsigovits/malware-writeups) Personal research and publication on malware families
+- [**55**Star][3m] [C] [heiher/hev-socks5-tproxy](https://github.com/heiher/hev-socks5-tproxy) A simple, lightweight socks5 transparent proxy for Linux
+- [**55**Star][3d] [JS] [instantwebp2p/peer-proxy](https://github.com/instantwebp2p/peer-proxy) Light on hidden web service - Expose web service from Peer
+- [**55**Star][21d] [victorqribeiro/bruteforcetv](https://github.com/victorqribeiro/bruteforcetv) Let's brute force this hotel's tv.
+- [**55**Star][6m] [C] [vanhoefm/dragondrain-and-time](https://github.com/vanhoefm/dragondrain-and-time)
+- [**55**Star][2y] [Py] [ztgrace/pwnboard](https://github.com/ztgrace/pwnboard) CCDC Red Team PWNboard
+- [**55**Star][10m] [HTML] [jpcertcc/cordova](https://github.com/jpcertcc/cordova) Vulnerability Analysis of Hybrid Applications using Apache Cordova
+- [**55**Star][1y] [Py] [osirislab/csaw-ctf-2018-finals](https://github.com/osirislab/csaw-ctf-2018-finals) Repo for CSAW CTF 2018 Finals challenges
+- [**55**Star][6m] [C++] [eyalz800/zpp_hypervisor](https://github.com/eyalz800/zpp_hypervisor) A very simple hypervisor for learning experience.
+- [**55**Star][26d] [Kotlin] [m1dr05/istheapp](https://github.com/m1dr05/istheapp) Open-source android spyware
+- [**55**Star][9m] [Vue] [pengchujin/subscribevue](https://github.com/pengchujin/subscribevue) ss ssr v2ray 订阅管理 vue前端界面
+- [**55**Star][2m] [C#] [ohjeongwook/powershellrunbox](https://github.com/ohjeongwook/powershellrunbox) Dynamic PowerShell analysis framework
+- [**55**Star][1m] [Go] [lc/hacks](https://github.com/lc/hacks) Repo of useful scripts
+- [**55**Star][2m] [Py] [ripxorip/aerojump.nvim](https://github.com/ripxorip/aerojump.nvim) Aerojump is a fuzzy-match searcher/jumper for Neovim with the goal of quick keyboard navigation
+- [**55**Star][2m] [C] [resilar/crchack](https://github.com/resilar/crchack) Reversing CRC for fun and profit
+- [**55**Star][5m] [Py] [re4lity/pocorexp](https://github.com/re4lity/PoCorExp) PoC or Exp Of Vulnerability
+- [**55**Star][1m] [redteamwing/pentest_wiki](https://github.com/RedTeamWing/Pentest_WiKi) 你所不知道的渗透测试
+- [**55**Star][1m] [C] [secureauthcorp/sap-dissection-plug-in-for-wireshark](https://github.com/SecureAuthCorp/SAP-Dissection-plug-in-for-Wireshark) This Wireshark plugin provides dissection of SAP's NI, Diag, Enqueue, Router, Message Server, SNC and IGS protocols.
+- [**55**Star][1y] [pegasuslab/pegasusteam](https://github.com/PegasusLab/PegasusTeam) PegasusTeam is a group that focuses on WLAN security and Wi-Fi Pentesting.
+- [**55**Star][2d] [HTML] [canonical-web-and-design/ubuntu.com](https://github.com/canonical-web-and-design/ubuntu.com) The official website for the Ubuntu operating system
+- [**55**Star][2y] [yrzx404/free-security-resources](https://github.com/yrzx404/free-security-resources) 安全总是无处不在...
+- [**55**Star][2y] [C] [winbagility/winbagility](https://github.com/winbagility/winbagility) [ARCHIVED] mov rax, ${Thalium/IceBox}; jmp rax;
+- [**55**Star][21d] [C] [watf-team/watf-bank](https://github.com/watf-team/watf-bank) WaTF Bank - What a Terrible Failure Mobile Banking Application for Android and iOS
+- [**55**Star][1y] [Py] [wangyihang/find-php-vulnerabilities](https://github.com/wangyihang/find-php-vulnerabilities)
+- [**55**Star][2y] [PS] [vletoux/ms17-010-scanner](https://github.com/vletoux/ms17-010-scanner)
+- [**55**Star][1y] [JS] [ubeacsec/silverdog](https://github.com/ubeacsec/silverdog) An audio firewall for Chrome!
+- [**55**Star][1y] [C#] [tyranid/windowsruntimesecuritydemos](https://github.com/tyranid/windowsruntimesecuritydemos) Demos for Presentation on Windows Runtime Security
+- [**55**Star][5y] [PHP] [troyhunt/pineapplesurprise](https://github.com/troyhunt/pineapplesurprise) Pineapple Surprise! is a PHP implementation for the Wi-Fi Pineapple or "Jasager". Used in conjunction with dnsspoof it will serve a "surprise" to any clients connected to the device when they make an HTTP request.
+- [**55**Star][2y] [trietptm/security-news](https://github.com/trietptm/security-news) Information Security News
+- [**55**Star][4m] [Py] [trickster0/enyx](https://github.com/trickster0/enyx) Enyx SNMP IPv6 Enumeration Tool
+- [**55**Star][2y] [JS] [tinysec/jsrt](https://github.com/tinysec/jsrt) javascript runtime ( JSRT ) project for windows , based on chakra
+- [**55**Star][4m] [Visual Basic .NET] [thesph1nx/slickermaster-rev4](https://github.com/thesph1nx/slickermaster-rev4) NSA Hacking Tool Recreation UnitedRake
+- [**55**Star][7m] [HTML] [tgeaus/weak-password](https://github.com/tgeaus/weak-password) 字典大全 dictionary
+- [**55**Star][3y] [C] [synack/chaoticmarch](https://github.com/synack/chaoticmarch) A mechanism for automating input events on iOS
+- [**55**Star][3y] [Py] [sowish/sqlmapapi_pi](https://github.com/sowish/sqlmapapi_pi) 利用sqlmapapi进行批量检测sql注入
+- [**55**Star][8m] [Perl] [sourceperl/mbtget](https://github.com/sourceperl/mbtget) A simple modbus/TCP client write in pure Perl.
+- [**55**Star][2y] [C++] [sigint9/yaragui](https://github.com/sigint9/yaragui)
+- [**55**Star][2y] [Py] [shaanen/osint-combiner](https://github.com/shaanen/osint-combiner) Combining OSINT sources in Elastic Stack
+- [**55**Star][2y] [TeX] [season-lab/survey-symbolic-execution](https://github.com/season-lab/survey-symbolic-execution) 对有关符号执行相关工具和技术的调查
+- [**55**Star][3y] [Java] [scriptjunkie/msfgui](https://github.com/scriptjunkie/msfgui) The Metasploit GUI
+- [**55**Star][2m] [Ruby] [saz/puppet-memcached](https://github.com/saz/puppet-memcached) Puppet module for memcached
+- [**55**Star][2y] [C] [samlarenn/callbackdisabler](https://github.com/samlarenn/callbackdisabler) Disable Driver Callbacks
+- [**55**Star][1m] [Py] [s2e/s2e-env](https://github.com/s2e/s2e-env) Your S2E project management tools
+- [**55**Star][3y] [C++] [s-kanev/xiosim](https://github.com/s-kanev/xiosim) A detailed michroarchitectural x86 simulator
+- [**55**Star][2y] [Java] [righettod/virtualhost-payload-generator](https://github.com/righettod/virtualhost-payload-generator) BURP extension providing a set of values for the HTTP request "Host" header for the "BURP Intruder" in order to abuse virtual host resolution.
+- [**55**Star][7m] [C] [rapid7/reflectivedllinjection](https://github.com/rapid7/reflectivedllinjection) Reflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process.
+- [**55**Star][10m] [ObjC] [rani-i/bluetoothdpoc](https://github.com/rani-i/bluetoothdpoc) CVE-2018-4087 PoC
+- [**55**Star][4y] [Py] [pidydx/smrt](https://github.com/pidydx/smrt) Sublime Malware Research Tool
+- [**55**Star][1m] [Visual Basic .NET] [outflanknl/scripts](https://github.com/outflanknl/scripts) Small scripts that make life better
+- [**55**Star][3y] [Shell] [ouspg/libfuzzerfication](https://github.com/ouspg/libfuzzerfication) libfuzzerfication - fuzzing for the rest of us!
+- [**55**Star][6m] [C++] [osql/osql](https://github.com/osql/osql) SQL powered operating system instrumentation, monitoring, and analytics.
+- [**55**Star][5y] [Pascal] [nyx0/pony](https://github.com/nyx0/pony) Pony 2.0 Stealer
+- [**55**Star][3y] [C#] [nccgroup/mnemosyne](https://github.com/nccgroup/mnemosyne) mnemosyne:通用Windows内存抓取工具
+- [**55**Star][2y] [Py] [msfidelis/kill-router-](https://github.com/msfidelis/kill-router-) Ferramenta para quebrar senhas administrativas de roteadores Wireless, routers, switches e outras plataformas de gestão de serviços de rede autenticados.
+- [**55**Star][1y] [mindpointgroup/ansible-vmware-provisioning](https://github.com/mindpointgroup/ansible-vmware-provisioning) Some basic Ansible content to help get more out of VMware. Developed for AnsibleFest San Francisco 2017.
+- [**55**Star][6m] [C++] [mefistotelis/ida-pro-loadmap](https://github.com/mefistotelis/ida-pro-loadmap) Plugin for IDA Pro disassembler which allows loading .map files.
+- [**55**Star][3y] [Py] [m4sc3r4n0/spyrat](https://github.com/m4sc3r4n0/spyrat) Python Remote Access Trojan
+- [**55**Star][2y] [Shell] [lanjelot/twisted-honeypots](https://github.com/lanjelot/twisted-honeypots) SSH, FTP and Telnet honeypots based on Twisted
+- [**55**Star][2y] [C] [kkamagui/shadow-box-for-arm](https://github.com/kkamagui/shadow-box-for-arm) Shadow-Box v2: 实用且全能的ARM沙箱
+- [**55**Star][7y] [C++] [kakaroto/ps3ida](https://github.com/kakaroto/ps3ida) IDA scripts and plugins for PS3
+- [**55**Star][2y] [jkpang/timliu-ios](https://github.com/jkpang/timliu-ios) iOS开发常用三方库、插件、知名博客等等
+- [**55**Star][8m] [JS] [jes/chess-steg](https://github.com/jes/chess-steg) Steganography in chess games
+- [**55**Star][2y] [C#] [jamessmith2/ethmonitoring](https://github.com/jamessmith2/ethmonitoring) Miner monitoring software with different notifications support
+- [**55**Star][2y] [C++] [huoji120/av-killer](https://github.com/huoji120/av-killer) Antivirus Killer
+- [**55**Star][14d] [YARA] [hestat/lw-yara](https://github.com/hestat/lw-yara) Yara Ruleset for scanning Linux servers for shells, spamming, phishing and other webserver baddies
+- [**55**Star][4d] [Go] [gyyyy/footprint](https://github.com/gyyyy/footprint) 个人笔记
+- [**55**Star][2d] [Py] [fox-it/bloodhound-import](https://github.com/fox-it/bloodhound-import) Python based BloodHound data importer
+- [**55**Star][1y] [Py] [flo354/androick](https://github.com/flo354/androick)
+- [**55**Star][2y] [C++] [feliam/klee-taint](https://github.com/feliam/klee-taint) KLEE-TAINT - Klee with taint analysis support
+- [**55**Star][2y] [Py] [elevenpaths/dirtytooth-raspberrypi](https://github.com/elevenpaths/dirtytooth-raspberrypi) Exploit the hack for IOS 11.1.2 and earlier to collect leaked information.
+- [**55**Star][2m] [PS] [eclypsium/screwed-drivers](https://github.com/eclypsium/screwed-drivers) a centralized source of knowledge which contains a list of drivers determined to be vulnerable as well as example code for how to use this kind of functionality.
+- [**55**Star][3m] [Py] [dogoncouch/logesp](https://github.com/dogoncouch/logesp) Open Source SIEM (Security Information and Event Management system).
+- [**55**Star][3y] [Shell] [docker-linux/kali-metasploit](https://github.com/docker-linux/kali-metasploit)
+- [**55**Star][4d] [C] [danielkrupinski/vac-hooks](https://github.com/danielkrupinski/vac-hooks) Hook WinAPI functions used by Valve Anti-Cheat. Log calls and intercept arguments & return values. DLL written in C.
+- [**55**Star][6m] [Java] [cognifide/aem-rules-for-sonarqube](https://github.com/cognifide/aem-rules-for-sonarqube) SonarQube plugin with set of rules detecting possible bugs and bad smells specific for AEM development.
+- [**55**Star][5m] [Shell] [cignoraptor-ita/cignotrack](https://github.com/cignoraptor-ita/cignotrack) OSINT tool for testing privacy and social engineering vulnerability of organizations.
+- [**55**Star][3y] [Py] [chadillac/mdns_recon](https://github.com/chadillac/mdns_recon) Multicast DNS and DNS service discovery daemons deployed on various systems across the Internet are misconfigured and reply to queries targeting their unicast addresses, including requests from their WAN interface. These daemons could be leveraged by attackers for sensitive information disclosure and potentially used in DDoS campaigns for reflec…
+- [**55**Star][2y] [C++] [caseysmithrc/memmitm](https://github.com/caseysmithrc/memmitm) SSL In Memory Inspection - Proof Of Concept.
+- [**55**Star][3y] [Java] [bsmali4/checksql](https://github.com/bsmali4/checksql)
+- [**55**Star][2y] [Py] [brianloveswords/python-jws](https://github.com/brianloveswords/python-jws) python implementation of JSON Web Signatures
+- [**55**Star][3y] [C] [bazad/physmem](https://github.com/bazad/physmem) Local privilege escalation through macOS 10.12.1 via CVE-2016-1825 or CVE-2016-7617.
+- [**55**Star][5m] [basketwill/z0bpctools](https://github.com/basketwill/z0bpctools) 一个windows反汇编工具,界面风格防OllyDbg 利用业余开发了一款类似仿OLlyDbg界面的 IDA静态反编译工具,目前是1.0版本,功能不是很强大但是基本功能有了
+- [**55**Star][4y] [Py] [az0ne/python_backdoor](https://github.com/az0ne/python_backdoor) 过360主动防御360杀毒以前99%杀软的python后门
+- [**55**Star][4y] [Py] [az0ne/jboss_autoexploit](https://github.com/az0ne/jboss_autoexploit) JBoss JMXInvokerServlet JMXInvoker 0.3 - Remote Command Execution 漏洞批量检测
+- [**55**Star][9m] [Py] [attackanddefencesecuritylab/ad_webscanner](https://github.com/attackanddefencesecuritylab/ad_webscanner) AD工作室精心研发漏洞安全扫描器
+- [**55**Star][7y] [Py] [antitree/manitree](https://github.com/antitree/manitree) AndroidManifest.xml security auditor
+- [**55**Star][5y] [C] [anestisb/melkor-android](https://github.com/anestisb/melkor-android) An Android port of the melkor ELF fuzzer
+- [**55**Star][2y] [Py] [ahm3dhany/ids-evasion](https://github.com/ahm3dhany/ids-evasion) Evading Snort Intrusion Detection System.
+- [**55**Star][4y] [Py] [ahhh/ntp_trojan](https://github.com/ahhh/ntp_trojan) Reverse NTP remote access trojan in python, for penetration testers
+- [**55**Star][3y] [abatchy17/introduction-to-manual-backdooring](https://github.com/abatchy17/introduction-to-manual-backdooring) Executables created while writing "Introduction to Manual Backdooring".
+- [**55**Star][3m] [Py] [5alt/zeroscan](https://github.com/5alt/zeroscan) ZeroScan is a tool that auto gathers subdomains and scan ports
+- [**54**Star][] [Py] [dhondta/sploitkit](https://github.com/dhondta/sploitkit) Toolkit for building Metasploit-like consoles
+- [**54**Star][23d] [CSS] [gh0stkey/ahrid](https://github.com/gh0stkey/ahrid) AHRID - Analysis Hacker's Real-ID Platform 黑客攻击画像分析系统
+- [**54**Star][25d] [Swift] [chengluffy/shadowsocksfree](https://github.com/chengluffy/shadowsocksfree) Try Yourself.
+- [**54**Star][7m] [C++] [mozillasecurity/libfuzzer-python-bridge](https://github.com/mozillasecurity/libfuzzer-python-bridge) A Python3 bridge for implementing custom libFuzzer mutators
+- [**54**Star][3m] [Shell] [snail007/goproxy-heroku](https://github.com/snail007/goproxy-heroku) goproxy heroku 一键部署套装,把heroku变为免费的http(s)\socks5代理,搜索学习资料。
+- [**54**Star][4y] [Py] [ryhanson/keyslack](https://github.com/ryhanson/keyslack) Slack client used to encrypt/decrypt and send/receive Keybase PGP messages through a Slack private group.
+- [**54**Star][11d] [xairy/ubuntu-hardening](https://github.com/xairy/ubuntu-hardening) Random tips on how to improve security of Ubuntu Desktop
+- [**54**Star][1y] [Py] [secwiki/ctf-hub](https://github.com/secwiki/ctf-hub) CTF 题目列表
+- [**54**Star][3y] [Java] [giovannicolonna/msfvenom-backdoor-android](https://github.com/giovannicolonna/msfvenom-backdoor-android) Android backdoored app, improved source code of msfvenom android .apk
+- [**54**Star][4y] [HTML] [konklone/cdns-to-https](https://github.com/konklone/cdns-to-https) (Retired.) Testing HTTP->HTTPS redirects for CDNs.
+- [**54**Star][5d] [fatihh92/hackthebox-writeups](https://github.com/fatihh92/hackthebox-writeups)
+- [**54**Star][1y] [PHP] [ahref-group/superpanel](https://github.com/ahref-group/superpanel) A new shadowsocks panel based on ThinkPHP
+- [**54**Star][16d] [Py] [kkamagui/napper-for-tpm](https://github.com/kkamagui/napper-for-tpm) TPM vulnerability checking tool for CVE-2018-6622. This tool will be published at Black Hat Asia 2019 and Black Hat Europe 2019
+- [**54**Star][18d] [Java] [cuyler36/ghidra-gamecube-loader](https://github.com/cuyler36/ghidra-gamecube-loader) A Nintendo GameCube binary loader for Ghidra
+- [**54**Star][2m] [HTML] [aravinthpanch/rssi](https://github.com/aravinthpanch/rssi) Indoor localisation using RSSI. RSSI is received signal strength indicator in IEEE 802.11 beacon packet to announce the presence of WiFi.This tool was built to study & visualize the data collected in the experiments. This was done at Telecommunications Network Group (TKN), Berlin as part of EVARILOS.
+- [**54**Star][4y] [Py] [geovation/wifispy](https://github.com/geovation/wifispy) Sniff Wifi traffic, log device addresses.
+- [**54**Star][16d] [TS] [ediardo/kmdr-cli](https://github.com/ediardo/kmdr-cli) 🧠The ultimate CLI learning tool for explaining commands from your terminal
+- [**54**Star][27d] [HTML] [usnistgov/acvp](https://github.com/usnistgov/acvp) Industry Working Group on Automated Cryptographic Algorithm Validation
+- [**54**Star][5y] [Py] [yahooarchive/pyioce](https://github.com/YahooArchive/PyIOCe) Python IOC Editor
+- [**54**Star][2m] [C#] [southpolenator/sharpdebug](https://github.com/southpolenator/SharpDebug) C# debugging automation tool
+- [**54**Star][1y] [Py] [k4yt3x/defense-matrix](https://github.com/k4yt3x/defense-matrix) Express security essentials deployment for Linux Servers
+- [**54**Star][2y] [Java] [graxcode/java-unpacker](https://github.com/GraxCode/java-unpacker) Extract Crypted Jar Archives
+- [**54**Star][1y] [Py] [zardus/idalink](https://github.com/zardus/idalink) idalink arose of the need to easily use IDA's API for analysis without wanting to be stuck in the IDA interface
+- [**54**Star][6m] [C++] [x64dbg/snowman](https://github.com/x64dbg/snowman) Snowman Decompiler for x64dbg (LOOKING FOR MAINTAINER)
+- [**54**Star][2y] [PS] [whitehat-zero/powenum](https://github.com/whitehat-zero/powenum) Executes common PowerSploit Powerview functions then combines output into a spreadsheet for easy analysis.
+- [**54**Star][10d] [Py] [w181496/ctf](https://github.com/w181496/ctf) My CTF writeups
+- [**54**Star][15d] [Java] [vy/hrrs](https://github.com/vy/hrrs) Record, transform, and replay HTTP requests in Java EE and Spring applications.
+- [**54**Star][1y] [Py] [vulnerscom/vulners-scanner](https://github.com/vulnerscom/vulners-scanner) Vulnerability scanner based on vulners.com audit API
+- [**54**Star][1y] [JS] [userlandkernel/jailbreakme-unified](https://github.com/userlandkernel/jailbreakme-unified) Framework for iOS browser exploitation to kernel privileges and rootfs remount
+- [**54**Star][24d] [Py] [ucsb-seclab/agrigento](https://github.com/ucsb-seclab/agrigento) Agrigento is a tool to identify privacy leaks in Android apps by performing black-box differential analysis on the network traffic.
+- [**54**Star][1y] [Shell] [thelinuxchoice/tweetshell](https://github.com/thelinuxchoice/tweetshell) Multi-thread Twitter BruteForcer in Shell Script
+- [**54**Star][5m] [PS] [tasox/logrm](https://github.com/tasox/logrm) LogRM is a post exploitation powershell script which it uses windows event logs to gather information about internal network
+- [**54**Star][2y] [C] [tandasat/fu_hypervisor](https://github.com/tandasat/fu_hypervisor) A hypervisor hiding user-mode memory using EPT
+- [**54**Star][8y] [C] [soulxu/kvmsample](https://github.com/soulxu/kvmsample) minivm based on kvm
+- [**54**Star][2y] [C++] [sisoma2/shellcodeloader](https://github.com/sisoma2/shellcodeloader) Small tool to load shellcodes or PEs to analyze them
+- [**54**Star][3y] [C++] [rwfpl/rewolf-msi-exploit](https://github.com/rwfpl/rewolf-msi-exploit) MSI NTIOLib/WinIO Local Privilege Escalation exploit
+- [**54**Star][4y] [Py] [rodionovd/cuckoo-osx-analyzer](https://github.com/rodionovd/cuckoo-osx-analyzer) An OS X analyzer for Cuckoo Sandbox project
+- [**54**Star][2y] [C++] [raymon-tian/wfpfirewall](https://github.com/raymon-tian/wfpfirewall) 基于WFP(Windows Filter Platform)的个人防火墙系统
+- [**54**Star][2m] [HTML] [r3kapig/writeup](https://github.com/r3kapig/writeup) CTF challenges writeup
+- [**54**Star][8m] [MATLAB] [professormahi/ctf](https://github.com/professormahi/ctf) CTF (Capture The Flag Writeups and Tools)
+- [**54**Star][7d] [Ruby] [picatz/shodanz](https://github.com/picatz/shodanz)
+- [**54**Star][3y] [Py] [patois/drgadget](https://github.com/patois/drgadget) IDAPython plugin for the Interactive Disassembler
+- [**54**Star][3y] [C] [passingtheknowledge/ganxo](https://github.com/passingtheknowledge/ganxo) An opensource API hooking framework
+- [**54**Star][2y] [ObjC] [objective-see/aurevoir](https://github.com/objective-see/aurevoir) View and remove notification messages from Apple's "Notification Database"
+- [**54**Star][5y] [Py] [nnewsom/webbies](https://github.com/nnewsom/webbies) Collection of tools for web recon and enumeration.
+- [**54**Star][2y] [Py] [nezza/scada-stuff](https://github.com/nezza/scada-stuff) A collection of scripts & tools for reverse-engineering & hacking SCADA/ICS devices.
+- [**54**Star][2m] [netstalking-core/netstalking-osint](https://github.com/netstalking-core/netstalking-osint) Коллекция материалов по OSINT для нетсталкинга
+- [**54**Star][1y] [Go] [netflix-skunkworks/aws-metadata-proxy](https://github.com/netflix-skunkworks/aws-metadata-proxy) AWS Metadata Proxy for protection against SSRF
+- [**54**Star][9y] [Emacs Lisp] [nelhage/reverse-android](https://github.com/nelhage/reverse-android) Reverse-engineering tools for Android applications
+- [**54**Star][3y] [Rust] [nccgroup/assethook](https://github.com/nccgroup/assethook) LD_PRELOAD magic for Android's AssetManager
+- [**54**Star][9m] [Shell] [mzpqnxow/embedded-toolkit](https://github.com/mzpqnxow/embedded-toolkit) Prebuilt statically linked gdbserver and gawk executables for Linux on ARMEL, MIPS/MIPSEL and more platforms for use on embedded devices, including for systems with many different ABIs (including more than 20 statically linked gdbserver executables)
+- [**54**Star][10m] [muhammd/awesome-pentest](https://github.com/muhammd/awesome-pentest) Awesome Penetration Testing A collection of awesome penetration testing resources
+- [**54**Star][3y] [Perl] [msimerson/sentry](https://github.com/msimerson/sentry) Bruteforce attack blocker (ssh, FTP, SMTP, and more)
+- [**54**Star][3y] [Py] [mseclab/burp-pyjfuzz](https://github.com/mseclab/burp-pyjfuzz) Burp Suite plugin which implement PyJFuzz for fuzzing web application.
+- [**54**Star][2y] [Java] [mirsamantajbakhsh/onionharvester](https://github.com/mirsamantajbakhsh/onionharvester) A small TOR Onion Address harvester for checking if the address is available or not.
+- [**54**Star][1y] [C] [mikeryan/uberducky](https://github.com/mikeryan/uberducky) 将Ubertooth转换为通过BLE触发的无线USB橡皮鸭
+- [**54**Star][3m] [mikerah/awesome-privacy-on-blockchains](https://github.com/mikerah/awesome-privacy-on-blockchains) A curated list of privacy on blockchains resources
+- [**54**Star][2y] [PS] [microsoftedge/dev.microsoftedge.com-vms](https://github.com/microsoftedge/dev.microsoftedge.com-vms) Scripts used to generate the free VMs available at
+- [**54**Star][1m] [Py] [matt-kempster/mips_to_c](https://github.com/matt-kempster/mips_to_c) A MIPS decompiler.
+- [**54**Star][2y] [Py] [matejbasic/pythonscrapybasicsetup](https://github.com/matejbasic/pythonscrapybasicsetup) Basic setup with random user agents and IP addresses for Python Scrapy Framework.
+- [**54**Star][6m] [Py] [masood-m/yalih](https://github.com/masood-m/yalih) YALIH (Yet Another Low Interaction Honeyclient) is a low Interaction Client honeypot designed to detect malicious websites through signature, anomaly and pattern matching techniques
+- [**54**Star][5y] [C++] [malwaretech/fsthook](https://github.com/malwaretech/fsthook) A library for intercepting native functions by hooking KiFastSystemCall
+- [**54**Star][3y] [C#] [lontivero/vinchuca](https://github.com/lontivero/vinchuca) A resilient peer-to-peer botnet agent in .NET
+- [**54**Star][2y] [Shell] [letssudormrf/ssr-bbr-docker](https://github.com/letssudormrf/ssr-bbr-docker) Dockerfile for ssr+bbr_powered
+- [**54**Star][12m] [Py] [klsecservices/s7scan](https://github.com/klsecservices/s7scan) The tool for enumerating Siemens S7 PLCs through TCP/IP or LLC network
+- [**54**Star][6m] [C#] [klionsec/bypassav-allthings](https://github.com/klionsec/bypassav-allthings)
+- [**54**Star][3m] [ObjC] [julbouln/ice40_eink_controller](https://github.com/julbouln/ice40_eink_controller) ice40 FPGA eink controller
+- [**54**Star][4y] [Batchfile] [islamadel/bat2exe](https://github.com/islamadel/bat2exe) Automatically exported from code.google.com/p/bat2exe
+- [**54**Star][9y] [Shell] [ioerror/crlwatch](https://github.com/ioerror/crlwatch) Collect, watch, and analyze SSL/TLS CRL data
+- [**54**Star][2y] [Py] [heurs/parsentfs](https://github.com/heurs/parsentfs) Simple NTFS crawler.
+- [**54**Star][6y] [Shell] [hclx/dell_power_spoofer](https://github.com/hclx/dell_power_spoofer) A MSP430 based design spoofing dell power adapter identification
+- [**54**Star][7m] [Py] [hannob/superfishy](https://github.com/hannob/superfishy) Archive of software and other data involved in the Superfish / Komodia incident
+- [**54**Star][5y] [Go] [hailocab/logslam](https://github.com/hailocab/logslam) A lightweight lumberjack protocol compliant logstash indexer
+- [**54**Star][3m] [Py] [gray-panda/grayrepo](https://github.com/gray-panda/grayrepo) Personal repository for all ctf related stuffs
+- [**54**Star][8m] [C] [gosecure/dllpasswordfilterimplant](https://github.com/gosecure/dllpasswordfilterimplant) DLL Password Filter Implant with Exfiltration Capabilities
+- [**54**Star][4m] [HTML] [google/security-crawl-maze](https://github.com/google/security-crawl-maze) Security Crawl Maze is a comprehensive testbed for web security crawlers. It contains pages representing many ways in which one can link resources from a valid HTML document.
+- [**54**Star][4y] [Go] [gehaxelt/ds_store](https://github.com/gehaxelt/ds_store) GO - Minimal parser for .DS_Store files
+- [**54**Star][11d] [JS] [fedora-infra/asknot-ng](https://github.com/fedora-infra/asknot-ng) What can I do for $ORGANIZATION?
+- [**54**Star][1y] [JS] [enovella/androidtrainings](https://github.com/enovella/androidtrainings) Mobile security trainings based on android
+- [**54**Star][5m] [Py] [dr0op/bufferfly](https://github.com/dr0op/bufferfly) 攻防演习/渗透测试资产处理小工具,对攻防演习/渗透测试前的信息搜集到的大批量资产/域名进行存活检测、获取标题头、语料提取、常见web端口检测等。
+- [**54**Star][1y] [cujanovic/subdomain-bruteforce-list](https://github.com/cujanovic/subdomain-bruteforce-list) subdomain bruteforce list
+- [**54**Star][8y] [Py] [cranklin/python-virus](https://github.com/cranklin/python-virus) This is an educational computer virus written in Python to demonstrate how replication is done.
+- [**54**Star][10m] [Py] [circl/potiron](https://github.com/circl/potiron) Potiron - Normalize, Index and Visualize Network Capture
+- [**54**Star][2y] [C++] [census/windows_10_rs2_rs3_exploitation_primitives](https://github.com/census/windows_10_rs2_rs3_exploitation_primitives) Windows 10 RS2/RS3 exploitation primitives based on the OffensiveCon 2018 talk
+- [**54**Star][3y] [Assembly] [casperreverser/casperreverse](https://github.com/casperreverser/casperreverse) Here's a quick rundown of how I reversed the Casper API (
+- [**54**Star][2y] [PS] [byt3bl33d3r/invoke-autoit](https://github.com/byt3bl33d3r/invoke-autoit) Loads the AutoIt DLL and PowerShell assemblies into memory and executes the specified keystrokes
+- [**54**Star][9m] [C] [bsidessf/ctf-2019-release](https://github.com/bsidessf/ctf-2019-release) BSidesSF CTF 2019 release
+- [**54**Star][7m] [Clojure] [bronsa/tools.decompiler](https://github.com/bronsa/tools.decompiler) A decompiler for clojure, in clojure
+- [**54**Star][4y] [JS] [az0ne/simple_zoomeye](https://github.com/az0ne/simple_zoomeye) 一个还正在完善的项目,采用分布式python扫描全国的HTTP服务
+- [**54**Star][1y] [Self] [ayoul3/privesc](https://github.com/ayoul3/privesc) Privilege escalation tools on Mainframe
+- [**54**Star][3y] [Elm] [auth0-blog/elm-with-jwt-api](https://github.com/auth0-blog/elm-with-jwt-api)
+- [**54**Star][2y] [Py] [aserper/ddetect](https://github.com/aserper/ddetect) Simple DDE object detector
+- [**54**Star][5y] [Java] [ajohnston9/ciscorouter](https://github.com/ajohnston9/ciscorouter) Tool for scanning Cisco router products over SSH
+- [**54**Star][2y] [Java] [5up3rc/weblogic_cmd](https://github.com/5up3rc/weblogic_cmd) weblogic t3 deserialization rce
+- [**54**Star][1y] [Py] [5alt/vulhint](https://github.com/5alt/vulhint) VulHint是辅助代码审计的 sublime text 3 插件
+- [**53**Star][3d] [Shell] [al0ne/nginx_log_check](https://github.com/al0ne/nginx_log_check) Nginx日志安全分析脚本
+- [**53**Star][6d] [Java] [sukaralin/cve-2019-2890](https://github.com/sukaralin/cve-2019-2890)
+- [**53**Star][5y] [Py] [jeanphorn/common-password](https://github.com/jeanphorn/common-password) 字典生成脚本, 用python语言写成的可交互性的字典生成脚本。尤其适合社会工程学,当你收集到目标的具体信息后,你就可以通过这个脚本来智能化生成关于目标的字典。
+- [**53**Star][7d] [Go] [shopify/voucher](https://github.com/shopify/voucher)
+- [**53**Star][11m] [Py] [mushorg/oschameleon](https://github.com/mushorg/oschameleon) OS Fingerprint Obfuscation for modern Linux Kernels
+- [**53**Star][9m] [Py] [moosedojo/spotter](https://github.com/moosedojo/spotter) Targeted Payload Execution
+- [**53**Star][24d] [Shell] [threatexpress/pasties](https://github.com/threatexpress/pasties) A collection of random bits of information common to many individual penetration tests, red teams, and other assessments
+- [**53**Star][30d] [Py] [0x90/wpsik](https://github.com/0x90/wpsik) WPS scan and pwn tool
+- [**53**Star][3y] [PS] [elevenpaths/telefonica-wannacry-filerestorer](https://github.com/elevenpaths/telefonica-wannacry-filerestorer) Tool to restore some WannaCry files which encryption weren't finish properly
+- [**53**Star][22d] [Java] [thisislibra/genesis](https://github.com/thisislibra/genesis) A framework to generate unique test cases based on code snippets to test techniques
+- [**53**Star][11m] [Shell] [criteo/kerberos-docker](https://github.com/criteo/kerberos-docker) Run kerberos environment in docker containers
+- [**53**Star][21d] [Py] [hamz-a/frida-android-helper](https://github.com/hamz-a/frida-android-helper) Frida Android utilities
+- [**53**Star][2m] [mohitkhemchandani/oscp-complete-guide](https://github.com/mohitkhemchandani/oscp-complete-guide) How to prepare for OSCP complete guide
+- [**53**Star][4d] [JS] [bazzite/nuxt-netlify](https://github.com/bazzite/nuxt-netlify) Dynamically generate _headers and _redirects files for Netlify in your Nuxt.js projects
+- [**53**Star][1y] [Py] [synacktiv-contrib/modmobmap](https://github.com/Synacktiv-contrib/Modmobmap) Map 2G/3G/4G and more cellular networks in real live with a simple smart phone, pretty much like osmocomBB monitoring feature.
+- [**53**Star][8m] [Py] [synacktiv-contrib/stuffz](https://github.com/Synacktiv-contrib/stuffz) Repository containing many useful scripts
+- [**53**Star][3y] [Py] [ghostlulzhacks/rolljam](https://github.com/ghostlulzhacks/rolljam) rolljam
+- [**53**Star][2y] [HTML] [jm33-m0/gfw_scripts](https://github.com/jm33-m0/gfw_scripts) added shadowsocks plugin for gee 4
+- [**53**Star][2y] [fsecurelabs/defcon25_uac_workshop](https://github.com/FSecureLABS/defcon25_uac_workshop) UAC 0Day all day!
+- [**53**Star][1m] [b-mueller/awesome-mythx-smart-contract-security-tools](https://github.com/b-mueller/awesome-mythx-smart-contract-security-tools) A curated list of resources and tools for the MythX smart contract security API
+- [**53**Star][2y] [Java] [zyrikby/fsquadra](https://github.com/zyrikby/fsquadra) Fast detection of repackaged Android applications based on the comparison of resource files included into the package.
+- [**53**Star][4y] [Py] [zenfish/ipmi](https://github.com/zenfish/ipmi) IPMI stuff from DARPA work
+- [**53**Star][7d] [C#] [z3prover/firewallchecker](https://github.com/z3prover/firewallchecker) A self-contained firewall checker
+- [**53**Star][9m] [Shell] [xalfie/nix-auditor](https://github.com/xalfie/nix-auditor) Nix Audit made easier (RHEL, CentOS)
+- [**53**Star][1m] [Go] [wrfly/gus-proxy](https://github.com/wrfly/gus-proxy) "打一枪换一个地方" 一个HTTP代理
+- [**53**Star][1y] [Shell] [w3c/device-memory](https://github.com/w3c/device-memory) Device Memory
+- [**53**Star][9m] [PS] [vtagion/scripts](https://github.com/vtagion/scripts)
+- [**53**Star][7y] [Visual Basic .NET] [vbgamer45/semi-vb-decompiler](https://github.com/vbgamer45/semi-vb-decompiler) Partial decompiler for Visual Basic. Code source of file struture infomation.
+- [**53**Star][2y] [Py] [uzetta27/easyrop](https://github.com/uzetta27/easyrop) A Python tool to generate ROP chains
+- [**53**Star][5y] [Java] [thuxnder/androiddevice.info](https://github.com/thuxnder/androiddevice.info) Android app collecting device information and submiting it to
+- [**53**Star][12d] [Py] [taokong/group_normalization](https://github.com/taokong/group_normalization) pytorch implementation of group normalization in
+- [**53**Star][1m] [Rust] [str4d/ire](https://github.com/str4d/ire) I2P router implementation in Rust
+- [**53**Star][2y] [Py] [spritz-research-group/ctf-writeups](https://github.com/spritz-research-group/ctf-writeups) SPRITZ plays CTFs! Writeups by spritzers
+- [**53**Star][6d] [Py] [snowflakedb/snowalert](https://github.com/snowflakedb/snowalert) Security Analytics Using The Snowflake Data Warehouse
+- [**53**Star][5m] [Py] [sneakerhax/pyphisher](https://github.com/sneakerhax/pyphisher) A simple python tool for phishing
+- [**53**Star][1m] [JS] [secgroup/flower](https://github.com/secgroup/flower) TCP flow analyzer with sugar for A/D CTF
+- [**53**Star][4y] [C++] [scadacs/plcinject](https://github.com/scadacs/plcinject)
+- [**53**Star][1m] [Py] [reorx/python-terminal-color](https://github.com/reorx/python-terminal-color) Drop-in single file library for printing color in terminal
+- [**53**Star][2y] [PS] [powershell/gpregistrypolicy](https://github.com/powershell/gpregistrypolicy)
+- [**53**Star][12m] [Py] [payatu/cve-2018-14442](https://github.com/payatu/cve-2018-14442) PoC for Foxit Reader CVE-2018-14442
+- [**53**Star][3d] [C] [outscale/packetgraph](https://github.com/outscale/packetgraph) Packetgraph library is a collection of network bricks you can connect to form a network graph.
+- [**53**Star][6m] [JS] [ollseg/ttt-ext](https://github.com/ollseg/ttt-ext) Chrome extension to aid in finding DOMXSS by simple taint analysis of string values.
+- [**53**Star][8m] [Py] [nwmonster/applysig](https://github.com/nwmonster/applysig) Apply IDA FLIRT signatures for Ghidra
+- [**53**Star][3y] [Shell] [nvssks/android-responder](https://github.com/nvssks/android-responder) Scripts for running Responder.py in an Android (rooted) device.
+- [**53**Star][6y] [JS] [niegowski/node-daemonize2](https://github.com/niegowski/node-daemonize2) Node module for easy creation of daemons for Node 0.8.x and above
+- [**53**Star][3m] [Shell] [nameles-org/nameles](https://github.com/nameles-org/nameles) Open source entropy based invalid traffic detection and pre-bid filtering.
+- [**53**Star][5m] [Py] [n0fate/ichainbreaker](https://github.com/n0fate/ichainbreaker) Breaking the iCloud Keychain Artifacts
+- [**53**Star][2y] [C++] [mq1n/dllthreadinjectiondetector](https://github.com/mq1n/dllthreadinjectiondetector)
+- [**53**Star][2y] [Java] [modzero/modjoda](https://github.com/modzero/modjoda) Java Object Deserialization on Android
+- [**53**Star][2y] [Shell] [mempodippy/snodew](https://github.com/mempodippy/snodew) PHP root (suid) reverse shell
+- [**53**Star][1y] [Py] [m4ll0k/icloudbrutter](https://github.com/m4ll0k/icloudbrutter) AppleID Bruteforce
+- [**53**Star][4y] [C] [lgeek/dynamorio_pin_escape](https://github.com/lgeek/dynamorio_pin_escape)
+- [**53**Star][5y] [PHP] [kulisu/metasploit-pro-trial-grabber](https://github.com/kulisu/metasploit-pro-trial-grabber) This is a PHP command-line script to auto-grab the metasploit 14-DAYs pro trial key.
+- [**53**Star][7y] [C] [kmcallister/alameda](https://github.com/kmcallister/alameda) Linux kernel JIT spray for SMEP / KERNEXEC bypass
+- [**53**Star][4y] [Py] [juliocesarfort/netscreen-shodan-scanner](https://github.com/juliocesarfort/netscreen-shodan-scanner) A SHODAN/Censys + Paramiko scanner to check for backdoored Internet-facing Juniper ScreenOS devices
+- [**53**Star][9m] [Java] [jogolden/ghidraps4loader](https://github.com/jogolden/ghidraps4loader) A Ghidra loader for PlayStation 4 binaries.
+- [**53**Star][5m] [C++] [jesseemond/cheat-and-gin](https://github.com/jesseemond/cheat-and-gin) C++ cheat engine (memory scanner)
+- [**53**Star][2y] [ObjC] [iabem97/securityd-racer2](https://github.com/iabem97/securityd-racer2) PoC vulnerability in securityd
+- [**53**Star][3m] [Shell] [hirbodbehnam/shadowsocks-cloak-installer](https://github.com/hirbodbehnam/shadowsocks-cloak-installer) A one-key script to setup Cloak plugin with Shadowsocks on your server
+- [**53**Star][11d] [C++] [hasherezade/vidi](https://github.com/hasherezade/vidi) ViDi Visual Disassembler (experimental)
+- [**53**Star][5y] [C++] [hackedteam/core-win32](https://github.com/hackedteam/core-win32) RCS Agent for Windows (32bit)
+- [**53**Star][2y] [Py] [h-j-13/malicious_domain_whois](https://github.com/h-j-13/malicious_domain_whois)
+- [**53**Star][2y] [C#] [guardicore/azure_password_harvesting](https://github.com/guardicore/azure_password_harvesting) Plaintext Password harvesting from Azure Windows VMs
+- [**53**Star][1m] [C] [gluster/gluster-block](https://github.com/gluster/gluster-block) A framework for gluster block storage
+- [**53**Star][5y] [C#] [glmcdona/functionhacker](https://github.com/glmcdona/functionhacker) Maintaining an official release at
+- [**53**Star][3y] [Py] [gideonn/insta-gallery-downloader](https://github.com/gideonn/insta-gallery-downloader) This is a bot to download all your instagram gallery pictures in a single folder
+- [**53**Star][4y] [PHP] [gfoss/phpmyadmin_honeypot](https://github.com/gfoss/phpmyadmin_honeypot)
+- [**53**Star][2y] [g-solaria/osintforpentests](https://github.com/g-solaria/osintforpentests) Slides from my ShellCon Talk, OSINT for Pen Tests, given 10/19.
+- [**53**Star][2y] [Shell] [evyatarmeged/stegextract](https://github.com/evyatarmeged/stegextract) Detect hidden files and text in images
+- [**53**Star][1y] [JS] [evyatarmeged/humanoid](https://github.com/evyatarmeged/humanoid) Node.js package to bypass CloudFlare's anti-bot JavaScript challenges
+- [**53**Star][7y] [C++] [eschweiler/proreversing](https://github.com/eschweiler/proreversing) Open and generic Anti-Anti Reversing Framework. Works in 32 and 64 bits.
+- [**53**Star][2m] [C#] [ericzimmerman/bstrings](https://github.com/ericzimmerman/bstrings) A better strings utility!
+- [**53**Star][2m] [Shell] [edoverflow/smith](https://github.com/edoverflow/smith) Simple wrapper for meg that sieves through meg's output for you.
+- [**53**Star][7m] [Py] [edent/renault-zoe-api](https://github.com/edent/renault-zoe-api) A basic API for getting information about your Renault Zoe Electric Vehicle.
+- [**53**Star][3y] [Py] [dmuhs/pastebin-scraper](https://github.com/dmuhs/pastebin-scraper) Live-scraping pastebin to fight boredom.
+- [**53**Star][2y] [Go] [diogomonica/actuary](https://github.com/diogomonica/actuary) An actuary is a business professional who analyzes the financial consequences of risk.
+- [**53**Star][3y] [Shell] [dg92/node-express-postgres-redis-starter-kit](https://github.com/dg92/node-express-postgres-redis-starter-kit) This is a starter kit that help you get started with node, express, postgresql, redis. Node.js / Express / PostgreSQL / Authentication API Starter Kit
+- [**53**Star][2y] [Py] [devsecops/defcon-workshop](https://github.com/devsecops/defcon-workshop)
+- [**53**Star][5m] [Py] [deadbits/malware-analysis-scripts](https://github.com/deadbits/malware-analysis-scripts) Collection of scripts for different malware analysis tasks
+- [**53**Star][2m] [HTML] [daxio/k8s-lemp](https://github.com/daxio/k8s-lemp) LEMP stack in a Kubernetes cluster
+- [**53**Star][4y] [C++] [datachi/memdb](https://github.com/datachi/memdb) Tools to track memory accesses in applications and visualize the patterns to reveal opportunities for optimization.
+- [**53**Star][12m] [Shell] [damonmohammadbagher/nativepayload_image](https://github.com/damonmohammadbagher/nativepayload_image) Transferring Backdoor Payloads with BMP Image Pixels
+- [**53**Star][5m] [HTML] [d1str0/drupot](https://github.com/d1str0/drupot) Drupal Honeypot
+- [**53**Star][2m] [Java] [coreyd97/stepper](https://github.com/coreyd97/stepper) A natural evolution of Burp Suite's Repeater tool
+- [**53**Star][2y] [Py] [coffeehb/sstif](https://github.com/coffeehb/sstif) 一个Fuzzing服务器端模板注入漏洞的半自动化工具
+- [**53**Star][4y] [C++] [cn33liz/p0shkiller](https://github.com/cn33liz/p0shkiller)
+- [**53**Star][12m] [chryzsh/practical-hacking](https://github.com/chryzsh/practical-hacking) Repo for the Gitbook Practical Hacking
+- [**53**Star][2y] [JS] [christophetd/docker-python-sandbox](https://github.com/christophetd/docker-python-sandbox) A Docker-powered NodeJS sandbox to execute untrusted python code.
+- [**53**Star][1y] [C] [chen-charles/pedetour](https://github.com/chen-charles/pedetour) modify binary Portable Executable to hook its export functions
+- [**53**Star][2y] [Py] [carnal0wnage/malicious_file_maker](https://github.com/carnal0wnage/malicious_file_maker) malicious file maker/sender to create and send malicious attachments to test your email filter/alerting
+- [**53**Star][12m] [bughunterid/bughunterid](https://github.com/bughunterid/bughunterid) Para pencari bug / celah kemanan bisa bergabung.
+- [**53**Star][3m] [Shell] [bishopfox/pwn-pulse](https://github.com/bishopfox/pwn-pulse) Exploit for Pulse Connect Secure SSL VPN arbitrary file read vulnerability (CVE-2019-11510)
+- [**53**Star][3m] [Java] [arloor/httpproxy](https://github.com/arloor/httpproxy) a netty-based http proxy that breaks the GFW。
+- [**53**Star][3y] [C++] [aixxe/chameleon](https://github.com/aixxe/chameleon) Basic skin & knife changer for Counter-Strike: Global Offensive
+- [**53**Star][3y] [agahlot/rtfm](https://github.com/agahlot/rtfm) Red Team Field Manual
+- [**53**Star][1y] [C#] [advancedhacker101/c-sharp-r.a.t-client](https://github.com/advancedhacker101/c-sharp-r.a.t-client) This is a c# client for the c# R.A.T server
+- [**53**Star][7d] [C] [ademakov/mainmemory](https://github.com/ademakov/mainmemory) Wannabe Main Memory Database and More
+- [**53**Star][2y] [Py] [0x4d31/sqhunter](https://github.com/0x4d31/sqhunter) A simple threat hunting tool based on osquery, Salt Open and Cymon API
+- [**53**Star][7m] [C] [0cch/0cchext](https://github.com/0cch/0cchext) 0CCh Windbg extension
+- [**52**Star][2y] [Py] [sensepost/peanuts](https://github.com/sensepost/peanuts) Peanuts is a free and open source wifi tracking tool. Based on the SensePosts Snoopy-NG project that is now closed.
+- [**52**Star][1y] [Py] [nixawk/hello-python2](https://github.com/nixawk/hello-python2) Python libraries demos
+- [**52**Star][5y] [Ruby] [michenriksen/hibp](https://github.com/michenriksen/hibp) A simple tool to check a bunch of email addresses against the Have I Been Pwned API.
+- [**52**Star][3y] [Py] [tobefuturer/ida-swift-demangle](https://github.com/tobefuturer/ida-swift-demangle) A tool to demangle Swift function names in IDA.
+- [**52**Star][2y] [Py] [yadox666/wifi_ccc](https://github.com/yadox666/wifi_ccc) Wi-Fi Covert Channel Chat demo application
+- [**52**Star][7m] [Py] [shadowsocksr-live/shadowsocksr](https://github.com/shadowsocksr-live/shadowsocksr)
+- [**52**Star][29d] [Py] [jas502n/solr_rce](https://github.com/jas502n/solr_rce) Apache Solr RCE via Velocity template
+- [**52**Star][2y] [C++] [xfgryujk/cheatingtutorial](https://github.com/xfgryujk/cheatingtutorial) 一个游戏修改器制作教程的例程
+- [**52**Star][3y] [Py] [test-pipeline/orthrus](https://github.com/test-pipeline/orthrus) A tool to manage, conduct, and assess dictionary-based fuzz testing
+- [**52**Star][25d] [C] [bmegli/wifi-scan](https://github.com/bmegli/wifi-scan) A nl80211 C/C++ library for monitoring signal strength of WiFi networks
+- [**52**Star][7d] [Go] [giuliocomi/backoori](https://github.com/giuliocomi/backoori) Tool aided persistence via Windows URI schemes abuse
+- [**52**Star][4m] [Py] [lengjibo/dedecmscan](https://github.com/lengjibo/dedecmscan) 织梦全版本漏洞扫描
+- [**52**Star][3y] [Py] [cylance/mitmcanary](https://github.com/cylance/mitmcanary) Tool/service to detect Man in the Middle attacks with Canary Requests
+- [**52**Star][11m] [JS] [kruegerrobotics/lan-monitor](https://github.com/kruegerrobotics/lan-monitor) Simple website to display the LAN status based on a nmap scan
+- [**52**Star][9m] [Logos] [zhaochengxiang/ioswechatfakelocation](https://github.com/zhaochengxiang/ioswechatfakelocation) A tweak that can fake location info in WeChat
+- [**52**Star][5y] [Py] [x0day/multiproxies](https://github.com/x0day/multiproxies) penetration testing framework that can use socks4/socks5 proxy.
+- [**52**Star][3y] [Py] [wraith-wireless/pyric](https://github.com/wraith-wireless/pyric) Python wireless library for Linux
+- [**52**Star][2d] [TS] [wkovacs64/hibp](https://github.com/wkovacs64/hibp) A Promise-based API for querying the 'Have I been pwned?' service.
+- [**52**Star][2y] [C#] [vmcall/mapdetection](https://github.com/vmcall/mapdetection) Detect manualmapped images remotely, without hassle
+- [**52**Star][6m] [C++] [virgilsecurity/virgil-crypto](https://github.com/virgilsecurity/virgil-crypto) Virgil Crypto is a high-level cryptographic library that allows you to perform all necessary operations for secure storing and transferring data and everything required to become HIPAA and GDPR compliant. Crypto Library is written in C++, suitable for mobile and server platforms and supports bindings with: Swift, Obj-C, Java (Android), С#/.NET, …
+- [**52**Star][9d] [tyrmars/websafe-steppitguide](https://github.com/tyrmars/websafe-steppitguide) Web前后端漏洞分析与防御-知识梳理
+- [**52**Star][1y] [Py] [truneski/external_c2_framework](https://github.com/truneski/external_c2_framework) Python api for usage with cobalt strike's External C2 specification
+- [**52**Star][1y] [C#] [them4hd1/jcs](https://github.com/them4hd1/jcs) Joomla Vulnerability Component Scanner
+- [**52**Star][1y] [Py] [theevilbit/workshops](https://github.com/theevilbit/workshops)
+- [**52**Star][7m] [C] [strivexjun/hidedll](https://github.com/strivexjun/hidedll) Hide DLL / Hide Module / Hide Dynamic Link Library
+- [**52**Star][3y] [PHP] [shenzhenjinma/aliredenvelope](https://github.com/shenzhenjinma/aliredenvelope) 支付宝红包破解算法
+- [**52**Star][3y] [C++] [sektioneins/wwcd](https://github.com/sektioneins/wwcd) Capstone powered IDA view
+- [**52**Star][3y] [Py] [secwiki/some-poc-or-exp](https://github.com/secwiki/some-poc-or-exp) 各种漏洞poc、Exp的收集或编写
+- [**52**Star][10m] [Java] [ruedigergad/clj-net-pcap](https://github.com/ruedigergad/clj-net-pcap) A wrapper/facade/whatever to enable/ease the use of jNetPcap (a libpcap based packet sniffing lib) in Clojure
+- [**52**Star][2y] [rehints/blackhat_2017](https://github.com/rehints/blackhat_2017) Betraying the BIOS: Where the Guardians of the BIOS are Failing
+- [**52**Star][2y] [C] [rc0r/afl-fuzz](https://github.com/rc0r/afl-fuzz) Non-official repository for lcamtuf's American Fuzzy Lop
+- [**52**Star][10m] [Assembly] [pret/pokepinball](https://github.com/pret/pokepinball) disassembly of pokémon pinball
+- [**52**Star][1y] [PS] [pldmgg/winadmincenterps](https://github.com/pldmgg/winadmincenterps) Copy of Windows Admin Center (
+- [**52**Star][1y] [C] [phdphuc/mac-a-mal](https://github.com/phdphuc/mac-a-mal) 追踪macOS恶意软件的内核驱动, 与Cuckoo沙箱组合使用
+- [**52**Star][3y] [ASP] [pentesthub/priviledgebook](https://github.com/pentesthub/priviledgebook) 提权的文档
+- [**52**Star][4m] [payloadbox/open-redirect-payload-list](https://github.com/payloadbox/open-redirect-payload-list)
+- [**52**Star][19d] [Py] [patois/xray](https://github.com/patois/xray) Hexrays decompiler plugin that colorizes and filters the decompiler's output based on regular expressions
+- [**52**Star][2m] [PS] [palantir/exploitguard](https://github.com/palantir/exploitguard) Documentation and supporting script sample for Windows Exploit Guard
+- [**52**Star][2y] [Java] [owasp-ruhrpott/owasp-workshop-android-pentest](https://github.com/owasp-ruhrpott/owasp-workshop-android-pentest) Learning Penetration Testing of Android Applications
+- [**52**Star][5y] [Py] [osandamalith/chromefreak](https://github.com/osandamalith/chromefreak) A Cross-Platform Forensic Framework for Google Chrome
+- [**52**Star][3y] [PHP] [northwind6/webbug](https://github.com/northwind6/webbug) WebBug漏洞练习平台
+- [**52**Star][1y] [Py] [nikallass/sharesearch](https://github.com/nikallass/sharesearch) Samba, NFS shares spider and grepper
+- [**52**Star][2y] [Py] [neo23x0/radiocarbon](https://github.com/neo23x0/radiocarbon) Leak File Analyzer
+- [**52**Star][2m] [Py] [nelenkov/android-device-check](https://github.com/nelenkov/android-device-check) Check Android device security settings
+- [**52**Star][2y] [PS] [mr-un1k0d3r/base64-obfuscator](https://github.com/mr-un1k0d3r/base64-obfuscator) Simple PowerShell Base64 encoder to avoid detection of your malicious payload
+- [**52**Star][4d] [Shell] [mitchellkrogza/badd-boyz-hosts](https://github.com/mitchellkrogza/badd-boyz-hosts) A hosts file for use on any operating system to block bad domains out of your servers or devices.
+- [**52**Star][1y] [C] [miguelangel-nubla/videop2proxy](https://github.com/miguelangel-nubla/videop2proxy) Proxy to enable P2P only cameras to work with standard protocols.
+- [**52**Star][7y] [Ruby] [medelibero/ddos-tools](https://github.com/medelibero/ddos-tools) Tools that were created to help with Distributed Denial of Service testing
+- [**52**Star][11m] [Py] [matonis/yara_tools](https://github.com/matonis/yara_tools) Create an entire YARA rule via Python? Whhhhhhaatttt?
+- [**52**Star][9m] [C] [marcan/lsirec](https://github.com/marcan/lsirec) LSI SAS2008/SAS2108 low-level recovery tool for Linux
+- [**52**Star][3y] [PS] [m-dwyer/cryptoblocker](https://github.com/m-dwyer/cryptoblocker) A script to deploy File Server Resource Manager and associated scripts to block infected users
+- [**52**Star][5m] [Py] [lorexxar/redis-rogue-server](https://github.com/lorexxar/redis-rogue-server) Redis 4.x & 5.x RCE
+- [**52**Star][1y] [Py] [libraggbond/cve-2018-3191](https://github.com/libraggbond/cve-2018-3191) CVE-2018-3191 反弹shell
+- [**52**Star][3y] [Roff] [ldbfpiaoran/websearch](https://github.com/ldbfpiaoran/websearch) Search engine for web assets
+- [**52**Star][6y] [Py] [kevthehermit/maildb](https://github.com/kevthehermit/maildb) Python Web App to Parse and Track Email and http Pcap Files.
+- [**52**Star][2y] [Py] [joker25000/dzjecter](https://github.com/joker25000/dzjecter)
+- [**52**Star][5y] [C++] [jieyu/maple](https://github.com/jieyu/maple) A dynamic analysis framework for concurrent programs (x86 binaries). It is shipped with a few tools written using this framework for testing concurrent programs.
+- [**52**Star][5y] [Py] [jfoote/burp-git-bridge](https://github.com/jfoote/burp-git-bridge) Store Burp data and collaborate via git
+- [**52**Star][2y] [Py] [jflyup/goms17-010](https://github.com/jflyup/goms17-010) Simple program for detecting if host(s) are vulnerable to SMB exploit(MS17-010)
+- [**52**Star][5y] [Py] [jeffreysasaki/backdoor](https://github.com/jeffreysasaki/backdoor) Linux backdoor implementation written in Python
+- [**52**Star][1y] [JS] [jeffbryner/mozdef](https://github.com/jeffbryner/mozdef) MozDef: The Mozilla Defense Platform
+- [**52**Star][2y] [Py] [inurlx/cloudkill3r](https://github.com/inurlx/cloudkill3r) CLOUDKiLL3R bypasses Cloudflare protection service via TOR Browser using crimeflare !
+- [**52**Star][2m] [Py] [idapython/pyhexraysdeob](https://github.com/idapython/pyhexraysdeob) A port of Rolf Rolles hexraysdeob
+- [**52**Star][3y] [PHP] [httpoxy/php-fpm-httpoxy-poc](https://github.com/httpoxy/php-fpm-httpoxy-poc) A PoC for exploiting Guzzle's HTTP_PROXY untrusted read
+- [**52**Star][2y] [C] [hasherezade/process_chameleon](https://github.com/hasherezade/process_chameleon) A process overwriting its own PEB to make an illusion that it has been loaded from a different path.
+- [**52**Star][4y] [HTML] [hakanson/ng-owasp](https://github.com/hakanson/ng-owasp) OWASP Top 10 for AngularJS Applications
+- [**52**Star][4m] [Py] [grrrdog/tacotaco](https://github.com/grrrdog/tacotaco) Some scripts for attacks on Tacacs+ protocol
+- [**52**Star][6y] [C++] [georgenicolaou/heaveninjector](https://github.com/georgenicolaou/heaveninjector) Simple proof of concept code for injecting libraries on 64bit processes from a 32bit process
+- [**52**Star][2y] [C] [gentilkiwi/spectre_meltdown](https://github.com/gentilkiwi/spectre_meltdown)
+- [**52**Star][3y] [C] [fuzzstati0n/fuzzgoat](https://github.com/fuzzstati0n/fuzzgoat) A vulnerable C program for testing fuzzers.
+- [**52**Star][4m] [Py] [fkasler/dolos_cloak](https://github.com/fkasler/dolos_cloak) Automated 802.1x Bypass
+- [**52**Star][5y] [C++] [filcab/patchdiff2](https://github.com/filcab/patchdiff2) IDA binary differ. Since code.google.com/p/patchdiff2/ seemed abandoned, I did the obvious thing…
+- [**52**Star][2y] [Py] [fideliscyber/indicators](https://github.com/fideliscyber/indicators) Indicators from FTAs and Blog Posts
+- [**52**Star][11m] [feicong/zsxq_archives](https://github.com/feicong/zsxq_archives) 【软件安全与知识星球】精华文章列表
+- [**52**Star][2m] [Py] [ezelf/f5_cookieleaks](https://github.com/ezelf/f5_cookieleaks) Decode the cookies set by balancer F5, and disclousure all pool ip
+- [**52**Star][6y] [Py] [enthought/python-2.7.3](https://github.com/enthought/python-2.7.3)
+- [**52**Star][10m] [Java] [empireproject/empiremobile](https://github.com/empireproject/empiremobile) Android and iOS source for the Empire mobile app
+- [**52**Star][2y] [Py] [disruptops/cred_scanner](https://github.com/disruptops/cred_scanner) A simple file-based scanner to look for potential AWS access and secret keys in files
+- [**52**Star][1m] [Py] [didierstevens/beta](https://github.com/didierstevens/beta) Beta versions of my software
+- [**52**Star][6y] [Ruby] [depthsecurity/dahua_dvr_auth_bypass](https://github.com/depthsecurity/dahua_dvr_auth_bypass) Dahua CCTV DVR Authentication Bypass Metasploit Scanning Module
+- [**52**Star][2y] [C] [dennypage/dpinger](https://github.com/dennypage/dpinger) dpinger:持续性监控网络延迟和数据包丢失
+- [**52**Star][2m] [Py] [dedsecinside/awesome-scripts](https://github.com/dedsecinside/awesome-scripts) A collection of awesome scripts from developers around the globe.
+- [**52**Star][8y] [Py] [crossbowerbt/gdb-python-utils](https://github.com/crossbowerbt/gdb-python-utils) A library for GDB (with python support), that adds useful functions to the standard 'gdb' library.
+- [**52**Star][8d] [Py] [crond-jaist/cytrone](https://github.com/crond-jaist/cytrone) CyTrONE: Integrated Cybersecurity Training Framework
+- [**52**Star][2y] [C] [cn33liz/hsevd-stackoverflowx64](https://github.com/cn33liz/hsevd-stackoverflowx64) HackSys Extreme Vulnerable Driver - Windows 10 x64 StackOverflow Exploit with SMEP Bypass
+- [**52**Star][2y] [Go] [cmars/ormesh](https://github.com/cmars/ormesh) onion-routed mesh
+- [**52**Star][1y] [Py] [cisco-talos/pylocky_decryptor](https://github.com/cisco-talos/pylocky_decryptor)
+- [**52**Star][3y] [Lua] [christophetd/nmap-nse-info](https://github.com/christophetd/nmap-nse-info) nmap-nse-info:浏览、搜索Nmap 的 NSE 脚本
+- [**52**Star][10m] [JS] [cat-team-mmc/lysec](https://github.com/cat-team-mmc/lysec) 一个基于docker的安全培训系统
+- [**52**Star][8m] [Elixir] [calidog/certstream-server](https://github.com/calidog/certstream-server) Certificate Transparency Log aggregation, parsing, and streaming service written in Elixir
+- [**52**Star][5y] [Py] [bwall/bamf](https://github.com/bwall/bamf) Botnet Analysis Modular Framework
+- [**52**Star][2y] [JS] [blockadeio/chrome_extension](https://github.com/blockadeio/chrome_extension) Browser extension that uses intelligence to combat malicious websites by blocking them in real-time.
+- [**52**Star][6m] [Py] [bkerler/oppo_decrypt](https://github.com/bkerler/oppo_decrypt) Oppo/Oneplus .ops Firmware decrypter
+- [**52**Star][1y] [C] [bazad/threadexec](https://github.com/bazad/threadexec) A library to execute code in the context of other processes on iOS 11.
+- [**52**Star][9m] [aungthurhahein/red-team-curation-list](https://github.com/aungthurhahein/red-team-curation-list) A list to discover work of red team tooling and methodology for penetration testing and security assessment
+- [**52**Star][11m] [PHP] [atmoner/nodecrypto](https://github.com/atmoner/nodecrypto) Ransomware written in NodeJs
+- [**52**Star][20d] [Py] [aress31/jwtcat](https://github.com/aress31/jwtcat) JSON Web Token (JWT) cracker.
+- [**52**Star][2y] [Py] [apkjet/trustlookwannacrytoolkit](https://github.com/apkjet/trustlookwannacrytoolkit) WannaCryToolkit scanner and removal toolkit
+- [**52**Star][3y] [annsec/awesome-cybersecurity](https://github.com/annsec/awesome-cybersecurity) Curated list of awesome cybersecurity companies and solutions.
+- [**52**Star][8y] [Py] [9b/pdfxray_public](https://github.com/9b/pdfxray_public) Public version of PDF X-RAY
+- [**52**Star][4y] [Py] [5alt/lianwifi](https://github.com/5alt/lianwifi) wifi万能钥匙api
+- [**52**Star][2y] [1522402210/blockchain-security-list](https://github.com/1522402210/blockchain-security-list) BlockChain-Security-List
+- [**52**Star][2y] [Py] [0xd34db33f/gfyp](https://github.com/0xd34db33f/gfyp) Unification of dnstwist + SQLite + Email reporting. Set it as a cron job that runs every hour, give it a list of domains and email addresses for reporting, then watch it go find stuff.
+- [**51**Star][3y] [hack-with-github/awesome-hacking-tools](https://github.com/hack-with-github/awesome-hacking-tools) A collection of various hacking and exploitation tools for hackers and pentesters.
+- [**51**Star][2m] [Shell] [ullaakut/awesome-macos-setup](https://github.com/ullaakut/awesome-macos-setup) A repository with tools to automatically make any Mac awesome in a few minutes
+- [**51**Star][2y] [Jupyter Notebook] [calebmadrigal/radio-hacking-scripts](https://github.com/calebmadrigal/radio-hacking-scripts) Scripts to aid in the manipulation of electromagnetic radiation (for use with gnu_radio and SDR).
+- [**51**Star][9m] [Py] [fireeye/adfspoof](https://github.com/fireeye/adfspoof) forge AD FS security tokens
+- [**51**Star][2y] [C] [shadowsocks/libsscrypto](https://github.com/shadowsocks/libsscrypto) Build libsscrypto.dll for shadowsocks-windows.
+- [**51**Star][2y] [HTML] [jgamblin/nmapnetworkinventorycontainer](https://github.com/jgamblin/nmapnetworkinventorycontainer) A Docker Container To Continually Scan Your Network And Display Findings Cleanly.
+- [**51**Star][2y] [mitmproxy/docker-releases](https://github.com/mitmproxy/docker-releases)
+- [**51**Star][26d] [C++] [rek7/ddoor](https://github.com/rek7/ddoor) DDoor - cross platform backdoor using dns txt records
+- [**51**Star][14d] [Py] [k8gege/k8portscan](https://github.com/k8gege/k8portscan) 跨平台大型网络端口扫描器(支持批量A段/B段/C段/IP列表(TXT)/端口列表,Banner识别比S扫描器加强版更准)
+- [**51**Star][20d] [C] [ixzzving/ssr-vpn](https://github.com/ixzzving/ssr-vpn) Shadowsocks & ShadowsocksR & V2Ray & V2RayNG & VNET/酸酸乳节点及客户端
+- [**51**Star][1y] [Py] [zhovner/airport-sniffer](https://github.com/zhovner/airport-sniffer) Very simple Wi-Fi sniffer and dumps parser for built-in macbook AirPort Extreme card. Only native MacOS tools used.
+- [**51**Star][8m] [C#] [fsecurelabs/sharpgpo-remoteaccesspolicies](https://github.com/FSecureLABS/SharpGPO-RemoteAccessPolicies) A C# tool for enumerating remote access policies through group policy.
+- [**51**Star][3y] [wh1t3p1g/struts2environment](https://github.com/wh1t3p1g/Struts2Environment) Struts2 历史版本的漏洞环境
+- [**51**Star][28d] [Java] [guardianproject/tor-android](https://github.com/guardianproject/tor-android) Tor binary and library for Android
+- [**51**Star][1y] [Py] [qax-a-team/redis_lua_exploit](https://github.com/QAX-A-Team/redis_lua_exploit)
+- [**51**Star][4d] [Py] [lich4/personal_script](https://github.com/lich4/personal_script) 010Editor/BurpSuite/Frida/IDA tools and scripts collection
+ - [010Editor](https://github.com/lich4/personal_script/tree/master/010Editor_Script) 010Editor scripts
+ - [ParamChecker](https://github.com/lich4/personal_script/tree/master/BurpSuite_Script) Burp插件
+ - [Frida](https://github.com/lich4/personal_script/tree/master/Frida_script) Frida Scripts
+ - [IDA](https://github.com/lich4/personal_script/tree/master/IDA_Script) IDA Scripts
+ - [IDA-read_unicode.py](https://github.com/lich4/personal_script/blob/master/IDA_Script/read_unicode.py) When there is chinese unicode character in programe, due to python's shortage, ida could not recongnized them correctly, it's what my script just do
+ - [IDA-add_xref_for_macho](https://github.com/lich4/personal_script/blob/master/IDA_Script/add_xref_for_macho.py) When you deal with macho file with ida, you'll find out that it's not easy to find Objc-Class member function's caller and callee, (because it use msgSend instead of direct calling convention), so we need to make some connection between the selector names and member function pointers, it's what my script just do
+ - [IDA-add_info_for_androidgdb](https://github.com/lich4/personal_script/blob/master/IDA_Script/add_info_for_androidgdb.py) When you debug android with IDA and gdbserver, you'd find that the module list and segment is empy, while we can read info from /proc/[pid]/,
+ - [IDA-trace_instruction](https://github.com/lich4/personal_script/blob/master/IDA_Script/trace_instruction.py) this script is to trace instruction stream in one run
+ - [IDA-detect_ollvm](https://github.com/lich4/personal_script/blob/master/IDA_Script/detect_ollvm.py) this script is to detect ollvm and fix it in some extent, apply to android and ios
+ - [IDA-add_block_for_macho](https://github.com/lich4/personal_script/blob/master/IDA_Script/add_block_for_macho.py) this script is used to analysis block structure exist in macho file, target NSConcreteStackBlock/NSConcreteGlobalBlock currently, also contain some wonderful skills
+- [**51**Star][5m] [C#] [zodiacon/gflagsx](https://github.com/zodiacon/gflagsx) Enhanced version of the GFlags tool
+- [**51**Star][4y] [Py] [znb/malware](https://github.com/znb/malware) Malware related code
+- [**51**Star][2m] [C#] [zeropointsecurity/goldenticket](https://github.com/zeropointsecurity/goldenticket)
+- [**51**Star][10d] [yassergersy/cazador_unr](https://github.com/yassergersy/cazador_unr) Simple Hacking tools
+- [**51**Star][2m] [Py] [vrtadmin/first-plugin-ida](https://github.com/vrtadmin/first-plugin-ida) Function Identification and Recovery Signature Tool
+- [**51**Star][1y] [C++] [tomladder/winlib](https://github.com/tomladder/winlib) Windows Manipulation Library (x64, User/Kernelmode)
+- [**51**Star][2y] [Go] [threatstack/deputize](https://github.com/threatstack/deputize) Manage an on-call LDAP group based on PagerDuty on-call status
+- [**51**Star][14d] [Py] [thez3ro/gogsownz](https://github.com/thez3ro/gogsownz) Gogs CVEs
+- [**51**Star][2y] [Py] [tgianko/deemon](https://github.com/tgianko/deemon) Deemon is a tool to detect CSRF in web applications. Deemon has been used for the paper "Deemon: Detecting CSRF with Dynamic Analysis and Property Graphs" by G. Pellegrino, M. Johns, S. Koch, M. Backes, and C. Rossow.
+- [**51**Star][1y] [Py] [sysopfb/malware_scripts](https://github.com/sysopfb/malware_scripts) Various scripts for different malware families
+- [**51**Star][3y] [C] [sycloversecurity/ctf](https://github.com/sycloversecurity/ctf) Syclover(三叶草安全小组)承办的ctf比赛集合
+- [**51**Star][24d] [Java] [stevespringett/threatmodel-sdk](https://github.com/stevespringett/threatmodel-sdk) A Java library for parsing and programmatically using threat models
+- [**51**Star][3d] [Rust] [sorz/moproxy](https://github.com/sorz/moproxy) A transparent TCP to SOCKSv5/HTTP proxy on Linux written in Rust.
+- [**51**Star][8y] [C] [snare/kernelresolver](https://github.com/snare/kernelresolver) Example Mac OS X kernel extension that resolves symbols from the running kernel image
+- [**51**Star][2m] [C#] [smourier/tracespy](https://github.com/smourier/tracespy) TraceSpy is a pure .NET, 100% free and open source, alternative to the very popular SysInternals DebugView tool.
+- [**51**Star][2y] [Java] [shengqi158/jackson-databind-rce-poc](https://github.com/shengqi158/jackson-databind-rce-poc)
+- [**51**Star][4y] [Py] [sensepost/wifi-rifle](https://github.com/sensepost/wifi-rifle) Creating a wireless rifle de-authentication gun, which utilized a yagi antenna and a Raspberry Pi.
+- [**51**Star][3m] [Java] [sensepost/apostille](https://github.com/sensepost/apostille)
+- [**51**Star][1m] [JS] [segmentio/metalsmith-markdown](https://github.com/segmentio/metalsmith-markdown) A Metalsmith plugin to convert markdown files.
+- [**51**Star][3y] [C] [sciencemanx/ftrace](https://github.com/sciencemanx/ftrace) trace local function calls like strace and ltrace
+- [**51**Star][2y] [Py] [romankh/gsm-assessment-toolkit](https://github.com/romankh/gsm-assessment-toolkit) GSM Assessment Toolkit - A security evaluation framework for GSM networks
+- [**51**Star][2y] [Py] [rolfrolles/finspyvm](https://github.com/rolfrolles/finspyvm) Static unpacker for FinSpy VM
+- [**51**Star][2y] [riscure/rhme-2017](https://github.com/riscure/rhme-2017) Riscure Hack Me embedded hardware CTF 2017-2018.
+- [**51**Star][3y] [Py] [red-team-labs/waldo](https://github.com/red-team-labs/waldo)
+- [**51**Star][2y] [Shell] [r1b/cve-2017-13089](https://github.com/r1b/cve-2017-13089) PoC for wget v1.19.1
+- [**51**Star][5m] [JS] [qtgate/conet](https://github.com/qtgate/conet) Become a trustworthy ally for the Internet Freedom
+- [**51**Star][3y] [HTML] [pwnsdx/ios-uri-schemes-abuse-poc](https://github.com/pwnsdx/ios-uri-schemes-abuse-poc) A set of URI schemes bugs that lead Safari to crash/freeze.
+- [**51**Star][1y] [C] [pwn20wndstuff/osiris](https://github.com/pwn20wndstuff/osiris) Osiris developer jailbreak for iOS 11.0 - 11.4b3
+- [**51**Star][2m] [Ruby] [puppetlabs/puppetlabs-puppetdb](https://github.com/puppetlabs/puppetlabs-puppetdb) A puppet module for installing and managing puppetdb
+- [**51**Star][7d] [Perl] [pepelux/sippts](https://github.com/pepelux/sippts) Set of tools to audit SIP based VoIP Systems
+- [**51**Star][1y] [Py] [pentestpartners/mykali](https://github.com/pentestpartners/mykali) Linux setup tool for Kali Linux
+- [**51**Star][2y] [p292/ddeautocs](https://github.com/p292/ddeautocs) A cobaltstrike script that integrates DDEAuto Attacks
+- [**51**Star][7y] [C#] [owasp/webgoat.net](https://github.com/owasp/webgoat.net) OWASP WebGoat.NET
+- [**51**Star][5m] [PHP] [owasp/vulnerable-web-application](https://github.com/owasp/vulnerable-web-application) OWASP Vulnerable Web Application Project
+- [**51**Star][1y] [Py] [osuseclab/sgxpectre](https://github.com/osuseclab/sgxpectre)
+- [**51**Star][4y] [C] [osbock/baldwisdom](https://github.com/osbock/baldwisdom) Kevin's hacking projects code
+- [**51**Star][2y] [Py] [orweis/winpcapy](https://github.com/orweis/winpcapy) A Modern Python wrapper for WinPcap
+- [**51**Star][8m] [offensive-security/nethunter-utils](https://github.com/offensive-security/nethunter-utils) Kali Linux NetHunter utils package
+- [**51**Star][4y] [Py] [nottinghamprisateam/pyersinia](https://github.com/nottinghamprisateam/pyersinia) Herramienta escrita en Python y utilizando la librería Scapy basada en Yersinia para la implementación de ataques de capa de enlace de datos
+- [**51**Star][1y] [Java] [netspi/burpextractor](https://github.com/netspi/burpextractor) A Burp extension for generic extraction and reuse of data within HTTP requests and responses.
+- [**51**Star][2y] [C] [nccgroup/ncloader](https://github.com/nccgroup/ncloader) A session-0 capable dll injection utility
+- [**51**Star][1y] [Go] [mrexodia/haxxmap](https://github.com/mrexodia/haxxmap) Some simple go tools to perform a Man-in-the-middle (MITM) attack on your IMAP server in case you forgot your password.
+- [**51**Star][3m] [CSS] [mobsf/capfuzz](https://github.com/mobsf/capfuzz) CapFuzz - capture, fuzz & intercept web traffic.
+- [**51**Star][2y] [Py] [metalnas/loubia](https://github.com/metalnas/loubia) Python script to exploit java unserialize on t3 (Weblogic)
+- [**51**Star][2y] [C#] [lordgreggreg/skype-log-viewer](https://github.com/lordgreggreg/skype-log-viewer) Download and View Skype History Without Skype
+- [**51**Star][4y] [Py] [lokifer/blindelephant](https://github.com/lokifer/blindelephant) Getting BlindElephant into a working state, and updating the plugin files
+- [**51**Star][7m] [C++] [lemire/testingrng](https://github.com/lemire/testingrng) Testing common random-number generators (RNG)
+- [**51**Star][3y] [Py] [kovige/netscan](https://github.com/kovige/netscan) 配合reGeorg使用的内网扫描工具
+- [**51**Star][6y] [C++] [jyang772/xor_crypter](https://github.com/jyang772/xor_crypter) XOR encryption, malware crypter
+- [**51**Star][3y] [C] [jianqiangzhao/cve-2016-2434](https://github.com/jianqiangzhao/cve-2016-2434)
+- [**51**Star][2y] [HTML] [jgamblin/nmaptable](https://github.com/jgamblin/nmaptable) nmaptable:将 Nmap 扫描结果转变为 D3.js HTML 表格
+- [**51**Star][1y] [Py] [jay-johnson/train-ai-with-django-swagger-jwt](https://github.com/jay-johnson/train-ai-with-django-swagger-jwt) Train AI (Keras + Tensorflow) to defend apps with Django REST Framework + Celery + Swagger + JWT - deploys to Kubernetes and OpenShift Container Platform
+- [**51**Star][1m] [intelstormteam/papers](https://github.com/intelstormteam/papers) Papers written (and released) by the Team
+- [**51**Star][5y] [C++] [ikoz/androidsubstrate_hookingc_examples](https://github.com/ikoz/androidsubstrate_hookingc_examples) AndroidSubstrate_hookingC_examples
+- [**51**Star][3y] [Py] [huntcve/exploit](https://github.com/huntcve/exploit)
+- [**51**Star][2m] [TSQL] [horsicq/xntsv](https://github.com/horsicq/xntsv) XNTSV program for detailed viewing of system structures for Windows.
+- [**51**Star][5m] [hitripod/awesome-blockchain](https://github.com/hitripod/awesome-blockchain) Curated list of blockchain, Awesome Awesomeness
+- [**51**Star][2y] [Py] [hiddenillusion/nomorexor](https://github.com/hiddenillusion/nomorexor) Tool to help guess a files 256 byte XOR key by using frequency analysis
+- [**51**Star][2y] [harshilpatel007/hackinglabs](https://github.com/harshilpatel007/hackinglabs) A List Of Labs For People (Students) Who Want Learn OR Practice IT Security / Hacking / Penetration Testing In Ethical Way.
+- [**51**Star][1y] [hack-with-github/infosec-badges](https://github.com/hack-with-github/infosec-badges) Badges for your GitHub tool presented at InfoSec Conference
+- [**51**Star][7m] [Py] [hack-hut/crabstick](https://github.com/hack-hut/crabstick) Automatic remote/local file inclusion vulnerability analysis and exploit tool
+- [**51**Star][2y] [JS] [gnijuohz/awesome-developers](https://github.com/gnijuohz/awesome-developers) A list of awesome developers
+- [**51**Star][5y] [Py] [fuzzynop/fiveonceinyourlife](https://github.com/fuzzynop/fiveonceinyourlife) Local osx dialog box phishing using osascript. Easier than keylogging on osx. Simply ask for the passwords you want.
+- [**51**Star][3y] [JS] [firesuncn/my_ctf_challenges](https://github.com/firesuncn/my_ctf_challenges)
+- [**51**Star][7y] [JS] [firegpg/firegpg](https://github.com/firegpg/firegpg) FireGPG is no longer supported. Please see the README for information on WebPG.
+- [**51**Star][2y] [Java] [fergarrui/custom-bytecode-analyzer](https://github.com/fergarrui/custom-bytecode-analyzer) Java bytecode analyzer customizable via JSON rules
+- [**51**Star][11m] [Py] [elevenpaths/neto](https://github.com/elevenpaths/neto) Neto | A tool to analyse browser extensions
+- [**51**Star][5y] [C] [dgoulet/kjackal](https://github.com/dgoulet/kjackal) Linux Rootkit Scanner
+- [**51**Star][1y] [JS] [danigargu/urlfuzz](https://github.com/danigargu/urlfuzz) Another web fuzzer written in NodeJS
+- [**51**Star][30d] [Py] [d-rickyy-b/pastepwn](https://github.com/d-rickyy-b/pastepwn) Python framework to scrape Pastebin pastes and analyze them
+- [**51**Star][1y] [Py] [cytopia/crawlpy](https://github.com/cytopia/crawlpy) Scrapy python crawler/spider with post/get login (handles CSRF), variable level of recursions and optionally save to disk
+- [**51**Star][2y] [Py] [cseagle/ida_clemency](https://github.com/cseagle/ida_clemency) IDA cLEMENCy Tools
+ - [clemency_ldr](https://github.com/cseagle/ida_clemency/blob/master/clemency_ldr.py) IDA loader module to create the basic memory layout and handle the loading of 9-bit, middle-endian, cLEMENCy executables.
+ - [clemency_proc](https://github.com/cseagle/ida_clemency/blob/master/clemency_proc.py) IDA processor module to handle disassembly and assembly tasks
+ - [clemency_dump](https://github.com/cseagle/ida_clemency/blob/master/clemency_dump.py) IDA plugin to allow for dumping modified database content back to a packed 9-bit, middle-endian file
+ - [clemency_fix](https://github.com/cseagle/ida_clemency/blob/master/clemency_fix.py) IDA plugin to assist with fixing up poorly disassembled functions that might branch/call into regions that continue to be marked as data blocks.
+- [**51**Star][3y] [Visual Basic .NET] [cn33liz/macrometer](https://github.com/cn33liz/macrometer) VBA Reversed TCP Meterpreter Stager
+- [**51**Star][11m] [Py] [cisco-talos/dyndataresolver](https://github.com/cisco-talos/dyndataresolver) Dynamic Data Resolver (DDR) IDA Pro Plug-in
+ - [DDR](https://github.com/cisco-talos/dyndataresolver/blob/master/VS_project/ddr/ddr.sln) 基于DyRIO的Client
+ - [IDA插件](https://github.com/cisco-talos/dyndataresolver/tree/master/IDAplugin)
+- [**51**Star][2y] [Py] [cisco-talos/dotnet_windbg](https://github.com/cisco-talos/dotnet_windbg)
+- [**51**Star][7y] [Py] [chrisjohnriley/scythe](https://github.com/chrisjohnriley/scythe) scythe: account enumerator
+- [**51**Star][4m] [PS] [chrisad/wiki-dictionary-creator](https://github.com/chrisad/wiki-dictionary-creator) Creates dictionaries based on Wikipedia titles
+- [**51**Star][1y] [Py] [carnal0wnage/pentesty_scripts](https://github.com/carnal0wnage/pentesty_scripts) scripts for pentesting
+- [**51**Star][7d] [C] [buffer/libemu](https://github.com/buffer/libemu)
+- [**51**Star][1y] [PS] [bromiley/olaf](https://github.com/bromiley/olaf) Office365 Log Analysis Framework
+- [**51**Star][1m] [Makefile] [blacktop/docker-ghidra](https://github.com/blacktop/docker-ghidra) Ghidra Client/Server Docker Image
+- [**51**Star][3m] [Py] [bkerler/mr](https://github.com/bkerler/mr) Mobile Revelator
+- [**51**Star][1y] [HTML] [beep3r/poc-exp](https://github.com/beep3r/poc-exp)
+- [**51**Star][5m] [Py] [bambish/scanqli](https://github.com/bambish/scanqli) SQLi scanner to detect SQL vulns
+- [**51**Star][2m] [Py] [azure-samples/python-docs-hello-world](https://github.com/azure-samples/python-docs-hello-world) A simple python application for docs
+- [**51**Star][2y] [Py] [awnumar/blind-sql-bitshifting](https://github.com/awnumar/blind-sql-bitshifting) A blind SQL injection module that uses bitshfting to calculate characters.
+- [**51**Star][2d] [Py] [angr/tracer](https://github.com/angr/tracer) Utilities for generating dynamic traces
+- [**51**Star][11m] [C] [anestisb/radamsa-android](https://github.com/anestisb/radamsa-android) An Android port of radamsa fuzzer
+- [**51**Star][1y] [HTML] [an0nud4y/blackeye](https://github.com/an0nud4y/blackeye) The ultimate phishing tool with 38 websites available!
+- [**51**Star][2y] [Shell] [alephsecurity/initroot](https://github.com/alephsecurity/initroot) Motorola Untethered Jailbreak: Exploiting CVE-2016-10277 for Secure Boot and Device Locking bypass
+- [**51**Star][8m] [aldelaro5/ghidra-gekko-broadway-lang](https://github.com/aldelaro5/ghidra-gekko-broadway-lang) Ghidra language definition for the Gekko and Broadway CPU variant used in the Nintendo GameCube and Nintendo Wii respectively
+- [**51**Star][28d] [Py] [ahmia/ahmia-crawler](https://github.com/ahmia/ahmia-crawler) Collection of crawlers used by the ahmia search engine
+- [**51**Star][6d] [Py] [afagarap/gru-svm](https://github.com/afagarap/gru-svm) [ICMLC 2018] A Neural Network Architecture Combining Gated Recurrent Unit (GRU) and Support Vector Machine (SVM) for Intrusion Detection
+- [**51**Star][6y] [Py] [aeondave/tilt](https://github.com/aeondave/tilt) Terminal Ip Lookup Tool
+- [**51**Star][1y] [C] [adrianyy/keinject](https://github.com/adrianyy/keinject) Kernel LdrLoadDll injector
+- [**51**Star][11m] [c] [NtQuery/scyllahide](https://bitbucket.org/ntquery/scyllahide)
+- [**50**Star][4y] [danielmiessler/securitytools](https://github.com/danielmiessler/securitytools) A repo for collecting and organizing security tools of various types. As new ones come out, they get added to the list.
+- [**50**Star][23d] [Py] [frida/frida-tools](https://github.com/frida/frida-tools) Frida CLI tools
+- [**50**Star][4y] [Py] [wapiflapi/wsym](https://github.com/wapiflapi/wsym) Adds symbols to a ELF file.
+- [**50**Star][5y] [Py] [xiphosresearch/steelcon-python-injection](https://github.com/xiphosresearch/steelcon-python-injection) Python Process Injection PoC Code from my SteelCon talk in 2014
+- [**50**Star][16d] [Py] [circl/douglas-quaid](https://github.com/circl/douglas-quaid) Open source software for image correlation, distance and analysis
+- [**50**Star][23d] [h2hconference/2019](https://github.com/h2hconference/2019) H2HC 2019 Slides/Materials/Presentations
+- [**50**Star][2m] [Shell] [mwz1tn/free-v2ray](https://github.com/mwz1tn/free-v2ray) 免费v2ray分享,V2ray安装使用教程,墙裂的购买使用教程
+- [**50**Star][6m] [JS] [smallmi/omms](https://github.com/smallmi/omms) OMMS运维监控系统,功能介绍: 资产管理 应用管理 任务执行 权限管理等
+- [**50**Star][6d] [TS] [tjson/tjson.js](https://github.com/tjson/tjson.js) JavaScript-compatible implementation of Tagged JSON (TJSON), written in TypeScript.
+- [**50**Star][9m] [C] [lab313ru/smd_ida_tools](https://github.com/lab313ru/smd_ida_tools) Special IDA Pro tools for the Sega Genesis/Megadrive romhackers
+- [**50**Star][1y] [JS] [lukechilds/onionite](https://github.com/lukechilds/onionite) Explore the Tor network
+- [**50**Star][10m] [Shell] [cyb0r9/network-attacker](https://github.com/Cyb0r9/network-attacker) Programmed For Penetration Testing Beginners . This Program Based on Mdk3 . "WiFi Stress Testing Beacon Flooding & Deauthentication Attack "
+- [**50**Star][1y] [Py] [synacktiv-contrib/kernelcache-laundering](https://github.com/Synacktiv-contrib/kernelcache-laundering) load iOS12 kernelcaches and PAC code in IDA
+- [**50**Star][2y] [C#] [zodiacon/windbgx](https://github.com/zodiacon/windbgx) An attempt to create a friendly version of WinDbg
+- [**50**Star][3y] [Py] [zengqiu/study](https://github.com/zengqiu/study)
+- [**50**Star][2y] [C++] [zcgonvh/cve-2017-0213](https://github.com/zcgonvh/cve-2017-0213) CVE-2017-0213 for command line
+- [**50**Star][2y] [xssninja/alexa-hacker-mode](https://github.com/xssninja/alexa-hacker-mode) Node JS code for a set of Alexa voice skills designed to assist hackers and developers with common tasks
+- [**50**Star][3y] [C] [williamshowalter/hdroot-bootkit-analysis](https://github.com/williamshowalter/hdroot-bootkit-analysis) Supporting Files on my analysis of the malware designated hdroot.
+- [**50**Star][5m] [HTML] [whatwg/mimesniff](https://github.com/whatwg/mimesniff) MIME Sniffing Standard
+- [**50**Star][1y] [Go] [weppos/dnscaa](https://github.com/weppos/dnscaa)
+- [**50**Star][1y] [Py] [virtuesecurity/aws-extender-cli](https://github.com/virtuesecurity/aws-extender-cli) AWS Extender CLI is a command-line script to test S3 buckets as well as Google Storage buckets and Azure Storage containers for common misconfiguration issues using the boto/boto3 SDK library.
+- [**50**Star][3y] [C] [vikasnkumar/wisecracker](https://github.com/vikasnkumar/wisecracker) Wisecracker is a high performance distributed cryptanalysis framework.
+- [**50**Star][2y] [C] [vallejocc/poc-inject-data-wm_copydata](https://github.com/vallejocc/poc-inject-data-wm_copydata) A tiny PoC to inject and execute code into explorer.exe with WM_SETTEXT+WM_COPYDATA+SetThreadContext
+- [**50**Star][9d] [PHP] [tsug0d/myawesomewebchallenge](https://github.com/tsug0d/myawesomewebchallenge) Collection of my capture-the-flag web challenge in any levels
+- [**50**Star][3y] [Ruby] [tresacton/dspectrum](https://github.com/tresacton/dspectrum) Automated RF/SDR Signal Analysis [Reverse Engineering]
+- [**50**Star][2y] [Ruby] [thezdi/derbycon2017](https://github.com/thezdi/derbycon2017) DerbyCon 2017 Presentation VMware Escapology: How to Houdini the Hypervisor
+- [**50**Star][6y] [PHP] [taogogo/taocms](https://github.com/taogogo/taocms) taocms is a very very small CMS( Content Management System) ,base on php,support mysql/sqlite
+- [**50**Star][8m] [ObjC] [ssyzh/weworktweak](https://github.com/ssyzh/weworktweak) 逆向破解企业微信定位,在家就能打卡了!
+- [**50**Star][4y] [C++] [sri-csl/stegotorus](https://github.com/sri-csl/stegotorus) A Camouflage Proxy for the Tor Anonymity System
+- [**50**Star][9y] [Perl] [spiderlabs/thicknet](https://github.com/spiderlabs/thicknet) TCP session interception and injection framework
+- [**50**Star][10m] [sourcingdenis/free-online-competitive-intelligence](https://github.com/sourcingdenis/free-online-competitive-intelligence) #OSINT
+- [**50**Star][1y] [JS] [soluto/webdriverio-zap-proxy](https://github.com/soluto/webdriverio-zap-proxy) Demo - how to easily build security testing for Web App, using Zap and Glue
+- [**50**Star][3y] [ObjC] [skelsec/biterrant](https://github.com/skelsec/biterrant) BitErrant
+- [**50**Star][2y] [Py] [sfwishes/ollvm_de_fla](https://github.com/sfwishes/ollvm_de_fla) deobfuscation ollvm's fla
+- [**50**Star][9m] [Py] [scarvell/grandstream_exploits](https://github.com/scarvell/grandstream_exploits)
+- [**50**Star][11d] [Go] [sandertv/gophertunnel](https://github.com/sandertv/gophertunnel) A Minecraft (Bedrock Edition) library written in Go used for creating proxies, servers, clients and tools
+- [**50**Star][2y] [Py] [samuelcolvin/dnserver](https://github.com/samuelcolvin/dnserver) Simple development DNS server written in python
+- [**50**Star][3y] [C] [ryanmallon/thelostvikingstools](https://github.com/ryanmallon/thelostvikingstools) Reverse Engineered Tools/Library for the DOS game The Lost Vikings
+- [**50**Star][12m] [C] [realoriginal/reflective-rewrite](https://github.com/realoriginal/reflective-rewrite) Attempt to rewrite StephenFewers Reflective DLL Injection to make it a little more stealthy. Some code taken from Meterpreter & sRDI. Currently a work in progress.
+- [**50**Star][4d] [Py] [pylyf/networm](https://github.com/pylyf/networm) Python network worm that spreads on the local network and gives the attacker control of these machines.
+- [**50**Star][1y] [C++] [psychotropos/xhunter1_privesc](https://github.com/psychotropos/xhunter1_privesc) (Ab)using the XIGNCODE3 driver to open a handle to any process.
+- [**50**Star][5m] [C] [praneethkarnena/ddos-scripts](https://github.com/praneethkarnena/ddos-scripts) This repo consists of various DDoS scripts, collected from internet. Layer-4 and Layer-7 levels can be targeted using these scripts.
+- [**50**Star][1y] [JS] [platdrag/unblockablechains](https://github.com/platdrag/unblockablechains) Unblockable Chains - A POC on using blockchain as infrastructure for malware operations
+- [**50**Star][3m] [Shell] [piffall/pxesetupwizard](https://github.com/piffall/pxesetupwizard) PXE Setup Wizard. Netboot Debian, Ubuntu, System Rescue CD, FreeDOS and more.
+- [**50**Star][3d] [Java] [p1sec/sigfw](https://github.com/p1sec/sigfw) Open Source Signaling Firewall for SS7, Diameter filtering, antispoof and antisniff
+- [**50**Star][2y] [newlog/r2_malware_unpacking_training](https://github.com/newlog/r2_malware_unpacking_training) 使用 r2 脱壳恶意代码教程
+- [**50**Star][2y] [Py] [neargle/pil-rce-by-ghostbutt](https://github.com/neargle/pil-rce-by-ghostbutt) Exploiting Python PIL Module Command Execution Vulnerability
+- [**50**Star][9d] [Py] [nccgroup/asadbg](https://github.com/nccgroup/asadbg) asadbg is a framework of tools to aid in automating live debugging of Cisco ASA devices
+- [**50**Star][2y] [Py] [navytitanium/dnsmasterchef](https://github.com/navytitanium/dnsmasterchef) Selective DNS proxy forwarding based on DNS threat blocking providers intelligence.
+- [**50**Star][3y] [Py] [n0pe-sled/apache2-mod-rewrite-setup](https://github.com/n0pe-sled/apache2-mod-rewrite-setup) Quickly Implement Mod-Rewrite in your infastructure
+- [**50**Star][1m] [C++] [ms-iot/imx-iotcore](https://github.com/ms-iot/imx-iotcore) Windows 10 IoT Core BSP for NXP i.MX Processors
+- [**50**Star][3y] [Py] [matthewdunwoody/block-parser](https://github.com/matthewdunwoody/block-parser) Parser for Windows PowerShell script block logs
+- [**50**Star][4m] [JS] [mattcg/socks5-client](https://github.com/mattcg/socks5-client) SOCKS v5 client socket implementation in JavaScript for Node.JS.
+- [**50**Star][2y] [C] [leonnewton/selfmodify](https://github.com/leonnewton/selfmodify) Dalvik字节码自篡改原理及实现
+- [**50**Star][1y] [JS] [leocardoso94/push-notification-demo](https://github.com/leocardoso94/push-notification-demo) Demonstrate how to receive notifications using Firebase
+- [**50**Star][8m] [klaver/sysctl](https://github.com/klaver/sysctl) Linux/BSD kernel tuning and network security hardening optimizations, improving the performance of server systems via optimized sysctl tweaks
+- [**50**Star][5y] [PS] [kfosaaen/get-lapspasswords](https://github.com/kfosaaen/get-lapspasswords) Powershell function to pull the local admin passwords from LDAP, stored there by LAPS.
+- [**50**Star][2y] [C++] [k0keoyo/dark_composition_case_study_integer_overflow](https://github.com/k0keoyo/dark_composition_case_study_integer_overflow)
+- [**50**Star][4y] [Py] [jpyorre/intelligenthoneynet](https://github.com/jpyorre/intelligenthoneynet) The Intelligent Honey Net Project attempts to create actionable information from honeypots
+- [**50**Star][2y] [JS] [jpenalbae/rarop](https://github.com/jpenalbae/rarop) Graphical ROP chain builder using radare2 and r2pipe
+- [**50**Star][2y] [JS] [johnhhorton/node-nmap](https://github.com/johnhhorton/node-nmap) NPM package for interfacing with local NMAP installation
+- [**50**Star][3y] [Shell] [jgamblin/curluseragent](https://github.com/jgamblin/curluseragent) Curl Script To Change User Agent
+- [**50**Star][2y] [Shell] [jaybrown/dnscrypt-menu](https://github.com/jaybrown/dnscrypt-menu) Manage DNSCrypt from the macOS menu bar (BitBar plugin)
+- [**50**Star][2y] [Go] [jakewins/findbtc](https://github.com/jakewins/findbtc) findbtc: 在损坏、格式化或被覆盖写入的磁盘上查找比特币钱包
+- [**50**Star][2m] [Py] [importctf/instagram-hacker](https://github.com/importctf/instagram-hacker) This is an advanced script for Instagram bruteforce attacks. WARNING THIS IS A REAL TOOL!
+- [**50**Star][2y] [JS] [idan5x/switcheroo](https://github.com/idan5x/switcheroo) Exploiting CVE-2016-4657 to JailBreak the Nintendo Switch
+- [**50**Star][7m] [C] [hfiref0x/mpenum](https://github.com/hfiref0x/mpenum) Enumerate Windows Defender threat families and dump their names according category
+- [**50**Star][5m] [Smali] [hellohudi/androidreversenotes](https://github.com/hellohudi/androidreversenotes) Android逆向笔记---从入门到入土
+- [**50**Star][2y] [Py] [h2hconference/2017](https://github.com/h2hconference/2017) H2HC 2017 Slides/Materials/Presentations
+- [**50**Star][2y] [Py] [h0nus/backtome](https://github.com/h0nus/backtome) Little tool made in python to create payloads for Linux, Windows and OSX with unique handler
+- [**50**Star][8y] [Py] [gyim/stupidgit](https://github.com/gyim/stupidgit) A cross-platform git GUI with strong submodule support
+- [**50**Star][3m] [C#] [guillac/wsmanager](https://github.com/guillac/wsmanager) Webshell Manager
+- [**50**Star][2y] [PS] [gobiasinfosec/wireless_query](https://github.com/gobiasinfosec/wireless_query) Query Active Directory for Workstations and then pull their Wireless Network Passwords
+- [**50**Star][1y] [JS] [fortiguard-lion/frida-scripts](https://github.com/fortiguard-lion/frida-scripts)
+- [**50**Star][4y] [C++] [fishstiqz/poolinfo](https://github.com/fishstiqz/poolinfo) kernel pool windbg extension
+- [**50**Star][2y] [Visual Basic .NET] [fireeye/remote_lookup](https://github.com/fireeye/remote_lookup) Resolves DLL API entrypoints for a process w/ remote query capabilities.
+- [**50**Star][3m] [Haskell] [essandess/adblock2privoxy](https://github.com/essandess/adblock2privoxy) Convert adblock config files to privoxy format
+- [**50**Star][2y] [JS] [ericr/sol-function-profiler](https://github.com/ericr/sol-function-profiler) Solidity Contract Function Profiler
+- [**50**Star][3y] [PHP] [edent/tweeview](https://github.com/edent/tweeview) A Tree View For Tweets
+- [**50**Star][3y] [C++] [drizzlerisk/ntpdoser](https://github.com/drizzlerisk/ntpdoser) NTP Doser is a NTP Amplification DoS/DDoS attack tool for penttesting
+- [**50**Star][1y] [PS] [dgg-it/match-adhashes](https://github.com/dgg-it/match-adhashes) Builds a hashmap of AD NTLM hashes/usernames and iterates through a second list of hashes checking for the existence of each entry in the AD NTLM hashmap
+- [**50**Star][2y] [PHP] [daudmalik06/reconcat](https://github.com/daudmalik06/reconcat) A small Php application to fetch archive url snapshots from archive.org. using it you can fetch complete list of snapshot urls of any year or complete list of all years possible. Made Specially for penetration testing purpose.
+- [**50**Star][2y] [Py] [citp/thewebneverforgets](https://github.com/citp/thewebneverforgets) Public code release for The Web Never Forgets paper
+- [**50**Star][3y] [Py] [cisco-talos/smi_check](https://github.com/cisco-talos/smi_check) Smart Install Client Scanner
+- [**50**Star][2y] [Java] [channingbj/meerkat](https://github.com/channingbj/meerkat) meerkat 是用于服务监控以及服务降级基础组件,主要为了解决调用外部接口的时候进行成功率,响应时间,QPS指标的监控,同时在成功率下降到预设的阈值以下的时候自动切断外部接口的调用,外部接口成功率恢复后自动恢复请求
+- [**50**Star][25d] [HTML] [brampat/security](https://github.com/brampat/security) Collection of links to Security stuff
+- [**50**Star][2y] [bluscreenofjeff/metasploit-resource-scripts](https://github.com/bluscreenofjeff/metasploit-resource-scripts)
+- [**50**Star][4y] [C++] [bishopfox/untwister](https://github.com/bishopfox/untwister) Seed recovery tool for PRNGs
+- [**50**Star][3y] [Py] [ayoul3/cicspwn](https://github.com/ayoul3/cicspwn) CICSpwn is a tool to pentest a CICS Transaction servers on z/OS.
+- [**50**Star][3y] [Py] [aramosf/recoversqlite](https://github.com/aramosf/recoversqlite) recover deleted information from sqlite files.
+- [**50**Star][4m] [C++] [antscode/macwifi](https://github.com/antscode/macwifi) A wifi system menu extension for 68k Macs.
+- [**50**Star][1y] [Py] [anssi-fr/route_leaks](https://github.com/anssi-fr/route_leaks) BGP Route Leaks Detection
+- [**50**Star][7y] [C] [andy928/xpenology](https://github.com/andy928/xpenology) XPEnology Project
+- [**50**Star][1y] [Py] [alexknvl/fuzzball](https://github.com/alexknvl/fuzzball) Scala fuzzer
+- [**50**Star][2m] [C] [alainesp/hashsuitedroid](https://github.com/alainesp/hashsuitedroid) Hash Suite for Android
+- [**50**Star][2y] [Py] [adrianherrera/virustotal](https://github.com/adrianherrera/virustotal) A simple command-line script to interact with the virustotal-api
+- [**50**Star][11m] [C] [acoinfo/kidvpn](https://github.com/acoinfo/kidvpn) The world's smallest VPN server and client.
+- [**50**Star][7m] [C#] [9ee1/capstone.net](https://github.com/9ee1/capstone.net) .NET Core and .NET Framework binding for the Capstone Disassembly Framework
+- [**50**Star][2y] [0xhjk/caidao](https://github.com/0xhjk/caidao) 中国菜刀及其衍生版本的Webshell管理工具收集
+- [**50**Star][7y] [Py] [0xd012/wifuzzit](https://github.com/0xd012/wifuzzit) a 802.11 wireless fuzzer
+- [**49**Star][2y] [C] [xueeinstein/darknet-vis](https://github.com/xueeinstein/darknet-vis) Visualize YOLO feature map in prediction for easily checking your model performance
+- [**49**Star][3y] [Assembly] [t00sh/assembly](https://github.com/t00sh/assembly) Collection of Linux shellcodes
+- [**49**Star][7m] [Py] [secgroundzero/tetanus](https://github.com/secgroundzero/tetanus) Helper script for mangling CS payloads
+- [**49**Star][4m] [Makefile] [shadowsocks/openwrt-feeds](https://github.com/shadowsocks/openwrt-feeds) OpenWrt/LEDE feeds
+- [**49**Star][2y] [HTML] [qinyuhang/network-knowledge](https://github.com/qinyuhang/network-knowledge) 前端必备网络基础知识
+- [**49**Star][6m] [C++] [0x00-0x00/cve-2019-0841-bypass](https://github.com/0x00-0x00/cve-2019-0841-bypass) A fully automatic CVE-2019-0841 bypass targeting all versions of Edge in Windows 10.
+- [**49**Star][4m] [Py] [skelsec/responder3](https://github.com/skelsec/responder3) Responder for Python3
+- [**49**Star][1m] [Dockerfile] [winterssy/ssr-docker](https://github.com/winterssy/ssr-docker) 使用Docker部署ShadowsocksR服务端
+- [**49**Star][2y] [Py] [fpfeng/g2w.online](https://github.com/fpfeng/g2w.online) 域名已被DNS污染,水表已拆
+- [**49**Star][2y] [C] [cnlohr/wifirxpower](https://github.com/cnlohr/wifirxpower) Linux-based WiFi RX Power Grapher
+- [**49**Star][3m] [Py] [makuga01/dnsfookup](https://github.com/makuga01/dnsfookup) DNS rebinding toolkit
+- [**49**Star][1m] [Java] [portswigger/stepper](https://github.com/portswigger/stepper) A natural evolution of Burp Suite's Repeater tool
+- [**49**Star][29d] [PS] [s3cur3th1ssh1t/creds](https://github.com/S3cur3Th1sSh1t/Creds) Some usefull Scripts and Executables for Pentest & Forensics
+- [**49**Star][2y] [Ruby] [mrbrutti/cartero](https://github.com/mrbrutti/Cartero) Mailing Phishing Framework - This Branch is UNSTABLE :: Official STABLE master branch at
+- [**49**Star][1y] [Perl] [bigsen/crack-file](https://github.com/bigsen/Crack-file) Theos File
+- [**49**Star][1y] [Go] [zredshift/mimemagic](https://github.com/zredshift/mimemagic) Powerful and versatile MIME sniffing package using pre-compiled glob patterns, magic number signatures, XML document namespaces, and tree magic for mounted volumes, generated from the XDG shared-mime-info database.
+- [**49**Star][4y] [PS] [xme/powershell_scripts](https://github.com/xme/powershell_scripts) Miscellaneous PowerShell scripts
+- [**49**Star][23d] [Shell] [xhorak/firefox-devedition-flatpak](https://github.com/xhorak/firefox-devedition-flatpak) Flatpak manifest and patches to build Firefox
+- [**49**Star][11d] [JS] [whichbrowser/parser-javascript](https://github.com/whichbrowser/parser-javascript) Browser sniffing gone too far — A useragent parser library for JavaScript
+- [**49**Star][1y] [Py] [undeadsec/herakeylogger](https://github.com/undeadsec/herakeylogger) Chrome Keylogger Extension | Post Exploitation Tool
+- [**49**Star][4y] [C++] [uitra/injectora](https://github.com/uitra/injectora) x86/x64 manual mapping injector using the JUCE library
+- [**49**Star][26d] [Py] [trailofbits/ctf-challenges](https://github.com/trailofbits/ctf-challenges) CTF Challenges
+- [**49**Star][2m] [Py] [tna0y/python-random-module-cracker](https://github.com/tna0y/python-random-module-cracker) Predict python's random module generated values.
+- [**49**Star][10m] [timip/osee](https://github.com/timip/osee) OSEE Preparation
+- [**49**Star][2y] [Py] [thelsa/awbruter](https://github.com/thelsa/awbruter) 千倍速一句话木马密码爆破工具
+- [**49**Star][2y] [java] [toufikairane/andromalware](https://github.com/tfairane/andromalware) Android Malware for educational purpose
+- [**49**Star][5y] [Perl] [tanjiti/waftest](https://github.com/tanjiti/waftest) WAF测试工具
+- [**49**Star][2y] [Py] [steinsgatep001/binary](https://github.com/steinsgatep001/binary) Sleep_Pwn_f1sh
+- [**49**Star][5m] [Jupyter Notebook] [sroberts/jager](https://github.com/sroberts/jager) Hunting IOCs all day every day...
+- [**49**Star][2y] [JS] [sola-da/redos-vulnerabilities](https://github.com/sola-da/redos-vulnerabilities) A list of ReDoS vulnerabilities in npm modules found by the Software Lab at TU Darmstadt. For each vulnerability, there is a proof-of-concept exploit, showing how the slowdown may occur. The resources in this repository are provided for research purpose only. Please read below for more details.
+- [**49**Star][27d] [JS] [silverwind/default-gateway](https://github.com/silverwind/default-gateway) Get the default network gateway, cross-platform.
+- [**49**Star][4y] [Py] [silentsignal/duncan](https://github.com/silentsignal/duncan) Duncan - Blind SQL injector skeleton
+- [**49**Star][1y] [Swift] [sherlouk/swiftprovisioningprofile](https://github.com/sherlouk/swiftprovisioningprofile) Parse iOS mobile provisioning files into Swift models
+- [**49**Star][2y] [JS] [secureskytechnology/badlibrary](https://github.com/secureskytechnology/badlibrary) vulnerable web application for training
+- [**49**Star][3y] [Py] [secrary/ellascanner](https://github.com/secrary/ellascanner) Passive web scanner [This project is not maintained anymore]
+- [**49**Star][8m] [Shell] [screetsec/imr0t](https://github.com/screetsec/imr0t) imR0T: Send a quick message with simple text encryption to your whatsapp contact and protect your text by encrypting and decrypting, basically in ROT13 with new multi encryption based algorithm on ASCII and Symbols Substitution
+- [**49**Star][7m] [Shell] [scipag/nac_bypass](https://github.com/scipag/nac_bypass) Script collection to bypass Network Access Control (NAC, 802.1x)
+- [**49**Star][9y] [C] [s7ephen/sandkit](https://github.com/s7ephen/sandkit) A Toolkit to assist with the investigation of Sandboxing software
+- [**49**Star][30d] [Java] [rub-nds/tls-scanner](https://github.com/rub-nds/tls-scanner) The TLS-Scanner Module from TLS-Attacker
+- [**49**Star][3y] [C++] [rolisoft/host-scanner](https://github.com/rolisoft/host-scanner) Active/passive network scanner and autonomous vulnerability assessment application.
+- [**49**Star][5y] [Java] [retme7/broadanywhere_poc_by_retme_bug_17356824](https://github.com/retme7/broadanywhere_poc_by_retme_bug_17356824) a poc of Android bug 17356824
+- [**49**Star][4y] [C] [relys/3ds_multi_decryptor](https://github.com/relys/3ds_multi_decryptor)
+- [**49**Star][4y] [Java] [rapid7/metasploit-javapayload](https://github.com/rapid7/metasploit-javapayload) THIS REPO IS OBSOLETE. USE
+- [**49**Star][2d] [C] [rahra/onioncat](https://github.com/rahra/onioncat) Official repository of OnionCat, the VPN adapter for Tor and I2P.
+- [**49**Star][10m] [proofofcalc/cve-2019-6453-poc](https://github.com/proofofcalc/cve-2019-6453-poc) Proof of calc for CVE-2019-6453
+- [**49**Star][2y] [Py] [prncc/steam-scraper](https://github.com/prncc/steam-scraper) A pair of spiders for scraping product data and reviews from Steam.
+- [**49**Star][4m] [C] [pinkp4nther/sutekh](https://github.com/pinkp4nther/sutekh) An example rootkit that gives a userland process root permissions
+- [**49**Star][2y] [C++] [osrdrivers/kmexts](https://github.com/osrdrivers/kmexts) Simple driver to register all available process, thread, image, Registry, and Object callbacks
+- [**49**Star][1y] [opensourcepentest/tools](https://github.com/opensourcepentest/tools) Tools used for Penetration testing / Red Teaming
+- [**49**Star][1y] [C] [niklasb/elgoog](https://github.com/niklasb/elgoog) elgoog/searchme challenge from 34C3 CTF / WCTF 2018: sources & exploit
+- [**49**Star][3y] [Java] [necst/heldroid](https://github.com/necst/heldroid) Dissect Android Apps Looking for Ransomware Functionalities
+- [**49**Star][6y] [CSS] [mubix/whitechapel](https://github.com/mubix/whitechapel) password cracking front end
+- [**49**Star][8m] [Shell] [mthbernardes/lfi-enum](https://github.com/mthbernardes/lfi-enum) Scripts to execute enumeration via LFI
+- [**49**Star][3y] [mrvaughan/defcon2016gsmdata](https://github.com/mrvaughan/defcon2016gsmdata) Just a place to dump the cdma data I collected while at Defcon 2016
+- [**49**Star][2y] [Py] [mrschyte/socksmon](https://github.com/mrschyte/socksmon) socksmon:使用 BURP 或 ZAP 的 TCP 拦截代理
+- [**49**Star][1y] [Perl] [mrash/fwsnort](https://github.com/mrash/fwsnort) Application Layer IDS/IPS with iptables
+- [**49**Star][1y] [PS] [mmotti/mmotti-host-file](https://github.com/mmotti/mmotti-host-file) Heavily optimised, wildcard enabled host file for use with Samsung Knox Firewall.
+- [**49**Star][5y] [Py] [michael-yip/threattracker](https://github.com/michael-yip/threattracker) 监控由一组自定义谷歌搜索引擎索引的IoC,并生成告警
+- [**49**Star][3m] [Ruby] [mcpa-stlouis/hack-the-arch](https://github.com/mcpa-stlouis/hack-the-arch) Welcome to HackTheArch! A free open source scoring server for cyber Capture the Flag competitions!
+- [**49**Star][3y] [maldevel/rootkits-list-download](https://github.com/maldevel/rootkits-list-download) A curated list of rootkits found on Github and other sites.
+- [**49**Star][3y] [Ruby] [luizluca/bridge](https://github.com/luizluca/bridge) brigde is a dynamic port forwarder over HTTP (with HTTP PROXY support)
+- [**49**Star][27d] [Java] [llvm-but-worse/maple-ir](https://github.com/llvm-but-worse/maple-ir) Industrial IR-based static analysis framework for Java bytecode
+- [**49**Star][2y] [Py] [juga0/dhcpcanon](https://github.com/juga0/dhcpcanon) DHCP client disclosing less identifying information.
+- [**49**Star][2m] [jcesarstef/ghhdb-github-hacking-database](https://github.com/jcesarstef/ghhdb-github-hacking-database) Github Hacking Database - My personal collection of Github Dorks to search for Confidential Information (Yes, it's a Github version of Google Dorks)
+- [**49**Star][6y] [Py] [isecpartners/rtspfuzzer](https://github.com/isecpartners/rtspfuzzer) RTSP network protocol fuzzer
+- [**49**Star][10m] [Py] [hrkfdn/deckard](https://github.com/hrkfdn/deckard) Deckard performs static and dynamic binary analysis on Android APKs to extract Xposed hooks
+- [**49**Star][2y] [JS] [freddyb/html2dom](https://github.com/freddyb/html2dom) generates JavaScript source code to create Elements from a given html string
+- [**49**Star][6y] [C++] [frankstain/pe-loader](https://github.com/frankstain/pe-loader) library, which help to describe or load and execute PE files.
+- [**49**Star][2m] [PHP] [fastly/wordpress-plugin](https://github.com/fastly/wordpress-plugin) The Official Fastly WordPress Plugin
+- [**49**Star][3y] [Java] [fabiomsr/okhttp-peer-certificate-extractor](https://github.com/fabiomsr/okhttp-peer-certificate-extractor) This tool extracts peer certificates from given certificates.
+- [**49**Star][3y] [C++] [enigma0x3/messagebox](https://github.com/enigma0x3/messagebox) PoC dlls for Task Scheduler COM Hijacking
+- [**49**Star][3y] [PS] [enclaveconsulting/crypto-pki](https://github.com/enclaveconsulting/crypto-pki) Scripts related to Windows cryptography and PKI.
+- [**49**Star][11m] [ember-cli/rfcs](https://github.com/ember-cli/rfcs) Archive of RFCs for changes to ember-cli (for current RFC repo see
+- [**49**Star][3y] [CSS] [dxa4481/whatsinmyredis](https://github.com/dxa4481/whatsinmyredis) A CSRF demonstration of stealing local Redis data, and encrypting all Redis instances on a local network
+- [**49**Star][2y] [PS] [dstaulcu/ta-sigma-searches](https://github.com/dstaulcu/ta-sigma-searches) A Splunk app with saved reports derived from Sigma rules
+- [**49**Star][3y] [Py] [dfirfpi/dpapilab](https://github.com/dfirfpi/dpapilab) Windows DPAPI laboratory
+- [**49**Star][7m] [Ruby] [dev-sec/chef-nginx-hardening](https://github.com/dev-sec/chef-nginx-hardening) This chef cookbook provides secure nginx configurations.
+- [**49**Star][6y] [Py] [debasishm89/iofuzz](https://github.com/debasishm89/iofuzz) A mutation based user mode (ring3) dumb in-memory Windows Kernel (IOCTL) Fuzzer/Logger. This script attach it self to any given process and hooks DeviceIoControl!Kernel32 API and try to log or fuzz all I/O Control code I/O Buffer pointer, I/O buffer length that process sends to any Kernel driver.
+- [**49**Star][14d] [C] [danielkrupinski/vac](https://github.com/danielkrupinski/vac) Source code of Valve Anti-Cheat obtained from disassembly of compiled modules
+- [**49**Star][2y] [C] [coolervoid/firefox_tunnel](https://github.com/coolervoid/firefox_tunnel) The way to use firefox to make a tunnel to remote communication, bypass any firewall
+- [**49**Star][5d] [CSS] [command-tab/awesome-n64-development](https://github.com/command-tab/awesome-n64-development) A curated list of Nintendo 64 development resources including toolchains, documentation, emulators, and more
+- [**49**Star][3d] [Batchfile] [chef-koch/chromium-hardening](https://github.com/chef-koch/chromium-hardening) Hardens Chrome & Chromium based Browsers
+- [**49**Star][2d] [Go] [c-sto/gosecretsdump](https://github.com/c-sto/gosecretsdump)
+- [**49**Star][25d] [Py] [bolunwang/backdoor](https://github.com/bolunwang/backdoor) Code implementation of the paper "Neural Cleanse: Identifying and Mitigating Backdoor Attacks in Neural Networks", at IEEE Security and Privacy 2019.
+- [**49**Star][1y] [Java] [blackhacker511/blackrat](https://github.com/blackhacker511/blackrat) BlackRAT - Java Based Remote Administrator Tool
+- [**49**Star][2y] [PHP] [auraphp/aura.payload](https://github.com/auraphp/aura.payload) A Domain Payload implementation.
+- [**49**Star][3y] [Py] [attify/attify-zigbee-framework](https://github.com/attify/attify-zigbee-framework) GUI Framework on top of Killerbee
+- [**49**Star][7d] [C++] [ahupowerdns/galmon](https://github.com/ahupowerdns/galmon) galileo open source monitoring
+- [**49**Star][11m] [Py] [agustingianni/utilities](https://github.com/agustingianni/utilities) Uncategorized utilities
+ - [DumpFunctionBytes](https://github.com/agustingianni/utilities/blob/master/DumpFunctionBytes.py) dumps the current function (you need to position the cursor on the start of the function) as a shellcode. It does a very limited analysis of the function in order to let you know that you need to fix call sites to functions
+ - [func_references](https://github.com/agustingianni/utilities/blob/master/func_references.py) print all the function calls to a given function. This is generally used to look for calls to malloc like function
+ - [arm_frequency](https://github.com/agustingianni/utilities/blob/master/arm_frequency.py) takes as input the output of objdump on an ARM binary. It will show the ammount of times every instruction was used, sorted by the most used ones.
+ - [struct_hint](https://github.com/agustingianni/utilities/blob/master/struct_hint.py) infer what's the underlying structure used by a function. Highly heuristic. Don't trust it blindly, just try to use what it gives you and work from that.
+ - [string_finder](https://github.com/agustingianni/utilities/blob/master/string_finder.py) Utility to find all the strings inside an ill formed IDA Database
+ - [simple_jack](https://github.com/agustingianni/utilities/blob/master/simple_jack.py) Simple Jack symbol porting tool by goose
+ - [renamer](https://github.com/agustingianni/utilities/blob/master/renamer.py) Rename files in a directory to its sha1 sum plus an extension.
+ - [prolog_finder](https://github.com/agustingianni/utilities/blob/master/prolog_finder.py) Find potential ARM procedures prolog
+ - [minset](https://github.com/agustingianni/utilities/blob/master/minset.py) Tool to calculate the minimum set of files that have approximatelly the best coverage.
+ - [mark_interesting](https://github.com/agustingianni/utilities/blob/master/mark_interesting.py) Small idapython script that finds all the signed comparisions and marks them with a color.
+ - [machofinder](https://github.com/agustingianni/utilities/blob/master/machofinder.py) Hacky script to gather all the mach-o file (and fat).
+ - [find_hardref](https://github.com/agustingianni/utilities/blob/master/find_hardref.py) Script to find hardcoded references inside an IDA database.
+- [**49**Star][14d] [Py] [0blio/filegps](https://github.com/0blio/filegps) A tool that help you to guess how your shell was renamed after the server-side script of the file uploader saved it
+- [**48**Star][6d] [TS] [srar/socks2shadowsocks](https://github.com/srar/socks2shadowsocks) 单Socks5 转换 多Shadowsocks端口 流量统计 抓包分析 TypeScript
+- [**48**Star][1y] [pbnj/infosec-interview-questions](https://github.com/pbnj/infosec-interview-questions)
+- [**48**Star][5m] [Shell] [yeyintminthuhtut/lazy-redteamer-scripts](https://github.com/yeyintminthuhtut/lazy-redteamer-scripts)
+- [**48**Star][4y] [Py] [g0tmi1k/boot2root-scripts](https://github.com/g0tmi1k/boot2root-scripts) Homemade scripts to-do various vulnerable challenges
+- [**48**Star][14d] [Py] [intel/cve-bin-tool](https://github.com/intel/cve-bin-tool) This tool scans for a number of common, vulnerable components (openssl, libpng, libxml2, expat and a few others) to let you know if your system includes common libraries with known vulnerabilities.
+- [**48**Star][3m] [Py] [hatriot/peachorchard](https://github.com/hatriot/peachorchard) Peach Fuzzer Web Frontend
+- [**48**Star][3y] [JS] [cyrus-and/gproxy](https://github.com/cyrus-and/gproxy) googleusercontent.com as HTTP(S) proxy
+- [**48**Star][8m] [JS] [rhinosecuritylabs/swagger-ez](https://github.com/rhinosecuritylabs/swagger-ez) A tool geared towards pentesting APIs using OpenAPI definitions.
+- [**48**Star][16d] [PS] [littl3field/audix](https://github.com/littl3field/audix) Audix is a PowerShell tool to quickly configure the Windows Event Audit Policies for security monitoring
+- [**48**Star][2y] [HTML] [c0nw0nk/coinhive](https://github.com/c0nw0nk/coinhive) A nice friendly simple and easly customizable GUI for coinhives javascript miner to embed onto websites so users of your site can interact with features of the miner on every single page this javascript miner is to help those who have problems with advertisements/advertising/ads popups banners mobile redirects malvertising/malware etc and provid…
+- [**48**Star][11d] [Py] [pomo-mondreganto/forcad](https://github.com/pomo-mondreganto/forcad) Pure-python distributable Attack-Defence CTF platform, created to be easily set up.
+- [**48**Star][3m] [Ruby] [tintoser/bluekeep-exploit](https://github.com/tintoser/bluekeep-exploit) Bluekeep(CVE 2019-0708) exploit released
+- [**48**Star][3m] [C] [juniorjacob/readwrite-kernel-stable](https://github.com/juniorjacob/readwrite-kernel-stable) a more stable & secure read/write virtual memory for kernel mode drivers
+- [**48**Star][4m] [bcosorg/whitepaper](https://github.com/bcosorg/whitepaper) whitepaper
+- [**48**Star][2d] [C++] [trailofbits/polytracker](https://github.com/trailofbits/polytracker) An LLVM-based instrumentation tool for universal taint analysis.
+- [**48**Star][2m] [JS] [luckman666/devops_kkit](https://github.com/luckman666/devops_kkit) django2.1写的自动化运维系统
+- [**48**Star][4m] [HTML] [0xbird/0xbird.github.io](https://github.com/0xbird/0xbird.github.io) 欢迎关注小鸟的技术博客!(Pwn/智能硬件/AI安全/漏洞分析/威胁情报/RedTeam/移动设备/内核/虚拟机/容器安全/浏览器/CPU/安全开发/漏洞挖掘/APT/病毒分析/安全学术)
+- [**48**Star][4y] [Java] [gdssecurity/gds-pmd-security-rules](https://github.com/GDSSecurity/GDS-PMD-Security-Rules) Custom security ruleset for the popular Java static analysis tool PMD.
+- [**48**Star][7m] [Py] [anouarbensaad/honeypot-iot](https://github.com/anouarbensaad/honeypot-iot) This tool to simulate http server attacks in Python which logs HackerIP and all the tracing he does into a Logfile then a database.
+- [**48**Star][1y] [HTML] [yahooarchive/csptester](https://github.com/YahooArchive/csptester) A quick and easy way to test CSP behavior on modern browsers
+- [**48**Star][2y] [C++] [zodiacon/dllinjectionwiththreadcontext](https://github.com/zodiacon/dllinjectionwiththreadcontext) This is a sample that shows how to leverage SetThreadContext for DLL injection
+- [**48**Star][19d] [Py] [zdresearch/owasp-honeypot](https://github.com/zdresearch/owasp-honeypot) OWASP Honeypot
+- [**48**Star][3y] [C] [yolosec/upcgen](https://github.com/yolosec/upcgen) Proof of concept for UPC UBEE router hack - WPA2 password generator
+- [**48**Star][9m] [yeti-791/apt-guide](https://github.com/yeti-791/apt-guide) APT学习指南(Advanced persistent threat learning Guide)
+- [**48**Star][2y] [Py] [xl7dev/icsecurity](https://github.com/xl7dev/icsecurity) Industrial control Security Tool
+- [**48**Star][1y] [html] [wzw19890321/exploits](https://github.com/wzw19890321/exploits)
+- [**48**Star][9m] [C++] [vmcall/eye_mapper](https://github.com/vmcall/eye_mapper) BattlEye x64 usermode injector
+- [**48**Star][2y] [JS] [vegabird/prithvi](https://github.com/vegabird/prithvi) A Report Generation Tool for Security Assessment
+- [**48**Star][2m] [Py] [turnerlabs/antiope](https://github.com/turnerlabs/antiope) AWS Inventory and Compliance Framework
+- [**48**Star][7m] [JS] [tuhinshubhra/wpintel](https://github.com/tuhinshubhra/wpintel) Chrome extension designed for WordPress Vulnerability Scanning and information gathering!
+- [**48**Star][2y] [C++] [tonyzesto/pubgprivxcode85](https://github.com/tonyzesto/pubgprivxcode85) Player ESP 3D Box ESP Nametag ESP Lightweight Code Secure Injection Dedicated Cheat Launcher Secured Against Battleye Chicken Dinner Every Day. Win more matches than ever before with CheatAutomation’s Playerunknown’s Battlegrounds cheat! Our stripped down, ESP only cheat gives you the key features you need to take out your opponents and be eatin…
+- [**48**Star][7y] [tias/android-busybox-ndk](https://github.com/tias/android-busybox-ndk) Keeping track of instructions and patches for building busybox with the android NDK
+- [**48**Star][2m] [Py] [thcipriani/sshecret](https://github.com/thcipriani/sshecret) I can keep a SSHecret
+- [**48**Star][6m] [Shell] [t3chnocat/oscp-ctf](https://github.com/t3chnocat/oscp-ctf) oscp-ctf is a small collection of basic Bash scripts that make life easier and save time whether you are in the OSCP labs, HackThebox or playing around with CTFs.
+- [**48**Star][9m] [C++] [stoyan-shopov/troll](https://github.com/stoyan-shopov/troll) troll:ARM Cortex-M 处理器 C 语言源码调试器
+- [**48**Star][4d] [C] [ssbssa/heob](https://github.com/ssbssa/heob) Detects buffer overruns and memory leaks.
+- [**48**Star][5y] [C++] [sogeti-esec-lab/android-fde](https://github.com/sogeti-esec-lab/android-fde) Tools to work on Android Full Disk Encryption (FDE).
+- [**48**Star][1y] [Py] [softsec-kaist/gitctf](https://github.com/softsec-kaist/gitctf) Git-based CTF
+- [**48**Star][2y] [Py] [softscheck/scff](https://github.com/softscheck/scff) softScheck Cloud Fuzzing Framework
+- [**48**Star][1m] [Py] [snovvcrash/fwdsh3ll](https://github.com/snovvcrash/fwdsh3ll) Forward shell generation framework
+- [**48**Star][4y] [Py] [signalsec/kirlangic-ttf-fuzzer](https://github.com/signalsec/kirlangic-ttf-fuzzer) TrueType Font Fuzzer
+- [**48**Star][3m] [Ruby] [salemove/jaeger-client-ruby](https://github.com/salemove/jaeger-client-ruby) OpenTracing Tracer implementation for Jaeger in Ruby
+- [**48**Star][1y] [Shell] [rustybird/corridor](https://github.com/rustybird/corridor) Tor traffic whitelisting gateway
+- [**48**Star][2y] [Py] [rubenespadas/dionaeafr](https://github.com/rubenespadas/dionaeafr) Dionaea Front Web
+- [**48**Star][3y] [C] [rodrigoalvesvieira/soundkeylogger](https://github.com/rodrigoalvesvieira/soundkeylogger) An experimental project to demonstrate how a user keyboard input may be sniffed through the pattern analysis of the sounds emitted by the keystrokes.
+- [**48**Star][3m] [C] [rek7/postshell](https://github.com/rek7/postshell) PostShell - Post Exploitation Bind/Backconnect Shell
+- [**48**Star][7m] [reabout/datacon](https://github.com/reabout/datacon) datacon比赛方向三-攻击源与攻击者分析writeup
+- [**48**Star][5m] [C] [r3kapig/wctf-2019](https://github.com/r3kapig/wctf-2019) WCTF 2019 Onsite(Master) Challenge
+- [**48**Star][2y] [Py] [q3k/m16c-interface](https://github.com/q3k/m16c-interface) A Serial IO programmer for Renesas M16C, includes security PIN bypass.
+- [**48**Star][1y] [C] [pymumu/jail-shell](https://github.com/pymumu/jail-shell) Jail-shell is a linux security tool mainly using chroot, namespaces technologies, limiting users to perform specific commands, and access sepcific directories.
+- [**48**Star][2y] [PS] [proxb/poshprivilege](https://github.com/proxb/poshprivilege) Manage user privileges on a local machine or view applied privileges on local or remote system
+- [**48**Star][1y] [pbnj/infosec-interview-questions](https://github.com/pbnj/infosec-interview-questions)
+- [**48**Star][7y] [Py] [pdasilva/vtrace_scripts](https://github.com/pdasilva/vtrace_scripts)
+- [**48**Star][6y] [JS] [pauljt/scanjs](https://github.com/pauljt/scanjs) Static analysis tool for javascript code based. Scanjs uses Esprima to convert sources to AST, then walks AST looking for patterns.
+- [**48**Star][3y] [Shell] [osm0sis/apk-patcher](https://github.com/osm0sis/apk-patcher) Patch APKs on-the-fly from Android recovery (Proof of Concept)
+- [**48**Star][5y] [C] [nyx0/kins](https://github.com/nyx0/kins) KINS Banking Trojan
+- [**48**Star][2y] [Py] [nixawk/nmap_vscan](https://github.com/nixawk/nmap_vscan) nmap service and application version detection (without nmap installation)
+- [**48**Star][9d] [JS] [moneroocean/xmr-node-proxy](https://github.com/moneroocean/xmr-node-proxy) Cryptonote/Forknote/Cryptonight/Light/Heavy coin proxy for nodejs-pool
+- [**48**Star][5y] [Shell] [mkdesu/cables](https://github.com/mkdesu/cables) Cables Communication, secure and anonymous communication using email-like addresses.
+- [**48**Star][12m] [Py] [metachar/pyhawk](https://github.com/metachar/pyhawk) Searches the directory of choice for interesting files. Such as database files and files with passwords stored on them
+- [**48**Star][2y] [Shell] [menzow/sn1per-docker](https://github.com/menzow/sn1per-docker) Dockerized version of Sn1per (
+- [**48**Star][7m] [JS] [mcollina/docker-loghose](https://github.com/mcollina/docker-loghose) Collect all the logs from all docker containers
+- [**48**Star][2y] [HTML] [mburakergenc/malware-detection-using-machine-learning](https://github.com/mburakergenc/malware-detection-using-machine-learning) Malware detection project on Android devices using machine learning classification algorithms.
+- [**48**Star][8m] [Py] [marten4n6/tinytor](https://github.com/marten4n6/tinytor) A tiny Tor client implementation (in pure python).
+- [**48**Star][24d] [PHP] [marcocesarato/php-antimalware-scanner](https://github.com/marcocesarato/php-antimalware-scanner) AMWSCAN (Antimalware Scanner) is a php antimalware/antivirus scanner console script written in php for scan your project. This can work on php projects and a lot of others platform.
+- [**48**Star][3y] [C] [malwarelu/malware-lu](https://github.com/malwarelu/malware-lu) Automatically exported from code.google.com/p/malware-lu
+- [**48**Star][2y] [HTML] [knrdl/yamot](https://github.com/knrdl/yamot) Yet Another MOnitoring Tool
+- [**48**Star][8m] [HTML] [klionsec/klionsec.github.io](https://github.com/klionsec/klionsec.github.io)
+- [**48**Star][2y] [C] [kkamagui/iron-hid](https://github.com/kkamagui/iron-hid) Create Your Own Bad USB Device (Presented at HITBSecConf 2016)
+- [**48**Star][4y] [Py] [k1p0d/h264_dvr_rce](https://github.com/k1p0d/h264_dvr_rce) Remote Code Execution exploit on TVT DVR
+- [**48**Star][3m] [C++] [jinmo/ifred](https://github.com/jinmo/ifred) IDA command palette & more (Ctrl+Shift+P, Ctrl+P)
+- [**48**Star][4y] [Shell] [jdsecurity/cryptotrooper](https://github.com/jdsecurity/cryptotrooper) The world's first Linux white-box ransomware
+- [**48**Star][2m] [C] [jdmccalpin/low-overhead-timers](https://github.com/jdmccalpin/low-overhead-timers) Very low-overhead timer/counter interfaces for C on Intel 64 processors.
+- [**48**Star][5m] [jas502n/cve-2019-11581](https://github.com/jas502n/cve-2019-11581) Atlassian JIRA Template injection vulnerability RCE
+- [**48**Star][2y] [Java] [inode-/attackselector](https://github.com/inode-/attackselector) Burp Suite Attack Selector Plugin
+- [**48**Star][3y] [PHP] [incredibleindishell/ldap-credentials-collector-backdoor-generator](https://github.com/incredibleindishell/ldap-credentials-collector-backdoor-generator) This script generate backdoor code which log username password of an user who have passed HTTP basic auth using LDAP credentials.
+- [**48**Star][3y] [JS] [huangwc94/scraping-helper-chrome-extension](https://github.com/huangwc94/scraping-helper-chrome-extension) Scraping Helper will help you to find out the best html/css selector for certain elements
+- [**48**Star][7m] [Jupyter Notebook] [hija/malwaredatascience](https://github.com/hija/malwaredatascience) Malware Data Science Reading Diary / Notes
+- [**48**Star][12m] [C] [hfiref0x/sxsexp](https://github.com/hfiref0x/sxsexp) Expand compressed files from WinSxS folder
+- [**48**Star][2y] [Jupyter Notebook] [harrisonpim/bookworm](https://github.com/harrisonpim/bookworm)
+- [**48**Star][5y] [C] [hackedteam/vector-edk](https://github.com/hackedteam/vector-edk) EFI Development Kit
+- [**48**Star][1y] [Py] [ha3mrx/facebook-cracker](https://github.com/ha3mrx/facebook-cracker) Facebook Cracker Version 1.0 can crack into Facebook Database 100% without Interruption By Facebook Firewall
+- [**48**Star][5d] [guyanqi/awesome-privacy](https://github.com/guyanqi/awesome-privacy) Repository for collection of research papers on privacy.
+- [**48**Star][3y] [Go] [filosottile/openbsd-fde-crack](https://github.com/filosottile/openbsd-fde-crack) Some code to bruteforce OpenBSD softraid encrypted drives - NOT A READY-TO-USE TOOL
+- [**48**Star][8d] [Nim] [federicoceratto/nim-httpauth](https://github.com/federicoceratto/nim-httpauth) HTTP Authentication library for Nim
+- [**48**Star][7m] [Py] [esecuritylab/kostebek](https://github.com/esecuritylab/kostebek)
+- [**48**Star][3y] [Py] [el3ct71k/autobrowser](https://github.com/el3ct71k/autobrowser) AutoBrowser Screenshot
+- [**48**Star][8m] [C++] [dishather/richprint](https://github.com/dishather/richprint) Print compiler information stored in Rich Header of PE executables.
+- [**48**Star][1y] [Batchfile] [dflabs/nat](https://github.com/dflabs/nat) No-Script Automation Tool
+- [**48**Star][2y] [Py] [debasishm89/iefuzz](https://github.com/debasishm89/iefuzz) A static Internet Explorer Fuzzer.
+- [**48**Star][3y] [Shell] [danielmiessler/honeycrediptracker](https://github.com/danielmiessler/honeycrediptracker) Quick script to gather stats on incoming credentials and IPs for a honey listener.
+- [**48**Star][2y] [Shell] [danielfree/asus-v2ray-transparent-proxy](https://github.com/danielfree/asus-v2ray-transparent-proxy) transparent proxy with v2ray, iptables, ipset 无线路由器 v2ray 透明代理
+- [**48**Star][9m] [Py] [crond-jaist/cyris](https://github.com/crond-jaist/cyris) CyRIS: Cyber Range Instantiation System
+- [**48**Star][7y] [C++] [cr4sh/msfontsfuzz](https://github.com/cr4sh/msfontsfuzz) OpenType font file format fuzzer for Windows
+- [**48**Star][7y] [C++] [cr4sh/code-coverage-analysis-tools](https://github.com/cr4sh/code-coverage-analysis-tools) Code coverage analysis tools for the PIN Toolkit
+- [**48**Star][2y] [C#] [cobbr/insecurepowershell](https://github.com/cobbr/insecurepowershell) InsecurePowerShell is PowerShell with some security features removed.
+- [**48**Star][2y] [PS] [clr2of8/detect-sslmitm](https://github.com/clr2of8/detect-sslmitm) This PowerShell script will determine if your connection to external servers over HTTPS is being decrypted by an intercepting proxy such as the internet proxies commonly found in corporate environments. It does this by comparing the SSL intermediate certificate being used for your connection to the true/known SSL certificate for the server.
+- [**48**Star][20d] [Py] [cleanunicorn/theo](https://github.com/cleanunicorn/theo) Ethereum recon and exploitation tool.
+- [**48**Star][2y] [C++] [cherrypill/system_info](https://github.com/cherrypill/system_info) Hardware information tool for Windows
+- [**48**Star][3y] [C++] [chaitin/yanshi](https://github.com/chaitin/yanshi) A regular language recognizer generater like Ragel, enhanced with features to approximate context-free grammars and substring grammars
+- [**48**Star][2y] [Py] [cert-polska/malwarecage](https://github.com/cert-polska/malwarecage) Malware repository component for samples & static configuration with REST API interface
+- [**48**Star][2y] [C] [can1357/safe_capcom](https://github.com/can1357/safe_capcom) Capcom wrapper with safety in mind
+- [**48**Star][4y] [Py] [breakingmalware/avulnerabilitychecker](https://github.com/breakingmalware/avulnerabilitychecker) Tool to check if your computer is likely to be vulnerable to exploitable constant Read-Write-Execute (RWX) addresses (AVs vulnerability)
+- [**48**Star][28d] [Shell] [bkerler/ghidra_installer](https://github.com/bkerler/ghidra_installer) Helper scripts to set up OpenJDK 11 and scale Ghidra for 4K on Ubuntu 18.04 / 18.10
+- [**48**Star][2y] [Py] [bignerd95/chimay-blue](https://github.com/bignerd95/chimay-blue) Mikrotik SMB buffer overflow exploit
+- [**48**Star][2y] [PHP] [backlion/webshell](https://github.com/backlion/webshell) 这是一些常用的webshell
+- [**48**Star][3y] [JS] [auth0-blog/serverless-stories-lambda](https://github.com/auth0-blog/serverless-stories-lambda) Serverless app built with AWS Lambda
+- [**48**Star][8m] [Py] [austin-taylor/bluewall](https://github.com/austin-taylor/bluewall) Bluewall is a firewall framework designed for offensive and defensive cyber professionals.
+- [**48**Star][8m] [CSS] [appsecco/using-docker-kubernetes-for-automating-appsec-and-osint-workflows](https://github.com/appsecco/using-docker-kubernetes-for-automating-appsec-and-osint-workflows) Repository for all the workshop content delivered at nullcon X on 1st of March 2019
+- [**48**Star][2y] [C++] [anubisss/szimatszatyor](https://github.com/anubisss/szimatszatyor) World of Warcraft (WoW): SzimatSzatyor is an injector sniffer written in C++
+- [**48**Star][1y] [java] [anbai-inc/burpstart](https://github.com/anbai-inc/burpstart) Burp 启动加载器
+- [**48**Star][6y] [C++] [amrthabet/pysrdf](https://github.com/amrthabet/pysrdf) This is the python wrapper for The Security Framework SRDF
+- [**48**Star][3y] [Py] [alessandrogario/ida-function-tagger](https://github.com/alessandrogario/ida-function-tagger) This IDAPython script tags subroutines according to their use of imported functions
+- [**48**Star][3y] [Py] [agusmakmun/python-wordlist-generator](https://github.com/agusmakmun/python-wordlist-generator) Create awesome wordlist with python - demo:
+- [**48**Star][7y] [C++] [1184893257/simplesniffer](https://github.com/1184893257/simplesniffer) 基于 WinPcap 的网络抓包软件,使用 MFC 做界面
+- [**47**Star][9d] [jyvsectec/phr-model](https://github.com/jyvsectec/phr-model) Prepare, Hunt, and Respond - Conceptual model against cyber attack by JYVSECTEC
+- [**47**Star][5y] [PHP] [cloudsec/aioshell](https://github.com/cloudsec/aioshell) A php webshell run under linux based webservers. v0.05
+- [**47**Star][3y] [HTML] [jpcertcc/owaspdocuments](https://github.com/jpcertcc/owaspdocuments) Japanese translation of OWASP documents
+- [**47**Star][1y] [HTML] [iaik/jstemplate](https://github.com/iaik/jstemplate) JavaScript Template Attack proof-of-concept implementation
+- [**47**Star][15d] [k8gege/aggressor](https://github.com/k8gege/aggressor) Ladon NetScan for Cobalt Strike 3.x Aggressor Script
+- [**47**Star][12d] [Py] [consensys/defi-score](https://github.com/consensys/defi-score) DeFi Score: An open framework for evaluating DeFi protocols
+- [**47**Star][21d] [Shell] [hak5/sharkjack-payloads](https://github.com/hak5/sharkjack-payloads) The Official Hak5 Shark Jack Payload Repository
+- [**47**Star][4y] [Py] [bastilleresearch/scapy-radio](https://github.com/bastilleresearch/scapy-radio) scapy-radio (from original Hg repo)
+- [**47**Star][2m] [Py] [nccgroup/sshession](https://github.com/nccgroup/sshession) The SSH Multiplex Backdoor Tool
+- [**47**Star][5d] [Py] [evilsocket/pwnagotchi-plugins-contrib](https://github.com/evilsocket/pwnagotchi-plugins-contrib) User contributed Pwnagotchi plugins.
+- [**47**Star][6m] [Go] [dreadl0ck/ja3](https://github.com/dreadl0ck/ja3) Ja3 TLS Client Hello Hashes in Go
+- [**47**Star][3d] [Go] [asutorufa/ssrmicroclient](https://github.com/asutorufa/ssrmicroclient) a shadowskcsr client with gui by golang for linux(support subscription)
+- [**47**Star][1m] [payloadbox/rfi-lfi-payload-list](https://github.com/payloadbox/rfi-lfi-payload-list)
+- [**47**Star][15d] [k8gege/aggressor](https://github.com/k8gege/Aggressor) Ladon NetScan for Cobalt Strike 3.x Aggressor Script
+- [**47**Star][3y] [Py] [beaugunderson/wifi-heatmap](https://github.com/beaugunderson/wifi-heatmap)
+- [**47**Star][7y] [Py] [paulmcmillan/kismetclient](https://github.com/paulmcmillan/kismetclient) A Python client for the Kismet server protocol
+- [**47**Star][1m] [Py] [nyxgeek/ntlmscan](https://github.com/nyxgeek/ntlmscan) scan for NTLM directories
+- [**47**Star][1y] [Visual Basic .NET] [vysecurity/cactustorch](https://github.com/vysecurity/CACTUSTORCH) Payload Generation for Adversary Simulations
+- [**47**Star][6m] [jaxbcd/recscansec](https://github.com/jaxBCD/RecScanSec) reconnaisance - footprinting - information disclosure (0.7)
+- [**47**Star][2m] [Py] [pwnlandia/shockpot](https://github.com/pwnlandia/shockpot) WebApp Honeypot for detecting Shell Shock exploit attempts
+- [**47**Star][3y] [Py] [jjo-sec/idataco](https://github.com/jjo-sec/idataco) IDATACO IDA Pro Plugin
+- [**47**Star][7m] [Py] [ctf-o-matic/capture-the-flag](https://github.com/ctf-o-matic/capture-the-flag) Helper scripts to remaster Linux Live CD images for the purpose of creating ready to use security wargames with pre-installed vulnerabilities to exploit.
+- [**47**Star][3y] [C] [zerosum0x0/loadlibrary-getprocaddress-replacements](https://github.com/zerosum0x0/loadlibrary-getprocaddress-replacements) LoadLibrary() and GetProcAddress() Replacement Functions
+- [**47**Star][1y] [Py] [zer0yu/zeroscan](https://github.com/zer0yu/zeroscan) Multi-Thread Vulnerability Verify Framework
+- [**47**Star][4y] [C] [yifanlu/3ds_injector](https://github.com/yifanlu/3ds_injector) Open source implementation of loader module with code injection support
+- [**47**Star][9m] [C++] [vletoux/detectpasswordviantlminflow](https://github.com/vletoux/detectpasswordviantlminflow) Extract the password of the current user from flow (keylogger, config file, ..) Use SSPI to get a valid NTLM challenge/response and test passwords
+- [**47**Star][4y] [Py] [vasco2016/shellsploit-framework](https://github.com/vasco2016/shellsploit-framework) New Generation Exploit Development Kit
+- [**47**Star][2y] [Py] [vah13/sap_exploit](https://github.com/vah13/sap_exploit) Here you can get full exploit for SAP NetWeaver AS JAVA
+- [**47**Star][2m] [Py] [utkonos/lst2x64dbg](https://github.com/utkonos/lst2x64dbg) Extract labels from IDA .lst or Ghidra .csv file and export x64dbg database.
+- [**47**Star][1y] [Ruby] [uploadcare/uploadcare-rails](https://github.com/uploadcare/uploadcare-rails) Rails wrapper for Uploadcare
+- [**47**Star][3y] [tw-ncert/ctifeeds](https://github.com/tw-ncert/ctifeeds) Cyber Threat Intelligence Feeds
+- [**47**Star][4m] [Py] [trinitronx/vncpasswd.py](https://github.com/trinitronx/vncpasswd.py) A Python implementation of vncpasswd, w/decryption abilities & extra features ;-)
+- [**47**Star][4y] [Py] [topshed/rpi_8x8griddraw](https://github.com/topshed/rpi_8x8griddraw) A Python Pygame application for creating 8x8 images to load onto the Astro-Pi LED matrix
+- [**47**Star][5m] [Java] [tlamb96/kgb_messenger](https://github.com/tlamb96/kgb_messenger) An Android CTF practice challenge
+- [**47**Star][7m] [Go] [threeaccents/botnet](https://github.com/threeaccents/botnet) A tcp botnet written in golang
+- [**47**Star][4y] [threatminer/aptnotes](https://github.com/threatminer/aptnotes) Various public documents, whitepapers and articles about APT campaigns
+- [**47**Star][2m] [the-blockchain-bible/readme](https://github.com/the-blockchain-bible/readme) The Blockchain Bible,a collections for blockchain tech,bitcoin,ethereum,crypto currencies,cryptography,decentralized solutions,business scenarios,hyperledger tech,meetups,区块链,数字货币,加密货币,比特币,以太坊,密码学,去中心化,超级账本
+- [**47**Star][1y] [C] [tamirzb/cve-2018-9411](https://github.com/tamirzb/cve-2018-9411) Exploit code for CVE-2018-9411 for MediaCasService
+- [**47**Star][11m] [Jupyter Notebook] [tamimmirza/intrusion-detection-system-using-deep-learning](https://github.com/tamimmirza/intrusion-detection-system-using-deep-learning) VGG-19 deep learning model trained using ISCX 2012 IDS Dataset
+- [**47**Star][6m] [C++] [talvos/talvos](https://github.com/talvos/talvos) Talvos is a dynamic-analysis framework and debugger for Vulkan/SPIR-V programs.
+- [**47**Star][16d] [C] [sunnyki/bareboot](https://github.com/sunnyki/bareboot) Bare Boot. EFI bootloader for Mac OS, Windows, Linux etc
+- [**47**Star][2y] [Py] [stormshadow07/beef-over-wan](https://github.com/stormshadow07/beef-over-wan) Browser Exploitation Framework is a Open-source penetration testing tool that focuses on browser-based vulnerabilities .This Python Script does the changes Required to make hooked Linked Accessible Over WAN .So anyone can use this framework and Attack Over WAN without Port Forwarding [NGROK or any Localhost to Webhost Service Required ]
+- [**47**Star][8y] [C] [stephenfewer/ollysockettrace](https://github.com/stephenfewer/ollysockettrace) OllySocketTrace is a plugin for OllyDbg to trace the socket operations being performed by a process.
+- [**47**Star][1y] [C] [squalr/selfhackingapp](https://github.com/squalr/selfhackingapp) Self Assembling/Disassembling C++ App Reference Code
+- [**47**Star][2m] [C] [spacial/csirt](https://github.com/spacial/csirt) CSIRT is an awesome curated list of links and resources in security and csirt daily activities.
+- [**47**Star][2m] [ObjC] [smilezxlee/zxrequestblock](https://github.com/smilezxlee/zxrequestblock) 一句话实现iOS应用底层所有网络请求拦截(如ajax请求拦截),包含http-dns解决方法,有效防止DNS劫持,用于分析http,https请求,禁用/允许代理,防抓包等
+- [**47**Star][1y] [Go] [slowmist/blockchain-threat-intelligence](https://github.com/slowmist/blockchain-threat-intelligence) Blockchain Threat Intelligence Sharing Platform(区块链威胁情报共享平台)
+- [**47**Star][5y] [C] [simsong/afflibv3](https://github.com/simsong/afflibv3) AFF is now being maintained at
+- [**47**Star][1y] [C++] [silica/sandbox](https://github.com/silica/sandbox) Application virtualization tool for Windows
+- [**47**Star][4m] [Py] [sherlly/pcrt](https://github.com/sherlly/pcrt) PCRT (PNG Check & Repair Tool), a tool to help check and fix the error in a PNG image.
+- [**47**Star][5m] [sekhan/nightpi](https://github.com/sekhan/nightpi) An all-in-one briefcase for pentesting, OSINT and radio exploration
+- [**47**Star][5y] [Java] [securenetwork/nfcult](https://github.com/securenetwork/nfcult) NFC Ultralight Toolkit
+- [**47**Star][2y] [Shell] [samoshkin/docker-letsencrypt-certgen](https://github.com/samoshkin/docker-letsencrypt-certgen) Docker image to generate, renew, revoke RSA and/or ECDSA SSL certificates from LetsEncrypt CA using certbot and acme.sh clients in automated fashion
+- [**47**Star][2y] [Py] [salesforce/autotriagebot](https://github.com/salesforce/autotriagebot) AutoTriageBot automatically verifies, deduplicates, and suggests payouts for incoming HackerOne reports.
+- [**47**Star][4m] [saaramar/publications](https://github.com/saaramar/publications)
+- [**47**Star][2y] [Py] [riscure/drop-ida-plugin](https://github.com/riscure/drop-ida-plugin) Experimental opaque predicate detection for IDA Pro
+- [**47**Star][7y] [Py] [radare/bokken](https://github.com/radare/bokken) python-gtk UI for radare2
+- [**47**Star][3y] [C++] [progmboy/cansecwest2017](https://github.com/progmboy/cansecwest2017)
+- [**47**Star][10m] [JS] [pownjs/pown-duct](https://github.com/pownjs/pown-duct) Essential tool for finding blind injection attacks.
+- [**47**Star][7d] [Shell] [pierregode/linux-active-directory-join-script](https://github.com/pierregode/linux-active-directory-join-script) Active directory Join script for Ubuntu, Debian, CentOS, Linux Mint, Fedora, Kali and Raspbian with built in failchcheck and debugmode for Ubuntu. "The most advanced and updated AD join script on GITHUB for Linux"
+- [**47**Star][4y] [Py] [ostorlab/jniostorlab](https://github.com/ostorlab/jniostorlab) JNI method enumeration in ELF files
+- [**47**Star][6y] [Java] [o2platform/defcon_resting](https://github.com/o2platform/defcon_resting) Repository to hold materials for DefCon_RESTing presentation by Dinis, Abe and Alvaro
+- [**47**Star][2y] [Shell] [nyxgeek/dumpsniffer](https://github.com/nyxgeek/dumpsniffer) tools for analyzing strings from password lists
+- [**47**Star][5y] [Py] [neohapsis/mptcp-abuse](https://github.com/neohapsis/mptcp-abuse) A collection of tools and resources to explore MPTCP on your network. Initially released at Black Hat USA 2014.
+- [**47**Star][3y] [Py] [nanshihui/android-reverse-tool](https://github.com/nanshihui/android-reverse-tool) Android reverse tool
+- [**47**Star][9m] [DIGITAL Command Language] [nahsra/antisamy](https://github.com/nahsra/antisamy) a library for performing fast, configurable cleansing of HTML coming from untrusted sources
+- [**47**Star][4y] [C++] [mozmark/ringleader](https://github.com/mozmark/ringleader) A tool for configuring and using MITM proxies from firefox
+- [**47**Star][5y] [C] [mobileforensicsresearch/mem](https://github.com/mobileforensicsresearch/mem) Tool used for dumping memory from Android devices
+- [**47**Star][1y] [Py] [miladdiaz/mikrotikexploit](https://github.com/miladdiaz/mikrotikexploit) Scan and Export RouterOS Password
+- [**47**Star][2y] [mikewest/cookies-over-http-bad](https://github.com/mikewest/cookies-over-http-bad) Sending cookies over plaintext HTTP is bad. We should stop doing that.
+- [**47**Star][5y] [C] [lukasikic/unix-privilege-escalation-exploits-pack](https://github.com/lukasikic/unix-privilege-escalation-exploits-pack) Exploits for getting local root on Linux, BSD, AIX, HP-UX, Solaris, RHEL, SUSE etc.
+- [**47**Star][1m] [PS] [lkys37en/start-adenum](https://github.com/lkys37en/start-adenum) Tool that automates Active Directory enumeration
+- [**47**Star][1y] [C++] [lianglixin/memdllloader](https://github.com/lianglixin/memdllloader) 加载内存当中的DLL文件
+- [**47**Star][3m] [C] [leoetlino/botw-re-notes](https://github.com/leoetlino/botw-re-notes) Reverse engineering notes and tools for The Legend of Zelda: Breath of the Wild
+- [**47**Star][5m] [Shell] [kwilczynski/packer-templates](https://github.com/kwilczynski/packer-templates) Packer templates for creating Amazon EC2 images and Vagrant boxes
+- [**47**Star][10m] [Java] [jreframeworker/jreframeworker](https://github.com/jreframeworker/jreframeworker) A practical tool for bytecode manipulation and creating Managed Code Rootkits (MCRs) in the Java Runtime Environment
+- [**47**Star][3y] [JS] [jonathankingston/ember-cli-sri](https://github.com/jonathankingston/ember-cli-sri) Generation of SRI hashes for ember
+- [**47**Star][8m] [jeremyblackthorne/ghidra-keybindings](https://github.com/jeremyblackthorne/ghidra-keybindings)
+- [**47**Star][5y] [jameshabben/sysmon-queries](https://github.com/jameshabben/sysmon-queries) Queries to parse sysmon event log file with microsoft logparser
+- [**47**Star][3m] [Py] [jackeriss/keyboard_recording_trojan](https://github.com/jackeriss/keyboard_recording_trojan) 一个可以记录键盘输入并发送到指定邮箱的简单木马。
+- [**47**Star][6m] [Py] [ivrodriguezca/decrypt-ios-apps-script](https://github.com/ivrodriguezca/decrypt-ios-apps-script) Python script to SSH into your jailbroken device, decrypt an iOS App and transfer it to your local machine
+- [**47**Star][2y] [Py] [intrd/nozzlr](https://github.com/intrd/nozzlr) Nozzlr is a bruteforce framework, trully modular and script-friendly
+- [**47**Star][7m] [Py] [initstring/lxd_root](https://github.com/initstring/lxd_root) Linux privilege escalation via LXD
+- [**47**Star][11m] [C] [imbushuo/boot-shim](https://github.com/imbushuo/boot-shim) Bootstraps ARM32/ARM64 ELF payloads on Qualcomm Windows platforms
+- [**47**Star][4m] [C] [ihack4falafel/osee](https://github.com/ihack4falafel/osee) Collection of things made during my preparation to take on OSEE
+- [**47**Star][11m] [Java] [iflody/mybuganalyze](https://github.com/iflody/mybuganalyze) 一些漏洞分析
+- [**47**Star][29d] [C] [hexhive/smotherspectre](https://github.com/hexhive/smotherspectre) Proof-of-concept code for the SMoTherSpectre exploit.
+- [**47**Star][5d] [Shell] [hax4us/apkmod](https://github.com/hax4us/apkmod) Apkmod can decompile, recompile, sign APK, and bind the payload with any legit APP
+- [**47**Star][20d] [C++] [hasherezade/mal_unpack](https://github.com/hasherezade/mal_unpack) Dynamic unpacker based on PE-sieve
+- [**47**Star][2y] [JS] [hackvertor/visualfuzzer](https://github.com/hackvertor/visualfuzzer) A visual fuzzer written in NodeJS to find Zalgo characters
+- [**47**Star][1y] [JS] [h43z/dns-rebinding-tool](https://github.com/h43z/dns-rebinding-tool) dns rebind tool with custom scripts
+- [**47**Star][8y] [Py] [grant-olson/pyasm](https://github.com/grant-olson/pyasm) Dynamic inline x86 assembler for python.
+- [**47**Star][3y] [Py] [gosecure/break-fast-serial](https://github.com/gosecure/break-fast-serial) A proof of concept that demonstrates asynchronous scanning for Java deserialization bugs
+- [**47**Star][2y] [Py] [ggusoft/inforfinder](https://github.com/ggusoft/inforfinder) inforfinder:收集指向某个服务器(ip,域,范围,文件)的任何域的信息。能够检测到所有指向某个 IP 地址的域,并检测安装的CMS版本、PHP版本、WebServer版本、Plesk版本等。
+- [**47**Star][1m] [C] [gerhart01/livecloudkd](https://github.com/gerhart01/livecloudkd) Hyper-V Research is trendy now
+- [**47**Star][6y] [C] [gdbinit/gdb-ng](https://github.com/gdbinit/gdb-ng) Apple's gdb fork with some fixes and enhancements
+- [**47**Star][7m] [C] [gdbinit/extractmacho](https://github.com/gdbinit/extractmacho) IDA plugin to extract Mach-O binaries located in the disassembly or data
+- [**47**Star][8d] [PHP] [fortrabbit/craft-copy](https://github.com/fortrabbit/craft-copy) Deployment tools for Craft on fortrabbit
+- [**47**Star][2y] [Pascal] [felipedaragon/huntpad](https://github.com/felipedaragon/huntpad) 开源的Notepad,有很多有助于渗透测试的特性
+- [**47**Star][2y] [C] [fail0verflow/switch-arm-trusted-firmware](https://github.com/fail0verflow/switch-arm-trusted-firmware) ARM Trusted Firmware-A for the Switch
+- [**47**Star][4d] [JS] [essandess/easylist-pac-privoxy](https://github.com/essandess/easylist-pac-privoxy) EasyList Tracker and Adblocks to Proxy Auto Configuration (PAC) File and Privoxy Actions and Filters
+- [**47**Star][6d] [Py] [ercoppa/symbolic-execution-tutorial](https://github.com/ercoppa/symbolic-execution-tutorial) Tutorial on Symbolic Execution. Hands-on session is based on the angr framework.
+- [**47**Star][11m] [Py] [engelsjo/raspireader](https://github.com/engelsjo/raspireader) 3D models and code for building your own fingerprint reader
+- [**47**Star][2y] [Py] [embedi/amt_auth_bypass_poc](https://github.com/embedi/amt_auth_bypass_poc) CVE-2017-5689 Proof-of-Concept exploit
+- [**47**Star][10m] [Go] [dsopas/rfd-checker](https://github.com/dsopas/rfd-checker) rfd-checker: 命令行工具,检测指定URL是否存在反射文件下载(Reflected File Download)问题
+- [**47**Star][2y] [C] [david-reguera-garcia-dreg/enyelkm](https://github.com/david-reguera-garcia-dreg/enyelkm) LKM rootkit for Linux x86 with the 2.6 kernel. It inserts salts inside system_call and sysenter_entry.
+- [**47**Star][1y] [PS] [dafthack/passphrasegen](https://github.com/dafthack/passphrasegen) A script for generating custom passphrase lists to be used for password cracking with hashcat rules
+- [**47**Star][2y] [C++] [collin80/m2ret](https://github.com/collin80/m2ret) GVRET fork to Macchina M2 board
+- [**47**Star][4m] [Lua] [charlemaznable/lua-resty-wechat](https://github.com/charlemaznable/lua-resty-wechat) 使用Lua编写的nginx服务器微信公众平台代理.
+- [**47**Star][2m] [Rust] [brycx/checkpwn](https://github.com/brycx/checkpwn) Check Have I Been Pwned and see if it's time for you to change passwords.
+- [**47**Star][1y] [Java] [bit4woo/java_deserialize_vuln_lab](https://github.com/bit4woo/java_deserialize_vuln_lab) Java 反序列化学习的实验代码 Java_deserialize_vuln_lab
+- [**47**Star][1y] [Py] [behavior3/behavior3py](https://github.com/behavior3/behavior3py) Behavior3 client library for Python (Behavior Tree for Python)
+- [**47**Star][5m] [PHP] [bediger4000/reverse-php-malware](https://github.com/bediger4000/reverse-php-malware) De-obfuscate and reverse engineer PHP malware
+- [**47**Star][4y] [JS] [awalgarg/devtools-timing-attack](https://github.com/awalgarg/devtools-timing-attack) timing attack to check if devtools are open
+- [**47**Star][1y] [Shell] [appsecconsulting/pentest-tools](https://github.com/appsecconsulting/pentest-tools) Penetration Testing Tools Developed by AppSec Consulting.
+- [**47**Star][2y] [C++] [antid0tecom/aarch64_armv81extension](https://github.com/antid0tecom/aarch64_armv81extension) IDA AArch64 processor extender extension: Adding support for ARMv8.1 opcodes
+- [**47**Star][2y] [Py] [anilbaranyelken/arpag](https://github.com/anilbaranyelken/arpag) Arpag: 自动化漏洞利用脚本
+- [**47**Star][1y] [Py] [alexfrancow/a-detector](https://github.com/alexfrancow/a-detector)
+- [**47**Star][3y] [Py] [alessandroz/pupy](https://github.com/alessandroz/pupy) Pupy is an opensource, multi-platform (Windows, Linux, OSX, Android), multi function RAT (Remote Administration Tool) mainly written in python. It features a all-in-memory execution guideline and leaves very low footprint. Pupy can communicate using various transports, migrate into processes (reflective injection), load remote python code, pytho…
+- [**47**Star][7m] [Go] [agilebits/crackme](https://github.com/agilebits/crackme)
+- [**47**Star][5y] [Shell] [adafruit/adafruit-pi-externalroot-helper](https://github.com/adafruit/adafruit-pi-externalroot-helper) A shell script to configure a USB drive as root filesystem.
+- [**47**Star][3y] [Py] [4w4k3/knockmail](https://github.com/4w4k3/knockmail) Verify if email exists
+- [**46**Star][12d] [Go] [dsnezhkov/deepsea](https://github.com/dsnezhkov/deepsea) DeepSea Phishing Gear
+- [**46**Star][6m] [Swift] [git-kevinchuang/potatso-swift5](https://github.com/git-kevinchuang/potatso-swift5) Potatso compiled with swift5 xcode 10.2.1 mojave 10.14.5
+- [**46**Star][1m] [C++] [125k/esp8266_wifi_captive_portal](https://github.com/125k/esp8266_wifi_captive_portal) WiFi captive portal for NodeMCU (ESP8266 Module) with DNS spoofing. It phishes the WiFi password.
+- [**46**Star][10d] [JS] [hmbsbige/text_translation](https://github.com/hmbsbige/text_translation) 简体中文翻译&&一些文本
+- [**46**Star][3y] [Py] [asamy/x86-64-pe-emu](https://github.com/asamy/x86-64-pe-emu) AMD64 PE Emulator in Python.
+- [**46**Star][1m] [Vue] [fireeye/gocrack-ui](https://github.com/fireeye/gocrack-ui) The User Interface for GoCrack
+- [**46**Star][6m] [Py] [landgrey/classhound](https://github.com/landgrey/classhound) 利用任意文件下载漏洞自动循环下载并反编译class文件获得网站源码
+- [**46**Star][2m] [Go] [rancher/remotedialer](https://github.com/rancher/remotedialer) HTTP in TCP in Websockets in HTTP in TCP, Tunnel all the things!
+- [**46**Star][8y] [Perl] [gamelinux/echidna](https://github.com/gamelinux/echidna) Network Security Monitoring Framework
+- [**46**Star][9m] [Py] [lorenzb/libsubmarine](https://github.com/lorenzb/libsubmarine) Implementation of a novel practical scheme for submarine commitments
+- [**46**Star][2y] [leotsui/cs259d_notes_hw_cn](https://github.com/leotsui/cs259d_notes_hw_cn) 本笔记是对课程CS 259D中涉及的论文和讲义的扩展,建议阅读原始论文和讲义。
+- [**46**Star][9m] [Py] [stef/wireless-radar](https://github.com/stef/wireless-radar) DF and other tools to explore a 2.4GHz environment.
+- [**46**Star][4y] [securitytube/wifiscanvisualizer](https://github.com/securitytube/wifiscanvisualizer) Wi-Fi Scan Visualizer by Pentester Academy
+- [**46**Star][2y] [C#] [epicrouterss/mssql-fileless-rootkit-warsqlkit](https://github.com/epicrouterss/mssql-fileless-rootkit-warsqlkit) Bildiğiniz üzere uzun zamandır MSSQL üzerine çalışmalar yapmaktayım. Bu yazımda uzun zamandır uğraştığım bir konuyu ele alacağım, MSSQL Rootkit. Bildiğiniz üzere şimdiye kadar MS-SQL için anlatılan post-exploitation işlemlerinin büyük çoğunluğu “xp_cmdshell” ve “sp_OACreate” stored procedure’lerini kullanarak anlatılır. Peki xp_cmdshell ve sp_OA…
+- [**46**Star][4y] [PHP] [kurtcoke/demonhunter_exploitkit](https://github.com/kurtcoke/demonhunter_exploitkit) Source code to the Malicious Demon Hunter Exploit Kit
+- [**46**Star][4m] [C#] [cristianst85/quickconnectplugin](https://github.com/cristianst85/quickconnectplugin) A KeePass plugin that allows you to connect to Windows/Linux/ESXi hosts.
+- [**46**Star][2m] [C#] [ernado-x/x.web.sitemap](https://github.com/ernado-x/x.web.sitemap) Simple sitemap generator for .NET and .NET Core
+- [**46**Star][2y] [hdm/2017-bsideslv-modern-recon](https://github.com/hdm/2017-BSidesLV-Modern-Recon) Materials related to the 2017 BSides Las Vegas presentation
+- [**46**Star][1m] [C++] [125k/esp8266_wifi_captive_portal](https://github.com/125K/ESP8266_WiFi_Captive_Portal) WiFi captive portal for NodeMCU (ESP8266 Module) with DNS spoofing. It phishes the WiFi password.
+- [**46**Star][24d] [PHP] [szepeviktor/waf4wordpress](https://github.com/szepeviktor/waf4wordpress) WAF for WordPress
+- [**46**Star][2y] [C] [robotpy/robotpy-crio](https://github.com/robotpy/robotpy-crio) Obsolete. Python 3 port for cRIO for use in the FIRST Robotics Competition (FRC)
+- [**46**Star][2m] [C#] [brunull/pace](https://github.com/brunull/pace) A Remote Access Tool for Windows.
+- [**46**Star][3m] [Py] [koromodako/mkctf](https://github.com/koromodako/mkctf) A CTF framework to create, build, deploy and test challenges
+- [**46**Star][2y] [Go] [caarlos0-graveyard/gravekeeper](https://github.com/caarlos0-graveyard/gravekeeper) Informs users that a repo is not maintained anymore.
+- [**46**Star][1y] [C] [zznop/flyr](https://github.com/zznop/flyr) Block-based software vulnerability fuzzing framework
+- [**46**Star][19d] [TeX] [zxgio/gdb_gef-cheatsheet](https://github.com/zxgio/gdb_gef-cheatsheet) GDB + GEF cheatsheet for reversing binaries
+- [**46**Star][1m] [C] [zodiacon/regeditx](https://github.com/zodiacon/regeditx) Enhanced Registry Editor
+- [**46**Star][18d] [JS] [znetstar/tor-router](https://github.com/znetstar/tor-router) A SOCKS, HTTP and DNS proxy for distributing traffic across multiple instances of Tor
+- [**46**Star][3y] [C] [zhuhuibeishadiao/pfhook](https://github.com/zhuhuibeishadiao/pfhook) Page fault hook use ept (Intel Virtualization Technology)
+- [**46**Star][5m] [C] [zerbea/hcxkeys](https://github.com/zerbea/hcxkeys) Small set of tools to generate plainmasterkeys (rainbowtables) and hashes for the use with latest hashcat and John the Ripper.
+- [**46**Star][8m] [YARA] [xumeiquer/yara-forensics](https://github.com/xumeiquer/yara-forensics) Set of Yara rules for finding files using magics headers
+- [**46**Star][3m] [Py] [xuchaoa/ctf_awd_platform](https://github.com/xuchaoa/ctf_awd_platform) CTF 攻防对抗平台
+- [**46**Star][2y] [Py] [xnianq/awd-frame](https://github.com/xnianq/awd-frame) ctf awd framework
+- [**46**Star][7m] [Py] [wetw0rk/exploit-development](https://github.com/wetw0rk/exploit-development) CVE-2016-10709, CVE-2017-17099, CVE-2017-18047, CVE-2019-1003000, CVE-2018-1999002
+- [**46**Star][1y] [C++] [wanttobeno/win_driver_mouse_and_key](https://github.com/wanttobeno/win_driver_mouse_and_key) 驱动模拟键鼠,支持64位,附代码
+- [**46**Star][12m] [Py] [viperbluff/waf_buster](https://github.com/viperbluff/waf_buster) Disrupt WAF by abusing SSL/TLS Ciphers
+- [**46**Star][3y] [C++] [vdalibard/boat](https://github.com/vdalibard/boat)
+- [**46**Star][4m] [Py] [v-p-b/kaspy_toolz](https://github.com/v-p-b/kaspy_toolz)
+- [**46**Star][1y] [Go] [unixpickle/cve-2018-4407](https://github.com/unixpickle/cve-2018-4407) Crash macOS and iOS devices with one packet
+- [**46**Star][1y] [uefitech/resources](https://github.com/uefitech/resources) One-stop shop for UEFI/BIOS specifications/utilities by UEFI.Tech community
+- [**46**Star][8m] [turing-chain/honeypots-on-blockchain](https://github.com/turing-chain/honeypots-on-blockchain) This repo collects almost all the smart contract honeypots that you could find in the first three pages of Google search.
+- [**46**Star][27d] [C] [trendmicro/rfquack](https://github.com/trendmicro/rfquack) RFQuack: the versatile RF-analysis tool that quacks!
+- [**46**Star][1y] [Py] [towerofhanoi/ctfsubmitter](https://github.com/towerofhanoi/ctfsubmitter) A flag submitter service with distributed attackers for attack/defense CTF games.
+- [**46**Star][2y] [C#] [testsecer/md5decrypt](https://github.com/testsecer/md5decrypt) MD5多接口解密工具(插件式)
+- [**46**Star][2d] [Py] [te-k/analyst-scripts](https://github.com/te-k/analyst-scripts) Scripts to analyze stuff
+- [**46**Star][2y] [C] [stonedreamforest/re_avkmgr](https://github.com/stonedreamforest/re_avkmgr) 逆向小红伞杀毒软件驱动——avkmgr
+- [**46**Star][7y] [spiderlabs/korelogic-rules](https://github.com/spiderlabs/korelogic-rules) Updated version of the 2010 KoreLogic password cracking rules for John the Ripper
+- [**46**Star][30d] [Py] [sowdust/ffff](https://github.com/sowdust/ffff) FFFF Finds Facebook Friends
+- [**46**Star][2y] [silvermoonsecurity/security-misc](https://github.com/silvermoonsecurity/security-misc) # Full overview of current vulnerability, exploit , fuzz, mitigation of current major Operation System(Windows, macOS, Linux, Android,iOS and so forath) and popular applicaiton
+- [**46**Star][3y] [C] [sidechannelmarvels/stark](https://github.com/sidechannelmarvels/stark) Repository of small utilities related to key recovery
+- [**46**Star][7y] [C] [shjalayeri/mcedp](https://github.com/shjalayeri/mcedp) Malicious Code Execution Detection Prevention (MCEDP) High Interaction Client Honeypot
+- [**46**Star][9m] [setuid0-sec/swiss_e-voting_publications](https://github.com/setuid0-sec/swiss_e-voting_publications) Our publications of the Swiss E-Voting Public Intrusion Test (PIT)
+- [**46**Star][1y] [Py] [sentenza/gimp-ela](https://github.com/sentenza/gimp-ela) A JPEG Error Level Analysis forensic plugin for the GNU Image Manipulation Program (GIMP)
+- [**46**Star][8m] [Py] [safebreach-labs/altfs](https://github.com/safebreach-labs/altfs) The Alternative Fileless File System
+- [**46**Star][2y] [rustemsoft/skater-.net-obfuscator](https://github.com/rustemsoft/skater-.net-obfuscator) Skater .NET Obfuscator is an obfuscation tool for .NET code protection. It implements all known software protection techniques and obfuscation algorithms.
+- [**46**Star][7m] [Shell] [rokasurbelis/system-security-testing](https://github.com/rokasurbelis/system-security-testing)
+- [**46**Star][5y] [C] [rodionovd/task_vaccine](https://github.com/rodionovd/task_vaccine) Yet another code injection library for OS X
+- [**46**Star][2y] [JS] [rnehra01/arp-validator](https://github.com/rnehra01/arp-validator) 检测ARP 投毒攻击
+- [**46**Star][4y] [Assembly] [raspberrypi/rpi-sense](https://github.com/raspberrypi/rpi-sense) Sense HAT firmware and driver
+- [**46**Star][1m] [randomuserid/tylium](https://github.com/randomuserid/tylium) Primary data pipelines for intrusion detection, security analytics and threat hunting
+- [**46**Star][8m] [JS] [radenvodka/pentol](https://github.com/radenvodka/pentol) PENTOL - Pentester Toolkit for Fiddler2
+- [**46**Star][5y] [Py] [pun1sh3r/facebot](https://github.com/pun1sh3r/facebot) A facebook profile and reconnaissance system
+- [**46**Star][2d] [C] [psilupan/fray](https://github.com/psilupan/fray) Recompilable version of Super Smash Bros. Melee 1.02 based on the LibOGC project.
+- [**46**Star][1y] [pimps/cve-2017-5645](https://github.com/pimps/cve-2017-5645) CVE-2017-5645 - Apache Log4j RCE due Insecure Deserialization
+- [**46**Star][2y] [pentestpartners/ptp-rat](https://github.com/pentestpartners/ptp-rat) Exfiltrate data over screen interfaces
+- [**46**Star][4y] [C++] [papadp/reflective-injection-detection](https://github.com/papadp/reflective-injection-detection) a program to detect reflective dll injection on a live machine
+- [**46**Star][5m] [HTML] [paloaltonetworks/aws-elb-autoscaling](https://github.com/paloaltonetworks/aws-elb-autoscaling) Auto Scaling VM-Series firewalls in AWS
+- [**46**Star][1y] [Shell] [pablomansanet/c0toolkit](https://github.com/pablomansanet/c0toolkit) Miscellaneous pentesting scripts for OSCP
+- [**46**Star][4y] [Py] [p0cl4bs/facebrute](https://github.com/p0cl4bs/facebrute) Bruteforce to facebook accounts
+- [**46**Star][2m] [Makefile] [osminogin/docker-tor-simple](https://github.com/osminogin/docker-tor-simple) Simplest minimal container for Tor anonymity software
+- [**46**Star][5m] [Go] [oscp/openshift-monitoring](https://github.com/oscp/openshift-monitoring) A realtime distributed monitoring tool for OpenShift Enterprise
+- [**46**Star][1y] [HTML] [octosavvi/espkey](https://github.com/octosavvi/espkey) Wiegand data logger, replay device and micro door-controller
+- [**46**Star][2m] [Py] [nodiscc/srv01](https://github.com/nodiscc/srv01) [mirror] [Legacy version, rewrite in progress] Run your own network services, hosted on a server you control.
+- [**46**Star][7d] [Java] [netspi/awssigner](https://github.com/netspi/awssigner) Burp Extension for AWS Signing
+- [**46**Star][2y] [Py] [n4xh4ck5/n4xd0rk](https://github.com/n4xh4ck5/n4xd0rk) Listing subdomains about a main domain
+- [**46**Star][3y] [PS] [n3l5/irfartpull](https://github.com/n3l5/irfartpull) PowerShell script utilized to pull several forensic artifacts from a live Win7 and WinXP system without WINRM.
+- [**46**Star][11m] [Shell] [mzpqnxow/gdb-static-cross](https://github.com/mzpqnxow/gdb-static-cross) Shell scripts, sourceable "activate" scripts and instructions for building a statically linked gdb-7.12 gdbserver using cross-compile toolchains. Includes more than 20 statically linked gdbserver executables for different architectures, byte orders and ABIs
+- [**46**Star][1y] [PHP] [mrsqar-ye/door404](https://github.com/mrsqar-ye/door404) Web application backdoor builder
+- [**46**Star][3y] [C] [maximehip/mach_portal](https://github.com/maximehip/mach_portal) iOS 10.1.1 Kernel exploit by Project Zero
+- [**46**Star][1y] [JS] [maltek/swift-frida](https://github.com/maltek/swift-frida) Frida library for interacting with Swift programs.
+- [**46**Star][4m] [JS] [lwindolf/polscan](https://github.com/lwindolf/polscan) Zero-setup SSH-based scanner with extensive visualizations for Debian server inventory, policy compliance and vulnerabilities
+- [**46**Star][1y] [Py] [luis-hebendanz/msf-remote-console](https://github.com/luis-hebendanz/msf-remote-console) A remote msfconsole written in Python 2.7 to connect to the msfrcpd server of metasploit. This tool gives you the ability to load modules permanently as daemon on your server like autopwn2.
+- [**46**Star][7y] [ObjC] [logicalparadox/apnagent-ios](https://github.com/logicalparadox/apnagent-ios) iOS application for testing Apple Push Notification (APN) service payloads.
+- [**46**Star][4y] [C] [laginimaineb/fuzz_zone](https://github.com/laginimaineb/fuzz_zone) Fuzzing utility which enables sending arbitrary SCMs to TrustZone
+- [**46**Star][2y] [Go] [lafolle/flen](https://github.com/lafolle/flen) Flen provides stats on functions/methods lengths in a Golang package.
+- [**46**Star][22d] [Py] [kisspeter/apifuzzer](https://github.com/kisspeter/apifuzzer) Fuzz your application using you Swagger or API Blueprint definition without coding
+- [**46**Star][1y] [Java] [kaushikravikumar/realtimetaxiandroiddemo](https://github.com/kaushikravikumar/realtimetaxiandroiddemo) PubNub Demo that uses a Publish/Subscribe model to implement a realtime map functionality similar to Lyft/Uber.
+- [**46**Star][3y] [C] [jyao1/stm](https://github.com/jyao1/stm)
+- [**46**Star][20d] [Py] [justfoxing/ghidra_bridge](https://github.com/justfoxing/ghidra_bridge) Python 3 bridge to Ghidra's Python scripting
+- [**46**Star][1y] [C] [jthuraisamy/dirt](https://github.com/jthuraisamy/dirt) Driver Initial Reconnaissance Tool
+- [**46**Star][5y] [joshbegley/nsa-stories](https://github.com/joshbegley/nsa-stories) Every document published from the Snowden archive
+- [**46**Star][8m] [Dockerfile] [jmg87/redteam-k8spwn](https://github.com/jmg87/redteam-k8spwn) Reverse shell container for k8s deployments
+- [**46**Star][8m] [JS] [jeremyfetiveau/turbofan-exploit-for-issue-762874](https://github.com/jeremyfetiveau/turbofan-exploit-for-issue-762874) Exploit for a bug in TurboFan's typing of JSCall nodes for builtins kStringLastIndexOf and kStringIndexOf
+- [**46**Star][3y] [Go] [iovisor/iovisor-ovn](https://github.com/iovisor/iovisor-ovn) IOVisor OVN integration
+- [**46**Star][3y] [Go] [inszva/tap0901](https://github.com/inszva/tap0901) Go语言虚拟网卡库,可用于制作对战平台、加速器、防火墙、VPN等
+- [**46**Star][7m] [Go] [ice-ice/dnstunnel](https://github.com/ice-ice/dnstunnel) dns tunnel backdoor DNS隧道后门
+- [**46**Star][7m] [Py] [hucmosin/purelove](https://github.com/hucmosin/purelove) Purelove is a lightweight penetration testing framework, in order to better security testers testing holes with use.
+- [**46**Star][6m] [Go] [hectane/go-acl](https://github.com/hectane/go-acl) Go library for manipulating ACLs on Windows
+- [**46**Star][5y] [C++] [hackedteam/core-macos](https://github.com/hackedteam/core-macos) RCS Agent for Mac
+- [**46**Star][11d] [PHP] [gsoros/gtrader](https://github.com/gsoros/gtrader) a trading strategy trainer, back-tester and bot
+- [**46**Star][2y] [Py] [grierforensics/officedissector](https://github.com/grierforensics/officedissector) Static analysis tools for Microsoft Office Open XML files and documents
+- [**46**Star][2y] [grayddq/hids](https://github.com/grayddq/hids) HIDS全称是Host-based Intrusion Detection System,即基于主机型入侵检测系统,HIDS运行依赖这样一个原理:一个成功的入侵者一般而言都会留下他们入侵的痕迹。本人更倾向于通过记录主机的重要信息变更来发现入侵者。 本项目由两部分组成:一部分osquery、另一部分监控脚本来补充osquery规则的不足; 本文是第一部分osquery规则部分,实现绝大部分主机信息监控。
+- [**46**Star][2y] [gdssecurity/whitepapers](https://github.com/gdssecurity/whitepapers) A collection of publicly released whitepapers
+- [**46**Star][4y] [C] [gdbinit/gatekeerper](https://github.com/gdbinit/gatekeerper) A kernel extension to mitigate Gatekeeper bypasses
+- [**46**Star][2m] [Py] [gcmartinelli/entropy](https://github.com/gcmartinelli/entropy) Binary file entropy visualizer written in Python
+- [**46**Star][6y] [Py] [funsecurity/apk_binder_script](https://github.com/funsecurity/apk_binder_script) apk binder script
+- [**46**Star][6y] [Ruby] [fingertips/wad](https://github.com/fingertips/wad) WAD is a little script that speeds up test runs on Travis-CI by caching the installed bundle on S3.
+- [**46**Star][5m] [C#] [ericzimmerman/prefetch](https://github.com/ericzimmerman/prefetch) Windows Prefetch parser. Supports all known versions from Windows XP to Windows 10.
+- [**46**Star][2y] [Py] [erevus-cn/scan_webshell](https://github.com/erevus-cn/scan_webshell) 很简单的webshell扫描
+- [**46**Star][7m] [Py] [disappeerlabs/disappeer](https://github.com/disappeerlabs/disappeer) A pure Python GUI app for GPG functionality and peer-to-peer encrypted messaging over Tor
+- [**46**Star][8m] [Shell] [damonmohammadbagher/nativepayload_bssid](https://github.com/damonmohammadbagher/nativepayload_bssid) Transferring Backdoor Payload by BSSID and Wireless traffic
+- [**46**Star][3m] [Py] [cve-search/pycvesearch](https://github.com/cve-search/pycvesearch) Python wrapper for the API of cve-search
+- [**46**Star][5m] [Py] [cryptax/angeapk](https://github.com/cryptax/angeapk) Encrypting a PNG into an Android application
+- [**46**Star][1y] [codworth/esp-host](https://github.com/codworth/esp-host) Serve payloads using the esp8266
+- [**46**Star][5m] [C] [chentingz/snifferui](https://github.com/chentingz/snifferui) 基于MFC和WinPcap库开发的网络抓包和协议分析软件
+- [**46**Star][7m] [Py] [capeleidokos/elf_diff](https://github.com/capeleidokos/elf_diff) A tool to compare ELF binaries
+- [**46**Star][4y] [Py] [bwall/markovobfuscate](https://github.com/bwall/markovobfuscate) Python library and tools to obfuscate data based on Markov models built off shared data
+- [**46**Star][4m] [bc-security/defcon27](https://github.com/bc-security/defcon27)
+- [**46**Star][2y] [Assembly] [azya52/seiko](https://github.com/azya52/seiko) Seiko uc-2000 reverse engineering
+- [**46**Star][5y] [Ruby] [averagesecurityguy/prometheus](https://github.com/averagesecurityguy/prometheus) Prometheus Firewall Analyzer
+- [**46**Star][21d] [PS] [automatedlab/automatedlab.common](https://github.com/automatedlab/automatedlab.common) PowerShell module for daily administrative tasks and general helper functions
+- [**46**Star][3y] [C#] [aleksk/lazycopy](https://github.com/aleksk/lazycopy) NTFS minifilter driver that can download file content from a remote location, when it is opened for the first time.
+- [**46**Star][2y] [akhepcat/bridgeap](https://github.com/akhepcat/bridgeap) Automagically bridge any live interface to any idle interface using NATS, DHCP, and HostAP where applicable
+- [**46**Star][7m] [Ruby] [activeadmin-plugins/active_admin_role](https://github.com/activeadmin-plugins/active_admin_role) Role based authorization with CanCanCan for Active Admin
+- [**46**Star][1y] [Py] [aaaddress1/vtmal](https://github.com/aaaddress1/vtmal) Malware Sandbox Emulation in Python @ HITCON 2018
+- [**46**Star][3y] [C++] [55-aa/cve-2016-3308](https://github.com/55-aa/cve-2016-3308) Use CVE-2016-3308 corrupt win32k desktop heap
+- [**45**Star][] [blacckhathaceekr/osint_tips](https://github.com/blacckhathaceekr/osint_tips) This repository was created and developed by Ammar Amer @cry__pto Only. Updates to this repository will continue to arrive until the number of TIPS reach 1000 TIPS .Learn Ethical Hacking and penetration testing.and of course OSINT
+- [**45**Star][12m] [Shell] [witee/note-shadowsocks](https://github.com/witee/note-shadowsocks) 公司网关使用 shadowsocks 搭建翻墙网络
+- [**45**Star][9m] [syst3ma/awesome-baseband-research](https://github.com/syst3ma/awesome-baseband-research) A curated list of awesome baseband research resources
+- [**45**Star][5d] [CSS] [evilsocket/www.pwnagotchi.ai](https://github.com/evilsocket/www.pwnagotchi.ai) (⌐■_■) - pwnagotchi.ai
+- [**45**Star][5y] [Py] [f-secure/mqtt_fuzz](https://github.com/f-secure/mqtt_fuzz) A simple fuzzer for the MQTT protocol
+- [**45**Star][30d] [C] [timwr/cve-2019-2215](https://github.com/timwr/cve-2019-2215)
+- [**45**Star][7y] [JS] [zneak/jsx](https://github.com/zneak/jsx) A Playstation 1 emulator written in Javascript
+- [**45**Star][4y] [C] [shadowsocks/iptables](https://github.com/shadowsocks/iptables) iptables is the userspace command line program used to configure the Linux 2.4.x and later packet filtering ruleset. It is targeted towards system administrators.
+- [**45**Star][27d] [C++] [avast/pelib](https://github.com/avast/pelib) PE file manipulation library.
+- [**45**Star][5y] [Shell] [danielmiessler/iptables](https://github.com/danielmiessler/iptables) An iptables firewall configuration template.
+- [**45**Star][20d] [Shell] [soaringswine/lazyrecon_docker](https://github.com/soaringswine/lazyrecon_docker) Containerized version of my fork of Nahamsec's Lazyrecon.
+- [**45**Star][10m] [Shell] [ticarpi/my-pentesting-repo](https://github.com/ticarpi/my-pentesting-repo) This is a set of tips and reminders for pentesting processes and scripts/programs. Initially for personal use, but if anyone else finds the reminders useful, then enjoy! A few links for useful tools and files. Some tools written by me.
+- [**45**Star][2y] [Go] [onplus/v2ray-sitedat](https://github.com/onplus/v2ray-sitedat)
+- [**45**Star][2m] [Py] [k8gege/cve-2019-0604](https://github.com/k8gege/cve-2019-0604) cve-2019-0604 SharePoint RCE exploit
+- [**45**Star][4y] [Py] [nims11/hostapd.py](https://github.com/nims11/hostapd.py) Python script to make using and configuring hostapd easier
+- [**45**Star][2m] [mpgn/cve-2018-17246](https://github.com/mpgn/cve-2018-17246) CVE-2018-17246 - Kibana LFI < 6.4.3 & 5.6.13
+- [**45**Star][29d] [r0x4r/d4rkxss](https://github.com/r0x4r/d4rkxss) A list of useful payloads and Bypass for Web Application Security and Bug Bounty/CTF
+- [**45**Star][2y] [feeicn/wsvd](https://github.com/FeeiCN/WSVD) White hat Speaks Vulnerabilities Defence《白帽子讲漏洞防御》
+- [**45**Star][3m] [C] [thibault-69/rat-hodin-v2.9](https://github.com/Thibault-69/RAT-Hodin-v2.9) Remote Administration Tool for Linux
+- [**45**Star][3y] [C++] [notglop/sysexec](https://github.com/NotGlop/SysExec) [Windows] Local Privilege Escalation - WebClient
+- [**45**Star][3y] [Py] [eteissonniere/elidecode](https://github.com/ETeissonniere/EliDecode) The tool to decode obfuscated shellcodes using the unicorn and capstone engine
+- [**45**Star][20d] [Assembly] [borjamerino/windows-one-way-stagers](https://github.com/BorjaMerino/Windows-One-Way-Stagers) Windows Stagers to circumvent restrictive network environments
+- [**45**Star][3y] [Py] [threatexpress/subshell](https://github.com/threatexpress/subshell) SubShell is a python command shell used to control and execute commands through HTTP requests to a webshell. SubShell acts as the interface to the remote webshells.
+- [**45**Star][3d] [Assembly] [drenn1/oracles-disasm](https://github.com/Drenn1/oracles-disasm) Disassembly of Oracle of Ages and Seasons
+- [**45**Star][8y] [Py] [zynamics/msdn-plugin-ida](https://github.com/zynamics/msdn-plugin-ida) Imports MSDN documentation into IDA Pro
+- [**45**Star][12m] [Py] [zev3n/shodan_so](https://github.com/zev3n/shodan_so) Search Assistant: Searching shodan via API.
+- [**45**Star][3y] [C++] [vusec/dangsan](https://github.com/vusec/dangsan) dangsan:检测C/C++编写的程序是否有未释放的内存,防止悬挂指针
+- [**45**Star][9d] [Py] [virtadpt/exocortex-halo](https://github.com/virtadpt/exocortex-halo) Various and sundry additional pieces of software I've written to incorporate into my exocortex.
+- [**45**Star][6m] [Py] [virink/awd_auto_attack_framework](https://github.com/virink/awd_auto_attack_framework) AWD 自动化攻击框架
+- [**45**Star][3y] [vduddu/deepweblinks](https://github.com/vduddu/deepweblinks) A huge dump of deep web links
+- [**45**Star][4m] [HTML] [unk9vvn/andtroj](https://github.com/unk9vvn/andtroj) A tool for integrating the Metasploit payload with Android's healthy programs and bypassing antivirus
+- [**45**Star][3y] [Py] [tr3jer/incextensivelist](https://github.com/tr3jer/incextensivelist) 从扫描器结果分离出的一些大公司泛解析ip列表
+- [**45**Star][5y] [Py] [thomaspatzke/poodleattack](https://github.com/thomaspatzke/poodleattack) PoC implementation of the POODLE attack
+- [**45**Star][4y] [C++] [tandasat/remotewritemonitor](https://github.com/tandasat/remotewritemonitor) A tool to help malware analysts tell that the sample is injecting code into other process.
+- [**45**Star][4y] [Py] [stasinopoulos/ztexploit](https://github.com/stasinopoulos/ztexploit) ZTE ZXV10 H108L Router with <= V1.0.01_WIND_A01 - Remote root RCE Exploit
+- [**45**Star][6m] [C] [sqdwr/hidedriver](https://github.com/sqdwr/hidedriver) 之前那份是7600的,每次编译搞得好麻烦。更新一个VS2017可以直接编译的。
+- [**45**Star][11m] [Perl] [spiderlabs/modsecurity-apache](https://github.com/spiderlabs/modsecurity-apache) ModSecurity v3 Apache Connector
+- [**45**Star][5y] [Py] [spiderlabs/groupenum](https://github.com/spiderlabs/groupenum)
+- [**45**Star][7y] [JS] [sofish/imagexss.js](https://github.com/sofish/imagexss.js) 防止外部链接通过图片进行 XSS 攻击
+- [**45**Star][7m] [ObjC] [smilezxlee/zxhookutil](https://github.com/smilezxlee/zxhookutil) 【iOS逆向】Tweak工具函数集,基于theos、monkeyDev
+- [**45**Star][1m] [Py] [skoolkid/skoolkit](https://github.com/skoolkid/skoolkit) A suite of tools for creating disassemblies of ZX Spectrum games.
+- [**45**Star][20d] [JS] [silverwind/tcpie](https://github.com/silverwind/tcpie) CLI tool to ping any TCP port
+- [**45**Star][5m] [Shell] [shiva108/waes](https://github.com/shiva108/waes) CPH:SEC WAES: Web Auto Enum & Scanner - Auto enums website(s) and dumps files as result
+- [**45**Star][7y] [C] [shenghe/pcmanager](https://github.com/shenghe/pcmanager) 金山卫士开源代码。同步于Hg源。为了方便查看和学习,同步到Github
+- [**45**Star][5y] [JS] [shd101wyy/python_reverse_tcp](https://github.com/shd101wyy/python_reverse_tcp) simple reverse tcp backdoor hack
+- [**45**Star][2y] [Py] [seekintoo/chimay-red](https://github.com/seekintoo/chimay-red) Mikrotik RouterOS (6.x < 6.38.5) exploit kit. Reverse engineered from the "Vault 7" WikiLeaks publication.
+- [**45**Star][4y] [Py] [secwiki/scaing-backdoor](https://github.com/secwiki/scaing-backdoor) 新一代Webshell扫描工具
+- [**45**Star][3y] [Shell] [rumesh986/wifianalyse](https://github.com/rumesh986/wifianalyse) simple bash script to monitor wifi signal and ping time
+- [**45**Star][5m] [Ruby] [rootup/autosploit](https://github.com/rootup/autosploit) Autosploit = Automating Metasploit Modules.
+- [**45**Star][4y] [C++] [rootkitsmm/ms15-061](https://github.com/rootkitsmm/ms15-061) Exploiting MS15-061 local Privilege escalation
+- [**45**Star][2m] [Py] [ritvikb99/dark-fantasy-hack-tool](https://github.com/ritvikb99/dark-fantasy-hack-tool) DDOS Tool: To take down small websites with HTTP FLOOD. Port scanner: To know the open ports of a site. FTP Password Cracker: To hack file system of websites.. Banner Grabber: To get the service or software running on a port. (After knowing the software running google for its vulnerabilities.) Web Spider: For gathering web application hacking in…
+- [**45**Star][3y] [C++] [reevesrs24/winmacspoofer](https://github.com/reevesrs24/winmacspoofer) Windows application for spoofing the MAC address
+- [**45**Star][1y] [C++] [redogwu/windows_kernel_exploit](https://github.com/redogwu/windows_kernel_exploit) windows kernel exploit
+- [**45**Star][12d] [reddelexc/hackerone-reports](https://github.com/reddelexc/hackerone-reports) Top disclosed reports from HackerOne
+- [**45**Star][2y] [Ruby] [rapid7/metasploit-aggregator](https://github.com/rapid7/metasploit-aggregator) Created by Jeffrey Martin via the GitHub Connector
+- [**45**Star][2d] [radareorg/cutter-plugins](https://github.com/radareorg/cutter-plugins) A curated list of Community Plugins and Scripts written for Cutter
+- [**45**Star][1y] [Shell] [qiang-yu/shadowsocksvpn-openwrt](https://github.com/qiang-yu/shadowsocksvpn-openwrt) Shadowsocks-libev-full for OpenWrt
+- [**45**Star][2y] [CSS] [pure-l0g1c/apex](https://github.com/pure-l0g1c/apex) Using Social Engineering To Obtain WiFi Passwords
+- [**45**Star][7m] [Rust] [ps1dr3x/lachesis](https://github.com/ps1dr3x/lachesis)
+- [**45**Star][2y] [Java] [portswigger/httpoxy-scanner](https://github.com/portswigger/httpoxy-scanner) A Burp Suite extension that checks for the HTTPoxy vulnerability.
+- [**45**Star][10m] [Py] [platypew/digispark-duckduino](https://github.com/platypew/digispark-duckduino) Poor man's rubber ducky
+- [**45**Star][9m] [JS] [phantom0301/pteye](https://github.com/phantom0301/pteye) Phantom eye——A passive business logic vulnerability auditing tool
+- [**45**Star][3y] [orangetw/bug-bounty-reference](https://github.com/orangetw/bug-bounty-reference) Inspired by
+- [**45**Star][6y] [Py] [obscuresec/random](https://github.com/obscuresec/random) Scripts that aren't PowerShell
+- [**45**Star][2m] [nullsecuritynet/papers](https://github.com/nullsecuritynet/papers) Papers about known hacking, security, hardware, software, computer, network and other ressources.
+- [**45**Star][11m] [Py] [nowsecure/r2lldb](https://github.com/nowsecure/r2lldb) radare2-lldb integration
+- [**45**Star][4m] [JS] [nowsecure/frida-trace](https://github.com/nowsecure/frida-trace) Trace APIs declaratively through Frida.
+- [**45**Star][3y] [C#] [nccgroup/ransomware-simulator](https://github.com/nccgroup/ransomware-simulator) NCC Group Ransomware Simulator
+- [**45**Star][2y] [C++] [nccgroup/psr](https://github.com/nccgroup/psr) Pointer Sequence Reverser - enable you to see how Windows C++ application is accessing a particular data member or object.
+- [**45**Star][6y] [Perl] [nccgroup/ip-reputation-snort-rule-generator](https://github.com/nccgroup/ip-reputation-snort-rule-generator) A tool to generate Snort rules based on public IP reputation data
+- [**45**Star][6y] [nccgroup/frisbeelite](https://github.com/nccgroup/frisbeelite) A GUI-based USB device fuzzer
+- [**45**Star][9m] [C++] [ncatlin/exilesniffer](https://github.com/ncatlin/exilesniffer) A protocol decryption and dissection tool for the game 'Path of Exile'
+- [**45**Star][2y] [Py] [mthbernardes/fses](https://github.com/mthbernardes/fses) fses:从搜索引擎中爬取 url
+- [**45**Star][5y] [Java] [monstersb/hijackandroidpoweroff](https://github.com/monstersb/hijackandroidpoweroff) Android hijack power off
+- [**45**Star][2y] [Py] [monrocoury/admin-panel-finder](https://github.com/monrocoury/admin-panel-finder) A powerful admin login page finder in python
+- [**45**Star][5m] [Py] [misp/mail_to_misp](https://github.com/misp/mail_to_misp) Connect your mail client/infrastructure to MISP in order to create events based on the information contained within mails.
+- [**45**Star][5m] [PS] [miladmsft/threathunt](https://github.com/miladmsft/threathunt) ThreatHunt is a PowerShell repository that allows you to train your threat hunting skills.
+- [**45**Star][1y] [Py] [maoqyhz/droidcc](https://github.com/maoqyhz/droidcc) Android malware detection using deep learning, contains android malware samples, papers, tools etc.
+- [**45**Star][2y] [Go] [luc10/struts-rce-cve-2017-9805](https://github.com/luc10/struts-rce-cve-2017-9805) Apache Struts CVE 2017-9805 漏洞利用代码(Go语言)
+- [**45**Star][3m] [C] [linaro-swg/optee_examples](https://github.com/linaro-swg/optee_examples) OP-TEE Sample Applications
+- [**45**Star][21d] [C] [limithit/ngx_dynamic_limit_req_module](https://github.com/limithit/ngx_dynamic_limit_req_module) The ngx_dynamic_limit_req_module module is used to dynamically lock IP and release it periodically.
+- [**45**Star][2y] [lcatro/think-in-security](https://github.com/lcatro/think-in-security) 从二进制到WEB ,分享我在安全路上的思考与点滴,后面会不断地更新..
+- [**45**Star][1y] [Py] [l4ys/idasignsrch](https://github.com/l4ys/idasignsrch) IDAPython Plugin for searching signatures, use xml signature database from IDA_Signsrch
+- [**45**Star][5y] [Py] [kyrus/ida-translator](https://github.com/kyrus/ida-translator) A plugin for IDA Pro that assists in decoding arbitrary character sets in an IDA Pro database into Unicode, then automatically invoking a web-based translation service (currently Google Translate) to translate that foreign text into English.
+- [**45**Star][3m] [Java] [kxcode/jndi-exploit-bypass-demo](https://github.com/kxcode/jndi-exploit-bypass-demo) Demo code for post
+- [**45**Star][2y] [Py] [kukfa/bindbg](https://github.com/kukfa/bindbg) Binary Ninja plugin that syncs WinDbg to Binary Ninja
+- [**45**Star][3m] [C] [knnspeed/simple-uefi-bootloader](https://github.com/knnspeed/simple-uefi-bootloader) A UEFI bootloader for bare-metal x86-64 applications, including a minimal cross-platform UEFI development environment
+- [**45**Star][7d] [TSQL] [kacos2000/windowstimeline](https://github.com/kacos2000/windowstimeline) SQLite query & Powershell scripts to parse the Windows 10 (v1803+) ActivitiesCache.db
+- [**45**Star][4m] [Shell] [juxhindb/oob-server](https://github.com/juxhindb/oob-server) A Bind9 server for pentesters to use for Out-of-Band vulnerabilities
+- [**45**Star][11m] [Py] [jevinskie/emusca](https://github.com/jevinskie/emusca) Power trace simulator using Unicorn Engine for side channel analysis attack testing
+- [**45**Star][9m] [C] [jay/gethooks](https://github.com/jay/gethooks) GetHooks is a program designed for the passive detection and monitoring of hooks from a limited user account.
+- [**45**Star][4y] [PS] [invoke-ir/wmievent](https://github.com/invoke-ir/wmievent) A PowerShell module to abstract the complexities of Permanent WMI Event Subscriptions
+- [**45**Star][10m] [C] [ilammy/ftrace-hook](https://github.com/ilammy/ftrace-hook) Using ftrace for function hooking in Linux kernel
+- [**45**Star][5y] [Java] [ikkisoft/parrotng](https://github.com/ikkisoft/parrotng) ParrotNG is a tool capable of identifying Adobe Flex applications (SWF) vulnerable to CVE-2011-2461
+- [**45**Star][6y] [C++] [igororlov/trafficlight](https://github.com/igororlov/trafficlight) Detection of traffic lights and driving on red light.
+- [**45**Star][28d] [Py] [hvqzao/report-ng](https://github.com/hvqzao/report-ng) Generate MS Word template-based reports with HP WebInspect / Burp Suite Pro input, own custom data and knowledge base.
+- [**45**Star][2y] [Py] [hansesecure/metasploit-modules](https://github.com/hansesecure/metasploit-modules)
+- [**45**Star][2y] [Ruby] [hammackj/uirusu](https://github.com/hammackj/uirusu) A rubygem for interacting with Virustotal.com's public API v2
+- [**45**Star][8m] [C] [groupgets/purethermal1-firmware](https://github.com/groupgets/purethermal1-firmware) Reference firmware for PureThermal 1 FLIR Lepton Dev Kit
+- [**45**Star][1y] [Dockerfile] [gradiuscypher/grids](https://github.com/gradiuscypher/grids) My network monitoring solution and tools that go along with it.
+- [**45**Star][2y] [PS] [golem445/bunny_payloads](https://github.com/golem445/bunny_payloads) Bash Bunny fun!
+- [**45**Star][2m] [Py] [gojek/dollhouse](https://github.com/gojek/dollhouse)
+- [**45**Star][2y] [C] [geosn0w/ios-10.1.1-project-0-exploit-fork](https://github.com/geosn0w/ios-10.1.1-project-0-exploit-fork) iOS 10.1.1 Project 0 Exploit Compatible with All arm64 devices for Jailbreak Development
+- [**45**Star][3y] [C] [gentilkiwi/basic_rpc](https://github.com/gentilkiwi/basic_rpc) Samples about Microsoft RPC and native API calls in Windows C
+- [**45**Star][4y] [TeX] [gannimo/maldiv](https://github.com/gannimo/maldiv) Malware diversity
+- [**45**Star][2y] [Py] [g4lb1t/smoothcriminal](https://github.com/g4lb1t/smoothcriminal) SmoothCriminal:利用鼠标移动速度,检测沙箱
+- [**45**Star][2y] [Py] [fvrmatteo/dmnp](https://github.com/fvrmatteo/dmnp) Resources of the "Dissecting mobile native code packers. A case study." Zimperium's blogpost.
+- [**45**Star][1y] [c] [f0rb1dd3n/papers](https://github.com/f0rb1dd3n/papers) Some papers and talks that I have done
+- [**45**Star][3y] [Py] [evi1clay/coolpool](https://github.com/evi1clay/coolpool) 仓库已经废弃,新仓库地址
+- [**45**Star][4y] [Py] [equ1nox/srop-poc](https://github.com/equ1nox/srop-poc)
+- [**45**Star][2d] [Py] [entynetproject/geospy](https://github.com/entynetproject/geospy) Geolocation Spy (GeoSpy) is an OSINT analysis and research tool, which allows people to track and execute intelligent social engineering attacks in real time. It was created with the aim of teaching the world how large Internet companies could obtain confidential information such as the status of sessions of their websites or services and contro…
+- [**45**Star][3y] [C] [enferex/asrepl](https://github.com/enferex/asrepl) asrepl: x86-64 assembly REPL
+- [**45**Star][9m] [syst3ma/awesome-baseband-research](https://github.com/syst3ma/awesome-baseband-research) A curated list of awesome baseband research resources
+- [**45**Star][4y] [C++] [diocles/apt-transport-tor](https://github.com/diocles/apt-transport-tor) Tor support for apt
+- [**45**Star][6y] [Java] [devadvance/rootcloakplus](https://github.com/devadvance/rootcloakplus)
+- [**45**Star][2y] [JS] [davidstutz/password-score](https://github.com/davidstutz/password-score) Password scoring library written in Javascript.
+- [**45**Star][8m] [Py] [databricks/mlflow](https://github.com/databricks/mlflow) Open source platform for the machine learning lifecycle
+- [**45**Star][6y] [JS] [cyberpython/wifiscanandmap](https://github.com/cyberpython/wifiscanandmap) A Linux Python application to create maps of 802.11 networks
+- [**45**Star][8m] [C] [cossacklabs/hermes-core](https://github.com/cossacklabs/hermes-core) Security framework for building multi-user end-to-end encrypted data storage and sharing/processing with zero leakage risks from storage and transport infrastructure.
+- [**45**Star][2y] [codemaxx/binary-exploitation](https://github.com/codemaxx/binary-exploitation) Good to know, easy to forget information about binaries and their exploitation!
+- [**45**Star][4y] [Py] [cdhigh/forwarder](https://github.com/cdhigh/forwarder) 简单的HTTP请求转发服务器,配合KIndleEar翻入墙内或绕过部分网站对GAE的IP地址的封锁。灵感来自
+- [**45**Star][7y] [Py] [carlosgprado/milf](https://github.com/carlosgprado/milf) An IDA Pro swiss army knife
+ - [milf](https://github.com/carlosgprado/MILF/blob/master/milf.py) Some useful methods in vulnerability discovery
+- [**45**Star][4y] [Go] [carloop/simulator-program](https://github.com/carloop/simulator-program) Software for the CAN bus simulator on the Rasperry Pi
+- [**45**Star][2y] [Go] [c-bata/systracer](https://github.com/c-bata/systracer) Yet another system call tracer written in Go.
+- [**45**Star][3m] [blackint3/awesome-debugging](https://github.com/blackint3/awesome-debugging) Why Debugging?(为什么要调试?)
+- [**45**Star][9m] [Py] [binaryanalysisplatform/bap-tutorial](https://github.com/binaryanalysisplatform/bap-tutorial) The BAP tutorial
+- [**45**Star][1m] [Py] [bbva/apicheck](https://github.com/bbva/apicheck) The DevSecOps toolset for REST APIs
+- [**45**Star][1y] [C] [bazad/xpc-string-leak](https://github.com/bazad/xpc-string-leak) CVE-2018-4248: Out-of-bounds read in libxpc during string serialization.
+- [**45**Star][1y] [C] [bazad/launchd-portrep](https://github.com/bazad/launchd-portrep) macOS 10.13.5 Mach端口替换漏洞, 可导致提权和SIP绕过(CVE-2018-4280)
+- [**45**Star][10m] [Java] [veracode-research/actuator-testbed](https://github.com/veracode-research/actuator-testbed) A vulnerable application exposing Spring Boot Actuators
+- [**45**Star][27d] [Py] [anvilventures/dawgmon](https://github.com/anvilventures/dawgmon) dawg the hallway monitor - monitor operating system changes and analyze introduced attack surface when installing software
+- [**45**Star][2y] [Py] [anssi-fr/bits_parser](https://github.com/anssi-fr/bits_parser) Extract BITS jobs from QMGR queue and store them as CSV records
+- [**45**Star][9m] [anhkgg/awesome-windbg-extensions](https://github.com/anhkgg/awesome-windbg-extensions) awesome windbg extensions
+- [**45**Star][14d] [Py] [andreafioraldi/cve_searchsploit](https://github.com/andreafioraldi/cve_searchsploit) Search an exploit in the local exploitdb database by its CVE
+- [**45**Star][1y] [C++] [alphaseclab/anti-debug](https://github.com/alphaseclab/anti-debug)
+- [**45**Star][4m] [Py] [aencode/elf_analysis](https://github.com/aencode/elf_analysis) Perform Static and dynamic analysis on 32 bit ELF binary, and automate the process of stack based overflow exploitation.
+- [**45**Star][2y] [Pascal] [0x48piraj/malwarex](https://github.com/0x48piraj/malwarex) Collection of killers !
+- [**45**Star][1y] [Py] [04x/instagramcracker](https://github.com/04x/instagramcracker) Full Speed Instagram Cracker
+- [**45**Star][2y] [001spartan/csfm](https://github.com/001spartan/csfm) Cobalt Strike Field Manual - A quick reference for Windows commands that can be accessed in a beacon console.
+- [**44**Star][2y] [C++] [uxmal/nucleus](https://github.com/uxmal/nucleus) Clone of "Compiler-Agnostic Function Detection in Binaries" source code
+- [**44**Star][5m] [TS] [igio90/hooah-trace](https://github.com/igio90/hooah-trace) Instructions tracing powered by frida
+- [**44**Star][4y] [Py] [enablesecurity/tftptheft](https://github.com/enablesecurity/tftptheft) TFTP Theft is a tool which allows one to quickly scan/bruteforce a tftp server for files and download them instantly
+- [**44**Star][5y] [ObjC] [project-imas/passcode-check](https://github.com/project-imas/passcode-check) iMAS pascode-check, set passcode config profiles and check for conformance
+- [**44**Star][2y] [PHP] [nkkollaw/reserved-subdomains](https://github.com/nkkollaw/reserved-subdomains) List of subdomains that could be candidates for reservation in multitenant app/ subdomain validator for multitenant apps
+- [**44**Star][2y] [Py] [twtrubiks/csrf-tutorial](https://github.com/twtrubiks/csrf-tutorial) Use Django To Introduce CSRF and Cookies , Session
+- [**44**Star][30d] [appsecco/defcon-26-workshop-attacking-and-auditing-docker-containers](https://github.com/appsecco/defcon-26-workshop-attacking-and-auditing-docker-containers) DEF CON 26 Workshop - Attacking & Auditing Docker Containers Using Open Source
+- [**44**Star][3y] [shmilylty/nmap-reference-guide](https://github.com/shmilylty/Nmap-Reference-Guide) Nmap Reference Guide(Nmap参考指南)
+- [**44**Star][2y] [C++] [newbee119/deceptive-document](https://github.com/NewBee119/Deceptive-document) 通过在U盘中伪装正常文件,欺骗用户点击,传播木马的一个demo程序~just for fun~
+- [**44**Star][3y] [JS] [bivainis/ng6-starter-sass](https://github.com/bivainis/NG6-starter-sass) An AngularJS Starter repo for Angular + ES6 + (Webpack or JSPM) by
+- [**44**Star][1y] [Py] [chiefychief/dlink_shell_poc](https://github.com/ChiefyChief/dlink_shell_poc) Dlink 615/815 shell PoC
+- [**44**Star][10m] [Py] [expliot_framework/expliot](https://gitlab.com/expliot_framework/expliot)
+- [**44**Star][2y] [Py] [zedshaw/zadm4py](https://github.com/zedshaw/zadm4py) Zed's Awesome Debug Macros for Python
+- [**44**Star][3y] [JS] [yinzhixin/scanner](https://github.com/yinzhixin/scanner) 网站漏洞扫描平台
+- [**44**Star][5y] [Py] [x0day/bannerscan](https://github.com/x0day/bannerscan)
+- [**44**Star][30d] [C++] [wopss/renhook](https://github.com/wopss/renhook) An open-source x86 / x86-64 hooking library for Windows.
+- [**44**Star][3m] [C] [wongsyrone/transocks-wong](https://github.com/wongsyrone/transocks-wong) A redsocks-like transparent IPv4/IPv6 TCP-to-SOCKS5 redirector (for Linux only)
+- [**44**Star][2y] [Py] [wizh/rop-chainer](https://github.com/wizh/rop-chainer) static program analysis tool that generates return-oriented exploits for ELF binaries
+- [**44**Star][5y] [Lua] [wenjun1055/httpguard](https://github.com/wenjun1055/httpguard) prevent cc attack
+- [**44**Star][3y] [Shell] [vtky/resign](https://github.com/vtky/resign) XCode Project to resign .ipa files
+- [**44**Star][5y] [C] [vincentbernat/ssl-dos](https://github.com/vincentbernat/ssl-dos) Various tools related to SSL denial of service
+- [**44**Star][3y] [Py] [tribalchicken/volatility-filevault2](https://github.com/tribalchicken/volatility-filevault2) Volatility plugin to extract FileVault 2 VMK's
+- [**44**Star][2y] [C#] [tkyu/shadowsocks-csharp-mod](https://github.com/tkyu/shadowsocks-csharp-mod) Shadowsocks for Windows
+- [**44**Star][6m] [thomasthelen/ollydbg-scripts](https://github.com/thomasthelen/ollydbg-scripts) Unpacking scripts for Ollydbg.
+- [**44**Star][3y] [HTML] [theori-io/jscript9-typedarray](https://github.com/theori-io/jscript9-typedarray) Proof-of-Concept exploit for jscript9 bug (MS16-063)
+- [**44**Star][6m] [Py] [tengzhangchao/pyshell](https://github.com/tengzhangchao/pyshell) python backdoor (后门程序)
+- [**44**Star][2d] [stamparm/blackbook](https://github.com/stamparm/blackbook) Blackbook of malware domains
+- [**44**Star][8m] [C] [sslab-gatech/perf-fuzz](https://github.com/sslab-gatech/perf-fuzz)
+- [**44**Star][3m] [JS] [sinakarvandi/windbg2ida](https://github.com/sinakarvandi/windbg2ida) dump each step in Windbg then shows these steps in IDA Windbg2ida
+ - [Windbg脚本](https://github.com/sinakarvandi/windbg2ida/blob/master/windbg2ida.js) JavaScript
+ - [IDA脚本](https://github.com/sinakarvandi/windbg2ida/blob/master/IDAScript.py)
+- [**44**Star][3y] [Shell] [shotokanzh/pa-th-zuzu](https://github.com/shotokanzh/pa-th-zuzu) Checks for PATH substitution vulnerabilities and logs the commands executed by the vulnerable executables
+- [**44**Star][11m] [Py] [serain/kubelet-anon-rce](https://github.com/serain/kubelet-anon-rce) Executes commands in a container on a kubelet endpoint that allows anonymous authentication (default)
+- [**44**Star][2y] [JS] [sensepost/wsproxy](https://github.com/sensepost/wsproxy) A websocket proxy
+- [**44**Star][5y] [securitytube/pcap2xml](https://github.com/securitytube/pcap2xml) Convert 802.11 Packet Traces to XML and SQLITE Format
+- [**44**Star][2m] [Shell] [security-onion-solutions/securityonion-saltstack](https://github.com/security-onion-solutions/securityonion-saltstack)
+- [**44**Star][4y] [Py] [scy-phy/scapy-cip-enip](https://github.com/scy-phy/scapy-cip-enip) EtherNet/IP+CIP dissector for Scapy
+- [**44**Star][26d] [Py] [scwuaptx/peda](https://github.com/scwuaptx/peda) PEDA - Python Exploit Development Assistance for GDB
+- [**44**Star][19d] [Py] [sanix-darker/brute-force-login](https://github.com/sanix-darker/brute-force-login) Brute Force Login in a web site with Python, hack accounts on any website with a good dictionary of words
+- [**44**Star][4y] [C] [samdmarshall/machodiff](https://github.com/samdmarshall/machodiff) mach-o diffing tool
+- [**44**Star][5y] [C] [rpaleari/qtrace](https://github.com/rpaleari/qtrace) QTrace, a "zero knowledge" system call tracer
+- [**44**Star][6y] [IDL] [riverloopsec/apimote](https://github.com/riverloopsec/apimote) ApiMote IEEE 802.15.4/ZigBee Sniffing Hardware
+- [**44**Star][1y] [puuoi/ss-r-4in1](https://github.com/puuoi/ss-r-4in1) 由于秋水逸冰网站国内无法访问,所以为有需要的朋友复制发布到github
+- [**44**Star][4y] [PHP] [pupi1985/marfil](https://github.com/pupi1985/marfil) Marfil is an extension of the Aircrack-ng suite, used to assess WiFi network security. It allows to split the work of performing long running dictionary attacks among many computers.
+- [**44**Star][3y] [C++] [pstolarz/dumpext](https://github.com/pstolarz/dumpext) WinDbg debugger extension library providing various tools to analyse, dump and fix (restore) Microsoft Portable Executable files for both 32 (PE) and 64-bit (PE+) platforms.
+- [**44**Star][10m] [Java] [portswigger/json-web-token-attacker](https://github.com/portswigger/json-web-token-attacker)
+- [**44**Star][3y] [Perl] [philsmd/itunes_backup2hashcat](https://github.com/philsmd/itunes_backup2hashcat) Extract the information needed from the Manifest.plist files to convert it to hashes compatible with hashcat
+- [**44**Star][1y] [C] [petabi/sniffles](https://github.com/petabi/sniffles) Packet Capture Generator for IDS and Regular Expression Evaluation
+- [**44**Star][1y] [Ruby] [pentestgeek/burpcommander](https://github.com/pentestgeek/burpcommander) Ruby command-line interface to Burp Suite's REST API
+- [**44**Star][3y] [HTML] [pcchou/ctf-writeups](https://github.com/pcchou/ctf-writeups) 練習解題跟練習寫 writeups 的地方(?
+- [**44**Star][4m] [Java] [opencryptoproject/jcmathlib](https://github.com/opencryptoproject/jcmathlib) Implementation of mathematical operations with big numbers and elliptic curve points for smart cards with JavaCard platform.
+- [**44**Star][1y] [Py] [olipratt/swagger-conformance](https://github.com/olipratt/swagger-conformance) Python based tool for testing whether your API conforms to its Swagger schema
+- [**44**Star][7y] [JS] [oguzy/ovizart](https://github.com/oguzy/ovizart)
+- [**44**Star][2y] [Py] [nullbites/snakeeater](https://github.com/nullbites/snakeeater) Python implementation of the reflective SO injection technique
+- [**44**Star][1y] [C] [ntraiseharderror/anti-delete](https://github.com/ntraiseharderror/anti-delete) Protects deletion of files with a specified extension using a kernel-mode driver.
+- [**44**Star][11m] [Lua] [nozominetworks/tricotools](https://github.com/nozominetworks/tricotools) Triconex TriStation utilities and tools
+- [**44**Star][2y] [Go] [nicholasjackson/cnitch](https://github.com/nicholasjackson/cnitch) Container Snitch checks running processes under the Docker Engine and alerts if any are found to be running as root
+- [**44**Star][2y] [C#] [mythicmaniac/keyboard-minigames](https://github.com/mythicmaniac/keyboard-minigames) A snake game for the corsair RGB keyboards
+- [**44**Star][3y] [Shell] [mueller-ma/block-ads-via-dns](https://github.com/mueller-ma/block-ads-via-dns) Block ads and malware via local DNS server
+- [**44**Star][4m] [HTML] [mrluanma/shadowsocks-websocket-python](https://github.com/mrluanma/shadowsocks-websocket-python) shadowsocks over WebSocket, support Heroku.
+- [**44**Star][10m] [Py] [misp/misp-stix-converter](https://github.com/misp/misp-stix-converter) A utility repo to assist with converting between MISP and STIX formats
+- [**44**Star][2y] [Py] [milo2012/nmap2nessus](https://github.com/milo2012/nmap2nessus)
+- [**44**Star][7y] [Shell] [metricsgrimoire/cmetrics](https://github.com/metricsgrimoire/cmetrics) CMetrics measures size and complexity for C files
+- [**44**Star][11m] [PS] [mattifestation/bcd](https://github.com/mattifestation/bcd) BCD is a module to interact with boot configuration data (BCD) either locally or remotely using the ROOT/WMI:Bcd* WMI classes. The functionality of the functions in this module mirror that of bcdedit.exe.
+- [**44**Star][1m] [TSQL] [leveryd/vulndocker](https://github.com/leveryd/vulndocker) 漏洞靶场平台
+- [**44**Star][3y] [PS] [lazywinadmin/winformps](https://github.com/lazywinadmin/winformps) PowerShell functions for Windows Forms controls
+- [**44**Star][4m] [Py] [laincode/shodan-seeker](https://github.com/laincode/shodan-seeker) Command-line tool using Shodan API. Generates and downloads CSV results, diffing of historic scanning results, alerts and monitoring of specific ports/IPs, etc.
+- [**44**Star][3y] [C] [kudelskisecurity/sgx-reencrypt](https://github.com/kudelskisecurity/sgx-reencrypt) PoC of an SGX enclave performing symmetric reencryption
+- [**44**Star][2y] [Py] [kudelskisecurity/eddsa-fault-attack](https://github.com/kudelskisecurity/eddsa-fault-attack) Fault attack agaisnt EdDSA demonstrated on an Arduino Nano board, allowing for partial key recovery and fake signatures.
+- [**44**Star][6m] [C] [junxzm1990/pomp](https://github.com/junxzm1990/pomp) 在 Linux 系统上开发 POMP 系统,分析崩溃后的 artifacts
+- [**44**Star][5m] [C#] [jnqpblc/sharptask](https://github.com/jnqpblc/sharptask) SharpTask is a simple code set to interact with the Task Scheduler service api and is compatible with Cobalt Strike.
+- [**44**Star][30d] [Java] [jenkinsci/zap-plugin](https://github.com/jenkinsci/zap-plugin) The OWASP ZAP Jenkins Plugin extends the functionality of the ZAP security tool into a CI Environment.
+- [**44**Star][3y] [Py] [jbremer/pyasm2](https://github.com/jbremer/pyasm2) An easy and powerful assembler engine in python.
+- [**44**Star][2y] [Ruby] [j-0-t/staekka](https://github.com/j-0-t/staekka) Stækka Metasploit - Extenting Metasploit
+- [**44**Star][7d] [Rust] [ironcorelabs/recrypt-rs](https://github.com/ironcorelabs/recrypt-rs) A set of cryptographic primitives for building a multi-hop Proxy Re-encryption scheme, known as Transform Encryption.
+- [**44**Star][8m] [C#] [im0qianqian/codeforceseduhacking](https://github.com/im0qianqian/codeforceseduhacking)
+- [**44**Star][2y] [Py] [illusivenetworks-labs/historicprocesstree](https://github.com/illusivenetworks-labs/historicprocesstree) An Incident Response tool that visualizes historic process execution evidence (based on Event ID 4688 - Process Creation Event) in a tree view.
+- [**44**Star][2y] [Py] [ikoz/jdwp-lib-injector](https://github.com/ikoz/jdwp-lib-injector)
+- [**44**Star][5m] [Jupyter Notebook] [httparchive/bigquery](https://github.com/httparchive/bigquery) BigQuery import and processing pipelines
+- [**44**Star][3y] [PS] [harmj0y/encryptedstore](https://github.com/harmj0y/encryptedstore) Offensive Data Storage
+- [**44**Star][19d] [Perl] [hackerdom/checksystem](https://github.com/hackerdom/checksystem) Checksystem for attack-defense CTF
+- [**44**Star][2y] [Py] [grayddq/pubilcassetinfo](https://github.com/grayddq/pubilcassetinfo) 以甲方安全人员的视角,尽可能收集发现企业的域名和服务器公网IP资产
+- [**44**Star][8m] [Py] [githacktools/ftpbruter](https://github.com/githacktools/ftpbruter) A FTP Server brute forcing tool written in Python 3
+- [**44**Star][2y] [Haskell] [giovanifss/dumb](https://github.com/giovanifss/dumb) Dumain Bruteforcer - a fast and flexible domain bruteforcer
+- [**44**Star][4m] [Lua] [fsiamp/rhapis](https://github.com/fsiamp/rhapis) rhapis:网络入侵检测系统(IDS)模拟器。用户可在模拟环境中执行任意 IDS 操作
+- [**44**Star][7y] [Perl] [fnord0/hurl](https://github.com/fnord0/hurl) hexadecimal & URL encoder + decoder
+- [**44**Star][6m] [Py] [firmadyne/scraper](https://github.com/firmadyne/scraper) Firmware scraper
+- [**44**Star][2y] [C] [fail0verflow/switch-u-boot](https://github.com/fail0verflow/switch-u-boot) "Das U-Boot" Source Tree for the Switch
+- [**44**Star][2y] [Py] [erpscanteam/cve-2018-2380](https://github.com/erpscanteam/cve-2018-2380) PoC of Remote Command Execution via Log injection on SAP NetWeaver AS JAVA CRM
+- [**44**Star][2d] [Py] [entynetproject/arissploit](https://github.com/entynetproject/arissploit) Arissploit Framework is a simple framework designed to master penetration testing tools. Arissploit Framework offers simple structure, basic CLI, and useful features for learning and developing penetration testing tools.
+- [**44**Star][1y] [C#] [enkomio/rundotnetdll](https://github.com/enkomio/rundotnetdll) A simple utility to list all methods of a given .NET Assembly and to invoke them
+- [**44**Star][1y] [Py] [ecx86/shellcode_encoder](https://github.com/ecx86/shellcode_encoder) x64 printable shellcode encoder
+- [**44**Star][10m] [Go] [dsopas/h1-search](https://github.com/dsopas/h1-search) Tool that will request the public disclosures on a specific HackerOne program and show them in a localhost webserver.
+- [**44**Star][7m] [Ruby] [dev-sec/ssl-baseline](https://github.com/dev-sec/ssl-baseline) DevSec SSL/TLS Baseline - InSpec Profile
+- [**44**Star][2y] [Py] [depthsecurity/haveibeenharvested](https://github.com/depthsecurity/haveibeenharvested) Automated HaveIbeenPwned lookups using theharvester results
+- [**44**Star][6m] [Erlang] [darkkey/erlamsa](https://github.com/darkkey/erlamsa) Erlang port of famous radamsa fuzzzer.
+- [**44**Star][4y] [Py] [danse-macabre/ida-efitools](https://github.com/danse-macabre/ida-efitools) Some scripts for IDA Pro to assist with reverse engineering EFI binaries
+- [**44**Star][2y] [Py] [coolervoid/vision2](https://github.com/coolervoid/vision2) Nmap's XML result parse and NVD's CPE correlation to search CVE.
+- [**44**Star][6m] [Py] [contrast-security-oss/djangoat](https://github.com/contrast-security-oss/djangoat) Python and Django implementation of the OWASP RailsGoat project
+- [**44**Star][1y] [C++] [coltonon/reghookex](https://github.com/coltonon/reghookex) External mid-function hooking method to retrieve register data
+- [**44**Star][11m] [Scala] [ccied/ugforum-analysis](https://github.com/ccied/ugforum-analysis) Tools for Automated Analysis of Cybercriminal Markets
+- [**44**Star][1y] [bugbountyresources/resources](https://github.com/bugbountyresources/resources) A Storehouse of resources related to Bug Bounty Hunting collected from different sources. Watch and Star this repo for all latest guides, tools, methodology, platforms tips, and tricks curated by us.
+- [**44**Star][1y] [JS] [brangerbriz/wifi-data-safari](https://github.com/brangerbriz/wifi-data-safari) WiFi Data Safari Workshop
+- [**44**Star][6m] [Py] [bitthebyte/bitblinder](https://github.com/bitthebyte/bitblinder) Burp extension helps in finding blind xss vulnerabilities
+- [**44**Star][4m] [Py] [bieberg0n/bjdns](https://github.com/bieberg0n/bjdns) A dns server which can protect yourself against DNS poisoning in China. / 抗污染 带缓存的dns服务器
+- [**44**Star][1m] [PS] [azure/health-data-and-ai-blueprint](https://github.com/azure/health-data-and-ai-blueprint) Azure Security and Compliance Blueprint - HIPAA/HITRUST Health Data and AI - deployment, and demo that Predicts the Length of Stay in Hospitals
+- [**44**Star][2y] [PS] [attackdebris/babel-sf](https://github.com/attackdebris/babel-sf) Babel Scripting Framework
+- [**44**Star][11m] [Go] [armanshan12/rkms](https://github.com/armanshan12/rkms) RKMS is a highly available key management service, built on top of AWS's KMS.
+- [**44**Star][11m] [C#] [andychiare/netcore2-reverse-proxy](https://github.com/andychiare/netcore2-reverse-proxy) An example of how to implement a reverse proxy in .NET Core 2
+- [**44**Star][5y] [Py] [andrew-morris/kippo_detect](https://github.com/andrew-morris/kippo_detect) Quick proof of concept to detect a Kippo SSH honeypot instance externally
+- [**44**Star][1y] [Py] [ambionics/prestashop-exploits](https://github.com/ambionics/prestashop-exploits) Collection of exploits/POC for PrestaShop cookie vulnerabilities (CVE-2018-13784)
+- [**44**Star][2y] [C#] [amarkulo/openpasswordfilter](https://github.com/amarkulo/openpasswordfilter) An open source custom password filter DLL and userspace service to better protect / control Active Directory domain passwords.
+- [**44**Star][3y] [Py] [allyshka/vhostbrute](https://github.com/allyshka/vhostbrute) Virtual host bruteforcer
+- [**44**Star][1y] [akayn/vault](https://github.com/akayn/resources) Old Code.... and a never-ending reading list.
+- [**44**Star][3y] [Py] [aikinogard/5th_place_solution_facebook_check_ins](https://github.com/aikinogard/5th_place_solution_facebook_check_ins) My solution rank 5th/1212 in Facebook check ins prediction competition at Kaggle
+- [**44**Star][2y] [C] [aerosoul94/dynlib](https://github.com/aerosoul94/dynlib) IDA Pro plugin to aid PS4 user mode ELF reverse engineering.
+- [**44**Star][2m] [HTML] [advanced-threat-research/iocs](https://github.com/advanced-threat-research/iocs) Repository containing IOCs, CSV and MISP JSON from our blogs
+- [**44**Star][6m] [HTML] [adrecon/adrecon](https://github.com/adrecon/adrecon) ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment.
+- [**44**Star][9m] [JS] [adguardteam/stealthmode](https://github.com/adguardteam/stealthmode) a browser extension to stop all kinds of online trackers from receiving any information about you and your actions on the Internet
+- [**44**Star][2y] [Py] [649/memfixed-mitigation-tool](https://github.com/649/memfixed-mitigation-tool) DDoS mitigation tool for sending flush or shutdown commands to vulnerable Memcached servers obtained using Shodan API
+- [**44**Star][1y] [Py] [649/apache-struts-shodan-exploit](https://github.com/649/apache-struts-shodan-exploit) This tool takes advantage of CVE-2018-11776 and Shodan to perform mass exploitation of verified and vulnerable Apache Struts servers.
+- [**44**Star][2y] [Py] [5alt/emu](https://github.com/5alt/emu) code emulator base on unicorn engine
+- [**44**Star][1y] [PHP] [4k-developer/4k-botnet](https://github.com/4k-developer/4k-botnet) A simple and easy to use JS Botnet
+- [**44**Star][2y] [PS] [3gstudent/windows-user-clone](https://github.com/3gstudent/windows-user-clone) Create a hidden account
+- [**44**Star][2y] [PS] [3gstudent/dump-clear-password-after-kb2871997-installed](https://github.com/3gstudent/dump-clear-password-after-kb2871997-installed)
+- [**44**Star][8m] [Py] [0x4d31/honeyku](https://github.com/0x4d31/honeyku) A Heroku-based web honeypot that can be used to create and monitor fake HTTP endpoints (i.e. honeytokens).
+- [**43**Star][1y] [C++] [grcasanova/badusb](https://github.com/grcasanova/badusb) Personal implementation of the BadUSB exploit with an Atmel 8-bit AVR ATTiny85 acting as a HID keyboard
+- [**43**Star][7y] [Shell] [jseidl/torblock](https://github.com/jseidl/torblock) TORBlock is a BASH script to automatically download the list of TOR exit-nodes and add them to your IPTables ruleset.
+- [**43**Star][8y] [C] [hellman/shtest](https://github.com/hellman/shtest) Simple shellcode testing tool.
+- [**43**Star][7m] [Py] [s0md3v/locky](https://github.com/s0md3v/locky) Locky generates "really" strong yet easy to remember passwords.
+- [**43**Star][2d] [Py] [rocky/python-decompile3](https://github.com/rocky/python-decompile3) Python decompiler for 3.7+. Stripped down from uncompyle6 so we can refactor and fix up some long-standing problems
+- [**43**Star][3y] [Go] [madeye/obfs4-tunnel](https://github.com/madeye/obfs4-tunnel) obfs4 tunnel
+- [**43**Star][2m] [JS] [pwnlandia/mhn-splunk](https://github.com/pwnlandia/mhn-splunk) Modern Honey Network App for Splunk
+- [**43**Star][2y] [Py] [warner/python-spake2](https://github.com/warner/python-spake2) pure-python implementation of the SPAKE2 Password-Authenticated Key Exchange algorithm
+- [**43**Star][9m] [PS] [nsacyber/http-connectivity-tester](https://github.com/nsacyber/http-connectivity-tester) Aids in discovering HTTP and HTTPS connectivity issues. #nsacyber
+- [**43**Star][2y] [C] [p0cl4bs/shellcodes](https://github.com/p0cl4bs/shellcodes)
+- [**43**Star][3y] [Py] [tylerha97/findevil](https://github.com/tylerha97/findevil) Volatility plugin to find evil
+- [**43**Star][10m] [Shell] [thelinuxchoice/phurious](https://github.com/thelinuxchoice/phurious) Phishing any website to delivery Windows Reverse Shell payload through DATA URI
+- [**43**Star][6m] [YARA] [decalage2/balbuzard](https://github.com/decalage2/balbuzard) Balbuzard is a package of malware analysis tools in python to extract patterns of interest from suspicious files (IP addresses, domain names, known file headers, interesting strings, etc). It can also crack malware obfuscation such as XOR, ROL, etc by bruteforcing and checking for those patterns.
+- [**43**Star][8m] [Py] [jmagnusson/bgtunnel](https://github.com/jmagnusson/bgtunnel) Initiate SSH tunnels in the background in python
+- [**43**Star][1y] [C++] [johnsonjason/rvdbg](https://github.com/johnsonjason/RVDbg) RVDbg is a debugger/exception handler for Windows processes and has the capability to circumvent anti-debugging techniques. (Cleaner, documented code base being worked on in: core branch)
+- [**43**Star][3y] [Jupyter Notebook] [rmax/scrapydo](https://github.com/rmax/scrapydo) Crochet-based blocking API for Scrapy.
+- [**43**Star][4y] [JS] [praetorian-code/hashcatjs](https://github.com/praetorian-code/hashcatJS) An implementation of the hashcat rules engine in javascript
+- [**43**Star][5y] [JS] [nvisium/grails-nv](https://github.com/nVisium/grails-nV) Vulnerable Grails application
+- [**43**Star][2y] [Py] [secarmalabs/dns-parallel-prober](https://github.com/SecarmaLabs/dns-parallel-prober) PoC for an adaptive parallelised DNS prober
+- [**43**Star][6y] [C++] [zer0mem/showmeyourgongfu](https://github.com/zer0mem/showmeyourgongfu) OpenSrc projects; common multiprojects headers store to ./Common/*category*/
+- [**43**Star][2y] [C#] [zacbrown/hiddentreasure-etw-demo](https://github.com/zacbrown/hiddentreasure-etw-demo) 在内存取证中,使用 ETW(Windows事件追踪) 挖掘宝藏的新方式
+- [**43**Star][5y] [Py] [yelp/mycroft](https://github.com/yelp/mycroft)
+- [**43**Star][4y] [yeahwu/google-ip-range](https://github.com/yeahwu/google-ip-range) 一个超大的 Google 全球 IP 扫描范围库
+- [**43**Star][3y] [Py] [xyntax/drystan](https://github.com/xyntax/drystan) Automated information gathering tool for pentest
+- [**43**Star][11m] [Go] [xpn/blockchainc2](https://github.com/xpn/blockchainc2) A POC C2 server and agent to explore just if/how the Ethereum blockchain can be used for C2
+- [**43**Star][4y] [Py] [xme/mime2vt](https://github.com/xme/mime2vt) Unpack MIME attachments from a file and check them against virustotal.com
+- [**43**Star][2y] [xazlsec/pentest-project-lists](https://github.com/xazlsec/pentest-project-lists) 由信安之路团队成员收集整理的与渗透测试相关的 Github 项目地址,如果你由更好的项目请将项目地址发送到:myh0st@foxmail.com
+- [**43**Star][7m] [YARA] [x64dbg/yarasigs](https://github.com/x64dbg/yarasigs) Various Yara signatures (possibly to be included in a release later).
+- [**43**Star][2y] [Py] [williballenthin/python-ntfs](https://github.com/williballenthin/python-ntfs) Open source Python library for NTFS analysis
+- [**43**Star][1m] [Rust] [whitfin/s3-meta](https://github.com/whitfin/s3-meta) Gather metadata about your S3 buckets
+- [**43**Star][2y] [PHP] [whitewinterwolf/wwwolf-php-webshell](https://github.com/whitewinterwolf/wwwolf-php-webshell) WhiteWinterWolf's PHP web shell
+- [**43**Star][2y] [Shell] [wh1t3rh1n0/pentest-scripts](https://github.com/wh1t3rh1n0/pentest-scripts) Miscellaneous scripts for pentesting
+- [**43**Star][15d] [C] [wallarm/libdetection](https://github.com/wallarm/libdetection) Signature-free approach library to detect injection and commanding attacks
+- [**43**Star][5m] [C] [w1nds/dll2shellcode](https://github.com/w1nds/dll2shellcode) dll转shellcode工具
+- [**43**Star][4m] [C#] [userr00t/universalunityhooks](https://github.com/userr00t/universalunityhooks) A framework designed to hook into and modify methods in unity games via dlls
+- [**43**Star][3m] [Jupyter Notebook] [urcuqui/whitehat](https://github.com/urcuqui/whitehat) Information about my experiences in ethical hacking
+- [**43**Star][2y] [Py] [unkl4b/gitbackdorizer](https://github.com/unkl4b/gitbackdorizer) GitBackdorizer (bad name, I know!) Is a proof of concept from Ulisses Castro's talk - 50 ton of backdoors (
+- [**43**Star][2y] [C++] [technikempire/httpfilteringengine](https://github.com/technikempire/httpfilteringengine) Transparent filtering TLS proxy.
+- [**43**Star][2m] [Py] [teal33t/poopak](https://github.com/teal33t/poopak) POOPAK - TOR Hidden Service Crawler
+- [**43**Star][8m] [tea-deliverers/ctf-writeups](https://github.com/tea-deliverers/ctf-writeups)
+- [**43**Star][1y] [tbgsecurity/weaponize_splunk](https://github.com/tbgsecurity/weaponize_splunk) Weaponizing Splunk Presentation including Splunk Apps for penetration testing.
+- [**43**Star][4y] [t3kn1cs/infosec-rss-feeds](https://github.com/t3kn1cs/infosec-rss-feeds) Information Security RSS Feeds OMPL format
+- [**43**Star][8y] [Py] [supernothing/sergio-proxy](https://github.com/supernothing/sergio-proxy) Automatically exported from code.google.com/p/sergio-proxy
+- [**43**Star][4y] [Py] [strazzere/idant-wanna](https://github.com/strazzere/idant-wanna) ELF header abuse
+- [**43**Star][2y] [Shell] [stayliv3/embedded-device-lab](https://github.com/stayliv3/embedded-device-lab) embedded-device-lab是一个利用qemu模拟真实世界中物联网漏洞的测试环境。由于物联网架构的特殊性,调试分析漏洞通常需要使用qemu模拟执行不同架构的可执行文件。而各种搭建环境,交叉编译是一件费事费力,令人忧伤的工作。 embedded-device-lab利用docker-compose,将各种漏洞调试环境一键化。简单使用两条命令,就可以直接使用gdb或者IDA动态分析相关漏洞。
+- [**43**Star][8m] [C] [souhailhammou/drivers](https://github.com/souhailhammou/drivers) Windows Drivers
+- [**43**Star][6y] [Py] [sketchymoose/totalrecall](https://github.com/sketchymoose/totalrecall) Based on the Volatility framework, this script will run various plugins as well as create a timeline, or use YARA/ClamAV/VirusTotal to find badness.
+- [**43**Star][15d] [C] [simonwunderlich/fft_eval](https://github.com/simonwunderlich/fft_eval) FFT evaluation
+- [**43**Star][2y] [C] [shipcod3/irc-bot-hunters](https://github.com/shipcod3/irc-bot-hunters) a collection of Metasploit PoC exploits for IRC Botnets that allows RCE
+- [**43**Star][4y] [Py] [sh1nu11bi/routerhunter-2.0](https://github.com/sh1nu11bi/routerhunter-2.0) Testing vulnerabilities in devices and routers connected to the Internet.
+- [**43**Star][4y] [C++] [sekoialab/binaryinjectionmitigation](https://github.com/sekoialab/binaryinjectionmitigation) Two tools used during our analysis of the Microsoft binary injection mitigation implemented in Edge TH2.
+- [**43**Star][2y] [Py] [secdec/xssmap](https://github.com/secdec/xssmap) Intelligent XSS detection tool that uses human techniques for looking for reflected cross-site scripting (XSS) vulnerabilities
+- [**43**Star][2y] [Py] [savio-code/hexorbase](https://github.com/savio-code/hexorbase) Automatically exported from code.google.com/p/hexorbase
+- [**43**Star][2y] [Py] [robertbaruch/polychip](https://github.com/robertbaruch/polychip) Python app to extract a netlist of NMOS transistors from an Inkscape diagram.
+- [**43**Star][10m] [Makefile] [revng/orchestra](https://github.com/revng/orchestra) Helper repository to easily build all the rev.ng components
+- [**43**Star][2y] [C] [rbaron/fitless](https://github.com/rbaron/fitless) A collection of toy firmwares for the ID115 fitness tracker
+- [**43**Star][5y] [JS] [rapid7/dllhijackauditkit](https://github.com/rapid7/dllhijackauditkit) This toolkit detects applications vulnerable to DLL hijacking (released in 2010)
+- [**43**Star][3y] [Py] [ramadhanamizudin/python-icap-yara](https://github.com/ramadhanamizudin/python-icap-yara) An ICAP Server with yara scanner for URL and content.
+- [**43**Star][1y] [Shell] [philcryer/wpa2own](https://github.com/philcryer/wpa2own) Use hashcat to crack WPA2 PSK (Pre-Shared Key) passwords!
+- [**43**Star][8y] [pentestmonkey/timing-attack-checker](https://github.com/pentestmonkey/timing-attack-checker) Tool to help identify timing attacks
+- [**43**Star][3m] [Py] [partoftheworld/ghidrapy_functionstringassociate](https://github.com/partoftheworld/ghidrapy_functionstringassociate) It does the same thing as plugin FunctionStringAssociate for IDA, Now the script just works, in the future it is planned to increase the speed of work and bring it closer to the speed of the plugin.
+- [**43**Star][2y] [Go] [ocmdev/rita](https://github.com/ocmdev/rita) This repo is deprecated. Please use activecm/rita instead.
+- [**43**Star][7m] [C#] [nyan-x-cat/lime-downloader](https://github.com/nyan-x-cat/lime-downloader) Simple Malware Downloader
+- [**43**Star][2y] [C] [noahhhryan/krackattacks-test](https://github.com/noahhhryan/krackattacks-test)
+- [**43**Star][1y] [Py] [nirizr/pytest-idapro](https://github.com/nirizr/pytest-idapro) A pytest module for The Interactive Disassembler and IDAPython; Record and Replay IDAPython API, execute inside IDA or use mockups of IDAPython API.
+- [**43**Star][2y] [Py] [nikshepsvn/scatterfly](https://github.com/nikshepsvn/scatterfly) An attempt to improve user privacy by intelligent data obfuscation.
+- [**43**Star][5y] [Shell] [netspi/heapdump-ios](https://github.com/netspi/heapdump-ios) Dump IOS application heap space from memory
+- [**43**Star][2y] [Py] [neo23x0/imphash-generator](https://github.com/neo23x0/imphash-generator) PE Import Hash Generator
+- [**43**Star][2y] [Py] [nccgroup/royal_apt](https://github.com/nccgroup/royal_apt) Royal APT - APT15 - Related Information from NCC Group Cyber Defense Operations Research
+- [**43**Star][3m] [Java] [nalen98/ebpf-for-ghidra](https://github.com/nalen98/ebpf-for-ghidra) eBPF Processor for Ghidra
+- [**43**Star][1y] [C] [n30m1nd/linux_heap_exploitation_intro_series](https://github.com/n30m1nd/linux_heap_exploitation_intro_series) Various PoCs and challenges regarding heap userland exploitation
+- [**43**Star][5y] [Py] [mubix/pykek](https://github.com/mubix/pykek) Kerberos Exploitation Kit
+- [**43**Star][2y] [Py] [mthbernardes/ipchecker](https://github.com/mthbernardes/ipchecker) Check if a IP is from tor or is a malicious proxy
+- [**43**Star][1y] [mrowensnobody/presentation](https://github.com/mrowensnobody/presentation)
+- [**43**Star][3y] [Py] [mrgeffitas/sandbox_tester](https://github.com/mrgeffitas/sandbox_tester)
+- [**43**Star][2y] [Py] [mixkorshun/django-antispam](https://github.com/mixkorshun/django-antispam) Spam protection tools for django applications.
+- [**43**Star][8m] [Py] [misp/misp-taxii-server](https://github.com/misp/misp-taxii-server) An OpenTAXII Configuration for MISP
+- [**43**Star][3y] [Java] [miracle963/zjdroid](https://github.com/miracle963/zjdroid) 基于Xposed Framewrok的动态逆向分析模块,逆向分析者可以通过ZjDroid完成以下工作: DEX文件的内存dump 基于Dalvik关键指针的内存BackSmali,有效破解加固应用 敏感API的动态监控 指定内存区域数据dump 获取应用加载DEX信息。 获取指定DEX文件加载类信息。 dump Dalvik java堆信息。 在目标进程动态运行lua脚本。
+- [**43**Star][4m] [Java] [maxieds/chameleonminilivedebugger](https://github.com/maxieds/chameleonminilivedebugger) User-friendly GUI for the Chameleon Mini. Android app that connects to the ChameleonMini via USB and displays the live NFC frame logging stats output by the device. This app is much more convenient than having a terminal connection on a large-ish laptop for reconnaissance purposes.
+- [**43**Star][3y] [Batchfile] [maldiohead/idapin](https://github.com/maldiohead/idapin) plugin of ida with pin
+- [**43**Star][2y] [Java] [m301/rdroid](https://github.com/m301/rdroid) [Android RAT] Remotely manage your android phone using PHP Interface
+- [**43**Star][1y] [Ruby] [lucifer1993/lasercrack](https://github.com/lucifer1993/lasercrack) Lasercrack-可扩展的Ruby暴力破解框架
+- [**43**Star][10m] [Go] [konstantin8105/ddos](https://github.com/konstantin8105/ddos) DDoS attack. Creating infinite http GET requests.
+- [**43**Star][1m] [Py] [kavishgr/xmlrpc-bruteforcer](https://github.com/kavishgr/xmlrpc-bruteforcer) An XMLRPC brute forcer targeting Wordpress written in Python 3. In the context of xmlrpc brute forcing, its faster than Hydra and WpScan. It can brute force 1000 passwords per second.
+- [**43**Star][17d] [PS] [kacos2000/win10](https://github.com/kacos2000/win10) Win 10 related research
+- [**43**Star][5m] [AutoIt] [jschicht/usnjrnl2csv](https://github.com/jschicht/usnjrnl2csv) Parser for $UsnJrnl on NTFS
+- [**43**Star][3y] [C#] [jacobmisirian/dbltekgoippwn](https://github.com/jacobmisirian/dbltekgoippwn) Tool to check if an IP of a DblTek GoIP is vulnerable to a challenge-response login system, send SMS messages from the system, execute remote commands botnet style, and generate responses to challenges.
+- [**43**Star][2y] [JS] [issue-db/issue-db](https://github.com/issue-db/issue-db)
+- [**43**Star][2y] [C++] [iricartb/buffer-overflow-vulnerability-services-tester-tool](https://github.com/iricartb/buffer-overflow-vulnerability-services-tester-tool) Ivan Ricart Borges - Program to detect the existence of remote/local stack-based buffer-overflow vulnerabilities using the standard communication protocol for each service.
+- [**43**Star][1y] [JS] [intoli/slice](https://github.com/intoli/slice) A JavaScript implementation of Python's negative indexing and extended slice syntax.
+- [**43**Star][5m] [Shell] [infosecn1nja/ycsm](https://github.com/infosecn1nja/ycsm) This is a quick script installation for resilient redirector using nginx reverse proxy and letsencrypt compatible with some popular Post-Ex Tools (Cobalt Strike, Empire, Metasploit, PoshC2).
+- [**43**Star][8m] [Py] [ihaveamac/switchfs](https://github.com/ihaveamac/switchfs) FUSE (Filesystem in Userspace) scripts for Nintendo Switch files
+- [**43**Star][1y] [Py] [hillsbird/db_security](https://github.com/hillsbird/db_security) 数据库安全审计平台
+- [**43**Star][3y] [Py] [hewlettpackard/reconbf](https://github.com/hewlettpackard/reconbf) Recon system hardening scanner
+- [**43**Star][2y] [Go] [heptiolabs/ironclad](https://github.com/heptiolabs/ironclad) Web Application Firewall (WAF) on Kubernetes
+- [**43**Star][3y] [C] [hamza-megahed/ctfs](https://github.com/hamza-megahed/ctfs) Walkthrough some CTFs
+- [**43**Star][2y] [Py] [gregversteeg/gaussianize](https://github.com/gregversteeg/gaussianize) Transforms univariate data into normally distributed data
+- [**43**Star][2y] [Py] [grayddq/passiveseccheck](https://github.com/grayddq/passiveseccheck) 自动化被动扫描系统分为数据源、数据处理、漏洞验证等三个子系统,本系统属于漏洞验证部分,根据提供的数据进行分布式安全验证,确定是否包含相关严重漏洞。
+- [**43**Star][4m] [Py] [giantbranch/gray-hat-python-src](https://github.com/giantbranch/gray-hat-python-src) python灰帽子--黑客与逆向工程师的Python编程之道的课本各章源码,我实验的程序等
+- [**43**Star][1y] [C] [gcwnow/linux](https://github.com/gcwnow/linux) Linux kernel for GCW Zero (Ingenic JZ4770)
+- [**43**Star][6y] [Py] [fygrave/honeyntp](https://github.com/fygrave/honeyntp) NTP logger/honeypot
+- [**43**Star][2y] [Py] [ethvpn/code](https://github.com/ethvpn/code) The sourecode
+- [**43**Star][2m] [C#] [emoose/xvdtool](https://github.com/emoose/xvdtool) A command-line tool for manipulating Xbox One XVD & XVC files.
+- [**43**Star][12m] [PHP] [eboda/35c3](https://github.com/eboda/35c3) Challenges I created for 35c3
+- [**43**Star][3y] [Shell] [dominikstyp/auto-reaver](https://github.com/dominikstyp/auto-reaver) Auto Reaver - multiple access point attack using Reaver
+- [**43**Star][2y] [JS] [davidaq/vodo](https://github.com/davidaq/vodo) 开源HTTP抓包
+- [**43**Star][1y] [Py] [cmu-sei/cyobstract](https://github.com/cmu-sei/cyobstract) A tool to extract structured cyber information from incident reports.
+- [**43**Star][9m] [Py] [chriswmorris/metaforge](https://github.com/chriswmorris/metaforge) An OSINT Metadata analyzing tool that filters through tags and creates reports
+- [**43**Star][1y] [Py] [christhecoolhut/easy-pickings](https://github.com/christhecoolhut/easy-pickings) Automatic function exporting and linking for fuzzing cross-architecture binaries.
+- [**43**Star][1y] [Py] [chrismaddalena/fox](https://github.com/chrismaddalena/fox) A companion tool for BloodHound offering Active Directory statistics and number crunching
+- [**43**Star][1y] [bulentrahimkazanci/windbg-cheat-sheet](https://github.com/bulentrahimkazanci/windbg-cheat-sheet) A practical guide to analyze memory dumps of .Net applications by using Windbg
+- [**43**Star][30d] [Py] [bsdphk/pyreveng](https://github.com/bsdphk/pyreveng) Software Reverse Engineering toolkit in python
+- [**43**Star][4y] [Shell] [brianwrf/roothelper](https://github.com/brianwrf/roothelper) A Bash script that downloads and unzips scripts that will aid with privilege escalation on a Linux system.
+- [**43**Star][1y] [Py] [br3akp0int/gqlparser](https://github.com/br3akp0int/gqlparser) A repository for GraphQL Extension for Burp Suite
+- [**43**Star][4y] [Py] [borjamerino/tlsinjector](https://github.com/borjamerino/tlsinjector) Python script to inject and run shellcodes through TLS callbacks
+- [**43**Star][7y] [Py] [bonsaiviking/tarpyt](https://github.com/bonsaiviking/tarpyt) A web spider's worst nightmare.
+- [**43**Star][4m] [JS] [bendrucker/hapi-require-https](https://github.com/bendrucker/hapi-require-https) hapi http -> https redirection for servers behind a reverse proxy
+- [**43**Star][12m] [Py] [bayotop/sink-logger](https://github.com/bayotop/sink-logger) sink-logger: Burp扩展,无缝记录所有传递到已知JavaScript sinks的数据
+- [**43**Star][2y] [C] [bartblaze/matire](https://github.com/bartblaze/matire) Malware Analysis, Threat Intelligence and Reverse Engineering: LABS
+- [**43**Star][2m] [PHP] [auth0/auth0-drupal](https://github.com/auth0/auth0-drupal) Auth0 Drupal Plugin - Single Sign On, Social Login, SAML and AD/LDAP Integration, User Management
+- [**43**Star][2y] [JS] [auth0-blog/aliens-go-home-part-1](https://github.com/auth0-blog/aliens-go-home-part-1) GitHub repository that accompanies the first article of the "Developing Games with React, Redux, and SVG" series.
+- [**43**Star][2y] [JS] [ascendr/spectre-chrome](https://github.com/ascendr/spectre-chrome) Spectre JS PoC for Chrome
+- [**43**Star][3y] [C++] [andreybazhan/dbgext](https://github.com/andreybazhan/dbgext) Debugger extension for the Debugging Tools for Windows (WinDbg, KD, CDB, NTSD).
+- [**43**Star][4y] [C#] [alphadelta/dumb](https://github.com/alphadelta/dumb) A fast and advanced ransomware PoC
+- [**43**Star][3m] [TSQL] [abrignoni/dfir-sql-query-repo](https://github.com/abrignoni/dfir-sql-query-repo) Collection of SQL query templates for digital forensics use by platform and application.
+- [**43**Star][6y] [1an0rmus/yara](https://github.com/1an0rmus/yara) Yara rules
+- [**42**Star][1m] [C#] [uknowsec/sharpcheckinfo](https://github.com/uknowsec/sharpcheckinfo) 收集目标主机信息,包括最近打开文件,系统环境变量和回收站文件等等
+- [**42**Star][1y] [Go] [arnaucube/flock-botnet](https://github.com/arnaucube/flock-botnet) Twitter botnet with autonomous bots replying tweets with text generated based on probabilities in Markov chains
+- [**42**Star][2m] [Lua] [dsasmblr/cheat-engine](https://github.com/dsasmblr/cheat-engine) Cheat Engine scripts, tutorials, tools, and more.
+- [**42**Star][4m] [Lua] [ricterz/my-nse-scripts](https://github.com/ricterz/my-nse-scripts) My NSE Scripts
+- [**42**Star][4y] [Lua] [fireeye/synfulknock](https://github.com/fireeye/synfulknock)
+- [**42**Star][2y] [Py] [undeadsec/checkurl](https://github.com/undeadsec/checkurl) Detect evil urls that uses IDN Homograph Attack.
+- [**42**Star][16d] [Py] [pagekite/pysocksipychain](https://github.com/pagekite/pysocksipychain) Modified socks.py which supports chained proxies
+- [**42**Star][1m] [C] [wireghoul/sploit-dev](https://github.com/wireghoul/sploit-dev) Exploits and research stuffs
+- [**42**Star][3y] [Go] [v2ray/experiments](https://github.com/v2ray/experiments) Repository for experimental code
+- [**42**Star][10m] [TS] [javascript-obfuscator/react-native-obfuscating-transformer](https://github.com/javascript-obfuscator/react-native-obfuscating-transformer) Obfuscation for React Native bundles
+- [**42**Star][2m] [C#] [k8gege/porttran](https://github.com/k8gege/porttran) PortTran (.NET端口转发工具,支持任意权限)
+- [**42**Star][1y] [Perl] [t3hp0rp/hitcondockerfile](https://github.com/t3hp0rp/hitcondockerfile) Dockerfile for hitcon
+- [**42**Star][1m] [mohitkhemchandani/oscp_bible](https://github.com/mohitkhemchandani/oscp_bible) This is a collection of resources, scripts, bookmarks, writeups, notes, cheatsheets that will help you in OSCP Preparation as well as for general pentesting and learning. If you feel like you can contribute in it. Please do that, I'll appreciate you.
+- [**42**Star][7m] [kungfu-pro/kungfu-pro-issues](https://github.com/kungfu-pro/kungfu-pro-issues) kungfu pro 透明代理, 企业科学上网解决方案
+- [**42**Star][2y] [Py] [t7hm1/pyddos](https://github.com/t7hm1/pyddos) DDOS python script
+- [**42**Star][6m] [Py] [kryptoslogic/rdppot](https://github.com/kryptoslogic/rdppot) RDP honeypot
+- [**42**Star][2d] [Py] [3xploit-db/pentest-tools-framework](https://github.com/3xploit-db/pentest-tools-framework) Pentest Tools Framework is a database of exploits, Scanners and tools for penetration testing. Pentest is a powerful framework includes a lot of tools for beginners. You can explore kernel vulnerabilities, network vulnerabilities
+- [**42**Star][1y] [C++] [3gstudent/windows-eventlog-bypass](https://github.com/3gstudent/Windows-EventLog-Bypass) Use subProcessTag Value From TEB to identify Event Log Threads
+- [**42**Star][10m] [C++] [bytecode77/slui-file-handler-hijack-privilege-escalation](https://github.com/bytecode77/slui-file-handler-hijack-privilege-escalation) 利用 slui.exe 的文件 Handler 劫持漏洞实现 UAC 绕过和本地提权
+- [**42**Star][2m] [C++] [lifting-bits/klee](https://github.com/lifting-bits/klee) KLEE Symbolic Execution Engine
+- [**42**Star][2y] [Py] [klsecservices/ios_mips_gdb](https://github.com/klsecservices/ios_mips_gdb) Cisco MIPS debugger
+- [**42**Star][2y] [Py] [miss-d/blindy](https://github.com/miss-d/blindy) Simple script to automate brutforcing blind sql injection vulnerabilities
+- [**42**Star][1m] [C] [zhangboyang/pal3patch](https://github.com/zhangboyang/pal3patch) 《仙剑奇侠传三》《仙剑奇侠传三外传·问情篇》分辨率补丁
+- [**42**Star][2y] [C] [z4ziggy/zigfrid](https://github.com/z4ziggy/zigfrid) A Passive RFID fuzzer
+- [**42**Star][3y] [C] [yosqueoy/ditsnap](https://github.com/yosqueoy/ditsnap) An inspection tool for Active Directory database
+- [**42**Star][10m] [xisigr/paper](https://github.com/xisigr/paper) Web&Browser Security
+- [**42**Star][4y] [PHP] [xibijj/awvscan](https://github.com/xibijj/awvscan) New On Live Web Vul Scan
+- [**42**Star][6m] [C] [x899/ssh_brute_force](https://github.com/x899/ssh_brute_force) Crack SSH Password using Dictionary and Brute Force Method
+- [**42**Star][7m] [x41sec/slides](https://github.com/x41sec/slides)
+- [**42**Star][3d] [C] [wuseman/tg799vac-xtreme-17.2-mint](https://github.com/wuseman/tg799vac-xtreme-17.2-mint) My personal unique wiki for hacking the router firmware used by (Telia)TG799vac Xtream v17.2-MINT delivered from Technicolor
+- [**42**Star][11m] [Perl] [wireghoul/doona](https://github.com/wireghoul/doona) Network based protocol fuzzer
+- [**42**Star][7y] [C++] [vlad902/findcrypt2-with-mmx](https://github.com/vlad902/findcrypt2-with-mmx) IDA Pro findcrypt2 plug-in with MMX AES instruction finding support
+- [**42**Star][6m] [C++] [vanhauser-thc/afl-pin](https://github.com/vanhauser-thc/afl-pin) run AFL with pintool
+- [**42**Star][3y] [Py] [uber/usb2fac](https://github.com/uber/usb2fac) Enabling 2fac confirmation for newly connected USB devices
+- [**42**Star][1m] [JS] [tineola/tineola](https://github.com/tineola/tineola) Blockchains. Destruction. Mayhem.
+- [**42**Star][3m] [Go] [threatstack/authkeys](https://github.com/threatstack/authkeys) A tool for getting SSH keys out of LDAP
+- [**42**Star][4d] [PS] [thecjw/scoop-retools](https://github.com/thecjw/scoop-retools) Scoop bucket for reverse engineering tools
+- [**42**Star][2y] [Shell] [taherio/redi](https://github.com/taherio/redi) Automated script for setting up CobaltStrike redirectors (nginx reverse proxy, letsencrypt)
+- [**42**Star][3y] [Py] [t0kx/exploit-cve-2015-3306](https://github.com/t0kx/exploit-cve-2015-3306) ProFTPd 1.3.5 - (mod_copy) Remote Command Execution exploit and vulnerable container
+- [**42**Star][3m] [Pawn] [stypr/tmpleak](https://github.com/stypr/tmpleak) Leak off used temporary workspaces for ctf and wargames!
+- [**42**Star][5y] [Java] [ssilence/scotty](https://github.com/ssilence/scotty) java proxy
+- [**42**Star][6y] [Ruby] [sophsec/ffi-pcap](https://github.com/sophsec/ffi-pcap) Ruby FFI bindings for libpcap.
+- [**42**Star][1m] [Py] [sh3llcod3/airscript-ng](https://github.com/sh3llcod3/airscript-ng) A python script to simplify the process of auditing wireless networks.
+- [**42**Star][9m] [Py] [sendgrid/krampus](https://github.com/sendgrid/krampus) The original AWS security enforcer™
+- [**42**Star][8d] [Py] [securestate/king-phisher-plugins](https://github.com/securestate/king-phisher-plugins) Plugins for the King Phisher open source phishing campaign toolkit.
+- [**42**Star][2y] [Py] [se55i0n/cwebscanner](https://github.com/se55i0n/cwebscanner) 快速扫描C段web应用,获取请求状态code、server、title信息
+- [**42**Star][3y] [KiCad Layout] [salmg/magspoofpi](https://github.com/salmg/magspoofpi) MagSpoof for Raspberry PI GPIO
+- [**42**Star][6m] [Visual Basic .NET] [s1egesystems/ghostsquadhackers-javascript-encrypter-encoder](https://github.com/s1egesystems/ghostsquadhackers-javascript-encrypter-encoder) Encrypt/Encode your Javascript code. (Windows Scripting)
+- [**42**Star][2y] [Shell] [rogdham/cve-2018-11235](https://github.com/rogdham/cve-2018-11235) PoC exploit for CVE-2018-11235 allowing RCE on git clone --recurse-submodules
+- [**42**Star][8m] [PS] [robbridgeman/adimporter](https://github.com/robbridgeman/adimporter) Credit to Helge Klein -
+- [**42**Star][2m] [Java] [revolver-ocelot-saa/ghidrax64dbg](https://github.com/revolver-ocelot-saa/ghidrax64dbg) Extract annoations from Ghidra into an X32/X64 dbg database
+- [**42**Star][2m] [Java] [radioegor146/native-obfuscator](https://github.com/radioegor146/native-obfuscator) Java .class to .cpp converter for use with JNI
+- [**42**Star][1y] [Shell] [r0hi7/tortipi](https://github.com/r0hi7/tortipi) Tor based Raspberry π hotspot
+- [**42**Star][8m] [pyn3rd/cve-2019-2618](https://github.com/pyn3rd/cve-2019-2618) Weblogic Unrestricted File Upload
+- [**42**Star][2y] [PHP] [paragonie/hpkp-builder](https://github.com/paragonie/hpkp-builder) Build HTTP Public-Key-Pinning headers from a JSON file (or build them programmatically)
+- [**42**Star][2y] [C] [opsxcq/exploit-cve-2017-5715](https://github.com/opsxcq/exploit-cve-2017-5715) Spectre exploit
+- [**42**Star][4m] [C] [operationnt414c/shellsecbat](https://github.com/operationnt414c/shellsecbat) Henkaku plugin which displays seconds and battery percent in status bar
+- [**42**Star][3y] [Ruby] [openshift/openshift-extras](https://github.com/openshift/openshift-extras) Unofficial tools for use with OpenShift
+- [**42**Star][5m] [JS] [oasis-open/cti-stix-visualization](https://github.com/oasis-open/cti-stix-visualization) OASIS TC Open Repository: Lightweight visualization for STIX 2.0 objects and relationships
+- [**42**Star][5d] [ntdiff/headers](https://github.com/ntdiff/headers)
+- [**42**Star][5y] [C] [ntddk/temu](https://github.com/ntddk/temu) TEMU: The BitBlaze Dynamic Analysis Component (with some patches).
+- [**42**Star][3m] [Java] [nowsecure/cybertruckchallenge19](https://github.com/nowsecure/cybertruckchallenge19) Android security workshop material taught during the CyberTruck Challenge 2019 (Detroit USA).
+- [**42**Star][2y] [C] [nixawk/awesome-windows-debug](https://github.com/nixawk/awesome-windows-debug) Debug Windows Application / Kernel
+- [**42**Star][12d] [Ruby] [ninoseki/mihari](https://github.com/ninoseki/mihari) mihari is a sidekick tool for TheHive to monitor malicious hosts
+- [**42**Star][4y] [C] [nikolajschlej/zeronights2015](https://github.com/nikolajschlej/zeronights2015) My UEFI security talk on ZeroNights 2015
+- [**42**Star][5y] [Py] [nihilus/idasimulator](https://github.com/nihilus/idasimulator) a plugin that extends IDA's conditional breakpoint support, making it easy to augment / replace complex executable code inside a debugged process with Python code.
+- [**42**Star][4y] [C++] [nihilus/guid-finder](https://github.com/nihilus/guid-finder) find GUID/UUIDs
+- [**42**Star][2m] [Py] [nickstadb/poc](https://github.com/nickstadb/poc) Repo for proof of concept exploits and tools.
+- [**42**Star][3y] [C] [nextsecurity/gozi-mbr-rootkit](https://github.com/nextsecurity/gozi-mbr-rootkit) Gozi-MBR-rootkit Bootkit Modified
+- [**42**Star][1y] [Java] [narkisr/nmap4j](https://github.com/narkisr/nmap4j) A Java Nmap wrapper
+- [**42**Star][4y] [Py] [nanshihui/normal_hark_lite](https://github.com/nanshihui/normal_hark_lite) 通用的POC检测框架,有足够的POC,就可以找出相应的漏洞
+- [**42**Star][5y] [Py] [nanopony/apache-scalp](https://github.com/nanopony/apache-scalp) Scalp!/Anathema is a log analyzer for web server (Apache, nginx) [Python3]
+- [**42**Star][1m] [munsiwoo/ctf-web-prob](https://github.com/munsiwoo/ctf-web-prob) my ctf web probs
+- [**42**Star][3y] [C++] [mrexodia/idapatch](https://github.com/mrexodia/idapatch) IDA plugin to patch IDA Pro in memory.
+- [**42**Star][1y] [Py] [modzero/interestingfilescanner](https://github.com/modzero/interestingfilescanner) Burp extension
+- [**42**Star][2m] [Py] [mitre-attack/attack-scripts](https://github.com/mitre-attack/attack-scripts) Scripts and a (future) library to improve users' interactions with the ATT&CK content
+- [**42**Star][1m] [mikalv/awesome-i2p](https://github.com/mikalv/awesome-i2p) A curated list of awesome I2P implementations, libraries, resources, projects, and shiny things. I2P is an anonymous overlay network - a network within a network. It is intended to protect communication from dragnet surveillance and monitoring by third parties such as ISPs.
+- [**42**Star][1y] [C#] [micli/netcoredebugging](https://github.com/micli/netcoredebugging) A repository maintains the book of ".NET Core application debugging" sample code.
+- [**42**Star][11m] [PS] [mburrough/pentestingazureapps](https://github.com/mburrough/pentestingazureapps) Script samples from the book Pentesting Azure Applications (2018, No Starch Press)
+- [**42**Star][2y] [Assembly] [martinvelez/w32evol](https://github.com/martinvelez/w32evol) An obfuscation engine which obfuscates Intel x86 32-bit binary code.
+- [**42**Star][3y] [C] [lxdcn/simple-vpn-demo](https://github.com/lxdcn/simple-vpn-demo) A Simple Point-to-Point tunnelling implementation in C
+- [**42**Star][9m] [C++] [luciouskami/xigncode3bypass](https://github.com/luciouskami/xigncode3bypass)
+- [**42**Star][2d] [JS] [loki-project/loki-messenger](https://github.com/loki-project/loki-messenger) Loki Messenger - Onion routing based messenger
+- [**42**Star][5m] [C++] [lianglixin/sksocks](https://github.com/lianglixin/sksocks) SKSocks, for proxy, firewall penetration, data encryption and speeding up internet accessing.
+- [**42**Star][9m] [Shell] [leitbogioro/fuck_aliyun](https://github.com/leitbogioro/fuck_aliyun)
+- [**42**Star][1y] [Java] [k0r0pt/project-tauro](https://github.com/k0r0pt/project-tauro) A Router WiFi key recovery/cracking tool with a twist.
+- [**42**Star][9y] [jonoberheide/stackjacking](https://github.com/jonoberheide/stackjacking) PoC code for our presentation titled "Stackjacking Your Way to grsec/PaX Bypass"
+- [**42**Star][2y] [Go] [johnsonz/go-checkiptools](https://github.com/johnsonz/go-checkiptools) A go application to scan google ip.
+- [**42**Star][11m] [JS] [jeremyfetiveau/pwn-just-in-time-exploit](https://github.com/jeremyfetiveau/pwn-just-in-time-exploit) Exploit for the [pwn] just-in-time challenge from google ctf 2018's finals (TurboFan bug)
+- [**42**Star][4m] [Py] [jas502n/cve-2019-7238](https://github.com/jas502n/cve-2019-7238) Nexus Repository Manager 3 Remote Code Execution without authentication < 3.15.0
+- [**42**Star][4m] [Py] [jaredlgillespie/proxyscrape](https://github.com/jaredlgillespie/proxyscrape) Python library for retrieving free proxies (HTTP, HTTPS, SOCKS4, SOCKS5).
+- [**42**Star][2y] [C] [invictus-0x90/vulnerable_linux_driver](https://github.com/invictus-0x90/vulnerable_linux_driver) An intentionally vulnerable linux driver for research purposes/practice in kernel exploit dev
+- [**42**Star][2y] [Py] [imp0wd3r/scanner](https://github.com/imp0wd3r/scanner) 端口扫描 + 敏感文件扫描 + POC批量调用框架
+- [**42**Star][2y] [C] [idc/ps4-fake-405](https://github.com/idc/ps4-fake-405)
+- [**42**Star][4y] [Py] [ibm-security-intelligence/data-import](https://github.com/ibm-security-intelligence/data-import)
+- [**42**Star][5y] [Py] [husam212/mitmer](https://github.com/husam212/mitmer) Automated man-in-the-middle attack tool.
+- [**42**Star][1y] [C] [hannob/bignum-fuzz](https://github.com/hannob/bignum-fuzz) Code to fuzz bignum libraries
+- [**42**Star][3y] [Ruby] [guidovranken/rpcbomb](https://github.com/guidovranken/rpcbomb) RPCBOMB + patches
+- [**42**Star][4m] [Py] [gnebbia/halive](https://github.com/gnebbia/halive) A fast http and https prober, to check which URLs are alive
+- [**42**Star][4y] [C++] [flankerhqd/mediacodecoob](https://github.com/flankerhqd/mediacodecoob) Infoleak and PC control poc for CVE-2015-6620 (24445127), I'll add after conference
+- [**42**Star][3y] [JS] [firebug/devtools-extension-examples](https://github.com/firebug/devtools-extension-examples) Extension examples for Firefox developer tools
+- [**42**Star][1m] [Erlang] [etnt/edbg](https://github.com/etnt/edbg) edbg:基于 tty 的 Erlang 调试/追踪接口
+- [**42**Star][2m] [Py] [edeca/rtfraptor](https://github.com/edeca/rtfraptor) Extract OLEv1 objects from RTF files by instrumenting Word
+- [**42**Star][5y] [Py] [duo-labs/mysslstrip](https://github.com/duo-labs/mysslstrip) CVE-2015-3152 PoC
+- [**42**Star][16d] [ObjC] [dineshshetty/ios-sandbox-dumper](https://github.com/dineshshetty/ios-sandbox-dumper) SandBox-Dumper makes use of multiple private libraries to provide exact locations of the application sandbox, application bundle and some other interesting information
+- [**42**Star][2y] [HTML] [digitalinterruption/fridaworkshop](https://github.com/digitalinterruption/fridaworkshop) Break Apps with Frida workshop material
+- [**42**Star][3m] [Py] [dhn/osee](https://github.com/dhn/osee) Collection of resources for my preparation to take the OSEE certification.
+- [**42**Star][2y] [Py] [deadpix3l/pydhe](https://github.com/deadpix3l/pydhe) a fully python Diffie-Hellman Library
+- [**42**Star][1y] [PHP] [davidtavarez/pinky](https://github.com/davidtavarez/pinky) pinky - The PHP mini RAT (Remote Administration Tool)
+- [**42**Star][10m] [PHP] [danwin/onion-link-list](https://github.com/danwin/onion-link-list) A set of scripts to list tor hidden services
+- [**42**Star][2y] [Py] [danmcinerney/smb-reverse-brute](https://github.com/danmcinerney/smb-reverse-brute) Async'ly gather unique usernames thru null SMB sessions and bruteforce them with 2 passwords
+- [**42**Star][12m] [Py] [daddycocoaman/ironpentest](https://github.com/daddycocoaman/ironpentest) Collection of IronPython scripts and executables for penetration testing
+- [**42**Star][9d] [C#] [cs-util-com/cscore](https://github.com/cs-util-com/cscore) cscore is a minimal-footprint library providing commonly used helpers & patterns for your C# projects. It can be used in both pure C# and Unity projects.
+- [**42**Star][4y] [C++] [cr4sh/secretnet_expl](https://github.com/cr4sh/secretnet_expl) LPE exploits for Secret Net and Secret Net Studio
+- [**42**Star][3d] [JS] [coston/react-obfuscate](https://github.com/coston/react-obfuscate) An intelligent React component to obfuscate any contact link!
+- [**42**Star][7m] [Java] [ciscopsirt/openvulnapi](https://github.com/ciscopsirt/openvulnapi) Documentation and Tools for Cisco's PSIRT openVuln API
+- [**42**Star][10m] [Batchfile] [chrisad/ads-payload](https://github.com/chrisad/ads-payload) Powershell script which will take any payload and put it in the a bat script which delivers the payload. The payload is delivered using environment variables, alternating data streams and wmic.
+- [**42**Star][5y] [C] [cemeyer/msp430-emu-uctf](https://github.com/cemeyer/msp430-emu-uctf) msp430 emulator for uctf (with remote GDB debugging, reverse debugging, and optional symbolic execution)
+- [**42**Star][1y] [btkrausen/aws](https://github.com/btkrausen/aws)
+- [**42**Star][2y] [HCL] [bneg/redteam-automation](https://github.com/bneg/redteam-automation) Automating those tasks which can or should be automated
+- [**42**Star][6m] [Ruby] [b1ack0wl/linux_mint_poc](https://github.com/b1ack0wl/linux_mint_poc)
+- [**42**Star][2y] [Py] [azure/embarrassingly-parallel-image-classification](https://github.com/azure/embarrassingly-parallel-image-classification) Walkthrough demonstrating how trained DNNs (CNTK and TensorFlow) can be applied to massive image sets in ADLS using PySpark on Azure HDInsight clusters
+- [**42**Star][17d] [SystemVerilog] [azonenberg/starshipraider](https://github.com/azonenberg/starshipraider) High performance embedded systems debug/reverse engineering platform
+- [**42**Star][7m] [Go] [aschzero/hera](https://github.com/aschzero/hera) Automated secure tunnels for containers using Cloudflare Argo
+- [**42**Star][8m] [OCaml] [anssi-fr/mabo](https://github.com/anssi-fr/mabo) MRT Parser
+- [**42**Star][8m] [C++] [angorafuzzer/libdft64](https://github.com/angorafuzzer/libdft64) libdft for Intel Pin 3.x and 64 bit platform. (Dynamic taint tracking, taint analysis)
+- [**42**Star][2y] [Py] [anemonelabs/unmessage](https://github.com/anemonelabs/unmessage) Privacy enhanced instant messenger
+- [**42**Star][1y] [HTML] [an0nud4y/socialfish](https://github.com/an0nud4y/socialfish) Modern phishing tool with advanced functionality
+- [**42**Star][2y] [Rust] [alexcrichton/socks5-rs](https://github.com/alexcrichton/socks5-rs) Implementation of a socks5 proxy server in Rust
+- [**42**Star][2m] [Rust] [ajmwagar/merino](https://github.com/ajmwagar/merino)
+- [**42**Star][2y] [Py] [abdesslem/ctf](https://github.com/abdesslem/ctf) Flask platform for Capture The Flag challenges
+- [**42**Star][9y] [Py] [9b/malpdfobj](https://github.com/9b/malpdfobj) Builds json representation of PDF malware sample
+- [**42**Star][4m] [Py] [4n4nk3/tinkerershell](https://github.com/4n4nk3/tinkerershell) A simple python reverse shell written just for fun.
+- [**42**Star][29d] [1135/1135-cobaltstrike-toolkit](https://github.com/1135/1135-cobaltstrike-toolkit) about CobaltStrike
+- [**42**Star][5m] [C++] [0xeb/ida-climacros](https://github.com/0xeb/ida-climacros) Create and use macros in IDA's CLIs
+- [**42**Star][2m] [Py] [0x01h/pyddoz](https://github.com/0x01h/pyddoz) PyDDoZ is a powerful, human-friendly DDoS tool using application layer (L7) attack techniques.
+- [**42**Star][6m] [JS] [0katz/cve-2019-12476](https://github.com/0katz/cve-2019-12476)
+- [**41**Star][7m] [C++] [trojan-gfw/trojan-qt](https://github.com/trojan-gfw/trojan-qt) GUI server and client of Trojan in Qt C++
+- [**41**Star][1y] [Py] [v2ray/v2ray-shell_alpha](https://github.com/v2ray/v2ray-shell_alpha) A GUI for V2Ray-core, written in PyQt5
+- [**41**Star][11m] [JS] [hacker0x01/helpful-recon-data](https://github.com/hacker0x01/helpful-recon-data) This information provides helpful information to make it easier to discover new attack surface on HackerOne.com.
+- [**41**Star][2d] [Py] [simsong/dfxml](https://github.com/simsong/dfxml) Digital Forensics XML project and library
+- [**41**Star][2y] [Py] [moosedojo/legion](https://github.com/moosedojo/legion) Distributed computing environment that can be used for both academic and pen testing purposes.
+- [**41**Star][6y] [PHP] [spiderlabs/upnp-request-generator](https://github.com/spiderlabs/upnp-request-generator) A tool to parse UPnP descriptor XML files and generate SOAP control requests for use with Burp Suite or netcat
+- [**41**Star][1y] [C] [l3m0n/my_ctf_challenges](https://github.com/l3m0n/my_ctf_challenges)
+- [**41**Star][2y] [Py] [cisco-talos/covnavi](https://github.com/cisco-talos/covnavi)
+- [**41**Star][7m] [OCaml] [mirage/wodan](https://github.com/mirage/wodan) A Mirage filesystem library
+- [**41**Star][4m] [C#] [3gstudent/apt34-jason](https://github.com/3gstudent/apt34-jason) Use to perform Microsoft exchange account brute-force.
+- [**41**Star][19d] [Shell] [shibli2700/rekon](https://github.com/shibli2700/rekon) The project contains multiple shell scripts for automating the tasks which most of the hackers struggle during their recon phase.
+- [**41**Star][2m] [amimo/goron](https://github.com/amimo/goron) Yet another llvm based obfuscator
+- [**41**Star][2y] [Makefile] [artem-panchenko/counter-strike-docker](https://github.com/artem-panchenko/counter-strike-docker) Docker image for Counter-Strike 1.6 server
+- [**41**Star][1y] [C#] [advancedhacker101/c-sharp-proxy-server](https://github.com/advancedhacker101/c-sharp-proxy-server) A proxy server built with c# can be both normal and MITM Proxy
+- [**41**Star][2m] [C] [alxbrn/gdrv-loader](https://github.com/alxbrn/gdrv-loader) Kernel driver loader using vulnerable gigabyte driver (
+- [**41**Star][2y] [Py] [bcopeland/speccy](https://github.com/bcopeland/speccy) Visualization tool for ath spectral scan
+- [**41**Star][2d] [Shell] [phspade/automated-scanner](https://github.com/phspade/automated-scanner) Trying to make automated recon for bug bounties
+- [**41**Star][20d] [Go] [abguthrie/goquery](https://github.com/abguthrie/goquery) Provide a shell like interface by utilizing osquery's distributed API
+- [**41**Star][2m] [Py] [kc0bfv/pcode-emulator](https://github.com/kc0bfv/pcode-emulator) A PCode Emulator for Ghidra.
+- [**41**Star][1m] [Java] [flankerhqd/vendor-android-cves](https://github.com/flankerhqd/vendor-android-cves) Collections of my POCs for android vendor CVEs
+- [**41**Star][4m] [Py] [philomathic-guy/malicious-web-content-detection-using-machine-learning](https://github.com/philomathic-guy/Malicious-Web-Content-Detection-Using-Machine-Learning) Chrome extension for detecting phishing web sites
+- [**41**Star][3y] [kd1991/oxul103-jailbreak](https://github.com/KD1991/OXUL103-Jailbreak) A NEW 64-bit JAILBREAK FOR iOS 10.3,10.3.1,10.3.2,10.3.x. (Untethered).
+- [**41**Star][2y] [JS] [osirislab/csaw-ctf-2017-quals](https://github.com/osirislab/CSAW-CTF-2017-Quals) Repo for CSAW CTF 2018 Quals challenges
+- [**41**Star][5y] [Java] [tacixat/cfgscandroid](https://github.com/TACIXAT/CFGScanDroid) Control Flow Graph Scanning for Android
+- [**41**Star][3y] [Py] [cylance/markovobfuscate](https://github.com/cylance/MarkovObfuscate) Use Markov Chains to obfuscate data as other data
+- [**41**Star][5y] [cmu-18739l-s15/18739l-s15-coursedocs](https://github.com/CMU-18739L-S15/18739L-s15-coursedocs)
+- [**41**Star][4m] [TS] [verifynpm/tbv](https://github.com/verifynpm/tbv) Package verification for npm
+- [**41**Star][6d] [Py] [opencybersecurityalliance/stix-shifter](https://github.com/opencybersecurityalliance/stix-shifter) This project consists of an open source library allowing software to connect to data repositories using STIX Patterning, and return results as STIX Observations.
+- [**41**Star][6y] [Py] [vpnguy-zz/snmpdos](https://github.com/vpnguy-zz/snmpdos) Create a DDOS attack using SNMP servers
+- [**41**Star][1y] [C] [synacktiv-contrib/lightspeed](https://github.com/Synacktiv-contrib/lightspeed) PoC for the iOS 11.4.1 and MacOS 10.13 kernel vulnerability in lio_listio
+- [**41**Star][8m] [Ruby] [sharpstone/heroku-bouncer](https://github.com/sharpstone/heroku-bouncer) A Heroku OAuth middleware with no other work to do
+- [**41**Star][5m] [Go] [lc/cspparse](https://github.com/lc/cspparse) A tool to evaluate Content Security Policies.
+- [**41**Star][1m] [Java] [flankerhqd/vendor-android-cves](https://github.com/flankerhqd/vendor-android-cves) Collections of my POCs for android vendor CVEs
+- [**41**Star][11m] [Py] [zynga/hiccup](https://github.com/zynga/hiccup) [DEPRECATED] Hiccup is a framework that allows the Burp Suite (a web application security testing tool,
+- [**41**Star][4m] [C] [zouxianyu/physicalmemoryrw](https://github.com/zouxianyu/physicalmemoryrw) the basic version of the ring0 physical memory read/write tool
+- [**41**Star][1m] [C] [zhichao281/duilib-miniblinkbrowser](https://github.com/zhichao281/duilib-miniblinkbrowser) 用duilib做的miniblink的浏览器
+- [**41**Star][5y] [C++] [zer0mem/hypervisor](https://github.com/zer0mem/hypervisor) microVM
+- [**41**Star][2y] [Py] [yingshang/hack](https://github.com/yingshang/hack) crawl hackerone reports
+- [**41**Star][2y] [Shell] [xtiankisutsa/twiga](https://github.com/xtiankisutsa/twiga) twiga:枚举 Android 设备,获取了解其内部部件和漏洞利用的信息
+- [**41**Star][2y] [Shell] [xaqron/stunnel](https://github.com/xaqron/stunnel) Wrapping openvpn with stunnel
+- [**41**Star][5m] [Py] [x64dbg/x64dbgpylib](https://github.com/x64dbg/x64dbgpylib) Port of windbglib to x64dbgpy, in an effort to support mona.py in x64dbg.
+- [**41**Star][5d] [Go] [x-way/iptables-tracer](https://github.com/x-way/iptables-tracer) Insert trace-points into the running configuration to observe the path of packets through the iptables chains.
+- [**41**Star][3y] [Perl] [wireghoul/lbmap](https://github.com/wireghoul/lbmap) Advanced HTTP fingerprinting PoC
+- [**41**Star][1y] [C] [wanttobeno/dllprotect](https://github.com/wanttobeno/dllprotect) dll文件加解密和内存加载
+- [**41**Star][1y] [Py] [v1v1/sleight](https://github.com/v1v1/sleight) Empire HTTP(S) C2 redirector setup script
+- [**41**Star][1y] [C++] [userexistserror/dllloadershellcode](https://github.com/userexistserror/dllloadershellcode) Shellcode to load an appended Dll
+- [**41**Star][1y] [traceflight/android-malware-datasets](https://github.com/traceflight/android-malware-datasets) Popular Android malware datasets
+- [**41**Star][4m] [Lua] [theherogac/tf-card-plugin-tool](https://github.com/theherogac/tf-card-plugin-tool) TF Card Plugin Tool is an excellent tool developed with the OneLua Team interpreter that allows you to simplify the installation and management of the drivers of the SD2VITA adapter and of the official PSVITA memory in the ux0: / uma0 paths
+- [**41**Star][2y] [HTML] [thehackingsage/fluxion](https://github.com/thehackingsage/fluxion) WiFi Cracking Tool (Using Evil Twin Attack) With Some Modification. (Only For Legal Purposes)
+- [**41**Star][10m] [C++] [thebabush/dumb-obfuscator](https://github.com/thebabush/dumb-obfuscator) Tutorial on how to write the dumbest obfuscator I could think of.
+- [**41**Star][3y] [Py] [tengzhangchao/websniff](https://github.com/tengzhangchao/websniff) 局域网http流量嗅探,并获取登陆的账号密码
+- [**41**Star][4y] [Py] [techwizrd/gitkraken](https://github.com/techwizrd/gitkraken) A Git client for the GNOME Desktop.
+- [**41**Star][3m] [Shell] [tasket/qubes-vm-hardening](https://github.com/tasket/qubes-vm-hardening) Fend off malware at Qubes VM startup
+- [**41**Star][2y] [Py] [talos-vulndev/fuzzflow](https://github.com/talos-vulndev/fuzzflow)
+- [**41**Star][1y] [Py] [spiderlabs/firework](https://github.com/spiderlabs/firework) Firework is a proof of concept tool to interact with Microsoft Workplaces creating valid files required for the provisioning process.
+- [**41**Star][8m] [Shell] [sonofagl1tch/awsdetonationlab](https://github.com/sonofagl1tch/awsdetonationlab) This script is used to generate some basic detections of the aws security services
+- [**41**Star][4y] [ApacheConf] [smikims/arpspoof](https://github.com/smikims/arpspoof) Performs an ARP spoofing attack using the Linux kernel's raw sockets
+- [**41**Star][3y] [PS] [sikkandar-sha/sec-audit](https://github.com/sikkandar-sha/sec-audit) PowerShell Script for Windows Server Compliance / Security Configuration Audit
+- [**41**Star][4y] [C] [sesuperuser/super-bootimg](https://github.com/sesuperuser/super-bootimg) Tools to edit Android boot.img. NDK buildable, to be usable in an update.zip
+- [**41**Star][7m] [C] [sensepost/frida-windows-playground](https://github.com/sensepost/frida-windows-playground) A collection of Frida hooks for experimentation on Windows platforms.
+- [**41**Star][2y] [C] [seemoo-lab/nexmon_debugger](https://github.com/seemoo-lab/nexmon_debugger) Debugger with hardware breakpoints and memory watchpoints for BCM4339 Wi-Fi chips
+- [**41**Star][10m] [Java] [secdec/attack-surface-detector-burp](https://github.com/secdec/attack-surface-detector-burp) The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters
+- [**41**Star][1y] [seadog007/noxctf-2018-psrf-as-pwn](https://github.com/seadog007/noxctf-2018-psrf-as-pwn)
+- [**41**Star][3y] [Java] [scriptjunkie/kcap](https://github.com/scriptjunkie/kcap)
+- [**41**Star][2y] [Py] [scrapbird/sarlacc](https://github.com/scrapbird/sarlacc) SMTP server / sinkhole for collecting spam
+- [**41**Star][3y] [C++] [rootkitsmm/cve-2016-0040](https://github.com/rootkitsmm/cve-2016-0040) Exploiting CVE-2016-0040 uninitialized pointer
+- [**41**Star][2y] [C#] [rappayne/webgoat.net](https://github.com/rappayne/webgoat.net) OWASP's official repository for WebGoat (ASP.NET version)
+- [**41**Star][2y] [Py] [rapid7/vm-automation](https://github.com/rapid7/vm-automation) Created to simplify interactions with virtual machines
+- [**41**Star][2m] [Shell] [r0bag/pentest](https://github.com/r0bag/pentest)
+- [**41**Star][3y] [PS] [proxb/serverinventoryreport](https://github.com/proxb/serverinventoryreport) A set of scripts to create an inventory report using PowerShell, SQL and WPF
+- [**41**Star][3y] [Py] [ph4r05/kismet-deauth-wpa2-handshake-plugin](https://github.com/ph4r05/kismet-deauth-wpa2-handshake-plugin) Python plugin for Kismet to perform deauthentication to collect WPA2 handshakes
+- [**41**Star][2y] [Py] [oways/sa-core-2018-004](https://github.com/oways/sa-core-2018-004) SA-CORE-2018-004 POC #drupalgeddon3
+- [**41**Star][2m] [C#] [outflanknl/net-gpppassword](https://github.com/outflanknl/net-gpppassword) .NET implementation of Get-GPPPassword. Retrieves the plaintext password and other information for accounts pushed through Group Policy Preferences.
+- [**41**Star][2y] [oscarakaelvis/game-of-thrones-hacking-ctf](https://github.com/oscarakaelvis/game-of-thrones-hacking-ctf) Game of Thrones hacking CTF (Capture the flag)
+- [**41**Star][2y] [JS] [opsxcq/exploit-cve-2016-6515](https://github.com/opsxcq/exploit-cve-2016-6515) OpenSSH remote DOS exploit and vulnerable container
+- [**41**Star][3y] [Py] [opendns/og-miner](https://github.com/opendns/og-miner) OpenDNS Graph Miner
+- [**41**Star][2y] [Py] [ntddk/virustream](https://github.com/ntddk/virustream) A script to track malware IOCs with OSINT on Twitter.
+- [**41**Star][2y] [CSS] [nourabusoud/password-genie](https://github.com/nourabusoud/password-genie)
+- [**41**Star][5y] [Py] [nimai/mptcp-scapy](https://github.com/nimai/mptcp-scapy) MPTCP firewall tester based on scapy
+- [**41**Star][1y] [Py] [neverlovelynn/chrome_headless_xss](https://github.com/neverlovelynn/chrome_headless_xss) A plugin to check xss by using chrome_headless
+- [**41**Star][2y] [ASP] [netspi/cmdsql](https://github.com/netspi/cmdsql)
+- [**41**Star][11m] [C] [netmap-unipi/netmap-tutorial](https://github.com/netmap-unipi/netmap-tutorial) Netmap tutorial at SIGCOMM 2017 and AsiaBSDCon 2018
+- [**41**Star][3y] [nao-sec/rigek](https://github.com/nao-sec/rigek) Analyzing Rig Exploit Kit
+- [**41**Star][4y] [Py] [muodov/sqlmapchik](https://github.com/muodov/sqlmapchik) cross-platform sqlmap GUI aimed to mobile devices
+- [**41**Star][2y] [Perl] [mtve/yazecminer](https://github.com/mtve/yazecminer) yet another ZEC miner
+- [**41**Star][4y] [JS] [moloch--/cve-2016-1764](https://github.com/moloch--/cve-2016-1764) Extraction of iMessage Data via XSS
+- [**41**Star][2y] [minisafe/microweb](https://github.com/minisafe/microweb) MicroScan 的web端,正在改bug
+- [**41**Star][29d] [PHP] [mddanish/vulnerable-otp-application](https://github.com/mddanish/vulnerable-otp-application) Vulnerable OTP/2FA Application written in PHP using Google Authenticator
+- [**41**Star][6y] [Shell] [masterbutcher/kali-cleaner](https://github.com/masterbutcher/kali-cleaner) Little cleaner script for Kali linux.Clean apt cache,Removing old config files,Removing old kernels,Emptying every trashes.
+- [**41**Star][4m] [maecproject/malware-behaviors](https://github.com/maecproject/malware-behaviors) A taxonomy and dictionary of malware behaviors.
+- [**41**Star][8m] [Py] [linuxacademy/la-aws-security_specialty](https://github.com/linuxacademy/la-aws-security_specialty) Learning Activities for the AWS Security Specialty Course
+- [**41**Star][4y] [C++] [lingerhk/0net](https://github.com/lingerhk/0net) 一个简单的Windows远程控制后门
+- [**41**Star][7m] [Py] [koboi137/darksplitz](https://github.com/koboi137/darksplitz) Exploit Framework
+- [**41**Star][4y] [C] [kitctf/nginxpwn](https://github.com/kitctf/nginxpwn) Exploitation Training -- CVE-2013-2028: Nginx Stack Based Buffer Overflow
+- [**41**Star][3y] [C] [killswitch-gui/hotload-driver](https://github.com/killswitch-gui/hotload-driver) C++
+- [**41**Star][3y] [C] [kanglictf/afl-qai](https://github.com/kanglictf/afl-qai) A demo project for AFL with QEMU Augmented Instrumentation (qai)
+- [**41**Star][3y] [C] [jzdziarski/mod_evasive](https://github.com/jzdziarski/mod_evasive) Apache mod_evasive module
+- [**41**Star][1y] [Py] [jpcertcc/impfuzzy](https://github.com/jpcertcc/impfuzzy) Fuzzy Hash calculated from import API of PE files
+- [**41**Star][2m] [Java] [jenkinsci/parameterized-scheduler-plugin](https://github.com/jenkinsci/parameterized-scheduler-plugin) A Jenkins Plugin to support setting parameters in the build schedule
+- [**41**Star][3y] [Shell] [jbreed/apkinjector](https://github.com/jbreed/apkinjector) Android APK Antivirus evasion for msfvenom generated payloads to inject into another APK file for phishing attacks.
+- [**41**Star][2y] [Py] [inaz2/unico](https://github.com/inaz2/unico) Unicorn PE function runner
+- [**41**Star][5m] [Go] [icchy/wctf2019-gtf](https://github.com/icchy/wctf2019-gtf) WCTF2019 challenge: Gyotaku The Flag
+- [**41**Star][2d] [C] [horsicq/pex64dbg](https://github.com/horsicq/pex64dbg) pe viewer
+- [**41**Star][7m] [hook-s3c/cve-2019-0708-poc](https://github.com/hook-s3c/cve-2019-0708-poc) proof of concept exploit for Microsoft Windows 7 and Server 2008 RDP vulnerability
+- [**41**Star][2y] [Py] [guptachetan1997/crawling-projects](https://github.com/guptachetan1997/crawling-projects) Web scraping and automation using python
+- [**41**Star][2y] [Ruby] [gabamnml/hoper](https://github.com/gabamnml/hoper) Security tool to trace URL's jumps across the rel links to obtain the last URL
+- [**41**Star][4m] [JS] [fsiamp/brutesec](https://github.com/fsiamp/brutesec) SHA256 and MD5 automation scripts that can be used for bruteforcing and cracking hashed data.
+- [**41**Star][3m] [Swift] [frida/frida-swift](https://github.com/frida/frida-swift) Frida Swift bindings
+- [**41**Star][6y] [freewaf/waf-anti-tamper](https://github.com/freewaf/waf-anti-tamper) Open Source Web Application Firewall Anti Tamper
+- [**41**Star][9m] [Shell] [forte-research/forte-fuzzbench](https://github.com/forte-research/forte-fuzzbench) FoRTE-Research's fuzzing benchmarks
+- [**41**Star][2y] [Java] [fooock/jshodan](https://github.com/fooock/jshodan) Powerful Shodan API client using RxJava and Retrofit
+- [**41**Star][3y] [Py] [fnzv/trsh](https://github.com/fnzv/trsh) trsh:使用电报 API 与 Linux 服务器通信,Python编写。
+- [**41**Star][7y] [Py] [flyr4nk/xssscaner](https://github.com/flyr4nk/xssscaner) Xss Scaner
+- [**41**Star][2y] [C++] [feruxmax/meltdown](https://github.com/feruxmax/meltdown) Meltdown/Spectre experiments
+- [**41**Star][3d] [C++] [equalitie/ouinet](https://github.com/equalitie/ouinet) Library to enable decentralized web requests
+- [**41**Star][2y] [Go] [empty-nest/emptynest](https://github.com/empty-nest/emptynest) emptynest:基于插件的 C2 服务器框架。其目标不是取代某些强大的工具(例如 Empire、Metasploit、CobaltStrike),而是创建一个支持框架,以便为自定义 agents 快速创建小型、专用的 handlers
+- [**41**Star][9m] [Java] [dxsdyhm/gwelldemo](https://github.com/dxsdyhm/gwelldemo) a demo to use P2P-Core
+- [**41**Star][3y] [Py] [dnlongen/reglister](https://github.com/dnlongen/reglister) Recurse through a registry, identifying values with large data -- a registry malware hunter
+- [**41**Star][3y] [Py] [devttys0/botox](https://github.com/devttys0/botox) SIGSTOPing ELF binaries since 0x7E1
+- [**41**Star][7m] [Rust] [dentrax/netlyser](https://github.com/dentrax/netlyser) Lightweight, a simple yet, Presence Detection Tool written in Rust, based on nmap, built for UNIX, made with <3
+- [**41**Star][2m] [Shell] [denizparlak/hayat](https://github.com/denizparlak/hayat) Google Cloud Platform ~ Auditing & Hardening Script
+- [**41**Star][8m] [deep-security/aws-waf](https://github.com/deep-security/aws-waf) Deep Security's APIs make it simple to integration with a variety of AWS Services
+- [**41**Star][2y] [deadbits/analyst-casefile](https://github.com/deadbits/analyst-casefile) Maltego CaseFile entities for information security investigations, malware analysis and incident response
+- [**41**Star][20d] [C++] [danielkrupinski/anubis](https://github.com/danielkrupinski/anubis) Free open-source training software / cheat for Counter-Strike: Global Offensive, written in C.
+- [**41**Star][3y] [Py] [crysys/membrane](https://github.com/crysys/membrane) Membrane: A Posteriori Detection of Malicious Code Loading by Memory Paging Analysis
+- [**41**Star][3y] [Py] [crowdstrike/pyspresso](https://github.com/crowdstrike/pyspresso) The pyspresso package is a Python-based framework for debugging Java.
+- [**41**Star][9y] [C++] [cr4sh/ptbypass-poc](https://github.com/cr4sh/ptbypass-poc) Bypassing code hooks detection in modern anti-rootkits via building faked PTE entries.
+- [**41**Star][2y] [C] [cocoahuke/mackextdump](https://github.com/cocoahuke/mackextdump) mackextdump:从macOS中dump Kext信息
+- [**41**Star][7m] [certcc/vulnerability-data-archive](https://github.com/certcc/vulnerability-data-archive) With the hope that someone finds the data useful, we're publishing an archive of almost all of the non-sensitive vulnerability information in our vulnerability reports database. See also
+- [**41**Star][4y] [C++] [c4bbage/webrobot-v1.8.2](https://github.com/c4bbage/webrobot-v1.8.2) 网络安全检测工具WebRobot
+- [**41**Star][23d] [Lua] [c0nw0nk/nginx-lua-anti-ddos](https://github.com/c0nw0nk/nginx-lua-anti-ddos) A Anti-DDoS script to protect Nginx web servers using Lua with a HTML Javascript based authentication puzzle inspired by Cloudflare I am under attack mode an Anti-DDoS authentication page protect yourself from every attack type All Layer 7 Attacks Mitigating Historic Attacks DoS DoS Implications DDoS All Brute Force Attacks Zero day exploits Soc…
+- [**41**Star][5y] [Py] [bones-codes/the_colonel](https://github.com/bones-codes/the_colonel) an experimental linux kernel module (rootkit) with a keylogger and built-in IRC bot
+- [**41**Star][3y] [C] [bluec0re/reversing-radare2](https://github.com/bluec0re/reversing-radare2) A reversing series with radare2
+- [**41**Star][2y] [JS] [bahmutov/ban-sensitive-files](https://github.com/bahmutov/ban-sensitive-files) Checks filenames to be committed against a library of filename rules to prevent sensitive files in Git
+- [**41**Star][3y] [Py] [backto17/sinahousecrawler](https://github.com/backto17/sinahousecrawler) 基于scrapy,scrapy-redis实现的一个分布式网络爬虫,爬取了新浪房产的楼盘信息及户型图片,实现了常用的爬虫功能需求.
+- [**41**Star][1y] [C++] [baarsik/tauros-v2](https://github.com/baarsik/tauros-v2)
+- [**41**Star][2y] [C++] [azerg/packerpe](https://github.com/azerg/packerpe) simple PE packer written in C++
+- [**41**Star][3y] [C++] [avdbg/saber](https://github.com/avdbg/saber) 《macOS软件安全与逆向分析》随书的调试器代码
+- [**41**Star][1y] [C] [asm/deep_spectre](https://github.com/asm/deep_spectre) Deep learning side channel privileged memory reader
+- [**41**Star][5m] [Py] [arthastang/router-exploit-shovel](https://github.com/arthastang/router-exploit-shovel) Automated Application Generation for Stack Overflow Types on Wireless Routers
+- [**41**Star][2y] [JS] [arno0x/reflectivednsexfiltrator](https://github.com/arno0x/reflectivednsexfiltrator) Data exfiltration using reflective DNS resolution covert channel
+- [**41**Star][6m] [Perl] [anon6372098/fazscan](https://github.com/anon6372098/fazscan) | FazScan is a Perl program to do some vulnerability scanning and pentesting |
+- [**41**Star][4y] [C] [android-rooting-tools/libpingpong_exploit](https://github.com/android-rooting-tools/libpingpong_exploit) CVE-2015-3636 exploit
+- [**41**Star][2y] [Py] [andreafioraldi/pwntrace](https://github.com/andreafioraldi/pwntrace) Use ltrace with pwnlib.tubes.process instances, useful for heap exploitation. Pwntools rocks!
+- [**41**Star][1y] [Py] [alfa-group/robust-adv-malware-detection](https://github.com/alfa-group/robust-adv-malware-detection) Code repository for the paper "Adversarial Deep Learning for Robust Detection of Binary Encoded Malware"
+- [**41**Star][2y] [Java] [alepacheco/androrw](https://github.com/alepacheco/androrw) PoC Ransomware for android
+- [**41**Star][1m] [Py] [agrawalsmart7/autorecon](https://github.com/agrawalsmart7/autorecon) 自动化渗透初期的一些手动工作,是我们可专注于主要目标
+- [**41**Star][4y] [Py] [abdesslem/malwarehunter](https://github.com/abdesslem/malwarehunter) Static and automated/dynamic malware analysis
+- [**40**Star][2y] [C++] [pgigioli/darknet_ros](https://github.com/pgigioli/darknet_ros) YOLO integration with ROS for real-time object detection
+- [**40**Star][12m] [HTML] [zkeeer/shadowsocks-manager](https://github.com/zkeeer/shadowsocks-manager) shadowsocks多用户管理,可视化管理,轻量级,一键安装shadowsocks和ssadmin,控制端口流量/速度,查看端口状态,修改ss配置
+- [**40**Star][5y] [Lua] [asamy/forgottenmapeditor](https://github.com/asamy/forgottenmapeditor) Map editor written in lua for Open Tibia. Written with OtClient's framework.
+- [**40**Star][6y] [robertdavidgraham/hamster](https://github.com/robertdavidgraham/hamster) A proxy server for cookie sidejacking. Works with 'ferret'.
+- [**40**Star][1y] [TS] [icodesign/proxy-uri](https://github.com/icodesign/proxy-uri) Helper to generate/parse Shadowsocks(R)/HTTP(S) URI
+- [**40**Star][5m] [C++] [avast/yaracpp](https://github.com/avast/yaracpp) C++ wrapper for YARA.
+- [**40**Star][2y] [Py] [wibiti/evedec](https://github.com/wibiti/evedec) Eve Online decrypter/decompiler
+- [**40**Star][2y] [PS] [jaredhaight/powerpunch](https://github.com/jaredhaight/powerpunch) A collection of PowerScripts for Pentesting
+- [**40**Star][3y] [Ruby] [gallopsled/pwntools-binutils](https://github.com/gallopsled/pwntools-binutils) Building binutils for pwntools
+- [**40**Star][9d] [C#] [damonmohammadbagher/nativepayload_reverseshell](https://github.com/damonmohammadbagher/nativepayload_reverseshell) This is Simple C# Source code to Bypass almost "all" AVS, (kaspersky v19, Eset v12 v13 ,Trend-Micro v16, Comodo & Windows Defender Bypassed via this method Very Simple)
+- [**40**Star][6m] [C#] [guibacellar/dnci](https://github.com/guibacellar/dnci) DNCI - Dot Net Code Injector
+- [**40**Star][1y] [Shell] [nick-the-greek/aerial](https://github.com/nick-the-greek/aerial) Multi-mode wireless LAN Based on a Software Access point for Kali Linux.
+- [**40**Star][5y] [Py] [flankerhqd/wifimonster](https://github.com/flankerhqd/wifimonster) Wifi sniffing and hijacking tool
+- [**40**Star][1y] [Ruby] [trailofbits/rubysec](https://github.com/trailofbits/rubysec) RubySec Field Guide
+- [**40**Star][2d] [thespeedx/proxy-list](https://github.com/TheSpeedX/PROXY-List) Get PROXY List that gets updated everyday
+- [**40**Star][1y] [HTML] [raidandfade/hacktoberchallenges2018](https://github.com/RaidAndFade/HacktoberChallenges2018) Welcome! I need some help making my list... Learn how in the README
+- [**40**Star][5y] [Java] [paloaltonetworks/installerhijackingvulnerabilityscanner](https://github.com/PaloAltoNetworks/InstallerHijackingVulnerabilityScanner)
+- [**40**Star][2m] [Py] [nerrorsec/googledorker](https://github.com/nerrorsec/GoogleDorker) This is a simple tool to automate google hacking when doing web penetration testing or bug hunting.
+- [**40**Star][4m] [Py] [gh0stkey/jsonandhttpp](https://github.com/gh0stkey/JSONandHTTPP) Burp Suite Plugin: Convert the json text that returns the body into HTTP request parameters.
+- [**40**Star][4y] [Lua] [aoncyberlabs/nmap-scripts](https://github.com/AonCyberLabs/Nmap-Scripts)
+- [**40**Star][3y] [Ruby] [fsecurelabs/honeypot_recipes](https://github.com/FSecureLABS/honeypot_recipes) A chef cookbook which can be used to quickly deploy a high interaction honeypot, using the sysdig and falco tools
+- [**40**Star][2y] [JS] [auth0-blog/hapi-jwt-authentication](https://github.com/auth0-blog/hapi-jwt-authentication)
+- [**40**Star][7d] [Dockerfile] [crytic/eth-security-toolbox](https://github.com/crytic/eth-security-toolbox) A Docker container preconfigured with all of the Trail of Bits Ethereum security tools.
+- [**40**Star][10m] [scheme] [aki helin/radamsa](https://gitlab.com/akihe/radamsa)
+- [**40**Star][3y] [C++] [zer0mem0ry/manualmap](https://github.com/zer0mem0ry/manualmap) A Simple demonstration of manual dll injector
+- [**40**Star][2y] [Shell] [zephrfish/attackdeploy](https://github.com/zephrfish/attackdeploy) Scripts for Deploying new server
+- [**40**Star][3y] [Lua] [z-0ne/scans2-045-nmap](https://github.com/z-0ne/scans2-045-nmap) Struts2 S2-045-Nmap NSE script
+- [**40**Star][2y] [C++] [yifengyou/code-virtualization-and-automation-analysis](https://github.com/yifengyou/code-virtualization-and-automation-analysis) 代码虚拟化与自动化分析
+- [**40**Star][3y] [Py] [xiphosresearch/phuzz](https://github.com/xiphosresearch/phuzz) Find exploitable PHP files by parameter fuzzing and function call tracing
+- [**40**Star][3y] [Py] [xiphosresearch/dnsbrute](https://github.com/xiphosresearch/dnsbrute) DNS Sub-domain brute forcer, in Python + gevent
+- [**40**Star][3y] [HTML] [xiaoyanguoke/ciahackingtools](https://github.com/xiaoyanguoke/ciahackingtools) WikiLeaks Vault 7 CIA Hacking Tools
+- [**40**Star][14d] [PHP] [xchwarze/cain](https://github.com/xchwarze/cain) Password recovery tool for Microsoft Operating Systems. It allows easy recovery of various kind of passwords by sniffing the network, cracking encrypted passwords using Dictionary, Brute-Force and Cryptanalysis attacks, recording VoIP conversations, decoding scrambled passwords, recovering wireless network keys, revealing password boxes, uncover…
+- [**40**Star][3y] [C++] [x64dbg/interobfu](https://github.com/x64dbg/interobfu) Intermediate x86 instruction representation for use in obfuscation/deobfuscation.
+- [**40**Star][3y] [PHP] [wso-shell/wso](https://github.com/wso-shell/wso) WSO SHELL , wso shell , WSO.php , wso.php , webshell , wso-shell веб-шелл , шелл , WSO2.5 , WSO2.5.1 , WSO2.php , Shell download, C99 , r57 , bypass shell , P.A.S. (php web-shell) , PPS 4.0 , Скачать WSO Web Shell , Скачать wso.php , Скачать Web Shell
+- [**40**Star][6y] [C++] [wirepair/idapinlogger](https://github.com/wirepair/idapinlogger) Logs instruction hits to a file which can be fed into IDA Pro to highlight which instructions were called.
+- [**40**Star][10m] [C++] [wildbydesign/appcontainer-launcher](https://github.com/WildByDesign/AppContainer-Launcher) AppContainer and LPAC (Less Privileged AppContainer) Launcher with Capabilities
+- [**40**Star][3y] [C] [wi-fi-analyzer/wifi-arsenal](https://github.com/wi-fi-analyzer/wifi-arsenal) WiFi arsenal
+- [**40**Star][2y] [C#] [wearelegal/cinarat](https://github.com/wearelegal/cinarat) CinaRAT - Cina Is Not A Remote Administration Tool
+- [**40**Star][5d] [Py] [wangyihang/pwnme](https://github.com/wangyihang/pwnme) 二进制渗透题目汇总
+- [**40**Star][1y] [Py] [wangyihang/codiad-remote-code-execute-exploit](https://github.com/wangyihang/codiad-remote-code-execute-exploit) A simple exploit to execute system command on codiad
+- [**40**Star][1y] [Shell] [waja/maldetect](https://github.com/waja/maldetect) Debian packaging of Linux Malware Detect (
+- [**40**Star][9m] [HTML] [voidhack/write-ups](https://github.com/voidhack/write-ups)
+- [**40**Star][2y] [Py] [villanch/g3ar](https://github.com/villanch/g3ar) 渗透测试编程工具包
+- [**40**Star][4m] [JS] [vigneshsrao/cve-2019-11707](https://github.com/vigneshsrao/cve-2019-11707) Exploit code for CVE-2019-11707 on Firefox 66.0.3 running on Ubuntu
+- [**40**Star][8m] [Go] [txthinking/socks5](https://github.com/txthinking/socks5) SOCKS Protocol Version 5 Library in Go
+- [**40**Star][4m] [Py] [tmr232/brutal-ida](https://github.com/tmr232/brutal-ida) Block Redo & Undo To Achieve Legacy IDA
+- [**40**Star][8m] [C#] [thaisenpm/loader3](https://github.com/thaisenpm/loader3) A self leak of a loader I sold on Selly for easy money to open a business. I got enough, it was leaked to shit. Enjoy
+- [**40**Star][3y] [HTML] [tennc/1000php](https://github.com/tennc/1000php) 1000个PHP代码审计案例(2016.7以前乌云公开漏洞)
+- [**40**Star][4y] [Elixir] [tatsuya6502/recon_ex](https://github.com/tatsuya6502/recon_ex) Elixir wrapper for Recon, tools to diagnose Erlang VM safely in production
+- [**40**Star][7y] [C++] [taintdroid/android_platform_dalvik](https://github.com/taintdroid/android_platform_dalvik) Mirror of git://android.git.kernel.org/platform/dalvik.git with TaintDroid additions (mirror lags official Android)
+- [**40**Star][3y] [Py] [stratosphereips/stratospheretestingframework](https://github.com/stratosphereips/stratospheretestingframework) The stratosphere testing framework is mean to help in the researching and verification of the behavioral models used by the Stratoshpere IPS.
+- [**40**Star][8y] [C] [stephenfewer/ollyheaptrace](https://github.com/stephenfewer/ollyheaptrace) OllyHeapTrace is a plugin for OllyDbg to trace the heap operations being performed by a process.
+- [**40**Star][6y] [C++] [stealth/fernmelder](https://github.com/stealth/fernmelder) async mass DNS resolver
+- [**40**Star][6y] [sinsoul/sinsoulwebremotecontrol](https://github.com/sinsoul/sinsoulwebremotecontrol) 在任何地方通过网页控制和管理自己的计算设备
+- [**40**Star][6y] [Py] [shadsidd/automated-xss-finder](https://github.com/shadsidd/automated-xss-finder) Automated XSS Finder
+- [**40**Star][2m] [Go] [sensepost/go-out](https://github.com/sensepost/go-out)
+- [**40**Star][2y] [Py] [securifera/cve-2018-6546-exploit](https://github.com/securifera/cve-2018-6546-exploit) CVE-2018-6546-Exploit
+- [**40**Star][5y] [Py] [scottjpack/shellshock_scanner](https://github.com/scottjpack/shellshock_scanner) Python Scanner for "ShellShock" (CVE-2014-6271)
+- [**40**Star][2y] [HTML] [scorelab/androphsy](https://github.com/scorelab/androphsy) An Open Source Mobile Forensics Investigation Tool for Android Platform
+- [**40**Star][11m] [Py] [s2e/pykvm](https://github.com/s2e/pykvm) A tiny KVM hypervisor written in Python
+- [**40**Star][10m] [C] [s-macke/starflight-reverse](https://github.com/s-macke/starflight-reverse) Reversed engineered game Starflight (1986)
+- [**40**Star][11m] [C++] [rr-/crc-manipulator](https://github.com/rr-/crc-manipulator) Change CRC checksums of your files.
+- [**40**Star][4y] [Py] [rooklabs/milano](https://github.com/rooklabs/milano) Hacking Team Malware Detection Utility
+- [**40**Star][2y] [Py] [robputt796/py-dns-over-https-proxy](https://github.com/robputt796/py-dns-over-https-proxy) Provides a simple Python based proxy for running DNS over HTTPS to Google's DNS over HTTPS service.
+- [**40**Star][3y] [C++] [regehr/compiler-crashes](https://github.com/regehr/compiler-crashes) 60 artisanal compiler crashes
+- [**40**Star][3y] [Lua] [r00t-3xp10it/rc-exploiter](https://github.com/r00t-3xp10it/rc-exploiter) NOT SUPORTED ANYMORE -- try resource_files repository (mosquito)
+- [**40**Star][5m] [Py] [q3k/tpm2137](https://github.com/q3k/tpm2137) Hardware task for WCTF2019
+- [**40**Star][7d] [Shell] [pyllyukko/harden.sh](https://github.com/pyllyukko/harden.sh) Slackware hardening script
+- [**40**Star][6y] [Ruby] [pwnieexpress/metasploit-framework](https://github.com/pwnieexpress/metasploit-framework) Unofficial fork of the Rapid7 metasploit-framework, pruned for minimal size.
+- [**40**Star][9m] [olafhartong/detection-sources](https://github.com/olafhartong/detection-sources)
+- [**40**Star][1y] [Py] [ocadotechnology/gcp-census](https://github.com/ocadotechnology/gcp-census) GAE python based app which regularly collects information about GCP resources and stores them in BigQuery
+- [**40**Star][5y] [Py] [neuman/python-carteblanche](https://github.com/neuman/python-carteblanche) Module to align code with thoughts of users and designers. Also magically handles navigation and permissions.
+- [**40**Star][3y] [C] [nccgroup/triforceopenbsdfuzzer](https://github.com/nccgroup/triforceopenbsdfuzzer) System call fuzzing of OpenBSD amd64 using TriforceAFL (i.e. AFL and QEMU)
+- [**40**Star][6y] [Py] [nccgroup/lapith](https://github.com/nccgroup/lapith) A simple Nessus results viewer
+- [**40**Star][2y] [n3uz/elastic-x-pack-crack](https://github.com/n3uz/elastic-x-pack-crack) 破解 x-pack 授权时间限制,白金版到2050年,仅做研究用途
+- [**40**Star][1m] [Py] [n3k/pentest](https://github.com/n3k/pentest) Notes/Tools for pentesting
+- [**40**Star][13d] [mykings/security-study-tutorial](https://github.com/mykings/security-study-tutorial) Summary of online learning materials
+- [**40**Star][2y] [Py] [mxmssh/idametrics](https://github.com/mxmssh/idametrics) static software complexity metrics collection
+- [**40**Star][2y] [PHP] [mrsqar-ye/wpcrack](https://github.com/mrsqar-ye/wpcrack) wordpress hash cracker .
+- [**40**Star][3m] [Py] [momalab/icsref](https://github.com/momalab/icsref) A tool for reverse engineering industrial control systems binaries.
+- [**40**Star][1y] [Py] [mnrkbys/vss_carver](https://github.com/mnrkbys/vss_carver) Carves and recreates VSS catalog and store from Windows disk image.
+- [**40**Star][1y] [Java] [miwong/intellidroid](https://github.com/miwong/intellidroid) A targeted input generator for Android that improves the effectiveness of dynamic malware analysis.
+- [**40**Star][3m] [Py] [mikeperry-tor/vanguards](https://github.com/mikeperry-tor/vanguards) Vanguards help guard you from getting vanned...
+- [**40**Star][1y] [Shell] [mavrepis/shodanvulncheck](https://github.com/mavrepis/shodanvulncheck) bash script to enumerate vulnerabilities on specific year through Shodan API
+- [**40**Star][5m] [Lua] [mame82/misc](https://github.com/mame82/misc)
+- [**40**Star][2y] [JS] [mafintosh/ws-to-tcp](https://github.com/mafintosh/ws-to-tcp) Proxy from WebSockets to TCP
+- [**40**Star][2y] [Py] [m0rtem/mailfail](https://github.com/m0rtem/mailfail) Proof of Concept - Utilize misconfigured newsletter forms to spam / deny service to an inbox
+- [**40**Star][3y] [Py] [lukasikic/kodi-backdoor-generator](https://github.com/lukasikic/kodi-backdoor-generator) Kodi Reverse Shell
+- [**40**Star][4y] [C] [lillypad/badger](https://github.com/lillypad/badger) A Swiss Army Knife for Windows Exploit Development.
+- [**40**Star][3y] [PHP] [lcatro/xss-hunter](https://github.com/lcatro/xss-hunter) XSS hunter 收集Webview 页面上存在的反射,储存型XSS ,方便应急APP 和前端页面在发布时遇到XSS 安全问题..
+- [**40**Star][1y] [Py] [lanjelot/ctfs](https://github.com/lanjelot/ctfs) notes and code on past CTFs
+- [**40**Star][3y] [C] [laginimaineb/cve-2016-2431](https://github.com/laginimaineb/cve-2016-2431) Qualcomm TrustZone kernel privilege escalation
+- [**40**Star][4m] [Py] [kokokuo/scraper-fourone-jobs](https://github.com/kokokuo/scraper-fourone-jobs) This is a anti-scraping cracker for extracting apply information of one of Taiwan jobs recruiting website.
+- [**40**Star][11m] [C#] [kevingosse/windbg-extensions](https://github.com/kevingosse/windbg-extensions) Extensions for the new WinDbg
+- [**40**Star][2y] [C++] [kelvinhack/notruth](https://github.com/kelvinhack/notruth)
+- [**40**Star][2y] [Py] [karttoon/trigen](https://github.com/karttoon/trigen) Trigen is a Python script which uses different combinations of Win32 function calls in generated VBA to execute shellcode.
+- [**40**Star][3m] [Py] [karttoon/binsequencer](https://github.com/karttoon/binsequencer) BinSequencer is a script designed to find a common pattern of bytes within a set of samples and generate a YARA rule from the identified pattern.
+- [**40**Star][7m] [PS] [k2/scripting](https://github.com/k2/scripting) PS / Bash / Python / Other scripts For FUN!
+- [**40**Star][2y] [Java] [jwnie/proxyservice](https://github.com/jwnie/proxyservice) 抓取网上公开代理,维护可供爬虫使用的IP池,区分墙内墙外、http/https/socks代理。
+- [**40**Star][2m] [jsecurity101/windows-api-to-sysmon-events](https://github.com/jsecurity101/windows-api-to-sysmon-events) A repository that maps API calls to Sysmon Event ID's.
+- [**40**Star][3y] [jonbruner/twitter-analysis](https://github.com/jonbruner/twitter-analysis) The original dataset for my 2013 article on Twitter's network patterns
+- [**40**Star][11m] [Py] [jh00nbr/phishruffus](https://github.com/jh00nbr/phishruffus) Intelligent threat hunter and phishing servers
+- [**40**Star][9m] [Shell] [jceminer/cn_cpu_miner](https://github.com/jceminer/cn_cpu_miner) Cryptonote CPU Miner
+- [**40**Star][2y] [Java] [ivianuu/contributer](https://github.com/ivianuu/contributer) Inject all types like views or a conductor controllers with @ContributesAndroidInjector
+- [**40**Star][8y] [JS] [iriscouch/audit_couchdb](https://github.com/iriscouch/audit_couchdb) Detect security issues, large or small, in a CouchDB server
+- [**40**Star][6y] [Py] [ipopov/starttls-mitm](https://github.com/ipopov/starttls-mitm) A starttls-capable transparent man-in-the-middle proxy
+- [**40**Star][1y] [C] [in7egral/taig8-ios-jailbreak-patchfinder](https://github.com/in7egral/taig8-ios-jailbreak-patchfinder) Analyzes a binary iOS kernel to determine function offsets and where to apply the canonical jailbreak patches.
+- [**40**Star][3y] [Assembly] [ilovepp/firminsight](https://github.com/ilovepp/firminsight) Automatic collect firmwares from internet,decompress,find binary code,extract info,file relation and function relation
+- [**40**Star][4y] [C++] [igorkorkin/hypervisorsdetection](https://github.com/igorkorkin/hypervisorsdetection) This is the first software system, which can detect a stealthy hypervisor and calculate several nested ones even under countermeasures.
+- [**40**Star][3m] [Py] [icanhasfay/pypwned](https://github.com/icanhasfay/pypwned) A Python client for the HaveIBeenPwned REST API
+- [**40**Star][3d] [Erlang] [homas/ioc2rpz](https://github.com/homas/ioc2rpz) ioc2rpz is a place where threat intelligence meets DNS.
+- [**40**Star][4y] [hexx0r/cve-2016-0051](https://github.com/hexx0r/cve-2016-0051)
+- [**40**Star][3y] [C++] [hackshields/antivirus](https://github.com/hackshields/antivirus)
+- [**40**Star][3y] [Py] [h0nus/spynoteshell](https://github.com/h0nus/spynoteshell) Simple Python tool for backdooring apks files (with meterpreter or shell of Metasploit)
+- [**40**Star][14d] [grapheneos/vanadium](https://github.com/grapheneos/vanadium) Privacy and security enhanced releases of Chromium for GrapheneOS. Vanadium provides the WebView and standard user-facing browser on GrapheneOS. It depends on hardening in other GrapheneOS repositories and doesn't include patches not relevant to the build targets used on GrapheneOS.
+- [**40**Star][2y] [godaddy/yara-rules](https://github.com/godaddy/yara-rules) YARA rules for use with ProcFilter
+- [**40**Star][21d] [JS] [github/enable-security-alerts-sample](https://github.com/github/enable-security-alerts-sample) This repository contains a sample script which can be used to enable security vulnerability alerts in all of the repositories in a given organization.
+- [**40**Star][2y] [C] [gamelinux/cxtracker](https://github.com/gamelinux/cxtracker) Connection Tracker is a passive network connection tracker for profiling, history, auditing and network discovery.
+- [**40**Star][1y] [Shell] [g763007297/gqresign](https://github.com/g763007297/gqresign) ipa重签名(resign),只需一个证书的p12和一个mobileprovision文件就可以实现ipa的重签名
+- [**40**Star][5y] [Py] [fireeye/chopshop](https://github.com/fireeye/chopshop) Protocol Analysis/Decoder Framework
+- [**40**Star][2y] [Py] [fideliscyber/yalda](https://github.com/fideliscyber/yalda) yalda:分析文件,从中提取恶意数据(例如:URL)
+- [**40**Star][4y] [C] [fi01/backdoor_mmap_tools](https://github.com/fi01/backdoor_mmap_tools) Unlock security module, obtain root privilege and so on.
+- [**40**Star][2y] [Pascal] [felipedaragon/plua-xe](https://github.com/felipedaragon/plua-xe) Embed Lua into Delphi, FreePascal or Lazarus projects
+- [**40**Star][1y] [PHP] [farisv/cj2018-final-ctf](https://github.com/farisv/cj2018-final-ctf) Cyber Jawara 2018 Final - Attack & Defense CTF services environments based on Docker.
+- [**40**Star][3y] [Py] [fabiobaroni/was](https://github.com/fabiobaroni/was) Automatic USB drive malware scanning tool for the security-minded person
+- [**40**Star][6y] [JS] [evilpacket/redis-sha-crack](https://github.com/evilpacket/redis-sha-crack) node / redis sha hash cracker
+- [**40**Star][5y] [evi1m0/webshell](https://github.com/evi1m0/webshell) This is a webshell open source project
+- [**40**Star][2y] [c++] [embedi/meitools](https://github.com/embedi/meitools) meitools:通过 MEI 与英特尔管理引擎进行通信
+- [**40**Star][3m] [Groovy] [elastic/elasticsearch-groovy](https://github.com/elastic/elasticsearch-groovy) Elasticsearch Groovy client
+- [**40**Star][7m] [Visual Basic .NET] [dzzie/re_plugins](https://github.com/dzzie/re_plugins) misc reverse engineering plugins
+ - [IDASrvr](https://github.com/dzzie/re_plugins/tree/master/IDASrvr) wm_copydata IPC server running in IDA. allows you to send commands to IDA from another process to query data and control interface display
+ - [IDA_JScript](https://github.com/dzzie/re_plugins/tree/master/IDA_JScript) Script IDA in Javascript
+ - [IDA_JScript_w_DukDbg](https://github.com/dzzie/re_plugins/tree/master/IDA_JScript_w_DukDbg) same as IDA_JScript, but using the dukdbg.ocx as full on javascript debugger
+ - [IDASrvr2](https://github.com/dzzie/re_plugins/tree/master/IDASrvr2) support x64
+ - [IdaUdpBridge](https://github.com/dzzie/re_plugins/tree/master/IdaUdpBridge) this replaces the udp command socket in idavbscript which was crashy
+ - [IdaVbScript](https://github.com/dzzie/re_plugins/tree/master/IdaVbScript) ton of small tools for IDA all thrown into one interface
+ - [OllySrvr](https://github.com/dzzie/re_plugins/tree/master/OllySrvr) wm_copydata IPC server running in olly
+ - [Olly_hittrace](https://github.com/dzzie/re_plugins/tree/master/Olly_hittrace) You set breakpoints in the UI and it will then run the app automating it and logging which ones were hit.
+ - [Olly_module_bpx](https://github.com/dzzie/re_plugins/tree/master/Olly_module_bpx) allow you to set breakpoints within modules which have not yet been loaded.
+ - [Olly_vbscript](https://github.com/dzzie/re_plugins/tree/master/Olly_vbscript) vbscript automation capability for olly including working across breakpoint events.
+ - [PyIDAServer](https://github.com/dzzie/re_plugins/tree/master/PyIDAServer) experiment to test a python based IPC server running in IDA that remote process clients can control and query IDA with.
+ - [Wingraph32](https://github.com/dzzie/re_plugins/tree/master/Wingraph32) This is another experiment at a wingraph32 replacement for ida. This one has more features to hide nodes, and can also navigate IDA to the selected function when you click on it in the graph.
+ - [rabc_gui](https://github.com/dzzie/re_plugins/tree/master/flash_tools/rabc_gui) this is a GUI front end for RABCDAsm to disasm, reasm, and reinsert modified script blocks back into flash files.
+ - [swfdump_gui](https://github.com/dzzie/re_plugins/tree/master/flash_tools/swfdump_gui) when run against a target swf, it will create a decompressed version of the swf and a .txt disasm log file these files will be cached and used on subsequent loads. if you wish to start over from scratch use the tools->delete cached * options.
+ - [gleegraph](https://github.com/dzzie/re_plugins/tree/master/gleegraph) a quick Wingraph32/qwingraph replacement that has some extra features such as being able to navigate IDA to the selected nodes when they are clicked on in graph view, as well as being able to rename the selected node from the graph, or adding a prefix to all child nodes below it.
+ - [hidden_strings](https://github.com/dzzie/re_plugins/tree/master/misc_tools/hidden_strings) scans for strings being build up in char arrays at runtime to hide from traditional strings output
+ - [memdump_conglomerate](https://github.com/dzzie/re_plugins/tree/master/misc_tools/memdump_conglomerate) reads a folder full of memory dumps and puts them all into a single dll husk so they will disassemble at the proper offsets.
+ - [memdump_embedder](https://github.com/dzzie/re_plugins/tree/master/misc_tools/memdump_embedder) takes a memory dump and embeds it into a dummy dll husk so that you can disassemble it at the target base address without having to manually reset it everytime
+ - [rtf_hexconvert](https://github.com/dzzie/re_plugins/tree/master/misc_tools/rtf_hexconvert) small tool to extract hex strings from a rtf document and show them in a listview. click on listitem to see decoded data in a hexeditor pane where you can save it
+ - [uGrapher](https://github.com/dzzie/re_plugins/tree/master/uGrapher) rename real wingraph32.exe to _wingraph.exe and put this one in its place.
+ - [wininet_hooks](https://github.com/dzzie/re_plugins/tree/master/wininet_hooks) httpsendhook.dll hooks the following wininet api calls:HttpOpenRequest,InternetConnect,InternetReadFile,InternetCrackUrl,HttpSendRequest
+- [**40**Star][10m] [C] [dzzie/hookexplorer](https://github.com/dzzie/hookexplorer) technical tool to analyze a process trying to find various types of runtime hooks. Interface and output is geared torwards security experts. Average users wont be able to decipher its output.
+- [**40**Star][5y] [Go] [dutchcoders/troje](https://github.com/dutchcoders/troje) Troje is a honeypot built around lxc containers. It will run each connection with the service within a seperate lxc container.
+- [**40**Star][21d] [Py] [dhondta/rpl-attacks](https://github.com/dhondta/rpl-attacks) RPL attacks framework for simulating WSN with a malicious mote based on Contiki
+- [**40**Star][1y] [Py] [debasishm89/dotnetfuzz](https://github.com/debasishm89/dotnetfuzz) A quick and dirty .NET "Deserialize_*" fuzzer based on James Forshaw's (@tiraniddo) DotNetToJScript.
+- [**40**Star][8y] [C++] [dbtsai/libdai](https://github.com/dbtsai/libdai) A free and open source C++ library for Discrete Approximate Inference in graphical models
+- [**40**Star][2y] [C] [david-reguera-garcia-dreg/lsrootkit](https://github.com/david-reguera-garcia-dreg/lsrootkit) Rootkit Detector for UNIX
+- [**40**Star][C] [d1w0u/arp-rootkit](https://github.com/d1w0u/arp-rootkit) An open source rootkit for the Linux Kernel to develop new ways of infection/detection.
+- [**40**Star][3m] [Dockerfile] [cowrie/docker-cowrie](https://github.com/cowrie/docker-cowrie) Cowrie Docker GitHub repository
+- [**40**Star][3y] [PS] [colemination/poweroutlook](https://github.com/colemination/poweroutlook) Sample code from Owning MS Outlook with Powershell
+- [**40**Star][9m] [Py] [christhecoolhut/rocket-shot](https://github.com/christhecoolhut/rocket-shot) Backwards program slice stitching for automatic CTF problem solving.
+- [**40**Star][1y] [Py] [ccapton/brook-ok](https://github.com/ccapton/brook-ok) brook程序服务端配置程序,一键搭建brook / Shadowsocks / Socks5服务用于科学上网
+- [**40**Star][8m] [C#] [azure/reverse-proxy-dotnet](https://github.com/azure/reverse-proxy-dotnet) Reverse Proxy agent
+- [**40**Star][4y] [CoffeeScript] [atom/loophole](https://github.com/atom/loophole) A hack to enable use of libraries that depend on a basic form of eval in Atom with CSP enabled
+- [**40**Star][2y] [Py] [aqcurate/lsb-steganography](https://github.com/aqcurate/lsb-steganography) Least-Significant-Bit tool for steganography
+- [**40**Star][5y] [C++] [anwarmohamed/packetyzer](https://github.com/anwarmohamed/packetyzer) Packetyzer is a high level library for C++ designed to make easier the forging and decoding of network packets. It has the ability to decode packets of most common network protocols, capture them and send them on the wire. This capability allows construction of tools that can probe, scan or attack networks.
+- [**40**Star][10m] [anudeepnd/pihole-unbound](https://github.com/anudeepnd/pihole-unbound) Guide to setup Unbound recursive DNS resolver with Pi-Hole
+- [**40**Star][3y] [PHP] [ambulong/phpmyxss](https://github.com/ambulong/phpmyxss) A XSS Project
+- [**40**Star][4y] [Py] [alexbredo/honeypot-camera](https://github.com/alexbredo/honeypot-camera) observation camera honeypot
+- [**40**Star][2y] [Py] [agustingianni/memrepl](https://github.com/agustingianni/memrepl) a frida based script that aims to help a researcher in the task of exploitation of memory corruption related bugs
+- [**40**Star][2y] [JS] [agjmills/form-scrape](https://github.com/agjmills/form-scrape) form-scrape:示例chrome 扩展,以演示将JavaScript和html注入页面的危险
+- [**40**Star][1y] [Shell] [adityashrm21/raspberrypi-packet-sniffer](https://github.com/adityashrm21/raspberrypi-packet-sniffer) An HTTP and HTTPS sniffing tool created using a Raspberry Pi
+- [**40**Star][7m] [Py] [aaronsoria/panalizer](https://github.com/aaronsoria/panalizer)
+- [**40**Star][2y] [C#] [aaaddress1/puzzcode](https://github.com/aaaddress1/puzzcode) simple compiler based on mingw to build uncrackable windows application against analysis tools
+- [**40**Star][4y] [Java] [0ang3el/hqli-playground](https://github.com/0ang3el/hqli-playground)
+- [**39**Star][1y] [Py] [ysh329/darknet2caffe](https://github.com/ysh329/darknet2caffe) Convert Darknet model to Caffe's
+- [**39**Star][2y] [Go] [googlecloudplatform/stackdriver-reverse-proxy](https://github.com/googlecloudplatform/stackdriver-reverse-proxy) Simple HTTP proxy to automatically traces the incoming requests
+- [**39**Star][4y] [Py] [joxeankoret/tahh](https://github.com/joxeankoret/tahh) Source codes for "The Antivirus Hackers Handbook" book.
+- [**39**Star][4y] [Py] [honeynet/yapdns](https://github.com/honeynet/yapdns) YAPDNS
+- [**39**Star][3y] [Py] [xl7dev/sectools](https://github.com/xl7dev/sectools) Pentests tools
+- [**39**Star][2m] [Py] [meituan-dianping/lyrebird-ios](https://github.com/meituan-dianping/lyrebird-ios) 本程序是Lyrebird插件,您可以在插件中快速查看已连接iOS设备的详细设备信息,截取屏幕快照,以及查看已连接设备的应用信息。
+- [**39**Star][1y] [Py] [tarunkant/endpoint-finder](https://github.com/tarunkant/endpoint-finder) Finds the End-Points in JavaScript files
+- [**39**Star][10m] [Go] [zmap/zannotate](https://github.com/zmap/zannotate) Utility for annotating Internet datasets with contextual metadata (e.g., origin AS, MaxMind GeoIP2, reverse DNS, and WHOIS)
+- [**39**Star][1y] [Perl] [cldrn/davtest](https://github.com/cldrn/davtest) davtest (improved)- Exploits WebDAV folders
+- [**39**Star][11m] [Java] [thelinuxchoice/droidcam](https://github.com/thelinuxchoice/droidcam) Script to generate an Android App to take photos from Cameras
+- [**39**Star][10m] [Kotlin] [cbeuw/cloak-android](https://github.com/cbeuw/cloak-android) Android client of Cloak
+- [**39**Star][2y] [Py] [liang2580/btpanel-ss](https://github.com/liang2580/btpanel-ss) 基于宝塔Linux面板的shadowsocks可视化管理插件
+- [**39**Star][15d] [Verilog] [lvd2/ay-3-8910_reverse_engineered](https://github.com/lvd2/ay-3-8910_reverse_engineered) The reverse-engineered AY-3-8910 chip. Transistor-level schematics, verilog model and a testbench with tools, that can render register dump files into .flac soundtrack.
+- [**39**Star][10m] [Java] [zhongxunking/ids](https://github.com/zhongxunking/ids) 高效的分布式id生成器,每个客户端实例tps可达到100万,服务端毫无压力。即使服务端宕机了,id生成依然可用。支持多数据中心,支持id加密。
+- [**39**Star][5m] [Java] [scalesec/vulnado](https://github.com/scalesec/vulnado) Purposely vulnerable Java application to help lead secure coding workshops
+- [**39**Star][3m] [Java] [x41sec/beanstack](https://github.com/x41sec/beanstack) X41 BeanStack - Stack Trace Fingerprinting BETA
+- [**39**Star][2m] [Assembly] [pelock/simple-polymorphic-engine-spe32](https://github.com/pelock/simple-polymorphic-engine-spe32) Simple Polymorphic Engine (SPE32) is a simple polymorphic engine for encrypting code and data. It is an amateur project that can be used to demonstrate what polymorphic engines are.
+- [**39**Star][6y] [Shell] [intelisecurelabs/pineapple-confs](https://github.com/InteliSecureLabs/Pineapple-Confs) TPLink Pineapple Mods
+- [**39**Star][10m] [C] [fsecurelabs/3d-accelerated-exploitation](https://github.com/FSecureLABS/3d-accelerated-exploitation) 3D Accelerated Exploitation
+- [**39**Star][2y] [PS] [msadministrator/pprt](https://github.com/MSAdministrator/PPRT) This module is used to report phishing URLs to their WHOIS/RDAP abuse contact information.
+- [**39**Star][3y] [Visual Basic .NET] [mwsrc/betterrat](https://github.com/mwsrc/BetterRAT) Better Remote Access Trojan
+- [**39**Star][10m] [Java] [tijme/similar-request-excluder](https://github.com/tijme/similar-request-excluder) A Burp Suite extension that automatically marks similar requests as 'out-of-scope'.
+- [**39**Star][6d] [Dockerfile] [ironpeakservices/iron-alpine](https://github.com/ironPeakServices/iron-alpine) Hardened alpine linux baseimage for Docker.
+- [**39**Star][8y] [Py] [zynamics/bincrowd-plugin-ida](https://github.com/zynamics/bincrowd-plugin-ida) BinCrowd Plugin for IDA Pro
+- [**39**Star][2y] [Py] [zjx20/socks-cli](https://github.com/zjx20/socks-cli) A solution to make CLI commands use socks5 proxy.
+- [**39**Star][3y] [C++] [zibility/anti-rootkits](https://github.com/zibility/anti-rootkits) 内核级ARK工具。
+- [**39**Star][4y] [C] [xvilka/hacklu](https://github.com/xvilka/hacklu)
+- [**39**Star][2y] [ObjC] [xpreeks/g0blin](https://github.com/xpreeks/g0blin) v0rtex + yalu102
+- [**39**Star][7y] [Perl] [xme/cuckoomx](https://github.com/xme/cuckoomx) CuckooMX is a project to automate analysis of files transmitted over SMTP (using the Cuckoo sandbox)
+- [**39**Star][5y] [C] [x43x61x69/codeunsign](https://github.com/x43x61x69/codeunsign) A Mach-O binary codesign remover.
+- [**39**Star][6y] [Java] [wuntee/burpauthzplugin](https://github.com/wuntee/burpauthzplugin)
+- [**39**Star][3y] [Py] [wraith-wireless/wraith](https://github.com/wraith-wireless/wraith) Wireless Reconnaissance And Intelligent Target Harvesting
+- [**39**Star][6y] [Py] [viaforensics/android-encryption](https://github.com/viaforensics/android-encryption) Brute force and decryption of Android's Full Device Encryption
+- [**39**Star][2y] [Py] [vah13/sap_vulnerabilities](https://github.com/vah13/sap_vulnerabilities) DoS PoC's for SAP products
+- [**39**Star][8d] [Shell] [userlandkernel/plataoplomo](https://github.com/userlandkernel/plataoplomo) Collection of (at time of release) iOS bugs I found
+- [**39**Star][2y] [C] [tum-i22/obfuscation-benchmarks](https://github.com/tum-i22/obfuscation-benchmarks) A set of programs used for benchmarking the strength of obfuscation
+- [**39**Star][3y] [Py] [tomasreimers/tensorflow-graph-compression](https://github.com/tomasreimers/tensorflow-graph-compression) Compress graph files for tensorflow.
+- [**39**Star][5y] [Shell] [tjluoma/bash-fix](https://github.com/tjluoma/bash-fix) Download and compile a new version of bash to replace vulnerable one
+- [**39**Star][10m] [Go] [timothyye/namebeta](https://github.com/timothyye/namebeta) A command line domain query tool.
+- [**39**Star][2y] [Java] [tiked/androrw](https://github.com/tiked/androrw) PoC Ransomware for android
+- [**39**Star][1y] [Assembly] [therealsaumil/arm_shellcode](https://github.com/therealsaumil/arm_shellcode) Make ARM Shellcode Great Again
+- [**39**Star][2y] [Py] [thecjw/ida_android_script](https://github.com/thecjw/ida_android_script) some idapython scripts for android debugging.
+- [**39**Star][5y] [Py] [techbliss/adb_helper_qt_super_version](https://github.com/techbliss/adb_helper_qt_super_version) All You Need For Ida Pro And Android Debugging
+- [**39**Star][4y] [Py] [takahiroharuyama/openioc_scan](https://github.com/takahiroharuyama/openioc_scan) openioc_scan Volatility Framework plugin
+- [**39**Star][3y] [Shell] [superkojiman/rfishell](https://github.com/superkojiman/rfishell) Provide a shell-like interface for exploiting Remote File Inclusion vulnerabilities.
+- [**39**Star][1y] [Py] [sundaysec/andspoilt](https://github.com/sundaysec/andspoilt) Run interactive android exploits in linux.
+- [**39**Star][4m] [C] [stephenrkell/trap-syscalls](https://github.com/stephenrkell/trap-syscalls) Monitor, rewrite and/or otherwise trap system calls... on Linux/x86-64 only, for now.
+- [**39**Star][5m] [HTML] [sophoslabs/cve-2019-0888](https://github.com/sophoslabs/cve-2019-0888) PoC for CVE-2019-0888 - Use-After-Free in Windows ActiveX Data Objects (ADO)
+- [**39**Star][3y] [C#] [sneaksensed/hiddentear](https://github.com/sneaksensed/hiddentear) HiddenTear Cyan Edition - A real life ransomware coded in C#
+- [**39**Star][6y] [C] [smartinm/diskcryptor](https://github.com/smartinm/diskcryptor) DiskCryptor - Open source partition encryption solution
+- [**39**Star][4y] [C++] [simutrace/simutrace](https://github.com/simutrace/simutrace) Tracing framework for full system simulators
+- [**39**Star][5m] [Py] [silv3rhorn/artifactextractor](https://github.com/silv3rhorn/artifactextractor) Extract common Windows artifacts from source images and VSCs
+- [**39**Star][8m] [JS] [shadow-workers/shadow-workers](https://github.com/shadow-workers/shadow-workers) Shadow Workers is a free and open source C2 and proxy designed for penetration testers to help in the exploitation of XSS and malicious Service Workers (SW)
+- [**39**Star][4y] [Pascal] [senjaxus/delphi_remote_access_pc](https://github.com/senjaxus/delphi_remote_access_pc) Remote access in Delphi 7 and Delphi XE5 (With sharer files, CHAT and Forms Inheritance) || Acesso Remoto em Delphi 7 e Delphi XE5 (Com Compartilhador de Arquivos, CHAT e Herança de Formulários)
+- [**39**Star][9m] [Py] [secgroup/mignis](https://github.com/secgroup/mignis) Mignis is a semantic based tool for firewall configuration.
+- [**39**Star][13d] [Py] [sdnewhop/grinder](https://github.com/sdnewhop/grinder)
+- [**39**Star][1y] [JS] [sauldoescode/rilti.js](https://github.com/sauldoescode/rilti.js) a small opinionated future forward front-end framework
+- [**39**Star][3y] [C++] [sam-b/hacksysdriverexploits](https://github.com/sam-b/hacksysdriverexploits)
+- [**39**Star][9m] [Py] [sadfud/exploits](https://github.com/sadfud/exploits) Real world and CTFs exploiting web/binary POCs.
+- [**39**Star][9m] [Py] [rr-/ida-images](https://github.com/rr-/ida-images) Image preview plugin for IDA disassembler.
+- [**39**Star][3y] [C++] [rootkiter/reverse-engineering](https://github.com/rootkiter/reverse-engineering) 软件逆向
+- [**39**Star][1y] [Batchfile] [romanzaikin/ollydbg-v1.10-with-best-plugins-and-immunity-debugger-theme-](https://github.com/romanzaikin/ollydbg-v1.10-with-best-plugins-and-immunity-debugger-theme-) Make OllyDbg v1.10 Look like Immunity Debugger & Best Plugins
+- [**39**Star][3y] [ActionScript] [riusksk/flashscanner](https://github.com/riusksk/flashscanner) Flash XSS Scanner
+- [**39**Star][5y] [PHP] [ridter/webshell](https://github.com/ridter/webshell) This is a webshell open source project
+- [**39**Star][2y] [Py] [resultsmayvary/ctf](https://github.com/resultsmayvary/ctf) CTF Writeups
+- [**39**Star][3y] [Py] [rebootuser/hashmash](https://github.com/rebootuser/hashmash) Hashmash is a tool to aid in generating hashes from user supplied values and Epochs
+- [**39**Star][10m] [M4] [raspberrypi/usbbootgui](https://github.com/raspberrypi/usbbootgui) GUI for booting a Raspberry Pi device like Pi Zero or compute module as a device
+- [**39**Star][12m] [ranginang67/firecrack](https://github.com/ranginang67/firecrack)
+- [**39**Star][2y] [Java] [quhw/xtunnel](https://github.com/quhw/xtunnel) An useful TCP/SSL tunnel utility.
+- [**39**Star][6y] [Py] [proteansec/fuzzyftp](https://github.com/proteansec/fuzzyftp) The FTP fuzzer for Sulley and Peach.
+- [**39**Star][3y] [Java] [portswigger/authz](https://github.com/portswigger/authz)
+- [**39**Star][2y] [C#] [phylliida/unityvoip](https://github.com/phylliida/unityvoip) [Doesn't work now sorry] Real time peer to peer voice chat in Unity, using CSCore, NSpeex, and UnityP2P
+- [**39**Star][2y] [VHDL] [pedrorivera/siafpgaminer](https://github.com/pedrorivera/siafpgaminer) VHDL FPGA design of an optimized Blake2b pipeline to mine Siacoin
+- [**39**Star][1y] [PS] [outflanknl/doh_c2_trigger](https://github.com/outflanknl/doh_c2_trigger) Code for blogpost:
+- [**39**Star][2m] [Go] [opencoff/go-tunnel](https://github.com/opencoff/go-tunnel) TLS/SSL Tunnel - A modern STunnel replacement written in golang
+- [**39**Star][4m] [TS] [oleavr/frida-agent-example](https://github.com/oleavr/frida-agent-example) Example Frida agent written in TypeScript
+- [**39**Star][4m] [CSS] [oasis-open/cti-documentation](https://github.com/oasis-open/cti-documentation) OASIS TC Open Repository: GitHub Pages site for STIX, CybOX, and TAXII
+- [**39**Star][5d] [Py] [ntdiff/ntdiff](https://github.com/ntdiff/ntdiff)
+- [**39**Star][10m] [Py] [noobscode/kalel](https://github.com/noobscode/kalel) Kal El Network Stress Test and Penetration Testing Toolkit
+- [**39**Star][1y] [Py] [netspi/spoofspotter](https://github.com/netspi/spoofspotter) A tool to catch spoofed NBNS responses.
+- [**39**Star][2y] [PHP] [nao-sec/mal_getter](https://github.com/nao-sec/mal_getter) Tool for dropping malware from EK
+- [**39**Star][2y] [Py] [mthbernardes/houseproxy](https://github.com/mthbernardes/houseproxy) Protect your parents from phishing
+- [**39**Star][2m] [Ruby] [mrackwitz/jeroboam](https://github.com/mrackwitz/jeroboam) Check all your apps on macOS for vulnerable Sparkle updaters
+- [**39**Star][11m] [Py] [mpgn/beast-poc](https://github.com/mpgn/beast-poc)
+- [**39**Star][10m] [Go] [moriyoshi/devproxy](https://github.com/moriyoshi/devproxy) A swiss army knife of forward HTTP proxies
+- [**39**Star][7m] [HTML] [mindflavor/tdsbridge](https://github.com/mindflavor/tdsbridge) TDS Proxy library
+- [**39**Star][2y] [milkdevil/ultimateapplockerbypasslist](https://github.com/milkdevil/ultimateapplockerbypasslist)
+- [**39**Star][6y] [Perl] [micahflee/trollwot](https://github.com/micahflee/trollwot) Trolling the Web of Trust
+- [**39**Star][6m] [Batchfile] [meesong/nt-crucial-modules](https://github.com/meesong/nt-crucial-modules) Collect different versions of Crucial modules.
+- [**39**Star][7m] [Dockerfile] [marco-lancini/docker_burp](https://github.com/marco-lancini/docker_burp) Burp Pro as a Docker Container
+- [**39**Star][1m] [JS] [lydell/eslump](https://github.com/lydell/eslump) Fuzz testing JavaScript parsers and suchlike programs.
+- [**39**Star][10m] [lj147/awesome-wechat](https://github.com/lj147/awesome-wechat) 技术型干货分享公众号集合,点击公众号链接即可扫描快速二维码。
+- [**39**Star][3y] [Shell] [lawliet89/llvm-obfuscator](https://github.com/lawliet89/llvm-obfuscator) LLVM Obfuscator
+- [**39**Star][2y] [JS] [laomu1988/koa2-proxy](https://github.com/laomu1988/koa2-proxy) 基于koa@next的代理工具,支持http和https,并且可以当做本地服务器使用
+- [**39**Star][4y] [C] [laginimaineb/waroftheworlds](https://github.com/laginimaineb/waroftheworlds) QSEE Shellcode to directly hijack the "Normal World" Linux Kernel
+- [**39**Star][4m] [C#] [killeroo/powerping](https://github.com/killeroo/powerping) Advanced command-line ping tool
+- [**39**Star][11m] [Py] [keli/furion](https://github.com/keli/furion) Socks5 + SSL Proxy
+- [**39**Star][3y] [Java] [kdkanishka/virustotal-public-api-v2.0-client](https://github.com/kdkanishka/virustotal-public-api-v2.0-client) VirusTotal public API 2.0 implementation in Java
+- [**39**Star][10m] [Go] [joanbono/gurp](https://github.com/joanbono/gurp) Burp Commander written in Go
+- [**39**Star][3y] [Py] [jevalenciap/iptodomain](https://github.com/jevalenciap/iptodomain) This tool extract domains from IP address based in the information saved in virustotal.
+- [**39**Star][2y] [Py] [jas502n/st2-048](https://github.com/jas502n/st2-048) st2-048
+- [**39**Star][2y] [PS] [jaredhaight/powershellclasslab](https://github.com/jaredhaight/powershellclasslab)
+- [**39**Star][2y] [Py] [jamespayor/vector-homomorphic-encryption](https://github.com/jamespayor/vector-homomorphic-encryption) 6.857 project - implementation of scheme for encrypting integer vectors that allows addition, linear transformation, and weighted inner products.
+- [**39**Star][3m] [Go] [jakejarvis/subtake](https://github.com/jakejarvis/subtake) Automatic finder for subdomains vulnerable to takeover. Written in Go, based on
+- [**39**Star][10y] [izsh/ida-python-scripts](https://github.com/izsh/ida-python-scripts) IDA Python Scripts
+- [**39**Star][6y] [Clojure] [isecpartners/scout](https://github.com/isecpartners/scout) AWS EC2 and S3 Security Auditing Tool
+- [**39**Star][2m] [igorbrigadir/twitter-advanced-search](https://github.com/igorbrigadir/twitter-advanced-search) Advanced Search for Twitter.
+- [**39**Star][2y] [HTML] [hugsy/codebro](https://github.com/hugsy/codebro) Web based code browser using clang to provide basic code analysis.
+- [**39**Star][3y] [Py] [houbbit/haveibeenpwned](https://github.com/houbbit/haveibeenpwned) Python script to verify multiple email addresses for pwnage
+- [**39**Star][3m] [C] [hlandau/ortega](https://github.com/hlandau/ortega) Ortega FDK
+- [**39**Star][3y] [C++] [hasherezade/petya_recovery](https://github.com/hasherezade/petya_recovery) Application for cracking Red Petya key based on genetic algorithms.
+- [**39**Star][4m] [hackingthings/publications](https://github.com/hackingthings/publications) All related files and slides for past talks
+- [**39**Star][3y] [grrrdog/zeronights-hackquest-2016](https://github.com/grrrdog/zeronights-hackquest-2016) 2 web tasks from ZeroNights HackQuest 2016
+- [**39**Star][1y] [Dockerfile] [gmdutra/docker-inurlbr](https://github.com/gmdutra/docker-inurlbr) Advanced search in search engines, enables analysis provided to exploit GET / POST capturing emails & urls, with an internal custom validation junction for each target / url found.
+- [**39**Star][3m] [Py] [gh2o/rvi_capture](https://github.com/gh2o/rvi_capture) rvictl for Linux and Windows: capture packets sent/received by iOS devices
+- [**39**Star][7y] [C] [gdbinit/gimmedebugah](https://github.com/gdbinit/gimmedebugah) A small utility to inject a Info.plist into binaries.
+- [**39**Star][7m] [Go] [function61/holepunch-client](https://github.com/function61/holepunch-client) Totally self-contained SSH reverse tunnel written in Go
+- [**39**Star][2y] [exploitagency/github-esploit](https://github.com/exploitagency/github-esploit) !!! Deprecated See ESPloitV2 !!! Original PoC(Released: Sep 11, 2016) - WiFi controlled keystroke injection Using ESP8266 and 32u4 based Arduino HID Keyboard Emulator
+- [**39**Star][1y] [Dockerfile] [elejke/docker-socks5](https://github.com/elejke/docker-socks5) Docker для поднятия socks5 proxy сервера
+- [**39**Star][5m] [C++] [egebalci/keylogger](https://github.com/egebalci/keylogger) Simple C++ Keylogger...
+- [**39**Star][2y] [Shell] [e-f-a/v3](https://github.com/e-f-a/v3) E.F.A version 3.x.x.x
+- [**39**Star][1m] [d1nfinite/sec-interview](https://github.com/d1nfinite/sec-interview) 信息安全面试题汇总
+- [**39**Star][1y] [Py] [dissectmalware/malwarecmdmonitor](https://github.com/dissectmalware/malwarecmdmonitor) Shows command lines used by latest instances analyzed on Hybrid-Analysis
+- [**39**Star][1y] [Py] [dissectmalware/batch_deobfuscator](https://github.com/dissectmalware/batch_deobfuscator) Deobfuscate batch scripts obfuscated using string substitution and escape character techniques.
+- [**39**Star][3y] [Java] [directdefense/superserial-active](https://github.com/directdefense/superserial-active) SuperSerial-Active - Java Deserialization Vulnerability Active Identification Burp Extender
+- [**39**Star][5y] [Py] [dionach/passhunt](https://github.com/dionach/passhunt) Search drives for documents containing passwords
+- [**39**Star][4y] [JS] [digitalbond/canbus-utils](https://github.com/digitalbond/canbus-utils) Command line utilities for analyzing CANbus traffic
+- [**39**Star][4y] [PS] [dfinke/onegetgistprovider](https://github.com/dfinke/onegetgistprovider) Gist-as-a-Package - PackageManagement PowerShell Provider to interop with Github Gists
+- [**39**Star][1y] [CSS] [destructivevoice/destructivefarm](https://github.com/destructivevoice/destructivefarm) Exploit farm for attack-defense CTF competitions
+- [**39**Star][5y] [C] [cyanogenmod/android_external_openssl](https://github.com/cyanogenmod/android_external_openssl) OpenSSL for Android
+- [**39**Star][5y] [JS] [csh/stegosploit](https://github.com/csh/stegosploit) IMAJS meet
+- [**39**Star][1y] [Py] [csecgroup/wafid](https://github.com/csecgroup/wafid) Wafid identify and fingerprint Web Application Firewall (WAF) products.
+- [**39**Star][2y] [Py] [cryptokrishtopher/binancescanner](https://github.com/cryptokrishtopher/binancescanner)
+- [**39**Star][5m] [Java] [coveros/zap-sonar-plugin](https://github.com/coveros/zap-sonar-plugin) Integrates OWASP Zed Attack Proxy reports into SonarQube
+- [**39**Star][4y] [C++] [corelan/pin](https://github.com/corelan/pin) Collection of pin tools
+- [**39**Star][3y] [C] [cn33liz/hsevd-arbitraryoverwritegdi](https://github.com/cn33liz/hsevd-arbitraryoverwritegdi) HackSys Extreme Vulnerable Driver - ArbitraryOverwrite Exploit using GDI
+- [**39**Star][4m] [cmlh/maltego-haveibeenpwned](https://github.com/cmlh/maltego-haveibeenpwned) Maltego integration of
+- [**39**Star][2y] [HTML] [chybeta/cve-2018-1000006-demo](https://github.com/chybeta/cve-2018-1000006-demo) The Demo for CVE-2018-1000006
+- [**39**Star][1y] [chichou/10.13.5-sip-bypass](https://github.com/chichou/10.13.5-sip-bypass)
+- [**39**Star][3y] [Py] [brianwrf/sambahunter](https://github.com/brianwrf/sambahunter) It is a simple script to exploit RCE for Samba (CVE-2017-7494 ).
+- [**39**Star][5y] [JS] [breach/mod_strip](https://github.com/breach/mod_strip) Breach default layout / tabbing module
+- [**39**Star][11m] [Go] [boy-hack/gowhatweb](https://github.com/boy-hack/gowhatweb) [学习GO] go语言写的web指纹识别 - Identify websites by go language
+- [**39**Star][2y] [Py] [bonelee/dns_tunnel_dectect_with_cnn](https://github.com/bonelee/dns_tunnel_dectect_with_cnn) dns tunnel dectect with CNN
+- [**39**Star][2y] [Java] [bit4woo/burp_collaborator_http_api](https://github.com/bit4woo/burp_collaborator_http_api) burp_collaborator_http_api: 基于Burp Collaborator的HTTP API
+- [**39**Star][9m] [binarymist/holisticinfosec-for-webdevelopers-fascicle0](https://github.com/binarymist/holisticinfosec-for-webdevelopers-fascicle0)
+- [**39**Star][2y] [C] [bi-zone/rdtsc-checkvirt-poc](https://github.com/bi-zone/rdtsc-checkvirt-poc) rdtsc-checkvirt-poc: 利用预测执行(speculative execution)检测虚拟化
+- [**39**Star][9y] [OCaml] [berke/jsure](https://github.com/berke/jsure) JSure is a fast, standalone Javascript checker.
+- [**39**Star][7y] [C++] [bend/rar_crack](https://github.com/bend/rar_crack) A rar password cracker using brute force attack
+- [**39**Star][13d] [C] [bdutro/ibm_pw_clear](https://github.com/bdutro/ibm_pw_clear) Small EFI utility that clears the power-on and setup passwords in IBM x3550/x3650 M3 servers
+- [**39**Star][2y] [Lua] [bcsecorg/ethereum_devp2p_wireshark_dissector](https://github.com/bcsecorg/ethereum_devp2p_wireshark_dissector) This is Ethereum devp2p protocol dissector plugin for wireshark.
+- [**39**Star][7m] [Py] [bbva/patton-cli](https://github.com/bbva/patton-cli) The knife of the Admin & Security auditor
+- [**39**Star][2y] [Go] [averagesecurityguy/searchscan](https://github.com/averagesecurityguy/searchscan) Search Nmap and Metasploit scanning scripts.
+- [**39**Star][3y] [JS] [auth0-blog/nodejs-awesome-polls](https://github.com/auth0-blog/nodejs-awesome-polls)
+- [**39**Star][3y] [C++] [attackercan/cpp-sql-fuzzer](https://github.com/attackercan/cpp-sql-fuzzer)
+- [**39**Star][3y] [C] [arinerron/cve-2016-5195](https://github.com/arinerron/cve-2016-5195) Automated Android root via CVE-2016-5195 (dirtycow/dirtyc0w PoC)
+- [**39**Star][2y] [Roff] [apxar/xlog](https://github.com/apxar/xlog) web日志扫描工具
+- [**39**Star][2y] [ActionScript] [appsecco/json-flash-csrf-poc](https://github.com/appsecco/json-flash-csrf-poc) This repo contains the files required to perform a CSRF attack using Flash and HTTP 307 redirections.
+- [**39**Star][2y] [Java] [aninstein/network-security-situation-awareness-system](https://github.com/aninstein/network-security-situation-awareness-system) 综合了资产检测,主机扫描,流量分析等技术,通过这些技术取得网络资产,脆弱性,威胁等指标,从而根据这些指标计算出当前网络的网络安全态势。
+- [**39**Star][3y] [C] [andnxor/andnxor_dc24_badge](https://github.com/andnxor/andnxor_dc24_badge) AND!XOR DEFCON 24 Badge HW and SW
+- [**39**Star][4m] [PS] [absozed/steamprivesc](https://github.com/absozed/steamprivesc) Simple tool collection for escalation to NT AUTHORITY\SYSTEM from recently disclosed Steam Client Zero Day
+- [**39**Star][1y] [dcid/ossec-hids](https://bitbucket.org/dcid/ossec-hids)
+- [**38**Star][2m] [Py] [kamingchan/shadowsocks-munager](https://github.com/kamingchan/shadowsocks-munager) Middleware of shadowsocks-libev and sspanel
+- [**38**Star][1m] [Lua] [hackertarget/nmap-nse-scripts](https://github.com/hackertarget/nmap-nse-scripts) Nmap NSE scripts that have been customised or created
+- [**38**Star][] [Rust] [verideth/dll_hook-rs](https://github.com/verideth/dll_hook-rs) Rust code to show how hooking in rust with a dll works.
+- [**38**Star][3y] [HTML] [cryptogenic/ps4-playground-3.55](https://github.com/cryptogenic/ps4-playground-3.55) A 3.55 implementation of PS4 Playground (based on CTurt's 1.76 original)
+- [**38**Star][5y] [Py] [internetwache/ssh-honeypot](https://github.com/internetwache/ssh-honeypot) Simple SSH Honeypot in Python
+- [**38**Star][4m] [HCL] [trailofbits/algo-ng](https://github.com/trailofbits/algo-ng) Experimental version of Algo built on Terraform
+- [**38**Star][3y] [wtsxdev/exploit-development](https://github.com/wtsxdev/exploit-development) Resources for learning about Exploit Development
+- [**38**Star][3m] [Py] [fireeye/win10_volatility](https://github.com/fireeye/win10_volatility) An advanced memory forensics framework
+- [**38**Star][3m] [C++] [aliyuchang33/hv2ray](https://github.com/aliyuchang33/hv2ray) A linux GUI tool for v2ray base on QT.
+- [**38**Star][3m] [Py] [oasis-open/cti-taxii-client](https://github.com/oasis-open/cti-taxii-client) OASIS TC Open Repository: TAXII 2 Client Library Written in Python
+- [**38**Star][7m] [Py] [k8gege/ciscoexploit](https://github.com/k8gege/ciscoexploit) Cisco Exploit (CVE-2019-1821 Cisco Prime Infrastructure Remote Code Execution/CVE-2019-1653/Cisco SNMP RCE/Dump Cisco RV320 Password)
+- [**38**Star][18d] [Swift] [fonta1n3/fullynoded](https://github.com/fonta1n3/fullynoded) A Bitcoin Core GUI for iOS devices. Allows you to connect to and control multiple nodes via Tor
+- [**38**Star][1m] [lucasnaja/useful-dev-tools](https://github.com/lucasnaja/useful-dev-tools)
+- [**38**Star][3m] [JS] [iwinston/javascript-code-protection-example](https://github.com/iwinston/javascript-code-protection-example) An example of JavaScript code protection
+- [**38**Star][2y] [Py] [walkerfuz/pydbgeng](https://github.com/walkerfuz/PyDbgEng) a python wrapper of debug engines on windows, linux or osx, it's only aim to auto fuzzing.
+- [**38**Star][2y] [vysecurity/cobaltsplunk](https://github.com/vysecurity/CobaltSplunk) Splunk Dashboard for CobaltStrike logs
+- [**38**Star][1y] [C++] [contionmig/lsass-usermode-bypass](https://github.com/ContionMig/LSASS-Usermode-Bypass) This bypass is for anti cheats like battleye and EAC. All this does is abuse lsass's handles and use them for yourself. This is quite useful as this is usermode which doesnt require you to find a way to load a driver
+- [**38**Star][3y] [C++] [hluwa/smali-anti-usageseach](https://github.com/hluwa/Smali-Anti-UsageSeach) 隐藏关键方法的相关调用
+- [**38**Star][2y] [Py] [pegasuslab/wifi-miner-detector](https://github.com/PegasusLab/WiFi-Miner-Detector) Detecting malicious WiFi with mining cryptocurrency.
+- [**38**Star][4m] [Py] [projecthorus/wenet](https://github.com/projecthorus/wenet) Wenet ("The Swift One") - Transmit and Receive code for the Project Horus High-Speed Imagery Payload.
+- [**38**Star][4y] [C] [dadas190/penetrator-wps](https://github.com/dadas190/penetrator-wps) 实时攻击多个启用了WPS的AP
+- [**38**Star][5y] [C++] [livemirror/pcshare](https://github.com/LiveMirror/pcshare)
+- [**38**Star][2y] [C++] [lijuno/nrf24_ble](https://github.com/lijuno/nRF24_BLE) Hacking nRF24L01+ as a low-cost BLE beacon
+- [**38**Star][1y] [Py] [initstring/evil-ssdp](https://gitlab.com/initstring/evil-ssdp)
+- [**38**Star][3y] [JS] [zhuzhibo0/sslcloud](https://github.com/zhuzhibo0/sslcloud)
+- [**38**Star][8m] [Py] [zeroq/amun](https://github.com/zeroq/amun) Amun Honeypot
+- [**38**Star][2y] [Py] [ytisf/muninn](https://github.com/ytisf/muninn) A short and small memory forensics helper.
+- [**38**Star][1m] [Py] [yaleimeng/free_proxy_pool](https://github.com/yaleimeng/free_proxy_pool) 对免费代理IP网站进行爬取,收集汇总为自己的代理池。关键是验证代理的有效性、匿名性、去重复
+- [**38**Star][4y] [Java] [xyntax/jboss-exp](https://github.com/xyntax/jboss-exp) java反序列化漏洞利用-JBOSS(含payload生成的java项目,漏洞利用py脚本,shodan部分目标主机搜索结果)
+- [**38**Star][5y] [PHP] [xpaw/httpsys](https://github.com/xpaw/httpsys)
+- [**38**Star][5y] [xionox/moz-tor-relays](https://github.com/xionox/moz-tor-relays)
+- [**38**Star][6y] [C] [x43x61x69/mach-o-prettifier](https://github.com/x43x61x69/mach-o-prettifier) A Mach-O Load Command deobfuscator.
+- [**38**Star][3m] [Lua] [wubonetcn/luawaf](https://github.com/wubonetcn/luawaf) A secure and privately deployable web application firewall(WAF).一个安全、可私有部署的Web应用防火墙(WAF)。
+- [**38**Star][3m] [Java] [voorivex/andrill](https://github.com/voorivex/andrill) a vulnerable mobile application interacting with a back-end API
+- [**38**Star][10d] [JS] [tryghost/gscan](https://github.com/tryghost/gscan) Ghost theme scanner - checks for errors and feature support
+- [**38**Star][8m] [Go] [tripwire/padcheck](https://github.com/tripwire/padcheck) TLS CBC Padding Oracle Checker
+- [**38**Star][28d] [Py] [trailofbits/manticore-examples](https://github.com/trailofbits/manticore-examples) Example Manticore scripts
+- [**38**Star][3y] [CSS] [thundercls/x64dbg_vs_dark](https://github.com/thundercls/x64dbg_vs_dark) x64dbg stylesheet like visual studio dark theme
+- [**38**Star][3y] [HTML] [thugs-rumal/rumal](https://github.com/thugs-rumal/rumal) Thug's Rumāl: a Thug's dress & weapon
+- [**38**Star][8m] [Java] [thomasdarimont/spring-boot-admin-keycloak-example](https://github.com/thomasdarimont/spring-boot-admin-keycloak-example) Example for protecting Spring Boot Admin & Spring Boot Actuator endpoints with Keycloak
+- [**38**Star][4y] [HTML] [tevora-threat/splunk_pentest_app](https://github.com/tevora-threat/splunk_pentest_app) splunk_pentest_app
+- [**38**Star][3m] [HTML] [terjanq/flag-capture](https://github.com/terjanq/flag-capture) Solutions and write-ups from security-based competitions also known as Capture The Flag competition
+- [**38**Star][3y] [team-firebugs/burp-lfi-tests](https://github.com/team-firebugs/burp-lfi-tests) Fuzzing for LFI using Burpsuite
+- [**38**Star][23d] [YARA] [te-k/pe](https://github.com/te-k/pe) CLI tool to analyze PE files
+- [**38**Star][2y] [C++] [tanninone/usvfs](https://github.com/tanninone/usvfs) library using api hooking to implement process-local filesystem-independent file links.
+- [**38**Star][1y] [Py] [tanc7/arms-commander](https://github.com/tanc7/arms-commander) Malware Suite/Menu designed for "Speedy and No-Mistakes Penetration Testing", written in Python 2.7.13 and tested on Kali Linux 4.6 & 4.9, originally intended to only perform the Reconnaissance and Enumeration Stages (it's role is dramatically expanded now). Requires Python 2.7 + Pip + Termcolor Module. All code is entirely free to be used in yo…
+- [**38**Star][4y] [C] [taichisocks/shadowsocks](https://github.com/taichisocks/shadowsocks) Lightweight shadowsocks client for iOS and Mac OSX base on shadowsocks-libev
+- [**38**Star][2y] [C++] [struct/hardenedpartitionalloc](https://github.com/struct/hardenedpartitionalloc) A forked and hardened version of PartitionAlloc from Chrome's Blink engine
+- [**38**Star][6d] [C] [stefanberger/libtpms](https://github.com/stefanberger/libtpms) The libtpms library provides software emulation of a Trusted Platform Module (TPM 1.2 and TPM 2.0)
+- [**38**Star][3m] [spiderlabs/iocs-idps](https://github.com/spiderlabs/iocs-idps) This repository will hold PCAP IOC data related with known malware samples (owner: Bryant Smith)
+- [**38**Star][3y] [C] [spender-sandbox/cuckoomon-modified](https://github.com/spender-sandbox/cuckoomon-modified) Modified edition of cuckoomon
+- [**38**Star][6y] [C] [shjalayeri/pwnypot](https://github.com/shjalayeri/pwnypot) PwnyPot, High Interaction Client Honeypot
+- [**38**Star][2y] [C] [shellbombs/strongod](https://github.com/shellbombs/strongod) StrongOD(anti anti-debug plugin) driver source code.
+- [**38**Star][4y] [Assembly] [sh3llc0d3r1337/windows_reverse_shell_1](https://github.com/sh3llc0d3r1337/windows_reverse_shell_1) Windows Reverse Shell shellcode
+- [**38**Star][3y] [C] [scubsrgroup/taint-analyse](https://github.com/scubsrgroup/taint-analyse) Windows平台下的细粒度污点分析工具
+- [**38**Star][14d] [Go] [scrapinghub/crawlera-headless-proxy](https://github.com/scrapinghub/crawlera-headless-proxy) A complimentary proxy to help to use Crawlera with headless browsers
+- [**38**Star][3y] [C++] [scalys7/privilege-escalation-framework](https://github.com/scalys7/privilege-escalation-framework) Privilege Escilation training project, with an emphasis on the distinction between vulnerability research & it's exposure and exploitation methods(which are CVE-independent.)
+- [**38**Star][4y] [C++] [sam-b/cve-2014-4113](https://github.com/sam-b/cve-2014-4113) Trigger and exploit code for CVE-2014-4113
+- [**38**Star][2y] [Py] [saelo/ida_scripts](https://github.com/saelo/ida_scripts) Collection of IDA scripts
+ - [kernelcache](https://github.com/saelo/ida_scripts/blob/master/kernelcache.py) Identify and rename function stubs (plt entries) in an iOS kernelcache. ARM64 only.
+ - [ssdt](https://github.com/saelo/ida_scripts/blob/master/ssdt.py) Resolve syscall table entries in the Windows kernel.
+- [**38**Star][11d] [Py] [saeeddhqan/maryam](https://github.com/saeeddhqan/maryam) Open-source Intelligence(OSINT) Framework
+- [**38**Star][1y] [Shell] [rordi/docker-antivirus](https://github.com/rordi/docker-antivirus) Docker antivirus & malware scanning (antivirus as a microservice / antivirus as a container)
+- [**38**Star][10m] [PS] [rootup/redteam](https://github.com/rootup/redteam) One line PS scripts that may come handy during your network assesment
+- [**38**Star][2y] [Py] [roothaxor/pystat](https://github.com/roothaxor/pystat) Advanced Netstat Using Python For Windows
+- [**38**Star][3y] [Py] [ring04h/wyscan](https://github.com/ring04h/wyscan) WooYun Network Scanner
+- [**38**Star][2y] [HTML] [rh0dev/expdev](https://github.com/rh0dev/expdev) exploit development
+- [**38**Star][7y] [Java] [ravn/jsocks](https://github.com/ravn/jsocks) Updates for
+- [**38**Star][23d] [Ruby] [rapid7/rex-powershell](https://github.com/rapid7/rex-powershell) Rex library for dealing with Powershell Scripts
+- [**38**Star][13d] [q1271964185/cyberspace_security_learning](https://github.com/q1271964185/cyberspace_security_learning) 在学习CTF、网络安全路上整合自己博客和一些资料,持续更新~
+- [**38**Star][3y] [Py] [programa-stic/marvin-dynamic-analyzer](https://github.com/programa-stic/marvin-dynamic-analyzer) Dynamic android vulnerability scanner using OpenNebula and Android-x86 emulators.
+- [**38**Star][2y] [PS] [politoinc/elk-hunting](https://github.com/politoinc/elk-hunting) Threat Hunting with ELK Workshop (InfoSecWorld 2017)
+- [**38**Star][7m] [Java] [pnfsoftware/jnihelper](https://github.com/pnfsoftware/jnihelper) jeb-plugin-android-jni-helper
+- [**38**Star][2y] [Py] [phishai/idn_generator](https://github.com/phishai/idn_generator) idn_generator: 生成相似的IDN域名
+- [**38**Star][1m] [Lua] [hackertarget/nmap-nse-scripts](https://github.com/hackertarget/nmap-nse-scripts) Nmap NSE scripts that have been customised or created
+- [**38**Star][3d] [PLpgSQL] [percona-qa/percona-qa](https://github.com/percona-qa/percona-qa) Percona QA is a suite of scripts and utilities that assists in building, continuous integration, automated testing & bug reporting for Percona Server, Percona XtraDB Cluster, Percona XtraBackup, Percona Server for MongoDB, as well as other flavors of MySQL (Oracle, Facebook MyQSL, WebScaleSQL, MariaDB) etc.
+- [**38**Star][6m] [C++] [peperunas/pasticciotto](https://github.com/peperunas/pasticciotto) Polymorphic VM and PoliCTF '17 reversing challenge.
+- [**38**Star][4m] [Py] [outflanknl/redfile](https://github.com/outflanknl/redfile) A flask wsgi application that serves files with intelligence, good for serving conditional RedTeam payloads
+- [**38**Star][1y] [ObjC] [omerporze/brokentooth](https://github.com/omerporze/brokentooth) POC for CVE-2018-4327
+- [**38**Star][2d] [olbat/nvdcve](https://github.com/olbat/nvdcve) NVD/CVE as JSON files
+- [**38**Star][6y] [ObjC] [nzn/nsuserdefaults-aesencryptor](https://github.com/nzn/nsuserdefaults-aesencryptor) NSUserDefaults category with AES encrypt/decrypt keys and values.
+- [**38**Star][4y] [Py] [northbit/bulletin-scraper](https://github.com/northbit/bulletin-scraper) Download all of Microsoft's security updates and symbols
+- [**38**Star][4y] [Py] [nonenotnull/regeorg](https://github.com/nonenotnull/regeorg) The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.
+- [**38**Star][3y] [C++] [nccgroup/pip3line](https://github.com/nccgroup/pip3line) The Swiss army knife of byte manipulation
+- [**38**Star][4y] [Py] [mozilla/minion-backend](https://github.com/mozilla/minion-backend) Minion Backend
+- [**38**Star][2y] [Shell] [mitchellkrogza/fail2ban.webexploits](https://github.com/mitchellkrogza/fail2ban.webexploits) This custom Fail2Ban filter and jail will deal with all scans for common Wordpress, Joomla and other Web Exploits being scanned for by automated bots and those seeking to find exploitable web sites.
+- [**38**Star][2y] [Py] [mcw0/pwn-hisilicon-dvr](https://github.com/mcw0/pwn-hisilicon-dvr)
+- [**38**Star][3y] [Shell] [mcous/kicad-lib](https://github.com/mcous/kicad-lib) Repository for my KiCad components and footprints
+- [**38**Star][7y] [Py] [matthewdfuller/intellifuzz-xss](https://github.com/matthewdfuller/intellifuzz-xss) An adaptive, intelligent XSS fuzzer that learns how the response is reflected and carefully crafts an XSS payload to match
+- [**38**Star][2m] [C#] [mashed-potatoes/usbtrojan](https://github.com/mashed-potatoes/usbtrojan) Super simple loader that spreads over removable drives (USB flash drives, portable and network drives, SD cards). Features: You can add the HWID of your PC to the whitelist and trojan will ignore it; You can add any payload (executable file); Slient work. Ideal for school, university or office.
+- [**38**Star][5m] [Assembly] [marespiaut/rayman_disasm](https://github.com/marespiaut/rayman_disasm) Reverse-engineering effort for the 1995 MS-DOS game “Rayman”
+- [**38**Star][7y] [Py] [mainframed/mfsniffer](https://github.com/mainframed/mfsniffer) Mainframe TN3270 unencrypted TSO session user ID and password sniffer
+- [**38**Star][2y] [Assembly] [macmade/obfuscate](https://github.com/macmade/obfuscate) C/C++ machine code obfuscation.
+- [**38**Star][2y] [Py] [m4n3dw0lf/sslkill](https://github.com/m4n3dw0lf/sslkill) Forced Man-In-The-Middle HTTPs-Avoiding Reverse Proxy
+- [**38**Star][5m] [Py] [lukacci/cpuhunter](https://github.com/lukacci/cpuhunter)
+- [**38**Star][1y] [C] [luigirizzo/netmap-ipfw](https://github.com/luigirizzo/netmap-ipfw) Automatically exported from code.google.com/p/netmap-ipfw
+- [**38**Star][12m] [Py] [luh2/detectdynamicjs](https://github.com/luh2/detectdynamicjs) The DetectDynamicJS Burp Extension provides an additional passive scanner that tries to find differing content in JavaScript files and aid in finding user/session data.
+- [**38**Star][10m] [C#] [luciouskami/apex-eacbypass](https://github.com/luciouskami/apex-eacbypass) APEX-EACBypass(usermode)
+- [**38**Star][5m] [Py] [lorentzenman/payday](https://github.com/lorentzenman/payday) Payload generator that uses Metasploit and Veil. Takes IP address as input and calls Veil. Use msfvenom to create payloads and writes resource handler files.
+- [**38**Star][1y] [Py] [lnxg33k/misc](https://github.com/lnxg33k/misc) Collection of useful scripts.
+- [**38**Star][1y] [JS] [lmammino/webhook-tunnel](https://github.com/lmammino/webhook-tunnel) A little HTTP proxy suitable to create tunnels for webhook endpoints protected behind a firewall or a VPN
+- [**38**Star][7m] [Py] [llt4l/iculeak.py](https://github.com/llt4l/iculeak.py) Tool to find and extract credentials from phone configuration files hosted on CUCM
+- [**38**Star][1y] [Py] [linted/linuxprivchecker](https://github.com/linted/linuxprivchecker) linuxprivchecker.py -- a Linux Privilege Escalation Check Script
+- [**38**Star][3y] [Py] [lifetyper/asynchttpsdns](https://github.com/lifetyper/asynchttpsdns) DNS Over Https Powered By Asyncio
+- [**38**Star][2y] [Py] [lavalamp-/ws-backend-community](https://github.com/lavalamp-/ws-backend-community) Web Sight Back-end Community Edition
+- [**38**Star][3y] [C++] [kurapicabs/x64_tracer](https://github.com/kurapicabs/x64_tracer) x64dbg conditional branches logger [Plugin]
+- [**38**Star][3y] [PHP] [keyus/xss](https://github.com/keyus/xss) php写的个人研究测试用的 xss cookie 攻击管理平台,开源出来
+- [**38**Star][3y] [Py] [kevthehermit/volatility_plugins](https://github.com/kevthehermit/volatility_plugins) Volatility Plugins
+- [**38**Star][1y] [Py] [kernelmachine/haveibeenpwned](https://github.com/kernelmachine/haveibeenpwned) Python interface to Have I Been Pwned API
+- [**38**Star][3y] [C++] [k2/languagebackdoors](https://github.com/k2/languagebackdoors) Compiler exploits and exploitable non-obvious source code back doors.
+- [**38**Star][3d] [Rust] [jwillbold/rusty-jsyc](https://github.com/jwillbold/rusty-jsyc) JavaScript-To-Bytecode compiler written in Rust
+- [**38**Star][9m] [Rust] [juxhindb/synner](https://github.com/juxhindb/synner) A TCP SYN flood client written in Rust, powered by libpnet
+- [**38**Star][10m] [PHP] [jsmitty12/phpwhois](https://github.com/jsmitty12/phpwhois) phpWhois general repository
+- [**38**Star][2y] [Py] [jpiechowka/jenkins-cve-2016-0792](https://github.com/jpiechowka/jenkins-cve-2016-0792) Exploit for Jenkins serialization vulnerability - CVE-2016-0792
+- [**38**Star][3y] [Visual Basic .NET] [johnlatwc/macrojob](https://github.com/johnlatwc/macrojob) Proof of concept VBA code to add to Normal.dot to put restrictions on Word
+- [**38**Star][4y] [Shell] [jivoi/ansible-pentest-with-tor](https://github.com/jivoi/ansible-pentest-with-tor) Use Tor for anonymous scanning with nmap
+- [**38**Star][9d] [C] [jedisct1/libhydrogen](https://github.com/jedisct1/libhydrogen) A lightweight, secure, easy-to-use crypto library suitable for constrained environments.
+- [**38**Star][1y] [Java] [javafxports/javafxmobile-plugin](https://github.com/javafxports/javafxmobile-plugin) A gradle plugin for building mobile applications in java.
+- [**38**Star][2y] [Py] [jasondoyle/google-nest-cam-bug-disclosures](https://github.com/jasondoyle/google-nest-cam-bug-disclosures)
+- [**38**Star][5y] [Py] [jakev/oat2dex-python](https://github.com/jakev/oat2dex-python) Extract DEX files from an ART ELF binary
+- [**38**Star][6y] [Py] [isgroup-srl/openmagic](https://github.com/isgroup-srl/openmagic) OpenSSL TLS heartbeat read overrun (CVE-2014-0160)
+- [**38**Star][4m] [Py] [initstring/lyricpass](https://github.com/initstring/lyricpass) Password wordlist generator using song lyrics for targeted bruteforce audits / attacks. Useful for penetration testing or security research.
+- [**38**Star][3y] [PHP] [incredibleindishell/local-file-disclosure-sql-injection-lab](https://github.com/incredibleindishell/local-file-disclosure-sql-injection-lab) This is sample code to demonstrate how one can use SQL Injection vulnerability to download local file from server in specific condition. If you have any doubt, ping me at
+- [**38**Star][3y] [Py] [hcamael/ctf-library](https://github.com/hcamael/ctf-library) 之Crypto
+- [**38**Star][5y] [Py] [hackedteam/test-av2](https://github.com/hackedteam/test-av2) Automated antivirus test environment (new version)
+- [**38**Star][1y] [Java] [guolei1130/global_httpdns](https://github.com/guolei1130/global_httpdns) 全局HttpDns替换方案
+- [**38**Star][1y] [C#] [greycorbel/admpwd](https://github.com/greycorbel/admpwd) AdmPwd project
+- [**38**Star][3y] [C] [gnoxter/mountain_goat](https://github.com/gnoxter/mountain_goat) A PoC demonstrating techniques exploiting CVE-2016-5696 Off-Path TCP Exploits: Global Rate Limit Considered Dangerous
+- [**38**Star][7m] [githubixx/ansible-role-harden-linux](https://github.com/githubixx/ansible-role-harden-linux) Ansible role for hardening Linux (targeting Ubuntu 16.04/18.04 mainly)
+- [**38**Star][5y] [C] [gdbinit/kextstat_aslr](https://github.com/gdbinit/kextstat_aslr) Implementation of kexstat via /dev/kmem with kernel ASLR support
+- [**38**Star][10d] [JS] [frida/frida-compile](https://github.com/frida/frida-compile) Compile a Frida script comprised of one or more Node.js modules
+- [**38**Star][3y] [Py] [fotisl/utimaco](https://github.com/fotisl/utimaco) Tools for reverse engineering the Utimaco Firmware
+- [**38**Star][1y] [c++] [fluc-uc/emusdk](https://github.com/fluc-uc/emusdk) A simple SDK intended for people new to internal cheats. Written while I was drunk.
+- [**38**Star][1y] [C++] [firelizzard18/dc26-badge](https://github.com/firelizzard18/dc26-badge) DefCon 26 Badge Hacking
+- [**38**Star][4y] [Py] [fire30/ps4-2014-1303-poc](https://github.com/fire30/ps4-2014-1303-poc)
+- [**38**Star][3y] [Py] [exploitx3/fuzzbunch](https://github.com/exploitx3/fuzzbunch) FUZZBUNCH - NSA security tools
+- [**38**Star][2y] [Go] [evilsocket/brutemachine](https://github.com/evilsocket/brutemachine) A Go library which main purpose is giving an interface to loop over a dictionary and use those words/lines as input for some custom logic such as HTTP file bruteforcing, DNS bruteforcing, etc.
+- [**38**Star][7y] [Py] [evilcry/pythonscripts](https://github.com/evilcry/pythonscripts) Collection of my Python Scripts
+- [**38**Star][1y] [C] [en14c/pivirus](https://github.com/en14c/pivirus) sample linux x86_64 ELF virus
+- [**38**Star][7d] [OCaml] [draperlaboratory/cbat_tools](https://github.com/draperlaboratory/cbat_tools) Program analysis tools developed at Draper on the CBAT project.
+- [**38**Star][2d] [C] [dnsdb/dnsdbq](https://github.com/dnsdb/dnsdbq) DNSDB API Client, C Version
+- [**38**Star][4y] [Py] [danmcinerney/autoresp](https://github.com/danmcinerney/autoresp) Runs Responder, uploads hashes for cracking, alerts when cracked
+- [**38**Star][5y] [Julia] [danluu/fuzz.jl](https://github.com/danluu/fuzz.jl) World's dumbest fuzzer
+- [**38**Star][3y] [Py] [cysinfo/pymal](https://github.com/cysinfo/pymal) PyMal is a python based interactive Malware Analysis Framework. It is built on the top of three pure python programes Pefile, Pydbg and Volatility.
+- [**38**Star][2m] [JS] [cxueqin/falcon](https://github.com/cxueqin/falcon) 猎鹰网络安全工具,核心功能DOS测试,支持端口扫描,支持CentOS/Ubuntu/MacOS系统。技术构成:nodejs引擎、express框架、nmap工具、tfn2k dos攻击工具、mocha单元测试框架。欢迎大家使用,也欢迎大家一起开发完善。
+- [**38**Star][10m] [PS] [curtbraz/invoke-neutralizeav](https://github.com/curtbraz/invoke-neutralizeav) Quick PoC I Wrote for Bypassing Next Gen AV Remotely for Pentesting
+- [**38**Star][4y] [Py] [cudeso/cudeso-honeypot](https://github.com/cudeso/cudeso-honeypot) Honeypot repo
+- [**38**Star][7y] [C] [commonexploits/icmpsh](https://github.com/commonexploits/icmpsh) Simple reverse ICMP shell
+- [**38**Star][2y] [Java] [codewhitesec/coldfusionpwn](https://github.com/codewhitesec/coldfusionpwn) Exploitation Tool for CVE-2017-3066 targeting Adobe Coldfusion 11/12
+- [**38**Star][2d] [TS] [chef-koch/ffck](https://github.com/chef-koch/ffck)
+- [**38**Star][3y] [C] [changeofpace/force-page-protection](https://github.com/changeofpace/force-page-protection) This x64dbg plugin sets the page protection for memory mapped views in scenarios which cause NtProtectVirtualMemory to fail.
+- [**38**Star][3m] [PHP] [cesnet/pakiti-server](https://github.com/cesnet/pakiti-server) Pakiti provides a monitoring mechanism to check the patching status of Linux systems.
+- [**38**Star][3y] [certtools/intelmq-feeds-documentation](https://github.com/certtools/intelmq-feeds-documentation) Cyber Threat Intelligence Feeds
+- [**38**Star][3y] [Py] [cerberussecurity/cve-2017-5689](https://github.com/cerberussecurity/cve-2017-5689)
+- [**38**Star][2y] [C++] [can1357/physical_mem_controller](https://github.com/can1357/physical_mem_controller) A library to read physical memory and system-wide virtual memory.
+- [**38**Star][3y] [C] [boywhp/wifi_crack_windows](https://github.com/boywhp/wifi_crack_windows) wifi crack project for windows
+- [**38**Star][3y] [bluscreenofjeff/malleablec2profiles](https://github.com/bluscreenofjeff/malleablec2profiles) Malleable C2 profiles for Cobalt Strike
+- [**38**Star][2y] [Py] [blazeinfosec/ssrf-ntlm](https://github.com/blazeinfosec/ssrf-ntlm) Proof of concept written in Python to show that in some situations a SSRF vulnerability can be used to steal NTLMv1/v2 hashes.
+- [**38**Star][13d] [Py] [bit4woo/dnslog](https://github.com/bit4woo/dnslog) DNSLog 是一款监控 DNS 解析记录和 HTTP 访问记录的工具。
+- [**38**Star][4y] [Assembly] [battelle/repsych](https://github.com/battelle/repsych) Psychological warfare in reverse engineering
+- [**38**Star][1y] [Py] [ax330d/ida_pdb_loader](https://github.com/ax330d/ida_pdb_loader) IDA PDB Loader
+- [**38**Star][2m] [JS] [auth0/auth0-cordova](https://github.com/auth0/auth0-cordova) Auth0 integration for Cordova apps
+- [**38**Star][3y] [C++] [aurel26/ts-security-editor](https://github.com/aurel26/ts-security-editor) Terminal Service (RDP) Security Editor
+- [**38**Star][4d] [PS] [asymmetric-infosec/power-response](https://github.com/asymmetric-infosec/power-response) Powering Up Incident Response with Power-Response
+- [**38**Star][2y] [Visual Basic .NET] [arno0x/webdavdelivery](https://github.com/arno0x/webdavdelivery) A WebDAV PROPFIND covert channel to deliver payloads
+- [**38**Star][1y] [Py] [aptnotes/tools](https://github.com/aptnotes/tools) Tools to interact with APTnotes reporting/index.
+- [**38**Star][4y] [AutoIt] [ajmartel/irtriage](https://github.com/ajmartel/irtriage) Incident Response Triage - Windows Evidence Collection for Forensic Analysis
+- [**38**Star][1y] [C] [adulau/dcfldd](https://github.com/adulau/dcfldd) dcfldd - enhanced version of dd for forensics and security
+- [**38**Star][2y] [Java] [adrianbzg/twitter-follow-exploit](https://github.com/adrianbzg/twitter-follow-exploit) Automated Twitter mass account creation and follow using Selenium and Tor VPN
+- [**38**Star][5y] [C++] [adamkramer/rapid_env](https://github.com/adamkramer/rapid_env) Rapid deployment of Windows environment (files, registry keys, mutex etc) to facilitate malware analysis
+- [**38**Star][1y] [Py] [activecm/passer](https://github.com/activecm/passer) Passive service locator, a python sniffer that identifies servers, clients, names and much more
+- [**38**Star][17d] [Go] [9seconds/httransform](https://github.com/9seconds/httransform) A framework to build precise and fast HTTP proxies.
+- [**38**Star][2y] [Java] [5gsd/aicdm](https://github.com/5gsd/aicdm) AICDL collector services and modules
+- [**38**Star][9m] [54yimeng/sia-websites](https://github.com/54yimeng/sia-websites) 这里是我在youtube等上收集的一些科学上网网站的集合,以各自的网站名命名文件夹。
+- [**38**Star][1y] [C++] [3gstudent/eventlogedit-evt--general](https://github.com/3gstudent/eventlogedit-evt--general) Remove individual lines from Windows Event Viewer Log (EVT) files
+- [**38**Star][3y] [Py] [0x90/upnp-arsenal](https://github.com/0x90/upnp-arsenal) UPnP hacking scripts and tools
+- [**38**Star][4y] [Py] [0x90/routerz](https://github.com/0x90/routerz) Some exploits for ZeroNights 0x03
+- [**38**Star][2y] [C] [0x4a47/sectalks-mel0x14-ctf](https://github.com/0x4a47/sectalks-mel0x14-ctf) Sectalks MEL0x14 CTF
+- [**37**Star][1m] [Java] [xausky/shadowsocksgostplugin](https://github.com/xausky/shadowsocksgostplugin) Gost 的 Shadowsocks 安卓插件,可以直接在 Shadowsocks 安卓客户端上连接 Gost 服务器
+- [**37**Star][2d] [Py] [mhaskar/octopus](https://github.com/mhaskar/octopus) Open source pre-operation C2 server based on python and powershell
+- [**37**Star][5y] [PHP] [snifer/l4bsforshell](https://github.com/snifer/l4bsforshell)
+- [**37**Star][2y] [PS] [hackplayers/reverseshell](https://github.com/hackplayers/reverseshell) A simple PowerShell script that we can use for easing the process of creating a reverse shell and automating Meterpreter update
+- [**37**Star][2m] [C] [intel/kernelflinger](https://github.com/intel/kernelflinger) the Intel UEFI bootloader for AndroidTM/BrilloTM
+- [**37**Star][8d] [Perl] [theos/logos](https://github.com/theos/logos) Preprocessor that simplifies Objective-C hooking.
+- [**37**Star][3y] [rednaga/disclosures](https://github.com/rednaga/disclosures) A place for disclosing things
+- [**37**Star][3y] [C] [cn33liz/easysystem](https://github.com/cn33liz/easysystem) Quick and dirty System (Power)Shell using NamedPipe impersonation.
+- [**37**Star][4y] [C#] [cn33liz/sharpcat](https://github.com/cn33liz/sharpcat) SharpCat - A Simple Reversed Command Shell which can be started using InstallUtil (Bypassing AppLocker)
+- [**37**Star][2y] [Shell] [pwnieexpress/pwn_pad_sources](https://github.com/pwnieexpress/pwn_pad_sources) Public source repository for the Pwn Pad platform.
+- [**37**Star][8d] [Py] [vdoo-connected-trust/ghidra-pyi-generator](https://github.com/vdoo-connected-trust/ghidra-pyi-generator) Generates `.pyi` type stubs for the entire Ghidra API
+- [**37**Star][1y] [C#] [codeofdark/panda-obfuscator](https://github.com/codeofdark/panda-obfuscator) PandaObfuscator an simple Obfuscator, free, OpenSource for .Net Applications
+- [**37**Star][2y] [vduddu/pentestresources](https://github.com/vduddu/PentestResources) A list of resources for Pentesting from various sources
+- [**37**Star][9m] [Go] [prsecurity/golang_c2](https://github.com/prsecurity/golang_c2) Boilerplate C2 written in Go for red teams
+- [**37**Star][3d] [Java] [gedsh/invizible](https://github.com/gedsh/invizible) Android application for Internet privacy and security
+- [**37**Star][1y] [HTML] [madhuakula/security-automation-with-ansible-2](https://github.com/madhuakula/security-automation-with-ansible-2) Ansible Playbooks for Security Automation with Ansible2 book
+- [**37**Star][3m] [C#] [nyan-x-cat/uac-escaper](https://github.com/nyan-x-cat/uac-escaper) Escalation / Bypass Windows UAC
+- [**37**Star][2y] [HTML] [electroniccats/samykamtools](https://github.com/ElectronicCats/SamyKamTools) Magnetic Pentesting tool for Raspberry Pi
+- [**37**Star][21d] [Py] [soscleaner/soscleaner](https://github.com/soscleaner/soscleaner) A python application to clean sensitive and un-wanted data from an existing sosreport
+- [**37**Star][5y] [Assembly] [muffins/rookit_playground](https://github.com/muffins/rookit_playground) Educational repository for learning about rootkits and Windows Kernel Hooks.
+- [**37**Star][6m] [Java] [hsiafan/cute-proxy](https://github.com/hsiafan/cute-proxy) A Man-In-The-Middle Proxy as Fiddle and Charles, using Netty, JavaFX
+- [**37**Star][24d] [Py] [robotools/defcon](https://github.com/robotools/defcon) A set of UFO based objects for use in font editing applications.
+- [**37**Star][6d] [Go] [zpsean/go4api](https://github.com/zpsean/go4api) Go4Api - an API testing tool written in Go
+- [**37**Star][5y] [C++] [zer0mem/kernelproject](https://github.com/zer0mem/kernelproject) Plain project for usege with github/zer0mem/common.git
+- [**37**Star][9m] [C++] [ze0r/cve-2019-0808-poc](https://github.com/ze0r/cve-2019-0808-poc) cve-2019-0808-poc
+- [**37**Star][3y] [C++] [yejiansnake/windows-sys-base](https://github.com/yejiansnake/windows-sys-base) windows 系统API C++封装库,包含进程间通讯,互斥,内存队列等通用功能
+- [**37**Star][20d] [Py] [ydkhatri/macforensics](https://github.com/ydkhatri/macforensics) Scripts to process OSX forensic artifacts
+- [**37**Star][7m] [C#] [woanware/autorunner](https://github.com/woanware/autorunner) Emulates the Sysinternals Autoruns tool, but for DFIR purposes e.g. multi user processing
+- [**37**Star][3y] [PS] [wkleinhenz/powershell-botnet](https://github.com/wkleinhenz/powershell-botnet) A POC powershell botnet
+- [**37**Star][1y] [Py] [weebsec/weebdns](https://github.com/weebsec/weebdns) DNS Enumeration with Asynchronicity
+- [**37**Star][2y] [Py] [warner/petmail](https://github.com/warner/petmail) secure messaging, file-transfer, and directory synchronization
+- [**37**Star][3y] [Py] [wal99d/slowloris](https://github.com/wal99d/slowloris) Python code demonstrating the how-to part of L7 Application DDoS Attack called SlowLoris
+- [**37**Star][3y] [Py] [villanch/pr0xy](https://github.com/villanch/pr0xy) 教学用多线程扫描框架(代理扫描)
+- [**37**Star][2y] [vduddu/pentestresources](https://github.com/vduddu/pentestresources) A list of resources for Pentesting from various sources
+- [**37**Star][9m] [PHP] [vanvan/ipfsproxyhttp](https://github.com/vanvan/ipfsproxyhttp) InterPlanetary File System HTTP Proxy
+- [**37**Star][3y] [C] [tylous/auto_eap](https://github.com/tylous/auto_eap) Automated Brute-Force Login Attacks Against EAP Networks.
+- [**37**Star][3m] [C] [twistlock/runc-cve-2019-5736](https://github.com/twistlock/runc-cve-2019-5736) CVE-2019-5736 POCs
+- [**37**Star][1y] [Py] [trustedsec/auto_settingcontent-ms](https://github.com/trustedsec/auto_settingcontent-ms) This is a quick POC for using the Matt Nelson (enigma0x3) technique for generating a malicious .SettingContent-ms extension type for remote code execution. This automates generating an HTA downloader and embeds it in the SettingContent-ms file for you and starts Apache.
+- [**37**Star][2y] [Go] [tomsteele/pen-utils](https://github.com/tomsteele/pen-utils) Trivial unixey pentest utilities
+- [**37**Star][2y] [Py] [ticosax/pseud](https://github.com/ticosax/pseud) Pythonic bi-directional RPC API built on top of ØMQ.
+- [**37**Star][3y] [Py] [the-c0d3r/sqli-scanner](https://github.com/the-c0d3r/sqli-scanner) A tool to mass scan SQL Injection Vulnerable websites from a file.
+- [**37**Star][2y] [tevora-threat/aggressor-powerview](https://github.com/tevora-threat/aggressor-powerview) PowerView menu for Cobalt Strike
+- [**37**Star][3y] [C] [techgaun/mirai](https://github.com/techgaun/mirai) Mirai related codes and stuff
+- [**37**Star][4y] [C] [tandasat/scavenger](https://github.com/tandasat/scavenger) A minifilter driver preserves all modified and deleted files.
+- [**37**Star][1y] [Py] [tahz7/traffic_analyser](https://github.com/tahz7/traffic_analyser) Retrieve useful information from apache/nginx access logs to help troubleshoot traffic related problems
+- [**37**Star][1y] [Shell] [syncsrc/microrenovator](https://github.com/syncsrc/microrenovator) Pre-OS microcode updater
+- [**37**Star][12m] [Py] [spiderlabs/owasp-crs-documentation](https://github.com/spiderlabs/owasp-crs-documentation) Documentation for the OWASP CRS project
+- [**37**Star][5y] [C] [sk4ld/gridpot](https://github.com/sk4ld/gridpot) Open source tools for realistic-behaving electric grid honeynets
+- [**37**Star][2y] [PHP] [sjord/jwtdemo](https://github.com/sjord/jwtdemo) Practice hacking JWT tokens
+- [**37**Star][29d] [Shell] [security-onion-solutions/securityonion-elastic](https://github.com/security-onion-solutions/securityonion-elastic) Security Onion Elastic Stack
+- [**37**Star][3y] [JS] [saelo/feuerfuchs](https://github.com/saelo/feuerfuchs) Files for the "feuerfuchs" challenge of 33C3 CTF. See the greeting message in server.py for more information about the challenge
+- [**37**Star][9d] [C++] [rust-fuzz/libfuzzer-sys](https://github.com/rust-fuzz/libfuzzer-sys)
+- [**37**Star][10m] [Py] [raz0r/aemscan](https://github.com/raz0r/aemscan) Adobe Experience Manager Vulnerability Scanner
+- [**37**Star][2y] [Py] [rahiel/firectl](https://github.com/rahiel/firectl) Control Firejail desktop integration.
+- [**37**Star][2m] [Lua] [r00t-3xp10it/nmap-nse-modules](https://github.com/r00t-3xp10it/nmap-nse-modules) My collection of nmap nse modules
+- [**37**Star][7y] [JS] [ptcoresec/ctf-scoreboard](https://github.com/ptcoresec/ctf-scoreboard) A scoreboard for Security CTF events
+- [**37**Star][3d] [Go] [projectcalico/typha](https://github.com/projectcalico/typha) Calico's datastore fan-out daemon.
+- [**37**Star][2y] [Java] [portswigger/distribute-damage](https://github.com/portswigger/distribute-damage) Evenly distributes scanner load across targets
+- [**37**Star][5y] [Py] [philwantsfish/gdb_commands](https://github.com/philwantsfish/gdb_commands) GDB commands to aid exploit development
+- [**37**Star][12m] [C++] [patois/nesldr](https://github.com/patois/nesldr) Nintendo Entertainment System (NES) ROM loader module for IDA Pro
+- [**37**Star][3y] [C] [p0cl4bs/thanos](https://github.com/p0cl4bs/thanos) Thanos is a tool made for scan a range of IP's and get the banners of the running services. The main function is do banner grabber, but you also can use this for exploit vulnerabilities, find proxy servers, or simply check for open ports.
+- [**37**Star][30d] [Java] [openzipkin/zipkin-finagle](https://github.com/openzipkin/zipkin-finagle) Integration between Finagle tracing to Zipkin transports such as http and kafka
+- [**37**Star][2y] [Py] [netkiller/firewall](https://github.com/netkiller/firewall) Python Firewall Library
+- [**37**Star][2y] [C#] [n0ise9914/rdpchecker](https://github.com/n0ise9914/rdpchecker) Stable and reliable multiple RDP checker written in C#
+- [**37**Star][3y] [C] [mwsrc/mass-malicious-script-dump](https://github.com/mwsrc/mass-malicious-script-dump) Mass malicious script dump/Malware src dump
+- [**37**Star][2y] [C++] [mstefanowich/filesignaturehijack](https://github.com/mstefanowich/filesignaturehijack) C proof-of-concept of Mattifestations paper on signature hijacking
+- [**37**Star][8m] [Py] [mozillasecurity/quokka](https://github.com/mozillasecurity/quokka) Quokka is a utility to launch and monitor application for faults.
+- [**37**Star][3y] [HTML] [mortenschenk/rtlcapturecontext-cfg-bypass](https://github.com/mortenschenk/rtlcapturecontext-cfg-bypass) Internet Explorer Exploit with CFG bypass for Windows 10
+- [**37**Star][3y] [PHP] [mortedamos/vehicle-hacking](https://github.com/mortedamos/vehicle-hacking) Guides and scripts for vehicle cybersecurity research
+- [**37**Star][2y] [C] [mlafeldt/ps2rd](https://github.com/mlafeldt/ps2rd) Collection of tools to remotely debug PS2 games
+- [**37**Star][11m] [PS] [minervalabsresearch/blogposts](https://github.com/minervalabsresearch/blogposts) Code examples from recent blog posts by minerva labs.
+- [**37**Star][15d] [C] [microsoft/cfu](https://github.com/microsoft/cfu) Component Firmware Update
+- [**37**Star][2y] [Py] [medicean/sublimexssencode](https://github.com/medicean/sublimexssencode) Converts characters from one encoding to another using a transformation.
+- [**37**Star][6d] [Shell] [maravento/blackip](https://github.com/maravento/blackip) IPs Blacklist for Ipset/Squid
+- [**37**Star][2y] [mailinneberg/broadpwn](https://github.com/mailinneberg/broadpwn) Broadpwn bug (CVE-2017-9417)
+- [**37**Star][5m] [Py] [m57/piescan](https://github.com/m57/piescan) A simple fast port scanner for when you cant use Nmap on a pentest.
+- [**37**Star][3y] [Py] [luckygeck/ycmdcompletion](https://github.com/luckygeck/ycmdcompletion) Sublime Text 3 plugin for C++ code completion and error highlighting, based on Ycmd server
+- [**37**Star][1y] [Java] [lmax-exchange/angler](https://github.com/lmax-exchange/angler) A utility for monitoring UDP message-processing
+- [**37**Star][7d] [Tcl] [llir/grammar](https://github.com/llir/grammar) EBNF grammar of LLVM IR assembly.
+- [**37**Star][1m] [C] [libyal/libolecf](https://github.com/libyal/libolecf) Library and tools to access the OLE 2 Compound File (OLECF) format
+- [**37**Star][1y] [Py] [lasq88/deobfuscate](https://github.com/lasq88/deobfuscate) Python script to automatically deobfuscate malware code
+- [**37**Star][5y] [C++] [lallousx86/graphslick](https://github.com/lallousx86/graphslick) IDA Plugin - GraphSlick
+- [**37**Star][8y] [C] [korczis/upx](https://github.com/korczis/upx) UPX is a free, portable, extendable, high-performance executable packer for several executable formats. See
+- [**37**Star][3y] [Py] [killswitch-gui/lterm](https://github.com/killswitch-gui/lterm) lterm is a small script built to install a bash hook for full terminal logging.
+- [**37**Star][2y] [JS] [kevva/caw](https://github.com/kevva/caw) Construct HTTP/HTTPS agents for tunneling proxies
+- [**37**Star][2y] [HTML] [keenrivals/bugsite-index](https://github.com/keenrivals/bugsite-index) Index of websites publishing bugs along the lines of heartbleed.com
+- [**37**Star][4y] [Java] [julianschuette/condroid](https://github.com/julianschuette/condroid) Symbolic/concolic execution of Android apps
+- [**37**Star][6y] [Py] [johnnykv/mnemosyne](https://github.com/johnnykv/mnemosyne) Normalizer for honeypot data.
+- [**37**Star][7d] [Kotlin] [itznotabug/checkoutverifier](https://github.com/itznotabug/checkoutverifier) Verify your In-App Purchase receipts & protect your Apps from hacking, patching used by Piracy Apps like Lucky Patcher.
+- [**37**Star][2y] [JS] [idc/ps4-entrypoint-405](https://github.com/idc/ps4-entrypoint-405) A fully implemented kernel exploit for the PS4 on 4.05FW
+- [**37**Star][4m] [Py] [hugsy/gef-extras](https://github.com/hugsy/gef-extras) Extra goodies for GEF: Open repository for unfiltered contributions to the project.
+- [**37**Star][11m] [Py] [hook-s3c/cve-2018-18852](https://github.com/hook-s3c/cve-2018-18852) CERIO RCE CVE-2018-18852, authenticated (vendor defaults) web-based RCE as root user.
+- [**37**Star][4d] [C] [greenbone/gvm-libs](https://github.com/greenbone/gvm-libs) Greenbone Vulnerability Management Libraries
+- [**37**Star][7y] [C] [gdbinit/crackme_nr1](https://github.com/gdbinit/crackme_nr1) fG!'s crackme #1 source code
+- [**37**Star][2y] [C++] [flier/zipkin-cpp](https://github.com/flier/zipkin-cpp) Zipkin tracing library for C/C++
+- [**37**Star][4y] [C++] [flankerhqd/cve-2015-6620-poc](https://github.com/flankerhqd/cve-2015-6620-poc) POC for CVE-2015-6620, AMessage unmarshal arbitrary write
+- [**37**Star][6y] [Ruby] [fishermansenemy/bucket_finder](https://github.com/fishermansenemy/bucket_finder) Amazon bucket brute force tool
+- [**37**Star][2y] [Py] [fallengavin/srcinfo](https://github.com/fallengavin/srcinfo) 作为白帽子,手上有很多应急响应中心接受漏洞的范围和一些网站信息,为了便于管理,自己动手写了一个信息管理的平台,感兴趣的可以自己改改,制作自己的信息库
+- [**37**Star][4y] [Py] [fabio-d/honeypot](https://github.com/fabio-d/honeypot) Honeypot that emulates several protocols (incl. SSH, telnet, SMTP, HTTP, SSL and SIP)
+- [**37**Star][3m] [C++] [ez8-co/emock](https://github.com/ez8-co/emock)
+- [**37**Star][4y] [Py] [exploit-install/shellsploit-framework](https://github.com/exploit-install/shellsploit-framework) New Generation Exploit Development Kit
+- [**37**Star][1y] [ekoparty/ekolabs](https://github.com/ekoparty/ekolabs) EKOLABS esta dedicada para investigadores independientes y para la comunidad del Software Libre. Vamos a proveer de stands completos con monitor, alimentacion de energia y acceso a internet por cable, y vos vas a traer tu maquina para mostrar tu trabajo y responder preguntas de los participantes de Ekoparty Security Conference
+- [**37**Star][10m] [Java] [egguncle/xposednavigationbar](https://github.com/egguncle/xposednavigationbar) Xposed导航栏功能拓展模块
+- [**37**Star][1y] [C] [egguncle/ptraceinject](https://github.com/egguncle/ptraceinject) 进程注入
+- [**37**Star][2y] [edoverflow/bug-bounty-responses](https://github.com/edoverflow/bug-bounty-responses) A collection of response templates for invalid bug bounty reports.
+- [**37**Star][3y] [Py] [dungtv543/dutas](https://github.com/dungtv543/dutas) Analysis PE file or Shellcode
+- [**37**Star][1y] [Ruby] [dreadlocked/ssrfmap](https://github.com/dreadlocked/ssrfmap) Simple Server Side Request Forgery services enumeration tool.
+- [**37**Star][2y] [PS] [dmb2168/oauthhunting](https://github.com/dmb2168/oauthhunting)
+- [**37**Star][1y] [Py] [dhn/osce](https://github.com/dhn/osce) Some exploits, which I’ve created during my OSCE preparation.
+- [**37**Star][1m] [Py] [desword/shellcode_tools](https://github.com/desword/shellcode_tools) Useful tools for writing shellcode
+- [**37**Star][2y] [PHP] [dcid/doh-php-client](https://github.com/dcid/doh-php-client) DoH (DNS over HTTPS) PHP Client
+- [**37**Star][3y] [C] [cylancevulnresearch/osx_runbin](https://github.com/cylancevulnresearch/osx_runbin)
+- [**37**Star][3y] [ctftime/ctftime.org](https://github.com/ctftime/ctftime.org) meta repository for ctftime.org issues, feature-requests etc
+- [**37**Star][7m] [Py] [coalfire-research/vampire](https://github.com/coalfire-research/vampire) Vampire is an aggressor script which integrates with BloodHound to mark nodes as owned.
+- [**37**Star][7m] [Batchfile] [cervoise/abuse-bash-for-windows](https://github.com/cervoise/abuse-bash-for-windows) Pentest scripts for abuse Bash on Windows (Cygwin/WSL) - HackLu 2018
+- [**37**Star][3y] [Java] [cert-se/megatron-java](https://github.com/cert-se/megatron-java) Megatron - A System for Abuse- and Incident Handling
+- [**37**Star][2y] [C++] [cedarctic/digiquack](https://github.com/cedarctic/digiquack) A DuckyScript language to DigiSpark payload converter based on C++
+- [**37**Star][6m] [C++] [carbonblack/hexraysdeob](https://github.com/carbonblack/hexraysdeob) Hex-Rays microcode API plugin for breaking an obfuscating compiler
+- [**37**Star][1m] [Makefile] [c0deh4cker/pwnableharness](https://github.com/c0deh4cker/pwnableharness) Manage building and deploying exploitation challenges with ease
+- [**37**Star][14d] [Py] [bytesoverbombs/virusshare-search](https://github.com/bytesoverbombs/virusshare-search) Downloads VirusShare hashes (
+- [**37**Star][8m] [Py] [bx/bootloader_instrumentation_suite](https://github.com/bx/bootloader_instrumentation_suite) Bootloader 研究工具
+- [**37**Star][3y] [C++] [breakingmalwareresearch/cfgexceptions](https://github.com/breakingmalwareresearch/cfgexceptions) Adding exceptions to Microsoft's Control Flow Guard (CFG)
+- [**37**Star][5y] [Py] [bfosterjr/ufgraph](https://github.com/bfosterjr/ufgraph)
+- [**37**Star][8y] [bes/keystorebrute](https://github.com/bes/keystorebrute) A Keystore Brute-force attacker.
+- [**37**Star][1y] [Java] [augustd/burp-suite-error-message-checks](https://github.com/augustd/burp-suite-error-message-checks) Burp Suite extension to passively scan for applications revealing server error messages
+- [**37**Star][5y] [C] [aloz77/hiktools](https://github.com/aloz77/hiktools) Tools for Hikvision IP cameras
+- [**37**Star][1y] [C] [abiondo/afl](https://github.com/abiondo/afl) My fork of American Fuzzy Lop
+- [**37**Star][4y] [Py] [73696e65/windows-exploits](https://github.com/73696e65/windows-exploits) Used for the osce exam preparation
+- [**37**Star][2y] [C++] [3gstudent/shellcode-generater](https://github.com/3gstudent/shellcode-generater) No inline asm,support x86/x64
+- [**37**Star][7d] [C++] [3gstudent/from-system-authority-to-medium-authority](https://github.com/3gstudent/from-system-authority-to-medium-authority) Penetration test
+- [**37**Star][2y] [Py] [1337g/cve-2017-10271](https://github.com/1337g/cve-2017-10271) CVE-2017-10271 WEBLOGIC RCE (TESTED)
+- [**37**Star][3y] [C] [0xbadc0de1/vmp_dbg](https://github.com/0xbadc0de1/vmp_dbg) This is a VmProtect integrated debugger, that will essentially allow you to disasm and debug vmp partially virtualized functions at the vmp bytecode level. It was made using TitanEngine for the debug engine and Qt for the gui. Do not expect much of it and feel free to report any bugs.
+- [**36**Star][3y] [Go] [davidqhr/socccks](https://github.com/davidqhr/socccks) Socccks is a shadowsocks like separated socks5 proxy
+- [**36**Star][3y] [Py] [vulnerscom/scripts](https://github.com/vulnerscom/scripts) Some useful scripts for penetration testing
+- [**36**Star][3y] [offensive-security/kali-scripts](https://github.com/offensive-security/kali-scripts) Various Kali Scripts
+- [**36**Star][3y] [Py] [averagesecurityguy/exfil](https://github.com/averagesecurityguy/exfil) Modular tool to test exfiltration techniques.
+- [**36**Star][2d] [CSS] [frida/frida-website](https://github.com/frida/frida-website) Frida's website
+- [**36**Star][11m] [Py] [tidesec/common_spider](https://github.com/tidesec/common_spider) 一个还算通用的爬虫脚本,可自己设定爬取的深度,可以把动态页面和外链单独分出来~
+- [**36**Star][16d] [JS] [snyk/broker](https://github.com/snyk/broker) A broker system between a public service and a private service
+- [**36**Star][2y] [C++] [blole/injectory](https://github.com/blole/injectory) command-line interface dll injector
+- [**36**Star][11m] [Py] [pilgun/acvtool](https://github.com/pilgun/acvtool) ACVTool is a novel tool for measuring black-box code coverage of Android applications.
+- [**36**Star][1m] [Java] [ayrx/jnianalyzer](https://github.com/ayrx/jnianalyzer) Analysis scripts for Ghidra to work with Android NDK libraries.
+- [**36**Star][5y] [Py] [hiteshchoudhary/airvengers](https://github.com/hiteshchoudhary/airvengers) A GUI to pentest wifi Network, based on Aircrack-ng tools
+- [**36**Star][8d] [C++] [chickenhook/chickenhook](https://github.com/chickenhook/chickenhook) A linux / android hooking framework
+- [**36**Star][3m] [PHP] [x-o-r-r-o/php-webshells-collection](https://github.com/x-o-r-r-o/php-webshells-collection) Most Wanted Private and Public PHP Web Shells Can Be Downloaded Here. (Educational Purpose Only)
+- [**36**Star][2m] [Shell] [itshaadi/torbox](https://github.com/itshaadi/torbox) Container-based Tor access point (Anonymizing Middlebox).
+- [**36**Star][3y] [Py] [lightless233/pansidong](https://github.com/lightless233/Pansidong) 盘丝洞 - 自动化WEB漏洞扫描器
+- [**36**Star][2y] [Ruby] [opensourcesec/malstrom](https://github.com/opensourcesec/malstrom) Cyber Intel Management
+- [**36**Star][1y] [Go] [joshrendek/hnypots-agent](https://github.com/joshrendek/hnypots-agent) A SSH Server in Go that logs username/password combos
+- [**36**Star][1y] [Py] [newbee119/ctf_ics_traffic](https://github.com/NewBee119/ctf_ics_traffic) 工控CTF比赛工具,各种网络数据包处理脚本
+- [**36**Star][2y] [rivaill/blockchain-security-awesome](https://github.com/Rivaill/blockchain-security-awesome) A curated list of awesome things related to blockchain security
+- [**36**Star][1m] [Py] [zephrfish/burpfeed](https://github.com/zephrfish/burpfeed) Hacked together script for feeding urls into Burp's Sitemap
+- [**36**Star][1y] [Shell] [xhak9x/hak9tools](https://github.com/xhak9x/hak9tools) All Hak9 Tools
+- [**36**Star][8d] [Shell] [wicg/ua-client-hints](https://github.com/wicg/ua-client-hints) Wouldn't it be nice if `User-Agent` was a (set of) client hints?
+- [**36**Star][9m] [Visual Basic .NET] [visualbasic6/subdomain-bruteforce](https://github.com/visualbasic6/subdomain-bruteforce) a subdomain brute forcing tool for windows
+- [**36**Star][15d] [C++] [verizondigital/waflz](https://github.com/verizondigital/waflz) multitenant ModSecurity compatible WAF engine from Verizon Digital Media Services
+- [**36**Star][5y] [Go] [traetox/sshforshits](https://github.com/traetox/sshforshits) framework for a high interaction SSH honeypot
+- [**36**Star][6y] [Py] [toperaproject/topera](https://github.com/toperaproject/topera) IPv6 analysis tool: the other side
+- [**36**Star][2d] [C++] [titzanyic/clover](https://github.com/titzanyic/clover) 我的黑苹果配置列表
+- [**36**Star][2y] [Zeek] [tatsui-geek/rpot](https://github.com/tatsui-geek/rpot) Real-time Packet Observation Tool
+- [**36**Star][3m] [Py] [takeshixx/deen](https://github.com/takeshixx/deen) Generic data DEcoding/ENcoding application built with PyQt5.
+- [**36**Star][3y] [TeX] [sympy/sympy-paper](https://github.com/sympy/sympy-paper) Repo for the paper "SymPy: symbolic computing in python"
+- [**36**Star][3y] [C++] [steven-michaud/sandboxmirror](https://github.com/steven-michaud/sandboxmirror) Tool for reverse-engineering Apple's sandbox
+- [**36**Star][8y] [C] [stephenfewer/ollycalltrace](https://github.com/stephenfewer/ollycalltrace) OllyCallTrace is a plugin for OllyDbg to trace the call chain of a thread.
+- [**36**Star][1m] [Py] [static-flow/cloudcopy](https://github.com/static-flow/cloudcopy) This tool implements a cloud version of the Shadow Copy attack against domain controllers running in AWS using only the EC2:CreateSnapshot permission.
+- [**36**Star][28d] [Py] [sinfulz/justtryharder](https://github.com/sinfulz/justtryharder) JustTryHarder, a cheat sheet which will aid you through the PWK course & the OSCP Exam.
+- [**36**Star][4y] [C] [sektioneins/xpwntool-lite](https://github.com/sektioneins/xpwntool-lite) Lightweight version of xpwntool just for decrypting IMG3 firmware files
+- [**36**Star][1y] [HTML] [secwiki/iot](https://github.com/secwiki/iot) IOT Research Blog 物联网安全技术研究小组
+- [**36**Star][3y] [JS] [saelo/foxpwn](https://github.com/saelo/foxpwn) Exploit code for CVE-2016-9066
+- [**36**Star][7m] [Py] [s0md3v/entropy](https://github.com/s0md3v/entropy) Entropy is a (prototype) WAF driven by maths.
+- [**36**Star][2y] [Py] [rxwx/cve-2017-11882](https://github.com/rxwx/cve-2017-11882) Proof-of-Concept exploits for CVE-2017-11882
+- [**36**Star][2y] [PS] [rvrsh3ll/pentesting-scripts](https://github.com/rvrsh3ll/pentesting-scripts) A ton of helpful tools
+- [**36**Star][6m] [Py] [ruped24/tor_ip_switcher](https://github.com/ruped24/tor_ip_switcher) tor_ip_switcher is useful for making any DoS attack look like a DDoS attack. Works with toriptables2.
+- [**36**Star][2y] [C++] [rolfrolles/wbdeshook](https://github.com/rolfrolles/wbdeshook) DLL-injection based solution to Brecht Wyseur's wbDES challenge (based on SysK's Phrack article)
+- [**36**Star][18d] [C] [rinnegatamante/vitaquakeiii](https://github.com/rinnegatamante/vitaquakeiii) ioquake3 port for PSVITA (Currently supporting Quake III: Arena, Quake III: Team Arena, OpenArena, Urban Terror and Q3Rally)
+- [**36**Star][7m] [Py] [rikonaka/katoolin4china](https://github.com/rikonaka/katoolin4china) Kali tools installer
+- [**36**Star][1y] [JS] [rewanth1997/vuln-headers-extension](https://github.com/rewanth1997/vuln-headers-extension) Firefox extension which parses the headers of all the requests which are being flowing through your firefox browser to detect for vulnerabilities.
+- [**36**Star][10m] [Py] [redforcesec/dumpit](https://github.com/redforcesec/dumpit) An exploit for SHAREit <= v 4.0.38
+- [**36**Star][4m] [Py] [raymanfx/android-cve-checker](https://github.com/raymanfx/android-cve-checker) Python tool to check your Android kernel for missing CVE patches.
+- [**36**Star][4m] [Java] [radare/ghidra-r2web](https://github.com/radare/ghidra-r2web) Ghidra plugin to start an r2 webserver to let r2 interact with it
+- [**36**Star][4y] [Shell] [pwnagentsmith/ir_tool](https://github.com/pwnagentsmith/ir_tool) Script for Forensic on Linux
+- [**36**Star][4m] [Shell] [plenumlab/lazyrecon](https://github.com/plenumlab/lazyrecon) This script is intended to automate your reconnaissance process in an organized fashion
+- [**36**Star][3y] [Py] [phar/eyephish](https://github.com/phar/eyephish) OpenCV based IDN option generator PoC
+- [**36**Star][9m] [Py] [phage-nz/malware-hunting](https://github.com/phage-nz/malware-hunting) A collection of scripts and information for Malware Hunting.
+- [**36**Star][12m] [Elixir] [paulzql/shadowsocks-ex](https://github.com/paulzql/shadowsocks-ex) elixir port of shadowsocks
+- [**36**Star][3y] [C++] [paulmehta/ablation](https://github.com/paulmehta/ablation) Augmenting Static Analysis Using Pintool: Ablation
+- [**36**Star][5m] [Py] [paradoxis/flask-unsign](https://github.com/paradoxis/flask-unsign) Command line tool to fetch, decode, brute-force and craft session cookies of a Flask application by guessing secret keys.
+- [**36**Star][4y] [Java] [onionmail/onionmail](https://github.com/onionmail/onionmail) TOR Mail encrypted server for Hidden Services
+- [**36**Star][4y] [C] [ofercas/ransomware_begone](https://github.com/ofercas/ransomware_begone) ransomware_begone
+- [**36**Star][3m] [C++] [notscimmy/pplib](https://github.com/notscimmy/pplib) Elevate a process to be a protected process
+- [**36**Star][5m] [C#] [not-matthias/nemesis](https://github.com/not-matthias/nemesis) A customizable process dumper.
+- [**36**Star][5m] [Go] [northern-lights/yara-parser](https://github.com/northern-lights/yara-parser) Tools for parsing rulesets using the exact grammar as YARA. Written in Go.
+- [**36**Star][3y] [Ruby] [nopernik/msfvenom-bc-generator](https://github.com/nopernik/msfvenom-bc-generator) Metasploit msfvenom Bash Completions Generator
+- [**36**Star][3y] [C] [nexusbots/umbreon-rootkit](https://github.com/nexusbots/umbreon-rootkit)
+- [**36**Star][11m] [Py] [nevillegrech/madmax](https://github.com/nevillegrech/madmax) Ethereum Static Vulnerability Detector for Gas-Focussed Vulnerabilities
+- [**36**Star][3y] [Ruby] [neinwechter/metasploit-framework](https://github.com/neinwechter/metasploit-framework) Metasploit Framework
+- [**36**Star][9m] [C++] [nanoric/pkn](https://github.com/nanoric/pkn) core of pkn game hacking project. Including mainly for process management, memory management, and DLL injecttion. Also PE analysis, windows registry management, compile-time sting encryption, byte-code emulator, etc. Most of them can run under kernel mode.
+- [**36**Star][4y] [C++] [n3k/ekoparty2015_windows_smep_bypass](https://github.com/n3k/ekoparty2015_windows_smep_bypass) Windows SMEP Bypass U=S
+- [**36**Star][3y] [Py] [mthbernardes/strutszeiro](https://github.com/mthbernardes/strutszeiro) Telegram Bot to manage botnets created with struts vulnerability(CVE-2017-5638)
+- [**36**Star][2y] [Py] [mr-un1k0d3r/searchipowner](https://github.com/mr-un1k0d3r/searchipowner) Search public IP owner through ARIN
+- [**36**Star][3y] [Assembly] [mortenschenk/token-stealing-shellcode](https://github.com/mortenschenk/token-stealing-shellcode)
+- [**36**Star][2y] [Go] [mojachieee/go-honeypot](https://github.com/mojachieee/go-honeypot) A honeypot server written in Go.
+- [**36**Star][4y] [michael-yip/aptmalwarenotes](https://github.com/michael-yip/aptmalwarenotes) A repository of open source reports on different malware families used in targeted cyber intrusions ("APT").
+- [**36**Star][8y] [Ruby] [miaout17/lolize](https://github.com/miaout17/lolize) Colorize your ruby output with rainbow
+- [**36**Star][4y] [C] [mempodippy/cub3](https://github.com/mempodippy/cub3) Proof of concept for LD_PRELOAD malware that uses extended attributes to protect files.
+- [**36**Star][3y] [C++] [manux81/canspy](https://github.com/manux81/canspy) Very simple tool for users who need to interface with a device based on CAN (CAN/CANopen/J1939/NMEA2000/DeviceNet) such as motors, sensors and many other devices.
+- [**36**Star][3m] [Go] [mame82/munifying](https://github.com/mame82/munifying)
+- [**36**Star][1m] [PHP] [linuxsec/indoxploit-shell](https://github.com/linuxsec/indoxploit-shell) IndoXploit Webshell V.3
+- [**36**Star][5y] [Shell] [linkp2p/wps-pin](https://github.com/linkp2p/wps-pin) # This scripts is edited under the General Public License as defined by the Free software foundation. # This package is distributed in the hope that it will be useful, but without any warranty; It can be used and modified and shared but should be referenced to, it CANNOT be # sold or be used for a commercial-economical purpose. # See the detail…
+- [**36**Star][1y] [Go] [leoloobeek/gogreen](https://github.com/leoloobeek/gogreen) Environmental (and http) keying for scripting languages
+- [**36**Star][5y] [C++] [kkar/teamviewer-dumper-in-cpp](https://github.com/kkar/teamviewer-dumper-in-cpp) Dumps TeamViewer ID,Password and account settings from a running TeamViewer instance by enumerating child windows.
+- [**36**Star][10m] [Shell] [keeganjk/kali-anonymous](https://github.com/keeganjk/kali-anonymous)
+- [**36**Star][6m] [Shell] [kawaxi/kali-setup](https://github.com/kawaxi/kali-setup) Bash script to fully setup your kali system.
+- [**36**Star][29d] [JS] [jrjr/paw.js](https://github.com/jrjr/paw.js) Passwordless Authentication Wallet (PAW) is key-based authentication for the web. The library helps manage identities, their associated public/private keypairs, and signing operations in the browser.
+- [**36**Star][2y] [jhaddix/bug-bounty-reference](https://github.com/jhaddix/bug-bounty-reference) Inspired by
+- [**36**Star][2y] [JS] [jamiebuilds/guarded-string](https://github.com/jamiebuilds/guarded-string) Prevent accidentally introducing XSS holes with the strings in your app
+- [**36**Star][9m] [C] [ivanfratric/winafl](https://github.com/ivanfratric/winafl) Windows 二进制文件fuzz工具
+- [**36**Star][4y] [C] [in12hacker/vt_64_ept](https://github.com/in12hacker/vt_64_ept) createfile
+- [**36**Star][2y] [C++] [illusivenetworks-labs/getconsolehistoryandoutput](https://github.com/illusivenetworks-labs/getconsolehistoryandoutput) An Incident Response tool to extract console command history and screen output buffer
+- [**36**Star][7d] [Lua] [igalia/snabb](https://github.com/igalia/snabb) Snabb Switch: Fast open source packet processing
+- [**36**Star][29d] [hwroot/presentations](https://github.com/hwroot/presentations)
+- [**36**Star][3m] [Shell] [hromie/obfs4proxy-openvpn](https://github.com/hromie/obfs4proxy-openvpn) Obfuscating OpenVPN traffic using obfs4proxy
+- [**36**Star][2y] [C++] [hitanshu-dhawan/imagesteganography](https://github.com/hitanshu-dhawan/imagesteganography)
+- [**36**Star][9m] [Shell] [gusbemacbe/suru-plus-dark](https://github.com/gusbemacbe/suru-plus-dark) Suru++ 25 Dark — A full dark cyberpunk, elegant, futuristic and Papirus-like third-party icons theme
+- [**36**Star][5m] [C] [geosn0w/geofilza](https://github.com/geosn0w/geofilza) Filza No Jailbreak
+- [**36**Star][8y] [C#] [gdssecurity/wcf-binary-soap-plug-in](https://github.com/gdssecurity/wcf-binary-soap-plug-in) This is a Burp Suite plug-in designed to encode and decode WCF Binary Soap request and response data ("Content-Type: application/soap+msbin1). There are two versions of the plug-in available (consult the README for more information).
+- [**36**Star][3y] [C#] [gdssecurity/psattack](https://github.com/gdssecurity/psattack) A portable console aimed at making pentesting with PowerShell a little easier.
+- [**36**Star][8y] [Py] [gdssecurity/burpee](https://github.com/gdssecurity/burpee) Python object interface to requests/responses recorded by Burp Suite
+- [**36**Star][2y] [fuzzysecurity/defcon-beijing-uac](https://github.com/fuzzysecurity/defcon-beijing-uac) Slide deck for DefCon Beijing
+- [**36**Star][1m] [Go] [fuzzitdev/example-go](https://github.com/fuzzitdev/example-go) Go Fuzzit Example
+- [**36**Star][3y] [D] [f-secure/reflash](https://github.com/f-secure/reflash) ActionScript3 dynamic instrumentation tool
+- [**36**Star][2y] [Py] [extremecoders-re/pjorion-deobfuscator](https://github.com/extremecoders-re/pjorion-deobfuscator) A deobfuscator for PjOrion, python cfg generator and more
+- [**36**Star][5y] [Py] [eurecom-s3/actaeon](https://github.com/eurecom-s3/actaeon) Memory forensics of virtualization environments
+- [**36**Star][23d] [C++] [erickutcher/httpdownloader](https://github.com/erickutcher/httpdownloader) HTTP(S) download manager that uses input/output completion ports (IOCP).
+- [**36**Star][3y] [Py] [ec-digit-csirc/virustotal-tools](https://github.com/ec-digit-csirc/virustotal-tools)
+- [**36**Star][14d] [Py] [draios/python-sdc-client](https://github.com/draios/python-sdc-client) Sysdig Monitor/Secure Python client library
+- [**36**Star][21d] [Assembly] [dpt/the-great-escape](https://github.com/dpt/the-great-escape) Reverse engineering classic ZX Spectrum game "The Great Escape"
+- [**36**Star][4y] [Py] [dionach/codeigniterxor](https://github.com/dionach/codeigniterxor) CodeIgniter <=2.1.4 session cookie decryption vulnerability
+- [**36**Star][1m] [C++] [dankirk/regslscan](https://github.com/dankirk/regslscan) A tool for scanning registery key permissions. Find where non-admins can create symbolic links.
+- [**36**Star][12m] [Py] [dahua966/web-awd-framework](https://github.com/dahua966/web-awd-framework) AWD framework for web in CTF by HuaSir
+- [**36**Star][3y] [Awk] [d3sre/understanding_the_ndis_6_stack](https://github.com/d3sre/understanding_the_ndis_6_stack) Public documents about bachelor thesis "Reverse Engineering Analysis of the NDIS 6.* stack"
+- [**36**Star][8m] [Py] [cyubuchen/free_proxy_website](https://github.com/cyubuchen/free_proxy_website) 获取免费socks/https/http代理的网站集合
+- [**36**Star][3y] [Objective-C++] [cyhe/iossecurity-attack](https://github.com/cyhe/iossecurity-attack) APP安全(逆向攻击篇)
+- [**36**Star][4y] [C#] [cweb/unicode-hax](https://github.com/cweb/unicode-hax) A library to assist in security-testing Unicode enabled applications during fuzzing, XSS, SQLi, etc.
+- [**36**Star][8d] [PS] [cube0x0/security-assessment](https://github.com/cube0x0/security-assessment) Scripts to automate some part of Security/Vulnerability Assessment
+- [**36**Star][5m] [PHP] [ctubio/php-proxy-keyserver](https://github.com/ctubio/php-proxy-keyserver) PHP proxy and extensible web interface forwarding standard HKP requests to a local or remote SKS OpenPGP Keyserver.
+- [**36**Star][2y] [Py] [cr4sh/smram_parse](https://github.com/cr4sh/smram_parse) System Management RAM analysis tool
+- [**36**Star][3y] [C++] [cn33liz/tpminituacanniversarybypass](https://github.com/cn33liz/tpminituacanniversarybypass) Bypassing User Account Control (UAC) using TpmInit.exe
+- [**36**Star][2y] [PS] [clr2of8/commentator](https://github.com/clr2of8/commentator)
+- [**36**Star][10d] [Java] [cliqz-oss/browser-android](https://github.com/cliqz-oss/browser-android) CLIQZ for Android
+- [**36**Star][4m] [Py] [cisco-talos/re2pcap](https://github.com/cisco-talos/re2pcap)
+- [**36**Star][3y] [C] [changeofpace/pe-header-dump-utilities](https://github.com/changeofpace/pe-header-dump-utilities) This x64dbg plugin adds several commands for dumping PE header information by address.
+- [**36**Star][4y] [Py] [byt3bl33d3r/toby](https://github.com/byt3bl33d3r/toby) Recursively searches a directory for any file containing a specified string
+- [**36**Star][2y] [Py] [brianwrf/s2-053-cve-2017-12611](https://github.com/brianwrf/s2-053-cve-2017-12611) A simple script for exploit RCE for Struts 2 S2-053(CVE-2017-12611)
+- [**36**Star][3y] [C] [brad-anton/proxbrute](https://github.com/brad-anton/proxbrute) Modified proxmark3 firmware to perform brute forcing of 26-Bit ProxCards
+- [**36**Star][2y] [PHP] [bogdaan/spycss](https://github.com/bogdaan/spycss) Track user interactions without JavaScript
+- [**36**Star][4y] [C++] [bobotig/cracker-ng](https://github.com/bobotig/cracker-ng) ZIP cracker, CCRYPT cracker, and others to come.
+- [**36**Star][2y] [JS] [blackhole1/fecm](https://github.com/blackhole1/fecm) 前端XSS防火墙及后台报警系统(front-end XSS firewall and back-end alarm system)
+- [**36**Star][3y] [C] [arodland/haproxy](https://github.com/arodland/haproxy) Experiment with haproxy
+- [**36**Star][1m] [JS] [anseki/gnirts](https://github.com/anseki/gnirts) Obfuscate string literals in JavaScript code.
+- [**36**Star][10m] [Py] [anic/ida2pwntools](https://github.com/anic/ida2pwntools) a IDA 7.0 plugins that helps to attach process created by pwntools and debug pwn
+- [**36**Star][7m] [Py] [anantshri/ds_store_crawler_parser](https://github.com/anantshri/ds_store_crawler_parser) a parser + crawler for .DS_Store files exposed publically
+- [**36**Star][28d] [Py] [ahmia/ahmia-site](https://github.com/ahmia/ahmia-site) Ahmia.fi - Hidden service search engine
+- [**36**Star][17d] [Py] [agroce/universalmutator](https://github.com/agroce/universalmutator) Regexp based tool for mutating generic source code across numerous languages
+- [**36**Star][5y] [C++] [adamkramer/jmp2it](https://github.com/adamkramer/jmp2it) Transfer EIP control to shellcode during malware analysis investigation
+- [**36**Star][2y] [C] [adamgreen/mri](https://github.com/adamgreen/mri) MRI - Monitor for Remote Inspection. The gdb compatible debug monitor for Cortex-M devices.
+- [**36**Star][1y] [ab1gale/phpcms-2008-cve-2018-19127](https://github.com/ab1gale/phpcms-2008-cve-2018-19127)
+- [**36**Star][3y] [Py] [a7vinx/swarm](https://github.com/a7vinx/swarm) A modular distributed penetration testing tool.
+- [**36**Star][4y] [7iosecurity/xss-payloads](https://github.com/7iosecurity/xss-payloads) XSS Payloads
+- [**36**Star][4y] [PS] [5alt/zerorat](https://github.com/5alt/zerorat) ZeroRAT是一款windows上的一句话远控
+- [**36**Star][7d] [C] [0x7ff/dimentio](https://github.com/0x7ff/dimentio) PoC tool for setting nonce without triggering KPP/KTRR/PAC. (requires tfp0)
+- [**36**Star][3y] [Py] [0ang3el/unsafe-jax-rs-burp](https://github.com/0ang3el/unsafe-jax-rs-burp) Burp Suite extension for JAX-RS
+- [**35**Star][2y] [unbinilium/surge](https://github.com/unbinilium/surge) Shadowsocks Encrypt Support Module for Surge APP, iOS & MacOS Configuration
+- [**35**Star][7m] [tidesec/mars](https://github.com/tidesec/mars) Mars(战神)——结合Tide资产探测和指纹识别方面的技术积累,为客户提供更高效智能的安全检测和安全监测服务。
+- [**35**Star][2m] [Lua] [chaitin/safeline-open-platform](https://github.com/chaitin/safeline-open-platform)
+- [**35**Star][29d] [Py] [mak-/scanomaly](https://github.com/mak-/scanomaly) This is a web application fuzzer scanner - the goal was CLI flexibility and rapid prototyping
+- [**35**Star][5m] [HTML] [nsacyber/bitlocker-guidance](https://github.com/nsacyber/bitlocker-guidance) Configuration guidance for implementing BitLocker. #nsacyber
+- [**35**Star][4y] [Py] [lanjelot/web-hunter](https://github.com/lanjelot/web-hunter) Crawl Google and Bing to find emails, subdomains and URLs associated to a target domain
+- [**35**Star][2m] [LLVM] [galoisinc/llvm-pretty-bc-parser](https://github.com/galoisinc/llvm-pretty-bc-parser) Parser for the llvm bitcode format
+- [**35**Star][9m] [JS] [paulsec/shodan.io-mobile-app](https://github.com/paulsec/shodan.io-mobile-app) Official repository for the Shodan.io mobile Application
+- [**35**Star][6y] [Py] [robindavid/captcha-basic-recognition](https://github.com/robindavid/captcha-basic-recognition) Python module that intent to crack basic captcha engines using OpenCV and Pytesser
+- [**35**Star][1m] [PS] [vletoux/bluekeep-scanner](https://github.com/vletoux/bluekeep-scanner) BlueKeep powershell scanner (based on c# code)
+- [**35**Star][2y] [Shell] [secfathy/bugzee](https://github.com/secfathy/bugzee) Simple Script to install recommended Bug Bounty Hunting Tools In Your Linux Disto
+- [**35**Star][1m] [jasonniebauer/nmap-cheatsheet](https://github.com/jasonniebauer/nmap-cheatsheet) Reference guide for scanning networks with Nmap.
+- [**35**Star][2d] [CSS] [fabriziofubelli/black-widow](https://github.com/fabriziofubelli/black-widow) Offensive penetration testing tool (Open Source)
+- [**35**Star][15d] [Rust] [scipr-lab/poly-commit](https://github.com/scipr-lab/poly-commit) A Rust library for polynomial commitments
+- [**35**Star][2y] [Shell] [re4son/pocket-kali-live-build](https://github.com/Re4son/Pocket-Kali-live-build) Debian live build for the Pocket-Kali
+- [**35**Star][3y] [polarislab/aesgfic](https://github.com/PolarisLab/AESGFIC) 互联网企业安全高级指南读书笔记脑图 -
+- [**35**Star][1y] [Java] [bit4woo/resign](https://github.com/bit4woo/ReSign) A burp extender that recalculate signature value automatically after you modified request parameter value.
+- [**35**Star][5y] [C] [intel/kvmgt-kernel](https://github.com/intel/KVMGT-kernel)
+- [**35**Star][3y] [JS] [yxhsea/xss](https://github.com/yxhsea/xss) web安全之模拟xss攻击
+- [**35**Star][3y] [Shell] [rumpkernel/rumpctrl](https://github.com/rumpkernel/rumpctrl) Control and diagnostic applications for rump kernels
+- [**35**Star][7y] [Java] [continuumsecurity/resty-burp](https://github.com/continuumsecurity/resty-burp) REST/JSON interface to Burp Suite
+- [**35**Star][2d] [Rust] [rair-project/rair-core](https://github.com/Rair-Project/rair-core) RAIR: RAdare In Rust
+- [**35**Star][2m] [Go] [62726164/netscan](https://github.com/62726164/netscan) A fast TCP port scanner
+- [**35**Star][1y] [PHP] [rickmacgillis/hackfastalgos](https://github.com/rickmacgillis/hackfastalgos) A library of various fast algorithms written in Hack
+- [**35**Star][2y] [Py] [hash3lizer/airpydump](https://github.com/hash3liZer/airpydump) Analyze Wireless Packets on the fly. Currently supporting three working Modes (Reader, Live, Stealth)
+- [**35**Star][8y] [Py] [zynamics/ida2sql-plugin-ida](https://github.com/zynamics/ida2sql-plugin-ida)
+- [**35**Star][5m] [HTML] [zhuowei/worthdoingbadly.com](https://github.com/zhuowei/worthdoingbadly.com) My blog where I make a new coding project every Thursday.
+- [**35**Star][4y] [C++] [zer0mem/libc](https://github.com/zer0mem/libc) Kernel C++ driver developing library; std & boost partially supported
+- [**35**Star][11m] [Go] [yvesago/shodan-cli](https://github.com/yvesago/shodan-cli) Simple golang shodan cli
+- [**35**Star][2y] [yuvadm/dg-m1q](https://github.com/yuvadm/dg-m1q) DG-M1Q IP camera alternative usage
+- [**35**Star][5y] [C] [yuange75/aspcode](https://github.com/yuange75/aspcode) aspcode堆溢出利用代码
+- [**35**Star][1y] [Py] [yaokaiyang-assaultmaster/pythonportscanner](https://github.com/yaokaiyang-assaultmaster/pythonportscanner)
+- [**35**Star][3y] [Py] [yang3yen/pysm4](https://github.com/yang3yen/pysm4) Python SM4
+- [**35**Star][3y] [Py] [yanceyblog/scrapy-multi](https://github.com/yanceyblog/scrapy-multi) 实现多个爬虫共同工作的scrapy爬虫实例
+- [**35**Star][2y] [C] [xerub/ibex64](https://github.com/xerub/ibex64) iBoot64 Payload Development Toolkit
+- [**35**Star][14d] [Py] [x-vector/x-rsa](https://github.com/x-vector/x-rsa) Cryptography Tool | RSA Attacks
+- [**35**Star][1y] [Swift] [vixentael/zka-example](https://github.com/vixentael/zka-example) Zero Knowledge Application example, iOS, notes sharing, Firebase backend
+- [**35**Star][1y] [C++] [venam/browser](https://github.com/venam/browser) A Simple to use yet efficient headers only library ( wrapped over libcurl / curl wrapper ) to do browser emulation (emulate) or web interaction in C++.
+- [**35**Star][1y] [ustayready/cloudburst](https://github.com/ustayready/cloudburst) CloudBurst is a red team framework for interacting with cloud providers to capture, compromise, and exfil data.
+- [**35**Star][4y] [C++] [uncseclab/vmxxnr](https://github.com/uncseclab/vmxxnr) Implementation of a thin hypervisor
+- [**35**Star][1y] [HTML] [umbertocicero/coinhive-monero](https://github.com/umbertocicero/coinhive-monero)
+- [**35**Star][6m] [Py] [trylinux/lift](https://github.com/trylinux/lift) Low-Impact Fingerprint Tool
+- [**35**Star][3y] [C] [topcss/wannacry](https://github.com/topcss/wannacry) 勒索病毒WannaCry反编译源码
+- [**35**Star][2y] [Perl] [tls-check/tls-check](https://github.com/tls-check/tls-check) TLS-Check – a security/encryption scanner and framework for checking IT Security and the capability to be innovative
+- [**35**Star][7m] [Py] [tidesec/tdscanner](https://github.com/tidesec/tdscanner) 自动化检测小工具,主要实现了域名枚举、链接爬取、注入检测、主机扫描、目录枚举、敏感信息检测等功能~
+- [**35**Star][2y] [Java] [thecyaniteproject/exit_code_java](https://github.com/thecyaniteproject/exit_code_java) ExitCode - The Free, Open-Source, Desktop & Hacking Simulator Game.
+- [**35**Star][6m] [Py] [testingpens/constole](https://github.com/testingpens/constole) Scan for and exploit Consul agents
+- [**35**Star][5m] [Rust] [teovoinea/steganography](https://github.com/teovoinea/steganography) A simple steganography library written in rust
+- [**35**Star][2y] [technicaldada/best-hacking-tools](https://github.com/technicaldada/best-hacking-tools) BEST HACKING TOOLS..For more tools visit our blog for Hackers
+- [**35**Star][2y] [Py] [superbuker/camhell](https://github.com/superbuker/camhell) Ingenic T10 IP camera crawler
+- [**35**Star][6m] [Shell] [sundowndev/covermyass](https://github.com/sundowndev/covermyass) Shell tool to cover your tracks on UNIX systems. Designed for pen testing "covering tracks" phase, before exiting the infected server. Or, permanently disable system logs for post-exploitation.
+- [**35**Star][9m] [C] [sud0man/pac4mac](https://github.com/sud0man/pac4mac) Automatically exported from code.google.com/p/pac4mac
+- [**35**Star][1y] [JS] [stdarg/tcp-port-used](https://github.com/stdarg/tcp-port-used) A simple Node.js module to check if a TCP port is already bound.
+- [**35**Star][1y] [PS] [sqlcollaborative/invoke-sqlcmd2](https://github.com/sqlcollaborative/invoke-sqlcmd2) PowerShell module containing Invoke-SqlCmd2
+- [**35**Star][9y] [Perl] [spiderlabs/ackack](https://github.com/spiderlabs/ackack) A program to monitor network traffic and detect unauthorized sessions.
+- [**35**Star][2y] [Py] [webr0ck/waf_bypass_helper](https://github.com/sndvul/waf_bypass_helper) Python script for generating bypass of your attack
+- [**35**Star][6m] [C] [sistr0/ps4-hen-vtx](https://github.com/sistr0/ps4-hen-vtx) A fully implemented kernel exploit for the PS4 with HEN
+- [**35**Star][5y] [Py] [siberas/ida2sym](https://github.com/siberas/ida2sym) IDAScript to create Symbol file which can be loaded in WinDbg via AddSyntheticSymbol
+- [**35**Star][3y] [Java] [serval-snt-uni-lu/droidra](https://github.com/serval-snt-uni-lu/droidra) Taming Reflection to Support Whole-Program Analysis of Android Apps
+- [**35**Star][2y] [Shell] [seanheelan/funserialize](https://github.com/seanheelan/funserialize) Scripts and auxiliary files for fuzzing PHP's unserialize function
+- [**35**Star][8y] [C] [sduverger/ld-shatner](https://github.com/sduverger/ld-shatner) ld-linux code injector
+- [**35**Star][6y] [C++] [scen/ionlib](https://github.com/scen/ionlib) c++11 reverse engineering library. bootstraps common tasks in game hacking and reverse engineering
+- [**35**Star][2y] [C#] [scavanger/memorymodule.net](https://github.com/scavanger/memorymodule.net) Loading a native DLL in the memory.
+- [**35**Star][2y] [C] [satoshinm/pill_duck](https://github.com/satoshinm/pill_duck) Scriptable USB HID device for STM32F103 blue pill (inspired by USB Rubber Ducky) ⛺
+- [**35**Star][4y] [Shell] [samyoyo/flux](https://github.com/samyoyo/flux) Flux is a [WIFI CRACKER]
+- [**35**Star][1m] [Py] [roddhjav/pass-audit](https://github.com/roddhjav/pass-audit) A pass extension for auditing your password repository.
+- [**35**Star][2y] [ritiek/rat-via-telegram](https://github.com/ritiek/rat-via-telegram) Removed according to regulations
+- [**35**Star][5y] [C#] [redth/android.signature.tool](https://github.com/redth/android.signature.tool) Simple GUI tool for Mac and Windows to help find the SHA1 and MD5 hashes of your Android keystore's and apk's
+- [**35**Star][1y] [C] [realoriginal/alpc-diaghub](https://github.com/realoriginal/alpc-diaghub) Utilizing the ALPC Flaw in combiniation with Diagnostics Hub as found in Server 2016 and Windows 10.
+- [**35**Star][2y] [Py] [r0oth3x49/tor](https://github.com/r0oth3x49/tor) Tor is a python based module for using tor proxy/network services on windows, osx, linux with just one click.
+- [**35**Star][2y] [PHP] [propaganistas/email-obfuscator](https://github.com/propaganistas/email-obfuscator)
+- [**35**Star][1y] [C] [prodicode/arppd](https://github.com/prodicode/arppd) An ARP Poisoning Defender script
+- [**35**Star][3m] [PS] [dsccommunity/xfailovercluster](https://github.com/dsccommunity/xFailOverCluster) This module contains DSC resources for deployment and configuration of Windows Server Failover Cluster.
+- [**35**Star][5y] [plutochiou/shadowsocks-rss](https://github.com/plutochiou/shadowsocks-rss) shadowsocks update rss
+- [**35**Star][3y] [Java] [onurkarasalihoglu/pentest-tools](https://github.com/onurkarasalihoglu/pentest-tools)
+- [**35**Star][2y] [JS] [one-com/one-validation](https://github.com/one-com/one-validation) Regexp based validation collection for common internet validation tasks
+- [**35**Star][8m] [offensive-security/kali-wsl-chroot](https://github.com/offensive-security/kali-wsl-chroot) Kali Linux Windows App chroot builder script
+- [**35**Star][8m] [Py] [oddcoder/cutterdrcov](https://github.com/oddcoder/cutterdrcov) DynamoRIO coverage visualization for cutter
+- [**35**Star][5m] [ocatak/malware_api_class](https://github.com/ocatak/malware_api_class) Malware dataset for security researchers, data scientists. Public malware dataset generated by Cuckoo Sandbox based on Windows OS API calls analysis for cyber security researchers
+- [**35**Star][1y] [Go] [nucypher/goumbral](https://github.com/nucypher/goumbral) Umbral implementation in Golang
+- [**35**Star][1y] [C] [ntraiseharderror/kaiser](https://github.com/ntraiseharderror/kaiser) Fileless persistence, attacks and anti-forensic capabilties.
+- [**35**Star][7m] [C] [ntraiseharderror/antihook](https://github.com/ntraiseharderror/antihook) PoC designed to evade userland-hooking anti-virus.
+- [**35**Star][6m] [C] [ns1/xdp-workshop](https://github.com/ns1/xdp-workshop) Velocity SJC 2019 - DDoS mitigation made easy with XDP and eBPF
+- [**35**Star][3y] [C] [nnamon/practicalret2libc](https://github.com/nnamon/practicalret2libc) Practical Return to Libc in 12 Minutes Presentation + practice for CS3235 YouTeach project.
+- [**35**Star][21d] [C] [nil0x42/duplicut](https://github.com/nil0x42/duplicut) Quickly remove duplicates, without changing the order, and without getting OOM on huge wordlists.
+- [**35**Star][5y] [C++] [nihilus/ida_classinformer](https://github.com/nihilus/ida_classinformer) IDA ClassInformer PlugIn
+- [**35**Star][6y] [PHP] [nightlionsecurity/phpstress](https://github.com/nightlionsecurity/phpstress) phpstress:对运行PHP-FPM 或 PHP-CGI 的网页服务器进行DoS/压力测试
+- [**35**Star][10m] [Shell] [nicoulaj/broom](https://github.com/nicoulaj/broom) A disk cleaning utility for developers.
+- [**35**Star][2y] [Py] [nhoya/mycroftai-rce](https://github.com/nhoya/mycroftai-rce) "Zero Click" Remote Code Execution in Mycroft AI vocal assistant
+- [**35**Star][5y] [Py] [netxfly/eventlog-audit](https://github.com/netxfly/eventlog-audit) Windows事件日志审计系统,支持以WEB的方式审计日志
+- [**35**Star][8m] [Go] [netevert/delator](https://github.com/netevert/delator) Golang-based subdomain miner leveraging certificate transparency logs
+- [**35**Star][3y] [Java] [netcrusherorg/netcrusher-java](https://github.com/netcrusherorg/netcrusher-java) NetCrusher is a TCP/UDP proxy that allows to test services for failover
+- [**35**Star][2y] [Py] [neargle/tips-note](https://github.com/neargle/tips-note) 做过的实验,踩过的坑
+- [**35**Star][4y] [Shell] [ncsa/ossec-tools](https://github.com/ncsa/ossec-tools) Scripts and integrations for OSSEC
+- [**35**Star][3y] [Py] [n1nj4sec/pymemimporter](https://github.com/n1nj4sec/pymemimporter) import pyd or execute PE all from memory using only pure python code and some shellcode tricks
+- [**35**Star][4y] [C] [motazreda/malwarefragmentationtool](https://github.com/motazreda/malwarefragmentationtool) Malware Fragmentation Tool its a tool that simply fragment the PE file and it can disassemble the PE file, etc this tool very useful for people who do malware research or analysis for pe_files
+- [**35**Star][5y] [Py] [miserlou/onionchat](https://github.com/miserlou/onionchat) Anonymous chat. No Javascript.
+- [**35**Star][2m] [Py] [michaelstott/crlf-injection-scanner](https://github.com/michaelstott/crlf-injection-scanner) Command line tool for testing CRLF injection on list of domains.
+- [**35**Star][2y] [Py] [meyer9/ethdasm](https://github.com/meyer9/ethdasm) Tool for auditing Ethereum contracts
+- [**35**Star][2y] [Go] [metalnem/zinio](https://github.com/metalnem/zinio) This command line tool removes DRM from magazines in your digital Zinio library
+- [**35**Star][4m] [Go] [maxlaverse/reverse-shell](https://github.com/maxlaverse/reverse-shell) A reverse-shell agent, master and rendezvous point written in Go
+- [**35**Star][3y] [PS] [machosec/mystique](https://github.com/machosec/mystique) PowerShell module to play with Kerberos S4U extensions
+- [**35**Star][3y] [C#] [m4ndingo/radare2gui_dotnet](https://github.com/m4ndingo/radare2gui_dotnet) Another radare2 gui for windows
+- [**35**Star][1y] [JS] [lmammino/distributed-jwt-cracker](https://github.com/lmammino/distributed-jwt-cracker) An experimental distributed JWT token cracker built using Node.js and ZeroMQ
+- [**35**Star][4y] [Py] [laginimaineb/unpack_bootloader_image](https://github.com/laginimaineb/unpack_bootloader_image) Small script to unpack the bootloader image format present in Nexus 5 devices
+- [**35**Star][9m] [C] [l4ys/lazyklee](https://github.com/l4ys/lazyklee) Lazy python wrapper of KLEE for solving CTF challenges
+- [**35**Star][3y] [Go] [kung-foo/freki](https://github.com/kung-foo/freki) Freki is a tool to manipulate packets in usermode using NFQUEUE and golang.
+- [**35**Star][4m] [Py] [ktenzer/openshift-on-openstack-123](https://github.com/ktenzer/openshift-on-openstack-123) Deploy OpenShift on OpenStack
+- [**35**Star][4y] [Py] [kitctf/ctfcode](https://github.com/kitctf/ctfcode) Collection of somewhat useful stuff for CTF events
+- [**35**Star][2y] [JS] [kingsabri/sqlmap-tamper-api](https://github.com/kingsabri/sqlmap-tamper-api) SQLMap tamper api to accept tamper scripts from all languages
+- [**35**Star][1y] [Java] [kingkaki/struts2-vulenv](https://github.com/kingkaki/struts2-vulenv) struts2 漏洞环境源代码
+- [**35**Star][2y] [C] [jordan9001/superhide](https://github.com/jordan9001/superhide) Example of hooking a linux systemcall
+- [**35**Star][3y] [Go] [jmpews/goscan](https://github.com/jmpews/goscan) golang的扫描框架, 支持协程池和自动调节协程个数.
+- [**35**Star][1y] [Py] [jimmy-sonny/yayagen](https://github.com/jimmy-sonny/yayagen) Yet Another YARA rule Generator
+- [**35**Star][3y] [JS] [jackgu1988/dsploit-scripts](https://github.com/jackgu1988/dsploit-scripts) Scripts that could be injected in MITM attacks using dSploit
+- [**35**Star][22d] [PHP] [isometriks/isometriksspambundle](https://github.com/isometriks/isometriksspambundle) Symfony3 Form Spam Protection
+- [**35**Star][3y] [Perl] [interference-security/kali-windows-binaries](https://github.com/interference-security/kali-windows-binaries) Windows binaries from Kali Linux :
+- [**35**Star][3y] [Py] [immunio/apache-struts2-cve-2017-5638](https://github.com/immunio/apache-struts2-cve-2017-5638) Demo Application and Exploit
+- [**35**Star][6y] [Py] [ilektrojohn/creepy-plugins](https://github.com/ilektrojohn/creepy-plugins) Plugins for cree.py
+- [**35**Star][1y] [Java] [ikkisoft/blazer](https://github.com/ikkisoft/blazer) Burp Suite AMF Extension
+- [**35**Star][4y] [Py] [iiseymour/game-of-life](https://github.com/iiseymour/game-of-life) Conway's Game Of Life
+- [**35**Star][3y] [Shell] [huntergregal/malwaresandbox](https://github.com/huntergregal/malwaresandbox) A ready to deploy docker container for a fresh sandbox for on-the-fly malware analysis
+- [**35**Star][3y] [Py] [huntergregal/bothunter](https://github.com/huntergregal/bothunter) Scans the internet for open FTP servers looking for common malware bot droppers and grabs them for sampling. Also provides support for uploading samples to VirusTotal
+- [**35**Star][5y] [Py] [holloway/insiderer](https://github.com/holloway/insiderer) Insiderer looks inside files for metadata and hidden content
+- [**35**Star][1y] [Py] [henryhaohao/slider_captcha_crack](https://github.com/henryhaohao/slider_captcha_crack)
+- [**35**Star][2y] [PHP] [havysec/vulnerable-scene](https://github.com/havysec/vulnerable-scene) 一些漏洞场景的还原,基于
+- [**35**Star][1y] [C++] [hatriot/bugs](https://github.com/hatriot/bugs) public bugs/proof of concepts
+- [**35**Star][3y] [C] [harvie/libpurple-core-answerscripts](https://github.com/harvie/libpurple-core-answerscripts) Most-hackable Pidgin plugin! Framework for hooking scripts to respond received messages for various libpurple clients such as pidgin or finch
+- [**35**Star][2y] [Py] [hanc00l/weblogic_wls_wsat_rce](https://github.com/hanc00l/weblogic_wls_wsat_rce) forked from
+- [**35**Star][3y] [hacking-and-coffee/defcon-for-n00bs](https://github.com/hacking-and-coffee/defcon-for-n00bs) DEF CON for N00bs is an open guide for first time attendees to the convention.
+- [**35**Star][3m] [Java] [guardicore/labs_campaigns](https://github.com/guardicore/labs_campaigns)
+- [**35**Star][5m] [gsurma/password_cracker](https://github.com/gsurma/password_cracker) Char-level RNN LSTM password cracker
+- [**35**Star][5y] [Py] [gry/shellshock-scanner](https://github.com/gry/shellshock-scanner) A simple Shellshock scanner in python
+- [**35**Star][7y] [Py] [grugq/buggery](https://github.com/grugq/buggery) Python wrapper for DbgEng
+- [**35**Star][4y] [Java] [grrrdog/acedcup](https://github.com/grrrdog/acedcup) Payload generator for Java Binary Deserialization attack with Commons FileUpload (CVE-2013-2186)
+- [**35**Star][6d] [C#] [greavesy1899/mafia2toolkit](https://github.com/greavesy1899/mafia2toolkit) Open source toolkit for Mafia 2.
+- [**35**Star][8d] [Perl] [gouveaheitor/security-spellbook](https://github.com/gouveaheitor/security-spellbook) My collection of custom scripts, plugins, exploits and others small things
+- [**35**Star][4m] [Py] [geek-repo/c2-blockchain](https://github.com/geek-repo/c2-blockchain) This is a concept poc of command and control server implemented over blockchain
+- [**35**Star][3y] [Py] [gauthamgoli/rarpasswordcracker](https://github.com/gauthamgoli/rarpasswordcracker) Bruteforces a password protected rar/zip file with specified charset.
+- [**35**Star][4y] [Py] [ganapati/wpyscan](https://github.com/ganapati/wpyscan) Wordpress pentest tool (because i don't like ruby)
+- [**35**Star][6y] [C#] [friedkiwi/netcrypt](https://github.com/friedkiwi/netcrypt) .NET executable packer
+- [**35**Star][2y] [Go] [freach/docker-image-policy-plugin](https://github.com/freach/docker-image-policy-plugin) Docker authentication plugin to enforce a image pull policy. Whitelist Docker images allowed to be pulled.
+- [**35**Star][3y] [C] [firebroo/screw_decode](https://github.com/firebroo/screw_decode) decode screw encode php file
+- [**35**Star][1y] [C++] [fdiskyou/dbi](https://github.com/fdiskyou/dbi) Files for
+- [**35**Star][12m] [PHP] [farisv/prestashop-cve-2018-19126](https://github.com/farisv/prestashop-cve-2018-19126) PrestaShop (1.6.x <= 1.6.1.23 or 1.7.x <= 1.7.4.4) Back Office Remote Code Execution (CVE-2018-19126)
+- [**35**Star][2y] [Py] [extremecoders-re/bytecode_simplifier](https://github.com/extremecoders-re/bytecode_simplifier) A generic deobfuscator for PjOrion obfuscated python scripts
+- [**35**Star][1m] [Rebol] [ericzimmerman/recmd](https://github.com/ericzimmerman/recmd) Command line access to the Registry
+- [**35**Star][8m] [enovella/ida2ghidra-kb](https://github.com/enovella/ida2ghidra-kb) 在Ghidra中应用部分IDA的键盘绑定
+- [**35**Star][7d] [C] [efficios/babeltrace](https://github.com/efficios/babeltrace) The Babeltrace project provides trace read and write libraries, as well as a trace converter. Plugins can be created for any trace format to allow its conversion to/from another trace format.
+- [**35**Star][1y] [Py] [digidotcom/python-wpa-supplicant](https://github.com/digidotcom/python-wpa-supplicant) WPA Supplicant wrapper for Python
+- [**35**Star][1y] [C] [davidbuchanan314/fusee-nano](https://github.com/davidbuchanan314/fusee-nano) A minimalist re-implementation of the Fusée Gelée exploit (
+- [**35**Star][2m] [Py] [d4mianwayne/alfred](https://github.com/d4mianwayne/alfred) A friendly Toolkit for Beginner CTF players
+- [**35**Star][6y] [Perl] [cyberisltd/egresser](https://github.com/cyberisltd/egresser) Client/server scripts designed to test outbound (egress) firewall rules.
+- [**35**Star][7y] [C++] [csurage/rootkit](https://github.com/csurage/rootkit) Windows Malware
+- [**35**Star][1m] [Go] [cretz/tor-static](https://github.com/cretz/tor-static) Helpers to build Tor statically
+- [**35**Star][4y] [C++] [codereversing/wow64syscall](https://github.com/codereversing/wow64syscall) WoW64 Syscall Hooking
+- [**35**Star][1m] [JS] [cloudflare/ipfs-ext](https://github.com/cloudflare/ipfs-ext) Validates IPFS resources served by Cloudflare's gateway.
+- [**35**Star][4y] [C] [choller/llcov](https://github.com/choller/llcov) LLVM-based, flexible, live coverage instrumentation for C/C++ code
+- [**35**Star][5y] [C] [charlesxsh/mdk3-master](https://github.com/charlesxsh/mdk3-master) Modifications to MDK3 to reboot Access Points
+- [**35**Star][2y] [JS] [cgvwzq/spectre](https://github.com/cgvwzq/spectre) My minimal PoC for spectre
+- [**35**Star][2m] [Py] [carlospolop/legion](https://github.com/carlospolop/legion) Automatic Enumeration Tool based in Open Source tools
+- [**35**Star][11m] [brianwrf/cve-2018-11788](https://github.com/brianwrf/cve-2018-11788) Apache Karaf XXE Vulnerability (CVE-2018-11788)
+- [**35**Star][1y] [Py] [bnbdr/ida-bpf-processor](https://github.com/bnbdr/ida-bpf-processor) BPF Processor for IDA Python
+- [**35**Star][4y] [C#] [bnagy/crabstone](https://github.com/bnagy/crabstone) crabstone is a Ruby binding to the capstone disassembly library by Nguyen Anh Quynh
+- [**35**Star][5m] [C] [bmx-routing/bmx7](https://github.com/bmx-routing/bmx7) BMX7 / SEMTOR Securely Entrusted Mesh Routing Protocol
+- [**35**Star][6m] [bkth/tale-of-chakra-bugs](https://github.com/bkth/tale-of-chakra-bugs)
+- [**35**Star][6m] [Py] [bkerler/dump_avb_signature](https://github.com/bkerler/dump_avb_signature) Dump Android Verified Boot Signature
+- [**35**Star][2y] [Py] [b4rd4k/vproxy](https://github.com/b4rd4k/vproxy) Forward HTTP/S Traffic To Proxy Instance
+- [**35**Star][9m] [Py] [att/docker-forensics](https://github.com/att/docker-forensics) Tools to assist in forensicating docker
+- [**35**Star][3y] [ashchan/bitcoin-ethereum-cryptography](https://github.com/ashchan/bitcoin-ethereum-cryptography) 比特币、以太坊加密技术
+- [**35**Star][3y] [arnaudsoullie/ics-default-passwords](https://github.com/arnaudsoullie/ics-default-passwords) List of default passwords for Industrial Control Systems
+- [**35**Star][5y] [OCaml] [argp/bap](https://github.com/argp/bap) Binary Analysis Platform -- I will try to keep this updated with patches, fixes, etc.
+- [**35**Star][11m] [CSS] [appsecco/practical-recon-levelup0x02](https://github.com/appsecco/practical-recon-levelup0x02) This repository contains all the material from the talk "Practical recon techniques for bug hunters & pentesters" given at Bugcrowd LevelUp 0x02 virtual conference
+- [**35**Star][10m] [Go] [amir20/sha-miner](https://github.com/amir20/sha-miner) Simple miner for understanding how cryptocurrency mining works
+- [**35**Star][9m] [Makefile] [alectrocute/unboundbl](https://github.com/alectrocute/unboundbl)
+- [**35**Star][11y] [C] [alanquatermain/appencryptor](https://github.com/alanquatermain/appencryptor) A command-line tool to apply or remove Apple Binary Protection from an application.
+- [**35**Star][2y] [C#] [akalankauk/keep-it-secure-file-encryption](https://github.com/akalankauk/keep-it-secure-file-encryption) Keep It Secure Private Data Encryption & Decryption Tool
+- [**35**Star][2y] [Shell] [ac-mercury/mercuryiss-kali](https://github.com/ac-mercury/mercuryiss-kali) 部署KaliLinux Docker容器的Bash脚本
+- [**35**Star][2y] [C++] [3gstudent/createremotethread](https://github.com/3gstudent/createremotethread) From 32-bit process to 64-bit process
+- [**35**Star][2y] [Shell] [0x00pf/stan](https://github.com/0x00pf/stan) STAN is a sTAtic aNalyser
+- [**35**Star][3y] [Py] [0pc0defr/wordpress-sploit-framework](https://github.com/0pc0defr/wordpress-sploit-framework) Wordpress Sploit Framework was developed for the purpose to provide a framework which creates proof of concept when discovering vulnerability in Wordpress core and Wordpress plugin.
+- [**35**Star][4y] [Perl] [0ang3el/hibernate-injection-study](https://github.com/0ang3el/hibernate-injection-study) Study about HQL injection exploitation.
+- [**35**Star][11m] [Py] [04x/wpscan](https://github.com/04x/wpscan) 渗透+信息收集
+- [**34**Star][15d] [C] [atrosinenko/kbdysch](https://github.com/atrosinenko/kbdysch) A collection of user-space Linux kernel specific guided fuzzers based on LKL
+- [**34**Star][5m] [Py] [k0fin/eternalrelayx](https://github.com/k0fin/eternalrelayx) eternalrelayx
+- [**34**Star][3y] [screetsec/dracos](https://github.com/screetsec/dracos) Dracos Linux (
+- [**34**Star][2y] [Py] [misterbianco/wifijammer-ng](https://github.com/misterbianco/wifijammer-ng) Dan McInerney's Wifijammer - rewritten
+- [**34**Star][2m] [Py] [angr/fidget](https://github.com/angr/fidget) A tool to add simple inline patches to a binary to rearrange its stack frames, and other things!
+- [**34**Star][3m] [C++] [x64dbg/titanengine](https://github.com/x64dbg/titanengine)
+- [**34**Star][10m] [Kotlin] [cbeuw/goquiet-android](https://github.com/cbeuw/goquiet-android) GoQuiet plugin on android
+- [**34**Star][2y] [Go] [csploit/daemon](https://github.com/csploit/daemon) the core of the cSploit project
+- [**34**Star][3m] [Go] [cnlh/httpmonitor](https://github.com/cnlh/httpmonitor) http、api接口监控系统,可监控各种http请求,支持header、data设置,支持腾讯云短信和邮件警告通知。
+- [**34**Star][1y] [JS] [threatexpress/portplow](https://github.com/threatexpress/portplow) PortPlow is a distributed port and system scanning & enumeration service. It enables the quick and automated enumeration of ports and services from multiple systems managed by a central console.
+- [**34**Star][3y] [Py] [airbus-seclab/elfesteem](https://github.com/airbus-seclab/elfesteem) ELF/PE/Mach-O parsing library
+- [**34**Star][10m] [Go] [v2ray/geoip](https://github.com/v2ray/geoip)
+- [**34**Star][5y] [Py] [danmcinerney/best-channel](https://github.com/danmcinerney/best-channel) Find wifi channel with least interference
+- [**34**Star][1y] [Shell] [sensepost/shinai-fi](https://github.com/sensepost/shinai-fi) Docker images for learning wifi hacking
+- [**34**Star][5m] [Py] [rabbitmask/whoisweblogic](https://github.com/rabbitmask/whoisweblogic) 提供Weblogic批量模糊指纹识别
+- [**34**Star][21d] [Jupyter Notebook] [vrthra/f1](https://github.com/vrthra/f1)
+- [**34**Star][6m] [C++] [parkovski/wsudo](https://github.com/parkovski/wsudo) Proof of concept sudo for Windows
+- [**34**Star][2m] [CSS] [koala633/hostbase](https://github.com/koala633/hostbase) A Ruby GUI based on advanced rogue AP attack
+- [**34**Star][10m] [Java] [alexatiks/spring-security-jwt-csrf](https://github.com/alexatiks/spring-security-jwt-csrf) A demonstration of stateless JWT authentication with Spring Security, Spring Boot and Vue js
+- [**34**Star][7m] [gfwlist/tsilwfg](https://github.com/gfwlist/tsilwfg) Reverse list for netizens overseas
+- [**34**Star][7m] [Ruby] [k8gege/zimbraexploit](https://github.com/k8gege/zimbraexploit) Zimbra邮件系统漏洞 XXE/RCE/SSRF/Upload GetShell Exploit 1. (CVE-2019-9621 Zimbra<8.8.11 XXE GetShell Exploit)
+- [**34**Star][6d] [Py] [technowlogy-pushpender/technowhorse](https://github.com/technowlogy-pushpender/technowhorse) TechNowHorse is a RAT (Remote Administrator Trojan) Generator for Windows/Linux systems written in Python 3.
+- [**34**Star][2y] [C] [nttiton/malware](https://github.com/NTTITON/Malware)
+- [**34**Star][2m] [PHP] [safflower/solveme](https://github.com/safflower/solveme) SolveMe - Jeopardy CTF Platform (for wargame)
+- [**34**Star][3y] [Ruby] [cloudfoundry-attic/dea_ng](https://github.com/cloudfoundry-attic/dea_ng) Droplet Execution Agent for Cloud Foundry v2
+- [**34**Star][28d] [HTML] [cveproject/cveproject.github.io](https://github.com/CVEProject/cveproject.github.io) CVE Project Documentation
+- [**34**Star][7d] [C] [zfigura/semblance](https://github.com/zfigura/semblance) Disassembler for Windows executables. Supports 16-bit NE (New Executable), MZ (DOS), and PE (Portable Executable, i.e. Win32) files.
+- [**34**Star][3y] [Py] [ywjt/dshield](https://github.com/ywjt/dshield)
+- [**34**Star][2y] [Py] [x0rloser/ps4_wifi_bt](https://github.com/x0rloser/ps4_wifi_bt) PS4 wifi/bluetooth firmware ~~reversing~~ h4x
+- [**34**Star][21d] [PS] [wortell/azsentinel](https://github.com/wortell/azsentinel) PowerShell module for Azure Sentinel
+- [**34**Star][5y] [Java] [wooyundota/intentmonitor](https://github.com/wooyundota/intentmonitor) Tool based xposed can monitor the android intents
+- [**34**Star][6m] [Pascal] [winkelsdorf/delphiencryptioncompendium](https://github.com/winkelsdorf/delphiencryptioncompendium) Automatically exported from code.google.com/p/delphidec
+- [**34**Star][1y] [vu-aml/adlib](https://github.com/vu-aml/adlib) Game-Theoretic Adversarial Machine Learning Library
+- [**34**Star][3m] [Ruby] [veeral-patel/incidents](https://github.com/veeral-patel/incidents) Collaborative, web-based case management for incident response
+- [**34**Star][4y] [unicornsasfuel/sqlite_sqli_cheat_sheet](https://github.com/unicornsasfuel/sqlite_sqli_cheat_sheet) A cheat sheet for attacking SQLite via SQLi
+- [**34**Star][5y] [JS] [tweekfawkes/white_lightning](https://github.com/tweekfawkes/white_lightning) Platform for Browser Exploitation
+- [**34**Star][2m] [HCL] [traveloka/terraform-aws-waf-owasp-top-10-rules](https://github.com/traveloka/terraform-aws-waf-owasp-top-10-rules) A Terraform module to create AWF WAF Rules for OWASP Top 10 security risks protection.
+- [**34**Star][7y] [Py] [tkisason/gcrack](https://github.com/tkisason/gcrack) password cracking with the help of google's search
+- [**34**Star][3y] [Py] [thomaspatzke/burp-sessionauthtool](https://github.com/thomaspatzke/burp-sessionauthtool) Burp plugin which supports in finding privilege escalation vulnerabilities
+- [**34**Star][1y] [C++] [tarlogicsecurity/eoploaddriver](https://github.com/tarlogicsecurity/eoploaddriver) Proof of concept for abusing SeLoadDriverPrivilege (Privilege Escalation in Windows)
+- [**34**Star][2y] [C++] [swwwolf/obderef](https://github.com/swwwolf/obderef) Decrement Windows Kernel for fun and profit
+- [**34**Star][2y] [Shell] [swisskyrepo/chocolatine](https://github.com/swisskyrepo/chocolatine) When you forget to lock your computer .. you will have to pay some "French Croissants"
+- [**34**Star][6m] [PS] [swisscom/powergrr](https://github.com/swisscom/powergrr) PowerGRR is an API client library in PowerShell working on Windows, Linux and macOS for GRR automation and scripting.
+- [**34**Star][6m] [sourcefrenchy/certexfil.client](https://github.com/sourcefrenchy/certexfil.client) MOVED TO
+- [**34**Star][2y] [JS] [sola-da/conflictjs](https://github.com/sola-da/conflictjs) Finding and Understanding Conflicts Between JavaScript Libraries
+- [**34**Star][3y] [JS] [snyk/serverless-snyk](https://github.com/snyk/serverless-snyk) Serverless plugin for securing your dependencies with Snyk
+- [**34**Star][26d] [smithersec/bug-bounty-resources](https://github.com/smithersec/bug-bounty-resources) Resources I consider useful for security research of web applications
+- [**34**Star][2y] [C] [smh17/bitcoin-hacking-tools](https://github.com/smh17/bitcoin-hacking-tools) The source code of main tools used in Bitcoin "non-malware-based" attacks.
+- [**34**Star][2y] [Java] [shengqi158/s2-055-poc](https://github.com/shengqi158/s2-055-poc) S2-055的环境,基于rest-show-case改造
+- [**34**Star][5y] [Py] [shendo/netsink](https://github.com/shendo/netsink) Network sinkhole for isolated malware analysis
+- [**34**Star][3m] [C#] [sf197/telegra_csharp_c2](https://github.com/sf197/telegra_csharp_c2) Command and Control for C# Writing
+- [**34**Star][4y] [C++] [secmob/cve-2016-0846](https://github.com/secmob/cve-2016-0846) arbitrary memory read/write by IMemroy OOB
+- [**34**Star][2y] [secgroundzero/cs-aggressor-scripts](https://github.com/secgroundzero/cs-aggressor-scripts) Aggressor Scripts for Cobalt Strike
+- [**34**Star][6m] [C++] [seancline/pyext](https://github.com/seancline/pyext) WinDbg Extensions for Python
+- [**34**Star][1y] [Py] [sasdf/firstblood](https://github.com/sasdf/firstblood) Write exploit faster with up-to-date python 3
+- [**34**Star][5y] [Py] [sangaline/svganimator](https://github.com/sangaline/svganimator) The application svganinmator attempts to build a single animated svg out of a sequence of distinct static svg files.
+- [**34**Star][2m] [Shell] [sandrokeil/yubikey-full-disk-encryption-secure-boot-uefi](https://github.com/sandrokeil/yubikey-full-disk-encryption-secure-boot-uefi) Tutorial to create full disk encryption with YubiKey, encrypted boot partition and secure boot with UEFI
+- [**34**Star][1y] [Py] [rvn0xsy/fastwhatwebsearch](https://github.com/rvn0xsy/fastwhatwebsearch) FastWhatWebSearch是一个能够支持搜索whatweb工具结果的一个微型平台。
+- [**34**Star][1y] [C++] [rokups/reflectiveldr](https://github.com/rokups/reflectiveldr) Position-idependent Windows DLL loader based on ReflectiveDLL project.
+- [**34**Star][4m] [C] [reversingid/crackmes-repository](https://github.com/reversingid/crackmes-repository) Initiative to collect and preserve crackmes for learning and practice in reverse engineering
+- [**34**Star][7y] [reverselab/kernel-pwn-challenge](https://github.com/reverselab/kernel-pwn-challenge) Source code for building an exploitable linux kernel challenge iso.
+- [**34**Star][4y] [C] [reinhardvz/wsk](https://github.com/reinhardvz/wsk) Automatically exported from code.google.com/p/wskudp
+- [**34**Star][6m] [quarkslab/conf-presentations](https://github.com/quarkslab/conf-presentations)
+- [**34**Star][3y] [PHP] [qilinbaoleiji/baoleiji](https://github.com/qilinbaoleiji/baoleiji) 麒麟堡垒机由资深软件开发人员发起,开发开始于2009年9月,开发主要成员共计有5个人,开发地点位于北京。系统经过现场严格的压力、性能、功能测试,使用稳定,功能齐全,系统透明登录功能可以让运维人员完全感觉不到堡垒机存在,系统模块齐全。 主要包含:堡垒机运维模块(支持RDP/SSH/SFTP/FTP/TELNET)、动态口令模块、网管监控模块、日志分析模块、3A模块等,堡垒机整体完全可以满足中型企业的整体运维及安全需要。
+- [**34**Star][1y] [Py] [pure-l0g1c/spectre](https://github.com/pure-l0g1c/spectre) A simple phishing tool that can phish almost any website
+- [**34**Star][1y] [PS] [ptylenda/kubernetes-for-windows](https://github.com/ptylenda/kubernetes-for-windows) Ansible playbooks and Packer templates for creating hybrid Windows/Linux Kubernetes 1.10+ cluster with experimental Flannel pod network (host-gw backend)
+- [**34**Star][7y] [Ruby] [postmodern/rprogram](https://github.com/postmodern/rprogram) A library for creating wrappers around command-line programs.
+- [**34**Star][3y] [Py] [politoinc/yara-scanner](https://github.com/politoinc/yara-scanner) Yara intergrated into BurpSuite
+- [**34**Star][3y] [C] [plutooo/wiiu](https://github.com/plutooo/wiiu) Reversers notes on the Wii U, collected January-October 2015
+- [**34**Star][2m] [Py] [peterhinch/micropython-fourier](https://github.com/peterhinch/micropython-fourier) Fast Fourier transform in MicroPython's inline ARM assembler.
+- [**34**Star][3m] [C] [peterbjornx/meloader](https://github.com/peterbjornx/meloader) Linux i386 tool to load and execute ME modules.
+- [**34**Star][2y] [Py] [penafieljlm/burp-tracer](https://github.com/penafieljlm/burp-tracer) burp-tracer:BurpSuite 扩展。获取当前的站点地图,提取每个请求参数,并搜索存在请求参数值的回复(responseswhere request parameter value is present)
+- [**34**Star][2y] [Py] [peewpw/domainfrontdiscover](https://github.com/peewpw/domainfrontdiscover) Scripts and results for finding domain frontable CloudFront domains
+- [**34**Star][2m] [C] [pearinc/fogconnect](https://github.com/pearinc/fogconnect) 提供企业级网络设备之间数据的快速,安全,可靠的P2P传输协议
+- [**34**Star][4y] [C] [panyu6325/cve-2015-1805](https://github.com/panyu6325/cve-2015-1805)
+- [**34**Star][3m] [C#] [ossindex/audit.net](https://github.com/ossindex/audit.net) Identify known vulnerabilities in .net nuget dependencies
+- [**34**Star][5y] [osiris123/cdriver_loader](https://github.com/osiris123/cdriver_loader) Kernel mode driver loader, injecting into the windows kernel, Rootkit. Driver injections.
+- [**34**Star][1y] [Py] [oros42/dns_sniffer](https://github.com/oros42/dns_sniffer) A python DNS sniffer
+- [**34**Star][14d] [C++] [olegzhr/altprobe](https://github.com/olegzhr/altprobe) Alertflex IDS collector (Altprobe)
+- [**34**Star][4m] [C#] [nyan-x-cat/disable-windows-defender](https://github.com/nyan-x-cat/disable-windows-defender) Changing values to bypass windows defender C#
+- [**34**Star][7y] [JS] [nv/setinterval-sniffer](https://github.com/nv/setinterval-sniffer) Keep tabs on your uncleared intervals. Hunt down lags and memory leaks.
+- [**34**Star][11m] [CSS] [nowsecure/r2frida-book](https://github.com/nowsecure/r2frida-book) The radare2 + frida book for Mobile Application assessment
+- [**34**Star][11m] [C++] [niemand-sec/directx11hook](https://github.com/niemand-sec/directx11hook)
+- [**34**Star][1y] [C++] [nickcano/reloadlibrary](https://github.com/nickcano/reloadlibrary) A quick-and-dirty anti-hook library proof of concept.
+- [**34**Star][1y] [Jupyter Notebook] [nfrumkin/forecast-prometheus](https://github.com/nfrumkin/forecast-prometheus) A collection of analysis, and machine learning techniques for time series forecasting w/ Prometheus metrics
+- [**34**Star][2y] [JS] [newfuture/pac](https://github.com/newfuture/pac) Proxy Auto Config generator,自动代理配置生成PAC,可配合ss小飞机使用
+- [**34**Star][2y] [C] [mtjailed/purplesmoke](https://github.com/mtjailed/purplesmoke) A work-in-progress repository for breaking the security of iOS 11.2 up to 11.2.6
+- [**34**Star][3y] [CSS] [monosource/radare2-explorations](https://github.com/monosource/radare2-explorations) A book on learning radare2.
+- [**34**Star][21d] [Dockerfile] [misp/docker-misp](https://github.com/misp/docker-misp) Automated Docker MISP container - Malware Information Sharing Platform and Threat Sharing
+- [**34**Star][3y] [Py] [mipu94/broids_unicorn](https://github.com/mipu94/broids_unicorn) simple plugin to detect shellcode on Bro IDS with Unicorn
+- [**34**Star][1y] [Java] [minervalabsresearch/coffeeshot](https://github.com/minervalabsresearch/coffeeshot) CoffeeShot: Avoid Detection with Memory Injection
+- [**34**Star][2y] [Py] [mhelwig/privdns](https://github.com/mhelwig/privdns) Check dns servers for reverse resolving private ips
+- [**34**Star][8m] [C] [mboehme/pythia](https://github.com/mboehme/pythia) Pythia (extends AFL with Predictions)
+- [**34**Star][2y] [Go] [mattiasgeniar/http-flooder](https://github.com/mattiasgeniar/http-flooder) An experiment using goroutines and channels to create a simple HTTP flooder. Mixes GET, POST, PUT, PATCH, ... to one baseline URL.
+- [**34**Star][1y] [C] [mainframed/logica](https://github.com/mainframed/logica) Files compiled from the Logica breach investigation materials
+- [**34**Star][4y] [Py] [madsc13ntist/idapython](https://github.com/madsc13ntist/idapython) My collection of IDAPython scripts.(No Documentation)
+- [**34**Star][4y] [Ruby] [lookingglass/opentpx](https://github.com/lookingglass/opentpx) Open Threat Partner eXchange
+- [**34**Star][2y] [Ruby] [lolwaleet/reverseip](https://github.com/lolwaleet/reverseip) Ruby based reverse IP-lookup tool.
+- [**34**Star][1y] [Py] [leonardonve/edm](https://github.com/leonardonve/edm) Encima De la Mosca HTTP proxy POC for infecting files on-the-fly and SSLstrip2
+- [**34**Star][1y] [Go] [leoloobeek/keyserver](https://github.com/leoloobeek/keyserver) Easily serve HTTP and DNS keys for proper payload protection
+- [**34**Star][2y] [Py] [ldionmarcil/sudo-backdoor](https://github.com/ldionmarcil/sudo-backdoor) Wraps sudo; transparently steals user's credentials and exfiltrate over DNS. For those annoying times when you get a shell/file write on a sudoers account and need to leverage their credentials.
+- [**34**Star][8m] [Py] [lazenca/exploit-tech](https://github.com/lazenca/exploit-tech) Example files to experience basic exploit techniques.
+- [**34**Star][1y] [kudelskisecurity/cryptochallenge18](https://github.com/kudelskisecurity/cryptochallenge18) Kudelski Security's 2018 pre-Black Hat crypto challenge
+- [**34**Star][4m] [Rust] [kpcyrd/boxxy-rs](https://github.com/kpcyrd/boxxy-rs) Linkable sandbox explorer
+- [**34**Star][1y] [Py] [kasperskylab/actionscript3](https://github.com/kasperskylab/actionscript3) Tools for static and dynamic analysis of ActionScript3 SWF files.
+- [**34**Star][1y] [Shell] [jay-johnson/owasp-jenkins](https://github.com/jay-johnson/owasp-jenkins) Want to test your applications using the latest OWASP security toolchains and the NIST National Vulnerability Database using Jenkins, Ansible and docker?
+- [**34**Star][5m] [Py] [jasonhinds13/hackable](https://github.com/jasonhinds13/hackable) A python flask app that is purposefully vulnerable to SQL injection and XSS attacks. To be used for demonstrating attacks
+- [**34**Star][3y] [C] [jantonakos/threathuntingexcursions](https://github.com/jantonakos/threathuntingexcursions) Code, commands, and chatter about Threat Hunting.
+- [**34**Star][1y] [C++] [ipbc-dev/bittube-miner](https://github.com/ipbc-dev/bittube-miner) BitTube Miner
+- [**34**Star][4y] [Py] [interference-security/multiport](https://github.com/interference-security/multiport)
+- [**34**Star][8m] [C++] [indeedminers/xmr-aeon-stak](https://github.com/indeedminers/xmr-aeon-stak) Unified All-in-one Monero, Sumokoin, Aeon and other Cryptonote miner
+- [**34**Star][4y] [Java] [ilmila/springcss-cve-2014-3625](https://github.com/ilmila/springcss-cve-2014-3625) spring mvc cve-2014-3625
+- [**34**Star][5m] [Java] [idl3r/ghidravmlinuxloader](https://github.com/idl3r/ghidravmlinuxloader)
+- [**34**Star][2y] [JS] [honeypotio/techmap](https://github.com/honeypotio/techmap) Honeypot's Tech Map
+- [**34**Star][1y] [Shell] [hestat/blazescan](https://github.com/hestat/blazescan) Blazescan is a linux webserver malware scanning and incident response tool, with built in support for cPanel servers, but will run on any linux based server.
+- [**34**Star][2y] [hardenedlinux/armv7-nexus7-grsec](https://github.com/hardenedlinux/armv7-nexus7-grsec) Hardened PoC: PaX for Android
+- [**34**Star][7y] [Py] [hackedteam/test-av](https://github.com/hackedteam/test-av) Automated antivirus test environment
+- [**34**Star][5y] [gwerz/reverse-engineearing](https://github.com/gwerz/reverse-engineearing) 软件逆向
+- [**34**Star][6y] [JS] [gtanczyk/dupocracy](https://github.com/gtanczyk/dupocracy) Defcon clone
+- [**34**Star][2y] [Py] [google/amt-forensics](https://github.com/google/amt-forensics) Retrieve Intel AMT's Audit Log from a Linux machine without knowing the admin user's password.
+- [**34**Star][4y] [Py] [gioyik/getexploit](https://github.com/gioyik/getexploit)
+- [**34**Star][2y] [Py] [g2p/vido](https://github.com/g2p/vido) wrap commands in throwaway virtual machines — easy kernel debugging and regression testing
+- [**34**Star][3y] [friedappleteam/blackhat-asia-2017](https://github.com/friedappleteam/blackhat-asia-2017) BlackHat Asia 2017 talk
+- [**34**Star][11m] [Shell] [flowztul/keyexec](https://github.com/flowztul/keyexec) keyexec:Shell脚本,在使用 kexec 命令重启时,自动解锁 LUKS 设备
+- [**34**Star][7m] [C++] [ez8-co/unlocker](https://github.com/ez8-co/unlocker)
+- [**34**Star][2y] [Py] [eyyub/tensorflow-cyclegan](https://github.com/eyyub/tensorflow-cyclegan) Lightweight CycleGAN tensorflow implementation
+- [**34**Star][2y] [Py] [ernw/dizzy-legacy](https://github.com/ernw/dizzy-legacy) Network and USB protocol fuzzing toolkit.
+- [**34**Star][1y] [Py] [ernw/dizzy](https://github.com/ernw/dizzy) Network and USB protocol fuzzing toolkit.
+- [**34**Star][19d] [C#] [ericzimmerman/appcompatcacheparser](https://github.com/ericzimmerman/appcompatcacheparser) AppCompatCache (shimcache) parser. Supports Windows 7 (x86 and x64), Windows 8.x, and Windows 10
+- [**34**Star][3y] [Py] [emdel/ksfinder](https://github.com/emdel/ksfinder) ksfinder - Retrieve exported kernel symbols from physical memory dumps
+- [**34**Star][2y] [Py] [embedi/dir8xx_poc](https://github.com/embedi/dir8xx_poc) Proof-of-Concept exploits for D-Link DIR8xx routers
+- [**34**Star][6m] [Py] [efficios/barectf](https://github.com/efficios/barectf) Generator of ANSI C tracers which output CTF
+- [**34**Star][4y] [Shell] [easonoutlook/rasticrac](https://github.com/easonoutlook/rasticrac) Rasticrac v3.2.5 is for Crack IPA file, like Clutch, this is a copy from appaddict.org, just for study. Now support PlugIn and Watch App.
+- [**34**Star][10m] [Go] [dwin/gosecretboxpassword](https://github.com/dwin/gosecretboxpassword) A probably paranoid Golang utility library for securely hashing and encrypting passwords based on the Dropbox method. This implementation uses Blake2b, Scrypt and XSalsa20-Poly1305 (via NaCl SecretBox) to create secure password hashes that are also encrypted using a master passphrase.
+- [**34**Star][2m] [Py] [duo-labs/cloudtrail-partitioner](https://github.com/duo-labs/cloudtrail-partitioner)
+- [**34**Star][2y] [Visual Basic .NET] [doctorlai/vbscript_obfuscator](https://github.com/doctorlai/vbscript_obfuscator) The VBScript Obfuscator written in VBScript
+- [**34**Star][3y] [Ruby] [dmchell/metasploit-framework](https://github.com/dmchell/metasploit-framework) Metasploit Framework
+- [**34**Star][2m] [Py] [dmaasland/mcfridafee](https://github.com/dmaasland/mcfridafee)
+- [**34**Star][5y] [Py] [dionach/headersanalyzer](https://github.com/dionach/headersanalyzer) Burp extension that checks for interesting and security headers
+- [**34**Star][4y] [Java] [devadvance/rootinspector](https://github.com/devadvance/rootinspector) Advanced detection of rooting
+- [**34**Star][3y] [Py] [darx0r/reef](https://github.com/darx0r/reef) IDAPython plugin for finding Xrefs from a function
+- [**34**Star][2y] [CMake] [daniestevez/gr-outernet](https://github.com/daniestevez/gr-outernet) GNUradio OOT module for Outernet
+- [**34**Star][2y] [Py] [d3vilbug/brutal_ssh](https://github.com/d3vilbug/brutal_ssh) SSH Login brute force, scan for vulnerable version and 0 day exploit (under development)
+- [**34**Star][3y] [CSS] [cysca/cysca2015](https://github.com/cysca/cysca2015) Cyber Security Challenge Australia 2015 Files
+- [**34**Star][1y] [JS] [cymmetria/ciscoasa_honeypot](https://github.com/cymmetria/ciscoasa_honeypot) A low interaction honeypot for the Cisco ASA component capable of detecting CVE-2018-0101, a DoS and remote code execution vulnerability.
+- [**34**Star][4y] [Py] [curehsu/ez-wave](https://github.com/curehsu/ez-wave) Tools for Evaluating and Exploiting Z-Wave Networks using Software-Defined Radios.
+- [**34**Star][7m] [Py] [claudiugeorgiu/riskindroid](https://github.com/claudiugeorgiu/riskindroid) A tool for quantitative risk analysis of Android applications based on machine learning techniques
+- [**34**Star][7y] [C] [chokepoint/jynxkit](https://github.com/chokepoint/jynxkit) JynxKit is an LD_PRELOAD userland rootkit for Linux systems with reverse connection SSL backdoor
+- [**34**Star][2y] [C++] [chiehmin/sheepwall](https://github.com/chiehmin/sheepwall) Sniff plaintext account/password/cookie on router
+- [**34**Star][3y] [Py] [cheery/spirthon](https://github.com/cheery/spirthon) Python bytecode to SPIR-V -translation.
+- [**34**Star][4y] [Py] [cclgroupltd/ccl-bplist](https://github.com/cclgroupltd/ccl-bplist) Python Module for parsing Binary Property List and NSKeyedArchiver files
+- [**34**Star][2y] [C#] [breenmachine/hpwn](https://github.com/breenmachine/hpwn) HP printer security research code
+- [**34**Star][5y] [brad-anton/freeradius-wpe](https://github.com/brad-anton/freeradius-wpe)
+- [**34**Star][1y] [C] [bartavelle/rulesfinder](https://github.com/bartavelle/rulesfinder)
+- [**34**Star][5y] [C++] [avplayer/avcamera](https://github.com/avplayer/avcamera) 一款家用安全防盗监控软件,无需额外购买昂贵的CCD监控摄像头,只需普通电脑视频聊天用的CMOS摄像头即可。
+- [**34**Star][3m] [Java] [availlang/avail](https://github.com/availlang/avail) The Avail programming language. Includes the virtual machine, standard library, and standard examples.
+- [**34**Star][3y] [Py] [attackercan/burp-xss-sql-plugin](https://github.com/attackercan/burp-xss-sql-plugin)
+- [**34**Star][1y] [Dockerfile] [asuri-team/ctf-xinetd](https://github.com/asuri-team/ctf-xinetd) A docker image to hold pwn challenges in ctf war
+- [**34**Star][3m] [Py] [arbazkiraak/burpblh](https://github.com/arbazkiraak/burpblh) BurpBLH: 使用IScannerCheck发现被劫持的损坏链接. Burp插件
+- [**34**Star][5m] [Shell] [ank1036official/cloudcheck](https://github.com/ank1036official/cloudcheck) Checks using a test string if a Cloudflare DNS bypass is possible using CloudFail.
+- [**34**Star][2y] [Py] [anbai-inc/secrss](https://github.com/anbai-inc/secrss) RSS安全订阅 每日安全信息推送
+- [**34**Star][7m] [Py] [am0nt31r0/osint-search](https://github.com/am0nt31r0/osint-search) Useful for digital forensics investigations or initial black-box pentest footprinting.
+- [**34**Star][2y] [C] [alon7/bbt-multiminer](https://github.com/alon7/bbt-multiminer) Start different miners from the same script. Easy and simple to get started with mining. Originally by Bits Be Trippin'
+- [**34**Star][3d] [Py] [aliasrobotics/rvd](https://github.com/aliasrobotics/rvd) Robot Vulnerability Database. An archive of robot vulnerabilities and bugs.
+- [**34**Star][2y] [Py] [alexbers/exploit_farm](https://github.com/alexbers/exploit_farm) The utility for CTF hacker competition for team hacking and flag submitting
+- [**34**Star][11m] [Py] [alessiovierti/blindpie](https://github.com/alessiovierti/blindpie) Automatically exploit time-based blind SQL injection vulnerabilities.
+- [**34**Star][24d] [HTML] [adulau/misp-osint-collection](https://github.com/adulau/misp-osint-collection) Collection of best practices to add OSINT into MISP and/or MISP communities
+- [**34**Star][5y] [C++] [adamkramer/handle_monitor](https://github.com/adamkramer/handle_monitor) Identifying and Disrupting Crypto-Ransomware (and Destructive Malware) using handle heurustics
+- [**34**Star][3y] [PS] [3gstudent/ninjacopy](https://github.com/3gstudent/ninjacopy) Powershell to copy ntds.dit
+- [**34**Star][3y] [PHP] [233sec/laravel-src](https://github.com/233sec/laravel-src) 基于 LARAVEL 打造的安全应急响应中心平台
+- [**33**Star][1m] [Shell] [garywill/linux-router](https://github.com/garywill/linux-router) Set Linux as router in one command. Support Internet sharing, redsocks, Wifi hotspot, IPv6. Can also be used for routing VM/containers
+- [**33**Star][2d] [Go] [mzz2017/v2raya](https://github.com/mzz2017/v2raya) V2RayA是一个支持全局透明代理的V2Ray Linux GUI客户端。
+- [**33**Star][2y] [Go] [serverless-ss/slss](https://github.com/serverless-ss/slss)
+- [**33**Star][18d] [Assembly] [86hh/poc-viruses](https://github.com/86hh/poc-viruses) POC viruses I have created to demo some ideas
+- [**33**Star][2m] [C] [mak-/reverse-shell-access-kernel-module](https://github.com/mak-/reverse-shell-access-kernel-module) This is a kernel module invoked reverse shell proof of concept.
+- [**33**Star][2y] [C] [uwnetworkslab/cordova-plugin-tun2socks](https://github.com/uwnetworkslab/cordova-plugin-tun2socks) Cordova plugin to enable a system-wide VPN for Android devices.
+- [**33**Star][2m] [Py] [landgrey/toolsparty](https://github.com/landgrey/toolsparty) A collection of script tools for pentesting
+- [**33**Star][9d] [C++] [taviso/sharapi](https://github.com/taviso/sharapi) Simpsons: Hit & Run JavaScript API
+- [**33**Star][1y] [Shell] [jaredhaight/scripts](https://github.com/jaredhaight/scripts) A collection of scripts that I've written while pentesting.
+- [**33**Star][1y] [Py] [skelsec/socksohttp](https://github.com/skelsec/socksohttp) Socks5 server over Websockets
+- [**33**Star][2y] [HTML] [jipegit/twintelligence](https://github.com/jipegit/twintelligence) Twintelligence is a free Twitter OSINT tool
+- [**33**Star][5y] [C] [gdbinit/bruteforcesysent](https://github.com/gdbinit/bruteforcesysent) Small util to discover OS X sysent via bruteforce
+- [**33**Star][5d] [Py] [angr/angr-platforms](https://github.com/angr/angr-platforms) A collection of extensions to angr to handle new platforms
+- [**33**Star][1y] [CSS] [osirislab/csaw-ctf-2018-quals](https://github.com/osirislab/csaw-ctf-2018-quals) Repo for CSAW CTF 2018 Quals challenges
+- [**33**Star][4y] [C] [stealth/injectso](https://github.com/stealth/injectso)
+- [**33**Star][8m] [Py] [hacker0x01/hacker101coursework](https://github.com/hacker0x01/hacker101coursework) Deprecated coursework from first iteration of Hacker101
+- [**33**Star][1y] [seemoo-lab/wireshark-awdl](https://github.com/seemoo-lab/wireshark-awdl) Wireshark Dissector for Apple Wireless Direct Link (AWDL) and Apple's CoreCapture logging framework. Note: the AWDL dissector is part of Wireshark 3.0!
+- [**33**Star][6y] [JS] [michenriksen/hackpad](https://github.com/michenriksen/hackpad) A web application hacker's toolbox. Base64 encoding/decoding, URL encoding/decoding, MD5/SHA1/SHA256/HMAC hashing, code deobfuscation, formatting, highlighting and much more.
+- [**33**Star][20d] [C] [jovanbulck/0xbadc0de](https://github.com/jovanbulck/0xbadc0de) A Tale of Two Worlds: Assessing the Vulnerability of Enclave Shielding Runtimes
+- [**33**Star][20d] [Py] [rhelmot/nclib](https://github.com/rhelmot/nclib) Netcat as a python library
+- [**33**Star][1m] [C] [xerpi/vita-libbaremetal](https://github.com/xerpi/vita-libbaremetal) PSVita bare-metal payload library and sample
+- [**33**Star][7y] [Py] [ml31415/wpscrack](https://github.com/ml31415/wpscrack) Continuation of wpscrack originally written by Stefan Viehböck
+- [**33**Star][1m] [ObjC] [proteas/ios13-sandbox-profile-format](https://github.com/proteas/ios13-sandbox-profile-format) Binary Format of iOS 13 Sandbox Profile Collection
+- [**33**Star][1m] [C] [xerpi/vita-libbaremetal](https://github.com/xerpi/vita-libbaremetal) PSVita bare-metal payload library and sample
+- [**33**Star][2y] [Py] [newbee119/ip-location](https://github.com/NewBee119/IP-location) batch query IP location information,批量查询IP地理位置信息,解析pcap包中IP地址的地理信息
+- [**33**Star][4y] [Py] [fortynorthsecurity/hasher](https://github.com/FortyNorthSecurity/Hasher) Hasher is designed to be a tool that allows you to quickly hash plaintext strings, or compare hashed values with a plaintext locally. Not meant to crack passwords, but designed for local checks.
+- [**33**Star][1y] [C++] [teammolecule/toshiba-mep-idp](https://github.com/TeamMolecule/toshiba-mep-idp) IDA Pro module for Toshiba MeP processors
+- [**33**Star][2y] [C] [openpreserve/scape-xcorrsound](https://github.com/openpreserve/scape-xcorrsound) Suite of tools for automated quality assurance of audio migration processes.
+- [**33**Star][3m] [C++] [busyluo/netassistant](https://github.com/busyluo/NetAssistant) A UDP/TCP Assistant. 网络调试助手
+- [**33**Star][16d] [JS] [googleapis/cloud-profiler-nodejs](https://github.com/googleapis/cloud-profiler-nodejs) Node.js library for Stackdriver Profiler. Continuous CPU and heap profiling to improve performance and reduce costs.
+- [**33**Star][1y] [Py] [newbee119/check_ip](https://github.com/NewBee119/check_ip) check_IP is to judge whether a IP is malicious based on open threat intelligence,基于开源威胁情报AlienVault,排查IP地址及域名的恶意性
+- [**33**Star][2y] [Perl] [zhou0/shadowsocks-perl](https://github.com/zhou0/shadowsocks-perl) An asynchronous, non-blocking shadowsocks client and server written in Perl.
+- [**33**Star][1y] [xxwiredxx/nintendo-switch-joycon-hack](https://github.com/xxwiredxx/nintendo-switch-joycon-hack) Hardwiring a push button in a JoyCon to grant bootloader access
+- [**33**Star][5y] [Py] [xurubin/aurasium](https://github.com/xurubin/aurasium) Practical security policy enforcement for Android apps via bytecode rewriting and in-place reference monitor
+- [**33**Star][1m] [C] [xerpi/vita-libbaremetal](https://github.com/xerpi/vita-libbaremetal) PSVita bare-metal payload library and sample
+- [**33**Star][3y] [HTML] [wolfram77web/app-peid](https://github.com/wolfram77web/app-peid) PEiD detects most common packers, cryptors and compilers for PE files.
+- [**33**Star][2y] [C] [weaknetlabs/byteforce](https://github.com/weaknetlabs/byteforce) Offline Digital Forensics Tool for Binary Files
+- [**33**Star][1y] [C++] [wanttobeno/x64_aob_search](https://github.com/wanttobeno/x64_aob_search) 快速内存搜索算法,商用级别
+- [**33**Star][9m] [Swift] [vixentael/ios-datasec-basics](https://github.com/vixentael/ios-datasec-basics) iOS data security basics: key management, workshop for iOS Con UK
+- [**33**Star][1y] [Ruby] [versioneye/versioneye-security](https://github.com/versioneye/versioneye-security) Security Crawler for VersionEye
+- [**33**Star][3m] [C++] [vanhauser-thc/afl-dyninst](https://github.com/vanhauser-thc/afl-dyninst) American Fuzzy Lop + Dyninst == AFL Fuzzing blackbox binaries
+- [**33**Star][27d] [CSS] [trailofbits/nyc-infosec](https://github.com/trailofbits/nyc-infosec) Mapping the NYC Infosec Community
+- [**33**Star][2m] [Py] [tp7309/ttpassgen](https://github.com/tp7309/ttpassgen) flexiable and scriptable password dictionary generator which can support brute-force、combination、complex rule mode etc...
+- [**33**Star][3y] [tom4t0/cobalt-strike-persistence](https://github.com/tom4t0/cobalt-strike-persistence) cobalt strike 自启动脚本
+- [**33**Star][1y] [C#] [tlgyt/wibr](https://github.com/tlgyt/wibr) Wifi Bruteforce (WiBr) is a wifi cracking tool written in c#.
+- [**33**Star][7m] [C++] [tlgyt/absent-loader](https://github.com/tlgyt/absent-loader) Example Loader to be used as a learning resource for people interested in how commercially available malware is made.
+- [**33**Star][2y] [C++] [tienex/apfs](https://github.com/tienex/apfs) apfs: 挂载、转储和分析Apple APFS 卷和容器
+- [**33**Star][1y] [C] [thisissecurity/malware](https://github.com/thisissecurity/malware)
+- [**33**Star][3m] [Py] [teebytes/tnt-fuzzer](https://github.com/teebytes/tnt-fuzzer) OpenAPI 2.0 (Swagger) fuzzer written in python. Basically TnT for your API.
+- [**33**Star][1m] [Shell] [taylanbildik/linux_dersleri](https://github.com/taylanbildik/linux_dersleri) Kali Linux Üzerinden İşlenen Linux Komut Satırı Dersleri Dokümantasyon Kaynağı
+- [**33**Star][3y] [Shell] [superkojiman/snuff](https://github.com/superkojiman/snuff) Automate ARP poisoning, ssltrip, and ettercap.
+- [**33**Star][4y] [C] [soufianetahiri/vault-8-hive](https://github.com/soufianetahiri/vault-8-hive) Hive solves a critical problem for the malware operators at the CIA.
+- [**33**Star][2y] [C] [soufianetahiri/mirai-botnet](https://github.com/soufianetahiri/mirai-botnet) Mirai Botnet Client, Echo Loader and CNC source code (for the sake of knowledge)
+- [**33**Star][10m] [Shell] [smileart/omg](https://github.com/smileart/omg) One More Gear set to follow DRY principle and stop doing things again and again (just a nice name for my dotfiles)
+- [**33**Star][3y] [Py] [smeegesec/smeegescrape](https://github.com/smeegesec/smeegescrape) File/Web Text Scraper and Wordlist Generator
+- [**33**Star][5y] [PHP] [smaash/kunai](https://github.com/smaash/kunai) pwning & info gathering via user browser
+- [**33**Star][2y] [C++] [siberas/cve-2016-3309_reloaded](https://github.com/siberas/cve-2016-3309_reloaded) Exploits for the win32kfull!bFill vulnerability on Win10 x64 RS2 using Bitmap or Palette techniques
+- [**33**Star][3y] [PHP] [shieldfy/waf-detector](https://github.com/shieldfy/waf-detector) small script to detect web application firewall on any website
+- [**33**Star][9m] [C] [securesystemslab/periscope](https://github.com/securesystemslab/periscope)
+- [**33**Star][1y] [Go] [saturnsvoid/windows-keylogger](https://github.com/saturnsvoid/windows-keylogger)
+- [**33**Star][2m] [sapran/ukraine-infosec-conferences](https://github.com/sapran/ukraine-infosec-conferences) Анонси, програми та архів матеріалів українських конференцій з кібер-безпеки.
+- [**33**Star][3y] [Py] [sam-b/windows_syscalls_dumper](https://github.com/sam-b/windows_syscalls_dumper) A dirty IDAPython script to dump windows system call number/name pairs as JSON
+- [**33**Star][2y] [Py] [s0cket7/torstat](https://github.com/s0cket7/torstat)
+- [**33**Star][1y] [C#] [roshly/ayyhook-loader](https://github.com/roshly/ayyhook-loader) A Free Open Source Cheat Loader
+- [**33**Star][2y] [Py] [rootlabs/torstat](https://github.com/rootlabs/torstat)
+- [**33**Star][6m] [Shell] [robertohuertasm/apk-decompiler](https://github.com/robertohuertasm/apk-decompiler) Small Rust utility to decompile Android apks
+- [**33**Star][3y] [Java] [riramar/pubkey-pin-android](https://github.com/riramar/pubkey-pin-android) Just another example for Android Public Key Pinning (based on OWASP example)
+- [**33**Star][2y] [HTML] [rh0dev/shellcode2asmjs](https://github.com/rh0dev/shellcode2asmjs) Automatically generate ASM.JS JIT-Spray payloads
+- [**33**Star][20d] [C] [rems-project/sail-arm](https://github.com/rems-project/sail-arm) Sail version of ARM ISA definition, currently for ARMv8.5-A
+- [**33**Star][7m] [Ruby] [rapid7/metasploit_data_models](https://github.com/rapid7/metasploit_data_models) MSF database code, gemified
+- [**33**Star][7m] [Py] [r35tart/redisdirscan](https://github.com/r35tart/redisdirscan) 此脚本用于测试 Rdies 未授权访问,在没权限写ssh私钥和定时任务又不知道web绝对路径的情况下,进行WEB目录探测
+- [**33**Star][4y] [JS] [qazbnm456/ctf-course](https://github.com/qazbnm456/ctf-course)
+- [**33**Star][6m] [Verilog] [q3k/ctf](https://github.com/q3k/ctf) Stuff from CTF contests
+- [**33**Star][2y] [ptresearch/pentest-detections](https://github.com/ptresearch/pentest-detections) Repository for penetration testing tools
+- [**33**Star][2m] [Py] [pr0cf5/ctf-writeups](https://github.com/pr0cf5/ctf-writeups)
+- [**33**Star][6m] [Py] [portswigger/active-scan-plus-plus](https://github.com/portswigger/active-scan-plus-plus) ActiveScan++ Burp Suite Plugin
+- [**33**Star][4y] [Py] [peacand/burp-pytemplate](https://github.com/peacand/burp-pytemplate) Burp extension to quickly and easily develop Python complex exploits based on Burp proxy requests.
+- [**33**Star][2y] [Java] [panagiotisdrakatos/t0rlib4j](https://github.com/panagiotisdrakatos/t0rlib4j) T0rlib4j is a Java controller library for Tor
+- [**33**Star][4y] [Py] [pan0pt1c0n/python-sockstress](https://github.com/pan0pt1c0n/python-sockstress) SockStress DoS (Denial of Service) exploit written in Python |
+- [**33**Star][11m] [C] [p3n3troot0r/socketv2v](https://github.com/p3n3troot0r/socketv2v) Mainline Linux Kernel integration of IEEE 802.11p, IEEE 1609.{3,4}, and developmental userspace utility for using J2735 over WAVE
+- [**33**Star][2y] [Py] [osssanitizer/osspolice](https://github.com/osssanitizer/osspolice) Identifying Open-Source License Violation and 1-day Security Risk at Large Scale
+- [**33**Star][5y] [C++] [nyx0/alina](https://github.com/nyx0/alina) Alina Spark - Point of Sales Trojan
+- [**33**Star][7y] [C] [nwhusted/auditdandroid](https://github.com/nwhusted/auditdandroid) A Fork of Auditd geared specifically for running on the Android platform. Includes system applications, AOSP patches, and kernel patches to maximize the audit experience.
+- [**33**Star][5y] [Py] [novetta/delilah](https://github.com/novetta/delilah)
+- [**33**Star][2y] [mzet-/ctf-writeups](https://github.com/mzet-/ctf-writeups) My writeups of various CTFs & security challenges
+- [**33**Star][7y] [C] [mubix/fakenetbios](https://github.com/mubix/fakenetbios) See here:
+- [**33**Star][2y] [ObjC] [mtjailed/privateapimanager](https://github.com/mtjailed/privateapimanager) A project providing usefull classes for reverse engineering iOS Private APIs on-device
+- [**33**Star][2y] [C] [mtalbi/vm_escape](https://github.com/mtalbi/vm_escape) vm escape exploit
+- [**33**Star][7d] [Shell] [mozillasecurity/orion](https://github.com/mozillasecurity/orion) CI/CD pipeline for building and publishing multiple
+- [**33**Star][2m] [Py] [monolithworks/trueseeing](https://github.com/monolithworks/trueseeing) Non-decompiling Android vulnerability scanner (DC25 demo lab, CB17)
+- [**33**Star][5m] [Go] [moldabekov/whatsipp](https://github.com/moldabekov/whatsipp)
+- [**33**Star][4y] [Py] [moheshmohan/pyssltest](https://github.com/moheshmohan/pyssltest) A python multithreaded script to make use of Qualys ssllabs api to test SSL flaws
+- [**33**Star][4y] [C] [mmyydd/relative-pattern](https://github.com/mmyydd/relative-pattern) Recover control flow graph from obfuscated codes
+- [**33**Star][2m] [C] [milter-manager/milter-manager](https://github.com/milter-manager/milter-manager) milter manager is a free software to protect you from spam mails and virus mails effectively with milter.
+- [**33**Star][2y] [C#] [mili-tan/mv2rayconfig](https://github.com/mili-tan/mv2rayconfig)
+- [**33**Star][4m] [C#] [mgeeky/stracciatella](https://github.com/mgeeky/stracciatella) OpSec-safe Powershell runspace from within C# (aka SharpPick) with AMSI and Script Block Logging disabled at startup
+- [**33**Star][15d] [Py] [mfthomps/resim](https://github.com/mfthomps/resim) Reverse engineering software using a full system simulator
+- [**33**Star][2y] [C++] [menooker/fishhook](https://github.com/menooker/fishhook) An inline hook platform for Windows x86/x64
+- [**33**Star][3m] [JS] [medicean/superterm](https://github.com/medicean/superterm) 利用 webshell 创建交互式终端(Create an interactive terminal with webshell.)
+- [**33**Star][9m] [Py] [mattbierner/urban-dictionary-word-list](https://github.com/mattbierner/urban-dictionary-word-list) Script and sample dataset of all urban dictionary entry names (around 1.4 million total)
+- [**33**Star][4y] [Py] [mansosec/microsoft-malware-challenge](https://github.com/mansosec/microsoft-malware-challenge)
+- [**33**Star][5m] [Jupyter Notebook] [malware-revealer/malware-revealer](https://github.com/malware-revealer/malware-revealer) Spot malwares using Machine Learning techniques
+- [**33**Star][7m] [C] [maldiohead/cve-2019-8540](https://github.com/maldiohead/cve-2019-8540) Kernel Stack info leak at exportObjectToClient function
+- [**33**Star][5y] [Ruby] [madirish/kojoney2](https://github.com/madirish/kojoney2) Kojoney2 is a low interaction SSH honeypot written in Python. Based on Kojoney by Jose Antonio Coret
+- [**33**Star][6d] [JS] [m1nl/pompa](https://github.com/m1nl/pompa) Fully-featured spear-phishing toolkit - web front-end
+- [**33**Star][7y] [Py] [luca-m/lsb-toolkit](https://github.com/luca-m/lsb-toolkit) This is a small and simple toolkit that might be useful during steganalysis, it is currently composed by several general purpose command line tools.
+- [**33**Star][2y] [C] [long123king/tokenext](https://github.com/long123king/tokenext) A windbg extension, extracting token related contents
+- [**33**Star][3y] [C++] [kingsunc/minidump](https://github.com/kingsunc/minidump) windows软件崩溃解决方案
+- [**33**Star][3y] [Ruby] [khr0x40sh/metasploit-modules](https://github.com/khr0x40sh/metasploit-modules)
+- [**33**Star][16d] [Py] [kevcui/mitm-scripts](https://github.com/kevcui/mitm-scripts)
+- [**33**Star][2y] [PHP] [karek314/ddos-deflate-nginx-cloudflare](https://github.com/karek314/ddos-deflate-nginx-cloudflare) This is ddos-deflate version made to mitigate Layer 7 dos/ddos attacks - made to work with nginx and optionally cloudflare
+- [**33**Star][2m] [Py] [kaorz/exploits_challenges](https://github.com/kaorz/exploits_challenges) Challenges and vulnerabilities exploitation.
+- [**33**Star][2y] [Py] [kandru/ts3proxy](https://github.com/kandru/ts3proxy) Teamspeak 3 Server Proxy
+- [**33**Star][5y] [Py] [jonmetz/androfuzz](https://github.com/jonmetz/androfuzz) A fuzzing utility for Android that focuses on reporting and delivery portions of the fuzzing process
+- [**33**Star][6y] [JS] [joeferner/node-gitgui](https://github.com/joeferner/node-gitgui) Git GUI written in node.js
+- [**33**Star][2y] [Py] [jipegit/fect](https://github.com/jipegit/fect) Fast Evidence Collector Toolkit is an incident response toolkit to collect evidences on a suspicious windows computer
+- [**33**Star][3y] [jianqiangzhao/mosec2016](https://github.com/jianqiangzhao/mosec2016)
+- [**33**Star][2y] [Elixir] [jclem/ot_ex](https://github.com/jclem/ot_ex) OT algorithms for Elixir
+- [**33**Star][3m] [Py] [jamesacampbell/python-examples](https://github.com/jamesacampbell/python-examples) Examples for some key libraries in Python that I use all the time. A way for me to remember and hopefully get others started.
+- [**33**Star][12m] [ObjC] [jakeajames/reverse-engineering](https://github.com/jakeajames/reverse-engineering) nothing important
+- [**33**Star][2m] [JS] [iteratec/juicy-ctf](https://github.com/iteratec/juicy-ctf) Run Capture the Flags and Security Trainings with OWASP Juice Shop
+- [**33**Star][3y] [ObjC] [integrity-sa/introspy-ios](https://github.com/integrity-sa/introspy-ios) Security profiling for blackbox iOS
+- [**33**Star][4m] [JS] [impakho/ciscn2019_final_web1](https://github.com/impakho/ciscn2019_final_web1) 国赛2019决赛Web1 - 滑稽云音乐
+- [**33**Star][1y] [Dockerfile] [immunit/cve-2018-11759](https://github.com/immunit/cve-2018-11759) Proof of concept showing how to exploit the CVE-2018-11759
+- [**33**Star][2y] [Py] [illusivenetworks-labs/webtrap](https://github.com/illusivenetworks-labs/webtrap) This project is designed to create deceptive webpages to deceive and redirect attackers away from real websites.
+- [**33**Star][2y] [C] [realbearcat/cve-2017-16995](https://github.com/RealBearcat/CVE-2017-16995) Linux Kernel Version 4.14 - 4.4 (Ubuntu && Debian)
+- [**33**Star][2y] [Java] [htbridge/pivaa](https://github.com/htbridge/pivaa) Created by High-Tech Bridge, the Purposefully Insecure and Vulnerable Android Application (PIVAA) replaces outdated DIVA for benchmark of mobile vulnerability scanners.
+- [**33**Star][5y] [Py] [heikoheiko/pyethapp](https://github.com/heikoheiko/pyethapp)
+- [**33**Star][2y] [Py] [guedou/r2scapy](https://github.com/guedou/r2scapy) a radare2 plugin that decodes packets with Scapy
+- [**33**Star][3y] [PHP] [gregzem/aibolit](https://github.com/gregzem/aibolit) Free malware and virus scanner for websites and ISP
+- [**33**Star][1y] [Java] [graxcode/zelixkiller](https://github.com/graxcode/zelixkiller) Deobfuscate ZKM up to version 11
+- [**33**Star][2y] [Py] [ganapati/firmflaws](https://github.com/ganapati/firmflaws) Firmware analysis website + API
+- [**33**Star][1y] [PS] [g4lb1t/invoke-noshell](https://github.com/g4lb1t/invoke-noshell) All the Power with no Shell
+- [**33**Star][3y] [Py] [g4hsean/binauthor](https://github.com/g4hsean/binauthor) an IDA pro plugin developped through research at concordia in the area of binary authorship identification
+- [**33**Star][2y] [JS] [francodacosta/phmagick](https://github.com/francodacosta/phmagick) image manipulation with php and imagemagick
+- [**33**Star][1y] [Py] [fnk0c/organon](https://github.com/fnk0c/organon) This program focuses on automating the download, installation and compilation of pentest tools from source
+- [**33**Star][6m] [flyfishsec/rsgen](https://github.com/flyfishsec/rsgen) An Universal Reverse Shell Command Genrator.
+- [**33**Star][3y] [Py] [fkie-cad/iva](https://github.com/fkie-cad/iva) IVA is a system to scan for known vulnerabilities in software products installed inside an organization. IVA uses CPE identifiers to search for CVEs related to a software product.
+- [**33**Star][8y] [Shell] [firebitsbr/hardeningone](https://github.com/firebitsbr/hardeningone) Scripts-Scanner de hardening de SO (Linux, OpenBSD, FreeBSD, apache, PHP e outros)
+- [**33**Star][9y] [Py] [evilsocket/altair](https://github.com/evilsocket/altair) A Modular Web Vulnerability Scanner
+- [**33**Star][12m] [Py] [eset/volatility-browserhooks](https://github.com/eset/volatility-browserhooks) Volatility Framework plugin to detect various types of hooks as performed by banking Trojans
+- [**33**Star][13d] [F#] [enkomio/misc](https://github.com/enkomio/misc) A repository with simple projects created for testing/learning purpose
+- [**33**Star][3y] [Go] [egebalci/the-eye](https://github.com/egebalci/the-eye) Simple security surveillance script for linux distributions.
+- [**33**Star][1m] [C++] [dspinellis/cqmetrics](https://github.com/dspinellis/cqmetrics) C Quality Metrics
+- [**33**Star][1y] [Java] [dnet/burp-oauth](https://github.com/dnet/burp-oauth) OAuth plugin for Burp Suite Extender
+- [**33**Star][3y] [Shell] [dlshad/openvpn-shapeshifter](https://github.com/dlshad/openvpn-shapeshifter) This script will automatically guide you to install and configure your OpenVPN server with Shapeshifter Dispatcher (obfuscation) which will allow you to bypass the DPI blockage on OpenVPN. This setup will offer the users the freedom to choose between regular OpenVPN connection or obfuscated one, they actually can use both! OpenVPN is the VPN pro…
+- [**33**Star][2y] [Py] [disruptops/resource-counter](https://github.com/disruptops/resource-counter) This command line tool counts the number of resources in different categories across Amazon regions.
+- [**33**Star][3m] [dfw1n/dfw1n-osint](https://github.com/dfw1n/dfw1n-osint) Australian Open Source Intelligence Gathering Resources, Australias Largest Open Source Intelligence Repository for Cyber Professionals and Ethical Hackers
+- [**33**Star][4y] [C] [dennisaa/patharmor](https://github.com/dennisaa/patharmor) PathArmor context-sensitive CFI implementation
+- [**33**Star][2y] [C] [demonsec666/secist_applocker](https://github.com/demonsec666/secist_applocker)
+- [**33**Star][2m] [Go] [dcso/spyre](https://github.com/dcso/spyre) simple YARA-based IOC scanner
+- [**33**Star][4y] [Py] [davidwittman/wpxmlrpcbrute](https://github.com/davidwittman/wpxmlrpcbrute) Brute force WordPress sites vulnerabile to XML-RPC amplification.
+- [**33**Star][1y] [C#] [damonmohammadbagher/nativepayload_arp](https://github.com/damonmohammadbagher/nativepayload_arp) C# code for Transferring Backdoor Payloads by ARP Traffic and Bypassing Anti-viruses (Slow)
+- [**33**Star][4y] [cz-nic/dns-fuzzing](https://github.com/cz-nic/dns-fuzzing) Repository to store unique seeds for DNS server fuzzing
+- [**33**Star][3y] [Py] [cys3c/backdoorman](https://github.com/cys3c/backdoorman) BackdoorMan is a toolkit that helps you find malicious, hidden and suspicious PHP scripts and shells in a chosen destination.
+- [**33**Star][3y] [Py] [cr4sh/aptiocalypsis](https://github.com/cr4sh/aptiocalypsis) Arbitrary SMM code execution exploit for AMI Aptio based firmware
+- [**33**Star][2y] [C++] [cnrig/cnrig](https://github.com/cnrig/cnrig) Static CryptoNight CPU miner for Linux + automatic updates
+- [**33**Star][11d] [PHP] [cms-garden/cmsscanner](https://github.com/cms-garden/cmsscanner) Detects FOSS CMS in the local filesystem
+- [**33**Star][2m] [C++] [chinatiny/gameanticheat](https://github.com/chinatiny/gameanticheat) 反外挂
+- [**33**Star][3y] [cert-w/hadoop-attack-library](https://github.com/cert-w/hadoop-attack-library) A collection of pentest tools and resources targeting Hadoop environments
+- [**33**Star][2y] [cazala/coin-hive-proxy](https://github.com/cazala/coin-hive-proxy) Deprecated. Use CoinHive Stratum instead.
+- [**33**Star][25d] [C++] [bareflank/standalone_cxx](https://github.com/bareflank/standalone_cxx) run C++ from anywhere
+- [**33**Star][3y] [Shell] [b3rito/trolo](https://github.com/b3rito/trolo) trolo - an easy to use script for generating Payloads that bypasses antivirus
+- [**33**Star][11m] [avery3r/re-writeups](https://github.com/avery3r/re-writeups) Writeups for my reverse engineering shanenagins
+- [**33**Star][6y] [Py] [averagesecurityguy/twanalyze](https://github.com/averagesecurityguy/twanalyze) Extract useful information from a Twitter account.
+- [**33**Star][2y] [C#] [arunsatyarth/oneminer](https://github.com/arunsatyarth/oneminer) 1 Click miner for Ethereum, ZCash etc on windows. Supports mixed GPUs(Nvidia & AMD)
+- [**33**Star][2y] [Py] [antriv/transfer_learning_text](https://github.com/antriv/transfer_learning_text)
+- [**33**Star][3y] [C++] [anssi-fr/nogaxeh](https://github.com/anssi-fr/nogaxeh) Tools for analyzing hexagon code
+- [**33**Star][6m] [C#] [amitwaisel/malproxy](https://github.com/amitwaisel/malproxy) Proxy system calls over an RPC channel
+- [**33**Star][2m] [Py] [akiym/pedal](https://github.com/akiym/pedal) PEDAL - Python Exploit Development Assistance for GDB Lite
+- [**33**Star][2d] [adilmajid/privacy-for-the-paranoid](https://github.com/adilmajid/privacy-for-the-paranoid) A master checklist for securing your online life.
+- [**33**Star][4m] [C] [aa65535/chinadns](https://github.com/aa65535/chinadns) Protect yourself against DNS poisoning in China.
+- [**33**Star][2y] [Batchfile] [3gstudent/winpcap_install](https://github.com/3gstudent/winpcap_install) Auto install WinPcap on Windows(command line)
+- [**33**Star][4y] [C#] [3gstudent/smallp0wnedshell](https://github.com/3gstudent/smallp0wnedshell) Small modification version of p0wnedShell
+- [**33**Star][2y] [16667/metasploitable-3-ctf](https://github.com/16667/metasploitable-3-ctf) Metasploitable3 CTF Write-up
+- [**33**Star][2y] [Rust] [0xcpu/bonomen](https://github.com/0xcpu/bonomen) BONOMEN - Hunt for Malware Critical Process Impersonation
+- [**32**Star][3y] [archimboldimao/surgeconfig](https://github.com/archimboldimao/surgeconfig) 这是我日常使用 Surge 配置 Shadowsocks 代理翻墙的文件。
+- [**32**Star][2y] [Go] [pbnj/s3-fuzzer](https://github.com/pbnj/s3-fuzzer)
+- [**32**Star][] [Py] [adrianherrera/afl-mutation-chain](https://github.com/adrianherrera/afl-mutation-chain) Recover mutation chain from an AFL seed
+- [**32**Star][10m] [Go] [bigtan/cow](https://github.com/bigtan/cow) Rule based proxy utility client
+- [**32**Star][2y] [dxa4481/cors](https://github.com/dxa4481/cors) JSON API's Are Automatically Protected Against CSRF, And Google Almost Took It Away.
+- [**32**Star][2y] [C++] [paranoidninja/botnet-blogpost](https://github.com/paranoidninja/botnet-blogpost) This repo basically contains the code that was mentioned in the blogposts that was written by me at:
+- [**32**Star][2y] [sagishahar-zz/challenges](https://github.com/sagishahar-zz/challenges) Hacking challenges
+- [**32**Star][4y] [C] [a0rtega/bdldr](https://github.com/a0rtega/bdldr) bdldr is an unofficial engine loader for Bitdefender ® for Linux
+- [**32**Star][8m] [Shell] [ytisf/randomgoodness](https://github.com/ytisf/randomgoodness) General tools and scripts i want to make public to the world.
+- [**32**Star][10m] [PHP] [thekingofduck/bypassavaddusers](https://github.com/thekingofduck/bypassavaddusers) 绕过杀毒软件添加用户
+- [**32**Star][2y] [Shell] [paranoidninja/threat-hunting](https://github.com/paranoidninja/threat-hunting) This repo is dedicated to all my tricks, tweaks and modules for testing and hunting threats. This repo contains multiple directories which are in their own, different modules required for threat hunting. This repo will be updated as and when new changes are made.
+- [**32**Star][4y] [Py] [wi-fi-analyzer/3viltwinattacker](https://github.com/wi-fi-analyzer/3viltwinattacker)
+- [**32**Star][12m] [Py] [ekultek/tadpole](https://github.com/ekultek/tadpole) Download files out of open AWS buckets
+- [**32**Star][2d] [Shell] [ibm/cloud-pak](https://github.com/ibm/cloud-pak) IBM Cloud Paks are enterprise-grade containerized software by combining container images with enterprise capabilities for deployment in production use cases with integrations for management and lifecycle operations. Features such as pre-configured deployments based on product expertise, rolling upgrades, rollbacks, security/vulnerability testing…
+- [**32**Star][3y] [Go] [localtunnel/go-localtunnel](https://github.com/localtunnel/go-localtunnel) golang client library for localtunnel.me
+- [**32**Star][2m] [cloudsploit/security-remediation-guides](https://github.com/cloudsploit/security-remediation-guides) Security Remediation Guides
+- [**32**Star][5d] [Go] [sadicann/andor](https://github.com/sadicann/andor) Blind SQL Injection Tool with Golang
+- [**32**Star][24d] [Shell] [zerobyte-id/netass2](https://github.com/zerobyte-id/netass2) Network Assessment Assistance Framework (PenTest Toolkit).
+- [**32**Star][10m] [hax4us/termux-x](https://github.com/hax4us/termux-x) it is unofficial repository maintained by me
+- [**32**Star][2m] [C] [kangtastic/cve-2019-2215](https://github.com/kangtastic/cve-2019-2215) Temproot for Pixel 2 and Pixel 2 XL via CVE-2019-2215
+- [**32**Star][2m] [Shell] [da667/ciderpress](https://github.com/da667/ciderpress) Wordpress automation and hardening
+- [**32**Star][1m] [C] [gdbinit/efi_dxe_emulator](https://github.com/gdbinit/efi_dxe_emulator) EFI DXE Emulator and Interactive Debugger
+- [**32**Star][2m] [HTML] [egebalci/xss-flare](https://github.com/egebalci/xss-flare) XSS hunter on cloudflare serverless workers.
+- [**32**Star][6y] [sin5678/a-protect](https://github.com/sin5678/A-Protect) A-Protect Anti Rootkit Tool
+- [**32**Star][3y] [Pascal] [mwsrc/xtremerat](https://github.com/mwsrc/XtremeRAT) XtremeRAT SRC Extract
+- [**32**Star][2y] [Py] [sewellding/sitepathscan](https://github.com/SewellDinG/SitePathScan) 网站路径扫描脚本
+- [**32**Star][8m] [JS] [cylance/nmap-cluster](https://github.com/cylance/NMAP-Cluster) Clustering NMAP XML results to help make sense of large scan results.
+- [**32**Star][4y] [C++] [helpsystems/gdiobjdump](https://github.com/helpsystems/GDIObjDump)
+- [**32**Star][5y] [Py] [coalfire-research/doozer](https://github.com/Coalfire-Research/Doozer) Password cracking utility
+- [**32**Star][3m] [C++] [imugee/xdv](https://github.com/imugee/xdv) XDV is disassembler or debugger that works based on the extension plugin.
+- [**32**Star][3m] [Shell] [blackgeneration/uncle-spufus](https://github.com/blackgeneration/uncle-spufus) A tool that automates MAC address and hostname spoofing
+- [**32**Star][4y] [Ruby] [praetorian-code/ruby_hashcat](https://github.com/praetorian-code/ruby_hashcat) Command line wrapper, Library, and Rest API for oclHashcat.
+- [**32**Star][1y] [Py] [dd4rk/ctfwebscan](https://github.com/dd4rk/ctfwebscan) CTF比赛中web源码泄露扫描
+- [**32**Star][2y] [CMake] [zyantific/ida-cmake](https://github.com/zyantific/ida-cmake) IDA plugin CMake build-script
+- [**32**Star][2y] [ObjC] [zjjno/interface-inspector-hook](https://github.com/zjjno/interface-inspector-hook) Interface Inspector破解
+- [**32**Star][3m] [Java] [zerokilo/n64loaderwv](https://github.com/zerokilo/n64loaderwv) Ghidra Loader Module for N64 ROMs
+- [**32**Star][8m] [C] [y123456yz/reading-and-comprehense-twemproxy0.4.1](https://github.com/y123456yz/reading-and-comprehense-twemproxy0.4.1) redis、memcached缓存代理twemproxy源码详细分析注释,带详尽中文注释及函数调用关系。(源码学习交流QQ群:568892619)
+- [**32**Star][4y] [PHP] [wstart/webshell](https://github.com/wstart/webshell) This is a webshell open source project
+- [**32**Star][2y] [vulnex/tintorera](https://github.com/vulnex/tintorera) Source Code Intelligence
+- [**32**Star][4m] [vulnerscom/detect-rules](https://github.com/vulnerscom/detect-rules) Vulners signature-base software version detection rules
+- [**32**Star][5y] [Shell] [vt-magnum-research/antimalware](https://github.com/vt-magnum-research/antimalware) Dynamic malware analysis for the Android platform
+- [**32**Star][5m] [C++] [vector35/generate_assembler](https://github.com/vector35/generate_assembler) generate assemblers from disassemblers, 2018 jailbreak security summit talk
+- [**32**Star][5m] [vah13/oracle-bi-bugs](https://github.com/vah13/oracle-bi-bugs)
+- [**32**Star][10m] [twelvesec/bearerauthtoken](https://github.com/twelvesec/bearerauthtoken) This burpsuite extender provides a solution on testing Enterprise applications that involve security Authorization tokens into every HTTP requests.Furthermore, this solution provides a better approach to solve the problem of Burp suite automated scanning failures when Authorization tokens exist.
+- [**32**Star][4y] [Py] [trustedsec/crackmapexec](https://github.com/trustedsec/crackmapexec) A swiss army knife for pentesting Windows/Active Directory environments
+- [**32**Star][1y] [JS] [truework/lambda-s3-antivirus](https://github.com/truework/lambda-s3-antivirus) Lambda Function to scan incoming S3 uploads by Truework
+- [**32**Star][7m] [Perl] [tripflex/cpsetup](https://github.com/tripflex/cpsetup) Intuitive bash/shell script to setup and harden/configure cPanel CentOS/RHEL server with ConfigServer Firewall, MailManage, MailQueue, Malware Detect, ClamAV, mod_cloudflare, CloudFlare RailGun, and many more applications and security tweaks
+- [**32**Star][3y] [Go] [tomsteele/burpstaticscan](https://github.com/tomsteele/burpstaticscan) Use burp's JS static code analysis on code from your local system.
+- [**32**Star][3y] [C] [tlgyt/dirtycowandroid](https://github.com/tlgyt/dirtycowandroid) Repo For Working on Dirty Cow Based Android Root Method
+- [**32**Star][2m] [thetorproject/gettorbrowser](https://github.com/thetorproject/gettorbrowser) This is a repository to provide links for downloading Tor Browser from Github.
+- [**32**Star][1y] [Ruby] [thesubtlety/shocens](https://github.com/thesubtlety/shocens) Query Shodan and Censys data for fast parsing
+- [**32**Star][3y] [Py] [tengzhangchao/information](https://github.com/tengzhangchao/information) windows Server Information gathering tool (主机信息收集工具)
+- [**32**Star][3y] [tdifg/payloads](https://github.com/tdifg/payloads) for burp
+- [**32**Star][3m] [Py] [tangxiaofeng7/srcinformation-gathering](https://github.com/tangxiaofeng7/srcinformation-gathering) 挖掘SRC的信息收集
+- [**32**Star][3y] [Py] [syss-research/dns-mitm](https://github.com/syss-research/dns-mitm) A minimal DNS service that can provide spoofed replies
+- [**32**Star][3y] [C++] [swwwolf/cbtest](https://github.com/swwwolf/cbtest) Windows kernel-mode callbacks tutorial driver
+- [**32**Star][2y] [C] [srakai/adun](https://github.com/srakai/adun) A way to backdoor every process
+- [**32**Star][2y] [Py] [spiperac/armroper](https://github.com/spiperac/armroper) ARM rop chain gadget searcher
+- [**32**Star][2y] [C] [snorez/exploits](https://github.com/snorez/exploits) practice
+- [**32**Star][2m] [Shell] [snawoot/linux-secureboot-kit](https://github.com/snawoot/linux-secureboot-kit) Tool for complete hardening of Linux boot chain with UEFI Secure Boot
+- [**32**Star][2y] [Elixir] [smpallen99/coherence_demo](https://github.com/smpallen99/coherence_demo) A coherence demo project
+- [**32**Star][2y] [Py] [sigploiter/m3uascan](https://github.com/sigploiter/m3uascan) A Scanner for M3UA protocol to detect Sigtran supporting nodes
+- [**32**Star][6m] [Py] [shouc/knicky](https://github.com/shouc/knicky) A module-based static virus generator
+- [**32**Star][7y] [C] [sergiocampama/launchpad](https://github.com/sergiocampama/launchpad) Launchpad mini projects. Includes mspgcc installation instructions for Ubuntu
+- [**32**Star][4y] [Py] [sekoialab/pe-tools](https://github.com/sekoialab/pe-tools) Set of python scripts to analyse PE32/PE64 binaries and to extract VB 5/6 headers and Visual Basic p-code functions.
+- [**32**Star][1y] [Shell] [securityriskadvisors/redteamsiem](https://github.com/securityriskadvisors/redteamsiem) Repository of resources for configuring a Red Team SIEM using Elastic
+- [**32**Star][3m] [C++] [saml1er/gta-reversed](https://github.com/saml1er/gta-reversed) Reversed code of GTA:SA executable (gta_sa.exe) 1.0 US
+- [**32**Star][1y] [JS] [s03d4-164/hiryu](https://github.com/s03d4-164/hiryu) IOC Management and Visualization Tool
+- [**32**Star][3y] [Py] [rurik/pe_carver](https://github.com/rurik/pe_carver) Carves EXEs from given data files, using intelligent carving based upon PE headers
+- [**32**Star][2y] [Py] [rurik/java_idx_parser](https://github.com/rurik/java_idx_parser) Parses Java Cache IDX files
+- [**32**Star][2y] [Py] [rudsarkar/crlf-injector](https://github.com/rudsarkar/crlf-injector) A CRLF ( Carriage Return Line Feed ) Injection attack occurs when a user manages to submit a CRLF into an application. This is most commonly done by modifying an HTTP parameter or URL.
+- [**32**Star][6y] [PS] [roo7break/powershell-scripts](https://github.com/roo7break/powershell-scripts) List of PowerShell scripts conjured up for my consumption (you are welcome to use)
+- [**32**Star][3m] [JS] [ronomon/mime](https://github.com/ronomon/mime) Fast, robust, standards-compliant MIME decoder. Ships with extensive tests and fuzz tests.
+- [**32**Star][1y] [robocyber/shodan-dorks](https://github.com/robocyber/shodan-dorks) Dorks for shodan.io. Some basic shodan dorks collected from publicly available data.
+- [**32**Star][2m] [Java] [righettod/log-requests-to-sqlite](https://github.com/righettod/log-requests-to-sqlite) BURP extension to record every HTTP request send via BURP and create an audit trail log of an assessment.
+- [**32**Star][2y] [Py] [redteam-cyberark/google-domain-fronting](https://github.com/redteam-cyberark/google-domain-fronting) Domain fronting using Google app engine
+- [**32**Star][4y] [PHP] [realtimeprojects/quixplorer](https://github.com/realtimeprojects/quixplorer) simply upload and download files to your webserver with a web-interface
+- [**32**Star][10m] [C] [rakion99/icememe](https://github.com/rakion99/icememe) Roblox Exploit Source Code Called IceMeme with some cmds, lua c and limited lua execution with simple ui in c#
+- [**32**Star][4m] [C++] [rafaelgss/hyzmall](https://github.com/rafaelgss/hyzmall)
+- [**32**Star][4y] [Py] [raccoons-team/ctf](https://github.com/raccoons-team/ctf) Writeups for CTF competitions.
+- [**32**Star][11m] [Py] [qwj/python-esp](https://github.com/qwj/python-esp) IPSec IKE(v1,v2) PSK VPN implemented in pure Python. (For Research Purposes Only)
+- [**32**Star][3d] [Ruby] [puppetlabs/puppetlabs-java_ks](https://github.com/puppetlabs/puppetlabs-java_ks) Uses a combination of keytool and openssl to manage entries in a Java keystore
+- [**32**Star][4y] [Py] [psmiraglia/ctf](https://github.com/psmiraglia/ctf) My solutions of CTFs
+- [**32**Star][1y] [Py] [phdphuc/mac-a-mal-cuckoo](https://github.com/phdphuc/mac-a-mal-cuckoo) extends the open-source Cuckoo Sandbox (legacy) with functionality for analyzing macOS malware in macOS guest VM(s).
+- [**32**Star][2y] [Go] [pbnj/s3-fuzzer](https://github.com/pbnj/s3-fuzzer) A concurrent, command-line AWS S3 Fuzzer.
+- [**32**Star][1y] [C] [perceptionpoint/suprotect](https://github.com/perceptionpoint/suprotect) Changing memory protection in an arbitrary process
+- [**32**Star][2m] [Py] [pagalaxylab/ghidra_scripts](https://github.com/pagalaxylab/ghidra_scripts) Scripts for the Ghidra.
+- [**32**Star][10m] [Swift] [pabloroca/obfuscateapi](https://github.com/pabloroca/obfuscateapi) Mac OSX, Command line Swift 4 Utility for obfuscate / defuscate strings (API endpoints) in AES128 format.
+- [**32**Star][10m] [Py] [oshp/headers](https://github.com/oshp/headers) An application to catch, search and analyze HTTP secure headers.
+- [**32**Star][5m] [oldbonhart/osint-resources](https://github.com/oldbonhart/osint-resources) Data collected from publicly available sources to be used in an intelligence context
+- [**32**Star][2m] [Py] [oalieno/ctf](https://github.com/oalieno/ctf) CTF writeups
+- [**32**Star][4m] [HTML] [o0xmuhe/realworldpwn](https://github.com/o0xmuhe/realworldpwn) vulns I found or I collect
+- [**32**Star][7m] [Shell] [nyxgeek/nyxgeek-rules](https://github.com/nyxgeek/nyxgeek-rules) Custom rules for Hashcat and John the Ripper
+- [**32**Star][1y] [C++] [ntraiseharderror/dreadnought](https://github.com/ntraiseharderror/dreadnought) PoC for detecting and dumping code injection (built and extended on UnRunPE)
+- [**32**Star][2y] [JS] [notdls/hackbar](https://github.com/notdls/hackbar) HackBar Quantum is a sidebar that assists you with web application security testing, it's aim is to help make those tedious tasks a little bit easier. This add-on is a predecessor to the original HackBar that is not compatible with Firefox Quantum.
+- [**32**Star][6y] [netspi/skl](https://github.com/netspi/skl) strace keylogger PoC
+- [**32**Star][3y] [Go] [mwitkow/go-http-dialer](https://github.com/mwitkow/go-http-dialer) Go net.Dialer for HTTP(S) CONNECT Tunneling.
+- [**32**Star][2y] [HTML] [mthbernardes/leakmanager](https://github.com/mthbernardes/leakmanager) A tool to help you manage your leaks
+- [**32**Star][2y] [Shell] [mseclab/ahe17](https://github.com/mseclab/ahe17) Android Hacking Event 2017 Write-up
+- [**32**Star][9d] [Go] [mondoolabs/mondoo](https://github.com/mondoolabs/mondoo) Mondoo Cloud-Native Security & Vulnerability Risk Management
+- [**32**Star][27d] [Shell] [mirchr/security-research](https://github.com/mirchr/security-research) Security Research
+- [**32**Star][1y] [Py] [mimoo/rsa_pkcs1v1_5_attacks](https://github.com/mimoo/rsa_pkcs1v1_5_attacks) Implementation of Bleichenbacher, Manger and Ben-Or attacks on RSA PKCS#1 v1.5
+- [**32**Star][5m] [Py] [mikemeliz/torcrawl.py](https://github.com/mikemeliz/torcrawl.py) Crawl and extract (regular or onion) webpages through TOR network
+- [**32**Star][1y] [mhaggis/sysmon-splunk-app](https://github.com/mhaggis/sysmon-splunk-app) Sysmon Splunk App
+- [**32**Star][2y] [Py] [mgale/dhcpsnoop](https://github.com/mgale/dhcpsnoop) DHCP Snooping app - great for finding rogue DHCP servers
+- [**32**Star][3y] [C] [mehdilauters/esp8266-wifiscanmap](https://github.com/mehdilauters/esp8266-wifiscanmap)
+- [**32**Star][3y] [Py] [mdegrazia/osx-quicklook-parser](https://github.com/mdegrazia/osx-quicklook-parser) Parse the Mac Quickook index.sqlite database
+- [**32**Star][8m] [Py] [maxkrivich/slowloris](https://github.com/maxkrivich/slowloris) Small and simple tool for testing Slow Loris vulnerability
+- [**32**Star][5y] [Java] [malerisch/burp-csj](https://github.com/malerisch/burp-csj) BurpCSJ extension for Burp Pro - Crawljax Selenium JUnit integration
+- [**32**Star][1y] [lylemi/dom-vuln-db](https://github.com/lylemi/dom-vuln-db) A collection of Browser DOM Vulnerabilities with PoCs
+- [**32**Star][1y] [ObjC] [lycajb/lycajb](https://github.com/lycajb/lycajb) LycaJB is a project that aims to fill the gap in iOS 11.0 - 11.3.1 jailbreaks. While this jailbreak is specifically aimed at developers it could be turned into a public stable jailbreak which includes Cydia. Right now we had to make the hard decision to remove Cydia from LycaJB as it caused our test devices to bootloop. We are working hard to ma…
+- [**32**Star][5y] [Perl] [linvex/mitm-squid](https://github.com/linvex/mitm-squid) sharing some files of MITM-squid attack.
+- [**32**Star][11m] [Assembly] [linuxthor/uul](https://github.com/linuxthor/uul) ELF binary that runs on several different *nix flavours. Works out which variant it's being run on and runs code specific to that.
+- [**32**Star][2y] [PHP] [leebaird/assessment-manager](https://github.com/leebaird/assessment-manager) Manage all logistical information for a pentest including clients, contacts, employees, findings, projects, scoping, and vulnerabilities.
+- [**32**Star][6d] [C++] [kuqadk3/ctf-and-learning](https://github.com/kuqadk3/ctf-and-learning)
+- [**32**Star][2y] [Py] [krystalgamer/dec2struct](https://github.com/krystalgamer/dec2struct) Python plugin to easily setup vtables in IDA using declaration files
+- [**32**Star][2y] [knoobdev/bypass-facebook-ssl-pinning](https://github.com/knoobdev/bypass-facebook-ssl-pinning) Bypassing ssl pinning for facebook android app
+- [**32**Star][3m] [Py] [kang-newbie/s-mbf](https://github.com/kang-newbie/s-mbf) Simple Multi BruteForce by KANG-NEWBIE
+- [**32**Star][3y] [Shell] [jriguera/coreos-usb-creator](https://github.com/jriguera/coreos-usb-creator) Coreos live image builder with cloud-config on FAT32 to easily create POC
+- [**32**Star][1y] [C] [jp-bennett/fwknop2](https://github.com/jp-bennett/fwknop2) A replacement fwknop client for android.
+- [**32**Star][8y] [Py] [jonoberheide/kstructhunter](https://github.com/jonoberheide/kstructhunter) Routines for hunting down kernel structs.
+- [**32**Star][3y] [Py] [jkkj93/mint-webshell-defender](https://github.com/jkkj93/mint-webshell-defender)
+- [**32**Star][5y] [jgor/php-jpeg-shell](https://github.com/jgor/php-jpeg-shell) Simple PHP webshell with a JPEG header to bypass weak image verification checks
+- [**32**Star][5y] [Ruby] [jduck/addjsif](https://github.com/jduck/addjsif) Metasploit Exploit Module for the Android addJavascriptInterface Issue (MITM)
+- [**32**Star][6m] [C] [jcsaezal/pmctrack](https://github.com/jcsaezal/pmctrack) an OS-oriented performance monitoring tool for Linux (
+- [**32**Star][10m] [Py] [james9909/practicectf](https://github.com/james9909/practicectf) Write-ups for past CTFs done during my free time
+- [**32**Star][11m] [C++] [jacksonvd/pwnedpasswordsdll-api](https://github.com/jacksonvd/pwnedpasswordsdll-api) Open source solution to check prospective AD passwords against previously breached passwords
+- [**32**Star][7y] [Py] [isecpartners/fuzzbox](https://github.com/isecpartners/fuzzbox) A multi-codec media fuzzing tool.
+- [**32**Star][5y] [Py] [iphelix/ida-pomidor](https://github.com/iphelix/ida-pomidor) a productivity plugin for Hex-Ray's IDA Pro disassembler.
+- [**32**Star][6y] [C++] [igh0st/crypters](https://github.com/igh0st/crypters) Various Crypter Project
+- [**32**Star][5m] [Py] [idhyt/jeb-keygen](https://github.com/idhyt/jeb-keygen) JEB install env
+- [**32**Star][4y] [C++] [icestudent/ontl](https://github.com/icestudent/ontl) A set of tiny C++ RAII wrappers for NT Native/Win32 APIs including its own C++0x Standard Library (formerly STL) implementation.
+- [**32**Star][2y] [Java] [realbearcat/cve-2017-12615](https://github.com/RealBearcat/CVE-2017-12615) Tomcat 远程代码执行漏洞 Exploit
+- [**32**Star][4y] [Py] [holloway/docvert-python3](https://github.com/holloway/docvert-python3) Docvert for Python3: Converts Office files to DocBook and clean HTML, diagrams to SVG/PNG, etc.
+- [**32**Star][3y] [Py] [harryr/maltrieve](https://github.com/harryr/maltrieve) A tool to retrieve malware directly from the source for security researchers.
+- [**32**Star][9m] [C#] [graykernel/graystorm](https://github.com/graykernel/graystorm) In memory attack platform for C# Applications
+- [**32**Star][3m] [C#] [globalpolicy/csarp-netcut](https://github.com/globalpolicy/csarp-netcut) An arpspoof program using Sharppcap
+- [**32**Star][2y] [C] [freener/exploits](https://github.com/freener/exploits)
+- [**32**Star][5y] [Java] [forprevious/attack-analysis](https://github.com/forprevious/attack-analysis) just for attack、Vulnerability,my study and research
+- [**32**Star][9y] [C] [falk3n/subversive](https://github.com/falk3n/subversive) x86_64 linux rootkit using debug registers
+- [**32**Star][24d] [C++] [f18m/large-pcap-analyzer](https://github.com/f18m/large-pcap-analyzer) A command-line utility program that performs some simple operations on PCAP files (Wireshark/tcpdump traces) very quickly. Allows you to manipulate very large PCAP files that cannot be easily handled with other software like Wireshark (or tshark). Supports filtering encapsulated GTPu frames. Easily extendible.
+- [**32**Star][2y] [Py] [eurecom-s3/linux_screenshot_xwindows](https://github.com/eurecom-s3/linux_screenshot_xwindows) Volatility插件, 从内存dump中提取Windows截屏
+- [**32**Star][7d] [edoverflow/legal-bug-bounty](https://github.com/edoverflow/legal-bug-bounty) #legalbugbounty project — creating safe harbors on bug bounty programs and vulnerability disclosure programs. Authored by Amit Elazari.
+- [**32**Star][3y] [C++] [ecologylab/ecotuiodriver](https://github.com/ecologylab/ecotuiodriver) Diver to convert tuio touch events into windows touch events. Started as GSoC 2012 project.
+- [**32**Star][2y] [dweinstein/dockerfile-androguard](https://github.com/dweinstein/dockerfile-androguard) docker file for use with androguard python android app analysis tool
+- [**32**Star][5y] [Shell] [duoduo369/oh-my-shadowsocks](https://github.com/duoduo369/oh-my-shadowsocks) shadowsocks config on server, supervisor support
+- [**32**Star][1y] [C] [dlrobertson/sylkie](https://github.com/dlrobertson/sylkie) sylkie:利用 NeighborDiscovery Protocol 实现的 IPv6 地址欺骗工具
+- [**32**Star][2m] [JS] [digitalinterruption/vulnerable-xss-app](https://github.com/digitalinterruption/vulnerable-xss-app)
+- [**32**Star][2y] [JS] [dg92/fractal-tree](https://github.com/dg92/fractal-tree) Fractal tree
+- [**32**Star][7y] [Py] [derv82/werdy](https://github.com/derv82/werdy) A set of Python scripts for generating, parsing, sorting, and saving wordlists.
+- [**32**Star][2y] [Shell] [deepwn/gitpagehijack](https://github.com/deepwn/gitpagehijack) OK now. Let's hijack github user's custom domain.
+- [**32**Star][1y] [C] [deadnumbers/pegasus](https://github.com/deadnumbers/pegasus) Carbanak leaked source
+- [**32**Star][2y] [HTML] [ddvkid/ng-treetable](https://github.com/ddvkid/ng-treetable) A treetable module for angular 5
+- [**32**Star][1y] [TeX] [danpage/mascab](https://github.com/danpage/mascab) MASCAB: a Micro-Architectural Side-Channel Attack Bibliography
+- [**32**Star][4y] [Py] [csababarta/volatility_plugins](https://github.com/csababarta/volatility_plugins) Volatility plugins created by the author
+- [**32**Star][3m] [C++] [creaink/ucom](https://github.com/creaink/ucom) A simple Serial-Port/TCP/UDP debugging tool.
+- [**32**Star][6y] [Py] [coldheat/quicksec](https://github.com/coldheat/quicksec) IDAPython script for quick vulnerability analysis
+- [**32**Star][1m] [Py] [codingo/ransomware-json-dataset](https://github.com/codingo/ransomware-json-dataset) Compiles a json dataset using public sources that contains properties to aid in the detection and mitigation of over 1000 variants of ransomware.
+- [**32**Star][11m] [TS] [xfoxfu/clover](https://github.com/xfoxfu/clover) Shadowsocks and v2ray User Interface
+- [**32**Star][4d] [Py] [cloudflare/salt-cloudflare](https://github.com/cloudflare/salt-cloudflare) Cloudflare salt module allows you to manage zones on Cloudflare from salt.
+- [**32**Star][2y] [Py] [citp/email_tracking](https://github.com/citp/email_tracking) Code and data release for our PETS 2018 paper: "I never signed up for this! Privacy implications of email tracking".
+- [**32**Star][2y] [C#] [cfwprpht/free-ps2-pub-gen](https://github.com/cfwprpht/free-ps2-pub-gen) Automated Tool for flatz PS4- PS2 Emu PKG Technic.
+- [**32**Star][3y] [Py] [certsocietegenerale/abuse_finder](https://github.com/certsocietegenerale/abuse_finder) Find abuse contacts for observables
+- [**32**Star][1y] [Go] [boxproject/voucher](https://github.com/boxproject/voucher) Enterprise-grade security solution for digital assets custody, using a cryptographically secure offline network.
+- [**32**Star][2m] [YARA] [blacktop/docker-yara](https://github.com/blacktop/docker-yara) docker-yara:YaraDockerfile
+- [**32**Star][5m] [C++] [blackint3/none](https://github.com/blackint3/none) UNONE and KNONE is a couple of open source base library that makes it easy to develop software on Windows.
+- [**32**Star][6m] [Py] [bishopfox/idontspeakssl](https://github.com/bishopfox/idontspeakssl) simple script to parse testssl.sh results
+- [**32**Star][3y] [Py] [binarlyhq/binarly-query](https://github.com/binarlyhq/binarly-query) Command-line Interface for Binar.ly
+- [**32**Star][2y] [applebetas/mterminal-jailed](https://github.com/applebetas/mterminal-jailed) An iOS 11 compatible fork of MTerminal using Ian Beer's tfp0 exploit
+- [**32**Star][5m] [angelkitty/ida7.0](https://github.com/angelkitty/ida7.0)
+- [**32**Star][1y] [Py] [andreafortuna/autotimeliner](https://github.com/andreafortuna/autotimeliner) 自动从volatile内存转储中提取取证时间线
+- [**32**Star][3m] [Py] [amossys/fragscapy](https://github.com/amossys/fragscapy) Fragscapy is a command-line tool to fuzz network protocols by automating the modification of outgoing network packets. It can run multiple successive tests to determine which options can be used to evade firewalls and IDS.
+- [**32**Star][1y] [C] [alex9191/kernelmodemonitor](https://github.com/alex9191/kernelmodemonitor) Kernel-Mode driver and User-Mode application communication project
+- [**32**Star][3d] [Py] [adguardteam/adguardsdnsfilter](https://github.com/adguardteam/adguardsdnsfilter) AdGuard Simplified Domain names filter
+- [**32**Star][5y] [JS] [acama/webkitties](https://github.com/acama/webkitties) PS Vita Webkit Exploit / Mini SDK and Testing Framework
+- [**32**Star][4y] [C++] [5loyd/makecode](https://github.com/5loyd/makecode) Dll Convert to Shellcode.
+- [**32**Star][11m] [Jupyter Notebook] [404notf0und/ai-for-security-testing](https://github.com/404notf0und/ai-for-security-testing) My AI security testing projects
+- [**32**Star][2y] [PS] [3gstudent/office-persistence](https://github.com/3gstudent/office-persistence) Use powershell to test Office-based persistence methods
+- [**32**Star][1y] [Makefile] [1bitsy/1bitsy-examples](https://github.com/1bitsy/1bitsy-examples) Example projects for the 1BitSy development boards.
+- [**32**Star][5y] [Py] [0xebfe/3dsx-ida-pro-loader](https://github.com/0xebfe/3dsx-ida-pro-loader) IDA PRO Loader for 3DSX files
+- [**31**Star][2m] [Go] [shikanon/socks5proxy](https://github.com/shikanon/socks5proxy) 一个简单的socks5代理转发服务(VPN)
+- [**31**Star][2y] [Makefile] [xc2/shadowsocks-libev-tomato](https://github.com/xc2/shadowsocks-libev-tomato) Pre-compiled shadowsocks-libev for TomatoUSB, Tomato Shibby, Toastman and Asuswrt Merlin.
+- [**31**Star][22d] [C] [questescape/exploit](https://github.com/questescape/exploit) Kernel exploits for the Oculus Quest
+- [**31**Star][3m] [C#] [cmu-sei/ghosts](https://github.com/cmu-sei/ghosts) GHOSTS is a framework for highly-complex, realistic NPC orchestration
+- [**31**Star][5y] [ObjC] [project-imas/encrypted_code_modules](https://github.com/project-imas/encrypted_code_modules) ECM - mitigates static attacks - allows sections of source code to be encrypted into a .dylib at build time and decrypted at run-time
+- [**31**Star][1y] [rhinosecuritylabs/presentations](https://github.com/rhinosecuritylabs/presentations) A collection of slides, videos, and proof-of-concept scripts from various Rhino presentations.
+- [**31**Star][2y] [bypass007/vuln](https://github.com/bypass007/vuln) Record some Vulnerabilities
+- [**31**Star][2m] [C] [bkerler/opencl_brute](https://github.com/bkerler/opencl_brute) MD5,SHA1,SHA256,SHA512,HMAC,PBKDF2,SCrypt Bruteforcing tools using OpenCL (GPU, yay!) and Python
+- [**31**Star][8m] [Py] [fallibleinc/retirejslib](https://github.com/fallibleinc/retirejslib) Scan for vulnerabilities in JavaScript libraries you use (Python port of retirejs)
+- [**31**Star][6m] [Py] [snowming04/cipher_encryption_type_identification](https://github.com/snowming04/cipher_encryption_type_identification) 对密文的加密类型进行判断的命令行工具。
+- [**31**Star][5y] [Py] [michenriksen/maltego](https://github.com/michenriksen/maltego) Custom Maltego transforms
+- [**31**Star][21d] [Py] [grayddq/eburst](https://github.com/grayddq/eburst) 这个脚本主要提供对Exchange邮件服务器的账户爆破功能,集成了现有主流接口的爆破方式。
+- [**31**Star][6y] [CSS] [spiderlabs/microphisher](https://github.com/spiderlabs/microphisher) µphisher spear phishing tool (reference implementation)
+- [**31**Star][18d] [JS] [pirate/django-concurrency-talk](https://github.com/pirate/django-concurrency-talk) Database Integrity in Django: Safely Handling Critical Data in Distributed Systems
+- [**31**Star][2m] [Shell] [thelinuxchoice/self-xss](https://github.com/thelinuxchoice/self-xss) Self-XSS attack using bit.ly to grab cookies tricking users into running malicious code
+- [**31**Star][1m] [Py] [k8gege/solrexp](https://github.com/k8gege/solrexp) Apache Solr <=8.2.0 Velocity Template 0day Exploit
+- [**31**Star][1m] [xuxiaodong/v2ray-for-ansible](https://github.com/xuxiaodong/v2ray-for-ansible) V2Ray for Ansible
+- [**31**Star][3y] [Py] [d4vinci/wormy](https://github.com/d4vinci/wormy) some python3 functions to add spreading features to any python backdoor
+- [**31**Star][2m] [Shell] [lbp0200/v2ray-vultr](https://github.com/lbp0200/v2ray-vultr) 在vultr上,在线自动部署v2ray
+- [**31**Star][1y] [Shell] [wongsyrone/openwrt-v2ray](https://github.com/wongsyrone/openwrt-v2ray) v2ray package example for OpenWrt/LEDE
+- [**31**Star][5d] [Py] [oasis-open/cti-taxii-server](https://github.com/oasis-open/cti-taxii-server) OASIS TC Open Repository: TAXII 2 Server Library Written in Python
+- [**31**Star][10m] [kiyadesu/android-reversing-challenges](https://github.com/kiyadesu/android-reversing-challenges) there are some CTF challenges or some other things helping improving android reversing skills.
+- [**31**Star][4m] [bslassey/privacy-budget](https://github.com/bslassey/privacy-budget)
+- [**31**Star][1y] [Shell] [xxh3x/nethunter_universal](https://github.com/XXH3X/Nethunter_Universal) Kali Nethunter for any phone (Kerneless)
+- [**31**Star][2y] [proappleos/upgrade-from-10.3.x-to-ios-11.1.2-on-any-64bit-device-with-blobs](https://github.com/ProAppleOS/Upgrade-from-10.3.x-to-iOS-11.1.2-on-any-64Bit-device-with-Blobs) How to Upgrade any 64Bit Device from 10.3.x to 11.1.2 with Blobs
+- [**31**Star][2y] [C++] [mojtabatajik/sandbox-detection](https://github.com/MojtabaTajik/Sandbox-Detection) Contains some tricks to detect Sandboxes and gradually completed
+- [**31**Star][2y] [JS] [ret2got/ethereum-jsonrpc-dns-rebinding](https://github.com/ret2got/Ethereum-JSONRPC-DNS-Rebinding) The PoC files for ethereum client's JSON-RPC DNS Rebinding
+- [**31**Star][2y] [C] [zwclose/hidusb2](https://github.com/zwclose/hidusb2) hidusb2:Win10hidusb.sys 源代码
+- [**31**Star][1y] [C#] [zodiacon/perfmonx](https://github.com/zodiacon/perfmonx) PerfMonX is an enhanced Performance Monitor tool
+- [**31**Star][6y] [Ruby] [zeknox/scripts](https://github.com/zeknox/scripts) a collection of useful scripts that for penetration testers
+- [**31**Star][3y] [Py] [ytisf/hemingway](https://github.com/ytisf/hemingway) hemingway is a simple and easy to use spear phishing helper.
+- [**31**Star][1y] [PHP] [yaofeifly/php_code_challenge](https://github.com/yaofeifly/php_code_challenge) 总结一些php代码审计ctf练习题
+- [**31**Star][10m] [Py] [xme/dockers](https://github.com/xme/dockers) Miscelaneous Dockers
+- [**31**Star][5m] [Py] [withzombies/bnil-graph](https://github.com/withzombies/bnil-graph) A BinaryNinja plugin to graph a BNIL instruction tree
+- [**31**Star][20d] [Py] [whitequark/binja_itanium_cxx_abi](https://github.com/whitequark/binja_itanium_cxx_abi) Binary Ninja Itanium C++ ABI Plugin
+- [**31**Star][5y] [web2hack/trac](https://github.com/web2hack/trac) 《Web前端黑客技术揭秘》勘误表
+- [**31**Star][1y] [Py] [wasapi-community/data-transfer-apis](https://github.com/wasapi-community/data-transfer-apis) WASAPI data transfer APIs
+- [**31**Star][3m] [SystemVerilog] [wangxuan95/ustc-rvsoc](https://github.com/wangxuan95/ustc-rvsoc) 一个用 SystemVerilog 编写的,RISC-V 架构的 CPU + SoC
+- [**31**Star][1y] [unapibageek/thebicho](https://github.com/unapibageek/thebicho) Hardware backdoor for CAN bus.
+- [**31**Star][3m] [PHP] [ubient/laravel-pwned-passwords](https://github.com/ubient/laravel-pwned-passwords) A Laravel validation rule to determine whether a given password is pwned (insecure)
+- [**31**Star][2y] [PS] [tyranid/zer0con_2018](https://github.com/tyranid/zer0con_2018) Repository for my talk on Desktop Bridge at Zer0Con 2018.
+- [**31**Star][3y] [Py] [tunnelshade/nightfury](https://github.com/tunnelshade/nightfury)
+- [**31**Star][5y] [Py] [tripwire/openssl-ccs-inject-test](https://github.com/tripwire/openssl-ccs-inject-test) This script is designed for detection of vulnerable servers (CVE-2014-0224.) in a wide range of configurations. It attempts to negotiate using each affected protocol version (SSLv3, TLSv1, TLSv1.1, and TLSv1.2) advertising a comprehensive set of ciphers.
+- [**31**Star][3y] [C++] [trailofbits/cfg-showcase](https://github.com/trailofbits/cfg-showcase) Sample programs that illustrate how to use Control Flow Guard, VS2015's control flow integrity implementation
+- [**31**Star][1y] [Py] [thusoy/postgres-mitm](https://github.com/thusoy/postgres-mitm) Test whether your Postgres connections are vulnerable to MitM attacks
+- [**31**Star][4y] [Eagle] [thedarknet/hhvkit](https://github.com/thedarknet/hhvkit) DefCon Hardware Hacking Village Learn To Solder Kit
+- [**31**Star][5y] [Assembly] [th4nat0s/no_sandboxes](https://github.com/th4nat0s/no_sandboxes) Test suite for bypassing Malware sandboxes.
+- [**31**Star][4y] [C] [tandasat/cs_driver](https://github.com/tandasat/cs_driver) A sample project for using Capstone from a driver in Visual Studio 2015
+- [**31**Star][23d] [talltechy/infosec_it-conferences-and-certs-usa](https://github.com/talltechy/infosec_it-conferences-and-certs-usa) USA based Information Security & I.T. Conferences
+- [**31**Star][8y] [C] [swatkat/arkitlib](https://github.com/swatkat/arkitlib) Windows anti-rootkit library
+- [**31**Star][2y] [Py] [starnightcyber/cve-2017-11882](https://github.com/starnightcyber/cve-2017-11882) CVE-2017-11882 exploitation
+- [**31**Star][3y] [Py] [staaldraad/fastfluxanalysis](https://github.com/staaldraad/fastfluxanalysis) Scripts to detect Fast-Flux and DGA using DNS query responses
+- [**31**Star][1y] [Ruby] [st0rn/windows-10-exploit](https://github.com/st0rn/windows-10-exploit) Windows 10 Exploit
+- [**31**Star][3y] [Java] [silentsignal/burp-collab-gw](https://github.com/silentsignal/burp-collab-gw) Simple socket-based gateway to the Burp Collaborator
+- [**31**Star][2y] [shadowsocksrr/shadowsocksx-ng](https://github.com/shadowsocksrr/shadowsocksx-ng) Next Generation of ShadowsocksX
+- [**31**Star][2y] [Py] [safebreach-labs/cachetalk](https://github.com/safebreach-labs/cachetalk) Proof-of-concept program that is able to read and write arbitrary bits using HTTP server-side caching
+- [**31**Star][11m] [Shell] [s-o-t/telegram-3proxy-install](https://github.com/s-o-t/telegram-3proxy-install) Bash script to install socks5 proxy (3proxy) configured for telegram.
+- [**31**Star][29d] [Java] [rub-nds/tls-attacker-burpextension](https://github.com/rub-nds/tls-attacker-burpextension)
+- [**31**Star][2y] [C++] [rprop/cppdll](https://github.com/rprop/cppdll) CppDLL a small tool that will help you generate Cpp Header(.h) and Import Library(.lib) from Dynamic Link Library(.dll)
+- [**31**Star][4m] [PS] [roflsandwich/steam-eop](https://github.com/roflsandwich/steam-eop)
+- [**31**Star][1y] [Py] [righettod/owasp-cs-book](https://github.com/righettod/owasp-cs-book) Provide a utility script to build a PDF book gathering all Cheat Sheets from the project
+- [**31**Star][4m] [Shell] [riftbit/docker-3proxy](https://github.com/riftbit/docker-3proxy) Smallest and Fastest Docker container for fast proxy setup based on 3proxy SOCKS5 proxy
+- [**31**Star][5m] [Py] [raphaelyancey/virtual_fm_band](https://github.com/raphaelyancey/virtual_fm_band)
+- [**31**Star][3y] [randommood/fallacyoffast](https://github.com/randommood/fallacyoffast) Reference materials to this talk
+- [**31**Star][2y] [Go] [pyinx/zk-sniffer](https://github.com/pyinx/zk-sniffer) sniffer and parse zookeeper packet
+- [**31**Star][1m] [C] [programa-stic/pyasmjit](https://github.com/programa-stic/pyasmjit) PyAsmJIT is a Python package for x86_64/ARM assembly code generation and execution.
+- [**31**Star][2y] [C++] [progmboy/kernel_vul_poc](https://github.com/progmboy/kernel_vul_poc)
+- [**31**Star][1y] [Py] [prevade/cloudjack](https://github.com/prevade/cloudjack) Route53/CloudFront Vulnerability Assessment Utility
+- [**31**Star][3y] [Py] [pmsosa/pylogger](https://github.com/pmsosa/pylogger)
+- [**31**Star][4y] [Pascal] [pigrecos/codedeobfuscator](https://github.com/pigrecos/codedeobfuscator) Code Deobfuscator
+- [**31**Star][13d] [PHP] [php-fig-rectified/psr2r-sniffer](https://github.com/php-fig-rectified/psr2r-sniffer) A PSR-2-R code sniffer and code-style auto-correction-tool - including many useful additions
+- [**31**Star][2y] [PHP] [phith0n/ctfdbbuilder](https://github.com/phith0n/ctfdbbuilder) a database query builder for CTFer(出题专用/开发阶段/慎用)
+- [**31**Star][5y] [Shell] [patrickod/docker-tor-hidden-services](https://github.com/patrickod/docker-tor-hidden-services) A simple way of exposing any docker container as a tor hidden service
+- [**31**Star][4y] [C] [patois/brahma](https://github.com/patois/brahma) Brahma - Privilege elevation exploit for Nintendo 3DS
+- [**31**Star][6m] [C] [pathway27/bookr-mod-vita](https://github.com/pathway27/bookr-mod-vita) A book reader for the Vita. Still a work in progress
+- [**31**Star][2y] [HTML] [p3t3rp4rk3r/my_dirty_scripts](https://github.com/p3t3rp4rk3r/my_dirty_scripts) My Dirty Scriptss ..!!!!! Pentest , OSINT , Python ,, Trainings
+- [**31**Star][3y] [osandamalith/apimon](https://github.com/osandamalith/apimon) A simple API monitor for Windbg
+- [**31**Star][4y] [Swift] [openscanner/xguardian](https://github.com/openscanner/xguardian) Security Scanner for OSX
+- [**31**Star][11m] [C] [olehkulykov/libnhr](https://github.com/olehkulykov/libnhr) Tiny Network HTTP Request cross platform C library.
+- [**31**Star][3m] [Go] [nullhypothesis/zoossh](https://github.com/nullhypothesis/zoossh) Parsing library for Tor-specific data formats.
+- [**31**Star][1y] [C++] [notscimmy/libelevate](https://github.com/notscimmy/libelevate) Handle elevation DKOM against ObRegisterCallbacks
+- [**31**Star][1y] [Py] [northernsec/veracracker](https://github.com/northernsec/veracracker) Veracrypt Password Cracker
+- [**31**Star][3y] [Py] [nopdev/binjadock](https://github.com/nopdev/binjadock) An extendable, tabbed, dockable UI widget plugin for BinaryNinja
+- [**31**Star][2y] [Rust] [nikomatsakis/cargo-incremental](https://github.com/nikomatsakis/cargo-incremental) A fuzzing tool for incremental compilation that walks git history
+- [**31**Star][3y] [Go] [netxfly/docker-remote-api-exp](https://github.com/netxfly/docker-remote-api-exp) docker remote api未授权访问的利用代码
+- [**31**Star][1y] [Smarty] [nerdyprojects/hostapd-wpe-extended](https://github.com/nerdyprojects/hostapd-wpe-extended) Modification and tools for using hostapd for rogue AP attacks impersonating WPA-Enterprise networks to steal user credentials
+- [**31**Star][8m] [Py] [needmorecowbell/funnel](https://github.com/needmorecowbell/funnel) Funnel is a lightweight yara-based feed scraper
+- [**31**Star][2y] [C#] [nccgroup/scomdecrypt](https://github.com/nccgroup/scomdecrypt) SCOMDecrypt is a tool to decrypt stored RunAs credentials from SCOM servers
+- [**31**Star][6y] [C] [nbareil/net2pcap](https://github.com/nbareil/net2pcap) Net2PCAP is a simple network-to-pcap capture file for Linux. Its goal is to be as simple as possible to be used in hostile environments
+- [**31**Star][1y] [Go] [naltun/eyes](https://github.com/naltun/eyes)
+- [**31**Star][2y] [HTML] [mthbernardes/heimdall_webserver](https://github.com/mthbernardes/heimdall_webserver) heimdall_webserver:在 *inux 服务器上集中管理有漏洞的包(vulnerables packages)
+- [**31**Star][5m] [JS] [mozfreddyb/webext-firstpartyisolation](https://github.com/mozfreddyb/webext-firstpartyisolation) Enable First Party Isolation Pref
+- [**31**Star][3m] [Py] [moohax/proof-pudding](https://github.com/moohax/proof-pudding) Copy cat model for Proofpoint
+- [**31**Star][9m] [mmarfil/tinfoilhat](https://github.com/mmarfil/tinfoilhat) A list of privacy-respecting alternatives to apps and services that track you around.
+- [**31**Star][5y] [C] [mitrecnd/pynids](https://github.com/mitrecnd/pynids)
+- [**31**Star][6d] [Py] [misp/misp-objects](https://github.com/misp/misp-objects) Definition, description and relationship types of MISP objects
+- [**31**Star][2y] [Java] [mindawei/aliyun-safe-match](https://github.com/mindawei/aliyun-safe-match) Webshell和钓鱼网站检测(阿里云安全算法挑战赛 第29名)
+- [**31**Star][3y] [Go] [mikegleasonjr/devproxy](https://github.com/mikegleasonjr/devproxy) A local development http proxy with hosts spoofing written in Go
+- [**31**Star][2y] [C++] [mgeeky/hevd_kernel_exploit](https://github.com/mgeeky/hevd_kernel_exploit) Exploits pack for the Windows Kernel mode driver HackSysExtremeVulnerableDriver written for educational purposes.
+- [**31**Star][2y] [Py] [medhini/malicious_website_detection](https://github.com/medhini/malicious_website_detection) Uses deep learning and machine learning techniques to detect and classify web pages as spam, malware and phishing
+- [**31**Star][5y] [matthewrudy/fake-code4hk-app](https://github.com/matthewrudy/fake-code4hk-app) Decompiling a fake code4hk / occupy central app distributed via whatsapp
+- [**31**Star][3y] [matthewdunwoody/poshspy](https://github.com/matthewdunwoody/poshspy) POSHSPY backdoor code
+- [**31**Star][4m] [matrix1001/interactive-pwnning-tutorial](https://github.com/matrix1001/interactive-pwnning-tutorial)
+- [**31**Star][8m] [Py] [mathboy7/ctf](https://github.com/mathboy7/ctf) Exploit for hardcore pwnable
+- [**31**Star][3y] [CSS] [malwares/malwares.github.io](https://github.com/malwares/malwares.github.io) malwares src dump
+- [**31**Star][5y] [Py] [madpowah/forensicpcap](https://github.com/madpowah/forensicpcap)
+- [**31**Star][2y] [Py] [lxiaogirl/hack](https://github.com/lxiaogirl/hack) 渗透测试过程中使用的脚本,包括不限于针对特定程序设备的爆破脚本、利用代码,通用的脚本。
+- [**31**Star][7m] [C++] [lr3800/teensy](https://github.com/lr3800/teensy) teensy示例代码
+- [**31**Star][3m] [Shell] [leviathan36/ska](https://github.com/leviathan36/ska) Simple Karma Attack
+- [**31**Star][4y] [Lua] [kost/nmap-nse](https://github.com/kost/nmap-nse) NMAP NSE scripts - (not all)) my contributions before merging to nmap svn
+- [**31**Star][10m] [kiyadesu/android-reversing-challenges](https://github.com/kiyadesu/android-reversing-challenges) there are some CTF challenges or some other things helping improving android reversing skills.
+- [**31**Star][1y] [karelorigin/xss-problems](https://github.com/karelorigin/xss-problems)
+- [**31**Star][3m] [Py] [junorouse/ctf](https://github.com/junorouse/ctf)
+- [**31**Star][4m] [C] [jtalowell/crackme](https://github.com/jtalowell/crackme) Source repository for my introduction to reverse engineering workshop
+- [**31**Star][5y] [Py] [jofpin/fuckshell](https://github.com/jofpin/fuckshell) Simple Webshell Scanner
+- [**31**Star][7m] [Java] [jehy/rutracker-free](https://github.com/jehy/rutracker-free) Android thin client for rutracker.org, using Tor to avoid block.
+- [**31**Star][2y] [C] [jaybosamiya/fuzzing-numpy](https://github.com/jaybosamiya/fuzzing-numpy)
+- [**31**Star][9m] [C++] [isoadam/gina_public](https://github.com/isoadam/gina_public) Prototype of hijacking Windows driver dispatch routines in unmapped discardable sections
+- [**31**Star][6y] [Shell] [installation/rkhunter](https://github.com/installation/rkhunter) Rootkit Hunter install script
+- [**31**Star][2y] [Py] [ihack4falafel/subrosa](https://github.com/ihack4falafel/subrosa) Basic tool to automate backdooring PE files
+- [**31**Star][5y] [idkwim/frooksinatra](https://github.com/idkwim/frooksinatra) POC of sysenter x64 LSTAR MSR hook
+- [**31**Star][1y] [C] [iamgublin/ndis6.30-netmonitor](https://github.com/iamgublin/ndis6.30-netmonitor) NDIS6.30 Filter Library
+- [**31**Star][9d] [C] [hfiref0x/rocall](https://github.com/hfiref0x/rocall) ReactOS x86-32 syscall fuzzer
+- [**31**Star][20d] [C++] [hasherezade/funky_malware_formats](https://github.com/hasherezade/funky_malware_formats) Parsers for custom malware formats ("Funky malware formats")
+- [**31**Star][1y] [Java] [harryfrey/fakegumtree](https://github.com/harryfrey/fakegumtree) Investigating an Android spyware and phishing application.
+- [**31**Star][5y] [Py] [hacksysteam/exploitreliabilitytestingsystem](https://github.com/hacksysteam/exploitreliabilitytestingsystem) Exploit Reliability Testing System
+- [**31**Star][8y] [C] [hackedteam/driver-win64](https://github.com/hackedteam/driver-win64) Windows (64bit) agent driver
+- [**31**Star][1y] [h2hconference/2018](https://github.com/h2hconference/2018) H2HC 2018 Slides/Materials/Presentations
+- [**31**Star][2y] [Go] [guitmz/go-liora](https://github.com/guitmz/go-liora) Probably the first binary (PE/ELF) infector ever created in GoLang.
+- [**31**Star][15d] [Ruby] [gplcc/gplcc](https://github.com/gplcc/gplcc) GPL Cooperation Commitment
+- [**31**Star][6y] [C++] [glmcdona/malm](https://github.com/glmcdona/malm) MALM: Malware Monitor
+- [**31**Star][5y] [Py] [glamrock/stormy](https://github.com/glamrock/stormy) Easy creation of Tor Hidden Services
+- [**31**Star][5y] [Go] [fzerorubigd/go0r](https://github.com/fzerorubigd/go0r) A simple ssh honeypot in golang
+- [**31**Star][2y] [C] [frederic/qemu-exynos-bootrom](https://github.com/frederic/qemu-exynos-bootrom) Emulating Exynos 4210 BootROM in QEMU
+- [**31**Star][6m] [Py] [fr0gger/unprotect](https://github.com/fr0gger/unprotect) Unprotect is a python tool for parsing PE malware and extract evasion techniques.
+- [**31**Star][1y] [C++] [fortiguard-lion/rpcview](https://github.com/fortiguard-lion/rpcview) RpcView is a free tool to explore and decompile Microsoft RPC interfaces
+- [**31**Star][3y] [HLSL] [foonull/halomd](https://github.com/foonull/halomd) New demo version of Halo for the Mac.
+- [**31**Star][7m] [Py] [fkie-cad/luckycat](https://github.com/fkie-cad/luckycat) A distributed fuzzing management framework
+- [**31**Star][2y] [Py] [fist0urs/kerberom](https://github.com/fist0urs/kerberom) Kerberom is a tool aimed to retrieve ARC4-HMAC'ed encrypted Tickets Granting Service (TGS) of accounts having a Service Principal Name (SPN) within an Active Directory
+- [**31**Star][2y] [Py] [ffmancera/pentesting-multitool](https://github.com/ffmancera/pentesting-multitool) Different utility scripts for pentesting and hacking.
+- [**31**Star][8m] [C++] [ez8-co/xpjson](https://github.com/ez8-co/xpjson)
+- [**31**Star][5m] [C++] [etsubu/nanovm](https://github.com/etsubu/nanovm) PoC lightweight x64 register based VM implementation
+- [**31**Star][1y] [Shell] [edoverflow/curate](https://github.com/edoverflow/curate) A tool for fetching archived URLs (to be rewritten in Go).
+- [**31**Star][9m] [JS] [ecleipteon/thalos](https://github.com/ecleipteon/thalos) Secure approach to secure file storage in untrusted environments.
+- [**31**Star][2y] [Visual Basic .NET] [dzzie/myaut_contrib](https://github.com/dzzie/myaut_contrib) mod to myaut2exe decompiler
+- [**31**Star][4y] [dhamuharker/xss-](https://github.com/dhamuharker/xss-) Awesome XSS Payloads
+- [**31**Star][3y] [JS] [desudesutalk/f5stegojs](https://github.com/desudesutalk/f5stegojs) JPEG steganography for browser and node. F5 algo in pure javascript.
+- [**31**Star][3m] [C] [defcon-russia/metasploit-payloads](https://github.com/defcon-russia/metasploit-payloads) Unified repository for different Metasploit Framework payloads
+- [**31**Star][4y] [Lua] [danilabs/scripts-nse](https://github.com/danilabs/scripts-nse) Some NSE scripts to search information from routers
+- [**31**Star][4y] [danielmiessler/ctfsolutiontypes](https://github.com/danielmiessler/ctfsolutiontypes) A collection of CTF solution types, i.e. not solutions to specific CTF challenges, but the general categories that those solutions fall under. Includes CTF solution categories for web, binary, network, crypto, and others. Please contribute!
+- [**31**Star][1y] [JS] [d0g3-lab/i-soon_ctf_2018](https://github.com/D0g3-Lab/i-SOON_CTF_2018) 2018 第一届安洵杯 题目环境/源码/WP
+- [**31**Star][6y] [Java] [cunninglogic/lgpwn](https://github.com/cunninglogic/lgpwn) LG Root Exploit
+- [**31**Star][10m] [C] [ctxis/capemon](https://github.com/ctxis/capemon) CAPE monitor DLLs
+- [**31**Star][4m] [cturt/gameboy_ghidrasleigh](https://github.com/cturt/gameboy_ghidrasleigh) Ghidra Processor support for Nintendo Game Boy
+- [**31**Star][5m] [C] [csandker/inmemoryshellcode](https://github.com/csandker/inmemoryshellcode) A Collection of In-Memory Shellcode Execution Techniques for Windows
+- [**31**Star][1y] [Shell] [cryptolok/ghostinthechaos](https://github.com/cryptolok/ghostinthechaos) Chaotic Crypto Stealth VPN for Anonymity and Untraceable Hacking Attacks with Linux and Android
+- [**31**Star][3y] [Py] [cryptax/fittools](https://github.com/cryptax/fittools) Wristband research tools
+- [**31**Star][1y] [Py] [cisco-talos/casc](https://github.com/cisco-talos/casc) IDA Pro plug-in to generate signatures
+- [**31**Star][5y] [C] [christianpapathanasiou/apache-rootkit](https://github.com/christianpapathanasiou/apache-rootkit) A malicious Apache module with rootkit functionality
+- [**31**Star][5y] [Ruby] [chdorner/epubinfo](https://github.com/chdorner/epubinfo) Extracts metadata information from EPUB files. Supports EPUB2 and EPUB3 formats.
+- [**31**Star][5m] [Py] [charliedean/psexecspray](https://github.com/charliedean/psexecspray) Spray SMB with hashes, Then psexec
+- [**31**Star][2y] [Py] [bwsw/webshell](https://github.com/bwsw/webshell) Docker container which includes Shellinabox and enables SSH connections to arbitrary (not where installed) servers
+- [**31**Star][1y] [Py] [bsvineethiitg/malwaregan](https://github.com/bsvineethiitg/malwaregan) Visualizing malware behavior, and proactive protection using GANs against zero-day attacks.
+- [**31**Star][2y] [Go] [brimstone/rsocks](https://github.com/brimstone/rsocks) Tiny little reverse socks5 client & server
+- [**31**Star][2y] [PHP] [bmitch/codor](https://github.com/bmitch/codor) Custom PHPCS sniffs to find Code Smells
+- [**31**Star][2y] [Shell] [bluscreenofjeff/scripts](https://github.com/bluscreenofjeff/scripts) One-off scripts
+- [**31**Star][2y] [Py] [bltsec/violent-python3](https://github.com/bltsec/violent-python3) Python 3 scripts based on lessons learned from Violent Python: A Cookbook for Hackers, Forensic Analysts, Penetration Testers and Security Engineers by TJ O'Connor.
+- [**31**Star][3m] [C#] [blackvikingpro/aresskit](https://github.com/blackvikingpro/aresskit) Next Generation Remote Administration Tool (RAT)
+- [**31**Star][2y] [Py] [benjamincrom/scrabble](https://github.com/benjamincrom/scrabble) Implements Scrabble. Also allows user to recover all game moves from given board and score list as well as brute-force find best move.
+- [**31**Star][4y] [Py] [basilfx/kippo-extra](https://github.com/basilfx/kippo-extra) Set of extra commands for kippo, the SSH honeypot daemon
+- [**31**Star][3y] [Py] [as0ler/r2clutch](https://github.com/as0ler/r2clutch) r2-based tool to decrypt iOS applications
+- [**31**Star][4y] [Py] [arthaud/formatstring](https://github.com/arthaud/formatstring) Format string exploitation helper
+- [**31**Star][3m] [Perl] [aron-tn/mega-bot](https://github.com/aron-tn/mega-bot) [NEW] : Mega Bot ☣ Scanner & Auto Exploiter
+- [**31**Star][3m] [Py] [argilo/secplus](https://github.com/argilo/secplus) A software implementation of the Security+ system used by garage door openers
+- [**31**Star][7y] [Perl] [appliedsec/forensicscanner](https://github.com/appliedsec/forensicscanner) Forensic Scanner
+- [**31**Star][5m] [Py] [anilyuk/punydomaincheck](https://github.com/anilyuk/punydomaincheck) punydomaincheck:Puny域名检查
+- [**31**Star][7m] [Go] [andrewwebber/kate](https://github.com/andrewwebber/kate) Because Clair needs a friend
+- [**31**Star][2y] [amoghbl1/tor-browser](https://github.com/amoghbl1/tor-browser) Orfox - A Tor Browser for Android
+- [**31**Star][2y] [C] [alienrobotarmy/ctunnel](https://github.com/alienrobotarmy/ctunnel) ctunnel is a proxy and VPN software for tunneling TCP and UDP connections securely
+- [**31**Star][7m] [C] [alex91ar/diamorphine](https://github.com/alex91ar/diamorphine) LKM rootkit for Linux Kernels 2.6.x/3.x/4.x
+- [**31**Star][1y] [KiCad Layout] [5n44p/omega-dock-new](https://github.com/5n44p/omega-dock-new) A dock for Onion omega, omega2 and omega2+. It features: Microusb for power supply, USB host, Ethernet
+- [**31**Star][2y] [PS] [3gstudent/waitfor-persistence](https://github.com/3gstudent/waitfor-persistence) Use Waitfor.exe to maintain persistence
+- [**31**Star][4y] [C] [211217613/c-hacking](https://github.com/211217613/c-hacking) Practice and learning in the world of C RE and exploit analysis
+- [**31**Star][11m] [Py] [0xr0/hediye](https://github.com/0xr0/hediye) Hash Generator & Cracker Online Offline
+- [**31**Star][1y] [Py] [003random/icu](https://github.com/003random/icu) An Extended, Modulair, Host Discovery Framework
+- [**30**Star][10m] [smallstrong0/ss](https://github.com/smallstrong0/ss) I spend many ways to break the GFW,and this is my destination.
+- [**30**Star][4y] [Forth] [benhoyt/third](https://github.com/benhoyt/third) Third, a small Forth compiler for 8086 DOS
+- [**30**Star][11m] [Java] [bestoa/shadowsocks-vertx](https://github.com/bestoa/shadowsocks-vertx) Java port of shadowsocks with vertx.
+- [**30**Star][26d] [fqshare/free-ssr-v2ray-vpn](https://github.com/fqshare/free-ssr-v2ray-vpn) ssr/酸酸乳/v2ray/shadowsocks节点/vpn/机场搬运分享
+- [**30**Star][26d] [Ruby] [stelligent/aws-devsecops-workshop](https://github.com/stelligent/aws-devsecops-workshop) A continuous security pipeline demo for the AWS DevSecOps Workshop.
+- [**30**Star][2y] [Py] [scwuaptx/ais3-2017](https://github.com/scwuaptx/ais3-2017) AIS3 2017 Binary Exploitation
+- [**30**Star][2y] [Java] [amitshekhariitbhu/applock](https://github.com/amitshekhariitbhu/applock) Android Application for app lock
+- [**30**Star][8y] [Py] [hubert3/isniff](https://github.com/hubert3/isniff) SSL man-in-the-middle tool targeting iOS devices < 4.3.5
+- [**30**Star][8m] [offensive-security/kali-linux-preseed](https://github.com/offensive-security/kali-linux-preseed)
+- [**30**Star][3y] [xyntax/waf-bypass](https://github.com/xyntax/waf-bypass)
+- [**30**Star][29d] [C] [angr/binaries](https://github.com/angr/binaries) A repository with binaries for angr tests and examples.
+- [**30**Star][5y] [Perl] [pentestmonkey/yaptest](https://github.com/pentestmonkey/yaptest) Automatically exported from code.google.com/p/yaptest
+- [**30**Star][8m] [C] [pwn20wndstuff/meridianjb](https://github.com/pwn20wndstuff/meridianjb)
+- [**30**Star][6m] [jiansiting/cve-2019-2725](https://github.com/jiansiting/cve-2019-2725) weblogic绕过和wls远程执行
+- [**30**Star][18d] [Py] [kkevsterrr/geneva](https://github.com/kkevsterrr/geneva) client-side censorship evasion engine from the Geneva AI
+- [**30**Star][2y] [C++] [hsluoyz/rmtsvc](https://github.com/hsluoyz/rmtsvc) A web-based remote desktop & control service for Windows.
+- [**30**Star][4m] [starriv/docker-ss](https://github.com/starriv/docker-ss) use the docker to run shadowsocksr
+- [**30**Star][6y] [Py] [acidprime/wirelessconfig](https://github.com/acidprime/wirelessconfig) A 802.1x Python wireless configuration tool with Cocoa wrappers
+- [**30**Star][2y] [Py] [probr/probr-core](https://github.com/probr/probr-core) The core-component for generic WiFi tracking: remote device management, packet capturing, packet storage
+- [**30**Star][29d] [Jupyter Notebook] [tikeswar/kido](https://github.com/tikeswar/kido) White hat hacking passwords using ML
+- [**30**Star][7d] [ds19991999/secbox](https://github.com/ds19991999/secbox)
+- [**30**Star][1m] [Go] [monereum/monereum](https://github.com/monereum/monereum) Monereum Network - A permissioned implementation of Ethereum supporting data privacy
+- [**30**Star][2m] [Shell] [masssmith/smgate](https://github.com/masssmith/smgate) 用树莓派做v2ray透明翻墙网关
+- [**30**Star][5y] [Py] [osirislab/catfish](https://github.com/osirislab/Catfish) Catfish is a tool used ease the process of finding ROP gadgets and creating payloads with them.
+- [**30**Star][1y] [PS] [nsacyber/detect-cve-2017-15361-tpm](https://github.com/nsacyber/Detect-CVE-2017-15361-TPM) Detects Windows and Linux systems with enabled Trusted Platform Modules (TPM) vulnerable to CVE-2017-15361. #nsacyber
+- [**30**Star][3y] [Py] [tacixat/xorshift128plus](https://github.com/TACIXAT/XorShift128Plus) Symbolic execution for the XorShift128+ algorithm.
+- [**30**Star][4y] [C] [intel/jit-spray-poc-for-ksp](https://github.com/intel/jit-spray-poc-for-ksp)
+- [**30**Star][2m] [zoranpandovski/awesome-testing-tools](https://github.com/zoranpandovski/awesome-testing-tools)
+- [**30**Star][4m] [C++] [zodiacon/apisetview](https://github.com/zodiacon/apisetview) API Set Viewer
+- [**30**Star][9m] [Py] [zerosteiner/advancedhttpserver](https://github.com/zerosteiner/advancedhttpserver) Standalone web server built on Python's BaseHTTPServer
+- [**30**Star][2y] [C#] [zacbrown/powershellmethodauditor](https://github.com/zacbrown/powershellmethodauditor) PowerShellMethodAuditor listens to the PowerShell ETW provider and logs PowerShell method invocations.
+- [**30**Star][2y] [ysrc/shelldaddy](https://github.com/ysrc/shelldaddy) 跨平台 webshell 静态扫描器
+- [**30**Star][2d] [Haskell] [ymherklotz/verismith](https://github.com/ymherklotz/verismith) Verilog Fuzzer to test the major simulators and sythesisers by generating random, valid Verilog.
+- [**30**Star][7m] [C++] [xrivendell/pcsgolh](https://github.com/xrivendell/pcsgolh) PCSGOLH - Pointless Counter-Strike: Global Offensive Lua Hooks. A open-source Lua API for CS:GO hacking written in modern C++
+- [**30**Star][2m] [C++] [xoreos/xoreos-tools](https://github.com/xoreos/xoreos-tools) Tools to help the development of xoreos
+- [**30**Star][7y] [JS] [x/twitter-brute-force](https://github.com/x/twitter-brute-force) Brute forces dictionaries for available twitter handles
+- [**30**Star][1y] [Go] [wybiral/reverseproxy](https://github.com/wybiral/reverseproxy) reverseproxy: Go语言编写的加密反向代理
+- [**30**Star][2y] [HTML] [vuetifyjs/simple](https://github.com/vuetifyjs/simple) The simplest possible Vue setup in a single HTML file
+- [**30**Star][3y] [Shell] [vrutkovs/firefox-flatpak](https://github.com/vrutkovs/firefox-flatpak) Flatpak manifest and patches to build Firefox
+- [**30**Star][2y] [C++] [vic4key/cat-driver](https://github.com/vic4key/cat-driver) CatDriver - The Kernel Mode Driver that written in C++. It is an useful driver and has the highest privilege level on the Windows platform. It can be used for Game Hacking and others.
+- [**30**Star][2y] [C#] [valsov/backnet](https://github.com/valsov/backnet) Remote Administration Tool with botnet capability, Windows
+- [**30**Star][1y] [travisfsmith/mitre_attack](https://github.com/travisfsmith/mitre_attack)
+- [**30**Star][5m] [Go] [tomnomnom/rawhttp](https://github.com/tomnomnom/rawhttp) A Go library for making HTTP requests with complete control
+- [**30**Star][2y] [C] [tigerpuma/afl_unicorn](https://github.com/tigerpuma/afl_unicorn)
+- [**30**Star][8m] [C#] [thaisenpm/loader2](https://github.com/thaisenpm/loader2) Nova Hook is an open source C# cheat loader currently built for CS:GO
+- [**30**Star][6m] [PHP] [teamharekaze/harekazectf2019-challenges](https://github.com/teamharekaze/harekazectf2019-challenges) Harekaze CTF 2019 challenges
+- [**30**Star][3y] [Jupyter Notebook] [surajr/machine-learning-approach-for-malware-detection](https://github.com/surajr/machine-learning-approach-for-malware-detection) A Machine Learning approach for classifying a file as Malicious or Legitimate
+- [**30**Star][6y] [spiderlabs/xmlmao](https://github.com/spiderlabs/xmlmao) A configurable XPath/XML injection testbed
+- [**30**Star][6y] [JS] [spiderlabs/modsecurity-status](https://github.com/spiderlabs/modsecurity-status) ModSecurity status
+- [**30**Star][2y] [Py] [spencerdodd/pysploit](https://github.com/spencerdodd/pysploit) Remote exploitation framework written in Python
+- [**30**Star][3y] [Py] [sooshie/packerid](https://github.com/sooshie/packerid)
+- [**30**Star][3y] [Ruby] [skulltech/apk-payload-injector](https://github.com/skulltech/apk-payload-injector) POC for injecting Metasploit payloads on arbitrary APKs
+- [**30**Star][8m] [HTML] [skepticfx/damnvulnerable.me](https://github.com/skepticfx/damnvulnerable.me) A deliberately vulnerable modern day app with lots of DOM related bugs
+- [**30**Star][3y] [C] [simoninns/smallymouse2](https://github.com/simoninns/smallymouse2) Universal USB to quadrature mouse adapter
+- [**30**Star][10m] [Py] [sf197/hashboy-tool](https://github.com/sf197/hashboy-tool) a hash query tool
+- [**30**Star][1y] [Py] [serpilliere/elfesteem](https://github.com/serpilliere/elfesteem) Automatically exported from code.google.com/p/elfesteem
+- [**30**Star][1y] [C++] [sentinel-one/skream](https://github.com/sentinel-one/skream) SentinelOne's KeRnel Exploits Advanced Mitigations
+- [**30**Star][26d] [Shell] [security-onion-solutions/securityonion-setup](https://github.com/security-onion-solutions/securityonion-setup)
+- [**30**Star][9m] [Java] [secdec/attack-surface-detector-zap](https://github.com/secdec/attack-surface-detector-zap) The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters
+- [**30**Star][3m] [Py] [scottmudge/debugautopatch](https://github.com/scottmudge/debugautopatch) Patching system improvement plugin for IDA.
+- [**30**Star][2y] [JS] [rpgeeganage/file-less-ransomware-demo](https://github.com/rpgeeganage/file-less-ransomware-demo) Demonstrate about file-less malware approach using JavaScript
+- [**30**Star][4y] [C++] [rootkitsmm/cvexx-xx](https://github.com/rootkitsmm/cvexx-xx) Windows kernel vulnerability in win32k.sys Driver
+- [**30**Star][3m] [C++] [rokups/hooker](https://github.com/rokups/hooker) Minimalistic hooking library written in C
+- [**30**Star][3y] [Py] [rmtew/peasauce](https://github.com/rmtew/peasauce) Peasauce Interactive Disassembler
+- [**30**Star][2y] [Py] [revengecoming/demonhunter](https://github.com/revengecoming/demonhunter) Distributed Honeypot
+- [**30**Star][2m] [Shell] [putsi/privatecollaborator](https://github.com/putsi/privatecollaborator) A script for installing private Burp Collaborator with free Let's Encrypt SSL-certificate
+- [**30**Star][2y] [C] [psxdev/ps4sdk](https://github.com/psxdev/ps4sdk) Modular open source ps4 sdk with user and kernel space support
+- [**30**Star][1y] [C++] [psmitty7373/eif](https://github.com/psmitty7373/eif) Evil Reflective DLL Injection Finder
+- [**30**Star][2y] [Shell] [pnptutorials/pnp-portablehackingmachine](https://github.com/pnptutorials/pnp-portablehackingmachine) This script will convert your Raspberry Pi 3 into a portable hacking machine.
+- [**30**Star][7m] [Java] [pnfsoftware/jeb2-plugin-oat](https://github.com/pnfsoftware/jeb2-plugin-oat) Android OAT Plugin for JEB
+- [**30**Star][2y] [HTML] [plaperdr/fprandom](https://github.com/plaperdr/fprandom) A browser to counter advanced fingerprinting techniques
+- [**30**Star][1y] [pinktangent/endpoint-testing](https://github.com/pinktangent/endpoint-testing) Repository for Endpoint Security Testing
+- [**30**Star][5m] [C] [pentesteracademy/linux-rootkits-red-blue-teams](https://github.com/pentesteracademy/linux-rootkits-red-blue-teams) Linux Rootkits (4.x Kernel)
+- [**30**Star][5m] [C++] [paragon-software-group/paragon_apfs_sdk_ce](https://github.com/paragon-software-group/paragon_apfs_sdk_ce) Paragon APFS SDK Free
+- [**30**Star][1y] [C++] [owodelta/coilgun](https://github.com/owodelta/coilgun) Direct WinAPI calling
+- [**30**Star][2y] [PHP] [opt-oss/ng-netms](https://github.com/opt-oss/ng-netms) NG-NetMS is a new end-to-end network management platform for your Linux servers, Cisco, Juniper, HP and Extreme routers, switches and firewalls.
+- [**30**Star][4y] [Shell] [opentoallctf/ctf-tools](https://github.com/opentoallctf/ctf-tools) Some setup scripts for security research tools.
+- [**30**Star][11m] [HCL] [opendevsecops/terraform-aws-scanner](https://github.com/opendevsecops/terraform-aws-scanner) Terraform module which provides easy to configure AWS environment for running automated security scanning solutions at scheduled intervals.
+- [**30**Star][1y] [C++] [ntraiseharderror/unrunpe](https://github.com/ntraiseharderror/unrunpe) PoC for detecting and dumping process hollowing code injection
+- [**30**Star][3y] [nextco/android-decompiler](https://github.com/nextco/android-decompiler) A hight quality list of tools to reverse engineering code from android.
+- [**30**Star][4y] [neu5ron/malware-traffic-analysis-pcaps](https://github.com/neu5ron/malware-traffic-analysis-pcaps) malware-traffic-analysis.net PCAPs repository.
+- [**30**Star][5y] [Py] [mstsec/mst](https://github.com/mstsec/mst) A Platform for Web Pentest From China
+- [**30**Star][1y] [Tcl] [mohemiv/tcltools](https://github.com/mohemiv/tcltools) Сollection of TCL scripts for Cisco IOS penetration testing
+- [**30**Star][2y] [C#] [modzero/mod0umleitung](https://github.com/modzero/mod0umleitung) modzero DNS Masquerading Server for Windows
+- [**30**Star][7m] [Zeek] [mitre-attack/bzar](https://github.com/mitre-attack/bzar) A set of Zeek scripts to detect ATT&CK techniques.
+- [**30**Star][3y] [mhaggis/app_splunk_sysmon_hunter](https://github.com/mhaggis/app_splunk_sysmon_hunter) Splunk App to assist Sysmon Threat Hunting
+- [**30**Star][3y] [Py] [mhagger/diff-slider-tools](https://github.com/mhagger/diff-slider-tools) Tools for experimenting diff "slider" heuristics
+- [**30**Star][6y] [Py] [meatballs1/burp_jsbeautifier](https://github.com/meatballs1/burp_jsbeautifier) js-beautifier extension for Burp Suite
+- [**30**Star][4y] [markofu/hackeire](https://github.com/markofu/hackeire) Challenges, notes & other stuff from the HackEire CTF.....
+- [**30**Star][12m] [C++] [malcomvetter/dnscache](https://github.com/malcomvetter/dnscache)
+- [**30**Star][1y] [CSS] [m6a-uds/dvca](https://github.com/m6a-uds/dvca) Damn Vulnerable Cloud Application
+- [**30**Star][3y] [Py] [loggerhead/shadowsocks](https://github.com/loggerhead/shadowsocks)
+- [**30**Star][5m] [Py] [lionheart/pwnedpasswords](https://github.com/lionheart/pwnedpasswords) A Python Library and CLI for the Pwned Passwords v2 API
+- [**30**Star][2y] [Py] [lanrat/spiderwho](https://github.com/lanrat/spiderwho) A very fast whois crawler
+- [**30**Star][2m] [C++] [klaasnicolaas/ha_nfc_scanner](https://github.com/klaasnicolaas/ha_nfc_scanner) Scan
+- [**30**Star][6m] [HTML] [kkthxbye-code/csgo_bugs](https://github.com/kkthxbye-code/csgo_bugs) Random CSGO stuff
+- [**30**Star][2y] [C++] [kingron/s](https://github.com/kingron/s) The simple, fast, powerful SYN/TCP port scanner source code
+- [**30**Star][5y] [C] [karottc/linux-virus](https://github.com/karottc/linux-virus) A simple virus of linux. It can get root and destory your system.(这是一个简单的linux下的病毒,它仅能得到root权限和感染文件并进行破坏)
+- [**30**Star][6y] [PHP] [joostvanveen/php-security-pitfalls](https://github.com/joostvanveen/php-security-pitfalls) Code repository for Tutsplus course PHP Security Pitfalls
+- [**30**Star][3y] [Shell] [jlevitsk/lazykali](https://github.com/jlevitsk/lazykali) A refresh of LazyKali which simplifies install of tools and configuration. Original author appears missing.
+- [**30**Star][2y] [PHP] [jhaddix/seclists](https://github.com/jhaddix/seclists) SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.
+- [**30**Star][5m] [Java] [jenly1314/baseurlmanager](https://github.com/jenly1314/baseurlmanager)
+- [**30**Star][7m] [Py] [jaky5155/cve-2019-0708-exp](https://github.com/jaky5155/cve-2019-0708-exp)
+- [**30**Star][3y] [Py] [itsreallynick/office-crackros](https://github.com/itsreallynick/office-crackros) Crack your macros like the math pros.
+- [**30**Star][7m] [PS] [improsec/get-badpasswords](https://github.com/improsec/get-badpasswords) Get insights into the actual strength and quality of passwords in Active Directory.
+- [**30**Star][3y] [Py] [immortal3/hidden-eye](https://github.com/immortal3/hidden-eye) Hide data into Picture
+- [**30**Star][3d] [Py] [ickerwx/pattern](https://github.com/ickerwx/pattern) Python implementation of Metasploit's pattern_create/pattern_offset.
+- [**30**Star][3y] [HTML] [h2hconference/2016](https://github.com/h2hconference/2016) H2HC 2016 Slides/Materials/Presentations
+- [**30**Star][4y] [PHP] [fuzzdb-project/webshell](https://github.com/fuzzdb-project/webshell) This is a webshell open source project
+- [**30**Star][2y] [Py] [fideliscyber/data_mining](https://github.com/fideliscyber/data_mining) Data Mining Virus Total for threat feed building
+- [**30**Star][4y] [PHP] [ezyang/csrf-magic](https://github.com/ezyang/csrf-magic) Automatic CSRF protection for PHP applications
+- [**30**Star][2y] [C++] [exorxw/kylin-llvm-obfuscator](https://github.com/exorxw/kylin-llvm-obfuscator) based on llvm 5.0.1 release with ollvm
+- [**30**Star][6m] [JS] [eshengsky/noginx](https://github.com/eshengsky/noginx) High performance HTTP and reverse proxy server based on Node.js. 基于 Node.js 的高性能 HTTP 及反向代理服务器,类似nginx。
+- [**30**Star][6y] [PS] [enigma0x3/powershell-c2](https://github.com/enigma0x3/powershell-c2)
+- [**30**Star][3y] [Py] [endgameinc/instegogram](https://github.com/endgameinc/instegogram)
+- [**30**Star][3y] [Py] [emersonelectricco/boomerang](https://github.com/emersonelectricco/boomerang) A tool designed for consistent and safe capture of off network web resources.
+- [**30**Star][4y] [PHP] [echo-devim/xbackdoor](https://github.com/echo-devim/xbackdoor) A tool for the persistent XSS exploitation with a focus for mobile web browsers
+- [**30**Star][11m] [Shell] [ebelties/domainwatch](https://github.com/ebelties/domainwatch) DomainWatch allows everyone to monitor domains for possible take-overs.
+- [**30**Star][1y] [dwestgard/threat_hunting_tables](https://github.com/dwestgard/threat_hunting_tables) Theat hunting notes in flat file format and mapped to MITRE's ATT&CK IDs
+- [**30**Star][2y] [Py] [dqi/ctf_writeup](https://github.com/dqi/ctf_writeup)
+- [**30**Star][4m] [C] [dhn/exploits](https://github.com/dhn/exploits) Some personal exploits/pocs
+- [**30**Star][2y] [deroko/payloadrestrictions](https://github.com/deroko/payloadrestrictions) EMET 集成到 Win10Insider 之后改名为 PayloadRestrictions,文章分析了 PayloadRestrictions.dll 的加载过程
+- [**30**Star][1y] [PS] [demonsec666/security-toolkit](https://github.com/demonsec666/security-toolkit) Security-Toolkit
+- [**30**Star][3y] [Py] [deadbits/shells](https://github.com/deadbits/shells) collection of useful shells for penetration tests
+- [**30**Star][4y] [Py] [danilovazb/sawef](https://github.com/danilovazb/sawef) Send Attack Web Forms
+- [**30**Star][3m] [C] [daft-freak/sdl-emscripten](https://github.com/daft-freak/sdl-emscripten) SDL2 emscripten port, non-upstreamed changes
+- [**30**Star][4m] [Py] [dado3212/polldaddyhack](https://github.com/dado3212/polldaddyhack) Exploit PollDaddy polls
+- [**30**Star][5y] [PS] [curi0usjack/activedirectory](https://github.com/curi0usjack/activedirectory) This script runs several security checks and makes modifications (with your permission) to your Active Directory domain to improve it's security posture.
+- [**30**Star][4y] [comeforu2012/fq_faq](https://github.com/comeforu2012/fq_faq) 翻墙常见问题
+- [**30**Star][1y] [C++] [certt/1000base](https://github.com/certt/1000base) CS:GO cheat base
+- [**30**Star][4y] [Py] [carstein/burp-extensions](https://github.com/carstein/burp-extensions) Automatically exported from code.google.com/p/burp-extensions
+- [**30**Star][3y] [Py] [bshastry/afl-sancov](https://github.com/bshastry/afl-sancov) AFL coverage tool using Clang SanitizerCoverage
+- [**30**Star][2y] [C++] [briterator/drpdb](https://github.com/briterator/drpdb) Convert from Microsoft PDB format into a MySQL database
+- [**30**Star][3y] [CSS] [botherder/flexikiller](https://github.com/botherder/flexikiller) flexikiller:移除FlexiSpy 木马(Windows/Mac)
+- [**30**Star][2y] [Py] [blackmathit/2017-11882_generator](https://github.com/blackmathit/2017-11882_generator) CVE-2017-11882 File Generator PoC
+- [**30**Star][2y] [biprodeep/awesome-ml-for-cybersecurity](https://github.com/biprodeep/awesome-ml-for-cybersecurity)
+- [**30**Star][3y] [Py] [bannsec/pythaw](https://github.com/bannsec/pythaw) Python Application to Reverse Freezing
+- [**30**Star][1y] [Py] [bandrel/ocyara](https://github.com/bandrel/ocyara) Performs OCR on image files and scans them for matches to YARA rules
+- [**30**Star][9d] [Java] [azure/azure-cosmosdb-java](https://github.com/azure/azure-cosmosdb-java) Java Async SDK for SQL API of Azure Cosmos DB
+- [**30**Star][19d] [C++] [ayuto/dynamichooks](https://github.com/ayuto/dynamichooks) A C++ library to create function hooks dynamically, so you can easily embed it into other programming languages..
+- [**30**Star][1y] [Py] [aurainfosec/xss_payloads](https://github.com/aurainfosec/xss_payloads) XSS payloads for edge cases
+- [**30**Star][2y] [Py] [aurainfosec/burp-multi-browser-highlighting](https://github.com/aurainfosec/burp-multi-browser-highlighting) Highlight Burp proxy requests made by different browsers
+- [**30**Star][4m] [Shell] [armourbird/csf](https://github.com/armourbird/csf) ArmourBird CSF - Container Security Framework
+- [**30**Star][2y] [Py] [andrewilyas/ens-adv-train-attack](https://github.com/andrewilyas/ens-adv-train-attack) Circumventing the defense in "Ensemble Adversarial Training: Attacks and Defenses"
+- [**30**Star][11m] [PHP] [alemalakra/xwaf](https://github.com/alemalakra/xwaf) xWAF 3.0 - Free Web Application Firewall, Open-Source.
+- [**30**Star][1y] [JS] [akalankauk/foxss-xss-penetration-testing-tool](https://github.com/akalankauk/foxss-xss-penetration-testing-tool) Foxss is a simple php based penetration Testing Tool.Currently it will help to find XSS vulnerability in websites.
+- [**30**Star][1y] [Java] [airman604/jdbc-backdoor](https://github.com/airman604/jdbc-backdoor) A fake JDBC driver that allows OS command execution.
+- [**30**Star][4y] [HTML] [a0xnirudh/webxploiter](https://github.com/a0xnirudh/webxploiter) WebXploiter - An OWASP Top 10 Security scanner !
+- [**30**Star][12m] [PHP] [7hxz233/ctf](https://github.com/7hxz233/ctf) This repo stores all challenges and writeups of CTFs we have participated in
+- [**30**Star][3y] [Py] [5z1punch/oracle_java_shell_client](https://github.com/5z1punch/oracle_java_shell_client) oracle 10g sys权限通过java执行命令获得一个非交互shell的客户端,通常用于正向连接
+- [**30**Star][8m] [Py] [3xp10it/xupload](https://github.com/3xp10it/xupload) A tool for automatically testing whether the upload function can upload webshell
+- [**30**Star][1y] [JS] [1lastbr3ath/drmine](https://github.com/1lastbr3ath/drmine) Dr. Mine is a node script written to aid automatic detection of in-browser cryptojacking.
+- [**30**Star][4y] [C++] [0xddaa/pin](https://github.com/0xddaa/pin) Use Intel Pin tools to analysis binary.
+- [**30**Star][4y] [0pc0defr/yararules](https://github.com/0pc0defr/yararules) Multiple rules for yara-project for detect compiler/packer/protector
+- [**29**Star][11m] [C++] [pushkalkatara/darknet_ros](https://github.com/pushkalkatara/darknet_ros) Robotics Operating System Package for Yolo v3 based on darknet with optimized tracking using Kalman Filter and Optical Flow.
+- [**29**Star][2y] [Py] [sevro/security-utilities](https://github.com/sevro/security-utilities) Offensive Security Certified Profesional (OSCP) course scripts, some have been generalized
+- [**29**Star][6m] [Java] [portswigger/scan-check-builder](https://github.com/portswigger/scan-check-builder) Burp Bounty is a extension of Burp Suite that improve an active and passive scanner by yourself. This extension requires Burp Suite Pro.
+- [**29**Star][] [Shell] [m507/kali-tx](https://github.com/m507/kali-tx) Customized Kali Linux - Ansible playbook
+- [**29**Star][5d] [Py] [skybulk/bin2sc](https://github.com/skybulk/bin2sc) Binary to shellcode
+- [**29**Star][2y] [Shell] [dreadl0ck/golang-libs](https://github.com/dreadl0ck/golang-libs) List of awesome golang repositories and useful resources for development
+- [**29**Star][1m] [fs0c131y/conpresentations](https://github.com/fs0c131y/conpresentations) Slide decks from my conference presentations
+- [**29**Star][4y] [JS] [infosec-au/phishjs](https://github.com/infosec-au/phishjs) Abusing trust boundaries to deliver effective phishing payloads
+- [**29**Star][3y] [JS] [mandatoryprogrammer/pers](https://github.com/mandatoryprogrammer/pers) A passive scanning tool for finding expired domain vulnerabilities while you browse.
+- [**29**Star][2m] [C] [iaik/transientfail](https://github.com/iaik/transientfail) Website and PoC collection for transient execution attacks
+- [**29**Star][1y] [PS] [denandz/secretserversecretstealer](https://github.com/denandz/secretserversecretstealer) Powershell script that decrypts the data stored within a Thycotic Secret Server
+- [**29**Star][2m] [C#] [uknowsec/sharpeventlog](https://github.com/uknowsec/sharpeventlog) c# 读取登录过本机的登录失败或登录成功(4624,4625)的所有计算机信息,在内网渗透中快速定位运维管理人员。
+- [**29**Star][1y] [Java] [guardianproject/pluto](https://github.com/guardianproject/pluto) Pluggable Library (for) Using Traffic Obfuscation: DEPRECATED - SEE LINK FOR NEW PROJECT
+- [**29**Star][7y] [PHP] [guelfoweb/wp-waf](https://github.com/guelfoweb/wp-waf) [PHP] WordPress Application Firewall
+- [**29**Star][2m] [al0ne/suricata_optimize](https://github.com/al0ne/suricata_optimize) Suricata安装部署&丢包优化&性能调优&规则调整&Pfring设置
+- [**29**Star][4y] [Py] [yinghuocho/ghttproxy](https://github.com/yinghuocho/ghttproxy) a gevent based HTTP/HTTPS proxy with SOCKS5 forwarding.
+- [**29**Star][3y] [C] [nicehash/sgminer-gm](https://github.com/nicehash/sgminer-gm) A multi-algo GPU miner from genesismining
+- [**29**Star][30d] [Py] [certtools/malware_name_mapping](https://github.com/certtools/malware_name_mapping) A mapping of used malware names to commonly known family names
+- [**29**Star][6m] [TS] [igio90/frida-onload](https://github.com/igio90/frida-onload) Frida module to hook module initializations on android
+- [**29**Star][3m] [Py] [osirislab/csaw-ctf-2019-quals](https://github.com/osirislab/csaw-ctf-2019-quals) Challenge Repository for CSAW CTF Quals 2019
+- [**29**Star][2m] [Shell] [trojan-gfw/trojan-quickstart](https://github.com/trojan-gfw/trojan-quickstart) A simple installation script for trojan server.
+- [**29**Star][1m] [Py] [lunixbochs/mpwn](https://github.com/lunixbochs/mpwn) single file ctf/exploit client library - python3, type annotated
+- [**29**Star][9m] [Shell] [shadowsocks/libev](https://github.com/shadowsocks/libev) A fork of libev
+- [**29**Star][4y] [PHP] [wpscanteam/vulnerablewordpress](https://github.com/wpscanteam/vulnerablewordpress)
+- [**29**Star][1y] [C] [stevemk14ebr/bf4-atombot](https://github.com/stevemk14ebr/bf4-atombot) Latest version of my personal BF4 Hack
+- [**29**Star][2y] [JS] [javascript-obfuscator/obfuscator-loader](https://github.com/javascript-obfuscator/obfuscator-loader) A webpack loader for obfuscating single modules using javascript-obfuscator
+- [**29**Star][1y] [C++] [stealth/libusipp](https://github.com/stealth/libusipp) unix socket interface for C++ raw IP/IP6/UDP/TCP, Layer2 etc. framework
+- [**29**Star][26d] [Py] [charlie-belmer/subdomain_recon](https://github.com/charlie-belmer/subdomain_recon) A subdomain reconnaissance scanner
+- [**29**Star][2d] [Shell] [honwen/openwrt-dnsmasq-extra](https://github.com/honwen/openwrt-dnsmasq-extra) Anti-{Pollution, ADs}-DNS for OpenWrt/LEDE
+- [**29**Star][1y] [HTML] [evilbotnet/openpimap](https://github.com/evilbotnet/openpimap) Python3 and Raspberry Pi based NetFlow Traffic Analysis leveraging Shodan's API, Twilio, GeoIP, and Folium to produce interactive maps and threat intelligence data.
+- [**29**Star][4y] [PS] [ahhh/wifi_trojans](https://github.com/ahhh/wifi_trojans) A collection of wireless based bind and reverse connect shells for penetration testers to use in demonstrating persistence to a network via rouge access points.
+- [**29**Star][3y] [Py] [6e726d/pywiwi](https://github.com/6e726d/pywiwi) Python Windows Wifi
+- [**29**Star][9d] [Py] [muteb/hoarder](https://github.com/muteb/hoarder) This script is made to collect the most valiable artifacts for foreniscs or incident reponse investigation rather than imaging the whole har drive.
+- [**29**Star][2d] [Py] [pnfsoftware/jeb-golang-analyzer](https://github.com/pnfsoftware/jeb-golang-analyzer) JEB scripts for Golang executables analysis
+- [**29**Star][12m] [Vim script] [fabi1cazenave/suckless.vim](https://github.com/fabi1cazenave/suckless.vim) Tiling window management that sucks less. Inpired by wmii and i3.
+- [**29**Star][8y] [sektioneins/.ipa-pie-scanner](https://github.com/sektioneins/.ipa-PIE-Scanner) Scans iPhone/iPad/iPod applications for PIE flags
+- [**29**Star][6m] [JS] [websecurity-quiz/websecurity-quiz.github.io](https://github.com/websecurity-quiz/websecurity-quiz.github.io) Test your Web Security knowledge with OWASP exam questions.
+- [**29**Star][11m] [xymnal/wce](https://github.com/xymnal/wce) Windows Credentials Editor v1.3beta
+- [**29**Star][3y] [Py] [calebstewart/peach](https://github.com/calebstewart/peach) Simple vulnerability scanning framework
+- [**29**Star][10d] [Java] [ztgreat/proxy](https://github.com/ztgreat/proxy)
+- [**29**Star][4m] [Py] [zkclown/getpwd](https://github.com/zkclown/getpwd) It's a tool which generate a dictionary from a csv containing personals informations. Generate all common passwords based on perso info. (leet transformations and combinatory processing)
+- [**29**Star][3y] [C] [zhuhuibeishadiao/minivtx64](https://github.com/zhuhuibeishadiao/minivtx64) Intel Virtualization Technology demo
+- [**29**Star][11m] [PHP] [zendframework/zendxml](https://github.com/zendframework/zendxml) Utility library for XML usage and best practices in PHP
+- [**29**Star][3y] [Java] [yolosec/ysoserial](https://github.com/yolosec/ysoserial) A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
+- [**29**Star][4y] [Py] [xyntax/zzone-transfer](https://github.com/xyntax/zzone-transfer) DNS域传送漏洞探测工具。多线程,批量探测,漏洞利用,简单网页采集。(DNS zone transfer vulnerability Vulnerability detection tool, support multithreading,batch scanning and vulnerability exploitation)
+- [**29**Star][3y] [Py] [x64dbg/x64dbgbinja](https://github.com/x64dbg/x64dbgbinja) Official x64dbg plugin for Binary Ninja
+- [**29**Star][2y] [C] [wangyinuo/memdump](https://github.com/wangyinuo/memdump) android下的内存dump工具,可以dump so文件
+- [**29**Star][2y] [virqdroid/android_malware](https://github.com/virqdroid/android_malware)
+- [**29**Star][8m] [Batchfile] [vanhauser-thc/audit_scripts](https://github.com/vanhauser-thc/audit_scripts) Scripts to gather system configuration information for offline/remote auditing
+- [**29**Star][1y] [Java] [v-p-b/oracle_forms](https://github.com/v-p-b/oracle_forms) Testing tools for Oracle Forms
+- [**29**Star][3m] [C++] [usnistgov/nfiq2](https://github.com/usnistgov/nfiq2) Biometric fingerprint quality assessment tool
+- [**29**Star][12m] [troyhunt/hibp-stickers](https://github.com/troyhunt/hibp-stickers) This is artwork that can be used to create stickers for Have I Been Pwned
+- [**29**Star][2y] [Py] [tribalchicken/volatility-bitlocker](https://github.com/tribalchicken/volatility-bitlocker) Volatility plugin to extract BitLocker Full Volume Encryption Keys (FVEK)
+- [**29**Star][3y] [Shell] [tjunxiang92/android-vulnerabilities](https://github.com/tjunxiang92/android-vulnerabilities) Covers Top 10 OWASP Mobile Vulnerabilities
+- [**29**Star][2y] [Lua] [tinywan/openresty-project-v0.01](https://github.com/tinywan/openresty-project-v0.01)
+- [**29**Star][3y] [HTML] [theori-io/jscript9-typedarray-cfg](https://github.com/theori-io/jscript9-typedarray-cfg) Proof-of-Concept exploit for jscript9 bug (MS16-063) with CFG Bypass
+- [**29**Star][4y] [techbliss/yara_mailware_quick_menu_scanner](https://github.com/techbliss/yara_mailware_quick_menu_scanner) Work Fast With the pattern matching swiss knife for malware researchers.
+- [**29**Star][1y] [C++] [tai7sy/be_fuck](https://github.com/tai7sy/be_fuck) BattlEye Emulator
+- [**29**Star][6y] [Py] [syworks/wpa-bruteforcer](https://github.com/syworks/wpa-bruteforcer) Attacking WPA/WPA encrypted access point without client.
+- [**29**Star][3y] [sycloversecurity/papers](https://github.com/sycloversecurity/papers) Syclover PPT
+- [**29**Star][3y] [C++] [stormshield/beholder-win32](https://github.com/stormshield/beholder-win32) A sample on how to inject a DLL from a kernel driver
+- [**29**Star][1y] [slowmist/ontology-triones-service-node-security-checklist](https://github.com/slowmist/ontology-triones-service-node-security-checklist) Ontology Triones Service Node security checklist(本体北斗共识集群安全执行指南)
+- [**29**Star][3y] [PHP] [slifty/tvarchive-duplitron](https://github.com/slifty/tvarchive-duplitron)
+- [**29**Star][1y] [Py] [skelsec/windows_ad_dos_poc](https://github.com/skelsec/windows_ad_dos_poc) PoC code for crashing windows active directory
+- [**29**Star][11m] [Go] [shift/domain_exporter](https://github.com/shift/domain_exporter) Prometheus WHOIS domain details exporter.
+- [**29**Star][3y] [PS] [sekirkity/seeclrly](https://github.com/sekirkity/seeclrly) Fileless SQL Server CLR-based Custom Stored Procedure Command Execution
+- [**29**Star][3y] [C] [securifera/cowcron](https://github.com/securifera/cowcron) Cronbased Dirty Cow Exploit
+- [**29**Star][3m] [Py] [sdnewhop/sdwan-harvester](https://github.com/sdnewhop/sdwan-harvester)
+- [**29**Star][6m] [Assembly] [sdasgup3/binary-decompilation](https://github.com/sdasgup3/binary-decompilation) Extracting high level semantic information from binary code
+- [**29**Star][3y] [Py] [scubsrgroup/lectures-a-weekly-information-security-knowledge-lecture-hall](https://github.com/scubsrgroup/lectures-a-weekly-information-security-knowledge-lecture-hall) “每周一讲,信息安全基础知识讲堂”由四川大学信息安全研究所漏洞挖掘和利用组同学共同创建,通过每组员每周一讲的形式展开,主要涉及信息安全的基础知识,包括windows安全、移动安全等,此外还对通过该平台对外发布一些小组的研究成果!通过知识讲座一方面对新同学起到引导作用,另一方面则是漏洞挖掘与利用研究组同学信息安全研究经验和知识的积累!
+- [**29**Star][4y] [HTML] [schmalle/nodepot](https://github.com/schmalle/nodepot) A nodejs web application honeypot
+- [**29**Star][6y] [CSS] [savon-noir/nmap-webgui](https://github.com/savon-noir/nmap-webgui) Basic gui to run and display nmap scan results. Just a POC so far.
+- [**29**Star][6y] [C#] [rvazarkar/antipwny](https://github.com/rvazarkar/antipwny) A host based IDS written in C# Targetted at Metasploit
+- [**29**Star][4m] [Py] [rot42/gnuk-extractor](https://github.com/rot42/gnuk-extractor) Extract PGP secret keys from Gnuk / Nitrokey Start firmwares
+- [**29**Star][7m] [rockmelodies/cve-2019-0708-exploit](https://github.com/rockmelodies/cve-2019-0708-exploit) Using CVE-2019-0708 to Locally Promote Privileges in Windows 10 System
+- [**29**Star][2y] [JS] [rocketshipapps/hardenedpaste](https://github.com/rocketshipapps/hardenedpaste) [Retired] Hardened Paste is a browser extension that prevents the “pastejacking” exploit.
+- [**29**Star][1y] [Py] [ridter/hackredis](https://github.com/ridter/hackredis)
+- [**29**Star][1y] [redteamwing/cobaltstrike_wiki](https://github.com/redteamwing/cobaltstrike_wiki) Cobalt Strike 3.12中文文档
+- [**29**Star][4m] [Py] [razorpay/alohomora](https://github.com/razorpay/alohomora) alohomora is razorpay's secret distribution system
+- [**29**Star][4y] [rafiot/hackedteamcerts](https://github.com/rafiot/hackedteamcerts) A bunch of certificates from the Hacking Team leak
+- [**29**Star][4y] [Makefile] [radicallyopensecurity/netaidkit](https://github.com/radicallyopensecurity/netaidkit) Standalone VPN/Tor WiFi router for journalists and activists
+- [**29**Star][7m] [JS] [r00tse7en/googlehackingtool](https://github.com/r00tse7en/googlehackingtool) 在线Google Hacking 小工具
+- [**29**Star][11m] [Py] [parasimpaticki/sandcastle](https://github.com/parasimpaticki/sandcastle)
+- [**29**Star][12m] [opensourcehelpcommunity/contributingtomyproject](https://github.com/opensourcehelpcommunity/contributingtomyproject) Writeup from maintainers, admins, contributors on how someone can get started with their project.
+- [**29**Star][22d] [TS] [oclif/kaomoji](https://github.com/oclif/kaomoji) A simple example CLI that generates kaomoji (
+- [**29**Star][3m] [Py] [obscuritylabs/pefixup](https://github.com/obscuritylabs/pefixup) PE File Blessing - To continue or not to continue
+- [**29**Star][2y] [C++] [nuand/kalibrate-bladerf](https://github.com/nuand/kalibrate-bladerf) kalibrate-bladeRF
+- [**29**Star][1y] [C++] [notscimmy/libinject](https://github.com/notscimmy/libinject) Currently supports injecting signed/unsigned DLLs in 64-bit processes
+- [**29**Star][1y] [Go] [netxfly/docker_ssh_honeypot](https://github.com/netxfly/docker_ssh_honeypot) 安全开发教学 - 用Docker制作一个高交互ssh蜜罐
+- [**29**Star][2y] [C++] [namreeb/wowned](https://github.com/namreeb/wowned) Authentication bypass for outdated WoW emulation authentication servers
+- [**29**Star][4y] [Ruby] [nahamsec/cmsfuzz](https://github.com/nahamsec/cmsfuzz)
+- [**29**Star][9m] [Py] [mzfr/lswriteups](https://github.com/mzfr/lswriteups) CLI tool to get the links of original writeups from ctftime.org
+- [**29**Star][3y] [ObjC] [mtigas/iobfs](https://github.com/mtigas/iobfs) Building obfs4proxy for Tor-enabled iOS apps.
+- [**29**Star][9m] [C] [mrmacete/r2-ios-kernelcache](https://github.com/mrmacete/r2-ios-kernelcache) Radare2 plugin to parse modern iOS 64-bit kernel caches
+- [**29**Star][1y] [Assembly] [mrfearless/apiinfo-plugin-x86](https://github.com/mrfearless/apiinfo-plugin-x86) APIInfo Plugin (x86) - A Plugin For x64dbg
+- [**29**Star][8m] [Py] [mosuan/auditdpy](https://github.com/mosuan/auditdpy) !!!不建议使用了,可以使用AuditBeat!!! Linux服务器命令监控辅助脚本,ElasticSearch + Logstash + Kibana + Redis + Auditd
+- [**29**Star][2y] [C++] [mogongtech/ransomdetection](https://github.com/mogongtech/ransomdetection) 基于行为的Ransomware检测原型
+- [**29**Star][4y] [C] [mncoppola/stringipc](https://github.com/mncoppola/stringipc) CSAW CTF 2015 Linux kernel exploitation challenge
+- [**29**Star][2m] [C] [mitrecnd/htpy](https://github.com/mitrecnd/htpy) Python bindings to libhtp
+- [**29**Star][2y] [misterch0c/solidlity-vulnerable](https://github.com/misterch0c/solidlity-vulnerable) Vulnerable smart contracts
+- [**29**Star][12m] [Java] [mhatta/orchid](https://github.com/mhatta/orchid) A Tor client implementation and library written in pure Java
+- [**29**Star][4m] [JS] [mephistools/diablo2-protocol](https://github.com/mephistools/diablo2-protocol) Diablo 2 network protocol
+- [**29**Star][5m] [C++] [marakew/syser](https://github.com/marakew/syser) syser debugger x32/x64 ring3
+- [**29**Star][16d] [Shell] [mainframed/enumeration](https://github.com/mainframed/enumeration) PoC REXX Script to Help with z/OS System enumeration via OMVS/TSO/JCL.
+- [**29**Star][2y] [Go] [madnikulin50/gordp](https://github.com/madnikulin50/gordp) Rdp client on pure GoLang
+- [**29**Star][2y] [Py] [luffin/cve-2017-10271](https://github.com/luffin/cve-2017-10271) CVE-2017-10271 POC
+- [**29**Star][6m] [Java] [ludovicianul/geolog](https://github.com/ludovicianul/geolog) Geolocation for SSH brute force attacks
+- [**29**Star][1m] [Py] [kudelskisecurity/fumblechain](https://github.com/kudelskisecurity/fumblechain) A Purposefully Vulnerable Blockchain
+- [**29**Star][2y] [Py] [kerrigan29a/idapython_virtualenv](https://github.com/kerrigan29a/idapython_virtualenv) Enable Virtualenv or Conda in IDAPython
+- [**29**Star][2y] [Ruby] [jtdowney/private_address_check](https://github.com/jtdowney/private_address_check) Ruby gem to help prevent Server Side Request Forgery
+- [**29**Star][10m] [Java] [jruby/jruby-openssl](https://github.com/jruby/jruby-openssl) JRuby's OpenSSL gem
+- [**29**Star][4y] [Py] [joychou93/md5-extension-attack](https://github.com/joychou93/md5-extension-attack) MD5长度扩展攻击
+- [**29**Star][2y] [C] [jnastarot/native_peloader](https://github.com/jnastarot/native_peloader) PE(compressed dll) memory loader using nt api
+- [**29**Star][8m] [Go] [jimyj/scanproxy](https://github.com/jimyj/scanproxy) scanproxy is auto scan IP & port,and check that is proxy if port is open...(scanproxy是一个自动扫描端口,并且检测是否是代理服务器的程序)
+- [**29**Star][1y] [Shell] [jaybrown/macos-security-updates](https://github.com/jaybrown/macos-security-updates) Notifies the user of updates to macOS Security components like Gatekeeper and XProtect
+- [**29**Star][5m] [Py] [jacobsoo/threathunting](https://github.com/jacobsoo/threathunting) This is just my personal compilation of APT malware from whitepaper releases, documents and malware samples from my personal research.
+- [**29**Star][1y] [Py] [iweizime/dbghider](https://github.com/iweizime/dbghider) hide IDA Winddows debugger from processes.
+- [**29**Star][4m] [Py] [intezer/mop](https://github.com/intezer/mop) MoP - "Master of Puppets" - Advanced malware tracking framework
+- [**29**Star][9m] [Py] [inishantgrover/shodmon](https://github.com/inishantgrover/shodmon) The Shodan monitoring tools allows you to monitor shodan listed servers basis on the filter you provided
+- [**29**Star][2y] [PS] [illusivenetworks-labs/get-networkconnection](https://github.com/illusivenetworks-labs/get-networkconnection) Edited version of Lee Christensen's Get-NetworkConnection which includes timestamp for each network connection
+- [**29**Star][7m] [Java] [hvqzao/burp-flow](https://github.com/hvqzao/burp-flow) Extension providing view with filtering capabilities for both complete and incomplete requests from all burp tools.
+- [**29**Star][3y] [C] [hklcf/mirai](https://github.com/hklcf/mirai) Source code for the Mirai botnet - Not going anywhere anytime soon
+- [**29**Star][5y] [Py] [hiddenillusion/filelookup](https://github.com/hiddenillusion/filelookup) Quick & dirty script to get info on a file from online resources (VirusTotal, Team Cymru, Shadow Server etc.)
+- [**29**Star][1y] [Py] [he1m4n6a/dcweb](https://github.com/he1m4n6a/dcweb) 三方依赖库扫描系统
+- [**29**Star][3m] [MATLAB] [hcab14/tdoa](https://github.com/hcab14/tdoa) Time difference of arrival (TDoA) multi-lateration
+- [**29**Star][5y] [Py] [haxorthematrix/loc-nogps](https://github.com/haxorthematrix/loc-nogps)
+- [**29**Star][6m] [hahwul/xss-payload-without-anything](https://github.com/hahwul/xss-payload-without-anything) XSS Payload without Anything.
+- [**29**Star][8m] [Py] [ha71/pywhatcms](https://github.com/ha71/pywhatcms) Unofficial WhatCMS API package
+- [**29**Star][4m] [Shell] [gushmazuko/metasploit_in_termux](https://github.com/gushmazuko/metasploit_in_termux) Install Metasploit Framework 5 in Termux
+- [**29**Star][10m] [Jupyter Notebook] [gcrahay/otx_misp](https://github.com/gcrahay/otx_misp) Imports Alienvault OTX pulses to a MISP instance
+- [**29**Star][2y] [Lua] [foxmole/pwnadventure3](https://github.com/foxmole/pwnadventure3) Blog series about Pwn Adventure 3
+- [**29**Star][5m] [PHP] [fdciabdul/fbchecker](https://github.com/fdciabdul/fbchecker) Facebook Mass Account Checker
+- [**29**Star][3m] [PHP] [eymengunay/eohoneypotbundle](https://github.com/eymengunay/eohoneypotbundle) Honeypot type for Symfony forms
+- [**29**Star][2y] [Py] [sevro/security-utilities](https://github.com/sevro/security-utilities) Offensive Security Certified Profesional (OSCP) course scripts, some have been generalized
+- [**29**Star][1y] [Py] [ernw/binja-ipython](https://github.com/ernw/binja-ipython) A plugin to integrate an IPython kernel into Binary Ninja.
+- [**29**Star][2d] [Py] [entynetproject/proton](https://github.com/entynetproject/proton) Proton Framework is a Windows post exploitation framework similar to other penetration testing tools such as Meterpreter and Powershell Invader Framework. The major difference is that the Proton Framework does most of its operations using Windows Script Host (a.k.a. JScript/VBScript), with compatibility in the core to support a default installat…
+- [**29**Star][1y] [C] [dro/uac-launchinf-poc](https://github.com/dro/uac-launchinf-poc) Windows 10 UAC bypass PoC using LaunchInfSection
+- [**29**Star][2y] [Ruby] [drewlong/vbully](https://github.com/drewlong/vbully) 3.8.x - 4.2.3 ForumRunner (vBulletin) exploit Proof of Concept
+- [**29**Star][5y] [Py] [donctl/sandy](https://github.com/donctl/sandy) Release of the sandy framework.
+- [**29**Star][10y] [C] [dmolnar/smartfuzz](https://github.com/dmolnar/smartfuzz) Valgrind extension for whitebox fuzz testing
+- [**29**Star][7y] [C] [dhuertas/des](https://github.com/dhuertas/des) DES algorithm implementation in C
+- [**29**Star][2m] [defconrome/meetings-2019](https://github.com/defconrome/meetings-2019) Slides and stuffs of the meetings during the 2019
+- [**29**Star][2m] [JS] [dangkyokhoang/man-in-the-middle](https://github.com/dangkyokhoang/man-in-the-middle) Modify requests, inject JavaScript and CSS into pages
+- [**29**Star][4m] [Py] [daedalus/bitcoin-recover-privkey](https://github.com/daedalus/bitcoin-recover-privkey) Proof of concept of bitcoin private key recovery using weak ECDSA signatures
+- [**29**Star][2y] [Shell] [cyb3r3x3r/kalilinuxnethunter-termux](https://github.com/cyb3r3x3r/kalilinuxnethunter-termux) Install Kali Linux Nethunter in termux - orginal by
+- [**29**Star][5m] [Go] [cryptogenic/rebot](https://github.com/cryptogenic/rebot) A discord bot for reverse engineers and exploit developers.
+- [**29**Star][7m] [Java] [cristianturetta/mad-spy](https://github.com/cristianturetta/mad-spy) We developed a malware for educational purposes. In particular, our goal is to provide a PoC of what is known as a Repacking attack, a known technique widely used by malware cybercrooks to trojanize android apps. The answer to solve this particular goal boils down in the simplicity of APK decompiling and smali code injection.
+- [**29**Star][1y] [Go] [cretz/tor-dht-poc](https://github.com/cretz/tor-dht-poc) Anonymous DHT Accessible from Executable or Tor-Enabled Browser
+- [**29**Star][5y] [C] [conorpp/mitm-http-proxy](https://github.com/conorpp/mitm-http-proxy) A simple, low level http/https proxy server with MiTM pranking features.
+- [**29**Star][5y] [C++] [codeliker/mymig_meterpreter](https://github.com/codeliker/mymig_meterpreter) mig meterpreter stager
+- [**29**Star][7m] [Shell] [chunkingz/vmr-mdk-k2-2017r-012x4](https://github.com/chunkingz/vmr-mdk-k2-2017r-012x4) VMR-MDK is a script/tool for hacking wps wireless networks
+- [**29**Star][2y] [Shell] [chichou/grab.js](https://github.com/chichou/grab.js) fast TCP banner grabbing with node.js
+- [**29**Star][5m] [C++] [celestialpaler/cthackframework](https://github.com/celestialpaler/cthackframework) 游戏外挂通用框架,快速构建外挂程序。
+- [**29**Star][6y] [Py] [catalyst256/sniffmypackets](https://github.com/catalyst256/sniffmypackets) Canari local transforms pcap file analysis
+- [**29**Star][1y] [C] [calebfenton/native-harness-target](https://github.com/calebfenton/native-harness-target) Android app for demonstrating native library harnessing
+- [**29**Star][2m] [Py] [bugbounty-site/calexe](https://github.com/bugbounty-site/calexe) Calendar Exploit.
+- [**29**Star][2y] [Go] [bramp/myip](https://github.com/bramp/myip) (A better) What's My IP Address web application
+- [**29**Star][6d] [C] [br101/libuwifi](https://github.com/br101/libuwifi) Userspace Wifi Library
+- [**29**Star][3y] [Assembly] [borjamerino/plcinjector](https://github.com/borjamerino/plcinjector) Modbus stager in assembly and some scripts to upload/download data to the holding register of a PLC
+- [**29**Star][4y] [Go] [bnagy/afl-launch](https://github.com/bnagy/afl-launch) Boring tool to launch multiple afl-fuzz instances
+- [**29**Star][2y] [Shell] [bgeesaman/subpath-exploit](https://github.com/bgeesaman/subpath-exploit) Writeup of CVE-2017-1002101 with sample "exploit"/escape
+- [**29**Star][2y] [Java] [barro/java-afl](https://github.com/barro/java-afl) Binary rewriting approach with fork server support to fuzz Java applications with afl-fuzz.
+- [**29**Star][2y] [C#] [aviavni/nativeleakdetector](https://github.com/aviavni/nativeleakdetector) Win32 memory leak detector with ETW
+- [**29**Star][3y] [HTML] [auth0-blog/polymer-with-jwt-api](https://github.com/auth0-blog/polymer-with-jwt-api) Build an app using web components and Polymer with an API and JSON Web Token authentication.
+- [**29**Star][6y] [atlantis2013/evasion-tools](https://github.com/atlantis2013/evasion-tools) Anti-technique Codes, Detection of Anti-technique codes
+- [**29**Star][6y] [Shell] [artemdinaburg/optimizevm](https://github.com/artemdinaburg/optimizevm) Make Windows VMs Faster
+- [**29**Star][3y] [JS] [arlolra/ctypes-otr](https://github.com/arlolra/ctypes-otr) js-ctypes wrapper for libotr
+- [**29**Star][2y] [C] [arduinohannover/zpb30a1_firmware](https://github.com/arduinohannover/zpb30a1_firmware) Open-Source firmware for the ZPB30A1 electronic load (WIP)
+- [**29**Star][4y] [C] [android-rooting-tools/libkallsyms](https://github.com/android-rooting-tools/libkallsyms) Get symbol address and name from tables for kallsyms
+- [**29**Star][2m] [Go] [ammario/ipisp](https://github.com/ammario/ipisp) Query IP address network information in Go
+- [**29**Star][4y] [Shell] [alexoslabs/httpsscan](https://github.com/alexoslabs/httpsscan) Shell script for testing the SSL/TLS Protocols
+- [**29**Star][2y] [C] [alex9191/netdriver](https://github.com/alex9191/netdriver) kernel-mode TDI client which can send and receive HTTP requests
+- [**29**Star][5m] [Py] [alberties/ghostfuscator](https://github.com/alberties/ghostfuscator) The Python Password-Protected Obfuscator
+- [**29**Star][3y] [Go] [akihirosuda/aspectgo](https://github.com/akihirosuda/aspectgo) Aspect-Oriented Programming framework for Go
+- [**29**Star][2m] [ahmetgurel/pentest-hints](https://github.com/ahmetgurel/pentest-hints) Tips for Penetration Testing
+- [**29**Star][2y] [Py] [agustingianni/symrepl](https://github.com/agustingianni/symrepl) Symbol REPL
+- [**29**Star][4m] [Go] [adonley/ethereum-brute-force](https://github.com/adonley/ethereum-brute-force) Brute force generating ethereum private keys and check them against known addresses.
+- [**29**Star][2m] [C#] [3gstudent/gadgettojscript](https://github.com/3gstudent/gadgettojscript) (Small change to make it easier to test the payload and combine it with SILENTTRINITY.)A tool for generating .NET serialized gadgets that can trigger .NET assembly load/execution when deserialized using BinaryFormatter from JS/VBS based scripts.
+- [**29**Star][7y] [C++] [0xdabbad00/openhips](https://github.com/0xdabbad00/openhips) OpenHIPS prevents exploitation of Windows systems
+- [**29**Star][2y] [0x90/nrf24-arsenal](https://github.com/0x90/nrf24-arsenal) Hacking tools and scripts for nRF24LU1+
+- [**29**Star][10m] [c++] [camp0/aiengine](https://bitbucket.org/camp0/aiengine)
+- [**28**Star][2m] [Shell] [idkiro/ssmgr-install](https://github.com/idkiro/ssmgr-install) shadowsocks-manager 前端+后端+魔改BBR一键部署脚本
+- [**28**Star][2y] [C] [zhou0/mysocks](https://github.com/zhou0/mysocks) The cross-platform shadowsocks client and server with minimum dependencies.
+- [**28**Star][2m] [C++] [bennetthardwick/darknet.js](https://github.com/bennetthardwick/darknet.js) A NodeJS wrapper of pjreddie's darknet / yolo.
+- [**28**Star][10m] [Jupyter Notebook] [danielgatis/darknetpy](https://github.com/danielgatis/darknetpy) darknetpy is a simple binding for darknet's yolo detector
+- [**28**Star][2y] [Py] [portswigger/wordpress-scanner](https://github.com/portswigger/wordpress-scanner) Find known vulnerabilities in WordPress plugins and themes using Burp Suite proxy. WPScan like plugin for Burp.
+- [**28**Star][2y] [C] [lincolnhard/facenet-darknet-inference](https://github.com/lincolnhard/facenet-darknet-inference) Face recognition using facenet
+- [**28**Star][10d] [Shell] [yaleh/kcp-shadowsocks-server](https://github.com/yaleh/kcp-shadowsocks-server) Docker image of a server with KCP tunnel and Shadowsocks.
+- [**28**Star][3y] [iqiancheng/shadowsocks-awesome](https://github.com/iqiancheng/shadowsocks-awesome) 一个实时更新的实用gfwlist清单。用于ss的PAC自动分流。
+- [**28**Star][12d] [C] [tidesec/peach_fuzzing](https://github.com/tidesec/peach_fuzzing) 在学习使用peach进行模糊测试时,搜集到的一些不错的资料,以及配套的一些软件或脚本。
+- [**28**Star][2m] [bishopfox/cyberdic](https://github.com/bishopfox/cyberdic) An auxiliary spellcheck dictionary that corresponds with the Bishop Fox Cybersecurity Style Guide
+- [**28**Star][7y] [C] [jonathansalwan/vmndh-2k12](https://github.com/jonathansalwan/vmndh-2k12) Emulator, debugger and compiler for the NDH architecture - Emulator for CTF NDH 2k12
+- [**28**Star][7m] [C++] [frida/v8](https://github.com/frida/v8) Frida depends on V8
+- [**28**Star][2y] [C] [shadowsocksr-live/ssrdroid](https://github.com/shadowsocksr-live/ssrdroid) ShadowsocksR (SSR) for Android
+- [**28**Star][1y] [C++] [lordnoteworthy/windows-exploitation](https://github.com/lordnoteworthy/windows-exploitation) My notes while studying Windows exploitation
+- [**28**Star][11m] [HTML] [twintproject/twint-explorer](https://github.com/twintproject/twint-explorer) TWINT Graph Visualizer
+- [**28**Star][4m] [Java] [dineshshetty/fridaloader](https://github.com/dineshshetty/fridaloader) A quick and dirty app to download and launch Frida on Genymotion
+- [**28**Star][11m] [Shell] [angorafuzzer/fuzzingrealprogrambenchstatistics](https://github.com/angorafuzzer/fuzzingrealprogrambenchstatistics) List the real world programs evaluated in fuzzing papers.
+- [**28**Star][4y] [Swift] [urinx/device-9](https://github.com/urinx/device-9) 实时监测网速,IP,内存大小,温度等设备信息并显示在通知中心的 iOS App
+- [**28**Star][9y] [Py] [spiderlabs/deblaze](https://github.com/spiderlabs/deblaze) Performs method enumeration and interrogation against flash remoting end points.
+- [**28**Star][1y] [Ruby] [igrigorik/em-socksify](https://github.com/igrigorik/em-socksify) Transparent proxy support for any EventMachine protocol
+- [**28**Star][12m] [Py] [wyatu/pentestscripts](https://github.com/wyatu/pentestscripts) Some scripts for penetration testing
+- [**28**Star][3y] [HTML] [cryptogenic/ps4console](https://github.com/cryptogenic/ps4console) A successor to PS4Playground, emulates a shell-like environment to interact with the PlayStation 4.
+- [**28**Star][2m] [Rust] [timvisee/pixelpwnr](https://github.com/timvisee/pixelpwnr)
+- [**28**Star][3y] [Java] [tribler/app-to-app-communicator](https://github.com/tribler/app-to-app-communicator) Create an attack-resilient network out of smartphones, no-PC-needed (proof of concept)
+- [**28**Star][26d] [C] [kasif-dekel/whatsapp-rce-patched](https://github.com/kasif-dekel/whatsapp-rce-patched) cve-2019-11931
+- [**28**Star][1m] [Assembly] [vxunderground/family](https://github.com/vxunderground/family) Collection of Malware source code by Language and Family.
+- [**28**Star][1m] [Shell] [privacyint/appdata-environment-desktop](https://github.com/privacyint/appdata-environment-desktop) A selection of script and the manual for Privacy International's data interception environment
+- [**28**Star][2m] [JS] [benoitsevens/applying-ttd-to-malware-analysis](https://github.com/benoitsevens/applying-ttd-to-malware-analysis) Resources for the workshop titled "Repacking the unpacker: Applying Time Travel Debugging to malware analysis", given at HackLu 2019
+- [**28**Star][4y] [C] [scallywag/nbtscan](https://github.com/scallywag/nbtscan) NetBIOS scanning tool. Currently segfaults!
+- [**28**Star][1m] [C#] [cobbr/c2bridge](https://github.com/cobbr/c2bridge) C2Bridges allow developers to create new custom communication protocols and quickly utilize them within Covenant.
+- [**28**Star][2m] [Py] [x1tan/cve-2019-13025](https://github.com/x1tan/cve-2019-13025) Connect Box CH7465LG (CVE-2019-13025)
+- [**28**Star][2y] [Py] [vpnguy-zz/handyheaderhacker](https://github.com/vpnguy-zz/HandyHeaderHacker) Examine HTTP response headers for common security issues
+- [**28**Star][7d] [C#] [geta/404handler](https://github.com/Geta/404handler) The popular 404 handler for EPiServer, enabling better control over your 404 page in addition to allowing redirects for old urls that no longer works.
+- [**28**Star][4y] [Ruby] [praetorian-code/dert](https://github.com/praetorian-code/dert) DNS Enumeration and Reconnaissance Tool
+- [**28**Star][3y] [Py] [zonksec/weblogic-serialization-exploit-updated](https://github.com/zonksec/weblogic-serialization-exploit-updated) Updated the FoxGlove Security WebLogic serialization exploit.
+- [**28**Star][5y] [Py] [zombiesam/wikigen](https://github.com/zombiesam/wikigen) A script to generate wordlists out of wikipedia pages. Should support most of the subdomains. Some ugly code may occur
+- [**28**Star][1y] [Py] [zhanghaoyil/hawk-i](https://github.com/zhanghaoyil/hawk-i) Automatic extract anomalious Web attack Payloads with Unsupervised Machine Learning algorithms
+- [**28**Star][3y] [C] [zenware/bluemaho](https://github.com/zenware/bluemaho) BlueMaho is GUI-shell (interface) for suite of tools for testing security of bluetooth devices. It is freeware, opensource, written on python, uses wxPyhon. It can be used for testing BT-devices for known vulnerabilities and major thing to do – testing to find unknown vulns. Also it can form nice statistics.
+- [**28**Star][4m] [Java] [zaproxy/zap-api-java](https://github.com/zaproxy/zap-api-java) OWASP ZAP Java API
+- [**28**Star][8y] [JS] [zanelackey/projects](https://github.com/zanelackey/projects)
+- [**28**Star][8d] [C++] [z4yx/supervisor-mips32](https://github.com/z4yx/supervisor-mips32) 计算机组成原理课程32位监控程序
+- [**28**Star][10m] [Shell] [yulewang/brook](https://github.com/yulewang/brook) Brook 端口转发 一键管理脚本修改版 增加了对动态域名的支持 基于逗比版本修改而来
+- [**28**Star][1y] [C] [yifiheaven/magicwall](https://github.com/yifiheaven/magicwall)
+- [**28**Star][5y] [C++] [yawning/obfsclient](https://github.com/yawning/obfsclient) A C++11 obfs2/3 Tor managed pluggable transport client
+- [**28**Star][1y] [Py] [xyzz/vita-ida-physdump](https://github.com/xyzz/vita-ida-physdump) help with physical memory dump reversing
+- [**28**Star][8m] [Py] [xayon/pyrcrack](https://github.com/xayon/pyrcrack) Python Aircrack-ng bindings
+- [**28**Star][2y] [C] [x64dbg/slothbp](https://github.com/x64dbg/slothbp) Collaborative Breakpoint Manager for x64dbg.
+- [**28**Star][2y] [C] [x64dbg/plugintemplate](https://github.com/x64dbg/plugintemplate) Plugin template for x64dbg. Releases:
+- [**28**Star][12m] [Jupyter Notebook] [wlmeng11/rtl-ultrasound](https://github.com/wlmeng11/rtl-ultrasound)
+- [**28**Star][1y] [JS] [webpack/source-list-map](https://github.com/webpack/source-list-map) Fast line to line SourceMap generator.
+- [**28**Star][2y] [C] [wanttobeno/win64driverstudy_src](https://github.com/wanttobeno/win64driverstudy_src) WIN64驱动编程基础教程-源码 作者:胡文亮
+- [**28**Star][1y] [JS] [wahengchang/nodejs-security-must-know](https://github.com/wahengchang/nodejs-security-must-know) It is a note about security on nodejs
+- [**28**Star][3y] [C] [vusec/typearmor](https://github.com/vusec/typearmor) 缓解高级代码重用攻击。论文“一个艰难的决定:在二进制级别缓解高级的代码重用攻击”的具体实现。
+- [**28**Star][9m] [PHP] [visualbasic6/google-drive-exploit](https://github.com/visualbasic6/google-drive-exploit) active exploit leaking full names associated with some email addresses including but not limited to gmail
+- [**28**Star][5m] [JS] [virink/as_plugin_godofhacker](https://github.com/virink/as_plugin_godofhacker) 黑客神器,谁用谁知道!
+- [**28**Star][2y] [JS] [versprite/engage](https://github.com/versprite/engage) Tools and Materials for the Frida Engage Blog Series
+- [**28**Star][6y] [MATLAB] [vedaldi/visualindex](https://github.com/vedaldi/visualindex) A simple demo of visual object matching using VLFeat
+- [**28**Star][3y] [Py] [v1cker/poc-exp](https://github.com/v1cker/poc-exp)
+- [**28**Star][3y] [uber/bug-bounty-page](https://github.com/uber/bug-bounty-page) A repo to make our changes more transparent to bug bounty researchers in our program (so they can see commits, etc).
+- [**28**Star][2y] [PHP] [tuupola/whereami](https://github.com/tuupola/whereami) Common PHP interface for wifi positioning services
+- [**28**Star][2m] [Shell] [tradichel/awssecurityautomationframework](https://github.com/tradichel/awssecurityautomationframework) Framework for reviewing and responding to events in AWS Flow Logs using Lambda Function
+- [**28**Star][3y] [Py] [tr3jer/autohookspider](https://github.com/tr3jer/autohookspider) 将自动爬虫的结果判断是否属于hooks,并不断抓取url爬啊爬。
+- [**28**Star][2y] [Makefile] [torbsd/openbsd-ports](https://github.com/torbsd/openbsd-ports) OpenBSD ports under development by TDP
+- [**28**Star][1y] [Shell] [themiddleblue/dnsenum](https://github.com/themiddleblue/dnsenum) Bash script for DNS Enumeration.
+- [**28**Star][15d] [HTML] [theforeman/foreman_openscap](https://github.com/theforeman/foreman_openscap) Foreman plug-in for displaying OpenSCAP audit reports
+- [**28**Star][5m] [C++] [thalium/idatag](https://github.com/thalium/idatag) IDA plugin to explore and browse tags
+- [**28**Star][3m] [Go] [telanflow/dictgenerate](https://github.com/telanflow/dictgenerate) 使用Go语言编写的社工字典生成器(The social engineering dictionary generator written by Go)
+- [**28**Star][3y] [PHP] [talhasch/php-httpstat](https://github.com/talhasch/php-httpstat) PHP implementation of
+- [**28**Star][3y] [Shell] [superkojiman/scanreport](https://github.com/superkojiman/scanreport) Take output from nmap and turn it into something easily searchable and readable.
+- [**28**Star][7m] [Shell] [sukkaw/zsh-proxy](https://github.com/sukkaw/zsh-proxy)
+- [**28**Star][11m] [C] [sqdwr/loadimageinject](https://github.com/sqdwr/loadimageinject) LoadImage Routine Inject Dll
+- [**28**Star][8d] [Py] [sophoslabs/webassembly](https://github.com/sophoslabs/webassembly) Research on WebAssembly
+- [**28**Star][5m] [JS] [skateman/purr](https://github.com/skateman/purr) Smuggle TCP connections through HTTP
+- [**28**Star][10m] [JS] [shanselman/daskeyboard-q-nightscout](https://github.com/shanselman/daskeyboard-q-nightscout) Hooking up the DasKeyboard Q REST API to change the key colors in response to diabetic's glucose from NightScout
+- [**28**Star][3y] [Shell] [securitygeneration/honeyport](https://github.com/securitygeneration/honeyport) Bash and Python Honeyport scripts
+- [**28**Star][2y] [secarmalabs/iotchecklist](https://github.com/secarmalabs/iotchecklist) Baseline IoT security checklist. Consider security as early in development as possible and reap the rewards.
+- [**28**Star][2y] [Go] [sakeven/mika](https://github.com/sakeven/mika) Mika - A Secure Proxy
+- [**28**Star][11m] [Shell] [rokasurbelis/system_safety_test](https://github.com/rokasurbelis/system_safety_test)
+- [**28**Star][2y] [Ruby] [richardc/puppet-datacat](https://github.com/richardc/puppet-datacat) Data composition types for puppet
+- [**28**Star][5y] [C] [rfdslabs/mimosa-framework](https://github.com/rfdslabs/mimosa-framework) Mimosa Framework to abuse EPC functionality on CISCO Routers.
+- [**28**Star][6d] [C++] [regehr/opt-fuzz](https://github.com/regehr/opt-fuzz) llvm opt fuzzer and bounded exhaustive test generator
+- [**28**Star][3y] [Shell] [rccoder/awesome-shadowsocks-qt5-installation-on-debian](https://github.com/rccoder/awesome-shadowsocks-qt5-installation-on-debian) Installation Script For shadowsocks-Qt5 on Debian
+- [**28**Star][10m] [Go] [razc411/gobd](https://github.com/razc411/gobd) A Golang covert backdoor using raw sockets.
+- [**28**Star][5d] [C] [rapid7/mimikatz](https://github.com/rapid7/mimikatz) A little tool to play with Windows security
+- [**28**Star][1m] [Py] [qsecure-labs/overlord](https://github.com/qsecure-labs/overlord) Overlord - Red Teaming Infrastructure Automation
+- [**28**Star][4y] [CSS] [qll/attacking-browser-extensions](https://github.com/qll/attacking-browser-extensions) Test Suite and exemplary extensions of the "Attacking Browser Extensions" master's thesis
+- [**28**Star][5y] [C] [qianshanhai/q-shell](https://github.com/qianshanhai/q-shell) Unix remote login tool, rootkit shell tool
+- [**28**Star][6y] [Java] [pwntester/springbreaker](https://github.com/pwntester/springbreaker) Exploit PoC for Spring RCE issue (CVE-2011-2894)
+- [**28**Star][2y] [Py] [pwn2winctf/2017](https://github.com/pwn2winctf/2017) Pwn2Win CTF 2017
+- [**28**Star][9m] [JS] [puritys/chromesecureshell](https://github.com/puritys/chromesecureshell) Hack chrome secure shell for improving usability
+- [**28**Star][2y] [JS] [psych0tr1a/elscripto](https://github.com/psych0tr1a/elscripto) XSS explot kit/Blind XSS framework/BurpSuite extension
+- [**28**Star][5y] [Py] [phaeilo/vol-openvpn](https://github.com/phaeilo/vol-openvpn) A Volatility plugin to extract credentials from the memory of a OpenVPN client.
+- [**28**Star][4y] [Py] [paulpc/nyx](https://github.com/paulpc/nyx) Threat Intelligence distribution
+- [**28**Star][6y] [Shell] [packetforger/localroot](https://github.com/packetforger/localroot) Collection of tools for privesc on Linux
+- [**28**Star][9m] [JS] [owasp/blt](https://github.com/owasp/blt) OWASP BLT is a bug logging tool to report issues and get points, companies are held accountable.
+- [**28**Star][6y] [C++] [oct0xor/deci3dbg](https://github.com/oct0xor/deci3dbg) Ida Pro debugger module for Playstation 3
+- [**28**Star][8m] [C#] [nyan-x-cat/dropless-malware](https://github.com/nyan-x-cat/dropless-malware) Download a payload and make it run from registry without droppng.
+- [**28**Star][4y] [Java] [nvisium/moneyx](https://github.com/nvisium/moneyx) MoneyX is an intentionally vulnerable JSP application used for training developers in application security concepts.
+- [**28**Star][3y] [Py] [netspi/asa_tools](https://github.com/netspi/asa_tools) Verification tools for CVE-2016-1287
+- [**28**Star][2y] [C++] [nervous/greenkit-rootkit](https://github.com/nervous/greenkit-rootkit) GreenKit is an userland rootkit hiding its own files and mining bitcoins on compromised computers. Do /NOT/ download or use this rootkit for malicious purposes. Use it only for your own knowledge.
+- [**28**Star][2y] [Py] [ne0nd0g/guinevere](https://github.com/ne0nd0g/guinevere) Automated Security Assessment Reporting Tool
+- [**28**Star][1m] [nats-io/nats-general](https://github.com/nats-io/nats-general) General NATS Information
+- [**28**Star][1y] [C] [mxmssh/netafl](https://github.com/mxmssh/netafl) winAFL patch to enable network-based apps fuzzing
+- [**28**Star][8m] [Py] [mvrcrypto/bitp0wn](https://github.com/mvrcrypto/bitp0wn) Algorithms to re-compute a private key, to fake signatures and some other funny things with Bitcoin.
+- [**28**Star][3y] [Py] [mvondracek/wifimitm](https://github.com/mvondracek/wifimitm) Automation of MitM Attack on Wi-Fi Networks
+- [**28**Star][4y] [ms3fgx/tsatool](https://github.com/ms3fgx/tsatool) 3D printed TSA keys in a pocketable "Swiss Army" style tool.
+- [**28**Star][7d] [Py] [mrwn007/m3m0](https://github.com/mrwn007/m3m0) M3m0 Tool
+- [**28**Star][12m] [C] [mrmacete/r2scripts](https://github.com/mrmacete/r2scripts) Collection of scripts for radare2
+- [**28**Star][1y] [Py] [mprhode/malware-prediction-rnn](https://github.com/mprhode/malware-prediction-rnn) RNN implementation with Keras for machine activity data to predict malware
+- [**28**Star][6d] [HTML] [misp/misp-rfc](https://github.com/misp/misp-rfc) Specifications used in the MISP project including MISP core format
+- [**28**Star][6d] [Shell] [misp/misp-cloud](https://github.com/misp/misp-cloud) misp-cloud - Cloud-ready images of MISP
+- [**28**Star][5y] [Java] [mindmac/xposedautomation](https://github.com/mindmac/xposedautomation) A demo to show how to install Xposed and enable Xposed based module automatically
+- [**28**Star][9m] [Go] [mimoo/eureka](https://github.com/mimoo/eureka) Need to encrypt a file before sending it to someone? This is it.
+- [**28**Star][1y] [Shell] [mikhbur/conformer](https://github.com/mikhbur/conformer) Password Guessing for different Web Portals
+- [**28**Star][5y] [C++] [michael4338/tdi](https://github.com/michael4338/tdi) Windows Kernel Driver - Create a driver device in TDI layer of windows kernel to capture network data packets
+- [**28**Star][3m] [Py] [michael-myers/macos-wpa-psk](https://github.com/michael-myers/macos-wpa-psk) PoC script showing that MacOS leaves the wireless key in NVRAM, in plaintext and accessible to anyone.
+- [**28**Star][5m] [Py] [mechpen/sockdump](https://github.com/mechpen/sockdump) Dump unix domain socket traffic with bpf
+- [**28**Star][2y] [Java] [martinstyk/apkanalyzer](https://github.com/martinstyk/apkanalyzer) Java tool for analyzing Android APK files
+- [**28**Star][3y] [JS] [markelog/adit](https://github.com/markelog/adit) SSH tunnels – in any way you want it
+- [**28**Star][4m] [Py] [lufeirider/sqlchecker](https://github.com/lufeirider/sqlchecker) 注入检测工具
+- [**28**Star][5m] [PHP] [lucasfrag/kali-linux-tools-interface](https://github.com/lucasfrag/kali-linux-tools-interface) Graphical Web interface developed to facilitate the use of security information tools.
+- [**28**Star][1y] [C] [lpefferkorn/ipdecap](https://github.com/lpefferkorn/ipdecap) Decapsulate traffic encapsulated within GRE, IPIP, 6in4, ESP (ipsec) protocols, can also remove IEEE 802.1Q (virtual lan) header. Works with pcap files.
+- [**28**Star][2y] [C] [l-n-s/transmission-i2p](https://github.com/l-n-s/transmission-i2p) Anonymous torrent client Transmission-I2P [UNMAINTAINED]
+- [**28**Star][1y] [Py] [knownsec/decrypt-ransomware](https://github.com/knownsec/decrypt-ransomware)
+- [**28**Star][6y] [Py] [kholia/exetractor-clone](https://github.com/kholia/exetractor-clone) Unpacker for packed Python executables. Supports PyInstaller and py2exe. This project is not updated anymore. Use "PyInstaller Extractor" and "unpy2exe" instead.
+- [**28**Star][1y] [Py] [jumbo-wjb/jpentest](https://github.com/jumbo-wjb/jpentest) Jumbo Python Penetration testing framework
+- [**28**Star][5m] [PS] [johnaho/cloakify-powershell](https://github.com/johnaho/cloakify-powershell) Cloak files using text based steganography output to obsfucate what data they contain. Coded in Powershell. This is a port of TryCatchHCF's Cloakify written in python
+- [**28**Star][1m] [C++] [jnastarot/enma_pe](https://github.com/jnastarot/enma_pe) Cross-platform library for parsing and building PE\PE+ formats
+- [**28**Star][7y] [Ruby] [jjyg/ssh_decoder](https://github.com/jjyg/ssh_decoder)
+- [**28**Star][1y] [C++] [jiazhang0/seloader](https://github.com/jiazhang0/seloader) Secure EFI Loader designed to authenticate the non-PE files
+- [**28**Star][4m] [Py] [jekil/udpot](https://github.com/jekil/udpot) Simple UDP honeypot script
+- [**28**Star][2y] [Swift] [jeanshuang/potatso](https://github.com/jeanshuang/potatso) 适配Xcode9.3 iOS11.3 Swift3.3编译通过。 (unmaintained) Potatso is an iOS client that implements Shadowsocks proxy with the leverage of NetworkExtension framework in iOS 9.
+- [**28**Star][6y] [Py] [jayeshchauhan/skanda](https://github.com/jayeshchauhan/skanda) OWASP Skanda - SSRF Exploitation Framework
+- [**28**Star][3y] [Assembly] [inndy/ctf-from-zero-to-one](https://github.com/inndy/ctf-from-zero-to-one) TDOH Conf 2016 演講相關資料
+- [**28**Star][5y] [Py] [infosec-au/webappsec-toolkit](https://github.com/infosec-au/webappsec-toolkit) Web Application Security related tools. Includes backdoors, proof of concepts and tricks
+- [**28**Star][2y] [Py] [ihebski/pentest-chainsaw](https://github.com/ihebski/pentest-chainsaw) Scrapes Router Passwords From
+- [**28**Star][4y] [C] [icewall/forcedelete](https://github.com/icewall/forcedelete) Windows driver including couple different techniques for file removal when regular operation isn't possible.
+- [**28**Star][2y] [Py] [ice3man543/malscan](https://github.com/ice3man543/malscan) A Simple PE File Heuristics Scanners
+- [**28**Star][2y] [Java] [ibey0nd/nstproxy](https://github.com/ibey0nd/nstproxy) 一款存储HTTP请求入库的burpsuite插件
+- [**28**Star][3m] [Shell] [hybtoy/ssrrmu](https://github.com/hybtoy/ssrrmu) ShadowsocksRR (shadowsocksr/ssr) multi-user and single-user install script
+- [**28**Star][11m] [C++] [hoangprod/leospecial-veh-hook](https://github.com/hoangprod/leospecial-veh-hook) Vectored Exception Handling Hooking Class
+- [**28**Star][5y] [C++] [hempnall/broyara](https://github.com/hempnall/broyara) integrating bro into yara
+- [**28**Star][3y] [Py] [harryr/nanac](https://github.com/harryr/nanac) Tiny modular assembler & vm for lightweight control microcode
+- [**28**Star][5y] [Py] [hannob/pgpecosystem](https://github.com/hannob/pgpecosystem) Scripts to parse and analyze pgp key server data
+- [**28**Star][8y] [C] [hackedteam/driver-win32](https://github.com/hackedteam/driver-win32) Windows (32bit) agent driver
+- [**28**Star][3d] [Py] [greenbone/python-gvm](https://github.com/greenbone/python-gvm) Greenbone Vulnerability Management Python Library
+- [**28**Star][2y] [Py] [grayddq/passivedatasorting](https://github.com/grayddq/passivedatasorting) 自动化被动扫描系统分为数据源、数据处理、漏洞验证等三个子系统,本系统属于数据处理部分,抓取流量镜像的数据,进行分析过滤去重等操作,发送至消息队列中,等待PassiveSecCheck消费
+- [**28**Star][1y] [TeX] [gossip-sjtu/k-hunt](https://github.com/gossip-sjtu/k-hunt) K-Hunt: Pinpointing Insecure Crypto Keys
+- [**28**Star][2y] [Ruby] [godinezj/metasploit-framework](https://github.com/godinezj/metasploit-framework) Metasploit Framework
+- [**28**Star][4y] [C] [gdbinit/teloader](https://github.com/gdbinit/teloader) A TE executable format loader for IDA
+- [**28**Star][5y] [C] [gdbinit/mario](https://github.com/gdbinit/mario) The kernel component of rootpipe fix for Mavericks
+- [**28**Star][5y] [C] [gdbinit/can_i_suid](https://github.com/gdbinit/can_i_suid) A TrustedBSD module to control execution of binaries with suid bit set
+- [**28**Star][4m] [fuzzysecurity/bh-arsenal-2019](https://github.com/fuzzysecurity/bh-arsenal-2019) SilkETW & SilkService
+- [**28**Star][3y] [Ruby] [fozavci/metasploit-framework-with-viproy](https://github.com/fozavci/metasploit-framework-with-viproy) Metasploit Framework with Viproy installed.
+- [**28**Star][7m] [foryujian/yujianrdpcrack](https://github.com/foryujian/yujianrdpcrack) 御剑RDP爆破工具
+- [**28**Star][3y] [Py] [floyd-fuh/burp-httpfuzzer](https://github.com/floyd-fuh/burp-httpfuzzer) Burp plugin to do random fuzzing of HTTP requests
+- [**28**Star][6y] [Py] [flo354/iosforensic](https://github.com/flo354/iosforensic) iOS forensic tool
+- [**28**Star][4y] [JS] [firebug/firequery](https://github.com/firebug/firequery) Firefox plugin for jQuery development
+- [**28**Star][2y] [C++] [fdfalcon/typeisolationdbg](https://github.com/fdfalcon/typeisolationdbg) A little WinDbg extension to help dump the state of Win32k Type Isolation structures.
+- [**28**Star][4y] [C] [erriy/data_pirate](https://github.com/erriy/data_pirate)
+- [**28**Star][19d] [C#] [ericzimmerman/amcacheparser](https://github.com/ericzimmerman/amcacheparser) Parses amcache.hve files, but with a twist!
+- [**28**Star][2y] [PS] [enddo/hatdbg](https://github.com/enddo/hatdbg) Minimal WIN32 Debugger in powershell
+- [**28**Star][3y] [Java] [elynx/pokemon-go-xposed-mitm](https://github.com/elynx/pokemon-go-xposed-mitm) MITM attack on Pokemon Go (c) via XPosed framework
+- [**28**Star][25d] [Py] [eleemosynator/writeups](https://github.com/eleemosynator/writeups) Write-ups for crackmes and CTF challenges
+- [**28**Star][2y] [Shell] [earayu/fastjson_jndi_poc](https://github.com/earayu/fastjson_jndi_poc) fastjson远程命令执行漏洞,jndi方式
+- [**28**Star][2y] [C++] [dshikashio/pybag](https://github.com/dshikashio/pybag) CPython module for Windbg's dbgeng plus additional wrappers.
+- [**28**Star][2y] [Java] [drme/ble-rc](https://github.com/drme/ble-rc) Control RC cars from your SmartPhone
+- [**28**Star][8m] [Ruby] [dreadlocked/ctf-writeups](https://github.com/dreadlocked/ctf-writeups) CTF Write-ups
+- [**28**Star][9d] [Py] [dottedmag/archmage](https://github.com/dottedmag/archmage) A reader and decompiler for files in the CHM format
+- [**28**Star][1y] [Py] [dienuet/crossdomain](https://github.com/dienuet/crossdomain) CORS checking
+- [**28**Star][2m] [Go] [dharmaofcode/gorp](https://github.com/dharmaofcode/gorp) A modular bug hunting and web application pentesting framework written in Go
+- [**28**Star][2y] [defcon-russia/shortcut_auto_bind](https://github.com/defcon-russia/shortcut_auto_bind) Windows LNK/URL shortcut auto-binding hotkey (not a bug, feature)
+- [**28**Star][3y] [Py] [deadbits/arcreactor](https://github.com/deadbits/arcreactor) open-source intelligence gathering for SIEMs <3
+- [**28**Star][1m] [Shell] [dcso/misp-dockerized](https://github.com/dcso/misp-dockerized)
+- [**28**Star][18d] [Py] [darksecdevelopers/absorber](https://github.com/darksecdevelopers/absorber) An advance keylogger that works and also logs special keys including uppercase letters as well.
+- [**28**Star][2y] [ObjC] [dannagle/packetsender-ios](https://github.com/dannagle/packetsender-ios) Packet Sender for iOS, Send/Receive UDP/TCP
+- [**28**Star][4y] [C] [ctz/sgx-pwenclave](https://github.com/ctz/sgx-pwenclave) Using SGX to harden password hashing
+- [**28**Star][3y] [JS] [ctxis/pac-leak-demo](https://github.com/ctxis/pac-leak-demo) PAC HTTPS leak demo from DEF CON 24 'Toxic Proxies' talk
+- [**28**Star][9m] [Py] [ctxis/cbrcli](https://github.com/ctxis/cbrcli) Command line interface to Carbon Black Response
+- [**28**Star][7m] [Py] [cryptolu/whitebox](https://github.com/cryptolu/whitebox) White-box Analysis and Implementation Tools
+- [**28**Star][2m] [Py] [cryptax/droidlysis](https://github.com/cryptax/droidlysis) Property extractor for Android apps
+- [**28**Star][3y] [Py] [crowdstrike/chopshop](https://github.com/crowdstrike/chopshop) Mitre chopshop network decoder framework
+- [**28**Star][4y] [JS] [crisu83/ctf-game](https://github.com/crisu83/ctf-game) Fast-paced hot seat multiplayer game written in modern JavaScript.
+- [**28**Star][7y] [C++] [cr4sh/dbgcb](https://github.com/cr4sh/dbgcb) Engine for communication with remote kernel debugger (KD, WinDbg) from drivers and applications
+- [**28**Star][12m] [PS] [countercept/ppid-spoofing](https://github.com/countercept/ppid-spoofing) Scripts for performing and detecting parent PID spoofing
+- [**28**Star][6y] [JS] [codenothing/argv](https://github.com/codenothing/argv) Node based command line argument parser
+- [**28**Star][2m] [Java] [codehaus-plexus/plexus-archiver](https://github.com/codehaus-plexus/plexus-archiver)
+- [**28**Star][3y] [C#] [cannanlly/gogotester](https://github.com/cannanlly/gogotester) 原版基础上修改bug和优化使用体验
+- [**28**Star][10m] [JS] [calidog/certstream-js](https://github.com/calidog/certstream-js) Javascript library for connecting to the CertStream network.
+- [**28**Star][4y] [Java] [burp-hash/burp-hash](https://github.com/burp-hash/burp-hash)
+- [**28**Star][3y] [brandonprry/clamav-fuzz](https://github.com/brandonprry/clamav-fuzz) A fuzz job for ClamAV
+- [**28**Star][1y] [C] [bot-man-jl/wfp-traffic-redirection-driver](https://github.com/bot-man-jl/wfp-traffic-redirection-driver) WFP Traffic Redirection Driver is used to redirect NIC traffic on network layer and framing layer, based on Windows Filtering Platform (WFP).
+- [**28**Star][7m] [Py] [bnbdr/wd-rce](https://github.com/bnbdr/wd-rce) WD My Cloud PoC exploit
+- [**28**Star][2y] [Java] [bit4woo/gui_burp_extender_para_encrypter](https://github.com/bit4woo/gui_burp_extender_para_encrypter) Burp_Extender_para_encrypter
+- [**28**Star][4y] [PHP] [belove/avhbf](https://github.com/belove/avhbf) Advanced virtual host bruteforcer
+- [**28**Star][3y] [Py] [baltimorechad/pyonionscan](https://github.com/baltimorechad/pyonionscan) Dark Web OSINT With Python and OnionScan
+- [**28**Star][4m] [Py] [azmatt/anaximander](https://github.com/azmatt/anaximander) Python Code to Map Cell Towers From a Cellebrite Android Dump
+- [**28**Star][3y] [Py] [ayrx/tlsenum](https://github.com/ayrx/tlsenum) A command line tool to enumerate TLS cipher-suites supported by a server
+- [**28**Star][2m] [Py] [armissecurity/urgent11-detector](https://github.com/armissecurity/urgent11-detector) URGENT/11 detection tool by Armis
+- [**28**Star][2m] [C] [arm-software/sbsa-acs](https://github.com/arm-software/sbsa-acs) ARM Enterprise: SBSA Architecture Compliance Suite
+- [**28**Star][7m] [Py] [antoinet/obike](https://github.com/antoinet/obike) Reverse engineering of the oBike protocol communication (BLE and HTTP)
+- [**28**Star][11m] [Py] [antid0tecom/ipad_accessory_research](https://github.com/antid0tecom/ipad_accessory_research) Research into Security of Apple Smart Keyboard and Apple Pencil
+- [**28**Star][6y] [Ruby] [andrewsmhay/brisket](https://github.com/andrewsmhay/brisket) Brisket is a collection of frontend scripts for masscan, zmap, and nmap, in addition data manipulation scripts
+- [**28**Star][1y] [C++] [allocandinit/ollvm5.0.1](https://github.com/allocandinit/ollvm5.0.1) obfuscator 基于 llvm 5.0.1 版本
+- [**28**Star][2y] [JS] [allglorytothehypnotoad/nodescan](https://github.com/allglorytothehypnotoad/nodescan) scans network for hosts and open ports
+- [**28**Star][1y] [Py] [alienwithin/scripts-sploits](https://github.com/alienwithin/scripts-sploits) A number of scripts POC's and problems solved as pentests move along.
+- [**28**Star][1y] [JS] [alephsecurity/spectrebrowserresearch](https://github.com/alephsecurity/spectrebrowserresearch)
+- [**28**Star][6m] [airbus-seclab/gustave](https://github.com/airbus-seclab/gustave)
+- [**28**Star][2y] [Py] [ahmadnourallah/pysploit-framework](https://github.com/ahmadnourallah/pysploit-framework) free exploit framework written use python language version 3.3
+- [**28**Star][1y] [C++] [abatchy17/hevd-exploits](https://github.com/abatchy17/hevd-exploits) Exploit code used for the HackSysExtremeVulnerableDriver.
+- [**28**Star][3y] [C] [a7vinx/liinux](https://github.com/a7vinx/liinux) A linux rootkit works on kernel 4.0.X or higher
+- [**28**Star][1y] [Py] [98587329/web-scan](https://github.com/98587329/web-scan) jboss,tomcat,weblogic,未授权访问扫描工具
+- [**28**Star][1m] [Py] [4n4nk3/wordlister](https://github.com/4n4nk3/wordlister) A simple wordlist generator and mangler written in python.
+- [**28**Star][3y] [Py] [3gstudent/fuzzbunch](https://github.com/3gstudent/fuzzbunch) NSA finest tool
+- [**28**Star][1y] [Py] [0xacb/github-desktop-poc](https://github.com/0xacb/github-desktop-poc) Github Desktop RCE PoC
+- [**28**Star][3y] [Py] [0x71/cuckoo-linux](https://github.com/0x71/cuckoo-linux) Linux malware analysis based on Cuckoo Sandbox.
+- [**28**Star][3y] [Shell] [0utrider/malrecon](https://github.com/0utrider/malrecon) malrecon:基本的恶意代码检测和分析工具,Shell 编写
+- [**27**Star][2y] [syst3ma/awesome_cisco_exploitation](https://github.com/syst3ma/awesome_cisco_exploitation) A curated list of awesome Cisco exploitation resources
+- [**27**Star][11m] [Java] [adolfintel/notebot](https://github.com/adolfintel/notebot) A ripoff of Microsoft Sticky Notes
+- [**27**Star][9d] [snail007/goproxy-cn](https://github.com/snail007/goproxy-cn) 高性能的http代理、https代理、socks5代理、ss代理、内网穿透、内网穿透p2p、内网穿透代理、内网穿透反向代理、内网穿透服务器、游戏盾、游戏高防、游戏代理,支持API代理认证。websocke代理、tcp代理、udp代理、socket代理、高仿服务器。支持正向代理、反向代理、透明代理、TCP内网穿透、UDP内网穿透、HTTP内网穿透、HTTPS内网穿透、https代理负载均衡、http代理负载均衡、socks5代理负载均衡、socket代理负载均衡、ss代理负载均衡、TCP/UDP端口映射、SSH中转、TLS加密传输、协议转换、防污染DNS代理,限速,限连接数。官方QQ交流群: 42805407。
+- [**27**Star][2y] [Py] [spiderlabs/modsecurity-log-utilities](https://github.com/spiderlabs/modsecurity-log-utilities) Set of CLI tools to transform ModSecurity logs into a meaningful information, given a context.
+- [**27**Star][10m] [radareorg/r2jp](https://github.com/radareorg/r2jp) Japanese Community of radare2
+- [**27**Star][3y] [Ruby] [infobyte/cve-2016-2776](https://github.com/infobyte/cve-2016-2776) CVE-2016-2776
+- [**27**Star][2y] [PS] [gimini/tartarus](https://github.com/gimini/tartarus) Fileless Ransomware Example
+- [**27**Star][2y] [JS] [cyrus-and/chrome-page-graph](https://github.com/cyrus-and/chrome-page-graph) Chrome extension to generate interactive page dependency graphs
+- [**27**Star][1y] [JS] [samyk/crak](https://github.com/samyk/crak) Crash Royale Attack Kit
+- [**27**Star][7d] [Go] [getlantern/lampshade](https://github.com/getlantern/lampshade) Obfuscated encrypted network protocol for Lantern
+- [**27**Star][4y] [Py] [averagesecurityguy/blue](https://github.com/averagesecurityguy/blue) Scripts that are suited for blue teams
+- [**27**Star][1m] [tidesec/auto_pentest_tool_course](https://github.com/tidesec/auto_pentest_tool_course) 《自动化漏洞挖掘技术实践》相关资料及脚本
+- [**27**Star][27d] [Shell] [security-onion-solutions/securityonion-docker](https://github.com/security-onion-solutions/securityonion-docker) Docker files for Security Onion
+- [**27**Star][3y] [Py] [paranoidninja/pisociety](https://github.com/paranoidninja/pisociety) Inspired from Mr. Robot I started developing this framework which can create 3vil twins, ddos Wireless networks, bypass HSTS(partial) and many more.This project is a work in progress and will be updated and fixed regularly for any issues found.
+- [**27**Star][3y] [Assembly] [fsecurelabs/avrop](https://github.com/fsecurelabs/avrop) ROP based Movfuscator VM
+- [**27**Star][4y] [Ruby] [thesp0nge/wordstress](https://github.com/thesp0nge/wordstress) A security scanner for Wordpress blogging engine
+- [**27**Star][7y] [hak5darren/ducky-flasher](https://github.com/hak5darren/ducky-flasher) Automatically exported from code.google.com/p/ducky-flasher
+- [**27**Star][3m] [Py] [nccgroup/nobex](https://github.com/nccgroup/nobex) nOBEX allows emulating the PBAP, MAP, and HFP profiles to test vehicle infotainment systems and similar devices using these profiles
+- [**27**Star][5m] [C#] [netspi/daft](https://github.com/netspi/daft) DAFT: Database Audit Framework & Toolkit
+- [**27**Star][4y] [Py] [hephaest0s/creatorrc](https://github.com/hephaest0s/creatorrc) Create torrc files optimized for speed, security, or avoiding captchas
+- [**27**Star][4m] [JS] [purplei2p/i2pd-tools](https://github.com/purplei2p/i2pd-tools) Some useful tools for I2P
+- [**27**Star][8m] [offensive-security/kali-sly-pi](https://github.com/offensive-security/kali-sly-pi) kali-sly-pi
+- [**27**Star][2y] [C#] [zaczero/sharploader](https://github.com/zaczero/sharploader)
+- [**27**Star][2y] [Shell] [digivill/all-in-one-wifi-cracker](https://github.com/digivill/all-in-one-wifi-cracker) Linux All in One Wifi Cracker
+- [**27**Star][4m] [PS] [glenrobinson72/tableau-powershell-scripts](https://github.com/glenrobinson72/tableau-powershell-scripts) Repository of Powershell Scripts for Tableau
+- [**27**Star][1y] [Shell] [edoverflow/h1-cli](https://github.com/edoverflow/h1-cli) A CLI tool to interact with hackerone.com. This was my submission for HackerOne's Summer 2018 Hack Day.
+- [**27**Star][5m] [HTML] [firewalltutor/firewalltutor.github.io](https://github.com/firewalltutor/firewalltutor.github.io) fire wall tutor 自建梯子教程 Google 翻墙 科学上网 代理工具 一键安装
+- [**27**Star][4m] [Py] [mvelazc0/purplespray](https://github.com/mvelazc0/purplespray) PurpleSpray is an adversary simulation tool that executes password spray behavior under different scenarios and conditions with the purpose of generating attack telemetry in properly monitored Windows enterprise environments
+- [**27**Star][1m] [vgkintsugi/ghidra-segasaturn-processor](https://github.com/vgkintsugi/ghidra-segasaturn-processor) A Ghidra processor module for the Sega Saturn (SuperH SH-2)
+- [**27**Star][2y] [JS] [imshubhamsingh/farmerchain](https://github.com/imshubhamsingh/farmerchain) A collaborative and collective pool farming system with built in blockchain based self financing system to help farmers become self-reliant. | ᴘʀᴏᴏꜰ ᴏꜰ ᴄᴏɴᴄᴇᴘᴛ
+- [**27**Star][4m] [Java] [usdag/cstc](https://github.com/usdag/cstc)
+- [**27**Star][2y] [Py] [dixel/wifi-linux](https://github.com/dixel/wifi-linux) Simple python script to monitor access point signal strength.
+- [**27**Star][5y] [Py] [bendemott/captiveportal](https://github.com/bendemott/captiveportal) A captive portal that can be used on most linux distributions.
+- [**27**Star][6d] [C++] [vulcainreo/dvid](https://github.com/vulcainreo/dvid) Damn Vulnerable IoT Device
+- [**27**Star][29d] [C++] [gdabah/win32k-bugs](https://github.com/gdabah/win32k-bugs) Dump of win32k POCs for bugs I've found
+- [**27**Star][3m] [grapheneos/os_issue_tracker](https://github.com/grapheneos/os_issue_tracker) Issue tracker for GrapheneOS Android Open Source Project hardening work. Standalone projects like Auditor, AttestationServer and hardened_malloc have their own dedicated trackers.
+- [**27**Star][5m] [C#] [axdsan/dnspy-stringsanalyzer](https://github.com/axdsan/dnspy-stringsanalyzer) Plugin for DnSpy - Analyze through assemblies and display their strings.
+- [**27**Star][2m] [hrt/anticheatjs](https://github.com/hrt/anticheatjs) Javascript Anti Cheats 101
+- [**27**Star][1m] [C] [usineur/sdlpop](https://github.com/usineur/SDLPoP) An open-source port of Prince of Persia, based on the disassembly of the DOS version.
+- [**27**Star][5y] [C] [exploiteers/nestdfuattack](https://github.com/exploiteers/NestDFUAttack) Packages to attack the Google Nest's DFU mode.
+- [**27**Star][1y] [C++] [fdiskyou/winalloctracer](https://github.com/fdiskyou/WinAllocTracer) Pintool that logs and tracks calls to RtlAllocateHeap, RtlReAllocateHeap, RtlFreeHeap, VirtualAllocEx, and VirtualFreeEx.
+- [**27**Star][7y] [Java] [alessiodallapiazza/wpscan](https://github.com/alessiodallapiazza/WPScan)
+- [**27**Star][1y] [Jupyter Notebook] [aicoe/prometheus-data-science](https://github.com/AICoE/prometheus-data-science) A collection of analysis, analytics, and machine learning techniques for time series forecasting w/ Prometheus metrics
+- [**27**Star][10m] [JS] [1lastbr3ath/s2o](https://github.com/1lastBr3ath/S2O) Chrome extension to inspect and find domains that don't resolve or have expired
+- [**27**Star][6y] [osirislab/xnippet](https://github.com/osirislab/xnippet) A little tool to execute functions without debugging an entire executable. Originally written by Gonzalo J. Carracedo (BatchDrake).
+- [**27**Star][3m] [Shell] [imwally/coffeeconnect](https://github.com/imwally/coffeeconnect) Connect to Starbucks WiFi without opening a browser.
+- [**27**Star][2y] [Py] [taroballzchen/shecodject](https://github.com/TaroballzChen/shecodject) shecodject is a autoscript for shellcode injection by Python3 programing
+- [**27**Star][16d] [PHP] [backdoorhub/shell-backdoor-list](https://github.com/backdoorhub/shell-backdoor-list)
+- [**27**Star][2y] [tatsui-geek/malware-traffic-analysis.net](https://github.com/tatsui-geek/malware-traffic-analysis.net) Download pcap files from
+- [**27**Star][2y] [shmilylty/kalitools](https://github.com/shmilylty/kalitools) Kali Linux工具清单
+- [**27**Star][5m] [Java] [bit4woo/burp-api-drops](https://github.com/bit4woo/burp-api-drops) burp suite API 处理http请求和响应的基本流程
+- [**27**Star][1y] [JS] [zjlywjh001/phrackctf-team-docker](https://github.com/zjlywjh001/phrackctf-team-docker) Docker image for phrackCTF-Platform-Team Project.
+- [**27**Star][6y] [C++] [zhaolong/libparser](https://github.com/zhaolong/libparser) 解析静态库(Lib)文件,提取出所有函数信息,组织成自定义格式文件
+- [**27**Star][4y] [Java] [zerothoughts/jndipoc](https://github.com/zerothoughts/jndipoc) Proof of concept showing how java byte code can be injected through InitialContext.lookup() calls
+- [**27**Star][2y] [C] [zerosum0x0/zeroload](https://github.com/zerosum0x0/zeroload)
+- [**27**Star][3m] [Java] [zerokilo/xexloaderwv](https://github.com/zerokilo/xexloaderwv) Ghidra Loader Module for X360 XEX Files
+- [**27**Star][5m] [Smarty] [zee-ahmed/kube-owasp-zap](https://github.com/zee-ahmed/kube-owasp-zap) Owasp Zap chart for Kubernetes
+- [**27**Star][4y] [Scheme] [yifanlu/cgen](https://github.com/yifanlu/cgen) CGEN with support for generating IDA Pro IDP modules
+- [**27**Star][2y] [Py] [yehgdotnet/s3scanner](https://github.com/yehgdotnet/s3scanner) Scan for open S3 buckets and dump
+- [**27**Star][2y] [C] [yara-rules/r2yara](https://github.com/yara-rules/r2yara) r2yara - Module for Yara using radare2 information
+- [**27**Star][7y] [Py] [yanlinlin82/plcscan](https://github.com/yanlinlin82/plcscan) Automatically exported from code.google.com/p/plcscan
+- [**27**Star][3m] [Shell] [yahuiwong/docker-ss-tproxy](https://github.com/yahuiwong/docker-ss-tproxy) ss-redir 全局透明代理 (REDIRECT + TPROXY)
+- [**27**Star][9m] [Py] [xajkep/xpt](https://github.com/xajkep/xpt) XPT - XSS Polyglot Tester
+- [**27**Star][12m] [PS] [wuseman/wloader](https://github.com/wuseman/wloader) Windows 10 PRO Activator - No more backdoors via loaders from China and neither you will need any crack anymore that is valid for a week or two. This is script is written for powershell/cmd. This script will also removing all bloatware from Windows 10. Edit the script after your needs.
+- [**27**Star][4y] [Py] [williballenthin/python-evt](https://github.com/williballenthin/python-evt) Pure Python parser for classic Windows Event Log files (.evt)
+- [**27**Star][1y] [JS] [whizkydee/type-reverse](https://github.com/whizkydee/type-reverse)
+- [**27**Star][5y] [Py] [webstersprodigy/webstersprodigy](https://github.com/webstersprodigy/webstersprodigy) misc pentest tools.
+- [**27**Star][3y] [Py] [w4kfu/ida_loader](https://github.com/w4kfu/ida_loader) Some loader module for IDA
+- [**27**Star][3y] [C++] [vusec/typesan](https://github.com/vusec/typesan) TypeSan checks casts in C++ code - code released for CCS 2016
+- [**27**Star][8m] [Py] [vngkv123/ctf](https://github.com/vngkv123/ctf) CTF binary exploit code
+- [**27**Star][3m] [C++] [vertextoedge/windowfunctiontracer](https://github.com/vertextoedge/windowfunctiontracer) Window Executable file Function tracer using Debugging API
+- [**27**Star][2y] [Py] [vergecurrency/electrum-xvg-tor](https://github.com/vergecurrency/electrum-xvg-tor) XVG TOR Electrum Client for connecting to the VERGE XVG TOR Electrum Server
+- [**27**Star][8m] [vah13/oraclecve](https://github.com/vah13/oraclecve) Vulnerabilities which found in Oracle products
+- [**27**Star][1y] [Py] [undeadsec/goblinwordgenerator](https://github.com/undeadsec/goblinwordgenerator) Python wordlist generator
+- [**27**Star][2y] [Go] [u35s/ag](https://github.com/u35s/ag) 一个用go实现的命令行下查看每个网卡详细流量的小工具
+- [**27**Star][3y] [Py] [toxic-ig/sql-xss](https://github.com/toxic-ig/sql-xss) A few SQL and XSS attack tools
+- [**27**Star][2y] [HTML] [torque59/aws-vulnerable-lambda](https://github.com/torque59/aws-vulnerable-lambda) An AWS Lambda vulnerable application written in flask.
+- [**27**Star][3y] [C] [tinysec/runwithdll](https://github.com/tinysec/runwithdll) windows create process with a dll load first time via LdrHook
+- [**27**Star][1y] [Py] [tildedennis/malware](https://github.com/tildedennis/malware)
+- [**27**Star][4y] [JS] [threatstack/pigsty](https://github.com/threatstack/pigsty) Pigsty is very efficient and customizable spooler for the unified2 file format.
+- [**27**Star][3y] [HTML] [thoppe/5baa61e4c9b93f3f0682250b6cf8331b7ee68fd8](https://github.com/thoppe/5baa61e4c9b93f3f0682250b6cf8331b7ee68fd8) RNN-LSTM that learns passwords from a starting list
+- [**27**Star][7m] [Py] [thombashi/pingparsing](https://github.com/thombashi/pingparsing) pingparsing is a CLI-tool/Python-library parser and transmitter for ping command output.
+- [**27**Star][1y] [Py] [thesecondsun/pasm](https://github.com/thesecondsun/pasm) Linux assembler/disassembler based on Rasm2
+- [**27**Star][10m] [Py] [thehive-project/synapse](https://github.com/thehive-project/synapse) a Meta Alert Feeder for TheHive, a Security Incident Response Platform
+- [**27**Star][1m] [PHP] [telnet22/kn0ck](https://github.com/telnet22/kn0ck) Automated Tools Pentest
+- [**27**Star][2m] [Erlang] [technion/ct_advisor](https://github.com/technion/ct_advisor) A monitoring service for Certificate Transparency
+- [**27**Star][3y] [Perl] [tanjiti/perl_tools](https://github.com/tanjiti/perl_tools) perl小工具
+- [**27**Star][1m] [Py] [szysec/ctftest](https://github.com/szysec/ctftest)
+- [**27**Star][1y] [systemli/ansible-role-hidden-service](https://github.com/systemli/ansible-role-hidden-service) Ansible role to install & maintain Tor Hidden Services
+- [**27**Star][2y] [Py] [syslog777/psak](https://github.com/syslog777/psak) The Pentester's Swiss Army Knife
+- [**27**Star][1y] [Py] [sweetsoftware/artemis](https://github.com/sweetsoftware/artemis) Phishing webapp generator
+- [**27**Star][3y] [Py] [swackhamer/vt_notification_puller](https://github.com/swackhamer/vt_notification_puller) VirusTotal Intelligence Notification Puller
+- [**27**Star][2m] [C] [surajfale/passthrough-minifilter-driver](https://github.com/surajfale/passthrough-minifilter-driver) Windows mini-filter-driver. Blocks the access to USB drives.
+- [**27**Star][2y] [JS] [supersaiyansss/wechatspider](https://github.com/supersaiyansss/wechatspider) 基于中间人攻击的微信公众号爬虫 2017/9/19更新
+- [**27**Star][11m] [Smali] [strazzere/emacs-smali](https://github.com/strazzere/emacs-smali) Smali/Baksmali mode for Emacs
+- [**27**Star][11d] [Go] [stefansundin/ec2-metadata-filter](https://github.com/stefansundin/ec2-metadata-filter) Enhance the security of the EC2 metadata service.
+- [**27**Star][2y] [Ruby] [stebbins/strigil](https://github.com/stebbins/strigil) Strigil is an OSINT tool for collecting and aggregating social media data
+- [**27**Star][3y] [stayliv3/iotsec](https://github.com/stayliv3/iotsec) 收集物联网安全相关资料
+- [**27**Star][1m] [Py] [spuerbread/kun](https://github.com/spuerbread/kun) 插件化漏洞扫描器
+- [**27**Star][6m] [C] [souhailhammou/kernelsymbolshelper](https://github.com/souhailhammou/kernelsymbolshelper) Retrieve pointers to undocumented kernel functions and offsets to members within undocumented structures to use in your driver by using the symbol server.
+- [**27**Star][8y] [Ruby] [sophsec/wordlist](https://github.com/sophsec/wordlist) A Ruby library for generating and working with wordlists.
+- [**27**Star][4y] [Py] [smeegesec/burp-importer](https://github.com/smeegesec/burp-importer) Burp Suite Importer - Connect to multiple web servers while populating the sitemap.
+- [**27**Star][4m] [C] [skx/pam_pwnd](https://github.com/skx/pam_pwnd) A PAM module to test passwords against previous leaks at haveibeenpwned.com
+- [**27**Star][2y] [HTML] [shikarisenpai/leak-ntlm-hash-via-html](https://github.com/shikarisenpai/leak-ntlm-hash-via-html) List of HTML tags for leaking NTLM-hashes
+- [**27**Star][2y] [Lua] [shengnoah/riff](https://github.com/shengnoah/riff) 一个基于lua插件的pcap监控工具。
+- [**27**Star][2y] [Makefile] [shadowsocksr-rm/openwrt-shadowsocksr](https://github.com/shadowsocksr-rm/openwrt-shadowsocksr) ShadowsocksR-libev for OpenWrt/LEDE
+- [**27**Star][3m] [C#] [shack2/swebscan](https://github.com/shack2/swebscan) SWebScan是一款基于C#的Web目录扫描器。
+- [**27**Star][2y] [C] [sentinel-one/minhook](https://github.com/sentinel-one/minhook) The Minimalistic x86/x64 API Hooking Library for Windows
+- [**27**Star][2y] [PHP] [securelayer7/csv-injection-vulnerable-php-script-](https://github.com/securelayer7/csv-injection-vulnerable-php-script-) CSV injection Vulnerable Script.
+- [**27**Star][9d] [C++] [schdub/protodec](https://github.com/schdub/protodec) Protobuf decompiler
+- [**27**Star][3y] [C] [salmg/audiospoof](https://github.com/salmg/audiospoof) Magnetic stripe spoofer implementing audio waves.
+- [**27**Star][1y] [TS] [robinyo/ionic-angular-schematics](https://github.com/robinyo/ionic-angular-schematics) Schematics for Ionic Angular
+- [**27**Star][6m] [Shell] [rithvikvibhu/nh-magisk-wifi-firmware](https://github.com/rithvikvibhu/nh-magisk-wifi-firmware) This Magisk module adds the required firmware for external wireless adapters to be used with NetHunter.
+- [**27**Star][1y] [Jupyter Notebook] [rh01/raspi-driving-car](https://github.com/rh01/raspi-driving-car) Capstone Auto RC Car
+- [**27**Star][4d] [retarded-skid/skidsuite-3](https://github.com/retarded-skid/skidsuite-3) A collection of java reverse engineering tools and informational links
+- [**27**Star][3y] [Py] [regit/opensvp](https://github.com/regit/opensvp) Opensvp is a security tool implementing "attacks" to be able to test the resistance of firewall to protocol level attack.
+- [**27**Star][2y] [re4lity/secpaper](https://github.com/re4lity/secpaper) SecurityPaper For
+- [**27**Star][1y] [PHP] [rakshitshah94/wordpress-wp-vcd-malware-attack-solution](https://github.com/rakshitshah94/wordpress-wp-vcd-malware-attack-solution) Another attack on wordpress 4.8
+- [**27**Star][1y] [Java] [rabrg/refactored-client](https://github.com/rabrg/refactored-client) Refactoring the obfuscated v317 of the RuneScape (RuneTek 3) client.
+- [**27**Star][9m] [C#] [raandree/managedpasswordfilter](https://github.com/raandree/managedpasswordfilter) Windows Password Filter that uses managed code internally
+- [**27**Star][7m] [Py] [qingxp9/cve-2019-6203-poc](https://github.com/qingxp9/cve-2019-6203-poc) PoC for CVE-2019-6203, works on < iOS 12.2, macOS < 10.14.4
+- [**27**Star][1y] [Py] [psiquelabs/dot2moon](https://github.com/psiquelabs/dot2moon) Tool that checks for path traversal traces in a given web application url, plus it is capable of multi-threading, set timeout and 5-layers verification.
+- [**27**Star][2m] [C++] [progmboy/win32kext](https://github.com/progmboy/win32kext) windbg plugin for win32k debugging
+- [**27**Star][3y] [PS] [powershell/dscconfigurations](https://github.com/powershell/dscconfigurations)
+- [**27**Star][3y] [Java] [portswigger/xss-validator](https://github.com/portswigger/xss-validator) This is a burp intruder extender that is designed for automation and validation of XSS vulnerabilities.
+- [**27**Star][7m] [Py] [plaperdr/blink-docker](https://github.com/plaperdr/blink-docker) Tool to mitigate browser fingerprint tracking
+- [**27**Star][3y] [Visual Basic .NET] [phreak87/espeensy-and-peensy-payload-generator-esp8266-teensy-3.5-](https://github.com/phreak87/espeensy-and-peensy-payload-generator-esp8266-teensy-3.5-) Build your own Bad USB Stick for pentesting with wifi and dip switches
+- [**27**Star][5m] [PHP] [paul-axe/ctf](https://github.com/paul-axe/ctf) CTF stuff
+- [**27**Star][2y] [Shell] [owtf/owtf-docker](https://github.com/owtf/owtf-docker) Docker repository for OWTF (64-bit Kali)
+- [**27**Star][1m] [C] [oracle/libdtrace-ctf](https://github.com/oracle/libdtrace-ctf) libdtrace-ctf is the Compact Type Format library used by DTrace on Linux
+- [**27**Star][1y] [C] [openbsm/bsmtrace](https://github.com/openbsm/bsmtrace) BSM based intrusion detection system
+- [**27**Star][7m] [PS] [onelogicalmyth/invoke-gppcse](https://github.com/onelogicalmyth/invoke-gppcse) Obtains a list of GPOs based on known Client Side Extensions (CSE) that normally contain passwords
+- [**27**Star][5y] [C] [olsut/kinject-x64](https://github.com/olsut/kinject-x64) Kinject - kernel dll injector, currently available in x86 version, will be updated to x64 soon.
+- [**27**Star][2y] [C] [okazakinagisa/vtbaseddebuggerwin7](https://github.com/okazakinagisa/vtbaseddebuggerwin7) Simple kernelmode driver.
+- [**27**Star][9m] [Go] [nullhypothesis/sybilhunter](https://github.com/nullhypothesis/sybilhunter) Hunting for Sybils and anomalies in archived Tor network data.
+- [**27**Star][9m] [Py] [nullarray/amplispy](https://github.com/nullarray/amplispy) Check local or remote list of DNS servers for suitability in DNS Amplification DoS.
+- [**27**Star][1y] [Py] [nucypher/sputnik](https://github.com/nucypher/sputnik) Sputnik is an assembly language and interpreter for Fully Homomorphic Encryption
+- [**27**Star][2y] [Java] [ninetysec/cknife](https://github.com/ninetysec/cknife) Cknife
+- [**27**Star][4y] [C++] [nihilus/ida-pro-swf](https://github.com/nihilus/ida-pro-swf) SWF Process
+- [**27**Star][2y] [Py] [niexinming/safe_tool](https://github.com/niexinming/safe_tool) safe_tools
+- [**27**Star][3y] [Py] [nicksanzotta/smbshakedown](https://github.com/nicksanzotta/smbshakedown) A simplified SMB Email Client Attack script used for pentests.
+- [**27**Star][2y] [Py] [netspi/jig](https://github.com/netspi/jig) Jira Information Gatherer
+- [**27**Star][4m] [C++] [netdex/twinject](https://github.com/netdex/twinject) Automated player and hooking framework for bullet hell games from the Touhou Project
+- [**27**Star][3y] [Java] [nccgroup/jmxbf](https://github.com/nccgroup/jmxbf) A brute force program to test weak accounts configured to access a JMX Registry
+- [**27**Star][4y] [Py] [nbshelton/bitdump](https://github.com/nbshelton/bitdump) A tool to extract database data from a blind SQL injection vulnerability.
+- [**27**Star][4m] [Py] [n4xh4ck5/v1d0m](https://github.com/n4xh4ck5/v1d0m) Enumerate subdomains through Virustotal
+- [**27**Star][2y] [Shell] [n3uz/t-pot-autoinstall](https://github.com/n3uz/t-pot-autoinstall) T-POT 针对中国区替换国内加速镜像
+- [**27**Star][3y] [Py] [mzweilin/ipv6-attack-detector](https://github.com/mzweilin/ipv6-attack-detector) Google Summer of Code 2012 project, supported by The Honeynet Project organization.
+- [**27**Star][2y] [Py] [mrts/burp-suite-http-proxy-history-converter](https://github.com/mrts/burp-suite-http-proxy-history-converter) Python script that converts Burp Suite HTTP proxy history files to CSV or HTML
+- [**27**Star][1y] [Rust] [mortendahl/rust-paillier](https://github.com/mortendahl/rust-paillier) A pure-Rust implementation of the Paillier encryption scheme
+- [**27**Star][2y] [Py] [morphuslabs/distinct](https://github.com/morphuslabs/distinct) Find potential Indicators of Compromise among similar Linux servers
+- [**27**Star][1y] [C++] [moccajoghurt/memwars](https://github.com/moccajoghurt/memwars)
+- [**27**Star][4y] [Py] [misteriouser/nextkey](https://github.com/misteriouser/nextkey) Free KeyLogger for Kali Linux and Ubuntu
+- [**27**Star][11m] [Java] [minecraftforge/fernflower](https://github.com/minecraftforge/fernflower) Unofficial mirror of FernFlower Java decompiler, Subtree split of:
+- [**27**Star][4y] [TeX] [mimoo/timing_attack_ecdsa_tls](https://github.com/mimoo/timing_attack_ecdsa_tls) Timing Attack on TLS' ECDSA signature
+- [**27**Star][2y] [C#] [milo2012/owadump](https://github.com/milo2012/owadump) Search Email Accounts (OWA) for Passwords, PAN numbers as well as other Keywords
+- [**27**Star][15d] [C] [microsoft/wafbench](https://github.com/microsoft/wafbench) WAFBench (wb) is a tool to measure the performance of WAF(Web Application Firewall) . It's based on latest code of ab (ApacheBench), and adds support for real trace replaying, framework of testing waf (FTW), and some other features.
+- [**27**Star][1m] [Py] [mhaskar/xssradare](https://github.com/mhaskar/xssradare) A Cross Site Scripting scanner using selenium webdriver
+- [**27**Star][10y] [C] [mcolyer/ifuse](https://github.com/mcolyer/ifuse) No longer actively developed here, see
+- [**27**Star][5m] [Go] [mcandre/stank](https://github.com/mcandre/stank) stank: analyzers for determining whether files smell like rotten POSIX shell scripts, or faintly rosy like Ruby and Python scripts
+- [**27**Star][3y] [C] [matteoserva/dirtycow-arm32](https://github.com/matteoserva/dirtycow-arm32)
+- [**27**Star][2y] [mahmudz/malware](https://github.com/mahmudz/malware)
+- [**27**Star][4m] [Go] [magisterquis/dnsbotnet](https://github.com/magisterquis/dnsbotnet) DNS Botnet Server and Client
+- [**27**Star][6m] [C++] [m-r-j-o-h-n/swh-injector](https://github.com/m-r-j-o-h-n/swh-injector) An Injector that can inject dll into game process protected by anti cheat using SetWindowsHookEx.
+- [**27**Star][4y] [C++] [luorui110120/idaplugins](https://github.com/luorui110120/idaplugins) IDA plugins, No Doc
+- [**27**Star][5y] [Go] [lucdew/goransomware](https://github.com/lucdew/goransomware) Ransomware written in Go language
+- [**27**Star][5y] [JS] [lubyruffy/livemapdemo](https://github.com/lubyruffy/livemapdemo) 地图实时攻击演示
+- [**27**Star][8m] [C++] [lordnoteworthy/binary-auditing-solutions](https://github.com/lordnoteworthy/binary-auditing-solutions) Solutions for Binary Auditing Package:
+- [**27**Star][3m] [PS] [loadenmb/tvasion](https://github.com/loadenmb/tvasion)
+- [**27**Star][4m] [C++] [lianglixin/remotecontrol-x3](https://github.com/lianglixin/remotecontrol-x3) Saurik remote control software opensource, X17 is now available.
+- [**27**Star][4y] [C] [lcxl/lcxl-shadow](https://github.com/lcxl/lcxl-shadow) LCXL影子系统
+- [**27**Star][8y] [PHP] [koto/squid-imposter](https://github.com/koto/squid-imposter) Phishing attack w/HTML5 offline cache framework based on Squid proxy
+- [**27**Star][11m] [C#] [kostapc/putty-tunnel-manager](https://github.com/kostapc/putty-tunnel-manager) Fixes and new release. PuTTY Tunnel Manager allows you to easily open tunnels, that are defined in a PuTTY session, from the system tray. You can also move the tunnels from PuTTY to PuTTY Tunnel Manager. This allows you to use PuTTY just for SSH shell sessions (without opening tunnels), and use PuTTY Tunnel Manager just for tunneling.
+- [**27**Star][2y] [Go] [kensodev/micro-auth-proxy](https://github.com/kensodev/micro-auth-proxy) Github Auth proxy designed for micro-apps with static client and an API server
+- [**27**Star][7y] [Py] [kcreyts/plugxdecoder](https://github.com/kcreyts/plugxdecoder) Decodes PlugX traffic and encrypted/compressed artifacts
+- [**27**Star][8m] [C++] [karaulov/warcraftiii_dll_126-127](https://github.com/karaulov/warcraftiii_dll_126-127) Improvements for Warcraft III 126a used in new DoTA (d1stats.ru). Auto unload from w3x map and load to Warcraft III !
+- [**27**Star][2y] [JS] [kafuuchinoq/v2raygeokit](https://github.com/kafuuchinoq/v2raygeokit)
+- [**27**Star][2y] [Ruby] [kacperszurek/pentest_teamcity](https://github.com/kacperszurek/pentest_teamcity) Pentest TeamCity using Metasploit
+- [**27**Star][7m] [C++] [slyd0g/timestomper](https://github.com/slyd0g/TimeStomper) PoC that manipulates Windows file times using SetFileTime() API
+- [**27**Star][2y] [Go] [jsimonetti/tlstun](https://github.com/jsimonetti/tlstun) A socks tunnel client and server using websockets over http and tls
+- [**27**Star][4m] [Py] [josue87/airopy](https://github.com/josue87/airopy) Get clients and access points.
+- [**27**Star][6d] [C] [johndoe31415/ratched](https://github.com/johndoe31415/ratched) Ratched is a transparent Man-in-the-Middle TLS proxy intended for penetration testing
+- [**27**Star][3y] [Py] [jofpin/sack](https://github.com/jofpin/sack) Identify connection of sessions for social engineering attacks.
+- [**27**Star][6m] [C++] [jnastarot/soul_eater](https://github.com/jnastarot/soul_eater) it can extract functions from .dll, .exe, .sys and it be work! :)
+- [**27**Star][4y] [JS] [jgegeny/gootkit-xswkit-js](https://github.com/jgegeny/gootkit-xswkit-js)
+- [**27**Star][5d] [Java] [jenkinsci/remoting-kafka-plugin](https://github.com/jenkinsci/remoting-kafka-plugin) Jenkins Remoting over Kafka
+- [**27**Star][7y] [C] [izsh/exploits](https://github.com/izsh/exploits) various exploits
+- [**27**Star][4m] [C] [ispras/qemu](https://github.com/ispras/qemu)
+- [**27**Star][12m] [C] [intelpt/winafl-intelpt](https://github.com/intelpt/winafl-intelpt) A fork of AFL for fuzzing Windows binaries
+- [**27**Star][3y] [C++] [int0/ltmdm64_poc](https://github.com/int0/ltmdm64_poc) ltmdm64_poc:利用ltmdm64.sys 的漏洞绕过 Windows 7 SP1 x64 的代码完整性检查
+- [**27**Star][4m] [C] [hyrathon/pocs](https://github.com/hyrathon/pocs) Some Proof-of-Concepts of bugs I found
+- [**27**Star][4y] [C] [hxp2k6/smart7ec-scan-console](https://github.com/hxp2k6/smart7ec-scan-console) 基于Linux c开发的插件式扫描器(Python/lua)
+- [**27**Star][8d] [Perl] [hknutzen/netspoc](https://github.com/hknutzen/netspoc) A network security policy compiler. Netspoc is targeted at large environments with a large number of firewalls and admins. Firewall rules are derived from a single rule set. Supported are Cisco IOS, NX-OS, ASA and IPTables.
+- [**27**Star][6y] [C++] [hexgolems/pint](https://github.com/hexgolems/pint) A debugger backend and LUA wrapper for PIN
+- [**27**Star][2y] [Go] [heptiolabs/certstream-slack](https://github.com/heptiolabs/certstream-slack) A small daemon that watches your domains in Certificate Transparency logs and posts them into Slack
+- [**27**Star][6m] [hardenedlinux/embedded-iot_profile](https://github.com/hardenedlinux/embedded-iot_profile) embedded-iot_profile
+- [**27**Star][2y] [JS] [hans-strudle/coinjack](https://github.com/hans-strudle/coinjack) Extension to HiJack/control web miners (like CoinHive)
+- [**27**Star][4y] [C] [hannob/selftls](https://github.com/hannob/selftls) Sample application to let OpenSSL talk to itself (for fuzzing)
+- [**27**Star][7m] [CSS] [hackeryunen/django-xss-platform](https://github.com/hackeryunen/django-xss-platform)
+- [**27**Star][6y] [C] [gwroblew/detectxsslib](https://github.com/gwroblew/detectxsslib)
+- [**27**Star][2y] [Shell] [gustavosotnas/avd-launcher](https://github.com/gustavosotnas/avd-launcher) Front-end to Android Virtual Devices (AVDs) emulator from Google.
+- [**27**Star][8y] [Py] [greysign/pysec](https://github.com/greysign/pysec) python安全编程
+- [**27**Star][11m] [C++] [giantpune/mailboxbomb](https://github.com/giantpune/mailboxbomb) a program used to build the mailbox bomb exploit for the Wii system menu.
+- [**27**Star][3y] [Py] [gdataadvancedanalytics/r2graphity](https://github.com/gdataadvancedanalytics/r2graphity) Creating function call graphs based on radare2 framwork, plot fancy graphs and extract behavior indicators
+- [**27**Star][2y] [Py] [fsacer/nps_payload](https://github.com/fsacer/nps_payload) This script will generate payloads for basic intrusion detection avoidance. It utilizes publicly demonstrated techniques from several different sources. Written by Larry Spohn (
+- [**27**Star][3y] [fouroctets/android-malware-samples](https://github.com/fouroctets/android-malware-samples) Android Malware Samples
+- [**27**Star][5m] [Py] [fluxchief/binaryninja_avr](https://github.com/fluxchief/binaryninja_avr) Binaryninja AVR architecture plugin with lifting
+- [**27**Star][8y] [Py] [fitblip/pydbg](https://github.com/fitblip/pydbg) A pure-python win32 debugger interface.
+- [**27**Star][8m] [Py] [fireeye/vocab_scraper](https://github.com/fireeye/vocab_scraper) Vocabulary Scraper script used in FLARE's analysis of Russian-language Carbanak source code
+- [**27**Star][3y] [Py] [fare9/androidswissknife](https://github.com/fare9/androidswissknife) Framework for static and dynamic analysis in Android APKs
+- [**27**Star][5m] [Py] [enovella/re-scripts](https://github.com/enovella/re-scripts) IDA, Ghidra and Radare2 scripts(no documentation)
+- [**27**Star][5m] [HTML] [edoverflow/security-template](https://github.com/edoverflow/security-template) A static website template for security pages.
+- [**27**Star][2y] [syst3ma/awesome_cisco_exploitation](https://github.com/syst3ma/awesome_cisco_exploitation) A curated list of awesome Cisco exploitation resources
+- [**27**Star][4m] [dustyfresh/dictionaries](https://github.com/dustyfresh/dictionaries) curated password lists and various other lists/dictionaries for security things
+- [**27**Star][2m] [Dockerfile] [dukebarman/ghidra-builder](https://github.com/dukebarman/ghidra-builder) Docker image for building ghidra RE framework from source
+- [**27**Star][3y] [Py] [duk3luk3/onion-py](https://github.com/duk3luk3/onion-py) Python wrapper for the OnionOO tor status API
+- [**27**Star][3y] [C++] [dragonfive/opencv_tld](https://github.com/dragonfive/opencv_tld) TLD:tracking-learning-detection 跟踪算法
+- [**27**Star][8m] [Dockerfile] [dockage/tor-privoxy](https://github.com/dockage/tor-privoxy) Docker Tor proxy (http and shell) built on Alpine Linux
+- [**27**Star][4y] [C++] [dkemp/vulndev](https://github.com/dkemp/vulndev) Vulnerability research and development.
+- [**27**Star][5y] [Py] [djteller/memoryanalysis](https://github.com/djteller/memoryanalysis) Automated Memory Analysis (Black Hat Arsenal 2014)
+- [**27**Star][6m] [HTML] [divyanshusahu/minictf](https://github.com/divyanshusahu/minictf) A platform build in django for hosting CTF events.
+- [**27**Star][10m] [C] [devdavisnunez/vhbb](https://github.com/devdavisnunez/vhbb) Browse, download, and launch Vita homebrews!
+- [**27**Star][8m] [Ruby] [dev-sec/ansible-apache-hardening](https://github.com/dev-sec/ansible-apache-hardening)
+- [**27**Star][2y] [C] [deroko/activationcontexthook](https://github.com/deroko/activationcontexthook) activationcontexthook:Hook 进程,强制进程加载重定向的 DLL
+- [**27**Star][3y] [Py] [deralexxx/firemisp](https://github.com/deralexxx/firemisp) FireEye Alert json files to MISP Malware information sharing plattform (Alpha)
+- [**27**Star][2y] [C] [daveti/usbfilter](https://github.com/daveti/usbfilter) A USB layer firewall for the Linux kernel
+- [**27**Star][1y] [PS] [danmcinerney/invoke-cats](https://github.com/danmcinerney/invoke-cats) Obfuscated Invoke-Mimikatz
+- [**27**Star][3y] [danielmiessler/atm](https://github.com/danielmiessler/atm) The Adaptive Security Testing Methodology (ASTM) provides context-adjusted testing methodologies based on factors such as time available to test, platform, technology stack, versions, plugins, modules, and other variables.
+- [**27**Star][3y] [PureBasic] [dadido3/d3hex](https://github.com/dadido3/d3hex) The first dataflow based Hex-Editor!
+- [**27**Star][3y] [Py] [d4vinci/clickjacking-tester](https://github.com/d4vinci/clickjacking-tester) A python script designed to check if the website if vulnerable of clickjacking and create a poc
+- [**27**Star][4y] [PHP] [ctubio/php-proxy-stratum](https://github.com/ctubio/php-proxy-stratum) ReactPHP stratum+tcp proxy between miners and pools with database and frontend.
+- [**27**Star][7y] [C++] [colagrosso/avviso](https://github.com/colagrosso/avviso) (unmaintained) Ring the red phone from your Arduino
+- [**27**Star][21d] [coky-t/owasp-mstg-ja](https://github.com/coky-t/owasp-mstg-ja) draft for Japanese translation of OWASP Mobile Security Testing Guide.
+- [**27**Star][2y] [Java] [coh7eiqu8thabu/slocker](https://github.com/coh7eiqu8thabu/slocker) Source code of the SLocker Android ransomware
+- [**27**Star][3y] [C] [cn33liz/hsevd-stackoverflow](https://github.com/cn33liz/hsevd-stackoverflow) HackSys Extreme Vulnerable Driver - StackOverflow Exploit
+- [**27**Star][3y] [C] [chuckixia/mirai-source-code](https://github.com/chuckixia/mirai-source-code) Leaked Mirai Source Code - make it vagrantized
+- [**27**Star][4y] [Py] [cheetz/icmpshock](https://github.com/cheetz/icmpshock) A scanning tool for the ShellShock bash vulnerability
+- [**27**Star][10d] [JS] [checkmyhttps/checkmyhttps](https://github.com/checkmyhttps/checkmyhttps) We propose a user-friendly add-on that allows you to check if your encrypted web traffic (SSL/TLS) towards secured Internet servers (HTTPS) is not intercepted (being listened to).
+- [**27**Star][11m] [JS] [chainsecurity/constantinople-reentrancy](https://github.com/chainsecurity/constantinople-reentrancy) Vulnerable code example including tests for Constantinople Reentrancy
+- [**27**Star][10m] [HTML] [cainiaocome/xssgun](https://github.com/cainiaocome/xssgun) xss payloads generator
+- [**27**Star][6y] [Py] [c0d3sh3lf/android_forensics](https://github.com/c0d3sh3lf/android_forensics) Bypassing Android Pattern Lock
+- [**27**Star][10d] [JS] [bowlingtoolkit/discord-bots-hack-code](https://github.com/bowlingtoolkit/discord-bots-hack-code) Discord Bots Hacking
+- [**27**Star][1y] [Perl] [bollwarm/app-waf](https://github.com/bollwarm/app-waf) A simple waf application .用来实时探测web 非法访问,统计非法访问的ip ,web状态,访问url,来源web url。结合iptables和nginx可以实现实现实时封禁。
+- [**27**Star][2y] [PHP] [blackfan/web-inf-dict](https://github.com/blackfan/web-inf-dict) List of configuration files from WEB-INF and META-INF for use in Unvalidated Forwards and JSP Include vulnerabilities.
+- [**27**Star][6y] [Py] [bl4ckic3/modbus-fuzzer](https://github.com/bl4ckic3/modbus-fuzzer) Modbus Protocol Fuzzer
+- [**27**Star][5m] [C] [biswa96/wslreverse](https://github.com/biswa96/wslreverse) Experiments with hidden COM interface and LxBus IPC mechanism in WSL
+- [**27**Star][2y] [Go] [biezhi/goinx](https://github.com/biezhi/goinx)
+- [**27**Star][12m] [bcdannyboy/research](https://github.com/bcdannyboy/research) General Research Repository - Only updated when I feel like it
+- [**27**Star][5m] [badappsdevelopment/wifi-cracker](https://github.com/badappsdevelopment/wifi-cracker) Wifi Cracking
+- [**27**Star][2m] [JS] [b-mueller/sabre](https://github.com/b-mueller/sabre) Security analyzer for Solidity smart contracts. Uses MythX, the premier smart contract security service.
+- [**27**Star][6m] [JS] [auth0/passport-wsfed-saml2](https://github.com/auth0/passport-wsfed-saml2) passport strategy for both WS-fed and SAML2 protocol
+- [**27**Star][2y] [atom0s/ceautoasm-x64dbg](https://github.com/atom0s/ceautoasm-x64dbg) An x64dbg plugin that allows users to execute Cheat Engine auto assembler scripts within x64dbg.
+- [**27**Star][7m] [JS] [antville/antville](https://github.com/antville/antville) The Queen Mum of Weblog Hosting Systems – written in JavaScript since 2001.
+- [**27**Star][3y] [Java] [animeshshaw/chromeforensics](https://github.com/animeshshaw/chromeforensics) A tool to perform automated forensic analysis of Chrome Browser.
+- [**27**Star][4y] [C] [anarcheuz/android-pocs](https://github.com/anarcheuz/android-pocs)
+- [**27**Star][2y] [JS] [anandtiwarics/datasploit](https://github.com/anandtiwarics/datasploit) A tool to perform various OSINT techniques, aggregate all the raw data, visualise it on a dashboard, and facilitate alerting and monitoring on the data.
+- [**27**Star][2y] [Shell] [digivill/all-in-one-wifi-cracker](https://github.com/Digivill/All-in-One-WiFi-Cracker) Linux All in One Wifi Cracker
+- [**27**Star][1y] [alonemonkey/iosrebook-issues](https://github.com/alonemonkey/iosrebook-issues) 《iOS应用逆向与安全》 勘误
+- [**27**Star][1y] [C] [alex9191/zerobank-ring0-bundle](https://github.com/alex9191/zerobank-ring0-bundle) Kernel-Mode rootkit that connects to a remote server to send & recv commands
+- [**27**Star][11m] [Py] [al45tair/ds_store](https://github.com/al45tair/ds_store)
+- [**27**Star][1y] [Py] [ajinabraham/xenotix-xbot](https://github.com/ajinabraham/xenotix-xbot) Xenotix xBOT is a Cross Platform PoC Bot that abuse certain Google Services to implement it's C&C
+- [**27**Star][1y] [Py] [ajinabraham/poc](https://github.com/ajinabraham/poc) Proof of Concepts, Exploits
+- [**27**Star][8m] [Go] [ahhh/goredshell](https://github.com/ahhh/goredshell) A cross platform tool for verifying credentials and executing single commands
+- [**27**Star][8y] [Py] [9b/pdfxray_lite](https://github.com/9b/pdfxray_lite) Lite version of PDF X-RAY that uses no backend
+- [**27**Star][4m] [C#] [717021/pcmgr](https://github.com/717021/pcmgr) Windows 任务管理器重制版 A rebulid version for Windows task manager.
+- [**27**Star][2y] [PS] [3gstudent/com-object-hijacking](https://github.com/3gstudent/com-object-hijacking) use COM Object hijacking to maintain persistence.(Hijack CAccPropServicesClass and MMDeviceEnumerator)
+- [**27**Star][2y] [C] [1ce0ear/dllloaderunpacker](https://github.com/1ce0ear/dllloaderunpacker)
+- [**27**Star][4y] [0xicf/scadashutdowntool](https://github.com/0xicf/scadashutdowntool)
+- [**27**Star][1y] [Py] [daniel_plohmann/simplifire.idascope](https://bitbucket.org/daniel_plohmann/simplifire.idascope) An IDA Pro extension for easier (malware) reverse engineering
+- [**26**Star][9m] [Rust] [felipenoris/hyper-reverse-proxy](https://github.com/felipenoris/hyper-reverse-proxy) A simple reverse proxy for use with Hyper and Tokio
+- [**26**Star][1y] [C] [brucedone/darknet_demo](https://github.com/brucedone/darknet_demo) darknet yolov3 tiny train model demo
+- [**26**Star][4m] [Swift] [itsjohnye/lead-ios](https://github.com/itsjohnye/lead-ios) a featherweight iOS SS proxy client with interactive UI
+- [**26**Star][3y] [CSS] [cw1997/mysql-monitor](https://github.com/cw1997/mysql-monitor) MySQL服务器执行SQL记录实时监控(WEB版本)
+- [**26**Star][1y] [C] [martin-ger/esp_peap_psk](https://github.com/martin-ger/esp_peap_psk) A WPA2-PEAP to WPA2-PSK converter
+- [**26**Star][4y] [C] [ufrisk/shellcode64](https://github.com/ufrisk/shellcode64) A minimal tool to extract shellcode from 64-bit PE binaries.
+- [**26**Star][6y] [chokepoint/crunchpwn](https://github.com/chokepoint/crunchpwn) #Pwn Linux (CrunchPwn) is a penetration testing repository/addition for CrunchBang Linux.
+- [**26**Star][20d] [Java] [snail007/goproxy-android](https://github.com/snail007/goproxy-android) snail007/goproxy全能代理服务器安卓版。高性能的http代理、https代理、socks5代理、ss代理、内网穿透、内网穿透p2p、内网穿透代理、内网穿透反向代理、内网穿透服务器、游戏盾、游戏高防、游戏代理,支持API代理认证。websocke代理、tcp代理、udp代理、socket代理、高仿服务器。支持正向代理、反向代理、透明代理、TCP内网穿透、UDP内网穿透、HTTP内网穿透、HTTPS内网穿透、https代理负载均衡、http代理负载均衡、socks5代理负载均衡、socket代理负载均衡、ss代理负载均衡、TCP/UDP端口映射、SSH中转、TLS加密传输、协议转换、防污染DNS代理,限速,限连接数。
+- [**26**Star][2y] [Java] [calebfenton/resequencer](https://github.com/calebfenton/resequencer) Configurable, flexible regex-based APK modification tool.
+- [**26**Star][2y] [Py] [epsylon/orb](https://github.com/epsylon/orb) Orb is a massive footprinting tool.
+- [**26**Star][1y] [Py] [honeynet/checkpot](https://github.com/honeynet/checkpot) Checkpot Honeypot Checker
+- [**26**Star][5y] [Py] [oros42/arp_poisoning_detector](https://github.com/oros42/arp_poisoning_detector) Simple detector of ARP poisoning attack
+- [**26**Star][1y] [Py] [corelan/certmon](https://github.com/corelan/certmon) Certificate Expiration Monitor script
+- [**26**Star][3y] [ObjC] [nabla-c0d3/ios-reversing](https://github.com/nabla-c0d3/ios-reversing) Some iOS tools and scripts from 2014 for iOS reversing.
+- [**26**Star][2m] [C] [oracle/dtrace-utils](https://github.com/oracle/dtrace-utils) DTrace-utils contains the Userspace portion of the DTrace port to Linux
+- [**26**Star][3y] [Py] [juju/plugins](https://github.com/juju/plugins) Basic collection of the first few plugins for Juju
+- [**26**Star][4y] [Shell] [infobyte/distro_checker](https://github.com/infobyte/distro_checker) Cross Distribution Exploit Testing
+- [**26**Star][4y] [Py] [snifer/gpt](https://github.com/snifer/gpt) Gadget Pentesting Tool Scripts
+- [**26**Star][10m] [Py] [neo23x0/ti-falsepositives](https://github.com/neo23x0/ti-falsepositives) A collection of typical false positive indicators
+- [**26**Star][1y] [ctfd/plugins](https://github.com/ctfd/plugins) Official and Community CTFd Plugins
+- [**26**Star][2y] [Java] [lamster2018/learnndk](https://github.com/lamster2018/learnndk) 学习jni及反调试策略
+- [**26**Star][1y] [Ruby] [ajitsing/apktojava](https://github.com/ajitsing/apktojava) View android apk as java code in gui
+- [**26**Star][2m] [PHP] [krowinski/tinyid](https://github.com/krowinski/tinyid) Shorten and obfuscate IDs
+- [**26**Star][2y] [C] [tokenrove/niffy](https://github.com/tokenrove/niffy) NIF testing harness
+- [**26**Star][5m] [Py] [k8gege/sshshell](https://github.com/k8gege/sshshell) sshshell/sshcmd/sshlogin/sshcrack(SSH交互式Shell/内网渗透专用非交互式Shell/SSH密码爆破)Windows & Linux
+- [**26**Star][7m] [Py] [bonnetn/vba-obfuscator](https://github.com/bonnetn/vba-obfuscator) 2018 School project - PoC of malware code obfuscation in Word macros
+- [**26**Star][5d] [thomasking2014/slides](https://github.com/thomasking2014/slides)
+- [**26**Star][6m] [Java] [static-flow/directoryimporter](https://github.com/static-flow/directoryimporter) This is a Burpsuite plugin built to enable you to import your directory bruteforcing results into burp for easy viewing later. This is an alternative to proxying bruteforcing tools through burp to catch the results.
+- [**26**Star][4y] [cure53/publications](https://github.com/cure53/publications)
+- [**26**Star][5m] [Py] [elevenpaths/pesto](https://github.com/elevenpaths/pesto)
+- [**26**Star][2m] [HTML] [restincode/restincode](https://github.com/restincode/restincode) A memorial site for Hackers and Infosec people who have passed
+- [**26**Star][4y] [Py] [stratosphereips/stratospherewindowsips](https://github.com/stratosphereips/StratosphereWindowsIps) The Stratosphere IPS is a free software IPS that uses network behavior to detect and block malicious actions.
+- [**26**Star][3y] [Assembly] [cduplooy/rootkit](https://github.com/CDuPlooy/Rootkit)
+- [**26**Star][2y] [C#] [fsecurelabs/athena](https://github.com/FSecureLABS/Athena) GUI Tool to generate threat intelligence information in various formats
+- [**26**Star][2y] [C++] [kernelm0de/runpe-processhollowing](https://github.com/kernelm0de/RunPE-ProcessHollowing) RunPE
+- [**26**Star][2m] [itechub/sqlmap-wiki-zhcn](https://github.com/itechub/sqlmap-wiki-zhcn)
+- [**26**Star][2y] [Py] [meliot/ryanair-seats](https://github.com/meliot/ryanair-seats) Tool to predict which seat you will have for free
+- [**26**Star][22d] [Py] [joesecurity/jbxapi](https://github.com/joesecurity/jbxapi) Python API wrapper for the Joe Sandbox API.
+- [**26**Star][1y] [C] [fsecurelabs/incognito](https://github.com/FSecureLABS/incognito) One Token To Rule Them All
+- [**26**Star][3y] [Java] [yolosec/upckeygen](https://github.com/yolosec/upckeygen) UPC router default WPA2 key generator
+- [**26**Star][4y] [HTML] [xyntax/campus-fakeap](https://github.com/xyntax/campus-fakeap) 针对校园网的wifi钓鱼工具
+- [**26**Star][1y] [C#] [xljiulang/debugviewer](https://github.com/xljiulang/debugviewer) 用于捕获任意进程调用System.Diagnostics.Debugger.Log (level,category,message)输出的调试内容
+- [**26**Star][2y] [Py] [xiphosresearch/smsisher](https://github.com/xiphosresearch/smsisher) SMS Phishing Tools
+- [**26**Star][2m] [Py] [wybiral/shh](https://github.com/wybiral/shh) Create Tor hidden services in Python.
+- [**26**Star][5m] [Py] [wwkenwong/ctf-writeup](https://github.com/wwkenwong/ctf-writeup)
+- [**26**Star][11m] [Shell] [wuseman/tg799vac-xtream-v16.2-jade](https://github.com/wuseman/tg799vac-xtream-v16.2-jade) My personal unique wiki for hacking the router firmware used by (Telia)TG799vac Xtream Version 16.2 Jade delivered from Technicolor
+- [**26**Star][1m] [JS] [wuseman/sagemcom-fast-5370e-telia](https://github.com/wuseman/sagemcom-fast-5370e-telia) This is my personal wiki for hacking the router firmware used by (Sagemcom)F@ast Version 3.43.2 delivered from Sagemcom
+- [**26**Star][1m] [JS] [vulnogram/vulnogram](https://github.com/vulnogram/vulnogram) Vulnogram is a tool for creating and editing CVE information in CVE JSON format
+- [**26**Star][5m] [C] [visweswaran1998/cybergod-ksgmprh](https://github.com/visweswaran1998/cybergod-ksgmprh) An open-source antivirus for windows
+- [**26**Star][3y] [JS] [venables/node-where](https://github.com/venables/node-where) A very simple geolocation library in node.js
+- [**26**Star][1y] [Py] [v-p-b/windowsdefendertools](https://github.com/v-p-b/windowsdefendertools) Tools for instrumenting Windows Defender's mpengine.dll
+- [**26**Star][5y] [Java] [twilightgod/malwarebuster](https://github.com/twilightgod/malwarebuster) This is a Xposed module. It helps to prevent malwares to register service/receiver which were disabled in My Android Tools before.
+- [**26**Star][2m] [Dockerfile] [trojan-gfw/trojan-docker](https://github.com/trojan-gfw/trojan-docker) Dockerfile for building a trojan docker image.
+- [**26**Star][4y] [Py] [tjcsec/ctf-platform](https://github.com/tjcsec/ctf-platform) A platform for running CTFs
+- [**26**Star][3y] [Py] [tiankonguse/themole](https://github.com/tiankonguse/themole) Mole is an automatic SQL Injection exploitation tool. clone from sourceforge
+- [**26**Star][4y] [Py] [threatminer/ioc_parser](https://github.com/threatminer/ioc_parser) Tool to extract indicators of compromise from security reports in PDF format
+- [**26**Star][8m] [Py] [thehappydinoa/tp-link-defaults](https://github.com/thehappydinoa/tp-link-defaults) Python script for trying default passwords for some TP-Link Hotspots
+- [**26**Star][2y] [C++] [tamirzb/cve-2017-13253](https://github.com/tamirzb/cve-2017-13253) PoC code for CVE-2017-13253
+- [**26**Star][3m] [Perl] [t00sh/ctf](https://github.com/t00sh/ctf) Exploits used on hacking CTF's
+- [**26**Star][3y] [PHP] [symphonycms/xssfilter](https://github.com/symphonycms/xssfilter) An XSS filter for Events in Symphony CMS
+- [**26**Star][5y] [C++] [strobejb/sslhook](https://github.com/strobejb/sslhook) OpenSSL hooking
+- [**26**Star][2y] [C++] [strikerx3/whvpclient](https://github.com/strikerx3/whvpclient) Windows Hypervisor Platform client
+- [**26**Star][13d] [Py] [strawp/random-scripts](https://github.com/strawp/random-scripts) Quick and dirty scripts that don't really belong in a larger project
+- [**26**Star][1m] [Py] [starnightcyber/findsubdomains](https://github.com/starnightcyber/findsubdomains) A tool finding sub-domains for penetesters
+- [**26**Star][7m] [C] [souhailhammou/panda-antivirus-lpe](https://github.com/souhailhammou/panda-antivirus-lpe) The exploit for Panda AV LPE
+- [**26**Star][6m] [JS] [soprasteria/cybersecurity-dfm](https://github.com/soprasteria/cybersecurity-dfm) Data Feed Manager (news watch orchestrator to predict topic with deepdetect and store cleaned text in elasticsearch)
+- [**26**Star][8m] [Py] [somerset-recon/blog](https://github.com/somerset-recon/blog) For code snippets and information
+- [**26**Star][4y] [PHP] [sinfocol/vboxdie-cracker](https://github.com/sinfocol/vboxdie-cracker) VirtualBox Disk Image Encryption password cracker
+- [**26**Star][9m] [Shell] [shverni/raspberry-pi-vpn-gateway](https://github.com/shverni/raspberry-pi-vpn-gateway) Raspberry Pi VPN gateway installer for Private Internet Access
+- [**26**Star][8m] [Ruby] [sensu-plugins/sensu-plugins-network-checks](https://github.com/sensu-plugins/sensu-plugins-network-checks) This plugin provides native network instrumentation for monitoring and metrics collection, including: hardware, TCP response, RBLs, whois, port status, and more.
+- [**26**Star][5y] [Shell] [seankaiser/automation-scripts](https://github.com/seankaiser/automation-scripts)
+- [**26**Star][1y] [Py] [ryaninf/cve-2018-2893](https://github.com/ryaninf/cve-2018-2893) CVE-2018-2893 PoC
+- [**26**Star][3y] [C++] [rwfpl/rewolf-pcausa-exploit](https://github.com/rwfpl/rewolf-pcausa-exploit) PCAUSA Rawether for Windows Local Privilege Escalation
+- [**26**Star][7m] [Py] [rofl0r/nat-tunnel](https://github.com/rofl0r/nat-tunnel) NAT Tunnel: to effortlessly serve from behind NAT
+- [**26**Star][1m] [Ruby] [risksense-ops/metasploit-framework](https://github.com/risksense-ops/metasploit-framework) Metasploit Framework
+- [**26**Star][4m] [C++] [rischardv/riscv-alphanumeric-shellcoding](https://github.com/rischardv/riscv-alphanumeric-shellcoding) Alphanumeric+1 shellcoding tools for RISC-V
+- [**26**Star][4m] [Go] [releasel0ck/nettracer](https://github.com/releasel0ck/nettracer) This tool is used to map out the network data flow to help penetration testers identify potentially valuable targets.
+- [**26**Star][8m] [C++] [rek7/descrypt-cpu-collision-cracker](https://github.com/rek7/descrypt-cpu-collision-cracker) DEScrypt CPU Collision Cracker
+- [**26**Star][4y] [ObjC] [qiuyuzhou/shadowsocks-ios](https://github.com/qiuyuzhou/shadowsocks-ios) No maintaining. Try this
+- [**26**Star][3y] [Ruby] [qazbnm456/docker-war](https://github.com/qazbnm456/docker-war) Docker based Wargame Platform - To practice your CTF skills
+- [**26**Star][5m] [pushinginertia/ip-blacklist](https://github.com/pushinginertia/ip-blacklist) An Apache httpd configuration file that rejects access to a server from a list of blacklisted IPs
+- [**26**Star][1y] [C++] [psaneme/kung-fu-malware](https://github.com/psaneme/kung-fu-malware)
+- [**26**Star][2y] [PHP] [probely/ctf-challenges](https://github.com/probely/ctf-challenges) Capture the flag challenges
+- [**26**Star][11m] [C] [plutonium-dbg/plutonium-dbg](https://github.com/plutonium-dbg/plutonium-dbg) Kernel-based debugger for Linux applications
+- [**26**Star][2y] [Py] [philarkwright/dga-detection](https://github.com/philarkwright/dga-detection) DGA Domain Detection using Bigram Frequency Analysis
+- [**26**Star][1y] [Shell] [panjks/t-pot-autoinstall](https://github.com/panjks/t-pot-autoinstall) Autoinstall T-Pot on Ubuntu 16.04
+- [**26**Star][3y] [Java] [owasp/owaspbugbounty](https://github.com/owasp/owaspbugbounty) This is a container of web applications that work with OWASP Bug Bounty for Projects
+- [**26**Star][1y] [Py] [osmode/ddash](https://github.com/osmode/ddash) DDASH - Ethereum Operating System for Knowledge Creation and Sharing
+- [**26**Star][4y] [Py] [open-nsm/dockoo](https://github.com/open-nsm/dockoo) Malware analysis using Docker project
+- [**26**Star][10m] [JS] [onrik/django-webshell](https://github.com/onrik/django-webshell) Django application for running python code in your project's environment from django admin.
+- [**26**Star][8m] [C++] [offlinej/ida-rpc](https://github.com/offlinej/ida-rpc) Discord rich presence plugin for IDA Pro 7.0
+- [**26**Star][3m] [JS] [nowsecure/frida-uikit](https://github.com/nowsecure/frida-uikit) Inspect and manipulate UIKit-based GUIs through Frida.
+- [**26**Star][2m] [Shell] [noob-hackers/kalimux](https://github.com/noob-hackers/kalimux) Install kali linux in termux with desktop environment from kalimux oneclick installation tool no root required
+- [**26**Star][2m] [Rust] [nixpulvis/oursh](https://github.com/nixpulvis/oursh) Your comrade through the perilous world of UNIX.
+- [**26**Star][7y] [C++] [neuroo/pinpy](https://github.com/neuroo/pinpy) Detours from binaries method entry/exit point to Python scripts (PIN, CPython API)
+- [**26**Star][2y] [Py] [murmus/ctf](https://github.com/murmus/ctf)
+- [**26**Star][9m] [HTML] [mpgn/cve-2019-9580](https://github.com/mpgn/cve-2019-9580) CVE-2019-9580 - StackStorm: exploiting CORS misconfiguration (null origin) to gain RCE
+- [**26**Star][3y] [C] [monosource/radare2-explorations-binaries](https://github.com/monosource/radare2-explorations-binaries) Supplement to radare2-explorations.
+- [**26**Star][11m] [Perl] [modernistik/nmap-parser](https://github.com/modernistik/nmap-parser) Parse nmap scan data with Perl (official repo)
+- [**26**Star][12m] [TS] [mitre/attack-navigator](https://github.com/mitre/attack-navigator) ATT&CK导航/浏览工具. 以表格形式显示ATT&CK各种技术, 并执行某些操作. 基于Angular
+- [**26**Star][4m] [Shell] [misp/misp-vagrant](https://github.com/misp/misp-vagrant) Deploy MISP Project software with Vagrant.
+- [**26**Star][10m] [C++] [michmich/analogvoltmeterclock](https://github.com/michmich/analogvoltmeterclock) An Arduino based analog volt meter clock.
+- [**26**Star][2y] [Py] [mgeeky/visualbasicobfuscator](https://github.com/mgeeky/visualbasicobfuscator) Visual Basic Code universal Obfuscator intended to be used during penetration testing assignments.
+- [**26**Star][1y] [Py] [mdsecactivebreach/lambda-webbugs](https://github.com/mdsecactivebreach/lambda-webbugs) A proof of concept for delivering webbugs via AWS lambda
+- [**26**Star][5y] [Py] [matonis/rippe](https://github.com/matonis/rippe) ripPE - section extractor and profiler for PE file analysis
+- [**26**Star][2m] [Rust] [marcograss/rust-kernelcache-extractor](https://github.com/marcograss/rust-kernelcache-extractor) Extract a decrypted iOS 64-bit kernelcache
+- [**26**Star][3y] [C++] [marcnewlin/mousejack-nes-controller](https://github.com/marcnewlin/mousejack-nes-controller) MouseJack NES controller firmware and build guide.
+- [**26**Star][3y] [Py] [mandatoryprogrammer/xcname](https://github.com/mandatoryprogrammer/xcname) A tool for enumerating expired domains in CNAME records
+- [**26**Star][3y] [lucifer1993/awesome-hacking](https://github.com/lucifer1993/awesome-hacking) awesome hacking chinese version
+- [**26**Star][2m] [HTML] [locomotive-crypto/crypto_book_1st](https://github.com/locomotive-crypto/crypto_book_1st) 《深入浅出CryptoPP密码学库》随书电子文档
+- [**26**Star][2y] [PHP] [lloricode/ci-capstone](https://github.com/lloricode/ci-capstone) Enrollment System with CodeIgniter
+- [**26**Star][5y] [C#] [lennyleng/radioeye](https://github.com/lennyleng/radioeye) RFID Security Audit Tool
+- [**26**Star][6y] [C] [kacheo/kernelrootkit](https://github.com/kacheo/kernelrootkit) Linux kernel rootkit to hide certain files and processes.
+- [**26**Star][5y] [Py] [joxeankoret/mynav](https://github.com/joxeankoret/mynav) Automatically exported from code.google.com/p/mynav
+- [**26**Star][2m] [Py] [joshzelonis/attack-eval-scoring](https://github.com/joshzelonis/attack-eval-scoring)
+- [**26**Star][9m] [Py] [joda32/got-responded](https://github.com/joda32/got-responded) A simple tool to detect NBT-NS and LLMNR spoofing (and messing with them a bit)
+- [**26**Star][2y] [Py] [jlospinoso/unfurl](https://github.com/jlospinoso/unfurl) An Entropy-Based Link Vulnerability Tool
+- [**26**Star][7y] [C++] [jingpu/pintools](https://github.com/jingpu/pintools)
+- [**26**Star][4y] [jgamblin/hackapie](https://github.com/jgamblin/hackapie) An Raspberry PI 2 OpenWRT Image Setup To Be A Wireless Hacking Sandbox
+- [**26**Star][2y] [Shell] [jgamblin/defensive-s3-buckets](https://github.com/jgamblin/defensive-s3-buckets) Defensive S3 Bucket Squating
+- [**26**Star][2y] [Shell] [jchrisfarris/aws-service-control-policies](https://github.com/jchrisfarris/aws-service-control-policies) Collection of semi-useful Service Control Policies and scripts to manage them
+- [**26**Star][1y] [JS] [ioactive/bluecrawl](https://github.com/ioactive/bluecrawl) Frida (Android) Script for extracting bluetooth information
+- [**26**Star][2m] [Py] [initstring/pentest-tools](https://github.com/initstring/pentest-tools) General stuff for pentesting - password cracking, phishing, automation, Kali, etc.
+- [**26**Star][3y] [C++] [ilyatk/hookengine](https://github.com/ilyatk/hookengine)
+- [**26**Star][1y] [Py] [ihack4falafel/slink](https://github.com/ihack4falafel/slink) Alphanumeric Shellcode (x86) Encoder
+- [**26**Star][3y] [Py] [hydrabus/rhme-2016](https://github.com/hydrabus/rhme-2016) The RHme2 (Riscure Hack me 2) is a low level hardware CTF challenge that comes in the form of an Arduino Nano board. The new edition provides a completely different set of new challenges to test your skills in side channel, fault injection, cryptoanalysis and software exploitation attacks.
+- [**26**Star][4y] [Shell] [hrishioa/nomohead](https://github.com/hrishioa/nomohead) Simple Bash script that announces IP Address and ngrok tunnel of Raspberry Pi at boot
+- [**26**Star][2y] [R] [hrbrmstr/crafter](https://github.com/hrbrmstr/crafter) Analyze and Visualize Network Packet Capture (PCAP) Files
+- [**26**Star][3y] [C++] [hpsocket/restclient-cpp](https://github.com/hpsocket/restclient-cpp) C++ winnet/winhttp api restclient
+- [**26**Star][1m] [Py] [hiddenillusion/ir](https://github.com/hiddenillusion/ir) Some dfir stuff
+- [**26**Star][1y] [Shell] [hestat/minerchk](https://github.com/hestat/minerchk) Bash script to Check for malicious Cryptomining
+- [**26**Star][6m] [Java] [hakbot/hakbot-origin-controller](https://github.com/hakbot/hakbot-origin-controller) Vendor-Neutral Security Tool Automation Controller (over REST)
+- [**26**Star][3y] [Assembly] [gyje/bios_rootkit](https://github.com/gyje/bios_rootkit) 来自Freebuf评论区,一个UEFI马.
+- [**26**Star][2y] [Go] [grocid/passdesktop](https://github.com/grocid/passdesktop)
+- [**26**Star][4y] [C] [gregwar/mitm](https://github.com/gregwar/mitm) Man in the middle tool
+- [**26**Star][10m] [Kotlin] [gosecure/burp-ntlm-challenge-decoder](https://github.com/gosecure/burp-ntlm-challenge-decoder) Burp extension to decode NTLM SSP headers and extract domain/host information
+- [**26**Star][7m] [Groovy] [gmacario/easy-jenkins](https://github.com/gmacario/easy-jenkins) Easily deploy a Jenkins CI/CD infrastructure via docker-compose
+- [**26**Star][6m] [Py] [githacktools/githacktools](https://github.com/githacktools/githacktools) The best Hacking and PenTesting tools installer on the world
+- [**26**Star][3m] [Py] [ghassani/mclf-ida-loader](https://github.com/ghassani/mclf-ida-loader) An IDA file loader for Mobicore trustlet and driver binaries
+- [**26**Star][3m] [C++] [frida/frida-clr](https://github.com/frida/frida-clr) Frida .NET bindings
+- [**26**Star][1y] [HTML] [flyrabbit/winproject](https://github.com/flyrabbit/winproject) Hook, DLLInject, PE_Tool
+- [**26**Star][5y] [Py] [fireeye/pycommands](https://github.com/fireeye/pycommands) PyCommand Scripts for Immunity Debugger
+- [**26**Star][4y] [Py] [fengxuangit/pyshell](https://github.com/fengxuangit/pyshell) python版菜刀 连接一句话木马
+- [**26**Star][3m] [Pascal] [felipedaragon/catarinka](https://github.com/felipedaragon/catarinka) A powerful set of multi-purpose libraries for Pascal/Delphi and Lua
+- [**26**Star][9m] [C] [eternityx/deadcell-oshgui](https://github.com/eternityx/deadcell-oshgui) OSHGui project files
+- [**26**Star][8m] [Shell] [ericpskl/exportec2volumeimage](https://github.com/ericpskl/exportec2volumeimage) A Bash script which uses AWS CLI to create an image of an AWS EC2 volume
+- [**26**Star][2y] [Py] [embedi/ble_norton_core](https://github.com/embedi/ble_norton_core) PoC exploit for CVE-2018-5234
+- [**26**Star][4y] [JS] [eligrey/libxdr](https://github.com/eligrey/libxdr) A library that implements a cross-browser XDR constructor
+- [**26**Star][3y] [Go] [egebalci/ticketbleed](https://github.com/egebalci/ticketbleed) This is a tool for exploiting Ticketbleed (CVE-2016-9244) vulnerability.
+- [**26**Star][1y] [eclypsium/publications](https://github.com/eclypsium/publications) Slides, papers, etc
+- [**26**Star][7m] [ebiquity/unified-cybersecurity-ontology](https://github.com/ebiquity/unified-cybersecurity-ontology) Unified Cybersecurity Ontology
+- [**26**Star][4y] [Py] [dinotools/pysslscan](https://github.com/dinotools/pysslscan) Framework and command-line tool to scan SSL enabled services
+- [**26**Star][4y] [C++] [dfct/inssidious](https://github.com/dfct/inssidious) A uniquely frustrating wireless network.
+- [**26**Star][5m] [HTML] [devnetsandbox/sbx_multi_ios](https://github.com/devnetsandbox/sbx_multi_ios) Sample code, examples, and resources for use with the DevNet Multi-IOS Sandbox
+- [**26**Star][1y] [Ruby] [dev-sec/chef-postgres-hardening](https://github.com/dev-sec/chef-postgres-hardening) This chef cookbook provides security configuration for PostgreSQL.
+- [**26**Star][2m] [Ruby] [david942j/rbelftools](https://github.com/david942j/rbelftools) ELF parser library implemented in pure Ruby!
+- [**26**Star][2y] [Py] [danmcinerney/smb-autopwn](https://github.com/danmcinerney/smb-autopwn) Discovers and exploits hosts vulnerable to MS08-067/MS17-010
+- [**26**Star][2y] [C] [danghvu/nginx-1.4.0](https://github.com/danghvu/nginx-1.4.0) For the analysis of CVE-2013-2028
+- [**26**Star][4y] [Py] [cyberhatcoil/acf](https://github.com/cyberhatcoil/acf) Android Connections Forensics
+- [**26**Star][1y] [C++] [cyanidee/snowflake](https://github.com/cyanidee/snowflake) A simple CSGO cheat base written in mind of begginers.
+- [**26**Star][2y] [C++] [cuitche/code-obfuscation](https://github.com/cuitche/code-obfuscation) 一款iOS代码混淆工具(A code obfuscation tool for iOS.)
+- [**26**Star][2y] [Shell] [crackpkcs12/crackpkcs12](https://github.com/crackpkcs12/crackpkcs12) A multithreaded program to crack PKCS#12 files (p12 and pfx extensions)
+- [**26**Star][3m] [Go] [cpl/cryptor](https://github.com/cpl/cryptor) Privacy, Anonymity, Freedom - P2P network
+- [**26**Star][1y] [C++] [cpasjuste/scummvm](https://github.com/cpasjuste/scummvm) ScummVM main repository
+- [**26**Star][12m] [C#] [cocowalla/snifter](https://github.com/cocowalla/snifter) Snifter is a raw socket IP packet capturing tool for Windows, with a tiny CPU and memory footprint
+- [**26**Star][4y] [Py] [cleveridge/cleveridge-subdomain-scanner](https://github.com/cleveridge/cleveridge-subdomain-scanner) The Cleveridge Subdomain Scanner finds subdomains of a given domain.
+- [**26**Star][12m] [Py] [chrisjd20/power_dump](https://github.com/chrisjd20/power_dump) powershell memory dumper
+- [**26**Star][4y] [JS] [chaitin/sqlchop-http-proxy](https://github.com/chaitin/sqlchop-http-proxy) SQLChop reverse http proxy module
+- [**26**Star][9m] [Py] [byt3bl33d3r/dnschef](https://github.com/byt3bl33d3r/dnschef) DNSChef - DNS proxy for Penetration Testers and Malware Analysts
+- [**26**Star][1y] [brute-f0rce/ceh](https://github.com/brute-f0rce/ceh) Exam Prep for the Ec-council Certified Ethical Hacker 312-50
+- [**26**Star][7y] [Py] [bozhu/rc4-python](https://github.com/bozhu/rc4-python) A python implementation of the block cipher RC4
+- [**26**Star][1y] [ObjC] [boxproject/box-staff-manager](https://github.com/boxproject/box-staff-manager) Employee App is used for initialize transactions, user management, authorise flow so that enteripise digital assets can be managed by stakeholders and partners.
+- [**26**Star][2m] [blackbagtech/sleuthkit-apfs](https://github.com/blackbagtech/sleuthkit-apfs) A fork of The Sleuthkit with Pooled Storage and APFS support. See
+- [**26**Star][2y] [JS] [bkimminich/webappsec-nutshell](https://github.com/bkimminich/webappsec-nutshell) An ultra-compact intro (or refresher) to Web Application Security.
+- [**26**Star][2y] [Py] [bipabo1l/ssrf_scan](https://github.com/bipabo1l/ssrf_scan) 多线程批量扫描ssrf漏洞
+- [**26**Star][2y] [Go] [benjojo/traceroute-haiku](https://github.com/benjojo/traceroute-haiku) A thing you can traceroute and it gives you a haiku inside the trace
+- [**26**Star][2y] [C] [bazad/ctl_ctloutput-leak](https://github.com/bazad/ctl_ctloutput-leak) CVE-2017-13868: Information leak of uninitialized kernel heap data in XNU.
+- [**26**Star][4y] [Assembly] [battelle/sinkhole](https://github.com/battelle/sinkhole) Architectural privilege escalation on x86
+- [**26**Star][5y] [Py] [bastkerg/recomp](https://github.com/bastkerg/recomp) IDA recompiler(No Documentation)
+- [**26**Star][7y] [C++] [avalon1610/lpc](https://github.com/avalon1610/lpc) windows LPC library
+- [**26**Star][4y] [atktgs/blackhat2015arsenal](https://github.com/atktgs/blackhat2015arsenal) My Quick Note of BlackHat 2015 Arsenal
+- [**26**Star][3y] [astocko/json-x86-64](https://github.com/astocko/json-x86-64) x86-64 Intel instruction set in JSON format
+- [**26**Star][2m] [Rust] [arosspope/cipher-crypt](https://github.com/arosspope/cipher-crypt) A cryptographic tomb of ciphers forgotten by time.
+- [**26**Star][10d] [C] [armfazh/rfc7748_precomputed](https://github.com/armfazh/rfc7748_precomputed) Updated! (Dec2-2019) This is a C-language software library that provides optimized implementations of the Diffie-Hellman functions known as X25519 and X448 (RFC-7748) for 64-bit architectures.
+- [**26**Star][2y] [Py] [aniketp/network-programming](https://github.com/aniketp/network-programming) Small Projects on Socket Programming, Website Scanning, Wireless & Network Security
+- [**26**Star][2y] [Jupyter Notebook] [andykamath/nfl-data-hacking](https://github.com/andykamath/nfl-data-hacking) Algorithmically draft NFL players for your fantasy league!
+- [**26**Star][2y] [Py] [androidtamer/frida-push](https://github.com/androidtamer/frida-push) Wrapper tool to identify the remote device and push device specific frida-server binary.
+- [**26**Star][6m] [Py] [andreafioraldi/angrdbg](https://github.com/andreafioraldi/angrdbg) Abstract library to generate angr states from a debugger state
+- [**26**Star][2y] [JS] [an0ny420/ps4-4.0x--4.05-code-execution-poc](https://github.com/an0ny420/ps4-4.0x--4.05-code-execution-poc) 4.05 added support
+- [**26**Star][3y] [C] [alpackers/ctf-writeups](https://github.com/alpackers/ctf-writeups) CTF Writeups
+- [**26**Star][5y] [Py] [alfarom/nmap](https://github.com/alfarom/nmap) python nmap tool to scan hosts and search
+for CVE details based on the nmap report.
+- [**26**Star][2y] [Py] [alfa100001/-cve-2017-0785-blueborne-poc](https://github.com/alfa100001/-cve-2017-0785-blueborne-poc) CVE-2017-0785 BlueBorne PoC
+- [**26**Star][3y] [JS] [alexhorn/defendjs](https://github.com/alexhorn/defendjs) A free and open source JavaScript and Node.js obfuscator.
+- [**26**Star][2y] [Py] [alanshaw-github/minimips](https://github.com/alanshaw-github/minimips) Introducing the new lightweight MIPS Assembler and Disassembler, supporting syntax highlighting, code editing, file dragging and dropping, debug mode, assembly and disassembly, Molokai color matching style. Full platform support including Windows, macOS and Linux. Star now! Keep updating!
+- [**26**Star][1y] [C] [aircrack-ng/openwips-ng](https://github.com/aircrack-ng/openwips-ng) OpenWIPS-ng is an open source and modular Wireless IPS (Intrusion Prevention System)
+- [**26**Star][5m] [Shell] [adon90/ip2hosts](https://github.com/adon90/ip2hosts) Dirty bash script to obtain hosts given an IP address
+- [**26**Star][23d] [Shell] [adnanhodzic/anon-hotspot](https://github.com/adnanhodzic/anon-hotspot) On demand Debian Linux (Tor) Hotspot setup tool
+- [**26**Star][2y] [Py] [adanvillarreal/spydan](https://github.com/adanvillarreal/spydan) A web spider for shodan.io without using the Developer API.
+- [**26**Star][2y] [C] [5h311-1nj3c706/local-root-exploits](https://github.com/5h311-1nj3c706/local-root-exploits) LOCAL ROOT EXPLOITS
+- [**26**Star][2y] [C++] [3gstudent/hiddenntregistry](https://github.com/3gstudent/hiddenntregistry) Use NT Native Registry API to create a registry that normal user can not query.
+- [**26**Star][2y] [JS] [0xsobky/regaxor](https://github.com/0xsobky/regaxor) A regular expression fuzzer.
+- [**26**Star][2m] [Lua] [0x4d31/hassh-utils](https://github.com/0x4d31/hassh-utils) Nmap NSE Script and Docker image for HASSH - the SSH client/server fingerprinting method (
+- [**25**Star][1y] [ObjC] [skifary/c4msis](https://github.com/skifary/c4msis) ios shadowsocks app based on NEKit
+- [**25**Star][13d] [Py] [eth-sri/ilf](https://github.com/eth-sri/ilf) AI based fuzzer based on imitation learning
+- [**25**Star][6y] [C++] [stealth/pam_schroedinger](https://github.com/stealth/pam_schroedinger) Uncertainty for brute forcers during login.
+- [**25**Star][6m] [Py] [mozillasecurity/avalanche](https://github.com/mozillasecurity/avalanche) Avalanche is a document generator which uses context-free grammars to generate randomized outputs for fuzz-testing.
+- [**25**Star][23d] [Shell] [pirate/fish-functions](https://github.com/pirate/fish-functions)
+- [**25**Star][4m] [Py] [mozillasecurity/laniakea](https://github.com/mozillasecurity/laniakea) Laniakea is a utility for managing instances at various cloud providers and aids in setting up a fuzzing cluster.
+- [**25**Star][3m] [Py] [jgamblin/kali-virtualbox](https://github.com/jgamblin/kali-virtualbox) A Python Script To Automatically Download, Provision and Update a Kali Linux VM in Virtualbox
+- [**25**Star][4d] [Ruby] [intrigueio/intrigue-ident](https://github.com/intrigueio/intrigue-ident) Asset Fingerprinting Library
+- [**25**Star][1y] [C#] [fuzzysecurity/dotnettojscript-languagemodebreakout](https://github.com/fuzzysecurity/dotnettojscript-languagemodebreakout)
+- [**25**Star][3y] [wtsxdev/application-security](https://github.com/wtsxdev/application-security) Resources for learning about application security
+- [**25**Star][6y] [C#] [isecpartners/peachfarmer](https://github.com/isecpartners/peachfarmer) A log collector for Peach fuzzing in the cloud
+- [**25**Star][8y] [C++] [cr4sh/simpleunpacker](https://github.com/cr4sh/simpleunpacker) Simple tool for unpacking packed/protected malware executables.
+- [**25**Star][8m] [C++] [hikariobfuscator/noctilucence](https://github.com/hikariobfuscator/noctilucence) Embedded Bitcode Recompiler
+- [**25**Star][2y] [Py] [jpcertcc/strelok](https://github.com/jpcertcc/strelok) Application for STIX v2.0 objects management and analysis
+- [**25**Star][1y] [HTML] [649/crash-ios-exploit](https://github.com/649/crash-ios-exploit) Repository dedicated to storing a multitude of iOS/macOS/OSX/watchOS crash bugs. Some samples need to be viewed as raw in order to see the Unicode. Please do not intentionally abuse these exploits.
+- [**25**Star][4y] [Py] [averagesecurityguy/scapy](https://github.com/averagesecurityguy/scapy) Scapy Presentation and Code
+- [**25**Star][28d] [CSS] [flatpak/flatpak.github.io](https://github.com/flatpak/flatpak.github.io) Flatpak website
+- [**25**Star][3y] [gdbinit/adium-ng-preview](https://github.com/gdbinit/adium-ng-preview) Repo to dump some preview info and builds for adium-ng
+- [**25**Star][6m] [Py] [pyauth/pywarp](https://github.com/pyauth/pywarp) Python WebAuthn Relying Party library
+- [**25**Star][2m] [Go] [influxdata/wirey](https://github.com/influxdata/wirey) Manage local wireguard interfaces in a distributed system
+- [**25**Star][8m] [offensive-security/gcc-arm-linux-gnueabihf-4.7](https://github.com/offensive-security/gcc-arm-linux-gnueabihf-4.7) gcc-arm-linux-gnueabihf-4.7/
+- [**25**Star][3y] [ObjC] [kpwn/rapd2](https://github.com/kpwn/rapd2) simple radare2 rap:// server
+- [**25**Star][15d] [JS] [fsecurelabs/android-keystore-audit](https://github.com/fsecurelabs/android-keystore-audit)
+- [**25**Star][2m] [Go] [banzaicloud/dast-operator](https://github.com/banzaicloud/dast-operator) Dynamic Application Security Testing
+- [**25**Star][8m] [offensive-security/kali-linux-docker-rolling](https://github.com/offensive-security/kali-linux-docker-rolling)
+- [**25**Star][6y] [Py] [opensecurityresearch/custompassivescanner](https://github.com/opensecurityresearch/custompassivescanner) A Custom Scanner for Burp
+- [**25**Star][2m] [starnightcyber/subdomains](https://github.com/starnightcyber/subdomains) 互联网公司子域名收集
+- [**25**Star][2y] [C#] [zjyl1994/v2switcher](https://github.com/zjyl1994/v2switcher) 极简V2Ray配置切换器,拯救多线用户
+- [**25**Star][11m] [Visual Basic .NET] [modify24x7/ultimate-advanced-apktool](https://github.com/modify24x7/ultimate-advanced-apktool) v4.1
+- [**25**Star][6y] [C] [kylekirkby/python-exploit-search-tool](https://github.com/kylekirkby/python-exploit-search-tool) A search tool that searches Offensive Securitys Exploit-db and Shodans Exploit DB using their API.
+- [**25**Star][9m] [Assembly] [thog/ghidra_falcon](https://github.com/thog/ghidra_falcon) Support of Nvidia Falcon processors for Ghidra (WIP)
+- [**25**Star][10m] [Rust] [archer884/harsh](https://github.com/archer884/harsh) Hashids implementation in Rust
+- [**25**Star][4y] [C++] [vivek-ramachandran/wi-door](https://github.com/vivek-ramachandran/wi-door) Wi-Fi Backdoors
+- [**25**Star][9y] [C] [clockfort/wifi-locator](https://github.com/clockfort/wifi-locator) Determines physical location of station judging from 802.11 beacons' BSSID/Signal/Noise/Quality information.
+- [**25**Star][2d] [security-prince/resources-for-application-security](https://github.com/security-prince/Resources-for-Application-Security) Some good resources for getting started with application security
+- [**25**Star][3m] [JS] [lanmaster53/cef](https://github.com/lanmaster53/cef) Proof-of-concept CORS exploitation tool.
+- [**25**Star][2m] [C++] [3xpl017/linpwn](https://github.com/3xpl017/linpwn) Interactive Post Exploitation Tool
+- [**25**Star][2d] [security-prince/resources-for-application-security](https://github.com/security-prince/resources-for-application-security) Some good resources for getting started with application security
+- [**25**Star][2m] [HTML] [trojan-tutor/trojan-tutor.github.io](https://github.com/trojan-tutor/trojan-tutor.github.io) trojan 教程 自建梯子教程 trojan教程 trojan-gfw 科学上网 代理工具 翻墙 Ubuntu Debian 小白教程 https伪装
+- [**25**Star][2m] [C] [airbus-cert/pstrace](https://github.com/airbus-cert/pstrace) Trace ScriptBlock execution for powershell v2
+- [**25**Star][1y] [Py] [avicoder/hackerone](https://github.com/avicoder/Hackerone) Hackerone disclosed report URL Aggregator
+- [**25**Star][3y] [monsterzer0/cyber-security-guide](https://github.com/monsterzer0/Cyber-Security-Guide) The Whitepaper For Enterprise Security created by Monster Zero Team
+- [**25**Star][2y] [retbandit-zz/blackhat2017](https://github.com/retbandit-zz/BlackHat2017) BlackHat Europe 2017 Slides
+- [**25**Star][5y] [Py] [5ee/socialengineerdbuilder](https://github.com/5ee/SocialEngineerDBuilder) 整理社工库的工具
+- [**25**Star][4m] [Py] [blacknbunny/encdecshellcode](https://github.com/blacknbunny/encdecshellcode) Shellcode Encrypter & Decrypter With XOR Cipher
+- [**25**Star][2y] [Py] [loveraven42/tools](https://github.com/loveraven42/tools) 渗透所用小工具以及poc
+- [**25**Star][6y] [C] [whyallyn/paythepony](https://github.com/whyallyn/paythepony) Pay the Pony is hilarityware that uses the Reflective DLL injection library to inject into a remote process, encrypt and demand a ransom for files, and inflict My Little Pony madness on a system.
+- [**25**Star][4y] [C] [riswandans/litesploit](https://github.com/riswandans/litesploit) library and intepreter for penetration testing tools
+- [**25**Star][3y] [zyrikby/android_permission_evolution](https://github.com/zyrikby/android_permission_evolution) Analysis of the evolution of Android permissions. This repository contains the results presented in the paper "Small Changes, Big Changes: An Updated View on the Android Permission System".
+- [**25**Star][3y] [Py] [zyantific/continuum](https://github.com/zyantific/continuum) Plugin adding multi-binary project support to IDA Pro (WIP)
+- [**25**Star][5y] [Py] [zhengmin1989/droidanalytics](https://github.com/zhengmin1989/droidanalytics) linux version (rewrite in Python)
+- [**25**Star][17d] [Py] [yannayl/ctf-writeups](https://github.com/yannayl/ctf-writeups) Write ups of solution for CTF challenges I solved
+- [**25**Star][2y] [Py] [xme/emlrender](https://github.com/xme/emlrender) EML file rendering tool
+- [**25**Star][9m] [Py] [xmcp/acfan](https://github.com/xmcp/acfan) 名副其实的自动AC机
+- [**25**Star][4y] [Py] [xfkxfk/pyvulhunter](https://github.com/xfkxfk/pyvulhunter) python audit tool 审计 注入 inject
+- [**25**Star][2m] [Py] [xebia/mobilehacktools](https://github.com/xebia/mobilehacktools) A repository for scripting a mobile attack toolchain
+- [**25**Star][5y] [wirelesscollege/securitytools](https://github.com/wirelesscollege/securitytools) android安全工具大全
+- [**25**Star][2y] [C] [wiire-a/bully](https://github.com/wiire-a/bully) Brute force attack against WPS, that actually works
+- [**25**Star][3y] [Java] [whyalwaysmea/mobilesafe](https://github.com/whyalwaysmea/mobilesafe) 这是一个android版的手机卫士,包含一下功能:1.手机防盗 2. 黑名单设置 3.软件管理 4.进程管理 5.流量统计 6.缓存清理 7.手机杀毒 8.来电归属地显示 9.号码归属地查询 10.程序锁
+- [**25**Star][6y] [waytai/cloudsafe](https://github.com/waytai/cloudsafe) cloudsafe 云安全扫描
+- [**25**Star][2y] [Py] [w00t3k/insp3ctor](https://github.com/w00t3k/insp3ctor) AWS S3 Bucket/Object Finder
+- [**25**Star][3y] [C++] [vix597/vulny](https://github.com/vix597/vulny) Vulnerable Linux socket game for educational purposes
+- [**25**Star][6y] [C] [varshapaidi/kernel_rootkit](https://github.com/varshapaidi/kernel_rootkit) Linux Kernel Rootkit - To hide modules and ssh service
+- [**25**Star][2y] [Java] [vankyver/burp-vulners-scanner](https://github.com/vankyver/burp-vulners-scanner) Burp scanner plugin based on Vulners.com vulnerability database
+- [**25**Star][4y] [v-p-b/bigiron](https://github.com/v-p-b/bigiron) Collection of materials related to IBM z/OS security
+- [**25**Star][3y] [unexpectedby/awesome-pentest-tools](https://github.com/unexpectedby/awesome-pentest-tools) List of Security Archives Tools and software, generally for facilitate security & penetration research. Opening it up to everyone will facilitate a knowledge transfer. Hopefully the initial set will grow and expand.
+- [**25**Star][6m] [C] [underhandedcrypto/entries](https://github.com/underhandedcrypto/entries) A browsable archive of all Underhanded Crypto Contest entries.
+- [**25**Star][3m] [Py] [trailofbits/objcgraphview](https://github.com/trailofbits/objcgraphview) A graph view plugin for Binary Ninja to visualize Objective-C
+- [**25**Star][3y] [Py] [toxic-ig/pythonkeylogger](https://github.com/toxic-ig/pythonkeylogger) A remote keylogger with some cool features
+- [**25**Star][7y] [Py] [tosanjay/bopfunctionrecognition](https://github.com/tosanjay/bopfunctionrecognition) plugin to BinNavi tool to analyze a x86 binanry file to find buffer overflow prone functions. Such functions are important for vulnerability analysis.
+- [**25**Star][4y] [Go] [tomsteele/shellsquid](https://github.com/tomsteele/shellsquid) A dynamic HTTP and DNS reverse proxy
+- [**25**Star][2y] [ObjC] [tijme/reverse-engineering](https://github.com/tijme/reverse-engineering) This repository contains some of the executables that I've cracked.
+- [**25**Star][3y] [Py] [threatresponse/mad-king](https://github.com/threatresponse/mad-king) Proof of Concept Zappa Based AWS Persistence and Attack Platform
+- [**25**Star][2y] [PS] [thoughtfuldev/psimage-delivery](https://github.com/thoughtfuldev/psimage-delivery) Use Invoke-PSImage to deliver a payload in an Image
+- [**25**Star][2y] [Py] [thekingofduck/autosploit_chs](https://github.com/thekingofduck/autosploit_chs) 渗透工具AutoSploit的汉化版
+- [**25**Star][2y] [Py] [the404hacking/windows-python-rat](https://github.com/the404hacking/windows-python-rat) A New Microsoft Windows Remote Administrator Tool [RAT] with Python by Sir.4m1R.
+- [**25**Star][2y] [Py] [the404hacking/websploit](https://github.com/the404hacking/websploit) Websploit is an advanced MITM framework.
+- [**25**Star][12m] [C#] [technikempire/citadelcore](https://github.com/technikempire/citadelcore) Cross platform filtering HTTP/S proxy based on .NET Standard 2.0.
+- [**25**Star][12m] [techbliss/ida_pro_ultimate_qt_build_guide](https://github.com/techbliss/ida_pro_ultimate_qt_build_guide) Ida Pro Ultimate Qt Build Guide
+- [**25**Star][2y] [Py] [tasdikrahman/thanos](https://github.com/tasdikrahman/thanos) A dead simple demonstration of SQL injection in an SQLite database
+- [**25**Star][6m] [Py] [tarcisio-marinho/rsb-framework](https://github.com/tarcisio-marinho/rsb-framework) Windows/Linux - ReverseShellBackdoor Framework
+- [**25**Star][4y] [Py] [tampe125/mongodb-scraper](https://github.com/tampe125/mongodb-scraper) Scraps for publicly accessible MongoDB instances and dumps user passwords
+- [**25**Star][24d] [C] [sysprogs/openocd](https://github.com/sysprogs/openocd) OpenOCD shipped with VisualGDB. Built with CMake.
+- [**25**Star][2y] [LLVM] [syreal17/cardinal](https://github.com/syreal17/cardinal) Similarity Analysis to Defeat Malware Compiler Variations
+- [**25**Star][2y] [C#] [symbolsource/symbolsource](https://github.com/symbolsource/symbolsource)
+- [**25**Star][8y] [stefanesser/serialkdpproxy](https://github.com/stefanesser/serialkdpproxy) Improved version of David Elliott's SerialKDPProxy
+- [**25**Star][8y] [Ruby] [spiderlabs/yara-ruby](https://github.com/spiderlabs/yara-ruby) Ruby bindings for the yara file analysis and classification library
+- [**25**Star][1y] [Gherkin] [soluto/containers-security-project](https://github.com/soluto/containers-security-project) A place for documenting threats and mitigations related to containers orchestrators (Kubernetes, Swarm etc)
+- [**25**Star][1y] [Ruby] [smiegles/certs](https://github.com/smiegles/certs) certs: 解析 X509 证书, 获取其中的(子)域名
+- [**25**Star][1y] [PHP] [sipcapture/homer-api](https://github.com/sipcapture/homer-api) HOMER 5: Back-End (API)
+- [**25**Star][3y] [Shell] [simonschuang/rpi-hostapd](https://github.com/simonschuang/rpi-hostapd)
+- [**25**Star][2m] [Py] [sim642/whatpulse](https://github.com/sim642/whatpulse) WhatPulse reverse engineered
+- [**25**Star][1y] [Py] [si9int/screenshooter](https://github.com/si9int/screenshooter) Convert your masscan/subdomain-scan results (80,443,8080) into screenshots for better analysis
+- [**25**Star][10m] [C++] [shaxzy/nixware-csgo](https://github.com/shaxzy/nixware-csgo) Source code of Nixware. Cheat doesn't inject for some reason, fix it uself or just paste from it
+- [**25**Star][3y] [Py] [shawarkhanethicalhacker/brutexss-1](https://github.com/shawarkhanethicalhacker/brutexss-1) BruteXSS - Cross-Site Scripting Bruteforcer
+- [**25**Star][3y] [Py] [shakenetwork/mimipenguin](https://github.com/shakenetwork/mimipenguin) Mimipenguin密码抓取神器
+- [**25**Star][2m] [HTML] [shahril96/online-assembler-disassembler](https://github.com/shahril96/online-assembler-disassembler) Online assembler and disassembler
+- [**25**Star][2y] [shadowsocksr-rm/shadowsocksx-ng](https://github.com/shadowsocksr-rm/shadowsocksx-ng) Next Generation of ShadowsocksX
+- [**25**Star][4y] [Py] [sghctoma/multipass](https://github.com/sghctoma/multipass) A small wriiteup and a PoC tool about how to use SO_REUSADDR for firewall evasion
+- [**25**Star][3y] [JS] [sethsec/nodejs-ssrf-app](https://github.com/sethsec/nodejs-ssrf-app) Nodejs application intentionally vulnerable to SSRF
+- [**25**Star][2y] [Py] [scanfsec/ihoneyportscan](https://github.com/scanfsec/ihoneyportscan) 轻量端口扫描器、信息泄露扫描、批量网站备份扫描
+- [**25**Star][2y] [Py] [sc0tfree/netbyte](https://github.com/sc0tfree/netbyte) Netbyte is a Netcat-style tool that facilitates probing proprietary TCP and UDP services. It is lightweight, fully interactive and provides formatted output in both hexadecimal and ASCII.
+- [**25**Star][5y] [Py] [sash-ko/kaggle-malware-classification](https://github.com/sash-ko/kaggle-malware-classification) Kaggle "Microsoft Malware Classification Challenge". 6th place solution
+- [**25**Star][4m] [Shell] [sap/vulnerability-assessment-kb](https://github.com/sap/vulnerability-assessment-kb) This dataset contains fix commits for known vulnerabilities in open-source projects and fuels the vulnerability-assessment-tool
+- [**25**Star][1y] [C] [s54mtb/loradunchy](https://github.com/s54mtb/loradunchy) Lora board with Arduino nano compatibile pinout and simple battery management
+- [**25**Star][10y] [C] [ryantenney/php7](https://github.com/ryantenney/php7) Hacking the PHP compiler and standard libraries in the name of turning it into a not crappy language. (Unofficial. No warranty whatsoever.)
+- [**25**Star][5y] [Go] [rverton/xssmap](https://github.com/rverton/xssmap) (DOM-)XSS fuzzer based on phantomjs and go.
+- [**25**Star][3y] [C#] [rummykhan/sql-nightmare](https://github.com/rummykhan/sql-nightmare) SQL SERVER Exploitation.
+- [**25**Star][1y] [Go] [rsrdesarrollo/sasshimi](https://github.com/rsrdesarrollo/sasshimi) SSH Tunnelling in "RAW mode", via STDIN/OUT without using forwarding channels
+- [**25**Star][1y] [C] [renorobert/virtualbox-nat-dhcp-bugs](https://github.com/renorobert/virtualbox-nat-dhcp-bugs)
+- [**25**Star][6m] [CSS] [remmina/et-electron](https://github.com/remmina/et-electron) Eagle Tunnel 的图形化客户端,一个简单的代理工具
+- [**25**Star][5m] [HTML] [rafaybaloch/sop-bypass-mini-test-suite](https://github.com/rafaybaloch/sop-bypass-mini-test-suite) This test suite contains over 40 different test cases that have proven to work with different mobile browsers in my research or testing Same Origin Policy bypass issues with browsers. Due credits were given to the researchers whose Proof of concepts have been incorporated in this test suite. Please note that, this is just the beta version, the n…
+- [**25**Star][3m] [C++] [quangnh89/dbgsymgrabber](https://github.com/quangnh89/dbgsymgrabber) Just another tool to download specify Symbol (.pdb) files
+- [**25**Star][4m] [JS] [qabin/kb-proxy](https://github.com/qabin/kb-proxy) kb-proxy 是一个可本地部署的、提供代理功能、接口测试管理、支持在线Mock、Host环境管理的在线工具平台。
+- [**25**Star][2y] [Swift] [purkylin/kingproxy](https://github.com/purkylin/kingproxy) A proxy like privoxy and antinat
+- [**25**Star][3y] [PS] [proxb/pinvoke](https://github.com/proxb/pinvoke) One-off scripts that I have written involving PInvoke and PowerShell
+- [**25**Star][2y] [Py] [prezi/django-zipkin](https://github.com/prezi/django-zipkin) [Unmaintained] A Django middleware and api for recording and sending messages to Zipkin
+- [**25**Star][6d] [Java] [portswigger/taborator](https://github.com/portswigger/taborator) A Burp extension to show the Collaborator client in a tab
+- [**25**Star][1m] [Py] [portswigger/sqli-py](https://github.com/portswigger/sqli-py) SQLiPy is a Python plugin for Burp Suite that integrates SQLMap using the SQLMap API.
+- [**25**Star][3y] [Java] [pokeolaf/pokemongodecoderforburp](https://github.com/pokeolaf/pokemongodecoderforburp) A simpe decoder to decode requests/responses made by PokemonGo in burp
+- [**25**Star][3y] [Go] [peoples-cloud/pc](https://github.com/peoples-cloud/pc) people's cloud: using the ideas of botnets for good
+- [**25**Star][2y] [Py] [pentestbox/scripts](https://github.com/pentestbox/scripts)
+- [**25**Star][12m] [Go] [parsiya/go-security](https://github.com/parsiya/go-security) My Go security projects
+- [**25**Star][3d] [F#] [paralax/burningdogs](https://github.com/paralax/burningdogs) Honeypot log processor to create OTX Pulse entries
+- [**25**Star][2y] [packtpublishing/digital-forensics-with-kali-linux](https://github.com/packtpublishing/digital-forensics-with-kali-linux) Digital Forensics with Kali Linux, published by Packt
+- [**25**Star][2y] [Py] [owtf/ptp](https://github.com/owtf/ptp) Pentester's Tools Parser (PTP) provides an unified way to retrieve the information from all (final goal) automated pentesting tools and assign an automated ranking for each finding.
+- [**25**Star][5m] [optixal/oscp-pwk-notes-public](https://github.com/optixal/oscp-pwk-notes-public)
+- [**25**Star][10m] [Dockerfile] [opsxcq/docker-metasploit](https://github.com/opsxcq/docker-metasploit) Metasploit framework with steroids
+- [**25**Star][1y] [Go] [opennota/hydra](https://github.com/opennota/hydra) Penetration testing tool. This repository has migrated to
+- [**25**Star][1y] [omg2hei/vulnerability-env](https://github.com/omg2hei/vulnerability-env) 收集国内外开源CMS存在漏洞的各种版本
+- [**25**Star][1y] [Py] [nviso-be/decompile-py2exe](https://github.com/nviso-be/decompile-py2exe) Decompile py2exe Python 3 generated EXEs
+- [**25**Star][4y] [Java] [nvisium/httpillage](https://github.com/nvisium/httpillage)
+- [**25**Star][1y] [Py] [numirias/firefed](https://github.com/numirias/firefed)
+- [**25**Star][3y] [C] [nukem9/idaskins](https://github.com/nukem9/idaskins) *DEPRECATED* Advanced skinning plugin for IDA Pro, ported to x64dbg
+- [**25**Star][2d] [JS] [npm/npm-packlist](https://github.com/npm/npm-packlist) Walk through a folder and figure out what goes in an npm package
+- [**25**Star][5y] [Py] [noobiedog/dir-xcan](https://github.com/noobiedog/dir-xcan) Python version of OWASP's DirBuster Application.
+- [**25**Star][8m] [Py] [nixwizard/kube-alien](https://github.com/nixwizard/kube-alien)
+- [**25**Star][3y] [Rust] [nixos/security](https://github.com/nixos/security)
+- [**25**Star][3y] [Py] [nairuzabulhul/keyplexer](https://github.com/nairuzabulhul/keyplexer) Capstone: Keylogger Trojan
+- [**25**Star][5m] [Java] [mx-futhark/hook-any-text](https://github.com/mx-futhark/hook-any-text) The goal of this project is to provide an alternative to well established text hookers, whose features are restrained to a certain number of game engines and emulators.
+- [**25**Star][1y] [Assembly] [mrfearless/apisearch-plugin-x86](https://github.com/mrfearless/apisearch-plugin-x86) APISearch Plugin (x86) - A Plugin For x64dbg
+- [**25**Star][1y] [HTML] [moonagirl/ctf](https://github.com/moonagirl/ctf)
+- [**25**Star][3y] [C++] [moloch--/exploit-demos](https://github.com/moloch--/exploit-demos) How to write basic memory corruption exploits on Windows
+- [**25**Star][4y] [Shell] [mk-fg/dracut-crypt-sshd](https://github.com/mk-fg/dracut-crypt-sshd) dracut initramfs module to start sshd on early boot to enter encryption passphrase from across the internets
+- [**25**Star][7m] [Makefile] [mintty/wsltty.appx](https://github.com/mintty/wsltty.appx)
+- [**25**Star][4y] [Py] [milo2012/social-engineering-toys](https://github.com/milo2012/social-engineering-toys) Social Engineering Toys
+- [**25**Star][3m] [Py] [mikaelkall/massrecon](https://github.com/mikaelkall/massrecon) This reconissance tool is specific written for OSCP engagements.
+- [**25**Star][5m] [Py] [michaeldim02/hvazard](https://github.com/michaeldim02/hvazard) Remove short passwords & duplicates, change lowercase to uppercase & reverse, combine wordlists!
+- [**25**Star][15d] [meitar/awesome-pentest](https://github.com/meitar/awesome-pentest)
+- [**25**Star][6y] [Py] [marshyski/sshwatch](https://github.com/marshyski/sshwatch) Intrusion Prevention System (IPS) for Secure Shell (SSH)
+- [**25**Star][3y] [Go] [maddevsio/telegram_bbbot](https://github.com/maddevsio/telegram_bbbot) Telegram Bug Bounty Bot
+- [**25**Star][2y] [ANTLR] [luftek/limesdr-usb](https://github.com/luftek/limesdr-usb) USB 3.0 version of the LimeSDR board
+- [**25**Star][3m] [Shell] [leviathan36/wifibang](https://github.com/leviathan36/wifibang) wifi attacks suite
+- [**25**Star][8m] [Py] [letheanmovement/lethean-vpn](https://github.com/letheanmovement/lethean-vpn) Lethean Virtual Private Network (VPN)
+- [**25**Star][4y] [Py] [legbacore/t2e_integrity_check](https://github.com/legbacore/t2e_integrity_check) Integrity checking script for Apple Thunderbolt to Ethernet adapters, to check for attacks similar to Thunderstrike 2
+- [**25**Star][11m] [C] [0xdrrb/hackrf_ook](https://github.com/0xDRRB/hackrf_ook) ASK-OOK transmit tool for Great Scott Gadget HackRF
+- [**25**Star][3y] [C] [leetchicken/afl](https://github.com/leetchicken/afl) Unofficial American Fuzzy Lop repo
+- [**25**Star][4y] [Go] [leechristensen/tgscrack](https://github.com/leechristensen/tgscrack) Kerberos TGS_REP cracker written in Golang
+- [**25**Star][2y] [C] [ktemkin-archive/atmosphere](https://github.com/ktemkin-archive/Atmosphere) Atmosphère is a work-in-progress customized firmware for the Nintendo Switch.
+- [**25**Star][1y] [C++] [kriw/ropchain](https://github.com/kriw/ropchain) ROPChain generator.
+- [**25**Star][3y] [Py] [kostrin/pillage](https://github.com/kostrin/pillage) Pillage is a multithreaded enumeration python script I created for the enumeration phase of penetration tests.
+- [**25**Star][7y] [Perl] [kost/vulnscan-pwcrack](https://github.com/kost/vulnscan-pwcrack) Password guessers for popular vulnerability scanners and frameworks: Find the password for your favourite vulnscanners: OpenVAS, Nessus, NeXpose or Metasploit
+- [**25**Star][4y] [Shell] [kisom/surfraw](https://github.com/kisom/surfraw) local changes to surfraw - local edits prior to sending updates to surfraw-devel
+- [**25**Star][14d] [AutoIt] [kirlovon/devil-backdoor](https://github.com/kirlovon/devil-backdoor) Simple backdoor for public places, that uses a file system for communication. Just for fun!
+- [**25**Star][3y] [Py] [kingtuna/hybrid-darknet-concept](https://github.com/kingtuna/hybrid-darknet-concept)
+- [**25**Star][1m] [TS] [kennbroorg/iky](https://github.com/kennbroorg/iky) OSINT Project
+- [**25**Star][1y] [Assembly] [joric/arduino-bitcoin-miner](https://github.com/joric/arduino-bitcoin-miner) Arduino Bitcoin Miner (plain C and AVR assembly versions)
+- [**25**Star][5y] [C++] [jeremyfetiveau/exploits](https://github.com/jeremyfetiveau/exploits) Old exploits and code for my self-referencing PML4 technique (2014)
+- [**25**Star][1m] [Java] [jenkinsci/aqua-microscanner-plugin](https://github.com/jenkinsci/aqua-microscanner-plugin) Enables scanning of docker builds in Jenkins for OS package vulnerabilities.
+- [**25**Star][1y] [C#] [jeffreye/avaloniailspy](https://github.com/jeffreye/avaloniailspy) Avalonia-based .NET Decompiler (port of ILSpy)
+- [**25**Star][3y] [C] [jacktang310/kerneldebugonnexus6p](https://github.com/jacktang310/kerneldebugonnexus6p)
+- [**25**Star][3y] [Py] [j4r3tt/gerix-wifi-cracker-2](https://github.com/j4r3tt/gerix-wifi-cracker-2) GUI wireless 802.11 penetration tool
+- [**25**Star][4m] [Py] [initroot/fransrecon](https://github.com/initroot/fransrecon) Script will enumerate domain name using horizontal enumeration, reverse lookup. Each horziontal domain will then be vertically enumerated using Sublist3r.
+- [**25**Star][2m] [infosec-community/apac-meetups](https://github.com/infosec-community/apac-meetups) A community contributed consolidated list of InfoSec meetups in the Asia Pacific region.
+- [**25**Star][7y] [Py] [infodox/web-exploitation-engine](https://github.com/infodox/web-exploitation-engine) Generic Command Exploitation Engine for exploiting web application command-injection bugs,.
+- [**25**Star][2y] [PHP] [imagemlt/ctf_web_dockers](https://github.com/imagemlt/ctf_web_dockers) dockerfile of CTF web practices
+- [**25**Star][5y] [C] [honeynet/phoneyc](https://github.com/honeynet/phoneyc)
+- [**25**Star][2y] [Go] [himei29a/gichidan](https://github.com/himei29a/gichidan) Gichidan - CLI wrapper for Ichidan deep-web search engine.
+- [**25**Star][4y] [C++] [herrcore/cmddesktopswitch](https://github.com/herrcore/cmddesktopswitch) CmdDesktopSwitch is a small utility that lists all windows desktops and provides the option to switch between them. This can be used to identify and watch malware that has created a hidden desktop.
+- [**25**Star][8y] [JS] [hdm/axman](https://github.com/hdm/axman) AxMan ActiveX Fuzzer
+- [**25**Star][2y] [C++] [hatriot/delayloadinject](https://github.com/hatriot/delayloadinject) Code injection via delay load libraries
+- [**25**Star][2y] [C++] [hasherezade/petya_key](https://github.com/hasherezade/petya_key) A decoder for Petya victim keys, using the Janus' masterkey.
+- [**25**Star][2m] [C] [hasherezade/flareon2019](https://github.com/hasherezade/flareon2019) Flare-On solutions
+- [**25**Star][19d] [Py] [harleo/knockknock](https://github.com/harleo/knockknock) [Golang rework soon] A simple reverse whois lookup CLI which allows you to find domain names owned by an individual person or company, often used for Open Source Intelligence (OSINT) purposes.
+- [**25**Star][4y] [C] [hanj4096/wukong](https://github.com/hanj4096/wukong) A LKM rootkit for Linux kernel 2.6.x, 3.x and 4.x
+- [**25**Star][2y] [Py] [hackingenvivo/doxing](https://github.com/hackingenvivo/doxing) Espionaje y recopilación de Información
+- [**25**Star][8y] [ObjC] [hackedteam/vector-macos-root](https://github.com/hackedteam/vector-macos-root) root installation for MacOS
+- [**25**Star][2y] [Py] [guardicore/vmware_guest_auth_bypass](https://github.com/guardicore/vmware_guest_auth_bypass) Proof of concept of VMSA-2017-0012
+- [**25**Star][3y] [Py] [graniet/domff](https://github.com/graniet/domff) DOMFf is a simple IDE for extract all DOM data on a website, is perfect for all penetration testers, with this you can extract all data name, value of specific form with only one line, this tool work like a debugger
+- [**25**Star][1y] [gluk256/misc](https://github.com/gluk256/misc) text files, etc.
+- [**25**Star][2y] [C#] [glinares/cscguard](https://github.com/glinares/cscguard) Protects and logs suspicious and malicious usage of .NET CSC.exe and Runtime C# Compilation
+- [**25**Star][8m] [gitguardian/getting-started-with-the-individual-app](https://github.com/gitguardian/getting-started-with-the-individual-app) GitGuardian is at the forefront of developers' security on GitHub. API tokens, database credentials, certificates leaked on GitHub: be alerted in real-time! GitGuardian is loved by developers:
+- [**25**Star][8m] [Py] [ghostlulzhacks/waybackmachine](https://github.com/ghostlulzhacks/waybackmachine)
+- [**25**Star][5y] [PHP] [ghorbanzadeh/owaat](https://github.com/ghorbanzadeh/owaat) OWASP ASVS Assessment Tool
+- [**25**Star][2d] [CSS] [ghacksuserjs/torzillaprint](https://github.com/ghacksuserjs/torzillaprint) Firefox & Tor Browser only, current ESR+ only, client-side only [for now], results only, fingerprint testing
+- [**25**Star][8y] [Py] [gdssecurity/cloud-and-control](https://github.com/gdssecurity/cloud-and-control)
+- [**25**Star][5y] [C] [gdbinit/rex_versus_the_romans](https://github.com/gdbinit/rex_versus_the_romans) Anti Hacking Team TrustedBSD module
+- [**25**Star][5y] [Py] [fygrave/dnslyzer](https://github.com/fygrave/dnslyzer) DNS traffic indexer and analyzer
+- [**25**Star][2y] [Java] [fupinglee/crackcaptcahlogin](https://github.com/fupinglee/crackcaptcahlogin) CrackCaptcahLogin
+- [**25**Star][1y] [Tcl] [fruho/fruhoapp](https://github.com/fruho/fruhoapp) Fruho VPN Manager - Universal VPN Client |
+- [**25**Star][7m] [Visual Basic .NET] [foryujian/ipintervalmerge](https://github.com/foryujian/ipintervalmerge) IP区间批量合并工具,合并重叠交集的IP范围
+- [**25**Star][3m] [C] [forensicitguy/libpreloadvaccine](https://github.com/forensicitguy/libpreloadvaccine) Whitelisting LD_PRELOAD libraries using LD_AUDIT
+- [**25**Star][6y] [C] [fi01/libput_user_exploit](https://github.com/fi01/libput_user_exploit) CVE-2013-6282 exploit
+- [**25**Star][5m] [C++] [ffiirree/capturer](https://github.com/ffiirree/capturer) Screen shot / GIF / Screen recording
+- [**25**Star][2y] [exp-db/toolpool](https://github.com/exp-db/toolpool) 安全 & 运维小工具
+- [**25**Star][1y] [JS] [ethanent/sloww](https://github.com/ethanent/sloww)
+
+ Lightweight Slowloris attack CLI in Node
+
+- [**25**Star][2y] [C] [embedi/tcl_shellcode](https://github.com/embedi/tcl_shellcode) A template project for creating a shellcode for the Cisco IOS in the C language
+- [**25**Star][5y] [Java] [elechantelepate/bip_hack](https://github.com/elechantelepate/bip_hack) Sample app for hacking the BIP! card on the Santiago Public Transit system.
+- [**25**Star][4y] [C] [ele7enxxh/mtkfbexploit](https://github.com/ele7enxxh/mtkfbexploit) mtkfb exploit for mt658x & mt6592
+- [**25**Star][3y] [Ruby] [eik00d/reverse_dns_shellcode](https://github.com/eik00d/reverse_dns_shellcode) Revrese DNS payload for Metasploit: Download Exec x86 shellcode. Also DNS Handler and VBS bot (alsow working over DNS) as PoC included.
+- [**25**Star][5m] [HTML] [duocircle/office365-setup-dkim-dmarc-spf](https://github.com/duocircle/office365-setup-dkim-dmarc-spf) Setup guide for Office 365 Administrators who are unable to use ATP to configure SPF, DKIM and DMARC.
+- [**25**Star][2y] [Py] [dragoneeg/struts2-048](https://github.com/dragoneeg/struts2-048) CVE-2017-9791
+- [**25**Star][3d] [C++] [domob1812/namecore](https://github.com/domob1812/namecore) Reimplementation of Namecoin on top of the current Bitcoin Core codebase.
+- [**25**Star][6y] [C++] [dominictobias/detourxs](https://github.com/dominictobias/detourxs) A x86/64 library for detouring functions on Windows OS
+- [**25**Star][2y] [JS] [dg92/graphql-nodejs-modular-kit](https://github.com/dg92/graphql-nodejs-modular-kit)
+- [**25**Star][11m] [C] [defuse/yescrypt](https://github.com/defuse/yescrypt) Non-C Implementations of the yescrypt KDF.
+- [**25**Star][10m] [Py] [deep-fingerprinting/df](https://github.com/deep-fingerprinting/df) The source code and dataset are used to demonstrate the DF model, and reproduce the results of the ACM CCS2018 paper
+- [**25**Star][28d] [danpage/scale](https://github.com/danpage/scale) scale: Side-Channel Attack Lab
+- [**25**Star][5y] [Py] [danmcinerney/nmap-parser](https://github.com/danmcinerney/nmap-parser) Parses Nmap XML files
+- [**25**Star][2y] [JS] [danielstjules/toragent](https://github.com/danielstjules/toragent) HTTP(S) requests through Tor for Node
+- [**25**Star][2y] [JS] [cybellum/vulnerabilities](https://github.com/cybellum/vulnerabilities) Some of the vulnerabilities that were found by Cybellum platform
+- [**25**Star][1m] [Py] [cube0x8/chrome_ragamuffin](https://github.com/cube0x8/chrome_ragamuffin) Google Chrome internals analysis using Volatility
+- [**25**Star][5y] [JS] [cryptographrix/hootoo_ht-tm05-hacking](https://github.com/cryptographrix/hootoo_ht-tm05-hacking) Hacking the HooToo HT-TM05
+- [**25**Star][1y] [JS] [coincheckup/crypto-supplies](https://github.com/coincheckup/crypto-supplies) Cryptocurrency circulating, maximum and total supplies
+- [**25**Star][4m] [PS] [codewatchorg/powersniper](https://github.com/codewatchorg/powersniper) Password spraying script and helper for creating password lists
+- [**25**Star][2y] [Go] [chuan-yun/esmeralda](https://github.com/chuan-yun/esmeralda) 穿云全链路追踪监控系统日志转储、实时日志数据分析、接口数据服务。
+- [**25**Star][4y] [Shell] [cert-polska/hsn2-bundle](https://github.com/cert-polska/hsn2-bundle)
+- [**25**Star][6y] [cbrunsch/wmbus-sniffer-muc](https://github.com/cbrunsch/wmbus-sniffer-muc) Source code of the demonstration programs showed in the Black Hat '13 presentation "Energy fraud and orchestrated blackouts: Issues with wireless metering protocols (WM-BUS)" by Cyrill Brunschwiler
+- [**25**Star][3y] [Java] [calebfenton/androidemulatordetect](https://github.com/calebfenton/androidemulatordetect) Android Emulator Detection
+- [**25**Star][2y] [PHP] [bypupil/ctfhub](https://github.com/bypupil/ctfhub) Some Docker for CTF environments
+- [**25**Star][1y] [C++] [buseclab/paybreak](https://github.com/buseclab/paybreak)
+- [**25**Star][2m] [C++] [boegel/mica](https://github.com/boegel/mica) a Pin tool for collecting microarchitecture-independent workload characteristics
+- [**25**Star][3y] [Py] [bnagy/francis](https://github.com/bnagy/francis) LLDB engine based tool to instrument OSX apps and triage crashes
+- [**25**Star][5y] [Py] [bkerler/oregondecoder](https://github.com/bkerler/oregondecoder) Oregon Scientific V1/V2 Gnuradio Decoder
+- [**25**Star][4y] [Shell] [binkybear/honeypi](https://github.com/binkybear/honeypi) Bash script to install Honeypot projects ona Raspbian System
+- [**25**Star][4y] [C] [bfosterjr/windowsrtdev](https://github.com/bfosterjr/windowsrtdev)
+- [**25**Star][6y] [Py] [batteryshark/miasma](https://github.com/batteryshark/miasma) Cross-Platform Binary OTF Patcher, Code Injector, Hacking Utility
+- [**25**Star][3y] [C] [azuregreen/arktooldrv](https://github.com/azuregreen/arktooldrv) An ark tool's driver
+- [**25**Star][2y] [Go] [avineshwar/slurp](https://github.com/avineshwar/slurp) S3 bucket enumerator
+- [**25**Star][5y] [Py] [averagesecurityguy/crack](https://github.com/averagesecurityguy/crack) XMLRPC server for password cracking
+- [**25**Star][2y] [JS] [auth0-blog/blog-passwordless-authentication](https://github.com/auth0-blog/blog-passwordless-authentication) Learn how to integrate passwordless authentication with Facebook Account Kit and Auth0 Passwordless
+- [**25**Star][3y] [Py] [atiger77/xunfeng_docker](https://github.com/atiger77/xunfeng_docker) 同程巡风项目Docker镜像版
+- [**25**Star][2y] [C++] [apriorit/custom-bootloader](https://github.com/apriorit/custom-bootloader) A demo tutorial for low-level and kernel developers - developing a custom Windows boot loader
+- [**25**Star][1y] [Py] [ansorren/gdpatrol](https://github.com/ansorren/gdpatrol) A Lambda-powered Security Orchestration framework for AWS GuardDuty
+- [**25**Star][2y] [andrew-morris/presentations](https://github.com/andrew-morris/presentations) A centralized location for all presentations I've given at various conferences
+- [**25**Star][6m] [Py] [andreafioraldi/r2angrdbg](https://github.com/andreafioraldi/r2angrdbg) 在 radare2 调试器中使用 angr
+- [**25**Star][3y] [Shell] [amoghbl1/orfox](https://github.com/amoghbl1/orfox) This is my repository for the orfox browser, a browser that uses tor to communicate and Firefox for Android as it's base.
+- [**25**Star][29d] [Lua] [alpinelinux/alpine-secdb](https://github.com/alpinelinux/alpine-secdb) Alpine Linux security database
+- [**25**Star][2y] [Shell] [alephsecurity/edlrooter](https://github.com/alephsecurity/edlrooter)
+- [**25**Star][8y] [aheadley/logitech-solar-k750-linux](https://github.com/aheadley/logitech-solar-k750-linux) Userspace "driver" for the Logitech k750 Solar Keyboard. A fork of the repo from
+- [**25**Star][3y] [Go] [aead/hydrogen](https://github.com/aead/hydrogen) Go implementation of libhydrogen - a lightweight, easy-to-use crypto library
+- [**25**Star][2y] [Py] [absingh31/tor_spider](https://github.com/absingh31/tor_spider) Python project to crawl and scrap the lesser known deep web or one can say dark web. Just provide the onion link and get started.
+- [**25**Star][5m] [aadityapurani/nodejs-red-team-cheat-sheet](https://github.com/aadityapurani/nodejs-red-team-cheat-sheet) NodeJS Red-Team Cheat Sheet
+- [**25**Star][3y] [HTML] [4b5f5f4b/pocs](https://github.com/4b5f5f4b/pocs)
+- [**25**Star][2y] [1337g/cve-2017-17215](https://github.com/1337g/cve-2017-17215) CVE-2017-17215 HuaWei Router RCE (NOT TESTED)
+- [**25**Star][6m] [Py] [0x00string/oldays](https://github.com/0x00string/oldays) public exploits
+- [**25**Star][2y] [C] [0x00-0x00/cve-2018-1000001](https://github.com/0x00-0x00/cve-2018-1000001) glibc getcwd() local privilege escalation compiled binaries
+- [**24**Star][23d] [Visual Basic .NET] [zelon88/ransomware_defender](https://github.com/zelon88/ransomware_defender) A Windows Logon / Startup / Scheduled Task Script for Ransomware Detection & Early-Warning
+- [**24**Star][1m] [Go] [monkeydioude/capybara](https://github.com/monkeydioude/capybara) Capybara, simple reverse-proxy (api gateway) for localhost services
+- [**24**Star][t] [thehive-project/awesome](https://github.com/thehive-project/awesome) A curated list of awesome things related to TheHive & Cortex
+- [**24**Star][3y] [C#] [nytrorst/hookme](https://github.com/nytrorst/hookme) Exported from
+- [**24**Star][2y] [HTML] [iaik/interruptjs](https://github.com/iaik/interruptjs) Practical Keystroke Timing Attacks in Sandboxed JavaScript
+- [**24**Star][2y] [C#] [reswitched/hacversionlistbot](https://github.com/reswitched/hacversionlistbot) Versionlist update tracker for the Nintendo Switch.
+- [**24**Star][1y] [JS] [shack2/jvapp](https://github.com/shack2/jvapp) Java漏洞练习程序,开发工具Eclipse,运行环境Java 1.7以上版本,Tocmat7以上。
+- [**24**Star][3y] [C++] [sektioneins/aarch64_cryptoextension](https://github.com/sektioneins/aarch64_cryptoextension) IDA AArch64 processor extender extension: Adding crypto extension instructions (AES/SHA1/SHA256)
+- [**24**Star][2y] [Shell] [david942j/honest](https://github.com/david942j/honest) Are your installed packages _really_ the same as you saw on GitHub?
+- [**24**Star][5y] [C#] [yck1509/dnexplorer](https://github.com/yck1509/dnexplorer) A simple viewer of modules using dnlib.
+- [**24**Star][6y] [Py] [felixgr/pytaint](https://github.com/felixgr/pytaint)
+- [**24**Star][4m] [Go] [l3m0n/vulenv](https://github.com/l3m0n/vulenv) 漏洞测试环境 - 方便写扫描器利用复现
+- [**24**Star][3y] [Assembly] [rehints/bootkitsbook](https://github.com/rehints/bootkitsbook) repository with additional materials and source code
+- [**24**Star][4y] [Java] [stealthcopter/steganography](https://github.com/stealthcopter/steganography) Android Steganography Library
+- [**24**Star][1y] [n0tr00t/n0js](https://github.com/n0tr00t/n0js) n0js xss challenges
+- [**24**Star][5y] [C] [z3apa3a/3scan](https://github.com/z3apa3a/3scan) 3Scan is fast detector for open HTTP/CONNECT/SOCKS4/SOCKS5/FTP/TELNET proxy
+- [**24**Star][10m] [C++] [tasvideos/vba-rerecording](https://github.com/tasvideos/vba-rerecording) Automatically exported from code.google.com/p/vba-rerecording
+- [**24**Star][28d] [C] [userlandkernel/usbusted](https://github.com/userlandkernel/usbusted) Research on Apple's USB protocols
+- [**24**Star][3y] [Py] [jenkstom/python-ddns](https://github.com/jenkstom/python-ddns) A self-hosted dynamic DNS service using BIND9 and python.
+- [**24**Star][9m] [Java] [openindex/remotesupporttool](https://github.com/openindex/remotesupporttool) an easy single click solution for remote maintenance
+- [**24**Star][2m] [Py] [kismon/kismon](https://github.com/kismon/kismon) A GUI client for kismet
+- [**24**Star][2y] [Ruby] [trailofbits/trailofphish](https://github.com/trailofbits/trailofphish) Phishing e-mail repository
+- [**24**Star][27d] [cypurr-collective/cypurr-prezes](https://github.com/cypurr-collective/cypurr-prezes) presentation materials for our cryptoparties
+- [**24**Star][3m] [abhinavprasad47/bugbounty-starter-notes](https://github.com/abhinavprasad47/bugbounty-starter-notes) bug bounty hunters starter notes
+- [**24**Star][3y] [AutoIt] [yaseralnajjar/ida-msdn-helper](https://github.com/yaseralnajjar/IDA-MSDN-helper) IDA Pro MSDN Helper
+- [**24**Star][4m] [C] [hatching/tracy](https://github.com/hatching/tracy) tracy - a system call tracer and injector. Find us in #tracy on irc.freenode.net
+- [**24**Star][2y] [C++] [vmcall/token_manipulation](https://github.com/vmcall/token_manipulation) Bypass User Account Control by manipulating tokens
+- [**24**Star][12m] [C++] [zsshen/yadd](https://github.com/zsshen/yadd) Yet another Android Dex bytecode Disassembler: a static Android app disassembler for fast class and method signature extraction and code structure visualization.
+- [**24**Star][1y] [C] [zhuhuibeishadiao/pathmodification](https://github.com/zhuhuibeishadiao/pathmodification) Process path modification x64
+- [**24**Star][4y] [Py] [zecure/shadowd_python](https://github.com/zecure/shadowd_python) A Shadow Daemon connector for Python applications
+- [**24**Star][4m] [xyntax/slides](https://github.com/xyntax/slides) My public presentation slides.
+- [**24**Star][2y] [C#] [xxczaki/logger](https://github.com/xxczaki/logger) ☠
+- [**24**Star][4y] [xgfan/ss-relay](https://github.com/xgfan/ss-relay) shadowsocks relay docker
+- [**24**Star][9m] [TS] [woza-lab/woza](https://github.com/woza-lab/woza) [Deprecated]Dump application ipa from jailbroken iOS based on frida. (Node edition)
+- [**24**Star][3y] [woodspeed/pentest](https://github.com/woodspeed/pentest)
+- [**24**Star][1y] [C] [wchill/defcon26_badgehacking](https://github.com/wchill/defcon26_badgehacking) Notes and things regarding hacking DEFCON 26's badge
+- [**24**Star][5y] [JS] [vector35/hackinggames](https://github.com/vector35/hackinggames) Hacking Games in a Hacked Game
+- [**24**Star][4m] [JS] [twilio/starter-ruby](https://github.com/twilio/starter-ruby) A starter app for Ruby developers embarking on their first Twilio quest!
+- [**24**Star][1y] [Py] [tuuunya/exploit](https://github.com/tuuunya/exploit) 常用的一些Exploit,经常会更新,也欢迎各位提交新的exp给我。
+- [**24**Star][3y] [Py] [topranks/ms17-010_subnet](https://github.com/topranks/ms17-010_subnet) MS17-010 Windows SMB RCE -- Full subnet scanner
+- [**24**Star][6y] [Java] [thypon/androidfuzz](https://github.com/thypon/androidfuzz) JavaFuzz 4 Android
+- [**24**Star][2y] [Py] [thoughtfuldev/supergirloncrypt](https://github.com/thoughtfuldev/supergirloncrypt) CryptoTrojan in Python (For educational purpose ONLY)
+- [**24**Star][12m] [Py] [thom-s/shodan-cli](https://github.com/thom-s/shodan-cli) Python command line wrapper for the shodan.io API
+- [**24**Star][1y] [Py] [thelsa/ecshop-getshell](https://github.com/thelsa/ecshop-getshell) ecshop rce getshell
+- [**24**Star][1m] [Py] [thehairyj/scout](https://github.com/thehairyj/scout) Scout - a Contactless Active Reconnaissance Tool
+- [**24**Star][2y] [Py] [thegeekht/loki.rat](https://github.com/thegeekht/loki.rat) Loki.Rat is a fork of the Ares RAT, it integrates new modules, like recording , lockscreen , and locate options. Loki.Rat is a Python Remote Access Tool.
+- [**24**Star][4y] [C++] [thecybermind/ipredir](https://github.com/thecybermind/ipredir) IP redirection+NAT for Windows
+- [**24**Star][7m] [Py] [tgalal/consonance](https://github.com/tgalal/consonance) WhatsApp's handshake implementation using Noise Protocol
+- [**24**Star][3y] [C] [te-k/openssh-backdoor](https://github.com/te-k/openssh-backdoor) Openssh backdoor found with a ssh honeypot
+- [**24**Star][4y] [C] [talos-vulndev/advisories](https://github.com/talos-vulndev/advisories)
+- [**24**Star][2y] [Rust] [sushant94/rune](https://github.com/sushant94/rune) rune - radare2 based symbolic emulator
+- [**24**Star][3y] [Shell] [superkojiman/dirtshell](https://github.com/superkojiman/dirtshell) dirtshell:提供类似于Shell的接口,使文件路径遍历变得简单且迅速。
+- [**24**Star][2y] [Py] [subinacls/filibuster](https://github.com/subinacls/filibuster)
+- [**24**Star][2y] [Shell] [styx00/apache-vulns](https://github.com/styx00/apache-vulns) Pentest Scripts for Apache Vulnerabilities
+- [**24**Star][10m] [C] [stooged/apptousb-50x](https://github.com/stooged/apptousb-50x) 5.0X
+- [**24**Star][1y] [JS] [stephenlb/spoken](https://github.com/stephenlb/spoken) Spoken - JavaScript Text-to-Speech and Speech-to-Text for AI Artificial Intelligence Apps
+- [**24**Star][1m] [Rust] [stainless-steel/md5](https://github.com/stainless-steel/md5) MD5 hash function
+- [**24**Star][9y] [Java] [spiderlabs/deface](https://github.com/spiderlabs/deface) A Java Server Faces (JSF) testing tool for decoding view state and creating view state attack vectors.
+- [**24**Star][11m] [C++] [sonicrules11/barbossa](https://github.com/sonicrules11/barbossa) Macintosh MultiHack for Counter-Strike: Global Offensive
+- [**24**Star][2y] [PHP] [skyzyx/bad-passwords](https://github.com/skyzyx/bad-passwords) A list of the top 10,000 most-used passwords from hacked password lists.
+- [**24**Star][4m] [Go] [skeeto/pgp-poisoner](https://github.com/skeeto/pgp-poisoner) PGP key poisoner
+- [**24**Star][3y] [Py] [sizzop/hevd-exploits](https://github.com/sizzop/hevd-exploits) Various exploits for the HackSys Extreme Vulnerable Driver
+- [**24**Star][2y] [silvermoonsecurity/sandboxevasion](https://github.com/silvermoonsecurity/sandboxevasion) Malware sandbox evasion tricks and solution
+- [**24**Star][3y] [Py] [silentsignal/activescan3plus](https://github.com/silentsignal/activescan3plus) Modified version of ActiveScan++ Burp Suite extension
+- [**24**Star][5m] [Common Lisp] [shrdlu68/cl-tls](https://github.com/shrdlu68/cl-tls) An implementation of TLS and related specifications in Common Lisp
+- [**24**Star][1y] [Shell] [shawnduong/pxenum](https://github.com/shawnduong/pxenum) Post eXploitation Enumeration script for Linux. Tested on Ubuntu.
+- [**24**Star][2y] [Py] [sensepost/dnserver](https://github.com/sensepost/dnserver) dnserver: Python 编写的简易 DNS 服务器
+- [**24**Star][2y] [HTML] [secwiki/ti](https://github.com/secwiki/ti) Threat Research Blog 威胁情报提取与溯源技术研究小组
+- [**24**Star][4y] [C++] [secmob/cve-2015-6612](https://github.com/secmob/cve-2015-6612)
+- [**24**Star][2y] [Java] [secdec/pen-test-automation](https://github.com/secdec/pen-test-automation) A framework for automating penetration testing using a plugin based architecture
+- [**24**Star][3y] [C] [seccon/seccon2016_online_ctf](https://github.com/seccon/seccon2016_online_ctf) SECCON2016 online CTF for public
+- [**24**Star][3y] [Py] [sciencemanx/ctf-tools](https://github.com/sciencemanx/ctf-tools) Attack-Defend CTF Tools
+- [**24**Star][4d] [scanfsec/cve-2018-15982](https://github.com/scanfsec/cve-2018-15982) Aggressor Script to launch IE driveby for CVE-2018-15982.
+- [**24**Star][5y] [ObjC] [samdmarshall/ios-internals](https://github.com/samdmarshall/ios-internals) iOS related code
+- [**24**Star][1y] [Py] [rootm0s/casper](https://github.com/rootm0s/casper) 👻 Socket based RAT for Windows with evasion techniques and other features for control
+- [**24**Star][4y] [C++] [rootkitsmm/winio-vidix](https://github.com/rootkitsmm/winio-vidix) Exploit WinIo - Vidix and Run Shellcode in Windows Kerne ( local Privilege escalation )
+- [**24**Star][1y] [Go] [root-gg/wsp](https://github.com/root-gg/wsp) HTTP tunnel over Websocket
+- [**24**Star][3y] [Go] [robinmonjo/ngx_http_l](https://github.com/robinmonjo/ngx_http_l) nginx module "mostly" developed in Go
+- [**24**Star][2y] [HTML] [ring04h/cia-hacking-tools](https://github.com/ring04h/cia-hacking-tools) WikiLeaks Vault 7 CIA Hacking Tools
+- [**24**Star][5y] [Py] [ricterz/simple-dns](https://github.com/ricterz/simple-dns) A simple regular-expression based DNS server
+- [**24**Star][2y] [retrogamer74/firmwarev5.05_mirahen_baseinjection](https://github.com/retrogamer74/firmwarev5.05_mirahen_baseinjection) Mira HEN 5.05 PS4 Fast developed firmware just for the basic injection
+- [**24**Star][3y] [Py] [restran/hacker-scripts](https://github.com/restran/hacker-scripts)
+- [**24**Star][5m] [redshiftzero/awesome-threat-modeling](https://github.com/redshiftzero/awesome-threat-modeling) a curated list of useful threat modeling resources
+- [**24**Star][4m] [C#] [rciworks/rci.tutorials.csgo.cheat.external](https://github.com/rciworks/rci.tutorials.csgo.cheat.external) "Counter-Strike: Global Offensive" External Cheat
+- [**24**Star][7y] [C] [rapid7/vaccination](https://github.com/rapid7/vaccination)
+- [**24**Star][1y] [prsecurity/neutrino](https://github.com/prsecurity/neutrino) Neutrino C2 Source Code
+- [**24**Star][2y] [Py] [portswigger/burp-smart-buster](https://github.com/portswigger/burp-smart-buster) A Burp Suite content discovery plugin that add the smart into the Buster!
+- [**24**Star][2y] [C++] [polycone/pe-loader](https://github.com/polycone/pe-loader) A Windows PE format file loader
+- [**24**Star][3y] [polarislab/s2-045](https://github.com/polarislab/s2-045) Struts2 S2-045(CVE-2017-5638)Vulnerability environment -
+- [**24**Star][12m] [plenumlab/gql-helper](https://github.com/plenumlab/gql-helper) This is a small extension to make graphql readable
+- [**24**Star][1y] [JS] [peterwilli/iota-ion.lib.js](https://github.com/peterwilli/iota-ion.lib.js) IOTA ION Library - Fast data-troughput in the browser, supported by the IOTA tangle.
+- [**24**Star][1m] [JS] [pertsev/web3_utilz](https://github.com/pertsev/web3_utilz) Useful snippets of js code for interacting with Smart Contracts
+- [**24**Star][2y] [Py] [p4u/stratum-relay](https://github.com/p4u/stratum-relay) Stratum proxy relay for mining altcoin
+- [**24**Star][3y] [Java] [owasp/owasp-proxy](https://github.com/owasp/owasp-proxy) Owasp Proxy
+- [**24**Star][3y] [C] [osandamalith/shellcodes](https://github.com/osandamalith/shellcodes) My Shellcode Archive
+- [**24**Star][4y] [C] [osandamalith/imageexploiter](https://github.com/osandamalith/imageexploiter) Hide JavaScript inside your GIF and BMP images
+- [**24**Star][3d] [Java] [opticfusion1/mcantimalware](https://github.com/opticfusion1/mcantimalware) Anti-Malware for minecraft
+- [**24**Star][2y] [Py] [operatorequals/chmod-stego](https://github.com/operatorequals/chmod-stego) A PoC on passing data through UNIX file privilege bits (RWX Triplets)
+- [**24**Star][3y] [C] [opensise/cve_poc_collect](https://github.com/opensise/cve_poc_collect) 这里会收集各种类型的CVE PoC 和EXP ,仅用来学习漏洞挖掘相关技术..
+- [**24**Star][2y] [Shell] [oniondecoy/installer](https://github.com/oniondecoy/installer) A platform to run private unannounced Honeypots as Tor Hidden Services (aka Onion Decoys) inside the Tor Network.
+- [**24**Star][2d] [Py] [oasis-open/cti-stix-elevator](https://github.com/oasis-open/cti-stix-elevator) OASIS TC Open Repository: Convert STIX 1.2 XML to STIX 2.0 JSON
+- [**24**Star][4m] [HTML] [o-o-overflow/dc2019f-super-smash-ooos](https://github.com/o-o-overflow/dc2019f-super-smash-ooos)
+- [**24**Star][2y] [C] [o-o-overflow/chall-www](https://github.com/o-o-overflow/chall-www)
+- [**24**Star][1y] [Py] [nullarray/shogun](https://github.com/nullarray/shogun) Shodan.io Command Line Interface
+- [**24**Star][1y] [Py] [noobiedog/peanuts](https://github.com/noobiedog/peanuts) Peanuts is a free and open source wifi tracking tool. Based on the SensePosts Snoopy-NG project that is now closed.
+- [**24**Star][22d] [Py] [nocomplexity/securityprivacyreferencearchitecture](https://github.com/nocomplexity/securityprivacyreferencearchitecture) Open Repository for the Open Security and Privacy Reference Architecture
+- [**24**Star][1y] [C++] [nixer1337/nixware-gmod](https://github.com/nixer1337/nixware-gmod) Internal c++ gmod hack
+- [**24**Star][1y] [Py] [nityanandagohain/proxy_configuration](https://github.com/nityanandagohain/proxy_configuration) System wide proxy configuration in a single script with options to add, remove proxy and restore system default proxy configuration
+- [**24**Star][3y] [Py] [nccgroup/blesuite-cli](https://github.com/nccgroup/blesuite-cli) BLESuite_CLI is a command line tool to enable an easier way to test Bluetooth Low Energy (BLE) devices
+- [**24**Star][2y] [Py] [nccgroup/binja_dynamics](https://github.com/nccgroup/binja_dynamics) A PyQt5 frontend to the binjatron plugin for Binary Ninja that includes highlighting features aimed at making it easier for beginners to learn about reverse engineering
+- [**24**Star][2y] [Go] [mlesniak/port-scanner](https://github.com/mlesniak/port-scanner) Port scanner in Go
+- [**24**Star][4m] [C] [misje/dhcpoptinj](https://github.com/misje/dhcpoptinj) DHCP option injector
+- [**24**Star][5y] [C++] [michael4338/ndis](https://github.com/michael4338/ndis) Windows Kernel Driver - Create a driver device in intermediate layer of Windows kernel based on NDIS, which communicates with and connect upper layer (user mode applications) and lower layer (miniport driver/network card). Create self-defined protocols for transmitting data and control communications by simulating very simple HTTP, TCP and ARP p…
+- [**24**Star][4y] [Py] [miaouplop/gwt-3d](https://github.com/miaouplop/gwt-3d) aimed at helping you during penetration testing on GWT technology
+- [**24**Star][3y] [C] [mehqq/public_writeup](https://github.com/mehqq/public_writeup) My CTF writeup
+- [**24**Star][3y] [Pascal] [martindrab/vrtuletree](https://github.com/martindrab/vrtuletree) VrtuleTree is a tool that displays information about driver and device objects present in the system and relations between them. Its functionality is very similar to famous DeviceTree, however, VrtuleTree emhasises on stability and support of latest Windows versions
+- [**24**Star][2y] [Py] [marcusbotacin/anti.analysis](https://github.com/marcusbotacin/anti.analysis) Malware Analysis, Anti-Analysis, and Anti-Anti-Analysis
+- [**24**Star][2y] [PHP] [magento-engcom/php-7.2-support](https://github.com/magento-engcom/php-7.2-support) Repository for implementing support of php-7.2 support in Magento
+- [**24**Star][1y] [Py] [m4rktn/jogan](https://github.com/m4rktn/jogan) Pentest Tools & Packages Installer [Linux/Termux]
+- [**24**Star][4y] [C] [ltangjian/firewall](https://github.com/ltangjian/firewall) Based on the research of Windows network architecture and the core packet filtering firewall technology, using NDIS intermediate driver, the article achieved the filter of the core layer, and completed the Windows Personal Firewall Design and Implementation.
+- [**24**Star][4y] [PHP] [lt/php-cryptopals](https://github.com/lt/php-cryptopals) The Matasano crypto challenges completed using PHP
+- [**24**Star][3y] [long123king/grep](https://github.com/long123king/grep) Grep-like WinDbg extension
+- [**24**Star][3y] [Py] [lolwaleet/bannergrab](https://github.com/lolwaleet/bannergrab) ~ BannerGrab
+- [**24**Star][1m] [Shell] [lockedbyte/ddos2track](https://github.com/lockedbyte/ddos2track) A script to avoid HTTP Floods attacks, log the attacker IP Addresses and Traffic, and Send you an email to warn that you are behind an attack.
+- [**24**Star][12m] [C++] [lesmargoulins/margoulineur2000](https://github.com/lesmargoulins/margoulineur2000) NFC
+- [**24**Star][8m] [Dockerfile] [knqyf263/cve-2019-6467](https://github.com/knqyf263/cve-2019-6467) CVE-2019-6467 (BIND nxdomain-redirect)
+- [**24**Star][6m] [Zeek] [kinomakino/threat-intelligence-data](https://github.com/kinomakino/threat-intelligence-data) Snort_rules detection bad actors.
+- [**24**Star][11m] [Py] [kennell/ftpknocker](https://github.com/kennell/ftpknocker)
+- [**24**Star][6m] [Py] [keithjjones/malgazer](https://github.com/keithjjones/malgazer) A Python malware analysis library.
+- [**24**Star][4y] [Py] [karblue/pppoe-hijack](https://github.com/karblue/pppoe-hijack) 伪装PPPoE服务器截取密码
+- [**24**Star][9m] [C] [kaist-ina/sgx-tor](https://github.com/kaist-ina/sgx-tor) Tor anonymity network for SGX
+- [**24**Star][2m] [ka0labs/ctf-writeups](https://github.com/ka0labs/ctf-writeups) CTF Writeups
+- [**24**Star][2y] [C++] [k0keoyo/hevd-arbitrary-overwrite-exploit-win10-rs3](https://github.com/k0keoyo/hevd-arbitrary-overwrite-exploit-win10-rs3)
+- [**24**Star][9m] [PHP] [jsondeveloper/dante-gui](https://github.com/jsondeveloper/dante-gui) Dante Server (SOCKS5 Proxy) Web Interface (Telegram ready)
+- [**24**Star][2y] [Java] [joychou93/trident](https://github.com/joychou93/trident) Java通用漏洞修复安全组件
+- [**24**Star][9m] [Java] [jonas-schievink/ghidraxbe](https://github.com/jonas-schievink/ghidraxbe) A Ghidra extension for loading Xbox Executables (.xbe files)
+- [**24**Star][4m] [Py] [joelwking/phantom-cyber](https://github.com/joelwking/phantom-cyber) Phantom Playbook and App repository
+- [**24**Star][12m] [C] [jmcph4/crackerjack](https://github.com/jmcph4/crackerjack) A collection of crackmes
+- [**24**Star][1y] [PS] [jiangxianli/googlehosttool](https://github.com/jiangxianli/googlehosttool) 一键添加最新google hosts文件到本地hosts文件中,google 翻墙访问工具,适用windows、linux、mac
+- [**24**Star][2y] [Shell] [jacksongl/npm-vuln-poc](https://github.com/jacksongl/npm-vuln-poc) Vulnerabilities discovered in npm repository [Berkeley PL & Security Research].
+- [**24**Star][6y] [Py] [izuzak/urlreq](https://github.com/izuzak/urlreq) HTTP proxy that decodes a HTTP request defined in the URL and makes that request
+- [**24**Star][3y] [PS] [invoke-ir/presentations](https://github.com/invoke-ir/presentations)
+- [**24**Star][3y] [JS] [informationshallbefree/spiegel-plus-unlocker-firefox](https://github.com/informationshallbefree/spiegel-plus-unlocker-firefox) A Firefox Addon to decrypt every Spiegel Plus article without paying money.
+- [**24**Star][2m] [Py] [ictu/zap-baseline](https://github.com/ictu/zap-baseline) Zap baseline scanner in Docker with authentication
+- [**24**Star][2y] [Shell] [hannob/ctgrab](https://github.com/hannob/ctgrab)
+- [**24**Star][6y] [C] [hacksysteam/shellcodeofdeath](https://github.com/hacksysteam/shellcodeofdeath) Shellcode Of Death
+- [**24**Star][6y] [Ruby] [hackedteam/rcs-backdoor](https://github.com/hackedteam/rcs-backdoor) Backdoor implementation in Ruby (testing)
+- [**24**Star][1y] [Py] [gynvael/arcanesector](https://github.com/gynvael/arcanesector) Arcane Sector game - a CTF task, or old-school (MMO)RPG - depending on the perspective. The code is of terrible quality, you have been warned!
+- [**24**Star][3y] [C] [guilhermeferreira/spikepp](https://github.com/guilhermeferreira/spikepp) SPIKE is a protocol fuzzer creation kit. It provides an API that allows a user to create their own fuzzers for network based protocols using the C++ programming language. The tool defines a number of primitives that it makes available to C coders, which allows it to construct fuzzed messages called “SPIKES” that can be sent to a network service …
+- [**24**Star][1y] [JS] [goliatone/arpscan](https://github.com/goliatone/arpscan) Node arp-scan wrapper
+- [**24**Star][3m] [Py] [ghostofgoes/adles](https://github.com/ghostofgoes/adles) Automated Deployment of Lab Environments System (ADLES)
+- [**24**Star][3y] [Py] [freedomofpress/fingerprint-securedrop](https://github.com/freedomofpress/fingerprint-securedrop) A machine learning data analysis pipeline for analyzing website fingerprinting attacks and defenses.
+- [**24**Star][2y] [foundstone/expertinvestigationguides](https://github.com/foundstone/expertinvestigationguides) Expert Investigation Guides
+- [**24**Star][20d] [Py] [foteinosmerg/pymerkle](https://github.com/foteinosmerg/pymerkle) Python crypto toolkit for generation and validation of Merkle-Proofs
+- [**24**Star][4y] [C] [fortiguard-lion/anti-dll-hijacking](https://github.com/fortiguard-lion/anti-dll-hijacking)
+- [**24**Star][3y] [Py] [forensicmatt/pancakeviewer](https://github.com/forensicmatt/pancakeviewer) A DFVFS Backed Forensic Viewer
+- [**24**Star][3y] [Py] [fluproject/flunym0us](https://github.com/fluproject/flunym0us) Flunym0us is a Vulnerability Scanner for Wordpress and Moodle designed by Flu Project Team. Flunym0us has been developed in Python. Flunym0us performs dictionary attacks against Web sites. By default, Flunym0us includes a dictionary for Wordpress and other for Moodle.
+- [**24**Star][3y] [Py] [felmoltor/keepnote_import_nmap](https://github.com/felmoltor/keepnote_import_nmap) Plugin for keepnote to import a XML nmap file
+- [**24**Star][5d] [Shell] [fajartheggman/f-tools](https://github.com/fajartheggman/f-tools) Toolkit Hacking
+- [**24**Star][4y] [exp-sky/hitcon-2015-spartan-0day-exploit](https://github.com/exp-sky/hitcon-2015-spartan-0day-exploit) HitCon 2015 spartan 0day & exploit
+- [**24**Star][4y] [JS] [eviltik/evilwaf](https://github.com/eviltik/evilwaf) Web Application Firewall (WAF) Detection Tool
+- [**24**Star][2y] [evilmog/hashcat-hcstat](https://github.com/evilmog/hashcat-hcstat) A collection of hashcat-hcstat files
+- [**24**Star][6m] [Py] [evild3ad/isodump](https://github.com/evild3ad/isodump) isodump - ISO dump utility
+- [**24**Star][7m] [JS] [ettic-team/endpointfinder](https://github.com/ettic-team/endpointfinder)
+- [**24**Star][12d] [HTML] [equalitie/banjax](https://github.com/equalitie/banjax) Apache Traffic Server Plugin performing various anti-DDoS measures
+- [**24**Star][6y] [C++] [epsylon3/odbgscript](https://github.com/epsylon3/odbgscript) OllyDBG Script Engine
+- [**24**Star][1y] [C] [enovella/exploitrainings](https://github.com/enovella/exploitrainings) Exploitation on different architectures (x86, x64, arm, mips, avr)
+- [**24**Star][5y] [C++] [edix/malwareresourcescanner](https://github.com/edix/malwareresourcescanner) Scanning and identifying XOR encrypted PE files in PE resources
+- [**24**Star][2y] [Py] [dsnezhkov/octohook](https://github.com/dsnezhkov/octohook) Git Web Hook Tunnel for C2
+- [**24**Star][6y] [Py] [dkovar/ircollect](https://github.com/dkovar/ircollect) ircollect
+- [**24**Star][9m] [Dockerfile] [dizcza/docker-hashcat](https://github.com/dizcza/docker-hashcat) Hashcat docker for Ubuntu 18.04 OpenCL 2.1
+- [**24**Star][2y] [ObjC] [dev-liyang/lytableviewwidget](https://github.com/dev-liyang/lytableviewwidget) 逆向微信-分析学习微信是如何快速构建静态TableView界面的
+- [**24**Star][1m] [Py] [desword/pwn_execrise](https://github.com/desword/pwn_execrise) A collection of pwn execrise
+- [**24**Star][3y] [Ruby] [deadbits/maz](https://github.com/deadbits/maz) Malware Analysis Zoo
+- [**24**Star][2y] [Py] [cym13/vbs-reverse-shell](https://github.com/cym13/vbs-reverse-shell) VBS reverse shell scripts
+- [**24**Star][6y] [PHP] [cyberisltd/gzipbloat](https://github.com/cyberisltd/gzipbloat) PHP framework to test User-Agents and intermediary content inspection devices for denial-of-service vulnerabilities with respect to HTTP response decompression.
+- [**24**Star][1y] [C#] [countercept/dotnet-gargoyle](https://github.com/countercept/dotnet-gargoyle) A spiritual .NET equivalent to the Gargoyle memory scanning evasion technique
+- [**24**Star][1y] [Py] [cosine0/amphitrite](https://github.com/cosine0/amphitrite) Symbolic debugging tool using JonathanSalwan/Triton
+- [**24**Star][2y] [Groovy] [continuumsecurity/ropeytasks](https://github.com/continuumsecurity/ropeytasks) Deliberately vulnerable web application
+- [**24**Star][2y] [Java] [commonsguy/autofillfollies](https://github.com/commonsguy/autofillfollies) Demonstration of security issues with Android 8.0 autofill
+- [**24**Star][2y] [PS] [codingo/retrieve-windows-wifi-passwords](https://github.com/codingo/retrieve-windows-wifi-passwords) Retreives the SSID names and passwords in cleartext for each Wifi network stored on the computer running this powershell script and output to JSON.
+- [**24**Star][4y] [C] [cngutierr/ersatzpassword](https://github.com/cngutierr/ersatzpassword)
+- [**24**Star][1y] [CSS] [citguru/jobby](https://github.com/citguru/jobby) A Job Listing Web App using NodeJS and Indreed
+- [**24**Star][10m] [chrysh/ctf_writeups](https://github.com/chrysh/ctf_writeups)
+- [**24**Star][7y] [Ruby] [chrislee35/flowtag](https://github.com/chrislee35/flowtag) FlowTag visualizes pcap files for forensic analysis
+- [**24**Star][3y] [C++] [chausner/1337patch](https://github.com/chausner/1337patch) Simple command-line tool to apply patches exported by x64dbg to running processes
+- [**24**Star][1y] [Py] [bwesterb/pol](https://github.com/bwesterb/pol) pol /pɵl/ is a modern command line password manager with deniable encryption
+- [**24**Star][5y] [Py] [burningcodes/dexconfuse](https://github.com/burningcodes/dexconfuse) 简易dex混淆器
+- [**24**Star][5m] [Py] [bunseokbot/darklight](https://github.com/bunseokbot/darklight) Engine for collecting onion domains and crawling from webpage based on Tor network
+- [**24**Star][3y] [Py] [bunseokbot/androtools](https://github.com/bunseokbot/androtools) Android malware static & dynamic analysis and automated action (deprecated)
+- [**24**Star][2y] [Py] [brainsmoke/pub-archive](https://github.com/brainsmoke/pub-archive)
+- [**24**Star][6y] [C] [brainsmoke/minemu](https://github.com/brainsmoke/minemu) Minemu is a minimal emulator for dynamic taint analysis ( this is a mirror of
+- [**24**Star][1y] [bountymachine/about](https://github.com/bountymachine/about) A central place to keep track of relevant BountyMachine talks, blogs, and interesting things!
+- [**24**Star][3y] [Py] [bounteous/libenom](https://github.com/bounteous/libenom)
+- [**24**Star][10m] [C++] [blitz/baresifter](https://github.com/blitz/baresifter) A bare-metal x86 instruction set fuzzer a la Sandsifter
+- [**24**Star][2y] [PHP] [blackfan/jpg_payload](https://github.com/blackfan/jpg_payload)
+- [**24**Star][10m] [bkerler/slides_and_papers](https://github.com/bkerler/slides_and_papers) Here be dragons. Or Slides. Or Papers. Or Nothing :)
+- [**24**Star][11m] [Go] [betalo-sweden/forwardingproxy](https://github.com/betalo-sweden/forwardingproxy) A HTTP/S forwarding proxy in Go
+- [**24**Star][9m] [C] [begriffs/utofu](https://github.com/begriffs/utofu) Unicode Trust on First Use (TOFU)
+- [**24**Star][2m] [JS] [aykutcevik/idn-safe](https://github.com/aykutcevik/idn-safe) "IDN Safe" is a browser extension which blocks internationalized domain names to prevent you from visiting probable fake sites
+- [**24**Star][3y] [C] [avalon1610/alpc](https://github.com/avalon1610/alpc) Advance LPC
+- [**24**Star][2y] [JS] [auth0-blog/nextjs-got](https://github.com/auth0-blog/nextjs-got) A simple nextjs application that showcases Game of Thrones Characters
+- [**24**Star][1y] [Py] [aurore54f/jast](https://github.com/aurore54f/jast) Syntactic detection of malicious (obfuscated) JavaScript files
+- [**24**Star][2m] [Ruby] [arkadiyt/ssrf_filter](https://github.com/arkadiyt/ssrf_filter) A ruby gem for defending against Server Side Request Forgery (SSRF) attacks
+- [**24**Star][4y] [C] [arizvisa/afl-cygwin](https://github.com/arizvisa/afl-cygwin) AFL "mostly" ported to cygwin
+- [**24**Star][8m] [C++] [anwi-wips/anwi](https://github.com/anwi-wips/anwi) 新型无线IDS, 基于低成本的Wi-Fi模块(ESP8266)
+- [**24**Star][5y] [PS] [anweiss/dockerclientdsc](https://github.com/anweiss/dockerclientdsc)
+- [**24**Star][1m] [Dockerfile] [antswordproject/antsword-labs](https://github.com/antswordproject/antsword-labs) Awesome environment for antsword tests
+- [**24**Star][1m] [Py] [anssi-fr/packetweaver](https://github.com/anssi-fr/packetweaver) A Python framework for script filing and task sequencing
+- [**24**Star][7y] [Java] [akdeniz/mitmsocks4j](https://github.com/akdeniz/mitmsocks4j) Man in the Middle SOCKS Proxy for JAVA
+- [**24**Star][4y] [JS] [aerospaceresearch/dgsn_bigwhoop](https://github.com/aerospaceresearch/dgsn_bigwhoop) BigWhoop
+- [**24**Star][1y] [C++] [adrianyy/x64-syscall](https://github.com/adrianyy/x64-syscall) x64 syscall caller in C++.
+- [**24**Star][2y] [Py] [admintony/sql-injection](https://github.com/admintony/sql-injection) 解决sqlmap不能跑的注入
+- [**24**Star][1m] [Perl] [abarisani/abarisani.github.io](https://github.com/abarisani/abarisani.github.io)
+- [**24**Star][9m] [Py] [a-maumau/vesta](https://github.com/a-maumau/vesta) GPU state check script.
+- [**24**Star][1y] [0xkiewicz/pwk-oscp](https://github.com/0xkiewicz/pwk-oscp) Empower your enumeration during OSCP
+- [**24**Star][3y] [Py] [0xbc/chiasm-shell](https://github.com/0xbc/chiasm-shell) Python-based interactive assembler/disassembler CLI, powered by Keystone/Capstone.
+- [**24**Star][2y] [Py] [0verl0ad/dumb0](https://github.com/0verl0ad/dumb0) A simple tool to dump users in popular forums and CMS :)
+- [**24**Star][7d] [Py] [00xc/h2buster](https://github.com/00xc/h2buster) A fast, threaded, recursive, web directory brute-force scanner over HTTP/2.
+- [**23**Star][2y] [jonnybanana/essential-usb-rubber-ducky-printable-cheat-sheet](https://github.com/jonnybanana/essential-usb-rubber-ducky-printable-cheat-sheet) My personal RubberDucky Cheat Sheet, in JPG, PNG and PDF
+- [**23**Star][6m] [C++] [amirrezanasiri/usb-keystroke-injector](https://github.com/amirrezanasiri/usb-keystroke-injector)
+- [**23**Star][8m] [Shell] [thelinuxchoice/clipboardme](https://github.com/thelinuxchoice/clipboardme) Grab target's clipboard content
+- [**23**Star][8m] [C++] [hikariobfuscator/core](https://github.com/hikariobfuscator/core) Shared Obfuscation Core
+- [**23**Star][2m] [Shell] [hak5/signalowl-payloads](https://github.com/hak5/signalowl-payloads) The Official Hak5 Signal Owl Payload Repository
+- [**23**Star][4y] [diafygi/privacy-checklist](https://github.com/diafygi/privacy-checklist) Checklist for securing communications
+- [**23**Star][6m] [Py] [nextronsystems/valhallaapi](https://github.com/nextronsystems/valhallaapi) Valhalla API Client
+- [**23**Star][2y] [C#] [lockfale/dotnetavbypass-master](https://github.com/lockfale/dotnetavbypass-master) C# AV bypass jank
+- [**23**Star][6y] [C#] [kjcracks/brake](https://github.com/kjcracks/brake) Remote cracking utility
+- [**23**Star][8y] [C#] [sensepost/suru](https://github.com/sensepost/suru) Suru is one of the original Man In The Middle (MITM) proxies that sits between the user's browser and the web application.
+- [**23**Star][6y] [Py] [fsecurelabs/jasmin](https://github.com/fsecurelabs/jasmin)
+- [**23**Star][3m] [Shell] [owasp/honeypot-project](https://github.com/owasp/honeypot-project)
+- [**23**Star][2y] [Py] [wi-fi-analyzer/boopsuite](https://github.com/wi-fi-analyzer/boopsuite) A Suite of Tools written in Python for wireless auditing and security testing.
+- [**23**Star][3y] [hack-with-github/security-bookmarks](https://github.com/hack-with-github/security-bookmarks) Single stop for security related stuff
+- [**23**Star][1y] [Py] [ekultek/checkers](https://github.com/ekultek/checkers) Determine everything you need to know to about a system
+- [**23**Star][3m] [Py] [warner/magic-wormhole-transit-relay](https://github.com/warner/magic-wormhole-transit-relay) Transit Relay server for Magic-Wormhole
+- [**23**Star][5m] [Py] [ntkernel/cve-2019-0708](https://github.com/ntkernel/cve-2019-0708) 收集网上CVE-2018-0708的poc和exp(目前没有找到exp)
+- [**23**Star][3y] [C] [nicehash/cpuminer-opt](https://github.com/nicehash/cpuminer-opt)
+- [**23**Star][3y] [Py] [d4vinci/reversehttp](https://github.com/d4vinci/reversehttp) Python backdoor that uses http post/get requests to communicate
+- [**23**Star][2y] [Py] [airbus-seclab/rebus](https://github.com/airbus-seclab/rebus) REbus facilitates the coupling of existing tools that perform specific tasks, where one's output will be used as the input of others.
+- [**23**Star][20d] [Py] [angr/archr](https://github.com/angr/archr) Target-centric program analysis.
+- [**23**Star][4y] [Py] [andresriancho/django-moth](https://github.com/andresriancho/django-moth) A Django vulnerable Web application for testing the w3af framework
+- [**23**Star][3y] [robertdavidgraham/iotpasswds](https://github.com/robertdavidgraham/iotpasswds) Recording default/backdoor passwords from IoT devices I come across
+- [**23**Star][6y] [Go] [inconshreveable/shroud](https://github.com/inconshreveable/shroud) [DEPRECATED] Public hidden services
+- [**23**Star][2y] [Py] [andresriancho/mongo-objectid-predict](https://github.com/andresriancho/mongo-objectid-predict) Predict Mongo ObjectIds
+- [**23**Star][1y] [hikariobfuscator/swift](https://github.com/hikariobfuscator/swift) Swift Fork
+- [**23**Star][3y] [JS] [uber-common/paranoid-request](https://github.com/uber-common/paranoid-request) An SSRF-preventing wrapper around Node's request module
+- [**23**Star][6m] [JS] [greenwolf/eslint-security-scanner-configs](https://github.com/greenwolf/eslint-security-scanner-configs) eslintrc.js config files for running static analysis on JavaScript to identify security issues.
+- [**23**Star][2y] [Ruby] [urbanadventurer/urlcrazy](https://github.com/urbanadventurer/urlcrazy) Generate and test domain typos and variations to detect and perform typo squatting, URL hijacking, phishing, and corporate espionage.
+- [**23**Star][1y] [Go] [tam7t/cautious-pancake](https://github.com/tam7t/cautious-pancake) github generated the repo name for me
+- [**23**Star][11d] [JS] [keenwon/koa-subdomain](https://github.com/keenwon/koa-subdomain) Simple and lightweight Koa middleware to handle multilevel and wildcard subdomains
+- [**23**Star][1m] [Go] [hahwul/ras-fuzzer](https://github.com/hahwul/ras-fuzzer) RAS(RAndom Subdomain) Fuzzer
+- [**23**Star][13d] [JS] [josephpei/uv2ray](https://github.com/josephpei/uv2ray) Electron V2ray Client (mostly for Linux)
+- [**23**Star][3y] [Py] [ptonewreckin/blindref](https://github.com/ptonewreckin/blindref) BlindRef serves as the basis for an automated Blind-Based XXE Exploitation Framework
+- [**23**Star][3m] [Py] [k8gege/phpstudydoor](https://github.com/k8gege/phpstudydoor) PhpStudy 2016 & 2018 BackDoor Exploit
+- [**23**Star][3y] [Java] [nexxado/wifipasswords](https://github.com/nexxado/wifipasswords) a completely free app that shows your device saved wifi passwords.
+- [**23**Star][3y] [C++] [aixxe/cstrike-basehook-linux](https://github.com/aixxe/cstrike-basehook-linux) Internal project base for Counter-Strike: Source on Linux.
+- [**23**Star][1y] [JS] [andreas0607/coinhive-blocker](https://github.com/andreas0607/coinhive-blocker) Blocks unwanted cryptominers in your browser (plug-in)
+- [**23**Star][5y] [C] [rpp0/peapwn](https://github.com/rpp0/peapwn) Proof-of-concept implementation of the Apple relay attack in Python
+- [**23**Star][5y] [Py] [vnik5287/wpa-autopwn](https://github.com/vnik5287/wpa-autopwn) WPA/WPA2 autopwn script that parses captured handshakes and sends them to the Crackq
+- [**23**Star][29d] [awsmhacks/awsmbloodhoundcustomqueries](https://github.com/awsmhacks/awsmbloodhoundcustomqueries) Collection of cyphers for bloodhound
+- [**23**Star][2m] [C] [doublelabyrinth/windowssudo](https://github.com/doublelabyrinth/windowssudo) A linux-like su/sudo on Windows.
+- [**23**Star][4y] [C#] [olliencc/winbinaryaudit](https://github.com/olliencc/winbinaryaudit) GSAudit at Symantec, ExeAudit at RIM, RECX Binary Assurance for Windows at Recx etc. - core library now WinBinaryAudit
+- [**23**Star][2m] [rarecoil/pantagrule](https://github.com/rarecoil/pantagrule) hashcat rules generated from over 840 million compromised passwords
+- [**23**Star][4d] [Py] [bing0o/python-scripts](https://github.com/bing0o/python-scripts) some scripts for penetration testing
+- [**23**Star][2m] [PHP] [coenjacobs/wp-haveibeenpwned](https://github.com/coenjacobs/wp-haveibeenpwned) Checks if the password for each WordPress user account has been compromised via haveibeenpwned.com
+- [**23**Star][3m] [Visual Basic .NET] [henriksb/extensionspoofer](https://github.com/henriksb/extensionspoofer) Spoof file icons and extensions in Windows
+- [**23**Star][6y] [vtsingaras/qcom-mbn-ida-loader](https://github.com/vtsingaras/qcom-mbn-ida-loader) IDA loader plugin for Qualcomm Bootloader Stages
+- [**23**Star][5m] [Java] [openjavacard/openjavacard-ndef](https://github.com/OpenJavaCard/openjavacard-ndef) NDEF tag implementation for JavaCard
+- [**23**Star][3y] [Java] [ichukai/forwarder](https://github.com/ichukai/forwarder) 穿透内网的端口转发工具
+- [**23**Star][2y] [OpenEdge ABL] [praetorian-code/ctf-writeups](https://github.com/praetorian-code/ctf-writeups) Collection of Praetorian solutions to CTF challenges
+- [**23**Star][3y] [Py] [jofpin/backcookie](https://github.com/jofpin/backcookie) Small backdoor using cookie.
+- [**23**Star][4y] [bannsec/angr-windows](https://github.com/bannsec/angr-Windows) Windows builds for use with angr framework
+- [**23**Star][2y] [Ruby] [zidekmat/graphql_beautifier](https://github.com/zidekmat/graphql_beautifier) Burp Suite extension to help make Graphql request more readable
+- [**23**Star][5y] [Assembly] [zerosum0x0/slae64](https://github.com/zerosum0x0/slae64) x64 Linux Shellcode
+- [**23**Star][4y] [Py] [zedsec390/defcon23](https://github.com/zedsec390/defcon23)
+- [**23**Star][3y] [Py] [zachriggle/pwndbg](https://github.com/zachriggle/pwndbg) GDB插件,辅助漏洞开发和逆向
+- [**23**Star][2m] [xxpe3/clash_raspberrypi](https://github.com/xxpe3/clash_raspberrypi) Clash for ARMv6L
+- [**23**Star][4m] [C++] [xpn/rpcenum](https://github.com/xpn/rpcenum) An command-line RPC method enumerator, born out of RPCView's awesomeness
+- [**23**Star][5m] [Py] [xorpd/fcatalog_server](https://github.com/xorpd/fcatalog_server) Functions Catalog
+- [**23**Star][2y] [PHP] [xiaoxiaoleo/xiao-webshell](https://github.com/xiaoxiaoleo/xiao-webshell) a collection of webshell
+- [**23**Star][2y] [Visual Basic .NET] [xiaoxiaoleo/pentest-script](https://github.com/xiaoxiaoleo/pentest-script) Script for pentest
+- [**23**Star][7y] [C++] [wyyqyl/hidemodule](https://github.com/wyyqyl/hidemodule) The dll that can hide itself and then delete itselft.
+- [**23**Star][3m] [C] [ww9210/kernel4.20_bpf_lpe](https://github.com/ww9210/kernel4.20_bpf_lpe) exploit code for a bpf heap overflow vulnerability
+- [**23**Star][2y] [Py] [whitel1st/gp_hijack](https://github.com/whitel1st/gp_hijack) Group Policy Hijacking
+- [**23**Star][3y] [Py] [whaleshark-team/chromeheadlessinterface](https://github.com/whaleshark-team/chromeheadlessinterface)
+- [**23**Star][2y] [PHP] [weaverheavy/threat-intelligence-tradecraft](https://github.com/weaverheavy/threat-intelligence-tradecraft)
+- [**23**Star][2y] [C] [wanttobeno/wmifilter](https://github.com/wanttobeno/wmifilter) 驱动层拦截web访问源码
+- [**23**Star][12m] [C++] [wanttobeno/screenshot](https://github.com/wanttobeno/screenshot) 仿QQ截图,C++实现的截图软件Demo
+- [**23**Star][9m] [Perl] [vti/cpan-audit](https://github.com/vti/cpan-audit) Check CPAN modules for known security vulnerabilities
+- [**23**Star][2y] [C++] [verideth/repen](https://github.com/verideth/repen) Simple C8 disassembler
+- [**23**Star][1y] [JS] [veggiedefender/marveloptics_malware](https://github.com/veggiedefender/marveloptics_malware) Deobfuscated + reverse engineered javascript malware
+- [**23**Star][3m] [C#] [vchirikov/gotodnspy](https://github.com/vchirikov/gotodnspy) GoTo dnSpy from Visual Studio 2017
+- [**23**Star][3y] [Java] [vah13/burpcrlfplugin](https://github.com/vah13/burpcrlfplugin) Another plugin for CRLF vulnerability detection
+- [**23**Star][6m] [Swift] [universonic/shadowsocks-macos](https://github.com/universonic/shadowsocks-macos) Shadowsocks Client for Apple macOS
+- [**23**Star][3y] [Py] [tylabs/quicksand_tools](https://github.com/tylabs/quicksand_tools) API access to QuickSand.io
+- [**23**Star][4m] [C] [tumi8/zmap](https://github.com/tumi8/zmap) ZMapv6: Internet Scanner with IPv6 capabilities
+- [**23**Star][3y] [C#] [tum-i22/vot4cs](https://github.com/tum-i22/vot4cs) vot4cs:C#虚拟化混淆工具
+- [**23**Star][3y] [C] [true-systems/om5p-ac-v2-unlocker](https://github.com/true-systems/om5p-ac-v2-unlocker) Open Mesh OM5P-AC v2 Unlocker (U-Boot 1.1.4 based)
+- [**23**Star][10m] [C++] [trojancyborg/ida_jni_rename](https://github.com/trojancyborg/ida_jni_rename) IDA JNI clal rename
+- [**23**Star][2y] [HTML] [tothi/ctfs](https://github.com/tothi/ctfs) some example ctf writeups
+- [**23**Star][15d] [Shell] [torworld/fastrelay](https://github.com/torworld/fastrelay) Making it easier to run your own Tor Relay Node.
+- [**23**Star][2y] [Py] [tomrittervg/ct-tools](https://github.com/tomrittervg/ct-tools) Random tools to perform Certificate Transparency-related stuff
+- [**23**Star][2y] [Py] [tintinweb/unbox](https://github.com/tintinweb/unbox) a convenient one-click unpack and decompiler tool that wraps existing 3rd party applications like IDA Pro, JD-Cli, Dex2Src, and others to provide a convenient archiver liker command line interfaces to unpack and decompile various types of files
+- [**23**Star][2m] [Py] [theevilbit/exploits](https://github.com/theevilbit/exploits)
+- [**23**Star][1y] [Py] [the404hacking/xsscan](https://github.com/the404hacking/xsscan) XsSCan | Web Application XSS Scanner | Coded By Sir.4m1R [Mr.Hidden]
+- [**23**Star][2y] [Java] [techguy-bhushan/xssrequestfilters](https://github.com/techguy-bhushan/xssrequestfilters) Light weight library for Filter the Cross-site scripting in request For Spring Framwork / Spring-Boot, logic can be use for servlet based(without using spring framework) application
+- [**23**Star][3y] [JS] [techgaun/xss-payloads](https://github.com/techgaun/xss-payloads) Collection of XSS Payloads from various sources
+- [**23**Star][2y] [JS] [team-copper/captar](https://github.com/team-copper/captar) Augmented Reality Geolocation Capture-the-Flag Mobile Game Capstone Project
+- [**23**Star][3y] [Py] [te-k/malware-classification](https://github.com/te-k/malware-classification) Data and code for malware classification using machine learning (for fun, not production)
+- [**23**Star][4d] [Go] [tdh8316/investigo](https://github.com/tdh8316/investigo) The minimal Go implementation of Sherlock -
+- [**23**Star][5m] [HTML] [tarafans/collections](https://github.com/tarafans/collections) A medley of PoCs and exploits
+- [**23**Star][4y] [XSLT] [stixproject/stix-to-html](https://github.com/stixproject/stix-to-html) Convert STIX XML to HTML
+- [**23**Star][2y] [C++] [sshsshy/zerotrace](https://github.com/sshsshy/zerotrace)
+- [**23**Star][1y] [Shell] [sourcerer-io/sourcerer-blog](https://github.com/sourcerer-io/sourcerer-blog) Assets and examples for blog.sourcerer.io
+- [**23**Star][2y] [Py] [somu1795/shodan_raspi](https://github.com/somu1795/shodan_raspi) Hack Raspberry Pi(s) across the world !
+- [**23**Star][3y] [PS] [skons/ms17-0100](https://github.com/skons/ms17-0100) Mixing up CVE and MS like a pro
+- [**23**Star][2y] [Py] [simonuvarov/expdev](https://github.com/simonuvarov/expdev)
+- [**23**Star][4y] [Py] [shengqi158/weak_password_detect](https://github.com/shengqi158/weak_password_detect) 多线程探测弱密码程序
+- [**23**Star][4y] [Py] [shadowsocksfork/shadowsocksfork](https://github.com/shadowsocksfork/shadowsocksfork) A fork of shadowsocks 2.8.2
+- [**23**Star][7m] [Py] [seyptoo/7z-bruteforce](https://github.com/seyptoo/7z-bruteforce) This repository consists of bruteforce to a 7z file, and it can be very useful in the penetration tests
+- [**23**Star][4y] [PHP] [secwiki/exp](https://github.com/secwiki/exp) 收集各种各样的exp
+- [**23**Star][2m] [Shell] [samuelhbne/vpn-launchpad](https://github.com/samuelhbne/vpn-launchpad) Builds Shadowsocks VPN server on AWS EC2 with QR code support. Works on Ubuntu, OSX and Debian variants including Raspbian.
+- [**23**Star][2y] [Py] [s3xy/cve-2017-10271](https://github.com/s3xy/cve-2017-10271) Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful …
+- [**23**Star][4y] [JS] [rwestergren/simple-hash-xss](https://github.com/rwestergren/simple-hash-xss)
+- [**23**Star][1m] [JS] [roemhildtg/spectre-canjs](https://github.com/roemhildtg/spectre-canjs) A WIP data administration component library built on the Spectre.css framework enabled with CanJS
+- [**23**Star][2y] [PHP] [riyazwalikar/sql-injection-training-app](https://github.com/riyazwalikar/sql-injection-training-app) A simple PHP application that can be used to demonstrate and train participants to detect and exploit SQL Injection vulnerabilities.
+- [**23**Star][3y] [Py] [remnux/distro](https://github.com/remnux/distro) This repository contains supplementary files for building and using the REMnux Linux distribution. See
+- [**23**Star][1y] [Go] [releasel0ck/blind-sql-injector](https://github.com/releasel0ck/blind-sql-injector) 手工盲注辅助注入工具
+- [**23**Star][2y] [C] [rednaga/keystore-shim](https://github.com/rednaga/keystore-shim) Shim to grab keystore backed data
+- [**23**Star][3y] [Go] [redhat-cip/skydive](https://github.com/redhat-cip/skydive) An open source real-time network topology and protocols analyzer
+- [**23**Star][4m] [Py] [radare/diaphora](https://github.com/radare/diaphora) Diaphora, a Free and Open Source program diffing tool
+- [**23**Star][11m] [PHP] [r0nen/ctf](https://github.com/r0nen/ctf) CTF Writeups
+- [**23**Star][2y] [ptresearch/intelme-crypto](https://github.com/ptresearch/intelme-crypto)
+- [**23**Star][2y] [proteas/afl-swift](https://github.com/proteas/afl-swift) use afl to fuzz swift program
+- [**23**Star][11m] [Py] [privcount/privcount](https://github.com/privcount/privcount) Privacy-preserving Tor statistics aggregation tool that implements the secret-sharing variant of the PrivEx algorithm.
+- [**23**Star][2y] [Py] [pieterbork/blueborne](https://github.com/pieterbork/blueborne) Scan/Exploit Blueborne CVE-2017-0785
+- [**23**Star][1y] [Py] [pielco11/t2b-framework](https://github.com/pielco11/t2b-framework) Cross-Platform Post Exploitation Toolkit
+- [**23**Star][3y] [Py] [pfalcon/ida-xtensa2](https://github.com/pfalcon/ida-xtensa2) IDAPython plugin for Tensilica Xtensa (as seen in ESP8266), version 2
+- [**23**Star][2m] [Py] [paloaltonetworks/autofocus-lenz](https://github.com/paloaltonetworks/autofocus-lenz) A command line utility to aid in using autofocus for IR and research
+- [**23**Star][12m] [C#] [padovah4ck/redsharp](https://github.com/padovah4ck/redsharp) Penetration Test / Read Team - C# tools repository
+- [**23**Star][2y] [C] [p4p1/p4p1](https://github.com/p4p1/p4p1) Reverse shell for remote administration
+- [**23**Star][3m] [Py] [ozzi-/tld_scanner](https://github.com/ozzi-/tld_scanner) Scan all possible TLD's for a given domain name
+- [**23**Star][1y] [Assembly] [osandamalith/pesecinfo](https://github.com/osandamalith/pesecinfo) A simple tool to view important DLL Characteristics and change DEP and ASLR
+- [**23**Star][11m] [Shell] [optixal/dotfiles](https://github.com/optixal/dotfiles)
+- [**23**Star][3y] [Shell] [opensecurityresearch/ciphertest](https://github.com/opensecurityresearch/ciphertest) A better SSL cipher checker using gnutls
+- [**23**Star][1y] [Go] [olihough86/stinkyphish](https://github.com/olihough86/stinkyphish) Monitor Certificate Transparency Logs For Phishing Domains
+- [**23**Star][11d] [Py] [nullpxl/nullctf](https://github.com/nullpxl/nullctf) A Discord bot that provides ctf tools for collaboration in Discord servers!
+- [**23**Star][7y] [Ruby] [nuke99/sqlnuke](https://github.com/nuke99/sqlnuke) SQLNuke | Fast Performing MYSQL Injection load_file() Fuzzer
+- [**23**Star][2y] [C] [nucypher/nucypher-pre-python](https://github.com/nucypher/nucypher-pre-python) nucypher-pre-python:Python 实现的“代理重加密(Proxy Re-Encryption)”算法
+- [**23**Star][4y] [Py] [nitscan/inlinux](https://github.com/nitscan/inlinux) 内网渗透信息收集脚本
+- [**23**Star][1y] [PS] [netspi/sqlc2](https://github.com/netspi/sqlc2) SQLC2 is a PowerShell script for deploying and managing a command and control system that uses SQL Server as both the control server and the agent.
+- [**23**Star][6y] [Py] [nccgroup/xcavator](https://github.com/nccgroup/xcavator) A network data locater using credentials obtained during penetration tests
+- [**23**Star][2y] [C++] [nccgroup/bleboy](https://github.com/nccgroup/bleboy) BLEBoy is a training tool to teach users about BLE security by providing a single BLE peripheral that can be used to experiment with each BLE pairing method and demonstrates GATT security concepts.
+- [**23**Star][12m] [C] [nardholio/cve-2016-0728](https://github.com/nardholio/cve-2016-0728)
+- [**23**Star][2m] [Pascal] [nannib/imm2virtual](https://github.com/nannib/imm2virtual) This is a GUI (for Windows 64 bit) for a procedure to virtualize your EWF(E01), DD (raw), AFF disk image file without converting it, directly with VirtualBox, forensically proof.
+- [**23**Star][2y] [Shell] [mricon/tor-relay-bootstrap-rpi](https://github.com/mricon/tor-relay-bootstrap-rpi) Script to bootstrap a Debian server to be a set-and-forget Tor relay
+- [**23**Star][8m] [PHP] [mrahmadt/smartgw](https://github.com/mrahmadt/smartgw) Domain based VPN Gateway/Proxy for all devices
+- [**23**Star][3y] [HTML] [mortenschenk/bypassing_cfg_seh](https://github.com/mortenschenk/bypassing_cfg_seh) Using SEH to bypass CFG
+- [**23**Star][1y] [C] [moccajoghurt/drvmap_secure](https://github.com/moccajoghurt/drvmap_secure)
+- [**23**Star][19d] [C] [microsoft/modsecurity](https://github.com/microsoft/modsecurity) ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analys…
+- [**23**Star][3y] [Py] [merkjinx/saddam-plus-plus](https://github.com/merkjinx/saddam-plus-plus) open source DDoS Amplification Tool with scanners.
+- [**23**Star][5m] [meitar/awesome-malware](https://github.com/meitar/awesome-malware)
+- [**23**Star][8d] [Shell] [meisterp/torbrowser-overlay](https://github.com/meisterp/torbrowser-overlay) Gentoo overlay for Tor Browser related ebuilds
+- [**23**Star][6m] [JS] [mcibique/express-security](https://github.com/mcibique/express-security) nodejs + express security and performance boilerplate.
+- [**23**Star][5m] [C++] [mbrengel/memscrimper](https://github.com/mbrengel/memscrimper) Code for the DIMVA 2018 paper: "MemScrimper: Time- and Space-Efficient Storage of Malware Sandbox Memory Dumps"
+- [**23**Star][3y] [C++] [matviy/leaguereplayhook](https://github.com/matviy/leaguereplayhook) Library for interacting with the League of Legends Spectator/Replay Client
+- [**23**Star][2y] [Shell] [mattcarothers/mhn-core-docker](https://github.com/mattcarothers/mhn-core-docker) Core elements of the Modern Honey Network implemented in Docker
+- [**23**Star][3y] [Py] [markusteufelberger/afl-ddmin-mod](https://github.com/markusteufelberger/afl-ddmin-mod) Test case minimizer for afl-fuzz
+- [**23**Star][4y] [C] [marcograss/cve-2014-4323](https://github.com/marcograss/cve-2014-4323) cve-2014-4323 poc
+- [**23**Star][6m] [C] [maikel233/x-hook-for-csgo](https://github.com/maikel233/x-hook-for-csgo) Aimtux for Windows.
+- [**23**Star][4y] [PHP] [lxj616/dvwa-wooyun](https://github.com/lxj616/dvwa-wooyun) It is a DVWA with some plugins based on real wooyun bug reports
+- [**23**Star][1y] [C] [lucascouto/krackattack-all-zero-tk-key](https://github.com/lucascouto/krackattack-all-zero-tk-key) This code has base on a code made by Mathy Vanhoef (
+- [**23**Star][1y] [C] [logicaltrust/minerva_lib](https://github.com/logicaltrust/minerva_lib) polish fuzzy lop - fuzzer for libraries/APIs/*
+- [**23**Star][7y] [C] [liblit/murphy](https://github.com/liblit/murphy) language-agnostic tool that helps developers discover and isolate run-time failures in their programs by simulating difficult-to-reproduce but completely-legitimate interactions between the application and the kernel
+- [**23**Star][5y] [C++] [liamkarlmitchell/signaturescanner](https://github.com/liamkarlmitchell/signaturescanner) I wanted a nicer signature scanner that worked the way I wanted. Include however you want in your own DLL project.
+- [**23**Star][3m] [Go] [leoid/mysql-injection-exfiltration-optimization](https://github.com/leoid/mysql-injection-exfiltration-optimization) MySQL Injection Exfoliation Optimization
+- [**23**Star][7y] [Py] [lbragues/pasteminer](https://github.com/lbragues/pasteminer) Find useful stuff in pastebin
+- [**23**Star][4y] [Py] [laudarch/shellsploit](https://github.com/laudarch/shellsploit) Mutation Of Vıruses
+- [**23**Star][2d] [kylebing/sslist](https://github.com/kylebing/sslist) 优化访问速度的小型 gfw (Great Fire Wall) 规则列表 gfwlist
+- [**23**Star][3y] [Py] [kx499/ostip](https://github.com/kx499/ostip)
+- [**23**Star][3y] [C++] [kuqadk3/winrarer-ransomware](https://github.com/kuqadk3/winrarer-ransomware)
+- [**23**Star][3m] [Assembly] [mwkmwkmwk/cpuadventure](https://github.com/mwkmwkmwk/cpuadventure) CPU Adventure task from Dragon CTF 2019 teaser
+- [**23**Star][4y] [JS] [kolanich/cleanunwantedupdates](https://github.com/kolanich/cleanunwantedupdates) A set of scripts to detect updates of Microsoft (TM) Windows (TM) OS which harm users' privacy and uninstall them
+- [**23**Star][2y] [C] [kelvinhack/screencapattack](https://github.com/kelvinhack/screencapattack)
+- [**23**Star][6y] [C] [jyang772/hideprocesshookmdl](https://github.com/jyang772/hideprocesshookmdl) A simple rootkit to hide a process
+- [**23**Star][7m] [TS] [jvilk/mitmproxy-node](https://github.com/jvilk/mitmproxy-node) A bridge between Python's mitmproxy and Node.JS programs. Rewrite network requests using Node.JS!
+- [**23**Star][6m] [C] [junxzm1990/afl-pt](https://github.com/junxzm1990/afl-pt)
+- [**23**Star][2m] [Py] [jplesperance/redis-sniffer](https://github.com/jplesperance/redis-sniffer) A Redis event sniffer and logging utility.
+- [**23**Star][7m] [Py] [jpiechowka/zip-shotgun](https://github.com/jpiechowka/zip-shotgun) Utility script to test zip file upload functionality (and possible extraction of zip files) for vulnerabilities (aka Zip Slip)
+- [**23**Star][4y] [Shell] [josefkarasek/docker101](https://github.com/josefkarasek/docker101) Docker for absolute beginners. Learn how to get and run Docker containers. Created for the Brno Docker meetup group.
+- [**23**Star][4m] [Py] [jonathansalwan/x-tunnel-opaque-predicates](https://github.com/jonathansalwan/x-tunnel-opaque-predicates) IDA+Triton plugin in order to extract opaque predicates using a Forward-Bounded DSE. Example with X-Tunnel.
+- [**23**Star][2m] [jmscory/security-tool-chest](https://github.com/jmscory/security-tool-chest) A list of useful security and obvescation tools useful for red and blue teaming activities. A list made possible by the provided references.
+- [**23**Star][4y] [PHP] [jgamblin/nmap-for-slack](https://github.com/jgamblin/nmap-for-slack) Custom slash command to do a basic nmap scan from within Slack
+- [**23**Star][2y] [JS] [jamesacampbell/elector](https://github.com/jamesacampbell/elector) TOR BROWSER IN ELECTRON
+- [**23**Star][3y] [Java] [jackuhan/loginhook](https://github.com/jackuhan/loginhook) xposed的hook案例
+- [**23**Star][1y] [Py] [j40903272/malconv-keras](https://github.com/j40903272/malconv-keras) This is the implementation of MalConv proposed in [Malware Detection by Eating a Whole EXE](
+- [**23**Star][12m] [ObjC] [rpwnage/warri0r](https://github.com/RPwnage/Warri0r) ios 12 Sandbox escape POC
+- [**23**Star][10d] [PHP] [ip2location/ip2proxy-php](https://github.com/ip2location/ip2proxy-php) PHP module for IP2Proxy database lookup. It allows user to query an IP address if it was being used as open proxy, web proxy, VPN anonymizer and TOR exits.
+- [**23**Star][1y] [C] [ioactive/kmdf_re](https://github.com/ioactive/kmdf_re) Helper idapython code for reversing kmdf drivers
+- [**23**Star][3y] [C++] [insomnihack/teaser-2017](https://github.com/insomnihack/teaser-2017)
+- [**23**Star][5y] [Ruby] [insomnihack/insomnihack-2015](https://github.com/insomnihack/insomnihack-2015) Repository for Insomni'hack finals 2015
+- [**23**Star][6y] [infosecsmith/mimikatzlite](https://github.com/infosecsmith/mimikatzlite) Minimal MimiKatz One Executable... All credits to Benjamin Delpy
+- [**23**Star][4y] [Py] [immunio/immunio-xss-fuzzer](https://github.com/immunio/immunio-xss-fuzzer) Immunio's XSS Fuzzer tool
+- [**23**Star][10m] [Nim] [imgp3dev/drmitm](https://github.com/imgp3dev/drmitm) DrMITM is a program designed to globally log all traffic of a website.
+- [**23**Star][2y] [C] [ieeeicsg/ieee_taggant_system](https://github.com/ieeeicsg/ieee_taggant_system) Taggant System developed by the Malware Working Group of ICSG (Industry Connections Security Group) under the umbrella of IEEE
+- [**23**Star][1y] [Java] [realbearcat/jackson-cve-2017-17485](https://github.com/RealBearcat/Jackson-CVE-2017-17485) Jackson 反序列化
+- [**23**Star][9m] [Py] [hpd0ger/supertags](https://github.com/hpd0ger/supertags) 一个Burpsuite插件,用于检测隐藏的XSS
+- [**23**Star][7m] [Py] [horusteknoloji/tr-phishinglist](https://github.com/horusteknoloji/tr-phishinglist) Türkiye'ye Yönelik Zararlı Bağlantı Erişim Engelleme Listesi
+- [**23**Star][3y] [Go] [hgfischer/domainerator](https://github.com/hgfischer/domainerator) Simple application written in Go that combines two wordlists and a list of TLDs to form domain names and check if they are already registered.
+- [**23**Star][3y] [C] [hedgeh/sewindows](https://github.com/hedgeh/sewindows) 在Windows上建立一个开源的强制访问控制框架及SDK。使Windows平台的应用开发者,可以不用关心操作系统底层技术,只用进行简单的SDK调用或配置就可以保护自己的应用程序。
+- [**23**Star][1y] [C] [hardenedbsd/secadm](https://github.com/hardenedbsd/secadm) HardenedBSD Security Administration
+- [**23**Star][3y] [hani1990/phith0n-mind-map](https://github.com/hani1990/phith0n-mind-map)
+- [**23**Star][3y] [C] [guidovranken/openssl-x509-vulnerabilities](https://github.com/guidovranken/openssl-x509-vulnerabilities)
+- [**23**Star][2y] [PHP] [graniet/physics-command](https://github.com/graniet/physics-command) 硬件系统分析平台(例如:树莓派3B)
+- [**23**Star][2d] [C++] [grammatech/gtirb-pprinter](https://github.com/grammatech/gtirb-pprinter) Pretty printer from GTIRB to assembly code
+- [**23**Star][7m] [JS] [gnuhpc/kibana-multitenant-proxy](https://github.com/gnuhpc/kibana-multitenant-proxy) A proxy behind nginx while before kibana (4.x, 5.x) to provide data isolation for different users
+- [**23**Star][3y] [Py] [german-namestnikov/unhidens](https://github.com/german-namestnikov/unhidens) Small DNS Recon utility, allows you to obtain some useful info about NS-servers placed behind relays, firewalls, etc.
+- [**23**Star][10m] [Go] [gen0cide/hasherbasher](https://github.com/gen0cide/hasherbasher) SQL injection via bruteforced MD5 hash reflection of random strings
+- [**23**Star][2y] [Jupyter Notebook] [geekonlinecode/malware-machine-learning](https://github.com/geekonlinecode/malware-machine-learning) Malware Machine Learning
+- [**23**Star][4y] [Rust] [gcarq/arp-spoof](https://github.com/gcarq/arp-spoof) Minimal ARP-Spoofing tool written in Rust
+- [**23**Star][1y] [ActionScript] [ga1ois/recon-2018-montreal](https://github.com/ga1ois/recon-2018-montreal)
+- [**23**Star][2y] [PHP] [freak3dot/wp-smart-honeypot](https://github.com/freak3dot/wp-smart-honeypot) Wordpress plugin to reduce comment spam with a smarter honeypot.
+- [**23**Star][6y] [Py] [feliam/cve-2013-2729](https://github.com/feliam/cve-2013-2729)
+- [**23**Star][1y] [Py] [farisv/appledos](https://github.com/farisv/appledos) Messing Apple devices on the network with CVE-2018-4407 (heap overflow in bad packet handling)
+- [**23**Star][5y] [exp-sky/hitcon-2014-ie-11-0day-windows-8.1-exploit](https://github.com/exp-sky/hitcon-2014-ie-11-0day-windows-8.1-exploit) HitCon 2014 : IE 11 0day & Windows 8.1 Exploit
+- [**23**Star][1y] [C++] [ewhitehats/kovtertools](https://github.com/ewhitehats/kovtertools)
+- [**23**Star][4y] [HTML] [etherpot/contract](https://github.com/etherpot/contract)
+- [**23**Star][7m] [C] [enfuzz/enfuzz](https://github.com/enfuzz/enfuzz)
+- [**23**Star][2y] [PS] [elevenpaths/usbhiddennetworks](https://github.com/elevenpaths/usbhiddennetworks)
+- [**23**Star][4m] [Py] [elespike/burp-cph](https://github.com/elespike/burp-cph) Custom Parameter Handler extension for Burp Suite.
+- [**23**Star][4m] [PS] [dpaulson45/exchangelogcollector](https://github.com/dpaulson45/exchangelogcollector) Exchange Log Collection Script
+- [**23**Star][2y] [C++] [dougallj/dj_ida_plugins](https://github.com/dougallj/dj_ida_plugins) Plugins for IDA Pro and Hex-Rays
+- [**23**Star][2m] [C++] [dns-oarc/dnsmeter](https://github.com/dns-oarc/dnsmeter) Tool for testing performance of nameservers
+- [**23**Star][8m] [C] [djhohnstein/wlbsctrl_poc](https://github.com/djhohnstein/wlbsctrl_poc) C++ POC code for the wlbsctrl.dll hijack on IKEEXT
+- [**23**Star][1y] [Java] [distrinet/xsr-framework](https://github.com/distrinet/xsr-framework) A framework for automatic testing of third-party request and cookie policy implementations
+- [**23**Star][2m] [JS] [devwerks/xss-cheatsheet](https://github.com/devwerks/xss-cheatsheet) XSS Cheatsheet - A collection of XSS attack vectors
+- [**23**Star][3y] [Py] [devttys0/idascript](https://github.com/devttys0/idascript) a wrapper around IDA Pro that makes it easy to automate the execution of IDA scripts against target files from the command line
+- [**23**Star][1y] [Ruby] [dev-sec/chef-mysql-hardening](https://github.com/dev-sec/chef-mysql-hardening) This chef cookbook provides security configuration for mysql.
+- [**23**Star][1y] [Ruby] [dev-sec/chef-apache-hardening](https://github.com/dev-sec/chef-apache-hardening)
+- [**23**Star][2y] [Vue] [deturium/school-bus](https://github.com/deturium/school-bus) 浙江大学AAA战队开放 CTF 练习平台新前端
+- [**23**Star][1y] [c++] [dax89/r2gui](https://github.com/dax89/r2gui) Unofficial Qt5 frontend for Radare2
+- [**23**Star][3y] [C] [davidbuchanan314/cowroot](https://github.com/davidbuchanan314/cowroot) Universal Android root tool based on CVE-2016-5195. Watch this space.
+- [**23**Star][3y] [C] [david-reguera-garcia-dreg/phook](https://github.com/david-reguera-garcia-dreg/phook) Full DLL Hooking, phrack 65
+- [**23**Star][11m] [dariubs/awesome-proxy](https://github.com/dariubs/awesome-proxy) A collaborative list of awesome proxy servers and resources. Feel free to contribute!
+- [**23**Star][1y] [C#] [damonmohammadbagher/nativepayload_ip6dns](https://github.com/damonmohammadbagher/nativepayload_ip6dns) C# code for Transferring Backdoor Payloads by IPv6 Address (AAAA) records and DNS Traffic also Bypassing Anti-viruses
+- [**23**Star][1y] [Py] [damian89/commoncrawlparser](https://github.com/damian89/commoncrawlparser) Simple multi threaded tool to extract domain related data from commoncrawl.org
+- [**23**Star][3y] [Py] [d4vinci/anti_killer](https://github.com/d4vinci/anti_killer) Kill Any Antivirus Using Python For Windows Users .
+- [**23**Star][2m] [Py] [cyberheartmi9/cve-2017-8295](https://github.com/cyberheartmi9/cve-2017-8295)
+- [**23**Star][23d] [C++] [curl/curl-fuzzer](https://github.com/curl/curl-fuzzer) Quality assurance testing for the curl project
+- [**23**Star][5y] [C] [ctu-iig/802.11p-linux](https://github.com/ctu-iig/802.11p-linux) mac80211/wireless next tree
+- [**23**Star][7y] [C++] [cr4sh/ida-ubigraph](https://github.com/cr4sh/ida-ubigraph) IDA Pro plug-in and tools for displaying 3D graphs of procedures using UbiGraph
+- [**23**Star][7d] [Py] [costa-group/ethir](https://github.com/costa-group/ethir) A framework for high-level Analysis of Ethereum Bytecode
+- [**23**Star][1m] [Py] [cornerpirate/cve-offline](https://github.com/cornerpirate/cve-offline) An easy to grep dump of the NVD database showing only; CVE-ID, CVSS Risk Score, and Summary.
+- [**23**Star][6y] [commonexploits/weape](https://github.com/commonexploits/weape) Weape-Wireless-EAP-Extractor
+- [**23**Star][11m] [Py] [coldshell/malware-scripts](https://github.com/coldshell/malware-scripts)
+- [**23**Star][11m] [coldev/coldevprolayer](https://github.com/coldev/coldevprolayer) Protect your PHP code with obfuscation and encryption
+- [**23**Star][3y] [C] [cn33liz/hsevd-arbitraryoverwrite](https://github.com/cn33liz/hsevd-arbitraryoverwrite) HackSys Extreme Vulnerable Driver - ArbitraryOverwrite Exploit
+- [**23**Star][5y] [Ruby] [claudijd/bnat](https://github.com/claudijd/bnat) "Broken NAT" - A suite of tools focused on detecting and interacting with publicly available BNAT scenerios
+- [**23**Star][3y] [Py] [chengable/safe_code](https://github.com/chengable/safe_code) absolute safe code
+- [**23**Star][5y] [C++] [certcc/dranzer](https://github.com/certcc/dranzer) Dranzer is a tool that enables users to examine effective techniques for fuzz testing ActiveX controls
+- [**23**Star][3y] [JS] [calmh/yardstick](https://github.com/calmh/yardstick) [UNMAINTAINED] Javascript code metrics
+- [**23**Star][2y] [bxlcity/malware](https://github.com/bxlcity/malware)
+- [**23**Star][1y] [Py] [buckhacker/subdomaintakeovertools](https://github.com/buckhacker/subdomaintakeovertools)
+- [**23**Star][2y] [Py] [brunneis/scihub-downloader](https://github.com/brunneis/scihub-downloader) Sci-Hub PDF downloader through Tor Network (Docker image)
+- [**23**Star][4y] [brucecio9999/cryptowire-advanced-autoit-ransomware-project](https://github.com/brucecio9999/cryptowire-advanced-autoit-ransomware-project) This is a advanced ransomware example made in AutoIt
+- [**23**Star][6m] [Jupyter Notebook] [briansrebrenik/final_project](https://github.com/briansrebrenik/final_project) Using Twitter Ego Network Analysis to Detect Sources of Fake News
+- [**23**Star][3m] [Py] [bitthebyte/domainker](https://github.com/bitthebyte/domainker) BugBounty Tool
+- [**23**Star][5y] [C++] [behzad-a/dytan](https://github.com/behzad-a/dytan) Dytan Taint Analysis Framework on Linux 64-bit
+- [**23**Star][2y] [C++] [balika011/belf](https://github.com/balika011/belf) Balika011's PlayStation 4 ELF loader for IDA Pro 7.0/7.1
+- [**23**Star][7m] [TeX] [b-g-goodell/research-lab](https://github.com/b-g-goodell/research-lab) A general repo for Monero Research Lab work in progress and completed work
+- [**23**Star][4y] [Py] [az0ne/autoexp_plc](https://github.com/az0ne/autoexp_plc) omron工控设备漏洞批量验证
+- [**23**Star][2y] [JS] [auth0-blog/rottentomatoes-clone](https://github.com/auth0-blog/rottentomatoes-clone)
+- [**23**Star][2y] [Py] [aur3lius-dev/spydir](https://github.com/aur3lius-dev/spydir) BurpSuite extension to assist with Automated Forced Browsing/Endpoint Enumeration
+- [**23**Star][3y] [C] [armedpot/honeytrap](https://github.com/armedpot/honeytrap) Last download from git://git.carnivore.it/honeytrap.git of Honytrap by Tillmann Werner
+- [**23**Star][2m] [C] [arizvisa/ndk](https://github.com/arizvisa/ndk) A local copy of Alex Ionescu's seemingly abandoned native-nt-toolkit project containing knowledge inherited from the ReactOS project.
+- [**23**Star][2y] [C++] [apriorit/svchostdemo](https://github.com/apriorit/svchostdemo) Demo service that runs in svchost.exe
+- [**23**Star][3y] [ObjC] [apestalk/debugwindow](https://github.com/apestalk/debugwindow) 一个在真机上测试时方便查看输出日志的小工具。(A debug tool which helps you view the console logs on the device when you test you APP.)
+- [**23**Star][7m] [Py] [antisomnus/sniffer](https://github.com/antisomnus/sniffer) Simple sniffer using scapy and PyQt5 on Windows 10
+- [**23**Star][12m] [Py] [anotherik/rogueap-detector](https://github.com/anotherik/rogueap-detector) Rogue Access Point Detector
+- [**23**Star][6m] [Py] [anhkgg/get52pojietools](https://github.com/anhkgg/get52pojietools) 一个批量下载52pojie爱盘中资源的小脚本。
+- [**23**Star][5m] [Py] [alexander-hanel/hansel](https://github.com/alexander-hanel/hansel) a simple but flexible search for IDA
+- [**23**Star][13d] [Py] [aff4/pyaff4](https://github.com/aff4/pyaff4) The Python implementation of the AFF4 standard.
+- [**23**Star][2y] [abhishekkr/eden_guide_to_hacking](https://github.com/abhishekkr/eden_guide_to_hacking) its quick to read, broadway guide to HACKING ~ for anyone to have grasp of important concepts and skills which makes up the knowledge base of a hacker
+- [**23**Star][3y] [C] [93aef0ce4dd141ece6f5/packer](https://github.com/93aef0ce4dd141ece6f5/packer) PoC executable packer using resources
+- [**23**Star][3y] [PHP] [3xp10it/xwebshell](https://github.com/3xp10it/xwebshell) 免杀webshell
+- [**23**Star][1y] [JS] [0xsobky/xssbuster](https://github.com/0xsobky/xssbuster) XSSB is a proactive DOM sanitizer, defending against client-side injection attacks!
+- [**23**Star][2y] [Py] [0x024/ms](https://github.com/0x024/ms) 我的monitor system--智能家庭监控系统
+- [**22**Star][2y] [C#] [xadamxk/usb-rubber-ducky-app](https://github.com/xadamxk/usb-rubber-ducky-app)
+- [**22**Star][2d] [TS] [cedx/reverse-proxy.js](https://github.com/cedx/reverse-proxy.js) Personal reverse proxy server supporting WebSockets.
+- [**22**Star][] [Py] [wisepythagoras/website-fingerprinting](https://github.com/wisepythagoras/website-fingerprinting) Deanonymizing Tor or VPN users with website fingerprinting and machine learning.
+- [**22**Star][6d] [Go] [hahwul/websocket-connection-smuggler](https://github.com/hahwul/websocket-connection-smuggler) websocket-connection-smuggler
+- [**22**Star][29d] [Java] [snail007/goproxy-ss-plugin-android](https://github.com/snail007/goproxy-ss-plugin-android) goproxy安卓全局代理,ss goproxy安卓插件, goproxy :
+- [**22**Star][21d] [Py] [k8gege/pyladon](https://github.com/k8gege/pyladon) Ladon NetScan For Python (PortScan/OnlinePC/VulScan/Struts2/Weblogic/Exploit/GetShell/MS17010)
+- [**22**Star][4y] [Py] [epsylon/anontwi](https://github.com/epsylon/anontwi) Anontwi is a tool for OAuth2 applications (such as: GNUSocial, Twitter) that provides different layers of encryption, privacy methods and proxy features.
+- [**22**Star][2y] [C] [nsacyber/driver-collider](https://github.com/nsacyber/driver-collider) Blocks drivers from loading by using a name collision technique. #nsacyber
+- [**22**Star][4y] [C] [shadowsocks/openssl-android](https://github.com/shadowsocks/openssl-android) A fork of OpenSSL for shadowsocks-android
+- [**22**Star][9m] [CSS] [ytisf/apate](https://github.com/ytisf/apate) Your Friendly Neighbourhood Honeypot Maker and Manager
+- [**22**Star][3y] [Py] [dxa4481/mimikittenz4linux](https://github.com/dxa4481/mimikittenz4linux) Steals cleartext passwords from webservices, by reading the memory of browsers
+- [**22**Star][2y] [Py] [d35m0nd142/joomla-components-exploits-auto-updating-scanner](https://github.com/d35m0nd142/joomla-components-exploits-auto-updating-scanner) Auto Updater Joomla Components and Exploits Scanner
+- [**22**Star][2m] [JS] [xyntax/xctf-2019-tfboys](https://github.com/xyntax/xctf-2019-tfboys) source code of XCTF 2019 Final web task "tfboys"
+- [**22**Star][2y] [Go] [nachowski/warpwallet_cracker](https://github.com/nachowski/warpwallet_cracker) A brute-force cracker in Go for the WarpWallet Challenge 2
+- [**22**Star][10d] [learnteachcode/code-coffee-compendium](https://github.com/learnteachcode/code-coffee-compendium) curated resource compendium, maintained by the Baldwin Park code & coffee study group
+- [**22**Star][1m] [Py] [5h4d0wb0y/socialbrute](https://github.com/5h4d0wb0y/socialbrute) It attempts to crack social networks using a brute force dictionary attack.
+- [**22**Star][29d] [Py] [torpyorg/torpy](https://github.com/torpyorg/torpy) Pure python Tor client implementation of the Tor protocol
+- [**22**Star][5d] [Ruby] [mitre-cyber-academy/ctf-scoreboard](https://github.com/mitre-cyber-academy/ctf-scoreboard) Repository for the MITRE Capture the Flag scoreboard.
+- [**22**Star][6m] [Batchfile] [dylanbai8/c2ray](https://github.com/dylanbai8/c2ray) C2ray 一款windows下的极简 V2ray 客户端
+- [**22**Star][1m] [Go] [tismayil/rsdl](https://github.com/tismayil/rsdl) Subdomain Scan With Ping Method.
+- [**22**Star][3m] [C] [adde88/hostapd-mana-openwrt](https://github.com/adde88/hostapd-mana-openwrt) hostapd-mana - build-files, and installation-files for OpenWRT
+- [**22**Star][5y] [C] [andyvand/atherosromkit](https://github.com/andyvand/atherosromkit) Atheros ROM modding and recovery kit
+- [**22**Star][7y] [brycethomas/liber80211](https://github.com/brycethomas/liber80211) 802.11 monitor mode for Android without root.
+- [**22**Star][1m] [lbherrera/writeups](https://github.com/lbherrera/writeups)
+- [**22**Star][2m] [Dockerfile] [kizzx2/docker-openvpn-client-socks](https://github.com/kizzx2/docker-openvpn-client-socks) Expose an OpenVPN tunnel as a SOCKS proxy
+- [**22**Star][9m] [Py] [geekscrapy/bingraph](https://github.com/geekscrapy/bingraph) Simple tool to graph files for quick analysis
+- [**22**Star][3m] [Go] [geek1011/easy-novnc](https://github.com/geek1011/easy-novnc) Run a noVNC instance, web UI, and multi-host proxy with a single binary.
+- [**22**Star][3m] [Py] [circl/forensic-tools](https://github.com/circl/forensic-tools) CIRCL system forensic tools or a jumble of tools to support forensic
+- [**22**Star][2m] [Py] [adriangranados/wifiexplorer-sensor](https://github.com/adriangranados/wifiexplorer-sensor) Enables remote scanning in WiFi Explorer Pro
+- [**22**Star][6m] [JS] [rndinfosecguy/vulture](https://github.com/rndinfosecguy/vulture) WhatsApp Online Tracker
+- [**22**Star][3y] [JS] [yuiitsu/unproxy](https://github.com/yuiitsu/unproxy) chrome代理扩展
+- [**22**Star][14d] [Py] [penetrate2hack/itwsv](https://github.com/penetrate2hack/itwsv) ITWSV- Integrated Tool for Web Security Vulnerability
+- [**22**Star][3m] [C++] [legendl3n/smarthooker](https://github.com/legendl3n/smarthooker) The smartest hooking library.
+- [**22**Star][1m] [C#] [lowleveldesign/concerto](https://github.com/lowleveldesign/concerto) A simple tool to create TLS certificates for development purposes.
+- [**22**Star][3d] [Shell] [mzfr/hackthebox-writeups](https://github.com/mzfr/HackTheBox-writeups) Writeups for all the HTB machines I have done
+- [**22**Star][2m] [PHP] [marcocesarato/php-aio-security](https://github.com/marcocesarato/PHP-AIO-Security) The objective of this class is offer an automatic system of protection for developers's projects and simplify some security operations as the check of CSRF or XSS all in a simple class. Infact you could just call the main method to have better security yet without too much complicated operations.
+- [**22**Star][3y] [C] [jianpingzju/hypro](https://github.com/jianpingzju/Hypro) VMI on BitVisor to detect hidden rootkits.
+- [**22**Star][3m] [Py] [avast/retdec-regression-tests-framework](https://github.com/avast/retdec-regression-tests-framework) A framework for writing and running regression tests for RetDec and related tools.
+- [**22**Star][4y] [TS] [auth0-blog/ionic2-auth](https://github.com/auth0-blog/ionic2-auth)
+- [**22**Star][2y] [PHP] [vysecurity/basicauth](https://github.com/vysecurity/basicAuth) Basic Auth Phish page
+- [**22**Star][1y] [Go] [zxsecurity/glugger](https://github.com/zxsecurity/glugger) The fastest (and least featureful) DNS bruteforcer in the South
+- [**22**Star][2y] [Py] [zigzag2050/mzphp2-deobfuscator](https://github.com/zigzag2050/mzphp2-deobfuscator) A de-obfuscate tool for code generated by mzphp2. 用于解混淆mzphp2加密的php文件的工具。
+- [**22**Star][8m] [C++] [zhutoulala/vulnscan](https://github.com/zhutoulala/vulnscan) A static binary vulnerability scanner
+- [**22**Star][2y] [C#] [zerokilo/directedgraphswv](https://github.com/zerokilo/directedgraphswv) Directed Graph Editor and Library, also XEX decompiler 3
+- [**22**Star][6y] [Py] [zachhuff386/dashcam](https://github.com/zachhuff386/dashcam) Raspberry Pi/BeagleBone Black dashcam
+- [**22**Star][2y] [Assembly] [yifengyou/x86-assembly-language-from-real-mode-to-protection-mode](https://github.com/yifengyou/x86-assembly-language-from-real-mode-to-protection-mode) x86汇编语言 从实模式到保护模式
+- [**22**Star][4y] [Visual Basic .NET] [wpatoolkit/cap-converter](https://github.com/wpatoolkit/cap-converter) A small GUI tool for converting between cap and hccap files.
+- [**22**Star][1y] [HTML] [websecurify/acme-no-login-ng](https://github.com/websecurify/acme-no-login-ng) Demonstrates a login bypass attack against a sample MongoDB/NodeJS/AngularJS application
+- [**22**Star][1y] [Py] [webbreacher/emailwhois](https://github.com/webbreacher/emailwhois) Look up an email domain (@example.com), using Python, across all known domains.
+- [**22**Star][3m] [wangray/windbg-for-gdb-users](https://github.com/wangray/windbg-for-gdb-users) "Pwntools does not support Windows. Use a real OS ;)" — Zach Riggle, 2015
+- [**22**Star][5m] [Dockerfile] [vmayoral/basic_robot_cybersecurity](https://github.com/vmayoral/basic_robot_cybersecurity) An introductory series of cybersecurity for robots with a somewhat comprehensive step-by-step tutorials.
+- [**22**Star][4y] [C] [uvbs/vmpdbg2](https://github.com/uvbs/vmpdbg2)
+- [**22**Star][1y] [Py] [tyranid/canape](https://github.com/tyranid/canape) canape:网络测试工具,专为测试二进制协议(也可用于测试其他任意协议),内置标准网络代理,可使用户捕获和修改服务器的流量
+- [**22**Star][4y] [PHP] [tux-00/network_miner](https://github.com/tux-00/network_miner) Network Miner generates a network map by sending SNMP requests (LLDP/CDP/EDP).
+- [**22**Star][3y] [Py] [tromey/gdb-helpers](https://github.com/tromey/gdb-helpers) GDB helper scripts
+- [**22**Star][5y] [C#] [tophertimzen/shellcodetester](https://github.com/tophertimzen/shellcodetester) GUI Application in C# to run and disassemble shellcode
+- [**22**Star][3y] [Py] [thedr1ver/wipster](https://github.com/thedr1ver/wipster) Web Interface Portal & Security Threat Engine for REMnux
+- [**22**Star][1y] [CSS] [textileio/dapp-template](https://github.com/textileio/dapp-template) a basic template to build simple ipfs-based browser dapps
+- [**22**Star][1y] [C#] [technikempire/windivertsharp](https://github.com/technikempire/windivertsharp) A minimal .NET binding over WinDivert
+- [**22**Star][5y] [Py] [techbliss/scylladumper](https://github.com/techbliss/scylladumper) Ida Plugin to Use the Awsome Scylla plugin
+- [**22**Star][1m] [HTML] [tc39/proposal-intl-list-format](https://github.com/tc39/proposal-intl-list-format) `Intl.ListFormat` specification [draft]
+- [**22**Star][3y] [C++] [tandasat/cve-2014-0816](https://github.com/tandasat/cve-2014-0816) CVE-2014-0816
+- [**22**Star][7y] [Java] [tak31337/medusa-gui](https://github.com/tak31337/medusa-gui) A graphical user interface for the medusa brute forcing utility.
+- [**22**Star][4y] [C] [t2mune/nield](https://github.com/t2mune/nield) nield:通过 netlinksocket 接收来自内核的通知,生成与接口、neighbor cache(ARP,NDP)、IP地址(IPv4/IPv6)、路由、FIB规则和流量控制有关的日志
+- [**22**Star][3y] [Py] [t0kx/exploit-cve-2016-9920](https://github.com/t0kx/exploit-cve-2016-9920) Roundcube 1.0.0 <= 1.2.2 Remote Code Execution exploit and vulnerable container
+- [**22**Star][1y] [PHP] [svelizdonoso/asyrv](https://github.com/svelizdonoso/asyrv) ASYRV es una aplicación escrita en PHP/MySQL, con Servicios Web mal desarrollados(SOAP/REST/XML), esperando ayudar a los entusiastas de la seguridad informática a comprender esta tecnología tan utilizada hoy en día por las Organizaciones.
+- [**22**Star][2y] [C] [superironbob/pdbwriter](https://github.com/superironbob/pdbwriter) A small tool to produce a dummy pdb for an executable with symbols at addresses from a file
+- [**22**Star][4y] [sunkehappy/ios-reverse-engineering-tools-backup](https://github.com/sunkehappy/ios-reverse-engineering-tools-backup) Some guys find the old lsof could not be downloaded. But I have it and I want to share it.
+- [**22**Star][5m] [Py] [steved3/kit_hunter](https://github.com/steved3/kit_hunter) A basic phishing kit scanner for dedicated and semi-dedicated hosting
+- [**22**Star][3y] [C#] [stephenhaunts/safepad](https://github.com/stephenhaunts/safepad) SafePad : Encrypted Text Editor. This text editor uses very strong encryption to let you protect your secrets. Great for storing passwords, credit card details or any else that you want to keep safe.
+- [**22**Star][1m] [Py] [stamparm/dnslog](https://github.com/stamparm/dnslog) Minimalistic DNS logging tool
+- [**22**Star][12m] [Py] [st2labs/sipi](https://github.com/st2labs/sipi) Simple IP Information Tools for Reputation Data Analysis
+- [**22**Star][29d] [Java] [spring-cloud/spring-cloud-scheduler](https://github.com/spring-cloud/spring-cloud-scheduler)
+- [**22**Star][1y] [JS] [sipcapture/homer-ui](https://github.com/sipcapture/homer-ui) HOMER 5: Front-End (UI)
+- [**22**Star][5y] [Py] [siliconblade/volatility](https://github.com/siliconblade/volatility) volatility
+- [**22**Star][2y] [Java] [silentsignal/burp-uuid](https://github.com/silentsignal/burp-uuid) UUID issues for Burp Suite
+- [**22**Star][7m] [Java] [silentsignal/burp-requests](https://github.com/silentsignal/burp-requests) Copy as requests plugin for Burp Suite
+- [**22**Star][3y] [C++] [sensepost/misc-windows-hacking](https://github.com/sensepost/misc-windows-hacking) Miscellaneous projects related to attacking Windows.
+- [**22**Star][1y] [Py] [sebastienbr/volatility](https://github.com/sebastienbr/volatility) Utilities for the memory forensics framework
+- [**22**Star][9d] [C#] [scenegate/yarhl](https://github.com/scenegate/yarhl) Yet Another ROM Hacking Library
+- [**22**Star][2y] [Py] [saulty4ish/fuzzsafedog](https://github.com/saulty4ish/fuzzsafedog) 安全狗sql注入绕过
+- [**22**Star][3y] [C] [sagi/android_pocs](https://github.com/sagi/android_pocs) Android Vulnerability Reports and POCs.
+- [**22**Star][5d] [CSS] [saferwall/saferwall](https://github.com/saferwall/saferwall) A hackable malware sandbox for the 21st Century
+- [**22**Star][1y] [Py] [russianotter/networking](https://github.com/russianotter/networking) All My Main Networking Programs
+- [**22**Star][11m] [C++] [rolfrolles/miscellaneous](https://github.com/rolfrolles/miscellaneous) Small programs and scripts that do not require their own repositories
+- [**22**Star][6y] [C++] [robotastic/smartnet-scanner](https://github.com/robotastic/smartnet-scanner) GNURadio based scanner for SmartNet II Digital radio systems.
+- [**22**Star][1y] [Py] [reivhax/chimay-red-tiny](https://github.com/reivhax/chimay-red-tiny) This is a minified exploit for mikrotik routers. It does not require any aditional modules to run.
+- [**22**Star][2y] [C] [rednixon/stegdetect](https://github.com/rednixon/stegdetect) Stegdetect is an automated tool for detecting steganographic content in images.
+- [**22**Star][2m] [Py] [rceninja/re-scripts](https://github.com/rceninja/re-scripts)
+ - [Hyperv-Scripts](https://github.com/rceninja/re-scripts/tree/master/scripts/Hyperv-Scripts)
+ - [IA32-MSR-Decoder](https://github.com/rceninja/re-scripts/tree/master/scripts/IA32-MSR-Decoder) an IDA script which helps you to find and decode all MSR codes inside binary files
+ - [IA32-VMX-Helper](https://github.com/rceninja/re-scripts/tree/master/scripts/IA32-VMX-Helper) an IDA script (Updated IA32 MSR Decoder) which helps you to find and decode all MSR/VMCS codes inside binary files
+- [**22**Star][2m] [Py] [random-robbie/bugbountydork](https://github.com/random-robbie/bugbountydork) Bug Bounty Dork
+- [**22**Star][7y] [Ruby] [raesene/owasp_web_app_testing_cheatsheet_converter](https://github.com/raesene/owasp_web_app_testing_cheatsheet_converter) OWASP Web Application Testing Cheat Sheet converted to tool formats
+- [**22**Star][4m] [Dockerfile] [raesene/dockerized-security-tools](https://github.com/raesene/dockerized-security-tools) Dockerfiles for security tools
+- [**22**Star][2m] [C] [radare/libdemangle](https://github.com/radare/libdemangle) A simple library focusing on demangling symbols for different programing languages
+- [**22**Star][2m] [Py] [quikko/buquikker](https://github.com/quikko/buquikker) Supports multi threading for the bucketeer script
+- [**22**Star][11m] [Py] [puresec/lambda-proxy](https://github.com/puresec/lambda-proxy) Lambda-Proxy creates an HTTP proxy listening on localhost port 8082. When it receives an HTTP POST request with a very specific structure , it will parse the request, extract the relevant data required for the test, and will invoke your AWS Lambda function using the AWS SDK client.invoke() method. It was created for testing AWS Lambda functions …
+- [**22**Star][3y] [PHP] [powerscript/getdatareport](https://github.com/powerscript/getdatareport) Get information client with getdatareport (Plugin)
+- [**22**Star][2m] [JS] [polyverse/envisen](https://github.com/polyverse/envisen) ROP gadget finder and analysis in pure Javascript
+- [**22**Star][3y] [HTML] [pdjstone/cloudpets-web-bluetooth](https://github.com/pdjstone/cloudpets-web-bluetooth) Demo of CloudPets toy functionality using Web Bluetooth
+- [**22**Star][8m] [Shell] [payloadsecurity/vxcommunity](https://github.com/payloadsecurity/vxcommunity) This repository contains free Hybrid Analysis contributions to the IT-Security community
+- [**22**Star][1y] [C] [paul-tew/lifer](https://github.com/paul-tew/lifer) Windows link file forensic examiner
+- [**22**Star][3y] [C++] [patois/idaplugins](https://github.com/patois/idaplugins) Random IDA scripts, plugins, example code (some of it may be old and not working anymore)
+- [**22**Star][29d] [owasp/owasp-swag](https://github.com/owasp/owasp-swag) Swag for the OWASP projects and chapters
+- [**22**Star][3y] [Assembly] [osandamalith/anti-debug](https://github.com/osandamalith/anti-debug) Some of the Anti-Debugging Tricks
+- [**22**Star][3y] [Py] [op7ic/shadowbroker-smb-scanner](https://github.com/op7ic/shadowbroker-smb-scanner) shadowbroker SMB exploit scanner. Scans for ETERNALSYNERGY ETERNALBLUE ETERNALROMANCE ETHERNALCHAMPION
+- [**22**Star][4y] [Py] [onethawt/idapyscripts](https://github.com/onethawt/idapyscripts) IDAPython scripts
+ - [DataXrefCounter ](https://github.com/onethawt/idapyscripts/blob/master/dataxrefcounter.py) A small IDAPython plugin which enumerates all of the the x-references in a specific segment and counts the frequency of usage
+- [**22**Star][2d] [Py] [oasis-open/cti-stix-validator](https://github.com/oasis-open/cti-stix-validator) OASIS TC Open Repository: Validator for STIX 2.0 JSON normative requirements and best practices
+- [**22**Star][1y] [Py] [nirizr/idasix](https://github.com/nirizr/idasix) IDAPython compatibility library. idasix aims to create a smooth ida development process and allow a single codebase to function with multiple IDA/IDAPython versions
+- [**22**Star][5y] [Py] [nihilus/idascope](https://github.com/nihilus/idascope) An IDA Pro extension for easier (malware) reverse engineering(Bitbucket has newer version)
+- [**22**Star][1y] [Py] [nicksanzotta/linkscrape](https://github.com/nicksanzotta/linkscrape) A LinkedIn user/company enumeration tool.
+- [**22**Star][5y] [munmap/linux-kernel-bugs-db](https://github.com/munmap/linux-kernel-bugs-db)
+- [**22**Star][6y] [Py] [mothran/tlslite](https://github.com/mothran/tlslite) TLS Library in python
+- [**22**Star][4y] [Py] [monnappa22/linux_mem_diff_tool](https://github.com/monnappa22/linux_mem_diff_tool) Script to perform Linux Memory Diff Analysis Using Volatility
+- [**22**Star][7y] [Py] [milo2012/burpsql](https://github.com/milo2012/burpsql) Automating SQL injection using Burp Proxy Logs and SQLMap
+- [**22**Star][5d] [PHP] [middlewares/payload](https://github.com/middlewares/payload) PSR-15 middleware to parse the body of the request with support for json, csv and url-encode
+- [**22**Star][3y] [Swift] [melvinsh/burptoggle](https://github.com/melvinsh/burptoggle) Status bar application for OS X to toggle the state of the system HTTP/HTTPS proxy.
+- [**22**Star][1y] [C++] [meetpatty/basiliskii-vita](https://github.com/meetpatty/basiliskii-vita)
+- [**22**Star][5m] [HTML] [mdn/pab](https://github.com/mdn/pab) MDN Web Docs Product Advisory Board
+- [**22**Star][2y] [Py] [mdegrazia/onionpeeler](https://github.com/mdegrazia/onionpeeler) Python script to batch query the Tor Relays and Bridges
+- [**22**Star][4y] [Ruby] [martinvigo/metasploit-framework](https://github.com/martinvigo/metasploit-framework) Metasploit Framework
+- [**22**Star][1y] [Py] [marcovaldong/isgan](https://github.com/marcovaldong/isgan) Implementation of "Invisible Steganography via Generative Adversarial Networks" (
+- [**22**Star][1y] [C#] [malcomvetter/antidebug](https://github.com/malcomvetter/antidebug) PoC: Prevent a debugger from attaching to managed .NET processes via a watcher process code pattern.
+- [**22**Star][2d] [Dockerfile] [mablanco/docker-osmedeus](https://github.com/mablanco/docker-osmedeus) Docker image for Osmedeus, a fully automated offensive security tool for reconnaissance and vulnerability scanning
+- [**22**Star][30d] [Py] [lylemi/saker](https://github.com/lylemi/saker) Flexible Penetrate Testing Auxiliary Suite
+- [**22**Star][1y] [Py] [lorenzb/submarine_sends](https://github.com/lorenzb/submarine_sends) A proof-of-concept implementation of Submarine Sends for Ethereum
+- [**22**Star][2y] [C] [lorecioni/imagesplicingdetection](https://github.com/lorecioni/imagesplicingdetection) Illuminant inconsistencies for image splicing detection in forensics
+- [**22**Star][2m] [Py] [lockgit/py](https://github.com/lockgit/py) rsa,base64,ac,kmp,svm,knn,mitm,hash table...
+- [**22**Star][2y] [liucan01/cve-list-pro](https://github.com/liucan01/cve-list-pro)
+- [**22**Star][2y] [Py] [letusfsck/poc-exploit-mirror](https://github.com/letusfsck/poc-exploit-mirror) Archive Mirror for recently republished PoC/Exploit code
+- [**22**Star][2y] [Py] [leonardonve/dns2proxy_hsts](https://github.com/leonardonve/dns2proxy_hsts) DNS2Proxy offensive proxy version for HSTS
+- [**22**Star][1y] [Py] [leoid/encoder](https://github.com/leoid/encoder) Alphanumeric Encoder
+- [**22**Star][4y] [C#] [leechristensen/offensivepowershelltasking](https://github.com/leechristensen/offensivepowershelltasking) Run multiple PowerShell scripts concurrently in different app domains!
+- [**22**Star][2y] [TS] [lavalamp-/ws-frontend-community](https://github.com/lavalamp-/ws-frontend-community) Web Sight Front-end Community Edition
+- [**22**Star][1y] [Shell] [lamableu/morfeus_gui](https://github.com/lamableu/morfeus_gui) control your moRFeus device from your Linux-computer or Raspberry Pi
+- [**22**Star][1y] [Go] [lakevilladom/goskylar](https://github.com/lakevilladom/goskylar) 基于Golang开发的企业级外网端口资产扫描
+- [**22**Star][2y] [lac-japan/owasp-mobile-top-10-2016](https://github.com/lac-japan/owasp-mobile-top-10-2016) OWASP Mobile Top 10 2016 日本語訳
+- [**22**Star][8m] [Py] [laanwj/dwarf_to_c](https://github.com/laanwj/dwarf_to_c) Tool to recover C headers (types, function signatures) from DWARF debug data
+- [**22**Star][3y] [Py] [kutio/liblll](https://github.com/kutio/liblll) python library to manage and reduce lattices
+- [**22**Star][6m] [Shell] [kitsun3sec/pentest-cheat-sheets](https://github.com/kitsun3sec/pentest-cheat-sheets) A collection of snippets of codes and commands to make your life easier!
+- [**22**Star][4y] [Scala] [katjahahn/jwscan](https://github.com/katjahahn/jwscan) Scanner for Jar to EXE wrapper like Launch4j, Exe4j, JSmooth, Jar2Exe
+- [**22**Star][4y] [PHP] [k1p0d/zeus_reports_len](https://github.com/k1p0d/zeus_reports_len) Remote timing attack exploit against most Zeus/Zbot variants including Citadel, Ice9, Zeus 2.3, KINS/ZeusVM etc..
+- [**22**Star][2y] [Perl] [jusafing/pnaf](https://github.com/jusafing/pnaf) Passive Network Audit Framework
+- [**22**Star][3y] [C] [josephjkong/designing-bsd-rootkits](https://github.com/josephjkong/designing-bsd-rootkits) Code from the book "Designing BSD Rootkits: An Introduction to Kernel Hacking"
+- [**22**Star][3y] [Shell] [johntroony/luks-ops](https://github.com/johntroony/luks-ops) A bash script to automate the most basic usage of LUKS volumes in Linux VPS
+- [**22**Star][1y] [Py] [jiangsir404/xss-sql-fuzz](https://github.com/jiangsir404/xss-sql-fuzz) burpsuite 插件对GP所有参数(过滤特殊参数)一键自动添加xss sql payload 进行fuzz
+- [**22**Star][5m] [Py] [jhermann/dependency-check-py](https://github.com/jhermann/dependency-check-py)
+- [**22**Star][4y] [Go] [jgrahamc/torexit](https://github.com/jgrahamc/torexit) Small program to read lists of Tor exit nodes and draw picture showing when they join/leave list
+- [**22**Star][6y] [C++] [jbremer/pyn](https://github.com/jbremer/pyn) Awesome Python bindings for Pintool
+- [**22**Star][1y] [Shell] [jas502n/st2-046-poc](https://github.com/jas502n/st2-046-poc) st2-046-poc CVE-2017-5638
+- [**22**Star][5y] [C++] [jandre/brosquery](https://github.com/jandre/brosquery) module for osquery to load Bro logs into tables
+- [**22**Star][6m] [JS] [inverseintegral/ctf_writeups](https://github.com/inverseintegral/ctf_writeups)
+- [**22**Star][2y] [Py] [invasi0nz/lo0sr](https://github.com/invasi0nz/lo0sr) Lo0sR is a simple python Keylogger with many functions.
+- [**22**Star][2y] [Go] [integrii/wormhole](https://github.com/integrii/wormhole)
+- [**22**Star][17d] [Py] [ins1gn1a/netntlm-hashcat](https://github.com/ins1gn1a/netntlm-hashcat) Converts John The Ripper/Cain format hashes (singular, or in bulk) to HashCat compatible hash format.
+- [**22**Star][4y] [Py] [infectedpacket/vxvault](https://github.com/infectedpacket/vxvault) Malware management program and tools
+- [**22**Star][3y] [C] [iaik/prefetch](https://github.com/iaik/prefetch) This repository contains several tools to perform Prefetch Side-Channel Attacks
+- [**22**Star][3y] [C] [iagox86/ctfworkshop-2017](https://github.com/iagox86/ctfworkshop-2017)
+- [**22**Star][11m] [Py] [hypnoze57/fshell](https://github.com/hypnoze57/fshell) My python3 implementation of a Forward Shell
+- [**22**Star][11m] [Py] [howmp/comfinder](https://github.com/howmp/comfinder) IDA plugin for COM
+- [**22**Star][2y] [Py] [hongfeioo/userdevicetracker](https://github.com/hongfeioo/userdevicetracker) 快速定位一个IP或MAC在你的网络中的位置,是网络工程师提高工作效率的利器,也可以为CMDB提供基础网络数据。
+- [**22**Star][3y] [Py] [hoainam1989/training-application-security](https://github.com/hoainam1989/training-application-security) This repository for training application security.
+- [**22**Star][12m] [C] [hfiref0x/bsodscreen](https://github.com/hfiref0x/bsodscreen) BSOD Screensaver
+- [**22**Star][3y] [C] [hexhive/epoxy](https://github.com/hexhive/epoxy) Root Repo for the EPOXY tool that applies Privilege Overlays on bare-metal systems
+- [**22**Star][2y] [C] [herwonowr/catchme](https://github.com/herwonowr/catchme) CatchME - WiFi Fun Box "Having Fun with ESP8266"
+- [**22**Star][1y] [C] [hackerwarehouse/hw-dc26-badge](https://github.com/hackerwarehouse/hw-dc26-badge) Hacker Warehouse electronic badge that was made for DEF CON 26
+- [**22**Star][2y] [C] [h3xx/jphs](https://github.com/h3xx/jphs) jphide & seek steganography tools
+- [**22**Star][3y] [Py] [guelfoweb/fbid](https://github.com/guelfoweb/fbid) Show info about the author by facebook photo url
+- [**22**Star][4m] [Java] [guardianproject/jtorctl](https://github.com/guardianproject/jtorctl) deprecated fork of Java Tor Control Library
+- [**22**Star][3y] [JS] [gregkcarson/googleappscriptse](https://github.com/gregkcarson/googleappscriptse) Social Engineering Abusing Google App Scripts
+- [**22**Star][2y] [C++] [grcasanova/supervirus](https://github.com/grcasanova/supervirus) Project aimed at creating a malware able to evolve and adapt to the various host machines through metamorphic modifications, spontaneous mutations, code imitation and DNA programming to enable/disable functionalities
+- [**22**Star][2y] [PHP] [gr33ntii/malware-collection](https://github.com/gr33ntii/malware-collection)
+- [**22**Star][1y] [Go] [ginuerzh/gosocks5](https://github.com/ginuerzh/gosocks5) golang and SOCKS5
+- [**22**Star][8m] [BitBake] [ghsec/bbprofiles](https://github.com/ghsec/bbprofiles) Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that improve an active and passive scanner by yourself. This extension requires Burp Suite Pro.
+- [**22**Star][4y] [ObjC] [gdssecurity/osx-continuity-dialer-poc](https://github.com/gdssecurity/osx-continuity-dialer-poc)
+- [**22**Star][8y] [Java] [frohoff/jdeserialize](https://github.com/frohoff/jdeserialize) From
+- [**22**Star][3y] [Py] [freenas/middleware](https://github.com/freenas/middleware) New FreeNAS 10 Middleware
+- [**22**Star][4d] [Py] [fmagin/angr-cli](https://github.com/fmagin/angr-cli) Repo for various angr ipython features to give it more of a cli feeling
+- [**22**Star][3y] [Py] [firmadyne/extractor](https://github.com/firmadyne/extractor) Kernel and filesystem extractor
+- [**22**Star][6y] [Shell] [find-evil/msf-install-script-os-x-lion-mountain-lion](https://github.com/find-evil/msf-install-script-os-x-lion-mountain-lion) Script to automate installation of Metasploit Framework on OS X Lion & Mountain Lion
+- [**22**Star][2y] [JS] [feedhenry/mobile-security](https://github.com/feedhenry/mobile-security) FeedHenry Mobile Security
+- [**22**Star][1m] [JS] [fcavallarin/htcrawl](https://github.com/fcavallarin/htcrawl) Htcrawl is nodejs module for the recursive crawling of single page applications (SPA) using javascript
+- [**22**Star][1y] [HTML] [fastly/waf_testbed](https://github.com/fastly/waf_testbed) Chef Cookbook which provisions apache+mod_security+owasp-crs
+- [**22**Star][9m] [C++] [fare9/pba_analysis_tools](https://github.com/fare9/pba_analysis_tools) My own versions from the programs of the book "Practical Binary Analysis"
+- [**22**Star][9m] [Py] [f0re1gners/ejudge](https://github.com/f0re1gners/ejudge) EOJ 评测核心 沙箱接口
+- [**22**Star][7m] [f-secure/elevation-of-privacy](https://github.com/f-secure/elevation-of-privacy) Privacy Cards for Software Developers
+- [**22**Star][7m] [Java] [ettic-team/endpointfinder-burp](https://github.com/ettic-team/endpointfinder-burp)
+- [**22**Star][3y] [Java] [ernw/burpsuite-extensions](https://github.com/ernw/burpsuite-extensions) A collection of Burp Suite extensions
+- [**22**Star][6m] [JS] [entropystring/javascript](https://github.com/entropystring/javascript) EntropyString for JavaScript
+- [**22**Star][5d] [Py] [endgameinc/malware_evasion_competition](https://github.com/endgameinc/malware_evasion_competition)
+- [**22**Star][3y] [PHP] [emanuil/php-reaper](https://github.com/emanuil/php-reaper) PHP tool to scan ADOdb code for SQL Injections
+- [**22**Star][2m] [Py] [ekiojp/dfex](https://github.com/ekiojp/dfex) DNS File EXfiltration
+- [**22**Star][3y] [Py] [ehabhussein/ollydbg-binary-execution-visualizer](https://github.com/ehabhussein/ollydbg-binary-execution-visualizer) reverse engineering, visual binary analysis
+- [**22**Star][2y] [C++] [dragonquesthero/kernel-force-delete](https://github.com/dragonquesthero/kernel-force-delete) force delete runing .exe application file.or delete any locked file
+- [**22**Star][1y] [Py] [digiampietro/adbtools2](https://github.com/digiampietro/adbtools2) Tools for hacking ADB Epicentro routers, including firmware modification and VOIP password recovery.
+- [**22**Star][1y] [Ruby] [defcon-russia/metasploit-framework](https://github.com/defcon-russia/metasploit-framework) Metasploit Framework
+- [**22**Star][3y] [PS] [davehardy20/invoke-winrmattack](https://github.com/davehardy20/invoke-winrmattack) PowerShell cmdlet to push PowerShell attack modules to a remote system via PSRemoting and if required enable WinRM remotely.
+- [**22**Star][2y] [Py] [dariosharp/szpy](https://github.com/dariosharp/szpy) Z3 Symbolic Execution python
+- [**22**Star][4y] [Shell] [d3f4ultt/princesofpaypal](https://github.com/d3f4ultt/princesofpaypal) A security write-up about the Paypal API & data leakage
+- [**22**Star][3y] [C++] [d35m0nd142/kadabra](https://github.com/d35m0nd142/kadabra) [DEPRECATED] Kadabra is my automatic LFI Exploiter and Scanner, written in C++ and a couple extern module in Python.
+- [**22**Star][3y] [Py] [cujanovic/cve-2016-8610-poc](https://github.com/cujanovic/cve-2016-8610-poc) CVE-2016-8610 (SSL Death Alert) PoC
+- [**22**Star][3y] [Scala] [criteo/vizsql](https://github.com/criteo/vizsql) Scala and SQL happy together.
+- [**22**Star][22d] [Scala] [criteo/slab](https://github.com/criteo/slab) An extensible Scala framework for creating monitoring dashboards.
+- [**22**Star][6m] [Py] [conmarap/website-fingerprinting](https://github.com/conmarap/website-fingerprinting) Deanonymizing Tor or VPN users with website fingerprinting and machine learning.
+- [**22**Star][11m] [Shell] [cogset/shadowsocks](https://github.com/cogset/shadowsocks) Shadowsocks in Docker
+- [**22**Star][2y] [C#] [cobbr/insecurepowershellhost](https://github.com/cobbr/insecurepowershellhost) InsecurePowerShellHost is a .NET Core host process for InsecurePowerShell, a version of PowerShell Core v6.0.0 with key security features removed.
+- [**22**Star][5y] [C] [citypw/suterusu](https://github.com/citypw/suterusu) An LKM rootkit targeting Linux 2.6/3.x on x86(_64), and ARM
+- [**22**Star][3y] [C] [cert-polska/nymaim-tools](https://github.com/cert-polska/nymaim-tools)
+- [**22**Star][2y] [C] [celesteblue-dev/ps4-pkg2usb](https://github.com/celesteblue-dev/ps4-pkg2usb) PS4 payload (based on Vortex’s dumper) to dump and run fake PKGs on USB.
+- [**22**Star][3y] [Java] [cblichmann/idajava](https://github.com/cblichmann/idajava) Java integration for Hex-Rays IDA Pro
+- [**22**Star][5y] [C++] [casualx/libex](https://github.com/casualx/libex) C++ Helper Library for myself
+- [**22**Star][10m] [XSLT] [capt-meelo/massmap](https://github.com/capt-meelo/massmap) Combined port scanning w/ Masscan's speed & Nmap's scanning features.
+- [**22**Star][4y] [Py] [camoufl4g3/sqli-payload-fuzz3r](https://github.com/camoufl4g3/sqli-payload-fuzz3r)
+- [**22**Star][3y] [C++] [bronzeme/ssdt_hook_x64](https://github.com/bronzeme/ssdt_hook_x64)
+- [**22**Star][6y] [C#] [brandonprry/vulnerable_xxe](https://github.com/brandonprry/vulnerable_xxe) A C# web handler that is vulnerable to XXE with PoC. This is to serve as an example of what vulnerable C# code looks like.
+- [**22**Star][3m] [CSS] [braindead-sec/rogue-captive](https://github.com/braindead-sec/rogue-captive) Rogue Captive Portal for Raspberry Pi
+- [**22**Star][11m] [C#] [borjamerino/dns-polygraph](https://github.com/borjamerino/dns-polygraph) Tool designed to study the answers of your DNS resolver and make easier the identification of techniques such as DNS Hijacking/Poisoning
+- [**22**Star][1y] [Py] [blazeinfosec/cve-2017-10366_peoplesoft](https://github.com/blazeinfosec/cve-2017-10366_peoplesoft) CVE-2017-10366: Oracle PeopleSoft 8.54, 8.55, 8.56 Java deserialization exploit
+- [**22**Star][2y] [C] [billy-ellis/arm-gadget-finder](https://github.com/billy-ellis/arm-gadget-finder) Work-in-progress open source ROP gadget finder for 32-bit ARM binaries
+- [**22**Star][1y] [Py] [beatsbears/pkl](https://github.com/beatsbears/pkl) A simple Python Keylogger for macOS
+- [**22**Star][2y] [HTML] [beardog108/snow10](https://github.com/beardog108/snow10) Use whitespace and unicode chars for steganography
+- [**22**Star][4m] [C++] [bb107/winsudo](https://github.com/bb107/winsudo) Execute commands as local system.
+- [**22**Star][2y] [Py] [battelle/reductio](https://github.com/battelle/reductio) An exploration of code homeomorphism
+- [**22**Star][1y] [asuri-team/dproxy](https://github.com/asuri-team/dproxy) Massive Distributed Dynamic Proxy
+- [**22**Star][1y] [C#] [arkhist/hacklinks](https://github.com/arkhist/hacklinks) Hacklinks is an open source online game about hacking.
+- [**22**Star][2y] [Py] [argilo/nrsc-5](https://github.com/argilo/nrsc-5) Prototype implementation of HD Radio (NRSC-5). Superseded by
+- [**22**Star][3y] [C++] [apriorit/simple-antirootkit-sst-unhooker](https://github.com/apriorit/simple-antirootkit-sst-unhooker) This is a demo project to illustrate the way to verify and restore original SST in case of some malware hooks
+- [**22**Star][3y] [Py] [ansible/ansible-blog-examples](https://github.com/ansible/ansible-blog-examples) Example playbooks from posts on the Ansible blog (
+- [**22**Star][19d] [Rust] [aloxaf/rbkcrack](https://github.com/aloxaf/rbkcrack) Crack legacy zip encryption with Biham and Kocher's known plaintext attack. 使用明文攻击破解加密的 zip 文件
+- [**22**Star][3y] [Py] [almco/panorama](https://github.com/almco/panorama) Fast incident overview
+- [**22**Star][1y] [ObjC] [alexmx/insider](https://github.com/alexmx/insider) Insider sets a backdoor into your app for testing tools like Appium, Calabash, Frank, etc.
+- [**22**Star][2y] [Shell] [aflgo/oss-fuzz](https://github.com/aflgo/oss-fuzz) OSS-Fuzz - integrated with AFLGo for Patch Testing
+- [**22**Star][2y] [Py] [abatchy17/rop-emporium](https://github.com/abatchy17/rop-emporium) Solutions for ROP Emporium challenges (
+- [**22**Star][6y] [Java] [aatxe/openmaple](https://github.com/aatxe/openmaple) A fast MapleStory emulator aiming to bring openness back to the private server community.
+- [**22**Star][3y] [5z1punch/my_php_kernel_handbook_for_pwn](https://github.com/5z1punch/my_php_kernel_handbook_for_pwn) 这一切的开始,都要从我爷爷在悬崖下捡到一本白帽子讲web安全说起
+- [**22**Star][2y] [Py] [0xsearches/sandcastle](https://github.com/0xsearches/sandcastle)
+- [**22**Star][3y] [PHP] [0x584a/fuzzxssphp](https://github.com/0x584a/fuzzxssphp) PHP版本的反射型xss扫描,支持GET,POST
+- [**22**Star][4y] [LaNMaSteR53/honeybadger](https://bitbucket.org/lanmaster53/honeybadger)
+- [**21**Star][2y] [Py] [sorz/ssmanager](https://github.com/sorz/ssmanager) A python module managing large amount of running Shadowsocks server instances.
+- [**21**Star][1y] [Dockerfile] [alibo/goquiet-shadowsocks-docker](https://github.com/alibo/goquiet-shadowsocks-docker) A Docker image for Shadowsocks over GoQuiet
+- [**21**Star][6m] [Py] [coallaoh/whitenblackbox](https://github.com/coallaoh/whitenblackbox) Towards Reverse-Engineering Black-Box Neural Networks, ICLR'18
+- [**21**Star][] [Py] [technowlogy-pushpender/technowlogger](https://github.com/technowlogy-pushpender/technowlogger) TechNowLogger is Windows/Linux Keylogger Generator which sends key-logs via email with other juicy target info
+- [**21**Star][1y] [Py] [ins1gn1a/pwdlyser-cli](https://github.com/ins1gn1a/pwdlyser-cli) Python-based CLI Password Analyser (Reporting Tool)
+- [**21**Star][2y] [JS] [shangxinbo/cardinal](https://github.com/shangxinbo/cardinal) A socks and http proxy by nodejs for you to over GWF
+- [**21**Star][1y] [Java] [wrbug/charles-crack](https://github.com/wrbug/charles-crack) charles破解
+- [**21**Star][6y] [Py] [ganapati/spaf](https://github.com/ganapati/spaf) Static Php Analysis and Fuzzer
+- [**21**Star][4y] [Py] [jofpin/compaxss](https://github.com/jofpin/compaxss) Bypass XSS Reflected Cross-site scripting
+- [**21**Star][5y] [C++] [sweetsoftware/ftpkeylogger](https://github.com/sweetsoftware/ftpkeylogger) Simple keylogger for Windows with HTML output and FTP upload.
+- [**21**Star][4y] [Py] [juliocesarfort/webshotter](https://github.com/juliocesarfort/webshotter) A multi-threaded Python tool to generate screenshot of websites
+- [**21**Star][2y] [0x90/firmware-arsenal](https://github.com/0x90/firmware-arsenal) Tools and scripts for firmware reverse engeneering
+- [**21**Star][3y] [Py] [mthbernardes/demoniware](https://github.com/mthbernardes/demoniware) Telegram BotNet
+- [**21**Star][8y] [Java] [spiderlabs/cerealbox](https://github.com/spiderlabs/cerealbox) Arduino-based network monitor
+- [**21**Star][3y] [Py] [f-secure/headless-scanner-driver](https://github.com/f-secure/headless-scanner-driver) A Burp Suite extension that starts scanning on requests it sees, and dumps results on standard output
+- [**21**Star][19d] [CSS] [mitre/mitre.github.io](https://github.com/mitre/mitre.github.io) Open Source software from The MITRE Corporation
+- [**21**Star][2y] [C] [reswitched/rcm-modchips](https://github.com/reswitched/rcm-modchips) Collection of "modchip" designs for launching payloads via the Tegra RCM bug (CVE-2018-6242)
+- [**21**Star][2y] [C#] [functionclub/localproxy](https://github.com/functionclub/localproxy) 一键更改系统本地IE代理的小工具
+- [**21**Star][1y] [C++] [awnumar/nixbot](https://github.com/awnumar/nixbot) Lightweight TCP botnet coded in C++
+- [**21**Star][1y] [JS] [shadowsocks/shadowsocks-hub-api](https://github.com/shadowsocks/shadowsocks-hub-api) A set of open and standard restful APIs for managing shadowsocks users, servers, nodes, products, accounts, and traffic.
+- [**21**Star][24d] [bkth/optimize_rce_chakra](https://github.com/bkth/optimize_rce_chakra) keynote I gave at GreHack 2019
+- [**21**Star][30d] [Shell] [gwolf3/visshous](https://github.com/gwolf3/visshous)
+- [**21**Star][1y] [Java] [netindev/allatori-v3.0](https://github.com/netindev/allatori-v3.0) Allatori v3.0 source code.
+- [**21**Star][30d] [Py] [verabe/veriman](https://github.com/verabe/veriman) Analysis tool for Solidity smart contracts. Prototype.
+- [**21**Star][1y] [unexpectedby/sqli-dork-repository](https://github.com/unexpectedby/sqli-dork-repository) Dorks Hacking Database for educational proposal
+- [**21**Star][3d] [CSS] [cacti/documentation](https://github.com/cacti/documentation) Documentation for Cacti, Spine, RRDProxy and more
+- [**21**Star][7y] [Shell] [tjetzinger/cloudcrackinstaller](https://github.com/tjetzinger/cloudcrackinstaller) A script to install Crunch, Pyrit and Cowpatty on a running Amazon EC2 Cluster GPU Instance to crack WPA and WPA2 keys.
+- [**21**Star][3y] [Py] [initbrain/python-wi-fi-positioning-system](https://github.com/initbrain/python-wi-fi-positioning-system) Python Wi-Fi Positioning System - Wi-Fi geolocation script using the Google Geolocation API
+- [**21**Star][3m] [yeahhub/kali-linux-ebooks](https://github.com/yeahhub/kali-linux-ebooks) Top 20 Kali Linux Related E-books (Free Download)
+- [**21**Star][4m] [PS] [nyan-x-cat/malwareshell](https://github.com/nyan-x-cat/malwareshell) Create a powershell malware loader to run C#.cs code on runtime
+- [**21**Star][13d] [TS] [paulmillr/noble-ed25519](https://github.com/paulmillr/noble-ed25519) Noble ed25519. High-security, easily auditable, 0-dep, 1-file pubkey, scalarmult & EDDSA
+- [**21**Star][28d] [Py] [hash3lizer/wifijammer](https://github.com/hash3lizer/wifijammer) Wireless Jammer to Disconnect Nearby Access-Points and Stations.
+- [**21**Star][17d] [Py] [z3pp/zfuzz](https://github.com/z3pp/zfuzz) Simple python web fuzzer
+- [**21**Star][4y] [Ruby] [vallejocc/hacking-busybox-control](https://github.com/vallejocc/Hacking-Busybox-Control) Some metasploit scripts to help to control busybox based embedded devices
+- [**21**Star][3y] [C] [newbee119/iot_bot](https://github.com/NewBee119/IoT_bot) A sample IoT bot origin from Mirai
+- [**21**Star][3y] [Py] [cylance/idpanel](https://github.com/cylance/IDPanel) Identify botnet panels with Ensembled Decision Trees
+- [**21**Star][1y] [JS] [mindpointgroup/stig-cli](https://github.com/MindPointGroup/stig-cli) A CLI for perusing DISA STIG content Mac, Linux, and Windows Compatible
+- [**21**Star][4y] [Rust] [auth0-blog/rust-api-example](https://github.com/auth0-blog/rust-api-example) Example of a RESTful API in Rust
+- [**21**Star][2y] [Py] [chiefychief/router_pwner](https://github.com/ChiefyChief/router_pwner) Dynamically id routers and attempt to compromise
+- [**21**Star][5y] [C++] [r-lyeh-archived/moon9](https://github.com/r-lyeh-archived/moon9) a game framework. warning: wip, dev, unstable, radiation hazard, defcon 3
+- [**21**Star][1m] [Py] [csirtgadgets/csirtg-smrt-v1](https://github.com/csirtgadgets/csirtg-smrt-v1) the fastest way to consume threat intelligence.
+- [**21**Star][15d] [Shell] [cryptomator/cryptomator-mac](https://github.com/cryptomator/cryptomator-mac) Cryptomator .dmg image for Mac
+- [**21**Star][5y] [C] [zliu-fd/windivertproxy](https://github.com/zliu-fd/windivertproxy) Proxy any program via WinDivert to a specific server
+- [**21**Star][3y] [Java] [zhaozepeng/safewebview](https://github.com/zhaozepeng/safewebview) 修复 4.2 之下 JS 漏洞的 WebView
+- [**21**Star][1y] [zecopro/wpa-passwords](https://github.com/zecopro/wpa-passwords) the best and small passwords lists to crack handshake wpa-wpa2
+- [**21**Star][9y] [C] [zapotek/cdpsnarf](https://github.com/zapotek/cdpsnarf) CDPSnarf is a network sniffer exclusively written to extract information from CDP (Cisco Discovery Protocol) packets.
+- [**21**Star][3y] [Py] [xorpd/fcatalog_client](https://github.com/xorpd/fcatalog_client) fcatalog idapython client
+- [**21**Star][2y] [Vue] [xinali/penework](https://github.com/xinali/penework) Penetration Test Framwork
+- [**21**Star][4y] [C++] [xbased/xhook](https://github.com/xbased/xhook) Hook Windows API. supports Win7/8/10 x86 and x64 platform.
+- [**21**Star][2y] [xazlsec/ctf-project-lists](https://github.com/xazlsec/ctf-project-lists) 由信安之路团队成员收集整理的与 CTF 相关的 Github 项目地址,如果你由更好的项目请将项目地址发送到:myh0st@foxmail.com
+- [**21**Star][9m] [PS] [wurstcommander/win10appremove](https://github.com/wurstcommander/win10appremove) A Powershell-Script for removing / debloating Windows 10 apps. Mandatory apps which can't be uninstalled via start menu will be removed too.
+- [**21**Star][2y] [Shell] [wolfvan/some-samples](https://github.com/wolfvan/some-samples) Malware captured with honeypots
+- [**21**Star][3y] [CSS] [wizardforcel/kali-linux-cookbook-zh](https://github.com/wizardforcel/kali-linux-cookbook-zh)
+- [**21**Star][5y] [Py] [windbgscripts/pykd](https://github.com/windbgscripts/pykd) This contains Helpful PYKD (Python Extension for Windbg) scripts
+- [**21**Star][4y] [C] [warcraft23/virus-and-windows-api-programing](https://github.com/warcraft23/virus-and-windows-api-programing) 中科大13级计算机病毒分析与WindowsAPI编程 授课老师:郭大侠
+- [**21**Star][1y] [Py] [v-p-b/similarninja](https://github.com/v-p-b/similarninja) similarninja: Binary Ninja插件, 用于二进制文件的控制流程图(CFG)匹配
+- [**21**Star][9d] [Py] [unstabl3/recce](https://github.com/unstabl3/recce) Domain availbility checker
+- [**21**Star][2y] [Py] [unamer/ctfhelper](https://github.com/unamer/ctfhelper) A simple Burp extension for scanning stuffs in CTF
+- [**21**Star][1y] [Py] [ucnt/aws-s3-bruteforce](https://github.com/ucnt/aws-s3-bruteforce) (DEPRECATED) Amazon AWS S3 Bucket Name Bruteforce
+- [**21**Star][1y] [Go] [txn2/n2proxy](https://github.com/txn2/n2proxy) Contraband filtering reverse proxy for plain http and SSL.
+- [**21**Star][1y] [CSS] [tuhinshubhra/uboat-panel](https://github.com/tuhinshubhra/uboat-panel) Panel for the HTTP botnet UBoat -
+- [**21**Star][2y] [troydo42/awesome-pen-test](https://github.com/troydo42/awesome-pen-test) Experiment with penetration testing Guides and Tools for WordPress, iOS, MacOS, Wifi and Car
+- [**21**Star][3y] [Py] [threatstream/symhash](https://github.com/threatstream/symhash)
+- [**21**Star][2y] [C#] [thomdixon/saltwatertaffy](https://github.com/thomdixon/saltwatertaffy) An nmap wrapper library for .NET
+- [**21**Star][3y] [Py] [thomaskeck/pyshellcode](https://github.com/thomaskeck/pyshellcode) Execute ShellCode / "Inline-Assembler" in Python
+- [**21**Star][1y] [Py] [the-c0d3r/pynmap](https://github.com/the-c0d3r/pynmap) A serious attempt to implement multi-threading to nmap module, which would result in faster scanning speed. I know that one can write NSE scripts for multi-threaded scanning with it, but I wanted to try it on python.
+- [**21**Star][1m] [Py] [teamseri0us/pocs](https://github.com/teamseri0us/pocs)
+- [**21**Star][6y] [Py] [syworks/wifi-harvester](https://github.com/syworks/wifi-harvester) For collecting probed SSID name by wireless devices, Access point detail and connected clients.
+- [**21**Star][1y] [Py] [syno3/babymux](https://github.com/syno3/babymux) pentesting tool for noob hackers.Runs on linux and termux
+- [**21**Star][2y] [Py] [swisskyrepo/whid_toolkit](https://github.com/swisskyrepo/whid_toolkit) Simple script for the WHID injector - a rubberducky wifi
+- [**21**Star][2d] [HTML] [sushi2k/owasp-mstg](https://github.com/sushi2k/owasp-mstg) The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security testing and reverse engineering.
+- [**21**Star][5y] [stolas/windbg-darktheme](https://github.com/stolas/windbg-darktheme) A dark theme for WinDBG.
+- [**21**Star][26d] [Shell] [stevemcgrath/docker-nessus_scanner](https://github.com/stevemcgrath/docker-nessus_scanner) Nessus Scanner Docker Image
+- [**21**Star][29d] [status-im/awesome-secure-messaging](https://github.com/status-im/awesome-secure-messaging) A curated collection of links for secure messaging.
+- [**21**Star][4m] [C] [sslab-gatech/fuzzification](https://github.com/sslab-gatech/fuzzification) We hinder fuzzing
+- [**21**Star][10y] [C++] [sporst/ida-pro-plugins](https://github.com/sporst/ida-pro-plugins) Collection of IDA Pro plugins I wrote over the years
+- [**21**Star][2y] [Py] [spec-sec/securechat](https://github.com/spec-sec/securechat) Encrypted chat server and client written in Python
+- [**21**Star][1y] [spchal/hacklu2018](https://github.com/spchal/hacklu2018) Telco training
+- [**21**Star][2d] [sophoslabs/iocs](https://github.com/sophoslabs/iocs) Sophos-originated indicators-of-compromise from published reports
+- [**21**Star][1y] [Rust] [smirnovvad/rbuster](https://github.com/smirnovvad/rbuster) yet another dirbuster
+- [**21**Star][2y] [Py] [sirpsycho/firecall](https://github.com/sirpsycho/firecall) firecall: 直接向Cisco ASA防火墙发送命令, 无需登录防火墙后再做修改
+- [**21**Star][10d] [Batchfile] [simplevulnerabilitymanager/svm](https://github.com/simplevulnerabilitymanager/svm) Program to perform vulnerability analysis and automatically generate a report
+- [**21**Star][5y] [shieldfy/awesome-pentest](https://github.com/shieldfy/awesome-pentest) A collection of awesome penetration testing resources, tools and other shiny things
+- [**21**Star][1y] [sharsi1/sublazerwlst](https://github.com/sharsi1/sublazerwlst) Bundle of wordlists for brute-forcing subdomains (World + RUSSIA based).
+- [**21**Star][3y] [Go] [shakenetwork/onionscan](https://github.com/shakenetwork/onionscan) OnionScan暗网爬虫是一个免费的开源工具,用于调查黑网。 OnionScan is a free and open source tool for investigating the Dark Web
+- [**21**Star][3y] [C#] [shadowsocks-plus/shadowsocks-plus-win](https://github.com/shadowsocks-plus/shadowsocks-plus-win) An installer for SSPlus local proxy on Windows
+- [**21**Star][10m] [Shell] [sensepost/common-substr](https://github.com/sensepost/common-substr) Simple awk script to extract the most common substrings from an input text. Built for password cracking.
+- [**21**Star][3y] [HTML] [secwiki/wooyun_articles](https://github.com/secwiki/wooyun_articles) drops.wooyun.org 乌云Drops文章备份
+- [**21**Star][4y] [PHP] [secwiki/webshell](https://github.com/secwiki/webshell) This is a webshell open source project
+- [**21**Star][5y] [ActionScript] [securityobscurity/cve-2015-0313](https://github.com/securityobscurity/cve-2015-0313)
+- [**21**Star][1m] [Dockerfile] [secbone/docker-ss-libev](https://github.com/secbone/docker-ss-libev) A mini docker image of Shadowsocks-libev only 15M in size
+- [**21**Star][5m] [Shell] [sec0ps/va-pt](https://github.com/sec0ps/va-pt) VAPT is a Vulnerability Assessment and Penetration Testing toolkit. It merges the most common tools from Kali and SamuraiWTF into one platform and places them onto an Ubuntu or Raspbian platform.
+- [**21**Star][15d] [Py] [saucer-man/penetration-script](https://github.com/saucer-man/penetration-script) 渗透测试脚本
+- [**21**Star][1y] [C++] [sanketkarpe/anwi](https://github.com/sanketkarpe/anwi) ANWI - All New Wireless IDS
+- [**21**Star][4y] [Py] [sam-b/z3-stuff](https://github.com/sam-b/z3-stuff) z3 scripts and ctf challenge solutions.
+- [**21**Star][10m] [Py] [sadeghhayeri/lol-hacking](https://github.com/sadeghhayeri/lol-hacking) My Hacking Activities!
+- [**21**Star][1m] [Shell] [rustybird/qubes-split-browser](https://github.com/rustybird/qubes-split-browser) Tor Browser in a Qubes DisposableVM, with persistent bookmarks and login credentials
+- [**21**Star][11m] [Smarty] [ropnop/pentest_charts](https://github.com/ropnop/pentest_charts) Some helpful Helm Charts for pentesters
+- [**21**Star][7m] [rootup/phdays9](https://github.com/rootup/phdays9) My fuzzing workshop from PHDays9
+- [**21**Star][3y] [Py] [roo7break/serialator](https://github.com/roo7break/serialator) Python script to exploit CVE-2015-4852.
+- [**21**Star][2y] [C++] [riscybusiness/jadoube](https://github.com/riscybusiness/jadoube)
+- [**21**Star][9m] [HTML] [ridter/cs_custom_404](https://github.com/ridter/cs_custom_404) Cobalt strike custom 404 page
+- [**21**Star][5d] [PS] [rgl/visual-studio-community-vagrant](https://github.com/rgl/visual-studio-community-vagrant) Vagrant Environment for Visual Studio Community
+- [**21**Star][1y] [C] [rfalke/decompiler-subjects](https://github.com/rfalke/decompiler-subjects) Tests cases for binary decompilers
+- [**21**Star][5y] [Java] [retme7/launchanywhere_poc_by_retme_bug_7699048](https://github.com/retme7/launchanywhere_poc_by_retme_bug_7699048) source code & PoC file of launchAnyWhere problem
+- [**21**Star][3y] [Py] [reflare/afl-monitor](https://github.com/reflare/afl-monitor) A monitoring script for AFL
+- [**21**Star][3y] [Go] [rdkr/oniongen-go](https://github.com/rdkr/oniongen-go)
+- [**21**Star][13d] [Java] [rcenvironment/rce](https://github.com/rcenvironment/rce) Distributed, workflow-driven integration environment
+- [**21**Star][2y] [Ruby] [rapid7/msfrpc-client](https://github.com/rapid7/msfrpc-client) Rapid7 Metasploit API client library written in Ruby
+- [**21**Star][11m] [Java] [ramshazar/orangetsai-springboot-actuator-poc](https://github.com/ramshazar/orangetsai-springboot-actuator-poc)
+- [**21**Star][3y] [PS] [raikia/get-reconinfo](https://github.com/raikia/get-reconinfo) A powershell script that prints a lot of IP and connection info to the screen
+- [**21**Star][6m] [r3mlab/datajournalism-resources](https://github.com/r3mlab/datajournalism-resources) A compilation of links to datajournalism & OSINT tools, guides and resources I find useful to keep at hand.
+- [**21**Star][2m] [Py] [pyke369/exabgp-helpers](https://github.com/pyke369/exabgp-helpers) ExaBGP helpers scripts
+- [**21**Star][3m] [Ruby] [pwelch/virustotal_api](https://github.com/pwelch/virustotal_api) Ruby Gem for VirusTotal API
+- [**21**Star][10m] [Py] [pure-l0g1c/keylogger](https://github.com/pure-l0g1c/keylogger) A simple keylogger that uses Gmail as a C&C
+- [**21**Star][2y] [Py] [pure-l0g1c/aircrack](https://github.com/pure-l0g1c/aircrack) Automatic Wifi Cracker. Uses Airodump, Aircrack, Aireplay
+- [**21**Star][4y] [Shell] [psrcek/kali-mitm-evil-twin](https://github.com/psrcek/kali-mitm-evil-twin) A script that creates a wifi hotspot on kali linux that can view usernames and passwords of ssl logins.
+- [**21**Star][1m] [Java] [portswigger/json-web-tokens](https://github.com/portswigger/json-web-tokens) JWT Support for Burp
+- [**21**Star][3m] [Java] [portswigger/freddy-deserialization-bug-finder](https://github.com/portswigger/freddy-deserialization-bug-finder)
+- [**21**Star][2m] [Py] [pirobot/pi_trees](https://github.com/pirobot/pi_trees) A Python/ROS library for implementing Behavior Trees
+- [**21**Star][4y] [Py] [peterfillmore/rfidiot](https://github.com/peterfillmore/rfidiot) python RFID / NFC library & tools
+- [**21**Star][5y] [C] [pastcompute/lca2015-radare2-tutorial](https://github.com/pastcompute/lca2015-radare2-tutorial) Examples and demos for my LCA2015 radare2 tutorial
+- [**21**Star][2m] [Py] [ouroboros/juusankoubou](https://github.com/ouroboros/juusankoubou) 「十三工房」
+- [**21**Star][3y] [Visual Basic .NET] [osandamalith/vbshellcode](https://github.com/osandamalith/vbshellcode) Making shellcode UD -
+- [**21**Star][3y] [Py] [odedlaz/uberlogs](https://github.com/odedlaz/uberlogs) make logging fun again
+- [**21**Star][5y] [C] [nyx0/dll-inj3cti0n](https://github.com/nyx0/dll-inj3cti0n) Another dll injection tool.
+- [**21**Star][2y] [C] [nviso-be/nexus_5_bootloader_unpacker](https://github.com/nviso-be/nexus_5_bootloader_unpacker) A bootloader imgdata unpacker for Nexus 4, 5 and 7 smartphones as well as imgdata tool for Nexus 5.
+- [**21**Star][3m] [Py] [nlitsme/idascripts](https://github.com/nlitsme/idascripts) IDApro idc and idapython script collection
+ - [enumerators](https://github.com/nlitsme/idascripts/blob/master/enumerators.py) Enumeration utilities for idapython
+- [**21**Star][8m] [Py] [nguyenkhong/cracknetdrive3](https://github.com/nguyenkhong/cracknetdrive3)
+- [**21**Star][3y] [Py] [neurobin/letsacme](https://github.com/neurobin/letsacme) A tiny script to issue and renew TLS/SSL certificate from Let's Encrypt
+- [**21**Star][3y] [Go] [netxfly/xsec-ssh-firewall](https://github.com/netxfly/xsec-ssh-firewall) 一个简易的ssh密码防暴力破解程序
+- [**21**Star][4y] [Py] [neo23x0/prisma](https://github.com/neo23x0/prisma) Command Line STDOUT Colorer
+- [**21**Star][2y] [HTML] [neargle/secnewsbak](https://github.com/neargle/secnewsbak) 备份SecNews失效的Drops.Wooyun文章
+- [**21**Star][2y] [Java] [mtxiaowangzi/java-ee-vulnweb](https://github.com/mtxiaowangzi/java-ee-vulnweb) 用于演示Java Web项目中,漏洞的成因及修复方案,可用于黑盒测试和白盒测试,部分修复方案可用于生产环境。
+- [**21**Star][2y] [Py] [mstxq17/dbleakscan](https://github.com/mstxq17/dbleakscan) this scanner try to scan some dbbak or ctf #源码泄露
+- [**21**Star][3y] [C++] [morpav/zceq_solver](https://github.com/morpav/zceq_solver) CPU solver for Zcash's variant of Equihash problem
+- [**21**Star][1y] [C#] [mojtabatajik/besafe](https://github.com/mojtabatajik/besafe) BeSafe is robust threat analyzer which help to protect your desktop environment and know what's happening around you
+- [**21**Star][3y] [Py] [misp/misp-workbench](https://github.com/misp/misp-workbench) MISP Workbench
+- [**21**Star][5y] [JS] [mikolalysenko/lpf-ctf](https://github.com/mikolalysenko/lpf-ctf) Multiplayer capture the flag demo
+- [**21**Star][6y] [Go] [mikkolehtisalo/gssapi-proxy](https://github.com/mikkolehtisalo/gssapi-proxy) GSSAPI/Kerberos proxy
+- [**21**Star][2y] [C] [microwave89/drvtricks](https://github.com/microwave89/drvtricks) drvtriks kernel driver for Windows 7 SP1 and 8.1 x64, that tricks around in your system.
+- [**21**Star][2y] [C++] [microsoft/firewalleventmonitor](https://github.com/microsoft/firewalleventmonitor) Listens for Firewall rule match events generated by Microsoft Hyper-V Virtual Filter Protocol (VFP) extension.
+- [**21**Star][2y] [Py] [mdsecresearch/thriftdecoder](https://github.com/mdsecresearch/thriftdecoder) Apache Thrift Decoder
+- [**21**Star][10m] [PHP] [mariusbalcytis/gentle-force](https://github.com/mariusbalcytis/gentle-force) Brute-force, error and request rate limiting
+- [**21**Star][3m] [Py] [marcolivierbouch/dirbpy](https://github.com/marcolivierbouch/dirbpy) This is the new version of dirb in python
+- [**21**Star][5m] [Py] [manhnho/shellsum](https://github.com/manhnho/shellsum) A defense tool - detect web shells in local directories via md5sum
+- [**21**Star][3y] [C++] [malwares/malware](https://github.com/malwares/malware) Malware Samples. Uploaded to GitHub for those want to analyse the code.
+- [**21**Star][5y] [C++] [lynnux/holyshit](https://github.com/lynnux/holyshit) ollydbg plugin, the goal is to make life easier. The project is DEAD!
+- [**21**Star][5y] [JS] [longtian/cache_attack_in_javascript](https://github.com/longtian/cache_attack_in_javascript) Perform cache attack using javascript
+- [**21**Star][2y] [Shell] [linuxlite/spectre-meltdown-checker-automated](https://github.com/linuxlite/spectre-meltdown-checker-automated) An Automated Spectre Meltdown downloader and checker
+- [**21**Star][2y] [Py] [kudelskisecurity/check_all_apks](https://github.com/kudelskisecurity/check_all_apks) Check All APK's -- scripts for checking your phone for malware
+- [**21**Star][2y] [Py] [kslgroup/threadmap](https://github.com/kslgroup/threadmap) threadmap plugin for Volatility Foundation
+- [**21**Star][2y] [Py] [krrr/wstan](https://github.com/krrr/wstan) Tunneling TCP in WebSocket (ssh -D alternative)
+- [**21**Star][5y] [Java] [khai-tran/burpjdser](https://github.com/khai-tran/burpjdser)
+- [**21**Star][3y] [C++] [k0keoyo/cve-2015-2546-exploit](https://github.com/k0keoyo/cve-2015-2546-exploit)
+- [**21**Star][2y] [Py] [jzadeh/aktaion2](https://github.com/jzadeh/aktaion2) Python implementation of the Aktaion project
+- [**21**Star][7m] [Py] [joda32/certcrunchy](https://github.com/joda32/certcrunchy) Just a silly recon tool that uses data from SSL Certificates to find potential host names
+- [**21**Star][9y] [Shell] [jfernandez/ddos-deflate](https://github.com/jfernandez/ddos-deflate) custom DDoS Deflate clone
+- [**21**Star][2y] [C] [jerome-ps/jn516xsniffer](https://github.com/jerome-ps/jn516xsniffer) Transform a Xiaomi Zigbee gadget into a Zigbee sniffer.
+- [**21**Star][3y] [Groovy] [jenkinsci-cert/security-218](https://github.com/jenkinsci-cert/security-218)
+- [**21**Star][2y] [jasklabs/blackhat2017](https://github.com/jasklabs/blackhat2017) Data sets and examples for Jask Labs Blackhat 2017 Handout: Top 10 Machine Learning Cyber Security Use Cases
+- [**21**Star][3m] [C] [jackullrich/trunpe](https://github.com/jackullrich/trunpe) A modified RunPE (process hollowing) technique avoiding the usage of SetThreadContext by appending a TLS section which calls the original entrypoint.
+- [**21**Star][2y] [ivmachiavelli/osint_opendata](https://github.com/ivmachiavelli/osint_opendata) A collection of Open Data for the data freaks out there.
+- [**21**Star][1y] [Py] [ins1gn1a/pwdlyser](https://github.com/ins1gn1a/pwdlyser) pwdlyser:密码分析工具,Python编写
+- [**21**Star][6y] [Py] [ikoniaris/kippo-malware](https://github.com/ikoniaris/kippo-malware) Download all malicious files from a Kippo SSH honeypot database
+- [**21**Star][2y] [Ruby] [realbearcat/cve-2018-1297](https://github.com/RealBearcat/CVE-2018-1297) Apache Jmeter RMI 反序列化
+- [**21**Star][4y] [C++] [holmesian/gh0st-light](https://github.com/holmesian/gh0st-light) 精简之后的老东西
+- [**21**Star][5m] [Py] [hash3lizer/subrake](https://github.com/hash3lizer/subrake) A powerful Subdomain Scanner & Validator for Reconnaissance.
+- [**21**Star][2y] [Py] [harris21/afot](https://github.com/harris21/afot) Automation Forensics Tool for Windows
+- [**21**Star][3y] [C] [hackerdom/phdctf-2017](https://github.com/hackerdom/phdctf-2017) PHDays Online CTF 2017. Developed with ♥ by Hackerdom team
+- [**21**Star][6y] [C] [hackedteam/vector-silent](https://github.com/hackedteam/vector-silent) Silent installer
+- [**21**Star][3y] [Py] [hack-all-the-things/charsetinspect](https://github.com/hack-all-the-things/charsetinspect) A script that inspects multi-byte character sets looking for characters with specific user-defined properties
+- [**21**Star][2y] [PHP] [gwen001/vhost-brute](https://github.com/gwen001/vhost-brute) A PHP tool to brute force vhost configured on a server.
+- [**21**Star][12m] [C++] [gtoad/android_anti_debug](https://github.com/gtoad/android_anti_debug) An example of android anti-debug.
+- [**21**Star][2y] [Go] [gnolizuh/quictun](https://github.com/gnolizuh/quictun) The simplest tunnel service based on QUIC.
+- [**21**Star][2m] [Py] [gh0x0st/buffer_overflow](https://github.com/gh0x0st/buffer_overflow) Just another OSCP prep guide into buffer overflows using Python
+- [**21**Star][3m] [gh0st-404/zs-personal-infiltration-syste](https://github.com/gh0st-404/zs-personal-infiltration-syste) 泽少个人渗透系统 Zs Personal Infiltration Syste
+- [**21**Star][3y] [PS] [fuzzysecurity/capstonekeystone-powershell](https://github.com/fuzzysecurity/capstonekeystone-powershell) PowerShell Module Bindings for Capstone/Keystone
+- [**21**Star][2y] [Shell] [funilrys/funceble](https://github.com/funilrys/funceble) [ARCHIVED] Please report to
+- [**21**Star][2m] [Py] [flarn2006/bhstools](https://github.com/flarn2006/bhstools) Tools for interacting with Brinks BHS-3000 and BHS-4000 / IntelliBus, custom firmware for BHS-4000
+- [**21**Star][1y] [Py] [fjh658/hexrayspytools](https://github.com/fjh658/hexrayspytools) Ida Pro plugin
+- [**21**Star][4y] [fabiobaroni/awesome-pentest](https://github.com/fabiobaroni/awesome-pentest) A collection of awesome penetration testing resources, tools and other shiny things
+- [**21**Star][1m] [Shell] [fabaff/fsl-test-bench](https://github.com/fabaff/fsl-test-bench) FSL Test bench - Ansible playbook repository to setup a save environment for security auditing and testing. It can be used for teaching security testing methodologies, testing tools, learning, and playing.
+- [**21**Star][6d] [Py] [f5networks/f5-google-gdm-templates](https://github.com/f5networks/f5-google-gdm-templates) Google Deployment Templates for quickly deploying BIG-IP services in Google Cloud Platform
+- [**21**Star][10m] [Go] [extremecoders-re/go-dispatch-proxy](https://github.com/extremecoders-re/go-dispatch-proxy) SOCKS5 load balancing proxy developed in Go, combines multiple internet connections
+- [**21**Star][18d] [Java] [ericsson/ecaudit](https://github.com/ericsson/ecaudit) Ericsson Audit plug-in for Apache Cassandra
+- [**21**Star][3y] [Jupyter Notebook] [equalitie/bothound](https://github.com/equalitie/bothound) Automatic attack detector and botnet classifier
+- [**21**Star][4m] [C#] [empier/memoryeditor](https://github.com/empier/memoryeditor) [C#]Main.exe < - > [C_DLL] < - > [C_KERNEL] = Memory_Editor via Kernel
+- [**21**Star][1y] [C++] [edwig/sslsocket](https://github.com/edwig/sslsocket) Two sided secure/insecure socket that can do SSL/TLS connections without the need for OpenSSL libraries. It uses the standard WinCrypt modules
+- [**21**Star][2y] [edoverflow/security-policy-specification-standard](https://github.com/edoverflow/security-policy-specification-standard) This document proposes a way of standardising the structure, language, and grammar used in security policies.
+- [**21**Star][7m] [Py] [duchengyao/hkdvr_login](https://github.com/duchengyao/hkdvr_login) 批量扫描海康威视视频监控并尝试登录的脚本
+- [**21**Star][7y] [C] [dsmatter/brootus](https://github.com/dsmatter/brootus) An educational Linux Kernel Rootkit
+- [**21**Star][1y] [C] [droberson/icmp-backdoor](https://github.com/droberson/icmp-backdoor) Backdoor that listens for specially crafted ICMP packets and spawns reverse shells.
+- [**21**Star][7m] [Py] [drbeni/malquarium](https://github.com/drbeni/malquarium) Malquarium - Modern Malware Repository
+- [**21**Star][3m] [digitaldisarray/osint-tools](https://github.com/digitaldisarray/osint-tools)
+- [**21**Star][3y] [Py] [digitalbond/ctf-challenges](https://github.com/digitalbond/ctf-challenges) Challenges from past S4 (SCADA Security Scientific Symposium) Capture-the-Flag contests.
+- [**21**Star][2m] [TS] [dialogs/electron-ssl-pinning](https://github.com/dialogs/electron-ssl-pinning) Prevents MITM in Electron applications
+- [**21**Star][1m] [Perl] [dheiland-r7/snmp](https://github.com/dheiland-r7/snmp) SNMP data gather scripts
+- [**21**Star][10m] [dfir-it/supreme-backdoor-factory](https://github.com/dfir-it/supreme-backdoor-factory) This repository contains additional files mentioned in the blog post
+- [**21**Star][2d] [C++] [deeponion/deeponion](https://github.com/deeponion/deeponion) Official Source Repo for DeepOnion - Anonymous Cryptocurrency on TOR (based on the latest codebase from litecoin/bitcoin)
+- [**21**Star][4y] [Py] [decalage2/oledump-contrib](https://github.com/decalage2/oledump-contrib) The oledump-contrib repository contains plugins and enhancements for the oledump tool published by Didier Stevens.
+- [**21**Star][1y] [Smali] [dan7800/vulnerableandroidapporacle](https://github.com/dan7800/vulnerableandroidapporacle)
+- [**21**Star][4m] [C] [cyclaero/void-zones-tools](https://github.com/cyclaero/void-zones-tools) Prepare a list of void zones that can be readily feed into Unbound on FreeBSD
+- [**21**Star][5y] [C++] [cr4sh/prl_guest_to_host](https://github.com/cr4sh/prl_guest_to_host) Guest to host VM escape exploit for Parallels Desktop
+- [**21**Star][1y] [HTML] [consensys/evm-analyzer-benchmark-suite](https://github.com/consensys/evm-analyzer-benchmark-suite) A benchmark suite for evaluating the precision of EVM code analysis tools.
+- [**21**Star][1y] [C] [codereba/netmon](https://github.com/codereba/netmon) network filter driver that control network send speed, based on windows tdi framework.
+- [**21**Star][1y] [PHP] [codeclimate/codeclimate-phpcodesniffer](https://github.com/codeclimate/codeclimate-phpcodesniffer) Code Climate Engine for PHP Code Sniffer
+- [**21**Star][2y] [Java] [codahale/grpc-proxy](https://github.com/codahale/grpc-proxy) A gRPC service which proxies requests to an HTTP server.
+- [**21**Star][8m] [Java] [codahale/aes-gcm-siv](https://github.com/codahale/aes-gcm-siv) A Java implementation of AES-GCM-SIV (RFC 8452).
+- [**21**Star][2y] [C] [circl/pcapdj](https://github.com/circl/pcapdj) pcapdj - dispatch pcap files
+- [**21**Star][7m] [Py] [christhecoolhut/instruction-stomp](https://github.com/christhecoolhut/instruction-stomp) Cross-architecture instruction counting for CTF solving
+- [**21**Star][21d] [JS] [chef-koch/bypass-adblockers](https://github.com/chef-koch/bypass-adblockers) Malvertising campaign that successfully bypasses ad blockers to deliver their malicious payload
+- [**21**Star][6y] [Py] [carlpulley/volatility](https://github.com/carlpulley/volatility) A collection of Volatility Framework plugins.
+- [**21**Star][10y] [C] [bringhurst/xnufuzz](https://github.com/bringhurst/xnufuzz) An XNU kernel fuzz tool
+- [**21**Star][5y] [Py] [brenns10/pywall](https://github.com/brenns10/pywall) Python firewall.
+- [**21**Star][4m] [Py] [botherder/snoopdroid](https://github.com/botherder/snoopdroid) Extract packages from an Android device
+- [**21**Star][4d] [beerisgood/windows10_hardening](https://github.com/beerisgood/windows10_hardening) My Windows 10 x64 security hardening guide
+- [**21**Star][6m] [Py] [beched/abi-decompiler](https://github.com/beched/abi-decompiler) Ethereum (EVM) smart contracts reverse engineering helper utility
+- [**21**Star][9m] [Ruby] [audibleblink/doubletap](https://github.com/audibleblink/doubletap) Password spraying on sites that require 2+ page loads and dynamic nonces
+- [**21**Star][5m] [JS] [assafmo/istorexit](https://github.com/assafmo/istorexit) Check if an IP is a Tor exit node
+- [**21**Star][3y] [C++] [arpitn30/nipper-ng](https://github.com/arpitn30/nipper-ng) Automatically exported from code.google.com/p/nipper-ng
+- [**21**Star][3y] [Visual Basic .NET] [appsecco/winmanipulate](https://github.com/appsecco/winmanipulate) A simple tool to manipulate window objects in Windows
+- [**21**Star][6m] [PHP] [appsecco/sqlinjection-training-app](https://github.com/appsecco/sqlinjection-training-app) A simple PHP application to learn SQL Injection detection and exploitation techniques.
+- [**21**Star][10d] [Shell] [apache-labor/labor](https://github.com/apache-labor/labor)
+- [**21**Star][3y] [CSS] [aozhimin/ios-reverse-engineering-presentation](https://github.com/aozhimin/ios-reverse-engineering-presentation) iOS Reverse Engineering Presentation
+- [**21**Star][3y] [aozhimin/ios-monitor-resources](https://github.com/aozhimin/ios-monitor-resources) 对各厂商的 iOS SDK 性能监控方案的整理和收集后的资源
+- [**21**Star][10m] [Java] [ankokuty/hakoniwabadstore](https://github.com/ankokuty/hakoniwabadstore) 箱庭BadStore
+- [**21**Star][2m] [Shell] [angela-d/autohosts](https://github.com/angela-d/autohosts) Automate hosts file updates on Linux and MacOS. Block Firefox telemetry, Google snooping and web trackers at the root.
+- [**21**Star][4y] [C#] [alphadelta/png-mask](https://github.com/alphadelta/png-mask) PNG Steganography Software
+- [**21**Star][2y] [Java] [alcarl/nfcproxy](https://github.com/alcarl/nfcproxy) 用两个安卓手机的nfc功能截取iso14443交互数据 fork by
+- [**21**Star][2y] [C] [al-homedawy/injector](https://github.com/al-homedawy/injector) A Windows driver used to facilitate DLL injection
+- [**21**Star][4y] [C#] [adamcaudill/curvelock](https://github.com/adamcaudill/curvelock) Experimental File & Message Encryption for Windows
+- [**21**Star][3m] [acutronicrobotics/mara_threat_model](https://github.com/acutronicrobotics/mara_threat_model) Threat Model analysis for MARA modular robot
+- [**21**Star][2m] [Py] [7dog7/masscan_to_nmap](https://github.com/7dog7/masscan_to_nmap) 基于masscan和nmap的快速端口扫描和指纹识别工具,优化版本(获取标题,页面长度,过滤防火墙)
+- [**21**Star][3y] [55-aa/cve-2015-0057](https://github.com/55-aa/cve-2015-0057) 翻译文章,CVE-2015-0057漏洞在32位和64位系统上的利用。Exploiting the win32k!xxxEnableWndSBArrows use-after-free (CVE 2015-0057) bug on both 32-bit and 64-bit(Aaron Adams of NCC )
+- [**21**Star][7y] [C] [0xroot/whitesnow](https://github.com/0xroot/whitesnow) An experimental rootkit for Android
+- [**21**Star][1y] [Py] [0x09al/my-exploits](https://github.com/0x09al/my-exploits) My public exploit collection.
+- [**20**Star][6d] [Py] [quark-engine/quark-engine](https://github.com/quark-engine/quark-engine)
+- [**20**Star][2d] [Py] [beardog108/onionr](https://github.com/beardog108/onionr) Private Decentralized Communication Network
+- [**20**Star][6m] [Go] [contextualist/proxlet](https://github.com/contextualist/proxlet) a POC, naïve implemetation of serverless reverse proxy for any website
+- [**20**Star][30d] [Java] [naveenrudra/rttm](https://github.com/naveenrudra/rttm) Real Time Threat Monitoring Tool
+- [**20**Star][2y] [HTML] [pwn20wndstuff/pwn20wndstuff.github.io](https://github.com/pwn20wndstuff/pwn20wndstuff.github.io)
+- [**20**Star][1y] [Py] [tostapunk/pc-control-telegram-bot](https://github.com/tostapunk/pc-control-telegram-bot) Control your PC directly from Telegram!
+- [**20**Star][1m] [scriptingxss/owasp-fstm](https://github.com/scriptingxss/owasp-fstm) The Firmware Security Testing Methodology (FSTM) is composed of nine stages tailored to enable security researchers, software developers, consultants, hobbyists, and Information Security professionals with conducting firmware security assessments.
+- [**20**Star][4m] [C] [netik/dc27_badge](https://github.com/netik/dc27_badge) Defcon 27 "DaBomb!" badge.
+- [**20**Star][11d] [Py] [natescarlet/gfwlist.acl](https://github.com/natescarlet/gfwlist.acl)
+- [**20**Star][5m] [HTML] [0xkira/pwn-dash-docset](https://github.com/0xkira/pwn-dash-docset) latest x86_64 assembly language and pwntools dash docset
+- [**20**Star][2m] [Java] [alpheratzteam/obfuscator](https://github.com/alpheratzteam/obfuscator) Java Obfuscator
+- [**20**Star][2m] [Py] [mephi42/ida-kallsyms](https://github.com/mephi42/ida-kallsyms) (No Doc)
+- [**20**Star][1m] [foxhex0ne/slides](https://github.com/foxhex0ne/slides) Will try to put here slides from now on when I give a talk
+- [**20**Star][1y] [Py] [hyuunnn/ida_python_scripts](https://github.com/hyuunnn/ida_python_scripts) ida python scripts
+- [**20**Star][11m] [Go] [nogoegst/onionize](https://github.com/nogoegst/onionize) create an onion site from a directory, file, zip or an HTTP(S) site
+- [**20**Star][3m] [Java] [aress31/flarequench](https://github.com/aress31/flarequench) Burp Suite plugin that adds additional checks to the passive scanner to reveal the origin IP(s) of Cloudflare-protected web applications.
+- [**20**Star][3y] [Py] [inndy/formatstring-exploit](https://github.com/inndy/formatstring-exploit) Dead simple format string exploit payload generator
+- [**20**Star][1y] [Py] [sniperoj/attack-defense-platform](https://github.com/sniperoj/attack-defense-platform) A framework that help to create CTF Attack with Defense competition quickly
+- [**20**Star][2d] [Java] [daimler/sechub](https://github.com/daimler/sechub) SecHub - one central and easy way to use different security tools with one API/Client
+- [**20**Star][7m] [HTML] [casework/case](https://github.com/casework/CASE) Cyber-investigation Analysis Standard Expression (CASE) Ontology
+- [**20**Star][3y] [ulexec/windowsmalwaresourcecode](https://github.com/ulexec/WindowsMalwareSourceCode) Collection of Source Code of Various Malware Targeting the Windows Platform
+- [**20**Star][3y] [unexpectedby/automated-malware-analysis-list](https://github.com/unexpectedBy/Automated-Malware-Analysis-List) My personal Automated Malware Analysis Sandboxes and Services
+- [**20**Star][2y] [C#] [boogie-org/symbooglix](https://github.com/boogie-org/symbooglix) Symbolic Execution Engine for Boogie
+- [**20**Star][5y] [C++] [utsa-cyber/sceadan](https://github.com/UTSA-cyber/sceadan) Systematic Classification Engine for Advanced Data ANalysis
+- [**20**Star][3y] [Lua] [takeshixx/nmap-scripts](https://github.com/takeshixx/nmap-scripts) A collection of Nmap NSE scripts.
+- [**20**Star][3y] [C] [aoncyberlabs/mbedtls-fuzz](https://github.com/AonCyberLabs/mbedtls-fuzz)
+- [**20**Star][3y] [Go] [thanasisk/go-ssh-cracker](https://github.com/thanasisk/go-ssh-cracker) A simple ssh private key password recovery tool written in Go
+- [**20**Star][11m] [Py] [fsecurelabs/captcha_cracking](https://github.com/FSecureLABS/captcha_cracking) Helper scripts and tutorial for cracking text-based CAPTCHAs
+- [**20**Star][8m] [aws-samples/aws-redshift-spectrum-poc](https://github.com/aws-samples/aws-redshift-spectrum-poc) Cloudformation and SQL scripts used to replicate a POC environment from the "Data Lake to Data Warehouse: Enhancing Customer 360 with Amazon Redshift Spectrum" post
+- [**20**Star][5m] [Py] [zznop/binjago](https://github.com/zznop/binjago) Binary Ninja plugin for ROP gadget calculation
+- [**20**Star][3y] [Py] [ztrix/idascript](https://github.com/ztrix/idascript) Full functional idascript with stdin/stdout handled
+- [**20**Star][2y] [C#] [zoebear/radia](https://github.com/zoebear/radia) create an interactive and immerse environment to visualize code, and to augment the task of reverse engineering binaries
+- [**20**Star][2y] [ObjC] [zjjno/cornerstonehook](https://github.com/zjjno/cornerstonehook) Cornerstone破解
+- [**20**Star][1y] [C] [zhuhuibeishadiao/drivermaper](https://github.com/zhuhuibeishadiao/drivermaper) map driver to memory
+- [**20**Star][9m] [C++] [zhongyang219/simplenotepad](https://github.com/zhongyang219/simplenotepad) 这是一个可以代替Windows记事本的软件,除了包含记事本原有的功能外,还有编码格式转换、十六进制查看编辑、文件二进制比较、编码批量转换的功能。
+- [**20**Star][1y] [Py] [zhl2008/ctf-framework](https://github.com/zhl2008/ctf-framework) Hence
+- [**20**Star][3m] [C#] [zerokilo/pdbdumpwv](https://github.com/zerokilo/pdbdumpwv) PDB Dumping Tool
+- [**20**Star][3y] [C++] [yujokang/epex](https://github.com/yujokang/epex) Tool for detecting error handling bugs
+- [**20**Star][3y] [CSS] [youngyangyang04/nosqlinjectionattackdemo](https://github.com/youngyangyang04/nosqlinjectionattackdemo) NoSQLInjectionAttackDemo is website demo for test NoSQL Injection. There are two website demos in this project and all databases are mongoDB
+- [**20**Star][1y] [Lua] [yoshifan/ram-watch-cheat-engine](https://github.com/yoshifan/ram-watch-cheat-engine) Lua script framework for RAM watch displays using Cheat Engine, with a focus on Dolphin emulator.
+- [**20**Star][1y] [xiaoqx/pocs](https://github.com/xiaoqx/pocs) pocs of tested targets
+- [**20**Star][3y] [CSS] [xeushack/fake-login-page](https://github.com/xeushack/fake-login-page) A fake login page for use in a phishing attack
+- [**20**Star][8m] [x-f1v3/cve-2019-3396](https://github.com/x-f1v3/cve-2019-3396) Confluence Widget Connector path traversal (CVE-2019-3396)
+- [**20**Star][21d] [watterott/candiy-shield](https://github.com/watterott/candiy-shield) CAN-Bus Shield for Arduino based on Microchip MCP2515 or MCP2517FD CAN Controller
+- [**20**Star][6m] [PHP] [w181496/fuckfastcgi](https://github.com/w181496/fuckfastcgi) [Tool] Forge PHP FastCGI protocol to RCE with strict disable_functions
+- [**20**Star][1y] [Py] [vortexau/mooscan](https://github.com/vortexau/mooscan) A scanner for Moodle LMS
+- [**20**Star][3d] [Go] [virustotal/vt-go](https://github.com/virustotal/vt-go) The official Go client library for VirusTotal API
+- [**20**Star][2y] [JS] [vagabondan/ric-nomp](https://github.com/vagabondan/ric-nomp) SEGWIT, Dash 12.1 generation transaction format support and many bugfixes from almost all forks at github were implemented here on 2017-10-04. You can create Issues but code contribution is much more preferable.
+- [**20**Star][2y] [Py] [undefinedd/extract0r-](https://github.com/undefinedd/extract0r-)
+- [**20**Star][1y] [C#] [ukncsc/mail-check](https://github.com/ukncsc/mail-check)
+- [**20**Star][3y] [JS] [tunnelshade/pocuito](https://github.com/tunnelshade/pocuito) A tiny chrome extension to record and replay your web application proof-of-concepts.
+- [**20**Star][10m] [Makefile] [tum-i22/munch](https://github.com/tum-i22/munch) Greybox fuzzer for optimizing function coverage and finding low-level vulnerabilities in C programs
+- [**20**Star][3y] [PS] [trullj/sticky-keys-scanner](https://github.com/trullj/sticky-keys-scanner) A PowerShell function that scans for the existence of a Sticky Keys backdoor.
+- [**20**Star][3y] [Java] [topolik/ois-dos](https://github.com/topolik/ois-dos) Java Deserialization
+- [**20**Star][3y] [Py] [toolsprods/sniffvpn](https://github.com/toolsprods/sniffvpn) Traffic monitor for your VPN
+- [**20**Star][5y] [C] [tongzeyu/hooksysenter](https://github.com/tongzeyu/hooksysenter) hook sysenter,重载内核,下硬件断点到debugport,防止debugport清零
+- [**20**Star][1y] [Py] [thisissecurity/sinkhole](https://github.com/thisissecurity/sinkhole) Miscellanous scripts used for malware analysis
+- [**20**Star][1m] [Go] [theredspy15/multi-go](https://github.com/theredspy15/multi-go) A multi-tool made in Go, and aimed at security experts to make life a little more convenient
+- [**20**Star][8m] [C++] [terencechow/pwnedpasswords](https://github.com/terencechow/pwnedpasswords) PwnedPasswords as a Service
+- [**20**Star][2y] [Py] [techbliss/x64dbg_script_editor](https://github.com/techbliss/x64dbg_script_editor) x64dbg Script editor v2.0
+- [**20**Star][3m] [Rust] [tafia/hyper-proxy](https://github.com/tafia/hyper-proxy) A proxy connector for Hyper-based crates
+- [**20**Star][5y] [C++] [sweetsoftware/simplebackdoor](https://github.com/sweetsoftware/simplebackdoor) Remote Windows shell
+- [**20**Star][4y] [PHP] [stypr/ctf](https://github.com/stypr/ctf) Web-based CTF challenge writeups (2011~2015).
+- [**20**Star][6y] [Ruby] [staaldraad/metasploit](https://github.com/staaldraad/metasploit) Metasploit things, modules, plugins, exploits
+- [**20**Star][6m] [Py] [sslmate/ct-honeybee](https://github.com/sslmate/ct-honeybee) Lightweight program that pollinates STHs between Certificate Transparency logs and auditors
+- [**20**Star][11m] [Py] [spacepatcher/firehol-ip-aggregator](https://github.com/spacepatcher/firehol-ip-aggregator) Application for keeping feeds from FireHOL
+- [**20**Star][5y] [snifer/l4bsforandroid](https://github.com/snifer/l4bsforandroid) Repositorio de APK para Hacking y Seguridad
+- [**20**Star][10m] [slowmist/awesome-blockchain-bug-bounty](https://github.com/slowmist/awesome-blockchain-bug-bounty) A comprehensive curated list of available Blockchain Bug Bounty Programs.
+- [**20**Star][4m] [Java] [skocur/image-cipher](https://github.com/skocur/image-cipher) Steganography software for encrypting text into image that uses modified version of LSB (Least Significant Bit) algorithm.
+- [**20**Star][4m] [JS] [skepticfx/subquest](https://github.com/skepticfx/subquest) Fast, Elegant subdomain scanner using nodejs
+- [**20**Star][4y] [Py] [sinkmanu/cookiescanner](https://github.com/sinkmanu/cookiescanner) Tool for check the cookie flag in multiple sites
+- [**20**Star][1y] [Erlang] [silentsignal/sslproxy](https://github.com/silentsignal/sslproxy) Generic HTTPS proxy for logging non-HTTP traffic
+- [**20**Star][4y] [Py] [shwetankarora/gsm-packets-analysis-framework](https://github.com/shwetankarora/gsm-packets-analysis-framework)
+- [**20**Star][8y] [Ruby] [sensepost/squeeza](https://github.com/sensepost/squeeza) SQL Injection without the pain of syringes.
+- [**20**Star][3m] [Py] [sensepost/punch-q](https://github.com/sensepost/punch-q)
+- [**20**Star][3y] [Py] [securitymb/burp-exceptions](https://github.com/securitymb/burp-exceptions) Simple trick to increase readability of exceptions raised by Burp extensions written in Python
+- [**20**Star][1y] [Py] [securityinnovation/ofxpostern](https://github.com/securityinnovation/ofxpostern) Vulnerability scanner for OFX servers
+- [**20**Star][9m] [C++] [secrary/findloop](https://github.com/secrary/findloop) find possible encryption/decryption or compression/decompression code
+- [**20**Star][2y] [sampi/create-react-app-hack](https://github.com/sampi/create-react-app-hack) Hacking create-react-app to work with Preact & LESS without ejecting
+- [**20**Star][7y] [MATLAB] [samhooke/steganography](https://github.com/samhooke/steganography) Image & video steganography in Matlab
+- [**20**Star][3y] [Py] [saelo/33c3ctf-repl](https://github.com/saelo/33c3ctf-repl) Code and exploit for the "read-eval-pwn loop" challenge of 33C3 CTF
+- [**20**Star][10m] [Java] [rub-nds/joseph](https://github.com/rub-nds/joseph)
+- [**20**Star][1m] [Shell] [rtrouton/create_macos_recovery](https://github.com/rtrouton/create_macos_recovery) Tool for repairing the Recovery volume (APFS) or partition (HFS+) on Macs running macOS 10.13.x or later.
+- [**20**Star][2y] [JS] [rohitjoshi9023/brutal-wordlist-generator](https://github.com/rohitjoshi9023/brutal-wordlist-generator) Brutal Wordlist Generator is a java based Application software used to generate the wordlist with best of UX interface
+- [**20**Star][4m] [C++] [revspbird/hightlight](https://github.com/revspbird/hightlight) a plugin for ida of version 7.2 to help know F5 window codes better
+- [**20**Star][6m] [C#] [reclassnet/reclass.net-frostbiteplugin](https://github.com/reclassnet/reclass.net-frostbiteplugin) A ReClass.NET plugin which displays type infos of Frostbite classes and adds the WeakPtr node.
+- [**20**Star][2y] [JS] [rd17/detor](https://github.com/rd17/detor)
+- [**20**Star][2y] [PS] [rasta-mouse/invoke-loginprompt](https://github.com/rasta-mouse/invoke-loginprompt) Invokes a Windows Security Login Prompt and outputs the clear text password.
+- [**20**Star][4m] [Py] [rapid7/metasploit-baseline-builder](https://github.com/rapid7/metasploit-baseline-builder) Created by Jeffrey Martin via the GitHub Connector
+- [**20**Star][1y] [ranchoice/44con2018](https://github.com/ranchoice/44con2018) Slides of 44Con 2018
+- [**20**Star][3y] [C++] [progmboy/vul_analyze_doc](https://github.com/progmboy/vul_analyze_doc)
+- [**20**Star][2y] [Java] [pnfsoftware/pleaserop](https://github.com/pnfsoftware/pleaserop) Architecture-agnostic ROP gadget finder using JEB's IR
+- [**20**Star][7m] [Rust] [plus-postech/soma](https://github.com/plus-postech/soma) Cross-platform CTF problem container manager
+- [**20**Star][2m] [PHP] [pluginkollektiv/antivirus](https://github.com/pluginkollektiv/antivirus) Useful plugin that will scan your theme templates for malicious injections. Automatically. Every day. For more blog security.
+- [**20**Star][2m] [Assembly] [pinkp4nther/shellcodes](https://github.com/pinkp4nther/shellcodes) I'll post my custom shellcode I make here!
+- [**20**Star][2y] [C] [pinkp4nther/pinkit](https://github.com/pinkp4nther/pinkit) A quick LKM rootkit that executes a reverse TCP netcat shell with root privileges.
+- [**20**Star][3y] [HTML] [pentestbox/pentest-box-tools](https://github.com/pentestbox/pentest-box-tools) PentestBox Tools Website
+- [**20**Star][3y] [C++] [patois/ndsldr](https://github.com/patois/ndsldr) Nintendo DS ROM loader module for IDA Pro
+- [**20**Star][2y] [C] [opsxcq/exploit-cve-2016-7434](https://github.com/opsxcq/exploit-cve-2016-7434) NTPD remote DOS exploit and vulnerable container
+- [**20**Star][3y] [PS] [oldb00t/aggressorscripts](https://github.com/oldb00t/aggressorscripts) Cobaltstrike Aggressor Scripts
+- [**20**Star][2y] [C#] [olanderofc/officebrute](https://github.com/olanderofc/officebrute) OfficeBrute - brute force protected word documents
+- [**20**Star][1y] [Batchfile] [olafhartong/ta-sysmon-deploy](https://github.com/olafhartong/ta-sysmon-deploy) Deploy and maintain Symon through the Splunk Deployment Sever
+- [**20**Star][1y] [c] [odzhan/propagate](https://github.com/odzhan/propagate) PROPagate code injection technique example
+- [**20**Star][8m] [C#] [nyan-x-cat/lime-loader](https://github.com/nyan-x-cat/lime-loader) Download a .NET payload and run it on memory
+- [**20**Star][2y] [Shell] [nullarray/sysenum](https://github.com/nullarray/sysenum) Simple Bash script to retrieve basic system information.
+- [**20**Star][2y] [Py] [nullarray/pyparser-cve](https://github.com/nullarray/pyparser-cve) Multi source CVE/exploit parser.
+- [**20**Star][26d] [C++] [nonlinear-chaos-order-etc/i2pchat](https://github.com/nonlinear-chaos-order-etc/i2pchat)
+- [**20**Star][2y] [C++] [nkga/self-updater](https://github.com/nkga/self-updater) Framework for secure self-updating software, written in C++/Win32.
+- [**20**Star][2y] [C] [nkga/cheat-driver](https://github.com/nkga/cheat-driver) Kernel mode driver for reading/writing process memory. C/Win32.
+- [**20**Star][3y] [Py] [njsmith/machomachomangler](https://github.com/njsmith/machomachomangler) Tools for mangling Mach-O and PE binaries
+- [**20**Star][6y] [Shell] [netspi/binrev](https://github.com/netspi/binrev)
+- [**20**Star][2y] [C] [neargle/cve-2018-6574-poc](https://github.com/neargle/cve-2018-6574-poc) CVE-2018-6574 POC : golang 'go get' remote command execution during source code build
+- [**20**Star][1y] [Py] [ne0nd0g/adpasswordhealth](https://github.com/ne0nd0g/adpasswordhealth) A tool to evaluate the password health of Active Directory accounts.
+- [**20**Star][3y] [nd13/penetration-testing-and-hacking](https://github.com/nd13/penetration-testing-and-hacking) Collection of tips, tools and tutorials around infosec
+- [**20**Star][3y] [Py] [ncatlin/lockwatcher](https://github.com/ncatlin/lockwatcher) Anti-forensic monitor program: watches for signs of tampering and purges keys/shuts everything down.
+- [**20**Star][2y] [C] [nbulischeck/debugfs-backdoor](https://github.com/nbulischeck/debugfs-backdoor) PoC code using debugfs to store files in memory and execute them
+- [**20**Star][1y] [Py] [n0tty/random-hacking-scripts](https://github.com/n0tty/random-hacking-scripts) A collection of scripts made duing my personal research
+- [**20**Star][24d] [C++] [mullvad/libwfp](https://github.com/mullvad/libwfp) C++ library for interacting with the Windows Filtering Platform (WFP)
+- [**20**Star][7m] [C] [mtth-bfft/ntsec](https://github.com/mtth-bfft/ntsec) Standalone tool to explore the security model of Windows and its NT kernel. Use it to introspect privilege assignments and access right assignments, enumerate attack surfaces from the point of view of a sandboxed process, etc.
+- [**20**Star][2y] [C++] [mrexodia/ceautoattach](https://github.com/mrexodia/ceautoattach) Tool to automatically make Cheat Engine attach to a process via the command line.
+- [**20**Star][7y] [JS] [mozilla/mortar-layouts](https://github.com/mozilla/mortar-layouts) A small library for constructing app UIs with backbone.js.
+- [**20**Star][2y] [XSLT] [mozilla-services/shavar-plugin-blocklist](https://github.com/mozilla-services/shavar-plugin-blocklist)
+- [**20**Star][3y] [PS] [mortenschenk/babuska-dolls](https://github.com/mortenschenk/babuska-dolls)
+- [**20**Star][7d] [Py] [mntn0x/poc](https://github.com/mntn0x/poc) 一些漏洞检测/利用脚本
+- [**20**Star][5y] [Py] [mk-fg/nflog-zmq-pcap-pipe](https://github.com/mk-fg/nflog-zmq-pcap-pipe) Tool to collect nflog and pipe it to a pcap stream/file over network (0mq) for real-time (or close to) analysis
+- [**20**Star][9m] [misp/misp-compliance](https://github.com/misp/misp-compliance) Legal, procedural and policies document templates for operating MISP and information sharing communities
+- [**20**Star][5y] [Py] [milo2012/pentest_automation](https://github.com/milo2012/pentest_automation)
+- [**20**Star][9d] [HTML] [mfthomps/labtainers](https://github.com/mfthomps/labtainers) Labtainers: A Docker-based cyber lab framework
+- [**20**Star][4y] [Shell] [merces/scripts](https://github.com/merces/scripts) cuz life is scriptable...
+- [**20**Star][2y] [ActionScript] [mdsecactivebreach/cve-2018-4878](https://github.com/mdsecactivebreach/cve-2018-4878)
+- [**20**Star][2y] [PS] [mdsecactivebreach/angrypuppy](https://github.com/mdsecactivebreach/angrypuppy) Bloodhound Attack Path Automation in CobaltStrike
+- [**20**Star][2y] [mayter/sec-charts](https://github.com/mayter/sec-charts) 更新了更多的思维导图。
+- [**20**Star][1y] [Ruby] [martinvigo/ransombile](https://github.com/martinvigo/ransombile) Ransombile is a tool that can be used in different scenarios to compromise someone’s digital life when having physical access to a locked mobile device
+- [**20**Star][7m] [Py] [manhnho/brutality](https://github.com/manhnho/brutality) A fuzzer for any GET entries
+- [**20**Star][9m] [Py] [makinacorpus/spynner](https://github.com/makinacorpus/spynner) Programmatic web browsing module with AJAX support for Python
+- [**20**Star][7m] [C#] [lowleveldesign/diagnostics-tools](https://github.com/lowleveldesign/diagnostics-tools)
+- [**20**Star][3m] [C] [lnslbrty/potd](https://github.com/lnslbrty/potd) A high scalable low to medium interactive SSH/TCP honeypot using Linux Namespaces, capabilities, seccomp, cgroups designed for OpenWrt and IoT devices.
+- [**20**Star][2y] [PS] [linuz/powerhungry](https://github.com/linuz/powerhungry) Experimental PowerShell tools for Penetration Testing / Red Teaming
+- [**20**Star][2y] [JS] [lersh/potatostream](https://github.com/lersh/potatostream) Shadowsocks like Proxy,Written by nodejs
+- [**20**Star][1y] [Shell] [kyonli/asuswrt-v2ray](https://github.com/kyonli/asuswrt-v2ray) Transparent proxy based on V2Ray
+- [**20**Star][2y] [Go] [kudelskisecurity/go-manger-attack](https://github.com/kudelskisecurity/go-manger-attack) This is a toy implementation in Go of Manger's chosen-ciphertext attack on RSA-OAEP
+- [**20**Star][2y] [Py] [kudelskisecurity/cryptochallenge17](https://github.com/kudelskisecurity/cryptochallenge17) Kudelski Security's 2017 crypto challenge
+- [**20**Star][3y] [Ruby] [kingsabri/burp_suite_extension_ruby](https://github.com/kingsabri/burp_suite_extension_ruby) BurpSuite Extension Ruby Template to speed up building a Burp Extension using Ruby
+- [**20**Star][7y] [Py] [kevthehermit/yaramail](https://github.com/kevthehermit/yaramail) Yara Scanner For IMAP Feeds and saved Streams
+- [**20**Star][6m] [TeX] [kevateam/ctf-attack-defense](https://github.com/kevateam/ctf-attack-defense) Attack-defense platform
+- [**20**Star][2y] [Py] [kelwin/peda](https://github.com/kelwin/peda) PEDA - Python Exploit Development Assistance for GDB
+- [**20**Star][5y] [kdpryor/linuxvolprofiles](https://github.com/kdpryor/linuxvolprofiles) Volatility Linux Profiles
+- [**20**Star][3m] [Ruby] [karneades/defensomania](https://github.com/karneades/defensomania) Defensomania is a card game for security monitoring and incident response teams.
+- [**20**Star][9y] [Diff] [jrmuizel/kemufuzzer](https://github.com/jrmuizel/kemufuzzer) Automatically exported from code.google.com/p/kemufuzzer
+- [**20**Star][3m] [C++] [jovibor/libpe](https://github.com/jovibor/libpe) Library for tinkering with PE/PE+ binaries.
+- [**20**Star][3y] [C] [joswr1ght/asleap](https://github.com/joswr1ght/asleap) Asleap - Cisco LEAP and Generic MS-CHAPv2 Dictionary Attack
+- [**20**Star][9m] [Py] [jordisk/thehive2sigma](https://github.com/jordisk/thehive2sigma) Python script to automatically create sigma rules from The hive observables
+- [**20**Star][5y] [JS] [jonstewart/sifter](https://github.com/jonstewart/sifter) Indexed search and clustering tool for digital forensics
+- [**20**Star][4y] [C] [jonathanseals/ios-kexec-utils](https://github.com/jonathanseals/ios-kexec-utils) I'm taking a break, I swear
+- [**20**Star][3y] [johnnydep/cobaltstrike](https://github.com/johnnydep/cobaltstrike) cobalt strike stuff I have gathered from around github
+- [**20**Star][6m] [C++] [jnastarot/shibari](https://github.com/jnastarot/shibari) Library for linking multiple PE\PE + files to one
+- [**20**Star][1y] [Py] [jimmyastle/atomic-parser](https://github.com/jimmyastle/atomic-parser) Python parser for Red Canary's Atomic Red Team Yamls
+- [**20**Star][2y] [Py] [jidar/smith](https://github.com/jidar/smith) A client/server style agent meant for testing connectivity to and from a machine on a network.
+- [**20**Star][2y] [Py] [jiayunhan/opanalyzer](https://github.com/jiayunhan/opanalyzer) The unofficial release of the tool we used in the EuroS&P 2017 paper: Open Doors for Bob and Mallory: Open Port Usage in Android Apps and Security Implications.
+- [**20**Star][7y] [Py] [jeffbryner/kinectasploitv2](https://github.com/jeffbryner/kinectasploitv2) kinectasploitv2
+- [**20**Star][2y] [C] [izuolan/pshell](https://github.com/izuolan/pshell) ICMP/IP tunnel manager for Linux.
+- [**20**Star][1y] [ivan1ee/regasm_installutil_applockerbypass](https://github.com/ivan1ee/regasm_installutil_applockerbypass) AppLocker Bypass With Regasm/InstallUtil
+- [**20**Star][1y] [Java] [it-gorillaz/lnk2pwn](https://github.com/it-gorillaz/lnk2pwn) Malicious Shortcut(.lnk) Generator
+- [**20**Star][9m] [Makefile] [icing/h2fuzz](https://github.com/icing/h2fuzz) everyone can fuzz h2
+- [**20**Star][4y] [C] [iagox86/dnsmasq-fuzzing](https://github.com/iagox86/dnsmasq-fuzzing)
+- [**20**Star][8y] [hybrisdisaster/asphashdos](https://github.com/hybrisdisaster/asphashdos) ASP.NET HashDoS PoC Payload
+- [**20**Star][1y] [Py] [hyuunnn/ida_python_scripts](https://github.com/hyuunnn/ida_python_scripts) IDAPython scripts(No Documentation)
+ - [IDA_comment](https://github.com/hyuunnn/ida_python_scripts/blob/master/IDA_comment.py)
+ - [ida_function_rename](https://github.com/hyuunnn/ida_python_scripts/blob/master/ida_function_rename.py)
+ - [variable_finder](https://github.com/hyuunnn/ida_python_scripts/blob/master/variable_finder.py)
+ - [assembler_disassembler](https://github.com/hyuunnn/ida_python_scripts/blob/master/assembler_disassembler.py)
+ - [api_visualization](https://github.com/hyuunnn/ida_python_scripts/tree/master/api_visualization)
+ - [Decoder](https://github.com/hyuunnn/ida_python_scripts/tree/master/Decoder) Multiple malware decoders
+- [**20**Star][2y] [Py] [hrushikeshk/enum.py](https://github.com/hrushikeshk/enum.py) A tool to enumerate network services
+- [**20**Star][2y] [Py] [hexabin/apkstat](https://github.com/hexabin/apkstat) Automated Information Retrieval From APKs For Initial Analysis
+- [**20**Star][4m] [Ruby] [heroku/omniauth-heroku](https://github.com/heroku/omniauth-heroku) OmniAuth strategy for Heroku
+- [**20**Star][5y] [AutoIt] [habohitron/habohitron](https://github.com/habohitron/habohitron)
+- [**20**Star][5m] [Py] [guedou/flashre](https://github.com/guedou/flashre) tools to reverse the Toshiba FlashAir SD cards
+- [**20**Star][8m] [graylog2/graylog-guide-snort](https://github.com/graylog2/graylog-guide-snort) How to send structured Snort IDS alert logs into Graylog
+- [**20**Star][2y] [C] [gravity-postquantum/prune-horst](https://github.com/gravity-postquantum/prune-horst) Signature scheme submitted to NIST's Post-Quantum Cryptography Project
+- [**20**Star][2y] [Jupyter Notebook] [grananqvist/machine-learning-web-application-firewall-and-dataset](https://github.com/grananqvist/machine-learning-web-application-firewall-and-dataset)
+- [**20**Star][1y] [Py] [gosecure/gophish-cli](https://github.com/gosecure/gophish-cli) Gophish Python cli to perform huge phishing campaigns
+- [**20**Star][5m] [Py] [gilks/enumerid](https://github.com/gilks/enumerid) Enumerate RIDs using pure Python
+- [**20**Star][9m] [Rust] [gamozolabs/slime_tree](https://github.com/gamozolabs/slime_tree) Worst Android kernel fuzzer
+- [**20**Star][2y] [C++] [ez8-co/ezpp](https://github.com/ez8-co/ezpp)
+- [**20**Star][16d] [extremecoders-re/re-list](https://github.com/extremecoders-re/re-list) A list of open source reverse engineering tools with a focus on binary analysis
+- [**20**Star][3y] [C] [exploit-install/thefatrat](https://github.com/exploit-install/thefatrat) An easy tool to generate backdoor with msfvenom (a part from metasploit framework). This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software protection
+- [**20**Star][2y] [Py] [euniceylee/waves](https://github.com/euniceylee/waves) raspberry pi project that visualizes sound waves
+- [**20**Star][2y] [Py] [erpscanteam/cve-2018-2636](https://github.com/erpscanteam/cve-2018-2636) ERPScan Public POC for CVE-2018-2636
+- [**20**Star][11m] [WebAssembly] [eosessentials/eos-proxy-token](https://github.com/eosessentials/eos-proxy-token) Proxy token to allow mitigating EOSIO Ram exploit
+- [**20**Star][14d] [Ruby] [envato/unwrappr](https://github.com/envato/unwrappr)
+- [**20**Star][9m] [Py] [enigmatos/fuzzlon](https://github.com/enigmatos/fuzzlon) 802.15.4 Fuzzer
+- [**20**Star][4m] [C] [en14c/erebus](https://github.com/en14c/erebus) Poc for ELF64 runtime infection via GOT poisoning technique by elfmaster
+- [**20**Star][2y] [Py] [embedi/dji-ws-tools](https://github.com/embedi/dji-ws-tools) DJI Assistant 2 web socket server exploitation tools
+- [**20**Star][1y] [Py] [ekultek/strutter](https://github.com/ekultek/strutter) Proof of Concept for CVE-2018-11776
+- [**20**Star][1m] [edwardqiu/awesome-infosec](https://github.com/edwardqiu/awesome-infosec) A curated list of awesome infosec blog posts, courses, books and more!
+- [**20**Star][3y] [TeX] [edelahozuah/awesome-tls-security](https://github.com/edelahozuah/awesome-tls-security) A collection of (not-so, yet) awesome resources related to TLS, PKI and related stuff
+- [**20**Star][10m] [eddietcc/cvenotes](https://github.com/eddietcc/cvenotes)
+- [**20**Star][1y] [C] [downwithup/cve-2018-16712](https://github.com/downwithup/cve-2018-16712) PoC Code for CVE-2018-16712 (exploit by MmMapIoSpace)
+- [**20**Star][3y] [C++] [dinamsky/malware-botnets](https://github.com/dinamsky/malware-botnets)
+- [**20**Star][5y] [Py] [digitalbond/ibal](https://github.com/digitalbond/ibal) IDA Pro Bootrom Analysis Library, which contains a number of useful functions for analyzing embedded ROMs
+- [**20**Star][9m] [Java] [delicioushorse/writeups](https://github.com/delicioushorse/writeups)
+- [**20**Star][2y] [deepwn/dn2.io](https://github.com/deepwn/dn2.io) [ Domain Name to I/O ] Development DNS & Security Data Transportation & Pentesting with SCA and Steganography.
+- [**20**Star][5m] [Py] [dearbytes/opensource-endpoint-monitoring](https://github.com/dearbytes/opensource-endpoint-monitoring) This repository contains all the config files and scripts used for our Open Source Endpoint monitoring project.
+- [**20**Star][7y] [Ruby] [darkoperator/nessus-bridge-for-metasploit](https://github.com/darkoperator/nessus-bridge-for-metasploit) nessus plugin for metasploit to connect to a nessus server
+- [**20**Star][3y] [Py] [danilabs/rexploit](https://github.com/danilabs/rexploit) RExploit (Router Exploitation) is a tool that search exploits for any router SOHO. It is written on Python and QT.
+- [**20**Star][1y] [Py] [danielhenrymantilla/shellcode-factory](https://github.com/danielhenrymantilla/shellcode-factory) Tool to create and test shellcodes from custom assembly sources (with some encoding options)
+- [**20**Star][2y] [PS] [danielbohannon/devsec-defense](https://github.com/danielbohannon/devsec-defense) Accompanying PowerShell Modules for DevSec Defense Presentation
+- [**20**Star][3y] [C#] [damonmohammadbagher/fakefilemaker](https://github.com/damonmohammadbagher/fakefilemaker) Social Engineering: Simple way to make a fake file for Backdoors
+- [**20**Star][6y] [Py] [d4rkcat/stackflow](https://github.com/d4rkcat/stackflow) Universal stack-based buffer overfow exploitation tool
+- [**20**Star][1y] [C++] [d00rt/hijacked_lokibot_version](https://github.com/d00rt/hijacked_lokibot_version)
+- [**20**Star][2y] [Py] [czardoz/hornet](https://github.com/czardoz/hornet) SSH Multipot
+- [**20**Star][10m] [HTML] [cymmetria/honeycomb_plugins](https://github.com/cymmetria/honeycomb_plugins) The plugin repository for Honeycomb, the honeypot framework by Cymmetria
+- [**20**Star][3y] [Py] [cyberclues/rtf_exploit_extractor](https://github.com/cyberclues/rtf_exploit_extractor) Script to extract malicious payload and decoy document from CVE-2015-1641 exploit documents
+- [**20**Star][3y] [JS] [ctf-thanos/ctf-writeups](https://github.com/ctf-thanos/ctf-writeups) A writeup summary for CTF problems.
+- [**20**Star][7m] [Java] [cryptomator/siv-mode](https://github.com/cryptomator/siv-mode) RFC 5297 SIV mode of operation in Java
+- [**20**Star][11m] [HTML] [cryptolok/epmg](https://github.com/cryptolok/epmg) EPMG:跨平台、最安全、“不存储密码(storageless)”的密码管理器
+- [**20**Star][3d] [Java] [cronn-de/ssh-proxy](https://github.com/cronn-de/ssh-proxy) Pure Java implementation for SSH port tunneling that understands ProxyJump and ProxyCommand
+- [**20**Star][6m] [Shell] [corb3nik/pwnbox](https://github.com/corb3nik/pwnbox) A VM for RE and Pwn
+- [**20**Star][2y] [JS] [codedotjs/twifo-cli](https://github.com/codedotjs/twifo-cli)
+- [**20**Star][16d] [HTML] [cloudfoundry-incubator/haproxy-boshrelease](https://github.com/cloudfoundry-incubator/haproxy-boshrelease) A BOSH release for haproxy (based on cf-release's haproxy job)
+- [**20**Star][6m] [Batchfile] [cldrn/insecureprogrammingdb](https://github.com/cldrn/insecureprogrammingdb) Insecure programming functions database
+- [**20**Star][2y] [Py] [chrisjd20/cve-2017-9805.py](https://github.com/chrisjd20/cve-2017-9805.py) Better Exploit Code For CVE 2017 9805 apache struts
+- [**20**Star][1y] [Py] [cbrnrd/netsploit](https://github.com/cbrnrd/netsploit)
+- [**20**Star][5y] [Py] [catalyst256/watcher](https://github.com/catalyst256/watcher) Maltego with a twist of wireless
+- [**20**Star][3y] [Go] [c1982/ripego](https://github.com/c1982/ripego) IP Whois Golang Package
+- [**20**Star][2m] [Py] [brianlam38/sec-cheatsheets](https://github.com/brianlam38/sec-cheatsheets) Cheatsheets on security vulnerabilities and exploits.
+- [**20**Star][3y] [C] [bnagy/osx-afl-llvm](https://github.com/bnagy/osx-afl-llvm) Barely working LLVM mode for AFL on OSX
+- [**20**Star][11m] [C] [blacchat/rkorova](https://github.com/blacchat/rkorova) ld_preload userland rootkit
+- [**20**Star][2y] [C] [bisoon/ps4-api-server](https://github.com/bisoon/ps4-api-server) PS4API server to handle client request for read/write to game memory
+- [**20**Star][1m] [Go] [binject/shellcode](https://github.com/binject/shellcode) Shellcode library as a Go package
+- [**20**Star][5m] [C++] [arsunt/tr2main](https://github.com/arsunt/tr2main) Tomb Raider II Injector Dynamic Library
+- [**20**Star][3y] [Py] [arinkverma/google-foobar](https://github.com/arinkverma/google-foobar) Read about google foobar at HackerNews
+- [**20**Star][20d] [Smali] [aress31/sci](https://github.com/aress31/sci) Framework designed to automate the process of assembly code injection (trojanising) within Android applications.
+- [**20**Star][2y] [Py] [arbazkiraak/hackbot](https://github.com/arbazkiraak/hackbot) Telegram Bot (Initial Development)
+- [**20**Star][3y] [C++] [apriorit/antirootkit-anti-splicer](https://github.com/apriorit/antirootkit-anti-splicer) The project is a demo solution for one of the anti-rootkit techniques aimed on overcoming splicers
+- [**20**Star][6y] [C++] [antirootkit/bdarkit](https://github.com/antirootkit/bdarkit) just an lite AntiRootkit for interesting
+- [**20**Star][5y] [C] [android-rooting-tools/libmsm_vfe_read_exploit](https://github.com/android-rooting-tools/libmsm_vfe_read_exploit) CVE-2014-4321 exploit
+- [**20**Star][3y] [C++] [andrewgaspar/km-stl](https://github.com/andrewgaspar/km-stl) A drop-in replacement for the C++ STL for kernel mode Windows drivers. The goal is to have implementations for things like the standard algorithms that don't require memory allocations or exceptions, and for implementations of type traits and other compile-time related headers. Full implementation of the STL is a non-goal.
+- [**20**Star][7y] [PHP] [amitnaik/php-backdoor](https://github.com/amitnaik/php-backdoor) This is php backdoor hack to access directory, access to mysql, access to execute shell command
+- [**20**Star][1m] [JS] [alcideio/pipeline](https://github.com/alcideio/pipeline) Alcide Kubernetes Advisor ... Cluster Hygiene & Security Scanner - Pipeline Integration
+- [**20**Star][3y] [C] [a232319779/phantom-3-standard](https://github.com/a232319779/phantom-3-standard) Used hackrf one to sniffer nrf24l0 and so on wireless packet.Application in PHANTOM 3 STANDARD RC signal sniffer.
+- [**20**Star][3y] [Py] [73696e65/ctf-notes](https://github.com/73696e65/ctf-notes)
+- [**20**Star][2y] [Py] [649/netscraped-exploit](https://github.com/649/netscraped-exploit) Framework for obtaining all the credentials stored in vulnerable Netwave IP cameras. Can be used to break into IP cameras, use for research only.
+- [**20**Star][2y] [HTML] [649/chrome-sandbox-exploit](https://github.com/649/chrome-sandbox-exploit) [Patched] Sandbox escape Chrome exploit. Allows the execution of local binaries, read/write functions and exfiltration of Chrome OAuth tokens to remote server. More info:
+- [**20**Star][4y] [Py] [0x90/wifuzz](https://github.com/0x90/wifuzz) Automatically exported from code.google.com/p/wifuzz
+- [**20**Star][3y] [Go] [0x4445565a/portanoia](https://github.com/0x4445565a/portanoia) A tool that sets a honeypot port and runs a command against every IP that connects to it.
+- [**20**Star][7d] [Py] [0x25/useful](https://github.com/0x25/useful) useful pentest note
\ No newline at end of file